[Thu Jul 30 08:32:09.172725 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: use Min UID 1000
[Thu Jul 30 08:32:09.172785 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: version 1.0-39. LVE mechanism enabled
[Thu Jul 30 08:32:09.172790 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: found apr extention version 3
[Thu Jul 30 08:32:09.172800 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
[Thu Jul 30 08:32:09.177922 2026] [lsapi:notice] [pid 2274919:tid 2274919] mod_lsapi:  version 1.1-96 with CRIU support
[Thu Jul 30 08:32:09.181162 2026] [:notice] [pid 2410982:tid 2410982] [host nativespace-pandora.ns-pandora.com] mod_lsapi:  Selfstarter 2410982 started
[Thu Jul 30 08:32:09.204776 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: craft-buddies.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.232112 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: jonathanhill.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.237422 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: development.horus-wellbeing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.240578 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: simplychange.robwalsh.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.271470 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: wartypig.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.272366 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: lucynaden.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.281516 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: sharonduggal.sharonduggal.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.314064 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: vain.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.314901 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: sewyork.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.315731 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: p2studio.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.316670 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: yorkfabricshop.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.317575 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: yorkguitarworkshop.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.318452 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: karenthomasjewellery.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.320326 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: codeworks.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.321233 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: codeworksuk.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.322147 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: thewhitefamily.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.323016 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: thewhitefamily.uk.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.349200 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: render-farm.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.350152 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: 4k-monitors.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.351062 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: renderserver.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.351988 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: 3dworkstation.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.352912 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: highbrightness.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.357244 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: highbrightnesscom.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.379275 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: evtech.ltd.jd-media.tv:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.394638 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: risergrating.grpgratingsystems.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.395422 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: minimeshgrating.grpgratingsystems.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.408076 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: europla.fireworkswedding.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.408947 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: pyromusical.fireworkswedding.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.409756 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: fireworkssolihull.fireworkswedding.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.420138 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: ditchlingfair.ditchfest.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.450453 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: thecameramonkey.broken-paradox.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.451425 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: disturbancephotography.broken-paradox.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.492490 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: strategem-ireland.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.505979 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: sharonduggal.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.585406 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: grpgratingsystems.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.600334 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: equinoxkombucha.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.620118 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: clucasdesign.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.651100 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: adamdix.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 08:32:09.671198 2026] [mpm_prefork:notice] [pid 2274919:tid 2274919] AH00163: Apache/2.4.68 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations
[Thu Jul 30 08:32:09.671243 2026] [core:notice] [pid 2274919:tid 2274919] AH00094: Command line: '/usr/sbin/httpd'
[Thu Jul 30 08:32:10.570893 2026] [core:error] [pid 2411001:tid 2411001] (13)Permission denied: [client 216.73.216.199:35758] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCPv6/objs_per_slab
[Thu Jul 30 08:32:10.724910 2026] [security2:error] [pid 2410998:tid 2410998] [client 188.163.14.59:58684] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr9-mbO7Ve-VHuiZF2Y6gAAABU"]
[Thu Jul 30 08:32:10.724967 2026] [security2:error] [pid 2410998:tid 2410998] [client 188.163.14.59:58684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr9-mbO7Ve-VHuiZF2Y6gAAABU"]
[Thu Jul 30 08:32:10.725265 2026] [security2:error] [pid 2410998:tid 2410998] [client 188.163.14.59:58684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr9-mbO7Ve-VHuiZF2Y6gAAABU"]
[Thu Jul 30 08:32:11.305140 2026] [ssl:error] [pid 2411001:tid 2411001] (70014)End of file found: [client 216.73.216.199:35758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:11.376323 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/pucci.php
[Thu Jul 30 08:32:12.111914 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/xwpg.php
[Thu Jul 30 08:32:12.758409 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ops.php
[Thu Jul 30 08:32:13.405202 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 08:32:13.781556 2026] [ssl:error] [pid 2411106:tid 2411106] (EAI 2)Name or service not known: [client 144.76.19.72:48850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:13.781609 2026] [ssl:error] [pid 2411106:tid 2411106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:14.041819 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/mac.php
[Thu Jul 30 08:32:15.277728 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 08:32:15.914446 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/xyn.php
[Thu Jul 30 08:32:16.539985 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-wp.php
[Thu Jul 30 08:32:17.179392 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/aw.php
[Thu Jul 30 08:32:17.826417 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 08:32:18.464087 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/yawa.php
[Thu Jul 30 08:32:19.123250 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/sym403.php
[Thu Jul 30 08:32:19.965934 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/adminner.php
[Thu Jul 30 08:32:20.355885 2026] [access_compat:error] [pid 2411000:tid 2411000] [client 20.104.16.169:48290] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/8573.php
[Thu Jul 30 08:32:20.356274 2026] [core:error] [pid 2411000:tid 2411000] [client 20.104.16.169:48290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:20.746515 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/yup.php
[Thu Jul 30 08:32:21.008902 2026] [security2:error] [pid 2410999:tid 2410999] [client 47.128.98.69:18844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amr-BcVDgdzdvTL2t3XxcQAAAB0"]
[Thu Jul 30 08:32:21.389794 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/config.json.php
[Thu Jul 30 08:32:22.149960 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/block-bindings/pattern-overrides.php
[Thu Jul 30 08:32:22.149998 2026] [authz_core:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01630: client denied by server configuration: /home/thepryor/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 08:32:22.150014 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/block-bindings/term-data.php
[Thu Jul 30 08:32:22.150027 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/block-bindings/post-data.php
[Thu Jul 30 08:32:22.150040 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/block-bindings/post-meta.php
[Thu Jul 30 08:32:22.235126 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/2.php
[Thu Jul 30 08:32:22.742718 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/2.php
[Thu Jul 30 08:32:22.744908 2026] [core:error] [pid 2411264:tid 2411264] (13)Permission denied: [client 216.73.216.199:41403] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_conntrack/sections/__mcount_loc
[Thu Jul 30 08:32:23.141940 2026] [ssl:error] [pid 2411314:tid 2411314] (EAI 2)Name or service not known: [client 144.76.19.72:44644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:23.141979 2026] [ssl:error] [pid 2411314:tid 2411314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:23.490038 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/f35.update.php
[Thu Jul 30 08:32:23.649155 2026] [ssl:error] [pid 2411264:tid 2411264] (70014)End of file found: [client 216.73.216.199:41403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:23.949402 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:1946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:24.130491 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 08:32:24.679085 2026] [core:error] [pid 2411371:tid 2411371] [client 66.249.66.167:42096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:24.679122 2026] [core:error] [pid 2411371:tid 2411371] [client 66.249.66.167:42096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:24.681654 2026] [core:error] [pid 2411372:tid 2411372] [client 66.249.66.168:63000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:24.681690 2026] [core:error] [pid 2411372:tid 2411372] [client 66.249.66.168:63000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:24.861993 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/spadex.php
[Thu Jul 30 08:32:25.109121 2026] [lsapi:error] [pid 2411368:tid 2411368] [client 217.165.124.222:0] [host revoracing.org.uk] Request retrieving failed. Reason: unknown, On: request body, Source: client, Where: unknown
[Thu Jul 30 08:32:25.109158 2026] [lsapi:error] [pid 2411368:tid 2411368] [client 217.165.124.222:0] [host revoracing.org.uk] In order to get more info about fail reason try to change LogLevel to Info in httpd.conf and restart Apache
[Thu Jul 30 08:32:25.109166 2026] [lsapi:error] [pid 2411368:tid 2411368] [client 217.165.124.222:0] [host revoracing.org.uk] Client error on sending request(POST /xmlrpc.php HTTP/1.1); uri(/xmlrpc.php) content-length(712): user_get_body(tmpstackbuf, 16384): read from client failed
[Thu Jul 30 08:32:25.145497 2026] [authz_core:error] [pid 2411373:tid 2411373] [client 57.141.0.13:53936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:25.146168 2026] [authz_core:error] [pid 2411373:tid 2411373] [client 57.141.0.13:53936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:25.228619 2026] [authz_core:error] [pid 2411128:tid 2411128] [client 57.141.0.24:57650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:25.229251 2026] [authz_core:error] [pid 2411128:tid 2411128] [client 57.141.0.24:57650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:25.516831 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/mg.php
[Thu Jul 30 08:32:25.856398 2026] [authz_core:error] [pid 2411128:tid 2411128] [client 57.141.0.23:41604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:25.857015 2026] [authz_core:error] [pid 2411128:tid 2411128] [client 57.141.0.23:41604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:25.944363 2026] [core:error] [pid 2411128:tid 2411128] [client 20.104.16.169:65444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:25.944384 2026] [core:error] [pid 2411128:tid 2411128] [client 20.104.16.169:65444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:26.278219 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/fnstall.php
[Thu Jul 30 08:32:26.379052 2026] [ssl:error] [pid 2411369:tid 2411369] (70014)End of file found: [client 216.73.216.199:62518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:26.929611 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ortasekerli1.php
[Thu Jul 30 08:32:27.185938 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:46144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:27.185994 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:27.267119 2026] [core:error] [pid 2411293:tid 2411293] [client 66.249.66.45:63866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:27.267141 2026] [core:error] [pid 2411293:tid 2411293] [client 66.249.66.45:63866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:27.306944 2026] [authz_core:error] [pid 2411420:tid 2411420] [client 57.141.0.50:56830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:27.307574 2026] [authz_core:error] [pid 2411420:tid 2411420] [client 57.141.0.50:56830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:27.441348 2026] [cgi:error] [pid 2411415:tid 2411415] [client 35.199.181.150:47698] AH02812: stderr from /home/pstudioc/public_html/yorkguitarworkshop.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:32:27.574528 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/sump1.php
[Thu Jul 30 08:32:27.626292 2026] [security2:error] [pid 2411411:tid 2411411] [client 169.150.201.35:55353] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstraining.com"] [uri "/sftp-config.json"] [unique_id "amr-C5E4hd1gvYlgX6WzeAAAACQ"]
[Thu Jul 30 08:32:27.626483 2026] [security2:error] [pid 2411411:tid 2411411] [client 169.150.201.35:55353] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstraining.com"] [uri "/sftp-config.json"] [unique_id "amr-C5E4hd1gvYlgX6WzeAAAACQ"]
[Thu Jul 30 08:32:27.841589 2026] [ssl:error] [pid 2411414:tid 2411414] (EAI 2)Name or service not known: [client 144.76.19.72:46158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:27.841617 2026] [ssl:error] [pid 2411414:tid 2411414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:28.348676 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ops.php
[Thu Jul 30 08:32:28.363687 2026] [access_compat:error] [pid 2411408:tid 2411408] [client 106.215.157.145:23897] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:32:28.815128 2026] [lsapi:warn] [pid 2411415:tid 2411415] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:32:29.379407 2026] [ssl:error] [pid 2411413:tid 2411413] (70014)End of file found: [client 216.73.216.199:51571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:29.676511 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-post-data.php
[Thu Jul 30 08:32:29.697227 2026] [security2:error] [pid 2411411:tid 2411411] [client 169.150.201.35:55353] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amr-C5E4hd1gvYlgX6WzeAAAACQ"]
[Thu Jul 30 08:32:29.767841 2026] [authz_core:error] [pid 2411417:tid 2411417] [client 57.141.0.52:60790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:29.768470 2026] [authz_core:error] [pid 2411417:tid 2411417] [client 57.141.0.52:60790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:29.853949 2026] [security2:error] [pid 2411417:tid 2411417] [client 169.150.201.35:56999] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstraining.com"] [uri "/sftp-config.json"] [unique_id "amr-DdRH0BKfuOPG3wTKMwAAACs"]
[Thu Jul 30 08:32:29.854151 2026] [security2:error] [pid 2411417:tid 2411417] [client 169.150.201.35:56999] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstraining.com"] [uri "/sftp-config.json"] [unique_id "amr-DdRH0BKfuOPG3wTKMwAAACs"]
[Thu Jul 30 08:32:29.889766 2026] [access_compat:error] [pid 2411405:tid 2411405] [client 20.104.16.169:48283] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/classwithtostring.php
[Thu Jul 30 08:32:29.890113 2026] [core:error] [pid 2411405:tid 2411405] [client 20.104.16.169:48283] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:29.988297 2026] [ssl:error] [pid 2411049:tid 2411049] (70014)End of file found: [client 216.73.216.199:53744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:30.402405 2026] [cgi:error] [pid 2411586:tid 2411586] [client 136.65.23.210:43348] AH02812: stderr from /home/healthki/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://kinesiologylondon.co.uk/cgi-bin
[Thu Jul 30 08:32:30.475829 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/root.php
[Thu Jul 30 08:32:30.749210 2026] [security2:error] [pid 2411417:tid 2411417] [client 169.150.201.35:56999] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amr-DdRH0BKfuOPG3wTKMwAAACs"]
[Thu Jul 30 08:32:30.897579 2026] [ssl:error] [pid 2411317:tid 2411317] (EAI 2)Name or service not known: [client 144.76.19.72:29548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:30.897610 2026] [ssl:error] [pid 2411317:tid 2411317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:30.950974 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:29562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:30.951002 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:31.228144 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/v543.php
[Thu Jul 30 08:32:31.509926 2026] [access_compat:error] [pid 2411170:tid 2411170] [client 20.104.16.169:59411] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ohct.php
[Thu Jul 30 08:32:31.510296 2026] [core:error] [pid 2411170:tid 2411170] [client 20.104.16.169:59411] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:31.993554 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/sixxis.php
[Thu Jul 30 08:32:32.397331 2026] [ssl:error] [pid 2411415:tid 2411415] (70014)End of file found: [client 216.73.216.199:50417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:32.789277 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ip.php
[Thu Jul 30 08:32:33.313257 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ip.php
[Thu Jul 30 08:32:33.705511 2026] [access_compat:error] [pid 2411294:tid 2411294] [client 20.104.16.169:60797] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bless.php
[Thu Jul 30 08:32:33.705891 2026] [core:error] [pid 2411294:tid 2411294] [client 20.104.16.169:60797] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:34.023790 2026] [ssl:error] [pid 2410998:tid 2410998] (EAI 2)Name or service not known: [client 144.76.19.72:29572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:34.023831 2026] [ssl:error] [pid 2410998:tid 2410998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:34.057619 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/kq1.php
[Thu Jul 30 08:32:34.077828 2026] [ssl:error] [pid 2411002:tid 2411002] (EAI 2)Name or service not known: [client 144.76.19.72:29582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:34.077854 2026] [ssl:error] [pid 2411002:tid 2411002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:34.306574 2026] [access_compat:error] [pid 2411614:tid 2411614] [client 106.215.157.145:24931] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:32:34.517723 2026] [authz_core:error] [pid 2411294:tid 2411294] [client 57.141.0.70:42730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:34.518344 2026] [authz_core:error] [pid 2411294:tid 2411294] [client 57.141.0.70:42730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:35.478223 2026] [authz_core:error] [pid 2411372:tid 2411372] [client 57.141.0.50:20778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:35.478891 2026] [authz_core:error] [pid 2411372:tid 2411372] [client 57.141.0.50:20778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:35.735472 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/h02ugyh.php
[Thu Jul 30 08:32:36.016237 2026] [ssl:error] [pid 2411538:tid 2411538] (70014)End of file found: [client 216.73.216.199:56268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:36.181323 2026] [core:error] [pid 2411106:tid 2411106] [client 20.104.16.169:48288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:36.181350 2026] [core:error] [pid 2411106:tid 2411106] [client 20.104.16.169:48288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:36.313462 2026] [ssl:error] [pid 2411366:tid 2411366] (70014)End of file found: [client 216.73.216.199:15299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:36.485573 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-temp.php
[Thu Jul 30 08:32:37.134349 2026] [ssl:error] [pid 2411411:tid 2411411] (EAI 2)Name or service not known: [client 144.76.19.72:29588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:37.134386 2026] [ssl:error] [pid 2411411:tid 2411411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:37.203631 2026] [ssl:error] [pid 2411613:tid 2411613] (EAI 2)Name or service not known: [client 144.76.19.72:29598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:37.203666 2026] [ssl:error] [pid 2411613:tid 2411613] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:37.239491 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/cong.php
[Thu Jul 30 08:32:37.713594 2026] [core:error] [pid 2411373:tid 2411373] (13)Permission denied: [client 216.73.216.199:7629] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/flags
[Thu Jul 30 08:32:37.752185 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/cong.php
[Thu Jul 30 08:32:37.893433 2026] [security2:error] [pid 2410998:tid 2410998] [client 94.154.43.185:19930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "retrodisco.co.uk"] [uri "/.env"] [unique_id "amr-FWbO7Ve-VHuiZF2Y9AAAABU"]
[Thu Jul 30 08:32:37.893630 2026] [security2:error] [pid 2410998:tid 2410998] [client 94.154.43.185:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "retrodisco.co.uk"] [uri "/.env"] [unique_id "amr-FWbO7Ve-VHuiZF2Y9AAAABU"]
[Thu Jul 30 08:32:38.065926 2026] [security2:error] [pid 2411413:tid 2411413] [client 54.38.147.118:32626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/robots.txt"] [unique_id "amr-Fnfjr3JV1iQKHMojBAAAACY"]
[Thu Jul 30 08:32:38.123869 2026] [ssl:error] [pid 2411373:tid 2411373] (70014)End of file found: [client 216.73.216.199:7629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:38.373250 2026] [lsapi:warn] [pid 2411314:tid 2411314] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:32:38.993315 2026] [core:error] [pid 2411316:tid 2411316] [client 20.104.16.169:60785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:38.993352 2026] [core:error] [pid 2411316:tid 2411316] [client 20.104.16.169:60785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:39.304617 2026] [security2:error] [pid 2410998:tid 2410998] [client 94.154.43.185:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "retrodisco.co.uk"] [uri "/index.php"] [unique_id "amr-FWbO7Ve-VHuiZF2Y9AAAABU"]
[Thu Jul 30 08:32:39.457758 2026] [security2:error] [pid 2411417:tid 2411417] [client 198.244.226.214:17562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/omt-vinyl-200-2/"] [unique_id "amr-F9RH0BKfuOPG3wTKNwAAACs"]
[Thu Jul 30 08:32:39.473883 2026] [security2:error] [pid 2411075:tid 2411075] [client 94.154.43.177:57818] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.retrodisco.co.uk"] [uri "/.env"] [unique_id "amr-F6MQ5X2C9gyDd1iUWgAAAAI"]
[Thu Jul 30 08:32:39.474079 2026] [security2:error] [pid 2411075:tid 2411075] [client 94.154.43.177:57818] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.retrodisco.co.uk"] [uri "/.env"] [unique_id "amr-F6MQ5X2C9gyDd1iUWgAAAAI"]
[Thu Jul 30 08:32:40.258943 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:57388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:40.258980 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:40.312517 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:57400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:40.312546 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:40.372112 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/jj.php
[Thu Jul 30 08:32:40.734488 2026] [authz_core:error] [pid 2411613:tid 2411613] [client 57.141.0.21:44030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:40.735117 2026] [authz_core:error] [pid 2411613:tid 2411613] [client 57.141.0.21:44030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:40.797590 2026] [access_compat:error] [pid 2411419:tid 2411419] [client 20.104.16.169:48284] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ta0ol.php
[Thu Jul 30 08:32:40.797921 2026] [core:error] [pid 2411419:tid 2411419] [client 20.104.16.169:48284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:40.807252 2026] [security2:error] [pid 2411075:tid 2411075] [client 94.154.43.177:57818] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.retrodisco.co.uk"] [uri "/index.php"] [unique_id "amr-F6MQ5X2C9gyDd1iUWgAAAAI"]
[Thu Jul 30 08:32:41.032787 2026] [access_compat:error] [pid 2410998:tid 2410998] [client 106.215.157.145:6844] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:32:41.128908 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/class-walker-footer-dev.php
[Thu Jul 30 08:32:41.431237 2026] [ssl:error] [pid 2411128:tid 2411128] (70014)End of file found: [client 216.73.216.199:40229] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:41.844945 2026] [authz_core:error] [pid 2411000:tid 2411000] [client 57.141.0.14:37548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:41.845571 2026] [authz_core:error] [pid 2411000:tid 2411000] [client 57.141.0.14:37548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:42.299274 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/xpwer1.php
[Thu Jul 30 08:32:42.938463 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/flox.php
[Thu Jul 30 08:32:43.368301 2026] [ssl:error] [pid 2411406:tid 2411406] (EAI 2)Name or service not known: [client 144.76.19.72:57412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:43.368334 2026] [ssl:error] [pid 2411406:tid 2411406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:43.422856 2026] [ssl:error] [pid 2411317:tid 2411317] (EAI 2)Name or service not known: [client 144.76.19.72:57424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:43.422883 2026] [ssl:error] [pid 2411317:tid 2411317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:43.703355 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/popo.php
[Thu Jul 30 08:32:44.469759 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/yas.php
[Thu Jul 30 08:32:44.706101 2026] [access_compat:error] [pid 2411000:tid 2411000] [client 106.215.157.145:20302] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:32:44.771278 2026] [authz_core:error] [pid 2411369:tid 2411369] [client 57.141.0.47:52406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:44.771936 2026] [authz_core:error] [pid 2411369:tid 2411369] [client 57.141.0.47:52406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:45.445415 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/water.php
[Thu Jul 30 08:32:45.809641 2026] [authz_core:error] [pid 2411416:tid 2411416] [client 57.141.0.8:39718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:45.810266 2026] [authz_core:error] [pid 2411416:tid 2411416] [client 57.141.0.8:39718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:45.946488 2026] [core:error] [pid 2411613:tid 2411613] (13)Permission denied: [client 216.73.216.199:38460] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf-frags/min_partial
[Thu Jul 30 08:32:46.273311 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/nano.php
[Thu Jul 30 08:32:46.481734 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:57430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:46.481760 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:46.538926 2026] [ssl:error] [pid 2411412:tid 2411412] (EAI 2)Name or service not known: [client 144.76.19.72:57446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:46.538960 2026] [ssl:error] [pid 2411412:tid 2411412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:46.689323 2026] [security2:error] [pid 2411416:tid 2411416] [client 43.157.156.190:55224] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "edwardkensington.com"] [uri "/"] [unique_id "amr-HpOP9e_1H840t9Gb-wAAACk"]
[Thu Jul 30 08:32:46.692053 2026] [core:crit] [pid 2411416:tid 2411416] (13)Permission denied: [client 43.157.156.190:55224] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 08:32:46.908536 2026] [core:error] [pid 2411417:tid 2411417] [client 20.104.16.169:48273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:46.908573 2026] [core:error] [pid 2411417:tid 2411417] [client 20.104.16.169:48273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:46.960677 2026] [core:error] [pid 2411243:tid 2411243] [client 66.249.64.172:64960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:46.960704 2026] [core:error] [pid 2411243:tid 2411243] [client 66.249.64.172:64960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:47.025980 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/moon.php
[Thu Jul 30 08:32:47.739865 2026] [authz_core:error] [pid 2411243:tid 2411243] [client 57.141.0.51:45880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:47.740484 2026] [authz_core:error] [pid 2411243:tid 2411243] [client 57.141.0.51:45880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:47.802179 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-info.php
[Thu Jul 30 08:32:48.194136 2026] [authz_core:error] [pid 2411317:tid 2411317] [client 57.141.0.31:57778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:48.194782 2026] [authz_core:error] [pid 2411317:tid 2411317] [client 57.141.0.31:57778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:48.356306 2026] [ssl:error] [pid 2411613:tid 2411613] (70014)End of file found: [client 216.73.216.199:38460] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:48.574281 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/file5.php
[Thu Jul 30 08:32:48.965179 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:61352] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/aliases
[Thu Jul 30 08:32:49.121954 2026] [lsapi:warn] [pid 2411410:tid 2411410] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:32:49.336273 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/2000.php
[Thu Jul 30 08:32:49.592613 2026] [ssl:error] [pid 2411538:tid 2411538] (EAI 2)Name or service not known: [client 144.76.19.72:51634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:49.592647 2026] [ssl:error] [pid 2411538:tid 2411538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:49.647725 2026] [ssl:error] [pid 2411585:tid 2411585] (EAI 2)Name or service not known: [client 144.76.19.72:51650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:49.647759 2026] [ssl:error] [pid 2411585:tid 2411585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:49.986796 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/122.php
[Thu Jul 30 08:32:50.501548 2026] [authz_core:error] [pid 2411370:tid 2411370] [client 57.141.0.40:24586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:50.502214 2026] [authz_core:error] [pid 2411370:tid 2411370] [client 57.141.0.40:24586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:50.539955 2026] [access_compat:error] [pid 2411410:tid 2411410] [client 45.158.164.139:45006] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:32:51.063329 2026] [ssl:error] [pid 2411412:tid 2411412] (70014)End of file found: [client 216.73.216.199:8559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:51.111183 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/mds.php
[Thu Jul 30 08:32:51.365571 2026] [access_compat:error] [pid 2411585:tid 2411585] [client 106.215.157.145:10873] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:32:51.665276 2026] [ssl:error] [pid 2411415:tid 2411415] (70014)End of file found: [client 216.73.216.199:61352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:52.066393 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/zc-208.php
[Thu Jul 30 08:32:52.213831 2026] [access_compat:error] [pid 2411000:tid 2411000] [client 20.104.16.169:60775] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-class.php
[Thu Jul 30 08:32:52.214199 2026] [core:error] [pid 2411000:tid 2411000] [client 20.104.16.169:60775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:52.703111 2026] [ssl:error] [pid 2410998:tid 2410998] (EAI 2)Name or service not known: [client 144.76.19.72:51656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:52.703142 2026] [ssl:error] [pid 2410998:tid 2410998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:52.758969 2026] [ssl:error] [pid 2411410:tid 2411410] (EAI 2)Name or service not known: [client 144.76.19.72:51672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:52.759004 2026] [ssl:error] [pid 2411410:tid 2411410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:52.922431 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/sid4.php
[Thu Jul 30 08:32:53.693273 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/l10n/class-wp-translation-controller.php
[Thu Jul 30 08:32:53.693328 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/l10n/class-wp-translation-file.php
[Thu Jul 30 08:32:53.693353 2026] [authz_core:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01630: client denied by server configuration: /home/thepryor/public_html/wp-includes/l10n/error_log
[Thu Jul 30 08:32:53.693380 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/l10n/class-wp-translations.php
[Thu Jul 30 08:32:53.693414 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/l10n/class-wp-translation-file-php.php
[Thu Jul 30 08:32:53.693442 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/l10n/class-wp-translation-file-mo.php
[Thu Jul 30 08:32:53.732931 2026] [authz_core:error] [pid 2411585:tid 2411585] [client 57.141.0.44:23578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:53.733556 2026] [authz_core:error] [pid 2411585:tid 2411585] [client 57.141.0.44:23578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:53.779451 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wmore1.php
[Thu Jul 30 08:32:54.358311 2026] [security2:error] [pid 2411585:tid 2411585] [client 119.28.177.175:55806] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "annawelshagent.com"] [uri "/"] [unique_id "amr-JlgsytfYuBgF9tFdaAAAABY"]
[Thu Jul 30 08:32:54.527752 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/solo1.php
[Thu Jul 30 08:32:55.114994 2026] [security2:error] [pid 2411585:tid 2411585] [client 94.130.32.121:42714] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amr-J1gsytfYuBgF9tFdaQAAABY"]
[Thu Jul 30 08:32:55.181621 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/assets/icon-library-manifest.php
[Thu Jul 30 08:32:55.181657 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/assets/script-modules-packages.php
[Thu Jul 30 08:32:55.181677 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/assets/script-loader-packages.php
[Thu Jul 30 08:32:55.330099 2026] [access_compat:error] [pid 2411317:tid 2411317] [client 106.215.157.145:12012] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:32:55.437172 2026] [authz_core:error] [pid 2411128:tid 2411128] [client 57.141.0.30:34852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:55.437793 2026] [authz_core:error] [pid 2411128:tid 2411128] [client 57.141.0.30:34852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:55.904136 2026] [ssl:error] [pid 2411419:tid 2411419] (EAI 2)Name or service not known: [client 144.76.19.72:51686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:55.904169 2026] [ssl:error] [pid 2411419:tid 2411419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:56.164507 2026] [ssl:error] [pid 2411416:tid 2411416] (EAI 2)Name or service not known: [client 144.76.19.72:51690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:56.164541 2026] [ssl:error] [pid 2411416:tid 2411416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:56.494587 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/output.php
[Thu Jul 30 08:32:56.920178 2026] [authz_core:error] [pid 2411002:tid 2411002] [client 57.141.0.44:23590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:56.920800 2026] [authz_core:error] [pid 2411002:tid 2411002] [client 57.141.0.44:23590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:57.244340 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-file-120.php
[Thu Jul 30 08:32:57.987886 2026] [ssl:error] [pid 2411370:tid 2411370] (70014)End of file found: [client 216.73.216.199:29846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:32:58.037858 2026] [access_compat:error] [pid 2411314:tid 2411314] [client 20.104.16.169:1668] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/as.php
[Thu Jul 30 08:32:58.038193 2026] [core:error] [pid 2411314:tid 2411314] [client 20.104.16.169:1668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:58.300674 2026] [access_compat:error] [pid 2411585:tid 2411585] [client 20.104.16.169:1531] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/k.php
[Thu Jul 30 08:32:58.300979 2026] [core:error] [pid 2411585:tid 2411585] [client 20.104.16.169:1531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:58.390279 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 66.249.66.33:60832] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:32:58.392977 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 66.249.66.33:60832] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:32:58.574654 2026] [access_compat:error] [pid 2412471:tid 2412471] [client 20.104.16.169:1535] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/system_log.php
[Thu Jul 30 08:32:58.575104 2026] [core:error] [pid 2412471:tid 2412471] [client 20.104.16.169:1535] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:58.593960 2026] [authz_core:error] [pid 2411264:tid 2411264] [client 57.141.0.63:38946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:32:58.594590 2026] [authz_core:error] [pid 2411264:tid 2411264] [client 57.141.0.63:38946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:32:58.674348 2026] [core:error] [pid 2411314:tid 2411314] (13)Permission denied: [client 216.73.216.199:2369] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_piix/uevent
[Thu Jul 30 08:32:58.897981 2026] [access_compat:error] [pid 2411293:tid 2411293] [client 20.104.16.169:1490] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/x.php
[Thu Jul 30 08:32:58.898312 2026] [core:error] [pid 2411293:tid 2411293] [client 20.104.16.169:1490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:59.155033 2026] [access_compat:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1685] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/autoload_classmap.php
[Thu Jul 30 08:32:59.155359 2026] [core:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1685] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:59.232540 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 08:32:59.242363 2026] [ssl:error] [pid 2411293:tid 2411293] (EAI 2)Name or service not known: [client 144.76.19.72:51706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:59.242403 2026] [ssl:error] [pid 2411293:tid 2411293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:59.299957 2026] [ssl:error] [pid 2412471:tid 2412471] (EAI 2)Name or service not known: [client 144.76.19.72:51708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:32:59.299992 2026] [ssl:error] [pid 2412471:tid 2412471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:32:59.321809 2026] [access_compat:error] [pid 2411585:tid 2411585] [client 20.104.16.169:65426] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/8.php
[Thu Jul 30 08:32:59.322150 2026] [core:error] [pid 2411585:tid 2411585] [client 20.104.16.169:65426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:59.411700 2026] [access_compat:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1478] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/hosty.php
[Thu Jul 30 08:32:59.412018 2026] [core:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:59.700390 2026] [access_compat:error] [pid 2412473:tid 2412473] [client 20.104.16.169:1670] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/test1.php
[Thu Jul 30 08:32:59.700724 2026] [core:error] [pid 2412473:tid 2412473] [client 20.104.16.169:1670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:32:59.870492 2026] [lsapi:warn] [pid 2411149:tid 2411149] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:32:59.968659 2026] [access_compat:error] [pid 2412503:tid 2412503] [client 20.104.16.169:1485] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/zwso.php
[Thu Jul 30 08:32:59.969116 2026] [core:error] [pid 2412503:tid 2412503] [client 20.104.16.169:1485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:00.233609 2026] [access_compat:error] [pid 2412473:tid 2412473] [client 20.104.16.169:1694] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fpwch.php
[Thu Jul 30 08:33:00.233939 2026] [core:error] [pid 2412473:tid 2412473] [client 20.104.16.169:1694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:00.504330 2026] [core:error] [pid 2411373:tid 2411373] [client 20.104.16.169:1118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:00.504356 2026] [core:error] [pid 2411373:tid 2411373] [client 20.104.16.169:1118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:00.772569 2026] [access_compat:error] [pid 2411585:tid 2411585] [client 20.104.16.169:1094] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-blog-header.php
[Thu Jul 30 08:33:00.772890 2026] [core:error] [pid 2411585:tid 2411585] [client 20.104.16.169:1094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:00.884428 2026] [authz_core:error] [pid 2410998:tid 2410998] [client 57.141.0.36:55632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:00.885046 2026] [authz_core:error] [pid 2410998:tid 2410998] [client 57.141.0.36:55632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:01.035906 2026] [core:error] [pid 2412506:tid 2412506] [client 20.104.16.169:1530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:01.035942 2026] [core:error] [pid 2412506:tid 2412506] [client 20.104.16.169:1530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:01.297103 2026] [security2:error] [pid 2412505:tid 2412505] [client 43.157.149.188:53010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kirmond.com"] [uri "/"] [unique_id "amr-LY6lzEsOlVYAOAYgVwAAAC0"]
[Thu Jul 30 08:33:01.300754 2026] [authz_core:error] [pid 2412505:tid 2412505] [client 43.157.149.188:53010] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 08:33:01.321492 2026] [core:error] [pid 2411366:tid 2411366] [client 20.104.16.169:1484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:01.321512 2026] [core:error] [pid 2411366:tid 2411366] [client 20.104.16.169:1484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:01.338477 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/w1px.php
[Thu Jul 30 08:33:01.589269 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.104.16.169:1512] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-signin.php
[Thu Jul 30 08:33:01.589607 2026] [core:error] [pid 2411373:tid 2411373] [client 20.104.16.169:1512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:01.862803 2026] [access_compat:error] [pid 2411317:tid 2411317] [client 20.104.16.169:1509] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/f35.php
[Thu Jul 30 08:33:01.863135 2026] [core:error] [pid 2411317:tid 2411317] [client 20.104.16.169:1509] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:01.879148 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/w1px.php
[Thu Jul 30 08:33:02.134248 2026] [access_compat:error] [pid 2410998:tid 2410998] [client 20.104.16.169:1677] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/gg.php
[Thu Jul 30 08:33:02.134600 2026] [core:error] [pid 2410998:tid 2410998] [client 20.104.16.169:1677] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:02.373272 2026] [ssl:error] [pid 2411315:tid 2411315] (EAI 2)Name or service not known: [client 144.76.19.72:34302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:02.373308 2026] [ssl:error] [pid 2411315:tid 2411315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:02.403958 2026] [access_compat:error] [pid 2411414:tid 2411414] [client 20.104.16.169:1686] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/class.php
[Thu Jul 30 08:33:02.404320 2026] [core:error] [pid 2411414:tid 2411414] [client 20.104.16.169:1686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:02.427125 2026] [ssl:error] [pid 2412507:tid 2412507] (EAI 2)Name or service not known: [client 144.76.19.72:34312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:02.427150 2026] [ssl:error] [pid 2412507:tid 2412507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:02.551947 2026] [authz_core:error] [pid 2411000:tid 2411000] [client 57.141.0.25:29904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:02.552584 2026] [authz_core:error] [pid 2411000:tid 2411000] [client 57.141.0.25:29904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:02.658635 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/js.php
[Thu Jul 30 08:33:02.682458 2026] [access_compat:error] [pid 2412505:tid 2412505] [client 20.104.16.169:1493] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/flower.php
[Thu Jul 30 08:33:02.682796 2026] [core:error] [pid 2412505:tid 2412505] [client 20.104.16.169:1493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:02.969504 2026] [access_compat:error] [pid 2411128:tid 2411128] [client 20.104.16.169:1506] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/motu.php
[Thu Jul 30 08:33:02.969838 2026] [core:error] [pid 2411128:tid 2411128] [client 20.104.16.169:1506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:03.266792 2026] [access_compat:error] [pid 2411317:tid 2411317] [client 20.104.16.169:1522] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/404.php
[Thu Jul 30 08:33:03.267139 2026] [core:error] [pid 2411317:tid 2411317] [client 20.104.16.169:1522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:03.418913 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/core.php
[Thu Jul 30 08:33:03.528251 2026] [access_compat:error] [pid 2411413:tid 2411413] [client 20.104.16.169:1481] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/lite.php
[Thu Jul 30 08:33:03.528607 2026] [core:error] [pid 2411413:tid 2411413] [client 20.104.16.169:1481] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:03.774543 2026] [access_compat:error] [pid 2412507:tid 2412507] [client 20.104.16.169:65469] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bootstrap.php
[Thu Jul 30 08:33:03.774898 2026] [core:error] [pid 2412507:tid 2412507] [client 20.104.16.169:65469] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:03.792496 2026] [access_compat:error] [pid 2411002:tid 2411002] [client 20.104.16.169:1088] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/lock360.php
[Thu Jul 30 08:33:03.792844 2026] [core:error] [pid 2411002:tid 2411002] [client 20.104.16.169:1088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:04.065786 2026] [core:error] [pid 2411406:tid 2411406] [client 20.104.16.169:1495] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:04.065810 2026] [core:error] [pid 2411406:tid 2411406] [client 20.104.16.169:1495] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:04.125972 2026] [security2:error] [pid 2411000:tid 2411000] [client 47.77.234.25:18563] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-MHg21ljbNlDE1VglHgAAACo"]
[Thu Jul 30 08:33:04.126048 2026] [security2:error] [pid 2411000:tid 2411000] [client 47.77.234.25:18563] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-MHg21ljbNlDE1VglHgAAACo"]
[Thu Jul 30 08:33:04.126335 2026] [security2:error] [pid 2411000:tid 2411000] [client 47.77.234.25:18563] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-MHg21ljbNlDE1VglHgAAACo"]
[Thu Jul 30 08:33:04.160620 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/fffm.php
[Thu Jul 30 08:33:04.226468 2026] [ssl:error] [pid 2411408:tid 2411408] (70014)End of file found: [client 216.73.216.199:65506] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:04.326044 2026] [access_compat:error] [pid 2411316:tid 2411316] [client 20.104.16.169:1703] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-links-opml.php
[Thu Jul 30 08:33:04.326375 2026] [core:error] [pid 2411316:tid 2411316] [client 20.104.16.169:1703] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:04.610490 2026] [access_compat:error] [pid 2411370:tid 2411370] [client 20.104.16.169:1691] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.alf.php
[Thu Jul 30 08:33:04.610839 2026] [core:error] [pid 2411370:tid 2411370] [client 20.104.16.169:1691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:04.886299 2026] [access_compat:error] [pid 2412507:tid 2412507] [client 20.104.16.169:1488] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws.php
[Thu Jul 30 08:33:04.886767 2026] [core:error] [pid 2412507:tid 2412507] [client 20.104.16.169:1488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:04.909317 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ww.php
[Thu Jul 30 08:33:05.159273 2026] [core:error] [pid 2412472:tid 2412472] [client 20.104.16.169:1489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:05.159304 2026] [core:error] [pid 2412472:tid 2412472] [client 20.104.16.169:1489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:05.214291 2026] [ssl:error] [pid 2411406:tid 2411406] (70014)End of file found: [client 216.73.216.199:10916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:05.418055 2026] [access_compat:error] [pid 2411613:tid 2411613] [client 20.104.16.169:1413] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ioxi-o.php
[Thu Jul 30 08:33:05.418393 2026] [core:error] [pid 2411613:tid 2411613] [client 20.104.16.169:1413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:05.485318 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:34320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:05.485346 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:05.504656 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:22163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:05.541543 2026] [ssl:error] [pid 2412506:tid 2412506] (EAI 2)Name or service not known: [client 144.76.19.72:34328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:05.541586 2026] [ssl:error] [pid 2412506:tid 2412506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:05.553596 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/domvf.php
[Thu Jul 30 08:33:05.680216 2026] [access_compat:error] [pid 2412429:tid 2412429] [client 20.104.16.169:1673] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws54.php
[Thu Jul 30 08:33:05.680905 2026] [core:error] [pid 2412429:tid 2412429] [client 20.104.16.169:1673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:05.919527 2026] [access_compat:error] [pid 2412471:tid 2412471] [client 106.215.157.145:21160] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:05.945875 2026] [access_compat:error] [pid 2411417:tid 2411417] [client 20.104.16.169:1681] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/155.php
[Thu Jul 30 08:33:05.946229 2026] [core:error] [pid 2411417:tid 2411417] [client 20.104.16.169:1681] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:06.002623 2026] [access_compat:error] [pid 2411409:tid 2411409] [client 20.104.16.169:21774] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-blog-header.php
[Thu Jul 30 08:33:06.002971 2026] [core:error] [pid 2411409:tid 2411409] [client 20.104.16.169:21774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:06.202997 2026] [core:error] [pid 2411420:tid 2411420] [client 20.104.16.169:1520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:06.203021 2026] [core:error] [pid 2411420:tid 2411420] [client 20.104.16.169:1520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:06.372178 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/echkm.php
[Thu Jul 30 08:33:06.411809 2026] [ssl:error] [pid 2410998:tid 2410998] (70014)End of file found: [client 216.73.216.199:15974] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:06.470686 2026] [access_compat:error] [pid 2412472:tid 2412472] [client 20.104.16.169:1688] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xmlrpc.php
[Thu Jul 30 08:33:06.471188 2026] [core:error] [pid 2412472:tid 2412472] [client 20.104.16.169:1688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:06.762029 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.43:55296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:06.762667 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.43:55296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:06.783013 2026] [access_compat:error] [pid 2412506:tid 2412506] [client 20.104.16.169:1690] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/tinyfilemanager.php
[Thu Jul 30 08:33:06.783350 2026] [core:error] [pid 2412506:tid 2412506] [client 20.104.16.169:1690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:07.043689 2026] [access_compat:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1687] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/hplfuns.php
[Thu Jul 30 08:33:07.044002 2026] [core:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1687] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:07.273749 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ano.php
[Thu Jul 30 08:33:07.312433 2026] [access_compat:error] [pid 2412474:tid 2412474] [client 20.104.16.169:1496] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bthil.php
[Thu Jul 30 08:33:07.312792 2026] [core:error] [pid 2412474:tid 2412474] [client 20.104.16.169:1496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:07.577659 2026] [access_compat:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1675] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/cv.php
[Thu Jul 30 08:33:07.577971 2026] [core:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:07.858402 2026] [access_compat:error] [pid 2411293:tid 2411293] [client 20.104.16.169:1671] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sf.php
[Thu Jul 30 08:33:07.858743 2026] [core:error] [pid 2411293:tid 2411293] [client 20.104.16.169:1671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:08.042828 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.46:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:08.043450 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.46:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:08.050797 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/ah25.php
[Thu Jul 30 08:33:08.115033 2026] [access_compat:error] [pid 2411170:tid 2411170] [client 20.104.16.169:1518] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-content.php
[Thu Jul 30 08:33:08.115398 2026] [core:error] [pid 2411170:tid 2411170] [client 20.104.16.169:1518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:08.135854 2026] [access_compat:error] [pid 2412397:tid 2412397] [client 20.104.16.169:59433] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aa.php
[Thu Jul 30 08:33:08.136256 2026] [core:error] [pid 2412397:tid 2412397] [client 20.104.16.169:59433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:08.372232 2026] [core:error] [pid 2411293:tid 2411293] [client 20.104.16.169:1502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:08.372256 2026] [core:error] [pid 2411293:tid 2411293] [client 20.104.16.169:1502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:08.596638 2026] [ssl:error] [pid 2411585:tid 2411585] (EAI 2)Name or service not known: [client 144.76.19.72:34332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:08.596667 2026] [ssl:error] [pid 2411585:tid 2411585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:08.651345 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:34346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:08.651373 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:08.671310 2026] [access_compat:error] [pid 2412429:tid 2412429] [client 20.104.16.169:1500] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/txets.php
[Thu Jul 30 08:33:08.671804 2026] [core:error] [pid 2412429:tid 2412429] [client 20.104.16.169:1500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:08.712115 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/term.php
[Thu Jul 30 08:33:08.936924 2026] [core:error] [pid 2412397:tid 2412397] [client 20.104.16.169:1674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:08.936952 2026] [core:error] [pid 2412397:tid 2412397] [client 20.104.16.169:1674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:09.202538 2026] [access_compat:error] [pid 2411106:tid 2411106] [client 20.104.16.169:1667] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/222.php
[Thu Jul 30 08:33:09.202886 2026] [core:error] [pid 2411106:tid 2411106] [client 20.104.16.169:1667] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:09.431126 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/we.php
[Thu Jul 30 08:33:09.468775 2026] [access_compat:error] [pid 2411366:tid 2411366] [client 20.104.16.169:1514] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/new.php
[Thu Jul 30 08:33:09.469138 2026] [core:error] [pid 2411366:tid 2411366] [client 20.104.16.169:1514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:09.729495 2026] [core:error] [pid 2412429:tid 2412429] [client 20.104.16.169:1142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:09.729517 2026] [core:error] [pid 2412429:tid 2412429] [client 20.104.16.169:1142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:09.997895 2026] [core:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:09.997921 2026] [core:error] [pid 2411149:tid 2411149] [client 20.104.16.169:1528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:10.202642 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/zip-onee.php
[Thu Jul 30 08:33:10.218608 2026] [access_compat:error] [pid 2411408:tid 2411408] [client 20.104.16.169:21784] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/tx79.php
[Thu Jul 30 08:33:10.218946 2026] [core:error] [pid 2411408:tid 2411408] [client 20.104.16.169:21784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:10.272462 2026] [access_compat:error] [pid 2411416:tid 2411416] [client 20.104.16.169:1506] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/classwithtostring.php
[Thu Jul 30 08:33:10.272815 2026] [core:error] [pid 2411416:tid 2411416] [client 20.104.16.169:1506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:10.504734 2026] [lsapi:warn] [pid 2411366:tid 2411366] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:33:10.526720 2026] [ssl:error] [pid 2411315:tid 2411315] (70014)End of file found: [client 216.73.216.199:29662] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:10.532360 2026] [access_compat:error] [pid 2411410:tid 2411410] [client 20.104.16.169:1126] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/error.php
[Thu Jul 30 08:33:10.532684 2026] [core:error] [pid 2411410:tid 2411410] [client 20.104.16.169:1126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:10.801044 2026] [access_compat:error] [pid 2412503:tid 2412503] [client 20.104.16.169:1716] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a7.php
[Thu Jul 30 08:33:10.801395 2026] [core:error] [pid 2412503:tid 2412503] [client 20.104.16.169:1716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:10.809443 2026] [ssl:error] [pid 2411149:tid 2411149] (70014)End of file found: [client 216.73.216.199:2451] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:11.008159 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/il.php
[Thu Jul 30 08:33:11.069652 2026] [core:error] [pid 2411406:tid 2411406] [client 20.104.16.169:1695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:11.069689 2026] [core:error] [pid 2411406:tid 2411406] [client 20.104.16.169:1695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:11.702732 2026] [ssl:error] [pid 2411410:tid 2411410] (EAI 2)Name or service not known: [client 144.76.19.72:59922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:11.702759 2026] [ssl:error] [pid 2411410:tid 2411410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:11.717580 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:33862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:11.758640 2026] [ssl:error] [pid 2411221:tid 2411221] (EAI 2)Name or service not known: [client 144.76.19.72:59928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:11.758670 2026] [ssl:error] [pid 2411221:tid 2411221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:11.802673 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/one.php
[Thu Jul 30 08:33:12.120970 2026] [authz_core:error] [pid 2411366:tid 2411366] [client 57.141.0.58:41382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:12.121602 2026] [authz_core:error] [pid 2411366:tid 2411366] [client 57.141.0.58:41382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:12.563773 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/002.php
[Thu Jul 30 08:33:12.577428 2026] [access_compat:error] [pid 2411049:tid 2411049] [client 106.215.157.145:31308] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:13.288568 2026] [access_compat:error] [pid 2411420:tid 2411420] [client 20.104.16.169:65410] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/motu.php
[Thu Jul 30 08:33:13.288920 2026] [core:error] [pid 2411420:tid 2411420] [client 20.104.16.169:65410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:13.562332 2026] [access_compat:error] [pid 2411314:tid 2411314] [client 20.104.16.169:65440] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-head.php
[Thu Jul 30 08:33:13.562680 2026] [core:error] [pid 2411314:tid 2411314] [client 20.104.16.169:65440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:13.759472 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/file1.php
[Thu Jul 30 08:33:13.765542 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.63:43882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:13.766183 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.63:43882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:13.946311 2026] [authz_core:error] [pid 2411417:tid 2411417] [client 57.141.0.12:59542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:13.946929 2026] [authz_core:error] [pid 2411417:tid 2411417] [client 57.141.0.12:59542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:14.366854 2026] [authz_core:error] [pid 2411049:tid 2411049] [client 57.141.0.7:27240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:14.367482 2026] [authz_core:error] [pid 2411049:tid 2411049] [client 57.141.0.7:27240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:14.517373 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/akimet.php
[Thu Jul 30 08:33:14.812543 2026] [ssl:error] [pid 2412509:tid 2412509] (EAI 2)Name or service not known: [client 144.76.19.72:59936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:14.812581 2026] [ssl:error] [pid 2412509:tid 2412509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:14.867056 2026] [ssl:error] [pid 2411614:tid 2411614] (EAI 2)Name or service not known: [client 144.76.19.72:59944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:14.867095 2026] [ssl:error] [pid 2411614:tid 2411614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:15.288119 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/reop3.php
[Thu Jul 30 08:33:15.832100 2026] [authz_core:error] [pid 2411614:tid 2411614] [client 57.141.0.26:28460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:15.832723 2026] [authz_core:error] [pid 2411614:tid 2411614] [client 57.141.0.26:28460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:16.047787 2026] [core:error] [pid 2412506:tid 2412506] (13)Permission denied: [client 216.73.216.199:56796] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory254/subsystem/uevent
[Thu Jul 30 08:33:16.086640 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/h.php
[Thu Jul 30 08:33:16.348542 2026] [ssl:error] [pid 2412506:tid 2412506] (70014)End of file found: [client 216.73.216.199:56796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:16.356700 2026] [access_compat:error] [pid 2411315:tid 2411315] [client 106.215.157.145:20323] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:16.649179 2026] [ssl:error] [pid 2410998:tid 2410998] (5)Input/output error: [client 216.73.216.199:1804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:16.810113 2026] [core:error] [pid 2411412:tid 2411412] [client 20.104.16.169:21773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:16.810141 2026] [core:error] [pid 2411412:tid 2411412] [client 20.104.16.169:21773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:17.052653 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/2x.php
[Thu Jul 30 08:33:17.410389 2026] [core:error] [pid 2410999:tid 2410999] [client 57.141.0.12:59546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:17.410413 2026] [core:error] [pid 2410999:tid 2410999] [client 57.141.0.12:59546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:17.860362 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/petx.php
[Thu Jul 30 08:33:17.925589 2026] [ssl:error] [pid 2411408:tid 2411408] (EAI 2)Name or service not known: [client 144.76.19.72:59954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:17.925622 2026] [ssl:error] [pid 2411408:tid 2411408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:17.980394 2026] [ssl:error] [pid 2412471:tid 2412471] (EAI 2)Name or service not known: [client 144.76.19.72:59970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:17.980424 2026] [ssl:error] [pid 2412471:tid 2412471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:18.660395 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/zxz.php
[Thu Jul 30 08:33:19.009340 2026] [authz_core:error] [pid 2412428:tid 2412428] [client 57.141.0.47:49162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:19.010312 2026] [authz_core:error] [pid 2412428:tid 2412428] [client 57.141.0.47:49162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:19.158737 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.47:49172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:19.159366 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.47:49172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:19.451964 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/2.php
[Thu Jul 30 08:33:19.713152 2026] [security2:error] [pid 2411373:tid 2411373] [client 193.37.32.142:29407] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P9EWCml9g6o0NKfGrQAAABw"]
[Thu Jul 30 08:33:19.713327 2026] [security2:error] [pid 2411373:tid 2411373] [client 193.37.32.142:29407] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P9EWCml9g6o0NKfGrQAAABw"]
[Thu Jul 30 08:33:19.714267 2026] [security2:error] [pid 2411408:tid 2411408] [client 193.37.32.160:48817] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.impactscotland.erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P5oC1GNI7Mml_OmjjwAAACE"]
[Thu Jul 30 08:33:19.714377 2026] [security2:error] [pid 2411408:tid 2411408] [client 193.37.32.160:48817] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.impactscotland.erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P5oC1GNI7Mml_OmjjwAAACE"]
[Thu Jul 30 08:33:19.714782 2026] [core:error] [pid 2411408:tid 2411408] [client 193.37.32.160:48817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:19.714888 2026] [security2:error] [pid 2411408:tid 2411408] [client 193.37.32.160:48817] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.impactscotland.erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amr-P5oC1GNI7Mml_OmjjwAAACE"]
[Thu Jul 30 08:33:19.726845 2026] [security2:error] [pid 2411409:tid 2411409] [client 193.37.32.154:39503] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.jubileehousescotland.erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P3iGnV0lYiYXbxD9XAAAACI"]
[Thu Jul 30 08:33:19.726977 2026] [security2:error] [pid 2411409:tid 2411409] [client 193.37.32.154:39503] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jubileehousescotland.erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P3iGnV0lYiYXbxD9XAAAACI"]
[Thu Jul 30 08:33:19.911673 2026] [security2:error] [pid 2411128:tid 2411128] [client 193.37.32.109:52179] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.erskinefusion.erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P6BFDOgTEaBwEi5APwAAAAU"]
[Thu Jul 30 08:33:19.911857 2026] [security2:error] [pid 2411128:tid 2411128] [client 193.37.32.109:52179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.erskinefusion.erskinenazarene.co.uk"] [uri "/.git/HEAD"] [unique_id "amr-P6BFDOgTEaBwEi5APwAAAAU"]
[Thu Jul 30 08:33:19.912286 2026] [core:error] [pid 2411128:tid 2411128] [client 193.37.32.109:52179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:19.912396 2026] [security2:error] [pid 2411128:tid 2411128] [client 193.37.32.109:52179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.erskinefusion.erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amr-P6BFDOgTEaBwEi5APwAAAAU"]
[Thu Jul 30 08:33:20.065970 2026] [security2:error] [pid 2411373:tid 2411373] [client 193.37.32.142:29407] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amr-P9EWCml9g6o0NKfGrQAAABw"]
[Thu Jul 30 08:33:20.255846 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/op.php
[Thu Jul 30 08:33:20.269844 2026] [security2:error] [pid 2411049:tid 2411049] [client 216.73.216.199:5901] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/x11.conf"] [unique_id "amr-QFzA3Ri_z9tm4eSSngAAAAE"]
[Thu Jul 30 08:33:20.270059 2026] [security2:error] [pid 2411049:tid 2411049] [client 216.73.216.199:5901] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/x11.conf"] [unique_id "amr-QFzA3Ri_z9tm4eSSngAAAAE"]
[Thu Jul 30 08:33:20.270297 2026] [security2:error] [pid 2411049:tid 2411049] [client 216.73.216.199:5901] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/x11.conf"] [unique_id "amr-QFzA3Ri_z9tm4eSSngAAAAE"]
[Thu Jul 30 08:33:20.362667 2026] [security2:error] [pid 2411409:tid 2411409] [client 193.37.32.154:39503] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.jubileehousescotland.erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amr-P3iGnV0lYiYXbxD9XAAAACI"]
[Thu Jul 30 08:33:20.993770 2026] [access_compat:error] [pid 2411023:tid 2411023] [client 20.48.234.177:34821] AH01797: client denied by server configuration: /home/thepryor/public_html/a5.php
[Thu Jul 30 08:33:21.039551 2026] [ssl:error] [pid 2411409:tid 2411409] (EAI 2)Name or service not known: [client 144.76.19.72:32066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:21.039596 2026] [ssl:error] [pid 2411409:tid 2411409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:21.096435 2026] [ssl:error] [pid 2411416:tid 2411416] (EAI 2)Name or service not known: [client 144.76.19.72:32078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:21.096464 2026] [ssl:error] [pid 2411416:tid 2411416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:21.175361 2026] [security2:error] [pid 2411314:tid 2411314] [client 114.119.155.144:33065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1594854000/request_format~html/cat_ids~103"] [unique_id "amr-QW7CcAQ8GcgVcTbhggAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~16-7-2020
[Thu Jul 30 08:33:21.188800 2026] [authz_core:error] [pid 2411264:tid 2411264] [client 82.102.18.190:58964] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/widgets/error_log
[Thu Jul 30 08:33:21.192491 2026] [lsapi:warn] [pid 2412505:tid 2412505] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:33:21.741219 2026] [authz_core:error] [pid 2411315:tid 2411315] [client 57.141.0.20:22476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:21.741839 2026] [authz_core:error] [pid 2411315:tid 2411315] [client 57.141.0.20:22476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:21.896321 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.62:50588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:21.896942 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.62:50588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:21.953926 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/ws80.php
[Thu Jul 30 08:33:22.324236 2026] [security2:error] [pid 2411317:tid 2411317] [client 114.119.155.144:33077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1594854000/request_format~html/cat_ids~103"] [unique_id "amr-Qg1MJI8hnSf9rwybSQAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~16-7-2020
[Thu Jul 30 08:33:22.375658 2026] [core:error] [pid 2411049:tid 2411049] (13)Permission denied: [client 216.73.216.199:5901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/drm/parameters/edid_fixup
[Thu Jul 30 08:33:22.676332 2026] [core:error] [pid 2411049:tid 2411049] (13)Permission denied: [client 216.73.216.199:5901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory220/subsystem/uevent
[Thu Jul 30 08:33:22.692550 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/xa.php
[Thu Jul 30 08:33:23.279027 2026] [core:error] [pid 2411049:tid 2411049] (13)Permission denied: [client 216.73.216.199:5901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup10/device/physical_node/subsystem/rescan
[Thu Jul 30 08:33:23.509741 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/asd67.php
[Thu Jul 30 08:33:23.578914 2026] [core:error] [pid 2411049:tid 2411049] (13)Permission denied: [client 216.73.216.199:5901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/libcrc32c/uevent
[Thu Jul 30 08:33:24.150100 2026] [ssl:error] [pid 2412506:tid 2412506] (EAI 2)Name or service not known: [client 144.76.19.72:32092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:24.150132 2026] [ssl:error] [pid 2412506:tid 2412506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:24.180944 2026] [core:error] [pid 2411049:tid 2411049] (13)Permission denied: [client 216.73.216.199:5901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/boot/System.map-4.18.0-553.126.2.lve.el8.x86_64
[Thu Jul 30 08:33:24.248343 2026] [ssl:error] [pid 2412474:tid 2412474] (EAI 2)Name or service not known: [client 144.76.19.72:32100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:24.248380 2026] [ssl:error] [pid 2412474:tid 2412474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:24.271928 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/bk.php
[Thu Jul 30 08:33:24.482891 2026] [core:error] [pid 2411049:tid 2411049] (13)Permission denied: [client 216.73.216.199:5901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory134/subsystem/uevent
[Thu Jul 30 08:33:25.039890 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-links.php
[Thu Jul 30 08:33:25.745682 2026] [access_compat:error] [pid 2411413:tid 2411413] [client 20.104.16.169:59431] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/60856e3a4findex.php
[Thu Jul 30 08:33:25.746012 2026] [core:error] [pid 2411413:tid 2411413] [client 20.104.16.169:59431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:25.787184 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/mosty.php
[Thu Jul 30 08:33:26.185091 2026] [security2:error] [pid 2411366:tid 2411366] [client 27.7.196.25:3278] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-RvIRKzY8wXs4IBhKUwAAABM"]
[Thu Jul 30 08:33:26.185134 2026] [security2:error] [pid 2411366:tid 2411366] [client 27.7.196.25:3278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-RvIRKzY8wXs4IBhKUwAAABM"]
[Thu Jul 30 08:33:26.185365 2026] [security2:error] [pid 2411366:tid 2411366] [client 27.7.196.25:3278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-RvIRKzY8wXs4IBhKUwAAABM"]
[Thu Jul 30 08:33:26.545849 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/sump3.php
[Thu Jul 30 08:33:26.907961 2026] [access_compat:error] [pid 2411413:tid 2411413] [client 106.215.157.145:26681] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:27.034062 2026] [authz_core:error] [pid 2412507:tid 2412507] [client 57.141.0.19:42690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:27.034694 2026] [authz_core:error] [pid 2412507:tid 2412507] [client 57.141.0.19:42690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:27.302583 2026] [ssl:error] [pid 2412502:tid 2412502] (EAI 2)Name or service not known: [client 144.76.19.72:32108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:27.302630 2026] [ssl:error] [pid 2412502:tid 2412502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:27.357493 2026] [ssl:error] [pid 2412503:tid 2412503] (EAI 2)Name or service not known: [client 144.76.19.72:32118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:27.357533 2026] [ssl:error] [pid 2412503:tid 2412503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:27.375750 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/first.php
[Thu Jul 30 08:33:27.643952 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.46:64914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:27.644587 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.46:64914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:28.282620 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/acp.php
[Thu Jul 30 08:33:28.981622 2026] [access_compat:error] [pid 2411000:tid 2411000] [client 20.104.16.169:60749] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-the.php
[Thu Jul 30 08:33:28.981957 2026] [core:error] [pid 2411000:tid 2411000] [client 20.104.16.169:60749] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:29.028573 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-good.php
[Thu Jul 30 08:33:29.090748 2026] [security2:error] [pid 2411315:tid 2411315] [client 43.166.136.153:40748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/ec7152/"] [unique_id "amr-SaSaEhqkahqjoikW1AAAABA"]
[Thu Jul 30 08:33:29.785141 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/daerl3.php
[Thu Jul 30 08:33:29.901190 2026] [ssl:error] [pid 2411614:tid 2411614] (70014)End of file found: [client 216.73.216.199:35755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:30.145973 2026] [lsapi:warn] [pid 2411409:tid 2411409] [client 195.26.253.119:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:33:30.416633 2026] [ssl:error] [pid 2411293:tid 2411293] (EAI 2)Name or service not known: [client 144.76.19.72:20740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:30.416669 2026] [ssl:error] [pid 2411293:tid 2411293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:30.472736 2026] [ssl:error] [pid 2412509:tid 2412509] (EAI 2)Name or service not known: [client 144.76.19.72:20754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:30.472769 2026] [ssl:error] [pid 2412509:tid 2412509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:30.530727 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/php5.php
[Thu Jul 30 08:33:31.105209 2026] [core:error] [pid 2411314:tid 2411314] (13)Permission denied: [client 216.73.216.199:63973] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory158/subsystem/uevent
[Thu Jul 30 08:33:31.272673 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/xoot.php
[Thu Jul 30 08:33:31.841435 2026] [lsapi:warn] [pid 2411420:tid 2411420] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:33:32.038486 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/clxcc.php
[Thu Jul 30 08:33:32.494945 2026] [security2:error] [pid 2411415:tid 2411415] [client 114.119.134.146:50359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2010/A27-Romania-2010.pdf"] [unique_id "amr-TD-G1VCKQzXMG6UaxgAAACg"]
[Thu Jul 30 08:33:32.617617 2026] [authz_core:error] [pid 2411264:tid 2411264] [client 57.141.0.59:61642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:32.618303 2026] [authz_core:error] [pid 2411264:tid 2411264] [client 57.141.0.59:61642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:32.800266 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/ai.php
[Thu Jul 30 08:33:33.134442 2026] [access_compat:error] [pid 2411420:tid 2411420] [client 20.104.16.169:59452] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp.php
[Thu Jul 30 08:33:33.134818 2026] [core:error] [pid 2411420:tid 2411420] [client 20.104.16.169:59452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:33.271011 2026] [authz_core:error] [pid 2411264:tid 2411264] [client 57.141.0.11:65016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:33.271650 2026] [authz_core:error] [pid 2411264:tid 2411264] [client 57.141.0.11:65016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:33.463087 2026] [access_compat:error] [pid 2411366:tid 2411366] [client 106.215.157.145:19278] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:33.563102 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:20772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:33.563138 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:33.582664 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/nwflm.php
[Thu Jul 30 08:33:33.616884 2026] [ssl:error] [pid 2412507:tid 2412507] (EAI 2)Name or service not known: [client 144.76.19.72:20782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:33.616921 2026] [ssl:error] [pid 2412507:tid 2412507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:34.439276 2026] [core:error] [pid 2412505:tid 2412505] [client 20.104.16.169:21764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:34.439302 2026] [core:error] [pid 2412505:tid 2412505] [client 20.104.16.169:21764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:34.571968 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.38:25886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:34.572607 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.38:25886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:34.773813 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/hypo.php
[Thu Jul 30 08:33:35.334876 2026] [ssl:error] [pid 2411314:tid 2411314] (70014)End of file found: [client 216.73.216.199:63973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:35.553034 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/w3llscc.php
[Thu Jul 30 08:33:35.790678 2026] [access_compat:error] [pid 2412505:tid 2412505] [client 20.104.16.169:48313] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/tinysd.php
[Thu Jul 30 08:33:35.791048 2026] [core:error] [pid 2412505:tid 2412505] [client 20.104.16.169:48313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:35.941583 2026] [ssl:error] [pid 2411614:tid 2411614] (70014)End of file found: [client 216.73.216.199:63149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:36.190687 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/11PJcpMFsD8B.php
[Thu Jul 30 08:33:36.699622 2026] [ssl:error] [pid 2411410:tid 2411410] (EAI 2)Name or service not known: [client 144.76.19.72:20806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:36.699648 2026] [ssl:error] [pid 2411410:tid 2411410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:36.757437 2026] [ssl:error] [pid 2411366:tid 2411366] (EAI 2)Name or service not known: [client 144.76.19.72:20820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:36.757470 2026] [ssl:error] [pid 2411366:tid 2411366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:36.926179 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/8.php
[Thu Jul 30 08:33:37.332973 2026] [access_compat:error] [pid 2411128:tid 2411128] [client 106.215.157.145:15383] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:37.759211 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/fnstall.php
[Thu Jul 30 08:33:37.857197 2026] [authz_core:error] [pid 2411412:tid 2411412] [client 57.141.0.20:39088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:37.857844 2026] [authz_core:error] [pid 2411412:tid 2411412] [client 57.141.0.20:39088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:38.687599 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/edorxrr.php
[Thu Jul 30 08:33:39.168433 2026] [authz_core:error] [pid 2411410:tid 2411410] [client 57.141.0.19:46940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:39.169055 2026] [authz_core:error] [pid 2411410:tid 2411410] [client 57.141.0.19:46940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:39.393151 2026] [security2:error] [pid 2410998:tid 2410998] [client 114.119.150.101:34177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/wp-content/uploads/2011/06/edin120001.jpg"] [unique_id "amr-U2bO7Ve-VHuiZF2ZcAAAABU"], referer: http://www.localhero.org.uk/2000/12/scotland-irc-channel-meet-edinburgh-22122000/edin120001/?ak_action=reject_mobile
[Thu Jul 30 08:33:39.481654 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/setup.php
[Thu Jul 30 08:33:39.814913 2026] [ssl:error] [pid 2412504:tid 2412504] (EAI 2)Name or service not known: [client 144.76.19.72:41590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:39.814944 2026] [ssl:error] [pid 2412504:tid 2412504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:39.871005 2026] [ssl:error] [pid 2411410:tid 2411410] (EAI 2)Name or service not known: [client 144.76.19.72:41596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:39.871033 2026] [ssl:error] [pid 2411410:tid 2411410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:39.925225 2026] [lsapi:warn] [pid 2412506:tid 2412506] [client 109.152.115.77:64773] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 08:33:39.925267 2026] [lsapi:warn] [pid 2412506:tid 2412506] [client 109.152.115.77:64773] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 08:33:40.255481 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/6.php
[Thu Jul 30 08:33:40.489016 2026] [core:error] [pid 2412502:tid 2412502] (13)Permission denied: [client 216.73.216.199:12501] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/iomem_base
[Thu Jul 30 08:33:41.025797 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/w3lls.php
[Thu Jul 30 08:33:41.587016 2026] [ssl:error] [pid 2411149:tid 2411149] (70014)End of file found: [client 216.73.216.199:12648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:41.821963 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/99.php
[Thu Jul 30 08:33:42.182135 2026] [cgi:error] [pid 2412509:tid 2412509] [client 66.249.70.163:60248] AH02812: stderr from /home/eznoyveg/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:33:43.177166 2026] [access_compat:error] [pid 2414117:tid 2414117] [client 20.104.16.169:48304] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws78.php
[Thu Jul 30 08:33:43.177573 2026] [core:error] [pid 2414117:tid 2414117] [client 20.104.16.169:48304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:43.334724 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/media.php
[Thu Jul 30 08:33:43.427060 2026] [ssl:error] [pid 2411023:tid 2411023] (EAI 2)Name or service not known: [client 144.76.19.72:41610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:43.427105 2026] [ssl:error] [pid 2411023:tid 2411023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:43.440234 2026] [lsapi:warn] [pid 2411128:tid 2411128] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:33:43.622960 2026] [ssl:error] [pid 2412429:tid 2412429] (EAI 2)Name or service not known: [client 144.76.19.72:41626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:43.622989 2026] [ssl:error] [pid 2412429:tid 2412429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:44.075773 2026] [access_compat:error] [pid 2412429:tid 2412429] [client 106.215.157.145:16909] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:44.181359 2026] [authz_core:error] [pid 2411413:tid 2411413] [client 57.141.0.34:41178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:44.181976 2026] [authz_core:error] [pid 2411413:tid 2411413] [client 57.141.0.34:41178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:44.266652 2026] [core:error] [pid 2414117:tid 2414117] (13)Permission denied: [client 216.73.216.199:31939] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS2/custom_divisor
[Thu Jul 30 08:33:44.567137 2026] [ssl:error] [pid 2414117:tid 2414117] (5)Input/output error: [client 216.73.216.199:31939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:44.868609 2026] [ssl:error] [pid 2412502:tid 2412502] (70014)End of file found: [client 216.73.216.199:12501] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:45.092104 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 08:33:45.835045 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-load.php
[Thu Jul 30 08:33:46.195449 2026] [access_compat:error] [pid 2414920:tid 2414920] [client 20.104.16.169:48293] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/elp.php
[Thu Jul 30 08:33:46.195816 2026] [core:error] [pid 2414920:tid 2414920] [client 20.104.16.169:48293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:46.680483 2026] [ssl:error] [pid 2411128:tid 2411128] (EAI 2)Name or service not known: [client 144.76.19.72:41630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:46.680510 2026] [ssl:error] [pid 2411128:tid 2411128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:46.796235 2026] [ssl:error] [pid 2410998:tid 2410998] (EAI 2)Name or service not known: [client 144.76.19.72:41638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:46.796260 2026] [ssl:error] [pid 2410998:tid 2410998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:46.838011 2026] [authz_core:error] [pid 2411149:tid 2411149] [client 57.141.0.71:48052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:46.838657 2026] [authz_core:error] [pid 2411149:tid 2411149] [client 57.141.0.71:48052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:47.131191 2026] [authz_core:error] [pid 2410998:tid 2410998] [client 57.141.0.17:39554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:47.131819 2026] [authz_core:error] [pid 2410998:tid 2410998] [client 57.141.0.17:39554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:47.179259 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/memberfuns.php
[Thu Jul 30 08:33:47.743344 2026] [authz_core:error] [pid 2412471:tid 2412471] [client 66.249.66.35:38021] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:33:47.746002 2026] [authz_core:error] [pid 2412471:tid 2412471] [client 66.249.66.35:38021] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:33:47.876241 2026] [access_compat:error] [pid 2411149:tid 2411149] [client 106.215.157.145:14521] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:33:47.933798 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/orange3.php
[Thu Jul 30 08:33:48.201256 2026] [ssl:error] [pid 2414864:tid 2414864] (70014)End of file found: [client 216.73.216.199:55247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:48.349592 2026] [security2:error] [pid 2411023:tid 2411023] [client 74.7.242.5:40300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "liberator-no-email.com"] [uri "/"] [unique_id "amr-XL8HysstHLiPhJVFDwAAAAA"], referer: https://pagesearch.net
[Thu Jul 30 08:33:49.738279 2026] [access_compat:error] [pid 2411314:tid 2411314] [client 20.104.16.169:60786] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/atomlib.php
[Thu Jul 30 08:33:49.738637 2026] [core:error] [pid 2411314:tid 2411314] [client 20.104.16.169:60786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:49.765619 2026] [authz_core:error] [pid 2411585:tid 2411585] [client 57.141.0.4:20928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:49.766253 2026] [authz_core:error] [pid 2411585:tid 2411585] [client 57.141.0.4:20928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:49.838095 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-the.php
[Thu Jul 30 08:33:49.851340 2026] [ssl:error] [pid 2412503:tid 2412503] (EAI 2)Name or service not known: [client 144.76.19.72:46696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:49.851364 2026] [ssl:error] [pid 2412503:tid 2412503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:49.903121 2026] [ssl:error] [pid 2411221:tid 2411221] (EAI 2)Name or service not known: [client 144.76.19.72:46698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:49.903149 2026] [ssl:error] [pid 2411221:tid 2411221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:49.905348 2026] [ssl:error] [pid 2411317:tid 2411317] (70014)End of file found: [client 216.73.216.199:4048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:50.197118 2026] [ssl:error] [pid 2411613:tid 2411613] (70014)End of file found: [client 216.73.216.199:62830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:50.573028 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/crgio.php
[Thu Jul 30 08:33:51.039723 2026] [autoindex:error] [pid 2411614:tid 2411614] [client 20.220.15.170:17245] AH01276: Cannot serve directory /home/banskoex/public_html/blackseaexpress.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 08:33:51.066607 2026] [access_compat:error] [pid 2412504:tid 2412504] [client 45.158.164.139:44976] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:33:51.511705 2026] [access_compat:error] [pid 2412502:tid 2412502] [client 20.104.16.169:48299] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wyzer3.php
[Thu Jul 30 08:33:51.512048 2026] [core:error] [pid 2412502:tid 2412502] [client 20.104.16.169:48299] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:51.686387 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/ws13.php
[Thu Jul 30 08:33:52.260258 2026] [core:error] [pid 2412505:tid 2412505] [client 66.249.66.8:39714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:52.260284 2026] [core:error] [pid 2412505:tid 2412505] [client 66.249.66.8:39714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:52.428662 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/srontol.php
[Thu Jul 30 08:33:52.957989 2026] [ssl:error] [pid 2414117:tid 2414117] (EAI 2)Name or service not known: [client 144.76.19.72:46700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:52.958021 2026] [ssl:error] [pid 2414117:tid 2414117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:52.960710 2026] [core:error] [pid 2411128:tid 2411128] [client 66.249.64.170:61409] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:52.960733 2026] [core:error] [pid 2411128:tid 2411128] [client 66.249.64.170:61409] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:53.015487 2026] [ssl:error] [pid 2411221:tid 2411221] (EAI 2)Name or service not known: [client 144.76.19.72:46712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:53.015529 2026] [ssl:error] [pid 2411221:tid 2411221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:53.071286 2026] [lsapi:warn] [pid 2411419:tid 2411419] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:33:53.171817 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/miru3.php
[Thu Jul 30 08:33:53.228004 2026] [authz_core:error] [pid 2412505:tid 2412505] [client 57.141.0.19:52960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:53.228639 2026] [authz_core:error] [pid 2412505:tid 2412505] [client 57.141.0.19:52960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:53.935929 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/ingfo.php
[Thu Jul 30 08:33:54.239046 2026] [core:error] [pid 2412504:tid 2412504] (13)Permission denied: [client 216.73.216.199:60121] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_event/order
[Thu Jul 30 08:33:54.580037 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/ey5.php
[Thu Jul 30 08:33:54.840491 2026] [ssl:error] [pid 2412504:tid 2412504] (70014)End of file found: [client 216.73.216.199:60121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:33:54.953189 2026] [access_compat:error] [pid 2412505:tid 2412505] [client 20.104.16.169:55495] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/max.php
[Thu Jul 30 08:33:54.953521 2026] [core:error] [pid 2412505:tid 2412505] [client 20.104.16.169:55495] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:55.247969 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 20.48.234.177:34904] AH01797: client denied by server configuration: /home/thepryor/public_html/fine.php
[Thu Jul 30 08:33:56.068625 2026] [ssl:error] [pid 2411614:tid 2411614] (EAI 2)Name or service not known: [client 144.76.19.72:46726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:56.068650 2026] [ssl:error] [pid 2411614:tid 2411614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:56.125780 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:46742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:33:56.125805 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:33:56.202314 2026] [core:error] [pid 2412472:tid 2412472] (13)Permission denied: [client 216.73.216.199:59473] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS2/iomem_base
[Thu Jul 30 08:33:57.418299 2026] [access_compat:error] [pid 2411317:tid 2411317] [client 20.104.16.169:65447] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ftde.php
[Thu Jul 30 08:33:57.418662 2026] [core:error] [pid 2411317:tid 2411317] [client 20.104.16.169:65447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:33:57.541872 2026] [cgi:error] [pid 2415485:tid 2415485] [client 20.220.15.170:17383] AH02812: stderr from /home/banskoex/public_html/blackseaexpress.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:33:57.846739 2026] [core:error] [pid 2412472:tid 2412472] (13)Permission denied: [client 216.73.216.199:59473] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/drm_kms_helper/sections/__kcrctab
[Thu Jul 30 08:33:57.945874 2026] [authz_core:error] [pid 2414117:tid 2414117] [client 57.141.0.50:56566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:33:57.946496 2026] [authz_core:error] [pid 2414117:tid 2414117] [client 57.141.0.50:56566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:33:58.320916 2026] [access_compat:error] [pid 2411613:tid 2411613] [client 106.215.157.145:31887] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:34:00.184543 2026] [ssl:error] [pid 2412506:tid 2412506] (EAI 2)Name or service not known: [client 144.76.19.72:46754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:00.184579 2026] [ssl:error] [pid 2412506:tid 2412506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:00.420955 2026] [authz_core:error] [pid 2412471:tid 2412471] [client 57.141.0.49:45228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:00.421587 2026] [authz_core:error] [pid 2412471:tid 2412471] [client 57.141.0.49:45228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:01.143240 2026] [ssl:error] [pid 2411585:tid 2411585] (EAI 2)Name or service not known: [client 144.76.19.72:26774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:01.143265 2026] [ssl:error] [pid 2411585:tid 2411585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:01.458578 2026] [ssl:error] [pid 2412472:tid 2412472] (70014)End of file found: [client 216.73.216.199:59473] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:02.194774 2026] [security2:error] [pid 2411314:tid 2411314] [client 43.153.135.208:47306] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "borovetsexpress.com"] [uri "/"] [unique_id "amr-am7CcAQ8GcgVcTbhpwAAAA8"]
[Thu Jul 30 08:34:03.157036 2026] [security2:error] [pid 2412509:tid 2412509] [client 86.97.184.146:32812] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-aykbiwJMJ1lx9MIWCwAAADc"]
[Thu Jul 30 08:34:03.157093 2026] [security2:error] [pid 2412509:tid 2412509] [client 86.97.184.146:32812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-aykbiwJMJ1lx9MIWCwAAADc"]
[Thu Jul 30 08:34:03.157342 2026] [security2:error] [pid 2412509:tid 2412509] [client 86.97.184.146:32812] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-aykbiwJMJ1lx9MIWCwAAADc"]
[Thu Jul 30 08:34:03.671312 2026] [lsapi:warn] [pid 2412505:tid 2412505] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:34:03.689951 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.46:32852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:03.690580 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.46:32852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:03.926306 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.59:44796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:03.926924 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.59:44796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:03.955619 2026] [security2:error] [pid 2411373:tid 2411373] [client 43.153.135.208:50060] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amr-a9EWCml9g6o0NKfG3wAAABw"], referer: http://borovetsexpress.com
[Thu Jul 30 08:34:04.094672 2026] [security2:error] [pid 2411314:tid 2411314] [client 114.119.136.69:31473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-803.xml"] [unique_id "amr-bG7CcAQ8GcgVcTbhqwAAAA8"]
[Thu Jul 30 08:34:04.231179 2026] [ssl:error] [pid 2415708:tid 2415708] (EAI 2)Name or service not known: [client 144.76.19.72:26788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:04.231228 2026] [ssl:error] [pid 2415708:tid 2415708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:04.285404 2026] [ssl:error] [pid 2411221:tid 2411221] (EAI 2)Name or service not known: [client 144.76.19.72:26792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:04.285435 2026] [ssl:error] [pid 2411221:tid 2411221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:04.776937 2026] [ssl:error] [pid 2415331:tid 2415331] (70014)End of file found: [client 216.73.216.199:40604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:05.033641 2026] [security2:error] [pid 2414832:tid 2414832] [client 123.25.147.57:45261] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-bXfoJAK2FyzpXel-RgAAAAs"]
[Thu Jul 30 08:34:05.033688 2026] [security2:error] [pid 2414832:tid 2414832] [client 123.25.147.57:45261] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-bXfoJAK2FyzpXel-RgAAAAs"]
[Thu Jul 30 08:34:05.033928 2026] [security2:error] [pid 2414832:tid 2414832] [client 123.25.147.57:45261] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-bXfoJAK2FyzpXel-RgAAAAs"]
[Thu Jul 30 08:34:05.078227 2026] [ssl:error] [pid 2415778:tid 2415778] (70014)End of file found: [client 216.73.216.199:57169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:06.578770 2026] [security2:error] [pid 2411023:tid 2411023] [client 216.73.216.199:47053] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/resolv.conf"] [unique_id "amr-br8HysstHLiPhJVFFQAAAAA"]
[Thu Jul 30 08:34:06.579059 2026] [security2:error] [pid 2411023:tid 2411023] [client 216.73.216.199:47053] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/resolv.conf"] [unique_id "amr-br8HysstHLiPhJVFFQAAAAA"]
[Thu Jul 30 08:34:06.579310 2026] [security2:error] [pid 2411023:tid 2411023] [client 216.73.216.199:47053] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/resolv.conf"] [unique_id "amr-br8HysstHLiPhJVFFQAAAAA"]
[Thu Jul 30 08:34:06.878648 2026] [core:error] [pid 2411023:tid 2411023] (13)Permission denied: [client 216.73.216.199:47053] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory138/subsystem/uevent
[Thu Jul 30 08:34:07.340114 2026] [ssl:error] [pid 2414832:tid 2414832] (EAI 2)Name or service not known: [client 144.76.19.72:26804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:07.340151 2026] [ssl:error] [pid 2414832:tid 2414832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:07.406141 2026] [ssl:error] [pid 2415833:tid 2415833] (EAI 2)Name or service not known: [client 144.76.19.72:26818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:07.406171 2026] [ssl:error] [pid 2415833:tid 2415833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:07.783104 2026] [ssl:error] [pid 2411023:tid 2411023] (70014)End of file found: [client 216.73.216.199:47053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:08.121466 2026] [security2:error] [pid 2415708:tid 2415708] [client 114.119.130.183:32277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tyredandmotional.co.uk"] [uri "/sitemap.html"] [unique_id "amr-cOPouJ5_BOrIab5qjQAAACQ"]
[Thu Jul 30 08:34:08.325382 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.56:22408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:08.326194 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.56:22408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:09.100807 2026] [security2:error] [pid 2412509:tid 2412509] [client 190.80.51.126:38143] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-cSkbiwJMJ1lx9MIWDAAAADc"]
[Thu Jul 30 08:34:09.100851 2026] [security2:error] [pid 2412509:tid 2412509] [client 190.80.51.126:38143] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-cSkbiwJMJ1lx9MIWDAAAADc"]
[Thu Jul 30 08:34:09.101088 2026] [security2:error] [pid 2412509:tid 2412509] [client 190.80.51.126:38143] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-cSkbiwJMJ1lx9MIWDAAAADc"]
[Thu Jul 30 08:34:09.101234 2026] [authz_core:error] [pid 2411149:tid 2411149] [client 57.141.0.51:22576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:09.101929 2026] [authz_core:error] [pid 2411149:tid 2411149] [client 57.141.0.51:22576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:09.386746 2026] [security2:error] [pid 2415707:tid 2415707] [client 114.119.149.90:47047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/tin-parrot/"] [unique_id "amr-cdGMPIzkW9Q8EWcjlQAAACM"], referer: http://tripodhome.co.uk/product-category/figures
[Thu Jul 30 08:34:09.820033 2026] [security2:error] [pid 2415836:tid 2415836] [client 114.119.130.183:32287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amr-cSTayAtUclV38DFDgwAAAD0"]
[Thu Jul 30 08:34:10.081589 2026] [access_compat:error] [pid 2412472:tid 2412472] [client 106.215.157.145:26208] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:34:10.459879 2026] [ssl:error] [pid 2415331:tid 2415331] (EAI 2)Name or service not known: [client 144.76.19.72:32254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:10.459923 2026] [ssl:error] [pid 2415331:tid 2415331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:10.517255 2026] [ssl:error] [pid 2411614:tid 2411614] (EAI 2)Name or service not known: [client 144.76.19.72:32266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:10.517283 2026] [ssl:error] [pid 2411614:tid 2411614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:10.974284 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.36:63960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:10.975000 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.36:63960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:13.298934 2026] [authz_core:error] [pid 2414918:tid 2414918] [client 57.141.0.20:46142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:13.299556 2026] [authz_core:error] [pid 2414918:tid 2414918] [client 57.141.0.20:46142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:13.573456 2026] [ssl:error] [pid 2411023:tid 2411023] (EAI 2)Name or service not known: [client 144.76.19.72:32282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:13.573482 2026] [ssl:error] [pid 2411023:tid 2411023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:13.625253 2026] [ssl:error] [pid 2414920:tid 2414920] (EAI 2)Name or service not known: [client 144.76.19.72:32296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:13.625298 2026] [ssl:error] [pid 2414920:tid 2414920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:13.988395 2026] [authz_core:error] [pid 2411293:tid 2411293] [client 66.249.66.34:42910] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:34:13.991224 2026] [authz_core:error] [pid 2411293:tid 2411293] [client 66.249.66.34:42910] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:34:14.247567 2026] [lsapi:warn] [pid 2413521:tid 2413521] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:34:14.583530 2026] [authz_core:error] [pid 2414741:tid 2414741] [client 57.141.0.58:23330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:14.584234 2026] [authz_core:error] [pid 2414741:tid 2414741] [client 57.141.0.58:23330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:14.585487 2026] [core:error] [pid 2412509:tid 2412509] (13)Permission denied: [client 216.73.216.199:25009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-280/slabs
[Thu Jul 30 08:34:14.684234 2026] [security2:error] [pid 2414920:tid 2414920] [client 101.33.81.73:41570] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ogsoil.com"] [uri "/"] [unique_id "amr-dv5-Q52M3ddN8cOitgAAACk"]
[Thu Jul 30 08:34:14.885259 2026] [ssl:error] [pid 2412509:tid 2412509] (70014)End of file found: [client 216.73.216.199:25009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:14.951837 2026] [security2:error] [pid 2410998:tid 2410998] [client 47.128.41.94:13426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/tag/blog/"] [unique_id "amr-dmbO7Ve-VHuiZF2Z3AAAABU"]
[Thu Jul 30 08:34:16.677963 2026] [ssl:error] [pid 2411417:tid 2411417] (EAI 2)Name or service not known: [client 144.76.19.72:32298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:16.678024 2026] [ssl:error] [pid 2411417:tid 2411417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:16.730241 2026] [ssl:error] [pid 2415776:tid 2415776] (EAI 2)Name or service not known: [client 144.76.19.72:32304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:16.730277 2026] [ssl:error] [pid 2415776:tid 2415776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:17.159257 2026] [security2:error] [pid 2415660:tid 2415660] [client 47.128.41.94:16066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/cache/wpfc-minified/k2bvsfnt/2m72k.css"] [unique_id "amr-eR5RGmrH_6Ekk1DvFAAAACE"], referer: https://www.wmsfirearmstraining.com/tag/blog/
[Thu Jul 30 08:34:17.302104 2026] [core:error] [pid 2412429:tid 2412429] (13)Permission denied: [client 216.73.216.199:6519] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPLITEv6/destroy_by_rcu
[Thu Jul 30 08:34:17.412218 2026] [authz_core:error] [pid 2415836:tid 2415836] [client 57.141.0.29:23658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:17.412844 2026] [authz_core:error] [pid 2415836:tid 2415836] [client 57.141.0.29:23658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:17.827423 2026] [security2:error] [pid 2415707:tid 2415707] [client 47.128.41.94:16902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2023/10/WMS-Logo-2023-3.jpg"] [unique_id "amr-edGMPIzkW9Q8EWcjlwAAACM"], referer: https://www.wmsfirearmstraining.com/tag/blog/
[Thu Jul 30 08:34:17.898715 2026] [core:error] [pid 2412429:tid 2412429] (13)Permission denied: [client 216.73.216.199:6519] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory206/subsystem/uevent
[Thu Jul 30 08:34:18.199608 2026] [core:error] [pid 2412429:tid 2412429] (13)Permission denied: [client 216.73.216.199:6519] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory141/subsystem/uevent
[Thu Jul 30 08:34:18.833403 2026] [security2:error] [pid 2413521:tid 2413521] [client 47.128.41.94:17904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2019/02/gallery-hero-1.jpg"] [unique_id "amr-emQh2bFfAbwnLtrgvwAAAAI"], referer: https://www.wmsfirearmstraining.com/tag/blog/
[Thu Jul 30 08:34:19.108356 2026] [core:error] [pid 2412429:tid 2412429] (13)Permission denied: [client 216.73.216.199:6519] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_tree_mark/destroy_by_rcu
[Thu Jul 30 08:34:19.358582 2026] [access_compat:error] [pid 2411409:tid 2411409] [client 106.215.157.145:29729] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:34:19.417199 2026] [core:error] [pid 2412429:tid 2412429] (13)Permission denied: [client 216.73.216.199:6519] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/iomem_base
[Thu Jul 30 08:34:19.788041 2026] [ssl:error] [pid 2415836:tid 2415836] (EAI 2)Name or service not known: [client 144.76.19.72:22192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:19.788088 2026] [ssl:error] [pid 2415836:tid 2415836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:19.844600 2026] [ssl:error] [pid 2415778:tid 2415778] (EAI 2)Name or service not known: [client 144.76.19.72:22202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:19.844640 2026] [ssl:error] [pid 2415778:tid 2415778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:20.346039 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 08:34:20.346093 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 08:34:21.089764 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 08:34:21.089797 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 08:34:21.965589 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 08:34:21.965619 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 08:34:22.749345 2026] [core:crit] [pid 2412429:tid 2412429] (13)Permission denied: [client 216.73.216.199:6519] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/sss/secrets/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/sss/secrets/' is executable
[Thu Jul 30 08:34:22.749393 2026] [core:crit] [pid 2412429:tid 2412429] (13)Permission denied: [client 216.73.216.199:6519] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/sss/db/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/sss/db/' is executable
[Thu Jul 30 08:34:22.903158 2026] [ssl:error] [pid 2415660:tid 2415660] (EAI 2)Name or service not known: [client 144.76.19.72:22214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:22.903194 2026] [ssl:error] [pid 2415660:tid 2415660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:22.948442 2026] [authz_core:error] [pid 2414920:tid 2414920] [client 57.141.0.56:27640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:22.949057 2026] [authz_core:error] [pid 2414920:tid 2414920] [client 57.141.0.56:27640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:22.959542 2026] [ssl:error] [pid 2415835:tid 2415835] (EAI 2)Name or service not known: [client 144.76.19.72:22228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:22.959577 2026] [ssl:error] [pid 2415835:tid 2415835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:23.934930 2026] [authz_core:error] [pid 2414920:tid 2414920] [client 57.141.0.37:51526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:23.935554 2026] [authz_core:error] [pid 2414920:tid 2414920] [client 57.141.0.37:51526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:24.092849 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 08:34:24.092882 2026] [lsapi:warn] [pid 2415708:tid 2415708] [client 109.152.115.77:55393] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 08:34:24.241130 2026] [ssl:error] [pid 2412429:tid 2412429] (70014)End of file found: [client 216.73.216.199:6519] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:24.874323 2026] [lsapi:warn] [pid 2415833:tid 2415833] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:34:25.017405 2026] [ssl:error] [pid 2412472:tid 2412472] (70014)End of file found: [client 216.73.216.199:62390] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:25.144422 2026] [ssl:error] [pid 2414919:tid 2414919] (70014)End of file found: [client 216.73.216.199:35181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:26.013691 2026] [ssl:error] [pid 2411000:tid 2411000] (EAI 2)Name or service not known: [client 144.76.19.72:22244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:26.013728 2026] [ssl:error] [pid 2411000:tid 2411000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:26.069761 2026] [ssl:error] [pid 2415833:tid 2415833] (EAI 2)Name or service not known: [client 144.76.19.72:22256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:26.069785 2026] [ssl:error] [pid 2415833:tid 2415833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:27.481985 2026] [authz_core:error] [pid 2411419:tid 2411419] [client 57.141.0.20:56344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:27.482617 2026] [authz_core:error] [pid 2411419:tid 2411419] [client 57.141.0.20:56344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:29.124450 2026] [ssl:error] [pid 2415833:tid 2415833] (EAI 2)Name or service not known: [client 144.76.19.72:22272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:29.124518 2026] [ssl:error] [pid 2415833:tid 2415833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:29.176407 2026] [ssl:error] [pid 2415708:tid 2415708] (EAI 2)Name or service not known: [client 144.76.19.72:22274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:29.176432 2026] [ssl:error] [pid 2415708:tid 2415708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:29.538694 2026] [authz_core:error] [pid 2412506:tid 2412506] [client 57.141.0.36:45252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:29.539317 2026] [authz_core:error] [pid 2412506:tid 2412506] [client 57.141.0.36:45252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:29.931413 2026] [access_compat:error] [pid 2411315:tid 2411315] [client 106.215.157.145:14848] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:34:30.260756 2026] [core:error] [pid 2413521:tid 2413521] (13)Permission denied: [client 216.73.216.199:30189] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS2/iomem_base
[Thu Jul 30 08:34:30.561412 2026] [core:error] [pid 2413521:tid 2413521] (13)Permission denied: [client 216.73.216.199:30189] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory245/subsystem/uevent
[Thu Jul 30 08:34:31.071056 2026] [authz_core:error] [pid 2412509:tid 2412509] [client 57.141.0.43:57196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:31.071735 2026] [authz_core:error] [pid 2412509:tid 2412509] [client 57.141.0.43:57196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:31.465220 2026] [ssl:error] [pid 2413521:tid 2413521] (70014)End of file found: [client 216.73.216.199:30189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:32.070888 2026] [ssl:error] [pid 2411314:tid 2411314] (70014)End of file found: [client 216.73.216.199:45220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:32.229963 2026] [ssl:error] [pid 2412472:tid 2412472] (EAI 2)Name or service not known: [client 144.76.19.72:30502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:32.229999 2026] [ssl:error] [pid 2412472:tid 2412472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:32.283202 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:30512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:32.283238 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:33.622625 2026] [authz_core:error] [pid 2412502:tid 2412502] [client 57.141.0.63:53260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:33.623251 2026] [authz_core:error] [pid 2412502:tid 2412502] [client 57.141.0.63:53260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:34.179351 2026] [ssl:error] [pid 2411106:tid 2411106] (70014)End of file found: [client 216.73.216.199:17799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:34.648957 2026] [authz_core:error] [pid 2412509:tid 2412509] [client 57.141.0.56:59980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:34.649586 2026] [authz_core:error] [pid 2412509:tid 2412509] [client 57.141.0.56:59980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:35.210781 2026] [security2:error] [pid 2411373:tid 2411373] [client 170.106.72.178:38674] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amr-i9EWCml9g6o0NKfG6wAAABw"]
[Thu Jul 30 08:34:35.297314 2026] [authz_core:error] [pid 2415777:tid 2415777] [client 57.141.0.46:44098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:35.297932 2026] [authz_core:error] [pid 2415777:tid 2415777] [client 57.141.0.46:44098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:35.402620 2026] [ssl:error] [pid 2415777:tid 2415777] (EAI 2)Name or service not known: [client 144.76.19.72:30520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:35.402654 2026] [ssl:error] [pid 2415777:tid 2415777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:35.463525 2026] [lsapi:warn] [pid 2411316:tid 2411316] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:34:35.469482 2026] [ssl:error] [pid 2412507:tid 2412507] (EAI 2)Name or service not known: [client 144.76.19.72:30524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:35.469502 2026] [ssl:error] [pid 2412507:tid 2412507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:36.370357 2026] [access_compat:error] [pid 2412507:tid 2412507] [client 106.215.157.145:27362] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:34:36.945719 2026] [core:error] [pid 2411417:tid 2411417] (13)Permission denied: [client 216.73.216.199:12250] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/console/subsystem/ttyS2/uartclk
[Thu Jul 30 08:34:37.146410 2026] [security2:error] [pid 2412509:tid 2412509] [client 114.119.148.174:21601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/"] [unique_id "amr-jSkbiwJMJ1lx9MIWJAAAADc"], referer: https://www.jonathanmeyerart.com/
[Thu Jul 30 08:34:37.246744 2026] [ssl:error] [pid 2411315:tid 2411315] (70014)End of file found: [client 216.73.216.199:17456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:37.797118 2026] [cgi:error] [pid 2411419:tid 2411419] [client 20.220.15.170:51148] AH02812: stderr from /home/alismcom/public_html/static3/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:34:37.894573 2026] [security2:error] [pid 2412474:tid 2412474] [client 170.106.72.178:37748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amr-jZDxY3fypotl7b9owwAAAB4"], referer: http://www.prosperon.co.uk
[Thu Jul 30 08:34:38.113741 2026] [authz_core:error] [pid 2412507:tid 2412507] [client 57.141.0.30:53984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:38.114371 2026] [authz_core:error] [pid 2412507:tid 2412507] [client 57.141.0.30:53984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:38.527470 2026] [ssl:error] [pid 2412507:tid 2412507] (EAI 2)Name or service not known: [client 144.76.19.72:30538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:38.527492 2026] [ssl:error] [pid 2412507:tid 2412507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:38.539663 2026] [authz_core:error] [pid 2415834:tid 2415834] [client 135.119.63.61:35937] AH01630: client denied by server configuration: /home/jdmedi/public_html/libraries/vendor/updates.php
[Thu Jul 30 08:34:38.582351 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:30546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:38.582374 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:38.621687 2026] [lsapi:warn] [pid 2414919:tid 2414919] [client 109.152.115.77:60672] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 08:34:38.621740 2026] [lsapi:warn] [pid 2414919:tid 2414919] [client 109.152.115.77:60672] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 08:34:39.414603 2026] [authz_core:error] [pid 2415839:tid 2415839] [client 57.141.0.5:60444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:39.415241 2026] [authz_core:error] [pid 2415839:tid 2415839] [client 57.141.0.5:60444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:40.468526 2026] [access_compat:error] [pid 2415778:tid 2415778] [client 106.215.157.145:5431] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:34:40.493131 2026] [lsapi:warn] [pid 2414919:tid 2414919] [client 109.152.115.77:60672] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 08:34:40.493164 2026] [lsapi:warn] [pid 2414919:tid 2414919] [client 109.152.115.77:60672] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 08:34:40.560998 2026] [ssl:error] [pid 2411417:tid 2411417] (70014)End of file found: [client 216.73.216.199:12250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:40.866852 2026] [ssl:error] [pid 2415839:tid 2415839] (70014)End of file found: [client 216.73.216.199:1110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:41.202272 2026] [security2:error] [pid 2413521:tid 2413521] [client 114.119.135.84:20635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/images/23_supermario_4_3.png"] [unique_id "amr-kWQh2bFfAbwnLtrgzwAAAAI"], referer: https://www.robin64.co.uk/customborders
[Thu Jul 30 08:34:41.637093 2026] [ssl:error] [pid 2417229:tid 2417229] (EAI 2)Name or service not known: [client 144.76.19.72:27968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:41.637124 2026] [ssl:error] [pid 2417229:tid 2417229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:41.693500 2026] [ssl:error] [pid 2417171:tid 2417171] (EAI 2)Name or service not known: [client 144.76.19.72:27974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:41.693526 2026] [ssl:error] [pid 2417171:tid 2417171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:41.699979 2026] [authz_core:error] [pid 2417359:tid 2417359] [client 57.141.0.59:27310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:41.700708 2026] [authz_core:error] [pid 2417359:tid 2417359] [client 57.141.0.59:27310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:42.558246 2026] [ssl:error] [pid 2417171:tid 2417171] (70014)End of file found: [client 216.73.216.199:65406] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:43.383187 2026] [authz_core:error] [pid 2411315:tid 2411315] [client 57.141.0.21:21350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:43.383814 2026] [authz_core:error] [pid 2411315:tid 2411315] [client 57.141.0.21:21350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:44.536051 2026] [authz_core:error] [pid 2411366:tid 2411366] [client 57.141.0.58:50624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:44.536701 2026] [authz_core:error] [pid 2411366:tid 2411366] [client 57.141.0.58:50624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:44.749828 2026] [ssl:error] [pid 2417359:tid 2417359] (EAI 2)Name or service not known: [client 144.76.19.72:27984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:44.749867 2026] [ssl:error] [pid 2417359:tid 2417359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:44.835744 2026] [ssl:error] [pid 2411000:tid 2411000] (EAI 2)Name or service not known: [client 144.76.19.72:27992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:44.835771 2026] [ssl:error] [pid 2411000:tid 2411000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:46.098125 2026] [lsapi:warn] [pid 2415660:tid 2415660] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:34:46.548073 2026] [security2:error] [pid 2411373:tid 2411373] [client 114.119.155.144:39031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~30,15,104/request_format~html"] [unique_id "amr-ltEWCml9g6o0NKfG7gAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~30,15/request_format~html
[Thu Jul 30 08:34:46.774898 2026] [ssl:error] [pid 2414741:tid 2414741] (70014)End of file found: [client 216.73.216.199:11575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:47.075857 2026] [ssl:error] [pid 2411000:tid 2411000] (70014)End of file found: [client 216.73.216.199:21781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:47.895552 2026] [ssl:error] [pid 2414918:tid 2414918] (EAI 2)Name or service not known: [client 144.76.19.72:27994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:47.895595 2026] [ssl:error] [pid 2414918:tid 2414918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:47.948957 2026] [ssl:error] [pid 2411128:tid 2411128] (EAI 2)Name or service not known: [client 144.76.19.72:28004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:47.948978 2026] [ssl:error] [pid 2411128:tid 2411128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:48.295122 2026] [ssl:error] [pid 2417514:tid 2417514] (70014)End of file found: [client 216.73.216.199:43055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:48.585521 2026] [security2:error] [pid 2417359:tid 2417359] [client 114.119.155.144:47657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~30,15,104/request_format~html"] [unique_id "amr-mJdHM0Q3k_-GCTkjnQAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~30,15/request_format~html
[Thu Jul 30 08:34:48.651881 2026] [authz_core:error] [pid 2411373:tid 2411373] [client 66.249.66.34:41426] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:34:48.654523 2026] [authz_core:error] [pid 2411373:tid 2411373] [client 66.249.66.34:41426] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:34:48.659938 2026] [authz_core:error] [pid 2411417:tid 2411417] [client 57.141.0.8:33820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:48.660556 2026] [authz_core:error] [pid 2411417:tid 2411417] [client 57.141.0.8:33820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:48.896866 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.69:30496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:48.897484 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.69:30496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:50.311257 2026] [authz_core:error] [pid 2414917:tid 2414917] [client 57.141.0.63:29774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:50.311888 2026] [authz_core:error] [pid 2414917:tid 2414917] [client 57.141.0.63:29774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:50.920862 2026] [access_compat:error] [pid 2417359:tid 2417359] [client 106.215.157.145:8285] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:34:51.005454 2026] [ssl:error] [pid 2417870:tid 2417870] (EAI 2)Name or service not known: [client 144.76.19.72:46306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:51.005491 2026] [ssl:error] [pid 2417870:tid 2417870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:51.060208 2026] [ssl:error] [pid 2414917:tid 2414917] (EAI 2)Name or service not known: [client 144.76.19.72:46322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:51.060236 2026] [ssl:error] [pid 2414917:tid 2414917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:51.151602 2026] [authz_core:error] [pid 2415835:tid 2415835] [client 57.141.0.1:44244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:51.152230 2026] [authz_core:error] [pid 2415835:tid 2415835] [client 57.141.0.1:44244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:51.441189 2026] [access_compat:error] [pid 2417985:tid 2417985] [client 45.158.164.139:38636] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:34:52.209335 2026] [ssl:error] [pid 2415778:tid 2415778] (70014)End of file found: [client 216.73.216.199:25810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:54.118179 2026] [ssl:error] [pid 2415833:tid 2415833] (EAI 2)Name or service not known: [client 144.76.19.72:46328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:54.118225 2026] [ssl:error] [pid 2415833:tid 2415833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:54.175868 2026] [ssl:error] [pid 2411373:tid 2411373] (EAI 2)Name or service not known: [client 144.76.19.72:46330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:54.175895 2026] [ssl:error] [pid 2411373:tid 2411373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:54.320117 2026] [authz_core:error] [pid 2412429:tid 2412429] [client 57.141.0.25:24402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:54.320737 2026] [authz_core:error] [pid 2412429:tid 2412429] [client 57.141.0.25:24402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:54.328111 2026] [ssl:error] [pid 2411106:tid 2411106] (70014)End of file found: [client 216.73.216.199:1753] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:54.605497 2026] [authz_core:error] [pid 2415776:tid 2415776] [client 57.141.0.59:47146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:54.606153 2026] [authz_core:error] [pid 2415776:tid 2415776] [client 57.141.0.59:47146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:55.230396 2026] [ssl:error] [pid 2411315:tid 2411315] (70014)End of file found: [client 216.73.216.199:58535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:56.719021 2026] [lsapi:warn] [pid 2412472:tid 2412472] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:34:57.234147 2026] [ssl:error] [pid 2414920:tid 2414920] (EAI 2)Name or service not known: [client 144.76.19.72:46342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:57.234174 2026] [ssl:error] [pid 2414920:tid 2414920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:57.286962 2026] [ssl:error] [pid 2411128:tid 2411128] (EAI 2)Name or service not known: [client 144.76.19.72:46346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:34:57.286987 2026] [ssl:error] [pid 2411128:tid 2411128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:34:58.231281 2026] [security2:error] [pid 2415776:tid 2415776] [client 124.156.157.91:41784] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amr-oiLkEMNU1uzk-9suswAAADI"]
[Thu Jul 30 08:34:58.239853 2026] [ssl:error] [pid 2411366:tid 2411366] (70014)End of file found: [client 216.73.216.199:1689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:34:58.543291 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 16.59.59.72:48830] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:34:58.545937 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 16.59.59.72:48830] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:34:58.720339 2026] [security2:error] [pid 2411417:tid 2411417] [client 51.68.107.159:9307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amr-otRH0BKfuOPG3wTKdwAAACs"]
[Thu Jul 30 08:34:59.110090 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.67:39564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:59.110709 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.67:39564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:34:59.188901 2026] [security2:error] [pid 2415708:tid 2415708] [client 124.156.157.91:42106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amr-o-PouJ5_BOrIab5qpAAAACQ"], referer: http://www.georgehotelofstamford.com
[Thu Jul 30 08:34:59.765673 2026] [authz_core:error] [pid 2417358:tid 2417358] [client 57.141.0.38:58022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:34:59.766302 2026] [authz_core:error] [pid 2417358:tid 2417358] [client 57.141.0.38:58022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:00.343570 2026] [ssl:error] [pid 2417358:tid 2417358] (EAI 2)Name or service not known: [client 144.76.19.72:30380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:00.343606 2026] [ssl:error] [pid 2417358:tid 2417358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:00.401130 2026] [ssl:error] [pid 2417171:tid 2417171] (EAI 2)Name or service not known: [client 144.76.19.72:30386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:00.401158 2026] [ssl:error] [pid 2417171:tid 2417171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:00.927171 2026] [ssl:error] [pid 2415708:tid 2415708] (70014)End of file found: [client 216.73.216.199:37616] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:01.665756 2026] [security2:error] [pid 2412474:tid 2412474] [client 47.128.45.68:47646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/robots.txt"] [unique_id "amr-pZDxY3fypotl7b9ozQAAAB4"]
[Thu Jul 30 08:35:01.840483 2026] [ssl:error] [pid 2414917:tid 2414917] (70014)End of file found: [client 216.73.216.199:30060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:01.916746 2026] [access_compat:error] [pid 2417358:tid 2417358] [client 106.215.157.145:20501] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:02.327416 2026] [core:error] [pid 2414865:tid 2414865] (13)Permission denied: [client 216.73.216.199:17856] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/serial8250/bind
[Thu Jul 30 08:35:02.334469 2026] [lsapi:warn] [pid 2412429:tid 2412429] [client 64.71.166.38:30400] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:35:02.334523 2026] [lsapi:warn] [pid 2412429:tid 2412429] [client 64.71.166.38:30400] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:35:02.559353 2026] [access_compat:error] [pid 2417171:tid 2417171] [client 217.164.239.74:45660] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/2006, referer: https://blog.alism.com/2006/09/page/2/?nomobile
[Thu Jul 30 08:35:02.559475 2026] [access_compat:error] [pid 2417171:tid 2417171] [client 217.164.239.74:45660] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/2006/09/page/2/?nomobile
[Thu Jul 30 08:35:02.739181 2026] [ssl:error] [pid 2414865:tid 2414865] (70014)End of file found: [client 216.73.216.199:17856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:03.172876 2026] [security2:error] [pid 2415836:tid 2415836] [client 47.128.45.68:24098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/403.shtml"] [unique_id "amr-pyTayAtUclV38DFD5QAAAD0"]
[Thu Jul 30 08:35:03.456473 2026] [ssl:error] [pid 2412429:tid 2412429] (EAI 2)Name or service not known: [client 144.76.19.72:30388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:03.456502 2026] [ssl:error] [pid 2412429:tid 2412429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:03.514090 2026] [ssl:error] [pid 2415331:tid 2415331] (EAI 2)Name or service not known: [client 144.76.19.72:30390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:03.514117 2026] [ssl:error] [pid 2415331:tid 2415331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:04.000314 2026] [security2:error] [pid 2411316:tid 2411316] [client 103.190.47.110:37806] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-p_c2RhBRMR9CcGYgXgAAABE"]
[Thu Jul 30 08:35:04.000357 2026] [security2:error] [pid 2411316:tid 2411316] [client 103.190.47.110:37806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-p_c2RhBRMR9CcGYgXgAAABE"]
[Thu Jul 30 08:35:04.000602 2026] [security2:error] [pid 2411316:tid 2411316] [client 103.190.47.110:37806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-p_c2RhBRMR9CcGYgXgAAABE"]
[Thu Jul 30 08:35:05.419913 2026] [authz_core:error] [pid 2415331:tid 2415331] [client 57.141.0.2:48664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:05.420545 2026] [authz_core:error] [pid 2415331:tid 2415331] [client 57.141.0.2:48664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:06.411721 2026] [ssl:error] [pid 2415778:tid 2415778] (70014)End of file found: [client 216.73.216.199:4592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:06.588882 2026] [ssl:error] [pid 2412506:tid 2412506] (EAI 2)Name or service not known: [client 144.76.19.72:30396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:06.588917 2026] [ssl:error] [pid 2412506:tid 2412506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:06.643142 2026] [ssl:error] [pid 2418020:tid 2418020] (EAI 2)Name or service not known: [client 144.76.19.72:30398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:06.643172 2026] [ssl:error] [pid 2418020:tid 2418020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:07.085577 2026] [access_compat:error] [pid 2411409:tid 2411409] [client 169.58.39.192:53151] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/, referer: binance.com
[Thu Jul 30 08:35:07.085650 2026] [access_compat:error] [pid 2411409:tid 2411409] [client 169.58.39.192:53151] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/, referer: binance.com
[Thu Jul 30 08:35:07.088347 2026] [access_compat:error] [pid 2411409:tid 2411409] [client 169.58.39.192:53151] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/, referer: binance.com
[Thu Jul 30 08:35:07.089447 2026] [access_compat:error] [pid 2411409:tid 2411409] [client 169.58.39.192:53151] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/, referer: binance.com
[Thu Jul 30 08:35:07.219462 2026] [ssl:error] [pid 2417171:tid 2417171] (70014)End of file found: [client 216.73.216.199:35449] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:07.299986 2026] [lsapi:warn] [pid 2411366:tid 2411366] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:35:09.059722 2026] [authz_core:error] [pid 2415839:tid 2415839] [client 57.141.0.56:54510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:09.060358 2026] [authz_core:error] [pid 2415839:tid 2415839] [client 57.141.0.56:54510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:09.460741 2026] [ssl:error] [pid 2411409:tid 2411409] (70014)End of file found: [client 216.73.216.199:49992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:09.718784 2026] [ssl:error] [pid 2410999:tid 2410999] (EAI 2)Name or service not known: [client 144.76.19.72:62902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:09.718820 2026] [ssl:error] [pid 2410999:tid 2410999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:09.775115 2026] [ssl:error] [pid 2414917:tid 2414917] (EAI 2)Name or service not known: [client 144.76.19.72:62904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:09.775146 2026] [ssl:error] [pid 2414917:tid 2414917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:10.596226 2026] [authz_core:error] [pid 2417870:tid 2417870] [client 57.141.0.40:61030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:10.596845 2026] [authz_core:error] [pid 2417870:tid 2417870] [client 57.141.0.40:61030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:11.787605 2026] [ssl:error] [pid 2411315:tid 2411315] (70014)End of file found: [client 216.73.216.199:55507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:11.897744 2026] [access_compat:error] [pid 2415708:tid 2415708] [client 106.215.157.145:2421] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:12.686128 2026] [ssl:error] [pid 2417870:tid 2417870] (70014)End of file found: [client 216.73.216.199:44984] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:12.853854 2026] [ssl:error] [pid 2418535:tid 2418535] (EAI 2)Name or service not known: [client 144.76.19.72:62912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:12.853890 2026] [ssl:error] [pid 2418535:tid 2418535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:12.907621 2026] [ssl:error] [pid 2417985:tid 2417985] (EAI 2)Name or service not known: [client 144.76.19.72:62920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:12.907657 2026] [ssl:error] [pid 2417985:tid 2417985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:14.804628 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.66:50376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:14.805251 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.66:50376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:15.203306 2026] [security2:error] [pid 2415839:tid 2415839] [client 94.154.43.183:40354] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hugoashmore.org"] [uri "/.env"] [unique_id "amr-sxqtN_-M-_mXM4lPrAAAAD8"]
[Thu Jul 30 08:35:15.203440 2026] [security2:error] [pid 2415839:tid 2415839] [client 94.154.43.183:40354] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hugoashmore.org"] [uri "/.env"] [unique_id "amr-sxqtN_-M-_mXM4lPrAAAAD8"]
[Thu Jul 30 08:35:15.203673 2026] [security2:error] [pid 2415839:tid 2415839] [client 94.154.43.183:40354] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hugoashmore.org"] [uri "/.env"] [unique_id "amr-sxqtN_-M-_mXM4lPrAAAAD8"]
[Thu Jul 30 08:35:15.504578 2026] [ssl:error] [pid 2417171:tid 2417171] (70014)End of file found: [client 216.73.216.199:59150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:15.962729 2026] [ssl:error] [pid 2415839:tid 2415839] (EAI 2)Name or service not known: [client 144.76.19.72:62932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:15.962763 2026] [ssl:error] [pid 2415839:tid 2415839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:16.019809 2026] [ssl:error] [pid 2415776:tid 2415776] (EAI 2)Name or service not known: [client 144.76.19.72:62936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:16.019852 2026] [ssl:error] [pid 2415776:tid 2415776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:16.086285 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.22:51636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:16.086911 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.22:51636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:17.104991 2026] [authz_core:error] [pid 2414917:tid 2414917] [client 57.141.0.41:45684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:17.105639 2026] [authz_core:error] [pid 2414917:tid 2414917] [client 57.141.0.41:45684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:17.212190 2026] [ssl:error] [pid 2415836:tid 2415836] (70014)End of file found: [client 216.73.216.199:38515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:17.900392 2026] [lsapi:warn] [pid 2418021:tid 2418021] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:35:18.109057 2026] [ssl:error] [pid 2414917:tid 2414917] (70014)End of file found: [client 216.73.216.199:51667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:18.603887 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.20:35172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:18.605118 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.20:35172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:18.628687 2026] [authz_core:error] [pid 2418021:tid 2418021] [client 169.58.39.192:57432] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 08:35:18.942796 2026] [security2:error] [pid 2412507:tid 2412507] [client 49.51.233.46:55306] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sudokulogicapp.com"] [uri "/"] [unique_id "amr-trqaA9Ba2AB974QV7gAAADU"]
[Thu Jul 30 08:35:19.122790 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:62940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:19.122814 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:19.174696 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:62954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:19.174731 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:20.111426 2026] [authz_core:error] [pid 2418021:tid 2418021] [client 57.141.0.60:54512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:20.112047 2026] [authz_core:error] [pid 2418021:tid 2418021] [client 57.141.0.60:54512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:20.286844 2026] [core:error] [pid 2411420:tid 2411420] [client 66.249.66.8:65268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:35:20.286868 2026] [core:error] [pid 2411420:tid 2411420] [client 66.249.66.8:65268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:35:20.839802 2026] [ssl:error] [pid 2417171:tid 2417171] (70014)End of file found: [client 216.73.216.199:1352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:22.229273 2026] [ssl:error] [pid 2418302:tid 2418302] (EAI 2)Name or service not known: [client 144.76.19.72:19352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:22.229303 2026] [ssl:error] [pid 2418302:tid 2418302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:22.280949 2026] [ssl:error] [pid 2412472:tid 2412472] (EAI 2)Name or service not known: [client 144.76.19.72:19356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:22.280973 2026] [ssl:error] [pid 2412472:tid 2412472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:22.452032 2026] [access_compat:error] [pid 2417514:tid 2417514] [client 106.215.157.145:5192] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:22.632306 2026] [security2:error] [pid 2415331:tid 2415331] [client 216.73.216.199:43654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/unbound/root.key"] [unique_id "amr-uube3ErtEKRPEivmrQAAAAQ"]
[Thu Jul 30 08:35:22.632592 2026] [security2:error] [pid 2415331:tid 2415331] [client 216.73.216.199:43654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/unbound/root.key"] [unique_id "amr-uube3ErtEKRPEivmrQAAAAQ"]
[Thu Jul 30 08:35:22.632809 2026] [security2:error] [pid 2415331:tid 2415331] [client 216.73.216.199:43654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/unbound/root.key"] [unique_id "amr-uube3ErtEKRPEivmrQAAAAQ"]
[Thu Jul 30 08:35:22.745209 2026] [ssl:error] [pid 2415331:tid 2415331] (70014)End of file found: [client 216.73.216.199:43654] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:23.283958 2026] [authz_core:error] [pid 2419172:tid 2419172] [client 169.58.39.192:58972] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 08:35:24.330016 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.65:28614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:24.330646 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.65:28614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:25.178616 2026] [core:error] [pid 2411315:tid 2411315] (13)Permission denied: [client 216.73.216.199:44347] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS2/closing_wait
[Thu Jul 30 08:35:25.261411 2026] [authz_core:error] [pid 2417870:tid 2417870] [client 57.141.0.35:59784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:25.262036 2026] [authz_core:error] [pid 2417870:tid 2417870] [client 57.141.0.35:59784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:25.336144 2026] [ssl:error] [pid 2412509:tid 2412509] (EAI 2)Name or service not known: [client 144.76.19.72:19372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:25.336188 2026] [ssl:error] [pid 2412509:tid 2412509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:25.388022 2026] [ssl:error] [pid 2411373:tid 2411373] (EAI 2)Name or service not known: [client 144.76.19.72:19376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:25.388058 2026] [ssl:error] [pid 2411373:tid 2411373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:25.479727 2026] [ssl:error] [pid 2411315:tid 2411315] (70014)End of file found: [client 216.73.216.199:44347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:26.680661 2026] [ssl:error] [pid 2411417:tid 2411417] (70014)End of file found: [client 216.73.216.199:52877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:27.623344 2026] [security2:error] [pid 2411314:tid 2411314] [client 85.208.96.210:37140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amr-v27CcAQ8GcgVcTbiJwAAAA8"]
[Thu Jul 30 08:35:27.790244 2026] [security2:error] [pid 2415778:tid 2415778] [client 165.16.188.47:5641] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-vxQlIytBsvBD-_AlmgAAADY"]
[Thu Jul 30 08:35:27.790286 2026] [security2:error] [pid 2415778:tid 2415778] [client 165.16.188.47:5641] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-vxQlIytBsvBD-_AlmgAAADY"]
[Thu Jul 30 08:35:27.790503 2026] [security2:error] [pid 2415778:tid 2415778] [client 165.16.188.47:5641] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-vxQlIytBsvBD-_AlmgAAADY"]
[Thu Jul 30 08:35:28.076801 2026] [core:error] [pid 2411373:tid 2411373] (13)Permission denied: [client 216.73.216.199:22250] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/hid/drivers/ntrig/bind
[Thu Jul 30 08:35:28.191846 2026] [ssl:error] [pid 2411373:tid 2411373] (70014)End of file found: [client 216.73.216.199:22250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:28.440101 2026] [ssl:error] [pid 2415331:tid 2415331] (EAI 2)Name or service not known: [client 144.76.19.72:19380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:28.440128 2026] [ssl:error] [pid 2415331:tid 2415331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:28.493485 2026] [ssl:error] [pid 2415778:tid 2415778] (EAI 2)Name or service not known: [client 144.76.19.72:19388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:28.493512 2026] [ssl:error] [pid 2415778:tid 2415778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:28.495132 2026] [lsapi:warn] [pid 2414864:tid 2414864] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:35:28.763632 2026] [access_compat:error] [pid 2417870:tid 2417870] [client 106.215.157.145:20995] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:30.044767 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.3:23388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:30.045401 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.3:23388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:30.783118 2026] [core:error] [pid 2415660:tid 2415660] (13)Permission denied: [client 216.73.216.199:22219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS0/flags
[Thu Jul 30 08:35:31.219117 2026] [authz_core:error] [pid 2411106:tid 2411106] [client 57.141.0.23:49160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:31.219728 2026] [authz_core:error] [pid 2411106:tid 2411106] [client 57.141.0.23:49160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:31.548709 2026] [ssl:error] [pid 2415839:tid 2415839] (EAI 2)Name or service not known: [client 144.76.19.72:52042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:31.548755 2026] [ssl:error] [pid 2415839:tid 2415839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:31.605803 2026] [ssl:error] [pid 2419172:tid 2419172] (EAI 2)Name or service not known: [client 144.76.19.72:52052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:31.605836 2026] [ssl:error] [pid 2419172:tid 2419172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:31.799532 2026] [ssl:error] [pid 2415660:tid 2415660] (70014)End of file found: [client 216.73.216.199:22219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:31.848825 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.26:36292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:31.849461 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.26:36292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:32.409147 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:20703] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:32.981934 2026] [access_compat:error] [pid 2411415:tid 2411415] [client 106.215.157.145:26589] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:34.664470 2026] [ssl:error] [pid 2418302:tid 2418302] (EAI 2)Name or service not known: [client 144.76.19.72:52054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:34.664501 2026] [ssl:error] [pid 2418302:tid 2418302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:34.717450 2026] [ssl:error] [pid 2417358:tid 2417358] (EAI 2)Name or service not known: [client 144.76.19.72:52056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:34.717478 2026] [ssl:error] [pid 2417358:tid 2417358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:35.458521 2026] [ssl:error] [pid 2414864:tid 2414864] (70014)End of file found: [client 216.73.216.199:59793] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:36.301018 2026] [authz_core:error] [pid 2418302:tid 2418302] [client 57.141.0.52:64598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:36.301659 2026] [authz_core:error] [pid 2418302:tid 2418302] [client 57.141.0.52:64598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:36.846416 2026] [authz_core:error] [pid 2419081:tid 2419081] [client 57.141.0.2:33580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:36.847034 2026] [authz_core:error] [pid 2419081:tid 2419081] [client 57.141.0.2:33580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:37.617116 2026] [ssl:error] [pid 2412507:tid 2412507] (70014)End of file found: [client 216.73.216.199:15889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:37.786519 2026] [security2:error] [pid 2412472:tid 2412472] [client 39.34.129.174:52001] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-yS8z5UsblH75uX6kOQAAABc"]
[Thu Jul 30 08:35:37.786580 2026] [security2:error] [pid 2412472:tid 2412472] [client 39.34.129.174:52001] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-yS8z5UsblH75uX6kOQAAABc"]
[Thu Jul 30 08:35:37.786844 2026] [security2:error] [pid 2412472:tid 2412472] [client 39.34.129.174:52001] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-yS8z5UsblH75uX6kOQAAABc"]
[Thu Jul 30 08:35:37.863231 2026] [ssl:error] [pid 2410999:tid 2410999] (EAI 2)Name or service not known: [client 144.76.19.72:52066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:37.863288 2026] [ssl:error] [pid 2410999:tid 2410999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:37.920693 2026] [ssl:error] [pid 2415839:tid 2415839] (EAI 2)Name or service not known: [client 144.76.19.72:52082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:37.920733 2026] [ssl:error] [pid 2415839:tid 2415839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:39.172671 2026] [lsapi:warn] [pid 2415839:tid 2415839] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:35:39.315638 2026] [access_compat:error] [pid 2411315:tid 2411315] [client 106.215.157.145:26987] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:40.066524 2026] [core:error] [pid 2410999:tid 2410999] (13)Permission denied: [client 216.73.216.199:61268] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/subsystem/ttyS0/flags
[Thu Jul 30 08:35:40.159673 2026] [authz_core:error] [pid 2419607:tid 2419607] [client 57.141.0.32:53260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:40.160298 2026] [authz_core:error] [pid 2419607:tid 2419607] [client 57.141.0.32:53260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:40.676030 2026] [authz_core:error] [pid 2419607:tid 2419607] [client 57.141.0.16:53958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:40.676655 2026] [authz_core:error] [pid 2419607:tid 2419607] [client 57.141.0.16:53958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:40.951902 2026] [authz_core:error] [pid 2419665:tid 2419665] [client 57.141.0.38:59454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:40.952556 2026] [authz_core:error] [pid 2419665:tid 2419665] [client 57.141.0.38:59454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:40.979205 2026] [ssl:error] [pid 2415660:tid 2415660] (EAI 2)Name or service not known: [client 144.76.19.72:19646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:40.979248 2026] [ssl:error] [pid 2415660:tid 2415660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:40.986969 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:61268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:41.033990 2026] [ssl:error] [pid 2411106:tid 2411106] (EAI 2)Name or service not known: [client 144.76.19.72:19658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:41.034043 2026] [ssl:error] [pid 2411106:tid 2411106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:41.494229 2026] [ssl:error] [pid 2414864:tid 2414864] (70014)End of file found: [client 216.73.216.199:3829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:43.009150 2026] [core:error] [pid 2411409:tid 2411409] (13)Permission denied: [client 216.73.216.199:21370] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty24/subsystem/ttyS0/flags
[Thu Jul 30 08:35:44.026894 2026] [ssl:error] [pid 2411409:tid 2411409] (70014)End of file found: [client 216.73.216.199:21370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:44.088599 2026] [ssl:error] [pid 2412474:tid 2412474] (EAI 2)Name or service not known: [client 144.76.19.72:19672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:44.088625 2026] [ssl:error] [pid 2412474:tid 2412474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:44.140332 2026] [ssl:error] [pid 2415660:tid 2415660] (EAI 2)Name or service not known: [client 144.76.19.72:19676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:44.140358 2026] [ssl:error] [pid 2415660:tid 2415660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:44.933757 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 106.215.157.145:25905] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:45.847607 2026] [core:error] [pid 2419665:tid 2419665] [client 57.141.0.68:46452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:35:45.847632 2026] [core:error] [pid 2419665:tid 2419665] [client 57.141.0.68:46452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:35:46.449468 2026] [security2:error] [pid 2418302:tid 2418302] [client 175.27.163.171:36984] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amr-0up682fDSrpTRC3ZuAAAACM"]
[Thu Jul 30 08:35:46.777841 2026] [ssl:error] [pid 2415660:tid 2415660] (70014)End of file found: [client 216.73.216.199:57215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:47.101752 2026] [authz_core:error] [pid 2414917:tid 2414917] [client 57.141.0.53:61262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:47.102377 2026] [authz_core:error] [pid 2414917:tid 2414917] [client 57.141.0.53:61262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:47.195975 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:19678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:47.195999 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:47.252095 2026] [ssl:error] [pid 2414864:tid 2414864] (EAI 2)Name or service not known: [client 144.76.19.72:19682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:47.252131 2026] [ssl:error] [pid 2414864:tid 2414864] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:47.287976 2026] [core:error] [pid 2411415:tid 2411415] [client 57.141.0.43:31382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:35:47.288000 2026] [core:error] [pid 2411415:tid 2411415] [client 57.141.0.43:31382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:35:47.818226 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.65:32374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:47.818868 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.65:32374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:47.997907 2026] [core:error] [pid 2415778:tid 2415778] (13)Permission denied: [client 216.73.216.199:4917] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/cred_jar/slabs
[Thu Jul 30 08:35:48.910049 2026] [core:error] [pid 2415778:tid 2415778] (13)Permission denied: [client 216.73.216.199:4917] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/dovecot/master.pid
[Thu Jul 30 08:35:49.758420 2026] [lsapi:warn] [pid 2415834:tid 2415834] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:35:49.815911 2026] [ssl:error] [pid 2415778:tid 2415778] (70014)End of file found: [client 216.73.216.199:4917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:50.305922 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:22784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:50.305955 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:50.360289 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:22788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:50.360315 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:51.509081 2026] [authz_core:error] [pid 2419081:tid 2419081] [client 57.141.0.24:53166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:51.509715 2026] [authz_core:error] [pid 2419081:tid 2419081] [client 57.141.0.24:53166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:52.545397 2026] [ssl:error] [pid 2411409:tid 2411409] (70014)End of file found: [client 216.73.216.199:49892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:53.054689 2026] [core:error] [pid 2410999:tid 2410999] (13)Permission denied: [client 216.73.216.199:5772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/scsi_host/host0/scan
[Thu Jul 30 08:35:53.413982 2026] [ssl:error] [pid 2419665:tid 2419665] (EAI 2)Name or service not known: [client 144.76.19.72:22798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:53.414032 2026] [ssl:error] [pid 2419665:tid 2419665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:53.475209 2026] [ssl:error] [pid 2415660:tid 2415660] (EAI 2)Name or service not known: [client 144.76.19.72:22808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:53.475234 2026] [ssl:error] [pid 2415660:tid 2415660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:54.134269 2026] [access_compat:error] [pid 2411415:tid 2411415] [client 106.215.157.145:24042] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:35:54.646807 2026] [access_compat:error] [pid 2415660:tid 2415660] [client 45.158.164.139:41026] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:35:56.167199 2026] [core:error] [pid 2410999:tid 2410999] (13)Permission denied: [client 216.73.216.199:5772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/logrotate.d/named
[Thu Jul 30 08:35:56.574537 2026] [ssl:error] [pid 2415778:tid 2415778] (EAI 2)Name or service not known: [client 144.76.19.72:22810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:56.574578 2026] [ssl:error] [pid 2415778:tid 2415778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:56.627495 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:22820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:56.627527 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:56.773146 2026] [core:error] [pid 2410999:tid 2410999] (13)Permission denied: [client 216.73.216.199:5772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/aliases
[Thu Jul 30 08:35:58.683119 2026] [authz_core:error] [pid 2420130:tid 2420130] [client 57.141.0.3:23290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:35:58.683764 2026] [authz_core:error] [pid 2420130:tid 2420130] [client 57.141.0.3:23290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:35:58.878580 2026] [ssl:error] [pid 2414864:tid 2414864] (70014)End of file found: [client 216.73.216.199:16956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:59.492679 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:5772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:35:59.682492 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:26152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:59.682522 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:35:59.739951 2026] [ssl:error] [pid 2415778:tid 2415778] (EAI 2)Name or service not known: [client 144.76.19.72:26164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:35:59.739977 2026] [ssl:error] [pid 2415778:tid 2415778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:00.267662 2026] [authz_core:error] [pid 2415834:tid 2415834] [client 57.141.0.1:31544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:00.268293 2026] [authz_core:error] [pid 2415834:tid 2415834] [client 57.141.0.1:31544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:00.348133 2026] [lsapi:warn] [pid 2415778:tid 2415778] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:36:01.052934 2026] [security2:error] [pid 2412507:tid 2412507] [client 47.254.92.190:49252] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-atrox-killers.net"] [uri "/"] [unique_id "amr-4bqaA9Ba2AB974QWXwAAADU"]
[Thu Jul 30 08:36:02.334107 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 66.249.66.35:39965] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:36:02.336778 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 66.249.66.35:39965] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:36:02.475497 2026] [ssl:error] [pid 2420320:tid 2420320] (70014)End of file found: [client 216.73.216.199:33821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:02.796028 2026] [ssl:error] [pid 2411314:tid 2411314] (EAI 2)Name or service not known: [client 144.76.19.72:26174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:02.796056 2026] [ssl:error] [pid 2411314:tid 2411314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:02.850333 2026] [ssl:error] [pid 2418302:tid 2418302] (EAI 2)Name or service not known: [client 144.76.19.72:26184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:02.850361 2026] [ssl:error] [pid 2418302:tid 2418302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:03.354634 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.44:26912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:03.355329 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.44:26912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:04.521678 2026] [access_compat:error] [pid 2412429:tid 2412429] [client 106.215.157.145:3235] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:36:05.923521 2026] [ssl:error] [pid 2414918:tid 2414918] (EAI 2)Name or service not known: [client 144.76.19.72:26186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:05.923552 2026] [ssl:error] [pid 2414918:tid 2414918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:05.975535 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:26194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:05.975574 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:06.289590 2026] [authz_core:error] [pid 2414918:tid 2414918] [client 57.141.0.45:52034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:06.290242 2026] [authz_core:error] [pid 2414918:tid 2414918] [client 57.141.0.45:52034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:06.904599 2026] [authz_core:error] [pid 2419769:tid 2419769] [client 57.141.0.50:24412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:06.905233 2026] [authz_core:error] [pid 2419769:tid 2419769] [client 57.141.0.50:24412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:07.203797 2026] [authz_core:error] [pid 2420131:tid 2420131] [client 66.249.66.33:57852] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:36:07.206467 2026] [authz_core:error] [pid 2420131:tid 2420131] [client 66.249.66.33:57852] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:36:07.891902 2026] [core:error] [pid 2414918:tid 2414918] (13)Permission denied: [client 216.73.216.199:49512] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty55/subsystem/ttyS2/uartclk
[Thu Jul 30 08:36:09.029059 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:26204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:09.029138 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:09.085328 2026] [ssl:error] [pid 2420365:tid 2420365] (EAI 2)Name or service not known: [client 144.76.19.72:26210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:09.085370 2026] [ssl:error] [pid 2420365:tid 2420365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:09.119042 2026] [security2:error] [pid 2415708:tid 2415708] [client 114.119.146.111:47309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,18/request_format~html"] [unique_id "amr-6ePouJ5_BOrIab5qxwAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~30,17,18/request_format~html
[Thu Jul 30 08:36:10.831534 2026] [access_compat:error] [pid 2420320:tid 2420320] [client 106.215.157.145:8411] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:36:10.927449 2026] [core:error] [pid 2411314:tid 2411314] (13)Permission denied: [client 216.73.216.199:47114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS2/uartclk
[Thu Jul 30 08:36:10.983149 2026] [lsapi:warn] [pid 2419171:tid 2419171] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:36:11.045728 2026] [security2:error] [pid 2414865:tid 2414865] [client 114.119.146.111:62015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,18/request_format~html"] [unique_id "amr-69VtxCBUSPwlMZFKIAAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~30,17,18/request_format~html
[Thu Jul 30 08:36:11.442304 2026] [security2:error] [pid 2412506:tid 2412506] [client 168.222.198.47:53600] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-6xGCGrlKGv3qqKZECwAAADQ"]
[Thu Jul 30 08:36:11.442355 2026] [security2:error] [pid 2412506:tid 2412506] [client 168.222.198.47:53600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-6xGCGrlKGv3qqKZECwAAADQ"]
[Thu Jul 30 08:36:11.442621 2026] [security2:error] [pid 2412506:tid 2412506] [client 168.222.198.47:53600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-6xGCGrlKGv3qqKZECwAAADQ"]
[Thu Jul 30 08:36:11.640928 2026] [security2:error] [pid 2415708:tid 2415708] [client 91.168.141.113:17911] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-6-PouJ5_BOrIab5qyQAAACQ"]
[Thu Jul 30 08:36:11.640977 2026] [security2:error] [pid 2415708:tid 2415708] [client 91.168.141.113:17911] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-6-PouJ5_BOrIab5qyQAAACQ"]
[Thu Jul 30 08:36:11.641242 2026] [security2:error] [pid 2415708:tid 2415708] [client 91.168.141.113:17911] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-6-PouJ5_BOrIab5qyQAAACQ"]
[Thu Jul 30 08:36:12.143508 2026] [ssl:error] [pid 2412429:tid 2412429] (EAI 2)Name or service not known: [client 144.76.19.72:51890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:12.143539 2026] [ssl:error] [pid 2412429:tid 2412429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:12.199246 2026] [ssl:error] [pid 2420320:tid 2420320] (EAI 2)Name or service not known: [client 144.76.19.72:51898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:12.199275 2026] [ssl:error] [pid 2420320:tid 2420320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:13.505866 2026] [security2:error] [pid 2420320:tid 2420320] [client 43.106.6.65:53971] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-7QaBAuUQCWqTeDF1HQAAACY"]
[Thu Jul 30 08:36:13.505945 2026] [security2:error] [pid 2420320:tid 2420320] [client 43.106.6.65:53971] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-7QaBAuUQCWqTeDF1HQAAACY"]
[Thu Jul 30 08:36:13.506316 2026] [security2:error] [pid 2420320:tid 2420320] [client 43.106.6.65:53971] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-7QaBAuUQCWqTeDF1HQAAACY"]
[Thu Jul 30 08:36:13.606138 2026] [security2:error] [pid 2411373:tid 2411373] [client 8.216.46.213:44045] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-7dEWCml9g6o0NKfHDQAAABw"]
[Thu Jul 30 08:36:13.606210 2026] [security2:error] [pid 2411373:tid 2411373] [client 8.216.46.213:44045] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-7dEWCml9g6o0NKfHDQAAABw"]
[Thu Jul 30 08:36:13.606530 2026] [security2:error] [pid 2411373:tid 2411373] [client 8.216.46.213:44045] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-7dEWCml9g6o0NKfHDQAAABw"]
[Thu Jul 30 08:36:14.297994 2026] [ssl:error] [pid 2414918:tid 2414918] (70014)End of file found: [client 216.73.216.199:49512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:15.137868 2026] [access_compat:error] [pid 2419769:tid 2419769] [client 106.215.157.145:22705] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:36:15.201078 2026] [ssl:error] [pid 2411314:tid 2411314] (70014)End of file found: [client 216.73.216.199:47114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:15.252113 2026] [ssl:error] [pid 2415708:tid 2415708] (EAI 2)Name or service not known: [client 144.76.19.72:51902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:15.252140 2026] [ssl:error] [pid 2415708:tid 2415708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:15.303864 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:51912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:15.303889 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:15.542059 2026] [security2:error] [pid 2419960:tid 2419960] [client 43.106.6.65:54145] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-747QYn_mSSYdmItJaAAAAA0"]
[Thu Jul 30 08:36:15.542122 2026] [security2:error] [pid 2419960:tid 2419960] [client 43.106.6.65:54145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-747QYn_mSSYdmItJaAAAAA0"]
[Thu Jul 30 08:36:15.542399 2026] [security2:error] [pid 2419960:tid 2419960] [client 43.106.6.65:54145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-747QYn_mSSYdmItJaAAAAA0"]
[Thu Jul 30 08:36:15.708204 2026] [ssl:error] [pid 2414865:tid 2414865] (70014)End of file found: [client 216.73.216.199:40112] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:16.263844 2026] [security2:error] [pid 2414864:tid 2414864] [client 8.216.46.213:23967] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-8LN3wIlXLpdyGCSG3AAAABg"]
[Thu Jul 30 08:36:16.263888 2026] [security2:error] [pid 2414864:tid 2414864] [client 8.216.46.213:23967] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr-8LN3wIlXLpdyGCSG3AAAABg"]
[Thu Jul 30 08:36:16.264164 2026] [security2:error] [pid 2414864:tid 2414864] [client 8.216.46.213:23967] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr-8LN3wIlXLpdyGCSG3AAAABg"]
[Thu Jul 30 08:36:17.431442 2026] [authz_core:error] [pid 2419960:tid 2419960] [client 57.141.0.39:33202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:17.432140 2026] [authz_core:error] [pid 2419960:tid 2419960] [client 57.141.0.39:33202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:17.804398 2026] [authz_core:error] [pid 2411366:tid 2411366] [client 57.141.0.7:26816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:17.805019 2026] [authz_core:error] [pid 2411366:tid 2411366] [client 57.141.0.7:26816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:18.355527 2026] [ssl:error] [pid 2412506:tid 2412506] (EAI 2)Name or service not known: [client 144.76.19.72:51920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:18.355556 2026] [ssl:error] [pid 2412506:tid 2412506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:18.372942 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.5:26202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:18.373570 2026] [authz_core:error] [pid 2411316:tid 2411316] [client 57.141.0.5:26202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:18.410018 2026] [ssl:error] [pid 2415834:tid 2415834] (EAI 2)Name or service not known: [client 144.76.19.72:51936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:18.410053 2026] [ssl:error] [pid 2415834:tid 2415834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:18.814617 2026] [authz_core:error] [pid 2418302:tid 2418302] [client 66.249.66.33:61681] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:36:18.819430 2026] [authz_core:error] [pid 2418302:tid 2418302] [client 66.249.66.33:61681] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:36:19.445458 2026] [core:error] [pid 2411366:tid 2411366] [client 66.249.64.170:59343] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:36:19.445486 2026] [core:error] [pid 2411366:tid 2411366] [client 66.249.64.170:59343] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:36:19.619890 2026] [ssl:error] [pid 2415834:tid 2415834] (70014)End of file found: [client 216.73.216.199:50637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:20.653988 2026] [ssl:error] [pid 2412506:tid 2412506] (70014)End of file found: [client 216.73.216.199:5940] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:21.358625 2026] [security2:error] [pid 2420367:tid 2420367] [client 20.171.55.167:3049] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "lucynaden.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amr-9SSe2NSLL34J1qvSLQAAACo"]
[Thu Jul 30 08:36:21.358790 2026] [security2:error] [pid 2420367:tid 2420367] [client 20.171.55.167:3049] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "lucynaden.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amr-9SSe2NSLL34J1qvSLQAAACo"]
[Thu Jul 30 08:36:21.358991 2026] [security2:error] [pid 2420367:tid 2420367] [client 20.171.55.167:3049] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "lucynaden.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amr-9SSe2NSLL34J1qvSLQAAACo"]
[Thu Jul 30 08:36:21.496500 2026] [ssl:error] [pid 2411314:tid 2411314] (EAI 2)Name or service not known: [client 144.76.19.72:56616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:21.496526 2026] [ssl:error] [pid 2411314:tid 2411314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:21.553645 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:56626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:21.553672 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:21.579658 2026] [lsapi:warn] [pid 2420130:tid 2420130] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:36:22.697269 2026] [authz_core:error] [pid 2420320:tid 2420320] [client 57.141.0.9:28234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:22.697924 2026] [authz_core:error] [pid 2420320:tid 2420320] [client 57.141.0.9:28234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:22.868687 2026] [authz_core:error] [pid 2412429:tid 2412429] [client 57.141.0.6:57914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:22.869303 2026] [authz_core:error] [pid 2412429:tid 2412429] [client 57.141.0.6:57914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:23.579443 2026] [core:error] [pid 2411366:tid 2411366] [client 66.249.66.71:48059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:36:23.579468 2026] [core:error] [pid 2411366:tid 2411366] [client 66.249.66.71:48059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:36:24.069500 2026] [ssl:error] [pid 2419081:tid 2419081] (70014)End of file found: [client 216.73.216.199:30311] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:24.637692 2026] [ssl:error] [pid 2420319:tid 2420319] (EAI 2)Name or service not known: [client 144.76.19.72:56636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:24.637724 2026] [ssl:error] [pid 2420319:tid 2420319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:24.692584 2026] [ssl:error] [pid 2411366:tid 2411366] (EAI 2)Name or service not known: [client 144.76.19.72:56648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:24.692611 2026] [ssl:error] [pid 2411366:tid 2411366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:25.598409 2026] [access_compat:error] [pid 2419665:tid 2419665] [client 106.215.157.145:19617] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:36:26.177925 2026] [ssl:error] [pid 2412502:tid 2412502] (70014)End of file found: [client 216.73.216.199:61590] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:26.574574 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.21:40884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:26.575191 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.21:40884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:27.746198 2026] [ssl:error] [pid 2411373:tid 2411373] (EAI 2)Name or service not known: [client 144.76.19.72:56662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:27.746238 2026] [ssl:error] [pid 2411373:tid 2411373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:27.798922 2026] [ssl:error] [pid 2420262:tid 2420262] (EAI 2)Name or service not known: [client 144.76.19.72:56664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:27.798953 2026] [ssl:error] [pid 2420262:tid 2420262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:28.010807 2026] [authz_core:error] [pid 2417171:tid 2417171] [client 57.141.0.58:40382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:28.011426 2026] [authz_core:error] [pid 2417171:tid 2417171] [client 57.141.0.58:40382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:28.891574 2026] [ssl:error] [pid 2418302:tid 2418302] (70014)End of file found: [client 216.73.216.199:15831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:30.853482 2026] [ssl:error] [pid 2420320:tid 2420320] (EAI 2)Name or service not known: [client 144.76.19.72:41946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:30.853507 2026] [ssl:error] [pid 2420320:tid 2420320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:30.909325 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:41956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:30.909344 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:31.282658 2026] [ssl:error] [pid 2415778:tid 2415778] (70014)End of file found: [client 216.73.216.199:20626] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:31.883459 2026] [ssl:error] [pid 2421705:tid 2421705] (70014)End of file found: [client 216.73.216.199:18709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:32.200954 2026] [lsapi:warn] [pid 2412472:tid 2412472] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:36:33.598539 2026] [authz_core:error] [pid 2420320:tid 2420320] [client 57.141.0.32:46580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:33.599183 2026] [authz_core:error] [pid 2420320:tid 2420320] [client 57.141.0.32:46580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:33.695261 2026] [ssl:error] [pid 2415708:tid 2415708] (70014)End of file found: [client 216.73.216.199:13788] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:33.965759 2026] [ssl:error] [pid 2421758:tid 2421758] (EAI 2)Name or service not known: [client 144.76.19.72:41964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:33.965797 2026] [ssl:error] [pid 2421758:tid 2421758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:34.017914 2026] [ssl:error] [pid 2411366:tid 2411366] (EAI 2)Name or service not known: [client 144.76.19.72:41970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:34.017937 2026] [ssl:error] [pid 2411366:tid 2411366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:35.170673 2026] [authz_core:error] [pid 2420368:tid 2420368] [client 57.141.0.17:34696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:35.171298 2026] [authz_core:error] [pid 2420368:tid 2420368] [client 57.141.0.17:34696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:36.177017 2026] [core:error] [pid 2419665:tid 2419665] [client 107.150.61.58:37138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://stopfordsackville.com/wp-includes/edit.php
[Thu Jul 30 08:36:36.177045 2026] [core:error] [pid 2419665:tid 2419665] [client 107.150.61.58:37138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://stopfordsackville.com/wp-includes/edit.php
[Thu Jul 30 08:36:36.615218 2026] [core:error] [pid 2412506:tid 2412506] (13)Permission denied: [client 216.73.216.199:58413] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Parse/red_zone
[Thu Jul 30 08:36:36.720429 2026] [ssl:error] [pid 2412506:tid 2412506] (70014)End of file found: [client 216.73.216.199:58413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:36.964342 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.1:64752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:36.964965 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.1:64752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:37.106106 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:41972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:37.106172 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:37.158008 2026] [ssl:error] [pid 2414864:tid 2414864] (EAI 2)Name or service not known: [client 144.76.19.72:41986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:37.158040 2026] [ssl:error] [pid 2414864:tid 2414864] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:37.212665 2026] [access_compat:error] [pid 2420131:tid 2420131] [client 106.215.157.145:26005] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:36:37.622319 2026] [core:error] [pid 2415778:tid 2415778] (13)Permission denied: [client 216.73.216.199:58192] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory198/subsystem/uevent
[Thu Jul 30 08:36:37.886033 2026] [authz_core:error] [pid 2421705:tid 2421705] [client 57.141.0.56:37124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:37.887050 2026] [authz_core:error] [pid 2421705:tid 2421705] [client 57.141.0.56:37124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:38.351081 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.7:62038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:38.351706 2026] [authz_core:error] [pid 2414864:tid 2414864] [client 57.141.0.7:62038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:38.528124 2026] [ssl:error] [pid 2415778:tid 2415778] (70014)End of file found: [client 216.73.216.199:58192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:39.017532 2026] [ssl:error] [pid 2420087:tid 2420087] (70014)End of file found: [client 216.73.216.199:40841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:40.213522 2026] [ssl:error] [pid 2415708:tid 2415708] (EAI 2)Name or service not known: [client 144.76.19.72:60380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:40.213550 2026] [ssl:error] [pid 2415708:tid 2415708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:40.269336 2026] [ssl:error] [pid 2422023:tid 2422023] (EAI 2)Name or service not known: [client 144.76.19.72:60386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:40.269366 2026] [ssl:error] [pid 2422023:tid 2422023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:42.090129 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 66.249.66.33:56396] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:36:42.092921 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 66.249.66.33:56396] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:36:42.505150 2026] [authz_core:error] [pid 2411106:tid 2411106] [client 57.141.0.49:30294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:42.505771 2026] [authz_core:error] [pid 2411106:tid 2411106] [client 57.141.0.49:30294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:42.607012 2026] [core:error] [pid 2419960:tid 2419960] [client 107.150.61.58:37142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://stopfordsackville.com/wp-includes/edit.php
[Thu Jul 30 08:36:42.607033 2026] [core:error] [pid 2419960:tid 2419960] [client 107.150.61.58:37142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://stopfordsackville.com/wp-includes/edit.php
[Thu Jul 30 08:36:42.828280 2026] [lsapi:warn] [pid 2419081:tid 2419081] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:36:43.322940 2026] [ssl:error] [pid 2420131:tid 2420131] (EAI 2)Name or service not known: [client 144.76.19.72:60400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:43.322968 2026] [ssl:error] [pid 2420131:tid 2420131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:43.380012 2026] [ssl:error] [pid 2412502:tid 2412502] (EAI 2)Name or service not known: [client 144.76.19.72:60410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:43.380033 2026] [ssl:error] [pid 2412502:tid 2412502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:43.791912 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 66.249.66.33:56396] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:36:43.794697 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 66.249.66.33:56396] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:36:44.698481 2026] [authz_core:error] [pid 2420319:tid 2420319] [client 57.141.0.39:62962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:44.699106 2026] [authz_core:error] [pid 2420319:tid 2420319] [client 57.141.0.39:62962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:45.154214 2026] [ssl:error] [pid 2414865:tid 2414865] (70014)End of file found: [client 216.73.216.199:59194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:46.060834 2026] [core:error] [pid 2411316:tid 2411316] (13)Permission denied: [client 216.73.216.199:5507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-64/remote_node_defrag_ratio
[Thu Jul 30 08:36:46.439956 2026] [ssl:error] [pid 2412509:tid 2412509] (EAI 2)Name or service not known: [client 144.76.19.72:60424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:46.439999 2026] [ssl:error] [pid 2412509:tid 2412509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:46.494526 2026] [ssl:error] [pid 2413521:tid 2413521] (EAI 2)Name or service not known: [client 144.76.19.72:60428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:46.494573 2026] [ssl:error] [pid 2413521:tid 2413521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:46.644799 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 169.58.39.192:56063] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 08:36:46.675134 2026] [ssl:error] [pid 2411316:tid 2411316] (70014)End of file found: [client 216.73.216.199:5507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:47.265658 2026] [authz_core:error] [pid 2419769:tid 2419769] [client 57.141.0.8:39150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:47.266329 2026] [authz_core:error] [pid 2419769:tid 2419769] [client 57.141.0.8:39150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:47.636900 2026] [access_compat:error] [pid 2411373:tid 2411373] [client 106.215.157.145:30851] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:36:47.894351 2026] [core:error] [pid 2411420:tid 2411420] (13)Permission denied: [client 216.73.216.199:35551] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_efi_item/min_partial
[Thu Jul 30 08:36:48.046397 2026] [authz_core:error] [pid 2422379:tid 2422379] [client 57.141.0.7:60580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:48.047043 2026] [authz_core:error] [pid 2422379:tid 2422379] [client 57.141.0.7:60580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:48.496296 2026] [core:error] [pid 2411420:tid 2411420] (13)Permission denied: [client 216.73.216.199:35551] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Parse/store_user
[Thu Jul 30 08:36:49.401666 2026] [ssl:error] [pid 2411420:tid 2411420] (70014)End of file found: [client 216.73.216.199:35551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:49.552571 2026] [ssl:error] [pid 2420367:tid 2420367] (EAI 2)Name or service not known: [client 144.76.19.72:60436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:49.552616 2026] [ssl:error] [pid 2420367:tid 2420367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:49.611514 2026] [ssl:error] [pid 2421983:tid 2421983] (EAI 2)Name or service not known: [client 144.76.19.72:60670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:49.611556 2026] [ssl:error] [pid 2421983:tid 2421983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:50.538666 2026] [authz_core:error] [pid 2420367:tid 2420367] [client 169.58.39.192:57058] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 08:36:51.220776 2026] [core:error] [pid 2414917:tid 2414917] (13)Permission denied: [client 216.73.216.199:39718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 08:36:52.127493 2026] [core:error] [pid 2414917:tid 2414917] (13)Permission denied: [client 216.73.216.199:39718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nft_reject/sections/__kcrctab_gpl
[Thu Jul 30 08:36:52.428966 2026] [ssl:error] [pid 2414917:tid 2414917] (70014)End of file found: [client 216.73.216.199:39718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:52.633962 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.64:56250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:52.634639 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.64:56250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:52.670006 2026] [ssl:error] [pid 2410999:tid 2410999] (EAI 2)Name or service not known: [client 144.76.19.72:60672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:52.670031 2026] [ssl:error] [pid 2410999:tid 2410999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:52.724520 2026] [ssl:error] [pid 2412472:tid 2412472] (EAI 2)Name or service not known: [client 144.76.19.72:60678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:52.724543 2026] [ssl:error] [pid 2412472:tid 2412472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:53.332263 2026] [ssl:error] [pid 2411316:tid 2411316] (70014)End of file found: [client 216.73.216.199:16324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:53.471207 2026] [lsapi:warn] [pid 2419665:tid 2419665] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:36:53.624388 2026] [authz_core:error] [pid 2421367:tid 2421367] [client 57.141.0.37:62990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:53.625083 2026] [authz_core:error] [pid 2421367:tid 2421367] [client 57.141.0.37:62990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:54.906433 2026] [lsapi:warn] [pid 2419665:tid 2419665] [client 45.158.164.139:42134] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:36:54.906477 2026] [lsapi:warn] [pid 2419665:tid 2419665] [client 45.158.164.139:42134] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:36:55.782508 2026] [ssl:error] [pid 2420712:tid 2420712] (EAI 2)Name or service not known: [client 144.76.19.72:60692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:55.782538 2026] [ssl:error] [pid 2420712:tid 2420712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:55.837307 2026] [ssl:error] [pid 2420831:tid 2420831] (EAI 2)Name or service not known: [client 144.76.19.72:60708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:55.837334 2026] [ssl:error] [pid 2420831:tid 2420831] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:56.382256 2026] [ssl:error] [pid 2420367:tid 2420367] (70014)End of file found: [client 216.73.216.199:53628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:56.620550 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.6:32200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:36:56.621179 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.6:32200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:36:57.051479 2026] [security2:error] [pid 2412472:tid 2412472] [client 43.157.172.39:47104] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/"] [unique_id "amr_GS8z5UsblH75uX6kugAAABc"]
[Thu Jul 30 08:36:57.063104 2026] [access_compat:error] [pid 2419960:tid 2419960] [client 106.215.157.145:22888] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:36:57.488153 2026] [access_compat:error] [pid 2413521:tid 2413521] [client 45.158.164.139:42194] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:36:58.144861 2026] [security2:error] [pid 2420368:tid 2420368] [client 43.157.172.39:48992] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "amr_GtIk9vtWgKYiYE5hcgAAACs"], referer: http://www.taylorshouse.com
[Thu Jul 30 08:36:58.541013 2026] [ssl:error] [pid 2418302:tid 2418302] (70014)End of file found: [client 216.73.216.199:37997] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:36:58.894639 2026] [ssl:error] [pid 2420831:tid 2420831] (EAI 2)Name or service not known: [client 144.76.19.72:60722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:58.894675 2026] [ssl:error] [pid 2420831:tid 2420831] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:58.947485 2026] [ssl:error] [pid 2421983:tid 2421983] (EAI 2)Name or service not known: [client 144.76.19.72:60730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:36:58.947508 2026] [ssl:error] [pid 2421983:tid 2421983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:36:59.295378 2026] [security2:error] [pid 2411409:tid 2411409] [client 43.157.172.39:51178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "amr_G3iGnV0lYiYXbxD-FgAAACI"], referer: http://www.taylorshouse.com/home
[Thu Jul 30 08:36:59.464505 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:22922] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:00.933224 2026] [security2:error] [pid 2420368:tid 2420368] [client 43.157.172.39:53766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "amr_HNIk9vtWgKYiYE5hdAAAACs"], referer: http://www.taylorshouse.com/home/
[Thu Jul 30 08:37:02.000083 2026] [ssl:error] [pid 2421983:tid 2421983] (EAI 2)Name or service not known: [client 144.76.19.72:57070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:02.000122 2026] [ssl:error] [pid 2421983:tid 2421983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:02.051422 2026] [ssl:error] [pid 2419665:tid 2419665] (EAI 2)Name or service not known: [client 144.76.19.72:57074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:02.051446 2026] [ssl:error] [pid 2419665:tid 2419665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:02.271829 2026] [ssl:error] [pid 2412507:tid 2412507] (70014)End of file found: [client 216.73.216.199:6967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:02.877166 2026] [core:error] [pid 2411366:tid 2411366] (13)Permission denied: [client 216.73.216.199:64196] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rud_item/alloc_calls
[Thu Jul 30 08:37:03.178997 2026] [ssl:error] [pid 2411366:tid 2411366] (70014)End of file found: [client 216.73.216.199:64196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:03.914907 2026] [access_compat:error] [pid 2421983:tid 2421983] [client 106.215.157.145:8779] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:04.026704 2026] [lsapi:warn] [pid 2422835:tid 2422835] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:37:04.466271 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.51:31312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:04.466919 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.51:31312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:05.105096 2026] [ssl:error] [pid 2410999:tid 2410999] (EAI 2)Name or service not known: [client 144.76.19.72:57080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:05.105122 2026] [ssl:error] [pid 2410999:tid 2410999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:05.162407 2026] [ssl:error] [pid 2422886:tid 2422886] (EAI 2)Name or service not known: [client 144.76.19.72:57086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:05.162457 2026] [ssl:error] [pid 2422886:tid 2422886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:07.098063 2026] [ssl:error] [pid 2412474:tid 2412474] (70014)End of file found: [client 216.73.216.199:26295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:07.487904 2026] [cgi:error] [pid 2422885:tid 2422885] [client 47.128.117.52:28604] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 08:37:07.582259 2026] [access_compat:error] [pid 2419081:tid 2419081] [client 106.215.157.145:6791] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:08.011916 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:62991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:08.241445 2026] [ssl:error] [pid 2419665:tid 2419665] (EAI 2)Name or service not known: [client 144.76.19.72:57092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:08.241485 2026] [ssl:error] [pid 2419665:tid 2419665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:08.294453 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:57108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:08.294494 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:08.797717 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.71:40632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:08.798355 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.71:40632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:09.211162 2026] [core:error] [pid 2415708:tid 2415708] (13)Permission denied: [client 216.73.216.199:3179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/destroy_by_rcu
[Thu Jul 30 08:37:09.512732 2026] [core:error] [pid 2415708:tid 2415708] (13)Permission denied: [client 216.73.216.199:3179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bud_item/trace
[Thu Jul 30 08:37:10.320628 2026] [lsapi:error] [pid 2415708:tid 2415708] [client 216.73.216.199:3179] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Prestashop.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Prestashop.php on line 8\n
[Thu Jul 30 08:37:11.333000 2026] [core:error] [pid 2419960:tid 2419960] (13)Permission denied: [client 216.73.216.199:9775] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/sbin/unix_update
[Thu Jul 30 08:37:11.346973 2026] [ssl:error] [pid 2418302:tid 2418302] (EAI 2)Name or service not known: [client 144.76.19.72:53690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:11.347005 2026] [ssl:error] [pid 2418302:tid 2418302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:11.400134 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:53698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:11.400164 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:12.307953 2026] [lsapi:warn] [pid 2422022:tid 2422022] [client 34.174.16.200:53834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 08:37:12.308011 2026] [lsapi:warn] [pid 2422022:tid 2422022] [client 34.174.16.200:53834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 08:37:12.975161 2026] [authz_core:error] [pid 2412474:tid 2412474] [client 57.141.0.15:62434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:12.975778 2026] [authz_core:error] [pid 2412474:tid 2412474] [client 57.141.0.15:62434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:13.124502 2026] [authz_core:error] [pid 2422885:tid 2422885] [client 57.141.0.22:54718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:13.125147 2026] [authz_core:error] [pid 2422885:tid 2422885] [client 57.141.0.22:54718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:14.278707 2026] [security2:error] [pid 2412507:tid 2412507] [client 8.219.101.235:31909] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_KrqaA9Ba2AB974QW3gAAADU"]
[Thu Jul 30 08:37:14.278753 2026] [security2:error] [pid 2412507:tid 2412507] [client 8.219.101.235:31909] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_KrqaA9Ba2AB974QW3gAAADU"]
[Thu Jul 30 08:37:14.278996 2026] [security2:error] [pid 2412507:tid 2412507] [client 8.219.101.235:31909] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_KrqaA9Ba2AB974QW3gAAADU"]
[Thu Jul 30 08:37:14.360711 2026] [core:error] [pid 2419960:tid 2419960] (13)Permission denied: [client 216.73.216.199:9775] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_event/red_zone
[Thu Jul 30 08:37:14.453930 2026] [ssl:error] [pid 2410999:tid 2410999] (EAI 2)Name or service not known: [client 144.76.19.72:53704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:14.453955 2026] [ssl:error] [pid 2410999:tid 2410999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:14.548471 2026] [ssl:error] [pid 2411373:tid 2411373] (EAI 2)Name or service not known: [client 144.76.19.72:53718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:14.548501 2026] [ssl:error] [pid 2411373:tid 2411373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:14.685777 2026] [lsapi:warn] [pid 2419081:tid 2419081] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:37:15.236664 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 66.249.66.33:63278] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:37:15.239314 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 66.249.66.33:63278] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:37:16.791270 2026] [security2:error] [pid 2423250:tid 2423250] [client 177.72.85.131:19528] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_LP8233Hh3pbQWVeyWQAAABU"]
[Thu Jul 30 08:37:16.791323 2026] [security2:error] [pid 2423250:tid 2423250] [client 177.72.85.131:19528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_LP8233Hh3pbQWVeyWQAAABU"]
[Thu Jul 30 08:37:16.791585 2026] [security2:error] [pid 2423250:tid 2423250] [client 177.72.85.131:19528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_LP8233Hh3pbQWVeyWQAAABU"]
[Thu Jul 30 08:37:17.600415 2026] [ssl:error] [pid 2420368:tid 2420368] (EAI 2)Name or service not known: [client 144.76.19.72:53732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:17.600453 2026] [ssl:error] [pid 2420368:tid 2420368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:17.652282 2026] [ssl:error] [pid 2423330:tid 2423330] (EAI 2)Name or service not known: [client 144.76.19.72:53734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:17.652311 2026] [ssl:error] [pid 2423330:tid 2423330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:18.178555 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 66.249.66.34:44546] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:37:18.181222 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 66.249.66.34:44546] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:37:18.339472 2026] [access_compat:error] [pid 2423370:tid 2423370] [client 106.215.157.145:11532] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:18.653865 2026] [authz_core:error] [pid 2420368:tid 2420368] [client 57.141.0.32:45934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:18.654483 2026] [authz_core:error] [pid 2420368:tid 2420368] [client 57.141.0.32:45934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:19.178420 2026] [ssl:error] [pid 2419960:tid 2419960] (70014)End of file found: [client 216.73.216.199:9775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:19.523377 2026] [security2:error] [pid 2420367:tid 2420367] [client 31.155.153.217:60234] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_LySe2NSLL34J1qvSVAAAACo"]
[Thu Jul 30 08:37:19.523423 2026] [security2:error] [pid 2420367:tid 2420367] [client 31.155.153.217:60234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_LySe2NSLL34J1qvSVAAAACo"]
[Thu Jul 30 08:37:19.523683 2026] [security2:error] [pid 2420367:tid 2420367] [client 31.155.153.217:60234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_LySe2NSLL34J1qvSVAAAACo"]
[Thu Jul 30 08:37:20.081337 2026] [ssl:error] [pid 2412506:tid 2412506] (70014)End of file found: [client 216.73.216.199:6600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:20.679039 2026] [ssl:error] [pid 2420712:tid 2420712] (5)Input/output error: [client 216.73.216.199:20231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:20.708683 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:54484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:20.708721 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:20.764601 2026] [ssl:error] [pid 2422379:tid 2422379] (EAI 2)Name or service not known: [client 144.76.19.72:54488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:20.764634 2026] [ssl:error] [pid 2422379:tid 2422379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:22.789904 2026] [authz_core:error] [pid 2423250:tid 2423250] [client 57.141.0.26:64242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:22.790531 2026] [authz_core:error] [pid 2423250:tid 2423250] [client 57.141.0.26:64242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:23.800802 2026] [authz_core:error] [pid 2423250:tid 2423250] [client 57.141.0.39:43396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:23.801425 2026] [authz_core:error] [pid 2423250:tid 2423250] [client 57.141.0.39:43396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:23.817905 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:54498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:23.817928 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:23.871471 2026] [ssl:error] [pid 2410999:tid 2410999] (EAI 2)Name or service not known: [client 144.76.19.72:54506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:23.871498 2026] [ssl:error] [pid 2410999:tid 2410999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:23.972196 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.61:39602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:23.972812 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.61:39602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:24.318585 2026] [core:error] [pid 2423145:tid 2423145] [client 66.249.66.8:49429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:24.318611 2026] [core:error] [pid 2423145:tid 2423145] [client 66.249.66.8:49429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:24.529616 2026] [core:error] [pid 2412472:tid 2412472] (13)Permission denied: [client 216.73.216.199:1185] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cud_item/trace
[Thu Jul 30 08:37:24.613752 2026] [access_compat:error] [pid 2410999:tid 2410999] [client 106.215.157.145:18956] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:25.214035 2026] [ssl:error] [pid 2412472:tid 2412472] (70014)End of file found: [client 216.73.216.199:1185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:25.294949 2026] [lsapi:warn] [pid 2419960:tid 2419960] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:37:26.118027 2026] [ssl:error] [pid 2415778:tid 2415778] (70014)End of file found: [client 216.73.216.199:13765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:26.419742 2026] [ssl:error] [pid 2423370:tid 2423370] (70014)End of file found: [client 216.73.216.199:28142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:26.928009 2026] [ssl:error] [pid 2415708:tid 2415708] (EAI 2)Name or service not known: [client 144.76.19.72:54522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:26.928042 2026] [ssl:error] [pid 2415708:tid 2415708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:26.979863 2026] [ssl:error] [pid 2422886:tid 2422886] (EAI 2)Name or service not known: [client 144.76.19.72:54528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:26.979894 2026] [ssl:error] [pid 2422886:tid 2422886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:28.036861 2026] [authz_core:error] [pid 2410999:tid 2410999] [client 57.141.0.67:24820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:28.037489 2026] [authz_core:error] [pid 2410999:tid 2410999] [client 57.141.0.67:24820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:28.111454 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.31:55612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:28.112108 2026] [authz_core:error] [pid 2415708:tid 2415708] [client 57.141.0.31:55612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:28.610834 2026] [access_compat:error] [pid 2411106:tid 2411106] [client 106.215.157.145:20951] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:28.993916 2026] [authz_core:error] [pid 2423766:tid 2423766] [client 57.141.0.1:61078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:28.994579 2026] [authz_core:error] [pid 2423766:tid 2423766] [client 57.141.0.1:61078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:30.036537 2026] [ssl:error] [pid 2423799:tid 2423799] (EAI 2)Name or service not known: [client 144.76.19.72:49558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:30.036590 2026] [ssl:error] [pid 2423799:tid 2423799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:30.092168 2026] [ssl:error] [pid 2423800:tid 2423800] (EAI 2)Name or service not known: [client 144.76.19.72:49572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:30.092213 2026] [ssl:error] [pid 2423800:tid 2423800] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:30.545091 2026] [authz_core:error] [pid 2422886:tid 2422886] [client 66.249.66.34:38204] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:37:30.547726 2026] [authz_core:error] [pid 2422886:tid 2422886] [client 66.249.66.34:38204] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:37:31.076350 2026] [ssl:error] [pid 2423799:tid 2423799] (70014)End of file found: [client 216.73.216.199:64245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:31.446436 2026] [security2:error] [pid 2420262:tid 2420262] [client 114.119.155.144:57213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,15/request_format~html"] [unique_id "amr_O6CuPSoE0uFFzriAJAAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,14,15/request_format~html
[Thu Jul 30 08:37:31.691510 2026] [core:error] [pid 2419141:tid 2419141] (13)Permission denied: [client 216.73.216.199:52821] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dio/sanity_checks
[Thu Jul 30 08:37:32.421159 2026] [authz_core:error] [pid 2423766:tid 2423766] [client 57.141.0.50:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:32.421813 2026] [authz_core:error] [pid 2423766:tid 2423766] [client 57.141.0.50:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:32.464295 2026] [security2:error] [pid 2423330:tid 2423330] [client 114.119.155.144:57227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,15/request_format~html"] [unique_id "amr_POBHyQk9KdUcNh1YZQAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,14,15/request_format~html
[Thu Jul 30 08:37:32.582467 2026] [ssl:error] [pid 2423800:tid 2423800] (70014)End of file found: [client 216.73.216.199:60594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:33.150358 2026] [ssl:error] [pid 2420712:tid 2420712] (EAI 2)Name or service not known: [client 144.76.19.72:49576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:33.150390 2026] [ssl:error] [pid 2420712:tid 2420712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:33.203096 2026] [cgi:error] [pid 2411415:tid 2411415] [client 199.45.155.86:36626] AH02812: stderr from /home/spampcou/public_html/eraten.com/cgi-bin/: attempt to invoke directory as script, referer: https://eraten.spamp.co.uk:443/cgi-bin
[Thu Jul 30 08:37:33.207988 2026] [ssl:error] [pid 2420368:tid 2420368] (EAI 2)Name or service not known: [client 144.76.19.72:49590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:33.208008 2026] [ssl:error] [pid 2420368:tid 2420368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:34.938004 2026] [access_compat:error] [pid 2423767:tid 2423767] [client 106.215.157.145:20495] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:34.994692 2026] [ssl:error] [pid 2419141:tid 2419141] (70014)End of file found: [client 216.73.216.199:52821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:35.915267 2026] [lsapi:warn] [pid 2420366:tid 2420366] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:37:36.264101 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:49592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:36.264134 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:36.316951 2026] [ssl:error] [pid 2423766:tid 2423766] (EAI 2)Name or service not known: [client 144.76.19.72:49604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:36.316993 2026] [ssl:error] [pid 2423766:tid 2423766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:36.427057 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:1896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:36.468333 2026] [authz_core:error] [pid 2423330:tid 2423330] [client 57.141.0.51:37898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:36.468947 2026] [authz_core:error] [pid 2423330:tid 2423330] [client 57.141.0.51:37898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:38.385123 2026] [ssl:error] [pid 2421983:tid 2421983] (70014)End of file found: [client 216.73.216.199:1091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:38.551242 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.60:34588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:38.551866 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.60:34588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:39.009773 2026] [ssl:error] [pid 2423330:tid 2423330] (70014)End of file found: [client 216.73.216.199:13365] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:39.333160 2026] [access_compat:error] [pid 2422885:tid 2422885] [client 106.215.157.145:19239] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:39.390923 2026] [ssl:error] [pid 2423798:tid 2423798] (EAI 2)Name or service not known: [client 144.76.19.72:49612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:39.390971 2026] [ssl:error] [pid 2423798:tid 2423798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:39.444330 2026] [ssl:error] [pid 2411316:tid 2411316] (EAI 2)Name or service not known: [client 144.76.19.72:49624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:39.444352 2026] [ssl:error] [pid 2411316:tid 2411316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:39.612406 2026] [core:error] [pid 2420366:tid 2420366] (13)Permission denied: [client 216.73.216.199:1872] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs/skeleton.files.list
[Thu Jul 30 08:37:40.542615 2026] [ssl:error] [pid 2420366:tid 2420366] (70014)End of file found: [client 216.73.216.199:1872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:40.665362 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.67:23230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:40.665984 2026] [authz_core:error] [pid 2411409:tid 2411409] [client 57.141.0.67:23230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:41.727136 2026] [security2:error] [pid 2412506:tid 2412506] [client 100.27.153.9:19080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "3dworkstation.co.uk"] [uri "/robots.txt"] [unique_id "amr_RRGCGrlKGv3qqKZEhwAAADQ"]
[Thu Jul 30 08:37:42.207262 2026] [core:error] [pid 2410999:tid 2410999] [client 66.249.64.172:46035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:42.207286 2026] [core:error] [pid 2410999:tid 2410999] [client 66.249.64.172:46035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:42.521480 2026] [ssl:error] [pid 2414917:tid 2414917] (EAI 2)Name or service not known: [client 144.76.19.72:20540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:42.521508 2026] [ssl:error] [pid 2414917:tid 2414917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:42.578660 2026] [ssl:error] [pid 2424267:tid 2424267] (EAI 2)Name or service not known: [client 144.76.19.72:20552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:42.578692 2026] [ssl:error] [pid 2424267:tid 2424267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:43.294618 2026] [authz_core:error] [pid 2424268:tid 2424268] [client 57.141.0.71:65406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:43.295256 2026] [authz_core:error] [pid 2424268:tid 2424268] [client 57.141.0.71:65406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:44.973598 2026] [authz_core:error] [pid 2410999:tid 2410999] [client 57.141.0.2:53756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:44.974227 2026] [authz_core:error] [pid 2410999:tid 2410999] [client 57.141.0.2:53756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:45.634247 2026] [ssl:error] [pid 2423766:tid 2423766] (EAI 2)Name or service not known: [client 144.76.19.72:20560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:45.634277 2026] [ssl:error] [pid 2423766:tid 2423766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:45.691582 2026] [ssl:error] [pid 2421983:tid 2421983] (EAI 2)Name or service not known: [client 144.76.19.72:20566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:45.691608 2026] [ssl:error] [pid 2421983:tid 2421983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:46.471880 2026] [security2:error] [pid 2422885:tid 2422885] [client 34.206.249.188:37900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "amr_SmXpy13SHqs19vw7CwAAAAk"]
[Thu Jul 30 08:37:46.494079 2026] [lsapi:warn] [pid 2423797:tid 2423797] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:37:47.872599 2026] [security2:error] [pid 2420366:tid 2420366] [client 43.228.157.102:45312] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/config"] [unique_id "amr_SzRsn_CrYZtjvMmRVAAAACk"]
[Thu Jul 30 08:37:47.872758 2026] [security2:error] [pid 2420366:tid 2420366] [client 43.228.157.102:45312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/config"] [unique_id "amr_SzRsn_CrYZtjvMmRVAAAACk"]
[Thu Jul 30 08:37:47.872940 2026] [security2:error] [pid 2420366:tid 2420366] [client 43.228.157.102:45312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/config"] [unique_id "amr_SzRsn_CrYZtjvMmRVAAAACk"]
[Thu Jul 30 08:37:48.749415 2026] [ssl:error] [pid 2420087:tid 2420087] (EAI 2)Name or service not known: [client 144.76.19.72:20582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:48.749445 2026] [ssl:error] [pid 2420087:tid 2420087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:48.805696 2026] [ssl:error] [pid 2420262:tid 2420262] (EAI 2)Name or service not known: [client 144.76.19.72:20598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:48.805725 2026] [ssl:error] [pid 2420262:tid 2420262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:49.036902 2026] [ssl:error] [pid 2412506:tid 2412506] (70014)End of file found: [client 216.73.216.199:21260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:49.486676 2026] [core:error] [pid 2420366:tid 2420366] [client 57.141.0.63:60958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:49.486705 2026] [core:error] [pid 2420366:tid 2420366] [client 57.141.0.63:60958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:49.613224 2026] [access_compat:error] [pid 2411316:tid 2411316] [client 106.215.157.145:3177] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:37:50.241268 2026] [ssl:error] [pid 2420087:tid 2420087] (70014)End of file found: [client 216.73.216.199:46957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:50.577982 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.64:21648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:50.578610 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.64:21648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:51.144867 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:56159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:51.860810 2026] [ssl:error] [pid 2421758:tid 2421758] (EAI 2)Name or service not known: [client 144.76.19.72:28786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:51.860840 2026] [ssl:error] [pid 2421758:tid 2421758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:51.914540 2026] [ssl:error] [pid 2422156:tid 2422156] (EAI 2)Name or service not known: [client 144.76.19.72:28790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:51.914581 2026] [ssl:error] [pid 2422156:tid 2422156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:52.559284 2026] [authz_core:error] [pid 2423330:tid 2423330] [client 57.141.0.5:24164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:52.559902 2026] [authz_core:error] [pid 2423330:tid 2423330] [client 57.141.0.5:24164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:53.355231 2026] [authz_core:error] [pid 2423330:tid 2423330] [client 57.141.0.27:42900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:53.355843 2026] [authz_core:error] [pid 2423330:tid 2423330] [client 57.141.0.27:42900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:54.472438 2026] [core:error] [pid 2419141:tid 2419141] [client 195.2.84.198:64111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://edwardkensington.com/wp-comments-post.php
[Thu Jul 30 08:37:54.472461 2026] [core:error] [pid 2419141:tid 2419141] [client 195.2.84.198:64111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://edwardkensington.com/wp-comments-post.php
[Thu Jul 30 08:37:54.523444 2026] [core:error] [pid 2419665:tid 2419665] [client 57.141.0.7:58960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:54.523468 2026] [core:error] [pid 2419665:tid 2419665] [client 57.141.0.7:58960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:37:54.720495 2026] [core:crit] [pid 2423330:tid 2423330] (13)Permission denied: [client 195.2.84.198:64250] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: https://edwardkensington.com/
[Thu Jul 30 08:37:54.970425 2026] [ssl:error] [pid 2423799:tid 2423799] (EAI 2)Name or service not known: [client 144.76.19.72:28800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:54.970449 2026] [ssl:error] [pid 2423799:tid 2423799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:55.026346 2026] [ssl:error] [pid 2415834:tid 2415834] (EAI 2)Name or service not known: [client 144.76.19.72:28810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:55.026368 2026] [ssl:error] [pid 2415834:tid 2415834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:56.775267 2026] [authz_core:error] [pid 2423767:tid 2423767] [client 57.141.0.5:24170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:37:56.775891 2026] [authz_core:error] [pid 2423767:tid 2423767] [client 57.141.0.5:24170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:37:57.088230 2026] [lsapi:warn] [pid 2411415:tid 2411415] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:37:58.084336 2026] [ssl:error] [pid 2415834:tid 2415834] (EAI 2)Name or service not known: [client 144.76.19.72:28812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:58.084361 2026] [ssl:error] [pid 2415834:tid 2415834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:58.141513 2026] [ssl:error] [pid 2423767:tid 2423767] (EAI 2)Name or service not known: [client 144.76.19.72:28818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:37:58.141542 2026] [ssl:error] [pid 2423767:tid 2423767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:37:58.805021 2026] [core:error] [pid 2410999:tid 2410999] (13)Permission denied: [client 216.73.216.199:43418] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/vars/altnodejselstoken
[Thu Jul 30 08:37:59.642746 2026] [ssl:error] [pid 2419141:tid 2419141] (70014)End of file found: [client 216.73.216.199:47477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:37:59.943868 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:43418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:00.268129 2026] [access_compat:error] [pid 2423767:tid 2423767] [client 106.215.157.145:1601] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:00.457388 2026] [security2:error] [pid 2423798:tid 2423798] [client 51.222.168.41:21708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/robots.txt"] [unique_id "amr_WIFx8Bx4ITcCEtgnBgAAADc"]
[Thu Jul 30 08:38:00.550428 2026] [ssl:error] [pid 2423766:tid 2423766] (70014)End of file found: [client 216.73.216.199:5499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:00.745370 2026] [access_compat:error] [pid 2411106:tid 2411106] [client 45.158.164.139:52536] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:38:00.878661 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/._wp-config.php"] [unique_id "amr_WOeliGAK7HeY9rNwjAAAAAE"]
[Thu Jul 30 08:38:00.878847 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/._wp-config.php"] [unique_id "amr_WOeliGAK7HeY9rNwjAAAAAE"]
[Thu Jul 30 08:38:00.879052 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/._wp-config.php"] [unique_id "amr_WOeliGAK7HeY9rNwjAAAAAE"]
[Thu Jul 30 08:38:01.063044 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/.aws/keys.conf"] [unique_id "amr_WeeliGAK7HeY9rNwlgAAAAE"]
[Thu Jul 30 08:38:01.063417 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.aws/keys.conf"] [unique_id "amr_WeeliGAK7HeY9rNwlgAAAAE"]
[Thu Jul 30 08:38:01.063633 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.aws/keys.conf"] [unique_id "amr_WeeliGAK7HeY9rNwlgAAAAE"]
[Thu Jul 30 08:38:01.161518 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_WeeliGAK7HeY9rNwmwAAAAE"]
[Thu Jul 30 08:38:01.161863 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_WeeliGAK7HeY9rNwmwAAAAE"]
[Thu Jul 30 08:38:01.162097 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_WeeliGAK7HeY9rNwmwAAAAE"]
[Thu Jul 30 08:38:01.205006 2026] [ssl:error] [pid 2424178:tid 2424178] (EAI 2)Name or service not known: [client 144.76.19.72:53984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:01.205042 2026] [ssl:error] [pid 2424178:tid 2424178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:01.273230 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_WeeliGAK7HeY9rNwoQAAAAE"]
[Thu Jul 30 08:38:01.273396 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_WeeliGAK7HeY9rNwoQAAAAE"]
[Thu Jul 30 08:38:01.273617 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_WeeliGAK7HeY9rNwoQAAAAE"]
[Thu Jul 30 08:38:01.278111 2026] [ssl:error] [pid 2420087:tid 2420087] (EAI 2)Name or service not known: [client 144.76.19.72:53996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:01.278134 2026] [ssl:error] [pid 2420087:tid 2420087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:01.527167 2026] [authz_core:error] [pid 2420087:tid 2420087] [client 57.141.0.70:54100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:01.527787 2026] [authz_core:error] [pid 2420087:tid 2420087] [client 57.141.0.70:54100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:01.612137 2026] [security2:error] [pid 2420087:tid 2420087] [client 198.244.242.37:38158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amr_WdGWH5xbt04huX6WCwAAABA"]
[Thu Jul 30 08:38:01.618898 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_WeeliGAK7HeY9rNwtAAAAAE"]
[Thu Jul 30 08:38:01.619086 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_WeeliGAK7HeY9rNwtAAAAAE"]
[Thu Jul 30 08:38:01.619285 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_WeeliGAK7HeY9rNwtAAAAAE"]
[Thu Jul 30 08:38:01.658786 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.2"] [unique_id "amr_WeeliGAK7HeY9rNwtgAAAAE"]
[Thu Jul 30 08:38:01.658966 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.2"] [unique_id "amr_WeeliGAK7HeY9rNwtgAAAAE"]
[Thu Jul 30 08:38:01.659212 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.2"] [unique_id "amr_WeeliGAK7HeY9rNwtgAAAAE"]
[Thu Jul 30 08:38:01.676482 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws_access_keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.aws_access_keys"] [unique_id "amr_WeeliGAK7HeY9rNwtwAAAAE"]
[Thu Jul 30 08:38:01.676662 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.aws_access_keys"] [unique_id "amr_WeeliGAK7HeY9rNwtwAAAAE"]
[Thu Jul 30 08:38:01.676880 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.aws_access_keys"] [unique_id "amr_WeeliGAK7HeY9rNwtwAAAAE"]
[Thu Jul 30 08:38:01.694250 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.development.local"] [unique_id "amr_WeeliGAK7HeY9rNwuAAAAAE"]
[Thu Jul 30 08:38:01.694422 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.development.local"] [unique_id "amr_WeeliGAK7HeY9rNwuAAAAAE"]
[Thu Jul 30 08:38:01.694649 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.development.local"] [unique_id "amr_WeeliGAK7HeY9rNwuAAAAAE"]
[Thu Jul 30 08:38:01.711997 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.development.sample"] [unique_id "amr_WeeliGAK7HeY9rNwuQAAAAE"]
[Thu Jul 30 08:38:01.712184 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.development.sample"] [unique_id "amr_WeeliGAK7HeY9rNwuQAAAAE"]
[Thu Jul 30 08:38:01.712404 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.development.sample"] [unique_id "amr_WeeliGAK7HeY9rNwuQAAAAE"]
[Thu Jul 30 08:38:01.732491 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.docker.dev"] [unique_id "amr_WeeliGAK7HeY9rNwugAAAAE"]
[Thu Jul 30 08:38:01.732678 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.docker.dev"] [unique_id "amr_WeeliGAK7HeY9rNwugAAAAE"]
[Thu Jul 30 08:38:01.732949 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.docker.dev"] [unique_id "amr_WeeliGAK7HeY9rNwugAAAAE"]
[Thu Jul 30 08:38:01.752240 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.live"] [unique_id "amr_WeeliGAK7HeY9rNwuwAAAAE"]
[Thu Jul 30 08:38:01.752409 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.live"] [unique_id "amr_WeeliGAK7HeY9rNwuwAAAAE"]
[Thu Jul 30 08:38:01.752618 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.live"] [unique_id "amr_WeeliGAK7HeY9rNwuwAAAAE"]
[Thu Jul 30 08:38:01.770454 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer"] [unique_id "amr_WeeliGAK7HeY9rNwvAAAAAE"]
[Thu Jul 30 08:38:01.770644 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer"] [unique_id "amr_WeeliGAK7HeY9rNwvAAAAAE"]
[Thu Jul 30 08:38:01.770855 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer"] [unique_id "amr_WeeliGAK7HeY9rNwvAAAAAE"]
[Thu Jul 30 08:38:01.788416 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_dsn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer_dsn"] [unique_id "amr_WeeliGAK7HeY9rNwvQAAAAE"]
[Thu Jul 30 08:38:01.788600 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer_dsn"] [unique_id "amr_WeeliGAK7HeY9rNwvQAAAAE"]
[Thu Jul 30 08:38:01.788785 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer_dsn"] [unique_id "amr_WeeliGAK7HeY9rNwvQAAAAE"]
[Thu Jul 30 08:38:01.806553 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_url"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer_url"] [unique_id "amr_WeeliGAK7HeY9rNwvgAAAAE"]
[Thu Jul 30 08:38:01.806746 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer_url"] [unique_id "amr_WeeliGAK7HeY9rNwvgAAAAE"]
[Thu Jul 30 08:38:01.806947 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.mailer_url"] [unique_id "amr_WeeliGAK7HeY9rNwvgAAAAE"]
[Thu Jul 30 08:38:01.824347 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.mailgun"] [unique_id "amr_WeeliGAK7HeY9rNwvwAAAAE"]
[Thu Jul 30 08:38:01.824527 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.mailgun"] [unique_id "amr_WeeliGAK7HeY9rNwvwAAAAE"]
[Thu Jul 30 08:38:01.824760 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.mailgun"] [unique_id "amr_WeeliGAK7HeY9rNwvwAAAAE"]
[Thu Jul 30 08:38:01.844402 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailjet"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.mailjet"] [unique_id "amr_WeeliGAK7HeY9rNwwAAAAAE"]
[Thu Jul 30 08:38:01.844590 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.mailjet"] [unique_id "amr_WeeliGAK7HeY9rNwwAAAAAE"]
[Thu Jul 30 08:38:01.844792 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.mailjet"] [unique_id "amr_WeeliGAK7HeY9rNwwAAAAAE"]
[Thu Jul 30 08:38:01.862085 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mandrill"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.mandrill"] [unique_id "amr_WeeliGAK7HeY9rNwwQAAAAE"]
[Thu Jul 30 08:38:01.862237 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.mandrill"] [unique_id "amr_WeeliGAK7HeY9rNwwQAAAAE"]
[Thu Jul 30 08:38:01.862413 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.mandrill"] [unique_id "amr_WeeliGAK7HeY9rNwwQAAAAE"]
[Thu Jul 30 08:38:01.879645 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.prod.local"] [unique_id "amr_WeeliGAK7HeY9rNwwgAAAAE"]
[Thu Jul 30 08:38:01.879793 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.prod.local"] [unique_id "amr_WeeliGAK7HeY9rNwwgAAAAE"]
[Thu Jul 30 08:38:01.879975 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.prod.local"] [unique_id "amr_WeeliGAK7HeY9rNwwgAAAAE"]
[Thu Jul 30 08:38:01.897277 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.sample"] [unique_id "amr_WeeliGAK7HeY9rNwwwAAAAE"]
[Thu Jul 30 08:38:01.897432 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.sample"] [unique_id "amr_WeeliGAK7HeY9rNwwwAAAAE"]
[Thu Jul 30 08:38:01.897632 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.sample"] [unique_id "amr_WeeliGAK7HeY9rNwwwAAAAE"]
[Thu Jul 30 08:38:01.914897 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.sample.php"] [unique_id "amr_WeeliGAK7HeY9rNwxAAAAAE"]
[Thu Jul 30 08:38:01.915038 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.sample.php"] [unique_id "amr_WeeliGAK7HeY9rNwxAAAAAE"]
[Thu Jul 30 08:38:01.915229 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.sample.php"] [unique_id "amr_WeeliGAK7HeY9rNwxAAAAAE"]
[Thu Jul 30 08:38:01.932402 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.sendgrid"] [unique_id "amr_WeeliGAK7HeY9rNwxQAAAAE"]
[Thu Jul 30 08:38:01.932514 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.sendgrid"] [unique_id "amr_WeeliGAK7HeY9rNwxQAAAAE"]
[Thu Jul 30 08:38:01.932686 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.sendgrid"] [unique_id "amr_WeeliGAK7HeY9rNwxQAAAAE"]
[Thu Jul 30 08:38:01.950182 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sparkpost"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.sparkpost"] [unique_id "amr_WeeliGAK7HeY9rNwxgAAAAE"]
[Thu Jul 30 08:38:01.950317 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.sparkpost"] [unique_id "amr_WeeliGAK7HeY9rNwxgAAAAE"]
[Thu Jul 30 08:38:01.950503 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.sparkpost"] [unique_id "amr_WeeliGAK7HeY9rNwxgAAAAE"]
[Thu Jul 30 08:38:01.967710 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.swp"] [unique_id "amr_WeeliGAK7HeY9rNwxwAAAAE"]
[Thu Jul 30 08:38:01.967855 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.swp"] [unique_id "amr_WeeliGAK7HeY9rNwxwAAAAE"]
[Thu Jul 30 08:38:01.968036 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.swp"] [unique_id "amr_WeeliGAK7HeY9rNwxwAAAAE"]
[Thu Jul 30 08:38:01.985447 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.localapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.test.localapi/.env"] [unique_id "amr_WeeliGAK7HeY9rNwyAAAAAE"]
[Thu Jul 30 08:38:01.985641 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.test.localapi/.env"] [unique_id "amr_WeeliGAK7HeY9rNwyAAAAAE"]
[Thu Jul 30 08:38:01.985837 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.test.localapi/.env"] [unique_id "amr_WeeliGAK7HeY9rNwyAAAAAE"]
[Thu Jul 30 08:38:02.004211 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.test.sample"] [unique_id "amr_WueliGAK7HeY9rNwyQAAAAE"]
[Thu Jul 30 08:38:02.004368 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.test.sample"] [unique_id "amr_WueliGAK7HeY9rNwyQAAAAE"]
[Thu Jul 30 08:38:02.004551 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.test.sample"] [unique_id "amr_WueliGAK7HeY9rNwyQAAAAE"]
[Thu Jul 30 08:38:02.021849 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.travis"] [unique_id "amr_WueliGAK7HeY9rNwygAAAAE"]
[Thu Jul 30 08:38:02.022028 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.travis"] [unique_id "amr_WueliGAK7HeY9rNwygAAAAE"]
[Thu Jul 30 08:38:02.022236 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.travis"] [unique_id "amr_WueliGAK7HeY9rNwygAAAAE"]
[Thu Jul 30 08:38:02.048150 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.txt"] [unique_id "amr_WueliGAK7HeY9rNwywAAAAE"]
[Thu Jul 30 08:38:02.048318 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.txt"] [unique_id "amr_WueliGAK7HeY9rNwywAAAAE"]
[Thu Jul 30 08:38:02.048530 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.txt"] [unique_id "amr_WueliGAK7HeY9rNwywAAAAE"]
[Thu Jul 30 08:38:02.052823 2026] [cgi:error] [pid 2412474:tid 2412474] [client 20.226.90.242:18348] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:38:02.065781 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.uat"] [unique_id "amr_WueliGAK7HeY9rNwzAAAAAE"]
[Thu Jul 30 08:38:02.065905 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.uat"] [unique_id "amr_WueliGAK7HeY9rNwzAAAAAE"]
[Thu Jul 30 08:38:02.066088 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.uat"] [unique_id "amr_WueliGAK7HeY9rNwzAAAAAE"]
[Thu Jul 30 08:38:02.083503 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.www"] [unique_id "amr_WueliGAK7HeY9rNwzQAAAAE"]
[Thu Jul 30 08:38:02.083712 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.www"] [unique_id "amr_WueliGAK7HeY9rNwzQAAAAE"]
[Thu Jul 30 08:38:02.083937 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.www"] [unique_id "amr_WueliGAK7HeY9rNwzQAAAAE"]
[Thu Jul 30 08:38:02.102681 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{dn}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.{{DN}}"] [unique_id "amr_WueliGAK7HeY9rNwzgAAAAE"]
[Thu Jul 30 08:38:02.102818 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.{{DN}}"] [unique_id "amr_WueliGAK7HeY9rNwzgAAAAE"]
[Thu Jul 30 08:38:02.102987 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.{{DN}}"] [unique_id "amr_WueliGAK7HeY9rNwzgAAAAE"]
[Thu Jul 30 08:38:02.120335 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{sd}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env.{{SD}}"] [unique_id "amr_WueliGAK7HeY9rNwzwAAAAE"]
[Thu Jul 30 08:38:02.120492 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env.{{SD}}"] [unique_id "amr_WueliGAK7HeY9rNwzwAAAAE"]
[Thu Jul 30 08:38:02.120699 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env.{{SD}}"] [unique_id "amr_WueliGAK7HeY9rNwzwAAAAE"]
[Thu Jul 30 08:38:02.138124 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env-example"] [unique_id "amr_WueliGAK7HeY9rNw0AAAAAE"]
[Thu Jul 30 08:38:02.138300 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env-example"] [unique_id "amr_WueliGAK7HeY9rNw0AAAAAE"]
[Thu Jul 30 08:38:02.138495 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env-example"] [unique_id "amr_WueliGAK7HeY9rNw0AAAAAE"]
[Thu Jul 30 08:38:02.156110 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env-sample"] [unique_id "amr_WueliGAK7HeY9rNw0QAAAAE"]
[Thu Jul 30 08:38:02.156278 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env-sample"] [unique_id "amr_WueliGAK7HeY9rNw0QAAAAE"]
[Thu Jul 30 08:38:02.156474 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env-sample"] [unique_id "amr_WueliGAK7HeY9rNw0QAAAAE"]
[Thu Jul 30 08:38:02.173888 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env1"] [unique_id "amr_WueliGAK7HeY9rNw0gAAAAE"]
[Thu Jul 30 08:38:02.174063 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env1"] [unique_id "amr_WueliGAK7HeY9rNw0gAAAAE"]
[Thu Jul 30 08:38:02.174274 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env1"] [unique_id "amr_WueliGAK7HeY9rNw0gAAAAE"]
[Thu Jul 30 08:38:02.191598 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env_1"] [unique_id "amr_WueliGAK7HeY9rNw0wAAAAE"]
[Thu Jul 30 08:38:02.191741 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env_1"] [unique_id "amr_WueliGAK7HeY9rNw0wAAAAE"]
[Thu Jul 30 08:38:02.191918 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env_1"] [unique_id "amr_WueliGAK7HeY9rNw0wAAAAE"]
[Thu Jul 30 08:38:02.209222 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env_bak"] [unique_id "amr_WueliGAK7HeY9rNw1AAAAAE"]
[Thu Jul 30 08:38:02.209373 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env_bak"] [unique_id "amr_WueliGAK7HeY9rNw1AAAAAE"]
[Thu Jul 30 08:38:02.209576 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env_bak"] [unique_id "amr_WueliGAK7HeY9rNw1AAAAAE"]
[Thu Jul 30 08:38:02.228060 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env_old"] [unique_id "amr_WueliGAK7HeY9rNw1QAAAAE"]
[Thu Jul 30 08:38:02.228225 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env_old"] [unique_id "amr_WueliGAK7HeY9rNw1QAAAAE"]
[Thu Jul 30 08:38:02.228418 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env_old"] [unique_id "amr_WueliGAK7HeY9rNw1QAAAAE"]
[Thu Jul 30 08:38:02.245549 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env_sample"] [unique_id "amr_WueliGAK7HeY9rNw1gAAAAE"]
[Thu Jul 30 08:38:02.245686 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env_sample"] [unique_id "amr_WueliGAK7HeY9rNw1gAAAAE"]
[Thu Jul 30 08:38:02.245874 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env_sample"] [unique_id "amr_WueliGAK7HeY9rNw1gAAAAE"]
[Thu Jul 30 08:38:02.263306 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.envrc"] [unique_id "amr_WueliGAK7HeY9rNw1wAAAAE"]
[Thu Jul 30 08:38:02.263477 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.envrc"] [unique_id "amr_WueliGAK7HeY9rNw1wAAAAE"]
[Thu Jul 30 08:38:02.263694 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.envrc"] [unique_id "amr_WueliGAK7HeY9rNw1wAAAAE"]
[Thu Jul 30 08:38:02.281093 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.envs"] [unique_id "amr_WueliGAK7HeY9rNw2AAAAAE"]
[Thu Jul 30 08:38:02.281256 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.envs"] [unique_id "amr_WueliGAK7HeY9rNw2AAAAAE"]
[Thu Jul 30 08:38:02.281469 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.envs"] [unique_id "amr_WueliGAK7HeY9rNw2AAAAAE"]
[Thu Jul 30 08:38:02.299945 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.env~"] [unique_id "amr_WueliGAK7HeY9rNw2QAAAAE"]
[Thu Jul 30 08:38:02.300116 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.env~"] [unique_id "amr_WueliGAK7HeY9rNw2QAAAAE"]
[Thu Jul 30 08:38:02.300314 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.env~"] [unique_id "amr_WueliGAK7HeY9rNw2QAAAAE"]
[Thu Jul 30 08:38:02.388896 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.gitlab-ci/.env"] [unique_id "amr_WueliGAK7HeY9rNw3gAAAAE"]
[Thu Jul 30 08:38:02.389085 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.gitlab-ci/.env"] [unique_id "amr_WueliGAK7HeY9rNw3gAAAAE"]
[Thu Jul 30 08:38:02.389287 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.17:39444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.gitlab-ci/.env"] [unique_id "amr_WueliGAK7HeY9rNw3gAAAAE"]
[Thu Jul 30 08:38:02.752023 2026] [core:error] [pid 2421705:tid 2421705] [client 57.141.0.63:42400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:02.752059 2026] [core:error] [pid 2421705:tid 2421705] [client 57.141.0.63:42400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:02.948056 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.vscode/.env"] [unique_id "amr_WjRsn_CrYZtjvMmRZQAAACk"]
[Thu Jul 30 08:38:02.948255 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.vscode/.env"] [unique_id "amr_WjRsn_CrYZtjvMmRZQAAACk"]
[Thu Jul 30 08:38:02.948468 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.vscode/.env"] [unique_id "amr_WjRsn_CrYZtjvMmRZQAAACk"]
[Thu Jul 30 08:38:02.982101 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.bak"] [unique_id "amr_WjRsn_CrYZtjvMmRZwAAACk"]
[Thu Jul 30 08:38:02.982376 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.bak"] [unique_id "amr_WjRsn_CrYZtjvMmRZwAAACk"]
[Thu Jul 30 08:38:02.982705 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.bak"] [unique_id "amr_WjRsn_CrYZtjvMmRZwAAACk"]
[Thu Jul 30 08:38:02.999510 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swm"] [unique_id "amr_WjRsn_CrYZtjvMmRaAAAACk"]
[Thu Jul 30 08:38:02.999732 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swm"] [unique_id "amr_WjRsn_CrYZtjvMmRaAAAACk"]
[Thu Jul 30 08:38:02.999995 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swm"] [unique_id "amr_WjRsn_CrYZtjvMmRaAAAACk"]
[Thu Jul 30 08:38:03.016464 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swn"] [unique_id "amr_WzRsn_CrYZtjvMmRaQAAACk"]
[Thu Jul 30 08:38:03.016649 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swn"] [unique_id "amr_WzRsn_CrYZtjvMmRaQAAACk"]
[Thu Jul 30 08:38:03.016869 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swn"] [unique_id "amr_WzRsn_CrYZtjvMmRaQAAACk"]
[Thu Jul 30 08:38:03.033143 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swo"] [unique_id "amr_WzRsn_CrYZtjvMmRagAAACk"]
[Thu Jul 30 08:38:03.033265 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swo"] [unique_id "amr_WzRsn_CrYZtjvMmRagAAACk"]
[Thu Jul 30 08:38:03.033660 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/.wp-config.php.swo"] [unique_id "amr_WzRsn_CrYZtjvMmRagAAACk"]
[Thu Jul 30 08:38:03.078531 2026] [authz_core:error] [pid 2424973:tid 2424973] [client 57.141.0.55:53188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:03.079165 2026] [authz_core:error] [pid 2424973:tid 2424973] [client 57.141.0.55:53188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:03.152808 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcQAAACk"]
[Thu Jul 30 08:38:03.152960 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcQAAACk"]
[Thu Jul 30 08:38:03.153143 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcQAAACk"]
[Thu Jul 30 08:38:03.169461 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcgAAACk"]
[Thu Jul 30 08:38:03.169608 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcgAAACk"]
[Thu Jul 30 08:38:03.169787 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcgAAACk"]
[Thu Jul 30 08:38:03.187107 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcwAAACk"]
[Thu Jul 30 08:38:03.187246 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcwAAACk"]
[Thu Jul 30 08:38:03.187415 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRcwAAACk"]
[Thu Jul 30 08:38:03.204019 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdAAAACk"]
[Thu Jul 30 08:38:03.204187 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdAAAACk"]
[Thu Jul 30 08:38:03.204370 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdAAAACk"]
[Thu Jul 30 08:38:03.220814 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdQAAACk"]
[Thu Jul 30 08:38:03.220977 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdQAAACk"]
[Thu Jul 30 08:38:03.221173 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdQAAACk"]
[Thu Jul 30 08:38:03.240041 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdgAAACk"]
[Thu Jul 30 08:38:03.240213 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdgAAACk"]
[Thu Jul 30 08:38:03.240397 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRdgAAACk"]
[Thu Jul 30 08:38:03.290924 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/3-sequelize/final/.env"] [unique_id "amr_WzRsn_CrYZtjvMmReQAAACk"]
[Thu Jul 30 08:38:03.291123 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/3-sequelize/final/.env"] [unique_id "amr_WzRsn_CrYZtjvMmReQAAACk"]
[Thu Jul 30 08:38:03.291316 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/3-sequelize/final/.env"] [unique_id "amr_WzRsn_CrYZtjvMmReQAAACk"]
[Thu Jul 30 08:38:03.312945 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/31_structure_tests/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRegAAACk"]
[Thu Jul 30 08:38:03.313142 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/31_structure_tests/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRegAAACk"]
[Thu Jul 30 08:38:03.313331 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/31_structure_tests/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRegAAACk"]
[Thu Jul 30 08:38:03.335482 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/API/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRewAAACk"]
[Thu Jul 30 08:38:03.335613 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/API/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRewAAACk"]
[Thu Jul 30 08:38:03.335798 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/API/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRewAAACk"]
[Thu Jul 30 08:38:03.352144 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/API/.env.bak"] [unique_id "amr_WzRsn_CrYZtjvMmRfAAAACk"]
[Thu Jul 30 08:38:03.352269 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/API/.env.bak"] [unique_id "amr_WzRsn_CrYZtjvMmRfAAAACk"]
[Thu Jul 30 08:38:03.352438 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/API/.env.bak"] [unique_id "amr_WzRsn_CrYZtjvMmRfAAAACk"]
[Thu Jul 30 08:38:03.368769 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/API/.env.dev"] [unique_id "amr_WzRsn_CrYZtjvMmRfQAAACk"]
[Thu Jul 30 08:38:03.368899 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/API/.env.dev"] [unique_id "amr_WzRsn_CrYZtjvMmRfQAAACk"]
[Thu Jul 30 08:38:03.369091 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/API/.env.dev"] [unique_id "amr_WzRsn_CrYZtjvMmRfQAAACk"]
[Thu Jul 30 08:38:03.387125 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/API/.env.dist"] [unique_id "amr_WzRsn_CrYZtjvMmRfgAAACk"]
[Thu Jul 30 08:38:03.387291 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/API/.env.dist"] [unique_id "amr_WzRsn_CrYZtjvMmRfgAAACk"]
[Thu Jul 30 08:38:03.387489 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/API/.env.dist"] [unique_id "amr_WzRsn_CrYZtjvMmRfgAAACk"]
[Thu Jul 30 08:38:03.403839 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/API/.env.local"] [unique_id "amr_WzRsn_CrYZtjvMmRfwAAACk"]
[Thu Jul 30 08:38:03.403980 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/API/.env.local"] [unique_id "amr_WzRsn_CrYZtjvMmRfwAAACk"]
[Thu Jul 30 08:38:03.404186 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/API/.env.local"] [unique_id "amr_WzRsn_CrYZtjvMmRfwAAACk"]
[Thu Jul 30 08:38:03.438235 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/APP/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRgQAAACk"]
[Thu Jul 30 08:38:03.438411 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/APP/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRgQAAACk"]
[Thu Jul 30 08:38:03.438641 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/APP/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRgQAAACk"]
[Thu Jul 30 08:38:03.455579 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_WzRsn_CrYZtjvMmRggAAACk"]
[Thu Jul 30 08:38:03.455922 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_WzRsn_CrYZtjvMmRggAAACk"]
[Thu Jul 30 08:38:03.456156 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_WzRsn_CrYZtjvMmRggAAACk"]
[Thu Jul 30 08:38:03.472323 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Archipel/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRgwAAACk"]
[Thu Jul 30 08:38:03.472444 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Archipel/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRgwAAACk"]
[Thu Jul 30 08:38:03.472629 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Archipel/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRgwAAACk"]
[Thu Jul 30 08:38:03.488840 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Assignment3/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhAAAACk"]
[Thu Jul 30 08:38:03.488969 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Assignment3/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhAAAACk"]
[Thu Jul 30 08:38:03.489165 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Assignment3/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhAAAACk"]
[Thu Jul 30 08:38:03.505946 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Assignment4/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhQAAACk"]
[Thu Jul 30 08:38:03.506101 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Assignment4/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhQAAACk"]
[Thu Jul 30 08:38:03.506280 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Assignment4/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhQAAACk"]
[Thu Jul 30 08:38:03.522666 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/BACK/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhgAAACk"]
[Thu Jul 30 08:38:03.522783 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/BACK/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhgAAACk"]
[Thu Jul 30 08:38:03.522968 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/BACK/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhgAAACk"]
[Thu Jul 30 08:38:03.541902 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/BACKEND/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhwAAACk"]
[Thu Jul 30 08:38:03.542058 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/BACKEND/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhwAAACk"]
[Thu Jul 30 08:38:03.542268 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/BACKEND/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRhwAAACk"]
[Thu Jul 30 08:38:03.559766 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/BackEnd/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRiAAAACk"]
[Thu Jul 30 08:38:03.559910 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/BackEnd/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRiAAAACk"]
[Thu Jul 30 08:38:03.560109 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/BackEnd/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRiAAAACk"]
[Thu Jul 30 08:38:03.576626 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/Build.bat"] [unique_id "amr_WzRsn_CrYZtjvMmRiQAAACk"]
[Thu Jul 30 08:38:03.576921 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Build.bat"] [unique_id "amr_WzRsn_CrYZtjvMmRiQAAACk"]
[Thu Jul 30 08:38:03.577131 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Build.bat"] [unique_id "amr_WzRsn_CrYZtjvMmRiQAAACk"]
[Thu Jul 30 08:38:03.594882 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Chai/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRigAAACk"]
[Thu Jul 30 08:38:03.595025 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Chai/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRigAAACk"]
[Thu Jul 30 08:38:03.595238 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Chai/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRigAAACk"]
[Thu Jul 30 08:38:03.611954 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ClientApp/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRiwAAACk"]
[Thu Jul 30 08:38:03.612138 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ClientApp/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRiwAAACk"]
[Thu Jul 30 08:38:03.612343 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ClientApp/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRiwAAACk"]
[Thu Jul 30 08:38:03.628981 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjAAAACk"]
[Thu Jul 30 08:38:03.629174 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjAAAACk"]
[Thu Jul 30 08:38:03.629386 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjAAAACk"]
[Thu Jul 30 08:38:03.646006 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ContainerRegistry/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjQAAACk"]
[Thu Jul 30 08:38:03.646193 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ContainerRegistry/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjQAAACk"]
[Thu Jul 30 08:38:03.646397 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ContainerRegistry/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjQAAACk"]
[Thu Jul 30 08:38:03.679525 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjwAAACk"]
[Thu Jul 30 08:38:03.679669 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjwAAACk"]
[Thu Jul 30 08:38:03.679852 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRjwAAACk"]
[Thu Jul 30 08:38:03.696660 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkAAAACk"]
[Thu Jul 30 08:38:03.696827 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkAAAACk"]
[Thu Jul 30 08:38:03.697031 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkAAAACk"]
[Thu Jul 30 08:38:03.714112 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/FE/huey/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkQAAACk"]
[Thu Jul 30 08:38:03.714236 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/FE/huey/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkQAAACk"]
[Thu Jul 30 08:38:03.714411 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/FE/huey/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkQAAACk"]
[Thu Jul 30 08:38:03.730935 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkgAAACk"]
[Thu Jul 30 08:38:03.731081 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkgAAACk"]
[Thu Jul 30 08:38:03.731261 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkgAAACk"]
[Thu Jul 30 08:38:03.747823 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/FRONT/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkwAAACk"]
[Thu Jul 30 08:38:03.747954 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/FRONT/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkwAAACk"]
[Thu Jul 30 08:38:03.748143 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/FRONT/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRkwAAACk"]
[Thu Jul 30 08:38:03.766872 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/FRONTEND/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRlAAAACk"]
[Thu Jul 30 08:38:03.767118 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/FRONTEND/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRlAAAACk"]
[Thu Jul 30 08:38:03.767397 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/FRONTEND/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRlAAAACk"]
[Thu Jul 30 08:38:03.843340 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmAAAACk"]
[Thu Jul 30 08:38:03.843526 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmAAAACk"]
[Thu Jul 30 08:38:03.843751 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmAAAACk"]
[Thu Jul 30 08:38:03.861213 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmQAAACk"]
[Thu Jul 30 08:38:03.861424 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmQAAACk"]
[Thu Jul 30 08:38:03.861651 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmQAAACk"]
[Thu Jul 30 08:38:03.880626 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmgAAACk"]
[Thu Jul 30 08:38:03.880824 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmgAAACk"]
[Thu Jul 30 08:38:03.881038 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmgAAACk"]
[Thu Jul 30 08:38:03.899082 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/HUNIV_migration/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmwAAACk"]
[Thu Jul 30 08:38:03.899263 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/HUNIV_migration/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmwAAACk"]
[Thu Jul 30 08:38:03.899465 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/HUNIV_migration/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRmwAAACk"]
[Thu Jul 30 08:38:03.916196 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Hash/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnAAAACk"]
[Thu Jul 30 08:38:03.916379 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Hash/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnAAAACk"]
[Thu Jul 30 08:38:03.916592 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Hash/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnAAAACk"]
[Thu Jul 30 08:38:03.933139 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Helmetjs/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnQAAACk"]
[Thu Jul 30 08:38:03.933316 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Helmetjs/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnQAAACk"]
[Thu Jul 30 08:38:03.933520 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Helmetjs/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnQAAACk"]
[Thu Jul 30 08:38:03.950761 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Imagebord/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRngAAACk"]
[Thu Jul 30 08:38:03.950925 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Imagebord/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRngAAACk"]
[Thu Jul 30 08:38:03.951129 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Imagebord/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRngAAACk"]
[Thu Jul 30 08:38:03.969310 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/InstantCV/server/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnwAAACk"]
[Thu Jul 30 08:38:03.969505 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/InstantCV/server/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnwAAACk"]
[Thu Jul 30 08:38:03.969710 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/InstantCV/server/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRnwAAACk"]
[Thu Jul 30 08:38:03.971223 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/._wp-config.php"] [unique_id "amr_W7qaA9Ba2AB974QW7wAAADU"]
[Thu Jul 30 08:38:03.971400 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/._wp-config.php"] [unique_id "amr_W7qaA9Ba2AB974QW7wAAADU"]
[Thu Jul 30 08:38:03.971521 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/._wp-config.php"] [unique_id "amr_W7qaA9Ba2AB974QW7wAAADU"]
[Thu Jul 30 08:38:03.987288 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Kubernetes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRoAAAACk"]
[Thu Jul 30 08:38:03.987460 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Kubernetes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRoAAAACk"]
[Thu Jul 30 08:38:03.987679 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Kubernetes/.env"] [unique_id "amr_WzRsn_CrYZtjvMmRoAAAACk"]
[Thu Jul 30 08:38:04.004996 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Library/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRoQAAACk"]
[Thu Jul 30 08:38:04.005176 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Library/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRoQAAACk"]
[Thu Jul 30 08:38:04.005379 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Library/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRoQAAACk"]
[Thu Jul 30 08:38:04.022758 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRogAAACk"]
[Thu Jul 30 08:38:04.022967 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRogAAACk"]
[Thu Jul 30 08:38:04.023201 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRogAAACk"]
[Thu Jul 30 08:38:04.040153 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRowAAACk"]
[Thu Jul 30 08:38:04.040356 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRowAAACk"]
[Thu Jul 30 08:38:04.040586 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRowAAACk"]
[Thu Jul 30 08:38:04.057457 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpAAAACk"]
[Thu Jul 30 08:38:04.057641 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpAAAACk"]
[Thu Jul 30 08:38:04.057836 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpAAAACk"]
[Thu Jul 30 08:38:04.077336 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpQAAACk"]
[Thu Jul 30 08:38:04.077533 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpQAAACk"]
[Thu Jul 30 08:38:04.077742 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpQAAACk"]
[Thu Jul 30 08:38:04.114392 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpgAAACk"]
[Thu Jul 30 08:38:04.114614 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpgAAACk"]
[Thu Jul 30 08:38:04.114848 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRpgAAACk"]
[Thu Jul 30 08:38:04.183269 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Passportjs/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRqgAAACk"]
[Thu Jul 30 08:38:04.183410 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Passportjs/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRqgAAACk"]
[Thu Jul 30 08:38:04.183594 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Passportjs/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRqgAAACk"]
[Thu Jul 30 08:38:04.200222 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Serve_time_server/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRqwAAACk"]
[Thu Jul 30 08:38:04.200403 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Serve_time_server/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRqwAAACk"]
[Thu Jul 30 08:38:04.200630 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Serve_time_server/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRqwAAACk"]
[Thu Jul 30 08:38:04.278599 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Server_with_db/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRrwAAACk"]
[Thu Jul 30 08:38:04.278812 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Server_with_db/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRrwAAACk"]
[Thu Jul 30 08:38:04.279030 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Server_with_db/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRrwAAACk"]
[Thu Jul 30 08:38:04.297315 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Simple_server/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsAAAACk"]
[Thu Jul 30 08:38:04.297540 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Simple_server/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsAAAACk"]
[Thu Jul 30 08:38:04.297766 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Simple_server/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsAAAACk"]
[Thu Jul 30 08:38:04.314489 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Socketio/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsQAAACk"]
[Thu Jul 30 08:38:04.314714 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Socketio/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsQAAACk"]
[Thu Jul 30 08:38:04.314937 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Socketio/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsQAAACk"]
[Thu Jul 30 08:38:04.331963 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Sources/API/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsgAAACk"]
[Thu Jul 30 08:38:04.332163 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Sources/API/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsgAAACk"]
[Thu Jul 30 08:38:04.332474 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Sources/API/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRsgAAACk"]
[Thu Jul 30 08:38:04.332737 2026] [ssl:error] [pid 2418302:tid 2418302] (EAI 2)Name or service not known: [client 144.76.19.72:54002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:04.332765 2026] [ssl:error] [pid 2418302:tid 2418302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:04.349386 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/SpotiApps/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRswAAACk"]
[Thu Jul 30 08:38:04.349548 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/SpotiApps/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRswAAACk"]
[Thu Jul 30 08:38:04.349736 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/SpotiApps/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRswAAACk"]
[Thu Jul 30 08:38:04.366231 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Tests/Application/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtAAAACk"]
[Thu Jul 30 08:38:04.366370 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Tests/Application/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtAAAACk"]
[Thu Jul 30 08:38:04.366535 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Tests/Application/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtAAAACk"]
[Thu Jul 30 08:38:04.383050 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Travel_form/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtQAAACk"]
[Thu Jul 30 08:38:04.383190 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Travel_form/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtQAAACk"]
[Thu Jul 30 08:38:04.383355 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Travel_form/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtQAAACk"]
[Thu Jul 30 08:38:04.388591 2026] [ssl:error] [pid 2420712:tid 2420712] (EAI 2)Name or service not known: [client 144.76.19.72:54008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:04.388614 2026] [ssl:error] [pid 2420712:tid 2420712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:04.402307 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/User_info/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtgAAACk"]
[Thu Jul 30 08:38:04.402455 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/User_info/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtgAAACk"]
[Thu Jul 30 08:38:04.402641 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/User_info/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRtgAAACk"]
[Thu Jul 30 08:38:04.455534 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/Web/siteMariage/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRuQAAACk"]
[Thu Jul 30 08:38:04.455729 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/Web/siteMariage/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRuQAAACk"]
[Thu Jul 30 08:38:04.455915 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:39446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/Web/siteMariage/.env"] [unique_id "amr_XDRsn_CrYZtjvMmRuQAAACk"]
[Thu Jul 30 08:38:04.490512 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.aws/keys.conf"] [unique_id "amr_XLqaA9Ba2AB974QW-QAAADU"]
[Thu Jul 30 08:38:04.490842 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.aws/keys.conf"] [unique_id "amr_XLqaA9Ba2AB974QW-QAAADU"]
[Thu Jul 30 08:38:04.490950 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.aws/keys.conf"] [unique_id "amr_XLqaA9Ba2AB974QW-QAAADU"]
[Thu Jul 30 08:38:04.690731 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/_static/.env"] [unique_id "amr_XNzyF_5LOsrbx7vMeAAAACU"]
[Thu Jul 30 08:38:04.690857 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/_static/.env"] [unique_id "amr_XNzyF_5LOsrbx7vMeAAAACU"]
[Thu Jul 30 08:38:04.691031 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/_static/.env"] [unique_id "amr_XNzyF_5LOsrbx7vMeAAAACU"]
[Thu Jul 30 08:38:04.727542 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_XLqaA9Ba2AB974QW_gAAADU"]
[Thu Jul 30 08:38:04.727848 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_XLqaA9Ba2AB974QW_gAAADU"]
[Thu Jul 30 08:38:04.727944 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_XLqaA9Ba2AB974QW_gAAADU"]
[Thu Jul 30 08:38:04.741257 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /account/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/account/.env"] [unique_id "amr_XNzyF_5LOsrbx7vMewAAACU"]
[Thu Jul 30 08:38:04.741383 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/account/.env"] [unique_id "amr_XNzyF_5LOsrbx7vMewAAACU"]
[Thu Jul 30 08:38:04.741550 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/account/.env"] [unique_id "amr_XNzyF_5LOsrbx7vMewAAACU"]
[Thu Jul 30 08:38:04.779720 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /account/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/account/.git/config"] [unique_id "amr_XNzyF_5LOsrbx7vMfQAAACU"]
[Thu Jul 30 08:38:04.779843 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/account/.git/config"] [unique_id "amr_XNzyF_5LOsrbx7vMfQAAACU"]
[Thu Jul 30 08:38:04.780028 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/account/.git/config"] [unique_id "amr_XNzyF_5LOsrbx7vMfQAAACU"]
[Thu Jul 30 08:38:04.868432 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_XNzyF_5LOsrbx7vMggAAACU"]
[Thu Jul 30 08:38:04.868739 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_XNzyF_5LOsrbx7vMggAAACU"]
[Thu Jul 30 08:38:04.868923 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_XNzyF_5LOsrbx7vMggAAACU"]
[Thu Jul 30 08:38:04.886722 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/account/api-config.ini"] [unique_id "amr_XNzyF_5LOsrbx7vMgwAAACU"]
[Thu Jul 30 08:38:04.887084 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/account/api-config.ini"] [unique_id "amr_XNzyF_5LOsrbx7vMgwAAACU"]
[Thu Jul 30 08:38:04.887281 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/account/api-config.ini"] [unique_id "amr_XNzyF_5LOsrbx7vMgwAAACU"]
[Thu Jul 30 08:38:04.944361 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/account/laravel.log"] [unique_id "amr_XNzyF_5LOsrbx7vMhgAAACU"]
[Thu Jul 30 08:38:04.944651 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/account/laravel.log"] [unique_id "amr_XNzyF_5LOsrbx7vMhgAAACU"]
[Thu Jul 30 08:38:04.944829 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/account/laravel.log"] [unique_id "amr_XNzyF_5LOsrbx7vMhgAAACU"]
[Thu Jul 30 08:38:04.999868 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/account/web.config"] [unique_id "amr_XNzyF_5LOsrbx7vMiQAAACU"]
[Thu Jul 30 08:38:05.000088 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /account/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/account/web.config"] [unique_id "amr_XNzyF_5LOsrbx7vMiQAAACU"]
[Thu Jul 30 08:38:05.000228 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/account/web.config"] [unique_id "amr_XNzyF_5LOsrbx7vMiQAAACU"]
[Thu Jul 30 08:38:05.000409 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/account/web.config"] [unique_id "amr_XNzyF_5LOsrbx7vMiQAAACU"]
[Thu Jul 30 08:38:05.019362 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/acme-challenge/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMigAAACU"]
[Thu Jul 30 08:38:05.019486 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/acme-challenge/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMigAAACU"]
[Thu Jul 30 08:38:05.019658 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/acme-challenge/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMigAAACU"]
[Thu Jul 30 08:38:05.033754 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_XbqaA9Ba2AB974QXBAAAADU"]
[Thu Jul 30 08:38:05.033885 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_XbqaA9Ba2AB974QXBAAAADU"]
[Thu Jul 30 08:38:05.033985 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_XbqaA9Ba2AB974QXBAAAADU"]
[Thu Jul 30 08:38:05.036212 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/acme/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMiwAAACU"]
[Thu Jul 30 08:38:05.036337 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/acme/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMiwAAACU"]
[Thu Jul 30 08:38:05.036621 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/acme/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMiwAAACU"]
[Thu Jul 30 08:38:05.053620 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/acme_challenges/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjAAAACU"]
[Thu Jul 30 08:38:05.053736 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/acme_challenges/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjAAAACU"]
[Thu Jul 30 08:38:05.053901 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/acme_challenges/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjAAAACU"]
[Thu Jul 30 08:38:05.073721 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/actions-server/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjQAAACU"]
[Thu Jul 30 08:38:05.073864 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/actions-server/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjQAAACU"]
[Thu Jul 30 08:38:05.074031 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/actions-server/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjQAAACU"]
[Thu Jul 30 08:38:05.090486 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/adm/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjgAAACU"]
[Thu Jul 30 08:38:05.090636 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/adm/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjgAAACU"]
[Thu Jul 30 08:38:05.090805 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/adm/.env"] [unique_id "amr_XdzyF_5LOsrbx7vMjgAAACU"]
[Thu Jul 30 08:38:05.110375 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.bak"] [unique_id "amr_XdzyF_5LOsrbx7vMjwAAACU"]
[Thu Jul 30 08:38:05.110527 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.bak"] [unique_id "amr_XdzyF_5LOsrbx7vMjwAAACU"]
[Thu Jul 30 08:38:05.110704 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.bak"] [unique_id "amr_XdzyF_5LOsrbx7vMjwAAACU"]
[Thu Jul 30 08:38:05.129410 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.dev"] [unique_id "amr_XdzyF_5LOsrbx7vMkAAAACU"]
[Thu Jul 30 08:38:05.129568 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.dev"] [unique_id "amr_XdzyF_5LOsrbx7vMkAAAACU"]
[Thu Jul 30 08:38:05.129741 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.dev"] [unique_id "amr_XdzyF_5LOsrbx7vMkAAAACU"]
[Thu Jul 30 08:38:05.147078 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.dist"] [unique_id "amr_XdzyF_5LOsrbx7vMkQAAACU"]
[Thu Jul 30 08:38:05.147208 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.dist"] [unique_id "amr_XdzyF_5LOsrbx7vMkQAAACU"]
[Thu Jul 30 08:38:05.147370 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.dist"] [unique_id "amr_XdzyF_5LOsrbx7vMkQAAACU"]
[Thu Jul 30 08:38:05.165098 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.local"] [unique_id "amr_XdzyF_5LOsrbx7vMkgAAACU"]
[Thu Jul 30 08:38:05.165227 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.local"] [unique_id "amr_XdzyF_5LOsrbx7vMkgAAACU"]
[Thu Jul 30 08:38:05.165389 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/adm/.env.local"] [unique_id "amr_XdzyF_5LOsrbx7vMkgAAACU"]
[Thu Jul 30 08:38:05.367152 2026] [core:error] [pid 2425019:tid 2425019] (13)Permission denied: [client 216.73.216.199:58430] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory163/subsystem/uevent
[Thu Jul 30 08:38:05.818716 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/adm/php.ini"] [unique_id "amr_XdzyF_5LOsrbx7vMtQAAACU"]
[Thu Jul 30 08:38:05.819003 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/adm/php.ini"] [unique_id "amr_XdzyF_5LOsrbx7vMtQAAACU"]
[Thu Jul 30 08:38:05.819186 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/adm/php.ini"] [unique_id "amr_XdzyF_5LOsrbx7vMtQAAACU"]
[Thu Jul 30 08:38:06.087278 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_XrqaA9Ba2AB974QXFwAAADU"]
[Thu Jul 30 08:38:06.087409 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_XrqaA9Ba2AB974QXFwAAADU"]
[Thu Jul 30 08:38:06.087507 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_XrqaA9Ba2AB974QXFwAAADU"]
[Thu Jul 30 08:38:06.157898 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.2"] [unique_id "amr_XrqaA9Ba2AB974QXGQAAADU"]
[Thu Jul 30 08:38:06.158032 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.2"] [unique_id "amr_XrqaA9Ba2AB974QXGQAAADU"]
[Thu Jul 30 08:38:06.158143 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.2"] [unique_id "amr_XrqaA9Ba2AB974QXGQAAADU"]
[Thu Jul 30 08:38:06.175708 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws_access_keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.aws_access_keys"] [unique_id "amr_XrqaA9Ba2AB974QXGgAAADU"]
[Thu Jul 30 08:38:06.175824 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.aws_access_keys"] [unique_id "amr_XrqaA9Ba2AB974QXGgAAADU"]
[Thu Jul 30 08:38:06.175918 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.aws_access_keys"] [unique_id "amr_XrqaA9Ba2AB974QXGgAAADU"]
[Thu Jul 30 08:38:06.197525 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.development.local"] [unique_id "amr_XrqaA9Ba2AB974QXGwAAADU"]
[Thu Jul 30 08:38:06.197689 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.development.local"] [unique_id "amr_XrqaA9Ba2AB974QXGwAAADU"]
[Thu Jul 30 08:38:06.197791 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.development.local"] [unique_id "amr_XrqaA9Ba2AB974QXGwAAADU"]
[Thu Jul 30 08:38:06.198943 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin-app/.env"] [unique_id "amr_XtzyF_5LOsrbx7vMyQAAACU"]
[Thu Jul 30 08:38:06.199053 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin-app/.env"] [unique_id "amr_XtzyF_5LOsrbx7vMyQAAACU"]
[Thu Jul 30 08:38:06.199221 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin-app/.env"] [unique_id "amr_XtzyF_5LOsrbx7vMyQAAACU"]
[Thu Jul 30 08:38:06.215242 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.bak"] [unique_id "amr_XtzyF_5LOsrbx7vMygAAACU"]
[Thu Jul 30 08:38:06.215365 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.bak"] [unique_id "amr_XtzyF_5LOsrbx7vMygAAACU"]
[Thu Jul 30 08:38:06.215520 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.bak"] [unique_id "amr_XtzyF_5LOsrbx7vMygAAACU"]
[Thu Jul 30 08:38:06.227121 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.development.sample"] [unique_id "amr_XrqaA9Ba2AB974QXHAAAADU"]
[Thu Jul 30 08:38:06.227293 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.development.sample"] [unique_id "amr_XrqaA9Ba2AB974QXHAAAADU"]
[Thu Jul 30 08:38:06.227410 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.development.sample"] [unique_id "amr_XrqaA9Ba2AB974QXHAAAADU"]
[Thu Jul 30 08:38:06.231744 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.dev"] [unique_id "amr_XtzyF_5LOsrbx7vMywAAACU"]
[Thu Jul 30 08:38:06.231876 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.dev"] [unique_id "amr_XtzyF_5LOsrbx7vMywAAACU"]
[Thu Jul 30 08:38:06.232032 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.dev"] [unique_id "amr_XtzyF_5LOsrbx7vMywAAACU"]
[Thu Jul 30 08:38:06.245010 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.docker.dev"] [unique_id "amr_XrqaA9Ba2AB974QXHQAAADU"]
[Thu Jul 30 08:38:06.245205 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.docker.dev"] [unique_id "amr_XrqaA9Ba2AB974QXHQAAADU"]
[Thu Jul 30 08:38:06.245369 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.docker.dev"] [unique_id "amr_XrqaA9Ba2AB974QXHQAAADU"]
[Thu Jul 30 08:38:06.251676 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.dist"] [unique_id "amr_XtzyF_5LOsrbx7vMzAAAACU"]
[Thu Jul 30 08:38:06.251837 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.dist"] [unique_id "amr_XtzyF_5LOsrbx7vMzAAAACU"]
[Thu Jul 30 08:38:06.252028 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.dist"] [unique_id "amr_XtzyF_5LOsrbx7vMzAAAACU"]
[Thu Jul 30 08:38:06.264237 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.live"] [unique_id "amr_XrqaA9Ba2AB974QXHgAAADU"]
[Thu Jul 30 08:38:06.264421 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.live"] [unique_id "amr_XrqaA9Ba2AB974QXHgAAADU"]
[Thu Jul 30 08:38:06.264542 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.live"] [unique_id "amr_XrqaA9Ba2AB974QXHgAAADU"]
[Thu Jul 30 08:38:06.269279 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.local"] [unique_id "amr_XtzyF_5LOsrbx7vMzQAAACU"]
[Thu Jul 30 08:38:06.269405 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.local"] [unique_id "amr_XtzyF_5LOsrbx7vMzQAAACU"]
[Thu Jul 30 08:38:06.269577 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.local"] [unique_id "amr_XtzyF_5LOsrbx7vMzQAAACU"]
[Thu Jul 30 08:38:06.291394 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer"] [unique_id "amr_XrqaA9Ba2AB974QXHwAAADU"]
[Thu Jul 30 08:38:06.291573 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer"] [unique_id "amr_XrqaA9Ba2AB974QXHwAAADU"]
[Thu Jul 30 08:38:06.291686 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer"] [unique_id "amr_XrqaA9Ba2AB974QXHwAAADU"]
[Thu Jul 30 08:38:06.297662 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.production"] [unique_id "amr_XtzyF_5LOsrbx7vMzgAAACU"]
[Thu Jul 30 08:38:06.297794 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.production"] [unique_id "amr_XtzyF_5LOsrbx7vMzgAAACU"]
[Thu Jul 30 08:38:06.297983 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.production"] [unique_id "amr_XtzyF_5LOsrbx7vMzgAAACU"]
[Thu Jul 30 08:38:06.310338 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_dsn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer_dsn"] [unique_id "amr_XrqaA9Ba2AB974QXIAAAADU"]
[Thu Jul 30 08:38:06.310465 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer_dsn"] [unique_id "amr_XrqaA9Ba2AB974QXIAAAADU"]
[Thu Jul 30 08:38:06.310577 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer_dsn"] [unique_id "amr_XrqaA9Ba2AB974QXIAAAADU"]
[Thu Jul 30 08:38:06.314317 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.staging"] [unique_id "amr_XtzyF_5LOsrbx7vMzwAAACU"]
[Thu Jul 30 08:38:06.314444 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.staging"] [unique_id "amr_XtzyF_5LOsrbx7vMzwAAACU"]
[Thu Jul 30 08:38:06.314631 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/.env.staging"] [unique_id "amr_XtzyF_5LOsrbx7vMzwAAACU"]
[Thu Jul 30 08:38:06.328412 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_url"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer_url"] [unique_id "amr_XrqaA9Ba2AB974QXIQAAADU"]
[Thu Jul 30 08:38:06.328557 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer_url"] [unique_id "amr_XrqaA9Ba2AB974QXIQAAADU"]
[Thu Jul 30 08:38:06.328678 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailer_url"] [unique_id "amr_XrqaA9Ba2AB974QXIQAAADU"]
[Thu Jul 30 08:38:06.346723 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailgun"] [unique_id "amr_XrqaA9Ba2AB974QXIgAAADU"]
[Thu Jul 30 08:38:06.346894 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailgun"] [unique_id "amr_XrqaA9Ba2AB974QXIgAAADU"]
[Thu Jul 30 08:38:06.347014 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailgun"] [unique_id "amr_XrqaA9Ba2AB974QXIgAAADU"]
[Thu Jul 30 08:38:06.356215 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/.git/config"] [unique_id "amr_XtzyF_5LOsrbx7vM0QAAACU"]
[Thu Jul 30 08:38:06.356373 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/.git/config"] [unique_id "amr_XtzyF_5LOsrbx7vM0QAAACU"]
[Thu Jul 30 08:38:06.356575 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/.git/config"] [unique_id "amr_XtzyF_5LOsrbx7vM0QAAACU"]
[Thu Jul 30 08:38:06.364923 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailjet"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailjet"] [unique_id "amr_XrqaA9Ba2AB974QXIwAAADU"]
[Thu Jul 30 08:38:06.365050 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailjet"] [unique_id "amr_XrqaA9Ba2AB974QXIwAAADU"]
[Thu Jul 30 08:38:06.365184 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mailjet"] [unique_id "amr_XrqaA9Ba2AB974QXIwAAADU"]
[Thu Jul 30 08:38:06.385038 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mandrill"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mandrill"] [unique_id "amr_XrqaA9Ba2AB974QXJAAAADU"]
[Thu Jul 30 08:38:06.385181 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mandrill"] [unique_id "amr_XrqaA9Ba2AB974QXJAAAADU"]
[Thu Jul 30 08:38:06.385282 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.mandrill"] [unique_id "amr_XrqaA9Ba2AB974QXJAAAADU"]
[Thu Jul 30 08:38:06.410384 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.prod.local"] [unique_id "amr_XrqaA9Ba2AB974QXJQAAADU"]
[Thu Jul 30 08:38:06.410505 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.prod.local"] [unique_id "amr_XrqaA9Ba2AB974QXJQAAADU"]
[Thu Jul 30 08:38:06.410623 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.prod.local"] [unique_id "amr_XrqaA9Ba2AB974QXJQAAADU"]
[Thu Jul 30 08:38:06.432617 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sample"] [unique_id "amr_XrqaA9Ba2AB974QXJgAAADU"]
[Thu Jul 30 08:38:06.432753 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sample"] [unique_id "amr_XrqaA9Ba2AB974QXJgAAADU"]
[Thu Jul 30 08:38:06.432854 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sample"] [unique_id "amr_XrqaA9Ba2AB974QXJgAAADU"]
[Thu Jul 30 08:38:06.440808 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_XtzyF_5LOsrbx7vM1gAAACU"]
[Thu Jul 30 08:38:06.441232 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_XtzyF_5LOsrbx7vM1gAAACU"]
[Thu Jul 30 08:38:06.441470 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:39462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_XtzyF_5LOsrbx7vM1gAAACU"]
[Thu Jul 30 08:38:06.451016 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sample.php"] [unique_id "amr_XrqaA9Ba2AB974QXJwAAADU"]
[Thu Jul 30 08:38:06.451190 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sample.php"] [unique_id "amr_XrqaA9Ba2AB974QXJwAAADU"]
[Thu Jul 30 08:38:06.451297 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sample.php"] [unique_id "amr_XrqaA9Ba2AB974QXJwAAADU"]
[Thu Jul 30 08:38:06.473406 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sendgrid"] [unique_id "amr_XrqaA9Ba2AB974QXKAAAADU"]
[Thu Jul 30 08:38:06.473571 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sendgrid"] [unique_id "amr_XrqaA9Ba2AB974QXKAAAADU"]
[Thu Jul 30 08:38:06.473674 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sendgrid"] [unique_id "amr_XrqaA9Ba2AB974QXKAAAADU"]
[Thu Jul 30 08:38:06.483713 2026] [security2:error] [pid 2419141:tid 2419141] [client 77.90.185.129:61704] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "banskoexpress.com"] [uri "/sftp-config.json"] [unique_id "amr_Xvd8VTPP_oF0WGs_FAAAAAU"]
[Thu Jul 30 08:38:06.483919 2026] [security2:error] [pid 2419141:tid 2419141] [client 77.90.185.129:61704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "banskoexpress.com"] [uri "/sftp-config.json"] [unique_id "amr_Xvd8VTPP_oF0WGs_FAAAAAU"]
[Thu Jul 30 08:38:06.484135 2026] [security2:error] [pid 2419141:tid 2419141] [client 77.90.185.129:61704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "banskoexpress.com"] [uri "/403.shtml"] [unique_id "amr_Xvd8VTPP_oF0WGs_FAAAAAU"]
[Thu Jul 30 08:38:06.491682 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sparkpost"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sparkpost"] [unique_id "amr_XrqaA9Ba2AB974QXKQAAADU"]
[Thu Jul 30 08:38:06.491840 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sparkpost"] [unique_id "amr_XrqaA9Ba2AB974QXKQAAADU"]
[Thu Jul 30 08:38:06.491938 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.sparkpost"] [unique_id "amr_XrqaA9Ba2AB974QXKQAAADU"]
[Thu Jul 30 08:38:06.514583 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/admin/api-config.ini"] [unique_id "amr_XkQvuHxPljPWrXhpogAAAC4"]
[Thu Jul 30 08:38:06.514868 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/api-config.ini"] [unique_id "amr_XkQvuHxPljPWrXhpogAAAC4"]
[Thu Jul 30 08:38:06.515058 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/api-config.ini"] [unique_id "amr_XkQvuHxPljPWrXhpogAAAC4"]
[Thu Jul 30 08:38:06.523974 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.swp"] [unique_id "amr_XrqaA9Ba2AB974QXKgAAADU"]
[Thu Jul 30 08:38:06.524113 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.swp"] [unique_id "amr_XrqaA9Ba2AB974QXKgAAADU"]
[Thu Jul 30 08:38:06.524209 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.swp"] [unique_id "amr_XrqaA9Ba2AB974QXKgAAADU"]
[Thu Jul 30 08:38:06.543233 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.localapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amr_XrqaA9Ba2AB974QXKwAAADU"]
[Thu Jul 30 08:38:06.543354 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amr_XrqaA9Ba2AB974QXKwAAADU"]
[Thu Jul 30 08:38:06.543451 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amr_XrqaA9Ba2AB974QXKwAAADU"]
[Thu Jul 30 08:38:06.565090 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.test.sample"] [unique_id "amr_XrqaA9Ba2AB974QXLAAAADU"]
[Thu Jul 30 08:38:06.565231 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.test.sample"] [unique_id "amr_XrqaA9Ba2AB974QXLAAAADU"]
[Thu Jul 30 08:38:06.565330 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.test.sample"] [unique_id "amr_XrqaA9Ba2AB974QXLAAAADU"]
[Thu Jul 30 08:38:06.582597 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.travis"] [unique_id "amr_XrqaA9Ba2AB974QXLQAAADU"]
[Thu Jul 30 08:38:06.582716 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.travis"] [unique_id "amr_XrqaA9Ba2AB974QXLQAAADU"]
[Thu Jul 30 08:38:06.582815 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.travis"] [unique_id "amr_XrqaA9Ba2AB974QXLQAAADU"]
[Thu Jul 30 08:38:06.601347 2026] [ssl:error] [pid 2410999:tid 2410999] (70014)End of file found: [client 216.73.216.199:3615] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:06.609304 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.txt"] [unique_id "amr_XrqaA9Ba2AB974QXLgAAADU"]
[Thu Jul 30 08:38:06.609429 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.txt"] [unique_id "amr_XrqaA9Ba2AB974QXLgAAADU"]
[Thu Jul 30 08:38:06.609527 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.txt"] [unique_id "amr_XrqaA9Ba2AB974QXLgAAADU"]
[Thu Jul 30 08:38:06.627084 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.uat"] [unique_id "amr_XrqaA9Ba2AB974QXLwAAADU"]
[Thu Jul 30 08:38:06.627201 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.uat"] [unique_id "amr_XrqaA9Ba2AB974QXLwAAADU"]
[Thu Jul 30 08:38:06.627297 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.uat"] [unique_id "amr_XrqaA9Ba2AB974QXLwAAADU"]
[Thu Jul 30 08:38:06.647716 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.www"] [unique_id "amr_XrqaA9Ba2AB974QXMAAAADU"]
[Thu Jul 30 08:38:06.647847 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.www"] [unique_id "amr_XrqaA9Ba2AB974QXMAAAADU"]
[Thu Jul 30 08:38:06.647947 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.www"] [unique_id "amr_XrqaA9Ba2AB974QXMAAAADU"]
[Thu Jul 30 08:38:06.671382 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{dn}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.{{DN}}"] [unique_id "amr_XrqaA9Ba2AB974QXMQAAADU"]
[Thu Jul 30 08:38:06.671507 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.{{DN}}"] [unique_id "amr_XrqaA9Ba2AB974QXMQAAADU"]
[Thu Jul 30 08:38:06.671617 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.{{DN}}"] [unique_id "amr_XrqaA9Ba2AB974QXMQAAADU"]
[Thu Jul 30 08:38:06.689446 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{sd}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.{{SD}}"] [unique_id "amr_XrqaA9Ba2AB974QXMgAAADU"]
[Thu Jul 30 08:38:06.689597 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.{{SD}}"] [unique_id "amr_XrqaA9Ba2AB974QXMgAAADU"]
[Thu Jul 30 08:38:06.689692 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env.{{SD}}"] [unique_id "amr_XrqaA9Ba2AB974QXMgAAADU"]
[Thu Jul 30 08:38:06.708731 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env-example"] [unique_id "amr_XrqaA9Ba2AB974QXMwAAADU"]
[Thu Jul 30 08:38:06.708858 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env-example"] [unique_id "amr_XrqaA9Ba2AB974QXMwAAADU"]
[Thu Jul 30 08:38:06.708957 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env-example"] [unique_id "amr_XrqaA9Ba2AB974QXMwAAADU"]
[Thu Jul 30 08:38:06.728538 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env-sample"] [unique_id "amr_XrqaA9Ba2AB974QXNAAAADU"]
[Thu Jul 30 08:38:06.728680 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env-sample"] [unique_id "amr_XrqaA9Ba2AB974QXNAAAADU"]
[Thu Jul 30 08:38:06.728774 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env-sample"] [unique_id "amr_XrqaA9Ba2AB974QXNAAAADU"]
[Thu Jul 30 08:38:06.731683 2026] [authz_core:error] [pid 2424223:tid 2424223] [client 57.141.0.65:45888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:06.732340 2026] [authz_core:error] [pid 2424223:tid 2424223] [client 57.141.0.65:45888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:06.746984 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env1"] [unique_id "amr_XrqaA9Ba2AB974QXNQAAADU"]
[Thu Jul 30 08:38:06.747109 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env1"] [unique_id "amr_XrqaA9Ba2AB974QXNQAAADU"]
[Thu Jul 30 08:38:06.747203 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env1"] [unique_id "amr_XrqaA9Ba2AB974QXNQAAADU"]
[Thu Jul 30 08:38:06.764710 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_1"] [unique_id "amr_XrqaA9Ba2AB974QXNgAAADU"]
[Thu Jul 30 08:38:06.764833 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_1"] [unique_id "amr_XrqaA9Ba2AB974QXNgAAADU"]
[Thu Jul 30 08:38:06.764928 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_1"] [unique_id "amr_XrqaA9Ba2AB974QXNgAAADU"]
[Thu Jul 30 08:38:06.793533 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_bak"] [unique_id "amr_XrqaA9Ba2AB974QXNwAAADU"]
[Thu Jul 30 08:38:06.793661 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_bak"] [unique_id "amr_XrqaA9Ba2AB974QXNwAAADU"]
[Thu Jul 30 08:38:06.793758 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_bak"] [unique_id "amr_XrqaA9Ba2AB974QXNwAAADU"]
[Thu Jul 30 08:38:06.812693 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_old"] [unique_id "amr_XrqaA9Ba2AB974QXOAAAADU"]
[Thu Jul 30 08:38:06.812820 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_old"] [unique_id "amr_XrqaA9Ba2AB974QXOAAAADU"]
[Thu Jul 30 08:38:06.812919 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_old"] [unique_id "amr_XrqaA9Ba2AB974QXOAAAADU"]
[Thu Jul 30 08:38:06.838144 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_sample"] [unique_id "amr_XrqaA9Ba2AB974QXOQAAADU"]
[Thu Jul 30 08:38:06.838273 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_sample"] [unique_id "amr_XrqaA9Ba2AB974QXOQAAADU"]
[Thu Jul 30 08:38:06.838371 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env_sample"] [unique_id "amr_XrqaA9Ba2AB974QXOQAAADU"]
[Thu Jul 30 08:38:06.856456 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.envrc"] [unique_id "amr_XrqaA9Ba2AB974QXOgAAADU"]
[Thu Jul 30 08:38:06.856612 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.envrc"] [unique_id "amr_XrqaA9Ba2AB974QXOgAAADU"]
[Thu Jul 30 08:38:06.856709 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.envrc"] [unique_id "amr_XrqaA9Ba2AB974QXOgAAADU"]
[Thu Jul 30 08:38:06.874984 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.envs"] [unique_id "amr_XrqaA9Ba2AB974QXOwAAADU"]
[Thu Jul 30 08:38:06.875112 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.envs"] [unique_id "amr_XrqaA9Ba2AB974QXOwAAADU"]
[Thu Jul 30 08:38:06.875206 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.envs"] [unique_id "amr_XrqaA9Ba2AB974QXOwAAADU"]
[Thu Jul 30 08:38:06.895266 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env~"] [unique_id "amr_XrqaA9Ba2AB974QXPAAAADU"]
[Thu Jul 30 08:38:06.895390 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env~"] [unique_id "amr_XrqaA9Ba2AB974QXPAAAADU"]
[Thu Jul 30 08:38:06.895485 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.env~"] [unique_id "amr_XrqaA9Ba2AB974QXPAAAADU"]
[Thu Jul 30 08:38:07.133528 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amr_X7qaA9Ba2AB974QXQQAAADU"]
[Thu Jul 30 08:38:07.133708 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amr_X7qaA9Ba2AB974QXQQAAADU"]
[Thu Jul 30 08:38:07.133821 2026] [security2:error] [pid 2412507:tid 2412507] [client 185.177.72.17:37912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amr_X7qaA9Ba2AB974QXQQAAADU"]
[Thu Jul 30 08:38:07.204627 2026] [ssl:error] [pid 2425019:tid 2425019] (70014)End of file found: [client 216.73.216.199:58430] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:07.246282 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/admin/laravel.log"] [unique_id "amr_X0QvuHxPljPWrXhpxgAAAC4"]
[Thu Jul 30 08:38:07.246574 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/laravel.log"] [unique_id "amr_X0QvuHxPljPWrXhpxgAAAC4"]
[Thu Jul 30 08:38:07.246738 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/laravel.log"] [unique_id "amr_X0QvuHxPljPWrXhpxgAAAC4"]
[Thu Jul 30 08:38:07.379803 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/admin/php.ini"] [unique_id "amr_X0QvuHxPljPWrXhpzQAAAC4"]
[Thu Jul 30 08:38:07.380127 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/php.ini"] [unique_id "amr_X0QvuHxPljPWrXhpzQAAAC4"]
[Thu Jul 30 08:38:07.380303 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/php.ini"] [unique_id "amr_X0QvuHxPljPWrXhpzQAAAC4"]
[Thu Jul 30 08:38:07.445342 2026] [ssl:error] [pid 2425341:tid 2425341] (EAI 2)Name or service not known: [client 144.76.19.72:54016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:07.445390 2026] [ssl:error] [pid 2425341:tid 2425341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:07.502575 2026] [ssl:error] [pid 2424223:tid 2424223] (EAI 2)Name or service not known: [client 144.76.19.72:54030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:07.502608 2026] [ssl:error] [pid 2424223:tid 2424223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:07.666598 2026] [lsapi:warn] [pid 2419665:tid 2419665] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:38:07.785984 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/admin/web.config"] [unique_id "amr_X0QvuHxPljPWrXhp4AAAAC4"]
[Thu Jul 30 08:38:07.786203 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /admin/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admin/web.config"] [unique_id "amr_X0QvuHxPljPWrXhp4AAAAC4"]
[Thu Jul 30 08:38:07.786320 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admin/web.config"] [unique_id "amr_X0QvuHxPljPWrXhp4AAAAC4"]
[Thu Jul 30 08:38:07.786490 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admin/web.config"] [unique_id "amr_X0QvuHxPljPWrXhp4AAAAC4"]
[Thu Jul 30 08:38:07.865610 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/adminer/.env"] [unique_id "amr_X0QvuHxPljPWrXhp5AAAAC4"]
[Thu Jul 30 08:38:07.865762 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/adminer/.env"] [unique_id "amr_X0QvuHxPljPWrXhp5AAAAC4"]
[Thu Jul 30 08:38:07.865945 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/adminer/.env"] [unique_id "amr_X0QvuHxPljPWrXhp5AAAAC4"]
[Thu Jul 30 08:38:07.887830 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/administration/.env"] [unique_id "amr_X0QvuHxPljPWrXhp5QAAAC4"]
[Thu Jul 30 08:38:07.887964 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/administration/.env"] [unique_id "amr_X0QvuHxPljPWrXhp5QAAAC4"]
[Thu Jul 30 08:38:07.888151 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/administration/.env"] [unique_id "amr_X0QvuHxPljPWrXhp5QAAAC4"]
[Thu Jul 30 08:38:07.905908 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.bak"] [unique_id "amr_X0QvuHxPljPWrXhp5gAAAC4"]
[Thu Jul 30 08:38:07.906094 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.bak"] [unique_id "amr_X0QvuHxPljPWrXhp5gAAAC4"]
[Thu Jul 30 08:38:07.906306 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.bak"] [unique_id "amr_X0QvuHxPljPWrXhp5gAAAC4"]
[Thu Jul 30 08:38:07.928179 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.dev"] [unique_id "amr_X0QvuHxPljPWrXhp5wAAAC4"]
[Thu Jul 30 08:38:07.928337 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.dev"] [unique_id "amr_X0QvuHxPljPWrXhp5wAAAC4"]
[Thu Jul 30 08:38:07.928529 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.dev"] [unique_id "amr_X0QvuHxPljPWrXhp5wAAAC4"]
[Thu Jul 30 08:38:07.949679 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.dist"] [unique_id "amr_X0QvuHxPljPWrXhp6AAAAC4"]
[Thu Jul 30 08:38:07.949845 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.dist"] [unique_id "amr_X0QvuHxPljPWrXhp6AAAAC4"]
[Thu Jul 30 08:38:07.950034 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.dist"] [unique_id "amr_X0QvuHxPljPWrXhp6AAAAC4"]
[Thu Jul 30 08:38:07.971269 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.local"] [unique_id "amr_X0QvuHxPljPWrXhp6QAAAC4"]
[Thu Jul 30 08:38:07.971442 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.local"] [unique_id "amr_X0QvuHxPljPWrXhp6QAAAC4"]
[Thu Jul 30 08:38:07.971651 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:10260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/administration/.env.local"] [unique_id "amr_X0QvuHxPljPWrXhp6QAAAC4"]
[Thu Jul 30 08:38:08.655765 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:14418] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/._wp-config.php"] [unique_id "amr_YOC233pHXOTf93SVYQAAADM"]
[Thu Jul 30 08:38:08.655946 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:14418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/._wp-config.php"] [unique_id "amr_YOC233pHXOTf93SVYQAAADM"]
[Thu Jul 30 08:38:08.656158 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:14418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_YOC233pHXOTf93SVYQAAADM"]
[Thu Jul 30 08:38:08.835109 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.vscode/.env"] [unique_id "amr_YEWA1f959iSsV5T7qQAAABs"]
[Thu Jul 30 08:38:08.835250 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.vscode/.env"] [unique_id "amr_YEWA1f959iSsV5T7qQAAABs"]
[Thu Jul 30 08:38:08.835360 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.vscode/.env"] [unique_id "amr_YEWA1f959iSsV5T7qQAAABs"]
[Thu Jul 30 08:38:08.852430 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/administration/php.ini"] [unique_id "amr_YMsDPUni1EbX-qVgjwAAADg"]
[Thu Jul 30 08:38:08.852772 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/administration/php.ini"] [unique_id "amr_YMsDPUni1EbX-qVgjwAAADg"]
[Thu Jul 30 08:38:08.852970 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/administration/php.ini"] [unique_id "amr_YMsDPUni1EbX-qVgjwAAADg"]
[Thu Jul 30 08:38:08.911570 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.bak"] [unique_id "amr_YEWA1f959iSsV5T7qwAAABs"]
[Thu Jul 30 08:38:08.911761 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.bak"] [unique_id "amr_YEWA1f959iSsV5T7qwAAABs"]
[Thu Jul 30 08:38:08.911888 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.bak"] [unique_id "amr_YEWA1f959iSsV5T7qwAAABs"]
[Thu Jul 30 08:38:08.915786 2026] [access_compat:error] [pid 2420087:tid 2420087] [client 2.189.5.142:46364] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 08:38:08.931094 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swm"] [unique_id "amr_YEWA1f959iSsV5T7rAAAABs"]
[Thu Jul 30 08:38:08.931272 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swm"] [unique_id "amr_YEWA1f959iSsV5T7rAAAABs"]
[Thu Jul 30 08:38:08.931382 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swm"] [unique_id "amr_YEWA1f959iSsV5T7rAAAABs"]
[Thu Jul 30 08:38:08.950891 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swn"] [unique_id "amr_YEWA1f959iSsV5T7rQAAABs"]
[Thu Jul 30 08:38:08.951081 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swn"] [unique_id "amr_YEWA1f959iSsV5T7rQAAABs"]
[Thu Jul 30 08:38:08.951196 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swn"] [unique_id "amr_YEWA1f959iSsV5T7rQAAABs"]
[Thu Jul 30 08:38:09.003230 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swo"] [unique_id "amr_YUWA1f959iSsV5T7rgAAABs"]
[Thu Jul 30 08:38:09.003445 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swo"] [unique_id "amr_YUWA1f959iSsV5T7rgAAABs"]
[Thu Jul 30 08:38:09.003575 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/.wp-config.php.swo"] [unique_id "amr_YUWA1f959iSsV5T7rgAAABs"]
[Thu Jul 30 08:38:09.308874 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admins/.env"] [unique_id "amr_YcsDPUni1EbX-qVgpgAAADg"]
[Thu Jul 30 08:38:09.309003 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admins/.env"] [unique_id "amr_YcsDPUni1EbX-qVgpgAAADg"]
[Thu Jul 30 08:38:09.309182 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admins/.env"] [unique_id "amr_YcsDPUni1EbX-qVgpgAAADg"]
[Thu Jul 30 08:38:09.329169 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.bak"] [unique_id "amr_YcsDPUni1EbX-qVgpwAAADg"]
[Thu Jul 30 08:38:09.329302 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.bak"] [unique_id "amr_YcsDPUni1EbX-qVgpwAAADg"]
[Thu Jul 30 08:38:09.329471 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.bak"] [unique_id "amr_YcsDPUni1EbX-qVgpwAAADg"]
[Thu Jul 30 08:38:09.346772 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.dev"] [unique_id "amr_YcsDPUni1EbX-qVgqAAAADg"]
[Thu Jul 30 08:38:09.346885 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.dev"] [unique_id "amr_YcsDPUni1EbX-qVgqAAAADg"]
[Thu Jul 30 08:38:09.347046 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.dev"] [unique_id "amr_YcsDPUni1EbX-qVgqAAAADg"]
[Thu Jul 30 08:38:09.366286 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.dist"] [unique_id "amr_YcsDPUni1EbX-qVgqQAAADg"]
[Thu Jul 30 08:38:09.366404 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.dist"] [unique_id "amr_YcsDPUni1EbX-qVgqQAAADg"]
[Thu Jul 30 08:38:09.366571 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.dist"] [unique_id "amr_YcsDPUni1EbX-qVgqQAAADg"]
[Thu Jul 30 08:38:09.385531 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.local"] [unique_id "amr_YcsDPUni1EbX-qVgqgAAADg"]
[Thu Jul 30 08:38:09.385658 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.local"] [unique_id "amr_YcsDPUni1EbX-qVgqgAAADg"]
[Thu Jul 30 08:38:09.385813 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admins/.env.local"] [unique_id "amr_YcsDPUni1EbX-qVgqgAAADg"]
[Thu Jul 30 08:38:09.400163 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7tQAAABs"]
[Thu Jul 30 08:38:09.400355 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7tQAAABs"]
[Thu Jul 30 08:38:09.400466 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7tQAAABs"]
[Thu Jul 30 08:38:09.419688 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7tgAAABs"]
[Thu Jul 30 08:38:09.419859 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7tgAAABs"]
[Thu Jul 30 08:38:09.419970 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7tgAAABs"]
[Thu Jul 30 08:38:09.440025 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7twAAABs"]
[Thu Jul 30 08:38:09.440237 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7twAAABs"]
[Thu Jul 30 08:38:09.440353 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7twAAABs"]
[Thu Jul 30 08:38:09.459967 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7uAAAABs"]
[Thu Jul 30 08:38:09.460107 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7uAAAABs"]
[Thu Jul 30 08:38:09.460212 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7uAAAABs"]
[Thu Jul 30 08:38:09.482082 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7uQAAABs"]
[Thu Jul 30 08:38:09.482202 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7uQAAABs"]
[Thu Jul 30 08:38:09.482300 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7uQAAABs"]
[Thu Jul 30 08:38:09.512771 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7ugAAABs"]
[Thu Jul 30 08:38:09.512946 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7ugAAABs"]
[Thu Jul 30 08:38:09.513077 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_YUWA1f959iSsV5T7ugAAABs"]
[Thu Jul 30 08:38:09.647850 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amr_YUWA1f959iSsV5T7vQAAABs"]
[Thu Jul 30 08:38:09.647975 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amr_YUWA1f959iSsV5T7vQAAABs"]
[Thu Jul 30 08:38:09.648088 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amr_YUWA1f959iSsV5T7vQAAABs"]
[Thu Jul 30 08:38:09.672352 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/31_structure_tests/.env"] [unique_id "amr_YUWA1f959iSsV5T7vgAAABs"]
[Thu Jul 30 08:38:09.672469 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/31_structure_tests/.env"] [unique_id "amr_YUWA1f959iSsV5T7vgAAABs"]
[Thu Jul 30 08:38:09.672571 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/31_structure_tests/.env"] [unique_id "amr_YUWA1f959iSsV5T7vgAAABs"]
[Thu Jul 30 08:38:09.693725 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env"] [unique_id "amr_YUWA1f959iSsV5T7vwAAABs"]
[Thu Jul 30 08:38:09.693841 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env"] [unique_id "amr_YUWA1f959iSsV5T7vwAAABs"]
[Thu Jul 30 08:38:09.693938 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env"] [unique_id "amr_YUWA1f959iSsV5T7vwAAABs"]
[Thu Jul 30 08:38:09.712719 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.bak"] [unique_id "amr_YUWA1f959iSsV5T7wAAAABs"]
[Thu Jul 30 08:38:09.712845 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.bak"] [unique_id "amr_YUWA1f959iSsV5T7wAAAABs"]
[Thu Jul 30 08:38:09.712940 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.bak"] [unique_id "amr_YUWA1f959iSsV5T7wAAAABs"]
[Thu Jul 30 08:38:09.732410 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.dev"] [unique_id "amr_YUWA1f959iSsV5T7wQAAABs"]
[Thu Jul 30 08:38:09.732538 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.dev"] [unique_id "amr_YUWA1f959iSsV5T7wQAAABs"]
[Thu Jul 30 08:38:09.732649 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.dev"] [unique_id "amr_YUWA1f959iSsV5T7wQAAABs"]
[Thu Jul 30 08:38:09.752196 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.dist"] [unique_id "amr_YUWA1f959iSsV5T7wgAAABs"]
[Thu Jul 30 08:38:09.752321 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.dist"] [unique_id "amr_YUWA1f959iSsV5T7wgAAABs"]
[Thu Jul 30 08:38:09.752415 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.dist"] [unique_id "amr_YUWA1f959iSsV5T7wgAAABs"]
[Thu Jul 30 08:38:09.773744 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.local"] [unique_id "amr_YUWA1f959iSsV5T7wwAAABs"]
[Thu Jul 30 08:38:09.773872 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.local"] [unique_id "amr_YUWA1f959iSsV5T7wwAAABs"]
[Thu Jul 30 08:38:09.773969 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/API/.env.local"] [unique_id "amr_YUWA1f959iSsV5T7wwAAABs"]
[Thu Jul 30 08:38:09.852873 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/APP/.env"] [unique_id "amr_YUWA1f959iSsV5T7xQAAABs"]
[Thu Jul 30 08:38:09.853016 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/APP/.env"] [unique_id "amr_YUWA1f959iSsV5T7xQAAABs"]
[Thu Jul 30 08:38:09.853133 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/APP/.env"] [unique_id "amr_YUWA1f959iSsV5T7xQAAABs"]
[Thu Jul 30 08:38:09.872039 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_YUWA1f959iSsV5T7xgAAABs"]
[Thu Jul 30 08:38:09.872385 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_YUWA1f959iSsV5T7xgAAABs"]
[Thu Jul 30 08:38:09.872497 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_YUWA1f959iSsV5T7xgAAABs"]
[Thu Jul 30 08:38:09.891910 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Archipel/.env"] [unique_id "amr_YUWA1f959iSsV5T7xwAAABs"]
[Thu Jul 30 08:38:09.892051 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Archipel/.env"] [unique_id "amr_YUWA1f959iSsV5T7xwAAABs"]
[Thu Jul 30 08:38:09.892175 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Archipel/.env"] [unique_id "amr_YUWA1f959iSsV5T7xwAAABs"]
[Thu Jul 30 08:38:09.911123 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Assignment3/.env"] [unique_id "amr_YUWA1f959iSsV5T7yAAAABs"]
[Thu Jul 30 08:38:09.911279 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Assignment3/.env"] [unique_id "amr_YUWA1f959iSsV5T7yAAAABs"]
[Thu Jul 30 08:38:09.911384 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Assignment3/.env"] [unique_id "amr_YUWA1f959iSsV5T7yAAAABs"]
[Thu Jul 30 08:38:09.938744 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Assignment4/.env"] [unique_id "amr_YUWA1f959iSsV5T7yQAAABs"]
[Thu Jul 30 08:38:09.938920 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Assignment4/.env"] [unique_id "amr_YUWA1f959iSsV5T7yQAAABs"]
[Thu Jul 30 08:38:09.939021 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Assignment4/.env"] [unique_id "amr_YUWA1f959iSsV5T7yQAAABs"]
[Thu Jul 30 08:38:09.942032 2026] [autoindex:error] [pid 2422379:tid 2422379] (13)Permission denied: [client 216.73.216.199:8052] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/thewill/
[Thu Jul 30 08:38:09.961743 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BACK/.env"] [unique_id "amr_YUWA1f959iSsV5T7ygAAABs"]
[Thu Jul 30 08:38:09.961914 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BACK/.env"] [unique_id "amr_YUWA1f959iSsV5T7ygAAABs"]
[Thu Jul 30 08:38:09.962020 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BACK/.env"] [unique_id "amr_YUWA1f959iSsV5T7ygAAABs"]
[Thu Jul 30 08:38:09.970719 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:62548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:09.970747 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:62548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:09.983977 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BACKEND/.env"] [unique_id "amr_YUWA1f959iSsV5T7ywAAABs"]
[Thu Jul 30 08:38:09.984158 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BACKEND/.env"] [unique_id "amr_YUWA1f959iSsV5T7ywAAABs"]
[Thu Jul 30 08:38:09.984268 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BACKEND/.env"] [unique_id "amr_YUWA1f959iSsV5T7ywAAABs"]
[Thu Jul 30 08:38:10.005887 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BackEnd/.env"] [unique_id "amr_YkWA1f959iSsV5T7zAAAABs"]
[Thu Jul 30 08:38:10.006013 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BackEnd/.env"] [unique_id "amr_YkWA1f959iSsV5T7zAAAABs"]
[Thu Jul 30 08:38:10.006135 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/BackEnd/.env"] [unique_id "amr_YkWA1f959iSsV5T7zAAAABs"]
[Thu Jul 30 08:38:10.016713 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62550] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/._wp-config.php"] [unique_id "amr_YkQvuHxPljPWrXhqCAAAAC4"]
[Thu Jul 30 08:38:10.016926 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62550] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/._wp-config.php"] [unique_id "amr_YkQvuHxPljPWrXhqCAAAAC4"]
[Thu Jul 30 08:38:10.017331 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.017663 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62550] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/._wp-config.php"] [unique_id "amr_YkQvuHxPljPWrXhqCAAAAC4"]
[Thu Jul 30 08:38:10.028327 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Build.bat"] [unique_id "amr_YkWA1f959iSsV5T7zQAAABs"]
[Thu Jul 30 08:38:10.028657 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Build.bat"] [unique_id "amr_YkWA1f959iSsV5T7zQAAABs"]
[Thu Jul 30 08:38:10.028777 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Build.bat"] [unique_id "amr_YkWA1f959iSsV5T7zQAAABs"]
[Thu Jul 30 08:38:10.062576 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Chai/.env"] [unique_id "amr_YkWA1f959iSsV5T7zgAAABs"]
[Thu Jul 30 08:38:10.062716 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Chai/.env"] [unique_id "amr_YkWA1f959iSsV5T7zgAAABs"]
[Thu Jul 30 08:38:10.062816 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Chai/.env"] [unique_id "amr_YkWA1f959iSsV5T7zgAAABs"]
[Thu Jul 30 08:38:10.073342 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.073365 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.087465 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T7zwAAABs"]
[Thu Jul 30 08:38:10.087625 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T7zwAAABs"]
[Thu Jul 30 08:38:10.087740 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T7zwAAABs"]
[Thu Jul 30 08:38:10.111989 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T70AAAABs"]
[Thu Jul 30 08:38:10.112155 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T70AAAABs"]
[Thu Jul 30 08:38:10.112265 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T70AAAABs"]
[Thu Jul 30 08:38:10.117824 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.117844 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.125406 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/admins/php.ini"] [unique_id "amr_YssDPUni1EbX-qVgzQAAADg"]
[Thu Jul 30 08:38:10.125743 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/admins/php.ini"] [unique_id "amr_YssDPUni1EbX-qVgzQAAADg"]
[Thu Jul 30 08:38:10.125942 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/admins/php.ini"] [unique_id "amr_YssDPUni1EbX-qVgzQAAADg"]
[Thu Jul 30 08:38:10.137518 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amr_YkWA1f959iSsV5T70QAAABs"]
[Thu Jul 30 08:38:10.137706 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amr_YkWA1f959iSsV5T70QAAABs"]
[Thu Jul 30 08:38:10.137827 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amr_YkWA1f959iSsV5T70QAAABs"]
[Thu Jul 30 08:38:10.157199 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.157225 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.194459 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:62596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.194505 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:62596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.218589 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_YkWA1f959iSsV5T70wAAABs"]
[Thu Jul 30 08:38:10.218789 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_YkWA1f959iSsV5T70wAAABs"]
[Thu Jul 30 08:38:10.218902 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_YkWA1f959iSsV5T70wAAABs"]
[Thu Jul 30 08:38:10.240915 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.240939 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.242156 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_YkWA1f959iSsV5T71AAAABs"]
[Thu Jul 30 08:38:10.242279 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_YkWA1f959iSsV5T71AAAABs"]
[Thu Jul 30 08:38:10.242396 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_YkWA1f959iSsV5T71AAAABs"]
[Thu Jul 30 08:38:10.261960 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FE/huey/.env"] [unique_id "amr_YkWA1f959iSsV5T71QAAABs"]
[Thu Jul 30 08:38:10.262135 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FE/huey/.env"] [unique_id "amr_YkWA1f959iSsV5T71QAAABs"]
[Thu Jul 30 08:38:10.262244 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FE/huey/.env"] [unique_id "amr_YkWA1f959iSsV5T71QAAABs"]
[Thu Jul 30 08:38:10.282524 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_YkWA1f959iSsV5T71gAAABs"]
[Thu Jul 30 08:38:10.282720 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_YkWA1f959iSsV5T71gAAABs"]
[Thu Jul 30 08:38:10.282854 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_YkWA1f959iSsV5T71gAAABs"]
[Thu Jul 30 08:38:10.287449 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.287476 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.301776 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FRONT/.env"] [unique_id "amr_YkWA1f959iSsV5T71wAAABs"]
[Thu Jul 30 08:38:10.301902 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FRONT/.env"] [unique_id "amr_YkWA1f959iSsV5T71wAAABs"]
[Thu Jul 30 08:38:10.302001 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FRONT/.env"] [unique_id "amr_YkWA1f959iSsV5T71wAAABs"]
[Thu Jul 30 08:38:10.325522 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FRONTEND/.env"] [unique_id "amr_YkWA1f959iSsV5T72AAAABs"]
[Thu Jul 30 08:38:10.325676 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FRONTEND/.env"] [unique_id "amr_YkWA1f959iSsV5T72AAAABs"]
[Thu Jul 30 08:38:10.325774 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/FRONTEND/.env"] [unique_id "amr_YkWA1f959iSsV5T72AAAABs"]
[Thu Jul 30 08:38:10.342463 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:62614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.342485 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:62614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.383336 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.383364 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.425024 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:62626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.425046 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:62626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.483950 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62638] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/.aws/keys.conf"] [unique_id "amr_YtzyF_5LOsrbx7vM3wAAACU"]
[Thu Jul 30 08:38:10.484335 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62638] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.aws/keys.conf"] [unique_id "amr_YtzyF_5LOsrbx7vM3wAAACU"]
[Thu Jul 30 08:38:10.484706 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.484841 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62638] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.aws/keys.conf"] [unique_id "amr_YtzyF_5LOsrbx7vM3wAAACU"]
[Thu Jul 30 08:38:10.521851 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/agora/.env"] [unique_id "amr_YssDPUni1EbX-qVg4AAAADg"]
[Thu Jul 30 08:38:10.522027 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/agora/.env"] [unique_id "amr_YssDPUni1EbX-qVg4AAAADg"]
[Thu Jul 30 08:38:10.522250 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/agora/.env"] [unique_id "amr_YssDPUni1EbX-qVg4AAAADg"]
[Thu Jul 30 08:38:10.536597 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.536632 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:62650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.543254 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_YkWA1f959iSsV5T73AAAABs"]
[Thu Jul 30 08:38:10.543385 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_YkWA1f959iSsV5T73AAAABs"]
[Thu Jul 30 08:38:10.543496 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_YkWA1f959iSsV5T73AAAABs"]
[Thu Jul 30 08:38:10.544435 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/alpha/.env"] [unique_id "amr_YssDPUni1EbX-qVg4QAAADg"]
[Thu Jul 30 08:38:10.544550 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/alpha/.env"] [unique_id "amr_YssDPUni1EbX-qVg4QAAADg"]
[Thu Jul 30 08:38:10.544743 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/alpha/.env"] [unique_id "amr_YssDPUni1EbX-qVg4QAAADg"]
[Thu Jul 30 08:38:10.564687 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/anaconda/.env"] [unique_id "amr_YssDPUni1EbX-qVg4gAAADg"]
[Thu Jul 30 08:38:10.564918 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/anaconda/.env"] [unique_id "amr_YssDPUni1EbX-qVg4gAAADg"]
[Thu Jul 30 08:38:10.565142 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/anaconda/.env"] [unique_id "amr_YssDPUni1EbX-qVg4gAAADg"]
[Thu Jul 30 08:38:10.568502 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_YkWA1f959iSsV5T73QAAABs"]
[Thu Jul 30 08:38:10.568850 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_YkWA1f959iSsV5T73QAAABs"]
[Thu Jul 30 08:38:10.568961 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_YkWA1f959iSsV5T73QAAABs"]
[Thu Jul 30 08:38:10.579730 2026] [ssl:error] [pid 2411409:tid 2411409] (EAI 2)Name or service not known: [client 144.76.19.72:40242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:10.579767 2026] [ssl:error] [pid 2411409:tid 2411409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:10.584043 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.584065 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.588823 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_YkWA1f959iSsV5T73gAAABs"]
[Thu Jul 30 08:38:10.588971 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_YkWA1f959iSsV5T73gAAABs"]
[Thu Jul 30 08:38:10.589105 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_YkWA1f959iSsV5T73gAAABs"]
[Thu Jul 30 08:38:10.612177 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amr_YkWA1f959iSsV5T73wAAABs"]
[Thu Jul 30 08:38:10.612361 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amr_YkWA1f959iSsV5T73wAAABs"]
[Thu Jul 30 08:38:10.612480 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amr_YkWA1f959iSsV5T73wAAABs"]
[Thu Jul 30 08:38:10.631352 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.631374 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.632015 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Hash/.env"] [unique_id "amr_YkWA1f959iSsV5T74AAAABs"]
[Thu Jul 30 08:38:10.632181 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Hash/.env"] [unique_id "amr_YkWA1f959iSsV5T74AAAABs"]
[Thu Jul 30 08:38:10.632294 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Hash/.env"] [unique_id "amr_YkWA1f959iSsV5T74AAAABs"]
[Thu Jul 30 08:38:10.637392 2026] [ssl:error] [pid 2424224:tid 2424224] (EAI 2)Name or service not known: [client 144.76.19.72:40252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:10.637436 2026] [ssl:error] [pid 2424224:tid 2424224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:10.658190 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Helmetjs/.env"] [unique_id "amr_YkWA1f959iSsV5T74QAAABs"]
[Thu Jul 30 08:38:10.658343 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Helmetjs/.env"] [unique_id "amr_YkWA1f959iSsV5T74QAAABs"]
[Thu Jul 30 08:38:10.658448 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Helmetjs/.env"] [unique_id "amr_YkWA1f959iSsV5T74QAAABs"]
[Thu Jul 30 08:38:10.678003 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.678023 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.679435 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Imagebord/.env"] [unique_id "amr_YkWA1f959iSsV5T74gAAABs"]
[Thu Jul 30 08:38:10.679611 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Imagebord/.env"] [unique_id "amr_YkWA1f959iSsV5T74gAAABs"]
[Thu Jul 30 08:38:10.679745 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Imagebord/.env"] [unique_id "amr_YkWA1f959iSsV5T74gAAABs"]
[Thu Jul 30 08:38:10.702522 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/InstantCV/server/.env"] [unique_id "amr_YkWA1f959iSsV5T74wAAABs"]
[Thu Jul 30 08:38:10.702716 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/InstantCV/server/.env"] [unique_id "amr_YkWA1f959iSsV5T74wAAABs"]
[Thu Jul 30 08:38:10.702863 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/InstantCV/server/.env"] [unique_id "amr_YkWA1f959iSsV5T74wAAABs"]
[Thu Jul 30 08:38:10.716048 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62690] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_YkAEOnquTlmZJ4R-tgAAAC8"]
[Thu Jul 30 08:38:10.716362 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_YkAEOnquTlmZJ4R-tgAAAC8"]
[Thu Jul 30 08:38:10.716746 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.716868 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_YkAEOnquTlmZJ4R-tgAAAC8"]
[Thu Jul 30 08:38:10.727008 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Kubernetes/.env"] [unique_id "amr_YkWA1f959iSsV5T75AAAABs"]
[Thu Jul 30 08:38:10.727195 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Kubernetes/.env"] [unique_id "amr_YkWA1f959iSsV5T75AAAABs"]
[Thu Jul 30 08:38:10.727309 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Kubernetes/.env"] [unique_id "amr_YkWA1f959iSsV5T75AAAABs"]
[Thu Jul 30 08:38:10.728982 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/api-config.ini"] [unique_id "amr_YssDPUni1EbX-qVg6AAAADg"]
[Thu Jul 30 08:38:10.729308 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/api-config.ini"] [unique_id "amr_YssDPUni1EbX-qVg6AAAADg"]
[Thu Jul 30 08:38:10.729513 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/api-config.ini"] [unique_id "amr_YssDPUni1EbX-qVg6AAAADg"]
[Thu Jul 30 08:38:10.746275 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Library/.env"] [unique_id "amr_YkWA1f959iSsV5T75QAAABs"]
[Thu Jul 30 08:38:10.746401 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Library/.env"] [unique_id "amr_YkWA1f959iSsV5T75QAAABs"]
[Thu Jul 30 08:38:10.746504 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Library/.env"] [unique_id "amr_YkWA1f959iSsV5T75QAAABs"]
[Thu Jul 30 08:38:10.747462 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/api/.env.bak"] [unique_id "amr_YssDPUni1EbX-qVg6QAAADg"]
[Thu Jul 30 08:38:10.747601 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/api/.env.bak"] [unique_id "amr_YssDPUni1EbX-qVg6QAAADg"]
[Thu Jul 30 08:38:10.747783 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/api/.env.bak"] [unique_id "amr_YssDPUni1EbX-qVg6QAAADg"]
[Thu Jul 30 08:38:10.765232 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/api/.env.dev"] [unique_id "amr_YssDPUni1EbX-qVg6gAAADg"]
[Thu Jul 30 08:38:10.765403 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/api/.env.dev"] [unique_id "amr_YssDPUni1EbX-qVg6gAAADg"]
[Thu Jul 30 08:38:10.765629 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/api/.env.dev"] [unique_id "amr_YssDPUni1EbX-qVg6gAAADg"]
[Thu Jul 30 08:38:10.767243 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:62704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.767263 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:62704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.767832 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T75gAAABs"]
[Thu Jul 30 08:38:10.767962 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T75gAAABs"]
[Thu Jul 30 08:38:10.768097 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T75gAAABs"]
[Thu Jul 30 08:38:10.792390 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T75wAAABs"]
[Thu Jul 30 08:38:10.792574 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T75wAAABs"]
[Thu Jul 30 08:38:10.792708 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_YkWA1f959iSsV5T75wAAABs"]
[Thu Jul 30 08:38:10.793769 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/api/.env.dist"] [unique_id "amr_YssDPUni1EbX-qVg6wAAADg"]
[Thu Jul 30 08:38:10.793898 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/api/.env.dist"] [unique_id "amr_YssDPUni1EbX-qVg6wAAADg"]
[Thu Jul 30 08:38:10.794128 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/api/.env.dist"] [unique_id "amr_YssDPUni1EbX-qVg6wAAADg"]
[Thu Jul 30 08:38:10.803770 2026] [access_compat:error] [pid 2419960:tid 2419960] [client 106.215.157.145:23506] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:10.811021 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.811040 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.813758 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/api/.env.test"] [unique_id "amr_YssDPUni1EbX-qVg7AAAADg"]
[Thu Jul 30 08:38:10.813867 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/api/.env.test"] [unique_id "amr_YssDPUni1EbX-qVg7AAAADg"]
[Thu Jul 30 08:38:10.814039 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:10272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/api/.env.test"] [unique_id "amr_YssDPUni1EbX-qVg7AAAADg"]
[Thu Jul 30 08:38:10.815672 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_YkWA1f959iSsV5T76AAAABs"]
[Thu Jul 30 08:38:10.815848 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_YkWA1f959iSsV5T76AAAABs"]
[Thu Jul 30 08:38:10.815966 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_YkWA1f959iSsV5T76AAAABs"]
[Thu Jul 30 08:38:10.836391 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_YkWA1f959iSsV5T76QAAABs"]
[Thu Jul 30 08:38:10.836592 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_YkWA1f959iSsV5T76QAAABs"]
[Thu Jul 30 08:38:10.836733 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_YkWA1f959iSsV5T76QAAABs"]
[Thu Jul 30 08:38:10.843277 2026] [ssl:error] [pid 2422379:tid 2422379] (70014)End of file found: [client 216.73.216.199:8052] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:10.850388 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.850406 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.861267 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_YkWA1f959iSsV5T76gAAABs"]
[Thu Jul 30 08:38:10.861445 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_YkWA1f959iSsV5T76gAAABs"]
[Thu Jul 30 08:38:10.861572 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_YkWA1f959iSsV5T76gAAABs"]
[Thu Jul 30 08:38:10.891573 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.891593 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.933198 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.933225 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.971253 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62730] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_YkQvuHxPljPWrXhqCgAAAC4"]
[Thu Jul 30 08:38:10.971408 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62730] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_YkQvuHxPljPWrXhqCgAAAC4"]
[Thu Jul 30 08:38:10.971795 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:10.971923 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62730] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_YkQvuHxPljPWrXhqCgAAAC4"]
[Thu Jul 30 08:38:11.004249 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.004269 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.039080 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.039113 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.076901 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.076924 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.077056 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Passportjs/.env"] [unique_id "amr_Y0WA1f959iSsV5T77gAAABs"]
[Thu Jul 30 08:38:11.077196 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Passportjs/.env"] [unique_id "amr_Y0WA1f959iSsV5T77gAAABs"]
[Thu Jul 30 08:38:11.077292 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Passportjs/.env"] [unique_id "amr_Y0WA1f959iSsV5T77gAAABs"]
[Thu Jul 30 08:38:11.102811 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Serve_time_server/.env"] [unique_id "amr_Y0WA1f959iSsV5T77wAAABs"]
[Thu Jul 30 08:38:11.102929 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Serve_time_server/.env"] [unique_id "amr_Y0WA1f959iSsV5T77wAAABs"]
[Thu Jul 30 08:38:11.103034 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Serve_time_server/.env"] [unique_id "amr_Y0WA1f959iSsV5T77wAAABs"]
[Thu Jul 30 08:38:11.119549 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.119579 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.156386 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:62768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.156404 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:62768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.203318 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.203347 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:62772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.255422 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.255441 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:62786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.293099 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:62800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.293117 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:62800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.301752 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Server_with_db/.env"] [unique_id "amr_Y0WA1f959iSsV5T78wAAABs"]
[Thu Jul 30 08:38:11.301898 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Server_with_db/.env"] [unique_id "amr_Y0WA1f959iSsV5T78wAAABs"]
[Thu Jul 30 08:38:11.301999 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Server_with_db/.env"] [unique_id "amr_Y0WA1f959iSsV5T78wAAABs"]
[Thu Jul 30 08:38:11.323578 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Simple_server/.env"] [unique_id "amr_Y0WA1f959iSsV5T79AAAABs"]
[Thu Jul 30 08:38:11.323735 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Simple_server/.env"] [unique_id "amr_Y0WA1f959iSsV5T79AAAABs"]
[Thu Jul 30 08:38:11.323839 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Simple_server/.env"] [unique_id "amr_Y0WA1f959iSsV5T79AAAABs"]
[Thu Jul 30 08:38:11.330630 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.330655 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.348143 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Socketio/.env"] [unique_id "amr_Y0WA1f959iSsV5T79QAAABs"]
[Thu Jul 30 08:38:11.348338 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Socketio/.env"] [unique_id "amr_Y0WA1f959iSsV5T79QAAABs"]
[Thu Jul 30 08:38:11.348447 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Socketio/.env"] [unique_id "amr_Y0WA1f959iSsV5T79QAAABs"]
[Thu Jul 30 08:38:11.367687 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Sources/API/.env"] [unique_id "amr_Y0WA1f959iSsV5T79gAAABs"]
[Thu Jul 30 08:38:11.367897 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Sources/API/.env"] [unique_id "amr_Y0WA1f959iSsV5T79gAAABs"]
[Thu Jul 30 08:38:11.368038 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Sources/API/.env"] [unique_id "amr_Y0WA1f959iSsV5T79gAAABs"]
[Thu Jul 30 08:38:11.384316 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.384334 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:62810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.394366 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/SpotiApps/.env"] [unique_id "amr_Y0WA1f959iSsV5T79wAAABs"]
[Thu Jul 30 08:38:11.394484 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/SpotiApps/.env"] [unique_id "amr_Y0WA1f959iSsV5T79wAAABs"]
[Thu Jul 30 08:38:11.394606 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/SpotiApps/.env"] [unique_id "amr_Y0WA1f959iSsV5T79wAAABs"]
[Thu Jul 30 08:38:11.425399 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:62824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.425425 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:62824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.432323 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Tests/Application/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-AAAABs"]
[Thu Jul 30 08:38:11.432504 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Tests/Application/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-AAAABs"]
[Thu Jul 30 08:38:11.432620 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Tests/Application/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-AAAABs"]
[Thu Jul 30 08:38:11.454455 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Travel_form/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-QAAABs"]
[Thu Jul 30 08:38:11.454649 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Travel_form/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-QAAABs"]
[Thu Jul 30 08:38:11.454772 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Travel_form/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-QAAABs"]
[Thu Jul 30 08:38:11.476973 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.477002 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.478156 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/User_info/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-gAAABs"]
[Thu Jul 30 08:38:11.478272 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/User_info/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-gAAABs"]
[Thu Jul 30 08:38:11.478368 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/User_info/.env"] [unique_id "amr_Y0WA1f959iSsV5T7-gAAABs"]
[Thu Jul 30 08:38:11.513914 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.513937 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.553622 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.553644 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.617723 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amr_Y0WA1f959iSsV5T7_QAAABs"]
[Thu Jul 30 08:38:11.617863 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amr_Y0WA1f959iSsV5T7_QAAABs"]
[Thu Jul 30 08:38:11.617964 2026] [security2:error] [pid 2414917:tid 2414917] [client 185.177.72.17:21596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amr_Y0WA1f959iSsV5T7_QAAABs"]
[Thu Jul 30 08:38:11.623863 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:62848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.623916 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:62848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.667269 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.667292 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.725170 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.725190 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.770916 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.770935 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:62876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.792736 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/api/php.ini"] [unique_id "amr_Y-C233pHXOTf93SVjgAAADM"]
[Thu Jul 30 08:38:11.793006 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/api/php.ini"] [unique_id "amr_Y-C233pHXOTf93SVjgAAADM"]
[Thu Jul 30 08:38:11.793183 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/api/php.ini"] [unique_id "amr_Y-C233pHXOTf93SVjgAAADM"]
[Thu Jul 30 08:38:11.808852 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62884] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_Y2101zDj_5UEQFMWbgAAAAs"]
[Thu Jul 30 08:38:11.808975 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_Y2101zDj_5UEQFMWbgAAAAs"]
[Thu Jul 30 08:38:11.809294 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.809400 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:62884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_Y2101zDj_5UEQFMWbgAAAAs"]
[Thu Jul 30 08:38:11.876098 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.876121 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.929050 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62902] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.2"] [unique_id "amr_YyqRkGfpP6jUcmmaYAAAAAg"]
[Thu Jul 30 08:38:11.929198 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.2"] [unique_id "amr_YyqRkGfpP6jUcmmaYAAAAAg"]
[Thu Jul 30 08:38:11.929512 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:11.929637 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:62902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.2"] [unique_id "amr_YyqRkGfpP6jUcmmaYAAAAAg"]
[Thu Jul 30 08:38:12.047928 2026] [ssl:error] [pid 2423766:tid 2423766] (70014)End of file found: [client 216.73.216.199:35780] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:12.054314 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/api/src/.env"] [unique_id "amr_ZOC233pHXOTf93SVmgAAADM"]
[Thu Jul 30 08:38:12.054492 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/api/src/.env"] [unique_id "amr_ZOC233pHXOTf93SVmgAAADM"]
[Thu Jul 30 08:38:12.054693 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/api/src/.env"] [unique_id "amr_ZOC233pHXOTf93SVmgAAADM"]
[Thu Jul 30 08:38:12.076178 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62910] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws_access_keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.aws_access_keys"] [unique_id "amr_ZOeliGAK7HeY9rNw9gAAAAE"]
[Thu Jul 30 08:38:12.076374 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.aws_access_keys"] [unique_id "amr_ZOeliGAK7HeY9rNw9gAAAAE"]
[Thu Jul 30 08:38:12.076744 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.076878 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.aws_access_keys"] [unique_id "amr_ZOeliGAK7HeY9rNw9gAAAAE"]
[Thu Jul 30 08:38:12.115558 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.development.local"] [unique_id "amr_ZMVDgdzdvTL2t3Xx4QAAAB0"]
[Thu Jul 30 08:38:12.115794 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.development.local"] [unique_id "amr_ZMVDgdzdvTL2t3Xx4QAAAB0"]
[Thu Jul 30 08:38:12.116168 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.116308 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.development.local"] [unique_id "amr_ZMVDgdzdvTL2t3Xx4QAAAB0"]
[Thu Jul 30 08:38:12.164177 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62934] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.development.sample"] [unique_id "amr_ZOeliGAK7HeY9rNw9wAAAAE"]
[Thu Jul 30 08:38:12.164362 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62934] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.development.sample"] [unique_id "amr_ZOeliGAK7HeY9rNw9wAAAAE"]
[Thu Jul 30 08:38:12.164713 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.164838 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62934] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.development.sample"] [unique_id "amr_ZOeliGAK7HeY9rNw9wAAAAE"]
[Thu Jul 30 08:38:12.205474 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.docker.dev"] [unique_id "amr_ZMc9eTFVr8JHkYzg7wAAADs"]
[Thu Jul 30 08:38:12.205612 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.docker.dev"] [unique_id "amr_ZMc9eTFVr8JHkYzg7wAAADs"]
[Thu Jul 30 08:38:12.205943 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.206059 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.docker.dev"] [unique_id "amr_ZMc9eTFVr8JHkYzg7wAAADs"]
[Thu Jul 30 08:38:12.242022 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.live"] [unique_id "amr_ZMVDgdzdvTL2t3Xx4wAAAB0"]
[Thu Jul 30 08:38:12.242168 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.live"] [unique_id "amr_ZMVDgdzdvTL2t3Xx4wAAAB0"]
[Thu Jul 30 08:38:12.242484 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.242605 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:62964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.live"] [unique_id "amr_ZMVDgdzdvTL2t3Xx4wAAAB0"]
[Thu Jul 30 08:38:12.281286 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62976] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.mailer"] [unique_id "amr_ZMc9eTFVr8JHkYzg8AAAADs"]
[Thu Jul 30 08:38:12.281452 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.mailer"] [unique_id "amr_ZMc9eTFVr8JHkYzg8AAAADs"]
[Thu Jul 30 08:38:12.281782 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.281889 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:62976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.mailer"] [unique_id "amr_ZMc9eTFVr8JHkYzg8AAAADs"]
[Thu Jul 30 08:38:12.291618 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/_static/.env"] [unique_id "amr_ZNzyF_5LOsrbx7vM6QAAACU"]
[Thu Jul 30 08:38:12.291784 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/_static/.env"] [unique_id "amr_ZNzyF_5LOsrbx7vM6QAAACU"]
[Thu Jul 30 08:38:12.291909 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/_static/.env"] [unique_id "amr_ZNzyF_5LOsrbx7vM6QAAACU"]
[Thu Jul 30 08:38:12.322812 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62986] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_dsn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.mailer_dsn"] [unique_id "amr_ZOeliGAK7HeY9rNw-AAAAAE"]
[Thu Jul 30 08:38:12.322996 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.mailer_dsn"] [unique_id "amr_ZOeliGAK7HeY9rNw-AAAAAE"]
[Thu Jul 30 08:38:12.323356 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.323498 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:62986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.mailer_dsn"] [unique_id "amr_ZOeliGAK7HeY9rNw-AAAAAE"]
[Thu Jul 30 08:38:12.358936 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63000] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_url"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.mailer_url"] [unique_id "amr_ZCqRkGfpP6jUcmmaYgAAAAg"]
[Thu Jul 30 08:38:12.359092 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.mailer_url"] [unique_id "amr_ZCqRkGfpP6jUcmmaYgAAAAg"]
[Thu Jul 30 08:38:12.359436 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.359547 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.mailer_url"] [unique_id "amr_ZCqRkGfpP6jUcmmaYgAAAAg"]
[Thu Jul 30 08:38:12.408841 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.mailgun"] [unique_id "amr_ZIFx8Bx4ITcCEtgnDgAAADc"]
[Thu Jul 30 08:38:12.408971 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.mailgun"] [unique_id "amr_ZIFx8Bx4ITcCEtgnDgAAADc"]
[Thu Jul 30 08:38:12.409403 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.409532 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.mailgun"] [unique_id "amr_ZIFx8Bx4ITcCEtgnDgAAADc"]
[Thu Jul 30 08:38:12.449635 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailjet"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.mailjet"] [unique_id "amr_ZMc9eTFVr8JHkYzg8QAAADs"]
[Thu Jul 30 08:38:12.449773 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.mailjet"] [unique_id "amr_ZMc9eTFVr8JHkYzg8QAAADs"]
[Thu Jul 30 08:38:12.450136 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.450242 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.mailjet"] [unique_id "amr_ZMc9eTFVr8JHkYzg8QAAADs"]
[Thu Jul 30 08:38:12.452865 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /account/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/.env"] [unique_id "amr_ZNzyF_5LOsrbx7vM7AAAACU"]
[Thu Jul 30 08:38:12.452982 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/.env"] [unique_id "amr_ZNzyF_5LOsrbx7vM7AAAACU"]
[Thu Jul 30 08:38:12.453094 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/.env"] [unique_id "amr_ZNzyF_5LOsrbx7vM7AAAACU"]
[Thu Jul 30 08:38:12.490155 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mandrill"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.mandrill"] [unique_id "amr_ZIFx8Bx4ITcCEtgnDwAAADc"]
[Thu Jul 30 08:38:12.490345 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.mandrill"] [unique_id "amr_ZIFx8Bx4ITcCEtgnDwAAADc"]
[Thu Jul 30 08:38:12.490674 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.490785 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.mandrill"] [unique_id "amr_ZIFx8Bx4ITcCEtgnDwAAADc"]
[Thu Jul 30 08:38:12.525207 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /account/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/.git/config"] [unique_id "amr_ZNzyF_5LOsrbx7vM7gAAACU"]
[Thu Jul 30 08:38:12.525382 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/.git/config"] [unique_id "amr_ZNzyF_5LOsrbx7vM7gAAACU"]
[Thu Jul 30 08:38:12.525489 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/.git/config"] [unique_id "amr_ZNzyF_5LOsrbx7vM7gAAACU"]
[Thu Jul 30 08:38:12.534957 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:63030] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.prod.local"] [unique_id "amr_ZMVDgdzdvTL2t3Xx5QAAAB0"]
[Thu Jul 30 08:38:12.535139 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:63030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.prod.local"] [unique_id "amr_ZMVDgdzdvTL2t3Xx5QAAAB0"]
[Thu Jul 30 08:38:12.535484 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:63030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.535611 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:63030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.prod.local"] [unique_id "amr_ZMVDgdzdvTL2t3Xx5QAAAB0"]
[Thu Jul 30 08:38:12.542313 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apis/.env"] [unique_id "amr_ZOC233pHXOTf93SVrgAAADM"]
[Thu Jul 30 08:38:12.542506 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/.env"] [unique_id "amr_ZOC233pHXOTf93SVrgAAADM"]
[Thu Jul 30 08:38:12.542785 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/.env"] [unique_id "amr_ZOC233pHXOTf93SVrgAAADM"]
[Thu Jul 30 08:38:12.563890 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.bak"] [unique_id "amr_ZOC233pHXOTf93SVrwAAADM"]
[Thu Jul 30 08:38:12.564106 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.bak"] [unique_id "amr_ZOC233pHXOTf93SVrwAAADM"]
[Thu Jul 30 08:38:12.564317 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.bak"] [unique_id "amr_ZOC233pHXOTf93SVrwAAADM"]
[Thu Jul 30 08:38:12.572901 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.sample"] [unique_id "amr_ZMc9eTFVr8JHkYzg8gAAADs"]
[Thu Jul 30 08:38:12.573044 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.sample"] [unique_id "amr_ZMc9eTFVr8JHkYzg8gAAADs"]
[Thu Jul 30 08:38:12.573407 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.573517 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.sample"] [unique_id "amr_ZMc9eTFVr8JHkYzg8gAAADs"]
[Thu Jul 30 08:38:12.594034 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.dev"] [unique_id "amr_ZOC233pHXOTf93SVsAAAADM"]
[Thu Jul 30 08:38:12.594262 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.dev"] [unique_id "amr_ZOC233pHXOTf93SVsAAAADM"]
[Thu Jul 30 08:38:12.594512 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.dev"] [unique_id "amr_ZOC233pHXOTf93SVsAAAADM"]
[Thu Jul 30 08:38:12.613345 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63048] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.sample.php"] [unique_id "amr_ZIFx8Bx4ITcCEtgnEAAAADc"]
[Thu Jul 30 08:38:12.613509 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.sample.php"] [unique_id "amr_ZIFx8Bx4ITcCEtgnEAAAADc"]
[Thu Jul 30 08:38:12.613835 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.613947 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:63048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.sample.php"] [unique_id "amr_ZIFx8Bx4ITcCEtgnEAAAADc"]
[Thu Jul 30 08:38:12.616058 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.dist"] [unique_id "amr_ZOC233pHXOTf93SVsQAAADM"]
[Thu Jul 30 08:38:12.616256 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.dist"] [unique_id "amr_ZOC233pHXOTf93SVsQAAADM"]
[Thu Jul 30 08:38:12.616494 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.dist"] [unique_id "amr_ZOC233pHXOTf93SVsQAAADM"]
[Thu Jul 30 08:38:12.636986 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.local"] [unique_id "amr_ZOC233pHXOTf93SVsgAAADM"]
[Thu Jul 30 08:38:12.637175 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.local"] [unique_id "amr_ZOC233pHXOTf93SVsgAAADM"]
[Thu Jul 30 08:38:12.637392 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.local"] [unique_id "amr_ZOC233pHXOTf93SVsgAAADM"]
[Thu Jul 30 08:38:12.652617 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63062] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.sendgrid"] [unique_id "amr_ZJkA2-P0e5yhCnL_KgAAAAI"]
[Thu Jul 30 08:38:12.652736 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.sendgrid"] [unique_id "amr_ZJkA2-P0e5yhCnL_KgAAAAI"]
[Thu Jul 30 08:38:12.653105 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.653239 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.sendgrid"] [unique_id "amr_ZJkA2-P0e5yhCnL_KgAAAAI"]
[Thu Jul 30 08:38:12.657293 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.production"] [unique_id "amr_ZOC233pHXOTf93SVswAAADM"]
[Thu Jul 30 08:38:12.657414 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.production"] [unique_id "amr_ZOC233pHXOTf93SVswAAADM"]
[Thu Jul 30 08:38:12.657615 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.production"] [unique_id "amr_ZOC233pHXOTf93SVswAAADM"]
[Thu Jul 30 08:38:12.675711 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.staging"] [unique_id "amr_ZOC233pHXOTf93SVtAAAADM"]
[Thu Jul 30 08:38:12.675829 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.staging"] [unique_id "amr_ZOC233pHXOTf93SVtAAAADM"]
[Thu Jul 30 08:38:12.676011 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:10286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/.env.staging"] [unique_id "amr_ZOC233pHXOTf93SVtAAAADM"]
[Thu Jul 30 08:38:12.691678 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63068] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sparkpost"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.sparkpost"] [unique_id "amr_ZMc9eTFVr8JHkYzg8wAAADs"]
[Thu Jul 30 08:38:12.691803 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.sparkpost"] [unique_id "amr_ZMc9eTFVr8JHkYzg8wAAADs"]
[Thu Jul 30 08:38:12.692121 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.692223 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.sparkpost"] [unique_id "amr_ZMc9eTFVr8JHkYzg8wAAADs"]
[Thu Jul 30 08:38:12.750464 2026] [security2:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63070] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.swp"] [unique_id "amr_ZJDf29oJDmHea9okyAAAABg"]
[Thu Jul 30 08:38:12.750722 2026] [security2:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63070] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.swp"] [unique_id "amr_ZJDf29oJDmHea9okyAAAABg"]
[Thu Jul 30 08:38:12.751174 2026] [core:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.751439 2026] [security2:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63070] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.swp"] [unique_id "amr_ZJDf29oJDmHea9okyAAAABg"]
[Thu Jul 30 08:38:12.756287 2026] [authz_core:error] [pid 2424178:tid 2424178] [client 57.141.0.15:36020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:12.757044 2026] [authz_core:error] [pid 2424178:tid 2424178] [client 57.141.0.15:36020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:12.790853 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63080] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.localapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.test.localapi/.env"] [unique_id "amr_ZJkA2-P0e5yhCnL_KwAAAAI"]
[Thu Jul 30 08:38:12.791035 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63080] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.test.localapi/.env"] [unique_id "amr_ZJkA2-P0e5yhCnL_KwAAAAI"]
[Thu Jul 30 08:38:12.791398 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.791513 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63080] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.test.localapi/.env"] [unique_id "amr_ZJkA2-P0e5yhCnL_KwAAAAI"]
[Thu Jul 30 08:38:12.815746 2026] [core:error] [pid 2423798:tid 2423798] [client 66.249.66.167:62506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.815766 2026] [core:error] [pid 2423798:tid 2423798] [client 66.249.66.167:62506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.817701 2026] [core:error] [pid 2412472:tid 2412472] [client 66.249.66.169:37946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.817719 2026] [core:error] [pid 2412472:tid 2412472] [client 66.249.66.169:37946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.829327 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.test.sample"] [unique_id "amr_ZMc9eTFVr8JHkYzg9AAAADs"]
[Thu Jul 30 08:38:12.829450 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.test.sample"] [unique_id "amr_ZMc9eTFVr8JHkYzg9AAAADs"]
[Thu Jul 30 08:38:12.829768 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.829877 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.test.sample"] [unique_id "amr_ZMc9eTFVr8JHkYzg9AAAADs"]
[Thu Jul 30 08:38:12.848455 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_ZNzyF_5LOsrbx7vM8wAAACU"]
[Thu Jul 30 08:38:12.848835 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_ZNzyF_5LOsrbx7vM8wAAACU"]
[Thu Jul 30 08:38:12.848957 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_ZNzyF_5LOsrbx7vM8wAAACU"]
[Thu Jul 30 08:38:12.863858 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63086] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.travis"] [unique_id "amr_ZJkA2-P0e5yhCnL_LAAAAAI"]
[Thu Jul 30 08:38:12.863973 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.travis"] [unique_id "amr_ZJkA2-P0e5yhCnL_LAAAAAI"]
[Thu Jul 30 08:38:12.864345 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.864451 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.travis"] [unique_id "amr_ZJkA2-P0e5yhCnL_LAAAAAI"]
[Thu Jul 30 08:38:12.867271 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/api-config.ini"] [unique_id "amr_ZNzyF_5LOsrbx7vM9AAAACU"]
[Thu Jul 30 08:38:12.867641 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/api-config.ini"] [unique_id "amr_ZNzyF_5LOsrbx7vM9AAAACU"]
[Thu Jul 30 08:38:12.867762 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/api-config.ini"] [unique_id "amr_ZNzyF_5LOsrbx7vM9AAAACU"]
[Thu Jul 30 08:38:12.900028 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63090] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.txt"] [unique_id "amr_ZCqRkGfpP6jUcmmaZQAAAAg"]
[Thu Jul 30 08:38:12.900202 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63090] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.txt"] [unique_id "amr_ZCqRkGfpP6jUcmmaZQAAAAg"]
[Thu Jul 30 08:38:12.900526 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.900659 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:63090] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.txt"] [unique_id "amr_ZCqRkGfpP6jUcmmaZQAAAAg"]
[Thu Jul 30 08:38:12.915627 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:14500] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/.aws/keys.conf"] [unique_id "amr_ZMc9eTFVr8JHkYzg9QAAADs"]
[Thu Jul 30 08:38:12.915915 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:14500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.aws/keys.conf"] [unique_id "amr_ZMc9eTFVr8JHkYzg9QAAADs"]
[Thu Jul 30 08:38:12.916221 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:14500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_ZMc9eTFVr8JHkYzg9QAAADs"]
[Thu Jul 30 08:38:12.934623 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63092] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.uat"] [unique_id "amr_ZJkA2-P0e5yhCnL_LQAAAAI"]
[Thu Jul 30 08:38:12.934736 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.uat"] [unique_id "amr_ZJkA2-P0e5yhCnL_LQAAAAI"]
[Thu Jul 30 08:38:12.935103 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.935209 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63092] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.uat"] [unique_id "amr_ZJkA2-P0e5yhCnL_LQAAAAI"]
[Thu Jul 30 08:38:12.972452 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.www"] [unique_id "amr_ZOWvknE5emN3ObPcLAAAACc"]
[Thu Jul 30 08:38:12.972596 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.www"] [unique_id "amr_ZOWvknE5emN3ObPcLAAAACc"]
[Thu Jul 30 08:38:12.972926 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:12.973054 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.www"] [unique_id "amr_ZOWvknE5emN3ObPcLAAAACc"]
[Thu Jul 30 08:38:13.004008 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/laravel.log"] [unique_id "amr_ZdzyF_5LOsrbx7vM9wAAACU"]
[Thu Jul 30 08:38:13.004389 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/laravel.log"] [unique_id "amr_ZdzyF_5LOsrbx7vM9wAAACU"]
[Thu Jul 30 08:38:13.004515 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/laravel.log"] [unique_id "amr_ZdzyF_5LOsrbx7vM9wAAACU"]
[Thu Jul 30 08:38:13.096234 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{dn}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.{{DN}}"] [unique_id "amr_ZS8z5UsblH75uX6k4QAAABc"]
[Thu Jul 30 08:38:13.096357 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.{{DN}}"] [unique_id "amr_ZS8z5UsblH75uX6k4QAAABc"]
[Thu Jul 30 08:38:13.096691 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.096820 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.{{DN}}"] [unique_id "amr_ZS8z5UsblH75uX6k4QAAABc"]
[Thu Jul 30 08:38:13.152289 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{sd}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env.{{SD}}"] [unique_id "amr_Zcc9eTFVr8JHkYzg9gAAADs"]
[Thu Jul 30 08:38:13.152451 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env.{{SD}}"] [unique_id "amr_Zcc9eTFVr8JHkYzg9gAAADs"]
[Thu Jul 30 08:38:13.152801 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.152918 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env.{{SD}}"] [unique_id "amr_Zcc9eTFVr8JHkYzg9gAAADs"]
[Thu Jul 30 08:38:13.158730 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/web.config"] [unique_id "amr_ZdzyF_5LOsrbx7vM-gAAACU"]
[Thu Jul 30 08:38:13.158974 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /account/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/web.config"] [unique_id "amr_ZdzyF_5LOsrbx7vM-gAAACU"]
[Thu Jul 30 08:38:13.159152 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/web.config"] [unique_id "amr_ZdzyF_5LOsrbx7vM-gAAACU"]
[Thu Jul 30 08:38:13.159280 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/account/web.config"] [unique_id "amr_ZdzyF_5LOsrbx7vM-gAAACU"]
[Thu Jul 30 08:38:13.177582 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme-challenge/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM-wAAACU"]
[Thu Jul 30 08:38:13.177764 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme-challenge/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM-wAAACU"]
[Thu Jul 30 08:38:13.177888 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme-challenge/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM-wAAACU"]
[Thu Jul 30 08:38:13.188359 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63128] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env-example"] [unique_id "amr_ZZkA2-P0e5yhCnL_LgAAAAI"]
[Thu Jul 30 08:38:13.188483 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env-example"] [unique_id "amr_ZZkA2-P0e5yhCnL_LgAAAAI"]
[Thu Jul 30 08:38:13.188798 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.188896 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63128] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env-example"] [unique_id "amr_ZZkA2-P0e5yhCnL_LgAAAAI"]
[Thu Jul 30 08:38:13.198030 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_AAAACU"]
[Thu Jul 30 08:38:13.199182 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_AAAACU"]
[Thu Jul 30 08:38:13.199341 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_AAAACU"]
[Thu Jul 30 08:38:13.219610 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme_challenges/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_QAAACU"]
[Thu Jul 30 08:38:13.219785 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme_challenges/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_QAAACU"]
[Thu Jul 30 08:38:13.219918 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/acme_challenges/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_QAAACU"]
[Thu Jul 30 08:38:13.230196 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env-sample"] [unique_id "amr_ZdVtxCBUSPwlMZFKsAAAABk"]
[Thu Jul 30 08:38:13.230323 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env-sample"] [unique_id "amr_ZdVtxCBUSPwlMZFKsAAAABk"]
[Thu Jul 30 08:38:13.230681 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.230791 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env-sample"] [unique_id "amr_ZdVtxCBUSPwlMZFKsAAAABk"]
[Thu Jul 30 08:38:13.246203 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/actions-server/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_gAAACU"]
[Thu Jul 30 08:38:13.246385 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/actions-server/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_gAAACU"]
[Thu Jul 30 08:38:13.246521 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/actions-server/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_gAAACU"]
[Thu Jul 30 08:38:13.265933 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_wAAACU"]
[Thu Jul 30 08:38:13.266123 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_wAAACU"]
[Thu Jul 30 08:38:13.266265 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env"] [unique_id "amr_ZdzyF_5LOsrbx7vM_wAAACU"]
[Thu Jul 30 08:38:13.269311 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63142] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env1"] [unique_id "amr_ZeWvknE5emN3ObPcLQAAACc"]
[Thu Jul 30 08:38:13.269426 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env1"] [unique_id "amr_ZeWvknE5emN3ObPcLQAAACc"]
[Thu Jul 30 08:38:13.269755 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.269855 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env1"] [unique_id "amr_ZeWvknE5emN3ObPcLQAAACc"]
[Thu Jul 30 08:38:13.289413 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.bak"] [unique_id "amr_ZdzyF_5LOsrbx7vNAAAAACU"]
[Thu Jul 30 08:38:13.289605 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.bak"] [unique_id "amr_ZdzyF_5LOsrbx7vNAAAAACU"]
[Thu Jul 30 08:38:13.289750 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.bak"] [unique_id "amr_ZdzyF_5LOsrbx7vNAAAAACU"]
[Thu Jul 30 08:38:13.315921 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.dev"] [unique_id "amr_ZdzyF_5LOsrbx7vNAQAAACU"]
[Thu Jul 30 08:38:13.316087 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.dev"] [unique_id "amr_ZdzyF_5LOsrbx7vNAQAAACU"]
[Thu Jul 30 08:38:13.316195 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.dev"] [unique_id "amr_ZdzyF_5LOsrbx7vNAQAAACU"]
[Thu Jul 30 08:38:13.348237 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.dist"] [unique_id "amr_ZdzyF_5LOsrbx7vNAgAAACU"]
[Thu Jul 30 08:38:13.348357 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.dist"] [unique_id "amr_ZdzyF_5LOsrbx7vNAgAAACU"]
[Thu Jul 30 08:38:13.348465 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.dist"] [unique_id "amr_ZdzyF_5LOsrbx7vNAgAAACU"]
[Thu Jul 30 08:38:13.369833 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.local"] [unique_id "amr_ZdzyF_5LOsrbx7vNAwAAACU"]
[Thu Jul 30 08:38:13.369943 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.local"] [unique_id "amr_ZdzyF_5LOsrbx7vNAwAAACU"]
[Thu Jul 30 08:38:13.370036 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/.env.local"] [unique_id "amr_ZdzyF_5LOsrbx7vNAwAAACU"]
[Thu Jul 30 08:38:13.458409 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63154] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env_1"] [unique_id "amr_ZS8z5UsblH75uX6k4gAAABc"]
[Thu Jul 30 08:38:13.458529 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env_1"] [unique_id "amr_ZS8z5UsblH75uX6k4gAAABc"]
[Thu Jul 30 08:38:13.458879 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.458989 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:63154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env_1"] [unique_id "amr_ZS8z5UsblH75uX6k4gAAABc"]
[Thu Jul 30 08:38:13.531195 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env_bak"] [unique_id "amr_Zcc9eTFVr8JHkYzg9wAAADs"]
[Thu Jul 30 08:38:13.531378 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env_bak"] [unique_id "amr_Zcc9eTFVr8JHkYzg9wAAADs"]
[Thu Jul 30 08:38:13.531725 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.531851 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env_bak"] [unique_id "amr_Zcc9eTFVr8JHkYzg9wAAADs"]
[Thu Jul 30 08:38:13.567767 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env_old"] [unique_id "amr_ZZkA2-P0e5yhCnL_LwAAAAI"]
[Thu Jul 30 08:38:13.567904 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env_old"] [unique_id "amr_ZZkA2-P0e5yhCnL_LwAAAAI"]
[Thu Jul 30 08:38:13.568223 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.568317 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env_old"] [unique_id "amr_ZZkA2-P0e5yhCnL_LwAAAAI"]
[Thu Jul 30 08:38:13.616742 2026] [security2:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63188] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env_sample"] [unique_id "amr_ZZDf29oJDmHea9okzAAAABg"]
[Thu Jul 30 08:38:13.616884 2026] [security2:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env_sample"] [unique_id "amr_ZZDf29oJDmHea9okzAAAABg"]
[Thu Jul 30 08:38:13.617200 2026] [core:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.617302 2026] [security2:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63188] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env_sample"] [unique_id "amr_ZZDf29oJDmHea9okzAAAABg"]
[Thu Jul 30 08:38:13.649862 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/apis/php.ini"] [unique_id "amr_ZW101zDj_5UEQFMWeAAAAAs"]
[Thu Jul 30 08:38:13.650216 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apis/php.ini"] [unique_id "amr_ZW101zDj_5UEQFMWeAAAAAs"]
[Thu Jul 30 08:38:13.650445 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apis/php.ini"] [unique_id "amr_ZW101zDj_5UEQFMWeAAAAAs"]
[Thu Jul 30 08:38:13.655489 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.envrc"] [unique_id "amr_ZdVtxCBUSPwlMZFKsQAAABk"]
[Thu Jul 30 08:38:13.655637 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.envrc"] [unique_id "amr_ZdVtxCBUSPwlMZFKsQAAABk"]
[Thu Jul 30 08:38:13.655958 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.656081 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.envrc"] [unique_id "amr_ZdVtxCBUSPwlMZFKsQAAABk"]
[Thu Jul 30 08:38:13.701374 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63204] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.envs"] [unique_id "amr_ZSSe2NSLL34J1qvSxwAAACo"]
[Thu Jul 30 08:38:13.701524 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.envs"] [unique_id "amr_ZSSe2NSLL34J1qvSxwAAACo"]
[Thu Jul 30 08:38:13.701874 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.702010 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.envs"] [unique_id "amr_ZSSe2NSLL34J1qvSxwAAACo"]
[Thu Jul 30 08:38:13.741586 2026] [ssl:error] [pid 2425020:tid 2425020] (EAI 2)Name or service not known: [client 144.76.19.72:40258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:13.741612 2026] [ssl:error] [pid 2425020:tid 2425020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:13.743323 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63206] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.env~"] [unique_id "amr_ZeC233pHXOTf93SVzwAAADM"]
[Thu Jul 30 08:38:13.743435 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.env~"] [unique_id "amr_ZeC233pHXOTf93SVzwAAADM"]
[Thu Jul 30 08:38:13.743765 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.743862 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.env~"] [unique_id "amr_ZeC233pHXOTf93SVzwAAADM"]
[Thu Jul 30 08:38:13.779328 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.779348 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.797824 2026] [ssl:error] [pid 2415834:tid 2415834] (EAI 2)Name or service not known: [client 144.76.19.72:40268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:13.797851 2026] [ssl:error] [pid 2415834:tid 2415834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:13.823233 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.823257 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.864854 2026] [core:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.864872 2026] [core:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.906151 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.906168 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.942063 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63246] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.gitlab-ci/.env"] [unique_id "amr_ZeC233pHXOTf93SV0AAAADM"]
[Thu Jul 30 08:38:13.942245 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.gitlab-ci/.env"] [unique_id "amr_ZeC233pHXOTf93SV0AAAADM"]
[Thu Jul 30 08:38:13.942546 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.942656 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.gitlab-ci/.env"] [unique_id "amr_ZeC233pHXOTf93SV0AAAADM"]
[Thu Jul 30 08:38:13.980231 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:13.980252 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.026195 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app-order-client/.env"] [unique_id "amr_Zm101zDj_5UEQFMWigAAAAs"]
[Thu Jul 30 08:38:14.026325 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app-order-client/.env"] [unique_id "amr_Zm101zDj_5UEQFMWigAAAAs"]
[Thu Jul 30 08:38:14.026498 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app-order-client/.env"] [unique_id "amr_Zm101zDj_5UEQFMWigAAAAs"]
[Thu Jul 30 08:38:14.055470 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/.env.bak"] [unique_id "amr_Zm101zDj_5UEQFMWiwAAAAs"]
[Thu Jul 30 08:38:14.055623 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/.env.bak"] [unique_id "amr_Zm101zDj_5UEQFMWiwAAAAs"]
[Thu Jul 30 08:38:14.055799 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/.env.bak"] [unique_id "amr_Zm101zDj_5UEQFMWiwAAAAs"]
[Thu Jul 30 08:38:14.058267 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.058285 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.076849 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/.env.dev"] [unique_id "amr_Zm101zDj_5UEQFMWjAAAAAs"]
[Thu Jul 30 08:38:14.076962 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/.env.dev"] [unique_id "amr_Zm101zDj_5UEQFMWjAAAAAs"]
[Thu Jul 30 08:38:14.077167 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/.env.dev"] [unique_id "amr_Zm101zDj_5UEQFMWjAAAAAs"]
[Thu Jul 30 08:38:14.095619 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/.env.dist"] [unique_id "amr_Zm101zDj_5UEQFMWjQAAAAs"]
[Thu Jul 30 08:38:14.095735 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/.env.dist"] [unique_id "amr_Zm101zDj_5UEQFMWjQAAAAs"]
[Thu Jul 30 08:38:14.095903 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/.env.dist"] [unique_id "amr_Zm101zDj_5UEQFMWjQAAAAs"]
[Thu Jul 30 08:38:14.102217 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:63266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.102241 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:63266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.113107 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/.env.test"] [unique_id "amr_Zm101zDj_5UEQFMWjgAAAAs"]
[Thu Jul 30 08:38:14.113324 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/.env.test"] [unique_id "amr_Zm101zDj_5UEQFMWjgAAAAs"]
[Thu Jul 30 08:38:14.113594 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/.env.test"] [unique_id "amr_Zm101zDj_5UEQFMWjgAAAAs"]
[Thu Jul 30 08:38:14.147245 2026] [core:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.147266 2026] [core:error] [pid 2425825:tid 2425825] [client 185.177.72.66:63276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.199231 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.199250 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.256192 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.256215 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.280706 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/client/.env"] [unique_id "amr_Zm101zDj_5UEQFMWlwAAAAs"]
[Thu Jul 30 08:38:14.280821 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/client/.env"] [unique_id "amr_Zm101zDj_5UEQFMWlwAAAAs"]
[Thu Jul 30 08:38:14.280996 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/client/.env"] [unique_id "amr_Zm101zDj_5UEQFMWlwAAAAs"]
[Thu Jul 30 08:38:14.302333 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.302353 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.309587 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_Zm101zDj_5UEQFMWmAAAAAs"]
[Thu Jul 30 08:38:14.309706 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_Zm101zDj_5UEQFMWmAAAAAs"]
[Thu Jul 30 08:38:14.309875 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_Zm101zDj_5UEQFMWmAAAAAs"]
[Thu Jul 30 08:38:14.341809 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:63304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.341834 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:63304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.379730 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.379751 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.418517 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:63310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.418537 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:63310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.466617 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.466639 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.478987 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/config/dev/.env"] [unique_id "amr_Zm101zDj_5UEQFMWnwAAAAs"]
[Thu Jul 30 08:38:14.479116 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/config/dev/.env"] [unique_id "amr_Zm101zDj_5UEQFMWnwAAAAs"]
[Thu Jul 30 08:38:14.479277 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/config/dev/.env"] [unique_id "amr_Zm101zDj_5UEQFMWnwAAAAs"]
[Thu Jul 30 08:38:14.533838 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.533856 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:63332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.557139 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/config/parameters.yml"] [unique_id "amr_Zm101zDj_5UEQFMWowAAAAs"]
[Thu Jul 30 08:38:14.557268 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/config/parameters.yml"] [unique_id "amr_Zm101zDj_5UEQFMWowAAAAs"]
[Thu Jul 30 08:38:14.557430 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/config/parameters.yml"] [unique_id "amr_Zm101zDj_5UEQFMWowAAAAs"]
[Thu Jul 30 08:38:14.571312 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.571336 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.625861 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:63346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.625894 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:63346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.662965 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.662997 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.712376 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.712398 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.749287 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:63366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.749317 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:63366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.761919 2026] [security2:error] [pid 2424973:tid 2424973] [client 216.73.216.199:44636] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-pure-ftpd/pureftpd-pgsql.conf"] [unique_id "amr_ZueliGAK7HeY9rNxAAAAAAE"]
[Thu Jul 30 08:38:14.762151 2026] [security2:error] [pid 2424973:tid 2424973] [client 216.73.216.199:44636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-pure-ftpd/pureftpd-pgsql.conf"] [unique_id "amr_ZueliGAK7HeY9rNxAAAAAAE"]
[Thu Jul 30 08:38:14.762344 2026] [security2:error] [pid 2424973:tid 2424973] [client 216.73.216.199:44636] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-pure-ftpd/pureftpd-pgsql.conf"] [unique_id "amr_ZueliGAK7HeY9rNxAAAAAAE"]
[Thu Jul 30 08:38:14.789717 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.789746 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.841218 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.841237 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:63374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.874675 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app/frontend/.env"] [unique_id "amr_Zm101zDj_5UEQFMWsgAAAAs"]
[Thu Jul 30 08:38:14.874790 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/frontend/.env"] [unique_id "amr_Zm101zDj_5UEQFMWsgAAAAs"]
[Thu Jul 30 08:38:14.874963 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/frontend/.env"] [unique_id "amr_Zm101zDj_5UEQFMWsgAAAAs"]
[Thu Jul 30 08:38:14.886607 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.886624 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.929237 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.929264 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:63400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.989919 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:14.989944 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.043385 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.043406 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.063781 2026] [ssl:error] [pid 2424973:tid 2424973] (70014)End of file found: [client 216.73.216.199:44636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:15.092672 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.092694 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:63424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.136692 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:63426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.136728 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:63426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.187995 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.188015 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:63428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.207090 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/app/php.ini"] [unique_id "amr_Z2101zDj_5UEQFMWwQAAAAs"]
[Thu Jul 30 08:38:15.207382 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app/php.ini"] [unique_id "amr_Z2101zDj_5UEQFMWwQAAAAs"]
[Thu Jul 30 08:38:15.207546 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.17:10296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app/php.ini"] [unique_id "amr_Z2101zDj_5UEQFMWwQAAAAs"]
[Thu Jul 30 08:38:15.245600 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14524] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_Z-WvknE5emN3ObPcMwAAACc"]
[Thu Jul 30 08:38:15.245883 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amr_Z-WvknE5emN3ObPcMwAAACc"]
[Thu Jul 30 08:38:15.246060 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_Z-WvknE5emN3ObPcMwAAACc"]
[Thu Jul 30 08:38:15.247924 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.247949 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.294083 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:63448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.294103 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:63448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.334413 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63460] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.vscode/.env"] [unique_id "amr_Z-C233pHXOTf93SV1AAAADM"]
[Thu Jul 30 08:38:15.334533 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63460] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.vscode/.env"] [unique_id "amr_Z-C233pHXOTf93SV1AAAADM"]
[Thu Jul 30 08:38:15.334848 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.334951 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63460] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.vscode/.env"] [unique_id "amr_Z-C233pHXOTf93SV1AAAADM"]
[Thu Jul 30 08:38:15.394976 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.395000 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:63466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.433196 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63478] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.bak"] [unique_id "amr_Z-C233pHXOTf93SV1QAAADM"]
[Thu Jul 30 08:38:15.433329 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.bak"] [unique_id "amr_Z-C233pHXOTf93SV1QAAADM"]
[Thu Jul 30 08:38:15.433645 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.433744 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.bak"] [unique_id "amr_Z-C233pHXOTf93SV1QAAADM"]
[Thu Jul 30 08:38:15.472436 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63490] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swm"] [unique_id "amr_Z-WvknE5emN3ObPcNQAAACc"]
[Thu Jul 30 08:38:15.472553 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swm"] [unique_id "amr_Z-WvknE5emN3ObPcNQAAACc"]
[Thu Jul 30 08:38:15.472861 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.472960 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swm"] [unique_id "amr_Z-WvknE5emN3ObPcNQAAACc"]
[Thu Jul 30 08:38:15.497111 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/php.ini"] [unique_id "amr_Z9zyF_5LOsrbx7vNJgAAACU"]
[Thu Jul 30 08:38:15.497469 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/php.ini"] [unique_id "amr_Z9zyF_5LOsrbx7vNJgAAACU"]
[Thu Jul 30 08:38:15.497597 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adm/php.ini"] [unique_id "amr_Z9zyF_5LOsrbx7vNJgAAACU"]
[Thu Jul 30 08:38:15.518634 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63498] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swn"] [unique_id "amr_Z-C233pHXOTf93SV1gAAADM"]
[Thu Jul 30 08:38:15.518780 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swn"] [unique_id "amr_Z-C233pHXOTf93SV1gAAADM"]
[Thu Jul 30 08:38:15.519110 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.519213 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:63498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swn"] [unique_id "amr_Z-C233pHXOTf93SV1gAAADM"]
[Thu Jul 30 08:38:15.558257 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63510] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swo"] [unique_id "amr_Z-WvknE5emN3ObPcNgAAACc"]
[Thu Jul 30 08:38:15.558443 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swo"] [unique_id "amr_Z-WvknE5emN3ObPcNgAAACc"]
[Thu Jul 30 08:38:15.558782 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.558902 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:63510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/.wp-config.php.swo"] [unique_id "amr_Z-WvknE5emN3ObPcNgAAACc"]
[Thu Jul 30 08:38:15.620143 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.620176 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.624127 2026] [cgi:error] [pid 2414865:tid 2414865] [client 66.132.172.138:3718] AH02812: stderr from /home/quantumc/halmanninvestments.com/cgi-bin/: attempt to invoke directory as script, referer: http://halmanninvestments.com:80/cgi-bin
[Thu Jul 30 08:38:15.670842 2026] [security2:error] [pid 2420368:tid 2420368] [client 47.128.42.116:46918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/tag/blog/"] [unique_id "amr_Z9Ik9vtWgKYiYE5hmQAAACs"]
[Thu Jul 30 08:38:15.682928 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.682950 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.691697 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app1-static/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmggAAADY"]
[Thu Jul 30 08:38:15.691837 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app1-static/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmggAAADY"]
[Thu Jul 30 08:38:15.692034 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app1-static/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmggAAADY"]
[Thu Jul 30 08:38:15.718589 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app2-static/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmgwAAADY"]
[Thu Jul 30 08:38:15.718724 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app2-static/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmgwAAADY"]
[Thu Jul 30 08:38:15.718907 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app2-static/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmgwAAADY"]
[Thu Jul 30 08:38:15.725086 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.725111 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.739934 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app_dir/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhAAAADY"]
[Thu Jul 30 08:38:15.740050 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app_dir/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhAAAADY"]
[Thu Jul 30 08:38:15.740244 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app_dir/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhAAAADY"]
[Thu Jul 30 08:38:15.769210 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.769237 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.772120 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhQAAADY"]
[Thu Jul 30 08:38:15.772262 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhQAAADY"]
[Thu Jul 30 08:38:15.772449 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhQAAADY"]
[Thu Jul 30 08:38:15.791466 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/application.conf"] [unique_id "amr_ZxQlIytBsvBD-_AmhgAAADY"]
[Thu Jul 30 08:38:15.791982 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/application.conf"] [unique_id "amr_ZxQlIytBsvBD-_AmhgAAADY"]
[Thu Jul 30 08:38:15.792218 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/application.conf"] [unique_id "amr_ZxQlIytBsvBD-_AmhgAAADY"]
[Thu Jul 30 08:38:15.808174 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.808195 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.810367 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/application/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhwAAADY"]
[Thu Jul 30 08:38:15.810482 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/application/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhwAAADY"]
[Thu Jul 30 08:38:15.810662 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/application/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmhwAAADY"]
[Thu Jul 30 08:38:15.829246 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/application/configs/application.ini"] [unique_id "amr_ZxQlIytBsvBD-_AmiAAAADY"]
[Thu Jul 30 08:38:15.829543 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/application/configs/application.ini"] [unique_id "amr_ZxQlIytBsvBD-_AmiAAAADY"]
[Thu Jul 30 08:38:15.829725 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/application/configs/application.ini"] [unique_id "amr_ZxQlIytBsvBD-_AmiAAAADY"]
[Thu Jul 30 08:38:15.851663 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.851685 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.882773 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/apps/client/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmigAAADY"]
[Thu Jul 30 08:38:15.882903 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/apps/client/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmigAAADY"]
[Thu Jul 30 08:38:15.883116 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/apps/client/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmigAAADY"]
[Thu Jul 30 08:38:15.900279 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14792] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_ZzRsn_CrYZtjvMmRxAAAACk"]
[Thu Jul 30 08:38:15.900423 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_ZzRsn_CrYZtjvMmRxAAAACk"]
[Thu Jul 30 08:38:15.900738 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.900845 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_ZzRsn_CrYZtjvMmRxAAAACk"]
[Thu Jul 30 08:38:15.928232 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/asset_img/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmjAAAADY"]
[Thu Jul 30 08:38:15.928352 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/asset_img/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmjAAAADY"]
[Thu Jul 30 08:38:15.928527 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/asset_img/.env"] [unique_id "amr_ZxQlIytBsvBD-_AmjAAAADY"]
[Thu Jul 30 08:38:15.947696 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14802] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_Z5Ax25ZrwYe3S0ladAAAAAk"]
[Thu Jul 30 08:38:15.947894 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_Z5Ax25ZrwYe3S0ladAAAAAk"]
[Thu Jul 30 08:38:15.948249 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.948405 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:14802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_Z5Ax25ZrwYe3S0ladAAAAAk"]
[Thu Jul 30 08:38:15.990194 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:14804] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_Z8c9eTFVr8JHkYzg-wAAADs"]
[Thu Jul 30 08:38:15.990412 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:14804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_Z8c9eTFVr8JHkYzg-wAAADs"]
[Thu Jul 30 08:38:15.990766 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:14804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:15.990913 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:14804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_Z8c9eTFVr8JHkYzg-wAAADs"]
[Thu Jul 30 08:38:16.035966 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14816] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_aDRsn_CrYZtjvMmRxQAAACk"]
[Thu Jul 30 08:38:16.036156 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_aDRsn_CrYZtjvMmRxQAAACk"]
[Thu Jul 30 08:38:16.036504 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.036631 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_aDRsn_CrYZtjvMmRxQAAACk"]
[Thu Jul 30 08:38:16.091190 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14832] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_aG101zDj_5UEQFMW1gAAAAs"]
[Thu Jul 30 08:38:16.091450 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14832] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_aG101zDj_5UEQFMW1gAAAAs"]
[Thu Jul 30 08:38:16.092007 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.092202 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14832] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_aG101zDj_5UEQFMW1gAAAAs"]
[Thu Jul 30 08:38:16.135169 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_aOp682fDSrpTRC3Z8wAAACM"]
[Thu Jul 30 08:38:16.135335 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_aOp682fDSrpTRC3Z8wAAACM"]
[Thu Jul 30 08:38:16.135681 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.135796 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_aOp682fDSrpTRC3Z8wAAACM"]
[Thu Jul 30 08:38:16.191438 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.191464 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.245897 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.245926 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.285893 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14878] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/3-sequelize/final/.env"] [unique_id "amr_aG101zDj_5UEQFMW1wAAAAs"]
[Thu Jul 30 08:38:16.286030 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/3-sequelize/final/.env"] [unique_id "amr_aG101zDj_5UEQFMW1wAAAAs"]
[Thu Jul 30 08:38:16.286386 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.286498 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:14878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/3-sequelize/final/.env"] [unique_id "amr_aG101zDj_5UEQFMW1wAAAAs"]
[Thu Jul 30 08:38:16.294465 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/audio/.env"] [unique_id "amr_aBQlIytBsvBD-_AmkQAAADY"]
[Thu Jul 30 08:38:16.295321 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/audio/.env"] [unique_id "amr_aBQlIytBsvBD-_AmkQAAADY"]
[Thu Jul 30 08:38:16.295518 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/audio/.env"] [unique_id "amr_aBQlIytBsvBD-_AmkQAAADY"]
[Thu Jul 30 08:38:16.335971 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:14884] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/31_structure_tests/.env"] [unique_id "amr_aEQvuHxPljPWrXhqDgAAAC4"]
[Thu Jul 30 08:38:16.336148 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:14884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/31_structure_tests/.env"] [unique_id "amr_aEQvuHxPljPWrXhqDgAAAC4"]
[Thu Jul 30 08:38:16.336458 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:14884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.336582 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:14884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/31_structure_tests/.env"] [unique_id "amr_aEQvuHxPljPWrXhqDgAAAC4"]
[Thu Jul 30 08:38:16.380064 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14888] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/API/.env"] [unique_id "amr_aOp682fDSrpTRC3Z9AAAACM"]
[Thu Jul 30 08:38:16.380253 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/API/.env"] [unique_id "amr_aOp682fDSrpTRC3Z9AAAACM"]
[Thu Jul 30 08:38:16.380575 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.380689 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/API/.env"] [unique_id "amr_aOp682fDSrpTRC3Z9AAAACM"]
[Thu Jul 30 08:38:16.432638 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14896] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/API/.env.bak"] [unique_id "amr_aPY_hg2jdeEs7Tih2AAAAAM"]
[Thu Jul 30 08:38:16.432787 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/API/.env.bak"] [unique_id "amr_aPY_hg2jdeEs7Tih2AAAAAM"]
[Thu Jul 30 08:38:16.433141 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.433266 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/API/.env.bak"] [unique_id "amr_aPY_hg2jdeEs7Tih2AAAAAM"]
[Thu Jul 30 08:38:16.475020 2026] [security2:error] [pid 2423370:tid 2423370] [client 185.177.72.66:14904] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/API/.env.dev"] [unique_id "amr_aMNUbarpTOVq3JsQLwAAABo"]
[Thu Jul 30 08:38:16.475211 2026] [security2:error] [pid 2423370:tid 2423370] [client 185.177.72.66:14904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/API/.env.dev"] [unique_id "amr_aMNUbarpTOVq3JsQLwAAABo"]
[Thu Jul 30 08:38:16.475525 2026] [core:error] [pid 2423370:tid 2423370] [client 185.177.72.66:14904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.475652 2026] [security2:error] [pid 2423370:tid 2423370] [client 185.177.72.66:14904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/API/.env.dev"] [unique_id "amr_aMNUbarpTOVq3JsQLwAAABo"]
[Thu Jul 30 08:38:16.564545 2026] [ssl:error] [pid 2425020:tid 2425020] (70014)End of file found: [client 216.73.216.199:37043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:16.568021 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/API/.env.dist"] [unique_id "amr_aDRsn_CrYZtjvMmRxwAAACk"]
[Thu Jul 30 08:38:16.568165 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/API/.env.dist"] [unique_id "amr_aDRsn_CrYZtjvMmRxwAAACk"]
[Thu Jul 30 08:38:16.568498 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.568613 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/API/.env.dist"] [unique_id "amr_aDRsn_CrYZtjvMmRxwAAACk"]
[Thu Jul 30 08:38:16.619241 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14924] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/API/.env.local"] [unique_id "amr_aOp682fDSrpTRC3Z9QAAACM"]
[Thu Jul 30 08:38:16.619370 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14924] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/API/.env.local"] [unique_id "amr_aOp682fDSrpTRC3Z9QAAACM"]
[Thu Jul 30 08:38:16.619697 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.619798 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14924] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/API/.env.local"] [unique_id "amr_aOp682fDSrpTRC3Z9QAAACM"]
[Thu Jul 30 08:38:16.657022 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.657041 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.665573 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/awstats/.env"] [unique_id "amr_aBQlIytBsvBD-_AmnwAAADY"]
[Thu Jul 30 08:38:16.665763 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/awstats/.env"] [unique_id "amr_aBQlIytBsvBD-_AmnwAAADY"]
[Thu Jul 30 08:38:16.665999 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/awstats/.env"] [unique_id "amr_aBQlIytBsvBD-_AmnwAAADY"]
[Thu Jul 30 08:38:16.706055 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_aBQlIytBsvBD-_AmoQAAADY"]
[Thu Jul 30 08:38:16.706265 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_aBQlIytBsvBD-_AmoQAAADY"]
[Thu Jul 30 08:38:16.706474 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_aBQlIytBsvBD-_AmoQAAADY"]
[Thu Jul 30 08:38:16.708929 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14946] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/APP/.env"] [unique_id "amr_aHiGnV0lYiYXbxD-QwAAACI"]
[Thu Jul 30 08:38:16.709077 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/APP/.env"] [unique_id "amr_aHiGnV0lYiYXbxD-QwAAACI"]
[Thu Jul 30 08:38:16.709419 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.709536 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/APP/.env"] [unique_id "amr_aHiGnV0lYiYXbxD-QwAAACI"]
[Thu Jul 30 08:38:16.743767 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_aBQlIytBsvBD-_AmogAAADY"]
[Thu Jul 30 08:38:16.743946 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_aBQlIytBsvBD-_AmogAAADY"]
[Thu Jul 30 08:38:16.744173 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_aBQlIytBsvBD-_AmogAAADY"]
[Thu Jul 30 08:38:16.746884 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14960] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_aD-G1VCKQzXMG6UbNAAAACg"]
[Thu Jul 30 08:38:16.747206 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_aD-G1VCKQzXMG6UbNAAAACg"]
[Thu Jul 30 08:38:16.747746 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.747863 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_aD-G1VCKQzXMG6UbNAAAACg"]
[Thu Jul 30 08:38:16.758149 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin-app/.env"] [unique_id "amr_aNzyF_5LOsrbx7vNOgAAACU"]
[Thu Jul 30 08:38:16.758273 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin-app/.env"] [unique_id "amr_aNzyF_5LOsrbx7vNOgAAACU"]
[Thu Jul 30 08:38:16.758376 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin-app/.env"] [unique_id "amr_aNzyF_5LOsrbx7vNOgAAACU"]
[Thu Jul 30 08:38:16.773106 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_aBQlIytBsvBD-_AmowAAADY"]
[Thu Jul 30 08:38:16.773304 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_aBQlIytBsvBD-_AmowAAADY"]
[Thu Jul 30 08:38:16.773515 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_aBQlIytBsvBD-_AmowAAADY"]
[Thu Jul 30 08:38:16.784785 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.bak"] [unique_id "amr_aNzyF_5LOsrbx7vNOwAAACU"]
[Thu Jul 30 08:38:16.784930 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.bak"] [unique_id "amr_aNzyF_5LOsrbx7vNOwAAACU"]
[Thu Jul 30 08:38:16.785033 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.bak"] [unique_id "amr_aNzyF_5LOsrbx7vNOwAAACU"]
[Thu Jul 30 08:38:16.793100 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpAAAADY"]
[Thu Jul 30 08:38:16.793311 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpAAAADY"]
[Thu Jul 30 08:38:16.793534 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpAAAADY"]
[Thu Jul 30 08:38:16.800021 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14976] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Archipel/.env"] [unique_id "amr_aJDxY3fypotl7b9p0wAAAB4"]
[Thu Jul 30 08:38:16.800191 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Archipel/.env"] [unique_id "amr_aJDxY3fypotl7b9p0wAAAB4"]
[Thu Jul 30 08:38:16.800501 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.800631 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Archipel/.env"] [unique_id "amr_aJDxY3fypotl7b9p0wAAAB4"]
[Thu Jul 30 08:38:16.808291 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.dev"] [unique_id "amr_aNzyF_5LOsrbx7vNPAAAACU"]
[Thu Jul 30 08:38:16.808420 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.dev"] [unique_id "amr_aNzyF_5LOsrbx7vNPAAAACU"]
[Thu Jul 30 08:38:16.808525 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.dev"] [unique_id "amr_aNzyF_5LOsrbx7vNPAAAACU"]
[Thu Jul 30 08:38:16.812298 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpQAAADY"]
[Thu Jul 30 08:38:16.812480 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpQAAADY"]
[Thu Jul 30 08:38:16.812695 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpQAAADY"]
[Thu Jul 30 08:38:16.837791 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14986] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Assignment3/.env"] [unique_id "amr_aOp682fDSrpTRC3Z9gAAACM"]
[Thu Jul 30 08:38:16.837936 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Assignment3/.env"] [unique_id "amr_aOp682fDSrpTRC3Z9gAAACM"]
[Thu Jul 30 08:38:16.838257 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.838365 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:14986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Assignment3/.env"] [unique_id "amr_aOp682fDSrpTRC3Z9gAAACM"]
[Thu Jul 30 08:38:16.839683 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpgAAADY"]
[Thu Jul 30 08:38:16.839859 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpgAAADY"]
[Thu Jul 30 08:38:16.840182 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpgAAADY"]
[Thu Jul 30 08:38:16.852105 2026] [ssl:error] [pid 2411106:tid 2411106] (EAI 2)Name or service not known: [client 144.76.19.72:40282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:16.852128 2026] [ssl:error] [pid 2411106:tid 2411106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:16.865645 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpwAAADY"]
[Thu Jul 30 08:38:16.865826 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpwAAADY"]
[Thu Jul 30 08:38:16.866028 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_aBQlIytBsvBD-_AmpwAAADY"]
[Thu Jul 30 08:38:16.878629 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.dist"] [unique_id "amr_aNzyF_5LOsrbx7vNPQAAACU"]
[Thu Jul 30 08:38:16.878802 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.dist"] [unique_id "amr_aNzyF_5LOsrbx7vNPQAAACU"]
[Thu Jul 30 08:38:16.878924 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.dist"] [unique_id "amr_aNzyF_5LOsrbx7vNPQAAACU"]
[Thu Jul 30 08:38:16.895640 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/back-end/app/.env"] [unique_id "amr_aBQlIytBsvBD-_AmqAAAADY"]
[Thu Jul 30 08:38:16.895838 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/back-end/app/.env"] [unique_id "amr_aBQlIytBsvBD-_AmqAAAADY"]
[Thu Jul 30 08:38:16.896061 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/back-end/app/.env"] [unique_id "amr_aBQlIytBsvBD-_AmqAAAADY"]
[Thu Jul 30 08:38:16.900961 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.local"] [unique_id "amr_aNzyF_5LOsrbx7vNPgAAACU"]
[Thu Jul 30 08:38:16.901147 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.local"] [unique_id "amr_aNzyF_5LOsrbx7vNPgAAACU"]
[Thu Jul 30 08:38:16.901269 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.local"] [unique_id "amr_aNzyF_5LOsrbx7vNPgAAACU"]
[Thu Jul 30 08:38:16.905641 2026] [ssl:error] [pid 2415834:tid 2415834] (EAI 2)Name or service not known: [client 144.76.19.72:40292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:16.914208 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/back/.env.bak"] [unique_id "amr_aBQlIytBsvBD-_AmqQAAADY"]
[Thu Jul 30 08:38:16.915629 2026] [ssl:error] [pid 2415834:tid 2415834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:16.915780 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/back/.env.bak"] [unique_id "amr_aBQlIytBsvBD-_AmqQAAADY"]
[Thu Jul 30 08:38:16.916205 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/back/.env.bak"] [unique_id "amr_aBQlIytBsvBD-_AmqQAAADY"]
[Thu Jul 30 08:38:16.924727 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.production"] [unique_id "amr_aNzyF_5LOsrbx7vNPwAAACU"]
[Thu Jul 30 08:38:16.924897 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.production"] [unique_id "amr_aNzyF_5LOsrbx7vNPwAAACU"]
[Thu Jul 30 08:38:16.925010 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.production"] [unique_id "amr_aNzyF_5LOsrbx7vNPwAAACU"]
[Thu Jul 30 08:38:16.937672 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/back/.env.dev"] [unique_id "amr_aBQlIytBsvBD-_AmqgAAADY"]
[Thu Jul 30 08:38:16.937852 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/back/.env.dev"] [unique_id "amr_aBQlIytBsvBD-_AmqgAAADY"]
[Thu Jul 30 08:38:16.938051 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/back/.env.dev"] [unique_id "amr_aBQlIytBsvBD-_AmqgAAADY"]
[Thu Jul 30 08:38:16.947501 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14988] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Assignment4/.env"] [unique_id "amr_aHiGnV0lYiYXbxD-RAAAACI"]
[Thu Jul 30 08:38:16.947647 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Assignment4/.env"] [unique_id "amr_aHiGnV0lYiYXbxD-RAAAACI"]
[Thu Jul 30 08:38:16.947991 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:16.948119 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:14988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Assignment4/.env"] [unique_id "amr_aHiGnV0lYiYXbxD-RAAAACI"]
[Thu Jul 30 08:38:16.958930 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.staging"] [unique_id "amr_aNzyF_5LOsrbx7vNQAAAACU"]
[Thu Jul 30 08:38:16.959122 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.staging"] [unique_id "amr_aNzyF_5LOsrbx7vNQAAAACU"]
[Thu Jul 30 08:38:16.959239 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.env.staging"] [unique_id "amr_aNzyF_5LOsrbx7vNQAAAACU"]
[Thu Jul 30 08:38:16.962590 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/back/.env.dist"] [unique_id "amr_aBQlIytBsvBD-_AmqwAAADY"]
[Thu Jul 30 08:38:16.962729 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/back/.env.dist"] [unique_id "amr_aBQlIytBsvBD-_AmqwAAADY"]
[Thu Jul 30 08:38:16.962901 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/back/.env.dist"] [unique_id "amr_aBQlIytBsvBD-_AmqwAAADY"]
[Thu Jul 30 08:38:17.014886 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14990] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/BACK/.env"] [unique_id "amr_aT-G1VCKQzXMG6UbNQAAACg"]
[Thu Jul 30 08:38:17.015059 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/BACK/.env"] [unique_id "amr_aT-G1VCKQzXMG6UbNQAAACg"]
[Thu Jul 30 08:38:17.015390 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.015502 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:14990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/BACK/.env"] [unique_id "amr_aT-G1VCKQzXMG6UbNQAAACg"]
[Thu Jul 30 08:38:17.047377 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.git/config"] [unique_id "amr_adzyF_5LOsrbx7vNQgAAACU"]
[Thu Jul 30 08:38:17.047571 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.git/config"] [unique_id "amr_adzyF_5LOsrbx7vNQgAAACU"]
[Thu Jul 30 08:38:17.047686 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/.git/config"] [unique_id "amr_adzyF_5LOsrbx7vNQgAAACU"]
[Thu Jul 30 08:38:17.060228 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/BACKEND/.env"] [unique_id "amr_aZDxY3fypotl7b9p1AAAAB4"]
[Thu Jul 30 08:38:17.060381 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/BACKEND/.env"] [unique_id "amr_aZDxY3fypotl7b9p1AAAAB4"]
[Thu Jul 30 08:38:17.060709 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.060817 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/BACKEND/.env"] [unique_id "amr_aZDxY3fypotl7b9p1AAAAB4"]
[Thu Jul 30 08:38:17.107213 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14994] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/BackEnd/.env"] [unique_id "amr_aTRsn_CrYZtjvMmRyAAAACk"]
[Thu Jul 30 08:38:17.107393 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14994] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/BackEnd/.env"] [unique_id "amr_aTRsn_CrYZtjvMmRyAAAACk"]
[Thu Jul 30 08:38:17.107715 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.107819 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:14994] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/BackEnd/.env"] [unique_id "amr_aTRsn_CrYZtjvMmRyAAAACk"]
[Thu Jul 30 08:38:17.146686 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15002] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/Build.bat"] [unique_id "amr_aRGCGrlKGv3qqKZEpgAAADQ"]
[Thu Jul 30 08:38:17.146997 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Build.bat"] [unique_id "amr_aRGCGrlKGv3qqKZEpgAAADQ"]
[Thu Jul 30 08:38:17.147327 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.147449 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Build.bat"] [unique_id "amr_aRGCGrlKGv3qqKZEpgAAADQ"]
[Thu Jul 30 08:38:17.220446 2026] [access_compat:error] [pid 2419665:tid 2419665] [client 106.215.157.145:27648] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:17.236378 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Chai/.env"] [unique_id "amr_abM_nXUwXvY3CanJwQAAACE"]
[Thu Jul 30 08:38:17.236541 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Chai/.env"] [unique_id "amr_abM_nXUwXvY3CanJwQAAACE"]
[Thu Jul 30 08:38:17.236874 2026] [core:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.236990 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Chai/.env"] [unique_id "amr_abM_nXUwXvY3CanJwQAAACE"]
[Thu Jul 30 08:38:17.271968 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ClientApp/.env"] [unique_id "amr_adGWH5xbt04huX6WGAAAABA"]
[Thu Jul 30 08:38:17.272132 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ClientApp/.env"] [unique_id "amr_adGWH5xbt04huX6WGAAAABA"]
[Thu Jul 30 08:38:17.272452 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.272577 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ClientApp/.env"] [unique_id "amr_adGWH5xbt04huX6WGAAAABA"]
[Thu Jul 30 08:38:17.303963 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_adzyF_5LOsrbx7vNRwAAACU"]
[Thu Jul 30 08:38:17.304265 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_adzyF_5LOsrbx7vNRwAAACU"]
[Thu Jul 30 08:38:17.304364 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:21612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_adzyF_5LOsrbx7vNRwAAACU"]
[Thu Jul 30 08:38:17.356646 2026] [ssl:error] [pid 2412474:tid 2412474] (70014)End of file found: [client 216.73.216.199:39592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:17.382006 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15036] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_aTRsn_CrYZtjvMmRyQAAACk"]
[Thu Jul 30 08:38:17.382228 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_aTRsn_CrYZtjvMmRyQAAACk"]
[Thu Jul 30 08:38:17.382544 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.382672 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_aTRsn_CrYZtjvMmRyQAAACk"]
[Thu Jul 30 08:38:17.402748 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/api-config.ini"] [unique_id "amr_aRiCxDmIQaM3be7XigAAACw"]
[Thu Jul 30 08:38:17.403107 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/api-config.ini"] [unique_id "amr_aRiCxDmIQaM3be7XigAAACw"]
[Thu Jul 30 08:38:17.403238 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/api-config.ini"] [unique_id "amr_aRiCxDmIQaM3be7XigAAACw"]
[Thu Jul 30 08:38:17.420053 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15052] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ContainerRegistry/.env"] [unique_id "amr_afY_hg2jdeEs7Tih2wAAAAM"]
[Thu Jul 30 08:38:17.420240 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15052] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ContainerRegistry/.env"] [unique_id "amr_afY_hg2jdeEs7Tih2wAAAAM"]
[Thu Jul 30 08:38:17.420592 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.420712 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15052] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ContainerRegistry/.env"] [unique_id "amr_afY_hg2jdeEs7Tih2wAAAAM"]
[Thu Jul 30 08:38:17.458330 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.458355 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.505658 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15068] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_abM_nXUwXvY3CanJwgAAACE"]
[Thu Jul 30 08:38:17.505800 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_abM_nXUwXvY3CanJwgAAACE"]
[Thu Jul 30 08:38:17.506137 2026] [core:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.506254 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_abM_nXUwXvY3CanJwgAAACE"]
[Thu Jul 30 08:38:17.607901 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15078] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_aSSe2NSLL34J1qvSzgAAACo"]
[Thu Jul 30 08:38:17.608048 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_aSSe2NSLL34J1qvSzgAAACo"]
[Thu Jul 30 08:38:17.608369 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.608475 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_aSSe2NSLL34J1qvSzgAAACo"]
[Thu Jul 30 08:38:17.656388 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15082] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/FE/huey/.env"] [unique_id "amr_aUQvuHxPljPWrXhqEAAAAC4"]
[Thu Jul 30 08:38:17.656571 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15082] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/FE/huey/.env"] [unique_id "amr_aUQvuHxPljPWrXhqEAAAAC4"]
[Thu Jul 30 08:38:17.656891 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.657000 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/FE/huey/.env"] [unique_id "amr_aUQvuHxPljPWrXhqEAAAAC4"]
[Thu Jul 30 08:38:17.697916 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15090] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_acc9eTFVr8JHkYzg_gAAADs"]
[Thu Jul 30 08:38:17.698060 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15090] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_acc9eTFVr8JHkYzg_gAAADs"]
[Thu Jul 30 08:38:17.698409 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.698531 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15090] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_acc9eTFVr8JHkYzg_gAAADs"]
[Thu Jul 30 08:38:17.743204 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15098] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/FRONT/.env"] [unique_id "amr_adzyF_5LOsrbx7vNSQAAACU"]
[Thu Jul 30 08:38:17.743348 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15098] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/FRONT/.env"] [unique_id "amr_adzyF_5LOsrbx7vNSQAAACU"]
[Thu Jul 30 08:38:17.743681 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.743799 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15098] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/FRONT/.env"] [unique_id "amr_adzyF_5LOsrbx7vNSQAAACU"]
[Thu Jul 30 08:38:17.791582 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/FRONTEND/.env"] [unique_id "amr_afY_hg2jdeEs7Tih3AAAAAM"]
[Thu Jul 30 08:38:17.791760 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/FRONTEND/.env"] [unique_id "amr_afY_hg2jdeEs7Tih3AAAAAM"]
[Thu Jul 30 08:38:17.792099 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.792234 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/FRONTEND/.env"] [unique_id "amr_afY_hg2jdeEs7Tih3AAAAAM"]
[Thu Jul 30 08:38:17.798930 2026] [security2:error] [pid 2411415:tid 2411415] [client 47.128.42.116:49050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/cache/wpfc-minified/k2bvsfnt/2m72k.css"] [unique_id "amr_aT-G1VCKQzXMG6UbNgAAACg"], referer: https://www.wmsfirearmstraining.com/tag/blog/
[Thu Jul 30 08:38:17.826502 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/back/php.ini"] [unique_id "amr_aRQlIytBsvBD-_AmzgAAADY"]
[Thu Jul 30 08:38:17.826824 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/back/php.ini"] [unique_id "amr_aRQlIytBsvBD-_AmzgAAADY"]
[Thu Jul 30 08:38:17.827014 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/back/php.ini"] [unique_id "amr_aRQlIytBsvBD-_AmzgAAADY"]
[Thu Jul 30 08:38:17.854827 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.854849 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.900548 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:15120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.900596 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:15120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.948360 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:17.948383 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.005120 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_atzyF_5LOsrbx7vNSgAAACU"]
[Thu Jul 30 08:38:18.005318 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_atzyF_5LOsrbx7vNSgAAACU"]
[Thu Jul 30 08:38:18.005665 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.005793 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_atzyF_5LOsrbx7vNSgAAACU"]
[Thu Jul 30 08:38:18.006135 2026] [access_compat:error] [pid 2425341:tid 2425341] [client 20.63.98.115:25356] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.php
[Thu Jul 30 08:38:18.006252 2026] [access_compat:error] [pid 2425341:tid 2425341] [client 20.63.98.115:25356] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.php5
[Thu Jul 30 08:38:18.006315 2026] [access_compat:error] [pid 2425341:tid 2425341] [client 20.63.98.115:25356] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.pl
[Thu Jul 30 08:38:18.006398 2026] [access_compat:error] [pid 2425341:tid 2425341] [client 20.63.98.115:25356] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.cgi
[Thu Jul 30 08:38:18.006493 2026] [access_compat:error] [pid 2425341:tid 2425341] [client 20.63.98.115:25356] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.phtml
[Thu Jul 30 08:38:18.054668 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15144] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_avY_hg2jdeEs7Tih3QAAAAM"]
[Thu Jul 30 08:38:18.054792 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_avY_hg2jdeEs7Tih3QAAAAM"]
[Thu Jul 30 08:38:18.055110 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.055209 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_avY_hg2jdeEs7Tih3QAAAAM"]
[Thu Jul 30 08:38:18.095423 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15152] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_ahGCGrlKGv3qqKZEqQAAADQ"]
[Thu Jul 30 08:38:18.095590 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_ahGCGrlKGv3qqKZEqQAAADQ"]
[Thu Jul 30 08:38:18.095910 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.096017 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_ahGCGrlKGv3qqKZEqQAAADQ"]
[Thu Jul 30 08:38:18.100629 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:64534] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_atIk9vtWgKYiYE5hmwAAACs"]
[Thu Jul 30 08:38:18.100754 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:64534] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amr_atIk9vtWgKYiYE5hmwAAACs"]
[Thu Jul 30 08:38:18.100929 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:64534] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_atIk9vtWgKYiYE5hmwAAACs"]
[Thu Jul 30 08:38:18.150022 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15154] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/HUNIV_migration/.env"] [unique_id "amr_ajRsn_CrYZtjvMmRywAAACk"]
[Thu Jul 30 08:38:18.150196 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/HUNIV_migration/.env"] [unique_id "amr_ajRsn_CrYZtjvMmRywAAACk"]
[Thu Jul 30 08:38:18.150515 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.150633 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/HUNIV_migration/.env"] [unique_id "amr_ajRsn_CrYZtjvMmRywAAACk"]
[Thu Jul 30 08:38:18.189365 2026] [security2:error] [pid 2417171:tid 2417171] [client 185.177.72.66:15156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Hash/.env"] [unique_id "amr_amRhemSV9EVAMT5d4wAAAAA"]
[Thu Jul 30 08:38:18.189492 2026] [security2:error] [pid 2417171:tid 2417171] [client 185.177.72.66:15156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Hash/.env"] [unique_id "amr_amRhemSV9EVAMT5d4wAAAAA"]
[Thu Jul 30 08:38:18.189811 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:15156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.189922 2026] [security2:error] [pid 2417171:tid 2417171] [client 185.177.72.66:15156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Hash/.env"] [unique_id "amr_amRhemSV9EVAMT5d4wAAAAA"]
[Thu Jul 30 08:38:18.198818 2026] [lsapi:warn] [pid 2415834:tid 2415834] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:38:18.225982 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Helmetjs/.env"] [unique_id "amr_arM_nXUwXvY3CanJxAAAACE"]
[Thu Jul 30 08:38:18.226144 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Helmetjs/.env"] [unique_id "amr_arM_nXUwXvY3CanJxAAAACE"]
[Thu Jul 30 08:38:18.226447 2026] [core:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.226549 2026] [security2:error] [pid 2421758:tid 2421758] [client 185.177.72.66:15166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Helmetjs/.env"] [unique_id "amr_arM_nXUwXvY3CanJxAAAACE"]
[Thu Jul 30 08:38:18.278015 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15180] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Imagebord/.env"] [unique_id "amr_akQvuHxPljPWrXhqEgAAAC4"]
[Thu Jul 30 08:38:18.278193 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Imagebord/.env"] [unique_id "amr_akQvuHxPljPWrXhqEgAAAC4"]
[Thu Jul 30 08:38:18.278502 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.278618 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Imagebord/.env"] [unique_id "amr_akQvuHxPljPWrXhqEgAAAC4"]
[Thu Jul 30 08:38:18.312063 2026] [authz_core:error] [pid 2420367:tid 2420367] [client 57.141.0.44:61456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:18.312700 2026] [authz_core:error] [pid 2420367:tid 2420367] [client 57.141.0.44:61456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:18.321879 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.bak"] [unique_id "amr_ahQlIytBsvBD-_Am4AAAADY"]
[Thu Jul 30 08:38:18.322013 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.bak"] [unique_id "amr_ahQlIytBsvBD-_Am4AAAADY"]
[Thu Jul 30 08:38:18.322201 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.bak"] [unique_id "amr_ahQlIytBsvBD-_Am4AAAADY"]
[Thu Jul 30 08:38:18.322906 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/InstantCV/server/.env"] [unique_id "amr_am101zDj_5UEQFMW2gAAAAs"]
[Thu Jul 30 08:38:18.323028 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/InstantCV/server/.env"] [unique_id "amr_am101zDj_5UEQFMW2gAAAAs"]
[Thu Jul 30 08:38:18.323372 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.323484 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/InstantCV/server/.env"] [unique_id "amr_am101zDj_5UEQFMW2gAAAAs"]
[Thu Jul 30 08:38:18.354338 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.dev"] [unique_id "amr_ahQlIytBsvBD-_Am4QAAADY"]
[Thu Jul 30 08:38:18.354483 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.dev"] [unique_id "amr_ahQlIytBsvBD-_Am4QAAADY"]
[Thu Jul 30 08:38:18.354679 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.dev"] [unique_id "amr_ahQlIytBsvBD-_Am4QAAADY"]
[Thu Jul 30 08:38:18.375318 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.dist"] [unique_id "amr_ahQlIytBsvBD-_Am4gAAADY"]
[Thu Jul 30 08:38:18.375481 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.dist"] [unique_id "amr_ahQlIytBsvBD-_Am4gAAADY"]
[Thu Jul 30 08:38:18.375694 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.17:10310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backend/.env.dist"] [unique_id "amr_ahQlIytBsvBD-_Am4gAAADY"]
[Thu Jul 30 08:38:18.378996 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15196] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Kubernetes/.env"] [unique_id "amr_aniGnV0lYiYXbxD-RgAAACI"]
[Thu Jul 30 08:38:18.379143 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Kubernetes/.env"] [unique_id "amr_aniGnV0lYiYXbxD-RgAAACI"]
[Thu Jul 30 08:38:18.379449 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.379654 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Kubernetes/.env"] [unique_id "amr_aniGnV0lYiYXbxD-RgAAACI"]
[Thu Jul 30 08:38:18.436779 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15204] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Library/.env"] [unique_id "amr_ahGCGrlKGv3qqKZEqgAAADQ"]
[Thu Jul 30 08:38:18.436897 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Library/.env"] [unique_id "amr_ahGCGrlKGv3qqKZEqgAAADQ"]
[Thu Jul 30 08:38:18.437223 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.437320 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Library/.env"] [unique_id "amr_ahGCGrlKGv3qqKZEqgAAADQ"]
[Thu Jul 30 08:38:18.486399 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_atIk9vtWgKYiYE5hnAAAACs"]
[Thu Jul 30 08:38:18.486544 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_atIk9vtWgKYiYE5hnAAAACs"]
[Thu Jul 30 08:38:18.486888 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.487001 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_atIk9vtWgKYiYE5hnAAAACs"]
[Thu Jul 30 08:38:18.509836 2026] [security2:error] [pid 2423371:tid 2423371] [client 47.128.42.116:49686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2023/10/WMS-Logo-2023-3.jpg"] [unique_id "amr_aiJmKgSBykSELhztvgAAACY"], referer: https://www.wmsfirearmstraining.com/tag/blog/
[Thu Jul 30 08:38:18.563510 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15216] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_akQvuHxPljPWrXhqEwAAAC4"]
[Thu Jul 30 08:38:18.563696 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_akQvuHxPljPWrXhqEwAAAC4"]
[Thu Jul 30 08:38:18.564001 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.564122 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_akQvuHxPljPWrXhqEwAAAC4"]
[Thu Jul 30 08:38:18.603911 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_am101zDj_5UEQFMW2wAAAAs"]
[Thu Jul 30 08:38:18.604099 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_am101zDj_5UEQFMW2wAAAAs"]
[Thu Jul 30 08:38:18.604408 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.604536 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_am101zDj_5UEQFMW2wAAAAs"]
[Thu Jul 30 08:38:18.696379 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15226] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_aiSe2NSLL34J1qvS0QAAACo"]
[Thu Jul 30 08:38:18.696507 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15226] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_aiSe2NSLL34J1qvS0QAAACo"]
[Thu Jul 30 08:38:18.696816 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.696922 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15226] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_aiSe2NSLL34J1qvS0QAAACo"]
[Thu Jul 30 08:38:18.747078 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_aniGnV0lYiYXbxD-RwAAACI"]
[Thu Jul 30 08:38:18.747213 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_aniGnV0lYiYXbxD-RwAAACI"]
[Thu Jul 30 08:38:18.747528 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.747643 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_aniGnV0lYiYXbxD-RwAAACI"]
[Thu Jul 30 08:38:18.829969 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.829990 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.868460 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.868480 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.913482 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:15266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.913500 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:15266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.961932 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15274] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Passportjs/.env"] [unique_id "amr_atIk9vtWgKYiYE5hnQAAACs"]
[Thu Jul 30 08:38:18.962097 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Passportjs/.env"] [unique_id "amr_atIk9vtWgKYiYE5hnQAAACs"]
[Thu Jul 30 08:38:18.962420 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.962527 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Passportjs/.env"] [unique_id "amr_atIk9vtWgKYiYE5hnQAAACs"]
[Thu Jul 30 08:38:18.996612 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15276] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Serve_time_server/.env"] [unique_id "amr_atzyF_5LOsrbx7vNTAAAACU"]
[Thu Jul 30 08:38:18.996737 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15276] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Serve_time_server/.env"] [unique_id "amr_atzyF_5LOsrbx7vNTAAAACU"]
[Thu Jul 30 08:38:18.997037 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:18.997151 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15276] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Serve_time_server/.env"] [unique_id "amr_atzyF_5LOsrbx7vNTAAAACU"]
[Thu Jul 30 08:38:19.034353 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.034377 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.071459 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.071478 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.133269 2026] [core:error] [pid 2423370:tid 2423370] [client 185.177.72.66:15312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.133289 2026] [core:error] [pid 2423370:tid 2423370] [client 185.177.72.66:15312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.175954 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15322] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Server_with_db/.env"] [unique_id "amr_aySe2NSLL34J1qvS0gAAACo"]
[Thu Jul 30 08:38:19.176088 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15322] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Server_with_db/.env"] [unique_id "amr_aySe2NSLL34J1qvS0gAAACo"]
[Thu Jul 30 08:38:19.176384 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.176481 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15322] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Server_with_db/.env"] [unique_id "amr_aySe2NSLL34J1qvS0gAAACo"]
[Thu Jul 30 08:38:19.218350 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15326] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Simple_server/.env"] [unique_id "amr_a3iGnV0lYiYXbxD-SAAAACI"]
[Thu Jul 30 08:38:19.218506 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Simple_server/.env"] [unique_id "amr_a3iGnV0lYiYXbxD-SAAAACI"]
[Thu Jul 30 08:38:19.218822 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.218930 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Simple_server/.env"] [unique_id "amr_a3iGnV0lYiYXbxD-SAAAACI"]
[Thu Jul 30 08:38:19.261141 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15328] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Socketio/.env"] [unique_id "amr_a8c9eTFVr8JHkYzhAAAAADs"]
[Thu Jul 30 08:38:19.261268 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Socketio/.env"] [unique_id "amr_a8c9eTFVr8JHkYzhAAAAADs"]
[Thu Jul 30 08:38:19.261584 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.261685 2026] [security2:error] [pid 2415834:tid 2415834] [client 185.177.72.66:15328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Socketio/.env"] [unique_id "amr_a8c9eTFVr8JHkYzhAAAAADs"]
[Thu Jul 30 08:38:19.315741 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15338] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Sources/API/.env"] [unique_id "amr_axGCGrlKGv3qqKZErAAAADQ"]
[Thu Jul 30 08:38:19.315879 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Sources/API/.env"] [unique_id "amr_axGCGrlKGv3qqKZErAAAADQ"]
[Thu Jul 30 08:38:19.316202 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.316301 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Sources/API/.env"] [unique_id "amr_axGCGrlKGv3qqKZErAAAADQ"]
[Thu Jul 30 08:38:19.357042 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15348] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/SpotiApps/.env"] [unique_id "amr_a9Ik9vtWgKYiYE5hngAAACs"]
[Thu Jul 30 08:38:19.357186 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/SpotiApps/.env"] [unique_id "amr_a9Ik9vtWgKYiYE5hngAAACs"]
[Thu Jul 30 08:38:19.357495 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.357613 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/SpotiApps/.env"] [unique_id "amr_a9Ik9vtWgKYiYE5hngAAACs"]
[Thu Jul 30 08:38:19.406153 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15360] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Tests/Application/.env"] [unique_id "amr_a9zyF_5LOsrbx7vNTQAAACU"]
[Thu Jul 30 08:38:19.406283 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Tests/Application/.env"] [unique_id "amr_a9zyF_5LOsrbx7vNTQAAACU"]
[Thu Jul 30 08:38:19.406594 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.406709 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Tests/Application/.env"] [unique_id "amr_a9zyF_5LOsrbx7vNTQAAACU"]
[Thu Jul 30 08:38:19.468523 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15372] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Travel_form/.env"] [unique_id "amr_ayqRkGfpP6jUcmmaaAAAAAg"]
[Thu Jul 30 08:38:19.468655 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Travel_form/.env"] [unique_id "amr_ayqRkGfpP6jUcmmaaAAAAAg"]
[Thu Jul 30 08:38:19.468967 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.469085 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15372] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Travel_form/.env"] [unique_id "amr_ayqRkGfpP6jUcmmaaAAAAAg"]
[Thu Jul 30 08:38:19.490269 2026] [security2:error] [pid 2420087:tid 2420087] [client 47.128.42.116:50428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2019/02/gallery-hero-1.jpg"] [unique_id "amr_a9GWH5xbt04huX6WGwAAABA"], referer: https://www.wmsfirearmstraining.com/tag/blog/
[Thu Jul 30 08:38:19.511576 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15378] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/User_info/.env"] [unique_id "amr_aySe2NSLL34J1qvS0wAAACo"]
[Thu Jul 30 08:38:19.511718 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/User_info/.env"] [unique_id "amr_aySe2NSLL34J1qvS0wAAACo"]
[Thu Jul 30 08:38:19.512021 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.512130 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/User_info/.env"] [unique_id "amr_aySe2NSLL34J1qvS0wAAACo"]
[Thu Jul 30 08:38:19.526231 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/backend/php.ini"] [unique_id "amr_azRsn_CrYZtjvMmR7wAAACk"]
[Thu Jul 30 08:38:19.526548 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backend/php.ini"] [unique_id "amr_azRsn_CrYZtjvMmR7wAAACk"]
[Thu Jul 30 08:38:19.526765 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backend/php.ini"] [unique_id "amr_azRsn_CrYZtjvMmR7wAAACk"]
[Thu Jul 30 08:38:19.560128 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.560150 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.607814 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/laravel.log"] [unique_id "amr_axiCxDmIQaM3be7XrgAAACw"]
[Thu Jul 30 08:38:19.608220 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/laravel.log"] [unique_id "amr_axiCxDmIQaM3be7XrgAAACw"]
[Thu Jul 30 08:38:19.608359 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/laravel.log"] [unique_id "amr_axiCxDmIQaM3be7XrgAAACw"]
[Thu Jul 30 08:38:19.617322 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.617343 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.655427 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15406] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/Web/siteMariage/.env"] [unique_id "amr_axGCGrlKGv3qqKZErQAAADQ"]
[Thu Jul 30 08:38:19.655577 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/Web/siteMariage/.env"] [unique_id "amr_axGCGrlKGv3qqKZErQAAADQ"]
[Thu Jul 30 08:38:19.655879 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.655980 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/Web/siteMariage/.env"] [unique_id "amr_axGCGrlKGv3qqKZErQAAADQ"]
[Thu Jul 30 08:38:19.729263 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.729302 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.770007 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.770026 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.828557 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.828592 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.862505 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.862524 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.922102 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.922122 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.951052 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backend/src/.env"] [unique_id "amr_azRsn_CrYZtjvMmR_gAAACk"]
[Thu Jul 30 08:38:19.951197 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backend/src/.env"] [unique_id "amr_azRsn_CrYZtjvMmR_gAAACk"]
[Thu Jul 30 08:38:19.951381 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backend/src/.env"] [unique_id "amr_azRsn_CrYZtjvMmR_gAAACk"]
[Thu Jul 30 08:38:19.958278 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.958302 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:19.971532 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:35438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:19.971555 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:20.002392 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.002418 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.020644 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/php.ini"] [unique_id "amr_bBiCxDmIQaM3be7XtQAAACw"]
[Thu Jul 30 08:38:20.020940 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/php.ini"] [unique_id "amr_bBiCxDmIQaM3be7XtQAAACw"]
[Thu Jul 30 08:38:20.021039 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/php.ini"] [unique_id "amr_bBiCxDmIQaM3be7XtQAAACw"]
[Thu Jul 30 08:38:20.027028 2026] [ssl:error] [pid 2412506:tid 2412506] (EAI 2)Name or service not known: [client 144.76.19.72:35448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:20.027049 2026] [ssl:error] [pid 2412506:tid 2412506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:20.046063 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.046097 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.089669 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.089702 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.131463 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backendfinaltest/.env"] [unique_id "amr_bDRsn_CrYZtjvMmSBgAAACk"]
[Thu Jul 30 08:38:20.131617 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backendfinaltest/.env"] [unique_id "amr_bDRsn_CrYZtjvMmSBgAAACk"]
[Thu Jul 30 08:38:20.131799 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backendfinaltest/.env"] [unique_id "amr_bDRsn_CrYZtjvMmSBgAAACk"]
[Thu Jul 30 08:38:20.134175 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:15514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.134204 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:15514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.151335 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /backup.wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup.wp-config.php"] [unique_id "amr_bDRsn_CrYZtjvMmSBwAAACk"]
[Thu Jul 30 08:38:20.151467 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup.wp-config.php"] [unique_id "amr_bDRsn_CrYZtjvMmSBwAAACk"]
[Thu Jul 30 08:38:20.151655 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup.wp-config.php"] [unique_id "amr_bDRsn_CrYZtjvMmSBwAAACk"]
[Thu Jul 30 08:38:20.171255 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.bak"] [unique_id "amr_bDRsn_CrYZtjvMmSCAAAACk"]
[Thu Jul 30 08:38:20.171378 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.bak"] [unique_id "amr_bDRsn_CrYZtjvMmSCAAAACk"]
[Thu Jul 30 08:38:20.171548 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.bak"] [unique_id "amr_bDRsn_CrYZtjvMmSCAAAACk"]
[Thu Jul 30 08:38:20.183017 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/_static/.env"] [unique_id "amr_bCqRkGfpP6jUcmmaagAAAAg"]
[Thu Jul 30 08:38:20.183152 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/_static/.env"] [unique_id "amr_bCqRkGfpP6jUcmmaagAAAAg"]
[Thu Jul 30 08:38:20.183451 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.183548 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:15518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/_static/.env"] [unique_id "amr_bCqRkGfpP6jUcmmaagAAAAg"]
[Thu Jul 30 08:38:20.212477 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.dev"] [unique_id "amr_bDRsn_CrYZtjvMmSCQAAACk"]
[Thu Jul 30 08:38:20.212635 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.dev"] [unique_id "amr_bDRsn_CrYZtjvMmSCQAAACk"]
[Thu Jul 30 08:38:20.212824 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.dev"] [unique_id "amr_bDRsn_CrYZtjvMmSCQAAACk"]
[Thu Jul 30 08:38:20.233308 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.dist"] [unique_id "amr_bDRsn_CrYZtjvMmSCgAAACk"]
[Thu Jul 30 08:38:20.233425 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.dist"] [unique_id "amr_bDRsn_CrYZtjvMmSCgAAACk"]
[Thu Jul 30 08:38:20.233595 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.dist"] [unique_id "amr_bDRsn_CrYZtjvMmSCgAAACk"]
[Thu Jul 30 08:38:20.238197 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.238217 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.253144 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.local"] [unique_id "amr_bDRsn_CrYZtjvMmSCwAAACk"]
[Thu Jul 30 08:38:20.253298 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.local"] [unique_id "amr_bDRsn_CrYZtjvMmSCwAAACk"]
[Thu Jul 30 08:38:20.253492 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.local"] [unique_id "amr_bDRsn_CrYZtjvMmSCwAAACk"]
[Thu Jul 30 08:38:20.272480 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.production"] [unique_id "amr_bDRsn_CrYZtjvMmSDAAAACk"]
[Thu Jul 30 08:38:20.272635 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.production"] [unique_id "amr_bDRsn_CrYZtjvMmSDAAAACk"]
[Thu Jul 30 08:38:20.272805 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.production"] [unique_id "amr_bDRsn_CrYZtjvMmSDAAAACk"]
[Thu Jul 30 08:38:20.289118 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.289138 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.306757 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.staging"] [unique_id "amr_bDRsn_CrYZtjvMmSDQAAACk"]
[Thu Jul 30 08:38:20.306897 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.staging"] [unique_id "amr_bDRsn_CrYZtjvMmSDQAAACk"]
[Thu Jul 30 08:38:20.307083 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/.env.staging"] [unique_id "amr_bDRsn_CrYZtjvMmSDQAAACk"]
[Thu Jul 30 08:38:20.343976 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15536] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /account/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/account/.env"] [unique_id "amr_bEQvuHxPljPWrXhqFwAAAC4"]
[Thu Jul 30 08:38:20.344126 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15536] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/account/.env"] [unique_id "amr_bEQvuHxPljPWrXhqFwAAAC4"]
[Thu Jul 30 08:38:20.344429 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.344531 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:15536] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/account/.env"] [unique_id "amr_bEQvuHxPljPWrXhqFwAAAC4"]
[Thu Jul 30 08:38:20.349329 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backup/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/.git/config"] [unique_id "amr_bDRsn_CrYZtjvMmSDwAAACk"]
[Thu Jul 30 08:38:20.349463 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/.git/config"] [unique_id "amr_bDRsn_CrYZtjvMmSDwAAACk"]
[Thu Jul 30 08:38:20.349640 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/.git/config"] [unique_id "amr_bDRsn_CrYZtjvMmSDwAAACk"]
[Thu Jul 30 08:38:20.389250 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.389273 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.439281 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15546] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /account/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/account/.git/config"] [unique_id "amr_bHiGnV0lYiYXbxD-SwAAACI"]
[Thu Jul 30 08:38:20.439410 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/account/.git/config"] [unique_id "amr_bHiGnV0lYiYXbxD-SwAAACI"]
[Thu Jul 30 08:38:20.439725 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.439840 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:15546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/account/.git/config"] [unique_id "amr_bHiGnV0lYiYXbxD-SwAAACI"]
[Thu Jul 30 08:38:20.483417 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_bDRsn_CrYZtjvMmSFAAAACk"]
[Thu Jul 30 08:38:20.483703 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_bDRsn_CrYZtjvMmSFAAAACk"]
[Thu Jul 30 08:38:20.483871 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.17:31170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_bDRsn_CrYZtjvMmSFAAAACk"]
[Thu Jul 30 08:38:20.498271 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.498294 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.550907 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.550932 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:15566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.600049 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.600091 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.704950 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.704973 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.751666 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15594] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_bCSe2NSLL34J1qvS1gAAACo"]
[Thu Jul 30 08:38:20.751945 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15594] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_bCSe2NSLL34J1qvS1gAAACo"]
[Thu Jul 30 08:38:20.752272 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.752381 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15594] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_bCSe2NSLL34J1qvS1gAAACo"]
[Thu Jul 30 08:38:20.791322 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15598] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/account/api-config.ini"] [unique_id "amr_bMsDPUni1EbX-qVhEAAAADg"]
[Thu Jul 30 08:38:20.791621 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/account/api-config.ini"] [unique_id "amr_bMsDPUni1EbX-qVhEAAAADg"]
[Thu Jul 30 08:38:20.791926 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.792028 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/account/api-config.ini"] [unique_id "amr_bMsDPUni1EbX-qVhEAAAADg"]
[Thu Jul 30 08:38:20.805866 2026] [ssl:error] [pid 2411420:tid 2411420] (70014)End of file found: [client 216.73.216.199:32282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:20.829084 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.829102 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.865939 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.865966 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.928431 2026] [security2:error] [pid 2424223:tid 2424223] [client 103.210.116.235:55300] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_bNzyF_5LOsrbx7vNUQAAACU"]
[Thu Jul 30 08:38:20.928501 2026] [security2:error] [pid 2424223:tid 2424223] [client 103.210.116.235:55300] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_bNzyF_5LOsrbx7vNUQAAACU"]
[Thu Jul 30 08:38:20.928796 2026] [security2:error] [pid 2424223:tid 2424223] [client 103.210.116.235:55300] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_bNzyF_5LOsrbx7vNUQAAACU"]
[Thu Jul 30 08:38:20.938704 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15636] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/account/laravel.log"] [unique_id "amr_bOeliGAK7HeY9rNxAwAAAAE"]
[Thu Jul 30 08:38:20.938982 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/account/laravel.log"] [unique_id "amr_bOeliGAK7HeY9rNxAwAAAAE"]
[Thu Jul 30 08:38:20.939316 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.939419 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15636] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/account/laravel.log"] [unique_id "amr_bOeliGAK7HeY9rNxAwAAAAE"]
[Thu Jul 30 08:38:20.988593 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:15646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:20.988620 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:15646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.070743 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.070764 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.113989 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/account/web.config"] [unique_id "amr_bf8233Hh3pbQWVeyoAAAABU"]
[Thu Jul 30 08:38:21.114257 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15668] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /account/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/account/web.config"] [unique_id "amr_bf8233Hh3pbQWVeyoAAAABU"]
[Thu Jul 30 08:38:21.114429 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/account/web.config"] [unique_id "amr_bf8233Hh3pbQWVeyoAAAABU"]
[Thu Jul 30 08:38:21.114769 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.114899 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:15668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/account/web.config"] [unique_id "amr_bf8233Hh3pbQWVeyoAAAABU"]
[Thu Jul 30 08:38:21.186934 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/web.config"] [unique_id "amr_bRiCxDmIQaM3be7XyAAAACw"]
[Thu Jul 30 08:38:21.187185 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /admin/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/web.config"] [unique_id "amr_bRiCxDmIQaM3be7XyAAAACw"]
[Thu Jul 30 08:38:21.187343 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/web.config"] [unique_id "amr_bRiCxDmIQaM3be7XyAAAACw"]
[Thu Jul 30 08:38:21.187461 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admin/web.config"] [unique_id "amr_bRiCxDmIQaM3be7XyAAAACw"]
[Thu Jul 30 08:38:21.202401 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/acme-challenge/.env"] [unique_id "amr_bcsDPUni1EbX-qVhEQAAADg"]
[Thu Jul 30 08:38:21.202591 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/acme-challenge/.env"] [unique_id "amr_bcsDPUni1EbX-qVhEQAAADg"]
[Thu Jul 30 08:38:21.202904 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.203010 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/acme-challenge/.env"] [unique_id "amr_bcsDPUni1EbX-qVhEQAAADg"]
[Thu Jul 30 08:38:21.274639 2026] [access_compat:error] [pid 2420368:tid 2420368] [client 106.215.157.145:3813] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:21.302048 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15680] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/acme/.env"] [unique_id "amr_bdVtxCBUSPwlMZFKuQAAABk"]
[Thu Jul 30 08:38:21.302208 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/acme/.env"] [unique_id "amr_bdVtxCBUSPwlMZFKuQAAABk"]
[Thu Jul 30 08:38:21.302552 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.302706 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/acme/.env"] [unique_id "amr_bdVtxCBUSPwlMZFKuQAAABk"]
[Thu Jul 30 08:38:21.388910 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/acme_challenges/.env"] [unique_id "amr_bdzyF_5LOsrbx7vNUgAAACU"]
[Thu Jul 30 08:38:21.389057 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/acme_challenges/.env"] [unique_id "amr_bdzyF_5LOsrbx7vNUgAAACU"]
[Thu Jul 30 08:38:21.389374 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.389479 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/acme_challenges/.env"] [unique_id "amr_bdzyF_5LOsrbx7vNUgAAACU"]
[Thu Jul 30 08:38:21.395779 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adminer/.env"] [unique_id "amr_bRiCxDmIQaM3be7XzAAAACw"]
[Thu Jul 30 08:38:21.396468 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adminer/.env"] [unique_id "amr_bRiCxDmIQaM3be7XzAAAACw"]
[Thu Jul 30 08:38:21.396690 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/adminer/.env"] [unique_id "amr_bRiCxDmIQaM3be7XzAAAACw"]
[Thu Jul 30 08:38:21.426611 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env"] [unique_id "amr_bRiCxDmIQaM3be7XzQAAACw"]
[Thu Jul 30 08:38:21.426803 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env"] [unique_id "amr_bRiCxDmIQaM3be7XzQAAACw"]
[Thu Jul 30 08:38:21.426927 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env"] [unique_id "amr_bRiCxDmIQaM3be7XzQAAACw"]
[Thu Jul 30 08:38:21.447003 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.bak"] [unique_id "amr_bRiCxDmIQaM3be7XzgAAACw"]
[Thu Jul 30 08:38:21.447217 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.bak"] [unique_id "amr_bRiCxDmIQaM3be7XzgAAACw"]
[Thu Jul 30 08:38:21.447362 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.bak"] [unique_id "amr_bRiCxDmIQaM3be7XzgAAACw"]
[Thu Jul 30 08:38:21.466170 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.dev"] [unique_id "amr_bRiCxDmIQaM3be7XzwAAACw"]
[Thu Jul 30 08:38:21.466367 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.dev"] [unique_id "amr_bRiCxDmIQaM3be7XzwAAACw"]
[Thu Jul 30 08:38:21.466500 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.dev"] [unique_id "amr_bRiCxDmIQaM3be7XzwAAACw"]
[Thu Jul 30 08:38:21.493785 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.dist"] [unique_id "amr_bRiCxDmIQaM3be7X0AAAACw"]
[Thu Jul 30 08:38:21.493981 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.dist"] [unique_id "amr_bRiCxDmIQaM3be7X0AAAACw"]
[Thu Jul 30 08:38:21.494129 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.dist"] [unique_id "amr_bRiCxDmIQaM3be7X0AAAACw"]
[Thu Jul 30 08:38:21.512317 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.local"] [unique_id "amr_bRiCxDmIQaM3be7X0QAAACw"]
[Thu Jul 30 08:38:21.512511 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.local"] [unique_id "amr_bRiCxDmIQaM3be7X0QAAACw"]
[Thu Jul 30 08:38:21.512639 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.17:31898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/.env.local"] [unique_id "amr_bRiCxDmIQaM3be7X0QAAACw"]
[Thu Jul 30 08:38:21.524880 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/actions-server/.env"] [unique_id "amr_bW101zDj_5UEQFMW4AAAAAs"]
[Thu Jul 30 08:38:21.525035 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/actions-server/.env"] [unique_id "amr_bW101zDj_5UEQFMW4AAAAAs"]
[Thu Jul 30 08:38:21.525374 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.525493 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/actions-server/.env"] [unique_id "amr_bW101zDj_5UEQFMW4AAAAAs"]
[Thu Jul 30 08:38:21.601955 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15692] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/adm/.env"] [unique_id "amr_bZkA2-P0e5yhCnL_NgAAAAI"]
[Thu Jul 30 08:38:21.602130 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/adm/.env"] [unique_id "amr_bZkA2-P0e5yhCnL_NgAAAAI"]
[Thu Jul 30 08:38:21.602462 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.602596 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/adm/.env"] [unique_id "amr_bZkA2-P0e5yhCnL_NgAAAAI"]
[Thu Jul 30 08:38:21.637407 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15708] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/adm/.env.bak"] [unique_id "amr_bTRsn_CrYZtjvMmSMQAAACk"]
[Thu Jul 30 08:38:21.637575 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15708] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/adm/.env.bak"] [unique_id "amr_bTRsn_CrYZtjvMmSMQAAACk"]
[Thu Jul 30 08:38:21.637882 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.637993 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15708] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/adm/.env.bak"] [unique_id "amr_bTRsn_CrYZtjvMmSMQAAACk"]
[Thu Jul 30 08:38:21.689912 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15724] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/adm/.env.dev"] [unique_id "amr_bcsDPUni1EbX-qVhEgAAADg"]
[Thu Jul 30 08:38:21.690063 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/adm/.env.dev"] [unique_id "amr_bcsDPUni1EbX-qVhEgAAADg"]
[Thu Jul 30 08:38:21.690380 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.690488 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/adm/.env.dev"] [unique_id "amr_bcsDPUni1EbX-qVhEgAAADg"]
[Thu Jul 30 08:38:21.731265 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/adm/.env.dist"] [unique_id "amr_baCuPSoE0uFFzriAPQAAABY"]
[Thu Jul 30 08:38:21.731449 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/adm/.env.dist"] [unique_id "amr_baCuPSoE0uFFzriAPQAAABY"]
[Thu Jul 30 08:38:21.731775 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.731889 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/adm/.env.dist"] [unique_id "amr_baCuPSoE0uFFzriAPQAAABY"]
[Thu Jul 30 08:38:21.777124 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15734] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/adm/.env.local"] [unique_id "amr_bdVtxCBUSPwlMZFKugAAABk"]
[Thu Jul 30 08:38:21.777304 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/adm/.env.local"] [unique_id "amr_bdVtxCBUSPwlMZFKugAAABk"]
[Thu Jul 30 08:38:21.777637 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.777750 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/adm/.env.local"] [unique_id "amr_bdVtxCBUSPwlMZFKugAAABk"]
[Thu Jul 30 08:38:21.816047 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.816079 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.851617 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/backup/laravel.log"] [unique_id "amr_bQovdwhMhh9vBJDPuAAAADE"]
[Thu Jul 30 08:38:21.851962 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/laravel.log"] [unique_id "amr_bQovdwhMhh9vBJDPuAAAADE"]
[Thu Jul 30 08:38:21.852163 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/laravel.log"] [unique_id "amr_bQovdwhMhh9vBJDPuAAAADE"]
[Thu Jul 30 08:38:21.861536 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.861570 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.925499 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.925533 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.970046 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:21.970080 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.027354 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.027380 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.081092 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.081112 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.132110 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.132142 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.190569 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.190600 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.236273 2026] [core:error] [pid 2423371:tid 2423371] [client 185.177.72.66:15822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.236307 2026] [core:error] [pid 2423371:tid 2423371] [client 185.177.72.66:15822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.324978 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.325011 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.348693 2026] [authz_core:error] [pid 2423145:tid 2423145] [client 66.249.66.34:43375] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:38:22.351399 2026] [authz_core:error] [pid 2423145:tid 2423145] [client 66.249.66.34:43375] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:38:22.404820 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.404856 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.443303 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.443325 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.483984 2026] [security2:error] [pid 2420262:tid 2420262] [client 94.207.196.5:35319] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_bqCuPSoE0uFFzriAPwAAABY"]
[Thu Jul 30 08:38:22.484029 2026] [security2:error] [pid 2420262:tid 2420262] [client 94.207.196.5:35319] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_bqCuPSoE0uFFzriAPwAAABY"]
[Thu Jul 30 08:38:22.484272 2026] [security2:error] [pid 2420262:tid 2420262] [client 94.207.196.5:35319] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_bqCuPSoE0uFFzriAPwAAABY"]
[Thu Jul 30 08:38:22.485584 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.485599 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.518881 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/backup/php.ini"] [unique_id "amr_bgovdwhMhh9vBJDP0wAAADE"]
[Thu Jul 30 08:38:22.519179 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/php.ini"] [unique_id "amr_bgovdwhMhh9vBJDP0wAAADE"]
[Thu Jul 30 08:38:22.519355 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/php.ini"] [unique_id "amr_bgovdwhMhh9vBJDP0wAAADE"]
[Thu Jul 30 08:38:22.528307 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.528326 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:15848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.580496 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.580517 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.633173 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.633191 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.673117 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.673134 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:15872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.722797 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.722815 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.842019 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.842046 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.895317 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.895340 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:15904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.913976 2026] [ssl:error] [pid 2411415:tid 2411415] (70014)End of file found: [client 216.73.216.199:22269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:22.946610 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.946638 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.993032 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:22.993061 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.040907 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.040927 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.081814 2026] [ssl:error] [pid 2420262:tid 2420262] (EAI 2)Name or service not known: [client 144.76.19.72:35458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:23.081835 2026] [ssl:error] [pid 2420262:tid 2420262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:23.111339 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.111360 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:15948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.137783 2026] [ssl:error] [pid 2424223:tid 2424223] (EAI 2)Name or service not known: [client 144.76.19.72:35474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:23.137803 2026] [ssl:error] [pid 2424223:tid 2424223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:23.151159 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.151176 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.187223 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.187246 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:15960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.234508 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.234537 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:15972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.258767 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/backup/web.config"] [unique_id "amr_bwovdwhMhh9vBJDP8AAAADE"]
[Thu Jul 30 08:38:23.259114 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /backup/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/backup/web.config"] [unique_id "amr_bwovdwhMhh9vBJDP8AAAADE"]
[Thu Jul 30 08:38:23.259302 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/backup/web.config"] [unique_id "amr_bwovdwhMhh9vBJDP8AAAADE"]
[Thu Jul 30 08:38:23.259590 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/backup/web.config"] [unique_id "amr_bwovdwhMhh9vBJDP8AAAADE"]
[Thu Jul 30 08:38:23.272478 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.272499 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:15980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.309026 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.309053 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.359616 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.359642 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:15990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.368402 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/base/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9AAAADE"]
[Thu Jul 30 08:38:23.368555 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/base/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9AAAADE"]
[Thu Jul 30 08:38:23.368748 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/base/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9AAAADE"]
[Thu Jul 30 08:38:23.408428 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:16000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.408457 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:16000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.414723 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/base_dir/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9QAAADE"]
[Thu Jul 30 08:38:23.414852 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/base_dir/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9QAAADE"]
[Thu Jul 30 08:38:23.415026 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/base_dir/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9QAAADE"]
[Thu Jul 30 08:38:23.436415 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/basic-network/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9gAAADE"]
[Thu Jul 30 08:38:23.436551 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/basic-network/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9gAAADE"]
[Thu Jul 30 08:38:23.436740 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/basic-network/.env"] [unique_id "amr_bwovdwhMhh9vBJDP9gAAADE"]
[Thu Jul 30 08:38:23.449003 2026] [authz_core:error] [pid 2412506:tid 2412506] [client 57.141.0.66:51710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:23.449701 2026] [authz_core:error] [pid 2412506:tid 2412506] [client 57.141.0.66:51710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:23.456017 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:16010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.456042 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:16010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.463547 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.bak"] [unique_id "amr_bwovdwhMhh9vBJDP9wAAADE"]
[Thu Jul 30 08:38:23.463683 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.bak"] [unique_id "amr_bwovdwhMhh9vBJDP9wAAADE"]
[Thu Jul 30 08:38:23.463856 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.bak"] [unique_id "amr_bwovdwhMhh9vBJDP9wAAADE"]
[Thu Jul 30 08:38:23.486916 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.dev"] [unique_id "amr_bwovdwhMhh9vBJDP-AAAADE"]
[Thu Jul 30 08:38:23.487085 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.dev"] [unique_id "amr_bwovdwhMhh9vBJDP-AAAADE"]
[Thu Jul 30 08:38:23.487271 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.dev"] [unique_id "amr_bwovdwhMhh9vBJDP-AAAADE"]
[Thu Jul 30 08:38:23.497605 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:16014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.497633 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:16014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.520753 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.dist"] [unique_id "amr_bwovdwhMhh9vBJDP-QAAADE"]
[Thu Jul 30 08:38:23.520870 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.dist"] [unique_id "amr_bwovdwhMhh9vBJDP-QAAADE"]
[Thu Jul 30 08:38:23.521034 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.dist"] [unique_id "amr_bwovdwhMhh9vBJDP-QAAADE"]
[Thu Jul 30 08:38:23.545031 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.local"] [unique_id "amr_bwovdwhMhh9vBJDP-gAAADE"]
[Thu Jul 30 08:38:23.545173 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.local"] [unique_id "amr_bwovdwhMhh9vBJDP-gAAADE"]
[Thu Jul 30 08:38:23.545356 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.local"] [unique_id "amr_bwovdwhMhh9vBJDP-gAAADE"]
[Thu Jul 30 08:38:23.548353 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.548379 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.583162 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.production"] [unique_id "amr_bwovdwhMhh9vBJDP-wAAADE"]
[Thu Jul 30 08:38:23.583333 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.production"] [unique_id "amr_bwovdwhMhh9vBJDP-wAAADE"]
[Thu Jul 30 08:38:23.583533 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.production"] [unique_id "amr_bwovdwhMhh9vBJDP-wAAADE"]
[Thu Jul 30 08:38:23.593287 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:16042] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/adm/php.ini"] [unique_id "amr_b6CuPSoE0uFFzriAQgAAABY"]
[Thu Jul 30 08:38:23.593602 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:16042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/adm/php.ini"] [unique_id "amr_b6CuPSoE0uFFzriAQgAAABY"]
[Thu Jul 30 08:38:23.593921 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:16042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.594023 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:16042] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/adm/php.ini"] [unique_id "amr_b6CuPSoE0uFFzriAQgAAABY"]
[Thu Jul 30 08:38:23.609380 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.staging"] [unique_id "amr_bwovdwhMhh9vBJDP_AAAADE"]
[Thu Jul 30 08:38:23.609499 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.staging"] [unique_id "amr_bwovdwhMhh9vBJDP_AAAADE"]
[Thu Jul 30 08:38:23.609675 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.17:31182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/beta/.env.staging"] [unique_id "amr_bwovdwhMhh9vBJDP_AAAADE"]
[Thu Jul 30 08:38:23.637362 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:16048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.637385 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:16048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.691592 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.691621 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.739607 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:16066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.739629 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:16066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.773885 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/php.ini"] [unique_id "amr_b9zyF_5LOsrbx7vNXAAAACU"]
[Thu Jul 30 08:38:23.774254 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/php.ini"] [unique_id "amr_b9zyF_5LOsrbx7vNXAAAACU"]
[Thu Jul 30 08:38:23.774372 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/administration/php.ini"] [unique_id "amr_b9zyF_5LOsrbx7vNXAAAACU"]
[Thu Jul 30 08:38:23.786158 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.786188 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.849571 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.849597 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.901666 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:16096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.901694 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:16096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.944767 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:16112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.944791 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:16112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.980495 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:23.980521 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.024497 2026] [authz_core:error] [pid 2423250:tid 2423250] [client 57.141.0.66:51724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:24.025124 2026] [authz_core:error] [pid 2423250:tid 2423250] [client 57.141.0.66:51724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:24.031599 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.031619 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.092648 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:16146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.092696 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:16146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.136614 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:16158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.136636 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:16158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.195761 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.195789 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.235491 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.235517 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.306668 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.306689 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.354416 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:16198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.354438 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:16198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.392766 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:16214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.392801 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:16214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.446507 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.446549 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.493869 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.493893 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.543679 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.543701 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.544613 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/beta/php.ini"] [unique_id "amr_cPY_hg2jdeEs7TiiAAAAAAM"]
[Thu Jul 30 08:38:24.544887 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/beta/php.ini"] [unique_id "amr_cPY_hg2jdeEs7TiiAAAAAAM"]
[Thu Jul 30 08:38:24.545082 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/beta/php.ini"] [unique_id "amr_cPY_hg2jdeEs7TiiAAAAAAM"]
[Thu Jul 30 08:38:24.579183 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16266] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin-app/.env"] [unique_id "amr_cG101zDj_5UEQFMW6AAAAAs"]
[Thu Jul 30 08:38:24.579332 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin-app/.env"] [unique_id "amr_cG101zDj_5UEQFMW6AAAAAs"]
[Thu Jul 30 08:38:24.579689 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.579802 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin-app/.env"] [unique_id "amr_cG101zDj_5UEQFMW6AAAAAs"]
[Thu Jul 30 08:38:24.639698 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:16282] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/.env.bak"] [unique_id "amr_cAovdwhMhh9vBJDQDAAAADE"]
[Thu Jul 30 08:38:24.639876 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:16282] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/.env.bak"] [unique_id "amr_cAovdwhMhh9vBJDQDAAAADE"]
[Thu Jul 30 08:38:24.640228 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:16282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.640350 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:16282] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/.env.bak"] [unique_id "amr_cAovdwhMhh9vBJDQDAAAADE"]
[Thu Jul 30 08:38:24.688200 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/.env.dev"] [unique_id "amr_cBpzOSLDAMoCSUlPWQAAABM"]
[Thu Jul 30 08:38:24.688409 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/.env.dev"] [unique_id "amr_cBpzOSLDAMoCSUlPWQAAABM"]
[Thu Jul 30 08:38:24.688755 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.688881 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/.env.dev"] [unique_id "amr_cBpzOSLDAMoCSUlPWQAAABM"]
[Thu Jul 30 08:38:24.743829 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16302] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/.env.dist"] [unique_id "amr_cBiCxDmIQaM3be7X8gAAACw"]
[Thu Jul 30 08:38:24.744031 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16302] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/.env.dist"] [unique_id "amr_cBiCxDmIQaM3be7X8gAAACw"]
[Thu Jul 30 08:38:24.744383 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.744540 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16302] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/.env.dist"] [unique_id "amr_cBiCxDmIQaM3be7X8gAAACw"]
[Thu Jul 30 08:38:24.793603 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/.env.local"] [unique_id "amr_cNVtxCBUSPwlMZFKwgAAABk"]
[Thu Jul 30 08:38:24.793799 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/.env.local"] [unique_id "amr_cNVtxCBUSPwlMZFKwgAAABk"]
[Thu Jul 30 08:38:24.794146 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.794273 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/.env.local"] [unique_id "amr_cNVtxCBUSPwlMZFKwgAAABk"]
[Thu Jul 30 08:38:24.855578 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:16316] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/.env.production"] [unique_id "amr_cOC233pHXOTf93SV2QAAADM"]
[Thu Jul 30 08:38:24.855725 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:16316] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/.env.production"] [unique_id "amr_cOC233pHXOTf93SV2QAAADM"]
[Thu Jul 30 08:38:24.856054 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:16316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.856199 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:16316] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/.env.production"] [unique_id "amr_cOC233pHXOTf93SV2QAAADM"]
[Thu Jul 30 08:38:24.903778 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16326] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/.env.staging"] [unique_id "amr_cOX70tTvaSC0sECKgQAAADI"]
[Thu Jul 30 08:38:24.903903 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/.env.staging"] [unique_id "amr_cOX70tTvaSC0sECKgQAAADI"]
[Thu Jul 30 08:38:24.904229 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.904344 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/.env.staging"] [unique_id "amr_cOX70tTvaSC0sECKgQAAADI"]
[Thu Jul 30 08:38:24.946511 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.946541 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:24.996797 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bgoldd/.env"] [unique_id "amr_cPY_hg2jdeEs7TiiEgAAAAM"]
[Thu Jul 30 08:38:24.996971 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bgoldd/.env"] [unique_id "amr_cPY_hg2jdeEs7TiiEgAAAAM"]
[Thu Jul 30 08:38:24.997180 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bgoldd/.env"] [unique_id "amr_cPY_hg2jdeEs7TiiEgAAAAM"]
[Thu Jul 30 08:38:25.001044 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16334] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/.git/config"] [unique_id "amr_cRpzOSLDAMoCSUlPWgAAABM"]
[Thu Jul 30 08:38:25.001223 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16334] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/.git/config"] [unique_id "amr_cRpzOSLDAMoCSUlPWgAAABM"]
[Thu Jul 30 08:38:25.001544 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.001674 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:16334] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/.git/config"] [unique_id "amr_cRpzOSLDAMoCSUlPWgAAABM"]
[Thu Jul 30 08:38:25.047718 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bitcoind/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiFAAAAAM"]
[Thu Jul 30 08:38:25.047845 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bitcoind/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiFAAAAAM"]
[Thu Jul 30 08:38:25.048013 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bitcoind/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiFAAAAAM"]
[Thu Jul 30 08:38:25.059598 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.059621 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:16348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.077802 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bkp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bkp/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiFQAAAAM"]
[Thu Jul 30 08:38:25.077914 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bkp/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiFQAAAAM"]
[Thu Jul 30 08:38:25.078105 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bkp/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiFQAAAAM"]
[Thu Jul 30 08:38:25.121644 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.121671 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.134992 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /bkp/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bkp/.git/config"] [unique_id "amr_cfY_hg2jdeEs7TiiFwAAAAM"]
[Thu Jul 30 08:38:25.135141 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bkp/.git/config"] [unique_id "amr_cfY_hg2jdeEs7TiiFwAAAAM"]
[Thu Jul 30 08:38:25.135311 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bkp/.git/config"] [unique_id "amr_cfY_hg2jdeEs7TiiFwAAAAM"]
[Thu Jul 30 08:38:25.164552 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env"] [unique_id "amr_cdzyF_5LOsrbx7vNcwAAACU"]
[Thu Jul 30 08:38:25.164705 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env"] [unique_id "amr_cdzyF_5LOsrbx7vNcwAAACU"]
[Thu Jul 30 08:38:25.164810 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env"] [unique_id "amr_cdzyF_5LOsrbx7vNcwAAACU"]
[Thu Jul 30 08:38:25.187734 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.bak"] [unique_id "amr_cdzyF_5LOsrbx7vNdAAAACU"]
[Thu Jul 30 08:38:25.187878 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.bak"] [unique_id "amr_cdzyF_5LOsrbx7vNdAAAACU"]
[Thu Jul 30 08:38:25.187980 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.bak"] [unique_id "amr_cdzyF_5LOsrbx7vNdAAAACU"]
[Thu Jul 30 08:38:25.191539 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.191574 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:16374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.214833 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.dev"] [unique_id "amr_cdzyF_5LOsrbx7vNdQAAACU"]
[Thu Jul 30 08:38:25.215007 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.dev"] [unique_id "amr_cdzyF_5LOsrbx7vNdQAAACU"]
[Thu Jul 30 08:38:25.215123 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.dev"] [unique_id "amr_cdzyF_5LOsrbx7vNdQAAACU"]
[Thu Jul 30 08:38:25.232557 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.232593 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.236628 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.dist"] [unique_id "amr_cdzyF_5LOsrbx7vNdgAAACU"]
[Thu Jul 30 08:38:25.236749 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.dist"] [unique_id "amr_cdzyF_5LOsrbx7vNdgAAACU"]
[Thu Jul 30 08:38:25.236850 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.dist"] [unique_id "amr_cdzyF_5LOsrbx7vNdgAAACU"]
[Thu Jul 30 08:38:25.259164 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.local"] [unique_id "amr_cdzyF_5LOsrbx7vNdwAAACU"]
[Thu Jul 30 08:38:25.259287 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.local"] [unique_id "amr_cdzyF_5LOsrbx7vNdwAAACU"]
[Thu Jul 30 08:38:25.259390 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/.env.local"] [unique_id "amr_cdzyF_5LOsrbx7vNdwAAACU"]
[Thu Jul 30 08:38:25.284833 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_cdVtxCBUSPwlMZFKxAAAABk"]
[Thu Jul 30 08:38:25.285138 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_cdVtxCBUSPwlMZFKxAAAABk"]
[Thu Jul 30 08:38:25.285461 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.285568 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_cdVtxCBUSPwlMZFKxAAAABk"]
[Thu Jul 30 08:38:25.286862 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_cfY_hg2jdeEs7TiiHAAAAAM"]
[Thu Jul 30 08:38:25.287149 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_cfY_hg2jdeEs7TiiHAAAAAM"]
[Thu Jul 30 08:38:25.287319 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_cfY_hg2jdeEs7TiiHAAAAAM"]
[Thu Jul 30 08:38:25.303989 2026] [security2:error] [pid 2423767:tid 2423767] [client 118.179.171.198:52306] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_ceX70tTvaSC0sECKgwAAADI"]
[Thu Jul 30 08:38:25.304039 2026] [security2:error] [pid 2423767:tid 2423767] [client 118.179.171.198:52306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_ceX70tTvaSC0sECKgwAAADI"]
[Thu Jul 30 08:38:25.304281 2026] [security2:error] [pid 2423767:tid 2423767] [client 118.179.171.198:52306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_ceX70tTvaSC0sECKgwAAADI"]
[Thu Jul 30 08:38:25.314984 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/bkp/api-config.ini"] [unique_id "amr_cfY_hg2jdeEs7TiiHQAAAAM"]
[Thu Jul 30 08:38:25.315303 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bkp/api-config.ini"] [unique_id "amr_cfY_hg2jdeEs7TiiHQAAAAM"]
[Thu Jul 30 08:38:25.315509 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bkp/api-config.ini"] [unique_id "amr_cfY_hg2jdeEs7TiiHQAAAAM"]
[Thu Jul 30 08:38:25.326790 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.326807 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.393701 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16408] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/admin/api-config.ini"] [unique_id "amr_cW101zDj_5UEQFMW7AAAAAs"]
[Thu Jul 30 08:38:25.394012 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/api-config.ini"] [unique_id "amr_cW101zDj_5UEQFMW7AAAAAs"]
[Thu Jul 30 08:38:25.394337 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.394446 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:16408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/api-config.ini"] [unique_id "amr_cW101zDj_5UEQFMW7AAAAAs"]
[Thu Jul 30 08:38:25.426466 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/bkp/laravel.log"] [unique_id "amr_cfY_hg2jdeEs7TiiIAAAAAM"]
[Thu Jul 30 08:38:25.426752 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bkp/laravel.log"] [unique_id "amr_cfY_hg2jdeEs7TiiIAAAAAM"]
[Thu Jul 30 08:38:25.426936 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bkp/laravel.log"] [unique_id "amr_cfY_hg2jdeEs7TiiIAAAAAM"]
[Thu Jul 30 08:38:25.452174 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.452192 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.490050 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/bkp/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiIwAAAAM"]
[Thu Jul 30 08:38:25.490266 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /bkp/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bkp/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiIwAAAAM"]
[Thu Jul 30 08:38:25.490390 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bkp/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiIwAAAAM"]
[Thu Jul 30 08:38:25.490587 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bkp/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiIwAAAAM"]
[Thu Jul 30 08:38:25.512433 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/blankon/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiJAAAAAM"]
[Thu Jul 30 08:38:25.512591 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blankon/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiJAAAAAM"]
[Thu Jul 30 08:38:25.512763 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blankon/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiJAAAAAM"]
[Thu Jul 30 08:38:25.513626 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.513648 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:16422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.542847 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/blob/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiJQAAAAM"]
[Thu Jul 30 08:38:25.542984 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blob/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiJQAAAAM"]
[Thu Jul 30 08:38:25.543207 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blob/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiJQAAAAM"]
[Thu Jul 30 08:38:25.601835 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/blog/.git/config"] [unique_id "amr_cfY_hg2jdeEs7TiiJwAAAAM"]
[Thu Jul 30 08:38:25.601991 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blog/.git/config"] [unique_id "amr_cfY_hg2jdeEs7TiiJwAAAAM"]
[Thu Jul 30 08:38:25.602208 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blog/.git/config"] [unique_id "amr_cfY_hg2jdeEs7TiiJwAAAAM"]
[Thu Jul 30 08:38:25.637844 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.637863 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.673532 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.673552 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.720754 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_cfY_hg2jdeEs7TiiLAAAAAM"]
[Thu Jul 30 08:38:25.721166 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_cfY_hg2jdeEs7TiiLAAAAAM"]
[Thu Jul 30 08:38:25.721426 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_cfY_hg2jdeEs7TiiLAAAAAM"]
[Thu Jul 30 08:38:25.724185 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:18600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.724211 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:18600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.754872 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/blog/api-config.ini"] [unique_id "amr_cfY_hg2jdeEs7TiiLQAAAAM"]
[Thu Jul 30 08:38:25.755649 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blog/api-config.ini"] [unique_id "amr_cfY_hg2jdeEs7TiiLQAAAAM"]
[Thu Jul 30 08:38:25.755853 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blog/api-config.ini"] [unique_id "amr_cfY_hg2jdeEs7TiiLQAAAAM"]
[Thu Jul 30 08:38:25.772248 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.772268 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.834800 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/blog/laravel.log"] [unique_id "amr_cfY_hg2jdeEs7TiiMAAAAAM"]
[Thu Jul 30 08:38:25.835171 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blog/laravel.log"] [unique_id "amr_cfY_hg2jdeEs7TiiMAAAAAM"]
[Thu Jul 30 08:38:25.835386 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blog/laravel.log"] [unique_id "amr_cfY_hg2jdeEs7TiiMAAAAAM"]
[Thu Jul 30 08:38:25.850146 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:3440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_cS8z5UsblH75uX6lSwAAABc"]
[Thu Jul 30 08:38:25.850273 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:3440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amr_cS8z5UsblH75uX6lSwAAABc"]
[Thu Jul 30 08:38:25.850454 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:3440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_cS8z5UsblH75uX6lSwAAABc"]
[Thu Jul 30 08:38:25.877352 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:18618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.877372 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:18618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.914684 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/blog/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiMwAAAAM"]
[Thu Jul 30 08:38:25.914896 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /blog/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/blog/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiMwAAAAM"]
[Thu Jul 30 08:38:25.915025 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blog/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiMwAAAAM"]
[Thu Jul 30 08:38:25.915235 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blog/web.config"] [unique_id "amr_cfY_hg2jdeEs7TiiMwAAAAM"]
[Thu Jul 30 08:38:25.936128 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/blue/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiNAAAAAM"]
[Thu Jul 30 08:38:25.936314 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/blue/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiNAAAAAM"]
[Thu Jul 30 08:38:25.936538 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/blue/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiNAAAAAM"]
[Thu Jul 30 08:38:25.940695 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:18624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.940717 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:18624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.975278 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bookchain-client/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiNQAAAAM"]
[Thu Jul 30 08:38:25.975449 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bookchain-client/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiNQAAAAM"]
[Thu Jul 30 08:38:25.975660 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bookchain-client/.env"] [unique_id "amr_cfY_hg2jdeEs7TiiNQAAAAM"]
[Thu Jul 30 08:38:25.987302 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:18638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:25.987323 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:18638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.006651 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bootstrap/.env"] [unique_id "amr_cvY_hg2jdeEs7TiiNgAAAAM"]
[Thu Jul 30 08:38:26.006830 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bootstrap/.env"] [unique_id "amr_cvY_hg2jdeEs7TiiNgAAAAM"]
[Thu Jul 30 08:38:26.007059 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bootstrap/.env"] [unique_id "amr_cvY_hg2jdeEs7TiiNgAAAAM"]
[Thu Jul 30 08:38:26.031178 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.031212 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.031250 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bot/.env"] [unique_id "amr_cvY_hg2jdeEs7TiiNwAAAAM"]
[Thu Jul 30 08:38:26.031432 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bot/.env"] [unique_id "amr_cvY_hg2jdeEs7TiiNwAAAAM"]
[Thu Jul 30 08:38:26.031659 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bot/.env"] [unique_id "amr_cvY_hg2jdeEs7TiiNwAAAAM"]
[Thu Jul 30 08:38:26.050665 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.bak"] [unique_id "amr_cvY_hg2jdeEs7TiiOAAAAAM"]
[Thu Jul 30 08:38:26.050831 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.bak"] [unique_id "amr_cvY_hg2jdeEs7TiiOAAAAAM"]
[Thu Jul 30 08:38:26.051043 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.bak"] [unique_id "amr_cvY_hg2jdeEs7TiiOAAAAAM"]
[Thu Jul 30 08:38:26.078955 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.078985 2026] [core:error] [pid 2423767:tid 2423767] [client 185.177.72.66:18664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.081089 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.dev"] [unique_id "amr_cvY_hg2jdeEs7TiiOQAAAAM"]
[Thu Jul 30 08:38:26.081259 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.dev"] [unique_id "amr_cvY_hg2jdeEs7TiiOQAAAAM"]
[Thu Jul 30 08:38:26.081481 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.dev"] [unique_id "amr_cvY_hg2jdeEs7TiiOQAAAAM"]
[Thu Jul 30 08:38:26.102018 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.dist"] [unique_id "amr_cvY_hg2jdeEs7TiiOgAAAAM"]
[Thu Jul 30 08:38:26.102230 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.dist"] [unique_id "amr_cvY_hg2jdeEs7TiiOgAAAAM"]
[Thu Jul 30 08:38:26.102456 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.dist"] [unique_id "amr_cvY_hg2jdeEs7TiiOgAAAAM"]
[Thu Jul 30 08:38:26.132970 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.local"] [unique_id "amr_cvY_hg2jdeEs7TiiOwAAAAM"]
[Thu Jul 30 08:38:26.133184 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.local"] [unique_id "amr_cvY_hg2jdeEs7TiiOwAAAAM"]
[Thu Jul 30 08:38:26.133402 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.17:31194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bot/.env.local"] [unique_id "amr_cvY_hg2jdeEs7TiiOwAAAAM"]
[Thu Jul 30 08:38:26.634618 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:18674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.634649 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:18674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.677688 2026] [ssl:error] [pid 2411106:tid 2411106] (EAI 2)Name or service not known: [client 144.76.19.72:35480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:26.677720 2026] [ssl:error] [pid 2411106:tid 2411106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:26.706224 2026] [core:error] [pid 2423370:tid 2423370] [client 185.177.72.66:18684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.706247 2026] [core:error] [pid 2423370:tid 2423370] [client 185.177.72.66:18684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.748948 2026] [ssl:error] [pid 2426737:tid 2426737] (EAI 2)Name or service not known: [client 144.76.19.72:35488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:26.748989 2026] [ssl:error] [pid 2426737:tid 2426737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:26.756793 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.756831 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.807967 2026] [core:error] [pid 2426737:tid 2426737] [client 185.177.72.66:18698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.807987 2026] [core:error] [pid 2426737:tid 2426737] [client 185.177.72.66:18698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.985331 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:18702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:26.985353 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:18702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.098772 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/bot/php.ini"] [unique_id "amr_c-X70tTvaSC0sECKmgAAADI"]
[Thu Jul 30 08:38:27.099062 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bot/php.ini"] [unique_id "amr_c-X70tTvaSC0sECKmgAAADI"]
[Thu Jul 30 08:38:27.099258 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bot/php.ini"] [unique_id "amr_c-X70tTvaSC0sECKmgAAADI"]
[Thu Jul 30 08:38:27.172581 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:3466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.2"] [unique_id "amr_cyqRkGfpP6jUcmmacAAAAAg"]
[Thu Jul 30 08:38:27.172800 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:3466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.2"] [unique_id "amr_cyqRkGfpP6jUcmmacAAAAAg"]
[Thu Jul 30 08:38:27.173007 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:3466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_cyqRkGfpP6jUcmmacAAAAAg"]
[Thu Jul 30 08:38:27.192709 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.192734 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.246464 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.246511 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.295261 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.295286 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.341766 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.341784 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.391488 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:18748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.391516 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:18748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.435658 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:18750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.435681 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:18750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.494439 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:3476] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws_access_keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.aws_access_keys"] [unique_id "amr_c_d8VTPP_oF0WGs_HQAAAAU"]
[Thu Jul 30 08:38:27.494619 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:3476] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.aws_access_keys"] [unique_id "amr_c_d8VTPP_oF0WGs_HQAAAAU"]
[Thu Jul 30 08:38:27.494821 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:3476] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_c_d8VTPP_oF0WGs_HQAAAAU"]
[Thu Jul 30 08:38:27.527137 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/php.ini"] [unique_id "amr_c9zyF_5LOsrbx7vNmgAAACU"]
[Thu Jul 30 08:38:27.527545 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/php.ini"] [unique_id "amr_c9zyF_5LOsrbx7vNmgAAACU"]
[Thu Jul 30 08:38:27.527681 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/admins/php.ini"] [unique_id "amr_c9zyF_5LOsrbx7vNmgAAACU"]
[Thu Jul 30 08:38:27.528431 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.528454 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.529420 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_c-X70tTvaSC0sECKrQAAADI"]
[Thu Jul 30 08:38:27.529555 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_c-X70tTvaSC0sECKrQAAADI"]
[Thu Jul 30 08:38:27.529736 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_c-X70tTvaSC0sECKrQAAADI"]
[Thu Jul 30 08:38:27.548545 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_c-X70tTvaSC0sECKrgAAADI"]
[Thu Jul 30 08:38:27.548717 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_c-X70tTvaSC0sECKrgAAADI"]
[Thu Jul 30 08:38:27.548916 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_c-X70tTvaSC0sECKrgAAADI"]
[Thu Jul 30 08:38:27.565970 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_c-X70tTvaSC0sECKrwAAADI"]
[Thu Jul 30 08:38:27.566211 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_c-X70tTvaSC0sECKrwAAADI"]
[Thu Jul 30 08:38:27.566447 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_c-X70tTvaSC0sECKrwAAADI"]
[Thu Jul 30 08:38:27.567227 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:18768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.567247 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:18768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.590045 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/bucoffea/.env"] [unique_id "amr_c-X70tTvaSC0sECKsAAAADI"]
[Thu Jul 30 08:38:27.590271 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/bucoffea/.env"] [unique_id "amr_c-X70tTvaSC0sECKsAAAADI"]
[Thu Jul 30 08:38:27.590503 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/bucoffea/.env"] [unique_id "amr_c-X70tTvaSC0sECKsAAAADI"]
[Thu Jul 30 08:38:27.604395 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.604418 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.629229 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/build.log"] [unique_id "amr_c-X70tTvaSC0sECKsgAAADI"]
[Thu Jul 30 08:38:27.629522 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/build.log"] [unique_id "amr_c-X70tTvaSC0sECKsgAAADI"]
[Thu Jul 30 08:38:27.629732 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/build.log"] [unique_id "amr_c-X70tTvaSC0sECKsgAAADI"]
[Thu Jul 30 08:38:27.642417 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.642439 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.669977 2026] [access_compat:error] [pid 2426737:tid 2426737] [client 106.215.157.145:12959] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:27.681487 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.681515 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.727762 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:18794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.727787 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:18794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.764186 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.764213 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.784584 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/build/.env"] [unique_id "amr_c-X70tTvaSC0sECKtwAAADI"]
[Thu Jul 30 08:38:27.784800 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/build/.env"] [unique_id "amr_c-X70tTvaSC0sECKtwAAADI"]
[Thu Jul 30 08:38:27.785054 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/build/.env"] [unique_id "amr_c-X70tTvaSC0sECKtwAAADI"]
[Thu Jul 30 08:38:27.787689 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:3484] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.development.local"] [unique_id "amr_c-p682fDSrpTRC3Z-gAAACM"]
[Thu Jul 30 08:38:27.787880 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:3484] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.development.local"] [unique_id "amr_c-p682fDSrpTRC3Z-gAAACM"]
[Thu Jul 30 08:38:27.788060 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:3484] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_c-p682fDSrpTRC3Z-gAAACM"]
[Thu Jul 30 08:38:27.806570 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.806596 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.860202 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:18808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.860225 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:18808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.920330 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.920355 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.973374 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.973396 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:27.975602 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cache/.env"] [unique_id "amr_c-X70tTvaSC0sECKvwAAADI"]
[Thu Jul 30 08:38:27.975798 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cache/.env"] [unique_id "amr_c-X70tTvaSC0sECKvwAAADI"]
[Thu Jul 30 08:38:27.976019 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cache/.env"] [unique_id "amr_c-X70tTvaSC0sECKvwAAADI"]
[Thu Jul 30 08:38:28.015411 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.015444 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.041094 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cache/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cache/.git/config"] [unique_id "amr_dOX70tTvaSC0sECKwQAAADI"]
[Thu Jul 30 08:38:28.041246 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cache/.git/config"] [unique_id "amr_dOX70tTvaSC0sECKwQAAADI"]
[Thu Jul 30 08:38:28.041451 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cache/.git/config"] [unique_id "amr_dOX70tTvaSC0sECKwQAAADI"]
[Thu Jul 30 08:38:28.069683 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:3486] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.development.sample"] [unique_id "amr_dCqRkGfpP6jUcmmadQAAAAg"]
[Thu Jul 30 08:38:28.069825 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:3486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.development.sample"] [unique_id "amr_dCqRkGfpP6jUcmmadQAAAAg"]
[Thu Jul 30 08:38:28.070006 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:3486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dCqRkGfpP6jUcmmadQAAAAg"]
[Thu Jul 30 08:38:28.070120 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.070138 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:18840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.120010 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18850] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/admin/laravel.log"] [unique_id "amr_dOWvknE5emN3ObPccQAAACc"]
[Thu Jul 30 08:38:28.120324 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18850] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/laravel.log"] [unique_id "amr_dOWvknE5emN3ObPccQAAACc"]
[Thu Jul 30 08:38:28.120644 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.120755 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18850] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/laravel.log"] [unique_id "amr_dOWvknE5emN3ObPccQAAACc"]
[Thu Jul 30 08:38:28.164886 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_dOX70tTvaSC0sECKxQAAADI"]
[Thu Jul 30 08:38:28.165277 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_dOX70tTvaSC0sECKxQAAADI"]
[Thu Jul 30 08:38:28.165487 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_dOX70tTvaSC0sECKxQAAADI"]
[Thu Jul 30 08:38:28.165707 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:18858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.165759 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:18858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.182519 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/cache/api-config.ini"] [unique_id "amr_dOX70tTvaSC0sECKxgAAADI"]
[Thu Jul 30 08:38:28.182894 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cache/api-config.ini"] [unique_id "amr_dOX70tTvaSC0sECKxgAAADI"]
[Thu Jul 30 08:38:28.183118 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cache/api-config.ini"] [unique_id "amr_dOX70tTvaSC0sECKxgAAADI"]
[Thu Jul 30 08:38:28.217267 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.217299 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.242671 2026] [authz_core:error] [pid 2426738:tid 2426738] [client 57.141.0.30:37382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:28.243353 2026] [authz_core:error] [pid 2426738:tid 2426738] [client 57.141.0.30:37382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:28.264334 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.264355 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.289798 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/cache/laravel.log"] [unique_id "amr_dOX70tTvaSC0sECKyQAAADI"]
[Thu Jul 30 08:38:28.290161 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cache/laravel.log"] [unique_id "amr_dOX70tTvaSC0sECKyQAAADI"]
[Thu Jul 30 08:38:28.290375 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cache/laravel.log"] [unique_id "amr_dOX70tTvaSC0sECKyQAAADI"]
[Thu Jul 30 08:38:28.311246 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:18880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.311270 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:18880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.351518 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:18892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.351544 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:18892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.353960 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/cache/web.config"] [unique_id "amr_dOX70tTvaSC0sECKzAAAADI"]
[Thu Jul 30 08:38:28.354179 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /cache/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cache/web.config"] [unique_id "amr_dOX70tTvaSC0sECKzAAAADI"]
[Thu Jul 30 08:38:28.354287 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cache/web.config"] [unique_id "amr_dOX70tTvaSC0sECKzAAAADI"]
[Thu Jul 30 08:38:28.354455 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cache/web.config"] [unique_id "amr_dOX70tTvaSC0sECKzAAAADI"]
[Thu Jul 30 08:38:28.366200 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:3500] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.docker.dev"] [unique_id "amr_dPdbqxY4ll4IV_vwlQAAACE"]
[Thu Jul 30 08:38:28.366343 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:3500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.docker.dev"] [unique_id "amr_dPdbqxY4ll4IV_vwlQAAACE"]
[Thu Jul 30 08:38:28.366570 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:3500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dPdbqxY4ll4IV_vwlQAAACE"]
[Thu Jul 30 08:38:28.388142 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cardea/backend/.env"] [unique_id "amr_dOX70tTvaSC0sECKzQAAADI"]
[Thu Jul 30 08:38:28.388263 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cardea/backend/.env"] [unique_id "amr_dOX70tTvaSC0sECKzQAAADI"]
[Thu Jul 30 08:38:28.388431 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cardea/backend/.env"] [unique_id "amr_dOX70tTvaSC0sECKzQAAADI"]
[Thu Jul 30 08:38:28.393495 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:18898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.393510 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:18898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.409222 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cdw-backend/.env"] [unique_id "amr_dOX70tTvaSC0sECKzgAAADI"]
[Thu Jul 30 08:38:28.409345 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cdw-backend/.env"] [unique_id "amr_dOX70tTvaSC0sECKzgAAADI"]
[Thu Jul 30 08:38:28.409522 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cdw-backend/.env"] [unique_id "amr_dOX70tTvaSC0sECKzgAAADI"]
[Thu Jul 30 08:38:28.426715 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch2-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECKzwAAADI"]
[Thu Jul 30 08:38:28.426830 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch2-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECKzwAAADI"]
[Thu Jul 30 08:38:28.426992 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch2-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECKzwAAADI"]
[Thu Jul 30 08:38:28.437293 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18912] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/admin/php.ini"] [unique_id "amr_dCqRkGfpP6jUcmmadwAAAAg"]
[Thu Jul 30 08:38:28.437598 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/php.ini"] [unique_id "amr_dCqRkGfpP6jUcmmadwAAAAg"]
[Thu Jul 30 08:38:28.437938 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.438048 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/php.ini"] [unique_id "amr_dCqRkGfpP6jUcmmadwAAAAg"]
[Thu Jul 30 08:38:28.443655 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch6-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0AAAADI"]
[Thu Jul 30 08:38:28.443778 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch6-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0AAAADI"]
[Thu Jul 30 08:38:28.444094 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch6-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0AAAADI"]
[Thu Jul 30 08:38:28.478041 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.478081 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:18926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.479106 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0QAAADI"]
[Thu Jul 30 08:38:28.479238 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0QAAADI"]
[Thu Jul 30 08:38:28.479410 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0QAAADI"]
[Thu Jul 30 08:38:28.495655 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch7-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0gAAADI"]
[Thu Jul 30 08:38:28.495775 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch7-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0gAAADI"]
[Thu Jul 30 08:38:28.495941 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch7-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0gAAADI"]
[Thu Jul 30 08:38:28.513260 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0wAAADI"]
[Thu Jul 30 08:38:28.513384 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0wAAADI"]
[Thu Jul 30 08:38:28.513551 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK0wAAADI"]
[Thu Jul 30 08:38:28.518733 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.518756 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.534507 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch8-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1AAAADI"]
[Thu Jul 30 08:38:28.534628 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch8-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1AAAADI"]
[Thu Jul 30 08:38:28.534786 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch8-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1AAAADI"]
[Thu Jul 30 08:38:28.561918 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:18940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.561941 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:18940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.587574 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1QAAADI"]
[Thu Jul 30 08:38:28.587701 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1QAAADI"]
[Thu Jul 30 08:38:28.587869 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1QAAADI"]
[Thu Jul 30 08:38:28.602969 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:18952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.602992 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:18952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.611773 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1gAAADI"]
[Thu Jul 30 08:38:28.611908 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1gAAADI"]
[Thu Jul 30 08:38:28.612092 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_dOX70tTvaSC0sECK1gAAADI"]
[Thu Jul 30 08:38:28.629267 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/challenge/.env"] [unique_id "amr_dOX70tTvaSC0sECK1wAAADI"]
[Thu Jul 30 08:38:28.629384 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/challenge/.env"] [unique_id "amr_dOX70tTvaSC0sECK1wAAADI"]
[Thu Jul 30 08:38:28.629555 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/challenge/.env"] [unique_id "amr_dOX70tTvaSC0sECK1wAAADI"]
[Thu Jul 30 08:38:28.648501 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/challenges/.env"] [unique_id "amr_dOX70tTvaSC0sECK2AAAADI"]
[Thu Jul 30 08:38:28.648637 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/challenges/.env"] [unique_id "amr_dOX70tTvaSC0sECK2AAAADI"]
[Thu Jul 30 08:38:28.648805 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/challenges/.env"] [unique_id "amr_dOX70tTvaSC0sECK2AAAADI"]
[Thu Jul 30 08:38:28.657277 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.657297 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:18964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.657319 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:3512] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.live"] [unique_id "amr_dPdbqxY4ll4IV_vwlgAAACE"]
[Thu Jul 30 08:38:28.657439 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:3512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.live"] [unique_id "amr_dPdbqxY4ll4IV_vwlgAAACE"]
[Thu Jul 30 08:38:28.657613 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:3512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dPdbqxY4ll4IV_vwlgAAACE"]
[Thu Jul 30 08:38:28.703376 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.703418 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:18980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.713866 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/charts/liveObjects/.env"] [unique_id "amr_dOX70tTvaSC0sECK2gAAADI"]
[Thu Jul 30 08:38:28.714000 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/charts/liveObjects/.env"] [unique_id "amr_dOX70tTvaSC0sECK2gAAADI"]
[Thu Jul 30 08:38:28.714221 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/charts/liveObjects/.env"] [unique_id "amr_dOX70tTvaSC0sECK2gAAADI"]
[Thu Jul 30 08:38:28.732630 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/chat-client/.env"] [unique_id "amr_dOX70tTvaSC0sECK2wAAADI"]
[Thu Jul 30 08:38:28.732770 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/chat-client/.env"] [unique_id "amr_dOX70tTvaSC0sECK2wAAADI"]
[Thu Jul 30 08:38:28.732972 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/chat-client/.env"] [unique_id "amr_dOX70tTvaSC0sECK2wAAADI"]
[Thu Jul 30 08:38:28.756297 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:18988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.756321 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:18988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.771583 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/agora/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrQAAACU"]
[Thu Jul 30 08:38:28.771737 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/agora/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrQAAACU"]
[Thu Jul 30 08:38:28.771853 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/agora/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrQAAACU"]
[Thu Jul 30 08:38:28.795818 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/alpha/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrgAAACU"]
[Thu Jul 30 08:38:28.795977 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/alpha/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrgAAACU"]
[Thu Jul 30 08:38:28.796127 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/alpha/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrgAAACU"]
[Thu Jul 30 08:38:28.796318 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:18992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.796339 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:18992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.797035 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/chiminey/.env"] [unique_id "amr_dOX70tTvaSC0sECK3gAAADI"]
[Thu Jul 30 08:38:28.797173 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/chiminey/.env"] [unique_id "amr_dOX70tTvaSC0sECK3gAAADI"]
[Thu Jul 30 08:38:28.797364 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/chiminey/.env"] [unique_id "amr_dOX70tTvaSC0sECK3gAAADI"]
[Thu Jul 30 08:38:28.824510 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client-app/.env"] [unique_id "amr_dOX70tTvaSC0sECK3wAAADI"]
[Thu Jul 30 08:38:28.824691 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client-app/.env"] [unique_id "amr_dOX70tTvaSC0sECK3wAAADI"]
[Thu Jul 30 08:38:28.824891 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client-app/.env"] [unique_id "amr_dOX70tTvaSC0sECK3wAAADI"]
[Thu Jul 30 08:38:28.832495 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/anaconda/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrwAAACU"]
[Thu Jul 30 08:38:28.832636 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/anaconda/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrwAAACU"]
[Thu Jul 30 08:38:28.832743 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/anaconda/.env"] [unique_id "amr_dNzyF_5LOsrbx7vNrwAAACU"]
[Thu Jul 30 08:38:28.836809 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:18994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.836829 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:18994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.842157 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/.env.bak"] [unique_id "amr_dOX70tTvaSC0sECK4AAAADI"]
[Thu Jul 30 08:38:28.842906 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/.env.bak"] [unique_id "amr_dOX70tTvaSC0sECK4AAAADI"]
[Thu Jul 30 08:38:28.843120 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/.env.bak"] [unique_id "amr_dOX70tTvaSC0sECK4AAAADI"]
[Thu Jul 30 08:38:28.855968 2026] [lsapi:warn] [pid 2411316:tid 2411316] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:38:28.867836 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/.env.dev"] [unique_id "amr_dOX70tTvaSC0sECK4QAAADI"]
[Thu Jul 30 08:38:28.867974 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/.env.dev"] [unique_id "amr_dOX70tTvaSC0sECK4QAAADI"]
[Thu Jul 30 08:38:28.868186 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/.env.dev"] [unique_id "amr_dOX70tTvaSC0sECK4QAAADI"]
[Thu Jul 30 08:38:28.875189 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:18998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.875209 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:18998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.891940 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/.env.dist"] [unique_id "amr_dOX70tTvaSC0sECK4gAAADI"]
[Thu Jul 30 08:38:28.892078 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/.env.dist"] [unique_id "amr_dOX70tTvaSC0sECK4gAAADI"]
[Thu Jul 30 08:38:28.892265 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/.env.dist"] [unique_id "amr_dOX70tTvaSC0sECK4gAAADI"]
[Thu Jul 30 08:38:28.915125 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/.env.local"] [unique_id "amr_dOX70tTvaSC0sECK4wAAADI"]
[Thu Jul 30 08:38:28.915256 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/.env.local"] [unique_id "amr_dOX70tTvaSC0sECK4wAAADI"]
[Thu Jul 30 08:38:28.915463 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/.env.local"] [unique_id "amr_dOX70tTvaSC0sECK4wAAADI"]
[Thu Jul 30 08:38:28.925232 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:19012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.925252 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:19012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.931924 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/.env.production"] [unique_id "amr_dOX70tTvaSC0sECK5AAAADI"]
[Thu Jul 30 08:38:28.932050 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/.env.production"] [unique_id "amr_dOX70tTvaSC0sECK5AAAADI"]
[Thu Jul 30 08:38:28.932257 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/.env.production"] [unique_id "amr_dOX70tTvaSC0sECK5AAAADI"]
[Thu Jul 30 08:38:28.945027 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.66:3518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailer"] [unique_id "amr_dEaECszrFSEr2smjtAAAADU"]
[Thu Jul 30 08:38:28.945192 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.66:3518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailer"] [unique_id "amr_dEaECszrFSEr2smjtAAAADU"]
[Thu Jul 30 08:38:28.945395 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.66:3518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dEaECszrFSEr2smjtAAAADU"]
[Thu Jul 30 08:38:28.956241 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/.env.staging"] [unique_id "amr_dOX70tTvaSC0sECK5QAAADI"]
[Thu Jul 30 08:38:28.956407 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/.env.staging"] [unique_id "amr_dOX70tTvaSC0sECK5QAAADI"]
[Thu Jul 30 08:38:28.956614 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/.env.staging"] [unique_id "amr_dOX70tTvaSC0sECK5QAAADI"]
[Thu Jul 30 08:38:28.964531 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:19018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.965026 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:19018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:28.993642 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /client/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/.git/config"] [unique_id "amr_dOX70tTvaSC0sECK5wAAADI"]
[Thu Jul 30 08:38:28.993786 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/.git/config"] [unique_id "amr_dOX70tTvaSC0sECK5wAAADI"]
[Thu Jul 30 08:38:28.993963 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/.git/config"] [unique_id "amr_dOX70tTvaSC0sECK5wAAADI"]
[Thu Jul 30 08:38:29.004140 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.004159 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.047284 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.047306 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.073441 2026] [core:error] [pid 2418302:tid 2418302] [client 66.249.64.172:45888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.073460 2026] [core:error] [pid 2418302:tid 2418302] [client 66.249.64.172:45888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.091172 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:19048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.091193 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:19048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.105544 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_deX70tTvaSC0sECK7AAAADI"]
[Thu Jul 30 08:38:29.105836 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_deX70tTvaSC0sECK7AAAADI"]
[Thu Jul 30 08:38:29.106018 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_deX70tTvaSC0sECK7AAAADI"]
[Thu Jul 30 08:38:29.136338 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.136361 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.156640 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/client/api-config.ini"] [unique_id "amr_deX70tTvaSC0sECK7gAAADI"]
[Thu Jul 30 08:38:29.156927 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/api-config.ini"] [unique_id "amr_deX70tTvaSC0sECK7gAAADI"]
[Thu Jul 30 08:38:29.157146 2026] [security2:error] [pid 2423767:tid 2423767] [client 185.177.72.17:29942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/api-config.ini"] [unique_id "amr_deX70tTvaSC0sECK7gAAADI"]
[Thu Jul 30 08:38:29.176892 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:19064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.176915 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:19064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.186522 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api-config.ini"] [unique_id "amr_ddzyF_5LOsrbx7vNtQAAACU"]
[Thu Jul 30 08:38:29.186881 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api-config.ini"] [unique_id "amr_ddzyF_5LOsrbx7vNtQAAACU"]
[Thu Jul 30 08:38:29.187002 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api-config.ini"] [unique_id "amr_ddzyF_5LOsrbx7vNtQAAACU"]
[Thu Jul 30 08:38:29.206334 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.bak"] [unique_id "amr_ddzyF_5LOsrbx7vNtgAAACU"]
[Thu Jul 30 08:38:29.206484 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.bak"] [unique_id "amr_ddzyF_5LOsrbx7vNtgAAACU"]
[Thu Jul 30 08:38:29.206599 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.bak"] [unique_id "amr_ddzyF_5LOsrbx7vNtgAAACU"]
[Thu Jul 30 08:38:29.221607 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.221631 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.225721 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:3522] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_dsn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailer_dsn"] [unique_id "amr_ddGWH5xbt04huX6WIQAAABA"]
[Thu Jul 30 08:38:29.225847 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:3522] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailer_dsn"] [unique_id "amr_ddGWH5xbt04huX6WIQAAABA"]
[Thu Jul 30 08:38:29.226024 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:3522] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_ddGWH5xbt04huX6WIQAAABA"]
[Thu Jul 30 08:38:29.226726 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.dev"] [unique_id "amr_ddzyF_5LOsrbx7vNtwAAACU"]
[Thu Jul 30 08:38:29.226841 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.dev"] [unique_id "amr_ddzyF_5LOsrbx7vNtwAAACU"]
[Thu Jul 30 08:38:29.226938 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.dev"] [unique_id "amr_ddzyF_5LOsrbx7vNtwAAACU"]
[Thu Jul 30 08:38:29.258550 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.dist"] [unique_id "amr_ddzyF_5LOsrbx7vNuAAAACU"]
[Thu Jul 30 08:38:29.258694 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.dist"] [unique_id "amr_ddzyF_5LOsrbx7vNuAAAACU"]
[Thu Jul 30 08:38:29.258793 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.dist"] [unique_id "amr_ddzyF_5LOsrbx7vNuAAAACU"]
[Thu Jul 30 08:38:29.262637 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19076] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/admin/web.config"] [unique_id "amr_dT-G1VCKQzXMG6UbQwAAACg"]
[Thu Jul 30 08:38:29.262861 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19076] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /admin/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admin/web.config"] [unique_id "amr_dT-G1VCKQzXMG6UbQwAAACg"]
[Thu Jul 30 08:38:29.262973 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19076] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admin/web.config"] [unique_id "amr_dT-G1VCKQzXMG6UbQwAAACg"]
[Thu Jul 30 08:38:29.263291 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.266385 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19076] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admin/web.config"] [unique_id "amr_dT-G1VCKQzXMG6UbQwAAACg"]
[Thu Jul 30 08:38:29.295917 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.test"] [unique_id "amr_ddzyF_5LOsrbx7vNuQAAACU"]
[Thu Jul 30 08:38:29.296091 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.test"] [unique_id "amr_ddzyF_5LOsrbx7vNuQAAACU"]
[Thu Jul 30 08:38:29.296196 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.17:31908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/.env.test"] [unique_id "amr_ddzyF_5LOsrbx7vNuQAAACU"]
[Thu Jul 30 08:38:29.318136 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.318161 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.350205 2026] [authz_core:error] [pid 2424224:tid 2424224] [client 57.141.0.18:55024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:29.350891 2026] [authz_core:error] [pid 2424224:tid 2424224] [client 57.141.0.18:55024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:29.364013 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.364032 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.405145 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:19114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.405162 2026] [core:error] [pid 2417171:tid 2417171] [client 185.177.72.66:19114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.443882 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19130] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/adminer/.env"] [unique_id "amr_dUaECszrFSEr2smjtgAAADU"]
[Thu Jul 30 08:38:29.444015 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/adminer/.env"] [unique_id "amr_dUaECszrFSEr2smjtgAAADU"]
[Thu Jul 30 08:38:29.444337 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.444442 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/adminer/.env"] [unique_id "amr_dUaECszrFSEr2smjtgAAADU"]
[Thu Jul 30 08:38:29.480873 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19138] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/administration/.env"] [unique_id "amr_dT-G1VCKQzXMG6UbRAAAACg"]
[Thu Jul 30 08:38:29.480992 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/administration/.env"] [unique_id "amr_dT-G1VCKQzXMG6UbRAAAACg"]
[Thu Jul 30 08:38:29.481308 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.481407 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/administration/.env"] [unique_id "amr_dT-G1VCKQzXMG6UbRAAAACg"]
[Thu Jul 30 08:38:29.498101 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:3536] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_url"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailer_url"] [unique_id "amr_ddGWH5xbt04huX6WIgAAABA"]
[Thu Jul 30 08:38:29.498230 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:3536] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailer_url"] [unique_id "amr_ddGWH5xbt04huX6WIgAAABA"]
[Thu Jul 30 08:38:29.498398 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:3536] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_ddGWH5xbt04huX6WIgAAABA"]
[Thu Jul 30 08:38:29.528333 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19146] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/administration/.env.bak"] [unique_id "amr_dSqRkGfpP6jUcmmafAAAAAg"]
[Thu Jul 30 08:38:29.528463 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/administration/.env.bak"] [unique_id "amr_dSqRkGfpP6jUcmmafAAAAAg"]
[Thu Jul 30 08:38:29.528808 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.528926 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/administration/.env.bak"] [unique_id "amr_dSqRkGfpP6jUcmmafAAAAAg"]
[Thu Jul 30 08:38:29.575974 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/administration/.env.dev"] [unique_id "amr_dep682fDSrpTRC3aAAAAACM"]
[Thu Jul 30 08:38:29.576119 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/administration/.env.dev"] [unique_id "amr_dep682fDSrpTRC3aAAAAACM"]
[Thu Jul 30 08:38:29.576454 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.576571 2026] [security2:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/administration/.env.dev"] [unique_id "amr_dep682fDSrpTRC3aAAAAACM"]
[Thu Jul 30 08:38:29.613859 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/administration/.env.dist"] [unique_id "amr_dUQvuHxPljPWrXhqIAAAAC4"]
[Thu Jul 30 08:38:29.613985 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/administration/.env.dist"] [unique_id "amr_dUQvuHxPljPWrXhqIAAAAC4"]
[Thu Jul 30 08:38:29.614401 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.614513 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/administration/.env.dist"] [unique_id "amr_dUQvuHxPljPWrXhqIAAAAC4"]
[Thu Jul 30 08:38:29.656960 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:19174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/administration/.env.local"] [unique_id "amr_ddzyF_5LOsrbx7vNvAAAACU"]
[Thu Jul 30 08:38:29.657169 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:19174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/administration/.env.local"] [unique_id "amr_ddzyF_5LOsrbx7vNvAAAACU"]
[Thu Jul 30 08:38:29.657518 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:19174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.657649 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:19174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/administration/.env.local"] [unique_id "amr_ddzyF_5LOsrbx7vNvAAAACU"]
[Thu Jul 30 08:38:29.695630 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.695652 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.736158 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.736197 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.775875 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:3540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailgun"] [unique_id "amr_dfc2RhBRMR9CcGYhQgAAABE"]
[Thu Jul 30 08:38:29.775997 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:3540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailgun"] [unique_id "amr_dfc2RhBRMR9CcGYhQgAAABE"]
[Thu Jul 30 08:38:29.776182 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:3540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dfc2RhBRMR9CcGYhQgAAABE"]
[Thu Jul 30 08:38:29.777533 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.777557 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.804747 2026] [ssl:error] [pid 2423766:tid 2423766] (EAI 2)Name or service not known: [client 144.76.19.72:36734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:29.804768 2026] [ssl:error] [pid 2423766:tid 2423766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:29.817757 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:19192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.817784 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:19192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.854145 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:19196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.854166 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:19196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.861826 2026] [ssl:error] [pid 2420087:tid 2420087] (EAI 2)Name or service not known: [client 144.76.19.72:36740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:29.861856 2026] [ssl:error] [pid 2420087:tid 2420087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:29.896126 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.896161 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.939596 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.939625 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.982241 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:19208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:29.982265 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:19208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.027367 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.027392 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.030211 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/client/laravel.log"] [unique_id "amr_dggGztaJsd9zSr7IBgAAAB8"]
[Thu Jul 30 08:38:30.030488 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/laravel.log"] [unique_id "amr_dggGztaJsd9zSr7IBgAAAB8"]
[Thu Jul 30 08:38:30.030662 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/laravel.log"] [unique_id "amr_dggGztaJsd9zSr7IBgAAAB8"]
[Thu Jul 30 08:38:30.048746 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:3542] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailjet"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailjet"] [unique_id "amr_dkQvuHxPljPWrXhqIQAAAC4"]
[Thu Jul 30 08:38:30.048888 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:3542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mailjet"] [unique_id "amr_dkQvuHxPljPWrXhqIQAAAC4"]
[Thu Jul 30 08:38:30.049092 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:3542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dkQvuHxPljPWrXhqIQAAAC4"]
[Thu Jul 30 08:38:30.068965 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.068986 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.110090 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.110113 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.156905 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.156927 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.172745 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_dggGztaJsd9zSr7ICgAAAB8"]
[Thu Jul 30 08:38:30.172883 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_dggGztaJsd9zSr7ICgAAAB8"]
[Thu Jul 30 08:38:30.173060 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_dggGztaJsd9zSr7ICgAAAB8"]
[Thu Jul 30 08:38:30.196307 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:19250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.196335 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:19250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.222770 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/client/php.ini"] [unique_id "amr_dggGztaJsd9zSr7IDAAAAB8"]
[Thu Jul 30 08:38:30.223048 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/php.ini"] [unique_id "amr_dggGztaJsd9zSr7IDAAAAB8"]
[Thu Jul 30 08:38:30.223229 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/php.ini"] [unique_id "amr_dggGztaJsd9zSr7IDAAAAB8"]
[Thu Jul 30 08:38:30.233101 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.233123 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.279135 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:19272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.279155 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:19272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.312482 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3556] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mandrill"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mandrill"] [unique_id "amr_dqCuPSoE0uFFzriATgAAABY"]
[Thu Jul 30 08:38:30.312701 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3556] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.mandrill"] [unique_id "amr_dqCuPSoE0uFFzriATgAAABY"]
[Thu Jul 30 08:38:30.312918 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3556] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dqCuPSoE0uFFzriATgAAABY"]
[Thu Jul 30 08:38:30.320388 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.320409 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.365433 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:19294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.365454 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:19294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.408000 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.408022 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.444357 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.444377 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.493213 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.493249 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.534647 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.534669 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.573373 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:19332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.573395 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:19332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.579207 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:3564] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.prod.local"] [unique_id "amr_dvc2RhBRMR9CcGYhRAAAABE"]
[Thu Jul 30 08:38:30.579386 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:3564] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.prod.local"] [unique_id "amr_dvc2RhBRMR9CcGYhRAAAABE"]
[Thu Jul 30 08:38:30.579597 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:3564] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dvc2RhBRMR9CcGYhRAAAABE"]
[Thu Jul 30 08:38:30.590787 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/src/.env"] [unique_id "amr_dggGztaJsd9zSr7IGwAAAB8"]
[Thu Jul 30 08:38:30.590946 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/src/.env"] [unique_id "amr_dggGztaJsd9zSr7IGwAAAB8"]
[Thu Jul 30 08:38:30.591168 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/src/.env"] [unique_id "amr_dggGztaJsd9zSr7IGwAAAB8"]
[Thu Jul 30 08:38:30.612579 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.612612 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.647878 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.647905 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.684388 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.684412 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.700630 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/client/web.config"] [unique_id "amr_dggGztaJsd9zSr7IHwAAAB8"]
[Thu Jul 30 08:38:30.700867 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /client/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/client/web.config"] [unique_id "amr_dggGztaJsd9zSr7IHwAAAB8"]
[Thu Jul 30 08:38:30.701017 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/client/web.config"] [unique_id "amr_dggGztaJsd9zSr7IHwAAAB8"]
[Thu Jul 30 08:38:30.701266 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/client/web.config"] [unique_id "amr_dggGztaJsd9zSr7IHwAAAB8"]
[Thu Jul 30 08:38:30.722804 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:19380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.722831 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:19380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.761089 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.761110 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.800455 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.800477 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.805203 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/clld_dir/.env"] [unique_id "amr_dggGztaJsd9zSr7IIwAAAB8"]
[Thu Jul 30 08:38:30.805409 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/clld_dir/.env"] [unique_id "amr_dggGztaJsd9zSr7IIwAAAB8"]
[Thu Jul 30 08:38:30.805658 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/clld_dir/.env"] [unique_id "amr_dggGztaJsd9zSr7IIwAAAB8"]
[Thu Jul 30 08:38:30.830278 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_dggGztaJsd9zSr7IJAAAAB8"]
[Thu Jul 30 08:38:30.830502 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_dggGztaJsd9zSr7IJAAAAB8"]
[Thu Jul 30 08:38:30.830744 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_dggGztaJsd9zSr7IJAAAAB8"]
[Thu Jul 30 08:38:30.838714 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.838774 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.846005 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:3570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sample"] [unique_id "amr_do_4x2IDFYJd2RFylQAAAAw"]
[Thu Jul 30 08:38:30.846182 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:3570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sample"] [unique_id "amr_do_4x2IDFYJd2RFylQAAAAw"]
[Thu Jul 30 08:38:30.846374 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:3570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_do_4x2IDFYJd2RFylQAAAAw"]
[Thu Jul 30 08:38:30.873938 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.bak"] [unique_id "amr_dggGztaJsd9zSr7IJQAAAB8"]
[Thu Jul 30 08:38:30.874127 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.bak"] [unique_id "amr_dggGztaJsd9zSr7IJQAAAB8"]
[Thu Jul 30 08:38:30.874328 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.bak"] [unique_id "amr_dggGztaJsd9zSr7IJQAAAB8"]
[Thu Jul 30 08:38:30.877870 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.878200 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.895330 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.dev"] [unique_id "amr_dggGztaJsd9zSr7IJgAAAB8"]
[Thu Jul 30 08:38:30.895462 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.dev"] [unique_id "amr_dggGztaJsd9zSr7IJgAAAB8"]
[Thu Jul 30 08:38:30.895642 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.dev"] [unique_id "amr_dggGztaJsd9zSr7IJgAAAB8"]
[Thu Jul 30 08:38:30.913367 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.913384 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.932320 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.dist"] [unique_id "amr_dggGztaJsd9zSr7IJwAAAB8"]
[Thu Jul 30 08:38:30.932443 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.dist"] [unique_id "amr_dggGztaJsd9zSr7IJwAAAB8"]
[Thu Jul 30 08:38:30.932615 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.dist"] [unique_id "amr_dggGztaJsd9zSr7IJwAAAB8"]
[Thu Jul 30 08:38:30.952810 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.952839 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.954790 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.local"] [unique_id "amr_dggGztaJsd9zSr7IKAAAAB8"]
[Thu Jul 30 08:38:30.954910 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.local"] [unique_id "amr_dggGztaJsd9zSr7IKAAAAB8"]
[Thu Jul 30 08:38:30.955084 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cms/.env.local"] [unique_id "amr_dggGztaJsd9zSr7IKAAAAB8"]
[Thu Jul 30 08:38:30.987623 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:30.987648 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.027383 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.027404 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.066501 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19430] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/administration/php.ini"] [unique_id "amr_dz-G1VCKQzXMG6UbSAAAACg"]
[Thu Jul 30 08:38:31.066881 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/administration/php.ini"] [unique_id "amr_dz-G1VCKQzXMG6UbSAAAACg"]
[Thu Jul 30 08:38:31.067279 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.067405 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:19430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/administration/php.ini"] [unique_id "amr_dz-G1VCKQzXMG6UbSAAAACg"]
[Thu Jul 30 08:38:31.108631 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.108655 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:19442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.122750 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:3580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sample.php"] [unique_id "amr_d9e90y7TzMBvsyM2QQAAAC0"]
[Thu Jul 30 08:38:31.122879 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:3580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sample.php"] [unique_id "amr_d9e90y7TzMBvsyM2QQAAAC0"]
[Thu Jul 30 08:38:31.123053 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:3580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_d9e90y7TzMBvsyM2QQAAAC0"]
[Thu Jul 30 08:38:31.152752 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:19452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.152781 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:19452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.193902 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.193925 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.202729 2026] [authz_core:error] [pid 2426053:tid 2426053] [client 57.141.0.9:61524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:31.203350 2026] [authz_core:error] [pid 2426053:tid 2426053] [client 57.141.0.9:61524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:31.233634 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.233664 2026] [core:error] [pid 2418302:tid 2418302] [client 185.177.72.66:19478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.273047 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.273079 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.317682 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.317701 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.365237 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.365264 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.382866 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:3582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sendgrid"] [unique_id "amr_d5DxY3fypotl7b9p5wAAAB4"]
[Thu Jul 30 08:38:31.382989 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:3582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sendgrid"] [unique_id "amr_d5DxY3fypotl7b9p5wAAAB4"]
[Thu Jul 30 08:38:31.383170 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:3582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_d5DxY3fypotl7b9p5wAAAB4"]
[Thu Jul 30 08:38:31.401540 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.401568 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.440542 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.440578 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.477558 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:19528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.477589 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:19528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.516400 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:19544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.516425 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:19544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.554290 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.554309 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:19554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.592872 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.592893 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:19566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.638773 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.638802 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.644484 2026] [ssl:error] [pid 2411420:tid 2411420] (70014)End of file found: [client 216.73.216.199:1734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:31.648195 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:3588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sparkpost"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sparkpost"] [unique_id "amr_dySe2NSLL34J1qvS4AAAACo"]
[Thu Jul 30 08:38:31.648321 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:3588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.sparkpost"] [unique_id "amr_dySe2NSLL34J1qvS4AAAACo"]
[Thu Jul 30 08:38:31.648504 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:3588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_dySe2NSLL34J1qvS4AAAACo"]
[Thu Jul 30 08:38:31.680645 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.680668 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.718172 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.718201 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.730791 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/php.ini"] [unique_id "amr_d5SJEc8crM1jNLyVBQAAABw"]
[Thu Jul 30 08:38:31.731187 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/php.ini"] [unique_id "amr_d5SJEc8crM1jNLyVBQAAABw"]
[Thu Jul 30 08:38:31.731304 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/php.ini"] [unique_id "amr_d5SJEc8crM1jNLyVBQAAABw"]
[Thu Jul 30 08:38:31.756530 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.756550 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.796712 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.796738 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.832675 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.832695 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:19640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.872808 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.872829 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.890425 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/cms/php.ini"] [unique_id "amr_dwgGztaJsd9zSr7ISwAAAB8"]
[Thu Jul 30 08:38:31.890715 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cms/php.ini"] [unique_id "amr_dwgGztaJsd9zSr7ISwAAAB8"]
[Thu Jul 30 08:38:31.890880 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:29958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cms/php.ini"] [unique_id "amr_dwgGztaJsd9zSr7ISwAAAB8"]
[Thu Jul 30 08:38:31.913165 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.913183 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.931667 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3600] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.swp"] [unique_id "amr_d6CuPSoE0uFFzriAUwAAABY"]
[Thu Jul 30 08:38:31.931849 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.swp"] [unique_id "amr_d6CuPSoE0uFFzriAUwAAABY"]
[Thu Jul 30 08:38:31.932061 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_d6CuPSoE0uFFzriAUwAAABY"]
[Thu Jul 30 08:38:31.953844 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:19654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:31.953868 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:19654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.000192 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19656] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admins/.env"] [unique_id "amr_d6QRW2g6f2qydyUx-QAAADA"]
[Thu Jul 30 08:38:32.000376 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admins/.env"] [unique_id "amr_d6QRW2g6f2qydyUx-QAAADA"]
[Thu Jul 30 08:38:32.000841 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.000957 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admins/.env"] [unique_id "amr_d6QRW2g6f2qydyUx-QAAADA"]
[Thu Jul 30 08:38:32.041373 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admins/.env.bak"] [unique_id "amr_ePc2RhBRMR9CcGYhSQAAABE"]
[Thu Jul 30 08:38:32.041524 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admins/.env.bak"] [unique_id "amr_ePc2RhBRMR9CcGYhSQAAABE"]
[Thu Jul 30 08:38:32.041872 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.042587 2026] [security2:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admins/.env.bak"] [unique_id "amr_ePc2RhBRMR9CcGYhSQAAABE"]
[Thu Jul 30 08:38:32.079586 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19666] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admins/.env.dev"] [unique_id "amr_eOC233pHXOTf93SV5gAAADM"]
[Thu Jul 30 08:38:32.079721 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19666] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admins/.env.dev"] [unique_id "amr_eOC233pHXOTf93SV5gAAADM"]
[Thu Jul 30 08:38:32.080041 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.080173 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19666] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admins/.env.dev"] [unique_id "amr_eOC233pHXOTf93SV5gAAADM"]
[Thu Jul 30 08:38:32.123144 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19668] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admins/.env.dist"] [unique_id "amr_eAgGztaJsd9zSr7ITgAAAB8"]
[Thu Jul 30 08:38:32.123323 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admins/.env.dist"] [unique_id "amr_eAgGztaJsd9zSr7ITgAAAB8"]
[Thu Jul 30 08:38:32.123645 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.123765 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admins/.env.dist"] [unique_id "amr_eAgGztaJsd9zSr7ITgAAAB8"]
[Thu Jul 30 08:38:32.159381 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19678] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/admins/.env.local"] [unique_id "amr_eCqRkGfpP6jUcmmaggAAAAg"]
[Thu Jul 30 08:38:32.159536 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19678] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admins/.env.local"] [unique_id "amr_eCqRkGfpP6jUcmmaggAAAAg"]
[Thu Jul 30 08:38:32.159864 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.160002 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19678] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admins/.env.local"] [unique_id "amr_eCqRkGfpP6jUcmmaggAAAAg"]
[Thu Jul 30 08:38:32.176584 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.29:43666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:32.177239 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.29:43666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:32.194043 2026] [access_compat:error] [pid 2424224:tid 2424224] [client 106.215.157.145:8131] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:32.202607 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.202627 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.205646 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:3608] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.localapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amr_eKQRW2g6f2qydyUx-gAAADA"]
[Thu Jul 30 08:38:32.205787 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:3608] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amr_eKQRW2g6f2qydyUx-gAAADA"]
[Thu Jul 30 08:38:32.205971 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:3608] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_eKQRW2g6f2qydyUx-gAAADA"]
[Thu Jul 30 08:38:32.244973 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:19696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.245542 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:19696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.291394 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.291421 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.329440 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.329461 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.364933 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.364955 2026] [core:error] [pid 2411316:tid 2411316] [client 185.177.72.66:19722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.404946 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.404968 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.445849 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/code/api/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_NwAAAAU"]
[Thu Jul 30 08:38:32.446062 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/code/api/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_NwAAAAU"]
[Thu Jul 30 08:38:32.446318 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/code/api/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_NwAAAAU"]
[Thu Jul 30 08:38:32.451327 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:19740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.451348 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:19740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.460470 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3618] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.test.sample"] [unique_id "amr_eKCuPSoE0uFFzriAVQAAABY"]
[Thu Jul 30 08:38:32.460649 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/src/.env"] [unique_id "amr_eJSJEc8crM1jNLyVEQAAABw"]
[Thu Jul 30 08:38:32.460665 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3618] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.test.sample"] [unique_id "amr_eKCuPSoE0uFFzriAVQAAABY"]
[Thu Jul 30 08:38:32.460801 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/src/.env"] [unique_id "amr_eJSJEc8crM1jNLyVEQAAABw"]
[Thu Jul 30 08:38:32.460861 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3618] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_eKCuPSoE0uFFzriAVQAAABY"]
[Thu Jul 30 08:38:32.460921 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/api/src/.env"] [unique_id "amr_eJSJEc8crM1jNLyVEQAAABw"]
[Thu Jul 30 08:38:32.465475 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/code/web/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_OAAAAAU"]
[Thu Jul 30 08:38:32.465617 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/code/web/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_OAAAAAU"]
[Thu Jul 30 08:38:32.465809 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/code/web/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_OAAAAAU"]
[Thu Jul 30 08:38:32.485411 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codeigniter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/codeigniter/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_OQAAAAU"]
[Thu Jul 30 08:38:32.485576 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/codeigniter/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_OQAAAAU"]
[Thu Jul 30 08:38:32.485763 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/codeigniter/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_OQAAAAU"]
[Thu Jul 30 08:38:32.491332 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.491353 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.525738 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:19762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.525759 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:19762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.568634 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.568661 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:19774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.607369 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.607390 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.646241 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:19794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.646266 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:19794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.693525 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.693544 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.721843 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/codenames-frontend/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QQAAAAU"]
[Thu Jul 30 08:38:32.722056 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/codenames-frontend/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QQAAAAU"]
[Thu Jul 30 08:38:32.722296 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/codenames-frontend/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QQAAAAU"]
[Thu Jul 30 08:38:32.733765 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.733792 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.742900 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:3632] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.travis"] [unique_id "amr_eDRsn_CrYZtjvMmSPAAAACk"]
[Thu Jul 30 08:38:32.743036 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:3632] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.travis"] [unique_id "amr_eDRsn_CrYZtjvMmSPAAAACk"]
[Thu Jul 30 08:38:32.743228 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:3632] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_eDRsn_CrYZtjvMmSPAAAACk"]
[Thu Jul 30 08:38:32.756193 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QgAAAAU"]
[Thu Jul 30 08:38:32.756370 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QgAAAAU"]
[Thu Jul 30 08:38:32.756589 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QgAAAAU"]
[Thu Jul 30 08:38:32.773349 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.773368 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.774121 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/collected_static/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QwAAAAU"]
[Thu Jul 30 08:38:32.774276 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/collected_static/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QwAAAAU"]
[Thu Jul 30 08:38:32.774458 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/collected_static/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_QwAAAAU"]
[Thu Jul 30 08:38:32.813015 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/common/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_RQAAAAU"]
[Thu Jul 30 08:38:32.813196 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/common/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_RQAAAAU"]
[Thu Jul 30 08:38:32.813404 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/common/.env"] [unique_id "amr_ePd8VTPP_oF0WGs_RQAAAAU"]
[Thu Jul 30 08:38:32.817152 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.817182 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.838004 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/common/.env.bak"] [unique_id "amr_ePd8VTPP_oF0WGs_RgAAAAU"]
[Thu Jul 30 08:38:32.838211 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/common/.env.bak"] [unique_id "amr_ePd8VTPP_oF0WGs_RgAAAAU"]
[Thu Jul 30 08:38:32.838431 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/common/.env.bak"] [unique_id "amr_ePd8VTPP_oF0WGs_RgAAAAU"]
[Thu Jul 30 08:38:32.853061 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.853104 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.863833 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/common/.env.dev"] [unique_id "amr_ePd8VTPP_oF0WGs_RwAAAAU"]
[Thu Jul 30 08:38:32.864006 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/common/.env.dev"] [unique_id "amr_ePd8VTPP_oF0WGs_RwAAAAU"]
[Thu Jul 30 08:38:32.864232 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/common/.env.dev"] [unique_id "amr_ePd8VTPP_oF0WGs_RwAAAAU"]
[Thu Jul 30 08:38:32.892008 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/common/.env.dist"] [unique_id "amr_ePd8VTPP_oF0WGs_SAAAAAU"]
[Thu Jul 30 08:38:32.892221 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/common/.env.dist"] [unique_id "amr_ePd8VTPP_oF0WGs_SAAAAAU"]
[Thu Jul 30 08:38:32.892439 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/common/.env.dist"] [unique_id "amr_ePd8VTPP_oF0WGs_SAAAAAU"]
[Thu Jul 30 08:38:32.897212 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.897234 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:19856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.912660 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/common/.env.local"] [unique_id "amr_ePd8VTPP_oF0WGs_SQAAAAU"]
[Thu Jul 30 08:38:32.912850 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/common/.env.local"] [unique_id "amr_ePd8VTPP_oF0WGs_SQAAAAU"]
[Thu Jul 30 08:38:32.913042 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/common/.env.local"] [unique_id "amr_ePd8VTPP_oF0WGs_SQAAAAU"]
[Thu Jul 30 08:38:32.919646 2026] [ssl:error] [pid 2410999:tid 2410999] (EAI 2)Name or service not known: [client 144.76.19.72:36756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:32.919675 2026] [ssl:error] [pid 2410999:tid 2410999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:32.941238 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.941261 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:19864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.975713 2026] [ssl:error] [pid 2420366:tid 2420366] (EAI 2)Name or service not known: [client 144.76.19.72:36762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:32.975746 2026] [ssl:error] [pid 2420366:tid 2420366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:32.978907 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:32.978921 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.018315 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.018337 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.023017 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:3636] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.txt"] [unique_id "amr_edVtxCBUSPwlMZFKzQAAABk"]
[Thu Jul 30 08:38:33.023234 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:3636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.txt"] [unique_id "amr_edVtxCBUSPwlMZFKzQAAABk"]
[Thu Jul 30 08:38:33.023435 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:3636] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_edVtxCBUSPwlMZFKzQAAABk"]
[Thu Jul 30 08:38:33.065975 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:19874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.065997 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:19874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.105114 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:19890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.105141 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:19890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.144119 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.144146 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.197919 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.197952 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.239496 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:19928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.239519 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:19928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.292582 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.292611 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.305231 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:3652] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.uat"] [unique_id "amr_edVtxCBUSPwlMZFKzgAAABk"]
[Thu Jul 30 08:38:33.305395 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:3652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.uat"] [unique_id "amr_edVtxCBUSPwlMZFKzgAAABk"]
[Thu Jul 30 08:38:33.305584 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:3652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_edVtxCBUSPwlMZFKzgAAABk"]
[Thu Jul 30 08:38:33.327725 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:19948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.327742 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:19948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.364335 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.364362 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:19952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.401014 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.401040 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:19964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.444284 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:19974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.444305 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:19974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.489226 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.489251 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:19978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.532999 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.533021 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:19986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.569308 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.569331 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:19996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.589588 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:3668] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.www"] [unique_id "amr_edIk9vtWgKYiYE5hpwAAACs"]
[Thu Jul 30 08:38:33.589728 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:3668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.www"] [unique_id "amr_edIk9vtWgKYiYE5hpwAAACs"]
[Thu Jul 30 08:38:33.589904 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:3668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_edIk9vtWgKYiYE5hpwAAACs"]
[Thu Jul 30 08:38:33.608947 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:20006] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/admins/php.ini"] [unique_id "amr_eaQRW2g6f2qydyUyAAAAADA"]
[Thu Jul 30 08:38:33.609329 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:20006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/admins/php.ini"] [unique_id "amr_eaQRW2g6f2qydyUyAAAAADA"]
[Thu Jul 30 08:38:33.609682 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:20006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.609806 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:20006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/admins/php.ini"] [unique_id "amr_eaQRW2g6f2qydyUyAAAAADA"]
[Thu Jul 30 08:38:33.652457 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:20016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.652488 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:20016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.701240 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.701260 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.743449 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.743468 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.783135 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:20028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.783156 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:20028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.799059 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env"] [unique_id "amr_eZSJEc8crM1jNLyVJQAAABw"]
[Thu Jul 30 08:38:33.799193 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env"] [unique_id "amr_eZSJEc8crM1jNLyVJQAAABw"]
[Thu Jul 30 08:38:33.799294 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env"] [unique_id "amr_eZSJEc8crM1jNLyVJQAAABw"]
[Thu Jul 30 08:38:33.816301 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/common/php.ini"] [unique_id "amr_efd8VTPP_oF0WGs_bAAAAAU"]
[Thu Jul 30 08:38:33.816597 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/common/php.ini"] [unique_id "amr_efd8VTPP_oF0WGs_bAAAAAU"]
[Thu Jul 30 08:38:33.816772 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/common/php.ini"] [unique_id "amr_efd8VTPP_oF0WGs_bAAAAAU"]
[Thu Jul 30 08:38:33.817019 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.bak"] [unique_id "amr_eZSJEc8crM1jNLyVJgAAABw"]
[Thu Jul 30 08:38:33.817150 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.bak"] [unique_id "amr_eZSJEc8crM1jNLyVJgAAABw"]
[Thu Jul 30 08:38:33.817246 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.bak"] [unique_id "amr_eZSJEc8crM1jNLyVJgAAABw"]
[Thu Jul 30 08:38:33.825643 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.825661 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.842299 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.dev"] [unique_id "amr_eZSJEc8crM1jNLyVJwAAABw"]
[Thu Jul 30 08:38:33.842416 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.dev"] [unique_id "amr_eZSJEc8crM1jNLyVJwAAABw"]
[Thu Jul 30 08:38:33.842516 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.dev"] [unique_id "amr_eZSJEc8crM1jNLyVJwAAABw"]
[Thu Jul 30 08:38:33.844580 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:3670] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{dn}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.{{DN}}"] [unique_id "amr_eXiGnV0lYiYXbxD-TwAAACI"]
[Thu Jul 30 08:38:33.844697 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:3670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.{{DN}}"] [unique_id "amr_eXiGnV0lYiYXbxD-TwAAACI"]
[Thu Jul 30 08:38:33.844881 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:3670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_eXiGnV0lYiYXbxD-TwAAACI"]
[Thu Jul 30 08:38:33.861919 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.dist"] [unique_id "amr_eZSJEc8crM1jNLyVKAAAABw"]
[Thu Jul 30 08:38:33.862037 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.dist"] [unique_id "amr_eZSJEc8crM1jNLyVKAAAABw"]
[Thu Jul 30 08:38:33.862146 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.dist"] [unique_id "amr_eZSJEc8crM1jNLyVKAAAABw"]
[Thu Jul 30 08:38:33.868765 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.868789 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.880312 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.local"] [unique_id "amr_eZSJEc8crM1jNLyVKQAAABw"]
[Thu Jul 30 08:38:33.880438 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.local"] [unique_id "amr_eZSJEc8crM1jNLyVKQAAABw"]
[Thu Jul 30 08:38:33.880534 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.local"] [unique_id "amr_eZSJEc8crM1jNLyVKQAAABw"]
[Thu Jul 30 08:38:33.900464 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.production"] [unique_id "amr_eZSJEc8crM1jNLyVKgAAABw"]
[Thu Jul 30 08:38:33.900637 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.production"] [unique_id "amr_eZSJEc8crM1jNLyVKgAAABw"]
[Thu Jul 30 08:38:33.900747 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.production"] [unique_id "amr_eZSJEc8crM1jNLyVKgAAABw"]
[Thu Jul 30 08:38:33.908332 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:20062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.908360 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:20062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.918892 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.staging"] [unique_id "amr_eZSJEc8crM1jNLyVKwAAABw"]
[Thu Jul 30 08:38:33.919038 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.staging"] [unique_id "amr_eZSJEc8crM1jNLyVKwAAABw"]
[Thu Jul 30 08:38:33.919160 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.17:17848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/.env.staging"] [unique_id "amr_eZSJEc8crM1jNLyVKwAAABw"]
[Thu Jul 30 08:38:33.951323 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.951360 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.991120 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:33.991143 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.031949 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:20098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.031973 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:20098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.078303 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.078339 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.115399 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:20118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.115425 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:20118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.157138 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:20124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.157169 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:20124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.210167 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.210193 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.257794 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.257815 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.258551 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:3686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{sd}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env.{{SD}}"] [unique_id "amr_euC233pHXOTf93SV7wAAADM"]
[Thu Jul 30 08:38:34.258680 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:3686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env.{{SD}}"] [unique_id "amr_euC233pHXOTf93SV7wAAADM"]
[Thu Jul 30 08:38:34.258875 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:3686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_euC233pHXOTf93SV7wAAADM"]
[Thu Jul 30 08:38:34.303392 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:20140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.303418 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:20140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.305184 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/community/.env"] [unique_id "amr_evd8VTPP_oF0WGs_fwAAAAU"]
[Thu Jul 30 08:38:34.305300 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/community/.env"] [unique_id "amr_evd8VTPP_oF0WGs_fwAAAAU"]
[Thu Jul 30 08:38:34.305474 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/community/.env"] [unique_id "amr_evd8VTPP_oF0WGs_fwAAAAU"]
[Thu Jul 30 08:38:34.347363 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:20150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.347391 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:20150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.389921 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.389951 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:20166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.430821 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/agora/.env"] [unique_id "amr_ejRsn_CrYZtjvMmSQgAAACk"]
[Thu Jul 30 08:38:34.431037 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/agora/.env"] [unique_id "amr_ejRsn_CrYZtjvMmSQgAAACk"]
[Thu Jul 30 08:38:34.431382 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.431512 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/agora/.env"] [unique_id "amr_ejRsn_CrYZtjvMmSQgAAACk"]
[Thu Jul 30 08:38:34.472701 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:20176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/alpha/.env"] [unique_id "amr_euC233pHXOTf93SV8AAAADM"]
[Thu Jul 30 08:38:34.472839 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:20176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/alpha/.env"] [unique_id "amr_euC233pHXOTf93SV8AAAADM"]
[Thu Jul 30 08:38:34.473184 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:20176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.473302 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:20176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/alpha/.env"] [unique_id "amr_euC233pHXOTf93SV8AAAADM"]
[Thu Jul 30 08:38:34.515082 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20178] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/anaconda/.env"] [unique_id "amr_eiqRkGfpP6jUcmmajQAAAAg"]
[Thu Jul 30 08:38:34.515260 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/anaconda/.env"] [unique_id "amr_eiqRkGfpP6jUcmmajQAAAAg"]
[Thu Jul 30 08:38:34.515615 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.515734 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20178] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/anaconda/.env"] [unique_id "amr_eiqRkGfpP6jUcmmajQAAAAg"]
[Thu Jul 30 08:38:34.528155 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3688] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env-example"] [unique_id "amr_eqCuPSoE0uFFzriAWQAAABY"]
[Thu Jul 30 08:38:34.528287 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env-example"] [unique_id "amr_eqCuPSoE0uFFzriAWQAAABY"]
[Thu Jul 30 08:38:34.528466 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:3688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_eqCuPSoE0uFFzriAWQAAABY"]
[Thu Jul 30 08:38:34.561585 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.561606 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.568540 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conf/.env"] [unique_id "amr_evd8VTPP_oF0WGs_iAAAAAU"]
[Thu Jul 30 08:38:34.568666 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conf/.env"] [unique_id "amr_evd8VTPP_oF0WGs_iAAAAAU"]
[Thu Jul 30 08:38:34.568837 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conf/.env"] [unique_id "amr_evd8VTPP_oF0WGs_iAAAAAU"]
[Thu Jul 30 08:38:34.588771 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.bak"] [unique_id "amr_evd8VTPP_oF0WGs_iQAAAAU"]
[Thu Jul 30 08:38:34.588911 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.bak"] [unique_id "amr_evd8VTPP_oF0WGs_iQAAAAU"]
[Thu Jul 30 08:38:34.589108 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.bak"] [unique_id "amr_evd8VTPP_oF0WGs_iQAAAAU"]
[Thu Jul 30 08:38:34.598619 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.598646 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.621837 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.dev"] [unique_id "amr_evd8VTPP_oF0WGs_igAAAAU"]
[Thu Jul 30 08:38:34.621978 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.dev"] [unique_id "amr_evd8VTPP_oF0WGs_igAAAAU"]
[Thu Jul 30 08:38:34.622180 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.dev"] [unique_id "amr_evd8VTPP_oF0WGs_igAAAAU"]
[Thu Jul 30 08:38:34.638195 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.638213 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.645748 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.dist"] [unique_id "amr_evd8VTPP_oF0WGs_iwAAAAU"]
[Thu Jul 30 08:38:34.645866 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.dist"] [unique_id "amr_evd8VTPP_oF0WGs_iwAAAAU"]
[Thu Jul 30 08:38:34.646030 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.17:29960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.dist"] [unique_id "amr_evd8VTPP_oF0WGs_iwAAAAU"]
[Thu Jul 30 08:38:34.678009 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.678036 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.716158 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.local"] [unique_id "amr_euC233pHXOTf93SV8gAAADM"]
[Thu Jul 30 08:38:34.716326 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.local"] [unique_id "amr_euC233pHXOTf93SV8gAAADM"]
[Thu Jul 30 08:38:34.716528 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conf/.env.local"] [unique_id "amr_euC233pHXOTf93SV8gAAADM"]
[Thu Jul 30 08:38:34.716647 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.716670 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.753287 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/api-config.ini"] [unique_id "amr_eiqRkGfpP6jUcmmajwAAAAg"]
[Thu Jul 30 08:38:34.753572 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/api-config.ini"] [unique_id "amr_eiqRkGfpP6jUcmmajwAAAAg"]
[Thu Jul 30 08:38:34.753884 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.753984 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/api-config.ini"] [unique_id "amr_eiqRkGfpP6jUcmmajwAAAAg"]
[Thu Jul 30 08:38:34.794152 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/api/.env.bak"] [unique_id "amr_ejRsn_CrYZtjvMmSRQAAACk"]
[Thu Jul 30 08:38:34.794339 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/api/.env.bak"] [unique_id "amr_ejRsn_CrYZtjvMmSRQAAACk"]
[Thu Jul 30 08:38:34.794684 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20240] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.794814 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/api/.env.bak"] [unique_id "amr_ejRsn_CrYZtjvMmSRQAAACk"]
[Thu Jul 30 08:38:34.797086 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:3692] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env-sample"] [unique_id "amr_evd8VTPP_oF0WGs_jAAAAAU"]
[Thu Jul 30 08:38:34.797206 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:3692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env-sample"] [unique_id "amr_evd8VTPP_oF0WGs_jAAAAAU"]
[Thu Jul 30 08:38:34.797376 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:3692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_evd8VTPP_oF0WGs_jAAAAAU"]
[Thu Jul 30 08:38:34.843958 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20250] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/api/.env.dev"] [unique_id "amr_etIk9vtWgKYiYE5hqwAAACs"]
[Thu Jul 30 08:38:34.844102 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/api/.env.dev"] [unique_id "amr_etIk9vtWgKYiYE5hqwAAACs"]
[Thu Jul 30 08:38:34.844410 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.844516 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/api/.env.dev"] [unique_id "amr_etIk9vtWgKYiYE5hqwAAACs"]
[Thu Jul 30 08:38:34.883798 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/api/.env.dist"] [unique_id "amr_eiqRkGfpP6jUcmmakAAAAAg"]
[Thu Jul 30 08:38:34.883937 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/api/.env.dist"] [unique_id "amr_eiqRkGfpP6jUcmmakAAAAAg"]
[Thu Jul 30 08:38:34.884259 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.884374 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/api/.env.dist"] [unique_id "amr_eiqRkGfpP6jUcmmakAAAAAg"]
[Thu Jul 30 08:38:34.921821 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/api/.env.test"] [unique_id "amr_etIk9vtWgKYiYE5hrAAAACs"]
[Thu Jul 30 08:38:34.921962 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/api/.env.test"] [unique_id "amr_etIk9vtWgKYiYE5hrAAAACs"]
[Thu Jul 30 08:38:34.922276 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.922378 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/api/.env.test"] [unique_id "amr_etIk9vtWgKYiYE5hrAAAACs"]
[Thu Jul 30 08:38:34.960791 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:34.960809 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.000115 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:20280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.000142 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:20280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.042189 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.042217 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.065296 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:3696] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env1"] [unique_id "amr_e9Ik9vtWgKYiYE5hrQAAACs"]
[Thu Jul 30 08:38:35.065436 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:3696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env1"] [unique_id "amr_e9Ik9vtWgKYiYE5hrQAAACs"]
[Thu Jul 30 08:38:35.065611 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:3696] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_e9Ik9vtWgKYiYE5hrQAAACs"]
[Thu Jul 30 08:38:35.082656 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.082678 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:20298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.121317 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.121336 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.162539 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.162580 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.200811 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.200829 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.242251 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.242271 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.284705 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.284722 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.325872 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.325889 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.341617 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:3702] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env_1"] [unique_id "amr_exQlIytBsvBD-_Am-QAAADY"]
[Thu Jul 30 08:38:35.341734 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:3702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env_1"] [unique_id "amr_exQlIytBsvBD-_Am-QAAADY"]
[Thu Jul 30 08:38:35.341918 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:3702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_exQlIytBsvBD-_Am-QAAADY"]
[Thu Jul 30 08:38:35.365663 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.365681 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:20358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.405890 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.405907 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.449266 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.449286 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:20364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.486468 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.486486 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.525383 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.525402 2026] [core:error] [pid 2420368:tid 2420368] [client 185.177.72.66:20376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.554947 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.23:35974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:35.555602 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.23:35974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:35.563105 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:20386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.563124 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:20386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.603217 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:4838] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env_bak"] [unique_id "amr_e9Ik9vtWgKYiYE5htAAAACs"]
[Thu Jul 30 08:38:35.603336 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:4838] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env_bak"] [unique_id "amr_e9Ik9vtWgKYiYE5htAAAACs"]
[Thu Jul 30 08:38:35.603497 2026] [security2:error] [pid 2420368:tid 2420368] [client 185.177.72.66:4838] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_e9Ik9vtWgKYiYE5htAAAACs"]
[Thu Jul 30 08:38:35.604338 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:45558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.604354 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:45558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.628215 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/conf/php.ini"] [unique_id "amr_e-C233pHXOTf93SWFQAAADM"]
[Thu Jul 30 08:38:35.629744 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conf/php.ini"] [unique_id "amr_e-C233pHXOTf93SWFQAAADM"]
[Thu Jul 30 08:38:35.629922 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conf/php.ini"] [unique_id "amr_e-C233pHXOTf93SWFQAAADM"]
[Thu Jul 30 08:38:35.641837 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:45572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.641855 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:45572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.677874 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:45574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.677893 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:45574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.717663 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:45590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.717694 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:45590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.755809 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:45606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.755829 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:45606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.796666 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:45618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.796713 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:45618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.835234 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:45628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.835259 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:45628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.869470 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:4850] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env_old"] [unique_id "amr_e_d8VTPP_oF0WGs_kwAAAAU"]
[Thu Jul 30 08:38:35.869627 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:4850] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env_old"] [unique_id "amr_e_d8VTPP_oF0WGs_kwAAAAU"]
[Thu Jul 30 08:38:35.869803 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:4850] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_e_d8VTPP_oF0WGs_kwAAAAU"]
[Thu Jul 30 08:38:35.873736 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:45634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.873753 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:45634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.915956 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:45650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:35.915976 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:45650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:36.163327 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config.bak"] [unique_id "amr_fOC233pHXOTf93SWKAAAADM"]
[Thu Jul 30 08:38:36.163650 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config.bak"] [unique_id "amr_fOC233pHXOTf93SWKAAAADM"]
[Thu Jul 30 08:38:36.163837 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config.bak"] [unique_id "amr_fOC233pHXOTf93SWKAAAADM"]
[Thu Jul 30 08:38:36.226004 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config.conf"] [unique_id "amr_fOC233pHXOTf93SWKwAAADM"]
[Thu Jul 30 08:38:36.226305 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config.conf"] [unique_id "amr_fOC233pHXOTf93SWKwAAADM"]
[Thu Jul 30 08:38:36.226513 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config.conf"] [unique_id "amr_fOC233pHXOTf93SWKwAAADM"]
[Thu Jul 30 08:38:36.274752 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config.dat"] [unique_id "amr_fOC233pHXOTf93SWLQAAADM"]
[Thu Jul 30 08:38:36.275026 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config.dat"] [unique_id "amr_fOC233pHXOTf93SWLQAAADM"]
[Thu Jul 30 08:38:36.275227 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config.dat"] [unique_id "amr_fOC233pHXOTf93SWLQAAADM"]
[Thu Jul 30 08:38:36.305766 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/php.ini"] [unique_id "amr_fHC-YQK8R8M_CPHrqgAAAAA"]
[Thu Jul 30 08:38:36.306062 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/php.ini"] [unique_id "amr_fHC-YQK8R8M_CPHrqgAAAAA"]
[Thu Jul 30 08:38:36.306197 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apis/php.ini"] [unique_id "amr_fHC-YQK8R8M_CPHrqgAAAAA"]
[Thu Jul 30 08:38:36.391361 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config.inc"] [unique_id "amr_fOC233pHXOTf93SWMgAAADM"]
[Thu Jul 30 08:38:36.391706 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config.inc"] [unique_id "amr_fOC233pHXOTf93SWMgAAADM"]
[Thu Jul 30 08:38:36.391896 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config.inc"] [unique_id "amr_fOC233pHXOTf93SWMgAAADM"]
[Thu Jul 30 08:38:36.456995 2026] [core:error] [pid 2423370:tid 2423370] (13)Permission denied: [client 216.73.216.199:49220] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_queue/shrink
[Thu Jul 30 08:38:36.582266 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:36.582291 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:36.743601 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config.old"] [unique_id "amr_fOC233pHXOTf93SWQAAAADM"]
[Thu Jul 30 08:38:36.743912 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config.old"] [unique_id "amr_fOC233pHXOTf93SWQAAAADM"]
[Thu Jul 30 08:38:36.744107 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config.old"] [unique_id "amr_fOC233pHXOTf93SWQAAAADM"]
[Thu Jul 30 08:38:36.758302 2026] [core:error] [pid 2423370:tid 2423370] (13)Permission denied: [client 216.73.216.199:49220] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/cpu_partial
[Thu Jul 30 08:38:36.839995 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:45674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:36.840035 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:45674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:36.858116 2026] [ssl:error] [pid 2424224:tid 2424224] (EAI 2)Name or service not known: [client 144.76.19.72:36778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:36.858139 2026] [ssl:error] [pid 2424224:tid 2424224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:36.888335 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:45690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:36.888356 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:45690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:36.908656 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:4860] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env_sample"] [unique_id "amr_fKWBySBNOpvIvESBDAAAABs"]
[Thu Jul 30 08:38:36.908799 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:4860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env_sample"] [unique_id "amr_fKWBySBNOpvIvESBDAAAABs"]
[Thu Jul 30 08:38:36.908989 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:4860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_fKWBySBNOpvIvESBDAAAABs"]
[Thu Jul 30 08:38:37.105456 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:45694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.105484 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:45694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.224855 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config.sql"] [unique_id "amr_feC233pHXOTf93SWUgAAADM"]
[Thu Jul 30 08:38:37.225210 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config.sql"] [unique_id "amr_feC233pHXOTf93SWUgAAADM"]
[Thu Jul 30 08:38:37.225415 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.17:29966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config.sql"] [unique_id "amr_feC233pHXOTf93SWUgAAADM"]
[Thu Jul 30 08:38:37.360615 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.360641 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.510868 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:45716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.510889 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:45716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.511604 2026] [ssl:error] [pid 2425020:tid 2425020] (EAI 2)Name or service not known: [client 144.76.19.72:36788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:37.511633 2026] [ssl:error] [pid 2425020:tid 2425020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:37.566666 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:45728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.566685 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:45728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.585938 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app-order-client/.env"] [unique_id "amr_fXC-YQK8R8M_CPHrvAAAAAA"]
[Thu Jul 30 08:38:37.586097 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app-order-client/.env"] [unique_id "amr_fXC-YQK8R8M_CPHrvAAAAAA"]
[Thu Jul 30 08:38:37.586207 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app-order-client/.env"] [unique_id "amr_fXC-YQK8R8M_CPHrvAAAAAA"]
[Thu Jul 30 08:38:37.593147 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:4866] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.envrc"] [unique_id "amr_feWvknE5emN3ObPc2gAAACc"]
[Thu Jul 30 08:38:37.593295 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:4866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.envrc"] [unique_id "amr_feWvknE5emN3ObPc2gAAACc"]
[Thu Jul 30 08:38:37.593486 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:4866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_feWvknE5emN3ObPc2gAAACc"]
[Thu Jul 30 08:38:37.611504 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:45730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.611529 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:45730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.614800 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.bak"] [unique_id "amr_fXC-YQK8R8M_CPHrvQAAAAA"]
[Thu Jul 30 08:38:37.614938 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.bak"] [unique_id "amr_fXC-YQK8R8M_CPHrvQAAAAA"]
[Thu Jul 30 08:38:37.615035 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.bak"] [unique_id "amr_fXC-YQK8R8M_CPHrvQAAAAA"]
[Thu Jul 30 08:38:37.631822 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/config/.env.bak"] [unique_id "amr_ff8233Hh3pbQWVeysQAAABU"]
[Thu Jul 30 08:38:37.631952 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/.env.bak"] [unique_id "amr_ff8233Hh3pbQWVeysQAAABU"]
[Thu Jul 30 08:38:37.632151 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/.env.bak"] [unique_id "amr_ff8233Hh3pbQWVeysQAAABU"]
[Thu Jul 30 08:38:37.635292 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.dev"] [unique_id "amr_fXC-YQK8R8M_CPHrvgAAAAA"]
[Thu Jul 30 08:38:37.635419 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.dev"] [unique_id "amr_fXC-YQK8R8M_CPHrvgAAAAA"]
[Thu Jul 30 08:38:37.635514 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.dev"] [unique_id "amr_fXC-YQK8R8M_CPHrvgAAAAA"]
[Thu Jul 30 08:38:37.655728 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/config/.env.dev"] [unique_id "amr_ff8233Hh3pbQWVeysgAAABU"]
[Thu Jul 30 08:38:37.655851 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/.env.dev"] [unique_id "amr_ff8233Hh3pbQWVeysgAAABU"]
[Thu Jul 30 08:38:37.656036 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/.env.dev"] [unique_id "amr_ff8233Hh3pbQWVeysgAAABU"]
[Thu Jul 30 08:38:37.659702 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.dist"] [unique_id "amr_fXC-YQK8R8M_CPHrvwAAAAA"]
[Thu Jul 30 08:38:37.659859 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.dist"] [unique_id "amr_fXC-YQK8R8M_CPHrvwAAAAA"]
[Thu Jul 30 08:38:37.659952 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.dist"] [unique_id "amr_fXC-YQK8R8M_CPHrvwAAAAA"]
[Thu Jul 30 08:38:37.662831 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.662852 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.674064 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/config/.env.dist"] [unique_id "amr_ff8233Hh3pbQWVeyswAAABU"]
[Thu Jul 30 08:38:37.674204 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/.env.dist"] [unique_id "amr_ff8233Hh3pbQWVeyswAAABU"]
[Thu Jul 30 08:38:37.674382 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/.env.dist"] [unique_id "amr_ff8233Hh3pbQWVeyswAAABU"]
[Thu Jul 30 08:38:37.682793 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.test"] [unique_id "amr_fXC-YQK8R8M_CPHrwAAAAAA"]
[Thu Jul 30 08:38:37.682922 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.test"] [unique_id "amr_fXC-YQK8R8M_CPHrwAAAAAA"]
[Thu Jul 30 08:38:37.683018 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/.env.test"] [unique_id "amr_fXC-YQK8R8M_CPHrwAAAAAA"]
[Thu Jul 30 08:38:37.702747 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/config/.env.test"] [unique_id "amr_ff8233Hh3pbQWVeytAAAABU"]
[Thu Jul 30 08:38:37.702873 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/.env.test"] [unique_id "amr_ff8233Hh3pbQWVeytAAAABU"]
[Thu Jul 30 08:38:37.703085 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/.env.test"] [unique_id "amr_ff8233Hh3pbQWVeytAAAABU"]
[Thu Jul 30 08:38:37.717483 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.717512 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.760795 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/config/.git/config"] [unique_id "amr_ff8233Hh3pbQWVeytgAAABU"]
[Thu Jul 30 08:38:37.760971 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/.git/config"] [unique_id "amr_ff8233Hh3pbQWVeytgAAABU"]
[Thu Jul 30 08:38:37.761207 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/.git/config"] [unique_id "amr_ff8233Hh3pbQWVeytgAAABU"]
[Thu Jul 30 08:38:37.767520 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.767546 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.813006 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.813029 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.856008 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.856027 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.867212 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:4870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.envs"] [unique_id "amr_fSSe2NSLL34J1qvS4gAAACo"]
[Thu Jul 30 08:38:37.867346 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:4870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.envs"] [unique_id "amr_fSSe2NSLL34J1qvS4gAAACo"]
[Thu Jul 30 08:38:37.867514 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:4870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_fSSe2NSLL34J1qvS4gAAACo"]
[Thu Jul 30 08:38:37.888849 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config/AppData.config"] [unique_id "amr_ff8233Hh3pbQWVeyuwAAABU"]
[Thu Jul 30 08:38:37.889218 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/AppData.config"] [unique_id "amr_ff8233Hh3pbQWVeyuwAAABU"]
[Thu Jul 30 08:38:37.889426 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/AppData.config"] [unique_id "amr_ff8233Hh3pbQWVeyuwAAABU"]
[Thu Jul 30 08:38:37.894633 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45778] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/api/php.ini"] [unique_id "amr_fXiGnV0lYiYXbxD-VAAAACI"]
[Thu Jul 30 08:38:37.894927 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/api/php.ini"] [unique_id "amr_fXiGnV0lYiYXbxD-VAAAACI"]
[Thu Jul 30 08:38:37.895242 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.895485 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/api/php.ini"] [unique_id "amr_fXiGnV0lYiYXbxD-VAAAACI"]
[Thu Jul 30 08:38:37.909672 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_ff8233Hh3pbQWVeyvAAAABU"]
[Thu Jul 30 08:38:37.910049 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_ff8233Hh3pbQWVeyvAAAABU"]
[Thu Jul 30 08:38:37.910289 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_ff8233Hh3pbQWVeyvAAAABU"]
[Thu Jul 30 08:38:37.933699 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.933721 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.964308 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config/api-config.ini"] [unique_id "amr_ff8233Hh3pbQWVeyvgAAABU"]
[Thu Jul 30 08:38:37.964660 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/api-config.ini"] [unique_id "amr_ff8233Hh3pbQWVeyvgAAABU"]
[Thu Jul 30 08:38:37.964883 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/api-config.ini"] [unique_id "amr_ff8233Hh3pbQWVeyvgAAABU"]
[Thu Jul 30 08:38:37.970019 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:37.970049 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.008792 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:45808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.008815 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:45808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.051001 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.051020 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.099280 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.099311 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.135756 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.135772 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.136196 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:4878] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.env~"] [unique_id "amr_fvdbqxY4ll4IV_vwmwAAACE"]
[Thu Jul 30 08:38:38.136374 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:4878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.env~"] [unique_id "amr_fvdbqxY4ll4IV_vwmwAAACE"]
[Thu Jul 30 08:38:38.136600 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:4878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_fvdbqxY4ll4IV_vwmwAAACE"]
[Thu Jul 30 08:38:38.173289 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.173308 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.187448 2026] [authz_core:error] [pid 2427478:tid 2427478] [client 57.141.0.59:60770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:38.188059 2026] [authz_core:error] [pid 2427478:tid 2427478] [client 57.141.0.59:60770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:38.210691 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:45858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.210717 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:45858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.231194 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/client/.env"] [unique_id "amr_fnC-YQK8R8M_CPHryQAAAAA"]
[Thu Jul 30 08:38:38.231368 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/client/.env"] [unique_id "amr_fnC-YQK8R8M_CPHryQAAAAA"]
[Thu Jul 30 08:38:38.231473 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/client/.env"] [unique_id "amr_fnC-YQK8R8M_CPHryQAAAAA"]
[Thu Jul 30 08:38:38.262418 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_fnC-YQK8R8M_CPHrygAAAAA"]
[Thu Jul 30 08:38:38.262606 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_fnC-YQK8R8M_CPHrygAAAAA"]
[Thu Jul 30 08:38:38.262719 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_fnC-YQK8R8M_CPHrygAAAAA"]
[Thu Jul 30 08:38:38.273533 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:45870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.273550 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:45870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.317300 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:45884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.317320 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:45884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.374231 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config/config.inc"] [unique_id "amr_fv8233Hh3pbQWVeyzgAAABU"]
[Thu Jul 30 08:38:38.374593 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/config.inc"] [unique_id "amr_fv8233Hh3pbQWVeyzgAAABU"]
[Thu Jul 30 08:38:38.374798 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/config.inc"] [unique_id "amr_fv8233Hh3pbQWVeyzgAAABU"]
[Thu Jul 30 08:38:38.432596 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.432649 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.475178 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:45902] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/api/src/.env"] [unique_id "amr_fm101zDj_5UEQFMW9AAAAAs"]
[Thu Jul 30 08:38:38.475382 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:45902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/api/src/.env"] [unique_id "amr_fm101zDj_5UEQFMW9AAAAAs"]
[Thu Jul 30 08:38:38.475727 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:45902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.475868 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:45902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/api/src/.env"] [unique_id "amr_fm101zDj_5UEQFMW9AAAAAs"]
[Thu Jul 30 08:38:38.519882 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.519907 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.571112 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:45914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.571135 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:45914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.614981 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:45928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.615003 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:45928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.662262 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.662284 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.703484 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:45942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.703516 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:45942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.703551 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/config/dev/.env"] [unique_id "amr_fnC-YQK8R8M_CPHr0QAAAAA"]
[Thu Jul 30 08:38:38.703718 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/config/dev/.env"] [unique_id "amr_fnC-YQK8R8M_CPHr0QAAAAA"]
[Thu Jul 30 08:38:38.703840 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/config/dev/.env"] [unique_id "amr_fnC-YQK8R8M_CPHr0QAAAAA"]
[Thu Jul 30 08:38:38.748354 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.748374 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.791706 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:45964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.791725 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:45964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.834901 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.834924 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:45974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.870720 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.870738 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:45984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.908123 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.908150 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:45996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.912734 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/config/parameters.yml"] [unique_id "amr_fnC-YQK8R8M_CPHr1QAAAAA"]
[Thu Jul 30 08:38:38.912905 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/config/parameters.yml"] [unique_id "amr_fnC-YQK8R8M_CPHr1QAAAAA"]
[Thu Jul 30 08:38:38.913022 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/config/parameters.yml"] [unique_id "amr_fnC-YQK8R8M_CPHr1QAAAAA"]
[Thu Jul 30 08:38:38.946640 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:46002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.946669 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:46002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.950729 2026] [authz_core:error] [pid 2427539:tid 2427539] [client 57.141.0.29:43684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:38.951412 2026] [authz_core:error] [pid 2427539:tid 2427539] [client 57.141.0.29:43684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:38.987348 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:38.987382 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.030660 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.030681 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.069489 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:46034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.069513 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:46034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.107873 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.107895 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.146684 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.146708 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.188569 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.188594 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.228357 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:46068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.228379 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:46068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.271200 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.271232 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.309877 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46092] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apis/.env"] [unique_id "amr_f3iGnV0lYiYXbxD-XAAAACI"]
[Thu Jul 30 08:38:39.310005 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/.env"] [unique_id "amr_f3iGnV0lYiYXbxD-XAAAACI"]
[Thu Jul 30 08:38:39.310368 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.310477 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46092] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/.env"] [unique_id "amr_f3iGnV0lYiYXbxD-XAAAACI"]
[Thu Jul 30 08:38:39.345612 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apis/.env.bak"] [unique_id "amr_f4yFZ2ptgStT3D1uCAAAAD0"]
[Thu Jul 30 08:38:39.345733 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/.env.bak"] [unique_id "amr_f4yFZ2ptgStT3D1uCAAAAD0"]
[Thu Jul 30 08:38:39.346039 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.346162 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/.env.bak"] [unique_id "amr_f4yFZ2ptgStT3D1uCAAAAD0"]
[Thu Jul 30 08:38:39.380471 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apis/.env.dev"] [unique_id "amr_f3iGnV0lYiYXbxD-XQAAACI"]
[Thu Jul 30 08:38:39.380606 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/.env.dev"] [unique_id "amr_f3iGnV0lYiYXbxD-XQAAACI"]
[Thu Jul 30 08:38:39.380941 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.381047 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:46114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/.env.dev"] [unique_id "amr_f3iGnV0lYiYXbxD-XQAAACI"]
[Thu Jul 30 08:38:39.412430 2026] [lsapi:warn] [pid 2426800:tid 2426800] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:38:39.419084 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46120] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apis/.env.dist"] [unique_id "amr_f4yFZ2ptgStT3D1uCQAAAD0"]
[Thu Jul 30 08:38:39.419213 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/.env.dist"] [unique_id "amr_f4yFZ2ptgStT3D1uCQAAAD0"]
[Thu Jul 30 08:38:39.419510 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.419632 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/.env.dist"] [unique_id "amr_f4yFZ2ptgStT3D1uCQAAAD0"]
[Thu Jul 30 08:38:39.462004 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apis/.env.local"] [unique_id "amr_f4yFZ2ptgStT3D1uCgAAAD0"]
[Thu Jul 30 08:38:39.462150 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/.env.local"] [unique_id "amr_f4yFZ2ptgStT3D1uCgAAAD0"]
[Thu Jul 30 08:38:39.462450 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.462549 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/.env.local"] [unique_id "amr_f4yFZ2ptgStT3D1uCgAAAD0"]
[Thu Jul 30 08:38:39.487822 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config/laravel.log"] [unique_id "amr_f_8233Hh3pbQWVey-QAAABU"]
[Thu Jul 30 08:38:39.488139 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/laravel.log"] [unique_id "amr_f_8233Hh3pbQWVey-QAAABU"]
[Thu Jul 30 08:38:39.488323 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.17:19930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/laravel.log"] [unique_id "amr_f_8233Hh3pbQWVey-QAAABU"]
[Thu Jul 30 08:38:39.499601 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apis/.env.production"] [unique_id "amr_f8VDgdzdvTL2t3Xx8QAAAB0"]
[Thu Jul 30 08:38:39.499769 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/.env.production"] [unique_id "amr_f8VDgdzdvTL2t3Xx8QAAAB0"]
[Thu Jul 30 08:38:39.500126 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.500265 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/.env.production"] [unique_id "amr_f8VDgdzdvTL2t3Xx8QAAAB0"]
[Thu Jul 30 08:38:39.535725 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46142] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apis/.env.staging"] [unique_id "amr_f8VDgdzdvTL2t3Xx8gAAAB0"]
[Thu Jul 30 08:38:39.535881 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/.env.staging"] [unique_id "amr_f8VDgdzdvTL2t3Xx8gAAAB0"]
[Thu Jul 30 08:38:39.536253 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.536368 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/.env.staging"] [unique_id "amr_f8VDgdzdvTL2t3Xx8gAAAB0"]
[Thu Jul 30 08:38:39.655776 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.655809 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.738853 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.738899 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.800826 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.800854 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.843845 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.843869 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.893678 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.893700 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.893801 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/frontend/.env"] [unique_id "amr_f3C-YQK8R8M_CPHr5AAAAAA"]
[Thu Jul 30 08:38:39.893935 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/frontend/.env"] [unique_id "amr_f3C-YQK8R8M_CPHr5AAAAAA"]
[Thu Jul 30 08:38:39.894049 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/frontend/.env"] [unique_id "amr_f3C-YQK8R8M_CPHr5AAAAAA"]
[Thu Jul 30 08:38:39.931375 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.931409 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.976230 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:39.976252 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.015962 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.015983 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.054806 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:4922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amr_gNe90y7TzMBvsyM2VQAAAC0"]
[Thu Jul 30 08:38:40.054947 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:4922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amr_gNe90y7TzMBvsyM2VQAAAC0"]
[Thu Jul 30 08:38:40.055130 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:4922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_gNe90y7TzMBvsyM2VQAAAC0"]
[Thu Jul 30 08:38:40.058427 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.058442 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.096323 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.096345 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.138128 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.138149 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.176356 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.176376 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.214977 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:46310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.215007 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:46310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.257282 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.257303 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.295643 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.295664 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.338813 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.338844 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.378772 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:46330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.378796 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:46330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.420009 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.420030 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.463229 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.463267 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.499323 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.499347 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.538328 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.538349 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.578220 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.578238 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.594209 2026] [ssl:error] [pid 2423250:tid 2423250] (EAI 2)Name or service not known: [client 144.76.19.72:51442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:40.594271 2026] [ssl:error] [pid 2423250:tid 2423250] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:40.616154 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.616179 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.651976 2026] [ssl:error] [pid 2427541:tid 2427541] (EAI 2)Name or service not known: [client 144.76.19.72:51446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:40.652002 2026] [ssl:error] [pid 2427541:tid 2427541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:40.664018 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.664035 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.702158 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:46362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.702191 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:46362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.739777 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.739799 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:46378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.778392 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.778416 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.824385 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.824405 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.849382 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/php.ini"] [unique_id "amr_gHC-YQK8R8M_CPHr8wAAAAA"]
[Thu Jul 30 08:38:40.849741 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/php.ini"] [unique_id "amr_gHC-YQK8R8M_CPHr8wAAAAA"]
[Thu Jul 30 08:38:40.849861 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.17:17864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app/php.ini"] [unique_id "amr_gHC-YQK8R8M_CPHr8wAAAAA"]
[Thu Jul 30 08:38:40.870356 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:46402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.870380 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:46402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.907463 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.907493 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.953672 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.953693 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.994276 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:40.994328 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.030554 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.030598 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.069511 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.069534 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.107819 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46464] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/apis/php.ini"] [unique_id "amr_gYyFZ2ptgStT3D1uEwAAAD0"]
[Thu Jul 30 08:38:41.108233 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apis/php.ini"] [unique_id "amr_gYyFZ2ptgStT3D1uEwAAAD0"]
[Thu Jul 30 08:38:41.108634 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.108781 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apis/php.ini"] [unique_id "amr_gYyFZ2ptgStT3D1uEwAAAD0"]
[Thu Jul 30 08:38:41.143404 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.143425 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.185306 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.185333 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.224289 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.224316 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.263834 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:46498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.263889 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:46498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.306821 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.306853 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.343722 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.343743 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.388903 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.388925 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.431469 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:46536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.431493 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:46536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.471669 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.471696 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.511930 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.511952 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.550183 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.550202 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.588157 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.588181 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.626732 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.626753 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.669891 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:46594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.669918 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:46594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.708203 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.708230 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.749510 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.749536 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.799349 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.799383 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.843201 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46636] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app-order-client/.env"] [unique_id "amr_gS8b8gP_SKt2Q6y8oQAAAD4"]
[Thu Jul 30 08:38:41.843334 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app-order-client/.env"] [unique_id "amr_gS8b8gP_SKt2Q6y8oQAAAD4"]
[Thu Jul 30 08:38:41.843685 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.843795 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46636] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app-order-client/.env"] [unique_id "amr_gS8b8gP_SKt2Q6y8oQAAAD4"]
[Thu Jul 30 08:38:41.883124 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/.env.bak"] [unique_id "amr_gfdbqxY4ll4IV_vwpgAAACE"]
[Thu Jul 30 08:38:41.883289 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/.env.bak"] [unique_id "amr_gfdbqxY4ll4IV_vwpgAAACE"]
[Thu Jul 30 08:38:41.883741 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.883894 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/.env.bak"] [unique_id "amr_gfdbqxY4ll4IV_vwpgAAACE"]
[Thu Jul 30 08:38:41.924276 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/.env.dev"] [unique_id "amr_gS7K7U7WHMW7oLBilwAAAEA"]
[Thu Jul 30 08:38:41.924437 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/.env.dev"] [unique_id "amr_gS7K7U7WHMW7oLBilwAAAEA"]
[Thu Jul 30 08:38:41.924825 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.925012 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/.env.dev"] [unique_id "amr_gS7K7U7WHMW7oLBilwAAAEA"]
[Thu Jul 30 08:38:41.964857 2026] [security2:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46676] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/.env.dist"] [unique_id "amr_gdHvAkE-gGmU-MkR1wAAAD8"]
[Thu Jul 30 08:38:41.965019 2026] [security2:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46676] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/.env.dist"] [unique_id "amr_gdHvAkE-gGmU-MkR1wAAAD8"]
[Thu Jul 30 08:38:41.965374 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:41.965496 2026] [security2:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46676] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/.env.dist"] [unique_id "amr_gdHvAkE-gGmU-MkR1wAAAD8"]
[Thu Jul 30 08:38:42.004490 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:46688] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/.env.test"] [unique_id "amr_gqCuPSoE0uFFzriAXAAAABY"]
[Thu Jul 30 08:38:42.004652 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:46688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/.env.test"] [unique_id "amr_gqCuPSoE0uFFzriAXAAAABY"]
[Thu Jul 30 08:38:42.004957 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:46688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.005076 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:46688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/.env.test"] [unique_id "amr_gqCuPSoE0uFFzriAXAAAABY"]
[Thu Jul 30 08:38:42.042374 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:46700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.042399 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:46700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.048294 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.17:19942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config/settings.inc"] [unique_id "amr_gkaECszrFSEr2smj_QAAADU"]
[Thu Jul 30 08:38:42.048578 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.17:19942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/settings.inc"] [unique_id "amr_gkaECszrFSEr2smj_QAAADU"]
[Thu Jul 30 08:38:42.048773 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.17:19942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/settings.inc"] [unique_id "amr_gkaECszrFSEr2smj_QAAADU"]
[Thu Jul 30 08:38:42.080919 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.080945 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:46708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.127357 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.127380 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:46720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.168077 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.168100 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.207837 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:46730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.207861 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:46730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.237428 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app1-static/.env"] [unique_id "amr_go0p-nZdMLHTbfTLXwAAAA4"]
[Thu Jul 30 08:38:42.237553 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app1-static/.env"] [unique_id "amr_go0p-nZdMLHTbfTLXwAAAA4"]
[Thu Jul 30 08:38:42.237686 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app1-static/.env"] [unique_id "amr_go0p-nZdMLHTbfTLXwAAAA4"]
[Thu Jul 30 08:38:42.258583 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:46732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.258602 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:46732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.258856 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app2-static/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYAAAAA4"]
[Thu Jul 30 08:38:42.258978 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app2-static/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYAAAAA4"]
[Thu Jul 30 08:38:42.259093 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app2-static/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYAAAAA4"]
[Thu Jul 30 08:38:42.292034 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app_dir/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYQAAAA4"]
[Thu Jul 30 08:38:42.292245 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app_dir/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYQAAAA4"]
[Thu Jul 30 08:38:42.292355 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app_dir/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYQAAAA4"]
[Thu Jul 30 08:38:42.306046 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.306082 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:46748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.315907 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYgAAAA4"]
[Thu Jul 30 08:38:42.316045 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYgAAAA4"]
[Thu Jul 30 08:38:42.316171 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_go0p-nZdMLHTbfTLYgAAAA4"]
[Thu Jul 30 08:38:42.335496 2026] [access_compat:error] [pid 2422886:tid 2422886] [client 106.215.157.145:12073] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:42.346980 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application.conf"] [unique_id "amr_go0p-nZdMLHTbfTLYwAAAA4"]
[Thu Jul 30 08:38:42.347278 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application.conf"] [unique_id "amr_go0p-nZdMLHTbfTLYwAAAA4"]
[Thu Jul 30 08:38:42.347384 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application.conf"] [unique_id "amr_go0p-nZdMLHTbfTLYwAAAA4"]
[Thu Jul 30 08:38:42.351623 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.351650 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.368427 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application/.env"] [unique_id "amr_go0p-nZdMLHTbfTLZAAAAA4"]
[Thu Jul 30 08:38:42.368576 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application/.env"] [unique_id "amr_go0p-nZdMLHTbfTLZAAAAA4"]
[Thu Jul 30 08:38:42.368671 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application/.env"] [unique_id "amr_go0p-nZdMLHTbfTLZAAAAA4"]
[Thu Jul 30 08:38:42.393236 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application/configs/application.ini"] [unique_id "amr_go0p-nZdMLHTbfTLZQAAAA4"]
[Thu Jul 30 08:38:42.393520 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application/configs/application.ini"] [unique_id "amr_go0p-nZdMLHTbfTLZQAAAA4"]
[Thu Jul 30 08:38:42.393630 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/application/configs/application.ini"] [unique_id "amr_go0p-nZdMLHTbfTLZQAAAA4"]
[Thu Jul 30 08:38:42.393961 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46770] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/client/.env"] [unique_id "amr_gtzyF_5LOsrbx7vNvwAAACU"]
[Thu Jul 30 08:38:42.394209 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/client/.env"] [unique_id "amr_gtzyF_5LOsrbx7vNvwAAACU"]
[Thu Jul 30 08:38:42.394545 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.394685 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/client/.env"] [unique_id "amr_gtzyF_5LOsrbx7vNvwAAACU"]
[Thu Jul 30 08:38:42.432269 2026] [security2:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46780] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_gttL74OMwWkcS1bnoQAAADw"]
[Thu Jul 30 08:38:42.432403 2026] [security2:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46780] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_gttL74OMwWkcS1bnoQAAADw"]
[Thu Jul 30 08:38:42.432753 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.432864 2026] [security2:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46780] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amr_gttL74OMwWkcS1bnoQAAADw"]
[Thu Jul 30 08:38:42.469913 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.469936 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.503685 2026] [authz_core:error] [pid 2424224:tid 2424224] [client 57.141.0.37:59362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:42.504370 2026] [authz_core:error] [pid 2424224:tid 2424224] [client 57.141.0.37:59362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:42.510307 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.510340 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.516125 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apps/client/.env"] [unique_id "amr_go0p-nZdMLHTbfTLZwAAAA4"]
[Thu Jul 30 08:38:42.516258 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apps/client/.env"] [unique_id "amr_go0p-nZdMLHTbfTLZwAAAA4"]
[Thu Jul 30 08:38:42.516364 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/apps/client/.env"] [unique_id "amr_go0p-nZdMLHTbfTLZwAAAA4"]
[Thu Jul 30 08:38:42.559619 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.559656 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.598423 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.598465 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.599608 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/asset_img/.env"] [unique_id "amr_go0p-nZdMLHTbfTLaQAAAA4"]
[Thu Jul 30 08:38:42.599785 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/asset_img/.env"] [unique_id "amr_go0p-nZdMLHTbfTLaQAAAA4"]
[Thu Jul 30 08:38:42.599904 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/asset_img/.env"] [unique_id "amr_go0p-nZdMLHTbfTLaQAAAA4"]
[Thu Jul 30 08:38:42.637255 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.637282 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:46814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.676612 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:46818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.676643 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:46818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.713183 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46830] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/config/dev/.env"] [unique_id "amr_guWvknE5emN3ObPc3gAAACc"]
[Thu Jul 30 08:38:42.713416 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/config/dev/.env"] [unique_id "amr_guWvknE5emN3ObPc3gAAACc"]
[Thu Jul 30 08:38:42.713818 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.713980 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/config/dev/.env"] [unique_id "amr_guWvknE5emN3ObPc3gAAACc"]
[Thu Jul 30 08:38:42.758790 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.758827 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.801714 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.801746 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:46844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.839558 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.839599 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:46846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.851124 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/audio/.env"] [unique_id "amr_go0p-nZdMLHTbfTLbgAAAA4"]
[Thu Jul 30 08:38:42.851284 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/audio/.env"] [unique_id "amr_go0p-nZdMLHTbfTLbgAAAA4"]
[Thu Jul 30 08:38:42.851384 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/audio/.env"] [unique_id "amr_go0p-nZdMLHTbfTLbgAAAA4"]
[Thu Jul 30 08:38:42.881027 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46856] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/config/parameters.yml"] [unique_id "amr_guWvknE5emN3ObPc3wAAACc"]
[Thu Jul 30 08:38:42.881243 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/config/parameters.yml"] [unique_id "amr_guWvknE5emN3ObPc3wAAACc"]
[Thu Jul 30 08:38:42.881579 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.881709 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/config/parameters.yml"] [unique_id "amr_guWvknE5emN3ObPc3wAAACc"]
[Thu Jul 30 08:38:42.923756 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.923789 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.953735 2026] [authz_core:error] [pid 2427541:tid 2427541] [client 57.141.0.69:32488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:42.954419 2026] [authz_core:error] [pid 2427541:tid 2427541] [client 57.141.0.69:32488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:42.962270 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:42.962292 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.000900 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:46888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.000925 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:46888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.001753 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.17:19942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/config/web.config"] [unique_id "amr_g0aECszrFSEr2smkIAAAADU"]
[Thu Jul 30 08:38:43.001951 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.17:19942] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /config/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/config/web.config"] [unique_id "amr_g0aECszrFSEr2smkIAAAADU"]
[Thu Jul 30 08:38:43.002085 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.17:19942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/config/web.config"] [unique_id "amr_g0aECszrFSEr2smkIAAAADU"]
[Thu Jul 30 08:38:43.002265 2026] [security2:error] [pid 2426053:tid 2426053] [client 185.177.72.17:19942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/config/web.config"] [unique_id "amr_g0aECszrFSEr2smkIAAAADU"]
[Thu Jul 30 08:38:43.043282 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:46904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.043306 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:46904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.082156 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.082184 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:46920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.123101 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.123127 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:46932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.163318 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:46946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.163350 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:46946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.196539 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /configuration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/configuration/.env"] [unique_id "amr_g0QvuHxPljPWrXhqMAAAAC4"]
[Thu Jul 30 08:38:43.196695 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/configuration/.env"] [unique_id "amr_g0QvuHxPljPWrXhqMAAAAC4"]
[Thu Jul 30 08:38:43.196892 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/configuration/.env"] [unique_id "amr_g0QvuHxPljPWrXhqMAAAAC4"]
[Thu Jul 30 08:38:43.202234 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.202257 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:46960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.241540 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.241579 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:46972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.252898 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /configuration/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/configuration/.git/config"] [unique_id "amr_g0QvuHxPljPWrXhqMgAAAC4"]
[Thu Jul 30 08:38:43.253058 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/configuration/.git/config"] [unique_id "amr_g0QvuHxPljPWrXhqMgAAAC4"]
[Thu Jul 30 08:38:43.253284 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/configuration/.git/config"] [unique_id "amr_g0QvuHxPljPWrXhqMgAAAC4"]
[Thu Jul 30 08:38:43.292279 2026] [core:error] [pid 2415708:tid 2415708] [client 185.177.72.66:46986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.292308 2026] [core:error] [pid 2415708:tid 2415708] [client 185.177.72.66:46986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.330740 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.330767 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:46992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.376079 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.376104 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.380210 2026] [core:error] [pid 2423370:tid 2423370] (13)Permission denied: [client 216.73.216.199:49220] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-256/objects_partial
[Thu Jul 30 08:38:43.398213 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_g0QvuHxPljPWrXhqNwAAAC4"]
[Thu Jul 30 08:38:43.398512 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_g0QvuHxPljPWrXhqNwAAAC4"]
[Thu Jul 30 08:38:43.398712 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_g0QvuHxPljPWrXhqNwAAAC4"]
[Thu Jul 30 08:38:43.415898 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:47004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.415920 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:47004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.416719 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/configuration/api-config.ini"] [unique_id "amr_g0QvuHxPljPWrXhqOAAAAC4"]
[Thu Jul 30 08:38:43.416992 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/configuration/api-config.ini"] [unique_id "amr_g0QvuHxPljPWrXhqOAAAAC4"]
[Thu Jul 30 08:38:43.417193 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/configuration/api-config.ini"] [unique_id "amr_g0QvuHxPljPWrXhqOAAAAC4"]
[Thu Jul 30 08:38:43.461024 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:47014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.461052 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:47014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.477799 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/configuration/laravel.log"] [unique_id "amr_g0QvuHxPljPWrXhqOwAAAC4"]
[Thu Jul 30 08:38:43.478153 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/configuration/laravel.log"] [unique_id "amr_g0QvuHxPljPWrXhqOwAAAC4"]
[Thu Jul 30 08:38:43.478356 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/configuration/laravel.log"] [unique_id "amr_g0QvuHxPljPWrXhqOwAAAC4"]
[Thu Jul 30 08:38:43.503718 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app/frontend/.env"] [unique_id "amr_g9GWH5xbt04huX6WMgAAABA"]
[Thu Jul 30 08:38:43.503863 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/frontend/.env"] [unique_id "amr_g9GWH5xbt04huX6WMgAAABA"]
[Thu Jul 30 08:38:43.504226 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.504337 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/frontend/.env"] [unique_id "amr_g9GWH5xbt04huX6WMgAAABA"]
[Thu Jul 30 08:38:43.544810 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.544831 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.545130 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/configuration/web.config"] [unique_id "amr_g0QvuHxPljPWrXhqPgAAAC4"]
[Thu Jul 30 08:38:43.545329 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /configuration/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/configuration/web.config"] [unique_id "amr_g0QvuHxPljPWrXhqPgAAAC4"]
[Thu Jul 30 08:38:43.545449 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/configuration/web.config"] [unique_id "amr_g0QvuHxPljPWrXhqPgAAAC4"]
[Thu Jul 30 08:38:43.545646 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/configuration/web.config"] [unique_id "amr_g0QvuHxPljPWrXhqPgAAAC4"]
[Thu Jul 30 08:38:43.592867 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:47042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.592888 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:47042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.629189 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:47052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.629213 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:47052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.668608 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.668632 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.704372 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/awstats/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfAAAAA4"]
[Thu Jul 30 08:38:43.704497 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/awstats/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfAAAAA4"]
[Thu Jul 30 08:38:43.704617 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/awstats/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfAAAAA4"]
[Thu Jul 30 08:38:43.711581 2026] [ssl:error] [pid 2426053:tid 2426053] (EAI 2)Name or service not known: [client 144.76.19.72:51462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:43.711608 2026] [ssl:error] [pid 2426053:tid 2426053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:43.712477 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.712496 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.738115 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conta/.env"] [unique_id "amr_g0QvuHxPljPWrXhqRgAAAC4"]
[Thu Jul 30 08:38:43.738233 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conta/.env"] [unique_id "amr_g0QvuHxPljPWrXhqRgAAAC4"]
[Thu Jul 30 08:38:43.738402 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conta/.env"] [unique_id "amr_g0QvuHxPljPWrXhqRgAAAC4"]
[Thu Jul 30 08:38:43.752151 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.752178 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.769655 2026] [ssl:error] [pid 2427777:tid 2427777] (EAI 2)Name or service not known: [client 144.76.19.72:51472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:43.769677 2026] [ssl:error] [pid 2427777:tid 2427777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:43.790185 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /conta/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conta/.git/config"] [unique_id "amr_g0QvuHxPljPWrXhqSAAAAC4"]
[Thu Jul 30 08:38:43.790347 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conta/.git/config"] [unique_id "amr_g0QvuHxPljPWrXhqSAAAAC4"]
[Thu Jul 30 08:38:43.790534 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conta/.git/config"] [unique_id "amr_g0QvuHxPljPWrXhqSAAAAC4"]
[Thu Jul 30 08:38:43.796953 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:47100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.796979 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:47100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.803327 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfgAAAA4"]
[Thu Jul 30 08:38:43.803513 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfgAAAA4"]
[Thu Jul 30 08:38:43.803626 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfgAAAA4"]
[Thu Jul 30 08:38:43.825442 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfwAAAA4"]
[Thu Jul 30 08:38:43.825637 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfwAAAA4"]
[Thu Jul 30 08:38:43.825761 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_g40p-nZdMLHTbfTLfwAAAA4"]
[Thu Jul 30 08:38:43.840400 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.840417 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.842012 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgAAAAA4"]
[Thu Jul 30 08:38:43.842153 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgAAAAA4"]
[Thu Jul 30 08:38:43.842251 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgAAAAA4"]
[Thu Jul 30 08:38:43.868123 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgQAAAA4"]
[Thu Jul 30 08:38:43.868243 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgQAAAA4"]
[Thu Jul 30 08:38:43.868339 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgQAAAA4"]
[Thu Jul 30 08:38:43.878650 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.878670 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.889904 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_g40p-nZdMLHTbfTLggAAAA4"]
[Thu Jul 30 08:38:43.890043 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_g40p-nZdMLHTbfTLggAAAA4"]
[Thu Jul 30 08:38:43.890159 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_g40p-nZdMLHTbfTLggAAAA4"]
[Thu Jul 30 08:38:43.912852 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgwAAAA4"]
[Thu Jul 30 08:38:43.912981 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgwAAAA4"]
[Thu Jul 30 08:38:43.913107 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_g40p-nZdMLHTbfTLgwAAAA4"]
[Thu Jul 30 08:38:43.917451 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:47126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.917468 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:47126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.937550 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_g40p-nZdMLHTbfTLhAAAAA4"]
[Thu Jul 30 08:38:43.937706 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_g40p-nZdMLHTbfTLhAAAAA4"]
[Thu Jul 30 08:38:43.937804 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_g40p-nZdMLHTbfTLhAAAAA4"]
[Thu Jul 30 08:38:43.937896 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_g0QvuHxPljPWrXhqTQAAAC4"]
[Thu Jul 30 08:38:43.938292 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_g0QvuHxPljPWrXhqTQAAAC4"]
[Thu Jul 30 08:38:43.938519 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_g0QvuHxPljPWrXhqTQAAAC4"]
[Thu Jul 30 08:38:43.954903 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.954923 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.962713 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back-end/app/.env"] [unique_id "amr_g40p-nZdMLHTbfTLhQAAAA4"]
[Thu Jul 30 08:38:43.962856 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back-end/app/.env"] [unique_id "amr_g40p-nZdMLHTbfTLhQAAAA4"]
[Thu Jul 30 08:38:43.962970 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back-end/app/.env"] [unique_id "amr_g40p-nZdMLHTbfTLhQAAAA4"]
[Thu Jul 30 08:38:43.972937 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/conta/api-config.ini"] [unique_id "amr_g0QvuHxPljPWrXhqTgAAAC4"]
[Thu Jul 30 08:38:43.973256 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conta/api-config.ini"] [unique_id "amr_g0QvuHxPljPWrXhqTgAAAC4"]
[Thu Jul 30 08:38:43.973467 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conta/api-config.ini"] [unique_id "amr_g0QvuHxPljPWrXhqTgAAAC4"]
[Thu Jul 30 08:38:43.993277 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:47142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.993295 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:47142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:43.997746 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.bak"] [unique_id "amr_g40p-nZdMLHTbfTLhgAAAA4"]
[Thu Jul 30 08:38:43.997878 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.bak"] [unique_id "amr_g40p-nZdMLHTbfTLhgAAAA4"]
[Thu Jul 30 08:38:43.997978 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.bak"] [unique_id "amr_g40p-nZdMLHTbfTLhgAAAA4"]
[Thu Jul 30 08:38:44.017999 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.dev"] [unique_id "amr_hI0p-nZdMLHTbfTLhwAAAA4"]
[Thu Jul 30 08:38:44.018158 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.dev"] [unique_id "amr_hI0p-nZdMLHTbfTLhwAAAA4"]
[Thu Jul 30 08:38:44.018260 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.dev"] [unique_id "amr_hI0p-nZdMLHTbfTLhwAAAA4"]
[Thu Jul 30 08:38:44.031808 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:47150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.031839 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:47150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.038499 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.dist"] [unique_id "amr_hI0p-nZdMLHTbfTLiAAAAA4"]
[Thu Jul 30 08:38:44.038630 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.dist"] [unique_id "amr_hI0p-nZdMLHTbfTLiAAAAA4"]
[Thu Jul 30 08:38:44.038725 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/.env.dist"] [unique_id "amr_hI0p-nZdMLHTbfTLiAAAAA4"]
[Thu Jul 30 08:38:44.060186 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/conta/laravel.log"] [unique_id "amr_hEQvuHxPljPWrXhqUQAAAC4"]
[Thu Jul 30 08:38:44.060456 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conta/laravel.log"] [unique_id "amr_hEQvuHxPljPWrXhqUQAAAC4"]
[Thu Jul 30 08:38:44.060637 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conta/laravel.log"] [unique_id "amr_hEQvuHxPljPWrXhqUQAAAC4"]
[Thu Jul 30 08:38:44.069846 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:47154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.071665 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:47154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.114351 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47164] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/app/php.ini"] [unique_id "amr_hNzyF_5LOsrbx7vNxQAAACU"]
[Thu Jul 30 08:38:44.114653 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app/php.ini"] [unique_id "amr_hNzyF_5LOsrbx7vNxQAAACU"]
[Thu Jul 30 08:38:44.114953 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.115055 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:47164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app/php.ini"] [unique_id "amr_hNzyF_5LOsrbx7vNxQAAACU"]
[Thu Jul 30 08:38:44.140295 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/conta/web.config"] [unique_id "amr_hEQvuHxPljPWrXhqVAAAAC4"]
[Thu Jul 30 08:38:44.140516 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /conta/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/conta/web.config"] [unique_id "amr_hEQvuHxPljPWrXhqVAAAAC4"]
[Thu Jul 30 08:38:44.140663 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/conta/web.config"] [unique_id "amr_hEQvuHxPljPWrXhqVAAAAC4"]
[Thu Jul 30 08:38:44.140851 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/conta/web.config"] [unique_id "amr_hEQvuHxPljPWrXhqVAAAAC4"]
[Thu Jul 30 08:38:44.149130 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:47176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.149148 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:47176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.158812 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/content/.env"] [unique_id "amr_hEQvuHxPljPWrXhqVQAAAC4"]
[Thu Jul 30 08:38:44.158924 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/content/.env"] [unique_id "amr_hEQvuHxPljPWrXhqVQAAAC4"]
[Thu Jul 30 08:38:44.159111 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/content/.env"] [unique_id "amr_hEQvuHxPljPWrXhqVQAAAC4"]
[Thu Jul 30 08:38:44.185474 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.185498 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.221014 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:47190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.221039 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:47190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.255784 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.255803 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.297523 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:47212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.297543 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:47212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.307535 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/core/persistence/.env"] [unique_id "amr_hEQvuHxPljPWrXhqWwAAAC4"]
[Thu Jul 30 08:38:44.307703 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/core/persistence/.env"] [unique_id "amr_hEQvuHxPljPWrXhqWwAAAC4"]
[Thu Jul 30 08:38:44.307879 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/core/persistence/.env"] [unique_id "amr_hEQvuHxPljPWrXhqWwAAAC4"]
[Thu Jul 30 08:38:44.336724 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:47220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.336759 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:47220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.376979 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.377000 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.416027 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_hEQvuHxPljPWrXhqXwAAAC4"]
[Thu Jul 30 08:38:44.416225 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_hEQvuHxPljPWrXhqXwAAAC4"]
[Thu Jul 30 08:38:44.416458 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_hEQvuHxPljPWrXhqXwAAAC4"]
[Thu Jul 30 08:38:44.416672 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:47236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.416693 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:47236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.447422 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/counterblockd/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYAAAAC4"]
[Thu Jul 30 08:38:44.447625 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/counterblockd/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYAAAAC4"]
[Thu Jul 30 08:38:44.447838 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/counterblockd/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYAAAAC4"]
[Thu Jul 30 08:38:44.457212 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.458500 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.469870 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/counterwallet/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYQAAAC4"]
[Thu Jul 30 08:38:44.470018 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/counterwallet/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYQAAAC4"]
[Thu Jul 30 08:38:44.470226 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/counterwallet/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYQAAAC4"]
[Thu Jul 30 08:38:44.497521 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:47262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.497542 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:47262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.502647 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cp/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYgAAAC4"]
[Thu Jul 30 08:38:44.502781 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cp/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYgAAAC4"]
[Thu Jul 30 08:38:44.502963 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cp/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYgAAAC4"]
[Thu Jul 30 08:38:44.527144 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/crm/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYwAAAC4"]
[Thu Jul 30 08:38:44.527273 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYwAAAC4"]
[Thu Jul 30 08:38:44.527450 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/.env"] [unique_id "amr_hEQvuHxPljPWrXhqYwAAAC4"]
[Thu Jul 30 08:38:44.534009 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.534031 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.552402 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.bak"] [unique_id "amr_hEQvuHxPljPWrXhqZAAAAC4"]
[Thu Jul 30 08:38:44.552557 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.bak"] [unique_id "amr_hEQvuHxPljPWrXhqZAAAAC4"]
[Thu Jul 30 08:38:44.552770 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.bak"] [unique_id "amr_hEQvuHxPljPWrXhqZAAAAC4"]
[Thu Jul 30 08:38:44.570748 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:47282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.570773 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:47282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.572325 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.dev"] [unique_id "amr_hEQvuHxPljPWrXhqZQAAAC4"]
[Thu Jul 30 08:38:44.572471 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.dev"] [unique_id "amr_hEQvuHxPljPWrXhqZQAAAC4"]
[Thu Jul 30 08:38:44.572654 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.dev"] [unique_id "amr_hEQvuHxPljPWrXhqZQAAAC4"]
[Thu Jul 30 08:38:44.590548 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.dist"] [unique_id "amr_hEQvuHxPljPWrXhqZgAAAC4"]
[Thu Jul 30 08:38:44.590686 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.dist"] [unique_id "amr_hEQvuHxPljPWrXhqZgAAAC4"]
[Thu Jul 30 08:38:44.590867 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.dist"] [unique_id "amr_hEQvuHxPljPWrXhqZgAAAC4"]
[Thu Jul 30 08:38:44.610302 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.610321 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.617328 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.local"] [unique_id "amr_hEQvuHxPljPWrXhqZwAAAC4"]
[Thu Jul 30 08:38:44.617455 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.local"] [unique_id "amr_hEQvuHxPljPWrXhqZwAAAC4"]
[Thu Jul 30 08:38:44.617635 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.local"] [unique_id "amr_hEQvuHxPljPWrXhqZwAAAC4"]
[Thu Jul 30 08:38:44.643856 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.production"] [unique_id "amr_hEQvuHxPljPWrXhqaAAAAC4"]
[Thu Jul 30 08:38:44.644036 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.production"] [unique_id "amr_hEQvuHxPljPWrXhqaAAAAC4"]
[Thu Jul 30 08:38:44.644246 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.production"] [unique_id "amr_hEQvuHxPljPWrXhqaAAAAC4"]
[Thu Jul 30 08:38:44.646474 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.646491 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.667181 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.staging"] [unique_id "amr_hEQvuHxPljPWrXhqaQAAAC4"]
[Thu Jul 30 08:38:44.667323 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.staging"] [unique_id "amr_hEQvuHxPljPWrXhqaQAAAC4"]
[Thu Jul 30 08:38:44.667496 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/.env.staging"] [unique_id "amr_hEQvuHxPljPWrXhqaQAAAC4"]
[Thu Jul 30 08:38:44.680220 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.680241 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.719542 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.719575 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.756996 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.757017 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.792439 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.792457 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.834489 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.834508 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.872413 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47352] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app1-static/.env"] [unique_id "amr_hENn3uvyljca7F0u5AAAADI"]
[Thu Jul 30 08:38:44.872534 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app1-static/.env"] [unique_id "amr_hENn3uvyljca7F0u5AAAADI"]
[Thu Jul 30 08:38:44.872854 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.872960 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app1-static/.env"] [unique_id "amr_hENn3uvyljca7F0u5AAAADI"]
[Thu Jul 30 08:38:44.908671 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app2-static/.env"] [unique_id "amr_hENn3uvyljca7F0u5QAAADI"]
[Thu Jul 30 08:38:44.908793 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app2-static/.env"] [unique_id "amr_hENn3uvyljca7F0u5QAAADI"]
[Thu Jul 30 08:38:44.909105 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.909205 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app2-static/.env"] [unique_id "amr_hENn3uvyljca7F0u5QAAADI"]
[Thu Jul 30 08:38:44.947025 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47378] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app_dir/.env"] [unique_id "amr_hNGWH5xbt04huX6WOQAAABA"]
[Thu Jul 30 08:38:44.947188 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app_dir/.env"] [unique_id "amr_hNGWH5xbt04huX6WOQAAABA"]
[Thu Jul 30 08:38:44.947528 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.947648 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:47378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app_dir/.env"] [unique_id "amr_hNGWH5xbt04huX6WOQAAABA"]
[Thu Jul 30 08:38:44.990523 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47392] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_hENn3uvyljca7F0u5gAAADI"]
[Thu Jul 30 08:38:44.990671 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_hENn3uvyljca7F0u5gAAADI"]
[Thu Jul 30 08:38:44.990974 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:44.991091 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/app_nginx_static_path/.env"] [unique_id "amr_hENn3uvyljca7F0u5gAAADI"]
[Thu Jul 30 08:38:45.031322 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:47398] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/application.conf"] [unique_id "amr_hRpvfcvm04JnKtSVZgAAAA8"]
[Thu Jul 30 08:38:45.031614 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:47398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/application.conf"] [unique_id "amr_hRpvfcvm04JnKtSVZgAAAA8"]
[Thu Jul 30 08:38:45.031919 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:47398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.032029 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:47398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/application.conf"] [unique_id "amr_hRpvfcvm04JnKtSVZgAAAA8"]
[Thu Jul 30 08:38:45.067825 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47404] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/application/.env"] [unique_id "amr_hUNn3uvyljca7F0u5wAAADI"]
[Thu Jul 30 08:38:45.067975 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/application/.env"] [unique_id "amr_hUNn3uvyljca7F0u5wAAADI"]
[Thu Jul 30 08:38:45.068304 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.068410 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47404] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/application/.env"] [unique_id "amr_hUNn3uvyljca7F0u5wAAADI"]
[Thu Jul 30 08:38:45.125366 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47408] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/application/configs/application.ini"] [unique_id "amr_hUNn3uvyljca7F0u6AAAADI"]
[Thu Jul 30 08:38:45.125659 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/application/configs/application.ini"] [unique_id "amr_hUNn3uvyljca7F0u6AAAADI"]
[Thu Jul 30 08:38:45.125965 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.126076 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/application/configs/application.ini"] [unique_id "amr_hUNn3uvyljca7F0u6AAAADI"]
[Thu Jul 30 08:38:45.163753 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.163779 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.202830 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47422] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/apps/client/.env"] [unique_id "amr_hV1wVBXySt5JIbAFMgAAABE"]
[Thu Jul 30 08:38:45.203058 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47422] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/apps/client/.env"] [unique_id "amr_hV1wVBXySt5JIbAFMgAAABE"]
[Thu Jul 30 08:38:45.203411 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.203575 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47422] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/apps/client/.env"] [unique_id "amr_hV1wVBXySt5JIbAFMgAAABE"]
[Thu Jul 30 08:38:45.240432 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.240460 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.309245 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47436] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/asset_img/.env"] [unique_id "amr_hV1wVBXySt5JIbAFNQAAABE"]
[Thu Jul 30 08:38:45.309369 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/asset_img/.env"] [unique_id "amr_hV1wVBXySt5JIbAFNQAAABE"]
[Thu Jul 30 08:38:45.309695 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.309796 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/asset_img/.env"] [unique_id "amr_hV1wVBXySt5JIbAFNQAAABE"]
[Thu Jul 30 08:38:45.353266 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.353285 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.403914 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.403951 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.444301 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.444330 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.483626 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.483652 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.522466 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/audio/.env"] [unique_id "amr_hV1wVBXySt5JIbAFOgAAABE"]
[Thu Jul 30 08:38:45.522697 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/audio/.env"] [unique_id "amr_hV1wVBXySt5JIbAFOgAAABE"]
[Thu Jul 30 08:38:45.523058 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.523201 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/audio/.env"] [unique_id "amr_hV1wVBXySt5JIbAFOgAAABE"]
[Thu Jul 30 08:38:45.560595 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.560619 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:47498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.589627 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/crm/php.ini"] [unique_id "amr_hUQvuHxPljPWrXhqjAAAAC4"]
[Thu Jul 30 08:38:45.589910 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/crm/php.ini"] [unique_id "amr_hUQvuHxPljPWrXhqjAAAAC4"]
[Thu Jul 30 08:38:45.590123 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/crm/php.ini"] [unique_id "amr_hUQvuHxPljPWrXhqjAAAAC4"]
[Thu Jul 30 08:38:45.600606 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.600637 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.643604 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.643633 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.705959 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.705983 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.743218 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.743236 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:33188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.788062 2026] [core:error] [pid 2423370:tid 2423370] (13)Permission denied: [client 216.73.216.199:49220] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/total_objects
[Thu Jul 30 08:38:45.804820 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:33194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.804842 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:33194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.852491 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:33204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.852525 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:33204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.922673 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:33212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.922718 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:33212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.974647 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:33214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:45.974666 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:33214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.010674 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:33230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.010707 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:33230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.052530 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:33246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.052572 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:33246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.155373 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.bak"] [unique_id "amr_hkQvuHxPljPWrXhqoQAAAC4"]
[Thu Jul 30 08:38:46.155599 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.bak"] [unique_id "amr_hkQvuHxPljPWrXhqoQAAAC4"]
[Thu Jul 30 08:38:46.155844 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.bak"] [unique_id "amr_hkQvuHxPljPWrXhqoQAAAC4"]
[Thu Jul 30 08:38:46.155958 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:33248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.155982 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:33248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.176315 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.dev"] [unique_id "amr_hkQvuHxPljPWrXhqogAAAC4"]
[Thu Jul 30 08:38:46.176459 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.dev"] [unique_id "amr_hkQvuHxPljPWrXhqogAAAC4"]
[Thu Jul 30 08:38:46.176644 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.dev"] [unique_id "amr_hkQvuHxPljPWrXhqogAAAC4"]
[Thu Jul 30 08:38:46.200188 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.dist"] [unique_id "amr_hkQvuHxPljPWrXhqowAAAC4"]
[Thu Jul 30 08:38:46.200334 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.dist"] [unique_id "amr_hkQvuHxPljPWrXhqowAAAC4"]
[Thu Jul 30 08:38:46.200520 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.dist"] [unique_id "amr_hkQvuHxPljPWrXhqowAAAC4"]
[Thu Jul 30 08:38:46.239677 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.local"] [unique_id "amr_hkQvuHxPljPWrXhqpAAAAC4"]
[Thu Jul 30 08:38:46.239847 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.local"] [unique_id "amr_hkQvuHxPljPWrXhqpAAAAC4"]
[Thu Jul 30 08:38:46.240031 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.local"] [unique_id "amr_hkQvuHxPljPWrXhqpAAAAC4"]
[Thu Jul 30 08:38:46.243711 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/php.ini"] [unique_id "amr_ho0p-nZdMLHTbfTLqwAAAA4"]
[Thu Jul 30 08:38:46.243997 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/php.ini"] [unique_id "amr_ho0p-nZdMLHTbfTLqwAAAA4"]
[Thu Jul 30 08:38:46.244113 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/back/php.ini"] [unique_id "amr_ho0p-nZdMLHTbfTLqwAAAA4"]
[Thu Jul 30 08:38:46.261985 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.production"] [unique_id "amr_hkQvuHxPljPWrXhqpQAAAC4"]
[Thu Jul 30 08:38:46.262111 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.production"] [unique_id "amr_hkQvuHxPljPWrXhqpQAAAC4"]
[Thu Jul 30 08:38:46.262277 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.production"] [unique_id "amr_hkQvuHxPljPWrXhqpQAAAC4"]
[Thu Jul 30 08:38:46.293899 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.staging"] [unique_id "amr_hkQvuHxPljPWrXhqpgAAAC4"]
[Thu Jul 30 08:38:46.294049 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.staging"] [unique_id "amr_hkQvuHxPljPWrXhqpgAAAC4"]
[Thu Jul 30 08:38:46.294252 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cron/.env.staging"] [unique_id "amr_hkQvuHxPljPWrXhqpgAAAC4"]
[Thu Jul 30 08:38:46.351855 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:33254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.351876 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:33254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.546276 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33256] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/awstats/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uHQAAAD0"]
[Thu Jul 30 08:38:46.546400 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/awstats/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uHQAAAD0"]
[Thu Jul 30 08:38:46.546719 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.546821 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/awstats/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uHQAAAD0"]
[Thu Jul 30 08:38:46.610328 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.610351 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.647453 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uIAAAAD0"]
[Thu Jul 30 08:38:46.647620 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uIAAAAD0"]
[Thu Jul 30 08:38:46.647928 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.648027 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uIAAAAD0"]
[Thu Jul 30 08:38:46.686901 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33274] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uIQAAAD0"]
[Thu Jul 30 08:38:46.687061 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uIQAAAD0"]
[Thu Jul 30 08:38:46.687434 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.687536 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amr_hoyFZ2ptgStT3D1uIQAAAD0"]
[Thu Jul 30 08:38:46.723381 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:33282] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_hm101zDj_5UEQFMW-QAAAAs"]
[Thu Jul 30 08:38:46.723635 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:33282] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_hm101zDj_5UEQFMW-QAAAAs"]
[Thu Jul 30 08:38:46.723991 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:33282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:46.724144 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:33282] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amr_hm101zDj_5UEQFMW-QAAAAs"]
[Thu Jul 30 08:38:46.994053 2026] [core:error] [pid 2423370:tid 2423370] (13)Permission denied: [client 216.73.216.199:49220] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/total_objects
[Thu Jul 30 08:38:47.023090 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:33296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_h3iGnV0lYiYXbxD-ZAAAACI"]
[Thu Jul 30 08:38:47.023257 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:33296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_h3iGnV0lYiYXbxD-ZAAAACI"]
[Thu Jul 30 08:38:47.023614 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:33296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.023731 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:33296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amr_h3iGnV0lYiYXbxD-ZAAAACI"]
[Thu Jul 30 08:38:47.058874 2026] [ssl:error] [pid 2427542:tid 2427542] (EAI 2)Name or service not known: [client 144.76.19.72:51482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:47.058907 2026] [ssl:error] [pid 2427542:tid 2427542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:47.136647 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33312] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_h3C-YQK8R8M_CPHsCAAAAAA"]
[Thu Jul 30 08:38:47.136787 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_h3C-YQK8R8M_CPHsCAAAAAA"]
[Thu Jul 30 08:38:47.137159 2026] [core:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.137295 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amr_h3C-YQK8R8M_CPHsCAAAAAA"]
[Thu Jul 30 08:38:47.190765 2026] [ssl:error] [pid 2428311:tid 2428311] (EAI 2)Name or service not known: [client 144.76.19.72:51488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:47.190803 2026] [ssl:error] [pid 2428311:tid 2428311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:47.194230 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33314] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_h5kA2-P0e5yhCnL_QAAAAAI"]
[Thu Jul 30 08:38:47.194447 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_h5kA2-P0e5yhCnL_QAAAAAI"]
[Thu Jul 30 08:38:47.194787 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.194905 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amr_h5kA2-P0e5yhCnL_QAAAAAI"]
[Thu Jul 30 08:38:47.230906 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33326] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_h8TyHJeh8MEeCqDRSgAAAEQ"]
[Thu Jul 30 08:38:47.231131 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_h8TyHJeh8MEeCqDRSgAAAEQ"]
[Thu Jul 30 08:38:47.231521 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.231678 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amr_h8TyHJeh8MEeCqDRSgAAAEQ"]
[Thu Jul 30 08:38:47.231943 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/cron/php.ini"] [unique_id "amr_h0QvuHxPljPWrXhqyQAAAC4"]
[Thu Jul 30 08:38:47.232312 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cron/php.ini"] [unique_id "amr_h0QvuHxPljPWrXhqyQAAAC4"]
[Thu Jul 30 08:38:47.232539 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cron/php.ini"] [unique_id "amr_h0QvuHxPljPWrXhqyQAAAC4"]
[Thu Jul 30 08:38:47.267777 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:33334] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/back-end/app/.env"] [unique_id "amr_hwa8D6A_YxuMgpmdfAAAAEU"]
[Thu Jul 30 08:38:47.267991 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:33334] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/back-end/app/.env"] [unique_id "amr_hwa8D6A_YxuMgpmdfAAAAEU"]
[Thu Jul 30 08:38:47.268389 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:33334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.268528 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:33334] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/back-end/app/.env"] [unique_id "amr_hwa8D6A_YxuMgpmdfAAAAEU"]
[Thu Jul 30 08:38:47.309455 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/back/.env.bak"] [unique_id "amr_hxaJ6AWJ3ghWLIo2iQAAAEM"]
[Thu Jul 30 08:38:47.309616 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/back/.env.bak"] [unique_id "amr_hxaJ6AWJ3ghWLIo2iQAAAEM"]
[Thu Jul 30 08:38:47.310015 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.310164 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/back/.env.bak"] [unique_id "amr_hxaJ6AWJ3ghWLIo2iQAAAEM"]
[Thu Jul 30 08:38:47.347060 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33352] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/back/.env.dev"] [unique_id "amr_h3C-YQK8R8M_CPHsCgAAAAA"]
[Thu Jul 30 08:38:47.347254 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/back/.env.dev"] [unique_id "amr_h3C-YQK8R8M_CPHsCgAAAAA"]
[Thu Jul 30 08:38:47.347574 2026] [core:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.347681 2026] [security2:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/back/.env.dev"] [unique_id "amr_h3C-YQK8R8M_CPHsCgAAAAA"]
[Thu Jul 30 08:38:47.399060 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33358] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/back/.env.dist"] [unique_id "amr_h8TyHJeh8MEeCqDRSwAAAEQ"]
[Thu Jul 30 08:38:47.399260 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33358] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/back/.env.dist"] [unique_id "amr_h8TyHJeh8MEeCqDRSwAAAEQ"]
[Thu Jul 30 08:38:47.399630 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.399752 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:33358] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/back/.env.dist"] [unique_id "amr_h8TyHJeh8MEeCqDRSwAAAEQ"]
[Thu Jul 30 08:38:47.442792 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.442828 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.471138 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.bak"] [unique_id "amr_h40p-nZdMLHTbfTLvQAAAA4"]
[Thu Jul 30 08:38:47.471348 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.bak"] [unique_id "amr_h40p-nZdMLHTbfTLvQAAAA4"]
[Thu Jul 30 08:38:47.471467 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.bak"] [unique_id "amr_h40p-nZdMLHTbfTLvQAAAA4"]
[Thu Jul 30 08:38:47.488179 2026] [core:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.488211 2026] [core:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.489143 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.dev"] [unique_id "amr_h40p-nZdMLHTbfTLvgAAAA4"]
[Thu Jul 30 08:38:47.489268 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.dev"] [unique_id "amr_h40p-nZdMLHTbfTLvgAAAA4"]
[Thu Jul 30 08:38:47.489369 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.dev"] [unique_id "amr_h40p-nZdMLHTbfTLvgAAAA4"]
[Thu Jul 30 08:38:47.514739 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.dist"] [unique_id "amr_h40p-nZdMLHTbfTLvwAAAA4"]
[Thu Jul 30 08:38:47.514874 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.dist"] [unique_id "amr_h40p-nZdMLHTbfTLvwAAAA4"]
[Thu Jul 30 08:38:47.514987 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:59040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/.env.dist"] [unique_id "amr_h40p-nZdMLHTbfTLvwAAAA4"]
[Thu Jul 30 08:38:47.525436 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.525457 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.560463 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.560492 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.598789 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.598813 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.638506 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.638528 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.674380 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.674406 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:33444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.714995 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.715017 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:33452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.726268 2026] [authz_core:error] [pid 2414918:tid 2414918] [client 57.141.0.28:58732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:47.726893 2026] [authz_core:error] [pid 2414918:tid 2414918] [client 57.141.0.28:58732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:47.751433 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.751460 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.752536 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/cryo_project/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3AAAAC4"]
[Thu Jul 30 08:38:47.752667 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/cryo_project/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3AAAAC4"]
[Thu Jul 30 08:38:47.752848 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/cryo_project/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3AAAAC4"]
[Thu Jul 30 08:38:47.772052 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/css/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3QAAAC4"]
[Thu Jul 30 08:38:47.772199 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/css/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3QAAAC4"]
[Thu Jul 30 08:38:47.772401 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/css/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3QAAAC4"]
[Thu Jul 30 08:38:47.790060 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.790102 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.801574 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/current/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3gAAAC4"]
[Thu Jul 30 08:38:47.801758 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3gAAAC4"]
[Thu Jul 30 08:38:47.801975 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/.env"] [unique_id "amr_h0QvuHxPljPWrXhq3gAAAC4"]
[Thu Jul 30 08:38:47.822348 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/current/.env.bak"] [unique_id "amr_h0QvuHxPljPWrXhq3wAAAC4"]
[Thu Jul 30 08:38:47.822535 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/.env.bak"] [unique_id "amr_h0QvuHxPljPWrXhq3wAAAC4"]
[Thu Jul 30 08:38:47.822750 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/.env.bak"] [unique_id "amr_h0QvuHxPljPWrXhq3wAAAC4"]
[Thu Jul 30 08:38:47.827416 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.827435 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.850447 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/current/.env.dev"] [unique_id "amr_h0QvuHxPljPWrXhq4AAAAC4"]
[Thu Jul 30 08:38:47.850661 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/.env.dev"] [unique_id "amr_h0QvuHxPljPWrXhq4AAAAC4"]
[Thu Jul 30 08:38:47.850870 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/.env.dev"] [unique_id "amr_h0QvuHxPljPWrXhq4AAAAC4"]
[Thu Jul 30 08:38:47.865004 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.865039 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.878020 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/current/.env.dist"] [unique_id "amr_h0QvuHxPljPWrXhq4QAAAC4"]
[Thu Jul 30 08:38:47.878218 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/.env.dist"] [unique_id "amr_h0QvuHxPljPWrXhq4QAAAC4"]
[Thu Jul 30 08:38:47.878439 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/.env.dist"] [unique_id "amr_h0QvuHxPljPWrXhq4QAAAC4"]
[Thu Jul 30 08:38:47.903087 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/current/.env.local"] [unique_id "amr_h0QvuHxPljPWrXhq4gAAAC4"]
[Thu Jul 30 08:38:47.903258 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/.env.local"] [unique_id "amr_h0QvuHxPljPWrXhq4gAAAC4"]
[Thu Jul 30 08:38:47.903462 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/.env.local"] [unique_id "amr_h0QvuHxPljPWrXhq4gAAAC4"]
[Thu Jul 30 08:38:47.906494 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.906514 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:33506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.930179 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/current/.env.production"] [unique_id "amr_h0QvuHxPljPWrXhq4wAAAC4"]
[Thu Jul 30 08:38:47.930392 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/.env.production"] [unique_id "amr_h0QvuHxPljPWrXhq4wAAAC4"]
[Thu Jul 30 08:38:47.930623 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/.env.production"] [unique_id "amr_h0QvuHxPljPWrXhq4wAAAC4"]
[Thu Jul 30 08:38:47.944607 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:33522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.944631 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:33522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.950469 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/current/.env.staging"] [unique_id "amr_h0QvuHxPljPWrXhq5AAAAC4"]
[Thu Jul 30 08:38:47.950735 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/.env.staging"] [unique_id "amr_h0QvuHxPljPWrXhq5AAAAC4"]
[Thu Jul 30 08:38:47.950937 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:19960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/.env.staging"] [unique_id "amr_h0QvuHxPljPWrXhq5AAAAC4"]
[Thu Jul 30 08:38:47.979854 2026] [core:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:47.979878 2026] [core:error] [pid 2427394:tid 2427394] [client 185.177.72.66:33536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.017090 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.017116 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.061513 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:33542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.061546 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:33542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.108526 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.108549 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.145307 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.145354 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.196899 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:33556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.196931 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:33556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.238879 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.238905 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.276338 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.276365 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.299049 2026] [security2:error] [pid 2428311:tid 2428311] [client 121.200.216.8:34646] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "berehap.be"] [uri "/xmlrpc.php"] [unique_id "amr_iBaJ6AWJ3ghWLIo2jQAAAEM"]
[Thu Jul 30 08:38:48.317759 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.317783 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.355318 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.355343 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.397311 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.397337 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.441495 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.441520 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:33602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.481107 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.481135 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.520776 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.520804 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.554716 2026] [core:error] [pid 2423145:tid 2423145] [client 57.141.0.36:39326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.554746 2026] [core:error] [pid 2423145:tid 2423145] [client 57.141.0.36:39326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.559719 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.559746 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.597877 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.597914 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.643396 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.643429 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.687354 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.687384 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:33672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.712329 2026] [access_compat:error] [pid 2421983:tid 2421983] [client 106.215.157.145:5176] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:48.725612 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.725632 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.764103 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.764125 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.801856 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33700] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/back/php.ini"] [unique_id "amr_iI0p-nZdMLHTbfTLywAAAA4"]
[Thu Jul 30 08:38:48.802181 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/back/php.ini"] [unique_id "amr_iI0p-nZdMLHTbfTLywAAAA4"]
[Thu Jul 30 08:38:48.802548 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.802678 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/back/php.ini"] [unique_id "amr_iI0p-nZdMLHTbfTLywAAAA4"]
[Thu Jul 30 08:38:48.846982 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.847006 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.886610 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.886630 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.888846 2026] [authz_core:error] [pid 2426805:tid 2426805] [client 57.141.0.15:22664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:48.889467 2026] [authz_core:error] [pid 2426805:tid 2426805] [client 57.141.0.15:22664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:48.923603 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.923628 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.963577 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.963604 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:48.965344 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/current/php.ini"] [unique_id "amr_iEQvuHxPljPWrXhrBwAAAC4"]
[Thu Jul 30 08:38:48.965627 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/current/php.ini"] [unique_id "amr_iEQvuHxPljPWrXhrBwAAAC4"]
[Thu Jul 30 08:38:48.965803 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/current/php.ini"] [unique_id "amr_iEQvuHxPljPWrXhrBwAAAC4"]
[Thu Jul 30 08:38:49.005812 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:33730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.005843 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:33730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.044047 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.044089 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.082371 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:33744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.082390 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:33744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.122034 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.122080 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.161224 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.161254 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:33762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.209629 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.209658 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:33772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.259296 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:33782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.259321 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:33782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.403385 2026] [ssl:error] [pid 2423370:tid 2423370] (70014)End of file found: [client 216.73.216.199:49220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:38:49.414277 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/custom/.env"] [unique_id "amr_iUQvuHxPljPWrXhrGgAAAC4"]
[Thu Jul 30 08:38:49.414424 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/custom/.env"] [unique_id "amr_iUQvuHxPljPWrXhrGgAAAC4"]
[Thu Jul 30 08:38:49.414655 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/custom/.env"] [unique_id "amr_iUQvuHxPljPWrXhrGgAAAC4"]
[Thu Jul 30 08:38:49.454346 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /customer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/customer/.git/config"] [unique_id "amr_iUQvuHxPljPWrXhrHAAAAC4"]
[Thu Jul 30 08:38:49.454508 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/customer/.git/config"] [unique_id "amr_iUQvuHxPljPWrXhrHAAAAC4"]
[Thu Jul 30 08:38:49.454725 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/customer/.git/config"] [unique_id "amr_iUQvuHxPljPWrXhrHAAAAC4"]
[Thu Jul 30 08:38:49.517331 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:33798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.517355 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:33798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.570689 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:33810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.570714 2026] [core:error] [pid 2426053:tid 2426053] [client 185.177.72.66:33810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.595777 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_iUQvuHxPljPWrXhrIQAAAC4"]
[Thu Jul 30 08:38:49.596117 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_iUQvuHxPljPWrXhrIQAAAC4"]
[Thu Jul 30 08:38:49.596322 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_iUQvuHxPljPWrXhrIQAAAC4"]
[Thu Jul 30 08:38:49.617295 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/customer/api-config.ini"] [unique_id "amr_iUQvuHxPljPWrXhrIgAAAC4"]
[Thu Jul 30 08:38:49.617602 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/customer/api-config.ini"] [unique_id "amr_iUQvuHxPljPWrXhrIgAAAC4"]
[Thu Jul 30 08:38:49.617802 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/customer/api-config.ini"] [unique_id "amr_iUQvuHxPljPWrXhrIgAAAC4"]
[Thu Jul 30 08:38:49.694815 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/customer/laravel.log"] [unique_id "amr_iUQvuHxPljPWrXhrJQAAAC4"]
[Thu Jul 30 08:38:49.695184 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/customer/laravel.log"] [unique_id "amr_iUQvuHxPljPWrXhrJQAAAC4"]
[Thu Jul 30 08:38:49.695409 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/customer/laravel.log"] [unique_id "amr_iUQvuHxPljPWrXhrJQAAAC4"]
[Thu Jul 30 08:38:49.715324 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:33814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.721498 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:33814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.766619 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/customer/web.config"] [unique_id "amr_iUQvuHxPljPWrXhrKAAAAC4"]
[Thu Jul 30 08:38:49.766838 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /customer/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/customer/web.config"] [unique_id "amr_iUQvuHxPljPWrXhrKAAAAC4"]
[Thu Jul 30 08:38:49.766950 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/customer/web.config"] [unique_id "amr_iUQvuHxPljPWrXhrKAAAAC4"]
[Thu Jul 30 08:38:49.767167 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/customer/web.config"] [unique_id "amr_iUQvuHxPljPWrXhrKAAAAC4"]
[Thu Jul 30 08:38:49.786776 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/d/.env"] [unique_id "amr_iUQvuHxPljPWrXhrKQAAAC4"]
[Thu Jul 30 08:38:49.792198 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/d/.env"] [unique_id "amr_iUQvuHxPljPWrXhrKQAAAC4"]
[Thu Jul 30 08:38:49.792427 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/d/.env"] [unique_id "amr_iUQvuHxPljPWrXhrKQAAAC4"]
[Thu Jul 30 08:38:49.817261 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dashboard/.env"] [unique_id "amr_iUQvuHxPljPWrXhrKgAAAC4"]
[Thu Jul 30 08:38:49.817443 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dashboard/.env"] [unique_id "amr_iUQvuHxPljPWrXhrKgAAAC4"]
[Thu Jul 30 08:38:49.817668 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dashboard/.env"] [unique_id "amr_iUQvuHxPljPWrXhrKgAAAC4"]
[Thu Jul 30 08:38:49.859402 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dashboard/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dashboard/.git/config"] [unique_id "amr_iUQvuHxPljPWrXhrLAAAAC4"]
[Thu Jul 30 08:38:49.859594 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dashboard/.git/config"] [unique_id "amr_iUQvuHxPljPWrXhrLAAAAC4"]
[Thu Jul 30 08:38:49.859795 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dashboard/.git/config"] [unique_id "amr_iUQvuHxPljPWrXhrLAAAAC4"]
[Thu Jul 30 08:38:49.956736 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:33816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:49.989177 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_iUQvuHxPljPWrXhrMQAAAC4"]
[Thu Jul 30 08:38:50.004146 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:33816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.004547 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_iUQvuHxPljPWrXhrMQAAAC4"]
[Thu Jul 30 08:38:50.004780 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_iUQvuHxPljPWrXhrMQAAAC4"]
[Thu Jul 30 08:38:50.044971 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.044993 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.082948 2026] [authz_core:error] [pid 2428311:tid 2428311] [client 66.249.66.33:43393] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:38:50.085337 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.085375 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.085770 2026] [authz_core:error] [pid 2428311:tid 2428311] [client 66.249.66.33:43393] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:38:50.088965 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dashboard/api-config.ini"] [unique_id "amr_ikQvuHxPljPWrXhrNQAAAC4"]
[Thu Jul 30 08:38:50.089277 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dashboard/api-config.ini"] [unique_id "amr_ikQvuHxPljPWrXhrNQAAAC4"]
[Thu Jul 30 08:38:50.089475 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dashboard/api-config.ini"] [unique_id "amr_ikQvuHxPljPWrXhrNQAAAC4"]
[Thu Jul 30 08:38:50.123598 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backend/.env.bak"] [unique_id "amr_io0p-nZdMLHTbfTL0gAAAA4"]
[Thu Jul 30 08:38:50.123782 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backend/.env.bak"] [unique_id "amr_io0p-nZdMLHTbfTL0gAAAA4"]
[Thu Jul 30 08:38:50.124179 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.124311 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backend/.env.bak"] [unique_id "amr_io0p-nZdMLHTbfTL0gAAAA4"]
[Thu Jul 30 08:38:50.160240 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33838] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backend/.env.dev"] [unique_id "amr_io0p-nZdMLHTbfTL0wAAAA4"]
[Thu Jul 30 08:38:50.161111 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33838] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backend/.env.dev"] [unique_id "amr_io0p-nZdMLHTbfTL0wAAAA4"]
[Thu Jul 30 08:38:50.161463 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.161592 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33838] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backend/.env.dev"] [unique_id "amr_io0p-nZdMLHTbfTL0wAAAA4"]
[Thu Jul 30 08:38:50.196732 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33852] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backend/.env.dist"] [unique_id "amr_itVtxCBUSPwlMZFK1gAAABk"]
[Thu Jul 30 08:38:50.196937 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backend/.env.dist"] [unique_id "amr_itVtxCBUSPwlMZFK1gAAABk"]
[Thu Jul 30 08:38:50.197267 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.197387 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backend/.env.dist"] [unique_id "amr_itVtxCBUSPwlMZFK1gAAABk"]
[Thu Jul 30 08:38:50.227585 2026] [lsapi:warn] [pid 2420712:tid 2420712] [client 217.165.124.222:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:38:50.230869 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.230892 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.271228 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.271248 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.276596 2026] [ssl:error] [pid 2423145:tid 2423145] (EAI 2)Name or service not known: [client 144.76.19.72:27380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:50.276627 2026] [ssl:error] [pid 2423145:tid 2423145] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:50.308140 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dashboard/laravel.log"] [unique_id "amr_ikQvuHxPljPWrXhrPgAAAC4"]
[Thu Jul 30 08:38:50.308504 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dashboard/laravel.log"] [unique_id "amr_ikQvuHxPljPWrXhrPgAAAC4"]
[Thu Jul 30 08:38:50.308714 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dashboard/laravel.log"] [unique_id "amr_ikQvuHxPljPWrXhrPgAAAC4"]
[Thu Jul 30 08:38:50.309810 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.309828 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:33884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.343355 2026] [ssl:error] [pid 2426053:tid 2426053] (EAI 2)Name or service not known: [client 144.76.19.72:27392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:50.345585 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.386120 2026] [ssl:error] [pid 2426053:tid 2426053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:50.386148 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.422231 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.422258 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.457859 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.457903 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.494272 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.494296 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.524677 2026] [core:error] [pid 2426053:tid 2426053] [client 66.249.66.8:38506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.524696 2026] [core:error] [pid 2426053:tid 2426053] [client 66.249.66.8:38506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.553548 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.553582 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.593271 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.593292 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.609183 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dashboard/web.config"] [unique_id "amr_ikQvuHxPljPWrXhrSQAAAC4"]
[Thu Jul 30 08:38:50.609389 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dashboard/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dashboard/web.config"] [unique_id "amr_ikQvuHxPljPWrXhrSQAAAC4"]
[Thu Jul 30 08:38:50.609551 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dashboard/web.config"] [unique_id "amr_ikQvuHxPljPWrXhrSQAAAC4"]
[Thu Jul 30 08:38:50.609752 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dashboard/web.config"] [unique_id "amr_ikQvuHxPljPWrXhrSQAAAC4"]
[Thu Jul 30 08:38:50.629251 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:33948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.643116 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:33948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.680577 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.680606 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.715427 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:33956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.715452 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:33956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.753638 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.753663 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:33972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.792216 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:33986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.792237 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:33986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.820511 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dataset/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUAAAAC4"]
[Thu Jul 30 08:38:50.820770 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dataset/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUAAAAC4"]
[Thu Jul 30 08:38:50.821018 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dataset/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUAAAAC4"]
[Thu Jul 30 08:38:50.829478 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.829505 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.835285 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/php.ini"] [unique_id "amr_ipkA2-P0e5yhCnL_aAAAAAI"]
[Thu Jul 30 08:38:50.835599 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/php.ini"] [unique_id "amr_ipkA2-P0e5yhCnL_aAAAAAI"]
[Thu Jul 30 08:38:50.835701 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/php.ini"] [unique_id "amr_ipkA2-P0e5yhCnL_aAAAAAI"]
[Thu Jul 30 08:38:50.848056 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dataset1/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUQAAAC4"]
[Thu Jul 30 08:38:50.848821 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dataset1/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUQAAAC4"]
[Thu Jul 30 08:38:50.849055 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dataset1/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUQAAAC4"]
[Thu Jul 30 08:38:50.864638 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:34008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.864670 2026] [core:error] [pid 2415834:tid 2415834] [client 185.177.72.66:34008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.874728 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dataset2/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUgAAAC4"]
[Thu Jul 30 08:38:50.874947 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dataset2/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUgAAAC4"]
[Thu Jul 30 08:38:50.875195 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dataset2/.env"] [unique_id "amr_ikQvuHxPljPWrXhrUgAAAC4"]
[Thu Jul 30 08:38:50.920344 2026] [cgi:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] AH02811: stderr from /home/ppclcom/downloads.ppcl.com/debug.cgi: script not found or unable to stat
[Thu Jul 30 08:38:50.929050 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:34020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.929081 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:34020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:50.944353 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/debug.inc"] [unique_id "amr_ikQvuHxPljPWrXhrVQAAAC4"]
[Thu Jul 30 08:38:50.944657 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/debug.inc"] [unique_id "amr_ikQvuHxPljPWrXhrVQAAAC4"]
[Thu Jul 30 08:38:50.944849 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:18654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/debug.inc"] [unique_id "amr_ikQvuHxPljPWrXhrVQAAAC4"]
[Thu Jul 30 08:38:50.951699 2026] [authz_core:error] [pid 2423145:tid 2423145] [client 57.141.0.23:33422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:50.952449 2026] [authz_core:error] [pid 2423145:tid 2423145] [client 57.141.0.23:33422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:51.037771 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.037800 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.076217 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.076245 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.097864 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:13720] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.vscode/.env"] [unique_id "amr_ixpvfcvm04JnKtSVaQAAAA8"]
[Thu Jul 30 08:38:51.098020 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:13720] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.vscode/.env"] [unique_id "amr_ixpvfcvm04JnKtSVaQAAAA8"]
[Thu Jul 30 08:38:51.098226 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:13720] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_ixpvfcvm04JnKtSVaQAAAA8"]
[Thu Jul 30 08:38:51.113214 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.113242 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.148596 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.148623 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.196446 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:34062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.196473 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:34062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.233971 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.233993 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.270128 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:34082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.270149 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:34082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.307488 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.307508 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.380618 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.380636 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.406471 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/default/.env"] [unique_id "amr_i40p-nZdMLHTbfTL6gAAAA4"]
[Thu Jul 30 08:38:51.406616 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/default/.env"] [unique_id "amr_i40p-nZdMLHTbfTL6gAAAA4"]
[Thu Jul 30 08:38:51.406791 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/default/.env"] [unique_id "amr_i40p-nZdMLHTbfTL6gAAAA4"]
[Thu Jul 30 08:38:51.418612 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.418632 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.426943 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/default/.env.bak"] [unique_id "amr_i40p-nZdMLHTbfTL6wAAAA4"]
[Thu Jul 30 08:38:51.427089 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/default/.env.bak"] [unique_id "amr_i40p-nZdMLHTbfTL6wAAAA4"]
[Thu Jul 30 08:38:51.427278 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/default/.env.bak"] [unique_id "amr_i40p-nZdMLHTbfTL6wAAAA4"]
[Thu Jul 30 08:38:51.447545 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/default/.env.dev"] [unique_id "amr_i40p-nZdMLHTbfTL7AAAAA4"]
[Thu Jul 30 08:38:51.447703 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/default/.env.dev"] [unique_id "amr_i40p-nZdMLHTbfTL7AAAAA4"]
[Thu Jul 30 08:38:51.447880 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/default/.env.dev"] [unique_id "amr_i40p-nZdMLHTbfTL7AAAAA4"]
[Thu Jul 30 08:38:51.455120 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.455140 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:34120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.476754 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/default/.env.dist"] [unique_id "amr_i40p-nZdMLHTbfTL7QAAAA4"]
[Thu Jul 30 08:38:51.476893 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/default/.env.dist"] [unique_id "amr_i40p-nZdMLHTbfTL7QAAAA4"]
[Thu Jul 30 08:38:51.477081 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/default/.env.dist"] [unique_id "amr_i40p-nZdMLHTbfTL7QAAAA4"]
[Thu Jul 30 08:38:51.497184 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:34128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.503085 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/default/.env.local"] [unique_id "amr_i40p-nZdMLHTbfTL7gAAAA4"]
[Thu Jul 30 08:38:51.513973 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:34128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.514198 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/default/.env.local"] [unique_id "amr_i40p-nZdMLHTbfTL7gAAAA4"]
[Thu Jul 30 08:38:51.514419 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/default/.env.local"] [unique_id "amr_i40p-nZdMLHTbfTL7gAAAA4"]
[Thu Jul 30 08:38:51.556774 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:34136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.556795 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:34136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.594182 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:34150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.594206 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:34150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.630596 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:34166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.630618 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:34166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.669935 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13738] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.bak"] [unique_id "amr_ixGCGrlKGv3qqKZEwAAAADQ"]
[Thu Jul 30 08:38:51.670052 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.bak"] [unique_id "amr_ixGCGrlKGv3qqKZEwAAAADQ"]
[Thu Jul 30 08:38:51.670230 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_ixGCGrlKGv3qqKZEwAAAADQ"]
[Thu Jul 30 08:38:51.697325 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:34172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.697356 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:34172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.836274 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.836295 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:51.860811 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/src/.env"] [unique_id "amr_i5kA2-P0e5yhCnL_dwAAAAI"]
[Thu Jul 30 08:38:51.860985 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/src/.env"] [unique_id "amr_i5kA2-P0e5yhCnL_dwAAAAI"]
[Thu Jul 30 08:38:51.861124 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backend/src/.env"] [unique_id "amr_i5kA2-P0e5yhCnL_dwAAAAI"]
[Thu Jul 30 08:38:52.041102 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:34190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.041144 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:34190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.051736 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.66:13744] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.swm"] [unique_id "amr_jAid2o9xi1xe9DHExgAAAEg"]
[Thu Jul 30 08:38:52.051945 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.66:13744] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.swm"] [unique_id "amr_jAid2o9xi1xe9DHExgAAAEg"]
[Thu Jul 30 08:38:52.052190 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.66:13744] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_jAid2o9xi1xe9DHExgAAAEg"]
[Thu Jul 30 08:38:52.078609 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.078651 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.123257 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:34198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.123304 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:34198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.162421 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.162465 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.200296 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:34222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.200323 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:34222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.238057 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/backend/php.ini"] [unique_id "amr_jAid2o9xi1xe9DHExwAAAEg"]
[Thu Jul 30 08:38:52.238417 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backend/php.ini"] [unique_id "amr_jAid2o9xi1xe9DHExwAAAEg"]
[Thu Jul 30 08:38:52.238791 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.238924 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backend/php.ini"] [unique_id "amr_jAid2o9xi1xe9DHExwAAAEg"]
[Thu Jul 30 08:38:52.275213 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.275232 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.313289 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.313311 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.324932 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:13750] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.swn"] [unique_id "amr_jPJI1GD8s375y7G9DAAAAE0"]
[Thu Jul 30 08:38:52.325130 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:13750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.swn"] [unique_id "amr_jPJI1GD8s375y7G9DAAAAE0"]
[Thu Jul 30 08:38:52.325332 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:13750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_jPJI1GD8s375y7G9DAAAAE0"]
[Thu Jul 30 08:38:52.352078 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.352117 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.395435 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.395469 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.432571 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34292] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.432593 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34292] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.446613 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backendfinaltest/.env"] [unique_id "amr_jJkA2-P0e5yhCnL_fwAAAAI"]
[Thu Jul 30 08:38:52.446756 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backendfinaltest/.env"] [unique_id "amr_jJkA2-P0e5yhCnL_fwAAAAI"]
[Thu Jul 30 08:38:52.446860 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backendfinaltest/.env"] [unique_id "amr_jJkA2-P0e5yhCnL_fwAAAAI"]
[Thu Jul 30 08:38:52.456578 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/default/php.ini"] [unique_id "amr_jI0p-nZdMLHTbfTMEQAAAA4"]
[Thu Jul 30 08:38:52.456872 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/default/php.ini"] [unique_id "amr_jI0p-nZdMLHTbfTMEQAAAA4"]
[Thu Jul 30 08:38:52.457054 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/default/php.ini"] [unique_id "amr_jI0p-nZdMLHTbfTMEQAAAA4"]
[Thu Jul 30 08:38:52.466755 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.466780 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.476103 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /backup.wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup.wp-config.php"] [unique_id "amr_jJkA2-P0e5yhCnL_gAAAAAI"]
[Thu Jul 30 08:38:52.476225 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup.wp-config.php"] [unique_id "amr_jJkA2-P0e5yhCnL_gAAAAAI"]
[Thu Jul 30 08:38:52.476324 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup.wp-config.php"] [unique_id "amr_jJkA2-P0e5yhCnL_gAAAAAI"]
[Thu Jul 30 08:38:52.502896 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.bak"] [unique_id "amr_jJkA2-P0e5yhCnL_gQAAAAI"]
[Thu Jul 30 08:38:52.503087 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.bak"] [unique_id "amr_jJkA2-P0e5yhCnL_gQAAAAI"]
[Thu Jul 30 08:38:52.503207 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.bak"] [unique_id "amr_jJkA2-P0e5yhCnL_gQAAAAI"]
[Thu Jul 30 08:38:52.507712 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.508258 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.527740 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.dev"] [unique_id "amr_jJkA2-P0e5yhCnL_ggAAAAI"]
[Thu Jul 30 08:38:52.527882 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.dev"] [unique_id "amr_jJkA2-P0e5yhCnL_ggAAAAI"]
[Thu Jul 30 08:38:52.527981 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.dev"] [unique_id "amr_jJkA2-P0e5yhCnL_ggAAAAI"]
[Thu Jul 30 08:38:52.548177 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.548207 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.548959 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.dist"] [unique_id "amr_jJkA2-P0e5yhCnL_gwAAAAI"]
[Thu Jul 30 08:38:52.549125 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.dist"] [unique_id "amr_jJkA2-P0e5yhCnL_gwAAAAI"]
[Thu Jul 30 08:38:52.549239 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.dist"] [unique_id "amr_jJkA2-P0e5yhCnL_gwAAAAI"]
[Thu Jul 30 08:38:52.576031 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.local"] [unique_id "amr_jJkA2-P0e5yhCnL_hAAAAAI"]
[Thu Jul 30 08:38:52.576253 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.local"] [unique_id "amr_jJkA2-P0e5yhCnL_hAAAAAI"]
[Thu Jul 30 08:38:52.576393 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.local"] [unique_id "amr_jJkA2-P0e5yhCnL_hAAAAAI"]
[Thu Jul 30 08:38:52.589221 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.597526 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.592556 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:13766] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.swo"] [unique_id "amr_jPdbqxY4ll4IV_vwugAAACE"]
[Thu Jul 30 08:38:52.600487 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:13766] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/.wp-config.php.swo"] [unique_id "amr_jPdbqxY4ll4IV_vwugAAACE"]
[Thu Jul 30 08:38:52.600847 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:13766] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_jPdbqxY4ll4IV_vwugAAACE"]
[Thu Jul 30 08:38:52.607032 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.production"] [unique_id "amr_jJkA2-P0e5yhCnL_hQAAAAI"]
[Thu Jul 30 08:38:52.607219 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.production"] [unique_id "amr_jJkA2-P0e5yhCnL_hQAAAAI"]
[Thu Jul 30 08:38:52.607337 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.production"] [unique_id "amr_jJkA2-P0e5yhCnL_hQAAAAI"]
[Thu Jul 30 08:38:52.633616 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.633638 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.639226 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.staging"] [unique_id "amr_jJkA2-P0e5yhCnL_hgAAAAI"]
[Thu Jul 30 08:38:52.639425 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.staging"] [unique_id "amr_jJkA2-P0e5yhCnL_hgAAAAI"]
[Thu Jul 30 08:38:52.639544 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.env.staging"] [unique_id "amr_jJkA2-P0e5yhCnL_hgAAAAI"]
[Thu Jul 30 08:38:52.669849 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.669876 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.706509 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.706534 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.738423 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backup/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.git/config"] [unique_id "amr_jJkA2-P0e5yhCnL_iAAAAAI"]
[Thu Jul 30 08:38:52.738739 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.git/config"] [unique_id "amr_jJkA2-P0e5yhCnL_iAAAAAI"]
[Thu Jul 30 08:38:52.738880 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/.git/config"] [unique_id "amr_jJkA2-P0e5yhCnL_iAAAAAI"]
[Thu Jul 30 08:38:52.744147 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.744170 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:34390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.778532 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.778552 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.815961 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backend/src/.env"] [unique_id "amr_jCuprmrr0feFzOS66QAAAEw"]
[Thu Jul 30 08:38:52.816154 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backend/src/.env"] [unique_id "amr_jCuprmrr0feFzOS66QAAAEw"]
[Thu Jul 30 08:38:52.816494 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.816627 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:34414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backend/src/.env"] [unique_id "amr_jCuprmrr0feFzOS66QAAAEw"]
[Thu Jul 30 08:38:52.854383 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.854415 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:34426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.892394 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.892420 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.930014 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.930035 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.947282 2026] [access_compat:error] [pid 2428416:tid 2428416] [client 106.215.157.145:18691] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:52.948262 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/delivery/.env"] [unique_id "amr_jI0p-nZdMLHTbfTMJAAAAA4"]
[Thu Jul 30 08:38:52.948398 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/delivery/.env"] [unique_id "amr_jI0p-nZdMLHTbfTMJAAAAA4"]
[Thu Jul 30 08:38:52.948578 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/delivery/.env"] [unique_id "amr_jI0p-nZdMLHTbfTMJAAAAA4"]
[Thu Jul 30 08:38:52.963095 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:34450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.963112 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:34450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.999596 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:52.999615 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.010363 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo-app/.env"] [unique_id "amr_jY0p-nZdMLHTbfTMJgAAAA4"]
[Thu Jul 30 08:38:53.010489 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo-app/.env"] [unique_id "amr_jY0p-nZdMLHTbfTMJgAAAA4"]
[Thu Jul 30 08:38:53.010670 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo-app/.env"] [unique_id "amr_jY0p-nZdMLHTbfTMJgAAAA4"]
[Thu Jul 30 08:38:53.021904 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_jZkA2-P0e5yhCnL_jQAAAAI"]
[Thu Jul 30 08:38:53.022213 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_jZkA2-P0e5yhCnL_jQAAAAI"]
[Thu Jul 30 08:38:53.022321 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.17:44268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_jZkA2-P0e5yhCnL_jQAAAAI"]
[Thu Jul 30 08:38:53.035682 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.035702 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.036479 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo/.env"] [unique_id "amr_jY0p-nZdMLHTbfTMJwAAAA4"]
[Thu Jul 30 08:38:53.036613 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/.env"] [unique_id "amr_jY0p-nZdMLHTbfTMJwAAAA4"]
[Thu Jul 30 08:38:53.036779 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/.env"] [unique_id "amr_jY0p-nZdMLHTbfTMJwAAAA4"]
[Thu Jul 30 08:38:53.068165 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.bak"] [unique_id "amr_jY0p-nZdMLHTbfTMKAAAAA4"]
[Thu Jul 30 08:38:53.068280 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.bak"] [unique_id "amr_jY0p-nZdMLHTbfTMKAAAAA4"]
[Thu Jul 30 08:38:53.068440 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.bak"] [unique_id "amr_jY0p-nZdMLHTbfTMKAAAAA4"]
[Thu Jul 30 08:38:53.069694 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.069711 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.094010 2026] [authz_core:error] [pid 2428417:tid 2428417] [client 57.141.0.16:62388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:53.094692 2026] [authz_core:error] [pid 2428417:tid 2428417] [client 57.141.0.16:62388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:53.095176 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.dev"] [unique_id "amr_jY0p-nZdMLHTbfTMKQAAAA4"]
[Thu Jul 30 08:38:53.095295 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.dev"] [unique_id "amr_jY0p-nZdMLHTbfTMKQAAAA4"]
[Thu Jul 30 08:38:53.095464 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.dev"] [unique_id "amr_jY0p-nZdMLHTbfTMKQAAAA4"]
[Thu Jul 30 08:38:53.105167 2026] [security2:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34480] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backendfinaltest/.env"] [unique_id "amr_jbXcCRpeYWb1gcEWFQAAAEs"]
[Thu Jul 30 08:38:53.108218 2026] [security2:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backendfinaltest/.env"] [unique_id "amr_jbXcCRpeYWb1gcEWFQAAAEs"]
[Thu Jul 30 08:38:53.108739 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.108871 2026] [security2:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backendfinaltest/.env"] [unique_id "amr_jbXcCRpeYWb1gcEWFQAAAEs"]
[Thu Jul 30 08:38:53.124623 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.dist"] [unique_id "amr_jY0p-nZdMLHTbfTMKgAAAA4"]
[Thu Jul 30 08:38:53.124753 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.dist"] [unique_id "amr_jY0p-nZdMLHTbfTMKgAAAA4"]
[Thu Jul 30 08:38:53.124933 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.dist"] [unique_id "amr_jY0p-nZdMLHTbfTMKgAAAA4"]
[Thu Jul 30 08:38:53.146155 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34488] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /backup.wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup.wp-config.php"] [unique_id "amr_jcTyHJeh8MEeCqDRUAAAAEQ"]
[Thu Jul 30 08:38:53.146290 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34488] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup.wp-config.php"] [unique_id "amr_jcTyHJeh8MEeCqDRUAAAAEQ"]
[Thu Jul 30 08:38:53.146600 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.146721 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34488] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup.wp-config.php"] [unique_id "amr_jcTyHJeh8MEeCqDRUAAAAEQ"]
[Thu Jul 30 08:38:53.153720 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.local"] [unique_id "amr_jY0p-nZdMLHTbfTMKwAAAA4"]
[Thu Jul 30 08:38:53.153837 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.local"] [unique_id "amr_jY0p-nZdMLHTbfTMKwAAAA4"]
[Thu Jul 30 08:38:53.154005 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.local"] [unique_id "amr_jY0p-nZdMLHTbfTMKwAAAA4"]
[Thu Jul 30 08:38:53.186852 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34494] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/.env.bak"] [unique_id "amr_jcTyHJeh8MEeCqDRUQAAAEQ"]
[Thu Jul 30 08:38:53.186999 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34494] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/.env.bak"] [unique_id "amr_jcTyHJeh8MEeCqDRUQAAAEQ"]
[Thu Jul 30 08:38:53.187309 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.187434 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34494] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/.env.bak"] [unique_id "amr_jcTyHJeh8MEeCqDRUQAAAEQ"]
[Thu Jul 30 08:38:53.189045 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.production"] [unique_id "amr_jY0p-nZdMLHTbfTMLAAAAA4"]
[Thu Jul 30 08:38:53.189242 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.production"] [unique_id "amr_jY0p-nZdMLHTbfTMLAAAAA4"]
[Thu Jul 30 08:38:53.189466 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.production"] [unique_id "amr_jY0p-nZdMLHTbfTMLAAAAA4"]
[Thu Jul 30 08:38:53.226190 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.staging"] [unique_id "amr_jY0p-nZdMLHTbfTMLQAAAA4"]
[Thu Jul 30 08:38:53.226406 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.staging"] [unique_id "amr_jY0p-nZdMLHTbfTMLQAAAA4"]
[Thu Jul 30 08:38:53.226688 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:18660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/.env.staging"] [unique_id "amr_jY0p-nZdMLHTbfTMLQAAAA4"]
[Thu Jul 30 08:38:53.240783 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/.env.dev"] [unique_id "amr_jW101zDj_5UEQFMW_QAAAAs"]
[Thu Jul 30 08:38:53.240925 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/.env.dev"] [unique_id "amr_jW101zDj_5UEQFMW_QAAAAs"]
[Thu Jul 30 08:38:53.241269 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.241380 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/.env.dev"] [unique_id "amr_jW101zDj_5UEQFMW_QAAAAs"]
[Thu Jul 30 08:38:53.274279 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34514] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/.env.dist"] [unique_id "amr_jcTyHJeh8MEeCqDRUgAAAEQ"]
[Thu Jul 30 08:38:53.274488 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/.env.dist"] [unique_id "amr_jcTyHJeh8MEeCqDRUgAAAEQ"]
[Thu Jul 30 08:38:53.274841 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.274963 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/.env.dist"] [unique_id "amr_jcTyHJeh8MEeCqDRUgAAAEQ"]
[Thu Jul 30 08:38:53.317046 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/.env.local"] [unique_id "amr_jalzm7G0Pp-9gn6peAAAAEk"]
[Thu Jul 30 08:38:53.317239 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/.env.local"] [unique_id "amr_jalzm7G0Pp-9gn6peAAAAEk"]
[Thu Jul 30 08:38:53.317584 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.317729 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/.env.local"] [unique_id "amr_jalzm7G0Pp-9gn6peAAAAEk"]
[Thu Jul 30 08:38:53.343407 2026] [core:error] [pid 2427777:tid 2427777] (13)Permission denied: [client 216.73.216.199:56286] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/objects_partial
[Thu Jul 30 08:38:53.364961 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34536] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/.env.production"] [unique_id "amr_jRpzOSLDAMoCSUlPbAAAABM"]
[Thu Jul 30 08:38:53.365171 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34536] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/.env.production"] [unique_id "amr_jRpzOSLDAMoCSUlPbAAAABM"]
[Thu Jul 30 08:38:53.365479 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.365595 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34536] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/.env.production"] [unique_id "amr_jRpzOSLDAMoCSUlPbAAAABM"]
[Thu Jul 30 08:38:53.402893 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34548] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/.env.staging"] [unique_id "amr_jalzm7G0Pp-9gn6peQAAAEk"]
[Thu Jul 30 08:38:53.403061 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/.env.staging"] [unique_id "amr_jalzm7G0Pp-9gn6peQAAAEk"]
[Thu Jul 30 08:38:53.403377 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.403482 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/.env.staging"] [unique_id "amr_jalzm7G0Pp-9gn6peQAAAEk"]
[Thu Jul 30 08:38:53.438170 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:34558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.443019 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:34558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.446097 2026] [ssl:error] [pid 2428411:tid 2428411] (EAI 2)Name or service not known: [client 144.76.19.72:27406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:53.446127 2026] [ssl:error] [pid 2428411:tid 2428411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:53.485495 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34570] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backup/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/.git/config"] [unique_id "amr_jcTyHJeh8MEeCqDRVAAAAEQ"]
[Thu Jul 30 08:38:53.485707 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/.git/config"] [unique_id "amr_jcTyHJeh8MEeCqDRVAAAAEQ"]
[Thu Jul 30 08:38:53.486033 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.486199 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/.git/config"] [unique_id "amr_jcTyHJeh8MEeCqDRVAAAAEQ"]
[Thu Jul 30 08:38:53.502238 2026] [ssl:error] [pid 2427478:tid 2427478] (EAI 2)Name or service not known: [client 144.76.19.72:27412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:53.502283 2026] [ssl:error] [pid 2427478:tid 2427478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:53.524730 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:34572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.524752 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:34572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.559975 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.560000 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:34588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.595461 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.595484 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.631008 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.631032 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.644858 2026] [core:error] [pid 2427777:tid 2427777] (13)Permission denied: [client 216.73.216.199:56286] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/objects_partial
[Thu Jul 30 08:38:53.667157 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:34622] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_jUNn3uvyljca7F0u8gAAADI"]
[Thu Jul 30 08:38:53.667463 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:34622] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_jUNn3uvyljca7F0u8gAAADI"]
[Thu Jul 30 08:38:53.667799 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:34622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.667915 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:34622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amr_jUNn3uvyljca7F0u8gAAADI"]
[Thu Jul 30 08:38:53.711868 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:34632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.711896 2026] [core:error] [pid 2427478:tid 2427478] [client 185.177.72.66:34632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.750846 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.750873 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.788356 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:34660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.788378 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:34660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.826351 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:34670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.826375 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:34670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.860147 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.860166 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.900442 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.900470 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.936647 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.936665 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.976287 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:53.976305 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.015632 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.015666 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.054193 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:34726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.054214 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:34726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.090790 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.090814 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:34732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.126906 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.126927 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.162442 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.162463 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.198238 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.198261 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:34760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.216992 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/demo/php.ini"] [unique_id "amr_jl1wVBXySt5JIbAFTAAAABE"]
[Thu Jul 30 08:38:54.217307 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/demo/php.ini"] [unique_id "amr_jl1wVBXySt5JIbAFTAAAABE"]
[Thu Jul 30 08:38:54.217509 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/demo/php.ini"] [unique_id "amr_jl1wVBXySt5JIbAFTAAAABE"]
[Thu Jul 30 08:38:54.236949 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.236972 2026] [core:error] [pid 2428413:tid 2428413] [client 185.177.72.66:34774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.272092 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:34776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.272123 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:34776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.309512 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:34786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.309533 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:34786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.346278 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:34798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.346301 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:34798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.380984 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.381010 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.428395 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:34818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.428427 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:34818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.464915 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:34824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.464938 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:34824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.477774 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:13810] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_jhpzOSLDAMoCSUlPcAAAABM"]
[Thu Jul 30 08:38:54.477909 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:13810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amr_jhpzOSLDAMoCSUlPcAAAABM"]
[Thu Jul 30 08:38:54.478088 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:13810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_jhpzOSLDAMoCSUlPcAAAABM"]
[Thu Jul 30 08:38:54.501868 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.501885 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:34832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.543252 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.543271 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.581232 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:34852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.581252 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:34852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.615644 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.615663 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:34864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.649780 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env"] [unique_id "amr_jl1wVBXySt5JIbAFYAAAABE"]
[Thu Jul 30 08:38:54.649918 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env"] [unique_id "amr_jl1wVBXySt5JIbAFYAAAABE"]
[Thu Jul 30 08:38:54.650107 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env"] [unique_id "amr_jl1wVBXySt5JIbAFYAAAABE"]
[Thu Jul 30 08:38:54.650362 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:34878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.650383 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:34878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.668966 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.bak"] [unique_id "amr_jl1wVBXySt5JIbAFYQAAABE"]
[Thu Jul 30 08:38:54.669094 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.bak"] [unique_id "amr_jl1wVBXySt5JIbAFYQAAABE"]
[Thu Jul 30 08:38:54.669254 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.bak"] [unique_id "amr_jl1wVBXySt5JIbAFYQAAABE"]
[Thu Jul 30 08:38:54.687093 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:34882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.687114 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:34882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.693980 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.dev"] [unique_id "amr_jl1wVBXySt5JIbAFYgAAABE"]
[Thu Jul 30 08:38:54.694110 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.dev"] [unique_id "amr_jl1wVBXySt5JIbAFYgAAABE"]
[Thu Jul 30 08:38:54.694275 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.dev"] [unique_id "amr_jl1wVBXySt5JIbAFYgAAABE"]
[Thu Jul 30 08:38:54.717997 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.dist"] [unique_id "amr_jl1wVBXySt5JIbAFYwAAABE"]
[Thu Jul 30 08:38:54.718139 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.dist"] [unique_id "amr_jl1wVBXySt5JIbAFYwAAABE"]
[Thu Jul 30 08:38:54.718312 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.dist"] [unique_id "amr_jl1wVBXySt5JIbAFYwAAABE"]
[Thu Jul 30 08:38:54.730936 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.740354 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.736036 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_jk10g1cPUQyHDS7xoAAAABg"]
[Thu Jul 30 08:38:54.743339 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amr_jk10g1cPUQyHDS7xoAAAABg"]
[Thu Jul 30 08:38:54.743640 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_jk10g1cPUQyHDS7xoAAAABg"]
[Thu Jul 30 08:38:54.748769 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.local"] [unique_id "amr_jl1wVBXySt5JIbAFZAAAABE"]
[Thu Jul 30 08:38:54.748908 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.local"] [unique_id "amr_jl1wVBXySt5JIbAFZAAAABE"]
[Thu Jul 30 08:38:54.749103 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deploy/.env.local"] [unique_id "amr_jl1wVBXySt5JIbAFZAAAABE"]
[Thu Jul 30 08:38:54.778029 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:34904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.778047 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:34904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.804234 2026] [security2:error] [pid 2425154:tid 2425154] [client 114.119.155.144:48701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,14,18/request_format~html"] [unique_id "amr_jhpzOSLDAMoCSUlPcQAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19,14,18/request_format~html
[Thu Jul 30 08:38:54.816607 2026] [core:error] [pid 2423370:tid 2423370] [client 185.177.72.66:34906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.816628 2026] [core:error] [pid 2423370:tid 2423370] [client 185.177.72.66:34906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.853364 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:34912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.853388 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:34912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.888045 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.888083 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:34924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.924191 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:34938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.924210 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:34938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.961165 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:34950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.961186 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:34950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.996046 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:34954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.996081 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:34954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:54.998624 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:13824] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_jniGnV0lYiYXbxD-aAAAACI"]
[Thu Jul 30 08:38:54.998742 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:13824] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amr_jniGnV0lYiYXbxD-aAAAACI"]
[Thu Jul 30 08:38:54.998908 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:13824] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_jniGnV0lYiYXbxD-aAAAACI"]
[Thu Jul 30 08:38:55.031313 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.031352 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:34964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.066244 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:34974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.066279 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:34974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.103547 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:34978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.103592 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:34978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.140190 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:34992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.140214 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:34992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.179840 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:34998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.179864 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:34998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.218226 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:35010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.218261 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:35010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.253927 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:35024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.253971 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:35024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.262003 2026] [security2:error] [pid 2423370:tid 2423370] [client 185.177.72.66:13834] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_j8NUbarpTOVq3JsQhAAAABo"]
[Thu Jul 30 08:38:55.262145 2026] [security2:error] [pid 2423370:tid 2423370] [client 185.177.72.66:13834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amr_j8NUbarpTOVq3JsQhAAAABo"]
[Thu Jul 30 08:38:55.262315 2026] [security2:error] [pid 2423370:tid 2423370] [client 185.177.72.66:13834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_j8NUbarpTOVq3JsQhAAAABo"]
[Thu Jul 30 08:38:55.288903 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:35026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.288923 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:35026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.324610 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:35034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.324636 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:35034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.360228 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:35040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.360251 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:35040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.396550 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:35056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.396583 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:35056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.432296 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:35062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.432317 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:35062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.470004 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:35064] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/backup/laravel.log"] [unique_id "amr_j9uBIW7-_o7ZAhStmQAAADk"]
[Thu Jul 30 08:38:55.470387 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:35064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/laravel.log"] [unique_id "amr_j9uBIW7-_o7ZAhStmQAAADk"]
[Thu Jul 30 08:38:55.470849 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:35064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.470978 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:35064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/laravel.log"] [unique_id "amr_j9uBIW7-_o7ZAhStmQAAADk"]
[Thu Jul 30 08:38:55.515280 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:35074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.515305 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:35074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.524926 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:13840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_jwa8D6A_YxuMgpmdjQAAAEU"]
[Thu Jul 30 08:38:55.525062 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:13840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amr_jwa8D6A_YxuMgpmdjQAAAEU"]
[Thu Jul 30 08:38:55.525262 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:13840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_jwa8D6A_YxuMgpmdjQAAAEU"]
[Thu Jul 30 08:38:55.548207 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:35076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.548226 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:35076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.581531 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.581549 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.615783 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.615814 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.653258 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:58406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.655184 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:58406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.686876 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/deploy/php.ini"] [unique_id "amr_j11wVBXySt5JIbAFiQAAABE"]
[Thu Jul 30 08:38:55.687260 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deploy/php.ini"] [unique_id "amr_j11wVBXySt5JIbAFiQAAABE"]
[Thu Jul 30 08:38:55.687486 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deploy/php.ini"] [unique_id "amr_j11wVBXySt5JIbAFiQAAABE"]
[Thu Jul 30 08:38:55.691778 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:58416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.691798 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:58416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.729480 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.729513 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.766638 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.766658 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.781416 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:13722] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_j_dbqxY4ll4IV_vwwAAAACE"]
[Thu Jul 30 08:38:55.781619 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:13722] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amr_j_dbqxY4ll4IV_vwwAAAACE"]
[Thu Jul 30 08:38:55.781832 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:13722] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_j_dbqxY4ll4IV_vwwAAAACE"]
[Thu Jul 30 08:38:55.807402 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:58452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.807424 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:58452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.855166 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.855187 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.895472 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.895496 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.929277 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:58486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.929300 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:58486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.966600 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.966628 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:55.993782 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.16:62392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:55.994404 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.16:62392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:56.004254 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.004283 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.042062 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.042103 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.078365 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.078389 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.116356 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.116390 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.151198 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.151223 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.172761 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env"] [unique_id "amr_kF1wVBXySt5JIbAFnAAAABE"]
[Thu Jul 30 08:38:56.172914 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env"] [unique_id "amr_kF1wVBXySt5JIbAFnAAAABE"]
[Thu Jul 30 08:38:56.173120 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env"] [unique_id "amr_kF1wVBXySt5JIbAFnAAAABE"]
[Thu Jul 30 08:38:56.173809 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/laravel.log"] [unique_id "amr_kMTyHJeh8MEeCqDRbAAAAEQ"]
[Thu Jul 30 08:38:56.174206 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/laravel.log"] [unique_id "amr_kMTyHJeh8MEeCqDRbAAAAEQ"]
[Thu Jul 30 08:38:56.174329 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/laravel.log"] [unique_id "amr_kMTyHJeh8MEeCqDRbAAAAEQ"]
[Thu Jul 30 08:38:56.190852 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:58538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.197866 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:58538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.192554 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.bak"] [unique_id "amr_kF1wVBXySt5JIbAFnQAAABE"]
[Thu Jul 30 08:38:56.206351 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.bak"] [unique_id "amr_kF1wVBXySt5JIbAFnQAAABE"]
[Thu Jul 30 08:38:56.206597 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.bak"] [unique_id "amr_kF1wVBXySt5JIbAFnQAAABE"]
[Thu Jul 30 08:38:56.224721 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.dev"] [unique_id "amr_kF1wVBXySt5JIbAFngAAABE"]
[Thu Jul 30 08:38:56.224866 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.dev"] [unique_id "amr_kF1wVBXySt5JIbAFngAAABE"]
[Thu Jul 30 08:38:56.225043 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.dev"] [unique_id "amr_kF1wVBXySt5JIbAFngAAABE"]
[Thu Jul 30 08:38:56.242393 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.242421 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.250582 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.dist"] [unique_id "amr_kF1wVBXySt5JIbAFnwAAABE"]
[Thu Jul 30 08:38:56.250716 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.dist"] [unique_id "amr_kF1wVBXySt5JIbAFnwAAABE"]
[Thu Jul 30 08:38:56.250900 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.dist"] [unique_id "amr_kF1wVBXySt5JIbAFnwAAABE"]
[Thu Jul 30 08:38:56.266986 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.local"] [unique_id "amr_kF1wVBXySt5JIbAFoAAAABE"]
[Thu Jul 30 08:38:56.267118 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.local"] [unique_id "amr_kF1wVBXySt5JIbAFoAAAABE"]
[Thu Jul 30 08:38:56.267281 2026] [security2:error] [pid 2427478:tid 2427478] [client 185.177.72.17:18674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deployment/.env.local"] [unique_id "amr_kF1wVBXySt5JIbAFoAAAABE"]
[Thu Jul 30 08:38:56.277867 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.277889 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.315153 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.315174 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.350899 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.350935 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.395278 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.395300 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.431490 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.431520 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.446608 2026] [security2:error] [pid 2426661:tid 2426661] [client 114.119.155.144:48711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,14,18/request_format~html"] [unique_id "amr_kE10g1cPUQyHDS7xpQAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19,14,18/request_format~html
[Thu Jul 30 08:38:56.468337 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.468368 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.507886 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58622] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/backup/php.ini"] [unique_id "amr_kBpzOSLDAMoCSUlPcwAAABM"]
[Thu Jul 30 08:38:56.508252 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58622] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/php.ini"] [unique_id "amr_kBpzOSLDAMoCSUlPcwAAABM"]
[Thu Jul 30 08:38:56.508608 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.508727 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/php.ini"] [unique_id "amr_kBpzOSLDAMoCSUlPcwAAABM"]
[Thu Jul 30 08:38:56.539101 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13748] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amr_kJkA2-P0e5yhCnL_rgAAAAI"]
[Thu Jul 30 08:38:56.539329 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13748] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amr_kJkA2-P0e5yhCnL_rgAAAAI"]
[Thu Jul 30 08:38:56.539549 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13748] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_kJkA2-P0e5yhCnL_rgAAAAI"]
[Thu Jul 30 08:38:56.546388 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.546415 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.560486 2026] [ssl:error] [pid 2421983:tid 2421983] (EAI 2)Name or service not known: [client 144.76.19.72:27422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:56.560525 2026] [ssl:error] [pid 2421983:tid 2421983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:56.585680 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.585712 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.620014 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.620035 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.652478 2026] [ssl:error] [pid 2422156:tid 2422156] (EAI 2)Name or service not known: [client 144.76.19.72:27438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:56.652506 2026] [ssl:error] [pid 2422156:tid 2422156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:56.656998 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.657021 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.695777 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.695807 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.737018 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:58672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.737047 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:58672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.776154 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:58676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.776177 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:58676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.799443 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:13750] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/31_structure_tests/.env"] [unique_id "amr_kBpzOSLDAMoCSUlPdAAAABM"]
[Thu Jul 30 08:38:56.799644 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:13750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/31_structure_tests/.env"] [unique_id "amr_kBpzOSLDAMoCSUlPdAAAABM"]
[Thu Jul 30 08:38:56.799851 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:13750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_kBpzOSLDAMoCSUlPdAAAABM"]
[Thu Jul 30 08:38:56.811296 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.811324 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.849512 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:58700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.849542 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:58700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.883465 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.883488 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.918352 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.918399 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.956724 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.956746 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:58718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.995771 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:56.995816 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.034371 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.034398 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.048484 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:13754] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env"] [unique_id "amr_kQa8D6A_YxuMgpmdkgAAAEU"]
[Thu Jul 30 08:38:57.048616 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:13754] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env"] [unique_id "amr_kQa8D6A_YxuMgpmdkgAAAEU"]
[Thu Jul 30 08:38:57.048778 2026] [security2:error] [pid 2428313:tid 2428313] [client 185.177.72.66:13754] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_kQa8D6A_YxuMgpmdkgAAAEU"]
[Thu Jul 30 08:38:57.071233 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:58752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.071256 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:58752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.111581 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.111608 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.146790 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.146816 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.192544 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:58782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.192593 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:58782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.216865 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/deployment/php.ini"] [unique_id "amr_kUF8-2jmOXMCjJjiSQAAACM"]
[Thu Jul 30 08:38:57.217155 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/deployment/php.ini"] [unique_id "amr_kUF8-2jmOXMCjJjiSQAAACM"]
[Thu Jul 30 08:38:57.217337 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/deployment/php.ini"] [unique_id "amr_kUF8-2jmOXMCjJjiSQAAACM"]
[Thu Jul 30 08:38:57.227800 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.227821 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.270961 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.270992 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.301886 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:13756] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.bak"] [unique_id "amr_keC233pHXOTf93SWZgAAADM"]
[Thu Jul 30 08:38:57.302038 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:13756] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.bak"] [unique_id "amr_keC233pHXOTf93SWZgAAADM"]
[Thu Jul 30 08:38:57.302253 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:13756] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_keC233pHXOTf93SWZgAAADM"]
[Thu Jul 30 08:38:57.309660 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.309688 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.344016 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.344035 2026] [core:error] [pid 2428313:tid 2428313] [client 185.177.72.66:58796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.384217 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:58798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.384236 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:58798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.420889 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.420908 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.458908 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.458935 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:58806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.498502 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.498524 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.533396 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.533413 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.544026 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:13762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.dev"] [unique_id "amr_kaWBySBNOpvIvESBIAAAABs"]
[Thu Jul 30 08:38:57.544163 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:13762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.dev"] [unique_id "amr_kaWBySBNOpvIvESBIAAAABs"]
[Thu Jul 30 08:38:57.544344 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:13762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_kaWBySBNOpvIvESBIAAAABs"]
[Thu Jul 30 08:38:57.571690 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.571709 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:58818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.609430 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58822] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/backup/web.config"] [unique_id "amr_kYyFZ2ptgStT3D1uLQAAAD0"]
[Thu Jul 30 08:38:57.609677 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58822] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /backup/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/backup/web.config"] [unique_id "amr_kYyFZ2ptgStT3D1uLQAAAD0"]
[Thu Jul 30 08:38:57.609875 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58822] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/backup/web.config"] [unique_id "amr_kYyFZ2ptgStT3D1uLQAAAD0"]
[Thu Jul 30 08:38:57.610222 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.610356 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58822] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/backup/web.config"] [unique_id "amr_kYyFZ2ptgStT3D1uLQAAAD0"]
[Thu Jul 30 08:38:57.646649 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.646680 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.679187 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.679208 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:58850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.715790 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:58866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.715822 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:58866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.734021 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.bak"] [unique_id "amr_kUF8-2jmOXMCjJjiXgAAACM"]
[Thu Jul 30 08:38:57.734225 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.bak"] [unique_id "amr_kUF8-2jmOXMCjJjiXgAAACM"]
[Thu Jul 30 08:38:57.734436 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.bak"] [unique_id "amr_kUF8-2jmOXMCjJjiXgAAACM"]
[Thu Jul 30 08:38:57.754007 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58868] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/base/.env"] [unique_id "amr_kS8b8gP_SKt2Q6y9FAAAAD4"]
[Thu Jul 30 08:38:57.754230 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/base/.env"] [unique_id "amr_kS8b8gP_SKt2Q6y9FAAAAD4"]
[Thu Jul 30 08:38:57.754574 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.754699 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:58868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/base/.env"] [unique_id "amr_kS8b8gP_SKt2Q6y9FAAAAD4"]
[Thu Jul 30 08:38:57.754969 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.dev"] [unique_id "amr_kUF8-2jmOXMCjJjiXwAAACM"]
[Thu Jul 30 08:38:57.755171 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.dev"] [unique_id "amr_kUF8-2jmOXMCjJjiXwAAACM"]
[Thu Jul 30 08:38:57.755376 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.dev"] [unique_id "amr_kUF8-2jmOXMCjJjiXwAAACM"]
[Thu Jul 30 08:38:57.789298 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/base_dir/.env"] [unique_id "amr_kRpzOSLDAMoCSUlPdwAAABM"]
[Thu Jul 30 08:38:57.789504 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/base_dir/.env"] [unique_id "amr_kRpzOSLDAMoCSUlPdwAAABM"]
[Thu Jul 30 08:38:57.789849 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.789917 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.dist"] [unique_id "amr_kUF8-2jmOXMCjJjiYAAAACM"]
[Thu Jul 30 08:38:57.789974 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/base_dir/.env"] [unique_id "amr_kRpzOSLDAMoCSUlPdwAAABM"]
[Thu Jul 30 08:38:57.790125 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.dist"] [unique_id "amr_kUF8-2jmOXMCjJjiYAAAACM"]
[Thu Jul 30 08:38:57.790323 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.dist"] [unique_id "amr_kUF8-2jmOXMCjJjiYAAAACM"]
[Thu Jul 30 08:38:57.797095 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:13766] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.dist"] [unique_id "amr_kXiGnV0lYiYXbxD-bwAAACI"]
[Thu Jul 30 08:38:57.797222 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:13766] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.dist"] [unique_id "amr_kXiGnV0lYiYXbxD-bwAAACI"]
[Thu Jul 30 08:38:57.797387 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:13766] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_kXiGnV0lYiYXbxD-bwAAACI"]
[Thu Jul 30 08:38:57.811478 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.local"] [unique_id "amr_kUF8-2jmOXMCjJjiYQAAACM"]
[Thu Jul 30 08:38:57.811657 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.local"] [unique_id "amr_kUF8-2jmOXMCjJjiYQAAACM"]
[Thu Jul 30 08:38:57.812044 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.local"] [unique_id "amr_kUF8-2jmOXMCjJjiYQAAACM"]
[Thu Jul 30 08:38:57.821985 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58880] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/basic-network/.env"] [unique_id "amr_kdzyF_5LOsrbx7vNywAAACU"]
[Thu Jul 30 08:38:57.822145 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58880] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/basic-network/.env"] [unique_id "amr_kdzyF_5LOsrbx7vNywAAACU"]
[Thu Jul 30 08:38:57.823358 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.823671 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58880] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/basic-network/.env"] [unique_id "amr_kdzyF_5LOsrbx7vNywAAACU"]
[Thu Jul 30 08:38:57.835869 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.production"] [unique_id "amr_kUF8-2jmOXMCjJjiYgAAACM"]
[Thu Jul 30 08:38:57.836014 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.production"] [unique_id "amr_kUF8-2jmOXMCjJjiYgAAACM"]
[Thu Jul 30 08:38:57.836209 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.production"] [unique_id "amr_kUF8-2jmOXMCjJjiYgAAACM"]
[Thu Jul 30 08:38:57.858338 2026] [security2:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58886] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/beta/.env.bak"] [unique_id "amr_kfbvc9Ug4bKoWZE4JQAAABI"]
[Thu Jul 30 08:38:57.858496 2026] [security2:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/beta/.env.bak"] [unique_id "amr_kfbvc9Ug4bKoWZE4JQAAABI"]
[Thu Jul 30 08:38:57.858823 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.858939 2026] [security2:error] [pid 2421983:tid 2421983] [client 185.177.72.66:58886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/beta/.env.bak"] [unique_id "amr_kfbvc9Ug4bKoWZE4JQAAABI"]
[Thu Jul 30 08:38:57.870115 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.staging"] [unique_id "amr_kUF8-2jmOXMCjJjiYwAAACM"]
[Thu Jul 30 08:38:57.870269 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.staging"] [unique_id "amr_kUF8-2jmOXMCjJjiYwAAACM"]
[Thu Jul 30 08:38:57.870451 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/.env.staging"] [unique_id "amr_kUF8-2jmOXMCjJjiYwAAACM"]
[Thu Jul 30 08:38:57.895153 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:58894] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/beta/.env.dev"] [unique_id "amr_kaWBySBNOpvIvESBIQAAABs"]
[Thu Jul 30 08:38:57.895296 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:58894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/beta/.env.dev"] [unique_id "amr_kaWBySBNOpvIvESBIQAAABs"]
[Thu Jul 30 08:38:57.895623 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:58894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.895731 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:58894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/beta/.env.dev"] [unique_id "amr_kaWBySBNOpvIvESBIQAAABs"]
[Thu Jul 30 08:38:57.918582 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dev/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/.git/config"] [unique_id "amr_kUF8-2jmOXMCjJjiZQAAACM"]
[Thu Jul 30 08:38:57.919608 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/.git/config"] [unique_id "amr_kUF8-2jmOXMCjJjiZQAAACM"]
[Thu Jul 30 08:38:57.919809 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/.git/config"] [unique_id "amr_kUF8-2jmOXMCjJjiZQAAACM"]
[Thu Jul 30 08:38:57.931087 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:58896] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/beta/.env.dist"] [unique_id "amr_kRGCGrlKGv3qqKZEwwAAADQ"]
[Thu Jul 30 08:38:57.931257 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:58896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/beta/.env.dist"] [unique_id "amr_kRGCGrlKGv3qqKZEwwAAADQ"]
[Thu Jul 30 08:38:57.931575 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:58896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.931722 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:58896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/beta/.env.dist"] [unique_id "amr_kRGCGrlKGv3qqKZEwwAAADQ"]
[Thu Jul 30 08:38:57.967225 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58912] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/beta/.env.local"] [unique_id "amr_kYyFZ2ptgStT3D1uLgAAAD0"]
[Thu Jul 30 08:38:57.967406 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/beta/.env.local"] [unique_id "amr_kYyFZ2ptgStT3D1uLgAAAD0"]
[Thu Jul 30 08:38:57.967740 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:57.967870 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/beta/.env.local"] [unique_id "amr_kYyFZ2ptgStT3D1uLgAAAD0"]
[Thu Jul 30 08:38:58.003996 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58924] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/beta/.env.production"] [unique_id "amr_kuC233pHXOTf93SWaAAAADM"]
[Thu Jul 30 08:38:58.004170 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58924] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/beta/.env.production"] [unique_id "amr_kuC233pHXOTf93SWaAAAADM"]
[Thu Jul 30 08:38:58.004485 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.004606 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:58924] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/beta/.env.production"] [unique_id "amr_kuC233pHXOTf93SWaAAAADM"]
[Thu Jul 30 08:38:58.005091 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/php.ini"] [unique_id "amr_ksTyHJeh8MEeCqDRhwAAAEQ"]
[Thu Jul 30 08:38:58.005447 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/php.ini"] [unique_id "amr_ksTyHJeh8MEeCqDRhwAAAEQ"]
[Thu Jul 30 08:38:58.005581 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/php.ini"] [unique_id "amr_ksTyHJeh8MEeCqDRhwAAAEQ"]
[Thu Jul 30 08:38:58.031542 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amr_kkF8-2jmOXMCjJjiaQAAACM"]
[Thu Jul 30 08:38:58.031912 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amr_kkF8-2jmOXMCjJjiaQAAACM"]
[Thu Jul 30 08:38:58.032115 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amr_kkF8-2jmOXMCjJjiaQAAACM"]
[Thu Jul 30 08:38:58.037528 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58928] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/beta/.env.staging"] [unique_id "amr_kvdbqxY4ll4IV_vwxgAAACE"]
[Thu Jul 30 08:38:58.037692 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/beta/.env.staging"] [unique_id "amr_kvdbqxY4ll4IV_vwxgAAACE"]
[Thu Jul 30 08:38:58.037996 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.038163 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:58928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/beta/.env.staging"] [unique_id "amr_kvdbqxY4ll4IV_vwxgAAACE"]
[Thu Jul 30 08:38:58.051695 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:13776] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.local"] [unique_id "amr_kqQRW2g6f2qydyUyHAAAADA"]
[Thu Jul 30 08:38:58.051843 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:13776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/API/.env.local"] [unique_id "amr_kqQRW2g6f2qydyUyHAAAADA"]
[Thu Jul 30 08:38:58.052009 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:13776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_kqQRW2g6f2qydyUyHAAAADA"]
[Thu Jul 30 08:38:58.068028 2026] [core:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:16209] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/total_objects
[Thu Jul 30 08:38:58.072951 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:58944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.072976 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:58944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.076879 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dev/api-config.ini"] [unique_id "amr_kkF8-2jmOXMCjJjiawAAACM"]
[Thu Jul 30 08:38:58.077166 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/api-config.ini"] [unique_id "amr_kkF8-2jmOXMCjJjiawAAACM"]
[Thu Jul 30 08:38:58.077347 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/api-config.ini"] [unique_id "amr_kkF8-2jmOXMCjJjiawAAACM"]
[Thu Jul 30 08:38:58.109536 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:58958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.109578 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:58958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.146649 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.146670 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:58968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.194519 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.194554 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:58976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.231243 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:58986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.231268 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:58986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.268160 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.268187 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:58994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.304533 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:59000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.304583 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:59000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.315992 2026] [authz_core:error] [pid 2421983:tid 2421983] [client 57.141.0.54:37138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:58.316630 2026] [authz_core:error] [pid 2421983:tid 2421983] [client 57.141.0.54:37138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:58.340256 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:59012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.340274 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:59012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.376857 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.376884 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.412370 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:59028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.412388 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:59028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.450658 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.450690 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.488125 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:59052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.488151 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:59052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.527616 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:59066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.527662 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:59066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.565527 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.565546 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.571940 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13806] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/APP/.env"] [unique_id "amr_khGCGrlKGv3qqKZExAAAADQ"]
[Thu Jul 30 08:38:58.572054 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/APP/.env"] [unique_id "amr_khGCGrlKGv3qqKZExAAAADQ"]
[Thu Jul 30 08:38:58.572226 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_khGCGrlKGv3qqKZExAAAADQ"]
[Thu Jul 30 08:38:58.601845 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:59078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.601867 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:59078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.639018 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:59090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.639036 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:59090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.676638 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.676663 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.711628 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.711660 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.748200 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.748223 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.783190 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:59116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.783219 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:59116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.816416 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:13816] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_kvvM57bIw5PazOlJYQAAAEo"]
[Thu Jul 30 08:38:58.816786 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:13816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amr_kvvM57bIw5PazOlJYQAAAEo"]
[Thu Jul 30 08:38:58.816999 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:13816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_kvvM57bIw5PazOlJYQAAAEo"]
[Thu Jul 30 08:38:58.819410 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:59124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.819434 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:59124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.854304 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:59132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.854331 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:59132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.892058 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.892094 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.896529 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dev/laravel.log"] [unique_id "amr_kkF8-2jmOXMCjJjiiwAAACM"]
[Thu Jul 30 08:38:58.896974 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/laravel.log"] [unique_id "amr_kkF8-2jmOXMCjJjiiwAAACM"]
[Thu Jul 30 08:38:58.897238 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/laravel.log"] [unique_id "amr_kkF8-2jmOXMCjJjiiwAAACM"]
[Thu Jul 30 08:38:58.930797 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.930821 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.965341 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:58.965363 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.001485 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.001522 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.024917 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dev/php.ini"] [unique_id "amr_k0F8-2jmOXMCjJjikAAAACM"]
[Thu Jul 30 08:38:59.025348 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/php.ini"] [unique_id "amr_k0F8-2jmOXMCjJjikAAAACM"]
[Thu Jul 30 08:38:59.025643 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/php.ini"] [unique_id "amr_k0F8-2jmOXMCjJjikAAAACM"]
[Thu Jul 30 08:38:59.045306 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.045335 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.077891 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:59196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.077922 2026] [core:error] [pid 2424223:tid 2424223] [client 185.177.72.66:59196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.086121 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13826] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Archipel/.env"] [unique_id "amr_k5kA2-P0e5yhCnL_tAAAAAI"]
[Thu Jul 30 08:38:59.086255 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13826] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Archipel/.env"] [unique_id "amr_k5kA2-P0e5yhCnL_tAAAAAI"]
[Thu Jul 30 08:38:59.086442 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13826] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_k5kA2-P0e5yhCnL_tAAAAAI"]
[Thu Jul 30 08:38:59.117585 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.119938 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.154854 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.154878 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.163630 2026] [authz_core:error] [pid 2426800:tid 2426800] [client 57.141.0.61:42390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:38:59.164309 2026] [authz_core:error] [pid 2426800:tid 2426800] [client 57.141.0.61:42390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:38:59.196737 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:59222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.196773 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:59222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.229913 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.229932 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.267253 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.267281 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.302478 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.302507 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.336703 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59260] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/beta/php.ini"] [unique_id "amr_k5kA2-P0e5yhCnL_tQAAAAI"]
[Thu Jul 30 08:38:59.336985 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/beta/php.ini"] [unique_id "amr_k5kA2-P0e5yhCnL_tQAAAAI"]
[Thu Jul 30 08:38:59.336989 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:13838] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Assignment3/.env"] [unique_id "amr_k9zyF_5LOsrbx7vN0AAAACU"]
[Thu Jul 30 08:38:59.337182 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:13838] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Assignment3/.env"] [unique_id "amr_k9zyF_5LOsrbx7vN0AAAACU"]
[Thu Jul 30 08:38:59.337304 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.337364 2026] [security2:error] [pid 2424223:tid 2424223] [client 185.177.72.66:13838] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_k9zyF_5LOsrbx7vN0AAAACU"]
[Thu Jul 30 08:38:59.337410 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/beta/php.ini"] [unique_id "amr_k5kA2-P0e5yhCnL_tQAAAAI"]
[Thu Jul 30 08:38:59.372603 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.372626 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.412215 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.412234 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.433111 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/dev/web.config"] [unique_id "amr_k4yFZ2ptgStT3D1uPgAAAD0"]
[Thu Jul 30 08:38:59.433306 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dev/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dev/web.config"] [unique_id "amr_k4yFZ2ptgStT3D1uPgAAAD0"]
[Thu Jul 30 08:38:59.433409 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dev/web.config"] [unique_id "amr_k4yFZ2ptgStT3D1uPgAAAD0"]
[Thu Jul 30 08:38:59.433593 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dev/web.config"] [unique_id "amr_k4yFZ2ptgStT3D1uPgAAAD0"]
[Thu Jul 30 08:38:59.448791 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:59294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.449249 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:59294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.488130 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:59296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.488149 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:59296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.524747 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.524772 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:59312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.534747 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.local"] [unique_id "amr_k4yFZ2ptgStT3D1uQgAAAD0"]
[Thu Jul 30 08:38:59.534862 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.local"] [unique_id "amr_k4yFZ2ptgStT3D1uQgAAAD0"]
[Thu Jul 30 08:38:59.535030 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.local"] [unique_id "amr_k4yFZ2ptgStT3D1uQgAAAD0"]
[Thu Jul 30 08:38:59.558869 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.558887 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.561920 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.production"] [unique_id "amr_k4yFZ2ptgStT3D1uQwAAAD0"]
[Thu Jul 30 08:38:59.562126 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.production"] [unique_id "amr_k4yFZ2ptgStT3D1uQwAAAD0"]
[Thu Jul 30 08:38:59.562333 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.production"] [unique_id "amr_k4yFZ2ptgStT3D1uQwAAAD0"]
[Thu Jul 30 08:38:59.586039 2026] [access_compat:error] [pid 2428412:tid 2428412] [client 106.215.157.145:8308] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:38:59.591972 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.staging"] [unique_id "amr_k4yFZ2ptgStT3D1uRAAAAD0"]
[Thu Jul 30 08:38:59.592159 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.staging"] [unique_id "amr_k4yFZ2ptgStT3D1uRAAAAD0"]
[Thu Jul 30 08:38:59.592419 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/develop/.env.staging"] [unique_id "amr_k4yFZ2ptgStT3D1uRAAAAD0"]
[Thu Jul 30 08:38:59.603263 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:13840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Assignment4/.env"] [unique_id "amr_k-WvknE5emN3ObPc6wAAACc"]
[Thu Jul 30 08:38:59.614893 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:13840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Assignment4/.env"] [unique_id "amr_k-WvknE5emN3ObPc6wAAACc"]
[Thu Jul 30 08:38:59.615149 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:13840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_k-WvknE5emN3ObPc6wAAACc"]
[Thu Jul 30 08:38:59.606055 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.615573 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.653204 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.653232 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.675978 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/developer/.env"] [unique_id "amr_k4yFZ2ptgStT3D1uSAAAAD0"]
[Thu Jul 30 08:38:59.676173 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/developer/.env"] [unique_id "amr_k4yFZ2ptgStT3D1uSAAAAD0"]
[Thu Jul 30 08:38:59.676391 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/developer/.env"] [unique_id "amr_k4yFZ2ptgStT3D1uSAAAAD0"]
[Thu Jul 30 08:38:59.687415 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.687551 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.697687 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.bak"] [unique_id "amr_k4yFZ2ptgStT3D1uSQAAAD0"]
[Thu Jul 30 08:38:59.697914 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.bak"] [unique_id "amr_k4yFZ2ptgStT3D1uSQAAAD0"]
[Thu Jul 30 08:38:59.698155 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.bak"] [unique_id "amr_k4yFZ2ptgStT3D1uSQAAAD0"]
[Thu Jul 30 08:38:59.718198 2026] [ssl:error] [pid 2414865:tid 2414865] (EAI 2)Name or service not known: [client 144.76.19.72:24942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:59.718224 2026] [ssl:error] [pid 2414865:tid 2414865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:59.722848 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.722868 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.728914 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.dev"] [unique_id "amr_k4yFZ2ptgStT3D1uSgAAAD0"]
[Thu Jul 30 08:38:59.729058 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.dev"] [unique_id "amr_k4yFZ2ptgStT3D1uSgAAAD0"]
[Thu Jul 30 08:38:59.729254 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.dev"] [unique_id "amr_k4yFZ2ptgStT3D1uSgAAAD0"]
[Thu Jul 30 08:38:59.751551 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.dist"] [unique_id "amr_k4yFZ2ptgStT3D1uSwAAAD0"]
[Thu Jul 30 08:38:59.751700 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.dist"] [unique_id "amr_k4yFZ2ptgStT3D1uSwAAAD0"]
[Thu Jul 30 08:38:59.751876 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.dist"] [unique_id "amr_k4yFZ2ptgStT3D1uSwAAAD0"]
[Thu Jul 30 08:38:59.760555 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.760589 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.770613 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.local"] [unique_id "amr_k4yFZ2ptgStT3D1uTAAAAD0"]
[Thu Jul 30 08:38:59.770740 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.local"] [unique_id "amr_k4yFZ2ptgStT3D1uTAAAAD0"]
[Thu Jul 30 08:38:59.770910 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/developer/.env.local"] [unique_id "amr_k4yFZ2ptgStT3D1uTAAAAD0"]
[Thu Jul 30 08:38:59.772615 2026] [ssl:error] [pid 2428416:tid 2428416] (EAI 2)Name or service not known: [client 144.76.19.72:24944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:38:59.772637 2026] [ssl:error] [pid 2428416:tid 2428416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:38:59.802887 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.802909 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.840029 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.840048 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.852924 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:13854] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/BACK/.env"] [unique_id "amr_k9e90y7TzMBvsyM2ZwAAAC0"]
[Thu Jul 30 08:38:59.853054 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:13854] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/BACK/.env"] [unique_id "amr_k9e90y7TzMBvsyM2ZwAAAC0"]
[Thu Jul 30 08:38:59.853254 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:13854] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_k9e90y7TzMBvsyM2ZwAAAC0"]
[Thu Jul 30 08:38:59.877236 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:59384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.877273 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:59384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.884793 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/web.config"] [unique_id "amr_k8TyHJeh8MEeCqDRpAAAAEQ"]
[Thu Jul 30 08:38:59.884995 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /backup/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/web.config"] [unique_id "amr_k8TyHJeh8MEeCqDRpAAAAEQ"]
[Thu Jul 30 08:38:59.885118 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/web.config"] [unique_id "amr_k8TyHJeh8MEeCqDRpAAAAEQ"]
[Thu Jul 30 08:38:59.885220 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/backup/web.config"] [unique_id "amr_k8TyHJeh8MEeCqDRpAAAAEQ"]
[Thu Jul 30 08:38:59.912194 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.912216 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.947145 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.947175 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.994380 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:38:59.994409 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.032965 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59412] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bgoldd/.env"] [unique_id "amr_lJkA2-P0e5yhCnL_twAAAAI"]
[Thu Jul 30 08:39:00.033095 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bgoldd/.env"] [unique_id "amr_lJkA2-P0e5yhCnL_twAAAAI"]
[Thu Jul 30 08:39:00.033390 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.033494 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bgoldd/.env"] [unique_id "amr_lJkA2-P0e5yhCnL_twAAAAI"]
[Thu Jul 30 08:39:00.067877 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.067899 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.092612 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:13868] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/BACKEND/.env"] [unique_id "amr_lNVtxCBUSPwlMZFK3AAAABk"]
[Thu Jul 30 08:39:00.092760 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:13868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/BACKEND/.env"] [unique_id "amr_lNVtxCBUSPwlMZFK3AAAABk"]
[Thu Jul 30 08:39:00.092937 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:13868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lNVtxCBUSPwlMZFK3AAAABk"]
[Thu Jul 30 08:39:00.096299 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/base/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqAAAAEQ"]
[Thu Jul 30 08:39:00.096412 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/base/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqAAAAEQ"]
[Thu Jul 30 08:39:00.096512 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/base/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqAAAAEQ"]
[Thu Jul 30 08:39:00.100829 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59434] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bitcoind/.env"] [unique_id "amr_lMsDPUni1EbX-qVhtQAAADg"]
[Thu Jul 30 08:39:00.101036 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bitcoind/.env"] [unique_id "amr_lMsDPUni1EbX-qVhtQAAADg"]
[Thu Jul 30 08:39:00.101371 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.101685 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bitcoind/.env"] [unique_id "amr_lMsDPUni1EbX-qVhtQAAADg"]
[Thu Jul 30 08:39:00.124929 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/base_dir/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqQAAAEQ"]
[Thu Jul 30 08:39:00.125085 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/base_dir/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqQAAAEQ"]
[Thu Jul 30 08:39:00.125190 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/base_dir/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqQAAAEQ"]
[Thu Jul 30 08:39:00.137017 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59448] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bkp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bkp/.env"] [unique_id "amr_lPJI1GD8s375y7G9EAAAAE0"]
[Thu Jul 30 08:39:00.137164 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59448] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bkp/.env"] [unique_id "amr_lPJI1GD8s375y7G9EAAAAE0"]
[Thu Jul 30 08:39:00.137464 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.137577 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59448] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bkp/.env"] [unique_id "amr_lPJI1GD8s375y7G9EAAAAE0"]
[Thu Jul 30 08:39:00.150763 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/basic-network/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqgAAAEQ"]
[Thu Jul 30 08:39:00.150884 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/basic-network/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqgAAAEQ"]
[Thu Jul 30 08:39:00.150984 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/basic-network/.env"] [unique_id "amr_lMTyHJeh8MEeCqDRqgAAAEQ"]
[Thu Jul 30 08:39:00.171146 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.bak"] [unique_id "amr_lMTyHJeh8MEeCqDRqwAAAEQ"]
[Thu Jul 30 08:39:00.171258 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.bak"] [unique_id "amr_lMTyHJeh8MEeCqDRqwAAAEQ"]
[Thu Jul 30 08:39:00.171351 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.bak"] [unique_id "amr_lMTyHJeh8MEeCqDRqwAAAEQ"]
[Thu Jul 30 08:39:00.172222 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.172244 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.189195 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.dev"] [unique_id "amr_lMTyHJeh8MEeCqDRrAAAAEQ"]
[Thu Jul 30 08:39:00.189316 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.dev"] [unique_id "amr_lMTyHJeh8MEeCqDRrAAAAEQ"]
[Thu Jul 30 08:39:00.189423 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.dev"] [unique_id "amr_lMTyHJeh8MEeCqDRrAAAAEQ"]
[Thu Jul 30 08:39:00.206290 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59466] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /bkp/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bkp/.git/config"] [unique_id "amr_lNGWH5xbt04huX6WQAAAABA"]
[Thu Jul 30 08:39:00.206416 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bkp/.git/config"] [unique_id "amr_lNGWH5xbt04huX6WQAAAABA"]
[Thu Jul 30 08:39:00.206700 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.dist"] [unique_id "amr_lMTyHJeh8MEeCqDRrQAAAEQ"]
[Thu Jul 30 08:39:00.206731 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.206813 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.dist"] [unique_id "amr_lMTyHJeh8MEeCqDRrQAAAEQ"]
[Thu Jul 30 08:39:00.206831 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bkp/.git/config"] [unique_id "amr_lNGWH5xbt04huX6WQAAAABA"]
[Thu Jul 30 08:39:00.206910 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.dist"] [unique_id "amr_lMTyHJeh8MEeCqDRrQAAAEQ"]
[Thu Jul 30 08:39:00.232884 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.local"] [unique_id "amr_lMTyHJeh8MEeCqDRrgAAAEQ"]
[Thu Jul 30 08:39:00.233000 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.local"] [unique_id "amr_lMTyHJeh8MEeCqDRrgAAAEQ"]
[Thu Jul 30 08:39:00.233110 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.local"] [unique_id "amr_lMTyHJeh8MEeCqDRrgAAAEQ"]
[Thu Jul 30 08:39:00.244921 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:59476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.245696 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:59476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.252640 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.production"] [unique_id "amr_lMTyHJeh8MEeCqDRrwAAAEQ"]
[Thu Jul 30 08:39:00.252766 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.production"] [unique_id "amr_lMTyHJeh8MEeCqDRrwAAAEQ"]
[Thu Jul 30 08:39:00.252861 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.production"] [unique_id "amr_lMTyHJeh8MEeCqDRrwAAAEQ"]
[Thu Jul 30 08:39:00.278690 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.staging"] [unique_id "amr_lMTyHJeh8MEeCqDRsAAAAEQ"]
[Thu Jul 30 08:39:00.278801 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.staging"] [unique_id "amr_lMTyHJeh8MEeCqDRsAAAAEQ"]
[Thu Jul 30 08:39:00.278894 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.17:44284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/.env.staging"] [unique_id "amr_lMTyHJeh8MEeCqDRsAAAAEQ"]
[Thu Jul 30 08:39:00.289730 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.289752 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.325001 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.325021 2026] [core:error] [pid 2421983:tid 2421983] [client 185.177.72.66:59492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.359358 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.359382 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.370984 2026] [access_compat:error] [pid 2423797:tid 2423797] [client 4.232.188.49:48657] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 08:39:00.383891 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/BackEnd/.env"] [unique_id "amr_lJkA2-P0e5yhCnL_uAAAAAI"]
[Thu Jul 30 08:39:00.384049 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/BackEnd/.env"] [unique_id "amr_lJkA2-P0e5yhCnL_uAAAAAI"]
[Thu Jul 30 08:39:00.384258 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:13872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lJkA2-P0e5yhCnL_uAAAAAI"]
[Thu Jul 30 08:39:00.393762 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59508] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_lBGCGrlKGv3qqKZEyQAAADQ"]
[Thu Jul 30 08:39:00.394110 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_lBGCGrlKGv3qqKZEyQAAADQ"]
[Thu Jul 30 08:39:00.394461 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.394584 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_lBGCGrlKGv3qqKZEyQAAADQ"]
[Thu Jul 30 08:39:00.428950 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59512] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/bkp/api-config.ini"] [unique_id "amr_lBpvfcvm04JnKtSVeQAAAA8"]
[Thu Jul 30 08:39:00.429250 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bkp/api-config.ini"] [unique_id "amr_lBpvfcvm04JnKtSVeQAAAA8"]
[Thu Jul 30 08:39:00.429553 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.429675 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bkp/api-config.ini"] [unique_id "amr_lBpvfcvm04JnKtSVeQAAAA8"]
[Thu Jul 30 08:39:00.464779 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.464807 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:59526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.501346 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.501370 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.536631 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59552] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/bkp/laravel.log"] [unique_id "amr_lKlzm7G0Pp-9gn6pfQAAAEk"]
[Thu Jul 30 08:39:00.536905 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bkp/laravel.log"] [unique_id "amr_lKlzm7G0Pp-9gn6pfQAAAEk"]
[Thu Jul 30 08:39:00.537248 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.537351 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bkp/laravel.log"] [unique_id "amr_lKlzm7G0Pp-9gn6pfQAAAEk"]
[Thu Jul 30 08:39:00.574751 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.574777 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.616664 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:59556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.616693 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:59556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.643152 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:13882] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/Build.bat"] [unique_id "amr_lC8z5UsblH75uX6lZwAAABc"]
[Thu Jul 30 08:39:00.643452 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:13882] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Build.bat"] [unique_id "amr_lC8z5UsblH75uX6lZwAAABc"]
[Thu Jul 30 08:39:00.643636 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:13882] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lC8z5UsblH75uX6lZwAAABc"]
[Thu Jul 30 08:39:00.648953 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/developer/php.ini"] [unique_id "amr_lIyFZ2ptgStT3D1ubwAAAD0"]
[Thu Jul 30 08:39:00.649246 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/developer/php.ini"] [unique_id "amr_lIyFZ2ptgStT3D1ubwAAAD0"]
[Thu Jul 30 08:39:00.649412 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/developer/php.ini"] [unique_id "amr_lIyFZ2ptgStT3D1ubwAAAD0"]
[Thu Jul 30 08:39:00.653795 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59558] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/bkp/web.config"] [unique_id "amr_lEAEOnquTlmZJ4R-0QAAAC8"]
[Thu Jul 30 08:39:00.653995 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59558] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /bkp/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bkp/web.config"] [unique_id "amr_lEAEOnquTlmZJ4R-0QAAAC8"]
[Thu Jul 30 08:39:00.654120 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bkp/web.config"] [unique_id "amr_lEAEOnquTlmZJ4R-0QAAAC8"]
[Thu Jul 30 08:39:00.654427 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.654535 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bkp/web.config"] [unique_id "amr_lEAEOnquTlmZJ4R-0QAAAC8"]
[Thu Jul 30 08:39:00.688364 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/blankon/.env"] [unique_id "amr_lC8b8gP_SKt2Q6y9HQAAAD4"]
[Thu Jul 30 08:39:00.688494 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blankon/.env"] [unique_id "amr_lC8b8gP_SKt2Q6y9HQAAAD4"]
[Thu Jul 30 08:39:00.688810 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.688919 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:59574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blankon/.env"] [unique_id "amr_lC8b8gP_SKt2Q6y9HQAAAD4"]
[Thu Jul 30 08:39:00.726825 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/blob/.env"] [unique_id "amr_lAovdwhMhh9vBJDQVgAAADE"]
[Thu Jul 30 08:39:00.726960 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blob/.env"] [unique_id "amr_lAovdwhMhh9vBJDQVgAAADE"]
[Thu Jul 30 08:39:00.727288 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.727392 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blob/.env"] [unique_id "amr_lAovdwhMhh9vBJDQVgAAADE"]
[Thu Jul 30 08:39:00.732128 2026] [authz_core:error] [pid 2428115:tid 2428115] [client 52.238.199.152:46457] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 08:39:00.762640 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.762673 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.798619 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59600] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/blog/.git/config"] [unique_id "amr_lBpvfcvm04JnKtSVegAAAA8"]
[Thu Jul 30 08:39:00.798743 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blog/.git/config"] [unique_id "amr_lBpvfcvm04JnKtSVegAAAA8"]
[Thu Jul 30 08:39:00.799042 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.799163 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blog/.git/config"] [unique_id "amr_lBpvfcvm04JnKtSVegAAAA8"]
[Thu Jul 30 08:39:00.834949 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.834979 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.872012 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:59610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.872033 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:59610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.885792 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:13888] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Chai/.env"] [unique_id "amr_lEF8-2jmOXMCjJjimAAAACM"]
[Thu Jul 30 08:39:00.885906 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:13888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Chai/.env"] [unique_id "amr_lEF8-2jmOXMCjJjimAAAACM"]
[Thu Jul 30 08:39:00.886087 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:13888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lEF8-2jmOXMCjJjimAAAACM"]
[Thu Jul 30 08:39:00.906135 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.906164 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.944030 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.944052 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.979713 2026] [security2:error] [pid 2427541:tid 2427541] [client 185.177.72.66:59634] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_lNtL74OMwWkcS1bnqgAAADw"]
[Thu Jul 30 08:39:00.979997 2026] [security2:error] [pid 2427541:tid 2427541] [client 185.177.72.66:59634] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_lNtL74OMwWkcS1bnqgAAADw"]
[Thu Jul 30 08:39:00.980364 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:59634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:00.980485 2026] [security2:error] [pid 2427541:tid 2427541] [client 185.177.72.66:59634] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_lNtL74OMwWkcS1bnqgAAADw"]
[Thu Jul 30 08:39:01.016815 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59642] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/blog/api-config.ini"] [unique_id "amr_ldGWH5xbt04huX6WQgAAABA"]
[Thu Jul 30 08:39:01.017235 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blog/api-config.ini"] [unique_id "amr_ldGWH5xbt04huX6WQgAAABA"]
[Thu Jul 30 08:39:01.017582 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.017734 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blog/api-config.ini"] [unique_id "amr_ldGWH5xbt04huX6WQgAAABA"]
[Thu Jul 30 08:39:01.053157 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.053185 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.087981 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.088008 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.108457 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/developerslv/.env"] [unique_id "amr_lYyFZ2ptgStT3D1uggAAAD0"]
[Thu Jul 30 08:39:01.108643 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/developerslv/.env"] [unique_id "amr_lYyFZ2ptgStT3D1uggAAAD0"]
[Thu Jul 30 08:39:01.108846 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/developerslv/.env"] [unique_id "amr_lYyFZ2ptgStT3D1uggAAAD0"]
[Thu Jul 30 08:39:01.123011 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59670] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/blog/laravel.log"] [unique_id "amr_lZkA2-P0e5yhCnL_ugAAAAI"]
[Thu Jul 30 08:39:01.123361 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blog/laravel.log"] [unique_id "amr_lZkA2-P0e5yhCnL_ugAAAAI"]
[Thu Jul 30 08:39:01.123690 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.123796 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:59670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blog/laravel.log"] [unique_id "amr_lZkA2-P0e5yhCnL_ugAAAAI"]
[Thu Jul 30 08:39:01.136236 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13904] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/ClientApp/.env"] [unique_id "amr_lRGCGrlKGv3qqKZEywAAADQ"]
[Thu Jul 30 08:39:01.136409 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/ClientApp/.env"] [unique_id "amr_lRGCGrlKGv3qqKZEywAAADQ"]
[Thu Jul 30 08:39:01.136587 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:13904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lRGCGrlKGv3qqKZEywAAADQ"]
[Thu Jul 30 08:39:01.139620 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/development/.env.bak"] [unique_id "amr_lYyFZ2ptgStT3D1ugwAAAD0"]
[Thu Jul 30 08:39:01.139735 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/development/.env.bak"] [unique_id "amr_lYyFZ2ptgStT3D1ugwAAAD0"]
[Thu Jul 30 08:39:01.139911 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/development/.env.bak"] [unique_id "amr_lYyFZ2ptgStT3D1ugwAAAD0"]
[Thu Jul 30 08:39:01.158189 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.158217 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.159535 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/development/.env.dev"] [unique_id "amr_lYyFZ2ptgStT3D1uhAAAAD0"]
[Thu Jul 30 08:39:01.159658 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/development/.env.dev"] [unique_id "amr_lYyFZ2ptgStT3D1uhAAAAD0"]
[Thu Jul 30 08:39:01.159823 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/development/.env.dev"] [unique_id "amr_lYyFZ2ptgStT3D1uhAAAAD0"]
[Thu Jul 30 08:39:01.195582 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/development/.env.dist"] [unique_id "amr_lYyFZ2ptgStT3D1uhQAAAD0"]
[Thu Jul 30 08:39:01.195723 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/development/.env.dist"] [unique_id "amr_lYyFZ2ptgStT3D1uhQAAAD0"]
[Thu Jul 30 08:39:01.195906 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/development/.env.dist"] [unique_id "amr_lYyFZ2ptgStT3D1uhQAAAD0"]
[Thu Jul 30 08:39:01.197557 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.197598 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.226929 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/development/.env.local"] [unique_id "amr_lYyFZ2ptgStT3D1uhgAAAD0"]
[Thu Jul 30 08:39:01.227054 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/development/.env.local"] [unique_id "amr_lYyFZ2ptgStT3D1uhgAAAD0"]
[Thu Jul 30 08:39:01.227242 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/development/.env.local"] [unique_id "amr_lYyFZ2ptgStT3D1uhgAAAD0"]
[Thu Jul 30 08:39:01.235613 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59690] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/blog/web.config"] [unique_id "amr_lUF8-2jmOXMCjJjimQAAACM"]
[Thu Jul 30 08:39:01.235816 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59690] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /blog/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/blog/web.config"] [unique_id "amr_lUF8-2jmOXMCjJjimQAAACM"]
[Thu Jul 30 08:39:01.235942 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blog/web.config"] [unique_id "amr_lUF8-2jmOXMCjJjimQAAACM"]
[Thu Jul 30 08:39:01.236260 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.236360 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blog/web.config"] [unique_id "amr_lUF8-2jmOXMCjJjimQAAACM"]
[Thu Jul 30 08:39:01.247227 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/development/.env.production"] [unique_id "amr_lYyFZ2ptgStT3D1uhwAAAD0"]
[Thu Jul 30 08:39:01.247353 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/development/.env.production"] [unique_id "amr_lYyFZ2ptgStT3D1uhwAAAD0"]
[Thu Jul 30 08:39:01.247522 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/development/.env.production"] [unique_id "amr_lYyFZ2ptgStT3D1uhwAAAD0"]
[Thu Jul 30 08:39:01.270764 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/development/.env.staging"] [unique_id "amr_lYyFZ2ptgStT3D1uiAAAAD0"]
[Thu Jul 30 08:39:01.270892 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/development/.env.staging"] [unique_id "amr_lYyFZ2ptgStT3D1uiAAAAD0"]
[Thu Jul 30 08:39:01.271062 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.17:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/development/.env.staging"] [unique_id "amr_lYyFZ2ptgStT3D1uiAAAAD0"]
[Thu Jul 30 08:39:01.272151 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59704] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/blue/.env"] [unique_id "amr_lalzm7G0Pp-9gn6pfwAAAEk"]
[Thu Jul 30 08:39:01.272330 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/blue/.env"] [unique_id "amr_lalzm7G0Pp-9gn6pfwAAAEk"]
[Thu Jul 30 08:39:01.272675 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.272810 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:59704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/blue/.env"] [unique_id "amr_lalzm7G0Pp-9gn6pfwAAAEk"]
[Thu Jul 30 08:39:01.307122 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bookchain-client/.env"] [unique_id "amr_lfvM57bIw5PazOlJZQAAAEo"]
[Thu Jul 30 08:39:01.307339 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bookchain-client/.env"] [unique_id "amr_lfvM57bIw5PazOlJZQAAAEo"]
[Thu Jul 30 08:39:01.307759 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.307900 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bookchain-client/.env"] [unique_id "amr_lfvM57bIw5PazOlJZQAAAEo"]
[Thu Jul 30 08:39:01.344825 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:59728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bootstrap/.env"] [unique_id "amr_ldVtxCBUSPwlMZFK3gAAABk"]
[Thu Jul 30 08:39:01.344950 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:59728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bootstrap/.env"] [unique_id "amr_ldVtxCBUSPwlMZFK3gAAABk"]
[Thu Jul 30 08:39:01.345283 2026] [core:error] [pid 2414865:tid 2414865] [client 185.177.72.66:59728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.345385 2026] [security2:error] [pid 2414865:tid 2414865] [client 185.177.72.66:59728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bootstrap/.env"] [unique_id "amr_ldVtxCBUSPwlMZFK3gAAABk"]
[Thu Jul 30 08:39:01.378462 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:59732] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bot/.env"] [unique_id "amr_lf8233Hh3pbQWVezIgAAABU"]
[Thu Jul 30 08:39:01.378594 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:59732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bot/.env"] [unique_id "amr_lf8233Hh3pbQWVezIgAAABU"]
[Thu Jul 30 08:39:01.378893 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:59732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.378997 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:59732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bot/.env"] [unique_id "amr_lf8233Hh3pbQWVezIgAAABU"]
[Thu Jul 30 08:39:01.390022 2026] [ssl:error] [pid 2420262:tid 2420262] (70014)End of file found: [client 216.73.216.199:16209] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:01.391288 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:13914] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_ldGWH5xbt04huX6WQwAAABA"]
[Thu Jul 30 08:39:01.391459 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:13914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amr_ldGWH5xbt04huX6WQwAAABA"]
[Thu Jul 30 08:39:01.391683 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:13914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_ldGWH5xbt04huX6WQwAAABA"]
[Thu Jul 30 08:39:01.415051 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bot/.env.bak"] [unique_id "amr_lUAEOnquTlmZJ4R-0wAAAC8"]
[Thu Jul 30 08:39:01.415206 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bot/.env.bak"] [unique_id "amr_lUAEOnquTlmZJ4R-0wAAAC8"]
[Thu Jul 30 08:39:01.415509 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.415697 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bot/.env.bak"] [unique_id "amr_lUAEOnquTlmZJ4R-0wAAAC8"]
[Thu Jul 30 08:39:01.449175 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bot/.env.dev"] [unique_id "amr_lQovdwhMhh9vBJDQWAAAADE"]
[Thu Jul 30 08:39:01.449338 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bot/.env.dev"] [unique_id "amr_lQovdwhMhh9vBJDQWAAAADE"]
[Thu Jul 30 08:39:01.449661 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.449769 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bot/.env.dev"] [unique_id "amr_lQovdwhMhh9vBJDQWAAAADE"]
[Thu Jul 30 08:39:01.491977 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59756] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bot/.env.dist"] [unique_id "amr_lRGCGrlKGv3qqKZEzAAAADQ"]
[Thu Jul 30 08:39:01.492175 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59756] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bot/.env.dist"] [unique_id "amr_lRGCGrlKGv3qqKZEzAAAADQ"]
[Thu Jul 30 08:39:01.492510 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.492643 2026] [security2:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59756] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bot/.env.dist"] [unique_id "amr_lRGCGrlKGv3qqKZEzAAAADQ"]
[Thu Jul 30 08:39:01.530961 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59758] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bot/.env.local"] [unique_id "amr_lRpvfcvm04JnKtSVfAAAAA8"]
[Thu Jul 30 08:39:01.531208 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bot/.env.local"] [unique_id "amr_lRpvfcvm04JnKtSVfAAAAA8"]
[Thu Jul 30 08:39:01.531550 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.531695 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bot/.env.local"] [unique_id "amr_lRpvfcvm04JnKtSVfAAAAA8"]
[Thu Jul 30 08:39:01.568646 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.568669 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.602705 2026] [authz_core:error] [pid 2427701:tid 2427701] [client 57.141.0.11:63362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:01.603317 2026] [authz_core:error] [pid 2427701:tid 2427701] [client 57.141.0.11:63362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:01.607198 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.607227 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.633728 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:13930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amr_lcTyHJeh8MEeCqDRvgAAAEQ"]
[Thu Jul 30 08:39:01.633857 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:13930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amr_lcTyHJeh8MEeCqDRvgAAAEQ"]
[Thu Jul 30 08:39:01.634019 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:13930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lcTyHJeh8MEeCqDRvgAAAEQ"]
[Thu Jul 30 08:39:01.641772 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.641790 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.676234 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.676251 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:59802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.713964 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:59806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.713981 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:59806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.749482 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.749502 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.785160 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:59826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.785186 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:59826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.822571 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.822595 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.860889 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.860921 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:59844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.902412 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.902432 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.939578 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.939602 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.979345 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:59868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:01.979369 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:59868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.013757 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:59874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.013778 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:59874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.046727 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.046752 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.091711 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.091734 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:59890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.129590 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.129617 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.165410 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.165436 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.195646 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/development/php.ini"] [unique_id "amr_lqlzm7G0Pp-9gn6plQAAAEk"]
[Thu Jul 30 08:39:02.195992 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/development/php.ini"] [unique_id "amr_lqlzm7G0Pp-9gn6plQAAAEk"]
[Thu Jul 30 08:39:02.196225 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/development/php.ini"] [unique_id "amr_lqlzm7G0Pp-9gn6plQAAAEk"]
[Thu Jul 30 08:39:02.202737 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:59926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.202763 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:59926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.243487 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.243513 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.257215 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:13946] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_lo_4x2IDFYJd2RFyrwAAAAw"]
[Thu Jul 30 08:39:02.257366 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:13946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amr_lo_4x2IDFYJd2RFyrwAAAAw"]
[Thu Jul 30 08:39:02.257549 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:13946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lo_4x2IDFYJd2RFyrwAAAAw"]
[Thu Jul 30 08:39:02.284368 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.284390 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:59938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.321670 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:59944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.321693 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:59944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.354506 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.354525 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.397284 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.397310 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.431469 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.431493 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.467831 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.467854 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:59968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.503115 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.503138 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:59978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.543974 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.543995 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:59980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.580752 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.580775 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:59994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.618138 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.618160 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:59996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.637021 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/php.ini"] [unique_id "amr_lssDPUni1EbX-qVhzQAAADg"]
[Thu Jul 30 08:39:02.637434 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/php.ini"] [unique_id "amr_lssDPUni1EbX-qVhzQAAADg"]
[Thu Jul 30 08:39:02.637580 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/beta/php.ini"] [unique_id "amr_lssDPUni1EbX-qVhzQAAADg"]
[Thu Jul 30 08:39:02.641812 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:13958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_lo7QYn_mSSYdmItJ3AAAAA0"]
[Thu Jul 30 08:39:02.642600 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:13958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amr_lo7QYn_mSSYdmItJ3AAAAA0"]
[Thu Jul 30 08:39:02.642791 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:13958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lo7QYn_mSSYdmItJ3AAAAA0"]
[Thu Jul 30 08:39:02.652622 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:60012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.653435 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:60012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.654438 2026] [authz_core:error] [pid 2428115:tid 2428115] [client 52.238.199.152:46457] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/ID3/error_log
[Thu Jul 30 08:39:02.678129 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/directories/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6pqQAAAEk"]
[Thu Jul 30 08:39:02.678273 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/directories/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6pqQAAAEk"]
[Thu Jul 30 08:39:02.678479 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/directories/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6pqQAAAEk"]
[Thu Jul 30 08:39:02.700427 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:60026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.700450 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:60026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.706998 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dist/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6pqgAAAEk"]
[Thu Jul 30 08:39:02.707180 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dist/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6pqgAAAEk"]
[Thu Jul 30 08:39:02.707370 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dist/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6pqgAAAEk"]
[Thu Jul 30 08:39:02.736024 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:60028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.736045 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:60028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.756173 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/django-blog/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6prAAAAEk"]
[Thu Jul 30 08:39:02.756291 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/django-blog/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6prAAAAEk"]
[Thu Jul 30 08:39:02.756455 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/django-blog/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6prAAAAEk"]
[Thu Jul 30 08:39:02.774332 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.774360 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.775457 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/django/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6prQAAAEk"]
[Thu Jul 30 08:39:02.775597 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/django/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6prQAAAEk"]
[Thu Jul 30 08:39:02.775776 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/django/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6prQAAAEk"]
[Thu Jul 30 08:39:02.809504 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.809528 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.830878 2026] [ssl:error] [pid 2422886:tid 2422886] (EAI 2)Name or service not known: [client 144.76.19.72:24958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:02.830913 2026] [ssl:error] [pid 2422886:tid 2422886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:02.847667 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60048] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/bot/php.ini"] [unique_id "amr_lhpvfcvm04JnKtSVfwAAAA8"]
[Thu Jul 30 08:39:02.847957 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bot/php.ini"] [unique_id "amr_lhpvfcvm04JnKtSVfwAAAA8"]
[Thu Jul 30 08:39:02.848284 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.848387 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bot/php.ini"] [unique_id "amr_lhpvfcvm04JnKtSVfwAAAA8"]
[Thu Jul 30 08:39:02.887641 2026] [ssl:error] [pid 2412506:tid 2412506] (EAI 2)Name or service not known: [client 144.76.19.72:24966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:02.887665 2026] [ssl:error] [pid 2412506:tid 2412506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:02.895691 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:60062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.895719 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:60062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.898221 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:13970] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/FE/huey/.env"] [unique_id "amr_lkF8-2jmOXMCjJjinwAAACM"]
[Thu Jul 30 08:39:02.898368 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:13970] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/FE/huey/.env"] [unique_id "amr_lkF8-2jmOXMCjJjinwAAACM"]
[Thu Jul 30 08:39:02.898535 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:13970] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lkF8-2jmOXMCjJjinwAAACM"]
[Thu Jul 30 08:39:02.929761 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.929783 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.961862 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/django_project_path/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6ptQAAAEk"]
[Thu Jul 30 08:39:02.962038 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/django_project_path/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6ptQAAAEk"]
[Thu Jul 30 08:39:02.962242 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/django_project_path/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6ptQAAAEk"]
[Thu Jul 30 08:39:02.966620 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:60090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.966638 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:60090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:02.984924 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/doc/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6ptgAAAEk"]
[Thu Jul 30 08:39:02.985097 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/doc/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6ptgAAAEk"]
[Thu Jul 30 08:39:02.985293 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/doc/.env"] [unique_id "amr_lqlzm7G0Pp-9gn6ptgAAAEk"]
[Thu Jul 30 08:39:03.002808 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:60106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.002839 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:60106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.037710 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.037732 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.050773 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker-compose/platform/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6puQAAAEk"]
[Thu Jul 30 08:39:03.050922 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker-compose/platform/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6puQAAAEk"]
[Thu Jul 30 08:39:03.051121 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker-compose/platform/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6puQAAAEk"]
[Thu Jul 30 08:39:03.074230 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:60124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.074253 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:60124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.074775 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker-elk/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pugAAAEk"]
[Thu Jul 30 08:39:03.074901 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker-elk/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pugAAAEk"]
[Thu Jul 30 08:39:03.075097 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker-elk/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pugAAAEk"]
[Thu Jul 30 08:39:03.108749 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6puwAAAEk"]
[Thu Jul 30 08:39:03.108922 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6puwAAAEk"]
[Thu Jul 30 08:39:03.109121 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6puwAAAEk"]
[Thu Jul 30 08:39:03.109292 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.109313 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.126617 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pvAAAAEk"]
[Thu Jul 30 08:39:03.126753 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pvAAAAEk"]
[Thu Jul 30 08:39:03.126927 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pvAAAAEk"]
[Thu Jul 30 08:39:03.145420 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.145444 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.174113 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:13980] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_l4_4x2IDFYJd2RFytAAAAAw"]
[Thu Jul 30 08:39:03.174236 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:13980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amr_l4_4x2IDFYJd2RFytAAAAAw"]
[Thu Jul 30 08:39:03.174416 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:13980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_l4_4x2IDFYJd2RFytAAAAAw"]
[Thu Jul 30 08:39:03.186303 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.186325 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:60160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.223372 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.223398 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.257756 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.257781 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.266863 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/app/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pwgAAAEk"]
[Thu Jul 30 08:39:03.267001 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/app/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pwgAAAEk"]
[Thu Jul 30 08:39:03.267186 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/app/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pwgAAAEk"]
[Thu Jul 30 08:39:03.286043 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pwwAAAEk"]
[Thu Jul 30 08:39:03.286180 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pwwAAAEk"]
[Thu Jul 30 08:39:03.286347 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pwwAAAEk"]
[Thu Jul 30 08:39:03.294219 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.294241 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:60188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.311652 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxAAAAEk"]
[Thu Jul 30 08:39:03.311774 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxAAAAEk"]
[Thu Jul 30 08:39:03.311949 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxAAAAEk"]
[Thu Jul 30 08:39:03.323184 2026] [authz_core:error] [pid 2428314:tid 2428314] [client 57.141.0.65:28732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:03.327457 2026] [authz_core:error] [pid 2428314:tid 2428314] [client 57.141.0.65:28732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:03.337268 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/database/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxQAAAEk"]
[Thu Jul 30 08:39:03.337393 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/database/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxQAAAEk"]
[Thu Jul 30 08:39:03.337569 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/database/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxQAAAEk"]
[Thu Jul 30 08:39:03.364389 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/db/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxgAAAEk"]
[Thu Jul 30 08:39:03.364539 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/db/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxgAAAEk"]
[Thu Jul 30 08:39:03.364746 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/db/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxgAAAEk"]
[Thu Jul 30 08:39:03.384826 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/examples/compose/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxwAAAEk"]
[Thu Jul 30 08:39:03.384950 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/examples/compose/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxwAAAEk"]
[Thu Jul 30 08:39:03.385125 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/examples/compose/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pxwAAAEk"]
[Thu Jul 30 08:39:03.407973 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/postgres/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pyAAAAEk"]
[Thu Jul 30 08:39:03.408128 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/postgres/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pyAAAAEk"]
[Thu Jul 30 08:39:03.408302 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/postgres/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pyAAAAEk"]
[Thu Jul 30 08:39:03.414461 2026] [access_compat:error] [pid 2427538:tid 2427538] [client 106.215.157.145:9408] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:03.414573 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:60204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.414592 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:60204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.427690 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docker/webdav/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pyQAAAEk"]
[Thu Jul 30 08:39:03.427821 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docker/webdav/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pyQAAAEk"]
[Thu Jul 30 08:39:03.427996 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docker/webdav/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6pyQAAAEk"]
[Thu Jul 30 08:39:03.457061 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:13986] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/FRONT/.env"] [unique_id "amr_lxSM_3DmF9yKgJn3fgAAAEY"]
[Thu Jul 30 08:39:03.457202 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:13986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/FRONT/.env"] [unique_id "amr_lxSM_3DmF9yKgJn3fgAAAEY"]
[Thu Jul 30 08:39:03.457386 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:13986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_lxSM_3DmF9yKgJn3fgAAAEY"]
[Thu Jul 30 08:39:03.473601 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:60206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.473623 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:60206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.498236 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /docs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docs/.git/config"] [unique_id "amr_l6lzm7G0Pp-9gn6pzAAAAEk"]
[Thu Jul 30 08:39:03.498372 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docs/.git/config"] [unique_id "amr_l6lzm7G0Pp-9gn6pzAAAAEk"]
[Thu Jul 30 08:39:03.498602 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docs/.git/config"] [unique_id "amr_l6lzm7G0Pp-9gn6pzAAAAEk"]
[Thu Jul 30 08:39:03.510213 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:60214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.510235 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:60214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.565897 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.565927 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.606179 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/docs/api-config.ini"] [unique_id "amr_l6lzm7G0Pp-9gn6p0QAAAEk"]
[Thu Jul 30 08:39:03.606487 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docs/api-config.ini"] [unique_id "amr_l6lzm7G0Pp-9gn6p0QAAAEk"]
[Thu Jul 30 08:39:03.606702 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docs/api-config.ini"] [unique_id "amr_l6lzm7G0Pp-9gn6p0QAAAEk"]
[Thu Jul 30 08:39:03.676416 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/docs/laravel.log"] [unique_id "amr_l6lzm7G0Pp-9gn6p1AAAAEk"]
[Thu Jul 30 08:39:03.676780 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docs/laravel.log"] [unique_id "amr_l6lzm7G0Pp-9gn6p1AAAAEk"]
[Thu Jul 30 08:39:03.676975 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docs/laravel.log"] [unique_id "amr_l6lzm7G0Pp-9gn6p1AAAAEk"]
[Thu Jul 30 08:39:03.722460 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bgoldd/.env"] [unique_id "amr_l8sDPUni1EbX-qVh3wAAADg"]
[Thu Jul 30 08:39:03.722645 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bgoldd/.env"] [unique_id "amr_l8sDPUni1EbX-qVh3wAAADg"]
[Thu Jul 30 08:39:03.722759 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bgoldd/.env"] [unique_id "amr_l8sDPUni1EbX-qVh3wAAADg"]
[Thu Jul 30 08:39:03.743948 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/docs/web.config"] [unique_id "amr_l6lzm7G0Pp-9gn6p1wAAAEk"]
[Thu Jul 30 08:39:03.753369 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /docs/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/docs/web.config"] [unique_id "amr_l6lzm7G0Pp-9gn6p1wAAAEk"]
[Thu Jul 30 08:39:03.753589 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/docs/web.config"] [unique_id "amr_l6lzm7G0Pp-9gn6p1wAAAEk"]
[Thu Jul 30 08:39:03.753869 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/docs/web.config"] [unique_id "amr_l6lzm7G0Pp-9gn6p1wAAAEk"]
[Thu Jul 30 08:39:03.784055 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dodoswap-client/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2AAAAEk"]
[Thu Jul 30 08:39:03.784317 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dodoswap-client/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2AAAAEk"]
[Thu Jul 30 08:39:03.784571 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dodoswap-client/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2AAAAEk"]
[Thu Jul 30 08:39:03.801514 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bitcoind/.env"] [unique_id "amr_l8sDPUni1EbX-qVh4QAAADg"]
[Thu Jul 30 08:39:03.802231 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bitcoind/.env"] [unique_id "amr_l8sDPUni1EbX-qVh4QAAADg"]
[Thu Jul 30 08:39:03.802348 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bitcoind/.env"] [unique_id "amr_l8sDPUni1EbX-qVh4QAAADg"]
[Thu Jul 30 08:39:03.810021 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/dotfiles/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2QAAAEk"]
[Thu Jul 30 08:39:03.810265 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/dotfiles/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2QAAAEk"]
[Thu Jul 30 08:39:03.810508 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/dotfiles/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2QAAAEk"]
[Thu Jul 30 08:39:03.827730 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bkp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/.env"] [unique_id "amr_l8sDPUni1EbX-qVh4gAAADg"]
[Thu Jul 30 08:39:03.827857 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/.env"] [unique_id "amr_l8sDPUni1EbX-qVh4gAAADg"]
[Thu Jul 30 08:39:03.827967 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/.env"] [unique_id "amr_l8sDPUni1EbX-qVh4gAAADg"]
[Thu Jul 30 08:39:03.833027 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/downloads/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2gAAAEk"]
[Thu Jul 30 08:39:03.833237 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/downloads/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2gAAAEk"]
[Thu Jul 30 08:39:03.833435 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/downloads/.env"] [unique_id "amr_l6lzm7G0Pp-9gn6p2gAAAEk"]
[Thu Jul 30 08:39:03.847524 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:13990] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/FRONTEND/.env"] [unique_id "amr_l4yFZ2ptgStT3D1umgAAAD0"]
[Thu Jul 30 08:39:03.847687 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:13990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/FRONTEND/.env"] [unique_id "amr_l4yFZ2ptgStT3D1umgAAAD0"]
[Thu Jul 30 08:39:03.847876 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:13990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_l4yFZ2ptgStT3D1umgAAAD0"]
[Thu Jul 30 08:39:03.874876 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /downloads/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/downloads/.git/config"] [unique_id "amr_l6lzm7G0Pp-9gn6p3AAAAEk"]
[Thu Jul 30 08:39:03.875033 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/downloads/.git/config"] [unique_id "amr_l6lzm7G0Pp-9gn6p3AAAAEk"]
[Thu Jul 30 08:39:03.875285 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/downloads/.git/config"] [unique_id "amr_l6lzm7G0Pp-9gn6p3AAAAEk"]
[Thu Jul 30 08:39:03.907445 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.907474 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:03.923020 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /bkp/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/.git/config"] [unique_id "amr_l8sDPUni1EbX-qVh5AAAADg"]
[Thu Jul 30 08:39:03.923211 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/.git/config"] [unique_id "amr_l8sDPUni1EbX-qVh5AAAADg"]
[Thu Jul 30 08:39:03.923323 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/.git/config"] [unique_id "amr_l8sDPUni1EbX-qVh5AAAADg"]
[Thu Jul 30 08:39:03.927831 2026] [access_compat:error] [pid 2429782:tid 2429782] [client 45.158.164.139:36668] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:39:03.976034 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amr_l6lzm7G0Pp-9gn6p4AAAAEk"]
[Thu Jul 30 08:39:03.976410 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amr_l6lzm7G0Pp-9gn6p4AAAAEk"]
[Thu Jul 30 08:39:03.976614 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amr_l6lzm7G0Pp-9gn6p4AAAAEk"]
[Thu Jul 30 08:39:03.993489 2026] [authz_core:error] [pid 2412474:tid 2412474] [client 98.94.43.243:48418] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 08:39:04.001656 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/downloads/api-config.ini"] [unique_id "amr_mKlzm7G0Pp-9gn6p4QAAAEk"]
[Thu Jul 30 08:39:04.001949 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/downloads/api-config.ini"] [unique_id "amr_mKlzm7G0Pp-9gn6p4QAAAEk"]
[Thu Jul 30 08:39:04.002140 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/downloads/api-config.ini"] [unique_id "amr_mKlzm7G0Pp-9gn6p4QAAAEk"]
[Thu Jul 30 08:39:04.071689 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/downloads/laravel.log"] [unique_id "amr_mKlzm7G0Pp-9gn6p5AAAAEk"]
[Thu Jul 30 08:39:04.071994 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/downloads/laravel.log"] [unique_id "amr_mKlzm7G0Pp-9gn6p5AAAAEk"]
[Thu Jul 30 08:39:04.072184 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.17:39982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/downloads/laravel.log"] [unique_id "amr_mKlzm7G0Pp-9gn6p5AAAAEk"]
[Thu Jul 30 08:39:04.080251 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:60238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.080271 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:60238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.114755 2026] [core:error] [pid 2427777:tid 2427777] (13)Permission denied: [client 216.73.216.199:56286] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/compact
[Thu Jul 30 08:39:04.133683 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:60244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_mJDxY3fypotl7b9qXAAAAB4"]
[Thu Jul 30 08:39:04.133859 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:60244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_mJDxY3fypotl7b9qXAAAAB4"]
[Thu Jul 30 08:39:04.134221 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:60244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.134344 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:60244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_mJDxY3fypotl7b9qXAAAAB4"]
[Thu Jul 30 08:39:04.162575 2026] [authz_core:error] [pid 2428312:tid 2428312] [client 57.141.0.59:60226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:04.163270 2026] [authz_core:error] [pid 2428312:tid 2428312] [client 57.141.0.59:60226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:04.167028 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p5gAAAEk"]
[Thu Jul 30 08:39:04.167166 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p5gAAAEk"]
[Thu Jul 30 08:39:04.167474 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.167577 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p5gAAAEk"]
[Thu Jul 30 08:39:04.192715 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_mMsDPUni1EbX-qVh6QAAADg"]
[Thu Jul 30 08:39:04.193008 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_mMsDPUni1EbX-qVh6QAAADg"]
[Thu Jul 30 08:39:04.193134 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amr_mMsDPUni1EbX-qVh6QAAADg"]
[Thu Jul 30 08:39:04.201831 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:60262] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_mKWBySBNOpvIvESBJAAAABs"]
[Thu Jul 30 08:39:04.201957 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:60262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_mKWBySBNOpvIvESBJAAAABs"]
[Thu Jul 30 08:39:04.202294 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:60262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.202398 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:60262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_mKWBySBNOpvIvESBJAAAABs"]
[Thu Jul 30 08:39:04.209831 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/downloads/web.config"] [unique_id "amr_mI7QYn_mSSYdmItJ5gAAAA0"]
[Thu Jul 30 08:39:04.210029 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /downloads/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/downloads/web.config"] [unique_id "amr_mI7QYn_mSSYdmItJ5gAAAA0"]
[Thu Jul 30 08:39:04.210154 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/downloads/web.config"] [unique_id "amr_mI7QYn_mSSYdmItJ5gAAAA0"]
[Thu Jul 30 08:39:04.210344 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/downloads/web.config"] [unique_id "amr_mI7QYn_mSSYdmItJ5gAAAA0"]
[Thu Jul 30 08:39:04.215297 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/api-config.ini"] [unique_id "amr_mMsDPUni1EbX-qVh6gAAADg"]
[Thu Jul 30 08:39:04.215624 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/api-config.ini"] [unique_id "amr_mMsDPUni1EbX-qVh6gAAADg"]
[Thu Jul 30 08:39:04.215741 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/api-config.ini"] [unique_id "amr_mMsDPUni1EbX-qVh6gAAADg"]
[Thu Jul 30 08:39:04.235632 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60276] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/bucoffea/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p5wAAAEk"]
[Thu Jul 30 08:39:04.235749 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60276] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/bucoffea/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p5wAAAEk"]
[Thu Jul 30 08:39:04.236048 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.236176 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60276] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/bucoffea/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p5wAAAEk"]
[Thu Jul 30 08:39:04.261834 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/e2e/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ6AAAAA0"]
[Thu Jul 30 08:39:04.261967 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/e2e/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ6AAAAA0"]
[Thu Jul 30 08:39:04.262163 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/e2e/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ6AAAAA0"]
[Thu Jul 30 08:39:04.272340 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.272357 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.311856 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60294] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/build.log"] [unique_id "amr_mMTyHJeh8MEeCqDRxgAAAEQ"]
[Thu Jul 30 08:39:04.312192 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/build.log"] [unique_id "amr_mMTyHJeh8MEeCqDRxgAAAEQ"]
[Thu Jul 30 08:39:04.312528 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.312646 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/build.log"] [unique_id "amr_mMTyHJeh8MEeCqDRxgAAAEQ"]
[Thu Jul 30 08:39:04.355004 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/laravel.log"] [unique_id "amr_mMsDPUni1EbX-qVh7QAAADg"]
[Thu Jul 30 08:39:04.355364 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/laravel.log"] [unique_id "amr_mMsDPUni1EbX-qVh7QAAADg"]
[Thu Jul 30 08:39:04.355476 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/laravel.log"] [unique_id "amr_mMsDPUni1EbX-qVh7QAAADg"]
[Thu Jul 30 08:39:04.358209 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.358227 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.380876 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/env.backup"] [unique_id "amr_mI7QYn_mSSYdmItJ7QAAAA0"]
[Thu Jul 30 08:39:04.381201 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/env.backup"] [unique_id "amr_mI7QYn_mSSYdmItJ7QAAAA0"]
[Thu Jul 30 08:39:04.381383 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/env.backup"] [unique_id "amr_mI7QYn_mSSYdmItJ7QAAAA0"]
[Thu Jul 30 08:39:04.397328 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:60308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.397350 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:60308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.409789 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/env.bak"] [unique_id "amr_mI7QYn_mSSYdmItJ7gAAAA0"]
[Thu Jul 30 08:39:04.410105 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/env.bak"] [unique_id "amr_mI7QYn_mSSYdmItJ7gAAAA0"]
[Thu Jul 30 08:39:04.410290 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/env.bak"] [unique_id "amr_mI7QYn_mSSYdmItJ7gAAAA0"]
[Thu Jul 30 08:39:04.414113 2026] [ssl:error] [pid 2427777:tid 2427777] (70014)End of file found: [client 216.73.216.199:56286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:04.430091 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.430117 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.471790 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.471809 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.510016 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/web.config"] [unique_id "amr_mMsDPUni1EbX-qVh8AAAADg"]
[Thu Jul 30 08:39:04.510254 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /bkp/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/web.config"] [unique_id "amr_mMsDPUni1EbX-qVh8AAAADg"]
[Thu Jul 30 08:39:04.510372 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/web.config"] [unique_id "amr_mMsDPUni1EbX-qVh8AAAADg"]
[Thu Jul 30 08:39:04.510480 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bkp/web.config"] [unique_id "amr_mMsDPUni1EbX-qVh8AAAADg"]
[Thu Jul 30 08:39:04.511410 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60314] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/build/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p6QAAAEk"]
[Thu Jul 30 08:39:04.511521 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/build/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p6QAAAEk"]
[Thu Jul 30 08:39:04.511832 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.511933 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/build/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p6QAAAEk"]
[Thu Jul 30 08:39:04.529202 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blankon/.env"] [unique_id "amr_mMsDPUni1EbX-qVh8QAAADg"]
[Thu Jul 30 08:39:04.529321 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blankon/.env"] [unique_id "amr_mMsDPUni1EbX-qVh8QAAADg"]
[Thu Jul 30 08:39:04.529418 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blankon/.env"] [unique_id "amr_mMsDPUni1EbX-qVh8QAAADg"]
[Thu Jul 30 08:39:04.548803 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.548821 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:60322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.549518 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blob/.env"] [unique_id "amr_mMsDPUni1EbX-qVh8gAAADg"]
[Thu Jul 30 08:39:04.549647 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blob/.env"] [unique_id "amr_mMsDPUni1EbX-qVh8gAAADg"]
[Thu Jul 30 08:39:04.549816 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blob/.env"] [unique_id "amr_mMsDPUni1EbX-qVh8gAAADg"]
[Thu Jul 30 08:39:04.585724 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.585741 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.588266 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ9gAAAA0"]
[Thu Jul 30 08:39:04.588379 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ9gAAAA0"]
[Thu Jul 30 08:39:04.588540 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ9gAAAA0"]
[Thu Jul 30 08:39:04.610858 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ9wAAAA0"]
[Thu Jul 30 08:39:04.611024 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ9wAAAA0"]
[Thu Jul 30 08:39:04.611251 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ9wAAAA0"]
[Thu Jul 30 08:39:04.621645 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.621663 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.633138 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/env/example/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ-AAAAA0"]
[Thu Jul 30 08:39:04.633276 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/env/example/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ-AAAAA0"]
[Thu Jul 30 08:39:04.633452 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/env/example/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ-AAAAA0"]
[Thu Jul 30 08:39:04.657017 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/.git/config"] [unique_id "amr_mMsDPUni1EbX-qVh9AAAADg"]
[Thu Jul 30 08:39:04.657173 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/.git/config"] [unique_id "amr_mMsDPUni1EbX-qVh9AAAADg"]
[Thu Jul 30 08:39:04.657278 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/.git/config"] [unique_id "amr_mMsDPUni1EbX-qVh9AAAADg"]
[Thu Jul 30 08:39:04.658486 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.658506 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.674491 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/env/template/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ-gAAAA0"]
[Thu Jul 30 08:39:04.674619 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/env/template/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ-gAAAA0"]
[Thu Jul 30 08:39:04.674785 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/env/template/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ-gAAAA0"]
[Thu Jul 30 08:39:04.694633 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.694657 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.727511 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.727533 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.739908 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/environments/local/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ_QAAAA0"]
[Thu Jul 30 08:39:04.740046 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/environments/local/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ_QAAAA0"]
[Thu Jul 30 08:39:04.740234 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/environments/local/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ_QAAAA0"]
[Thu Jul 30 08:39:04.760223 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.760241 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:60384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.786129 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/environments/production/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ_wAAAA0"]
[Thu Jul 30 08:39:04.786259 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/environments/production/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ_wAAAA0"]
[Thu Jul 30 08:39:04.786442 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/environments/production/.env"] [unique_id "amr_mI7QYn_mSSYdmItJ_wAAAA0"]
[Thu Jul 30 08:39:04.795816 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60392] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cache/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p7AAAAEk"]
[Thu Jul 30 08:39:04.795937 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cache/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p7AAAAEk"]
[Thu Jul 30 08:39:04.796254 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.796355 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cache/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p7AAAAEk"]
[Thu Jul 30 08:39:04.839708 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/erp/.env"] [unique_id "amr_mI7QYn_mSSYdmItKAQAAAA0"]
[Thu Jul 30 08:39:04.839830 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/erp/.env"] [unique_id "amr_mI7QYn_mSSYdmItKAQAAAA0"]
[Thu Jul 30 08:39:04.840000 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/erp/.env"] [unique_id "amr_mI7QYn_mSSYdmItKAQAAAA0"]
[Thu Jul 30 08:39:04.862235 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.bak"] [unique_id "amr_mI7QYn_mSSYdmItKAgAAAA0"]
[Thu Jul 30 08:39:04.862367 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.bak"] [unique_id "amr_mI7QYn_mSSYdmItKAgAAAA0"]
[Thu Jul 30 08:39:04.862545 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.bak"] [unique_id "amr_mI7QYn_mSSYdmItKAgAAAA0"]
[Thu Jul 30 08:39:04.870830 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.870848 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.881413 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.dev"] [unique_id "amr_mI7QYn_mSSYdmItKAwAAAA0"]
[Thu Jul 30 08:39:04.881532 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.dev"] [unique_id "amr_mI7QYn_mSSYdmItKAwAAAA0"]
[Thu Jul 30 08:39:04.881717 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.dev"] [unique_id "amr_mI7QYn_mSSYdmItKAwAAAA0"]
[Thu Jul 30 08:39:04.902136 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.dist"] [unique_id "amr_mI7QYn_mSSYdmItKBAAAAA0"]
[Thu Jul 30 08:39:04.902261 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.dist"] [unique_id "amr_mI7QYn_mSSYdmItKBAAAAA0"]
[Thu Jul 30 08:39:04.902447 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.dist"] [unique_id "amr_mI7QYn_mSSYdmItKBAAAAA0"]
[Thu Jul 30 08:39:04.903753 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_mMsDPUni1EbX-qVh-QAAADg"]
[Thu Jul 30 08:39:04.904028 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_mMsDPUni1EbX-qVh-QAAADg"]
[Thu Jul 30 08:39:04.904146 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amr_mMsDPUni1EbX-qVh-QAAADg"]
[Thu Jul 30 08:39:04.907087 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60418] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cache/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cache/.git/config"] [unique_id "amr_mKepTk7nN70C9RU6gAAAABI"]
[Thu Jul 30 08:39:04.907251 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cache/.git/config"] [unique_id "amr_mKepTk7nN70C9RU6gAAAABI"]
[Thu Jul 30 08:39:04.907331 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p7wAAAEk"]
[Thu Jul 30 08:39:04.907442 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amr_mKlzm7G0Pp-9gn6p7wAAAEk"]
[Thu Jul 30 08:39:04.907611 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_mKlzm7G0Pp-9gn6p7wAAAEk"]
[Thu Jul 30 08:39:04.907655 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.907788 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cache/.git/config"] [unique_id "amr_mKepTk7nN70C9RU6gAAAABI"]
[Thu Jul 30 08:39:04.923603 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/api-config.ini"] [unique_id "amr_mMsDPUni1EbX-qVh-gAAADg"]
[Thu Jul 30 08:39:04.924751 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/api-config.ini"] [unique_id "amr_mMsDPUni1EbX-qVh-gAAADg"]
[Thu Jul 30 08:39:04.924861 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/api-config.ini"] [unique_id "amr_mMsDPUni1EbX-qVh-gAAADg"]
[Thu Jul 30 08:39:04.927710 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.local"] [unique_id "amr_mI7QYn_mSSYdmItKBQAAAA0"]
[Thu Jul 30 08:39:04.927828 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.local"] [unique_id "amr_mI7QYn_mSSYdmItKBQAAAA0"]
[Thu Jul 30 08:39:04.928001 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/erp/.env.local"] [unique_id "amr_mI7QYn_mSSYdmItKBQAAAA0"]
[Thu Jul 30 08:39:04.943700 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.943717 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.979777 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:04.979797 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.013158 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.013177 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.047229 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60464] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_meeliGAK7HeY9rNx1gAAAAE"]
[Thu Jul 30 08:39:05.047508 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_meeliGAK7HeY9rNx1gAAAAE"]
[Thu Jul 30 08:39:05.047828 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.047942 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:60464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_meeliGAK7HeY9rNx1gAAAAE"]
[Thu Jul 30 08:39:05.057150 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/laravel.log"] [unique_id "amr_mcsDPUni1EbX-qVh_QAAADg"]
[Thu Jul 30 08:39:05.057433 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/laravel.log"] [unique_id "amr_mcsDPUni1EbX-qVh_QAAADg"]
[Thu Jul 30 08:39:05.057532 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/laravel.log"] [unique_id "amr_mcsDPUni1EbX-qVh_QAAADg"]
[Thu Jul 30 08:39:05.081651 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60472] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/cache/api-config.ini"] [unique_id "amr_mT-G1VCKQzXMG6UbsQAAACg"]
[Thu Jul 30 08:39:05.081945 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60472] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cache/api-config.ini"] [unique_id "amr_mT-G1VCKQzXMG6UbsQAAACg"]
[Thu Jul 30 08:39:05.082308 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.082436 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60472] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cache/api-config.ini"] [unique_id "amr_mT-G1VCKQzXMG6UbsQAAACg"]
[Thu Jul 30 08:39:05.120222 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.120245 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.149391 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:14020] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_meeliGAK7HeY9rNx1wAAAAE"]
[Thu Jul 30 08:39:05.149521 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:14020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amr_meeliGAK7HeY9rNx1wAAAAE"]
[Thu Jul 30 08:39:05.149712 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:14020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_meeliGAK7HeY9rNx1wAAAAE"]
[Thu Jul 30 08:39:05.157585 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.157607 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.195311 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/web.config"] [unique_id "amr_mcsDPUni1EbX-qViAAAAADg"]
[Thu Jul 30 08:39:05.195525 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /blog/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/web.config"] [unique_id "amr_mcsDPUni1EbX-qViAAAAADg"]
[Thu Jul 30 08:39:05.195652 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/web.config"] [unique_id "amr_mcsDPUni1EbX-qViAAAAADg"]
[Thu Jul 30 08:39:05.195751 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blog/web.config"] [unique_id "amr_mcsDPUni1EbX-qViAAAAADg"]
[Thu Jul 30 08:39:05.199695 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60486] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/cache/laravel.log"] [unique_id "amr_maepTk7nN70C9RU6gwAAABI"]
[Thu Jul 30 08:39:05.199974 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cache/laravel.log"] [unique_id "amr_maepTk7nN70C9RU6gwAAABI"]
[Thu Jul 30 08:39:05.200288 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.200400 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cache/laravel.log"] [unique_id "amr_maepTk7nN70C9RU6gwAAABI"]
[Thu Jul 30 08:39:05.216551 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blue/.env"] [unique_id "amr_mcsDPUni1EbX-qViAQAAADg"]
[Thu Jul 30 08:39:05.216681 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blue/.env"] [unique_id "amr_mcsDPUni1EbX-qViAQAAADg"]
[Thu Jul 30 08:39:05.216779 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/blue/.env"] [unique_id "amr_mcsDPUni1EbX-qViAQAAADg"]
[Thu Jul 30 08:39:05.234046 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bookchain-client/.env"] [unique_id "amr_mcsDPUni1EbX-qViAgAAADg"]
[Thu Jul 30 08:39:05.234218 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bookchain-client/.env"] [unique_id "amr_mcsDPUni1EbX-qViAgAAADg"]
[Thu Jul 30 08:39:05.234322 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bookchain-client/.env"] [unique_id "amr_mcsDPUni1EbX-qViAgAAADg"]
[Thu Jul 30 08:39:05.236042 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.236058 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.252042 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bootstrap/.env"] [unique_id "amr_mcsDPUni1EbX-qViAwAAADg"]
[Thu Jul 30 08:39:05.252181 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bootstrap/.env"] [unique_id "amr_mcsDPUni1EbX-qViAwAAADg"]
[Thu Jul 30 08:39:05.252285 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bootstrap/.env"] [unique_id "amr_mcsDPUni1EbX-qViAwAAADg"]
[Thu Jul 30 08:39:05.262409 2026] [core:error] [pid 2428411:tid 2428411] [client 66.249.64.170:37056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.262427 2026] [core:error] [pid 2428411:tid 2428411] [client 66.249.64.170:37056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.273867 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env"] [unique_id "amr_mcsDPUni1EbX-qViBAAAADg"]
[Thu Jul 30 08:39:05.273994 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env"] [unique_id "amr_mcsDPUni1EbX-qViBAAAADg"]
[Thu Jul 30 08:39:05.274110 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env"] [unique_id "amr_mcsDPUni1EbX-qViBAAAADg"]
[Thu Jul 30 08:39:05.275390 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.275406 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.299871 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.bak"] [unique_id "amr_mcsDPUni1EbX-qViBQAAADg"]
[Thu Jul 30 08:39:05.300025 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.bak"] [unique_id "amr_mcsDPUni1EbX-qViBQAAADg"]
[Thu Jul 30 08:39:05.300144 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.bak"] [unique_id "amr_mcsDPUni1EbX-qViBQAAADg"]
[Thu Jul 30 08:39:05.312557 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60514] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/cache/web.config"] [unique_id "amr_mUktS-xOoHRbcM0qZgAAAAA"]
[Thu Jul 30 08:39:05.312770 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60514] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /cache/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cache/web.config"] [unique_id "amr_mUktS-xOoHRbcM0qZgAAAAA"]
[Thu Jul 30 08:39:05.312877 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cache/web.config"] [unique_id "amr_mUktS-xOoHRbcM0qZgAAAAA"]
[Thu Jul 30 08:39:05.314104 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.314323 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cache/web.config"] [unique_id "amr_mUktS-xOoHRbcM0qZgAAAAA"]
[Thu Jul 30 08:39:05.320878 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.dev"] [unique_id "amr_mcsDPUni1EbX-qViBgAAADg"]
[Thu Jul 30 08:39:05.321005 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.dev"] [unique_id "amr_mcsDPUni1EbX-qViBgAAADg"]
[Thu Jul 30 08:39:05.321133 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.dev"] [unique_id "amr_mcsDPUni1EbX-qViBgAAADg"]
[Thu Jul 30 08:39:05.339477 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.dist"] [unique_id "amr_mcsDPUni1EbX-qViBwAAADg"]
[Thu Jul 30 08:39:05.339616 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.dist"] [unique_id "amr_mcsDPUni1EbX-qViBwAAADg"]
[Thu Jul 30 08:39:05.339720 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.dist"] [unique_id "amr_mcsDPUni1EbX-qViBwAAADg"]
[Thu Jul 30 08:39:05.352215 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60526] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cardea/backend/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtAAAACg"]
[Thu Jul 30 08:39:05.352350 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60526] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cardea/backend/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtAAAACg"]
[Thu Jul 30 08:39:05.352670 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.352774 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60526] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cardea/backend/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtAAAACg"]
[Thu Jul 30 08:39:05.361917 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.local"] [unique_id "amr_mcsDPUni1EbX-qViCAAAADg"]
[Thu Jul 30 08:39:05.362042 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.local"] [unique_id "amr_mcsDPUni1EbX-qViCAAAADg"]
[Thu Jul 30 08:39:05.362172 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.17:52918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/.env.local"] [unique_id "amr_mcsDPUni1EbX-qViCAAAADg"]
[Thu Jul 30 08:39:05.388429 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60534] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cdw-backend/.env"] [unique_id "amr_malzm7G0Pp-9gn6p8wAAAEk"]
[Thu Jul 30 08:39:05.388543 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60534] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cdw-backend/.env"] [unique_id "amr_malzm7G0Pp-9gn6p8wAAAEk"]
[Thu Jul 30 08:39:05.388850 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.388949 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60534] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cdw-backend/.env"] [unique_id "amr_malzm7G0Pp-9gn6p8wAAAEk"]
[Thu Jul 30 08:39:05.398020 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:14028] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_mUktS-xOoHRbcM0qZwAAAAA"]
[Thu Jul 30 08:39:05.398160 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:14028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amr_mUktS-xOoHRbcM0qZwAAAAA"]
[Thu Jul 30 08:39:05.398343 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:14028] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_mUktS-xOoHRbcM0qZwAAAAA"]
[Thu Jul 30 08:39:05.424760 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60536] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch2-mytodo/.env"] [unique_id "amr_maepTk7nN70C9RU6hQAAABI"]
[Thu Jul 30 08:39:05.424894 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60536] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch2-mytodo/.env"] [unique_id "amr_maepTk7nN70C9RU6hQAAABI"]
[Thu Jul 30 08:39:05.425214 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.425318 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:60536] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch2-mytodo/.env"] [unique_id "amr_maepTk7nN70C9RU6hQAAABI"]
[Thu Jul 30 08:39:05.460839 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60542] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch6-mytodo/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtQAAACg"]
[Thu Jul 30 08:39:05.460966 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch6-mytodo/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtQAAACg"]
[Thu Jul 30 08:39:05.461287 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.461388 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:60542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch6-mytodo/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtQAAACg"]
[Thu Jul 30 08:39:05.496298 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_malzm7G0Pp-9gn6p9AAAAEk"]
[Thu Jul 30 08:39:05.496417 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_malzm7G0Pp-9gn6p9AAAAEk"]
[Thu Jul 30 08:39:05.496722 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.496819 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:60552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_malzm7G0Pp-9gn6p9AAAAEk"]
[Thu Jul 30 08:39:05.532588 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60556] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch7-mytodo/.env"] [unique_id "amr_mUktS-xOoHRbcM0qaAAAAAA"]
[Thu Jul 30 08:39:05.532741 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60556] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch7-mytodo/.env"] [unique_id "amr_mUktS-xOoHRbcM0qaAAAAAA"]
[Thu Jul 30 08:39:05.533046 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.533162 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:60556] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch7-mytodo/.env"] [unique_id "amr_mUktS-xOoHRbcM0qaAAAAAA"]
[Thu Jul 30 08:39:05.569875 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:46906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_maepTk7nN70C9RU6hgAAABI"]
[Thu Jul 30 08:39:05.569994 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:46906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_maepTk7nN70C9RU6hgAAABI"]
[Thu Jul 30 08:39:05.570307 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:46906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.570408 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:46906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_maepTk7nN70C9RU6hgAAABI"]
[Thu Jul 30 08:39:05.606105 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch8-mytodo/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtgAAACg"]
[Thu Jul 30 08:39:05.606230 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch8-mytodo/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtgAAACg"]
[Thu Jul 30 08:39:05.606536 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.606645 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch8-mytodo/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtgAAACg"]
[Thu Jul 30 08:39:05.641024 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:13876] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amr_malzm7G0Pp-9gn6p9QAAAEk"]
[Thu Jul 30 08:39:05.641162 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:13876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amr_malzm7G0Pp-9gn6p9QAAAEk"]
[Thu Jul 30 08:39:05.641332 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:13876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_malzm7G0Pp-9gn6p9QAAAEk"]
[Thu Jul 30 08:39:05.643616 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46932] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_mUktS-xOoHRbcM0qaQAAAAA"]
[Thu Jul 30 08:39:05.643733 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46932] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_mUktS-xOoHRbcM0qaQAAAAA"]
[Thu Jul 30 08:39:05.644045 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.644161 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46932] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_mUktS-xOoHRbcM0qaQAAAAA"]
[Thu Jul 30 08:39:05.677938 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:46942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_mQvbpUeckUfXmp7bPgAAAEc"]
[Thu Jul 30 08:39:05.678096 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:46942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_mQvbpUeckUfXmp7bPgAAAEc"]
[Thu Jul 30 08:39:05.678416 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:46942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.678545 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:46942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_mQvbpUeckUfXmp7bPgAAAEc"]
[Thu Jul 30 08:39:05.718423 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46944] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/challenge/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtwAAACg"]
[Thu Jul 30 08:39:05.718547 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/challenge/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtwAAACg"]
[Thu Jul 30 08:39:05.718862 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.718961 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/challenge/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbtwAAACg"]
[Thu Jul 30 08:39:05.757138 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46946] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/challenges/.env"] [unique_id "amr_mUktS-xOoHRbcM0qagAAAAA"]
[Thu Jul 30 08:39:05.757260 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/challenges/.env"] [unique_id "amr_mUktS-xOoHRbcM0qagAAAAA"]
[Thu Jul 30 08:39:05.757584 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.757683 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:46946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/challenges/.env"] [unique_id "amr_mUktS-xOoHRbcM0qagAAAAA"]
[Thu Jul 30 08:39:05.766206 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/erp/php.ini"] [unique_id "amr_mY7QYn_mSSYdmItKKAAAAA0"]
[Thu Jul 30 08:39:05.766474 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/erp/php.ini"] [unique_id "amr_mY7QYn_mSSYdmItKKAAAAA0"]
[Thu Jul 30 08:39:05.766660 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/erp/php.ini"] [unique_id "amr_mY7QYn_mSSYdmItKKAAAAA0"]
[Thu Jul 30 08:39:05.794281 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:46958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.794303 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:46958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.832989 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:46974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/charts/liveObjects/.env"] [unique_id "amr_meeliGAK7HeY9rNx2QAAAAE"]
[Thu Jul 30 08:39:05.833167 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:46974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/charts/liveObjects/.env"] [unique_id "amr_meeliGAK7HeY9rNx2QAAAAE"]
[Thu Jul 30 08:39:05.833488 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:46974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.833601 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:46974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/charts/liveObjects/.env"] [unique_id "amr_meeliGAK7HeY9rNx2QAAAAE"]
[Thu Jul 30 08:39:05.872983 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46990] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/chat-client/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbuAAAACg"]
[Thu Jul 30 08:39:05.873157 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/chat-client/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbuAAAACg"]
[Thu Jul 30 08:39:05.873473 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.873598 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:46990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/chat-client/.env"] [unique_id "amr_mT-G1VCKQzXMG6UbuAAAACg"]
[Thu Jul 30 08:39:05.906822 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:13886] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Hash/.env"] [unique_id "amr_maepTk7nN70C9RU6iAAAABI"]
[Thu Jul 30 08:39:05.906999 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:13886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Hash/.env"] [unique_id "amr_maepTk7nN70C9RU6iAAAABI"]
[Thu Jul 30 08:39:05.907217 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:13886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_maepTk7nN70C9RU6iAAAABI"]
[Thu Jul 30 08:39:05.909893 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:47000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.913533 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:47000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.941527 2026] [ssl:error] [pid 2424973:tid 2424973] (EAI 2)Name or service not known: [client 144.76.19.72:24980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:05.941553 2026] [ssl:error] [pid 2424973:tid 2424973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:05.946711 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.946737 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.979310 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:47018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/chiminey/.env"] [unique_id "amr_maepTk7nN70C9RU6iQAAABI"]
[Thu Jul 30 08:39:05.979488 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:47018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/chiminey/.env"] [unique_id "amr_maepTk7nN70C9RU6iQAAABI"]
[Thu Jul 30 08:39:05.979815 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:47018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:05.979927 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:47018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/chiminey/.env"] [unique_id "amr_maepTk7nN70C9RU6iQAAABI"]
[Thu Jul 30 08:39:05.995086 2026] [ssl:error] [pid 2429782:tid 2429782] (EAI 2)Name or service not known: [client 144.76.19.72:24984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:06.002530 2026] [ssl:error] [pid 2429782:tid 2429782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:06.015849 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47026] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client-app/.env"] [unique_id "amr_mj-G1VCKQzXMG6UbugAAACg"]
[Thu Jul 30 08:39:06.016087 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47026] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client-app/.env"] [unique_id "amr_mj-G1VCKQzXMG6UbugAAACg"]
[Thu Jul 30 08:39:06.016441 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.016585 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47026] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client-app/.env"] [unique_id "amr_mj-G1VCKQzXMG6UbugAAACg"]
[Thu Jul 30 08:39:06.055500 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47036] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/.env.bak"] [unique_id "amr_mueliGAK7HeY9rNx2gAAAAE"]
[Thu Jul 30 08:39:06.055668 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/.env.bak"] [unique_id "amr_mueliGAK7HeY9rNx2gAAAAE"]
[Thu Jul 30 08:39:06.055971 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.056097 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/.env.bak"] [unique_id "amr_mueliGAK7HeY9rNx2gAAAAE"]
[Thu Jul 30 08:39:06.094885 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47050] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/.env.dev"] [unique_id "amr_mj-G1VCKQzXMG6UbuwAAACg"]
[Thu Jul 30 08:39:06.095051 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/.env.dev"] [unique_id "amr_mj-G1VCKQzXMG6UbuwAAACg"]
[Thu Jul 30 08:39:06.095392 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.095500 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/.env.dev"] [unique_id "amr_mj-G1VCKQzXMG6UbuwAAACg"]
[Thu Jul 30 08:39:06.133127 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:47056] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/.env.dist"] [unique_id "amr_mkktS-xOoHRbcM0qbAAAAAA"]
[Thu Jul 30 08:39:06.133255 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:47056] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/.env.dist"] [unique_id "amr_mkktS-xOoHRbcM0qbAAAAAA"]
[Thu Jul 30 08:39:06.133556 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:47056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.133669 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:47056] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/.env.dist"] [unique_id "amr_mkktS-xOoHRbcM0qbAAAAAA"]
[Thu Jul 30 08:39:06.154792 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:13902] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Helmetjs/.env"] [unique_id "amr_mueliGAK7HeY9rNx2wAAAAE"]
[Thu Jul 30 08:39:06.154952 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:13902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Helmetjs/.env"] [unique_id "amr_mueliGAK7HeY9rNx2wAAAAE"]
[Thu Jul 30 08:39:06.155138 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:13902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_mueliGAK7HeY9rNx2wAAAAE"]
[Thu Jul 30 08:39:06.170791 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47060] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/.env.local"] [unique_id "amr_mj-G1VCKQzXMG6UbvAAAACg"]
[Thu Jul 30 08:39:06.170910 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/.env.local"] [unique_id "amr_mj-G1VCKQzXMG6UbvAAAACg"]
[Thu Jul 30 08:39:06.171230 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.171331 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/.env.local"] [unique_id "amr_mj-G1VCKQzXMG6UbvAAAACg"]
[Thu Jul 30 08:39:06.208781 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47074] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/.env.production"] [unique_id "amr_mueliGAK7HeY9rNx3AAAAAE"]
[Thu Jul 30 08:39:06.208967 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/.env.production"] [unique_id "amr_mueliGAK7HeY9rNx3AAAAAE"]
[Thu Jul 30 08:39:06.209303 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.209409 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47074] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/.env.production"] [unique_id "amr_mueliGAK7HeY9rNx3AAAAAE"]
[Thu Jul 30 08:39:06.239376 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/error/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPAAAAA0"]
[Thu Jul 30 08:39:06.239521 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/error/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPAAAAA0"]
[Thu Jul 30 08:39:06.239724 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/error/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPAAAAA0"]
[Thu Jul 30 08:39:06.244792 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47086] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/.env.staging"] [unique_id "amr_muWvknE5emN3ObPc8QAAACc"]
[Thu Jul 30 08:39:06.244941 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/.env.staging"] [unique_id "amr_muWvknE5emN3ObPc8QAAACc"]
[Thu Jul 30 08:39:06.245481 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.245605 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/.env.staging"] [unique_id "amr_muWvknE5emN3ObPc8QAAACc"]
[Thu Jul 30 08:39:06.285460 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.285486 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.290540 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/errors/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPgAAAA0"]
[Thu Jul 30 08:39:06.290686 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/errors/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPgAAAA0"]
[Thu Jul 30 08:39:06.290885 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/errors/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPgAAAA0"]
[Thu Jul 30 08:39:06.311684 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/example/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPwAAAA0"]
[Thu Jul 30 08:39:06.311884 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/example/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPwAAAA0"]
[Thu Jul 30 08:39:06.312150 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/example/.env"] [unique_id "amr_mo7QYn_mSSYdmItKPwAAAA0"]
[Thu Jul 30 08:39:06.321949 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47108] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /client/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/.git/config"] [unique_id "amr_muWvknE5emN3ObPc8gAAACc"]
[Thu Jul 30 08:39:06.322123 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/.git/config"] [unique_id "amr_muWvknE5emN3ObPc8gAAACc"]
[Thu Jul 30 08:39:06.322444 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.322555 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/.git/config"] [unique_id "amr_muWvknE5emN3ObPc8gAAACc"]
[Thu Jul 30 08:39:06.335418 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQAAAAA0"]
[Thu Jul 30 08:39:06.336045 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQAAAAA0"]
[Thu Jul 30 08:39:06.336305 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQAAAAA0"]
[Thu Jul 30 08:39:06.358415 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.358437 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.364039 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQQAAAA0"]
[Thu Jul 30 08:39:06.364256 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQQAAAA0"]
[Thu Jul 30 08:39:06.364502 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQQAAAA0"]
[Thu Jul 30 08:39:06.392527 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQgAAAA0"]
[Thu Jul 30 08:39:06.392666 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.392687 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.392737 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQgAAAA0"]
[Thu Jul 30 08:39:06.392975 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQgAAAA0"]
[Thu Jul 30 08:39:06.414425 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQwAAAA0"]
[Thu Jul 30 08:39:06.414668 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQwAAAA0"]
[Thu Jul 30 08:39:06.414902 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/.env"] [unique_id "amr_mo7QYn_mSSYdmItKQwAAAA0"]
[Thu Jul 30 08:39:06.418234 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.66:13904] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Imagebord/.env"] [unique_id "amr_muRqJARMdmAY45gCRwAAABk"]
[Thu Jul 30 08:39:06.419126 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.66:13904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Imagebord/.env"] [unique_id "amr_muRqJARMdmAY45gCRwAAABk"]
[Thu Jul 30 08:39:06.419363 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.66:13904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_muRqJARMdmAY45gCRwAAABk"]
[Thu Jul 30 08:39:06.427581 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.427627 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.436470 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/01-simple-model/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRAAAAA0"]
[Thu Jul 30 08:39:06.436666 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/01-simple-model/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRAAAAA0"]
[Thu Jul 30 08:39:06.436906 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/01-simple-model/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRAAAAA0"]
[Thu Jul 30 08:39:06.456770 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/02-complex-example/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRQAAAA0"]
[Thu Jul 30 08:39:06.456969 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/02-complex-example/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRQAAAA0"]
[Thu Jul 30 08:39:06.457233 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/02-complex-example/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRQAAAA0"]
[Thu Jul 30 08:39:06.468872 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.468917 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.475583 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRgAAAA0"]
[Thu Jul 30 08:39:06.476379 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRgAAAA0"]
[Thu Jul 30 08:39:06.476666 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRgAAAA0"]
[Thu Jul 30 08:39:06.500023 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRwAAAA0"]
[Thu Jul 30 08:39:06.500277 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRwAAAA0"]
[Thu Jul 30 08:39:06.500540 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amr_mo7QYn_mSSYdmItKRwAAAA0"]
[Thu Jul 30 08:39:06.505159 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_mueliGAK7HeY9rNx4AAAAAE"]
[Thu Jul 30 08:39:06.505501 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_mueliGAK7HeY9rNx4AAAAAE"]
[Thu Jul 30 08:39:06.505823 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.505932 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_mueliGAK7HeY9rNx4AAAAAE"]
[Thu Jul 30 08:39:06.518747 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/05-migrations/.env"] [unique_id "amr_mo7QYn_mSSYdmItKSAAAAA0"]
[Thu Jul 30 08:39:06.518894 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/05-migrations/.env"] [unique_id "amr_mo7QYn_mSSYdmItKSAAAAA0"]
[Thu Jul 30 08:39:06.519108 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.17:39998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/05-migrations/.env"] [unique_id "amr_mo7QYn_mSSYdmItKSAAAAA0"]
[Thu Jul 30 08:39:06.525851 2026] [security2:error] [pid 2428408:tid 2428408] [client 115.135.30.105:1600] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_mgvbpUeckUfXmp7bQQAAAEc"]
[Thu Jul 30 08:39:06.525892 2026] [security2:error] [pid 2428408:tid 2428408] [client 115.135.30.105:1600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_mgvbpUeckUfXmp7bQQAAAEc"]
[Thu Jul 30 08:39:06.526162 2026] [security2:error] [pid 2428408:tid 2428408] [client 115.135.30.105:1600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_mgvbpUeckUfXmp7bQQAAAEc"]
[Thu Jul 30 08:39:06.544442 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:47176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.544472 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:47176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.592488 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/06-base-service/.env"] [unique_id "amr_mus7bSxOV4LObzu6lgAAABo"]
[Thu Jul 30 08:39:06.592713 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/06-base-service/.env"] [unique_id "amr_mus7bSxOV4LObzu6lgAAABo"]
[Thu Jul 30 08:39:06.592976 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/06-base-service/.env"] [unique_id "amr_mus7bSxOV4LObzu6lgAAABo"]
[Thu Jul 30 08:39:06.593696 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47184] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/client/api-config.ini"] [unique_id "amr_muWvknE5emN3ObPc9AAAACc"]
[Thu Jul 30 08:39:06.593995 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/api-config.ini"] [unique_id "amr_muWvknE5emN3ObPc9AAAACc"]
[Thu Jul 30 08:39:06.594320 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.594426 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/api-config.ini"] [unique_id "amr_muWvknE5emN3ObPc9AAAACc"]
[Thu Jul 30 08:39:06.615379 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "amr_mus7bSxOV4LObzu6lwAAABo"]
[Thu Jul 30 08:39:06.615590 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "amr_mus7bSxOV4LObzu6lwAAABo"]
[Thu Jul 30 08:39:06.615829 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "amr_mus7bSxOV4LObzu6lwAAABo"]
[Thu Jul 30 08:39:06.634860 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.634890 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.634954 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/08-performance/.env"] [unique_id "amr_mus7bSxOV4LObzu6mAAAABo"]
[Thu Jul 30 08:39:06.635140 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/08-performance/.env"] [unique_id "amr_mus7bSxOV4LObzu6mAAAABo"]
[Thu Jul 30 08:39:06.635723 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/08-performance/.env"] [unique_id "amr_mus7bSxOV4LObzu6mAAAABo"]
[Thu Jul 30 08:39:06.643637 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wk
[Thu Jul 30 08:39:06.666323 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/09-production/.env"] [unique_id "amr_mus7bSxOV4LObzu6mQAAABo"]
[Thu Jul 30 08:39:06.666516 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/09-production/.env"] [unique_id "amr_mus7bSxOV4LObzu6mQAAABo"]
[Thu Jul 30 08:39:06.666737 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/09-production/.env"] [unique_id "amr_mus7bSxOV4LObzu6mQAAABo"]
[Thu Jul 30 08:39:06.672415 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:47200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.672447 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:47200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.679752 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:13910] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/InstantCV/server/.env"] [unique_id "amr_mueliGAK7HeY9rNx4QAAAAE"]
[Thu Jul 30 08:39:06.679896 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:13910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/InstantCV/server/.env"] [unique_id "amr_mueliGAK7HeY9rNx4QAAAAE"]
[Thu Jul 30 08:39:06.680087 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:13910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_mueliGAK7HeY9rNx4QAAAAE"]
[Thu Jul 30 08:39:06.691435 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "amr_mus7bSxOV4LObzu6mgAAABo"]
[Thu Jul 30 08:39:06.691649 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "amr_mus7bSxOV4LObzu6mgAAABo"]
[Thu Jul 30 08:39:06.691874 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "amr_mus7bSxOV4LObzu6mgAAABo"]
[Thu Jul 30 08:39:06.709919 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.710461 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.721270 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/11-transactions/.env"] [unique_id "amr_mus7bSxOV4LObzu6mwAAABo"]
[Thu Jul 30 08:39:06.721407 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/11-transactions/.env"] [unique_id "amr_mus7bSxOV4LObzu6mwAAABo"]
[Thu Jul 30 08:39:06.721606 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/11-transactions/.env"] [unique_id "amr_mus7bSxOV4LObzu6mwAAABo"]
[Thu Jul 30 08:39:06.746590 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amr_mus7bSxOV4LObzu6nAAAABo"]
[Thu Jul 30 08:39:06.746724 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amr_mus7bSxOV4LObzu6nAAAABo"]
[Thu Jul 30 08:39:06.746900 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.746918 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.746926 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amr_mus7bSxOV4LObzu6nAAAABo"]
[Thu Jul 30 08:39:06.772214 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amr_mus7bSxOV4LObzu6nQAAABo"]
[Thu Jul 30 08:39:06.772357 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amr_mus7bSxOV4LObzu6nQAAABo"]
[Thu Jul 30 08:39:06.772556 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amr_mus7bSxOV4LObzu6nQAAABo"]
[Thu Jul 30 08:39:06.786378 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.786401 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.797909 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/sdl-first/.env"] [unique_id "amr_mus7bSxOV4LObzu6ngAAABo"]
[Thu Jul 30 08:39:06.798059 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/sdl-first/.env"] [unique_id "amr_mus7bSxOV4LObzu6ngAAABo"]
[Thu Jul 30 08:39:06.798287 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/sdl-first/.env"] [unique_id "amr_mus7bSxOV4LObzu6ngAAABo"]
[Thu Jul 30 08:39:06.799666 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/av.php
[Thu Jul 30 08:39:06.799730 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:06.817752 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amr_mus7bSxOV4LObzu6nwAAABo"]
[Thu Jul 30 08:39:06.817910 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amr_mus7bSxOV4LObzu6nwAAABo"]
[Thu Jul 30 08:39:06.818106 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amr_mus7bSxOV4LObzu6nwAAABo"]
[Thu Jul 30 08:39:06.829266 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:47252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.829284 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:47252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.849441 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amr_mus7bSxOV4LObzu6oAAAABo"]
[Thu Jul 30 08:39:06.849587 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amr_mus7bSxOV4LObzu6oAAAABo"]
[Thu Jul 30 08:39:06.849776 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amr_mus7bSxOV4LObzu6oAAAABo"]
[Thu Jul 30 08:39:06.866398 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.866417 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.872102 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/web/.env"] [unique_id "amr_mus7bSxOV4LObzu6oQAAABo"]
[Thu Jul 30 08:39:06.872246 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/web/.env"] [unique_id "amr_mus7bSxOV4LObzu6oQAAABo"]
[Thu Jul 30 08:39:06.872422 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/web/.env"] [unique_id "amr_mus7bSxOV4LObzu6oQAAABo"]
[Thu Jul 30 08:39:06.896053 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amr_mus7bSxOV4LObzu6ogAAABo"]
[Thu Jul 30 08:39:06.899851 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amr_mus7bSxOV4LObzu6ogAAABo"]
[Thu Jul 30 08:39:06.900103 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amr_mus7bSxOV4LObzu6ogAAABo"]
[Thu Jul 30 08:39:06.904167 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.904855 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:47268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.914684 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mini.php
[Thu Jul 30 08:39:06.917141 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:06.918537 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/with-dotenv/.env"] [unique_id "amr_mus7bSxOV4LObzu6owAAABo"]
[Thu Jul 30 08:39:06.918680 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/with-dotenv/.env"] [unique_id "amr_mus7bSxOV4LObzu6owAAABo"]
[Thu Jul 30 08:39:06.918856 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/with-dotenv/.env"] [unique_id "amr_mus7bSxOV4LObzu6owAAABo"]
[Thu Jul 30 08:39:06.931209 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Kubernetes/.env"] [unique_id "amr_mk10g1cPUQyHDS7xqQAAABg"]
[Thu Jul 30 08:39:06.931331 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Kubernetes/.env"] [unique_id "amr_mk10g1cPUQyHDS7xqQAAABg"]
[Thu Jul 30 08:39:06.931505 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_mk10g1cPUQyHDS7xqQAAABg"]
[Thu Jul 30 08:39:06.941320 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:47272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.941339 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:47272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.943617 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amr_mus7bSxOV4LObzu6pAAAABo"]
[Thu Jul 30 08:39:06.943738 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amr_mus7bSxOV4LObzu6pAAAABo"]
[Thu Jul 30 08:39:06.943910 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amr_mus7bSxOV4LObzu6pAAAABo"]
[Thu Jul 30 08:39:06.967628 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amr_mus7bSxOV4LObzu6pQAAABo"]
[Thu Jul 30 08:39:06.967771 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amr_mus7bSxOV4LObzu6pQAAABo"]
[Thu Jul 30 08:39:06.967961 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amr_mus7bSxOV4LObzu6pQAAABo"]
[Thu Jul 30 08:39:06.979508 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.979528 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:06.989803 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "amr_mus7bSxOV4LObzu6pgAAABo"]
[Thu Jul 30 08:39:06.989982 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "amr_mus7bSxOV4LObzu6pgAAABo"]
[Thu Jul 30 08:39:06.990198 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "amr_mus7bSxOV4LObzu6pgAAABo"]
[Thu Jul 30 08:39:07.009736 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amr_m-s7bSxOV4LObzu6pwAAABo"]
[Thu Jul 30 08:39:07.009890 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amr_m-s7bSxOV4LObzu6pwAAABo"]
[Thu Jul 30 08:39:07.010099 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amr_m-s7bSxOV4LObzu6pwAAABo"]
[Thu Jul 30 08:39:07.016012 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:47288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.016033 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:47288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.030212 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aa.php
[Thu Jul 30 08:39:07.030258 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:07.030755 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/export/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qAAAABo"]
[Thu Jul 30 08:39:07.030867 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/export/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qAAAABo"]
[Thu Jul 30 08:39:07.031044 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/export/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qAAAABo"]
[Thu Jul 30 08:39:07.051998 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fastlane/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qQAAABo"]
[Thu Jul 30 08:39:07.052149 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fastlane/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qQAAABo"]
[Thu Jul 30 08:39:07.052322 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fastlane/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qQAAABo"]
[Thu Jul 30 08:39:07.052760 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.052779 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:47296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.077201 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/favicons/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qgAAABo"]
[Thu Jul 30 08:39:07.077330 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/favicons/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qgAAABo"]
[Thu Jul 30 08:39:07.077494 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/favicons/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qgAAABo"]
[Thu Jul 30 08:39:07.092521 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.092552 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.098612 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/favs/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qwAAABo"]
[Thu Jul 30 08:39:07.098742 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/favs/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qwAAABo"]
[Thu Jul 30 08:39:07.098918 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/favs/.env"] [unique_id "amr_m-s7bSxOV4LObzu6qwAAABo"]
[Thu Jul 30 08:39:07.117878 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/feature/.env"] [unique_id "amr_m-s7bSxOV4LObzu6rAAAABo"]
[Thu Jul 30 08:39:07.118030 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/feature/.env"] [unique_id "amr_m-s7bSxOV4LObzu6rAAAABo"]
[Thu Jul 30 08:39:07.118238 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/feature/.env"] [unique_id "amr_m-s7bSxOV4LObzu6rAAAABo"]
[Thu Jul 30 08:39:07.133334 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:47310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.133357 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:47310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.137260 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.bak"] [unique_id "amr_m-s7bSxOV4LObzu6rQAAABo"]
[Thu Jul 30 08:39:07.137378 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.bak"] [unique_id "amr_m-s7bSxOV4LObzu6rQAAABo"]
[Thu Jul 30 08:39:07.137541 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.bak"] [unique_id "amr_m-s7bSxOV4LObzu6rQAAABo"]
[Thu Jul 30 08:39:07.146711 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/w.php
[Thu Jul 30 08:39:07.146754 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:07.161362 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.dev"] [unique_id "amr_m-s7bSxOV4LObzu6rgAAABo"]
[Thu Jul 30 08:39:07.161488 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.dev"] [unique_id "amr_m-s7bSxOV4LObzu6rgAAABo"]
[Thu Jul 30 08:39:07.161668 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.dev"] [unique_id "amr_m-s7bSxOV4LObzu6rgAAABo"]
[Thu Jul 30 08:39:07.168862 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.168882 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.192628 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:13924] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Library/.env"] [unique_id "amr_m8sDPUni1EbX-qViHwAAADg"]
[Thu Jul 30 08:39:07.192772 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:13924] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Library/.env"] [unique_id "amr_m8sDPUni1EbX-qViHwAAADg"]
[Thu Jul 30 08:39:07.192942 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:13924] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_m8sDPUni1EbX-qViHwAAADg"]
[Thu Jul 30 08:39:07.201316 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.dist"] [unique_id "amr_m-s7bSxOV4LObzu6rwAAABo"]
[Thu Jul 30 08:39:07.201443 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.dist"] [unique_id "amr_m-s7bSxOV4LObzu6rwAAABo"]
[Thu Jul 30 08:39:07.201624 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.dist"] [unique_id "amr_m-s7bSxOV4LObzu6rwAAABo"]
[Thu Jul 30 08:39:07.206283 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.206303 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.221283 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.local"] [unique_id "amr_m-s7bSxOV4LObzu6sAAAABo"]
[Thu Jul 30 08:39:07.221480 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.local"] [unique_id "amr_m-s7bSxOV4LObzu6sAAAABo"]
[Thu Jul 30 08:39:07.221913 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/feature/.env.local"] [unique_id "amr_m-s7bSxOV4LObzu6sAAAABo"]
[Thu Jul 30 08:39:07.244224 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.244245 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.259938 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin.php
[Thu Jul 30 08:39:07.259980 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:07.285359 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:47352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.285378 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:47352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.321210 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.321230 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.356271 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.356303 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.392226 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.392250 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.429775 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.429798 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.457006 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:13932] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_m8TyHJeh8MEeCqDRzAAAAEQ"]
[Thu Jul 30 08:39:07.457148 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:13932] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amr_m8TyHJeh8MEeCqDRzAAAAEQ"]
[Thu Jul 30 08:39:07.457338 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:13932] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_m8TyHJeh8MEeCqDRzAAAAEQ"]
[Thu Jul 30 08:39:07.471789 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.471809 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.512300 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.512319 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.515214 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:07.549158 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.549180 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.587777 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/php.ini"] [unique_id "amr_m-RqJARMdmAY45gCVwAAABk"]
[Thu Jul 30 08:39:07.588111 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/php.ini"] [unique_id "amr_m-RqJARMdmAY45gCVwAAABk"]
[Thu Jul 30 08:39:07.588237 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bot/php.ini"] [unique_id "amr_m-RqJARMdmAY45gCVwAAABk"]
[Thu Jul 30 08:39:07.589673 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.589700 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.625854 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.625874 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.664277 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.664296 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.674441 2026] [authz_core:error] [pid 2423797:tid 2423797] [client 4.232.188.49:48657] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/Requests/error_log
[Thu Jul 30 08:39:07.679102 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/m.php
[Thu Jul 30 08:39:07.679143 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:07.702223 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.702246 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.702612 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13944] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_m010g1cPUQyHDS7xrQAAABg"]
[Thu Jul 30 08:39:07.702738 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amr_m010g1cPUQyHDS7xrQAAABg"]
[Thu Jul 30 08:39:07.702943 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:13944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_m010g1cPUQyHDS7xrQAAABg"]
[Thu Jul 30 08:39:07.736542 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.736571 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.772947 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.772972 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.808134 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47470] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/client/laravel.log"] [unique_id "amr_mygDZvJnuOkhDtU2uwAAACU"]
[Thu Jul 30 08:39:07.808426 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/laravel.log"] [unique_id "amr_mygDZvJnuOkhDtU2uwAAACU"]
[Thu Jul 30 08:39:07.808745 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.808856 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/laravel.log"] [unique_id "amr_mygDZvJnuOkhDtU2uwAAACU"]
[Thu Jul 30 08:39:07.814945 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:07.841206 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.841224 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.878330 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.878361 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.913537 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.913557 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.932450 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:07.950111 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_m0Nn3uvyljca7F0vMAAAADI"]
[Thu Jul 30 08:39:07.950235 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_m0Nn3uvyljca7F0vMAAAADI"]
[Thu Jul 30 08:39:07.950552 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.950690 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_m0Nn3uvyljca7F0vMAAAADI"]
[Thu Jul 30 08:39:07.957092 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13956] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_m8VDgdzdvTL2t3XydAAAAB0"]
[Thu Jul 30 08:39:07.957215 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13956] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amr_m8VDgdzdvTL2t3XydAAAAB0"]
[Thu Jul 30 08:39:07.957408 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13956] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_m8VDgdzdvTL2t3XydAAAAB0"]
[Thu Jul 30 08:39:07.990249 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:07.990271 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.026570 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47512] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/client/php.ini"] [unique_id "amr_nJAx25ZrwYe3S0laywAAAAk"]
[Thu Jul 30 08:39:08.026872 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/php.ini"] [unique_id "amr_nJAx25ZrwYe3S0laywAAAAk"]
[Thu Jul 30 08:39:08.027204 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.027317 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/php.ini"] [unique_id "amr_nJAx25ZrwYe3S0laywAAAAk"]
[Thu Jul 30 08:39:08.042189 2026] [authz_core:error] [pid 2427701:tid 2427701] [client 57.141.0.1:30478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:08.042862 2026] [authz_core:error] [pid 2427701:tid 2427701] [client 57.141.0.1:30478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:08.046439 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/classwithtostring.php
[Thu Jul 30 08:39:08.046484 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:08.054233 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/feature/php.ini"] [unique_id "amr_nOs7bSxOV4LObzu60wAAABo"]
[Thu Jul 30 08:39:08.054499 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/feature/php.ini"] [unique_id "amr_nOs7bSxOV4LObzu60wAAABo"]
[Thu Jul 30 08:39:08.054705 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/feature/php.ini"] [unique_id "amr_nOs7bSxOV4LObzu60wAAABo"]
[Thu Jul 30 08:39:08.061760 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.061780 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.100362 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.100388 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.137869 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.137891 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.177176 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.177199 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.200121 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_nMVDgdzdvTL2t3XydQAAAB0"]
[Thu Jul 30 08:39:08.200268 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amr_nMVDgdzdvTL2t3XydQAAAB0"]
[Thu Jul 30 08:39:08.200445 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_nMVDgdzdvTL2t3XydQAAAB0"]
[Thu Jul 30 08:39:08.208919 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gmo.php
[Thu Jul 30 08:39:08.208967 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:08.212378 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.212398 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:47556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.248657 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.248675 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.292227 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.292246 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.325761 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:08.328457 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.328493 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.363026 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.363045 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.399196 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.399219 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.435282 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:47616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.435304 2026] [core:error] [pid 2412506:tid 2412506] [client 185.177.72.66:47616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.439201 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-the.php
[Thu Jul 30 08:39:08.439243 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:08.461510 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13966] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_nMVDgdzdvTL2t3XydgAAAB0"]
[Thu Jul 30 08:39:08.461646 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amr_nMVDgdzdvTL2t3XydgAAAB0"]
[Thu Jul 30 08:39:08.461836 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:13966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_nMVDgdzdvTL2t3XydgAAAB0"]
[Thu Jul 30 08:39:08.474877 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.474896 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.510220 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fedex/.env"] [unique_id "amr_nOs7bSxOV4LObzu65gAAABo"]
[Thu Jul 30 08:39:08.510389 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fedex/.env"] [unique_id "amr_nOs7bSxOV4LObzu65gAAABo"]
[Thu Jul 30 08:39:08.510593 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fedex/.env"] [unique_id "amr_nOs7bSxOV4LObzu65gAAABo"]
[Thu Jul 30 08:39:08.511349 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.511367 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.548239 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.548274 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.552309 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.php
[Thu Jul 30 08:39:08.552352 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:08.554417 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fhir-api/.env"] [unique_id "amr_nOs7bSxOV4LObzu66AAAABo"]
[Thu Jul 30 08:39:08.554539 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fhir-api/.env"] [unique_id "amr_nOs7bSxOV4LObzu66AAAABo"]
[Thu Jul 30 08:39:08.554723 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fhir-api/.env"] [unique_id "amr_nOs7bSxOV4LObzu66AAAABo"]
[Thu Jul 30 08:39:08.592002 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/src/.env"] [unique_id "amr_nP8233Hh3pbQWVezJQAAABU"]
[Thu Jul 30 08:39:08.592198 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/src/.env"] [unique_id "amr_nP8233Hh3pbQWVezJQAAABU"]
[Thu Jul 30 08:39:08.592525 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.592654 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/src/.env"] [unique_id "amr_nP8233Hh3pbQWVezJQAAABU"]
[Thu Jul 30 08:39:08.617647 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/files/.env"] [unique_id "amr_nOs7bSxOV4LObzu66wAAABo"]
[Thu Jul 30 08:39:08.617771 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/files/.env"] [unique_id "amr_nOs7bSxOV4LObzu66wAAABo"]
[Thu Jul 30 08:39:08.617948 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/files/.env"] [unique_id "amr_nOs7bSxOV4LObzu66wAAABo"]
[Thu Jul 30 08:39:08.626168 2026] [core:error] [pid 2427542:tid 2427542] (13)Permission denied: [client 216.73.216.199:42834] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_head_cache/objects
[Thu Jul 30 08:39:08.627589 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.627605 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.644797 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fileserver/.env"] [unique_id "amr_nOs7bSxOV4LObzu67AAAABo"]
[Thu Jul 30 08:39:08.644940 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fileserver/.env"] [unique_id "amr_nOs7bSxOV4LObzu67AAAABo"]
[Thu Jul 30 08:39:08.645126 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fileserver/.env"] [unique_id "amr_nOs7bSxOV4LObzu67AAAABo"]
[Thu Jul 30 08:39:08.664304 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.664325 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.665018 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_nORqJARMdmAY45gCagAAABk"]
[Thu Jul 30 08:39:08.665159 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_nORqJARMdmAY45gCagAAABk"]
[Thu Jul 30 08:39:08.665260 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amr_nORqJARMdmAY45gCagAAABk"]
[Thu Jul 30 08:39:08.670338 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/films/.env"] [unique_id "amr_nOs7bSxOV4LObzu67QAAABo"]
[Thu Jul 30 08:39:08.670457 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/films/.env"] [unique_id "amr_nOs7bSxOV4LObzu67QAAABo"]
[Thu Jul 30 08:39:08.670643 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/films/.env"] [unique_id "amr_nOs7bSxOV4LObzu67QAAABo"]
[Thu Jul 30 08:39:08.692940 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amr_nOs7bSxOV4LObzu67gAAABo"]
[Thu Jul 30 08:39:08.693117 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amr_nOs7bSxOV4LObzu67gAAABo"]
[Thu Jul 30 08:39:08.693305 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amr_nOs7bSxOV4LObzu67gAAABo"]
[Thu Jul 30 08:39:08.693582 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_nORqJARMdmAY45gCawAAABk"]
[Thu Jul 30 08:39:08.693704 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_nORqJARMdmAY45gCawAAABk"]
[Thu Jul 30 08:39:08.693806 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amr_nORqJARMdmAY45gCawAAABk"]
[Thu Jul 30 08:39:08.700468 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/init.php
[Thu Jul 30 08:39:08.700511 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:08.703245 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.703264 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.717894 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_nORqJARMdmAY45gCbAAAABk"]
[Thu Jul 30 08:39:08.718032 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_nORqJARMdmAY45gCbAAAABk"]
[Thu Jul 30 08:39:08.718151 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amr_nORqJARMdmAY45gCbAAAABk"]
[Thu Jul 30 08:39:08.720483 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/first-network/.env"] [unique_id "amr_nOs7bSxOV4LObzu67wAAABo"]
[Thu Jul 30 08:39:08.720621 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/first-network/.env"] [unique_id "amr_nOs7bSxOV4LObzu67wAAABo"]
[Thu Jul 30 08:39:08.720799 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/first-network/.env"] [unique_id "amr_nOs7bSxOV4LObzu67wAAABo"]
[Thu Jul 30 08:39:08.737014 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47690] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/client/web.config"] [unique_id "amr_nMVDgdzdvTL2t3XydwAAAB0"]
[Thu Jul 30 08:39:08.737237 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47690] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /client/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/client/web.config"] [unique_id "amr_nMVDgdzdvTL2t3XydwAAAB0"]
[Thu Jul 30 08:39:08.737366 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/client/web.config"] [unique_id "amr_nMVDgdzdvTL2t3XydwAAAB0"]
[Thu Jul 30 08:39:08.737688 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.737791 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:47690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/client/web.config"] [unique_id "amr_nMVDgdzdvTL2t3XydwAAAB0"]
[Thu Jul 30 08:39:08.739575 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bucoffea/.env"] [unique_id "amr_nORqJARMdmAY45gCbQAAABk"]
[Thu Jul 30 08:39:08.739701 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bucoffea/.env"] [unique_id "amr_nORqJARMdmAY45gCbQAAABk"]
[Thu Jul 30 08:39:08.739812 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/bucoffea/.env"] [unique_id "amr_nORqJARMdmAY45gCbQAAABk"]
[Thu Jul 30 08:39:08.741764 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fisdom/fisdom/.env"] [unique_id "amr_nOs7bSxOV4LObzu68AAAABo"]
[Thu Jul 30 08:39:08.741884 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fisdom/fisdom/.env"] [unique_id "amr_nOs7bSxOV4LObzu68AAAABo"]
[Thu Jul 30 08:39:08.742059 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fisdom/fisdom/.env"] [unique_id "amr_nOs7bSxOV4LObzu68AAAABo"]
[Thu Jul 30 08:39:08.763522 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fixtures/blocks/.env"] [unique_id "amr_nOs7bSxOV4LObzu68QAAABo"]
[Thu Jul 30 08:39:08.763656 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fixtures/blocks/.env"] [unique_id "amr_nOs7bSxOV4LObzu68QAAABo"]
[Thu Jul 30 08:39:08.763842 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fixtures/blocks/.env"] [unique_id "amr_nOs7bSxOV4LObzu68QAAABo"]
[Thu Jul 30 08:39:08.773295 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.773318 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:47702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.784099 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amr_nOs7bSxOV4LObzu68gAAABo"]
[Thu Jul 30 08:39:08.784225 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amr_nOs7bSxOV4LObzu68gAAABo"]
[Thu Jul 30 08:39:08.784399 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amr_nOs7bSxOV4LObzu68gAAABo"]
[Thu Jul 30 08:39:08.807709 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fixtures/flight/.env"] [unique_id "amr_nOs7bSxOV4LObzu68wAAABo"]
[Thu Jul 30 08:39:08.807866 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fixtures/flight/.env"] [unique_id "amr_nOs7bSxOV4LObzu68wAAABo"]
[Thu Jul 30 08:39:08.808056 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fixtures/flight/.env"] [unique_id "amr_nOs7bSxOV4LObzu68wAAABo"]
[Thu Jul 30 08:39:08.811710 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.811729 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.825844 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/build.log"] [unique_id "amr_nORqJARMdmAY45gCbwAAABk"]
[Thu Jul 30 08:39:08.826131 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/build.log"] [unique_id "amr_nORqJARMdmAY45gCbwAAABk"]
[Thu Jul 30 08:39:08.826233 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/build.log"] [unique_id "amr_nORqJARMdmAY45gCbwAAABk"]
[Thu Jul 30 08:39:08.830701 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "amr_nOs7bSxOV4LObzu69AAAABo"]
[Thu Jul 30 08:39:08.830829 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "amr_nOs7bSxOV4LObzu69AAAABo"]
[Thu Jul 30 08:39:08.830996 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "amr_nOs7bSxOV4LObzu69AAAABo"]
[Thu Jul 30 08:39:08.836419 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/file5.php
[Thu Jul 30 08:39:08.836461 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:08.846592 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.846611 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.853207 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/flask/.env"] [unique_id "amr_nOs7bSxOV4LObzu69QAAABo"]
[Thu Jul 30 08:39:08.853323 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/flask/.env"] [unique_id "amr_nOs7bSxOV4LObzu69QAAABo"]
[Thu Jul 30 08:39:08.853502 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/flask/.env"] [unique_id "amr_nOs7bSxOV4LObzu69QAAABo"]
[Thu Jul 30 08:39:08.882894 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47742] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/clld_dir/.env"] [unique_id "amr_nC8b8gP_SKt2Q6y9JQAAAD4"]
[Thu Jul 30 08:39:08.883045 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47742] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/clld_dir/.env"] [unique_id "amr_nC8b8gP_SKt2Q6y9JQAAAD4"]
[Thu Jul 30 08:39:08.883366 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.883478 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47742] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/clld_dir/.env"] [unique_id "amr_nC8b8gP_SKt2Q6y9JQAAAD4"]
[Thu Jul 30 08:39:08.919817 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:47746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_nI_4x2IDFYJd2RFytwAAAAw"]
[Thu Jul 30 08:39:08.919939 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:47746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_nI_4x2IDFYJd2RFytwAAAAw"]
[Thu Jul 30 08:39:08.920274 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:47746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.920378 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:47746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_nI_4x2IDFYJd2RFytwAAAAw"]
[Thu Jul 30 08:39:08.958819 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47760] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cms/.env.bak"] [unique_id "amr_nC8z5UsblH75uX6lcAAAABc"]
[Thu Jul 30 08:39:08.958940 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47760] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cms/.env.bak"] [unique_id "amr_nC8z5UsblH75uX6lcAAAABc"]
[Thu Jul 30 08:39:08.959264 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:08.959371 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47760] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cms/.env.bak"] [unique_id "amr_nC8z5UsblH75uX6lcAAAABc"]
[Thu Jul 30 08:39:08.962675 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/flask_test_uploads/.env"] [unique_id "amr_nOs7bSxOV4LObzu6-gAAABo"]
[Thu Jul 30 08:39:08.962803 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/flask_test_uploads/.env"] [unique_id "amr_nOs7bSxOV4LObzu6-gAAABo"]
[Thu Jul 30 08:39:08.962971 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.17:21096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/flask_test_uploads/.env"] [unique_id "amr_nOs7bSxOV4LObzu6-gAAABo"]
[Thu Jul 30 08:39:09.000493 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:47770] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cms/.env.dev"] [unique_id "amr_nAovdwhMhh9vBJDQXgAAADE"]
[Thu Jul 30 08:39:09.000680 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:47770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cms/.env.dev"] [unique_id "amr_nAovdwhMhh9vBJDQXgAAADE"]
[Thu Jul 30 08:39:09.000995 2026] [core:error] [pid 2422379:tid 2422379] [client 185.177.72.66:47770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.001116 2026] [security2:error] [pid 2422379:tid 2422379] [client 185.177.72.66:47770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cms/.env.dev"] [unique_id "amr_nAovdwhMhh9vBJDQXgAAADE"]
[Thu Jul 30 08:39:09.022531 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:09.030642 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fm/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyeAAAAB0"]
[Thu Jul 30 08:39:09.030814 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fm/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyeAAAAB0"]
[Thu Jul 30 08:39:09.031004 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fm/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyeAAAAB0"]
[Thu Jul 30 08:39:09.036613 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47774] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cms/.env.dist"] [unique_id "amr_nUNn3uvyljca7F0vMwAAADI"]
[Thu Jul 30 08:39:09.036766 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cms/.env.dist"] [unique_id "amr_nUNn3uvyljca7F0vMwAAADI"]
[Thu Jul 30 08:39:09.037086 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.037202 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cms/.env.dist"] [unique_id "amr_nUNn3uvyljca7F0vMwAAADI"]
[Thu Jul 30 08:39:09.050141 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/font-icons/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyeQAAAB0"]
[Thu Jul 30 08:39:09.050266 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/font-icons/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyeQAAAB0"]
[Thu Jul 30 08:39:09.050449 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/font-icons/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyeQAAAB0"]
[Thu Jul 30 08:39:09.059213 2026] [ssl:error] [pid 2427538:tid 2427538] (EAI 2)Name or service not known: [client 144.76.19.72:25000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:09.059251 2026] [ssl:error] [pid 2427538:tid 2427538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:09.066286 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/build/.env"] [unique_id "amr_neRqJARMdmAY45gCdAAAABk"]
[Thu Jul 30 08:39:09.066450 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/build/.env"] [unique_id "amr_neRqJARMdmAY45gCdAAAABk"]
[Thu Jul 30 08:39:09.066568 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/build/.env"] [unique_id "amr_neRqJARMdmAY45gCdAAAABk"]
[Thu Jul 30 08:39:09.072018 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/fonts/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyegAAAB0"]
[Thu Jul 30 08:39:09.072150 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/fonts/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyegAAAB0"]
[Thu Jul 30 08:39:09.072323 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/fonts/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyegAAAB0"]
[Thu Jul 30 08:39:09.073788 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cms/.env.local"] [unique_id "amr_naCuPSoE0uFFzriA5QAAABY"]
[Thu Jul 30 08:39:09.073906 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cms/.env.local"] [unique_id "amr_naCuPSoE0uFFzriA5QAAABY"]
[Thu Jul 30 08:39:09.074216 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.074323 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cms/.env.local"] [unique_id "amr_naCuPSoE0uFFzriA5QAAABY"]
[Thu Jul 30 08:39:09.115183 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.115204 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.119519 2026] [ssl:error] [pid 2427701:tid 2427701] (EAI 2)Name or service not known: [client 144.76.19.72:25002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:09.119545 2026] [ssl:error] [pid 2427701:tid 2427701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:09.137649 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/shell.php
[Thu Jul 30 08:39:09.137695 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:09.151416 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.151436 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.155553 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/front-app/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyfgAAAB0"]
[Thu Jul 30 08:39:09.155685 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/front-app/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyfgAAAB0"]
[Thu Jul 30 08:39:09.155859 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/front-app/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyfgAAAB0"]
[Thu Jul 30 08:39:09.177910 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/front-empathy/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyfwAAAB0"]
[Thu Jul 30 08:39:09.178080 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/front-empathy/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyfwAAAB0"]
[Thu Jul 30 08:39:09.178276 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/front-empathy/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyfwAAAB0"]
[Thu Jul 30 08:39:09.187739 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.187767 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.206969 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/front-end/.env"] [unique_id "amr_ncVDgdzdvTL2t3XygAAAAB0"]
[Thu Jul 30 08:39:09.207123 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/front-end/.env"] [unique_id "amr_ncVDgdzdvTL2t3XygAAAAB0"]
[Thu Jul 30 08:39:09.207337 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/front-end/.env"] [unique_id "amr_ncVDgdzdvTL2t3XygAAAAB0"]
[Thu Jul 30 08:39:09.223184 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.223205 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:47804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.228669 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/front/.env"] [unique_id "amr_ncVDgdzdvTL2t3XygQAAAB0"]
[Thu Jul 30 08:39:09.228791 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/front/.env"] [unique_id "amr_ncVDgdzdvTL2t3XygQAAAB0"]
[Thu Jul 30 08:39:09.228970 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/front/.env"] [unique_id "amr_ncVDgdzdvTL2t3XygQAAAB0"]
[Thu Jul 30 08:39:09.249541 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/front/src/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyggAAAB0"]
[Thu Jul 30 08:39:09.249698 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/front/src/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyggAAAB0"]
[Thu Jul 30 08:39:09.249877 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/front/src/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyggAAAB0"]
[Thu Jul 30 08:39:09.257684 2026] [authz_core:error] [pid 2428115:tid 2428115] [client 52.238.199.152:46457] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-admin/includes/error_log
[Thu Jul 30 08:39:09.258167 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.258186 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.298393 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhAAAAB0"]
[Thu Jul 30 08:39:09.298642 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhAAAAB0"]
[Thu Jul 30 08:39:09.298952 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhAAAAB0"]
[Thu Jul 30 08:39:09.300294 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.300319 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.306248 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/f35.php
[Thu Jul 30 08:39:09.306290 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:09.318818 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/frontend/react/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhQAAAB0"]
[Thu Jul 30 08:39:09.318954 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/frontend/react/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhQAAAB0"]
[Thu Jul 30 08:39:09.319145 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/frontend/react/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhQAAAB0"]
[Thu Jul 30 08:39:09.340279 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.340300 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:47838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.343799 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/frontend/vue/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhgAAAB0"]
[Thu Jul 30 08:39:09.343947 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/frontend/vue/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhgAAAB0"]
[Thu Jul 30 08:39:09.344138 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/frontend/vue/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyhgAAAB0"]
[Thu Jul 30 08:39:09.377256 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:47844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.377282 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:47844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.394930 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/frontendfinaltest/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiAAAAB0"]
[Thu Jul 30 08:39:09.395108 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/frontendfinaltest/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiAAAAB0"]
[Thu Jul 30 08:39:09.395312 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/frontendfinaltest/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiAAAAB0"]
[Thu Jul 30 08:39:09.414518 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.414541 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.419373 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/new.php
[Thu Jul 30 08:39:09.488303 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:09.420806 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ftp/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiQAAAB0"]
[Thu Jul 30 08:39:09.489029 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ftp/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiQAAAB0"]
[Thu Jul 30 08:39:09.489261 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ftp/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiQAAAB0"]
[Thu Jul 30 08:39:09.456452 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.489484 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:47866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.477878 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:13990] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Passportjs/.env"] [unique_id "amr_nS8b8gP_SKt2Q6y9JgAAAD4"]
[Thu Jul 30 08:39:09.492281 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:13990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Passportjs/.env"] [unique_id "amr_nS8b8gP_SKt2Q6y9JgAAAD4"]
[Thu Jul 30 08:39:09.492487 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:13990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_nS8b8gP_SKt2Q6y9JgAAAD4"]
[Thu Jul 30 08:39:09.509941 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ftpmaster/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyigAAAB0"]
[Thu Jul 30 08:39:09.510096 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ftpmaster/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyigAAAB0"]
[Thu Jul 30 08:39:09.510279 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ftpmaster/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyigAAAB0"]
[Thu Jul 30 08:39:09.526270 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.526290 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:47874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.530443 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/function/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiwAAAB0"]
[Thu Jul 30 08:39:09.530556 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/function/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiwAAAB0"]
[Thu Jul 30 08:39:09.530737 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/function/.env"] [unique_id "amr_ncVDgdzdvTL2t3XyiwAAAB0"]
[Thu Jul 30 08:39:09.548938 2026] [core:error] [pid 2427542:tid 2427542] (13)Permission denied: [client 216.73.216.199:42834] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/objects_partial
[Thu Jul 30 08:39:09.555516 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/function/.env.bak"] [unique_id "amr_ncVDgdzdvTL2t3XyjAAAAB0"]
[Thu Jul 30 08:39:09.555659 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/function/.env.bak"] [unique_id "amr_ncVDgdzdvTL2t3XyjAAAAB0"]
[Thu Jul 30 08:39:09.555834 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/function/.env.bak"] [unique_id "amr_ncVDgdzdvTL2t3XyjAAAAB0"]
[Thu Jul 30 08:39:09.566297 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.566317 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.576231 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/.env"] [unique_id "amr_neRqJARMdmAY45gCfAAAABk"]
[Thu Jul 30 08:39:09.576349 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/.env"] [unique_id "amr_neRqJARMdmAY45gCfAAAABk"]
[Thu Jul 30 08:39:09.576444 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/.env"] [unique_id "amr_neRqJARMdmAY45gCfAAAABk"]
[Thu Jul 30 08:39:09.578275 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/function/.env.dev"] [unique_id "amr_ncVDgdzdvTL2t3XyjQAAAB0"]
[Thu Jul 30 08:39:09.578388 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/function/.env.dev"] [unique_id "amr_ncVDgdzdvTL2t3XyjQAAAB0"]
[Thu Jul 30 08:39:09.578570 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/function/.env.dev"] [unique_id "amr_ncVDgdzdvTL2t3XyjQAAAB0"]
[Thu Jul 30 08:39:09.600678 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:47898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.600698 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:47898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.601078 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/function/.env.dist"] [unique_id "amr_ncVDgdzdvTL2t3XyjgAAAB0"]
[Thu Jul 30 08:39:09.601197 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/function/.env.dist"] [unique_id "amr_ncVDgdzdvTL2t3XyjgAAAB0"]
[Thu Jul 30 08:39:09.601372 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/function/.env.dist"] [unique_id "amr_ncVDgdzdvTL2t3XyjgAAAB0"]
[Thu Jul 30 08:39:09.610496 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/adminfuns.php
[Thu Jul 30 08:39:09.610544 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:09.626192 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/function/.env.local"] [unique_id "amr_ncVDgdzdvTL2t3XyjwAAAB0"]
[Thu Jul 30 08:39:09.626333 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/function/.env.local"] [unique_id "amr_ncVDgdzdvTL2t3XyjwAAAB0"]
[Thu Jul 30 08:39:09.626512 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/function/.env.local"] [unique_id "amr_ncVDgdzdvTL2t3XyjwAAAB0"]
[Thu Jul 30 08:39:09.633734 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.633755 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.659385 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cache/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/.git/config"] [unique_id "amr_neRqJARMdmAY45gCfgAAABk"]
[Thu Jul 30 08:39:09.659509 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/.git/config"] [unique_id "amr_neRqJARMdmAY45gCfgAAABk"]
[Thu Jul 30 08:39:09.659618 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/.git/config"] [unique_id "amr_neRqJARMdmAY45gCfgAAABk"]
[Thu Jul 30 08:39:09.672144 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:47916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.672163 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:47916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.705476 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.705502 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:47926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.730496 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:09.739268 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:47940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.739287 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:47940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.744018 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:14006] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Serve_time_server/.env"] [unique_id "amr_nUNn3uvyljca7F0vNQAAADI"]
[Thu Jul 30 08:39:09.744145 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:14006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Serve_time_server/.env"] [unique_id "amr_nUNn3uvyljca7F0vNQAAADI"]
[Thu Jul 30 08:39:09.744307 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:14006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_nUNn3uvyljca7F0vNQAAADI"]
[Thu Jul 30 08:39:09.776223 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:47944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.776242 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:47944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.814199 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.814219 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:47946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.845319 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:09.848924 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_neRqJARMdmAY45gCggAAABk"]
[Thu Jul 30 08:39:09.849232 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_neRqJARMdmAY45gCggAAABk"]
[Thu Jul 30 08:39:09.849331 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amr_neRqJARMdmAY45gCggAAABk"]
[Thu Jul 30 08:39:09.851468 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.851493 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:47952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.866201 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/api-config.ini"] [unique_id "amr_neRqJARMdmAY45gCgwAAABk"]
[Thu Jul 30 08:39:09.866473 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/api-config.ini"] [unique_id "amr_neRqJARMdmAY45gCgwAAABk"]
[Thu Jul 30 08:39:09.866580 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/api-config.ini"] [unique_id "amr_neRqJARMdmAY45gCgwAAABk"]
[Thu Jul 30 08:39:09.892254 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:47956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.892278 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:47956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.929663 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.929684 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:47972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.960440 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fm.php
[Thu Jul 30 08:39:09.960495 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:09.966227 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.966242 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:47984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.999890 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:09.999914 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:47988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.003979 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/laravel.log"] [unique_id "amr_nuRqJARMdmAY45gChgAAABk"]
[Thu Jul 30 08:39:10.004283 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/laravel.log"] [unique_id "amr_nuRqJARMdmAY45gChgAAABk"]
[Thu Jul 30 08:39:10.004385 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/laravel.log"] [unique_id "amr_nuRqJARMdmAY45gChgAAABk"]
[Thu Jul 30 08:39:10.034608 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.034639 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.067552 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:48006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.067582 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:48006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.106266 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.106293 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.139010 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/web.config"] [unique_id "amr_nuRqJARMdmAY45gCiQAAABk"]
[Thu Jul 30 08:39:10.139243 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /cache/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/web.config"] [unique_id "amr_nuRqJARMdmAY45gCiQAAABk"]
[Thu Jul 30 08:39:10.139382 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/web.config"] [unique_id "amr_nuRqJARMdmAY45gCiQAAABk"]
[Thu Jul 30 08:39:10.139493 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cache/web.config"] [unique_id "amr_nuRqJARMdmAY45gCiQAAABk"]
[Thu Jul 30 08:39:10.143617 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:48024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.143638 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:48024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.157434 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cardea/backend/.env"] [unique_id "amr_nuRqJARMdmAY45gCigAAABk"]
[Thu Jul 30 08:39:10.157553 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cardea/backend/.env"] [unique_id "amr_nuRqJARMdmAY45gCigAAABk"]
[Thu Jul 30 08:39:10.157660 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cardea/backend/.env"] [unique_id "amr_nuRqJARMdmAY45gCigAAABk"]
[Thu Jul 30 08:39:10.172240 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 08:39:10.177789 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.177808 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.178083 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cdw-backend/.env"] [unique_id "amr_nuRqJARMdmAY45gCiwAAABk"]
[Thu Jul 30 08:39:10.178209 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cdw-backend/.env"] [unique_id "amr_nuRqJARMdmAY45gCiwAAABk"]
[Thu Jul 30 08:39:10.178306 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cdw-backend/.env"] [unique_id "amr_nuRqJARMdmAY45gCiwAAABk"]
[Thu Jul 30 08:39:10.201646 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjAAAABk"]
[Thu Jul 30 08:39:10.201816 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjAAAABk"]
[Thu Jul 30 08:39:10.201926 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjAAAABk"]
[Thu Jul 30 08:39:10.214633 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.214654 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.226143 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjQAAABk"]
[Thu Jul 30 08:39:10.226271 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjQAAABk"]
[Thu Jul 30 08:39:10.226390 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjQAAABk"]
[Thu Jul 30 08:39:10.244015 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjgAAABk"]
[Thu Jul 30 08:39:10.244150 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjgAAABk"]
[Thu Jul 30 08:39:10.244258 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjgAAABk"]
[Thu Jul 30 08:39:10.250770 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:48052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.250789 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:48052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.264974 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjwAAABk"]
[Thu Jul 30 08:39:10.265115 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjwAAABk"]
[Thu Jul 30 08:39:10.265210 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCjwAAABk"]
[Thu Jul 30 08:39:10.285984 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkAAAABk"]
[Thu Jul 30 08:39:10.286115 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkAAAABk"]
[Thu Jul 30 08:39:10.286224 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkAAAABk"]
[Thu Jul 30 08:39:10.289167 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.289187 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.303991 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkQAAABk"]
[Thu Jul 30 08:39:10.304127 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkQAAABk"]
[Thu Jul 30 08:39:10.304225 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkQAAABk"]
[Thu Jul 30 08:39:10.320526 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkgAAABk"]
[Thu Jul 30 08:39:10.320663 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkgAAABk"]
[Thu Jul 30 08:39:10.320756 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkgAAABk"]
[Thu Jul 30 08:39:10.325905 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:48066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.325927 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:48066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.336059 2026] [security2:error] [pid 2412472:tid 2412472] [client 153.117.40.196:43860] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_ni8z5UsblH75uX6ldQAAABc"]
[Thu Jul 30 08:39:10.336110 2026] [security2:error] [pid 2412472:tid 2412472] [client 153.117.40.196:43860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_ni8z5UsblH75uX6ldQAAABc"]
[Thu Jul 30 08:39:10.336320 2026] [security2:error] [pid 2412472:tid 2412472] [client 153.117.40.196:43860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_ni8z5UsblH75uX6ldQAAABc"]
[Thu Jul 30 08:39:10.340868 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkwAAABk"]
[Thu Jul 30 08:39:10.340983 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkwAAABk"]
[Thu Jul 30 08:39:10.341097 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amr_nuRqJARMdmAY45gCkwAAABk"]
[Thu Jul 30 08:39:10.354442 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/file.php
[Thu Jul 30 08:39:10.354484 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:10.361234 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.361250 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.363010 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/challenge/.env"] [unique_id "amr_nuRqJARMdmAY45gClAAAABk"]
[Thu Jul 30 08:39:10.363152 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/challenge/.env"] [unique_id "amr_nuRqJARMdmAY45gClAAAABk"]
[Thu Jul 30 08:39:10.363247 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/challenge/.env"] [unique_id "amr_nuRqJARMdmAY45gClAAAABk"]
[Thu Jul 30 08:39:10.385342 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/challenges/.env"] [unique_id "amr_nuRqJARMdmAY45gClQAAABk"]
[Thu Jul 30 08:39:10.385473 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/challenges/.env"] [unique_id "amr_nuRqJARMdmAY45gClQAAABk"]
[Thu Jul 30 08:39:10.385579 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/challenges/.env"] [unique_id "amr_nuRqJARMdmAY45gClQAAABk"]
[Thu Jul 30 08:39:10.398922 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:48096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/cms/php.ini"] [unique_id "amr_nkNn3uvyljca7F0vNwAAADI"]
[Thu Jul 30 08:39:10.399270 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:48096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cms/php.ini"] [unique_id "amr_nkNn3uvyljca7F0vNwAAADI"]
[Thu Jul 30 08:39:10.399595 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:48096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.399701 2026] [security2:error] [pid 2427539:tid 2427539] [client 185.177.72.66:48096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cms/php.ini"] [unique_id "amr_nkNn3uvyljca7F0vNwAAADI"]
[Thu Jul 30 08:39:10.432590 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/function/php.ini"] [unique_id "amr_nsVDgdzdvTL2t3XysgAAAB0"]
[Thu Jul 30 08:39:10.432867 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/function/php.ini"] [unique_id "amr_nsVDgdzdvTL2t3XysgAAAB0"]
[Thu Jul 30 08:39:10.433040 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/function/php.ini"] [unique_id "amr_nsVDgdzdvTL2t3XysgAAAB0"]
[Thu Jul 30 08:39:10.436847 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.436864 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.459871 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amr_nuRqJARMdmAY45gClwAAABk"]
[Thu Jul 30 08:39:10.459994 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amr_nuRqJARMdmAY45gClwAAABk"]
[Thu Jul 30 08:39:10.460111 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amr_nuRqJARMdmAY45gClwAAABk"]
[Thu Jul 30 08:39:10.472749 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.472767 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.480093 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/chat-client/.env"] [unique_id "amr_nuRqJARMdmAY45gCmAAAABk"]
[Thu Jul 30 08:39:10.480231 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/chat-client/.env"] [unique_id "amr_nuRqJARMdmAY45gCmAAAABk"]
[Thu Jul 30 08:39:10.480331 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/chat-client/.env"] [unique_id "amr_nuRqJARMdmAY45gCmAAAABk"]
[Thu Jul 30 08:39:10.506063 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.506093 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.513676 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:10.542870 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:48122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.542891 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:48122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.581051 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:48138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.581084 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:48138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.616029 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/chiminey/.env"] [unique_id "amr_nuRqJARMdmAY45gCmwAAABk"]
[Thu Jul 30 08:39:10.616183 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/chiminey/.env"] [unique_id "amr_nuRqJARMdmAY45gCmwAAABk"]
[Thu Jul 30 08:39:10.616286 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/chiminey/.env"] [unique_id "amr_nuRqJARMdmAY45gCmwAAABk"]
[Thu Jul 30 08:39:10.617139 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.617157 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.636602 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client-app/.env"] [unique_id "amr_nuRqJARMdmAY45gCnAAAABk"]
[Thu Jul 30 08:39:10.636720 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client-app/.env"] [unique_id "amr_nuRqJARMdmAY45gCnAAAABk"]
[Thu Jul 30 08:39:10.636815 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client-app/.env"] [unique_id "amr_nuRqJARMdmAY45gCnAAAABk"]
[Thu Jul 30 08:39:10.651114 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bolt.php
[Thu Jul 30 08:39:10.651167 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:10.654210 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.654228 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.654771 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.bak"] [unique_id "amr_nuRqJARMdmAY45gCnQAAABk"]
[Thu Jul 30 08:39:10.654882 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.bak"] [unique_id "amr_nuRqJARMdmAY45gCnQAAABk"]
[Thu Jul 30 08:39:10.654973 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.bak"] [unique_id "amr_nuRqJARMdmAY45gCnQAAABk"]
[Thu Jul 30 08:39:10.671789 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.dev"] [unique_id "amr_nuRqJARMdmAY45gCngAAABk"]
[Thu Jul 30 08:39:10.671901 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.dev"] [unique_id "amr_nuRqJARMdmAY45gCngAAABk"]
[Thu Jul 30 08:39:10.672002 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.dev"] [unique_id "amr_nuRqJARMdmAY45gCngAAABk"]
[Thu Jul 30 08:39:10.688227 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.dist"] [unique_id "amr_nuRqJARMdmAY45gCnwAAABk"]
[Thu Jul 30 08:39:10.688347 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.dist"] [unique_id "amr_nuRqJARMdmAY45gCnwAAABk"]
[Thu Jul 30 08:39:10.688449 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.dist"] [unique_id "amr_nuRqJARMdmAY45gCnwAAABk"]
[Thu Jul 30 08:39:10.692204 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.692223 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.708537 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.local"] [unique_id "amr_nuRqJARMdmAY45gCoAAAABk"]
[Thu Jul 30 08:39:10.708708 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.local"] [unique_id "amr_nuRqJARMdmAY45gCoAAAABk"]
[Thu Jul 30 08:39:10.708816 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.local"] [unique_id "amr_nuRqJARMdmAY45gCoAAAABk"]
[Thu Jul 30 08:39:10.727253 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.727276 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.728055 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.production"] [unique_id "amr_nuRqJARMdmAY45gCoQAAABk"]
[Thu Jul 30 08:39:10.728190 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.production"] [unique_id "amr_nuRqJARMdmAY45gCoQAAABk"]
[Thu Jul 30 08:39:10.728287 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.production"] [unique_id "amr_nuRqJARMdmAY45gCoQAAABk"]
[Thu Jul 30 08:39:10.747084 2026] [authz_core:error] [pid 2427777:tid 2427777] [client 57.141.0.54:23330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:10.747377 2026] [authz_core:error] [pid 2428115:tid 2428115] [client 52.238.199.152:46457] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/error_log
[Thu Jul 30 08:39:10.747708 2026] [authz_core:error] [pid 2427777:tid 2427777] [client 57.141.0.54:23330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:10.749978 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.staging"] [unique_id "amr_nuRqJARMdmAY45gCogAAABk"]
[Thu Jul 30 08:39:10.750108 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.staging"] [unique_id "amr_nuRqJARMdmAY45gCogAAABk"]
[Thu Jul 30 08:39:10.750205 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.env.staging"] [unique_id "amr_nuRqJARMdmAY45gCogAAABk"]
[Thu Jul 30 08:39:10.763126 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.763144 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.789285 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14020] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Server_with_db/.env"] [unique_id "amr_no0p-nZdMLHTbfTMWgAAAA4"]
[Thu Jul 30 08:39:10.789410 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Server_with_db/.env"] [unique_id "amr_no0p-nZdMLHTbfTMWgAAAA4"]
[Thu Jul 30 08:39:10.789622 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_no0p-nZdMLHTbfTMWgAAAA4"]
[Thu Jul 30 08:39:10.800294 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.800311 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.817475 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/3.php
[Thu Jul 30 08:39:10.817580 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:10.832575 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.832594 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.837397 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /client/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.git/config"] [unique_id "amr_nuRqJARMdmAY45gCpAAAABk"]
[Thu Jul 30 08:39:10.837515 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.git/config"] [unique_id "amr_nuRqJARMdmAY45gCpAAAABk"]
[Thu Jul 30 08:39:10.837634 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/.git/config"] [unique_id "amr_nuRqJARMdmAY45gCpAAAABk"]
[Thu Jul 30 08:39:10.872169 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.872187 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.910322 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.910346 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.939045 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/gists/cache/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyxgAAAB0"]
[Thu Jul 30 08:39:10.939185 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/gists/cache/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyxgAAAB0"]
[Thu Jul 30 08:39:10.939354 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/gists/cache/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyxgAAAB0"]
[Thu Jul 30 08:39:10.956262 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.956294 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.960709 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/gists/laravel/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyxwAAAB0"]
[Thu Jul 30 08:39:10.960830 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/gists/laravel/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyxwAAAB0"]
[Thu Jul 30 08:39:10.960992 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/gists/laravel/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyxwAAAB0"]
[Thu Jul 30 08:39:10.983112 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/pusher/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/gists/pusher/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyyAAAAB0"]
[Thu Jul 30 08:39:10.983245 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/gists/pusher/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyyAAAAB0"]
[Thu Jul 30 08:39:10.983423 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/gists/pusher/.env"] [unique_id "amr_nsVDgdzdvTL2t3XyyAAAAB0"]
[Thu Jul 30 08:39:10.988937 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:10.988956 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.010161 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/github-connect/.env"] [unique_id "amr_n8VDgdzdvTL2t3XyyQAAAB0"]
[Thu Jul 30 08:39:11.010283 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/github-connect/.env"] [unique_id "amr_n8VDgdzdvTL2t3XyyQAAAB0"]
[Thu Jul 30 08:39:11.010457 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/github-connect/.env"] [unique_id "amr_n8VDgdzdvTL2t3XyyQAAAB0"]
[Thu Jul 30 08:39:11.011009 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/222.php
[Thu Jul 30 08:39:11.011052 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:11.026582 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48240] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.026601 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48240] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.034422 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/global.asa"] [unique_id "amr_n8VDgdzdvTL2t3XyygAAAB0"]
[Thu Jul 30 08:39:11.034712 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/global.asa"] [unique_id "amr_n8VDgdzdvTL2t3XyygAAAB0"]
[Thu Jul 30 08:39:11.034884 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/global.asa"] [unique_id "amr_n8VDgdzdvTL2t3XyygAAAB0"]
[Thu Jul 30 08:39:11.038484 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14026] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Simple_server/.env"] [unique_id "amr_n40p-nZdMLHTbfTMWwAAAA4"]
[Thu Jul 30 08:39:11.038612 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14026] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Simple_server/.env"] [unique_id "amr_n40p-nZdMLHTbfTMWwAAAA4"]
[Thu Jul 30 08:39:11.038772 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14026] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_n40p-nZdMLHTbfTMWwAAAA4"]
[Thu Jul 30 08:39:11.059455 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.059474 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.073020 2026] [access_compat:error] [pid 2423797:tid 2423797] [client 4.232.188.49:48657] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 08:39:11.085006 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_n-RqJARMdmAY45gCqQAAABk"]
[Thu Jul 30 08:39:11.085296 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_n-RqJARMdmAY45gCqQAAABk"]
[Thu Jul 30 08:39:11.085397 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amr_n-RqJARMdmAY45gCqQAAABk"]
[Thu Jul 30 08:39:11.094491 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/code/api/.env"] [unique_id "amr_ny8b8gP_SKt2Q6y9LAAAAD4"]
[Thu Jul 30 08:39:11.094633 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/code/api/.env"] [unique_id "amr_ny8b8gP_SKt2Q6y9LAAAAD4"]
[Thu Jul 30 08:39:11.094953 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.095058 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/code/api/.env"] [unique_id "amr_ny8b8gP_SKt2Q6y9LAAAAD4"]
[Thu Jul 30 08:39:11.127117 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48262] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/code/web/.env"] [unique_id "amr_n0QvuHxPljPWrXhrawAAAC4"]
[Thu Jul 30 08:39:11.127238 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/code/web/.env"] [unique_id "amr_n0QvuHxPljPWrXhrawAAAC4"]
[Thu Jul 30 08:39:11.127538 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.127654 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/code/web/.env"] [unique_id "amr_n0QvuHxPljPWrXhrawAAAC4"]
[Thu Jul 30 08:39:11.132526 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:11.158632 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/api-config.ini"] [unique_id "amr_n-RqJARMdmAY45gCqwAAABk"]
[Thu Jul 30 08:39:11.158928 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/api-config.ini"] [unique_id "amr_n-RqJARMdmAY45gCqwAAABk"]
[Thu Jul 30 08:39:11.159027 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.17:15456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/api-config.ini"] [unique_id "amr_n-RqJARMdmAY45gCqwAAABk"]
[Thu Jul 30 08:39:11.164600 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:48264] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codeigniter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/codeigniter/.env"] [unique_id "amr_n_8233Hh3pbQWVezLQAAABU"]
[Thu Jul 30 08:39:11.164727 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:48264] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/codeigniter/.env"] [unique_id "amr_n_8233Hh3pbQWVezLQAAABU"]
[Thu Jul 30 08:39:11.164931 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asax"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/global.asax"] [unique_id "amr_n8VDgdzdvTL2t3Xy0AAAAB0"]
[Thu Jul 30 08:39:11.165031 2026] [core:error] [pid 2423250:tid 2423250] [client 185.177.72.66:48264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.165150 2026] [security2:error] [pid 2423250:tid 2423250] [client 185.177.72.66:48264] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/codeigniter/.env"] [unique_id "amr_n_8233Hh3pbQWVezLQAAABU"]
[Thu Jul 30 08:39:11.165222 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/global.asax"] [unique_id "amr_n8VDgdzdvTL2t3Xy0AAAAB0"]
[Thu Jul 30 08:39:11.165394 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/global.asax"] [unique_id "amr_n8VDgdzdvTL2t3Xy0AAAAB0"]
[Thu Jul 30 08:39:11.186835 2026] [core:error] [pid 2412472:tid 2412472] (13)Permission denied: [client 216.73.216.199:55982] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/cache_dma
[Thu Jul 30 08:39:11.206282 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.206305 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.242035 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.242062 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:48282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.276366 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:11.278678 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.278703 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.286311 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14030] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Socketio/.env"] [unique_id "amr_n8sDPUni1EbX-qViIwAAADg"]
[Thu Jul 30 08:39:11.286435 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Socketio/.env"] [unique_id "amr_n8sDPUni1EbX-qViIwAAADg"]
[Thu Jul 30 08:39:11.286604 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_n8sDPUni1EbX-qViIwAAADg"]
[Thu Jul 30 08:39:11.313845 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.313865 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.348521 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.348541 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:48298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.389387 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:11.390918 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:48300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.390934 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:48300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.425737 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:48302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.425758 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:48302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.444016 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/globals.inc"] [unique_id "amr_n8VDgdzdvTL2t3Xy3AAAAB0"]
[Thu Jul 30 08:39:11.444319 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/globals.inc"] [unique_id "amr_n8VDgdzdvTL2t3Xy3AAAAB0"]
[Thu Jul 30 08:39:11.444491 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.17:21110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/globals.inc"] [unique_id "amr_n8VDgdzdvTL2t3Xy3AAAAB0"]
[Thu Jul 30 08:39:11.460120 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48316] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/codenames-frontend/.env"] [unique_id "amr_n6lzm7G0Pp-9gn6p-AAAAEk"]
[Thu Jul 30 08:39:11.460262 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48316] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/codenames-frontend/.env"] [unique_id "amr_n6lzm7G0Pp-9gn6p-AAAAEk"]
[Thu Jul 30 08:39:11.460572 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.460671 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48316] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/codenames-frontend/.env"] [unique_id "amr_n6lzm7G0Pp-9gn6p-AAAAEk"]
[Thu Jul 30 08:39:11.496003 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48330] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_n-RqJARMdmAY45gCrgAAABk"]
[Thu Jul 30 08:39:11.496178 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_n-RqJARMdmAY45gCrgAAABk"]
[Thu Jul 30 08:39:11.496489 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.496603 2026] [security2:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_n-RqJARMdmAY45gCrgAAABk"]
[Thu Jul 30 08:39:11.529378 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:11.533686 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48336] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/collected_static/.env"] [unique_id "amr_n6QRW2g6f2qydyUyLQAAADA"]
[Thu Jul 30 08:39:11.533809 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48336] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/collected_static/.env"] [unique_id "amr_n6QRW2g6f2qydyUyLQAAADA"]
[Thu Jul 30 08:39:11.534137 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.534249 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48336] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/collected_static/.env"] [unique_id "amr_n6QRW2g6f2qydyUyLQAAADA"]
[Thu Jul 30 08:39:11.535745 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14042] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Sources/API/.env"] [unique_id "amr_n-s7bSxOV4LObzu7AQAAABo"]
[Thu Jul 30 08:39:11.535905 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Sources/API/.env"] [unique_id "amr_n-s7bSxOV4LObzu7AQAAABo"]
[Thu Jul 30 08:39:11.536088 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14042] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_n-s7bSxOV4LObzu7AQAAABo"]
[Thu Jul 30 08:39:11.542223 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/grems-api/.env"] [unique_id "amr_n0F8-2jmOXMCjJjiqwAAACM"]
[Thu Jul 30 08:39:11.542336 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/grems-api/.env"] [unique_id "amr_n0F8-2jmOXMCjJjiqwAAACM"]
[Thu Jul 30 08:39:11.542500 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/grems-api/.env"] [unique_id "amr_n0F8-2jmOXMCjJjiqwAAACM"]
[Thu Jul 30 08:39:11.560019 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/grems-frontend/.env"] [unique_id "amr_n0F8-2jmOXMCjJjirAAAACM"]
[Thu Jul 30 08:39:11.560163 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/grems-frontend/.env"] [unique_id "amr_n0F8-2jmOXMCjJjirAAAACM"]
[Thu Jul 30 08:39:11.560331 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/grems-frontend/.env"] [unique_id "amr_n0F8-2jmOXMCjJjirAAAACM"]
[Thu Jul 30 08:39:11.570605 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.570622 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.579745 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/hasura/.env"] [unique_id "amr_n0F8-2jmOXMCjJjirQAAACM"]
[Thu Jul 30 08:39:11.579860 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/hasura/.env"] [unique_id "amr_n0F8-2jmOXMCjJjirQAAACM"]
[Thu Jul 30 08:39:11.580023 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/hasura/.env"] [unique_id "amr_n0F8-2jmOXMCjJjirQAAACM"]
[Thu Jul 30 08:39:11.605021 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/common/.env"] [unique_id "amr_ny8b8gP_SKt2Q6y9LgAAAD4"]
[Thu Jul 30 08:39:11.605174 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/common/.env"] [unique_id "amr_ny8b8gP_SKt2Q6y9LgAAAD4"]
[Thu Jul 30 08:39:11.605487 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.605611 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/common/.env"] [unique_id "amr_ny8b8gP_SKt2Q6y9LgAAAD4"]
[Thu Jul 30 08:39:11.639549 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:48378] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/common/.env.bak"] [unique_id "amr_n3iGnV0lYiYXbxD-dgAAACI"]
[Thu Jul 30 08:39:11.639716 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:48378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/common/.env.bak"] [unique_id "amr_n3iGnV0lYiYXbxD-dgAAACI"]
[Thu Jul 30 08:39:11.640021 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:48378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.640140 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:48378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/common/.env.bak"] [unique_id "amr_n3iGnV0lYiYXbxD-dgAAACI"]
[Thu Jul 30 08:39:11.651429 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-configs.php
[Thu Jul 30 08:39:11.651470 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:11.663076 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/helper/.env"] [unique_id "amr_n0F8-2jmOXMCjJjisQAAACM"]
[Thu Jul 30 08:39:11.663214 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/helper/.env"] [unique_id "amr_n0F8-2jmOXMCjJjisQAAACM"]
[Thu Jul 30 08:39:11.663389 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/helper/.env"] [unique_id "amr_n0F8-2jmOXMCjJjisQAAACM"]
[Thu Jul 30 08:39:11.676885 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48392] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/common/.env.dev"] [unique_id "amr_n8VDgdzdvTL2t3Xy3QAAAB0"]
[Thu Jul 30 08:39:11.677016 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/common/.env.dev"] [unique_id "amr_n8VDgdzdvTL2t3Xy3QAAAB0"]
[Thu Jul 30 08:39:11.677333 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.677436 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/common/.env.dev"] [unique_id "amr_n8VDgdzdvTL2t3Xy3QAAAB0"]
[Thu Jul 30 08:39:11.694986 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.bak"] [unique_id "amr_n0F8-2jmOXMCjJjisgAAACM"]
[Thu Jul 30 08:39:11.695179 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.bak"] [unique_id "amr_n0F8-2jmOXMCjJjisgAAACM"]
[Thu Jul 30 08:39:11.695389 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.bak"] [unique_id "amr_n0F8-2jmOXMCjJjisgAAACM"]
[Thu Jul 30 08:39:11.711033 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/common/.env.dist"] [unique_id "amr_n6lzm7G0Pp-9gn6p-QAAAEk"]
[Thu Jul 30 08:39:11.711227 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/common/.env.dist"] [unique_id "amr_n6lzm7G0Pp-9gn6p-QAAAEk"]
[Thu Jul 30 08:39:11.711543 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.711663 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/common/.env.dist"] [unique_id "amr_n6lzm7G0Pp-9gn6p-QAAAEk"]
[Thu Jul 30 08:39:11.715055 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.dev"] [unique_id "amr_n0F8-2jmOXMCjJjiswAAACM"]
[Thu Jul 30 08:39:11.715191 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.dev"] [unique_id "amr_n0F8-2jmOXMCjJjiswAAACM"]
[Thu Jul 30 08:39:11.715381 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.dev"] [unique_id "amr_n0F8-2jmOXMCjJjiswAAACM"]
[Thu Jul 30 08:39:11.736302 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.dist"] [unique_id "amr_n0F8-2jmOXMCjJjitAAAACM"]
[Thu Jul 30 08:39:11.736442 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.dist"] [unique_id "amr_n0F8-2jmOXMCjJjitAAAACM"]
[Thu Jul 30 08:39:11.736644 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.dist"] [unique_id "amr_n0F8-2jmOXMCjJjitAAAACM"]
[Thu Jul 30 08:39:11.744433 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/common/.env.local"] [unique_id "amr_n8TyHJeh8MEeCqDR0QAAAEQ"]
[Thu Jul 30 08:39:11.744553 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/common/.env.local"] [unique_id "amr_n8TyHJeh8MEeCqDR0QAAAEQ"]
[Thu Jul 30 08:39:11.744868 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.744969 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/common/.env.local"] [unique_id "amr_n8TyHJeh8MEeCqDR0QAAAEQ"]
[Thu Jul 30 08:39:11.756499 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.local"] [unique_id "amr_n0F8-2jmOXMCjJjitQAAACM"]
[Thu Jul 30 08:39:11.756786 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.local"] [unique_id "amr_n0F8-2jmOXMCjJjitQAAACM"]
[Thu Jul 30 08:39:11.756982 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/helper/.env.local"] [unique_id "amr_n0F8-2jmOXMCjJjitQAAACM"]
[Thu Jul 30 08:39:11.777301 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.777324 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.780232 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14056] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/SpotiApps/.env"] [unique_id "amr_n6QRW2g6f2qydyUyLgAAADA"]
[Thu Jul 30 08:39:11.780352 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14056] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/SpotiApps/.env"] [unique_id "amr_n6QRW2g6f2qydyUyLgAAADA"]
[Thu Jul 30 08:39:11.780517 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14056] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_n6QRW2g6f2qydyUyLgAAADA"]
[Thu Jul 30 08:39:11.796496 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/php.php
[Thu Jul 30 08:39:11.796541 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:11.809862 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.809881 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.847167 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.847196 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.891181 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.891202 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.913893 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:11.928449 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.928468 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.964808 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:11.964827 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.000527 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.000555 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.027081 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:12.028335 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14058] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Tests/Application/.env"] [unique_id "amr_oKQRW2g6f2qydyUyLwAAADA"]
[Thu Jul 30 08:39:12.028470 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Tests/Application/.env"] [unique_id "amr_oKQRW2g6f2qydyUyLwAAADA"]
[Thu Jul 30 08:39:12.028655 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_oKQRW2g6f2qydyUyLwAAADA"]
[Thu Jul 30 08:39:12.035850 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.035870 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.073879 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.073903 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.113048 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:48488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.113090 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:48488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.141285 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:12.149924 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.149944 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.185546 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.185579 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.201369 2026] [ssl:error] [pid 2427777:tid 2427777] (EAI 2)Name or service not known: [client 144.76.19.72:53932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:12.201401 2026] [ssl:error] [pid 2427777:tid 2427777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:12.221033 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.221054 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.255881 2026] [ssl:error] [pid 2422156:tid 2422156] (EAI 2)Name or service not known: [client 144.76.19.72:53934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:12.255911 2026] [ssl:error] [pid 2422156:tid 2422156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:12.256627 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.256644 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.275703 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:12.277535 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:14064] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Travel_form/.env"] [unique_id "amr_oMVDgdzdvTL2t3Xy4AAAAB0"]
[Thu Jul 30 08:39:12.277661 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:14064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Travel_form/.env"] [unique_id "amr_oMVDgdzdvTL2t3Xy4AAAAB0"]
[Thu Jul 30 08:39:12.277821 2026] [security2:error] [pid 2410999:tid 2410999] [client 185.177.72.66:14064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_oMVDgdzdvTL2t3Xy4AAAAB0"]
[Thu Jul 30 08:39:12.292313 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.292334 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.325178 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.325199 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.361890 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.361910 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.401174 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.401195 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.414448 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:12.433822 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/helper/php.ini"] [unique_id "amr_oEF8-2jmOXMCjJji2AAAACM"]
[Thu Jul 30 08:39:12.434123 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/helper/php.ini"] [unique_id "amr_oEF8-2jmOXMCjJji2AAAACM"]
[Thu Jul 30 08:39:12.434308 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/helper/php.ini"] [unique_id "amr_oEF8-2jmOXMCjJji2AAAACM"]
[Thu Jul 30 08:39:12.438946 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.438963 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.474327 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.474347 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.509816 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.509839 2026] [core:error] [pid 2410999:tid 2410999] [client 185.177.72.66:48578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.544184 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.544206 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.577506 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.577527 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.614238 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:48606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.614267 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:48606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.658269 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.658288 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:48618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.676487 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin.php
[Thu Jul 30 08:39:12.676532 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:12.691077 2026] [security2:error] [pid 2427777:tid 2427777] [client 185.177.72.66:14076] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/User_info/.env"] [unique_id "amr_oNHvAkE-gGmU-MkSCAAAAD8"]
[Thu Jul 30 08:39:12.691198 2026] [security2:error] [pid 2427777:tid 2427777] [client 185.177.72.66:14076] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/User_info/.env"] [unique_id "amr_oNHvAkE-gGmU-MkSCAAAAD8"]
[Thu Jul 30 08:39:12.691373 2026] [security2:error] [pid 2427777:tid 2427777] [client 185.177.72.66:14076] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_oNHvAkE-gGmU-MkSCAAAAD8"]
[Thu Jul 30 08:39:12.697277 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.697296 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.735571 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.735590 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.777328 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.777348 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.805961 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/hgs-static/.env"] [unique_id "amr_oEF8-2jmOXMCjJji6wAAACM"]
[Thu Jul 30 08:39:12.806147 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/hgs-static/.env"] [unique_id "amr_oEF8-2jmOXMCjJji6wAAACM"]
[Thu Jul 30 08:39:12.806338 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/hgs-static/.env"] [unique_id "amr_oEF8-2jmOXMCjJji6wAAACM"]
[Thu Jul 30 08:39:12.812303 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.812324 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.818507 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/size.php
[Thu Jul 30 08:39:12.818570 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:12.822770 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/higlass-website/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7AAAACM"]
[Thu Jul 30 08:39:12.822925 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/higlass-website/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7AAAACM"]
[Thu Jul 30 08:39:12.823188 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/higlass-website/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7AAAACM"]
[Thu Jul 30 08:39:12.851247 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.851268 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.864364 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/horde/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7gAAACM"]
[Thu Jul 30 08:39:12.864480 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/horde/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7gAAACM"]
[Thu Jul 30 08:39:12.864669 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/horde/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7gAAACM"]
[Thu Jul 30 08:39:12.879038 2026] [authz_core:error] [pid 2427541:tid 2427541] [client 57.141.0.42:22356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:12.879657 2026] [authz_core:error] [pid 2427541:tid 2427541] [client 57.141.0.42:22356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:12.883092 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7wAAACM"]
[Thu Jul 30 08:39:12.883208 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7wAAACM"]
[Thu Jul 30 08:39:12.883369 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "amr_oEF8-2jmOXMCjJji7wAAACM"]
[Thu Jul 30 08:39:12.896062 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:48678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.896098 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:48678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.902746 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/htdocs/.env"] [unique_id "amr_oEF8-2jmOXMCjJji8AAAACM"]
[Thu Jul 30 08:39:12.902888 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/htdocs/.env"] [unique_id "amr_oEF8-2jmOXMCjJji8AAAACM"]
[Thu Jul 30 08:39:12.903082 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/htdocs/.env"] [unique_id "amr_oEF8-2jmOXMCjJji8AAAACM"]
[Thu Jul 30 08:39:12.921221 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/html/.env"] [unique_id "amr_oEF8-2jmOXMCjJji8QAAACM"]
[Thu Jul 30 08:39:12.921357 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/html/.env"] [unique_id "amr_oEF8-2jmOXMCjJji8QAAACM"]
[Thu Jul 30 08:39:12.921535 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/html/.env"] [unique_id "amr_oEF8-2jmOXMCjJji8QAAACM"]
[Thu Jul 30 08:39:12.932550 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.932580 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.934694 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:12.971589 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.971608 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:48690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:12.991396 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/http/.env"] [unique_id "amr_oEF8-2jmOXMCjJji9AAAACM"]
[Thu Jul 30 08:39:12.991540 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/http/.env"] [unique_id "amr_oEF8-2jmOXMCjJji9AAAACM"]
[Thu Jul 30 08:39:12.991733 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/http/.env"] [unique_id "amr_oEF8-2jmOXMCjJji9AAAACM"]
[Thu Jul 30 08:39:13.004372 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.004390 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.010904 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/httpboot/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9QAAACM"]
[Thu Jul 30 08:39:13.011029 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/httpboot/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9QAAACM"]
[Thu Jul 30 08:39:13.011206 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/httpboot/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9QAAACM"]
[Thu Jul 30 08:39:13.028832 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/laravel.log"] [unique_id "amr_oY0p-nZdMLHTbfTMeQAAAA4"]
[Thu Jul 30 08:39:13.029132 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/laravel.log"] [unique_id "amr_oY0p-nZdMLHTbfTMeQAAAA4"]
[Thu Jul 30 08:39:13.029232 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/laravel.log"] [unique_id "amr_oY0p-nZdMLHTbfTMeQAAAA4"]
[Thu Jul 30 08:39:13.030824 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/icon/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9gAAACM"]
[Thu Jul 30 08:39:13.030943 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/icon/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9gAAACM"]
[Thu Jul 30 08:39:13.031117 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/icon/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9gAAACM"]
[Thu Jul 30 08:39:13.040892 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48696] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/common/php.ini"] [unique_id "amr_oes7bSxOV4LObzu7BgAAABo"]
[Thu Jul 30 08:39:13.041179 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/common/php.ini"] [unique_id "amr_oes7bSxOV4LObzu7BgAAABo"]
[Thu Jul 30 08:39:13.041478 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.041668 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48696] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/common/php.ini"] [unique_id "amr_oes7bSxOV4LObzu7BgAAABo"]
[Thu Jul 30 08:39:13.047880 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/icons/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9wAAACM"]
[Thu Jul 30 08:39:13.047988 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/icons/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9wAAACM"]
[Thu Jul 30 08:39:13.048155 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/icons/.env"] [unique_id "amr_oUF8-2jmOXMCjJji9wAAACM"]
[Thu Jul 30 08:39:13.065643 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/ikiwiki/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-AAAACM"]
[Thu Jul 30 08:39:13.065762 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/ikiwiki/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-AAAACM"]
[Thu Jul 30 08:39:13.065923 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/ikiwiki/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-AAAACM"]
[Thu Jul 30 08:39:13.080213 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.080242 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.086885 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/image_data/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-QAAACM"]
[Thu Jul 30 08:39:13.087000 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/image_data/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-QAAACM"]
[Thu Jul 30 08:39:13.087179 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/image_data/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-QAAACM"]
[Thu Jul 30 08:39:13.106658 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/images/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-gAAACM"]
[Thu Jul 30 08:39:13.106778 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/images/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-gAAACM"]
[Thu Jul 30 08:39:13.106953 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/images/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-gAAACM"]
[Thu Jul 30 08:39:13.120227 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.120250 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.123868 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/img/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-wAAACM"]
[Thu Jul 30 08:39:13.123997 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/img/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-wAAACM"]
[Thu Jul 30 08:39:13.124177 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/img/.env"] [unique_id "amr_oUF8-2jmOXMCjJji-wAAACM"]
[Thu Jul 30 08:39:13.146668 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.php
[Thu Jul 30 08:39:13.146711 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:13.157206 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.157225 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.196183 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.196214 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:48732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.217523 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_oY0p-nZdMLHTbfTMfQAAAA4"]
[Thu Jul 30 08:39:13.217675 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_oY0p-nZdMLHTbfTMfQAAAA4"]
[Thu Jul 30 08:39:13.217775 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amr_oY0p-nZdMLHTbfTMfQAAAA4"]
[Thu Jul 30 08:39:13.232497 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.232516 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.260077 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:13.269035 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.269053 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:48756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.304506 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.304539 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.305361 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/php.ini"] [unique_id "amr_oY0p-nZdMLHTbfTMfwAAAA4"]
[Thu Jul 30 08:39:13.305645 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/php.ini"] [unique_id "amr_oY0p-nZdMLHTbfTMfwAAAA4"]
[Thu Jul 30 08:39:13.305743 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/php.ini"] [unique_id "amr_oY0p-nZdMLHTbfTMfwAAAA4"]
[Thu Jul 30 08:39:13.312505 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/info/.env"] [unique_id "amr_oUF8-2jmOXMCjJjjBQAAACM"]
[Thu Jul 30 08:39:13.312628 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/info/.env"] [unique_id "amr_oUF8-2jmOXMCjJjjBQAAACM"]
[Thu Jul 30 08:39:13.312918 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/info/.env"] [unique_id "amr_oUF8-2jmOXMCjJjjBQAAACM"]
[Thu Jul 30 08:39:13.333427 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/info/.env.bak"] [unique_id "amr_oUF8-2jmOXMCjJjjBgAAACM"]
[Thu Jul 30 08:39:13.333705 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/info/.env.bak"] [unique_id "amr_oUF8-2jmOXMCjJjjBgAAACM"]
[Thu Jul 30 08:39:13.334005 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/info/.env.bak"] [unique_id "amr_oUF8-2jmOXMCjJjjBgAAACM"]
[Thu Jul 30 08:39:13.341655 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.341673 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.351343 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/info/.env.dev"] [unique_id "amr_oUF8-2jmOXMCjJjjBwAAACM"]
[Thu Jul 30 08:39:13.351498 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/info/.env.dev"] [unique_id "amr_oUF8-2jmOXMCjJjjBwAAACM"]
[Thu Jul 30 08:39:13.351717 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/info/.env.dev"] [unique_id "amr_oUF8-2jmOXMCjJjjBwAAACM"]
[Thu Jul 30 08:39:13.370645 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/info/.env.dist"] [unique_id "amr_oUF8-2jmOXMCjJjjCAAAACM"]
[Thu Jul 30 08:39:13.370827 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/info/.env.dist"] [unique_id "amr_oUF8-2jmOXMCjJjjCAAAACM"]
[Thu Jul 30 08:39:13.371021 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/info/.env.dist"] [unique_id "amr_oUF8-2jmOXMCjJjjCAAAACM"]
[Thu Jul 30 08:39:13.375454 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/as.php
[Thu Jul 30 08:39:13.375496 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:13.383201 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.383218 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.389419 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/info/.env.local"] [unique_id "amr_oUF8-2jmOXMCjJjjCQAAACM"]
[Thu Jul 30 08:39:13.389549 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/info/.env.local"] [unique_id "amr_oUF8-2jmOXMCjJjjCQAAACM"]
[Thu Jul 30 08:39:13.389735 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.17:21112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/info/.env.local"] [unique_id "amr_oUF8-2jmOXMCjJjjCQAAACM"]
[Thu Jul 30 08:39:13.422412 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.422433 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.459368 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.459390 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.462133 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14092] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amr_oY7QYn_mSSYdmItKTgAAAA0"]
[Thu Jul 30 08:39:13.462266 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amr_oY7QYn_mSSYdmItKTgAAAA0"]
[Thu Jul 30 08:39:13.462457 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14092] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_oY7QYn_mSSYdmItKTgAAAA0"]
[Thu Jul 30 08:39:13.495109 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:13.495783 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.495800 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.528870 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.528889 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.564630 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:48814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.564650 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:48814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.598050 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.598080 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.644580 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.644598 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:48830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.658025 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:13.688782 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.688802 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.725331 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.725353 2026] [core:error] [pid 2429940:tid 2429940] [client 185.177.72.66:48852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.765970 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48866] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/community/.env"] [unique_id "amr_obwuC_UnL2keC2dwxQAAABE"]
[Thu Jul 30 08:39:13.766147 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/community/.env"] [unique_id "amr_obwuC_UnL2keC2dwxQAAABE"]
[Thu Jul 30 08:39:13.766508 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.766662 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/community/.env"] [unique_id "amr_obwuC_UnL2keC2dwxQAAABE"]
[Thu Jul 30 08:39:13.773973 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/plugins.php
[Thu Jul 30 08:39:13.775230 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:13.804643 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.804663 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.837747 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.837765 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.873803 2026] [authz_core:error] [pid 2428115:tid 2428115] [client 52.238.199.152:46457] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 08:39:13.874152 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.874168 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:48890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.890438 2026] [security2:error] [pid 2429782:tid 2429782] [client 138.84.78.136:63476] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_oUktS-xOoHRbcM0qdQAAAAA"]
[Thu Jul 30 08:39:13.890479 2026] [security2:error] [pid 2429782:tid 2429782] [client 138.84.78.136:63476] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_oUktS-xOoHRbcM0qdQAAAAA"]
[Thu Jul 30 08:39:13.890716 2026] [security2:error] [pid 2429782:tid 2429782] [client 138.84.78.136:63476] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_oUktS-xOoHRbcM0qdQAAAAA"]
[Thu Jul 30 08:39:13.902139 2026] [ssl:error] [pid 2412472:tid 2412472] (70014)End of file found: [client 216.73.216.199:55982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:13.906038 2026] [lsapi:error] [pid 2412474:tid 2412474] [client 20.63.10.215:52370] [host www.demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 20480 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-fatal-error-handler.php on line 67\n
[Thu Jul 30 08:39:13.912658 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.912676 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.916320 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.34:43206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:13.917002 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.34:43206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:13.947153 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.947170 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.953199 2026] [access_compat:error] [pid 2427777:tid 2427777] [client 106.215.157.145:27996] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:13.972159 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:13.983243 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:13.983260 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.019602 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.019623 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.055334 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.055362 2026] [core:error] [pid 2427541:tid 2427541] [client 185.177.72.66:48922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.090292 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48924] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conf/.env"] [unique_id "amr_opAx25ZrwYe3S0la3gAAAAk"]
[Thu Jul 30 08:39:14.090409 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48924] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conf/.env"] [unique_id "amr_opAx25ZrwYe3S0la3gAAAAk"]
[Thu Jul 30 08:39:14.090723 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.090829 2026] [security2:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48924] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conf/.env"] [unique_id "amr_opAx25ZrwYe3S0la3gAAAAk"]
[Thu Jul 30 08:39:14.127029 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48934] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conf/.env.bak"] [unique_id "amr_oqWBySBNOpvIvESBKwAAABs"]
[Thu Jul 30 08:39:14.127186 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48934] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conf/.env.bak"] [unique_id "amr_oqWBySBNOpvIvESBKwAAABs"]
[Thu Jul 30 08:39:14.127507 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.127625 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48934] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conf/.env.bak"] [unique_id "amr_oqWBySBNOpvIvESBKwAAABs"]
[Thu Jul 30 08:39:14.133809 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/src/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMjgAAAA4"]
[Thu Jul 30 08:39:14.133928 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/src/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMjgAAAA4"]
[Thu Jul 30 08:39:14.134024 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/src/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMjgAAAA4"]
[Thu Jul 30 08:39:14.161665 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48936] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conf/.env.dev"] [unique_id "amr_ogvbpUeckUfXmp7bSgAAAEc"]
[Thu Jul 30 08:39:14.161783 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conf/.env.dev"] [unique_id "amr_ogvbpUeckUfXmp7bSgAAAEc"]
[Thu Jul 30 08:39:14.162115 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.162223 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:48936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conf/.env.dev"] [unique_id "amr_ogvbpUeckUfXmp7bSgAAAEc"]
[Thu Jul 30 08:39:14.167758 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/go.php
[Thu Jul 30 08:39:14.168302 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:14.197039 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48946] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conf/.env.dist"] [unique_id "amr_orwuC_UnL2keC2dwxwAAABE"]
[Thu Jul 30 08:39:14.197186 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conf/.env.dist"] [unique_id "amr_orwuC_UnL2keC2dwxwAAABE"]
[Thu Jul 30 08:39:14.197487 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.197599 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:48946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conf/.env.dist"] [unique_id "amr_orwuC_UnL2keC2dwxwAAABE"]
[Thu Jul 30 08:39:14.202762 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "downloads.ppcl.com"] [uri "/info/php.ini"] [unique_id "amr_ogid2o9xi1xe9DHE-AAAAEg"]
[Thu Jul 30 08:39:14.203042 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/info/php.ini"] [unique_id "amr_ogid2o9xi1xe9DHE-AAAAEg"]
[Thu Jul 30 08:39:14.203251 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/info/php.ini"] [unique_id "amr_ogid2o9xi1xe9DHE-AAAAEg"]
[Thu Jul 30 08:39:14.235013 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48956] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conf/.env.local"] [unique_id "amr_oqQRW2g6f2qydyUyNQAAADA"]
[Thu Jul 30 08:39:14.235172 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48956] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conf/.env.local"] [unique_id "amr_oqQRW2g6f2qydyUyNQAAADA"]
[Thu Jul 30 08:39:14.235485 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.235604 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:48956] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conf/.env.local"] [unique_id "amr_oqQRW2g6f2qydyUyNQAAADA"]
[Thu Jul 30 08:39:14.269662 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.269682 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:48964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.306703 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.306721 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:48968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.313802 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/test1.php
[Thu Jul 30 08:39:14.313846 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:14.327991 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/web.config"] [unique_id "amr_oo0p-nZdMLHTbfTMkgAAAA4"]
[Thu Jul 30 08:39:14.328205 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /client/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/web.config"] [unique_id "amr_oo0p-nZdMLHTbfTMkgAAAA4"]
[Thu Jul 30 08:39:14.328313 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/web.config"] [unique_id "amr_oo0p-nZdMLHTbfTMkgAAAA4"]
[Thu Jul 30 08:39:14.328419 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/client/web.config"] [unique_id "amr_oo0p-nZdMLHTbfTMkgAAAA4"]
[Thu Jul 30 08:39:14.341219 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.341238 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:48974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.376464 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.376487 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:48982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.410528 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:48994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.410548 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:48994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.433601 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:14.446187 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:49008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.446206 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:49008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.484275 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:49010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.484292 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:49010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.519047 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:49022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.519081 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:49022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.527400 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/clld_dir/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMlgAAAA4"]
[Thu Jul 30 08:39:14.527518 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/clld_dir/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMlgAAAA4"]
[Thu Jul 30 08:39:14.527625 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/clld_dir/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMlgAAAA4"]
[Thu Jul 30 08:39:14.549276 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images/index.php
[Thu Jul 30 08:39:14.549319 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:14.550231 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMlwAAAA4"]
[Thu Jul 30 08:39:14.550346 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMlwAAAA4"]
[Thu Jul 30 08:39:14.550449 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amr_oo0p-nZdMLHTbfTMlwAAAA4"]
[Thu Jul 30 08:39:14.556031 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:49024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.556050 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:49024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.570538 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.bak"] [unique_id "amr_oo0p-nZdMLHTbfTMmAAAAA4"]
[Thu Jul 30 08:39:14.570665 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.bak"] [unique_id "amr_oo0p-nZdMLHTbfTMmAAAAA4"]
[Thu Jul 30 08:39:14.570760 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.bak"] [unique_id "amr_oo0p-nZdMLHTbfTMmAAAAA4"]
[Thu Jul 30 08:39:14.591102 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.dev"] [unique_id "amr_oo0p-nZdMLHTbfTMmQAAAA4"]
[Thu Jul 30 08:39:14.591237 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.dev"] [unique_id "amr_oo0p-nZdMLHTbfTMmQAAAA4"]
[Thu Jul 30 08:39:14.591330 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.dev"] [unique_id "amr_oo0p-nZdMLHTbfTMmQAAAA4"]
[Thu Jul 30 08:39:14.602729 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:49040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.602745 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:49040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.612080 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.dist"] [unique_id "amr_oo0p-nZdMLHTbfTMmgAAAA4"]
[Thu Jul 30 08:39:14.612191 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.dist"] [unique_id "amr_oo0p-nZdMLHTbfTMmgAAAA4"]
[Thu Jul 30 08:39:14.612280 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.dist"] [unique_id "amr_oo0p-nZdMLHTbfTMmgAAAA4"]
[Thu Jul 30 08:39:14.635689 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.local"] [unique_id "amr_oo0p-nZdMLHTbfTMmwAAAA4"]
[Thu Jul 30 08:39:14.635803 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.local"] [unique_id "amr_oo0p-nZdMLHTbfTMmwAAAA4"]
[Thu Jul 30 08:39:14.635894 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/.env.local"] [unique_id "amr_oo0p-nZdMLHTbfTMmwAAAA4"]
[Thu Jul 30 08:39:14.638225 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:49044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.638242 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:49044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.662175 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:14.675654 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:49060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.675670 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:49060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.711539 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:49066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.711556 2026] [core:error] [pid 2428417:tid 2428417] [client 185.177.72.66:49066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.748900 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:49070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.748920 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:49070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.785799 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:49072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.785819 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:49072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.825286 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:49080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.825308 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:49080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.827448 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/asd.php
[Thu Jul 30 08:39:14.827489 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:14.860310 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:49096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.860327 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:49096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.895999 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:49106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.896019 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:49106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.938094 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:49112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.938113 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:49112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.946234 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:14.976488 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:49116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:14.976508 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:49116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.015189 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:49124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.015209 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:49124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.033746 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/items/.env"] [unique_id "amr_owid2o9xi1xe9DHFHgAAAEg"]
[Thu Jul 30 08:39:15.033869 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/items/.env"] [unique_id "amr_owid2o9xi1xe9DHFHgAAAEg"]
[Thu Jul 30 08:39:15.034035 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/items/.env"] [unique_id "amr_owid2o9xi1xe9DHFHgAAAEg"]
[Thu Jul 30 08:39:15.052773 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:49136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.052795 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:49136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.057494 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "downloads.ppcl.com"] [uri "/javascript/.env"] [unique_id "amr_owid2o9xi1xe9DHFHwAAAEg"]
[Thu Jul 30 08:39:15.057620 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "downloads.ppcl.com"] [uri "/javascript/.env"] [unique_id "amr_owid2o9xi1xe9DHFHwAAAEg"]
[Thu Jul 30 08:39:15.057789 2026] [security2:error] [pid 2428410:tid 2428410] [client 185.177.72.17:21124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "downloads.ppcl.com"] [uri "/javascript/.env"] [unique_id "amr_owid2o9xi1xe9DHFHwAAAEg"]
[Thu Jul 30 08:39:15.097254 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:49142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.097273 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:49142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.134616 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:49144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.134635 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:49144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.173281 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:49146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.173303 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:49146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.193997 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:21140] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "downloads.ppcl.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amr_o-WvknE5emN3ObPc-wAAACc"]
[Thu Jul 30 08:39:15.210297 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:49160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.210317 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:49160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.243935 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:49168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.243956 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:49168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.276556 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:15.289029 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:49176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.289052 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:49176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.306804 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.17:21154] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "downloads.ppcl.com"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "amr_o5DxY3fypotl7b9qfAAAAB4"]
[Thu Jul 30 08:39:15.307136 2026] [core:error] [pid 2428411:tid 2428411] (13)Permission denied: [client 216.73.216.199:14434] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/slabs_cpu_partial
[Thu Jul 30 08:39:15.312915 2026] [ssl:error] [pid 2429941:tid 2429941] (EAI 2)Name or service not known: [client 144.76.19.72:53938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:15.312937 2026] [ssl:error] [pid 2429941:tid 2429941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:15.326141 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:49188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.326168 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:49188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.361179 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:49204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.361199 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:49204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.369116 2026] [ssl:error] [pid 2425341:tid 2425341] (EAI 2)Name or service not known: [client 144.76.19.72:53944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:15.369135 2026] [ssl:error] [pid 2425341:tid 2425341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:15.397887 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:49214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.397909 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:49214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.420408 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.17:21162] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "downloads.ppcl.com"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amr_o0ktS-xOoHRbcM0qegAAAAA"]
[Thu Jul 30 08:39:15.432599 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:49228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.432616 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:49228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.457535 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/atomlib.php
[Thu Jul 30 08:39:15.457589 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:15.468284 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:49238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.468311 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:49238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.504236 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:49248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.504256 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:49248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.518253 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.17:21176] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "downloads.ppcl.com"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amr_owgGztaJsd9zSr7IywAAAB8"]
[Thu Jul 30 08:39:15.544666 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:49262] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/conf/php.ini"] [unique_id "amr_o-s7bSxOV4LObzu7CwAAABo"]
[Thu Jul 30 08:39:15.544983 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:49262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conf/php.ini"] [unique_id "amr_o-s7bSxOV4LObzu7CwAAABo"]
[Thu Jul 30 08:39:15.545304 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:49262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.545426 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:49262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conf/php.ini"] [unique_id "amr_o-s7bSxOV4LObzu7CwAAABo"]
[Thu Jul 30 08:39:15.571423 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:15.581049 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:38882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.581080 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:38882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.615389 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:38890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.615410 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:38890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.623350 2026] [security2:error] [pid 2427479:tid 2427479] [client 185.177.72.17:21188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "downloads.ppcl.com"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amr_o6WBySBNOpvIvESBMQAAABs"]
[Thu Jul 30 08:39:15.651252 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:38900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.651274 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:38900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.686916 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:15.694383 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.694405 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.720664 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.17:21202] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "downloads.ppcl.com"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amr_oygDZvJnuOkhDtU2wQAAACU"]
[Thu Jul 30 08:39:15.731435 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:38906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.731456 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:38906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.769009 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.769030 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.800504 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:15.806055 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:38928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.806085 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:38928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.844367 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:38942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.844388 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:38942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.881166 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:38956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.881185 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:38956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.917437 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:38958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.917460 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:38958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.954423 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:38962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.954442 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:38962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.958439 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:15.994135 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:15.994158 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.013248 2026] [core:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:36779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/trace
[Thu Jul 30 08:39:16.030433 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:38976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.030455 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:38976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.068418 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.068443 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.080185 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:16.113220 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:38994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.113242 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:38994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.148212 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.148247 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.183109 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.183134 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.194483 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:16.224218 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.224243 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.260763 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39050] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config.bak"] [unique_id "amr_pEktS-xOoHRbcM0qfQAAAAA"]
[Thu Jul 30 08:39:16.261175 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config.bak"] [unique_id "amr_pEktS-xOoHRbcM0qfQAAAAA"]
[Thu Jul 30 08:39:16.261515 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.261617 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config.bak"] [unique_id "amr_pEktS-xOoHRbcM0qfQAAAAA"]
[Thu Jul 30 08:39:16.286610 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:24206] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/_static/.env"] [unique_id "amr_pI_4x2IDFYJd2RFyxQAAAAw"]
[Thu Jul 30 08:39:16.286778 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:24206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/_static/.env"] [unique_id "amr_pI_4x2IDFYJd2RFyxQAAAAw"]
[Thu Jul 30 08:39:16.286963 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:24206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_pI_4x2IDFYJd2RFyxQAAAAw"]
[Thu Jul 30 08:39:16.298349 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.298373 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.333923 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.333947 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.371610 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39060] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config.conf"] [unique_id "amr_pBaJ6AWJ3ghWLIo2ngAAAEM"]
[Thu Jul 30 08:39:16.371967 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config.conf"] [unique_id "amr_pBaJ6AWJ3ghWLIo2ngAAAEM"]
[Thu Jul 30 08:39:16.372295 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.372407 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config.conf"] [unique_id "amr_pBaJ6AWJ3ghWLIo2ngAAAEM"]
[Thu Jul 30 08:39:16.380141 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/inputs.php
[Thu Jul 30 08:39:16.380186 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:16.405590 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.405611 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.438522 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.66:39078] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config.dat"] [unique_id "amr_pAgGztaJsd9zSr7IzgAAAB8"]
[Thu Jul 30 08:39:16.438858 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.66:39078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config.dat"] [unique_id "amr_pAgGztaJsd9zSr7IzgAAAB8"]
[Thu Jul 30 08:39:16.439176 2026] [core:error] [pid 2414918:tid 2414918] [client 185.177.72.66:39078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.439286 2026] [security2:error] [pid 2414918:tid 2414918] [client 185.177.72.66:39078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config.dat"] [unique_id "amr_pAgGztaJsd9zSr7IzgAAAB8"]
[Thu Jul 30 08:39:16.477278 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.477302 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.493538 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:16.512466 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.512490 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.555283 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.555304 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.591953 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:39116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.591975 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:39116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.627669 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39120] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config.inc"] [unique_id "amr_pCSe2NSLL34J1qvTKAAAACo"]
[Thu Jul 30 08:39:16.627967 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config.inc"] [unique_id "amr_pCSe2NSLL34J1qvTKAAAACo"]
[Thu Jul 30 08:39:16.628299 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.628418 2026] [security2:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config.inc"] [unique_id "amr_pCSe2NSLL34J1qvTKAAAACo"]
[Thu Jul 30 08:39:16.631420 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:16.665188 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.665207 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.702459 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.702484 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.737300 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/php.ini"] [unique_id "amr_pI0p-nZdMLHTbfTMvgAAAA4"]
[Thu Jul 30 08:39:16.737665 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/php.ini"] [unique_id "amr_pI0p-nZdMLHTbfTMvgAAAA4"]
[Thu Jul 30 08:39:16.737764 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.17:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cms/php.ini"] [unique_id "amr_pI0p-nZdMLHTbfTMvgAAAA4"]
[Thu Jul 30 08:39:16.739102 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.739117 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.744546 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:16.774311 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.774331 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.814269 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.814289 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.851342 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.851363 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.859723 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/plugin.php
[Thu Jul 30 08:39:16.859766 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:16.888680 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:39188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.888704 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:39188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.923449 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:39196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.923473 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:39196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.959924 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:39202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.959941 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:39202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.972750 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/1.php
[Thu Jul 30 08:39:16.972796 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:16.996929 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:16.996951 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.031938 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.031971 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.057056 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:24224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /account/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/account/.env"] [unique_id "amr_pZDxY3fypotl7b9qggAAAB4"]
[Thu Jul 30 08:39:17.057240 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:24224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/account/.env"] [unique_id "amr_pZDxY3fypotl7b9qggAAAB4"]
[Thu Jul 30 08:39:17.057415 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:24224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_pZDxY3fypotl7b9qggAAAB4"]
[Thu Jul 30 08:39:17.067464 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.067484 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.102994 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.103018 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.141255 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39250] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config.old"] [unique_id "amr_pRSM_3DmF9yKgJn3hgAAAEY"]
[Thu Jul 30 08:39:17.141544 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config.old"] [unique_id "amr_pRSM_3DmF9yKgJn3hgAAAEY"]
[Thu Jul 30 08:39:17.141857 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.141972 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config.old"] [unique_id "amr_pRSM_3DmF9yKgJn3hgAAAEY"]
[Thu Jul 30 08:39:17.178245 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.178270 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.216798 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:39266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.216820 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:39266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.255434 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.255454 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:39268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.291384 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.291424 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.326045 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.326064 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.363006 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.363027 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.399895 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.399917 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.414430 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gg.php
[Thu Jul 30 08:39:17.414478 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:17.437549 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.437578 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.470427 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.470446 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.504626 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.504655 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.527990 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:17.541388 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.541406 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.562321 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:24254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /account/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/account/.git/config"] [unique_id "amr_pY7QYn_mSSYdmItKXAAAAA0"]
[Thu Jul 30 08:39:17.562438 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:24254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/account/.git/config"] [unique_id "amr_pY7QYn_mSSYdmItKXAAAAA0"]
[Thu Jul 30 08:39:17.562612 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:24254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_pY7QYn_mSSYdmItKXAAAAA0"]
[Thu Jul 30 08:39:17.577227 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.577246 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.611222 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.611255 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.644978 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.645002 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.682460 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.682483 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.713744 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp.php
[Thu Jul 30 08:39:17.713789 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:17.722415 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.722435 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.762406 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.762426 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.779785 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/code/api/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlAAAABM"]
[Thu Jul 30 08:39:17.779975 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/code/api/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlAAAABM"]
[Thu Jul 30 08:39:17.780099 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/code/api/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlAAAABM"]
[Thu Jul 30 08:39:17.797090 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39416] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config.sql"] [unique_id "amr_pY0p-nZdMLHTbfTMwwAAAA4"]
[Thu Jul 30 08:39:17.797368 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config.sql"] [unique_id "amr_pY0p-nZdMLHTbfTMwwAAAA4"]
[Thu Jul 30 08:39:17.797682 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.797790 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config.sql"] [unique_id "amr_pY0p-nZdMLHTbfTMwwAAAA4"]
[Thu Jul 30 08:39:17.799895 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/code/web/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlQAAABM"]
[Thu Jul 30 08:39:17.800023 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/code/web/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlQAAABM"]
[Thu Jul 30 08:39:17.800134 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/code/web/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlQAAABM"]
[Thu Jul 30 08:39:17.819601 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codeigniter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/codeigniter/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlgAAABM"]
[Thu Jul 30 08:39:17.819723 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/codeigniter/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlgAAABM"]
[Thu Jul 30 08:39:17.819821 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/codeigniter/.env"] [unique_id "amr_pRpzOSLDAMoCSUlPlgAAABM"]
[Thu Jul 30 08:39:17.834862 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.834892 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.850129 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:17.872589 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.872606 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:39422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.911358 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.911381 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.940511 2026] [cgi:error] [pid 2428414:tid 2428414] [client 20.63.10.215:24999] AH02812: stderr from /home/mjsser/demo.mjs-services.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:39:17.952145 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.952161 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.989924 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39452] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/config/.env.bak"] [unique_id "amr_pS7K7U7WHMW7oLBi3wAAAEA"]
[Thu Jul 30 08:39:17.990091 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/.env.bak"] [unique_id "amr_pS7K7U7WHMW7oLBi3wAAAEA"]
[Thu Jul 30 08:39:17.990401 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:17.990519 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/.env.bak"] [unique_id "amr_pS7K7U7WHMW7oLBi3wAAAEA"]
[Thu Jul 30 08:39:18.007452 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:18.027222 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/config/.env.dev"] [unique_id "amr_piux7rlqiNnQVD3IZgAAACQ"]
[Thu Jul 30 08:39:18.027373 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/.env.dev"] [unique_id "amr_piux7rlqiNnQVD3IZgAAACQ"]
[Thu Jul 30 08:39:18.027691 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.027817 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/.env.dev"] [unique_id "amr_piux7rlqiNnQVD3IZgAAACQ"]
[Thu Jul 30 08:39:18.061622 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39464] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/config/.env.dist"] [unique_id "amr_pqepTk7nN70C9RU6kgAAABI"]
[Thu Jul 30 08:39:18.061755 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/.env.dist"] [unique_id "amr_pqepTk7nN70C9RU6kgAAABI"]
[Thu Jul 30 08:39:18.062060 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.062189 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/.env.dist"] [unique_id "amr_pqepTk7nN70C9RU6kgAAABI"]
[Thu Jul 30 08:39:18.096865 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39480] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/config/.env.test"] [unique_id "amr_phpvfcvm04JnKtSV7QAAAA8"]
[Thu Jul 30 08:39:18.097008 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/.env.test"] [unique_id "amr_phpvfcvm04JnKtSV7QAAAA8"]
[Thu Jul 30 08:39:18.097332 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.097439 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/.env.test"] [unique_id "amr_phpvfcvm04JnKtSV7QAAAA8"]
[Thu Jul 30 08:39:18.110487 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.58:39026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:18.111140 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.58:39026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:18.129877 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.129899 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.137783 2026] [ssl:error] [pid 2420262:tid 2420262] (70014)End of file found: [client 216.73.216.199:36779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:18.164442 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39490] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/config/.git/config"] [unique_id "amr_puC233pHXOTf93SWiAAAADM"]
[Thu Jul 30 08:39:18.164575 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/.git/config"] [unique_id "amr_puC233pHXOTf93SWiAAAADM"]
[Thu Jul 30 08:39:18.164876 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.164985 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/.git/config"] [unique_id "amr_puC233pHXOTf93SWiAAAADM"]
[Thu Jul 30 08:39:18.176826 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:18.201438 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.201457 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:39498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.213266 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/codenames-frontend/.env"] [unique_id "amr_phpzOSLDAMoCSUlPngAAABM"]
[Thu Jul 30 08:39:18.213394 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/codenames-frontend/.env"] [unique_id "amr_phpzOSLDAMoCSUlPngAAABM"]
[Thu Jul 30 08:39:18.213491 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/codenames-frontend/.env"] [unique_id "amr_phpzOSLDAMoCSUlPngAAABM"]
[Thu Jul 30 08:39:18.231158 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_phpzOSLDAMoCSUlPnwAAABM"]
[Thu Jul 30 08:39:18.231277 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_phpzOSLDAMoCSUlPnwAAABM"]
[Thu Jul 30 08:39:18.231370 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amr_phpzOSLDAMoCSUlPnwAAABM"]
[Thu Jul 30 08:39:18.236455 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.236480 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.248636 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/collected_static/.env"] [unique_id "amr_phpzOSLDAMoCSUlPoAAAABM"]
[Thu Jul 30 08:39:18.248757 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/collected_static/.env"] [unique_id "amr_phpzOSLDAMoCSUlPoAAAABM"]
[Thu Jul 30 08:39:18.248849 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/collected_static/.env"] [unique_id "amr_phpzOSLDAMoCSUlPoAAAABM"]
[Thu Jul 30 08:39:18.271239 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.271259 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.306848 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.306868 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.322873 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env"] [unique_id "amr_phpzOSLDAMoCSUlPogAAABM"]
[Thu Jul 30 08:39:18.323000 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env"] [unique_id "amr_phpzOSLDAMoCSUlPogAAABM"]
[Thu Jul 30 08:39:18.323111 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env"] [unique_id "amr_phpzOSLDAMoCSUlPogAAABM"]
[Thu Jul 30 08:39:18.335138 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:18.342114 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39538] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config/AppData.config"] [unique_id "amr_psTyHJeh8MEeCqDR1wAAAEQ"]
[Thu Jul 30 08:39:18.342424 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/AppData.config"] [unique_id "amr_psTyHJeh8MEeCqDR1wAAAEQ"]
[Thu Jul 30 08:39:18.342736 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.342835 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/AppData.config"] [unique_id "amr_psTyHJeh8MEeCqDR1wAAAEQ"]
[Thu Jul 30 08:39:18.344889 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.bak"] [unique_id "amr_phpzOSLDAMoCSUlPowAAABM"]
[Thu Jul 30 08:39:18.345004 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.bak"] [unique_id "amr_phpzOSLDAMoCSUlPowAAABM"]
[Thu Jul 30 08:39:18.345120 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.bak"] [unique_id "amr_phpzOSLDAMoCSUlPowAAABM"]
[Thu Jul 30 08:39:18.365060 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.dev"] [unique_id "amr_phpzOSLDAMoCSUlPpAAAABM"]
[Thu Jul 30 08:39:18.365219 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.dev"] [unique_id "amr_phpzOSLDAMoCSUlPpAAAABM"]
[Thu Jul 30 08:39:18.365314 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.dev"] [unique_id "amr_phpzOSLDAMoCSUlPpAAAABM"]
[Thu Jul 30 08:39:18.380727 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.66:39552] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_ppSJEc8crM1jNLyVTAAAABw"]
[Thu Jul 30 08:39:18.381047 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.66:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_ppSJEc8crM1jNLyVTAAAABw"]
[Thu Jul 30 08:39:18.381380 2026] [core:error] [pid 2426738:tid 2426738] [client 185.177.72.66:39552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.381499 2026] [security2:error] [pid 2426738:tid 2426738] [client 185.177.72.66:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_ppSJEc8crM1jNLyVTAAAABw"]
[Thu Jul 30 08:39:18.382959 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.dist"] [unique_id "amr_phpzOSLDAMoCSUlPpQAAABM"]
[Thu Jul 30 08:39:18.383083 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.dist"] [unique_id "amr_phpzOSLDAMoCSUlPpQAAABM"]
[Thu Jul 30 08:39:18.383183 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.dist"] [unique_id "amr_phpzOSLDAMoCSUlPpQAAABM"]
[Thu Jul 30 08:39:18.401939 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.local"] [unique_id "amr_phpzOSLDAMoCSUlPpgAAABM"]
[Thu Jul 30 08:39:18.402079 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.local"] [unique_id "amr_phpzOSLDAMoCSUlPpgAAABM"]
[Thu Jul 30 08:39:18.402180 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/.env.local"] [unique_id "amr_phpzOSLDAMoCSUlPpgAAABM"]
[Thu Jul 30 08:39:18.417226 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.417244 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.425015 2026] [ssl:error] [pid 2419141:tid 2419141] (EAI 2)Name or service not known: [client 144.76.19.72:53954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:18.425040 2026] [ssl:error] [pid 2419141:tid 2419141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:18.449430 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:18.452169 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39564] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config/api-config.ini"] [unique_id "amr_phpvfcvm04JnKtSV7gAAAA8"]
[Thu Jul 30 08:39:18.452452 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39564] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/api-config.ini"] [unique_id "amr_phpvfcvm04JnKtSV7gAAAA8"]
[Thu Jul 30 08:39:18.452765 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.452864 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39564] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/api-config.ini"] [unique_id "amr_phpvfcvm04JnKtSV7gAAAA8"]
[Thu Jul 30 08:39:18.478529 2026] [ssl:error] [pid 2428410:tid 2428410] (EAI 2)Name or service not known: [client 144.76.19.72:53966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:18.478572 2026] [ssl:error] [pid 2428410:tid 2428410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:18.490980 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.490998 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.527254 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:39588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.527271 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:39588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.561780 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.561797 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.562508 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/index
[Thu Jul 30 08:39:18.596184 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:39608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.596200 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:39608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.631120 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.631137 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.665216 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.665236 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:39630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.677651 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:18.702227 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.702247 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.737845 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:39662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.737867 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:39662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.748236 2026] [ssl:error] [pid 2428411:tid 2428411] (70014)End of file found: [client 216.73.216.199:14434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:18.775686 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.775707 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.811424 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.811444 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.818590 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:24308] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_phpvfcvm04JnKtSV7wAAAA8"]
[Thu Jul 30 08:39:18.818890 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:24308] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amr_phpvfcvm04JnKtSV7wAAAA8"]
[Thu Jul 30 08:39:18.819062 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:24308] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_phpvfcvm04JnKtSV7wAAAA8"]
[Thu Jul 30 08:39:18.826631 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:18.847491 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.847508 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.888817 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.888836 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.927569 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.927588 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.961824 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:39704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.961842 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:39704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:18.995666 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aaa.php
[Thu Jul 30 08:39:18.995710 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:19.002311 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.002332 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.038179 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39722] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config/config.inc"] [unique_id "amr_pxQlIytBsvBD-_AnAgAAADY"]
[Thu Jul 30 08:39:19.038466 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39722] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/config.inc"] [unique_id "amr_pxQlIytBsvBD-_AnAgAAADY"]
[Thu Jul 30 08:39:19.038785 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.038889 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39722] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/config.inc"] [unique_id "amr_pxQlIytBsvBD-_AnAgAAADY"]
[Thu Jul 30 08:39:19.063160 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:24320] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/account/api-config.ini"] [unique_id "amr_pyqRkGfpP6jUcmmangAAAAg"]
[Thu Jul 30 08:39:19.063447 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:24320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/account/api-config.ini"] [unique_id "amr_pyqRkGfpP6jUcmmangAAAAg"]
[Thu Jul 30 08:39:19.063629 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:24320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_pyqRkGfpP6jUcmmangAAAAg"]
[Thu Jul 30 08:39:19.073116 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.073135 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.108786 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/getid3-core.php
[Thu Jul 30 08:39:19.108835 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:19.109290 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:39748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.109307 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:39748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.146017 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.146039 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:39752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.185558 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.185590 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.224499 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.224519 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.258519 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.258542 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.264997 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/adminer.php
[Thu Jul 30 08:39:19.265040 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:19.294818 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.294839 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.330129 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.330148 2026] [core:error] [pid 2420367:tid 2420367] [client 185.177.72.66:39788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.364456 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.364474 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.378206 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:19.401146 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:39806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.401165 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:39806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.437623 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.437640 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.473175 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.473203 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.492012 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/alfa.php
[Thu Jul 30 08:39:19.492057 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:19.510971 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.510989 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:39820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.548251 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:39826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.548272 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:39826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.586624 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.586642 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.621881 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.621899 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.636781 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:19.656332 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.656350 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.692463 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:39842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.692498 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:39842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.730980 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.730999 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.751101 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:19.767266 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.767284 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:39862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.803967 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.803985 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.838199 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:39872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.838216 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:39872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.874415 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.874433 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.914146 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.914163 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:39884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.950262 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.950280 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.987471 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:39898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:19.987488 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:39898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.025040 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.025059 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:39910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.062333 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:39922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.062353 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:39922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.095004 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.095023 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:39926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.109991 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:24332] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/account/laravel.log"] [unique_id "amr_qJDxY3fypotl7b9qigAAAB4"]
[Thu Jul 30 08:39:20.110307 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:24332] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/account/laravel.log"] [unique_id "amr_qJDxY3fypotl7b9qigAAAB4"]
[Thu Jul 30 08:39:20.110482 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:24332] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qJDxY3fypotl7b9qigAAAB4"]
[Thu Jul 30 08:39:20.111315 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:20.132138 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:39932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.132161 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:39932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.167924 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.167942 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.206627 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.206649 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:39948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.245525 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:39958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.245546 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:39958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.260276 2026] [ssl:error] [pid 2427539:tid 2427539] (70014)End of file found: [client 216.73.216.199:55803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:20.262211 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:20.283113 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.283132 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.296998 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/php.ini"] [unique_id "amr_qBpzOSLDAMoCSUlPyQAAABM"]
[Thu Jul 30 08:39:20.297287 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/php.ini"] [unique_id "amr_qBpzOSLDAMoCSUlPyQAAABM"]
[Thu Jul 30 08:39:20.297388 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/common/php.ini"] [unique_id "amr_qBpzOSLDAMoCSUlPyQAAABM"]
[Thu Jul 30 08:39:20.318123 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:39978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.318144 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:39978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.354599 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:39992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.354629 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:39992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.362507 2026] [access_compat:error] [pid 2429941:tid 2429941] [client 106.215.157.145:28347] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:20.391457 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.391475 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.398943 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/edit.php
[Thu Jul 30 08:39:20.398988 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:20.426789 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:40002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.426806 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:40002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.461167 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:40004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.461189 2026] [core:error] [pid 2428410:tid 2428410] [client 185.177.72.66:40004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.498031 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:40012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.498049 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:40012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.534005 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:40020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.534028 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:40020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.549866 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:20.570876 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.570892 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.604484 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40038] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config/laravel.log"] [unique_id "amr_qIFx8Bx4ITcCEtgnUwAAADc"]
[Thu Jul 30 08:39:20.604786 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40038] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/laravel.log"] [unique_id "amr_qIFx8Bx4ITcCEtgnUwAAADc"]
[Thu Jul 30 08:39:20.605104 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.605225 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40038] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/laravel.log"] [unique_id "amr_qIFx8Bx4ITcCEtgnUwAAADc"]
[Thu Jul 30 08:39:20.640052 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.640089 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.662944 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:20.675931 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.675949 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.711764 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.711781 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.747515 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:40072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.747535 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:40072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.786501 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:40078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.786521 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:40078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.800927 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sf.php
[Thu Jul 30 08:39:20.800973 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:20.823252 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.823270 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.859410 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.859431 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.893832 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.893852 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.930009 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:20.931469 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.931484 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.972578 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:20.972599 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.009124 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.009142 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.043142 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wso.php
[Thu Jul 30 08:39:21.043187 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:21.046465 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.046485 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.083400 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:40144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.083429 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:40144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.117965 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:40152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.117985 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:40152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.152708 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.152726 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.156874 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:24350] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/account/web.config"] [unique_id "amr_qSqRkGfpP6jUcmmaogAAAAg"]
[Thu Jul 30 08:39:21.157085 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:24350] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /account/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/account/web.config"] [unique_id "amr_qSqRkGfpP6jUcmmaogAAAAg"]
[Thu Jul 30 08:39:21.157193 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:24350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/account/web.config"] [unique_id "amr_qSqRkGfpP6jUcmmaogAAAAg"]
[Thu Jul 30 08:39:21.157350 2026] [security2:error] [pid 2424178:tid 2424178] [client 185.177.72.66:24350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qSqRkGfpP6jUcmmaogAAAAg"]
[Thu Jul 30 08:39:21.188594 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:40178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.188614 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:40178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.201211 2026] [core:error] [pid 2412474:tid 2412474] [client 47.79.33.77:39652] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Thu Jul 30 08:39:21.214498 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ioxi-o.php
[Thu Jul 30 08:39:21.214542 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:21.225680 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.225697 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.263625 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.263643 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:40194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.282447 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/community/.env"] [unique_id "amr_qRpzOSLDAMoCSUlP3AAAABM"]
[Thu Jul 30 08:39:21.282580 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/community/.env"] [unique_id "amr_qRpzOSLDAMoCSUlP3AAAABM"]
[Thu Jul 30 08:39:21.282684 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/community/.env"] [unique_id "amr_qRpzOSLDAMoCSUlP3AAAABM"]
[Thu Jul 30 08:39:21.300523 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.300542 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.328221 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/file56.php
[Thu Jul 30 08:39:21.328262 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 172.202.44.182:18468] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:21.334440 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.334456 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.372099 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.372115 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.397509 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:24356] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/acme-challenge/.env"] [unique_id "amr_qS8z5UsblH75uX6lhgAAABc"]
[Thu Jul 30 08:39:21.397643 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:24356] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/acme-challenge/.env"] [unique_id "amr_qS8z5UsblH75uX6lhgAAABc"]
[Thu Jul 30 08:39:21.397824 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:24356] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qS8z5UsblH75uX6lhgAAABc"]
[Thu Jul 30 08:39:21.406653 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:40228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.406672 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:40228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.440978 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.440998 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.481349 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:40242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.481367 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:40242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.516126 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:40254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.516146 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:40254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.536867 2026] [ssl:error] [pid 2423798:tid 2423798] (EAI 2)Name or service not known: [client 144.76.19.72:46140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:21.536887 2026] [ssl:error] [pid 2423798:tid 2423798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:21.550242 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.550269 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.582961 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.582978 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.591303 2026] [ssl:error] [pid 2422156:tid 2422156] (EAI 2)Name or service not known: [client 144.76.19.72:46154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:21.591325 2026] [ssl:error] [pid 2422156:tid 2422156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:21.618478 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.618496 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.641974 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:24358] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/acme/.env"] [unique_id "amr_qRSM_3DmF9yKgJn3kwAAAEY"]
[Thu Jul 30 08:39:21.642107 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:24358] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/acme/.env"] [unique_id "amr_qRSM_3DmF9yKgJn3kwAAAEY"]
[Thu Jul 30 08:39:21.642279 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:24358] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qRSM_3DmF9yKgJn3kwAAAEY"]
[Thu Jul 30 08:39:21.657791 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.657819 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.696531 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:40288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.696549 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:40288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.734469 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:40302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.734486 2026] [core:error] [pid 2424178:tid 2424178] [client 185.177.72.66:40302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.737755 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env"] [unique_id "amr_qRpzOSLDAMoCSUlP5QAAABM"]
[Thu Jul 30 08:39:21.737872 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env"] [unique_id "amr_qRpzOSLDAMoCSUlP5QAAABM"]
[Thu Jul 30 08:39:21.737967 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env"] [unique_id "amr_qRpzOSLDAMoCSUlP5QAAABM"]
[Thu Jul 30 08:39:21.755984 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.bak"] [unique_id "amr_qRpzOSLDAMoCSUlP5gAAABM"]
[Thu Jul 30 08:39:21.756118 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.bak"] [unique_id "amr_qRpzOSLDAMoCSUlP5gAAABM"]
[Thu Jul 30 08:39:21.756209 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.bak"] [unique_id "amr_qRpzOSLDAMoCSUlP5gAAABM"]
[Thu Jul 30 08:39:21.772801 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:40306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.772819 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:40306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.774274 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.dev"] [unique_id "amr_qRpzOSLDAMoCSUlP5wAAABM"]
[Thu Jul 30 08:39:21.774380 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.dev"] [unique_id "amr_qRpzOSLDAMoCSUlP5wAAABM"]
[Thu Jul 30 08:39:21.774472 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.dev"] [unique_id "amr_qRpzOSLDAMoCSUlP5wAAABM"]
[Thu Jul 30 08:39:21.792749 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.dist"] [unique_id "amr_qRpzOSLDAMoCSUlP6AAAABM"]
[Thu Jul 30 08:39:21.792859 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.dist"] [unique_id "amr_qRpzOSLDAMoCSUlP6AAAABM"]
[Thu Jul 30 08:39:21.792948 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.17:8718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.dist"] [unique_id "amr_qRpzOSLDAMoCSUlP6AAAABM"]
[Thu Jul 30 08:39:21.810756 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.810777 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.829696 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.local"] [unique_id "amr_qYFx8Bx4ITcCEtgnVgAAADc"]
[Thu Jul 30 08:39:21.829816 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.local"] [unique_id "amr_qYFx8Bx4ITcCEtgnVgAAADc"]
[Thu Jul 30 08:39:21.829923 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/.env.local"] [unique_id "amr_qYFx8Bx4ITcCEtgnVgAAADc"]
[Thu Jul 30 08:39:21.846525 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.846541 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.880674 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.880690 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.886347 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:24374] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/acme_challenges/.env"] [unique_id "amr_qRiCxDmIQaM3be7YBwAAACw"]
[Thu Jul 30 08:39:21.886462 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:24374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/acme_challenges/.env"] [unique_id "amr_qRiCxDmIQaM3be7YBwAAACw"]
[Thu Jul 30 08:39:21.886642 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:24374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qRiCxDmIQaM3be7YBwAAACw"]
[Thu Jul 30 08:39:21.915571 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.915597 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.948054 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.948082 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.982443 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:21.982460 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.018900 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.018917 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.055308 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.055325 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.092525 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.092546 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.132248 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.132267 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.150846 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:24388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/actions-server/.env"] [unique_id "amr_qhpzOSLDAMoCSUlP6QAAABM"]
[Thu Jul 30 08:39:22.150979 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:24388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/actions-server/.env"] [unique_id "amr_qhpzOSLDAMoCSUlP6QAAABM"]
[Thu Jul 30 08:39:22.151157 2026] [security2:error] [pid 2425154:tid 2425154] [client 185.177.72.66:24388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qhpzOSLDAMoCSUlP6QAAABM"]
[Thu Jul 30 08:39:22.170467 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.170485 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.208835 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.208854 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.245171 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.245189 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.283781 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.283813 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.318998 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.319016 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.352144 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.352161 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.391059 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.391095 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.417934 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:24394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env"] [unique_id "amr_quC233pHXOTf93SWkwAAADM"]
[Thu Jul 30 08:39:22.418061 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:24394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env"] [unique_id "amr_quC233pHXOTf93SWkwAAADM"]
[Thu Jul 30 08:39:22.418241 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:24394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_quC233pHXOTf93SWkwAAADM"]
[Thu Jul 30 08:39:22.430239 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.430259 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.468026 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:40416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.468044 2026] [core:error] [pid 2425154:tid 2425154] [client 185.177.72.66:40416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.505214 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.505231 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.541847 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.541869 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.585102 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.585121 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.626349 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.626368 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:40446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.665686 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.665710 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:40458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.694230 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:24400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.bak"] [unique_id "amr_qvd8VTPP_oF0WGs_mgAAAAU"]
[Thu Jul 30 08:39:22.694397 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:24400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.bak"] [unique_id "amr_qvd8VTPP_oF0WGs_mgAAAAU"]
[Thu Jul 30 08:39:22.694621 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:24400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qvd8VTPP_oF0WGs_mgAAAAU"]
[Thu Jul 30 08:39:22.706174 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.706192 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.747387 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.747409 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:40476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.784713 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.784731 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.828460 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:40494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.828499 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:40494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.864143 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.864169 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.900274 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:40516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.900295 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:40516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.935087 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.935108 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.967204 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:24408] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.dev"] [unique_id "amr_qm101zDj_5UEQFMXLgAAAAs"]
[Thu Jul 30 08:39:22.967376 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:24408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.dev"] [unique_id "amr_qm101zDj_5UEQFMXLgAAAAs"]
[Thu Jul 30 08:39:22.967555 2026] [security2:error] [pid 2419665:tid 2419665] [client 185.177.72.66:24408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_qm101zDj_5UEQFMXLgAAAAs"]
[Thu Jul 30 08:39:22.972801 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:22.972819 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.008995 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.009014 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:40536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.047332 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.047352 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.083891 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:40560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.083911 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:40560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.094458 2026] [cgi:error] [pid 2425019:tid 2425019] [client 20.9.4.9:29586] AH02812: stderr from /home/shirleya/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:39:23.120492 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.120516 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.156478 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.156507 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.195426 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.195446 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.221917 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:24416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.dist"] [unique_id "amr_q4_4x2IDFYJd2RFyygAAAAw"]
[Thu Jul 30 08:39:23.222045 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:24416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.dist"] [unique_id "amr_q4_4x2IDFYJd2RFyygAAAAw"]
[Thu Jul 30 08:39:23.222225 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:24416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_q4_4x2IDFYJd2RFyygAAAAw"]
[Thu Jul 30 08:39:23.234195 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.234214 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.270892 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:40600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.270914 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:40600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.306359 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.306386 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:40614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.343042 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.343061 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:40618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.376153 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.376178 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.411127 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.411146 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.447018 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.447037 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.476961 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:24420] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.local"] [unique_id "amr_q6CuPSoE0uFFzriA9QAAABY"]
[Thu Jul 30 08:39:23.477094 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:24420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/adm/.env.local"] [unique_id "amr_q6CuPSoE0uFFzriA9QAAABY"]
[Thu Jul 30 08:39:23.477271 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:24420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_q6CuPSoE0uFFzriA9QAAABY"]
[Thu Jul 30 08:39:23.483087 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.483106 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.519590 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.519611 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.553316 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.553334 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.590498 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.590521 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.628441 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.628461 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.661421 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.661454 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.686056 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/php.ini"] [unique_id "amr_q4Fx8Bx4ITcCEtgneQAAADc"]
[Thu Jul 30 08:39:23.686408 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/php.ini"] [unique_id "amr_q4Fx8Bx4ITcCEtgneQAAADc"]
[Thu Jul 30 08:39:23.686513 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conf/php.ini"] [unique_id "amr_q4Fx8Bx4ITcCEtgneQAAADc"]
[Thu Jul 30 08:39:23.698875 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.698896 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:40692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.735530 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:40706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.735554 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:40706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.775612 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.775644 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.811699 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.811721 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.847546 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.847577 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.885182 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.885201 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:40754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.892411 2026] [core:error] [pid 2428412:tid 2428412] (13)Permission denied: [client 216.73.216.199:27259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/slabs_cpu_partial
[Thu Jul 30 08:39:23.921167 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.921185 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.957023 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40780] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config/settings.inc"] [unique_id "amr_q_Y_hg2jdeEs7TiiYAAAAAM"]
[Thu Jul 30 08:39:23.957342 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40780] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/settings.inc"] [unique_id "amr_q_Y_hg2jdeEs7TiiYAAAAAM"]
[Thu Jul 30 08:39:23.957691 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.957805 2026] [security2:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40780] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/settings.inc"] [unique_id "amr_q_Y_hg2jdeEs7TiiYAAAAAM"]
[Thu Jul 30 08:39:23.990923 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:23.990944 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.022826 2026] [authz_core:error] [pid 2423766:tid 2423766] [client 57.141.0.25:27424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:24.023446 2026] [authz_core:error] [pid 2423766:tid 2423766] [client 57.141.0.25:27424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:24.026154 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.026171 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.049736 2026] [authz_core:error] [pid 2427542:tid 2427542] [client 57.141.0.37:37488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:24.050364 2026] [authz_core:error] [pid 2427542:tid 2427542] [client 57.141.0.37:37488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:24.061420 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.061437 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.098956 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.098975 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.104478 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:24.137777 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.137795 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.172157 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:40826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.172178 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:40826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.207161 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.207180 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:40840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.242912 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:40848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.242930 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:40848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.271452 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:39:24.277296 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.277314 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.313978 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.313996 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.352829 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.352847 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.385732 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:24.388061 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.388089 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.423316 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:40902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.423335 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:40902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.461200 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.461222 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.494594 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:40912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.494612 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:40912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.531833 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:40920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.531860 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:40920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.539522 2026] [access_compat:error] [pid 2429861:tid 2429861] [client 106.215.157.145:33211] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:24.559729 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/2.php
[Thu Jul 30 08:39:24.559772 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:24.568257 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.568272 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.606126 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.606145 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:40936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.642537 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.642555 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:40942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.649620 2026] [ssl:error] [pid 2427701:tid 2427701] (EAI 2)Name or service not known: [client 144.76.19.72:46156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:24.649642 2026] [ssl:error] [pid 2427701:tid 2427701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:24.673715 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:24.676463 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.bak"] [unique_id "amr_rIFx8Bx4ITcCEtgnjAAAADc"]
[Thu Jul 30 08:39:24.676759 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.bak"] [unique_id "amr_rIFx8Bx4ITcCEtgnjAAAADc"]
[Thu Jul 30 08:39:24.676865 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.bak"] [unique_id "amr_rIFx8Bx4ITcCEtgnjAAAADc"]
[Thu Jul 30 08:39:24.681104 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.681122 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:40956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.703717 2026] [ssl:error] [pid 2429944:tid 2429944] (EAI 2)Name or service not known: [client 144.76.19.72:46164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:24.703742 2026] [ssl:error] [pid 2429944:tid 2429944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:24.719768 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:40964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.719786 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:40964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.758528 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.758548 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:40976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.792872 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mah.php
[Thu Jul 30 08:39:24.792919 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:24.796425 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.796446 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:40984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.804750 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.conf"] [unique_id "amr_rIFx8Bx4ITcCEtgnjwAAADc"]
[Thu Jul 30 08:39:24.805017 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.conf"] [unique_id "amr_rIFx8Bx4ITcCEtgnjwAAADc"]
[Thu Jul 30 08:39:24.805143 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.conf"] [unique_id "amr_rIFx8Bx4ITcCEtgnjwAAADc"]
[Thu Jul 30 08:39:24.831518 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:41000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.831539 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:41000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.866018 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:41014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.866036 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:41014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.878403 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.dat"] [unique_id "amr_rIFx8Bx4ITcCEtgnkQAAADc"]
[Thu Jul 30 08:39:24.878713 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.dat"] [unique_id "amr_rIFx8Bx4ITcCEtgnkQAAADc"]
[Thu Jul 30 08:39:24.878816 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.dat"] [unique_id "amr_rIFx8Bx4ITcCEtgnkQAAADc"]
[Thu Jul 30 08:39:24.902310 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:41022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.902328 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:41022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.906945 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/send.php
[Thu Jul 30 08:39:24.906987 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:24.938028 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:41024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.938045 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:41024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.970982 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:41028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:24.971014 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:41028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.006432 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:41030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.006453 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:41030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.042540 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:41040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.042571 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:41040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.081491 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:41056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.081512 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:41056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.092432 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:25.097942 2026] [ssl:error] [pid 2428412:tid 2428412] (70014)End of file found: [client 216.73.216.199:27259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:25.108016 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.inc"] [unique_id "amr_rYFx8Bx4ITcCEtgnlgAAADc"]
[Thu Jul 30 08:39:25.108302 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.inc"] [unique_id "amr_rYFx8Bx4ITcCEtgnlgAAADc"]
[Thu Jul 30 08:39:25.108413 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.inc"] [unique_id "amr_rYFx8Bx4ITcCEtgnlgAAADc"]
[Thu Jul 30 08:39:25.116915 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:41058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.116935 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:41058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.154259 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.154284 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.191676 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:41080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.191710 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:41080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.207871 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:39:25.227406 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:41086] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/config/web.config"] [unique_id "amr_rSgDZvJnuOkhDtU2zgAAACU"]
[Thu Jul 30 08:39:25.227644 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:41086] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /config/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/config/web.config"] [unique_id "amr_rSgDZvJnuOkhDtU2zgAAACU"]
[Thu Jul 30 08:39:25.227765 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:41086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/config/web.config"] [unique_id "amr_rSgDZvJnuOkhDtU2zgAAACU"]
[Thu Jul 30 08:39:25.228077 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:41086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.228191 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:41086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/config/web.config"] [unique_id "amr_rSgDZvJnuOkhDtU2zgAAACU"]
[Thu Jul 30 08:39:25.266193 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:41096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.266216 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:41096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.302139 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:41108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.302161 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:41108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.337172 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.337192 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.372165 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:41118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.372185 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:41118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.408347 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:41124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /configuration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/configuration/.env"] [unique_id "amr_rYyFZ2ptgStT3D1uugAAAD0"]
[Thu Jul 30 08:39:25.408471 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:41124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/configuration/.env"] [unique_id "amr_rYyFZ2ptgStT3D1uugAAAD0"]
[Thu Jul 30 08:39:25.408778 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:41124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.408885 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:41124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/configuration/.env"] [unique_id "amr_rYyFZ2ptgStT3D1uugAAAD0"]
[Thu Jul 30 08:39:25.426268 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about.php
[Thu Jul 30 08:39:25.426314 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:25.445267 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:41128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.445283 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:41128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.479740 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41140] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /configuration/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/configuration/.git/config"] [unique_id "amr_rZyx_IHBAbnDowSLAAAAADU"]
[Thu Jul 30 08:39:25.479889 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/configuration/.git/config"] [unique_id "amr_rZyx_IHBAbnDowSLAAAAADU"]
[Thu Jul 30 08:39:25.480228 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.480344 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:41140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/configuration/.git/config"] [unique_id "amr_rZyx_IHBAbnDowSLAAAAADU"]
[Thu Jul 30 08:39:25.516323 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:41142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.516343 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:41142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.552956 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:41148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.552975 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:41148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.590739 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.590759 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.598161 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/options.php
[Thu Jul 30 08:39:25.598205 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:25.598686 2026] [authz_core:error] [pid 2420712:tid 2420712] [client 52.238.199.152:60758] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/IXR/error_log
[Thu Jul 30 08:39:25.630058 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.630088 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.666854 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28120] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_reWvknE5emN3ObPdAwAAACc"]
[Thu Jul 30 08:39:25.667145 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_reWvknE5emN3ObPdAwAAACc"]
[Thu Jul 30 08:39:25.667449 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.667551 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_reWvknE5emN3ObPdAwAAACc"]
[Thu Jul 30 08:39:25.702339 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/configuration/api-config.ini"] [unique_id "amr_ralzm7G0Pp-9gn6qEwAAAEk"]
[Thu Jul 30 08:39:25.702642 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/configuration/api-config.ini"] [unique_id "amr_ralzm7G0Pp-9gn6qEwAAAEk"]
[Thu Jul 30 08:39:25.702960 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.703140 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/configuration/api-config.ini"] [unique_id "amr_ralzm7G0Pp-9gn6qEwAAAEk"]
[Thu Jul 30 08:39:25.712202 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:39:25.737444 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.737461 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.773535 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.773552 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.809632 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28164] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/configuration/laravel.log"] [unique_id "amr_reWvknE5emN3ObPdBAAAACc"]
[Thu Jul 30 08:39:25.809917 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/configuration/laravel.log"] [unique_id "amr_reWvknE5emN3ObPdBAAAACc"]
[Thu Jul 30 08:39:25.810239 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.810341 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/configuration/laravel.log"] [unique_id "amr_reWvknE5emN3ObPdBAAAACc"]
[Thu Jul 30 08:39:25.816105 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.old"] [unique_id "amr_rYFx8Bx4ITcCEtgnpAAAADc"]
[Thu Jul 30 08:39:25.816976 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.old"] [unique_id "amr_rYFx8Bx4ITcCEtgnpAAAADc"]
[Thu Jul 30 08:39:25.817118 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.old"] [unique_id "amr_rYFx8Bx4ITcCEtgnpAAAADc"]
[Thu Jul 30 08:39:25.846500 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.846519 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.875493 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-file.php
[Thu Jul 30 08:39:25.875538 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:25.883296 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.883314 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.916652 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28198] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/configuration/web.config"] [unique_id "amr_reWvknE5emN3ObPdBQAAACc"]
[Thu Jul 30 08:39:25.916855 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28198] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /configuration/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/configuration/web.config"] [unique_id "amr_reWvknE5emN3ObPdBQAAACc"]
[Thu Jul 30 08:39:25.916980 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/configuration/web.config"] [unique_id "amr_reWvknE5emN3ObPdBQAAACc"]
[Thu Jul 30 08:39:25.917294 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.917398 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/configuration/web.config"] [unique_id "amr_reWvknE5emN3ObPdBQAAACc"]
[Thu Jul 30 08:39:25.954391 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.954412 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.989449 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:25.989470 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.019510 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sid3.php
[Thu Jul 30 08:39:26.019555 2026] [access_compat:error] [pid 2420366:tid 2420366] [client 172.202.44.182:24643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:39:26.024946 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.024973 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.060259 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.060298 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.097019 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:28248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.097041 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:28248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.133372 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.133392 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.169272 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.169292 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.205022 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28274] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conta/.env"] [unique_id "amr_ruWvknE5emN3ObPdBwAAACc"]
[Thu Jul 30 08:39:26.205189 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conta/.env"] [unique_id "amr_ruWvknE5emN3ObPdBwAAACc"]
[Thu Jul 30 08:39:26.205493 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.205607 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conta/.env"] [unique_id "amr_ruWvknE5emN3ObPdBwAAACc"]
[Thu Jul 30 08:39:26.242970 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.242990 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.278338 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:28284] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /conta/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conta/.git/config"] [unique_id "amr_ri7K7U7WHMW7oLBi5wAAAEA"]
[Thu Jul 30 08:39:26.278467 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:28284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conta/.git/config"] [unique_id "amr_ri7K7U7WHMW7oLBi5wAAAEA"]
[Thu Jul 30 08:39:26.278779 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:28284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.278897 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:28284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conta/.git/config"] [unique_id "amr_ri7K7U7WHMW7oLBi5wAAAEA"]
[Thu Jul 30 08:39:26.313296 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.313317 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.353522 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.353552 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.391424 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.391443 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:28306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.428429 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:28310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.428453 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:28310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.464786 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28314] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_ri8z5UsblH75uX6lnAAAABc"]
[Thu Jul 30 08:39:26.465108 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_ri8z5UsblH75uX6lnAAAABc"]
[Thu Jul 30 08:39:26.465423 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.465538 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_ri8z5UsblH75uX6lnAAAABc"]
[Thu Jul 30 08:39:26.506805 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28330] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/conta/api-config.ini"] [unique_id "amr_ruWvknE5emN3ObPdCQAAACc"]
[Thu Jul 30 08:39:26.507156 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conta/api-config.ini"] [unique_id "amr_ruWvknE5emN3ObPdCQAAACc"]
[Thu Jul 30 08:39:26.507472 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.507586 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conta/api-config.ini"] [unique_id "amr_ruWvknE5emN3ObPdCQAAACc"]
[Thu Jul 30 08:39:26.545524 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.545546 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.580434 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:28354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.580453 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:28354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.616685 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28364] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/conta/laravel.log"] [unique_id "amr_ri8z5UsblH75uX6lnQAAABc"]
[Thu Jul 30 08:39:26.617036 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conta/laravel.log"] [unique_id "amr_ri8z5UsblH75uX6lnQAAABc"]
[Thu Jul 30 08:39:26.617362 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.617480 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conta/laravel.log"] [unique_id "amr_ri8z5UsblH75uX6lnQAAABc"]
[Thu Jul 30 08:39:26.654873 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.654895 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.693611 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:28380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.693629 2026] [core:error] [pid 2425020:tid 2425020] [client 185.177.72.66:28380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.727585 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28390] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/conta/web.config"] [unique_id "amr_rkAEOnquTlmZJ4R-5AAAAC8"]
[Thu Jul 30 08:39:26.727798 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28390] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /conta/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/conta/web.config"] [unique_id "amr_rkAEOnquTlmZJ4R-5AAAAC8"]
[Thu Jul 30 08:39:26.727908 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/conta/web.config"] [unique_id "amr_rkAEOnquTlmZJ4R-5AAAAC8"]
[Thu Jul 30 08:39:26.728227 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.728328 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/conta/web.config"] [unique_id "amr_rkAEOnquTlmZJ4R-5AAAAC8"]
[Thu Jul 30 08:39:26.759360 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.sql"] [unique_id "amr_roFx8Bx4ITcCEtgntgAAADc"]
[Thu Jul 30 08:39:26.759672 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.sql"] [unique_id "amr_roFx8Bx4ITcCEtgntgAAADc"]
[Thu Jul 30 08:39:26.759776 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.17:8726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config.sql"] [unique_id "amr_roFx8Bx4ITcCEtgntgAAADc"]
[Thu Jul 30 08:39:26.762293 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/content/.env"] [unique_id "amr_rniGnV0lYiYXbxD-egAAACI"]
[Thu Jul 30 08:39:26.762407 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/content/.env"] [unique_id "amr_rniGnV0lYiYXbxD-egAAACI"]
[Thu Jul 30 08:39:26.762729 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.763949 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/content/.env"] [unique_id "amr_rniGnV0lYiYXbxD-egAAACI"]
[Thu Jul 30 08:39:26.800935 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.800953 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.812685 2026] [lsapi:warn] [pid 2427539:tid 2427539] [client 216.73.216.199:53342] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 08:39:26.812707 2026] [lsapi:error] [pid 2427539:tid 2427539] [client 216.73.216.199:53342] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/composite.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 08:39:26.833878 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.833896 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.867839 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.867858 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:28430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.902024 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.902042 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.903975 2026] [core:error] [pid 2423797:tid 2423797] (13)Permission denied: [client 216.73.216.199:62152] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/trace_event_file/objects_partial
[Thu Jul 30 08:39:26.926356 2026] [core:error] [pid 2428311:tid 2428311] [client 18.212.160.179:20374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.926373 2026] [core:error] [pid 2428311:tid 2428311] [client 18.212.160.179:20374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.938270 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:28444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.938286 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:28444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.979514 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28448] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/core/persistence/.env"] [unique_id "amr_rkAEOnquTlmZJ4R-5wAAAC8"]
[Thu Jul 30 08:39:26.979653 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28448] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/core/persistence/.env"] [unique_id "amr_rkAEOnquTlmZJ4R-5wAAAC8"]
[Thu Jul 30 08:39:26.979948 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:26.980041 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:28448] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/core/persistence/.env"] [unique_id "amr_rkAEOnquTlmZJ4R-5wAAAC8"]
[Thu Jul 30 08:39:27.004368 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.bak"] [unique_id "amr_r0AEOnquTlmZJ4R-6AAAAC8"]
[Thu Jul 30 08:39:27.004484 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.bak"] [unique_id "amr_r0AEOnquTlmZJ4R-6AAAAC8"]
[Thu Jul 30 08:39:27.004590 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.bak"] [unique_id "amr_r0AEOnquTlmZJ4R-6AAAAC8"]
[Thu Jul 30 08:39:27.022309 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.dev"] [unique_id "amr_r0AEOnquTlmZJ4R-6QAAAC8"]
[Thu Jul 30 08:39:27.022427 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.dev"] [unique_id "amr_r0AEOnquTlmZJ4R-6QAAAC8"]
[Thu Jul 30 08:39:27.022526 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.dev"] [unique_id "amr_r0AEOnquTlmZJ4R-6QAAAC8"]
[Thu Jul 30 08:39:27.026893 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:28458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.026915 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:28458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.040187 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.dist"] [unique_id "amr_r0AEOnquTlmZJ4R-6gAAAC8"]
[Thu Jul 30 08:39:27.040310 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.dist"] [unique_id "amr_r0AEOnquTlmZJ4R-6gAAAC8"]
[Thu Jul 30 08:39:27.040414 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.dist"] [unique_id "amr_r0AEOnquTlmZJ4R-6gAAAC8"]
[Thu Jul 30 08:39:27.058185 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.test"] [unique_id "amr_r0AEOnquTlmZJ4R-6wAAAC8"]
[Thu Jul 30 08:39:27.058313 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.test"] [unique_id "amr_r0AEOnquTlmZJ4R-6wAAAC8"]
[Thu Jul 30 08:39:27.058409 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.env.test"] [unique_id "amr_r0AEOnquTlmZJ4R-6wAAAC8"]
[Thu Jul 30 08:39:27.131510 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.git/config"] [unique_id "amr_r0AEOnquTlmZJ4R-7QAAAC8"]
[Thu Jul 30 08:39:27.131651 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.git/config"] [unique_id "amr_r0AEOnquTlmZJ4R-7QAAAC8"]
[Thu Jul 30 08:39:27.131760 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/.git/config"] [unique_id "amr_r0AEOnquTlmZJ4R-7QAAAC8"]
[Thu Jul 30 08:39:27.208837 2026] [lsapi:warn] [pid 2423797:tid 2423797] [client 216.73.216.199:62152] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 08:39:27.208866 2026] [lsapi:error] [pid 2423797:tid 2423797] [client 216.73.216.199:62152] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/display.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 08:39:27.264257 2026] [core:error] [pid 2427701:tid 2427701] [client 18.212.160.179:47117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.264278 2026] [core:error] [pid 2427701:tid 2427701] [client 18.212.160.179:47117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.300621 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.300642 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.351194 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.351213 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.363784 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/AppData.config"] [unique_id "amr_r0AEOnquTlmZJ4R-8gAAAC8"]
[Thu Jul 30 08:39:27.364088 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/AppData.config"] [unique_id "amr_r0AEOnquTlmZJ4R-8gAAAC8"]
[Thu Jul 30 08:39:27.364187 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/AppData.config"] [unique_id "amr_r0AEOnquTlmZJ4R-8gAAAC8"]
[Thu Jul 30 08:39:27.385375 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_r0AEOnquTlmZJ4R-8wAAAC8"]
[Thu Jul 30 08:39:27.385658 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28480] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_r-C233pHXOTf93SWowAAADM"]
[Thu Jul 30 08:39:27.385714 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_r0AEOnquTlmZJ4R-8wAAAC8"]
[Thu Jul 30 08:39:27.385793 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_r-C233pHXOTf93SWowAAADM"]
[Thu Jul 30 08:39:27.385826 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amr_r0AEOnquTlmZJ4R-8wAAAC8"]
[Thu Jul 30 08:39:27.386118 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.386223 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_r-C233pHXOTf93SWowAAADM"]
[Thu Jul 30 08:39:27.423364 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28488] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/counterblockd/.env"] [unique_id "amr_ry8b8gP_SKt2Q6y9PQAAAD4"]
[Thu Jul 30 08:39:27.423520 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28488] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/counterblockd/.env"] [unique_id "amr_ry8b8gP_SKt2Q6y9PQAAAD4"]
[Thu Jul 30 08:39:27.423840 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.423950 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28488] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/counterblockd/.env"] [unique_id "amr_ry8b8gP_SKt2Q6y9PQAAAD4"]
[Thu Jul 30 08:39:27.457053 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/api-config.ini"] [unique_id "amr_r0AEOnquTlmZJ4R-9QAAAC8"]
[Thu Jul 30 08:39:27.457406 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/api-config.ini"] [unique_id "amr_r0AEOnquTlmZJ4R-9QAAAC8"]
[Thu Jul 30 08:39:27.457509 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/api-config.ini"] [unique_id "amr_r0AEOnquTlmZJ4R-9QAAAC8"]
[Thu Jul 30 08:39:27.459788 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28494] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/counterwallet/.env"] [unique_id "amr_r-C233pHXOTf93SWpAAAADM"]
[Thu Jul 30 08:39:27.459907 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28494] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/counterwallet/.env"] [unique_id "amr_r-C233pHXOTf93SWpAAAADM"]
[Thu Jul 30 08:39:27.460240 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.460341 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28494] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/counterwallet/.env"] [unique_id "amr_r-C233pHXOTf93SWpAAAADM"]
[Thu Jul 30 08:39:27.495133 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cp/.env"] [unique_id "amr_r350CufHvaci0qvlvAAAAEE"]
[Thu Jul 30 08:39:27.495274 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cp/.env"] [unique_id "amr_r350CufHvaci0qvlvAAAAEE"]
[Thu Jul 30 08:39:27.495599 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.495713 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cp/.env"] [unique_id "amr_r350CufHvaci0qvlvAAAAEE"]
[Thu Jul 30 08:39:27.524376 2026] [core:error] [pid 2423766:tid 2423766] [client 18.212.160.179:18484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.530754 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28508] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/crm/.env"] [unique_id "amr_r-C233pHXOTf93SWpQAAADM"]
[Thu Jul 30 08:39:27.530882 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/.env"] [unique_id "amr_r-C233pHXOTf93SWpQAAADM"]
[Thu Jul 30 08:39:27.531200 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.531298 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/.env"] [unique_id "amr_r-C233pHXOTf93SWpQAAADM"]
[Thu Jul 30 08:39:27.564896 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28522] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/crm/.env.bak"] [unique_id "amr_r-C233pHXOTf93SWpgAAADM"]
[Thu Jul 30 08:39:27.565021 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28522] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/.env.bak"] [unique_id "amr_r-C233pHXOTf93SWpgAAADM"]
[Thu Jul 30 08:39:27.565332 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.565432 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:28522] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/.env.bak"] [unique_id "amr_r-C233pHXOTf93SWpgAAADM"]
[Thu Jul 30 08:39:27.599959 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28532] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/crm/.env.dev"] [unique_id "amr_ry8b8gP_SKt2Q6y9PwAAAD4"]
[Thu Jul 30 08:39:27.600091 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/.env.dev"] [unique_id "amr_ry8b8gP_SKt2Q6y9PwAAAD4"]
[Thu Jul 30 08:39:27.600422 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.600526 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/.env.dev"] [unique_id "amr_ry8b8gP_SKt2Q6y9PwAAAD4"]
[Thu Jul 30 08:39:27.637108 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/crm/.env.dist"] [unique_id "amr_r350CufHvaci0qvlvgAAAEE"]
[Thu Jul 30 08:39:27.637283 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/.env.dist"] [unique_id "amr_r350CufHvaci0qvlvgAAAEE"]
[Thu Jul 30 08:39:27.637769 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.637946 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/.env.dist"] [unique_id "amr_r350CufHvaci0qvlvgAAAEE"]
[Thu Jul 30 08:39:27.674061 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/crm/.env.local"] [unique_id "amr_rxiCxDmIQaM3be7YEQAAACw"]
[Thu Jul 30 08:39:27.674221 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/.env.local"] [unique_id "amr_rxiCxDmIQaM3be7YEQAAACw"]
[Thu Jul 30 08:39:27.674529 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.674656 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/.env.local"] [unique_id "amr_rxiCxDmIQaM3be7YEQAAACw"]
[Thu Jul 30 08:39:27.708601 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28560] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/crm/.env.production"] [unique_id "amr_r-s7bSxOV4LObzu7GgAAABo"]
[Thu Jul 30 08:39:27.708748 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28560] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/.env.production"] [unique_id "amr_r-s7bSxOV4LObzu7GgAAABo"]
[Thu Jul 30 08:39:27.709080 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.709199 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28560] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/.env.production"] [unique_id "amr_r-s7bSxOV4LObzu7GgAAABo"]
[Thu Jul 30 08:39:27.746395 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28564] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/crm/.env.staging"] [unique_id "amr_ry8b8gP_SKt2Q6y9QAAAAD4"]
[Thu Jul 30 08:39:27.746515 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28564] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/.env.staging"] [unique_id "amr_ry8b8gP_SKt2Q6y9QAAAAD4"]
[Thu Jul 30 08:39:27.746826 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.746924 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28564] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/.env.staging"] [unique_id "amr_ry8b8gP_SKt2Q6y9QAAAAD4"]
[Thu Jul 30 08:39:27.758845 2026] [ssl:error] [pid 2423766:tid 2423766] (EAI 2)Name or service not known: [client 144.76.19.72:46166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:27.758863 2026] [ssl:error] [pid 2423766:tid 2423766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:27.785768 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.785788 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.814282 2026] [ssl:error] [pid 2427701:tid 2427701] (EAI 2)Name or service not known: [client 144.76.19.72:46170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:27.814305 2026] [ssl:error] [pid 2427701:tid 2427701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:27.822114 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.822132 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.858894 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.858916 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:28596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.895777 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.895817 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.930897 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.930918 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:28614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.966720 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:27.966739 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.005894 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.005920 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.041924 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:28658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.041947 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:28658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.076990 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.077012 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.112265 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.112295 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:28670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.148644 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.148663 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.188150 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:28700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.188170 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:28700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.224298 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.224316 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.260124 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:28708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.260142 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:28708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.268485 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/config.inc"] [unique_id "amr_sEAEOnquTlmZJ4R_BQAAAC8"]
[Thu Jul 30 08:39:28.268768 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/config.inc"] [unique_id "amr_sEAEOnquTlmZJ4R_BQAAAC8"]
[Thu Jul 30 08:39:28.268866 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/config.inc"] [unique_id "amr_sEAEOnquTlmZJ4R_BQAAAC8"]
[Thu Jul 30 08:39:28.297060 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:28714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.297090 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:28714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.339174 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.339195 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.379803 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:28738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.379832 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:28738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.411348 2026] [core:error] [pid 2423797:tid 2423797] (13)Permission denied: [client 216.73.216.199:16451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/total_objects
[Thu Jul 30 08:39:28.418901 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.418919 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.462166 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.462186 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.501613 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:28776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.501633 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:28776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.545712 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.545731 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.583008 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:28788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.583028 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:28788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.619458 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:28800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.619476 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:28800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.655104 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.655121 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:28808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.688326 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:28818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.688350 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:28818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.726167 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.726188 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.763033 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.763054 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.807586 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.807606 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.845778 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.845799 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:28856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.881553 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:28858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.881591 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:28858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.882257 2026] [authz_core:error] [pid 2425019:tid 2425019] [client 57.141.0.33:65436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:28.882895 2026] [authz_core:error] [pid 2425019:tid 2425019] [client 57.141.0.33:65436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:28.915233 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:28862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.915251 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:28862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.950515 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:28874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.950534 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:28874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.996426 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:28882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:28.996446 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:28882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.012407 2026] [core:error] [pid 2423797:tid 2423797] (13)Permission denied: [client 216.73.216.199:16451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/cache_dma
[Thu Jul 30 08:39:29.030311 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.030333 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:28896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.064329 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28912] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/crm/php.ini"] [unique_id "amr_sfd8VTPP_oF0WGs_pwAAAAU"]
[Thu Jul 30 08:39:29.064631 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/crm/php.ini"] [unique_id "amr_sfd8VTPP_oF0WGs_pwAAAAU"]
[Thu Jul 30 08:39:29.064938 2026] [core:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.065042 2026] [security2:error] [pid 2419141:tid 2419141] [client 185.177.72.66:28912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/crm/php.ini"] [unique_id "amr_sfd8VTPP_oF0WGs_pwAAAAU"]
[Thu Jul 30 08:39:29.086584 2026] [authz_core:error] [pid 2425341:tid 2425341] [client 57.141.0.6:24730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:29.087252 2026] [authz_core:error] [pid 2425341:tid 2425341] [client 57.141.0.6:24730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:29.098939 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.098958 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:28926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.132783 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.132803 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:28934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.166971 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:28944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.166990 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:28944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.205028 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:28960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.205048 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:28960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.241203 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.241222 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:28976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.277055 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:28986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.277088 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:28986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.315111 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.315131 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.350816 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.350837 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.388216 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.388235 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.421851 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:29034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.421875 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:29034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.441592 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.8:60446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:29.442206 2026] [authz_core:error] [pid 2415778:tid 2415778] [client 57.141.0.8:60446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:29.460167 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.460184 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.493132 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.493148 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.529047 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.529079 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.566660 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.566677 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.604706 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.604726 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.642322 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.642340 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.677169 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.677185 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.718176 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.718194 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.751262 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.751281 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.784506 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cron/.env.bak"] [unique_id "amr_sXiGnV0lYiYXbxD-ggAAACI"]
[Thu Jul 30 08:39:29.784647 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cron/.env.bak"] [unique_id "amr_sXiGnV0lYiYXbxD-ggAAACI"]
[Thu Jul 30 08:39:29.784949 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.785050 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cron/.env.bak"] [unique_id "amr_sXiGnV0lYiYXbxD-ggAAACI"]
[Thu Jul 30 08:39:29.819788 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cron/.env.dev"] [unique_id "amr_sT-G1VCKQzXMG6UbzwAAACg"]
[Thu Jul 30 08:39:29.819935 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cron/.env.dev"] [unique_id "amr_sT-G1VCKQzXMG6UbzwAAACg"]
[Thu Jul 30 08:39:29.820291 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.820408 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cron/.env.dev"] [unique_id "amr_sT-G1VCKQzXMG6UbzwAAACg"]
[Thu Jul 30 08:39:29.856491 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29154] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cron/.env.dist"] [unique_id "amr_sRQlIytBsvBD-_AnGAAAADY"]
[Thu Jul 30 08:39:29.856650 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cron/.env.dist"] [unique_id "amr_sRQlIytBsvBD-_AnGAAAADY"]
[Thu Jul 30 08:39:29.856952 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.857078 2026] [security2:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cron/.env.dist"] [unique_id "amr_sRQlIytBsvBD-_AnGAAAADY"]
[Thu Jul 30 08:39:29.893469 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cron/.env.local"] [unique_id "amr_seWvknE5emN3ObPdEQAAACc"]
[Thu Jul 30 08:39:29.893622 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cron/.env.local"] [unique_id "amr_seWvknE5emN3ObPdEQAAACc"]
[Thu Jul 30 08:39:29.893923 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.894022 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cron/.env.local"] [unique_id "amr_seWvknE5emN3ObPdEQAAACc"]
[Thu Jul 30 08:39:29.930331 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cron/.env.production"] [unique_id "amr_sY_4x2IDFYJd2RFyzwAAAAw"]
[Thu Jul 30 08:39:29.930454 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cron/.env.production"] [unique_id "amr_sY_4x2IDFYJd2RFyzwAAAAw"]
[Thu Jul 30 08:39:29.930810 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.930919 2026] [security2:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cron/.env.production"] [unique_id "amr_sY_4x2IDFYJd2RFyzwAAAAw"]
[Thu Jul 30 08:39:29.964758 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29186] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cron/.env.staging"] [unique_id "amr_sdGWH5xbt04huX6WXAAAABA"]
[Thu Jul 30 08:39:29.964875 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cron/.env.staging"] [unique_id "amr_sdGWH5xbt04huX6WXAAAABA"]
[Thu Jul 30 08:39:29.965189 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:29.965289 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cron/.env.staging"] [unique_id "amr_sdGWH5xbt04huX6WXAAAABA"]
[Thu Jul 30 08:39:30.003701 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.003720 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.038544 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.038573 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.075157 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.075175 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.110982 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.111003 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.145780 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.145805 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.181511 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.181531 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.217431 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:29236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.217453 2026] [core:error] [pid 2427479:tid 2427479] [client 185.177.72.66:29236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.255597 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.255618 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.297346 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.297368 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.330960 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.330980 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.369581 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.369602 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.405903 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.405923 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.438479 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.438499 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:29286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.473216 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29292] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.473237 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29292] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.510455 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.510485 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:29296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.541246 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/laravel.log"] [unique_id "amr_skAEOnquTlmZJ4R_MAAAAC8"]
[Thu Jul 30 08:39:30.541542 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/laravel.log"] [unique_id "amr_skAEOnquTlmZJ4R_MAAAAC8"]
[Thu Jul 30 08:39:30.541656 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.17:18162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/laravel.log"] [unique_id "amr_skAEOnquTlmZJ4R_MAAAAC8"]
[Thu Jul 30 08:39:30.544802 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.544908 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.584269 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.584291 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:29324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.618723 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.618751 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.656312 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.656334 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.694102 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.694120 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.732004 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:29364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.732028 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:29364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.767275 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.767295 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.804491 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.804510 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.841121 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.841139 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.843720 2026] [access_compat:error] [pid 2419665:tid 2419665] [client 106.215.157.145:28221] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:30.868914 2026] [ssl:error] [pid 2423766:tid 2423766] (EAI 2)Name or service not known: [client 144.76.19.72:61860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:30.868935 2026] [ssl:error] [pid 2423766:tid 2423766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:30.877849 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.877867 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:29388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.914501 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.914519 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.921675 2026] [ssl:error] [pid 2420087:tid 2420087] (EAI 2)Name or service not known: [client 144.76.19.72:61870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:30.921694 2026] [ssl:error] [pid 2420087:tid 2420087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:30.947520 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.947538 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:29398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.982340 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:29406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:30.982358 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:29406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.018991 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.019011 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.054956 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.054985 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.092218 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.092239 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.129371 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.129391 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.166845 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.166864 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.201685 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.201706 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.235441 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:29480] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/cron/php.ini"] [unique_id "amr_s6epTk7nN70C9RU6oAAAABI"]
[Thu Jul 30 08:39:31.235785 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:29480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cron/php.ini"] [unique_id "amr_s6epTk7nN70C9RU6oAAAABI"]
[Thu Jul 30 08:39:31.236121 2026] [core:error] [pid 2429861:tid 2429861] [client 185.177.72.66:29480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.236244 2026] [security2:error] [pid 2429861:tid 2429861] [client 185.177.72.66:29480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cron/php.ini"] [unique_id "amr_s6epTk7nN70C9RU6oAAAABI"]
[Thu Jul 30 08:39:31.274210 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.274230 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.311615 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.311640 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.346263 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.346286 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.386913 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.386935 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.423888 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:29530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.423919 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:29530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.461746 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.461767 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.497870 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.497894 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.540222 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.540241 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.575893 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.575912 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.612140 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.612158 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.647367 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.647385 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.684277 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.684305 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.717479 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.717499 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.752116 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.752135 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.786336 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.786354 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.822077 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.822096 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.860202 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.860222 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.895234 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.895256 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.930138 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29678] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/cryo_project/.env"] [unique_id "amr_s5kA2-P0e5yhCnL_0AAAAAI"]
[Thu Jul 30 08:39:31.930269 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29678] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/cryo_project/.env"] [unique_id "amr_s5kA2-P0e5yhCnL_0AAAAAI"]
[Thu Jul 30 08:39:31.930604 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.930720 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:29678] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/cryo_project/.env"] [unique_id "amr_s5kA2-P0e5yhCnL_0AAAAAI"]
[Thu Jul 30 08:39:31.964904 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29680] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/css/.env"] [unique_id "amr_s6QRW2g6f2qydyUyRQAAADA"]
[Thu Jul 30 08:39:31.965022 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/css/.env"] [unique_id "amr_s6QRW2g6f2qydyUyRQAAADA"]
[Thu Jul 30 08:39:31.965337 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:31.965452 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/css/.env"] [unique_id "amr_s6QRW2g6f2qydyUyRQAAADA"]
[Thu Jul 30 08:39:32.000257 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29690] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/current/.env"] [unique_id "amr_s6lzm7G0Pp-9gn6qJQAAAEk"]
[Thu Jul 30 08:39:32.000409 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/.env"] [unique_id "amr_s6lzm7G0Pp-9gn6qJQAAAEk"]
[Thu Jul 30 08:39:32.000725 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.000834 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/.env"] [unique_id "amr_s6lzm7G0Pp-9gn6qJQAAAEk"]
[Thu Jul 30 08:39:32.038604 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29692] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/current/.env.bak"] [unique_id "amr_tMTyHJeh8MEeCqDR4gAAAEQ"]
[Thu Jul 30 08:39:32.038750 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/.env.bak"] [unique_id "amr_tMTyHJeh8MEeCqDR4gAAAEQ"]
[Thu Jul 30 08:39:32.039084 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.039185 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:29692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/.env.bak"] [unique_id "amr_tMTyHJeh8MEeCqDR4gAAAEQ"]
[Thu Jul 30 08:39:32.077159 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29700] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/current/.env.dev"] [unique_id "amr_tLwuC_UnL2keC2dw5AAAABE"]
[Thu Jul 30 08:39:32.077305 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/.env.dev"] [unique_id "amr_tLwuC_UnL2keC2dw5AAAABE"]
[Thu Jul 30 08:39:32.077620 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.077723 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:29700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/.env.dev"] [unique_id "amr_tLwuC_UnL2keC2dw5AAAABE"]
[Thu Jul 30 08:39:32.113189 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29706] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/current/.env.dist"] [unique_id "amr_tGs_XmDKii2MAYoLkwAAAAg"]
[Thu Jul 30 08:39:32.113394 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/.env.dist"] [unique_id "amr_tGs_XmDKii2MAYoLkwAAAAg"]
[Thu Jul 30 08:39:32.113869 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.114029 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/.env.dist"] [unique_id "amr_tGs_XmDKii2MAYoLkwAAAAg"]
[Thu Jul 30 08:39:32.150944 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/current/.env.local"] [unique_id "amr_tHiGnV0lYiYXbxD-hwAAACI"]
[Thu Jul 30 08:39:32.151080 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/.env.local"] [unique_id "amr_tHiGnV0lYiYXbxD-hwAAACI"]
[Thu Jul 30 08:39:32.151381 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.151484 2026] [security2:error] [pid 2411409:tid 2411409] [client 185.177.72.66:29716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/.env.local"] [unique_id "amr_tHiGnV0lYiYXbxD-hwAAACI"]
[Thu Jul 30 08:39:32.186610 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/current/.env.production"] [unique_id "amr_tD-G1VCKQzXMG6Ub0wAAACg"]
[Thu Jul 30 08:39:32.186761 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/.env.production"] [unique_id "amr_tD-G1VCKQzXMG6Ub0wAAACg"]
[Thu Jul 30 08:39:32.187061 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.187175 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/.env.production"] [unique_id "amr_tD-G1VCKQzXMG6Ub0wAAACg"]
[Thu Jul 30 08:39:32.222818 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29732] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/current/.env.staging"] [unique_id "amr_tBiCxDmIQaM3be7YGAAAACw"]
[Thu Jul 30 08:39:32.222952 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/.env.staging"] [unique_id "amr_tBiCxDmIQaM3be7YGAAAACw"]
[Thu Jul 30 08:39:32.223271 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.223379 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/.env.staging"] [unique_id "amr_tBiCxDmIQaM3be7YGAAAACw"]
[Thu Jul 30 08:39:32.259612 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.259634 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.293218 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.293241 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:29744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.332624 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.332642 2026] [core:error] [pid 2415778:tid 2415778] [client 185.177.72.66:29756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.366755 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.366775 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.401861 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.401882 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.443061 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.443091 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.479315 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.479342 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:29806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.515912 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:29808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.515930 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:29808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.556410 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:29822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.556429 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:29822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.593614 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.593638 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.629667 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.629685 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:29836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.666260 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:29850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.666281 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:29850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.703092 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.703109 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:29858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.740212 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.740229 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.782093 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.782116 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.818811 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.818830 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.855458 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.855475 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.891887 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.891906 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:29902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.926208 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:29918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.926227 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:29918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.966745 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:29924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:32.966777 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:29924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.001852 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.001874 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:29930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.038658 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:29932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.038678 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:29932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.073539 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.073558 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:29940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.112764 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.112786 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:29946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.152286 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.152307 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:29948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.190059 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.190094 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:29956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.226436 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:29970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.226467 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:29970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.260914 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:29982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.260937 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:29982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.277437 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.40:65280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:33.278058 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.40:65280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:33.295135 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:29986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.295156 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:29986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.331330 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.331351 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.366479 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.366500 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.404928 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:30024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.404948 2026] [core:error] [pid 2419665:tid 2419665] [client 185.177.72.66:30024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.442404 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.442435 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.488646 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.488668 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.523849 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30060] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/current/php.ini"] [unique_id "amr_tZDxY3fypotl7b9qjwAAAB4"]
[Thu Jul 30 08:39:33.524207 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/current/php.ini"] [unique_id "amr_tZDxY3fypotl7b9qjwAAAB4"]
[Thu Jul 30 08:39:33.524524 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.524645 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/current/php.ini"] [unique_id "amr_tZDxY3fypotl7b9qjwAAAB4"]
[Thu Jul 30 08:39:33.562136 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.562160 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.598426 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:30088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.598445 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:30088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.632897 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:30104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.632917 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:30104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.654433 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:6752] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/adm/php.ini"] [unique_id "amr_tS8b8gP_SKt2Q6y9RwAAAD4"]
[Thu Jul 30 08:39:33.654721 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:6752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/adm/php.ini"] [unique_id "amr_tS8b8gP_SKt2Q6y9RwAAAD4"]
[Thu Jul 30 08:39:33.654897 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:6752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_tS8b8gP_SKt2Q6y9RwAAAD4"]
[Thu Jul 30 08:39:33.673118 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.673136 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.713428 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.713447 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.754736 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.754756 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.792194 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:30156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.792212 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:30156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.830515 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.830535 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.865478 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.865496 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.902974 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.902990 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.940841 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:30204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.940869 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:30204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.975953 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:30206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:33.975973 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:30206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.009913 2026] [ssl:error] [pid 2428221:tid 2428221] (EAI 2)Name or service not known: [client 144.76.19.72:61884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:34.009942 2026] [ssl:error] [pid 2428221:tid 2428221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:34.014443 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:30220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.014469 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:30220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.049947 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.049966 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.064502 2026] [ssl:error] [pid 2411106:tid 2411106] (EAI 2)Name or service not known: [client 144.76.19.72:61900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:34.064521 2026] [ssl:error] [pid 2411106:tid 2411106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:34.088021 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.088042 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.125357 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.125380 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.161588 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.161616 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.196446 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:30278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.196466 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:30278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.214969 2026] [authz_core:error] [pid 2412474:tid 2412474] [client 57.141.0.62:48922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:34.215594 2026] [authz_core:error] [pid 2412474:tid 2412474] [client 57.141.0.62:48922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:34.230106 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30294] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/custom/.env"] [unique_id "amr_tte90y7TzMBvsyM2yQAAAC0"]
[Thu Jul 30 08:39:34.230236 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/custom/.env"] [unique_id "amr_tte90y7TzMBvsyM2yQAAAC0"]
[Thu Jul 30 08:39:34.230540 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.230653 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/custom/.env"] [unique_id "amr_tte90y7TzMBvsyM2yQAAAC0"]
[Thu Jul 30 08:39:34.267094 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:30296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.267125 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:30296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.301407 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:30310] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /customer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/customer/.git/config"] [unique_id "amr_ti8b8gP_SKt2Q6y9SQAAAD4"]
[Thu Jul 30 08:39:34.301551 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:30310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/customer/.git/config"] [unique_id "amr_ti8b8gP_SKt2Q6y9SQAAAD4"]
[Thu Jul 30 08:39:34.301867 2026] [core:error] [pid 2427701:tid 2427701] [client 185.177.72.66:30310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.301973 2026] [security2:error] [pid 2427701:tid 2427701] [client 185.177.72.66:30310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/customer/.git/config"] [unique_id "amr_ti8b8gP_SKt2Q6y9SQAAAD4"]
[Thu Jul 30 08:39:34.336790 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:30324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.336811 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:30324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.371730 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.371748 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.404585 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.404611 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:30342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.441061 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:30358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.441096 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:30358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.478483 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_thiCxDmIQaM3be7YHQAAACw"]
[Thu Jul 30 08:39:34.478786 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_thiCxDmIQaM3be7YHQAAACw"]
[Thu Jul 30 08:39:34.479102 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.479232 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_thiCxDmIQaM3be7YHQAAACw"]
[Thu Jul 30 08:39:34.512331 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30378] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/customer/api-config.ini"] [unique_id "amr_thpvfcvm04JnKtSWBgAAAA8"]
[Thu Jul 30 08:39:34.512687 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/customer/api-config.ini"] [unique_id "amr_thpvfcvm04JnKtSWBgAAAA8"]
[Thu Jul 30 08:39:34.512996 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.513113 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/customer/api-config.ini"] [unique_id "amr_thpvfcvm04JnKtSWBgAAAA8"]
[Thu Jul 30 08:39:34.546871 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.546891 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.583287 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:30410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.583305 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:30410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.621729 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/customer/laravel.log"] [unique_id "amr_tte90y7TzMBvsyM2ygAAAC0"]
[Thu Jul 30 08:39:34.622055 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/customer/laravel.log"] [unique_id "amr_tte90y7TzMBvsyM2ygAAAC0"]
[Thu Jul 30 08:39:34.622382 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.622497 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/customer/laravel.log"] [unique_id "amr_tte90y7TzMBvsyM2ygAAAC0"]
[Thu Jul 30 08:39:34.661013 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.661033 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.697045 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:30438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.697064 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:30438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.733644 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30450] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/customer/web.config"] [unique_id "amr_tpDxY3fypotl7b9qkgAAAB4"]
[Thu Jul 30 08:39:34.733881 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30450] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /customer/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/customer/web.config"] [unique_id "amr_tpDxY3fypotl7b9qkgAAAB4"]
[Thu Jul 30 08:39:34.733988 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/customer/web.config"] [unique_id "amr_tpDxY3fypotl7b9qkgAAAB4"]
[Thu Jul 30 08:39:34.734314 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.734415 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:30450] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/customer/web.config"] [unique_id "amr_tpDxY3fypotl7b9qkgAAAB4"]
[Thu Jul 30 08:39:34.768984 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:30458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/d/.env"] [unique_id "amr_ttGWH5xbt04huX6WYAAAABA"]
[Thu Jul 30 08:39:34.769130 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:30458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/d/.env"] [unique_id "amr_ttGWH5xbt04huX6WYAAAABA"]
[Thu Jul 30 08:39:34.769443 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:30458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.769583 2026] [security2:error] [pid 2420087:tid 2420087] [client 185.177.72.66:30458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/d/.env"] [unique_id "amr_ttGWH5xbt04huX6WYAAAABA"]
[Thu Jul 30 08:39:34.807374 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30470] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dashboard/.env"] [unique_id "amr_tiux7rlqiNnQVD3IzwAAACQ"]
[Thu Jul 30 08:39:34.807505 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dashboard/.env"] [unique_id "amr_tiux7rlqiNnQVD3IzwAAACQ"]
[Thu Jul 30 08:39:34.807830 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.807935 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dashboard/.env"] [unique_id "amr_tiux7rlqiNnQVD3IzwAAACQ"]
[Thu Jul 30 08:39:34.842945 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:30486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.842980 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:30486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.878346 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30498] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dashboard/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dashboard/.git/config"] [unique_id "amr_thiCxDmIQaM3be7YHgAAACw"]
[Thu Jul 30 08:39:34.878515 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dashboard/.git/config"] [unique_id "amr_thiCxDmIQaM3be7YHgAAACw"]
[Thu Jul 30 08:39:34.878834 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.878940 2026] [security2:error] [pid 2423766:tid 2423766] [client 185.177.72.66:30498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dashboard/.git/config"] [unique_id "amr_thiCxDmIQaM3be7YHgAAACw"]
[Thu Jul 30 08:39:34.885320 2026] [access_compat:error] [pid 2426805:tid 2426805] [client 106.215.157.145:5935] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:34.915438 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.915458 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.950310 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.950329 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.986146 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:30530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:34.986169 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:30530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.023682 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:30542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.023715 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:30542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.058212 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30548] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_t9e90y7TzMBvsyM2ywAAAC0"]
[Thu Jul 30 08:39:35.058522 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_t9e90y7TzMBvsyM2ywAAAC0"]
[Thu Jul 30 08:39:35.058865 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.058982 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_t9e90y7TzMBvsyM2ywAAAC0"]
[Thu Jul 30 08:39:35.096400 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.096422 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.131300 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:30562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.131322 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:30562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.165917 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:30572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.165938 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:30572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.202055 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:30586] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dashboard/api-config.ini"] [unique_id "amr_t6CuPSoE0uFFzriA-gAAABY"]
[Thu Jul 30 08:39:35.202371 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:30586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dashboard/api-config.ini"] [unique_id "amr_t6CuPSoE0uFFzriA-gAAABY"]
[Thu Jul 30 08:39:35.202695 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:30586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.202803 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:30586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dashboard/api-config.ini"] [unique_id "amr_t6CuPSoE0uFFzriA-gAAABY"]
[Thu Jul 30 08:39:35.239120 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:30594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.239141 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:30594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.273593 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.273624 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:30604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.308593 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:30606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.308622 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:30606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.345360 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.345383 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:30622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.370719 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:18170] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/settings.inc"] [unique_id "amr_t-WvknE5emN3ObPdUwAAACc"]
[Thu Jul 30 08:39:35.371007 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:18170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/settings.inc"] [unique_id "amr_t-WvknE5emN3ObPdUwAAACc"]
[Thu Jul 30 08:39:35.371126 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:18170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/settings.inc"] [unique_id "amr_t-WvknE5emN3ObPdUwAAACc"]
[Thu Jul 30 08:39:35.381506 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.381977 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:30626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.418754 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.418774 2026] [core:error] [pid 2422886:tid 2422886] [client 185.177.72.66:30636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.454792 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:30652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.454811 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:30652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.490007 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.490026 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:30654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.522758 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dashboard/laravel.log"] [unique_id "amr_t8TyHJeh8MEeCqDR5QAAAEQ"]
[Thu Jul 30 08:39:35.523094 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dashboard/laravel.log"] [unique_id "amr_t8TyHJeh8MEeCqDR5QAAAEQ"]
[Thu Jul 30 08:39:35.523412 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.523519 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:30668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dashboard/laravel.log"] [unique_id "amr_t8TyHJeh8MEeCqDR5QAAAEQ"]
[Thu Jul 30 08:39:35.559445 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:30684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.559464 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:30684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.594184 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.594202 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.628037 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.628060 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.666311 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.666330 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.707329 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.707348 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.741803 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:14172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.741850 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:14172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.774620 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.774642 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.809169 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.809188 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.844088 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.844107 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.880159 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.880178 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.914284 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dashboard/web.config"] [unique_id "amr_t5DxY3fypotl7b9qlQAAAB4"]
[Thu Jul 30 08:39:35.914481 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14194] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dashboard/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dashboard/web.config"] [unique_id "amr_t5DxY3fypotl7b9qlQAAAB4"]
[Thu Jul 30 08:39:35.914609 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dashboard/web.config"] [unique_id "amr_t5DxY3fypotl7b9qlQAAAB4"]
[Thu Jul 30 08:39:35.914915 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.915013 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dashboard/web.config"] [unique_id "amr_t5DxY3fypotl7b9qlQAAAB4"]
[Thu Jul 30 08:39:35.949626 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.949643 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.984991 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:35.985006 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.021358 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.021376 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.058167 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.058186 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.093139 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.093159 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.127277 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.127296 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.162319 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dataset/.env"] [unique_id "amr_uC7K7U7WHMW7oLBi7QAAAEA"]
[Thu Jul 30 08:39:36.162434 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dataset/.env"] [unique_id "amr_uC7K7U7WHMW7oLBi7QAAAEA"]
[Thu Jul 30 08:39:36.162742 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.162847 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dataset/.env"] [unique_id "amr_uC7K7U7WHMW7oLBi7QAAAEA"]
[Thu Jul 30 08:39:36.196649 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14288] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dataset1/.env"] [unique_id "amr_uMTyHJeh8MEeCqDR5wAAAEQ"]
[Thu Jul 30 08:39:36.196776 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14288] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dataset1/.env"] [unique_id "amr_uMTyHJeh8MEeCqDR5wAAAEQ"]
[Thu Jul 30 08:39:36.197086 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.197189 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14288] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dataset1/.env"] [unique_id "amr_uMTyHJeh8MEeCqDR5wAAAEQ"]
[Thu Jul 30 08:39:36.233437 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dataset2/.env"] [unique_id "amr_uNe90y7TzMBvsyM2zgAAAC0"]
[Thu Jul 30 08:39:36.233557 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dataset2/.env"] [unique_id "amr_uNe90y7TzMBvsyM2zgAAAC0"]
[Thu Jul 30 08:39:36.233870 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.233975 2026] [security2:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dataset2/.env"] [unique_id "amr_uNe90y7TzMBvsyM2zgAAAC0"]
[Thu Jul 30 08:39:36.268633 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.268656 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.303797 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.303816 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.337819 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14328] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/debug.inc"] [unique_id "amr_uJDxY3fypotl7b9qlgAAAB4"]
[Thu Jul 30 08:39:36.338130 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/debug.inc"] [unique_id "amr_uJDxY3fypotl7b9qlgAAAB4"]
[Thu Jul 30 08:39:36.338441 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.338540 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/debug.inc"] [unique_id "amr_uJDxY3fypotl7b9qlgAAAB4"]
[Thu Jul 30 08:39:36.378011 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.378030 2026] [core:error] [pid 2411106:tid 2411106] [client 185.177.72.66:14330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.415817 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.415836 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.453183 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.453201 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.491422 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.491440 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.526329 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.526346 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.562014 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.562032 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.579974 2026] [core:crit] [pid 2428312:tid 2428312] (13)Permission denied: [client 66.132.172.187:62680] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 08:39:36.597850 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.597866 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.633750 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:14378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.633766 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:14378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.672271 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.672292 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:14388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.708285 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.708306 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.744698 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.744717 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.777425 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.777444 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.813915 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.813945 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.849612 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.849631 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.887181 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.887199 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.924256 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.924275 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.961023 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14460] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/default/.env"] [unique_id "amr_uCgDZvJnuOkhDtU21AAAACU"]
[Thu Jul 30 08:39:36.961186 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14460] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/default/.env"] [unique_id "amr_uCgDZvJnuOkhDtU21AAAACU"]
[Thu Jul 30 08:39:36.961488 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.961604 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14460] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/default/.env"] [unique_id "amr_uCgDZvJnuOkhDtU21AAAACU"]
[Thu Jul 30 08:39:36.997595 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14464] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/default/.env.bak"] [unique_id "amr_uIFx8Bx4ITcCEtgnwAAAADc"]
[Thu Jul 30 08:39:36.997811 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/default/.env.bak"] [unique_id "amr_uIFx8Bx4ITcCEtgnwAAAADc"]
[Thu Jul 30 08:39:36.998178 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:36.998297 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/default/.env.bak"] [unique_id "amr_uIFx8Bx4ITcCEtgnwAAAADc"]
[Thu Jul 30 08:39:37.034158 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14468] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/default/.env.dev"] [unique_id "amr_uZDxY3fypotl7b9qmAAAAB4"]
[Thu Jul 30 08:39:37.034289 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14468] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/default/.env.dev"] [unique_id "amr_uZDxY3fypotl7b9qmAAAAB4"]
[Thu Jul 30 08:39:37.034600 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.034710 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14468] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/default/.env.dev"] [unique_id "amr_uZDxY3fypotl7b9qmAAAAB4"]
[Thu Jul 30 08:39:37.069598 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14472] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/default/.env.dist"] [unique_id "amr_ualzm7G0Pp-9gn6qLQAAAEk"]
[Thu Jul 30 08:39:37.069724 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14472] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/default/.env.dist"] [unique_id "amr_ualzm7G0Pp-9gn6qLQAAAEk"]
[Thu Jul 30 08:39:37.070024 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.070146 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:14472] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/default/.env.dist"] [unique_id "amr_ualzm7G0Pp-9gn6qLQAAAEk"]
[Thu Jul 30 08:39:37.103247 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/default/.env.local"] [unique_id "amr_uSux7rlqiNnQVD3I1QAAACQ"]
[Thu Jul 30 08:39:37.103409 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/default/.env.local"] [unique_id "amr_uSux7rlqiNnQVD3I1QAAACQ"]
[Thu Jul 30 08:39:37.103740 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.103844 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/default/.env.local"] [unique_id "amr_uSux7rlqiNnQVD3I1QAAACQ"]
[Thu Jul 30 08:39:37.137881 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.137907 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.149049 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:61904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:37.149094 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:37.163882 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:18170] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/web.config"] [unique_id "amr_ueWvknE5emN3ObPddgAAACc"]
[Thu Jul 30 08:39:37.164109 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:18170] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /config/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/web.config"] [unique_id "amr_ueWvknE5emN3ObPddgAAACc"]
[Thu Jul 30 08:39:37.164262 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:18170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/web.config"] [unique_id "amr_ueWvknE5emN3ObPddgAAACc"]
[Thu Jul 30 08:39:37.164364 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.17:18170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/config/web.config"] [unique_id "amr_ueWvknE5emN3ObPddgAAACc"]
[Thu Jul 30 08:39:37.175263 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.175283 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.197672 2026] [authz_core:error] [pid 2419960:tid 2419960] [client 57.141.0.49:41986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:37.198294 2026] [authz_core:error] [pid 2419960:tid 2419960] [client 57.141.0.49:41986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:37.200831 2026] [ssl:error] [pid 2412474:tid 2412474] (EAI 2)Name or service not known: [client 144.76.19.72:61908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:37.200849 2026] [ssl:error] [pid 2412474:tid 2412474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:37.210952 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.210968 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.246671 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.246692 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.283419 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:14510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.283453 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:14510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.319138 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.319156 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.356010 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.356027 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.399272 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.399288 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.406747 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /configuration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/.env"] [unique_id "amr_uaQRW2g6f2qydyUyVAAAADA"]
[Thu Jul 30 08:39:37.406868 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/.env"] [unique_id "amr_uaQRW2g6f2qydyUyVAAAADA"]
[Thu Jul 30 08:39:37.406969 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/.env"] [unique_id "amr_uaQRW2g6f2qydyUyVAAAADA"]
[Thu Jul 30 08:39:37.433383 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.433398 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.473184 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.473203 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.476000 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /configuration/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/.git/config"] [unique_id "amr_uaQRW2g6f2qydyUyVgAAADA"]
[Thu Jul 30 08:39:37.476134 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/.git/config"] [unique_id "amr_uaQRW2g6f2qydyUyVgAAADA"]
[Thu Jul 30 08:39:37.476237 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/.git/config"] [unique_id "amr_uaQRW2g6f2qydyUyVgAAADA"]
[Thu Jul 30 08:39:37.510159 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.510178 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.544891 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.544909 2026] [core:error] [pid 2420087:tid 2420087] [client 185.177.72.66:14570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.581502 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.581520 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.617518 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.617537 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.651780 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.651798 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:14590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.687140 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.687164 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:14596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.707883 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_uaQRW2g6f2qydyUyWwAAADA"]
[Thu Jul 30 08:39:37.708239 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_uaQRW2g6f2qydyUyWwAAADA"]
[Thu Jul 30 08:39:37.708346 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amr_uaQRW2g6f2qydyUyWwAAADA"]
[Thu Jul 30 08:39:37.721748 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.721780 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.726510 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/api-config.ini"] [unique_id "amr_uaQRW2g6f2qydyUyXAAAADA"]
[Thu Jul 30 08:39:37.726842 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/api-config.ini"] [unique_id "amr_uaQRW2g6f2qydyUyXAAAADA"]
[Thu Jul 30 08:39:37.726944 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/api-config.ini"] [unique_id "amr_uaQRW2g6f2qydyUyXAAAADA"]
[Thu Jul 30 08:39:37.758869 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.758887 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.793721 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.793741 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.827835 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.827853 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.850326 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/laravel.log"] [unique_id "amr_uaQRW2g6f2qydyUyXwAAADA"]
[Thu Jul 30 08:39:37.850640 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/laravel.log"] [unique_id "amr_uaQRW2g6f2qydyUyXwAAADA"]
[Thu Jul 30 08:39:37.850741 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/laravel.log"] [unique_id "amr_uaQRW2g6f2qydyUyXwAAADA"]
[Thu Jul 30 08:39:37.865325 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.865344 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.900327 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.900352 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.935820 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.935843 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.972929 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.972959 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:37.976996 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/web.config"] [unique_id "amr_uaQRW2g6f2qydyUyYgAAADA"]
[Thu Jul 30 08:39:37.977234 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /configuration/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/web.config"] [unique_id "amr_uaQRW2g6f2qydyUyYgAAADA"]
[Thu Jul 30 08:39:37.977409 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/web.config"] [unique_id "amr_uaQRW2g6f2qydyUyYgAAADA"]
[Thu Jul 30 08:39:37.977516 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/configuration/web.config"] [unique_id "amr_uaQRW2g6f2qydyUyYgAAADA"]
[Thu Jul 30 08:39:38.010209 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.010244 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.045934 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.045956 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.080943 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.080967 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.117873 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.117903 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.153694 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.153721 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.187962 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.187984 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.223334 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.223367 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.257221 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.257254 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.295293 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.295324 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.330674 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.330705 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.366302 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14778] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/default/php.ini"] [unique_id "amr_uiux7rlqiNnQVD3I2gAAACQ"]
[Thu Jul 30 08:39:38.366683 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/default/php.ini"] [unique_id "amr_uiux7rlqiNnQVD3I2gAAACQ"]
[Thu Jul 30 08:39:38.366997 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.367120 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/default/php.ini"] [unique_id "amr_uiux7rlqiNnQVD3I2gAAACQ"]
[Thu Jul 30 08:39:38.372208 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/.env"] [unique_id "amr_uqQRW2g6f2qydyUyagAAADA"]
[Thu Jul 30 08:39:38.372345 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/.env"] [unique_id "amr_uqQRW2g6f2qydyUyagAAADA"]
[Thu Jul 30 08:39:38.372448 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/.env"] [unique_id "amr_uqQRW2g6f2qydyUyagAAADA"]
[Thu Jul 30 08:39:38.404537 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.404554 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.438894 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.438913 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.444469 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /conta/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/.git/config"] [unique_id "amr_uqQRW2g6f2qydyUybAAAADA"]
[Thu Jul 30 08:39:38.444594 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/.git/config"] [unique_id "amr_uqQRW2g6f2qydyUybAAAADA"]
[Thu Jul 30 08:39:38.444689 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/.git/config"] [unique_id "amr_uqQRW2g6f2qydyUybAAAADA"]
[Thu Jul 30 08:39:38.473050 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.473084 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.511341 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.511359 2026] [core:error] [pid 2420712:tid 2420712] [client 185.177.72.66:14804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.547710 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.547737 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.561532 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 57.141.0.32:57100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:38.562239 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 57.141.0.32:57100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:38.583543 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.583574 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.617818 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.617837 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.645917 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.7:60682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:38.646536 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.7:60682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:38.654871 2026] [core:error] [pid 2423797:tid 2423797] (13)Permission denied: [client 216.73.216.199:16451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/key_jar/objects_partial
[Thu Jul 30 08:39:38.656246 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.656262 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.687233 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_uqQRW2g6f2qydyUycQAAADA"]
[Thu Jul 30 08:39:38.687514 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_uqQRW2g6f2qydyUycQAAADA"]
[Thu Jul 30 08:39:38.687620 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amr_uqQRW2g6f2qydyUycQAAADA"]
[Thu Jul 30 08:39:38.693012 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.693030 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:14840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.705476 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/api-config.ini"] [unique_id "amr_uqQRW2g6f2qydyUycgAAADA"]
[Thu Jul 30 08:39:38.705787 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/api-config.ini"] [unique_id "amr_uqQRW2g6f2qydyUycgAAADA"]
[Thu Jul 30 08:39:38.705885 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/api-config.ini"] [unique_id "amr_uqQRW2g6f2qydyUycgAAADA"]
[Thu Jul 30 08:39:38.730631 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.730659 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.765744 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.765768 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.800310 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.800336 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.838424 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.838444 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.857644 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/laravel.log"] [unique_id "amr_uqQRW2g6f2qydyUydQAAADA"]
[Thu Jul 30 08:39:38.858048 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/laravel.log"] [unique_id "amr_uqQRW2g6f2qydyUydQAAADA"]
[Thu Jul 30 08:39:38.858167 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/laravel.log"] [unique_id "amr_uqQRW2g6f2qydyUydQAAADA"]
[Thu Jul 30 08:39:38.875690 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.875709 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.909332 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.909350 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.945347 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.945367 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:14922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.980745 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.980775 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:14924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:38.985888 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/web.config"] [unique_id "amr_uqQRW2g6f2qydyUyeAAAADA"]
[Thu Jul 30 08:39:38.986104 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /conta/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/web.config"] [unique_id "amr_uqQRW2g6f2qydyUyeAAAADA"]
[Thu Jul 30 08:39:38.986218 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/web.config"] [unique_id "amr_uqQRW2g6f2qydyUyeAAAADA"]
[Thu Jul 30 08:39:38.986315 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/conta/web.config"] [unique_id "amr_uqQRW2g6f2qydyUyeAAAADA"]
[Thu Jul 30 08:39:39.004594 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/content/.env"] [unique_id "amr_u6QRW2g6f2qydyUyeQAAADA"]
[Thu Jul 30 08:39:39.004725 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/content/.env"] [unique_id "amr_u6QRW2g6f2qydyUyeQAAADA"]
[Thu Jul 30 08:39:39.004829 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/content/.env"] [unique_id "amr_u6QRW2g6f2qydyUyeQAAADA"]
[Thu Jul 30 08:39:39.014787 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.014806 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:14934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.050810 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14938] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/delivery/.env"] [unique_id "amr_u40p-nZdMLHTbfTM4wAAAA4"]
[Thu Jul 30 08:39:39.050928 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/delivery/.env"] [unique_id "amr_u40p-nZdMLHTbfTM4wAAAA4"]
[Thu Jul 30 08:39:39.051250 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.051352 2026] [security2:error] [pid 2423145:tid 2423145] [client 185.177.72.66:14938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/delivery/.env"] [unique_id "amr_u40p-nZdMLHTbfTM4wAAAA4"]
[Thu Jul 30 08:39:39.085220 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.085240 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:14950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.119228 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14966] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo-app/.env"] [unique_id "amr_u8TyHJeh8MEeCqDR7gAAAEQ"]
[Thu Jul 30 08:39:39.119351 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo-app/.env"] [unique_id "amr_u8TyHJeh8MEeCqDR7gAAAEQ"]
[Thu Jul 30 08:39:39.119666 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.119780 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:14966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo-app/.env"] [unique_id "amr_u8TyHJeh8MEeCqDR7gAAAEQ"]
[Thu Jul 30 08:39:39.155272 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo/.env"] [unique_id "amr_u8sDPUni1EbX-qViOgAAADg"]
[Thu Jul 30 08:39:39.155414 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/.env"] [unique_id "amr_u8sDPUni1EbX-qViOgAAADg"]
[Thu Jul 30 08:39:39.155729 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.155831 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:14968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/.env"] [unique_id "amr_u8sDPUni1EbX-qViOgAAADg"]
[Thu Jul 30 08:39:39.188275 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14984] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo/.env.bak"] [unique_id "amr_uygDZvJnuOkhDtU22wAAACU"]
[Thu Jul 30 08:39:39.188415 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/.env.bak"] [unique_id "amr_uygDZvJnuOkhDtU22wAAACU"]
[Thu Jul 30 08:39:39.188731 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.188936 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:14984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/.env.bak"] [unique_id "amr_uygDZvJnuOkhDtU22wAAACU"]
[Thu Jul 30 08:39:39.221577 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14986] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo/.env.dev"] [unique_id "amr_u4Fx8Bx4ITcCEtgnyAAAADc"]
[Thu Jul 30 08:39:39.221728 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/.env.dev"] [unique_id "amr_u4Fx8Bx4ITcCEtgnyAAAADc"]
[Thu Jul 30 08:39:39.222027 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.222141 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:14986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/.env.dev"] [unique_id "amr_u4Fx8Bx4ITcCEtgnyAAAADc"]
[Thu Jul 30 08:39:39.259847 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo/.env.dist"] [unique_id "amr_uy7K7U7WHMW7oLBi9wAAAEA"]
[Thu Jul 30 08:39:39.259970 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/.env.dist"] [unique_id "amr_uy7K7U7WHMW7oLBi9wAAAEA"]
[Thu Jul 30 08:39:39.260289 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.260401 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/.env.dist"] [unique_id "amr_uy7K7U7WHMW7oLBi9wAAAEA"]
[Thu Jul 30 08:39:39.295712 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/core/persistence/.env"] [unique_id "amr_u6QRW2g6f2qydyUyfwAAADA"]
[Thu Jul 30 08:39:39.295915 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/core/persistence/.env"] [unique_id "amr_u6QRW2g6f2qydyUyfwAAADA"]
[Thu Jul 30 08:39:39.296029 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/core/persistence/.env"] [unique_id "amr_u6QRW2g6f2qydyUyfwAAADA"]
[Thu Jul 30 08:39:39.296047 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo/.env.local"] [unique_id "amr_u-eliGAK7HeY9rNx_wAAAAE"]
[Thu Jul 30 08:39:39.296216 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/.env.local"] [unique_id "amr_u-eliGAK7HeY9rNx_wAAAAE"]
[Thu Jul 30 08:39:39.296520 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.296644 2026] [security2:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/.env.local"] [unique_id "amr_u-eliGAK7HeY9rNx_wAAAAE"]
[Thu Jul 30 08:39:39.331172 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo/.env.production"] [unique_id "amr_uwvbpUeckUfXmp7bUwAAAEc"]
[Thu Jul 30 08:39:39.331323 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/.env.production"] [unique_id "amr_uwvbpUeckUfXmp7bUwAAAEc"]
[Thu Jul 30 08:39:39.331641 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.331753 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/.env.production"] [unique_id "amr_uwvbpUeckUfXmp7bUwAAAEc"]
[Thu Jul 30 08:39:39.368108 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15026] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/demo/.env.staging"] [unique_id "amr_u0AEOnquTlmZJ4R_UgAAAC8"]
[Thu Jul 30 08:39:39.368260 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15026] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/.env.staging"] [unique_id "amr_u0AEOnquTlmZJ4R_UgAAAC8"]
[Thu Jul 30 08:39:39.368586 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.368694 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15026] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/.env.staging"] [unique_id "amr_u0AEOnquTlmZJ4R_UgAAAC8"]
[Thu Jul 30 08:39:39.402142 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.402161 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.439185 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:15036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.439205 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:15036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.475752 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.475772 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.476305 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_u6QRW2g6f2qydyUygwAAADA"]
[Thu Jul 30 08:39:39.476492 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_u6QRW2g6f2qydyUygwAAADA"]
[Thu Jul 30 08:39:39.476638 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amr_u6QRW2g6f2qydyUygwAAADA"]
[Thu Jul 30 08:39:39.495236 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/counterblockd/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhAAAADA"]
[Thu Jul 30 08:39:39.495424 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/counterblockd/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhAAAADA"]
[Thu Jul 30 08:39:39.495540 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/counterblockd/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhAAAADA"]
[Thu Jul 30 08:39:39.512211 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.512231 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.514367 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/counterwallet/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhQAAADA"]
[Thu Jul 30 08:39:39.514555 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/counterwallet/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhQAAADA"]
[Thu Jul 30 08:39:39.514696 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/counterwallet/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhQAAADA"]
[Thu Jul 30 08:39:39.533223 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cp/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhgAAADA"]
[Thu Jul 30 08:39:39.533394 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cp/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhgAAADA"]
[Thu Jul 30 08:39:39.533531 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cp/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhgAAADA"]
[Thu Jul 30 08:39:39.546954 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.546977 2026] [core:error] [pid 2424973:tid 2424973] [client 185.177.72.66:15056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.551999 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhwAAADA"]
[Thu Jul 30 08:39:39.552189 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhwAAADA"]
[Thu Jul 30 08:39:39.552330 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env"] [unique_id "amr_u6QRW2g6f2qydyUyhwAAADA"]
[Thu Jul 30 08:39:39.570634 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.bak"] [unique_id "amr_u6QRW2g6f2qydyUyiAAAADA"]
[Thu Jul 30 08:39:39.570804 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.bak"] [unique_id "amr_u6QRW2g6f2qydyUyiAAAADA"]
[Thu Jul 30 08:39:39.570929 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.bak"] [unique_id "amr_u6QRW2g6f2qydyUyiAAAADA"]
[Thu Jul 30 08:39:39.581291 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.581320 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.589336 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.dev"] [unique_id "amr_u6QRW2g6f2qydyUyiQAAADA"]
[Thu Jul 30 08:39:39.589513 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.dev"] [unique_id "amr_u6QRW2g6f2qydyUyiQAAADA"]
[Thu Jul 30 08:39:39.589640 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.dev"] [unique_id "amr_u6QRW2g6f2qydyUyiQAAADA"]
[Thu Jul 30 08:39:39.608340 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.dist"] [unique_id "amr_u6QRW2g6f2qydyUyigAAADA"]
[Thu Jul 30 08:39:39.608503 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.dist"] [unique_id "amr_u6QRW2g6f2qydyUyigAAADA"]
[Thu Jul 30 08:39:39.608632 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.dist"] [unique_id "amr_u6QRW2g6f2qydyUyigAAADA"]
[Thu Jul 30 08:39:39.617409 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.617430 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.628280 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.local"] [unique_id "amr_u6QRW2g6f2qydyUyiwAAADA"]
[Thu Jul 30 08:39:39.628444 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.local"] [unique_id "amr_u6QRW2g6f2qydyUyiwAAADA"]
[Thu Jul 30 08:39:39.628552 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.local"] [unique_id "amr_u6QRW2g6f2qydyUyiwAAADA"]
[Thu Jul 30 08:39:39.647189 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.production"] [unique_id "amr_u6QRW2g6f2qydyUyjAAAADA"]
[Thu Jul 30 08:39:39.647361 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.production"] [unique_id "amr_u6QRW2g6f2qydyUyjAAAADA"]
[Thu Jul 30 08:39:39.647507 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.production"] [unique_id "amr_u6QRW2g6f2qydyUyjAAAADA"]
[Thu Jul 30 08:39:39.653525 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.653546 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.665916 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.staging"] [unique_id "amr_u6QRW2g6f2qydyUyjQAAADA"]
[Thu Jul 30 08:39:39.666120 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.staging"] [unique_id "amr_u6QRW2g6f2qydyUyjQAAADA"]
[Thu Jul 30 08:39:39.666263 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/.env.staging"] [unique_id "amr_u6QRW2g6f2qydyUyjQAAADA"]
[Thu Jul 30 08:39:39.690183 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:15100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.690210 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:15100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.724770 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.724789 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.759322 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.759341 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.795719 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:15118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.795737 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:15118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.830841 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.830858 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.859355 2026] [core:error] [pid 2423797:tid 2423797] (13)Permission denied: [client 216.73.216.199:16451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/object_size
[Thu Jul 30 08:39:39.866034 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.866049 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.903336 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.903353 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.940195 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:15144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.940211 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:15144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.973353 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:39.973402 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.003269 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37216] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin-app/.env"] [unique_id "amr_vCgDZvJnuOkhDtU23gAAACU"]
[Thu Jul 30 08:39:40.003391 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin-app/.env"] [unique_id "amr_vCgDZvJnuOkhDtU23gAAACU"]
[Thu Jul 30 08:39:40.003567 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vCgDZvJnuOkhDtU23gAAACU"]
[Thu Jul 30 08:39:40.011711 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.011730 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:15160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.047325 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:15166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.047353 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:15166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.083738 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.083757 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.119713 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.119731 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.155995 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.156013 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.190971 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.190989 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.228867 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.228884 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.257085 2026] [ssl:error] [pid 2423145:tid 2423145] (EAI 2)Name or service not known: [client 144.76.19.72:40786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:40.257102 2026] [ssl:error] [pid 2423145:tid 2423145] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:40.258843 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:37224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.bak"] [unique_id "amr_vC7K7U7WHMW7oLBi-wAAAEA"]
[Thu Jul 30 08:39:40.258975 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:37224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.bak"] [unique_id "amr_vC7K7U7WHMW7oLBi-wAAAEA"]
[Thu Jul 30 08:39:40.259151 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:37224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vC7K7U7WHMW7oLBi-wAAAEA"]
[Thu Jul 30 08:39:40.264375 2026] [authz_core:error] [pid 2428312:tid 2428312] [client 66.249.66.33:47155] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:39:40.266042 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.266059 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.267091 2026] [authz_core:error] [pid 2428312:tid 2428312] [client 66.249.66.33:47155] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:39:40.301446 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.301470 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.312463 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:40798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:40.312481 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:40.336163 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.336180 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.373268 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.373286 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:15266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.411630 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.411648 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.448907 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.448926 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.483747 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.483766 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.526327 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:15284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.526350 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:15284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.559618 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.559637 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.592268 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.592297 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.628159 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:15304] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/demo/php.ini"] [unique_id "amr_vNuBIW7-_o7ZAhSuQAAAADk"]
[Thu Jul 30 08:39:40.628465 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:15304] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/demo/php.ini"] [unique_id "amr_vNuBIW7-_o7ZAhSuQAAAADk"]
[Thu Jul 30 08:39:40.628777 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:15304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.628901 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:15304] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/demo/php.ini"] [unique_id "amr_vNuBIW7-_o7ZAhSuQAAAADk"]
[Thu Jul 30 08:39:40.640515 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:37230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.dev"] [unique_id "amr_vEAEOnquTlmZJ4R_WQAAAC8"]
[Thu Jul 30 08:39:40.640652 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:37230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.dev"] [unique_id "amr_vEAEOnquTlmZJ4R_WQAAAC8"]
[Thu Jul 30 08:39:40.640836 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:37230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vEAEOnquTlmZJ4R_WQAAAC8"]
[Thu Jul 30 08:39:40.664388 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.664407 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.701443 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.701461 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.737223 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:15326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.737243 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:15326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.773216 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.773244 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.806456 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.806477 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.839305 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:15346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.839333 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:15346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.872886 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.872910 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.908162 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:15366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.908192 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:15366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.922841 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.dist"] [unique_id "amr_vCgDZvJnuOkhDtU24gAAACU"]
[Thu Jul 30 08:39:40.923001 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.dist"] [unique_id "amr_vCgDZvJnuOkhDtU24gAAACU"]
[Thu Jul 30 08:39:40.923209 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vCgDZvJnuOkhDtU24gAAACU"]
[Thu Jul 30 08:39:40.944644 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:15372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.944667 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:15372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.982816 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:40.982843 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.019158 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.019182 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.055619 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:15400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.055641 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:15400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.090635 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.090659 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.125144 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:15422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.125167 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:15422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.162293 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.162322 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.168492 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.local"] [unique_id "amr_vSgDZvJnuOkhDtU24wAAACU"]
[Thu Jul 30 08:39:41.168661 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.local"] [unique_id "amr_vSgDZvJnuOkhDtU24wAAACU"]
[Thu Jul 30 08:39:41.168836 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:37238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vSgDZvJnuOkhDtU24wAAACU"]
[Thu Jul 30 08:39:41.198023 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.198042 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.212098 2026] [access_compat:error] [pid 2426805:tid 2426805] [client 106.215.157.145:30692] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:41.236324 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.236347 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.271493 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:15452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.271512 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:15452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.306516 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.306537 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.343639 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15460] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deploy/.env"] [unique_id "amr_veWvknE5emN3ObPdigAAACc"]
[Thu Jul 30 08:39:41.343790 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15460] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deploy/.env"] [unique_id "amr_veWvknE5emN3ObPdigAAACc"]
[Thu Jul 30 08:39:41.344120 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.344245 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15460] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deploy/.env"] [unique_id "amr_veWvknE5emN3ObPdigAAACc"]
[Thu Jul 30 08:39:41.380764 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deploy/.env.bak"] [unique_id "amr_vSgDZvJnuOkhDtU25AAAACU"]
[Thu Jul 30 08:39:41.380887 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deploy/.env.bak"] [unique_id "amr_vSgDZvJnuOkhDtU25AAAACU"]
[Thu Jul 30 08:39:41.381199 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.381322 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deploy/.env.bak"] [unique_id "amr_vSgDZvJnuOkhDtU25AAAACU"]
[Thu Jul 30 08:39:41.417365 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:37244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.production"] [unique_id "amr_vX50CufHvaci0qvl0gAAAEE"]
[Thu Jul 30 08:39:41.417476 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15480] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deploy/.env.dev"] [unique_id "amr_vUAEOnquTlmZJ4R_XQAAAC8"]
[Thu Jul 30 08:39:41.417538 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:37244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.production"] [unique_id "amr_vX50CufHvaci0qvl0gAAAEE"]
[Thu Jul 30 08:39:41.417619 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deploy/.env.dev"] [unique_id "amr_vUAEOnquTlmZJ4R_XQAAAC8"]
[Thu Jul 30 08:39:41.417729 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:37244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vX50CufHvaci0qvl0gAAAEE"]
[Thu Jul 30 08:39:41.417929 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.418031 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deploy/.env.dev"] [unique_id "amr_vUAEOnquTlmZJ4R_XQAAAC8"]
[Thu Jul 30 08:39:41.453515 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deploy/.env.dist"] [unique_id "amr_vSux7rlqiNnQVD3I4wAAACQ"]
[Thu Jul 30 08:39:41.453693 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deploy/.env.dist"] [unique_id "amr_vSux7rlqiNnQVD3I4wAAACQ"]
[Thu Jul 30 08:39:41.453999 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.454118 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deploy/.env.dist"] [unique_id "amr_vSux7rlqiNnQVD3I4wAAACQ"]
[Thu Jul 30 08:39:41.489647 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deploy/.env.local"] [unique_id "amr_vaCuPSoE0uFFzriA_gAAABY"]
[Thu Jul 30 08:39:41.489768 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deploy/.env.local"] [unique_id "amr_vaCuPSoE0uFFzriA_gAAABY"]
[Thu Jul 30 08:39:41.490101 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.490209 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deploy/.env.local"] [unique_id "amr_vaCuPSoE0uFFzriA_gAAABY"]
[Thu Jul 30 08:39:41.524818 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.524840 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.543100 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/php.ini"] [unique_id "amr_vaQRW2g6f2qydyUysAAAADA"]
[Thu Jul 30 08:39:41.543378 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/php.ini"] [unique_id "amr_vaQRW2g6f2qydyUysAAAADA"]
[Thu Jul 30 08:39:41.543476 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.17:10118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/crm/php.ini"] [unique_id "amr_vaQRW2g6f2qydyUysAAAADA"]
[Thu Jul 30 08:39:41.561366 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.561388 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.597377 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.597401 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.633604 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.633622 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.669630 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.669651 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.677178 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:37258] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.staging"] [unique_id "amr_vZyx_IHBAbnDowSLEgAAADU"]
[Thu Jul 30 08:39:41.677324 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:37258] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.env.staging"] [unique_id "amr_vZyx_IHBAbnDowSLEgAAADU"]
[Thu Jul 30 08:39:41.677523 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:37258] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vZyx_IHBAbnDowSLEgAAADU"]
[Thu Jul 30 08:39:41.704790 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.704811 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.738042 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.738077 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.774638 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.774659 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.786358 2026] [core:error] [pid 2423797:tid 2423797] (13)Permission denied: [client 216.73.216.199:16451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/objects
[Thu Jul 30 08:39:41.811545 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.811579 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.849114 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.849133 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.884516 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.884545 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.921543 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.921572 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:15596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.956641 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.956661 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.992875 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:41.992893 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.028273 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.028296 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.065507 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.065527 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.102049 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.102082 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.138477 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.138496 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.175431 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.175453 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.210690 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:15678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.210714 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:15678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.247505 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.247534 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.285162 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.285182 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:15682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.321727 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.321748 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.355417 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.355440 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.374599 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:37284] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.git/config"] [unique_id "amr_vnQV4ijopiU82V8ymQAAAAY"]
[Thu Jul 30 08:39:42.374823 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:37284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/.git/config"] [unique_id "amr_vnQV4ijopiU82V8ymQAAAAY"]
[Thu Jul 30 08:39:42.375050 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:37284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vnQV4ijopiU82V8ymQAAAAY"]
[Thu Jul 30 08:39:42.389924 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.389945 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.422984 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.423003 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:15700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.458842 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.458872 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:15716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.464807 2026] [core:error] [pid 2420262:tid 2420262] [client 66.132.172.187:33224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.464827 2026] [core:error] [pid 2420262:tid 2420262] [client 66.132.172.187:33224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.493467 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.493486 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.532119 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.532139 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.572154 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.572186 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.598803 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.bak"] [unique_id "amr_vi8z5UsblH75uX6ltAAAABc"]
[Thu Jul 30 08:39:42.598980 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.bak"] [unique_id "amr_vi8z5UsblH75uX6ltAAAABc"]
[Thu Jul 30 08:39:42.599103 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.bak"] [unique_id "amr_vi8z5UsblH75uX6ltAAAABc"]
[Thu Jul 30 08:39:42.606797 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.606816 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.615910 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.dev"] [unique_id "amr_vi8z5UsblH75uX6ltQAAABc"]
[Thu Jul 30 08:39:42.616029 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.dev"] [unique_id "amr_vi8z5UsblH75uX6ltQAAABc"]
[Thu Jul 30 08:39:42.616138 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.dev"] [unique_id "amr_vi8z5UsblH75uX6ltQAAABc"]
[Thu Jul 30 08:39:42.639821 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.dist"] [unique_id "amr_vi8z5UsblH75uX6ltgAAABc"]
[Thu Jul 30 08:39:42.639984 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.dist"] [unique_id "amr_vi8z5UsblH75uX6ltgAAABc"]
[Thu Jul 30 08:39:42.640117 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.dist"] [unique_id "amr_vi8z5UsblH75uX6ltgAAABc"]
[Thu Jul 30 08:39:42.642173 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.642189 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.657052 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.local"] [unique_id "amr_vi8z5UsblH75uX6ltwAAABc"]
[Thu Jul 30 08:39:42.657204 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.local"] [unique_id "amr_vi8z5UsblH75uX6ltwAAABc"]
[Thu Jul 30 08:39:42.657306 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.local"] [unique_id "amr_vi8z5UsblH75uX6ltwAAABc"]
[Thu Jul 30 08:39:42.673663 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.production"] [unique_id "amr_vi8z5UsblH75uX6luAAAABc"]
[Thu Jul 30 08:39:42.673789 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.production"] [unique_id "amr_vi8z5UsblH75uX6luAAAABc"]
[Thu Jul 30 08:39:42.673881 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.production"] [unique_id "amr_vi8z5UsblH75uX6luAAAABc"]
[Thu Jul 30 08:39:42.681180 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:15762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.681199 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:15762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.690454 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.staging"] [unique_id "amr_vi8z5UsblH75uX6luQAAABc"]
[Thu Jul 30 08:39:42.690583 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.staging"] [unique_id "amr_vi8z5UsblH75uX6luQAAABc"]
[Thu Jul 30 08:39:42.690683 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/.env.staging"] [unique_id "amr_vi8z5UsblH75uX6luQAAABc"]
[Thu Jul 30 08:39:42.715523 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.715542 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.754225 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.754255 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.790976 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.790998 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:15794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.826475 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15796] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/deploy/php.ini"] [unique_id "amr_viux7rlqiNnQVD3I6AAAACQ"]
[Thu Jul 30 08:39:42.826787 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15796] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deploy/php.ini"] [unique_id "amr_viux7rlqiNnQVD3I6AAAACQ"]
[Thu Jul 30 08:39:42.827108 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.827227 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15796] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deploy/php.ini"] [unique_id "amr_viux7rlqiNnQVD3I6AAAACQ"]
[Thu Jul 30 08:39:42.863866 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.863889 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.899941 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:15814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.899961 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:15814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.934928 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.934948 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:15820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.969924 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:42.969954 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.006175 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.006197 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.042892 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.042912 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.078262 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.078282 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:15856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.117235 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:15862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.117256 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:15862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.154250 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:15876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.154272 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:15876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.192401 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.192432 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.232155 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.232173 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.268163 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.268187 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.305325 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.305345 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.340018 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:15916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.340040 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:15916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.373332 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.373359 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.400233 2026] [ssl:error] [pid 2422156:tid 2422156] (EAI 2)Name or service not known: [client 144.76.19.72:40810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:43.400263 2026] [ssl:error] [pid 2422156:tid 2422156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:43.410716 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:15932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.410732 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:15932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.446006 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.446027 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:15946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.454554 2026] [ssl:error] [pid 2429944:tid 2429944] (EAI 2)Name or service not known: [client 144.76.19.72:40814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:43.454596 2026] [ssl:error] [pid 2429944:tid 2429944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:43.483042 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.483093 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:15954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.518185 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deployment/.env"] [unique_id "amr_vyuprmrr0feFzOS7GgAAAEw"]
[Thu Jul 30 08:39:43.518361 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deployment/.env"] [unique_id "amr_vyuprmrr0feFzOS7GgAAAEw"]
[Thu Jul 30 08:39:43.518716 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.518833 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:15960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deployment/.env"] [unique_id "amr_vyuprmrr0feFzOS7GgAAAEw"]
[Thu Jul 30 08:39:43.555122 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deployment/.env.bak"] [unique_id "amr_v3QV4ijopiU82V8ynwAAAAY"]
[Thu Jul 30 08:39:43.555319 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deployment/.env.bak"] [unique_id "amr_v3QV4ijopiU82V8ynwAAAAY"]
[Thu Jul 30 08:39:43.555709 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.555867 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:15968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deployment/.env.bak"] [unique_id "amr_v3QV4ijopiU82V8ynwAAAAY"]
[Thu Jul 30 08:39:43.593092 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15970] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deployment/.env.dev"] [unique_id "amr_v5kA2-P0e5yhCnL_2QAAAAI"]
[Thu Jul 30 08:39:43.593216 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15970] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deployment/.env.dev"] [unique_id "amr_v5kA2-P0e5yhCnL_2QAAAAI"]
[Thu Jul 30 08:39:43.593517 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.593630 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:15970] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deployment/.env.dev"] [unique_id "amr_v5kA2-P0e5yhCnL_2QAAAAI"]
[Thu Jul 30 08:39:43.627796 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:15986] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deployment/.env.dist"] [unique_id "amr_v6QRW2g6f2qydyUyugAAADA"]
[Thu Jul 30 08:39:43.627956 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:15986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deployment/.env.dist"] [unique_id "amr_v6QRW2g6f2qydyUyugAAADA"]
[Thu Jul 30 08:39:43.628280 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:15986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.628408 2026] [security2:error] [pid 2422156:tid 2422156] [client 185.177.72.66:15986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deployment/.env.dist"] [unique_id "amr_v6QRW2g6f2qydyUyugAAADA"]
[Thu Jul 30 08:39:43.662682 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16000] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/deployment/.env.local"] [unique_id "amr_vyux7rlqiNnQVD3I7AAAACQ"]
[Thu Jul 30 08:39:43.662817 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deployment/.env.local"] [unique_id "amr_vyux7rlqiNnQVD3I7AAAACQ"]
[Thu Jul 30 08:39:43.663139 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.663240 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deployment/.env.local"] [unique_id "amr_vyux7rlqiNnQVD3I7AAAACQ"]
[Thu Jul 30 08:39:43.696292 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.696312 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.729682 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:16006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.729712 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:16006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.749701 2026] [authz_core:error] [pid 2426800:tid 2426800] [client 57.141.0.20:64848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:43.750319 2026] [authz_core:error] [pid 2426800:tid 2426800] [client 57.141.0.20:64848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:43.766343 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:16012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.766362 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:16012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.773198 2026] [authz_core:error] [pid 2429944:tid 2429944] [client 57.141.0.48:52802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:43.773835 2026] [authz_core:error] [pid 2429944:tid 2429944] [client 57.141.0.48:52802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:43.801484 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.801510 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.836180 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.836203 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.872831 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.872854 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.894914 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:37332] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_vyux7rlqiNnQVD3I7QAAACQ"]
[Thu Jul 30 08:39:43.895241 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:37332] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amr_vyux7rlqiNnQVD3I7QAAACQ"]
[Thu Jul 30 08:39:43.895420 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:37332] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_vyux7rlqiNnQVD3I7QAAACQ"]
[Thu Jul 30 08:39:43.909870 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.909887 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.946585 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:16056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.946608 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:16056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.981784 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:16070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:43.981809 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:16070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.018907 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.018940 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.057661 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.057684 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.093671 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:16104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.093711 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:16104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.128135 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.128166 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.164243 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.164265 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.200211 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:16128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.200232 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:16128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.237148 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.237168 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.271476 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.271507 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.305974 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.305991 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.342342 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:16168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.342361 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:16168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.380236 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.380255 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.415013 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.415031 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.449828 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.449845 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.484861 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.484881 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.520670 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.520698 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:16196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.548668 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/php.ini"] [unique_id "amr_wC8z5UsblH75uX6l3AAAABc"]
[Thu Jul 30 08:39:44.548944 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/php.ini"] [unique_id "amr_wC8z5UsblH75uX6l3AAAABc"]
[Thu Jul 30 08:39:44.549043 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cron/php.ini"] [unique_id "amr_wC8z5UsblH75uX6l3AAAABc"]
[Thu Jul 30 08:39:44.556657 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.556677 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.583874 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:37344] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/admin/api-config.ini"] [unique_id "amr_wOWvknE5emN3ObPdkAAAACc"]
[Thu Jul 30 08:39:44.584173 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:37344] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/api-config.ini"] [unique_id "amr_wOWvknE5emN3ObPdkAAAACc"]
[Thu Jul 30 08:39:44.584345 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:37344] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_wOWvknE5emN3ObPdkAAAACc"]
[Thu Jul 30 08:39:44.591104 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.591121 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.628195 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.628215 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.665876 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.665896 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.701781 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.701803 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.736140 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.736172 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:16232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.774498 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:16244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.774517 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:16244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.814326 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.814347 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.851868 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.851902 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.887453 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.887473 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.922282 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16274] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/deployment/php.ini"] [unique_id "amr_wDRsn_CrYZtjvMmSbwAAACk"]
[Thu Jul 30 08:39:44.922649 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/deployment/php.ini"] [unique_id "amr_wDRsn_CrYZtjvMmSbwAAACk"]
[Thu Jul 30 08:39:44.922967 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.923080 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/deployment/php.ini"] [unique_id "amr_wDRsn_CrYZtjvMmSbwAAACk"]
[Thu Jul 30 08:39:44.957859 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.957876 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.997897 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:16300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:44.997916 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:16300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.032378 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:16314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.032400 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:16314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.066353 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.066374 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.102318 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.102346 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:16324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.136138 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:16328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.136158 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:16328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.171450 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.171484 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:16340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.208974 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.208995 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:16346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.245878 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.245898 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.282384 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:16360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.282403 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:16360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.320851 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:16362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.320870 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:16362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.357451 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.357472 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:16378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.395367 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:16384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.395389 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:16384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.429699 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:16400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.429717 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:16400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.442720 2026] [access_compat:error] [pid 2422156:tid 2422156] [client 106.215.157.145:15282] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:45.464712 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:16408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.464736 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:16408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.500601 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.500622 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:16410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.535796 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cryo_project/.env"] [unique_id "amr_wS8z5UsblH75uX6l7wAAABc"]
[Thu Jul 30 08:39:45.535986 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cryo_project/.env"] [unique_id "amr_wS8z5UsblH75uX6l7wAAABc"]
[Thu Jul 30 08:39:45.536101 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/cryo_project/.env"] [unique_id "amr_wS8z5UsblH75uX6l7wAAABc"]
[Thu Jul 30 08:39:45.539780 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.539796 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:16426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.553927 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/css/.env"] [unique_id "amr_wS8z5UsblH75uX6l8AAAABc"]
[Thu Jul 30 08:39:45.554045 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/css/.env"] [unique_id "amr_wS8z5UsblH75uX6l8AAAABc"]
[Thu Jul 30 08:39:45.554202 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/css/.env"] [unique_id "amr_wS8z5UsblH75uX6l8AAAABc"]
[Thu Jul 30 08:39:45.571130 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env"] [unique_id "amr_wS8z5UsblH75uX6l8QAAABc"]
[Thu Jul 30 08:39:45.571325 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env"] [unique_id "amr_wS8z5UsblH75uX6l8QAAABc"]
[Thu Jul 30 08:39:45.571436 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env"] [unique_id "amr_wS8z5UsblH75uX6l8QAAABc"]
[Thu Jul 30 08:39:45.574384 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:24924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.574401 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:24924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.587905 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.bak"] [unique_id "amr_wS8z5UsblH75uX6l8gAAABc"]
[Thu Jul 30 08:39:45.588027 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.bak"] [unique_id "amr_wS8z5UsblH75uX6l8gAAABc"]
[Thu Jul 30 08:39:45.588139 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.bak"] [unique_id "amr_wS8z5UsblH75uX6l8gAAABc"]
[Thu Jul 30 08:39:45.605238 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.dev"] [unique_id "amr_wS8z5UsblH75uX6l8wAAABc"]
[Thu Jul 30 08:39:45.605358 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.dev"] [unique_id "amr_wS8z5UsblH75uX6l8wAAABc"]
[Thu Jul 30 08:39:45.605453 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.dev"] [unique_id "amr_wS8z5UsblH75uX6l8wAAABc"]
[Thu Jul 30 08:39:45.610143 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:24940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.610164 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:24940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.622780 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.dist"] [unique_id "amr_wS8z5UsblH75uX6l9AAAABc"]
[Thu Jul 30 08:39:45.622899 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.dist"] [unique_id "amr_wS8z5UsblH75uX6l9AAAABc"]
[Thu Jul 30 08:39:45.623008 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.dist"] [unique_id "amr_wS8z5UsblH75uX6l9AAAABc"]
[Thu Jul 30 08:39:45.639713 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.local"] [unique_id "amr_wS8z5UsblH75uX6l9QAAABc"]
[Thu Jul 30 08:39:45.639829 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.local"] [unique_id "amr_wS8z5UsblH75uX6l9QAAABc"]
[Thu Jul 30 08:39:45.639924 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.local"] [unique_id "amr_wS8z5UsblH75uX6l9QAAABc"]
[Thu Jul 30 08:39:45.645025 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:24944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.645043 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:24944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.656548 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.production"] [unique_id "amr_wS8z5UsblH75uX6l9gAAABc"]
[Thu Jul 30 08:39:45.656687 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.production"] [unique_id "amr_wS8z5UsblH75uX6l9gAAABc"]
[Thu Jul 30 08:39:45.656813 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.production"] [unique_id "amr_wS8z5UsblH75uX6l9gAAABc"]
[Thu Jul 30 08:39:45.673604 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.staging"] [unique_id "amr_wS8z5UsblH75uX6l9wAAABc"]
[Thu Jul 30 08:39:45.673775 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.staging"] [unique_id "amr_wS8z5UsblH75uX6l9wAAABc"]
[Thu Jul 30 08:39:45.673915 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.17:10132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/.env.staging"] [unique_id "amr_wS8z5UsblH75uX6l9wAAABc"]
[Thu Jul 30 08:39:45.681207 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:24958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/.env.bak"] [unique_id "amr_wWs_XmDKii2MAYoLoQAAAAg"]
[Thu Jul 30 08:39:45.681336 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:24958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/.env.bak"] [unique_id "amr_wWs_XmDKii2MAYoLoQAAAAg"]
[Thu Jul 30 08:39:45.681651 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:24958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.681757 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:24958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/.env.bak"] [unique_id "amr_wWs_XmDKii2MAYoLoQAAAAg"]
[Thu Jul 30 08:39:45.717714 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:24964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/.env.dev"] [unique_id "amr_wUktS-xOoHRbcM0qiwAAAAA"]
[Thu Jul 30 08:39:45.717833 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:24964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/.env.dev"] [unique_id "amr_wUktS-xOoHRbcM0qiwAAAAA"]
[Thu Jul 30 08:39:45.718152 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:24964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.718266 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:24964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/.env.dev"] [unique_id "amr_wUktS-xOoHRbcM0qiwAAAAA"]
[Thu Jul 30 08:39:45.752017 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:24974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/.env.dist"] [unique_id "amr_wcTyHJeh8MEeCqDR9AAAAEQ"]
[Thu Jul 30 08:39:45.752198 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:24974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/.env.dist"] [unique_id "amr_wcTyHJeh8MEeCqDR9AAAAEQ"]
[Thu Jul 30 08:39:45.752502 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:24974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.752612 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:24974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/.env.dist"] [unique_id "amr_wcTyHJeh8MEeCqDR9AAAAEQ"]
[Thu Jul 30 08:39:45.788117 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:24982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/.env.local"] [unique_id "amr_wZyx_IHBAbnDowSLIQAAADU"]
[Thu Jul 30 08:39:45.788291 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:24982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/.env.local"] [unique_id "amr_wZyx_IHBAbnDowSLIQAAADU"]
[Thu Jul 30 08:39:45.788618 2026] [core:error] [pid 2429944:tid 2429944] [client 185.177.72.66:24982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.788730 2026] [security2:error] [pid 2429944:tid 2429944] [client 185.177.72.66:24982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/.env.local"] [unique_id "amr_wZyx_IHBAbnDowSLIQAAADU"]
[Thu Jul 30 08:39:45.826198 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:24998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/.env.production"] [unique_id "amr_wZkA2-P0e5yhCnL_4QAAAAI"]
[Thu Jul 30 08:39:45.826333 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:24998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/.env.production"] [unique_id "amr_wZkA2-P0e5yhCnL_4QAAAAI"]
[Thu Jul 30 08:39:45.826646 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:24998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.826745 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:24998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/.env.production"] [unique_id "amr_wZkA2-P0e5yhCnL_4QAAAAI"]
[Thu Jul 30 08:39:45.862598 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:25014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/.env.staging"] [unique_id "amr_walzm7G0Pp-9gn6qMwAAAEk"]
[Thu Jul 30 08:39:45.862731 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:25014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/.env.staging"] [unique_id "amr_walzm7G0Pp-9gn6qMwAAAEk"]
[Thu Jul 30 08:39:45.863044 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:25014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.863164 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:25014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/.env.staging"] [unique_id "amr_walzm7G0Pp-9gn6qMwAAAEk"]
[Thu Jul 30 08:39:45.898956 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.898976 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.932943 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25032] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dev/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/.git/config"] [unique_id "amr_wWs_XmDKii2MAYoLogAAAAg"]
[Thu Jul 30 08:39:45.933079 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/.git/config"] [unique_id "amr_wWs_XmDKii2MAYoLogAAAAg"]
[Thu Jul 30 08:39:45.933380 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.933479 2026] [security2:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/.git/config"] [unique_id "amr_wWs_XmDKii2MAYoLogAAAAg"]
[Thu Jul 30 08:39:45.968932 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:45.968963 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.004828 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.004851 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.040308 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.040328 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.074106 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:25050] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amr_wpkA2-P0e5yhCnL_4gAAAAI"]
[Thu Jul 30 08:39:46.074388 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:25050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amr_wpkA2-P0e5yhCnL_4gAAAAI"]
[Thu Jul 30 08:39:46.074703 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:25050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.074805 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:25050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amr_wpkA2-P0e5yhCnL_4gAAAAI"]
[Thu Jul 30 08:39:46.107960 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:25066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.107981 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:25066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.145681 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25082] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dev/api-config.ini"] [unique_id "amr_wiuprmrr0feFzOS7IAAAAEw"]
[Thu Jul 30 08:39:46.145972 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25082] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/api-config.ini"] [unique_id "amr_wiuprmrr0feFzOS7IAAAAEw"]
[Thu Jul 30 08:39:46.146304 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.146422 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/api-config.ini"] [unique_id "amr_wiuprmrr0feFzOS7IAAAAEw"]
[Thu Jul 30 08:39:46.184333 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.184352 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.220531 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:25100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.220557 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:25100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.254940 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.254959 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.290231 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.290251 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.324492 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.324508 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.361048 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:25138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.361078 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:25138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.397299 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.397316 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.432453 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.432472 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.470906 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.470923 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.493231 2026] [authz_core:error] [pid 2419960:tid 2419960] [client 57.141.0.45:39252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:46.493850 2026] [authz_core:error] [pid 2419960:tid 2419960] [client 57.141.0.45:39252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:46.507789 2026] [ssl:error] [pid 2428221:tid 2428221] (EAI 2)Name or service not known: [client 144.76.19.72:40828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:46.507808 2026] [ssl:error] [pid 2428221:tid 2428221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:46.511233 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:25160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.511249 2026] [core:error] [pid 2411409:tid 2411409] [client 185.177.72.66:25160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.546208 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:25170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.546224 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:25170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.565193 2026] [ssl:error] [pid 2431186:tid 2431186] (EAI 2)Name or service not known: [client 144.76.19.72:40842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:46.565218 2026] [ssl:error] [pid 2431186:tid 2431186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:46.586039 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.586055 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.623911 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.623928 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.659734 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:25192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.659752 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:25192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.697372 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.697389 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.735332 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.735349 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.772236 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.772272 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.808681 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.808707 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.843030 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:25236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.843050 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:25236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.884941 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.884967 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.924403 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.924420 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.958944 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.958962 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:46.963272 2026] [authz_core:error] [pid 2431186:tid 2431186] [client 57.141.0.22:63026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:46.963930 2026] [authz_core:error] [pid 2431186:tid 2431186] [client 57.141.0.22:63026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:47.002221 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.002242 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.037739 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.037784 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.075411 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:25306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.075432 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:25306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.114720 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.114786 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.151796 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:25324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.151816 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:25324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.187831 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.187851 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.224185 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.224204 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.261501 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.261519 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.295837 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.295870 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.330645 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:25374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dev/laravel.log"] [unique_id "amr_wy8z5UsblH75uX6mDgAAABc"]
[Thu Jul 30 08:39:47.330930 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:25374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/laravel.log"] [unique_id "amr_wy8z5UsblH75uX6mDgAAABc"]
[Thu Jul 30 08:39:47.331243 2026] [core:error] [pid 2412472:tid 2412472] [client 185.177.72.66:25374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.331345 2026] [security2:error] [pid 2412472:tid 2412472] [client 185.177.72.66:25374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/laravel.log"] [unique_id "amr_wy8z5UsblH75uX6mDgAAABc"]
[Thu Jul 30 08:39:47.367101 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.367131 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.401861 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.401881 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.436994 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:25394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.437012 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:25394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.473052 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.473082 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.508329 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25404] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dev/php.ini"] [unique_id "amr_w6CuPSoE0uFFzriBDAAAABY"]
[Thu Jul 30 08:39:47.508627 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/php.ini"] [unique_id "amr_w6CuPSoE0uFFzriBDAAAABY"]
[Thu Jul 30 08:39:47.508930 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.509045 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25404] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/php.ini"] [unique_id "amr_w6CuPSoE0uFFzriBDAAAABY"]
[Thu Jul 30 08:39:47.538708 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/php.ini"] [unique_id "amr_w0QvuHxPljPWrXhrlgAAAC4"]
[Thu Jul 30 08:39:47.538992 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/php.ini"] [unique_id "amr_w0QvuHxPljPWrXhrlgAAAC4"]
[Thu Jul 30 08:39:47.539122 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/current/php.ini"] [unique_id "amr_w0QvuHxPljPWrXhrlgAAAC4"]
[Thu Jul 30 08:39:47.546589 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.546616 2026] [core:error] [pid 2431186:tid 2431186] [client 185.177.72.66:25416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.584636 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.584676 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.619329 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.619357 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.653883 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.653910 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.688579 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.688599 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.721392 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.721423 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.754104 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.754125 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.787179 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.787198 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.823065 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:25472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.823096 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:25472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.857628 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.857658 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.892876 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.892905 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.927176 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.927199 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.961391 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.961411 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.996290 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:47.996309 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.030824 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.030844 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.067091 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25548] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/dev/web.config"] [unique_id "amr_xKCuPSoE0uFFzriBDgAAABY"]
[Thu Jul 30 08:39:48.067293 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25548] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dev/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dev/web.config"] [unique_id "amr_xKCuPSoE0uFFzriBDgAAABY"]
[Thu Jul 30 08:39:48.067419 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dev/web.config"] [unique_id "amr_xKCuPSoE0uFFzriBDgAAABY"]
[Thu Jul 30 08:39:48.067748 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.067869 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dev/web.config"] [unique_id "amr_xKCuPSoE0uFFzriBDgAAABY"]
[Thu Jul 30 08:39:48.106595 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.106618 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.143097 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.143115 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.180142 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.180190 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.217349 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/develop/.env.local"] [unique_id "amr_xMTyHJeh8MEeCqDR-AAAAEQ"]
[Thu Jul 30 08:39:48.217488 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/develop/.env.local"] [unique_id "amr_xMTyHJeh8MEeCqDR-AAAAEQ"]
[Thu Jul 30 08:39:48.217808 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.217912 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/develop/.env.local"] [unique_id "amr_xMTyHJeh8MEeCqDR-AAAAEQ"]
[Thu Jul 30 08:39:48.254164 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/develop/.env.production"] [unique_id "amr_xEktS-xOoHRbcM0qkAAAAAA"]
[Thu Jul 30 08:39:48.254340 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/develop/.env.production"] [unique_id "amr_xEktS-xOoHRbcM0qkAAAAAA"]
[Thu Jul 30 08:39:48.254669 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.254794 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/develop/.env.production"] [unique_id "amr_xEktS-xOoHRbcM0qkAAAAAA"]
[Thu Jul 30 08:39:48.286590 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25584] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/develop/.env.staging"] [unique_id "amr_xAvbpUeckUfXmp7bYQAAAEc"]
[Thu Jul 30 08:39:48.286742 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/develop/.env.staging"] [unique_id "amr_xAvbpUeckUfXmp7bYQAAAEc"]
[Thu Jul 30 08:39:48.287046 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.287160 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/develop/.env.staging"] [unique_id "amr_xAvbpUeckUfXmp7bYQAAAEc"]
[Thu Jul 30 08:39:48.321811 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.321835 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.359938 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.359958 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.395001 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.395030 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.431270 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25636] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/developer/.env"] [unique_id "amr_xPJI1GD8s375y7G9LAAAAE0"]
[Thu Jul 30 08:39:48.431431 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/developer/.env"] [unique_id "amr_xPJI1GD8s375y7G9LAAAAE0"]
[Thu Jul 30 08:39:48.431748 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.431877 2026] [security2:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25636] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/developer/.env"] [unique_id "amr_xPJI1GD8s375y7G9LAAAAE0"]
[Thu Jul 30 08:39:48.465928 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25642] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/developer/.env.bak"] [unique_id "amr_xCux7rlqiNnQVD3I-AAAACQ"]
[Thu Jul 30 08:39:48.466100 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/developer/.env.bak"] [unique_id "amr_xCux7rlqiNnQVD3I-AAAACQ"]
[Thu Jul 30 08:39:48.466422 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.466574 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/developer/.env.bak"] [unique_id "amr_xCux7rlqiNnQVD3I-AAAACQ"]
[Thu Jul 30 08:39:48.500680 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/developer/.env.dev"] [unique_id "amr_xMTyHJeh8MEeCqDR-QAAAEQ"]
[Thu Jul 30 08:39:48.500801 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/developer/.env.dev"] [unique_id "amr_xMTyHJeh8MEeCqDR-QAAAEQ"]
[Thu Jul 30 08:39:48.501115 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.501227 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/developer/.env.dev"] [unique_id "amr_xMTyHJeh8MEeCqDR-QAAAEQ"]
[Thu Jul 30 08:39:48.535369 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/developer/.env.dist"] [unique_id "amr_xAvbpUeckUfXmp7bYgAAAEc"]
[Thu Jul 30 08:39:48.535527 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/developer/.env.dist"] [unique_id "amr_xAvbpUeckUfXmp7bYgAAAEc"]
[Thu Jul 30 08:39:48.535846 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.535962 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:25658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/developer/.env.dist"] [unique_id "amr_xAvbpUeckUfXmp7bYgAAAEc"]
[Thu Jul 30 08:39:48.573770 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:25660] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/developer/.env.local"] [unique_id "amr_xNuBIW7-_o7ZAhSuRAAAADk"]
[Thu Jul 30 08:39:48.573942 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:25660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/developer/.env.local"] [unique_id "amr_xNuBIW7-_o7ZAhSuRAAAADk"]
[Thu Jul 30 08:39:48.574276 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:25660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.574369 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/custom/.env"] [unique_id "amr_xEQvuHxPljPWrXhrqQAAAC4"]
[Thu Jul 30 08:39:48.574396 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:25660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/developer/.env.local"] [unique_id "amr_xNuBIW7-_o7ZAhSuRAAAADk"]
[Thu Jul 30 08:39:48.574570 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/custom/.env"] [unique_id "amr_xEQvuHxPljPWrXhrqQAAAC4"]
[Thu Jul 30 08:39:48.574703 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/custom/.env"] [unique_id "amr_xEQvuHxPljPWrXhrqQAAAC4"]
[Thu Jul 30 08:39:48.611371 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.611403 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.649595 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.649617 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.650417 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /customer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/.git/config"] [unique_id "amr_xEQvuHxPljPWrXhrqwAAAC4"]
[Thu Jul 30 08:39:48.650616 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/.git/config"] [unique_id "amr_xEQvuHxPljPWrXhrqwAAAC4"]
[Thu Jul 30 08:39:48.650734 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.17:55984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/.git/config"] [unique_id "amr_xEQvuHxPljPWrXhrqwAAAC4"]
[Thu Jul 30 08:39:48.686421 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.686449 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.722169 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.722190 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.757594 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.757620 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:25704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.790698 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.790720 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.826408 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.826431 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.862795 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:25724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.862816 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:25724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.901816 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.901847 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.938555 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.938589 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.976330 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:48.976362 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.017861 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.017887 2026] [core:error] [pid 2423145:tid 2423145] [client 185.177.72.66:25778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.054321 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.054348 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.099316 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.099353 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.134959 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.134985 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.172290 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.172344 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.210468 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.210488 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.247221 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.247238 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.280583 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.280613 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:25844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.313720 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.313743 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.348720 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.348744 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:25858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.387047 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.387078 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.423554 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.423590 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:25880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.460696 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.460719 2026] [core:error] [pid 2428416:tid 2428416] [client 185.177.72.66:25890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.495320 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:25900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.495342 2026] [core:error] [pid 2427777:tid 2427777] [client 185.177.72.66:25900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.531834 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.531856 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.566218 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:25924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.566252 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:25924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.601058 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.601094 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.626623 2026] [ssl:error] [pid 2428312:tid 2428312] (EAI 2)Name or service not known: [client 144.76.19.72:21474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:49.626660 2026] [ssl:error] [pid 2428312:tid 2428312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:49.635888 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.635917 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:25942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.671982 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.672000 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:25948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.682687 2026] [ssl:error] [pid 2428412:tid 2428412] (EAI 2)Name or service not known: [client 144.76.19.72:21482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:49.682714 2026] [ssl:error] [pid 2428412:tid 2428412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:49.711416 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.711446 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:25962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.750577 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.750605 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:25972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.789754 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.789784 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:25980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.823523 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:25982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.823552 2026] [core:error] [pid 2423766:tid 2423766] [client 185.177.72.66:25982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.857792 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25988] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/developer/php.ini"] [unique_id "amr_xbqoJzgQGqRwLIKcQgAAABQ"]
[Thu Jul 30 08:39:49.858169 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/developer/php.ini"] [unique_id "amr_xbqoJzgQGqRwLIKcQgAAABQ"]
[Thu Jul 30 08:39:49.858486 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.858616 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:25988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/developer/php.ini"] [unique_id "amr_xbqoJzgQGqRwLIKcQgAAABQ"]
[Thu Jul 30 08:39:49.893211 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.893233 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.926429 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:26016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.926447 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:26016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.962762 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.962781 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.999755 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:49.999774 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.035703 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.035724 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.073316 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.073338 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.106851 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.106874 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.143732 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.143767 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.180628 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:26076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.180648 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:26076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.217373 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.217404 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.226643 2026] [ssl:error] [pid 2420366:tid 2420366] (70014)End of file found: [client 216.73.216.199:61200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:39:50.252491 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.252510 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.287306 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.287326 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.323001 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.323021 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.357222 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.357240 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.392216 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.392236 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.428528 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.428546 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.463475 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.463504 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.498278 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.498296 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.532150 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/developerslv/.env"] [unique_id "amr_xuWvknE5emN3ObPdowAAACc"]
[Thu Jul 30 08:39:50.532265 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/developerslv/.env"] [unique_id "amr_xuWvknE5emN3ObPdowAAACc"]
[Thu Jul 30 08:39:50.532577 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.532693 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/developerslv/.env"] [unique_id "amr_xuWvknE5emN3ObPdowAAACc"]
[Thu Jul 30 08:39:50.566911 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/development/.env.bak"] [unique_id "amr_xus7bSxOV4LObzu7LgAAABo"]
[Thu Jul 30 08:39:50.567044 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/development/.env.bak"] [unique_id "amr_xus7bSxOV4LObzu7LgAAABo"]
[Thu Jul 30 08:39:50.567390 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.567494 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/development/.env.bak"] [unique_id "amr_xus7bSxOV4LObzu7LgAAABo"]
[Thu Jul 30 08:39:50.604388 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/development/.env.dev"] [unique_id "amr_xvvM57bIw5PazOlJhwAAAEo"]
[Thu Jul 30 08:39:50.604512 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/development/.env.dev"] [unique_id "amr_xvvM57bIw5PazOlJhwAAAEo"]
[Thu Jul 30 08:39:50.604824 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.604929 2026] [security2:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/development/.env.dev"] [unique_id "amr_xvvM57bIw5PazOlJhwAAAEo"]
[Thu Jul 30 08:39:50.643071 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/development/.env.dist"] [unique_id "amr_xiwlz8EK1c7ip4vjDQAAAEI"]
[Thu Jul 30 08:39:50.643210 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/development/.env.dist"] [unique_id "amr_xiwlz8EK1c7ip4vjDQAAAEI"]
[Thu Jul 30 08:39:50.643526 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.643652 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/development/.env.dist"] [unique_id "amr_xiwlz8EK1c7ip4vjDQAAAEI"]
[Thu Jul 30 08:39:50.677808 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/development/.env.local"] [unique_id "amr_xtuBIW7-_o7ZAhSuSAAAADk"]
[Thu Jul 30 08:39:50.677933 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/development/.env.local"] [unique_id "amr_xtuBIW7-_o7ZAhSuSAAAADk"]
[Thu Jul 30 08:39:50.678253 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.678367 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/development/.env.local"] [unique_id "amr_xtuBIW7-_o7ZAhSuSAAAADk"]
[Thu Jul 30 08:39:50.710402 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/development/.env.production"] [unique_id "amr_xoyFZ2ptgStT3D1uzwAAAD0"]
[Thu Jul 30 08:39:50.710538 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/development/.env.production"] [unique_id "amr_xoyFZ2ptgStT3D1uzwAAAD0"]
[Thu Jul 30 08:39:50.710856 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.710969 2026] [security2:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/development/.env.production"] [unique_id "amr_xoyFZ2ptgStT3D1uzwAAAD0"]
[Thu Jul 30 08:39:50.744740 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26198] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/development/.env.staging"] [unique_id "amr_xiuprmrr0feFzOS7LAAAAEw"]
[Thu Jul 30 08:39:50.744879 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/development/.env.staging"] [unique_id "amr_xiuprmrr0feFzOS7LAAAAEw"]
[Thu Jul 30 08:39:50.745212 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.745328 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/development/.env.staging"] [unique_id "amr_xiuprmrr0feFzOS7LAAAAEw"]
[Thu Jul 30 08:39:50.780150 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.780183 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.816415 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.816441 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.830948 2026] [lsapi:warn] [pid 2423797:tid 2423797] [client 216.73.216.199:16451] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 08:39:50.830970 2026] [lsapi:error] [pid 2423797:tid 2423797] [client 216.73.216.199:16451] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/file.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 08:39:50.853395 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.853414 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.890242 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.890260 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.926172 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.926189 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.960345 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.960366 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:26248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.998655 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:26258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:50.998690 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:26258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.036286 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.036314 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.074930 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.074963 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.111449 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.111475 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.147949 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.147985 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.184252 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.184275 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.220149 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.220173 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.256965 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.256986 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:26334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.297444 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.297464 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:26338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.331979 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.332000 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.368465 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.368484 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.406545 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:26368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.406588 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:26368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.442177 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.442194 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.479822 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.479841 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.516574 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:26396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.516590 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:26396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.552181 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.552198 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.588194 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.588215 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.624795 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.624820 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.660443 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.660461 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.695849 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.695869 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.731401 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.731422 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.769813 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.769839 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.775039 2026] [access_compat:error] [pid 2411420:tid 2411420] [client 106.215.157.145:20625] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:51.808127 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.808145 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.845840 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.845861 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.881770 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.881802 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.924318 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.924342 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.958835 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.958857 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.993835 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:51.993857 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.029020 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.029048 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.063507 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26530] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/development/php.ini"] [unique_id "amr_yEktS-xOoHRbcM0qmwAAAAA"]
[Thu Jul 30 08:39:52.063918 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26530] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/development/php.ini"] [unique_id "amr_yEktS-xOoHRbcM0qmwAAAAA"]
[Thu Jul 30 08:39:52.064293 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.064430 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26530] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/development/php.ini"] [unique_id "amr_yEktS-xOoHRbcM0qmwAAAAA"]
[Thu Jul 30 08:39:52.098791 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.098815 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.134539 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.134583 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.173110 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.173137 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.211001 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.211026 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.246166 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.246210 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.281836 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.281857 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.316817 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.316842 2026] [core:error] [pid 2428412:tid 2428412] [client 185.177.72.66:26594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.355393 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.355419 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.391374 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.391396 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.427637 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.427665 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.462884 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.462909 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.497945 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.497971 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.532334 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.532363 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.568539 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.568558 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.602738 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.602763 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.637751 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.637771 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.674637 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.674658 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.710482 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.710501 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.742121 2026] [ssl:error] [pid 2429782:tid 2429782] (EAI 2)Name or service not known: [client 144.76.19.72:21492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:52.742143 2026] [ssl:error] [pid 2429782:tid 2429782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:52.747019 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.747036 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.779661 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26732] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/directories/.env"] [unique_id "amr_yJDxY3fypotl7b9qqwAAAB4"]
[Thu Jul 30 08:39:52.779825 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/directories/.env"] [unique_id "amr_yJDxY3fypotl7b9qqwAAAB4"]
[Thu Jul 30 08:39:52.780148 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.780259 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/directories/.env"] [unique_id "amr_yJDxY3fypotl7b9qqwAAAB4"]
[Thu Jul 30 08:39:52.796596 2026] [ssl:error] [pid 2428411:tid 2428411] (EAI 2)Name or service not known: [client 144.76.19.72:21508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:52.796620 2026] [ssl:error] [pid 2428411:tid 2428411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:52.812425 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26734] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dist/.env"] [unique_id "amr_yLwuC_UnL2keC2dw9AAAABE"]
[Thu Jul 30 08:39:52.812629 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dist/.env"] [unique_id "amr_yLwuC_UnL2keC2dw9AAAABE"]
[Thu Jul 30 08:39:52.812943 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.813054 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dist/.env"] [unique_id "amr_yLwuC_UnL2keC2dw9AAAABE"]
[Thu Jul 30 08:39:52.849901 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.849922 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.885975 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26756] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/django-blog/.env"] [unique_id "amr_yCwlz8EK1c7ip4vjEgAAAEI"]
[Thu Jul 30 08:39:52.886158 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26756] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/django-blog/.env"] [unique_id "amr_yCwlz8EK1c7ip4vjEgAAAEI"]
[Thu Jul 30 08:39:52.886470 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.886599 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26756] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/django-blog/.env"] [unique_id "amr_yCwlz8EK1c7ip4vjEgAAAEI"]
[Thu Jul 30 08:39:52.920938 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26772] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/django/.env"] [unique_id "amr_yPdbqxY4ll4IV_vw5wAAACE"]
[Thu Jul 30 08:39:52.921116 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/django/.env"] [unique_id "amr_yPdbqxY4ll4IV_vw5wAAACE"]
[Thu Jul 30 08:39:52.921429 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.921537 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/django/.env"] [unique_id "amr_yPdbqxY4ll4IV_vw5wAAACE"]
[Thu Jul 30 08:39:52.956801 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.956820 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:26786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.991015 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:26792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:52.991036 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:26792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.026111 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.026129 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.060655 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.060673 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.095856 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.095891 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.131890 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.131910 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.167980 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.168007 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.207094 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/django_project_path/.env"] [unique_id "amr_yX50CufHvaci0qvl3AAAAEE"]
[Thu Jul 30 08:39:53.207354 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/django_project_path/.env"] [unique_id "amr_yX50CufHvaci0qvl3AAAAEE"]
[Thu Jul 30 08:39:53.208030 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.208277 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/django_project_path/.env"] [unique_id "amr_yX50CufHvaci0qvl3AAAAEE"]
[Thu Jul 30 08:39:53.243224 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:26854] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/doc/.env"] [unique_id "amr_yZkA2-P0e5yhCnL_5QAAAAI"]
[Thu Jul 30 08:39:53.243355 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:26854] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/doc/.env"] [unique_id "amr_yZkA2-P0e5yhCnL_5QAAAAI"]
[Thu Jul 30 08:39:53.243518 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.9:50956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:53.243671 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:26854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.243789 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:26854] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/doc/.env"] [unique_id "amr_yZkA2-P0e5yhCnL_5QAAAAI"]
[Thu Jul 30 08:39:53.244158 2026] [authz_core:error] [pid 2412472:tid 2412472] [client 57.141.0.9:50956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:53.280662 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.280696 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.313306 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.313328 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.347970 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker-compose/platform/.env"] [unique_id "amr_yXQV4ijopiU82V8yqwAAAAY"]
[Thu Jul 30 08:39:53.348117 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker-compose/platform/.env"] [unique_id "amr_yXQV4ijopiU82V8yqwAAAAY"]
[Thu Jul 30 08:39:53.348425 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.348530 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:26872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker-compose/platform/.env"] [unique_id "amr_yXQV4ijopiU82V8yqwAAAAY"]
[Thu Jul 30 08:39:53.383702 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26876] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker-elk/.env"] [unique_id "amr_ySwlz8EK1c7ip4vjEwAAAEI"]
[Thu Jul 30 08:39:53.383872 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker-elk/.env"] [unique_id "amr_ySwlz8EK1c7ip4vjEwAAAEI"]
[Thu Jul 30 08:39:53.384197 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.384305 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker-elk/.env"] [unique_id "amr_ySwlz8EK1c7ip4vjEwAAAEI"]
[Thu Jul 30 08:39:53.420794 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26878] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "amr_yfdbqxY4ll4IV_vw6AAAACE"]
[Thu Jul 30 08:39:53.420960 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "amr_yfdbqxY4ll4IV_vw6AAAACE"]
[Thu Jul 30 08:39:53.421290 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.421404 2026] [security2:error] [pid 2426800:tid 2426800] [client 185.177.72.66:26878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "amr_yfdbqxY4ll4IV_vw6AAAACE"]
[Thu Jul 30 08:39:53.457286 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26892] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amr_yaCuPSoE0uFFzriBGQAAABY"]
[Thu Jul 30 08:39:53.457417 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amr_yaCuPSoE0uFFzriBGQAAABY"]
[Thu Jul 30 08:39:53.457730 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.457853 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:26892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amr_yaCuPSoE0uFFzriBGQAAABY"]
[Thu Jul 30 08:39:53.490391 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:26894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.490410 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:26894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.524394 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:26906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.524414 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:26906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.558703 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.558722 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:26914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.595669 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.595689 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:26924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.633950 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.633993 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:26926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.670339 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/app/.env"] [unique_id "amr_yZDxY3fypotl7b9qrQAAAB4"]
[Thu Jul 30 08:39:53.670516 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/app/.env"] [unique_id "amr_yZDxY3fypotl7b9qrQAAAB4"]
[Thu Jul 30 08:39:53.670843 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.670960 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:26942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/app/.env"] [unique_id "amr_yZDxY3fypotl7b9qrQAAAB4"]
[Thu Jul 30 08:39:53.705983 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26954] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "amr_yes7bSxOV4LObzu7OQAAABo"]
[Thu Jul 30 08:39:53.706190 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26954] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "amr_yes7bSxOV4LObzu7OQAAABo"]
[Thu Jul 30 08:39:53.706507 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.706649 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:26954] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "amr_yes7bSxOV4LObzu7OQAAABo"]
[Thu Jul 30 08:39:53.741904 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26966] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amr_yX50CufHvaci0qvl3QAAAEE"]
[Thu Jul 30 08:39:53.742263 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amr_yX50CufHvaci0qvl3QAAAEE"]
[Thu Jul 30 08:39:53.742723 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.742898 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:26966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amr_yX50CufHvaci0qvl3QAAAEE"]
[Thu Jul 30 08:39:53.775878 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26976] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/database/.env"] [unique_id "amr_yalzm7G0Pp-9gn6qOQAAAEk"]
[Thu Jul 30 08:39:53.776103 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/database/.env"] [unique_id "amr_yalzm7G0Pp-9gn6qOQAAAEk"]
[Thu Jul 30 08:39:53.776438 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.776595 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:26976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/database/.env"] [unique_id "amr_yalzm7G0Pp-9gn6qOQAAAEk"]
[Thu Jul 30 08:39:53.811143 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26990] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/db/.env"] [unique_id "amr_ybwuC_UnL2keC2dw9gAAABE"]
[Thu Jul 30 08:39:53.811297 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/db/.env"] [unique_id "amr_ybwuC_UnL2keC2dw9gAAABE"]
[Thu Jul 30 08:39:53.811611 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.811732 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:26990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/db/.env"] [unique_id "amr_ybwuC_UnL2keC2dw9gAAABE"]
[Thu Jul 30 08:39:53.847029 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/examples/compose/.env"] [unique_id "amr_ySwlz8EK1c7ip4vjFAAAAEI"]
[Thu Jul 30 08:39:53.847220 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/examples/compose/.env"] [unique_id "amr_ySwlz8EK1c7ip4vjFAAAAEI"]
[Thu Jul 30 08:39:53.847528 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.847648 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:26992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/examples/compose/.env"] [unique_id "amr_ySwlz8EK1c7ip4vjFAAAAEI"]
[Thu Jul 30 08:39:53.883819 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/postgres/.env"] [unique_id "amr_yRSM_3DmF9yKgJn3oQAAAEY"]
[Thu Jul 30 08:39:53.884052 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/postgres/.env"] [unique_id "amr_yRSM_3DmF9yKgJn3oQAAAEY"]
[Thu Jul 30 08:39:53.884412 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.884541 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/postgres/.env"] [unique_id "amr_yRSM_3DmF9yKgJn3oQAAAEY"]
[Thu Jul 30 08:39:53.916803 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27004] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docker/webdav/.env"] [unique_id "amr_yT-G1VCKQzXMG6Ub9gAAACg"]
[Thu Jul 30 08:39:53.916931 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27004] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docker/webdav/.env"] [unique_id "amr_yT-G1VCKQzXMG6Ub9gAAACg"]
[Thu Jul 30 08:39:53.917250 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.917362 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27004] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docker/webdav/.env"] [unique_id "amr_yT-G1VCKQzXMG6Ub9gAAACg"]
[Thu Jul 30 08:39:53.952498 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.952521 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.989303 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:53.989325 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.023583 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27046] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /docs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docs/.git/config"] [unique_id "amr_yuC233pHXOTf93SW7AAAADM"]
[Thu Jul 30 08:39:54.023725 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27046] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docs/.git/config"] [unique_id "amr_yuC233pHXOTf93SW7AAAADM"]
[Thu Jul 30 08:39:54.024027 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.024145 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27046] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docs/.git/config"] [unique_id "amr_yuC233pHXOTf93SW7AAAADM"]
[Thu Jul 30 08:39:54.060521 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:27052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.060546 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:27052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.100171 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:27058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.100224 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:27058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.137397 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.137421 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.172263 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:27068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.172287 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:27068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.209494 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27078] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/docs/api-config.ini"] [unique_id "amr_ypkA2-P0e5yhCnL_5wAAAAI"]
[Thu Jul 30 08:39:54.209828 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docs/api-config.ini"] [unique_id "amr_ypkA2-P0e5yhCnL_5wAAAAI"]
[Thu Jul 30 08:39:54.210152 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.210270 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docs/api-config.ini"] [unique_id "amr_ypkA2-P0e5yhCnL_5wAAAAI"]
[Thu Jul 30 08:39:54.244801 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.244871 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.283051 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:27096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.283098 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:27096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.317302 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27104] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/docs/laravel.log"] [unique_id "amr_yhSM_3DmF9yKgJn3ogAAAEY"]
[Thu Jul 30 08:39:54.317663 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docs/laravel.log"] [unique_id "amr_yhSM_3DmF9yKgJn3ogAAAEY"]
[Thu Jul 30 08:39:54.317977 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.318098 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27104] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docs/laravel.log"] [unique_id "amr_yhSM_3DmF9yKgJn3ogAAAEY"]
[Thu Jul 30 08:39:54.350753 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.350774 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.383637 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.383661 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.417489 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27120] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/docs/web.config"] [unique_id "amr_yuC233pHXOTf93SW7QAAADM"]
[Thu Jul 30 08:39:54.417712 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27120] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /docs/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/docs/web.config"] [unique_id "amr_yuC233pHXOTf93SW7QAAADM"]
[Thu Jul 30 08:39:54.417855 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/docs/web.config"] [unique_id "amr_yuC233pHXOTf93SW7QAAADM"]
[Thu Jul 30 08:39:54.418177 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.418286 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/docs/web.config"] [unique_id "amr_yuC233pHXOTf93SW7QAAADM"]
[Thu Jul 30 08:39:54.452316 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:27136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dodoswap-client/.env"] [unique_id "amr_yuWvknE5emN3ObPdrwAAACc"]
[Thu Jul 30 08:39:54.452455 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:27136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dodoswap-client/.env"] [unique_id "amr_yuWvknE5emN3ObPdrwAAACc"]
[Thu Jul 30 08:39:54.452773 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:27136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.452875 2026] [security2:error] [pid 2425341:tid 2425341] [client 185.177.72.66:27136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dodoswap-client/.env"] [unique_id "amr_yuWvknE5emN3ObPdrwAAACc"]
[Thu Jul 30 08:39:54.486777 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:27146] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/dotfiles/.env"] [unique_id "amr_ykktS-xOoHRbcM0qoQAAAAA"]
[Thu Jul 30 08:39:54.486962 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:27146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/dotfiles/.env"] [unique_id "amr_ykktS-xOoHRbcM0qoQAAAAA"]
[Thu Jul 30 08:39:54.487309 2026] [core:error] [pid 2429782:tid 2429782] [client 185.177.72.66:27146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.487449 2026] [security2:error] [pid 2429782:tid 2429782] [client 185.177.72.66:27146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/dotfiles/.env"] [unique_id "amr_ykktS-xOoHRbcM0qoQAAAAA"]
[Thu Jul 30 08:39:54.521741 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/downloads/.env"] [unique_id "amr_ypDxY3fypotl7b9qrwAAAB4"]
[Thu Jul 30 08:39:54.521910 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/downloads/.env"] [unique_id "amr_ypDxY3fypotl7b9qrwAAAB4"]
[Thu Jul 30 08:39:54.522230 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.522335 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/downloads/.env"] [unique_id "amr_ypDxY3fypotl7b9qrwAAAB4"]
[Thu Jul 30 08:39:54.560617 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.560652 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.597956 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:27176] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /downloads/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/downloads/.git/config"] [unique_id "amr_yrwuC_UnL2keC2dw-AAAABE"]
[Thu Jul 30 08:39:54.598227 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:27176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/downloads/.git/config"] [unique_id "amr_yrwuC_UnL2keC2dw-AAAABE"]
[Thu Jul 30 08:39:54.598581 2026] [core:error] [pid 2429860:tid 2429860] [client 185.177.72.66:27176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.598711 2026] [security2:error] [pid 2429860:tid 2429860] [client 185.177.72.66:27176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/downloads/.git/config"] [unique_id "amr_yrwuC_UnL2keC2dw-AAAABE"]
[Thu Jul 30 08:39:54.635286 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:27180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.635312 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:27180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.669953 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.669977 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.705443 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.705466 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.739799 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27204] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amr_yuC233pHXOTf93SW7gAAADM"]
[Thu Jul 30 08:39:54.740173 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amr_yuC233pHXOTf93SW7gAAADM"]
[Thu Jul 30 08:39:54.740489 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.740602 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amr_yuC233pHXOTf93SW7gAAADM"]
[Thu Jul 30 08:39:54.774182 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/downloads/api-config.ini"] [unique_id "amr_yigDZvJnuOkhDtU28QAAACU"]
[Thu Jul 30 08:39:54.774527 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/downloads/api-config.ini"] [unique_id "amr_yigDZvJnuOkhDtU28QAAACU"]
[Thu Jul 30 08:39:54.774857 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.774982 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/downloads/api-config.ini"] [unique_id "amr_yigDZvJnuOkhDtU28QAAACU"]
[Thu Jul 30 08:39:54.813020 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.813044 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.850810 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:27228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.850830 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:27228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.887943 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27244] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/downloads/laravel.log"] [unique_id "amr_yqlzm7G0Pp-9gn6qPAAAAEk"]
[Thu Jul 30 08:39:54.888401 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/downloads/laravel.log"] [unique_id "amr_yqlzm7G0Pp-9gn6qPAAAAEk"]
[Thu Jul 30 08:39:54.888764 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.888886 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/downloads/laravel.log"] [unique_id "amr_yqlzm7G0Pp-9gn6qPAAAAEk"]
[Thu Jul 30 08:39:54.923277 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:27258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.923301 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:27258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.959270 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.959289 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.994299 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27280] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/downloads/web.config"] [unique_id "amr_yk10g1cPUQyHDS7xygAAABg"]
[Thu Jul 30 08:39:54.994508 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27280] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /downloads/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/downloads/web.config"] [unique_id "amr_yk10g1cPUQyHDS7xygAAABg"]
[Thu Jul 30 08:39:54.994628 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27280] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/downloads/web.config"] [unique_id "amr_yk10g1cPUQyHDS7xygAAABg"]
[Thu Jul 30 08:39:54.994947 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:54.995086 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:27280] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/downloads/web.config"] [unique_id "amr_yk10g1cPUQyHDS7xygAAABg"]
[Thu Jul 30 08:39:55.033062 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.033111 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.068735 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/e2e/.env"] [unique_id "amr_y-C233pHXOTf93SW7wAAADM"]
[Thu Jul 30 08:39:55.068906 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/e2e/.env"] [unique_id "amr_y-C233pHXOTf93SW7wAAADM"]
[Thu Jul 30 08:39:55.069234 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.069342 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/e2e/.env"] [unique_id "amr_y-C233pHXOTf93SW7wAAADM"]
[Thu Jul 30 08:39:55.106407 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.106433 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:27314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.141674 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.141699 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.178469 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.178496 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.216687 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.216712 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:27344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.255716 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27346] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/env.backup"] [unique_id "amr_y5kA2-P0e5yhCnL_6QAAAAI"]
[Thu Jul 30 08:39:55.256011 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/env.backup"] [unique_id "amr_y5kA2-P0e5yhCnL_6QAAAAI"]
[Thu Jul 30 08:39:55.256336 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.256457 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/env.backup"] [unique_id "amr_y5kA2-P0e5yhCnL_6QAAAAI"]
[Thu Jul 30 08:39:55.292859 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27350] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/env.bak"] [unique_id "amr_yxSM_3DmF9yKgJn3pQAAAEY"]
[Thu Jul 30 08:39:55.293227 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/env.bak"] [unique_id "amr_yxSM_3DmF9yKgJn3pQAAAEY"]
[Thu Jul 30 08:39:55.293537 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.293668 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:27350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/env.bak"] [unique_id "amr_yxSM_3DmF9yKgJn3pQAAAEY"]
[Thu Jul 30 08:39:55.328113 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.328136 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:27358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.366422 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.366441 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:27360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.403459 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.403490 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:27376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.437371 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:27378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.437396 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:27378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.472012 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.472034 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:27390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.507609 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:27392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.507634 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:27392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.544463 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:27394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.544491 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:27394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.578369 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43598] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amr_y6lzm7G0Pp-9gn6qPwAAAEk"]
[Thu Jul 30 08:39:55.578584 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amr_y6lzm7G0Pp-9gn6qPwAAAEk"]
[Thu Jul 30 08:39:55.578922 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.579054 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amr_y6lzm7G0Pp-9gn6qPwAAAEk"]
[Thu Jul 30 08:39:55.615574 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43614] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "amr_y350CufHvaci0qvl4QAAAEE"]
[Thu Jul 30 08:39:55.615717 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43614] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "amr_y350CufHvaci0qvl4QAAAEE"]
[Thu Jul 30 08:39:55.616024 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.616143 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43614] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "amr_y350CufHvaci0qvl4QAAAEE"]
[Thu Jul 30 08:39:55.653360 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43616] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/env/example/.env"] [unique_id "amr_yzRsn_CrYZtjvMmSgwAAACk"]
[Thu Jul 30 08:39:55.653498 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43616] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/env/example/.env"] [unique_id "amr_yzRsn_CrYZtjvMmSgwAAACk"]
[Thu Jul 30 08:39:55.653814 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.653921 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43616] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/env/example/.env"] [unique_id "amr_yzRsn_CrYZtjvMmSgwAAACk"]
[Thu Jul 30 08:39:55.690637 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.690659 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.727490 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43642] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/env/template/.env"] [unique_id "amr_y6lzm7G0Pp-9gn6qQAAAAEk"]
[Thu Jul 30 08:39:55.727713 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/env/template/.env"] [unique_id "amr_y6lzm7G0Pp-9gn6qQAAAAEk"]
[Thu Jul 30 08:39:55.728078 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.728202 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/env/template/.env"] [unique_id "amr_y6lzm7G0Pp-9gn6qQAAAAEk"]
[Thu Jul 30 08:39:55.762778 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.762800 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.798220 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.798250 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.828178 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:46276] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/admin/laravel.log"] [unique_id "amr_y5kA2-P0e5yhCnL_7AAAAAI"]
[Thu Jul 30 08:39:55.828506 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:46276] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/laravel.log"] [unique_id "amr_y5kA2-P0e5yhCnL_7AAAAAI"]
[Thu Jul 30 08:39:55.828703 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:46276] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_y5kA2-P0e5yhCnL_7AAAAAI"]
[Thu Jul 30 08:39:55.834166 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/environments/local/.env"] [unique_id "amr_yzRsn_CrYZtjvMmShAAAACk"]
[Thu Jul 30 08:39:55.834289 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/environments/local/.env"] [unique_id "amr_yzRsn_CrYZtjvMmShAAAACk"]
[Thu Jul 30 08:39:55.834620 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.834724 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:43674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/environments/local/.env"] [unique_id "amr_yzRsn_CrYZtjvMmShAAAACk"]
[Thu Jul 30 08:39:55.853387 2026] [ssl:error] [pid 2424224:tid 2424224] (EAI 2)Name or service not known: [client 144.76.19.72:21522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:55.853422 2026] [ssl:error] [pid 2424224:tid 2424224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:55.868816 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.868837 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.901419 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/environments/production/.env"] [unique_id "amr_y5DxY3fypotl7b9qtQAAAB4"]
[Thu Jul 30 08:39:55.901548 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/environments/production/.env"] [unique_id "amr_y5DxY3fypotl7b9qtQAAAB4"]
[Thu Jul 30 08:39:55.901857 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.901956 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/environments/production/.env"] [unique_id "amr_y5DxY3fypotl7b9qtQAAAB4"]
[Thu Jul 30 08:39:55.909475 2026] [ssl:error] [pid 2428222:tid 2428222] (EAI 2)Name or service not known: [client 144.76.19.72:21534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:55.909663 2026] [ssl:error] [pid 2428222:tid 2428222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:55.939166 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:43700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.939187 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:43700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.975754 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43706] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/erp/.env"] [unique_id "amr_y8sDPUni1EbX-qViggAAADg"]
[Thu Jul 30 08:39:55.975921 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/erp/.env"] [unique_id "amr_y8sDPUni1EbX-qViggAAADg"]
[Thu Jul 30 08:39:55.976260 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:55.976377 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/erp/.env"] [unique_id "amr_y8sDPUni1EbX-qViggAAADg"]
[Thu Jul 30 08:39:55.978933 2026] [access_compat:error] [pid 2423797:tid 2423797] [client 106.215.157.145:17922] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:39:56.014139 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43712] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/erp/.env.bak"] [unique_id "amr_zH50CufHvaci0qvl4wAAAEE"]
[Thu Jul 30 08:39:56.014358 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/erp/.env.bak"] [unique_id "amr_zH50CufHvaci0qvl4wAAAEE"]
[Thu Jul 30 08:39:56.014734 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.014863 2026] [security2:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43712] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/erp/.env.bak"] [unique_id "amr_zH50CufHvaci0qvl4wAAAEE"]
[Thu Jul 30 08:39:56.048905 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43724] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/erp/.env.dev"] [unique_id "amr_zEQvuHxPljPWrXhrrQAAAC4"]
[Thu Jul 30 08:39:56.049148 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/erp/.env.dev"] [unique_id "amr_zEQvuHxPljPWrXhrrQAAAC4"]
[Thu Jul 30 08:39:56.049487 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.049638 2026] [security2:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/erp/.env.dev"] [unique_id "amr_zEQvuHxPljPWrXhrrQAAAC4"]
[Thu Jul 30 08:39:56.083201 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/erp/.env.dist"] [unique_id "amr_zJDxY3fypotl7b9qtgAAAB4"]
[Thu Jul 30 08:39:56.083335 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/erp/.env.dist"] [unique_id "amr_zJDxY3fypotl7b9qtgAAAB4"]
[Thu Jul 30 08:39:56.083655 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.083757 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/erp/.env.dist"] [unique_id "amr_zJDxY3fypotl7b9qtgAAAB4"]
[Thu Jul 30 08:39:56.117594 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43750] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/erp/.env.local"] [unique_id "amr_zCwlz8EK1c7ip4vjGQAAAEI"]
[Thu Jul 30 08:39:56.117841 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/erp/.env.local"] [unique_id "amr_zCwlz8EK1c7ip4vjGQAAAEI"]
[Thu Jul 30 08:39:56.118193 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.118359 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/erp/.env.local"] [unique_id "amr_zCwlz8EK1c7ip4vjGQAAAEI"]
[Thu Jul 30 08:39:56.152775 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:43758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.152808 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:43758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.190204 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:43772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.190228 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:43772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.228309 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.228332 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.272285 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:43794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.272327 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:43794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.307694 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.307724 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:43806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.342362 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.342393 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.375183 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.375203 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.413315 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.413345 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.450298 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:43856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.450320 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:43856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.488278 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.488298 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:43860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.526336 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:43876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.526358 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:43876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.564276 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:43882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.564299 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:43882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.600241 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.600276 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.633292 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.633313 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.669575 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.669600 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:43922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.704866 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.704905 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:43930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.740915 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:43944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.740939 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:43944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.773884 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:43950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.773903 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:43950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.808365 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:43960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.808386 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:43960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.845857 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.845884 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:43974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.883232 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.883254 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:43980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.919529 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:43986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.919548 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:43986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.955987 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.956015 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.992419 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:56.992456 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.027734 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.027757 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.066218 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:44030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.066251 2026] [core:error] [pid 2424224:tid 2424224] [client 185.177.72.66:44030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.100968 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.100990 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.138986 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.139010 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.175432 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.175467 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.212540 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.212582 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.250169 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.250214 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.287304 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.287328 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.322352 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.322372 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.358731 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.358753 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.392600 2026] [authz_core:error] [pid 2423799:tid 2423799] [client 57.141.0.49:49594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:57.393214 2026] [authz_core:error] [pid 2423799:tid 2423799] [client 57.141.0.49:49594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:57.396439 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44116] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/erp/php.ini"] [unique_id "amr_zalzm7G0Pp-9gn6qRwAAAEk"]
[Thu Jul 30 08:39:57.396730 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/erp/php.ini"] [unique_id "amr_zalzm7G0Pp-9gn6qRwAAAEk"]
[Thu Jul 30 08:39:57.397046 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.397158 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/erp/php.ini"] [unique_id "amr_zalzm7G0Pp-9gn6qRwAAAEk"]
[Thu Jul 30 08:39:57.431694 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.431715 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.468026 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.468052 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.492624 2026] [security2:error] [pid 2426805:tid 2426805] [client 216.73.216.199:43381] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_sqlite.ini"] [unique_id "amr_zduBIW7-_o7ZAhSuVQAAADk"]
[Thu Jul 30 08:39:57.492850 2026] [security2:error] [pid 2426805:tid 2426805] [client 216.73.216.199:43381] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_sqlite.ini"] [unique_id "amr_zduBIW7-_o7ZAhSuVQAAADk"]
[Thu Jul 30 08:39:57.493076 2026] [security2:error] [pid 2426805:tid 2426805] [client 216.73.216.199:43381] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_sqlite.ini"] [unique_id "amr_zduBIW7-_o7ZAhSuVQAAADk"]
[Thu Jul 30 08:39:57.505956 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.505997 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.540351 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.540371 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.575811 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.575833 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.613337 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.613357 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.649846 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.649865 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.684792 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.684842 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.730504 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:44200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.730525 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:44200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.764288 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.764311 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.799124 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.799147 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.835852 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.835873 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.861755 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:46336] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/admin/php.ini"] [unique_id "amr_zalzm7G0Pp-9gn6qSQAAAEk"]
[Thu Jul 30 08:39:57.862124 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:46336] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/php.ini"] [unique_id "amr_zalzm7G0Pp-9gn6qSQAAAEk"]
[Thu Jul 30 08:39:57.862304 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:46336] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_zalzm7G0Pp-9gn6qSQAAAEk"]
[Thu Jul 30 08:39:57.870401 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.870419 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.912838 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.912865 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.948717 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.948753 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.982093 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:57.982117 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.018893 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:44284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.018919 2026] [core:error] [pid 2428115:tid 2428115] [client 185.177.72.66:44284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.054908 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.054936 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.092983 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.093010 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.126215 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44304] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/error/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSiQAAACk"]
[Thu Jul 30 08:39:58.126517 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44304] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/error/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSiQAAACk"]
[Thu Jul 30 08:39:58.127031 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.127245 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44304] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/error/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSiQAAACk"]
[Thu Jul 30 08:39:58.163342 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.163367 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.198184 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44320] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/errors/.env"] [unique_id "amr_zssDPUni1EbX-qViigAAADg"]
[Thu Jul 30 08:39:58.198368 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/errors/.env"] [unique_id "amr_zssDPUni1EbX-qViigAAADg"]
[Thu Jul 30 08:39:58.198718 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.198863 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/errors/.env"] [unique_id "amr_zssDPUni1EbX-qViigAAADg"]
[Thu Jul 30 08:39:58.233760 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44328] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/example/.env"] [unique_id "amr_zus7bSxOV4LObzu7RAAAABo"]
[Thu Jul 30 08:39:58.234008 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/example/.env"] [unique_id "amr_zus7bSxOV4LObzu7RAAAABo"]
[Thu Jul 30 08:39:58.234373 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.234534 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:44328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/example/.env"] [unique_id "amr_zus7bSxOV4LObzu7RAAAABo"]
[Thu Jul 30 08:39:58.271834 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44336] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBAAAACg"]
[Thu Jul 30 08:39:58.272012 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44336] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBAAAACg"]
[Thu Jul 30 08:39:58.272341 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.272465 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44336] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBAAAACg"]
[Thu Jul 30 08:39:58.308837 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44346] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amr_zpDxY3fypotl7b9qvAAAAB4"]
[Thu Jul 30 08:39:58.309014 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amr_zpDxY3fypotl7b9qvAAAAB4"]
[Thu Jul 30 08:39:58.309354 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.309478 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:44346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amr_zpDxY3fypotl7b9qvAAAAB4"]
[Thu Jul 30 08:39:58.345394 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44354] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amr_ziwlz8EK1c7ip4vjIQAAAEI"]
[Thu Jul 30 08:39:58.345642 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44354] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amr_ziwlz8EK1c7ip4vjIQAAAEI"]
[Thu Jul 30 08:39:58.346033 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.346206 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44354] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amr_ziwlz8EK1c7ip4vjIQAAAEI"]
[Thu Jul 30 08:39:58.382052 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/.env"] [unique_id "amr_zigDZvJnuOkhDtU2-gAAACU"]
[Thu Jul 30 08:39:58.382256 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/.env"] [unique_id "amr_zigDZvJnuOkhDtU2-gAAACU"]
[Thu Jul 30 08:39:58.382578 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.382692 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/.env"] [unique_id "amr_zigDZvJnuOkhDtU2-gAAACU"]
[Thu Jul 30 08:39:58.414711 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44366] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/01-simple-model/.env"] [unique_id "amr_zsTyHJeh8MEeCqDSAAAAAEQ"]
[Thu Jul 30 08:39:58.414857 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44366] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/01-simple-model/.env"] [unique_id "amr_zsTyHJeh8MEeCqDSAAAAAEQ"]
[Thu Jul 30 08:39:58.415176 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.415312 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44366] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/01-simple-model/.env"] [unique_id "amr_zsTyHJeh8MEeCqDSAAAAAEQ"]
[Thu Jul 30 08:39:58.451119 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.48:22574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:39:58.451753 2026] [authz_core:error] [pid 2420366:tid 2420366] [client 57.141.0.48:22574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:39:58.452392 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44380] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/02-complex-example/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBQAAACg"]
[Thu Jul 30 08:39:58.452550 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/02-complex-example/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBQAAACg"]
[Thu Jul 30 08:39:58.452872 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.452980 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/02-complex-example/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBQAAACg"]
[Thu Jul 30 08:39:58.491657 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44382] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amr_ziwlz8EK1c7ip4vjIgAAAEI"]
[Thu Jul 30 08:39:58.491893 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amr_ziwlz8EK1c7ip4vjIgAAAEI"]
[Thu Jul 30 08:39:58.492270 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.492412 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:44382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amr_ziwlz8EK1c7ip4vjIgAAAEI"]
[Thu Jul 30 08:39:58.529759 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amr_zsTyHJeh8MEeCqDSAQAAAEQ"]
[Thu Jul 30 08:39:58.529938 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amr_zsTyHJeh8MEeCqDSAQAAAEQ"]
[Thu Jul 30 08:39:58.530264 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.530396 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amr_zsTyHJeh8MEeCqDSAQAAAEQ"]
[Thu Jul 30 08:39:58.567855 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/05-migrations/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBgAAACg"]
[Thu Jul 30 08:39:58.568047 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/05-migrations/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBgAAACg"]
[Thu Jul 30 08:39:58.568376 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.568492 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/05-migrations/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBgAAACg"]
[Thu Jul 30 08:39:58.605771 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44406] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/06-base-service/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSiwAAACk"]
[Thu Jul 30 08:39:58.605956 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/06-base-service/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSiwAAACk"]
[Thu Jul 30 08:39:58.606366 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.606480 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/06-base-service/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSiwAAACk"]
[Thu Jul 30 08:39:58.642818 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44412] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBwAAACg"]
[Thu Jul 30 08:39:58.642998 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBwAAACg"]
[Thu Jul 30 08:39:58.643326 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.643440 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcBwAAACg"]
[Thu Jul 30 08:39:58.677978 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44424] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/08-performance/.env"] [unique_id "amr_zhaJ6AWJ3ghWLIo3EAAAAEM"]
[Thu Jul 30 08:39:58.678200 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/08-performance/.env"] [unique_id "amr_zhaJ6AWJ3ghWLIo3EAAAAEM"]
[Thu Jul 30 08:39:58.678579 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.678732 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/08-performance/.env"] [unique_id "amr_zhaJ6AWJ3ghWLIo3EAAAAEM"]
[Thu Jul 30 08:39:58.713307 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44438] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/09-production/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSjAAAACk"]
[Thu Jul 30 08:39:58.713540 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44438] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/09-production/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSjAAAACk"]
[Thu Jul 30 08:39:58.713892 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.714045 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44438] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/09-production/.env"] [unique_id "amr_zjRsn_CrYZtjvMmSjAAAACk"]
[Thu Jul 30 08:39:58.718615 2026] [core:error] [pid 2426805:tid 2426805] (13)Permission denied: [client 216.73.216.199:43381] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/objects_partial
[Thu Jul 30 08:39:58.747167 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44448] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "amr_zqlzm7G0Pp-9gn6qSwAAAEk"]
[Thu Jul 30 08:39:58.747356 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44448] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "amr_zqlzm7G0Pp-9gn6qSwAAAEk"]
[Thu Jul 30 08:39:58.747717 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.747878 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44448] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "amr_zqlzm7G0Pp-9gn6qSwAAAEk"]
[Thu Jul 30 08:39:58.780479 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44452] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/11-transactions/.env"] [unique_id "amr_zssDPUni1EbX-qVijQAAADg"]
[Thu Jul 30 08:39:58.780728 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/11-transactions/.env"] [unique_id "amr_zssDPUni1EbX-qVijQAAADg"]
[Thu Jul 30 08:39:58.781118 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.781281 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/11-transactions/.env"] [unique_id "amr_zssDPUni1EbX-qVijQAAADg"]
[Thu Jul 30 08:39:58.817104 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcCAAAACg"]
[Thu Jul 30 08:39:58.817295 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcCAAAACg"]
[Thu Jul 30 08:39:58.817629 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.817763 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amr_zj-G1VCKQzXMG6UcCAAAACg"]
[Thu Jul 30 08:39:58.853969 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44470] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amr_zhaJ6AWJ3ghWLIo3EQAAAEM"]
[Thu Jul 30 08:39:58.854163 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amr_zhaJ6AWJ3ghWLIo3EQAAAEM"]
[Thu Jul 30 08:39:58.854470 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.854594 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amr_zhaJ6AWJ3ghWLIo3EQAAAEM"]
[Thu Jul 30 08:39:58.893341 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44486] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/sdl-first/.env"] [unique_id "amr_zigDZvJnuOkhDtU2_QAAACU"]
[Thu Jul 30 08:39:58.893595 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/sdl-first/.env"] [unique_id "amr_zigDZvJnuOkhDtU2_QAAACU"]
[Thu Jul 30 08:39:58.893965 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.894119 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/sdl-first/.env"] [unique_id "amr_zigDZvJnuOkhDtU2_QAAACU"]
[Thu Jul 30 08:39:58.931839 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44490] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amr_zpkA2-P0e5yhCnL_9AAAAAI"]
[Thu Jul 30 08:39:58.932100 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amr_zpkA2-P0e5yhCnL_9AAAAAI"]
[Thu Jul 30 08:39:58.932459 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.932615 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amr_zpkA2-P0e5yhCnL_9AAAAAI"]
[Thu Jul 30 08:39:58.968776 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amr_zssDPUni1EbX-qVijgAAADg"]
[Thu Jul 30 08:39:58.969010 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amr_zssDPUni1EbX-qVijgAAADg"]
[Thu Jul 30 08:39:58.969487 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:58.969635 2026] [security2:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amr_zssDPUni1EbX-qVijgAAADg"]
[Thu Jul 30 08:39:58.969966 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:21544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:58.969990 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:59.006731 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/web/.env"] [unique_id "amr_zxaJ6AWJ3ghWLIo3EgAAAEM"]
[Thu Jul 30 08:39:59.006985 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/web/.env"] [unique_id "amr_zxaJ6AWJ3ghWLIo3EgAAAEM"]
[Thu Jul 30 08:39:59.007344 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.007476 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/web/.env"] [unique_id "amr_zxaJ6AWJ3ghWLIo3EgAAAEM"]
[Thu Jul 30 08:39:59.027711 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:21546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:39:59.027745 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:39:59.044921 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44514] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amr_z6lzm7G0Pp-9gn6qTQAAAEk"]
[Thu Jul 30 08:39:59.045103 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amr_z6lzm7G0Pp-9gn6qTQAAAEk"]
[Thu Jul 30 08:39:59.045408 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.045512 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amr_z6lzm7G0Pp-9gn6qTQAAAEk"]
[Thu Jul 30 08:39:59.079863 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44528] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/with-dotenv/.env"] [unique_id "amr_z5kA2-P0e5yhCnL_9QAAAAI"]
[Thu Jul 30 08:39:59.080122 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/with-dotenv/.env"] [unique_id "amr_z5kA2-P0e5yhCnL_9QAAAAI"]
[Thu Jul 30 08:39:59.080473 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.080622 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/with-dotenv/.env"] [unique_id "amr_z5kA2-P0e5yhCnL_9QAAAAI"]
[Thu Jul 30 08:39:59.119311 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44530] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amr_zz-G1VCKQzXMG6UcCQAAACg"]
[Thu Jul 30 08:39:59.119494 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44530] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amr_zz-G1VCKQzXMG6UcCQAAACg"]
[Thu Jul 30 08:39:59.119835 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.119954 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44530] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amr_zz-G1VCKQzXMG6UcCQAAACg"]
[Thu Jul 30 08:39:59.155977 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amr_z47QYn_mSSYdmItKewAAAA0"]
[Thu Jul 30 08:39:59.156224 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amr_z47QYn_mSSYdmItKewAAAA0"]
[Thu Jul 30 08:39:59.156575 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.156718 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amr_z47QYn_mSSYdmItKewAAAA0"]
[Thu Jul 30 08:39:59.191225 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "amr_zxaJ6AWJ3ghWLIo3EwAAAEM"]
[Thu Jul 30 08:39:59.191385 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "amr_zxaJ6AWJ3ghWLIo3EwAAAEM"]
[Thu Jul 30 08:39:59.191711 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.191837 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "amr_zxaJ6AWJ3ghWLIo3EwAAAEM"]
[Thu Jul 30 08:39:59.227865 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amr_zygDZvJnuOkhDtU2_gAAACU"]
[Thu Jul 30 08:39:59.228095 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amr_zygDZvJnuOkhDtU2_gAAACU"]
[Thu Jul 30 08:39:59.228440 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.228599 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amr_zygDZvJnuOkhDtU2_gAAACU"]
[Thu Jul 30 08:39:59.265321 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44578] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/export/.env"] [unique_id "amr_z5kA2-P0e5yhCnL_9gAAAAI"]
[Thu Jul 30 08:39:59.265551 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44578] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/export/.env"] [unique_id "amr_z5kA2-P0e5yhCnL_9gAAAAI"]
[Thu Jul 30 08:39:59.265932 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.266090 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44578] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/export/.env"] [unique_id "amr_z5kA2-P0e5yhCnL_9gAAAAI"]
[Thu Jul 30 08:39:59.303305 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44592] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fastlane/.env"] [unique_id "amr_zzRsn_CrYZtjvMmSjwAAACk"]
[Thu Jul 30 08:39:59.303519 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fastlane/.env"] [unique_id "amr_zzRsn_CrYZtjvMmSjwAAACk"]
[Thu Jul 30 08:39:59.303989 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.304188 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44592] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fastlane/.env"] [unique_id "amr_zzRsn_CrYZtjvMmSjwAAACk"]
[Thu Jul 30 08:39:59.335971 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/favicons/.env"] [unique_id "amr_zz-G1VCKQzXMG6UcCgAAACg"]
[Thu Jul 30 08:39:59.336107 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/favicons/.env"] [unique_id "amr_zz-G1VCKQzXMG6UcCgAAACg"]
[Thu Jul 30 08:39:59.336427 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.336529 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/favicons/.env"] [unique_id "amr_zz-G1VCKQzXMG6UcCgAAACg"]
[Thu Jul 30 08:39:59.370329 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44600] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/favs/.env"] [unique_id "amr_z47QYn_mSSYdmItKfAAAAA0"]
[Thu Jul 30 08:39:59.370526 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/favs/.env"] [unique_id "amr_z47QYn_mSSYdmItKfAAAAA0"]
[Thu Jul 30 08:39:59.370894 2026] [core:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.371040 2026] [security2:error] [pid 2419960:tid 2419960] [client 185.177.72.66:44600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/favs/.env"] [unique_id "amr_z47QYn_mSSYdmItKfAAAAA0"]
[Thu Jul 30 08:39:59.410239 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44604] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/feature/.env"] [unique_id "amr_zygDZvJnuOkhDtU2_wAAACU"]
[Thu Jul 30 08:39:59.410435 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/feature/.env"] [unique_id "amr_zygDZvJnuOkhDtU2_wAAACU"]
[Thu Jul 30 08:39:59.410774 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.410921 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/feature/.env"] [unique_id "amr_zygDZvJnuOkhDtU2_wAAACU"]
[Thu Jul 30 08:39:59.448844 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/feature/.env.bak"] [unique_id "amr_z5kA2-P0e5yhCnL_9wAAAAI"]
[Thu Jul 30 08:39:59.449093 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/feature/.env.bak"] [unique_id "amr_z5kA2-P0e5yhCnL_9wAAAAI"]
[Thu Jul 30 08:39:59.449429 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.449575 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/feature/.env.bak"] [unique_id "amr_z5kA2-P0e5yhCnL_9wAAAAI"]
[Thu Jul 30 08:39:59.484244 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44624] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/feature/.env.dev"] [unique_id "amr_z6lzm7G0Pp-9gn6qTwAAAEk"]
[Thu Jul 30 08:39:59.484413 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44624] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/feature/.env.dev"] [unique_id "amr_z6lzm7G0Pp-9gn6qTwAAAEk"]
[Thu Jul 30 08:39:59.484729 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.484839 2026] [security2:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44624] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/feature/.env.dev"] [unique_id "amr_z6lzm7G0Pp-9gn6qTwAAAEk"]
[Thu Jul 30 08:39:59.520165 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44634] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/feature/.env.dist"] [unique_id "amr_zzRsn_CrYZtjvMmSkAAAACk"]
[Thu Jul 30 08:39:59.520384 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44634] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/feature/.env.dist"] [unique_id "amr_zzRsn_CrYZtjvMmSkAAAACk"]
[Thu Jul 30 08:39:59.520743 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.520877 2026] [security2:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44634] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/feature/.env.dist"] [unique_id "amr_zzRsn_CrYZtjvMmSkAAAACk"]
[Thu Jul 30 08:39:59.555166 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44640] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/feature/.env.local"] [unique_id "amr_zz-G1VCKQzXMG6UcCwAAACg"]
[Thu Jul 30 08:39:59.555290 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/feature/.env.local"] [unique_id "amr_zz-G1VCKQzXMG6UcCwAAACg"]
[Thu Jul 30 08:39:59.555603 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.555703 2026] [security2:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/feature/.env.local"] [unique_id "amr_zz-G1VCKQzXMG6UcCwAAACg"]
[Thu Jul 30 08:39:59.593652 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.593685 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.629010 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.629037 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.665226 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.665253 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.700171 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.700190 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:44668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.736281 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.736303 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.773452 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.773482 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.808523 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.808556 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.844457 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.844474 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.881878 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.881906 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:44724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.916972 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.917011 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.956468 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.956486 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:44746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.992945 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:39:59.992962 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.030226 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.030246 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.065646 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:44762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.065675 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:44762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.100808 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.100839 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.137016 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:44784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.137036 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:44784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.172815 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.172835 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.207451 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.207477 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:44814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.243779 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.243802 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.279666 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.279700 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.314387 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.314413 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:44838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.349507 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:44848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.349528 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:44848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.386423 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:44862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.386442 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:44862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.420762 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.420790 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.455468 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:44882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.455485 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:44882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.490719 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.490736 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.525339 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.525367 2026] [core:error] [pid 2425341:tid 2425341] [client 185.177.72.66:44898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.561382 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.561409 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.598328 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.598349 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.633854 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:44912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.633870 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:44912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.668125 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:44922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.668153 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:44922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.702695 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.702723 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:44930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.737607 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:44946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.737627 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:44946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.775737 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.775752 2026] [core:error] [pid 2411415:tid 2411415] [client 185.177.72.66:44956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.813370 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/feature/php.ini"] [unique_id "amr_0HQV4ijopiU82V8ysAAAAAY"]
[Thu Jul 30 08:40:00.813754 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/feature/php.ini"] [unique_id "amr_0HQV4ijopiU82V8ysAAAAAY"]
[Thu Jul 30 08:40:00.814110 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.814233 2026] [security2:error] [pid 2411149:tid 2411149] [client 185.177.72.66:44966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/feature/php.ini"] [unique_id "amr_0HQV4ijopiU82V8ysAAAAAY"]
[Thu Jul 30 08:40:00.837275 2026] [security2:error] [pid 2426805:tid 2426805] [client 216.73.216.199:43381] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/mbstring.ini"] [unique_id "amr_0NuBIW7-_o7ZAhSuYAAAADk"]
[Thu Jul 30 08:40:00.837608 2026] [security2:error] [pid 2426805:tid 2426805] [client 216.73.216.199:43381] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/mbstring.ini"] [unique_id "amr_0NuBIW7-_o7ZAhSuYAAAADk"]
[Thu Jul 30 08:40:00.837840 2026] [security2:error] [pid 2426805:tid 2426805] [client 216.73.216.199:43381] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/mbstring.ini"] [unique_id "amr_0NuBIW7-_o7ZAhSuYAAAADk"]
[Thu Jul 30 08:40:00.851212 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.851231 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:44972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.888687 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:44980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.888714 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:44980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.924977 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:44982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.924995 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:44982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.963316 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:44998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.963344 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:44998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.997671 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:00.997690 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.035146 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:45016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.035176 2026] [core:error] [pid 2411420:tid 2411420] [client 185.177.72.66:45016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.074829 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.074849 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.109003 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:45042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.109021 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:45042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.146763 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:45050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.146785 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:45050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.179806 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:45054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.179835 2026] [core:error] [pid 2427542:tid 2427542] [client 185.177.72.66:45054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.213147 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.213167 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.251365 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.251405 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.289991 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.290013 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.325752 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.325776 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.359877 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.359904 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.396447 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.396468 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.436165 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:45118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.436185 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:45118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.471759 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:45130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.471789 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:45130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.507429 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fedex/.env"] [unique_id "amr_0Suprmrr0feFzOS7NQAAAEw"]
[Thu Jul 30 08:40:01.507618 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fedex/.env"] [unique_id "amr_0Suprmrr0feFzOS7NQAAAEw"]
[Thu Jul 30 08:40:01.507949 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.508094 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fedex/.env"] [unique_id "amr_0Suprmrr0feFzOS7NQAAAEw"]
[Thu Jul 30 08:40:01.543618 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:45152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.543638 2026] [core:error] [pid 2426800:tid 2426800] [client 185.177.72.66:45152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.579141 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45154] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fhir-api/.env"] [unique_id "amr_0bqoJzgQGqRwLIKcSAAAABQ"]
[Thu Jul 30 08:40:01.579374 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fhir-api/.env"] [unique_id "amr_0bqoJzgQGqRwLIKcSAAAABQ"]
[Thu Jul 30 08:40:01.579727 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.579858 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fhir-api/.env"] [unique_id "amr_0bqoJzgQGqRwLIKcSAAAABQ"]
[Thu Jul 30 08:40:01.616295 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.616316 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.652617 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.652636 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.690041 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:45180] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/files/.env"] [unique_id "amr_0QvbpUeckUfXmp7bZgAAAEc"]
[Thu Jul 30 08:40:01.690210 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:45180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/files/.env"] [unique_id "amr_0QvbpUeckUfXmp7bZgAAAEc"]
[Thu Jul 30 08:40:01.690549 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:45180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.690684 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:45180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/files/.env"] [unique_id "amr_0QvbpUeckUfXmp7bZgAAAEc"]
[Thu Jul 30 08:40:01.725255 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:45184] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fileserver/.env"] [unique_id "amr_0aCuPSoE0uFFzriBHwAAABY"]
[Thu Jul 30 08:40:01.725446 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:45184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fileserver/.env"] [unique_id "amr_0aCuPSoE0uFFzriBHwAAABY"]
[Thu Jul 30 08:40:01.725808 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:45184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.725939 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:45184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fileserver/.env"] [unique_id "amr_0aCuPSoE0uFFzriBHwAAABY"]
[Thu Jul 30 08:40:01.759863 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:45196] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/films/.env"] [unique_id "amr_0cTyHJeh8MEeCqDSCQAAAEQ"]
[Thu Jul 30 08:40:01.759986 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:45196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/films/.env"] [unique_id "amr_0cTyHJeh8MEeCqDSCQAAAEQ"]
[Thu Jul 30 08:40:01.760312 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:45196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.760413 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:45196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/films/.env"] [unique_id "amr_0cTyHJeh8MEeCqDSCQAAAEQ"]
[Thu Jul 30 08:40:01.794197 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45212] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amr_0Suprmrr0feFzOS7NgAAAEw"]
[Thu Jul 30 08:40:01.794328 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amr_0Suprmrr0feFzOS7NgAAAEw"]
[Thu Jul 30 08:40:01.794646 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.794763 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amr_0Suprmrr0feFzOS7NgAAAEw"]
[Thu Jul 30 08:40:01.831946 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:45218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/first-network/.env"] [unique_id "amr_0ZkA2-P0e5yhCnL__QAAAAI"]
[Thu Jul 30 08:40:01.832180 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:45218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/first-network/.env"] [unique_id "amr_0ZkA2-P0e5yhCnL__QAAAAI"]
[Thu Jul 30 08:40:01.832511 2026] [core:error] [pid 2425019:tid 2425019] [client 185.177.72.66:45218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.832641 2026] [security2:error] [pid 2425019:tid 2425019] [client 185.177.72.66:45218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/first-network/.env"] [unique_id "amr_0ZkA2-P0e5yhCnL__QAAAAI"]
[Thu Jul 30 08:40:01.869373 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45220] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fisdom/fisdom/.env"] [unique_id "amr_0bqoJzgQGqRwLIKcSQAAABQ"]
[Thu Jul 30 08:40:01.869580 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fisdom/fisdom/.env"] [unique_id "amr_0bqoJzgQGqRwLIKcSQAAABQ"]
[Thu Jul 30 08:40:01.869904 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.870024 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fisdom/fisdom/.env"] [unique_id "amr_0bqoJzgQGqRwLIKcSQAAABQ"]
[Thu Jul 30 08:40:01.906314 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fixtures/blocks/.env"] [unique_id "amr_0Swlz8EK1c7ip4vjKAAAAEI"]
[Thu Jul 30 08:40:01.906497 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fixtures/blocks/.env"] [unique_id "amr_0Swlz8EK1c7ip4vjKAAAAEI"]
[Thu Jul 30 08:40:01.906823 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.906930 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:45230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fixtures/blocks/.env"] [unique_id "amr_0Swlz8EK1c7ip4vjKAAAAEI"]
[Thu Jul 30 08:40:01.944038 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amr_0SgDZvJnuOkhDtU3BQAAACU"]
[Thu Jul 30 08:40:01.944232 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amr_0SgDZvJnuOkhDtU3BQAAACU"]
[Thu Jul 30 08:40:01.944550 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.944724 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amr_0SgDZvJnuOkhDtU3BQAAACU"]
[Thu Jul 30 08:40:01.968664 2026] [security2:error] [pid 2411420:tid 2411420] [client 185.46.14.157:39552] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.shelterforum.info"] [uri "/xmlrpc.php"] [unique_id "amr_0UAEOnquTlmZJ4R_dgAAAC8"]
[Thu Jul 30 08:40:01.980184 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fixtures/flight/.env"] [unique_id "amr_0Rpvfcvm04JnKtSWFgAAAA8"]
[Thu Jul 30 08:40:01.980377 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fixtures/flight/.env"] [unique_id "amr_0Rpvfcvm04JnKtSWFgAAAA8"]
[Thu Jul 30 08:40:01.984790 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:01.984952 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fixtures/flight/.env"] [unique_id "amr_0Rpvfcvm04JnKtSWFgAAAA8"]
[Thu Jul 30 08:40:02.026034 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45254] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "amr_0oFx8Bx4ITcCEtgoHAAAADc"]
[Thu Jul 30 08:40:02.026249 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "amr_0oFx8Bx4ITcCEtgoHAAAADc"]
[Thu Jul 30 08:40:02.026579 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.026720 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "amr_0oFx8Bx4ITcCEtgoHAAAADc"]
[Thu Jul 30 08:40:02.054558 2026] [security2:error] [pid 2428312:tid 2428312] [client 45.148.10.67:43606] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.git/config"] [unique_id "amr_0sTyHJeh8MEeCqDSCgAAAEQ"]
[Thu Jul 30 08:40:02.054751 2026] [security2:error] [pid 2428312:tid 2428312] [client 45.148.10.67:43606] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.git/config"] [unique_id "amr_0sTyHJeh8MEeCqDSCgAAAEQ"]
[Thu Jul 30 08:40:02.054920 2026] [security2:error] [pid 2428312:tid 2428312] [client 45.148.10.67:43606] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/403.shtml"] [unique_id "amr_0sTyHJeh8MEeCqDSCgAAAEQ"]
[Thu Jul 30 08:40:02.071040 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45266] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/flask/.env"] [unique_id "amr_0iuprmrr0feFzOS7NwAAAEw"]
[Thu Jul 30 08:40:02.071245 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/flask/.env"] [unique_id "amr_0iuprmrr0feFzOS7NwAAAEw"]
[Thu Jul 30 08:40:02.071570 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.071691 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/flask/.env"] [unique_id "amr_0iuprmrr0feFzOS7NwAAAEw"]
[Thu Jul 30 08:40:02.087535 2026] [ssl:error] [pid 2412471:tid 2412471] (EAI 2)Name or service not known: [client 144.76.19.72:37878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:02.087579 2026] [ssl:error] [pid 2412471:tid 2412471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:02.107920 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:45276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.107942 2026] [core:error] [pid 2411149:tid 2411149] [client 185.177.72.66:45276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.139783 2026] [ssl:error] [pid 2428222:tid 2428222] (EAI 2)Name or service not known: [client 144.76.19.72:37890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:02.139815 2026] [ssl:error] [pid 2428222:tid 2428222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:02.148199 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.148224 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.184626 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.184670 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.224765 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.224790 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.264530 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45304] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/flask_test_uploads/.env"] [unique_id "amr_0oFx8Bx4ITcCEtgoHQAAADc"]
[Thu Jul 30 08:40:02.264815 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45304] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/flask_test_uploads/.env"] [unique_id "amr_0oFx8Bx4ITcCEtgoHQAAADc"]
[Thu Jul 30 08:40:02.265467 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.265666 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45304] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/flask_test_uploads/.env"] [unique_id "amr_0oFx8Bx4ITcCEtgoHQAAADc"]
[Thu Jul 30 08:40:02.303171 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45306] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fm/.env"] [unique_id "amr_0iuprmrr0feFzOS7OAAAAEw"]
[Thu Jul 30 08:40:02.303365 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fm/.env"] [unique_id "amr_0iuprmrr0feFzOS7OAAAAEw"]
[Thu Jul 30 08:40:02.303698 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.303836 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fm/.env"] [unique_id "amr_0iuprmrr0feFzOS7OAAAAEw"]
[Thu Jul 30 08:40:02.337575 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45322] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/font-icons/.env"] [unique_id "amr_0rqoJzgQGqRwLIKcSgAAABQ"]
[Thu Jul 30 08:40:02.337754 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45322] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/font-icons/.env"] [unique_id "amr_0rqoJzgQGqRwLIKcSgAAABQ"]
[Thu Jul 30 08:40:02.338078 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.338197 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45322] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/font-icons/.env"] [unique_id "amr_0rqoJzgQGqRwLIKcSgAAABQ"]
[Thu Jul 30 08:40:02.373187 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45330] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/fonts/.env"] [unique_id "amr_0igDZvJnuOkhDtU3BwAAACU"]
[Thu Jul 30 08:40:02.373379 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/fonts/.env"] [unique_id "amr_0igDZvJnuOkhDtU3BwAAACU"]
[Thu Jul 30 08:40:02.373719 2026] [core:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.373842 2026] [security2:error] [pid 2429943:tid 2429943] [client 185.177.72.66:45330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/fonts/.env"] [unique_id "amr_0igDZvJnuOkhDtU3BwAAACU"]
[Thu Jul 30 08:40:02.409131 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:45334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.409162 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:45334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.444036 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.444059 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.478847 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.478870 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:02.594702 2026] [authz_core:error] [pid 2412471:tid 2412471] [client 57.141.0.54:46928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:02.595336 2026] [authz_core:error] [pid 2412471:tid 2412471] [client 57.141.0.54:46928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:03.333034 2026] [authz_core:error] [pid 2423797:tid 2423797] [client 57.141.0.38:40724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:03.333664 2026] [authz_core:error] [pid 2423797:tid 2423797] [client 57.141.0.38:40724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:03.515774 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:45362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/front-app/.env"] [unique_id "amr_0y7K7U7WHMW7oLBjUQAAAEA"]
[Thu Jul 30 08:40:03.515904 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:45362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/front-app/.env"] [unique_id "amr_0y7K7U7WHMW7oLBjUQAAAEA"]
[Thu Jul 30 08:40:03.516229 2026] [core:error] [pid 2427778:tid 2427778] [client 185.177.72.66:45362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.516358 2026] [security2:error] [pid 2427778:tid 2427778] [client 185.177.72.66:45362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/front-app/.env"] [unique_id "amr_0y7K7U7WHMW7oLBjUQAAAEA"]
[Thu Jul 30 08:40:03.553411 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45370] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/front-empathy/.env"] [unique_id "amr_0xpvfcvm04JnKtSWGgAAAA8"]
[Thu Jul 30 08:40:03.553550 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/front-empathy/.env"] [unique_id "amr_0xpvfcvm04JnKtSWGgAAAA8"]
[Thu Jul 30 08:40:03.553908 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.554023 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/front-empathy/.env"] [unique_id "amr_0xpvfcvm04JnKtSWGgAAAA8"]
[Thu Jul 30 08:40:03.589818 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:45372] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/front-end/.env"] [unique_id "amr_05DxY3fypotl7b9qvgAAAB4"]
[Thu Jul 30 08:40:03.589983 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:45372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/front-end/.env"] [unique_id "amr_05DxY3fypotl7b9qvgAAAB4"]
[Thu Jul 30 08:40:03.590308 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:45372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.590466 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:45372] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/front-end/.env"] [unique_id "amr_05DxY3fypotl7b9qvgAAAB4"]
[Thu Jul 30 08:40:03.624931 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45376] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/front/.env"] [unique_id "amr_0-C233pHXOTf93SW_AAAADM"]
[Thu Jul 30 08:40:03.625112 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45376] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/front/.env"] [unique_id "amr_0-C233pHXOTf93SW_AAAADM"]
[Thu Jul 30 08:40:03.625431 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.625542 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45376] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/front/.env"] [unique_id "amr_0-C233pHXOTf93SW_AAAADM"]
[Thu Jul 30 08:40:03.660242 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/front/src/.env"] [unique_id "amr_0xpvfcvm04JnKtSWGwAAAA8"]
[Thu Jul 30 08:40:03.660413 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/front/src/.env"] [unique_id "amr_0xpvfcvm04JnKtSWGwAAAA8"]
[Thu Jul 30 08:40:03.660747 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.660857 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/front/src/.env"] [unique_id "amr_0xpvfcvm04JnKtSWGwAAAA8"]
[Thu Jul 30 08:40:03.698615 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:45400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.698646 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:45400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.737920 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45406] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "amr_0-C233pHXOTf93SW_QAAADM"]
[Thu Jul 30 08:40:03.738089 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "amr_0-C233pHXOTf93SW_QAAADM"]
[Thu Jul 30 08:40:03.738405 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.738515 2026] [security2:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "amr_0-C233pHXOTf93SW_QAAADM"]
[Thu Jul 30 08:40:03.774523 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/frontend/react/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHAAAAA8"]
[Thu Jul 30 08:40:03.774688 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/frontend/react/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHAAAAA8"]
[Thu Jul 30 08:40:03.775023 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.775146 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/frontend/react/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHAAAAA8"]
[Thu Jul 30 08:40:03.809297 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45424] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/frontend/vue/.env"] [unique_id "amr_0010g1cPUQyHDS7yNQAAABg"]
[Thu Jul 30 08:40:03.809467 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/frontend/vue/.env"] [unique_id "amr_0010g1cPUQyHDS7yNQAAABg"]
[Thu Jul 30 08:40:03.809812 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.809926 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/frontend/vue/.env"] [unique_id "amr_0010g1cPUQyHDS7yNQAAABg"]
[Thu Jul 30 08:40:03.848460 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.848482 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.884157 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/frontendfinaltest/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHQAAAA8"]
[Thu Jul 30 08:40:03.884293 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/frontendfinaltest/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHQAAAA8"]
[Thu Jul 30 08:40:03.884617 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.884719 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/frontendfinaltest/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHQAAAA8"]
[Thu Jul 30 08:40:03.920138 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ftp/.env"] [unique_id "amr_0-s7bSxOV4LObzu7RgAAABo"]
[Thu Jul 30 08:40:03.920290 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ftp/.env"] [unique_id "amr_0-s7bSxOV4LObzu7RgAAABo"]
[Thu Jul 30 08:40:03.920612 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.920721 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ftp/.env"] [unique_id "amr_0-s7bSxOV4LObzu7RgAAABo"]
[Thu Jul 30 08:40:03.943232 2026] [security2:error] [pid 2423797:tid 2423797] [client 51.68.111.212:36133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jd-media.tv"] [uri "/robots.txt"] [unique_id "amr_0-C233pHXOTf93SW_wAAADM"]
[Thu Jul 30 08:40:03.956786 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45454] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ftpmaster/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHgAAAA8"]
[Thu Jul 30 08:40:03.956921 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45454] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ftpmaster/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHgAAAA8"]
[Thu Jul 30 08:40:03.957248 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.957351 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45454] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ftpmaster/.env"] [unique_id "amr_0xpvfcvm04JnKtSWHgAAAA8"]
[Thu Jul 30 08:40:03.993629 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45468] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/function/.env"] [unique_id "amr_0-s7bSxOV4LObzu7RwAAABo"]
[Thu Jul 30 08:40:03.993772 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45468] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/function/.env"] [unique_id "amr_0-s7bSxOV4LObzu7RwAAABo"]
[Thu Jul 30 08:40:03.994103 2026] [core:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:03.994213 2026] [security2:error] [pid 2429941:tid 2429941] [client 185.177.72.66:45468] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/function/.env"] [unique_id "amr_0-s7bSxOV4LObzu7RwAAABo"]
[Thu Jul 30 08:40:04.027954 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45476] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/function/.env.bak"] [unique_id "amr_1Bpvfcvm04JnKtSWHwAAAA8"]
[Thu Jul 30 08:40:04.028115 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45476] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/function/.env.bak"] [unique_id "amr_1Bpvfcvm04JnKtSWHwAAAA8"]
[Thu Jul 30 08:40:04.028418 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.028522 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45476] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/function/.env.bak"] [unique_id "amr_1Bpvfcvm04JnKtSWHwAAAA8"]
[Thu Jul 30 08:40:04.063867 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45484] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/function/.env.dev"] [unique_id "amr_1Bpvfcvm04JnKtSWIAAAAA8"]
[Thu Jul 30 08:40:04.064031 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45484] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/function/.env.dev"] [unique_id "amr_1Bpvfcvm04JnKtSWIAAAAA8"]
[Thu Jul 30 08:40:04.064354 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.064455 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45484] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/function/.env.dev"] [unique_id "amr_1Bpvfcvm04JnKtSWIAAAAA8"]
[Thu Jul 30 08:40:04.243597 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45492] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/function/.env.dist"] [unique_id "amr_1LqoJzgQGqRwLIKcTQAAABQ"]
[Thu Jul 30 08:40:04.243771 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45492] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/function/.env.dist"] [unique_id "amr_1LqoJzgQGqRwLIKcTQAAABQ"]
[Thu Jul 30 08:40:04.244098 2026] [core:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.244207 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:45492] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/function/.env.dist"] [unique_id "amr_1LqoJzgQGqRwLIKcTQAAABQ"]
[Thu Jul 30 08:40:04.285882 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:46506] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/admin/web.config"] [unique_id "amr_1LqoJzgQGqRwLIKcTgAAABQ"]
[Thu Jul 30 08:40:04.286111 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:46506] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /admin/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admin/web.config"] [unique_id "amr_1LqoJzgQGqRwLIKcTgAAABQ"]
[Thu Jul 30 08:40:04.286243 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:46506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admin/web.config"] [unique_id "amr_1LqoJzgQGqRwLIKcTgAAABQ"]
[Thu Jul 30 08:40:04.286410 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:46506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_1LqoJzgQGqRwLIKcTgAAABQ"]
[Thu Jul 30 08:40:04.301375 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45508] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/function/.env.local"] [unique_id "amr_1Cuprmrr0feFzOS7PgAAAEw"]
[Thu Jul 30 08:40:04.301510 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/function/.env.local"] [unique_id "amr_1Cuprmrr0feFzOS7PgAAAEw"]
[Thu Jul 30 08:40:04.301833 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.301930 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/function/.env.local"] [unique_id "amr_1Cuprmrr0feFzOS7PgAAAEw"]
[Thu Jul 30 08:40:04.336397 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.336415 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.372820 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.372837 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.407339 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.407356 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.441415 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.441433 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.476790 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.476812 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.512292 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.512314 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.547908 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.547925 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.585473 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.585493 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:45604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.621943 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.621963 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:45610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.658426 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.658448 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.691819 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.691837 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.741759 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.741779 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.777895 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.777917 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:45668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.812985 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.813004 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.846969 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.846987 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.883499 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.883521 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.919534 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.919555 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.954423 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.954445 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.987375 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:04.987405 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.027860 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.027901 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.064132 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.064150 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.067417 2026] [core:error] [pid 2426661:tid 2426661] [client 66.249.64.172:57211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.067435 2026] [core:error] [pid 2426661:tid 2426661] [client 66.249.64.172:57211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.104012 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.104034 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.142798 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.142817 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.181086 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.181106 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.196271 2026] [ssl:error] [pid 2426661:tid 2426661] (EAI 2)Name or service not known: [client 144.76.19.72:37902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:05.196296 2026] [ssl:error] [pid 2426661:tid 2426661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:05.217317 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.217333 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.249938 2026] [ssl:error] [pid 2420366:tid 2420366] (EAI 2)Name or service not known: [client 144.76.19.72:37918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:05.249957 2026] [ssl:error] [pid 2420366:tid 2420366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:05.253411 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.253427 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:45784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.289517 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.289534 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.326161 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.326180 2026] [core:error] [pid 2433322:tid 2433322] [client 185.177.72.66:45814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.369842 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.369859 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.404906 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.404925 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.441155 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.441174 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.444287 2026] [security2:error] [pid 2433322:tid 2433322] [client 185.177.72.66:46540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/adminer/.env"] [unique_id "amr_1ccgA4XBpkwmkf-OrAAAAAE"]
[Thu Jul 30 08:40:05.444420 2026] [security2:error] [pid 2433322:tid 2433322] [client 185.177.72.66:46540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/adminer/.env"] [unique_id "amr_1ccgA4XBpkwmkf-OrAAAAAE"]
[Thu Jul 30 08:40:05.444621 2026] [security2:error] [pid 2433322:tid 2433322] [client 185.177.72.66:46540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_1ccgA4XBpkwmkf-OrAAAAAE"]
[Thu Jul 30 08:40:05.477340 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.477362 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.513878 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.513897 2026] [core:error] [pid 2420366:tid 2420366] [client 185.177.72.66:45876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.549794 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.549824 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:45892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.585855 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37964] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/function/php.ini"] [unique_id "amr_1U10g1cPUQyHDS7yPwAAABg"]
[Thu Jul 30 08:40:05.586200 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/function/php.ini"] [unique_id "amr_1U10g1cPUQyHDS7yPwAAABg"]
[Thu Jul 30 08:40:05.586513 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.586624 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/function/php.ini"] [unique_id "amr_1U10g1cPUQyHDS7yPwAAABg"]
[Thu Jul 30 08:40:05.621367 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.621386 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.657814 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.657843 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.692019 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:31144] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env"] [unique_id "amr_1bqoJzgQGqRwLIKcUAAAABQ"]
[Thu Jul 30 08:40:05.692156 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:31144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env"] [unique_id "amr_1bqoJzgQGqRwLIKcUAAAABQ"]
[Thu Jul 30 08:40:05.692332 2026] [security2:error] [pid 2412471:tid 2412471] [client 185.177.72.66:31144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_1bqoJzgQGqRwLIKcUAAAABQ"]
[Thu Jul 30 08:40:05.692517 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.692532 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.728759 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:37992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.728779 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:37992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.766898 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.766917 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:37996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.807945 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:37998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.807963 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:37998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.845512 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:38008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.845533 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:38008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.881920 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:38012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.881938 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:38012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.914984 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:38028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.915007 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:38028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.940932 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:31148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.bak"] [unique_id "amr_1U10g1cPUQyHDS7yRQAAABg"]
[Thu Jul 30 08:40:05.941104 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:31148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.bak"] [unique_id "amr_1U10g1cPUQyHDS7yRQAAABg"]
[Thu Jul 30 08:40:05.941277 2026] [security2:error] [pid 2426661:tid 2426661] [client 185.177.72.66:31148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_1U10g1cPUQyHDS7yRQAAABg"]
[Thu Jul 30 08:40:05.951556 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:38044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.951582 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:38044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.986466 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:05.986488 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.024381 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:38056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.024403 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:38056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.062200 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.062224 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.098032 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:38070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.098052 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:38070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.134817 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.134835 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.169524 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.169547 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.207273 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:31158] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.dev"] [unique_id "amr_1hpvfcvm04JnKtSWKAAAAA8"]
[Thu Jul 30 08:40:06.207436 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:31158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.dev"] [unique_id "amr_1hpvfcvm04JnKtSWKAAAAA8"]
[Thu Jul 30 08:40:06.207628 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:31158] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_1hpvfcvm04JnKtSWKAAAAA8"]
[Thu Jul 30 08:40:06.221454 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:38094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.221490 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:38094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.256905 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.256929 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.291131 2026] [core:error] [pid 2433373:tid 2433373] [client 185.177.72.66:38098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.291186 2026] [core:error] [pid 2433373:tid 2433373] [client 185.177.72.66:38098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.328624 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/gists/cache/.env"] [unique_id "amr_1syObLGRSXQ99G09SgAAAAk"]
[Thu Jul 30 08:40:06.328829 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/gists/cache/.env"] [unique_id "amr_1syObLGRSXQ99G09SgAAAAk"]
[Thu Jul 30 08:40:06.329232 2026] [core:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.329379 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/gists/cache/.env"] [unique_id "amr_1syObLGRSXQ99G09SgAAAAk"]
[Thu Jul 30 08:40:06.366794 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/gists/laravel/.env"] [unique_id "amr_1hpvfcvm04JnKtSWKgAAAA8"]
[Thu Jul 30 08:40:06.366941 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/gists/laravel/.env"] [unique_id "amr_1hpvfcvm04JnKtSWKgAAAA8"]
[Thu Jul 30 08:40:06.367265 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.367379 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/gists/laravel/.env"] [unique_id "amr_1hpvfcvm04JnKtSWKgAAAA8"]
[Thu Jul 30 08:40:06.403813 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38130] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/pusher/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/gists/pusher/.env"] [unique_id "amr_1syObLGRSXQ99G09SwAAAAk"]
[Thu Jul 30 08:40:06.403979 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/gists/pusher/.env"] [unique_id "amr_1syObLGRSXQ99G09SwAAAAk"]
[Thu Jul 30 08:40:06.404305 2026] [core:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.404415 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:38130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/gists/pusher/.env"] [unique_id "amr_1syObLGRSXQ99G09SwAAAAk"]
[Thu Jul 30 08:40:06.405501 2026] [access_compat:error] [pid 2428221:tid 2428221] [client 106.215.157.145:20428] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:40:06.440537 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38138] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/github-connect/.env"] [unique_id "amr_1pDxY3fypotl7b9qwgAAAB4"]
[Thu Jul 30 08:40:06.440736 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/github-connect/.env"] [unique_id "amr_1pDxY3fypotl7b9qwgAAAB4"]
[Thu Jul 30 08:40:06.441045 2026] [core:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.441172 2026] [security2:error] [pid 2412474:tid 2412474] [client 185.177.72.66:38138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/github-connect/.env"] [unique_id "amr_1pDxY3fypotl7b9qwgAAAB4"]
[Thu Jul 30 08:40:06.467422 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:31162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.dist"] [unique_id "amr_1hSM_3DmF9yKgJn3qAAAAEY"]
[Thu Jul 30 08:40:06.467606 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:31162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.dist"] [unique_id "amr_1hSM_3DmF9yKgJn3qAAAAEY"]
[Thu Jul 30 08:40:06.467786 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:31162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_1hSM_3DmF9yKgJn3qAAAAEY"]
[Thu Jul 30 08:40:06.485527 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38152] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/global.asa"] [unique_id "amr_1hSM_3DmF9yKgJn3qQAAAEY"]
[Thu Jul 30 08:40:06.485865 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/global.asa"] [unique_id "amr_1hSM_3DmF9yKgJn3qQAAAEY"]
[Thu Jul 30 08:40:06.486187 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.486296 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/global.asa"] [unique_id "amr_1hSM_3DmF9yKgJn3qQAAAEY"]
[Thu Jul 30 08:40:06.521945 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.521968 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.559042 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:06.559060 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.187665 2026] [core:error] [pid 2433373:tid 2433373] [client 185.177.72.66:38186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.187688 2026] [core:error] [pid 2433373:tid 2433373] [client 185.177.72.66:38186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.226500 2026] [security2:error] [pid 2433373:tid 2433373] [client 185.177.72.66:31178] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.local"] [unique_id "amr_16ixIKSiFZVmgEVi1wAAAAg"]
[Thu Jul 30 08:40:07.226695 2026] [security2:error] [pid 2433373:tid 2433373] [client 185.177.72.66:31178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/administration/.env.local"] [unique_id "amr_16ixIKSiFZVmgEVi1wAAAAg"]
[Thu Jul 30 08:40:07.226890 2026] [security2:error] [pid 2433373:tid 2433373] [client 185.177.72.66:31178] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_16ixIKSiFZVmgEVi1wAAAAg"]
[Thu Jul 30 08:40:07.250414 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:38196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.250435 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:38196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.403489 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.403513 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.424023 2026] [access_compat:error] [pid 2420262:tid 2420262] [client 45.158.164.139:36946] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:40:07.667773 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38212] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asax"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/global.asax"] [unique_id "amr_1xSM_3DmF9yKgJn3rgAAAEY"]
[Thu Jul 30 08:40:07.668110 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/global.asax"] [unique_id "amr_1xSM_3DmF9yKgJn3rgAAAEY"]
[Thu Jul 30 08:40:07.668422 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.668533 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:38212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/global.asax"] [unique_id "amr_1xSM_3DmF9yKgJn3rgAAAEY"]
[Thu Jul 30 08:40:07.703170 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.703223 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.737857 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.737899 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.773200 2026] [authz_core:error] [pid 2428314:tid 2428314] [client 57.141.0.69:42712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:07.773808 2026] [authz_core:error] [pid 2428314:tid 2428314] [client 57.141.0.69:42712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:07.782204 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.782243 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.819639 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.819673 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.856000 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.856024 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.892420 2026] [core:error] [pid 2433427:tid 2433427] [client 185.177.72.66:38280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.892457 2026] [core:error] [pid 2433427:tid 2433427] [client 185.177.72.66:38280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.930641 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.930660 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.965646 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:07.965685 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.001502 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.001531 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.035765 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.035789 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.070793 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.070814 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.105002 2026] [security2:error] [pid 2433427:tid 2433427] [client 185.177.72.66:38334] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/globals.inc"] [unique_id "amr_2JWYaGza0MwyXEmsbAAAABU"]
[Thu Jul 30 08:40:08.105297 2026] [security2:error] [pid 2433427:tid 2433427] [client 185.177.72.66:38334] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/globals.inc"] [unique_id "amr_2JWYaGza0MwyXEmsbAAAABU"]
[Thu Jul 30 08:40:08.105608 2026] [core:error] [pid 2433427:tid 2433427] [client 185.177.72.66:38334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.105728 2026] [security2:error] [pid 2433427:tid 2433427] [client 185.177.72.66:38334] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/globals.inc"] [unique_id "amr_2JWYaGza0MwyXEmsbAAAABU"]
[Thu Jul 30 08:40:08.141760 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.141780 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.177038 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.177082 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.214768 2026] [security2:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38348] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/grems-api/.env"] [unique_id "amr_2AVpDtsCgWG65VoslwAAABc"]
[Thu Jul 30 08:40:08.214931 2026] [security2:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/grems-api/.env"] [unique_id "amr_2AVpDtsCgWG65VoslwAAABc"]
[Thu Jul 30 08:40:08.215259 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.215377 2026] [security2:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/grems-api/.env"] [unique_id "amr_2AVpDtsCgWG65VoslwAAABc"]
[Thu Jul 30 08:40:08.248931 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/grems-frontend/.env"] [unique_id "amr_2G5gg5ILyA9cootB3wAAAAw"]
[Thu Jul 30 08:40:08.249111 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/grems-frontend/.env"] [unique_id "amr_2G5gg5ILyA9cootB3wAAAAw"]
[Thu Jul 30 08:40:08.249425 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.249570 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/grems-frontend/.env"] [unique_id "amr_2G5gg5ILyA9cootB3wAAAAw"]
[Thu Jul 30 08:40:08.283506 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38370] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/hasura/.env"] [unique_id "amr_2EF8-2jmOXMCjJjjJwAAACM"]
[Thu Jul 30 08:40:08.283675 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/hasura/.env"] [unique_id "amr_2EF8-2jmOXMCjJjjJwAAACM"]
[Thu Jul 30 08:40:08.283998 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.284122 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/hasura/.env"] [unique_id "amr_2EF8-2jmOXMCjJjjJwAAACM"]
[Thu Jul 30 08:40:08.307505 2026] [ssl:error] [pid 2420262:tid 2420262] (EAI 2)Name or service not known: [client 144.76.19.72:37924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:08.307525 2026] [ssl:error] [pid 2420262:tid 2420262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:08.321589 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.321608 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.357868 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.357896 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.360878 2026] [ssl:error] [pid 2433426:tid 2433426] (EAI 2)Name or service not known: [client 144.76.19.72:37928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:08.360905 2026] [ssl:error] [pid 2433426:tid 2433426] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:08.393221 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.393240 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.429197 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38412] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/helper/.env"] [unique_id "amr_2KCuPSoE0uFFzriBJQAAABY"]
[Thu Jul 30 08:40:08.429360 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/helper/.env"] [unique_id "amr_2KCuPSoE0uFFzriBJQAAABY"]
[Thu Jul 30 08:40:08.429685 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.429793 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/helper/.env"] [unique_id "amr_2KCuPSoE0uFFzriBJQAAABY"]
[Thu Jul 30 08:40:08.464749 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38420] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/helper/.env.bak"] [unique_id "amr_2Cwlz8EK1c7ip4vjLAAAAEI"]
[Thu Jul 30 08:40:08.464932 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/helper/.env.bak"] [unique_id "amr_2Cwlz8EK1c7ip4vjLAAAAEI"]
[Thu Jul 30 08:40:08.465261 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.465374 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/helper/.env.bak"] [unique_id "amr_2Cwlz8EK1c7ip4vjLAAAAEI"]
[Thu Jul 30 08:40:08.501128 2026] [security2:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38426] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/helper/.env.dev"] [unique_id "amr_2HMaosodcoZbrB4nkAAAAAs"]
[Thu Jul 30 08:40:08.501314 2026] [security2:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/helper/.env.dev"] [unique_id "amr_2HMaosodcoZbrB4nkAAAAAs"]
[Thu Jul 30 08:40:08.501693 2026] [core:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.501831 2026] [security2:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/helper/.env.dev"] [unique_id "amr_2HMaosodcoZbrB4nkAAAAAs"]
[Thu Jul 30 08:40:08.537570 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38434] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/helper/.env.dist"] [unique_id "amr_2EF8-2jmOXMCjJjjKQAAACM"]
[Thu Jul 30 08:40:08.537694 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/helper/.env.dist"] [unique_id "amr_2EF8-2jmOXMCjJjjKQAAACM"]
[Thu Jul 30 08:40:08.538001 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.538119 2026] [security2:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/helper/.env.dist"] [unique_id "amr_2EF8-2jmOXMCjJjjKQAAACM"]
[Thu Jul 30 08:40:08.574622 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/helper/.env.local"] [unique_id "amr_2KCuPSoE0uFFzriBJgAAABY"]
[Thu Jul 30 08:40:08.574789 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/helper/.env.local"] [unique_id "amr_2KCuPSoE0uFFzriBJgAAABY"]
[Thu Jul 30 08:40:08.575112 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.575226 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/helper/.env.local"] [unique_id "amr_2KCuPSoE0uFFzriBJgAAABY"]
[Thu Jul 30 08:40:08.611998 2026] [core:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.612021 2026] [core:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.650806 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.650827 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.686839 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.686859 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.725500 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.725524 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.758721 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.758743 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.793326 2026] [core:error] [pid 2433422:tid 2433422] [client 185.177.72.66:38498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.793346 2026] [core:error] [pid 2433422:tid 2433422] [client 185.177.72.66:38498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.826326 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.826351 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.861454 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.861475 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.898996 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.899017 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.935153 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.935178 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.971885 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:08.971905 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.006917 2026] [core:error] [pid 2433422:tid 2433422] [client 185.177.72.66:38528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.006940 2026] [core:error] [pid 2433422:tid 2433422] [client 185.177.72.66:38528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.043544 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.043589 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.077982 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.078002 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.111539 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.111576 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.146319 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.146341 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.182788 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.182812 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.219991 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.220012 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.257669 2026] [core:error] [pid 2433422:tid 2433422] [client 185.177.72.66:38584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.257690 2026] [core:error] [pid 2433422:tid 2433422] [client 185.177.72.66:38584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.294101 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.294118 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.327646 2026] [core:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.327666 2026] [core:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.362369 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.362386 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.397310 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.397333 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.436124 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.436146 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.470211 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.470233 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.505640 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.505663 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.542054 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.542087 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.577296 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.577317 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:38680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.613335 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.613354 2026] [core:error] [pid 2433423:tid 2433423] [client 185.177.72.66:38694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.651333 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.651353 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.685173 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.685196 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.719041 2026] [authz_core:error] [pid 2428408:tid 2428408] [client 57.141.0.37:23298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:09.719669 2026] [authz_core:error] [pid 2428408:tid 2428408] [client 57.141.0.37:23298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:09.721808 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.721823 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.756831 2026] [core:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.756853 2026] [core:error] [pid 2433375:tid 2433375] [client 185.177.72.66:38750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.793493 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.793514 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.829576 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38764] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/helper/php.ini"] [unique_id "amr_2RaJ6AWJ3ghWLIo3GwAAAEM"]
[Thu Jul 30 08:40:09.829871 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/helper/php.ini"] [unique_id "amr_2RaJ6AWJ3ghWLIo3GwAAAEM"]
[Thu Jul 30 08:40:09.830199 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.830310 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/helper/php.ini"] [unique_id "amr_2RaJ6AWJ3ghWLIo3GwAAAEM"]
[Thu Jul 30 08:40:09.862898 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.862933 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.897761 2026] [core:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.897783 2026] [core:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.931610 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:38788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.931628 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:38788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.967388 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:09.967407 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.005672 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.005696 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.043792 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.043811 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:38808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.078260 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.078281 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.111336 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.111362 2026] [core:error] [pid 2433424:tid 2433424] [client 185.177.72.66:38814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.147453 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.147473 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.181891 2026] [core:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.181914 2026] [core:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.220678 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.220700 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.257055 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.257090 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.265465 2026] [authz_core:error] [pid 2433428:tid 2433428] [client 169.58.39.192:60078] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 08:40:10.291782 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.291797 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.326166 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.326196 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:38858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.344215 2026] [security2:error] [pid 2433375:tid 2433375] [client 198.50.21.144:44891] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_2nMaosodcoZbrB4nmAAAAAs"]
[Thu Jul 30 08:40:10.344255 2026] [security2:error] [pid 2433375:tid 2433375] [client 198.50.21.144:44891] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_2nMaosodcoZbrB4nmAAAAAs"]
[Thu Jul 30 08:40:10.344484 2026] [security2:error] [pid 2433375:tid 2433375] [client 198.50.21.144:44891] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_2nMaosodcoZbrB4nmAAAAAs"]
[Thu Jul 30 08:40:10.360112 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.360131 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.394641 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.394659 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.431344 2026] [core:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.431376 2026] [core:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.464444 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.464461 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:38898] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.498855 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38900] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/hgs-static/.env"] [unique_id "amr_2m5gg5ILyA9cootB6AAAAAw"]
[Thu Jul 30 08:40:10.499001 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38900] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/hgs-static/.env"] [unique_id "amr_2m5gg5ILyA9cootB6AAAAAw"]
[Thu Jul 30 08:40:10.499321 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.499426 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38900] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/hgs-static/.env"] [unique_id "amr_2m5gg5ILyA9cootB6AAAAAw"]
[Thu Jul 30 08:40:10.532939 2026] [security2:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38916] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/higlass-website/.env"] [unique_id "amr_2rnomkC0TVwzleE6sgAAABI"]
[Thu Jul 30 08:40:10.533105 2026] [security2:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/higlass-website/.env"] [unique_id "amr_2rnomkC0TVwzleE6sgAAABI"]
[Thu Jul 30 08:40:10.533423 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.533532 2026] [security2:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/higlass-website/.env"] [unique_id "amr_2rnomkC0TVwzleE6sgAAABI"]
[Thu Jul 30 08:40:10.571869 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.571886 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:38920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.604227 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38924] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/horde/.env"] [unique_id "amr_2oFx8Bx4ITcCEtgoIwAAADc"]
[Thu Jul 30 08:40:10.604343 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38924] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/horde/.env"] [unique_id "amr_2oFx8Bx4ITcCEtgoIwAAADc"]
[Thu Jul 30 08:40:10.604662 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.604763 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38924] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/horde/.env"] [unique_id "amr_2oFx8Bx4ITcCEtgoIwAAADc"]
[Thu Jul 30 08:40:10.639766 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38928] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "amr_2haJ6AWJ3ghWLIo3HgAAAEM"]
[Thu Jul 30 08:40:10.639897 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "amr_2haJ6AWJ3ghWLIo3HgAAAEM"]
[Thu Jul 30 08:40:10.640216 2026] [core:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.640322 2026] [security2:error] [pid 2428311:tid 2428311] [client 185.177.72.66:38928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "amr_2haJ6AWJ3ghWLIo3HgAAAEM"]
[Thu Jul 30 08:40:10.676318 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38936] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/htdocs/.env"] [unique_id "amr_2qCuPSoE0uFFzriBLwAAABY"]
[Thu Jul 30 08:40:10.676478 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/htdocs/.env"] [unique_id "amr_2qCuPSoE0uFFzriBLwAAABY"]
[Thu Jul 30 08:40:10.676800 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.676924 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/htdocs/.env"] [unique_id "amr_2qCuPSoE0uFFzriBLwAAABY"]
[Thu Jul 30 08:40:10.717930 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/html/.env"] [unique_id "amr_2m5gg5ILyA9cootB6QAAAAw"]
[Thu Jul 30 08:40:10.718051 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/html/.env"] [unique_id "amr_2m5gg5ILyA9cootB6QAAAAw"]
[Thu Jul 30 08:40:10.718374 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.718476 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/html/.env"] [unique_id "amr_2m5gg5ILyA9cootB6QAAAAw"]
[Thu Jul 30 08:40:10.755153 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.755172 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:38966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.792636 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.792653 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.824922 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38970] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/http/.env"] [unique_id "amr_2hpvfcvm04JnKtSWLAAAAA8"]
[Thu Jul 30 08:40:10.825040 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38970] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/http/.env"] [unique_id "amr_2hpvfcvm04JnKtSWLAAAAA8"]
[Thu Jul 30 08:40:10.825371 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.825476 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:38970] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/http/.env"] [unique_id "amr_2hpvfcvm04JnKtSWLAAAAA8"]
[Thu Jul 30 08:40:10.859298 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/httpboot/.env"] [unique_id "amr_2qCuPSoE0uFFzriBMAAAABY"]
[Thu Jul 30 08:40:10.859428 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/httpboot/.env"] [unique_id "amr_2qCuPSoE0uFFzriBMAAAABY"]
[Thu Jul 30 08:40:10.859743 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.859852 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:38974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/httpboot/.env"] [unique_id "amr_2qCuPSoE0uFFzriBMAAAABY"]
[Thu Jul 30 08:40:10.895871 2026] [security2:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38980] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/icon/.env"] [unique_id "amr_2gSI6Iy7I-PaeJrGjAAAAAA"]
[Thu Jul 30 08:40:10.896024 2026] [security2:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/icon/.env"] [unique_id "amr_2gSI6Iy7I-PaeJrGjAAAAAA"]
[Thu Jul 30 08:40:10.896344 2026] [core:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.896459 2026] [security2:error] [pid 2433276:tid 2433276] [client 185.177.72.66:38980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/icon/.env"] [unique_id "amr_2gSI6Iy7I-PaeJrGjAAAAAA"]
[Thu Jul 30 08:40:10.931254 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/icons/.env"] [unique_id "amr_2m5gg5ILyA9cootB6gAAAAw"]
[Thu Jul 30 08:40:10.931376 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/icons/.env"] [unique_id "amr_2m5gg5ILyA9cootB6gAAAAw"]
[Thu Jul 30 08:40:10.931705 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.931808 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:38982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/icons/.env"] [unique_id "amr_2m5gg5ILyA9cootB6gAAAAw"]
[Thu Jul 30 08:40:10.968285 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38984] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/ikiwiki/.env"] [unique_id "amr_2tuBIW7-_o7ZAhSuawAAADk"]
[Thu Jul 30 08:40:10.968423 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/ikiwiki/.env"] [unique_id "amr_2tuBIW7-_o7ZAhSuawAAADk"]
[Thu Jul 30 08:40:10.968738 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:10.968844 2026] [security2:error] [pid 2426805:tid 2426805] [client 185.177.72.66:38984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/ikiwiki/.env"] [unique_id "amr_2tuBIW7-_o7ZAhSuawAAADk"]
[Thu Jul 30 08:40:11.001311 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38986] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/image_data/.env"] [unique_id "amr_24Fx8Bx4ITcCEtgoJQAAADc"]
[Thu Jul 30 08:40:11.001470 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/image_data/.env"] [unique_id "amr_24Fx8Bx4ITcCEtgoJQAAADc"]
[Thu Jul 30 08:40:11.001785 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.001895 2026] [security2:error] [pid 2423798:tid 2423798] [client 185.177.72.66:38986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/image_data/.env"] [unique_id "amr_24Fx8Bx4ITcCEtgoJQAAADc"]
[Thu Jul 30 08:40:11.036937 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39000] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/images/.env"] [unique_id "amr_2xpvfcvm04JnKtSWLQAAAA8"]
[Thu Jul 30 08:40:11.037109 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/images/.env"] [unique_id "amr_2xpvfcvm04JnKtSWLQAAAA8"]
[Thu Jul 30 08:40:11.037431 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.037536 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/images/.env"] [unique_id "amr_2xpvfcvm04JnKtSWLQAAAA8"]
[Thu Jul 30 08:40:11.071359 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/img/.env"] [unique_id "amr_26CuPSoE0uFFzriBMQAAABY"]
[Thu Jul 30 08:40:11.071503 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/img/.env"] [unique_id "amr_26CuPSoE0uFFzriBMQAAABY"]
[Thu Jul 30 08:40:11.071821 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.071926 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/img/.env"] [unique_id "amr_26CuPSoE0uFFzriBMQAAABY"]
[Thu Jul 30 08:40:11.082451 2026] [security2:error] [pid 2433276:tid 2433276] [client 143.244.168.161:56640] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "robin64.co.uk"] [uri "/.env"] [unique_id "amr_2wSI6Iy7I-PaeJrGjQAAAAA"]
[Thu Jul 30 08:40:11.082582 2026] [security2:error] [pid 2433276:tid 2433276] [client 143.244.168.161:56640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "robin64.co.uk"] [uri "/.env"] [unique_id "amr_2wSI6Iy7I-PaeJrGjQAAAAA"]
[Thu Jul 30 08:40:11.082750 2026] [security2:error] [pid 2433276:tid 2433276] [client 143.244.168.161:56640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "robin64.co.uk"] [uri "/.env"] [unique_id "amr_2wSI6Iy7I-PaeJrGjQAAAAA"]
[Thu Jul 30 08:40:11.106132 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.106210 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.142555 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:39036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.142586 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:39036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.178232 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.178251 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.206275 2026] [core:error] [pid 2429943:tid 2429943] (13)Permission denied: [client 216.73.216.199:48502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/objects_partial
[Thu Jul 30 08:40:11.213637 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.213652 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.248841 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.248861 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.283416 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.283437 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.319503 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.319525 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.355119 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.355139 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.390408 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.390428 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.414575 2026] [ssl:error] [pid 2428312:tid 2428312] (EAI 2)Name or service not known: [client 144.76.19.72:33982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:11.414597 2026] [ssl:error] [pid 2428312:tid 2428312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:11.426621 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/info/.env"] [unique_id "amr_225gg5ILyA9cootB7AAAAAw"]
[Thu Jul 30 08:40:11.426788 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/info/.env"] [unique_id "amr_225gg5ILyA9cootB7AAAAAw"]
[Thu Jul 30 08:40:11.427110 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.427217 2026] [security2:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/info/.env"] [unique_id "amr_225gg5ILyA9cootB7AAAAAw"]
[Thu Jul 30 08:40:11.460998 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39128] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/info/.env.bak"] [unique_id "amr_2xpvfcvm04JnKtSWLwAAAA8"]
[Thu Jul 30 08:40:11.461144 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/info/.env.bak"] [unique_id "amr_2xpvfcvm04JnKtSWLwAAAA8"]
[Thu Jul 30 08:40:11.461457 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.461569 2026] [security2:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39128] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/info/.env.bak"] [unique_id "amr_2xpvfcvm04JnKtSWLwAAAA8"]
[Thu Jul 30 08:40:11.468523 2026] [ssl:error] [pid 2433428:tid 2433428] (EAI 2)Name or service not known: [client 144.76.19.72:33992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:11.468547 2026] [ssl:error] [pid 2433428:tid 2433428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:11.498675 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/info/.env.dev"] [unique_id "amr_26CuPSoE0uFFzriBMwAAABY"]
[Thu Jul 30 08:40:11.498810 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/info/.env.dev"] [unique_id "amr_26CuPSoE0uFFzriBMwAAABY"]
[Thu Jul 30 08:40:11.499127 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.499238 2026] [security2:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/info/.env.dev"] [unique_id "amr_26CuPSoE0uFFzriBMwAAABY"]
[Thu Jul 30 08:40:11.535052 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39138] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/info/.env.dist"] [unique_id "amr_2wvbpUeckUfXmp7bcwAAAEc"]
[Thu Jul 30 08:40:11.535208 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/info/.env.dist"] [unique_id "amr_2wvbpUeckUfXmp7bcwAAAEc"]
[Thu Jul 30 08:40:11.535511 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.535623 2026] [security2:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/info/.env.dist"] [unique_id "amr_2wvbpUeckUfXmp7bcwAAAEc"]
[Thu Jul 30 08:40:11.571938 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/info/.env.local"] [unique_id "amr_28TyHJeh8MEeCqDSEAAAAEQ"]
[Thu Jul 30 08:40:11.572113 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/info/.env.local"] [unique_id "amr_28TyHJeh8MEeCqDSEAAAAEQ"]
[Thu Jul 30 08:40:11.572434 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.572540 2026] [security2:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/info/.env.local"] [unique_id "amr_28TyHJeh8MEeCqDSEAAAAEQ"]
[Thu Jul 30 08:40:11.608262 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.608280 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.643257 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.643276 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.675871 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:39174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.675893 2026] [core:error] [pid 2426661:tid 2426661] [client 185.177.72.66:39174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.712301 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.712320 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.749795 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.749815 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.784325 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.784346 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.818427 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.818446 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.853441 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.853462 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.889253 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.889272 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.930228 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.930250 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.969869 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:11.969887 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.003869 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.003903 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.037656 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.037678 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.073130 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.073148 2026] [core:error] [pid 2428408:tid 2428408] [client 185.177.72.66:39254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.107714 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.107741 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.142425 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.142449 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.176765 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.176787 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.211434 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.211453 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.246403 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.246432 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.285251 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.285271 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.322335 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.322355 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.357271 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.357293 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.389694 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.389711 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.424754 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.424772 2026] [core:error] [pid 2433425:tid 2433425] [client 185.177.72.66:39348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.460518 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.460534 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.494052 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.494079 2026] [core:error] [pid 2421705:tid 2421705] [client 185.177.72.66:39364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.530462 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.530479 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.570261 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:39378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.570284 2026] [core:error] [pid 2433426:tid 2433426] [client 185.177.72.66:39378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.607525 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.607546 2026] [core:error] [pid 2428312:tid 2428312] [client 185.177.72.66:39384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.643636 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.643656 2026] [core:error] [pid 2420262:tid 2420262] [client 185.177.72.66:39386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.678127 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.678147 2026] [core:error] [pid 2427538:tid 2427538] [client 185.177.72.66:39396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.715273 2026] [core:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.715308 2026] [core:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.749602 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.749619 2026] [core:error] [pid 2426805:tid 2426805] [client 185.177.72.66:39416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.790202 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.790221 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.826000 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39432] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "edwardkensington.com"] [uri "/info/php.ini"] [unique_id "amr_3MyObLGRSXQ99G09TgAAAAk"]
[Thu Jul 30 08:40:12.826303 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/info/php.ini"] [unique_id "amr_3MyObLGRSXQ99G09TgAAAAk"]
[Thu Jul 30 08:40:12.826624 2026] [core:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.826736 2026] [security2:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/info/php.ini"] [unique_id "amr_3MyObLGRSXQ99G09TgAAAAk"]
[Thu Jul 30 08:40:12.861539 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.861575 2026] [core:error] [pid 2433428:tid 2433428] [client 185.177.72.66:39438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.894789 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.894815 2026] [core:error] [pid 2428221:tid 2428221] [client 185.177.72.66:39446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.929486 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:39454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.929511 2026] [core:error] [pid 2422156:tid 2422156] [client 185.177.72.66:39454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.967595 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:12.967633 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.002364 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.002386 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.037445 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.037464 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.088999 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.089017 2026] [core:error] [pid 2433681:tid 2433681] [client 185.177.72.66:39486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.265691 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.265709 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.474981 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.475008 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.580543 2026] [authz_core:error] [pid 2428314:tid 2428314] [client 57.141.0.31:59696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:13.581163 2026] [authz_core:error] [pid 2428314:tid 2428314] [client 57.141.0.31:59696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:13.670296 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.670317 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.785012 2026] [authz_core:error] [pid 2433372:tid 2433372] [client 169.58.39.192:61298] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 08:40:13.839949 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:13.839969 2026] [core:error] [pid 2433421:tid 2433421] [client 185.177.72.66:39516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.068743 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.068772 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.168943 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.168974 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.237199 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.237219 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.272863 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.272882 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.309292 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.309310 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.341928 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.341947 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.384258 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.384279 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.420367 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.420388 2026] [core:error] [pid 2423798:tid 2423798] [client 185.177.72.66:39584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.457577 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.457597 2026] [core:error] [pid 2428411:tid 2428411] [client 185.177.72.66:39592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.494916 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.494936 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.521430 2026] [core:error] [pid 2411420:tid 2411420] (13)Permission denied: [client 216.73.216.199:49635] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-96/objects_partial
[Thu Jul 30 08:40:14.533319 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:39598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.533340 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:39598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.539857 2026] [ssl:error] [pid 2423798:tid 2423798] (EAI 2)Name or service not known: [client 144.76.19.72:33996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:14.539884 2026] [ssl:error] [pid 2423798:tid 2423798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:14.569269 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.569287 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.592942 2026] [ssl:error] [pid 2423799:tid 2423799] (EAI 2)Name or service not known: [client 144.76.19.72:34012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:14.592962 2026] [ssl:error] [pid 2423799:tid 2423799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:14.606025 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.606041 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.645856 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.645886 2026] [core:error] [pid 2423797:tid 2423797] [client 185.177.72.66:39622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.683082 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:39636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.683099 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:39636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.718795 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:39648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.718813 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:39648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.752463 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/install/.env"] [unique_id "amr_3iuprmrr0feFzOS7SgAAAEw"]
[Thu Jul 30 08:40:14.752629 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/install/.env"] [unique_id "amr_3iuprmrr0feFzOS7SgAAAEw"]
[Thu Jul 30 08:40:14.752936 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.753056 2026] [security2:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/install/.env"] [unique_id "amr_3iuprmrr0feFzOS7SgAAAEw"]
[Thu Jul 30 08:40:14.789079 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.789108 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.825827 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:39670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.825848 2026] [core:error] [pid 2433372:tid 2433372] [client 185.177.72.66:39670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.860167 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:39674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.860186 2026] [core:error] [pid 2427539:tid 2427539] [client 185.177.72.66:39674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.896663 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.896687 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.933206 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.933230 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.967543 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:14.967575 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.003090 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.003114 2026] [core:error] [pid 2428414:tid 2428414] [client 185.177.72.66:39720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.040366 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.040392 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.075754 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.075777 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.112040 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39750] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/items/.env"] [unique_id "amr_3xSM_3DmF9yKgJn3uQAAAEY"]
[Thu Jul 30 08:40:15.112228 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/items/.env"] [unique_id "amr_3xSM_3DmF9yKgJn3uQAAAEY"]
[Thu Jul 30 08:40:15.112533 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.112647 2026] [security2:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/items/.env"] [unique_id "amr_3xSM_3DmF9yKgJn3uQAAAEY"]
[Thu Jul 30 08:40:15.150300 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39754] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edwardkensington.com"] [uri "/javascript/.env"] [unique_id "amr_3ywlz8EK1c7ip4vjNQAAAEI"]
[Thu Jul 30 08:40:15.150475 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39754] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edwardkensington.com"] [uri "/javascript/.env"] [unique_id "amr_3ywlz8EK1c7ip4vjNQAAAEI"]
[Thu Jul 30 08:40:15.150822 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.150934 2026] [security2:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39754] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edwardkensington.com"] [uri "/javascript/.env"] [unique_id "amr_3ywlz8EK1c7ip4vjNQAAAEI"]
[Thu Jul 30 08:40:15.189487 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.189509 2026] [core:error] [pid 2423799:tid 2423799] [client 185.177.72.66:39756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.223991 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.224012 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.260255 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.260276 2026] [core:error] [pid 2428314:tid 2428314] [client 185.177.72.66:39780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.299632 2026] [core:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.299655 2026] [core:error] [pid 2433374:tid 2433374] [client 185.177.72.66:39786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.338433 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.338454 2026] [core:error] [pid 2428222:tid 2428222] [client 185.177.72.66:39798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.373039 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.373058 2026] [core:error] [pid 2433719:tid 2433719] [client 185.177.72.66:39800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.412327 2026] [core:error] [pid 2433766:tid 2433766] [client 185.177.72.66:39804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.412368 2026] [core:error] [pid 2433766:tid 2433766] [client 185.177.72.66:39804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:15.864923 2026] [security2:error] [pid 2428222:tid 2428222] [client 143.244.168.161:56668] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "robin64.co.uk"] [uri "/.git/config"] [unique_id "amr_3ywlz8EK1c7ip4vjNwAAAEI"]
[Thu Jul 30 08:40:15.865119 2026] [security2:error] [pid 2428222:tid 2428222] [client 143.244.168.161:56668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "robin64.co.uk"] [uri "/.git/config"] [unique_id "amr_3ywlz8EK1c7ip4vjNwAAAEI"]
[Thu Jul 30 08:40:15.865299 2026] [security2:error] [pid 2428222:tid 2428222] [client 143.244.168.161:56668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "robin64.co.uk"] [uri "/.git/config"] [unique_id "amr_3ywlz8EK1c7ip4vjNwAAAEI"]
[Thu Jul 30 08:40:16.485509 2026] [authz_core:error] [pid 2423799:tid 2423799] [client 20.9.4.9:29582] AH01630: client denied by server configuration: /home/shirleya/public_html/php.ini
[Thu Jul 30 08:40:16.629120 2026] [core:error] [pid 2411420:tid 2411420] (13)Permission denied: [client 216.73.216.199:49635] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCPv6/objects_partial
[Thu Jul 30 08:40:16.947632 2026] [access_compat:error] [pid 2428222:tid 2428222] [client 106.215.157.145:32635] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:40:16.988800 2026] [authz_core:error] [pid 2433766:tid 2433766] [client 169.58.39.192:62425] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 08:40:17.017395 2026] [security2:error] [pid 2433323:tid 2433323] [client 185.177.72.66:15810] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "carpediemproperty.co.uk"] [uri "/administration/php.ini"] [unique_id "amr_4VVtaWSzfi8wpuaiHQAAAAM"]
[Thu Jul 30 08:40:17.017716 2026] [security2:error] [pid 2433323:tid 2433323] [client 185.177.72.66:15810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/administration/php.ini"] [unique_id "amr_4VVtaWSzfi8wpuaiHQAAAAM"]
[Thu Jul 30 08:40:17.017895 2026] [security2:error] [pid 2433323:tid 2433323] [client 185.177.72.66:15810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_4VVtaWSzfi8wpuaiHQAAAAM"]
[Thu Jul 30 08:40:17.657849 2026] [ssl:error] [pid 2428311:tid 2428311] (EAI 2)Name or service not known: [client 144.76.19.72:34014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:17.657873 2026] [ssl:error] [pid 2428311:tid 2428311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:17.710482 2026] [ssl:error] [pid 2428311:tid 2428311] (EAI 2)Name or service not known: [client 144.76.19.72:34016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:17.710501 2026] [ssl:error] [pid 2428311:tid 2428311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:18.436609 2026] [core:error] [pid 2411420:tid 2411420] (13)Permission denied: [client 216.73.216.199:49635] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/validate
[Thu Jul 30 08:40:18.477659 2026] [security2:error] [pid 2433724:tid 2433724] [client 175.178.110.121:47914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amr_4mfAipbxYDkGsZMwSgAAABs"]
[Thu Jul 30 08:40:18.821889 2026] [authz_core:error] [pid 2428414:tid 2428414] [client 57.141.0.31:56384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:18.822512 2026] [authz_core:error] [pid 2428414:tid 2428414] [client 57.141.0.31:56384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:19.378047 2026] [security2:error] [pid 2433374:tid 2433374] [client 114.119.158.38:54965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,14,15/request_format~html"] [unique_id "amr_48yObLGRSXQ99G09VgAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19,14,15/request_format~html
[Thu Jul 30 08:40:19.717452 2026] [autoindex:error] [pid 2411420:tid 2411420] (13)Permission denied: [client 216.73.216.199:49635] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/cloudlinux/flags/enabled-flags.d/
[Thu Jul 30 08:40:19.760526 2026] [authz_core:error] [pid 2433927:tid 2433927] [client 57.141.0.49:62482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:19.761178 2026] [authz_core:error] [pid 2433927:tid 2433927] [client 57.141.0.49:62482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:20.039709 2026] [authz_core:error] [pid 2426807:tid 2426807] [client 169.58.39.192:63578] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 08:40:20.531438 2026] [core:error] [pid 2433426:tid 2433426] [client 66.249.66.199:64357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:20.531463 2026] [core:error] [pid 2433426:tid 2433426] [client 66.249.66.199:64357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:40:20.768299 2026] [ssl:error] [pid 2433424:tid 2433424] (EAI 2)Name or service not known: [client 144.76.19.72:56264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:20.768336 2026] [ssl:error] [pid 2433424:tid 2433424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:20.824786 2026] [ssl:error] [pid 2426805:tid 2426805] (EAI 2)Name or service not known: [client 144.76.19.72:56280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:20.824814 2026] [ssl:error] [pid 2426805:tid 2426805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:20.905092 2026] [security2:error] [pid 2427539:tid 2427539] [client 114.119.158.38:54967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,14,15/request_format~html"] [unique_id "amr_5ENn3uvyljca7F0vvgAAADI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19,14,15/request_format~html
[Thu Jul 30 08:40:21.348054 2026] [authz_core:error] [pid 2433374:tid 2433374] [client 57.141.0.24:58204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:21.348683 2026] [authz_core:error] [pid 2433374:tid 2433374] [client 57.141.0.24:58204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:22.053797 2026] [ssl:error] [pid 2433929:tid 2433929] (70014)End of file found: [client 216.73.216.199:8753] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:22.095503 2026] [authz_core:error] [pid 2433930:tid 2433930] [client 57.141.0.68:28994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:22.096134 2026] [authz_core:error] [pid 2433930:tid 2433930] [client 57.141.0.68:28994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:22.350002 2026] [ssl:error] [pid 2411420:tid 2411420] (70014)End of file found: [client 216.73.216.199:49635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:23.383257 2026] [access_compat:error] [pid 2433880:tid 2433880] [client 106.215.157.145:28892] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:40:23.885537 2026] [ssl:error] [pid 2421705:tid 2421705] (EAI 2)Name or service not known: [client 144.76.19.72:56292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:23.885582 2026] [ssl:error] [pid 2421705:tid 2421705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:23.942047 2026] [ssl:error] [pid 2433427:tid 2433427] (EAI 2)Name or service not known: [client 144.76.19.72:56306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:23.942099 2026] [ssl:error] [pid 2433427:tid 2433427] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:24.001816 2026] [authz_core:error] [pid 2428414:tid 2428414] [client 169.58.39.192:65133] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 08:40:24.170448 2026] [security2:error] [pid 2433769:tid 2433769] [client 181.112.154.162:23847] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_6H76jSoZU1U3NGTsQwAAACE"]
[Thu Jul 30 08:40:24.170491 2026] [security2:error] [pid 2433769:tid 2433769] [client 181.112.154.162:23847] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amr_6H76jSoZU1U3NGTsQwAAACE"]
[Thu Jul 30 08:40:24.170756 2026] [security2:error] [pid 2433769:tid 2433769] [client 181.112.154.162:23847] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_6H76jSoZU1U3NGTsQwAAACE"]
[Thu Jul 30 08:40:24.226575 2026] [security2:error] [pid 2433930:tid 2433930] [client 185.177.72.66:16022] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env"] [unique_id "amr_6DM-EKEjcQFp0FeJUAAAAC0"]
[Thu Jul 30 08:40:24.226751 2026] [security2:error] [pid 2433930:tid 2433930] [client 185.177.72.66:16022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env"] [unique_id "amr_6DM-EKEjcQFp0FeJUAAAAC0"]
[Thu Jul 30 08:40:24.226945 2026] [security2:error] [pid 2433930:tid 2433930] [client 185.177.72.66:16022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_6DM-EKEjcQFp0FeJUAAAAC0"]
[Thu Jul 30 08:40:24.474960 2026] [security2:error] [pid 2433879:tid 2433879] [client 185.177.72.66:16026] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.bak"] [unique_id "amr_6KbDOFb46zAeS-udAwAAABk"]
[Thu Jul 30 08:40:24.475113 2026] [security2:error] [pid 2433879:tid 2433879] [client 185.177.72.66:16026] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.bak"] [unique_id "amr_6KbDOFb46zAeS-udAwAAABk"]
[Thu Jul 30 08:40:24.475298 2026] [security2:error] [pid 2433879:tid 2433879] [client 185.177.72.66:16026] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_6KbDOFb46zAeS-udAwAAABk"]
[Thu Jul 30 08:40:24.723354 2026] [security2:error] [pid 2433767:tid 2433767] [client 185.177.72.66:16042] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.dev"] [unique_id "amr_6GFlRQ4V_HlIN5O8igAAAB0"]
[Thu Jul 30 08:40:24.723541 2026] [security2:error] [pid 2433767:tid 2433767] [client 185.177.72.66:16042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.dev"] [unique_id "amr_6GFlRQ4V_HlIN5O8igAAAB0"]
[Thu Jul 30 08:40:24.723748 2026] [security2:error] [pid 2433767:tid 2433767] [client 185.177.72.66:16042] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_6GFlRQ4V_HlIN5O8igAAAB0"]
[Thu Jul 30 08:40:24.981350 2026] [security2:error] [pid 2426802:tid 2426802] [client 185.177.72.66:16058] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.dist"] [unique_id "amr_6J0tobHeIcZHOW5gZAAAACY"]
[Thu Jul 30 08:40:24.981480 2026] [security2:error] [pid 2426802:tid 2426802] [client 185.177.72.66:16058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.dist"] [unique_id "amr_6J0tobHeIcZHOW5gZAAAACY"]
[Thu Jul 30 08:40:24.981668 2026] [security2:error] [pid 2426802:tid 2426802] [client 185.177.72.66:16058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_6J0tobHeIcZHOW5gZAAAACY"]
[Thu Jul 30 08:40:25.241066 2026] [security2:error] [pid 2433766:tid 2433766] [client 185.177.72.66:16060] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.local"] [unique_id "amr_6cFykJC22ExdRTixpQAAABw"]
[Thu Jul 30 08:40:25.241199 2026] [security2:error] [pid 2433766:tid 2433766] [client 185.177.72.66:16060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "carpediemproperty.co.uk"] [uri "/admins/.env.local"] [unique_id "amr_6cFykJC22ExdRTixpQAAABw"]
[Thu Jul 30 08:40:25.241365 2026] [security2:error] [pid 2433766:tid 2433766] [client 185.177.72.66:16060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "carpediemproperty.co.uk"] [uri "/403.shtml"] [unique_id "amr_6cFykJC22ExdRTixpQAAABw"]
[Thu Jul 30 08:40:25.263397 2026] [core:error] [pid 2433421:tid 2433421] (13)Permission denied: [client 216.73.216.199:48241] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/align
[Thu Jul 30 08:40:25.356490 2026] [security2:error] [pid 2428221:tid 2428221] [client 143.244.168.161:51868] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "robin64.co.uk"] [uri "/trace.axd"] [unique_id "amr_6Sux7rlqiNnQVD3JDAAAACQ"]
[Thu Jul 30 08:40:25.356690 2026] [security2:error] [pid 2428221:tid 2428221] [client 143.244.168.161:51868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "robin64.co.uk"] [uri "/trace.axd"] [unique_id "amr_6Sux7rlqiNnQVD3JDAAAACQ"]
[Thu Jul 30 08:40:25.356863 2026] [security2:error] [pid 2428221:tid 2428221] [client 143.244.168.161:51868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "robin64.co.uk"] [uri "/trace.axd"] [unique_id "amr_6Sux7rlqiNnQVD3JDAAAACQ"]
[Thu Jul 30 08:40:26.994150 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:56310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:26.994183 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:27.046008 2026] [ssl:error] [pid 2433428:tid 2433428] (EAI 2)Name or service not known: [client 144.76.19.72:56320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:27.046036 2026] [ssl:error] [pid 2433428:tid 2433428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:27.463373 2026] [access_compat:error] [pid 2429944:tid 2429944] [client 106.215.157.145:27759] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:40:27.800634 2026] [authz_core:error] [pid 2433681:tid 2433681] [client 169.58.39.192:50005] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 08:40:28.135808 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.26:35750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:28.136422 2026] [authz_core:error] [pid 2420262:tid 2420262] [client 57.141.0.26:35750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:28.580884 2026] [autoindex:error] [pid 2433323:tid 2433323] [client 216.73.216.199:49685] AH01276: Cannot serve directory /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/nextcloud/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 08:40:28.862145 2026] [authz_core:error] [pid 2433766:tid 2433766] [client 57.141.0.41:60540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:28.862761 2026] [authz_core:error] [pid 2433766:tid 2433766] [client 57.141.0.41:60540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:29.482537 2026] [ssl:error] [pid 2433323:tid 2433323] (70014)End of file found: [client 216.73.216.199:49685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:30.109600 2026] [ssl:error] [pid 2433424:tid 2433424] (EAI 2)Name or service not known: [client 144.76.19.72:25420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:30.109630 2026] [ssl:error] [pid 2433424:tid 2433424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:30.202718 2026] [ssl:error] [pid 2433930:tid 2433930] (EAI 2)Name or service not known: [client 144.76.19.72:25432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:30.202751 2026] [ssl:error] [pid 2433930:tid 2433930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:30.984946 2026] [autoindex:error] [pid 2433421:tid 2433421] (13)Permission denied: [client 216.73.216.199:48241] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/islay/
[Thu Jul 30 08:40:32.122556 2026] [security2:error] [pid 2433374:tid 2433374] [client 145.223.130.21:41126] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,575.0.html"] [unique_id "amr_8MyObLGRSXQ99G09ZQAAAAk"]
[Thu Jul 30 08:40:32.122629 2026] [security2:error] [pid 2433374:tid 2433374] [client 145.223.130.21:41126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,575.0.html"] [unique_id "amr_8MyObLGRSXQ99G09ZQAAAAk"]
[Thu Jul 30 08:40:32.122878 2026] [security2:error] [pid 2433374:tid 2433374] [client 145.223.130.21:41126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amr_8MyObLGRSXQ99G09ZQAAAAk"]
[Thu Jul 30 08:40:33.261054 2026] [ssl:error] [pid 2433374:tid 2433374] (EAI 2)Name or service not known: [client 144.76.19.72:25434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:33.261099 2026] [ssl:error] [pid 2433374:tid 2433374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:33.315479 2026] [ssl:error] [pid 2433375:tid 2433375] (EAI 2)Name or service not known: [client 144.76.19.72:25450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:33.315512 2026] [ssl:error] [pid 2433375:tid 2433375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:34.906537 2026] [security2:error] [pid 2420366:tid 2420366] [client 216.73.216.199:29319] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/systemd/system/sw-engine.service.d/10-wp-toolkit.conf"] [unique_id "amr_8jRsn_CrYZtjvMmStQAAACk"]
[Thu Jul 30 08:40:34.906837 2026] [security2:error] [pid 2420366:tid 2420366] [client 216.73.216.199:29319] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/systemd/system/sw-engine.service.d/10-wp-toolkit.conf"] [unique_id "amr_8jRsn_CrYZtjvMmStQAAACk"]
[Thu Jul 30 08:40:34.907062 2026] [security2:error] [pid 2420366:tid 2420366] [client 216.73.216.199:29319] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/systemd/system/sw-engine.service.d/10-wp-toolkit.conf"] [unique_id "amr_8jRsn_CrYZtjvMmStQAAACk"]
[Thu Jul 30 08:40:37.320116 2026] [core:error] [pid 2420366:tid 2420366] (13)Permission denied: [client 216.73.216.199:29319] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_defrag_ipv6/uevent
[Thu Jul 30 08:40:37.620874 2026] [ssl:error] [pid 2420366:tid 2420366] (5)Input/output error: [client 216.73.216.199:29319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:38.543171 2026] [core:crit] [pid 2433276:tid 2433276] (13)Permission denied: [client 66.132.172.187:29648] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 08:40:39.519907 2026] [security2:error] [pid 2411149:tid 2411149] [client 167.172.29.116:38258] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "mjs-services.com"] [uri "/xmlrpc.php"] [unique_id "amr_93QV4ijopiU82V8yvgAAAAY"]
[Thu Jul 30 08:40:39.712807 2026] [authz_core:error] [pid 2434594:tid 2434594] [client 57.141.0.18:35158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:39.713454 2026] [authz_core:error] [pid 2434594:tid 2434594] [client 57.141.0.18:35158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:39.733267 2026] [ssl:error] [pid 2434602:tid 2434602] (EAI 2)Name or service not known: [client 144.76.19.72:25456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:39.733300 2026] [ssl:error] [pid 2434602:tid 2434602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:39.825973 2026] [authz_core:error] [pid 2434605:tid 2434605] [client 57.141.0.8:20854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:39.826630 2026] [authz_core:error] [pid 2434605:tid 2434605] [client 57.141.0.8:20854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:39.853853 2026] [authz_core:error] [pid 2434602:tid 2434602] [client 66.249.66.34:58609] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:40:39.856506 2026] [authz_core:error] [pid 2434602:tid 2434602] [client 66.249.66.34:58609] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:40:40.469817 2026] [ssl:error] [pid 2434599:tid 2434599] (EAI 2)Name or service not known: [client 144.76.19.72:33142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:40.469856 2026] [ssl:error] [pid 2434599:tid 2434599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:40.631974 2026] [core:error] [pid 2434610:tid 2434610] (1)Operation not permitted: [client 216.73.216.199:13331] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/net/ip6_mr_vif
[Thu Jul 30 08:40:40.935466 2026] [ssl:error] [pid 2434610:tid 2434610] (70014)End of file found: [client 216.73.216.199:13331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:42.438899 2026] [ssl:error] [pid 2434594:tid 2434594] (70014)End of file found: [client 216.73.216.199:53280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:42.747432 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_-v2mWbalCAERYjwRigAAAFE"]
[Thu Jul 30 08:40:42.747793 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_-v2mWbalCAERYjwRigAAAFE"]
[Thu Jul 30 08:40:42.747907 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amr_-v2mWbalCAERYjwRigAAAFE"]
[Thu Jul 30 08:40:42.778477 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/api-config.ini"] [unique_id "amr_-v2mWbalCAERYjwRiwAAAFE"]
[Thu Jul 30 08:40:42.778788 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/api-config.ini"] [unique_id "amr_-v2mWbalCAERYjwRiwAAAFE"]
[Thu Jul 30 08:40:42.778891 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/api-config.ini"] [unique_id "amr_-v2mWbalCAERYjwRiwAAAFE"]
[Thu Jul 30 08:40:42.910827 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/laravel.log"] [unique_id "amr_-v2mWbalCAERYjwRjgAAAFE"]
[Thu Jul 30 08:40:42.911133 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/laravel.log"] [unique_id "amr_-v2mWbalCAERYjwRjgAAAFE"]
[Thu Jul 30 08:40:42.911234 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/laravel.log"] [unique_id "amr_-v2mWbalCAERYjwRjgAAAFE"]
[Thu Jul 30 08:40:43.042578 2026] [autoindex:error] [pid 2427539:tid 2427539] (13)Permission denied: [client 216.73.216.199:2605] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/cagefs/
[Thu Jul 30 08:40:43.047927 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/web.config"] [unique_id "amr_-_2mWbalCAERYjwRkQAAAFE"]
[Thu Jul 30 08:40:43.048141 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /customer/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/web.config"] [unique_id "amr_-_2mWbalCAERYjwRkQAAAFE"]
[Thu Jul 30 08:40:43.048257 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/web.config"] [unique_id "amr_-_2mWbalCAERYjwRkQAAAFE"]
[Thu Jul 30 08:40:43.048359 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/customer/web.config"] [unique_id "amr_-_2mWbalCAERYjwRkQAAAFE"]
[Thu Jul 30 08:40:43.069043 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/d/.env"] [unique_id "amr_-_2mWbalCAERYjwRkgAAAFE"]
[Thu Jul 30 08:40:43.069173 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/d/.env"] [unique_id "amr_-_2mWbalCAERYjwRkgAAAFE"]
[Thu Jul 30 08:40:43.069280 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/d/.env"] [unique_id "amr_-_2mWbalCAERYjwRkgAAAFE"]
[Thu Jul 30 08:40:43.086950 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/.env"] [unique_id "amr_-_2mWbalCAERYjwRkwAAAFE"]
[Thu Jul 30 08:40:43.087059 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/.env"] [unique_id "amr_-_2mWbalCAERYjwRkwAAAFE"]
[Thu Jul 30 08:40:43.087228 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/.env"] [unique_id "amr_-_2mWbalCAERYjwRkwAAAFE"]
[Thu Jul 30 08:40:43.158419 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dashboard/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/.git/config"] [unique_id "amr_-_2mWbalCAERYjwRlQAAAFE"]
[Thu Jul 30 08:40:43.158558 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/.git/config"] [unique_id "amr_-_2mWbalCAERYjwRlQAAAFE"]
[Thu Jul 30 08:40:43.158675 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/.git/config"] [unique_id "amr_-_2mWbalCAERYjwRlQAAAFE"]
[Thu Jul 30 08:40:43.396335 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_-_2mWbalCAERYjwRmgAAAFE"]
[Thu Jul 30 08:40:43.396683 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_-_2mWbalCAERYjwRmgAAAFE"]
[Thu Jul 30 08:40:43.396783 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amr_-_2mWbalCAERYjwRmgAAAFE"]
[Thu Jul 30 08:40:43.554943 2026] [ssl:error] [pid 2434556:tid 2434556] (EAI 2)Name or service not known: [client 144.76.19.72:33156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:43.554970 2026] [ssl:error] [pid 2434556:tid 2434556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:43.574341 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amr_-_2mWbalCAERYjwRngAAAFE"]
[Thu Jul 30 08:40:43.574635 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amr_-_2mWbalCAERYjwRngAAAFE"]
[Thu Jul 30 08:40:43.574730 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amr_-_2mWbalCAERYjwRngAAAFE"]
[Thu Jul 30 08:40:43.609788 2026] [ssl:error] [pid 2433768:tid 2433768] (EAI 2)Name or service not known: [client 144.76.19.72:33158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:43.609815 2026] [ssl:error] [pid 2433768:tid 2433768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:44.037484 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/laravel.log"] [unique_id "amr__P2mWbalCAERYjwRpwAAAFE"]
[Thu Jul 30 08:40:44.037847 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/laravel.log"] [unique_id "amr__P2mWbalCAERYjwRpwAAAFE"]
[Thu Jul 30 08:40:44.037971 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/laravel.log"] [unique_id "amr__P2mWbalCAERYjwRpwAAAFE"]
[Thu Jul 30 08:40:44.063662 2026] [authz_core:error] [pid 2433428:tid 2433428] [client 57.141.0.30:51294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:44.064278 2026] [authz_core:error] [pid 2433428:tid 2433428] [client 57.141.0.30:51294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:44.244673 2026] [ssl:error] [pid 2427539:tid 2427539] (70014)End of file found: [client 216.73.216.199:2605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:44.576398 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/web.config"] [unique_id "amr__P2mWbalCAERYjwRsgAAAFE"]
[Thu Jul 30 08:40:44.576619 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dashboard/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/web.config"] [unique_id "amr__P2mWbalCAERYjwRsgAAAFE"]
[Thu Jul 30 08:40:44.576760 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/web.config"] [unique_id "amr__P2mWbalCAERYjwRsgAAAFE"]
[Thu Jul 30 08:40:44.576857 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dashboard/web.config"] [unique_id "amr__P2mWbalCAERYjwRsgAAAFE"]
[Thu Jul 30 08:40:44.906869 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset/.env"] [unique_id "amr__P2mWbalCAERYjwRuQAAAFE"]
[Thu Jul 30 08:40:44.907023 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset/.env"] [unique_id "amr__P2mWbalCAERYjwRuQAAAFE"]
[Thu Jul 30 08:40:44.907137 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset/.env"] [unique_id "amr__P2mWbalCAERYjwRuQAAAFE"]
[Thu Jul 30 08:40:44.924610 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset1/.env"] [unique_id "amr__P2mWbalCAERYjwRugAAAFE"]
[Thu Jul 30 08:40:44.924755 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset1/.env"] [unique_id "amr__P2mWbalCAERYjwRugAAAFE"]
[Thu Jul 30 08:40:44.924852 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset1/.env"] [unique_id "amr__P2mWbalCAERYjwRugAAAFE"]
[Thu Jul 30 08:40:44.942279 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset2/.env"] [unique_id "amr__P2mWbalCAERYjwRuwAAAFE"]
[Thu Jul 30 08:40:44.942398 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset2/.env"] [unique_id "amr__P2mWbalCAERYjwRuwAAAFE"]
[Thu Jul 30 08:40:44.942489 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/dataset2/.env"] [unique_id "amr__P2mWbalCAERYjwRuwAAAFE"]
[Thu Jul 30 08:40:45.065345 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/debug.inc"] [unique_id "amr__f2mWbalCAERYjwRvgAAAFE"]
[Thu Jul 30 08:40:45.065684 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/debug.inc"] [unique_id "amr__f2mWbalCAERYjwRvgAAAFE"]
[Thu Jul 30 08:40:45.065781 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/debug.inc"] [unique_id "amr__f2mWbalCAERYjwRvgAAAFE"]
[Thu Jul 30 08:40:45.935731 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env"] [unique_id "amr__f2mWbalCAERYjwRzwAAAFE"]
[Thu Jul 30 08:40:45.935859 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env"] [unique_id "amr__f2mWbalCAERYjwRzwAAAFE"]
[Thu Jul 30 08:40:45.935959 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env"] [unique_id "amr__f2mWbalCAERYjwRzwAAAFE"]
[Thu Jul 30 08:40:45.953480 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.bak"] [unique_id "amr__f2mWbalCAERYjwR0AAAAFE"]
[Thu Jul 30 08:40:45.953625 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.bak"] [unique_id "amr__f2mWbalCAERYjwR0AAAAFE"]
[Thu Jul 30 08:40:45.953722 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.bak"] [unique_id "amr__f2mWbalCAERYjwR0AAAAFE"]
[Thu Jul 30 08:40:45.971572 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.dev"] [unique_id "amr__f2mWbalCAERYjwR0QAAAFE"]
[Thu Jul 30 08:40:45.971684 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.dev"] [unique_id "amr__f2mWbalCAERYjwR0QAAAFE"]
[Thu Jul 30 08:40:45.971776 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.dev"] [unique_id "amr__f2mWbalCAERYjwR0QAAAFE"]
[Thu Jul 30 08:40:45.989159 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.dist"] [unique_id "amr__f2mWbalCAERYjwR0gAAAFE"]
[Thu Jul 30 08:40:45.989284 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.dist"] [unique_id "amr__f2mWbalCAERYjwR0gAAAFE"]
[Thu Jul 30 08:40:45.989380 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.dist"] [unique_id "amr__f2mWbalCAERYjwR0gAAAFE"]
[Thu Jul 30 08:40:46.006793 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.local"] [unique_id "amr__v2mWbalCAERYjwR0wAAAFE"]
[Thu Jul 30 08:40:46.006950 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.local"] [unique_id "amr__v2mWbalCAERYjwR0wAAAFE"]
[Thu Jul 30 08:40:46.007052 2026] [security2:error] [pid 2434605:tid 2434605] [client 185.177.72.17:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "runaroundsports.theactivefootco.co.uk"] [uri "/default/.env.local"] [unique_id "amr__v2mWbalCAERYjwR0wAAAFE"]
[Thu Jul 30 08:40:46.109471 2026] [authz_core:error] [pid 2434603:tid 2434603] [client 57.141.0.63:25926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:46.110112 2026] [authz_core:error] [pid 2434603:tid 2434603] [client 57.141.0.63:25926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:46.262612 2026] [security2:error] [pid 2423799:tid 2423799] [client 47.128.29.124:23020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.alism.com"] [uri "/robots.txt"] [unique_id "amr__ssDPUni1EbX-qViqAAAADg"]
[Thu Jul 30 08:40:46.649117 2026] [ssl:error] [pid 2428311:tid 2428311] (70014)End of file found: [client 216.73.216.199:54415] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:46.715182 2026] [ssl:error] [pid 2425019:tid 2425019] (EAI 2)Name or service not known: [client 144.76.19.72:33170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:46.715230 2026] [ssl:error] [pid 2425019:tid 2425019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:46.770035 2026] [ssl:error] [pid 2433375:tid 2433375] (EAI 2)Name or service not known: [client 144.76.19.72:33174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:46.770060 2026] [ssl:error] [pid 2433375:tid 2433375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:48.162746 2026] [ssl:error] [pid 2434606:tid 2434606] (70014)End of file found: [client 216.73.216.199:20591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:48.892281 2026] [access_compat:error] [pid 2434596:tid 2434596] [client 106.215.157.145:19113] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:40:48.964054 2026] [authz_core:error] [pid 2434483:tid 2434483] [client 188.215.75.84:64440] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 08:40:48.975094 2026] [authz_core:error] [pid 2434483:tid 2434483] [client 188.215.75.84:64440] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 08:40:49.150207 2026] [authz_core:error] [pid 2434742:tid 2434742] [client 57.141.0.48:61018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:49.150830 2026] [authz_core:error] [pid 2434742:tid 2434742] [client 57.141.0.48:61018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:49.671192 2026] [ssl:error] [pid 2433768:tid 2433768] (70014)End of file found: [client 216.73.216.199:16334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:40:49.827770 2026] [ssl:error] [pid 2433879:tid 2433879] (EAI 2)Name or service not known: [client 144.76.19.72:23978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:49.827801 2026] [ssl:error] [pid 2433879:tid 2433879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:49.885932 2026] [ssl:error] [pid 2434555:tid 2434555] (EAI 2)Name or service not known: [client 144.76.19.72:23988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:49.885962 2026] [ssl:error] [pid 2434555:tid 2434555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:52.303941 2026] [authz_core:error] [pid 2434600:tid 2434600] [client 57.141.0.2:22672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:52.304571 2026] [authz_core:error] [pid 2434600:tid 2434600] [client 57.141.0.2:22672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:52.413363 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:57028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/numa_policy/order
[Thu Jul 30 08:40:52.940716 2026] [ssl:error] [pid 2420366:tid 2420366] (EAI 2)Name or service not known: [client 144.76.19.72:23992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:52.940743 2026] [ssl:error] [pid 2420366:tid 2420366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:52.992125 2026] [ssl:error] [pid 2434741:tid 2434741] (EAI 2)Name or service not known: [client 144.76.19.72:23998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:52.992156 2026] [ssl:error] [pid 2434741:tid 2434741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:53.617344 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:57028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_rmap_item/store_user
[Thu Jul 30 08:40:54.596415 2026] [authz_core:error] [pid 2434439:tid 2434439] [client 57.141.0.15:36838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:54.597044 2026] [authz_core:error] [pid 2434439:tid 2434439] [client 57.141.0.15:36838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:54.621551 2026] [security2:error] [pid 2411149:tid 2411149] [client 15.235.27.209:46016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amsABnQV4ijopiU82V8ywQAAAAY"]
[Thu Jul 30 08:40:54.974392 2026] [security2:error] [pid 2423798:tid 2423798] [client 43.131.243.61:44910] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amsABoFx8Bx4ITcCEtgoPwAAADc"]
[Thu Jul 30 08:40:56.045980 2026] [ssl:error] [pid 2434552:tid 2434552] (EAI 2)Name or service not known: [client 144.76.19.72:24000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:56.046007 2026] [ssl:error] [pid 2434552:tid 2434552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:56.100657 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:24004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:56.100682 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:56.601699 2026] [security2:error] [pid 2433374:tid 2433374] [client 54.37.118.66:42064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/category/latest-news/"] [unique_id "amsACMyObLGRSXQ99G09mgAAAAk"]
[Thu Jul 30 08:40:57.232604 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:57028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tw_sock_TCPv6/shrink
[Thu Jul 30 08:40:57.803666 2026] [authz_core:error] [pid 2427538:tid 2427538] [client 57.141.0.12:61106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:40:57.804285 2026] [authz_core:error] [pid 2427538:tid 2427538] [client 57.141.0.12:61106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:40:57.834802 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:57028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/messages
[Thu Jul 30 08:40:58.877418 2026] [access_compat:error] [pid 2428414:tid 2428414] [client 106.215.157.145:29944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:40:59.153737 2026] [ssl:error] [pid 2433428:tid 2433428] (EAI 2)Name or service not known: [client 144.76.19.72:24008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:59.153763 2026] [ssl:error] [pid 2433428:tid 2433428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:59.208401 2026] [ssl:error] [pid 2434600:tid 2434600] (EAI 2)Name or service not known: [client 144.76.19.72:24018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:40:59.208432 2026] [ssl:error] [pid 2434600:tid 2434600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:40:59.657647 2026] [core:error] [pid 2434606:tid 2434606] (13)Permission denied: [client 216.73.216.199:42419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/ogsoil.com.db
[Thu Jul 30 08:40:59.877490 2026] [security2:error] [pid 2434610:tid 2434610] [client 43.130.150.80:47092] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsAC0QciYSG9HBwQ1q42AAAAFU"], referer: http://somethingweb.co.uk
[Thu Jul 30 08:41:00.970180 2026] [cgi:error] [pid 2433372:tid 2433372] [client 104.164.173.147:65352] AH02812: stderr from /home/qse/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:41:01.155392 2026] [security2:error] [pid 2433681:tid 2433681] [client 43.130.150.80:38888] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsADVxp5zUs3F7lE8EpnQAAAA4"], referer: http://mwdesign.me.uk
[Thu Jul 30 08:41:02.262952 2026] [ssl:error] [pid 2433374:tid 2433374] (EAI 2)Name or service not known: [client 144.76.19.72:31214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:02.262983 2026] [ssl:error] [pid 2433374:tid 2433374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:02.315808 2026] [ssl:error] [pid 2434552:tid 2434552] (EAI 2)Name or service not known: [client 144.76.19.72:31224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:02.315834 2026] [ssl:error] [pid 2434552:tid 2434552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:02.386946 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:57028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/vm/memcg_reclaim_boost_priority
[Thu Jul 30 08:41:03.795914 2026] [authz_core:error] [pid 2434609:tid 2434609] [client 57.141.0.46:46240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:03.796530 2026] [authz_core:error] [pid 2434609:tid 2434609] [client 57.141.0.46:46240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:04.492100 2026] [access_compat:error] [pid 2429941:tid 2429941] [client 106.215.157.145:29841] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:41:04.808258 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:57028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS2/irq
[Thu Jul 30 08:41:04.951293 2026] [authz_core:error] [pid 2433879:tid 2433879] [client 57.141.0.26:48678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:04.951926 2026] [authz_core:error] [pid 2433879:tid 2433879] [client 57.141.0.26:48678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:05.375779 2026] [ssl:error] [pid 2434598:tid 2434598] (EAI 2)Name or service not known: [client 144.76.19.72:31238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:05.375819 2026] [ssl:error] [pid 2434598:tid 2434598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:05.431810 2026] [ssl:error] [pid 2434604:tid 2434604] (EAI 2)Name or service not known: [client 144.76.19.72:31240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:05.431840 2026] [ssl:error] [pid 2434604:tid 2434604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:05.617293 2026] [authz_core:error] [pid 2434520:tid 2434520] [client 66.249.66.35:55416] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:41:05.619946 2026] [authz_core:error] [pid 2434520:tid 2434520] [client 66.249.66.35:55416] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:41:06.012380 2026] [core:error] [pid 2411415:tid 2411415] (13)Permission denied: [client 216.73.216.199:57028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-16/object_size
[Thu Jul 30 08:41:06.632135 2026] [ssl:error] [pid 2411415:tid 2411415] (70014)End of file found: [client 216.73.216.199:57028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:08.487494 2026] [ssl:error] [pid 2429941:tid 2429941] (EAI 2)Name or service not known: [client 144.76.19.72:31242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:08.487524 2026] [ssl:error] [pid 2429941:tid 2429941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:08.542706 2026] [ssl:error] [pid 2426807:tid 2426807] (EAI 2)Name or service not known: [client 144.76.19.72:31248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:08.542767 2026] [ssl:error] [pid 2426807:tid 2426807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:09.316526 2026] [security2:error] [pid 2423799:tid 2423799] [client 152.110.159.100:51924] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAFcsDPUni1EbX-qVi6wAAADg"]
[Thu Jul 30 08:41:09.316584 2026] [security2:error] [pid 2423799:tid 2423799] [client 152.110.159.100:51924] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAFcsDPUni1EbX-qVi6wAAADg"]
[Thu Jul 30 08:41:09.316822 2026] [security2:error] [pid 2423799:tid 2423799] [client 152.110.159.100:51924] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAFcsDPUni1EbX-qVi6wAAADg"]
[Thu Jul 30 08:41:09.418854 2026] [access_compat:error] [pid 2429941:tid 2429941] [client 106.215.157.145:14463] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:41:09.490737 2026] [authz_core:error] [pid 2433372:tid 2433372] [client 57.141.0.64:54848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:09.491364 2026] [authz_core:error] [pid 2433372:tid 2433372] [client 57.141.0.64:54848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:09.666350 2026] [ssl:error] [pid 2427542:tid 2427542] (70014)End of file found: [client 216.73.216.199:44287] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:09.870005 2026] [access_compat:error] [pid 2433374:tid 2433374] [client 45.158.164.139:35110] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:41:09.952512 2026] [authz_core:error] [pid 2434518:tid 2434518] [client 57.141.0.70:25678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:09.953168 2026] [authz_core:error] [pid 2434518:tid 2434518] [client 57.141.0.70:25678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:10.872025 2026] [ssl:error] [pid 2421705:tid 2421705] (70014)End of file found: [client 216.73.216.199:27195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:11.365551 2026] [security2:error] [pid 2427538:tid 2427538] [client 202.56.2.73:1674] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAF0F8-2jmOXMCjJjjfQAAACM"]
[Thu Jul 30 08:41:11.365611 2026] [security2:error] [pid 2427538:tid 2427538] [client 202.56.2.73:1674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAF0F8-2jmOXMCjJjjfQAAACM"]
[Thu Jul 30 08:41:11.365853 2026] [security2:error] [pid 2427538:tid 2427538] [client 202.56.2.73:1674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAF0F8-2jmOXMCjJjjfQAAACM"]
[Thu Jul 30 08:41:11.599542 2026] [ssl:error] [pid 2428221:tid 2428221] (EAI 2)Name or service not known: [client 144.76.19.72:52436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:11.599583 2026] [ssl:error] [pid 2428221:tid 2428221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:11.661227 2026] [ssl:error] [pid 2434605:tid 2434605] (EAI 2)Name or service not known: [client 144.76.19.72:52448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:11.661268 2026] [ssl:error] [pid 2434605:tid 2434605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:12.851504 2026] [cgi:error] [pid 2429943:tid 2429943] [client 20.220.15.170:26781] AH02812: stderr from /home/robincou/player.robin64.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:41:14.766013 2026] [ssl:error] [pid 2426807:tid 2426807] (EAI 2)Name or service not known: [client 144.76.19.72:52454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:14.766040 2026] [ssl:error] [pid 2426807:tid 2426807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:14.822243 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:52456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:14.822265 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:15.480479 2026] [security2:error] [pid 2434609:tid 2434609] [client 189.201.128.89:59086] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAG44K5QoTG2aAI2YLXgAAAFQ"]
[Thu Jul 30 08:41:15.480526 2026] [security2:error] [pid 2434609:tid 2434609] [client 189.201.128.89:59086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAG44K5QoTG2aAI2YLXgAAAFQ"]
[Thu Jul 30 08:41:15.480793 2026] [security2:error] [pid 2434609:tid 2434609] [client 189.201.128.89:59086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAG44K5QoTG2aAI2YLXgAAAFQ"]
[Thu Jul 30 08:41:16.010262 2026] [authz_core:error] [pid 2427542:tid 2427542] [client 57.141.0.62:45018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:16.010887 2026] [authz_core:error] [pid 2427542:tid 2427542] [client 57.141.0.62:45018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:17.875497 2026] [ssl:error] [pid 2434605:tid 2434605] (EAI 2)Name or service not known: [client 144.76.19.72:52470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:17.875525 2026] [ssl:error] [pid 2434605:tid 2434605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:17.928496 2026] [ssl:error] [pid 2434483:tid 2434483] (EAI 2)Name or service not known: [client 144.76.19.72:52484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:17.928538 2026] [ssl:error] [pid 2434483:tid 2434483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:18.866203 2026] [authz_core:error] [pid 2434599:tid 2434599] [client 57.141.0.3:22404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:18.866829 2026] [authz_core:error] [pid 2434599:tid 2434599] [client 57.141.0.3:22404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:18.951148 2026] [security2:error] [pid 2433322:tid 2433322] [client 94.154.43.177:46210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.thatwall.com.davidebell.com"] [uri "/.env"] [unique_id "amsAHscgA4XBpkwmkf-OvAAAAAE"]
[Thu Jul 30 08:41:18.951290 2026] [security2:error] [pid 2433322:tid 2433322] [client 94.154.43.177:46210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.thatwall.com.davidebell.com"] [uri "/.env"] [unique_id "amsAHscgA4XBpkwmkf-OvAAAAAE"]
[Thu Jul 30 08:41:18.951485 2026] [security2:error] [pid 2433322:tid 2433322] [client 94.154.43.177:46210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.thatwall.com.davidebell.com"] [uri "/.env"] [unique_id "amsAHscgA4XBpkwmkf-OvAAAAAE"]
[Thu Jul 30 08:41:18.965756 2026] [security2:error] [pid 2426807:tid 2426807] [client 94.154.43.187:56152] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thatwall.com"] [uri "/.env"] [unique_id "amsAHiHAPrN-NLid3VAHPwAAADo"]
[Thu Jul 30 08:41:18.965886 2026] [security2:error] [pid 2426807:tid 2426807] [client 94.154.43.187:56152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thatwall.com"] [uri "/.env"] [unique_id "amsAHiHAPrN-NLid3VAHPwAAADo"]
[Thu Jul 30 08:41:18.966055 2026] [security2:error] [pid 2426807:tid 2426807] [client 94.154.43.187:56152] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thatwall.com"] [uri "/.env"] [unique_id "amsAHiHAPrN-NLid3VAHPwAAADo"]
[Thu Jul 30 08:41:18.973577 2026] [security2:error] [pid 2434482:tid 2434482] [client 94.154.43.179:33122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kirstybashforth.com"] [uri "/.env"] [unique_id "amsAHlIExVVi7u-cMSWMFwAAAAg"]
[Thu Jul 30 08:41:18.973722 2026] [security2:error] [pid 2434482:tid 2434482] [client 94.154.43.179:33122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kirstybashforth.com"] [uri "/.env"] [unique_id "amsAHlIExVVi7u-cMSWMFwAAAAg"]
[Thu Jul 30 08:41:18.973908 2026] [security2:error] [pid 2434482:tid 2434482] [client 94.154.43.179:33122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kirstybashforth.com"] [uri "/.env"] [unique_id "amsAHlIExVVi7u-cMSWMFwAAAAg"]
[Thu Jul 30 08:41:18.998981 2026] [security2:error] [pid 2426802:tid 2426802] [client 94.154.43.185:24430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.kirstybashforth.com.davidebell.com"] [uri "/.env"] [unique_id "amsAHp0tobHeIcZHOW5gfQAAACY"]
[Thu Jul 30 08:41:18.999134 2026] [security2:error] [pid 2426802:tid 2426802] [client 94.154.43.185:24430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.kirstybashforth.com.davidebell.com"] [uri "/.env"] [unique_id "amsAHp0tobHeIcZHOW5gfQAAACY"]
[Thu Jul 30 08:41:18.999333 2026] [security2:error] [pid 2426802:tid 2426802] [client 94.154.43.185:24430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.kirstybashforth.com.davidebell.com"] [uri "/.env"] [unique_id "amsAHp0tobHeIcZHOW5gfQAAACY"]
[Thu Jul 30 08:41:19.923648 2026] [access_compat:error] [pid 2423798:tid 2423798] [client 106.215.157.145:17721] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:41:20.884373 2026] [authz_core:error] [pid 2433428:tid 2433428] [client 57.141.0.67:39564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:20.884999 2026] [authz_core:error] [pid 2433428:tid 2433428] [client 57.141.0.67:39564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:20.934957 2026] [core:error] [pid 2433322:tid 2433322] [client 66.249.66.68:65298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:20.934975 2026] [core:error] [pid 2433322:tid 2433322] [client 66.249.66.68:65298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:20.935382 2026] [core:error] [pid 2428414:tid 2428414] [client 66.249.66.68:36120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:20.935401 2026] [core:error] [pid 2428414:tid 2428414] [client 66.249.66.68:36120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:20.987839 2026] [ssl:error] [pid 2434683:tid 2434683] (EAI 2)Name or service not known: [client 144.76.19.72:30364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:20.987865 2026] [ssl:error] [pid 2434683:tid 2434683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:21.045466 2026] [ssl:error] [pid 2433428:tid 2433428] (EAI 2)Name or service not known: [client 144.76.19.72:30366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:21.045487 2026] [ssl:error] [pid 2433428:tid 2433428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:21.185817 2026] [ssl:error] [pid 2434521:tid 2434521] (70014)End of file found: [client 216.73.216.199:47740] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:23.037861 2026] [core:error] [pid 2426802:tid 2426802] [client 66.249.66.8:51425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:23.037888 2026] [core:error] [pid 2426802:tid 2426802] [client 66.249.66.8:51425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:23.137932 2026] [authz_core:error] [pid 2434596:tid 2434596] [client 45.158.164.139:36302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:23.138555 2026] [authz_core:error] [pid 2434596:tid 2434596] [client 45.158.164.139:36302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:23.166353 2026] [authz_core:error] [pid 2426802:tid 2426802] [client 45.158.164.139:36316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:23.167004 2026] [authz_core:error] [pid 2426802:tid 2426802] [client 45.158.164.139:36316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:23.179513 2026] [authz_core:error] [pid 2433276:tid 2433276] [client 45.158.164.139:36328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:23.180148 2026] [authz_core:error] [pid 2433276:tid 2433276] [client 45.158.164.139:36328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:23.191106 2026] [authz_core:error] [pid 2426802:tid 2426802] [client 45.158.164.139:36338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:23.191712 2026] [authz_core:error] [pid 2426802:tid 2426802] [client 45.158.164.139:36338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:23.221849 2026] [authz_core:error] [pid 2436651:tid 2436651] [client 57.141.0.13:20028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:23.222497 2026] [authz_core:error] [pid 2436651:tid 2436651] [client 57.141.0.13:20028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:23.237813 2026] [authz_core:error] [pid 2428414:tid 2428414] [client 57.141.0.16:53206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:23.238434 2026] [authz_core:error] [pid 2428414:tid 2428414] [client 57.141.0.16:53206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:23.296628 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env"] [unique_id "amsAI50tobHeIcZHOW5ggwAAACY"]
[Thu Jul 30 08:41:23.296853 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env"] [unique_id "amsAI50tobHeIcZHOW5ggwAAACY"]
[Thu Jul 30 08:41:23.356900 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAI50tobHeIcZHOW5ggwAAACY"]
[Thu Jul 30 08:41:23.604640 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/portal/.env"] [unique_id "amsAI50tobHeIcZHOW5ghgAAACY"]
[Thu Jul 30 08:41:23.604858 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/portal/.env"] [unique_id "amsAI50tobHeIcZHOW5ghgAAACY"]
[Thu Jul 30 08:41:23.611651 2026] [core:error] [pid 2434555:tid 2434555] (13)Permission denied: [client 216.73.216.199:3718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/vmd/drivers/pci:vmd/uevent
[Thu Jul 30 08:41:23.661032 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAI50tobHeIcZHOW5ghgAAACY"]
[Thu Jul 30 08:41:23.697667 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/env/.env"] [unique_id "amsAI50tobHeIcZHOW5ghwAAACY"]
[Thu Jul 30 08:41:23.697902 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/env/.env"] [unique_id "amsAI50tobHeIcZHOW5ghwAAACY"]
[Thu Jul 30 08:41:23.790365 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAI50tobHeIcZHOW5ghwAAACY"]
[Thu Jul 30 08:41:23.815747 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/api/.env"] [unique_id "amsAI50tobHeIcZHOW5giAAAACY"]
[Thu Jul 30 08:41:23.815975 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/api/.env"] [unique_id "amsAI50tobHeIcZHOW5giAAAACY"]
[Thu Jul 30 08:41:23.874091 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAI50tobHeIcZHOW5giAAAACY"]
[Thu Jul 30 08:41:23.894312 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/app/.env"] [unique_id "amsAI50tobHeIcZHOW5giQAAACY"]
[Thu Jul 30 08:41:23.894526 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/app/.env"] [unique_id "amsAI50tobHeIcZHOW5giQAAACY"]
[Thu Jul 30 08:41:23.911803 2026] [core:error] [pid 2434555:tid 2434555] (13)Permission denied: [client 216.73.216.199:3718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/graphics/fb0/device/driver/new_id
[Thu Jul 30 08:41:23.963498 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAI50tobHeIcZHOW5giQAAACY"]
[Thu Jul 30 08:41:24.007040 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/dev/.env"] [unique_id "amsAJJ0tobHeIcZHOW5gigAAACY"]
[Thu Jul 30 08:41:24.007260 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/dev/.env"] [unique_id "amsAJJ0tobHeIcZHOW5gigAAACY"]
[Thu Jul 30 08:41:24.067849 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJJ0tobHeIcZHOW5gigAAACY"]
[Thu Jul 30 08:41:24.106414 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env"] [unique_id "amsAJJ0tobHeIcZHOW5giwAAACY"]
[Thu Jul 30 08:41:24.106603 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env"] [unique_id "amsAJJ0tobHeIcZHOW5giwAAACY"]
[Thu Jul 30 08:41:24.170472 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJJ0tobHeIcZHOW5giwAAACY"]
[Thu Jul 30 08:41:24.214776 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env.local"] [unique_id "amsAJJ0tobHeIcZHOW5gjAAAACY"]
[Thu Jul 30 08:41:24.214912 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env.local"] [unique_id "amsAJJ0tobHeIcZHOW5gjAAAACY"]
[Thu Jul 30 08:41:24.277801 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJJ0tobHeIcZHOW5gjAAAACY"]
[Thu Jul 30 08:41:24.309210 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env.production"] [unique_id "amsAJJ0tobHeIcZHOW5gjQAAACY"]
[Thu Jul 30 08:41:24.309391 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env.production"] [unique_id "amsAJJ0tobHeIcZHOW5gjQAAACY"]
[Thu Jul 30 08:41:24.329481 2026] [core:error] [pid 2434601:tid 2434601] [client 66.249.66.5:48088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:24.329504 2026] [core:error] [pid 2434601:tid 2434601] [client 66.249.66.5:48088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:24.375527 2026] [security2:error] [pid 2426802:tid 2426802] [client 45.148.10.67:53506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJJ0tobHeIcZHOW5gjQAAACY"]
[Thu Jul 30 08:41:24.465907 2026] [ssl:error] [pid 2436775:tid 2436775] (EAI 2)Name or service not known: [client 144.76.19.72:30376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:24.465944 2026] [ssl:error] [pid 2436775:tid 2436775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:24.556004 2026] [authz_core:error] [pid 2436777:tid 2436777] [client 57.141.0.32:63120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:24.556662 2026] [authz_core:error] [pid 2436777:tid 2436777] [client 57.141.0.32:63120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:24.575670 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env.staging"] [unique_id "amsAJJAnA9Ze4D7oYba87gAAAAw"]
[Thu Jul 30 08:41:24.575827 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/new/.env.staging"] [unique_id "amsAJJAnA9Ze4D7oYba87gAAAAw"]
[Thu Jul 30 08:41:24.634057 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJJAnA9Ze4D7oYba87gAAAAw"]
[Thu Jul 30 08:41:24.882593 2026] [ssl:error] [pid 2434601:tid 2434601] (EAI 2)Name or service not known: [client 144.76.19.72:30388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:24.882629 2026] [ssl:error] [pid 2434601:tid 2434601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:25.224092 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/awstats/.env"] [unique_id "amsAJZAnA9Ze4D7oYba89QAAAAw"]
[Thu Jul 30 08:41:25.224332 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/awstats/.env"] [unique_id "amsAJZAnA9Ze4D7oYba89QAAAAw"]
[Thu Jul 30 08:41:25.288750 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJZAnA9Ze4D7oYba89QAAAAw"]
[Thu Jul 30 08:41:25.314166 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/conf/.env"] [unique_id "amsAJZAnA9Ze4D7oYba89gAAAAw"]
[Thu Jul 30 08:41:25.314348 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/conf/.env"] [unique_id "amsAJZAnA9Ze4D7oYba89gAAAAw"]
[Thu Jul 30 08:41:25.373311 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJZAnA9Ze4D7oYba89gAAAAw"]
[Thu Jul 30 08:41:25.394675 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/cron/.env"] [unique_id "amsAJZAnA9Ze4D7oYba89wAAAAw"]
[Thu Jul 30 08:41:25.394853 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/cron/.env"] [unique_id "amsAJZAnA9Ze4D7oYba89wAAAAw"]
[Thu Jul 30 08:41:25.453639 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJZAnA9Ze4D7oYba89wAAAAw"]
[Thu Jul 30 08:41:25.476864 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/www/.env"] [unique_id "amsAJZAnA9Ze4D7oYba8-AAAAAw"]
[Thu Jul 30 08:41:25.476996 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/www/.env"] [unique_id "amsAJZAnA9Ze4D7oYba8-AAAAAw"]
[Thu Jul 30 08:41:25.534210 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJZAnA9Ze4D7oYba8-AAAAAw"]
[Thu Jul 30 08:41:25.556743 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/docker/.env"] [unique_id "amsAJZAnA9Ze4D7oYba8-QAAAAw"]
[Thu Jul 30 08:41:25.556899 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/docker/.env"] [unique_id "amsAJZAnA9Ze4D7oYba8-QAAAAw"]
[Thu Jul 30 08:41:25.614328 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJZAnA9Ze4D7oYba8-QAAAAw"]
[Thu Jul 30 08:41:25.637611 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/docker/app/.env"] [unique_id "amsAJZAnA9Ze4D7oYba8-gAAAAw"]
[Thu Jul 30 08:41:25.637788 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/docker/app/.env"] [unique_id "amsAJZAnA9Ze4D7oYba8-gAAAAw"]
[Thu Jul 30 08:41:25.696027 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJZAnA9Ze4D7oYba8-gAAAAw"]
[Thu Jul 30 08:41:25.711908 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.pamporovoexpress.com"] [uri "/env.backup"] [unique_id "amsAJZAnA9Ze4D7oYba8-wAAAAw"]
[Thu Jul 30 08:41:25.712086 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/env.backup"] [unique_id "amsAJZAnA9Ze4D7oYba8-wAAAAw"]
[Thu Jul 30 08:41:25.767734 2026] [security2:error] [pid 2436775:tid 2436775] [client 45.148.10.67:53518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJZAnA9Ze4D7oYba8-wAAAAw"]
[Thu Jul 30 08:41:26.250157 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.vscode/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrSQAAABM"]
[Thu Jul 30 08:41:26.250303 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.vscode/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrSQAAABM"]
[Thu Jul 30 08:41:26.306798 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrSQAAABM"]
[Thu Jul 30 08:41:26.331475 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/js/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrSgAAABM"]
[Thu Jul 30 08:41:26.331659 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/js/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrSgAAABM"]
[Thu Jul 30 08:41:26.403346 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrSgAAABM"]
[Thu Jul 30 08:41:26.430104 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/laravel/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrSwAAABM"]
[Thu Jul 30 08:41:26.430280 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/laravel/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrSwAAABM"]
[Thu Jul 30 08:41:26.489270 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrSwAAABM"]
[Thu Jul 30 08:41:26.508033 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/laravel/core/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTAAAABM"]
[Thu Jul 30 08:41:26.508223 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/laravel/core/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTAAAABM"]
[Thu Jul 30 08:41:26.564896 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrTAAAABM"]
[Thu Jul 30 08:41:26.589667 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/mail/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTQAAABM"]
[Thu Jul 30 08:41:26.589791 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/mail/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTQAAABM"]
[Thu Jul 30 08:41:26.646813 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrTQAAABM"]
[Thu Jul 30 08:41:26.671641 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/mailer/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTgAAABM"]
[Thu Jul 30 08:41:26.671785 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/mailer/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTgAAABM"]
[Thu Jul 30 08:41:26.728048 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrTgAAABM"]
[Thu Jul 30 08:41:26.763408 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/nginx/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTwAAABM"]
[Thu Jul 30 08:41:26.763595 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/nginx/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrTwAAABM"]
[Thu Jul 30 08:41:26.819365 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrTwAAABM"]
[Thu Jul 30 08:41:26.846314 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/public/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrUAAAABM"]
[Thu Jul 30 08:41:26.846439 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/public/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrUAAAABM"]
[Thu Jul 30 08:41:26.903289 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrUAAAABM"]
[Thu Jul 30 08:41:26.929333 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/site/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrUQAAABM"]
[Thu Jul 30 08:41:26.929509 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/site/.env"] [unique_id "amsAJrwuk9Ifh3ezVzFrUQAAABM"]
[Thu Jul 30 08:41:26.998618 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJrwuk9Ifh3ezVzFrUQAAABM"]
[Thu Jul 30 08:41:27.023134 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/xampp/.env"] [unique_id "amsAJ7wuk9Ifh3ezVzFrUgAAABM"]
[Thu Jul 30 08:41:27.023279 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/xampp/.env"] [unique_id "amsAJ7wuk9Ifh3ezVzFrUgAAABM"]
[Thu Jul 30 08:41:27.086155 2026] [security2:error] [pid 2436829:tid 2436829] [client 45.148.10.67:44416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ7wuk9Ifh3ezVzFrUgAAABM"]
[Thu Jul 30 08:41:27.153173 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/main/.env"] [unique_id "amsAJ2j0SmwXWJLwq0R2vAAAACE"]
[Thu Jul 30 08:41:27.153354 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/main/.env"] [unique_id "amsAJ2j0SmwXWJLwq0R2vAAAACE"]
[Thu Jul 30 08:41:27.212935 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ2j0SmwXWJLwq0R2vAAAACE"]
[Thu Jul 30 08:41:27.239224 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/node_modules/.env"] [unique_id "amsAJ2j0SmwXWJLwq0R2vQAAACE"]
[Thu Jul 30 08:41:27.239391 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/node_modules/.env"] [unique_id "amsAJ2j0SmwXWJLwq0R2vQAAACE"]
[Thu Jul 30 08:41:27.297705 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ2j0SmwXWJLwq0R2vQAAACE"]
[Thu Jul 30 08:41:27.327993 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/kyc/.env"] [unique_id "amsAJ2j0SmwXWJLwq0R2vgAAACE"]
[Thu Jul 30 08:41:27.328200 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/kyc/.env"] [unique_id "amsAJ2j0SmwXWJLwq0R2vgAAACE"]
[Thu Jul 30 08:41:27.402323 2026] [security2:error] [pid 2436833:tid 2436833] [client 45.148.10.67:44426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ2j0SmwXWJLwq0R2vgAAACE"]
[Thu Jul 30 08:41:27.461015 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/admin/.env"] [unique_id "amsAJ0AEOnquTlmZJ4R_sgAAAC8"]
[Thu Jul 30 08:41:27.461210 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/admin/.env"] [unique_id "amsAJ0AEOnquTlmZJ4R_sgAAAC8"]
[Thu Jul 30 08:41:27.518840 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ0AEOnquTlmZJ4R_sgAAAC8"]
[Thu Jul 30 08:41:27.541277 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/prod/.env"] [unique_id "amsAJ0AEOnquTlmZJ4R_swAAAC8"]
[Thu Jul 30 08:41:27.541448 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/prod/.env"] [unique_id "amsAJ0AEOnquTlmZJ4R_swAAAC8"]
[Thu Jul 30 08:41:27.601123 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ0AEOnquTlmZJ4R_swAAAC8"]
[Thu Jul 30 08:41:27.644608 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env.bak"] [unique_id "amsAJ0AEOnquTlmZJ4R_tAAAAC8"]
[Thu Jul 30 08:41:27.644682 2026] [cgi:error] [pid 2434601:tid 2434601] [client 20.104.22.47:60336] AH02812: stderr from /home/yydzxkll/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:41:27.644753 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env.bak"] [unique_id "amsAJ0AEOnquTlmZJ4R_tAAAAC8"]
[Thu Jul 30 08:41:27.721368 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ0AEOnquTlmZJ4R_tAAAAC8"]
[Thu Jul 30 08:41:27.939506 2026] [ssl:error] [pid 2433428:tid 2433428] (EAI 2)Name or service not known: [client 144.76.19.72:30396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:27.939539 2026] [ssl:error] [pid 2433428:tid 2433428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:27.977002 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/website/.env"] [unique_id "amsAJ0AEOnquTlmZJ4R_uAAAAC8"]
[Thu Jul 30 08:41:27.977199 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/website/.env"] [unique_id "amsAJ0AEOnquTlmZJ4R_uAAAAC8"]
[Thu Jul 30 08:41:27.994655 2026] [ssl:error] [pid 2436941:tid 2436941] (EAI 2)Name or service not known: [client 144.76.19.72:30408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:27.994682 2026] [ssl:error] [pid 2436941:tid 2436941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:28.034529 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAJ0AEOnquTlmZJ4R_uAAAAC8"]
[Thu Jul 30 08:41:28.052453 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/development/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_uQAAAC8"]
[Thu Jul 30 08:41:28.052594 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/development/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_uQAAAC8"]
[Thu Jul 30 08:41:28.106926 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_uQAAAC8"]
[Thu Jul 30 08:41:28.132830 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/backend/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_ugAAAC8"]
[Thu Jul 30 08:41:28.132950 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/backend/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_ugAAAC8"]
[Thu Jul 30 08:41:28.190496 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_ugAAAC8"]
[Thu Jul 30 08:41:28.213108 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/api/shared/config/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_uwAAAC8"]
[Thu Jul 30 08:41:28.213242 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/api/shared/config/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_uwAAAC8"]
[Thu Jul 30 08:41:28.284309 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_uwAAAC8"]
[Thu Jul 30 08:41:28.314520 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/api/shared/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_vAAAAC8"]
[Thu Jul 30 08:41:28.314668 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/api/shared/.env"] [unique_id "amsAKEAEOnquTlmZJ4R_vAAAAC8"]
[Thu Jul 30 08:41:28.378417 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_vAAAAC8"]
[Thu Jul 30 08:41:28.559557 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/node/.env_example"] [unique_id "amsAKEAEOnquTlmZJ4R_vwAAAC8"]
[Thu Jul 30 08:41:28.559736 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/node/.env_example"] [unique_id "amsAKEAEOnquTlmZJ4R_vwAAAC8"]
[Thu Jul 30 08:41:28.619388 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_vwAAAC8"]
[Thu Jul 30 08:41:28.642536 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env.production.local"] [unique_id "amsAKEAEOnquTlmZJ4R_wAAAAC8"]
[Thu Jul 30 08:41:28.642726 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env.production.local"] [unique_id "amsAKEAEOnquTlmZJ4R_wAAAAC8"]
[Thu Jul 30 08:41:28.699906 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_wAAAAC8"]
[Thu Jul 30 08:41:28.722202 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env.local"] [unique_id "amsAKEAEOnquTlmZJ4R_wQAAAC8"]
[Thu Jul 30 08:41:28.722384 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env.local"] [unique_id "amsAKEAEOnquTlmZJ4R_wQAAAC8"]
[Thu Jul 30 08:41:28.754534 2026] [authz_core:error] [pid 2434601:tid 2434601] [client 20.104.22.47:60336] AH01630: client denied by server configuration: /home/yydzxkll/public_html/php.ini
[Thu Jul 30 08:41:28.780245 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_wQAAAC8"]
[Thu Jul 30 08:41:28.798144 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env.example"] [unique_id "amsAKEAEOnquTlmZJ4R_wgAAAC8"]
[Thu Jul 30 08:41:28.798299 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env.example"] [unique_id "amsAKEAEOnquTlmZJ4R_wgAAAC8"]
[Thu Jul 30 08:41:28.855830 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_wgAAAC8"]
[Thu Jul 30 08:41:28.878317 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env.stage"] [unique_id "amsAKEAEOnquTlmZJ4R_wwAAAC8"]
[Thu Jul 30 08:41:28.878491 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env.stage"] [unique_id "amsAKEAEOnquTlmZJ4R_wwAAAC8"]
[Thu Jul 30 08:41:28.939863 2026] [security2:error] [pid 2411420:tid 2411420] [client 45.148.10.67:44430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKEAEOnquTlmZJ4R_wwAAAC8"]
[Thu Jul 30 08:41:29.080905 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env.old"] [unique_id "amsAKccgA4XBpkwmkf-OwgAAAAE"]
[Thu Jul 30 08:41:29.081034 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env.old"] [unique_id "amsAKccgA4XBpkwmkf-OwgAAAAE"]
[Thu Jul 30 08:41:29.140696 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OwgAAAAE"]
[Thu Jul 30 08:41:29.156529 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env_sample"] [unique_id "amsAKccgA4XBpkwmkf-OwwAAAAE"]
[Thu Jul 30 08:41:29.156688 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env_sample"] [unique_id "amsAKccgA4XBpkwmkf-OwwAAAAE"]
[Thu Jul 30 08:41:29.214454 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OwwAAAAE"]
[Thu Jul 30 08:41:29.318231 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/.env.prod"] [unique_id "amsAKccgA4XBpkwmkf-OxQAAAAE"]
[Thu Jul 30 08:41:29.318402 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/.env.prod"] [unique_id "amsAKccgA4XBpkwmkf-OxQAAAAE"]
[Thu Jul 30 08:41:29.374182 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OxQAAAAE"]
[Thu Jul 30 08:41:29.475388 2026] [security2:error] [pid 2434483:tid 2434483] [client 43.166.244.66:60528] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amsAKfuboEtnMvG8Vr9I_gAAABA"]
[Thu Jul 30 08:41:29.494050 2026] [authz_core:error] [pid 2434482:tid 2434482] [client 57.141.0.11:63826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:29.494708 2026] [authz_core:error] [pid 2434482:tid 2434482] [client 57.141.0.11:63826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:29.522845 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/crm/.env"] [unique_id "amsAKccgA4XBpkwmkf-OxgAAAAE"]
[Thu Jul 30 08:41:29.522969 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/crm/.env"] [unique_id "amsAKccgA4XBpkwmkf-OxgAAAAE"]
[Thu Jul 30 08:41:29.579117 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OxgAAAAE"]
[Thu Jul 30 08:41:29.607727 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/local/.env"] [unique_id "amsAKccgA4XBpkwmkf-OxwAAAAE"]
[Thu Jul 30 08:41:29.607907 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/local/.env"] [unique_id "amsAKccgA4XBpkwmkf-OxwAAAAE"]
[Thu Jul 30 08:41:29.663670 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OxwAAAAE"]
[Thu Jul 30 08:41:29.681202 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/core/.env"] [unique_id "amsAKccgA4XBpkwmkf-OyAAAAAE"]
[Thu Jul 30 08:41:29.681372 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/core/.env"] [unique_id "amsAKccgA4XBpkwmkf-OyAAAAAE"]
[Thu Jul 30 08:41:29.737263 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OyAAAAAE"]
[Thu Jul 30 08:41:29.753551 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/apps/.env"] [unique_id "amsAKccgA4XBpkwmkf-OyQAAAAE"]
[Thu Jul 30 08:41:29.753737 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/apps/.env"] [unique_id "amsAKccgA4XBpkwmkf-OyQAAAAE"]
[Thu Jul 30 08:41:29.809605 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OyQAAAAE"]
[Thu Jul 30 08:41:29.825661 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/application/.env"] [unique_id "amsAKccgA4XBpkwmkf-OygAAAAE"]
[Thu Jul 30 08:41:29.825839 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/application/.env"] [unique_id "amsAKccgA4XBpkwmkf-OygAAAAE"]
[Thu Jul 30 08:41:29.884473 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OygAAAAE"]
[Thu Jul 30 08:41:29.901649 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/web/.env"] [unique_id "amsAKccgA4XBpkwmkf-OywAAAAE"]
[Thu Jul 30 08:41:29.901793 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/web/.env"] [unique_id "amsAKccgA4XBpkwmkf-OywAAAAE"]
[Thu Jul 30 08:41:29.960887 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKccgA4XBpkwmkf-OywAAAAE"]
[Thu Jul 30 08:41:30.075267 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.com"] [uri "/wp-config.php.bak"] [unique_id "amsAKscgA4XBpkwmkf-OzQAAAAE"]
[Thu Jul 30 08:41:30.075510 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.com"] [uri "/wp-config.php.bak"] [unique_id "amsAKscgA4XBpkwmkf-OzQAAAAE"]
[Thu Jul 30 08:41:30.134523 2026] [security2:error] [pid 2433322:tid 2433322] [client 45.148.10.67:44444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.com"] [uri "/index.php"] [unique_id "amsAKscgA4XBpkwmkf-OzQAAAAE"]
[Thu Jul 30 08:41:30.263151 2026] [ssl:error] [pid 2434555:tid 2434555] (70014)End of file found: [client 216.73.216.199:3718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:30.507146 2026] [access_compat:error] [pid 2426661:tid 2426661] [client 106.215.157.145:15617] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:41:31.049650 2026] [ssl:error] [pid 2433323:tid 2433323] (EAI 2)Name or service not known: [client 144.76.19.72:59884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:31.049688 2026] [ssl:error] [pid 2433323:tid 2433323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:31.104343 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:59892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:31.104367 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:31.198966 2026] [security2:error] [pid 2436941:tid 2436941] [client 43.166.244.66:55902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amsAK2aS4v_m9qZBw-UMYgAAACs"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 08:41:33.302455 2026] [security2:error] [pid 2434596:tid 2434596] [client 43.166.244.66:56840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amsALU1TVgfNiY0G34Q6uAAAAEE"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 08:41:33.543977 2026] [authz_core:error] [pid 2436941:tid 2436941] [client 57.141.0.28:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:33.544657 2026] [authz_core:error] [pid 2436941:tid 2436941] [client 57.141.0.28:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:34.157428 2026] [ssl:error] [pid 2426802:tid 2426802] (EAI 2)Name or service not known: [client 144.76.19.72:59908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:34.157461 2026] [ssl:error] [pid 2426802:tid 2426802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:34.171150 2026] [ssl:error] [pid 2423799:tid 2423799] (70014)End of file found: [client 216.73.216.199:29561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:34.210868 2026] [ssl:error] [pid 2436941:tid 2436941] (EAI 2)Name or service not known: [client 144.76.19.72:59918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:34.210908 2026] [ssl:error] [pid 2436941:tid 2436941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:34.227382 2026] [authz_core:error] [pid 2434520:tid 2434520] [client 66.249.66.33:54012] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:41:34.230042 2026] [authz_core:error] [pid 2434520:tid 2434520] [client 66.249.66.33:54012] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:41:34.772352 2026] [core:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:38569] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_perm_event/store_user
[Thu Jul 30 08:41:35.377842 2026] [core:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:38569] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/sbin/unix_update
[Thu Jul 30 08:41:36.581546 2026] [core:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:38569] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/donsmith.org.uk.db
[Thu Jul 30 08:41:37.184007 2026] [ssl:error] [pid 2420262:tid 2420262] (70014)End of file found: [client 216.73.216.199:38569] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:37.265637 2026] [ssl:error] [pid 2434742:tid 2434742] (EAI 2)Name or service not known: [client 144.76.19.72:59926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:37.265671 2026] [ssl:error] [pid 2434742:tid 2434742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:37.317782 2026] [ssl:error] [pid 2427542:tid 2427542] (EAI 2)Name or service not known: [client 144.76.19.72:59942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:37.317816 2026] [ssl:error] [pid 2427542:tid 2427542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:38.644039 2026] [authz_core:error] [pid 2426661:tid 2426661] [client 169.58.39.192:60047] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 08:41:39.055707 2026] [core:error] [pid 2434597:tid 2434597] [client 66.249.64.171:45825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:39.055731 2026] [core:error] [pid 2434597:tid 2434597] [client 66.249.64.171:45825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:40.371579 2026] [ssl:error] [pid 2427538:tid 2427538] (EAI 2)Name or service not known: [client 144.76.19.72:42768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:40.371621 2026] [ssl:error] [pid 2427538:tid 2427538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:40.422925 2026] [ssl:error] [pid 2434597:tid 2434597] (EAI 2)Name or service not known: [client 144.76.19.72:42784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:40.422961 2026] [ssl:error] [pid 2434597:tid 2434597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:40.799803 2026] [ssl:error] [pid 2411420:tid 2411420] (70014)End of file found: [client 216.73.216.199:19935] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:41.031914 2026] [access_compat:error] [pid 2428222:tid 2428222] [client 106.215.157.145:6160] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:41:41.225015 2026] [authz_core:error] [pid 2434519:tid 2434519] [client 66.249.66.33:37066] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:41:41.228002 2026] [authz_core:error] [pid 2434519:tid 2434519] [client 66.249.66.33:37066] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:41:42.855388 2026] [authz_core:error] [pid 2436831:tid 2436831] [client 169.58.39.192:61638] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 08:41:43.479592 2026] [ssl:error] [pid 2434439:tid 2434439] (EAI 2)Name or service not known: [client 144.76.19.72:42794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:43.479627 2026] [ssl:error] [pid 2434439:tid 2434439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:43.532882 2026] [security2:error] [pid 2436832:tid 2436832] [client 94.154.43.229:55546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ditchfest.com"] [uri "/.env"] [unique_id "amsAN0NGJvGqj2lcFAGAwwAAAB4"]
[Thu Jul 30 08:41:43.533134 2026] [security2:error] [pid 2436832:tid 2436832] [client 94.154.43.229:55546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ditchfest.com"] [uri "/.env"] [unique_id "amsAN0NGJvGqj2lcFAGAwwAAAB4"]
[Thu Jul 30 08:41:43.533411 2026] [security2:error] [pid 2436832:tid 2436832] [client 94.154.43.229:55546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ditchfest.com"] [uri "/.env"] [unique_id "amsAN0NGJvGqj2lcFAGAwwAAAB4"]
[Thu Jul 30 08:41:43.537987 2026] [ssl:error] [pid 2434605:tid 2434605] (EAI 2)Name or service not known: [client 144.76.19.72:42806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:43.538006 2026] [ssl:error] [pid 2434605:tid 2434605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:43.547823 2026] [security2:error] [pid 2426661:tid 2426661] [client 94.154.43.186:19658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "yourpartyyourway.com"] [uri "/.env"] [unique_id "amsAN010g1cPUQyHDS7ycAAAABg"]
[Thu Jul 30 08:41:43.548043 2026] [security2:error] [pid 2426661:tid 2426661] [client 94.154.43.186:19658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "yourpartyyourway.com"] [uri "/.env"] [unique_id "amsAN010g1cPUQyHDS7ycAAAABg"]
[Thu Jul 30 08:41:43.548282 2026] [security2:error] [pid 2426661:tid 2426661] [client 94.154.43.186:19658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "yourpartyyourway.com"] [uri "/403.shtml"] [unique_id "amsAN010g1cPUQyHDS7ycAAAABg"]
[Thu Jul 30 08:41:43.816227 2026] [autoindex:error] [pid 2436717:tid 2436717] (13)Permission denied: [client 216.73.216.199:38120] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/berehapbe/
[Thu Jul 30 08:41:43.935485 2026] [security2:error] [pid 2426807:tid 2426807] [client 94.154.43.188:44378] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.yourpartyyourway.ditchfest.com"] [uri "/.env"] [unique_id "amsANyHAPrN-NLid3VAHTwAAADo"]
[Thu Jul 30 08:41:43.935737 2026] [security2:error] [pid 2426807:tid 2426807] [client 94.154.43.188:44378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.yourpartyyourway.ditchfest.com"] [uri "/.env"] [unique_id "amsANyHAPrN-NLid3VAHTwAAADo"]
[Thu Jul 30 08:41:43.936152 2026] [security2:error] [pid 2426807:tid 2426807] [client 94.154.43.188:44378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.yourpartyyourway.ditchfest.com"] [uri "/.env"] [unique_id "amsANyHAPrN-NLid3VAHTwAAADo"]
[Thu Jul 30 08:41:44.083019 2026] [security2:error] [pid 2436831:tid 2436831] [client 114.119.158.38:36733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585609200/cat_ids~17/request_format~html"] [unique_id "amsAOKHa5ao5OtQY0-IHvwAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/request_format~html/cat_ids~17
[Thu Jul 30 08:41:44.686959 2026] [security2:error] [pid 2426661:tid 2426661] [client 43.165.174.53:56244] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/ec7152/"] [unique_id "amsAOE10g1cPUQyHDS7ycgAAABg"]
[Thu Jul 30 08:41:44.717224 2026] [security2:error] [pid 2436717:tid 2436717] [client 216.73.216.199:38120] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/virtual-host/tuned.conf"] [unique_id "amsAOHh4t2mOIrscztZV6QAAAAk"]
[Thu Jul 30 08:41:44.717484 2026] [security2:error] [pid 2436717:tid 2436717] [client 216.73.216.199:38120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/virtual-host/tuned.conf"] [unique_id "amsAOHh4t2mOIrscztZV6QAAAAk"]
[Thu Jul 30 08:41:44.717694 2026] [security2:error] [pid 2436717:tid 2436717] [client 216.73.216.199:38120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/virtual-host/tuned.conf"] [unique_id "amsAOHh4t2mOIrscztZV6QAAAAk"]
[Thu Jul 30 08:41:45.648117 2026] [security2:error] [pid 2423799:tid 2423799] [client 114.119.158.38:36737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585609200/cat_ids~17/request_format~html"] [unique_id "amsAOcsDPUni1EbX-qVjAgAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/request_format~html/cat_ids~17
[Thu Jul 30 08:41:46.628491 2026] [ssl:error] [pid 2426807:tid 2426807] (EAI 2)Name or service not known: [client 144.76.19.72:42820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:46.628528 2026] [ssl:error] [pid 2426807:tid 2426807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:46.673937 2026] [authz_core:error] [pid 2434519:tid 2434519] [client 169.58.39.192:62936] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 08:41:46.681021 2026] [ssl:error] [pid 2436775:tid 2436775] (EAI 2)Name or service not known: [client 144.76.19.72:42830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:46.681043 2026] [ssl:error] [pid 2436775:tid 2436775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:47.412409 2026] [access_compat:error] [pid 2433276:tid 2433276] [client 106.215.157.145:1223] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:41:48.199384 2026] [core:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:37591] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/broadbentandsmith.com.db
[Thu Jul 30 08:41:48.500284 2026] [ssl:error] [pid 2436717:tid 2436717] (70014)End of file found: [client 216.73.216.199:38120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:49.403253 2026] [ssl:error] [pid 2420262:tid 2420262] (70014)End of file found: [client 216.73.216.199:37591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:49.707331 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 169.58.39.192:64068] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 08:41:49.739340 2026] [ssl:error] [pid 2433276:tid 2433276] (EAI 2)Name or service not known: [client 144.76.19.72:43094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:49.739375 2026] [ssl:error] [pid 2433276:tid 2433276] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:49.792953 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:43102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:49.792976 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:50.613106 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.65:54704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:50.613725 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.65:54704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:51.199205 2026] [security2:error] [pid 2428311:tid 2428311] [client 100.28.49.152:58027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.vain.band"] [uri "/index.html"] [unique_id "amsAPxaJ6AWJ3ghWLIo3PwAAAEM"]
[Thu Jul 30 08:41:51.243028 2026] [authz_core:error] [pid 2434482:tid 2434482] [client 57.141.0.4:52600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:51.243658 2026] [authz_core:error] [pid 2434482:tid 2434482] [client 57.141.0.4:52600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:51.509923 2026] [authz_core:error] [pid 2433276:tid 2433276] [client 57.141.0.2:40922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:51.510548 2026] [authz_core:error] [pid 2433276:tid 2433276] [client 57.141.0.2:40922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:51.512360 2026] [access_compat:error] [pid 2423799:tid 2423799] [client 106.215.157.145:2628] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:41:51.691742 2026] [security2:error] [pid 2434519:tid 2434519] [client 43.165.7.74:37692] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "amsAP5Eyhl3EGKVEd2wM_QAAABs"]
[Thu Jul 30 08:41:52.319720 2026] [lsapi:warn] [pid 2434519:tid 2434519] [client 43.165.7.74:37692] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 08:41:52.408883 2026] [ssl:error] [pid 2436716:tid 2436716] (70014)End of file found: [client 216.73.216.199:55863] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:52.847481 2026] [ssl:error] [pid 2434519:tid 2434519] (EAI 2)Name or service not known: [client 144.76.19.72:43116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:52.847512 2026] [ssl:error] [pid 2434519:tid 2434519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:52.901668 2026] [ssl:error] [pid 2436836:tid 2436836] (EAI 2)Name or service not known: [client 144.76.19.72:43128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:52.901712 2026] [ssl:error] [pid 2436836:tid 2436836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:54.220150 2026] [ssl:error] [pid 2428221:tid 2428221] (70014)End of file found: [client 216.73.216.199:62123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:54.347546 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.16:54276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:54.348200 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.16:54276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:54.716876 2026] [core:error] [pid 2433276:tid 2433276] (13)Permission denied: [client 216.73.216.199:31382] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/x86_emulator/shrink
[Thu Jul 30 08:41:54.822300 2026] [security2:error] [pid 2433276:tid 2433276] [client 216.73.216.199:31382] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/chkservd.log"] [unique_id "amsAQgSI6Iy7I-PaeJrGuwAAAAA"]
[Thu Jul 30 08:41:54.822518 2026] [security2:error] [pid 2433276:tid 2433276] [client 216.73.216.199:31382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/chkservd.log"] [unique_id "amsAQgSI6Iy7I-PaeJrGuwAAAAA"]
[Thu Jul 30 08:41:54.822746 2026] [security2:error] [pid 2433276:tid 2433276] [client 216.73.216.199:31382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/chkservd.log"] [unique_id "amsAQgSI6Iy7I-PaeJrGuwAAAAA"]
[Thu Jul 30 08:41:54.910042 2026] [authz_core:error] [pid 2436777:tid 2436777] [client 57.141.0.50:40260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:54.910679 2026] [authz_core:error] [pid 2436777:tid 2436777] [client 57.141.0.50:40260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:55.802103 2026] [core:error] [pid 2434597:tid 2434597] [client 66.249.64.171:53548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:55.802139 2026] [core:error] [pid 2434597:tid 2434597] [client 66.249.64.171:53548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:41:55.958250 2026] [ssl:error] [pid 2436835:tid 2436835] (EAI 2)Name or service not known: [client 144.76.19.72:43138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:55.958277 2026] [ssl:error] [pid 2436835:tid 2436835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:56.014364 2026] [ssl:error] [pid 2428311:tid 2428311] (EAI 2)Name or service not known: [client 144.76.19.72:43154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:56.014392 2026] [ssl:error] [pid 2428311:tid 2428311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:56.522416 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:43392] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:41:56.522472 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:43392] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:41:56.524626 2026] [lsapi:warn] [pid 2434439:tid 2434439] [client 62.7.102.3:62901] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:41:56.524668 2026] [lsapi:warn] [pid 2434439:tid 2434439] [client 62.7.102.3:62901] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:41:56.928266 2026] [ssl:error] [pid 2433276:tid 2433276] (70014)End of file found: [client 216.73.216.199:31382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:41:58.220913 2026] [security2:error] [pid 2434599:tid 2434599] [client 43.135.115.233:43598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchell.org"] [uri "/"] [unique_id "amsARi_5ox1Evschh4w58AAAAEg"]
[Thu Jul 30 08:41:58.230735 2026] [authz_core:error] [pid 2426802:tid 2426802] [client 57.141.0.31:34890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:58.231374 2026] [authz_core:error] [pid 2426802:tid 2426802] [client 57.141.0.31:34890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:59.072590 2026] [ssl:error] [pid 2434439:tid 2434439] (EAI 2)Name or service not known: [client 144.76.19.72:43156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:59.072631 2026] [ssl:error] [pid 2434439:tid 2434439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:59.134507 2026] [ssl:error] [pid 2423799:tid 2423799] (EAI 2)Name or service not known: [client 144.76.19.72:43172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:41:59.134532 2026] [ssl:error] [pid 2423799:tid 2423799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:41:59.856103 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 57.141.0.70:41968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:41:59.856738 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 57.141.0.70:41968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:41:59.892902 2026] [security2:error] [pid 2434683:tid 2434683] [client 43.157.46.118:49396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsAR5gWXkPaqiXELxxUQwAAAFY"]
[Thu Jul 30 08:42:00.143930 2026] [authz_core:error] [pid 2433879:tid 2433879] [client 57.141.0.50:40272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:00.144554 2026] [authz_core:error] [pid 2433879:tid 2433879] [client 57.141.0.50:40272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:01.611805 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.12:44776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:01.612424 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.12:44776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:01.742233 2026] [ssl:error] [pid 2436835:tid 2436835] (70014)End of file found: [client 216.73.216.199:32851] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:01.967602 2026] [access_compat:error] [pid 2434553:tid 2434553] [client 106.215.157.145:9560] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:42:02.155391 2026] [security2:error] [pid 2434482:tid 2434482] [client 43.157.46.118:56148] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsASlIExVVi7u-cMSWMMQAAAAg"], referer: http://maisongerlyn.be
[Thu Jul 30 08:42:02.190791 2026] [ssl:error] [pid 2426661:tid 2426661] (EAI 2)Name or service not known: [client 144.76.19.72:20368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:02.190818 2026] [ssl:error] [pid 2426661:tid 2426661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:02.245712 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:20384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:02.245753 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:02.567820 2026] [security2:error] [pid 2433879:tid 2433879] [client 150.5.132.86:34073] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsASqbDOFb46zAeS-udNAAAABk"]
[Thu Jul 30 08:42:02.567893 2026] [security2:error] [pid 2433879:tid 2433879] [client 150.5.132.86:34073] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsASqbDOFb46zAeS-udNAAAABk"]
[Thu Jul 30 08:42:02.568246 2026] [security2:error] [pid 2433879:tid 2433879] [client 150.5.132.86:34073] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsASqbDOFb46zAeS-udNAAAABk"]
[Thu Jul 30 08:42:02.973145 2026] [security2:error] [pid 2433276:tid 2433276] [client 101.32.49.171:36870] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.evtech.ltd"] [uri "/"] [unique_id "amsASgSI6Iy7I-PaeJrGwwAAAAA"]
[Thu Jul 30 08:42:04.771142 2026] [authz_core:error] [pid 2433276:tid 2433276] [client 57.141.0.4:55592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:04.771762 2026] [authz_core:error] [pid 2433276:tid 2433276] [client 57.141.0.4:55592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:05.264935 2026] [security2:error] [pid 2428221:tid 2428221] [client 101.47.26.230:60071] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsATSux7rlqiNnQVD3JNgAAACQ"]
[Thu Jul 30 08:42:05.264981 2026] [security2:error] [pid 2428221:tid 2428221] [client 101.47.26.230:60071] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsATSux7rlqiNnQVD3JNgAAACQ"]
[Thu Jul 30 08:42:05.265213 2026] [security2:error] [pid 2428221:tid 2428221] [client 101.47.26.230:60071] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsATSux7rlqiNnQVD3JNgAAACQ"]
[Thu Jul 30 08:42:05.299923 2026] [ssl:error] [pid 2434683:tid 2434683] (EAI 2)Name or service not known: [client 144.76.19.72:20392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:05.299957 2026] [ssl:error] [pid 2434683:tid 2434683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:05.358111 2026] [ssl:error] [pid 2433276:tid 2433276] (EAI 2)Name or service not known: [client 144.76.19.72:20400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:05.358139 2026] [ssl:error] [pid 2433276:tid 2433276] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:05.961312 2026] [core:error] [pid 2436775:tid 2436775] (13)Permission denied: [client 216.73.216.199:8540] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/swapfile
[Thu Jul 30 08:42:07.436533 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.35:36902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:07.437172 2026] [authz_core:error] [pid 2411415:tid 2411415] [client 57.141.0.35:36902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:07.944439 2026] [security2:error] [pid 2436836:tid 2436836] [client 20.171.55.167:10254] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsAT-42i8FBp6ndyY6rIgAAACk"]
[Thu Jul 30 08:42:07.944691 2026] [security2:error] [pid 2436836:tid 2436836] [client 20.171.55.167:10254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsAT-42i8FBp6ndyY6rIgAAACk"]
[Thu Jul 30 08:42:07.968865 2026] [security2:error] [pid 2436836:tid 2436836] [client 20.171.55.167:10254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.co.uk"] [uri "/403.shtml"] [unique_id "amsAT-42i8FBp6ndyY6rIgAAACk"]
[Thu Jul 30 08:42:08.263241 2026] [access_compat:error] [pid 2411415:tid 2411415] [client 106.215.157.145:32651] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:42:08.368976 2026] [ssl:error] [pid 2436775:tid 2436775] (70014)End of file found: [client 216.73.216.199:8540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:08.414632 2026] [ssl:error] [pid 2434553:tid 2434553] (EAI 2)Name or service not known: [client 144.76.19.72:20416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:08.414665 2026] [ssl:error] [pid 2434553:tid 2434553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:08.468458 2026] [ssl:error] [pid 2436836:tid 2436836] (EAI 2)Name or service not known: [client 144.76.19.72:20430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:08.468484 2026] [ssl:error] [pid 2436836:tid 2436836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:09.071822 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:54266] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:09.071861 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:54266] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:09.073738 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:09.073795 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:09.416432 2026] [lsapi:warn] [pid 2411415:tid 2411415] [client 45.158.164.139:54278] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:09.416484 2026] [lsapi:warn] [pid 2411415:tid 2411415] [client 45.158.164.139:54278] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:09.418295 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:09.418336 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:09.575431 2026] [security2:error] [pid 2428221:tid 2428221] [client 101.47.26.230:50133] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAUSux7rlqiNnQVD3JQgAAACQ"]
[Thu Jul 30 08:42:09.575481 2026] [security2:error] [pid 2428221:tid 2428221] [client 101.47.26.230:50133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAUSux7rlqiNnQVD3JQgAAACQ"]
[Thu Jul 30 08:42:09.575718 2026] [security2:error] [pid 2428221:tid 2428221] [client 101.47.26.230:50133] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAUSux7rlqiNnQVD3JQgAAACQ"]
[Thu Jul 30 08:42:09.675494 2026] [lsapi:warn] [pid 2421367:tid 2421367] [client 45.158.164.139:54280] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:09.675536 2026] [lsapi:warn] [pid 2421367:tid 2421367] [client 45.158.164.139:54280] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:09.680601 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:09.680624 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:09.928414 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:09.928451 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:10.426019 2026] [authz_core:error] [pid 2436836:tid 2436836] [client 57.141.0.59:43392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:10.426652 2026] [authz_core:error] [pid 2436836:tid 2436836] [client 57.141.0.59:43392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:10.450504 2026] [lsapi:warn] [pid 2420262:tid 2420262] [client 45.158.164.139:54318] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:10.450549 2026] [lsapi:warn] [pid 2420262:tid 2420262] [client 45.158.164.139:54318] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:10.698343 2026] [lsapi:warn] [pid 2426661:tid 2426661] [client 45.158.164.139:35064] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:10.698385 2026] [lsapi:warn] [pid 2426661:tid 2426661] [client 45.158.164.139:35064] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:10.700125 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:10.700157 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:10.950948 2026] [lsapi:warn] [pid 2426661:tid 2426661] [client 45.158.164.139:35096] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:10.950979 2026] [lsapi:warn] [pid 2426661:tid 2426661] [client 45.158.164.139:35096] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:10.953033 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:10.953057 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:11.227207 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:35106] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:11.227232 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:35106] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:11.229271 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:11.229295 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:11.521593 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:43604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:11.521627 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:11.533571 2026] [lsapi:warn] [pid 2426661:tid 2426661] [client 45.158.164.139:35110] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:11.533601 2026] [lsapi:warn] [pid 2426661:tid 2426661] [client 45.158.164.139:35110] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:11.535469 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:11.535494 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:11.579276 2026] [ssl:error] [pid 2428408:tid 2428408] (EAI 2)Name or service not known: [client 144.76.19.72:43614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:11.579312 2026] [ssl:error] [pid 2428408:tid 2428408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:11.687863 2026] [core:error] [pid 2433276:tid 2433276] (13)Permission denied: [client 216.73.216.199:32455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/vm_area_struct/reclaim_account
[Thu Jul 30 08:42:11.798956 2026] [lsapi:warn] [pid 2420262:tid 2420262] [client 45.158.164.139:35118] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:11.798989 2026] [lsapi:warn] [pid 2420262:tid 2420262] [client 45.158.164.139:35118] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:11.801328 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:11.801354 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:11.989778 2026] [ssl:error] [pid 2433276:tid 2433276] (70014)End of file found: [client 216.73.216.199:32455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:12.043148 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:12.043178 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:12.294439 2026] [lsapi:warn] [pid 2433372:tid 2433372] [client 45.158.164.139:35136] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:12.294489 2026] [lsapi:warn] [pid 2433372:tid 2433372] [client 45.158.164.139:35136] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:12.373044 2026] [access_compat:error] [pid 2411420:tid 2411420] [client 106.215.157.145:22228] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 08:42:12.569202 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:35148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:12.569243 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:35148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:12.571275 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:12.571301 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:12.842421 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:12.842448 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:12.877895 2026] [access_compat:error] [pid 2434599:tid 2434599] [client 45.158.164.139:35166] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:42:13.098920 2026] [lsapi:warn] [pid 2436835:tid 2436835] [client 45.158.164.139:35170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:13.098964 2026] [lsapi:warn] [pid 2436835:tid 2436835] [client 45.158.164.139:35170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:13.105367 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:13.105392 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:13.387604 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:35178] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:13.387682 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:35178] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:13.391004 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:13.391026 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:13.674480 2026] [core:error] [pid 2426807:tid 2426807] (13)Permission denied: [client 216.73.216.199:55281] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-16/usersize
[Thu Jul 30 08:42:13.680253 2026] [lsapi:warn] [pid 2434482:tid 2434482] [client 45.158.164.139:35202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:13.680290 2026] [lsapi:warn] [pid 2434482:tid 2434482] [client 45.158.164.139:35202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:13.681631 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:13.681653 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:13.795017 2026] [core:error] [pid 2426807:tid 2426807] (13)Permission denied: [client 216.73.216.199:55281] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty39/subsystem/ttyS0/line
[Thu Jul 30 08:42:13.942229 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:13.942255 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:14.261535 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:14.261579 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:14.400478 2026] [authz_core:error] [pid 2434519:tid 2434519] [client 57.141.0.21:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:14.401101 2026] [authz_core:error] [pid 2434519:tid 2434519] [client 57.141.0.21:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:14.501238 2026] [authz_core:error] [pid 2436831:tid 2436831] [client 57.141.0.7:39130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:14.501865 2026] [authz_core:error] [pid 2436831:tid 2436831] [client 57.141.0.7:39130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:14.553698 2026] [lsapi:warn] [pid 2420262:tid 2420262] [client 45.158.164.139:35250] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:14.553722 2026] [lsapi:warn] [pid 2420262:tid 2420262] [client 45.158.164.139:35250] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:14.634492 2026] [ssl:error] [pid 2434519:tid 2434519] (EAI 2)Name or service not known: [client 144.76.19.72:43624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:14.634518 2026] [ssl:error] [pid 2434519:tid 2434519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:14.685802 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:43632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:14.685829 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:14.801763 2026] [lsapi:warn] [pid 2439037:tid 2439037] [client 45.158.164.139:35262] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:14.801799 2026] [lsapi:warn] [pid 2439037:tid 2439037] [client 45.158.164.139:35262] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:15.079601 2026] [lsapi:warn] [pid 2411415:tid 2411415] [client 45.158.164.139:35270] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:15.079628 2026] [lsapi:warn] [pid 2411415:tid 2411415] [client 45.158.164.139:35270] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:15.082092 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:15.082116 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:15.327254 2026] [lsapi:warn] [pid 2436835:tid 2436835] [client 45.158.164.139:35286] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:15.327283 2026] [lsapi:warn] [pid 2436835:tid 2436835] [client 45.158.164.139:35286] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:15.607731 2026] [lsapi:warn] [pid 2434519:tid 2434519] [client 45.158.164.139:35288] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:15.607772 2026] [lsapi:warn] [pid 2434519:tid 2434519] [client 45.158.164.139:35288] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:15.852442 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:35290] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:15.852473 2026] [lsapi:warn] [pid 2423799:tid 2423799] [client 45.158.164.139:35290] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:15.854477 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:15.854499 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:16.101912 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:16.101942 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:16.344361 2026] [lsapi:warn] [pid 2436835:tid 2436835] [client 45.158.164.139:35314] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:16.344389 2026] [lsapi:warn] [pid 2436835:tid 2436835] [client 45.158.164.139:35314] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:16.346346 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:16.346367 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:16.413167 2026] [core:error] [pid 2426807:tid 2426807] (13)Permission denied: [client 216.73.216.199:55281] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 08:42:16.592354 2026] [lsapi:warn] [pid 2434520:tid 2434520] [client 45.158.164.139:35330] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:16.592396 2026] [lsapi:warn] [pid 2434520:tid 2434520] [client 45.158.164.139:35330] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:16.594315 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:16.594338 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:16.854360 2026] [lsapi:warn] [pid 2429943:tid 2429943] [client 45.158.164.139:35332] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:16.854402 2026] [lsapi:warn] [pid 2429943:tid 2429943] [client 45.158.164.139:35332] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:17.105369 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:17.105398 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:17.751958 2026] [ssl:error] [pid 2411415:tid 2411415] (EAI 2)Name or service not known: [client 144.76.19.72:43634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:17.751991 2026] [ssl:error] [pid 2411415:tid 2411415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:17.806123 2026] [ssl:error] [pid 2436836:tid 2436836] (EAI 2)Name or service not known: [client 144.76.19.72:43650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:17.806148 2026] [ssl:error] [pid 2436836:tid 2436836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:17.834356 2026] [lsapi:warn] [pid 2433372:tid 2433372] [client 45.158.164.139:35362] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:17.834382 2026] [lsapi:warn] [pid 2433372:tid 2433372] [client 45.158.164.139:35362] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:17.836538 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:17.836569 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:18.332794 2026] [lsapi:warn] [pid 2434601:tid 2434601] [client 45.158.164.139:35378] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:18.332835 2026] [lsapi:warn] [pid 2434601:tid 2434601] [client 45.158.164.139:35378] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:18.334677 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:18.334703 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:18.701107 2026] [lsapi:warn] [pid 2434519:tid 2434519] [client 45.158.164.139:35400] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:18.701149 2026] [lsapi:warn] [pid 2434519:tid 2434519] [client 45.158.164.139:35400] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:18.702212 2026] [ssl:error] [pid 2439197:tid 2439197] (70014)End of file found: [client 216.73.216.199:9756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:18.703495 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:18.703519 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:19.229113 2026] [lsapi:warn] [pid 2436716:tid 2436716] [client 45.158.164.139:35412] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:19.229155 2026] [lsapi:warn] [pid 2436716:tid 2436716] [client 45.158.164.139:35412] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:19.486828 2026] [lsapi:warn] [pid 2434519:tid 2434519] [client 45.158.164.139:35416] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:19.486857 2026] [lsapi:warn] [pid 2434519:tid 2434519] [client 45.158.164.139:35416] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:19.489263 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:19.489286 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:19.761773 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:19.761799 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:20.021258 2026] [lsapi:warn] [pid 2436828:tid 2436828] [client 45.158.164.139:35446] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:20.021299 2026] [lsapi:warn] [pid 2436828:tid 2436828] [client 45.158.164.139:35446] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:20.296354 2026] [lsapi:warn] [pid 2436775:tid 2436775] [client 45.158.164.139:35472] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:20.296398 2026] [lsapi:warn] [pid 2436775:tid 2436775] [client 45.158.164.139:35472] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:20.305498 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:20.305524 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:20.555876 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:20.555904 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:20.824821 2026] [lsapi:warn] [pid 2434552:tid 2434552] [client 45.158.164.139:57054] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:20.824858 2026] [lsapi:warn] [pid 2434552:tid 2434552] [client 45.158.164.139:57054] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:20.827321 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:20.827359 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:20.859045 2026] [authz_core:error] [pid 2436775:tid 2436775] [client 57.141.0.4:21992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:20.859732 2026] [authz_core:error] [pid 2436775:tid 2436775] [client 57.141.0.4:21992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:20.860559 2026] [ssl:error] [pid 2434519:tid 2434519] (EAI 2)Name or service not known: [client 144.76.19.72:41402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:20.860587 2026] [ssl:error] [pid 2434519:tid 2434519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:20.946385 2026] [ssl:error] [pid 2436716:tid 2436716] (EAI 2)Name or service not known: [client 144.76.19.72:41406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:20.946418 2026] [ssl:error] [pid 2436716:tid 2436716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:21.087333 2026] [lsapi:warn] [pid 2434520:tid 2434520] [client 45.158.164.139:57066] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:21.087360 2026] [lsapi:warn] [pid 2434520:tid 2434520] [client 45.158.164.139:57066] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:21.092047 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:21.092094 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:21.283653 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:21.283681 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:21.567576 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57086] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:21.567611 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57086] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:21.833766 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:21.833790 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:21.840212 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:21.840235 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:22.147273 2026] [lsapi:warn] [pid 2434599:tid 2434599] [client 45.158.164.139:57124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:22.147310 2026] [lsapi:warn] [pid 2434599:tid 2434599] [client 45.158.164.139:57124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:22.150278 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:22.150300 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:22.436581 2026] [lsapi:warn] [pid 2436774:tid 2436774] [client 45.158.164.139:57140] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:22.436624 2026] [lsapi:warn] [pid 2436774:tid 2436774] [client 45.158.164.139:57140] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:22.441544 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:22.441590 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:22.682041 2026] [access_compat:error] [pid 2436774:tid 2436774] [client 108.137.138.203:57384] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2008/12/madagascar-escape-2-africa-2.jpg
[Thu Jul 30 08:42:22.682156 2026] [access_compat:error] [pid 2436774:tid 2436774] [client 108.137.138.203:57384] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 08:42:22.707770 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:22.707796 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:22.990149 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:22.990176 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:23.250337 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:23.250365 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:23.523354 2026] [lsapi:warn] [pid 2433276:tid 2433276] [client 45.158.164.139:57200] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:23.523391 2026] [lsapi:warn] [pid 2433276:tid 2433276] [client 45.158.164.139:57200] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:23.526212 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:23.526236 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:23.817738 2026] [lsapi:warn] [pid 2439306:tid 2439306] [client 45.158.164.139:57210] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:23.817783 2026] [lsapi:warn] [pid 2439306:tid 2439306] [client 45.158.164.139:57210] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:23.819728 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:23.819750 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:23.919095 2026] [core:error] [pid 2436836:tid 2436836] (13)Permission denied: [client 216.73.216.199:27494] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/rapl/uevent
[Thu Jul 30 08:42:24.006358 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:41422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:24.006383 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:24.059473 2026] [ssl:error] [pid 2434553:tid 2434553] (EAI 2)Name or service not known: [client 144.76.19.72:41432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:24.059496 2026] [ssl:error] [pid 2434553:tid 2434553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:24.078588 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:57224] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:24.078613 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:57224] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:24.081204 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:24.081225 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:24.334598 2026] [lsapi:warn] [pid 2426802:tid 2426802] [client 45.158.164.139:57230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:24.334638 2026] [lsapi:warn] [pid 2426802:tid 2426802] [client 45.158.164.139:57230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:24.348549 2026] [authz_core:error] [pid 2436774:tid 2436774] [client 192.36.109.96:41611] AH01630: client denied by server configuration: /home/lukess/public_html/error_log
[Thu Jul 30 08:42:24.589278 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:24.589306 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:24.831317 2026] [lsapi:warn] [pid 2439236:tid 2439236] [client 45.158.164.139:57272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:24.831354 2026] [lsapi:warn] [pid 2439236:tid 2439236] [client 45.158.164.139:57272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:24.833932 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:24.833968 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:25.116791 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:25.116836 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:25.234123 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.37:28366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:25.234745 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.37:28366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:25.391712 2026] [lsapi:warn] [pid 2439306:tid 2439306] [client 45.158.164.139:57296] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:25.391747 2026] [lsapi:warn] [pid 2439306:tid 2439306] [client 45.158.164.139:57296] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:25.640814 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:25.640846 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:25.882337 2026] [lsapi:warn] [pid 2428311:tid 2428311] [client 45.158.164.139:57326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:25.882374 2026] [lsapi:warn] [pid 2428311:tid 2428311] [client 45.158.164.139:57326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:26.245224 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:26.245252 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:26.517230 2026] [lsapi:warn] [pid 2439306:tid 2439306] [client 45.158.164.139:57354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:26.517261 2026] [lsapi:warn] [pid 2439306:tid 2439306] [client 45.158.164.139:57354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:26.519250 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:26.519271 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:26.630793 2026] [ssl:error] [pid 2434604:tid 2434604] (70014)End of file found: [client 216.73.216.199:60088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:27.047434 2026] [lsapi:warn] [pid 2421367:tid 2421367] [client 45.158.164.139:57372] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:27.047464 2026] [lsapi:warn] [pid 2421367:tid 2421367] [client 45.158.164.139:57372] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:27.115837 2026] [ssl:error] [pid 2434599:tid 2434599] (EAI 2)Name or service not known: [client 144.76.19.72:41444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:27.115860 2026] [ssl:error] [pid 2434599:tid 2434599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:27.168664 2026] [ssl:error] [pid 2428221:tid 2428221] (EAI 2)Name or service not known: [client 144.76.19.72:41450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:27.168685 2026] [ssl:error] [pid 2428221:tid 2428221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:27.326243 2026] [lsapi:warn] [pid 2429943:tid 2429943] [client 45.158.164.139:57376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:27.326271 2026] [lsapi:warn] [pid 2429943:tid 2429943] [client 45.158.164.139:57376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:27.328275 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:27.328303 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:27.530510 2026] [ssl:error] [pid 2411415:tid 2411415] (70014)End of file found: [client 216.73.216.199:65464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:27.569918 2026] [lsapi:warn] [pid 2421367:tid 2421367] [client 45.158.164.139:57386] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:27.569950 2026] [lsapi:warn] [pid 2421367:tid 2421367] [client 45.158.164.139:57386] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:27.572114 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:27.572138 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:27.827536 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57398] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:27.827570 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57398] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:28.095318 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:28.095346 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:28.136299 2026] [ssl:error] [pid 2436836:tid 2436836] (70014)End of file found: [client 216.73.216.199:27494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:28.332278 2026] [lsapi:warn] [pid 2426807:tid 2426807] [client 45.158.164.139:57422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:28.332321 2026] [lsapi:warn] [pid 2426807:tid 2426807] [client 45.158.164.139:57422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:28.334370 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:28.334394 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:28.415875 2026] [authz_core:error] [pid 2427778:tid 2427778] [client 57.141.0.67:62522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:28.416518 2026] [authz_core:error] [pid 2427778:tid 2427778] [client 57.141.0.67:62522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:28.595707 2026] [lsapi:warn] [pid 2427777:tid 2427777] [client 45.158.164.139:57444] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:28.595745 2026] [lsapi:warn] [pid 2427777:tid 2427777] [client 45.158.164.139:57444] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:28.597712 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:28.597735 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:28.877831 2026] [lsapi:warn] [pid 2439307:tid 2439307] [client 45.158.164.139:57454] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:28.877875 2026] [lsapi:warn] [pid 2439307:tid 2439307] [client 45.158.164.139:57454] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:28.884234 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:28.884259 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:29.089967 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:29.090002 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:29.354054 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57458] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:29.354099 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57458] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:29.355925 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:29.355950 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:29.593650 2026] [lsapi:warn] [pid 2434599:tid 2434599] [client 45.158.164.139:57460] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:29.593680 2026] [lsapi:warn] [pid 2434599:tid 2434599] [client 45.158.164.139:57460] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:29.846489 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:29.846513 2026] [lsapi:warn] [pid 2428221:tid 2428221] [client 45.158.164.139:57466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:29.848677 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:29.848698 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:30.096281 2026] [lsapi:warn] [pid 2434599:tid 2434599] [client 45.158.164.139:57470] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:30.096311 2026] [lsapi:warn] [pid 2434599:tid 2434599] [client 45.158.164.139:57470] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:30.098212 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:30.098234 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:30.221033 2026] [ssl:error] [pid 2434599:tid 2434599] (EAI 2)Name or service not known: [client 144.76.19.72:37994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:30.221054 2026] [ssl:error] [pid 2434599:tid 2434599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:30.278438 2026] [ssl:error] [pid 2434599:tid 2434599] (EAI 2)Name or service not known: [client 144.76.19.72:38000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:30.278465 2026] [ssl:error] [pid 2434599:tid 2434599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:30.361193 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:57486] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:30.361221 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:57486] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:30.368231 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:30.368255 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:30.620215 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:30.620241 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:30.866300 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:48140] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:30.866330 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:48140] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:31.129622 2026] [lsapi:warn] [pid 2439307:tid 2439307] [client 45.158.164.139:48162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:31.129651 2026] [lsapi:warn] [pid 2439307:tid 2439307] [client 45.158.164.139:48162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:31.131647 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:31.131672 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:31.406811 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:48176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:31.406840 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:48176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:31.408780 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:31.408804 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:31.719836 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:31.719861 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:32.016327 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:32.016358 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:32.263314 2026] [lsapi:warn] [pid 2411420:tid 2411420] [client 45.158.164.139:48184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:32.263357 2026] [lsapi:warn] [pid 2411420:tid 2411420] [client 45.158.164.139:48184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:32.531034 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:32.531060 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:32.650458 2026] [security2:error] [pid 2436774:tid 2436774] [client 216.73.216.199:48217] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/systemd-nologin.conf"] [unique_id "amsAaKSMDZheAhPUcwqWbgAAAAs"]
[Thu Jul 30 08:42:32.650684 2026] [security2:error] [pid 2436774:tid 2436774] [client 216.73.216.199:48217] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/systemd-nologin.conf"] [unique_id "amsAaKSMDZheAhPUcwqWbgAAAAs"]
[Thu Jul 30 08:42:32.650883 2026] [security2:error] [pid 2436774:tid 2436774] [client 216.73.216.199:48217] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/systemd-nologin.conf"] [unique_id "amsAaKSMDZheAhPUcwqWbgAAAAs"]
[Thu Jul 30 08:42:32.811529 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:48224] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:32.811556 2026] [lsapi:warn] [pid 2422156:tid 2422156] [client 45.158.164.139:48224] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:33.069193 2026] [lsapi:warn] [pid 2434604:tid 2434604] [client 45.158.164.139:48228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:33.069242 2026] [lsapi:warn] [pid 2434604:tid 2434604] [client 45.158.164.139:48228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:33.070989 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:33.071008 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:33.328055 2026] [lsapi:warn] [pid 2412502:tid 2412502] [client 45.158.164.139:48230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:33.328120 2026] [lsapi:warn] [pid 2412502:tid 2412502] [client 45.158.164.139:48230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:33.331094 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:33.331114 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:33.333420 2026] [ssl:error] [pid 2434604:tid 2434604] (EAI 2)Name or service not known: [client 144.76.19.72:38016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:33.333438 2026] [ssl:error] [pid 2434604:tid 2434604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:33.384845 2026] [ssl:error] [pid 2428416:tid 2428416] (EAI 2)Name or service not known: [client 144.76.19.72:38020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:33.384870 2026] [ssl:error] [pid 2428416:tid 2428416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:33.619663 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:48236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:33.619693 2026] [lsapi:warn] [pid 2433323:tid 2433323] [client 45.158.164.139:48236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:33.621656 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:33.621679 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:33.854938 2026] [core:error] [pid 2436774:tid 2436774] (13)Permission denied: [client 216.73.216.199:48217] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS1/iomem_base
[Thu Jul 30 08:42:33.865325 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:33.865361 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:34.139442 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:34.139474 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:34.157321 2026] [ssl:error] [pid 2436774:tid 2436774] (70014)End of file found: [client 216.73.216.199:48217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:34.435269 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:34.435298 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:34.703266 2026] [lsapi:warn] [pid 2439197:tid 2439197] [client 45.158.164.139:48304] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:34.703310 2026] [lsapi:warn] [pid 2439197:tid 2439197] [client 45.158.164.139:48304] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:34.705255 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:34.705278 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:34.943726 2026] [lsapi:warn] [pid 2428416:tid 2428416] [client 45.158.164.139:48320] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:34.943764 2026] [lsapi:warn] [pid 2428416:tid 2428416] [client 45.158.164.139:48320] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:35.248501 2026] [authz_core:error] [pid 2436836:tid 2436836] [client 57.141.0.26:61206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:35.249128 2026] [authz_core:error] [pid 2436836:tid 2436836] [client 57.141.0.26:61206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:35.336612 2026] [lsapi:warn] [pid 2428311:tid 2428311] [client 45.158.164.139:48328] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:35.336644 2026] [lsapi:warn] [pid 2428311:tid 2428311] [client 45.158.164.139:48328] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:35.594491 2026] [lsapi:warn] [pid 2440030:tid 2440030] [client 45.158.164.139:48340] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:35.594527 2026] [lsapi:warn] [pid 2440030:tid 2440030] [client 45.158.164.139:48340] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:35.656731 2026] [ssl:error] [pid 2428221:tid 2428221] (70014)End of file found: [client 216.73.216.199:10142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:35.844930 2026] [lsapi:warn] [pid 2439575:tid 2439575] [client 45.158.164.139:48360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:35.844964 2026] [lsapi:warn] [pid 2439575:tid 2439575] [client 45.158.164.139:48360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:35.846775 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:35.846799 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:36.098136 2026] [lsapi:warn] [pid 2436836:tid 2436836] [client 45.158.164.139:48376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:36.098176 2026] [lsapi:warn] [pid 2436836:tid 2436836] [client 45.158.164.139:48376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:36.104762 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:36.104786 2026] [lsapi:warn] [pid 2427542:tid 2427542] [client 20.63.98.115:59420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:36.366507 2026] [lsapi:warn] [pid 2434557:tid 2434557] [client 45.158.164.139:48390] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:36.366546 2026] [lsapi:warn] [pid 2434557:tid 2434557] [client 45.158.164.139:48390] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:36.442030 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:38026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:36.442051 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:36.496429 2026] [ssl:error] [pid 2439237:tid 2439237] (EAI 2)Name or service not known: [client 144.76.19.72:38034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:36.496460 2026] [ssl:error] [pid 2439237:tid 2439237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:36.835207 2026] [lsapi:warn] [pid 2436836:tid 2436836] [client 20.63.98.115:38983] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:36.835232 2026] [lsapi:warn] [pid 2436836:tid 2436836] [client 20.63.98.115:38983] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:37.102286 2026] [lsapi:warn] [pid 2436836:tid 2436836] [client 20.63.98.115:38983] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:42:37.102318 2026] [lsapi:warn] [pid 2436836:tid 2436836] [client 20.63.98.115:38983] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:42:37.462870 2026] [core:error] [pid 2436835:tid 2436835] (13)Permission denied: [client 216.73.216.199:36627] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/tpm/uevent
[Thu Jul 30 08:42:39.552950 2026] [ssl:error] [pid 2426802:tid 2426802] (EAI 2)Name or service not known: [client 144.76.19.72:24340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:39.552986 2026] [ssl:error] [pid 2426802:tid 2426802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:39.604362 2026] [ssl:error] [pid 2427777:tid 2427777] (EAI 2)Name or service not known: [client 144.76.19.72:24356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:39.604391 2026] [ssl:error] [pid 2427777:tid 2427777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:40.001797 2026] [core:error] [pid 2436835:tid 2436835] (13)Permission denied: [client 216.73.216.199:36627] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_generic/drivers/pci:ata_generic/new_id
[Thu Jul 30 08:42:41.150154 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.7:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:41.150773 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.7:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:41.380350 2026] [ssl:error] [pid 2436835:tid 2436835] (70014)End of file found: [client 216.73.216.199:36627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:42.175510 2026] [ssl:error] [pid 2434482:tid 2434482] (70014)End of file found: [client 216.73.216.199:34660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:42.661093 2026] [ssl:error] [pid 2439237:tid 2439237] (EAI 2)Name or service not known: [client 144.76.19.72:24360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:42.661121 2026] [ssl:error] [pid 2439237:tid 2439237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:42.719331 2026] [ssl:error] [pid 2439236:tid 2439236] (EAI 2)Name or service not known: [client 144.76.19.72:24370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:42.719368 2026] [ssl:error] [pid 2439236:tid 2439236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:44.092689 2026] [ssl:error] [pid 2440527:tid 2440527] (70014)End of file found: [client 216.73.216.199:13073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:45.774752 2026] [ssl:error] [pid 2428221:tid 2428221] (EAI 2)Name or service not known: [client 144.76.19.72:24386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:45.774793 2026] [ssl:error] [pid 2428221:tid 2428221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:45.808143 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 57.141.0.38:60246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:45.808754 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 57.141.0.38:60246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:45.830770 2026] [ssl:error] [pid 2439037:tid 2439037] (EAI 2)Name or service not known: [client 144.76.19.72:24396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:45.830795 2026] [ssl:error] [pid 2439037:tid 2439037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:46.695413 2026] [ssl:error] [pid 2428416:tid 2428416] (70014)End of file found: [client 216.73.216.199:5208] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:46.747842 2026] [authz_core:error] [pid 2434556:tid 2434556] [client 57.141.0.48:47744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:46.748462 2026] [authz_core:error] [pid 2434556:tid 2434556] [client 57.141.0.48:47744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:47.868705 2026] [core:error] [pid 2434556:tid 2434556] [client 66.249.66.40:39374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:42:47.868736 2026] [core:error] [pid 2434556:tid 2434556] [client 66.249.66.40:39374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:42:47.873309 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.66.41:51330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:42:47.873334 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.66.41:51330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:42:48.904803 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:24400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:48.904841 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:48.961101 2026] [ssl:error] [pid 2434605:tid 2434605] (EAI 2)Name or service not known: [client 144.76.19.72:24410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:48.961125 2026] [ssl:error] [pid 2434605:tid 2434605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:50.664502 2026] [core:error] [pid 2427777:tid 2427777] [client 66.249.66.8:34822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:42:50.664529 2026] [core:error] [pid 2427777:tid 2427777] [client 66.249.66.8:34822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:42:51.586417 2026] [authz_core:error] [pid 2440848:tid 2440848] [client 57.141.0.7:60938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:51.587046 2026] [authz_core:error] [pid 2440848:tid 2440848] [client 57.141.0.7:60938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:51.855686 2026] [ssl:error] [pid 2436774:tid 2436774] (70014)End of file found: [client 216.73.216.199:64941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:52.015835 2026] [ssl:error] [pid 2428221:tid 2428221] (EAI 2)Name or service not known: [client 144.76.19.72:20456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:52.015865 2026] [ssl:error] [pid 2428221:tid 2428221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:52.069960 2026] [ssl:error] [pid 2434605:tid 2434605] (EAI 2)Name or service not known: [client 144.76.19.72:20466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:52.069990 2026] [ssl:error] [pid 2434605:tid 2434605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:52.108639 2026] [cgi:error] [pid 2434552:tid 2434552] [client 20.63.10.215:22765] AH02811: stderr from /home/kingston/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 08:42:53.008755 2026] [authz_core:error] [pid 2411420:tid 2411420] [client 104.219.215.141:51154] AH01630: client denied by server configuration: /home/clss/public_html/error_log, referer: http://stopfordsackville.com/?yt1
[Thu Jul 30 08:42:53.063581 2026] [ssl:error] [pid 2433372:tid 2433372] (70014)End of file found: [client 216.73.216.199:31599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:54.564887 2026] [ssl:error] [pid 2433879:tid 2433879] (70014)End of file found: [client 216.73.216.199:5070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:54.853756 2026] [authz_core:error] [pid 2434521:tid 2434521] [client 66.249.66.33:63220] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:42:54.856402 2026] [authz_core:error] [pid 2434521:tid 2434521] [client 66.249.66.33:63220] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:42:55.127598 2026] [ssl:error] [pid 2423799:tid 2423799] (EAI 2)Name or service not known: [client 144.76.19.72:20470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:55.127626 2026] [ssl:error] [pid 2423799:tid 2423799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:55.180024 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:20474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:55.180061 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:55.506275 2026] [authz_core:error] [pid 2426661:tid 2426661] [client 57.141.0.66:30480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:55.506902 2026] [authz_core:error] [pid 2426661:tid 2426661] [client 57.141.0.66:30480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:55.800571 2026] [authz_core:error] [pid 2434521:tid 2434521] [client 66.249.66.33:63220] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:42:55.803216 2026] [authz_core:error] [pid 2434521:tid 2434521] [client 66.249.66.33:63220] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:42:58.234476 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:20490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:58.234504 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:58.288699 2026] [ssl:error] [pid 2440030:tid 2440030] (EAI 2)Name or service not known: [client 144.76.19.72:20496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:42:58.288743 2026] [ssl:error] [pid 2440030:tid 2440030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:42:58.786084 2026] [ssl:error] [pid 2434439:tid 2434439] (70014)End of file found: [client 216.73.216.199:37434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:42:59.259336 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.38:43218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:59.259956 2026] [authz_core:error] [pid 2428221:tid 2428221] [client 57.141.0.38:43218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:59.269050 2026] [core:error] [pid 2411149:tid 2411149] (13)Permission denied: [client 216.73.216.199:16130] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/subsystem/wakeup2/device/eject
[Thu Jul 30 08:42:59.289758 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.24:38416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:42:59.290377 2026] [authz_core:error] [pid 2422156:tid 2422156] [client 57.141.0.24:38416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:42:59.383268 2026] [core:error] [pid 2411149:tid 2411149] (13)Permission denied: [client 216.73.216.199:16130] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/holders/iptable_nat/uevent
[Thu Jul 30 08:42:59.683649 2026] [ssl:error] [pid 2411149:tid 2411149] (70014)End of file found: [client 216.73.216.199:16130] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:01.343492 2026] [ssl:error] [pid 2436835:tid 2436835] (EAI 2)Name or service not known: [client 144.76.19.72:51096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:01.343519 2026] [ssl:error] [pid 2436835:tid 2436835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:01.394642 2026] [ssl:error] [pid 2441126:tid 2441126] (EAI 2)Name or service not known: [client 144.76.19.72:51102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:01.394677 2026] [ssl:error] [pid 2441126:tid 2441126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:02.772936 2026] [ssl:error] [pid 2436836:tid 2436836] [client 3.233.59.216:54813] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname liberator-no-email.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 08:43:03.377760 2026] [core:error] [pid 2433879:tid 2433879] [client 57.141.0.48:65516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:03.377791 2026] [core:error] [pid 2433879:tid 2433879] [client 57.141.0.48:65516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:03.636499 2026] [core:error] [pid 2436835:tid 2436835] [client 66.249.66.66:48996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:03.636526 2026] [core:error] [pid 2436835:tid 2436835] [client 66.249.66.66:48996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:03.708078 2026] [ssl:error] [pid 2434605:tid 2434605] (70014)End of file found: [client 216.73.216.199:64471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:03.720583 2026] [authz_core:error] [pid 2440527:tid 2440527] [client 57.141.0.45:42334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:03.721197 2026] [authz_core:error] [pid 2440527:tid 2440527] [client 57.141.0.45:42334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:04.491516 2026] [ssl:error] [pid 2440527:tid 2440527] (EAI 2)Name or service not known: [client 144.76.19.72:51110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:04.491553 2026] [ssl:error] [pid 2440527:tid 2440527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:04.547743 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:51124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:04.547766 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:04.831893 2026] [autoindex:error] [pid 2433879:tid 2433879] (13)Permission denied: [client 216.73.216.199:4500] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/ditchfes/
[Thu Jul 30 08:43:04.897435 2026] [authz_core:error] [pid 2434552:tid 2434552] [client 216.73.216.82:22149] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 08:43:05.430944 2026] [ssl:error] [pid 2433879:tid 2433879] (70014)End of file found: [client 216.73.216.199:4500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:05.738944 2026] [autoindex:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:10531] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/egancons/
[Thu Jul 30 08:43:06.038905 2026] [core:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:10531] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/net/ip_tables_matches
[Thu Jul 30 08:43:06.640442 2026] [core:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:10531] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/boot/System.map-4.18.0-553.123.2.lve.el8.x86_64
[Thu Jul 30 08:43:06.695411 2026] [security2:error] [pid 2423799:tid 2423799] [client 101.47.20.247:35333] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAissDPUni1EbX-qVjOwAAADg"]
[Thu Jul 30 08:43:06.695462 2026] [security2:error] [pid 2423799:tid 2423799] [client 101.47.20.247:35333] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAissDPUni1EbX-qVjOwAAADg"]
[Thu Jul 30 08:43:06.695705 2026] [security2:error] [pid 2423799:tid 2423799] [client 101.47.20.247:35333] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAissDPUni1EbX-qVjOwAAADg"]
[Thu Jul 30 08:43:07.245242 2026] [autoindex:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:10531] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/freakorg/
[Thu Jul 30 08:43:07.400553 2026] [security2:error] [pid 2423799:tid 2423799] [client 114.119.132.171:62901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585440000/request_format~html"] [unique_id "amsAi8sDPUni1EbX-qVjPAAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585440000/request_format~html/cat_ids~15
[Thu Jul 30 08:43:07.604521 2026] [ssl:error] [pid 2440030:tid 2440030] (EAI 2)Name or service not known: [client 144.76.19.72:51126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:07.604546 2026] [ssl:error] [pid 2440030:tid 2440030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:07.658936 2026] [ssl:error] [pid 2427777:tid 2427777] (EAI 2)Name or service not known: [client 144.76.19.72:51138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:07.658960 2026] [ssl:error] [pid 2427777:tid 2427777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:08.000772 2026] [authz_core:error] [pid 2436836:tid 2436836] [client 57.141.0.8:39118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:08.001396 2026] [authz_core:error] [pid 2436836:tid 2436836] [client 57.141.0.8:39118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:08.683159 2026] [security2:error] [pid 2434521:tid 2434521] [client 45.86.186.177:30078] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAjMvhc1RH8jo2q2XGRgAAAB0"]
[Thu Jul 30 08:43:08.683205 2026] [security2:error] [pid 2434521:tid 2434521] [client 45.86.186.177:30078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAjMvhc1RH8jo2q2XGRgAAAB0"]
[Thu Jul 30 08:43:08.683443 2026] [security2:error] [pid 2434521:tid 2434521] [client 45.86.186.177:30078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAjMvhc1RH8jo2q2XGRgAAAB0"]
[Thu Jul 30 08:43:09.527310 2026] [security2:error] [pid 2436716:tid 2436716] [client 114.119.132.171:35433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585440000/request_format~html"] [unique_id "amsAjRXCAPuWZ51YB76LEQAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585440000/request_format~html/cat_ids~15
[Thu Jul 30 08:43:10.106026 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.5:39910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:10.106655 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.5:39910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:10.713637 2026] [ssl:error] [pid 2434599:tid 2434599] (EAI 2)Name or service not known: [client 144.76.19.72:53382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:10.713665 2026] [ssl:error] [pid 2434599:tid 2434599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:10.766412 2026] [ssl:error] [pid 2440030:tid 2440030] (EAI 2)Name or service not known: [client 144.76.19.72:53394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:10.766437 2026] [ssl:error] [pid 2440030:tid 2440030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:11.091142 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 57.141.0.58:39100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:11.091759 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 57.141.0.58:39100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:11.303235 2026] [security2:error] [pid 2423799:tid 2423799] [client 78.133.66.40:47176] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAj8sDPUni1EbX-qVjQAAAADg"]
[Thu Jul 30 08:43:11.303283 2026] [security2:error] [pid 2423799:tid 2423799] [client 78.133.66.40:47176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAj8sDPUni1EbX-qVjQAAAADg"]
[Thu Jul 30 08:43:11.303512 2026] [security2:error] [pid 2423799:tid 2423799] [client 78.133.66.40:47176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAj8sDPUni1EbX-qVjQAAAADg"]
[Thu Jul 30 08:43:11.337694 2026] [authz_core:error] [pid 2426661:tid 2426661] [client 66.249.66.34:51534] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:43:11.340331 2026] [authz_core:error] [pid 2426661:tid 2426661] [client 66.249.66.34:51534] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:43:13.123885 2026] [authz_core:error] [pid 2434552:tid 2434552] [client 57.141.0.52:28468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:13.124513 2026] [authz_core:error] [pid 2434552:tid 2434552] [client 57.141.0.52:28468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:13.143832 2026] [core:error] [pid 2436775:tid 2436775] [client 66.249.64.170:38045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:13.143856 2026] [core:error] [pid 2436775:tid 2436775] [client 66.249.64.170:38045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:13.345088 2026] [cgi:error] [pid 2427778:tid 2427778] [client 20.104.22.47:65514] AH02812: stderr from /home/nsnarvi/nativespace-narvi.ns-narvi.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:43:13.820317 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:53404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:13.820345 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:13.871841 2026] [ssl:error] [pid 2434605:tid 2434605] (EAI 2)Name or service not known: [client 144.76.19.72:53418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:13.871865 2026] [ssl:error] [pid 2434605:tid 2434605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:14.444003 2026] [ssl:error] [pid 2411149:tid 2411149] (70014)End of file found: [client 216.73.216.199:56215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:14.452291 2026] [authz_core:error] [pid 2427778:tid 2427778] [client 20.104.22.47:65514] AH01630: client denied by server configuration: /home/nsnarvi/nativespace-narvi.ns-narvi.com/php.ini
[Thu Jul 30 08:43:15.436909 2026] [ssl:error] [pid 2434552:tid 2434552] (70014)End of file found: [client 216.73.216.199:46631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:15.448516 2026] [authz_core:error] [pid 2434605:tid 2434605] [client 57.141.0.7:61882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:15.449146 2026] [authz_core:error] [pid 2434605:tid 2434605] [client 57.141.0.7:61882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:15.934724 2026] [authz_core:error] [pid 2426661:tid 2426661] [client 57.141.0.10:27286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:15.935344 2026] [authz_core:error] [pid 2426661:tid 2426661] [client 57.141.0.10:27286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:16.924739 2026] [ssl:error] [pid 2441988:tid 2441988] (EAI 2)Name or service not known: [client 144.76.19.72:53420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:16.924783 2026] [ssl:error] [pid 2441988:tid 2441988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:16.976492 2026] [ssl:error] [pid 2440527:tid 2440527] (EAI 2)Name or service not known: [client 144.76.19.72:53428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:16.976513 2026] [ssl:error] [pid 2440527:tid 2440527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:18.296313 2026] [authz_core:error] [pid 2440848:tid 2440848] [client 57.141.0.41:61068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:18.296930 2026] [authz_core:error] [pid 2440848:tid 2440848] [client 57.141.0.41:61068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:18.513422 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 20.63.98.115:12196] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 08:43:20.049399 2026] [ssl:error] [pid 2440848:tid 2440848] (EAI 2)Name or service not known: [client 144.76.19.72:28304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:20.049442 2026] [ssl:error] [pid 2440848:tid 2440848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:20.102956 2026] [ssl:error] [pid 2412502:tid 2412502] (EAI 2)Name or service not known: [client 144.76.19.72:28312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:20.102977 2026] [ssl:error] [pid 2412502:tid 2412502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:21.005371 2026] [authz_core:error] [pid 2434554:tid 2434554] [client 57.141.0.46:62630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:21.005990 2026] [authz_core:error] [pid 2434554:tid 2434554] [client 57.141.0.46:62630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:22.502463 2026] [authz_core:error] [pid 2434605:tid 2434605] [client 66.249.66.34:49199] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:43:22.505195 2026] [authz_core:error] [pid 2434605:tid 2434605] [client 66.249.66.34:49199] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:43:22.662745 2026] [ssl:error] [pid 2434521:tid 2434521] (70014)End of file found: [client 216.73.216.199:27881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:23.158704 2026] [ssl:error] [pid 2436775:tid 2436775] (EAI 2)Name or service not known: [client 144.76.19.72:28314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:23.158748 2026] [ssl:error] [pid 2436775:tid 2436775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:23.213303 2026] [ssl:error] [pid 2441989:tid 2441989] (EAI 2)Name or service not known: [client 144.76.19.72:28318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:23.213348 2026] [ssl:error] [pid 2441989:tid 2441989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:23.749239 2026] [security2:error] [pid 2442236:tid 2442236] [client 136.85.57.207:36638] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsAm3WQxct1w0gtrZOs7QAAABo"]
[Thu Jul 30 08:43:23.749433 2026] [security2:error] [pid 2442236:tid 2442236] [client 136.85.57.207:36638] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsAm3WQxct1w0gtrZOs7QAAABo"]
[Thu Jul 30 08:43:23.749689 2026] [security2:error] [pid 2442236:tid 2442236] [client 136.85.57.207:36638] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAm3WQxct1w0gtrZOs7QAAABo"]
[Thu Jul 30 08:43:24.473584 2026] [core:error] [pid 2441945:tid 2441945] (13)Permission denied: [client 216.73.216.199:14583] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS0/irq
[Thu Jul 30 08:43:25.078782 2026] [ssl:error] [pid 2441945:tid 2441945] (70014)End of file found: [client 216.73.216.199:14583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:25.158258 2026] [security2:error] [pid 2442027:tid 2442027] [client 136.85.57.207:36814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsAnfuQVQRUiUii09dCFwAAABI"]
[Thu Jul 30 08:43:25.158496 2026] [security2:error] [pid 2442027:tid 2442027] [client 136.85.57.207:36814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsAnfuQVQRUiUii09dCFwAAABI"]
[Thu Jul 30 08:43:25.158742 2026] [security2:error] [pid 2442027:tid 2442027] [client 136.85.57.207:36814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnfuQVQRUiUii09dCFwAAABI"]
[Thu Jul 30 08:43:25.472951 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:36870] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsAnSux7rlqiNnQVD3JdQAAACQ"]
[Thu Jul 30 08:43:25.473119 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:36870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsAnSux7rlqiNnQVD3JdQAAACQ"]
[Thu Jul 30 08:43:25.473321 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:36870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnSux7rlqiNnQVD3JdQAAACQ"]
[Thu Jul 30 08:43:26.270061 2026] [ssl:error] [pid 2436835:tid 2436835] (EAI 2)Name or service not known: [client 144.76.19.72:28320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:26.270095 2026] [ssl:error] [pid 2436835:tid 2436835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:26.323473 2026] [ssl:error] [pid 2436835:tid 2436835] (EAI 2)Name or service not known: [client 144.76.19.72:28330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:26.323496 2026] [ssl:error] [pid 2436835:tid 2436835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:26.419466 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:36974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsAniux7rlqiNnQVD3JdwAAACQ"]
[Thu Jul 30 08:43:26.419659 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:36974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsAniux7rlqiNnQVD3JdwAAACQ"]
[Thu Jul 30 08:43:26.419853 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:36974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAniux7rlqiNnQVD3JdwAAACQ"]
[Thu Jul 30 08:43:26.603733 2026] [security2:error] [pid 2423799:tid 2423799] [client 136.85.57.207:37008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsAnssDPUni1EbX-qVjcgAAADg"]
[Thu Jul 30 08:43:26.603912 2026] [security2:error] [pid 2423799:tid 2423799] [client 136.85.57.207:37008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsAnssDPUni1EbX-qVjcgAAADg"]
[Thu Jul 30 08:43:26.604133 2026] [security2:error] [pid 2423799:tid 2423799] [client 136.85.57.207:37008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnssDPUni1EbX-qVjcgAAADg"]
[Thu Jul 30 08:43:26.642676 2026] [authz_core:error] [pid 2442316:tid 2442316] [client 66.249.66.33:46989] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:43:26.645387 2026] [authz_core:error] [pid 2442316:tid 2442316] [client 66.249.66.33:46989] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:43:26.683910 2026] [authz_core:error] [pid 2442320:tid 2442320] [client 57.141.0.13:62102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:26.684557 2026] [authz_core:error] [pid 2442320:tid 2442320] [client 57.141.0.13:62102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:26.747888 2026] [security2:error] [pid 2442317:tid 2442317] [client 136.85.57.207:37024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsAnnGAxPd-P1XPGV_0QgAAACs"]
[Thu Jul 30 08:43:26.748127 2026] [security2:error] [pid 2442317:tid 2442317] [client 136.85.57.207:37024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsAnnGAxPd-P1XPGV_0QgAAACs"]
[Thu Jul 30 08:43:26.748388 2026] [security2:error] [pid 2442317:tid 2442317] [client 136.85.57.207:37024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnnGAxPd-P1XPGV_0QgAAACs"]
[Thu Jul 30 08:43:26.961639 2026] [security2:error] [pid 2442315:tid 2442315] [client 136.85.57.207:37030] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsAnjbLxVfGam93pHjCEQAAACY"]
[Thu Jul 30 08:43:26.961870 2026] [security2:error] [pid 2442315:tid 2442315] [client 136.85.57.207:37030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsAnjbLxVfGam93pHjCEQAAACY"]
[Thu Jul 30 08:43:26.962125 2026] [security2:error] [pid 2442315:tid 2442315] [client 136.85.57.207:37030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnjbLxVfGam93pHjCEQAAACY"]
[Thu Jul 30 08:43:27.046884 2026] [security2:error] [pid 2440030:tid 2440030] [client 43.157.175.122:52564] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.be"] [uri "/"] [unique_id "amsAn3bvhLfAhQR9nl8hqwAAAAA"]
[Thu Jul 30 08:43:27.084051 2026] [security2:error] [pid 2433879:tid 2433879] [client 136.85.57.207:37044] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amsAn6bDOFb46zAeS-udswAAABk"]
[Thu Jul 30 08:43:27.084219 2026] [security2:error] [pid 2433879:tid 2433879] [client 136.85.57.207:37044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amsAn6bDOFb46zAeS-udswAAABk"]
[Thu Jul 30 08:43:27.084410 2026] [security2:error] [pid 2433879:tid 2433879] [client 136.85.57.207:37044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAn6bDOFb46zAeS-udswAAABk"]
[Thu Jul 30 08:43:27.136585 2026] [security2:error] [pid 2423799:tid 2423799] [client 136.85.57.207:37056] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsAn8sDPUni1EbX-qVjcwAAADg"]
[Thu Jul 30 08:43:27.136753 2026] [security2:error] [pid 2423799:tid 2423799] [client 136.85.57.207:37056] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsAn8sDPUni1EbX-qVjcwAAADg"]
[Thu Jul 30 08:43:27.136945 2026] [security2:error] [pid 2423799:tid 2423799] [client 136.85.57.207:37056] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAn8sDPUni1EbX-qVjcwAAADg"]
[Thu Jul 30 08:43:27.291052 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:37068] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsAnzIvZjZy0OZ0I2UctAAAACw"]
[Thu Jul 30 08:43:27.291260 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:37068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsAnzIvZjZy0OZ0I2UctAAAACw"]
[Thu Jul 30 08:43:27.291469 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:37068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnzIvZjZy0OZ0I2UctAAAACw"]
[Thu Jul 30 08:43:27.500156 2026] [security2:error] [pid 2442319:tid 2442319] [client 136.85.57.207:37084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsAnyVOYN6a0v_SU0HVCAAAADA"]
[Thu Jul 30 08:43:27.500307 2026] [security2:error] [pid 2442319:tid 2442319] [client 136.85.57.207:37084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsAnyVOYN6a0v_SU0HVCAAAADA"]
[Thu Jul 30 08:43:27.500524 2026] [security2:error] [pid 2442319:tid 2442319] [client 136.85.57.207:37084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnyVOYN6a0v_SU0HVCAAAADA"]
[Thu Jul 30 08:43:27.539897 2026] [security2:error] [pid 2442314:tid 2442314] [client 136.85.57.207:37086] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsAnwJcaVMR9uX73u3DaQAAACM"]
[Thu Jul 30 08:43:27.540109 2026] [security2:error] [pid 2442314:tid 2442314] [client 136.85.57.207:37086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsAnwJcaVMR9uX73u3DaQAAACM"]
[Thu Jul 30 08:43:27.540358 2026] [security2:error] [pid 2442314:tid 2442314] [client 136.85.57.207:37086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnwJcaVMR9uX73u3DaQAAACM"]
[Thu Jul 30 08:43:27.671200 2026] [security2:error] [pid 2433879:tid 2433879] [client 136.85.57.207:37104] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsAn6bDOFb46zAeS-udtAAAABk"]
[Thu Jul 30 08:43:27.671369 2026] [security2:error] [pid 2433879:tid 2433879] [client 136.85.57.207:37104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsAn6bDOFb46zAeS-udtAAAABk"]
[Thu Jul 30 08:43:27.671554 2026] [security2:error] [pid 2433879:tid 2433879] [client 136.85.57.207:37104] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAn6bDOFb46zAeS-udtAAAABk"]
[Thu Jul 30 08:43:27.824117 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:37112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsAnzIvZjZy0OZ0I2UctQAAACw"]
[Thu Jul 30 08:43:27.824259 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:37112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsAnzIvZjZy0OZ0I2UctQAAACw"]
[Thu Jul 30 08:43:27.824448 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:37112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAnzIvZjZy0OZ0I2UctQAAACw"]
[Thu Jul 30 08:43:28.228821 2026] [security2:error] [pid 2440030:tid 2440030] [client 136.85.57.207:51950] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "panel.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsAoHbvhLfAhQR9nl8hrAAAAAA"]
[Thu Jul 30 08:43:28.229083 2026] [security2:error] [pid 2440030:tid 2440030] [client 136.85.57.207:51950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsAoHbvhLfAhQR9nl8hrAAAAAA"]
[Thu Jul 30 08:43:28.229275 2026] [security2:error] [pid 2440030:tid 2440030] [client 136.85.57.207:51950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAoHbvhLfAhQR9nl8hrAAAAAA"]
[Thu Jul 30 08:43:28.387465 2026] [autoindex:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:12700] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/robincou/
[Thu Jul 30 08:43:28.963450 2026] [security2:error] [pid 2436836:tid 2436836] [client 43.157.175.122:42142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsAoO42i8FBp6ndyY6rTAAAACk"], referer: http://orgent.be
[Thu Jul 30 08:43:29.148186 2026] [security2:error] [pid 2434553:tid 2434553] [client 136.85.57.207:52016] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsAoXouG-D3ozJDpEHWUgAAAC0"]
[Thu Jul 30 08:43:29.148325 2026] [security2:error] [pid 2434553:tid 2434553] [client 136.85.57.207:52016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsAoXouG-D3ozJDpEHWUgAAAC0"]
[Thu Jul 30 08:43:29.148510 2026] [security2:error] [pid 2434553:tid 2434553] [client 136.85.57.207:52016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAoXouG-D3ozJDpEHWUgAAAC0"]
[Thu Jul 30 08:43:29.409610 2026] [ssl:error] [pid 2440030:tid 2440030] (EAI 2)Name or service not known: [client 144.76.19.72:28344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:29.409644 2026] [ssl:error] [pid 2440030:tid 2440030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:29.463109 2026] [ssl:error] [pid 2434683:tid 2434683] (EAI 2)Name or service not known: [client 144.76.19.72:28352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:29.463135 2026] [ssl:error] [pid 2434683:tid 2434683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:29.694754 2026] [security2:error] [pid 2441988:tid 2441988] [client 136.85.57.207:52064] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsAoUMzLXzvo8eYf7am8wAAAAo"]
[Thu Jul 30 08:43:29.694898 2026] [security2:error] [pid 2441988:tid 2441988] [client 136.85.57.207:52064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsAoUMzLXzvo8eYf7am8wAAAAo"]
[Thu Jul 30 08:43:29.695139 2026] [security2:error] [pid 2441988:tid 2441988] [client 136.85.57.207:52064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAoUMzLXzvo8eYf7am8wAAAAo"]
[Thu Jul 30 08:43:29.889967 2026] [security2:error] [pid 2420262:tid 2420262] [client 216.73.216.199:12700] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/krb5.conf"] [unique_id "amsAoaCuPSoE0uFFzriB0QAAABY"]
[Thu Jul 30 08:43:29.890268 2026] [security2:error] [pid 2420262:tid 2420262] [client 216.73.216.199:12700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/krb5.conf"] [unique_id "amsAoaCuPSoE0uFFzriB0QAAABY"]
[Thu Jul 30 08:43:29.890484 2026] [security2:error] [pid 2420262:tid 2420262] [client 216.73.216.199:12700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/krb5.conf"] [unique_id "amsAoaCuPSoE0uFFzriB0QAAABY"]
[Thu Jul 30 08:43:30.018065 2026] [security2:error] [pid 2434553:tid 2434553] [client 136.85.57.207:52088] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "panel.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsAonouG-D3ozJDpEHWUwAAAC0"]
[Thu Jul 30 08:43:30.018325 2026] [security2:error] [pid 2434553:tid 2434553] [client 136.85.57.207:52088] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsAonouG-D3ozJDpEHWUwAAAC0"]
[Thu Jul 30 08:43:30.018555 2026] [security2:error] [pid 2434553:tid 2434553] [client 136.85.57.207:52088] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAonouG-D3ozJDpEHWUwAAAC0"]
[Thu Jul 30 08:43:30.243348 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:52108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsAorrcZaqk3Y1Q7SxNSQAAABM"]
[Thu Jul 30 08:43:30.243552 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:52108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsAorrcZaqk3Y1Q7SxNSQAAABM"]
[Thu Jul 30 08:43:30.243803 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:52108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAorrcZaqk3Y1Q7SxNSQAAABM"]
[Thu Jul 30 08:43:30.436103 2026] [authz_core:error] [pid 2434683:tid 2434683] [client 57.141.0.28:52766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:30.436721 2026] [authz_core:error] [pid 2434683:tid 2434683] [client 57.141.0.28:52766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:31.212680 2026] [authz_core:error] [pid 2441945:tid 2441945] [client 57.141.0.16:57756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:31.213300 2026] [authz_core:error] [pid 2441945:tid 2441945] [client 57.141.0.16:57756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:31.346227 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:52216] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsAo7rcZaqk3Y1Q7SxNSgAAABM"]
[Thu Jul 30 08:43:31.346403 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:52216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsAo7rcZaqk3Y1Q7SxNSgAAABM"]
[Thu Jul 30 08:43:31.346606 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:52216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAo7rcZaqk3Y1Q7SxNSgAAABM"]
[Thu Jul 30 08:43:31.420221 2026] [security2:error] [pid 2439236:tid 2439236] [client 136.85.57.207:52220] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsAo4dR2tht--orhZvYIwAAAAk"]
[Thu Jul 30 08:43:31.420461 2026] [security2:error] [pid 2439236:tid 2439236] [client 136.85.57.207:52220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsAo4dR2tht--orhZvYIwAAAAk"]
[Thu Jul 30 08:43:31.420722 2026] [security2:error] [pid 2439236:tid 2439236] [client 136.85.57.207:52220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAo4dR2tht--orhZvYIwAAAAk"]
[Thu Jul 30 08:43:31.576254 2026] [authz_core:error] [pid 2434683:tid 2434683] [client 136.85.57.207:52234] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 08:43:32.017979 2026] [security2:error] [pid 2412502:tid 2412502] [client 136.85.57.207:52282] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsApIvFUIHlpYWGJ3FObQAAACA"]
[Thu Jul 30 08:43:32.018162 2026] [security2:error] [pid 2412502:tid 2412502] [client 136.85.57.207:52282] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsApIvFUIHlpYWGJ3FObQAAACA"]
[Thu Jul 30 08:43:32.018363 2026] [security2:error] [pid 2412502:tid 2412502] [client 136.85.57.207:52282] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsApIvFUIHlpYWGJ3FObQAAACA"]
[Thu Jul 30 08:43:32.424668 2026] [security2:error] [pid 2440527:tid 2440527] [client 136.85.57.207:52320] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsApIs_fNEg9Spw3SZcrQAAABA"]
[Thu Jul 30 08:43:32.424858 2026] [security2:error] [pid 2440527:tid 2440527] [client 136.85.57.207:52320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsApIs_fNEg9Spw3SZcrQAAABA"]
[Thu Jul 30 08:43:32.425051 2026] [security2:error] [pid 2440527:tid 2440527] [client 136.85.57.207:52320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsApIs_fNEg9Spw3SZcrQAAABA"]
[Thu Jul 30 08:43:32.547996 2026] [ssl:error] [pid 2433879:tid 2433879] (EAI 2)Name or service not known: [client 144.76.19.72:35276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:32.548047 2026] [ssl:error] [pid 2433879:tid 2433879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:32.601457 2026] [ssl:error] [pid 2439197:tid 2439197] (EAI 2)Name or service not known: [client 144.76.19.72:35288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:32.601499 2026] [ssl:error] [pid 2439197:tid 2439197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:32.738610 2026] [authz_core:error] [pid 2442278:tid 2442278] [client 57.141.0.60:38386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:32.739248 2026] [authz_core:error] [pid 2442278:tid 2442278] [client 57.141.0.60:38386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:33.212127 2026] [autoindex:error] [pid 2420262:tid 2420262] (13)Permission denied: [client 216.73.216.199:12700] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/pccouk/
[Thu Jul 30 08:43:33.273228 2026] [security2:error] [pid 2429943:tid 2429943] [client 136.85.57.207:52412] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsApSgDZvJnuOkhDtU3_AAAACU"]
[Thu Jul 30 08:43:33.273410 2026] [security2:error] [pid 2429943:tid 2429943] [client 136.85.57.207:52412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsApSgDZvJnuOkhDtU3_AAAACU"]
[Thu Jul 30 08:43:33.273618 2026] [security2:error] [pid 2429943:tid 2429943] [client 136.85.57.207:52412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsApSgDZvJnuOkhDtU3_AAAACU"]
[Thu Jul 30 08:43:33.512279 2026] [ssl:error] [pid 2420262:tid 2420262] (70014)End of file found: [client 216.73.216.199:12700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:33.668320 2026] [security2:error] [pid 2434683:tid 2434683] [client 136.85.57.207:52446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsApZgWXkPaqiXELxxUbAAAAFY"]
[Thu Jul 30 08:43:33.668522 2026] [security2:error] [pid 2434683:tid 2434683] [client 136.85.57.207:52446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsApZgWXkPaqiXELxxUbAAAAFY"]
[Thu Jul 30 08:43:33.668732 2026] [security2:error] [pid 2434683:tid 2434683] [client 136.85.57.207:52446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsApZgWXkPaqiXELxxUbAAAAFY"]
[Thu Jul 30 08:43:34.350302 2026] [security2:error] [pid 2442278:tid 2442278] [client 136.85.57.207:52510] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "panel.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amsApj0LtDRfTDEBRLSHbgAAABw"]
[Thu Jul 30 08:43:34.350533 2026] [security2:error] [pid 2442278:tid 2442278] [client 136.85.57.207:52510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amsApj0LtDRfTDEBRLSHbgAAABw"]
[Thu Jul 30 08:43:34.350763 2026] [security2:error] [pid 2442278:tid 2442278] [client 136.85.57.207:52510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsApj0LtDRfTDEBRLSHbgAAABw"]
[Thu Jul 30 08:43:34.457793 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.29:62982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:34.458436 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.29:62982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:34.576892 2026] [security2:error] [pid 2426661:tid 2426661] [client 136.85.57.207:52540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsApk10g1cPUQyHDS7yrwAAABg"]
[Thu Jul 30 08:43:34.577119 2026] [security2:error] [pid 2426661:tid 2426661] [client 136.85.57.207:52540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsApk10g1cPUQyHDS7yrwAAABg"]
[Thu Jul 30 08:43:34.577344 2026] [security2:error] [pid 2426661:tid 2426661] [client 136.85.57.207:52540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsApk10g1cPUQyHDS7yrwAAABg"]
[Thu Jul 30 08:43:34.741504 2026] [security2:error] [pid 2436835:tid 2436835] [client 136.85.57.207:52554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "panel.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amsAppxJ1scc38SpT-_fJgAAACc"]
[Thu Jul 30 08:43:34.741770 2026] [security2:error] [pid 2436835:tid 2436835] [client 136.85.57.207:52554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panel.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amsAppxJ1scc38SpT-_fJgAAACc"]
[Thu Jul 30 08:43:34.741967 2026] [security2:error] [pid 2436835:tid 2436835] [client 136.85.57.207:52554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "panel.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsAppxJ1scc38SpT-_fJgAAACc"]
[Thu Jul 30 08:43:35.640029 2026] [core:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:3390] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-128/objs_per_slab
[Thu Jul 30 08:43:35.660795 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:35304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:35.660828 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:35.718770 2026] [ssl:error] [pid 2436836:tid 2436836] (EAI 2)Name or service not known: [client 144.76.19.72:35310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:35.718791 2026] [ssl:error] [pid 2436836:tid 2436836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:35.927678 2026] [authz_core:error] [pid 2412502:tid 2412502] [client 57.141.0.56:25902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:35.928303 2026] [authz_core:error] [pid 2412502:tid 2412502] [client 57.141.0.56:25902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:37.174836 2026] [autoindex:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:3390] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/anvilsem/
[Thu Jul 30 08:43:38.774779 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:35318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:38.774808 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:38.827669 2026] [ssl:error] [pid 2442278:tid 2442278] (EAI 2)Name or service not known: [client 144.76.19.72:35330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:38.827709 2026] [ssl:error] [pid 2442278:tid 2442278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:39.282116 2026] [core:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:3390] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/sanity_checks
[Thu Jul 30 08:43:39.742079 2026] [authz_core:error] [pid 2440527:tid 2440527] [client 57.141.0.22:32096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:39.742701 2026] [authz_core:error] [pid 2440527:tid 2440527] [client 57.141.0.22:32096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:39.901349 2026] [ssl:error] [pid 2428221:tid 2428221] (70014)End of file found: [client 216.73.216.199:60483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:40.831751 2026] [core:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:3390] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/drivers/thermal/bind
[Thu Jul 30 08:43:41.880287 2026] [ssl:error] [pid 2442320:tid 2442320] (EAI 2)Name or service not known: [client 144.76.19.72:20998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:41.880358 2026] [ssl:error] [pid 2442320:tid 2442320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:41.936961 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:21000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:41.936990 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:42.057689 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 20.63.98.115:12196] AH01630: client denied by server configuration: /home/orgent/public_html/wp-admin/includes/error_log
[Thu Jul 30 08:43:42.660374 2026] [autoindex:error] [pid 2440848:tid 2440848] (13)Permission denied: [client 216.73.216.199:3390] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/ericashm/
[Thu Jul 30 08:43:42.961505 2026] [ssl:error] [pid 2440848:tid 2440848] (70014)End of file found: [client 216.73.216.199:3390] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:43.576658 2026] [ssl:error] [pid 2441988:tid 2441988] (70014)End of file found: [client 216.73.216.199:53491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:44.065098 2026] [access_compat:error] [pid 2439575:tid 2439575] [client 2.189.5.162:42370] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 08:43:44.795021 2026] [security2:error] [pid 2427778:tid 2427778] [client 47.128.44.253:28086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dev.ppcl.com"] [uri "/robots.txt"] [unique_id "amsAsC7K7U7WHMW7oLBj6gAAAEA"]
[Thu Jul 30 08:43:44.905507 2026] [ssl:error] [pid 2442314:tid 2442314] (70014)End of file found: [client 216.73.216.199:3593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:44.994271 2026] [ssl:error] [pid 2442197:tid 2442197] (EAI 2)Name or service not known: [client 144.76.19.72:21010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:44.994303 2026] [ssl:error] [pid 2442197:tid 2442197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:45.051962 2026] [ssl:error] [pid 2441945:tid 2441945] (EAI 2)Name or service not known: [client 144.76.19.72:21012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:45.051996 2026] [ssl:error] [pid 2441945:tid 2441945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:45.387544 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 20.63.98.115:12196] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/error_log
[Thu Jul 30 08:43:47.332462 2026] [ssl:error] [pid 2436774:tid 2436774] (70014)End of file found: [client 216.73.216.199:2702] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:48.110895 2026] [ssl:error] [pid 2411420:tid 2411420] (EAI 2)Name or service not known: [client 144.76.19.72:21028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:48.110924 2026] [ssl:error] [pid 2411420:tid 2411420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:48.165551 2026] [ssl:error] [pid 2442316:tid 2442316] (EAI 2)Name or service not known: [client 144.76.19.72:21030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:48.165593 2026] [ssl:error] [pid 2442316:tid 2442316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:48.832977 2026] [ssl:error] [pid 2442030:tid 2442030] (70014)End of file found: [client 216.73.216.199:21128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:49.762853 2026] [authz_core:error] [pid 2411420:tid 2411420] [client 66.249.66.33:55874] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:43:49.765521 2026] [authz_core:error] [pid 2411420:tid 2411420] [client 66.249.66.33:55874] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:43:50.329002 2026] [core:error] [pid 2423799:tid 2423799] [client 66.249.66.194:46326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:50.329026 2026] [core:error] [pid 2423799:tid 2423799] [client 66.249.66.194:46326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:50.372754 2026] [core:error] [pid 2434557:tid 2434557] [client 66.249.66.66:51403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:50.372778 2026] [core:error] [pid 2434557:tid 2434557] [client 66.249.66.66:51403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:43:51.242369 2026] [ssl:error] [pid 2442315:tid 2442315] (EAI 2)Name or service not known: [client 144.76.19.72:47596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:51.242408 2026] [ssl:error] [pid 2442315:tid 2442315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:51.295812 2026] [ssl:error] [pid 2442318:tid 2442318] (EAI 2)Name or service not known: [client 144.76.19.72:47612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:51.295842 2026] [ssl:error] [pid 2442318:tid 2442318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:51.312438 2026] [authz_core:error] [pid 2434557:tid 2434557] [client 20.100.203.84:64337] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-includes/Text/error_log
[Thu Jul 30 08:43:51.315170 2026] [authz_core:error] [pid 2434521:tid 2434521] [client 57.141.0.56:25208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:51.315779 2026] [authz_core:error] [pid 2434521:tid 2434521] [client 57.141.0.56:25208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:52.121447 2026] [authz_core:error] [pid 2442318:tid 2442318] [client 57.141.0.35:62594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:52.122077 2026] [authz_core:error] [pid 2442318:tid 2442318] [client 57.141.0.35:62594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:52.755262 2026] [ssl:error] [pid 2442197:tid 2442197] (70014)End of file found: [client 216.73.216.199:58316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:53.735424 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 20.63.98.115:12196] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 08:43:53.965114 2026] [ssl:error] [pid 2443149:tid 2443149] (70014)End of file found: [client 216.73.216.199:1903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:43:54.348209 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:47620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:54.348235 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:54.403814 2026] [ssl:error] [pid 2442316:tid 2442316] (EAI 2)Name or service not known: [client 144.76.19.72:47624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:54.403849 2026] [ssl:error] [pid 2442316:tid 2442316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:56.991408 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.27:46526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:43:56.992023 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.27:46526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:43:57.385184 2026] [security2:error] [pid 2442315:tid 2442315] [client 92.222.104.216:49206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/hillingdon-council-environmental-health-contact-number"] [unique_id "amsAvTbLxVfGam93pHjCdgAAACY"]
[Thu Jul 30 08:43:57.459852 2026] [ssl:error] [pid 2423799:tid 2423799] (EAI 2)Name or service not known: [client 144.76.19.72:47628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:57.459882 2026] [ssl:error] [pid 2423799:tid 2423799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:43:57.514043 2026] [ssl:error] [pid 2442030:tid 2442030] (EAI 2)Name or service not known: [client 144.76.19.72:47638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:43:57.514099 2026] [ssl:error] [pid 2442030:tid 2442030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:00.571099 2026] [ssl:error] [pid 2442316:tid 2442316] (EAI 2)Name or service not known: [client 144.76.19.72:25444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:00.571130 2026] [ssl:error] [pid 2442316:tid 2442316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:00.624156 2026] [ssl:error] [pid 2434553:tid 2434553] (EAI 2)Name or service not known: [client 144.76.19.72:25448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:00.624181 2026] [ssl:error] [pid 2434553:tid 2434553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:00.924037 2026] [core:error] [pid 2412502:tid 2412502] (13)Permission denied: [client 216.73.216.199:54490] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/localdomains
[Thu Jul 30 08:44:01.828733 2026] [ssl:error] [pid 2412502:tid 2412502] (70014)End of file found: [client 216.73.216.199:54490] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:02.536419 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.20:46740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:02.537039 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.20:46740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:03.335643 2026] [ssl:error] [pid 2442314:tid 2442314] (70014)End of file found: [client 216.73.216.199:10419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:04.274618 2026] [ssl:error] [pid 2442279:tid 2442279] (EAI 2)Name or service not known: [client 144.76.19.72:25456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:04.274648 2026] [ssl:error] [pid 2442279:tid 2442279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:04.452886 2026] [ssl:error] [pid 2441988:tid 2441988] (70014)End of file found: [client 216.73.216.199:14110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:04.470093 2026] [core:error] [pid 2439236:tid 2439236] [client 66.249.64.172:48473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:04.470132 2026] [core:error] [pid 2439236:tid 2439236] [client 66.249.64.172:48473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:04.560106 2026] [ssl:error] [pid 2439236:tid 2439236] (EAI 2)Name or service not known: [client 144.76.19.72:25464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:04.560130 2026] [ssl:error] [pid 2439236:tid 2439236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:05.631902 2026] [authz_core:error] [pid 2439236:tid 2439236] [client 57.141.0.7:54426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:05.632524 2026] [authz_core:error] [pid 2439236:tid 2439236] [client 57.141.0.7:54426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:06.132981 2026] [authz_core:error] [pid 2443652:tid 2443652] [client 57.141.0.54:63836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:06.133648 2026] [authz_core:error] [pid 2443652:tid 2443652] [client 57.141.0.54:63836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:06.308341 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 82.102.18.190:38216] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/ID3/error_log
[Thu Jul 30 08:44:07.352048 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 82.102.18.190:38216] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/IXR/error_log
[Thu Jul 30 08:44:07.615921 2026] [ssl:error] [pid 2423799:tid 2423799] (EAI 2)Name or service not known: [client 144.76.19.72:25476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:07.615952 2026] [ssl:error] [pid 2423799:tid 2423799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:07.668922 2026] [ssl:error] [pid 2412502:tid 2412502] (EAI 2)Name or service not known: [client 144.76.19.72:25492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:07.668949 2026] [ssl:error] [pid 2412502:tid 2412502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:08.467501 2026] [ssl:error] [pid 2411149:tid 2411149] (70014)End of file found: [client 216.73.216.199:4214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:08.966544 2026] [core:error] [pid 2443150:tid 2443150] (13)Permission denied: [client 216.73.216.199:15803] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/cron.d/cpanel_ssl_reissue
[Thu Jul 30 08:44:09.067161 2026] [ssl:error] [pid 2443150:tid 2443150] (70014)End of file found: [client 216.73.216.199:15803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:09.583791 2026] [authz_core:error] [pid 2429943:tid 2429943] [client 82.102.18.190:38216] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 08:44:10.444172 2026] [authz_core:error] [pid 2434557:tid 2434557] [client 57.141.0.59:49494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:10.444791 2026] [authz_core:error] [pid 2434557:tid 2434557] [client 57.141.0.59:49494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:10.760867 2026] [ssl:error] [pid 2436774:tid 2436774] (EAI 2)Name or service not known: [client 144.76.19.72:27188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:10.760900 2026] [ssl:error] [pid 2436774:tid 2436774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:10.816558 2026] [ssl:error] [pid 2443610:tid 2443610] (EAI 2)Name or service not known: [client 144.76.19.72:27204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:10.816602 2026] [ssl:error] [pid 2443610:tid 2443610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:11.191285 2026] [core:error] [pid 2443609:tid 2443609] (13)Permission denied: [client 216.73.216.199:38081] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/drivers/battery/bind
[Thu Jul 30 08:44:11.270508 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.37:65418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:11.271136 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.37:65418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:11.801741 2026] [ssl:error] [pid 2443609:tid 2443609] (70014)End of file found: [client 216.73.216.199:38081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:13.017812 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 08:44:13.207493 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 08:44:13.207538 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:13.395528 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wicked.php
[Thu Jul 30 08:44:13.395587 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:13.581578 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wpx.php
[Thu Jul 30 08:44:13.581625 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:13.767438 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 08:44:13.767483 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:13.851699 2026] [authz_core:error] [pid 2444009:tid 2444009] [client 57.141.0.24:29082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:13.852375 2026] [authz_core:error] [pid 2444009:tid 2444009] [client 57.141.0.24:29082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:13.892189 2026] [security2:error] [pid 2442317:tid 2442317] [client 114.10.144.192:39167] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAzXGAxPd-P1XPGV_0vAAAACs"]
[Thu Jul 30 08:44:13.892245 2026] [security2:error] [pid 2442317:tid 2442317] [client 114.10.144.192:39167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAzXGAxPd-P1XPGV_0vAAAACs"]
[Thu Jul 30 08:44:13.892492 2026] [security2:error] [pid 2442317:tid 2442317] [client 114.10.144.192:39167] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAzXGAxPd-P1XPGV_0vAAAACs"]
[Thu Jul 30 08:44:13.946006 2026] [ssl:error] [pid 2444009:tid 2444009] (EAI 2)Name or service not known: [client 144.76.19.72:27212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:13.946052 2026] [ssl:error] [pid 2444009:tid 2444009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:13.998382 2026] [ssl:error] [pid 2442281:tid 2442281] (EAI 2)Name or service not known: [client 144.76.19.72:27214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:13.998409 2026] [ssl:error] [pid 2442281:tid 2442281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:14.002950 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/1xmomo.php
[Thu Jul 30 08:44:14.002991 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:14.188480 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amsAziux7rlqiNnQVD3JiQAAACQ"]
[Thu Jul 30 08:44:14.188712 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amsAziux7rlqiNnQVD3JiQAAACQ"]
[Thu Jul 30 08:44:14.188985 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amsAziux7rlqiNnQVD3JiQAAACQ"]
[Thu Jul 30 08:44:14.194556 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/1revo.php
[Thu Jul 30 08:44:14.194626 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:14.206149 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/api/.env"] [unique_id "amsAziux7rlqiNnQVD3JigAAACQ"]
[Thu Jul 30 08:44:14.206342 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/api/.env"] [unique_id "amsAziux7rlqiNnQVD3JigAAACQ"]
[Thu Jul 30 08:44:14.206588 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/api/.env"] [unique_id "amsAziux7rlqiNnQVD3JigAAACQ"]
[Thu Jul 30 08:44:14.214577 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFAAAABk"]
[Thu Jul 30 08:44:14.214722 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFAAAABk"]
[Thu Jul 30 08:44:14.214937 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFAAAABk"]
[Thu Jul 30 08:44:14.227148 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/backend/.env"] [unique_id "amsAziux7rlqiNnQVD3JiwAAACQ"]
[Thu Jul 30 08:44:14.227360 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/backend/.env"] [unique_id "amsAziux7rlqiNnQVD3JiwAAACQ"]
[Thu Jul 30 08:44:14.227622 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/backend/.env"] [unique_id "amsAziux7rlqiNnQVD3JiwAAACQ"]
[Thu Jul 30 08:44:14.236054 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/api/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFQAAABk"]
[Thu Jul 30 08:44:14.236209 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/api/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFQAAABk"]
[Thu Jul 30 08:44:14.236363 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/api/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFQAAABk"]
[Thu Jul 30 08:44:14.257539 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/backend/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFgAAABk"]
[Thu Jul 30 08:44:14.257726 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/backend/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFgAAABk"]
[Thu Jul 30 08:44:14.257895 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/backend/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NFgAAABk"]
[Thu Jul 30 08:44:14.262160 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/admin/.env"] [unique_id "amsAziux7rlqiNnQVD3JjQAAACQ"]
[Thu Jul 30 08:44:14.262281 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/admin/.env"] [unique_id "amsAziux7rlqiNnQVD3JjQAAACQ"]
[Thu Jul 30 08:44:14.262447 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/admin/.env"] [unique_id "amsAziux7rlqiNnQVD3JjQAAACQ"]
[Thu Jul 30 08:44:14.296505 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/laravel/.env"] [unique_id "amsAziux7rlqiNnQVD3JjwAAACQ"]
[Thu Jul 30 08:44:14.296637 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/laravel/.env"] [unique_id "amsAziux7rlqiNnQVD3JjwAAACQ"]
[Thu Jul 30 08:44:14.296802 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/laravel/.env"] [unique_id "amsAziux7rlqiNnQVD3JjwAAACQ"]
[Thu Jul 30 08:44:14.300697 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/admin/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGAAAABk"]
[Thu Jul 30 08:44:14.300832 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/admin/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGAAAABk"]
[Thu Jul 30 08:44:14.301159 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/admin/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGAAAABk"]
[Thu Jul 30 08:44:14.313674 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/core/.env"] [unique_id "amsAziux7rlqiNnQVD3JkAAAACQ"]
[Thu Jul 30 08:44:14.313808 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/core/.env"] [unique_id "amsAziux7rlqiNnQVD3JkAAAACQ"]
[Thu Jul 30 08:44:14.313973 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/core/.env"] [unique_id "amsAziux7rlqiNnQVD3JkAAAACQ"]
[Thu Jul 30 08:44:14.344089 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/laravel/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGgAAABk"]
[Thu Jul 30 08:44:14.344221 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/laravel/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGgAAABk"]
[Thu Jul 30 08:44:14.344366 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/laravel/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGgAAABk"]
[Thu Jul 30 08:44:14.348356 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/.env.example"] [unique_id "amsAziux7rlqiNnQVD3JkgAAACQ"]
[Thu Jul 30 08:44:14.348484 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/.env.example"] [unique_id "amsAziux7rlqiNnQVD3JkgAAACQ"]
[Thu Jul 30 08:44:14.348744 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/.env.example"] [unique_id "amsAziux7rlqiNnQVD3JkgAAACQ"]
[Thu Jul 30 08:44:14.365809 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/core/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGwAAABk"]
[Thu Jul 30 08:44:14.365867 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/app/.env"] [unique_id "amsAziux7rlqiNnQVD3JkwAAACQ"]
[Thu Jul 30 08:44:14.365937 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/core/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGwAAABk"]
[Thu Jul 30 08:44:14.365982 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/app/.env"] [unique_id "amsAziux7rlqiNnQVD3JkwAAACQ"]
[Thu Jul 30 08:44:14.366094 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/core/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NGwAAABk"]
[Thu Jul 30 08:44:14.366169 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/app/.env"] [unique_id "amsAziux7rlqiNnQVD3JkwAAACQ"]
[Thu Jul 30 08:44:14.380428 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/cong.php
[Thu Jul 30 08:44:14.380483 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:14.383171 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/dev/.env"] [unique_id "amsAziux7rlqiNnQVD3JlAAAACQ"]
[Thu Jul 30 08:44:14.383288 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/dev/.env"] [unique_id "amsAziux7rlqiNnQVD3JlAAAACQ"]
[Thu Jul 30 08:44:14.383451 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/dev/.env"] [unique_id "amsAziux7rlqiNnQVD3JlAAAACQ"]
[Thu Jul 30 08:44:14.408898 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/.env.example"] [unique_id "amsAzgBG0jpUfV_Mx-3NHQAAABk"]
[Thu Jul 30 08:44:14.409046 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/.env.example"] [unique_id "amsAzgBG0jpUfV_Mx-3NHQAAABk"]
[Thu Jul 30 08:44:14.409215 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/.env.example"] [unique_id "amsAzgBG0jpUfV_Mx-3NHQAAABk"]
[Thu Jul 30 08:44:14.430457 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/app/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NHgAAABk"]
[Thu Jul 30 08:44:14.430612 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/app/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NHgAAABk"]
[Thu Jul 30 08:44:14.430762 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/app/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NHgAAABk"]
[Thu Jul 30 08:44:14.452002 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/dev/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NHwAAABk"]
[Thu Jul 30 08:44:14.452169 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/dev/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NHwAAABk"]
[Thu Jul 30 08:44:14.452332 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/dev/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NHwAAABk"]
[Thu Jul 30 08:44:14.498702 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/server/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NIQAAABk"]
[Thu Jul 30 08:44:14.498870 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/server/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NIQAAABk"]
[Thu Jul 30 08:44:14.499035 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/server/.env"] [unique_id "amsAzgBG0jpUfV_Mx-3NIQAAABk"]
[Thu Jul 30 08:44:14.520331 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/.env.save"] [unique_id "amsAzgBG0jpUfV_Mx-3NIgAAABk"]
[Thu Jul 30 08:44:14.520508 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/.env.save"] [unique_id "amsAzgBG0jpUfV_Mx-3NIgAAABk"]
[Thu Jul 30 08:44:14.520684 2026] [security2:error] [pid 2444009:tid 2444009] [client 185.93.89.167:54197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/.env.save"] [unique_id "amsAzgBG0jpUfV_Mx-3NIgAAABk"]
[Thu Jul 30 08:44:14.567127 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 08:44:14.567172 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:14.755405 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/srontol.php
[Thu Jul 30 08:44:14.755447 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:14.923869 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/server/.env"] [unique_id "amsAziux7rlqiNnQVD3JlgAAACQ"]
[Thu Jul 30 08:44:14.924016 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/server/.env"] [unique_id "amsAziux7rlqiNnQVD3JlgAAACQ"]
[Thu Jul 30 08:44:14.924215 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/server/.env"] [unique_id "amsAziux7rlqiNnQVD3JlgAAACQ"]
[Thu Jul 30 08:44:14.941404 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/.env.save"] [unique_id "amsAziux7rlqiNnQVD3JlwAAACQ"]
[Thu Jul 30 08:44:14.941530 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/.env.save"] [unique_id "amsAziux7rlqiNnQVD3JlwAAACQ"]
[Thu Jul 30 08:44:14.941728 2026] [security2:error] [pid 2428221:tid 2428221] [client 185.93.89.167:9939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/.env.save"] [unique_id "amsAziux7rlqiNnQVD3JlwAAACQ"]
[Thu Jul 30 08:44:14.943098 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/reop3.php
[Thu Jul 30 08:44:14.943136 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:15.131513 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 08:44:15.131572 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:15.331527 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/domvf.php
[Thu Jul 30 08:44:15.331579 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:15.517640 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/zero.php
[Thu Jul 30 08:44:15.517692 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:15.704485 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/002.php
[Thu Jul 30 08:44:15.704527 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:15.886831 2026] [security2:error] [pid 2440848:tid 2440848] [client 101.47.20.229:35717] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAz91bcUFil42ED6TmyQAAAA0"]
[Thu Jul 30 08:44:15.886887 2026] [security2:error] [pid 2440848:tid 2440848] [client 101.47.20.229:35717] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsAz91bcUFil42ED6TmyQAAAA0"]
[Thu Jul 30 08:44:15.887128 2026] [security2:error] [pid 2440848:tid 2440848] [client 101.47.20.229:35717] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsAz91bcUFil42ED6TmyQAAAA0"]
[Thu Jul 30 08:44:15.891537 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/thoms.php
[Thu Jul 30 08:44:15.891588 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:16.022676 2026] [authz_core:error] [pid 2443971:tid 2443971] [client 57.141.0.43:55392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:16.023304 2026] [authz_core:error] [pid 2443971:tid 2443971] [client 57.141.0.43:55392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:16.077904 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/fi22.php
[Thu Jul 30 08:44:16.077950 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:16.263847 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 08:44:16.422624 2026] [ssl:error] [pid 2443610:tid 2443610] (70014)End of file found: [client 216.73.216.199:62695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:16.450124 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/82.php
[Thu Jul 30 08:44:16.450169 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:16.648451 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/sx.php
[Thu Jul 30 08:44:16.648513 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:16.835935 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/dex.php
[Thu Jul 30 08:44:16.835980 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:16.923878 2026] [ssl:error] [pid 2443150:tid 2443150] (70014)End of file found: [client 216.73.216.199:48721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:17.021923 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 08:44:17.021967 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:17.055579 2026] [ssl:error] [pid 2442197:tid 2442197] (EAI 2)Name or service not known: [client 144.76.19.72:27230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:17.055606 2026] [ssl:error] [pid 2442197:tid 2442197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:17.111319 2026] [ssl:error] [pid 2443609:tid 2443609] (EAI 2)Name or service not known: [client 144.76.19.72:27234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:17.111347 2026] [ssl:error] [pid 2443609:tid 2443609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:17.208573 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/black.php
[Thu Jul 30 08:44:17.208614 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:17.403605 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/loader.php
[Thu Jul 30 08:44:17.403652 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:17.589642 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/file61.php
[Thu Jul 30 08:44:17.589690 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:17.775535 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-css.php
[Thu Jul 30 08:44:17.775586 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:17.852385 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.15:23738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:17.852997 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.15:23738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:17.961611 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blink.php
[Thu Jul 30 08:44:17.961654 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:18.156452 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/txets.php
[Thu Jul 30 08:44:18.156498 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:18.225099 2026] [ssl:error] [pid 2442317:tid 2442317] (70014)End of file found: [client 216.73.216.199:59529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:18.352474 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/pucci.php
[Thu Jul 30 08:44:18.352516 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:18.539011 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/xwpg.php
[Thu Jul 30 08:44:18.539053 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:18.634729 2026] [security2:error] [pid 2443149:tid 2443149] [client 101.47.20.229:52373] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsA0qg6oiRpDVn2Lh_tCwAAAAE"]
[Thu Jul 30 08:44:18.634778 2026] [security2:error] [pid 2443149:tid 2443149] [client 101.47.20.229:52373] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsA0qg6oiRpDVn2Lh_tCwAAAAE"]
[Thu Jul 30 08:44:18.635008 2026] [security2:error] [pid 2443149:tid 2443149] [client 101.47.20.229:52373] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsA0qg6oiRpDVn2Lh_tCwAAAAE"]
[Thu Jul 30 08:44:18.725131 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 08:44:18.725174 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:18.910861 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 08:44:18.910912 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:19.103448 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 08:44:19.103495 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:19.150440 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.62:63564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:19.151081 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.62:63564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:19.289552 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 08:44:19.481227 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 08:44:19.481267 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:19.667424 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/xyn.php
[Thu Jul 30 08:44:19.667470 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:19.853420 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-wp.php
[Thu Jul 30 08:44:19.853462 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:20.039357 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/aw.php
[Thu Jul 30 08:44:20.039404 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:20.204083 2026] [ssl:error] [pid 2444008:tid 2444008] (EAI 2)Name or service not known: [client 144.76.19.72:53510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:20.204129 2026] [ssl:error] [pid 2444008:tid 2444008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:20.226453 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 08:44:20.226496 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:20.260680 2026] [ssl:error] [pid 2443971:tid 2443971] (EAI 2)Name or service not known: [client 144.76.19.72:53514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:20.260714 2026] [ssl:error] [pid 2443971:tid 2443971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:20.413546 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/yawa.php
[Thu Jul 30 08:44:20.413605 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:20.599639 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/sym403.php
[Thu Jul 30 08:44:20.599681 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:20.788027 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 08:44:20.974190 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/adminner.php
[Thu Jul 30 08:44:20.974238 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:21.163266 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/yup.php
[Thu Jul 30 08:44:21.163311 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:21.320286 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.39:39480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:21.320903 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.39:39480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:21.349180 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/config.json.php
[Thu Jul 30 08:44:21.349220 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:21.535037 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 08:44:21.721130 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/2.php
[Thu Jul 30 08:44:21.721179 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:21.736428 2026] [ssl:error] [pid 2442281:tid 2442281] (70014)End of file found: [client 216.73.216.199:33215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:21.907362 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.update.php
[Thu Jul 30 08:44:21.907411 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:22.094793 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 08:44:22.094837 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:22.280592 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 08:44:22.318648 2026] [security2:error] [pid 2434557:tid 2434557] [client 176.31.139.4:24008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/value-being-decisively-daring/"] [unique_id "amsA1vcoYVCrEZtdVUcATgAAADY"]
[Thu Jul 30 08:44:22.466472 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/spadex.php
[Thu Jul 30 08:44:22.466518 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:22.653547 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/mg.php
[Thu Jul 30 08:44:22.653611 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:22.841511 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/fnstall.php
[Thu Jul 30 08:44:22.841555 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:23.028603 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/ortasekerli1.php
[Thu Jul 30 08:44:23.028652 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:23.214629 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/sump1.php
[Thu Jul 30 08:44:23.214671 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:23.316691 2026] [ssl:error] [pid 2443652:tid 2443652] (EAI 2)Name or service not known: [client 144.76.19.72:53522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:23.316721 2026] [ssl:error] [pid 2443652:tid 2443652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:23.357367 2026] [core:error] [pid 2434521:tid 2434521] (13)Permission denied: [client 216.73.216.199:52759] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/scsi_host/host1/subsystem/host0/scan
[Thu Jul 30 08:44:23.371997 2026] [ssl:error] [pid 2442280:tid 2442280] (EAI 2)Name or service not known: [client 144.76.19.72:53538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:23.372019 2026] [ssl:error] [pid 2442280:tid 2442280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:23.401698 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 08:44:23.401739 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:23.587541 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-post-data.php
[Thu Jul 30 08:44:23.587600 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:23.773801 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/root.php
[Thu Jul 30 08:44:23.773845 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:23.959626 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/v543.php
[Thu Jul 30 08:44:23.959673 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:24.145514 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/sixxis.php
[Thu Jul 30 08:44:24.145575 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:24.334408 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/ip.php
[Thu Jul 30 08:44:24.334452 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:24.524512 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/kq1.php
[Thu Jul 30 08:44:24.524559 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:24.710650 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/fw
[Thu Jul 30 08:44:24.871231 2026] [ssl:error] [pid 2442319:tid 2442319] (70014)End of file found: [client 216.73.216.199:10122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:24.897869 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/h02ugyh.php
[Thu Jul 30 08:44:24.897911 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:25.083665 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-temp.php
[Thu Jul 30 08:44:25.083709 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:25.166975 2026] [ssl:error] [pid 2434521:tid 2434521] (70014)End of file found: [client 216.73.216.199:52759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:25.269599 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 08:44:25.294138 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 20.63.98.115:54981] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/IXR/error_log
[Thu Jul 30 08:44:25.455644 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 08:44:25.642770 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 08:44:25.831781 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/jj.php
[Thu Jul 30 08:44:25.831825 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:26.018214 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/class-walker-footer-dev.php
[Thu Jul 30 08:44:26.018264 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:26.205349 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/xpwer1.php
[Thu Jul 30 08:44:26.205391 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:26.353347 2026] [security2:error] [pid 2443609:tid 2443609] [client 49.51.166.228:56750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.fr"] [uri "/"] [unique_id "amsA2oFgIwDFOKO5Koqm2wAAAAw"]
[Thu Jul 30 08:44:26.391390 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/flox.php
[Thu Jul 30 08:44:26.391434 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:26.429353 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:53550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:26.429373 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:26.485528 2026] [ssl:error] [pid 2444008:tid 2444008] (EAI 2)Name or service not known: [client 144.76.19.72:53562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:26.485551 2026] [ssl:error] [pid 2444008:tid 2444008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:26.577315 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/popo.php
[Thu Jul 30 08:44:26.577358 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:26.763183 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/yas.php
[Thu Jul 30 08:44:26.763225 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:26.950043 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/water.php
[Thu Jul 30 08:44:26.950101 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:27.126160 2026] [security2:error] [pid 2443150:tid 2443150] [client 49.51.166.228:58778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsA24xpdS_orACSXxhRDwAAAAI"], referer: http://www.orgent.fr
[Thu Jul 30 08:44:27.135924 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/nano.php
[Thu Jul 30 08:44:27.135969 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:27.288759 2026] [authz_core:error] [pid 2442197:tid 2442197] [client 57.141.0.58:27264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:27.289406 2026] [authz_core:error] [pid 2442197:tid 2442197] [client 57.141.0.58:27264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:27.323594 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/moon.php
[Thu Jul 30 08:44:27.323638 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:27.509776 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-info.php
[Thu Jul 30 08:44:27.509819 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:27.696480 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 08:44:27.696528 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:27.886442 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/2000.php
[Thu Jul 30 08:44:27.886484 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:27.899270 2026] [core:error] [pid 2433372:tid 2433372] (13)Permission denied: [client 216.73.216.199:39491] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/irq
[Thu Jul 30 08:44:28.030010 2026] [security2:error] [pid 2442317:tid 2442317] [client 144.172.105.5:52772] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /naomiwinter/web.config/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dbstart.co.uk"] [uri "/naomiwinter/web.config/"] [unique_id "amsA3HGAxPd-P1XPGV_01QAAACs"]
[Thu Jul 30 08:44:28.030224 2026] [security2:error] [pid 2442317:tid 2442317] [client 144.172.105.5:52772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/naomiwinter/web.config/"] [unique_id "amsA3HGAxPd-P1XPGV_01QAAACs"]
[Thu Jul 30 08:44:28.030347 2026] [security2:error] [pid 2442317:tid 2442317] [client 144.172.105.5:52772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/naomiwinter/web.config/"] [unique_id "amsA3HGAxPd-P1XPGV_01QAAACs"]
[Thu Jul 30 08:44:28.073016 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/122.php
[Thu Jul 30 08:44:28.073062 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:28.258900 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/mds.php
[Thu Jul 30 08:44:28.258944 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:28.444881 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/zc-208.php
[Thu Jul 30 08:44:28.444929 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:28.610230 2026] [security2:error] [pid 2436774:tid 2436774] [client 136.85.57.207:44534] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsA3KSMDZheAhPUcwqWrgAAAAs"]
[Thu Jul 30 08:44:28.610396 2026] [security2:error] [pid 2436774:tid 2436774] [client 136.85.57.207:44534] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsA3KSMDZheAhPUcwqWrgAAAAs"]
[Thu Jul 30 08:44:28.610605 2026] [security2:error] [pid 2436774:tid 2436774] [client 136.85.57.207:44534] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3KSMDZheAhPUcwqWrgAAAAs"]
[Thu Jul 30 08:44:28.617368 2026] [security2:error] [pid 2442313:tid 2442313] [client 136.85.57.207:44538] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsA3I9B-ETJ1g3qplsDtQAAACI"]
[Thu Jul 30 08:44:28.617503 2026] [security2:error] [pid 2442313:tid 2442313] [client 136.85.57.207:44538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsA3I9B-ETJ1g3qplsDtQAAACI"]
[Thu Jul 30 08:44:28.617702 2026] [security2:error] [pid 2442313:tid 2442313] [client 136.85.57.207:44538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3I9B-ETJ1g3qplsDtQAAACI"]
[Thu Jul 30 08:44:28.620867 2026] [security2:error] [pid 2443650:tid 2443650] [client 136.85.57.207:44554] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsA3ClSlXxTXF_foE_OzwAAABQ"]
[Thu Jul 30 08:44:28.620991 2026] [security2:error] [pid 2443650:tid 2443650] [client 136.85.57.207:44554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsA3ClSlXxTXF_foE_OzwAAABQ"]
[Thu Jul 30 08:44:28.621188 2026] [security2:error] [pid 2443650:tid 2443650] [client 136.85.57.207:44554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3ClSlXxTXF_foE_OzwAAABQ"]
[Thu Jul 30 08:44:28.631268 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/sid4.php
[Thu Jul 30 08:44:28.631308 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:28.802402 2026] [ssl:error] [pid 2433372:tid 2433372] (70014)End of file found: [client 216.73.216.199:39491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:28.817154 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 08:44:29.003153 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wmore1.php
[Thu Jul 30 08:44:29.003202 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:29.190550 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/solo1.php
[Thu Jul 30 08:44:29.190626 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:29.192147 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:44636] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsA3Sux7rlqiNnQVD3JpQAAACQ"]
[Thu Jul 30 08:44:29.192281 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:44636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsA3Sux7rlqiNnQVD3JpQAAACQ"]
[Thu Jul 30 08:44:29.192466 2026] [security2:error] [pid 2428221:tid 2428221] [client 136.85.57.207:44636] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3Sux7rlqiNnQVD3JpQAAACQ"]
[Thu Jul 30 08:44:29.200497 2026] [security2:error] [pid 2443650:tid 2443650] [client 136.85.57.207:44620] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsA3SlSlXxTXF_foE_O0AAAABQ"]
[Thu Jul 30 08:44:29.200646 2026] [security2:error] [pid 2443650:tid 2443650] [client 136.85.57.207:44620] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsA3SlSlXxTXF_foE_O0AAAABQ"]
[Thu Jul 30 08:44:29.200824 2026] [security2:error] [pid 2443650:tid 2443650] [client 136.85.57.207:44620] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3SlSlXxTXF_foE_O0AAAABQ"]
[Thu Jul 30 08:44:29.377244 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 08:44:29.539047 2026] [ssl:error] [pid 2444653:tid 2444653] (EAI 2)Name or service not known: [client 144.76.19.72:53576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:29.539099 2026] [ssl:error] [pid 2444653:tid 2444653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:29.563423 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 08:44:29.749524 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/public
[Thu Jul 30 08:44:29.798146 2026] [security2:error] [pid 2444162:tid 2444162] [client 136.85.57.207:44702] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsA3QR6LYNTEH7ZE018cAAAABs"]
[Thu Jul 30 08:44:29.798292 2026] [security2:error] [pid 2444162:tid 2444162] [client 136.85.57.207:44702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsA3QR6LYNTEH7ZE018cAAAABs"]
[Thu Jul 30 08:44:29.798489 2026] [security2:error] [pid 2444162:tid 2444162] [client 136.85.57.207:44702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3QR6LYNTEH7ZE018cAAAABs"]
[Thu Jul 30 08:44:29.940706 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/output.php
[Thu Jul 30 08:44:29.940781 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:29.944439 2026] [ssl:error] [pid 2444653:tid 2444653] (EAI 2)Name or service not known: [client 144.76.19.72:34378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:29.944458 2026] [ssl:error] [pid 2444653:tid 2444653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:30.126849 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-file-120.php
[Thu Jul 30 08:44:30.126918 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:30.320468 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/special.php
[Thu Jul 30 08:44:30.320516 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:30.506591 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 08:44:30.506637 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:30.511180 2026] [ssl:error] [pid 2434482:tid 2434482] (70014)End of file found: [client 216.73.216.199:46070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:30.593413 2026] [security2:error] [pid 2444162:tid 2444162] [client 114.119.144.31:30603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~30,103/request_format~html"] [unique_id "amsA3gR6LYNTEH7ZE018cgAAABs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~30,102,103/request_format~html
[Thu Jul 30 08:44:30.692930 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/index.php
[Thu Jul 30 08:44:30.692980 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:30.769440 2026] [security2:error] [pid 2434521:tid 2434521] [client 136.85.57.207:44800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsA3svhc1RH8jo2q2XGgAAAAB0"]
[Thu Jul 30 08:44:30.769647 2026] [security2:error] [pid 2434521:tid 2434521] [client 136.85.57.207:44800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsA3svhc1RH8jo2q2XGgAAAAB0"]
[Thu Jul 30 08:44:30.769856 2026] [security2:error] [pid 2434521:tid 2434521] [client 136.85.57.207:44800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3svhc1RH8jo2q2XGgAAAAB0"]
[Thu Jul 30 08:44:30.883472 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/w1px.php
[Thu Jul 30 08:44:30.883520 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:31.069429 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/js.php
[Thu Jul 30 08:44:31.069476 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:31.179556 2026] [security2:error] [pid 2444008:tid 2444008] [client 136.85.57.207:44834] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsA3xikW3A5iDeMI_RxRQAAAAo"]
[Thu Jul 30 08:44:31.179757 2026] [security2:error] [pid 2444008:tid 2444008] [client 136.85.57.207:44834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsA3xikW3A5iDeMI_RxRQAAAAo"]
[Thu Jul 30 08:44:31.179970 2026] [security2:error] [pid 2444008:tid 2444008] [client 136.85.57.207:44834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3xikW3A5iDeMI_RxRQAAAAo"]
[Thu Jul 30 08:44:31.257390 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/core.php
[Thu Jul 30 08:44:31.257435 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:31.303915 2026] [security2:error] [pid 2434521:tid 2434521] [client 136.85.57.207:44846] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsA38vhc1RH8jo2q2XGgQAAAB0"]
[Thu Jul 30 08:44:31.304106 2026] [security2:error] [pid 2434521:tid 2434521] [client 136.85.57.207:44846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsA38vhc1RH8jo2q2XGgQAAAB0"]
[Thu Jul 30 08:44:31.304308 2026] [security2:error] [pid 2434521:tid 2434521] [client 136.85.57.207:44846] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA38vhc1RH8jo2q2XGgQAAAB0"]
[Thu Jul 30 08:44:31.445840 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/fffm.php
[Thu Jul 30 08:44:31.445887 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:31.449040 2026] [security2:error] [pid 2442320:tid 2442320] [client 136.85.57.207:44874] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsA3-IHV-9ldCSqFsjiugAAADE"]
[Thu Jul 30 08:44:31.449238 2026] [security2:error] [pid 2442320:tid 2442320] [client 136.85.57.207:44874] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsA3-IHV-9ldCSqFsjiugAAADE"]
[Thu Jul 30 08:44:31.449455 2026] [security2:error] [pid 2442320:tid 2442320] [client 136.85.57.207:44874] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3-IHV-9ldCSqFsjiugAAADE"]
[Thu Jul 30 08:44:31.568235 2026] [security2:error] [pid 2412502:tid 2412502] [client 114.119.144.31:60165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~30,103/request_format~html"] [unique_id "amsA34vFUIHlpYWGJ3FOkQAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~30,102,103/request_format~html
[Thu Jul 30 08:44:31.632457 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/ww.php
[Thu Jul 30 08:44:31.632501 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:31.818173 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/domvf.php
[Thu Jul 30 08:44:31.818219 2026] [access_compat:error] [pid 2443651:tid 2443651] [client 20.197.178.120:49040] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:31.864194 2026] [security2:error] [pid 2442319:tid 2442319] [client 136.85.57.207:44896] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amsA3yVOYN6a0v_SU0HVHgAAADA"]
[Thu Jul 30 08:44:31.864433 2026] [security2:error] [pid 2442319:tid 2442319] [client 136.85.57.207:44896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amsA3yVOYN6a0v_SU0HVHgAAADA"]
[Thu Jul 30 08:44:31.864655 2026] [security2:error] [pid 2442319:tid 2442319] [client 136.85.57.207:44896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA3yVOYN6a0v_SU0HVHgAAADA"]
[Thu Jul 30 08:44:32.002350 2026] [security2:error] [pid 2444163:tid 2444163] [client 136.85.57.207:44934] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsA4Macl7p4iipTg5UwzwAAABw"]
[Thu Jul 30 08:44:32.002523 2026] [security2:error] [pid 2444163:tid 2444163] [client 136.85.57.207:44934] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsA4Macl7p4iipTg5UwzwAAABw"]
[Thu Jul 30 08:44:32.002725 2026] [security2:error] [pid 2444163:tid 2444163] [client 136.85.57.207:44934] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4Macl7p4iipTg5UwzwAAABw"]
[Thu Jul 30 08:44:32.133267 2026] [security2:error] [pid 2444653:tid 2444653] [client 136.85.57.207:44950] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsA4B-uBmH09OZqo6_DqAAAACY"]
[Thu Jul 30 08:44:32.133488 2026] [security2:error] [pid 2444653:tid 2444653] [client 136.85.57.207:44950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsA4B-uBmH09OZqo6_DqAAAACY"]
[Thu Jul 30 08:44:32.133699 2026] [security2:error] [pid 2444653:tid 2444653] [client 136.85.57.207:44950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4B-uBmH09OZqo6_DqAAAACY"]
[Thu Jul 30 08:44:32.197496 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/echkm.php
[Thu Jul 30 08:44:32.197540 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:32.334240 2026] [core:crit] [pid 2429943:tid 2429943] (13)Permission denied: [client 52.167.144.195:38356] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 08:44:32.384573 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/ano.php
[Thu Jul 30 08:44:32.384619 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:32.571524 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/ah25.php
[Thu Jul 30 08:44:32.571582 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:32.762636 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/term.php
[Thu Jul 30 08:44:32.762684 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:32.801263 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.62:34716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:32.801904 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.62:34716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:32.823662 2026] [security2:error] [pid 2444727:tid 2444727] [client 136.85.57.207:45008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsA4JRYUO_DHvgHBn8SlgAAACk"]
[Thu Jul 30 08:44:32.823820 2026] [security2:error] [pid 2444727:tid 2444727] [client 136.85.57.207:45008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsA4JRYUO_DHvgHBn8SlgAAACk"]
[Thu Jul 30 08:44:32.824041 2026] [security2:error] [pid 2444727:tid 2444727] [client 136.85.57.207:45008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4JRYUO_DHvgHBn8SlgAAACk"]
[Thu Jul 30 08:44:32.967377 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/we.php
[Thu Jul 30 08:44:32.967422 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:32.997354 2026] [security2:error] [pid 2442280:tid 2442280] [client 136.85.57.207:45024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsA4HRdP7OZ9YeOmcWzbgAAAB8"]
[Thu Jul 30 08:44:32.997528 2026] [security2:error] [pid 2442280:tid 2442280] [client 136.85.57.207:45024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsA4HRdP7OZ9YeOmcWzbgAAAB8"]
[Thu Jul 30 08:44:32.997736 2026] [security2:error] [pid 2442280:tid 2442280] [client 136.85.57.207:45024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4HRdP7OZ9YeOmcWzbgAAAB8"]
[Thu Jul 30 08:44:33.001351 2026] [ssl:error] [pid 2444163:tid 2444163] (EAI 2)Name or service not known: [client 144.76.19.72:34392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:33.001387 2026] [ssl:error] [pid 2444163:tid 2444163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:33.056741 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:34396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:33.056764 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:33.154178 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/zip-onee.php
[Thu Jul 30 08:44:33.154222 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:33.245288 2026] [security2:error] [pid 2443609:tid 2443609] [client 136.85.57.207:45044] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amsA4YFgIwDFOKO5Koqm3gAAAAw"]
[Thu Jul 30 08:44:33.245547 2026] [security2:error] [pid 2443609:tid 2443609] [client 136.85.57.207:45044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amsA4YFgIwDFOKO5Koqm3gAAAAw"]
[Thu Jul 30 08:44:33.245778 2026] [security2:error] [pid 2443609:tid 2443609] [client 136.85.57.207:45044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4YFgIwDFOKO5Koqm3gAAAAw"]
[Thu Jul 30 08:44:33.312776 2026] [core:error] [pid 2434554:tid 2434554] (13)Permission denied: [client 216.73.216.199:48594] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty55/subsystem/ttyS2/custom_divisor
[Thu Jul 30 08:44:33.342739 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/il.php
[Thu Jul 30 08:44:33.342778 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:33.505083 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:45060] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsA4TIvZjZy0OZ0I2Uc1gAAACw"]
[Thu Jul 30 08:44:33.505226 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:45060] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsA4TIvZjZy0OZ0I2Uc1gAAACw"]
[Thu Jul 30 08:44:33.505397 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:45060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsA4TIvZjZy0OZ0I2Uc1gAAACw"]
[Thu Jul 30 08:44:33.505598 2026] [security2:error] [pid 2442318:tid 2442318] [client 136.85.57.207:45060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4TIvZjZy0OZ0I2Uc1gAAACw"]
[Thu Jul 30 08:44:33.530995 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/one.php
[Thu Jul 30 08:44:33.531036 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:33.717835 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/002.php
[Thu Jul 30 08:44:33.717878 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:33.904690 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/file1.php
[Thu Jul 30 08:44:33.904735 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:33.992970 2026] [authz_core:error] [pid 2443123:tid 2443123] [client 57.141.0.11:47086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:33.993599 2026] [authz_core:error] [pid 2443123:tid 2443123] [client 57.141.0.11:47086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:34.092434 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/akimet.php
[Thu Jul 30 08:44:34.092495 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:34.280292 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/reop3.php
[Thu Jul 30 08:44:34.280337 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:34.472606 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/h.php
[Thu Jul 30 08:44:34.472651 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:34.518589 2026] [autoindex:error] [pid 2434554:tid 2434554] (13)Permission denied: [client 216.73.216.199:48594] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/ecmh/
[Thu Jul 30 08:44:34.596126 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:45162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsA4rrcZaqk3Y1Q7SxN1gAAABM"]
[Thu Jul 30 08:44:34.596306 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:45162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsA4rrcZaqk3Y1Q7SxN1gAAABM"]
[Thu Jul 30 08:44:34.596499 2026] [security2:error] [pid 2442197:tid 2442197] [client 136.85.57.207:45162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4rrcZaqk3Y1Q7SxN1gAAABM"]
[Thu Jul 30 08:44:34.659604 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/2x.php
[Thu Jul 30 08:44:34.659645 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:34.817698 2026] [core:error] [pid 2434554:tid 2434554] (13)Permission denied: [client 216.73.216.199:48594] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:64/irq
[Thu Jul 30 08:44:34.846757 2026] [security2:error] [pid 2443123:tid 2443123] [client 136.85.57.207:45182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsA4kO0bH2kB1P91_xbsQAAAAA"]
[Thu Jul 30 08:44:34.846940 2026] [security2:error] [pid 2443123:tid 2443123] [client 136.85.57.207:45182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsA4kO0bH2kB1P91_xbsQAAAAA"]
[Thu Jul 30 08:44:34.847149 2026] [security2:error] [pid 2443123:tid 2443123] [client 136.85.57.207:45182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4kO0bH2kB1P91_xbsQAAAAA"]
[Thu Jul 30 08:44:34.855770 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/petx.php
[Thu Jul 30 08:44:34.855808 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:35.047151 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/zxz.php
[Thu Jul 30 08:44:35.047195 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:35.122841 2026] [security2:error] [pid 2443564:tid 2443564] [client 136.85.57.207:45204] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsA48RFWj6MvCNt4hcLcwAAAAQ"]
[Thu Jul 30 08:44:35.122984 2026] [security2:error] [pid 2443564:tid 2443564] [client 136.85.57.207:45204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsA48RFWj6MvCNt4hcLcwAAAAQ"]
[Thu Jul 30 08:44:35.123201 2026] [security2:error] [pid 2443564:tid 2443564] [client 136.85.57.207:45204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA48RFWj6MvCNt4hcLcwAAAAQ"]
[Thu Jul 30 08:44:35.131428 2026] [security2:error] [pid 2433372:tid 2433372] [client 136.85.57.207:45210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsA4_jm1KSmb5-UlXccZAAAAAU"]
[Thu Jul 30 08:44:35.131558 2026] [security2:error] [pid 2433372:tid 2433372] [client 136.85.57.207:45210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsA4_jm1KSmb5-UlXccZAAAAAU"]
[Thu Jul 30 08:44:35.131770 2026] [security2:error] [pid 2433372:tid 2433372] [client 136.85.57.207:45210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA4_jm1KSmb5-UlXccZAAAAAU"]
[Thu Jul 30 08:44:35.234107 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/2.php
[Thu Jul 30 08:44:35.234154 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:35.424881 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/op.php
[Thu Jul 30 08:44:35.424928 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:35.613176 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/a5.php
[Thu Jul 30 08:44:35.613223 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:35.803404 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/ws80.php
[Thu Jul 30 08:44:35.803447 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:35.990380 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/xa.php
[Thu Jul 30 08:44:35.990423 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:36.108466 2026] [ssl:error] [pid 2443150:tid 2443150] (EAI 2)Name or service not known: [client 144.76.19.72:34412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:36.108499 2026] [ssl:error] [pid 2443150:tid 2443150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:36.164504 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:34428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:36.164527 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:36.177693 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/asd67.php
[Thu Jul 30 08:44:36.177737 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:36.365083 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/bk.php
[Thu Jul 30 08:44:36.365130 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:36.552485 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-links.php
[Thu Jul 30 08:44:36.552528 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:36.739396 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/mosty.php
[Thu Jul 30 08:44:36.739442 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:36.744938 2026] [security2:error] [pid 2427778:tid 2427778] [client 136.85.57.207:45376] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amsA5C7K7U7WHMW7oLBkBQAAAEA"]
[Thu Jul 30 08:44:36.745178 2026] [security2:error] [pid 2427778:tid 2427778] [client 136.85.57.207:45376] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amsA5C7K7U7WHMW7oLBkBQAAAEA"]
[Thu Jul 30 08:44:36.745374 2026] [security2:error] [pid 2427778:tid 2427778] [client 136.85.57.207:45376] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5C7K7U7WHMW7oLBkBQAAAEA"]
[Thu Jul 30 08:44:36.788147 2026] [security2:error] [pid 2443652:tid 2443652] [client 136.85.57.207:45392] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amsA5Cc1s63f-KVHE6IGywAAABg"]
[Thu Jul 30 08:44:36.788356 2026] [security2:error] [pid 2443652:tid 2443652] [client 136.85.57.207:45392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amsA5Cc1s63f-KVHE6IGywAAABg"]
[Thu Jul 30 08:44:36.788534 2026] [security2:error] [pid 2443652:tid 2443652] [client 136.85.57.207:45392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5Cc1s63f-KVHE6IGywAAABg"]
[Thu Jul 30 08:44:36.926332 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/sump3.php
[Thu Jul 30 08:44:36.926376 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:37.031387 2026] [security2:error] [pid 2439307:tid 2439307] [client 136.85.57.207:45410] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amsA5a7VgoSpB9KHQ-zzYwAAAA8"]
[Thu Jul 30 08:44:37.031682 2026] [security2:error] [pid 2439307:tid 2439307] [client 136.85.57.207:45410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amsA5a7VgoSpB9KHQ-zzYwAAAA8"]
[Thu Jul 30 08:44:37.031894 2026] [security2:error] [pid 2439307:tid 2439307] [client 136.85.57.207:45410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5a7VgoSpB9KHQ-zzYwAAAA8"]
[Thu Jul 30 08:44:37.113489 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/first.php
[Thu Jul 30 08:44:37.113539 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:37.168693 2026] [security2:error] [pid 2440527:tid 2440527] [client 136.85.57.207:45412] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amsA5Ys_fNEg9Spw3SZcywAAABA"]
[Thu Jul 30 08:44:37.168957 2026] [security2:error] [pid 2440527:tid 2440527] [client 136.85.57.207:45412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amsA5Ys_fNEg9Spw3SZcywAAABA"]
[Thu Jul 30 08:44:37.169168 2026] [security2:error] [pid 2440527:tid 2440527] [client 136.85.57.207:45412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5Ys_fNEg9Spw3SZcywAAABA"]
[Thu Jul 30 08:44:37.302228 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/acp.php
[Thu Jul 30 08:44:37.302276 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:37.489159 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-good.php
[Thu Jul 30 08:44:37.489204 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:37.573613 2026] [core:error] [pid 2427778:tid 2427778] [client 66.249.64.170:57543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:37.573637 2026] [core:error] [pid 2427778:tid 2427778] [client 66.249.64.170:57543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:37.678028 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/daerl3.php
[Thu Jul 30 08:44:37.678086 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:37.697363 2026] [security2:error] [pid 2443652:tid 2443652] [client 136.85.57.207:45470] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsA5Sc1s63f-KVHE6IGzAAAABg"]
[Thu Jul 30 08:44:37.697637 2026] [security2:error] [pid 2443652:tid 2443652] [client 136.85.57.207:45470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsA5Sc1s63f-KVHE6IGzAAAABg"]
[Thu Jul 30 08:44:37.697821 2026] [security2:error] [pid 2443652:tid 2443652] [client 136.85.57.207:45470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5Sc1s63f-KVHE6IGzAAAABg"]
[Thu Jul 30 08:44:37.781380 2026] [security2:error] [pid 2443149:tid 2443149] [client 136.85.57.207:45478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amsA5ag6oiRpDVn2Lh_tHAAAAAE"]
[Thu Jul 30 08:44:37.781512 2026] [security2:error] [pid 2443149:tid 2443149] [client 136.85.57.207:45478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amsA5ag6oiRpDVn2Lh_tHAAAAAE"]
[Thu Jul 30 08:44:37.781708 2026] [security2:error] [pid 2443149:tid 2443149] [client 136.85.57.207:45478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5ag6oiRpDVn2Lh_tHAAAAAE"]
[Thu Jul 30 08:44:37.829529 2026] [ssl:error] [pid 2434554:tid 2434554] (70014)End of file found: [client 216.73.216.199:48594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:37.864822 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/php5.php
[Thu Jul 30 08:44:37.864866 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:38.051897 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/xoot.php
[Thu Jul 30 08:44:38.051941 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:38.239223 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/clxcc.php
[Thu Jul 30 08:44:38.239267 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:38.327112 2026] [authz_core:error] [pid 2443150:tid 2443150] [client 20.100.203.84:11059] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-includes/Requests/error_log
[Thu Jul 30 08:44:38.402847 2026] [security2:error] [pid 2427778:tid 2427778] [client 136.85.57.207:37618] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsA5i7K7U7WHMW7oLBkBwAAAEA"]
[Thu Jul 30 08:44:38.403014 2026] [security2:error] [pid 2427778:tid 2427778] [client 136.85.57.207:37618] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsA5i7K7U7WHMW7oLBkBwAAAEA"]
[Thu Jul 30 08:44:38.403211 2026] [security2:error] [pid 2427778:tid 2427778] [client 136.85.57.207:37618] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5i7K7U7WHMW7oLBkBwAAAEA"]
[Thu Jul 30 08:44:38.427959 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/ai.php
[Thu Jul 30 08:44:38.428000 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:38.614804 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/nwflm.php
[Thu Jul 30 08:44:38.614849 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:38.733983 2026] [autoindex:error] [pid 2433372:tid 2433372] (13)Permission denied: [client 216.73.216.199:14382] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/richfab/
[Thu Jul 30 08:44:38.810547 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/hypo.php
[Thu Jul 30 08:44:38.810606 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:38.876106 2026] [security2:error] [pid 2442029:tid 2442029] [client 136.85.57.207:37660] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "internal.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsA5mvBfo01F8bI-OiR0wAAABU"]
[Thu Jul 30 08:44:38.876384 2026] [security2:error] [pid 2442029:tid 2442029] [client 136.85.57.207:37660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsA5mvBfo01F8bI-OiR0wAAABU"]
[Thu Jul 30 08:44:38.876585 2026] [security2:error] [pid 2442029:tid 2442029] [client 136.85.57.207:37660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA5mvBfo01F8bI-OiR0wAAABU"]
[Thu Jul 30 08:44:38.997414 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/w3llscc.php
[Thu Jul 30 08:44:38.997465 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:39.195535 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/11PJcpMFsD8B.php
[Thu Jul 30 08:44:39.195596 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:39.220011 2026] [ssl:error] [pid 2443150:tid 2443150] (EAI 2)Name or service not known: [client 144.76.19.72:34440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:39.220036 2026] [ssl:error] [pid 2443150:tid 2443150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:39.277346 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:34450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:39.277372 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:39.383078 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 08:44:39.383122 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:39.571169 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/fnstall.php
[Thu Jul 30 08:44:39.571214 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:39.636220 2026] [ssl:error] [pid 2433372:tid 2433372] (70014)End of file found: [client 216.73.216.199:14382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:39.648996 2026] [authz_core:error] [pid 2443149:tid 2443149] [client 136.85.57.207:37756] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 08:44:39.759452 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/edorxrr.php
[Thu Jul 30 08:44:39.759492 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:39.886843 2026] [security2:error] [pid 2444692:tid 2444692] [client 136.85.57.207:37786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "internal.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsA54fk9sZfLw_Q7Kq3cAAAACE"]
[Thu Jul 30 08:44:39.887020 2026] [security2:error] [pid 2444692:tid 2444692] [client 136.85.57.207:37786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "internal.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsA54fk9sZfLw_Q7Kq3cAAAACE"]
[Thu Jul 30 08:44:39.887218 2026] [security2:error] [pid 2444692:tid 2444692] [client 136.85.57.207:37786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "internal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsA54fk9sZfLw_Q7Kq3cAAAACE"]
[Thu Jul 30 08:44:39.946932 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/setup.php
[Thu Jul 30 08:44:39.946973 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:40.133695 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/6.php
[Thu Jul 30 08:44:40.133738 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:40.320496 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/w3lls.php
[Thu Jul 30 08:44:40.320538 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:40.507292 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/99.php
[Thu Jul 30 08:44:40.507337 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:40.537463 2026] [core:error] [pid 2442029:tid 2442029] [client 66.249.64.171:39285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:40.537486 2026] [core:error] [pid 2442029:tid 2442029] [client 66.249.64.171:39285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:40.694108 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 08:44:40.880995 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/media.php
[Thu Jul 30 08:44:40.881042 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:41.069400 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 08:44:41.257694 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 08:44:41.257744 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:41.446444 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 08:44:41.446486 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:41.633303 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 08:44:41.820204 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 08:44:41.856638 2026] [core:error] [pid 2444729:tid 2444729] [client 66.249.64.170:59689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:41.856663 2026] [core:error] [pid 2444729:tid 2444729] [client 66.249.64.170:59689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:42.007118 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/memberfuns.php
[Thu Jul 30 08:44:42.007163 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:42.193976 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/orange3.php
[Thu Jul 30 08:44:42.194020 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:42.360578 2026] [ssl:error] [pid 2442279:tid 2442279] (EAI 2)Name or service not known: [client 144.76.19.72:34516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:42.360608 2026] [ssl:error] [pid 2442279:tid 2442279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:42.382577 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 08:44:42.417227 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:34528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:42.417249 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:42.572425 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-the.php
[Thu Jul 30 08:44:42.572471 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:42.759804 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/crgio.php
[Thu Jul 30 08:44:42.759848 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:42.946924 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/ws13.php
[Thu Jul 30 08:44:42.946966 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:43.133780 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/srontol.php
[Thu Jul 30 08:44:43.133825 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:43.322759 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/miru3.php
[Thu Jul 30 08:44:43.322799 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:43.514254 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/ingfo.php
[Thu Jul 30 08:44:43.514300 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:43.701967 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/ey5.php
[Thu Jul 30 08:44:43.702013 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:43.891208 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/fine.php
[Thu Jul 30 08:44:43.891249 2026] [access_compat:error] [pid 2443649:tid 2443649] [client 20.197.178.120:49151] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 08:44:45.319251 2026] [core:error] [pid 2444728:tid 2444728] [client 57.141.0.22:32948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:45.319289 2026] [core:error] [pid 2444728:tid 2444728] [client 57.141.0.22:32948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:45.476079 2026] [ssl:error] [pid 2442317:tid 2442317] (EAI 2)Name or service not known: [client 144.76.19.72:34534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:45.476153 2026] [ssl:error] [pid 2442317:tid 2442317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:45.533681 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:34542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:45.533711 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:45.963764 2026] [authz_core:error] [pid 2444728:tid 2444728] [client 57.141.0.29:31096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:45.964381 2026] [authz_core:error] [pid 2444728:tid 2444728] [client 57.141.0.29:31096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:47.718453 2026] [core:error] [pid 2443651:tid 2443651] (13)Permission denied: [client 216.73.216.199:48680] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS2/custom_divisor
[Thu Jul 30 08:44:48.586856 2026] [ssl:error] [pid 2444692:tid 2444692] (EAI 2)Name or service not known: [client 144.76.19.72:34554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:48.586893 2026] [ssl:error] [pid 2444692:tid 2444692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:48.642381 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:34558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:48.642406 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:48.849445 2026] [ssl:error] [pid 2443651:tid 2443651] (70014)End of file found: [client 216.73.216.199:48680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:49.154818 2026] [core:error] [pid 2412502:tid 2412502] (13)Permission denied: [client 216.73.216.199:51196] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/usb/drivers/usbhid/bind
[Thu Jul 30 08:44:50.358787 2026] [ssl:error] [pid 2412502:tid 2412502] (70014)End of file found: [client 216.73.216.199:51196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:50.857272 2026] [core:error] [pid 2434557:tid 2434557] (13)Permission denied: [client 216.73.216.199:46589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/console/subsystem/ttyS2/iomem_base
[Thu Jul 30 08:44:51.497968 2026] [core:error] [pid 2440527:tid 2440527] [client 66.249.64.170:43341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:51.497992 2026] [core:error] [pid 2440527:tid 2440527] [client 66.249.64.170:43341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:51.717364 2026] [ssl:error] [pid 2442317:tid 2442317] (EAI 2)Name or service not known: [client 144.76.19.72:53818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:51.717422 2026] [ssl:error] [pid 2442317:tid 2442317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:51.788440 2026] [ssl:error] [pid 2433372:tid 2433372] (EAI 2)Name or service not known: [client 144.76.19.72:53832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:51.788467 2026] [ssl:error] [pid 2433372:tid 2433372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:52.292941 2026] [authz_core:error] [pid 2433372:tid 2433372] [client 57.141.0.58:36140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:52.293580 2026] [authz_core:error] [pid 2433372:tid 2433372] [client 57.141.0.58:36140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:52.534440 2026] [core:error] [pid 2444163:tid 2444163] [client 66.249.64.170:64316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:52.534466 2026] [core:error] [pid 2444163:tid 2444163] [client 66.249.64.170:64316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:52.636526 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.22:51054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:44:52.637152 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.22:51054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:44:53.190461 2026] [core:error] [pid 2444163:tid 2444163] [client 51.116.238.8:15428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:53.190485 2026] [core:error] [pid 2444163:tid 2444163] [client 51.116.238.8:15428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:53.668635 2026] [ssl:error] [pid 2434557:tid 2434557] (70014)End of file found: [client 216.73.216.199:46589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:53.727843 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:53.727866 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.218357 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.218380 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.623160 2026] [core:error] [pid 2443649:tid 2443649] [client 51.116.238.8:15473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.623196 2026] [core:error] [pid 2443649:tid 2443649] [client 51.116.238.8:15473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.806163 2026] [core:error] [pid 2442320:tid 2442320] [client 51.116.238.8:15477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.806193 2026] [core:error] [pid 2442320:tid 2442320] [client 51.116.238.8:15477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.863526 2026] [ssl:error] [pid 2434554:tid 2434554] (EAI 2)Name or service not known: [client 144.76.19.72:53840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:54.863559 2026] [ssl:error] [pid 2434554:tid 2434554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:54.919908 2026] [ssl:error] [pid 2440527:tid 2440527] (EAI 2)Name or service not known: [client 144.76.19.72:53848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:54.919930 2026] [ssl:error] [pid 2440527:tid 2440527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:54.974256 2026] [core:error] [pid 2442320:tid 2442320] [client 51.116.238.8:15487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:54.974273 2026] [core:error] [pid 2442320:tid 2442320] [client 51.116.238.8:15487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.078728 2026] [core:error] [pid 2434554:tid 2434554] [client 51.116.238.8:15478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.078753 2026] [core:error] [pid 2434554:tid 2434554] [client 51.116.238.8:15478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.247685 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.247720 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.665694 2026] [core:error] [pid 2445495:tid 2445495] [client 51.116.238.8:15429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.665715 2026] [core:error] [pid 2445495:tid 2445495] [client 51.116.238.8:15429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.870802 2026] [core:error] [pid 2442320:tid 2442320] [client 51.116.238.8:15381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.870825 2026] [core:error] [pid 2442320:tid 2442320] [client 51.116.238.8:15381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.977001 2026] [core:error] [pid 2445495:tid 2445495] [client 51.116.238.8:15444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:55.977023 2026] [core:error] [pid 2445495:tid 2445495] [client 51.116.238.8:15444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.052841 2026] [core:error] [pid 2444692:tid 2444692] [client 51.116.238.8:15439] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.052890 2026] [core:error] [pid 2444692:tid 2444692] [client 51.116.238.8:15439] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.077866 2026] [ssl:error] [pid 2444163:tid 2444163] (70014)End of file found: [client 216.73.216.199:7325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:44:56.279751 2026] [core:error] [pid 2444692:tid 2444692] [client 51.116.238.8:15394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.279783 2026] [core:error] [pid 2444692:tid 2444692] [client 51.116.238.8:15394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.460650 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.460678 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.659524 2026] [core:error] [pid 2444414:tid 2444414] [client 51.116.238.8:15374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.659546 2026] [core:error] [pid 2444414:tid 2444414] [client 51.116.238.8:15374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.832347 2026] [core:error] [pid 2444693:tid 2444693] [client 51.116.238.8:15461] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.832376 2026] [core:error] [pid 2444693:tid 2444693] [client 51.116.238.8:15461] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.996859 2026] [core:error] [pid 2444414:tid 2444414] [client 51.116.238.8:15435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:56.996881 2026] [core:error] [pid 2444414:tid 2444414] [client 51.116.238.8:15435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:57.389717 2026] [core:error] [pid 2444414:tid 2444414] [client 51.116.238.8:15426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:57.389739 2026] [core:error] [pid 2444414:tid 2444414] [client 51.116.238.8:15426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:57.798943 2026] [core:error] [pid 2442319:tid 2442319] [client 51.116.238.8:15446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:57.798973 2026] [core:error] [pid 2442319:tid 2442319] [client 51.116.238.8:15446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:57.972863 2026] [ssl:error] [pid 2445626:tid 2445626] (EAI 2)Name or service not known: [client 144.76.19.72:53864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:57.972898 2026] [ssl:error] [pid 2445626:tid 2445626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:58.024895 2026] [ssl:error] [pid 2442316:tid 2442316] (EAI 2)Name or service not known: [client 144.76.19.72:53868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:44:58.024920 2026] [ssl:error] [pid 2442316:tid 2442316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:44:58.082134 2026] [core:error] [pid 2442319:tid 2442319] [client 51.116.238.8:15376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:58.082159 2026] [core:error] [pid 2442319:tid 2442319] [client 51.116.238.8:15376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:58.851629 2026] [core:error] [pid 2440527:tid 2440527] [client 51.116.238.8:11736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:58.851653 2026] [core:error] [pid 2440527:tid 2440527] [client 51.116.238.8:11736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:59.548194 2026] [core:error] [pid 2440527:tid 2440527] [client 51.116.238.8:11714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:59.548221 2026] [core:error] [pid 2440527:tid 2440527] [client 51.116.238.8:11714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:59.750411 2026] [core:error] [pid 2444693:tid 2444693] [client 51.116.238.8:15467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:44:59.750431 2026] [core:error] [pid 2444693:tid 2444693] [client 51.116.238.8:15467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:00.116478 2026] [core:error] [pid 2434482:tid 2434482] [client 51.116.238.8:15361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:00.116515 2026] [core:error] [pid 2434482:tid 2434482] [client 51.116.238.8:15361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:00.376309 2026] [core:error] [pid 2442317:tid 2442317] [client 51.116.238.8:15443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:00.376345 2026] [core:error] [pid 2442317:tid 2442317] [client 51.116.238.8:15443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:00.731809 2026] [core:error] [pid 2442279:tid 2442279] [client 51.116.238.8:15449] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:00.731841 2026] [core:error] [pid 2442279:tid 2442279] [client 51.116.238.8:15449] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.066814 2026] [ssl:error] [pid 2444730:tid 2444730] (70014)End of file found: [client 216.73.216.199:37479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:01.078922 2026] [ssl:error] [pid 2444728:tid 2444728] (EAI 2)Name or service not known: [client 144.76.19.72:48070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:01.078951 2026] [ssl:error] [pid 2444728:tid 2444728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:01.135393 2026] [ssl:error] [pid 2445627:tid 2445627] (EAI 2)Name or service not known: [client 144.76.19.72:48078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:01.135427 2026] [ssl:error] [pid 2445627:tid 2445627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:01.199925 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.199955 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.370215 2026] [core:error] [pid 2434557:tid 2434557] [client 57.141.0.6:35626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.370238 2026] [core:error] [pid 2434557:tid 2434557] [client 57.141.0.6:35626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.485913 2026] [core:error] [pid 2444728:tid 2444728] [client 51.116.238.8:15406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.485937 2026] [core:error] [pid 2444728:tid 2444728] [client 51.116.238.8:15406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.754919 2026] [core:error] [pid 2434557:tid 2434557] [client 51.116.238.8:15424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:01.754941 2026] [core:error] [pid 2434557:tid 2434557] [client 51.116.238.8:15424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:02.074096 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.31:62476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:02.074714 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.31:62476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:02.172412 2026] [core:error] [pid 2445495:tid 2445495] [client 66.249.66.66:35441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:02.172434 2026] [core:error] [pid 2445495:tid 2445495] [client 66.249.66.66:35441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:02.289134 2026] [core:error] [pid 2442317:tid 2442317] [client 51.116.238.8:15391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:02.289155 2026] [core:error] [pid 2442317:tid 2442317] [client 51.116.238.8:15391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:02.769392 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.27:64942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:02.770039 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 57.141.0.27:64942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:02.969456 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:02.969485 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:03.161883 2026] [authz_core:error] [pid 2443609:tid 2443609] [client 57.141.0.52:61228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:03.162857 2026] [authz_core:error] [pid 2443609:tid 2443609] [client 57.141.0.52:61228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:03.304168 2026] [core:error] [pid 2442319:tid 2442319] (13)Permission denied: [client 216.73.216.199:44026] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/cron.d/cpanel_autossl
[Thu Jul 30 08:45:03.568908 2026] [security2:error] [pid 2442279:tid 2442279] [client 143.105.198.143:35157] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsA_4ZYa2K4NS3H_8urXwAAAB4"]
[Thu Jul 30 08:45:03.568960 2026] [security2:error] [pid 2442279:tid 2442279] [client 143.105.198.143:35157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsA_4ZYa2K4NS3H_8urXwAAAB4"]
[Thu Jul 30 08:45:03.569260 2026] [security2:error] [pid 2442279:tid 2442279] [client 143.105.198.143:35157] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsA_4ZYa2K4NS3H_8urXwAAAB4"]
[Thu Jul 30 08:45:03.706602 2026] [core:error] [pid 2434557:tid 2434557] [client 66.249.66.169:50549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:03.706631 2026] [core:error] [pid 2434557:tid 2434557] [client 66.249.66.169:50549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:03.761212 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:03.761241 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:03.840537 2026] [security2:error] [pid 2443609:tid 2443609] [client 130.12.182.208:63295] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd cgi.force_redirect=0 \\\\xadd disable_functions="" \\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd cgi.force_redirect=0 \\x5c\\x5cxadd disable_functions=\\x22\\x22 \\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "saliency.co.uk"] [uri "/php-cgi/php-cgi.exe"] [unique_id "amsA_4FgIwDFOKO5Koqm8wAAAAw"]
[Thu Jul 30 08:45:03.840607 2026] [security2:error] [pid 2443609:tid 2443609] [client 130.12.182.208:63295] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "saliency.co.uk"] [uri "/php-cgi/php-cgi.exe"] [unique_id "amsA_4FgIwDFOKO5Koqm8wAAAAw"]
[Thu Jul 30 08:45:03.840979 2026] [security2:error] [pid 2443609:tid 2443609] [client 130.12.182.208:63295] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/php-cgi/php-cgi.exe"] [unique_id "amsA_4FgIwDFOKO5Koqm8wAAAAw"]
[Thu Jul 30 08:45:03.841256 2026] [security2:error] [pid 2443609:tid 2443609] [client 130.12.182.208:63295] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=10,HTTP=0,SESS=0): PHP Injection Attack: I/O Stream Found"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/php-cgi/php-cgi.exe"] [unique_id "amsA_4FgIwDFOKO5Koqm8wAAAAw"]
[Thu Jul 30 08:45:04.065086 2026] [core:error] [pid 2443149:tid 2443149] [client 66.249.64.172:52026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:04.065116 2026] [core:error] [pid 2443149:tid 2443149] [client 66.249.64.172:52026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:04.107744 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15419] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:04.107769 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15419] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:04.190375 2026] [ssl:error] [pid 2443609:tid 2443609] (EAI 2)Name or service not known: [client 144.76.19.72:48086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:04.190403 2026] [ssl:error] [pid 2443609:tid 2443609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:04.241830 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:48102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:04.241851 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:04.305415 2026] [security2:error] [pid 2443149:tid 2443149] [client 130.12.182.208:63335] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%%%2%e/.%%%2%e/.%%%2%e/.%%%2%e/.%%%2%e/bin/sh"] [unique_id "amsBAKg6oiRpDVn2Lh_tKwAAAAE"]
[Thu Jul 30 08:45:04.305903 2026] [cgi:error] [pid 2443149:tid 2443149] [client 130.12.182.208:63335] AH02811: stderr from /home/salienc/public_html/cgi-bin/.%%%2%e: script not found or unable to stat
[Thu Jul 30 08:45:04.553217 2026] [security2:error] [pid 2442279:tid 2442279] [client 130.12.182.208:63348] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /cgi-bin/../../../../../../../bin/sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh"] [unique_id "amsBAIZYa2K4NS3H_8urYQAAAB4"]
[Thu Jul 30 08:45:04.553281 2026] [security2:error] [pid 2442279:tid 2442279] [client 130.12.182.208:63348] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /cgi-bin/../../../../../../../bin/sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh"] [unique_id "amsBAIZYa2K4NS3H_8urYQAAAB4"]
[Thu Jul 30 08:45:04.553478 2026] [security2:error] [pid 2442279:tid 2442279] [client 130.12.182.208:63348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh"] [unique_id "amsBAIZYa2K4NS3H_8urYQAAAB4"]
[Thu Jul 30 08:45:04.553776 2026] [security2:error] [pid 2442279:tid 2442279] [client 130.12.182.208:63348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh"] [unique_id "amsBAIZYa2K4NS3H_8urYQAAAB4"]
[Thu Jul 30 08:45:04.703979 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:04.703999 2026] [core:error] [pid 2427778:tid 2427778] [client 51.116.238.8:15388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:04.809557 2026] [ssl:error] [pid 2442319:tid 2442319] (70014)End of file found: [client 216.73.216.199:44026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:05.040812 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63395] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /cgi-bin/../../../../../bin/bash"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/bin/bash"] [unique_id "amsBAfjm1KSmb5-UlXcceQAAAAU"]
[Thu Jul 30 08:45:05.040853 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63395] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /cgi-bin/../../../../../bin/bash"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/bin/bash"] [unique_id "amsBAfjm1KSmb5-UlXcceQAAAAU"]
[Thu Jul 30 08:45:05.040946 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63395] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/bin/bash"] [unique_id "amsBAfjm1KSmb5-UlXcceQAAAAU"]
[Thu Jul 30 08:45:05.041196 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63395] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/bin/bash"] [unique_id "amsBAfjm1KSmb5-UlXcceQAAAAU"]
[Thu Jul 30 08:45:05.229234 2026] [core:error] [pid 2442279:tid 2442279] [client 51.116.238.8:15363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:05.229261 2026] [core:error] [pid 2442279:tid 2442279] [client 51.116.238.8:15363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:05.293626 2026] [security2:error] [pid 2442316:tid 2442316] [client 130.12.182.208:63417] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /cgi-bin/../../../../../../../bin/sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] [unique_id "amsBAevI7r2E36Qe8qA3pAAAACg"]
[Thu Jul 30 08:45:05.293676 2026] [security2:error] [pid 2442316:tid 2442316] [client 130.12.182.208:63417] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /cgi-bin/../../../../../../../bin/sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] [unique_id "amsBAevI7r2E36Qe8qA3pAAAACg"]
[Thu Jul 30 08:45:05.293789 2026] [security2:error] [pid 2442316:tid 2442316] [client 130.12.182.208:63417] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] [unique_id "amsBAevI7r2E36Qe8qA3pAAAACg"]
[Thu Jul 30 08:45:05.294019 2026] [security2:error] [pid 2442316:tid 2442316] [client 130.12.182.208:63417] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] [unique_id "amsBAevI7r2E36Qe8qA3pAAAACg"]
[Thu Jul 30 08:45:05.485100 2026] [security2:error] [pid 2443649:tid 2443649] [client 101.32.205.66:24889] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBAYUe8E_kb04oFpi2fgAAABI"]
[Thu Jul 30 08:45:05.485152 2026] [security2:error] [pid 2443649:tid 2443649] [client 101.32.205.66:24889] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBAYUe8E_kb04oFpi2fgAAABI"]
[Thu Jul 30 08:45:05.485428 2026] [security2:error] [pid 2443649:tid 2443649] [client 101.32.205.66:24889] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBAYUe8E_kb04oFpi2fgAAABI"]
[Thu Jul 30 08:45:05.681950 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/.env"] [unique_id "amsBAfjm1KSmb5-UlXccegAAAAU"]
[Thu Jul 30 08:45:05.682090 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/.env"] [unique_id "amsBAfjm1KSmb5-UlXccegAAAAU"]
[Thu Jul 30 08:45:05.682305 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/.env"] [unique_id "amsBAfjm1KSmb5-UlXccegAAAAU"]
[Thu Jul 30 08:45:05.823920 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/.env.production"] [unique_id "amsBAfjm1KSmb5-UlXccewAAAAU"]
[Thu Jul 30 08:45:05.824040 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/.env.production"] [unique_id "amsBAfjm1KSmb5-UlXccewAAAAU"]
[Thu Jul 30 08:45:05.824259 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/.env.production"] [unique_id "amsBAfjm1KSmb5-UlXccewAAAAU"]
[Thu Jul 30 08:45:06.008014 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/application/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfAAAAAU"]
[Thu Jul 30 08:45:06.008170 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/application/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfAAAAAU"]
[Thu Jul 30 08:45:06.008385 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/application/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfAAAAAU"]
[Thu Jul 30 08:45:06.150059 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/prod/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfQAAAAU"]
[Thu Jul 30 08:45:06.150210 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/prod/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfQAAAAU"]
[Thu Jul 30 08:45:06.150420 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/prod/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfQAAAAU"]
[Thu Jul 30 08:45:06.203359 2026] [core:error] [pid 2445626:tid 2445626] [client 51.116.238.8:15472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:06.203388 2026] [core:error] [pid 2445626:tid 2445626] [client 51.116.238.8:15472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:06.331044 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/.env.save"] [unique_id "amsBAvjm1KSmb5-UlXccfgAAAAU"]
[Thu Jul 30 08:45:06.331177 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/.env.save"] [unique_id "amsBAvjm1KSmb5-UlXccfgAAAAU"]
[Thu Jul 30 08:45:06.331375 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/.env.save"] [unique_id "amsBAvjm1KSmb5-UlXccfgAAAAU"]
[Thu Jul 30 08:45:06.475201 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/beta/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfwAAAAU"]
[Thu Jul 30 08:45:06.475327 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/beta/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfwAAAAU"]
[Thu Jul 30 08:45:06.475531 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/beta/.env"] [unique_id "amsBAvjm1KSmb5-UlXccfwAAAAU"]
[Thu Jul 30 08:45:06.642859 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/admin/.env"] [unique_id "amsBAvjm1KSmb5-UlXccgAAAAAU"]
[Thu Jul 30 08:45:06.642976 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/admin/.env"] [unique_id "amsBAvjm1KSmb5-UlXccgAAAAAU"]
[Thu Jul 30 08:45:06.643191 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/admin/.env"] [unique_id "amsBAvjm1KSmb5-UlXccgAAAAAU"]
[Thu Jul 30 08:45:06.684247 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.46:20864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:06.684859 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.46:20864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:06.716248 2026] [authz_core:error] [pid 2411149:tid 2411149] [client 57.141.0.19:62344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:06.716861 2026] [authz_core:error] [pid 2411149:tid 2411149] [client 57.141.0.19:62344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:06.843930 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/app/.env"] [unique_id "amsBAvjm1KSmb5-UlXccgQAAAAU"]
[Thu Jul 30 08:45:06.844036 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/app/.env"] [unique_id "amsBAvjm1KSmb5-UlXccgQAAAAU"]
[Thu Jul 30 08:45:06.844243 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/app/.env"] [unique_id "amsBAvjm1KSmb5-UlXccgQAAAAU"]
[Thu Jul 30 08:45:06.991764 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/config/.env"] [unique_id "amsBAvjm1KSmb5-UlXccggAAAAU"]
[Thu Jul 30 08:45:06.991889 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/config/.env"] [unique_id "amsBAvjm1KSmb5-UlXccggAAAAU"]
[Thu Jul 30 08:45:06.992116 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/config/.env"] [unique_id "amsBAvjm1KSmb5-UlXccggAAAAU"]
[Thu Jul 30 08:45:07.020119 2026] [authz_core:error] [pid 2443149:tid 2443149] [client 66.249.66.33:63686] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:45:07.022841 2026] [authz_core:error] [pid 2443149:tid 2443149] [client 66.249.66.33:63686] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:45:07.134816 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/api/.env"] [unique_id "amsBA_jm1KSmb5-UlXccgwAAAAU"]
[Thu Jul 30 08:45:07.134942 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/api/.env"] [unique_id "amsBA_jm1KSmb5-UlXccgwAAAAU"]
[Thu Jul 30 08:45:07.135160 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/api/.env"] [unique_id "amsBA_jm1KSmb5-UlXccgwAAAAU"]
[Thu Jul 30 08:45:07.183082 2026] [access_compat:error] [pid 2444163:tid 2444163] [client 104.22.17.70:12315] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 08:45:07.200089 2026] [core:error] [pid 2429943:tid 2429943] [client 51.116.238.8:15457] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.200125 2026] [core:error] [pid 2429943:tid 2429943] [client 51.116.238.8:15457] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.276807 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/laravel/.env"] [unique_id "amsBA_jm1KSmb5-UlXcchAAAAAU"]
[Thu Jul 30 08:45:07.276952 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/laravel/.env"] [unique_id "amsBA_jm1KSmb5-UlXcchAAAAAU"]
[Thu Jul 30 08:45:07.277177 2026] [security2:error] [pid 2433372:tid 2433372] [client 130.12.182.208:63453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/laravel/.env"] [unique_id "amsBA_jm1KSmb5-UlXcchAAAAAU"]
[Thu Jul 30 08:45:07.298557 2026] [ssl:error] [pid 2444729:tid 2444729] (EAI 2)Name or service not known: [client 144.76.19.72:48118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:07.298610 2026] [ssl:error] [pid 2444729:tid 2444729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:07.304482 2026] [core:error] [pid 2443649:tid 2443649] [client 66.249.64.170:63142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.304510 2026] [core:error] [pid 2443649:tid 2443649] [client 66.249.64.170:63142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.352191 2026] [ssl:error] [pid 2429943:tid 2429943] (EAI 2)Name or service not known: [client 144.76.19.72:48124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:07.352231 2026] [ssl:error] [pid 2429943:tid 2429943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:07.364497 2026] [core:error] [pid 2411149:tid 2411149] [client 66.249.64.171:47695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.364524 2026] [core:error] [pid 2411149:tid 2411149] [client 66.249.64.171:47695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.519872 2026] [core:error] [pid 2444729:tid 2444729] [client 51.116.238.8:15441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.519894 2026] [core:error] [pid 2444729:tid 2444729] [client 51.116.238.8:15441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.822119 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: //pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/pms"] [unique_id "amsBAygDZvJnuOkhDtU4jwAAACU"]
[Thu Jul 30 08:45:07.822170 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/pms"] [unique_id "amsBAygDZvJnuOkhDtU4jwAAACU"]
[Thu Jul 30 08:45:07.822197 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "saliency.co.uk"] [uri "/pms"] [unique_id "amsBAygDZvJnuOkhDtU4jwAAACU"]
[Thu Jul 30 08:45:07.822805 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/pms"] [unique_id "amsBAygDZvJnuOkhDtU4jwAAACU"]
[Thu Jul 30 08:45:07.823028 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/pms"] [unique_id "amsBAygDZvJnuOkhDtU4jwAAACU"]
[Thu Jul 30 08:45:07.829784 2026] [core:error] [pid 2411149:tid 2411149] [client 51.116.238.8:11738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:07.829820 2026] [core:error] [pid 2411149:tid 2411149] [client 51.116.238.8:11738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.002001 2026] [core:error] [pid 2446205:tid 2446205] [client 51.116.238.8:15470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.002076 2026] [core:error] [pid 2446205:tid 2446205] [client 51.116.238.8:15470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.096096 2026] [authz_core:error] [pid 2433372:tid 2433372] [client 57.141.0.20:28208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:08.096698 2026] [authz_core:error] [pid 2433372:tid 2433372] [client 57.141.0.20:28208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:08.143604 2026] [core:error] [pid 2443651:tid 2443651] [client 51.116.238.8:11761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.143639 2026] [core:error] [pid 2443651:tid 2443651] [client 51.116.238.8:11761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.263616 2026] [core:error] [pid 2444728:tid 2444728] [client 51.116.238.8:15479] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.263639 2026] [core:error] [pid 2444728:tid 2444728] [client 51.116.238.8:15479] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.425911 2026] [core:error] [pid 2445626:tid 2445626] (13)Permission denied: [client 216.73.216.199:9412] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:02/subsystem/uevent
[Thu Jul 30 08:45:08.743768 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.743788 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:08.912988 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/.git/config"] [unique_id "amsBBCgDZvJnuOkhDtU4lQAAACU"]
[Thu Jul 30 08:45:08.913184 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/.git/config"] [unique_id "amsBBCgDZvJnuOkhDtU4lQAAACU"]
[Thu Jul 30 08:45:08.913429 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/.git/config"] [unique_id "amsBBCgDZvJnuOkhDtU4lQAAACU"]
[Thu Jul 30 08:45:09.053959 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/admin/.git/config"] [unique_id "amsBBSgDZvJnuOkhDtU4lgAAACU"]
[Thu Jul 30 08:45:09.054129 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/admin/.git/config"] [unique_id "amsBBSgDZvJnuOkhDtU4lgAAACU"]
[Thu Jul 30 08:45:09.054385 2026] [security2:error] [pid 2429943:tid 2429943] [client 130.12.182.208:63660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/admin/.git/config"] [unique_id "amsBBSgDZvJnuOkhDtU4lgAAACU"]
[Thu Jul 30 08:45:09.452554 2026] [security2:error] [pid 2440527:tid 2440527] [client 101.32.205.66:35609] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBBYs_fNEg9Spw3SZc3gAAABA"]
[Thu Jul 30 08:45:09.452627 2026] [security2:error] [pid 2440527:tid 2440527] [client 101.32.205.66:35609] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBBYs_fNEg9Spw3SZc3gAAABA"]
[Thu Jul 30 08:45:09.452852 2026] [security2:error] [pid 2440527:tid 2440527] [client 101.32.205.66:35609] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBBYs_fNEg9Spw3SZc3gAAABA"]
[Thu Jul 30 08:45:09.537503 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 66.249.66.35:34821] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:45:09.540192 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 66.249.66.35:34821] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:45:09.629796 2026] [ssl:error] [pid 2445626:tid 2445626] (70014)End of file found: [client 216.73.216.199:9412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:10.208514 2026] [core:error] [pid 2442029:tid 2442029] [client 51.116.238.8:15373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:10.208538 2026] [core:error] [pid 2442029:tid 2442029] [client 51.116.238.8:15373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:10.432999 2026] [ssl:error] [pid 2443609:tid 2443609] (EAI 2)Name or service not known: [client 144.76.19.72:53670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:10.433023 2026] [ssl:error] [pid 2443609:tid 2443609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:10.488710 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:53678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:10.488730 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:10.534129 2026] [core:error] [pid 2446099:tid 2446099] (13)Permission denied: [client 216.73.216.199:64473] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/destroy_by_rcu
[Thu Jul 30 08:45:10.795608 2026] [security2:error] [pid 2434553:tid 2434553] [client 168.144.151.151:47624] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsBBnouG-D3ozJDpEHWaQAAAC0"]
[Thu Jul 30 08:45:10.836718 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:10.836742 2026] [core:error] [pid 2443609:tid 2443609] [client 51.116.238.8:15400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:11.705711 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:11.705738 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:15463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:12.498937 2026] [core:error] [pid 2440848:tid 2440848] [client 51.116.238.8:15458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:12.498971 2026] [core:error] [pid 2440848:tid 2440848] [client 51.116.238.8:15458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:12.877224 2026] [core:error] [pid 2444692:tid 2444692] [client 51.116.238.8:11742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:12.877250 2026] [core:error] [pid 2444692:tid 2444692] [client 51.116.238.8:11742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:12.881476 2026] [authz_core:error] [pid 2444693:tid 2444693] [client 57.141.0.43:64408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:12.882100 2026] [authz_core:error] [pid 2444693:tid 2444693] [client 57.141.0.43:64408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:13.017751 2026] [authz_core:error] [pid 2434554:tid 2434554] [client 57.141.0.4:39918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:13.018367 2026] [authz_core:error] [pid 2434554:tid 2434554] [client 57.141.0.4:39918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:13.180013 2026] [core:error] [pid 2439307:tid 2439307] [client 51.116.238.8:15362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:13.180041 2026] [core:error] [pid 2439307:tid 2439307] [client 51.116.238.8:15362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:13.409910 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:11721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:13.409944 2026] [core:error] [pid 2433372:tid 2433372] [client 51.116.238.8:11721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:13.544477 2026] [ssl:error] [pid 2440848:tid 2440848] (EAI 2)Name or service not known: [client 144.76.19.72:53680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:13.544516 2026] [ssl:error] [pid 2440848:tid 2440848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:13.597297 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:53694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:13.597322 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:13.817803 2026] [core:error] [pid 2444730:tid 2444730] [client 66.249.64.171:47397] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:13.817821 2026] [core:error] [pid 2444730:tid 2444730] [client 66.249.64.171:47397] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:13.836944 2026] [core:error] [pid 2440848:tid 2440848] [client 51.116.238.8:11734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:13.836972 2026] [core:error] [pid 2440848:tid 2440848] [client 51.116.238.8:11734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:14.270188 2026] [core:error] [pid 2444163:tid 2444163] [client 51.116.238.8:15451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:14.270212 2026] [core:error] [pid 2444163:tid 2444163] [client 51.116.238.8:15451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:14.674390 2026] [authz_core:error] [pid 2444730:tid 2444730] [client 57.141.0.47:24814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:14.675000 2026] [authz_core:error] [pid 2444730:tid 2444730] [client 57.141.0.47:24814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:14.956600 2026] [ssl:error] [pid 2442319:tid 2442319] (70014)End of file found: [client 216.73.216.199:2319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:15.939829 2026] [authz_core:error] [pid 2444730:tid 2444730] [client 57.141.0.62:41848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:15.940451 2026] [authz_core:error] [pid 2444730:tid 2444730] [client 57.141.0.62:41848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:16.467015 2026] [security2:error] [pid 2427778:tid 2427778] [client 20.240.254.167:42399] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/wp-config.php"] [unique_id "amsBDC7K7U7WHMW7oLBk4AAAAEA"]
[Thu Jul 30 08:45:16.467195 2026] [security2:error] [pid 2427778:tid 2427778] [client 20.240.254.167:42399] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/wp-config.php"] [unique_id "amsBDC7K7U7WHMW7oLBk4AAAAEA"]
[Thu Jul 30 08:45:16.467431 2026] [security2:error] [pid 2427778:tid 2427778] [client 20.240.254.167:42399] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/wp-config.php"] [unique_id "amsBDC7K7U7WHMW7oLBk4AAAAEA"]
[Thu Jul 30 08:45:16.651744 2026] [ssl:error] [pid 2443651:tid 2443651] (EAI 2)Name or service not known: [client 144.76.19.72:53696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:16.651781 2026] [ssl:error] [pid 2443651:tid 2443651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:16.705162 2026] [ssl:error] [pid 2436774:tid 2436774] (EAI 2)Name or service not known: [client 144.76.19.72:53710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:16.705187 2026] [ssl:error] [pid 2436774:tid 2436774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:17.067153 2026] [core:error] [pid 2446099:tid 2446099] (13)Permission denied: [client 216.73.216.199:64473] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/destroy_by_rcu
[Thu Jul 30 08:45:17.927500 2026] [authz_core:error] [pid 2427778:tid 2427778] [client 57.141.0.11:57554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:17.928149 2026] [authz_core:error] [pid 2427778:tid 2427778] [client 57.141.0.11:57554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:18.521991 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.65:55760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:18.522624 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 57.141.0.65:55760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:19.356177 2026] [authz_core:error] [pid 2444693:tid 2444693] [client 57.141.0.61:38366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:19.356808 2026] [authz_core:error] [pid 2444693:tid 2444693] [client 57.141.0.61:38366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:19.483432 2026] [core:error] [pid 2446099:tid 2446099] (13)Permission denied: [client 216.73.216.199:64473] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/dw-apb-uart/unbind
[Thu Jul 30 08:45:19.757709 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:39068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:19.757752 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:19.813428 2026] [ssl:error] [pid 2443149:tid 2443149] (EAI 2)Name or service not known: [client 144.76.19.72:39078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:19.813466 2026] [ssl:error] [pid 2443149:tid 2443149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:20.988596 2026] [ssl:error] [pid 2446099:tid 2446099] (70014)End of file found: [client 216.73.216.199:64473] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:21.586086 2026] [core:error] [pid 2444163:tid 2444163] (13)Permission denied: [client 216.73.216.199:58218] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:0e/subsystem/uevent
[Thu Jul 30 08:45:22.299134 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.63:28268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:22.299771 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.63:28268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:22.894184 2026] [ssl:error] [pid 2446266:tid 2446266] (EAI 2)Name or service not known: [client 144.76.19.72:39080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:22.894228 2026] [ssl:error] [pid 2446266:tid 2446266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:22.947531 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:39096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:22.947579 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:23.695367 2026] [ssl:error] [pid 2444163:tid 2444163] (70014)End of file found: [client 216.73.216.199:58218] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:24.121410 2026] [core:error] [pid 2444728:tid 2444728] [client 66.249.64.170:53699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:24.121438 2026] [core:error] [pid 2444728:tid 2444728] [client 66.249.64.170:53699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:24.124603 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.68:32212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:24.125225 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.68:32212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:24.280152 2026] [security2:error] [pid 2443149:tid 2443149] [client 20.240.254.167:42396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amsBFKg6oiRpDVn2Lh_tYwAAAAE"]
[Thu Jul 30 08:45:24.280411 2026] [security2:error] [pid 2443149:tid 2443149] [client 20.240.254.167:42396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amsBFKg6oiRpDVn2Lh_tYwAAAAE"]
[Thu Jul 30 08:45:24.280675 2026] [security2:error] [pid 2443149:tid 2443149] [client 20.240.254.167:42396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amsBFKg6oiRpDVn2Lh_tYwAAAAE"]
[Thu Jul 30 08:45:24.295265 2026] [ssl:error] [pid 2444127:tid 2444127] (70014)End of file found: [client 216.73.216.199:29429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:26.012533 2026] [ssl:error] [pid 2443610:tid 2443610] (EAI 2)Name or service not known: [client 144.76.19.72:39106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:26.012585 2026] [ssl:error] [pid 2443610:tid 2443610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:26.068505 2026] [ssl:error] [pid 2443150:tid 2443150] (EAI 2)Name or service not known: [client 144.76.19.72:39116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:26.068532 2026] [ssl:error] [pid 2443150:tid 2443150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:27.198934 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.26:55090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:27.199557 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.26:55090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:27.351091 2026] [cgi:error] [pid 2439307:tid 2439307] [client 216.73.216.199:35478] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/perl5/unicore/Decomposition.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 08:45:27.351138 2026] [cgi:error] [pid 2439307:tid 2439307] [client 216.73.216.199:35478] End of script output before headers: Decomposition.pl
[Thu Jul 30 08:45:28.803935 2026] [authz_core:error] [pid 2445560:tid 2445560] [client 57.141.0.27:35980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:28.804591 2026] [authz_core:error] [pid 2445560:tid 2445560] [client 57.141.0.27:35980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:29.158623 2026] [ssl:error] [pid 2446984:tid 2446984] (EAI 2)Name or service not known: [client 144.76.19.72:39120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:29.158657 2026] [ssl:error] [pid 2446984:tid 2446984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:29.212326 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:39132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:29.212363 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:30.577518 2026] [security2:error] [pid 2443649:tid 2443649] [client 94.154.43.178:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "unclaimedassets.co.uk"] [uri "/.env"] [unique_id "amsBGoUe8E_kb04oFpi26gAAABI"]
[Thu Jul 30 08:45:30.577723 2026] [security2:error] [pid 2443649:tid 2443649] [client 94.154.43.178:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "unclaimedassets.co.uk"] [uri "/.env"] [unique_id "amsBGoUe8E_kb04oFpi26gAAABI"]
[Thu Jul 30 08:45:31.322667 2026] [authz_core:error] [pid 2436774:tid 2436774] [client 57.141.0.55:40706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:31.323295 2026] [authz_core:error] [pid 2436774:tid 2436774] [client 57.141.0.55:40706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:31.340002 2026] [security2:error] [pid 2443649:tid 2443649] [client 94.154.43.178:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "unclaimedassets.co.uk"] [uri "/index.php"] [unique_id "amsBGoUe8E_kb04oFpi26gAAABI"]
[Thu Jul 30 08:45:31.724968 2026] [authz_core:error] [pid 2442319:tid 2442319] [client 57.141.0.17:24686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:31.725613 2026] [authz_core:error] [pid 2442319:tid 2442319] [client 57.141.0.17:24686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:32.022000 2026] [ssl:error] [pid 2444127:tid 2444127] (70014)End of file found: [client 216.73.216.199:61485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:32.295590 2026] [ssl:error] [pid 2447188:tid 2447188] (EAI 2)Name or service not known: [client 144.76.19.72:57368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:32.295630 2026] [ssl:error] [pid 2447188:tid 2447188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:32.310302 2026] [ssl:error] [pid 2436774:tid 2436774] (70014)End of file found: [client 216.73.216.199:33075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:32.352253 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:57378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:32.352298 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:32.829485 2026] [authz_core:error] [pid 2447188:tid 2447188] [client 66.249.66.34:44473] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:45:32.832159 2026] [authz_core:error] [pid 2447188:tid 2447188] [client 66.249.66.34:44473] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:45:33.623429 2026] [ssl:error] [pid 2447372:tid 2447372] (70014)End of file found: [client 216.73.216.199:47558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:33.719506 2026] [authz_core:error] [pid 2444729:tid 2444729] [client 57.141.0.6:61678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:33.720133 2026] [authz_core:error] [pid 2444729:tid 2444729] [client 57.141.0.6:61678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:34.444341 2026] [security2:error] [pid 2412502:tid 2412502] [client 142.44.228.225:33570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/robots.txt"] [unique_id "amsBHovFUIHlpYWGJ3FOrgAAACA"]
[Thu Jul 30 08:45:34.566835 2026] [core:error] [pid 2442317:tid 2442317] [client 66.249.64.170:46581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:34.566863 2026] [core:error] [pid 2442317:tid 2442317] [client 66.249.64.170:46581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:35.406033 2026] [ssl:error] [pid 2444414:tid 2444414] (EAI 2)Name or service not known: [client 144.76.19.72:57390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:35.406101 2026] [ssl:error] [pid 2444414:tid 2444414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:35.461246 2026] [ssl:error] [pid 2443649:tid 2443649] (EAI 2)Name or service not known: [client 144.76.19.72:57392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:35.461286 2026] [ssl:error] [pid 2443649:tid 2443649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:35.707286 2026] [authz_core:error] [pid 2440527:tid 2440527] [client 57.141.0.25:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:35.707896 2026] [authz_core:error] [pid 2440527:tid 2440527] [client 57.141.0.25:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:36.363020 2026] [security2:error] [pid 2442317:tid 2442317] [client 92.222.104.205:21178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/testimonials/"] [unique_id "amsBIHGAxPd-P1XPGV_1SAAAACs"]
[Thu Jul 30 08:45:37.840518 2026] [ssl:error] [pid 2443649:tid 2443649] (70014)End of file found: [client 216.73.216.199:52059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:38.144818 2026] [ssl:error] [pid 2442320:tid 2442320] (70014)End of file found: [client 216.73.216.199:23091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:38.513732 2026] [ssl:error] [pid 2444414:tid 2444414] (EAI 2)Name or service not known: [client 144.76.19.72:57408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:38.513772 2026] [ssl:error] [pid 2444414:tid 2444414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:38.566578 2026] [ssl:error] [pid 2442197:tid 2442197] (EAI 2)Name or service not known: [client 144.76.19.72:57422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:38.566619 2026] [ssl:error] [pid 2442197:tid 2442197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:38.680362 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 164.90.171.112:53570] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 08:45:38.828782 2026] [authz_core:error] [pid 2445495:tid 2445495] [client 164.90.171.112:52330] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 08:45:38.972146 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.3:25788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:38.972763 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.3:25788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:39.344405 2026] [ssl:error] [pid 2446985:tid 2446985] (70014)End of file found: [client 216.73.216.199:22067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:40.068602 2026] [core:error] [pid 2442197:tid 2442197] [client 66.249.64.170:50710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:40.068641 2026] [core:error] [pid 2442197:tid 2442197] [client 66.249.64.170:50710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:40.344867 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 57.141.0.46:58436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:40.345488 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 57.141.0.46:58436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:41.620906 2026] [ssl:error] [pid 2444163:tid 2444163] (EAI 2)Name or service not known: [client 144.76.19.72:25848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:41.620942 2026] [ssl:error] [pid 2444163:tid 2444163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:41.675839 2026] [ssl:error] [pid 2446099:tid 2446099] (EAI 2)Name or service not known: [client 144.76.19.72:25860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:41.675874 2026] [ssl:error] [pid 2446099:tid 2446099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:42.969202 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.21:33768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:42.969814 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.21:33768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:43.150903 2026] [ssl:error] [pid 2444162:tid 2444162] (70014)End of file found: [client 216.73.216.199:25935] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:43.721734 2026] [access_compat:error] [pid 2442029:tid 2442029] [client 104.22.17.71:14326] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 08:45:43.902420 2026] [authz_core:error] [pid 2444163:tid 2444163] [client 66.249.66.33:61987] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:45:43.905071 2026] [authz_core:error] [pid 2444163:tid 2444163] [client 66.249.66.33:61987] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:45:44.166160 2026] [ssl:error] [pid 2444692:tid 2444692] (70014)End of file found: [client 216.73.216.199:33329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:44.733263 2026] [ssl:error] [pid 2442320:tid 2442320] (EAI 2)Name or service not known: [client 144.76.19.72:25874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:44.733287 2026] [ssl:error] [pid 2442320:tid 2442320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:44.789412 2026] [ssl:error] [pid 2436774:tid 2436774] (EAI 2)Name or service not known: [client 144.76.19.72:25886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:44.789451 2026] [ssl:error] [pid 2436774:tid 2436774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:45.414115 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.16:40626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:45.414801 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.16:40626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:46.270914 2026] [ssl:error] [pid 2446985:tid 2446985] (70014)End of file found: [client 216.73.216.199:48387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:47.842986 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:25888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:47.843019 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:47.895883 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:25904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:47.895920 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:48.271021 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 144.172.105.5:56528] AH01630: client denied by server configuration: /home/winterb/public_html/nortonnews/error_log
[Thu Jul 30 08:45:48.378252 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.50:24152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:48.378865 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.50:24152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:48.667451 2026] [authz_core:error] [pid 2442317:tid 2442317] [client 144.172.105.5:56528] AH01630: client denied by server configuration: /home/winterb/public_html/rtleur6/error_log
[Thu Jul 30 08:45:48.688624 2026] [ssl:error] [pid 2444414:tid 2444414] (70014)End of file found: [client 216.73.216.199:44216] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:48.813441 2026] [cgi:error] [pid 2443649:tid 2443649] [client 20.240.254.167:42450] AH02811: stderr from /home/davidebell/public_html/bashforthbell.co.uk/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 08:45:48.913261 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 20.240.254.167:42450] AH01630: client denied by server configuration: /home/davidebell/public_html/bashforthbell.co.uk/php.ini
[Thu Jul 30 08:45:49.497608 2026] [ssl:error] [pid 2439307:tid 2439307] (70014)End of file found: [client 216.73.216.199:1320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:50.950787 2026] [ssl:error] [pid 2434482:tid 2434482] (EAI 2)Name or service not known: [client 144.76.19.72:27796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:50.950853 2026] [ssl:error] [pid 2434482:tid 2434482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:51.008598 2026] [ssl:error] [pid 2443649:tid 2443649] (EAI 2)Name or service not known: [client 144.76.19.72:27808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:51.008647 2026] [ssl:error] [pid 2443649:tid 2443649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:51.703670 2026] [ssl:error] [pid 2444163:tid 2444163] (70014)End of file found: [client 216.73.216.199:62632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:53.098323 2026] [authz_core:error] [pid 2446985:tid 2446985] [client 57.141.0.52:24242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:53.098943 2026] [authz_core:error] [pid 2446985:tid 2446985] [client 57.141.0.52:24242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:53.494833 2026] [security2:error] [pid 2442318:tid 2442318] [client 45.128.122.48:55086] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBMTIvZjZy0OZ0I2UdVQAAACw"]
[Thu Jul 30 08:45:53.494892 2026] [security2:error] [pid 2442318:tid 2442318] [client 45.128.122.48:55086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBMTIvZjZy0OZ0I2UdVQAAACw"]
[Thu Jul 30 08:45:53.495214 2026] [security2:error] [pid 2442318:tid 2442318] [client 45.128.122.48:55086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBMTIvZjZy0OZ0I2UdVQAAACw"]
[Thu Jul 30 08:45:54.314595 2026] [security2:error] [pid 2443610:tid 2443610] [client 114.119.157.183:21907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,30/request_format~html"] [unique_id "amsBMu32brOhdG1TFmqtFwAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,30/request_format~html
[Thu Jul 30 08:45:54.540408 2026] [ssl:error] [pid 2445626:tid 2445626] (EAI 2)Name or service not known: [client 144.76.19.72:27824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:54.540441 2026] [ssl:error] [pid 2445626:tid 2445626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:54.785035 2026] [ssl:error] [pid 2448352:tid 2448352] (EAI 2)Name or service not known: [client 144.76.19.72:27834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:54.785093 2026] [ssl:error] [pid 2448352:tid 2448352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:55.013652 2026] [ssl:error] [pid 2444008:tid 2444008] (70014)End of file found: [client 216.73.216.199:36167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:55.161546 2026] [core:error] [pid 2444127:tid 2444127] [client 66.249.66.8:35211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:55.161582 2026] [core:error] [pid 2444127:tid 2444127] [client 66.249.66.8:35211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:45:55.408972 2026] [security2:error] [pid 2447372:tid 2447372] [client 43.134.137.114:57265] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBM9UdXsnE3RolluuV4AAAACU"]
[Thu Jul 30 08:45:55.409019 2026] [security2:error] [pid 2447372:tid 2447372] [client 43.134.137.114:57265] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBM9UdXsnE3RolluuV4AAAACU"]
[Thu Jul 30 08:45:55.409280 2026] [security2:error] [pid 2447372:tid 2447372] [client 43.134.137.114:57265] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBM9UdXsnE3RolluuV4AAAACU"]
[Thu Jul 30 08:45:55.541374 2026] [authz_core:error] [pid 2443610:tid 2443610] [client 57.141.0.32:46510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:55.541990 2026] [authz_core:error] [pid 2443610:tid 2443610] [client 57.141.0.32:46510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:45:55.690097 2026] [ssl:error] [pid 2447372:tid 2447372] (70014)End of file found: [client 216.73.216.199:12314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:55.933760 2026] [security2:error] [pid 2443651:tid 2443651] [client 114.119.157.183:21923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,30/request_format~html"] [unique_id "amsBM1U4LX7ctLczfLj89QAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,30/request_format~html
[Thu Jul 30 08:45:57.874754 2026] [ssl:error] [pid 2448428:tid 2448428] (EAI 2)Name or service not known: [client 144.76.19.72:27836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:57.874804 2026] [ssl:error] [pid 2448428:tid 2448428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:57.929009 2026] [ssl:error] [pid 2448429:tid 2448429] (EAI 2)Name or service not known: [client 144.76.19.72:27844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:45:57.929046 2026] [ssl:error] [pid 2448429:tid 2448429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:45:58.332898 2026] [ssl:error] [pid 2442317:tid 2442317] (70014)End of file found: [client 216.73.216.199:10483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:45:58.539527 2026] [security2:error] [pid 2446926:tid 2446926] [client 43.134.137.114:16059] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBNgx32ezCYw9jPsJg-gAAAAU"]
[Thu Jul 30 08:45:58.539582 2026] [security2:error] [pid 2446926:tid 2446926] [client 43.134.137.114:16059] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBNgx32ezCYw9jPsJg-gAAAAU"]
[Thu Jul 30 08:45:58.539801 2026] [security2:error] [pid 2446926:tid 2446926] [client 43.134.137.114:16059] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBNgx32ezCYw9jPsJg-gAAAAU"]
[Thu Jul 30 08:45:58.640828 2026] [authz_core:error] [pid 2448428:tid 2448428] [client 57.141.0.13:21696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:45:58.641453 2026] [authz_core:error] [pid 2448428:tid 2448428] [client 57.141.0.13:21696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:00.342366 2026] [ssl:error] [pid 2447533:tid 2447533] (70014)End of file found: [client 216.73.216.199:19035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:01.006470 2026] [ssl:error] [pid 2446985:tid 2446985] (EAI 2)Name or service not known: [client 144.76.19.72:45836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:01.006509 2026] [ssl:error] [pid 2446985:tid 2446985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:01.061751 2026] [ssl:error] [pid 2445626:tid 2445626] (EAI 2)Name or service not known: [client 144.76.19.72:45844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:01.061778 2026] [ssl:error] [pid 2445626:tid 2445626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:01.252116 2026] [ssl:error] [pid 2448352:tid 2448352] (70014)End of file found: [client 216.73.216.199:58729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:01.348096 2026] [authz_core:error] [pid 2434439:tid 2434439] [client 57.141.0.11:52596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:01.348717 2026] [authz_core:error] [pid 2434439:tid 2434439] [client 57.141.0.11:52596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:02.871553 2026] [autoindex:error] [pid 2444008:tid 2444008] (13)Permission denied: [client 216.73.216.199:64533] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/banskoex/
[Thu Jul 30 08:46:03.774103 2026] [core:error] [pid 2444008:tid 2444008] (13)Permission denied: [client 216.73.216.199:64533] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS0/port
[Thu Jul 30 08:46:04.116706 2026] [ssl:error] [pid 2442317:tid 2442317] (EAI 2)Name or service not known: [client 144.76.19.72:45854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:04.116738 2026] [ssl:error] [pid 2442317:tid 2442317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:04.172909 2026] [ssl:error] [pid 2447101:tid 2447101] (EAI 2)Name or service not known: [client 144.76.19.72:45856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:04.172943 2026] [ssl:error] [pid 2447101:tid 2447101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:04.376634 2026] [core:error] [pid 2444008:tid 2444008] (13)Permission denied: [client 216.73.216.199:64533] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_efd_item/aliases
[Thu Jul 30 08:46:04.599498 2026] [authz_core:error] [pid 2448426:tid 2448426] [client 57.141.0.12:41288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:04.600142 2026] [authz_core:error] [pid 2448426:tid 2448426] [client 57.141.0.12:41288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:04.677604 2026] [ssl:error] [pid 2444008:tid 2444008] (70014)End of file found: [client 216.73.216.199:64533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:04.978662 2026] [ssl:error] [pid 2446024:tid 2446024] (70014)End of file found: [client 216.73.216.199:39540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:05.497228 2026] [authz_core:error] [pid 2444692:tid 2444692] [client 66.249.66.33:41472] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:46:05.499886 2026] [authz_core:error] [pid 2444692:tid 2444692] [client 66.249.66.33:41472] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:46:06.799083 2026] [core:error] [pid 2448424:tid 2448424] (13)Permission denied: [client 216.73.216.199:54978] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_event/aliases
[Thu Jul 30 08:46:07.228290 2026] [ssl:error] [pid 2448430:tid 2448430] (EAI 2)Name or service not known: [client 144.76.19.72:45858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:07.228326 2026] [ssl:error] [pid 2448430:tid 2448430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:07.286128 2026] [ssl:error] [pid 2442316:tid 2442316] (EAI 2)Name or service not known: [client 144.76.19.72:45860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:07.286155 2026] [ssl:error] [pid 2442316:tid 2442316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:07.370260 2026] [access_compat:error] [pid 2440527:tid 2440527] [client 172.69.134.225:14284] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 08:46:07.397826 2026] [ssl:error] [pid 2448424:tid 2448424] (70014)End of file found: [client 216.73.216.199:54978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:07.797246 2026] [authz_core:error] [pid 2434553:tid 2434553] [client 66.249.66.34:44832] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:46:07.799882 2026] [authz_core:error] [pid 2434553:tid 2434553] [client 66.249.66.34:44832] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:46:09.529643 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.22:37204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:09.530270 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.22:37204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:10.344530 2026] [ssl:error] [pid 2448425:tid 2448425] (EAI 2)Name or service not known: [client 144.76.19.72:27618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:10.344574 2026] [ssl:error] [pid 2448425:tid 2448425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:10.401097 2026] [ssl:error] [pid 2411149:tid 2411149] (EAI 2)Name or service not known: [client 144.76.19.72:27632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:10.401130 2026] [ssl:error] [pid 2411149:tid 2411149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:10.420856 2026] [core:error] [pid 2434482:tid 2434482] (13)Permission denied: [client 216.73.216.199:53700] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-280/objs_per_slab
[Thu Jul 30 08:46:10.669730 2026] [cgi:error] [pid 2446985:tid 2446985] [client 167.94.146.63:38762] AH02812: stderr from /home/daggerlaneenterp/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://daggerlaneenterprises.co.uk:80/cgi-bin
[Thu Jul 30 08:46:13.459773 2026] [ssl:error] [pid 2448428:tid 2448428] (EAI 2)Name or service not known: [client 144.76.19.72:27644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:13.459803 2026] [ssl:error] [pid 2448428:tid 2448428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:13.516587 2026] [ssl:error] [pid 2446205:tid 2446205] (EAI 2)Name or service not known: [client 144.76.19.72:27648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:13.516619 2026] [ssl:error] [pid 2446205:tid 2446205] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:14.039242 2026] [core:error] [pid 2434482:tid 2434482] (13)Permission denied: [client 216.73.216.199:53700] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tcp_bind_bucket/poison
[Thu Jul 30 08:46:14.924886 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.37:41394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:14.925514 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.37:41394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:15.244349 2026] [ssl:error] [pid 2434482:tid 2434482] (70014)End of file found: [client 216.73.216.199:53700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:16.146955 2026] [ssl:error] [pid 2448423:tid 2448423] (70014)End of file found: [client 216.73.216.199:43520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:16.570473 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:27660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:16.570499 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:16.627214 2026] [ssl:error] [pid 2448427:tid 2448427] (EAI 2)Name or service not known: [client 144.76.19.72:27672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:16.627242 2026] [ssl:error] [pid 2448427:tid 2448427] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:17.350354 2026] [ssl:error] [pid 2447101:tid 2447101] (70014)End of file found: [client 216.73.216.199:35944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:17.480575 2026] [security2:error] [pid 2444729:tid 2444729] [client 43.130.173.142:43749] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBSQ8FgwnV6m9Vm1Q7BAAAAC8"]
[Thu Jul 30 08:46:17.480625 2026] [security2:error] [pid 2444729:tid 2444729] [client 43.130.173.142:43749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBSQ8FgwnV6m9Vm1Q7BAAAAC8"]
[Thu Jul 30 08:46:17.480868 2026] [security2:error] [pid 2444729:tid 2444729] [client 43.130.173.142:43749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBSQ8FgwnV6m9Vm1Q7BAAAAC8"]
[Thu Jul 30 08:46:18.246543 2026] [ssl:error] [pid 2442316:tid 2442316] (70014)End of file found: [client 216.73.216.199:48976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:18.571082 2026] [ssl:error] [pid 2448387:tid 2448387] (70014)End of file found: [client 216.73.216.199:23132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:18.864291 2026] [ssl:error] [pid 2427778:tid 2427778] (70014)End of file found: [client 216.73.216.199:9312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:19.681946 2026] [ssl:error] [pid 2444729:tid 2444729] (EAI 2)Name or service not known: [client 144.76.19.72:42542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:19.681972 2026] [ssl:error] [pid 2444729:tid 2444729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:19.737901 2026] [ssl:error] [pid 2412502:tid 2412502] (EAI 2)Name or service not known: [client 144.76.19.72:42558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:19.737927 2026] [ssl:error] [pid 2412502:tid 2412502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:20.297362 2026] [security2:error] [pid 2447189:tid 2447189] [client 181.62.56.65:4566] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBTLzX3A6SE1UxibswiQAAACQ"]
[Thu Jul 30 08:46:20.297417 2026] [security2:error] [pid 2447189:tid 2447189] [client 181.62.56.65:4566] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBTLzX3A6SE1UxibswiQAAACQ"]
[Thu Jul 30 08:46:20.297664 2026] [security2:error] [pid 2447189:tid 2447189] [client 181.62.56.65:4566] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBTLzX3A6SE1UxibswiQAAACQ"]
[Thu Jul 30 08:46:20.780763 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.55:34146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:20.781388 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.55:34146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:20.914185 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.64:24142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:20.914802 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.64:24142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:22.676305 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.54:50960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:22.676928 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.54:50960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:22.821090 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:42562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:22.821119 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:22.872390 2026] [ssl:error] [pid 2448423:tid 2448423] (EAI 2)Name or service not known: [client 144.76.19.72:42566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:22.872419 2026] [ssl:error] [pid 2448423:tid 2448423] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:23.395917 2026] [security2:error] [pid 2446024:tid 2446024] [client 72.255.18.157:39160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBTwuxrd2oCUR3I5ACEQAAABc"]
[Thu Jul 30 08:46:23.395972 2026] [security2:error] [pid 2446024:tid 2446024] [client 72.255.18.157:39160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBTwuxrd2oCUR3I5ACEQAAABc"]
[Thu Jul 30 08:46:23.396224 2026] [security2:error] [pid 2446024:tid 2446024] [client 72.255.18.157:39160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBTwuxrd2oCUR3I5ACEQAAABc"]
[Thu Jul 30 08:46:23.702272 2026] [ssl:error] [pid 2446985:tid 2446985] (70014)End of file found: [client 216.73.216.199:8704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:23.824547 2026] [core:error] [pid 2444162:tid 2444162] [client 66.249.64.170:52418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:23.824579 2026] [core:error] [pid 2444162:tid 2444162] [client 66.249.64.170:52418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:24.404172 2026] [ssl:error] [pid 2442316:tid 2442316] (70014)End of file found: [client 216.73.216.199:45640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:24.904417 2026] [ssl:error] [pid 2448387:tid 2448387] (70014)End of file found: [client 216.73.216.199:11525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:25.930463 2026] [ssl:error] [pid 2448428:tid 2448428] (EAI 2)Name or service not known: [client 144.76.19.72:42582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:25.930495 2026] [ssl:error] [pid 2448428:tid 2448428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:25.986336 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:42590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:25.986362 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:26.327022 2026] [authz_core:error] [pid 2446926:tid 2446926] [client 57.141.0.11:40364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:26.327709 2026] [authz_core:error] [pid 2446926:tid 2446926] [client 57.141.0.11:40364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:26.376777 2026] [core:error] [pid 2448430:tid 2448430] [client 66.249.66.168:39249] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:26.376797 2026] [core:error] [pid 2448430:tid 2448430] [client 66.249.66.168:39249] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:26.379495 2026] [core:error] [pid 2444163:tid 2444163] [client 66.249.66.66:52801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:26.379516 2026] [core:error] [pid 2444163:tid 2444163] [client 66.249.66.66:52801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:27.499623 2026] [authz_core:error] [pid 2446926:tid 2446926] [client 57.141.0.42:53266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:27.500310 2026] [authz_core:error] [pid 2446926:tid 2446926] [client 57.141.0.42:53266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:28.684948 2026] [security2:error] [pid 2448430:tid 2448430] [client 170.106.160.90:39896] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sijames.com"] [uri "/"] [unique_id "amsBVGA7sA8ZkyzhVnfCewAAADo"]
[Thu Jul 30 08:46:28.764976 2026] [authz_core:error] [pid 2448427:tid 2448427] [client 66.249.66.33:64184] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:46:28.767641 2026] [authz_core:error] [pid 2448427:tid 2448427] [client 66.249.66.33:64184] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:46:28.926389 2026] [authz_core:error] [pid 2442319:tid 2442319] [client 57.141.0.50:60084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:28.927003 2026] [authz_core:error] [pid 2442319:tid 2442319] [client 57.141.0.50:60084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:29.039987 2026] [ssl:error] [pid 2444008:tid 2444008] (EAI 2)Name or service not known: [client 144.76.19.72:42592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:29.040019 2026] [ssl:error] [pid 2444008:tid 2444008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:29.095843 2026] [ssl:error] [pid 2444008:tid 2444008] (EAI 2)Name or service not known: [client 144.76.19.72:42606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:29.095867 2026] [ssl:error] [pid 2444008:tid 2444008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:29.125149 2026] [ssl:error] [pid 2436774:tid 2436774] (70014)End of file found: [client 216.73.216.199:18468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:29.558591 2026] [authz_core:error] [pid 2442319:tid 2442319] [client 20.223.162.195:54255] AH01630: client denied by server configuration: /home/robincou/public_html/error_log
[Thu Jul 30 08:46:29.730610 2026] [ssl:error] [pid 2444692:tid 2444692] (70014)End of file found: [client 216.73.216.199:3688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:30.327632 2026] [ssl:error] [pid 2442316:tid 2442316] (70014)End of file found: [client 216.73.216.199:12869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:30.552598 2026] [core:error] [pid 2446024:tid 2446024] [client 66.249.64.171:37850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:30.552630 2026] [core:error] [pid 2446024:tid 2446024] [client 66.249.64.171:37850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:31.631384 2026] [authz_core:error] [pid 2412502:tid 2412502] [client 57.141.0.33:28046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:31.632011 2026] [authz_core:error] [pid 2412502:tid 2412502] [client 57.141.0.33:28046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:32.152545 2026] [ssl:error] [pid 2443649:tid 2443649] (EAI 2)Name or service not known: [client 144.76.19.72:48380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:32.152585 2026] [ssl:error] [pid 2443649:tid 2443649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:32.208891 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:48392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:32.208924 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:33.437748 2026] [authz_core:error] [pid 2442318:tid 2442318] [client 57.141.0.26:27786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:33.438383 2026] [authz_core:error] [pid 2442318:tid 2442318] [client 57.141.0.26:27786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:33.594875 2026] [authz_core:error] [pid 2434439:tid 2434439] [client 57.141.0.50:62296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:33.595495 2026] [authz_core:error] [pid 2434439:tid 2434439] [client 57.141.0.50:62296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:34.378146 2026] [lsapi:warn] [pid 2444729:tid 2444729] [client 140.235.2.178:15541] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:34.378187 2026] [lsapi:warn] [pid 2444729:tid 2444729] [client 140.235.2.178:15541] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:34.570783 2026] [ssl:error] [pid 2442318:tid 2442318] (70014)End of file found: [client 216.73.216.199:51037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:35.193446 2026] [ssl:error] [pid 2446099:tid 2446099] (70014)End of file found: [client 216.73.216.199:29438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:35.264464 2026] [ssl:error] [pid 2448424:tid 2448424] (EAI 2)Name or service not known: [client 144.76.19.72:48398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:35.264505 2026] [ssl:error] [pid 2448424:tid 2448424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:35.317556 2026] [ssl:error] [pid 2444163:tid 2444163] (EAI 2)Name or service not known: [client 144.76.19.72:48412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:35.317589 2026] [ssl:error] [pid 2444163:tid 2444163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:35.776706 2026] [ssl:error] [pid 2450201:tid 2450201] (70014)End of file found: [client 216.73.216.199:48227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:36.041405 2026] [lsapi:warn] [pid 2444414:tid 2444414] [client 45.158.164.139:47148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:46:36.041446 2026] [lsapi:warn] [pid 2444414:tid 2444414] [client 45.158.164.139:47148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:46:36.043501 2026] [lsapi:warn] [pid 2444730:tid 2444730] [client 140.235.2.178:52767] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:36.043538 2026] [lsapi:warn] [pid 2444730:tid 2444730] [client 140.235.2.178:52767] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:36.110528 2026] [security2:error] [pid 2447101:tid 2447101] [client 82.156.88.97:37618] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bes-systems.co.uk"] [uri "/"] [unique_id "amsBXGSu2NF2Z-HzB_3ndAAAAB4"]
[Thu Jul 30 08:46:36.119140 2026] [authz_core:error] [pid 2448424:tid 2448424] [client 82.102.18.190:55624] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 08:46:36.799760 2026] [authz_core:error] [pid 2427778:tid 2427778] [client 57.141.0.16:23244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:36.800379 2026] [authz_core:error] [pid 2427778:tid 2427778] [client 57.141.0.16:23244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:37.810357 2026] [lsapi:warn] [pid 2412502:tid 2412502] [client 140.235.2.178:47955] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:37.810392 2026] [lsapi:warn] [pid 2412502:tid 2412502] [client 140.235.2.178:47955] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:38.371412 2026] [ssl:error] [pid 2444692:tid 2444692] (EAI 2)Name or service not known: [client 144.76.19.72:48420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:38.371436 2026] [ssl:error] [pid 2444692:tid 2444692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:38.424152 2026] [ssl:error] [pid 2427778:tid 2427778] (EAI 2)Name or service not known: [client 144.76.19.72:48424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:38.424180 2026] [ssl:error] [pid 2427778:tid 2427778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:38.912175 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.64.170:37640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:38.912213 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.64.170:37640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:46:39.150199 2026] [authz_core:error] [pid 2444692:tid 2444692] [client 57.141.0.35:27782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:39.150811 2026] [authz_core:error] [pid 2444692:tid 2444692] [client 57.141.0.35:27782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:40.015478 2026] [ssl:error] [pid 2443651:tid 2443651] (70014)End of file found: [client 216.73.216.199:37446] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:40.336273 2026] [access_compat:error] [pid 2444008:tid 2444008] [client 117.98.12.168:40542] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images/Tej.jpg
[Thu Jul 30 08:46:40.394133 2026] [cgi:error] [pid 2448257:tid 2448257] [client 52.238.192.78:5583] AH02812: stderr from /home/ogsoilco/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:46:40.611504 2026] [ssl:error] [pid 2444414:tid 2444414] (70014)End of file found: [client 216.73.216.199:2900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:41.033824 2026] [lsapi:warn] [pid 2448428:tid 2448428] [client 45.158.164.139:58546] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:46:41.033866 2026] [lsapi:warn] [pid 2448428:tid 2448428] [client 45.158.164.139:58546] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:46:41.035965 2026] [lsapi:warn] [pid 2439307:tid 2439307] [client 140.235.2.178:50435] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:41.035990 2026] [lsapi:warn] [pid 2439307:tid 2439307] [client 140.235.2.178:50435] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com
[Thu Jul 30 08:46:41.314174 2026] [ssl:error] [pid 2412502:tid 2412502] (70014)End of file found: [client 216.73.216.199:24113] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:41.406246 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 08:46:41.406359 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 08:46:41.426662 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/this_is_a_new_hello_world.php
[Thu Jul 30 08:46:41.426713 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.446794 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/aa.php
[Thu Jul 30 08:46:41.446841 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.467189 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/av.php
[Thu Jul 30 08:46:41.467250 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.480500 2026] [ssl:error] [pid 2442318:tid 2442318] (EAI 2)Name or service not known: [client 144.76.19.72:49996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:41.480527 2026] [ssl:error] [pid 2442318:tid 2442318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:41.487324 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xa.php
[Thu Jul 30 08:46:41.487367 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.508413 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/media.php
[Thu Jul 30 08:46:41.508454 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.532136 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:50000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:41.532167 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:41.544577 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/images.php
[Thu Jul 30 08:46:41.544624 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.597428 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/gecko.php
[Thu Jul 30 08:46:41.597474 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.618256 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/82.php
[Thu Jul 30 08:46:41.618302 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.638355 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xstelth.php
[Thu Jul 30 08:46:41.638395 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.683428 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xp.php
[Thu Jul 30 08:46:41.683471 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.704225 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/admin.php
[Thu Jul 30 08:46:41.704270 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.725054 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/adminner.php
[Thu Jul 30 08:46:41.725109 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.830652 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/a.php
[Thu Jul 30 08:46:41.830700 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.850778 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/k.php
[Thu Jul 30 08:46:41.850818 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.898179 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/222.php
[Thu Jul 30 08:46:41.898225 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.936499 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/mac.php
[Thu Jul 30 08:46:41.936546 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:41.973460 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 08:46:41.973574 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 08:46:42.024290 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 08:46:42.024385 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 08:46:42.044294 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ops.php
[Thu Jul 30 08:46:42.044335 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.086788 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/8.php
[Thu Jul 30 08:46:42.086853 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.108083 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/FWAZ.php
[Thu Jul 30 08:46:42.108132 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.128630 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/biufile.php
[Thu Jul 30 08:46:42.128673 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.169842 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/coffexium.php
[Thu Jul 30 08:46:42.169886 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.189812 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/simple.php
[Thu Jul 30 08:46:42.189848 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.209798 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/fpwch.php
[Thu Jul 30 08:46:42.209840 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.229906 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/dex.php
[Thu Jul 30 08:46:42.229952 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.267910 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/1.php
[Thu Jul 30 08:46:42.267958 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.288174 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 08:46:42.288282 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 08:46:42.308426 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/config.json.php
[Thu Jul 30 08:46:42.308472 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.328584 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/k2.php
[Thu Jul 30 08:46:42.328631 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.348833 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/raw.php
[Thu Jul 30 08:46:42.348883 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.395596 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp.php
[Thu Jul 30 08:46:42.395645 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.537787 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/fffm.php
[Thu Jul 30 08:46:42.537833 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.557947 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/111.php
[Thu Jul 30 08:46:42.557988 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.578193 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 08:46:42.578192 2026] [authz_core:error] [pid 2442318:tid 2442318] [client 57.141.0.51:46766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:42.578278 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 08:46:42.578817 2026] [authz_core:error] [pid 2442318:tid 2442318] [client 57.141.0.51:46766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:42.598268 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ws.php
[Thu Jul 30 08:46:42.598307 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.636673 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/coffee.php
[Thu Jul 30 08:46:42.636713 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.657399 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/goods.php
[Thu Jul 30 08:46:42.657450 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.684970 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/about.php
[Thu Jul 30 08:46:42.685008 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.731571 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/about.php
[Thu Jul 30 08:46:42.731614 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.752095 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/admin.php
[Thu Jul 30 08:46:42.752133 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.772150 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/inputs.php
[Thu Jul 30 08:46:42.772189 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.792209 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/inputs.php
[Thu Jul 30 08:46:42.792246 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.830335 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/adminfuns.php
[Thu Jul 30 08:46:42.830373 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.850338 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/404.php
[Thu Jul 30 08:46:42.850375 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.870402 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xxx.php
[Thu Jul 30 08:46:42.870439 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.890407 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/classwithtostring.php
[Thu Jul 30 08:46:42.890445 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.910408 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/234ff.php
[Thu Jul 30 08:46:42.910446 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.955654 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/133.php
[Thu Jul 30 08:46:42.955695 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.975785 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-ws68.php
[Thu Jul 30 08:46:42.975822 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:42.995755 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/mgrr.php
[Thu Jul 30 08:46:42.995792 2026] [access_compat:error] [pid 2444729:tid 2444729] [client 4.184.185.91:17403] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 08:46:44.588161 2026] [ssl:error] [pid 2446985:tid 2446985] (EAI 2)Name or service not known: [client 144.76.19.72:50008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:44.588197 2026] [ssl:error] [pid 2446985:tid 2446985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:44.643462 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:50012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:44.643487 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:45.426884 2026] [ssl:error] [pid 2448428:tid 2448428] (70014)End of file found: [client 216.73.216.199:3387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:46.020087 2026] [ssl:error] [pid 2446926:tid 2446926] (70014)End of file found: [client 216.73.216.199:18393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:46.272677 2026] [security2:error] [pid 2446985:tid 2446985] [client 43.159.145.153:37206] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.freakorgeek.com"] [uri "/"] [unique_id "amsBZjT_D6DEuVXJuEyrQAAAABQ"]
[Thu Jul 30 08:46:46.735492 2026] [ssl:error] [pid 2442318:tid 2442318] (70014)End of file found: [client 216.73.216.199:40905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:47.060084 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.34:39238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:47.060714 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 57.141.0.34:39238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:47.195150 2026] [access_compat:error] [pid 2446099:tid 2446099] [client 45.158.164.139:58560] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:46:47.698304 2026] [ssl:error] [pid 2446985:tid 2446985] (EAI 2)Name or service not known: [client 144.76.19.72:50024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:47.698336 2026] [ssl:error] [pid 2446985:tid 2446985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:47.755452 2026] [ssl:error] [pid 2444414:tid 2444414] (EAI 2)Name or service not known: [client 144.76.19.72:50040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:47.755479 2026] [ssl:error] [pid 2444414:tid 2444414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:47.873735 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.46:49166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:47.874351 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.46:49166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:50.555726 2026] [authz_core:error] [pid 2444729:tid 2444729] [client 57.141.0.59:39942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:50.556345 2026] [authz_core:error] [pid 2444729:tid 2444729] [client 57.141.0.59:39942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:50.811924 2026] [ssl:error] [pid 2447533:tid 2447533] (EAI 2)Name or service not known: [client 144.76.19.72:20192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:50.811969 2026] [ssl:error] [pid 2447533:tid 2447533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:50.870155 2026] [ssl:error] [pid 2448428:tid 2448428] (EAI 2)Name or service not known: [client 144.76.19.72:20196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:50.870186 2026] [ssl:error] [pid 2448428:tid 2448428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:52.278501 2026] [ssl:error] [pid 2446985:tid 2446985] (70014)End of file found: [client 216.73.216.199:2828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:52.785575 2026] [ssl:error] [pid 2443649:tid 2443649] (70014)End of file found: [client 216.73.216.199:27488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:53.482915 2026] [ssl:error] [pid 2447101:tid 2447101] (70014)End of file found: [client 216.73.216.199:47696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:53.946757 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:20198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:53.946802 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:53.999927 2026] [ssl:error] [pid 2450900:tid 2450900] (EAI 2)Name or service not known: [client 144.76.19.72:20208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:53.999959 2026] [ssl:error] [pid 2450900:tid 2450900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:55.875741 2026] [authz_core:error] [pid 2451045:tid 2451045] [client 57.141.0.13:43880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:55.876390 2026] [authz_core:error] [pid 2451045:tid 2451045] [client 57.141.0.13:43880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:46:57.055427 2026] [ssl:error] [pid 2451093:tid 2451093] (EAI 2)Name or service not known: [client 144.76.19.72:20214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:57.055472 2026] [ssl:error] [pid 2451093:tid 2451093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:57.111938 2026] [ssl:error] [pid 2423798:tid 2423798] (EAI 2)Name or service not known: [client 144.76.19.72:20224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:46:57.111996 2026] [ssl:error] [pid 2423798:tid 2423798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:46:57.595730 2026] [ssl:error] [pid 2451093:tid 2451093] (70014)End of file found: [client 216.73.216.199:55173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:57.636975 2026] [authz_core:error] [pid 2444414:tid 2444414] [client 82.102.18.190:60014] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/Requests/src/Auth/error_log
[Thu Jul 30 08:46:58.205383 2026] [ssl:error] [pid 2444729:tid 2444729] (70014)End of file found: [client 216.73.216.199:37534] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:58.816852 2026] [ssl:error] [pid 2412502:tid 2412502] (70014)End of file found: [client 216.73.216.199:32314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:46:59.234755 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 52.167.144.25:27106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:46:59.235375 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 52.167.144.25:27106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:00.166649 2026] [ssl:error] [pid 2446099:tid 2446099] (EAI 2)Name or service not known: [client 144.76.19.72:25514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:00.166680 2026] [ssl:error] [pid 2446099:tid 2446099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:00.221119 2026] [ssl:error] [pid 2443651:tid 2443651] (EAI 2)Name or service not known: [client 144.76.19.72:25518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:00.221151 2026] [ssl:error] [pid 2443651:tid 2443651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:00.608375 2026] [authz_core:error] [pid 2446205:tid 2446205] [client 57.141.0.36:62580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:00.608991 2026] [authz_core:error] [pid 2446205:tid 2446205] [client 57.141.0.36:62580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:00.791742 2026] [core:error] [pid 2447101:tid 2447101] [client 66.249.66.8:35899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:00.791768 2026] [core:error] [pid 2447101:tid 2447101] [client 66.249.66.8:35899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:01.218692 2026] [security2:error] [pid 2447533:tid 2447533] [client 47.128.47.202:43030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns1.ns-narvi.com"] [uri "/"] [unique_id "amsBddIPmoCHjrznwi7o0QAAAAQ"]
[Thu Jul 30 08:47:02.442113 2026] [security2:error] [pid 2433323:tid 2433323] [client 103.244.49.192:43620] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBdlVtaWSzfi8wpuajMgAAAAM"]
[Thu Jul 30 08:47:02.442176 2026] [security2:error] [pid 2433323:tid 2433323] [client 103.244.49.192:43620] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBdlVtaWSzfi8wpuajMgAAAAM"]
[Thu Jul 30 08:47:02.442425 2026] [security2:error] [pid 2433323:tid 2433323] [client 103.244.49.192:43620] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBdlVtaWSzfi8wpuajMgAAAAM"]
[Thu Jul 30 08:47:03.277483 2026] [ssl:error] [pid 2446985:tid 2446985] (EAI 2)Name or service not known: [client 144.76.19.72:25528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:03.277529 2026] [ssl:error] [pid 2446985:tid 2446985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:03.333394 2026] [ssl:error] [pid 2448430:tid 2448430] (EAI 2)Name or service not known: [client 144.76.19.72:25534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:03.333427 2026] [ssl:error] [pid 2448430:tid 2448430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:03.527021 2026] [access_compat:error] [pid 2446985:tid 2446985] [client 187.189.92.101:3970] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images/Tej.jpg
[Thu Jul 30 08:47:04.370112 2026] [ssl:error] [pid 2446926:tid 2446926] (70014)End of file found: [client 216.73.216.199:26741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:04.872961 2026] [ssl:error] [pid 2446985:tid 2446985] (70014)End of file found: [client 216.73.216.199:64527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:04.917934 2026] [core:error] [pid 2451093:tid 2451093] [client 66.249.64.171:41741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:04.917964 2026] [core:error] [pid 2451093:tid 2451093] [client 66.249.64.171:41741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:05.574134 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_oci.ini"] [unique_id "amsBeYUe8E_kb04oFpi30AAAABI"]
[Thu Jul 30 08:47:05.574442 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_oci.ini"] [unique_id "amsBeYUe8E_kb04oFpi30AAAABI"]
[Thu Jul 30 08:47:05.574679 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_oci.ini"] [unique_id "amsBeYUe8E_kb04oFpi30AAAABI"]
[Thu Jul 30 08:47:06.388898 2026] [ssl:error] [pid 2451093:tid 2451093] (EAI 2)Name or service not known: [client 144.76.19.72:25550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:06.388925 2026] [ssl:error] [pid 2451093:tid 2451093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:06.462549 2026] [security2:error] [pid 2444729:tid 2444729] [client 45.171.47.123:11349] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBeg8FgwnV6m9Vm1Q7RQAAAC8"]
[Thu Jul 30 08:47:06.462608 2026] [security2:error] [pid 2444729:tid 2444729] [client 45.171.47.123:11349] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBeg8FgwnV6m9Vm1Q7RQAAAC8"]
[Thu Jul 30 08:47:06.462881 2026] [security2:error] [pid 2444729:tid 2444729] [client 45.171.47.123:11349] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBeg8FgwnV6m9Vm1Q7RQAAAC8"]
[Thu Jul 30 08:47:06.468045 2026] [ssl:error] [pid 2423798:tid 2423798] (EAI 2)Name or service not known: [client 144.76.19.72:25564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:06.468487 2026] [ssl:error] [pid 2423798:tid 2423798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:09.521934 2026] [ssl:error] [pid 2448423:tid 2448423] (EAI 2)Name or service not known: [client 144.76.19.72:25570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:09.521966 2026] [ssl:error] [pid 2448423:tid 2448423] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:09.578144 2026] [ssl:error] [pid 2444729:tid 2444729] (EAI 2)Name or service not known: [client 144.76.19.72:51204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:09.578168 2026] [ssl:error] [pid 2444729:tid 2444729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:09.977847 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/nd_mysqli.ini"] [unique_id "amsBfYUe8E_kb04oFpi33gAAABI"]
[Thu Jul 30 08:47:09.978225 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/nd_mysqli.ini"] [unique_id "amsBfYUe8E_kb04oFpi33gAAABI"]
[Thu Jul 30 08:47:09.978504 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/nd_mysqli.ini"] [unique_id "amsBfYUe8E_kb04oFpi33gAAABI"]
[Thu Jul 30 08:47:10.347201 2026] [core:error] [pid 2450201:tid 2450201] [client 57.141.0.32:54122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:10.347233 2026] [core:error] [pid 2450201:tid 2450201] [client 57.141.0.32:54122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:10.411185 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_dblib.ini"] [unique_id "amsBfoUe8E_kb04oFpi34AAAABI"]
[Thu Jul 30 08:47:10.411538 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_dblib.ini"] [unique_id "amsBfoUe8E_kb04oFpi34AAAABI"]
[Thu Jul 30 08:47:10.411844 2026] [security2:error] [pid 2443649:tid 2443649] [client 216.73.216.199:23194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo_dblib.ini"] [unique_id "amsBfoUe8E_kb04oFpi34AAAABI"]
[Thu Jul 30 08:47:11.021743 2026] [ssl:error] [pid 2443649:tid 2443649] (70014)End of file found: [client 216.73.216.199:23194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:11.318494 2026] [ssl:error] [pid 2423798:tid 2423798] (70014)End of file found: [client 216.73.216.199:10164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:12.646499 2026] [ssl:error] [pid 2446024:tid 2446024] (EAI 2)Name or service not known: [client 144.76.19.72:51206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:12.646531 2026] [ssl:error] [pid 2446024:tid 2446024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:12.725441 2026] [ssl:error] [pid 2448257:tid 2448257] (EAI 2)Name or service not known: [client 144.76.19.72:51222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:12.725483 2026] [ssl:error] [pid 2448257:tid 2448257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:13.128118 2026] [security2:error] [pid 2450201:tid 2450201] [client 216.73.216.199:15623] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/nd_pdo_mysql.ini"] [unique_id "amsBgR5_y6u6XNBttVu0VgAAAAA"]
[Thu Jul 30 08:47:13.128416 2026] [security2:error] [pid 2450201:tid 2450201] [client 216.73.216.199:15623] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/nd_pdo_mysql.ini"] [unique_id "amsBgR5_y6u6XNBttVu0VgAAAAA"]
[Thu Jul 30 08:47:13.128656 2026] [security2:error] [pid 2450201:tid 2450201] [client 216.73.216.199:15623] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/nd_pdo_mysql.ini"] [unique_id "amsBgR5_y6u6XNBttVu0VgAAAAA"]
[Thu Jul 30 08:47:13.429471 2026] [security2:error] [pid 2450201:tid 2450201] [client 216.73.216.199:15623] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/wddx.ini"] [unique_id "amsBgR5_y6u6XNBttVu0VwAAAAA"]
[Thu Jul 30 08:47:13.429785 2026] [security2:error] [pid 2450201:tid 2450201] [client 216.73.216.199:15623] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/wddx.ini"] [unique_id "amsBgR5_y6u6XNBttVu0VwAAAAA"]
[Thu Jul 30 08:47:13.430010 2026] [security2:error] [pid 2450201:tid 2450201] [client 216.73.216.199:15623] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/wddx.ini"] [unique_id "amsBgR5_y6u6XNBttVu0VwAAAAA"]
[Thu Jul 30 08:47:13.719454 2026] [security2:error] [pid 2448257:tid 2448257] [client 43.165.7.135:48010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.acthoroughbreds.com"] [uri "/"] [unique_id "amsBgUnVyN_8H5-HnSiOmAAAAAE"]
[Thu Jul 30 08:47:13.720337 2026] [authz_core:error] [pid 2448257:tid 2448257] [client 43.165.7.135:48010] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 08:47:13.720798 2026] [authz_core:error] [pid 2448257:tid 2448257] [client 43.165.7.135:48010] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 08:47:14.032496 2026] [ssl:error] [pid 2450201:tid 2450201] (70014)End of file found: [client 216.73.216.199:15623] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:15.796060 2026] [ssl:error] [pid 2447189:tid 2447189] (EAI 2)Name or service not known: [client 144.76.19.72:51228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:15.796127 2026] [ssl:error] [pid 2447189:tid 2447189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:15.853295 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:51236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:15.853322 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:16.333531 2026] [ssl:error] [pid 2444127:tid 2444127] (70014)End of file found: [client 216.73.216.199:25657] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:17.011679 2026] [security2:error] [pid 2450815:tid 2450815] [client 39.63.209.175:60770] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBhYeKyQXaXMwPzjEUGwAAAAY"]
[Thu Jul 30 08:47:17.011730 2026] [security2:error] [pid 2450815:tid 2450815] [client 39.63.209.175:60770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBhYeKyQXaXMwPzjEUGwAAAAY"]
[Thu Jul 30 08:47:17.012048 2026] [security2:error] [pid 2450815:tid 2450815] [client 39.63.209.175:60770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBhYeKyQXaXMwPzjEUGwAAAAY"]
[Thu Jul 30 08:47:17.290967 2026] [security2:error] [pid 2451093:tid 2451093] [client 114.119.132.171:44851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,30/request_format~html"] [unique_id "amsBhZk8F6L1FAqekUZYEQAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,30,17/request_format~html
[Thu Jul 30 08:47:18.376031 2026] [ssl:error] [pid 2442029:tid 2442029] (70014)End of file found: [client 216.73.216.199:5924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:18.923644 2026] [ssl:error] [pid 2448430:tid 2448430] (EAI 2)Name or service not known: [client 144.76.19.72:51240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:18.923674 2026] [ssl:error] [pid 2448430:tid 2448430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:18.926301 2026] [security2:error] [pid 2442318:tid 2442318] [client 114.119.132.171:60891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,30/request_format~html"] [unique_id "amsBhjIvZjZy0OZ0I2UdcAAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,30,17/request_format~html
[Thu Jul 30 08:47:18.979747 2026] [ssl:error] [pid 2443649:tid 2443649] (EAI 2)Name or service not known: [client 144.76.19.72:51256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:18.979779 2026] [ssl:error] [pid 2443649:tid 2443649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:19.482422 2026] [ssl:error] [pid 2451093:tid 2451093] (70014)End of file found: [client 216.73.216.199:46855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:19.725878 2026] [core:error] [pid 2447189:tid 2447189] [client 66.249.64.171:35639] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:19.725913 2026] [core:error] [pid 2447189:tid 2447189] [client 66.249.64.171:35639] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:22.032143 2026] [ssl:error] [pid 2452190:tid 2452190] (EAI 2)Name or service not known: [client 144.76.19.72:28740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:22.032188 2026] [ssl:error] [pid 2452190:tid 2452190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:22.085747 2026] [ssl:error] [pid 2443649:tid 2443649] (EAI 2)Name or service not known: [client 144.76.19.72:28744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:22.085778 2026] [ssl:error] [pid 2443649:tid 2443649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:22.160940 2026] [security2:error] [pid 2444729:tid 2444729] [client 185.191.171.4:64516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amsBig8FgwnV6m9Vm1Q7SwAAAC8"]
[Thu Jul 30 08:47:22.292296 2026] [security2:error] [pid 2442318:tid 2442318] [client 216.73.216.199:48622] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/xsl.ini"] [unique_id "amsBijIvZjZy0OZ0I2UddQAAACw"]
[Thu Jul 30 08:47:22.292600 2026] [security2:error] [pid 2442318:tid 2442318] [client 216.73.216.199:48622] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/xsl.ini"] [unique_id "amsBijIvZjZy0OZ0I2UddQAAACw"]
[Thu Jul 30 08:47:22.292820 2026] [security2:error] [pid 2442318:tid 2442318] [client 216.73.216.199:48622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/xsl.ini"] [unique_id "amsBijIvZjZy0OZ0I2UddQAAACw"]
[Thu Jul 30 08:47:23.496709 2026] [security2:error] [pid 2442318:tid 2442318] [client 216.73.216.199:48622] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/fileinfo.ini"] [unique_id "amsBizIvZjZy0OZ0I2UdeQAAACw"]
[Thu Jul 30 08:47:23.497010 2026] [security2:error] [pid 2442318:tid 2442318] [client 216.73.216.199:48622] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/fileinfo.ini"] [unique_id "amsBizIvZjZy0OZ0I2UdeQAAACw"]
[Thu Jul 30 08:47:23.497250 2026] [security2:error] [pid 2442318:tid 2442318] [client 216.73.216.199:48622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/fileinfo.ini"] [unique_id "amsBizIvZjZy0OZ0I2UdeQAAACw"]
[Thu Jul 30 08:47:23.776569 2026] [authz_core:error] [pid 2448387:tid 2448387] [client 144.172.105.5:47378] AH01630: client denied by server configuration: /home/winterb/public_html/site/error_log
[Thu Jul 30 08:47:24.098977 2026] [core:error] [pid 2442318:tid 2442318] (13)Permission denied: [client 216.73.216.199:48622] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/iptable_mangle/sections/__mcount_loc
[Thu Jul 30 08:47:24.702273 2026] [ssl:error] [pid 2442318:tid 2442318] (70014)End of file found: [client 216.73.216.199:48622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:25.169338 2026] [ssl:error] [pid 2444162:tid 2444162] (EAI 2)Name or service not known: [client 144.76.19.72:28756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:25.169389 2026] [ssl:error] [pid 2444162:tid 2444162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:25.187341 2026] [ssl:error] [pid 2439307:tid 2439307] (70014)End of file found: [client 216.73.216.199:1659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:25.224184 2026] [ssl:error] [pid 2447189:tid 2447189] (EAI 2)Name or service not known: [client 144.76.19.72:28758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:25.224217 2026] [ssl:error] [pid 2447189:tid 2447189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:25.599542 2026] [security2:error] [pid 2442029:tid 2442029] [client 216.73.216.199:21045] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo_oci.ini"] [unique_id "amsBjWvBfo01F8bI-OiS5wAAABU"]
[Thu Jul 30 08:47:25.599930 2026] [security2:error] [pid 2442029:tid 2442029] [client 216.73.216.199:21045] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo_oci.ini"] [unique_id "amsBjWvBfo01F8bI-OiS5wAAABU"]
[Thu Jul 30 08:47:25.600270 2026] [security2:error] [pid 2442029:tid 2442029] [client 216.73.216.199:21045] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo_oci.ini"] [unique_id "amsBjWvBfo01F8bI-OiS5wAAABU"]
[Thu Jul 30 08:47:25.900514 2026] [security2:error] [pid 2442029:tid 2442029] [client 216.73.216.199:21045] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/mysqlnd.ini"] [unique_id "amsBjWvBfo01F8bI-OiS6AAAABU"]
[Thu Jul 30 08:47:25.900856 2026] [security2:error] [pid 2442029:tid 2442029] [client 216.73.216.199:21045] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/mysqlnd.ini"] [unique_id "amsBjWvBfo01F8bI-OiS6AAAABU"]
[Thu Jul 30 08:47:25.901133 2026] [security2:error] [pid 2442029:tid 2442029] [client 216.73.216.199:21045] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/mysqlnd.ini"] [unique_id "amsBjWvBfo01F8bI-OiS6AAAABU"]
[Thu Jul 30 08:47:26.800170 2026] [security2:error] [pid 2451093:tid 2451093] [client 185.191.171.9:48818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/pages/posts/so-long-and-thanks-for-all-the-help---rudi41.php"] [unique_id "amsBjpk8F6L1FAqekUZYFQAAAA0"]
[Thu Jul 30 08:47:27.333741 2026] [authz_core:error] [pid 2451986:tid 2451986] [client 82.102.18.190:38322] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/Requests/src/Exception/error_log
[Thu Jul 30 08:47:28.279670 2026] [ssl:error] [pid 2447189:tid 2447189] (EAI 2)Name or service not known: [client 144.76.19.72:28768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:28.279710 2026] [ssl:error] [pid 2447189:tid 2447189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:28.335807 2026] [ssl:error] [pid 2447533:tid 2447533] (EAI 2)Name or service not known: [client 144.76.19.72:28776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:28.335850 2026] [ssl:error] [pid 2447533:tid 2447533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:28.794612 2026] [security2:error] [pid 2446205:tid 2446205] [client 124.220.42.101:33736] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wartypig.com"] [uri "/"] [unique_id "amsBkMb3glGX1bSAg0SBLwAAAB0"]
[Thu Jul 30 08:47:29.516314 2026] [ssl:error] [pid 2442029:tid 2442029] (70014)End of file found: [client 216.73.216.199:21045] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:30.008495 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo_dblib.ini"] [unique_id "amsBksDIPIJS5Rz3OGjwDQAAADg"]
[Thu Jul 30 08:47:30.008805 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo_dblib.ini"] [unique_id "amsBksDIPIJS5Rz3OGjwDQAAADg"]
[Thu Jul 30 08:47:30.009021 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo_dblib.ini"] [unique_id "amsBksDIPIJS5Rz3OGjwDQAAADg"]
[Thu Jul 30 08:47:30.117969 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/dom.ini"] [unique_id "amsBksDIPIJS5Rz3OGjwDgAAADg"]
[Thu Jul 30 08:47:30.118282 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/dom.ini"] [unique_id "amsBksDIPIJS5Rz3OGjwDgAAADg"]
[Thu Jul 30 08:47:30.118512 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/dom.ini"] [unique_id "amsBksDIPIJS5Rz3OGjwDgAAADg"]
[Thu Jul 30 08:47:30.257923 2026] [core:error] [pid 2448351:tid 2448351] [client 77.75.79.54:16710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:30.257949 2026] [core:error] [pid 2448351:tid 2448351] [client 77.75.79.54:16710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:31.394508 2026] [ssl:error] [pid 2423798:tid 2423798] (EAI 2)Name or service not known: [client 144.76.19.72:33120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:31.394541 2026] [ssl:error] [pid 2423798:tid 2423798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:31.447412 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:33132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:31.447440 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:33.020031 2026] [security2:error] [pid 2447189:tid 2447189] [client 43.157.153.236:58300] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "amsBlbzX3A6SE1UxibswrAAAACQ"]
[Thu Jul 30 08:47:33.132918 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/wddx.ini"] [unique_id "amsBlcDIPIJS5Rz3OGjwGAAAADg"]
[Thu Jul 30 08:47:33.133195 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/wddx.ini"] [unique_id "amsBlcDIPIJS5Rz3OGjwGAAAADg"]
[Thu Jul 30 08:47:33.133392 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/wddx.ini"] [unique_id "amsBlcDIPIJS5Rz3OGjwGAAAADg"]
[Thu Jul 30 08:47:33.734854 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/imap.ini"] [unique_id "amsBlcDIPIJS5Rz3OGjwGgAAADg"]
[Thu Jul 30 08:47:33.735118 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/imap.ini"] [unique_id "amsBlcDIPIJS5Rz3OGjwGgAAADg"]
[Thu Jul 30 08:47:33.735322 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/imap.ini"] [unique_id "amsBlcDIPIJS5Rz3OGjwGgAAADg"]
[Thu Jul 30 08:47:34.035330 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo.ini"] [unique_id "amsBlsDIPIJS5Rz3OGjwGwAAADg"]
[Thu Jul 30 08:47:34.035577 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo.ini"] [unique_id "amsBlsDIPIJS5Rz3OGjwGwAAADg"]
[Thu Jul 30 08:47:34.035769 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/pdo.ini"] [unique_id "amsBlsDIPIJS5Rz3OGjwGwAAADg"]
[Thu Jul 30 08:47:34.324772 2026] [security2:error] [pid 2448423:tid 2448423] [client 43.157.153.236:39898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "amsBlpTApvEmkE-jf_4dIAAAACc"], referer: http://ditchfest.com
[Thu Jul 30 08:47:34.330020 2026] [core:error] [pid 2448427:tid 2448427] [client 66.249.66.195:50953] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:34.330030 2026] [core:error] [pid 2433323:tid 2433323] [client 66.249.66.195:55179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:34.330041 2026] [core:error] [pid 2448427:tid 2448427] [client 66.249.66.195:50953] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:34.330049 2026] [core:error] [pid 2433323:tid 2433323] [client 66.249.66.195:55179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:34.503663 2026] [ssl:error] [pid 2447372:tid 2447372] (EAI 2)Name or service not known: [client 144.76.19.72:33148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:34.503701 2026] [ssl:error] [pid 2447372:tid 2447372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:34.559013 2026] [ssl:error] [pid 2450739:tid 2450739] (EAI 2)Name or service not known: [client 144.76.19.72:33164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:34.559045 2026] [ssl:error] [pid 2450739:tid 2450739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:34.638239 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/gd.ini"] [unique_id "amsBlsDIPIJS5Rz3OGjwHQAAADg"]
[Thu Jul 30 08:47:34.638501 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/gd.ini"] [unique_id "amsBlsDIPIJS5Rz3OGjwHQAAADg"]
[Thu Jul 30 08:47:34.638723 2026] [security2:error] [pid 2448428:tid 2448428] [client 216.73.216.199:8338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/gd.ini"] [unique_id "amsBlsDIPIJS5Rz3OGjwHQAAADg"]
[Thu Jul 30 08:47:35.844122 2026] [ssl:error] [pid 2448428:tid 2448428] (70014)End of file found: [client 216.73.216.199:8338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:36.052096 2026] [security2:error] [pid 2450900:tid 2450900] [client 47.128.24.235:21298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsBmIphjvU7j68_QROwUgAAAAc"]
[Thu Jul 30 08:47:36.330886 2026] [ssl:error] [pid 2450739:tid 2450739] (70014)End of file found: [client 216.73.216.199:1139] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:37.613240 2026] [ssl:error] [pid 2444008:tid 2444008] (EAI 2)Name or service not known: [client 144.76.19.72:33176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:37.613273 2026] [ssl:error] [pid 2444008:tid 2444008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:37.664469 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:33178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:37.664502 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:38.444889 2026] [core:error] [pid 2448351:tid 2448351] [client 66.249.64.170:49697] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:38.444916 2026] [core:error] [pid 2448351:tid 2448351] [client 66.249.64.170:49697] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:39.157243 2026] [ssl:error] [pid 2433323:tid 2433323] (70014)End of file found: [client 216.73.216.199:25491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:39.622668 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.68:61834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:39.623295 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.68:61834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:40.721816 2026] [ssl:error] [pid 2448351:tid 2448351] (EAI 2)Name or service not known: [client 144.76.19.72:38724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:40.721855 2026] [ssl:error] [pid 2448351:tid 2448351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:40.778196 2026] [ssl:error] [pid 2448423:tid 2448423] (EAI 2)Name or service not known: [client 144.76.19.72:38728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:40.778241 2026] [ssl:error] [pid 2448423:tid 2448423] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:41.175398 2026] [ssl:error] [pid 2448423:tid 2448423] (70014)End of file found: [client 216.73.216.199:40179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:42.267178 2026] [authz_core:error] [pid 2448430:tid 2448430] [client 57.141.0.46:52242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:42.267800 2026] [authz_core:error] [pid 2448430:tid 2448430] [client 57.141.0.46:52242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:42.468155 2026] [security2:error] [pid 2448427:tid 2448427] [client 216.73.216.199:64953] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/xsl.ini"] [unique_id "amsBnmvDNn6T0ntK9wbVfQAAADU"]
[Thu Jul 30 08:47:42.468682 2026] [security2:error] [pid 2448427:tid 2448427] [client 216.73.216.199:64953] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/xsl.ini"] [unique_id "amsBnmvDNn6T0ntK9wbVfQAAADU"]
[Thu Jul 30 08:47:42.469168 2026] [security2:error] [pid 2448427:tid 2448427] [client 216.73.216.199:64953] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/xsl.ini"] [unique_id "amsBnmvDNn6T0ntK9wbVfQAAADU"]
[Thu Jul 30 08:47:43.655480 2026] [authz_core:error] [pid 2447189:tid 2447189] [client 57.141.0.11:36678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:43.656109 2026] [authz_core:error] [pid 2447189:tid 2447189] [client 57.141.0.11:36678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:43.834461 2026] [ssl:error] [pid 2448430:tid 2448430] (EAI 2)Name or service not known: [client 144.76.19.72:38746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:43.834491 2026] [ssl:error] [pid 2448430:tid 2448430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:43.889255 2026] [ssl:error] [pid 2447372:tid 2447372] (EAI 2)Name or service not known: [client 144.76.19.72:38750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:43.889295 2026] [ssl:error] [pid 2447372:tid 2447372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:44.574508 2026] [security2:error] [pid 2448427:tid 2448427] [client 216.73.216.199:64953] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/fileinfo.ini"] [unique_id "amsBoGvDNn6T0ntK9wbVhAAAADU"]
[Thu Jul 30 08:47:44.574844 2026] [security2:error] [pid 2448427:tid 2448427] [client 216.73.216.199:64953] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/fileinfo.ini"] [unique_id "amsBoGvDNn6T0ntK9wbVhAAAADU"]
[Thu Jul 30 08:47:44.575167 2026] [security2:error] [pid 2448427:tid 2448427] [client 216.73.216.199:64953] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/fileinfo.ini"] [unique_id "amsBoGvDNn6T0ntK9wbVhAAAADU"]
[Thu Jul 30 08:47:44.875535 2026] [ssl:error] [pid 2448427:tid 2448427] (70014)End of file found: [client 216.73.216.199:64953] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:45.481546 2026] [ssl:error] [pid 2446099:tid 2446099] (70014)End of file found: [client 216.73.216.199:55503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:45.898632 2026] [core:error] [pid 2442320:tid 2442320] [client 57.141.0.15:20016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:45.898657 2026] [core:error] [pid 2442320:tid 2442320] [client 57.141.0.15:20016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:46.587580 2026] [ssl:error] [pid 2451986:tid 2451986] (70014)End of file found: [client 216.73.216.199:7685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:46.944433 2026] [ssl:error] [pid 2448257:tid 2448257] (EAI 2)Name or service not known: [client 144.76.19.72:38760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:46.944472 2026] [ssl:error] [pid 2448257:tid 2448257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:46.998936 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:38762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:46.998965 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:48.923904 2026] [security2:error] [pid 2450815:tid 2450815] [client 43.157.181.189:37116] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsBpIeKyQXaXMwPzjEUIwAAAAY"]
[Thu Jul 30 08:47:49.054297 2026] [core:error] [pid 2448428:tid 2448428] (13)Permission denied: [client 216.73.216.199:7669] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/makeupbymail.co.uk.db
[Thu Jul 30 08:47:49.361533 2026] [security2:error] [pid 2444730:tid 2444730] [client 43.155.162.41:58130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "amsBpfWXxL1HsjU6uuYm2AAAADI"]
[Thu Jul 30 08:47:50.057092 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:45734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:50.057122 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:50.112551 2026] [ssl:error] [pid 2444414:tid 2444414] (EAI 2)Name or service not known: [client 144.76.19.72:45736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:50.112593 2026] [ssl:error] [pid 2444414:tid 2444414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:50.360930 2026] [core:error] [pid 2450201:tid 2450201] (13)Permission denied: [client 216.73.216.199:45207] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rui_item/cpu_slabs
[Thu Jul 30 08:47:50.801790 2026] [security2:error] [pid 2444730:tid 2444730] [client 43.157.181.189:60080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsBpvWXxL1HsjU6uuYm2QAAADI"], referer: http://staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 08:47:51.264388 2026] [ssl:error] [pid 2450201:tid 2450201] (70014)End of file found: [client 216.73.216.199:45207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:51.634275 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.70:43598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:51.634907 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.70:43598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:51.994734 2026] [security2:error] [pid 2453223:tid 2453223] [client 43.158.91.71:34010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-ganymede.com"] [uri "/"] [unique_id "amsBp0jTV-CE_yEvvIp67wAAABY"]
[Thu Jul 30 08:47:52.467468 2026] [core:error] [pid 2448428:tid 2448428] (13)Permission denied: [client 216.73.216.199:7669] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/fs/protected_hardlinks_allow_gid
[Thu Jul 30 08:47:53.069877 2026] [core:error] [pid 2448428:tid 2448428] (13)Permission denied: [client 216.73.216.199:7669] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-224/objs_per_slab
[Thu Jul 30 08:47:53.172975 2026] [ssl:error] [pid 2444729:tid 2444729] (EAI 2)Name or service not known: [client 144.76.19.72:45760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:53.172996 2026] [ssl:error] [pid 2444729:tid 2444729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:53.284881 2026] [ssl:error] [pid 2453258:tid 2453258] (EAI 2)Name or service not known: [client 144.76.19.72:45770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:53.284921 2026] [ssl:error] [pid 2453258:tid 2453258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:53.434284 2026] [core:error] [pid 2453259:tid 2453259] [client 66.249.64.170:60760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:53.434326 2026] [core:error] [pid 2453259:tid 2453259] [client 66.249.64.170:60760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:47:54.002583 2026] [authz_core:error] [pid 2451092:tid 2451092] [client 57.141.0.63:64520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:54.003203 2026] [authz_core:error] [pid 2451092:tid 2451092] [client 57.141.0.63:64520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:54.876716 2026] [ssl:error] [pid 2448428:tid 2448428] (70014)End of file found: [client 216.73.216.199:7669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:55.779942 2026] [core:error] [pid 2446205:tid 2446205] (13)Permission denied: [client 216.73.216.199:16961] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/aio_kiocb/slab_size
[Thu Jul 30 08:47:56.067293 2026] [authz_core:error] [pid 2453261:tid 2453261] [client 57.141.0.55:30818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:56.067914 2026] [authz_core:error] [pid 2453261:tid 2453261] [client 57.141.0.55:30818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:56.081408 2026] [ssl:error] [pid 2446205:tid 2446205] (70014)End of file found: [client 216.73.216.199:16961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:47:56.351582 2026] [ssl:error] [pid 2444414:tid 2444414] (EAI 2)Name or service not known: [client 144.76.19.72:45774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:56.351618 2026] [ssl:error] [pid 2444414:tid 2444414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:56.407444 2026] [ssl:error] [pid 2446985:tid 2446985] (EAI 2)Name or service not known: [client 144.76.19.72:45788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:56.407468 2026] [ssl:error] [pid 2446985:tid 2446985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:56.504715 2026] [security2:error] [pid 2450815:tid 2450815] [client 34.234.200.207:27460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2019/05/the-Times-222x300.png"] [unique_id "amsBrIeKyQXaXMwPzjEUJwAAAAY"]
[Thu Jul 30 08:47:56.828836 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 57.141.0.49:62288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:47:56.829515 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 57.141.0.49:62288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:47:58.192738 2026] [core:error] [pid 2450201:tid 2450201] (13)Permission denied: [client 216.73.216.199:29540] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_state/poison
[Thu Jul 30 08:47:59.377705 2026] [security2:error] [pid 2450739:tid 2450739] [client 52.201.155.215:64417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amsBr0ye6Q3DRklEQtTuUgAAAAI"]
[Thu Jul 30 08:47:59.461185 2026] [ssl:error] [pid 2448351:tid 2448351] (EAI 2)Name or service not known: [client 144.76.19.72:45796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:59.461229 2026] [ssl:error] [pid 2448351:tid 2448351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:47:59.514703 2026] [ssl:error] [pid 2453258:tid 2453258] (EAI 2)Name or service not known: [client 144.76.19.72:45800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:47:59.514741 2026] [ssl:error] [pid 2453258:tid 2453258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:00.004283 2026] [ssl:error] [pid 2450201:tid 2450201] (70014)End of file found: [client 216.73.216.199:29540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:01.226739 2026] [ssl:error] [pid 2448428:tid 2448428] (70014)End of file found: [client 216.73.216.199:9885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:01.233770 2026] [authz_core:error] [pid 2453185:tid 2453185] [client 57.141.0.33:60250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:01.234410 2026] [authz_core:error] [pid 2453185:tid 2453185] [client 57.141.0.33:60250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:01.496302 2026] [security2:error] [pid 2452864:tid 2452864] [client 8.216.48.248:47357] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBsWvXV6PPd9fxZB_60wAAAAU"]
[Thu Jul 30 08:48:01.496364 2026] [security2:error] [pid 2452864:tid 2452864] [client 8.216.48.248:47357] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBsWvXV6PPd9fxZB_60wAAAAU"]
[Thu Jul 30 08:48:01.496641 2026] [security2:error] [pid 2452864:tid 2452864] [client 8.216.48.248:47357] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBsWvXV6PPd9fxZB_60wAAAAU"]
[Thu Jul 30 08:48:01.708639 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.36:38220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:01.709270 2026] [authz_core:error] [pid 2444008:tid 2444008] [client 57.141.0.36:38220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:02.569440 2026] [ssl:error] [pid 2444008:tid 2444008] (EAI 2)Name or service not known: [client 144.76.19.72:44252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:02.569470 2026] [ssl:error] [pid 2444008:tid 2444008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:02.586590 2026] [security2:error] [pid 2452864:tid 2452864] [client 175.27.163.171:53050] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsBsmvXV6PPd9fxZB_61QAAAAU"]
[Thu Jul 30 08:48:02.626975 2026] [ssl:error] [pid 2453259:tid 2453259] (EAI 2)Name or service not known: [client 144.76.19.72:44268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:02.627007 2026] [ssl:error] [pid 2453259:tid 2453259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:03.128937 2026] [core:error] [pid 2453838:tid 2453838] [client 66.249.66.39:52191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:03.128998 2026] [core:error] [pid 2453838:tid 2453838] [client 66.249.66.39:52191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:03.130556 2026] [security2:error] [pid 2448427:tid 2448427] [client 44.196.118.6:42693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/32492"] [unique_id "amsBs2vDNn6T0ntK9wbViwAAADU"]
[Thu Jul 30 08:48:03.615133 2026] [ssl:error] [pid 2451927:tid 2451927] (70014)End of file found: [client 216.73.216.199:13616] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:04.992034 2026] [core:error] [pid 2444414:tid 2444414] [client 66.249.64.170:61532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:04.992084 2026] [core:error] [pid 2444414:tid 2444414] [client 66.249.64.170:61532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:05.316796 2026] [ssl:error] [pid 2448427:tid 2448427] (70014)End of file found: [client 216.73.216.199:63350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:05.362225 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.66.8:61333] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:05.362256 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.66.8:61333] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:05.683534 2026] [ssl:error] [pid 2451092:tid 2451092] (EAI 2)Name or service not known: [client 144.76.19.72:44272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:05.683580 2026] [ssl:error] [pid 2451092:tid 2451092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:05.740284 2026] [ssl:error] [pid 2452864:tid 2452864] (EAI 2)Name or service not known: [client 144.76.19.72:44286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:05.740315 2026] [ssl:error] [pid 2452864:tid 2452864] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:07.367357 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 57.141.0.2:20824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:07.367985 2026] [authz_core:error] [pid 2423798:tid 2423798] [client 57.141.0.2:20824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:07.778927 2026] [security2:error] [pid 2444162:tid 2444162] [client 43.153.215.116:48291] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBtwR6LYNTEH7ZE019gwAAABs"]
[Thu Jul 30 08:48:07.778989 2026] [security2:error] [pid 2444162:tid 2444162] [client 43.153.215.116:48291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBtwR6LYNTEH7ZE019gwAAABs"]
[Thu Jul 30 08:48:07.779266 2026] [security2:error] [pid 2444162:tid 2444162] [client 43.153.215.116:48291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBtwR6LYNTEH7ZE019gwAAABs"]
[Thu Jul 30 08:48:08.133913 2026] [core:error] [pid 2450201:tid 2450201] (13)Permission denied: [client 216.73.216.199:50596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/ilkagriese.com.db
[Thu Jul 30 08:48:08.819222 2026] [ssl:error] [pid 2433323:tid 2433323] (EAI 2)Name or service not known: [client 144.76.19.72:44294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:08.819247 2026] [ssl:error] [pid 2433323:tid 2433323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:08.872417 2026] [ssl:error] [pid 2448387:tid 2448387] (EAI 2)Name or service not known: [client 144.76.19.72:44304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:08.872464 2026] [ssl:error] [pid 2448387:tid 2448387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:08.881022 2026] [authz_core:error] [pid 2448430:tid 2448430] [client 57.141.0.44:33826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:08.881650 2026] [authz_core:error] [pid 2448430:tid 2448430] [client 57.141.0.44:33826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:09.038083 2026] [ssl:error] [pid 2450201:tid 2450201] (70014)End of file found: [client 216.73.216.199:50596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:09.634702 2026] [ssl:error] [pid 2448351:tid 2448351] (70014)End of file found: [client 216.73.216.199:17426] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:10.162556 2026] [security2:error] [pid 2450900:tid 2450900] [client 43.153.215.116:16291] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBuophjvU7j68_QROwYQAAAAc"]
[Thu Jul 30 08:48:10.162618 2026] [security2:error] [pid 2450900:tid 2450900] [client 43.153.215.116:16291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsBuophjvU7j68_QROwYQAAAAc"]
[Thu Jul 30 08:48:10.162891 2026] [security2:error] [pid 2450900:tid 2450900] [client 43.153.215.116:16291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsBuophjvU7j68_QROwYQAAAAc"]
[Thu Jul 30 08:48:11.955189 2026] [ssl:error] [pid 2453888:tid 2453888] (EAI 2)Name or service not known: [client 144.76.19.72:36844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:11.955225 2026] [ssl:error] [pid 2453888:tid 2453888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:12.007082 2026] [ssl:error] [pid 2448424:tid 2448424] (EAI 2)Name or service not known: [client 144.76.19.72:36854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:12.007115 2026] [ssl:error] [pid 2448424:tid 2448424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:12.042577 2026] [ssl:error] [pid 2442320:tid 2442320] (5)Input/output error: [client 216.73.216.199:44613] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:12.252326 2026] [authz_core:error] [pid 2453889:tid 2453889] [client 57.141.0.53:49032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:12.252947 2026] [authz_core:error] [pid 2453889:tid 2453889] [client 57.141.0.53:49032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:14.156183 2026] [authz_core:error] [pid 2451986:tid 2451986] [client 57.141.0.64:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:14.156809 2026] [authz_core:error] [pid 2451986:tid 2451986] [client 57.141.0.64:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:15.054214 2026] [ssl:error] [pid 2452864:tid 2452864] (70014)End of file found: [client 216.73.216.199:62031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:15.061057 2026] [ssl:error] [pid 2453888:tid 2453888] (EAI 2)Name or service not known: [client 144.76.19.72:36868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:15.061109 2026] [ssl:error] [pid 2453888:tid 2453888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:15.114402 2026] [ssl:error] [pid 2453261:tid 2453261] (EAI 2)Name or service not known: [client 144.76.19.72:36880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:15.114480 2026] [ssl:error] [pid 2453261:tid 2453261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:16.082214 2026] [authz_core:error] [pid 2448351:tid 2448351] [client 57.141.0.61:64586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:16.082842 2026] [authz_core:error] [pid 2448351:tid 2448351] [client 57.141.0.61:64586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:16.564414 2026] [ssl:error] [pid 2442029:tid 2442029] (70014)End of file found: [client 216.73.216.199:45318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:16.901779 2026] [authz_core:error] [pid 2451986:tid 2451986] [client 82.102.18.190:56694] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/Requests/src/Proxy/error_log
[Thu Jul 30 08:48:17.352994 2026] [ssl:error] [pid 2451986:tid 2451986] (70014)End of file found: [client 216.73.216.199:25179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:17.789063 2026] [core:error] [pid 2453258:tid 2453258] [client 66.249.64.171:35973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:17.789107 2026] [core:error] [pid 2453258:tid 2453258] [client 66.249.64.171:35973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:18.172709 2026] [ssl:error] [pid 2446024:tid 2446024] (EAI 2)Name or service not known: [client 144.76.19.72:36890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:18.172747 2026] [ssl:error] [pid 2446024:tid 2446024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:18.225756 2026] [ssl:error] [pid 2454597:tid 2454597] (EAI 2)Name or service not known: [client 144.76.19.72:36902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:18.225802 2026] [ssl:error] [pid 2454597:tid 2454597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:18.991502 2026] [security2:error] [pid 2442320:tid 2442320] [client 216.73.216.199:4598] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/phar.ini"] [unique_id "amsBwuIHV-9ldCSqFsjjfAAAADE"]
[Thu Jul 30 08:48:18.991869 2026] [security2:error] [pid 2442320:tid 2442320] [client 216.73.216.199:4598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/phar.ini"] [unique_id "amsBwuIHV-9ldCSqFsjjfAAAADE"]
[Thu Jul 30 08:48:18.992167 2026] [security2:error] [pid 2442320:tid 2442320] [client 216.73.216.199:4598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/phar.ini"] [unique_id "amsBwuIHV-9ldCSqFsjjfAAAADE"]
[Thu Jul 30 08:48:20.191269 2026] [security2:error] [pid 2454639:tid 2454639] [client 216.73.216.199:14976] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/dom.ini"] [unique_id "amsBxBsM7jNhOh7Mj9mVogAAACs"]
[Thu Jul 30 08:48:20.191583 2026] [security2:error] [pid 2454639:tid 2454639] [client 216.73.216.199:14976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/dom.ini"] [unique_id "amsBxBsM7jNhOh7Mj9mVogAAACs"]
[Thu Jul 30 08:48:20.191814 2026] [security2:error] [pid 2454639:tid 2454639] [client 216.73.216.199:14976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/dom.ini"] [unique_id "amsBxBsM7jNhOh7Mj9mVogAAACs"]
[Thu Jul 30 08:48:20.798173 2026] [ssl:error] [pid 2442320:tid 2442320] (70014)End of file found: [client 216.73.216.199:4598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:21.277971 2026] [ssl:error] [pid 2454598:tid 2454598] (EAI 2)Name or service not known: [client 144.76.19.72:59134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:21.278005 2026] [ssl:error] [pid 2454598:tid 2454598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:21.334124 2026] [ssl:error] [pid 2448423:tid 2448423] (EAI 2)Name or service not known: [client 144.76.19.72:59144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:21.334150 2026] [ssl:error] [pid 2448423:tid 2448423] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:21.762864 2026] [lsapi:error] [pid 2454637:tid 2454637] [client 216.73.216.199:10678] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/CodeIgniter.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/CodeIgniter.php on line 8\n
[Thu Jul 30 08:48:22.599556 2026] [ssl:error] [pid 2454639:tid 2454639] (70014)End of file found: [client 216.73.216.199:14976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:23.093284 2026] [core:error] [pid 2453185:tid 2453185] (13)Permission denied: [client 216.73.216.199:20194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/posix_timers_cache/cpu_partial
[Thu Jul 30 08:48:24.409020 2026] [ssl:error] [pid 2453185:tid 2453185] (EAI 2)Name or service not known: [client 144.76.19.72:59160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:24.409099 2026] [ssl:error] [pid 2453185:tid 2453185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:24.464642 2026] [ssl:error] [pid 2454637:tid 2454637] (EAI 2)Name or service not known: [client 144.76.19.72:59166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:24.464684 2026] [ssl:error] [pid 2454637:tid 2454637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:24.633293 2026] [ssl:error] [pid 2453889:tid 2453889] (70014)End of file found: [client 216.73.216.199:28348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:27.348523 2026] [ssl:error] [pid 2453261:tid 2453261] (70014)End of file found: [client 216.73.216.199:12301] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:27.521488 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:59178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:27.521512 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:27.577426 2026] [ssl:error] [pid 2450815:tid 2450815] (EAI 2)Name or service not known: [client 144.76.19.72:59194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:27.577485 2026] [ssl:error] [pid 2450815:tid 2450815] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:28.224998 2026] [authz_core:error] [pid 2453260:tid 2453260] [client 82.102.18.190:60772] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/Requests/src/Response/error_log
[Thu Jul 30 08:48:28.482843 2026] [core:error] [pid 2454639:tid 2454639] (13)Permission denied: [client 216.73.216.199:62744] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/sheflug.org.uk.db
[Thu Jul 30 08:48:28.611181 2026] [ssl:error] [pid 2454639:tid 2454639] (70014)End of file found: [client 216.73.216.199:62744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:30.634236 2026] [ssl:error] [pid 2453889:tid 2453889] (EAI 2)Name or service not known: [client 144.76.19.72:62832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:30.634269 2026] [ssl:error] [pid 2453889:tid 2453889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:30.690820 2026] [ssl:error] [pid 2446024:tid 2446024] (EAI 2)Name or service not known: [client 144.76.19.72:62842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:30.690844 2026] [ssl:error] [pid 2446024:tid 2446024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:32.820922 2026] [ssl:error] [pid 2453223:tid 2453223] (70014)End of file found: [client 216.73.216.199:43976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:33.122505 2026] [ssl:error] [pid 2444730:tid 2444730] (70014)End of file found: [client 216.73.216.199:34963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:33.750758 2026] [ssl:error] [pid 2454558:tid 2454558] (EAI 2)Name or service not known: [client 144.76.19.72:62844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:33.750804 2026] [ssl:error] [pid 2454558:tid 2454558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:33.809011 2026] [ssl:error] [pid 2454640:tid 2454640] (EAI 2)Name or service not known: [client 144.76.19.72:62860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:33.809041 2026] [ssl:error] [pid 2454640:tid 2454640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:34.631890 2026] [ssl:error] [pid 2442320:tid 2442320] (70014)End of file found: [client 216.73.216.199:24345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:36.686726 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 66.249.66.33:42743] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:48:36.689648 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 66.249.66.33:42743] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:48:36.866927 2026] [ssl:error] [pid 2454558:tid 2454558] (EAI 2)Name or service not known: [client 144.76.19.72:62864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:36.866955 2026] [ssl:error] [pid 2454558:tid 2454558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:36.923817 2026] [ssl:error] [pid 2455632:tid 2455632] (EAI 2)Name or service not known: [client 144.76.19.72:62872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:36.923853 2026] [ssl:error] [pid 2455632:tid 2455632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:37.308477 2026] [authz_core:error] [pid 2455631:tid 2455631] [client 57.141.0.45:58874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:37.309110 2026] [authz_core:error] [pid 2455631:tid 2455631] [client 57.141.0.45:58874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:38.168040 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.64.171:59046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:38.168076 2026] [core:error] [pid 2439307:tid 2439307] [client 66.249.64.171:59046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:38.298689 2026] [authz_core:error] [pid 2448257:tid 2448257] [client 57.141.0.64:30790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:38.299317 2026] [authz_core:error] [pid 2448257:tid 2448257] [client 57.141.0.64:30790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:38.843649 2026] [ssl:error] [pid 2455631:tid 2455631] (70014)End of file found: [client 216.73.216.199:11729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:38.940312 2026] [authz_core:error] [pid 2448428:tid 2448428] [client 66.249.66.33:36833] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:48:38.942966 2026] [authz_core:error] [pid 2448428:tid 2448428] [client 66.249.66.33:36833] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:48:39.143952 2026] [ssl:error] [pid 2454558:tid 2454558] (70014)End of file found: [client 216.73.216.199:10200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:39.982280 2026] [ssl:error] [pid 2433323:tid 2433323] (EAI 2)Name or service not known: [client 144.76.19.72:58646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:39.982310 2026] [ssl:error] [pid 2433323:tid 2433323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:40.039460 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:58662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:40.039488 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:40.649573 2026] [ssl:error] [pid 2452864:tid 2452864] (70014)End of file found: [client 216.73.216.199:8095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:41.452535 2026] [security2:error] [pid 2442320:tid 2442320] [client 114.119.142.20:64483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,103/request_format~html"] [unique_id "amsB2eIHV-9ldCSqFsjjigAAADE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14/request_format~html
[Thu Jul 30 08:48:41.469285 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 82.102.18.190:53620] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/Requests/src/Transport/error_log
[Thu Jul 30 08:48:42.496380 2026] [access_compat:error] [pid 2450201:tid 2450201] [client 20.100.187.180:29899] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 08:48:43.096387 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:58672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:43.096411 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:43.148187 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:58674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:43.148214 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:43.199297 2026] [security2:error] [pid 2453185:tid 2453185] [client 114.119.142.20:64489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14,103/request_format~html"] [unique_id "amsB25MxG86UI8ICMhYd2QAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,14/request_format~html
[Thu Jul 30 08:48:45.466035 2026] [ssl:error] [pid 2453260:tid 2453260] (70014)End of file found: [client 216.73.216.199:16597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:46.200146 2026] [ssl:error] [pid 2451092:tid 2451092] (EAI 2)Name or service not known: [client 144.76.19.72:58688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:46.200177 2026] [ssl:error] [pid 2451092:tid 2451092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:46.256550 2026] [ssl:error] [pid 2456471:tid 2456471] (EAI 2)Name or service not known: [client 144.76.19.72:58698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:46.256601 2026] [ssl:error] [pid 2456471:tid 2456471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:47.281787 2026] [autoindex:error] [pid 2442320:tid 2442320] (13)Permission denied: [client 216.73.216.199:48352] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/rogersb/
[Thu Jul 30 08:48:49.688520 2026] [ssl:error] [pid 2442320:tid 2442320] (70014)End of file found: [client 216.73.216.199:48352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:49.791389 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:29820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:49.791422 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:49.905968 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:29830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:49.906008 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:50.893012 2026] [ssl:error] [pid 2453185:tid 2453185] (70014)End of file found: [client 216.73.216.199:25575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:51.396961 2026] [ssl:error] [pid 2452039:tid 2452039] (70014)End of file found: [client 216.73.216.199:56269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:52.615235 2026] [security2:error] [pid 2450201:tid 2450201] [client 82.102.18.190:50592] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/src/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amsB5B5_y6u6XNBttVu0kAAAAAA"]
[Thu Jul 30 08:48:52.615550 2026] [security2:error] [pid 2450201:tid 2450201] [client 82.102.18.190:50592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amsB5B5_y6u6XNBttVu0kAAAAAA"]
[Thu Jul 30 08:48:52.965552 2026] [ssl:error] [pid 2448351:tid 2448351] (EAI 2)Name or service not known: [client 144.76.19.72:29834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:52.965593 2026] [ssl:error] [pid 2448351:tid 2448351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:53.042588 2026] [ssl:error] [pid 2450739:tid 2450739] (EAI 2)Name or service not known: [client 144.76.19.72:29838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:53.042614 2026] [ssl:error] [pid 2450739:tid 2450739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:53.339919 2026] [security2:error] [pid 2450201:tid 2450201] [client 82.102.18.190:50592] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "www.purple-childcare.co.uk"] [uri "/index.php"] [unique_id "amsB5B5_y6u6XNBttVu0kAAAAAA"]
[Thu Jul 30 08:48:55.012886 2026] [core:error] [pid 2454729:tid 2454729] (13)Permission denied: [client 216.73.216.199:61299] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_rmap_item/aliases
[Thu Jul 30 08:48:56.113838 2026] [ssl:error] [pid 2448351:tid 2448351] (EAI 2)Name or service not known: [client 144.76.19.72:29846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:56.113874 2026] [ssl:error] [pid 2448351:tid 2448351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:56.165491 2026] [ssl:error] [pid 2453261:tid 2453261] (EAI 2)Name or service not known: [client 144.76.19.72:29858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:56.165520 2026] [ssl:error] [pid 2453261:tid 2453261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:56.927047 2026] [ssl:error] [pid 2454729:tid 2454729] (70014)End of file found: [client 216.73.216.199:61299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:48:58.332133 2026] [core:error] [pid 2453185:tid 2453185] (13)Permission denied: [client 216.73.216.199:18124] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/acmpuk.org.db
[Thu Jul 30 08:48:58.394805 2026] [authz_core:error] [pid 2448428:tid 2448428] [client 57.141.0.59:22220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:58.395437 2026] [authz_core:error] [pid 2448428:tid 2448428] [client 57.141.0.59:22220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:58.846139 2026] [core:error] [pid 2433323:tid 2433323] [client 66.249.64.170:59070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:58.846162 2026] [core:error] [pid 2433323:tid 2433323] [client 66.249.64.170:59070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:48:59.008283 2026] [authz_core:error] [pid 2451092:tid 2451092] [client 57.141.0.35:40042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:48:59.008908 2026] [authz_core:error] [pid 2451092:tid 2451092] [client 57.141.0.35:40042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:48:59.218735 2026] [ssl:error] [pid 2450900:tid 2450900] (EAI 2)Name or service not known: [client 144.76.19.72:29872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:59.218763 2026] [ssl:error] [pid 2450900:tid 2450900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:59.275530 2026] [ssl:error] [pid 2451986:tid 2451986] (EAI 2)Name or service not known: [client 144.76.19.72:29884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:48:59.275587 2026] [ssl:error] [pid 2451986:tid 2451986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:48:59.535600 2026] [ssl:error] [pid 2453185:tid 2453185] (70014)End of file found: [client 216.73.216.199:18124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:00.133055 2026] [ssl:error] [pid 2452039:tid 2452039] (70014)End of file found: [client 216.73.216.199:53864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:00.242885 2026] [security2:error] [pid 2451986:tid 2451986] [client 43.153.58.28:38704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.soul-connections.net"] [uri "/"] [unique_id "amsB7CLJM9_b4f05G2chcwAAABA"]
[Thu Jul 30 08:49:01.495712 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.35:40058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:01.496350 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.35:40058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:02.331545 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:31836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:02.331607 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:02.390513 2026] [ssl:error] [pid 2444127:tid 2444127] (EAI 2)Name or service not known: [client 144.76.19.72:31840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:02.390539 2026] [ssl:error] [pid 2444127:tid 2444127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:02.793973 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 172.213.10.64:64389] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-includes/Text/error_log
[Thu Jul 30 08:49:02.895679 2026] [authz_core:error] [pid 2443649:tid 2443649] [client 172.213.10.64:64389] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-content/uploads/sucuri/index.php
[Thu Jul 30 08:49:04.054031 2026] [autoindex:error] [pid 2453258:tid 2453258] (13)Permission denied: [client 216.73.216.199:24192] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/nbhavers/
[Thu Jul 30 08:49:04.956157 2026] [core:error] [pid 2453258:tid 2453258] (13)Permission denied: [client 216.73.216.199:24192] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_icr/shrink
[Thu Jul 30 08:49:04.994838 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.46:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:04.995462 2026] [authz_core:error] [pid 2444127:tid 2444127] [client 57.141.0.46:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:05.447007 2026] [ssl:error] [pid 2451092:tid 2451092] (EAI 2)Name or service not known: [client 144.76.19.72:31850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:05.447030 2026] [ssl:error] [pid 2451092:tid 2451092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:05.501506 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:31854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:05.501539 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:05.557415 2026] [ssl:error] [pid 2453258:tid 2453258] (70014)End of file found: [client 216.73.216.199:24192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:05.851409 2026] [security2:error] [pid 2457242:tid 2457242] [client 85.208.96.200:38532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/robots.txt"] [unique_id "amsB8d8z7RkVFHfuDVPyLAAAAAY"]
[Thu Jul 30 08:49:06.156272 2026] [ssl:error] [pid 2456471:tid 2456471] (70014)End of file found: [client 216.73.216.199:1225] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:06.314615 2026] [core:error] [pid 2450900:tid 2450900] [client 66.249.66.8:39643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:06.314642 2026] [core:error] [pid 2450900:tid 2450900] [client 66.249.66.8:39643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:06.827012 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.17:38296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:06.827652 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.17:38296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:07.364124 2026] [core:error] [pid 2454640:tid 2454640] (13)Permission denied: [client 216.73.216.199:32319] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/3dprojectorhire.com.db
[Thu Jul 30 08:49:08.561656 2026] [ssl:error] [pid 2455632:tid 2455632] (EAI 2)Name or service not known: [client 144.76.19.72:31860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:08.561687 2026] [ssl:error] [pid 2455632:tid 2455632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:08.616155 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:31876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:08.616189 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:10.374509 2026] [ssl:error] [pid 2454640:tid 2454640] (70014)End of file found: [client 216.73.216.199:32319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:11.673392 2026] [ssl:error] [pid 2457552:tid 2457552] (EAI 2)Name or service not known: [client 144.76.19.72:39612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:11.673429 2026] [ssl:error] [pid 2457552:tid 2457552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:11.727518 2026] [ssl:error] [pid 2457555:tid 2457555] (EAI 2)Name or service not known: [client 144.76.19.72:39620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:11.727556 2026] [ssl:error] [pid 2457555:tid 2457555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:11.777217 2026] [authz_core:error] [pid 2457554:tid 2457554] [client 57.141.0.38:34706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:11.777904 2026] [authz_core:error] [pid 2457554:tid 2457554] [client 57.141.0.38:34706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:12.652436 2026] [security2:error] [pid 2457487:tid 2457487] [client 95.57.233.62:46772] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsB-C3BWYlLkjYDfRTgkAAAACY"]
[Thu Jul 30 08:49:12.652493 2026] [security2:error] [pid 2457487:tid 2457487] [client 95.57.233.62:46772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsB-C3BWYlLkjYDfRTgkAAAACY"]
[Thu Jul 30 08:49:12.652841 2026] [security2:error] [pid 2457487:tid 2457487] [client 95.57.233.62:46772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsB-C3BWYlLkjYDfRTgkAAAACY"]
[Thu Jul 30 08:49:13.081349 2026] [ssl:error] [pid 2444127:tid 2444127] (70014)End of file found: [client 216.73.216.199:33470] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:13.382354 2026] [core:error] [pid 2457551:tid 2457551] (13)Permission denied: [client 216.73.216.199:59537] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_perm_event/aliases
[Thu Jul 30 08:49:13.684296 2026] [ssl:error] [pid 2457551:tid 2457551] (70014)End of file found: [client 216.73.216.199:59537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:14.089500 2026] [authz_core:error] [pid 2456371:tid 2456371] [client 82.102.18.190:53300] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 08:49:14.588385 2026] [authz_core:error] [pid 2457555:tid 2457555] [client 172.71.158.129:11056] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 08:49:14.660434 2026] [authz_core:error] [pid 2451045:tid 2451045] [client 57.141.0.51:29436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:14.661048 2026] [authz_core:error] [pid 2451045:tid 2451045] [client 57.141.0.51:29436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:14.782913 2026] [ssl:error] [pid 2457683:tid 2457683] (EAI 2)Name or service not known: [client 144.76.19.72:39630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:14.782942 2026] [ssl:error] [pid 2457683:tid 2457683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:14.837610 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:39638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:14.837637 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:17.015135 2026] [security2:error] [pid 2450201:tid 2450201] [client 112.201.194.91:37436] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsB_R5_y6u6XNBttVu0lwAAAAA"]
[Thu Jul 30 08:49:17.015182 2026] [security2:error] [pid 2450201:tid 2450201] [client 112.201.194.91:37436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsB_R5_y6u6XNBttVu0lwAAAAA"]
[Thu Jul 30 08:49:17.015450 2026] [security2:error] [pid 2450201:tid 2450201] [client 112.201.194.91:37436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsB_R5_y6u6XNBttVu0lwAAAAA"]
[Thu Jul 30 08:49:17.298449 2026] [ssl:error] [pid 2451927:tid 2451927] (70014)End of file found: [client 216.73.216.199:12305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:17.506937 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.15:46336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:17.507595 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.15:46336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:17.627212 2026] [authz_core:error] [pid 2444730:tid 2444730] [client 20.104.16.169:23606] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/l10n/error_log
[Thu Jul 30 08:49:17.897572 2026] [ssl:error] [pid 2451045:tid 2451045] (EAI 2)Name or service not known: [client 144.76.19.72:39654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:17.897613 2026] [ssl:error] [pid 2451045:tid 2451045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:17.953639 2026] [ssl:error] [pid 2454639:tid 2454639] (EAI 2)Name or service not known: [client 144.76.19.72:39662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:17.953666 2026] [ssl:error] [pid 2454639:tid 2454639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:18.134915 2026] [core:error] [pid 2447533:tid 2447533] [client 66.249.64.170:57331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:18.134939 2026] [core:error] [pid 2447533:tid 2447533] [client 66.249.64.170:57331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:18.464440 2026] [core:error] [pid 2444127:tid 2444127] [client 66.249.64.172:47034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:18.464466 2026] [core:error] [pid 2444127:tid 2444127] [client 66.249.64.172:47034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:20.611294 2026] [ssl:error] [pid 2454639:tid 2454639] (70014)End of file found: [client 216.73.216.199:27341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:21.007662 2026] [ssl:error] [pid 2455631:tid 2455631] (EAI 2)Name or service not known: [client 144.76.19.72:24146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:21.007693 2026] [ssl:error] [pid 2455631:tid 2455631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:21.065351 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:24160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:21.065376 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:21.104514 2026] [ssl:error] [pid 2453261:tid 2453261] (70014)End of file found: [client 216.73.216.199:47023] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:22.888034 2026] [security2:error] [pid 2446024:tid 2446024] [client 43.159.135.203:41630] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampman.com"] [uri "/"] [unique_id "amsCAguxrd2oCUR3I5ACvQAAABc"]
[Thu Jul 30 08:49:23.548156 2026] [authz_core:error] [pid 2457551:tid 2457551] [client 57.141.0.44:25542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:23.548779 2026] [authz_core:error] [pid 2457551:tid 2457551] [client 57.141.0.44:25542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:24.118496 2026] [ssl:error] [pid 2455632:tid 2455632] (EAI 2)Name or service not known: [client 144.76.19.72:24168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:24.118526 2026] [ssl:error] [pid 2455632:tid 2455632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:24.173157 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:24172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:24.173181 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:24.207957 2026] [ssl:error] [pid 2451045:tid 2451045] (70014)End of file found: [client 216.73.216.199:5465] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:24.552591 2026] [security2:error] [pid 2446024:tid 2446024] [client 43.159.135.203:55514] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsCBAuxrd2oCUR3I5ACvwAAABc"], referer: http://spampman.com
[Thu Jul 30 08:49:26.320838 2026] [core:error] [pid 2457683:tid 2457683] (13)Permission denied: [client 216.73.216.199:9930] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 08:49:26.848517 2026] [authz_core:error] [pid 2457551:tid 2457551] [client 57.141.0.15:40176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:26.849151 2026] [authz_core:error] [pid 2457551:tid 2457551] [client 57.141.0.15:40176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:27.255952 2026] [ssl:error] [pid 2447533:tid 2447533] (EAI 2)Name or service not known: [client 144.76.19.72:24188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:27.255991 2026] [ssl:error] [pid 2447533:tid 2447533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:27.310223 2026] [ssl:error] [pid 2455561:tid 2455561] (EAI 2)Name or service not known: [client 144.76.19.72:24192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:27.310258 2026] [ssl:error] [pid 2455561:tid 2455561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:28.211431 2026] [authz_core:error] [pid 2457551:tid 2457551] [client 82.102.18.190:51356] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/SimplePie/library/error_log
[Thu Jul 30 08:49:28.733141 2026] [core:error] [pid 2457683:tid 2457683] (13)Permission denied: [client 216.73.216.199:9930] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rud_item/cpu_slabs
[Thu Jul 30 08:49:30.325818 2026] [security2:error] [pid 2457552:tid 2457552] [client 167.172.153.2:36062] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "unclaimedassets.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsCCk-pYj3yuD7UFY__JQAAADA"]
[Thu Jul 30 08:49:30.343903 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.43:55296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:30.344525 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.43:55296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:30.366478 2026] [ssl:error] [pid 2453185:tid 2453185] (EAI 2)Name or service not known: [client 144.76.19.72:26786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:30.366506 2026] [ssl:error] [pid 2453185:tid 2453185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:30.482951 2026] [ssl:error] [pid 2455561:tid 2455561] (EAI 2)Name or service not known: [client 144.76.19.72:26788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:30.482978 2026] [ssl:error] [pid 2455561:tid 2455561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:30.800412 2026] [authz_core:error] [pid 2458038:tid 2458038] [client 57.141.0.19:27520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:30.801031 2026] [authz_core:error] [pid 2458038:tid 2458038] [client 57.141.0.19:27520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:30.831313 2026] [lsapi:warn] [pid 2457552:tid 2457552] [client 167.172.153.2:36062] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:49:30.957741 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 20.100.187.180:9440] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/Requests/error_log
[Thu Jul 30 08:49:31.746537 2026] [core:error] [pid 2457683:tid 2457683] (13)Permission denied: [client 216.73.216.199:9930] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/unitedintelligence.co.uk.db
[Thu Jul 30 08:49:32.349364 2026] [ssl:error] [pid 2457683:tid 2457683] (5)Input/output error: [client 216.73.216.199:9930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:33.327103 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.22:57182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:33.327720 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.22:57182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:33.399316 2026] [core:error] [pid 2448428:tid 2448428] [client 66.249.64.171:41926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:33.399355 2026] [core:error] [pid 2448428:tid 2448428] [client 66.249.64.171:41926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:33.536881 2026] [ssl:error] [pid 2453259:tid 2453259] (EAI 2)Name or service not known: [client 144.76.19.72:26802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:33.536905 2026] [ssl:error] [pid 2453259:tid 2453259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:33.589815 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:26814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:33.589841 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:34.653441 2026] [core:error] [pid 2446985:tid 2446985] [client 66.249.64.171:48394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:34.653467 2026] [core:error] [pid 2446985:tid 2446985] [client 66.249.64.171:48394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:34.686501 2026] [authz_core:error] [pid 2448423:tid 2448423] [client 57.141.0.41:35086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:34.687134 2026] [authz_core:error] [pid 2448423:tid 2448423] [client 57.141.0.41:35086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:35.662208 2026] [ssl:error] [pid 2450900:tid 2450900] (70014)End of file found: [client 216.73.216.199:5834] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:36.154830 2026] [lsapi:error] [pid 2457555:tid 2457555] [client 216.73.216.199:58712] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Interface "Plesk\\Wappspector\\Matchers\\MatcherInterface" not found in /opt/cpanel/ea-wappspector/src/Matchers/Yii.php:13\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/Matchers/Yii.php on line 13\n
[Thu Jul 30 08:49:36.645002 2026] [ssl:error] [pid 2447533:tid 2447533] (EAI 2)Name or service not known: [client 144.76.19.72:26826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:36.645033 2026] [ssl:error] [pid 2447533:tid 2447533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:36.701421 2026] [ssl:error] [pid 2447101:tid 2447101] (EAI 2)Name or service not known: [client 144.76.19.72:26840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:36.701449 2026] [ssl:error] [pid 2447101:tid 2447101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:37.466339 2026] [ssl:error] [pid 2451045:tid 2451045] (70014)End of file found: [client 216.73.216.199:4224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:39.733830 2026] [security2:error] [pid 2454558:tid 2454558] [client 43.155.162.41:45402] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "amsCE1qcFaITpxkOq5F-WwAAAAo"]
[Thu Jul 30 08:49:39.754908 2026] [ssl:error] [pid 2454729:tid 2454729] (EAI 2)Name or service not known: [client 144.76.19.72:27302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:39.754948 2026] [ssl:error] [pid 2454729:tid 2454729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:39.811465 2026] [ssl:error] [pid 2442029:tid 2442029] (EAI 2)Name or service not known: [client 144.76.19.72:27316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:39.811494 2026] [ssl:error] [pid 2442029:tid 2442029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:40.315819 2026] [authz_core:error] [pid 2447101:tid 2447101] [client 172.213.10.64:63371] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-includes/js/jquery/error_log
[Thu Jul 30 08:49:41.077916 2026] [security2:error] [pid 2458039:tid 2458039] [client 216.73.216.199:47903] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tmpfiles.d/rpm.conf"] [unique_id "amsCFXwm7at2dhTO3fw4xwAAADk"]
[Thu Jul 30 08:49:41.078296 2026] [security2:error] [pid 2458039:tid 2458039] [client 216.73.216.199:47903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tmpfiles.d/rpm.conf"] [unique_id "amsCFXwm7at2dhTO3fw4xwAAADk"]
[Thu Jul 30 08:49:41.078543 2026] [security2:error] [pid 2458039:tid 2458039] [client 216.73.216.199:47903] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tmpfiles.d/rpm.conf"] [unique_id "amsCFXwm7at2dhTO3fw4xwAAADk"]
[Thu Jul 30 08:49:42.838840 2026] [security2:error] [pid 2452039:tid 2452039] [client 43.155.162.41:54204] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsCFvE-k5cCJxWxnoZBKAAAABE"], referer: http://purple-childcare.co.uk
[Thu Jul 30 08:49:42.867038 2026] [ssl:error] [pid 2454638:tid 2454638] (EAI 2)Name or service not known: [client 144.76.19.72:27324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:42.867085 2026] [ssl:error] [pid 2454638:tid 2454638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:42.884413 2026] [core:error] [pid 2458039:tid 2458039] (13)Permission denied: [client 216.73.216.199:47903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/cirrus/uevent
[Thu Jul 30 08:49:42.919243 2026] [ssl:error] [pid 2457488:tid 2457488] (EAI 2)Name or service not known: [client 144.76.19.72:27326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:42.919272 2026] [ssl:error] [pid 2457488:tid 2457488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:43.360713 2026] [authz_core:error] [pid 2450900:tid 2450900] [client 82.102.18.190:46536] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/SimplePie/library/SimplePie/error_log
[Thu Jul 30 08:49:44.497765 2026] [security2:error] [pid 2454729:tid 2454729] [client 43.155.27.244:57760] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unique-pr.co.uk"] [uri "/"] [unique_id "amsCGNdoGtKvZ0bUhVGE2gAAAC0"]
[Thu Jul 30 08:49:44.691651 2026] [ssl:error] [pid 2458039:tid 2458039] (70014)End of file found: [client 216.73.216.199:47903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:45.186174 2026] [core:error] [pid 2446024:tid 2446024] (13)Permission denied: [client 216.73.216.199:57965] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-224/poison
[Thu Jul 30 08:49:45.749305 2026] [authz_core:error] [pid 2454640:tid 2454640] [client 57.141.0.67:53442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:45.749916 2026] [authz_core:error] [pid 2454640:tid 2454640] [client 57.141.0.67:53442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:45.972922 2026] [ssl:error] [pid 2454729:tid 2454729] (EAI 2)Name or service not known: [client 144.76.19.72:27334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:45.972945 2026] [ssl:error] [pid 2454729:tid 2454729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:46.028781 2026] [ssl:error] [pid 2453222:tid 2453222] (EAI 2)Name or service not known: [client 144.76.19.72:27336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:46.028812 2026] [ssl:error] [pid 2453222:tid 2453222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:46.800055 2026] [autoindex:error] [pid 2446024:tid 2446024] (13)Permission denied: [client 216.73.216.199:57965] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/firstcl1/
[Thu Jul 30 08:49:47.400901 2026] [ssl:error] [pid 2446024:tid 2446024] (70014)End of file found: [client 216.73.216.199:57965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:47.558618 2026] [authz_core:error] [pid 2450900:tid 2450900] [client 66.249.66.33:40824] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:49:47.561269 2026] [authz_core:error] [pid 2450900:tid 2450900] [client 66.249.66.33:40824] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:49:47.951236 2026] [authz_core:error] [pid 2447533:tid 2447533] [client 172.213.10.64:64060] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-includes/l10n/error_log
[Thu Jul 30 08:49:48.331164 2026] [authz_core:error] [pid 2447533:tid 2447533] [client 172.213.10.64:64060] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-content/uploads/sucuri/index.php
[Thu Jul 30 08:49:49.081235 2026] [ssl:error] [pid 2444730:tid 2444730] (EAI 2)Name or service not known: [client 144.76.19.72:27348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:49.081261 2026] [ssl:error] [pid 2444730:tid 2444730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:49.137497 2026] [ssl:error] [pid 2448257:tid 2448257] (EAI 2)Name or service not known: [client 144.76.19.72:27356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:49.137529 2026] [ssl:error] [pid 2448257:tid 2448257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:50.116002 2026] [ssl:error] [pid 2457731:tid 2457731] (70014)End of file found: [client 216.73.216.199:23933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:50.632728 2026] [authz_core:error] [pid 2453222:tid 2453222] [client 57.141.0.13:52696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:50.633416 2026] [authz_core:error] [pid 2453222:tid 2453222] [client 57.141.0.13:52696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:50.718699 2026] [core:error] [pid 2448428:tid 2448428] (13)Permission denied: [client 216.73.216.199:11024] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-256/sanity_checks
[Thu Jul 30 08:49:51.321453 2026] [ssl:error] [pid 2448428:tid 2448428] (70014)End of file found: [client 216.73.216.199:11024] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:49:52.021724 2026] [authz_core:error] [pid 2450201:tid 2450201] [client 57.141.0.43:51652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:52.022346 2026] [authz_core:error] [pid 2450201:tid 2450201] [client 57.141.0.43:51652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:52.195956 2026] [ssl:error] [pid 2457552:tid 2457552] (EAI 2)Name or service not known: [client 144.76.19.72:47816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:52.195987 2026] [ssl:error] [pid 2457552:tid 2457552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:52.285667 2026] [ssl:error] [pid 2448351:tid 2448351] (EAI 2)Name or service not known: [client 144.76.19.72:47820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:52.285693 2026] [ssl:error] [pid 2448351:tid 2448351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:52.787243 2026] [security2:error] [pid 2459566:tid 2459566] [client 43.153.122.30:59888] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/"] [unique_id "amsCIDx9eSW5s5kgJQZ7aQAAAA0"]
[Thu Jul 30 08:49:53.124737 2026] [authz_core:error] [pid 2457552:tid 2457552] [client 216.73.216.82:54271] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 08:49:53.547790 2026] [security2:error] [pid 2450201:tid 2450201] [client 43.153.122.30:60666] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsCIR5_y6u6XNBttVu0pAAAAAA"], referer: http://www.clarepillinger.co.uk
[Thu Jul 30 08:49:53.969841 2026] [authz_core:error] [pid 2457488:tid 2457488] [client 57.141.0.33:36604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:53.970460 2026] [authz_core:error] [pid 2457488:tid 2457488] [client 57.141.0.33:36604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:55.040532 2026] [authz_core:error] [pid 2450201:tid 2450201] [client 57.141.0.30:52616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:55.041161 2026] [authz_core:error] [pid 2450201:tid 2450201] [client 57.141.0.30:52616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:55.357669 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:47844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:55.357705 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:55.413333 2026] [ssl:error] [pid 2448257:tid 2448257] (EAI 2)Name or service not known: [client 144.76.19.72:47848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:55.413355 2026] [ssl:error] [pid 2448257:tid 2448257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:55.756484 2026] [core:error] [pid 2459565:tid 2459565] (13)Permission denied: [client 216.73.216.199:43835] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/highcleresyndicates.co.uk.db
[Thu Jul 30 08:49:55.992590 2026] [authz_core:error] [pid 2448257:tid 2448257] [client 57.141.0.27:48596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:55.993249 2026] [authz_core:error] [pid 2448257:tid 2448257] [client 57.141.0.27:48596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:56.665695 2026] [security2:error] [pid 2459565:tid 2459565] [client 216.73.216.199:43835] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/zzzzzzz-pecl.ini"] [unique_id "amsCJJQ5ye6Bq3F7FN1nCgAAAAs"]
[Thu Jul 30 08:49:56.666003 2026] [security2:error] [pid 2459565:tid 2459565] [client 216.73.216.199:43835] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/zzzzzzz-pecl.ini"] [unique_id "amsCJJQ5ye6Bq3F7FN1nCgAAAAs"]
[Thu Jul 30 08:49:56.666237 2026] [security2:error] [pid 2459565:tid 2459565] [client 216.73.216.199:43835] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/zzzzzzz-pecl.ini"] [unique_id "amsCJJQ5ye6Bq3F7FN1nCgAAAAs"]
[Thu Jul 30 08:49:56.934351 2026] [authz_core:error] [pid 2447533:tid 2447533] [client 172.213.10.64:64060] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 08:49:57.045050 2026] [core:error] [pid 2452864:tid 2452864] [client 66.249.64.170:37986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:57.045091 2026] [core:error] [pid 2452864:tid 2452864] [client 66.249.64.170:37986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:49:57.115107 2026] [access_compat:error] [pid 2439307:tid 2439307] [client 20.100.187.180:17993] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 08:49:57.578327 2026] [core:error] [pid 2458039:tid 2458039] (13)Permission denied: [client 216.73.216.199:52013] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS0/line
[Thu Jul 30 08:49:58.000361 2026] [security2:error] [pid 2457554:tid 2457554] [client 114.119.150.34:43769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/sites/default/files/uploaded/Wine_List_Winter.pdf"] [unique_id "amsCJrAwb2TQFZR74zpLPgAAADE"]
[Thu Jul 30 08:49:58.310214 2026] [authz_core:error] [pid 2447101:tid 2447101] [client 57.141.0.56:62574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:49:58.310834 2026] [authz_core:error] [pid 2447101:tid 2447101] [client 57.141.0.56:62574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:49:58.466649 2026] [ssl:error] [pid 2459273:tid 2459273] (EAI 2)Name or service not known: [client 144.76.19.72:47868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:58.466685 2026] [ssl:error] [pid 2459273:tid 2459273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:49:58.524672 2026] [ssl:error] [pid 2446985:tid 2446985] (EAI 2)Name or service not known: [client 144.76.19.72:47870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:49:58.524698 2026] [ssl:error] [pid 2446985:tid 2446985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:01.501283 2026] [core:error] [pid 2459565:tid 2459565] (13)Permission denied: [client 216.73.216.199:43835] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-64/sanity_checks
[Thu Jul 30 08:50:01.545859 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 57.141.0.33:36608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:01.546520 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 57.141.0.33:36608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:01.582928 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:35410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:01.582973 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:01.638541 2026] [ssl:error] [pid 2455631:tid 2455631] (EAI 2)Name or service not known: [client 144.76.19.72:35418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:01.638584 2026] [ssl:error] [pid 2455631:tid 2455631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:01.708326 2026] [authz_core:error] [pid 2457554:tid 2457554] [client 66.249.66.34:52502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:50:01.711148 2026] [authz_core:error] [pid 2457554:tid 2457554] [client 66.249.66.34:52502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:50:02.061731 2026] [security2:error] [pid 2442029:tid 2442029] [client 146.56.229.214:40598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kirmond.com"] [uri "/"] [unique_id "amsCKmvBfo01F8bI-OiTkQAAABU"]
[Thu Jul 30 08:50:02.064582 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 146.56.229.214:40598] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 08:50:02.717242 2026] [core:error] [pid 2459565:tid 2459565] (13)Permission denied: [client 216.73.216.199:43835] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_ifork/shrink
[Thu Jul 30 08:50:03.638710 2026] [ssl:error] [pid 2459565:tid 2459565] (70014)End of file found: [client 216.73.216.199:43835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:03.940045 2026] [ssl:error] [pid 2458039:tid 2458039] (70014)End of file found: [client 216.73.216.199:52013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:04.532322 2026] [security2:error] [pid 2452039:tid 2452039] [client 82.102.18.190:34288] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/library/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amsCLPE-k5cCJxWxnoZBPAAAABE"]
[Thu Jul 30 08:50:04.532446 2026] [security2:error] [pid 2452039:tid 2452039] [client 82.102.18.190:34288] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amsCLPE-k5cCJxWxnoZBPAAAABE"]
[Thu Jul 30 08:50:04.691640 2026] [ssl:error] [pid 2455632:tid 2455632] (EAI 2)Name or service not known: [client 144.76.19.72:35426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:04.691667 2026] [ssl:error] [pid 2455632:tid 2455632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:04.747526 2026] [ssl:error] [pid 2448428:tid 2448428] (EAI 2)Name or service not known: [client 144.76.19.72:35434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:04.747574 2026] [ssl:error] [pid 2448428:tid 2448428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:05.314322 2026] [security2:error] [pid 2452039:tid 2452039] [client 82.102.18.190:34288] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "www.purple-childcare.co.uk"] [uri "/index.php"] [unique_id "amsCLPE-k5cCJxWxnoZBPAAAABE"]
[Thu Jul 30 08:50:05.485382 2026] [security2:error] [pid 2454640:tid 2454640] [client 114.119.146.111:51771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104/request_format~html"] [unique_id "amsCLat7kgpjmvNMDhx4cQAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104,17/request_format~html
[Thu Jul 30 08:50:06.869201 2026] [security2:error] [pid 2455632:tid 2455632] [client 114.119.146.111:51773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104/request_format~html"] [unique_id "amsCLohQedzPQcqzTzFnwAAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104,17/request_format~html
[Thu Jul 30 08:50:06.946312 2026] [authz_core:error] [pid 2454640:tid 2454640] [client 57.141.0.68:27746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:06.946932 2026] [authz_core:error] [pid 2454640:tid 2454640] [client 57.141.0.68:27746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:07.031130 2026] [security2:error] [pid 2457554:tid 2457554] [client 1.15.52.154:59196] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/"] [unique_id "amsCL7Awb2TQFZR74zpLQgAAADE"]
[Thu Jul 30 08:50:07.254975 2026] [security2:error] [pid 2458038:tid 2458038] [client 216.73.216.199:19966] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/pure-ftpd.conf"] [unique_id "amsCL977c1_GR9SLsrBvtQAAADc"]
[Thu Jul 30 08:50:07.255280 2026] [security2:error] [pid 2458038:tid 2458038] [client 216.73.216.199:19966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/pure-ftpd.conf"] [unique_id "amsCL977c1_GR9SLsrBvtQAAADc"]
[Thu Jul 30 08:50:07.255510 2026] [security2:error] [pid 2458038:tid 2458038] [client 216.73.216.199:19966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/pure-ftpd.conf"] [unique_id "amsCL977c1_GR9SLsrBvtQAAADc"]
[Thu Jul 30 08:50:07.293108 2026] [core:error] [pid 2444162:tid 2444162] [client 66.249.66.8:37260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:07.293143 2026] [core:error] [pid 2444162:tid 2444162] [client 66.249.66.8:37260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:07.802220 2026] [ssl:error] [pid 2454640:tid 2454640] (EAI 2)Name or service not known: [client 144.76.19.72:35450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:07.802248 2026] [ssl:error] [pid 2454640:tid 2454640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:07.861345 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:35464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:07.861387 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:07.914800 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/sudoers.d/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/sudoers.d/' is executable
[Thu Jul 30 08:50:07.921711 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/nftables/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/nftables/' is executable
[Thu Jul 30 08:50:07.925361 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/imunify-agent-proxy/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/imunify-agent-proxy/' is executable
[Thu Jul 30 08:50:07.944282 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/grub.d/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/grub.d/' is executable
[Thu Jul 30 08:50:07.944370 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/csf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/csf/' is executable
[Thu Jul 30 08:50:08.018442 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/named/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/named/' is executable
[Thu Jul 30 08:50:08.050179 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/audit/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/audit/' is executable
[Thu Jul 30 08:50:08.051864 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/sssd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/sssd/' is executable
[Thu Jul 30 08:50:08.074796 2026] [core:crit] [pid 2458038:tid 2458038] (13)Permission denied: [client 216.73.216.199:19966] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/firewalld/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/firewalld/' is executable
[Thu Jul 30 08:50:08.233507 2026] [security2:error] [pid 2459739:tid 2459739] [client 131.222.211.35:41168] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCMLwOFr1fizM6nscgMwAAABk"]
[Thu Jul 30 08:50:08.233582 2026] [security2:error] [pid 2459739:tid 2459739] [client 131.222.211.35:41168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCMLwOFr1fizM6nscgMwAAABk"]
[Thu Jul 30 08:50:08.233852 2026] [security2:error] [pid 2459739:tid 2459739] [client 131.222.211.35:41168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsCMLwOFr1fizM6nscgMwAAABk"]
[Thu Jul 30 08:50:08.363692 2026] [security2:error] [pid 2457554:tid 2457554] [client 1.15.52.154:60794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsCMLAwb2TQFZR74zpLQwAAADE"], referer: http://all4s.co.uk
[Thu Jul 30 08:50:09.033740 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 82.102.18.190:34288] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/SimplePie/src/error_log
[Thu Jul 30 08:50:09.671268 2026] [ssl:error] [pid 2458038:tid 2458038] (70014)End of file found: [client 216.73.216.199:19966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:09.983401 2026] [security2:error] [pid 2456371:tid 2456371] [client 103.124.110.57:45688] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCMXaIjb_2GorfY9aYYwAAABY"]
[Thu Jul 30 08:50:09.983449 2026] [security2:error] [pid 2456371:tid 2456371] [client 103.124.110.57:45688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCMXaIjb_2GorfY9aYYwAAABY"]
[Thu Jul 30 08:50:09.983739 2026] [security2:error] [pid 2456371:tid 2456371] [client 103.124.110.57:45688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsCMXaIjb_2GorfY9aYYwAAABY"]
[Thu Jul 30 08:50:10.916547 2026] [ssl:error] [pid 2459521:tid 2459521] (EAI 2)Name or service not known: [client 144.76.19.72:30714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:10.916591 2026] [ssl:error] [pid 2459521:tid 2459521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:10.971198 2026] [ssl:error] [pid 2455632:tid 2455632] (EAI 2)Name or service not known: [client 144.76.19.72:30716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:10.971221 2026] [ssl:error] [pid 2455632:tid 2455632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:13.292083 2026] [authz_core:error] [pid 2457554:tid 2457554] [client 216.73.216.199:48723] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.ini
[Thu Jul 30 08:50:13.353650 2026] [core:error] [pid 2457552:tid 2457552] [client 130.12.180.15:55476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:13.353669 2026] [core:error] [pid 2457552:tid 2457552] [client 130.12.180.15:55476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:13.882312 2026] [ssl:error] [pid 2457554:tid 2457554] (70014)End of file found: [client 216.73.216.199:48723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:14.024483 2026] [ssl:error] [pid 2457552:tid 2457552] (EAI 2)Name or service not known: [client 144.76.19.72:30732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:14.024546 2026] [ssl:error] [pid 2457552:tid 2457552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:14.078623 2026] [ssl:error] [pid 2450900:tid 2450900] (EAI 2)Name or service not known: [client 144.76.19.72:30742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:14.078648 2026] [ssl:error] [pid 2450900:tid 2450900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:14.381716 2026] [security2:error] [pid 2450900:tid 2450900] [client 182.62.230.59:23411] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCNophjvU7j68_QROwuAAAAAc"]
[Thu Jul 30 08:50:14.381769 2026] [security2:error] [pid 2450900:tid 2450900] [client 182.62.230.59:23411] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCNophjvU7j68_QROwuAAAAAc"]
[Thu Jul 30 08:50:14.382014 2026] [security2:error] [pid 2450900:tid 2450900] [client 182.62.230.59:23411] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsCNophjvU7j68_QROwuAAAAAc"]
[Thu Jul 30 08:50:15.061774 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 82.102.18.190:34288] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/SimplePie/src/Cache/error_log
[Thu Jul 30 08:50:17.131528 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:30764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:17.131582 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:17.189399 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:30770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:17.189425 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:17.231577 2026] [authz_core:error] [pid 2459664:tid 2459664] [client 57.141.0.1:26776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:17.232195 2026] [authz_core:error] [pid 2459664:tid 2459664] [client 57.141.0.1:26776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:17.499426 2026] [core:error] [pid 2459521:tid 2459521] (13)Permission denied: [client 216.73.216.199:39859] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-512/reclaim_account
[Thu Jul 30 08:50:17.716465 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.49:57650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:17.717093 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.49:57650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:19.005122 2026] [core:error] [pid 2459521:tid 2459521] (13)Permission denied: [client 216.73.216.199:39859] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cud_item/slabs
[Thu Jul 30 08:50:19.907194 2026] [security2:error] [pid 2459521:tid 2459521] [client 216.73.216.199:39859] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/aws/tuned.conf"] [unique_id "amsCO2CKX5AqDcax7mI58QAAAAk"]
[Thu Jul 30 08:50:19.907458 2026] [security2:error] [pid 2459521:tid 2459521] [client 216.73.216.199:39859] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/aws/tuned.conf"] [unique_id "amsCO2CKX5AqDcax7mI58QAAAAk"]
[Thu Jul 30 08:50:19.907720 2026] [security2:error] [pid 2459521:tid 2459521] [client 216.73.216.199:39859] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/aws/tuned.conf"] [unique_id "amsCO2CKX5AqDcax7mI58QAAAAk"]
[Thu Jul 30 08:50:20.243728 2026] [ssl:error] [pid 2457201:tid 2457201] (EAI 2)Name or service not known: [client 144.76.19.72:44234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:20.243761 2026] [ssl:error] [pid 2457201:tid 2457201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:20.299019 2026] [ssl:error] [pid 2459664:tid 2459664] (EAI 2)Name or service not known: [client 144.76.19.72:44246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:20.299054 2026] [ssl:error] [pid 2459664:tid 2459664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:21.112237 2026] [core:error] [pid 2459521:tid 2459521] (13)Permission denied: [client 216.73.216.199:39859] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bud_item/slabs
[Thu Jul 30 08:50:22.455325 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.55:60228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:22.455943 2026] [authz_core:error] [pid 2442029:tid 2442029] [client 57.141.0.55:60228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:23.365527 2026] [ssl:error] [pid 2460984:tid 2460984] (EAI 2)Name or service not known: [client 144.76.19.72:44250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:23.365561 2026] [ssl:error] [pid 2460984:tid 2460984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:23.418154 2026] [authz_core:error] [pid 2458038:tid 2458038] [client 57.141.0.45:52944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:23.418764 2026] [authz_core:error] [pid 2458038:tid 2458038] [client 57.141.0.45:52944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:23.419484 2026] [ssl:error] [pid 2457731:tid 2457731] (EAI 2)Name or service not known: [client 144.76.19.72:44260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:23.419518 2026] [ssl:error] [pid 2457731:tid 2457731] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:23.944149 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.3:32640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:23.944767 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.3:32640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:24.553350 2026] [core:error] [pid 2452864:tid 2452864] (13)Permission denied: [client 216.73.216.199:20310] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/freakorgeek.com.db
[Thu Jul 30 08:50:24.855625 2026] [ssl:error] [pid 2452864:tid 2452864] (70014)End of file found: [client 216.73.216.199:20310] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:25.157540 2026] [core:crit] [pid 2459737:tid 2459737] (13)Permission denied: [client 216.73.216.199:32375] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/chkservd/restart_track/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/chkservd/restart_track/' is executable
[Thu Jul 30 08:50:26.500352 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:44272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:26.500389 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:26.557848 2026] [ssl:error] [pid 2457554:tid 2457554] (EAI 2)Name or service not known: [client 144.76.19.72:44278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:26.557894 2026] [ssl:error] [pid 2457554:tid 2457554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:27.344595 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.21:64134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:27.345219 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.21:64134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:28.724603 2026] [lsapi:warn] [pid 2447533:tid 2447533] [client 198.38.94.87:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:50:29.374276 2026] [core:error] [pid 2450900:tid 2450900] [client 66.249.66.67:50182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:29.374305 2026] [core:error] [pid 2450900:tid 2450900] [client 66.249.66.67:50182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:29.444929 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.11:31338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:29.445546 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.11:31338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:29.613516 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:65484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:29.613543 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:29.665792 2026] [ssl:error] [pid 2447533:tid 2447533] (EAI 2)Name or service not known: [client 144.76.19.72:65492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:29.665830 2026] [ssl:error] [pid 2447533:tid 2447533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:29.974385 2026] [ssl:error] [pid 2459737:tid 2459737] (70014)End of file found: [client 216.73.216.199:32375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:32.719606 2026] [ssl:error] [pid 2457412:tid 2457412] (EAI 2)Name or service not known: [client 144.76.19.72:65500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:32.719641 2026] [ssl:error] [pid 2457412:tid 2457412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:32.773251 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:65504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:32.773275 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:33.061752 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.56:29666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:33.062371 2026] [authz_core:error] [pid 2439307:tid 2439307] [client 57.141.0.56:29666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:33.125940 2026] [core:error] [pid 2457731:tid 2457731] [client 66.249.64.170:35796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:33.125964 2026] [core:error] [pid 2457731:tid 2457731] [client 66.249.64.170:35796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:34.148100 2026] [authz_core:error] [pid 2457412:tid 2457412] [client 57.141.0.38:39610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:34.148725 2026] [authz_core:error] [pid 2457412:tid 2457412] [client 57.141.0.38:39610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:35.829465 2026] [ssl:error] [pid 2460984:tid 2460984] (EAI 2)Name or service not known: [client 144.76.19.72:65518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:35.829496 2026] [ssl:error] [pid 2460984:tid 2460984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:35.884494 2026] [ssl:error] [pid 2446024:tid 2446024] (EAI 2)Name or service not known: [client 144.76.19.72:65520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:35.884526 2026] [ssl:error] [pid 2446024:tid 2446024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:36.068260 2026] [security2:error] [pid 2459737:tid 2459737] [client 34.74.169.124:43274] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsCTJPAACQyV1g4BTCTDgAAABI"]
[Thu Jul 30 08:50:36.068519 2026] [security2:error] [pid 2459737:tid 2459737] [client 34.74.169.124:43274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsCTJPAACQyV1g4BTCTDgAAABI"]
[Thu Jul 30 08:50:36.068726 2026] [security2:error] [pid 2459737:tid 2459737] [client 34.74.169.124:43274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTJPAACQyV1g4BTCTDgAAABI"]
[Thu Jul 30 08:50:36.091259 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:43284] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsCTFU0MT747HfRnfk0MwAAAB0"]
[Thu Jul 30 08:50:36.091390 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:43284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsCTFU0MT747HfRnfk0MwAAAB0"]
[Thu Jul 30 08:50:36.091594 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:43284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTFU0MT747HfRnfk0MwAAAB0"]
[Thu Jul 30 08:50:36.145406 2026] [core:error] [pid 2451045:tid 2451045] [client 57.141.0.34:50024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:36.145431 2026] [core:error] [pid 2451045:tid 2451045] [client 57.141.0.34:50024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:50:36.377080 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43320] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsCTJQ5ye6Bq3F7FN1nKQAAAAs"]
[Thu Jul 30 08:50:36.377266 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsCTJQ5ye6Bq3F7FN1nKQAAAAs"]
[Thu Jul 30 08:50:36.377480 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTJQ5ye6Bq3F7FN1nKQAAAAs"]
[Thu Jul 30 08:50:36.445454 2026] [security2:error] [pid 2446985:tid 2446985] [client 34.74.169.124:43354] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsCTDT_D6DEuVXJuEyr8AAAABQ"]
[Thu Jul 30 08:50:36.445648 2026] [security2:error] [pid 2446985:tid 2446985] [client 34.74.169.124:43354] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsCTDT_D6DEuVXJuEyr8AAAABQ"]
[Thu Jul 30 08:50:36.445846 2026] [security2:error] [pid 2446985:tid 2446985] [client 34.74.169.124:43354] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTDT_D6DEuVXJuEyr8AAAABQ"]
[Thu Jul 30 08:50:36.821782 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:43372] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsCTFU0MT747HfRnfk0NAAAAB0"]
[Thu Jul 30 08:50:36.821976 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:43372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsCTFU0MT747HfRnfk0NAAAAB0"]
[Thu Jul 30 08:50:36.822203 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:43372] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTFU0MT747HfRnfk0NAAAAB0"]
[Thu Jul 30 08:50:36.845017 2026] [security2:error] [pid 2450201:tid 2450201] [client 34.74.169.124:43374] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsCTB5_y6u6XNBttVu0twAAAAA"]
[Thu Jul 30 08:50:36.845213 2026] [security2:error] [pid 2450201:tid 2450201] [client 34.74.169.124:43374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsCTB5_y6u6XNBttVu0twAAAAA"]
[Thu Jul 30 08:50:36.845411 2026] [security2:error] [pid 2450201:tid 2450201] [client 34.74.169.124:43374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTB5_y6u6XNBttVu0twAAAAA"]
[Thu Jul 30 08:50:36.855294 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:43376] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsCTHgfDmpjcHZpNe6XqwAAAAg"]
[Thu Jul 30 08:50:36.855472 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:43376] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsCTHgfDmpjcHZpNe6XqwAAAAg"]
[Thu Jul 30 08:50:36.855680 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:43376] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTHgfDmpjcHZpNe6XqwAAAAg"]
[Thu Jul 30 08:50:36.861401 2026] [security2:error] [pid 2455631:tid 2455631] [client 34.74.169.124:43390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsCTPUjyNApu6QwvX90nAAAACI"]
[Thu Jul 30 08:50:36.861578 2026] [security2:error] [pid 2455631:tid 2455631] [client 34.74.169.124:43390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsCTPUjyNApu6QwvX90nAAAACI"]
[Thu Jul 30 08:50:36.861988 2026] [security2:error] [pid 2455631:tid 2455631] [client 34.74.169.124:43390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTPUjyNApu6QwvX90nAAAACI"]
[Thu Jul 30 08:50:36.948870 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43406] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsCTJQ5ye6Bq3F7FN1nKgAAAAs"]
[Thu Jul 30 08:50:36.949086 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsCTJQ5ye6Bq3F7FN1nKgAAAAs"]
[Thu Jul 30 08:50:36.949297 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTJQ5ye6Bq3F7FN1nKgAAAAs"]
[Thu Jul 30 08:50:36.987735 2026] [security2:error] [pid 2444730:tid 2444730] [client 34.74.169.124:43420] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsCTPWXxL1HsjU6uuYnYAAAADI"]
[Thu Jul 30 08:50:36.987918 2026] [security2:error] [pid 2444730:tid 2444730] [client 34.74.169.124:43420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsCTPWXxL1HsjU6uuYnYAAAADI"]
[Thu Jul 30 08:50:36.988129 2026] [security2:error] [pid 2444730:tid 2444730] [client 34.74.169.124:43420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTPWXxL1HsjU6uuYnYAAAADI"]
[Thu Jul 30 08:50:37.111527 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:43434] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsCTYw2rZeTblVNLpwkPAAAABo"]
[Thu Jul 30 08:50:37.111721 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:43434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsCTYw2rZeTblVNLpwkPAAAABo"]
[Thu Jul 30 08:50:37.111916 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:43434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTYw2rZeTblVNLpwkPAAAABo"]
[Thu Jul 30 08:50:37.159582 2026] [security2:error] [pid 2455632:tid 2455632] [client 34.74.169.124:43456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsCTYhQedzPQcqzTzFnzAAAACM"]
[Thu Jul 30 08:50:37.159762 2026] [security2:error] [pid 2455632:tid 2455632] [client 34.74.169.124:43456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsCTYhQedzPQcqzTzFnzAAAACM"]
[Thu Jul 30 08:50:37.159953 2026] [security2:error] [pid 2455632:tid 2455632] [client 34.74.169.124:43456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTYhQedzPQcqzTzFnzAAAACM"]
[Thu Jul 30 08:50:37.160693 2026] [security2:error] [pid 2459664:tid 2459664] [client 34.74.169.124:43446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsCTRxsY2bcJlsJ67-zCAAAAA4"]
[Thu Jul 30 08:50:37.160835 2026] [security2:error] [pid 2459664:tid 2459664] [client 34.74.169.124:43446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsCTRxsY2bcJlsJ67-zCAAAAA4"]
[Thu Jul 30 08:50:37.161025 2026] [security2:error] [pid 2459664:tid 2459664] [client 34.74.169.124:43446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTRxsY2bcJlsJ67-zCAAAAA4"]
[Thu Jul 30 08:50:37.185914 2026] [security2:error] [pid 2446985:tid 2446985] [client 34.74.169.124:43466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsCTTT_D6DEuVXJuEyr8QAAABQ"]
[Thu Jul 30 08:50:37.186099 2026] [security2:error] [pid 2446985:tid 2446985] [client 34.74.169.124:43466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsCTTT_D6DEuVXJuEyr8QAAABQ"]
[Thu Jul 30 08:50:37.186295 2026] [security2:error] [pid 2446985:tid 2446985] [client 34.74.169.124:43466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTTT_D6DEuVXJuEyr8QAAABQ"]
[Thu Jul 30 08:50:38.011183 2026] [authz_core:error] [pid 2451045:tid 2451045] [client 34.74.169.124:43582] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 08:50:38.127832 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:43600] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsCTlqcFaITpxkOq5F-bwAAAAo"]
[Thu Jul 30 08:50:38.127988 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:43600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsCTlqcFaITpxkOq5F-bwAAAAo"]
[Thu Jul 30 08:50:38.128282 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:43600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCTlqcFaITpxkOq5F-bwAAAAo"]
[Thu Jul 30 08:50:38.942014 2026] [ssl:error] [pid 2453222:tid 2453222] (EAI 2)Name or service not known: [client 144.76.19.72:65534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:38.942044 2026] [ssl:error] [pid 2453222:tid 2453222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:38.996483 2026] [ssl:error] [pid 2453222:tid 2453222] (EAI 2)Name or service not known: [client 144.76.19.72:18008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:38.996511 2026] [ssl:error] [pid 2453222:tid 2453222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:39.423173 2026] [security2:error] [pid 2453222:tid 2453222] [client 34.74.169.124:43732] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amsCT4MpN2Pc0orYt7nprQAAABM"]
[Thu Jul 30 08:50:39.423464 2026] [security2:error] [pid 2453222:tid 2453222] [client 34.74.169.124:43732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amsCT4MpN2Pc0orYt7nprQAAABM"]
[Thu Jul 30 08:50:39.423709 2026] [security2:error] [pid 2453222:tid 2453222] [client 34.74.169.124:43732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCT4MpN2Pc0orYt7nprQAAABM"]
[Thu Jul 30 08:50:39.609290 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:43752] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amsCT4OMvMZgtyc5ahAI4AAAADY"]
[Thu Jul 30 08:50:39.609538 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:43752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amsCT4OMvMZgtyc5ahAI4AAAADY"]
[Thu Jul 30 08:50:39.609764 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:43752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCT4OMvMZgtyc5ahAI4AAAADY"]
[Thu Jul 30 08:50:39.682511 2026] [security2:error] [pid 2442029:tid 2442029] [client 34.74.169.124:43758] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amsCT2vBfo01F8bI-OiTqQAAABU"]
[Thu Jul 30 08:50:39.682791 2026] [security2:error] [pid 2442029:tid 2442029] [client 34.74.169.124:43758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amsCT2vBfo01F8bI-OiTqQAAABU"]
[Thu Jul 30 08:50:39.683006 2026] [security2:error] [pid 2442029:tid 2442029] [client 34.74.169.124:43758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCT2vBfo01F8bI-OiTqQAAABU"]
[Thu Jul 30 08:50:39.810628 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:43764] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amsCT4w2rZeTblVNLpwkQgAAABo"]
[Thu Jul 30 08:50:39.810894 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:43764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amsCT4w2rZeTblVNLpwkQgAAABo"]
[Thu Jul 30 08:50:39.811108 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:43764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCT4w2rZeTblVNLpwkQgAAABo"]
[Thu Jul 30 08:50:39.830844 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43778] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amsCT5Q5ye6Bq3F7FN1nLwAAAAs"]
[Thu Jul 30 08:50:39.831142 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amsCT5Q5ye6Bq3F7FN1nLwAAAAs"]
[Thu Jul 30 08:50:39.831364 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:43778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCT5Q5ye6Bq3F7FN1nLwAAAAs"]
[Thu Jul 30 08:50:39.891639 2026] [security2:error] [pid 2454640:tid 2454640] [client 34.74.169.124:43788] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsCT6t7kgpjmvNMDhx4fQAAACw"]
[Thu Jul 30 08:50:39.891909 2026] [security2:error] [pid 2454640:tid 2454640] [client 34.74.169.124:43788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsCT6t7kgpjmvNMDhx4fQAAACw"]
[Thu Jul 30 08:50:39.892126 2026] [security2:error] [pid 2454640:tid 2454640] [client 34.74.169.124:43788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCT6t7kgpjmvNMDhx4fQAAACw"]
[Thu Jul 30 08:50:39.988406 2026] [security2:error] [pid 2455632:tid 2455632] [client 34.74.169.124:43800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsCT4hQedzPQcqzTzFn0AAAACM"]
[Thu Jul 30 08:50:39.988621 2026] [security2:error] [pid 2455632:tid 2455632] [client 34.74.169.124:43800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsCT4hQedzPQcqzTzFn0AAAACM"]
[Thu Jul 30 08:50:39.988819 2026] [security2:error] [pid 2455632:tid 2455632] [client 34.74.169.124:43800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCT4hQedzPQcqzTzFn0AAAACM"]
[Thu Jul 30 08:50:40.446163 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:43862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsCUCLJM9_b4f05G2ch-wAAABA"]
[Thu Jul 30 08:50:40.446329 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:43862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsCUCLJM9_b4f05G2ch-wAAABA"]
[Thu Jul 30 08:50:40.446521 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:43862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUCLJM9_b4f05G2ch-wAAABA"]
[Thu Jul 30 08:50:40.677275 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 08:50:40.677322 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 08:50:40.679889 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 08:50:40.680925 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 08:50:41.012302 2026] [security2:error] [pid 2450900:tid 2450900] [client 34.74.169.124:43948] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amsCUYphjvU7j68_QROwywAAAAc"]
[Thu Jul 30 08:50:41.012489 2026] [security2:error] [pid 2450900:tid 2450900] [client 34.74.169.124:43948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amsCUYphjvU7j68_QROwywAAAAc"]
[Thu Jul 30 08:50:41.012705 2026] [security2:error] [pid 2450900:tid 2450900] [client 34.74.169.124:43948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUYphjvU7j68_QROwywAAAAc"]
[Thu Jul 30 08:50:41.141330 2026] [security2:error] [pid 2442029:tid 2442029] [client 34.74.169.124:43984] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amsCUWvBfo01F8bI-OiTrAAAABU"]
[Thu Jul 30 08:50:41.141330 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:43966] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amsCUYOMvMZgtyc5ahAI4wAAADY"]
[Thu Jul 30 08:50:41.141522 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:43966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amsCUYOMvMZgtyc5ahAI4wAAADY"]
[Thu Jul 30 08:50:41.141522 2026] [security2:error] [pid 2442029:tid 2442029] [client 34.74.169.124:43984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amsCUWvBfo01F8bI-OiTrAAAABU"]
[Thu Jul 30 08:50:41.141749 2026] [security2:error] [pid 2442029:tid 2442029] [client 34.74.169.124:43984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUWvBfo01F8bI-OiTrAAAABU"]
[Thu Jul 30 08:50:41.141750 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:43966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUYOMvMZgtyc5ahAI4wAAADY"]
[Thu Jul 30 08:50:41.145060 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:43970] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amsCUXgfDmpjcHZpNe6XswAAAAg"]
[Thu Jul 30 08:50:41.145319 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:43970] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amsCUXgfDmpjcHZpNe6XswAAAAg"]
[Thu Jul 30 08:50:41.145514 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:43970] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUXgfDmpjcHZpNe6XswAAAAg"]
[Thu Jul 30 08:50:41.309292 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:44000] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amsCUZQ5ye6Bq3F7FN1nMgAAAAs"]
[Thu Jul 30 08:50:41.309481 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:44000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amsCUZQ5ye6Bq3F7FN1nMgAAAAs"]
[Thu Jul 30 08:50:41.309691 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:44000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUZQ5ye6Bq3F7FN1nMgAAAAs"]
[Thu Jul 30 08:50:41.327707 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44006] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amsCUYw2rZeTblVNLpwkRQAAABo"]
[Thu Jul 30 08:50:41.327892 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amsCUYw2rZeTblVNLpwkRQAAABo"]
[Thu Jul 30 08:50:41.328100 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUYw2rZeTblVNLpwkRQAAABo"]
[Thu Jul 30 08:50:41.367791 2026] [security2:error] [pid 2447533:tid 2447533] [client 34.74.169.124:44018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amsCUdIPmoCHjrznwi7ppwAAAAQ"]
[Thu Jul 30 08:50:41.367972 2026] [security2:error] [pid 2447533:tid 2447533] [client 34.74.169.124:44018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amsCUdIPmoCHjrznwi7ppwAAAAQ"]
[Thu Jul 30 08:50:41.368180 2026] [security2:error] [pid 2447533:tid 2447533] [client 34.74.169.124:44018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUdIPmoCHjrznwi7ppwAAAAQ"]
[Thu Jul 30 08:50:41.672247 2026] [security2:error] [pid 2444730:tid 2444730] [client 34.74.169.124:44058] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsCUfWXxL1HsjU6uuYnYQAAADI"]
[Thu Jul 30 08:50:41.672440 2026] [security2:error] [pid 2444730:tid 2444730] [client 34.74.169.124:44058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsCUfWXxL1HsjU6uuYnYQAAADI"]
[Thu Jul 30 08:50:41.672657 2026] [security2:error] [pid 2444730:tid 2444730] [client 34.74.169.124:44058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUfWXxL1HsjU6uuYnYQAAADI"]
[Thu Jul 30 08:50:41.673020 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44064] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsCUYw2rZeTblVNLpwkRgAAABo"]
[Thu Jul 30 08:50:41.673172 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsCUYw2rZeTblVNLpwkRgAAABo"]
[Thu Jul 30 08:50:41.673365 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUYw2rZeTblVNLpwkRgAAABo"]
[Thu Jul 30 08:50:41.717021 2026] [security2:error] [pid 2453259:tid 2453259] [client 34.74.169.124:44080] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsCUWtxE-fC0fumz8GvWQAAABw"]
[Thu Jul 30 08:50:41.717222 2026] [security2:error] [pid 2453259:tid 2453259] [client 34.74.169.124:44080] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsCUWtxE-fC0fumz8GvWQAAABw"]
[Thu Jul 30 08:50:41.717428 2026] [security2:error] [pid 2453259:tid 2453259] [client 34.74.169.124:44080] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUWtxE-fC0fumz8GvWQAAABw"]
[Thu Jul 30 08:50:42.030180 2026] [autoindex:error] [pid 2446024:tid 2446024] (13)Permission denied: [client 216.73.216.199:11136] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/leacces1/
[Thu Jul 30 08:50:42.053919 2026] [ssl:error] [pid 2453259:tid 2453259] (EAI 2)Name or service not known: [client 144.76.19.72:40200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:42.053945 2026] [ssl:error] [pid 2453259:tid 2453259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:42.066541 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:44112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsCUngfDmpjcHZpNe6XtQAAAAg"]
[Thu Jul 30 08:50:42.066737 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:44112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsCUngfDmpjcHZpNe6XtQAAAAg"]
[Thu Jul 30 08:50:42.066945 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:44112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUngfDmpjcHZpNe6XtQAAAAg"]
[Thu Jul 30 08:50:42.108270 2026] [ssl:error] [pid 2453222:tid 2453222] (EAI 2)Name or service not known: [client 144.76.19.72:40210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:42.108301 2026] [ssl:error] [pid 2453222:tid 2453222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:42.697919 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:44204] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsCUiLJM9_b4f05G2ch_wAAABA"]
[Thu Jul 30 08:50:42.698083 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:44204] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsCUiLJM9_b4f05G2ch_wAAABA"]
[Thu Jul 30 08:50:42.698259 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:44204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsCUiLJM9_b4f05G2ch_wAAABA"]
[Thu Jul 30 08:50:42.698457 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:44204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUiLJM9_b4f05G2ch_wAAABA"]
[Thu Jul 30 08:50:43.022056 2026] [security2:error] [pid 2460840:tid 2460840] [client 34.74.169.124:44240] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsCUxAog9mPtoiII-B_hgAAAA0"]
[Thu Jul 30 08:50:43.022364 2026] [security2:error] [pid 2460840:tid 2460840] [client 34.74.169.124:44240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsCUxAog9mPtoiII-B_hgAAAA0"]
[Thu Jul 30 08:50:43.022595 2026] [security2:error] [pid 2460840:tid 2460840] [client 34.74.169.124:44240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUxAog9mPtoiII-B_hgAAAA0"]
[Thu Jul 30 08:50:43.376374 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:44294] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsCU4OMvMZgtyc5ahAI6AAAADY"]
[Thu Jul 30 08:50:43.376554 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:44294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsCU4OMvMZgtyc5ahAI6AAAADY"]
[Thu Jul 30 08:50:43.376758 2026] [security2:error] [pid 2457970:tid 2457970] [client 34.74.169.124:44294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU4OMvMZgtyc5ahAI6AAAADY"]
[Thu Jul 30 08:50:43.377801 2026] [security2:error] [pid 2459273:tid 2459273] [client 34.74.169.124:44288] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsCU7Z21v3Ltu_0KGnauAAAAAY"]
[Thu Jul 30 08:50:43.377889 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:44292] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsCU1qcFaITpxkOq5F-dwAAAAo"]
[Thu Jul 30 08:50:43.377927 2026] [security2:error] [pid 2459273:tid 2459273] [client 34.74.169.124:44288] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsCU7Z21v3Ltu_0KGnauAAAAAY"]
[Thu Jul 30 08:50:43.378010 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:44292] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsCU1qcFaITpxkOq5F-dwAAAAo"]
[Thu Jul 30 08:50:43.378133 2026] [security2:error] [pid 2459273:tid 2459273] [client 34.74.169.124:44288] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU7Z21v3Ltu_0KGnauAAAAAY"]
[Thu Jul 30 08:50:43.378220 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:44292] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU1qcFaITpxkOq5F-dwAAAAo"]
[Thu Jul 30 08:50:43.604979 2026] [security2:error] [pid 2453259:tid 2453259] [client 34.74.169.124:44330] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amsCU2txE-fC0fumz8GvXAAAABw"]
[Thu Jul 30 08:50:43.605165 2026] [security2:error] [pid 2453259:tid 2453259] [client 34.74.169.124:44330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amsCU2txE-fC0fumz8GvXAAAABw"]
[Thu Jul 30 08:50:43.605351 2026] [security2:error] [pid 2453259:tid 2453259] [client 34.74.169.124:44330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU2txE-fC0fumz8GvXAAAABw"]
[Thu Jul 30 08:50:43.663312 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:44350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amsCU1U0MT747HfRnfk0NwAAAB0"]
[Thu Jul 30 08:50:43.663486 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:44350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amsCU1U0MT747HfRnfk0NwAAAB0"]
[Thu Jul 30 08:50:43.663690 2026] [security2:error] [pid 2457412:tid 2457412] [client 34.74.169.124:44350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU1U0MT747HfRnfk0NwAAAB0"]
[Thu Jul 30 08:50:43.664978 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:44346] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amsCU3gfDmpjcHZpNe6XuAAAAAg"]
[Thu Jul 30 08:50:43.665122 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:44346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amsCU3gfDmpjcHZpNe6XuAAAAAg"]
[Thu Jul 30 08:50:43.665300 2026] [security2:error] [pid 2451045:tid 2451045] [client 34.74.169.124:44346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU3gfDmpjcHZpNe6XuAAAAAg"]
[Thu Jul 30 08:50:43.678831 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:44352] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amsCUyLJM9_b4f05G2ciAQAAABA"]
[Thu Jul 30 08:50:43.678987 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:44352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amsCUyLJM9_b4f05G2ciAQAAABA"]
[Thu Jul 30 08:50:43.679197 2026] [security2:error] [pid 2451986:tid 2451986] [client 34.74.169.124:44352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCUyLJM9_b4f05G2ciAQAAABA"]
[Thu Jul 30 08:50:43.737487 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amsCU4w2rZeTblVNLpwkSgAAABo"]
[Thu Jul 30 08:50:43.737673 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amsCU4w2rZeTblVNLpwkSgAAABo"]
[Thu Jul 30 08:50:43.737880 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU4w2rZeTblVNLpwkSgAAABo"]
[Thu Jul 30 08:50:43.870300 2026] [security2:error] [pid 2459737:tid 2459737] [client 34.74.169.124:44380] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amsCU5PAACQyV1g4BTCTEQAAABI"]
[Thu Jul 30 08:50:43.870481 2026] [security2:error] [pid 2459737:tid 2459737] [client 34.74.169.124:44380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amsCU5PAACQyV1g4BTCTEQAAABI"]
[Thu Jul 30 08:50:43.870696 2026] [security2:error] [pid 2459737:tid 2459737] [client 34.74.169.124:44380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCU5PAACQyV1g4BTCTEQAAABI"]
[Thu Jul 30 08:50:44.017851 2026] [security2:error] [pid 2459273:tid 2459273] [client 34.74.169.124:44396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amsCVLZ21v3Ltu_0KGnauQAAAAY"]
[Thu Jul 30 08:50:44.018032 2026] [security2:error] [pid 2459273:tid 2459273] [client 34.74.169.124:44396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amsCVLZ21v3Ltu_0KGnauQAAAAY"]
[Thu Jul 30 08:50:44.018245 2026] [security2:error] [pid 2459273:tid 2459273] [client 34.74.169.124:44396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCVLZ21v3Ltu_0KGnauQAAAAY"]
[Thu Jul 30 08:50:44.025229 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:44406] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amsCVFqcFaITpxkOq5F-eAAAAAo"]
[Thu Jul 30 08:50:44.025403 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:44406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amsCVFqcFaITpxkOq5F-eAAAAAo"]
[Thu Jul 30 08:50:44.025604 2026] [security2:error] [pid 2454558:tid 2454558] [client 34.74.169.124:44406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCVFqcFaITpxkOq5F-eAAAAAo"]
[Thu Jul 30 08:50:44.030733 2026] [security2:error] [pid 2448351:tid 2448351] [client 34.74.169.124:44424] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amsCVOxokroSR-Xu8LeWZAAAAAw"]
[Thu Jul 30 08:50:44.030871 2026] [security2:error] [pid 2448351:tid 2448351] [client 34.74.169.124:44424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amsCVOxokroSR-Xu8LeWZAAAAAw"]
[Thu Jul 30 08:50:44.031075 2026] [security2:error] [pid 2448351:tid 2448351] [client 34.74.169.124:44424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCVOxokroSR-Xu8LeWZAAAAAw"]
[Thu Jul 30 08:50:44.070577 2026] [security2:error] [pid 2460840:tid 2460840] [client 34.74.169.124:44420] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amsCVBAog9mPtoiII-B_iAAAAA0"]
[Thu Jul 30 08:50:44.070811 2026] [security2:error] [pid 2460840:tid 2460840] [client 34.74.169.124:44420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amsCVBAog9mPtoiII-B_iAAAAA0"]
[Thu Jul 30 08:50:44.071061 2026] [security2:error] [pid 2460840:tid 2460840] [client 34.74.169.124:44420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCVBAog9mPtoiII-B_iAAAAA0"]
[Thu Jul 30 08:50:44.088628 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:44428] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amsCVJQ5ye6Bq3F7FN1nNAAAAAs"]
[Thu Jul 30 08:50:44.088952 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:44428] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amsCVJQ5ye6Bq3F7FN1nNAAAAAs"]
[Thu Jul 30 08:50:44.089153 2026] [security2:error] [pid 2459565:tid 2459565] [client 34.74.169.124:44428] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCVJQ5ye6Bq3F7FN1nNAAAAAs"]
[Thu Jul 30 08:50:44.234463 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amsCVIw2rZeTblVNLpwkSwAAABo"]
[Thu Jul 30 08:50:44.234981 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amsCVIw2rZeTblVNLpwkSwAAABo"]
[Thu Jul 30 08:50:44.235246 2026] [security2:error] [pid 2460984:tid 2460984] [client 34.74.169.124:44440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsCVIw2rZeTblVNLpwkSwAAABo"]
[Thu Jul 30 08:50:45.161374 2026] [ssl:error] [pid 2460984:tid 2460984] (EAI 2)Name or service not known: [client 144.76.19.72:40222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:45.161401 2026] [ssl:error] [pid 2460984:tid 2460984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:45.217607 2026] [ssl:error] [pid 2447533:tid 2447533] (EAI 2)Name or service not known: [client 144.76.19.72:40228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:45.217637 2026] [ssl:error] [pid 2447533:tid 2447533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:45.953410 2026] [autoindex:error] [pid 2459521:tid 2459521] (13)Permission denied: [client 216.73.216.199:39859] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/boidesig/
[Thu Jul 30 08:50:48.059396 2026] [ssl:error] [pid 2446024:tid 2446024] (70014)End of file found: [client 216.73.216.199:11136] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:48.360245 2026] [security2:error] [pid 2459521:tid 2459521] [client 216.73.216.199:39859] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/autoconf/autom4te.cfg"] [unique_id "amsCWGCKX5AqDcax7mI6JgAAAAk"]
[Thu Jul 30 08:50:48.360526 2026] [security2:error] [pid 2459521:tid 2459521] [client 216.73.216.199:39859] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/autoconf/autom4te.cfg"] [unique_id "amsCWGCKX5AqDcax7mI6JgAAAAk"]
[Thu Jul 30 08:50:48.360758 2026] [security2:error] [pid 2459521:tid 2459521] [client 216.73.216.199:39859] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/autoconf/autom4te.cfg"] [unique_id "amsCWGCKX5AqDcax7mI6JgAAAAk"]
[Thu Jul 30 08:50:48.497396 2026] [security2:error] [pid 2459273:tid 2459273] [client 47.128.24.237:26502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsCWLZ21v3Ltu_0KGnawgAAAAY"]
[Thu Jul 30 08:50:48.836007 2026] [cgi:error] [pid 2433323:tid 2433323] [client 4.232.188.49:10312] AH02812: stderr from /home/shelterf/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:50:49.303810 2026] [ssl:error] [pid 2462957:tid 2462957] (EAI 2)Name or service not known: [client 144.76.19.72:40244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:49.303851 2026] [ssl:error] [pid 2462957:tid 2462957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:49.389437 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.32:55446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:49.390094 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.32:55446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:49.431545 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/l10n/error_log
[Thu Jul 30 08:50:49.473897 2026] [ssl:error] [pid 2462956:tid 2462956] (EAI 2)Name or service not known: [client 144.76.19.72:40248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:49.473927 2026] [ssl:error] [pid 2462956:tid 2462956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:49.744085 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 08:50:49.744134 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 08:50:49.746647 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 08:50:49.747675 2026] [access_compat:error] [pid 2452039:tid 2452039] [client 4.232.188.49:10246] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 08:50:51.675413 2026] [core:error] [pid 2462704:tid 2462704] (13)Permission denied: [client 216.73.216.199:62189] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/ns-narvi.com.db
[Thu Jul 30 08:50:51.772611 2026] [authz_core:error] [pid 2463014:tid 2463014] [client 57.141.0.37:59468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:51.773257 2026] [authz_core:error] [pid 2463014:tid 2463014] [client 57.141.0.37:59468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:52.533338 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:60544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:52.533363 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:52.584521 2026] [ssl:error] [pid 2463015:tid 2463015] (EAI 2)Name or service not known: [client 144.76.19.72:60546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:52.584548 2026] [ssl:error] [pid 2463015:tid 2463015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:52.880770 2026] [ssl:error] [pid 2462704:tid 2462704] (70014)End of file found: [client 216.73.216.199:62189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:53.978638 2026] [ssl:error] [pid 2457731:tid 2457731] (70014)End of file found: [client 216.73.216.199:50169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:54.215989 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 57.141.0.5:51920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:50:54.216615 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 57.141.0.5:51920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:50:54.696017 2026] [security2:error] [pid 2459273:tid 2459273] [client 23.23.212.212:5072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/"] [unique_id "amsCXrZ21v3Ltu_0KGnazQAAAAY"]
[Thu Jul 30 08:50:55.253764 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 66.249.66.34:35796] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:50:55.256416 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 66.249.66.34:35796] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:50:55.495007 2026] [core:error] [pid 2459521:tid 2459521] (13)Permission denied: [client 216.73.216.199:39859] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-8/sanity_checks
[Thu Jul 30 08:50:55.637956 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:60556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:55.637982 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:55.695687 2026] [ssl:error] [pid 2463187:tid 2463187] (EAI 2)Name or service not known: [client 144.76.19.72:60558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:55.695718 2026] [ssl:error] [pid 2463187:tid 2463187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:56.097477 2026] [ssl:error] [pid 2459521:tid 2459521] (70014)End of file found: [client 216.73.216.199:39859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:50:57.169411 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 66.249.66.33:36854] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:50:57.172162 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 66.249.66.33:36854] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:50:58.820202 2026] [ssl:error] [pid 2462704:tid 2462704] (EAI 2)Name or service not known: [client 144.76.19.72:60564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:58.820243 2026] [ssl:error] [pid 2462704:tid 2462704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:58.876740 2026] [ssl:error] [pid 2460840:tid 2460840] (EAI 2)Name or service not known: [client 144.76.19.72:60574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:50:58.876776 2026] [ssl:error] [pid 2460840:tid 2460840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:50:59.701948 2026] [core:error] [pid 2463014:tid 2463014] (13)Permission denied: [client 216.73.216.199:38074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/vm_area_struct/order
[Thu Jul 30 08:51:00.413181 2026] [core:crit] [pid 2462704:tid 2462704] (13)Permission denied: [client 216.73.216.199:47107] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/boot/grub2/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/boot/grub2/' is executable
[Thu Jul 30 08:51:00.601211 2026] [authz_core:error] [pid 2447533:tid 2447533] [client 57.141.0.37:59480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:00.601831 2026] [authz_core:error] [pid 2447533:tid 2447533] [client 57.141.0.37:59480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:01.026834 2026] [cgi:error] [pid 2463014:tid 2463014] [client 216.73.216.199:38074] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/lib64/perl5/Config_git.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 08:51:01.026897 2026] [cgi:error] [pid 2463014:tid 2463014] [client 216.73.216.199:38074] End of script output before headers: Config_git.pl
[Thu Jul 30 08:51:01.130014 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 57.141.0.37:33318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:01.130642 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 57.141.0.37:33318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:01.957378 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:26596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:01.957407 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:02.010365 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:26612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:02.010397 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:02.214151 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCP/cache_dma
[Thu Jul 30 08:51:03.111660 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/eventpoll_pwq/objects_partial
[Thu Jul 30 08:51:03.411840 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/total_objects
[Thu Jul 30 08:51:04.624966 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_group/order
[Thu Jul 30 08:51:05.063608 2026] [ssl:error] [pid 2463016:tid 2463016] (EAI 2)Name or service not known: [client 144.76.19.72:26622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:05.063641 2026] [ssl:error] [pid 2463016:tid 2463016] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:05.120038 2026] [ssl:error] [pid 2463187:tid 2463187] (EAI 2)Name or service not known: [client 144.76.19.72:26636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:05.120064 2026] [ssl:error] [pid 2463187:tid 2463187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:05.191482 2026] [authz_core:error] [pid 2457412:tid 2457412] [client 57.141.0.21:45100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:05.192116 2026] [authz_core:error] [pid 2457412:tid 2457412] [client 57.141.0.21:45100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:05.518767 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/xt_LOG/uevent
[Thu Jul 30 08:51:06.373045 2026] [cgi:error] [pid 2463060:tid 2463060] [client 172.202.98.196:36001] AH02812: stderr from /home/firstcl1/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:51:06.723226 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/secpath_cache/destroy_by_rcu
[Thu Jul 30 08:51:07.490580 2026] [security2:error] [pid 2459739:tid 2459739] [client 43.157.33.18:28301] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCa7wOFr1fizM6nscgSQAAABk"]
[Thu Jul 30 08:51:07.490632 2026] [security2:error] [pid 2459739:tid 2459739] [client 43.157.33.18:28301] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCa7wOFr1fizM6nscgSQAAABk"]
[Thu Jul 30 08:51:07.490877 2026] [security2:error] [pid 2459739:tid 2459739] [client 43.157.33.18:28301] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsCa7wOFr1fizM6nscgSQAAABk"]
[Thu Jul 30 08:51:08.238517 2026] [ssl:error] [pid 2462920:tid 2462920] (EAI 2)Name or service not known: [client 144.76.19.72:26652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:08.238547 2026] [ssl:error] [pid 2462920:tid 2462920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:08.338480 2026] [ssl:error] [pid 2459521:tid 2459521] (EAI 2)Name or service not known: [client 144.76.19.72:26664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:08.338516 2026] [ssl:error] [pid 2459521:tid 2459521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:09.016123 2026] [authz_core:error] [pid 2453260:tid 2453260] [client 57.141.0.56:49890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:09.016740 2026] [authz_core:error] [pid 2453260:tid 2453260] [client 57.141.0.56:49890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:10.379264 2026] [security2:error] [pid 2464167:tid 2464167] [client 182.69.182.238:8694] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCbglKoolKbHQ6oxsl-AAAACQ"]
[Thu Jul 30 08:51:10.379328 2026] [security2:error] [pid 2464167:tid 2464167] [client 182.69.182.238:8694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCbglKoolKbHQ6oxsl-AAAACQ"]
[Thu Jul 30 08:51:10.379648 2026] [security2:error] [pid 2464167:tid 2464167] [client 182.69.182.238:8694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsCbglKoolKbHQ6oxsl-AAAACQ"]
[Thu Jul 30 08:51:11.394937 2026] [ssl:error] [pid 2463013:tid 2463013] (EAI 2)Name or service not known: [client 144.76.19.72:56522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:11.394977 2026] [ssl:error] [pid 2463013:tid 2463013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:11.452548 2026] [ssl:error] [pid 2448257:tid 2448257] (EAI 2)Name or service not known: [client 144.76.19.72:56534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:11.452586 2026] [ssl:error] [pid 2448257:tid 2448257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:11.781291 2026] [core:error] [pid 2463013:tid 2463013] [client 57.141.0.52:51530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:11.781314 2026] [core:error] [pid 2463013:tid 2463013] [client 57.141.0.52:51530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:13.546168 2026] [core:error] [pid 2444730:tid 2444730] (13)Permission denied: [client 216.73.216.199:15152] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/aliases
[Thu Jul 30 08:51:14.252478 2026] [core:error] [pid 2444730:tid 2444730] (13)Permission denied: [client 216.73.216.199:15152] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_struct/sanity_checks
[Thu Jul 30 08:51:14.510010 2026] [ssl:error] [pid 2457554:tid 2457554] (EAI 2)Name or service not known: [client 144.76.19.72:56544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:14.510043 2026] [ssl:error] [pid 2457554:tid 2457554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:14.562969 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:56558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:14.562997 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:14.864260 2026] [security2:error] [pid 2456371:tid 2456371] [client 189.203.204.218:14243] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCcnaIjb_2GorfY9aY2wAAABY"]
[Thu Jul 30 08:51:14.864307 2026] [security2:error] [pid 2456371:tid 2456371] [client 189.203.204.218:14243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsCcnaIjb_2GorfY9aY2wAAABY"]
[Thu Jul 30 08:51:14.864601 2026] [security2:error] [pid 2456371:tid 2456371] [client 189.203.204.218:14243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsCcnaIjb_2GorfY9aY2wAAABY"]
[Thu Jul 30 08:51:15.156484 2026] [ssl:error] [pid 2444730:tid 2444730] (70014)End of file found: [client 216.73.216.199:15152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:51:15.452923 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCP/usersize
[Thu Jul 30 08:51:15.541648 2026] [core:error] [pid 2446985:tid 2446985] [client 66.249.66.8:36129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:15.541681 2026] [core:error] [pid 2446985:tid 2446985] [client 66.249.66.8:36129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:15.754136 2026] [core:error] [pid 2460840:tid 2460840] (13)Permission denied: [client 216.73.216.199:23107] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCP/cache_dma
[Thu Jul 30 08:51:17.617492 2026] [ssl:error] [pid 2456371:tid 2456371] (EAI 2)Name or service not known: [client 144.76.19.72:56562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:17.617527 2026] [ssl:error] [pid 2456371:tid 2456371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:17.670498 2026] [ssl:error] [pid 2454558:tid 2454558] (EAI 2)Name or service not known: [client 144.76.19.72:56578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:17.670529 2026] [ssl:error] [pid 2454558:tid 2454558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:17.795820 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.35:41196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:17.796445 2026] [authz_core:error] [pid 2433323:tid 2433323] [client 57.141.0.35:41196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:19.124230 2026] [authz_core:error] [pid 2454638:tid 2454638] [client 57.141.0.70:57150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:19.124852 2026] [authz_core:error] [pid 2454638:tid 2454638] [client 57.141.0.70:57150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:20.726895 2026] [ssl:error] [pid 2447533:tid 2447533] (EAI 2)Name or service not known: [client 144.76.19.72:38664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:20.726922 2026] [ssl:error] [pid 2447533:tid 2447533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:20.778499 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:38670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:20.778526 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:22.123107 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:34747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/secpath_cache/free_calls
[Thu Jul 30 08:51:23.025672 2026] [ssl:error] [pid 2457552:tid 2457552] (70014)End of file found: [client 216.73.216.199:34747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:51:23.529215 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.41:54794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:23.529859 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.41:54794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:23.830783 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:38678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:23.830815 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:23.884614 2026] [ssl:error] [pid 2463187:tid 2463187] (EAI 2)Name or service not known: [client 144.76.19.72:38694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:23.884652 2026] [ssl:error] [pid 2463187:tid 2463187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:24.532905 2026] [core:error] [pid 2447533:tid 2447533] (13)Permission denied: [client 216.73.216.199:50675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCP/usersize
[Thu Jul 30 08:51:25.194714 2026] [lsapi:warn] [pid 2463058:tid 2463058] [client 145.14.10.39:53704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:51:25.194754 2026] [lsapi:warn] [pid 2463058:tid 2463058] [client 145.14.10.39:53704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:51:26.941781 2026] [core:error] [pid 2447533:tid 2447533] (13)Permission denied: [client 216.73.216.199:50675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/dev/core
[Thu Jul 30 08:51:26.952188 2026] [ssl:error] [pid 2463187:tid 2463187] (EAI 2)Name or service not known: [client 144.76.19.72:38700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:26.952213 2026] [ssl:error] [pid 2463187:tid 2463187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:27.006550 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:38702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:27.006593 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:28.031360 2026] [core:error] [pid 2448351:tid 2448351] [client 66.249.64.171:64655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:28.031391 2026] [core:error] [pid 2448351:tid 2448351] [client 66.249.64.171:64655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:28.189714 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.28:61650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:28.190331 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.28:61650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:28.223889 2026] [security2:error] [pid 2455632:tid 2455632] [client 114.119.132.171:61543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104,17/request_format~html"] [unique_id "amsCgIhQedzPQcqzTzFn4QAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104/request_format~html
[Thu Jul 30 08:51:28.446367 2026] [core:error] [pid 2447533:tid 2447533] (13)Permission denied: [client 216.73.216.199:50675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UNIX/align
[Thu Jul 30 08:51:28.844836 2026] [authz_core:error] [pid 2457552:tid 2457552] [client 57.141.0.36:44304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:28.845454 2026] [authz_core:error] [pid 2457552:tid 2457552] [client 57.141.0.36:44304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:29.797388 2026] [security2:error] [pid 2457731:tid 2457731] [client 114.119.132.171:61545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104,17/request_format~html"] [unique_id "amsCgWP93SkCHwo8ahU33AAAADU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585094400/cat_ids~19,104/request_format~html
[Thu Jul 30 08:51:30.062551 2026] [ssl:error] [pid 2464240:tid 2464240] (EAI 2)Name or service not known: [client 144.76.19.72:48476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:30.062601 2026] [ssl:error] [pid 2464240:tid 2464240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:30.119019 2026] [ssl:error] [pid 2446985:tid 2446985] (EAI 2)Name or service not known: [client 144.76.19.72:48484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:30.119046 2026] [ssl:error] [pid 2446985:tid 2446985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:30.282878 2026] [authz_core:error] [pid 2453259:tid 2453259] [client 172.202.98.196:46656] AH01630: client denied by server configuration: /home/maisongerlyn/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 08:51:31.032248 2026] [ssl:error] [pid 2447533:tid 2447533] (70014)End of file found: [client 216.73.216.199:50675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:51:31.083056 2026] [core:error] [pid 2463059:tid 2463059] [client 66.249.64.171:59110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:31.083102 2026] [core:error] [pid 2463059:tid 2463059] [client 66.249.64.171:59110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:31.328450 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:38450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/x86_lbr/objects_partial
[Thu Jul 30 08:51:32.834050 2026] [core:error] [pid 2463187:tid 2463187] (13)Permission denied: [client 216.73.216.199:64535] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/intel_rapl_common/sections/__ksymtab_strings
[Thu Jul 30 08:51:33.034706 2026] [authz_core:error] [pid 2463059:tid 2463059] [client 57.141.0.38:38558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:33.035325 2026] [authz_core:error] [pid 2463059:tid 2463059] [client 57.141.0.38:38558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:33.172224 2026] [ssl:error] [pid 2457555:tid 2457555] (EAI 2)Name or service not known: [client 144.76.19.72:48492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:33.172248 2026] [ssl:error] [pid 2457555:tid 2457555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:33.224003 2026] [ssl:error] [pid 2453260:tid 2453260] (EAI 2)Name or service not known: [client 144.76.19.72:48498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:33.224053 2026] [ssl:error] [pid 2453260:tid 2453260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:33.600599 2026] [authz_core:error] [pid 2453440:tid 2453440] [client 57.141.0.15:33332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:33.601241 2026] [authz_core:error] [pid 2453440:tid 2453440] [client 57.141.0.15:33332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:33.737683 2026] [ssl:error] [pid 2463187:tid 2463187] (70014)End of file found: [client 216.73.216.199:64535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:51:33.976786 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 66.249.66.33:39498] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:51:33.979438 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 66.249.66.33:39498] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:51:34.941267 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:38450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/trace_event_file/cpu_partial
[Thu Jul 30 08:51:35.543235 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:38450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iint_cache/min_partial
[Thu Jul 30 08:51:36.280423 2026] [ssl:error] [pid 2453440:tid 2453440] (EAI 2)Name or service not known: [client 144.76.19.72:48500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:36.280455 2026] [ssl:error] [pid 2453440:tid 2453440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:36.332238 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:48502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:36.332260 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:37.049609 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:38450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mnt_cache/slabs
[Thu Jul 30 08:51:37.708078 2026] [authz_core:error] [pid 2459739:tid 2459739] [client 66.249.66.33:54691] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:51:37.713282 2026] [authz_core:error] [pid 2459739:tid 2459739] [client 66.249.66.33:54691] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:51:37.952048 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:38450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sock_inode_cache/red_zone
[Thu Jul 30 08:51:38.310496 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.33:43576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:38.311121 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.33:43576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:38.337337 2026] [authz_core:error] [pid 2453222:tid 2453222] [client 57.141.0.4:30270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:38.337955 2026] [authz_core:error] [pid 2453222:tid 2453222] [client 57.141.0.4:30270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:38.554286 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:38450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/hwcache_align
[Thu Jul 30 08:51:39.056596 2026] [authz_core:error] [pid 2464167:tid 2464167] [client 57.141.0.9:45202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:39.057428 2026] [authz_core:error] [pid 2464167:tid 2464167] [client 57.141.0.9:45202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:39.169301 2026] [core:error] [pid 2457552:tid 2457552] (13)Permission denied: [client 216.73.216.199:38450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dio/hwcache_align
[Thu Jul 30 08:51:39.386032 2026] [ssl:error] [pid 2463187:tid 2463187] (EAI 2)Name or service not known: [client 144.76.19.72:48510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:39.386058 2026] [ssl:error] [pid 2463187:tid 2463187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:39.439146 2026] [ssl:error] [pid 2446099:tid 2446099] (EAI 2)Name or service not known: [client 144.76.19.72:48518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:39.439173 2026] [ssl:error] [pid 2446099:tid 2446099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:40.975536 2026] [ssl:error] [pid 2457552:tid 2457552] (70014)End of file found: [client 216.73.216.199:38450] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:51:41.665044 2026] [core:error] [pid 2457731:tid 2457731] (13)Permission denied: [client 216.73.216.199:18501] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sock_inode_cache/store_user
[Thu Jul 30 08:51:41.830836 2026] [security2:error] [pid 2460840:tid 2460840] [client 94.154.43.186:33256] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amsCjRAog9mPtoiII-CAgwAAAA0"]
[Thu Jul 30 08:51:41.831026 2026] [security2:error] [pid 2460840:tid 2460840] [client 94.154.43.186:33256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amsCjRAog9mPtoiII-CAgwAAAA0"]
[Thu Jul 30 08:51:42.180708 2026] [autoindex:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/backup/
[Thu Jul 30 08:51:42.490974 2026] [ssl:error] [pid 2463057:tid 2463057] (EAI 2)Name or service not known: [client 144.76.19.72:48166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:42.491008 2026] [ssl:error] [pid 2463057:tid 2463057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:42.491549 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_free_data/slabs_cpu_partial
[Thu Jul 30 08:51:42.548024 2026] [ssl:error] [pid 2455632:tid 2455632] (EAI 2)Name or service not known: [client 144.76.19.72:48176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:42.548052 2026] [ssl:error] [pid 2455632:tid 2455632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:42.618427 2026] [security2:error] [pid 2460840:tid 2460840] [client 94.154.43.186:33256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sarahwiseman.co.uk"] [uri "/index.php"] [unique_id "amsCjRAog9mPtoiII-CAgwAAAA0"]
[Thu Jul 30 08:51:42.805358 2026] [core:error] [pid 2456371:tid 2456371] [client 57.141.0.47:56102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:42.805383 2026] [core:error] [pid 2456371:tid 2456371] [client 57.141.0.47:56102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:43.479462 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.28:20464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:43.480146 2026] [authz_core:error] [pid 2455632:tid 2455632] [client 57.141.0.28:20464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:45.519753 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-192/remote_node_defrag_ratio
[Thu Jul 30 08:51:45.552810 2026] [security2:error] [pid 2451045:tid 2451045] [client 85.208.98.23:30082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsCkXgfDmpjcHZpNe6X0QAAAAg"]
[Thu Jul 30 08:51:45.604545 2026] [ssl:error] [pid 2439307:tid 2439307] (EAI 2)Name or service not known: [client 144.76.19.72:48186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:45.604584 2026] [ssl:error] [pid 2439307:tid 2439307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:45.658864 2026] [ssl:error] [pid 2462920:tid 2462920] (EAI 2)Name or service not known: [client 144.76.19.72:48188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:45.658890 2026] [ssl:error] [pid 2462920:tid 2462920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:46.121538 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-248/objects
[Thu Jul 30 08:51:46.723019 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/total_objects
[Thu Jul 30 08:51:47.024692 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCP/min_partial
[Thu Jul 30 08:51:47.973749 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 57.141.0.53:54252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:47.974953 2026] [authz_core:error] [pid 2446099:tid 2446099] [client 57.141.0.53:54252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:48.531018 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_group/cpu_slabs
[Thu Jul 30 08:51:48.714260 2026] [ssl:error] [pid 2451986:tid 2451986] (EAI 2)Name or service not known: [client 144.76.19.72:48202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:48.714291 2026] [ssl:error] [pid 2451986:tid 2451986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:48.768561 2026] [ssl:error] [pid 2457552:tid 2457552] (EAI 2)Name or service not known: [client 144.76.19.72:48208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:48.768601 2026] [ssl:error] [pid 2457552:tid 2457552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:48.832391 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/usbcore/drivers/usb:hub/bind
[Thu Jul 30 08:51:48.925099 2026] [authz_core:error] [pid 2463015:tid 2463015] [client 57.141.0.2:65318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:48.925717 2026] [authz_core:error] [pid 2463015:tid 2463015] [client 57.141.0.2:65318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:49.437610 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm_intel/sections/__jump_table
[Thu Jul 30 08:51:49.739279 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/signal_cache/hwcache_align
[Thu Jul 30 08:51:49.888168 2026] [authz_core:error] [pid 2457412:tid 2457412] [client 57.141.0.12:58488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:49.888797 2026] [authz_core:error] [pid 2457412:tid 2457412] [client 57.141.0.12:58488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:50.901936 2026] [core:error] [pid 2457731:tid 2457731] [client 66.249.64.170:38133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:50.901964 2026] [core:error] [pid 2457731:tid 2457731] [client 66.249.64.170:38133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:51:51.036632 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.33:46874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:51.037255 2026] [authz_core:error] [pid 2444162:tid 2444162] [client 57.141.0.33:46874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:51.821512 2026] [ssl:error] [pid 2457731:tid 2457731] (EAI 2)Name or service not known: [client 144.76.19.72:21100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:51.821539 2026] [ssl:error] [pid 2457731:tid 2457731] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:51.872520 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:21110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:51.872552 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:52.451796 2026] [ssl:error] [pid 2457731:tid 2457731] (70014)End of file found: [client 216.73.216.199:4986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:51:52.924290 2026] [security2:error] [pid 2460984:tid 2460984] [client 43.157.158.178:41178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/"] [unique_id "amsCmIw2rZeTblVNLpwkWQAAABo"]
[Thu Jul 30 08:51:53.957874 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/slabs
[Thu Jul 30 08:51:54.294154 2026] [security2:error] [pid 2463187:tid 2463187] [client 43.157.158.178:42472] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amsCmukz1_4oIqB5JyRi-gAAADs"], referer: http://www.thesilkshed.co.uk
[Thu Jul 30 08:51:54.559963 2026] [authz_core:error] [pid 2464168:tid 2464168] [client 66.249.66.34:51730] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:51:54.562609 2026] [authz_core:error] [pid 2464168:tid 2464168] [client 66.249.66.34:51730] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:51:54.866523 2026] [core:error] [pid 2462704:tid 2462704] (13)Permission denied: [client 216.73.216.199:60050] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/close_delay
[Thu Jul 30 08:51:54.933487 2026] [ssl:error] [pid 2451045:tid 2451045] (EAI 2)Name or service not known: [client 144.76.19.72:21126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:54.933517 2026] [ssl:error] [pid 2451045:tid 2451045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:54.979537 2026] [security2:error] [pid 2444730:tid 2444730] [client 43.135.211.148:44360] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/ec7152/"] [unique_id "amsCmvWXxL1HsjU6uuYoPgAAADI"]
[Thu Jul 30 08:51:54.989610 2026] [ssl:error] [pid 2455632:tid 2455632] (EAI 2)Name or service not known: [client 144.76.19.72:21142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:54.989648 2026] [ssl:error] [pid 2455632:tid 2455632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:55.207503 2026] [security2:error] [pid 2455632:tid 2455632] [client 77.90.185.129:56257] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "blow-hairstudio.co.uk"] [uri "/sftp-config.json"] [unique_id "amsCm4hQedzPQcqzTzFn6AAAACM"]
[Thu Jul 30 08:51:55.207706 2026] [security2:error] [pid 2455632:tid 2455632] [client 77.90.185.129:56257] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "blow-hairstudio.co.uk"] [uri "/sftp-config.json"] [unique_id "amsCm4hQedzPQcqzTzFn6AAAACM"]
[Thu Jul 30 08:51:55.596091 2026] [security2:error] [pid 2455632:tid 2455632] [client 77.90.185.129:56257] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "blow-hairstudio.co.uk"] [uri "/index.php"] [unique_id "amsCm4hQedzPQcqzTzFn6AAAACM"]
[Thu Jul 30 08:51:56.371435 2026] [core:error] [pid 2459273:tid 2459273] (13)Permission denied: [client 216.73.216.199:13443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dio/alloc_calls
[Thu Jul 30 08:51:56.692574 2026] [cgi:error] [pid 2459273:tid 2459273] [client 216.73.216.199:13443] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/custom_backup_destination.pl.skeleton: suexec policy violation: see suexec log for more details
[Thu Jul 30 08:51:56.692624 2026] [cgi:error] [pid 2459273:tid 2459273] [client 216.73.216.199:13443] End of script output before headers: custom_backup_destination.pl.skeleton
[Thu Jul 30 08:51:57.924249 2026] [authz_core:error] [pid 2466163:tid 2466163] [client 57.141.0.22:51316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:51:57.924899 2026] [authz_core:error] [pid 2466163:tid 2466163] [client 57.141.0.22:51316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:51:58.063274 2026] [ssl:error] [pid 2463015:tid 2463015] (EAI 2)Name or service not known: [client 144.76.19.72:21146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:58.063311 2026] [ssl:error] [pid 2463015:tid 2463015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:58.114707 2026] [ssl:error] [pid 2450900:tid 2450900] (EAI 2)Name or service not known: [client 144.76.19.72:21160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:51:58.114730 2026] [ssl:error] [pid 2450900:tid 2450900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:51:58.478160 2026] [core:error] [pid 2462704:tid 2462704] (13)Permission denied: [client 216.73.216.199:60050] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/alloc_calls
[Thu Jul 30 08:51:59.879694 2026] [authz_core:error] [pid 2462758:tid 2462758] [client 216.73.216.199:16349] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 08:52:01.166805 2026] [ssl:error] [pid 2463187:tid 2463187] (EAI 2)Name or service not known: [client 144.76.19.72:62172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:01.166839 2026] [ssl:error] [pid 2463187:tid 2463187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:01.222496 2026] [ssl:error] [pid 2446099:tid 2446099] (EAI 2)Name or service not known: [client 144.76.19.72:62182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:01.222526 2026] [ssl:error] [pid 2446099:tid 2446099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:02.265666 2026] [core:error] [pid 2462704:tid 2462704] (13)Permission denied: [client 216.73.216.199:60050] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/red_zone
[Thu Jul 30 08:52:03.745817 2026] [security2:error] [pid 2463062:tid 2463062] [client 85.208.98.29:42926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/canada-goose-stockists-london-k.html"] [unique_id "amsCo3kbzCOu5HwEgSWHvAAAADo"]
[Thu Jul 30 08:52:04.278244 2026] [ssl:error] [pid 2463059:tid 2463059] (EAI 2)Name or service not known: [client 144.76.19.72:62194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:04.278286 2026] [ssl:error] [pid 2463059:tid 2463059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:04.331908 2026] [ssl:error] [pid 2466086:tid 2466086] (EAI 2)Name or service not known: [client 144.76.19.72:62208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:04.331934 2026] [ssl:error] [pid 2466086:tid 2466086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:05.625593 2026] [core:crit] [pid 2444162:tid 2444162] (13)Permission denied: [client 216.73.216.199:49651] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/cloudlinux/hooks/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/cloudlinux/hooks/' is executable
[Thu Jul 30 08:52:06.526559 2026] [security2:error] [pid 2453260:tid 2453260] [client 51.89.129.171:25320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "michael-boffey.co.uk"] [uri "/robots.txt"] [unique_id "amsCpiltY5l84oAaiMKLTAAAAB8"]
[Thu Jul 30 08:52:07.389085 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:62218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:07.389122 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:07.443777 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:62228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:07.443800 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:07.570783 2026] [security2:error] [pid 2463057:tid 2463057] [client 198.244.226.237:35556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "michael-boffey.co.uk"] [uri "/image-19-2.php"] [unique_id "amsCpxO9cIBp4CrxJ7eQNAAAAC4"]
[Thu Jul 30 08:52:07.656724 2026] [authz_core:error] [pid 2466567:tid 2466567] [client 57.141.0.56:36288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:07.657367 2026] [authz_core:error] [pid 2466567:tid 2466567] [client 57.141.0.56:36288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:08.950679 2026] [core:error] [pid 2444162:tid 2444162] (13)Permission denied: [client 216.73.216.199:49651] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/cred_jar/free_calls
[Thu Jul 30 08:52:09.330835 2026] [authz_core:error] [pid 2453259:tid 2453259] [client 172.202.98.196:46656] AH01630: client denied by server configuration: /home/maisongerlyn/public_html/wp-admin/includes/error_log
[Thu Jul 30 08:52:09.853861 2026] [security2:error] [pid 2444162:tid 2444162] [client 216.73.216.199:49651] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/pure-ftpd/pure-ftpd.conf"] [unique_id "amsCqQR6LYNTEH7ZE01-UAAAABs"]
[Thu Jul 30 08:52:09.854128 2026] [security2:error] [pid 2444162:tid 2444162] [client 216.73.216.199:49651] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/pure-ftpd/pure-ftpd.conf"] [unique_id "amsCqQR6LYNTEH7ZE01-UAAAABs"]
[Thu Jul 30 08:52:09.854332 2026] [security2:error] [pid 2444162:tid 2444162] [client 216.73.216.199:49651] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/pure-ftpd/pure-ftpd.conf"] [unique_id "amsCqQR6LYNTEH7ZE01-UAAAABs"]
[Thu Jul 30 08:52:10.154980 2026] [core:error] [pid 2444162:tid 2444162] (13)Permission denied: [client 216.73.216.199:49651] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/mollywalsh.com.db
[Thu Jul 30 08:52:10.495537 2026] [ssl:error] [pid 2463187:tid 2463187] (EAI 2)Name or service not known: [client 144.76.19.72:36144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:10.495579 2026] [ssl:error] [pid 2463187:tid 2463187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:10.549042 2026] [ssl:error] [pid 2466086:tid 2466086] (EAI 2)Name or service not known: [client 144.76.19.72:36152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:10.549096 2026] [ssl:error] [pid 2466086:tid 2466086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:11.680117 2026] [ssl:error] [pid 2444162:tid 2444162] (70014)End of file found: [client 216.73.216.199:49651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:13.488056 2026] [core:error] [pid 2462410:tid 2462410] (13)Permission denied: [client 216.73.216.199:53375] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCPv6/reclaim_account
[Thu Jul 30 08:52:13.511079 2026] [authz_core:error] [pid 2451045:tid 2451045] [client 57.141.0.2:51566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:13.511704 2026] [authz_core:error] [pid 2451045:tid 2451045] [client 57.141.0.2:51566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:13.606899 2026] [ssl:error] [pid 2466777:tid 2466777] (EAI 2)Name or service not known: [client 144.76.19.72:36164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:13.606941 2026] [ssl:error] [pid 2466777:tid 2466777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:13.680863 2026] [authz_core:error] [pid 2464167:tid 2464167] [client 4.232.188.49:10309] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/Requests/error_log
[Thu Jul 30 08:52:13.708179 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:36178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:13.708209 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:13.756209 2026] [security2:error] [pid 2446024:tid 2446024] [client 185.191.171.16:10536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amsCrQuxrd2oCUR3I5ADuQAAABc"]
[Thu Jul 30 08:52:14.190818 2026] [security2:error] [pid 2451045:tid 2451045] [client 185.191.171.3:15810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/ando-bank-customer-service"] [unique_id "amsCrngfDmpjcHZpNe6X1wAAAAg"]
[Thu Jul 30 08:52:14.227177 2026] [security2:error] [pid 2463057:tid 2463057] [client 51.120.69.65:30787] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-narvi.com"] [uri "/wp-config.php"] [unique_id "amsCrhO9cIBp4CrxJ7eQlwAAAC4"]
[Thu Jul 30 08:52:14.227288 2026] [security2:error] [pid 2463057:tid 2463057] [client 51.120.69.65:30787] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-narvi.com"] [uri "/wp-config.php"] [unique_id "amsCrhO9cIBp4CrxJ7eQlwAAAC4"]
[Thu Jul 30 08:52:14.227471 2026] [security2:error] [pid 2463057:tid 2463057] [client 51.120.69.65:30787] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-narvi.com"] [uri "/wp-config.php"] [unique_id "amsCrhO9cIBp4CrxJ7eQlwAAAC4"]
[Thu Jul 30 08:52:14.745411 2026] [core:error] [pid 2466164:tid 2466164] [client 66.249.64.171:44271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:52:14.745438 2026] [core:error] [pid 2466164:tid 2466164] [client 66.249.64.171:44271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:52:14.999237 2026] [core:error] [pid 2462410:tid 2462410] (13)Permission denied: [client 216.73.216.199:53375] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/alism.net.db
[Thu Jul 30 08:52:16.744881 2026] [core:error] [pid 2462758:tid 2462758] [client 66.249.66.8:43632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:52:16.744911 2026] [core:error] [pid 2462758:tid 2462758] [client 66.249.66.8:43632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:52:16.763896 2026] [ssl:error] [pid 2466777:tid 2466777] (EAI 2)Name or service not known: [client 144.76.19.72:36184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:16.763922 2026] [ssl:error] [pid 2466777:tid 2466777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:16.816863 2026] [ssl:error] [pid 2457552:tid 2457552] (EAI 2)Name or service not known: [client 144.76.19.72:36196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:16.816890 2026] [ssl:error] [pid 2457552:tid 2457552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:17.925462 2026] [authz_core:error] [pid 2460840:tid 2460840] [client 57.141.0.46:26930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:17.926094 2026] [authz_core:error] [pid 2460840:tid 2460840] [client 57.141.0.46:26930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:18.017547 2026] [security2:error] [pid 2462410:tid 2462410] [client 216.73.216.199:53375] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/desktop/tuned.conf"] [unique_id "amsCsg0EteoAFhlE1knzCAAAAAI"]
[Thu Jul 30 08:52:18.017806 2026] [security2:error] [pid 2462410:tid 2462410] [client 216.73.216.199:53375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/desktop/tuned.conf"] [unique_id "amsCsg0EteoAFhlE1knzCAAAAAI"]
[Thu Jul 30 08:52:18.017994 2026] [security2:error] [pid 2462410:tid 2462410] [client 216.73.216.199:53375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/desktop/tuned.conf"] [unique_id "amsCsg0EteoAFhlE1knzCAAAAAI"]
[Thu Jul 30 08:52:18.618808 2026] [core:error] [pid 2462410:tid 2462410] (13)Permission denied: [client 216.73.216.199:53375] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/run/cron.reboot
[Thu Jul 30 08:52:19.174275 2026] [lsapi:warn] [pid 2457552:tid 2457552] [client 34.65.146.108:34472] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 08:52:19.174321 2026] [lsapi:warn] [pid 2457552:tid 2457552] [client 34.65.146.108:34472] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 08:52:19.899835 2026] [ssl:error] [pid 2463061:tid 2463061] (EAI 2)Name or service not known: [client 144.76.19.72:62976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:19.899872 2026] [ssl:error] [pid 2463061:tid 2463061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:19.957837 2026] [ssl:error] [pid 2463013:tid 2463013] (EAI 2)Name or service not known: [client 144.76.19.72:62980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:19.957864 2026] [ssl:error] [pid 2463013:tid 2463013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:21.970783 2026] [security2:error] [pid 2463013:tid 2463013] [client 85.208.96.205:56288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amsCtXgP_Wd4XpXInnSiCQAAACY"]
[Thu Jul 30 08:52:22.176117 2026] [security2:error] [pid 2446099:tid 2446099] [client 85.208.96.197:49732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg211/animanga.html"] [unique_id "amsCtn9CE78NU4SjR4ZDlAAAABg"]
[Thu Jul 30 08:52:22.596205 2026] [autoindex:error] [pid 2462410:tid 2462410] (13)Permission denied: [client 216.73.216.199:53375] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/hatchw/
[Thu Jul 30 08:52:22.778075 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.69:34896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:22.778696 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.69:34896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:23.015719 2026] [ssl:error] [pid 2464168:tid 2464168] (EAI 2)Name or service not known: [client 144.76.19.72:62986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:23.015754 2026] [ssl:error] [pid 2464168:tid 2464168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:23.067449 2026] [ssl:error] [pid 2463013:tid 2463013] (EAI 2)Name or service not known: [client 144.76.19.72:62988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:23.067477 2026] [ssl:error] [pid 2463013:tid 2463013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:23.498697 2026] [core:error] [pid 2462410:tid 2462410] (13)Permission denied: [client 216.73.216.199:53375] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty11/subsystem/ttyS2/port
[Thu Jul 30 08:52:23.799561 2026] [core:error] [pid 2462410:tid 2462410] (13)Permission denied: [client 216.73.216.199:53375] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_groupinfo_4k/destroy_by_rcu
[Thu Jul 30 08:52:25.003821 2026] [ssl:error] [pid 2462410:tid 2462410] (70014)End of file found: [client 216.73.216.199:53375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:25.632375 2026] [security2:error] [pid 2462758:tid 2462758] [client 51.120.69.65:44290] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns-narvi.com"] [uri "/var/log/error.log"] [unique_id "amsCuXXBsWIBZH_8LNAV4QAAACA"]
[Thu Jul 30 08:52:25.632542 2026] [security2:error] [pid 2462758:tid 2462758] [client 51.120.69.65:44290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-narvi.com"] [uri "/var/log/error.log"] [unique_id "amsCuXXBsWIBZH_8LNAV4QAAACA"]
[Thu Jul 30 08:52:25.632732 2026] [security2:error] [pid 2462758:tid 2462758] [client 51.120.69.65:44290] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns-narvi.com"] [uri "/var/log/error.log"] [unique_id "amsCuXXBsWIBZH_8LNAV4QAAACA"]
[Thu Jul 30 08:52:26.124256 2026] [ssl:error] [pid 2459273:tid 2459273] (EAI 2)Name or service not known: [client 144.76.19.72:62990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:26.124290 2026] [ssl:error] [pid 2459273:tid 2459273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:26.175295 2026] [ssl:error] [pid 2460840:tid 2460840] (EAI 2)Name or service not known: [client 144.76.19.72:62998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:26.175324 2026] [ssl:error] [pid 2460840:tid 2460840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:26.515120 2026] [ssl:error] [pid 2457731:tid 2457731] (70014)End of file found: [client 216.73.216.199:16751] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:27.424141 2026] [core:crit] [pid 2451045:tid 2451045] (13)Permission denied: [client 216.73.216.199:35314] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/lock/lmlib/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/lock/lmlib/' is executable
[Thu Jul 30 08:52:27.434231 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.19:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:27.434853 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.19:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:28.378809 2026] [authz_core:error] [pid 2463059:tid 2463059] [client 57.141.0.30:48454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:28.379435 2026] [authz_core:error] [pid 2463059:tid 2463059] [client 57.141.0.30:48454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:29.250002 2026] [ssl:error] [pid 2460984:tid 2460984] (EAI 2)Name or service not known: [client 144.76.19.72:63012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:29.250036 2026] [ssl:error] [pid 2460984:tid 2460984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:29.305835 2026] [ssl:error] [pid 2450900:tid 2450900] (EAI 2)Name or service not known: [client 144.76.19.72:63016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:29.305865 2026] [ssl:error] [pid 2450900:tid 2450900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:29.872209 2026] [core:error] [pid 2451045:tid 2451045] (13)Permission denied: [client 216.73.216.199:35314] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dquot/free_calls
[Thu Jul 30 08:52:31.095808 2026] [ssl:error] [pid 2451045:tid 2451045] (70014)End of file found: [client 216.73.216.199:35314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:32.360293 2026] [ssl:error] [pid 2462704:tid 2462704] (EAI 2)Name or service not known: [client 144.76.19.72:60858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:32.360326 2026] [ssl:error] [pid 2462704:tid 2462704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:32.413265 2026] [ssl:error] [pid 2453222:tid 2453222] (EAI 2)Name or service not known: [client 144.76.19.72:60870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:32.413291 2026] [ssl:error] [pid 2453222:tid 2453222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:32.468062 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.3:26142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:32.468843 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.3:26142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:34.431445 2026] [core:error] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:19016] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_transaction_s/free_calls
[Thu Jul 30 08:52:34.456368 2026] [authz_core:error] [pid 2450201:tid 2450201] [client 57.141.0.34:43626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:34.457399 2026] [authz_core:error] [pid 2450201:tid 2450201] [client 57.141.0.34:43626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:35.335571 2026] [core:crit] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:19016] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/lib64/mysql/plugin/auth_pam_tool_dir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/lib64/mysql/plugin/auth_pam_tool_dir/' is executable
[Thu Jul 30 08:52:35.469716 2026] [ssl:error] [pid 2450201:tid 2450201] (EAI 2)Name or service not known: [client 144.76.19.72:60872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:35.469747 2026] [ssl:error] [pid 2450201:tid 2450201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:35.520970 2026] [ssl:error] [pid 2453222:tid 2453222] (EAI 2)Name or service not known: [client 144.76.19.72:60878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:35.521000 2026] [ssl:error] [pid 2453222:tid 2453222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:37.445955 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.25:61962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:37.446587 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.25:61962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:38.053938 2026] [autoindex:error] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:19016] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/thelamb1/
[Thu Jul 30 08:52:38.578694 2026] [ssl:error] [pid 2466086:tid 2466086] (EAI 2)Name or service not known: [client 144.76.19.72:60894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:38.578723 2026] [ssl:error] [pid 2466086:tid 2466086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:38.631575 2026] [ssl:error] [pid 2453259:tid 2453259] (EAI 2)Name or service not known: [client 144.76.19.72:60898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:38.631603 2026] [ssl:error] [pid 2453259:tid 2453259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:41.272637 2026] [ssl:error] [pid 2462704:tid 2462704] (70014)End of file found: [client 216.73.216.199:60432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:41.276735 2026] [lsapi:error] [pid 2466567:tid 2466567] [client 216.73.216.199:19016] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Trait "Plesk\\Wappspector\\Matchers\\UpLevelMatcherTrait" not found in /opt/cpanel/ea-wappspector/src/Matchers/Laravel.php on line 12\n
[Thu Jul 30 08:52:41.870472 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:21836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:41.870499 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:42.026376 2026] [ssl:error] [pid 2462956:tid 2462956] (EAI 2)Name or service not known: [client 144.76.19.72:21842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:42.026419 2026] [ssl:error] [pid 2462956:tid 2462956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:42.772730 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.37:36098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:42.773349 2026] [authz_core:error] [pid 2463061:tid 2463061] [client 57.141.0.37:36098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:42.985830 2026] [authz_core:error] [pid 2466163:tid 2466163] [client 57.141.0.70:39686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:42.986453 2026] [authz_core:error] [pid 2466163:tid 2466163] [client 57.141.0.70:39686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:43.196481 2026] [core:error] [pid 2466535:tid 2466535] (13)Permission denied: [client 216.73.216.199:29418] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/poison
[Thu Jul 30 08:52:44.109153 2026] [ssl:error] [pid 2466535:tid 2466535] (70014)End of file found: [client 216.73.216.199:29418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:45.086594 2026] [ssl:error] [pid 2457731:tid 2457731] (EAI 2)Name or service not known: [client 144.76.19.72:21846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:45.086629 2026] [ssl:error] [pid 2457731:tid 2457731] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:45.144432 2026] [ssl:error] [pid 2462956:tid 2462956] (EAI 2)Name or service not known: [client 144.76.19.72:21858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:45.144462 2026] [ssl:error] [pid 2462956:tid 2462956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:46.222044 2026] [core:error] [pid 2466777:tid 2466777] (13)Permission denied: [client 216.73.216.199:50842] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/curvmed.com.db
[Thu Jul 30 08:52:46.365985 2026] [authz_core:error] [pid 2460840:tid 2460840] [client 57.141.0.48:36856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:46.366606 2026] [authz_core:error] [pid 2460840:tid 2460840] [client 57.141.0.48:36856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:47.119791 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.6:34606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:47.120418 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.6:34606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:48.200616 2026] [ssl:error] [pid 2450900:tid 2450900] (EAI 2)Name or service not known: [client 144.76.19.72:21864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:48.200644 2026] [ssl:error] [pid 2450900:tid 2450900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:48.254438 2026] [ssl:error] [pid 2466779:tid 2466779] (EAI 2)Name or service not known: [client 144.76.19.72:21874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:48.254469 2026] [ssl:error] [pid 2466779:tid 2466779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:48.932234 2026] [core:error] [pid 2466162:tid 2466162] (13)Permission denied: [client 216.73.216.199:22056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rud_item/red_zone
[Thu Jul 30 08:52:50.135895 2026] [core:error] [pid 2466162:tid 2466162] (13)Permission denied: [client 216.73.216.199:22056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/hid/drivers/magicmouse/new_id
[Thu Jul 30 08:52:50.437064 2026] [ssl:error] [pid 2466162:tid 2466162] (70014)End of file found: [client 216.73.216.199:22056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:50.738729 2026] [ssl:error] [pid 2466777:tid 2466777] (70014)End of file found: [client 216.73.216.199:50842] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:51.017059 2026] [core:error] [pid 2459739:tid 2459739] [client 66.249.64.170:64901] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:52:51.017103 2026] [core:error] [pid 2459739:tid 2459739] [client 66.249.64.170:64901] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:52:51.310143 2026] [ssl:error] [pid 2466779:tid 2466779] (EAI 2)Name or service not known: [client 144.76.19.72:44286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:51.310178 2026] [ssl:error] [pid 2466779:tid 2466779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:51.363412 2026] [ssl:error] [pid 2466165:tid 2466165] (EAI 2)Name or service not known: [client 144.76.19.72:44300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:51.363454 2026] [ssl:error] [pid 2466165:tid 2466165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:52.159233 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 57.141.0.64:39230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:52.159853 2026] [authz_core:error] [pid 2446024:tid 2446024] [client 57.141.0.64:39230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:52.606895 2026] [security2:error] [pid 2466165:tid 2466165] [client 114.119.135.136:51469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1584576000/cat_ids~14/request_format~html"] [unique_id "amsC1B1BTFDwfdi0Fa3RiwAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1584576000/cat_ids~14,17/request_format~html
[Thu Jul 30 08:52:54.063951 2026] [security2:error] [pid 2462410:tid 2462410] [client 114.119.135.136:55281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1584576000/cat_ids~14/request_format~html"] [unique_id "amsC1g0EteoAFhlE1knzJgAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1584576000/cat_ids~14,17/request_format~html
[Thu Jul 30 08:52:54.213758 2026] [authz_core:error] [pid 2463013:tid 2463013] [client 57.141.0.1:62188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:52:54.214373 2026] [authz_core:error] [pid 2463013:tid 2463013] [client 57.141.0.1:62188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:52:54.452533 2026] [ssl:error] [pid 2457970:tid 2457970] (EAI 2)Name or service not known: [client 144.76.19.72:44302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:54.452586 2026] [ssl:error] [pid 2457970:tid 2457970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:54.510481 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:44308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:54.510511 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:55.559637 2026] [ssl:error] [pid 2466568:tid 2466568] (70014)End of file found: [client 216.73.216.199:48904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:52:57.566978 2026] [ssl:error] [pid 2468315:tid 2468315] (EAI 2)Name or service not known: [client 144.76.19.72:44312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:57.567009 2026] [ssl:error] [pid 2468315:tid 2468315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:57.889623 2026] [ssl:error] [pid 2468315:tid 2468315] (EAI 2)Name or service not known: [client 144.76.19.72:44324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:52:57.889650 2026] [ssl:error] [pid 2468315:tid 2468315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:52:58.553783 2026] [security2:error] [pid 2468315:tid 2468315] [client 185.191.171.8:26214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/dodge-county-election-results-2022"] [unique_id "amsC2noA3dYejBED5p6b1wAAAA4"]
[Thu Jul 30 08:52:58.918394 2026] [authz_core:error] [pid 2466567:tid 2466567] [client 216.73.216.199:35741] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/Poly1305/error_log
[Thu Jul 30 08:53:00.439007 2026] [autoindex:error] [pid 2444162:tid 2444162] (13)Permission denied: [client 216.73.216.199:34942] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/georgeho/
[Thu Jul 30 08:53:00.966673 2026] [ssl:error] [pid 2466568:tid 2466568] (EAI 2)Name or service not known: [client 144.76.19.72:54140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:00.966717 2026] [ssl:error] [pid 2466568:tid 2466568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:01.017881 2026] [security2:error] [pid 2446024:tid 2446024] [client 85.208.96.212:10590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/dentons-vacation-scheme"] [unique_id "amsC3Quxrd2oCUR3I5ADxAAAABc"]
[Thu Jul 30 08:53:01.023294 2026] [ssl:error] [pid 2453260:tid 2453260] (EAI 2)Name or service not known: [client 144.76.19.72:54148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:01.023318 2026] [ssl:error] [pid 2453260:tid 2453260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:01.038329 2026] [ssl:error] [pid 2444162:tid 2444162] (70014)End of file found: [client 216.73.216.199:34942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:01.206273 2026] [authz_core:error] [pid 2466568:tid 2466568] [client 57.141.0.15:26900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:01.206896 2026] [authz_core:error] [pid 2466568:tid 2466568] [client 57.141.0.15:26900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:01.639695 2026] [core:error] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:35741] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-16/store_user
[Thu Jul 30 08:53:02.144807 2026] [core:crit] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:35741] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/home/cpmove-inrcorgu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/home/cpmove-inrcorgu/' is executable
[Thu Jul 30 08:53:02.301179 2026] [core:crit] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:35741] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/home/cldiaguser_01438cde81934e3b924e0/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/home/cldiaguser_01438cde81934e3b924e0/' is executable
[Thu Jul 30 08:53:03.241784 2026] [ssl:error] [pid 2466568:tid 2466568] (70014)End of file found: [client 216.73.216.199:31485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:03.886334 2026] [security2:error] [pid 2462410:tid 2462410] [client 43.157.52.37:56812] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.q-s-e.org"] [uri "/"] [unique_id "amsC3w0EteoAFhlE1knzKAAAAAI"]
[Thu Jul 30 08:53:04.078170 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:54150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:04.078205 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:04.134058 2026] [ssl:error] [pid 2468567:tid 2468567] (EAI 2)Name or service not known: [client 144.76.19.72:54156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:04.134111 2026] [ssl:error] [pid 2468567:tid 2468567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:05.800800 2026] [security2:error] [pid 2460984:tid 2460984] [client 43.157.22.57:60824] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsC4Yw2rZeTblVNLpwknQAAABo"], referer: http://www.banskoexpress.net
[Thu Jul 30 08:53:05.952190 2026] [ssl:error] [pid 2466567:tid 2466567] (70014)End of file found: [client 216.73.216.199:35741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:06.332470 2026] [security2:error] [pid 2453838:tid 2453838] [client 43.157.22.57:38380] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsC4n0qg6uVPvdwRjSWWAAAACU"], referer: http://www.banskoexpress.com
[Thu Jul 30 08:53:06.458631 2026] [core:error] [pid 2466162:tid 2466162] (13)Permission denied: [client 216.73.216.199:46495] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kmodlve/parameters/lve_noub_legacy
[Thu Jul 30 08:53:06.937080 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.56:38652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:06.937701 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.56:38652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:07.160037 2026] [core:error] [pid 2466162:tid 2466162] (13)Permission denied: [client 216.73.216.199:46495] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack_expect/free_calls
[Thu Jul 30 08:53:07.187804 2026] [ssl:error] [pid 2466165:tid 2466165] (EAI 2)Name or service not known: [client 144.76.19.72:54160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:07.187832 2026] [ssl:error] [pid 2466165:tid 2466165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:07.240619 2026] [ssl:error] [pid 2460984:tid 2460984] (EAI 2)Name or service not known: [client 144.76.19.72:54176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:07.240647 2026] [ssl:error] [pid 2460984:tid 2460984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:08.098456 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.19:31538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:08.099085 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.19:31538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:08.419189 2026] [authz_core:error] [pid 2466165:tid 2466165] [client 57.141.0.9:34600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:08.419816 2026] [authz_core:error] [pid 2466165:tid 2466165] [client 57.141.0.9:34600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:09.547734 2026] [core:error] [pid 2468362:tid 2468362] [client 66.249.64.170:62274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:09.547762 2026] [core:error] [pid 2468362:tid 2468362] [client 66.249.64.170:62274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:10.300319 2026] [ssl:error] [pid 2466165:tid 2466165] (EAI 2)Name or service not known: [client 144.76.19.72:63656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:10.300348 2026] [ssl:error] [pid 2466165:tid 2466165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:10.354809 2026] [ssl:error] [pid 2466130:tid 2466130] (EAI 2)Name or service not known: [client 144.76.19.72:63664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:10.354845 2026] [ssl:error] [pid 2466130:tid 2466130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:11.569024 2026] [core:error] [pid 2466162:tid 2466162] (13)Permission denied: [client 216.73.216.199:46495] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/bengltd.co.uk.db
[Thu Jul 30 08:53:11.675607 2026] [ssl:error] [pid 2466162:tid 2466162] (70014)End of file found: [client 216.73.216.199:46495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:11.977149 2026] [core:error] [pid 2453222:tid 2453222] (13)Permission denied: [client 216.73.216.199:25357] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/abc-dyslexia.com.db
[Thu Jul 30 08:53:12.579227 2026] [ssl:error] [pid 2453222:tid 2453222] (70014)End of file found: [client 216.73.216.199:25357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:12.596453 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.55:22528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:12.597078 2026] [authz_core:error] [pid 2462956:tid 2462956] [client 57.141.0.55:22528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:12.796861 2026] [core:error] [pid 2446024:tid 2446024] [client 66.249.66.168:38987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:12.796901 2026] [core:error] [pid 2446024:tid 2446024] [client 66.249.66.168:38987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:12.797549 2026] [core:error] [pid 2466535:tid 2466535] [client 66.249.66.5:55174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:12.797591 2026] [core:error] [pid 2466535:tid 2466535] [client 66.249.66.5:55174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:13.078400 2026] [ssl:error] [pid 2452039:tid 2452039] (70014)End of file found: [client 216.73.216.199:45501] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:13.410580 2026] [ssl:error] [pid 2446024:tid 2446024] (EAI 2)Name or service not known: [client 144.76.19.72:63674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:13.410611 2026] [ssl:error] [pid 2446024:tid 2446024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:13.461679 2026] [ssl:error] [pid 2464167:tid 2464167] (EAI 2)Name or service not known: [client 144.76.19.72:63688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:13.461714 2026] [ssl:error] [pid 2464167:tid 2464167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:14.219805 2026] [security2:error] [pid 2468315:tid 2468315] [client 43.157.172.39:59464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "amsC6noA3dYejBED5p6cQgAAAA4"]
[Thu Jul 30 08:53:15.682751 2026] [security2:error] [pid 2468315:tid 2468315] [client 43.157.172.39:46322] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "amsC63oA3dYejBED5p6cRAAAAA4"], referer: http://www.itsupportinayrshire.com
[Thu Jul 30 08:53:16.517260 2026] [ssl:error] [pid 2466086:tid 2466086] (EAI 2)Name or service not known: [client 144.76.19.72:63696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:16.517292 2026] [ssl:error] [pid 2466086:tid 2466086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:16.573295 2026] [ssl:error] [pid 2468409:tid 2468409] (EAI 2)Name or service not known: [client 144.76.19.72:63704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:16.573322 2026] [ssl:error] [pid 2468409:tid 2468409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:17.006436 2026] [core:error] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:11536] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/uhci_urb_priv/shrink
[Thu Jul 30 08:53:17.863419 2026] [security2:error] [pid 2466535:tid 2466535] [client 34.206.249.188:53787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chateausaintjeannet.com"] [uri "/my-product/portfolio-builderheader/"] [unique_id "amsC7dSbYORfP6nBdn5B0gAAAAw"]
[Thu Jul 30 08:53:18.274022 2026] [authz_core:error] [pid 2453222:tid 2453222] [client 57.141.0.43:20374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:18.274656 2026] [authz_core:error] [pid 2453222:tid 2453222] [client 57.141.0.43:20374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:18.286059 2026] [core:error] [pid 2464168:tid 2464168] [client 66.249.66.71:60624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:18.286110 2026] [core:error] [pid 2464168:tid 2464168] [client 66.249.66.71:60624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:18.335503 2026] [authz_core:error] [pid 2466162:tid 2466162] [client 66.249.66.34:52536] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:53:18.338390 2026] [authz_core:error] [pid 2466162:tid 2466162] [client 66.249.66.34:52536] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:53:19.517492 2026] [ssl:error] [pid 2466567:tid 2466567] (70014)End of file found: [client 216.73.216.199:11536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:19.710404 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:28752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:19.710461 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:19.765957 2026] [ssl:error] [pid 2463015:tid 2463015] (EAI 2)Name or service not known: [client 144.76.19.72:28758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:19.766001 2026] [ssl:error] [pid 2463015:tid 2463015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:19.826366 2026] [ssl:error] [pid 2468522:tid 2468522] (70014)End of file found: [client 216.73.216.199:57020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:21.650061 2026] [security2:error] [pid 2453440:tid 2453440] [client 35.169.240.53:6324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chateausaintjeannet.com"] [uri "/gallery/outside/feed/"] [unique_id "amsC8RVy0SjJsTQEMu6enwAAACE"]
[Thu Jul 30 08:53:22.824195 2026] [ssl:error] [pid 2468315:tid 2468315] (EAI 2)Name or service not known: [client 144.76.19.72:28772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:22.824228 2026] [ssl:error] [pid 2468315:tid 2468315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:22.879846 2026] [ssl:error] [pid 2466777:tid 2466777] (EAI 2)Name or service not known: [client 144.76.19.72:28786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:22.879875 2026] [ssl:error] [pid 2466777:tid 2466777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:23.126973 2026] [core:error] [pid 2464167:tid 2464167] (13)Permission denied: [client 216.73.216.199:26534] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/agetty.reload
[Thu Jul 30 08:53:23.457162 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.22:64206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:23.457776 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.22:64206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:23.729378 2026] [core:error] [pid 2464167:tid 2464167] (13)Permission denied: [client 216.73.216.199:26534] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/nf_conntrack_ftp/uevent
[Thu Jul 30 08:53:24.639096 2026] [security2:error] [pid 2468236:tid 2468236] [client 85.208.98.23:55658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsC9OarxA1P0-oTeWDxLQAAAAg"]
[Thu Jul 30 08:53:25.934588 2026] [ssl:error] [pid 2468236:tid 2468236] (EAI 2)Name or service not known: [client 144.76.19.72:28800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:25.934620 2026] [ssl:error] [pid 2468236:tid 2468236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:25.991054 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:28806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:25.991100 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:26.143581 2026] [ssl:error] [pid 2464167:tid 2464167] (5)Input/output error: [client 216.73.216.199:26534] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:26.359609 2026] [authz_core:error] [pid 2450900:tid 2450900] [client 74.248.24.145:48546] AH01630: client denied by server configuration: /home/junglej/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 08:53:28.072415 2026] [cgi:error] [pid 2466163:tid 2466163] [client 51.120.69.65:52122] AH02811: stderr from /home/nsnarvi/public_html/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 08:53:28.345170 2026] [authz_core:error] [pid 2466163:tid 2466163] [client 51.120.69.65:52122] AH01630: client denied by server configuration: /home/nsnarvi/public_html/php.ini
[Thu Jul 30 08:53:28.556803 2026] [core:error] [pid 2466131:tid 2466131] (13)Permission denied: [client 216.73.216.199:11154] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 08:53:29.068537 2026] [ssl:error] [pid 2468406:tid 2468406] (EAI 2)Name or service not known: [client 144.76.19.72:28818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:29.068584 2026] [ssl:error] [pid 2468406:tid 2468406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:29.124725 2026] [ssl:error] [pid 2462704:tid 2462704] (EAI 2)Name or service not known: [client 144.76.19.72:28826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:29.124755 2026] [ssl:error] [pid 2462704:tid 2462704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:29.921390 2026] [security2:error] [pid 2468236:tid 2468236] [client 52.0.41.164:20447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/FC77B16EC73828C572FD9C1E9D0844C7.txt"] [unique_id "amsC-earxA1P0-oTeWDxMgAAAAg"]
[Thu Jul 30 08:53:30.052673 2026] [core:error] [pid 2468567:tid 2468567] [client 66.249.64.170:38304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:30.052704 2026] [core:error] [pid 2468567:tid 2468567] [client 66.249.64.170:38304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:53:30.116257 2026] [security2:error] [pid 2469863:tid 2469863] [client 110.249.201.56:53410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsC-nzN_JNhNck11Ax99AAAABo"]
[Thu Jul 30 08:53:31.409027 2026] [security2:error] [pid 2469863:tid 2469863] [client 217.26.31.178:59904] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amsC-3zN_JNhNck11Ax99QAAABo"]
[Thu Jul 30 08:53:32.180439 2026] [ssl:error] [pid 2464167:tid 2464167] (EAI 2)Name or service not known: [client 144.76.19.72:40218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:32.180467 2026] [ssl:error] [pid 2464167:tid 2464167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:32.237489 2026] [ssl:error] [pid 2468315:tid 2468315] (EAI 2)Name or service not known: [client 144.76.19.72:40224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:32.237519 2026] [ssl:error] [pid 2468315:tid 2468315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:32.470628 2026] [core:error] [pid 2466131:tid 2466131] (13)Permission denied: [client 216.73.216.199:11154] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/viewfindermonitor.co.uk.db
[Thu Jul 30 08:53:33.115177 2026] [security2:error] [pid 2469863:tid 2469863] [client 185.191.171.6:23436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/suchitra-vijayan-husband"] [unique_id "amsC_XzN_JNhNck11Ax99gAAABo"]
[Thu Jul 30 08:53:33.545725 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.54:43918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:33.546348 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.54:43918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:34.172436 2026] [ssl:error] [pid 2466131:tid 2466131] (70014)End of file found: [client 216.73.216.199:11154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:34.490304 2026] [authz_core:error] [pid 2469863:tid 2469863] [client 57.141.0.20:56862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:34.490957 2026] [authz_core:error] [pid 2469863:tid 2469863] [client 57.141.0.20:56862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:34.772983 2026] [security2:error] [pid 2468522:tid 2468522] [client 216.73.216.199:27233] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/wwwacct.conf"] [unique_id "amsC_tVEXvzUoEE-ZL7y9QAAACs"]
[Thu Jul 30 08:53:34.773273 2026] [security2:error] [pid 2468522:tid 2468522] [client 216.73.216.199:27233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/wwwacct.conf"] [unique_id "amsC_tVEXvzUoEE-ZL7y9QAAACs"]
[Thu Jul 30 08:53:34.773520 2026] [security2:error] [pid 2468522:tid 2468522] [client 216.73.216.199:27233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/wwwacct.conf"] [unique_id "amsC_tVEXvzUoEE-ZL7y9QAAACs"]
[Thu Jul 30 08:53:35.293834 2026] [ssl:error] [pid 2462956:tid 2462956] (EAI 2)Name or service not known: [client 144.76.19.72:40230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:35.293862 2026] [ssl:error] [pid 2462956:tid 2462956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:35.349998 2026] [ssl:error] [pid 2444162:tid 2444162] (EAI 2)Name or service not known: [client 144.76.19.72:40236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:35.350037 2026] [ssl:error] [pid 2444162:tid 2444162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:38.077992 2026] [authz_core:error] [pid 2469863:tid 2469863] [client 57.141.0.2:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:38.078683 2026] [authz_core:error] [pid 2469863:tid 2469863] [client 57.141.0.2:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:38.270554 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.9:51916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:38.271209 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.9:51916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:38.387984 2026] [ssl:error] [pid 2468522:tid 2468522] (70014)End of file found: [client 216.73.216.199:27233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:38.401788 2026] [ssl:error] [pid 2468567:tid 2468567] (EAI 2)Name or service not known: [client 144.76.19.72:40244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:38.401816 2026] [ssl:error] [pid 2468567:tid 2468567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:38.457902 2026] [ssl:error] [pid 2469863:tid 2469863] (EAI 2)Name or service not known: [client 144.76.19.72:40248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:38.457935 2026] [ssl:error] [pid 2469863:tid 2469863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:38.899424 2026] [autoindex:error] [pid 2468567:tid 2468567] (13)Permission denied: [client 216.73.216.199:56573] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/innersp/
[Thu Jul 30 08:53:41.519595 2026] [ssl:error] [pid 2468405:tid 2468405] (EAI 2)Name or service not known: [client 144.76.19.72:53458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:41.519632 2026] [ssl:error] [pid 2468405:tid 2468405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:41.574220 2026] [ssl:error] [pid 2469863:tid 2469863] (EAI 2)Name or service not known: [client 144.76.19.72:53462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:41.574246 2026] [ssl:error] [pid 2469863:tid 2469863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:42.201058 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.67:45542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:42.201687 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.67:45542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:42.683198 2026] [authz_core:error] [pid 2469863:tid 2469863] [client 57.141.0.45:27274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:42.683817 2026] [authz_core:error] [pid 2469863:tid 2469863] [client 57.141.0.45:27274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:44.627488 2026] [ssl:error] [pid 2468361:tid 2468361] (EAI 2)Name or service not known: [client 144.76.19.72:53470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:44.627525 2026] [ssl:error] [pid 2468361:tid 2468361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:44.679250 2026] [ssl:error] [pid 2468522:tid 2468522] (EAI 2)Name or service not known: [client 144.76.19.72:53482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:44.679286 2026] [ssl:error] [pid 2468522:tid 2468522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:45.497776 2026] [security2:error] [pid 2468405:tid 2468405] [client 216.73.216.199:61975] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/crypto-policies/back-ends/bind.config"] [unique_id "amsDCUwWZ6QmuJMS-i03EwAAACA"]
[Thu Jul 30 08:53:45.498007 2026] [security2:error] [pid 2468405:tid 2468405] [client 216.73.216.199:61975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/crypto-policies/back-ends/bind.config"] [unique_id "amsDCUwWZ6QmuJMS-i03EwAAACA"]
[Thu Jul 30 08:53:45.498221 2026] [security2:error] [pid 2468405:tid 2468405] [client 216.73.216.199:61975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/crypto-policies/back-ends/bind.config"] [unique_id "amsDCUwWZ6QmuJMS-i03EwAAACA"]
[Thu Jul 30 08:53:47.608217 2026] [authz_core:error] [pid 2468405:tid 2468405] [client 216.73.216.199:61975] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/theme-compat/error_log
[Thu Jul 30 08:53:47.731186 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:53486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:47.731214 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:47.785967 2026] [ssl:error] [pid 2457731:tid 2457731] (EAI 2)Name or service not known: [client 144.76.19.72:53492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:47.786001 2026] [ssl:error] [pid 2457731:tid 2457731] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:48.209529 2026] [core:error] [pid 2468405:tid 2468405] (13)Permission denied: [client 216.73.216.199:61975] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/uhci_hcd/drivers/pci:uhci_hcd/unbind
[Thu Jul 30 08:53:50.017374 2026] [ssl:error] [pid 2468405:tid 2468405] (70014)End of file found: [client 216.73.216.199:61975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:50.507549 2026] [core:error] [pid 2463015:tid 2463015] (13)Permission denied: [client 216.73.216.199:19599] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_icr/poison
[Thu Jul 30 08:53:50.614782 2026] [core:crit] [pid 2463015:tid 2463015] (13)Permission denied: [client 216.73.216.199:19599] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/lib64/mysql/plugin/auth_pam_tool_dir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/lib64/mysql/plugin/auth_pam_tool_dir/' is executable
[Thu Jul 30 08:53:50.840944 2026] [ssl:error] [pid 2451986:tid 2451986] (EAI 2)Name or service not known: [client 144.76.19.72:31460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:50.840970 2026] [ssl:error] [pid 2451986:tid 2451986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:50.896644 2026] [ssl:error] [pid 2468408:tid 2468408] (EAI 2)Name or service not known: [client 144.76.19.72:31470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:50.896679 2026] [ssl:error] [pid 2468408:tid 2468408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:50.914420 2026] [ssl:error] [pid 2463015:tid 2463015] (70014)End of file found: [client 216.73.216.199:19599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:51.230000 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 66.249.66.33:65526] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:53:51.232701 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 66.249.66.33:65526] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:53:52.253189 2026] [security2:error] [pid 2468567:tid 2468567] [client 85.208.98.19:56104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nike-stores-all-over-the-world-k.html"] [unique_id "amsDEHOfD9iArG9cPLVMMAAAACw"]
[Thu Jul 30 08:53:52.749465 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 57.141.0.35:39574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:52.750117 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 57.141.0.35:39574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:53.025486 2026] [security2:error] [pid 2463013:tid 2463013] [client 216.73.216.199:61610] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/pure-ftpd/pureftpd-ldap.conf"] [unique_id "amsDEXgP_Wd4XpXInnSiIwAAACY"]
[Thu Jul 30 08:53:53.025780 2026] [security2:error] [pid 2463013:tid 2463013] [client 216.73.216.199:61610] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/pure-ftpd/pureftpd-ldap.conf"] [unique_id "amsDEXgP_Wd4XpXInnSiIwAAACY"]
[Thu Jul 30 08:53:53.026042 2026] [security2:error] [pid 2463013:tid 2463013] [client 216.73.216.199:61610] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/pure-ftpd/pureftpd-ldap.conf"] [unique_id "amsDEXgP_Wd4XpXInnSiIwAAACY"]
[Thu Jul 30 08:53:53.953434 2026] [ssl:error] [pid 2466131:tid 2466131] (EAI 2)Name or service not known: [client 144.76.19.72:31486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:53.953479 2026] [ssl:error] [pid 2466131:tid 2466131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:54.006534 2026] [ssl:error] [pid 2462920:tid 2462920] (EAI 2)Name or service not known: [client 144.76.19.72:31494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:54.006574 2026] [ssl:error] [pid 2462920:tid 2462920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:55.156873 2026] [authz_core:error] [pid 2466131:tid 2466131] [client 57.141.0.16:50322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:55.157498 2026] [authz_core:error] [pid 2466131:tid 2466131] [client 57.141.0.16:50322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:55.325821 2026] [autoindex:error] [pid 2463013:tid 2463013] (13)Permission denied: [client 216.73.216.199:61610] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/pbyawsga/
[Thu Jul 30 08:53:55.439806 2026] [autoindex:error] [pid 2463013:tid 2463013] (13)Permission denied: [client 216.73.216.199:61610] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/hswoodf/
[Thu Jul 30 08:53:56.039679 2026] [core:error] [pid 2463013:tid 2463013] (13)Permission denied: [client 216.73.216.199:61610] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-192/reclaim_account
[Thu Jul 30 08:53:56.340969 2026] [ssl:error] [pid 2463013:tid 2463013] (70014)End of file found: [client 216.73.216.199:61610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:56.638781 2026] [ssl:error] [pid 2462920:tid 2462920] (70014)End of file found: [client 216.73.216.199:56823] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:53:57.065604 2026] [ssl:error] [pid 2453440:tid 2453440] (EAI 2)Name or service not known: [client 144.76.19.72:31500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:57.065638 2026] [ssl:error] [pid 2453440:tid 2453440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:57.126679 2026] [ssl:error] [pid 2444162:tid 2444162] (EAI 2)Name or service not known: [client 144.76.19.72:31510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:53:57.126712 2026] [ssl:error] [pid 2444162:tid 2444162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:53:57.164203 2026] [authz_core:error] [pid 2471523:tid 2471523] [client 57.141.0.52:36002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:53:57.164845 2026] [authz_core:error] [pid 2471523:tid 2471523] [client 57.141.0.52:36002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:53:58.152678 2026] [autoindex:error] [pid 2463015:tid 2463015] (13)Permission denied: [client 216.73.216.199:63235] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/anvilsem/
[Thu Jul 30 08:54:00.200159 2026] [ssl:error] [pid 2468361:tid 2468361] (EAI 2)Name or service not known: [client 144.76.19.72:18768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:00.200202 2026] [ssl:error] [pid 2468361:tid 2468361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:00.254492 2026] [ssl:error] [pid 2468522:tid 2468522] (EAI 2)Name or service not known: [client 144.76.19.72:18778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:00.254521 2026] [ssl:error] [pid 2468522:tid 2468522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:00.258483 2026] [core:error] [pid 2463015:tid 2463015] (13)Permission denied: [client 216.73.216.199:63235] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS0/iomem_base
[Thu Jul 30 08:54:01.171300 2026] [ssl:error] [pid 2463015:tid 2463015] (70014)End of file found: [client 216.73.216.199:63235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:01.861278 2026] [security2:error] [pid 2466163:tid 2466163] [client 85.208.96.208:43770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/easter-call-to-worship-reformed"] [unique_id "amsDGbXNulpG9dWCCGP_DgAAAAo"]
[Thu Jul 30 08:54:02.377048 2026] [autoindex:error] [pid 2463013:tid 2463013] (13)Permission denied: [client 216.73.216.199:47827] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/home/tomhackn/
[Thu Jul 30 08:54:03.306932 2026] [ssl:error] [pid 2453440:tid 2453440] (EAI 2)Name or service not known: [client 144.76.19.72:18792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:03.306969 2026] [ssl:error] [pid 2453440:tid 2453440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:03.359454 2026] [ssl:error] [pid 2453440:tid 2453440] (EAI 2)Name or service not known: [client 144.76.19.72:18796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:03.359479 2026] [ssl:error] [pid 2453440:tid 2453440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:06.420798 2026] [ssl:error] [pid 2471996:tid 2471996] (EAI 2)Name or service not known: [client 144.76.19.72:18798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:06.420832 2026] [ssl:error] [pid 2471996:tid 2471996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:06.488412 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:18808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:06.488435 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:06.592015 2026] [core:crit] [pid 2463013:tid 2463013] (13)Permission denied: [client 216.73.216.199:47827] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/cloudlinux/hooks/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/cloudlinux/hooks/' is executable
[Thu Jul 30 08:54:08.121410 2026] [authz_core:error] [pid 2466567:tid 2466567] [client 52.167.144.162:41514] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:54:08.124346 2026] [authz_core:error] [pid 2466567:tid 2466567] [client 52.167.144.162:41514] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:54:08.306638 2026] [authz_core:error] [pid 2466131:tid 2466131] [client 57.141.0.40:59106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:54:08.307254 2026] [authz_core:error] [pid 2466131:tid 2466131] [client 57.141.0.40:59106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:54:09.298113 2026] [ssl:error] [pid 2466086:tid 2466086] (70014)End of file found: [client 216.73.216.199:31675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:09.574672 2026] [ssl:error] [pid 2468567:tid 2468567] (EAI 2)Name or service not known: [client 144.76.19.72:37052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:09.574702 2026] [ssl:error] [pid 2468567:tid 2468567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:09.625820 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:37064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:09.625851 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:10.200904 2026] [ssl:error] [pid 2463013:tid 2463013] (5)Input/output error: [client 216.73.216.199:47827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:11.410843 2026] [autoindex:error] [pid 2466162:tid 2466162] (13)Permission denied: [client 216.73.216.199:26898] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/ccarver/
[Thu Jul 30 08:54:12.694983 2026] [ssl:error] [pid 2451986:tid 2451986] (EAI 2)Name or service not known: [client 144.76.19.72:37078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:12.695017 2026] [ssl:error] [pid 2451986:tid 2451986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:12.749319 2026] [ssl:error] [pid 2468236:tid 2468236] (EAI 2)Name or service not known: [client 144.76.19.72:37094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:12.749348 2026] [ssl:error] [pid 2468236:tid 2468236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:13.825584 2026] [security2:error] [pid 2468315:tid 2468315] [client 43.133.14.237:52790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "amsDJXoA3dYejBED5p6cXAAAAA4"]
[Thu Jul 30 08:54:14.010096 2026] [ssl:error] [pid 2466162:tid 2466162] (70014)End of file found: [client 216.73.216.199:26898] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:15.117031 2026] [security2:error] [pid 2466535:tid 2466535] [client 114.119.146.111:45701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1584489600/request_format~html/cat_ids~15"] [unique_id "amsDJ9SbYORfP6nBdn5B5wAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E18-3-2020
[Thu Jul 30 08:54:15.520651 2026] [core:error] [pid 2468315:tid 2468315] (13)Permission denied: [client 216.73.216.199:63910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/ladycritique.com.db
[Thu Jul 30 08:54:15.805900 2026] [ssl:error] [pid 2451986:tid 2451986] (EAI 2)Name or service not known: [client 144.76.19.72:37096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:15.805929 2026] [ssl:error] [pid 2451986:tid 2451986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:15.863337 2026] [ssl:error] [pid 2464167:tid 2464167] (EAI 2)Name or service not known: [client 144.76.19.72:37110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:15.863366 2026] [ssl:error] [pid 2464167:tid 2464167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:16.584969 2026] [cgi:error] [pid 2468114:tid 2468114] [client 74.248.24.145:42595] AH02812: stderr from /home/junglej/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:54:16.671437 2026] [security2:error] [pid 2451986:tid 2451986] [client 114.119.146.111:45717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1584489600/request_format~html/cat_ids~15"] [unique_id "amsDKCLJM9_b4f05G2ciJwAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E18-3-2020
[Thu Jul 30 08:54:16.718824 2026] [core:error] [pid 2468315:tid 2468315] (13)Permission denied: [client 216.73.216.199:63910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-16/reclaim_account
[Thu Jul 30 08:54:17.923430 2026] [ssl:error] [pid 2468315:tid 2468315] (70014)End of file found: [client 216.73.216.199:63910] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:18.310714 2026] [authz_core:error] [pid 2450900:tid 2450900] [client 74.248.24.145:48546] AH01630: client denied by server configuration: /home/junglej/public_html/wp-includes/l10n/error_log
[Thu Jul 30 08:54:18.345472 2026] [authz_core:error] [pid 2450900:tid 2450900] [client 74.248.24.145:48546] AH01630: client denied by server configuration: /home/junglej/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 08:54:18.920130 2026] [ssl:error] [pid 2468406:tid 2468406] (EAI 2)Name or service not known: [client 144.76.19.72:37122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:18.920159 2026] [ssl:error] [pid 2468406:tid 2468406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:18.975662 2026] [ssl:error] [pid 2462956:tid 2462956] (EAI 2)Name or service not known: [client 144.76.19.72:37138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:18.975689 2026] [ssl:error] [pid 2462956:tid 2462956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:21.525884 2026] [core:error] [pid 2471998:tid 2471998] [client 66.249.66.199:62795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:21.525908 2026] [core:error] [pid 2471998:tid 2471998] [client 66.249.66.199:62795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:22.032486 2026] [ssl:error] [pid 2468406:tid 2468406] (EAI 2)Name or service not known: [client 144.76.19.72:32516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:22.032520 2026] [ssl:error] [pid 2468406:tid 2468406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:22.085744 2026] [ssl:error] [pid 2446024:tid 2446024] (EAI 2)Name or service not known: [client 144.76.19.72:32520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:22.085786 2026] [ssl:error] [pid 2446024:tid 2446024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:22.446780 2026] [ssl:error] [pid 2463013:tid 2463013] (70014)End of file found: [client 216.73.216.199:63126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:23.350555 2026] [ssl:error] [pid 2468408:tid 2468408] (70014)End of file found: [client 216.73.216.199:42191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:24.182511 2026] [security2:error] [pid 2468406:tid 2468406] [client 185.191.171.6:64134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/how-much-is-a-perk-test-in-arkansas"] [unique_id "amsDMJK8WoOiBmhqDVdtbwAAACM"]
[Thu Jul 30 08:54:25.139875 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:32532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:25.139909 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:25.196597 2026] [ssl:error] [pid 2469863:tid 2469863] (EAI 2)Name or service not known: [client 144.76.19.72:32546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:25.196629 2026] [ssl:error] [pid 2469863:tid 2469863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:26.026625 2026] [authz_core:error] [pid 2471941:tid 2471941] [client 66.249.66.34:37357] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:54:26.029346 2026] [authz_core:error] [pid 2471941:tid 2471941] [client 66.249.66.34:37357] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:54:26.114469 2026] [core:error] [pid 2468406:tid 2468406] [client 66.249.64.172:65204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:26.114498 2026] [core:error] [pid 2468406:tid 2468406] [client 66.249.64.172:65204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:26.400148 2026] [core:error] [pid 2468406:tid 2468406] [client 66.249.64.171:44853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:26.400177 2026] [core:error] [pid 2468406:tid 2468406] [client 66.249.64.171:44853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:26.691003 2026] [core:error] [pid 2468406:tid 2468406] [client 66.249.64.170:41938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:26.691032 2026] [core:error] [pid 2468406:tid 2468406] [client 66.249.64.170:41938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:27.272824 2026] [core:error] [pid 2444162:tid 2444162] (13)Permission denied: [client 216.73.216.199:33314] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/yum/vars/altnodejselstoken
[Thu Jul 30 08:54:27.593186 2026] [security2:error] [pid 2466131:tid 2466131] [client 85.208.98.23:64506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsDM7g6KfVyhTlEwUHy0QAAAAQ"]
[Thu Jul 30 08:54:28.250342 2026] [ssl:error] [pid 2469253:tid 2469253] (EAI 2)Name or service not known: [client 144.76.19.72:32562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:28.250378 2026] [ssl:error] [pid 2469253:tid 2469253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:28.306484 2026] [ssl:error] [pid 2466131:tid 2466131] (EAI 2)Name or service not known: [client 144.76.19.72:32568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:28.306516 2026] [ssl:error] [pid 2466131:tid 2466131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:28.431225 2026] [authz_core:error] [pid 2466162:tid 2466162] [client 74.248.24.145:48533] AH01630: client denied by server configuration: /home/junglej/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 08:54:28.792910 2026] [security2:error] [pid 2471295:tid 2471295] [client 85.208.96.209:38596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/who-owns-tfi-global-news"] [unique_id "amsDNFch6nc0V2c-Mw4sXgAAAB0"]
[Thu Jul 30 08:54:29.085315 2026] [ssl:error] [pid 2444162:tid 2444162] (70014)End of file found: [client 216.73.216.199:33314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:29.643776 2026] [core:error] [pid 2466535:tid 2466535] [client 66.249.64.170:52858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:29.643799 2026] [core:error] [pid 2466535:tid 2466535] [client 66.249.64.170:52858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:31.293803 2026] [security2:error] [pid 2469253:tid 2469253] [client 185.191.171.17:49342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/as-wavelength-increases-what-happens-to-the-energy"] [unique_id "amsDN8i_HHNSOWwQsviO5QAAAAI"]
[Thu Jul 30 08:54:31.391111 2026] [ssl:error] [pid 2470440:tid 2470440] (EAI 2)Name or service not known: [client 144.76.19.72:26666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:31.391159 2026] [ssl:error] [pid 2470440:tid 2470440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:31.445191 2026] [ssl:error] [pid 2468406:tid 2468406] (EAI 2)Name or service not known: [client 144.76.19.72:26680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:31.445215 2026] [ssl:error] [pid 2468406:tid 2468406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:31.790973 2026] [core:error] [pid 2457731:tid 2457731] (13)Permission denied: [client 216.73.216.199:1410] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/highbrightness.co.uk.db
[Thu Jul 30 08:54:32.994539 2026] [core:error] [pid 2457731:tid 2457731] (13)Permission denied: [client 216.73.216.199:1410] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_groupinfo_4k/free_calls
[Thu Jul 30 08:54:33.902530 2026] [ssl:error] [pid 2457731:tid 2457731] (70014)End of file found: [client 216.73.216.199:1410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:34.500459 2026] [ssl:error] [pid 2463013:tid 2463013] (EAI 2)Name or service not known: [client 144.76.19.72:26696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:34.500490 2026] [ssl:error] [pid 2463013:tid 2463013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:34.505476 2026] [core:error] [pid 2471996:tid 2471996] (13)Permission denied: [client 216.73.216.199:63725] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_mmu_page_header/sanity_checks
[Thu Jul 30 08:54:34.554638 2026] [ssl:error] [pid 2466535:tid 2466535] (EAI 2)Name or service not known: [client 144.76.19.72:26698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:34.554675 2026] [ssl:error] [pid 2466535:tid 2466535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:34.812968 2026] [autoindex:error] [pid 2471996:tid 2471996] (13)Permission denied: [client 216.73.216.199:63725] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/street/
[Thu Jul 30 08:54:35.078554 2026] [security2:error] [pid 2472371:tid 2472371] [client 45.148.10.62:38510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amsDO1hSCT4A_JdFlMGCXAAAADc"]
[Thu Jul 30 08:54:35.078721 2026] [security2:error] [pid 2472371:tid 2472371] [client 45.148.10.62:38510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amsDO1hSCT4A_JdFlMGCXAAAADc"]
[Thu Jul 30 08:54:35.078934 2026] [security2:error] [pid 2472371:tid 2472371] [client 45.148.10.62:38510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amsDO1hSCT4A_JdFlMGCXAAAADc"]
[Thu Jul 30 08:54:35.116088 2026] [core:error] [pid 2471996:tid 2471996] (13)Permission denied: [client 216.73.216.199:63725] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/uevent
[Thu Jul 30 08:54:35.435205 2026] [security2:error] [pid 2470440:tid 2470440] [client 124.156.226.179:58216] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.com"] [uri "/"] [unique_id "amsDO4_JdHtq179kF2LlNAAAABQ"]
[Thu Jul 30 08:54:35.492442 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amsDO5K8WoOiBmhqDVdtgwAAACM"]
[Thu Jul 30 08:54:35.492585 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amsDO5K8WoOiBmhqDVdtgwAAACM"]
[Thu Jul 30 08:54:35.492786 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amsDO5K8WoOiBmhqDVdtgwAAACM"]
[Thu Jul 30 08:54:36.021434 2026] [ssl:error] [pid 2471996:tid 2471996] (70014)End of file found: [client 216.73.216.199:63725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:36.055900 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/api/.env"] [unique_id "amsDPJK8WoOiBmhqDVdthwAAACM"]
[Thu Jul 30 08:54:36.056093 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/api/.env"] [unique_id "amsDPJK8WoOiBmhqDVdthwAAACM"]
[Thu Jul 30 08:54:36.056307 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/api/.env"] [unique_id "amsDPJK8WoOiBmhqDVdthwAAACM"]
[Thu Jul 30 08:54:36.085751 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.bak"] [unique_id "amsDPJK8WoOiBmhqDVdtiAAAACM"]
[Thu Jul 30 08:54:36.085908 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.bak"] [unique_id "amsDPJK8WoOiBmhqDVdtiAAAACM"]
[Thu Jul 30 08:54:36.086118 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.bak"] [unique_id "amsDPJK8WoOiBmhqDVdtiAAAACM"]
[Thu Jul 30 08:54:36.184539 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/stripe/.env"] [unique_id "amsDPJK8WoOiBmhqDVdtiwAAACM"]
[Thu Jul 30 08:54:36.184733 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/stripe/.env"] [unique_id "amsDPJK8WoOiBmhqDVdtiwAAACM"]
[Thu Jul 30 08:54:36.184937 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/stripe/.env"] [unique_id "amsDPJK8WoOiBmhqDVdtiwAAACM"]
[Thu Jul 30 08:54:36.225356 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.aws"] [unique_id "amsDPJK8WoOiBmhqDVdtjAAAACM"]
[Thu Jul 30 08:54:36.225512 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.aws"] [unique_id "amsDPJK8WoOiBmhqDVdtjAAAACM"]
[Thu Jul 30 08:54:36.225708 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.aws"] [unique_id "amsDPJK8WoOiBmhqDVdtjAAAACM"]
[Thu Jul 30 08:54:36.261893 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.save"] [unique_id "amsDPJK8WoOiBmhqDVdtjQAAACM"]
[Thu Jul 30 08:54:36.262057 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.save"] [unique_id "amsDPJK8WoOiBmhqDVdtjQAAACM"]
[Thu Jul 30 08:54:36.262265 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.save"] [unique_id "amsDPJK8WoOiBmhqDVdtjQAAACM"]
[Thu Jul 30 08:54:36.295485 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.local"] [unique_id "amsDPJK8WoOiBmhqDVdtjgAAACM"]
[Thu Jul 30 08:54:36.295677 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.local"] [unique_id "amsDPJK8WoOiBmhqDVdtjgAAACM"]
[Thu Jul 30 08:54:36.295885 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.local"] [unique_id "amsDPJK8WoOiBmhqDVdtjgAAACM"]
[Thu Jul 30 08:54:36.331172 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/backend/.env"] [unique_id "amsDPJK8WoOiBmhqDVdtjwAAACM"]
[Thu Jul 30 08:54:36.331351 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/backend/.env"] [unique_id "amsDPJK8WoOiBmhqDVdtjwAAACM"]
[Thu Jul 30 08:54:36.331582 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/backend/.env"] [unique_id "amsDPJK8WoOiBmhqDVdtjwAAACM"]
[Thu Jul 30 08:54:36.391745 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.backup"] [unique_id "amsDPJK8WoOiBmhqDVdtkQAAACM"]
[Thu Jul 30 08:54:36.391912 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.backup"] [unique_id "amsDPJK8WoOiBmhqDVdtkQAAACM"]
[Thu Jul 30 08:54:36.392137 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.backup"] [unique_id "amsDPJK8WoOiBmhqDVdtkQAAACM"]
[Thu Jul 30 08:54:36.423821 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.old"] [unique_id "amsDPJK8WoOiBmhqDVdtkgAAACM"]
[Thu Jul 30 08:54:36.423999 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.old"] [unique_id "amsDPJK8WoOiBmhqDVdtkgAAACM"]
[Thu Jul 30 08:54:36.424236 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.old"] [unique_id "amsDPJK8WoOiBmhqDVdtkgAAACM"]
[Thu Jul 30 08:54:36.456003 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.tmp"] [unique_id "amsDPJK8WoOiBmhqDVdtkwAAACM"]
[Thu Jul 30 08:54:36.456218 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.tmp"] [unique_id "amsDPJK8WoOiBmhqDVdtkwAAACM"]
[Thu Jul 30 08:54:36.456442 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.tmp"] [unique_id "amsDPJK8WoOiBmhqDVdtkwAAACM"]
[Thu Jul 30 08:54:36.484132 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.php.bak"] [unique_id "amsDPJK8WoOiBmhqDVdtlAAAACM"]
[Thu Jul 30 08:54:36.484303 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.php.bak"] [unique_id "amsDPJK8WoOiBmhqDVdtlAAAACM"]
[Thu Jul 30 08:54:36.484509 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.php.bak"] [unique_id "amsDPJK8WoOiBmhqDVdtlAAAACM"]
[Thu Jul 30 08:54:36.513477 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.php"] [unique_id "amsDPJK8WoOiBmhqDVdtlQAAACM"]
[Thu Jul 30 08:54:36.513698 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.php"] [unique_id "amsDPJK8WoOiBmhqDVdtlQAAACM"]
[Thu Jul 30 08:54:36.513916 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.php"] [unique_id "amsDPJK8WoOiBmhqDVdtlQAAACM"]
[Thu Jul 30 08:54:36.531623 2026] [core:error] [pid 2451986:tid 2451986] (13)Permission denied: [client 216.73.216.199:37772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/yum.repos.d/cpanel-plugins.repo
[Thu Jul 30 08:54:36.547111 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.txt"] [unique_id "amsDPJK8WoOiBmhqDVdtlgAAACM"]
[Thu Jul 30 08:54:36.547283 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.txt"] [unique_id "amsDPJK8WoOiBmhqDVdtlgAAACM"]
[Thu Jul 30 08:54:36.547494 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.txt"] [unique_id "amsDPJK8WoOiBmhqDVdtlgAAACM"]
[Thu Jul 30 08:54:36.585580 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.prod"] [unique_id "amsDPJK8WoOiBmhqDVdtlwAAACM"]
[Thu Jul 30 08:54:36.585750 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.prod"] [unique_id "amsDPJK8WoOiBmhqDVdtlwAAACM"]
[Thu Jul 30 08:54:36.585954 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.prod"] [unique_id "amsDPJK8WoOiBmhqDVdtlwAAACM"]
[Thu Jul 30 08:54:36.616931 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.dev"] [unique_id "amsDPJK8WoOiBmhqDVdtmAAAACM"]
[Thu Jul 30 08:54:36.617126 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.dev"] [unique_id "amsDPJK8WoOiBmhqDVdtmAAAACM"]
[Thu Jul 30 08:54:36.617319 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env.dev"] [unique_id "amsDPJK8WoOiBmhqDVdtmAAAACM"]
[Thu Jul 30 08:54:36.696114 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.git/config"] [unique_id "amsDPJK8WoOiBmhqDVdtmgAAACM"]
[Thu Jul 30 08:54:36.696319 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.git/config"] [unique_id "amsDPJK8WoOiBmhqDVdtmgAAACM"]
[Thu Jul 30 08:54:36.696528 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.git/config"] [unique_id "amsDPJK8WoOiBmhqDVdtmgAAACM"]
[Thu Jul 30 08:54:36.732884 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/wp-config.php"] [unique_id "amsDPJK8WoOiBmhqDVdtmwAAACM"]
[Thu Jul 30 08:54:36.733090 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/wp-config.php"] [unique_id "amsDPJK8WoOiBmhqDVdtmwAAACM"]
[Thu Jul 30 08:54:36.733302 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/wp-config.php"] [unique_id "amsDPJK8WoOiBmhqDVdtmwAAACM"]
[Thu Jul 30 08:54:36.786884 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/wp-config.php.old"] [unique_id "amsDPJK8WoOiBmhqDVdtnAAAACM"]
[Thu Jul 30 08:54:36.787109 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/wp-config.php.old"] [unique_id "amsDPJK8WoOiBmhqDVdtnAAAACM"]
[Thu Jul 30 08:54:36.787320 2026] [security2:error] [pid 2468406:tid 2468406] [client 45.148.10.62:38516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/wp-config.php.old"] [unique_id "amsDPJK8WoOiBmhqDVdtnAAAACM"]
[Thu Jul 30 08:54:37.614573 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:26710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:37.614613 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:37.667541 2026] [ssl:error] [pid 2468000:tid 2468000] (EAI 2)Name or service not known: [client 144.76.19.72:26712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:37.667579 2026] [ssl:error] [pid 2468000:tid 2468000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:37.834683 2026] [core:error] [pid 2451986:tid 2451986] (13)Permission denied: [client 216.73.216.199:37772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/spampmusic.com.db
[Thu Jul 30 08:54:39.282449 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.58:39280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:54:39.283086 2026] [authz_core:error] [pid 2457731:tid 2457731] [client 57.141.0.58:39280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:54:39.966205 2026] [ssl:error] [pid 2451986:tid 2451986] (70014)End of file found: [client 216.73.216.199:37772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:40.457078 2026] [autoindex:error] [pid 2471295:tid 2471295] (13)Permission denied: [client 216.73.216.199:59442] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/hugoashmore/
[Thu Jul 30 08:54:40.578250 2026] [autoindex:error] [pid 2471295:tid 2471295] (13)Permission denied: [client 216.73.216.199:59442] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/lukess/
[Thu Jul 30 08:54:40.724608 2026] [ssl:error] [pid 2464167:tid 2464167] (EAI 2)Name or service not known: [client 144.76.19.72:61332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:40.724636 2026] [ssl:error] [pid 2464167:tid 2464167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:40.778905 2026] [ssl:error] [pid 2462956:tid 2462956] (EAI 2)Name or service not known: [client 144.76.19.72:61334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:40.778933 2026] [ssl:error] [pid 2462956:tid 2462956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:41.491167 2026] [autoindex:error] [pid 2471295:tid 2471295] (13)Permission denied: [client 216.73.216.199:59442] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/sfwcpgdn/
[Thu Jul 30 08:54:43.297852 2026] [security2:error] [pid 2457731:tid 2457731] [client 43.157.148.38:45416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.vain.band"] [uri "/"] [unique_id "amsDQ2P93SkCHwo8ahU4mQAAADU"]
[Thu Jul 30 08:54:43.833557 2026] [ssl:error] [pid 2468406:tid 2468406] (EAI 2)Name or service not known: [client 144.76.19.72:61340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:43.833601 2026] [ssl:error] [pid 2468406:tid 2468406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:43.889157 2026] [ssl:error] [pid 2457552:tid 2457552] (EAI 2)Name or service not known: [client 144.76.19.72:61348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:43.889178 2026] [ssl:error] [pid 2457552:tid 2457552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:44.643656 2026] [authz_core:error] [pid 2472371:tid 2472371] [client 57.141.0.22:40276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:54:44.644273 2026] [authz_core:error] [pid 2472371:tid 2472371] [client 57.141.0.22:40276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:54:45.280679 2026] [core:error] [pid 2471295:tid 2471295] (13)Permission denied: [client 216.73.216.199:59442] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/stampys.eu.db
[Thu Jul 30 08:54:45.589609 2026] [core:error] [pid 2464167:tid 2464167] [client 66.249.64.171:43834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:45.589642 2026] [core:error] [pid 2464167:tid 2464167] [client 66.249.64.171:43834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:54:46.488061 2026] [ssl:error] [pid 2471295:tid 2471295] (70014)End of file found: [client 216.73.216.199:59442] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:46.942877 2026] [ssl:error] [pid 2471997:tid 2471997] (EAI 2)Name or service not known: [client 144.76.19.72:61362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:46.942916 2026] [ssl:error] [pid 2471997:tid 2471997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:46.996588 2026] [ssl:error] [pid 2462704:tid 2462704] (EAI 2)Name or service not known: [client 144.76.19.72:61374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:46.996619 2026] [ssl:error] [pid 2462704:tid 2462704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:47.993980 2026] [ssl:error] [pid 2468567:tid 2468567] (5)Input/output error: [client 216.73.216.199:47377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:48.869652 2026] [security2:error] [pid 2466567:tid 2466567] [client 146.56.197.150:43738] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-atrox-killers.net"] [uri "/"] [unique_id "amsDSDVcP_p9vfe6ZHkylAAAAA8"]
[Thu Jul 30 08:54:49.206588 2026] [ssl:error] [pid 2451986:tid 2451986] (70014)End of file found: [client 216.73.216.199:28007] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:49.492790 2026] [security2:error] [pid 2471996:tid 2471996] [client 3.218.103.254:2313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/10-ways-schools-can-mark-the-armistice-centenary-this-autumn/"] [unique_id "amsDSX0bl8fN4227zrWEoAAAAC4"]
[Thu Jul 30 08:54:49.932515 2026] [cgi:error] [pid 2462704:tid 2462704] [client 199.45.155.73:38662] AH02812: stderr from /home/blxghro/social.thecameramonkey.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://social.thecameramonkey.co.uk:80/cgi-bin
[Thu Jul 30 08:54:50.049964 2026] [ssl:error] [pid 2463015:tid 2463015] (EAI 2)Name or service not known: [client 144.76.19.72:21536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:50.049992 2026] [ssl:error] [pid 2463015:tid 2463015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:50.106142 2026] [ssl:error] [pid 2468408:tid 2468408] (EAI 2)Name or service not known: [client 144.76.19.72:21544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:50.106172 2026] [ssl:error] [pid 2468408:tid 2468408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:50.121328 2026] [authz_core:error] [pid 2471940:tid 2471940] [client 57.141.0.7:25650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:54:50.121948 2026] [authz_core:error] [pid 2471940:tid 2471940] [client 57.141.0.7:25650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:54:50.831442 2026] [security2:error] [pid 2471940:tid 2471940] [client 100.28.133.214:1529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/soccer-diaries/"] [unique_id "amsDSpkdvux9sbAAvDpUlAAAACc"]
[Thu Jul 30 08:54:52.052115 2026] [security2:error] [pid 2466131:tid 2466131] [client 85.208.96.209:36304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/top-recreational-dispensaries-in-michigan"] [unique_id "amsDTLg6KfVyhTlEwUHy3AAAAAQ"]
[Thu Jul 30 08:54:53.164595 2026] [ssl:error] [pid 2471887:tid 2471887] (EAI 2)Name or service not known: [client 144.76.19.72:21546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:53.164632 2026] [ssl:error] [pid 2471887:tid 2471887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:53.219732 2026] [ssl:error] [pid 2468567:tid 2468567] (EAI 2)Name or service not known: [client 144.76.19.72:21548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:53.219762 2026] [ssl:error] [pid 2468567:tid 2468567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:53.441510 2026] [ssl:error] [pid 2471295:tid 2471295] (70014)End of file found: [client 216.73.216.199:19590] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:54:53.530983 2026] [security2:error] [pid 2444162:tid 2444162] [client 96.126.107.150:35132] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsDTQR6LYNTEH7ZE01-sQAAABs"]
[Thu Jul 30 08:54:54.041114 2026] [core:error] [pid 2468114:tid 2468114] (13)Permission denied: [client 216.73.216.199:28265] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_tasks/reclaim_account
[Thu Jul 30 08:54:55.435866 2026] [authz_core:error] [pid 2451986:tid 2451986] [client 57.141.0.58:38930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:54:55.436522 2026] [authz_core:error] [pid 2451986:tid 2451986] [client 57.141.0.58:38930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:54:56.274591 2026] [ssl:error] [pid 2469863:tid 2469863] (EAI 2)Name or service not known: [client 144.76.19.72:21554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:56.274621 2026] [ssl:error] [pid 2469863:tid 2469863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:56.315312 2026] [security2:error] [pid 2474791:tid 2474791] [client 100.29.164.178:36572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/meet-me/meet-tom/"] [unique_id "amsDUFIRciNlbc7uvKwMcAAAAAw"]
[Thu Jul 30 08:54:56.327248 2026] [ssl:error] [pid 2463015:tid 2463015] (EAI 2)Name or service not known: [client 144.76.19.72:21566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:56.327272 2026] [ssl:error] [pid 2463015:tid 2463015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:56.898718 2026] [core:error] [pid 2471998:tid 2471998] (13)Permission denied: [client 216.73.216.199:62994] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/names_cache/store_user
[Thu Jul 30 08:54:59.271125 2026] [security2:error] [pid 2471996:tid 2471996] [client 3.235.215.92:37386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/img_5036-003/"] [unique_id "amsDU30bl8fN4227zrWEpAAAAC4"]
[Thu Jul 30 08:54:59.379101 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:21580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:59.379132 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:54:59.433633 2026] [ssl:error] [pid 2468000:tid 2468000] (EAI 2)Name or service not known: [client 144.76.19.72:21584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:54:59.433674 2026] [ssl:error] [pid 2468000:tid 2468000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:01.122362 2026] [authz_core:error] [pid 2470440:tid 2470440] [client 57.141.0.6:27480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:01.123049 2026] [authz_core:error] [pid 2470440:tid 2470440] [client 57.141.0.6:27480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:02.109108 2026] [ssl:error] [pid 2473921:tid 2473921] (70014)End of file found: [client 216.73.216.199:62454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:02.502859 2026] [ssl:error] [pid 2468567:tid 2468567] (EAI 2)Name or service not known: [client 144.76.19.72:47282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:02.502908 2026] [ssl:error] [pid 2468567:tid 2468567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:02.558702 2026] [ssl:error] [pid 2462704:tid 2462704] (EAI 2)Name or service not known: [client 144.76.19.72:47290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:02.558734 2026] [ssl:error] [pid 2462704:tid 2462704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:02.821595 2026] [security2:error] [pid 2474619:tid 2474619] [client 85.208.98.29:39912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/esnek-metal-k.html"] [unique_id "amsDVvKwNY-Jr535OZBjkwAAAAc"]
[Thu Jul 30 08:55:02.986428 2026] [security2:error] [pid 2469863:tid 2469863] [client 3.220.148.166:43371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/about-tom/"] [unique_id "amsDVnzN_JNhNck11Ax-GgAAABo"]
[Thu Jul 30 08:55:05.019411 2026] [security2:error] [pid 2462704:tid 2462704] [client 85.208.96.206:30762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/1970s-denver-nightclubs"] [unique_id "amsDWdPuqZj29YAPonHcBgAAAAU"]
[Thu Jul 30 08:55:05.443881 2026] [core:error] [pid 2474854:tid 2474854] (13)Permission denied: [client 216.73.216.199:56278] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bfq_io_cq/objects_partial
[Thu Jul 30 08:55:05.616987 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:47304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:05.617026 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:05.671960 2026] [ssl:error] [pid 2468408:tid 2468408] (EAI 2)Name or service not known: [client 144.76.19.72:47306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:05.671993 2026] [ssl:error] [pid 2468408:tid 2468408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:07.284347 2026] [security2:error] [pid 2462920:tid 2462920] [client 44.208.223.68:44443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/leeds-sls/tom-palmer-logo/"] [unique_id "amsDWz2yaz3e_4HIHA1bGgAAABI"]
[Thu Jul 30 08:55:07.333414 2026] [core:error] [pid 2463058:tid 2463058] [client 66.249.64.171:61993] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:07.333456 2026] [core:error] [pid 2463058:tid 2463058] [client 66.249.64.171:61993] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:08.158432 2026] [ssl:error] [pid 2474854:tid 2474854] (70014)End of file found: [client 216.73.216.199:56278] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:08.459904 2026] [security2:error] [pid 2471998:tid 2471998] [client 216.73.216.199:62994] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/python-internal/etc/locked_extensions.ini"] [unique_id "amsDXK7RM6k7EJvqelzqWQAAADI"]
[Thu Jul 30 08:55:08.460195 2026] [security2:error] [pid 2471998:tid 2471998] [client 216.73.216.199:62994] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/python-internal/etc/locked_extensions.ini"] [unique_id "amsDXK7RM6k7EJvqelzqWQAAADI"]
[Thu Jul 30 08:55:08.460413 2026] [security2:error] [pid 2471998:tid 2471998] [client 216.73.216.199:62994] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/python-internal/etc/locked_extensions.ini"] [unique_id "amsDXK7RM6k7EJvqelzqWQAAADI"]
[Thu Jul 30 08:55:08.729350 2026] [ssl:error] [pid 2457552:tid 2457552] (EAI 2)Name or service not known: [client 144.76.19.72:47322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:08.729378 2026] [ssl:error] [pid 2457552:tid 2457552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:08.789853 2026] [ssl:error] [pid 2469253:tid 2469253] (EAI 2)Name or service not known: [client 144.76.19.72:47336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:08.789883 2026] [ssl:error] [pid 2469253:tid 2469253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:09.964728 2026] [security2:error] [pid 2471998:tid 2471998] [client 216.73.216.199:62994] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/mbstring.ini"] [unique_id "amsDXa7RM6k7EJvqelzqXgAAADI"]
[Thu Jul 30 08:55:09.965033 2026] [security2:error] [pid 2471998:tid 2471998] [client 216.73.216.199:62994] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/mbstring.ini"] [unique_id "amsDXa7RM6k7EJvqelzqXgAAADI"]
[Thu Jul 30 08:55:09.965262 2026] [security2:error] [pid 2471998:tid 2471998] [client 216.73.216.199:62994] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/mbstring.ini"] [unique_id "amsDXa7RM6k7EJvqelzqXgAAADI"]
[Thu Jul 30 08:55:10.109387 2026] [authz_core:error] [pid 2468114:tid 2468114] [client 57.141.0.66:54244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:10.110007 2026] [authz_core:error] [pid 2468114:tid 2468114] [client 57.141.0.66:54244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:10.851830 2026] [security2:error] [pid 2466568:tid 2466568] [client 35.170.205.140:48730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/swedish-fotbollsakademin/aragsso-2/"] [unique_id "amsDXl6Yc1zepxe20TJHngAAABY"]
[Thu Jul 30 08:55:10.863826 2026] [ssl:error] [pid 2471997:tid 2471997] (70014)End of file found: [client 216.73.216.199:13304] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:11.104107 2026] [authz_core:error] [pid 2475486:tid 2475486] [client 57.141.0.20:24000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:11.104750 2026] [authz_core:error] [pid 2475486:tid 2475486] [client 57.141.0.20:24000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:11.844193 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:46116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:11.844232 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:11.901984 2026] [ssl:error] [pid 2469863:tid 2469863] (EAI 2)Name or service not known: [client 144.76.19.72:46118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:11.902021 2026] [ssl:error] [pid 2469863:tid 2469863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:12.029386 2026] [security2:error] [pid 2463058:tid 2463058] [client 49.232.104.223:48100] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.co.uk"] [uri "/"] [unique_id "amsDYPSndNT2sWPMuDbX6QAAAC8"]
[Thu Jul 30 08:55:12.373242 2026] [ssl:error] [pid 2471998:tid 2471998] (70014)End of file found: [client 216.73.216.199:62994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:12.705039 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:55:12.809037 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/adminfuns.php
[Thu Jul 30 08:55:12.809092 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:12.894459 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ahax.php
[Thu Jul 30 08:55:12.894512 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:12.979822 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/breads1.php
[Thu Jul 30 08:55:12.979870 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:13.089415 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/must.php
[Thu Jul 30 08:55:13.089467 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:13.119449 2026] [security2:error] [pid 2469863:tid 2469863] [client 49.232.104.223:49020] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsDYXzN_JNhNck11Ax-HAAAABo"], referer: http://jasperandtroy.co.uk
[Thu Jul 30 08:55:13.174578 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/up.php
[Thu Jul 30 08:55:13.174628 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:13.260322 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/upload.php
[Thu Jul 30 08:55:13.260386 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:13.345860 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:13.449501 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:13.534843 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:13.621593 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-update.php
[Thu Jul 30 08:55:13.621647 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:13.710582 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xmrlpc.php
[Thu Jul 30 08:55:13.710637 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:13.796590 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about
[Thu Jul 30 08:55:13.882189 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/an.php
[Thu Jul 30 08:55:13.882242 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:13.919456 2026] [security2:error] [pid 2468000:tid 2468000] [client 45.233.148.131:36210] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsDYd0UkNwpBcpaU3SwoQAAAAA"]
[Thu Jul 30 08:55:13.989550 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/asw.php
[Thu Jul 30 08:55:13.989609 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.075465 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/item.php
[Thu Jul 30 08:55:14.075510 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.161588 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/jga.php
[Thu Jul 30 08:55:14.161639 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.263436 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mac.php
[Thu Jul 30 08:55:14.263494 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.353172 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/system.php
[Thu Jul 30 08:55:14.353222 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.442415 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-access.php
[Thu Jul 30 08:55:14.442463 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.532589 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:14.622847 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:14.710098 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-load.php
[Thu Jul 30 08:55:14.710148 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.810936 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/zafir1.php
[Thu Jul 30 08:55:14.810984 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.896327 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/abc.php
[Thu Jul 30 08:55:14.896377 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:14.986885 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/c1.php
[Thu Jul 30 08:55:14.986936 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.048182 2026] [ssl:error] [pid 2462704:tid 2462704] (EAI 2)Name or service not known: [client 144.76.19.72:46124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:15.048208 2026] [ssl:error] [pid 2462704:tid 2462704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:15.075652 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/index.php
[Thu Jul 30 08:55:15.075701 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.161502 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/root.php
[Thu Jul 30 08:55:15.161554 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.247050 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/shell.php
[Thu Jul 30 08:55:15.247113 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.281424 2026] [ssl:error] [pid 2466568:tid 2466568] (EAI 2)Name or service not known: [client 144.76.19.72:46134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:15.281452 2026] [ssl:error] [pid 2466568:tid 2466568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:15.333578 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:15.379968 2026] [core:error] [pid 2463058:tid 2463058] (13)Permission denied: [client 216.73.216.199:37901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/min_partial
[Thu Jul 30 08:55:15.419111 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-block.php
[Thu Jul 30 08:55:15.419161 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.504791 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:15.601357 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-header-json.php
[Thu Jul 30 08:55:15.601409 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.687471 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:55:15.773582 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/zup.php
[Thu Jul 30 08:55:15.773634 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.869101 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a9.php
[Thu Jul 30 08:55:15.869149 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:15.954283 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 08:55:15.959717 2026] [security2:error] [pid 2475676:tid 2475676] [client 185.191.171.10:44544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/coinbase-verification-code-text-i-didn't-request"] [unique_id "amsDYzjPu-bH_uEHWTug_QAAAC4"]
[Thu Jul 30 08:55:16.039936 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/content.php
[Thu Jul 30 08:55:16.040007 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:16.126556 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gg.php
[Thu Jul 30 08:55:16.126614 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:16.215497 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/makeasmtp.php
[Thu Jul 30 08:55:16.215547 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:16.306188 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/paku.php
[Thu Jul 30 08:55:16.306233 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:16.397061 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/rtx.php
[Thu Jul 30 08:55:16.397125 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:16.482466 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/update
[Thu Jul 30 08:55:16.567729 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:16.653210 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:16.741552 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:16.829334 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:16.885243 2026] [core:error] [pid 2463058:tid 2463058] (13)Permission denied: [client 216.73.216.199:37901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/objects_partial
[Thu Jul 30 08:55:16.928634 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:17.014547 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:55:17.099939 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:55:17.193653 2026] [core:error] [pid 2463058:tid 2463058] (13)Permission denied: [client 216.73.216.199:37901] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-192/trace
[Thu Jul 30 08:55:17.195653 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-info.php
[Thu Jul 30 08:55:17.195696 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.224590 2026] [authz_core:error] [pid 2475742:tid 2475742] [client 57.141.0.27:55222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:17.225237 2026] [authz_core:error] [pid 2475742:tid 2475742] [client 57.141.0.27:55222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:17.284724 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-wordfence-waf.php
[Thu Jul 30 08:55:17.284773 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.370000 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws49.php
[Thu Jul 30 08:55:17.370050 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.455435 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xxx.php
[Thu Jul 30 08:55:17.455486 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.541603 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/0x.php
[Thu Jul 30 08:55:17.541652 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.626910 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/CDX1.php
[Thu Jul 30 08:55:17.626959 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.730928 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/akcc.php
[Thu Jul 30 08:55:17.730975 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.816533 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/control.php
[Thu Jul 30 08:55:17.816595 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:17.901954 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images/
[Thu Jul 30 08:55:17.992624 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/modules/mod_footer/tmpl/index.php
[Thu Jul 30 08:55:17.992697 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:18.078009 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/s.php
[Thu Jul 30 08:55:18.078058 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:18.163308 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sagax.php
[Thu Jul 30 08:55:18.163354 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:18.248699 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/vendor
[Thu Jul 30 08:55:18.357194 2026] [ssl:error] [pid 2471523:tid 2471523] (EAI 2)Name or service not known: [client 144.76.19.72:46138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:18.357227 2026] [ssl:error] [pid 2471523:tid 2471523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:18.357389 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:18.413883 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:46150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:18.413907 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:18.444787 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:18.546009 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:18.642444 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:55:18.732163 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/z.php
[Thu Jul 30 08:55:18.732210 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:18.817769 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/f35.php
[Thu Jul 30 08:55:18.817824 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:18.937323 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/file61.php
[Thu Jul 30 08:55:18.937371 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:19.022514 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mah.php
[Thu Jul 30 08:55:19.022563 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:19.108032 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mini.php
[Thu Jul 30 08:55:19.108100 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:19.223610 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/system_log.php
[Thu Jul 30 08:55:19.223661 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:19.240982 2026] [authz_core:error] [pid 2466567:tid 2466567] [client 57.141.0.53:26684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:19.241606 2026] [authz_core:error] [pid 2466567:tid 2466567] [client 57.141.0.53:26684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:19.309044 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/v.php
[Thu Jul 30 08:55:19.309111 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:19.397044 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:19.482350 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 08:55:19.552223 2026] [security2:error] [pid 2474853:tid 2474853] [client 185.191.171.3:54150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/rat-terrier-puppies-mt-vernon,-il"] [unique_id "amsDZwvPWJx564BCMWe8RQAAACE"]
[Thu Jul 30 08:55:19.572043 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 08:55:19.658190 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:55:19.743678 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 08:55:19.828999 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-index.php
[Thu Jul 30 08:55:19.829046 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:19.914365 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp
[Thu Jul 30 08:55:20.000671 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws80.php
[Thu Jul 30 08:55:20.000718 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.095508 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ww2.php
[Thu Jul 30 08:55:20.095555 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.185588 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/7logs.php
[Thu Jul 30 08:55:20.185648 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.273372 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ac.php
[Thu Jul 30 08:55:20.273418 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.363188 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/assets
[Thu Jul 30 08:55:20.448654 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ctex1.php
[Thu Jul 30 08:55:20.448705 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.534257 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/defaults.php
[Thu Jul 30 08:55:20.534303 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.619534 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/domains.php
[Thu Jul 30 08:55:20.619597 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.704969 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dropdown.php
[Thu Jul 30 08:55:20.705014 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.790535 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/files
[Thu Jul 30 08:55:20.890129 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/flower.php
[Thu Jul 30 08:55:20.890181 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:20.979370 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/insc.php
[Thu Jul 30 08:55:20.979419 2026] [access_compat:error] [pid 2475531:tid 2475531] [client 20.63.98.115:24606] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 08:55:21.467751 2026] [ssl:error] [pid 2474854:tid 2474854] (EAI 2)Name or service not known: [client 144.76.19.72:58022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:21.467785 2026] [ssl:error] [pid 2474854:tid 2474854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:21.524923 2026] [ssl:error] [pid 2444162:tid 2444162] (EAI 2)Name or service not known: [client 144.76.19.72:58036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:21.524952 2026] [ssl:error] [pid 2444162:tid 2444162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:22.358681 2026] [ssl:error] [pid 2463058:tid 2463058] (70014)End of file found: [client 216.73.216.199:37901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:24.579945 2026] [ssl:error] [pid 2470440:tid 2470440] (EAI 2)Name or service not known: [client 144.76.19.72:58050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:24.579978 2026] [ssl:error] [pid 2470440:tid 2470440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:24.638689 2026] [ssl:error] [pid 2475677:tid 2475677] (EAI 2)Name or service not known: [client 144.76.19.72:58058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:24.638728 2026] [ssl:error] [pid 2475677:tid 2475677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:24.783381 2026] [ssl:error] [pid 2466779:tid 2466779] (70014)End of file found: [client 216.73.216.199:39952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:24.844805 2026] [core:error] [pid 2475744:tid 2475744] [client 66.249.64.171:60567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:24.844829 2026] [core:error] [pid 2475744:tid 2475744] [client 66.249.64.171:60567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:25.479242 2026] [core:error] [pid 2471295:tid 2471295] [client 66.249.64.171:36772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:25.479266 2026] [core:error] [pid 2471295:tid 2471295] [client 66.249.64.171:36772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:26.270172 2026] [authz_core:error] [pid 2476203:tid 2476203] [client 57.141.0.61:42886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:26.270814 2026] [authz_core:error] [pid 2476203:tid 2476203] [client 57.141.0.61:42886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:27.732594 2026] [ssl:error] [pid 2474825:tid 2474825] (EAI 2)Name or service not known: [client 144.76.19.72:58066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:27.732626 2026] [ssl:error] [pid 2474825:tid 2474825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:27.788381 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:58080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:27.788419 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:27.926112 2026] [autoindex:error] [pid 2471940:tid 2471940] (13)Permission denied: [client 216.73.216.199:64390] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/cloudlinux/flags/available-flags.d/
[Thu Jul 30 08:55:28.524862 2026] [ssl:error] [pid 2471940:tid 2471940] (70014)End of file found: [client 216.73.216.199:64390] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:30.844492 2026] [ssl:error] [pid 2466567:tid 2466567] (EAI 2)Name or service not known: [client 144.76.19.72:26172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:30.844523 2026] [ssl:error] [pid 2466567:tid 2466567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:30.899094 2026] [ssl:error] [pid 2475743:tid 2475743] (EAI 2)Name or service not known: [client 144.76.19.72:26174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:30.899142 2026] [ssl:error] [pid 2475743:tid 2475743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:30.930564 2026] [core:error] [pid 2452039:tid 2452039] [client 66.249.66.8:56105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:30.930598 2026] [core:error] [pid 2452039:tid 2452039] [client 66.249.66.8:56105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:31.246923 2026] [ssl:error] [pid 2471997:tid 2471997] (70014)End of file found: [client 216.73.216.199:46488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:33.971599 2026] [ssl:error] [pid 2474791:tid 2474791] (EAI 2)Name or service not known: [client 144.76.19.72:26186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:33.971633 2026] [ssl:error] [pid 2474791:tid 2474791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:34.024765 2026] [ssl:error] [pid 2466779:tid 2466779] (EAI 2)Name or service not known: [client 144.76.19.72:26200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:34.024793 2026] [ssl:error] [pid 2466779:tid 2466779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:35.634191 2026] [authz_core:error] [pid 2466779:tid 2466779] [client 57.141.0.11:21376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:35.634813 2026] [authz_core:error] [pid 2466779:tid 2466779] [client 57.141.0.11:21376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:37.081390 2026] [ssl:error] [pid 2474853:tid 2474853] (EAI 2)Name or service not known: [client 144.76.19.72:26210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:37.081419 2026] [ssl:error] [pid 2474853:tid 2474853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:37.138555 2026] [ssl:error] [pid 2468000:tid 2468000] (EAI 2)Name or service not known: [client 144.76.19.72:26218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:37.138600 2026] [ssl:error] [pid 2468000:tid 2468000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:38.174589 2026] [ssl:error] [pid 2474854:tid 2474854] (70014)End of file found: [client 216.73.216.199:27275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:38.434136 2026] [security2:error] [pid 2462956:tid 2462956] [client 43.153.71.132:58172] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amsDemYT1UxGmtwVwOhDFwAAABU"]
[Thu Jul 30 08:55:39.082187 2026] [core:error] [pid 2471940:tid 2471940] (13)Permission denied: [client 216.73.216.199:11701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/sunrpc/sections/__ex_table
[Thu Jul 30 08:55:40.194422 2026] [ssl:error] [pid 2471997:tid 2471997] (EAI 2)Name or service not known: [client 144.76.19.72:62900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:40.194460 2026] [ssl:error] [pid 2471997:tid 2471997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:40.250154 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:62906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:40.250179 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:40.286297 2026] [core:error] [pid 2471940:tid 2471940] (13)Permission denied: [client 216.73.216.199:11701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/red_zone
[Thu Jul 30 08:55:42.058894 2026] [security2:error] [pid 2471997:tid 2471997] [client 114.119.158.38:35651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1584489600/cat_ids~14,102/request_format~html"] [unique_id "amsDfoxQ7WPVmbOri0kPowAAADE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1584489600/request_format~html/cat_ids~14
[Thu Jul 30 08:55:43.307955 2026] [ssl:error] [pid 2475631:tid 2475631] (EAI 2)Name or service not known: [client 144.76.19.72:62914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:43.307986 2026] [ssl:error] [pid 2475631:tid 2475631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:43.363997 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:62916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:43.364018 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:43.872235 2026] [security2:error] [pid 2470440:tid 2470440] [client 114.119.158.38:35663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1584489600/cat_ids~14,102/request_format~html"] [unique_id "amsDf4_JdHtq179kF2LlqwAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1584489600/request_format~html/cat_ids~14
[Thu Jul 30 08:55:44.025537 2026] [core:error] [pid 2466568:tid 2466568] [client 66.249.64.170:45638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:44.025564 2026] [core:error] [pid 2466568:tid 2466568] [client 66.249.64.170:45638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:45.114284 2026] [ssl:error] [pid 2466131:tid 2466131] (70014)End of file found: [client 216.73.216.199:16772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:55:45.138724 2026] [lsapi:warn] [pid 2471997:tid 2471997] [client 72.167.132.114:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 08:55:46.420555 2026] [ssl:error] [pid 2468522:tid 2468522] (EAI 2)Name or service not known: [client 144.76.19.72:62922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:46.420607 2026] [ssl:error] [pid 2468522:tid 2468522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:46.476187 2026] [ssl:error] [pid 2475531:tid 2475531] (EAI 2)Name or service not known: [client 144.76.19.72:62930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:46.476224 2026] [ssl:error] [pid 2475531:tid 2475531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:46.689246 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 66.249.66.33:39256] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:55:46.691867 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 66.249.66.33:39256] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:55:46.850592 2026] [core:crit] [pid 2475531:tid 2475531] (13)Permission denied: [client 23.111.14.235:51933] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 08:55:47.208665 2026] [core:error] [pid 2471295:tid 2471295] [client 23.111.14.235:51984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:47.562689 2026] [core:error] [pid 2475531:tid 2475531] [client 23.111.14.235:52020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:47.562709 2026] [core:error] [pid 2475531:tid 2475531] [client 23.111.14.235:52020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:47.627507 2026] [authz_core:error] [pid 2476254:tid 2476254] [client 57.141.0.46:29284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:47.628140 2026] [authz_core:error] [pid 2476254:tid 2476254] [client 57.141.0.46:29284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:47.825629 2026] [security2:error] [pid 2471940:tid 2471940] [client 216.73.216.199:11701] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux-summary.log"] [unique_id "amsDg5kdvux9sbAAvDpUxQAAACc"]
[Thu Jul 30 08:55:47.825913 2026] [security2:error] [pid 2471940:tid 2471940] [client 216.73.216.199:11701] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux-summary.log"] [unique_id "amsDg5kdvux9sbAAvDpUxQAAACc"]
[Thu Jul 30 08:55:47.826150 2026] [security2:error] [pid 2471940:tid 2471940] [client 216.73.216.199:11701] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux-summary.log"] [unique_id "amsDg5kdvux9sbAAvDpUxQAAACc"]
[Thu Jul 30 08:55:47.919041 2026] [core:error] [pid 2474791:tid 2474791] [client 23.111.14.235:52073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:49.331840 2026] [core:error] [pid 2471940:tid 2471940] (13)Permission denied: [client 216.73.216.199:11701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/dev/fd/8
[Thu Jul 30 08:55:49.532116 2026] [ssl:error] [pid 2468315:tid 2468315] (EAI 2)Name or service not known: [client 144.76.19.72:62946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:49.532145 2026] [ssl:error] [pid 2468315:tid 2468315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:49.589278 2026] [ssl:error] [pid 2474791:tid 2474791] (EAI 2)Name or service not known: [client 144.76.19.72:42792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:49.589307 2026] [ssl:error] [pid 2474791:tid 2474791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:49.632909 2026] [core:error] [pid 2471940:tid 2471940] (13)Permission denied: [client 216.73.216.199:11701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/store_user
[Thu Jul 30 08:55:52.638577 2026] [core:error] [pid 2468522:tid 2468522] (13)Permission denied: [client 216.73.216.199:5826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-128/slabs_cpu_partial
[Thu Jul 30 08:55:52.647103 2026] [ssl:error] [pid 2466568:tid 2466568] (EAI 2)Name or service not known: [client 144.76.19.72:42794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:52.647134 2026] [ssl:error] [pid 2466568:tid 2466568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:52.705174 2026] [ssl:error] [pid 2474853:tid 2474853] (EAI 2)Name or service not known: [client 144.76.19.72:42798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:52.705199 2026] [ssl:error] [pid 2474853:tid 2474853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:54.474165 2026] [authz_core:error] [pid 2475530:tid 2475530] [client 57.141.0.18:33740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:55:54.474794 2026] [authz_core:error] [pid 2475530:tid 2475530] [client 57.141.0.18:33740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:55:54.746775 2026] [core:error] [pid 2468522:tid 2468522] (13)Permission denied: [client 216.73.216.199:5826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCP/trace
[Thu Jul 30 08:55:55.496500 2026] [authz_core:error] [pid 2466779:tid 2466779] [client 66.249.66.33:37384] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:55:55.499139 2026] [authz_core:error] [pid 2466779:tid 2466779] [client 66.249.66.33:37384] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:55:55.763012 2026] [ssl:error] [pid 2466568:tid 2466568] (EAI 2)Name or service not known: [client 144.76.19.72:42806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:55.763039 2026] [ssl:error] [pid 2466568:tid 2466568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:55.817839 2026] [ssl:error] [pid 2475530:tid 2475530] (EAI 2)Name or service not known: [client 144.76.19.72:42818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:55.817894 2026] [ssl:error] [pid 2475530:tid 2475530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:56.745357 2026] [security2:error] [pid 2468522:tid 2468522] [client 216.73.216.199:5826] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d/default.ini"] [unique_id "amsDjNVEXvzUoEE-ZL7zWAAAACs"]
[Thu Jul 30 08:55:56.745649 2026] [security2:error] [pid 2468522:tid 2468522] [client 216.73.216.199:5826] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d/default.ini"] [unique_id "amsDjNVEXvzUoEE-ZL7zWAAAACs"]
[Thu Jul 30 08:55:56.745867 2026] [security2:error] [pid 2468522:tid 2468522] [client 216.73.216.199:5826] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d/default.ini"] [unique_id "amsDjNVEXvzUoEE-ZL7zWAAAACs"]
[Thu Jul 30 08:55:57.662488 2026] [core:error] [pid 2468522:tid 2468522] (13)Permission denied: [client 216.73.216.199:5826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iint_cache/trace
[Thu Jul 30 08:55:57.962988 2026] [core:error] [pid 2468522:tid 2468522] (13)Permission denied: [client 216.73.216.199:5826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-128/total_objects
[Thu Jul 30 08:55:58.237362 2026] [core:error] [pid 2474619:tid 2474619] [client 66.249.66.41:50965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:58.237393 2026] [core:error] [pid 2474619:tid 2474619] [client 66.249.66.41:50965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:58.248400 2026] [core:error] [pid 2474856:tid 2474856] [client 66.249.66.67:56776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:58.248425 2026] [core:error] [pid 2474856:tid 2474856] [client 66.249.66.67:56776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:55:58.505425 2026] [security2:error] [pid 2474854:tid 2474854] [client 85.208.96.204:61274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/buried-with-love:-the-watts-family-murders"] [unique_id "amsDjg6IK0DqF22A4sjv6gAAACM"]
[Thu Jul 30 08:55:58.872879 2026] [ssl:error] [pid 2471887:tid 2471887] (EAI 2)Name or service not known: [client 144.76.19.72:42832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:58.872905 2026] [ssl:error] [pid 2471887:tid 2471887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:55:58.927458 2026] [ssl:error] [pid 2475677:tid 2475677] (EAI 2)Name or service not known: [client 144.76.19.72:42834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:55:58.927481 2026] [ssl:error] [pid 2475677:tid 2475677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:00.072321 2026] [core:error] [pid 2468522:tid 2468522] (13)Permission denied: [client 216.73.216.199:5826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_free_data/hwcache_align
[Thu Jul 30 08:56:00.673997 2026] [core:error] [pid 2468522:tid 2468522] (13)Permission denied: [client 216.73.216.199:5826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-512/usersize
[Thu Jul 30 08:56:01.303755 2026] [security2:error] [pid 2468315:tid 2468315] [client 82.102.18.190:38688] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/src/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amsDkXoA3dYejBED5p6cbwAAAA4"]
[Thu Jul 30 08:56:01.303997 2026] [security2:error] [pid 2468315:tid 2468315] [client 82.102.18.190:38688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amsDkXoA3dYejBED5p6cbwAAAA4"]
[Thu Jul 30 08:56:01.983036 2026] [ssl:error] [pid 2474856:tid 2474856] (EAI 2)Name or service not known: [client 144.76.19.72:42976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:01.983099 2026] [ssl:error] [pid 2474856:tid 2474856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:01.988964 2026] [security2:error] [pid 2468315:tid 2468315] [client 82.102.18.190:38688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "www.purple-childcare.co.uk"] [uri "/index.php"] [unique_id "amsDkXoA3dYejBED5p6cbwAAAA4"]
[Thu Jul 30 08:56:02.039609 2026] [ssl:error] [pid 2463013:tid 2463013] (EAI 2)Name or service not known: [client 144.76.19.72:42984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:02.039640 2026] [ssl:error] [pid 2463013:tid 2463013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:03.135609 2026] [security2:error] [pid 2466567:tid 2466567] [client 216.73.216.199:18328] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/fill_help_tables.sql"] [unique_id "amsDkzVcP_p9vfe6ZHky-wAAAA8"]
[Thu Jul 30 08:56:03.135833 2026] [security2:error] [pid 2466567:tid 2466567] [client 216.73.216.199:18328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/fill_help_tables.sql"] [unique_id "amsDkzVcP_p9vfe6ZHky-wAAAA8"]
[Thu Jul 30 08:56:03.136042 2026] [security2:error] [pid 2466567:tid 2466567] [client 216.73.216.199:18328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/fill_help_tables.sql"] [unique_id "amsDkzVcP_p9vfe6ZHky-wAAAA8"]
[Thu Jul 30 08:56:04.706003 2026] [core:error] [pid 2466162:tid 2466162] [client 66.249.64.170:41886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:04.706030 2026] [core:error] [pid 2466162:tid 2466162] [client 66.249.64.170:41886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:04.939995 2026] [core:error] [pid 2466567:tid 2466567] (13)Permission denied: [client 216.73.216.199:18328] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/userips
[Thu Jul 30 08:56:05.111032 2026] [ssl:error] [pid 2471887:tid 2471887] (EAI 2)Name or service not known: [client 144.76.19.72:42986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:05.111060 2026] [ssl:error] [pid 2471887:tid 2471887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:05.168916 2026] [ssl:error] [pid 2466568:tid 2466568] (EAI 2)Name or service not known: [client 144.76.19.72:42992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:05.168939 2026] [ssl:error] [pid 2466568:tid 2466568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:07.778781 2026] [core:error] [pid 2471887:tid 2471887] [client 66.249.66.40:45019] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:07.778808 2026] [core:error] [pid 2471887:tid 2471887] [client 66.249.66.40:45019] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:08.227758 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:43004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:08.227784 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:08.279143 2026] [ssl:error] [pid 2474791:tid 2474791] (EAI 2)Name or service not known: [client 144.76.19.72:43012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:08.279167 2026] [ssl:error] [pid 2474791:tid 2474791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:10.395276 2026] [ssl:error] [pid 2478273:tid 2478273] (70014)End of file found: [client 216.73.216.199:41004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:10.780078 2026] [security2:error] [pid 2475676:tid 2475676] [client 47.128.127.50:40714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.epmsonline.co.uk"] [uri "/robots.txt"] [unique_id "amsDmjjPu-bH_uEHWTuhDQAAAC4"]
[Thu Jul 30 08:56:10.996946 2026] [ssl:error] [pid 2468522:tid 2468522] (70014)End of file found: [client 216.73.216.199:44107] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:11.331160 2026] [ssl:error] [pid 2478384:tid 2478384] (EAI 2)Name or service not known: [client 144.76.19.72:53072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:11.331195 2026] [ssl:error] [pid 2478384:tid 2478384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:11.385534 2026] [ssl:error] [pid 2475676:tid 2475676] (EAI 2)Name or service not known: [client 144.76.19.72:53082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:11.385579 2026] [ssl:error] [pid 2475676:tid 2475676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:13.226626 2026] [security2:error] [pid 2466162:tid 2466162] [client 43.157.170.126:40234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amsDnWLwyc4TN4cRbV8lggAAAAk"]
[Thu Jul 30 08:56:13.227492 2026] [authz_core:error] [pid 2466162:tid 2466162] [client 43.157.170.126:40234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:56:13.228032 2026] [authz_core:error] [pid 2466162:tid 2466162] [client 43.157.170.126:40234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:56:14.443415 2026] [ssl:error] [pid 2468000:tid 2468000] (EAI 2)Name or service not known: [client 144.76.19.72:53090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:14.443445 2026] [ssl:error] [pid 2468000:tid 2468000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:14.496631 2026] [ssl:error] [pid 2468000:tid 2468000] (EAI 2)Name or service not known: [client 144.76.19.72:53106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:14.496653 2026] [ssl:error] [pid 2468000:tid 2468000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:14.914132 2026] [ssl:error] [pid 2457970:tid 2457970] (70014)End of file found: [client 216.73.216.199:22504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:16.732341 2026] [ssl:error] [pid 2478466:tid 2478466] (70014)End of file found: [client 216.73.216.199:24380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:16.954904 2026] [authz_core:error] [pid 2478504:tid 2478504] [client 57.141.0.10:58356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:56:16.955550 2026] [authz_core:error] [pid 2478504:tid 2478504] [client 57.141.0.10:58356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:56:17.330925 2026] [security2:error] [pid 2476254:tid 2476254] [client 216.73.216.199:3696] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/sudo.conf"] [unique_id "amsDoXIyrCV5OnLg5vXRTQAAACg"]
[Thu Jul 30 08:56:17.331230 2026] [security2:error] [pid 2476254:tid 2476254] [client 216.73.216.199:3696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/sudo.conf"] [unique_id "amsDoXIyrCV5OnLg5vXRTQAAACg"]
[Thu Jul 30 08:56:17.331446 2026] [security2:error] [pid 2476254:tid 2476254] [client 216.73.216.199:3696] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/sudo.conf"] [unique_id "amsDoXIyrCV5OnLg5vXRTQAAACg"]
[Thu Jul 30 08:56:17.554591 2026] [ssl:error] [pid 2478273:tid 2478273] (EAI 2)Name or service not known: [client 144.76.19.72:53116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:17.554627 2026] [ssl:error] [pid 2478273:tid 2478273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:17.611389 2026] [ssl:error] [pid 2475631:tid 2475631] (EAI 2)Name or service not known: [client 144.76.19.72:53124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:17.611417 2026] [ssl:error] [pid 2475631:tid 2475631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:18.990210 2026] [core:error] [pid 2471995:tid 2471995] [client 66.249.64.170:56630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:18.990235 2026] [core:error] [pid 2471995:tid 2471995] [client 66.249.64.170:56630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:20.668639 2026] [ssl:error] [pid 2478433:tid 2478433] (EAI 2)Name or service not known: [client 144.76.19.72:57920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:20.668673 2026] [ssl:error] [pid 2478433:tid 2478433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:20.723621 2026] [ssl:error] [pid 2471998:tid 2471998] (EAI 2)Name or service not known: [client 144.76.19.72:57926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:20.723654 2026] [ssl:error] [pid 2471998:tid 2471998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:20.733787 2026] [authz_core:error] [pid 2478384:tid 2478384] [client 57.141.0.10:58382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:56:20.734406 2026] [authz_core:error] [pid 2478384:tid 2478384] [client 57.141.0.10:58382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:56:20.931689 2026] [core:error] [pid 2474854:tid 2474854] [client 66.249.66.168:60396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:20.931715 2026] [core:error] [pid 2474854:tid 2474854] [client 66.249.66.168:60396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:21.245615 2026] [ssl:error] [pid 2476254:tid 2476254] (70014)End of file found: [client 216.73.216.199:3696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:21.424044 2026] [authz_core:error] [pid 2475530:tid 2475530] [client 57.141.0.51:50650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:56:21.424674 2026] [authz_core:error] [pid 2475530:tid 2475530] [client 57.141.0.51:50650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:56:21.946117 2026] [ssl:error] [pid 2474853:tid 2474853] (70014)End of file found: [client 216.73.216.199:14481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:23.780514 2026] [ssl:error] [pid 2474854:tid 2474854] (EAI 2)Name or service not known: [client 144.76.19.72:57934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:23.780547 2026] [ssl:error] [pid 2474854:tid 2474854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:23.833529 2026] [ssl:error] [pid 2463013:tid 2463013] (EAI 2)Name or service not known: [client 144.76.19.72:57948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:23.833554 2026] [ssl:error] [pid 2463013:tid 2463013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:23.944755 2026] [security2:error] [pid 2470440:tid 2470440] [client 20.171.55.167:10071] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.theovertones.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsDp4_JdHtq179kF2LmCwAAABQ"]
[Thu Jul 30 08:56:23.944952 2026] [security2:error] [pid 2470440:tid 2470440] [client 20.171.55.167:10071] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.theovertones.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsDp4_JdHtq179kF2LmCwAAABQ"]
[Thu Jul 30 08:56:23.945192 2026] [security2:error] [pid 2470440:tid 2470440] [client 20.171.55.167:10071] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.theovertones.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsDp4_JdHtq179kF2LmCwAAABQ"]
[Thu Jul 30 08:56:24.193757 2026] [core:error] [pid 2466568:tid 2466568] [client 66.249.64.170:62790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:24.193781 2026] [core:error] [pid 2466568:tid 2466568] [client 66.249.64.170:62790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:26.385134 2026] [ssl:error] [pid 2478468:tid 2478468] (70014)End of file found: [client 216.73.216.199:1072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:26.920824 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.71:43554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:56:26.921450 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.71:43554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:56:26.929850 2026] [ssl:error] [pid 2466086:tid 2466086] (EAI 2)Name or service not known: [client 144.76.19.72:57962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:26.929885 2026] [ssl:error] [pid 2466086:tid 2466086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:26.981519 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:57968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:26.981541 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:27.045253 2026] [security2:error] [pid 2475744:tid 2475744] [client 18.214.124.6:12917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2009/ref/B.2-Bangladesh-2007-Cyclone-Sidr.pdf"] [unique_id "amsDq2fKrTssjH7zcjLevwAAADk"]
[Thu Jul 30 08:56:27.839937 2026] [security2:error] [pid 2463058:tid 2463058] [client 98.82.59.253:22704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects-compilations/Shelter-Projects-Urban-Booklet-2020.pdf"] [unique_id "amsDq_SndNT2sWPMuDbYDwAAAC8"]
[Thu Jul 30 08:56:28.192478 2026] [core:error] [pid 2478466:tid 2478466] (13)Permission denied: [client 216.73.216.199:51949] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-256/total_objects
[Thu Jul 30 08:56:28.796641 2026] [core:error] [pid 2478466:tid 2478466] (13)Permission denied: [client 216.73.216.199:51949] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_event/objects
[Thu Jul 30 08:56:29.097912 2026] [core:error] [pid 2478466:tid 2478466] (13)Permission denied: [client 216.73.216.199:51949] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_alias/min_partial
[Thu Jul 30 08:56:29.772544 2026] [authz_core:error] [pid 2468361:tid 2468361] [client 66.249.66.33:44748] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:56:29.775200 2026] [authz_core:error] [pid 2468361:tid 2468361] [client 66.249.66.33:44748] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:56:30.002097 2026] [ssl:error] [pid 2478466:tid 2478466] (70014)End of file found: [client 216.73.216.199:51949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:30.075347 2026] [ssl:error] [pid 2475677:tid 2475677] (EAI 2)Name or service not known: [client 144.76.19.72:40800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:30.075389 2026] [ssl:error] [pid 2475677:tid 2475677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:30.131181 2026] [ssl:error] [pid 2478467:tid 2478467] (EAI 2)Name or service not known: [client 144.76.19.72:40814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:30.131207 2026] [ssl:error] [pid 2478467:tid 2478467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:30.739238 2026] [security2:error] [pid 2478433:tid 2478433] [client 52.45.194.165:46723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2009/ref/C.9-India-1977-Tropical-cyclone.pdf"] [unique_id "amsDrvUGEgAUuDlrYKHcQwAAAAc"]
[Thu Jul 30 08:56:30.913169 2026] [cgi:error] [pid 2469253:tid 2469253] [client 59.183.51.100:51706] AH02812: stderr from /home/nssun/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://ns-sun.com
[Thu Jul 30 08:56:32.900974 2026] [security2:error] [pid 2478468:tid 2478468] [client 185.191.171.14:58110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/the-enclave-at-orlando-condominium-association,-inc"] [unique_id "amsDsFP_jw2FWusu2_jqFAAAABs"]
[Thu Jul 30 08:56:33.058946 2026] [ssl:error] [pid 2466162:tid 2466162] (70014)End of file found: [client 216.73.216.199:54723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:33.185124 2026] [ssl:error] [pid 2464076:tid 2464076] (EAI 2)Name or service not known: [client 144.76.19.72:40818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:33.185150 2026] [ssl:error] [pid 2464076:tid 2464076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:33.239971 2026] [ssl:error] [pid 2475676:tid 2475676] (EAI 2)Name or service not known: [client 144.76.19.72:40820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:33.240002 2026] [ssl:error] [pid 2475676:tid 2475676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:33.712217 2026] [core:error] [pid 2478504:tid 2478504] [client 66.249.66.8:40239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:33.712242 2026] [core:error] [pid 2478504:tid 2478504] [client 66.249.66.8:40239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:34.397087 2026] [authz_core:error] [pid 2464076:tid 2464076] [client 66.249.66.33:48504] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:56:34.399712 2026] [authz_core:error] [pid 2464076:tid 2464076] [client 66.249.66.33:48504] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:56:34.568047 2026] [core:error] [pid 2466568:tid 2466568] (13)Permission denied: [client 216.73.216.199:8854] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/cpu_partial
[Thu Jul 30 08:56:34.587653 2026] [security2:error] [pid 2475486:tid 2475486] [client 35.153.86.200:7376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects8/ref/A14-philippines180821.pdf"] [unique_id "amsDsjmi3KiuzibfHYF6XgAAAAM"]
[Thu Jul 30 08:56:35.775115 2026] [core:error] [pid 2466568:tid 2466568] (13)Permission denied: [client 216.73.216.199:8854] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-1k/cpu_partial
[Thu Jul 30 08:56:36.309408 2026] [ssl:error] [pid 2478466:tid 2478466] (EAI 2)Name or service not known: [client 144.76.19.72:40828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:36.309475 2026] [ssl:error] [pid 2478466:tid 2478466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:36.363831 2026] [ssl:error] [pid 2475742:tid 2475742] (EAI 2)Name or service not known: [client 144.76.19.72:40832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:36.363872 2026] [ssl:error] [pid 2475742:tid 2475742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:37.787394 2026] [security2:error] [pid 2478467:tid 2478467] [client 185.191.171.16:24102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "iapib.com"] [uri "/robots.txt"] [unique_id "amsDtZpxV-rq5QkuxENo3gAAABc"]
[Thu Jul 30 08:56:38.013173 2026] [core:error] [pid 2474854:tid 2474854] [client 66.249.66.167:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:38.013200 2026] [core:error] [pid 2474854:tid 2474854] [client 66.249.66.167:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:38.565767 2026] [security2:error] [pid 2452039:tid 2452039] [client 185.191.171.2:56026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "iapib.com"] [uri "/trackrecord.html"] [unique_id "amsDtvE-k5cCJxWxnoZDYgAAABE"]
[Thu Jul 30 08:56:38.914240 2026] [ssl:error] [pid 2466568:tid 2466568] (70014)End of file found: [client 216.73.216.199:8854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:38.979557 2026] [security2:error] [pid 2474854:tid 2474854] [client 35.168.238.50:38211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/CCCM/vol3/ch2/B.1-Afghanistan-2018-Protracted-Conflict.pdf"] [unique_id "amsDtg6IK0DqF22A4sjv9gAAACM"]
[Thu Jul 30 08:56:39.218344 2026] [core:error] [pid 2475676:tid 2475676] (13)Permission denied: [client 216.73.216.199:60661] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/usersize
[Thu Jul 30 08:56:39.416006 2026] [ssl:error] [pid 2475530:tid 2475530] (EAI 2)Name or service not known: [client 144.76.19.72:40838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:39.416032 2026] [ssl:error] [pid 2475530:tid 2475530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:39.468961 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:40846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:39.468987 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:39.814097 2026] [core:error] [pid 2475676:tid 2475676] (13)Permission denied: [client 216.73.216.199:60661] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/ctor
[Thu Jul 30 08:56:40.376347 2026] [security2:error] [pid 2460840:tid 2460840] [client 85.208.96.204:22850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/brunswick-county-crime-news"] [unique_id "amsDuBAog9mPtoiII-CBBgAAAA0"]
[Thu Jul 30 08:56:41.922398 2026] [core:error] [pid 2475676:tid 2475676] (13)Permission denied: [client 216.73.216.199:60661] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/usersize
[Thu Jul 30 08:56:42.527238 2026] [ssl:error] [pid 2478501:tid 2478501] (EAI 2)Name or service not known: [client 144.76.19.72:23152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:42.527287 2026] [ssl:error] [pid 2478501:tid 2478501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:42.586664 2026] [ssl:error] [pid 2474856:tid 2474856] (EAI 2)Name or service not known: [client 144.76.19.72:23162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:42.586689 2026] [ssl:error] [pid 2474856:tid 2474856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:42.684146 2026] [core:error] [pid 2466162:tid 2466162] [client 66.249.64.170:49121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:42.684173 2026] [core:error] [pid 2466162:tid 2466162] [client 66.249.64.170:49121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:56:43.043453 2026] [security2:error] [pid 2475743:tid 2475743] [client 52.45.77.169:64072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2011-2012/A20-A21-Pakistan-2010.pdf"] [unique_id "amsDu8Aa1OXv3JymzcxFDwAAADg"]
[Thu Jul 30 08:56:43.664925 2026] [access_compat:error] [pid 2463013:tid 2463013] [client 145.223.130.93:57740] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/fake-one-pound-coins-part-three
[Thu Jul 30 08:56:43.665026 2026] [access_compat:error] [pid 2463013:tid 2463013] [client 145.223.130.93:57740] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 08:56:44.330547 2026] [core:error] [pid 2475676:tid 2475676] (13)Permission denied: [client 216.73.216.199:60661] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP/cache_dma
[Thu Jul 30 08:56:45.643317 2026] [ssl:error] [pid 2471940:tid 2471940] (EAI 2)Name or service not known: [client 144.76.19.72:23172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:45.643347 2026] [ssl:error] [pid 2471940:tid 2471940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:45.701514 2026] [ssl:error] [pid 2466568:tid 2466568] (EAI 2)Name or service not known: [client 144.76.19.72:23174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:45.701544 2026] [ssl:error] [pid 2466568:tid 2466568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:48.755483 2026] [ssl:error] [pid 2478468:tid 2478468] (EAI 2)Name or service not known: [client 144.76.19.72:23182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:48.755515 2026] [ssl:error] [pid 2478468:tid 2478468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:48.808879 2026] [ssl:error] [pid 2457970:tid 2457970] (EAI 2)Name or service not known: [client 144.76.19.72:23198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:48.808901 2026] [ssl:error] [pid 2457970:tid 2457970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:49.827715 2026] [security2:error] [pid 2478504:tid 2478504] [client 43.134.56.214:45060] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.co.uk"] [uri "/"] [unique_id "amsDwbdCF5-2g3ACr5q7-AAAADs"]
[Thu Jul 30 08:56:50.186295 2026] [security2:error] [pid 2468315:tid 2468315] [client 103.159.50.174:39226] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsDwnoA3dYejBED5p6cewAAAA4"]
[Thu Jul 30 08:56:51.559564 2026] [ssl:error] [pid 2468522:tid 2468522] (70014)End of file found: [client 216.73.216.199:41169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:51.860392 2026] [core:error] [pid 2478500:tid 2478500] (13)Permission denied: [client 216.73.216.199:39312] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm/sections/__jump_table
[Thu Jul 30 08:56:51.865290 2026] [ssl:error] [pid 2475676:tid 2475676] (EAI 2)Name or service not known: [client 144.76.19.72:57970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:51.865309 2026] [ssl:error] [pid 2475676:tid 2475676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:51.916707 2026] [ssl:error] [pid 2474854:tid 2474854] (EAI 2)Name or service not known: [client 144.76.19.72:57984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:51.916730 2026] [ssl:error] [pid 2474854:tid 2474854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:53.741178 2026] [core:error] [pid 2478500:tid 2478500] (13)Permission denied: [client 216.73.216.199:39312] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/cpu_partial
[Thu Jul 30 08:56:55.407034 2026] [ssl:error] [pid 2466086:tid 2466086] (EAI 2)Name or service not known: [client 144.76.19.72:57990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:55.407080 2026] [ssl:error] [pid 2466086:tid 2466086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:55.476897 2026] [ssl:error] [pid 2478468:tid 2478468] (EAI 2)Name or service not known: [client 144.76.19.72:58002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:55.476920 2026] [ssl:error] [pid 2478468:tid 2478468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:58.181544 2026] [ssl:error] [pid 2478500:tid 2478500] (70014)End of file found: [client 216.73.216.199:39312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:56:58.538446 2026] [ssl:error] [pid 2468522:tid 2468522] (EAI 2)Name or service not known: [client 144.76.19.72:58016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:58.538472 2026] [ssl:error] [pid 2468522:tid 2468522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:58.594548 2026] [ssl:error] [pid 2463013:tid 2463013] (EAI 2)Name or service not known: [client 144.76.19.72:58028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:56:58.594592 2026] [ssl:error] [pid 2463013:tid 2463013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:56:59.589004 2026] [ssl:error] [pid 2463058:tid 2463058] (70014)End of file found: [client 216.73.216.199:31101] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:00.593243 2026] [ssl:error] [pid 2478504:tid 2478504] (70014)End of file found: [client 216.73.216.199:61033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:01.112026 2026] [authz_core:error] [pid 2480284:tid 2480284] [client 57.141.0.71:38766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:57:01.112764 2026] [authz_core:error] [pid 2480284:tid 2480284] [client 57.141.0.71:38766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:57:01.647619 2026] [ssl:error] [pid 2452039:tid 2452039] (EAI 2)Name or service not known: [client 144.76.19.72:19972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:01.647648 2026] [ssl:error] [pid 2452039:tid 2452039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:01.703772 2026] [ssl:error] [pid 2475743:tid 2475743] (EAI 2)Name or service not known: [client 144.76.19.72:19984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:01.703795 2026] [ssl:error] [pid 2475743:tid 2475743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:04.301000 2026] [security2:error] [pid 2478500:tid 2478500] [client 114.119.155.144:40141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1583366400/request_format~html"] [unique_id "amsD0JJrhfGGjvEOI358pwAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E4-3-2020
[Thu Jul 30 08:57:04.773616 2026] [ssl:error] [pid 2475531:tid 2475531] (EAI 2)Name or service not known: [client 144.76.19.72:19986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:04.773654 2026] [ssl:error] [pid 2475531:tid 2475531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:04.828239 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:20002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:04.828266 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:04.900222 2026] [security2:error] [pid 2475743:tid 2475743] [client 43.159.143.187:57962] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "amsD0MAa1OXv3JymzcxFFwAAADg"]
[Thu Jul 30 08:57:05.819966 2026] [security2:error] [pid 2478499:tid 2478499] [client 43.159.143.187:59102] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsD0Zt79NwKF54MKsOrLwAAACQ"], referer: http://spamp.co.uk
[Thu Jul 30 08:57:06.029458 2026] [ssl:error] [pid 2478498:tid 2478498] (70014)End of file found: [client 216.73.216.199:55035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:06.087516 2026] [security2:error] [pid 2478500:tid 2478500] [client 114.119.155.144:40157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1583366400/request_format~html"] [unique_id "amsD0pJrhfGGjvEOI358qAAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E4-3-2020
[Thu Jul 30 08:57:06.631841 2026] [ssl:error] [pid 2463058:tid 2463058] (70014)End of file found: [client 216.73.216.199:15015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:07.630188 2026] [security2:error] [pid 2475676:tid 2475676] [client 43.159.143.187:60730] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsD0zjPu-bH_uEHWTuhMAAAAC4"], referer: http://spamp.com/
[Thu Jul 30 08:57:07.881311 2026] [ssl:error] [pid 2480576:tid 2480576] (EAI 2)Name or service not known: [client 144.76.19.72:20012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:07.881341 2026] [ssl:error] [pid 2480576:tid 2480576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:07.933466 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:20022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:07.933488 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:10.987234 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:38388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:10.987266 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:11.043562 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:38396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:11.043605 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:14.111275 2026] [ssl:error] [pid 2464076:tid 2464076] (EAI 2)Name or service not known: [client 144.76.19.72:38402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:14.111306 2026] [ssl:error] [pid 2464076:tid 2464076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:14.164682 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:38410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:14.164709 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:15.260480 2026] [ssl:error] [pid 2478499:tid 2478499] (70014)End of file found: [client 216.73.216.199:44900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:17.044985 2026] [ssl:error] [pid 2466086:tid 2466086] (70014)End of file found: [client 216.73.216.199:44964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:17.219529 2026] [ssl:error] [pid 2478500:tid 2478500] (EAI 2)Name or service not known: [client 144.76.19.72:38424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:17.219565 2026] [ssl:error] [pid 2478500:tid 2478500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:17.275530 2026] [ssl:error] [pid 2460840:tid 2460840] (EAI 2)Name or service not known: [client 144.76.19.72:38440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:17.275579 2026] [ssl:error] [pid 2460840:tid 2460840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:18.857250 2026] [ssl:error] [pid 2478466:tid 2478466] (70014)End of file found: [client 216.73.216.199:38298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:19.343336 2026] [ssl:error] [pid 2466162:tid 2466162] (70014)End of file found: [client 216.73.216.199:18401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:20.331910 2026] [ssl:error] [pid 2468522:tid 2468522] (EAI 2)Name or service not known: [client 144.76.19.72:39876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:20.331936 2026] [ssl:error] [pid 2468522:tid 2468522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:20.387989 2026] [ssl:error] [pid 2468522:tid 2468522] (EAI 2)Name or service not known: [client 144.76.19.72:39882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:20.388010 2026] [ssl:error] [pid 2468522:tid 2468522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:21.225268 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 66.249.66.35:50404] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:57:21.227919 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 66.249.66.35:50404] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:57:23.440329 2026] [ssl:error] [pid 2481128:tid 2481128] (EAI 2)Name or service not known: [client 144.76.19.72:39888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:23.440384 2026] [ssl:error] [pid 2481128:tid 2481128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:23.497103 2026] [ssl:error] [pid 2474856:tid 2474856] (EAI 2)Name or service not known: [client 144.76.19.72:39902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:23.497134 2026] [ssl:error] [pid 2474856:tid 2474856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:23.980458 2026] [ssl:error] [pid 2481127:tid 2481127] (70014)End of file found: [client 216.73.216.199:11600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:24.488774 2026] [ssl:error] [pid 2478505:tid 2478505] (70014)End of file found: [client 216.73.216.199:40322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:24.577008 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 66.249.66.35:50404] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:57:24.579737 2026] [authz_core:error] [pid 2468522:tid 2468522] [client 66.249.66.35:50404] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:57:24.779825 2026] [ssl:error] [pid 2475676:tid 2475676] (70014)End of file found: [client 216.73.216.199:65271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:25.334218 2026] [authz_core:error] [pid 2481255:tid 2481255] [client 57.141.0.10:51544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:57:25.334885 2026] [authz_core:error] [pid 2481255:tid 2481255] [client 57.141.0.10:51544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:57:25.889113 2026] [core:error] [pid 2475677:tid 2475677] [client 66.249.64.172:44425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:25.889140 2026] [core:error] [pid 2475677:tid 2475677] [client 66.249.64.172:44425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:26.551387 2026] [ssl:error] [pid 2475743:tid 2475743] (EAI 2)Name or service not known: [client 144.76.19.72:39908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:26.551417 2026] [ssl:error] [pid 2475743:tid 2475743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:26.607302 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:39920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:26.607331 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:26.990874 2026] [authz_core:error] [pid 2481297:tid 2481297] [client 57.141.0.42:44734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:57:26.991527 2026] [authz_core:error] [pid 2481297:tid 2481297] [client 57.141.0.42:44734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:57:29.662232 2026] [ssl:error] [pid 2474854:tid 2474854] (EAI 2)Name or service not known: [client 144.76.19.72:49722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:29.662263 2026] [ssl:error] [pid 2474854:tid 2474854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:29.714837 2026] [ssl:error] [pid 2475531:tid 2475531] (EAI 2)Name or service not known: [client 144.76.19.72:49730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:29.714863 2026] [ssl:error] [pid 2475531:tid 2475531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:30.613527 2026] [ssl:error] [pid 2481127:tid 2481127] (70014)End of file found: [client 216.73.216.199:17194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:31.822060 2026] [ssl:error] [pid 2481348:tid 2481348] (70014)End of file found: [client 216.73.216.199:8721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:32.769012 2026] [ssl:error] [pid 2475742:tid 2475742] (EAI 2)Name or service not known: [client 144.76.19.72:49744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:32.769039 2026] [ssl:error] [pid 2475742:tid 2475742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:32.790261 2026] [security2:error] [pid 2478384:tid 2478384] [client 43.157.170.13:41548] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amsD7I38l56acPBBGgJmUAAAAAQ"]
[Thu Jul 30 08:57:32.828086 2026] [ssl:error] [pid 2474856:tid 2474856] (EAI 2)Name or service not known: [client 144.76.19.72:49760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:32.828110 2026] [ssl:error] [pid 2474856:tid 2474856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:34.253266 2026] [ssl:error] [pid 2478505:tid 2478505] (70014)End of file found: [client 216.73.216.199:16991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:35.899850 2026] [ssl:error] [pid 2478499:tid 2478499] (EAI 2)Name or service not known: [client 144.76.19.72:49772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:35.899894 2026] [ssl:error] [pid 2478499:tid 2478499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:35.952190 2026] [ssl:error] [pid 2468522:tid 2468522] (EAI 2)Name or service not known: [client 144.76.19.72:49774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:35.952234 2026] [ssl:error] [pid 2468522:tid 2468522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:35.959745 2026] [ssl:error] [pid 2460840:tid 2460840] (70014)End of file found: [client 216.73.216.199:31180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:38.009242 2026] [authz_core:error] [pid 2457970:tid 2457970] [client 57.141.0.50:23922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:57:38.009865 2026] [authz_core:error] [pid 2457970:tid 2457970] [client 57.141.0.50:23922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:57:38.179789 2026] [ssl:error] [pid 2475743:tid 2475743] (70014)End of file found: [client 216.73.216.199:26440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:39.008521 2026] [ssl:error] [pid 2475676:tid 2475676] (EAI 2)Name or service not known: [client 144.76.19.72:49778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:39.008548 2026] [ssl:error] [pid 2475676:tid 2475676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:39.061744 2026] [ssl:error] [pid 2475744:tid 2475744] (EAI 2)Name or service not known: [client 144.76.19.72:49784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:39.061781 2026] [ssl:error] [pid 2475744:tid 2475744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:39.421486 2026] [cgi:error] [pid 2481302:tid 2481302] [client 172.202.98.196:10998] AH02812: stderr from /home/firstcl1/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 08:57:39.634972 2026] [cgi:error] [pid 2457970:tid 2457970] [client 116.11.95.38:7762] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 08:57:39.999788 2026] [authz_core:error] [pid 2475744:tid 2475744] [client 82.102.18.190:41448] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/SimplePie/src/HTTP/error_log
[Thu Jul 30 08:57:40.906842 2026] [core:error] [pid 2481210:tid 2481210] [client 66.249.64.171:51973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:40.906871 2026] [core:error] [pid 2481210:tid 2481210] [client 66.249.64.171:51973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:41.205083 2026] [core:error] [pid 2466568:tid 2466568] (13)Permission denied: [client 216.73.216.199:26360] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma/total_objects
[Thu Jul 30 08:57:42.115974 2026] [ssl:error] [pid 2475531:tid 2475531] (EAI 2)Name or service not known: [client 144.76.19.72:49838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:42.115997 2026] [ssl:error] [pid 2475531:tid 2475531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:42.167418 2026] [ssl:error] [pid 2475742:tid 2475742] (EAI 2)Name or service not known: [client 144.76.19.72:49846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:42.167439 2026] [ssl:error] [pid 2475742:tid 2475742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:44.844999 2026] [core:error] [pid 2481300:tid 2481300] (13)Permission denied: [client 216.73.216.199:63447] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PINGv6/validate
[Thu Jul 30 08:57:45.145364 2026] [ssl:error] [pid 2481300:tid 2481300] (70014)End of file found: [client 216.73.216.199:63447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:45.220971 2026] [ssl:error] [pid 2474856:tid 2474856] (EAI 2)Name or service not known: [client 144.76.19.72:49860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:45.220998 2026] [ssl:error] [pid 2474856:tid 2474856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:45.277607 2026] [ssl:error] [pid 2480096:tid 2480096] (EAI 2)Name or service not known: [client 144.76.19.72:49870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:45.277637 2026] [ssl:error] [pid 2480096:tid 2480096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:45.446027 2026] [ssl:error] [pid 2466568:tid 2466568] (70014)End of file found: [client 216.73.216.199:26360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:46.777826 2026] [ssl:error] [pid 2480576:tid 2480576] (70014)End of file found: [client 216.73.216.199:28222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:47.863294 2026] [core:error] [pid 2471940:tid 2471940] [client 66.249.66.40:59685] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:47.863318 2026] [core:error] [pid 2471940:tid 2471940] [client 66.249.66.40:59685] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:47.872187 2026] [core:error] [pid 2478384:tid 2478384] [client 66.249.66.167:61359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:47.872209 2026] [core:error] [pid 2478384:tid 2478384] [client 66.249.66.167:61359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:48.335820 2026] [ssl:error] [pid 2475530:tid 2475530] (EAI 2)Name or service not known: [client 144.76.19.72:49872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:48.335845 2026] [ssl:error] [pid 2475530:tid 2475530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:48.388591 2026] [ssl:error] [pid 2471940:tid 2471940] (EAI 2)Name or service not known: [client 144.76.19.72:49880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:48.388613 2026] [ssl:error] [pid 2471940:tid 2471940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:49.843366 2026] [security2:error] [pid 2481255:tid 2481255] [client 82.156.116.86:39274] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "juliaashmore.org"] [uri "/"] [unique_id "amsD_TBJRXeKMwi6ujKoWgAAABo"]
[Thu Jul 30 08:57:50.240401 2026] [security2:error] [pid 2481210:tid 2481210] [client 185.191.171.3:27126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/mayport-naval-station-ship-tours"] [unique_id "amsD_hdRNVi-e3i9AbVyWAAAABQ"]
[Thu Jul 30 08:57:50.282010 2026] [core:error] [pid 2478468:tid 2478468] [client 66.249.66.194:57721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:50.282036 2026] [core:error] [pid 2478468:tid 2478468] [client 66.249.66.194:57721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:57:51.442128 2026] [ssl:error] [pid 2466568:tid 2466568] (EAI 2)Name or service not known: [client 144.76.19.72:32796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:51.442155 2026] [ssl:error] [pid 2466568:tid 2466568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:51.494622 2026] [ssl:error] [pid 2475531:tid 2475531] (EAI 2)Name or service not known: [client 144.76.19.72:32806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:51.494646 2026] [ssl:error] [pid 2475531:tid 2475531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:53.726487 2026] [ssl:error] [pid 2482075:tid 2482075] (70014)End of file found: [client 216.73.216.199:27676] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:53.881589 2026] [security2:error] [pid 2459739:tid 2459739] [client 124.156.226.179:57244] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.newtronicmedia.com"] [uri "/"] [unique_id "amsEAbwOFr1fizM6nsciPwAAABk"]
[Thu Jul 30 08:57:54.192336 2026] [security2:error] [pid 2466162:tid 2466162] [client 85.208.96.203:54888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/bagel-saumon-avocat-calories"] [unique_id "amsEAmLwyc4TN4cRbV8lpQAAAAk"]
[Thu Jul 30 08:57:54.629111 2026] [ssl:error] [pid 2478468:tid 2478468] (70014)End of file found: [client 216.73.216.199:1888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:54.645437 2026] [ssl:error] [pid 2481302:tid 2481302] (EAI 2)Name or service not known: [client 144.76.19.72:32822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:54.645465 2026] [ssl:error] [pid 2481302:tid 2481302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:54.702781 2026] [ssl:error] [pid 2481302:tid 2481302] (EAI 2)Name or service not known: [client 144.76.19.72:32834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:54.702801 2026] [ssl:error] [pid 2481302:tid 2481302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:54.884554 2026] [authz_core:error] [pid 2475742:tid 2475742] [client 66.249.66.33:37152] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:57:54.887323 2026] [authz_core:error] [pid 2475742:tid 2475742] [client 66.249.66.33:37152] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:57:55.536820 2026] [ssl:error] [pid 2475530:tid 2475530] (70014)End of file found: [client 216.73.216.199:35164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:57:57.166989 2026] [authz_core:error] [pid 2481127:tid 2481127] [client 66.249.66.34:62673] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:57:57.169646 2026] [authz_core:error] [pid 2481127:tid 2481127] [client 66.249.66.34:62673] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:57:57.756650 2026] [ssl:error] [pid 2480096:tid 2480096] (EAI 2)Name or service not known: [client 144.76.19.72:32842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:57.756674 2026] [ssl:error] [pid 2480096:tid 2480096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:57.808857 2026] [ssl:error] [pid 2482455:tid 2482455] (EAI 2)Name or service not known: [client 144.76.19.72:32848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:57:57.808898 2026] [ssl:error] [pid 2482455:tid 2482455] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:57:58.472405 2026] [authz_core:error] [pid 2482455:tid 2482455] [client 57.141.0.69:57098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:57:58.473027 2026] [authz_core:error] [pid 2482455:tid 2482455] [client 57.141.0.69:57098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:57:59.614756 2026] [cgi:error] [pid 2475742:tid 2475742] [client 144.76.32.120:19520] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 08:57:59.656527 2026] [authz_core:error] [pid 2482075:tid 2482075] [client 57.141.0.18:31550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:57:59.657160 2026] [authz_core:error] [pid 2482075:tid 2482075] [client 57.141.0.18:31550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:00.247355 2026] [ssl:error] [pid 2475742:tid 2475742] (70014)End of file found: [client 216.73.216.199:50827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:00.767116 2026] [ssl:error] [pid 2478467:tid 2478467] (70014)End of file found: [client 216.73.216.199:41911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:00.902691 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:21588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:00.902711 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:00.955479 2026] [ssl:error] [pid 2475530:tid 2475530] (EAI 2)Name or service not known: [client 144.76.19.72:21598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:00.955508 2026] [ssl:error] [pid 2475530:tid 2475530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:00.962737 2026] [core:error] [pid 2478468:tid 2478468] [client 66.249.64.170:62307] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:00.962756 2026] [core:error] [pid 2478468:tid 2478468] [client 66.249.64.170:62307] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:01.264331 2026] [ssl:error] [pid 2463058:tid 2463058] (70014)End of file found: [client 216.73.216.199:22015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:04.019474 2026] [ssl:error] [pid 2474856:tid 2474856] (EAI 2)Name or service not known: [client 144.76.19.72:21612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:04.019503 2026] [ssl:error] [pid 2474856:tid 2474856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:04.076863 2026] [ssl:error] [pid 2481127:tid 2481127] (EAI 2)Name or service not known: [client 144.76.19.72:21620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:04.076904 2026] [ssl:error] [pid 2481127:tid 2481127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:06.046696 2026] [security2:error] [pid 2482456:tid 2482456] [client 1.15.52.154:34434] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "stopfordsackville.com"] [uri "/"] [unique_id "amsEDtFcw_0jeBekeRjJXQAAACw"]
[Thu Jul 30 08:58:06.047589 2026] [authz_core:error] [pid 2482456:tid 2482456] [client 1.15.52.154:34434] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 08:58:07.160624 2026] [ssl:error] [pid 2481127:tid 2481127] (EAI 2)Name or service not known: [client 144.76.19.72:21636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:07.160657 2026] [ssl:error] [pid 2481127:tid 2481127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:07.216360 2026] [ssl:error] [pid 2482456:tid 2482456] (EAI 2)Name or service not known: [client 144.76.19.72:21644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:07.216389 2026] [ssl:error] [pid 2482456:tid 2482456] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:07.340344 2026] [ssl:error] [pid 2478500:tid 2478500] (70014)End of file found: [client 216.73.216.199:38253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:07.603206 2026] [ssl:error] [pid 2482461:tid 2482461] (70014)End of file found: [client 216.73.216.199:48873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:07.905125 2026] [ssl:error] [pid 2462920:tid 2462920] (70014)End of file found: [client 216.73.216.199:1419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:08.356330 2026] [security2:error] [pid 2480576:tid 2480576] [client 3.213.106.226:44743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amsEEG3rwvGyEWZJ8Vr5KQAAAAo"]
[Thu Jul 30 08:58:09.218390 2026] [core:error] [pid 2478384:tid 2478384] [client 57.141.0.17:53328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:09.218422 2026] [core:error] [pid 2478384:tid 2478384] [client 57.141.0.17:53328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:10.272600 2026] [ssl:error] [pid 2481127:tid 2481127] (EAI 2)Name or service not known: [client 144.76.19.72:29140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:10.272628 2026] [ssl:error] [pid 2481127:tid 2481127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:10.328533 2026] [ssl:error] [pid 2482304:tid 2482304] (EAI 2)Name or service not known: [client 144.76.19.72:29150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:10.328564 2026] [ssl:error] [pid 2482304:tid 2482304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:10.944095 2026] [security2:error] [pid 2475743:tid 2475743] [client 47.128.123.61:39780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bookings.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsEEsAa1OXv3JymzcxFKgAAADg"]
[Thu Jul 30 08:58:11.406926 2026] [authz_core:error] [pid 2482462:tid 2482462] [client 172.69.135.46:14220] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 08:58:11.423032 2026] [authz_core:error] [pid 2481300:tid 2481300] [client 57.141.0.34:40200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:11.423661 2026] [authz_core:error] [pid 2481300:tid 2481300] [client 57.141.0.34:40200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:12.402997 2026] [security2:error] [pid 2478499:tid 2478499] [client 52.54.157.23:12332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsEFJt79NwKF54MKsOrugAAACQ"]
[Thu Jul 30 08:58:13.089764 2026] [ssl:error] [pid 2480096:tid 2480096] (70014)End of file found: [client 216.73.216.199:55387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:13.391426 2026] [ssl:error] [pid 2480576:tid 2480576] (EAI 2)Name or service not known: [client 144.76.19.72:29162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:13.391450 2026] [ssl:error] [pid 2480576:tid 2480576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:13.446226 2026] [ssl:error] [pid 2482461:tid 2482461] (EAI 2)Name or service not known: [client 144.76.19.72:29174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:13.446257 2026] [ssl:error] [pid 2482461:tid 2482461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:14.319209 2026] [ssl:error] [pid 2482304:tid 2482304] (70014)End of file found: [client 216.73.216.199:16428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:14.622172 2026] [security2:error] [pid 2482461:tid 2482461] [client 119.28.89.249:52826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.annasmithagent.com"] [uri "/"] [unique_id "amsEFmMTuCcCij_ikk-kzAAAADI"]
[Thu Jul 30 08:58:16.096111 2026] [authz_core:error] [pid 2481210:tid 2481210] [client 57.141.0.9:47010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:16.096733 2026] [authz_core:error] [pid 2481210:tid 2481210] [client 57.141.0.9:47010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:16.248475 2026] [authz_core:error] [pid 2481128:tid 2481128] [client 57.141.0.14:51280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:16.249105 2026] [authz_core:error] [pid 2481128:tid 2481128] [client 57.141.0.14:51280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:16.342418 2026] [security2:error] [pid 2459739:tid 2459739] [client 54.197.114.76:8777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amsEGLwOFr1fizM6nsciRwAAABk"]
[Thu Jul 30 08:58:16.574643 2026] [ssl:error] [pid 2482455:tid 2482455] (EAI 2)Name or service not known: [client 144.76.19.72:29186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:16.574664 2026] [ssl:error] [pid 2482455:tid 2482455] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:16.630287 2026] [ssl:error] [pid 2478467:tid 2478467] (EAI 2)Name or service not known: [client 144.76.19.72:29192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:16.630315 2026] [ssl:error] [pid 2478467:tid 2478467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:19.206803 2026] [security2:error] [pid 2475743:tid 2475743] [client 216.73.216.199:16061] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default/tuned.conf"] [unique_id "amsEG8Aa1OXv3JymzcxFNgAAADg"]
[Thu Jul 30 08:58:19.207013 2026] [security2:error] [pid 2475743:tid 2475743] [client 216.73.216.199:16061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default/tuned.conf"] [unique_id "amsEG8Aa1OXv3JymzcxFNgAAADg"]
[Thu Jul 30 08:58:19.207218 2026] [security2:error] [pid 2475743:tid 2475743] [client 216.73.216.199:16061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default/tuned.conf"] [unique_id "amsEG8Aa1OXv3JymzcxFNgAAADg"]
[Thu Jul 30 08:58:19.715170 2026] [ssl:error] [pid 2480096:tid 2480096] (EAI 2)Name or service not known: [client 144.76.19.72:31046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:19.715197 2026] [ssl:error] [pid 2480096:tid 2480096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:19.770745 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:31060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:19.770775 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:20.109718 2026] [ssl:error] [pid 2475743:tid 2475743] (70014)End of file found: [client 216.73.216.199:16061] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:20.716035 2026] [core:error] [pid 2482462:tid 2482462] (13)Permission denied: [client 216.73.216.199:23127] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/red_zone
[Thu Jul 30 08:58:21.807756 2026] [lsapi:warn] [pid 2482362:tid 2482362] [client 45.158.164.139:45574] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:58:21.807795 2026] [lsapi:warn] [pid 2482362:tid 2482362] [client 45.158.164.139:45574] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:58:21.810865 2026] [lsapi:warn] [pid 2476254:tid 2476254] [client 89.197.16.98:41603] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:58:21.810902 2026] [lsapi:warn] [pid 2476254:tid 2476254] [client 89.197.16.98:41603] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:58:22.825645 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:31072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:22.825675 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:22.878417 2026] [ssl:error] [pid 2462920:tid 2462920] (EAI 2)Name or service not known: [client 144.76.19.72:31082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:22.878446 2026] [ssl:error] [pid 2462920:tid 2462920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:23.592035 2026] [core:error] [pid 2475531:tid 2475531] [client 66.249.66.41:51395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:23.592063 2026] [core:error] [pid 2475531:tid 2475531] [client 66.249.66.41:51395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:24.631284 2026] [ssl:error] [pid 2482462:tid 2482462] (70014)End of file found: [client 216.73.216.199:23127] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:25.435648 2026] [core:error] [pid 2452039:tid 2452039] [client 57.141.0.62:37950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:25.435678 2026] [core:error] [pid 2452039:tid 2452039] [client 57.141.0.62:37950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:25.934358 2026] [ssl:error] [pid 2482304:tid 2482304] (EAI 2)Name or service not known: [client 144.76.19.72:31096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:25.934380 2026] [ssl:error] [pid 2482304:tid 2482304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:25.991448 2026] [ssl:error] [pid 2478384:tid 2478384] (EAI 2)Name or service not known: [client 144.76.19.72:31112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:25.991485 2026] [ssl:error] [pid 2478384:tid 2478384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:26.138505 2026] [ssl:error] [pid 2475742:tid 2475742] (70014)End of file found: [client 216.73.216.199:1453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:27.041791 2026] [ssl:error] [pid 2481210:tid 2481210] (70014)End of file found: [client 216.73.216.199:57965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:28.006543 2026] [security2:error] [pid 2481255:tid 2481255] [client 114.119.155.144:38445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582848000/request_format~html"] [unique_id "amsEJDBJRXeKMwi6ujKoZwAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1582761600/request_format~html
[Thu Jul 30 08:58:29.046476 2026] [ssl:error] [pid 2482363:tid 2482363] (EAI 2)Name or service not known: [client 144.76.19.72:31118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:29.046511 2026] [ssl:error] [pid 2482363:tid 2482363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:29.099704 2026] [ssl:error] [pid 2482460:tid 2482460] (EAI 2)Name or service not known: [client 144.76.19.72:31130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:29.099736 2026] [ssl:error] [pid 2482460:tid 2482460] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:29.658833 2026] [security2:error] [pid 2481300:tid 2481300] [client 114.119.155.144:38447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582848000/request_format~html"] [unique_id "amsEJRta9XdTcSVK-kMZpQAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1582761600/request_format~html
[Thu Jul 30 08:58:30.184480 2026] [security2:error] [pid 2478499:tid 2478499] [client 170.106.143.6:47760] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "greenduckgallery.co.uk"] [uri "/"] [unique_id "amsEJpt79NwKF54MKsOrwgAAACQ"]
[Thu Jul 30 08:58:32.156448 2026] [ssl:error] [pid 2482460:tid 2482460] (EAI 2)Name or service not known: [client 144.76.19.72:34890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:32.156473 2026] [ssl:error] [pid 2482460:tid 2482460] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:32.176002 2026] [ssl:error] [pid 2459739:tid 2459739] (70014)End of file found: [client 216.73.216.199:57627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:32.211084 2026] [ssl:error] [pid 2475742:tid 2475742] (EAI 2)Name or service not known: [client 144.76.19.72:34892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:32.211107 2026] [ssl:error] [pid 2475742:tid 2475742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:32.663888 2026] [ssl:error] [pid 2481300:tid 2481300] (70014)End of file found: [client 216.73.216.199:63467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:33.689609 2026] [authz_core:error] [pid 2481210:tid 2481210] [client 66.249.66.33:47947] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:58:33.692236 2026] [authz_core:error] [pid 2481210:tid 2481210] [client 66.249.66.33:47947] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:58:34.583439 2026] [security2:error] [pid 2478499:tid 2478499] [client 216.73.216.199:63464] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default-base/tuned.conf"] [unique_id "amsEKpt79NwKF54MKsOryAAAACQ"]
[Thu Jul 30 08:58:34.583707 2026] [security2:error] [pid 2478499:tid 2478499] [client 216.73.216.199:63464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default-base/tuned.conf"] [unique_id "amsEKpt79NwKF54MKsOryAAAACQ"]
[Thu Jul 30 08:58:34.583911 2026] [security2:error] [pid 2478499:tid 2478499] [client 216.73.216.199:63464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default-base/tuned.conf"] [unique_id "amsEKpt79NwKF54MKsOryAAAACQ"]
[Thu Jul 30 08:58:34.885141 2026] [ssl:error] [pid 2478499:tid 2478499] (70014)End of file found: [client 216.73.216.199:63464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:35.266537 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:34902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:35.266581 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:35.320898 2026] [ssl:error] [pid 2482424:tid 2482424] (EAI 2)Name or service not known: [client 144.76.19.72:34916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:35.320934 2026] [ssl:error] [pid 2482424:tid 2482424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:35.330347 2026] [authz_core:error] [pid 2466162:tid 2466162] [client 57.141.0.8:56922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:35.330967 2026] [authz_core:error] [pid 2466162:tid 2466162] [client 57.141.0.8:56922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:36.673103 2026] [security2:error] [pid 2463058:tid 2463058] [client 85.208.96.204:29562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/newberry-tablet"] [unique_id "amsELPSndNT2sWPMuDbYMQAAAC8"]
[Thu Jul 30 08:58:36.761470 2026] [authz_core:error] [pid 2482424:tid 2482424] [client 57.141.0.36:31386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:36.762096 2026] [authz_core:error] [pid 2482424:tid 2482424] [client 57.141.0.36:31386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:38.392601 2026] [ssl:error] [pid 2475742:tid 2475742] (EAI 2)Name or service not known: [client 144.76.19.72:34928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:38.392631 2026] [ssl:error] [pid 2475742:tid 2475742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:38.445817 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:34938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:38.445841 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:39.332831 2026] [core:error] [pid 2475486:tid 2475486] [client 66.249.64.171:64838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:39.332855 2026] [core:error] [pid 2475486:tid 2475486] [client 66.249.64.171:64838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:58:39.399841 2026] [ssl:error] [pid 2480096:tid 2480096] (70014)End of file found: [client 216.73.216.199:58638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:40.863674 2026] [authz_core:error] [pid 2481300:tid 2481300] [client 57.141.0.9:52108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:40.864306 2026] [authz_core:error] [pid 2481300:tid 2481300] [client 57.141.0.9:52108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:41.475697 2026] [security2:error] [pid 2478384:tid 2478384] [client 43.166.128.187:53650] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "amsEMY38l56acPBBGgJmmAAAAAQ"]
[Thu Jul 30 08:58:41.505790 2026] [ssl:error] [pid 2475744:tid 2475744] (EAI 2)Name or service not known: [client 144.76.19.72:54636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:41.505813 2026] [ssl:error] [pid 2475744:tid 2475744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:41.559942 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:54640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:41.559971 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:43.918411 2026] [ssl:error] [pid 2466162:tid 2466162] (70014)End of file found: [client 216.73.216.199:60664] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:44.519352 2026] [core:error] [pid 2459739:tid 2459739] (13)Permission denied: [client 216.73.216.199:59734] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/aliases
[Thu Jul 30 08:58:44.613139 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:54654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:44.613166 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:44.667592 2026] [ssl:error] [pid 2462920:tid 2462920] (EAI 2)Name or service not known: [client 144.76.19.72:54668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:44.667617 2026] [ssl:error] [pid 2462920:tid 2462920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:45.729271 2026] [security2:error] [pid 2459739:tid 2459739] [client 216.73.216.199:59734] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/python3.6/site-packages/tuned/ppd/dbus.conf"] [unique_id "amsENbwOFr1fizM6nsciYgAAABk"]
[Thu Jul 30 08:58:45.729718 2026] [security2:error] [pid 2459739:tid 2459739] [client 216.73.216.199:59734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/python3.6/site-packages/tuned/ppd/dbus.conf"] [unique_id "amsENbwOFr1fizM6nsciYgAAABk"]
[Thu Jul 30 08:58:45.730099 2026] [security2:error] [pid 2459739:tid 2459739] [client 216.73.216.199:59734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/python3.6/site-packages/tuned/ppd/dbus.conf"] [unique_id "amsENbwOFr1fizM6nsciYgAAABk"]
[Thu Jul 30 08:58:47.713169 2026] [ssl:error] [pid 2459739:tid 2459739] (70014)End of file found: [client 216.73.216.199:59734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:47.725183 2026] [ssl:error] [pid 2482459:tid 2482459] (EAI 2)Name or service not known: [client 144.76.19.72:54672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:47.725207 2026] [ssl:error] [pid 2482459:tid 2482459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:47.778425 2026] [ssl:error] [pid 2482425:tid 2482425] (EAI 2)Name or service not known: [client 144.76.19.72:54682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:47.778465 2026] [ssl:error] [pid 2482425:tid 2482425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:50.834513 2026] [ssl:error] [pid 2463058:tid 2463058] (EAI 2)Name or service not known: [client 144.76.19.72:56644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:50.834539 2026] [ssl:error] [pid 2463058:tid 2463058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:50.890350 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:56648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:50.890376 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:51.038269 2026] [ssl:error] [pid 2481297:tid 2481297] (70014)End of file found: [client 216.73.216.199:62318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:52.362038 2026] [authz_core:error] [pid 2463058:tid 2463058] [client 57.141.0.59:53950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:52.362674 2026] [authz_core:error] [pid 2463058:tid 2463058] [client 57.141.0.59:53950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:54.013152 2026] [ssl:error] [pid 2475744:tid 2475744] (EAI 2)Name or service not known: [client 144.76.19.72:56650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:54.013179 2026] [ssl:error] [pid 2475744:tid 2475744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:54.070659 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:56666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:54.070686 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:54.972944 2026] [ssl:error] [pid 2481300:tid 2481300] (70014)End of file found: [client 216.73.216.199:54523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:55.479822 2026] [core:error] [pid 2484592:tid 2484592] (13)Permission denied: [client 216.73.216.199:13703] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ext4/sections/__tracepoints
[Thu Jul 30 08:58:55.684619 2026] [ssl:error] [pid 2484592:tid 2484592] (70014)End of file found: [client 216.73.216.199:13703] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:56.261697 2026] [ssl:error] [pid 2481297:tid 2481297] (70014)End of file found: [client 216.73.216.199:54070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:58:56.413052 2026] [authz_core:error] [pid 2478384:tid 2478384] [client 57.141.0.64:40628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:58:56.413683 2026] [authz_core:error] [pid 2478384:tid 2478384] [client 57.141.0.64:40628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:58:57.125788 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:56668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:57.125817 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:58:57.178868 2026] [ssl:error] [pid 2482462:tid 2482462] (EAI 2)Name or service not known: [client 144.76.19.72:56672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:58:57.178912 2026] [ssl:error] [pid 2482462:tid 2482462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:00.234561 2026] [ssl:error] [pid 2480576:tid 2480576] (EAI 2)Name or service not known: [client 144.76.19.72:39556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:00.234612 2026] [ssl:error] [pid 2480576:tid 2480576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:00.290343 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:39566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:00.290368 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:00.452165 2026] [security2:error] [pid 2482459:tid 2482459] [client 85.208.96.208:41134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/buncefield-to-heathrow-pipeline"] [unique_id "amsERHLr4e91BrGEuHjXgQAAADA"]
[Thu Jul 30 08:59:01.125937 2026] [core:error] [pid 2481300:tid 2481300] [client 66.249.64.172:38798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:01.125968 2026] [core:error] [pid 2481300:tid 2481300] [client 66.249.64.172:38798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:02.916138 2026] [core:error] [pid 2482459:tid 2482459] (13)Permission denied: [client 216.73.216.199:17457] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/scsi_sense_cache/min_partial
[Thu Jul 30 08:59:03.360241 2026] [ssl:error] [pid 2475743:tid 2475743] (EAI 2)Name or service not known: [client 144.76.19.72:39576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:03.360268 2026] [ssl:error] [pid 2475743:tid 2475743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:03.414507 2026] [ssl:error] [pid 2484504:tid 2484504] (EAI 2)Name or service not known: [client 144.76.19.72:39580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:03.414533 2026] [ssl:error] [pid 2484504:tid 2484504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:05.622189 2026] [core:error] [pid 2484644:tid 2484644] (13)Permission denied: [client 216.73.216.199:58407] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_tables/sections/__ex_table
[Thu Jul 30 08:59:06.498536 2026] [ssl:error] [pid 2475531:tid 2475531] (EAI 2)Name or service not known: [client 144.76.19.72:39594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:06.498592 2026] [ssl:error] [pid 2475531:tid 2475531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:06.554593 2026] [ssl:error] [pid 2475742:tid 2475742] (EAI 2)Name or service not known: [client 144.76.19.72:39608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:06.554620 2026] [ssl:error] [pid 2475742:tid 2475742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:07.060279 2026] [core:error] [pid 2481300:tid 2481300] [client 93.34.227.71:30275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:07.060306 2026] [core:error] [pid 2481300:tid 2481300] [client 93.34.227.71:30275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:08.213326 2026] [core:error] [pid 2485253:tid 2485253] (13)Permission denied: [client 216.73.216.199:16507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/remote_node_defrag_ratio
[Thu Jul 30 08:59:08.914448 2026] [core:error] [pid 2485253:tid 2485253] (13)Permission denied: [client 216.73.216.199:16507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/slabs_cpu_partial
[Thu Jul 30 08:59:09.648112 2026] [ssl:error] [pid 2485086:tid 2485086] (EAI 2)Name or service not known: [client 144.76.19.72:26722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:09.648153 2026] [ssl:error] [pid 2485086:tid 2485086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:09.704543 2026] [ssl:error] [pid 2484592:tid 2484592] (EAI 2)Name or service not known: [client 144.76.19.72:26728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:09.704600 2026] [ssl:error] [pid 2484592:tid 2484592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:10.666473 2026] [authz_core:error] [pid 2459739:tid 2459739] [client 57.141.0.31:42196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:59:10.667102 2026] [authz_core:error] [pid 2459739:tid 2459739] [client 57.141.0.31:42196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:59:11.323012 2026] [core:error] [pid 2485253:tid 2485253] (13)Permission denied: [client 216.73.216.199:16507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sbin/csf
[Thu Jul 30 08:59:11.624445 2026] [ssl:error] [pid 2485253:tid 2485253] (70014)End of file found: [client 216.73.216.199:16507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:12.078123 2026] [security2:error] [pid 2481210:tid 2481210] [client 185.191.171.13:31466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/bsi-financial-services-payoff-request"] [unique_id "amsEUBdRNVi-e3i9AbVygAAAABQ"]
[Thu Jul 30 08:59:12.760706 2026] [ssl:error] [pid 2484644:tid 2484644] (EAI 2)Name or service not known: [client 144.76.19.72:26740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:12.760740 2026] [ssl:error] [pid 2484644:tid 2484644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:12.815642 2026] [ssl:error] [pid 2484692:tid 2484692] (EAI 2)Name or service not known: [client 144.76.19.72:26756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:12.815673 2026] [ssl:error] [pid 2484692:tid 2484692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:12.823708 2026] [ssl:error] [pid 2484645:tid 2484645] (70014)End of file found: [client 216.73.216.199:4253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:14.465942 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.48:54740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:59:14.466591 2026] [authz_core:error] [pid 2452039:tid 2452039] [client 57.141.0.48:54740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:59:14.635031 2026] [ssl:error] [pid 2482459:tid 2482459] (70014)End of file found: [client 216.73.216.199:30161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:15.872191 2026] [ssl:error] [pid 2485604:tid 2485604] (EAI 2)Name or service not known: [client 144.76.19.72:26766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:15.872224 2026] [ssl:error] [pid 2485604:tid 2485604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:15.927435 2026] [ssl:error] [pid 2482074:tid 2482074] (EAI 2)Name or service not known: [client 144.76.19.72:26772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:15.927466 2026] [ssl:error] [pid 2482074:tid 2482074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:16.923096 2026] [ssl:error] [pid 2485661:tid 2485661] (70014)End of file found: [client 216.73.216.199:41545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:17.642209 2026] [security2:error] [pid 2475531:tid 2475531] [client 43.165.2.110:45772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "amsEVd4gHQmJavrlzbPdnAAAACk"]
[Thu Jul 30 08:59:18.488176 2026] [security2:error] [pid 2484645:tid 2484645] [client 43.165.2.110:34632] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "amsEVkHKzYbZ7PFlOjmcDwAAABY"], referer: http://www.pamporovoexpress.com
[Thu Jul 30 08:59:18.549441 2026] [ssl:error] [pid 2482462:tid 2482462] (70014)End of file found: [client 216.73.216.199:30319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:18.981961 2026] [ssl:error] [pid 2478505:tid 2478505] (EAI 2)Name or service not known: [client 144.76.19.72:26780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:18.982001 2026] [ssl:error] [pid 2478505:tid 2478505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:19.035447 2026] [ssl:error] [pid 2475744:tid 2475744] (EAI 2)Name or service not known: [client 144.76.19.72:26790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:19.035487 2026] [ssl:error] [pid 2475744:tid 2475744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:19.877331 2026] [security2:error] [pid 2475743:tid 2475743] [client 43.157.153.236:59654] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.juliaashmore.org"] [uri "/"] [unique_id "amsEV8Aa1OXv3JymzcxFSQAAADg"]
[Thu Jul 30 08:59:20.359782 2026] [authz_core:error] [pid 2463058:tid 2463058] [client 192.36.109.98:43357] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 08:59:20.362435 2026] [authz_core:error] [pid 2463058:tid 2463058] [client 192.36.109.98:43357] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 08:59:21.128506 2026] [access_compat:error] [pid 2480096:tid 2480096] [client 45.158.164.139:58558] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 08:59:22.092937 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:40742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:22.092963 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:22.145633 2026] [ssl:error] [pid 2485604:tid 2485604] (EAI 2)Name or service not known: [client 144.76.19.72:40756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:22.145656 2026] [ssl:error] [pid 2485604:tid 2485604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:22.761663 2026] [core:error] [pid 2484645:tid 2484645] (13)Permission denied: [client 216.73.216.199:39889] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_tasks/object_size
[Thu Jul 30 08:59:22.805587 2026] [authz_core:error] [pid 2482459:tid 2482459] [client 57.141.0.25:24260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:59:22.807969 2026] [authz_core:error] [pid 2482459:tid 2482459] [client 57.141.0.25:24260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:59:24.373551 2026] [security2:error] [pid 2485604:tid 2485604] [client 94.154.43.187:48744] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "beechhouseselfcatering.co.uk"] [uri "/.env"] [unique_id "amsEXFJ45Qh35954Wj_NJQAAAAw"]
[Thu Jul 30 08:59:24.373719 2026] [security2:error] [pid 2485604:tid 2485604] [client 94.154.43.187:48744] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "beechhouseselfcatering.co.uk"] [uri "/.env"] [unique_id "amsEXFJ45Qh35954Wj_NJQAAAAw"]
[Thu Jul 30 08:59:24.931414 2026] [security2:error] [pid 2485604:tid 2485604] [client 94.154.43.187:48744] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "beechhouseselfcatering.co.uk"] [uri "/index.php"] [unique_id "amsEXFJ45Qh35954Wj_NJQAAAAw"]
[Thu Jul 30 08:59:25.198840 2026] [ssl:error] [pid 2484458:tid 2484458] (EAI 2)Name or service not known: [client 144.76.19.72:40764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:25.198871 2026] [ssl:error] [pid 2484458:tid 2484458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:25.252531 2026] [ssl:error] [pid 2485199:tid 2485199] (EAI 2)Name or service not known: [client 144.76.19.72:40774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:25.252578 2026] [ssl:error] [pid 2485199:tid 2485199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:26.377807 2026] [ssl:error] [pid 2484645:tid 2484645] (70014)End of file found: [client 216.73.216.199:39889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:28.188437 2026] [core:error] [pid 2475742:tid 2475742] (13)Permission denied: [client 216.73.216.199:59713] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/partial
[Thu Jul 30 08:59:28.314435 2026] [ssl:error] [pid 2485199:tid 2485199] (EAI 2)Name or service not known: [client 144.76.19.72:40780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:28.314464 2026] [ssl:error] [pid 2485199:tid 2485199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:28.369817 2026] [ssl:error] [pid 2482020:tid 2482020] (EAI 2)Name or service not known: [client 144.76.19.72:40782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:28.369865 2026] [ssl:error] [pid 2482020:tid 2482020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:28.791847 2026] [ssl:error] [pid 2475742:tid 2475742] (70014)End of file found: [client 216.73.216.199:59713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:29.695597 2026] [ssl:error] [pid 2485604:tid 2485604] (70014)End of file found: [client 216.73.216.199:54260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:31.062732 2026] [security2:error] [pid 2466162:tid 2466162] [client 43.134.15.174:42882] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ilkagriese.com"] [uri "/"] [unique_id "amsEY2Lwyc4TN4cRbV8mIgAAAAk"]
[Thu Jul 30 08:59:31.152720 2026] [security2:error] [pid 2459739:tid 2459739] [client 162.14.114.97:39728] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsEY7wOFr1fizM6nscipAAAABk"], referer: http://banskoexpresstransfers.com
[Thu Jul 30 08:59:31.429548 2026] [ssl:error] [pid 2484694:tid 2484694] (EAI 2)Name or service not known: [client 144.76.19.72:28968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:31.429592 2026] [ssl:error] [pid 2484694:tid 2484694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:31.487688 2026] [ssl:error] [pid 2485199:tid 2485199] (EAI 2)Name or service not known: [client 144.76.19.72:28976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:31.487713 2026] [ssl:error] [pid 2485199:tid 2485199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:31.685357 2026] [ssl:error] [pid 2481300:tid 2481300] (70014)End of file found: [client 216.73.216.199:48947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:33.453706 2026] [lsapi:warn] [pid 2485021:tid 2485021] [client 218.71.176.26:60436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:59:33.453754 2026] [lsapi:warn] [pid 2485021:tid 2485021] [client 218.71.176.26:60436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:59:34.541720 2026] [ssl:error] [pid 2475742:tid 2475742] (EAI 2)Name or service not known: [client 144.76.19.72:28988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:34.541750 2026] [ssl:error] [pid 2475742:tid 2475742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:34.594011 2026] [ssl:error] [pid 2484645:tid 2484645] (EAI 2)Name or service not known: [client 144.76.19.72:28990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:34.594088 2026] [ssl:error] [pid 2484645:tid 2484645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:36.519407 2026] [core:error] [pid 2462920:tid 2462920] [client 66.249.64.171:59090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:36.519431 2026] [core:error] [pid 2462920:tid 2462920] [client 66.249.64.171:59090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:36.924507 2026] [security2:error] [pid 2485604:tid 2485604] [client 162.14.114.97:40120] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsEaFJ45Qh35954Wj_NLAAAAAw"], referer: http://www.banskoexpress.com
[Thu Jul 30 08:59:36.955157 2026] [lsapi:warn] [pid 2459739:tid 2459739] [client 218.71.176.26:60483] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:59:36.955208 2026] [lsapi:warn] [pid 2459739:tid 2459739] [client 218.71.176.26:60483] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:59:37.646802 2026] [ssl:error] [pid 2482074:tid 2482074] (EAI 2)Name or service not known: [client 144.76.19.72:29004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:37.646847 2026] [ssl:error] [pid 2482074:tid 2482074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:37.698292 2026] [ssl:error] [pid 2484504:tid 2484504] (EAI 2)Name or service not known: [client 144.76.19.72:29012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:37.698316 2026] [ssl:error] [pid 2484504:tid 2484504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:38.092161 2026] [authz_core:error] [pid 2485253:tid 2485253] [client 57.141.0.37:53430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 08:59:38.092784 2026] [authz_core:error] [pid 2485253:tid 2485253] [client 57.141.0.37:53430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 08:59:40.771815 2026] [ssl:error] [pid 2484692:tid 2484692] (70014)End of file found: [client 216.73.216.199:4513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:40.844290 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:61010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:40.844321 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:40.959372 2026] [ssl:error] [pid 2484644:tid 2484644] (EAI 2)Name or service not known: [client 144.76.19.72:61020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:40.959394 2026] [ssl:error] [pid 2484644:tid 2484644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:41.398207 2026] [authz_core:error] [pid 2484644:tid 2484644] [client 66.249.66.35:39161] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 08:59:41.400941 2026] [authz_core:error] [pid 2484644:tid 2484644] [client 66.249.66.35:39161] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 08:59:43.053139 2026] [lsapi:warn] [pid 2481300:tid 2481300] [client 218.71.176.26:60598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:59:43.053186 2026] [lsapi:warn] [pid 2481300:tid 2481300] [client 218.71.176.26:60598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:59:43.137964 2026] [security2:error] [pid 2475742:tid 2475742] [client 176.31.139.29:36968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsEb8ds1mrM10BzMSwNsgAAADc"]
[Thu Jul 30 08:59:44.013138 2026] [ssl:error] [pid 2486738:tid 2486738] (EAI 2)Name or service not known: [client 144.76.19.72:61026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:44.013173 2026] [ssl:error] [pid 2486738:tid 2486738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:44.068206 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:61030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:44.068250 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:45.162214 2026] [security2:error] [pid 2484304:tid 2484304] [client 54.39.210.63:48042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/category/uncategorized/page/5/"] [unique_id "amsEcVWPBURw412ytvnLagAAAAE"]
[Thu Jul 30 08:59:47.122197 2026] [ssl:error] [pid 2480576:tid 2480576] (EAI 2)Name or service not known: [client 144.76.19.72:61032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:47.122228 2026] [ssl:error] [pid 2480576:tid 2480576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:47.176373 2026] [ssl:error] [pid 2481300:tid 2481300] (EAI 2)Name or service not known: [client 144.76.19.72:61042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:47.176406 2026] [ssl:error] [pid 2481300:tid 2481300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:48.375897 2026] [lsapi:warn] [pid 2485086:tid 2485086] [client 218.71.176.26:60679] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:59:48.375956 2026] [lsapi:warn] [pid 2485086:tid 2485086] [client 218.71.176.26:60679] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:59:49.857396 2026] [ssl:error] [pid 2484505:tid 2484505] (70014)End of file found: [client 216.73.216.199:13665] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:50.167144 2026] [ssl:error] [pid 2484693:tid 2484693] (70014)End of file found: [client 216.73.216.199:6986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:50.232883 2026] [ssl:error] [pid 2485088:tid 2485088] (EAI 2)Name or service not known: [client 144.76.19.72:43722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:50.232936 2026] [ssl:error] [pid 2485088:tid 2485088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:50.289385 2026] [ssl:error] [pid 2478384:tid 2478384] (EAI 2)Name or service not known: [client 144.76.19.72:43736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:50.289417 2026] [ssl:error] [pid 2478384:tid 2478384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:50.828780 2026] [lsapi:warn] [pid 2485086:tid 2485086] [client 218.71.176.26:60729] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:59:50.828833 2026] [lsapi:warn] [pid 2485086:tid 2485086] [client 218.71.176.26:60729] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:59:52.125838 2026] [access_compat:error] [pid 2485086:tid 2485086] [client 141.98.11.224:58036] AH01797: client denied by server configuration: /home/nspandor/public_html/, referer: http://ns-pandora.com/
[Thu Jul 30 08:59:52.206675 2026] [access_compat:error] [pid 2486602:tid 2486602] [client 141.98.11.224:64061] AH01797: client denied by server configuration: /home/nspandor/public_html/, referer: http://ns-pandora.com/
[Thu Jul 30 08:59:52.278902 2026] [access_compat:error] [pid 2478384:tid 2478384] [client 141.98.11.224:61741] AH01797: client denied by server configuration: /home/nspandor/public_html/, referer: http://ns-pandora.com/
[Thu Jul 30 08:59:52.357091 2026] [access_compat:error] [pid 2484692:tid 2484692] [client 141.98.11.224:52766] AH01797: client denied by server configuration: /home/nspandor/public_html/, referer: http://ns-pandora.com/
[Thu Jul 30 08:59:52.358948 2026] [security2:error] [pid 2481127:tid 2481127] [client 114.119.132.171:24635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582761600/request_format~html"] [unique_id "amsEeKbD8aEVCrEU-uGmYgAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E26-2-2020
[Thu Jul 30 08:59:53.345462 2026] [ssl:error] [pid 2478500:tid 2478500] (EAI 2)Name or service not known: [client 144.76.19.72:43738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:53.345496 2026] [ssl:error] [pid 2478500:tid 2478500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:53.396912 2026] [ssl:error] [pid 2482462:tid 2482462] (EAI 2)Name or service not known: [client 144.76.19.72:43742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:53.396950 2026] [ssl:error] [pid 2482462:tid 2482462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:53.853281 2026] [security2:error] [pid 2485661:tid 2485661] [client 114.119.132.171:24639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582761600/request_format~html"] [unique_id "amsEeUUyhR3QbVi6ca6VTAAAACc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E26-2-2020
[Thu Jul 30 08:59:55.837691 2026] [ssl:error] [pid 2482074:tid 2482074] (70014)End of file found: [client 216.73.216.199:6489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:56.452629 2026] [ssl:error] [pid 2481300:tid 2481300] (EAI 2)Name or service not known: [client 144.76.19.72:43756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:56.452676 2026] [ssl:error] [pid 2481300:tid 2481300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:56.506197 2026] [ssl:error] [pid 2484645:tid 2484645] (EAI 2)Name or service not known: [client 144.76.19.72:43772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:56.506232 2026] [ssl:error] [pid 2484645:tid 2484645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:56.739960 2026] [ssl:error] [pid 2485088:tid 2485088] (70014)End of file found: [client 216.73.216.199:53650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:57.262743 2026] [core:error] [pid 2482425:tid 2482425] [client 66.249.64.170:50743] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:57.262771 2026] [core:error] [pid 2482425:tid 2482425] [client 66.249.64.170:50743] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 08:59:57.317721 2026] [lsapi:warn] [pid 2485760:tid 2485760] [client 218.71.176.26:60864] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 08:59:57.317762 2026] [lsapi:warn] [pid 2485760:tid 2485760] [client 218.71.176.26:60864] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 08:59:59.150283 2026] [ssl:error] [pid 2481297:tid 2481297] (70014)End of file found: [client 216.73.216.199:18757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 08:59:59.559589 2026] [ssl:error] [pid 2486667:tid 2486667] (EAI 2)Name or service not known: [client 144.76.19.72:31640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:59.559627 2026] [ssl:error] [pid 2486667:tid 2486667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 08:59:59.611902 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:31642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 08:59:59.611934 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:01.092133 2026] [security2:error] [pid 2484691:tid 2484691] [client 47.128.54.184:60206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/robots.txt"] [unique_id "amsEgW2lLgg8L6CfmbOvxwAAABc"]
[Thu Jul 30 09:00:01.252531 2026] [security2:error] [pid 2481300:tid 2481300] [client 77.90.185.129:54738] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tyredandmotional.co.uk"] [uri "/sftp-config.json"] [unique_id "amsEgRta9XdTcSVK-kMZxAAAAB0"]
[Thu Jul 30 09:00:01.252731 2026] [security2:error] [pid 2481300:tid 2481300] [client 77.90.185.129:54738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tyredandmotional.co.uk"] [uri "/sftp-config.json"] [unique_id "amsEgRta9XdTcSVK-kMZxAAAAB0"]
[Thu Jul 30 09:00:01.527356 2026] [security2:error] [pid 2481300:tid 2481300] [client 77.90.185.129:54738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "tyredandmotional.co.uk"] [uri "/index.php"] [unique_id "amsEgRta9XdTcSVK-kMZxAAAAB0"]
[Thu Jul 30 09:00:02.165815 2026] [lsapi:warn] [pid 2485760:tid 2485760] [client 218.71.176.26:60942] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:02.165856 2026] [lsapi:warn] [pid 2485760:tid 2485760] [client 218.71.176.26:60942] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:02.493750 2026] [security2:error] [pid 2482462:tid 2482462] [client 77.90.185.129:52595] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.tyredandmotional.co.uk"] [uri "/sftp-config.json"] [unique_id "amsEgp67YXq2L9qouTiJHQAAADQ"]
[Thu Jul 30 09:00:02.494008 2026] [security2:error] [pid 2482462:tid 2482462] [client 77.90.185.129:52595] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tyredandmotional.co.uk"] [uri "/sftp-config.json"] [unique_id "amsEgp67YXq2L9qouTiJHQAAADQ"]
[Thu Jul 30 09:00:02.664193 2026] [ssl:error] [pid 2485760:tid 2485760] (EAI 2)Name or service not known: [client 144.76.19.72:31656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:02.664235 2026] [ssl:error] [pid 2485760:tid 2485760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:02.719369 2026] [ssl:error] [pid 2485661:tid 2485661] (EAI 2)Name or service not known: [client 144.76.19.72:31664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:02.719421 2026] [ssl:error] [pid 2485661:tid 2485661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:02.802036 2026] [security2:error] [pid 2482462:tid 2482462] [client 77.90.185.129:52595] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.tyredandmotional.co.uk"] [uri "/index.php"] [unique_id "amsEgp67YXq2L9qouTiJHQAAADQ"]
[Thu Jul 30 09:00:05.775009 2026] [ssl:error] [pid 2487658:tid 2487658] (EAI 2)Name or service not known: [client 144.76.19.72:31674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:05.775049 2026] [ssl:error] [pid 2487658:tid 2487658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:05.832682 2026] [ssl:error] [pid 2487702:tid 2487702] (EAI 2)Name or service not known: [client 144.76.19.72:31690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:05.832718 2026] [ssl:error] [pid 2487702:tid 2487702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:07.075443 2026] [authz_core:error] [pid 2478500:tid 2478500] [client 66.249.66.35:39519] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:00:07.078105 2026] [authz_core:error] [pid 2478500:tid 2478500] [client 66.249.66.35:39519] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:00:07.159134 2026] [lsapi:warn] [pid 2484645:tid 2484645] [client 218.71.176.26:61021] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:07.159190 2026] [lsapi:warn] [pid 2484645:tid 2484645] [client 218.71.176.26:61021] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:07.614220 2026] [ssl:error] [pid 2484505:tid 2484505] (70014)End of file found: [client 216.73.216.199:42282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:08.910956 2026] [ssl:error] [pid 2484691:tid 2484691] (EAI 2)Name or service not known: [client 144.76.19.72:31696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:08.911011 2026] [ssl:error] [pid 2484691:tid 2484691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:08.973380 2026] [ssl:error] [pid 2484458:tid 2484458] (EAI 2)Name or service not known: [client 144.76.19.72:31706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:08.973413 2026] [ssl:error] [pid 2484458:tid 2484458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:10.610133 2026] [lsapi:warn] [pid 2485661:tid 2485661] [client 218.71.176.26:61072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:10.610183 2026] [lsapi:warn] [pid 2485661:tid 2485661] [client 218.71.176.26:61072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:11.005466 2026] [security2:error] [pid 2484691:tid 2484691] [client 20.171.55.167:10105] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.codeworks.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsEi22lLgg8L6CfmbOvzAAAABc"]
[Thu Jul 30 09:00:11.005712 2026] [security2:error] [pid 2484691:tid 2484691] [client 20.171.55.167:10105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.codeworks.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsEi22lLgg8L6CfmbOvzAAAABc"]
[Thu Jul 30 09:00:11.031375 2026] [security2:error] [pid 2484691:tid 2484691] [client 20.171.55.167:10105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.codeworks.co.uk"] [uri "/403.shtml"] [unique_id "amsEi22lLgg8L6CfmbOvzAAAABc"]
[Thu Jul 30 09:00:12.101907 2026] [ssl:error] [pid 2485086:tid 2485086] (EAI 2)Name or service not known: [client 144.76.19.72:42448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:12.101954 2026] [ssl:error] [pid 2485086:tid 2485086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:12.167143 2026] [ssl:error] [pid 2484691:tid 2484691] (EAI 2)Name or service not known: [client 144.76.19.72:42460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:12.167191 2026] [ssl:error] [pid 2484691:tid 2484691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:13.018428 2026] [ssl:error] [pid 2484645:tid 2484645] (70014)End of file found: [client 216.73.216.199:49848] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:14.307272 2026] [security2:error] [pid 2482462:tid 2482462] [client 85.208.96.195:32764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/angela-green-missing-dr-phil"] [unique_id "amsEjp67YXq2L9qouTiJIAAAADQ"]
[Thu Jul 30 09:00:15.223359 2026] [ssl:error] [pid 2482074:tid 2482074] (EAI 2)Name or service not known: [client 144.76.19.72:42478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:15.223389 2026] [ssl:error] [pid 2482074:tid 2482074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:15.282053 2026] [ssl:error] [pid 2488167:tid 2488167] (EAI 2)Name or service not known: [client 144.76.19.72:42488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:15.282106 2026] [ssl:error] [pid 2488167:tid 2488167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:16.259771 2026] [lsapi:warn] [pid 2488228:tid 2488228] [client 218.71.176.26:61153] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:16.259832 2026] [lsapi:warn] [pid 2488228:tid 2488228] [client 218.71.176.26:61153] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:17.586939 2026] [core:error] [pid 2475531:tid 2475531] [client 66.249.64.172:43474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:00:17.586973 2026] [core:error] [pid 2475531:tid 2475531] [client 66.249.64.172:43474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:00:18.336757 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:42504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:18.336794 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:18.348812 2026] [authz_core:error] [pid 2482459:tid 2482459] [client 20.63.98.115:20025] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:00:18.391140 2026] [ssl:error] [pid 2475743:tid 2475743] (EAI 2)Name or service not known: [client 144.76.19.72:42514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:18.391163 2026] [ssl:error] [pid 2475743:tid 2475743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:20.623945 2026] [lsapi:warn] [pid 2466162:tid 2466162] [client 218.71.176.26:61217] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:20.624010 2026] [lsapi:warn] [pid 2466162:tid 2466162] [client 218.71.176.26:61217] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:20.879908 2026] [core:error] [pid 2485662:tid 2485662] (13)Permission denied: [client 216.73.216.199:49037] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/validate
[Thu Jul 30 09:00:21.447441 2026] [ssl:error] [pid 2488168:tid 2488168] (EAI 2)Name or service not known: [client 144.76.19.72:38004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:21.447469 2026] [ssl:error] [pid 2488168:tid 2488168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:21.500876 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:38014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:21.500915 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:22.214797 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:49037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:23.063628 2026] [lsapi:warn] [pid 2466162:tid 2466162] [client 218.71.176.26:61273] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:23.063683 2026] [lsapi:warn] [pid 2466162:tid 2466162] [client 218.71.176.26:61273] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:23.125638 2026] [core:error] [pid 2486326:tid 2486326] (13)Permission denied: [client 216.73.216.199:28776] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/hwcache_align
[Thu Jul 30 09:00:23.729372 2026] [ssl:error] [pid 2486326:tid 2486326] (70014)End of file found: [client 216.73.216.199:28776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:24.554685 2026] [ssl:error] [pid 2484645:tid 2484645] (EAI 2)Name or service not known: [client 144.76.19.72:38020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:24.554732 2026] [ssl:error] [pid 2484645:tid 2484645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:24.607781 2026] [ssl:error] [pid 2486667:tid 2486667] (EAI 2)Name or service not known: [client 144.76.19.72:38030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:24.607826 2026] [ssl:error] [pid 2486667:tid 2486667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:25.522055 2026] [lsapi:warn] [pid 2485661:tid 2485661] [client 218.71.176.26:61349] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:25.522114 2026] [lsapi:warn] [pid 2485661:tid 2485661] [client 218.71.176.26:61349] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:26.508205 2026] [authz_core:error] [pid 2485661:tid 2485661] [client 57.141.0.11:28330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:00:26.508829 2026] [authz_core:error] [pid 2485661:tid 2485661] [client 57.141.0.11:28330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:00:26.849959 2026] [cgi:error] [pid 2475743:tid 2475743] [client 20.9.4.9:62291] AH02811: stderr from /home/aurorav/public_html/auroravation.com/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:00:27.649062 2026] [ssl:error] [pid 2478384:tid 2478384] (70014)End of file found: [client 216.73.216.199:32421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:27.663870 2026] [ssl:error] [pid 2484692:tid 2484692] (EAI 2)Name or service not known: [client 144.76.19.72:38034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:27.663894 2026] [ssl:error] [pid 2484692:tid 2484692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:27.717546 2026] [ssl:error] [pid 2485021:tid 2485021] (EAI 2)Name or service not known: [client 144.76.19.72:38044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:27.717596 2026] [ssl:error] [pid 2485021:tid 2485021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:28.141658 2026] [core:error] [pid 2484693:tid 2484693] (13)Permission denied: [client 216.73.216.199:59234] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/parallel-coordinates.com.db
[Thu Jul 30 09:00:28.251418 2026] [core:error] [pid 2484693:tid 2484693] (13)Permission denied: [client 216.73.216.199:59234] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/align
[Thu Jul 30 09:00:29.343503 2026] [lsapi:warn] [pid 2488167:tid 2488167] [client 218.71.176.26:61449] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:29.343561 2026] [lsapi:warn] [pid 2488167:tid 2488167] [client 218.71.176.26:61449] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:30.774761 2026] [ssl:error] [pid 2484644:tid 2484644] (EAI 2)Name or service not known: [client 144.76.19.72:29332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:30.774798 2026] [ssl:error] [pid 2484644:tid 2484644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:30.832225 2026] [ssl:error] [pid 2488229:tid 2488229] (EAI 2)Name or service not known: [client 144.76.19.72:29346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:30.832255 2026] [ssl:error] [pid 2488229:tid 2488229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:31.575461 2026] [core:error] [pid 2484693:tid 2484693] (13)Permission denied: [client 216.73.216.199:59234] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libcrc32c/sections/__ksymtab
[Thu Jul 30 09:00:31.622032 2026] [lsapi:warn] [pid 2484645:tid 2484645] [client 218.71.176.26:61509] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:31.622077 2026] [lsapi:warn] [pid 2484645:tid 2484645] [client 218.71.176.26:61509] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:33.686296 2026] [ssl:error] [pid 2484693:tid 2484693] (70014)End of file found: [client 216.73.216.199:59234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:33.820489 2026] [lsapi:warn] [pid 2478384:tid 2478384] [client 218.71.176.26:61543] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:33.820535 2026] [lsapi:warn] [pid 2478384:tid 2478384] [client 218.71.176.26:61543] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:33.886813 2026] [ssl:error] [pid 2486664:tid 2486664] (EAI 2)Name or service not known: [client 144.76.19.72:29354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:33.886849 2026] [ssl:error] [pid 2486664:tid 2486664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:33.941612 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:29370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:33.941639 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:34.169486 2026] [ssl:error] [pid 2486667:tid 2486667] (70014)End of file found: [client 216.73.216.199:31531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:34.591507 2026] [core:error] [pid 2484645:tid 2484645] (13)Permission denied: [client 216.73.216.199:34466] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/userdatadomains.json
[Thu Jul 30 09:00:34.893127 2026] [core:error] [pid 2484645:tid 2484645] (13)Permission denied: [client 216.73.216.199:34466] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/digestshadow
[Thu Jul 30 09:00:35.441159 2026] [authz_core:error] [pid 2484692:tid 2484692] [client 57.141.0.71:47514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:00:35.441776 2026] [authz_core:error] [pid 2484692:tid 2484692] [client 57.141.0.71:47514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:00:36.453666 2026] [lsapi:warn] [pid 2486666:tid 2486666] [client 218.71.176.26:61596] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:00:36.453703 2026] [lsapi:warn] [pid 2486666:tid 2486666] [client 218.71.176.26:61596] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:00:36.999683 2026] [ssl:error] [pid 2488228:tid 2488228] (EAI 2)Name or service not known: [client 144.76.19.72:29380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:36.999718 2026] [ssl:error] [pid 2488228:tid 2488228] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:37.053552 2026] [ssl:error] [pid 2486665:tid 2486665] (EAI 2)Name or service not known: [client 144.76.19.72:29396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:37.053611 2026] [ssl:error] [pid 2486665:tid 2486665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:37.303468 2026] [core:error] [pid 2484645:tid 2484645] (13)Permission denied: [client 216.73.216.199:34466] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/alloc_calls
[Thu Jul 30 09:00:38.206093 2026] [core:error] [pid 2484645:tid 2484645] (13)Permission denied: [client 216.73.216.199:34466] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/trusted_mail_users
[Thu Jul 30 09:00:38.812468 2026] [core:error] [pid 2484645:tid 2484645] (13)Permission denied: [client 216.73.216.199:34466] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/validate
[Thu Jul 30 09:00:40.108300 2026] [ssl:error] [pid 2486667:tid 2486667] (EAI 2)Name or service not known: [client 144.76.19.72:64640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:40.108327 2026] [ssl:error] [pid 2486667:tid 2486667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:40.164474 2026] [ssl:error] [pid 2485086:tid 2485086] (EAI 2)Name or service not known: [client 144.76.19.72:64654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:40.164502 2026] [ssl:error] [pid 2485086:tid 2485086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:40.320059 2026] [ssl:error] [pid 2484645:tid 2484645] (70014)End of file found: [client 216.73.216.199:34466] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:42.111198 2026] [security2:error] [pid 2488228:tid 2488228] [client 85.208.96.196:22996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/central-virginia-community-college-1098-t"] [unique_id "amsEqqe6ffhY-D9y79-WMgAAAC8"]
[Thu Jul 30 09:00:42.131767 2026] [ssl:error] [pid 2485086:tid 2485086] (70014)End of file found: [client 216.73.216.199:11596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:43.236254 2026] [ssl:error] [pid 2481127:tid 2481127] (EAI 2)Name or service not known: [client 144.76.19.72:64666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:43.236314 2026] [ssl:error] [pid 2481127:tid 2481127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:43.287777 2026] [ssl:error] [pid 2487702:tid 2487702] (EAI 2)Name or service not known: [client 144.76.19.72:64680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:43.287806 2026] [ssl:error] [pid 2487702:tid 2487702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:43.632221 2026] [ssl:error] [pid 2475743:tid 2475743] (70014)End of file found: [client 216.73.216.199:64785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:45.747208 2026] [ssl:error] [pid 2487702:tid 2487702] (70014)End of file found: [client 216.73.216.199:62837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:46.342729 2026] [ssl:error] [pid 2484692:tid 2484692] (EAI 2)Name or service not known: [client 144.76.19.72:64686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:46.342766 2026] [ssl:error] [pid 2484692:tid 2484692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:46.396233 2026] [ssl:error] [pid 2481300:tid 2481300] (EAI 2)Name or service not known: [client 144.76.19.72:64702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:46.396264 2026] [ssl:error] [pid 2481300:tid 2481300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:49.449482 2026] [ssl:error] [pid 2486326:tid 2486326] (EAI 2)Name or service not known: [client 144.76.19.72:64708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:49.449539 2026] [ssl:error] [pid 2486326:tid 2486326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:49.506324 2026] [ssl:error] [pid 2486326:tid 2486326] (EAI 2)Name or service not known: [client 144.76.19.72:64724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:49.506363 2026] [ssl:error] [pid 2486326:tid 2486326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:49.963786 2026] [ssl:error] [pid 2485661:tid 2485661] (70014)End of file found: [client 216.73.216.199:39451] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:51.360508 2026] [authz_core:error] [pid 2484645:tid 2484645] [client 57.141.0.25:51702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:00:51.361181 2026] [authz_core:error] [pid 2484645:tid 2484645] [client 57.141.0.25:51702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:00:51.382393 2026] [core:error] [pid 2488121:tid 2488121] (13)Permission denied: [client 216.73.216.199:58538] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/slabs_cpu_partial
[Thu Jul 30 09:00:52.562462 2026] [ssl:error] [pid 2487702:tid 2487702] (EAI 2)Name or service not known: [client 144.76.19.72:24956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:52.562488 2026] [ssl:error] [pid 2487702:tid 2487702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:52.618754 2026] [ssl:error] [pid 2488229:tid 2488229] (EAI 2)Name or service not known: [client 144.76.19.72:24966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:52.618794 2026] [ssl:error] [pid 2488229:tid 2488229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:53.141694 2026] [ssl:error] [pid 2488121:tid 2488121] (70014)End of file found: [client 216.73.216.199:58538] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:55.252697 2026] [lsapi:warn] [pid 2485086:tid 2485086] [client 216.73.216.199:22968] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 09:00:55.252733 2026] [lsapi:error] [pid 2485086:tid 2485086] [client 216.73.216.199:22968] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-services-weather/examples/weather.com-extensive.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 09:00:55.719524 2026] [ssl:error] [pid 2482459:tid 2482459] (EAI 2)Name or service not known: [client 144.76.19.72:24982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:55.719555 2026] [ssl:error] [pid 2482459:tid 2482459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:55.776127 2026] [ssl:error] [pid 2475486:tid 2475486] (EAI 2)Name or service not known: [client 144.76.19.72:24988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:55.776180 2026] [ssl:error] [pid 2475486:tid 2475486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:56.838082 2026] [security2:error] [pid 2466162:tid 2466162] [client 20.203.156.12:41892] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "astleydogpark.com"] [uri "/wp-config.php"] [unique_id "amsEuGLwyc4TN4cRbV8msAAAAAk"]
[Thu Jul 30 09:00:56.838215 2026] [security2:error] [pid 2466162:tid 2466162] [client 20.203.156.12:41892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "astleydogpark.com"] [uri "/wp-config.php"] [unique_id "amsEuGLwyc4TN4cRbV8msAAAAAk"]
[Thu Jul 30 09:00:56.838701 2026] [security2:error] [pid 2466162:tid 2466162] [client 20.203.156.12:41892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "astleydogpark.com"] [uri "/403.shtml"] [unique_id "amsEuGLwyc4TN4cRbV8msAAAAAk"]
[Thu Jul 30 09:00:57.263617 2026] [security2:error] [pid 2489740:tid 2489740] [client 85.208.98.23:39872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsEuRupGCKH1b1E0NausgAAABE"]
[Thu Jul 30 09:00:57.319511 2026] [core:error] [pid 2489972:tid 2489972] [client 66.249.64.170:40461] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:00:57.319548 2026] [core:error] [pid 2489972:tid 2489972] [client 66.249.64.170:40461] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:00:57.357125 2026] [ssl:error] [pid 2475486:tid 2475486] (70014)End of file found: [client 216.73.216.199:28823] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:57.499646 2026] [security2:error] [pid 2489973:tid 2489973] [client 51.222.153.9:48852] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amsEuRXbren0YQZ4xmi2OgAAADU"]
[Thu Jul 30 09:00:58.576644 2026] [ssl:error] [pid 2478505:tid 2478505] (70014)End of file found: [client 216.73.216.199:59464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:00:59.610226 2026] [ssl:error] [pid 2488167:tid 2488167] (EAI 2)Name or service not known: [client 144.76.19.72:33316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:59.610252 2026] [ssl:error] [pid 2488167:tid 2488167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:00:59.981765 2026] [ssl:error] [pid 2489740:tid 2489740] (EAI 2)Name or service not known: [client 144.76.19.72:33318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:00:59.981801 2026] [ssl:error] [pid 2489740:tid 2489740] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:00.083621 2026] [ssl:error] [pid 2475743:tid 2475743] (70014)End of file found: [client 216.73.216.199:30214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:01.619228 2026] [security2:error] [pid 2485253:tid 2485253] [client 185.191.171.6:64146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/spiritual-awakening-twin-flame-separation"] [unique_id "amsEve4-ldTiymwW7W1KdgAAACY"]
[Thu Jul 30 09:01:01.839967 2026] [security2:error] [pid 2488167:tid 2488167] [client 20.203.156.12:40607] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "astleydogpark.com"] [uri "/var/log/error.log"] [unique_id "amsEvZGjcbM-pSJslLhUUAAAAAo"]
[Thu Jul 30 09:01:01.840175 2026] [security2:error] [pid 2488167:tid 2488167] [client 20.203.156.12:40607] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "astleydogpark.com"] [uri "/var/log/error.log"] [unique_id "amsEvZGjcbM-pSJslLhUUAAAAAo"]
[Thu Jul 30 09:01:01.840682 2026] [security2:error] [pid 2488167:tid 2488167] [client 20.203.156.12:40607] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "astleydogpark.com"] [uri "/403.shtml"] [unique_id "amsEvZGjcbM-pSJslLhUUAAAAAo"]
[Thu Jul 30 09:01:01.841083 2026] [authz_core:error] [pid 2478500:tid 2478500] [client 57.141.0.56:24596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:01.841699 2026] [authz_core:error] [pid 2478500:tid 2478500] [client 57.141.0.56:24596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:03.040458 2026] [ssl:error] [pid 2489742:tid 2489742] (EAI 2)Name or service not known: [client 144.76.19.72:33332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:03.040502 2026] [ssl:error] [pid 2489742:tid 2489742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:03.095292 2026] [ssl:error] [pid 2488228:tid 2488228] (EAI 2)Name or service not known: [client 144.76.19.72:33348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:03.095315 2026] [ssl:error] [pid 2488228:tid 2488228] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:03.885661 2026] [authz_core:error] [pid 2484504:tid 2484504] [client 57.141.0.24:47510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:03.886277 2026] [authz_core:error] [pid 2484504:tid 2484504] [client 57.141.0.24:47510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:05.200538 2026] [ssl:error] [pid 2486666:tid 2486666] (70014)End of file found: [client 216.73.216.199:25929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:05.221782 2026] [security2:error] [pid 2488121:tid 2488121] [client 43.135.140.225:44540] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.eu"] [uri "/"] [unique_id "amsEwW7DisOv9VdOeHUIyQAAAAg"]
[Thu Jul 30 09:01:05.502080 2026] [core:error] [pid 2485253:tid 2485253] (13)Permission denied: [client 216.73.216.199:23622] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/slabs_cpu_partial
[Thu Jul 30 09:01:06.122515 2026] [core:error] [pid 2489972:tid 2489972] [client 57.141.0.62:61846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:01:06.122538 2026] [core:error] [pid 2489972:tid 2489972] [client 57.141.0.62:61846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:01:06.149526 2026] [ssl:error] [pid 2489662:tid 2489662] (EAI 2)Name or service not known: [client 144.76.19.72:33360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:06.149555 2026] [ssl:error] [pid 2489662:tid 2489662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:06.201929 2026] [ssl:error] [pid 2474825:tid 2474825] (EAI 2)Name or service not known: [client 144.76.19.72:33376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:06.201955 2026] [ssl:error] [pid 2474825:tid 2474825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:06.705910 2026] [ssl:error] [pid 2485253:tid 2485253] (70014)End of file found: [client 216.73.216.199:23622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:06.834101 2026] [security2:error] [pid 2489740:tid 2489740] [client 43.135.140.225:52774] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsEwhupGCKH1b1E0NauugAAABE"], referer: http://www.orgent.eu
[Thu Jul 30 09:01:07.307951 2026] [ssl:error] [pid 2489695:tid 2489695] (70014)End of file found: [client 216.73.216.199:51972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:08.225772 2026] [authz_core:error] [pid 2489970:tid 2489970] [client 57.141.0.55:32244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:08.226451 2026] [authz_core:error] [pid 2489970:tid 2489970] [client 57.141.0.55:32244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:09.304307 2026] [ssl:error] [pid 2487702:tid 2487702] (EAI 2)Name or service not known: [client 144.76.19.72:33386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:09.304336 2026] [ssl:error] [pid 2487702:tid 2487702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:09.360656 2026] [ssl:error] [pid 2485604:tid 2485604] (EAI 2)Name or service not known: [client 144.76.19.72:33402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:09.360683 2026] [ssl:error] [pid 2485604:tid 2485604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:11.221416 2026] [ssl:error] [pid 2489970:tid 2489970] (70014)End of file found: [client 216.73.216.199:13247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:11.599312 2026] [authz_core:error] [pid 2485088:tid 2485088] [client 57.141.0.51:63380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:11.599997 2026] [authz_core:error] [pid 2485088:tid 2485088] [client 57.141.0.51:63380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:12.433476 2026] [ssl:error] [pid 2490876:tid 2490876] (EAI 2)Name or service not known: [client 144.76.19.72:20006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:12.433544 2026] [ssl:error] [pid 2490876:tid 2490876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:12.490266 2026] [ssl:error] [pid 2485088:tid 2485088] (EAI 2)Name or service not known: [client 144.76.19.72:20020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:12.490302 2026] [ssl:error] [pid 2485088:tid 2485088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:13.426491 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amsEyVXTn-h6n8-Z1ElXNAAAAAs"]
[Thu Jul 30 09:01:13.426740 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amsEyVXTn-h6n8-Z1ElXNAAAAAs"]
[Thu Jul 30 09:01:13.427027 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amsEyVXTn-h6n8-Z1ElXNAAAAAs"]
[Thu Jul 30 09:01:13.510439 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/dump.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXNwAAAAs"]
[Thu Jul 30 09:01:13.510647 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/dump.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXNwAAAAs"]
[Thu Jul 30 09:01:13.510863 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/dump.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXNwAAAAs"]
[Thu Jul 30 09:01:13.535686 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/backup.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXOAAAAAs"]
[Thu Jul 30 09:01:13.535954 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/backup.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXOAAAAAs"]
[Thu Jul 30 09:01:13.536190 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/backup.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXOAAAAAs"]
[Thu Jul 30 09:01:13.558897 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/database.sql"] [unique_id "amsEyRtsnr7wq_g0BjsHrQAAAD8"]
[Thu Jul 30 09:01:13.559172 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/database.sql"] [unique_id "amsEyRtsnr7wq_g0BjsHrQAAAD8"]
[Thu Jul 30 09:01:13.559408 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/database.sql"] [unique_id "amsEyRtsnr7wq_g0BjsHrQAAAD8"]
[Thu Jul 30 09:01:13.561157 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "first-grade.co.uk"] [uri "/wp-config.php"] [unique_id "amsEyRXbren0YQZ4xmi2QQAAADU"]
[Thu Jul 30 09:01:13.561327 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/wp-config.php"] [unique_id "amsEyRXbren0YQZ4xmi2QQAAADU"]
[Thu Jul 30 09:01:13.561543 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/wp-config.php"] [unique_id "amsEyRXbren0YQZ4xmi2QQAAADU"]
[Thu Jul 30 09:01:13.563182 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/database_backup.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXOQAAAAs"]
[Thu Jul 30 09:01:13.563387 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/database_backup.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXOQAAAAs"]
[Thu Jul 30 09:01:13.563613 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/database_backup.sql"] [unique_id "amsEyVXTn-h6n8-Z1ElXOQAAAAs"]
[Thu Jul 30 09:01:13.586834 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/.svn/wc.db"] [unique_id "amsEyRXbren0YQZ4xmi2QgAAADU"]
[Thu Jul 30 09:01:13.586972 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "first-grade.co.uk"] [uri "/.svn/wc.db"] [unique_id "amsEyRXbren0YQZ4xmi2QgAAADU"]
[Thu Jul 30 09:01:13.587125 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/.svn/wc.db"] [unique_id "amsEyRXbren0YQZ4xmi2QgAAADU"]
[Thu Jul 30 09:01:13.587354 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/.svn/wc.db"] [unique_id "amsEyRXbren0YQZ4xmi2QgAAADU"]
[Thu Jul 30 09:01:13.613352 2026] [core:crit] [pid 2489973:tid 2489973] (13)Permission denied: [client 81.171.74.60:37856] AH00529: /home/firstgra/public_html/_vti_pvt/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/firstgra/public_html/_vti_pvt/' is executable
[Thu Jul 30 09:01:13.631887 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "first-grade.co.uk"] [uri "/.git/HEAD"] [unique_id "amsEyRtsnr7wq_g0BjsHsAAAAD8"]
[Thu Jul 30 09:01:13.632112 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/.git/HEAD"] [unique_id "amsEyRtsnr7wq_g0BjsHsAAAAD8"]
[Thu Jul 30 09:01:13.632374 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/.git/HEAD"] [unique_id "amsEyRtsnr7wq_g0BjsHsAAAAD8"]
[Thu Jul 30 09:01:13.638034 2026] [security2:error] [pid 2485088:tid 2485088] [client 81.171.74.60:37860] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "first-grade.co.uk"] [uri "/api/.env"] [unique_id "amsEyYC8wKLHchXr-3r-kwAAACI"]
[Thu Jul 30 09:01:13.638171 2026] [security2:error] [pid 2485088:tid 2485088] [client 81.171.74.60:37860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/api/.env"] [unique_id "amsEyYC8wKLHchXr-3r-kwAAACI"]
[Thu Jul 30 09:01:13.638375 2026] [security2:error] [pid 2485088:tid 2485088] [client 81.171.74.60:37860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/api/.env"] [unique_id "amsEyYC8wKLHchXr-3r-kwAAACI"]
[Thu Jul 30 09:01:13.639988 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "first-grade.co.uk"] [uri "/.env"] [unique_id "amsEyVXTn-h6n8-Z1ElXPAAAAAs"]
[Thu Jul 30 09:01:13.640145 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/.env"] [unique_id "amsEyVXTn-h6n8-Z1ElXPAAAAAs"]
[Thu Jul 30 09:01:13.640381 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/.env"] [unique_id "amsEyVXTn-h6n8-Z1ElXPAAAAAs"]
[Thu Jul 30 09:01:13.665540 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "first-grade.co.uk"] [uri "/.env.production"] [unique_id "amsEyVXTn-h6n8-Z1ElXPQAAAAs"]
[Thu Jul 30 09:01:13.665684 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/.env.production"] [unique_id "amsEyVXTn-h6n8-Z1ElXPQAAAAs"]
[Thu Jul 30 09:01:13.665899 2026] [security2:error] [pid 2484504:tid 2484504] [client 81.171.74.60:37810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/.env.production"] [unique_id "amsEyVXTn-h6n8-Z1ElXPQAAAAs"]
[Thu Jul 30 09:01:13.666021 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/etc/ssl/private/server.key"] [unique_id "amsEyRXbren0YQZ4xmi2RQAAADU"]
[Thu Jul 30 09:01:13.666209 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/etc/ssl/private/server.key"] [unique_id "amsEyRXbren0YQZ4xmi2RQAAADU"]
[Thu Jul 30 09:01:13.666423 2026] [security2:error] [pid 2489973:tid 2489973] [client 81.171.74.60:37856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/etc/ssl/private/server.key"] [unique_id "amsEyRXbren0YQZ4xmi2RQAAADU"]
[Thu Jul 30 09:01:13.682971 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "first-grade.co.uk"] [uri "/server.key"] [unique_id "amsEyRtsnr7wq_g0BjsHsgAAAD8"]
[Thu Jul 30 09:01:13.683245 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/server.key"] [unique_id "amsEyRtsnr7wq_g0BjsHsgAAAD8"]
[Thu Jul 30 09:01:13.683501 2026] [security2:error] [pid 2490054:tid 2490054] [client 81.171.74.60:37852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/server.key"] [unique_id "amsEyRtsnr7wq_g0BjsHsgAAAD8"]
[Thu Jul 30 09:01:14.233710 2026] [ssl:error] [pid 2489740:tid 2489740] (70014)End of file found: [client 216.73.216.199:19768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:15.005232 2026] [security2:error] [pid 2484692:tid 2484692] [client 114.119.132.171:40873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582675200/request_format~html/cat_ids~17"] [unique_id "amsEyzDlGHxShCdvtK3a_gAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E26-2-2020
[Thu Jul 30 09:01:15.437170 2026] [ssl:error] [pid 2489972:tid 2489972] (70014)End of file found: [client 216.73.216.199:12743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:15.542760 2026] [ssl:error] [pid 2489695:tid 2489695] (EAI 2)Name or service not known: [client 144.76.19.72:20034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:15.542820 2026] [ssl:error] [pid 2489695:tid 2489695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:15.596123 2026] [ssl:error] [pid 2489743:tid 2489743] (EAI 2)Name or service not known: [client 144.76.19.72:20042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:15.596161 2026] [ssl:error] [pid 2489743:tid 2489743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:15.803185 2026] [cgi:error] [pid 2490876:tid 2490876] [client 20.203.156.12:40620] AH02811: stderr from /var/www/html/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 09:01:15.887914 2026] [authz_core:error] [pid 2490876:tid 2490876] [client 20.203.156.12:40620] AH01630: client denied by server configuration: /var/www/html/php.ini
[Thu Jul 30 09:01:16.510454 2026] [security2:error] [pid 2487702:tid 2487702] [client 114.119.132.171:40877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582675200/request_format~html/cat_ids~17"] [unique_id "amsEzLOnoxJGZu1rlQIlYQAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E26-2-2020
[Thu Jul 30 09:01:16.783219 2026] [security2:error] [pid 2489743:tid 2489743] [client 43.165.198.224:52714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "islay.me"] [uri "/"] [unique_id "amsEzEKQ1ZHusueNoe4csgAAAB8"]
[Thu Jul 30 09:01:17.564055 2026] [core:error] [pid 2489971:tid 2489971] (13)Permission denied: [client 216.73.216.199:47873] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/873991.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.fbafdb67.tmp
[Thu Jul 30 09:01:17.865759 2026] [ssl:error] [pid 2489971:tid 2489971] (70014)End of file found: [client 216.73.216.199:47873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:17.968879 2026] [authz_core:error] [pid 2491387:tid 2491387] [client 57.141.0.1:60552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:17.969500 2026] [authz_core:error] [pid 2491387:tid 2491387] [client 57.141.0.1:60552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:18.653043 2026] [ssl:error] [pid 2489742:tid 2489742] (EAI 2)Name or service not known: [client 144.76.19.72:20052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:18.653094 2026] [ssl:error] [pid 2489742:tid 2489742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:18.708813 2026] [ssl:error] [pid 2478500:tid 2478500] (EAI 2)Name or service not known: [client 144.76.19.72:20054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:18.708852 2026] [ssl:error] [pid 2478500:tid 2478500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:18.774231 2026] [core:error] [pid 2490041:tid 2490041] (13)Permission denied: [client 216.73.216.199:46066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/867458.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.37ffc486.tmp
[Thu Jul 30 09:01:20.881634 2026] [core:error] [pid 2490041:tid 2490041] (13)Permission denied: [client 216.73.216.199:46066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2302516.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.55fd2ca3.tmp
[Thu Jul 30 09:01:21.492187 2026] [core:error] [pid 2490041:tid 2490041] (13)Permission denied: [client 216.73.216.199:46066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/33201.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.2c47338e.tmp
[Thu Jul 30 09:01:21.730380 2026] [security2:error] [pid 2486326:tid 2486326] [client 85.208.98.19:41106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nike-with-floral-print-k.html"] [unique_id "amsE0ckh6BtxmkwKlzw01QAAAA4"]
[Thu Jul 30 09:01:21.762304 2026] [ssl:error] [pid 2484645:tid 2484645] (EAI 2)Name or service not known: [client 144.76.19.72:56802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:21.762329 2026] [ssl:error] [pid 2484645:tid 2484645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:21.815532 2026] [ssl:error] [pid 2485088:tid 2485088] (EAI 2)Name or service not known: [client 144.76.19.72:56816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:21.815558 2026] [ssl:error] [pid 2485088:tid 2485088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:22.168663 2026] [ssl:error] [pid 2490041:tid 2490041] (70014)End of file found: [client 216.73.216.199:46066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:24.505323 2026] [core:error] [pid 2486326:tid 2486326] (13)Permission denied: [client 216.73.216.199:10801] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3578265.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.ef4ee44b.tmp
[Thu Jul 30 09:01:24.871995 2026] [ssl:error] [pid 2485088:tid 2485088] (EAI 2)Name or service not known: [client 144.76.19.72:56826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:24.872033 2026] [ssl:error] [pid 2485088:tid 2485088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:24.928443 2026] [ssl:error] [pid 2488167:tid 2488167] (EAI 2)Name or service not known: [client 144.76.19.72:56840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:24.928471 2026] [ssl:error] [pid 2488167:tid 2488167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:25.713233 2026] [core:error] [pid 2486326:tid 2486326] (13)Permission denied: [client 216.73.216.199:10801] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/454759.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.e1f5e1d2.tmp
[Thu Jul 30 09:01:27.219052 2026] [ssl:error] [pid 2486326:tid 2486326] (70014)End of file found: [client 216.73.216.199:10801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:27.986220 2026] [ssl:error] [pid 2484504:tid 2484504] (EAI 2)Name or service not known: [client 144.76.19.72:56852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:27.986249 2026] [ssl:error] [pid 2484504:tid 2484504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:28.042277 2026] [ssl:error] [pid 2490041:tid 2490041] (EAI 2)Name or service not known: [client 144.76.19.72:56862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:28.042314 2026] [ssl:error] [pid 2490041:tid 2490041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:28.516045 2026] [security2:error] [pid 2489662:tid 2489662] [client 185.191.171.8:11570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/chadwick-school-headmaster-fired"] [unique_id "amsE2Hv3KPptYsUZbtadlQAAAAU"]
[Thu Jul 30 09:01:28.719640 2026] [core:error] [pid 2489971:tid 2489971] (13)Permission denied: [client 216.73.216.199:50791] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/sanity_checks
[Thu Jul 30 09:01:29.629646 2026] [core:error] [pid 2489971:tid 2489971] (13)Permission denied: [client 216.73.216.199:50791] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/align
[Thu Jul 30 09:01:31.094584 2026] [ssl:error] [pid 2485604:tid 2485604] (EAI 2)Name or service not known: [client 144.76.19.72:22244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:31.094620 2026] [ssl:error] [pid 2485604:tid 2485604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:31.134344 2026] [ssl:error] [pid 2489971:tid 2489971] (70014)End of file found: [client 216.73.216.199:50791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:31.150553 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:22250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:31.150588 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:33.844391 2026] [ssl:error] [pid 2484694:tid 2484694] (70014)End of file found: [client 216.73.216.199:40555] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:34.206791 2026] [ssl:error] [pid 2489925:tid 2489925] (EAI 2)Name or service not known: [client 144.76.19.72:22264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:34.206819 2026] [ssl:error] [pid 2489925:tid 2489925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:34.258546 2026] [ssl:error] [pid 2478500:tid 2478500] (EAI 2)Name or service not known: [client 144.76.19.72:22274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:34.258597 2026] [ssl:error] [pid 2478500:tid 2478500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:34.652018 2026] [core:error] [pid 2491439:tid 2491439] [client 66.249.64.172:39152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:01:34.652086 2026] [core:error] [pid 2491439:tid 2491439] [client 66.249.64.172:39152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:01:35.649715 2026] [core:error] [pid 2481300:tid 2481300] (13)Permission denied: [client 216.73.216.199:44985] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/cache_dma
[Thu Jul 30 09:01:35.949915 2026] [core:error] [pid 2481300:tid 2481300] (13)Permission denied: [client 216.73.216.199:44985] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_handle/hwcache_align
[Thu Jul 30 09:01:37.154797 2026] [ssl:error] [pid 2481300:tid 2481300] (70014)End of file found: [client 216.73.216.199:44985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:37.312205 2026] [ssl:error] [pid 2489971:tid 2489971] (EAI 2)Name or service not known: [client 144.76.19.72:22282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:37.312237 2026] [ssl:error] [pid 2489971:tid 2489971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:37.370444 2026] [ssl:error] [pid 2492058:tid 2492058] (EAI 2)Name or service not known: [client 144.76.19.72:22288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:37.370479 2026] [ssl:error] [pid 2492058:tid 2492058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:38.058007 2026] [ssl:error] [pid 2486326:tid 2486326] (70014)End of file found: [client 216.73.216.199:60082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:40.428332 2026] [ssl:error] [pid 2485604:tid 2485604] (EAI 2)Name or service not known: [client 144.76.19.72:29948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:40.428357 2026] [ssl:error] [pid 2485604:tid 2485604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:40.482510 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:29956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:40.482537 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:41.374821 2026] [core:error] [pid 2490041:tid 2490041] (13)Permission denied: [client 216.73.216.199:37105] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/order
[Thu Jul 30 09:01:41.786131 2026] [authz_core:error] [pid 2487658:tid 2487658] [client 57.141.0.19:64280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:41.786748 2026] [authz_core:error] [pid 2487658:tid 2487658] [client 57.141.0.19:64280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:42.885125 2026] [core:error] [pid 2475743:tid 2475743] (13)Permission denied: [client 216.73.216.199:53924] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/slabs_cpu_partial
[Thu Jul 30 09:01:43.180293 2026] [authz_core:error] [pid 2491439:tid 2491439] [client 57.141.0.49:52474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:43.180944 2026] [authz_core:error] [pid 2491439:tid 2491439] [client 57.141.0.49:52474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:43.555530 2026] [ssl:error] [pid 2492058:tid 2492058] (EAI 2)Name or service not known: [client 144.76.19.72:29962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:43.555575 2026] [ssl:error] [pid 2492058:tid 2492058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:43.610239 2026] [ssl:error] [pid 2482424:tid 2482424] (EAI 2)Name or service not known: [client 144.76.19.72:29970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:43.610270 2026] [ssl:error] [pid 2482424:tid 2482424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:43.738193 2026] [security2:error] [pid 2484694:tid 2484694] [client 85.208.96.202:54496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/rodney-pearson-louis-theroux"] [unique_id "amsE57qswhyq8W7tpVkB3gAAAB4"]
[Thu Jul 30 09:01:44.994689 2026] [ssl:error] [pid 2475743:tid 2475743] (70014)End of file found: [client 216.73.216.199:53924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:46.667647 2026] [ssl:error] [pid 2485086:tid 2485086] (EAI 2)Name or service not known: [client 144.76.19.72:29982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:46.667679 2026] [ssl:error] [pid 2485086:tid 2485086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:46.719113 2026] [ssl:error] [pid 2482424:tid 2482424] (EAI 2)Name or service not known: [client 144.76.19.72:29998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:46.719142 2026] [ssl:error] [pid 2482424:tid 2482424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:47.286174 2026] [core:error] [pid 2490041:tid 2490041] (13)Permission denied: [client 216.73.216.199:37105] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_handle/alloc_calls
[Thu Jul 30 09:01:47.839895 2026] [authz_core:error] [pid 2485086:tid 2485086] [client 57.141.0.65:59796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:47.840529 2026] [authz_core:error] [pid 2485086:tid 2485086] [client 57.141.0.65:59796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:48.517397 2026] [ssl:error] [pid 2490041:tid 2490041] (70014)End of file found: [client 216.73.216.199:37105] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:48.822850 2026] [ssl:error] [pid 2489925:tid 2489925] (70014)End of file found: [client 216.73.216.199:33580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:49.777941 2026] [ssl:error] [pid 2484645:tid 2484645] (EAI 2)Name or service not known: [client 144.76.19.72:37504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:49.777972 2026] [ssl:error] [pid 2484645:tid 2484645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:49.833953 2026] [ssl:error] [pid 2475531:tid 2475531] (EAI 2)Name or service not known: [client 144.76.19.72:37512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:49.833980 2026] [ssl:error] [pid 2475531:tid 2475531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:50.528083 2026] [core:error] [pid 2489924:tid 2489924] (13)Permission denied: [client 216.73.216.199:54233] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/slabs_cpu_partial
[Thu Jul 30 09:01:50.637955 2026] [core:error] [pid 2489924:tid 2489924] (13)Permission denied: [client 216.73.216.199:54233] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/402952.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.3dfe49ba.tmp
[Thu Jul 30 09:01:50.938816 2026] [core:error] [pid 2489924:tid 2489924] (13)Permission denied: [client 216.73.216.199:54233] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1017654.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.daf7b3bd.tmp
[Thu Jul 30 09:01:52.148016 2026] [core:error] [pid 2489924:tid 2489924] (13)Permission denied: [client 216.73.216.199:54233] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libcrc32c/sections/__kcrctab
[Thu Jul 30 09:01:52.169644 2026] [authz_core:error] [pid 2492058:tid 2492058] [client 57.141.0.31:32298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:52.170272 2026] [authz_core:error] [pid 2492058:tid 2492058] [client 57.141.0.31:32298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:52.885583 2026] [ssl:error] [pid 2485086:tid 2485086] (EAI 2)Name or service not known: [client 144.76.19.72:37514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:52.885616 2026] [ssl:error] [pid 2485086:tid 2485086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:52.941267 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:37528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:52.941291 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:54.254889 2026] [ssl:error] [pid 2489924:tid 2489924] (70014)End of file found: [client 216.73.216.199:54233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:54.761011 2026] [ssl:error] [pid 2490041:tid 2490041] (70014)End of file found: [client 216.73.216.199:36211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:56.028023 2026] [ssl:error] [pid 2493380:tid 2493380] (EAI 2)Name or service not known: [client 144.76.19.72:37534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:56.028078 2026] [ssl:error] [pid 2493380:tid 2493380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:56.083531 2026] [ssl:error] [pid 2489973:tid 2489973] (EAI 2)Name or service not known: [client 144.76.19.72:37544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:56.083565 2026] [ssl:error] [pid 2489973:tid 2489973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:56.638910 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.47:59478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:01:56.639537 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.47:59478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:01:56.666324 2026] [ssl:error] [pid 2492058:tid 2492058] (70014)End of file found: [client 216.73.216.199:60409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:01:57.390748 2026] [security2:error] [pid 2490051:tid 2490051] [client 185.191.171.19:23364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/trahan-funeral-home-milton,-fl-obituaries"] [unique_id "amsE9XOiZsGZHWam5da__wAAAD4"]
[Thu Jul 30 09:01:57.824663 2026] [core:error] [pid 2475743:tid 2475743] [client 66.249.64.171:57224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:01:57.824696 2026] [core:error] [pid 2475743:tid 2475743] [client 66.249.64.171:57224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:01:59.169535 2026] [ssl:error] [pid 2490876:tid 2490876] (EAI 2)Name or service not known: [client 144.76.19.72:37546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:59.169582 2026] [ssl:error] [pid 2490876:tid 2490876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:59.226815 2026] [ssl:error] [pid 2482424:tid 2482424] (EAI 2)Name or service not known: [client 144.76.19.72:37558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:01:59.226849 2026] [ssl:error] [pid 2482424:tid 2482424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:01:59.686887 2026] [core:error] [pid 2462920:tid 2462920] (13)Permission denied: [client 216.73.216.199:36374] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/usersize
[Thu Jul 30 09:02:00.591684 2026] [core:error] [pid 2462920:tid 2462920] (13)Permission denied: [client 216.73.216.199:36374] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1976901.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.fb1994ee.tmp
[Thu Jul 30 09:02:01.229981 2026] [core:crit] [pid 2462920:tid 2462920] (13)Permission denied: [client 216.73.216.199:36374] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/cpanel/ea-php56/root/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/cpanel/ea-php56/root/root/' is executable
[Thu Jul 30 09:02:01.522728 2026] [authz_core:error] [pid 2490876:tid 2490876] [client 57.141.0.42:56974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:01.523348 2026] [authz_core:error] [pid 2490876:tid 2490876] [client 57.141.0.42:56974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:02.283663 2026] [ssl:error] [pid 2489973:tid 2489973] (EAI 2)Name or service not known: [client 144.76.19.72:65032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:02.283697 2026] [ssl:error] [pid 2489973:tid 2489973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:02.338521 2026] [ssl:error] [pid 2488121:tid 2488121] (EAI 2)Name or service not known: [client 144.76.19.72:65034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:02.338562 2026] [ssl:error] [pid 2488121:tid 2488121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:02.497921 2026] [authz_core:error] [pid 2484691:tid 2484691] [client 66.249.66.33:38264] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:02:02.500586 2026] [authz_core:error] [pid 2484691:tid 2484691] [client 66.249.66.33:38264] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:02:02.699701 2026] [core:error] [pid 2462920:tid 2462920] (13)Permission denied: [client 216.73.216.199:36374] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/aio_kiocb/total_objects
[Thu Jul 30 09:02:03.001452 2026] [core:error] [pid 2462920:tid 2462920] (13)Permission denied: [client 216.73.216.199:36374] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/cpu_slabs
[Thu Jul 30 09:02:03.668036 2026] [security2:error] [pid 2488121:tid 2488121] [client 77.90.185.129:60797] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "p2studio.co.uk"] [uri "/sftp-config.json"] [unique_id "amsE-27DisOv9VdOeHUI3gAAAAg"]
[Thu Jul 30 09:02:03.668201 2026] [security2:error] [pid 2488121:tid 2488121] [client 77.90.185.129:60797] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "p2studio.co.uk"] [uri "/sftp-config.json"] [unique_id "amsE-27DisOv9VdOeHUI3gAAAAg"]
[Thu Jul 30 09:02:03.668383 2026] [security2:error] [pid 2488121:tid 2488121] [client 77.90.185.129:60797] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "p2studio.co.uk"] [uri "/sftp-config.json"] [unique_id "amsE-27DisOv9VdOeHUI3gAAAAg"]
[Thu Jul 30 09:02:03.903783 2026] [core:error] [pid 2462920:tid 2462920] (13)Permission denied: [client 216.73.216.199:36374] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/slabs_cpu_partial
[Thu Jul 30 09:02:04.505726 2026] [ssl:error] [pid 2462920:tid 2462920] (70014)End of file found: [client 216.73.216.199:36374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:05.152843 2026] [authz_core:error] [pid 2475531:tid 2475531] [client 57.141.0.59:38456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:05.153470 2026] [authz_core:error] [pid 2475531:tid 2475531] [client 57.141.0.59:38456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:05.398296 2026] [ssl:error] [pid 2487658:tid 2487658] (EAI 2)Name or service not known: [client 144.76.19.72:65050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:05.398343 2026] [ssl:error] [pid 2487658:tid 2487658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:05.454674 2026] [ssl:error] [pid 2491439:tid 2491439] (EAI 2)Name or service not known: [client 144.76.19.72:65058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:05.454700 2026] [ssl:error] [pid 2491439:tid 2491439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:06.307835 2026] [ssl:error] [pid 2489972:tid 2489972] (70014)End of file found: [client 216.73.216.199:11413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:06.914401 2026] [core:error] [pid 2493610:tid 2493610] (13)Permission denied: [client 216.73.216.199:8656] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/align
[Thu Jul 30 09:02:07.215172 2026] [core:error] [pid 2493610:tid 2493610] (13)Permission denied: [client 216.73.216.199:8656] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/remote_node_defrag_ratio
[Thu Jul 30 09:02:07.531349 2026] [core:error] [pid 2493610:tid 2493610] (13)Permission denied: [client 216.73.216.199:8656] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3366670.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.4dde2f03.tmp
[Thu Jul 30 09:02:07.832629 2026] [ssl:error] [pid 2493610:tid 2493610] (70014)End of file found: [client 216.73.216.199:8656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:08.405904 2026] [core:error] [pid 2490041:tid 2490041] [client 66.249.64.172:57997] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:02:08.405933 2026] [core:error] [pid 2490041:tid 2490041] [client 66.249.64.172:57997] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:02:08.511105 2026] [ssl:error] [pid 2489924:tid 2489924] (EAI 2)Name or service not known: [client 144.76.19.72:65066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:08.511136 2026] [ssl:error] [pid 2489924:tid 2489924] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:08.566465 2026] [ssl:error] [pid 2490051:tid 2490051] (EAI 2)Name or service not known: [client 144.76.19.72:65076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:08.566492 2026] [ssl:error] [pid 2490051:tid 2490051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:10.838810 2026] [core:error] [pid 2490876:tid 2490876] (13)Permission denied: [client 216.73.216.199:55214] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/499182.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.ec705dd0.tmp
[Thu Jul 30 09:02:11.140732 2026] [core:error] [pid 2490876:tid 2490876] (13)Permission denied: [client 216.73.216.199:55214] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/align
[Thu Jul 30 09:02:11.440695 2026] [ssl:error] [pid 2490876:tid 2490876] (70014)End of file found: [client 216.73.216.199:55214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:11.633610 2026] [ssl:error] [pid 2492058:tid 2492058] (EAI 2)Name or service not known: [client 144.76.19.72:43482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:11.633645 2026] [ssl:error] [pid 2492058:tid 2492058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:11.719453 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:43488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:11.719478 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:11.932219 2026] [core:error] [pid 2484458:tid 2484458] (13)Permission denied: [client 216.73.216.199:1607] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3010214.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.fca5e1a4.tmp
[Thu Jul 30 09:02:12.042833 2026] [ssl:error] [pid 2484458:tid 2484458] (70014)End of file found: [client 216.73.216.199:1607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:13.134224 2026] [ssl:error] [pid 2492058:tid 2492058] (70014)End of file found: [client 216.73.216.199:20828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:14.772518 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:43490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:14.772544 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:14.828741 2026] [ssl:error] [pid 2489695:tid 2489695] (EAI 2)Name or service not known: [client 144.76.19.72:43496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:14.828766 2026] [ssl:error] [pid 2489695:tid 2489695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:16.740871 2026] [ssl:error] [pid 2493808:tid 2493808] (70014)End of file found: [client 216.73.216.199:9384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:17.882307 2026] [ssl:error] [pid 2484694:tid 2484694] (EAI 2)Name or service not known: [client 144.76.19.72:43512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:17.882341 2026] [ssl:error] [pid 2484694:tid 2484694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:17.937206 2026] [ssl:error] [pid 2484458:tid 2484458] (EAI 2)Name or service not known: [client 144.76.19.72:43520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:17.937233 2026] [ssl:error] [pid 2484458:tid 2484458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:18.441227 2026] [ssl:error] [pid 2489972:tid 2489972] (70014)End of file found: [client 216.73.216.199:45709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:18.669444 2026] [ssl:error] [pid 2492058:tid 2492058] (70014)End of file found: [client 216.73.216.199:34817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:19.117790 2026] [authz_core:error] [pid 2494197:tid 2494197] [client 57.141.0.47:57124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:19.118464 2026] [authz_core:error] [pid 2494197:tid 2494197] [client 57.141.0.47:57124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:19.832615 2026] [security2:error] [pid 2478384:tid 2478384] [client 43.153.71.12:53308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsFC438l56acPBBGgJncgAAAAQ"]
[Thu Jul 30 09:02:20.989733 2026] [ssl:error] [pid 2494243:tid 2494243] (EAI 2)Name or service not known: [client 144.76.19.72:20484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:20.989759 2026] [ssl:error] [pid 2494243:tid 2494243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:21.045887 2026] [ssl:error] [pid 2494243:tid 2494243] (EAI 2)Name or service not known: [client 144.76.19.72:20498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:21.045914 2026] [ssl:error] [pid 2494243:tid 2494243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:21.885821 2026] [security2:error] [pid 2494243:tid 2494243] [client 43.153.71.12:43076] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsFDWmNwApNz8QnTKZ5xwAAAAg"], referer: http://mwdesign.me.uk
[Thu Jul 30 09:02:22.177246 2026] [ssl:error] [pid 2487702:tid 2487702] (70014)End of file found: [client 216.73.216.199:20132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:23.979697 2026] [ssl:error] [pid 2494316:tid 2494316] (70014)End of file found: [client 216.73.216.199:9176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:24.141944 2026] [authz_core:error] [pid 2494319:tid 2494319] [client 57.141.0.67:54966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:24.142834 2026] [authz_core:error] [pid 2494319:tid 2494319] [client 57.141.0.67:54966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:24.182837 2026] [ssl:error] [pid 2488167:tid 2488167] (EAI 2)Name or service not known: [client 144.76.19.72:20506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:24.182862 2026] [ssl:error] [pid 2488167:tid 2488167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:24.235620 2026] [ssl:error] [pid 2476254:tid 2476254] (EAI 2)Name or service not known: [client 144.76.19.72:20516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:24.235644 2026] [ssl:error] [pid 2476254:tid 2476254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:24.291492 2026] [ssl:error] [pid 2484694:tid 2484694] (70014)End of file found: [client 216.73.216.199:37501] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:25.251289 2026] [security2:error] [pid 2474825:tid 2474825] [client 43.138.68.113:56190] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "oliviamarjorie.com"] [uri "/"] [unique_id "amsFEadfdTwVb6TP7ryctwAAABM"]
[Thu Jul 30 09:02:27.291591 2026] [ssl:error] [pid 2490049:tid 2490049] (EAI 2)Name or service not known: [client 144.76.19.72:20520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:27.291624 2026] [ssl:error] [pid 2490049:tid 2490049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:27.346435 2026] [ssl:error] [pid 2484458:tid 2484458] (EAI 2)Name or service not known: [client 144.76.19.72:20532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:27.346465 2026] [ssl:error] [pid 2484458:tid 2484458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:27.605904 2026] [ssl:error] [pid 2494197:tid 2494197] (70014)End of file found: [client 216.73.216.199:32200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:27.648798 2026] [security2:error] [pid 2489924:tid 2489924] [client 43.165.2.110:58672] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tripodhome.co.uk"] [uri "/"] [unique_id "amsFE_U-2c9DFFds9k8qRQAAACU"]
[Thu Jul 30 09:02:28.301374 2026] [authz_core:error] [pid 2476254:tid 2476254] [client 57.141.0.17:29990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:28.302002 2026] [authz_core:error] [pid 2476254:tid 2476254] [client 57.141.0.17:29990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:28.581952 2026] [security2:error] [pid 2466162:tid 2466162] [client 43.157.22.57:39742] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "leaccess.co.uk"] [uri "/"] [unique_id "amsFFGLwyc4TN4cRbV8nNgAAAAk"]
[Thu Jul 30 09:02:29.395510 2026] [ssl:error] [pid 2474825:tid 2474825] (70014)End of file found: [client 216.73.216.199:23421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:29.707052 2026] [ssl:error] [pid 2488168:tid 2488168] (70014)End of file found: [client 216.73.216.199:34279] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:30.413479 2026] [ssl:error] [pid 2493380:tid 2493380] (EAI 2)Name or service not known: [client 144.76.19.72:52070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:30.413502 2026] [ssl:error] [pid 2493380:tid 2493380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:30.469506 2026] [ssl:error] [pid 2494317:tid 2494317] (EAI 2)Name or service not known: [client 144.76.19.72:52080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:30.469541 2026] [ssl:error] [pid 2494317:tid 2494317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:32.492559 2026] [authz_core:error] [pid 2481300:tid 2481300] [client 57.141.0.42:55520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:32.493195 2026] [authz_core:error] [pid 2481300:tid 2481300] [client 57.141.0.42:55520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:33.024422 2026] [ssl:error] [pid 2489970:tid 2489970] (70014)End of file found: [client 216.73.216.199:54800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:33.527127 2026] [ssl:error] [pid 2475743:tid 2475743] (EAI 2)Name or service not known: [client 144.76.19.72:52092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:33.527169 2026] [ssl:error] [pid 2475743:tid 2475743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:33.581991 2026] [ssl:error] [pid 2494197:tid 2494197] (EAI 2)Name or service not known: [client 144.76.19.72:52094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:33.582022 2026] [ssl:error] [pid 2494197:tid 2494197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:34.834542 2026] [ssl:error] [pid 2491387:tid 2491387] (70014)End of file found: [client 216.73.216.199:62410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:35.124955 2026] [ssl:error] [pid 2488167:tid 2488167] (70014)End of file found: [client 216.73.216.199:6679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:36.638003 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:52108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:36.638044 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:36.691160 2026] [ssl:error] [pid 2488168:tid 2488168] (EAI 2)Name or service not known: [client 144.76.19.72:52122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:36.691192 2026] [ssl:error] [pid 2488168:tid 2488168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:38.430553 2026] [ssl:error] [pid 2494283:tid 2494283] (70014)End of file found: [client 216.73.216.199:55328] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:38.466477 2026] [security2:error] [pid 2494317:tid 2494317] [client 114.119.158.38:47447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582675200/request_format~html/cat_ids~104"] [unique_id "amsFHlY6lpJeDTmRoHOHdQAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E26-2-2020
[Thu Jul 30 09:02:39.746664 2026] [ssl:error] [pid 2490043:tid 2490043] (EAI 2)Name or service not known: [client 144.76.19.72:39540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:39.746717 2026] [ssl:error] [pid 2490043:tid 2490043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:39.798930 2026] [ssl:error] [pid 2490047:tid 2490047] (EAI 2)Name or service not known: [client 144.76.19.72:39554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:39.798963 2026] [ssl:error] [pid 2490047:tid 2490047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:40.091397 2026] [security2:error] [pid 2478384:tid 2478384] [client 114.119.158.38:47451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582675200/request_format~html/cat_ids~104"] [unique_id "amsFII38l56acPBBGgJndwAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E26-2-2020
[Thu Jul 30 09:02:40.432313 2026] [ssl:error] [pid 2494316:tid 2494316] (70014)End of file found: [client 216.73.216.199:10004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:40.954543 2026] [ssl:error] [pid 2490049:tid 2490049] (70014)End of file found: [client 216.73.216.199:10946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:41.283371 2026] [security2:error] [pid 2494317:tid 2494317] [client 49.51.252.146:51034] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/ec7152/"] [unique_id "amsFIVY6lpJeDTmRoHOHdgAAACA"]
[Thu Jul 30 09:02:42.402903 2026] [authz_core:error] [pid 2494318:tid 2494318] [client 57.141.0.36:46520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:42.403527 2026] [authz_core:error] [pid 2494318:tid 2494318] [client 57.141.0.36:46520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:42.560435 2026] [authz_core:error] [pid 2494197:tid 2494197] [client 57.141.0.50:47516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:42.561056 2026] [authz_core:error] [pid 2494197:tid 2494197] [client 57.141.0.50:47516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:42.870914 2026] [ssl:error] [pid 2493609:tid 2493609] (EAI 2)Name or service not known: [client 144.76.19.72:39564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:42.870956 2026] [ssl:error] [pid 2493609:tid 2493609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:42.927702 2026] [ssl:error] [pid 2490041:tid 2490041] (EAI 2)Name or service not known: [client 144.76.19.72:39578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:42.927729 2026] [ssl:error] [pid 2490041:tid 2490041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:43.750577 2026] [authz_core:error] [pid 2493380:tid 2493380] [client 57.141.0.44:63172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:43.751205 2026] [authz_core:error] [pid 2493380:tid 2493380] [client 57.141.0.44:63172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:44.204765 2026] [core:error] [pid 2490876:tid 2490876] (13)Permission denied: [client 216.73.216.199:36112] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm_intel/sections/__mcount_loc
[Thu Jul 30 09:02:44.904316 2026] [ssl:error] [pid 2490876:tid 2490876] (70014)End of file found: [client 216.73.216.199:36112] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:45.412896 2026] [authz_core:error] [pid 2494317:tid 2494317] [client 172.213.10.64:62749] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/Requests/error_log
[Thu Jul 30 09:02:45.983508 2026] [ssl:error] [pid 2494316:tid 2494316] (EAI 2)Name or service not known: [client 144.76.19.72:39592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:45.983591 2026] [ssl:error] [pid 2494316:tid 2494316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:46.036165 2026] [ssl:error] [pid 2494317:tid 2494317] (EAI 2)Name or service not known: [client 144.76.19.72:39594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:46.036202 2026] [ssl:error] [pid 2494317:tid 2494317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:46.713757 2026] [ssl:error] [pid 2490041:tid 2490041] (70014)End of file found: [client 216.73.216.199:38600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:47.010283 2026] [core:error] [pid 2493380:tid 2493380] (13)Permission denied: [client 216.73.216.199:56516] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS2/flags
[Thu Jul 30 09:02:48.568970 2026] [security2:error] [pid 2490043:tid 2490043] [client 185.191.171.10:39404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/anthony-arillotta-net-worth"] [unique_id "amsFKMWWGtPN18944YgQ2AAAADk"]
[Thu Jul 30 09:02:48.711396 2026] [authz_core:error] [pid 2495352:tid 2495352] [client 57.141.0.68:33936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:48.712044 2026] [authz_core:error] [pid 2495352:tid 2495352] [client 57.141.0.68:33936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:49.091758 2026] [ssl:error] [pid 2490043:tid 2490043] (EAI 2)Name or service not known: [client 144.76.19.72:39606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:49.091805 2026] [ssl:error] [pid 2490043:tid 2490043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:49.144861 2026] [ssl:error] [pid 2474825:tid 2474825] (EAI 2)Name or service not known: [client 144.76.19.72:39610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:49.144884 2026] [ssl:error] [pid 2474825:tid 2474825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:51.248282 2026] [core:error] [pid 2493380:tid 2493380] (13)Permission denied: [client 216.73.216.199:56516] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS0/flags
[Thu Jul 30 09:02:51.849354 2026] [ssl:error] [pid 2493380:tid 2493380] (70014)End of file found: [client 216.73.216.199:56516] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:52.198621 2026] [ssl:error] [pid 2490041:tid 2490041] (EAI 2)Name or service not known: [client 144.76.19.72:25304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:52.198650 2026] [ssl:error] [pid 2490041:tid 2490041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:52.599048 2026] [ssl:error] [pid 2484691:tid 2484691] (EAI 2)Name or service not known: [client 144.76.19.72:25316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:52.599095 2026] [ssl:error] [pid 2484691:tid 2484691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:52.758124 2026] [ssl:error] [pid 2490041:tid 2490041] (70014)End of file found: [client 216.73.216.199:52379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:53.439436 2026] [core:error] [pid 2488168:tid 2488168] [client 66.249.64.170:53101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:02:53.439461 2026] [core:error] [pid 2488168:tid 2488168] [client 66.249.64.170:53101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:02:54.262214 2026] [ssl:error] [pid 2481300:tid 2481300] (70014)End of file found: [client 216.73.216.199:11763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:02:55.652296 2026] [ssl:error] [pid 2481348:tid 2481348] (EAI 2)Name or service not known: [client 144.76.19.72:25332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:55.652336 2026] [ssl:error] [pid 2481348:tid 2481348] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:55.709122 2026] [ssl:error] [pid 2495671:tid 2495671] (EAI 2)Name or service not known: [client 144.76.19.72:25344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:55.709162 2026] [ssl:error] [pid 2495671:tid 2495671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:57.422773 2026] [authz_core:error] [pid 2495676:tid 2495676] [client 57.141.0.9:55998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:02:57.423437 2026] [authz_core:error] [pid 2495676:tid 2495676] [client 57.141.0.9:55998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:02:58.764813 2026] [ssl:error] [pid 2494317:tid 2494317] (EAI 2)Name or service not known: [client 144.76.19.72:25350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:58.764837 2026] [ssl:error] [pid 2494317:tid 2494317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:02:58.823374 2026] [ssl:error] [pid 2494318:tid 2494318] (EAI 2)Name or service not known: [client 144.76.19.72:25360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:02:58.823409 2026] [ssl:error] [pid 2494318:tid 2494318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:00.247442 2026] [core:error] [pid 2490049:tid 2490049] [client 57.141.0.29:44916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:00.247480 2026] [core:error] [pid 2490049:tid 2490049] [client 57.141.0.29:44916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:01.151374 2026] [cgi:error] [pid 2495577:tid 2495577] [client 66.249.79.171:40181] AH02812: stderr from /home/minervamhaco/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:03:01.499001 2026] [core:error] [pid 2481348:tid 2481348] (13)Permission denied: [client 216.73.216.199:61811] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/sunrpc/sections/__kcrctab
[Thu Jul 30 09:03:01.878857 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:24328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:01.878888 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:01.934561 2026] [ssl:error] [pid 2486326:tid 2486326] (EAI 2)Name or service not known: [client 144.76.19.72:24334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:01.934604 2026] [ssl:error] [pid 2486326:tid 2486326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:04.579483 2026] [authz_core:error] [pid 2495672:tid 2495672] [client 57.141.0.11:64282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:04.580114 2026] [authz_core:error] [pid 2495672:tid 2495672] [client 57.141.0.11:64282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:04.989842 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:24338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:04.989868 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:05.045682 2026] [ssl:error] [pid 2466162:tid 2466162] (EAI 2)Name or service not known: [client 144.76.19.72:24346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:05.045718 2026] [ssl:error] [pid 2466162:tid 2466162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:06.642738 2026] [ssl:error] [pid 2494316:tid 2494316] (70014)End of file found: [client 216.73.216.199:7510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:07.325475 2026] [security2:error] [pid 2491651:tid 2491651] [client 216.73.216.199:34881] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/dnf.conf"] [unique_id "amsFO8XAA35h4bXyonzFJgAAABs"]
[Thu Jul 30 09:03:07.325739 2026] [security2:error] [pid 2491651:tid 2491651] [client 216.73.216.199:34881] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/dnf.conf"] [unique_id "amsFO8XAA35h4bXyonzFJgAAABs"]
[Thu Jul 30 09:03:07.325947 2026] [security2:error] [pid 2491651:tid 2491651] [client 216.73.216.199:34881] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/dnf.conf"] [unique_id "amsFO8XAA35h4bXyonzFJgAAABs"]
[Thu Jul 30 09:03:08.104030 2026] [ssl:error] [pid 2489695:tid 2489695] (EAI 2)Name or service not known: [client 144.76.19.72:24362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:08.104059 2026] [ssl:error] [pid 2489695:tid 2489695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:08.158817 2026] [ssl:error] [pid 2495577:tid 2495577] (EAI 2)Name or service not known: [client 144.76.19.72:24374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:08.158852 2026] [ssl:error] [pid 2495577:tid 2495577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:08.749601 2026] [ssl:error] [pid 2495627:tid 2495627] (70014)End of file found: [client 216.73.216.199:13765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:09.470720 2026] [authz_core:error] [pid 2495677:tid 2495677] [client 57.141.0.36:43712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:09.471364 2026] [authz_core:error] [pid 2495677:tid 2495677] [client 57.141.0.36:43712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:11.215098 2026] [ssl:error] [pid 2495677:tid 2495677] (EAI 2)Name or service not known: [client 144.76.19.72:63598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:11.215140 2026] [ssl:error] [pid 2495677:tid 2495677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:11.273153 2026] [ssl:error] [pid 2490041:tid 2490041] (EAI 2)Name or service not known: [client 144.76.19.72:63606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:11.273196 2026] [ssl:error] [pid 2490041:tid 2490041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:11.443317 2026] [cgi:error] [pid 2491387:tid 2491387] [client 47.128.117.59:53276] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:03:13.586505 2026] [authz_core:error] [pid 2494316:tid 2494316] [client 194.70.234.247:30911] AH01630: client denied by server configuration: /home/sfi/public_html/error_log, referer: https://www.google.com
[Thu Jul 30 09:03:14.348387 2026] [ssl:error] [pid 2495677:tid 2495677] (EAI 2)Name or service not known: [client 144.76.19.72:63628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:14.348424 2026] [ssl:error] [pid 2495677:tid 2495677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:14.399746 2026] [ssl:error] [pid 2489973:tid 2489973] (EAI 2)Name or service not known: [client 144.76.19.72:63636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:14.399774 2026] [ssl:error] [pid 2489973:tid 2489973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:14.554663 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 57.141.0.11:29370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:14.555301 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 57.141.0.11:29370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:15.852901 2026] [security2:error] [pid 2495677:tid 2495677] [client 217.70.186.133:9421] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "mjs-services.com"] [uri "/xmlrpc.php"] [unique_id "amsFQ8DPewyos208nXl5nwAAADY"]
[Thu Jul 30 09:03:17.463738 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:63646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:17.463790 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:17.523401 2026] [ssl:error] [pid 2495411:tid 2495411] (EAI 2)Name or service not known: [client 144.76.19.72:63656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:17.523431 2026] [ssl:error] [pid 2495411:tid 2495411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:17.636156 2026] [ssl:error] [pid 2491651:tid 2491651] (70014)End of file found: [client 216.73.216.199:34881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:19.010475 2026] [authz_core:error] [pid 2495671:tid 2495671] [client 57.141.0.9:50506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:19.011139 2026] [authz_core:error] [pid 2495671:tid 2495671] [client 57.141.0.9:50506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:20.580375 2026] [ssl:error] [pid 2495628:tid 2495628] (EAI 2)Name or service not known: [client 144.76.19.72:47346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:20.580420 2026] [ssl:error] [pid 2495628:tid 2495628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:20.636661 2026] [ssl:error] [pid 2495671:tid 2495671] (EAI 2)Name or service not known: [client 144.76.19.72:47352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:20.636688 2026] [ssl:error] [pid 2495671:tid 2495671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:21.571508 2026] [ssl:error] [pid 2493808:tid 2493808] (70014)End of file found: [client 216.73.216.199:63162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:21.780939 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env"] [unique_id "amsFScgn1p65U4YIdY4FjAAAAAI"]
[Thu Jul 30 09:03:21.781230 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env"] [unique_id "amsFScgn1p65U4YIdY4FjAAAAAI"]
[Thu Jul 30 09:03:21.781506 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env"] [unique_id "amsFScgn1p65U4YIdY4FjAAAAAI"]
[Thu Jul 30 09:03:21.800037 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/api/.env"] [unique_id "amsFScgn1p65U4YIdY4FjQAAAAI"]
[Thu Jul 30 09:03:21.800297 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/.env"] [unique_id "amsFScgn1p65U4YIdY4FjQAAAAI"]
[Thu Jul 30 09:03:21.800551 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/.env"] [unique_id "amsFScgn1p65U4YIdY4FjQAAAAI"]
[Thu Jul 30 09:03:21.816399 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backend/.env"] [unique_id "amsFScgn1p65U4YIdY4FjgAAAAI"]
[Thu Jul 30 09:03:21.816637 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backend/.env"] [unique_id "amsFScgn1p65U4YIdY4FjgAAAAI"]
[Thu Jul 30 09:03:21.816872 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backend/.env"] [unique_id "amsFScgn1p65U4YIdY4FjgAAAAI"]
[Thu Jul 30 09:03:21.849175 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env"] [unique_id "amsFScgn1p65U4YIdY4FkAAAAAI"]
[Thu Jul 30 09:03:21.849380 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env"] [unique_id "amsFScgn1p65U4YIdY4FkAAAAAI"]
[Thu Jul 30 09:03:21.849637 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env"] [unique_id "amsFScgn1p65U4YIdY4FkAAAAAI"]
[Thu Jul 30 09:03:21.881717 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/laravel/.env"] [unique_id "amsFScgn1p65U4YIdY4FkgAAAAI"]
[Thu Jul 30 09:03:21.881933 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/laravel/.env"] [unique_id "amsFScgn1p65U4YIdY4FkgAAAAI"]
[Thu Jul 30 09:03:21.882172 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/laravel/.env"] [unique_id "amsFScgn1p65U4YIdY4FkgAAAAI"]
[Thu Jul 30 09:03:21.897991 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/core/.env"] [unique_id "amsFScgn1p65U4YIdY4FkwAAAAI"]
[Thu Jul 30 09:03:21.898233 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/core/.env"] [unique_id "amsFScgn1p65U4YIdY4FkwAAAAI"]
[Thu Jul 30 09:03:21.898493 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/core/.env"] [unique_id "amsFScgn1p65U4YIdY4FkwAAAAI"]
[Thu Jul 30 09:03:21.931198 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.example"] [unique_id "amsFScgn1p65U4YIdY4FlQAAAAI"]
[Thu Jul 30 09:03:21.931496 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.example"] [unique_id "amsFScgn1p65U4YIdY4FlQAAAAI"]
[Thu Jul 30 09:03:21.931779 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.example"] [unique_id "amsFScgn1p65U4YIdY4FlQAAAAI"]
[Thu Jul 30 09:03:21.947643 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/.env"] [unique_id "amsFScgn1p65U4YIdY4FlgAAAAI"]
[Thu Jul 30 09:03:21.947869 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/.env"] [unique_id "amsFScgn1p65U4YIdY4FlgAAAAI"]
[Thu Jul 30 09:03:21.948140 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/.env"] [unique_id "amsFScgn1p65U4YIdY4FlgAAAAI"]
[Thu Jul 30 09:03:21.963844 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env"] [unique_id "amsFScgn1p65U4YIdY4FlwAAAAI"]
[Thu Jul 30 09:03:21.964058 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env"] [unique_id "amsFScgn1p65U4YIdY4FlwAAAAI"]
[Thu Jul 30 09:03:21.964313 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env"] [unique_id "amsFScgn1p65U4YIdY4FlwAAAAI"]
[Thu Jul 30 09:03:21.998409 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/server/.env"] [unique_id "amsFScgn1p65U4YIdY4FmQAAAAI"]
[Thu Jul 30 09:03:21.998663 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/server/.env"] [unique_id "amsFScgn1p65U4YIdY4FmQAAAAI"]
[Thu Jul 30 09:03:21.998907 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/server/.env"] [unique_id "amsFScgn1p65U4YIdY4FmQAAAAI"]
[Thu Jul 30 09:03:22.014769 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.save"] [unique_id "amsFSsgn1p65U4YIdY4FmgAAAAI"]
[Thu Jul 30 09:03:22.015029 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.save"] [unique_id "amsFSsgn1p65U4YIdY4FmgAAAAI"]
[Thu Jul 30 09:03:22.015330 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.93.89.167:9749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.save"] [unique_id "amsFSsgn1p65U4YIdY4FmgAAAAI"]
[Thu Jul 30 09:03:22.177145 2026] [ssl:error] [pid 2490041:tid 2490041] (70014)End of file found: [client 216.73.216.199:18882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:22.220284 2026] [security2:error] [pid 2489879:tid 2489879] [client 52.45.29.57:52722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsFSuRhVhWl7e78JPvSgQAAACQ"]
[Thu Jul 30 09:03:22.966333 2026] [core:error] [pid 2495628:tid 2495628] (13)Permission denied: [client 216.73.216.199:45404] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf-frags/cpu_partial
[Thu Jul 30 09:03:23.691231 2026] [ssl:error] [pid 2495627:tid 2495627] (EAI 2)Name or service not known: [client 144.76.19.72:47356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:23.691270 2026] [ssl:error] [pid 2495627:tid 2495627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:23.744398 2026] [ssl:error] [pid 2495630:tid 2495630] (EAI 2)Name or service not known: [client 144.76.19.72:47370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:23.744424 2026] [ssl:error] [pid 2495630:tid 2495630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:23.923886 2026] [core:error] [pid 2491651:tid 2491651] [client 66.249.64.170:65216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:23.923909 2026] [core:error] [pid 2491651:tid 2491651] [client 66.249.64.170:65216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:24.747049 2026] [security2:error] [pid 2489695:tid 2489695] [client 185.191.171.17:29948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/ohio-high-school-baseball-rankings-2022"] [unique_id "amsFTP83Hee7Kne_URyrmAAAAA0"]
[Thu Jul 30 09:03:26.010191 2026] [core:error] [pid 2495630:tid 2495630] [client 66.249.64.170:43185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:26.010216 2026] [core:error] [pid 2495630:tid 2495630] [client 66.249.64.170:43185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:26.801856 2026] [ssl:error] [pid 2494197:tid 2494197] (EAI 2)Name or service not known: [client 144.76.19.72:47386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:26.801892 2026] [ssl:error] [pid 2494197:tid 2494197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:26.855329 2026] [ssl:error] [pid 2491651:tid 2491651] (EAI 2)Name or service not known: [client 144.76.19.72:47398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:26.855361 2026] [ssl:error] [pid 2491651:tid 2491651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:27.282645 2026] [security2:error] [pid 2494319:tid 2494319] [client 35.169.240.53:61680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/graves.html"] [unique_id "amsFT9X6SQ_SAsOqdUPt2wAAACM"]
[Thu Jul 30 09:03:27.607054 2026] [ssl:error] [pid 2495628:tid 2495628] (70014)End of file found: [client 216.73.216.199:45404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:28.143321 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env"] [unique_id "amsFUJAasg1ez0YpUefW8AAAAAY"]
[Thu Jul 30 09:03:28.143512 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env"] [unique_id "amsFUJAasg1ez0YpUefW8AAAAAY"]
[Thu Jul 30 09:03:28.143709 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env"] [unique_id "amsFUJAasg1ez0YpUefW8AAAAAY"]
[Thu Jul 30 09:03:28.160720 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/api/.env"] [unique_id "amsFUJAasg1ez0YpUefW8QAAAAY"]
[Thu Jul 30 09:03:28.160853 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/.env"] [unique_id "amsFUJAasg1ez0YpUefW8QAAAAY"]
[Thu Jul 30 09:03:28.161001 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/.env"] [unique_id "amsFUJAasg1ez0YpUefW8QAAAAY"]
[Thu Jul 30 09:03:28.178012 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backend/.env"] [unique_id "amsFUJAasg1ez0YpUefW8gAAAAY"]
[Thu Jul 30 09:03:28.178194 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backend/.env"] [unique_id "amsFUJAasg1ez0YpUefW8gAAAAY"]
[Thu Jul 30 09:03:28.178348 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backend/.env"] [unique_id "amsFUJAasg1ez0YpUefW8gAAAAY"]
[Thu Jul 30 09:03:28.212825 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env"] [unique_id "amsFUJAasg1ez0YpUefW9AAAAAY"]
[Thu Jul 30 09:03:28.212960 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env"] [unique_id "amsFUJAasg1ez0YpUefW9AAAAAY"]
[Thu Jul 30 09:03:28.213125 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env"] [unique_id "amsFUJAasg1ez0YpUefW9AAAAAY"]
[Thu Jul 30 09:03:28.247505 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/laravel/.env"] [unique_id "amsFUJAasg1ez0YpUefW9gAAAAY"]
[Thu Jul 30 09:03:28.247695 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/laravel/.env"] [unique_id "amsFUJAasg1ez0YpUefW9gAAAAY"]
[Thu Jul 30 09:03:28.247871 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/laravel/.env"] [unique_id "amsFUJAasg1ez0YpUefW9gAAAAY"]
[Thu Jul 30 09:03:28.264848 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/core/.env"] [unique_id "amsFUJAasg1ez0YpUefW9wAAAAY"]
[Thu Jul 30 09:03:28.265010 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/core/.env"] [unique_id "amsFUJAasg1ez0YpUefW9wAAAAY"]
[Thu Jul 30 09:03:28.265191 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/core/.env"] [unique_id "amsFUJAasg1ez0YpUefW9wAAAAY"]
[Thu Jul 30 09:03:28.300111 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.example"] [unique_id "amsFUJAasg1ez0YpUefW-QAAAAY"]
[Thu Jul 30 09:03:28.300347 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.example"] [unique_id "amsFUJAasg1ez0YpUefW-QAAAAY"]
[Thu Jul 30 09:03:28.300560 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.example"] [unique_id "amsFUJAasg1ez0YpUefW-QAAAAY"]
[Thu Jul 30 09:03:28.317943 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/.env"] [unique_id "amsFUJAasg1ez0YpUefW-gAAAAY"]
[Thu Jul 30 09:03:28.318207 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/.env"] [unique_id "amsFUJAasg1ez0YpUefW-gAAAAY"]
[Thu Jul 30 09:03:28.318458 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/.env"] [unique_id "amsFUJAasg1ez0YpUefW-gAAAAY"]
[Thu Jul 30 09:03:28.335843 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env"] [unique_id "amsFUJAasg1ez0YpUefW-wAAAAY"]
[Thu Jul 30 09:03:28.336168 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env"] [unique_id "amsFUJAasg1ez0YpUefW-wAAAAY"]
[Thu Jul 30 09:03:28.336419 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env"] [unique_id "amsFUJAasg1ez0YpUefW-wAAAAY"]
[Thu Jul 30 09:03:28.372755 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/server/.env"] [unique_id "amsFUJAasg1ez0YpUefW_QAAAAY"]
[Thu Jul 30 09:03:28.373008 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/server/.env"] [unique_id "amsFUJAasg1ez0YpUefW_QAAAAY"]
[Thu Jul 30 09:03:28.373237 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/server/.env"] [unique_id "amsFUJAasg1ez0YpUefW_QAAAAY"]
[Thu Jul 30 09:03:28.390534 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.save"] [unique_id "amsFUJAasg1ez0YpUefW_gAAAAY"]
[Thu Jul 30 09:03:28.390779 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.save"] [unique_id "amsFUJAasg1ez0YpUefW_gAAAAY"]
[Thu Jul 30 09:03:28.391013 2026] [security2:error] [pid 2491387:tid 2491387] [client 185.93.89.167:55841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.save"] [unique_id "amsFUJAasg1ez0YpUefW_gAAAAY"]
[Thu Jul 30 09:03:29.912275 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:30872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:29.912301 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:29.969630 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:30878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:29.969653 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:30.376712 2026] [core:error] [pid 2495577:tid 2495577] [client 66.249.66.8:35813] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:30.376744 2026] [core:error] [pid 2495577:tid 2495577] [client 66.249.66.8:35813] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:30.591744 2026] [cgi:error] [pid 2489695:tid 2489695] [client 66.132.224.233:9562] AH02812: stderr from /home/daggerlaneenterp/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://daggerlaneenterprises.co.uk:80/cgi-bin
[Thu Jul 30 09:03:31.237080 2026] [core:error] [pid 2484691:tid 2484691] (13)Permission denied: [client 216.73.216.199:15856] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-4k/align
[Thu Jul 30 09:03:31.976093 2026] [authz_core:error] [pid 2495675:tid 2495675] [client 57.141.0.55:60420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:31.976706 2026] [authz_core:error] [pid 2495675:tid 2495675] [client 57.141.0.55:60420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:33.024458 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:30888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:33.024483 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:33.077331 2026] [ssl:error] [pid 2495675:tid 2495675] (EAI 2)Name or service not known: [client 144.76.19.72:30904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:33.077365 2026] [ssl:error] [pid 2495675:tid 2495675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:36.129727 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:30906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:36.129752 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:36.184040 2026] [ssl:error] [pid 2494319:tid 2494319] (EAI 2)Name or service not known: [client 144.76.19.72:30908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:36.184084 2026] [ssl:error] [pid 2494319:tid 2494319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:36.968255 2026] [ssl:error] [pid 2486326:tid 2486326] (70014)End of file found: [client 216.73.216.199:36801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:37.565944 2026] [ssl:error] [pid 2495630:tid 2495630] (70014)End of file found: [client 216.73.216.199:5460] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:37.975645 2026] [authz_core:error] [pid 2490043:tid 2490043] [client 57.141.0.63:28016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:37.976265 2026] [authz_core:error] [pid 2490043:tid 2490043] [client 57.141.0.63:28016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:39.236446 2026] [ssl:error] [pid 2495577:tid 2495577] (EAI 2)Name or service not known: [client 144.76.19.72:30922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:39.236478 2026] [ssl:error] [pid 2495577:tid 2495577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:39.287931 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:30924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:39.287976 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:41.179266 2026] [ssl:error] [pid 2484691:tid 2484691] (70014)End of file found: [client 216.73.216.199:15856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:42.343100 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:62610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:42.343134 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:42.396527 2026] [ssl:error] [pid 2497183:tid 2497183] (EAI 2)Name or service not known: [client 144.76.19.72:62624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:42.396556 2026] [ssl:error] [pid 2497183:tid 2497183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:44.038105 2026] [ssl:error] [pid 2485253:tid 2485253] (70014)End of file found: [client 216.73.216.199:51359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:44.947003 2026] [ssl:error] [pid 2497480:tid 2497480] (70014)End of file found: [client 216.73.216.199:44290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:45.465366 2026] [ssl:error] [pid 2495675:tid 2495675] (EAI 2)Name or service not known: [client 144.76.19.72:62632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:45.465398 2026] [ssl:error] [pid 2495675:tid 2495675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:45.519807 2026] [ssl:error] [pid 2486326:tid 2486326] (EAI 2)Name or service not known: [client 144.76.19.72:62634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:45.519834 2026] [ssl:error] [pid 2486326:tid 2486326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:47.958211 2026] [ssl:error] [pid 2490043:tid 2490043] (70014)End of file found: [client 216.73.216.199:22528] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:48.333337 2026] [authz_core:error] [pid 2489973:tid 2489973] [client 57.141.0.48:58074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:48.333955 2026] [authz_core:error] [pid 2489973:tid 2489973] [client 57.141.0.48:58074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:48.575499 2026] [ssl:error] [pid 2489879:tid 2489879] (EAI 2)Name or service not known: [client 144.76.19.72:62644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:48.575537 2026] [ssl:error] [pid 2489879:tid 2489879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:48.630579 2026] [ssl:error] [pid 2486326:tid 2486326] (EAI 2)Name or service not known: [client 144.76.19.72:62660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:48.630604 2026] [ssl:error] [pid 2486326:tid 2486326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:49.091285 2026] [security2:error] [pid 2495577:tid 2495577] [client 94.154.43.177:61098] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "davidebell.com"] [uri "/.env"] [unique_id "amsFZVASO9B25uSZKYTCrQAAAAw"]
[Thu Jul 30 09:03:49.091460 2026] [security2:error] [pid 2495577:tid 2495577] [client 94.154.43.177:61098] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "davidebell.com"] [uri "/.env"] [unique_id "amsFZVASO9B25uSZKYTCrQAAAAw"]
[Thu Jul 30 09:03:49.091683 2026] [security2:error] [pid 2495577:tid 2495577] [client 94.154.43.177:61098] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "davidebell.com"] [uri "/.env"] [unique_id "amsFZVASO9B25uSZKYTCrQAAAAw"]
[Thu Jul 30 09:03:49.114397 2026] [security2:error] [pid 2484691:tid 2484691] [client 94.154.43.179:54112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.tartanbag.com.davidebell.com"] [uri "/.env"] [unique_id "amsFZW2lLgg8L6CfmbOwKAAAABc"]
[Thu Jul 30 09:03:49.114583 2026] [security2:error] [pid 2484691:tid 2484691] [client 94.154.43.179:54112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tartanbag.com.davidebell.com"] [uri "/.env"] [unique_id "amsFZW2lLgg8L6CfmbOwKAAAABc"]
[Thu Jul 30 09:03:49.114782 2026] [security2:error] [pid 2484691:tid 2484691] [client 94.154.43.179:54112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.tartanbag.com.davidebell.com"] [uri "/.env"] [unique_id "amsFZW2lLgg8L6CfmbOwKAAAABc"]
[Thu Jul 30 09:03:49.279839 2026] [security2:error] [pid 2495630:tid 2495630] [client 94.154.43.187:23190] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsFZTAG4K7HBzi0SiV5fQAAACo"]
[Thu Jul 30 09:03:49.279972 2026] [security2:error] [pid 2495630:tid 2495630] [client 94.154.43.187:23190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsFZTAG4K7HBzi0SiV5fQAAACo"]
[Thu Jul 30 09:03:49.280202 2026] [security2:error] [pid 2495630:tid 2495630] [client 94.154.43.187:23190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsFZTAG4K7HBzi0SiV5fQAAACo"]
[Thu Jul 30 09:03:49.349086 2026] [security2:error] [pid 2489879:tid 2489879] [client 94.154.43.187:23200] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bashforthbell.com.davidebell.com"] [uri "/.env"] [unique_id "amsFZeRhVhWl7e78JPvS5wAAACQ"]
[Thu Jul 30 09:03:49.349268 2026] [security2:error] [pid 2489879:tid 2489879] [client 94.154.43.187:23200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bashforthbell.com.davidebell.com"] [uri "/.env"] [unique_id "amsFZeRhVhWl7e78JPvS5wAAACQ"]
[Thu Jul 30 09:03:49.349454 2026] [security2:error] [pid 2489879:tid 2489879] [client 94.154.43.187:23200] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bashforthbell.com.davidebell.com"] [uri "/.env"] [unique_id "amsFZeRhVhWl7e78JPvS5wAAACQ"]
[Thu Jul 30 09:03:49.411904 2026] [security2:error] [pid 2488167:tid 2488167] [client 94.154.43.187:23232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/.env"] [unique_id "amsFZZGjcbM-pSJslLhU-wAAAAo"]
[Thu Jul 30 09:03:49.412044 2026] [security2:error] [pid 2488167:tid 2488167] [client 94.154.43.187:23232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/.env"] [unique_id "amsFZZGjcbM-pSJslLhU-wAAAAo"]
[Thu Jul 30 09:03:49.412264 2026] [security2:error] [pid 2488167:tid 2488167] [client 94.154.43.187:23232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bashforthbell.co.uk.davidebell.com"] [uri "/.env"] [unique_id "amsFZZGjcbM-pSJslLhU-wAAAAo"]
[Thu Jul 30 09:03:49.419314 2026] [security2:error] [pid 2495675:tid 2495675] [client 94.154.43.187:23216] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.localdonuts.co.uk.davidebell.com"] [uri "/.env"] [unique_id "amsFZX1D-kA1psIArUs5NwAAADM"]
[Thu Jul 30 09:03:49.419447 2026] [security2:error] [pid 2495675:tid 2495675] [client 94.154.43.187:23216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.localdonuts.co.uk.davidebell.com"] [uri "/.env"] [unique_id "amsFZX1D-kA1psIArUs5NwAAADM"]
[Thu Jul 30 09:03:49.419665 2026] [security2:error] [pid 2495675:tid 2495675] [client 94.154.43.187:23216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.localdonuts.co.uk.davidebell.com"] [uri "/.env"] [unique_id "amsFZX1D-kA1psIArUs5NwAAADM"]
[Thu Jul 30 09:03:50.374991 2026] [security2:error] [pid 2488167:tid 2488167] [client 94.154.43.184:56026] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.co.uk"] [uri "/.env"] [unique_id "amsFZpGjcbM-pSJslLhU_AAAAAo"]
[Thu Jul 30 09:03:50.375163 2026] [security2:error] [pid 2488167:tid 2488167] [client 94.154.43.184:56026] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.co.uk"] [uri "/.env"] [unique_id "amsFZpGjcbM-pSJslLhU_AAAAAo"]
[Thu Jul 30 09:03:50.375354 2026] [security2:error] [pid 2488167:tid 2488167] [client 94.154.43.184:56026] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.co.uk"] [uri "/.env"] [unique_id "amsFZpGjcbM-pSJslLhU_AAAAAo"]
[Thu Jul 30 09:03:50.833337 2026] [security2:error] [pid 2495409:tid 2495409] [client 185.191.171.5:13120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns1.ns-earth.com"] [uri "/robots.txt"] [unique_id "amsFZu9Xo0jHXx_gbcb7TwAAAAE"]
[Thu Jul 30 09:03:51.274872 2026] [core:error] [pid 2495675:tid 2495675] (13)Permission denied: [client 216.73.216.199:54347] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/trace
[Thu Jul 30 09:03:51.576924 2026] [ssl:error] [pid 2495675:tid 2495675] (70014)End of file found: [client 216.73.216.199:54347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:51.687045 2026] [ssl:error] [pid 2497480:tid 2497480] (EAI 2)Name or service not known: [client 144.76.19.72:55972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:51.687089 2026] [ssl:error] [pid 2497480:tid 2497480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:51.741675 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:55978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:51.741717 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:51.878918 2026] [core:error] [pid 2489973:tid 2489973] (13)Permission denied: [client 216.73.216.199:12692] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS3/uartclk
[Thu Jul 30 09:03:53.867321 2026] [core:error] [pid 2495627:tid 2495627] [client 66.249.64.170:38198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:53.867364 2026] [core:error] [pid 2495627:tid 2495627] [client 66.249.64.170:38198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:53.986796 2026] [core:error] [pid 2489973:tid 2489973] (13)Permission denied: [client 216.73.216.199:12692] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPLITEv6/red_zone
[Thu Jul 30 09:03:54.588424 2026] [ssl:error] [pid 2489973:tid 2489973] (70014)End of file found: [client 216.73.216.199:12692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:54.798824 2026] [ssl:error] [pid 2490043:tid 2490043] (EAI 2)Name or service not known: [client 144.76.19.72:55994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:54.798857 2026] [ssl:error] [pid 2490043:tid 2490043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:54.852037 2026] [ssl:error] [pid 2491651:tid 2491651] (EAI 2)Name or service not known: [client 144.76.19.72:56004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:54.852058 2026] [ssl:error] [pid 2491651:tid 2491651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:55.328406 2026] [authz_core:error] [pid 2484644:tid 2484644] [client 57.141.0.14:45130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:03:55.329029 2026] [authz_core:error] [pid 2484644:tid 2484644] [client 57.141.0.14:45130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:03:56.094297 2026] [core:error] [pid 2495409:tid 2495409] (13)Permission denied: [client 216.73.216.199:16826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/trace_event_file/min_partial
[Thu Jul 30 09:03:56.395705 2026] [ssl:error] [pid 2495409:tid 2495409] (70014)End of file found: [client 216.73.216.199:16826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:03:57.950124 2026] [ssl:error] [pid 2484644:tid 2484644] (EAI 2)Name or service not known: [client 144.76.19.72:56018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:57.950150 2026] [ssl:error] [pid 2484644:tid 2484644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:58.046101 2026] [ssl:error] [pid 2485253:tid 2485253] (EAI 2)Name or service not known: [client 144.76.19.72:56032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:03:58.046137 2026] [ssl:error] [pid 2485253:tid 2485253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:03:58.274276 2026] [core:error] [pid 2495675:tid 2495675] [client 66.249.64.170:44331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:58.274297 2026] [core:error] [pid 2495675:tid 2495675] [client 66.249.64.170:44331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:03:58.325113 2026] [security2:error] [pid 2494197:tid 2494197] [client 185.191.171.14:47494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsFbsgn1p65U4YIdY4FoQAAAAI"]
[Thu Jul 30 09:03:58.746383 2026] [security2:error] [pid 2484694:tid 2484694] [client 85.208.96.209:45146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6006.0/prev_next,next.html"] [unique_id "amsFbrqswhyq8W7tpVkCZAAAAB4"]
[Thu Jul 30 09:04:00.014381 2026] [ssl:error] [pid 2495627:tid 2495627] (70014)End of file found: [client 216.73.216.199:19684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:00.918367 2026] [core:error] [pid 2493808:tid 2493808] (13)Permission denied: [client 216.73.216.199:9316] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/eventpoll_pwq/total_objects
[Thu Jul 30 09:04:01.098844 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:31004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:01.098889 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:01.151822 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:31014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:01.151847 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:01.219535 2026] [ssl:error] [pid 2493808:tid 2493808] (70014)End of file found: [client 216.73.216.199:9316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:01.821064 2026] [ssl:error] [pid 2494319:tid 2494319] (70014)End of file found: [client 216.73.216.199:49246] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:01.969945 2026] [authz_core:error] [pid 2497456:tid 2497456] [client 66.249.66.35:55716] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:04:01.972629 2026] [authz_core:error] [pid 2497456:tid 2497456] [client 66.249.66.35:55716] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:04:02.003589 2026] [security2:error] [pid 2485662:tid 2485662] [client 114.119.158.38:47325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582588800/cat_ids~30,15/request_format~html"] [unique_id "amsFciUdq7C3r1IXnU6OgwAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1582588800/cat_ids~30,15,102/request_format~html
[Thu Jul 30 09:04:03.529627 2026] [security2:error] [pid 2490043:tid 2490043] [client 114.119.158.38:47335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582588800/cat_ids~30,15/request_format~html"] [unique_id "amsFc8WWGtPN18944YgQ7QAAADk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1582588800/cat_ids~30,15,102/request_format~html
[Thu Jul 30 09:04:04.208369 2026] [ssl:error] [pid 2495411:tid 2495411] (EAI 2)Name or service not known: [client 144.76.19.72:31016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:04.208395 2026] [ssl:error] [pid 2495411:tid 2495411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:04.264622 2026] [ssl:error] [pid 2498272:tid 2498272] (EAI 2)Name or service not known: [client 144.76.19.72:31024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:04.264658 2026] [ssl:error] [pid 2498272:tid 2498272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:04.969839 2026] [authz_core:error] [pid 2495411:tid 2495411] [client 57.141.0.65:34184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:04.970456 2026] [authz_core:error] [pid 2495411:tid 2495411] [client 57.141.0.65:34184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:05.201030 2026] [authz_core:error] [pid 2484694:tid 2484694] [client 190.142.252.80:36924] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 09:04:05.861358 2026] [authz_core:error] [pid 2489879:tid 2489879] [client 66.249.66.34:60951] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:04:05.864010 2026] [authz_core:error] [pid 2489879:tid 2489879] [client 66.249.66.34:60951] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:04:07.322176 2026] [ssl:error] [pid 2489973:tid 2489973] (EAI 2)Name or service not known: [client 144.76.19.72:31032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:07.322202 2026] [ssl:error] [pid 2489973:tid 2489973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:07.378223 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:31042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:07.378292 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:07.550433 2026] [ssl:error] [pid 2491651:tid 2491651] (70014)End of file found: [client 216.73.216.199:46062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:08.457019 2026] [core:error] [pid 2495411:tid 2495411] (13)Permission denied: [client 216.73.216.199:28108] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/remote_node_defrag_ratio
[Thu Jul 30 09:04:09.023373 2026] [authz_core:error] [pid 2474825:tid 2474825] [client 57.141.0.33:39818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:09.023994 2026] [authz_core:error] [pid 2474825:tid 2474825] [client 57.141.0.33:39818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:09.053300 2026] [security2:error] [pid 2493808:tid 2493808] [client 185.191.171.15:21648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amsFeWUir7RL0W2kedYoKgAAABw"]
[Thu Jul 30 09:04:09.226250 2026] [security2:error] [pid 2484644:tid 2484644] [client 94.154.43.229:60746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tartanbag.com"] [uri "/.env"] [unique_id "amsFeZ8LlsoFN1IkuRx5XwAAABA"]
[Thu Jul 30 09:04:09.226387 2026] [security2:error] [pid 2484644:tid 2484644] [client 94.154.43.229:60746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tartanbag.com"] [uri "/.env"] [unique_id "amsFeZ8LlsoFN1IkuRx5XwAAABA"]
[Thu Jul 30 09:04:09.226567 2026] [security2:error] [pid 2484644:tid 2484644] [client 94.154.43.229:60746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "tartanbag.com"] [uri "/.env"] [unique_id "amsFeZ8LlsoFN1IkuRx5XwAAABA"]
[Thu Jul 30 09:04:09.823197 2026] [security2:error] [pid 2491387:tid 2491387] [client 85.208.96.211:56250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2010/06/10/iphone-4-in-business/"] [unique_id "amsFeZAasg1ez0YpUefXBQAAAAY"]
[Thu Jul 30 09:04:10.260108 2026] [core:error] [pid 2494319:tid 2494319] (13)Permission denied: [client 216.73.216.199:48786] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS3/close_delay
[Thu Jul 30 09:04:10.434084 2026] [ssl:error] [pid 2459739:tid 2459739] (EAI 2)Name or service not known: [client 144.76.19.72:58718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:10.434146 2026] [ssl:error] [pid 2459739:tid 2459739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:10.482057 2026] [core:error] [pid 2484644:tid 2484644] [client 66.249.64.172:64035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:04:10.482093 2026] [core:error] [pid 2484644:tid 2484644] [client 66.249.64.172:64035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:04:10.485437 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:58734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:10.485460 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:10.747218 2026] [authz_core:error] [pid 2485662:tid 2485662] [client 57.141.0.29:42658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:10.747836 2026] [authz_core:error] [pid 2485662:tid 2485662] [client 57.141.0.29:42658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:12.065927 2026] [ssl:error] [pid 2494319:tid 2494319] (70014)End of file found: [client 216.73.216.199:48786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:12.671687 2026] [core:error] [pid 2495411:tid 2495411] (13)Permission denied: [client 216.73.216.199:28108] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/filp/validate
[Thu Jul 30 09:04:12.972635 2026] [ssl:error] [pid 2495411:tid 2495411] (70014)End of file found: [client 216.73.216.199:28108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:13.540176 2026] [ssl:error] [pid 2495627:tid 2495627] (EAI 2)Name or service not known: [client 144.76.19.72:58742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:13.540203 2026] [ssl:error] [pid 2495627:tid 2495627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:13.592856 2026] [ssl:error] [pid 2495630:tid 2495630] (EAI 2)Name or service not known: [client 144.76.19.72:58746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:13.592879 2026] [ssl:error] [pid 2495630:tid 2495630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:14.134781 2026] [authz_core:error] [pid 2489879:tid 2489879] [client 57.141.0.22:52546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:14.135397 2026] [authz_core:error] [pid 2489879:tid 2489879] [client 57.141.0.22:52546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:15.175221 2026] [security2:error] [pid 2490043:tid 2490043] [client 216.73.216.199:29915] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /wp-includes/sodium_compat/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-includes/sodium_compat/composer.json"] [unique_id "amsFf8WWGtPN18944YgQ8AAAADk"]
[Thu Jul 30 09:04:15.175475 2026] [security2:error] [pid 2490043:tid 2490043] [client 216.73.216.199:29915] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-includes/sodium_compat/composer.json"] [unique_id "amsFf8WWGtPN18944YgQ8AAAADk"]
[Thu Jul 30 09:04:15.175770 2026] [security2:error] [pid 2490043:tid 2490043] [client 216.73.216.199:29915] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-includes/sodium_compat/composer.json"] [unique_id "amsFf8WWGtPN18944YgQ8AAAADk"]
[Thu Jul 30 09:04:16.665980 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:58752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:16.666019 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:16.720251 2026] [ssl:error] [pid 2495628:tid 2495628] (EAI 2)Name or service not known: [client 144.76.19.72:58758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:16.720281 2026] [ssl:error] [pid 2495628:tid 2495628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:17.444557 2026] [ssl:error] [pid 2495630:tid 2495630] (70014)End of file found: [client 216.73.216.199:23011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:18.347248 2026] [security2:error] [pid 2495627:tid 2495627] [client 216.73.216.199:14444] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/etc.conf"] [unique_id "amsFglRdHtfB3UKDkU14HgAAABg"]
[Thu Jul 30 09:04:18.347466 2026] [security2:error] [pid 2495627:tid 2495627] [client 216.73.216.199:14444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/etc.conf"] [unique_id "amsFglRdHtfB3UKDkU14HgAAABg"]
[Thu Jul 30 09:04:18.347660 2026] [security2:error] [pid 2495627:tid 2495627] [client 216.73.216.199:14444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/etc.conf"] [unique_id "amsFglRdHtfB3UKDkU14HgAAABg"]
[Thu Jul 30 09:04:19.777457 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:44806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:19.777501 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:19.830668 2026] [ssl:error] [pid 2489879:tid 2489879] (EAI 2)Name or service not known: [client 144.76.19.72:44808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:19.830700 2026] [ssl:error] [pid 2489879:tid 2489879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:22.261953 2026] [ssl:error] [pid 2495675:tid 2495675] (70014)End of file found: [client 216.73.216.199:11137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:22.885769 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:44816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:22.885792 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:22.941917 2026] [ssl:error] [pid 2495672:tid 2495672] (EAI 2)Name or service not known: [client 144.76.19.72:44828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:22.941971 2026] [ssl:error] [pid 2495672:tid 2495672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:24.936278 2026] [authz_core:error] [pid 2498273:tid 2498273] [client 57.141.0.4:50412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:24.936904 2026] [authz_core:error] [pid 2498273:tid 2498273] [client 57.141.0.4:50412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:25.993896 2026] [ssl:error] [pid 2495630:tid 2495630] (EAI 2)Name or service not known: [client 144.76.19.72:44842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:25.993921 2026] [ssl:error] [pid 2495630:tid 2495630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:26.044996 2026] [ssl:error] [pid 2495411:tid 2495411] (EAI 2)Name or service not known: [client 144.76.19.72:44850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:26.045022 2026] [ssl:error] [pid 2495411:tid 2495411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:26.353846 2026] [authz_core:error] [pid 2498273:tid 2498273] [client 57.141.0.40:49924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:26.354465 2026] [authz_core:error] [pid 2498273:tid 2498273] [client 57.141.0.40:49924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:26.471297 2026] [ssl:error] [pid 2484694:tid 2484694] (70014)End of file found: [client 216.73.216.199:1890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:27.078971 2026] [ssl:error] [pid 2495627:tid 2495627] (70014)End of file found: [client 216.73.216.199:14444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:28.880819 2026] [ssl:error] [pid 2495411:tid 2495411] (70014)End of file found: [client 216.73.216.199:4839] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:29.096811 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:44866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:29.096843 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:29.149859 2026] [ssl:error] [pid 2495630:tid 2495630] (EAI 2)Name or service not known: [client 144.76.19.72:44882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:29.149903 2026] [ssl:error] [pid 2495630:tid 2495630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:30.625965 2026] [authz_core:error] [pid 2498272:tid 2498272] [client 57.141.0.54:43258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:30.626599 2026] [authz_core:error] [pid 2498272:tid 2498272] [client 57.141.0.54:43258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:31.078208 2026] [authz_core:error] [pid 2498272:tid 2498272] [client 57.141.0.19:58956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:31.078829 2026] [authz_core:error] [pid 2498272:tid 2498272] [client 57.141.0.19:58956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:31.084719 2026] [core:error] [pid 2499170:tid 2499170] [client 66.249.64.170:51676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:04:31.084742 2026] [core:error] [pid 2499170:tid 2499170] [client 66.249.64.170:51676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:04:31.896034 2026] [security2:error] [pid 2493808:tid 2493808] [client 3.220.70.171:58763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/products/solarwinds-service-desk/"] [unique_id "amsFj2Uir7RL0W2kedYoLgAAABw"]
[Thu Jul 30 09:04:32.206847 2026] [ssl:error] [pid 2499292:tid 2499292] (EAI 2)Name or service not known: [client 144.76.19.72:53002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:32.206882 2026] [ssl:error] [pid 2499292:tid 2499292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:32.261518 2026] [ssl:error] [pid 2499170:tid 2499170] (EAI 2)Name or service not known: [client 144.76.19.72:53010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:32.261546 2026] [ssl:error] [pid 2499170:tid 2499170] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:32.973332 2026] [security2:error] [pid 2494317:tid 2494317] [client 185.191.171.7:61578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/selling-timber-in-kentucky"] [unique_id "amsFkFY6lpJeDTmRoHOHlAAAACA"]
[Thu Jul 30 09:04:33.103477 2026] [ssl:error] [pid 2495628:tid 2495628] (70014)End of file found: [client 216.73.216.199:48912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:33.397904 2026] [security2:error] [pid 2490041:tid 2490041] [client 216.73.216.199:21663] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/bulgarian/errmsg.sys"] [unique_id "amsFke-joVvdYTuBjjUERwAAADc"]
[Thu Jul 30 09:04:33.398214 2026] [security2:error] [pid 2490041:tid 2490041] [client 216.73.216.199:21663] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/bulgarian/errmsg.sys"] [unique_id "amsFke-joVvdYTuBjjUERwAAADc"]
[Thu Jul 30 09:04:33.398415 2026] [security2:error] [pid 2490041:tid 2490041] [client 216.73.216.199:21663] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/bulgarian/errmsg.sys"] [unique_id "amsFke-joVvdYTuBjjUERwAAADc"]
[Thu Jul 30 09:04:34.611664 2026] [security2:error] [pid 2491651:tid 2491651] [client 85.208.96.209:59238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/who-is-replacing-poppy-harlow-on-cnn"] [unique_id "amsFksXAA35h4bXyonzFswAAABs"]
[Thu Jul 30 09:04:35.316829 2026] [ssl:error] [pid 2497456:tid 2497456] (EAI 2)Name or service not known: [client 144.76.19.72:53026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:35.316862 2026] [ssl:error] [pid 2497456:tid 2497456] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:35.373309 2026] [ssl:error] [pid 2492058:tid 2492058] (EAI 2)Name or service not known: [client 144.76.19.72:53040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:35.373342 2026] [ssl:error] [pid 2492058:tid 2492058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:36.189037 2026] [access_compat:error] [pid 2491651:tid 2491651] [client 2.189.5.162:51600] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:04:36.250323 2026] [authz_core:error] [pid 2498883:tid 2498883] [client 57.141.0.36:49154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:36.250940 2026] [authz_core:error] [pid 2498883:tid 2498883] [client 57.141.0.36:49154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:37.313247 2026] [ssl:error] [pid 2490041:tid 2490041] (70014)End of file found: [client 216.73.216.199:21663] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:38.428394 2026] [ssl:error] [pid 2499335:tid 2499335] (EAI 2)Name or service not known: [client 144.76.19.72:53042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:38.428426 2026] [ssl:error] [pid 2499335:tid 2499335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:38.487142 2026] [ssl:error] [pid 2498883:tid 2498883] (EAI 2)Name or service not known: [client 144.76.19.72:53058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:38.487171 2026] [ssl:error] [pid 2498883:tid 2498883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:40.326414 2026] [ssl:error] [pid 2499170:tid 2499170] (70014)End of file found: [client 216.73.216.199:42268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:41.542909 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:63442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:41.542948 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:41.596057 2026] [ssl:error] [pid 2498883:tid 2498883] (EAI 2)Name or service not known: [client 144.76.19.72:63448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:41.596100 2026] [ssl:error] [pid 2498883:tid 2498883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:41.617837 2026] [security2:error] [pid 2498273:tid 2498273] [client 85.208.96.204:24684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/inside-lacrosse-id-experience"] [unique_id "amsFmSoaDcScMv4hqhnSmQAAAAk"]
[Thu Jul 30 09:04:42.035975 2026] [authz_core:error] [pid 2495411:tid 2495411] [client 57.141.0.51:36328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:42.036641 2026] [authz_core:error] [pid 2495411:tid 2495411] [client 57.141.0.51:36328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:42.137989 2026] [ssl:error] [pid 2491387:tid 2491387] (70014)End of file found: [client 216.73.216.199:32419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:43.647003 2026] [security2:error] [pid 2492058:tid 2492058] [client 185.191.171.15:14432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/rockdale-county-jail-mugshots-2021"] [unique_id "amsFmwXFIpoAUD1N0XXU5gAAADA"]
[Thu Jul 30 09:04:43.941312 2026] [ssl:error] [pid 2495672:tid 2495672] (70014)End of file found: [client 216.73.216.199:15766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:44.649548 2026] [ssl:error] [pid 2498236:tid 2498236] (EAI 2)Name or service not known: [client 144.76.19.72:63458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:44.649589 2026] [ssl:error] [pid 2498236:tid 2498236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:44.702892 2026] [ssl:error] [pid 2492058:tid 2492058] (EAI 2)Name or service not known: [client 144.76.19.72:63474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:44.702918 2026] [ssl:error] [pid 2492058:tid 2492058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:47.797648 2026] [ssl:error] [pid 2495675:tid 2495675] (EAI 2)Name or service not known: [client 144.76.19.72:63484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:47.797688 2026] [ssl:error] [pid 2495675:tid 2495675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:47.855177 2026] [ssl:error] [pid 2485253:tid 2485253] (EAI 2)Name or service not known: [client 144.76.19.72:63492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:47.855203 2026] [ssl:error] [pid 2485253:tid 2485253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:47.859089 2026] [ssl:error] [pid 2497479:tid 2497479] (70014)End of file found: [client 216.73.216.199:15255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:48.820155 2026] [authz_core:error] [pid 2495627:tid 2495627] [client 57.141.0.59:26626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:48.820794 2026] [authz_core:error] [pid 2495627:tid 2495627] [client 57.141.0.59:26626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:50.911459 2026] [ssl:error] [pid 2488167:tid 2488167] (EAI 2)Name or service not known: [client 144.76.19.72:33822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:50.911483 2026] [ssl:error] [pid 2488167:tid 2488167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:50.965853 2026] [ssl:error] [pid 2495672:tid 2495672] (EAI 2)Name or service not known: [client 144.76.19.72:33824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:50.965908 2026] [ssl:error] [pid 2495672:tid 2495672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:51.287664 2026] [core:error] [pid 2490051:tid 2490051] [client 66.249.64.170:57603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:04:51.287696 2026] [core:error] [pid 2490051:tid 2490051] [client 66.249.64.170:57603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:04:51.482042 2026] [ssl:error] [pid 2495671:tid 2495671] (70014)End of file found: [client 216.73.216.199:45737] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:52.387203 2026] [ssl:error] [pid 2488167:tid 2488167] (70014)End of file found: [client 216.73.216.199:41569] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:52.671909 2026] [authz_core:error] [pid 2490041:tid 2490041] [client 57.141.0.32:22504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:04:52.672546 2026] [authz_core:error] [pid 2490041:tid 2490041] [client 57.141.0.32:22504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:04:53.700984 2026] [authz_core:error] [pid 2491387:tid 2491387] [client 82.102.18.190:53964] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/customize/error_log
[Thu Jul 30 09:04:53.893519 2026] [ssl:error] [pid 2489879:tid 2489879] (70014)End of file found: [client 216.73.216.199:52862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:54.025498 2026] [ssl:error] [pid 2492058:tid 2492058] (EAI 2)Name or service not known: [client 144.76.19.72:33828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:54.025521 2026] [ssl:error] [pid 2492058:tid 2492058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:54.090641 2026] [ssl:error] [pid 2489973:tid 2489973] (EAI 2)Name or service not known: [client 144.76.19.72:33838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:54.090667 2026] [ssl:error] [pid 2489973:tid 2489973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:57.247786 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:33840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:57.247821 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:57.299296 2026] [ssl:error] [pid 2498882:tid 2498882] (EAI 2)Name or service not known: [client 144.76.19.72:33842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:04:57.299355 2026] [ssl:error] [pid 2498882:tid 2498882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:04:57.506123 2026] [ssl:error] [pid 2499292:tid 2499292] (70014)End of file found: [client 216.73.216.199:2786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:58.490558 2026] [authz_core:error] [pid 2500191:tid 2500191] [client 65.108.120.25:45208] AH01630: client denied by server configuration: /home/robincou/public_html/error_log
[Thu Jul 30 09:04:58.715535 2026] [ssl:error] [pid 2498273:tid 2498273] (70014)End of file found: [client 216.73.216.199:56996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:04:59.022659 2026] [authz_core:error] [pid 2500197:tid 2500197] [client 66.249.66.33:47681] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:04:59.025328 2026] [authz_core:error] [pid 2500197:tid 2500197] [client 66.249.66.33:47681] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:04:59.313365 2026] [ssl:error] [pid 2490051:tid 2490051] (70014)End of file found: [client 216.73.216.199:13243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:00.383976 2026] [ssl:error] [pid 2499335:tid 2499335] (EAI 2)Name or service not known: [client 144.76.19.72:22960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:00.384025 2026] [ssl:error] [pid 2499335:tid 2499335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:00.436491 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:22964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:00.436520 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:00.704963 2026] [authz_core:error] [pid 2474825:tid 2474825] [client 65.108.120.25:33174] AH01630: client denied by server configuration: /home/robincou/public_html/error_log
[Thu Jul 30 09:05:00.960744 2026] [access_compat:error] [pid 2495628:tid 2495628] [client 20.104.16.169:25040] AH01797: client denied by server configuration: /home/tompalm/public_html/wp-content/uploads/dlm_uploads/
[Thu Jul 30 09:05:03.251121 2026] [ssl:error] [pid 2491387:tid 2491387] (70014)End of file found: [client 216.73.216.199:6367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:03.494590 2026] [ssl:error] [pid 2500191:tid 2500191] (EAI 2)Name or service not known: [client 144.76.19.72:22976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:03.494626 2026] [ssl:error] [pid 2500191:tid 2500191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:03.551438 2026] [ssl:error] [pid 2500062:tid 2500062] (EAI 2)Name or service not known: [client 144.76.19.72:22990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:03.551465 2026] [ssl:error] [pid 2500062:tid 2500062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:04.142170 2026] [core:error] [pid 2500148:tid 2500148] [client 45.227.253.15:34360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:04.142204 2026] [core:error] [pid 2500148:tid 2500148] [client 45.227.253.15:34360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:06.559957 2026] [ssl:error] [pid 2499170:tid 2499170] (70014)End of file found: [client 216.73.216.199:63168] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:06.607960 2026] [ssl:error] [pid 2500148:tid 2500148] (EAI 2)Name or service not known: [client 144.76.19.72:23002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:06.608001 2026] [ssl:error] [pid 2500148:tid 2500148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:06.664421 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:23014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:06.664443 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:07.065172 2026] [ssl:error] [pid 2500190:tid 2500190] (70014)End of file found: [client 216.73.216.199:1943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:09.746328 2026] [core:error] [pid 2495628:tid 2495628] (13)Permission denied: [client 216.73.216.199:59231] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 09:05:09.903797 2026] [ssl:error] [pid 2500761:tid 2500761] (EAI 2)Name or service not known: [client 144.76.19.72:47368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:09.903844 2026] [ssl:error] [pid 2500761:tid 2500761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:11.007427 2026] [ssl:error] [pid 2500802:tid 2500802] (EAI 2)Name or service not known: [client 144.76.19.72:47380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:11.007469 2026] [ssl:error] [pid 2500802:tid 2500802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:11.689143 2026] [authz_core:error] [pid 2500102:tid 2500102] [client 57.141.0.61:34132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:05:11.689759 2026] [authz_core:error] [pid 2500102:tid 2500102] [client 57.141.0.61:34132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:05:11.752905 2026] [authz_core:error] [pid 2499170:tid 2499170] [client 66.249.66.35:58567] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:05:11.755553 2026] [authz_core:error] [pid 2499170:tid 2499170] [client 66.249.66.35:58567] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:05:12.982118 2026] [core:error] [pid 2495628:tid 2495628] (13)Permission denied: [client 216.73.216.199:59231] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2418076.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.d639ccbc.tmp
[Thu Jul 30 09:05:14.062973 2026] [ssl:error] [pid 2500101:tid 2500101] (EAI 2)Name or service not known: [client 144.76.19.72:47390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:14.063003 2026] [ssl:error] [pid 2500101:tid 2500101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:14.117816 2026] [ssl:error] [pid 2500147:tid 2500147] (EAI 2)Name or service not known: [client 144.76.19.72:47406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:14.117848 2026] [ssl:error] [pid 2500147:tid 2500147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:14.186488 2026] [ssl:error] [pid 2495628:tid 2495628] (70014)End of file found: [client 216.73.216.199:59231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:14.750977 2026] [security2:error] [pid 2490041:tid 2490041] [client 94.154.43.184:24648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "unique-pr.co.uk"] [uri "/.env"] [unique_id "amsFuu-joVvdYTuBjjUEZgAAADc"]
[Thu Jul 30 09:05:14.751186 2026] [security2:error] [pid 2490041:tid 2490041] [client 94.154.43.184:24648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "unique-pr.co.uk"] [uri "/.env"] [unique_id "amsFuu-joVvdYTuBjjUEZgAAADc"]
[Thu Jul 30 09:05:14.751381 2026] [security2:error] [pid 2490041:tid 2490041] [client 94.154.43.184:24648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "unique-pr.co.uk"] [uri "/.env"] [unique_id "amsFuu-joVvdYTuBjjUEZgAAADc"]
[Thu Jul 30 09:05:14.766290 2026] [security2:error] [pid 2498883:tid 2498883] [client 85.208.98.23:31566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsFumcTeRVednrrM6I5iwAAAA0"]
[Thu Jul 30 09:05:14.870924 2026] [core:error] [pid 2500761:tid 2500761] (13)Permission denied: [client 216.73.216.199:38775] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3525965.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.20236f32.tmp
[Thu Jul 30 09:05:15.088804 2026] [core:error] [pid 2500148:tid 2500148] (13)Permission denied: [client 216.73.216.199:49126] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3173703.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.aa1767a7.tmp
[Thu Jul 30 09:05:15.691215 2026] [ssl:error] [pid 2500148:tid 2500148] (70014)End of file found: [client 216.73.216.199:49126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:16.292595 2026] [ssl:error] [pid 2500761:tid 2500761] (70014)End of file found: [client 216.73.216.199:38775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:16.808485 2026] [authz_core:error] [pid 2500193:tid 2500193] [client 57.141.0.6:56230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:05:16.809118 2026] [authz_core:error] [pid 2500193:tid 2500193] [client 57.141.0.6:56230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:05:17.189879 2026] [ssl:error] [pid 2500801:tid 2500801] (EAI 2)Name or service not known: [client 144.76.19.72:47420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:17.189935 2026] [ssl:error] [pid 2500801:tid 2500801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:17.243194 2026] [ssl:error] [pid 2495675:tid 2495675] (EAI 2)Name or service not known: [client 144.76.19.72:47424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:17.243217 2026] [ssl:error] [pid 2495675:tid 2495675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:19.492317 2026] [ssl:error] [pid 2484694:tid 2484694] (70014)End of file found: [client 216.73.216.199:38842] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:20.326907 2026] [ssl:error] [pid 2500196:tid 2500196] (EAI 2)Name or service not known: [client 144.76.19.72:21182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:20.326950 2026] [ssl:error] [pid 2500196:tid 2500196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:20.395256 2026] [ssl:error] [pid 2500146:tid 2500146] (EAI 2)Name or service not known: [client 144.76.19.72:21184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:20.395283 2026] [ssl:error] [pid 2500146:tid 2500146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:21.001658 2026] [core:error] [pid 2500149:tid 2500149] (13)Permission denied: [client 216.73.216.199:64112] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3521893.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.451e691a.tmp
[Thu Jul 30 09:05:21.901815 2026] [core:error] [pid 2500146:tid 2500146] (13)Permission denied: [client 216.73.216.199:1549] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1949089.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f7214749.tmp
[Thu Jul 30 09:05:22.011524 2026] [core:error] [pid 2500146:tid 2500146] (13)Permission denied: [client 216.73.216.199:1549] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1778453.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f63db822.tmp
[Thu Jul 30 09:05:22.312936 2026] [ssl:error] [pid 2500146:tid 2500146] (70014)End of file found: [client 216.73.216.199:1549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:22.614259 2026] [ssl:error] [pid 2500149:tid 2500149] (70014)End of file found: [client 216.73.216.199:64112] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:23.448325 2026] [ssl:error] [pid 2500195:tid 2500195] (EAI 2)Name or service not known: [client 144.76.19.72:21186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:23.448358 2026] [ssl:error] [pid 2500195:tid 2500195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:23.460039 2026] [core:error] [pid 2500761:tid 2500761] [client 173.252.82.45:53478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:23.460059 2026] [core:error] [pid 2500761:tid 2500761] [client 173.252.82.45:53478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:23.506960 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:21202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:23.506983 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:24.906766 2026] [core:error] [pid 2500761:tid 2500761] (13)Permission denied: [client 216.73.216.199:32616] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rud_item/objects
[Thu Jul 30 09:05:25.908772 2026] [authz_core:error] [pid 2500197:tid 2500197] [client 57.141.0.32:63790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:05:25.909393 2026] [authz_core:error] [pid 2500197:tid 2500197] [client 57.141.0.32:63790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:05:26.328202 2026] [security2:error] [pid 2497456:tid 2497456] [client 114.119.135.136:42651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582502400/request_format~html/cat_ids~30"] [unique_id "amsFxluFxvNnEy1Af1c8SwAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E24-2-2020
[Thu Jul 30 09:05:26.560332 2026] [ssl:error] [pid 2500197:tid 2500197] (EAI 2)Name or service not known: [client 144.76.19.72:21210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:26.560361 2026] [ssl:error] [pid 2500197:tid 2500197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:26.612484 2026] [ssl:error] [pid 2501305:tid 2501305] (EAI 2)Name or service not known: [client 144.76.19.72:21224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:26.612520 2026] [ssl:error] [pid 2501305:tid 2501305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:27.157560 2026] [core:error] [pid 2498273:tid 2498273] (13)Permission denied: [client 216.73.216.199:35724] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/free_calls
[Thu Jul 30 09:05:27.170465 2026] [authz_core:error] [pid 2500851:tid 2500851] [client 57.141.0.64:33524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:05:27.171093 2026] [authz_core:error] [pid 2500851:tid 2500851] [client 57.141.0.64:33524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:05:27.378003 2026] [core:error] [pid 2501305:tid 2501305] [client 66.249.64.171:61345] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:27.378025 2026] [core:error] [pid 2501305:tid 2501305] [client 66.249.64.171:61345] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:27.394364 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/user_namespace/store_user
[Thu Jul 30 09:05:27.695657 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/signal_cache/store_user
[Thu Jul 30 09:05:27.966388 2026] [security2:error] [pid 2501347:tid 2501347] [client 114.119.135.136:42667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582502400/request_format~html/cat_ids~30"] [unique_id "amsFxxZKaFmB6lNfdNR_hQAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E24-2-2020
[Thu Jul 30 09:05:28.440454 2026] [core:error] [pid 2500851:tid 2500851] [client 66.249.64.171:37833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:28.440483 2026] [core:error] [pid 2500851:tid 2500851] [client 66.249.64.171:37833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:29.202890 2026] [core:error] [pid 2498273:tid 2498273] (13)Permission denied: [client 216.73.216.199:35724] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/user_namespace/red_zone
[Thu Jul 30 09:05:29.668707 2026] [ssl:error] [pid 2498236:tid 2498236] (EAI 2)Name or service not known: [client 144.76.19.72:23886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:29.668751 2026] [ssl:error] [pid 2498236:tid 2498236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:29.721718 2026] [ssl:error] [pid 2500147:tid 2500147] (EAI 2)Name or service not known: [client 144.76.19.72:23896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:29.721750 2026] [ssl:error] [pid 2500147:tid 2500147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:30.105963 2026] [ssl:error] [pid 2498273:tid 2498273] (70014)End of file found: [client 216.73.216.199:35724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:32.430326 2026] [core:error] [pid 2495411:tid 2495411] [client 66.249.64.171:63400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:32.430351 2026] [core:error] [pid 2495411:tid 2495411] [client 66.249.64.171:63400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:32.676887 2026] [core:error] [pid 2501306:tid 2501306] [client 57.141.0.65:31040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:32.676920 2026] [core:error] [pid 2501306:tid 2501306] [client 57.141.0.65:31040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:32.777424 2026] [ssl:error] [pid 2500802:tid 2500802] (EAI 2)Name or service not known: [client 144.76.19.72:23898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:32.777452 2026] [ssl:error] [pid 2500802:tid 2500802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:32.816985 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3859604.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.4f2b9560.tmp
[Thu Jul 30 09:05:32.833083 2026] [ssl:error] [pid 2501270:tid 2501270] (EAI 2)Name or service not known: [client 144.76.19.72:23908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:32.833115 2026] [ssl:error] [pid 2501270:tid 2501270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:32.906509 2026] [security2:error] [pid 2490051:tid 2490051] [client 85.208.96.207:16394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/gary-peters-wife"] [unique_id "amsFzHOiZsGZHWam5dbAlwAAAD4"]
[Thu Jul 30 09:05:33.417648 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/remote_node_defrag_ratio
[Thu Jul 30 09:05:33.718583 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-248/partial
[Thu Jul 30 09:05:34.923526 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3856293.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f9942bdf.tmp
[Thu Jul 30 09:05:35.387469 2026] [authz_core:error] [pid 2495672:tid 2495672] [client 57.141.0.45:49624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:05:35.388098 2026] [authz_core:error] [pid 2495672:tid 2495672] [client 57.141.0.45:49624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:05:35.530318 2026] [core:error] [pid 2498883:tid 2498883] (1)Operation not permitted: [client 216.73.216.199:45409] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/crypto
[Thu Jul 30 09:05:35.831772 2026] [core:error] [pid 2498883:tid 2498883] (13)Permission denied: [client 216.73.216.199:45409] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3126948.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.4f55bf2d.tmp
[Thu Jul 30 09:05:35.913130 2026] [ssl:error] [pid 2500101:tid 2500101] (EAI 2)Name or service not known: [client 144.76.19.72:23924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:35.913156 2026] [ssl:error] [pid 2500101:tid 2500101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:35.970874 2026] [ssl:error] [pid 2490043:tid 2490043] (EAI 2)Name or service not known: [client 144.76.19.72:23926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:35.970900 2026] [ssl:error] [pid 2490043:tid 2490043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:36.132203 2026] [core:error] [pid 2498883:tid 2498883] (13)Permission denied: [client 216.73.216.199:45409] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2839747.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.65b762dc.tmp
[Thu Jul 30 09:05:37.031121 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/thunderbolt/drivers/pci:thunderbolt/bind
[Thu Jul 30 09:05:37.936854 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1340119.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.9ff87edd.tmp
[Thu Jul 30 09:05:38.538686 2026] [core:error] [pid 2500197:tid 2500197] (13)Permission denied: [client 216.73.216.199:29260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1080668.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.4e035f88.tmp
[Thu Jul 30 09:05:39.066938 2026] [ssl:error] [pid 2500851:tid 2500851] (EAI 2)Name or service not known: [client 144.76.19.72:23938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:39.066972 2026] [ssl:error] [pid 2500851:tid 2500851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:39.123473 2026] [ssl:error] [pid 2500147:tid 2500147] (EAI 2)Name or service not known: [client 144.76.19.72:23954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:39.123501 2026] [ssl:error] [pid 2500147:tid 2500147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:39.142148 2026] [ssl:error] [pid 2500197:tid 2500197] (70014)End of file found: [client 216.73.216.199:29260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:39.446959 2026] [ssl:error] [pid 2498883:tid 2498883] (70014)End of file found: [client 216.73.216.199:45409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:40.650877 2026] [core:error] [pid 2499335:tid 2499335] (13)Permission denied: [client 216.73.216.199:39447] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3732103.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.5307db2b.tmp
[Thu Jul 30 09:05:41.373396 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:05:41.458433 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 09:05:41.458480 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:41.543250 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wicked.php
[Thu Jul 30 09:05:41.543291 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:41.628370 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wpx.php
[Thu Jul 30 09:05:41.628413 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:41.713145 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 09:05:41.713191 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:41.798119 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/1xmomo.php
[Thu Jul 30 09:05:41.798168 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:41.891197 2026] [security2:error] [pid 2498236:tid 2498236] [client 85.208.98.29:33758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/esnek-metal-k.html"] [unique_id "amsF1c3H6Lckg-u8LT-3PwAAAAA"]
[Thu Jul 30 09:05:41.896005 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/1revo.php
[Thu Jul 30 09:05:41.896045 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:41.980865 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/cong.php
[Thu Jul 30 09:05:41.980911 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.066289 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 09:05:42.066339 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.150988 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/srontol.php
[Thu Jul 30 09:05:42.151026 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.156236 2026] [ssl:error] [pid 2499335:tid 2499335] (70014)End of file found: [client 216.73.216.199:39447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:42.179591 2026] [ssl:error] [pid 2500802:tid 2500802] (EAI 2)Name or service not known: [client 144.76.19.72:61068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:42.179618 2026] [ssl:error] [pid 2500802:tid 2500802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:42.235835 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/reop3.php
[Thu Jul 30 09:05:42.235884 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.236910 2026] [ssl:error] [pid 2498236:tid 2498236] (EAI 2)Name or service not known: [client 144.76.19.72:61074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:42.236935 2026] [ssl:error] [pid 2498236:tid 2498236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:42.320561 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 09:05:42.320616 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.405306 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/domvf.php
[Thu Jul 30 09:05:42.405350 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.490633 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/zero.php
[Thu Jul 30 09:05:42.490681 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.575365 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/002.php
[Thu Jul 30 09:05:42.575409 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.661458 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/thoms.php
[Thu Jul 30 09:05:42.661506 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.746162 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/fi22.php
[Thu Jul 30 09:05:42.746206 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:42.830889 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:05:42.916025 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/82.php
[Thu Jul 30 09:05:42.916104 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.000783 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/sx.php
[Thu Jul 30 09:05:43.000829 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.085483 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/dex.php
[Thu Jul 30 09:05:43.085528 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.170626 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 09:05:43.170670 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.255433 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/black.php
[Thu Jul 30 09:05:43.255477 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.340141 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/loader.php
[Thu Jul 30 09:05:43.340181 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.415718 2026] [security2:error] [pid 2498236:tid 2498236] [client 85.208.96.205:39386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/new-year-fireworks-in-the-woodlands"] [unique_id "amsF183H6Lckg-u8LT-3QAAAAAA"]
[Thu Jul 30 09:05:43.425604 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/file61.php
[Thu Jul 30 09:05:43.425644 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.510727 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-css.php
[Thu Jul 30 09:05:43.510772 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.595379 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blink.php
[Thu Jul 30 09:05:43.595421 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.681062 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/txets.php
[Thu Jul 30 09:05:43.681124 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.766006 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/pucci.php
[Thu Jul 30 09:05:43.766054 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.850991 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/xwpg.php
[Thu Jul 30 09:05:43.851038 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:43.935790 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 09:05:43.935838 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.020545 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 09:05:44.020603 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.105441 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 09:05:44.105488 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.190384 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:05:44.275019 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 09:05:44.275061 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.360008 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/xyn.php
[Thu Jul 30 09:05:44.360052 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.444717 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-wp.php
[Thu Jul 30 09:05:44.444761 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.529263 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/aw.php
[Thu Jul 30 09:05:44.529304 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.578945 2026] [ssl:error] [pid 2495672:tid 2495672] (70014)End of file found: [client 216.73.216.199:34044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:44.614405 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 09:05:44.614465 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.699540 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/yawa.php
[Thu Jul 30 09:05:44.699601 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.784496 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/sym403.php
[Thu Jul 30 09:05:44.784538 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:44.869364 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:05:44.873050 2026] [core:error] [pid 2501347:tid 2501347] (13)Permission denied: [client 216.73.216.199:23402] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/4014933.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.ca7f8bf6.tmp
[Thu Jul 30 09:05:44.954235 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/adminner.php
[Thu Jul 30 09:05:44.954283 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.039202 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/yup.php
[Thu Jul 30 09:05:45.039253 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.124294 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/config.json.php
[Thu Jul 30 09:05:45.124346 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.173670 2026] [core:error] [pid 2501347:tid 2501347] (13)Permission denied: [client 216.73.216.199:23402] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3560512.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.2fbf599c.tmp
[Thu Jul 30 09:05:45.209347 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:05:45.293446 2026] [ssl:error] [pid 2500146:tid 2500146] (EAI 2)Name or service not known: [client 144.76.19.72:61082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:45.293473 2026] [ssl:error] [pid 2500146:tid 2500146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:45.294411 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/2.php
[Thu Jul 30 09:05:45.294453 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.349129 2026] [ssl:error] [pid 2501856:tid 2501856] (EAI 2)Name or service not known: [client 144.76.19.72:61090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:45.349168 2026] [ssl:error] [pid 2501856:tid 2501856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:45.379228 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.update.php
[Thu Jul 30 09:05:45.379273 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.464588 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 09:05:45.464630 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.550504 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:05:45.636481 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/spadex.php
[Thu Jul 30 09:05:45.636526 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.721561 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/mg.php
[Thu Jul 30 09:05:45.721616 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.808775 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/fnstall.php
[Thu Jul 30 09:05:45.808820 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.894542 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/ortasekerli1.php
[Thu Jul 30 09:05:45.894601 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:45.979388 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/sump1.php
[Thu Jul 30 09:05:45.979439 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.064474 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 09:05:46.064525 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.149366 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-post-data.php
[Thu Jul 30 09:05:46.149410 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.234130 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/root.php
[Thu Jul 30 09:05:46.234191 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.318995 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/v543.php
[Thu Jul 30 09:05:46.319046 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.377998 2026] [core:error] [pid 2501347:tid 2501347] (13)Permission denied: [client 216.73.216.199:23402] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_tree_mark/store_user
[Thu Jul 30 09:05:46.405058 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/sixxis.php
[Thu Jul 30 09:05:46.405121 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.490768 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/ip.php
[Thu Jul 30 09:05:46.490813 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.577018 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/kq1.php
[Thu Jul 30 09:05:46.577087 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.661850 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/fw
[Thu Jul 30 09:05:46.678997 2026] [core:error] [pid 2501347:tid 2501347] (13)Permission denied: [client 216.73.216.199:23402] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/sunrpc/sections/__tracepoints
[Thu Jul 30 09:05:46.746801 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/h02ugyh.php
[Thu Jul 30 09:05:46.746852 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.832469 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-temp.php
[Thu Jul 30 09:05:46.832512 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:46.917460 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:05:46.981083 2026] [ssl:error] [pid 2501347:tid 2501347] (70014)End of file found: [client 216.73.216.199:23402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:47.002437 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:05:47.087475 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:05:47.172835 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/jj.php
[Thu Jul 30 09:05:47.172898 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.257606 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/class-walker-footer-dev.php
[Thu Jul 30 09:05:47.257656 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.342671 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/xpwer1.php
[Thu Jul 30 09:05:47.342721 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.427431 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/flox.php
[Thu Jul 30 09:05:47.427476 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.512333 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/popo.php
[Thu Jul 30 09:05:47.512381 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.597169 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/yas.php
[Thu Jul 30 09:05:47.597226 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.681920 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/water.php
[Thu Jul 30 09:05:47.681969 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.768023 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/nano.php
[Thu Jul 30 09:05:47.768090 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.853483 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/moon.php
[Thu Jul 30 09:05:47.853537 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:47.939011 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-info.php
[Thu Jul 30 09:05:47.939061 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.024436 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 09:05:48.024481 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.109332 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/2000.php
[Thu Jul 30 09:05:48.109380 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.194118 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/122.php
[Thu Jul 30 09:05:48.194162 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.282015 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/mds.php
[Thu Jul 30 09:05:48.282059 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.366943 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/zc-208.php
[Thu Jul 30 09:05:48.366993 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.421338 2026] [ssl:error] [pid 2500193:tid 2500193] (EAI 2)Name or service not known: [client 144.76.19.72:61104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:48.421386 2026] [ssl:error] [pid 2500193:tid 2500193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:48.451664 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/sid4.php
[Thu Jul 30 09:05:48.451706 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.474745 2026] [ssl:error] [pid 2500147:tid 2500147] (EAI 2)Name or service not known: [client 144.76.19.72:61116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:48.474772 2026] [ssl:error] [pid 2500147:tid 2500147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:48.536780 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:05:48.621890 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wmore1.php
[Thu Jul 30 09:05:48.621936 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.706900 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/solo1.php
[Thu Jul 30 09:05:48.706945 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:48.784408 2026] [core:error] [pid 2500761:tid 2500761] (13)Permission denied: [client 216.73.216.199:52674] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/907837.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f3acfc55.tmp
[Thu Jul 30 09:05:48.792235 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:05:48.876791 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:05:48.961629 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/public
[Thu Jul 30 09:05:49.046375 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/output.php
[Thu Jul 30 09:05:49.046419 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.131160 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-file-120.php
[Thu Jul 30 09:05:49.131205 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.215996 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/special.php
[Thu Jul 30 09:05:49.216036 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.300747 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 09:05:49.300789 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.385546 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/index.php
[Thu Jul 30 09:05:49.385631 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.471748 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/w1px.php
[Thu Jul 30 09:05:49.471795 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.561501 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/js.php
[Thu Jul 30 09:05:49.561548 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.646583 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/core.php
[Thu Jul 30 09:05:49.646634 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.731409 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/fffm.php
[Thu Jul 30 09:05:49.731451 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.817527 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/ww.php
[Thu Jul 30 09:05:49.817595 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:49.902275 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/domvf.php
[Thu Jul 30 09:05:49.902319 2026] [access_compat:error] [pid 2474825:tid 2474825] [client 20.48.234.177:27035] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.072955 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/echkm.php
[Thu Jul 30 09:05:50.073000 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.157533 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/ano.php
[Thu Jul 30 09:05:50.157587 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.242650 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/ah25.php
[Thu Jul 30 09:05:50.242697 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.327299 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/term.php
[Thu Jul 30 09:05:50.327342 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.411902 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/we.php
[Thu Jul 30 09:05:50.411947 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.496423 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/zip-onee.php
[Thu Jul 30 09:05:50.496467 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.581847 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/il.php
[Thu Jul 30 09:05:50.581892 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.600425 2026] [core:error] [pid 2500761:tid 2500761] (13)Permission denied: [client 216.73.216.199:52674] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1086264.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.596a01d8.tmp
[Thu Jul 30 09:05:50.667488 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/one.php
[Thu Jul 30 09:05:50.667531 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.747522 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.31:63752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:05:50.748161 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.31:63752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:05:50.752437 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/002.php
[Thu Jul 30 09:05:50.752474 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.837503 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/file1.php
[Thu Jul 30 09:05:50.837547 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:50.922212 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/akimet.php
[Thu Jul 30 09:05:50.922256 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.007010 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/reop3.php
[Thu Jul 30 09:05:51.007052 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.094182 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/h.php
[Thu Jul 30 09:05:51.094229 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.179508 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/2x.php
[Thu Jul 30 09:05:51.179557 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.205500 2026] [core:error] [pid 2500761:tid 2500761] (13)Permission denied: [client 216.73.216.199:52674] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPLITEv6/store_user
[Thu Jul 30 09:05:51.264254 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/petx.php
[Thu Jul 30 09:05:51.264297 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.349033 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/zxz.php
[Thu Jul 30 09:05:51.349091 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.435091 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/2.php
[Thu Jul 30 09:05:51.435135 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.507271 2026] [ssl:error] [pid 2500761:tid 2500761] (70014)End of file found: [client 216.73.216.199:52674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:51.519894 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/op.php
[Thu Jul 30 09:05:51.519938 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.533149 2026] [ssl:error] [pid 2500147:tid 2500147] (EAI 2)Name or service not known: [client 144.76.19.72:61970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:51.533175 2026] [ssl:error] [pid 2500147:tid 2500147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:51.586230 2026] [ssl:error] [pid 2500195:tid 2500195] (EAI 2)Name or service not known: [client 144.76.19.72:61976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:51.586258 2026] [ssl:error] [pid 2500195:tid 2500195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:51.604721 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/a5.php
[Thu Jul 30 09:05:51.604768 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.689971 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/ws80.php
[Thu Jul 30 09:05:51.690015 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.777887 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/xa.php
[Thu Jul 30 09:05:51.777929 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.862592 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/asd67.php
[Thu Jul 30 09:05:51.862638 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:51.952697 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/bk.php
[Thu Jul 30 09:05:51.952740 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.038617 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-links.php
[Thu Jul 30 09:05:52.038664 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.123633 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/mosty.php
[Thu Jul 30 09:05:52.123678 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.208267 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/sump3.php
[Thu Jul 30 09:05:52.208311 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.292853 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/first.php
[Thu Jul 30 09:05:52.292893 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.377694 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/acp.php
[Thu Jul 30 09:05:52.377737 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.462429 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-good.php
[Thu Jul 30 09:05:52.462473 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.547504 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/daerl3.php
[Thu Jul 30 09:05:52.547549 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.632235 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/php5.php
[Thu Jul 30 09:05:52.632278 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.720392 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/xoot.php
[Thu Jul 30 09:05:52.720440 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.805992 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/clxcc.php
[Thu Jul 30 09:05:52.806034 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.891267 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/ai.php
[Thu Jul 30 09:05:52.891311 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:52.976206 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/nwflm.php
[Thu Jul 30 09:05:52.976251 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.060858 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/hypo.php
[Thu Jul 30 09:05:53.060913 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.145548 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/w3llscc.php
[Thu Jul 30 09:05:53.145599 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.230328 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/11PJcpMFsD8B.php
[Thu Jul 30 09:05:53.230372 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.315432 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 09:05:53.315478 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.400402 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/fnstall.php
[Thu Jul 30 09:05:53.400447 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.485084 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/edorxrr.php
[Thu Jul 30 09:05:53.485130 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.569586 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/setup.php
[Thu Jul 30 09:05:53.569631 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.654517 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/6.php
[Thu Jul 30 09:05:53.654564 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.698943 2026] [core:error] [pid 2500147:tid 2500147] (13)Permission denied: [client 216.73.216.199:30178] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/order
[Thu Jul 30 09:05:53.739104 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/w3lls.php
[Thu Jul 30 09:05:53.739144 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.825849 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/99.php
[Thu Jul 30 09:05:53.825890 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:53.910378 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:05:53.995043 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/media.php
[Thu Jul 30 09:05:53.995098 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:54.079927 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:05:54.114328 2026] [core:error] [pid 2501306:tid 2501306] [client 66.249.64.170:53167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:54.114354 2026] [core:error] [pid 2501306:tid 2501306] [client 66.249.64.170:53167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:54.164623 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 09:05:54.164668 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:54.249147 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 09:05:54.249190 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:54.333686 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:05:54.418328 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:05:54.502969 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/memberfuns.php
[Thu Jul 30 09:05:54.503013 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:54.594061 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/orange3.php
[Thu Jul 30 09:05:54.594115 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:54.638102 2026] [ssl:error] [pid 2490051:tid 2490051] (EAI 2)Name or service not known: [client 144.76.19.72:61978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:54.638126 2026] [ssl:error] [pid 2490051:tid 2490051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:54.679746 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:05:54.693794 2026] [ssl:error] [pid 2501347:tid 2501347] (EAI 2)Name or service not known: [client 144.76.19.72:61988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:54.693823 2026] [ssl:error] [pid 2501347:tid 2501347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:54.697213 2026] [authz_core:error] [pid 2495672:tid 2495672] [client 57.141.0.28:57472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:05:54.697821 2026] [authz_core:error] [pid 2495672:tid 2495672] [client 57.141.0.28:57472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:05:54.765108 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-the.php
[Thu Jul 30 09:05:54.765148 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:54.811596 2026] [authz_core:error] [pid 2493808:tid 2493808] [client 20.104.16.169:42898] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 09:05:54.813378 2026] [access_compat:error] [pid 2493808:tid 2493808] [client 20.104.16.169:42898] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 09:05:54.815723 2026] [access_compat:error] [pid 2493808:tid 2493808] [client 20.104.16.169:42898] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 09:05:54.818990 2026] [access_compat:error] [pid 2493808:tid 2493808] [client 20.104.16.169:42898] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 09:05:54.822454 2026] [access_compat:error] [pid 2493808:tid 2493808] [client 20.104.16.169:42898] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 09:05:54.822486 2026] [access_compat:error] [pid 2493808:tid 2493808] [client 20.104.16.169:42898] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 09:05:54.849864 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/crgio.php
[Thu Jul 30 09:05:54.849905 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:54.936262 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/ws13.php
[Thu Jul 30 09:05:54.936304 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:55.021183 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/srontol.php
[Thu Jul 30 09:05:55.021251 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:55.106099 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/miru3.php
[Thu Jul 30 09:05:55.106143 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:55.190937 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/ingfo.php
[Thu Jul 30 09:05:55.190981 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:55.275801 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/ey5.php
[Thu Jul 30 09:05:55.275847 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:55.360298 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/fine.php
[Thu Jul 30 09:05:55.360340 2026] [access_compat:error] [pid 2484694:tid 2484694] [client 20.48.234.177:27011] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:05:56.416646 2026] [ssl:error] [pid 2500147:tid 2500147] (70014)End of file found: [client 216.73.216.199:30178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:57.621473 2026] [ssl:error] [pid 2500193:tid 2500193] (70014)End of file found: [client 216.73.216.199:25441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:57.750501 2026] [ssl:error] [pid 2495628:tid 2495628] (EAI 2)Name or service not known: [client 144.76.19.72:61992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:57.750528 2026] [ssl:error] [pid 2495628:tid 2495628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:57.804534 2026] [ssl:error] [pid 2500802:tid 2500802] (EAI 2)Name or service not known: [client 144.76.19.72:62002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:05:57.804563 2026] [ssl:error] [pid 2500802:tid 2500802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:05:58.112484 2026] [ssl:error] [pid 2499170:tid 2499170] (70014)End of file found: [client 216.73.216.199:16314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:05:58.332595 2026] [core:error] [pid 2495628:tid 2495628] [client 66.249.64.170:57470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:05:58.332621 2026] [core:error] [pid 2495628:tid 2495628] [client 66.249.64.170:57470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:00.552388 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.64.170:35401] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:00.552411 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.64.170:35401] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:00.863506 2026] [ssl:error] [pid 2502433:tid 2502433] (EAI 2)Name or service not known: [client 144.76.19.72:35210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:00.863553 2026] [ssl:error] [pid 2502433:tid 2502433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:00.954722 2026] [ssl:error] [pid 2498236:tid 2498236] (EAI 2)Name or service not known: [client 144.76.19.72:35224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:00.954748 2026] [ssl:error] [pid 2498236:tid 2498236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:01.031227 2026] [authz_core:error] [pid 2502436:tid 2502436] [client 57.141.0.19:21682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:01.031881 2026] [authz_core:error] [pid 2502436:tid 2502436] [client 57.141.0.19:21682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:01.151885 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.66.167:38357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:01.151910 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.66.167:38357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:01.173712 2026] [core:error] [pid 2502376:tid 2502376] [client 66.249.66.167:35753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:01.173742 2026] [core:error] [pid 2502376:tid 2502376] [client 66.249.66.167:35753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:04.041562 2026] [ssl:error] [pid 2494317:tid 2494317] (EAI 2)Name or service not known: [client 144.76.19.72:35232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:04.041606 2026] [ssl:error] [pid 2494317:tid 2494317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:04.097351 2026] [ssl:error] [pid 2500193:tid 2500193] (EAI 2)Name or service not known: [client 144.76.19.72:35244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:04.097382 2026] [ssl:error] [pid 2500193:tid 2500193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:04.561868 2026] [security2:error] [pid 2499335:tid 2499335] [client 216.73.216.199:57426] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/trusted-key.key"] [unique_id "amsF7LvIE0QoCweH6Vqk_gAAABE"]
[Thu Jul 30 09:06:04.562167 2026] [security2:error] [pid 2499335:tid 2499335] [client 216.73.216.199:57426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/trusted-key.key"] [unique_id "amsF7LvIE0QoCweH6Vqk_gAAABE"]
[Thu Jul 30 09:06:04.562403 2026] [security2:error] [pid 2499335:tid 2499335] [client 216.73.216.199:57426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/trusted-key.key"] [unique_id "amsF7LvIE0QoCweH6Vqk_gAAABE"]
[Thu Jul 30 09:06:05.170689 2026] [ssl:error] [pid 2499335:tid 2499335] (70014)End of file found: [client 216.73.216.199:57426] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:05.827175 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.64.170:46227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:05.827206 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.64.170:46227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:06.490376 2026] [authz_core:error] [pid 2500193:tid 2500193] [client 185.226.197.7:37152] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 09:06:06.491879 2026] [authz_core:error] [pid 2500193:tid 2500193] [client 185.226.197.7:37152] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 09:06:06.989930 2026] [ssl:error] [pid 2502436:tid 2502436] (70014)End of file found: [client 216.73.216.199:7602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:07.181331 2026] [ssl:error] [pid 2500849:tid 2500849] (EAI 2)Name or service not known: [client 144.76.19.72:35252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:07.181362 2026] [ssl:error] [pid 2500849:tid 2500849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:07.235966 2026] [ssl:error] [pid 2500195:tid 2500195] (EAI 2)Name or service not known: [client 144.76.19.72:35264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:07.235995 2026] [ssl:error] [pid 2500195:tid 2500195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:07.896318 2026] [core:error] [pid 2498273:tid 2498273] (13)Permission denied: [client 216.73.216.199:33456] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS0/close_delay
[Thu Jul 30 09:06:08.197634 2026] [ssl:error] [pid 2498273:tid 2498273] (70014)End of file found: [client 216.73.216.199:33456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:09.705796 2026] [authz_core:error] [pid 2493808:tid 2493808] [client 66.249.66.34:40553] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:06:09.708444 2026] [authz_core:error] [pid 2493808:tid 2493808] [client 66.249.66.34:40553] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:06:10.290535 2026] [ssl:error] [pid 2495672:tid 2495672] (EAI 2)Name or service not known: [client 144.76.19.72:57210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:10.290560 2026] [ssl:error] [pid 2495672:tid 2495672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:10.344602 2026] [ssl:error] [pid 2502435:tid 2502435] (EAI 2)Name or service not known: [client 144.76.19.72:57220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:10.344638 2026] [ssl:error] [pid 2502435:tid 2502435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:10.562092 2026] [cgi:error] [pid 2500849:tid 2500849] [client 173.252.70.37:37098] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:06:10.562218 2026] [cgi:error] [pid 2500849:tid 2500849] [client 173.252.70.37:37098] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:06:10.922721 2026] [ssl:error] [pid 2498236:tid 2498236] (70014)End of file found: [client 216.73.216.199:20334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:12.288043 2026] [authz_core:error] [pid 2502376:tid 2502376] [client 57.141.0.71:25614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:12.288676 2026] [authz_core:error] [pid 2502376:tid 2502376] [client 57.141.0.71:25614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:12.363507 2026] [core:error] [pid 2486665:tid 2486665] [client 66.249.64.170:42237] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:12.363534 2026] [core:error] [pid 2486665:tid 2486665] [client 66.249.64.170:42237] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:12.933838 2026] [cgi:error] [pid 2500196:tid 2500196] [client 20.104.22.47:62114] AH02812: stderr from /home/quantumc/mgarrmushrooms.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:06:13.402412 2026] [ssl:error] [pid 2490051:tid 2490051] (EAI 2)Name or service not known: [client 144.76.19.72:57224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:13.402443 2026] [ssl:error] [pid 2490051:tid 2490051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:13.456670 2026] [ssl:error] [pid 2501348:tid 2501348] (EAI 2)Name or service not known: [client 144.76.19.72:57226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:13.456701 2026] [ssl:error] [pid 2501348:tid 2501348] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:13.931430 2026] [ssl:error] [pid 2501270:tid 2501270] (70014)End of file found: [client 216.73.216.199:24925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:15.905598 2026] [authz_core:error] [pid 2501856:tid 2501856] [client 216.73.216.95:59131] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 09:06:16.357036 2026] [ssl:error] [pid 2502403:tid 2502403] (70014)End of file found: [client 216.73.216.199:19442] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:16.512593 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:57236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:16.512624 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:16.565672 2026] [ssl:error] [pid 2502404:tid 2502404] (EAI 2)Name or service not known: [client 144.76.19.72:57246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:16.565704 2026] [ssl:error] [pid 2502404:tid 2502404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:17.172022 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.56:31140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:17.172661 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.56:31140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:19.138797 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 152.53.35.166:51896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:19.139441 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 152.53.35.166:51896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:19.659046 2026] [ssl:error] [pid 2490051:tid 2490051] (EAI 2)Name or service not known: [client 144.76.19.72:46872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:19.659092 2026] [ssl:error] [pid 2490051:tid 2490051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:19.732604 2026] [ssl:error] [pid 2500849:tid 2500849] (EAI 2)Name or service not known: [client 144.76.19.72:46882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:19.732631 2026] [ssl:error] [pid 2500849:tid 2500849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:19.988439 2026] [ssl:error] [pid 2500062:tid 2500062] (70014)End of file found: [client 216.73.216.199:46618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:20.882708 2026] [ssl:error] [pid 2502433:tid 2502433] (70014)End of file found: [client 216.73.216.199:50306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:22.694421 2026] [ssl:error] [pid 2500196:tid 2500196] (70014)End of file found: [client 216.73.216.199:45058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:22.785706 2026] [ssl:error] [pid 2501856:tid 2501856] (EAI 2)Name or service not known: [client 144.76.19.72:46888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:22.785729 2026] [ssl:error] [pid 2501856:tid 2501856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:22.843526 2026] [ssl:error] [pid 2502403:tid 2502403] (EAI 2)Name or service not known: [client 144.76.19.72:46900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:22.843556 2026] [ssl:error] [pid 2502403:tid 2502403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:23.064446 2026] [authz_core:error] [pid 2502403:tid 2502403] [client 66.249.66.34:54537] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:06:23.067094 2026] [authz_core:error] [pid 2502403:tid 2502403] [client 66.249.66.34:54537] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:06:23.845360 2026] [core:error] [pid 2474825:tid 2474825] (13)Permission denied: [client 216.73.216.199:18534] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/srcutree/uevent
[Thu Jul 30 09:06:25.354418 2026] [ssl:error] [pid 2474825:tid 2474825] (70014)End of file found: [client 216.73.216.199:18534] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:25.899307 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:46916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:25.899345 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:25.957592 2026] [ssl:error] [pid 2495672:tid 2495672] (EAI 2)Name or service not known: [client 144.76.19.72:46926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:25.957620 2026] [ssl:error] [pid 2495672:tid 2495672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:26.354190 2026] [authz_core:error] [pid 2495671:tid 2495671] [client 40.77.167.51:56732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:26.354811 2026] [authz_core:error] [pid 2495671:tid 2495671] [client 40.77.167.51:56732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:27.934899 2026] [core:error] [pid 2502376:tid 2502376] [client 66.249.64.170:45005] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:27.934940 2026] [core:error] [pid 2502376:tid 2502376] [client 66.249.64.170:45005] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:28.381469 2026] [ssl:error] [pid 2503374:tid 2503374] (70014)End of file found: [client 216.73.216.199:12030] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:29.019893 2026] [ssl:error] [pid 2500196:tid 2500196] (EAI 2)Name or service not known: [client 144.76.19.72:46930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:29.019927 2026] [ssl:error] [pid 2500196:tid 2500196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:29.074627 2026] [ssl:error] [pid 2486665:tid 2486665] (EAI 2)Name or service not known: [client 144.76.19.72:46944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:29.074658 2026] [ssl:error] [pid 2486665:tid 2486665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:30.201614 2026] [ssl:error] [pid 2500761:tid 2500761] (70014)End of file found: [client 216.73.216.199:64903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:30.690786 2026] [ssl:error] [pid 2490051:tid 2490051] (70014)End of file found: [client 216.73.216.199:21334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:32.126974 2026] [ssl:error] [pid 2501306:tid 2501306] (EAI 2)Name or service not known: [client 144.76.19.72:29772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:32.127004 2026] [ssl:error] [pid 2501306:tid 2501306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:32.178865 2026] [ssl:error] [pid 2502376:tid 2502376] (EAI 2)Name or service not known: [client 144.76.19.72:29780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:32.178894 2026] [ssl:error] [pid 2502376:tid 2502376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:32.838307 2026] [core:error] [pid 2501347:tid 2501347] [client 66.249.64.170:44490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:32.838337 2026] [core:error] [pid 2501347:tid 2501347] [client 66.249.64.170:44490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:32.914636 2026] [access_compat:error] [pid 2500195:tid 2500195] [client 54.236.1.53:22827] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/10/hoodwinked.jpg
[Thu Jul 30 09:06:32.914771 2026] [access_compat:error] [pid 2500195:tid 2500195] [client 54.236.1.53:22827] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:06:35.235085 2026] [ssl:error] [pid 2503374:tid 2503374] (EAI 2)Name or service not known: [client 144.76.19.72:29782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:35.235131 2026] [ssl:error] [pid 2503374:tid 2503374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:35.288052 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:29798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:35.288098 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:36.536305 2026] [ssl:error] [pid 2501306:tid 2501306] (70014)End of file found: [client 216.73.216.199:53421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:36.988682 2026] [authz_core:error] [pid 2500761:tid 2500761] [client 57.141.0.39:33168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:36.989310 2026] [authz_core:error] [pid 2500761:tid 2500761] [client 57.141.0.39:33168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:38.357566 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:29810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:38.357610 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:38.437924 2026] [ssl:error] [pid 2503329:tid 2503329] (EAI 2)Name or service not known: [client 144.76.19.72:29812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:38.437956 2026] [ssl:error] [pid 2503329:tid 2503329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:38.851787 2026] [authz_core:error] [pid 2500761:tid 2500761] [client 57.141.0.48:21938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:38.852407 2026] [authz_core:error] [pid 2500761:tid 2500761] [client 57.141.0.48:21938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:39.245225 2026] [security2:error] [pid 2493808:tid 2493808] [client 216.73.216.199:22352] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysusers.d/dbus.conf"] [unique_id "amsGD2Uir7RL0W2kedYoeQAAABw"]
[Thu Jul 30 09:06:39.245510 2026] [security2:error] [pid 2493808:tid 2493808] [client 216.73.216.199:22352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysusers.d/dbus.conf"] [unique_id "amsGD2Uir7RL0W2kedYoeQAAABw"]
[Thu Jul 30 09:06:39.245740 2026] [security2:error] [pid 2493808:tid 2493808] [client 216.73.216.199:22352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysusers.d/dbus.conf"] [unique_id "amsGD2Uir7RL0W2kedYoeQAAABw"]
[Thu Jul 30 09:06:39.546566 2026] [ssl:error] [pid 2493808:tid 2493808] (70014)End of file found: [client 216.73.216.199:22352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:41.352494 2026] [ssl:error] [pid 2501270:tid 2501270] (70014)End of file found: [client 216.73.216.199:35557] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:41.495963 2026] [ssl:error] [pid 2500761:tid 2500761] (EAI 2)Name or service not known: [client 144.76.19.72:36748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:41.495988 2026] [ssl:error] [pid 2500761:tid 2500761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:41.553003 2026] [ssl:error] [pid 2500062:tid 2500062] (EAI 2)Name or service not known: [client 144.76.19.72:36752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:41.553027 2026] [ssl:error] [pid 2500062:tid 2500062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:43.057228 2026] [authz_core:error] [pid 2501347:tid 2501347] [client 57.141.0.23:56978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:43.057847 2026] [authz_core:error] [pid 2501347:tid 2501347] [client 57.141.0.23:56978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:43.466472 2026] [ssl:error] [pid 2474825:tid 2474825] (70014)End of file found: [client 216.73.216.199:57051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:44.608041 2026] [ssl:error] [pid 2502436:tid 2502436] (EAI 2)Name or service not known: [client 144.76.19.72:36772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:44.608087 2026] [ssl:error] [pid 2502436:tid 2502436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:44.661259 2026] [ssl:error] [pid 2503374:tid 2503374] (EAI 2)Name or service not known: [client 144.76.19.72:36784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:44.661285 2026] [ssl:error] [pid 2503374:tid 2503374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:44.920398 2026] [core:error] [pid 2502434:tid 2502434] [client 66.249.64.170:53649] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:44.920427 2026] [core:error] [pid 2502434:tid 2502434] [client 66.249.64.170:53649] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:45.664499 2026] [security2:error] [pid 2502436:tid 2502436] [client 185.191.171.19:43742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/how-to-use-lawson-portal"] [unique_id "amsGFVvdhZQPHiZpYsGjMwAAACI"]
[Thu Jul 30 09:06:46.548232 2026] [core:error] [pid 2502436:tid 2502436] [client 66.249.64.170:50125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:46.548257 2026] [core:error] [pid 2502436:tid 2502436] [client 66.249.64.170:50125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:47.714086 2026] [ssl:error] [pid 2502436:tid 2502436] (EAI 2)Name or service not known: [client 144.76.19.72:36792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:47.714117 2026] [ssl:error] [pid 2502436:tid 2502436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:47.767025 2026] [ssl:error] [pid 2500196:tid 2500196] (EAI 2)Name or service not known: [client 144.76.19.72:36802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:47.767061 2026] [ssl:error] [pid 2500196:tid 2500196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:47.981080 2026] [authz_core:error] [pid 2501270:tid 2501270] [client 57.141.0.47:64082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:47.981695 2026] [authz_core:error] [pid 2501270:tid 2501270] [client 57.141.0.47:64082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:48.244357 2026] [access_compat:error] [pid 2500196:tid 2500196] [client 45.158.164.139:58128] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:06:48.282800 2026] [ssl:error] [pid 2500062:tid 2500062] (70014)End of file found: [client 216.73.216.199:19134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:48.880780 2026] [ssl:error] [pid 2493808:tid 2493808] (70014)End of file found: [client 216.73.216.199:48199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:49.361179 2026] [authz_core:error] [pid 2500193:tid 2500193] [client 57.141.0.21:33604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:49.361800 2026] [authz_core:error] [pid 2500193:tid 2500193] [client 57.141.0.21:33604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:49.605550 2026] [access_compat:error] [pid 2501347:tid 2501347] [client 185.226.232.105:37366] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 09:06:50.838270 2026] [ssl:error] [pid 2502436:tid 2502436] (EAI 2)Name or service not known: [client 144.76.19.72:33328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:50.838307 2026] [ssl:error] [pid 2502436:tid 2502436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:50.891160 2026] [ssl:error] [pid 2500851:tid 2500851] (EAI 2)Name or service not known: [client 144.76.19.72:33336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:50.891193 2026] [ssl:error] [pid 2500851:tid 2500851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:51.895131 2026] [core:error] [pid 2495671:tid 2495671] (13)Permission denied: [client 216.73.216.199:7448] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS3/line
[Thu Jul 30 09:06:52.195093 2026] [ssl:error] [pid 2495671:tid 2495671] (70014)End of file found: [client 216.73.216.199:7448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:06:53.951463 2026] [ssl:error] [pid 2500062:tid 2500062] (EAI 2)Name or service not known: [client 144.76.19.72:33344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:53.951491 2026] [ssl:error] [pid 2500062:tid 2500062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:54.006923 2026] [ssl:error] [pid 2502436:tid 2502436] (EAI 2)Name or service not known: [client 144.76.19.72:33348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:54.006948 2026] [ssl:error] [pid 2502436:tid 2502436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:54.183825 2026] [security2:error] [pid 2493808:tid 2493808] [client 114.119.144.31:39153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582070400/request_format~html/cat_ids~18"] [unique_id "amsGHmUir7RL0W2kedYofQAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E19-2-2020
[Thu Jul 30 09:06:54.247386 2026] [authz_core:error] [pid 2500062:tid 2500062] [client 57.141.0.49:41568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:54.248010 2026] [authz_core:error] [pid 2500062:tid 2500062] [client 57.141.0.49:41568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:54.720199 2026] [security2:error] [pid 2504433:tid 2504433] [client 47.128.50.33:49698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amsGHluwAR7k9A7WOI_lZgAAAB4"]
[Thu Jul 30 09:06:55.596427 2026] [security2:error] [pid 2500148:tid 2500148] [client 185.191.171.6:28962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/metal-buildings-with-concrete-sc"] [unique_id "amsGHxU7GUsfqB72VpXligAAAB8"]
[Thu Jul 30 09:06:56.239160 2026] [security2:error] [pid 2491387:tid 2491387] [client 114.119.156.17:53661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/wp-content/uploads/2011/06/TARGETANGEL-645x200.jpg"] [unique_id "amsGIJAasg1ez0YpUefX-AAAAAY"], referer: http://www.localhero.org.uk/wp-content/uploads/2011/06/TARGETANGEL-645x200.jpg
[Thu Jul 30 09:06:56.343312 2026] [security2:error] [pid 2501347:tid 2501347] [client 114.119.144.31:39159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582070400/request_format~html/cat_ids~18"] [unique_id "amsGIBZKaFmB6lNfdNR_ogAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E19-2-2020
[Thu Jul 30 09:06:56.846362 2026] [security2:error] [pid 2474825:tid 2474825] [client 85.208.98.23:27752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsGIKdfdTwVb6TP7rydXgAAABM"]
[Thu Jul 30 09:06:56.996116 2026] [security2:error] [pid 2498273:tid 2498273] [client 85.208.98.23:29520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsGICoaDcScMv4hqhnS8gAAAAk"]
[Thu Jul 30 09:06:57.063293 2026] [ssl:error] [pid 2501348:tid 2501348] (EAI 2)Name or service not known: [client 144.76.19.72:33362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:57.063324 2026] [ssl:error] [pid 2501348:tid 2501348] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:57.116805 2026] [ssl:error] [pid 2500849:tid 2500849] (EAI 2)Name or service not known: [client 144.76.19.72:33374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:06:57.116830 2026] [ssl:error] [pid 2500849:tid 2500849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:06:57.933667 2026] [authz_core:error] [pid 2489879:tid 2489879] [client 57.141.0.35:37638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:06:57.934304 2026] [authz_core:error] [pid 2489879:tid 2489879] [client 57.141.0.35:37638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:06:59.581861 2026] [core:error] [pid 2504948:tid 2504948] [client 66.249.66.169:64912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:06:59.581906 2026] [core:error] [pid 2504948:tid 2504948] [client 66.249.66.169:64912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:00.206076 2026] [ssl:error] [pid 2489879:tid 2489879] (EAI 2)Name or service not known: [client 144.76.19.72:56582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:00.206105 2026] [ssl:error] [pid 2489879:tid 2489879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:00.261781 2026] [ssl:error] [pid 2499335:tid 2499335] (EAI 2)Name or service not known: [client 144.76.19.72:56596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:00.261812 2026] [ssl:error] [pid 2499335:tid 2499335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:03.316875 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:56610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:03.316903 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:03.368432 2026] [ssl:error] [pid 2498851:tid 2498851] (EAI 2)Name or service not known: [client 144.76.19.72:56614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:03.368461 2026] [ssl:error] [pid 2498851:tid 2498851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:06.426449 2026] [ssl:error] [pid 2502433:tid 2502433] (EAI 2)Name or service not known: [client 144.76.19.72:56618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:06.426478 2026] [ssl:error] [pid 2502433:tid 2502433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:06.482468 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:56632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:06.482493 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:07.871765 2026] [security2:error] [pid 2502404:tid 2502404] [client 114.119.134.146:27105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2010/A02-Chile-2010.pdf"] [unique_id "amsGK6Yws37aHVoX9_F65wAAABY"]
[Thu Jul 30 09:07:08.197560 2026] [core:error] [pid 2501306:tid 2501306] [client 66.249.64.170:48797] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:08.197595 2026] [core:error] [pid 2501306:tid 2501306] [client 66.249.64.170:48797] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:09.562475 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:55122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:09.562505 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:09.616556 2026] [ssl:error] [pid 2502435:tid 2502435] (EAI 2)Name or service not known: [client 144.76.19.72:55138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:09.616586 2026] [ssl:error] [pid 2502435:tid 2502435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:09.895221 2026] [security2:error] [pid 2504793:tid 2504793] [client 167.99.240.84:56656] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "mjs-services.com"] [uri "/xmlrpc.php"] [unique_id "amsGLfxjVceg8BwhAAwHRQAAAAw"]
[Thu Jul 30 09:07:12.697339 2026] [ssl:error] [pid 2504490:tid 2504490] (EAI 2)Name or service not known: [client 144.76.19.72:55150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:12.697368 2026] [ssl:error] [pid 2504490:tid 2504490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:12.749819 2026] [ssl:error] [pid 2502436:tid 2502436] (EAI 2)Name or service not known: [client 144.76.19.72:55158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:12.749866 2026] [ssl:error] [pid 2502436:tid 2502436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:15.803751 2026] [ssl:error] [pid 2489879:tid 2489879] (EAI 2)Name or service not known: [client 144.76.19.72:55168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:15.803775 2026] [ssl:error] [pid 2489879:tid 2489879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:15.860695 2026] [ssl:error] [pid 2504492:tid 2504492] (EAI 2)Name or service not known: [client 144.76.19.72:55182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:15.860739 2026] [ssl:error] [pid 2504492:tid 2504492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:16.786446 2026] [authz_core:error] [pid 2498273:tid 2498273] [client 57.141.0.59:23210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:16.787076 2026] [authz_core:error] [pid 2498273:tid 2498273] [client 57.141.0.59:23210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:16.853026 2026] [authz_core:error] [pid 2502436:tid 2502436] [client 57.141.0.69:56540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:16.853657 2026] [authz_core:error] [pid 2502436:tid 2502436] [client 57.141.0.69:56540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:17.792899 2026] [authz_core:error] [pid 2493808:tid 2493808] [client 57.141.0.11:48538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:17.793526 2026] [authz_core:error] [pid 2493808:tid 2493808] [client 57.141.0.11:48538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:18.681123 2026] [ssl:error] [pid 2498236:tid 2498236] (70014)End of file found: [client 216.73.216.199:32799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:07:18.939253 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:55194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:18.939292 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:18.995299 2026] [ssl:error] [pid 2500147:tid 2500147] (EAI 2)Name or service not known: [client 144.76.19.72:55204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:18.995339 2026] [ssl:error] [pid 2500147:tid 2500147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:20.788916 2026] [ssl:error] [pid 2502376:tid 2502376] (70014)End of file found: [client 216.73.216.199:60217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:07:22.006376 2026] [security2:error] [pid 2493808:tid 2493808] [client 114.119.139.133:59351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-796.xml"] [unique_id "amsGOmUir7RL0W2kedYohQAAABw"]
[Thu Jul 30 09:07:22.245113 2026] [ssl:error] [pid 2506011:tid 2506011] (EAI 2)Name or service not known: [client 144.76.19.72:37932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:22.245151 2026] [ssl:error] [pid 2506011:tid 2506011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:22.296948 2026] [ssl:error] [pid 2506011:tid 2506011] (EAI 2)Name or service not known: [client 144.76.19.72:37938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:22.296969 2026] [ssl:error] [pid 2506011:tid 2506011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:23.274895 2026] [authz_core:error] [pid 2501270:tid 2501270] [client 57.141.0.64:59982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:23.275517 2026] [authz_core:error] [pid 2501270:tid 2501270] [client 57.141.0.64:59982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:24.311854 2026] [ssl:error] [pid 2501788:tid 2501788] (70014)End of file found: [client 216.73.216.199:1514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:07:25.352375 2026] [ssl:error] [pid 2501270:tid 2501270] (EAI 2)Name or service not known: [client 144.76.19.72:37942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:25.352405 2026] [ssl:error] [pid 2501270:tid 2501270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:25.407992 2026] [ssl:error] [pid 2490051:tid 2490051] (EAI 2)Name or service not known: [client 144.76.19.72:37948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:25.408018 2026] [ssl:error] [pid 2490051:tid 2490051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:26.307493 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.3:34212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:26.308151 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.3:34212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:27.505499 2026] [authz_core:error] [pid 2504490:tid 2504490] [client 57.141.0.3:34222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:27.506129 2026] [authz_core:error] [pid 2504490:tid 2504490] [client 57.141.0.3:34222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:27.653415 2026] [lsapi:warn] [pid 2495628:tid 2495628] [client 34.163.147.250:39166] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 09:07:27.653454 2026] [lsapi:warn] [pid 2495628:tid 2495628] [client 34.163.147.250:39166] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 09:07:28.464523 2026] [ssl:error] [pid 2500101:tid 2500101] (EAI 2)Name or service not known: [client 144.76.19.72:37952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:28.464566 2026] [ssl:error] [pid 2500101:tid 2500101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:28.518049 2026] [ssl:error] [pid 2504490:tid 2504490] (EAI 2)Name or service not known: [client 144.76.19.72:37968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:28.518098 2026] [ssl:error] [pid 2504490:tid 2504490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:29.436136 2026] [ssl:error] [pid 2489879:tid 2489879] (5)Input/output error: [client 216.73.216.199:20083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:07:30.039160 2026] [security2:error] [pid 2503375:tid 2503375] [client 216.73.216.199:55621] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib64/cracklib_dict.pwd"] [unique_id "amsGQqqw87_Y67FN__nT7AAAABI"]
[Thu Jul 30 09:07:30.039453 2026] [security2:error] [pid 2503375:tid 2503375] [client 216.73.216.199:55621] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib64/cracklib_dict.pwd"] [unique_id "amsGQqqw87_Y67FN__nT7AAAABI"]
[Thu Jul 30 09:07:30.039688 2026] [security2:error] [pid 2503375:tid 2503375] [client 216.73.216.199:55621] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib64/cracklib_dict.pwd"] [unique_id "amsGQqqw87_Y67FN__nT7AAAABI"]
[Thu Jul 30 09:07:30.452541 2026] [security2:error] [pid 2493808:tid 2493808] [client 74.7.243.205:57244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/technicalnotes.htm"] [unique_id "amsGQmUir7RL0W2kedYohwAAABw"], referer: https://realphysics.blogspot.com
[Thu Jul 30 09:07:30.933929 2026] [security2:error] [pid 2500761:tid 2500761] [client 114.119.153.38:31601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/teak-root-wood-chopping-board"] [unique_id "amsGQvuy9LZllfErU9XuhQAAAAc"], referer: https://tripodhome.co.uk/product-category/gift
[Thu Jul 30 09:07:31.243139 2026] [core:error] [pid 2503375:tid 2503375] (13)Permission denied: [client 216.73.216.199:55621] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/slab_size
[Thu Jul 30 09:07:31.574301 2026] [ssl:error] [pid 2506011:tid 2506011] (EAI 2)Name or service not known: [client 144.76.19.72:46720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:31.574331 2026] [ssl:error] [pid 2506011:tid 2506011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:31.629838 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:46730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:31.629867 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:33.250694 2026] [authz_core:error] [pid 2506640:tid 2506640] [client 57.141.0.19:21138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:33.251341 2026] [authz_core:error] [pid 2506640:tid 2506640] [client 57.141.0.19:21138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:34.687661 2026] [ssl:error] [pid 2502404:tid 2502404] (EAI 2)Name or service not known: [client 144.76.19.72:46742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:34.687688 2026] [ssl:error] [pid 2502404:tid 2502404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:34.741813 2026] [ssl:error] [pid 2498273:tid 2498273] (EAI 2)Name or service not known: [client 144.76.19.72:46754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:34.741843 2026] [ssl:error] [pid 2498273:tid 2498273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:36.082086 2026] [ssl:error] [pid 2502436:tid 2502436] (70014)End of file found: [client 216.73.216.199:51373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:07:37.302811 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.53:55830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:37.303463 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.53:55830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:37.795266 2026] [ssl:error] [pid 2493808:tid 2493808] (EAI 2)Name or service not known: [client 144.76.19.72:46762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:37.795299 2026] [ssl:error] [pid 2493808:tid 2493808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:37.847954 2026] [ssl:error] [pid 2501788:tid 2501788] (EAI 2)Name or service not known: [client 144.76.19.72:46778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:37.847990 2026] [ssl:error] [pid 2501788:tid 2501788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:40.006454 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 57.141.0.70:26466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:40.007081 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 57.141.0.70:26466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:40.907314 2026] [ssl:error] [pid 2505950:tid 2505950] (EAI 2)Name or service not known: [client 144.76.19.72:20620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:40.907342 2026] [ssl:error] [pid 2505950:tid 2505950] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:40.962299 2026] [ssl:error] [pid 2506757:tid 2506757] (EAI 2)Name or service not known: [client 144.76.19.72:20622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:40.962342 2026] [ssl:error] [pid 2506757:tid 2506757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:41.194727 2026] [core:error] [pid 2500195:tid 2500195] (13)Permission denied: [client 216.73.216.199:10606] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/slab_size
[Thu Jul 30 09:07:43.981443 2026] [security2:error] [pid 2506758:tid 2506758] [client 85.208.98.16:49850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nike-stores-all-over-the-world-k.html"] [unique_id "amsGT-d5TqPfnYMItHeg4AAAACo"]
[Thu Jul 30 09:07:44.017784 2026] [ssl:error] [pid 2500148:tid 2500148] (EAI 2)Name or service not known: [client 144.76.19.72:20628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:44.017825 2026] [ssl:error] [pid 2500148:tid 2500148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:44.070630 2026] [ssl:error] [pid 2502376:tid 2502376] (EAI 2)Name or service not known: [client 144.76.19.72:20636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:44.070659 2026] [ssl:error] [pid 2502376:tid 2502376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:44.198356 2026] [authz_core:error] [pid 2504948:tid 2504948] [client 57.141.0.71:45134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:44.198975 2026] [authz_core:error] [pid 2504948:tid 2504948] [client 57.141.0.71:45134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:44.822754 2026] [core:error] [pid 2502404:tid 2502404] [client 66.249.64.171:42773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:44.822779 2026] [core:error] [pid 2502404:tid 2502404] [client 66.249.64.171:42773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:45.721201 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.37:50930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:45.722306 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.37:50930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:46.460410 2026] [core:error] [pid 2506687:tid 2506687] [client 66.249.66.195:44161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:46.460441 2026] [core:error] [pid 2506687:tid 2506687] [client 66.249.66.195:44161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:46.462038 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.66.168:50057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:46.462059 2026] [core:error] [pid 2498273:tid 2498273] [client 66.249.66.168:50057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:07:47.127249 2026] [ssl:error] [pid 2504433:tid 2504433] (EAI 2)Name or service not known: [client 144.76.19.72:20644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:47.127285 2026] [ssl:error] [pid 2504433:tid 2504433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:47.180915 2026] [ssl:error] [pid 2506760:tid 2506760] (EAI 2)Name or service not known: [client 144.76.19.72:20660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:47.180948 2026] [ssl:error] [pid 2506760:tid 2506760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:48.085384 2026] [authz_core:error] [pid 2506687:tid 2506687] [client 66.249.66.192:54359] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:07:48.088123 2026] [authz_core:error] [pid 2506687:tid 2506687] [client 66.249.66.192:54359] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:07:49.644863 2026] [access_compat:error] [pid 2506757:tid 2506757] [client 45.158.164.139:54836] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:07:50.259982 2026] [ssl:error] [pid 2501856:tid 2501856] (EAI 2)Name or service not known: [client 144.76.19.72:44420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:50.260019 2026] [ssl:error] [pid 2501856:tid 2501856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:50.311247 2026] [ssl:error] [pid 2504793:tid 2504793] (EAI 2)Name or service not known: [client 144.76.19.72:44422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:50.311278 2026] [ssl:error] [pid 2504793:tid 2504793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:51.547093 2026] [authz_core:error] [pid 2495671:tid 2495671] [client 57.141.0.27:46646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:51.547709 2026] [authz_core:error] [pid 2495671:tid 2495671] [client 57.141.0.27:46646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:53.367950 2026] [ssl:error] [pid 2506758:tid 2506758] (EAI 2)Name or service not known: [client 144.76.19.72:44432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:53.367984 2026] [ssl:error] [pid 2506758:tid 2506758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:53.424395 2026] [ssl:error] [pid 2501270:tid 2501270] (EAI 2)Name or service not known: [client 144.76.19.72:44446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:53.424427 2026] [ssl:error] [pid 2501270:tid 2501270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:53.983157 2026] [authz_core:error] [pid 2506758:tid 2506758] [client 57.141.0.66:63548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:53.983775 2026] [authz_core:error] [pid 2506758:tid 2506758] [client 57.141.0.66:63548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:54.255179 2026] [security2:error] [pid 2506758:tid 2506758] [client 94.154.43.187:37976] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.static1.alism.com"] [uri "/.env"] [unique_id "amsGWud5TqPfnYMItHeg5AAAACo"]
[Thu Jul 30 09:07:54.255378 2026] [security2:error] [pid 2506758:tid 2506758] [client 94.154.43.187:37976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.static1.alism.com"] [uri "/.env"] [unique_id "amsGWud5TqPfnYMItHeg5AAAACo"]
[Thu Jul 30 09:07:54.255603 2026] [security2:error] [pid 2506758:tid 2506758] [client 94.154.43.187:37976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.static1.alism.com"] [uri "/.env"] [unique_id "amsGWud5TqPfnYMItHeg5AAAACo"]
[Thu Jul 30 09:07:54.547906 2026] [security2:error] [pid 2502404:tid 2502404] [client 114.119.130.248:46465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/"] [unique_id "amsGWqYws37aHVoX9_F68QAAABY"], referer: http://www.jonathanmeyerart.com/
[Thu Jul 30 09:07:54.802028 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 57.141.0.62:51826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:07:54.802661 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 57.141.0.62:51826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:07:55.137375 2026] [security2:error] [pid 2506758:tid 2506758] [client 110.42.208.131:46492] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amsGW-d5TqPfnYMItHeg5QAAACo"]
[Thu Jul 30 09:07:56.477793 2026] [ssl:error] [pid 2502404:tid 2502404] (EAI 2)Name or service not known: [client 144.76.19.72:44456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:56.477822 2026] [ssl:error] [pid 2502404:tid 2502404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:56.528749 2026] [ssl:error] [pid 2506758:tid 2506758] (EAI 2)Name or service not known: [client 144.76.19.72:44458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:07:56.528776 2026] [ssl:error] [pid 2506758:tid 2506758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:07:57.365540 2026] [security2:error] [pid 2497479:tid 2497479] [client 110.42.208.131:49744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amsGXfygAf8BjlhGzR6VRQAAAAQ"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 09:07:58.610470 2026] [security2:error] [pid 2485662:tid 2485662] [client 114.119.134.192:65443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/images/17_earthbound_4_3.png"] [unique_id "amsGXiUdq7C3r1IXnU6OnQAAACs"], referer: https://www.robin64.co.uk/customborders
[Thu Jul 30 09:08:00.359646 2026] [ssl:error] [pid 2503375:tid 2503375] (70014)End of file found: [client 216.73.216.199:55621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:00.755325 2026] [ssl:error] [pid 2500195:tid 2500195] (EAI 2)Name or service not known: [client 144.76.19.72:43294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:00.755352 2026] [ssl:error] [pid 2500195:tid 2500195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:00.876407 2026] [authz_core:error] [pid 2500851:tid 2500851] [client 57.141.0.56:50924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:00.877024 2026] [authz_core:error] [pid 2500851:tid 2500851] [client 57.141.0.56:50924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:01.060368 2026] [ssl:error] [pid 2503329:tid 2503329] (EAI 2)Name or service not known: [client 144.76.19.72:43302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:01.060412 2026] [ssl:error] [pid 2503329:tid 2503329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:01.150743 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.28:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:01.151369 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.28:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:04.116993 2026] [ssl:error] [pid 2502404:tid 2502404] (EAI 2)Name or service not known: [client 144.76.19.72:43312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:04.117023 2026] [ssl:error] [pid 2502404:tid 2502404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:04.174797 2026] [ssl:error] [pid 2506760:tid 2506760] (EAI 2)Name or service not known: [client 144.76.19.72:43314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:04.174828 2026] [ssl:error] [pid 2506760:tid 2506760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:04.808820 2026] [core:error] [pid 2502404:tid 2502404] [client 66.249.64.170:47227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:04.808846 2026] [core:error] [pid 2502404:tid 2502404] [client 66.249.64.170:47227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:05.967162 2026] [authz_core:error] [pid 2502376:tid 2502376] [client 57.141.0.45:42538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:05.967780 2026] [authz_core:error] [pid 2502376:tid 2502376] [client 57.141.0.45:42538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:06.379963 2026] [security2:error] [pid 2506686:tid 2506686] [client 216.73.216.199:46435] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-latency-performance-cgv2/tuned.conf"] [unique_id "amsGZogDsbCvl1dXbxXbmwAAABc"]
[Thu Jul 30 09:08:06.380288 2026] [security2:error] [pid 2506686:tid 2506686] [client 216.73.216.199:46435] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-latency-performance-cgv2/tuned.conf"] [unique_id "amsGZogDsbCvl1dXbxXbmwAAABc"]
[Thu Jul 30 09:08:06.380519 2026] [security2:error] [pid 2506686:tid 2506686] [client 216.73.216.199:46435] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-latency-performance-cgv2/tuned.conf"] [unique_id "amsGZogDsbCvl1dXbxXbmwAAABc"]
[Thu Jul 30 09:08:06.981939 2026] [security2:error] [pid 2506686:tid 2506686] [client 216.73.216.199:46435] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/pwquality.conf"] [unique_id "amsGZogDsbCvl1dXbxXbnQAAABc"]
[Thu Jul 30 09:08:06.982237 2026] [security2:error] [pid 2506686:tid 2506686] [client 216.73.216.199:46435] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/pwquality.conf"] [unique_id "amsGZogDsbCvl1dXbxXbnQAAABc"]
[Thu Jul 30 09:08:06.982481 2026] [security2:error] [pid 2506686:tid 2506686] [client 216.73.216.199:46435] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/pwquality.conf"] [unique_id "amsGZogDsbCvl1dXbxXbnQAAABc"]
[Thu Jul 30 09:08:07.228757 2026] [ssl:error] [pid 2500761:tid 2500761] (EAI 2)Name or service not known: [client 144.76.19.72:43320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:07.228808 2026] [ssl:error] [pid 2500761:tid 2500761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:07.283079 2026] [ssl:error] [pid 2504490:tid 2504490] (EAI 2)Name or service not known: [client 144.76.19.72:43324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:07.283107 2026] [ssl:error] [pid 2504490:tid 2504490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:07.421131 2026] [security2:error] [pid 2507676:tid 2507676] [client 43.164.0.96:41358] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsGZ5GRj4h6xrLD426i_gAAABk"]
[Thu Jul 30 09:08:09.384079 2026] [security2:error] [pid 2490051:tid 2490051] [client 43.164.0.96:43386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsGaXOiZsGZHWam5dbAvAAAAD4"], referer: http://somethingweb.co.uk
[Thu Jul 30 09:08:09.871219 2026] [security2:error] [pid 2500761:tid 2500761] [client 43.164.0.96:53162] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsGafuy9LZllfErU9XujQAAAAc"], referer: http://mwdesign.me.uk
[Thu Jul 30 09:08:10.337494 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:65240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:10.337537 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:10.391936 2026] [ssl:error] [pid 2490051:tid 2490051] (EAI 2)Name or service not known: [client 144.76.19.72:65246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:10.391965 2026] [ssl:error] [pid 2490051:tid 2490051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:11.200048 2026] [ssl:error] [pid 2507710:tid 2507710] (70014)End of file found: [client 216.73.216.199:14838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:12.261797 2026] [security2:error] [pid 2507594:tid 2507594] [client 43.164.0.96:54860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsGbC2IOlT6Ua7k6QVxLgAAAAs"], referer: http://mwdesign.me.uk
[Thu Jul 30 09:08:12.805860 2026] [core:error] [pid 2507913:tid 2507913] [client 66.249.66.169:63619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:12.805899 2026] [core:error] [pid 2507913:tid 2507913] [client 66.249.66.169:63619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:13.445448 2026] [ssl:error] [pid 2500761:tid 2500761] (EAI 2)Name or service not known: [client 144.76.19.72:65256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:13.445474 2026] [ssl:error] [pid 2500761:tid 2500761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:13.499696 2026] [ssl:error] [pid 2502376:tid 2502376] (EAI 2)Name or service not known: [client 144.76.19.72:65270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:13.499721 2026] [ssl:error] [pid 2502376:tid 2502376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:13.606926 2026] [ssl:error] [pid 2506686:tid 2506686] (70014)End of file found: [client 216.73.216.199:46435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:14.696670 2026] [authz_core:error] [pid 2507594:tid 2507594] [client 57.141.0.42:25626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:14.697316 2026] [authz_core:error] [pid 2507594:tid 2507594] [client 57.141.0.42:25626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:16.316352 2026] [core:error] [pid 2495671:tid 2495671] (13)Permission denied: [client 216.73.216.199:41492] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/aliases
[Thu Jul 30 09:08:16.552872 2026] [ssl:error] [pid 2507594:tid 2507594] (EAI 2)Name or service not known: [client 144.76.19.72:65276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:16.552923 2026] [ssl:error] [pid 2507594:tid 2507594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:16.609703 2026] [ssl:error] [pid 2503375:tid 2503375] (EAI 2)Name or service not known: [client 144.76.19.72:65290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:16.609754 2026] [ssl:error] [pid 2503375:tid 2503375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:16.613047 2026] [security2:error] [pid 2506758:tid 2506758] [client 114.119.158.38:51723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582070400/cat_ids~15,14/request_format~html"] [unique_id "amsGcOd5TqPfnYMItHeg5wAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1582070400/request_format~html/cat_ids~15
[Thu Jul 30 09:08:17.821063 2026] [ssl:error] [pid 2495671:tid 2495671] (70014)End of file found: [client 216.73.216.199:41492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:19.029755 2026] [ssl:error] [pid 2507710:tid 2507710] (70014)End of file found: [client 216.73.216.199:19654] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:19.517376 2026] [ssl:error] [pid 2507487:tid 2507487] (70014)End of file found: [client 216.73.216.199:49194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:19.682584 2026] [ssl:error] [pid 2506012:tid 2506012] (EAI 2)Name or service not known: [client 144.76.19.72:43200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:19.682621 2026] [ssl:error] [pid 2506012:tid 2506012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:19.734209 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:43206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:19.734232 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:20.173863 2026] [authz_core:error] [pid 2506012:tid 2506012] [client 57.141.0.27:29264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:20.174540 2026] [authz_core:error] [pid 2506012:tid 2506012] [client 57.141.0.27:29264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:20.809981 2026] [security2:error] [pid 2504948:tid 2504948] [client 114.119.158.38:29073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1582070400/cat_ids~15,14/request_format~html"] [unique_id "amsGdMjEOZCc0DaF_UYmjgAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1582070400/request_format~html/cat_ids~15
[Thu Jul 30 09:08:21.209779 2026] [cgi:error] [pid 2507676:tid 2507676] [client 52.167.144.25:33534] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:08:22.039535 2026] [security2:error] [pid 2502404:tid 2502404] [client 43.157.22.109:58138] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amsGdqYws37aHVoX9_F6-gAAABY"]
[Thu Jul 30 09:08:22.086106 2026] [security2:error] [pid 2500195:tid 2500195] [client 43.164.197.117:49810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsGdlfHXpnEbLYJVGgwVgAAADI"]
[Thu Jul 30 09:08:22.515850 2026] [security2:error] [pid 2502404:tid 2502404] [client 43.157.22.109:58878] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.co.uk"] [uri "/"] [unique_id "amsGdqYws37aHVoX9_F6-wAAABY"]
[Thu Jul 30 09:08:22.789160 2026] [ssl:error] [pid 2500195:tid 2500195] (EAI 2)Name or service not known: [client 144.76.19.72:43222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:22.789189 2026] [ssl:error] [pid 2500195:tid 2500195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:22.879536 2026] [ssl:error] [pid 2504948:tid 2504948] (EAI 2)Name or service not known: [client 144.76.19.72:43226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:22.879587 2026] [ssl:error] [pid 2504948:tid 2504948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:23.056618 2026] [security2:error] [pid 2502404:tid 2502404] [client 43.157.22.109:59640] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsGd6Yws37aHVoX9_F6_AAAABY"], referer: http://jasperandtroy.co.uk
[Thu Jul 30 09:08:23.187698 2026] [access_compat:error] [pid 2500195:tid 2500195] [client 152.59.3.243:52614] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/youre-a-wizard-harry, referer: http://blog.alism.com/category/funnies/page/4?nomobile
[Thu Jul 30 09:08:23.187810 2026] [access_compat:error] [pid 2500195:tid 2500195] [client 152.59.3.243:52614] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: http://blog.alism.com/category/funnies/page/4?nomobile
[Thu Jul 30 09:08:23.544106 2026] [ssl:error] [pid 2502925:tid 2502925] (70014)End of file found: [client 216.73.216.199:16059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:23.726544 2026] [core:error] [pid 2504948:tid 2504948] [client 66.249.64.170:36278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:23.726592 2026] [core:error] [pid 2504948:tid 2504948] [client 66.249.64.170:36278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:23.951338 2026] [security2:error] [pid 2495671:tid 2495671] [client 43.164.197.117:54086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsGd94ui3uIISkPQcAy5QAAACw"], referer: http://hornsey-town-hall.org.uk
[Thu Jul 30 09:08:24.994654 2026] [core:error] [pid 2501306:tid 2501306] [client 66.249.64.171:57699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:24.994686 2026] [core:error] [pid 2501306:tid 2501306] [client 66.249.64.171:57699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:25.840094 2026] [security2:error] [pid 2503329:tid 2503329] [client 43.130.67.6:50722] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/"] [unique_id "amsGeXud_x43IaLL3Z6uGgAAAA0"]
[Thu Jul 30 09:08:25.942850 2026] [ssl:error] [pid 2501788:tid 2501788] (EAI 2)Name or service not known: [client 144.76.19.72:43242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:25.942887 2026] [ssl:error] [pid 2501788:tid 2501788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:25.953914 2026] [ssl:error] [pid 2500195:tid 2500195] (70014)End of file found: [client 216.73.216.199:56911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:25.997267 2026] [ssl:error] [pid 2506686:tid 2506686] (EAI 2)Name or service not known: [client 144.76.19.72:43244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:25.997296 2026] [ssl:error] [pid 2506686:tid 2506686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:26.442134 2026] [security2:error] [pid 2500148:tid 2500148] [client 43.130.131.18:54282] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.render-farm.co.uk"] [uri "/"] [unique_id "amsGehU7GUsfqB72VpXlogAAAB8"]
[Thu Jul 30 09:08:26.454969 2026] [ssl:error] [pid 2506012:tid 2506012] (70014)End of file found: [client 216.73.216.199:4701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:27.461146 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 57.141.0.44:39562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:27.461828 2026] [authz_core:error] [pid 2501788:tid 2501788] [client 57.141.0.44:39562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:27.957250 2026] [security2:error] [pid 2504490:tid 2504490] [client 43.130.67.6:52864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsGe1LGAP_lv-B8yh_9WwAAACA"], referer: http://all4s.co.uk
[Thu Jul 30 09:08:29.052565 2026] [ssl:error] [pid 2489879:tid 2489879] (EAI 2)Name or service not known: [client 144.76.19.72:43250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:29.052603 2026] [ssl:error] [pid 2489879:tid 2489879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:29.105782 2026] [ssl:error] [pid 2501788:tid 2501788] (EAI 2)Name or service not known: [client 144.76.19.72:43260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:29.105821 2026] [ssl:error] [pid 2501788:tid 2501788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:29.979504 2026] [security2:error] [pid 2497479:tid 2497479] [client 43.164.197.117:58594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "amsGffygAf8BjlhGzR6VTQAAAAQ"]
[Thu Jul 30 09:08:30.468800 2026] [ssl:error] [pid 2507710:tid 2507710] (70014)End of file found: [client 216.73.216.199:27308] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:31.676338 2026] [ssl:error] [pid 2504948:tid 2504948] (70014)End of file found: [client 216.73.216.199:4475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:32.161349 2026] [ssl:error] [pid 2504793:tid 2504793] (EAI 2)Name or service not known: [client 144.76.19.72:58434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:32.161382 2026] [ssl:error] [pid 2504793:tid 2504793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:32.214600 2026] [ssl:error] [pid 2508625:tid 2508625] (EAI 2)Name or service not known: [client 144.76.19.72:58444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:32.214634 2026] [ssl:error] [pid 2508625:tid 2508625] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:35.266562 2026] [ssl:error] [pid 2508731:tid 2508731] (EAI 2)Name or service not known: [client 144.76.19.72:58452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:35.266603 2026] [ssl:error] [pid 2508731:tid 2508731] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:35.295006 2026] [ssl:error] [pid 2506012:tid 2506012] (70014)End of file found: [client 216.73.216.199:5999] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:35.318516 2026] [ssl:error] [pid 2504793:tid 2504793] (EAI 2)Name or service not known: [client 144.76.19.72:58468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:35.318544 2026] [ssl:error] [pid 2504793:tid 2504793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:35.950360 2026] [security2:error] [pid 2502404:tid 2502404] [client 43.164.192.151:54312] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "amsGg6Yws37aHVoX9_F6_wAAABY"]
[Thu Jul 30 09:08:37.699177 2026] [ssl:error] [pid 2506686:tid 2506686] (70014)End of file found: [client 216.73.216.199:49553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:38.008267 2026] [security2:error] [pid 2507487:tid 2507487] [client 43.164.192.151:35296] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsGhs1JSPT4MVqbK7QACwAAAAk"], referer: http://the-pryors.co.uk
[Thu Jul 30 09:08:38.375118 2026] [ssl:error] [pid 2498236:tid 2498236] (EAI 2)Name or service not known: [client 144.76.19.72:58474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:38.375143 2026] [ssl:error] [pid 2498236:tid 2498236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:38.429315 2026] [ssl:error] [pid 2501856:tid 2501856] (EAI 2)Name or service not known: [client 144.76.19.72:58476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:38.429347 2026] [ssl:error] [pid 2501856:tid 2501856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:38.760827 2026] [security2:error] [pid 2500849:tid 2500849] [client 43.166.128.187:56196] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amsGhkgjN2Z0cUUsfnHC1QAAABs"]
[Thu Jul 30 09:08:39.495691 2026] [security2:error] [pid 2498236:tid 2498236] [client 43.157.156.190:38732] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "asian-kitchen.co.uk"] [uri "/"] [unique_id "amsGh83H6Lckg-u8LT-4HgAAAAA"]
[Thu Jul 30 09:08:39.877470 2026] [security2:error] [pid 2501856:tid 2501856] [client 43.166.128.187:57226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amsGh2Wg2x4dMc-X9yy-gwAAAAg"]
[Thu Jul 30 09:08:40.114835 2026] [ssl:error] [pid 2497479:tid 2497479] (70014)End of file found: [client 216.73.216.199:10457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:41.013841 2026] [ssl:error] [pid 2507709:tid 2507709] (70014)End of file found: [client 216.73.216.199:45155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:41.485475 2026] [ssl:error] [pid 2506012:tid 2506012] (EAI 2)Name or service not known: [client 144.76.19.72:58980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:41.485504 2026] [ssl:error] [pid 2506012:tid 2506012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:41.544942 2026] [ssl:error] [pid 2498236:tid 2498236] (EAI 2)Name or service not known: [client 144.76.19.72:58992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:41.544969 2026] [ssl:error] [pid 2498236:tid 2498236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:43.288987 2026] [core:error] [pid 2506012:tid 2506012] [client 66.249.64.170:41275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:43.289018 2026] [core:error] [pid 2506012:tid 2506012] [client 66.249.64.170:41275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:43.299813 2026] [security2:error] [pid 2508626:tid 2508626] [client 185.191.171.8:15256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/period-blood-in-spaghetti-voodoo"] [unique_id "amsGi6QlG-jKrgwtLiTiJwAAACc"]
[Thu Jul 30 09:08:43.586389 2026] [security2:error] [pid 2504490:tid 2504490] [client 43.166.128.187:60462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amsGi1LGAP_lv-B8yh_9XgAAACA"]
[Thu Jul 30 09:08:44.100124 2026] [security2:error] [pid 2502436:tid 2502436] [client 81.8.91.201:54568] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsGjFvdhZQPHiZpYsGjYgAAACI"]
[Thu Jul 30 09:08:44.556349 2026] [authz_core:error] [pid 2506686:tid 2506686] [client 66.249.66.33:61750] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:08:44.559120 2026] [authz_core:error] [pid 2506686:tid 2506686] [client 66.249.66.33:61750] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:08:44.607557 2026] [ssl:error] [pid 2491387:tid 2491387] (EAI 2)Name or service not known: [client 144.76.19.72:58996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:44.607600 2026] [ssl:error] [pid 2491387:tid 2491387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:44.664868 2026] [ssl:error] [pid 2507913:tid 2507913] (EAI 2)Name or service not known: [client 144.76.19.72:59012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:44.664901 2026] [ssl:error] [pid 2507913:tid 2507913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:44.811481 2026] [security2:error] [pid 2506012:tid 2506012] [client 43.166.128.187:33512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsGjCRxnID0N9LoAlTRJAAAABM"], referer: http://swingaddiction.co.uk
[Thu Jul 30 09:08:44.856109 2026] [cgi:error] [pid 2506012:tid 2506012] [client 43.166.128.187:33512] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://swingaddiction.co.uk
[Thu Jul 30 09:08:45.089340 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.28:52546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:45.089985 2026] [authz_core:error] [pid 2490051:tid 2490051] [client 57.141.0.28:52546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:46.739459 2026] [authz_core:error] [pid 2508698:tid 2508698] [client 66.249.66.33:56820] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:08:46.742154 2026] [authz_core:error] [pid 2508698:tid 2508698] [client 66.249.66.33:56820] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:08:47.035797 2026] [ssl:error] [pid 2489924:tid 2489924] (70014)End of file found: [client 216.73.216.199:53945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:47.554798 2026] [security2:error] [pid 2507709:tid 2507709] [client 43.164.1.211:49278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amsGjyYB44oclA1iZyjUEQAAAB0"]
[Thu Jul 30 09:08:47.609800 2026] [security2:error] [pid 2501270:tid 2501270] [client 85.208.98.24:43096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/canada-goose-stockists-london-k.html"] [unique_id "amsGjwG8ibhGqlncLwrzkAAAAAU"]
[Thu Jul 30 09:08:47.637531 2026] [core:error] [pid 2491387:tid 2491387] (13)Permission denied: [client 216.73.216.199:63405] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/red_zone
[Thu Jul 30 09:08:47.724174 2026] [ssl:error] [pid 2508593:tid 2508593] (EAI 2)Name or service not known: [client 144.76.19.72:59014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:47.724205 2026] [ssl:error] [pid 2508593:tid 2508593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:47.778019 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.67:61172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:47.778653 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.67:61172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:47.780454 2026] [ssl:error] [pid 2500849:tid 2500849] (EAI 2)Name or service not known: [client 144.76.19.72:59022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:47.780490 2026] [ssl:error] [pid 2500849:tid 2500849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:48.162565 2026] [security2:error] [pid 2489879:tid 2489879] [client 43.166.128.187:35624] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saliency.co.uk"] [uri "/"] [unique_id "amsGkORhVhWl7e78JPvTbwAAACQ"]
[Thu Jul 30 09:08:49.141770 2026] [core:error] [pid 2491387:tid 2491387] (13)Permission denied: [client 216.73.216.199:63405] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu5/subsystem/drivers_probe
[Thu Jul 30 09:08:49.506429 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.27:32152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:49.507043 2026] [authz_core:error] [pid 2506760:tid 2506760] [client 57.141.0.27:32152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:50.347351 2026] [ssl:error] [pid 2491387:tid 2491387] (70014)End of file found: [client 216.73.216.199:63405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:08:50.860722 2026] [ssl:error] [pid 2506760:tid 2506760] (EAI 2)Name or service not known: [client 144.76.19.72:27896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:50.860782 2026] [ssl:error] [pid 2506760:tid 2506760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:50.916650 2026] [ssl:error] [pid 2509017:tid 2509017] (EAI 2)Name or service not known: [client 144.76.19.72:27912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:50.916684 2026] [ssl:error] [pid 2509017:tid 2509017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:51.973462 2026] [security2:error] [pid 2506757:tid 2506757] [client 185.191.171.8:59664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/paris,-tx-news-obituaries"] [unique_id "amsGkwqi_wtFzWd1rWWk6wAAACg"]
[Thu Jul 30 09:08:53.644740 2026] [cgi:error] [pid 2507676:tid 2507676] [client 172.202.98.196:17324] AH02812: stderr from /home/healthki/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:08:53.942458 2026] [authz_core:error] [pid 2507594:tid 2507594] [client 57.141.0.40:35756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:53.943089 2026] [authz_core:error] [pid 2507594:tid 2507594] [client 57.141.0.40:35756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:53.989468 2026] [ssl:error] [pid 2507487:tid 2507487] (EAI 2)Name or service not known: [client 144.76.19.72:27916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:53.989498 2026] [ssl:error] [pid 2507487:tid 2507487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:54.044697 2026] [ssl:error] [pid 2489924:tid 2489924] (EAI 2)Name or service not known: [client 144.76.19.72:27924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:54.044729 2026] [ssl:error] [pid 2489924:tid 2489924] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:55.027341 2026] [authz_core:error] [pid 2508593:tid 2508593] [client 57.141.0.55:22276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:55.027955 2026] [authz_core:error] [pid 2508593:tid 2508593] [client 57.141.0.55:22276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:55.197148 2026] [core:error] [pid 2507710:tid 2507710] (13)Permission denied: [client 216.73.216.199:55487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/order
[Thu Jul 30 09:08:56.255377 2026] [core:error] [pid 2510226:tid 2510226] [client 66.249.66.167:44486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:56.255424 2026] [core:error] [pid 2510226:tid 2510226] [client 66.249.66.167:44486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:56.263899 2026] [core:error] [pid 2509451:tid 2509451] [client 66.249.66.66:59979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:56.263949 2026] [core:error] [pid 2509451:tid 2509451] [client 66.249.66.66:59979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:08:57.168735 2026] [authz_core:error] [pid 2501856:tid 2501856] [client 57.141.0.30:47362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:08:57.169354 2026] [authz_core:error] [pid 2501856:tid 2501856] [client 57.141.0.30:47362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:08:57.202695 2026] [ssl:error] [pid 2489879:tid 2489879] (EAI 2)Name or service not known: [client 144.76.19.72:27934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:57.202715 2026] [ssl:error] [pid 2489879:tid 2489879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:57.258753 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:27940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:08:57.258816 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:08:57.308879 2026] [core:error] [pid 2507710:tid 2507710] (13)Permission denied: [client 216.73.216.199:55487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/skipsmtpcheckhosts
[Thu Jul 30 09:08:57.910239 2026] [core:error] [pid 2507710:tid 2507710] (13)Permission denied: [client 216.73.216.199:55487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/store_user
[Thu Jul 30 09:08:58.616896 2026] [security2:error] [pid 2491387:tid 2491387] [client 85.208.96.205:55762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/robert-anthony-cruz-baseball"] [unique_id "amsGmpAasg1ez0YpUefYHAAAAAY"]
[Thu Jul 30 09:08:58.814628 2026] [core:error] [pid 2507710:tid 2507710] (13)Permission denied: [client 216.73.216.199:55487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_generic/drivers/pci:ata_generic/remove_id
[Thu Jul 30 09:09:00.488558 2026] [ssl:error] [pid 2510439:tid 2510439] (EAI 2)Name or service not known: [client 144.76.19.72:19468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:00.488624 2026] [ssl:error] [pid 2510439:tid 2510439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:00.907100 2026] [ssl:error] [pid 2507487:tid 2507487] (EAI 2)Name or service not known: [client 144.76.19.72:19480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:00.907129 2026] [ssl:error] [pid 2507487:tid 2507487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:01.665037 2026] [security2:error] [pid 2504793:tid 2504793] [client 101.32.52.164:33540] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amsGnfxjVceg8BwhAAwHWQAAAAw"]
[Thu Jul 30 09:09:02.067119 2026] [security2:error] [pid 2510486:tid 2510486] [client 43.157.170.126:46252] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amsGnt8UIXGty8epr687JgAAACY"]
[Thu Jul 30 09:09:03.209246 2026] [core:error] [pid 2498236:tid 2498236] [client 66.249.64.172:64793] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:03.209275 2026] [core:error] [pid 2498236:tid 2498236] [client 66.249.64.172:64793] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:03.358037 2026] [security2:error] [pid 2502404:tid 2502404] [client 82.156.88.97:46560] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-sun.com"] [uri "/"] [unique_id "amsGn6Yws37aHVoX9_F7aAAAABY"]
[Thu Jul 30 09:09:03.794277 2026] [authz_core:error] [pid 2507676:tid 2507676] [client 172.202.98.196:17324] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:09:03.796279 2026] [access_compat:error] [pid 2507676:tid 2507676] [client 172.202.98.196:17324] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 09:09:03.796320 2026] [access_compat:error] [pid 2507676:tid 2507676] [client 172.202.98.196:17324] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 09:09:03.800745 2026] [access_compat:error] [pid 2507676:tid 2507676] [client 172.202.98.196:17324] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 09:09:03.859720 2026] [security2:error] [pid 2510562:tid 2510562] [client 124.156.179.141:53268] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amsGn0KqXwLwm9clpGWk7gAAAC0"]
[Thu Jul 30 09:09:03.961977 2026] [ssl:error] [pid 2510563:tid 2510563] (EAI 2)Name or service not known: [client 144.76.19.72:19482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:03.962021 2026] [ssl:error] [pid 2510563:tid 2510563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:04.017508 2026] [ssl:error] [pid 2510564:tid 2510564] (EAI 2)Name or service not known: [client 144.76.19.72:19486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:04.017547 2026] [ssl:error] [pid 2510564:tid 2510564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:05.916595 2026] [ssl:error] [pid 2508698:tid 2508698] (70014)End of file found: [client 216.73.216.199:34696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:06.006759 2026] [security2:error] [pid 2491387:tid 2491387] [client 124.156.179.141:55472] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bes-systems.co.uk"] [uri "/"] [unique_id "amsGopAasg1ez0YpUefYHgAAAAY"]
[Thu Jul 30 09:09:06.123103 2026] [security2:error] [pid 2510564:tid 2510564] [client 85.208.96.194:30286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/resume-parsing-dataset"] [unique_id "amsGojRwoOV-CSW2gBFqDwAAADY"]
[Thu Jul 30 09:09:06.824485 2026] [core:error] [pid 2510439:tid 2510439] [client 66.249.66.8:39618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:06.824510 2026] [core:error] [pid 2510439:tid 2510439] [client 66.249.66.8:39618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:07.036894 2026] [security2:error] [pid 2506640:tid 2506640] [client 101.32.52.164:58830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsGo2VbxDtV7t_vJ-VQwQAAABQ"], referer: http://retrodisco.co.uk
[Thu Jul 30 09:09:07.076406 2026] [ssl:error] [pid 2506757:tid 2506757] (EAI 2)Name or service not known: [client 144.76.19.72:19488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:07.076432 2026] [ssl:error] [pid 2506757:tid 2506757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:07.109856 2026] [security2:error] [pid 2508731:tid 2508731] [client 124.156.179.141:55520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amsGo5Jj7_gTOo2sNo9xqQAAADQ"], referer: http://unclaimedassets.co.uk
[Thu Jul 30 09:09:07.130446 2026] [ssl:error] [pid 2508593:tid 2508593] (EAI 2)Name or service not known: [client 144.76.19.72:19500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:07.130469 2026] [ssl:error] [pid 2508593:tid 2508593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:07.130702 2026] [authz_core:error] [pid 2510564:tid 2510564] [client 57.141.0.32:55258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:07.131322 2026] [authz_core:error] [pid 2510564:tid 2510564] [client 57.141.0.32:55258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:07.723676 2026] [ssl:error] [pid 2507710:tid 2507710] (70014)End of file found: [client 216.73.216.199:55487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:08.107667 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.153.76.247:38958] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "randomlearner.org.uk"] [uri "/"] [unique_id "amsGpDPZDJcuG4jZXSTdAwAAACM"]
[Thu Jul 30 09:09:08.594467 2026] [security2:error] [pid 2506757:tid 2506757] [client 43.130.102.18:27789] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsGpAqi_wtFzWd1rWWk8AAAACg"]
[Thu Jul 30 09:09:08.594520 2026] [security2:error] [pid 2506757:tid 2506757] [client 43.130.102.18:27789] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsGpAqi_wtFzWd1rWWk8AAAACg"]
[Thu Jul 30 09:09:08.594788 2026] [security2:error] [pid 2506757:tid 2506757] [client 43.130.102.18:27789] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsGpAqi_wtFzWd1rWWk8AAAACg"]
[Thu Jul 30 09:09:09.194359 2026] [security2:error] [pid 2510485:tid 2510485] [client 124.156.179.141:57880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsGpTPZDJcuG4jZXSTdBAAAACM"], referer: http://bes-systems.co.uk
[Thu Jul 30 09:09:09.567103 2026] [core:error] [pid 2510803:tid 2510803] [client 66.249.64.171:46434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:09.567147 2026] [core:error] [pid 2510803:tid 2510803] [client 66.249.64.171:46434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:11.035000 2026] [ssl:error] [pid 2510770:tid 2510770] (70014)End of file found: [client 216.73.216.199:29724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:11.696448 2026] [ssl:error] [pid 2508698:tid 2508698] (EAI 2)Name or service not known: [client 144.76.19.72:37040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:11.696480 2026] [ssl:error] [pid 2508698:tid 2508698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:11.910382 2026] [authz_core:error] [pid 2510567:tid 2510567] [client 66.249.66.34:59528] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:09:11.913056 2026] [authz_core:error] [pid 2510567:tid 2510567] [client 66.249.66.34:59528] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:09:12.315647 2026] [security2:error] [pid 2491387:tid 2491387] [client 124.156.179.141:35122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsGqJAasg1ez0YpUefYIAAAAAY"]
[Thu Jul 30 09:09:12.400675 2026] [security2:error] [pid 2510439:tid 2510439] [client 101.32.52.164:40634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "secretbluestone.co.uk"] [uri "/"] [unique_id "amsGqAM1g6rm5S4Ea5vEHwAAABw"]
[Thu Jul 30 09:09:12.487297 2026] [ssl:error] [pid 2510889:tid 2510889] (EAI 2)Name or service not known: [client 144.76.19.72:37042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:12.487333 2026] [ssl:error] [pid 2510889:tid 2510889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:12.605978 2026] [security2:error] [pid 2510889:tid 2510889] [client 43.157.170.126:58748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsGqFhwfPtU_gfUJdWr6gAAAEE"]
[Thu Jul 30 09:09:13.443996 2026] [ssl:error] [pid 2510887:tid 2510887] (70014)End of file found: [client 216.73.216.199:44519] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:14.051112 2026] [ssl:error] [pid 2510889:tid 2510889] (70014)End of file found: [client 216.73.216.199:53791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:14.324185 2026] [security2:error] [pid 2510890:tid 2510890] [client 43.157.170.126:42968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsGqk5KFr7jyyMhWT-WRAAAAEI"], referer: http://beechhouseselfcatering.co.uk
[Thu Jul 30 09:09:14.533455 2026] [security2:error] [pid 2507594:tid 2507594] [client 43.166.244.66:58292] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amsGqi2IOlT6Ua7k6QVxoQAAAAs"]
[Thu Jul 30 09:09:15.004169 2026] [security2:error] [pid 2507487:tid 2507487] [client 43.153.76.247:45322] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spurr.org.uk"] [uri "/"] [unique_id "amsGq81JSPT4MVqbK7QAFAAAAAk"]
[Thu Jul 30 09:09:15.151826 2026] [security2:error] [pid 2510226:tid 2510226] [client 124.156.179.141:36618] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsGq1R-eHTRO3svifILowAAAAM"], referer: http://raidersofthegamecupboard.co.uk
[Thu Jul 30 09:09:15.541189 2026] [ssl:error] [pid 2507594:tid 2507594] (EAI 2)Name or service not known: [client 144.76.19.72:37050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:15.541219 2026] [ssl:error] [pid 2507594:tid 2507594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:15.592523 2026] [ssl:error] [pid 2508730:tid 2508730] (EAI 2)Name or service not known: [client 144.76.19.72:37052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:15.592555 2026] [ssl:error] [pid 2508730:tid 2508730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:15.651820 2026] [security2:error] [pid 2510890:tid 2510890] [client 43.159.148.221:46236] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "holistic-clear.co.uk"] [uri "/"] [unique_id "amsGq05KFr7jyyMhWT-WRQAAAEI"]
[Thu Jul 30 09:09:16.347667 2026] [ssl:error] [pid 2507487:tid 2507487] (70014)End of file found: [client 216.73.216.199:28513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:18.260359 2026] [security2:error] [pid 2506012:tid 2506012] [client 43.134.91.35:49362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tyredandmotional.co.uk"] [uri "/"] [unique_id "amsGriRxnID0N9LoAlTRKQAAABM"]
[Thu Jul 30 09:09:18.553121 2026] [security2:error] [pid 2507594:tid 2507594] [client 43.159.148.221:40824] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsGri2IOlT6Ua7k6QVxowAAAAs"], referer: http://holistic-clear.co.uk
[Thu Jul 30 09:09:18.554995 2026] [authz_core:error] [pid 2507594:tid 2507594] [client 43.159.148.221:40824] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://holistic-clear.co.uk
[Thu Jul 30 09:09:18.557636 2026] [authz_core:error] [pid 2507594:tid 2507594] [client 43.159.148.221:40824] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://holistic-clear.co.uk
[Thu Jul 30 09:09:18.649122 2026] [ssl:error] [pid 2510891:tid 2510891] (EAI 2)Name or service not known: [client 144.76.19.72:37062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:18.649151 2026] [ssl:error] [pid 2510891:tid 2510891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:18.705489 2026] [ssl:error] [pid 2502925:tid 2502925] (EAI 2)Name or service not known: [client 144.76.19.72:37078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:18.705517 2026] [ssl:error] [pid 2502925:tid 2502925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:18.752246 2026] [authz_core:error] [pid 2510894:tid 2510894] [client 57.141.0.38:51766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:18.752869 2026] [authz_core:error] [pid 2510894:tid 2510894] [client 57.141.0.38:51766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:18.758908 2026] [ssl:error] [pid 2510561:tid 2510561] (70014)End of file found: [client 216.73.216.199:32144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:18.935161 2026] [security2:error] [pid 2510564:tid 2510564] [client 163.7.14.242:17621] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsGrjRwoOV-CSW2gBFqEwAAADY"]
[Thu Jul 30 09:09:18.935223 2026] [security2:error] [pid 2510564:tid 2510564] [client 163.7.14.242:17621] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsGrjRwoOV-CSW2gBFqEwAAADY"]
[Thu Jul 30 09:09:18.935461 2026] [security2:error] [pid 2510564:tid 2510564] [client 163.7.14.242:17621] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsGrjRwoOV-CSW2gBFqEwAAADY"]
[Thu Jul 30 09:09:18.992795 2026] [security2:error] [pid 2501856:tid 2501856] [client 43.166.136.153:44044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amsGrmWg2x4dMc-X9yy-jAAAAAg"]
[Thu Jul 30 09:09:20.713517 2026] [security2:error] [pid 2502376:tid 2502376] [client 43.134.91.35:52310] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amsGsH5KQ5mswuWywGOhtAAAAAo"], referer: http://tyredandmotional.co.uk
[Thu Jul 30 09:09:20.746838 2026] [authz_core:error] [pid 2510439:tid 2510439] [client 57.141.0.36:56304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:20.747458 2026] [authz_core:error] [pid 2510439:tid 2510439] [client 57.141.0.36:56304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:20.961491 2026] [security2:error] [pid 2510484:tid 2510484] [client 43.157.158.178:42710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mcgarvey.co.uk"] [uri "/"] [unique_id "amsGsEl2gU484kiIZkBKNAAAAB8"]
[Thu Jul 30 09:09:21.451702 2026] [security2:error] [pid 2507676:tid 2507676] [client 43.157.150.69:55448] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tripodhome.co.uk"] [uri "/"] [unique_id "amsGsZGRj4h6xrLD426jaAAAABk"]
[Thu Jul 30 09:09:21.584101 2026] [ssl:error] [pid 2491387:tid 2491387] (70014)End of file found: [client 216.73.216.199:38211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:21.827615 2026] [ssl:error] [pid 2508731:tid 2508731] (EAI 2)Name or service not known: [client 144.76.19.72:34588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:21.827644 2026] [ssl:error] [pid 2508731:tid 2508731] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:21.885297 2026] [ssl:error] [pid 2494197:tid 2494197] (EAI 2)Name or service not known: [client 144.76.19.72:34600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:21.885328 2026] [ssl:error] [pid 2494197:tid 2494197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:22.224508 2026] [security2:error] [pid 2485662:tid 2485662] [client 163.7.14.242:15159] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsGsiUdq7C3r1IXnU6OrgAAACs"]
[Thu Jul 30 09:09:22.224579 2026] [security2:error] [pid 2485662:tid 2485662] [client 163.7.14.242:15159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsGsiUdq7C3r1IXnU6OrgAAACs"]
[Thu Jul 30 09:09:22.224915 2026] [security2:error] [pid 2485662:tid 2485662] [client 163.7.14.242:15159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsGsiUdq7C3r1IXnU6OrgAAACs"]
[Thu Jul 30 09:09:22.381250 2026] [core:error] [pid 2510841:tid 2510841] [client 66.249.64.170:58160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:22.381289 2026] [core:error] [pid 2510841:tid 2510841] [client 66.249.64.170:58160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:09:22.866954 2026] [authz_core:error] [pid 2510563:tid 2510563] [client 57.141.0.29:29230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:22.867583 2026] [authz_core:error] [pid 2510563:tid 2510563] [client 57.141.0.29:29230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:24.182045 2026] [ssl:error] [pid 2504793:tid 2504793] (70014)End of file found: [client 216.73.216.199:2472] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:24.520354 2026] [security2:error] [pid 2510563:tid 2510563] [client 101.32.52.164:48396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "marcwhiffen.co.uk"] [uri "/"] [unique_id "amsGtEb0dJX7rpzpX0GkEAAAADU"]
[Thu Jul 30 09:09:24.521159 2026] [authz_core:error] [pid 2510563:tid 2510563] [client 101.32.52.164:48396] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 09:09:24.967415 2026] [ssl:error] [pid 2507594:tid 2507594] (EAI 2)Name or service not known: [client 144.76.19.72:34612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:24.967458 2026] [ssl:error] [pid 2507594:tid 2507594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:25.024641 2026] [ssl:error] [pid 2510561:tid 2510561] (EAI 2)Name or service not known: [client 144.76.19.72:34626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:25.024673 2026] [ssl:error] [pid 2510561:tid 2510561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:25.049499 2026] [security2:error] [pid 2510895:tid 2510895] [client 43.166.239.145:37508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amsGtYb39MT0S6j_s6c7WQAAAEY"]
[Thu Jul 30 09:09:25.195635 2026] [core:error] [pid 2501856:tid 2501856] (13)Permission denied: [client 216.73.216.199:30344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu6/subsystem/drivers_probe
[Thu Jul 30 09:09:25.665664 2026] [security2:error] [pid 2510889:tid 2510889] [client 43.157.188.74:49612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amsGtVhwfPtU_gfUJdWr7wAAAEE"]
[Thu Jul 30 09:09:26.400202 2026] [core:error] [pid 2501856:tid 2501856] (13)Permission denied: [client 216.73.216.199:30344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:65/close_delay
[Thu Jul 30 09:09:26.905726 2026] [security2:error] [pid 2510895:tid 2510895] [client 43.161.234.148:40536] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "innerspacer.co.uk"] [uri "/"] [unique_id "amsGtob39MT0S6j_s6c7WgAAAEY"]
[Thu Jul 30 09:09:27.009595 2026] [ssl:error] [pid 2501856:tid 2501856] (70014)End of file found: [client 216.73.216.199:30344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:27.633056 2026] [security2:error] [pid 2504433:tid 2504433] [client 185.191.171.8:20770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/senator-emanuel-jones-net-worth"] [unique_id "amsGt1uwAR7k9A7WOI_mHwAAAB4"]
[Thu Jul 30 09:09:28.083192 2026] [ssl:error] [pid 2500195:tid 2500195] (EAI 2)Name or service not known: [client 144.76.19.72:34630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:28.083222 2026] [ssl:error] [pid 2500195:tid 2500195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:28.136565 2026] [ssl:error] [pid 2510892:tid 2510892] (EAI 2)Name or service not known: [client 144.76.19.72:34634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:28.136609 2026] [ssl:error] [pid 2510892:tid 2510892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:28.541371 2026] [security2:error] [pid 2508593:tid 2508593] [client 43.153.96.79:37612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "p2studio.co.uk"] [uri "/"] [unique_id "amsGuJOzlVf4PX_ddL2xFQAAABo"]
[Thu Jul 30 09:09:28.883641 2026] [security2:error] [pid 2504433:tid 2504433] [client 43.135.182.43:37650] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/"] [unique_id "amsGuFuwAR7k9A7WOI_mIAAAAB4"]
[Thu Jul 30 09:09:29.063179 2026] [access_compat:error] [pid 2502925:tid 2502925] [client 84.75.148.122:39694] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/2006
[Thu Jul 30 09:09:29.063307 2026] [access_compat:error] [pid 2502925:tid 2502925] [client 84.75.148.122:39694] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:09:29.952539 2026] [security2:error] [pid 2508593:tid 2508593] [client 150.109.119.38:35834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.org.uk"] [uri "/"] [unique_id "amsGuZOzlVf4PX_ddL2xFgAAABo"]
[Thu Jul 30 09:09:29.994811 2026] [security2:error] [pid 2501306:tid 2501306] [client 47.128.41.197:32748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "sharonduggal.co.uk"] [uri "/robots.txt"] [unique_id "amsGuW-UFR1HzmAIy-J9hwAAABg"]
[Thu Jul 30 09:09:30.983967 2026] [security2:error] [pid 2504793:tid 2504793] [client 43.135.182.43:39530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsGuvxjVceg8BwhAAwHXwAAAAw"], referer: http://theislipgarage.co.uk
[Thu Jul 30 09:09:31.190368 2026] [ssl:error] [pid 2510842:tid 2510842] (EAI 2)Name or service not known: [client 144.76.19.72:57862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:31.190418 2026] [ssl:error] [pid 2510842:tid 2510842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:31.243603 2026] [ssl:error] [pid 2504433:tid 2504433] (EAI 2)Name or service not known: [client 144.76.19.72:57876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:31.243629 2026] [ssl:error] [pid 2504433:tid 2504433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:31.719318 2026] [ssl:error] [pid 2510891:tid 2510891] (70014)End of file found: [client 216.73.216.199:6815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:32.421837 2026] [core:error] [pid 2510566:tid 2510566] (13)Permission denied: [client 216.73.216.199:33707] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/iptables-config
[Thu Jul 30 09:09:32.936682 2026] [security2:error] [pid 2510894:tid 2510894] [client 150.109.119.38:37680] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amsGvP9jq-E0VO9opYoEYgAAAEU"], referer: http://shelterforum.org.uk
[Thu Jul 30 09:09:33.817699 2026] [security2:error] [pid 2510842:tid 2510842] [client 43.135.211.148:37440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amsGvTLHgHcn556dNA56AAAAAD0"]
[Thu Jul 30 09:09:34.300463 2026] [ssl:error] [pid 2502436:tid 2502436] (EAI 2)Name or service not known: [client 144.76.19.72:57882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:34.300491 2026] [ssl:error] [pid 2502436:tid 2502436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:34.355023 2026] [ssl:error] [pid 2504793:tid 2504793] (EAI 2)Name or service not known: [client 144.76.19.72:57884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:34.355048 2026] [ssl:error] [pid 2504793:tid 2504793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:35.756204 2026] [security2:error] [pid 2510889:tid 2510889] [client 43.133.253.253:36144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.co.uk"] [uri "/"] [unique_id "amsGv1hwfPtU_gfUJdWr8QAAAEE"]
[Thu Jul 30 09:09:35.759526 2026] [authz_core:error] [pid 2510889:tid 2510889] [client 43.133.253.253:36144] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 09:09:35.765718 2026] [authz_core:error] [pid 2510889:tid 2510889] [client 43.133.253.253:36144] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 09:09:35.898636 2026] [security2:error] [pid 2510842:tid 2510842] [client 43.165.7.74:49116] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amsGvzLHgHcn556dNA56AQAAAD0"]
[Thu Jul 30 09:09:37.029169 2026] [security2:error] [pid 2507710:tid 2507710] [client 43.131.32.36:46382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "loca.co.uk"] [uri "/"] [unique_id "amsGwQ8hSdbkyiNmi6bPQAAAAC4"]
[Thu Jul 30 09:09:37.408616 2026] [ssl:error] [pid 2509451:tid 2509451] (EAI 2)Name or service not known: [client 144.76.19.72:57894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:37.408659 2026] [ssl:error] [pid 2509451:tid 2509451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:37.467768 2026] [ssl:error] [pid 2510485:tid 2510485] (EAI 2)Name or service not known: [client 144.76.19.72:57904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:37.467806 2026] [ssl:error] [pid 2510485:tid 2510485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:37.818209 2026] [security2:error] [pid 2510770:tid 2510770] [client 114.119.158.38:58111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1581120000/cat_ids~18/request_format~html"] [unique_id "amsGwZnWHyHiA9AynxkNeQAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1581206400/request_format~html/cat_ids~18
[Thu Jul 30 09:09:38.326439 2026] [authz_core:error] [pid 2507487:tid 2507487] [client 57.141.0.28:20378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:38.327104 2026] [authz_core:error] [pid 2507487:tid 2507487] [client 57.141.0.28:20378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:38.357220 2026] [security2:error] [pid 2485662:tid 2485662] [client 103.67.163.43:60670] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsGwiUdq7C3r1IXnU6OsQAAACs"]
[Thu Jul 30 09:09:38.357478 2026] [security2:error] [pid 2485662:tid 2485662] [client 103.67.163.43:60670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsGwiUdq7C3r1IXnU6OsQAAACs"]
[Thu Jul 30 09:09:38.357738 2026] [security2:error] [pid 2485662:tid 2485662] [client 103.67.163.43:60670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsGwiUdq7C3r1IXnU6OsQAAACs"]
[Thu Jul 30 09:09:38.886464 2026] [security2:error] [pid 2510564:tid 2510564] [client 114.119.158.38:50441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1581120000/cat_ids~18/request_format~html"] [unique_id "amsGwjRwoOV-CSW2gBFqeQAAADY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1581206400/request_format~html/cat_ids~18
[Thu Jul 30 09:09:39.587717 2026] [security2:error] [pid 2510891:tid 2510891] [client 43.165.7.74:56418] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amsGwyo2POPqsdk9P8mBGQAAAEM"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 09:09:40.192086 2026] [ssl:error] [pid 2510566:tid 2510566] (70014)End of file found: [client 216.73.216.199:33707] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:40.484032 2026] [authz_core:error] [pid 2510890:tid 2510890] [client 144.172.105.5:43690] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/error_log
[Thu Jul 30 09:09:40.550989 2026] [ssl:error] [pid 2502376:tid 2502376] (EAI 2)Name or service not known: [client 144.76.19.72:64522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:40.551020 2026] [ssl:error] [pid 2502376:tid 2502376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:40.608503 2026] [ssl:error] [pid 2509451:tid 2509451] (EAI 2)Name or service not known: [client 144.76.19.72:64528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:40.608544 2026] [ssl:error] [pid 2509451:tid 2509451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:41.283891 2026] [security2:error] [pid 2510894:tid 2510894] [client 103.67.163.43:60725] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsGxf9jq-E0VO9opYoEZQAAAEU"]
[Thu Jul 30 09:09:41.284110 2026] [security2:error] [pid 2510894:tid 2510894] [client 103.67.163.43:60725] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsGxf9jq-E0VO9opYoEZQAAAEU"]
[Thu Jul 30 09:09:41.284332 2026] [security2:error] [pid 2510894:tid 2510894] [client 103.67.163.43:60725] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsGxf9jq-E0VO9opYoEZQAAAEU"]
[Thu Jul 30 09:09:41.708699 2026] [authz_core:error] [pid 2510770:tid 2510770] [client 57.141.0.42:59824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:41.709346 2026] [authz_core:error] [pid 2510770:tid 2510770] [client 57.141.0.42:59824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:41.716175 2026] [core:error] [pid 2489924:tid 2489924] (13)Permission denied: [client 216.73.216.199:58951] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:64/close_delay
[Thu Jul 30 09:09:42.468006 2026] [security2:error] [pid 2510770:tid 2510770] [client 43.159.149.216:56026] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "junglejacks.co.uk"] [uri "/"] [unique_id "amsGxpnWHyHiA9AynxkNfAAAACA"]
[Thu Jul 30 09:09:42.491550 2026] [security2:error] [pid 2500195:tid 2500195] [client 183.31.92.49:10434] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "close, keep-alive"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsGxlfHXpnEbLYJVGgwxQAAADI"]
[Thu Jul 30 09:09:42.952784 2026] [access_compat:error] [pid 2510890:tid 2510890] [client 45.158.164.139:55276] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:09:43.251322 2026] [ssl:error] [pid 2489924:tid 2489924] (70014)End of file found: [client 216.73.216.199:58951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:43.661932 2026] [ssl:error] [pid 2507676:tid 2507676] (EAI 2)Name or service not known: [client 144.76.19.72:64538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:43.661964 2026] [ssl:error] [pid 2507676:tid 2507676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:43.715504 2026] [ssl:error] [pid 2510890:tid 2510890] (EAI 2)Name or service not known: [client 144.76.19.72:64546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:43.715539 2026] [ssl:error] [pid 2510890:tid 2510890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:44.676554 2026] [security2:error] [pid 2508698:tid 2508698] [client 49.51.233.46:49520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "amsGyFInMqSCAYG3oPEC2QAAADE"]
[Thu Jul 30 09:09:44.767881 2026] [ssl:error] [pid 2506757:tid 2506757] (70014)End of file found: [client 216.73.216.199:64643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:44.797774 2026] [security2:error] [pid 2502376:tid 2502376] [client 43.156.37.91:38268] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "amsGyH5KQ5mswuWywGOhxQAAAAo"]
[Thu Jul 30 09:09:45.074723 2026] [security2:error] [pid 2501306:tid 2501306] [client 103.67.163.43:60001] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "chemicalgalaxy.co.uk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amsGyW-UFR1HzmAIy-J9igAAABg"]
[Thu Jul 30 09:09:45.074803 2026] [security2:error] [pid 2501306:tid 2501306] [client 103.67.163.43:60001] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "chemicalgalaxy.co.uk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amsGyW-UFR1HzmAIy-J9igAAABg"]
[Thu Jul 30 09:09:45.075116 2026] [security2:error] [pid 2501306:tid 2501306] [client 103.67.163.43:60001] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chemicalgalaxy.co.uk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amsGyW-UFR1HzmAIy-J9igAAABg"]
[Thu Jul 30 09:09:45.075315 2026] [security2:error] [pid 2501306:tid 2501306] [client 103.67.163.43:60001] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 7 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request Containing Content, but Missing Content-Type header"] [tag "event-correlation"] [hostname "chemicalgalaxy.co.uk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amsGyW-UFR1HzmAIy-J9igAAABg"]
[Thu Jul 30 09:09:45.215219 2026] [security2:error] [pid 2510770:tid 2510770] [client 150.109.119.38:46130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amsGyZnWHyHiA9AynxkNfgAAACA"]
[Thu Jul 30 09:09:45.217036 2026] [authz_core:error] [pid 2510770:tid 2510770] [client 150.109.119.38:46130] AH01630: client denied by server configuration: /home/robincou/public_html/error_log
[Thu Jul 30 09:09:45.367940 2026] [security2:error] [pid 2510964:tid 2510964] [client 43.157.174.69:44362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.co.uk"] [uri "/"] [unique_id "amsGyaGYVyrscNNMef_V7gAAAEc"]
[Thu Jul 30 09:09:45.534834 2026] [security2:error] [pid 2510889:tid 2510889] [client 43.159.149.216:58038] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amsGyVhwfPtU_gfUJdWr8wAAAEE"], referer: http://junglejacks.co.uk
[Thu Jul 30 09:09:46.017917 2026] [security2:error] [pid 2510566:tid 2510566] [client 43.156.37.91:40168] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsGymA4pSVSm5Hp76dOAAAAADg"], referer: http://spamp.co.uk
[Thu Jul 30 09:09:46.521795 2026] [security2:error] [pid 2510770:tid 2510770] [client 43.131.32.36:54732] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "leaccess.co.uk"] [uri "/"] [unique_id "amsGypnWHyHiA9AynxkNfwAAACA"]
[Thu Jul 30 09:09:46.691710 2026] [security2:error] [pid 2510842:tid 2510842] [client 49.51.233.46:51142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amsGyjLHgHcn556dNA56BAAAAD0"], referer: http://thesilkshed.co.uk
[Thu Jul 30 09:09:46.768625 2026] [security2:error] [pid 2502376:tid 2502376] [client 43.157.174.69:34694] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsGyn5KQ5mswuWywGOhxwAAAAo"], referer: http://saturnsports.co.uk
[Thu Jul 30 09:09:46.773540 2026] [ssl:error] [pid 2507710:tid 2507710] (EAI 2)Name or service not known: [client 144.76.19.72:64550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:46.773583 2026] [ssl:error] [pid 2507710:tid 2507710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:46.837044 2026] [ssl:error] [pid 2510890:tid 2510890] (EAI 2)Name or service not known: [client 144.76.19.72:64560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:46.837094 2026] [ssl:error] [pid 2510890:tid 2510890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:46.882719 2026] [authz_core:error] [pid 2504433:tid 2504433] [client 144.172.105.5:59996] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/ModuleInstall/error_log
[Thu Jul 30 09:09:47.148626 2026] [security2:error] [pid 2507676:tid 2507676] [client 42.93.47.103:16204] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "close, keep-alive"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsGy5GRj4h6xrLD426jbwAAABk"]
[Thu Jul 30 09:09:47.174002 2026] [authz_core:error] [pid 2510770:tid 2510770] [client 57.141.0.45:57574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:47.174627 2026] [authz_core:error] [pid 2510770:tid 2510770] [client 57.141.0.45:57574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:47.566058 2026] [authz_core:error] [pid 2504433:tid 2504433] [client 144.172.105.5:59996] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/ModuleInstall/PackageManager/error_log
[Thu Jul 30 09:09:48.456997 2026] [security2:error] [pid 2502376:tid 2502376] [client 43.156.37.91:46598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsGzH5KQ5mswuWywGOhyQAAAAo"], referer: http://spamp.com/
[Thu Jul 30 09:09:49.890371 2026] [ssl:error] [pid 2502376:tid 2502376] (EAI 2)Name or service not known: [client 144.76.19.72:24508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:49.890410 2026] [ssl:error] [pid 2502376:tid 2502376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:49.941470 2026] [ssl:error] [pid 2504793:tid 2504793] (EAI 2)Name or service not known: [client 144.76.19.72:24522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:49.941497 2026] [ssl:error] [pid 2504793:tid 2504793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:50.020006 2026] [security2:error] [pid 2504433:tid 2504433] [client 43.157.174.69:52178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amsGzluwAR7k9A7WOI_mKwAAAB4"]
[Thu Jul 30 09:09:50.638229 2026] [security2:error] [pid 2502376:tid 2502376] [client 43.165.67.31:35954] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsGzn5KQ5mswuWywGOhygAAAAo"]
[Thu Jul 30 09:09:50.667640 2026] [autoindex:error] [pid 2497479:tid 2497479] [client 144.172.105.5:60028] AH01276: Cannot serve directory /home/winterb/public_html/suitecrm/ModuleInstall/PackageManager/config.gently/: No matching DirectoryIndex (config.gently.php) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 09:09:51.008875 2026] [security2:error] [pid 2504793:tid 2504793] [client 43.157.174.69:42336] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsGz_xjVceg8BwhAAwHYgAAAAw"], referer: http://spampmusic.co.uk
[Thu Jul 30 09:09:51.606769 2026] [authz_core:error] [pid 2497479:tid 2497479] [client 144.172.105.5:60028] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/error_log
[Thu Jul 30 09:09:51.700875 2026] [core:error] [pid 2502925:tid 2502925] (13)Permission denied: [client 216.73.216.199:46109] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/graphics/fb0/device/driver/unbind
[Thu Jul 30 09:09:52.025984 2026] [authz_core:error] [pid 2510802:tid 2510802] [client 57.141.0.59:27712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:09:52.026610 2026] [authz_core:error] [pid 2510802:tid 2510802] [client 57.141.0.59:27712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:09:52.281694 2026] [security2:error] [pid 2510566:tid 2510566] [client 171.115.128.45:14623] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "close, keep-alive"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsG0GA4pSVSm5Hp76dOAgAAADg"]
[Thu Jul 30 09:09:52.297309 2026] [security2:error] [pid 2504433:tid 2504433] [client 43.165.7.74:59910] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsG0FuwAR7k9A7WOI_mLQAAAB4"]
[Thu Jul 30 09:09:53.035855 2026] [ssl:error] [pid 2509017:tid 2509017] (EAI 2)Name or service not known: [client 144.76.19.72:24528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:53.035893 2026] [ssl:error] [pid 2509017:tid 2509017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:53.089566 2026] [ssl:error] [pid 2510486:tid 2510486] (EAI 2)Name or service not known: [client 144.76.19.72:24540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:53.089621 2026] [ssl:error] [pid 2510486:tid 2510486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:53.513141 2026] [security2:error] [pid 2510567:tid 2510567] [client 43.165.7.74:37734] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsG0Syfj8cbA85hi0rRMwAAADk"], referer: http://staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 09:09:53.580631 2026] [authz_core:error] [pid 2504793:tid 2504793] [client 144.172.105.5:60038] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Crypt/error_log
[Thu Jul 30 09:09:54.407856 2026] [ssl:error] [pid 2510564:tid 2510564] (70014)End of file found: [client 216.73.216.199:7653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:55.316892 2026] [ssl:error] [pid 2502925:tid 2502925] (70014)End of file found: [client 216.73.216.199:46109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:56.146543 2026] [ssl:error] [pid 2508593:tid 2508593] (EAI 2)Name or service not known: [client 144.76.19.72:24548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:56.146584 2026] [ssl:error] [pid 2508593:tid 2508593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:56.199562 2026] [ssl:error] [pid 2508626:tid 2508626] (EAI 2)Name or service not known: [client 144.76.19.72:24554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:56.199615 2026] [ssl:error] [pid 2508626:tid 2508626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:56.284242 2026] [authz_core:error] [pid 2510567:tid 2510567] [client 144.172.105.5:41886] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Crypt/Hmac/error_log
[Thu Jul 30 09:09:56.295223 2026] [security2:error] [pid 2509017:tid 2509017] [client 43.133.66.51:45424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highcleresyndicates.co.uk"] [uri "/"] [unique_id "amsG1HqGCFyd38UaDXCH2wAAAA8"]
[Thu Jul 30 09:09:56.925738 2026] [authz_core:error] [pid 2508698:tid 2508698] [client 144.172.105.5:41890] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Crypt/Math/error_log
[Thu Jul 30 09:09:57.122059 2026] [ssl:error] [pid 2510485:tid 2510485] (70014)End of file found: [client 216.73.216.199:55608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:09:59.257531 2026] [ssl:error] [pid 2510563:tid 2510563] (EAI 2)Name or service not known: [client 144.76.19.72:24558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:59.257558 2026] [ssl:error] [pid 2510563:tid 2510563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:09:59.311056 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:24570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:09:59.311119 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:00.848494 2026] [authz_core:error] [pid 2510890:tid 2510890] [client 144.172.105.5:41952] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/error_log
[Thu Jul 30 09:10:00.895532 2026] [security2:error] [pid 2513242:tid 2513242] [client 43.153.54.138:34190] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wurlitzer.co.uk"] [uri "/"] [unique_id "amsG2C29vuvfnT8aQVDXXQAAAAY"]
[Thu Jul 30 09:10:01.334008 2026] [ssl:error] [pid 2497479:tid 2497479] (70014)End of file found: [client 216.73.216.199:7267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:01.365972 2026] [core:error] [pid 2510892:tid 2510892] [client 66.249.64.172:40336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:01.366003 2026] [core:error] [pid 2510892:tid 2510892] [client 66.249.64.172:40336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:02.364547 2026] [ssl:error] [pid 2501306:tid 2501306] (EAI 2)Name or service not known: [client 144.76.19.72:58630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:02.364604 2026] [ssl:error] [pid 2501306:tid 2501306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:02.417594 2026] [ssl:error] [pid 2513286:tid 2513286] (EAI 2)Name or service not known: [client 144.76.19.72:58640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:02.417633 2026] [ssl:error] [pid 2513286:tid 2513286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:02.437670 2026] [security2:error] [pid 2510485:tid 2510485] [client 85.208.96.197:50662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/who-inherited-cole-porter's-estate"] [unique_id "amsG2jPZDJcuG4jZXSTdGAAAACM"]
[Thu Jul 30 09:10:02.444165 2026] [core:error] [pid 2510892:tid 2510892] (13)Permission denied: [client 216.73.216.199:58306] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/random/uevent
[Thu Jul 30 09:10:02.569936 2026] [security2:error] [pid 2504433:tid 2504433] [client 43.153.86.78:53672] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "amsG2luwAR7k9A7WOI_mMAAAAB4"]
[Thu Jul 30 09:10:03.069471 2026] [security2:error] [pid 2513289:tid 2513289] [client 43.134.91.35:43782] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amsG23pLlrMmnRLzjHU9agAAAAs"]
[Thu Jul 30 09:10:03.073207 2026] [security2:error] [pid 2513286:tid 2513286] [client 43.153.54.138:55168] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsG24jTcCRkJ439KpSFEgAAAAg"], referer: http://wurlitzer.co.uk
[Thu Jul 30 09:10:03.404182 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.167.239.66:43456] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "cssystems.co.uk"] [uri "/"] [unique_id "amsG2zPZDJcuG4jZXSTdGQAAACM"], referer: http://cssystems.co.uk
[Thu Jul 30 09:10:04.477939 2026] [security2:error] [pid 2513439:tid 2513439] [client 43.134.91.35:54874] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amsG3NdyQAL0I7FTK0QyFwAAACI"], referer: http://hazardous-materials.co.uk
[Thu Jul 30 09:10:05.080238 2026] [security2:error] [pid 2513432:tid 2513432] [client 43.167.241.46:40440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsG3cs31QSNrnVruIh4wwAAABM"], referer: http://banskoexpresstransfers.co.uk
[Thu Jul 30 09:10:05.475717 2026] [ssl:error] [pid 2495409:tid 2495409] (EAI 2)Name or service not known: [client 144.76.19.72:58652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:05.475758 2026] [ssl:error] [pid 2495409:tid 2495409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:05.528960 2026] [ssl:error] [pid 2513287:tid 2513287] (EAI 2)Name or service not known: [client 144.76.19.72:58662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:05.528991 2026] [ssl:error] [pid 2513287:tid 2513287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:06.624123 2026] [authz_core:error] [pid 2513437:tid 2513437] [client 57.141.0.31:63228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:06.624740 2026] [authz_core:error] [pid 2513437:tid 2513437] [client 57.141.0.31:63228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:07.294231 2026] [security2:error] [pid 2513439:tid 2513439] [client 43.167.241.46:41998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsG39dyQAL0I7FTK0QyGAAAACI"], referer: http://www.banskoexpress.com
[Thu Jul 30 09:10:07.638980 2026] [security2:error] [pid 2510889:tid 2510889] [client 43.167.157.80:40846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amsG31hwfPtU_gfUJdWr-QAAAEE"]
[Thu Jul 30 09:10:07.764746 2026] [ssl:error] [pid 2510842:tid 2510842] (70014)End of file found: [client 216.73.216.199:35419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:08.473909 2026] [security2:error] [pid 2489924:tid 2489924] [client 43.159.35.188:41782] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "amsG4PU-2c9DFFds9k8qugAAACU"]
[Thu Jul 30 09:10:08.556827 2026] [ssl:error] [pid 2500195:tid 2500195] (70014)End of file found: [client 216.73.216.199:1140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:08.584223 2026] [ssl:error] [pid 2510839:tid 2510839] (EAI 2)Name or service not known: [client 144.76.19.72:58674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:08.584257 2026] [ssl:error] [pid 2510839:tid 2510839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:08.637396 2026] [ssl:error] [pid 2513287:tid 2513287] (EAI 2)Name or service not known: [client 144.76.19.72:58680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:08.637420 2026] [ssl:error] [pid 2513287:tid 2513287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:08.945135 2026] [security2:error] [pid 2510563:tid 2510563] [client 43.130.102.223:32828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsG4Eb0dJX7rpzpX0GkiAAAADU"]
[Thu Jul 30 09:10:10.221624 2026] [security2:error] [pid 2510889:tid 2510889] [client 170.106.65.93:46054] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsG4lhwfPtU_gfUJdWr-gAAAEE"]
[Thu Jul 30 09:10:10.452179 2026] [security2:error] [pid 2513289:tid 2513289] [client 170.106.65.93:46218] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.fr"] [uri "/"] [unique_id "amsG4npLlrMmnRLzjHU9cAAAAAs"]
[Thu Jul 30 09:10:10.476469 2026] [security2:error] [pid 2510839:tid 2510839] [client 43.130.102.223:37474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsG4pEpKYYUuRrdy-E6eAAAADo"], referer: http://berehap.be
[Thu Jul 30 09:10:10.658041 2026] [security2:error] [pid 2507710:tid 2507710] [client 43.166.128.86:33624] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amsG4g8hSdbkyiNmi6bPSQAAAC4"]
[Thu Jul 30 09:10:10.981972 2026] [authz_core:error] [pid 2510561:tid 2510561] [client 144.172.105.5:58328] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/App/error_log
[Thu Jul 30 09:10:11.059827 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.130.78.203:47894] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/"] [unique_id "amsG4zPZDJcuG4jZXSTdIQAAACM"]
[Thu Jul 30 09:10:11.091230 2026] [security2:error] [pid 2489924:tid 2489924] [client 43.157.191.20:41022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "greenduckgallery.co.uk"] [uri "/"] [unique_id "amsG4_U-2c9DFFds9k8quwAAACU"]
[Thu Jul 30 09:10:11.692256 2026] [ssl:error] [pid 2513241:tid 2513241] (EAI 2)Name or service not known: [client 144.76.19.72:65028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:11.692293 2026] [ssl:error] [pid 2513241:tid 2513241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:11.790729 2026] [ssl:error] [pid 2510561:tid 2510561] (EAI 2)Name or service not known: [client 144.76.19.72:65034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:11.790775 2026] [ssl:error] [pid 2510561:tid 2510561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:11.984384 2026] [core:error] [pid 2510892:tid 2510892] (13)Permission denied: [client 216.73.216.199:58306] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/physical_node/resource1
[Thu Jul 30 09:10:12.285529 2026] [ssl:error] [pid 2510892:tid 2510892] (70014)End of file found: [client 216.73.216.199:58306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:12.326614 2026] [security2:error] [pid 2508698:tid 2508698] [client 43.153.119.119:42798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "islay.me"] [uri "/"] [unique_id "amsG5FInMqSCAYG3oPEC5gAAADE"]
[Thu Jul 30 09:10:12.585224 2026] [authz_core:error] [pid 2507710:tid 2507710] [client 57.141.0.28:54892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:12.586164 2026] [authz_core:error] [pid 2507710:tid 2507710] [client 57.141.0.28:54892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:12.630887 2026] [security2:error] [pid 2510561:tid 2510561] [client 43.153.107.22:46048] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amsG5IkGX8bm8NvXmLt3fAAAACw"]
[Thu Jul 30 09:10:12.861918 2026] [security2:error] [pid 2489924:tid 2489924] [client 170.106.65.93:39358] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsG5PU-2c9DFFds9k8qvAAAACU"], referer: http://orgent.fr
[Thu Jul 30 09:10:13.071193 2026] [ssl:error] [pid 2510770:tid 2510770] (70014)End of file found: [client 216.73.216.199:43877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:13.220490 2026] [security2:error] [pid 2513241:tid 2513241] [client 170.106.65.93:39390] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsG5YjgTkQuKOrvG9XH4AAAAAU"], referer: http://orgent.eu
[Thu Jul 30 09:10:13.261700 2026] [security2:error] [pid 2507710:tid 2507710] [client 43.166.251.233:38084] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsG5Q8hSdbkyiNmi6bPSwAAAC4"]
[Thu Jul 30 09:10:13.346643 2026] [security2:error] [pid 2510484:tid 2510484] [client 43.130.78.203:50106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsG5Ul2gU484kiIZkBKnwAAAB8"], referer: http://clarepillinger.co.uk
[Thu Jul 30 09:10:13.762000 2026] [security2:error] [pid 2510839:tid 2510839] [client 43.166.251.233:38350] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sewyork.co.uk"] [uri "/"] [unique_id "amsG5ZEpKYYUuRrdy-E6egAAADo"]
[Thu Jul 30 09:10:14.008278 2026] [security2:error] [pid 2499334:tid 2499334] [client 43.130.102.223:39516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsG5meGI7fAtUmj_YJuTwAAABA"], referer: https://www.berehap.be/
[Thu Jul 30 09:10:14.607003 2026] [security2:error] [pid 2508698:tid 2508698] [client 43.135.133.241:57304] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsG5lInMqSCAYG3oPEC6QAAADE"]
[Thu Jul 30 09:10:14.758864 2026] [security2:error] [pid 2504433:tid 2504433] [client 43.159.139.164:53410] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "amsG5luwAR7k9A7WOI_mMwAAAB4"]
[Thu Jul 30 09:10:14.881975 2026] [ssl:error] [pid 2513201:tid 2513201] (EAI 2)Name or service not known: [client 144.76.19.72:65044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:14.882006 2026] [ssl:error] [pid 2513201:tid 2513201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:14.937529 2026] [ssl:error] [pid 2509017:tid 2509017] (EAI 2)Name or service not known: [client 144.76.19.72:65060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:14.937560 2026] [ssl:error] [pid 2509017:tid 2509017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:15.124230 2026] [security2:error] [pid 2514092:tid 2514092] [client 43.135.133.194:38376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.co.uk"] [uri "/"] [unique_id "amsG5-uo3CE64T8u9QiItQAAACE"]
[Thu Jul 30 09:10:15.500786 2026] [security2:error] [pid 2507710:tid 2507710] [client 43.130.228.73:48270] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "epmsonline.co.uk"] [uri "/"] [unique_id "amsG5w8hSdbkyiNmi6bPTAAAAC4"]
[Thu Jul 30 09:10:15.900279 2026] [core:error] [pid 2512471:tid 2512471] (13)Permission denied: [client 216.73.216.199:48961] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfnetlink/sections/__mcount_loc
[Thu Jul 30 09:10:16.077524 2026] [lsapi:warn] [pid 2507710:tid 2507710] [client 43.130.228.73:48270] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 09:10:16.239182 2026] [security2:error] [pid 2513440:tid 2513440] [client 43.166.251.233:46418] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsG6FYpTFVsTYlJLIXR0wAAACQ"], referer: http://prosperon.co.uk
[Thu Jul 30 09:10:16.329777 2026] [security2:error] [pid 2499334:tid 2499334] [client 43.130.101.151:52080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amsG6GeGI7fAtUmj_YJuUAAAABA"]
[Thu Jul 30 09:10:17.070216 2026] [security2:error] [pid 2509017:tid 2509017] [client 43.130.101.151:52784] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amsG6XqGCFyd38UaDXCH5wAAAA8"]
[Thu Jul 30 09:10:17.588216 2026] [security2:error] [pid 2507710:tid 2507710] [client 43.165.167.72:38222] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "inrc.org.uk"] [uri "/"] [unique_id "amsG6Q8hSdbkyiNmi6bPTQAAAC4"]
[Thu Jul 30 09:10:17.642328 2026] [security2:error] [pid 2513432:tid 2513432] [client 43.135.133.241:50598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsG6cs31QSNrnVruIh4xgAAABM"], referer: http://tompalmer.co.uk
[Thu Jul 30 09:10:17.994092 2026] [ssl:error] [pid 2510892:tid 2510892] (EAI 2)Name or service not known: [client 144.76.19.72:65068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:17.994126 2026] [ssl:error] [pid 2510892:tid 2510892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:18.048966 2026] [ssl:error] [pid 2502925:tid 2502925] (EAI 2)Name or service not known: [client 144.76.19.72:65072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:18.049007 2026] [ssl:error] [pid 2502925:tid 2502925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:18.637171 2026] [authz_core:error] [pid 2510892:tid 2510892] [client 57.141.0.26:25296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:18.637841 2026] [authz_core:error] [pid 2510892:tid 2510892] [client 57.141.0.26:25296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:18.780158 2026] [security2:error] [pid 2510563:tid 2510563] [client 43.130.101.151:51316] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsG6kb0dJX7rpzpX0GkigAAADU"], referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 09:10:18.781955 2026] [authz_core:error] [pid 2510563:tid 2510563] [client 43.130.101.151:51316] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 09:10:18.784631 2026] [authz_core:error] [pid 2510563:tid 2510563] [client 43.130.101.151:51316] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 09:10:18.800376 2026] [security2:error] [pid 2509017:tid 2509017] [client 43.130.101.151:51324] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsG6nqGCFyd38UaDXCH6AAAAA8"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:10:18.802160 2026] [authz_core:error] [pid 2509017:tid 2509017] [client 43.130.101.151:51324] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:10:18.804803 2026] [authz_core:error] [pid 2509017:tid 2509017] [client 43.130.101.151:51324] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:10:18.886978 2026] [authz_core:error] [pid 2502925:tid 2502925] [client 144.172.105.5:53104] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/App/Extension/error_log
[Thu Jul 30 09:10:19.212843 2026] [ssl:error] [pid 2512471:tid 2512471] (70014)End of file found: [client 216.73.216.199:48961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:19.520056 2026] [security2:error] [pid 2510891:tid 2510891] [client 43.130.228.73:52916] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "techsuccess.uk"] [uri "/"] [unique_id "amsG6yo2POPqsdk9P8mBhgAAAEM"]
[Thu Jul 30 09:10:19.814737 2026] [core:error] [pid 2513289:tid 2513289] (13)Permission denied: [client 216.73.216.199:25048] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/device/subsystem/uevent
[Thu Jul 30 09:10:19.841093 2026] [security2:error] [pid 2509017:tid 2509017] [client 170.106.143.6:38968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amsG63qGCFyd38UaDXCH6QAAAA8"]
[Thu Jul 30 09:10:20.316450 2026] [ssl:error] [pid 2510890:tid 2510890] (70014)End of file found: [client 216.73.216.199:25099] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:21.066860 2026] [security2:error] [pid 2513432:tid 2513432] [client 49.51.195.195:34416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amsG7cs31QSNrnVruIh4yAAAABM"], referer: http://peterboroughdiocesanregistry.co.uk
[Thu Jul 30 09:10:21.091408 2026] [security2:error] [pid 2513438:tid 2513438] [client 49.51.253.83:60750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amsG7Qq7uGO3LOTwgxU8kwAAAB0"]
[Thu Jul 30 09:10:21.104198 2026] [ssl:error] [pid 2510891:tid 2510891] (EAI 2)Name or service not known: [client 144.76.19.72:32366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:21.104222 2026] [ssl:error] [pid 2510891:tid 2510891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:21.156470 2026] [ssl:error] [pid 2510839:tid 2510839] (EAI 2)Name or service not known: [client 144.76.19.72:32370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:21.156496 2026] [ssl:error] [pid 2510839:tid 2510839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:21.212959 2026] [ssl:error] [pid 2508593:tid 2508593] (70014)End of file found: [client 216.73.216.199:65314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:21.679714 2026] [core:error] [pid 2514030:tid 2514030] [client 66.249.64.171:48065] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:21.679744 2026] [core:error] [pid 2514030:tid 2514030] [client 66.249.64.171:48065] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:21.714786 2026] [core:error] [pid 2509017:tid 2509017] (13)Permission denied: [client 216.73.216.199:47888] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup10/device/physical_node/resource0
[Thu Jul 30 09:10:22.120469 2026] [ssl:error] [pid 2509017:tid 2509017] (70014)End of file found: [client 216.73.216.199:47888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:22.524424 2026] [security2:error] [pid 2508626:tid 2508626] [client 170.106.143.6:39012] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amsG7qQlG-jKrgwtLiTiOgAAACc"], referer: http://baketastic.co.uk
[Thu Jul 30 09:10:22.982536 2026] [core:error] [pid 2513435:tid 2513435] [client 66.249.66.168:60794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:22.982559 2026] [core:error] [pid 2513435:tid 2513435] [client 66.249.66.168:60794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:22.985776 2026] [core:error] [pid 2510403:tid 2510403] [client 66.249.66.68:35444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:22.985793 2026] [core:error] [pid 2510403:tid 2510403] [client 66.249.66.68:35444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:24.138019 2026] [security2:error] [pid 2510403:tid 2510403] [client 43.134.78.217:58830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsG8Ojy2N0sf2wkOxj_mwAAABI"]
[Thu Jul 30 09:10:24.230901 2026] [ssl:error] [pid 2514030:tid 2514030] (EAI 2)Name or service not known: [client 144.76.19.72:32376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:24.230942 2026] [ssl:error] [pid 2514030:tid 2514030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:24.292268 2026] [ssl:error] [pid 2508626:tid 2508626] (EAI 2)Name or service not known: [client 144.76.19.72:32382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:24.292298 2026] [ssl:error] [pid 2508626:tid 2508626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:24.978872 2026] [security2:error] [pid 2514030:tid 2514030] [client 43.166.246.180:45740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amsG8Oikt8R766HZANVMAQAAAAk"]
[Thu Jul 30 09:10:27.284495 2026] [security2:error] [pid 2514030:tid 2514030] [client 43.156.228.27:36874] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchellphotography.co.uk"] [uri "/"] [unique_id "amsG8-ikt8R766HZANVMAgAAAAk"]
[Thu Jul 30 09:10:27.347603 2026] [ssl:error] [pid 2510403:tid 2510403] (EAI 2)Name or service not known: [client 144.76.19.72:32392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:27.347641 2026] [ssl:error] [pid 2510403:tid 2510403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:27.402438 2026] [ssl:error] [pid 2499334:tid 2499334] (EAI 2)Name or service not known: [client 144.76.19.72:32400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:27.402471 2026] [ssl:error] [pid 2499334:tid 2499334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:28.145936 2026] [core:error] [pid 2513242:tid 2513242] (13)Permission denied: [client 216.73.216.199:47440] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/net/eth0/device/subsystem/drivers_probe
[Thu Jul 30 09:10:28.446405 2026] [security2:error] [pid 2513242:tid 2513242] [client 216.73.216.199:47440] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default-cgv1/tuned.conf"] [unique_id "amsG9C29vuvfnT8aQVDXcQAAAAY"]
[Thu Jul 30 09:10:28.446693 2026] [security2:error] [pid 2513242:tid 2513242] [client 216.73.216.199:47440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default-cgv1/tuned.conf"] [unique_id "amsG9C29vuvfnT8aQVDXcQAAAAY"]
[Thu Jul 30 09:10:28.446900 2026] [security2:error] [pid 2513242:tid 2513242] [client 216.73.216.199:47440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default-cgv1/tuned.conf"] [unique_id "amsG9C29vuvfnT8aQVDXcQAAAAY"]
[Thu Jul 30 09:10:28.535588 2026] [security2:error] [pid 2510889:tid 2510889] [client 43.159.149.56:34238] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amsG9FhwfPtU_gfUJdWsAwAAAEE"]
[Thu Jul 30 09:10:28.649179 2026] [security2:error] [pid 2510892:tid 2510892] [client 43.134.78.217:50864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsG9PqMBdUv_3lq41qCvgAAAEQ"], referer: http://maisongerlyn.be
[Thu Jul 30 09:10:29.343613 2026] [lsapi:warn] [pid 2514092:tid 2514092] [client 84.68.128.247:58578] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:10:29.343652 2026] [lsapi:warn] [pid 2514092:tid 2514092] [client 84.68.128.247:58578] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:10:29.462733 2026] [authz_core:error] [pid 2497479:tid 2497479] [client 144.172.105.5:50214] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Books/error_log
[Thu Jul 30 09:10:29.551389 2026] [ssl:error] [pid 2504793:tid 2504793] (70014)End of file found: [client 216.73.216.199:1183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:29.952278 2026] [ssl:error] [pid 2513242:tid 2513242] (70014)End of file found: [client 216.73.216.199:47440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:30.458873 2026] [ssl:error] [pid 2497479:tid 2497479] (EAI 2)Name or service not known: [client 144.76.19.72:46026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:30.458899 2026] [ssl:error] [pid 2497479:tid 2497479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:30.473870 2026] [security2:error] [pid 2513241:tid 2513241] [client 43.156.232.154:38668] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "amsG9ojgTkQuKOrvG9XIHgAAAAU"]
[Thu Jul 30 09:10:30.513560 2026] [ssl:error] [pid 2513434:tid 2513434] (EAI 2)Name or service not known: [client 144.76.19.72:46036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:30.513611 2026] [ssl:error] [pid 2513434:tid 2513434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:31.156983 2026] [ssl:error] [pid 2512471:tid 2512471] (70014)End of file found: [client 216.73.216.199:6697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:31.829041 2026] [security2:error] [pid 2515003:tid 2515003] [client 43.165.167.72:51104] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amsG988lZ1YZh1UX35Gc5QAAAB4"]
[Thu Jul 30 09:10:31.837919 2026] [authz_core:error] [pid 2510892:tid 2510892] [client 144.172.105.5:50262] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Books/Extension/error_log
[Thu Jul 30 09:10:32.895270 2026] [security2:error] [pid 2514092:tid 2514092] [client 101.32.49.171:43622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amsG-Ouo3CE64T8u9QiIuwAAACE"]
[Thu Jul 30 09:10:33.572930 2026] [ssl:error] [pid 2515048:tid 2515048] (EAI 2)Name or service not known: [client 144.76.19.72:46048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:33.572968 2026] [ssl:error] [pid 2515048:tid 2515048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:33.631221 2026] [ssl:error] [pid 2515051:tid 2515051] (EAI 2)Name or service not known: [client 144.76.19.72:46052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:33.631256 2026] [ssl:error] [pid 2515051:tid 2515051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:34.171306 2026] [security2:error] [pid 2515049:tid 2515049] [client 43.159.139.164:43136] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "fast-hosting.co.uk"] [uri "/"] [unique_id "amsG-pEsY2rmgniST-5YpQAAACg"]
[Thu Jul 30 09:10:34.181561 2026] [authz_core:error] [pid 2515051:tid 2515051] [client 66.249.66.33:46483] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:10:34.184264 2026] [authz_core:error] [pid 2515051:tid 2515051] [client 66.249.66.33:46483] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:10:34.569504 2026] [lsapi:warn] [pid 2515003:tid 2515003] [client 112.86.225.220:45374] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:10:34.569548 2026] [lsapi:warn] [pid 2515003:tid 2515003] [client 112.86.225.220:45374] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:10:34.624487 2026] [security2:error] [pid 2510890:tid 2510890] [client 101.32.49.171:45238] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsG-k5KFr7jyyMhWT-WlgAAAEI"], referer: http://rogersbarbershopltd.co.uk
[Thu Jul 30 09:10:35.671750 2026] [ssl:error] [pid 2515049:tid 2515049] (70014)End of file found: [client 216.73.216.199:37592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:35.852737 2026] [authz_core:error] [pid 2510891:tid 2510891] [client 144.172.105.5:55144] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Calendar/error_log
[Thu Jul 30 09:10:36.083241 2026] [cgi:error] [pid 2506011:tid 2506011] [client 20.203.205.96:14921] AH02812: stderr from /home/chateaus/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:10:36.251447 2026] [authz_core:error] [pid 2513435:tid 2513435] [client 57.141.0.12:24224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:36.252075 2026] [authz_core:error] [pid 2513435:tid 2513435] [client 57.141.0.12:24224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:36.641765 2026] [authz_core:error] [pid 2512471:tid 2512471] [client 57.141.0.12:24230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:36.642394 2026] [authz_core:error] [pid 2512471:tid 2512471] [client 57.141.0.12:24230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:36.686619 2026] [ssl:error] [pid 2514030:tid 2514030] (EAI 2)Name or service not known: [client 144.76.19.72:46054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:36.686645 2026] [ssl:error] [pid 2514030:tid 2514030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:36.743378 2026] [ssl:error] [pid 2515283:tid 2515283] (EAI 2)Name or service not known: [client 144.76.19.72:46064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:36.743413 2026] [ssl:error] [pid 2515283:tid 2515283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:37.674658 2026] [security2:error] [pid 2514950:tid 2514950] [client 78.190.120.140:3586] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsG_ZGc_0lV2Q1AHjQOCgAAAAI"]
[Thu Jul 30 09:10:37.674716 2026] [security2:error] [pid 2514950:tid 2514950] [client 78.190.120.140:3586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsG_ZGc_0lV2Q1AHjQOCgAAAAI"]
[Thu Jul 30 09:10:37.674986 2026] [security2:error] [pid 2514950:tid 2514950] [client 78.190.120.140:3586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsG_ZGc_0lV2Q1AHjQOCgAAAAI"]
[Thu Jul 30 09:10:38.748775 2026] [security2:error] [pid 2510563:tid 2510563] [client 43.135.139.165:47948] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "craft-buddies.co.uk"] [uri "/"] [unique_id "amsG_kb0dJX7rpzpX0GkuQAAADU"]
[Thu Jul 30 09:10:39.337343 2026] [core:error] [pid 2515051:tid 2515051] (13)Permission denied: [client 216.73.216.199:40303] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/usb-conn-gpio/unbind
[Thu Jul 30 09:10:39.370945 2026] [security2:error] [pid 2500761:tid 2500761] [client 43.153.110.213:64047] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsG__uy9LZllfErU9XvbwAAAAc"]
[Thu Jul 30 09:10:39.370989 2026] [security2:error] [pid 2500761:tid 2500761] [client 43.153.110.213:64047] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsG__uy9LZllfErU9XvbwAAAAc"]
[Thu Jul 30 09:10:39.371222 2026] [security2:error] [pid 2500761:tid 2500761] [client 43.153.110.213:64047] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsG__uy9LZllfErU9XvbwAAAAc"]
[Thu Jul 30 09:10:39.702866 2026] [authz_core:error] [pid 2514950:tid 2514950] [client 57.141.0.50:54918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:39.703492 2026] [authz_core:error] [pid 2514950:tid 2514950] [client 57.141.0.50:54918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:39.853277 2026] [security2:error] [pid 2510889:tid 2510889] [client 185.191.171.6:35296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/pros-and-cons-of-living-in-bullhead-city,-az"] [unique_id "amsG_1hwfPtU_gfUJdWsBgAAAEE"]
[Thu Jul 30 09:10:39.867781 2026] [ssl:error] [pid 2510842:tid 2510842] (EAI 2)Name or service not known: [client 144.76.19.72:27018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:39.867807 2026] [ssl:error] [pid 2510842:tid 2510842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:39.920432 2026] [ssl:error] [pid 2500761:tid 2500761] (EAI 2)Name or service not known: [client 144.76.19.72:27034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:39.920455 2026] [ssl:error] [pid 2500761:tid 2500761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:40.911379 2026] [authz_core:error] [pid 2513438:tid 2513438] [client 57.141.0.43:30990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:40.911997 2026] [authz_core:error] [pid 2513438:tid 2513438] [client 57.141.0.43:30990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:41.745423 2026] [security2:error] [pid 2513241:tid 2513241] [client 216.73.216.199:20602] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/dbus.log"] [unique_id "amsHAYjgTkQuKOrvG9XIJwAAAAU"]
[Thu Jul 30 09:10:41.745717 2026] [security2:error] [pid 2513241:tid 2513241] [client 216.73.216.199:20602] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/dbus.log"] [unique_id "amsHAYjgTkQuKOrvG9XIJwAAAAU"]
[Thu Jul 30 09:10:41.745941 2026] [security2:error] [pid 2513241:tid 2513241] [client 216.73.216.199:20602] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/dbus.log"] [unique_id "amsHAYjgTkQuKOrvG9XIJwAAAAU"]
[Thu Jul 30 09:10:42.169680 2026] [authz_core:error] [pid 2510889:tid 2510889] [client 144.172.105.5:55280] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Contacts/error_log
[Thu Jul 30 09:10:42.975624 2026] [ssl:error] [pid 2510889:tid 2510889] (EAI 2)Name or service not known: [client 144.76.19.72:27036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:42.975647 2026] [ssl:error] [pid 2510889:tid 2510889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:43.029867 2026] [ssl:error] [pid 2510485:tid 2510485] (EAI 2)Name or service not known: [client 144.76.19.72:27052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:43.029895 2026] [ssl:error] [pid 2510485:tid 2510485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:43.567477 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.153.110.213:22887] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHAzPZDJcuG4jZXSTdjwAAACM"]
[Thu Jul 30 09:10:43.567524 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.153.110.213:22887] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHAzPZDJcuG4jZXSTdjwAAACM"]
[Thu Jul 30 09:10:43.567781 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.153.110.213:22887] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsHAzPZDJcuG4jZXSTdjwAAACM"]
[Thu Jul 30 09:10:44.343472 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.135.133.194:35264] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "render-farm.co.uk"] [uri "/"] [unique_id "amsHBDPZDJcuG4jZXSTdkAAAACM"]
[Thu Jul 30 09:10:44.555607 2026] [authz_core:error] [pid 2513432:tid 2513432] [client 57.141.0.17:23578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:44.556225 2026] [authz_core:error] [pid 2513432:tid 2513432] [client 57.141.0.17:23578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:44.577800 2026] [security2:error] [pid 2514030:tid 2514030] [client 74.7.242.61:34078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amsHBOikt8R766HZANVMDQAAAAk"], referer: http://www.theface.in
[Thu Jul 30 09:10:44.767525 2026] [authz_core:error] [pid 2508698:tid 2508698] [client 66.249.66.33:54092] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:10:44.770265 2026] [authz_core:error] [pid 2508698:tid 2508698] [client 66.249.66.33:54092] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:10:45.073583 2026] [ssl:error] [pid 2513241:tid 2513241] (70014)End of file found: [client 216.73.216.199:20602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:45.334369 2026] [security2:error] [pid 2499334:tid 2499334] [client 43.166.245.120:46384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amsHBWeGI7fAtUmj_YJuVwAAABA"]
[Thu Jul 30 09:10:45.544599 2026] [security2:error] [pid 2510485:tid 2510485] [client 43.135.144.126:57130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "refraction.co.uk"] [uri "/"] [unique_id "amsHBTPZDJcuG4jZXSTdkQAAACM"]
[Thu Jul 30 09:10:46.081687 2026] [ssl:error] [pid 2510890:tid 2510890] (EAI 2)Name or service not known: [client 144.76.19.72:27060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:46.081716 2026] [ssl:error] [pid 2510890:tid 2510890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:46.134815 2026] [ssl:error] [pid 2510485:tid 2510485] (EAI 2)Name or service not known: [client 144.76.19.72:27064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:46.134837 2026] [ssl:error] [pid 2510485:tid 2510485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:46.787892 2026] [authz_core:error] [pid 2513434:tid 2513434] [client 57.141.0.10:39864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:46.788521 2026] [authz_core:error] [pid 2513434:tid 2513434] [client 57.141.0.10:39864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:46.874675 2026] [core:error] [pid 2515051:tid 2515051] (13)Permission denied: [client 216.73.216.199:40303] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/bes-systems.co.uk.db
[Thu Jul 30 09:10:47.123203 2026] [security2:error] [pid 2495409:tid 2495409] [client 43.166.245.120:54770] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsHB-9Xo0jHXx_gbcb7hAAAAAE"], referer: http://www.prosperon.co.uk
[Thu Jul 30 09:10:47.664947 2026] [authz_core:error] [pid 2510485:tid 2510485] [client 144.172.105.5:58090] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/DublinCore/Extension/error_log
[Thu Jul 30 09:10:47.801250 2026] [security2:error] [pid 2510891:tid 2510891] [client 43.159.138.217:59824] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsHByo2POPqsdk9P8mBjwAAAEM"]
[Thu Jul 30 09:10:48.079744 2026] [ssl:error] [pid 2515051:tid 2515051] (70014)End of file found: [client 216.73.216.199:40303] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:48.951618 2026] [security2:error] [pid 2497479:tid 2497479] [client 43.159.138.217:33174] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsHCPygAf8BjlhGzR6V4AAAAAQ"]
[Thu Jul 30 09:10:48.953149 2026] [authz_core:error] [pid 2497479:tid 2497479] [client 43.159.138.217:33174] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:10:48.954861 2026] [authz_core:error] [pid 2497479:tid 2497479] [client 43.159.138.217:33174] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:10:49.094024 2026] [security2:error] [pid 2510842:tid 2510842] [client 43.159.138.217:33280] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amsHCTLHgHcn556dNA56WwAAAD0"]
[Thu Jul 30 09:10:49.336053 2026] [security2:error] [pid 2506760:tid 2506760] [client 43.159.143.190:57000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sharonduggal.co.uk"] [uri "/"] [unique_id "amsHCc1Pq0c0EVb0gaHwGgAAADA"]
[Thu Jul 30 09:10:50.178138 2026] [security2:error] [pid 2513241:tid 2513241] [client 43.153.71.12:45544] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "localhero.org.uk"] [uri "/"] [unique_id "amsHCojgTkQuKOrvG9XIMwAAAAU"]
[Thu Jul 30 09:10:50.439511 2026] [ssl:error] [pid 2514091:tid 2514091] (EAI 2)Name or service not known: [client 144.76.19.72:27070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:50.439544 2026] [ssl:error] [pid 2514091:tid 2514091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:50.676192 2026] [security2:error] [pid 2516125:tid 2516125] [client 51.68.247.219:59940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/category/building-new/"] [unique_id "amsHCpJ7OHD8tRKfJXA8oAAAAEo"]
[Thu Jul 30 09:10:50.751384 2026] [ssl:error] [pid 2513436:tid 2513436] (EAI 2)Name or service not known: [client 144.76.19.72:50948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:50.751410 2026] [ssl:error] [pid 2513436:tid 2513436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:50.837878 2026] [security2:error] [pid 2516123:tid 2516123] [client 185.191.171.2:44632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/orange-county-sheriff-salary"] [unique_id "amsHCsWS6d7G9Rm_SG0MfAAAAEg"]
[Thu Jul 30 09:10:52.478758 2026] [security2:error] [pid 2516123:tid 2516123] [client 43.159.138.217:50242] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amsHDMWS6d7G9Rm_SG0MfgAAAEg"], referer: http://blow-hairstudio.co.uk
[Thu Jul 30 09:10:53.196699 2026] [ssl:error] [pid 2504793:tid 2504793] (70014)End of file found: [client 216.73.216.199:19419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:53.801832 2026] [security2:error] [pid 2516266:tid 2516266] [client 43.157.172.39:46394] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "amsHDaR2lWg7b7Y5ayAAEwAAAE0"]
[Thu Jul 30 09:10:53.822188 2026] [security2:error] [pid 2516036:tid 2516036] [client 43.159.138.217:37838] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.be"] [uri "/"] [unique_id "amsHDUA_GI_sW7lE6Dj4lwAAADI"]
[Thu Jul 30 09:10:53.831810 2026] [ssl:error] [pid 2516123:tid 2516123] (EAI 2)Name or service not known: [client 144.76.19.72:50950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:53.831848 2026] [ssl:error] [pid 2516123:tid 2516123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:53.885494 2026] [ssl:error] [pid 2515048:tid 2515048] (EAI 2)Name or service not known: [client 144.76.19.72:50954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:53.885519 2026] [ssl:error] [pid 2515048:tid 2515048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:54.291175 2026] [authz_core:error] [pid 2516123:tid 2516123] [client 144.172.105.5:58186] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Exif/error_log
[Thu Jul 30 09:10:55.009533 2026] [ssl:error] [pid 2516126:tid 2516126] (70014)End of file found: [client 216.73.216.199:45575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:55.323674 2026] [security2:error] [pid 2497479:tid 2497479] [client 49.51.233.95:46792] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amsHD_ygAf8BjlhGzR6V4gAAAAQ"]
[Thu Jul 30 09:10:55.437867 2026] [security2:error] [pid 2485662:tid 2485662] [client 43.134.15.174:60386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsHDyUdq7C3r1IXnU6PcwAAACs"], referer: http://banskoexpress.co.uk
[Thu Jul 30 09:10:55.645152 2026] [security2:error] [pid 2516084:tid 2516084] [client 43.157.172.39:50028] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsHDz6ZdXurK3NidB0T6wAAADs"], referer: http://www.all4s.co.uk
[Thu Jul 30 09:10:55.675249 2026] [security2:error] [pid 2510561:tid 2510561] [client 43.162.114.69:40620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "amsHD4kGX8bm8NvXmLt3jgAAACw"]
[Thu Jul 30 09:10:56.073495 2026] [security2:error] [pid 2510839:tid 2510839] [client 43.159.138.217:53804] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsHEJEpKYYUuRrdy-E6kgAAADo"], referer: http://orgent.be
[Thu Jul 30 09:10:56.100370 2026] [security2:error] [pid 2516036:tid 2516036] [client 85.208.96.202:41260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/san-bernardino-police-scanner"] [unique_id "amsHEEA_GI_sW7lE6Dj4mAAAADI"]
[Thu Jul 30 09:10:56.480048 2026] [security2:error] [pid 2502925:tid 2502925] [client 43.163.80.48:39352] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "amsHEB1mhY9UT5vdK6rs8QAAAA4"]
[Thu Jul 30 09:10:56.792948 2026] [security2:error] [pid 2500761:tid 2500761] [client 43.134.15.174:49106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsHEPuy9LZllfErU9XvdAAAAAc"], referer: http://www.banskoexpress.com
[Thu Jul 30 09:10:56.811425 2026] [core:error] [pid 2516083:tid 2516083] (13)Permission denied: [client 216.73.216.199:24060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/crc32_pclmul/uevent
[Thu Jul 30 09:10:56.940244 2026] [ssl:error] [pid 2516312:tid 2516312] (EAI 2)Name or service not known: [client 144.76.19.72:50964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:56.940273 2026] [ssl:error] [pid 2516312:tid 2516312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:56.994498 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:50968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:10:56.994527 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:10:58.005806 2026] [security2:error] [pid 2516084:tid 2516084] [client 49.51.233.95:41266] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amsHEj6ZdXurK3NidB0T7AAAADs"], referer: http://glottalstop.co.uk
[Thu Jul 30 09:10:58.023078 2026] [autoindex:error] [pid 2516083:tid 2516083] (13)Permission denied: [client 216.73.216.199:24060] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/blowha/
[Thu Jul 30 09:10:58.114089 2026] [core:error] [pid 2489924:tid 2489924] [client 66.249.66.168:58103] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:58.114118 2026] [core:error] [pid 2489924:tid 2489924] [client 66.249.66.168:58103] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:10:58.492841 2026] [authz_core:error] [pid 2516121:tid 2516121] [client 57.141.0.30:22784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:58.493470 2026] [authz_core:error] [pid 2516121:tid 2516121] [client 57.141.0.30:22784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:10:59.333837 2026] [security2:error] [pid 2510839:tid 2510839] [client 43.157.172.39:56258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "amsHE5EpKYYUuRrdy-E6kwAAADo"]
[Thu Jul 30 09:10:59.421997 2026] [security2:error] [pid 2510891:tid 2510891] [client 43.157.172.39:56338] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amsHEyo2POPqsdk9P8mBkgAAAEM"]
[Thu Jul 30 09:10:59.530183 2026] [ssl:error] [pid 2516083:tid 2516083] (70014)End of file found: [client 216.73.216.199:24060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:10:59.861680 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 57.141.0.3:54984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:10:59.862299 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 57.141.0.3:54984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:00.008864 2026] [security2:error] [pid 2510964:tid 2510964] [client 43.163.80.48:46156] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsHFKGYVyrscNNMef_WDwAAAEc"], referer: http://purple-childcare.co.uk
[Thu Jul 30 09:11:00.050025 2026] [ssl:error] [pid 2504793:tid 2504793] (EAI 2)Name or service not known: [client 144.76.19.72:31492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:00.050053 2026] [ssl:error] [pid 2504793:tid 2504793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:00.102751 2026] [ssl:error] [pid 2516125:tid 2516125] (EAI 2)Name or service not known: [client 144.76.19.72:31498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:00.102787 2026] [ssl:error] [pid 2516125:tid 2516125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:00.370633 2026] [authz_core:error] [pid 2513286:tid 2513286] [client 144.172.105.5:33778] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Extension/error_log
[Thu Jul 30 09:11:00.653332 2026] [security2:error] [pid 2500101:tid 2500101] [client 43.157.172.39:57880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amsHFCxjwUmq0siKIe-4YAAAABU"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 09:11:01.051406 2026] [ssl:error] [pid 2516121:tid 2516121] (70014)End of file found: [client 216.73.216.199:47223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:01.188148 2026] [security2:error] [pid 2513241:tid 2513241] [client 43.157.172.39:58768] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "amsHFYjgTkQuKOrvG9XINgAAAAU"]
[Thu Jul 30 09:11:01.653805 2026] [ssl:error] [pid 2513288:tid 2513288] (70014)End of file found: [client 216.73.216.199:1069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:02.193959 2026] [security2:error] [pid 2504793:tid 2504793] [client 114.119.146.111:42099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1580083200/request_format~html/cat_ids~104"] [unique_id "amsHFvxjVceg8BwhAAwHfgAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E27-1-2020
[Thu Jul 30 09:11:02.289794 2026] [security2:error] [pid 2516126:tid 2516126] [client 43.157.172.39:59948] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsHFhBkg4pEJfesZ3buEgAAAEs"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 09:11:02.326271 2026] [cgi:error] [pid 2516126:tid 2516126] [client 43.157.172.39:59948] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 09:11:03.159493 2026] [ssl:error] [pid 2509017:tid 2509017] (EAI 2)Name or service not known: [client 144.76.19.72:31508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:03.159527 2026] [ssl:error] [pid 2509017:tid 2509017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:03.217251 2026] [ssl:error] [pid 2510562:tid 2510562] (EAI 2)Name or service not known: [client 144.76.19.72:31510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:03.217284 2026] [ssl:error] [pid 2510562:tid 2510562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:04.005214 2026] [security2:error] [pid 2500101:tid 2500101] [client 114.119.146.111:42109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1580083200/request_format~html/cat_ids~104"] [unique_id "amsHGCxjwUmq0siKIe-4YQAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E27-1-2020
[Thu Jul 30 09:11:04.224785 2026] [core:error] [pid 2495409:tid 2495409] [client 66.249.64.172:50431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:04.224830 2026] [core:error] [pid 2495409:tid 2495409] [client 66.249.64.172:50431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:06.271442 2026] [ssl:error] [pid 2510892:tid 2510892] (EAI 2)Name or service not known: [client 144.76.19.72:31514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:06.271478 2026] [ssl:error] [pid 2510892:tid 2510892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:06.323340 2026] [ssl:error] [pid 2510839:tid 2510839] (EAI 2)Name or service not known: [client 144.76.19.72:31528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:06.323373 2026] [ssl:error] [pid 2510839:tid 2510839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:07.102324 2026] [core:error] [pid 2516312:tid 2516312] (13)Permission denied: [client 216.73.216.199:57779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/coffeeinbristol.com.db
[Thu Jul 30 09:11:08.145727 2026] [security2:error] [pid 2506760:tid 2506760] [client 119.91.20.139:46866] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "amsHHM1Pq0c0EVb0gaHwHwAAADA"]
[Thu Jul 30 09:11:08.829784 2026] [security2:error] [pid 2516268:tid 2516268] [client 43.157.172.39:39540] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "amsHHL_3AURojhRKd9ddDAAAAE4"]
[Thu Jul 30 09:11:09.339846 2026] [security2:error] [pid 2515969:tid 2515969] [client 119.91.20.139:35086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "amsHHZPW3bPOIzt6F3CNJQAAAB4"], referer: http://ditchfest.com
[Thu Jul 30 09:11:09.378490 2026] [ssl:error] [pid 2500101:tid 2500101] (EAI 2)Name or service not known: [client 144.76.19.72:31538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:09.378516 2026] [ssl:error] [pid 2500101:tid 2500101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:09.433388 2026] [ssl:error] [pid 2515049:tid 2515049] (EAI 2)Name or service not known: [client 144.76.19.72:31552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:09.433427 2026] [ssl:error] [pid 2515049:tid 2515049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:09.958815 2026] [ssl:error] [pid 2516312:tid 2516312] (70014)End of file found: [client 216.73.216.199:57779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:10.399734 2026] [security2:error] [pid 2510890:tid 2510890] [client 43.153.71.12:35912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanhill.co.uk"] [uri "/"] [unique_id "amsHHk5KFr7jyyMhWT-WrAAAAEI"]
[Thu Jul 30 09:11:11.461159 2026] [ssl:error] [pid 2513242:tid 2513242] (70014)End of file found: [client 216.73.216.199:8644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:12.062652 2026] [core:error] [pid 2516084:tid 2516084] (13)Permission denied: [client 216.73.216.199:34527] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/drivers/shpchp/bind
[Thu Jul 30 09:11:12.103457 2026] [security2:error] [pid 2500761:tid 2500761] [client 43.153.71.12:37602] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsHIPuy9LZllfErU9XveAAAAAc"], referer: http://jonathanhill.co.uk
[Thu Jul 30 09:11:12.363492 2026] [core:error] [pid 2516084:tid 2516084] (13)Permission denied: [client 216.73.216.199:34527] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/reclaim_account
[Thu Jul 30 09:11:12.487566 2026] [ssl:error] [pid 2515049:tid 2515049] (EAI 2)Name or service not known: [client 144.76.19.72:61378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:12.487609 2026] [ssl:error] [pid 2515049:tid 2515049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:12.545170 2026] [ssl:error] [pid 2515283:tid 2515283] (EAI 2)Name or service not known: [client 144.76.19.72:61382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:12.545196 2026] [ssl:error] [pid 2515283:tid 2515283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:12.966955 2026] [core:error] [pid 2516084:tid 2516084] (13)Permission denied: [client 216.73.216.199:34527] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/davidat51.co.uk.db
[Thu Jul 30 09:11:13.199154 2026] [security2:error] [pid 2510892:tid 2510892] [client 103.89.26.200:36700] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHIfqMBdUv_3lq41qCzAAAAEQ"]
[Thu Jul 30 09:11:13.199218 2026] [security2:error] [pid 2510892:tid 2510892] [client 103.89.26.200:36700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHIfqMBdUv_3lq41qCzAAAAEQ"]
[Thu Jul 30 09:11:13.199464 2026] [security2:error] [pid 2510892:tid 2510892] [client 103.89.26.200:36700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsHIfqMBdUv_3lq41qCzAAAAEQ"]
[Thu Jul 30 09:11:13.297179 2026] [security2:error] [pid 2510890:tid 2510890] [client 43.157.172.39:46408] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.marcwhiffen.co.uk"] [uri "/"] [unique_id "amsHIU5KFr7jyyMhWT-WrQAAAEI"]
[Thu Jul 30 09:11:13.298010 2026] [authz_core:error] [pid 2510890:tid 2510890] [client 43.157.172.39:46408] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 09:11:13.807160 2026] [core:error] [pid 2508626:tid 2508626] [client 172.202.95.21:24623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:13.807191 2026] [core:error] [pid 2508626:tid 2508626] [client 172.202.95.21:24623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:14.177802 2026] [ssl:error] [pid 2516084:tid 2516084] (70014)End of file found: [client 216.73.216.199:34527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:14.233334 2026] [cgi:error] [pid 2516122:tid 2516122] [client 47.128.117.246:58944] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:11:14.661180 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.23:48108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:14.661795 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.23:48108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:14.903587 2026] [security2:error] [pid 2510562:tid 2510562] [client 150.5.134.4:26841] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHIkKqXwLwm9clpGWk8gAAAC0"]
[Thu Jul 30 09:11:14.903648 2026] [security2:error] [pid 2510562:tid 2510562] [client 150.5.134.4:26841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHIkKqXwLwm9clpGWk8gAAAC0"]
[Thu Jul 30 09:11:14.903897 2026] [security2:error] [pid 2510562:tid 2510562] [client 150.5.134.4:26841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsHIkKqXwLwm9clpGWk8gAAAC0"]
[Thu Jul 30 09:11:15.598502 2026] [ssl:error] [pid 2506640:tid 2506640] (EAI 2)Name or service not known: [client 144.76.19.72:61394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:15.598538 2026] [ssl:error] [pid 2506640:tid 2506640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:15.661269 2026] [ssl:error] [pid 2510770:tid 2510770] (EAI 2)Name or service not known: [client 144.76.19.72:61404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:15.661307 2026] [ssl:error] [pid 2510770:tid 2510770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:16.216755 2026] [security2:error] [pid 2516312:tid 2516312] [client 51.75.236.151:48930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/directory-galleria-mall"] [unique_id "amsHJBt6pBzBG0vRASNNVQAAAFI"]
[Thu Jul 30 09:11:16.636564 2026] [core:error] [pid 2500101:tid 2500101] [client 172.202.95.21:24620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:16.636600 2026] [core:error] [pid 2500101:tid 2500101] [client 172.202.95.21:24620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:17.783636 2026] [core:error] [pid 2510770:tid 2510770] [client 172.202.95.21:24618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:17.783661 2026] [core:error] [pid 2510770:tid 2510770] [client 172.202.95.21:24618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:18.243614 2026] [core:error] [pid 2500101:tid 2500101] [client 172.202.95.21:24592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:18.243636 2026] [core:error] [pid 2500101:tid 2500101] [client 172.202.95.21:24592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:18.716589 2026] [ssl:error] [pid 2516081:tid 2516081] (EAI 2)Name or service not known: [client 144.76.19.72:61420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:18.716620 2026] [ssl:error] [pid 2516081:tid 2516081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:18.772757 2026] [ssl:error] [pid 2510562:tid 2510562] (EAI 2)Name or service not known: [client 144.76.19.72:61432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:18.772783 2026] [ssl:error] [pid 2510562:tid 2510562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:19.158449 2026] [core:error] [pid 2514950:tid 2514950] [client 172.202.95.21:24982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:19.158474 2026] [core:error] [pid 2514950:tid 2514950] [client 172.202.95.21:24982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:19.318763 2026] [core:error] [pid 2500761:tid 2500761] (13)Permission denied: [client 216.73.216.199:3712] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/drivers/exar_serial/remove_id
[Thu Jul 30 09:11:19.611849 2026] [security2:error] [pid 2510842:tid 2510842] [client 150.5.134.4:53313] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHJzLHgHcn556dNA56YgAAAD0"]
[Thu Jul 30 09:11:19.611895 2026] [security2:error] [pid 2510842:tid 2510842] [client 150.5.134.4:53313] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHJzLHgHcn556dNA56YgAAAD0"]
[Thu Jul 30 09:11:19.612139 2026] [security2:error] [pid 2510842:tid 2510842] [client 150.5.134.4:53313] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsHJzLHgHcn556dNA56YgAAAD0"]
[Thu Jul 30 09:11:19.740088 2026] [core:error] [pid 2513440:tid 2513440] [client 172.202.95.21:24981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:19.740113 2026] [core:error] [pid 2513440:tid 2513440] [client 172.202.95.21:24981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:19.922391 2026] [ssl:error] [pid 2500761:tid 2500761] (70014)End of file found: [client 216.73.216.199:3712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:20.522783 2026] [core:error] [pid 2516122:tid 2516122] [client 172.202.95.21:24589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:20.522807 2026] [core:error] [pid 2516122:tid 2516122] [client 172.202.95.21:24589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:20.920156 2026] [core:error] [pid 2500101:tid 2500101] [client 66.249.66.168:44565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:20.920180 2026] [core:error] [pid 2500101:tid 2500101] [client 66.249.66.168:44565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:21.116768 2026] [authz_core:error] [pid 2513440:tid 2513440] [client 144.172.105.5:54688] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Gapps/Extension/error_log
[Thu Jul 30 09:11:21.824927 2026] [ssl:error] [pid 2516310:tid 2516310] (EAI 2)Name or service not known: [client 144.76.19.72:30412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:21.824960 2026] [ssl:error] [pid 2516310:tid 2516310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:21.845510 2026] [core:error] [pid 2510890:tid 2510890] [client 172.202.95.21:24625] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:21.845532 2026] [core:error] [pid 2510890:tid 2510890] [client 172.202.95.21:24625] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:21.878733 2026] [ssl:error] [pid 2516122:tid 2516122] (EAI 2)Name or service not known: [client 144.76.19.72:30428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:21.878764 2026] [ssl:error] [pid 2516122:tid 2516122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:22.933828 2026] [core:error] [pid 2510561:tid 2510561] (13)Permission denied: [client 216.73.216.199:55975] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/sbin/build-locale-archive
[Thu Jul 30 09:11:24.707918 2026] [lsapi:warn] [pid 2513242:tid 2513242] [client 194.99.25.191:9791] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:11:24.707973 2026] [lsapi:warn] [pid 2513242:tid 2513242] [client 194.99.25.191:9791] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:11:24.962570 2026] [ssl:error] [pid 2506640:tid 2506640] (EAI 2)Name or service not known: [client 144.76.19.72:30434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:24.962617 2026] [ssl:error] [pid 2506640:tid 2506640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:24.983183 2026] [core:error] [pid 2510486:tid 2510486] [client 172.202.95.21:24970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:24.983205 2026] [core:error] [pid 2510486:tid 2510486] [client 172.202.95.21:24970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:25.014156 2026] [ssl:error] [pid 2510567:tid 2510567] (EAI 2)Name or service not known: [client 144.76.19.72:30436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:25.014194 2026] [ssl:error] [pid 2510567:tid 2510567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:26.115658 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.66:29244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:26.116274 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.66:29244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:26.526498 2026] [security2:error] [pid 2510892:tid 2510892] [client 43.159.36.180:49710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amsHLvqMBdUv_3lq41qC0QAAAEQ"]
[Thu Jul 30 09:11:26.527455 2026] [authz_core:error] [pid 2510892:tid 2510892] [client 43.159.36.180:49710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:26.528003 2026] [authz_core:error] [pid 2510892:tid 2510892] [client 43.159.36.180:49710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:27.307516 2026] [authz_core:error] [pid 2499334:tid 2499334] [client 57.141.0.53:29288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:27.308153 2026] [authz_core:error] [pid 2499334:tid 2499334] [client 57.141.0.53:29288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:27.451133 2026] [core:crit] [pid 2510561:tid 2510561] (13)Permission denied: [client 216.73.216.199:55975] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/lib64/mysql/plugin/auth_pam_tool_dir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/lib64/mysql/plugin/auth_pam_tool_dir/' is executable
[Thu Jul 30 09:11:27.678711 2026] [core:error] [pid 2509451:tid 2509451] [client 172.202.95.21:24631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:27.678732 2026] [core:error] [pid 2509451:tid 2509451] [client 172.202.95.21:24631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:28.072530 2026] [ssl:error] [pid 2516125:tid 2516125] (EAI 2)Name or service not known: [client 144.76.19.72:30438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:28.072561 2026] [ssl:error] [pid 2516125:tid 2516125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:28.125758 2026] [ssl:error] [pid 2510567:tid 2510567] (EAI 2)Name or service not known: [client 144.76.19.72:30442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:28.125789 2026] [ssl:error] [pid 2510567:tid 2510567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:29.561300 2026] [core:error] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/drivers/pvpanic/uevent
[Thu Jul 30 09:11:29.977215 2026] [cgi:error] [pid 2502925:tid 2502925] [client 172.202.95.21:24627] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:11:29.977502 2026] [core:error] [pid 2502925:tid 2502925] [client 172.202.95.21:24627] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:30.163324 2026] [core:error] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_extent_status/reclaim_account
[Thu Jul 30 09:11:30.165780 2026] [security2:error] [pid 2516125:tid 2516125] [client 185.191.171.5:45970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/famous-descendants-of-john-of-gaunt"] [unique_id "amsHMpJ7OHD8tRKfJXA8qQAAAEo"]
[Thu Jul 30 09:11:31.182603 2026] [ssl:error] [pid 2516125:tid 2516125] (EAI 2)Name or service not known: [client 144.76.19.72:45340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:31.182632 2026] [ssl:error] [pid 2516125:tid 2516125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:31.238629 2026] [ssl:error] [pid 2510964:tid 2510964] (EAI 2)Name or service not known: [client 144.76.19.72:45348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:31.238659 2026] [ssl:error] [pid 2510964:tid 2510964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:31.379459 2026] [core:error] [pid 2513242:tid 2513242] [client 172.202.95.21:24588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:31.379485 2026] [core:error] [pid 2513242:tid 2513242] [client 172.202.95.21:24588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:32.361012 2026] [authz_core:error] [pid 2508593:tid 2508593] [client 57.141.0.9:60364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:32.361658 2026] [authz_core:error] [pid 2508593:tid 2508593] [client 57.141.0.9:60364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:32.565671 2026] [core:error] [pid 2516125:tid 2516125] [client 172.202.95.21:24602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:32.565696 2026] [core:error] [pid 2516125:tid 2516125] [client 172.202.95.21:24602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:32.573129 2026] [core:error] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/i4el.co.uk.db
[Thu Jul 30 09:11:33.162324 2026] [core:error] [pid 2518292:tid 2518292] [client 172.202.95.21:24634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:33.162365 2026] [core:error] [pid 2518292:tid 2518292] [client 172.202.95.21:24634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:33.460242 2026] [authz_core:error] [pid 2516125:tid 2516125] [client 66.249.66.33:35671] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:11:33.462899 2026] [authz_core:error] [pid 2516125:tid 2516125] [client 66.249.66.33:35671] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:11:33.629339 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 66.249.66.33:51558] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:11:33.632019 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 66.249.66.33:51558] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:11:34.008201 2026] [core:error] [pid 2515283:tid 2515283] [client 172.202.95.21:24960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:34.008227 2026] [core:error] [pid 2515283:tid 2515283] [client 172.202.95.21:24960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:34.227238 2026] [autoindex:error] [pid 2510561:tid 2510561] [client 144.172.105.5:42200] AH01276: Cannot serve directory /home/winterb/public_html/suitecrm/Zend/Gdata/Health/signal.lib/: No matching DirectoryIndex (signal.lib.php) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 09:11:34.303410 2026] [ssl:error] [pid 2508593:tid 2508593] (EAI 2)Name or service not known: [client 144.76.19.72:45362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:34.303442 2026] [ssl:error] [pid 2508593:tid 2508593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:34.321865 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 66.249.66.33:51558] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:11:34.324504 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 66.249.66.33:51558] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:11:34.359796 2026] [authz_core:error] [pid 2510561:tid 2510561] [client 144.172.105.5:42200] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Kind/error_log
[Thu Jul 30 09:11:34.362480 2026] [ssl:error] [pid 2510486:tid 2510486] (EAI 2)Name or service not known: [client 144.76.19.72:45366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:34.362502 2026] [ssl:error] [pid 2510486:tid 2510486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:34.921231 2026] [core:error] [pid 2518381:tid 2518381] [client 172.202.95.21:24578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:34.921272 2026] [core:error] [pid 2518381:tid 2518381] [client 172.202.95.21:24578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:34.937489 2026] [security2:error] [pid 2502925:tid 2502925] [client 43.130.34.74:45660] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsHNh1mhY9UT5vdK6rtBAAAAA4"], referer: http://www.banskoexpresstransfers.co.uk
[Thu Jul 30 09:11:36.027760 2026] [security2:error] [pid 2516122:tid 2516122] [client 43.130.34.74:50914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsHOAh-68xzHNSw7ajHsAAAAEY"], referer: http://www.banskoexpress.com
[Thu Jul 30 09:11:36.078384 2026] [authz_core:error] [pid 2518292:tid 2518292] [client 144.172.105.5:44656] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Media/Extension/error_log
[Thu Jul 30 09:11:36.159979 2026] [core:error] [pid 2485662:tid 2485662] [client 172.202.95.21:24610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:36.160013 2026] [core:error] [pid 2485662:tid 2485662] [client 172.202.95.21:24610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:36.481385 2026] [ssl:error] [pid 2508698:tid 2508698] (70014)End of file found: [client 216.73.216.199:24828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:36.673528 2026] [core:error] [pid 2516122:tid 2516122] [client 172.202.95.21:24962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:36.673560 2026] [core:error] [pid 2516122:tid 2516122] [client 172.202.95.21:24962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:37.272449 2026] [core:error] [pid 2506760:tid 2506760] [client 172.202.95.21:24593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:37.272475 2026] [core:error] [pid 2506760:tid 2506760] [client 172.202.95.21:24593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:37.400859 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-bazvsbkx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-bazvsbkx/' is executable
[Thu Jul 30 09:11:37.404742 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/' is executable
[Thu Jul 30 09:11:37.406651 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-vuk0cupl/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-vuk0cupl/' is executable
[Thu Jul 30 09:11:37.414059 2026] [ssl:error] [pid 2516083:tid 2516083] (EAI 2)Name or service not known: [client 144.76.19.72:45382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:37.414100 2026] [ssl:error] [pid 2516083:tid 2516083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:37.417804 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-zfuqapa9/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-zfuqapa9/' is executable
[Thu Jul 30 09:11:37.417859 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/' is executable
[Thu Jul 30 09:11:37.421038 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/' is executable
[Thu Jul 30 09:11:37.426840 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-m25d8tn_/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-m25d8tn_/' is executable
[Thu Jul 30 09:11:37.431591 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-ptb93rze/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-ptb93rze/' is executable
[Thu Jul 30 09:11:37.431987 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-vs_5h8vw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-vs_5h8vw/' is executable
[Thu Jul 30 09:11:37.433852 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-urki9vq5/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-urki9vq5/' is executable
[Thu Jul 30 09:11:37.436288 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/' is executable
[Thu Jul 30 09:11:37.440916 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pm45e04g/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pm45e04g/' is executable
[Thu Jul 30 09:11:37.444254 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-o2wyv0oj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-o2wyv0oj/' is executable
[Thu Jul 30 09:11:37.447017 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-ilysblsz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-ilysblsz/' is executable
[Thu Jul 30 09:11:37.447357 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/' is executable
[Thu Jul 30 09:11:37.454750 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-bhe4auzv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-bhe4auzv/' is executable
[Thu Jul 30 09:11:37.458309 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-t0mgg3cv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-t0mgg3cv/' is executable
[Thu Jul 30 09:11:37.463648 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-6b4g6ain/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-6b4g6ain/' is executable
[Thu Jul 30 09:11:37.465229 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-xwbnb_cj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-xwbnb_cj/' is executable
[Thu Jul 30 09:11:37.466543 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pzyber_l/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pzyber_l/' is executable
[Thu Jul 30 09:11:37.466833 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-utbgbvka/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-utbgbvka/' is executable
[Thu Jul 30 09:11:37.468765 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pckpp7iz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pckpp7iz/' is executable
[Thu Jul 30 09:11:37.469142 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-q_4s1dmg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-q_4s1dmg/' is executable
[Thu Jul 30 09:11:37.470184 2026] [ssl:error] [pid 2510964:tid 2510964] (EAI 2)Name or service not known: [client 144.76.19.72:45388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:37.470203 2026] [ssl:error] [pid 2510964:tid 2510964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:37.471993 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/' is executable
[Thu Jul 30 09:11:37.473494 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-fb6u1ntx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-fb6u1ntx/' is executable
[Thu Jul 30 09:11:37.474902 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-bpwqiojf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-bpwqiojf/' is executable
[Thu Jul 30 09:11:37.475851 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-q2t2tbi3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-q2t2tbi3/' is executable
[Thu Jul 30 09:11:37.477480 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-ubj5lzzh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-ubj5lzzh/' is executable
[Thu Jul 30 09:11:37.478854 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pkan3sjx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-pkan3sjx/' is executable
[Thu Jul 30 09:11:37.479395 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-rysxxx39/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-rysxxx39/' is executable
[Thu Jul 30 09:11:37.481727 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-2u0lmmbu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-2u0lmmbu/' is executable
[Thu Jul 30 09:11:37.481912 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-5a2k1oi2/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-5a2k1oi2/' is executable
[Thu Jul 30 09:11:37.482331 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/' is executable
[Thu Jul 30 09:11:37.484052 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/lost+found/' is executable
[Thu Jul 30 09:11:37.485526 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-rzzc6i3o/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-rzzc6i3o/' is executable
[Thu Jul 30 09:11:37.485911 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-h1jwcnlk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-h1jwcnlk/' is executable
[Thu Jul 30 09:11:37.488770 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-_6d7rllb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-_6d7rllb/' is executable
[Thu Jul 30 09:11:37.490421 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-2wv4v5mp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-2wv4v5mp/' is executable
[Thu Jul 30 09:11:37.490649 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-wkkpuur3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-wkkpuur3/' is executable
[Thu Jul 30 09:11:37.495128 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-rjd_9s_e/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-rjd_9s_e/' is executable
[Thu Jul 30 09:11:37.506027 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-sj45mp0p/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/pymp-sj45mp0p/' is executable
[Thu Jul 30 09:11:37.507156 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/' is executable
[Thu Jul 30 09:11:37.508281 2026] [core:crit] [pid 2499334:tid 2499334] (13)Permission denied: [client 216.73.216.199:4609] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/' is executable
[Thu Jul 30 09:11:38.296959 2026] [autoindex:error] [pid 2499334:tid 2499334] [client 216.73.216.199:4609] AH01276: Cannot serve directory /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/fusion/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 09:11:38.442555 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:24971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:38.442587 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:24971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:38.772523 2026] [ssl:error] [pid 2518474:tid 2518474] (70014)End of file found: [client 216.73.216.199:32907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:39.057758 2026] [core:error] [pid 2510839:tid 2510839] [client 172.202.95.21:24985] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:39.057782 2026] [core:error] [pid 2510839:tid 2510839] [client 172.202.95.21:24985] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:39.229672 2026] [security2:error] [pid 2513440:tid 2513440] [client 20.171.55.167:7469] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.kiera-and-tom.refraction.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsHO1YpTFVsTYlJLIXSZQAAACQ"]
[Thu Jul 30 09:11:39.229839 2026] [security2:error] [pid 2513440:tid 2513440] [client 20.171.55.167:7469] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.kiera-and-tom.refraction.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsHO1YpTFVsTYlJLIXSZQAAACQ"]
[Thu Jul 30 09:11:39.230056 2026] [security2:error] [pid 2513440:tid 2513440] [client 20.171.55.167:7469] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.kiera-and-tom.refraction.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsHO1YpTFVsTYlJLIXSZQAAACQ"]
[Thu Jul 30 09:11:40.052487 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:20425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:40.052514 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:20425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:40.523357 2026] [ssl:error] [pid 2516122:tid 2516122] (EAI 2)Name or service not known: [client 144.76.19.72:18408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:40.523384 2026] [ssl:error] [pid 2516122:tid 2516122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:40.550264 2026] [authz_core:error] [pid 2513241:tid 2513241] [client 57.141.0.5:63650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:40.550880 2026] [authz_core:error] [pid 2513241:tid 2513241] [client 57.141.0.5:63650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:40.577472 2026] [ssl:error] [pid 2508593:tid 2508593] (EAI 2)Name or service not known: [client 144.76.19.72:18420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:40.577497 2026] [ssl:error] [pid 2508593:tid 2508593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:40.586340 2026] [ssl:error] [pid 2499334:tid 2499334] (70014)End of file found: [client 216.73.216.199:4609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:40.622949 2026] [core:error] [pid 2513242:tid 2513242] [client 172.202.95.21:20473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:40.622974 2026] [core:error] [pid 2513242:tid 2513242] [client 172.202.95.21:20473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:41.345133 2026] [cgi:error] [pid 2508593:tid 2508593] [client 172.202.95.21:20452] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:11:41.345423 2026] [core:error] [pid 2508593:tid 2508593] [client 172.202.95.21:20452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:41.784927 2026] [cgi:error] [pid 2513241:tid 2513241] [client 20.9.4.9:56988] AH02812: stderr from /home/eznoyveg/public_html/michael-boffey.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:11:42.059124 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:20444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:42.059151 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:20444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:42.120055 2026] [authz_core:error] [pid 2508698:tid 2508698] [client 144.172.105.5:44800] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Photos/error_log
[Thu Jul 30 09:11:42.656344 2026] [core:error] [pid 2518424:tid 2518424] [client 172.202.95.21:20459] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:42.656370 2026] [core:error] [pid 2518424:tid 2518424] [client 172.202.95.21:20459] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:43.292337 2026] [ssl:error] [pid 2518707:tid 2518707] (70014)End of file found: [client 216.73.216.199:26481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:43.631872 2026] [ssl:error] [pid 2518767:tid 2518767] (EAI 2)Name or service not known: [client 144.76.19.72:18424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:43.631909 2026] [ssl:error] [pid 2518767:tid 2518767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:43.686547 2026] [ssl:error] [pid 2518424:tid 2518424] (EAI 2)Name or service not known: [client 144.76.19.72:18434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:43.686586 2026] [ssl:error] [pid 2518424:tid 2518424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:43.724206 2026] [authz_core:error] [pid 2513241:tid 2513241] [client 20.9.4.9:56988] AH01630: client denied by server configuration: /home/eznoyveg/public_html/michael-boffey.co.uk/php.ini
[Thu Jul 30 09:11:44.217594 2026] [core:error] [pid 2497479:tid 2497479] [client 172.202.95.21:24652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:44.217618 2026] [core:error] [pid 2497479:tid 2497479] [client 172.202.95.21:24652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:44.563297 2026] [security2:error] [pid 2518424:tid 2518424] [client 43.164.196.47:49500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tompalmer.co.uk"] [uri "/"] [unique_id "amsHQKsUGU-FheAlfSB2agAAAAg"]
[Thu Jul 30 09:11:44.797526 2026] [core:error] [pid 2518768:tid 2518768] (13)Permission denied: [client 216.73.216.199:57255] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/subsystem/drivers/battery/uevent
[Thu Jul 30 09:11:44.898933 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:24660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:44.898956 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:24660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:45.178376 2026] [security2:error] [pid 2502925:tid 2502925] [client 94.154.43.184:50862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "uk.shelterforum.info"] [uri "/.env"] [unique_id "amsHQR1mhY9UT5vdK6rtBwAAAA4"]
[Thu Jul 30 09:11:45.178564 2026] [security2:error] [pid 2502925:tid 2502925] [client 94.154.43.184:50862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "uk.shelterforum.info"] [uri "/.env"] [unique_id "amsHQR1mhY9UT5vdK6rtBwAAAA4"]
[Thu Jul 30 09:11:45.178892 2026] [security2:error] [pid 2502925:tid 2502925] [client 94.154.43.184:50862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "uk.shelterforum.info"] [uri "/.env"] [unique_id "amsHQR1mhY9UT5vdK6rtBwAAAA4"]
[Thu Jul 30 09:11:45.212876 2026] [security2:error] [pid 2510562:tid 2510562] [client 129.226.195.146:40688] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsHQUKqXwLwm9clpGWk-gAAAC0"], referer: http://rock-ola.co.uk
[Thu Jul 30 09:11:45.417408 2026] [core:error] [pid 2506640:tid 2506640] [client 172.202.95.21:20460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:45.417438 2026] [core:error] [pid 2506640:tid 2506640] [client 172.202.95.21:20460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:46.149607 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:20438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:46.149633 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:20438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:46.439857 2026] [security2:error] [pid 2513288:tid 2513288] [client 43.164.196.47:35376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsHQsu-S_RbhpfUSRDIHwAAAAo"], referer: http://www.tompalmer.co.uk
[Thu Jul 30 09:11:46.742192 2026] [ssl:error] [pid 2510964:tid 2510964] (EAI 2)Name or service not known: [client 144.76.19.72:18436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:46.742218 2026] [ssl:error] [pid 2510964:tid 2510964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:46.795478 2026] [ssl:error] [pid 2515283:tid 2515283] (EAI 2)Name or service not known: [client 144.76.19.72:18448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:46.795508 2026] [ssl:error] [pid 2515283:tid 2515283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:46.905570 2026] [core:error] [pid 2499334:tid 2499334] [client 172.202.95.21:24641] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:46.905603 2026] [core:error] [pid 2499334:tid 2499334] [client 172.202.95.21:24641] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:47.269840 2026] [security2:error] [pid 2495629:tid 2495629] [client 129.226.195.146:33592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsHQ_-MPvpDsa9WKPFN4AAAACk"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 09:11:47.438485 2026] [cgi:error] [pid 2510226:tid 2510226] [client 172.202.95.21:24657] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:11:47.438788 2026] [core:error] [pid 2510226:tid 2510226] [client 172.202.95.21:24657] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:47.589564 2026] [security2:error] [pid 2500101:tid 2500101] [client 47.128.34.210:19540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsHQyxjwUmq0siKIe-4bgAAABU"]
[Thu Jul 30 09:11:47.791346 2026] [authz_core:error] [pid 2515969:tid 2515969] [client 57.141.0.62:53282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:47.791961 2026] [authz_core:error] [pid 2515969:tid 2515969] [client 57.141.0.62:53282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:47.808362 2026] [ssl:error] [pid 2518768:tid 2518768] (70014)End of file found: [client 216.73.216.199:57255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:48.366868 2026] [core:error] [pid 2508593:tid 2508593] [client 172.202.95.21:20432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:48.366897 2026] [core:error] [pid 2508593:tid 2508593] [client 172.202.95.21:20432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:48.951454 2026] [core:error] [pid 2510567:tid 2510567] [client 172.202.95.21:20445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:48.951476 2026] [core:error] [pid 2510567:tid 2510567] [client 172.202.95.21:20445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:49.851099 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:11:49.852339 2026] [ssl:error] [pid 2518707:tid 2518707] (EAI 2)Name or service not known: [client 144.76.19.72:51904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:49.852370 2026] [ssl:error] [pid 2518707:tid 2518707] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:49.878828 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 09:11:49.878871 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:49.909978 2026] [ssl:error] [pid 2495629:tid 2495629] (EAI 2)Name or service not known: [client 144.76.19.72:51910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:49.910006 2026] [ssl:error] [pid 2495629:tid 2495629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:49.926756 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-login.php
[Thu Jul 30 09:11:49.926797 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:49.971121 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/red.php
[Thu Jul 30 09:11:49.971163 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.000986 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/cc.php
[Thu Jul 30 09:11:50.001029 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.031284 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/log.php
[Thu Jul 30 09:11:50.031331 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.067351 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 09:11:50.067393 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.095005 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins.php
[Thu Jul 30 09:11:50.095046 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.122727 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/style.php
[Thu Jul 30 09:11:50.122773 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.150386 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins.php
[Thu Jul 30 09:11:50.150427 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.177910 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 09:11:50.177950 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.210764 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/uninstall.php
[Thu Jul 30 09:11:50.210810 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.231966 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:13766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:50.245610 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/la.php
[Thu Jul 30 09:11:50.245649 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.283075 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 09:11:50.283118 2026] [access_compat:error] [pid 2512471:tid 2512471] [client 51.120.83.160:58158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:11:50.558306 2026] [core:error] [pid 2514030:tid 2514030] [client 172.202.95.21:20464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:50.558332 2026] [core:error] [pid 2514030:tid 2514030] [client 172.202.95.21:20464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:50.829634 2026] [core:error] [pid 2518708:tid 2518708] (13)Permission denied: [client 216.73.216.199:63028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/ezazz.co.uk.db
[Thu Jul 30 09:11:52.027954 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:24655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:52.027981 2026] [core:error] [pid 2516083:tid 2516083] [client 172.202.95.21:24655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:52.034996 2026] [core:error] [pid 2518708:tid 2518708] (13)Permission denied: [client 216.73.216.199:63028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/usb/drivers/usbhid/unbind
[Thu Jul 30 09:11:52.939152 2026] [authz_core:error] [pid 2518470:tid 2518470] [client 57.141.0.38:25164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:52.939775 2026] [authz_core:error] [pid 2518470:tid 2518470] [client 57.141.0.38:25164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:52.964214 2026] [ssl:error] [pid 2513437:tid 2513437] (EAI 2)Name or service not known: [client 144.76.19.72:51912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:52.964240 2026] [ssl:error] [pid 2513437:tid 2513437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:53.015908 2026] [ssl:error] [pid 2518707:tid 2518707] (EAI 2)Name or service not known: [client 144.76.19.72:51916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:53.015935 2026] [ssl:error] [pid 2518707:tid 2518707] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:53.283469 2026] [core:error] [pid 2518657:tid 2518657] [client 172.202.95.21:23795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:53.283497 2026] [core:error] [pid 2518657:tid 2518657] [client 172.202.95.21:23795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:53.740267 2026] [ssl:error] [pid 2518476:tid 2518476] (70014)End of file found: [client 216.73.216.199:41163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:54.345092 2026] [core:error] [pid 2497479:tid 2497479] [client 172.202.95.21:23753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:54.345116 2026] [core:error] [pid 2497479:tid 2497479] [client 172.202.95.21:23753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:54.995157 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:20436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:54.995183 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:20436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:55.853091 2026] [core:error] [pid 2518768:tid 2518768] [client 172.202.95.21:23780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:55.853117 2026] [core:error] [pid 2518768:tid 2518768] [client 172.202.95.21:23780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:56.091201 2026] [ssl:error] [pid 2515049:tid 2515049] (EAI 2)Name or service not known: [client 144.76.19.72:51930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:56.091232 2026] [ssl:error] [pid 2515049:tid 2515049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:56.147249 2026] [ssl:error] [pid 2516121:tid 2516121] (EAI 2)Name or service not known: [client 144.76.19.72:51936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:56.147300 2026] [ssl:error] [pid 2516121:tid 2516121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:56.251476 2026] [autoindex:error] [pid 2518708:tid 2518708] (13)Permission denied: [client 216.73.216.199:63028] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/railspares/
[Thu Jul 30 09:11:56.560998 2026] [core:error] [pid 2510770:tid 2510770] [client 172.202.95.21:23793] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:56.561022 2026] [core:error] [pid 2510770:tid 2510770] [client 172.202.95.21:23793] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:57.146826 2026] [core:error] [pid 2518768:tid 2518768] [client 172.202.95.21:23803] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:57.146851 2026] [core:error] [pid 2518768:tid 2518768] [client 172.202.95.21:23803] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:57.390470 2026] [authz_core:error] [pid 2515049:tid 2515049] [client 57.141.0.25:60364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:11:57.391100 2026] [authz_core:error] [pid 2515049:tid 2515049] [client 57.141.0.25:60364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:11:57.458085 2026] [core:error] [pid 2518708:tid 2518708] (13)Permission denied: [client 216.73.216.199:63028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/maetes.koeln.db
[Thu Jul 30 09:11:57.733142 2026] [authz_core:error] [pid 2485662:tid 2485662] [client 144.172.105.5:45460] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Spreadsheets/error_log
[Thu Jul 30 09:11:57.759832 2026] [autoindex:error] [pid 2518708:tid 2518708] (13)Permission denied: [client 216.73.216.199:63028] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/rogersb/
[Thu Jul 30 09:11:58.127980 2026] [core:error] [pid 2518381:tid 2518381] [client 172.202.95.21:20433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:58.128012 2026] [core:error] [pid 2518381:tid 2518381] [client 172.202.95.21:20433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:58.661810 2026] [core:error] [pid 2518708:tid 2518708] (13)Permission denied: [client 216.73.216.199:63028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/virtio/drivers/virtio_blk/uevent
[Thu Jul 30 09:11:58.781267 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:23806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:58.781289 2026] [core:error] [pid 2515049:tid 2515049] [client 172.202.95.21:23806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:11:58.963083 2026] [ssl:error] [pid 2518708:tid 2518708] (70014)End of file found: [client 216.73.216.199:63028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:11:59.204309 2026] [ssl:error] [pid 2518381:tid 2518381] (EAI 2)Name or service not known: [client 144.76.19.72:51948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:59.204341 2026] [ssl:error] [pid 2518381:tid 2518381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:11:59.262433 2026] [ssl:error] [pid 2510561:tid 2510561] (EAI 2)Name or service not known: [client 144.76.19.72:51958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:11:59.262457 2026] [ssl:error] [pid 2510561:tid 2510561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:00.769091 2026] [core:error] [pid 2497479:tid 2497479] (13)Permission denied: [client 216.73.216.199:49827] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/holistic-clear.co.uk.db
[Thu Jul 30 09:12:01.237098 2026] [core:error] [pid 2518424:tid 2518424] [client 172.202.95.21:23801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:01.237124 2026] [core:error] [pid 2518424:tid 2518424] [client 172.202.95.21:23801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:01.672486 2026] [ssl:error] [pid 2497479:tid 2497479] (70014)End of file found: [client 216.73.216.199:49827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:02.253938 2026] [authz_core:error] [pid 2509451:tid 2509451] [client 57.141.0.38:35322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:02.254567 2026] [authz_core:error] [pid 2509451:tid 2509451] [client 57.141.0.38:35322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:02.319117 2026] [ssl:error] [pid 2516084:tid 2516084] (EAI 2)Name or service not known: [client 144.76.19.72:59270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:02.319154 2026] [ssl:error] [pid 2516084:tid 2516084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:02.321899 2026] [core:error] [pid 2513242:tid 2513242] [client 172.202.95.21:20429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:02.321930 2026] [core:error] [pid 2513242:tid 2513242] [client 172.202.95.21:20429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:02.372411 2026] [ssl:error] [pid 2518657:tid 2518657] (EAI 2)Name or service not known: [client 144.76.19.72:59280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:02.372450 2026] [ssl:error] [pid 2518657:tid 2518657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:02.597411 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 144.172.105.5:45586] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/Spreadsheets/Extension/error_log
[Thu Jul 30 09:12:03.050487 2026] [core:error] [pid 2513288:tid 2513288] [client 172.202.95.21:23758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:03.050516 2026] [core:error] [pid 2513288:tid 2513288] [client 172.202.95.21:23758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:04.063154 2026] [authz_core:error] [pid 2513242:tid 2513242] [client 57.141.0.53:53664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:04.063782 2026] [authz_core:error] [pid 2513242:tid 2513242] [client 57.141.0.53:53664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:04.292721 2026] [core:error] [pid 2510891:tid 2510891] [client 172.202.95.21:24590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:04.292748 2026] [core:error] [pid 2510891:tid 2510891] [client 172.202.95.21:24590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:04.424299 2026] [authz_core:error] [pid 2508593:tid 2508593] [client 144.172.105.5:45616] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/YouTube/error_log
[Thu Jul 30 09:12:05.462986 2026] [ssl:error] [pid 2516125:tid 2516125] (EAI 2)Name or service not known: [client 144.76.19.72:59286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:05.463020 2026] [ssl:error] [pid 2516125:tid 2516125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:05.518830 2026] [ssl:error] [pid 2516084:tid 2516084] (EAI 2)Name or service not known: [client 144.76.19.72:59288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:05.518860 2026] [ssl:error] [pid 2516084:tid 2516084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:07.400049 2026] [authz_core:error] [pid 2502925:tid 2502925] [client 57.141.0.55:41884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:07.400694 2026] [authz_core:error] [pid 2502925:tid 2502925] [client 57.141.0.55:41884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:07.931079 2026] [security2:error] [pid 2510770:tid 2510770] [client 43.157.181.189:45574] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sewyork.co.uk"] [uri "/"] [unique_id "amsHV5nWHyHiA9AynxkOBwAAACA"]
[Thu Jul 30 09:12:07.994339 2026] [core:error] [pid 2518381:tid 2518381] (13)Permission denied: [client 216.73.216.199:19106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/acpi-ged/unbind
[Thu Jul 30 09:12:08.064265 2026] [authz_core:error] [pid 2502925:tid 2502925] [client 57.141.0.53:39170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:08.064887 2026] [authz_core:error] [pid 2502925:tid 2502925] [client 57.141.0.53:39170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:08.229818 2026] [security2:error] [pid 2513437:tid 2513437] [client 146.66.172.179:65427] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/wp-login.php"] [unique_id "amsHWEDb2dZH0oGUebnODwAAABw"], referer: https://www.jonathanhill.co.uk/wp-login.php
[Thu Jul 30 09:12:08.298452 2026] [autoindex:error] [pid 2518381:tid 2518381] (13)Permission denied: [client 216.73.216.199:19106] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/kentscho/
[Thu Jul 30 09:12:08.593053 2026] [ssl:error] [pid 2513242:tid 2513242] (EAI 2)Name or service not known: [client 144.76.19.72:59304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:08.593096 2026] [ssl:error] [pid 2513242:tid 2513242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:08.647594 2026] [ssl:error] [pid 2502925:tid 2502925] (EAI 2)Name or service not known: [client 144.76.19.72:59316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:08.647617 2026] [ssl:error] [pid 2502925:tid 2502925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:09.083808 2026] [security2:error] [pid 2510567:tid 2510567] [client 146.66.172.179:43398] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/wp-login.php"] [unique_id "amsHWSyfj8cbA85hi0rRSQAAADk"], referer: https://www.jonathanhill.co.uk/wp-login.php
[Thu Jul 30 09:12:09.497555 2026] [security2:error] [pid 2513437:tid 2513437] [client 47.254.92.190:52906] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amsHWUDb2dZH0oGUebnOEAAAABw"]
[Thu Jul 30 09:12:09.697060 2026] [core:error] [pid 2518381:tid 2518381] (13)Permission denied: [client 216.73.216.199:19106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/thezeitgeist.co.uk.db
[Thu Jul 30 09:12:09.983194 2026] [security2:error] [pid 2510770:tid 2510770] [client 146.66.172.179:35729] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/wp-login.php"] [unique_id "amsHWZnWHyHiA9AynxkOCAAAACA"], referer: https://www.jonathanhill.co.uk/wp-login.php
[Thu Jul 30 09:12:10.507668 2026] [ssl:error] [pid 2516268:tid 2516268] (70014)End of file found: [client 216.73.216.199:56954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:11.231013 2026] [cgi:error] [pid 2518381:tid 2518381] [client 216.73.216.199:19106] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/da.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:12:11.231094 2026] [cgi:error] [pid 2518381:tid 2518381] [client 216.73.216.199:19106] End of script output before headers: da.pl
[Thu Jul 30 09:12:11.340440 2026] [security2:error] [pid 2495629:tid 2495629] [client 146.66.172.179:65444] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/wp-login.php"] [unique_id "amsHW_-MPvpDsa9WKPFN5wAAACk"], referer: https://www.jonathanhill.co.uk/wp-login.php
[Thu Jul 30 09:12:11.508617 2026] [core:error] [pid 2502925:tid 2502925] (13)Permission denied: [client 216.73.216.199:16830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-160/free_calls
[Thu Jul 30 09:12:11.596585 2026] [core:error] [pid 2513437:tid 2513437] [client 66.249.66.168:63326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:11.596612 2026] [core:error] [pid 2513437:tid 2513437] [client 66.249.66.168:63326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:11.597165 2026] [core:error] [pid 2510770:tid 2510770] [client 66.249.66.169:38541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:11.597194 2026] [core:error] [pid 2510770:tid 2510770] [client 66.249.66.169:38541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:11.700268 2026] [ssl:error] [pid 2518381:tid 2518381] (EAI 2)Name or service not known: [client 144.76.19.72:56876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:11.700298 2026] [ssl:error] [pid 2518381:tid 2518381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:11.752986 2026] [ssl:error] [pid 2510567:tid 2510567] (EAI 2)Name or service not known: [client 144.76.19.72:56882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:11.753029 2026] [ssl:error] [pid 2510567:tid 2510567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:12.117610 2026] [authz_core:error] [pid 2518381:tid 2518381] [client 144.172.105.5:35476] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Gdata/YouTube/Extension/error_log
[Thu Jul 30 09:12:12.295184 2026] [security2:error] [pid 2510567:tid 2510567] [client 146.66.172.179:62616] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/wp-login.php"] [unique_id "amsHXCyfj8cbA85hi0rRSwAAADk"], referer: https://www.jonathanhill.co.uk/wp-login.php
[Thu Jul 30 09:12:13.050119 2026] [authz_core:error] [pid 2518381:tid 2518381] [client 57.141.0.70:47434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:13.050744 2026] [authz_core:error] [pid 2518381:tid 2518381] [client 57.141.0.70:47434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:13.157361 2026] [security2:error] [pid 2515283:tid 2515283] [client 146.66.172.179:36547] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/wp-login.php"] [unique_id "amsHXcjzG2-x6Zer7N4sNAAAAC8"], referer: https://www.jonathanhill.co.uk/wp-login.php
[Thu Jul 30 09:12:13.820083 2026] [security2:error] [pid 2510839:tid 2510839] [client 43.165.4.2:57530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amsHXZEpKYYUuRrdy-E7CAAAADo"]
[Thu Jul 30 09:12:14.495449 2026] [security2:error] [pid 2510565:tid 2510565] [client 43.165.4.2:53798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amsHXv3NwBZzeopC7b7x1AAAADc"], referer: http://www.mwdesign.me.uk
[Thu Jul 30 09:12:14.703379 2026] [access_compat:error] [pid 2518765:tid 2518765] [client 89.45.53.3:46784] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:12:14.806390 2026] [ssl:error] [pid 2510839:tid 2510839] (EAI 2)Name or service not known: [client 144.76.19.72:56892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:14.806420 2026] [ssl:error] [pid 2510839:tid 2510839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:14.863718 2026] [ssl:error] [pid 2508593:tid 2508593] (EAI 2)Name or service not known: [client 144.76.19.72:56894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:14.863747 2026] [ssl:error] [pid 2508593:tid 2508593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:15.299538 2026] [ssl:error] [pid 2518424:tid 2518424] (70014)End of file found: [client 216.73.216.199:36390] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:15.537863 2026] [access_compat:error] [pid 2510839:tid 2510839] [client 89.45.53.30:53192] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:12:16.557844 2026] [security2:error] [pid 2504793:tid 2504793] [client 43.131.36.84:46350] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "amsHYPxjVceg8BwhAAwH7QAAAAw"]
[Thu Jul 30 09:12:17.703353 2026] [ssl:error] [pid 2516119:tid 2516119] (70014)End of file found: [client 216.73.216.199:42158] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:17.917410 2026] [ssl:error] [pid 2506686:tid 2506686] (EAI 2)Name or service not known: [client 144.76.19.72:56900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:17.917431 2026] [ssl:error] [pid 2506686:tid 2506686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:17.970029 2026] [ssl:error] [pid 2513437:tid 2513437] (EAI 2)Name or service not known: [client 144.76.19.72:56906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:17.970054 2026] [ssl:error] [pid 2513437:tid 2513437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:19.224189 2026] [security2:error] [pid 2520009:tid 2520009] [client 216.73.216.199:35213] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/journal.log"] [unique_id "amsHY1r74WNI-61u2c7FjgAAAAc"]
[Thu Jul 30 09:12:19.224455 2026] [security2:error] [pid 2520009:tid 2520009] [client 216.73.216.199:35213] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/journal.log"] [unique_id "amsHY1r74WNI-61u2c7FjgAAAAc"]
[Thu Jul 30 09:12:19.224664 2026] [security2:error] [pid 2520009:tid 2520009] [client 216.73.216.199:35213] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/journal.log"] [unique_id "amsHY1r74WNI-61u2c7FjgAAAAc"]
[Thu Jul 30 09:12:20.269835 2026] [cgi:error] [pid 2520008:tid 2520008] [client 20.104.22.47:65428] AH02812: stderr from /home/nsnarvi/nativespace-narvi.ns-narvi.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:12:21.023622 2026] [ssl:error] [pid 2520445:tid 2520445] (EAI 2)Name or service not known: [client 144.76.19.72:45440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:21.023661 2026] [ssl:error] [pid 2520445:tid 2520445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:21.076089 2026] [ssl:error] [pid 2520445:tid 2520445] (EAI 2)Name or service not known: [client 144.76.19.72:45444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:21.076110 2026] [ssl:error] [pid 2520445:tid 2520445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:21.216189 2026] [authz_core:error] [pid 2510565:tid 2510565] [client 57.141.0.71:57046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:21.216810 2026] [authz_core:error] [pid 2510565:tid 2510565] [client 57.141.0.71:57046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:21.390769 2026] [authz_core:error] [pid 2520008:tid 2520008] [client 20.104.22.47:65428] AH01630: client denied by server configuration: /home/nsnarvi/nativespace-narvi.ns-narvi.com/php.ini
[Thu Jul 30 09:12:21.872828 2026] [security2:error] [pid 2516121:tid 2516121] [client 43.153.47.201:33116] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amsHZf4lus2R5y5Ul6sKUQAAAEA"]
[Thu Jul 30 09:12:23.897211 2026] [core:error] [pid 2515283:tid 2515283] (13)Permission denied: [client 216.73.216.199:7964] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/cirrus/drivers/pci:cirrus/new_id
[Thu Jul 30 09:12:24.130587 2026] [ssl:error] [pid 2518476:tid 2518476] (EAI 2)Name or service not known: [client 144.76.19.72:45454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:24.130622 2026] [ssl:error] [pid 2518476:tid 2518476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:24.187552 2026] [ssl:error] [pid 2518768:tid 2518768] (EAI 2)Name or service not known: [client 144.76.19.72:45468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:24.187600 2026] [ssl:error] [pid 2518768:tid 2518768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:25.272925 2026] [security2:error] [pid 2516122:tid 2516122] [client 114.119.132.171:46515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~19"] [unique_id "amsHaQh-68xzHNSw7ajIEAAAAEY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~25-1-2020
[Thu Jul 30 09:12:26.569458 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 57.141.0.53:60262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:26.570197 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 57.141.0.53:60262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:27.202319 2026] [security2:error] [pid 2513242:tid 2513242] [client 114.119.132.171:46523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~19"] [unique_id "amsHay29vuvfnT8aQVDXnQAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~25-1-2020
[Thu Jul 30 09:12:27.276691 2026] [security2:error] [pid 2515969:tid 2515969] [client 43.157.22.109:36942] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsHa5PW3bPOIzt6F3CNnwAAAB4"], referer: http://www.rock-ola.co.uk
[Thu Jul 30 09:12:27.300002 2026] [ssl:error] [pid 2516122:tid 2516122] (EAI 2)Name or service not known: [client 144.76.19.72:45484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:27.300040 2026] [ssl:error] [pid 2516122:tid 2516122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:27.353079 2026] [ssl:error] [pid 2516119:tid 2516119] (EAI 2)Name or service not known: [client 144.76.19.72:45496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:27.353116 2026] [ssl:error] [pid 2516119:tid 2516119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:27.405813 2026] [security2:error] [pid 2520009:tid 2520009] [client 43.131.36.84:45202] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amsHa1r74WNI-61u2c7FkgAAAAc"], referer: http://www.peterboroughdiocesanregistry.co.uk
[Thu Jul 30 09:12:27.721497 2026] [security2:error] [pid 2506686:tid 2506686] [client 162.62.213.165:34632] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.firstclassbkltd.co.uk"] [uri "/"] [unique_id "amsHa4gDsbCvl1dXbxXcigAAABc"]
[Thu Jul 30 09:12:28.656988 2026] [security2:error] [pid 2516119:tid 2516119] [client 43.157.22.109:36214] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsHbD2yFZcXrSfZt6I_sgAAADw"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 09:12:29.490034 2026] [authz_core:error] [pid 2520515:tid 2520515] [client 66.249.66.34:38404] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:12:29.492794 2026] [authz_core:error] [pid 2520515:tid 2520515] [client 66.249.66.34:38404] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:12:29.903998 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 144.172.105.5:52032] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Http/Client/error_log
[Thu Jul 30 09:12:30.141665 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/openeshop/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.147060 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/alegro/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.153262 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp55/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.160837 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/bludit/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.181181 2026] [access_compat:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01797: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/webasyst/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.183865 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/carbon/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.190095 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp49/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.213850 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/bbpress/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.217597 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp62/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.231351 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/sugar/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.243686 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/koken/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.248009 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/zen/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.262554 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/piwik/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.344893 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/leafpub/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.352338 2026] [access_compat:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01797: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/rainloop/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.364225 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/toaster/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.375654 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/chyrp/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.377808 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/drupal9/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.382198 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/magento2/.htaccess: Invalid command 'SetEnv', perhaps misspelled or defined by a module not included in the server configuration, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.399218 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp67/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.412680 2026] [ssl:error] [pid 2516083:tid 2516083] (EAI 2)Name or service not known: [client 144.76.19.72:55752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:30.412721 2026] [ssl:error] [pid 2516083:tid 2516083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:30.441142 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/selfoss/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.447561 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp53/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.456631 2026] [authz_core:error] [pid 2518292:tid 2518292] [client 57.141.0.35:32754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:30.457258 2026] [authz_core:error] [pid 2518292:tid 2518292] [client 57.141.0.35:32754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:30.464918 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp63/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.467441 2026] [ssl:error] [pid 2516121:tid 2516121] (EAI 2)Name or service not known: [client 144.76.19.72:55762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:30.467471 2026] [ssl:error] [pid 2516121:tid 2516121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:30.487277 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/cube/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.493888 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/procwire/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.497332 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp50/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.521266 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/atlantis/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.535255 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp58/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.543494 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp51/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.593505 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp64/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.627990 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp61/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.650707 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp54/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.654560 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/igalerie/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.665722 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/spip/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.669257 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp68/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.689596 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/nukeviet/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.757248 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/pydio/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.757734 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/anchor/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.769203 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/drupal89/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.772800 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp65/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.808481 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp57/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.860904 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/drupal8/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.887139 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/yourls/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.892711 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/classicpress/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.933812 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/phpwcms/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.951635 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/drupalcms/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.959848 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp69/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.964806 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/drupal10/, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:30.969259 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp52/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.023054 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/avactis/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.030096 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/monstra/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.040223 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/livesite/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.057355 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/buggenie/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.083550 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp60/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.124340 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.128232 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp66/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.147422 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp59/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.159641 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wp56/.htaccess: RewriteBase: argument is not a valid URL, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.163975 2026] [core:alert] [pid 2495629:tid 2495629] [client 216.73.216.199:65432] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/magento241/.htaccess: Invalid command 'SetEnv', perhaps misspelled or defined by a module not included in the server configuration, referer: https://kinesiologylondon.co.uk/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/wbce/
[Thu Jul 30 09:12:31.387848 2026] [security2:error] [pid 2516083:tid 2516083] [client 43.135.211.148:42396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.maisongerlyn.be"] [uri "/"] [unique_id "amsHb3l2KmZ-rCyQVticjAAAADg"]
[Thu Jul 30 09:12:31.714989 2026] [security2:error] [pid 2513241:tid 2513241] [client 43.157.168.43:51432] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.refraction.co.uk"] [uri "/"] [unique_id "amsHb4jgTkQuKOrvG9XI7wAAAAU"]
[Thu Jul 30 09:12:33.522265 2026] [ssl:error] [pid 2514092:tid 2514092] (EAI 2)Name or service not known: [client 144.76.19.72:55774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:33.522301 2026] [ssl:error] [pid 2514092:tid 2514092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:33.574334 2026] [ssl:error] [pid 2518470:tid 2518470] (EAI 2)Name or service not known: [client 144.76.19.72:55788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:33.574372 2026] [ssl:error] [pid 2518470:tid 2518470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:33.879938 2026] [authz_core:error] [pid 2516268:tid 2516268] [client 144.172.105.5:52096] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Oauth/error_log
[Thu Jul 30 09:12:34.350316 2026] [authz_core:error] [pid 2513432:tid 2513432] [client 57.141.0.68:63432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:34.351547 2026] [authz_core:error] [pid 2513432:tid 2513432] [client 57.141.0.68:63432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:34.396727 2026] [security2:error] [pid 2514999:tid 2514999] [client 43.135.211.148:35772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsHcvOORVstGeIWNZmCFQAAAAs"], referer: http://www.maisongerlyn.be
[Thu Jul 30 09:12:34.763779 2026] [core:error] [pid 2515283:tid 2515283] (13)Permission denied: [client 216.73.216.199:7964] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/LNXSYSTM:00/LNXSYBUS:00/subsystem/drivers/battery/bind
[Thu Jul 30 09:12:35.493148 2026] [core:error] [pid 2515047:tid 2515047] [client 66.249.66.8:39011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:35.493176 2026] [core:error] [pid 2515047:tid 2515047] [client 66.249.66.8:39011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:35.755622 2026] [authz_core:error] [pid 2510770:tid 2510770] [client 57.141.0.4:29738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:35.756251 2026] [authz_core:error] [pid 2510770:tid 2510770] [client 57.141.0.4:29738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:35.848307 2026] [cgi:error] [pid 2506686:tid 2506686] [client 20.63.10.215:57236] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:12:36.100882 2026] [security2:error] [pid 2518470:tid 2518470] [client 43.157.175.122:33136] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.parallel-coordinates.co.uk"] [uri "/"] [unique_id "amsHdC_vs7rZYtbAi06-5gAAABE"]
[Thu Jul 30 09:12:36.628551 2026] [ssl:error] [pid 2513288:tid 2513288] (EAI 2)Name or service not known: [client 144.76.19.72:55800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:36.628598 2026] [ssl:error] [pid 2513288:tid 2513288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:36.683229 2026] [ssl:error] [pid 2513440:tid 2513440] (EAI 2)Name or service not known: [client 144.76.19.72:55814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:36.683259 2026] [ssl:error] [pid 2513440:tid 2513440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:36.945884 2026] [authz_core:error] [pid 2516268:tid 2516268] [client 144.172.105.5:55460] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Oauth/Http/error_log
[Thu Jul 30 09:12:37.595589 2026] [authz_core:error] [pid 2510565:tid 2510565] [client 216.73.216.199:38990] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 09:12:37.922681 2026] [core:error] [pid 2518292:tid 2518292] (13)Permission denied: [client 216.73.216.199:63925] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS3/closing_wait
[Thu Jul 30 09:12:38.051977 2026] [core:error] [pid 2516268:tid 2516268] [client 66.249.64.171:61241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:38.052003 2026] [core:error] [pid 2516268:tid 2516268] [client 66.249.64.171:61241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:38.810312 2026] [authz_core:error] [pid 2515140:tid 2515140] [client 144.172.105.5:55492] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Oauth/Signature/error_log
[Thu Jul 30 09:12:38.929256 2026] [core:error] [pid 2518292:tid 2518292] (13)Permission denied: [client 216.73.216.199:63925] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS3/closing_wait
[Thu Jul 30 09:12:39.285541 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.9:58420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:39.286165 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.9:58420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:39.333799 2026] [security2:error] [pid 2518470:tid 2518470] [client 129.204.188.64:44440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amsHdy_vs7rZYtbAi06-6AAAABE"]
[Thu Jul 30 09:12:39.530979 2026] [core:error] [pid 2518292:tid 2518292] (13)Permission denied: [client 216.73.216.199:63925] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/closing_wait
[Thu Jul 30 09:12:39.779011 2026] [ssl:error] [pid 2510770:tid 2510770] (EAI 2)Name or service not known: [client 144.76.19.72:41002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:39.779040 2026] [ssl:error] [pid 2510770:tid 2510770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:39.833207 2026] [ssl:error] [pid 2513288:tid 2513288] (EAI 2)Name or service not known: [client 144.76.19.72:41012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:39.833231 2026] [ssl:error] [pid 2513288:tid 2513288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:39.834885 2026] [security2:error] [pid 2518292:tid 2518292] [client 216.73.216.199:63925] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/dnf.conf"] [unique_id "amsHd31gK0ZxnmTu2Ae6GQAAAAE"]
[Thu Jul 30 09:12:39.835172 2026] [security2:error] [pid 2518292:tid 2518292] [client 216.73.216.199:63925] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/dnf.conf"] [unique_id "amsHd31gK0ZxnmTu2Ae6GQAAAAE"]
[Thu Jul 30 09:12:39.835414 2026] [security2:error] [pid 2518292:tid 2518292] [client 216.73.216.199:63925] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/dnf.conf"] [unique_id "amsHd31gK0ZxnmTu2Ae6GQAAAAE"]
[Thu Jul 30 09:12:41.001134 2026] [security2:error] [pid 2518381:tid 2518381] [client 129.204.188.64:54082] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsHedE4Vxz-8iyw9bOjpQAAAAI"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:12:41.002935 2026] [authz_core:error] [pid 2518381:tid 2518381] [client 129.204.188.64:54082] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:12:41.005599 2026] [authz_core:error] [pid 2518381:tid 2518381] [client 129.204.188.64:54082] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:12:41.095162 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:2560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:42.304978 2026] [autoindex:error] [pid 2518470:tid 2518470] (13)Permission denied: [client 216.73.216.199:57056] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/home/seedhubdev/
[Thu Jul 30 09:12:42.889485 2026] [ssl:error] [pid 2518657:tid 2518657] (EAI 2)Name or service not known: [client 144.76.19.72:41018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:42.889516 2026] [ssl:error] [pid 2518657:tid 2518657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:42.906181 2026] [ssl:error] [pid 2518470:tid 2518470] (70014)End of file found: [client 216.73.216.199:57056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:42.940599 2026] [ssl:error] [pid 2515283:tid 2515283] (EAI 2)Name or service not known: [client 144.76.19.72:41022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:42.940629 2026] [ssl:error] [pid 2515283:tid 2515283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:43.127712 2026] [security2:error] [pid 2510894:tid 2510894] [client 43.130.9.111:49864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsHe_9jq-E0VO9opYoEdwAAAEU"]
[Thu Jul 30 09:12:43.206397 2026] [ssl:error] [pid 2513242:tid 2513242] (70014)End of file found: [client 216.73.216.199:62846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:43.331703 2026] [authz_core:error] [pid 2516268:tid 2516268] [client 144.172.105.5:55566] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/Zend/Validate/error_log
[Thu Jul 30 09:12:44.939110 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 57.141.0.46:26748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:44.939738 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 57.141.0.46:26748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:46.027111 2026] [ssl:error] [pid 2510565:tid 2510565] (EAI 2)Name or service not known: [client 144.76.19.72:41028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:46.027160 2026] [ssl:error] [pid 2510565:tid 2510565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:46.080612 2026] [ssl:error] [pid 2518476:tid 2518476] (EAI 2)Name or service not known: [client 144.76.19.72:41038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:46.080642 2026] [ssl:error] [pid 2518476:tid 2518476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:47.558594 2026] [security2:error] [pid 2513437:tid 2513437] [client 43.157.170.13:35182] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amsHf0Db2dZH0oGUebnOfwAAABw"]
[Thu Jul 30 09:12:47.602312 2026] [security2:error] [pid 2514999:tid 2514999] [client 43.130.9.111:60178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsHf_OORVstGeIWNZmCGAAAAAs"], referer: http://www.retrodisco.co.uk
[Thu Jul 30 09:12:47.721352 2026] [core:error] [pid 2518765:tid 2518765] (13)Permission denied: [client 216.73.216.199:15214] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/irqbypass/uevent
[Thu Jul 30 09:12:47.866002 2026] [core:error] [pid 2510839:tid 2510839] [client 66.249.66.40:50041] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:47.866030 2026] [core:error] [pid 2510839:tid 2510839] [client 66.249.66.40:50041] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:12:47.949866 2026] [security2:error] [pid 2516119:tid 2516119] [client 5.252.229.198:42090] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amsHfz2yFZcXrSfZt6I_uAAAADw"]
[Thu Jul 30 09:12:47.964392 2026] [core:error] [pid 2520969:tid 2520969] [client 64.31.3.126:28698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 09:12:47.964416 2026] [core:error] [pid 2520969:tid 2520969] [client 64.31.3.126:28698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 09:12:48.008888 2026] [authz_core:error] [pid 2506640:tid 2506640] [client 144.172.105.5:55580] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/custom/application/Ext/error_log
[Thu Jul 30 09:12:49.135447 2026] [ssl:error] [pid 2513288:tid 2513288] (EAI 2)Name or service not known: [client 144.76.19.72:41046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:49.135476 2026] [ssl:error] [pid 2513288:tid 2513288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:49.149444 2026] [core:crit] [pid 2516084:tid 2516084] (13)Permission denied: [client 64.31.3.126:1717] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/
[Thu Jul 30 09:12:49.188689 2026] [ssl:error] [pid 2520008:tid 2520008] (EAI 2)Name or service not known: [client 144.76.19.72:41050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:49.188715 2026] [ssl:error] [pid 2520008:tid 2520008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:49.726946 2026] [authz_core:error] [pid 2506640:tid 2506640] [client 144.172.105.5:55580] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/install/error_log
[Thu Jul 30 09:12:49.829525 2026] [ssl:error] [pid 2518765:tid 2518765] (70014)End of file found: [client 216.73.216.199:15214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:50.331900 2026] [ssl:error] [pid 2497479:tid 2497479] (70014)End of file found: [client 216.73.216.199:39736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:51.213468 2026] [access_compat:error] [pid 2513437:tid 2513437] [client 2.189.5.142:39512] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:12:51.577717 2026] [access_compat:error] [pid 2513437:tid 2513437] [client 2.189.5.218:46432] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:12:52.117432 2026] [cgi:error] [pid 2520336:tid 2520336] [client 82.102.18.190:51146] AH02812: stderr from /home/purple/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:12:52.172486 2026] [security2:error] [pid 2522068:tid 2522068] [client 49.51.166.228:49430] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsHhHxU-K0zrZyQnboPIQAAAAc"]
[Thu Jul 30 09:12:52.748893 2026] [ssl:error] [pid 2516125:tid 2516125] (EAI 2)Name or service not known: [client 144.76.19.72:46884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:52.748936 2026] [ssl:error] [pid 2516125:tid 2516125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:53.387609 2026] [ssl:error] [pid 2522127:tid 2522127] (EAI 2)Name or service not known: [client 144.76.19.72:46886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:53.387653 2026] [ssl:error] [pid 2522127:tid 2522127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:53.562188 2026] [security2:error] [pid 2522126:tid 2522126] [client 85.208.96.197:23368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/louise-araneta-marcos-parents"] [unique_id "amsHhaTv3QGKENuoWavJlwAAABA"]
[Thu Jul 30 09:12:54.812747 2026] [core:error] [pid 2522127:tid 2522127] [client 64.31.3.126:33115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 09:12:54.812785 2026] [core:error] [pid 2522127:tid 2522127] [client 64.31.3.126:33115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 09:12:54.871405 2026] [authz_core:error] [pid 2513241:tid 2513241] [client 144.172.105.5:56370] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/install/suite_install/error_log
[Thu Jul 30 09:12:54.949354 2026] [cgi:error] [pid 2516121:tid 2516121] [client 20.104.22.47:61642] AH02812: stderr from /home/winterb/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:12:55.292162 2026] [security2:error] [pid 2513437:tid 2513437] [client 43.130.91.95:48356] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amsHh0Db2dZH0oGUebnOhQAAABw"]
[Thu Jul 30 09:12:55.553496 2026] [core:error] [pid 2516084:tid 2516084] (13)Permission denied: [client 216.73.216.199:11568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-1k/reclaim_account
[Thu Jul 30 09:12:55.794300 2026] [security2:error] [pid 2485662:tid 2485662] [client 43.164.133.138:36954] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amsHhyUdq7C3r1IXnU6PnAAAACs"]
[Thu Jul 30 09:12:56.023081 2026] [core:crit] [pid 2518765:tid 2518765] (13)Permission denied: [client 64.31.3.126:63670] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/
[Thu Jul 30 09:12:56.456825 2026] [core:error] [pid 2516084:tid 2516084] (13)Permission denied: [client 216.73.216.199:11568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/reclaim_account
[Thu Jul 30 09:12:56.467842 2026] [ssl:error] [pid 2513437:tid 2513437] (EAI 2)Name or service not known: [client 144.76.19.72:46902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:56.467878 2026] [ssl:error] [pid 2513437:tid 2513437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:56.522443 2026] [ssl:error] [pid 2514092:tid 2514092] (EAI 2)Name or service not known: [client 144.76.19.72:46916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:56.522471 2026] [ssl:error] [pid 2514092:tid 2514092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:57.006822 2026] [security2:error] [pid 2518765:tid 2518765] [client 43.164.133.138:38822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsHiaHS4cDL5mX3k2KPhwAAACU"], referer: http://www.rogersbarbershopltd.co.uk
[Thu Jul 30 09:12:57.059590 2026] [ssl:error] [pid 2516084:tid 2516084] (70014)End of file found: [client 216.73.216.199:11568] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:12:57.116531 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 144.172.105.5:45584] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/jssource/error_log
[Thu Jul 30 09:12:58.735833 2026] [authz_core:error] [pid 2515047:tid 2515047] [client 57.141.0.31:45146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:12:58.736487 2026] [authz_core:error] [pid 2515047:tid 2515047] [client 57.141.0.31:45146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:12:58.860301 2026] [core:error] [pid 2518470:tid 2518470] (13)Permission denied: [client 216.73.216.199:35982] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/meganwalsh.com.db
[Thu Jul 30 09:12:59.531718 2026] [cgi:error] [pid 2516119:tid 2516119] [client 66.132.172.128:25160] AH02812: stderr from /home/islay/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://www.islay.me:443/cgi-bin
[Thu Jul 30 09:12:59.577532 2026] [ssl:error] [pid 2513437:tid 2513437] (EAI 2)Name or service not known: [client 144.76.19.72:58830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:59.577591 2026] [ssl:error] [pid 2513437:tid 2513437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:12:59.633390 2026] [ssl:error] [pid 2522125:tid 2522125] (EAI 2)Name or service not known: [client 144.76.19.72:58840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:12:59.633418 2026] [ssl:error] [pid 2522125:tid 2522125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:00.140824 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.37:37748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:00.141473 2026] [authz_core:error] [pid 2513288:tid 2513288] [client 57.141.0.37:37748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:00.366339 2026] [ssl:error] [pid 2518470:tid 2518470] (70014)End of file found: [client 216.73.216.199:35982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:00.585541 2026] [security2:error] [pid 2522451:tid 2522451] [client 43.165.2.110:44714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amsHjFXYHkVp8aNhmDKXqgAAAAQ"]
[Thu Jul 30 09:13:01.082278 2026] [authz_core:error] [pid 2514092:tid 2514092] [client 144.172.105.5:45594] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/service/core/error_log
[Thu Jul 30 09:13:02.477989 2026] [security2:error] [pid 2520515:tid 2520515] [client 216.73.216.199:50367] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/firmware/myri10ge_ethp_big_z8e.dat"] [unique_id "amsHjoOZLrMVBr3dKLMuwQAAABY"]
[Thu Jul 30 09:13:02.478306 2026] [security2:error] [pid 2520515:tid 2520515] [client 216.73.216.199:50367] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/firmware/myri10ge_ethp_big_z8e.dat"] [unique_id "amsHjoOZLrMVBr3dKLMuwQAAABY"]
[Thu Jul 30 09:13:02.478529 2026] [security2:error] [pid 2520515:tid 2520515] [client 216.73.216.199:50367] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/firmware/myri10ge_ethp_big_z8e.dat"] [unique_id "amsHjoOZLrMVBr3dKLMuwQAAABY"]
[Thu Jul 30 09:13:02.686979 2026] [ssl:error] [pid 2514092:tid 2514092] (EAI 2)Name or service not known: [client 144.76.19.72:58854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:02.687011 2026] [ssl:error] [pid 2514092:tid 2514092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:02.742675 2026] [ssl:error] [pid 2513288:tid 2513288] (EAI 2)Name or service not known: [client 144.76.19.72:58862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:02.742698 2026] [ssl:error] [pid 2513288:tid 2513288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:02.781899 2026] [autoindex:error] [pid 2520515:tid 2520515] (13)Permission denied: [client 216.73.216.199:50367] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/zltnmdfn/
[Thu Jul 30 09:13:03.080979 2026] [ssl:error] [pid 2520515:tid 2520515] (70014)End of file found: [client 216.73.216.199:50367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:04.277177 2026] [authz_core:error] [pid 2516120:tid 2516120] [client 144.172.105.5:45638] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/service/core/REST/error_log
[Thu Jul 30 09:13:04.691967 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 57.141.0.49:35216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:04.692613 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 57.141.0.49:35216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:05.023688 2026] [security2:error] [pid 2513288:tid 2513288] [client 43.156.36.169:46812] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.p2studio.co.uk"] [uri "/"] [unique_id "amsHkcu-S_RbhpfUSRDIRQAAAAo"]
[Thu Jul 30 09:13:05.488559 2026] [ssl:error] [pid 2522127:tid 2522127] (70014)End of file found: [client 216.73.216.199:3154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:05.797570 2026] [ssl:error] [pid 2519953:tid 2519953] (EAI 2)Name or service not known: [client 144.76.19.72:58878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:05.797620 2026] [ssl:error] [pid 2519953:tid 2519953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:05.852607 2026] [ssl:error] [pid 2515047:tid 2515047] (EAI 2)Name or service not known: [client 144.76.19.72:58884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:05.852657 2026] [ssl:error] [pid 2515047:tid 2515047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:06.387911 2026] [ssl:error] [pid 2516120:tid 2516120] (70014)End of file found: [client 216.73.216.199:21841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:06.693189 2026] [cgi:error] [pid 2522490:tid 2522490] [client 20.215.216.94:9132] AH02811: stderr from /home/lukess/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:13:07.595049 2026] [security2:error] [pid 2513241:tid 2513241] [client 43.159.34.167:40374] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsHk4jgTkQuKOrvG9XJGAAAAAU"]
[Thu Jul 30 09:13:07.735647 2026] [authz_core:error] [pid 2516125:tid 2516125] [client 144.172.105.5:37522] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/service/v2_1/error_log
[Thu Jul 30 09:13:08.296358 2026] [authz_core:error] [pid 2518765:tid 2518765] [client 57.141.0.32:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:08.296988 2026] [authz_core:error] [pid 2518765:tid 2518765] [client 57.141.0.32:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:08.717255 2026] [security2:error] [pid 2516119:tid 2516119] [client 43.135.36.201:36756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.co.uk"] [uri "/"] [unique_id "amsHlD2yFZcXrSfZt6I_wAAAADw"]
[Thu Jul 30 09:13:08.795927 2026] [core:error] [pid 2514999:tid 2514999] (13)Permission denied: [client 216.73.216.199:47034] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/mipi-dsi/drivers_probe
[Thu Jul 30 09:13:08.915638 2026] [ssl:error] [pid 2515047:tid 2515047] (EAI 2)Name or service not known: [client 144.76.19.72:58894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:08.915683 2026] [ssl:error] [pid 2515047:tid 2515047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:08.967460 2026] [ssl:error] [pid 2513241:tid 2513241] (EAI 2)Name or service not known: [client 144.76.19.72:58898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:08.967494 2026] [ssl:error] [pid 2513241:tid 2513241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:09.033109 2026] [security2:error] [pid 2516084:tid 2516084] [client 185.191.171.6:52410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/ranch-jobs-in-colorado-no-experience"] [unique_id "amsHlT6ZdXurK3NidB0UNwAAADs"]
[Thu Jul 30 09:13:09.097713 2026] [core:error] [pid 2514999:tid 2514999] (13)Permission denied: [client 216.73.216.199:47034] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/virtio/drivers/virtio_rproc_serial/uevent
[Thu Jul 30 09:13:09.102085 2026] [security2:error] [pid 2510894:tid 2510894] [client 43.159.34.167:39520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsHlf9jq-E0VO9opYoE4QAAAEU"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 09:13:10.211185 2026] [ssl:error] [pid 2514999:tid 2514999] (70014)End of file found: [client 216.73.216.199:47034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:10.396640 2026] [security2:error] [pid 2522451:tid 2522451] [client 43.160.219.206:57492] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.co.uk"] [uri "/"] [unique_id "amsHllXYHkVp8aNhmDKXrAAAAAQ"]
[Thu Jul 30 09:13:10.476303 2026] [security2:error] [pid 2515047:tid 2515047] [client 43.135.36.201:38866] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsHlqfVuhMCbO4avHkfPQAAAB8"], referer: http://www.spampmusic.co.uk
[Thu Jul 30 09:13:10.671000 2026] [authz_core:error] [pid 2516084:tid 2516084] [client 144.172.105.5:37560] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/service/v3/error_log
[Thu Jul 30 09:13:11.125104 2026] [security2:error] [pid 2510561:tid 2510561] [client 185.191.171.9:50312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/yarra-ranges-zoning"] [unique_id "amsHl4kGX8bm8NvXmLt3zwAAACw"]
[Thu Jul 30 09:13:12.347133 2026] [ssl:error] [pid 2513241:tid 2513241] (EAI 2)Name or service not known: [client 144.76.19.72:50506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:12.347165 2026] [ssl:error] [pid 2513241:tid 2513241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:12.408180 2026] [ssl:error] [pid 2516120:tid 2516120] (EAI 2)Name or service not known: [client 144.76.19.72:50522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:12.408236 2026] [ssl:error] [pid 2516120:tid 2516120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:12.602081 2026] [authz_core:error] [pid 2510894:tid 2510894] [client 57.141.0.7:48904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:12.602719 2026] [authz_core:error] [pid 2510894:tid 2510894] [client 57.141.0.7:48904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:13.118285 2026] [authz_core:error] [pid 2515047:tid 2515047] [client 144.172.105.5:37612] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/service/v3_1/error_log
[Thu Jul 30 09:13:13.686481 2026] [security2:error] [pid 2513241:tid 2513241] [client 74.7.227.8:51480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.ogsoil.com"] [uri "/"] [unique_id "amsHmYjgTkQuKOrvG9XJGgAAAAU"]
[Thu Jul 30 09:13:13.836119 2026] [core:error] [pid 2522126:tid 2522126] (13)Permission denied: [client 216.73.216.199:9590] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/tradeprintwarehouse.co.uk.db
[Thu Jul 30 09:13:14.139346 2026] [security2:error] [pid 2522126:tid 2522126] [client 216.73.216.199:9590] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/cracklib_dict.pwd"] [unique_id "amsHmqTv3QGKENuoWavJpwAAABA"]
[Thu Jul 30 09:13:14.139661 2026] [security2:error] [pid 2522126:tid 2522126] [client 216.73.216.199:9590] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/cracklib_dict.pwd"] [unique_id "amsHmqTv3QGKENuoWavJpwAAABA"]
[Thu Jul 30 09:13:14.139913 2026] [security2:error] [pid 2522126:tid 2522126] [client 216.73.216.199:9590] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/cracklib_dict.pwd"] [unique_id "amsHmqTv3QGKENuoWavJpwAAABA"]
[Thu Jul 30 09:13:15.461993 2026] [ssl:error] [pid 2510894:tid 2510894] (EAI 2)Name or service not known: [client 144.76.19.72:50524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:15.462060 2026] [ssl:error] [pid 2510894:tid 2510894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:15.464646 2026] [authz_core:error] [pid 2513241:tid 2513241] [client 144.172.105.5:40138] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/service/v4/error_log
[Thu Jul 30 09:13:15.513919 2026] [ssl:error] [pid 2520336:tid 2520336] (EAI 2)Name or service not known: [client 144.76.19.72:50540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:15.513967 2026] [ssl:error] [pid 2520336:tid 2520336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:15.777888 2026] [authz_core:error] [pid 2522451:tid 2522451] [client 57.141.0.29:56480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:15.778543 2026] [authz_core:error] [pid 2522451:tid 2522451] [client 57.141.0.29:56480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:15.949982 2026] [core:error] [pid 2513288:tid 2513288] (13)Permission denied: [client 216.73.216.199:20733] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/minimeshgrating.co.uk.db
[Thu Jul 30 09:13:17.731266 2026] [authz_core:error] [pid 2506640:tid 2506640] [client 144.172.105.5:40186] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/service/v4_1/error_log
[Thu Jul 30 09:13:18.056748 2026] [core:error] [pid 2513288:tid 2513288] (13)Permission denied: [client 216.73.216.199:20733] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/drivers/thermal/unbind
[Thu Jul 30 09:13:18.570496 2026] [ssl:error] [pid 2513242:tid 2513242] (EAI 2)Name or service not known: [client 144.76.19.72:50552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:18.570524 2026] [ssl:error] [pid 2513242:tid 2513242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:18.624990 2026] [ssl:error] [pid 2510894:tid 2510894] (EAI 2)Name or service not known: [client 144.76.19.72:50554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:18.625020 2026] [ssl:error] [pid 2510894:tid 2510894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:19.486447 2026] [security2:error] [pid 2510894:tid 2510894] [client 101.32.208.70:33078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.org.uk"] [uri "/"] [unique_id "amsHn_9jq-E0VO9opYoE6QAAAEU"]
[Thu Jul 30 09:13:20.292611 2026] [authz_core:error] [pid 2523225:tid 2523225] [client 144.172.105.5:40220] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/themes/Suite7/error_log
[Thu Jul 30 09:13:21.096695 2026] [cgi:error] [pid 2513288:tid 2513288] [client 216.73.216.199:20733] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/gnupg/help.pl.txt: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:13:21.096819 2026] [cgi:error] [pid 2513288:tid 2513288] [client 216.73.216.199:20733] End of script output before headers: help.pl.txt
[Thu Jul 30 09:13:21.302839 2026] [security2:error] [pid 2510894:tid 2510894] [client 49.51.50.147:60978] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ziltdesign.be"] [uri "/"] [unique_id "amsHof9jq-E0VO9opYoE6gAAAEU"]
[Thu Jul 30 09:13:21.682024 2026] [ssl:error] [pid 2519953:tid 2519953] (EAI 2)Name or service not known: [client 144.76.19.72:39598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:21.682060 2026] [ssl:error] [pid 2519953:tid 2519953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:21.736231 2026] [ssl:error] [pid 2515283:tid 2515283] (EAI 2)Name or service not known: [client 144.76.19.72:39602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:21.736260 2026] [ssl:error] [pid 2515283:tid 2515283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:21.790005 2026] [security2:error] [pid 2520243:tid 2520243] [client 101.32.208.70:35178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amsHoUF5b27_Qb5M5gPZIwAAAA0"], referer: http://www.shelterforum.org.uk
[Thu Jul 30 09:13:22.581560 2026] [ssl:error] [pid 2516038:tid 2516038] (70014)End of file found: [client 216.73.216.199:12390] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:23.241493 2026] [security2:error] [pid 2523397:tid 2523397] [client 170.106.11.6:51678] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/"] [unique_id "amsHo2qFUdJWXhWHT7YrjgAAAAc"]
[Thu Jul 30 09:13:23.781032 2026] [ssl:error] [pid 2510894:tid 2510894] (70014)End of file found: [client 216.73.216.199:43405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:24.451927 2026] [authz_core:error] [pid 2504793:tid 2504793] [client 66.132.172.96:40298] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/error_log
[Thu Jul 30 09:13:24.453813 2026] [authz_core:error] [pid 2504793:tid 2504793] [client 66.132.172.96:40298] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/php.ini
[Thu Jul 30 09:13:24.791456 2026] [ssl:error] [pid 2506686:tid 2506686] (EAI 2)Name or service not known: [client 144.76.19.72:39616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:24.791484 2026] [ssl:error] [pid 2506686:tid 2506686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:24.846194 2026] [ssl:error] [pid 2523397:tid 2523397] (EAI 2)Name or service not known: [client 144.76.19.72:39618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:24.846232 2026] [ssl:error] [pid 2523397:tid 2523397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:24.989877 2026] [ssl:error] [pid 2516119:tid 2516119] (70014)End of file found: [client 216.73.216.199:36777] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:25.618620 2026] [authz_core:error] [pid 2506686:tid 2506686] [client 57.141.0.36:40656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:25.619729 2026] [authz_core:error] [pid 2506686:tid 2506686] [client 57.141.0.36:40656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:25.813461 2026] [security2:error] [pid 2516125:tid 2516125] [client 170.106.11.6:53318] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsHpZJ7OHD8tRKfJXA9CQAAAEo"], referer: http://www.theislipgarage.co.uk
[Thu Jul 30 09:13:27.171512 2026] [security2:error] [pid 2516084:tid 2516084] [client 43.157.46.118:42560] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amsHpz6ZdXurK3NidB0UQAAAADs"]
[Thu Jul 30 09:13:27.924703 2026] [ssl:error] [pid 2504793:tid 2504793] (EAI 2)Name or service not known: [client 144.76.19.72:39628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:27.924740 2026] [ssl:error] [pid 2504793:tid 2504793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:27.982741 2026] [ssl:error] [pid 2515047:tid 2515047] (EAI 2)Name or service not known: [client 144.76.19.72:39632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:27.982772 2026] [ssl:error] [pid 2515047:tid 2515047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:28.631203 2026] [security2:error] [pid 2522127:tid 2522127] [client 43.157.46.118:49504] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amsHqOqbww_Ne6_JP1uq8wAAABI"], referer: http://www.hazardous-materials.co.uk
[Thu Jul 30 09:13:29.501125 2026] [ssl:error] [pid 2516038:tid 2516038] (70014)End of file found: [client 216.73.216.199:4539] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:29.806632 2026] [core:error] [pid 2523136:tid 2523136] (13)Permission denied: [client 216.73.216.199:44718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/reclaim_account
[Thu Jul 30 09:13:31.039776 2026] [ssl:error] [pid 2518765:tid 2518765] (EAI 2)Name or service not known: [client 144.76.19.72:41530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:31.039838 2026] [ssl:error] [pid 2518765:tid 2518765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:31.091863 2026] [ssl:error] [pid 2523226:tid 2523226] (EAI 2)Name or service not known: [client 144.76.19.72:41532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:31.091912 2026] [ssl:error] [pid 2523226:tid 2523226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:32.277806 2026] [authz_core:error] [pid 2516119:tid 2516119] [client 57.141.0.5:44046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:32.278477 2026] [authz_core:error] [pid 2516119:tid 2516119] [client 57.141.0.5:44046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:32.816880 2026] [ssl:error] [pid 2523136:tid 2523136] (5)Input/output error: [client 216.73.216.199:44718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:33.811764 2026] [security2:error] [pid 2514999:tid 2514999] [client 43.163.206.70:37374] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.quantum.com.mt"] [uri "/"] [unique_id "amsHrfOORVstGeIWNZmCKgAAAAs"]
[Thu Jul 30 09:13:33.968277 2026] [authz_core:error] [pid 2504793:tid 2504793] [client 57.141.0.54:44200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:13:33.968911 2026] [authz_core:error] [pid 2504793:tid 2504793] [client 57.141.0.54:44200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:13:34.148590 2026] [ssl:error] [pid 2515283:tid 2515283] (EAI 2)Name or service not known: [client 144.76.19.72:41536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:34.148626 2026] [ssl:error] [pid 2515283:tid 2515283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:34.201441 2026] [ssl:error] [pid 2513242:tid 2513242] (EAI 2)Name or service not known: [client 144.76.19.72:41544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:34.201479 2026] [ssl:error] [pid 2513242:tid 2513242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:34.988111 2026] [security2:error] [pid 2495629:tid 2495629] [client 43.166.226.57:58816] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsHrv-MPvpDsa9WKPFOCQAAACk"]
[Thu Jul 30 09:13:35.173556 2026] [security2:error] [pid 2518765:tid 2518765] [client 114.119.136.208:52213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "junglejacks.co.uk"] [uri "/robots.txt"] [unique_id "amsHr6HS4cDL5mX3k2KPkwAAACU"], referer: https://junglejacks.co.uk/robots.txt
[Thu Jul 30 09:13:35.525286 2026] [ssl:error] [pid 2520243:tid 2520243] (5)Input/output error: [client 216.73.216.199:55512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:36.429842 2026] [security2:error] [pid 2516084:tid 2516084] [client 43.166.226.57:36696] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsHsD6ZdXurK3NidB0URAAAADs"], referer: http://www.staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 09:13:36.725155 2026] [ssl:error] [pid 2504793:tid 2504793] (70014)End of file found: [client 216.73.216.199:1238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:36.869960 2026] [authz_core:error] [pid 2522067:tid 2522067] [client 144.172.105.5:40226] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/themes/SuiteR/error_log
[Thu Jul 30 09:13:37.257824 2026] [ssl:error] [pid 2523866:tid 2523866] (EAI 2)Name or service not known: [client 144.76.19.72:41560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:37.257870 2026] [ssl:error] [pid 2523866:tid 2523866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:37.310940 2026] [ssl:error] [pid 2522127:tid 2522127] (EAI 2)Name or service not known: [client 144.76.19.72:41572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:37.310967 2026] [ssl:error] [pid 2522127:tid 2522127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:37.578401 2026] [access_compat:error] [pid 2513437:tid 2513437] [client 2.189.5.142:40842] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:13:37.979986 2026] [security2:error] [pid 2523866:tid 2523866] [client 114.119.136.208:52217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.junglejacks.co.uk"] [uri "/robots.txt"] [unique_id "amsHsf5B2Lny6Fi4WqOpQgAAABE"], referer: https://junglejacks.co.uk/robots.txt
[Thu Jul 30 09:13:39.022467 2026] [security2:error] [pid 2524007:tid 2524007] [client 43.131.32.36:58016] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.michael-boffey.co.uk"] [uri "/"] [unique_id "amsHs0c_KCW6hdZbJg0ENAAAABk"]
[Thu Jul 30 09:13:39.351987 2026] [security2:error] [pid 2523136:tid 2523136] [client 43.166.226.57:38436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsHszwONh6G-u-ykgM16wAAAAE"], referer: https://www.staffordshirephoenixrifleandpistolclub.co.uk/
[Thu Jul 30 09:13:39.442927 2026] [ssl:error] [pid 2523677:tid 2523677] (70014)End of file found: [client 216.73.216.199:1900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:40.362979 2026] [ssl:error] [pid 2510565:tid 2510565] (EAI 2)Name or service not known: [client 144.76.19.72:21876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:40.363030 2026] [ssl:error] [pid 2510565:tid 2510565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:40.419428 2026] [ssl:error] [pid 2514092:tid 2514092] (EAI 2)Name or service not known: [client 144.76.19.72:21886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:40.419466 2026] [ssl:error] [pid 2514092:tid 2514092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:40.446977 2026] [security2:error] [pid 2514030:tid 2514030] [client 124.156.204.51:34296] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wildduckdesigns.co.uk"] [uri "/"] [unique_id "amsHtOikt8R766HZANVMhAAAAAk"]
[Thu Jul 30 09:13:40.448952 2026] [security2:error] [pid 2523226:tid 2523226] [client 124.156.204.51:34284] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.co.uk"] [uri "/"] [unique_id "amsHtM5KoeLkZ3w-YrNGnwAAAAU"]
[Thu Jul 30 09:13:40.793518 2026] [ssl:error] [pid 2510565:tid 2510565] (70014)End of file found: [client 216.73.216.199:22674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:41.203136 2026] [core:error] [pid 2524007:tid 2524007] (13)Permission denied: [client 216.73.216.199:47064] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/gshadow-
[Thu Jul 30 09:13:41.504770 2026] [ssl:error] [pid 2524007:tid 2524007] (70014)End of file found: [client 216.73.216.199:47064] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:42.407504 2026] [core:error] [pid 2520969:tid 2520969] (13)Permission denied: [client 216.73.216.199:28235] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/alt-php72-error.log-20260727
[Thu Jul 30 09:13:42.419966 2026] [security2:error] [pid 2514030:tid 2514030] [client 124.156.204.51:35980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsHtuikt8R766HZANVMhQAAAAk"], referer: http://www.jasperandtroy.co.uk
[Thu Jul 30 09:13:42.505819 2026] [security2:error] [pid 2504793:tid 2504793] [client 163.7.13.144:45943] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHtvxjVceg8BwhAAwIZQAAAAw"]
[Thu Jul 30 09:13:42.505899 2026] [security2:error] [pid 2504793:tid 2504793] [client 163.7.13.144:45943] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHtvxjVceg8BwhAAwIZQAAAAw"]
[Thu Jul 30 09:13:42.506205 2026] [security2:error] [pid 2504793:tid 2504793] [client 163.7.13.144:45943] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsHtvxjVceg8BwhAAwIZQAAAAw"]
[Thu Jul 30 09:13:43.476756 2026] [ssl:error] [pid 2510894:tid 2510894] (EAI 2)Name or service not known: [client 144.76.19.72:21890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:43.476789 2026] [ssl:error] [pid 2510894:tid 2510894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:43.532863 2026] [ssl:error] [pid 2514030:tid 2514030] (EAI 2)Name or service not known: [client 144.76.19.72:21896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:43.532906 2026] [ssl:error] [pid 2514030:tid 2514030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:44.806983 2026] [security2:error] [pid 2504793:tid 2504793] [client 43.133.69.37:59266] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/"] [unique_id "amsHuPxjVceg8BwhAAwIZgAAAAw"]
[Thu Jul 30 09:13:45.312638 2026] [security2:error] [pid 2523397:tid 2523397] [client 85.208.96.204:37840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/general-james-longstreet-family-tree"] [unique_id "amsHuWqFUdJWXhWHT7YrkwAAAAc"]
[Thu Jul 30 09:13:45.605228 2026] [security2:error] [pid 2510894:tid 2510894] [client 43.157.20.63:53392] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amsHuf9jq-E0VO9opYoE9AAAAEU"]
[Thu Jul 30 09:13:46.021895 2026] [ssl:error] [pid 2520969:tid 2520969] (70014)End of file found: [client 216.73.216.199:28235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:46.590423 2026] [ssl:error] [pid 2510894:tid 2510894] (EAI 2)Name or service not known: [client 144.76.19.72:21908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:46.590451 2026] [ssl:error] [pid 2510894:tid 2510894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:46.646184 2026] [ssl:error] [pid 2510565:tid 2510565] (EAI 2)Name or service not known: [client 144.76.19.72:21916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:46.646213 2026] [ssl:error] [pid 2510565:tid 2510565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:47.234439 2026] [ssl:error] [pid 2516038:tid 2516038] (70014)End of file found: [client 216.73.216.199:8234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:47.393891 2026] [security2:error] [pid 2522127:tid 2522127] [client 43.133.69.37:33182] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsHu-qbww_Ne6_JP1uq-AAAABI"], referer: http://www.clarepillinger.co.uk
[Thu Jul 30 09:13:47.611047 2026] [security2:error] [pid 2523136:tid 2523136] [client 43.157.20.63:60534] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amsHuzwONh6G-u-ykgM18AAAAAE"], referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 09:13:47.949920 2026] [autoindex:error] [pid 2518765:tid 2518765] [client 144.172.105.5:46282] AH01276: Cannot serve directory /home/winterb/public_html/thesilkshed/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 09:13:48.138051 2026] [ssl:error] [pid 2510894:tid 2510894] (70014)End of file found: [client 216.73.216.199:54822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:48.221346 2026] [lsapi:warn] [pid 2523136:tid 2523136] [client 43.157.20.63:60534] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 09:13:48.221388 2026] [lsapi:warn] [pid 2523136:tid 2523136] [client 43.157.20.63:60534] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 09:13:48.618636 2026] [security2:error] [pid 2523397:tid 2523397] [client 114.119.155.144:63275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~18"] [unique_id "amsHvGqFUdJWXhWHT7YrlgAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~25-1-2020
[Thu Jul 30 09:13:48.635528 2026] [authz_core:error] [pid 2519953:tid 2519953] [client 66.132.172.96:42416] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/error_log
[Thu Jul 30 09:13:48.637130 2026] [authz_core:error] [pid 2519953:tid 2519953] [client 66.132.172.96:42416] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/php.ini
[Thu Jul 30 09:13:49.573796 2026] [security2:error] [pid 2523136:tid 2523136] [client 49.51.73.183:38740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.fr"] [uri "/"] [unique_id "amsHvTwONh6G-u-ykgM18QAAAAE"]
[Thu Jul 30 09:13:49.702522 2026] [ssl:error] [pid 2516268:tid 2516268] (EAI 2)Name or service not known: [client 144.76.19.72:37526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:49.702565 2026] [ssl:error] [pid 2516268:tid 2516268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:49.755843 2026] [ssl:error] [pid 2522451:tid 2522451] (EAI 2)Name or service not known: [client 144.76.19.72:37534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:49.755879 2026] [ssl:error] [pid 2522451:tid 2522451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:49.774387 2026] [security2:error] [pid 2516268:tid 2516268] [client 49.51.73.183:38698] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.eu"] [uri "/"] [unique_id "amsHvb_3AURojhRKd9dd4QAAAE4"]
[Thu Jul 30 09:13:50.066052 2026] [security2:error] [pid 2522451:tid 2522451] [client 114.119.155.144:63279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~18"] [unique_id "amsHvlXYHkVp8aNhmDKXuQAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~25-1-2020
[Thu Jul 30 09:13:51.362230 2026] [ssl:error] [pid 2506686:tid 2506686] (70014)End of file found: [client 216.73.216.199:21394] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:52.467440 2026] [security2:error] [pid 2524670:tid 2524670] [client 51.75.116.202:33662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.sijames.com"] [uri "/robots.txt"] [unique_id "amsHwNB2aHiLkRfK7dcLJAAAAB0"]
[Thu Jul 30 09:13:52.711790 2026] [security2:error] [pid 2510486:tid 2510486] [client 92.118.39.60:55781] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsHwN8UIXGty8epr687lQAAACY"]
[Thu Jul 30 09:13:52.711931 2026] [security2:error] [pid 2510486:tid 2510486] [client 92.118.39.60:55781] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsHwN8UIXGty8epr687lQAAACY"]
[Thu Jul 30 09:13:52.712237 2026] [security2:error] [pid 2510486:tid 2510486] [client 92.118.39.60:55781] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsHwN8UIXGty8epr687lQAAACY"]
[Thu Jul 30 09:13:52.730259 2026] [security2:error] [pid 2516119:tid 2516119] [client 49.51.73.183:43144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsHwD2yFZcXrSfZt6I_0AAAADw"], referer: http://www.orgent.eu
[Thu Jul 30 09:13:52.740932 2026] [security2:error] [pid 2516268:tid 2516268] [client 49.51.73.183:43158] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsHwL_3AURojhRKd9dd4gAAAE4"], referer: http://www.orgent.fr
[Thu Jul 30 09:13:52.811676 2026] [ssl:error] [pid 2514030:tid 2514030] (EAI 2)Name or service not known: [client 144.76.19.72:37550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:52.811723 2026] [ssl:error] [pid 2514030:tid 2514030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:52.867423 2026] [ssl:error] [pid 2516038:tid 2516038] (EAI 2)Name or service not known: [client 144.76.19.72:37564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:52.867457 2026] [ssl:error] [pid 2516038:tid 2516038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:53.012971 2026] [security2:error] [pid 2485662:tid 2485662] [client 43.130.57.46:53858] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sarahwiseman.co.uk"] [uri "/"] [unique_id "amsHwSUdq7C3r1IXnU6PqwAAACs"]
[Thu Jul 30 09:13:53.291995 2026] [security2:error] [pid 2514030:tid 2514030] [client 43.128.149.102:59820] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amsHweikt8R766HZANVMiAAAAAk"]
[Thu Jul 30 09:13:53.320206 2026] [security2:error] [pid 2516038:tid 2516038] [client 163.7.13.144:63353] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHwTLUVduJ2SD-61ddmQAAADM"]
[Thu Jul 30 09:13:53.320259 2026] [security2:error] [pid 2516038:tid 2516038] [client 163.7.13.144:63353] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsHwTLUVduJ2SD-61ddmQAAADM"]
[Thu Jul 30 09:13:53.320514 2026] [security2:error] [pid 2516038:tid 2516038] [client 163.7.13.144:63353] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsHwTLUVduJ2SD-61ddmQAAADM"]
[Thu Jul 30 09:13:53.865702 2026] [ssl:error] [pid 2523136:tid 2523136] (70014)End of file found: [client 216.73.216.199:10531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:55.922273 2026] [ssl:error] [pid 2515047:tid 2515047] (EAI 2)Name or service not known: [client 144.76.19.72:37578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:55.922303 2026] [ssl:error] [pid 2515047:tid 2515047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:55.977521 2026] [ssl:error] [pid 2515969:tid 2515969] (EAI 2)Name or service not known: [client 144.76.19.72:37584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:55.977561 2026] [ssl:error] [pid 2515969:tid 2515969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:56.057800 2026] [security2:error] [pid 2515047:tid 2515047] [client 43.130.57.46:55126] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amsHxKfVuhMCbO4avHkfmAAAAB8"], referer: http://www.sarahwiseman.co.uk
[Thu Jul 30 09:13:56.079041 2026] [lsapi:warn] [pid 2510565:tid 2510565] [client 81.128.186.214:53327] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.bing.com/
[Thu Jul 30 09:13:56.079112 2026] [lsapi:warn] [pid 2510565:tid 2510565] [client 81.128.186.214:53327] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.bing.com/
[Thu Jul 30 09:13:56.571795 2026] [ssl:error] [pid 2516038:tid 2516038] (70014)End of file found: [client 216.73.216.199:20509] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:57.178607 2026] [ssl:error] [pid 2522127:tid 2522127] (70014)End of file found: [client 216.73.216.199:5513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:13:57.751463 2026] [security2:error] [pid 2506640:tid 2506640] [client 43.159.152.184:55442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.innerspacer.co.uk"] [uri "/"] [unique_id "amsHxWVbxDtV7t_vJ-VRIgAAABQ"]
[Thu Jul 30 09:13:59.645213 2026] [security2:error] [pid 2524958:tid 2524958] [client 170.106.192.3:40360] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "amsHx_2CBup2X4MFjFmaCwAAAC0"]
[Thu Jul 30 09:13:59.826593 2026] [security2:error] [pid 2524007:tid 2524007] [client 43.165.198.224:40826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amsHx0c_KCW6hdZbJg0EPAAAABk"]
[Thu Jul 30 09:13:59.900792 2026] [ssl:error] [pid 2525001:tid 2525001] (EAI 2)Name or service not known: [client 144.76.19.72:37588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:59.900842 2026] [ssl:error] [pid 2525001:tid 2525001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:13:59.961558 2026] [ssl:error] [pid 2513436:tid 2513436] (EAI 2)Name or service not known: [client 144.76.19.72:33208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:13:59.961597 2026] [ssl:error] [pid 2513436:tid 2513436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:00.048900 2026] [security2:error] [pid 2513436:tid 2513436] [client 43.166.7.113:45478] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsHyLmL8MPcSQ70nZ1hHgAAABs"]
[Thu Jul 30 09:14:00.304676 2026] [authz_core:error] [pid 2525005:tid 2525005] [client 57.141.0.52:20446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:00.305302 2026] [authz_core:error] [pid 2525005:tid 2525005] [client 57.141.0.52:20446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:01.686757 2026] [security2:error] [pid 2524670:tid 2524670] [client 43.157.52.37:45970] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.greenduckgallery.co.uk"] [uri "/"] [unique_id "amsHydB2aHiLkRfK7dcLJwAAAB0"]
[Thu Jul 30 09:14:02.825454 2026] [authz_core:error] [pid 2485662:tid 2485662] [client 57.141.0.62:63982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:02.826091 2026] [authz_core:error] [pid 2485662:tid 2485662] [client 57.141.0.62:63982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:03.017258 2026] [ssl:error] [pid 2513288:tid 2513288] (EAI 2)Name or service not known: [client 144.76.19.72:33210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:03.017297 2026] [ssl:error] [pid 2513288:tid 2513288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:03.067785 2026] [authz_core:error] [pid 2516038:tid 2516038] [client 57.141.0.21:51050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:03.068958 2026] [authz_core:error] [pid 2516038:tid 2516038] [client 57.141.0.21:51050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:03.071195 2026] [ssl:error] [pid 2524866:tid 2524866] (EAI 2)Name or service not known: [client 144.76.19.72:33218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:03.071219 2026] [ssl:error] [pid 2524866:tid 2524866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:03.921227 2026] [security2:error] [pid 2516268:tid 2516268] [client 43.166.7.113:45680] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsHy7_3AURojhRKd9dd5gAAAE4"], referer: http://www.beechhouseselfcatering.co.uk
[Thu Jul 30 09:14:04.400239 2026] [core:error] [pid 2525002:tid 2525002] (13)Permission denied: [client 216.73.216.199:2976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/usbhid/uevent
[Thu Jul 30 09:14:05.026193 2026] [authz_core:error] [pid 2525060:tid 2525060] [client 57.141.0.44:62890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:05.026872 2026] [authz_core:error] [pid 2525060:tid 2525060] [client 57.141.0.44:62890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:05.308558 2026] [ssl:error] [pid 2525002:tid 2525002] (70014)End of file found: [client 216.73.216.199:2976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:05.972811 2026] [ssl:error] [pid 2520515:tid 2520515] (70014)End of file found: [client 216.73.216.199:7392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:06.126517 2026] [ssl:error] [pid 2519953:tid 2519953] (EAI 2)Name or service not known: [client 144.76.19.72:33222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:06.126547 2026] [ssl:error] [pid 2519953:tid 2519953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:06.183450 2026] [ssl:error] [pid 2524915:tid 2524915] (EAI 2)Name or service not known: [client 144.76.19.72:33238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:06.183497 2026] [ssl:error] [pid 2524915:tid 2524915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:06.345442 2026] [authz_core:error] [pid 2514091:tid 2514091] [client 66.132.195.108:52510] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 09:14:06.696110 2026] [security2:error] [pid 2520243:tid 2520243] [client 43.130.14.245:39466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/"] [unique_id "amsHzkF5b27_Qb5M5gPZOQAAAA0"]
[Thu Jul 30 09:14:07.221546 2026] [authz_core:error] [pid 2524956:tid 2524956] [client 57.141.0.58:56286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:07.222298 2026] [authz_core:error] [pid 2524956:tid 2524956] [client 57.141.0.58:56286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:07.416294 2026] [core:error] [pid 2522127:tid 2522127] (13)Permission denied: [client 216.73.216.199:16081] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PINGv6/aliases
[Thu Jul 30 09:14:08.229451 2026] [security2:error] [pid 2513437:tid 2513437] [client 98.82.66.172:38868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2022/05/may-2022-multi-400x55.png"] [unique_id "amsH0EDb2dZH0oGUebnPCAAAABw"]
[Thu Jul 30 09:14:08.358028 2026] [security2:error] [pid 2523136:tid 2523136] [client 43.130.14.245:40804] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amsH0DwONh6G-u-ykgM1-AAAAAE"], referer: http://www.thesilkshed.co.uk
[Thu Jul 30 09:14:08.776159 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 57.141.0.20:32606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:08.776794 2026] [authz_core:error] [pid 2495629:tid 2495629] [client 57.141.0.20:32606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:08.885186 2026] [security2:error] [pid 2525055:tid 2525055] [client 43.162.114.69:56568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.apotheekcandidejacobs.be"] [uri "/"] [unique_id "amsH0DDhGMLYGkXwc-XPbAAAAEA"]
[Thu Jul 30 09:14:08.886205 2026] [authz_core:error] [pid 2525055:tid 2525055] [client 43.162.114.69:56568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:08.886767 2026] [authz_core:error] [pid 2525055:tid 2525055] [client 43.162.114.69:56568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:08.922335 2026] [security2:error] [pid 2522127:tid 2522127] [client 216.73.216.199:16081] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/xattr.conf"] [unique_id "amsH0Oqbww_Ne6_JP1urCAAAABI"]
[Thu Jul 30 09:14:08.922685 2026] [security2:error] [pid 2522127:tid 2522127] [client 216.73.216.199:16081] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/xattr.conf"] [unique_id "amsH0Oqbww_Ne6_JP1urCAAAABI"]
[Thu Jul 30 09:14:08.922955 2026] [security2:error] [pid 2522127:tid 2522127] [client 216.73.216.199:16081] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/xattr.conf"] [unique_id "amsH0Oqbww_Ne6_JP1urCAAAABI"]
[Thu Jul 30 09:14:08.926761 2026] [security2:error] [pid 2525059:tid 2525059] [client 170.106.192.3:49880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "amsH0EpMkXOrHHz9dxT1_wAAAEc"]
[Thu Jul 30 09:14:09.242032 2026] [ssl:error] [pid 2525052:tid 2525052] (EAI 2)Name or service not known: [client 144.76.19.72:33248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:09.242087 2026] [ssl:error] [pid 2525052:tid 2525052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:09.300268 2026] [ssl:error] [pid 2525061:tid 2525061] (EAI 2)Name or service not known: [client 144.76.19.72:33252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:09.300303 2026] [ssl:error] [pid 2525061:tid 2525061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:11.251151 2026] [security2:error] [pid 2525005:tid 2525005] [client 43.130.154.56:40876] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsH00Z2ekr99icgVtwltAAAADU"]
[Thu Jul 30 09:14:11.334863 2026] [ssl:error] [pid 2522127:tid 2522127] (70014)End of file found: [client 216.73.216.199:16081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:11.393249 2026] [security2:error] [pid 2519953:tid 2519953] [client 170.106.192.3:52342] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsH08CxdbIWUdKVWVzQ-AAAAAA"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 09:14:11.395028 2026] [authz_core:error] [pid 2519953:tid 2519953] [client 170.106.192.3:52342] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 09:14:11.397693 2026] [authz_core:error] [pid 2519953:tid 2519953] [client 170.106.192.3:52342] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 09:14:11.850089 2026] [authz_core:error] [pid 2506686:tid 2506686] [client 57.141.0.29:33630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:11.850720 2026] [authz_core:error] [pid 2506686:tid 2506686] [client 57.141.0.29:33630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:12.358240 2026] [ssl:error] [pid 2515047:tid 2515047] (EAI 2)Name or service not known: [client 144.76.19.72:30188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:12.358282 2026] [ssl:error] [pid 2515047:tid 2515047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:12.409645 2026] [ssl:error] [pid 2514030:tid 2514030] (EAI 2)Name or service not known: [client 144.76.19.72:30192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:12.409681 2026] [ssl:error] [pid 2514030:tid 2514030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:12.906460 2026] [authz_core:error] [pid 2516125:tid 2516125] [client 66.132.195.108:24254] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 09:14:13.095404 2026] [security2:error] [pid 2510486:tid 2510486] [client 43.153.86.78:42748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.blow-hairstudio.co.uk"] [uri "/"] [unique_id "amsH1d8UIXGty8epr687mAAAACY"]
[Thu Jul 30 09:14:13.193901 2026] [security2:error] [pid 2520336:tid 2520336] [client 43.153.86.78:42874] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsH1cwZATKTLj7jaFQ01AAAAA8"]
[Thu Jul 30 09:14:13.195487 2026] [authz_core:error] [pid 2520336:tid 2520336] [client 43.153.86.78:42874] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:14:13.197231 2026] [authz_core:error] [pid 2520336:tid 2520336] [client 43.153.86.78:42874] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:14:13.441120 2026] [security2:error] [pid 2485662:tid 2485662] [client 216.73.216.199:6069] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/x11.conf"] [unique_id "amsH1SUdq7C3r1IXnU6PtAAAACs"]
[Thu Jul 30 09:14:13.441407 2026] [security2:error] [pid 2485662:tid 2485662] [client 216.73.216.199:6069] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/x11.conf"] [unique_id "amsH1SUdq7C3r1IXnU6PtAAAACs"]
[Thu Jul 30 09:14:13.441629 2026] [security2:error] [pid 2485662:tid 2485662] [client 216.73.216.199:6069] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/x11.conf"] [unique_id "amsH1SUdq7C3r1IXnU6PtAAAACs"]
[Thu Jul 30 09:14:14.275506 2026] [authz_core:error] [pid 2525061:tid 2525061] [client 57.141.0.2:28902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:14.276138 2026] [authz_core:error] [pid 2525061:tid 2525061] [client 57.141.0.2:28902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:14.802470 2026] [security2:error] [pid 2514092:tid 2514092] [client 43.131.32.36:59660] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.craft-buddies.co.uk"] [uri "/"] [unique_id "amsH1uuo3CE64T8u9QiJTQAAACE"]
[Thu Jul 30 09:14:15.411059 2026] [security2:error] [pid 2513436:tid 2513436] [client 43.166.136.24:32968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amsH17mL8MPcSQ70nZ1hIQAAABs"]
[Thu Jul 30 09:14:15.463884 2026] [ssl:error] [pid 2522451:tid 2522451] (EAI 2)Name or service not known: [client 144.76.19.72:30200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:15.463920 2026] [ssl:error] [pid 2522451:tid 2522451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:15.512497 2026] [authz_core:error] [pid 2524958:tid 2524958] [client 57.141.0.71:54304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:15.513132 2026] [authz_core:error] [pid 2524958:tid 2524958] [client 57.141.0.71:54304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:15.521553 2026] [ssl:error] [pid 2525002:tid 2525002] (EAI 2)Name or service not known: [client 144.76.19.72:30204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:15.521595 2026] [ssl:error] [pid 2525002:tid 2525002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:15.677792 2026] [security2:error] [pid 2513437:tid 2513437] [client 43.153.86.78:50636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amsH10Db2dZH0oGUebnPCQAAABw"], referer: http://www.blow-hairstudio.co.uk
[Thu Jul 30 09:14:16.007103 2026] [security2:error] [pid 2524629:tid 2524629] [client 43.159.145.149:45252] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.co.uk"] [uri "/"] [unique_id "amsH2H5ZOrwt-b2il4yCzgAAAAU"]
[Thu Jul 30 09:14:16.010427 2026] [authz_core:error] [pid 2524629:tid 2524629] [client 43.159.145.149:45252] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 09:14:16.016516 2026] [authz_core:error] [pid 2524629:tid 2524629] [client 43.159.145.149:45252] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 09:14:16.152147 2026] [core:error] [pid 2485662:tid 2485662] (13)Permission denied: [client 216.73.216.199:6069] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8k/red_zone
[Thu Jul 30 09:14:16.213145 2026] [security2:error] [pid 2524915:tid 2524915] [client 43.159.145.149:45384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amsH2CFIXJF3KCyNJYmZeAAAACQ"]
[Thu Jul 30 09:14:16.380259 2026] [security2:error] [pid 2506686:tid 2506686] [client 43.153.86.78:46130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.be"] [uri "/"] [unique_id "amsH2IgDsbCvl1dXbxXc0wAAABc"]
[Thu Jul 30 09:14:16.453118 2026] [core:error] [pid 2485662:tid 2485662] (13)Permission denied: [client 216.73.216.199:6069] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dquot/store_user
[Thu Jul 30 09:14:16.754135 2026] [core:error] [pid 2485662:tid 2485662] (13)Permission denied: [client 216.73.216.199:6069] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/x86_lbr/cache_dma
[Thu Jul 30 09:14:17.055377 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:6069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:17.356189 2026] [core:error] [pid 2504793:tid 2504793] (13)Permission denied: [client 216.73.216.199:62864] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/seq_file/destroy_by_rcu
[Thu Jul 30 09:14:17.856830 2026] [security2:error] [pid 2525057:tid 2525057] [client 20.84.7.202:10624] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsH2d7zrNCfurWI8H62IQAAAEI"]
[Thu Jul 30 09:14:18.130481 2026] [ssl:error] [pid 2504793:tid 2504793] (70014)End of file found: [client 216.73.216.199:62864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:18.267897 2026] [security2:error] [pid 2525061:tid 2525061] [client 47.236.125.127:33657] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsH2ni5Ya9QO3zfQhZfDwAAAEk"]
[Thu Jul 30 09:14:18.267953 2026] [security2:error] [pid 2525061:tid 2525061] [client 47.236.125.127:33657] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsH2ni5Ya9QO3zfQhZfDwAAAEk"]
[Thu Jul 30 09:14:18.268304 2026] [security2:error] [pid 2525061:tid 2525061] [client 47.236.125.127:33657] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsH2ni5Ya9QO3zfQhZfDwAAAEk"]
[Thu Jul 30 09:14:18.385153 2026] [security2:error] [pid 2510894:tid 2510894] [client 43.131.26.226:41486] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theovertones.co.uk"] [uri "/"] [unique_id "amsH2v9jq-E0VO9opYoE-gAAAEU"]
[Thu Jul 30 09:14:18.422636 2026] [security2:error] [pid 2514092:tid 2514092] [client 43.153.113.127:59278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "amsH2uuo3CE64T8u9QiJTgAAACE"]
[Thu Jul 30 09:14:18.578158 2026] [ssl:error] [pid 2524958:tid 2524958] (EAI 2)Name or service not known: [client 144.76.19.72:30214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:18.578189 2026] [ssl:error] [pid 2524958:tid 2524958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:18.634466 2026] [ssl:error] [pid 2525001:tid 2525001] (EAI 2)Name or service not known: [client 144.76.19.72:30216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:18.634508 2026] [ssl:error] [pid 2525001:tid 2525001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:18.866295 2026] [core:error] [pid 2520336:tid 2520336] (13)Permission denied: [client 216.73.216.199:8309] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/shrink
[Thu Jul 30 09:14:19.078155 2026] [security2:error] [pid 2525002:tid 2525002] [client 43.153.86.78:53952] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsH27SXc6IiVGTrsktDsAAAADE"], referer: http://www.orgent.be
[Thu Jul 30 09:14:19.167405 2026] [ssl:error] [pid 2520336:tid 2520336] (70014)End of file found: [client 216.73.216.199:8309] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:19.267840 2026] [security2:error] [pid 2510561:tid 2510561] [client 43.157.82.252:45984] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highcleresyndicates.co.uk"] [uri "/"] [unique_id "amsH24kGX8bm8NvXmLt33QAAACw"]
[Thu Jul 30 09:14:19.700761 2026] [security2:error] [pid 2525008:tid 2525008] [client 47.245.142.6:48541] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsH24dXleL46Z2Klif_8gAAADo"]
[Thu Jul 30 09:14:19.700813 2026] [security2:error] [pid 2525008:tid 2525008] [client 47.245.142.6:48541] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsH24dXleL46Z2Klif_8gAAADo"]
[Thu Jul 30 09:14:19.701127 2026] [security2:error] [pid 2525008:tid 2525008] [client 47.245.142.6:48541] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsH24dXleL46Z2Klif_8gAAADo"]
[Thu Jul 30 09:14:19.779498 2026] [security2:error] [pid 2524629:tid 2524629] [client 43.153.15.51:49488] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "amsH235ZOrwt-b2il4yCzwAAAAU"]
[Thu Jul 30 09:14:19.793436 2026] [security2:error] [pid 2523397:tid 2523397] [client 47.128.41.85:29674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "render-farm.co.uk"] [uri "/robots.txt"] [unique_id "amsH22qFUdJWXhWHT7Yr3QAAAAc"]
[Thu Jul 30 09:14:20.285706 2026] [security2:error] [pid 2525006:tid 2525006] [client 170.106.35.153:60078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.co.uk"] [uri "/"] [unique_id "amsH3Cv1e811fjeif86zMAAAADY"]
[Thu Jul 30 09:14:21.098860 2026] [security2:error] [pid 2514999:tid 2514999] [client 43.162.103.165:52416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsH3fOORVstGeIWNZmCMgAAAAs"]
[Thu Jul 30 09:14:21.145892 2026] [security2:error] [pid 2525057:tid 2525057] [client 43.153.96.233:57538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tripodhome.co.uk"] [uri "/"] [unique_id "amsH3d7zrNCfurWI8H62IgAAAEI"]
[Thu Jul 30 09:14:21.237469 2026] [security2:error] [pid 2524958:tid 2524958] [client 170.106.35.153:33442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsH3f2CBup2X4MFjFmaEAAAAC0"], referer: http://www.spamp.co.uk
[Thu Jul 30 09:14:21.469000 2026] [security2:error] [pid 2525001:tid 2525001] [client 43.133.66.51:50936] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.baketastic.co.uk"] [uri "/"] [unique_id "amsH3TazHrYTSRR8PqcVvAAAADA"]
[Thu Jul 30 09:14:21.582994 2026] [security2:error] [pid 2522489:tid 2522489] [client 43.166.132.142:58034] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.loca.co.uk"] [uri "/"] [unique_id "amsH3bRyVoKk7gmiq5x-5AAAABo"]
[Thu Jul 30 09:14:21.687548 2026] [ssl:error] [pid 2502925:tid 2502925] (EAI 2)Name or service not known: [client 144.76.19.72:50922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:21.687569 2026] [ssl:error] [pid 2502925:tid 2502925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:21.775118 2026] [ssl:error] [pid 2495629:tid 2495629] (EAI 2)Name or service not known: [client 144.76.19.72:50928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:21.775160 2026] [ssl:error] [pid 2495629:tid 2495629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:21.879658 2026] [authz_core:error] [pid 2525065:tid 2525065] [client 66.249.66.33:41634] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:14:21.884116 2026] [authz_core:error] [pid 2525065:tid 2525065] [client 66.249.66.33:41634] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:14:22.280975 2026] [security2:error] [pid 2523866:tid 2523866] [client 47.245.142.6:60859] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsH3v5B2Lny6Fi4WqOpTQAAABE"]
[Thu Jul 30 09:14:22.281024 2026] [security2:error] [pid 2523866:tid 2523866] [client 47.245.142.6:60859] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsH3v5B2Lny6Fi4WqOpTQAAABE"]
[Thu Jul 30 09:14:22.281299 2026] [security2:error] [pid 2523866:tid 2523866] [client 47.245.142.6:60859] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsH3v5B2Lny6Fi4WqOpTQAAABE"]
[Thu Jul 30 09:14:22.664045 2026] [security2:error] [pid 2510561:tid 2510561] [client 43.162.103.165:53108] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsH3okGX8bm8NvXmLt33gAAACw"], referer: http://www.saturnsports.co.uk
[Thu Jul 30 09:14:23.093473 2026] [security2:error] [pid 2524629:tid 2524629] [client 34.236.41.241:47973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/plugins/3d-flipbook-dflip-lite/assets/"] [unique_id "amsH335ZOrwt-b2il4yC0AAAAAU"]
[Thu Jul 30 09:14:23.127613 2026] [core:error] [pid 2506640:tid 2506640] [client 66.249.66.8:43863] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:14:23.127643 2026] [core:error] [pid 2506640:tid 2506640] [client 66.249.66.8:43863] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:14:23.734297 2026] [security2:error] [pid 2514999:tid 2514999] [client 170.106.35.153:34086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsH3_OORVstGeIWNZmCMwAAAAs"], referer: http://spamp.com/
[Thu Jul 30 09:14:24.151045 2026] [security2:error] [pid 2525055:tid 2525055] [client 43.130.74.193:57490] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsH4DDhGMLYGkXwc-XPbgAAAEA"], referer: http://www.banskoexpress.co.uk
[Thu Jul 30 09:14:24.169133 2026] [security2:error] [pid 2514092:tid 2514092] [client 43.166.244.66:44034] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsH4Ouo3CE64T8u9QiJUAAAACE"]
[Thu Jul 30 09:14:24.289292 2026] [ssl:error] [pid 2525002:tid 2525002] (70014)End of file found: [client 216.73.216.199:26497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:24.832345 2026] [ssl:error] [pid 2522125:tid 2522125] (EAI 2)Name or service not known: [client 144.76.19.72:50940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:24.832374 2026] [ssl:error] [pid 2522125:tid 2522125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:24.886741 2026] [ssl:error] [pid 2525062:tid 2525062] (EAI 2)Name or service not known: [client 144.76.19.72:50942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:24.886772 2026] [ssl:error] [pid 2525062:tid 2525062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:25.634441 2026] [security2:error] [pid 2522489:tid 2522489] [client 43.133.66.51:41748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amsH4bRyVoKk7gmiq5x-5QAAABo"], referer: http://www.baketastic.co.uk
[Thu Jul 30 09:14:26.086636 2026] [security2:error] [pid 2495629:tid 2495629] [client 43.130.74.193:40934] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsH4v-MPvpDsa9WKPFOFgAAACk"], referer: http://www.banskoexpress.com
[Thu Jul 30 09:14:26.725832 2026] [security2:error] [pid 2514999:tid 2514999] [client 43.166.244.66:40506] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsH4vOORVstGeIWNZmCNAAAAAs"], referer: http://www.berehap.be
[Thu Jul 30 09:14:27.457092 2026] [security2:error] [pid 2525062:tid 2525062] [client 43.153.123.3:45186] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsH4w3ya8G-wTKx4oJ5cAAAAEs"]
[Thu Jul 30 09:14:27.960884 2026] [ssl:error] [pid 2513288:tid 2513288] (EAI 2)Name or service not known: [client 144.76.19.72:50954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:27.960927 2026] [ssl:error] [pid 2513288:tid 2513288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:28.015452 2026] [ssl:error] [pid 2524669:tid 2524669] (EAI 2)Name or service not known: [client 144.76.19.72:50956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:28.015492 2026] [ssl:error] [pid 2524669:tid 2524669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:28.203394 2026] [ssl:error] [pid 2525054:tid 2525054] (70014)End of file found: [client 216.73.216.199:14026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:29.459051 2026] [security2:error] [pid 2495629:tid 2495629] [client 43.166.244.66:43068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsH5f-MPvpDsa9WKPFOFwAAACk"], referer: https://www.berehap.be/
[Thu Jul 30 09:14:30.317332 2026] [core:error] [pid 2523397:tid 2523397] (13)Permission denied: [client 216.73.216.199:33877] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_balloon/drivers/virtio:virtio_balloon/unbind
[Thu Jul 30 09:14:30.867912 2026] [security2:error] [pid 2524669:tid 2524669] [client 185.191.171.10:36254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2011/09/15/how-to-download-and-install-the-window-8-developer-preview/"] [unique_id "amsH5vspsasQ592316asbgAAAAY"]
[Thu Jul 30 09:14:31.074960 2026] [ssl:error] [pid 2524915:tid 2524915] (EAI 2)Name or service not known: [client 144.76.19.72:47940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:31.074988 2026] [ssl:error] [pid 2524915:tid 2524915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:31.127668 2026] [security2:error] [pid 2514030:tid 2514030] [client 43.166.132.142:37822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.leaccess.co.uk"] [uri "/"] [unique_id "amsH5-ikt8R766HZANVMwQAAAAk"]
[Thu Jul 30 09:14:31.127710 2026] [ssl:error] [pid 2524957:tid 2524957] (EAI 2)Name or service not known: [client 144.76.19.72:47956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:31.127733 2026] [ssl:error] [pid 2524957:tid 2524957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:31.219593 2026] [ssl:error] [pid 2523397:tid 2523397] (70014)End of file found: [client 216.73.216.199:33877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:31.237203 2026] [security2:error] [pid 2520969:tid 2520969] [client 43.157.20.63:36342] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.akoptimize.co.uk"] [uri "/"] [unique_id "amsH59dTlGBMbfLY6bMpTwAAABU"]
[Thu Jul 30 09:14:31.692203 2026] [security2:error] [pid 2525060:tid 2525060] [client 110.249.201.112:36014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/robots.txt"] [unique_id "amsH5zwexIJbSfC8mVzGHgAAAEg"]
[Thu Jul 30 09:14:31.728203 2026] [ssl:error] [pid 2523866:tid 2523866] (70014)End of file found: [client 216.73.216.199:20181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:32.249980 2026] [security2:error] [pid 2522489:tid 2522489] [client 49.51.233.46:45558] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amsH6LRyVoKk7gmiq5x-5wAAABo"]
[Thu Jul 30 09:14:33.925218 2026] [core:error] [pid 2524670:tid 2524670] (13)Permission denied: [client 216.73.216.199:40874] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-192/destroy_by_rcu
[Thu Jul 30 09:14:34.212676 2026] [authz_core:error] [pid 2523677:tid 2523677] [client 57.141.0.21:65088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:34.213302 2026] [authz_core:error] [pid 2523677:tid 2523677] [client 57.141.0.21:65088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:34.220297 2026] [ssl:error] [pid 2524958:tid 2524958] (EAI 2)Name or service not known: [client 144.76.19.72:47960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:34.220339 2026] [ssl:error] [pid 2524958:tid 2524958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:34.275314 2026] [ssl:error] [pid 2514030:tid 2514030] (EAI 2)Name or service not known: [client 144.76.19.72:47966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:34.275342 2026] [ssl:error] [pid 2514030:tid 2514030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:34.446678 2026] [authz_core:error] [pid 2525064:tid 2525064] [client 66.249.66.33:52191] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:14:34.449332 2026] [authz_core:error] [pid 2525064:tid 2525064] [client 66.249.66.33:52191] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:14:34.649798 2026] [security2:error] [pid 2495629:tid 2495629] [client 43.131.26.226:57666] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amsH6v-MPvpDsa9WKPFOGQAAACk"]
[Thu Jul 30 09:14:35.129074 2026] [ssl:error] [pid 2524670:tid 2524670] (70014)End of file found: [client 216.73.216.199:40874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:37.331548 2026] [ssl:error] [pid 2523677:tid 2523677] (EAI 2)Name or service not known: [client 144.76.19.72:47968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:37.331600 2026] [ssl:error] [pid 2523677:tid 2523677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:37.385252 2026] [ssl:error] [pid 2514030:tid 2514030] (EAI 2)Name or service not known: [client 144.76.19.72:47982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:37.385278 2026] [ssl:error] [pid 2514030:tid 2514030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:37.536611 2026] [core:error] [pid 2524915:tid 2524915] (13)Permission denied: [client 216.73.216.199:39765] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/net/ipv4/route/flush
[Thu Jul 30 09:14:37.838725 2026] [ssl:error] [pid 2524915:tid 2524915] (70014)End of file found: [client 216.73.216.199:39765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:38.137907 2026] [core:error] [pid 2524669:tid 2524669] (13)Permission denied: [client 216.73.216.199:24850] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fib6_nodes/shrink
[Thu Jul 30 09:14:38.596247 2026] [security2:error] [pid 2523397:tid 2523397] [client 43.130.67.33:53188] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsH7mqFUdJWXhWHT7Yr7AAAAAc"]
[Thu Jul 30 09:14:39.342403 2026] [ssl:error] [pid 2524669:tid 2524669] (70014)End of file found: [client 216.73.216.199:24850] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:39.397915 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.18:25636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:39.398537 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.18:25636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:39.572314 2026] [security2:error] [pid 2523677:tid 2523677] [client 43.130.53.252:44052] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsH73JsXUfRDN8IiGV2dwAAAAM"]
[Thu Jul 30 09:14:40.085739 2026] [security2:error] [pid 2514030:tid 2514030] [client 170.106.73.216:56690] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.islay.me"] [uri "/"] [unique_id "amsH8Oikt8R766HZANVMwgAAAAk"]
[Thu Jul 30 09:14:40.416728 2026] [security2:error] [pid 2522489:tid 2522489] [client 43.130.57.46:35368] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsH8LRyVoKk7gmiq5x-6gAAABo"]
[Thu Jul 30 09:14:40.438566 2026] [ssl:error] [pid 2525062:tid 2525062] (EAI 2)Name or service not known: [client 144.76.19.72:30242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:40.438602 2026] [ssl:error] [pid 2525062:tid 2525062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:40.494302 2026] [ssl:error] [pid 2495629:tid 2495629] (EAI 2)Name or service not known: [client 144.76.19.72:30254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:40.494328 2026] [ssl:error] [pid 2495629:tid 2495629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:40.868953 2026] [authz_core:error] [pid 2525052:tid 2525052] [client 57.141.0.16:50228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:40.869616 2026] [authz_core:error] [pid 2525052:tid 2525052] [client 57.141.0.16:50228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:41.008816 2026] [authz_core:error] [pid 2525006:tid 2525006] [client 66.249.66.33:50487] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:14:41.011479 2026] [authz_core:error] [pid 2525006:tid 2525006] [client 66.249.66.33:50487] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:14:41.045214 2026] [security2:error] [pid 2524957:tid 2524957] [client 43.130.67.33:44776] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsH8Ssk9gZ6W1e9UM_eAwAAACg"], referer: http://www.hornsey-town-hall.org.uk
[Thu Jul 30 09:14:41.850184 2026] [security2:error] [pid 2523397:tid 2523397] [client 43.130.53.252:44236] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsH8WqFUdJWXhWHT7Yr7QAAAAc"], referer: http://www.glottalstop.co.uk
[Thu Jul 30 09:14:42.461160 2026] [security2:error] [pid 2522126:tid 2522126] [client 43.130.14.245:52290] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.cssystems.co.uk"] [uri "/"] [unique_id "amsH8qTv3QGKENuoWavKRgAAABA"], referer: http://www.cssystems.co.uk
[Thu Jul 30 09:14:42.863319 2026] [security2:error] [pid 2495629:tid 2495629] [client 43.130.67.33:45570] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsH8v-MPvpDsa9WKPFOGwAAACk"], referer: https://www.hornsey-town-hall.org.uk/
[Thu Jul 30 09:14:43.038183 2026] [security2:error] [pid 2506640:tid 2506640] [client 185.191.171.2:30700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/katangian-ng-simbolo-ng-lalawigan-ng-quezon"] [unique_id "amsH82VbxDtV7t_vJ-VRLgAAABQ"]
[Thu Jul 30 09:14:43.149962 2026] [security2:error] [pid 2525052:tid 2525052] [client 43.130.57.46:38120] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsH89CKdcqgEU_tVQWBiwAAAD0"], referer: http://www.1stcolsterworthscouts.org.uk
[Thu Jul 30 09:14:43.388666 2026] [security2:error] [pid 2515047:tid 2515047] [client 43.159.128.247:42438] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchellphotography.co.uk"] [uri "/"] [unique_id "amsH86fVuhMCbO4avHkfogAAAB8"]
[Thu Jul 30 09:14:43.460807 2026] [security2:error] [pid 2524957:tid 2524957] [client 43.153.102.138:47534] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsH8ysk9gZ6W1e9UM_eBAAAACg"]
[Thu Jul 30 09:14:43.462189 2026] [ssl:error] [pid 2523136:tid 2523136] (70014)End of file found: [client 216.73.216.199:19232] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:43.551824 2026] [ssl:error] [pid 2520969:tid 2520969] (EAI 2)Name or service not known: [client 144.76.19.72:30264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:43.551859 2026] [ssl:error] [pid 2520969:tid 2520969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:43.607157 2026] [ssl:error] [pid 2522489:tid 2522489] (EAI 2)Name or service not known: [client 144.76.19.72:30266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:43.607213 2026] [ssl:error] [pid 2522489:tid 2522489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:44.059285 2026] [ssl:error] [pid 2524670:tid 2524670] (70014)End of file found: [client 216.73.216.199:12627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:44.168871 2026] [authz_core:error] [pid 2525006:tid 2525006] [client 66.249.66.33:50487] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:14:44.171505 2026] [authz_core:error] [pid 2525006:tid 2525006] [client 66.249.66.33:50487] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:14:44.577182 2026] [authz_core:error] [pid 2525062:tid 2525062] [client 57.141.0.7:49812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:44.577808 2026] [authz_core:error] [pid 2525062:tid 2525062] [client 57.141.0.7:49812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:44.971530 2026] [security2:error] [pid 2525060:tid 2525060] [client 49.51.253.26:45030] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spurr.org.uk"] [uri "/"] [unique_id "amsH9DwexIJbSfC8mVzGIAAAAEg"]
[Thu Jul 30 09:14:46.089038 2026] [security2:error] [pid 2520969:tid 2520969] [client 43.135.148.92:53794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amsH9tdTlGBMbfLY6bMpUgAAABU"]
[Thu Jul 30 09:14:46.170998 2026] [ssl:error] [pid 2506686:tid 2506686] (70014)End of file found: [client 216.73.216.199:41829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:46.623259 2026] [authz_core:error] [pid 2525052:tid 2525052] [client 57.141.0.59:42796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:46.623907 2026] [authz_core:error] [pid 2525052:tid 2525052] [client 57.141.0.59:42796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:46.663296 2026] [ssl:error] [pid 2523866:tid 2523866] (EAI 2)Name or service not known: [client 144.76.19.72:30276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:46.663325 2026] [ssl:error] [pid 2523866:tid 2523866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:46.717229 2026] [ssl:error] [pid 2522126:tid 2522126] (EAI 2)Name or service not known: [client 144.76.19.72:30286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:46.717284 2026] [ssl:error] [pid 2522126:tid 2522126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:47.911515 2026] [security2:error] [pid 2523677:tid 2523677] [client 43.166.7.113:60706] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "amsH93JsXUfRDN8IiGV2egAAAAM"]
[Thu Jul 30 09:14:48.083158 2026] [security2:error] [pid 2524915:tid 2524915] [client 43.135.148.92:34514] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amsH-CFIXJF3KCyNJYmZgAAAACQ"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 09:14:48.118996 2026] [security2:error] [pid 2525060:tid 2525060] [client 43.135.148.92:56374] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsH-DwexIJbSfC8mVzGIQAAAEg"]
[Thu Jul 30 09:14:48.347435 2026] [security2:error] [pid 2520969:tid 2520969] [client 43.166.244.66:37156] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.techsuccess.uk"] [uri "/"] [unique_id "amsH-NdTlGBMbfLY6bMpUwAAABU"]
[Thu Jul 30 09:14:48.485683 2026] [lsapi:warn] [pid 2523677:tid 2523677] [client 43.166.7.113:60706] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 09:14:48.780812 2026] [core:error] [pid 2522126:tid 2522126] (13)Permission denied: [client 216.73.216.199:10165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/eventpoll_pwq/remote_node_defrag_ratio
[Thu Jul 30 09:14:49.105381 2026] [core:error] [pid 2525064:tid 2525064] [client 66.249.64.171:58944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:14:49.105416 2026] [core:error] [pid 2525064:tid 2525064] [client 66.249.64.171:58944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:14:49.482140 2026] [ssl:error] [pid 2522126:tid 2522126] (70014)End of file found: [client 216.73.216.199:10165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:49.770222 2026] [ssl:error] [pid 2525053:tid 2525053] (EAI 2)Name or service not known: [client 144.76.19.72:32086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:49.770258 2026] [ssl:error] [pid 2525053:tid 2525053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:49.822339 2026] [ssl:error] [pid 2525060:tid 2525060] (EAI 2)Name or service not known: [client 144.76.19.72:32098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:49.822386 2026] [ssl:error] [pid 2525060:tid 2525060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:50.381021 2026] [core:error] [pid 2485662:tid 2485662] (13)Permission denied: [client 216.73.216.199:34791] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/shrink
[Thu Jul 30 09:14:50.516804 2026] [security2:error] [pid 2523866:tid 2523866] [client 156.59.198.136:56294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsH-v5B2Lny6Fi4WqOpVAAAABE"]
[Thu Jul 30 09:14:50.517528 2026] [security2:error] [pid 2522127:tid 2522127] [client 43.135.148.92:37626] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsH-uqbww_Ne6_JP1urFwAAABI"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 09:14:50.681774 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:34791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:50.826787 2026] [security2:error] [pid 2523136:tid 2523136] [client 43.135.148.92:38582] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amsH-jwONh6G-u-ykgM2KwAAAAE"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 09:14:51.475338 2026] [ssl:error] [pid 2525006:tid 2525006] (70014)End of file found: [client 216.73.216.199:22152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:52.320134 2026] [security2:error] [pid 2523677:tid 2523677] [client 156.59.198.136:45620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsH_HJsXUfRDN8IiGV2ewAAAAM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:14:52.879623 2026] [ssl:error] [pid 2525054:tid 2525054] (EAI 2)Name or service not known: [client 144.76.19.72:32106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:52.879658 2026] [ssl:error] [pid 2525054:tid 2525054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:52.936882 2026] [ssl:error] [pid 2522489:tid 2522489] (EAI 2)Name or service not known: [client 144.76.19.72:32120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:52.936912 2026] [ssl:error] [pid 2522489:tid 2522489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:52.940887 2026] [security2:error] [pid 2525053:tid 2525053] [client 43.135.148.92:34364] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsH_CIPTHvtTkLARZDUWAAAAD4"]
[Thu Jul 30 09:14:53.855833 2026] [security2:error] [pid 2514091:tid 2514091] [client 156.59.198.136:19082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsH_TCmPFTuOIzS4BIWMgAAABg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:14:55.524448 2026] [security2:error] [pid 2524670:tid 2524670] [client 156.59.198.135:26724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsH_9B2aHiLkRfK7dcLNgAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:14:55.717751 2026] [authz_core:error] [pid 2525007:tid 2525007] [client 57.141.0.53:40736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:14:55.718397 2026] [authz_core:error] [pid 2525007:tid 2525007] [client 57.141.0.53:40736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:14:55.804146 2026] [core:error] [pid 2522489:tid 2522489] (13)Permission denied: [client 216.73.216.199:26800] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/libcrc32c/sections/__ksymtab
[Thu Jul 30 09:14:55.905030 2026] [security2:error] [pid 2524669:tid 2524669] [client 43.157.142.101:56540] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsH__spsasQ592316asdwAAAAY"]
[Thu Jul 30 09:14:55.907028 2026] [authz_core:error] [pid 2524669:tid 2524669] [client 43.157.142.101:56540] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:14:55.908771 2026] [authz_core:error] [pid 2524669:tid 2524669] [client 43.157.142.101:56540] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:14:55.946012 2026] [security2:error] [pid 2523136:tid 2523136] [client 43.135.148.92:43464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsH_zwONh6G-u-ykgM2LQAAAAE"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 09:14:55.991492 2026] [ssl:error] [pid 2525054:tid 2525054] (EAI 2)Name or service not known: [client 144.76.19.72:32122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:55.991521 2026] [ssl:error] [pid 2525054:tid 2525054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:56.047635 2026] [ssl:error] [pid 2522126:tid 2522126] (EAI 2)Name or service not known: [client 144.76.19.72:32128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:56.047685 2026] [ssl:error] [pid 2522126:tid 2522126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:56.104925 2026] [ssl:error] [pid 2522489:tid 2522489] (70014)End of file found: [client 216.73.216.199:26800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:56.289971 2026] [security2:error] [pid 2514091:tid 2514091] [client 43.135.145.117:34806] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.3dworkstation.co.uk"] [uri "/"] [unique_id "amsIADCmPFTuOIzS4BIWMwAAABg"]
[Thu Jul 30 09:14:56.600495 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:23873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:56.890553 2026] [core:error] [pid 2522126:tid 2522126] (13)Permission denied: [client 216.73.216.199:6591] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-16/destroy_by_rcu
[Thu Jul 30 09:14:57.081099 2026] [security2:error] [pid 2516125:tid 2516125] [client 101.32.49.171:59420] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sharonduggal.co.uk"] [uri "/"] [unique_id "amsIAZJ7OHD8tRKfJXA9fwAAAEo"]
[Thu Jul 30 09:14:57.305197 2026] [ssl:error] [pid 2522126:tid 2522126] (70014)End of file found: [client 216.73.216.199:6591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:14:57.356570 2026] [security2:error] [pid 2506686:tid 2506686] [client 156.59.198.135:40682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIAYgDsbCvl1dXbxXc4AAAABc"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:14:57.383546 2026] [security2:error] [pid 2524669:tid 2524669] [client 114.119.148.252:28225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/sites/default/files/uploaded/Wine%20List%20Summer%202021.pdf"] [unique_id "amsIAfspsasQ592316aseAAAAAY"]
[Thu Jul 30 09:14:57.747168 2026] [security2:error] [pid 2525053:tid 2525053] [client 185.191.171.16:30484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/paramedic-jobs-australia-from-uk"] [unique_id "amsIASIPTHvtTkLARZDUWwAAAD4"]
[Thu Jul 30 09:14:58.834812 2026] [security2:error] [pid 2516122:tid 2516122] [client 156.59.198.136:51310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIAgh-68xzHNSw7ajIJQAAAEY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:14:59.129651 2026] [ssl:error] [pid 2523136:tid 2523136] (EAI 2)Name or service not known: [client 144.76.19.72:32134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:59.129712 2026] [ssl:error] [pid 2523136:tid 2523136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:14:59.183292 2026] [ssl:error] [pid 2524669:tid 2524669] (EAI 2)Name or service not known: [client 144.76.19.72:32140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:14:59.183321 2026] [ssl:error] [pid 2524669:tid 2524669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:00.723406 2026] [security2:error] [pid 2522067:tid 2522067] [client 156.59.198.136:15072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIBNsI5aTOYy4_pZAIOAAAAAI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:01.108771 2026] [security2:error] [pid 2527098:tid 2527098] [client 43.135.144.81:44550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-narvi.com"] [uri "/"] [unique_id "amsIBfbgLO_vx1x-F8uoUwAAAAc"]
[Thu Jul 30 09:15:02.036550 2026] [security2:error] [pid 2485662:tid 2485662] [client 43.159.148.221:56022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amsIBiUdq7C3r1IXnU6PygAAACs"]
[Thu Jul 30 09:15:02.173097 2026] [security2:error] [pid 2523136:tid 2523136] [client 43.159.148.221:56328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amsIBjwONh6G-u-ykgM2MAAAAAE"]
[Thu Jul 30 09:15:02.235640 2026] [ssl:error] [pid 2527123:tid 2527123] (EAI 2)Name or service not known: [client 144.76.19.72:22464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:02.235678 2026] [ssl:error] [pid 2527123:tid 2527123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:02.292694 2026] [ssl:error] [pid 2522067:tid 2522067] (EAI 2)Name or service not known: [client 144.76.19.72:22478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:02.292740 2026] [ssl:error] [pid 2522067:tid 2522067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:02.422390 2026] [ssl:error] [pid 2527122:tid 2527122] (70014)End of file found: [client 216.73.216.199:41262] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:02.525305 2026] [security2:error] [pid 2525060:tid 2525060] [client 156.59.198.136:61526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIBjwexIJbSfC8mVzGJQAAAEg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:03.023145 2026] [security2:error] [pid 2485662:tid 2485662] [client 216.73.216.199:15877] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/stats.conf"] [unique_id "amsIByUdq7C3r1IXnU6PzAAAACs"]
[Thu Jul 30 09:15:03.023500 2026] [security2:error] [pid 2485662:tid 2485662] [client 216.73.216.199:15877] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/stats.conf"] [unique_id "amsIByUdq7C3r1IXnU6PzAAAACs"]
[Thu Jul 30 09:15:03.023799 2026] [security2:error] [pid 2485662:tid 2485662] [client 216.73.216.199:15877] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/stats.conf"] [unique_id "amsIByUdq7C3r1IXnU6PzAAAACs"]
[Thu Jul 30 09:15:03.324704 2026] [core:error] [pid 2485662:tid 2485662] (13)Permission denied: [client 216.73.216.199:15877] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tcp_bind_bucket/order
[Thu Jul 30 09:15:04.026745 2026] [security2:error] [pid 2527237:tid 2527237] [client 156.59.198.136:27722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsICNLzYAiq9lrH3vp0HAAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:04.234046 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:15877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:04.559939 2026] [security2:error] [pid 2527021:tid 2527021] [client 43.159.148.221:50540] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsICHc3AErWkK5ecRqbtAAAAAA"], referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 09:15:04.561978 2026] [authz_core:error] [pid 2527021:tid 2527021] [client 43.159.148.221:50540] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 09:15:04.564706 2026] [authz_core:error] [pid 2527021:tid 2527021] [client 43.159.148.221:50540] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 09:15:04.753158 2026] [security2:error] [pid 2523677:tid 2523677] [client 43.159.148.221:50584] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsICHJsXUfRDN8IiGV2fgAAAAM"], referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 09:15:04.754897 2026] [authz_core:error] [pid 2523677:tid 2523677] [client 43.159.148.221:50584] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 09:15:04.757579 2026] [authz_core:error] [pid 2523677:tid 2523677] [client 43.159.148.221:50584] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 09:15:05.348489 2026] [ssl:error] [pid 2527123:tid 2527123] (EAI 2)Name or service not known: [client 144.76.19.72:22492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:05.348530 2026] [ssl:error] [pid 2527123:tid 2527123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:05.400669 2026] [ssl:error] [pid 2527021:tid 2527021] (EAI 2)Name or service not known: [client 144.76.19.72:22494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:05.400719 2026] [ssl:error] [pid 2527021:tid 2527021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:05.437568 2026] [ssl:error] [pid 2522126:tid 2522126] (70014)End of file found: [client 216.73.216.199:16236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:05.818184 2026] [security2:error] [pid 2527300:tid 2527300] [client 156.59.198.135:62352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsICbPFyBPefWaU6bZejgAAAA4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:05.938276 2026] [security2:error] [pid 2525053:tid 2525053] [client 43.153.62.161:49902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.co.uk"] [uri "/"] [unique_id "amsICSIPTHvtTkLARZDUXQAAAD4"]
[Thu Jul 30 09:15:06.751853 2026] [authz_core:error] [pid 2523677:tid 2523677] [client 57.141.0.71:32220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:06.752477 2026] [authz_core:error] [pid 2523677:tid 2523677] [client 57.141.0.71:32220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:07.592453 2026] [security2:error] [pid 2524629:tid 2524629] [client 156.59.198.135:15952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIC35ZOrwt-b2il4yC2AAAAAU"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:08.045550 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:61531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.045591 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:61531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.117839 2026] [core:error] [pid 2527300:tid 2527300] [client 20.203.142.71:23382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.117876 2026] [core:error] [pid 2527300:tid 2527300] [client 20.203.142.71:23382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.143235 2026] [ssl:error] [pid 2525054:tid 2525054] (70014)End of file found: [client 216.73.216.199:1363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:08.182202 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:61520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.182231 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:61520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.248658 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.248686 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.344852 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:61564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.344877 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:61564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.404347 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:23387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.404394 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:23387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.481739 2026] [ssl:error] [pid 2525053:tid 2525053] (EAI 2)Name or service not known: [client 144.76.19.72:22498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:08.481787 2026] [ssl:error] [pid 2525053:tid 2525053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:08.490510 2026] [core:error] [pid 2522451:tid 2522451] [client 20.203.142.71:61507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.490545 2026] [core:error] [pid 2522451:tid 2522451] [client 20.203.142.71:61507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.538419 2026] [ssl:error] [pid 2527300:tid 2527300] (EAI 2)Name or service not known: [client 144.76.19.72:22504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:08.538467 2026] [ssl:error] [pid 2527300:tid 2527300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:08.575413 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.575445 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.723939 2026] [core:error] [pid 2527237:tid 2527237] [client 20.203.142.71:61566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.723964 2026] [core:error] [pid 2527237:tid 2527237] [client 20.203.142.71:61566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.784753 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.784778 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.857890 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.857917 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.916394 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:61536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.916418 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:61536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.983746 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:61567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:08.983772 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:61567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.052968 2026] [core:error] [pid 2522451:tid 2522451] [client 20.203.142.71:23384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.053002 2026] [core:error] [pid 2522451:tid 2522451] [client 20.203.142.71:23384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.159514 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.159539 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.217224 2026] [core:error] [pid 2527237:tid 2527237] [client 20.203.142.71:23383] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.217261 2026] [core:error] [pid 2527237:tid 2527237] [client 20.203.142.71:23383] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.289128 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:23366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.289154 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:23366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.348278 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:23377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.348303 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:23377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.401127 2026] [security2:error] [pid 2527122:tid 2527122] [client 156.59.198.136:51744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIDdqYb315ukVh1fbcAwAAAAg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:09.408688 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.408711 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.470199 2026] [core:error] [pid 2522128:tid 2522128] [client 20.203.142.71:23386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.470225 2026] [core:error] [pid 2522128:tid 2522128] [client 20.203.142.71:23386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.528467 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:61545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.528492 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:61545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.590253 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61517] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.590282 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61517] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.649998 2026] [core:error] [pid 2527237:tid 2527237] [client 20.203.142.71:23362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.650025 2026] [core:error] [pid 2527237:tid 2527237] [client 20.203.142.71:23362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.707597 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:23372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.707634 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:23372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.769763 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.769794 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.845406 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.845432 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.904323 2026] [core:error] [pid 2522128:tid 2522128] [client 20.203.142.71:61535] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.904346 2026] [core:error] [pid 2522128:tid 2522128] [client 20.203.142.71:61535] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.960728 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:23395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:09.960747 2026] [core:error] [pid 2525053:tid 2525053] [client 20.203.142.71:23395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.015628 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.015653 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.076706 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.076742 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:61557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.135324 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:23398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.135367 2026] [core:error] [pid 2524670:tid 2524670] [client 20.203.142.71:23398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.231050 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61553] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.231095 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61553] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.296038 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.296066 2026] [core:error] [pid 2523677:tid 2523677] [client 20.203.142.71:61543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.352037 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:23393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.352090 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:23393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.416465 2026] [core:error] [pid 2522128:tid 2522128] [client 20.203.142.71:23404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.416490 2026] [core:error] [pid 2522128:tid 2522128] [client 20.203.142.71:23404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.472194 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.472216 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.543818 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:23365] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.543850 2026] [core:error] [pid 2520969:tid 2520969] [client 20.203.142.71:23365] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.623737 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.623767 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.686434 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:23368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.686468 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:23368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.766454 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:61527] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.766486 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:61527] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.812773 2026] [cgi:error] [pid 2524957:tid 2524957] [client 216.73.216.199:15388] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/exim.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:15:10.812813 2026] [cgi:error] [pid 2524957:tid 2524957] [client 216.73.216.199:15388] End of script output before headers: exim.pl
[Thu Jul 30 09:15:10.839752 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61519] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.839773 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61519] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.905044 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.905081 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.965738 2026] [core:error] [pid 2522067:tid 2522067] [client 20.203.142.71:61546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:10.965759 2026] [core:error] [pid 2522067:tid 2522067] [client 20.203.142.71:61546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.028974 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.029008 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.039274 2026] [security2:error] [pid 2527122:tid 2527122] [client 156.59.198.135:19544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsID9qYb315ukVh1fbcBAAAAAg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:11.103607 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:23388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.103633 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:23388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.220468 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.220492 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.290718 2026] [core:error] [pid 2523136:tid 2523136] [client 20.203.142.71:23363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.290742 2026] [core:error] [pid 2523136:tid 2523136] [client 20.203.142.71:23363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.357122 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.357148 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.421396 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23419] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.421422 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23419] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.482218 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.482243 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.544477 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:61540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.544500 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:61540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.592714 2026] [ssl:error] [pid 2527235:tid 2527235] (EAI 2)Name or service not known: [client 144.76.19.72:56098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:11.592747 2026] [ssl:error] [pid 2527235:tid 2527235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:11.613182 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.613203 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.645693 2026] [ssl:error] [pid 2522126:tid 2522126] (EAI 2)Name or service not known: [client 144.76.19.72:56110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:11.645714 2026] [ssl:error] [pid 2522126:tid 2522126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:11.712854 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:29062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.712881 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:29062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.829371 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.829394 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.866483 2026] [security2:error] [pid 2522489:tid 2522489] [client 114.119.155.144:30185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~102"] [unique_id "amsID7RyVoKk7gmiq5x-9AAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~25-1-2020
[Thu Jul 30 09:15:11.898392 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:61555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.898415 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:61555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.994846 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:11.994870 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.061692 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.061719 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.132365 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.132391 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.199365 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:61528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.199391 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:61528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.267142 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:23397] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.267164 2026] [core:error] [pid 2523866:tid 2523866] [client 20.203.142.71:23397] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.280958 2026] [core:error] [pid 2516125:tid 2516125] (13)Permission denied: [client 216.73.216.199:31589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/key_jar/shrink
[Thu Jul 30 09:15:12.329887 2026] [core:error] [pid 2527234:tid 2527234] [client 20.203.142.71:61551] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.329914 2026] [core:error] [pid 2527234:tid 2527234] [client 20.203.142.71:61551] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.392910 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.392938 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:61541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.449605 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.449627 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.521495 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:23396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.521514 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:23396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.580371 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23399] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.580392 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23399] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.582324 2026] [core:error] [pid 2516125:tid 2516125] (13)Permission denied: [client 216.73.216.199:31589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_1k/store_user
[Thu Jul 30 09:15:12.631055 2026] [security2:error] [pid 2522127:tid 2522127] [client 156.59.198.136:27904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIEOqbww_Ne6_JP1urVwAAABI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:12.647844 2026] [core:error] [pid 2527234:tid 2527234] [client 20.203.142.71:29060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.647866 2026] [core:error] [pid 2527234:tid 2527234] [client 20.203.142.71:29060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.726135 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.726159 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.805970 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:23401] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.805994 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:23401] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.884006 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:23422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.884029 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:23422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.976996 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:12.977020 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:23374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.061935 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.061962 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.136101 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:61547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.136128 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:61547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.260488 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:23400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.260516 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:23400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.290607 2026] [security2:error] [pid 2525060:tid 2525060] [client 114.119.155.144:30197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~102"] [unique_id "amsIETwexIJbSfC8mVzGLQAAAEg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~25-1-2020
[Thu Jul 30 09:15:13.319887 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:61561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.319910 2026] [core:error] [pid 2527122:tid 2527122] [client 20.203.142.71:61561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.377682 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:23390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.377713 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:23390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.440295 2026] [core:error] [pid 2525054:tid 2525054] [client 20.203.142.71:23367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.440322 2026] [core:error] [pid 2525054:tid 2525054] [client 20.203.142.71:23367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.486285 2026] [core:error] [pid 2516125:tid 2516125] (13)Permission denied: [client 216.73.216.199:31589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/uts_namespace/slab_size
[Thu Jul 30 09:15:13.509771 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:29072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.509824 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:29072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.594372 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61533] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.594396 2026] [core:error] [pid 2522126:tid 2522126] [client 20.203.142.71:61533] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.663223 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.663246 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.743922 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:61526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.743949 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:61526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.811332 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:29095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.811358 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:29095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.942855 2026] [core:error] [pid 2525054:tid 2525054] [client 20.203.142.71:23411] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:13.942880 2026] [core:error] [pid 2525054:tid 2525054] [client 20.203.142.71:23411] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.023169 2026] [security2:error] [pid 2527122:tid 2527122] [client 156.59.198.135:53866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIEtqYb315ukVh1fbcCQAAAAg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:14.024804 2026] [core:error] [pid 2523136:tid 2523136] [client 20.203.142.71:23408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.024824 2026] [core:error] [pid 2523136:tid 2523136] [client 20.203.142.71:23408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.123540 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:29108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.123566 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:29108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.183188 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:28523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.183216 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:28523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.281167 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:29069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.281191 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:29069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.360874 2026] [core:error] [pid 2525054:tid 2525054] [client 20.203.142.71:23361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.360895 2026] [core:error] [pid 2525054:tid 2525054] [client 20.203.142.71:23361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.421435 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:61505] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.421461 2026] [core:error] [pid 2522127:tid 2522127] [client 20.203.142.71:61505] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.500668 2026] [core:error] [pid 2527577:tid 2527577] [client 20.203.142.71:29078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.500725 2026] [core:error] [pid 2527577:tid 2527577] [client 20.203.142.71:29078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.617048 2026] [core:error] [pid 2527578:tid 2527578] [client 20.203.142.71:61504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.617117 2026] [core:error] [pid 2527578:tid 2527578] [client 20.203.142.71:61504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.699899 2026] [ssl:error] [pid 2522127:tid 2522127] (EAI 2)Name or service not known: [client 144.76.19.72:56120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:14.699925 2026] [ssl:error] [pid 2522127:tid 2522127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:14.703197 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:29105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.703216 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:29105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.755044 2026] [ssl:error] [pid 2527577:tid 2527577] (EAI 2)Name or service not known: [client 144.76.19.72:56136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:14.755112 2026] [ssl:error] [pid 2527577:tid 2527577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:14.860155 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:61514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.860179 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:61514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:14.991023 2026] [core:error] [pid 2516125:tid 2516125] (13)Permission denied: [client 216.73.216.199:31589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_efi_item/slabs_cpu_partial
[Thu Jul 30 09:15:15.014783 2026] [core:error] [pid 2527577:tid 2527577] [client 20.203.142.71:61563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.014818 2026] [core:error] [pid 2527577:tid 2527577] [client 20.203.142.71:61563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.249952 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:61516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.249981 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:61516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.292550 2026] [ssl:error] [pid 2516125:tid 2516125] (70014)End of file found: [client 216.73.216.199:31589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:15.458256 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:61556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.458294 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:61556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.541397 2026] [security2:error] [pid 2525060:tid 2525060] [client 156.59.198.136:36046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIEzwexIJbSfC8mVzGLgAAAEg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:15.573537 2026] [core:error] [pid 2527577:tid 2527577] [client 20.203.142.71:23420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.573565 2026] [core:error] [pid 2527577:tid 2527577] [client 20.203.142.71:23420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.705474 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:29099] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.705504 2026] [core:error] [pid 2485662:tid 2485662] [client 20.203.142.71:29099] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.829427 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:15.829454 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.050165 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:61529] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.050195 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:61529] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.157419 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:29089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.157445 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:29089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.262551 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.262596 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.347946 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:61560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.347965 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:61560] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.407109 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:28523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.407134 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:28523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.538587 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.538608 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:61515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.691251 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:61525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.691271 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:61525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.780292 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:29077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.780329 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:29077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.844852 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.844878 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.867445 2026] [security2:error] [pid 2524669:tid 2524669] [client 156.59.198.136:48844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIFPspsasQ592316asfwAAAAY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:16.930787 2026] [core:error] [pid 2527300:tid 2527300] [client 20.203.142.71:23403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:16.930815 2026] [core:error] [pid 2527300:tid 2527300] [client 20.203.142.71:23403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.090479 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:23423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.090506 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:23423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.267147 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:23364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.267175 2026] [core:error] [pid 2527021:tid 2527021] [client 20.203.142.71:23364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.347115 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.347143 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.407547 2026] [security2:error] [pid 2527300:tid 2527300] [client 43.153.123.4:43540] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.fast-hosting.co.uk"] [uri "/"] [unique_id "amsIFbPFyBPefWaU6bZemAAAAA4"]
[Thu Jul 30 09:15:17.430116 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:29064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.430155 2026] [core:error] [pid 2514091:tid 2514091] [client 20.203.142.71:29064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.557195 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.557221 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.617683 2026] [authz_core:error] [pid 2525006:tid 2525006] [client 57.141.0.14:65282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:17.618310 2026] [authz_core:error] [pid 2525006:tid 2525006] [client 57.141.0.14:65282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:17.681044 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29085] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.681078 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29085] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.743145 2026] [core:error] [pid 2525007:tid 2525007] [client 20.203.142.71:28501] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.743181 2026] [core:error] [pid 2525007:tid 2525007] [client 20.203.142.71:28501] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.811828 2026] [ssl:error] [pid 2525006:tid 2525006] (EAI 2)Name or service not known: [client 144.76.19.72:56152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:17.811869 2026] [ssl:error] [pid 2525006:tid 2525006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:17.818318 2026] [core:error] [pid 2522067:tid 2522067] [client 20.203.142.71:23406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.818343 2026] [core:error] [pid 2522067:tid 2522067] [client 20.203.142.71:23406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.863855 2026] [ssl:error] [pid 2525007:tid 2525007] (EAI 2)Name or service not known: [client 144.76.19.72:56158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:17.863896 2026] [ssl:error] [pid 2525007:tid 2525007] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:17.882184 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.882221 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:17.998799 2026] [core:error] [pid 2506686:tid 2506686] (13)Permission denied: [client 216.73.216.199:9716] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/slabs
[Thu Jul 30 09:15:18.063426 2026] [core:error] [pid 2525006:tid 2525006] [client 20.203.142.71:29109] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.063456 2026] [core:error] [pid 2525006:tid 2525006] [client 20.203.142.71:29109] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.160750 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.160779 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.221913 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:23378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.221940 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:23378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.335058 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.335099 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.382219 2026] [security2:error] [pid 2524669:tid 2524669] [client 156.59.198.135:63094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIFvspsasQ592316asgQAAAAY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:18.394190 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.394213 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.502357 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:23381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.502383 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:23381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.592657 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:28512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.592725 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:28512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.665388 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.665411 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.744315 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:29087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.744342 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:29087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.810565 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.810600 2026] [core:error] [pid 2522489:tid 2522489] [client 20.203.142.71:29063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.868181 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.868206 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:61538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.951278 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:18.951308 2026] [core:error] [pid 2525060:tid 2525060] [client 20.203.142.71:29086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.073145 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.073173 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.214558 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:28482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.214612 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:28482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.300967 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.300991 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.366184 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:29056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.366210 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:29056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.428343 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:61508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.428365 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:61508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.502771 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:28516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.502796 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:28516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.564041 2026] [core:error] [pid 2527236:tid 2527236] [client 20.203.142.71:23394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.564084 2026] [core:error] [pid 2527236:tid 2527236] [client 20.203.142.71:23394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.641403 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.641430 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.664010 2026] [security2:error] [pid 2525060:tid 2525060] [client 156.59.198.135:13014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIFzwexIJbSfC8mVzGNgAAAEg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:19.731455 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:28481] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.731479 2026] [core:error] [pid 2527546:tid 2527546] [client 20.203.142.71:28481] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.813105 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.813130 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.872355 2026] [core:error] [pid 2525006:tid 2525006] [client 20.203.142.71:29102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.872382 2026] [core:error] [pid 2525006:tid 2525006] [client 20.203.142.71:29102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.929548 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:23380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:19.929583 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:23380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.012686 2026] [core:error] [pid 2527236:tid 2527236] [client 20.203.142.71:23405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.012711 2026] [core:error] [pid 2527236:tid 2527236] [client 20.203.142.71:23405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.145355 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.145383 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.244042 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.244063 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:23372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.317592 2026] [core:error] [pid 2525006:tid 2525006] [client 20.203.142.71:29106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.317629 2026] [core:error] [pid 2525006:tid 2525006] [client 20.203.142.71:29106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.390381 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:29092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.390404 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:29092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.472922 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:29104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.472949 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:29104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.610049 2026] [core:error] [pid 2527236:tid 2527236] [client 20.203.142.71:23415] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.610098 2026] [core:error] [pid 2527236:tid 2527236] [client 20.203.142.71:23415] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.688811 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.688834 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.743552 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.743600 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.801345 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.801373 2026] [core:error] [pid 2516125:tid 2516125] [client 20.203.142.71:61562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.860337 2026] [core:error] [pid 2523136:tid 2523136] [client 20.203.142.71:29118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.860359 2026] [core:error] [pid 2523136:tid 2523136] [client 20.203.142.71:29118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.920421 2026] [ssl:error] [pid 2525060:tid 2525060] (EAI 2)Name or service not known: [client 144.76.19.72:54978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:20.920447 2026] [ssl:error] [pid 2525060:tid 2525060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:20.931186 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:28488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.931204 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:28488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:20.974867 2026] [ssl:error] [pid 2527236:tid 2527236] (EAI 2)Name or service not known: [client 144.76.19.72:54982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:20.974894 2026] [ssl:error] [pid 2527236:tid 2527236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:21.009920 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:28499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.009951 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:28499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.043472 2026] [security2:error] [pid 2525006:tid 2525006] [client 156.59.198.136:40684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIGSv1e811fjeif86zQwAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:21.073081 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:23371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.073102 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:23371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.150739 2026] [core:error] [pid 2524915:tid 2524915] [client 20.203.142.71:29067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.150773 2026] [core:error] [pid 2524915:tid 2524915] [client 20.203.142.71:29067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.223086 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:28518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.223139 2026] [core:error] [pid 2527716:tid 2527716] [client 20.203.142.71:28518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.306634 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.306665 2026] [core:error] [pid 2527235:tid 2527235] [client 20.203.142.71:23370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.309767 2026] [ssl:error] [pid 2506686:tid 2506686] (70014)End of file found: [client 216.73.216.199:9716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:21.421035 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.421059 2026] [core:error] [pid 2524629:tid 2524629] [client 20.203.142.71:29073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.486695 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:23417] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.486718 2026] [core:error] [pid 2524957:tid 2524957] [client 20.203.142.71:23417] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.621155 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:23412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.621175 2026] [core:error] [pid 2524669:tid 2524669] [client 20.203.142.71:23412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.629510 2026] [cgi:error] [pid 2523136:tid 2523136] [client 47.128.117.57:47946] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:15:21.687224 2026] [core:error] [pid 2524915:tid 2524915] [client 20.203.142.71:61559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:21.687255 2026] [core:error] [pid 2524915:tid 2524915] [client 20.203.142.71:61559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:22.577986 2026] [security2:error] [pid 2527236:tid 2527236] [client 156.59.198.136:40726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIGsQeiTjf93_p6vyV4AAAAAw"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:23.120004 2026] [ssl:error] [pid 2524915:tid 2524915] (70014)End of file found: [client 216.73.216.199:53309] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:23.882045 2026] [security2:error] [pid 2524957:tid 2524957] [client 43.153.54.14:40998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/totk.bin"] [unique_id "amsIGysk9gZ6W1e9UM_eFQAAACg"]
[Thu Jul 30 09:15:24.019536 2026] [core:error] [pid 2527546:tid 2527546] (13)Permission denied: [client 216.73.216.199:19894] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:19/eject
[Thu Jul 30 09:15:24.029753 2026] [ssl:error] [pid 2527236:tid 2527236] (EAI 2)Name or service not known: [client 144.76.19.72:54986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:24.029809 2026] [ssl:error] [pid 2527236:tid 2527236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:24.085460 2026] [ssl:error] [pid 2522067:tid 2522067] (EAI 2)Name or service not known: [client 144.76.19.72:54992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:24.085489 2026] [ssl:error] [pid 2522067:tid 2522067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:24.188389 2026] [security2:error] [pid 2527234:tid 2527234] [client 156.59.198.136:56980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIHLBKz1rZ9LZSAqFHEwAAAAo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:24.320294 2026] [ssl:error] [pid 2527546:tid 2527546] (70014)End of file found: [client 216.73.216.199:19894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:24.812020 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.14:49308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:24.812655 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.14:49308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:25.612336 2026] [security2:error] [pid 2524670:tid 2524670] [client 156.59.198.135:42856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIHdB2aHiLkRfK7dcLRAAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:26.052867 2026] [authz_core:error] [pid 2527577:tid 2527577] [client 57.141.0.17:40292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:26.053488 2026] [authz_core:error] [pid 2527577:tid 2527577] [client 57.141.0.17:40292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:27.139191 2026] [ssl:error] [pid 2527577:tid 2527577] (EAI 2)Name or service not known: [client 144.76.19.72:54994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:27.139222 2026] [ssl:error] [pid 2527577:tid 2527577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:27.219242 2026] [ssl:error] [pid 2506686:tid 2506686] (EAI 2)Name or service not known: [client 144.76.19.72:55002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:27.219273 2026] [ssl:error] [pid 2506686:tid 2506686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:27.319221 2026] [security2:error] [pid 2523866:tid 2523866] [client 156.59.198.136:19382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIH_5B2Lny6Fi4WqOpYwAAABE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:27.332182 2026] [ssl:error] [pid 2520969:tid 2520969] (70014)End of file found: [client 216.73.216.199:1589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:28.138796 2026] [security2:error] [pid 2527021:tid 2527021] [client 201.148.8.154:58416] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsIIHc3AErWkK5ecRqbwwAAAAA"]
[Thu Jul 30 09:15:28.138854 2026] [security2:error] [pid 2527021:tid 2527021] [client 201.148.8.154:58416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsIIHc3AErWkK5ecRqbwwAAAAA"]
[Thu Jul 30 09:15:28.139126 2026] [security2:error] [pid 2527021:tid 2527021] [client 201.148.8.154:58416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIIHc3AErWkK5ecRqbwwAAAAA"]
[Thu Jul 30 09:15:28.823811 2026] [security2:error] [pid 2522128:tid 2522128] [client 156.59.198.136:28954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIIIZkp1WE5hg7oxClvAAAABM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:29.518358 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.60:26286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:29.518983 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.60:26286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:29.576843 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_AgAAABo"]
[Thu Jul 30 09:15:29.577100 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_AgAAABo"]
[Thu Jul 30 09:15:29.577351 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_AgAAABo"]
[Thu Jul 30 09:15:29.596488 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/api/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_AwAAABo"]
[Thu Jul 30 09:15:29.596739 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/api/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_AwAAABo"]
[Thu Jul 30 09:15:29.596981 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/api/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_AwAAABo"]
[Thu Jul 30 09:15:29.616253 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/backend/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_BAAAABo"]
[Thu Jul 30 09:15:29.616498 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/backend/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_BAAAABo"]
[Thu Jul 30 09:15:29.616760 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/backend/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_BAAAABo"]
[Thu Jul 30 09:15:29.656152 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/admin/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_BgAAABo"]
[Thu Jul 30 09:15:29.656370 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/admin/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_BgAAABo"]
[Thu Jul 30 09:15:29.656602 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/admin/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_BgAAABo"]
[Thu Jul 30 09:15:29.695692 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/laravel/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_CAAAABo"]
[Thu Jul 30 09:15:29.695920 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/laravel/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_CAAAABo"]
[Thu Jul 30 09:15:29.696158 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/laravel/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_CAAAABo"]
[Thu Jul 30 09:15:29.715969 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/core/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_CQAAABo"]
[Thu Jul 30 09:15:29.716207 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/core/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_CQAAABo"]
[Thu Jul 30 09:15:29.716405 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/core/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_CQAAABo"]
[Thu Jul 30 09:15:29.752703 2026] [ssl:error] [pid 2522451:tid 2522451] (70014)End of file found: [client 216.73.216.199:25685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:29.754892 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/.env.example"] [unique_id "amsIIbRyVoKk7gmiq5x_CwAAABo"]
[Thu Jul 30 09:15:29.755100 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/.env.example"] [unique_id "amsIIbRyVoKk7gmiq5x_CwAAABo"]
[Thu Jul 30 09:15:29.755292 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/.env.example"] [unique_id "amsIIbRyVoKk7gmiq5x_CwAAABo"]
[Thu Jul 30 09:15:29.774335 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/app/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DAAAABo"]
[Thu Jul 30 09:15:29.774508 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/app/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DAAAABo"]
[Thu Jul 30 09:15:29.774699 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/app/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DAAAABo"]
[Thu Jul 30 09:15:29.793626 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/dev/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DQAAABo"]
[Thu Jul 30 09:15:29.793806 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/dev/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DQAAABo"]
[Thu Jul 30 09:15:29.793992 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/dev/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DQAAABo"]
[Thu Jul 30 09:15:29.832303 2026] [security2:error] [pid 2514091:tid 2514091] [client 163.61.60.30:54912] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "berehap.be"] [uri "/xmlrpc.php"] [unique_id "amsIITCmPFTuOIzS4BIWRgAAABg"]
[Thu Jul 30 09:15:29.840836 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/server/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DwAAABo"]
[Thu Jul 30 09:15:29.841044 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/server/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DwAAABo"]
[Thu Jul 30 09:15:29.841270 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/server/.env"] [unique_id "amsIIbRyVoKk7gmiq5x_DwAAABo"]
[Thu Jul 30 09:15:29.860218 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/.env.save"] [unique_id "amsIIbRyVoKk7gmiq5x_EAAAABo"]
[Thu Jul 30 09:15:29.860415 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/.env.save"] [unique_id "amsIIbRyVoKk7gmiq5x_EAAAABo"]
[Thu Jul 30 09:15:29.860650 2026] [security2:error] [pid 2522489:tid 2522489] [client 185.93.89.167:38291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/.env.save"] [unique_id "amsIIbRyVoKk7gmiq5x_EAAAABo"]
[Thu Jul 30 09:15:30.293842 2026] [ssl:error] [pid 2506686:tid 2506686] (EAI 2)Name or service not known: [client 144.76.19.72:51406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:30.293881 2026] [ssl:error] [pid 2506686:tid 2506686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:30.334386 2026] [security2:error] [pid 2522128:tid 2522128] [client 156.59.198.135:17852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIIoZkp1WE5hg7oxClvQAAABM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:30.349567 2026] [ssl:error] [pid 2527716:tid 2527716] (EAI 2)Name or service not known: [client 144.76.19.72:51422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:30.349613 2026] [ssl:error] [pid 2527716:tid 2527716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:30.651924 2026] [core:error] [pid 2525006:tid 2525006] (13)Permission denied: [client 216.73.216.199:1562] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/red_zone
[Thu Jul 30 09:15:31.685120 2026] [core:error] [pid 2527716:tid 2527716] [client 66.249.66.15:35671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:31.685161 2026] [core:error] [pid 2527716:tid 2527716] [client 66.249.66.15:35671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:31.773326 2026] [security2:error] [pid 2524915:tid 2524915] [client 179.165.2.240:36318] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsIIyFIXJF3KCyNJYmZ6QAAACQ"]
[Thu Jul 30 09:15:31.773373 2026] [security2:error] [pid 2524915:tid 2524915] [client 179.165.2.240:36318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsIIyFIXJF3KCyNJYmZ6QAAACQ"]
[Thu Jul 30 09:15:31.773604 2026] [security2:error] [pid 2524915:tid 2524915] [client 179.165.2.240:36318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIIyFIXJF3KCyNJYmZ6QAAACQ"]
[Thu Jul 30 09:15:32.009317 2026] [authz_core:error] [pid 2522128:tid 2522128] [client 57.141.0.36:21528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:32.009938 2026] [authz_core:error] [pid 2522128:tid 2522128] [client 57.141.0.36:21528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:32.157983 2026] [core:error] [pid 2525006:tid 2525006] (13)Permission denied: [client 216.73.216.199:1562] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty50/subsystem/ttyS2/close_delay
[Thu Jul 30 09:15:32.236597 2026] [security2:error] [pid 2522127:tid 2522127] [client 156.59.198.136:45064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIJOqbww_Ne6_JP1urYAAAABI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:32.442086 2026] [security2:error] [pid 2524915:tid 2524915] [client 85.208.96.210:18686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/mushroom-black-cap-white-stem"] [unique_id "amsIJCFIXJF3KCyNJYmZ6gAAACQ"]
[Thu Jul 30 09:15:32.459316 2026] [ssl:error] [pid 2525006:tid 2525006] (70014)End of file found: [client 216.73.216.199:1562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:33.403189 2026] [ssl:error] [pid 2524915:tid 2524915] (EAI 2)Name or service not known: [client 144.76.19.72:51430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:33.403222 2026] [ssl:error] [pid 2524915:tid 2524915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:33.459257 2026] [ssl:error] [pid 2524957:tid 2524957] (EAI 2)Name or service not known: [client 144.76.19.72:51444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:33.459287 2026] [ssl:error] [pid 2524957:tid 2524957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:33.959087 2026] [authz_core:error] [pid 2514091:tid 2514091] [client 57.141.0.7:32294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:33.959712 2026] [authz_core:error] [pid 2514091:tid 2514091] [client 57.141.0.7:32294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:34.505182 2026] [security2:error] [pid 2527021:tid 2527021] [client 156.59.198.135:51170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIJnc3AErWkK5ecRqbxAAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:34.612221 2026] [security2:error] [pid 2528278:tid 2528278] [client 85.208.96.207:28496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/53rd-brigade-support-battalion"] [unique_id "amsIJsICb-1E1dIynZhgCQAAAAI"]
[Thu Jul 30 09:15:34.766784 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGAAAACg"]
[Thu Jul 30 09:15:34.767029 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGAAAACg"]
[Thu Jul 30 09:15:34.767291 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGAAAACg"]
[Thu Jul 30 09:15:34.787779 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/api/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGQAAACg"]
[Thu Jul 30 09:15:34.788014 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/api/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGQAAACg"]
[Thu Jul 30 09:15:34.788282 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/api/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGQAAACg"]
[Thu Jul 30 09:15:34.809011 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/backend/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGgAAACg"]
[Thu Jul 30 09:15:34.809264 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/backend/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGgAAACg"]
[Thu Jul 30 09:15:34.809527 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/backend/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eGgAAACg"]
[Thu Jul 30 09:15:34.852780 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/admin/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHAAAACg"]
[Thu Jul 30 09:15:34.853027 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/admin/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHAAAACg"]
[Thu Jul 30 09:15:34.853302 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/admin/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHAAAACg"]
[Thu Jul 30 09:15:34.869509 2026] [ssl:error] [pid 2525007:tid 2525007] (70014)End of file found: [client 216.73.216.199:25284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:34.895226 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/laravel/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHgAAACg"]
[Thu Jul 30 09:15:34.895460 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/laravel/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHgAAACg"]
[Thu Jul 30 09:15:34.895701 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/laravel/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHgAAACg"]
[Thu Jul 30 09:15:34.916230 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/core/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHwAAACg"]
[Thu Jul 30 09:15:34.916456 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/core/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHwAAACg"]
[Thu Jul 30 09:15:34.916723 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/core/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eHwAAACg"]
[Thu Jul 30 09:15:34.958814 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/.env.example"] [unique_id "amsIJisk9gZ6W1e9UM_eIQAAACg"]
[Thu Jul 30 09:15:34.959087 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/.env.example"] [unique_id "amsIJisk9gZ6W1e9UM_eIQAAACg"]
[Thu Jul 30 09:15:34.959315 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/.env.example"] [unique_id "amsIJisk9gZ6W1e9UM_eIQAAACg"]
[Thu Jul 30 09:15:34.979823 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/app/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eIgAAACg"]
[Thu Jul 30 09:15:34.980036 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/app/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eIgAAACg"]
[Thu Jul 30 09:15:34.980300 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/app/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eIgAAACg"]
[Thu Jul 30 09:15:35.000904 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/dev/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eIwAAACg"]
[Thu Jul 30 09:15:35.001175 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/dev/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eIwAAACg"]
[Thu Jul 30 09:15:35.001452 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/dev/.env"] [unique_id "amsIJisk9gZ6W1e9UM_eIwAAACg"]
[Thu Jul 30 09:15:35.049230 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/server/.env"] [unique_id "amsIJysk9gZ6W1e9UM_eJQAAACg"]
[Thu Jul 30 09:15:35.049451 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/server/.env"] [unique_id "amsIJysk9gZ6W1e9UM_eJQAAACg"]
[Thu Jul 30 09:15:35.049743 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/server/.env"] [unique_id "amsIJysk9gZ6W1e9UM_eJQAAACg"]
[Thu Jul 30 09:15:35.070363 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/.env.save"] [unique_id "amsIJysk9gZ6W1e9UM_eJgAAACg"]
[Thu Jul 30 09:15:35.070640 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/.env.save"] [unique_id "amsIJysk9gZ6W1e9UM_eJgAAACg"]
[Thu Jul 30 09:15:35.070915 2026] [security2:error] [pid 2524957:tid 2524957] [client 185.93.89.167:19023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/.env.save"] [unique_id "amsIJysk9gZ6W1e9UM_eJgAAACg"]
[Thu Jul 30 09:15:35.604512 2026] [authz_core:error] [pid 2527577:tid 2527577] [client 66.249.66.192:43733] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:15:35.607170 2026] [authz_core:error] [pid 2527577:tid 2527577] [client 66.249.66.192:43733] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:15:36.141623 2026] [security2:error] [pid 2528278:tid 2528278] [client 156.59.198.136:43308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIKMICb-1E1dIynZhgCwAAAAI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:36.176301 2026] [security2:error] [pid 2527021:tid 2527021] [client 102.129.81.105:16091] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsIKHc3AErWkK5ecRqbxgAAAAA"]
[Thu Jul 30 09:15:36.176359 2026] [security2:error] [pid 2527021:tid 2527021] [client 102.129.81.105:16091] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsIKHc3AErWkK5ecRqbxgAAAAA"]
[Thu Jul 30 09:15:36.176661 2026] [security2:error] [pid 2527021:tid 2527021] [client 102.129.81.105:16091] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIKHc3AErWkK5ecRqbxgAAAAA"]
[Thu Jul 30 09:15:36.931815 2026] [ssl:error] [pid 2528278:tid 2528278] (EAI 2)Name or service not known: [client 144.76.19.72:51452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:36.931862 2026] [ssl:error] [pid 2528278:tid 2528278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:36.984122 2026] [ssl:error] [pid 2527021:tid 2527021] (EAI 2)Name or service not known: [client 144.76.19.72:51460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:36.984155 2026] [ssl:error] [pid 2527021:tid 2527021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:37.782207 2026] [ssl:error] [pid 2522489:tid 2522489] (70014)End of file found: [client 216.73.216.199:31820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:37.887134 2026] [core:error] [pid 2528501:tid 2528501] (13)Permission denied: [client 216.73.216.199:64238] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:10/eject
[Thu Jul 30 09:15:37.903932 2026] [security2:error] [pid 2527021:tid 2527021] [client 156.59.198.135:59314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIKXc3AErWkK5ecRqbyAAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:38.187021 2026] [ssl:error] [pid 2528501:tid 2528501] (70014)End of file found: [client 216.73.216.199:64238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:38.869777 2026] [authz_core:error] [pid 2528278:tid 2528278] [client 57.141.0.43:63308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:38.870399 2026] [authz_core:error] [pid 2528278:tid 2528278] [client 57.141.0.43:63308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:39.601432 2026] [security2:error] [pid 2528543:tid 2528543] [client 156.59.198.135:26124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIK9sbFZy29uO6JtIBFwAAACA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:40.036416 2026] [ssl:error] [pid 2524670:tid 2524670] (EAI 2)Name or service not known: [client 144.76.19.72:39716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:40.036452 2026] [ssl:error] [pid 2524670:tid 2524670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:40.092453 2026] [ssl:error] [pid 2527235:tid 2527235] (EAI 2)Name or service not known: [client 144.76.19.72:39722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:40.092482 2026] [ssl:error] [pid 2527235:tid 2527235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:40.789287 2026] [authz_core:error] [pid 2528278:tid 2528278] [client 57.141.0.42:58336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:40.789915 2026] [authz_core:error] [pid 2528278:tid 2528278] [client 57.141.0.42:58336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:40.797803 2026] [core:error] [pid 2527122:tid 2527122] (13)Permission denied: [client 216.73.216.199:16803] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS3/close_delay
[Thu Jul 30 09:15:41.228849 2026] [security2:error] [pid 2506686:tid 2506686] [client 43.133.60.94:46740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsILYgDsbCvl1dXbxXdAAAAABc"]
[Thu Jul 30 09:15:43.150616 2026] [ssl:error] [pid 2485662:tid 2485662] (EAI 2)Name or service not known: [client 144.76.19.72:39730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:43.150649 2026] [ssl:error] [pid 2485662:tid 2485662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:43.203809 2026] [ssl:error] [pid 2528542:tid 2528542] (EAI 2)Name or service not known: [client 144.76.19.72:39738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:43.203849 2026] [ssl:error] [pid 2528542:tid 2528542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:43.994395 2026] [security2:error] [pid 2527098:tid 2527098] [client 43.130.150.80:33948] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.inrc.org.uk"] [uri "/"] [unique_id "amsIL_bgLO_vx1x-F8uoYwAAAAc"]
[Thu Jul 30 09:15:44.262346 2026] [ssl:error] [pid 2527122:tid 2527122] (70014)End of file found: [client 216.73.216.199:16803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:44.426716 2026] [security2:error] [pid 2527235:tid 2527235] [client 43.133.60.94:33582] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsIMOlnpeZ1rCVuWI9dYQAAAAs"], referer: http://www.purple-childcare.co.uk
[Thu Jul 30 09:15:45.137233 2026] [authz_core:error] [pid 2528542:tid 2528542] [client 57.141.0.35:46960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:45.138282 2026] [authz_core:error] [pid 2528542:tid 2528542] [client 57.141.0.35:46960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:45.151622 2026] [core:error] [pid 2506686:tid 2506686] (13)Permission denied: [client 216.73.216.199:61695] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/shrink
[Thu Jul 30 09:15:45.915651 2026] [ssl:error] [pid 2527577:tid 2527577] (70014)End of file found: [client 216.73.216.199:14309] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:46.257382 2026] [ssl:error] [pid 2523866:tid 2523866] (EAI 2)Name or service not known: [client 144.76.19.72:39742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:46.257408 2026] [ssl:error] [pid 2523866:tid 2523866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:46.308951 2026] [ssl:error] [pid 2525054:tid 2525054] (EAI 2)Name or service not known: [client 144.76.19.72:39754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:46.308976 2026] [ssl:error] [pid 2525054:tid 2525054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:46.366294 2026] [security2:error] [pid 2516125:tid 2516125] [client 156.59.198.135:65088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIMpJ7OHD8tRKfJXA9ngAAAEo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:46.397908 2026] [security2:error] [pid 2527236:tid 2527236] [client 85.208.96.199:62960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6900.0.html"] [unique_id "amsIMsQeiTjf93_p6vyV6AAAAAw"]
[Thu Jul 30 09:15:46.518002 2026] [core:error] [pid 2506686:tid 2506686] (13)Permission denied: [client 216.73.216.199:61695] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:20/eject
[Thu Jul 30 09:15:46.819339 2026] [ssl:error] [pid 2506686:tid 2506686] (70014)End of file found: [client 216.73.216.199:61695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:47.430304 2026] [core:error] [pid 2522128:tid 2522128] [client 66.249.64.170:37951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:47.430327 2026] [core:error] [pid 2522128:tid 2522128] [client 66.249.64.170:37951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:15:47.824744 2026] [security2:error] [pid 2527716:tid 2527716] [client 43.159.35.188:45938] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amsIM-whMSFHO_Abq_iZ6gAAABQ"]
[Thu Jul 30 09:15:48.268286 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.12:51402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:48.268908 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.12:51402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:49.363327 2026] [ssl:error] [pid 2524669:tid 2524669] (EAI 2)Name or service not known: [client 144.76.19.72:39756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:49.363351 2026] [ssl:error] [pid 2524669:tid 2524669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:49.415387 2026] [ssl:error] [pid 2524915:tid 2524915] (EAI 2)Name or service not known: [client 144.76.19.72:39760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:49.415410 2026] [ssl:error] [pid 2524915:tid 2524915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:49.679762 2026] [security2:error] [pid 2516125:tid 2516125] [client 74.7.241.61:48694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.nativespace-narvi.ns-narvi.com"] [uri "/"] [unique_id "amsINZJ7OHD8tRKfJXA9nwAAAEo"]
[Thu Jul 30 09:15:51.637691 2026] [ssl:error] [pid 2527546:tid 2527546] (70014)End of file found: [client 216.73.216.199:28231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:51.801590 2026] [security2:error] [pid 2524915:tid 2524915] [client 43.166.134.114:57502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amsINyFIXJF3KCyNJYmZ7wAAACQ"]
[Thu Jul 30 09:15:52.235696 2026] [ssl:error] [pid 2527098:tid 2527098] (70014)End of file found: [client 216.73.216.199:29644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:15:52.503502 2026] [ssl:error] [pid 2523136:tid 2523136] (EAI 2)Name or service not known: [client 144.76.19.72:37106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:52.503529 2026] [ssl:error] [pid 2523136:tid 2523136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:52.559498 2026] [ssl:error] [pid 2527236:tid 2527236] (EAI 2)Name or service not known: [client 144.76.19.72:37112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:52.559527 2026] [ssl:error] [pid 2527236:tid 2527236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:53.559221 2026] [security2:error] [pid 2527235:tid 2527235] [client 156.59.198.136:25906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIOelnpeZ1rCVuWI9dYwAAAAs"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:53.778306 2026] [core:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:33310] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS3/custom_divisor
[Thu Jul 30 09:15:54.079650 2026] [core:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:33310] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/custom_divisor
[Thu Jul 30 09:15:55.222992 2026] [security2:error] [pid 2528278:tid 2528278] [client 156.59.198.136:58888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIO8ICb-1E1dIynZhgdgAAAAI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:55.616198 2026] [ssl:error] [pid 2529319:tid 2529319] (EAI 2)Name or service not known: [client 144.76.19.72:37122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:55.616246 2026] [ssl:error] [pid 2529319:tid 2529319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:55.673656 2026] [ssl:error] [pid 2527234:tid 2527234] (EAI 2)Name or service not known: [client 144.76.19.72:37136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:55.673688 2026] [ssl:error] [pid 2527234:tid 2527234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:57.109528 2026] [authz_core:error] [pid 2527546:tid 2527546] [client 57.141.0.16:56628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:57.110157 2026] [authz_core:error] [pid 2527546:tid 2527546] [client 57.141.0.16:56628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:57.181817 2026] [security2:error] [pid 2528278:tid 2528278] [client 156.59.198.136:43180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIPcICb-1E1dIynZhgdwAAAAI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:58.556159 2026] [security2:error] [pid 2527235:tid 2527235] [client 156.59.198.135:46884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIPulnpeZ1rCVuWI9dZwAAAAs"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:15:58.561546 2026] [authz_core:error] [pid 2516125:tid 2516125] [client 57.141.0.14:64106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:58.562178 2026] [authz_core:error] [pid 2516125:tid 2516125] [client 57.141.0.14:64106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:15:58.729992 2026] [ssl:error] [pid 2528278:tid 2528278] (EAI 2)Name or service not known: [client 144.76.19.72:37142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:58.730019 2026] [ssl:error] [pid 2528278:tid 2528278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:58.787584 2026] [ssl:error] [pid 2527122:tid 2527122] (EAI 2)Name or service not known: [client 144.76.19.72:37156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:15:58.787613 2026] [ssl:error] [pid 2527122:tid 2527122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:15:59.209199 2026] [authz_core:error] [pid 2527122:tid 2527122] [client 57.141.0.33:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:15:59.209819 2026] [authz_core:error] [pid 2527122:tid 2527122] [client 57.141.0.33:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:00.058904 2026] [security2:error] [pid 2527122:tid 2527122] [client 156.59.198.135:48436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIQNqYb315ukVh1fbcHQAAAAg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:00.159346 2026] [ssl:error] [pid 2529526:tid 2529526] (70014)End of file found: [client 216.73.216.199:40843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:01.062874 2026] [core:error] [pid 2527235:tid 2527235] (13)Permission denied: [client 216.73.216.199:53902] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-1k/aliases
[Thu Jul 30 09:16:01.703198 2026] [security2:error] [pid 2524670:tid 2524670] [client 156.59.198.136:59398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIQdB2aHiLkRfK7dcLWAAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:01.855212 2026] [ssl:error] [pid 2527236:tid 2527236] (EAI 2)Name or service not known: [client 144.76.19.72:57854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:01.855241 2026] [ssl:error] [pid 2527236:tid 2527236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:01.906709 2026] [ssl:error] [pid 2506686:tid 2506686] (EAI 2)Name or service not known: [client 144.76.19.72:57862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:01.906733 2026] [ssl:error] [pid 2506686:tid 2506686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:03.226226 2026] [security2:error] [pid 2506686:tid 2506686] [client 156.59.198.135:28782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIQ4gDsbCvl1dXbxXdCgAAABc"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:04.963088 2026] [ssl:error] [pid 2525060:tid 2525060] (EAI 2)Name or service not known: [client 144.76.19.72:57864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:04.963119 2026] [ssl:error] [pid 2525060:tid 2525060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:04.974722 2026] [ssl:error] [pid 2527235:tid 2527235] (70014)End of file found: [client 216.73.216.199:53902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:05.276177 2026] [security2:error] [pid 2527300:tid 2527300] [client 216.73.216.199:64031] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-xsl.ini"] [unique_id "amsIRbPFyBPefWaU6bZfaAAAAA4"]
[Thu Jul 30 09:16:05.276416 2026] [security2:error] [pid 2527300:tid 2527300] [client 216.73.216.199:64031] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-xsl.ini"] [unique_id "amsIRbPFyBPefWaU6bZfaAAAAA4"]
[Thu Jul 30 09:16:05.276622 2026] [security2:error] [pid 2527300:tid 2527300] [client 216.73.216.199:64031] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-xsl.ini"] [unique_id "amsIRbPFyBPefWaU6bZfaAAAAA4"]
[Thu Jul 30 09:16:05.299179 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:57878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:05.299207 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:05.433997 2026] [security2:error] [pid 2523866:tid 2523866] [client 156.59.198.136:60490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIRf5B2Lny6Fi4WqOpggAAABE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:06.781192 2026] [core:error] [pid 2527300:tid 2527300] (13)Permission denied: [client 216.73.216.199:64031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/net/ipv6/route/flush
[Thu Jul 30 09:16:07.225903 2026] [security2:error] [pid 2527122:tid 2527122] [client 156.59.198.135:11014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIR9qYb315ukVh1fbcIAAAAAg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:07.383826 2026] [core:error] [pid 2527300:tid 2527300] (13)Permission denied: [client 216.73.216.199:64031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/senderverifybypasshosts
[Thu Jul 30 09:16:07.840881 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 4.225.203.146:11557] AH01630: client denied by server configuration: /home/elhassan/public_html/wp-includes/pomo/error_log
[Thu Jul 30 09:16:08.124643 2026] [security2:error] [pid 2529846:tid 2529846] [client 185.191.171.18:64078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2014/09/09/surface-pro-3-wifi-not-connecting-over-5ghz/"] [unique_id "amsISF5DX5CZJ4p3tLkQEgAAAC4"]
[Thu Jul 30 09:16:08.354977 2026] [ssl:error] [pid 2529849:tid 2529849] (EAI 2)Name or service not known: [client 144.76.19.72:57894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:08.355011 2026] [ssl:error] [pid 2529849:tid 2529849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:08.411911 2026] [ssl:error] [pid 2529850:tid 2529850] (EAI 2)Name or service not known: [client 144.76.19.72:57902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:08.411948 2026] [ssl:error] [pid 2529850:tid 2529850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:08.700496 2026] [security2:error] [pid 2529847:tid 2529847] [client 156.59.198.135:32266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsISNwPpl67fUcgNl8fDwAAAC8"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:08.742757 2026] [core:error] [pid 2529851:tid 2529851] [client 66.249.64.170:56529] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:16:08.742799 2026] [core:error] [pid 2529851:tid 2529851] [client 66.249.64.170:56529] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:16:09.076395 2026] [ssl:error] [pid 2527122:tid 2527122] (70014)End of file found: [client 216.73.216.199:17673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:09.093120 2026] [lsapi:error] [pid 2527300:tid 2527300] [client 216.73.216.199:64031] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Wordpress.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Wordpress.php on line 8\n
[Thu Jul 30 09:16:11.293820 2026] [ssl:error] [pid 2523866:tid 2523866] (70014)End of file found: [client 216.73.216.199:55647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:11.467463 2026] [ssl:error] [pid 2528541:tid 2528541] (EAI 2)Name or service not known: [client 144.76.19.72:19066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:11.467491 2026] [ssl:error] [pid 2528541:tid 2528541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:11.520838 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:19076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:11.520865 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:13.107024 2026] [core:error] [pid 2529715:tid 2529715] (13)Permission denied: [client 216.73.216.199:35667] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory237/subsystem/uevent
[Thu Jul 30 09:16:13.484516 2026] [access_compat:error] [pid 2527236:tid 2527236] [client 5.127.0.46:49002] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:16:14.576670 2026] [ssl:error] [pid 2529555:tid 2529555] (EAI 2)Name or service not known: [client 144.76.19.72:19086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:14.576713 2026] [ssl:error] [pid 2529555:tid 2529555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:14.632926 2026] [ssl:error] [pid 2529634:tid 2529634] (EAI 2)Name or service not known: [client 144.76.19.72:19098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:14.632954 2026] [ssl:error] [pid 2529634:tid 2529634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:15.851203 2026] [security2:error] [pid 2529632:tid 2529632] [client 156.59.198.135:54134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIT1rbkaQBadRgHvTDJQAAABY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:16.718444 2026] [ssl:error] [pid 2529851:tid 2529851] (70014)End of file found: [client 216.73.216.199:61452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:17.390500 2026] [security2:error] [pid 2523866:tid 2523866] [client 203.223.89.4:56160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,43.0.html"] [unique_id "amsIUf5B2Lny6Fi4WqOpiwAAABE"]
[Thu Jul 30 09:16:17.390550 2026] [security2:error] [pid 2523866:tid 2523866] [client 203.223.89.4:56160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,43.0.html"] [unique_id "amsIUf5B2Lny6Fi4WqOpiwAAABE"]
[Thu Jul 30 09:16:17.390790 2026] [security2:error] [pid 2523866:tid 2523866] [client 203.223.89.4:56160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIUf5B2Lny6Fi4WqOpiwAAABE"]
[Thu Jul 30 09:16:17.391104 2026] [security2:error] [pid 2525007:tid 2525007] [client 156.59.198.136:59836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIUWWwe5c7pdx6jQErtgAAADg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:17.622493 2026] [ssl:error] [pid 2529715:tid 2529715] (70014)End of file found: [client 216.73.216.199:35667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:17.692298 2026] [ssl:error] [pid 2529844:tid 2529844] (EAI 2)Name or service not known: [client 144.76.19.72:19114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:17.692343 2026] [ssl:error] [pid 2529844:tid 2529844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:17.747528 2026] [ssl:error] [pid 2527546:tid 2527546] (EAI 2)Name or service not known: [client 144.76.19.72:19118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:17.747567 2026] [ssl:error] [pid 2527546:tid 2527546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:18.133803 2026] [core:error] [pid 2529847:tid 2529847] (13)Permission denied: [client 216.73.216.199:6399] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/i2c_piix4/sections/__verbose
[Thu Jul 30 09:16:18.676181 2026] [security2:error] [pid 2529632:tid 2529632] [client 156.59.198.135:33952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIUlrbkaQBadRgHvTDJgAAABY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:19.953544 2026] [security2:error] [pid 2529795:tid 2529795] [client 156.59.198.135:25358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIUyphZuU14h3ieJfhxAAAACk"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:20.801606 2026] [ssl:error] [pid 2529632:tid 2529632] (EAI 2)Name or service not known: [client 144.76.19.72:20034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:20.801642 2026] [ssl:error] [pid 2529632:tid 2529632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:20.905044 2026] [ssl:error] [pid 2527021:tid 2527021] (EAI 2)Name or service not known: [client 144.76.19.72:20048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:20.905088 2026] [ssl:error] [pid 2527021:tid 2527021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:21.447458 2026] [security2:error] [pid 2527300:tid 2527300] [client 156.59.198.136:51914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIVbPFyBPefWaU6bZfdwAAAA4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:21.842289 2026] [ssl:error] [pid 2529847:tid 2529847] (70014)End of file found: [client 216.73.216.199:6399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:22.339246 2026] [ssl:error] [pid 2527577:tid 2527577] (70014)End of file found: [client 216.73.216.199:27437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:22.953661 2026] [ssl:error] [pid 2528278:tid 2528278] (70014)End of file found: [client 216.73.216.199:6013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:22.968268 2026] [security2:error] [pid 2528502:tid 2528502] [client 156.59.198.135:40646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIVnWKAl0LeEy_VhKiQQAAABw"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:23.064399 2026] [authz_core:error] [pid 2529849:tid 2529849] [client 57.141.0.56:36126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:23.065039 2026] [authz_core:error] [pid 2529849:tid 2529849] [client 57.141.0.56:36126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:23.529818 2026] [security2:error] [pid 2529795:tid 2529795] [client 185.191.171.5:26078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2476.0/prev_next,prev.html"] [unique_id "amsIVyphZuU14h3ieJfhxQAAACk"]
[Thu Jul 30 09:16:23.961564 2026] [ssl:error] [pid 2520969:tid 2520969] (EAI 2)Name or service not known: [client 144.76.19.72:20058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:23.961601 2026] [ssl:error] [pid 2520969:tid 2520969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:24.016463 2026] [ssl:error] [pid 2529849:tid 2529849] (EAI 2)Name or service not known: [client 144.76.19.72:20066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:24.016492 2026] [ssl:error] [pid 2529849:tid 2529849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:24.466271 2026] [security2:error] [pid 2523136:tid 2523136] [client 156.59.198.136:30660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIWDwONh6G-u-ykgM2RgAAAAE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:25.926590 2026] [security2:error] [pid 2520969:tid 2520969] [client 156.59.198.136:37590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIWddTlGBMbfLY6bMpcAAAABU"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:27.120563 2026] [ssl:error] [pid 2525006:tid 2525006] (EAI 2)Name or service not known: [client 144.76.19.72:20080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:27.120608 2026] [ssl:error] [pid 2525006:tid 2525006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:27.158628 2026] [ssl:error] [pid 2529319:tid 2529319] (70014)End of file found: [client 216.73.216.199:8711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:27.173561 2026] [ssl:error] [pid 2529851:tid 2529851] (EAI 2)Name or service not known: [client 144.76.19.72:20092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:27.173604 2026] [ssl:error] [pid 2529851:tid 2529851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:27.187693 2026] [core:error] [pid 2527716:tid 2527716] [client 204.12.208.18:54394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 09:16:27.187716 2026] [core:error] [pid 2527716:tid 2527716] [client 204.12.208.18:54394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 09:16:27.378465 2026] [security2:error] [pid 2529795:tid 2529795] [client 156.59.198.136:60396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIWyphZuU14h3ieJfhyQAAACk"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:27.638746 2026] [core:error] [pid 2523136:tid 2523136] [client 204.12.208.18:54400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 09:16:27.638774 2026] [core:error] [pid 2523136:tid 2523136] [client 204.12.208.18:54400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 09:16:27.764559 2026] [ssl:error] [pid 2524915:tid 2524915] (70014)End of file found: [client 216.73.216.199:57423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:28.103793 2026] [core:error] [pid 2529849:tid 2529849] [client 204.12.208.18:54405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 09:16:28.103827 2026] [core:error] [pid 2529849:tid 2529849] [client 204.12.208.18:54405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 09:16:28.362125 2026] [ssl:error] [pid 2527235:tid 2527235] (70014)End of file found: [client 216.73.216.199:13830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:28.653568 2026] [security2:error] [pid 2527577:tid 2527577] [client 156.59.198.136:51610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIXAm_KuIbTymOLkYUFQAAAAk"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:28.883385 2026] [authz_core:error] [pid 2522127:tid 2522127] [client 57.141.0.71:43196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:28.884013 2026] [authz_core:error] [pid 2522127:tid 2522127] [client 57.141.0.71:43196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:29.770226 2026] [authz_core:error] [pid 2529850:tid 2529850] [client 66.249.66.33:64640] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:16:29.772876 2026] [authz_core:error] [pid 2529850:tid 2529850] [client 66.249.66.33:64640] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:16:30.224174 2026] [security2:error] [pid 2522127:tid 2522127] [client 156.59.198.136:48570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIXuqbww_Ne6_JP1urewAAABI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:30.230226 2026] [ssl:error] [pid 2527300:tid 2527300] (EAI 2)Name or service not known: [client 144.76.19.72:44904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:30.230251 2026] [ssl:error] [pid 2527300:tid 2527300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:30.284521 2026] [ssl:error] [pid 2529795:tid 2529795] (EAI 2)Name or service not known: [client 144.76.19.72:44912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:30.284565 2026] [ssl:error] [pid 2529795:tid 2529795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:30.409305 2026] [authz_core:error] [pid 2529715:tid 2529715] [client 57.141.0.71:43210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:30.409924 2026] [authz_core:error] [pid 2529715:tid 2529715] [client 57.141.0.71:43210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:30.896654 2026] [security2:error] [pid 2529632:tid 2529632] [client 81.8.91.201:58002] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsIXlrbkaQBadRgHvTDKQAAABY"]
[Thu Jul 30 09:16:31.608158 2026] [core:error] [pid 2528278:tid 2528278] (13)Permission denied: [client 216.73.216.199:53775] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/horuswellbeing.co.uk.db
[Thu Jul 30 09:16:31.729201 2026] [security2:error] [pid 2529847:tid 2529847] [client 156.59.198.135:45944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIX9wPpl67fUcgNl8fGQAAAC8"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:32.949955 2026] [core:error] [pid 2529715:tid 2529715] (13)Permission denied: [client 216.73.216.199:64230] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/i2c/drivers/tcpci/unbind
[Thu Jul 30 09:16:33.353741 2026] [security2:error] [pid 2527577:tid 2527577] [client 156.59.198.136:21598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIYQm_KuIbTymOLkYUFwAAAAk"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:33.355675 2026] [ssl:error] [pid 2529632:tid 2529632] (EAI 2)Name or service not known: [client 144.76.19.72:44922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:33.355701 2026] [ssl:error] [pid 2529632:tid 2529632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:33.408462 2026] [ssl:error] [pid 2524629:tid 2524629] (EAI 2)Name or service not known: [client 144.76.19.72:44932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:33.408502 2026] [ssl:error] [pid 2524629:tid 2524629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:34.156863 2026] [ssl:error] [pid 2529715:tid 2529715] (70014)End of file found: [client 216.73.216.199:64230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:34.576424 2026] [core:error] [pid 2529635:tid 2529635] [client 66.249.66.167:58301] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:16:34.576452 2026] [core:error] [pid 2529635:tid 2529635] [client 66.249.66.167:58301] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:16:34.999234 2026] [security2:error] [pid 2529795:tid 2529795] [client 114.119.146.111:65277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/cat_ids~18,15/request_format~html"] [unique_id "amsIYiphZuU14h3ieJfhzAAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~18
[Thu Jul 30 09:16:35.066874 2026] [security2:error] [pid 2528543:tid 2528543] [client 156.59.198.136:10620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIY9sbFZy29uO6JtIBJgAAACA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:35.410215 2026] [cgi:error] [pid 2528278:tid 2528278] [client 216.73.216.199:53775] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/az.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:16:35.410283 2026] [cgi:error] [pid 2528278:tid 2528278] [client 216.73.216.199:53775] End of script output before headers: az.pl
[Thu Jul 30 09:16:35.936510 2026] [authz_core:error] [pid 2527577:tid 2527577] [client 57.141.0.55:40532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:35.937143 2026] [authz_core:error] [pid 2527577:tid 2527577] [client 57.141.0.55:40532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:36.462992 2026] [ssl:error] [pid 2528278:tid 2528278] (EAI 2)Name or service not known: [client 144.76.19.72:44938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:36.463015 2026] [ssl:error] [pid 2528278:tid 2528278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:36.520203 2026] [ssl:error] [pid 2529319:tid 2529319] (EAI 2)Name or service not known: [client 144.76.19.72:44946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:36.520235 2026] [ssl:error] [pid 2529319:tid 2529319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:36.612754 2026] [autoindex:error] [pid 2529847:tid 2529847] (13)Permission denied: [client 216.73.216.199:19388] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/chemgalproj/
[Thu Jul 30 09:16:36.718443 2026] [security2:error] [pid 2529748:tid 2529748] [client 114.119.146.111:65279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579910400/cat_ids~18,15/request_format~html"] [unique_id "amsIZLoknnVK7uKpm-042QAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579910400/request_format~html/cat_ids~18
[Thu Jul 30 09:16:37.049436 2026] [security2:error] [pid 2528543:tid 2528543] [client 156.59.198.135:58606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf"] [unique_id "amsIZdsbFZy29uO6JtIBJwAAACA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/SW_MobileAdmin_datasheet.pdf
[Thu Jul 30 09:16:37.609500 2026] [security2:error] [pid 2529793:tid 2529793] [client 43.132.189.141:56833] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,43.0.html"] [unique_id "amsIZUuNP7pkBEv3DIqiOQAAACY"]
[Thu Jul 30 09:16:37.609545 2026] [security2:error] [pid 2529793:tid 2529793] [client 43.132.189.141:56833] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,43.0.html"] [unique_id "amsIZUuNP7pkBEv3DIqiOQAAACY"]
[Thu Jul 30 09:16:37.609808 2026] [security2:error] [pid 2529793:tid 2529793] [client 43.132.189.141:56833] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIZUuNP7pkBEv3DIqiOQAAACY"]
[Thu Jul 30 09:16:37.800714 2026] [authz_core:error] [pid 2523136:tid 2523136] [client 57.141.0.50:28086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:37.801339 2026] [authz_core:error] [pid 2523136:tid 2523136] [client 57.141.0.50:28086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:37.836527 2026] [authz_core:error] [pid 2528278:tid 2528278] [client 66.249.66.33:42769] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:16:37.839186 2026] [authz_core:error] [pid 2528278:tid 2528278] [client 66.249.66.33:42769] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:16:38.542061 2026] [security2:error] [pid 2522127:tid 2522127] [client 43.132.189.141:41077] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,43.0.html"] [unique_id "amsIZuqbww_Ne6_JP1urfQAAABI"]
[Thu Jul 30 09:16:38.542129 2026] [security2:error] [pid 2522127:tid 2522127] [client 43.132.189.141:41077] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,43.0.html"] [unique_id "amsIZuqbww_Ne6_JP1urfQAAABI"]
[Thu Jul 30 09:16:38.542379 2026] [security2:error] [pid 2522127:tid 2522127] [client 43.132.189.141:41077] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIZuqbww_Ne6_JP1urfQAAABI"]
[Thu Jul 30 09:16:39.040050 2026] [ssl:error] [pid 2529847:tid 2529847] (70014)End of file found: [client 216.73.216.199:19388] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:39.574943 2026] [ssl:error] [pid 2524670:tid 2524670] (EAI 2)Name or service not known: [client 144.76.19.72:61662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:39.574972 2026] [ssl:error] [pid 2524670:tid 2524670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:39.655300 2026] [ssl:error] [pid 2529793:tid 2529793] (EAI 2)Name or service not known: [client 144.76.19.72:61668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:39.655338 2026] [ssl:error] [pid 2529793:tid 2529793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:41.368415 2026] [authz_core:error] [pid 2527122:tid 2527122] [client 57.141.0.34:37372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:41.369042 2026] [authz_core:error] [pid 2527122:tid 2527122] [client 57.141.0.34:37372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:41.385823 2026] [security2:error] [pid 2529849:tid 2529849] [client 170.106.11.141:41604] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.render-farm.co.uk"] [uri "/"] [unique_id "amsIaeAk_euQOLD7mpDcDwAAADE"]
[Thu Jul 30 09:16:41.750314 2026] [core:error] [pid 2529633:tid 2529633] (13)Permission denied: [client 216.73.216.199:54492] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/poison
[Thu Jul 30 09:16:42.646711 2026] [authz_core:error] [pid 2525060:tid 2525060] [client 57.141.0.31:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:42.647343 2026] [authz_core:error] [pid 2525060:tid 2525060] [client 57.141.0.31:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:42.712331 2026] [ssl:error] [pid 2528542:tid 2528542] (EAI 2)Name or service not known: [client 144.76.19.72:61678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:42.712360 2026] [ssl:error] [pid 2528542:tid 2528542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:42.765607 2026] [ssl:error] [pid 2527122:tid 2527122] (EAI 2)Name or service not known: [client 144.76.19.72:61690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:42.765639 2026] [ssl:error] [pid 2527122:tid 2527122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:43.259992 2026] [core:error] [pid 2529633:tid 2529633] (13)Permission denied: [client 216.73.216.199:54492] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/RAWv6/reclaim_account
[Thu Jul 30 09:16:43.561099 2026] [core:error] [pid 2529633:tid 2529633] (13)Permission denied: [client 216.73.216.199:54492] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-128/objs_per_slab
[Thu Jul 30 09:16:45.821604 2026] [ssl:error] [pid 2525006:tid 2525006] (EAI 2)Name or service not known: [client 144.76.19.72:61702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:45.821636 2026] [ssl:error] [pid 2525006:tid 2525006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:45.874312 2026] [ssl:error] [pid 2529847:tid 2529847] (EAI 2)Name or service not known: [client 144.76.19.72:61716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:45.874343 2026] [ssl:error] [pid 2529847:tid 2529847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:46.379690 2026] [core:crit] [pid 2524670:tid 2524670] (13)Permission denied: [client 216.73.216.199:31263] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/clos_ssa/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/clos_ssa/' is executable
[Thu Jul 30 09:16:47.898273 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.11:23642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:47.898902 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.11:23642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:48.499567 2026] [authz_core:error] [pid 2529635:tid 2529635] [client 57.141.0.43:51948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:48.500209 2026] [authz_core:error] [pid 2529635:tid 2529635] [client 57.141.0.43:51948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:48.932038 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:61722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:48.932094 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:49.015568 2026] [ssl:error] [pid 2527122:tid 2527122] (EAI 2)Name or service not known: [client 144.76.19.72:61738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:49.015615 2026] [ssl:error] [pid 2527122:tid 2527122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:51.713155 2026] [security2:error] [pid 2524915:tid 2524915] [client 74.7.227.140:56012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.theovertones.ditchfest.com"] [uri "/"] [unique_id "amsIcyFIXJF3KCyNJYmaAAAAACQ"]
[Thu Jul 30 09:16:51.803216 2026] [authz_core:error] [pid 2525060:tid 2525060] [client 66.249.66.33:41358] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:16:51.808254 2026] [authz_core:error] [pid 2525060:tid 2525060] [client 66.249.66.33:41358] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:16:51.907363 2026] [authz_core:error] [pid 2529851:tid 2529851] [client 57.141.0.32:39762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:51.907981 2026] [authz_core:error] [pid 2529851:tid 2529851] [client 57.141.0.32:39762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:16:52.069501 2026] [ssl:error] [pid 2527021:tid 2527021] (EAI 2)Name or service not known: [client 144.76.19.72:47276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:52.069527 2026] [ssl:error] [pid 2527021:tid 2527021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:52.123487 2026] [ssl:error] [pid 2529793:tid 2529793] (EAI 2)Name or service not known: [client 144.76.19.72:47288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:52.123516 2026] [ssl:error] [pid 2529793:tid 2529793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:52.332328 2026] [ssl:error] [pid 2529633:tid 2529633] (70014)End of file found: [client 216.73.216.199:54492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:53.548371 2026] [core:crit] [pid 2524670:tid 2524670] (13)Permission denied: [client 216.73.216.199:31263] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/lost+found/' is executable
[Thu Jul 30 09:16:53.574249 2026] [core:crit] [pid 2524670:tid 2524670] (13)Permission denied: [client 216.73.216.199:31263] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/root/' is executable
[Thu Jul 30 09:16:54.497949 2026] [security2:error] [pid 2529793:tid 2529793] [client 85.208.96.201:13354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/why-did-bea-benaderet-leave-the-flintstones"] [unique_id "amsIdkuNP7pkBEv3DIqiPwAAACY"]
[Thu Jul 30 09:16:55.179606 2026] [ssl:error] [pid 2529850:tid 2529850] (EAI 2)Name or service not known: [client 144.76.19.72:47300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:55.179634 2026] [ssl:error] [pid 2529850:tid 2529850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:55.233747 2026] [ssl:error] [pid 2525053:tid 2525053] (EAI 2)Name or service not known: [client 144.76.19.72:47302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:55.233778 2026] [ssl:error] [pid 2525053:tid 2525053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:56.876905 2026] [ssl:error] [pid 2524670:tid 2524670] (70014)End of file found: [client 216.73.216.199:31263] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:16:57.897020 2026] [lsapi:warn] [pid 2529319:tid 2529319] [client 216.73.216.199:2077] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: Permission denied in Unknown on line 0\n
[Thu Jul 30 09:16:57.897050 2026] [lsapi:error] [pid 2529319:tid 2529319] [client 216.73.216.199:2077] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/ai-bolit/imunify_dbscan.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 09:16:58.122276 2026] [security2:error] [pid 2529849:tid 2529849] [client 47.128.127.181:57168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/useful-links"] [unique_id "amsIeuAk_euQOLD7mpDcFAAAADE"]
[Thu Jul 30 09:16:58.323340 2026] [ssl:error] [pid 2523866:tid 2523866] (EAI 2)Name or service not known: [client 144.76.19.72:47314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:58.323369 2026] [ssl:error] [pid 2523866:tid 2523866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:58.376982 2026] [ssl:error] [pid 2527021:tid 2527021] (EAI 2)Name or service not known: [client 144.76.19.72:47324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:16:58.377007 2026] [ssl:error] [pid 2527021:tid 2527021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:16:58.582861 2026] [security2:error] [pid 2529847:tid 2529847] [client 185.191.171.12:45680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/pastor-shawn-johnson-diagnosis"] [unique_id "amsIetwPpl67fUcgNl8fKQAAAC8"]
[Thu Jul 30 09:16:59.499144 2026] [authz_core:error] [pid 2527021:tid 2527021] [client 57.141.0.66:24556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:16:59.499762 2026] [authz_core:error] [pid 2527021:tid 2527021] [client 57.141.0.66:24556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:17:00.262240 2026] [security2:error] [pid 2529851:tid 2529851] [client 47.128.127.181:59106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/images/banskoexpress-new.png"] [unique_id "amsIfIqvhqMlBxlRrZTKBwAAADM"], referer: https://www.banskoexpress.com/useful-links
[Thu Jul 30 09:17:00.564497 2026] [core:error] [pid 2528278:tid 2528278] (13)Permission denied: [client 216.73.216.199:18501] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_ifork/sanity_checks
[Thu Jul 30 09:17:01.454891 2026] [ssl:error] [pid 2529851:tid 2529851] (EAI 2)Name or service not known: [client 144.76.19.72:38264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:01.454926 2026] [ssl:error] [pid 2529851:tid 2529851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:01.509128 2026] [ssl:error] [pid 2527098:tid 2527098] (EAI 2)Name or service not known: [client 144.76.19.72:38280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:01.509165 2026] [ssl:error] [pid 2527098:tid 2527098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:02.874974 2026] [authz_core:error] [pid 2529632:tid 2529632] [client 57.141.0.50:41936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:17:02.875607 2026] [authz_core:error] [pid 2529632:tid 2529632] [client 57.141.0.50:41936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:17:03.195688 2026] [security2:error] [pid 2525006:tid 2525006] [client 85.208.96.204:33130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8069.0.html"] [unique_id "amsIfyv1e811fjeif860KgAAADY"]
[Thu Jul 30 09:17:04.567620 2026] [ssl:error] [pid 2528543:tid 2528543] (EAI 2)Name or service not known: [client 144.76.19.72:38286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:04.567650 2026] [ssl:error] [pid 2528543:tid 2528543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:04.609924 2026] [authz_core:error] [pid 2529846:tid 2529846] [client 57.141.0.45:23798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:17:04.610550 2026] [authz_core:error] [pid 2529846:tid 2529846] [client 57.141.0.45:23798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:17:04.622347 2026] [ssl:error] [pid 2529796:tid 2529796] (EAI 2)Name or service not known: [client 144.76.19.72:38296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:04.622378 2026] [ssl:error] [pid 2529796:tid 2529796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:05.104479 2026] [core:error] [pid 2528278:tid 2528278] (13)Permission denied: [client 216.73.216.199:18501] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cl_wmt.log-20260601
[Thu Jul 30 09:17:05.405671 2026] [ssl:error] [pid 2528278:tid 2528278] (70014)End of file found: [client 216.73.216.199:18501] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:07.683884 2026] [ssl:error] [pid 2524915:tid 2524915] (EAI 2)Name or service not known: [client 144.76.19.72:38312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:07.683907 2026] [ssl:error] [pid 2524915:tid 2524915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:07.715244 2026] [access_compat:error] [pid 2532766:tid 2532766] [client 3.22.120.27:49612] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 09:17:07.715409 2026] [access_compat:error] [pid 2532766:tid 2532766] [client 3.22.120.27:49612] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:17:07.800717 2026] [authz_core:error] [pid 2524915:tid 2524915] [client 57.141.0.9:22662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:17:07.801342 2026] [authz_core:error] [pid 2524915:tid 2524915] [client 57.141.0.9:22662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:17:07.897816 2026] [ssl:error] [pid 2527098:tid 2527098] (EAI 2)Name or service not known: [client 144.76.19.72:38316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:07.897843 2026] [ssl:error] [pid 2527098:tid 2527098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:08.060707 2026] [access_compat:error] [pid 2529795:tid 2529795] [client 3.22.120.27:49624] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 09:17:08.060802 2026] [access_compat:error] [pid 2529795:tid 2529795] [client 3.22.120.27:49624] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:17:08.290247 2026] [access_compat:error] [pid 2532624:tid 2532624] [client 3.22.120.27:38124] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 09:17:08.290345 2026] [access_compat:error] [pid 2532624:tid 2532624] [client 3.22.120.27:38124] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:17:08.717685 2026] [core:error] [pid 2523136:tid 2523136] (13)Permission denied: [client 216.73.216.199:23942] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack/reclaim_account
[Thu Jul 30 09:17:08.829845 2026] [access_compat:error] [pid 2532797:tid 2532797] [client 3.22.120.27:38136] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 09:17:08.830017 2026] [access_compat:error] [pid 2532797:tid 2532797] [client 3.22.120.27:38136] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:17:08.942816 2026] [security2:error] [pid 2532799:tid 2532799] [client 43.159.34.167:48664] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alism.com"] [uri "/"] [unique_id "amsIhP4RorFC6ECRXs_PEwAAABU"]
[Thu Jul 30 09:17:10.952388 2026] [ssl:error] [pid 2532678:tid 2532678] (EAI 2)Name or service not known: [client 144.76.19.72:40730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:10.952418 2026] [ssl:error] [pid 2532678:tid 2532678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:11.007355 2026] [ssl:error] [pid 2532678:tid 2532678] (EAI 2)Name or service not known: [client 144.76.19.72:40746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:11.007376 2026] [ssl:error] [pid 2532678:tid 2532678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:11.643832 2026] [security2:error] [pid 2532766:tid 2532766] [client 189.122.224.3:52421] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,112.0.html"] [unique_id "amsIh9wcDegtTQ_yVjyJbwAAAA4"]
[Thu Jul 30 09:17:11.643889 2026] [security2:error] [pid 2532766:tid 2532766] [client 189.122.224.3:52421] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,112.0.html"] [unique_id "amsIh9wcDegtTQ_yVjyJbwAAAA4"]
[Thu Jul 30 09:17:11.644157 2026] [security2:error] [pid 2532766:tid 2532766] [client 189.122.224.3:52421] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIh9wcDegtTQ_yVjyJbwAAAA4"]
[Thu Jul 30 09:17:11.726207 2026] [core:error] [pid 2532903:tid 2532903] [client 66.249.66.168:45743] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:17:11.726253 2026] [core:error] [pid 2532903:tid 2532903] [client 66.249.66.168:45743] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:17:11.732753 2026] [core:error] [pid 2532624:tid 2532624] [client 66.249.66.167:39921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:17:11.732774 2026] [core:error] [pid 2532624:tid 2532624] [client 66.249.66.167:39921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:17:12.335758 2026] [core:error] [pid 2525060:tid 2525060] (13)Permission denied: [client 216.73.216.199:64329] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-max/free_calls
[Thu Jul 30 09:17:12.416199 2026] [security2:error] [pid 2532903:tid 2532903] [client 85.208.96.199:31818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6744.0.html"] [unique_id "amsIiK5beE8sMkNUXA8j4wAAABo"]
[Thu Jul 30 09:17:14.061104 2026] [ssl:error] [pid 2532797:tid 2532797] (EAI 2)Name or service not known: [client 144.76.19.72:40762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:14.061151 2026] [ssl:error] [pid 2532797:tid 2532797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:14.119204 2026] [ssl:error] [pid 2510567:tid 2510567] (EAI 2)Name or service not known: [client 144.76.19.72:40776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:14.119236 2026] [ssl:error] [pid 2510567:tid 2510567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:14.440181 2026] [authz_core:error] [pid 2529846:tid 2529846] [client 57.141.0.16:30028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:17:14.440801 2026] [authz_core:error] [pid 2529846:tid 2529846] [client 57.141.0.16:30028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:17:14.638967 2026] [security2:error] [pid 2529849:tid 2529849] [client 101.47.20.242:56693] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,112.0.html"] [unique_id "amsIiuAk_euQOLD7mpDcGAAAADE"]
[Thu Jul 30 09:17:14.639038 2026] [security2:error] [pid 2529849:tid 2529849] [client 101.47.20.242:56693] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,112.0.html"] [unique_id "amsIiuAk_euQOLD7mpDcGAAAADE"]
[Thu Jul 30 09:17:14.639294 2026] [security2:error] [pid 2529849:tid 2529849] [client 101.47.20.242:56693] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIiuAk_euQOLD7mpDcGAAAADE"]
[Thu Jul 30 09:17:15.350103 2026] [ssl:error] [pid 2525060:tid 2525060] (70014)End of file found: [client 216.73.216.199:64329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:15.970597 2026] [cgi:error] [pid 2523136:tid 2523136] [client 216.73.216.199:23942] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/ln.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:17:15.970654 2026] [cgi:error] [pid 2523136:tid 2523136] [client 216.73.216.199:23942] End of script output before headers: ln.pl
[Thu Jul 30 09:17:17.195532 2026] [ssl:error] [pid 2531679:tid 2531679] (EAI 2)Name or service not known: [client 144.76.19.72:40780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:17.195567 2026] [ssl:error] [pid 2531679:tid 2531679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:17.256826 2026] [ssl:error] [pid 2528502:tid 2528502] (EAI 2)Name or service not known: [client 144.76.19.72:40792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:17.256860 2026] [ssl:error] [pid 2528502:tid 2528502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:18.408905 2026] [security2:error] [pid 2529632:tid 2529632] [client 101.47.20.242:39027] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,112.0.html"] [unique_id "amsIjlrbkaQBadRgHvTDNQAAABY"]
[Thu Jul 30 09:17:18.408955 2026] [security2:error] [pid 2529632:tid 2529632] [client 101.47.20.242:39027] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,112.0.html"] [unique_id "amsIjlrbkaQBadRgHvTDNQAAABY"]
[Thu Jul 30 09:17:18.409229 2026] [security2:error] [pid 2529632:tid 2529632] [client 101.47.20.242:39027] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsIjlrbkaQBadRgHvTDNQAAABY"]
[Thu Jul 30 09:17:18.494148 2026] [access_compat:error] [pid 2532766:tid 2532766] [client 45.158.164.139:53566] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:17:20.339304 2026] [ssl:error] [pid 2529526:tid 2529526] (EAI 2)Name or service not known: [client 144.76.19.72:21996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:20.339338 2026] [ssl:error] [pid 2529526:tid 2529526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:20.395454 2026] [ssl:error] [pid 2529851:tid 2529851] (EAI 2)Name or service not known: [client 144.76.19.72:22012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:20.395486 2026] [ssl:error] [pid 2529851:tid 2529851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:20.767902 2026] [ssl:error] [pid 2529796:tid 2529796] (70014)End of file found: [client 216.73.216.199:46450] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:22.570327 2026] [ssl:error] [pid 2528544:tid 2528544] (70014)End of file found: [client 216.73.216.199:24211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:23.454167 2026] [ssl:error] [pid 2528278:tid 2528278] (EAI 2)Name or service not known: [client 144.76.19.72:22016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:23.454203 2026] [ssl:error] [pid 2528278:tid 2528278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:23.510018 2026] [ssl:error] [pid 2532903:tid 2532903] (EAI 2)Name or service not known: [client 144.76.19.72:22024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:23.510082 2026] [ssl:error] [pid 2532903:tid 2532903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:24.882884 2026] [security2:error] [pid 2528278:tid 2528278] [client 85.208.96.202:15550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/usps-covid-test-order-status"] [unique_id "amsIlMICb-1E1dIynZhgmwAAAAI"]
[Thu Jul 30 09:17:25.222589 2026] [ssl:error] [pid 2532797:tid 2532797] (70014)End of file found: [client 216.73.216.199:57593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:25.502106 2026] [ssl:error] [pid 2528278:tid 2528278] (70014)End of file found: [client 216.73.216.199:48631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:25.813850 2026] [ssl:error] [pid 2485662:tid 2485662] (70014)End of file found: [client 216.73.216.199:45481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:26.566880 2026] [ssl:error] [pid 2532796:tid 2532796] (EAI 2)Name or service not known: [client 144.76.19.72:22026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:26.566911 2026] [ssl:error] [pid 2532796:tid 2532796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:26.621687 2026] [ssl:error] [pid 2532624:tid 2532624] (EAI 2)Name or service not known: [client 144.76.19.72:22036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:26.621736 2026] [ssl:error] [pid 2532624:tid 2532624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:26.800611 2026] [security2:error] [pid 2527234:tid 2527234] [client 185.191.171.14:27200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11375.0.html"] [unique_id "amsIlrBKz1rZ9LZSAqFHhgAAAAo"]
[Thu Jul 30 09:17:29.675849 2026] [ssl:error] [pid 2528502:tid 2528502] (EAI 2)Name or service not known: [client 144.76.19.72:19476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:29.675882 2026] [ssl:error] [pid 2528502:tid 2528502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:29.733572 2026] [ssl:error] [pid 2529796:tid 2529796] (EAI 2)Name or service not known: [client 144.76.19.72:19478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:29.733622 2026] [ssl:error] [pid 2529796:tid 2529796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:30.764140 2026] [ssl:error] [pid 2529319:tid 2529319] (70014)End of file found: [client 216.73.216.199:40854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:31.046194 2026] [ssl:error] [pid 2532902:tid 2532902] (70014)End of file found: [client 216.73.216.199:31468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:31.187586 2026] [security2:error] [pid 2523136:tid 2523136] [client 85.208.96.204:41404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/robots.txt"] [unique_id "amsImzwONh6G-u-ykgM25AAAAAE"]
[Thu Jul 30 09:17:31.331057 2026] [security2:error] [pid 2485662:tid 2485662] [client 185.191.171.14:22872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/explosion-in-pasadena,-ca-today"] [unique_id "amsImyUdq7C3r1IXnU6QYgAAACs"]
[Thu Jul 30 09:17:31.546861 2026] [ssl:error] [pid 2532797:tid 2532797] (70014)End of file found: [client 216.73.216.199:25641] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:31.665595 2026] [security2:error] [pid 2532796:tid 2532796] [client 110.249.202.84:61526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/robots.txt"] [unique_id "amsIm-PgkJaP8xBp921B_gAAAA8"]
[Thu Jul 30 09:17:32.322628 2026] [security2:error] [pid 2532796:tid 2532796] [client 85.208.96.198:61246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/3-Beatty"] [unique_id "amsInOPgkJaP8xBp921B_wAAAA8"]
[Thu Jul 30 09:17:32.888335 2026] [ssl:error] [pid 2529847:tid 2529847] (EAI 2)Name or service not known: [client 144.76.19.72:19494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:32.888372 2026] [ssl:error] [pid 2529847:tid 2529847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:32.898015 2026] [security2:error] [pid 2485662:tid 2485662] [client 85.208.96.193:45446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/cryptic-pregnancy-labor-signs"] [unique_id "amsInCUdq7C3r1IXnU6QZQAAACs"]
[Thu Jul 30 09:17:32.941736 2026] [ssl:error] [pid 2533620:tid 2533620] (EAI 2)Name or service not known: [client 144.76.19.72:19506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:32.941763 2026] [ssl:error] [pid 2533620:tid 2533620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:33.438844 2026] [lsapi:warn] [pid 2485662:tid 2485662] [client 45.158.164.139:45538] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:17:33.438885 2026] [lsapi:warn] [pid 2485662:tid 2485662] [client 45.158.164.139:45538] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:17:34.066173 2026] [security2:error] [pid 2529847:tid 2529847] [client 110.249.202.87:21964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amsIntwPpl67fUcgNl8fpwAAAC8"]
[Thu Jul 30 09:17:34.280984 2026] [cgi:error] [pid 2485662:tid 2485662] [client 23.180.120.148:39394] AH01228: exec used but not allowed in /home/alismcom/public_html/yahtzee.co.uk/index.htm
[Thu Jul 30 09:17:35.995946 2026] [ssl:error] [pid 2527098:tid 2527098] (EAI 2)Name or service not known: [client 144.76.19.72:19508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:35.995974 2026] [ssl:error] [pid 2527098:tid 2527098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:36.047165 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:19510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:36.047189 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:36.357213 2026] [core:error] [pid 2529844:tid 2529844] (13)Permission denied: [client 216.73.216.199:37095] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory75/subsystem/uevent
[Thu Jul 30 09:17:36.465055 2026] [ssl:error] [pid 2529844:tid 2529844] (70014)End of file found: [client 216.73.216.199:37095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:36.953429 2026] [ssl:error] [pid 2524957:tid 2524957] (70014)End of file found: [client 216.73.216.199:36412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:37.265691 2026] [ssl:error] [pid 2532902:tid 2532902] (70014)End of file found: [client 216.73.216.199:37515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:38.102089 2026] [security2:error] [pid 2523136:tid 2523136] [client 122.231.191.3:54808] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "303"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "sirahdigital.com"] [uri "/"] [unique_id "amsIojwONh6G-u-ykgM25QAAAAE"]
[Thu Jul 30 09:17:38.212606 2026] [authz_core:error] [pid 2529526:tid 2529526] [client 57.141.0.24:25662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:17:38.213231 2026] [authz_core:error] [pid 2529526:tid 2529526] [client 57.141.0.24:25662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:17:39.103680 2026] [ssl:error] [pid 2529319:tid 2529319] (EAI 2)Name or service not known: [client 144.76.19.72:19524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:39.103728 2026] [ssl:error] [pid 2529319:tid 2529319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:39.156562 2026] [ssl:error] [pid 2529845:tid 2529845] (EAI 2)Name or service not known: [client 144.76.19.72:19538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:39.156603 2026] [ssl:error] [pid 2529845:tid 2529845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:40.184892 2026] [core:error] [pid 2532734:tid 2532734] [client 66.249.66.8:52850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:17:40.184923 2026] [core:error] [pid 2532734:tid 2532734] [client 66.249.66.8:52850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:17:40.760167 2026] [security2:error] [pid 2533918:tid 2533918] [client 185.191.171.19:52834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/edp-management-group-llc-hunter-parks"] [unique_id "amsIpEjl36qGbI0GaZQ2UgAAAAo"]
[Thu Jul 30 09:17:41.894478 2026] [ssl:error] [pid 2529793:tid 2529793] (70014)End of file found: [client 216.73.216.199:49556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:42.129882 2026] [security2:error] [pid 2527716:tid 2527716] [client 43.165.65.117:43918] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.craft-buddies.co.uk"] [uri "/"] [unique_id "amsIpuwhMSFHO_Abq_iaaAAAABQ"]
[Thu Jul 30 09:17:42.214193 2026] [ssl:error] [pid 2533621:tid 2533621] (EAI 2)Name or service not known: [client 144.76.19.72:44586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:42.214227 2026] [ssl:error] [pid 2533621:tid 2533621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:42.272054 2026] [ssl:error] [pid 2528278:tid 2528278] (EAI 2)Name or service not known: [client 144.76.19.72:44592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:42.272093 2026] [ssl:error] [pid 2528278:tid 2528278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:42.387821 2026] [ssl:error] [pid 2529845:tid 2529845] (70014)End of file found: [client 216.73.216.199:62658] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:42.685969 2026] [ssl:error] [pid 2524957:tid 2524957] (70014)End of file found: [client 216.73.216.199:14810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:43.410732 2026] [security2:error] [pid 2528278:tid 2528278] [client 43.130.105.21:51586] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "m.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsIp8ICb-1E1dIynZhgoQAAAAI"]
[Thu Jul 30 09:17:45.098040 2026] [autoindex:error] [pid 2528278:tid 2528278] (13)Permission denied: [client 216.73.216.199:62403] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/pbyawsga/
[Thu Jul 30 09:17:45.326179 2026] [ssl:error] [pid 2529850:tid 2529850] (EAI 2)Name or service not known: [client 144.76.19.72:44606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:45.326208 2026] [ssl:error] [pid 2529850:tid 2529850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:45.378981 2026] [ssl:error] [pid 2531679:tid 2531679] (EAI 2)Name or service not known: [client 144.76.19.72:44610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:45.379008 2026] [ssl:error] [pid 2531679:tid 2531679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:46.282357 2026] [security2:error] [pid 2532902:tid 2532902] [client 110.249.202.17:38520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIqgcsyZtYt76tu1AdnQAAABk"]
[Thu Jul 30 09:17:46.868200 2026] [security2:error] [pid 2531679:tid 2531679] [client 47.128.127.238:13994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amsIqiD_00CMQX5nGE9cKgAAAAY"]
[Thu Jul 30 09:17:47.145840 2026] [security2:error] [pid 2532797:tid 2532797] [client 110.249.202.219:17948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIq8VSwDHKUN37iuno3wAAABA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:48.013669 2026] [security2:error] [pid 2532902:tid 2532902] [client 110.249.202.178:44974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIrAcsyZtYt76tu1AdngAAABk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:48.410003 2026] [security2:error] [pid 2527716:tid 2527716] [client 47.128.127.238:64342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsIrOwhMSFHO_Abq_iaawAAABQ"]
[Thu Jul 30 09:17:48.433538 2026] [ssl:error] [pid 2533577:tid 2533577] (EAI 2)Name or service not known: [client 144.76.19.72:44616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:48.433568 2026] [ssl:error] [pid 2533577:tid 2533577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:48.485350 2026] [ssl:error] [pid 2529849:tid 2529849] (EAI 2)Name or service not known: [client 144.76.19.72:44620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:48.485374 2026] [ssl:error] [pid 2529849:tid 2529849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:48.978958 2026] [security2:error] [pid 2529845:tid 2529845] [client 110.249.202.249:51876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIrDnz0V0HyYIA5Ahp1AAAAC0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:49.919456 2026] [security2:error] [pid 2533620:tid 2533620] [client 110.249.202.116:61364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIree3FylbtH7d00SYeAAAAAg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:50.729562 2026] [security2:error] [pid 2532796:tid 2532796] [client 110.249.202.188:58964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIruPgkJaP8xBp921CBQAAAA8"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:51.537214 2026] [ssl:error] [pid 2524915:tid 2524915] (EAI 2)Name or service not known: [client 144.76.19.72:61162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:51.537239 2026] [ssl:error] [pid 2524915:tid 2524915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:51.592023 2026] [ssl:error] [pid 2529749:tid 2529749] (EAI 2)Name or service not known: [client 144.76.19.72:61172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:51.592058 2026] [ssl:error] [pid 2529749:tid 2529749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:51.684440 2026] [security2:error] [pid 2532764:tid 2532764] [client 110.249.202.56:28624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIr-5pwIZ9ky1WN1UVcgAAAAw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:52.473941 2026] [security2:error] [pid 2525053:tid 2525053] [client 110.249.202.173:42836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIsCIPTHvtTkLARZDVRgAAAD4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:53.367263 2026] [security2:error] [pid 2510567:tid 2510567] [client 110.249.202.170:28502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIsSyfj8cbA85hi0rRywAAADk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:54.415537 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.35:52886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIsiXKGwIY1Yv3vOb7swAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:54.649879 2026] [security2:error] [pid 2533620:tid 2533620] [client 49.51.233.95:52324] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "amsIsue3FylbtH7d00SYegAAAAg"]
[Thu Jul 30 09:17:54.652420 2026] [ssl:error] [pid 2529526:tid 2529526] (EAI 2)Name or service not known: [client 144.76.19.72:61180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:54.652443 2026] [ssl:error] [pid 2529526:tid 2529526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:54.710213 2026] [ssl:error] [pid 2524670:tid 2524670] (EAI 2)Name or service not known: [client 144.76.19.72:61184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:54.710243 2026] [ssl:error] [pid 2524670:tid 2524670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:55.289775 2026] [security2:error] [pid 2510567:tid 2510567] [client 110.249.202.131:27098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIsyyfj8cbA85hi0rRzAAAADk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:55.335639 2026] [ssl:error] [pid 2528278:tid 2528278] (70014)End of file found: [client 216.73.216.199:62403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:55.831797 2026] [ssl:error] [pid 2529793:tid 2529793] (70014)End of file found: [client 216.73.216.199:7217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:17:56.063961 2026] [security2:error] [pid 2533669:tid 2533669] [client 110.249.202.231:36118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsItDYpIRoooV2L-4KgvgAAABg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:56.142807 2026] [core:error] [pid 2532797:tid 2532797] (13)Permission denied: [client 216.73.216.199:55367] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/outdoorcables.co.uk.db
[Thu Jul 30 09:17:56.830664 2026] [security2:error] [pid 2529526:tid 2529526] [client 110.249.202.36:43808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsItEmkEskEfrdK6-YnygAAAA0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:57.636766 2026] [security2:error] [pid 2533669:tid 2533669] [client 110.249.202.71:30348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsItTYpIRoooV2L-4KgvwAAABg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:57.672734 2026] [security2:error] [pid 2524670:tid 2524670] [client 185.251.199.203:33098] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsItdB2aHiLkRfK7dcLzAAAAB0"]
[Thu Jul 30 09:17:57.768546 2026] [ssl:error] [pid 2529844:tid 2529844] (EAI 2)Name or service not known: [client 144.76.19.72:61186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:57.768589 2026] [ssl:error] [pid 2529844:tid 2529844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:57.828472 2026] [ssl:error] [pid 2529526:tid 2529526] (EAI 2)Name or service not known: [client 144.76.19.72:61202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:17:57.828497 2026] [ssl:error] [pid 2529526:tid 2529526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:17:58.497154 2026] [security2:error] [pid 2529526:tid 2529526] [client 110.249.202.220:63536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsItkmkEskEfrdK6-YnywAAAA0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:17:58.725220 2026] [security2:error] [pid 2528543:tid 2528543] [client 114.119.144.31:33969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579651200/request_format~html"] [unique_id "amsIttsbFZy29uO6JtIBbAAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579564800/request_format~html
[Thu Jul 30 09:17:59.141888 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.51:31868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:17:59.142519 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 57.141.0.51:31868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:17:59.350227 2026] [security2:error] [pid 2529845:tid 2529845] [client 110.249.202.54:58344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsItznz0V0HyYIA5Ahp2QAAAC0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:00.251653 2026] [security2:error] [pid 2529526:tid 2529526] [client 110.249.202.69:20284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIuEmkEskEfrdK6-YnzAAAAA0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:00.487389 2026] [security2:error] [pid 2533666:tid 2533666] [client 114.119.144.31:33973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579651200/request_format~html"] [unique_id "amsIuMBniTu938aLRbvHfgAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579564800/request_format~html
[Thu Jul 30 09:18:00.883516 2026] [ssl:error] [pid 2534860:tid 2534860] (EAI 2)Name or service not known: [client 144.76.19.72:21540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:00.883554 2026] [ssl:error] [pid 2534860:tid 2534860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:00.939734 2026] [ssl:error] [pid 2529526:tid 2529526] (EAI 2)Name or service not known: [client 144.76.19.72:21546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:00.939758 2026] [ssl:error] [pid 2529526:tid 2529526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:01.017724 2026] [security2:error] [pid 2534860:tid 2534860] [client 110.249.202.113:48980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIud-DXxzoZBsy40MaiQAAAAY"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:01.823297 2026] [security2:error] [pid 2529749:tid 2529749] [client 110.249.202.168:52196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIuRDCCV-EvV6tVrde_gAAACU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:02.622249 2026] [security2:error] [pid 2534860:tid 2534860] [client 51.68.107.137:23447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsIut-DXxzoZBsy40MaigAAAAY"]
[Thu Jul 30 09:18:02.703608 2026] [security2:error] [pid 2533666:tid 2533666] [client 110.249.202.135:20140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIusBniTu938aLRbvHfwAAABM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:02.884457 2026] [security2:error] [pid 2529526:tid 2529526] [client 51.68.107.137:15157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amsIukmkEskEfrdK6-YnzgAAAA0"]
[Thu Jul 30 09:18:03.560022 2026] [security2:error] [pid 2533620:tid 2533620] [client 110.249.202.58:17328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIu-e3FylbtH7d00SYfQAAAAg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:04.014583 2026] [ssl:error] [pid 2510567:tid 2510567] (EAI 2)Name or service not known: [client 144.76.19.72:21556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:04.014618 2026] [ssl:error] [pid 2510567:tid 2510567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:04.070340 2026] [ssl:error] [pid 2510567:tid 2510567] (EAI 2)Name or service not known: [client 144.76.19.72:21560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:04.070362 2026] [ssl:error] [pid 2510567:tid 2510567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:04.402439 2026] [security2:error] [pid 2529526:tid 2529526] [client 110.249.202.176:15306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIvEmkEskEfrdK6-YnzwAAAA0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:04.682187 2026] [security2:error] [pid 2529319:tid 2529319] [client 85.208.96.200:27942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/what-happens-at-3am-scary"] [unique_id "amsIvLrPvkzv1DmAvGOrjwAAAAQ"]
[Thu Jul 30 09:18:05.185810 2026] [authz_core:error] [pid 2529319:tid 2529319] [client 57.141.0.50:35882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:18:05.186445 2026] [authz_core:error] [pid 2529319:tid 2529319] [client 57.141.0.50:35882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:18:05.210883 2026] [security2:error] [pid 2529844:tid 2529844] [client 110.249.202.219:40970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIvZmw1bxKh5C8YPUalQAAACw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:06.172823 2026] [security2:error] [pid 2524670:tid 2524670] [client 110.249.202.205:44328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIvtB2aHiLkRfK7dcLzwAAAB0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:06.474092 2026] [ssl:error] [pid 2529749:tid 2529749] (70014)End of file found: [client 216.73.216.199:22551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:06.979401 2026] [security2:error] [pid 2535139:tid 2535139] [client 110.249.202.241:55344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIvoJtz8tHAnfB7G7pQgAAACg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:07.082122 2026] [core:error] [pid 2532797:tid 2532797] (13)Permission denied: [client 216.73.216.199:55367] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/raidersofthegamecupboard.co.uk.db
[Thu Jul 30 09:18:07.122630 2026] [ssl:error] [pid 2535096:tid 2535096] (EAI 2)Name or service not known: [client 144.76.19.72:21566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:07.122664 2026] [ssl:error] [pid 2535096:tid 2535096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:07.174543 2026] [ssl:error] [pid 2529715:tid 2529715] (EAI 2)Name or service not known: [client 144.76.19.72:21582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:07.174605 2026] [ssl:error] [pid 2529715:tid 2529715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:07.421611 2026] [authz_core:error] [pid 2524670:tid 2524670] [client 57.141.0.19:31542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:18:07.422249 2026] [authz_core:error] [pid 2524670:tid 2524670] [client 57.141.0.19:31542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:18:07.806243 2026] [security2:error] [pid 2532734:tid 2532734] [client 110.249.202.5:14748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIvzaViKEUXG6ZhHkLJAAAAAk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:07.989460 2026] [core:error] [pid 2535096:tid 2535096] [client 216.73.216.199:33094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:18:07.989481 2026] [core:error] [pid 2535096:tid 2535096] [client 216.73.216.199:33094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:18:08.561611 2026] [security2:error] [pid 2529526:tid 2529526] [client 110.249.202.213:25544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIwEmkEskEfrdK6-Yn0wAAAA0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:09.275566 2026] [security2:error] [pid 2529748:tid 2529748] [client 110.249.202.162:63148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIwboknnVK7uKpm-049gAAACM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:09.417629 2026] [authz_core:error] [pid 2529715:tid 2529715] [client 57.141.0.37:44504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:18:09.418279 2026] [authz_core:error] [pid 2529715:tid 2529715] [client 57.141.0.37:44504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:18:09.511048 2026] [core:error] [pid 2532797:tid 2532797] (13)Permission denied: [client 216.73.216.199:55367] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-128/poison
[Thu Jul 30 09:18:09.812838 2026] [ssl:error] [pid 2532797:tid 2532797] (70014)End of file found: [client 216.73.216.199:55367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:10.086727 2026] [security2:error] [pid 2535096:tid 2535096] [client 110.249.202.119:59246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIwqsoJWwt6NP6ze2VRgAAABU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:10.231587 2026] [ssl:error] [pid 2523866:tid 2523866] (EAI 2)Name or service not known: [client 144.76.19.72:26446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:10.231616 2026] [ssl:error] [pid 2523866:tid 2523866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:10.279411 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 172.202.95.21:29864] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 09:18:10.287162 2026] [ssl:error] [pid 2532734:tid 2532734] (EAI 2)Name or service not known: [client 144.76.19.72:26450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:10.287191 2026] [ssl:error] [pid 2532734:tid 2532734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:10.287610 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 172.202.95.21:29864] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/wc-logs/
[Thu Jul 30 09:18:10.919684 2026] [security2:error] [pid 2533669:tid 2533669] [client 110.249.202.55:26572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIwjYpIRoooV2L-4KgwwAAABg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:11.742686 2026] [security2:error] [pid 2529748:tid 2529748] [client 110.249.202.222:22682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIw7oknnVK7uKpm-049wAAACM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:11.839129 2026] [autoindex:error] [pid 2535137:tid 2535137] (13)Permission denied: [client 216.73.216.199:1065] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/home/iiiuk/
[Thu Jul 30 09:18:12.559136 2026] [security2:error] [pid 2535096:tid 2535096] [client 110.249.202.60:56968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIxKsoJWwt6NP6ze2VRwAAABU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:12.846039 2026] [authz_core:error] [pid 2533666:tid 2533666] [client 57.141.0.43:35454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:18:12.846694 2026] [authz_core:error] [pid 2533666:tid 2533666] [client 57.141.0.43:35454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:18:13.153262 2026] [ssl:error] [pid 2535137:tid 2535137] (70014)End of file found: [client 216.73.216.199:1065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:13.308188 2026] [security2:error] [pid 2529793:tid 2529793] [client 110.249.202.161:11524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIxUuNP7pkBEv3DIqiYAAAACY"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:13.341194 2026] [ssl:error] [pid 2533577:tid 2533577] (EAI 2)Name or service not known: [client 144.76.19.72:26456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:13.341226 2026] [ssl:error] [pid 2533577:tid 2533577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:13.393206 2026] [ssl:error] [pid 2524915:tid 2524915] (EAI 2)Name or service not known: [client 144.76.19.72:26460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:13.393233 2026] [ssl:error] [pid 2524915:tid 2524915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:14.124373 2026] [security2:error] [pid 2533666:tid 2533666] [client 110.249.202.226:63364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIxsBniTu938aLRbvHhAAAABM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:14.830595 2026] [core:error] [pid 2525053:tid 2525053] (13)Permission denied: [client 216.73.216.199:27964] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/ghash_clmulni_intel/uevent
[Thu Jul 30 09:18:14.904372 2026] [security2:error] [pid 2510567:tid 2510567] [client 110.249.202.42:21586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIxiyfj8cbA85hi0rR0wAAADk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:15.092179 2026] [authz_core:error] [pid 2533577:tid 2533577] [client 66.249.66.34:62933] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:18:15.094889 2026] [authz_core:error] [pid 2533577:tid 2533577] [client 66.249.66.34:62933] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:18:15.677989 2026] [security2:error] [pid 2533620:tid 2533620] [client 110.249.202.244:54132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIx-e3FylbtH7d00SYgQAAAAg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:16.446018 2026] [ssl:error] [pid 2529849:tid 2529849] (EAI 2)Name or service not known: [client 144.76.19.72:26472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:16.446052 2026] [ssl:error] [pid 2529849:tid 2529849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:16.446236 2026] [security2:error] [pid 2510567:tid 2510567] [client 110.249.202.27:43916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIyCyfj8cbA85hi0rR1AAAADk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:16.501463 2026] [ssl:error] [pid 2525060:tid 2525060] (EAI 2)Name or service not known: [client 144.76.19.72:26476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:16.501512 2026] [ssl:error] [pid 2525060:tid 2525060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:17.295887 2026] [security2:error] [pid 2525060:tid 2525060] [client 110.249.202.239:62530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIyTwexIJbSfC8mVzHKwAAAEg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:17.637835 2026] [authz_core:error] [pid 2524670:tid 2524670] [client 57.141.0.31:59024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:18:17.638452 2026] [authz_core:error] [pid 2524670:tid 2524670] [client 57.141.0.31:59024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:18:18.092301 2026] [security2:error] [pid 2529846:tid 2529846] [client 110.249.202.202:39670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIyl5DX5CZJ4p3tLkQfQAAAC4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:18.541919 2026] [core:error] [pid 2525053:tid 2525053] (13)Permission denied: [client 216.73.216.199:27964] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/gpio-clk/uevent
[Thu Jul 30 09:18:18.915009 2026] [security2:error] [pid 2524670:tid 2524670] [client 110.249.202.84:35826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIytB2aHiLkRfK7dcL1QAAAB0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:19.480490 2026] [security2:error] [pid 2525060:tid 2525060] [client 110.249.202.225:35074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/robots.txt"] [unique_id "amsIyzwexIJbSfC8mVzHLAAAAEg"]
[Thu Jul 30 09:18:19.557845 2026] [ssl:error] [pid 2532734:tid 2532734] (EAI 2)Name or service not known: [client 144.76.19.72:51092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:19.557879 2026] [ssl:error] [pid 2532734:tid 2532734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:19.612015 2026] [ssl:error] [pid 2529845:tid 2529845] (EAI 2)Name or service not known: [client 144.76.19.72:51106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:19.612043 2026] [ssl:error] [pid 2529845:tid 2529845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:19.721645 2026] [security2:error] [pid 2528543:tid 2528543] [client 110.249.202.200:24414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIy9sbFZy29uO6JtIBfgAAACA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:19.976260 2026] [ssl:error] [pid 2529849:tid 2529849] (70014)End of file found: [client 216.73.216.199:12965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:20.496212 2026] [security2:error] [pid 2529846:tid 2529846] [client 110.249.202.99:39980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIzF5DX5CZJ4p3tLkQfgAAAC4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:20.577505 2026] [core:error] [pid 2525053:tid 2525053] (13)Permission denied: [client 216.73.216.199:27964] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/devices/0000:00:01.3/remove
[Thu Jul 30 09:18:20.875334 2026] [security2:error] [pid 2532865:tid 2532865] [client 110.249.202.139:30264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amsIzBneiNwed3sS5_rrmwAAABc"]
[Thu Jul 30 09:18:21.342330 2026] [security2:error] [pid 2532764:tid 2532764] [client 110.249.202.32:35146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIze5pwIZ9ky1WN1UVeQAAAAw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:21.589441 2026] [cgi:error] [pid 2532734:tid 2532734] [client 66.249.66.195:65442] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:18:22.039298 2026] [security2:error] [pid 2525060:tid 2525060] [client 54.225.81.20:24994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/blaser-academy/"] [unique_id "amsIzjwexIJbSfC8mVzHLQAAAEg"]
[Thu Jul 30 09:18:22.098602 2026] [security2:error] [pid 2533577:tid 2533577] [client 110.249.202.144:13464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIzkVFZnqv7r_HSBdItwAAAAM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:22.670260 2026] [ssl:error] [pid 2529749:tid 2529749] (EAI 2)Name or service not known: [client 144.76.19.72:51116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:22.670287 2026] [ssl:error] [pid 2529749:tid 2529749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:22.725541 2026] [ssl:error] [pid 2535058:tid 2535058] (EAI 2)Name or service not known: [client 144.76.19.72:51126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:22.725569 2026] [ssl:error] [pid 2535058:tid 2535058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:22.819559 2026] [security2:error] [pid 2529846:tid 2529846] [client 110.249.202.31:64888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIzl5DX5CZJ4p3tLkQfwAAAC4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:23.458547 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 57.141.0.11:36440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:18:23.459178 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 57.141.0.11:36440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:18:23.638474 2026] [security2:error] [pid 2533577:tid 2533577] [client 110.249.202.109:50802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsIz0VFZnqv7r_HSBdIuAAAAAM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:24.448640 2026] [security2:error] [pid 2535058:tid 2535058] [client 110.249.202.179:58626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI0C_HwAj4vFB1AT5NGwAAABQ"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:25.210502 2026] [security2:error] [pid 2532797:tid 2532797] [client 110.249.202.240:60366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI0cVSwDHKUN37iunpBwAAABA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:25.779520 2026] [ssl:error] [pid 2528543:tid 2528543] (EAI 2)Name or service not known: [client 144.76.19.72:51128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:25.779550 2026] [ssl:error] [pid 2528543:tid 2528543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:25.862902 2026] [ssl:error] [pid 2525060:tid 2525060] (EAI 2)Name or service not known: [client 144.76.19.72:51130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:25.862929 2026] [ssl:error] [pid 2525060:tid 2525060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:25.873700 2026] [security2:error] [pid 2529793:tid 2529793] [client 43.166.7.113:46068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wildduckdesigns.co.uk"] [uri "/"] [unique_id "amsI0UuNP7pkBEv3DIqiYwAAACY"]
[Thu Jul 30 09:18:25.960587 2026] [security2:error] [pid 2510567:tid 2510567] [client 110.249.202.120:34378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI0Syfj8cbA85hi0rR2AAAADk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:26.346668 2026] [core:error] [pid 2535137:tid 2535137] (13)Permission denied: [client 216.73.216.199:16950] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/net/rpc/auth.unix.gid/channel
[Thu Jul 30 09:18:26.734544 2026] [security2:error] [pid 2529849:tid 2529849] [client 110.249.202.179:40566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI0uAk_euQOLD7mpDcLQAAADE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:27.260906 2026] [core:crit] [pid 2535137:tid 2535137] (13)Permission denied: [client 216.73.216.199:16950] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/pstore/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/pstore/' is executable
[Thu Jul 30 09:18:27.260967 2026] [core:crit] [pid 2535137:tid 2535137] (13)Permission denied: [client 216.73.216.199:16950] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/bpf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/bpf/' is executable
[Thu Jul 30 09:18:27.461024 2026] [security2:error] [pid 2528543:tid 2528543] [client 110.249.202.93:39666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI09sbFZy29uO6JtIBfwAAACA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:28.170343 2026] [security2:error] [pid 2532734:tid 2532734] [client 37.202.73.119:46637] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsI1DaViKEUXG6ZhHkLJwAAAAk"]
[Thu Jul 30 09:18:28.170398 2026] [security2:error] [pid 2532734:tid 2532734] [client 37.202.73.119:46637] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsI1DaViKEUXG6ZhHkLJwAAAAk"]
[Thu Jul 30 09:18:28.170667 2026] [security2:error] [pid 2532734:tid 2532734] [client 37.202.73.119:46637] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsI1DaViKEUXG6ZhHkLJwAAAAk"]
[Thu Jul 30 09:18:28.189359 2026] [security2:error] [pid 2529749:tid 2529749] [client 110.249.202.214:48834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI1BDCCV-EvV6tVrdfDQAAACU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:28.939006 2026] [ssl:error] [pid 2518708:tid 2518708] (EAI 2)Name or service not known: [client 144.76.19.72:51134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:28.939051 2026] [ssl:error] [pid 2518708:tid 2518708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:28.995969 2026] [ssl:error] [pid 2528543:tid 2528543] (EAI 2)Name or service not known: [client 144.76.19.72:51138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:28.996013 2026] [ssl:error] [pid 2528543:tid 2528543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:29.054345 2026] [security2:error] [pid 2528502:tid 2528502] [client 110.249.202.215:22126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI1XWKAl0LeEy_VhKiZgAAABw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:29.907778 2026] [security2:error] [pid 2529749:tid 2529749] [client 110.249.202.88:45904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI1RDCCV-EvV6tVrdfDgAAACU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:30.762837 2026] [security2:error] [pid 2528543:tid 2528543] [client 110.249.202.158:48848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI1tsbFZy29uO6JtIBgAAAACA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:31.419116 2026] [security2:error] [pid 2533918:tid 2533918] [client 41.60.237.142:50408] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsI10jl36qGbI0GaZQ2jAAAAAo"]
[Thu Jul 30 09:18:31.419179 2026] [security2:error] [pid 2533918:tid 2533918] [client 41.60.237.142:50408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsI10jl36qGbI0GaZQ2jAAAAAo"]
[Thu Jul 30 09:18:31.419481 2026] [security2:error] [pid 2533918:tid 2533918] [client 41.60.237.142:50408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsI10jl36qGbI0GaZQ2jAAAAAo"]
[Thu Jul 30 09:18:31.539375 2026] [security2:error] [pid 2533621:tid 2533621] [client 110.249.202.131:39682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI10T5OWS-x-aFwq42sgAAABI"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:32.139279 2026] [ssl:error] [pid 2533367:tid 2533367] (EAI 2)Name or service not known: [client 144.76.19.72:45352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:32.139327 2026] [ssl:error] [pid 2533367:tid 2533367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:32.193468 2026] [ssl:error] [pid 2532903:tid 2532903] (EAI 2)Name or service not known: [client 144.76.19.72:45368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:32.193511 2026] [ssl:error] [pid 2532903:tid 2532903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:32.417498 2026] [security2:error] [pid 2529849:tid 2529849] [client 110.249.202.77:55272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI2OAk_euQOLD7mpDcLwAAADE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:33.156314 2026] [security2:error] [pid 2533918:tid 2533918] [client 110.249.202.225:52148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI2Ujl36qGbI0GaZQ2jQAAAAo"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:33.917186 2026] [security2:error] [pid 2529715:tid 2529715] [client 110.249.202.161:27702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI2XNvnoBIBCIBpK96pgAAABs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:34.674191 2026] [security2:error] [pid 2533577:tid 2533577] [client 110.249.202.185:12534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI2kVFZnqv7r_HSBdIugAAAAM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:34.800501 2026] [core:crit] [pid 2535137:tid 2535137] (13)Permission denied: [client 216.73.216.199:16950] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/pstore/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/pstore/' is executable
[Thu Jul 30 09:18:34.800556 2026] [core:crit] [pid 2535137:tid 2535137] (13)Permission denied: [client 216.73.216.199:16950] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/bpf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/bpf/' is executable
[Thu Jul 30 09:18:35.092264 2026] [security2:error] [pid 2533918:tid 2533918] [client 189.177.96.162:44406] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsI20jl36qGbI0GaZQ2jgAAAAo"]
[Thu Jul 30 09:18:35.092347 2026] [security2:error] [pid 2533918:tid 2533918] [client 189.177.96.162:44406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsI20jl36qGbI0GaZQ2jgAAAAo"]
[Thu Jul 30 09:18:35.092652 2026] [security2:error] [pid 2533918:tid 2533918] [client 189.177.96.162:44406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsI20jl36qGbI0GaZQ2jgAAAAo"]
[Thu Jul 30 09:18:35.253379 2026] [ssl:error] [pid 2535138:tid 2535138] (EAI 2)Name or service not known: [client 144.76.19.72:45370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:35.253428 2026] [ssl:error] [pid 2535138:tid 2535138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:35.311450 2026] [ssl:error] [pid 2532903:tid 2532903] (EAI 2)Name or service not known: [client 144.76.19.72:45372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:35.311475 2026] [ssl:error] [pid 2532903:tid 2532903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:35.398241 2026] [security2:error] [pid 2529715:tid 2529715] [client 110.249.202.159:13550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI23NvnoBIBCIBpK96pwAAABs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:36.122827 2026] [security2:error] [pid 2535138:tid 2535138] [client 110.249.202.43:48044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI3INITXp7jlm-C8hilAAAACc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:36.897979 2026] [security2:error] [pid 2524670:tid 2524670] [client 110.249.202.113:53234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI3NB2aHiLkRfK7dcL2QAAAB0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:36.906928 2026] [autoindex:error] [pid 2535137:tid 2535137] (13)Permission denied: [client 216.73.216.199:16950] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/cliftona/
[Thu Jul 30 09:18:37.667289 2026] [security2:error] [pid 2535138:tid 2535138] [client 110.249.202.29:54192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI3YNITXp7jlm-C8hilQAAACc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:38.314484 2026] [lsapi:warn] [pid 2535137:tid 2535137] [client 216.73.216.199:16950] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: Permission denied in Unknown on line 0\n
[Thu Jul 30 09:18:38.314514 2026] [lsapi:error] [pid 2535137:tid 2535137] [client 216.73.216.199:16950] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/ai-bolit/data_collect.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 09:18:38.365700 2026] [ssl:error] [pid 2529526:tid 2529526] (EAI 2)Name or service not known: [client 144.76.19.72:45382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:38.365722 2026] [ssl:error] [pid 2529526:tid 2529526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:38.427327 2026] [ssl:error] [pid 2529749:tid 2529749] (EAI 2)Name or service not known: [client 144.76.19.72:45394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:38.427363 2026] [ssl:error] [pid 2529749:tid 2529749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:39.172665 2026] [security2:error] [pid 2529526:tid 2529526] [client 110.249.202.192:20202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI30mkEskEfrdK6-Yn2wAAAA0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:40.222361 2026] [ssl:error] [pid 2524670:tid 2524670] (70014)End of file found: [client 216.73.216.199:38546] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:40.297313 2026] [security2:error] [pid 2533668:tid 2533668] [client 110.249.202.3:38570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI4GeKOqySwNQ1Vbe-_gAAABY"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:41.207946 2026] [security2:error] [pid 2529749:tid 2529749] [client 110.249.202.211:60254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI4RDCCV-EvV6tVrdfEAAAACU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:41.486762 2026] [ssl:error] [pid 2533668:tid 2533668] (EAI 2)Name or service not known: [client 144.76.19.72:59172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:41.486797 2026] [ssl:error] [pid 2533668:tid 2533668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:41.542807 2026] [ssl:error] [pid 2535058:tid 2535058] (EAI 2)Name or service not known: [client 144.76.19.72:59188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:41.542839 2026] [ssl:error] [pid 2535058:tid 2535058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:41.732835 2026] [security2:error] [pid 2529526:tid 2529526] [client 47.128.23.193:21114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsI4UmkEskEfrdK6-Yn3AAAAA0"]
[Thu Jul 30 09:18:41.863244 2026] [security2:error] [pid 2529849:tid 2529849] [client 94.154.43.185:43586] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "paulino.mt.stampys.eu"] [uri "/.env"] [unique_id "amsI4eAk_euQOLD7mpDcMQAAADE"]
[Thu Jul 30 09:18:41.863431 2026] [security2:error] [pid 2529849:tid 2529849] [client 94.154.43.185:43586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulino.mt.stampys.eu"] [uri "/.env"] [unique_id "amsI4eAk_euQOLD7mpDcMQAAADE"]
[Thu Jul 30 09:18:41.863637 2026] [security2:error] [pid 2529849:tid 2529849] [client 94.154.43.185:43586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "paulino.mt.stampys.eu"] [uri "/.env"] [unique_id "amsI4eAk_euQOLD7mpDcMQAAADE"]
[Thu Jul 30 09:18:42.033480 2026] [ssl:error] [pid 2527098:tid 2527098] (70014)End of file found: [client 216.73.216.199:33173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:42.140121 2026] [security2:error] [pid 2535096:tid 2535096] [client 85.208.96.199:11958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/maury-travis-house-pictures"] [unique_id "amsI4qsoJWwt6NP6ze2VTQAAABU"]
[Thu Jul 30 09:18:42.241959 2026] [security2:error] [pid 2529319:tid 2529319] [client 110.249.202.217:42530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI4rrPvkzv1DmAvGOrmwAAAAQ"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:42.277152 2026] [security2:error] [pid 2533367:tid 2533367] [client 50.16.216.166:36590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "glasgowball.com"] [uri "/"] [unique_id "amsI4iXKGwIY1Yv3vOb7xAAAAAA"]
[Thu Jul 30 09:18:42.296437 2026] [security2:error] [pid 2523866:tid 2523866] [client 94.154.43.229:33680] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "paulino.mt"] [uri "/.env"] [unique_id "amsI4v5B2Lny6Fi4WqOpqwAAABE"]
[Thu Jul 30 09:18:42.296653 2026] [security2:error] [pid 2523866:tid 2523866] [client 94.154.43.229:33680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulino.mt"] [uri "/.env"] [unique_id "amsI4v5B2Lny6Fi4WqOpqwAAABE"]
[Thu Jul 30 09:18:42.296862 2026] [security2:error] [pid 2523866:tid 2523866] [client 94.154.43.229:33680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "paulino.mt"] [uri "/.env"] [unique_id "amsI4v5B2Lny6Fi4WqOpqwAAABE"]
[Thu Jul 30 09:18:42.536751 2026] [ssl:error] [pid 2529749:tid 2529749] (70014)End of file found: [client 216.73.216.199:45163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:42.923380 2026] [core:error] [pid 2532865:tid 2532865] [client 66.249.64.172:37290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:18:42.923408 2026] [core:error] [pid 2532865:tid 2532865] [client 66.249.64.172:37290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:18:43.134120 2026] [security2:error] [pid 2535096:tid 2535096] [client 110.249.202.43:53196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI46soJWwt6NP6ze2VTgAAABU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:43.918777 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.151:23044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI4yXKGwIY1Yv3vOb7xQAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:44.597875 2026] [ssl:error] [pid 2529319:tid 2529319] (EAI 2)Name or service not known: [client 144.76.19.72:59190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:44.597911 2026] [ssl:error] [pid 2529319:tid 2529319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:44.654645 2026] [ssl:error] [pid 2533668:tid 2533668] (EAI 2)Name or service not known: [client 144.76.19.72:59196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:44.654686 2026] [ssl:error] [pid 2533668:tid 2533668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:44.833716 2026] [security2:error] [pid 2532865:tid 2532865] [client 110.249.202.237:54342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI5BneiNwed3sS5_rrogAAABc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:45.104004 2026] [security2:error] [pid 2533367:tid 2533367] [client 185.191.171.17:53256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amsI5SXKGwIY1Yv3vOb7xgAAAAA"]
[Thu Jul 30 09:18:45.120016 2026] [core:error] [pid 2525053:tid 2525053] [client 66.249.66.8:50702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:18:45.120041 2026] [core:error] [pid 2525053:tid 2525053] [client 66.249.66.8:50702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:18:45.655838 2026] [security2:error] [pid 2533668:tid 2533668] [client 85.208.96.193:29844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/category/asia/page/8/"] [unique_id "amsI5WeKOqySwNQ1Vbe_AAAAABY"]
[Thu Jul 30 09:18:45.841280 2026] [security2:error] [pid 2532796:tid 2532796] [client 110.249.202.54:18120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI5ePgkJaP8xBp921CdQAAAA8"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:46.733587 2026] [security2:error] [pid 2532865:tid 2532865] [client 110.249.202.198:39066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI5hneiNwed3sS5_rrowAAABc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:47.003055 2026] [authz_core:error] [pid 2532764:tid 2532764] [client 57.141.0.4:54002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:18:47.003694 2026] [authz_core:error] [pid 2532764:tid 2532764] [client 57.141.0.4:54002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:18:47.444787 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 66.249.66.33:53129] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:18:47.447463 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 66.249.66.33:53129] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:18:47.507437 2026] [security2:error] [pid 2532796:tid 2532796] [client 110.249.202.170:61352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI5-PgkJaP8xBp921CdgAAAA8"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:47.711365 2026] [ssl:error] [pid 2529849:tid 2529849] (EAI 2)Name or service not known: [client 144.76.19.72:59212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:47.711395 2026] [ssl:error] [pid 2529849:tid 2529849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:47.768423 2026] [ssl:error] [pid 2529526:tid 2529526] (EAI 2)Name or service not known: [client 144.76.19.72:59220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:47.768452 2026] [ssl:error] [pid 2529526:tid 2529526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:47.824144 2026] [autoindex:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:54194] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/home/makeupby/
[Thu Jul 30 09:18:48.294102 2026] [security2:error] [pid 2535138:tid 2535138] [client 110.249.202.9:57760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI6INITXp7jlm-C8himAAAACc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:48.524774 2026] [security2:error] [pid 2533367:tid 2533367] [client 185.191.171.12:30082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/craigslist-jackson,-tn-pets"] [unique_id "amsI6CXKGwIY1Yv3vOb7yAAAAAA"]
[Thu Jul 30 09:18:49.039827 2026] [security2:error] [pid 2535137:tid 2535137] [client 110.249.202.210:53998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI6bY6AUW_ZsXORTxtzwAAAB8"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:49.836881 2026] [security2:error] [pid 2524670:tid 2524670] [client 110.249.202.231:10286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI6dB2aHiLkRfK7dcL4AAAAB0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:50.532931 2026] [security2:error] [pid 2528278:tid 2528278] [client 110.249.202.8:12730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI6sICb-1E1dIynZhhdQAAAAI"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:50.826834 2026] [ssl:error] [pid 2535058:tid 2535058] (EAI 2)Name or service not known: [client 144.76.19.72:20418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:50.826858 2026] [ssl:error] [pid 2535058:tid 2535058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:50.860741 2026] [security2:error] [pid 2532734:tid 2532734] [client 185.191.171.13:42094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/army-cif-statement-of-charges"] [unique_id "amsI6jaViKEUXG6ZhHkLKwAAAAk"]
[Thu Jul 30 09:18:50.882285 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:20426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:50.882315 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:51.305011 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.32:37926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI6yXKGwIY1Yv3vOb7ygAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:51.524988 2026] [core:crit] [pid 2535058:tid 2535058] (13)Permission denied: [client 40.77.167.30:21124] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:18:52.151250 2026] [security2:error] [pid 2529849:tid 2529849] [client 110.249.202.138:30792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI7OAk_euQOLD7mpDcNQAAADE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:53.009837 2026] [security2:error] [pid 2532903:tid 2532903] [client 110.249.202.26:28014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI7a5beE8sMkNUXA8j_AAAABo"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:53.757354 2026] [security2:error] [pid 2532797:tid 2532797] [client 110.249.202.131:24600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI7cVSwDHKUN37iunpCwAAABA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:53.900271 2026] [ssl:error] [pid 2518708:tid 2518708] (70014)End of file found: [client 216.73.216.199:45166] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:53.936591 2026] [ssl:error] [pid 2529849:tid 2529849] (EAI 2)Name or service not known: [client 144.76.19.72:20432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:53.936616 2026] [ssl:error] [pid 2529849:tid 2529849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:53.987793 2026] [ssl:error] [pid 2532764:tid 2532764] (EAI 2)Name or service not known: [client 144.76.19.72:20434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:53.987822 2026] [ssl:error] [pid 2532764:tid 2532764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:54.227723 2026] [cgi:error] [pid 2533577:tid 2533577] [client 199.45.154.126:58062] AH02812: stderr from /home/buttere/public_html/nineteenthirtythree.com/cgi-bin/: attempt to invoke directory as script, referer: https://nineteenthirtythree.butteredcat.com:443/cgi-bin
[Thu Jul 30 09:18:54.474673 2026] [security2:error] [pid 2510567:tid 2510567] [client 110.249.202.119:38216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI7iyfj8cbA85hi0rR5gAAADk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:54.903181 2026] [security2:error] [pid 2532764:tid 2532764] [client 85.208.96.203:52582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/director-of-football-operations-salary-ucf"] [unique_id "amsI7u5pwIZ9ky1WN1UV4gAAAAw"]
[Thu Jul 30 09:18:55.225024 2026] [security2:error] [pid 2532796:tid 2532796] [client 110.249.202.9:62272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI7-PgkJaP8xBp921CeQAAAA8"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:55.999335 2026] [security2:error] [pid 2532734:tid 2532734] [client 110.249.202.151:58462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI7zaViKEUXG6ZhHkLLgAAAAk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:56.848722 2026] [security2:error] [pid 2510567:tid 2510567] [client 110.249.202.52:51464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI8Cyfj8cbA85hi0rR6AAAADk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:57.044434 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:20446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:57.044462 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:57.102455 2026] [ssl:error] [pid 2532764:tid 2532764] (EAI 2)Name or service not known: [client 144.76.19.72:20458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:18:57.102482 2026] [ssl:error] [pid 2532764:tid 2532764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:18:57.632289 2026] [security2:error] [pid 2532764:tid 2532764] [client 110.249.202.195:32250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI8e5pwIZ9ky1WN1UV5AAAAAw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:58.347789 2026] [security2:error] [pid 2532764:tid 2532764] [client 110.249.202.66:60196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI8u5pwIZ9ky1WN1UV5QAAAAw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:58.348002 2026] [security2:error] [pid 2527098:tid 2527098] [client 185.191.171.2:17238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/montgomery-gator-x-glamrock-freddy"] [unique_id "amsI8vbgLO_vx1x-F8upSAAAAAc"]
[Thu Jul 30 09:18:58.430538 2026] [ssl:error] [pid 2532734:tid 2532734] (70014)End of file found: [client 216.73.216.199:27274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:18:59.141792 2026] [security2:error] [pid 2527098:tid 2527098] [client 110.249.202.195:56038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI8_bgLO_vx1x-F8upSQAAAAc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:18:59.343432 2026] [core:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:54194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/usb/drivers/usbhid/uevent
[Thu Jul 30 09:18:59.912313 2026] [security2:error] [pid 2529845:tid 2529845] [client 110.249.202.139:45194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI8znz0V0HyYIA5Ahp5wAAAC0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:00.181942 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:19512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:00.181993 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:00.238129 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:19524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:00.238166 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:00.655391 2026] [security2:error] [pid 2529845:tid 2529845] [client 110.249.202.249:50422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI9Dnz0V0HyYIA5Ahp6AAAAC0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:01.429284 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.94:55472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI9SXKGwIY1Yv3vOb7zQAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:02.277436 2026] [security2:error] [pid 2537094:tid 2537094] [client 110.249.202.217:47344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI9h5FGmHzkGrtAJ2mjgAAAAg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:02.357767 2026] [core:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:54194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/europla.co.uk.db
[Thu Jul 30 09:19:02.997584 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.143:48690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI9iXKGwIY1Yv3vOb7zgAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:03.263260 2026] [core:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:54194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/drivers/thermal/uevent
[Thu Jul 30 09:19:03.312246 2026] [ssl:error] [pid 2532903:tid 2532903] (EAI 2)Name or service not known: [client 144.76.19.72:19530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:03.312306 2026] [ssl:error] [pid 2532903:tid 2532903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:03.313771 2026] [access_compat:error] [pid 2529749:tid 2529749] [client 146.70.194.222:56878] AH01797: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-content/uploads/newsletters-lite/export/
[Thu Jul 30 09:19:03.368643 2026] [ssl:error] [pid 2529846:tid 2529846] (EAI 2)Name or service not known: [client 144.76.19.72:19544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:03.368683 2026] [ssl:error] [pid 2529846:tid 2529846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:03.737272 2026] [security2:error] [pid 2533668:tid 2533668] [client 110.249.202.33:10466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI92eKOqySwNQ1Vbe_BgAAABY"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:03.801349 2026] [access_compat:error] [pid 2529749:tid 2529749] [client 146.70.194.222:56878] AH01797: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-content/uploads/wpforo/cache/
[Thu Jul 30 09:19:04.558560 2026] [security2:error] [pid 2535058:tid 2535058] [client 110.249.202.79:60386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI-C_HwAj4vFB1AT5NIwAAABQ"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:04.785896 2026] [authz_core:error] [pid 2529749:tid 2529749] [client 146.70.194.222:56878] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/error_log
[Thu Jul 30 09:19:04.847468 2026] [authz_core:error] [pid 2529749:tid 2529749] [client 146.70.194.222:56878] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/ID3/error_log
[Thu Jul 30 09:19:05.403641 2026] [security2:error] [pid 2533668:tid 2533668] [client 110.249.202.20:47720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI-WeKOqySwNQ1Vbe_BwAAABY"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:05.443841 2026] [authz_core:error] [pid 2510567:tid 2510567] [client 108.130.178.137:54752] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://www.google.com/share.google?q=y7beucv3lmEIfkuzp
[Thu Jul 30 09:19:05.446504 2026] [authz_core:error] [pid 2510567:tid 2510567] [client 108.130.178.137:54752] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://www.google.com/share.google?q=y7beucv3lmEIfkuzp
[Thu Jul 30 09:19:05.970695 2026] [authz_core:error] [pid 2532903:tid 2532903] [client 146.70.194.222:57726] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/IXR/error_log
[Thu Jul 30 09:19:06.186149 2026] [security2:error] [pid 2529749:tid 2529749] [client 110.249.202.107:38122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI-hDCCV-EvV6tVrdfdwAAACU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:06.421257 2026] [ssl:error] [pid 2535138:tid 2535138] (EAI 2)Name or service not known: [client 144.76.19.72:19550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:06.421283 2026] [ssl:error] [pid 2535138:tid 2535138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:06.472655 2026] [ssl:error] [pid 2529793:tid 2529793] (EAI 2)Name or service not known: [client 144.76.19.72:19560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:06.472687 2026] [ssl:error] [pid 2529793:tid 2529793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:07.060308 2026] [security2:error] [pid 2533577:tid 2533577] [client 110.249.202.90:47926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI-0VFZnqv7r_HSBdJJwAAAAM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:07.396643 2026] [authz_core:error] [pid 2536512:tid 2536512] [client 57.141.0.34:50258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:07.397291 2026] [authz_core:error] [pid 2536512:tid 2536512] [client 57.141.0.34:50258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:07.436895 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 146.70.194.222:57740] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/error_log
[Thu Jul 30 09:19:07.786424 2026] [ssl:error] [pid 2532734:tid 2532734] (70014)End of file found: [client 216.73.216.199:42207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:07.947915 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 146.70.194.222:57740] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Auth/error_log
[Thu Jul 30 09:19:08.061406 2026] [security2:error] [pid 2525053:tid 2525053] [client 110.249.202.161:42198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI_CIPTHvtTkLARZDVcwAAAD4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:08.087090 2026] [ssl:error] [pid 2533367:tid 2533367] (70014)End of file found: [client 216.73.216.199:49829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:08.931387 2026] [security2:error] [pid 2528502:tid 2528502] [client 110.249.202.98:17010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI_HWKAl0LeEy_VhKihAAAABw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:09.208831 2026] [authz_core:error] [pid 2533577:tid 2533577] [client 146.70.194.222:57744] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Exception/error_log
[Thu Jul 30 09:19:09.527620 2026] [ssl:error] [pid 2532903:tid 2532903] (EAI 2)Name or service not known: [client 144.76.19.72:19564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:09.527649 2026] [ssl:error] [pid 2532903:tid 2532903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:09.579200 2026] [ssl:error] [pid 2529749:tid 2529749] (EAI 2)Name or service not known: [client 144.76.19.72:28002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:09.579231 2026] [ssl:error] [pid 2529749:tid 2529749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:09.770018 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 146.70.194.222:57748] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Exception/HTTP/error_log
[Thu Jul 30 09:19:09.785544 2026] [security2:error] [pid 2536512:tid 2536512] [client 110.249.202.31:19928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI_Ykr4sKZ0CW2Lbep0gAAAAY"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:10.591613 2026] [security2:error] [pid 2532903:tid 2532903] [client 110.249.202.88:12520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI_q5beE8sMkNUXA8kHQAAABo"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:11.418710 2026] [security2:error] [pid 2528502:tid 2528502] [client 110.249.202.188:33212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsI_3WKAl0LeEy_VhKilgAAABw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:11.880774 2026] [authz_core:error] [pid 2529846:tid 2529846] [client 144.172.105.5:48948] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/error_log
[Thu Jul 30 09:19:12.194346 2026] [security2:error] [pid 2535058:tid 2535058] [client 110.249.202.195:56516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJAC_HwAj4vFB1AT5NJQAAABQ"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:12.701716 2026] [ssl:error] [pid 2529715:tid 2529715] (EAI 2)Name or service not known: [client 144.76.19.72:28006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:12.701743 2026] [ssl:error] [pid 2529715:tid 2529715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:12.757915 2026] [ssl:error] [pid 2535058:tid 2535058] (EAI 2)Name or service not known: [client 144.76.19.72:28008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:12.757936 2026] [ssl:error] [pid 2535058:tid 2535058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:12.967880 2026] [security2:error] [pid 2529846:tid 2529846] [client 110.249.202.220:50888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJAF5DX5CZJ4p3tLkQwwAAAC4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:13.046750 2026] [security2:error] [pid 2532734:tid 2532734] [client 43.140.37.167:35988] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alism.com"] [uri "/"] [unique_id "amsJATaViKEUXG6ZhHkLNAAAAAk"]
[Thu Jul 30 09:19:13.123210 2026] [authz_core:error] [pid 2533669:tid 2533669] [client 146.70.194.222:50464] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Exception/Transport/error_log
[Thu Jul 30 09:19:13.694302 2026] [security2:error] [pid 2537787:tid 2537787] [client 110.249.202.71:45156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJAQqUPc2g-lF3e_j3IQAAACQ"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:13.802683 2026] [core:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:54194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/devices/0000:00:05.0/remove
[Thu Jul 30 09:19:13.911161 2026] [authz_core:error] [pid 2533367:tid 2533367] [client 146.70.194.222:50478] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Proxy/error_log
[Thu Jul 30 09:19:14.164014 2026] [security2:error] [pid 2532764:tid 2532764] [client 105.155.141.135:53271] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJAu5pwIZ9ky1WN1UV6QAAAAw"]
[Thu Jul 30 09:19:14.164081 2026] [security2:error] [pid 2532764:tid 2532764] [client 105.155.141.135:53271] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJAu5pwIZ9ky1WN1UV6QAAAAw"]
[Thu Jul 30 09:19:14.164341 2026] [security2:error] [pid 2532764:tid 2532764] [client 105.155.141.135:53271] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJAu5pwIZ9ky1WN1UV6QAAAAw"]
[Thu Jul 30 09:19:14.361715 2026] [security2:error] [pid 2537718:tid 2537718] [client 94.154.43.185:59402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo.mjs-services.com"] [uri "/.env"] [unique_id "amsJAvi0I7yf3B3eS0-3tAAAABM"]
[Thu Jul 30 09:19:14.361881 2026] [security2:error] [pid 2537718:tid 2537718] [client 94.154.43.185:59402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "demo.mjs-services.com"] [uri "/.env"] [unique_id "amsJAvi0I7yf3B3eS0-3tAAAABM"]
[Thu Jul 30 09:19:14.460379 2026] [security2:error] [pid 2537786:tid 2537786] [client 110.249.202.195:38504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJAuM5BTHgaFTH3sOR7AAAAB4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:14.520775 2026] [authz_core:error] [pid 2537788:tid 2537788] [client 146.70.194.222:50488] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Response/error_log
[Thu Jul 30 09:19:15.169251 2026] [authz_core:error] [pid 2537787:tid 2537787] [client 146.70.194.222:50504] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Transport/error_log
[Thu Jul 30 09:19:15.265852 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.218:51528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJAyXKGwIY1Yv3vOb74wAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:15.704239 2026] [lsapi:error] [pid 2532796:tid 2532796] [client 45.158.164.139:44292] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 131072 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-recovery-mode.php on line 172\n, referer: https://demo.mjs-services.com/wp-cron.php?doing_wp_cron=1785399555.1060531139373779296875
[Thu Jul 30 09:19:15.725443 2026] [security2:error] [pid 2537788:tid 2537788] [client 146.70.194.222:50514] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "spamp.com"] [uri "/wp-includes/Requests/Transport/fsockopen.php"] [unique_id "amsJA9bqCWdRLhigEE95uAAAACg"]
[Thu Jul 30 09:19:15.725535 2026] [security2:error] [pid 2537788:tid 2537788] [client 146.70.194.222:50514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/wp-includes/Requests/Transport/fsockopen.php"] [unique_id "amsJA9bqCWdRLhigEE95uAAAACg"]
[Thu Jul 30 09:19:15.727294 2026] [security2:error] [pid 2537718:tid 2537718] [client 94.154.43.185:59402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "demo.mjs-services.com"] [uri "/index.php"] [unique_id "amsJAvi0I7yf3B3eS0-3tAAAABM"]
[Thu Jul 30 09:19:15.814222 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:28012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:15.814268 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:15.870194 2026] [ssl:error] [pid 2537787:tid 2537787] (EAI 2)Name or service not known: [client 144.76.19.72:28026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:15.870231 2026] [ssl:error] [pid 2537787:tid 2537787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:15.927375 2026] [security2:error] [pid 2537788:tid 2537788] [client 146.70.194.222:50514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amsJA9bqCWdRLhigEE95uAAAACg"]
[Thu Jul 30 09:19:16.128961 2026] [security2:error] [pid 2535096:tid 2535096] [client 110.249.202.110:63210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJBKsoJWwt6NP6ze2VYAAAABU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:16.521388 2026] [authz_core:error] [pid 2537788:tid 2537788] [client 146.70.194.222:50514] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/SimplePie/error_log
[Thu Jul 30 09:19:16.650288 2026] [cgi:error] [pid 2524670:tid 2524670] [client 216.73.216.199:45598] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/sv.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:19:16.650333 2026] [cgi:error] [pid 2524670:tid 2524670] [client 216.73.216.199:45598] End of script output before headers: sv.pl
[Thu Jul 30 09:19:16.928272 2026] [security2:error] [pid 2537786:tid 2537786] [client 110.249.202.159:41230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJBOM5BTHgaFTH3sOR7gAAAB4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:17.077076 2026] [authz_core:error] [pid 2537788:tid 2537788] [client 146.70.194.222:50514] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/SimplePie/Cache/error_log
[Thu Jul 30 09:19:17.364433 2026] [core:error] [pid 2523866:tid 2523866] (13)Permission denied: [client 216.73.216.199:54194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/acpi-ged/uevent
[Thu Jul 30 09:19:17.662604 2026] [security2:error] [pid 2535096:tid 2535096] [client 110.249.202.71:55966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJBasoJWwt6NP6ze2VYQAAABU"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:17.814345 2026] [security2:error] [pid 2518708:tid 2518708] [client 8.222.239.71:44749] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJBcBE1NQnMrj8NdmCIwAAACI"]
[Thu Jul 30 09:19:17.814389 2026] [security2:error] [pid 2518708:tid 2518708] [client 8.222.239.71:44749] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJBcBE1NQnMrj8NdmCIwAAACI"]
[Thu Jul 30 09:19:17.814627 2026] [security2:error] [pid 2518708:tid 2518708] [client 8.222.239.71:44749] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJBcBE1NQnMrj8NdmCIwAAACI"]
[Thu Jul 30 09:19:18.446692 2026] [security2:error] [pid 2537717:tid 2537717] [client 110.249.202.213:43346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJBv-cDudpOfXry4PcdwAAABI"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:18.599913 2026] [security2:error] [pid 2535096:tid 2535096] [client 170.106.181.163:40948] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.co.uk"] [uri "/"] [unique_id "amsJBqsoJWwt6NP6ze2VYgAAABU"]
[Thu Jul 30 09:19:18.928304 2026] [ssl:error] [pid 2537786:tid 2537786] (EAI 2)Name or service not known: [client 144.76.19.72:28032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:18.928334 2026] [ssl:error] [pid 2537786:tid 2537786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:18.985808 2026] [ssl:error] [pid 2525053:tid 2525053] (EAI 2)Name or service not known: [client 144.76.19.72:28036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:18.985838 2026] [ssl:error] [pid 2525053:tid 2525053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:19.252743 2026] [security2:error] [pid 2537786:tid 2537786] [client 110.249.202.208:21078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJB-M5BTHgaFTH3sOR8QAAAB4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:19.742341 2026] [security2:error] [pid 2532734:tid 2532734] [client 170.106.181.163:58700] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsJBzaViKEUXG6ZhHkLOwAAAAk"], referer: http://www.spampmusic.co.uk
[Thu Jul 30 09:19:20.095724 2026] [security2:error] [pid 2537786:tid 2537786] [client 110.249.202.171:46076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJCOM5BTHgaFTH3sOR8gAAAB4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:20.812757 2026] [security2:error] [pid 2538132:tid 2538132] [client 110.249.202.120:11422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJCE4csn2Hb1osIPcqBAAAACo"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:20.908677 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 57.141.0.52:28012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:20.909302 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 57.141.0.52:28012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:21.589308 2026] [security2:error] [pid 2529748:tid 2529748] [client 110.249.202.150:51326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJCboknnVK7uKpm-05DQAAACM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:21.652830 2026] [security2:error] [pid 2533577:tid 2533577] [client 8.222.239.71:18487] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJCUVFZnqv7r_HSBdJOAAAAAM"]
[Thu Jul 30 09:19:21.652906 2026] [security2:error] [pid 2533577:tid 2533577] [client 8.222.239.71:18487] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJCUVFZnqv7r_HSBdJOAAAAAM"]
[Thu Jul 30 09:19:21.653261 2026] [security2:error] [pid 2533577:tid 2533577] [client 8.222.239.71:18487] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJCUVFZnqv7r_HSBdJOAAAAAM"]
[Thu Jul 30 09:19:21.985942 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 144.172.105.5:60504] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/589143552513c61d45c3d31.16511376install/error_log
[Thu Jul 30 09:19:22.039746 2026] [ssl:error] [pid 2538132:tid 2538132] (EAI 2)Name or service not known: [client 144.76.19.72:24062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:22.039778 2026] [ssl:error] [pid 2538132:tid 2538132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:22.095186 2026] [ssl:error] [pid 2532865:tid 2532865] (EAI 2)Name or service not known: [client 144.76.19.72:24064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:22.095242 2026] [ssl:error] [pid 2532865:tid 2532865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:22.182829 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 09:19:22.182954 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 09:19:22.183163 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 09:19:22.183708 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 09:19:22.183794 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 09:19:22.183990 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 09:19:22.184458 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 09:19:22.184542 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 09:19:22.184752 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 09:19:22.184908 2026] [authz_core:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 09:19:22.185306 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 09:19:22.185391 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 09:19:22.185595 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 09:19:22.186103 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 09:19:22.186190 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 09:19:22.186385 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 09:19:22.186891 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 09:19:22.186975 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 09:19:22.187180 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 09:19:22.188459 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 09:19:22.188547 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 09:19:22.188752 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 09:19:22.189238 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 09:19:22.189323 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 09:19:22.189526 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 09:19:22.190479 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 09:19:22.190566 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 09:19:22.190773 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 09:19:22.191301 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 09:19:22.191387 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 09:19:22.191593 2026] [access_compat:error] [pid 2524670:tid 2524670] [client 66.132.195.97:62888] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 09:19:22.389912 2026] [security2:error] [pid 2533577:tid 2533577] [client 110.249.202.246:35134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJCkVFZnqv7r_HSBdJOQAAAAM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:22.868328 2026] [security2:error] [pid 2528502:tid 2528502] [client 114.119.157.183:32781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579478400/request_format~html"] [unique_id "amsJCnWKAl0LeEy_VhKi2gAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579478400/request_format~html/cat_ids~17
[Thu Jul 30 09:19:23.149661 2026] [security2:error] [pid 2532797:tid 2532797] [client 110.249.202.5:61820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJC8VSwDHKUN37iunpdgAAABA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:23.580926 2026] [security2:error] [pid 2538087:tid 2538087] [client 146.70.194.222:50574] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "spamp.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "amsJC5YszPFg6feGkhhqdgAAABk"]
[Thu Jul 30 09:19:23.581035 2026] [security2:error] [pid 2538087:tid 2538087] [client 146.70.194.222:50574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "amsJC5YszPFg6feGkhhqdgAAABk"]
[Thu Jul 30 09:19:23.795082 2026] [security2:error] [pid 2538087:tid 2538087] [client 146.70.194.222:50574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amsJC5YszPFg6feGkhhqdgAAABk"]
[Thu Jul 30 09:19:24.029394 2026] [security2:error] [pid 2532797:tid 2532797] [client 110.249.202.107:60162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJDMVSwDHKUN37iunpdwAAABA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:24.659552 2026] [security2:error] [pid 2529526:tid 2529526] [client 114.119.157.183:32787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579478400/request_format~html"] [unique_id "amsJDEmkEskEfrdK6-Yn7QAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579478400/request_format~html/cat_ids~17
[Thu Jul 30 09:19:24.852860 2026] [security2:error] [pid 2538304:tid 2538304] [client 110.249.202.102:50942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJDFU9OTCsd8OrsfB8sQAAACs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:25.149456 2026] [ssl:error] [pid 2533367:tid 2533367] (EAI 2)Name or service not known: [client 144.76.19.72:24074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:25.149488 2026] [ssl:error] [pid 2533367:tid 2533367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:25.204310 2026] [ssl:error] [pid 2538351:tid 2538351] (EAI 2)Name or service not known: [client 144.76.19.72:24076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:25.204349 2026] [ssl:error] [pid 2538351:tid 2538351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:25.716882 2026] [security2:error] [pid 2537717:tid 2537717] [client 110.249.202.5:48066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJDf-cDudpOfXry4PceQAAABI"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:26.462383 2026] [security2:error] [pid 2538304:tid 2538304] [client 110.249.202.173:20164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJDlU9OTCsd8OrsfB8swAAACs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:27.013213 2026] [authz_core:error] [pid 2535137:tid 2535137] [client 146.70.194.222:46760] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/block-patterns/error_log
[Thu Jul 30 09:19:27.229984 2026] [security2:error] [pid 2538087:tid 2538087] [client 110.249.202.25:38202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJD5YszPFg6feGkhhqmAAAABk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:27.952087 2026] [authz_core:error] [pid 2538478:tid 2538478] [client 146.70.194.222:46806] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/block-supports/error_log
[Thu Jul 30 09:19:28.028968 2026] [security2:error] [pid 2537717:tid 2537717] [client 110.249.202.162:60968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJEP-cDudpOfXry4PcfwAAABI"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:28.261175 2026] [ssl:error] [pid 2538350:tid 2538350] (EAI 2)Name or service not known: [client 144.76.19.72:24092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:28.261201 2026] [ssl:error] [pid 2538350:tid 2538350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:28.316890 2026] [ssl:error] [pid 2538350:tid 2538350] (EAI 2)Name or service not known: [client 144.76.19.72:24102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:28.316916 2026] [ssl:error] [pid 2538350:tid 2538350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:28.543490 2026] [authz_core:error] [pid 2529748:tid 2529748] [client 144.172.105.5:41576] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/error_log
[Thu Jul 30 09:19:28.849776 2026] [security2:error] [pid 2537788:tid 2537788] [client 110.249.202.200:16578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJENbqCWdRLhigEE951wAAACg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:29.273135 2026] [ssl:error] [pid 2529845:tid 2529845] (70014)End of file found: [client 216.73.216.199:11897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:29.569635 2026] [ssl:error] [pid 2537161:tid 2537161] (70014)End of file found: [client 216.73.216.199:61258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:30.017530 2026] [security2:error] [pid 2527098:tid 2527098] [client 110.249.202.206:41020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJEvbgLO_vx1x-F8upXAAAAAc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:30.291533 2026] [autoindex:error] [pid 2538567:tid 2538567] (13)Permission denied: [client 216.73.216.199:36478] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/home/qse/
[Thu Jul 30 09:19:30.429650 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 144.172.105.5:41592] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Canvas/error_log
[Thu Jul 30 09:19:30.922356 2026] [security2:error] [pid 2535138:tid 2535138] [client 110.249.202.61:28416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJEoNITXp7jlm-C8hjBwAAACc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:31.347698 2026] [security2:error] [pid 2537718:tid 2537718] [client 185.191.171.5:15722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/uninstall-dell-command-update-powershell"] [unique_id "amsJE_i0I7yf3B3eS0-3vAAAABM"]
[Thu Jul 30 09:19:31.370836 2026] [ssl:error] [pid 2532865:tid 2532865] (EAI 2)Name or service not known: [client 144.76.19.72:62282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:31.370868 2026] [ssl:error] [pid 2532865:tid 2532865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:31.424232 2026] [ssl:error] [pid 2537788:tid 2537788] (EAI 2)Name or service not known: [client 144.76.19.72:62296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:31.424289 2026] [ssl:error] [pid 2537788:tid 2537788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:31.640957 2026] [security2:error] [pid 2535138:tid 2535138] [client 110.249.202.172:31700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJE4NITXp7jlm-C8hjCAAAACc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:32.444095 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 66.249.66.34:54123] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:19:32.446849 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 66.249.66.34:54123] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:19:32.493300 2026] [security2:error] [pid 2529846:tid 2529846] [client 110.249.202.107:31524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJFF5DX5CZJ4p3tLkQyQAAAC4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:32.858203 2026] [security2:error] [pid 2538351:tid 2538351] [client 185.191.171.8:24006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/obituary-barry-van-dyke's-funeral"] [unique_id "amsJFGhN9l1aOWlXMYa-QwAAAC8"]
[Thu Jul 30 09:19:32.868614 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 09:19:32.868725 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 09:19:32.868916 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 09:19:32.869124 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 09:19:32.869202 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 09:19:32.869384 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 09:19:32.869553 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 09:19:32.869638 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 09:19:32.869821 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 09:19:32.869948 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 09:19:32.870004 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 09:19:32.870106 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 09:19:32.870290 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 09:19:32.870462 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 09:19:32.870536 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 09:19:32.870746 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 09:19:32.870919 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 09:19:32.870995 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 09:19:32.871195 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 09:19:32.872131 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 09:19:32.872208 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 09:19:32.872392 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 09:19:32.872597 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 09:19:32.872672 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 09:19:32.872855 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 09:19:32.873421 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 09:19:32.873498 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 09:19:32.873689 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 09:19:32.873859 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 09:19:32.873934 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 09:19:32.874124 2026] [access_compat:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 09:19:33.153685 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "clientseodata.com"] [uri "/6FZuDC.bak"] [unique_id "amsJFTQiRvR9IF4DNDVyAQAAADU"]
[Thu Jul 30 09:19:33.153896 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clientseodata.com"] [uri "/6FZuDC.bak"] [unique_id "amsJFTQiRvR9IF4DNDVyAQAAADU"]
[Thu Jul 30 09:19:33.154155 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "clientseodata.com"] [uri "/6FZuDC.bak"] [unique_id "amsJFTQiRvR9IF4DNDVyAQAAADU"]
[Thu Jul 30 09:19:33.187178 2026] [ssl:error] [pid 2538567:tid 2538567] (70014)End of file found: [client 216.73.216.199:36478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:33.258199 2026] [security2:error] [pid 2532734:tid 2532734] [client 110.249.202.189:19598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJFTaViKEUXG6ZhHkLTAAAAAk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:33.408624 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "clientseodata.com"] [uri "/73velX.bak"] [unique_id "amsJFTQiRvR9IF4DNDVyAgAAADU"]
[Thu Jul 30 09:19:33.408851 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clientseodata.com"] [uri "/73velX.bak"] [unique_id "amsJFTQiRvR9IF4DNDVyAgAAADU"]
[Thu Jul 30 09:19:33.409060 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "clientseodata.com"] [uri "/73velX.bak"] [unique_id "amsJFTQiRvR9IF4DNDVyAgAAADU"]
[Thu Jul 30 09:19:33.848558 2026] [security2:error] [pid 2533918:tid 2533918] [client 47.128.45.254:35290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/robots.txt"] [unique_id "amsJFUjl36qGbI0GaZQ3OgAAAAo"]
[Thu Jul 30 09:19:34.048446 2026] [security2:error] [pid 2533669:tid 2533669] [client 110.249.202.53:21478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJFjYpIRoooV2L-4Kg4AAAABg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:34.066638 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "clientseodata.com"] [uri "/cjlMuwS.bak"] [unique_id "amsJFjQiRvR9IF4DNDVyBQAAADU"]
[Thu Jul 30 09:19:34.066869 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clientseodata.com"] [uri "/cjlMuwS.bak"] [unique_id "amsJFjQiRvR9IF4DNDVyBQAAADU"]
[Thu Jul 30 09:19:34.067148 2026] [security2:error] [pid 2538565:tid 2538565] [client 66.132.195.97:19514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "clientseodata.com"] [uri "/cjlMuwS.bak"] [unique_id "amsJFjQiRvR9IF4DNDVyBQAAADU"]
[Thu Jul 30 09:19:34.526043 2026] [ssl:error] [pid 2523866:tid 2523866] (EAI 2)Name or service not known: [client 144.76.19.72:62304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:34.526080 2026] [ssl:error] [pid 2523866:tid 2523866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:34.581727 2026] [ssl:error] [pid 2529526:tid 2529526] (EAI 2)Name or service not known: [client 144.76.19.72:62320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:34.581755 2026] [ssl:error] [pid 2529526:tid 2529526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:34.589866 2026] [ssl:error] [pid 2538087:tid 2538087] (70014)End of file found: [client 216.73.216.199:48553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:34.858826 2026] [security2:error] [pid 2533669:tid 2533669] [client 110.249.202.174:49680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJFjYpIRoooV2L-4Kg4QAAABg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:35.589693 2026] [security2:error] [pid 2529526:tid 2529526] [client 110.249.202.99:23514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJF0mkEskEfrdK6-Yn9QAAAA0"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:35.596685 2026] [core:error] [pid 2529845:tid 2529845] (13)Permission denied: [client 216.73.216.199:63329] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/hillingdonarts.org.uk.db
[Thu Jul 30 09:19:35.902904 2026] [core:crit] [pid 2529845:tid 2529845] (13)Permission denied: [client 216.73.216.199:63329] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/lost+found/' is executable
[Thu Jul 30 09:19:35.929018 2026] [core:crit] [pid 2529845:tid 2529845] (13)Permission denied: [client 216.73.216.199:63329] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/root/' is executable
[Thu Jul 30 09:19:36.315988 2026] [security2:error] [pid 2537161:tid 2537161] [client 110.249.202.24:57644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJGP7KNmJnOlH-mGH0SQAAAA4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:36.799923 2026] [core:error] [pid 2529845:tid 2529845] (13)Permission denied: [client 216.73.216.199:63329] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-280/reclaim_account
[Thu Jul 30 09:19:37.245479 2026] [security2:error] [pid 2538568:tid 2538568] [client 110.249.202.230:28934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJGYKs91cQ_0KzD9hcwgAAADg"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:37.404785 2026] [autoindex:error] [pid 2529845:tid 2529845] (13)Permission denied: [client 216.73.216.199:63329] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/equinoxk/
[Thu Jul 30 09:19:37.666476 2026] [ssl:error] [pid 2537787:tid 2537787] (EAI 2)Name or service not known: [client 144.76.19.72:62326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:37.666504 2026] [ssl:error] [pid 2537787:tid 2537787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:37.723694 2026] [ssl:error] [pid 2533577:tid 2533577] (EAI 2)Name or service not known: [client 144.76.19.72:62332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:37.723722 2026] [ssl:error] [pid 2533577:tid 2533577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:37.944912 2026] [authz_core:error] [pid 2538350:tid 2538350] [client 57.141.0.4:34280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:37.945596 2026] [authz_core:error] [pid 2538350:tid 2538350] [client 57.141.0.4:34280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:38.139342 2026] [security2:error] [pid 2523866:tid 2523866] [client 110.249.202.133:36230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJGv5B2Lny6Fi4WqOqHwAAABE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:38.872849 2026] [security2:error] [pid 2538350:tid 2538350] [client 110.249.202.105:49674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJGt9QsW6OhRBVx5uu8gAAACw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:39.277845 2026] [authz_core:error] [pid 2538567:tid 2538567] [client 144.172.105.5:43984] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/error_log
[Thu Jul 30 09:19:39.432974 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.65:62594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:39.433600 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.65:62594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:39.510157 2026] [core:error] [pid 2529845:tid 2529845] (13)Permission denied: [client 216.73.216.199:63329] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/marcwhiffen.co.uk.db
[Thu Jul 30 09:19:39.629426 2026] [security2:error] [pid 2533577:tid 2533577] [client 110.249.202.25:25990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJG0VFZnqv7r_HSBdJQQAAAAM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:40.112510 2026] [core:error] [pid 2529845:tid 2529845] (13)Permission denied: [client 216.73.216.199:63329] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/rediscoveredgarden.co.uk.db
[Thu Jul 30 09:19:40.332684 2026] [security2:error] [pid 2523866:tid 2523866] [client 110.249.202.198:53890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJHP5B2Lny6Fi4WqOqIQAAABE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:40.350751 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:19:40.353572 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:19:40.546643 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:19:40.549313 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:19:40.781328 2026] [ssl:error] [pid 2538521:tid 2538521] (EAI 2)Name or service not known: [client 144.76.19.72:43870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:40.781377 2026] [ssl:error] [pid 2538521:tid 2538521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:40.839908 2026] [ssl:error] [pid 2528502:tid 2528502] (EAI 2)Name or service not known: [client 144.76.19.72:43884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:40.839937 2026] [ssl:error] [pid 2528502:tid 2528502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:41.090668 2026] [security2:error] [pid 2538566:tid 2538566] [client 110.249.202.3:53356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJHWAzkkMNRru8EAejLgAAADY"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:41.918253 2026] [ssl:error] [pid 2529845:tid 2529845] (70014)End of file found: [client 216.73.216.199:63329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:41.926023 2026] [security2:error] [pid 2533918:tid 2533918] [client 110.249.202.92:52496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJHUjl36qGbI0GaZQ3SgAAAAo"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:42.719987 2026] [security2:error] [pid 2538087:tid 2538087] [client 110.249.202.210:63354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJHpYszPFg6feGkhhqowAAABk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:43.626662 2026] [security2:error] [pid 2535137:tid 2535137] [client 110.249.202.191:12228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJH7Y6AUW_ZsXORTxt3wAAAB8"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:43.695750 2026] [authz_core:error] [pid 2532734:tid 2532734] [client 57.141.0.50:36860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:43.696373 2026] [authz_core:error] [pid 2532734:tid 2532734] [client 57.141.0.50:36860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:43.895471 2026] [ssl:error] [pid 2538350:tid 2538350] (EAI 2)Name or service not known: [client 144.76.19.72:43888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:43.895501 2026] [ssl:error] [pid 2538350:tid 2538350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:43.948365 2026] [ssl:error] [pid 2536512:tid 2536512] (EAI 2)Name or service not known: [client 144.76.19.72:43902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:43.948417 2026] [ssl:error] [pid 2536512:tid 2536512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:44.021048 2026] [ssl:error] [pid 2523866:tid 2523866] (70014)End of file found: [client 216.73.216.199:10994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:44.289929 2026] [authz_core:error] [pid 2538130:tid 2538130] [client 20.197.178.120:29392] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 09:19:44.331377 2026] [authz_core:error] [pid 2529846:tid 2529846] [client 146.70.194.222:53498] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/customize/error_log
[Thu Jul 30 09:19:44.441170 2026] [security2:error] [pid 2537787:tid 2537787] [client 110.249.202.60:45728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJIAqUPc2g-lF3e_j3NgAAACQ"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:44.535913 2026] [cgi:error] [pid 2538132:tid 2538132] [client 216.73.216.199:12619] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/ha.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:19:44.535962 2026] [cgi:error] [pid 2538132:tid 2538132] [client 216.73.216.199:12619] End of script output before headers: ha.pl
[Thu Jul 30 09:19:45.116943 2026] [ssl:error] [pid 2537717:tid 2537717] (70014)End of file found: [client 216.73.216.199:7266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:45.236228 2026] [security2:error] [pid 2532865:tid 2532865] [client 110.249.202.32:57012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJIRneiNwed3sS5_rr1AAAABc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:45.273196 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:19:45.275849 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:19:45.492528 2026] [authz_core:error] [pid 2529748:tid 2529748] [client 57.141.0.10:55882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:45.493156 2026] [authz_core:error] [pid 2529748:tid 2529748] [client 57.141.0.10:55882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:45.998853 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:19:46.001512 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:19:46.092611 2026] [security2:error] [pid 2529748:tid 2529748] [client 110.249.202.7:15636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJIroknnVK7uKpm-05GQAAACM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:46.195330 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:19:46.197993 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:19:46.305108 2026] [core:error] [pid 2532865:tid 2532865] [client 57.141.0.59:58440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:19:46.305147 2026] [core:error] [pid 2532865:tid 2532865] [client 57.141.0.59:58440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:19:46.355395 2026] [authz_core:error] [pid 2535137:tid 2535137] [client 144.172.105.5:40862] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Axis/error_log
[Thu Jul 30 09:19:46.414565 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:19:46.417241 2026] [authz_core:error] [pid 2538565:tid 2538565] [client 47.82.10.59:49386] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:19:46.586474 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 57.141.0.39:44442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:46.587104 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 57.141.0.39:44442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:47.007563 2026] [ssl:error] [pid 2538351:tid 2538351] (EAI 2)Name or service not known: [client 144.76.19.72:43910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:47.007605 2026] [ssl:error] [pid 2538351:tid 2538351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:47.063635 2026] [ssl:error] [pid 2537161:tid 2537161] (EAI 2)Name or service not known: [client 144.76.19.72:43924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:47.063678 2026] [ssl:error] [pid 2537161:tid 2537161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:47.238630 2026] [security2:error] [pid 2536512:tid 2536512] [client 216.73.216.199:24028] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/crypto-policies/back-ends/openssl.config"] [unique_id "amsJI4kr4sKZ0CW2Lbep5AAAAAY"]
[Thu Jul 30 09:19:47.238980 2026] [security2:error] [pid 2536512:tid 2536512] [client 216.73.216.199:24028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/crypto-policies/back-ends/openssl.config"] [unique_id "amsJI4kr4sKZ0CW2Lbep5AAAAAY"]
[Thu Jul 30 09:19:47.239282 2026] [security2:error] [pid 2536512:tid 2536512] [client 216.73.216.199:24028] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/crypto-policies/back-ends/openssl.config"] [unique_id "amsJI4kr4sKZ0CW2Lbep5AAAAAY"]
[Thu Jul 30 09:19:47.928635 2026] [security2:error] [pid 2538304:tid 2538304] [client 110.249.202.249:50728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJI1U9OTCsd8OrsfB86AAAACs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:48.634418 2026] [security2:error] [pid 2525053:tid 2525053] [client 110.249.202.143:39036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJJCIPTHvtTkLARZDVjAAAAD4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:48.809820 2026] [authz_core:error] [pid 2538351:tid 2538351] [client 144.172.105.5:40900] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/DataPreprocessor/error_log
[Thu Jul 30 09:19:49.207890 2026] [security2:error] [pid 2533367:tid 2533367] [client 94.154.43.177:18894] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amsJJSXKGwIY1Yv3vOb7_gAAAAA"]
[Thu Jul 30 09:19:49.208163 2026] [security2:error] [pid 2533367:tid 2533367] [client 94.154.43.177:18894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amsJJSXKGwIY1Yv3vOb7_gAAAAA"]
[Thu Jul 30 09:19:49.208370 2026] [security2:error] [pid 2533367:tid 2533367] [client 94.154.43.177:18894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amsJJSXKGwIY1Yv3vOb7_gAAAAA"]
[Thu Jul 30 09:19:49.516144 2026] [security2:error] [pid 2529748:tid 2529748] [client 110.249.202.156:62092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJJboknnVK7uKpm-05HQAAACM"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:50.116708 2026] [ssl:error] [pid 2535138:tid 2535138] (EAI 2)Name or service not known: [client 144.76.19.72:23830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:50.116739 2026] [ssl:error] [pid 2535138:tid 2535138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:50.168384 2026] [ssl:error] [pid 2538566:tid 2538566] (EAI 2)Name or service not known: [client 144.76.19.72:23842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:50.168424 2026] [ssl:error] [pid 2538566:tid 2538566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:50.564298 2026] [security2:error] [pid 2532764:tid 2532764] [client 110.249.202.202:39062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJJu5pwIZ9ky1WN1UV_AAAAAw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:50.955174 2026] [ssl:error] [pid 2536512:tid 2536512] (70014)End of file found: [client 216.73.216.199:24028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:51.485868 2026] [security2:error] [pid 2535138:tid 2535138] [client 110.249.202.70:60146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJJ4NITXp7jlm-C8hjFQAAACc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:51.559211 2026] [ssl:error] [pid 2533669:tid 2533669] (70014)End of file found: [client 216.73.216.199:38809] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:51.942151 2026] [authz_core:error] [pid 2525053:tid 2525053] [client 57.141.0.65:28740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:51.942774 2026] [authz_core:error] [pid 2525053:tid 2525053] [client 57.141.0.65:28740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:52.334209 2026] [security2:error] [pid 2523866:tid 2523866] [client 110.249.202.73:15142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJKP5B2Lny6Fi4WqOqKwAAABE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:52.573846 2026] [authz_core:error] [pid 2527098:tid 2527098] [client 144.172.105.5:40974] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/DataSelector/error_log
[Thu Jul 30 09:19:53.221799 2026] [ssl:error] [pid 2527098:tid 2527098] (EAI 2)Name or service not known: [client 144.76.19.72:23850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:53.221844 2026] [ssl:error] [pid 2527098:tid 2527098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:53.228849 2026] [security2:error] [pid 2523866:tid 2523866] [client 110.249.202.69:41500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJKf5B2Lny6Fi4WqOqLAAAABE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:53.279409 2026] [ssl:error] [pid 2537718:tid 2537718] (EAI 2)Name or service not known: [client 144.76.19.72:23862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:53.279449 2026] [ssl:error] [pid 2537718:tid 2537718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:54.103638 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.47:65344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJKiXKGwIY1Yv3vOb8BAAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:54.203707 2026] [authz_core:error] [pid 2537718:tid 2537718] [client 144.172.105.5:41008] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Dataset/error_log
[Thu Jul 30 09:19:54.871325 2026] [autoindex:error] [pid 2538087:tid 2538087] (13)Permission denied: [client 216.73.216.199:61287] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/khpjyod/
[Thu Jul 30 09:19:54.944717 2026] [security2:error] [pid 2523866:tid 2523866] [client 110.249.202.234:16580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJKv5B2Lny6Fi4WqOqLQAAABE"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:55.757646 2026] [security2:error] [pid 2533367:tid 2533367] [client 110.249.202.218:60204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJKyXKGwIY1Yv3vOb8BQAAAAA"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:56.338619 2026] [ssl:error] [pid 2525053:tid 2525053] (EAI 2)Name or service not known: [client 144.76.19.72:23878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:56.338648 2026] [ssl:error] [pid 2525053:tid 2525053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:56.391773 2026] [ssl:error] [pid 2536512:tid 2536512] (EAI 2)Name or service not known: [client 144.76.19.72:23894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:56.391802 2026] [ssl:error] [pid 2536512:tid 2536512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:56.520150 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 144.172.105.5:56316] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Figure/error_log
[Thu Jul 30 09:19:56.648555 2026] [security2:error] [pid 2538567:tid 2538567] [client 110.249.202.44:41310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJLO5wwnGGOHd0XkHBQAAAADc"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:57.632902 2026] [security2:error] [pid 2537786:tid 2537786] [client 110.249.202.93:50342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJLeM5BTHgaFTH3sOSDAAAAB4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:57.634412 2026] [authz_core:error] [pid 2525053:tid 2525053] [client 57.141.0.23:47288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:19:57.635024 2026] [authz_core:error] [pid 2525053:tid 2525053] [client 57.141.0.23:47288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:19:58.378596 2026] [security2:error] [pid 2537161:tid 2537161] [client 110.249.202.80:17838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJLv7KNmJnOlH-mGH0VQAAAA4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:59.064894 2026] [authz_core:error] [pid 2538130:tid 2538130] [client 20.197.178.120:29392] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/l10n/error_log
[Thu Jul 30 09:19:59.086885 2026] [ssl:error] [pid 2529319:tid 2529319] (70014)End of file found: [client 216.73.216.199:46779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:19:59.141964 2026] [security2:error] [pid 2537786:tid 2537786] [client 110.249.202.198:30244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJL-M5BTHgaFTH3sOSDQAAAB4"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:19:59.447560 2026] [ssl:error] [pid 2537161:tid 2537161] (EAI 2)Name or service not known: [client 144.76.19.72:23910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:59.447597 2026] [ssl:error] [pid 2537161:tid 2537161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:59.503118 2026] [ssl:error] [pid 2538304:tid 2538304] (EAI 2)Name or service not known: [client 144.76.19.72:23924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:19:59.503154 2026] [ssl:error] [pid 2538304:tid 2538304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:19:59.936242 2026] [security2:error] [pid 2538304:tid 2538304] [client 110.249.202.12:20366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJL1U9OTCsd8OrsfB87gAAACs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:00.291694 2026] [core:error] [pid 2538087:tid 2538087] (13)Permission denied: [client 216.73.216.199:61287] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/blackseaexpress.co.uk.db
[Thu Jul 30 09:20:00.371261 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 144.172.105.5:56390] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Grid/error_log
[Thu Jul 30 09:20:00.801687 2026] [security2:error] [pid 2528502:tid 2528502] [client 110.249.202.98:48286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJMHWKAl0LeEy_VhKi7gAAABw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:01.617102 2026] [security2:error] [pid 2538304:tid 2538304] [client 110.249.202.234:13200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJMVU9OTCsd8OrsfB88AAAACs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:02.393630 2026] [security2:error] [pid 2538304:tid 2538304] [client 110.249.202.164:39600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJMlU9OTCsd8OrsfB88QAAACs"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:02.431172 2026] [cgi:error] [pid 2538087:tid 2538087] [client 216.73.216.199:61287] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/to.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:20:02.431221 2026] [cgi:error] [pid 2538087:tid 2538087] [client 216.73.216.199:61287] End of script output before headers: to.pl
[Thu Jul 30 09:20:02.445955 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 66.249.66.35:60964] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:20:02.448708 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 66.249.66.35:60964] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:20:02.558510 2026] [ssl:error] [pid 2532796:tid 2532796] (EAI 2)Name or service not known: [client 144.76.19.72:64288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:02.558534 2026] [ssl:error] [pid 2532796:tid 2532796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:02.614510 2026] [ssl:error] [pid 2538351:tid 2538351] (EAI 2)Name or service not known: [client 144.76.19.72:64302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:02.614540 2026] [ssl:error] [pid 2538351:tid 2538351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:03.202169 2026] [security2:error] [pid 2540032:tid 2540032] [client 110.249.202.112:51366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJM7fggsL0IBQRXAE6RwAAAAk"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:03.973387 2026] [security2:error] [pid 2535058:tid 2535058] [client 110.249.202.102:36338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJMy_HwAj4vFB1AT5NPwAAABQ"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:04.101732 2026] [authz_core:error] [pid 2527098:tid 2527098] [client 144.172.105.5:56432] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Line/error_log
[Thu Jul 30 09:20:04.692023 2026] [security2:error] [pid 2540259:tid 2540259] [client 110.249.202.102:48272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJNN2DjuIbYahyagd5DwAAAAw"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:05.506695 2026] [security2:error] [pid 2537663:tid 2537663] [client 110.249.202.67:11652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf"] [unique_id "amsJNWrRCvNV6USI3sBIbgAAAAI"], referer: http://shelterforum.info/wp-test2014/wp-content/uploads/2014/03/Yetunde-Abudul1.pdf
[Thu Jul 30 09:20:05.722166 2026] [core:error] [pid 2532796:tid 2532796] (13)Permission denied: [client 216.73.216.199:22356] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/pant-glas.co.uk.db
[Thu Jul 30 09:20:05.779975 2026] [ssl:error] [pid 2537786:tid 2537786] (EAI 2)Name or service not known: [client 144.76.19.72:64304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:05.780009 2026] [ssl:error] [pid 2537786:tid 2537786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:05.835651 2026] [ssl:error] [pid 2540259:tid 2540259] (EAI 2)Name or service not known: [client 144.76.19.72:64312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:05.835682 2026] [ssl:error] [pid 2540259:tid 2540259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:05.924856 2026] [authz_core:error] [pid 2540335:tid 2540335] [client 144.172.105.5:39208] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Marker/error_log
[Thu Jul 30 09:20:08.296475 2026] [core:error] [pid 2529845:tid 2529845] [client 66.249.64.170:55915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:08.296499 2026] [core:error] [pid 2529845:tid 2529845] [client 66.249.64.170:55915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:08.725201 2026] [autoindex:error] [pid 2532796:tid 2532796] (13)Permission denied: [client 216.73.216.199:22356] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/home/davidact/
[Thu Jul 30 09:20:08.891563 2026] [ssl:error] [pid 2538132:tid 2538132] (EAI 2)Name or service not known: [client 144.76.19.72:64328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:08.891597 2026] [ssl:error] [pid 2538132:tid 2538132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:08.946104 2026] [ssl:error] [pid 2525053:tid 2525053] (EAI 2)Name or service not known: [client 144.76.19.72:64336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:08.946127 2026] [ssl:error] [pid 2525053:tid 2525053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:10.833197 2026] [core:error] [pid 2532796:tid 2532796] (13)Permission denied: [client 216.73.216.199:22356] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/maillog-20260705
[Thu Jul 30 09:20:12.001083 2026] [ssl:error] [pid 2540839:tid 2540839] (EAI 2)Name or service not known: [client 144.76.19.72:51252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:12.001120 2026] [ssl:error] [pid 2540839:tid 2540839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:12.116590 2026] [ssl:error] [pid 2518708:tid 2518708] (EAI 2)Name or service not known: [client 144.76.19.72:51266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:12.116613 2026] [ssl:error] [pid 2518708:tid 2518708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:12.552760 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 144.172.105.5:39360] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Marker/Pointing/error_log
[Thu Jul 30 09:20:13.100035 2026] [security2:error] [pid 2535137:tid 2535137] [client 43.153.58.28:49956] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yourpartyyourway.com"] [uri "/"] [unique_id "amsJPbY6AUW_ZsXORTxt8gAAAB8"], referer: http://yourpartyyourway.com
[Thu Jul 30 09:20:13.656628 2026] [authz_core:error] [pid 2540903:tid 2540903] [client 144.172.105.5:39392] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Plot/error_log
[Thu Jul 30 09:20:14.083365 2026] [core:error] [pid 2518708:tid 2518708] [client 66.249.66.8:55761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:14.083398 2026] [core:error] [pid 2518708:tid 2518708] [client 66.249.66.8:55761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:14.146706 2026] [ssl:error] [pid 2532796:tid 2532796] (70014)End of file found: [client 216.73.216.199:22356] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:14.447738 2026] [core:error] [pid 2537717:tid 2537717] (13)Permission denied: [client 216.73.216.199:43074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/newtronicmedia.com.db
[Thu Jul 30 09:20:14.540872 2026] [security2:error] [pid 2540402:tid 2540402] [client 43.153.58.28:50558] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amsJPg06BU2qmC9YS1boQgAAAB0"]
[Thu Jul 30 09:20:15.174663 2026] [ssl:error] [pid 2540401:tid 2540401] (EAI 2)Name or service not known: [client 144.76.19.72:51282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:15.174697 2026] [ssl:error] [pid 2540401:tid 2540401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:15.230964 2026] [ssl:error] [pid 2532797:tid 2532797] (EAI 2)Name or service not known: [client 144.76.19.72:51288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:15.230991 2026] [ssl:error] [pid 2532797:tid 2532797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:15.760727 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 57.141.0.49:62902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:15.761344 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 57.141.0.49:62902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:17.063191 2026] [core:error] [pid 2537717:tid 2537717] (13)Permission denied: [client 216.73.216.199:43074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/drivers/thunderbolt/uevent
[Thu Jul 30 09:20:18.286877 2026] [ssl:error] [pid 2529846:tid 2529846] (EAI 2)Name or service not known: [client 144.76.19.72:51294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:18.286925 2026] [ssl:error] [pid 2529846:tid 2529846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:18.341135 2026] [ssl:error] [pid 2540335:tid 2540335] (EAI 2)Name or service not known: [client 144.76.19.72:51310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:18.341165 2026] [ssl:error] [pid 2540335:tid 2540335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:18.868810 2026] [core:error] [pid 2537717:tid 2537717] (13)Permission denied: [client 216.73.216.199:43074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cud_item/free_calls
[Thu Jul 30 09:20:19.407492 2026] [authz_core:error] [pid 2527098:tid 2527098] [client 144.172.105.5:36374] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Plot/Smoothed/error_log
[Thu Jul 30 09:20:20.373263 2026] [ssl:error] [pid 2537717:tid 2537717] (70014)End of file found: [client 216.73.216.199:43074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:20.690562 2026] [authz_core:error] [pid 2525053:tid 2525053] [client 146.70.194.222:46192] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/error_log
[Thu Jul 30 09:20:20.798710 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.18:43190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:20.799383 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.18:43190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:21.259434 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 144.172.105.5:36406] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Image/Graph/Plotarea/error_log
[Thu Jul 30 09:20:21.284740 2026] [authz_core:error] [pid 2535137:tid 2535137] [client 146.70.194.222:46194] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 09:20:21.331596 2026] [ssl:error] [pid 2532903:tid 2532903] (70014)End of file found: [client 216.73.216.199:62372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:21.399736 2026] [ssl:error] [pid 2540403:tid 2540403] (EAI 2)Name or service not known: [client 144.76.19.72:50164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:21.399766 2026] [ssl:error] [pid 2540403:tid 2540403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:21.459412 2026] [ssl:error] [pid 2533668:tid 2533668] (EAI 2)Name or service not known: [client 144.76.19.72:50168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:21.459444 2026] [ssl:error] [pid 2533668:tid 2533668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:21.670419 2026] [core:error] [pid 2529845:tid 2529845] [client 66.249.64.171:52021] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:21.670449 2026] [core:error] [pid 2529845:tid 2529845] [client 66.249.64.171:52021] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:21.819264 2026] [security2:error] [pid 2540902:tid 2540902] [client 216.73.216.199:37925] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/container/cl-quotas.dat"] [unique_id "amsJRf5NpVIkJBIkFaWL1QAAAC8"]
[Thu Jul 30 09:20:21.819519 2026] [security2:error] [pid 2540902:tid 2540902] [client 216.73.216.199:37925] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/container/cl-quotas.dat"] [unique_id "amsJRf5NpVIkJBIkFaWL1QAAAC8"]
[Thu Jul 30 09:20:21.819732 2026] [security2:error] [pid 2540902:tid 2540902] [client 216.73.216.199:37925] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/container/cl-quotas.dat"] [unique_id "amsJRf5NpVIkJBIkFaWL1QAAAC8"]
[Thu Jul 30 09:20:21.929152 2026] [core:error] [pid 2540902:tid 2540902] (13)Permission denied: [client 216.73.216.199:37925] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory14/subsystem/uevent
[Thu Jul 30 09:20:22.230743 2026] [ssl:error] [pid 2540902:tid 2540902] (70014)End of file found: [client 216.73.216.199:37925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:22.583978 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 82.102.18.190:38476] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/maint/error_log
[Thu Jul 30 09:20:23.138845 2026] [ssl:error] [pid 2535137:tid 2535137] (70014)End of file found: [client 216.73.216.199:25819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:23.976908 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 146.70.194.222:47176] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:20:24.511540 2026] [ssl:error] [pid 2540403:tid 2540403] (EAI 2)Name or service not known: [client 144.76.19.72:50184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:24.511567 2026] [ssl:error] [pid 2540403:tid 2540403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:24.565946 2026] [ssl:error] [pid 2540903:tid 2540903] (EAI 2)Name or service not known: [client 144.76.19.72:50196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:24.565980 2026] [ssl:error] [pid 2540903:tid 2540903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:24.762873 2026] [authz_core:error] [pid 2540403:tid 2540403] [client 146.70.194.222:47220] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/search/error_log
[Thu Jul 30 09:20:24.782877 2026] [security2:error] [pid 2525053:tid 2525053] [client 81.8.91.201:46878] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "blow-hairstudio.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsJSCIPTHvtTkLARZDVxgAAAD4"]
[Thu Jul 30 09:20:24.920936 2026] [authz_core:error] [pid 2540259:tid 2540259] [client 57.141.0.39:24744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:24.921550 2026] [authz_core:error] [pid 2540259:tid 2540259] [client 57.141.0.39:24744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:24.936829 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.53:44048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:24.937471 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.53:44048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:26.235347 2026] [authz_core:error] [pid 2540403:tid 2540403] [client 146.70.194.222:47234] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 09:20:26.628868 2026] [ssl:error] [pid 2537788:tid 2537788] (70014)End of file found: [client 216.73.216.199:62672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:27.142342 2026] [authz_core:error] [pid 2540839:tid 2540839] [client 57.141.0.1:53706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:27.142963 2026] [authz_core:error] [pid 2540839:tid 2540839] [client 57.141.0.1:53706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:27.529346 2026] [authz_core:error] [pid 2537663:tid 2537663] [client 146.70.194.222:47266] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 09:20:27.532340 2026] [core:error] [pid 2532903:tid 2532903] [client 66.249.64.170:53466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:27.532361 2026] [core:error] [pid 2532903:tid 2532903] [client 66.249.64.170:53466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:27.539291 2026] [ssl:error] [pid 2518708:tid 2518708] (70014)End of file found: [client 216.73.216.199:62750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:27.622471 2026] [ssl:error] [pid 2532796:tid 2532796] (EAI 2)Name or service not known: [client 144.76.19.72:50208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:27.622495 2026] [ssl:error] [pid 2532796:tid 2532796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:27.674054 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:50214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:27.674091 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:28.338115 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 146.70.194.222:47272] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/error_log
[Thu Jul 30 09:20:28.442132 2026] [ssl:error] [pid 2532903:tid 2532903] (70014)End of file found: [client 216.73.216.199:45158] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:28.943206 2026] [authz_core:error] [pid 2538478:tid 2538478] [client 146.70.194.222:47274] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/error_log
[Thu Jul 30 09:20:29.600079 2026] [authz_core:error] [pid 2529319:tid 2529319] [client 146.70.194.222:47296] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/ChaCha20/error_log
[Thu Jul 30 09:20:29.717180 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 66.249.66.34:44036] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:20:29.719878 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 66.249.66.34:44036] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:20:30.315987 2026] [authz_core:error] [pid 2535058:tid 2535058] [client 146.70.194.222:47322] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/Curve25519/error_log
[Thu Jul 30 09:20:30.727877 2026] [ssl:error] [pid 2538087:tid 2538087] (EAI 2)Name or service not known: [client 144.76.19.72:33612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:30.727917 2026] [ssl:error] [pid 2538087:tid 2538087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:30.785918 2026] [ssl:error] [pid 2529319:tid 2529319] (EAI 2)Name or service not known: [client 144.76.19.72:33622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:30.785951 2026] [ssl:error] [pid 2529319:tid 2529319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:30.880168 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 146.70.194.222:47334] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/error_log
[Thu Jul 30 09:20:31.085488 2026] [authz_core:error] [pid 2533668:tid 2533668] [client 144.172.105.5:36444] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Smarty/libs/error_log
[Thu Jul 30 09:20:32.004131 2026] [ssl:error] [pid 2529319:tid 2529319] (70014)End of file found: [client 216.73.216.199:41439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:32.324058 2026] [authz_core:error] [pid 2537094:tid 2537094] [client 146.70.194.222:47420] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/Poly1305/error_log
[Thu Jul 30 09:20:33.438971 2026] [authz_core:error] [pid 2537786:tid 2537786] [client 66.249.66.33:44212] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:20:33.441678 2026] [authz_core:error] [pid 2537786:tid 2537786] [client 66.249.66.33:44212] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:20:33.583387 2026] [authz_core:error] [pid 2532903:tid 2532903] [client 146.70.194.222:56750] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/error_log
[Thu Jul 30 09:20:33.659697 2026] [authz_core:error] [pid 2523866:tid 2523866] [client 82.102.18.190:38476] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 09:20:33.839785 2026] [ssl:error] [pid 2542119:tid 2542119] (EAI 2)Name or service not known: [client 144.76.19.72:33624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:33.839814 2026] [ssl:error] [pid 2542119:tid 2542119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:33.896014 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:33638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:33.896049 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:34.139420 2026] [authz_core:error] [pid 2532903:tid 2532903] [client 146.70.194.222:56750] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 09:20:35.151641 2026] [authz_core:error] [pid 2525053:tid 2525053] [client 57.141.0.19:48916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:35.152294 2026] [authz_core:error] [pid 2525053:tid 2525053] [client 57.141.0.19:48916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:35.389987 2026] [authz_core:error] [pid 2541672:tid 2541672] [client 144.172.105.5:36270] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Smarty/libs/plugins/error_log
[Thu Jul 30 09:20:35.425977 2026] [authz_core:error] [pid 2542191:tid 2542191] [client 146.70.194.222:56776] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/ChaCha20/error_log
[Thu Jul 30 09:20:35.880488 2026] [authz_core:error] [pid 2532903:tid 2532903] [client 57.141.0.54:23972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:35.881127 2026] [authz_core:error] [pid 2532903:tid 2532903] [client 57.141.0.54:23972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:36.154817 2026] [authz_core:error] [pid 2528543:tid 2528543] [client 146.70.194.222:56816] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/Curve25519/error_log
[Thu Jul 30 09:20:36.524218 2026] [security2:error] [pid 2532796:tid 2532796] [client 216.73.216.199:13691] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/network-latency/tuned.conf"] [unique_id "amsJVOPgkJaP8xBp921CuwAAAA8"]
[Thu Jul 30 09:20:36.524522 2026] [security2:error] [pid 2532796:tid 2532796] [client 216.73.216.199:13691] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/network-latency/tuned.conf"] [unique_id "amsJVOPgkJaP8xBp921CuwAAAA8"]
[Thu Jul 30 09:20:36.524756 2026] [security2:error] [pid 2532796:tid 2532796] [client 216.73.216.199:13691] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/network-latency/tuned.conf"] [unique_id "amsJVOPgkJaP8xBp921CuwAAAA8"]
[Thu Jul 30 09:20:36.968175 2026] [ssl:error] [pid 2542189:tid 2542189] (EAI 2)Name or service not known: [client 144.76.19.72:33654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:36.968216 2026] [ssl:error] [pid 2542189:tid 2542189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:37.024407 2026] [ssl:error] [pid 2542191:tid 2542191] (EAI 2)Name or service not known: [client 144.76.19.72:33660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:37.024442 2026] [ssl:error] [pid 2542191:tid 2542191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:37.034647 2026] [security2:error] [pid 2536512:tid 2536512] [client 43.160.219.206:42228] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "liberator-no-email.com"] [uri "/"] [unique_id "amsJVYkr4sKZ0CW2Lbep-AAAAAY"]
[Thu Jul 30 09:20:37.609824 2026] [security2:error] [pid 2533668:tid 2533668] [client 185.191.171.3:22076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/public-sector-entrepreneurship-examples-uk"] [unique_id "amsJVWeKOqySwNQ1Vbe_mwAAABY"]
[Thu Jul 30 09:20:37.843986 2026] [authz_core:error] [pid 2533367:tid 2533367] [client 146.70.194.222:56842] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/Poly1305/error_log
[Thu Jul 30 09:20:38.029930 2026] [ssl:error] [pid 2532796:tid 2532796] (5)Input/output error: [client 216.73.216.199:13691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:38.751479 2026] [security2:error] [pid 2529748:tid 2529748] [client 185.191.171.14:58764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9647.0/prev_next,next.html"] [unique_id "amsJVroknnVK7uKpm-05XAAAACM"]
[Thu Jul 30 09:20:38.938269 2026] [ssl:error] [pid 2528543:tid 2528543] (5)Input/output error: [client 216.73.216.199:16583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:39.417478 2026] [authz_core:error] [pid 2537786:tid 2537786] [client 146.70.194.222:56916] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 09:20:40.077838 2026] [authz_core:error] [pid 2536512:tid 2536512] [client 146.70.194.222:56936] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/ChaCha20/error_log
[Thu Jul 30 09:20:40.084510 2026] [ssl:error] [pid 2533367:tid 2533367] (EAI 2)Name or service not known: [client 144.76.19.72:48234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:40.084539 2026] [ssl:error] [pid 2533367:tid 2533367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:40.142061 2026] [ssl:error] [pid 2540403:tid 2540403] (EAI 2)Name or service not known: [client 144.76.19.72:48246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:40.142100 2026] [ssl:error] [pid 2540403:tid 2540403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:40.501469 2026] [security2:error] [pid 2540903:tid 2540903] [client 45.179.99.134:9332] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJWJLf6bQG3Q2q_mFY8QAAADQ"]
[Thu Jul 30 09:20:40.501519 2026] [security2:error] [pid 2540903:tid 2540903] [client 45.179.99.134:9332] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJWJLf6bQG3Q2q_mFY8QAAADQ"]
[Thu Jul 30 09:20:40.501764 2026] [security2:error] [pid 2540903:tid 2540903] [client 45.179.99.134:9332] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJWJLf6bQG3Q2q_mFY8QAAADQ"]
[Thu Jul 30 09:20:40.787600 2026] [authz_core:error] [pid 2528502:tid 2528502] [client 146.70.194.222:56968] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/Curve25519/error_log
[Thu Jul 30 09:20:42.497333 2026] [security2:error] [pid 2538566:tid 2538566] [client 185.134.176.13:40996] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJWmAzkkMNRru8EAejhQAAADY"]
[Thu Jul 30 09:20:42.497392 2026] [security2:error] [pid 2538566:tid 2538566] [client 185.134.176.13:40996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJWmAzkkMNRru8EAejhQAAADY"]
[Thu Jul 30 09:20:42.497768 2026] [security2:error] [pid 2538566:tid 2538566] [client 185.134.176.13:40996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJWmAzkkMNRru8EAejhQAAADY"]
[Thu Jul 30 09:20:42.550451 2026] [ssl:error] [pid 2538521:tid 2538521] (5)Input/output error: [client 216.73.216.199:18655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:42.553426 2026] [authz_core:error] [pid 2537786:tid 2537786] [client 146.70.194.222:45684] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/Poly1305/error_log
[Thu Jul 30 09:20:43.199811 2026] [ssl:error] [pid 2542046:tid 2542046] (EAI 2)Name or service not known: [client 144.76.19.72:48256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:43.199865 2026] [ssl:error] [pid 2542046:tid 2542046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:43.316035 2026] [ssl:error] [pid 2540402:tid 2540402] (EAI 2)Name or service not known: [client 144.76.19.72:48260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:43.316099 2026] [ssl:error] [pid 2540402:tid 2540402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:44.464294 2026] [security2:error] [pid 2542192:tid 2542192] [client 188.49.172.4:58338] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJXNkiPOT04qTA-_P0ZQAAADk"]
[Thu Jul 30 09:20:44.464368 2026] [security2:error] [pid 2542192:tid 2542192] [client 188.49.172.4:58338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJXNkiPOT04qTA-_P0ZQAAADk"]
[Thu Jul 30 09:20:44.464662 2026] [security2:error] [pid 2542192:tid 2542192] [client 188.49.172.4:58338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJXNkiPOT04qTA-_P0ZQAAADk"]
[Thu Jul 30 09:20:45.716930 2026] [authz_core:error] [pid 2542192:tid 2542192] [client 146.70.194.222:45760] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/theme-compat/error_log
[Thu Jul 30 09:20:45.940907 2026] [security2:error] [pid 2538304:tid 2538304] [client 114.119.142.20:31545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579478400/cat_ids~17,104/request_format~html"] [unique_id "amsJXVU9OTCsd8OrsfB9DAAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579478400/request_format~html/cat_ids~17
[Thu Jul 30 09:20:46.375706 2026] [ssl:error] [pid 2542191:tid 2542191] (EAI 2)Name or service not known: [client 144.76.19.72:48270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:46.375736 2026] [ssl:error] [pid 2542191:tid 2542191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:46.427635 2026] [ssl:error] [pid 2542120:tid 2542120] (EAI 2)Name or service not known: [client 144.76.19.72:48272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:46.427661 2026] [ssl:error] [pid 2542120:tid 2542120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:46.463889 2026] [ssl:error] [pid 2540259:tid 2540259] (5)Input/output error: [client 216.73.216.199:28603] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:20:46.853318 2026] [authz_core:error] [pid 2542192:tid 2542192] [client 146.70.194.222:45806] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/widgets/error_log
[Thu Jul 30 09:20:47.631896 2026] [security2:error] [pid 2542189:tid 2542189] [client 114.119.142.20:31561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579478400/cat_ids~17,104/request_format~html"] [unique_id "amsJXwSTwKKw_OYOQ6SF1AAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579478400/request_format~html/cat_ids~17
[Thu Jul 30 09:20:48.007769 2026] [security2:error] [pid 2533668:tid 2533668] [client 43.159.128.247:50404] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amsJYGeKOqySwNQ1Vbe_pwAAABY"]
[Thu Jul 30 09:20:48.437973 2026] [core:error] [pid 2538521:tid 2538521] [client 66.249.66.168:60954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:48.438002 2026] [core:error] [pid 2538521:tid 2538521] [client 66.249.66.168:60954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:48.441843 2026] [core:error] [pid 2539964:tid 2539964] [client 66.249.66.167:61024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:48.441871 2026] [core:error] [pid 2539964:tid 2539964] [client 66.249.66.167:61024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:20:49.117344 2026] [cgi:error] [pid 2529748:tid 2529748] [client 20.104.22.47:58446] AH02812: stderr from /home/winterb/public_html/ezazz/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:20:49.481707 2026] [ssl:error] [pid 2518708:tid 2518708] (EAI 2)Name or service not known: [client 144.76.19.72:48284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:49.481730 2026] [ssl:error] [pid 2518708:tid 2518708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:49.539549 2026] [ssl:error] [pid 2528502:tid 2528502] (EAI 2)Name or service not known: [client 144.76.19.72:48298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:49.539575 2026] [ssl:error] [pid 2528502:tid 2528502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:51.352621 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/.env"] [unique_id "amsJY65beE8sMkNUXA8kUQAAABo"]
[Thu Jul 30 09:20:51.352772 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/.env"] [unique_id "amsJY65beE8sMkNUXA8kUQAAABo"]
[Thu Jul 30 09:20:51.352970 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/.env"] [unique_id "amsJY65beE8sMkNUXA8kUQAAABo"]
[Thu Jul 30 09:20:51.371538 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/api/.env"] [unique_id "amsJY65beE8sMkNUXA8kUgAAABo"]
[Thu Jul 30 09:20:51.371680 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/api/.env"] [unique_id "amsJY65beE8sMkNUXA8kUgAAABo"]
[Thu Jul 30 09:20:51.371848 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/api/.env"] [unique_id "amsJY65beE8sMkNUXA8kUgAAABo"]
[Thu Jul 30 09:20:51.390554 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/backend/.env"] [unique_id "amsJY65beE8sMkNUXA8kUwAAABo"]
[Thu Jul 30 09:20:51.390713 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/backend/.env"] [unique_id "amsJY65beE8sMkNUXA8kUwAAABo"]
[Thu Jul 30 09:20:51.390903 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/backend/.env"] [unique_id "amsJY65beE8sMkNUXA8kUwAAABo"]
[Thu Jul 30 09:20:51.429023 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/admin/.env"] [unique_id "amsJY65beE8sMkNUXA8kVQAAABo"]
[Thu Jul 30 09:20:51.429208 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/admin/.env"] [unique_id "amsJY65beE8sMkNUXA8kVQAAABo"]
[Thu Jul 30 09:20:51.429408 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/admin/.env"] [unique_id "amsJY65beE8sMkNUXA8kVQAAABo"]
[Thu Jul 30 09:20:51.467549 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/laravel/.env"] [unique_id "amsJY65beE8sMkNUXA8kVwAAABo"]
[Thu Jul 30 09:20:51.467761 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/laravel/.env"] [unique_id "amsJY65beE8sMkNUXA8kVwAAABo"]
[Thu Jul 30 09:20:51.467972 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/laravel/.env"] [unique_id "amsJY65beE8sMkNUXA8kVwAAABo"]
[Thu Jul 30 09:20:51.486821 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/core/.env"] [unique_id "amsJY65beE8sMkNUXA8kWAAAABo"]
[Thu Jul 30 09:20:51.487013 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/core/.env"] [unique_id "amsJY65beE8sMkNUXA8kWAAAABo"]
[Thu Jul 30 09:20:51.487234 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/core/.env"] [unique_id "amsJY65beE8sMkNUXA8kWAAAABo"]
[Thu Jul 30 09:20:51.525265 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/.env.example"] [unique_id "amsJY65beE8sMkNUXA8kWgAAABo"]
[Thu Jul 30 09:20:51.525455 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/.env.example"] [unique_id "amsJY65beE8sMkNUXA8kWgAAABo"]
[Thu Jul 30 09:20:51.525667 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/.env.example"] [unique_id "amsJY65beE8sMkNUXA8kWgAAABo"]
[Thu Jul 30 09:20:51.544620 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/app/.env"] [unique_id "amsJY65beE8sMkNUXA8kWwAAABo"]
[Thu Jul 30 09:20:51.544818 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/app/.env"] [unique_id "amsJY65beE8sMkNUXA8kWwAAABo"]
[Thu Jul 30 09:20:51.545040 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/app/.env"] [unique_id "amsJY65beE8sMkNUXA8kWwAAABo"]
[Thu Jul 30 09:20:51.563887 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/dev/.env"] [unique_id "amsJY65beE8sMkNUXA8kXAAAABo"]
[Thu Jul 30 09:20:51.564081 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/dev/.env"] [unique_id "amsJY65beE8sMkNUXA8kXAAAABo"]
[Thu Jul 30 09:20:51.564286 2026] [security2:error] [pid 2532903:tid 2532903] [client 185.93.89.167:28061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/dev/.env"] [unique_id "amsJY65beE8sMkNUXA8kXAAAABo"]
[Thu Jul 30 09:20:52.154324 2026] [security2:error] [pid 2540402:tid 2540402] [client 185.93.89.167:28787] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/server/.env"] [unique_id "amsJZA06BU2qmC9YS1bougAAAB0"]
[Thu Jul 30 09:20:52.154523 2026] [security2:error] [pid 2540402:tid 2540402] [client 185.93.89.167:28787] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/server/.env"] [unique_id "amsJZA06BU2qmC9YS1bougAAAB0"]
[Thu Jul 30 09:20:52.154750 2026] [security2:error] [pid 2540402:tid 2540402] [client 185.93.89.167:28787] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/server/.env"] [unique_id "amsJZA06BU2qmC9YS1bougAAAB0"]
[Thu Jul 30 09:20:52.176380 2026] [security2:error] [pid 2540402:tid 2540402] [client 185.93.89.167:28787] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/.env.save"] [unique_id "amsJZA06BU2qmC9YS1bouwAAAB0"]
[Thu Jul 30 09:20:52.176571 2026] [security2:error] [pid 2540402:tid 2540402] [client 185.93.89.167:28787] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/.env.save"] [unique_id "amsJZA06BU2qmC9YS1bouwAAAB0"]
[Thu Jul 30 09:20:52.176835 2026] [security2:error] [pid 2540402:tid 2540402] [client 185.93.89.167:28787] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/.env.save"] [unique_id "amsJZA06BU2qmC9YS1bouwAAAB0"]
[Thu Jul 30 09:20:52.197366 2026] [core:error] [pid 2538567:tid 2538567] (13)Permission denied: [client 216.73.216.199:28750] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS3/custom_divisor
[Thu Jul 30 09:20:52.599638 2026] [ssl:error] [pid 2532903:tid 2532903] (EAI 2)Name or service not known: [client 144.76.19.72:29122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:52.599666 2026] [ssl:error] [pid 2532903:tid 2532903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:52.656133 2026] [ssl:error] [pid 2518708:tid 2518708] (EAI 2)Name or service not known: [client 144.76.19.72:29130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:52.656159 2026] [ssl:error] [pid 2518708:tid 2518708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:52.735109 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/.env"] [unique_id "amsJZCxdCjJmCywp-HdX4wAAAA0"]
[Thu Jul 30 09:20:52.735312 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/.env"] [unique_id "amsJZCxdCjJmCywp-HdX4wAAAA0"]
[Thu Jul 30 09:20:52.735513 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/.env"] [unique_id "amsJZCxdCjJmCywp-HdX4wAAAA0"]
[Thu Jul 30 09:20:52.754223 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/api/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5AAAAA0"]
[Thu Jul 30 09:20:52.754369 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/api/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5AAAAA0"]
[Thu Jul 30 09:20:52.754546 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/api/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5AAAAA0"]
[Thu Jul 30 09:20:52.773545 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/backend/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5QAAAA0"]
[Thu Jul 30 09:20:52.773748 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/backend/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5QAAAA0"]
[Thu Jul 30 09:20:52.773943 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/backend/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5QAAAA0"]
[Thu Jul 30 09:20:52.812431 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/admin/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5wAAAA0"]
[Thu Jul 30 09:20:52.812628 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/admin/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5wAAAA0"]
[Thu Jul 30 09:20:52.812791 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/admin/.env"] [unique_id "amsJZCxdCjJmCywp-HdX5wAAAA0"]
[Thu Jul 30 09:20:52.850821 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/laravel/.env"] [unique_id "amsJZCxdCjJmCywp-HdX6QAAAA0"]
[Thu Jul 30 09:20:52.850991 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/laravel/.env"] [unique_id "amsJZCxdCjJmCywp-HdX6QAAAA0"]
[Thu Jul 30 09:20:52.851164 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/laravel/.env"] [unique_id "amsJZCxdCjJmCywp-HdX6QAAAA0"]
[Thu Jul 30 09:20:52.870097 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/core/.env"] [unique_id "amsJZCxdCjJmCywp-HdX6gAAAA0"]
[Thu Jul 30 09:20:52.870297 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/core/.env"] [unique_id "amsJZCxdCjJmCywp-HdX6gAAAA0"]
[Thu Jul 30 09:20:52.870550 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/core/.env"] [unique_id "amsJZCxdCjJmCywp-HdX6gAAAA0"]
[Thu Jul 30 09:20:52.878440 2026] [authz_core:error] [pid 2535058:tid 2535058] [client 66.249.66.33:59158] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:20:52.881420 2026] [authz_core:error] [pid 2535058:tid 2535058] [client 66.249.66.33:59158] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:20:52.908920 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/.env.example"] [unique_id "amsJZCxdCjJmCywp-HdX7AAAAA0"]
[Thu Jul 30 09:20:52.909109 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/.env.example"] [unique_id "amsJZCxdCjJmCywp-HdX7AAAAA0"]
[Thu Jul 30 09:20:52.909290 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/.env.example"] [unique_id "amsJZCxdCjJmCywp-HdX7AAAAA0"]
[Thu Jul 30 09:20:52.928275 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/app/.env"] [unique_id "amsJZCxdCjJmCywp-HdX7QAAAA0"]
[Thu Jul 30 09:20:52.928445 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/app/.env"] [unique_id "amsJZCxdCjJmCywp-HdX7QAAAA0"]
[Thu Jul 30 09:20:52.928617 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/app/.env"] [unique_id "amsJZCxdCjJmCywp-HdX7QAAAA0"]
[Thu Jul 30 09:20:52.947573 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/dev/.env"] [unique_id "amsJZCxdCjJmCywp-HdX7gAAAA0"]
[Thu Jul 30 09:20:52.947762 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/dev/.env"] [unique_id "amsJZCxdCjJmCywp-HdX7gAAAA0"]
[Thu Jul 30 09:20:52.947928 2026] [security2:error] [pid 2540335:tid 2540335] [client 185.93.89.167:16869] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/dev/.env"] [unique_id "amsJZCxdCjJmCywp-HdX7gAAAA0"]
[Thu Jul 30 09:20:53.005830 2026] [security2:error] [pid 2529845:tid 2529845] [client 185.93.89.167:18319] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/server/.env"] [unique_id "amsJZTnz0V0HyYIA5AhqSwAAAC0"]
[Thu Jul 30 09:20:53.006033 2026] [security2:error] [pid 2529845:tid 2529845] [client 185.93.89.167:18319] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/server/.env"] [unique_id "amsJZTnz0V0HyYIA5AhqSwAAAC0"]
[Thu Jul 30 09:20:53.006229 2026] [security2:error] [pid 2529845:tid 2529845] [client 185.93.89.167:18319] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/server/.env"] [unique_id "amsJZTnz0V0HyYIA5AhqSwAAAC0"]
[Thu Jul 30 09:20:53.024855 2026] [security2:error] [pid 2529845:tid 2529845] [client 185.93.89.167:18319] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/.env.save"] [unique_id "amsJZTnz0V0HyYIA5AhqTAAAAC0"]
[Thu Jul 30 09:20:53.025050 2026] [security2:error] [pid 2529845:tid 2529845] [client 185.93.89.167:18319] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/.env.save"] [unique_id "amsJZTnz0V0HyYIA5AhqTAAAAC0"]
[Thu Jul 30 09:20:53.025242 2026] [security2:error] [pid 2529845:tid 2529845] [client 185.93.89.167:18319] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/.env.save"] [unique_id "amsJZTnz0V0HyYIA5AhqTAAAAC0"]
[Thu Jul 30 09:20:54.119352 2026] [authz_core:error] [pid 2529748:tid 2529748] [client 20.104.22.47:58446] AH01630: client denied by server configuration: /home/winterb/public_html/ezazz/php.ini
[Thu Jul 30 09:20:55.709902 2026] [ssl:error] [pid 2540335:tid 2540335] (EAI 2)Name or service not known: [client 144.76.19.72:29134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:55.709937 2026] [ssl:error] [pid 2540335:tid 2540335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:55.762908 2026] [ssl:error] [pid 2542190:tid 2542190] (EAI 2)Name or service not known: [client 144.76.19.72:29144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:55.762948 2026] [ssl:error] [pid 2542190:tid 2542190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:56.653660 2026] [authz_core:error] [pid 2540335:tid 2540335] [client 57.141.0.55:57276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:20:56.654296 2026] [authz_core:error] [pid 2540335:tid 2540335] [client 57.141.0.55:57276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:20:56.789864 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 146.70.194.222:45994] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/ID3/error_log
[Thu Jul 30 09:20:56.860101 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 146.70.194.222:45994] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/IXR/error_log
[Thu Jul 30 09:20:56.890963 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 146.70.194.222:45994] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/error_log
[Thu Jul 30 09:20:56.923672 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 146.70.194.222:45994] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Auth/error_log
[Thu Jul 30 09:20:58.028930 2026] [authz_core:error] [pid 2540259:tid 2540259] [client 146.70.194.222:53266] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Exception/error_log
[Thu Jul 30 09:20:58.596867 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 146.70.194.222:53280] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Exception/HTTP/error_log
[Thu Jul 30 09:20:58.819802 2026] [ssl:error] [pid 2540259:tid 2540259] (EAI 2)Name or service not known: [client 144.76.19.72:29158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:58.819841 2026] [ssl:error] [pid 2540259:tid 2540259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:20:58.875993 2026] [ssl:error] [pid 2540403:tid 2540403] (EAI 2)Name or service not known: [client 144.76.19.72:29170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:20:58.876021 2026] [ssl:error] [pid 2540403:tid 2540403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:01.099151 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.59:39550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:01.099781 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.59:39550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:01.369293 2026] [authz_core:error] [pid 2528543:tid 2528543] [client 146.70.194.222:53624] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Exception/Transport/error_log
[Thu Jul 30 09:21:01.931606 2026] [ssl:error] [pid 2538565:tid 2538565] (EAI 2)Name or service not known: [client 144.76.19.72:51724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:01.931641 2026] [ssl:error] [pid 2538565:tid 2538565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:01.954589 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 146.70.194.222:53638] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Proxy/error_log
[Thu Jul 30 09:21:01.983860 2026] [ssl:error] [pid 2527098:tid 2527098] (EAI 2)Name or service not known: [client 144.76.19.72:51726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:01.983887 2026] [ssl:error] [pid 2527098:tid 2527098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:02.180418 2026] [authz_core:error] [pid 2542189:tid 2542189] [client 82.102.18.190:38092] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 09:21:02.563892 2026] [authz_core:error] [pid 2540335:tid 2540335] [client 146.70.194.222:35898] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Response/error_log
[Thu Jul 30 09:21:03.207804 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 146.70.194.222:35900] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/Requests/Transport/error_log
[Thu Jul 30 09:21:03.266103 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 57.141.0.49:46160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:03.266720 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 57.141.0.49:46160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:03.619345 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 66.249.66.34:63478] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:21:03.622121 2026] [authz_core:error] [pid 2535096:tid 2535096] [client 66.249.66.34:63478] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:21:03.764927 2026] [security2:error] [pid 2540902:tid 2540902] [client 146.70.194.222:35908] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "spamp.com"] [uri "/wp-includes/Requests/Transport/fsockopen.php"] [unique_id "amsJb_5NpVIkJBIkFaWMPQAAAC8"]
[Thu Jul 30 09:21:03.765020 2026] [security2:error] [pid 2540902:tid 2540902] [client 146.70.194.222:35908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/wp-includes/Requests/Transport/fsockopen.php"] [unique_id "amsJb_5NpVIkJBIkFaWMPQAAAC8"]
[Thu Jul 30 09:21:03.990139 2026] [security2:error] [pid 2540902:tid 2540902] [client 146.70.194.222:35908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amsJb_5NpVIkJBIkFaWMPQAAAC8"]
[Thu Jul 30 09:21:04.237237 2026] [ssl:error] [pid 2538567:tid 2538567] (70014)End of file found: [client 216.73.216.199:28750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:04.649679 2026] [authz_core:error] [pid 2540902:tid 2540902] [client 146.70.194.222:35908] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/SimplePie/error_log
[Thu Jul 30 09:21:04.685790 2026] [authz_core:error] [pid 2540902:tid 2540902] [client 146.70.194.222:35908] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/SimplePie/Cache/error_log
[Thu Jul 30 09:21:05.122801 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:51730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:05.122839 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:05.176086 2026] [ssl:error] [pid 2528543:tid 2528543] (EAI 2)Name or service not known: [client 144.76.19.72:51738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:05.176130 2026] [ssl:error] [pid 2528543:tid 2528543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:05.929782 2026] [security2:error] [pid 2537718:tid 2537718] [client 185.191.171.11:44216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/mississippi-high-school-basketball-player-rankings-2023"] [unique_id "amsJcfi0I7yf3B3eS0-4IgAAABM"]
[Thu Jul 30 09:21:05.950926 2026] [security2:error] [pid 2540402:tid 2540402] [client 88.235.158.203:34644] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJcQ06BU2qmC9YS1bozAAAAB0"]
[Thu Jul 30 09:21:05.951007 2026] [security2:error] [pid 2540402:tid 2540402] [client 88.235.158.203:34644] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJcQ06BU2qmC9YS1bozAAAAB0"]
[Thu Jul 30 09:21:05.951320 2026] [security2:error] [pid 2540402:tid 2540402] [client 88.235.158.203:34644] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJcQ06BU2qmC9YS1bozAAAAB0"]
[Thu Jul 30 09:21:06.113003 2026] [authz_core:error] [pid 2529793:tid 2529793] [client 57.141.0.12:30204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:06.113663 2026] [authz_core:error] [pid 2529793:tid 2529793] [client 57.141.0.12:30204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:06.834503 2026] [authz_core:error] [pid 2528543:tid 2528543] [client 57.141.0.48:61634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:06.835159 2026] [authz_core:error] [pid 2528543:tid 2528543] [client 57.141.0.48:61634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:08.233933 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:51746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:08.233974 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:08.287318 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:51762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:08.287346 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:08.891397 2026] [ssl:error] [pid 2538304:tid 2538304] (70014)End of file found: [client 216.73.216.199:18278] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:09.335087 2026] [security2:error] [pid 2538567:tid 2538567] [client 150.5.134.199:53079] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJde5wwnGGOHd0XkHBygAAADc"]
[Thu Jul 30 09:21:09.335151 2026] [security2:error] [pid 2538567:tid 2538567] [client 150.5.134.199:53079] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJde5wwnGGOHd0XkHBygAAADc"]
[Thu Jul 30 09:21:09.335412 2026] [security2:error] [pid 2538567:tid 2538567] [client 150.5.134.199:53079] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJde5wwnGGOHd0XkHBygAAADc"]
[Thu Jul 30 09:21:09.812714 2026] [ssl:error] [pid 2532797:tid 2532797] (70014)End of file found: [client 216.73.216.199:19430] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:11.064426 2026] [authz_core:error] [pid 2544461:tid 2544461] [client 57.141.0.55:46382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:11.065053 2026] [authz_core:error] [pid 2544461:tid 2544461] [client 57.141.0.55:46382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:11.348975 2026] [ssl:error] [pid 2542835:tid 2542835] (EAI 2)Name or service not known: [client 144.76.19.72:60806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:11.349003 2026] [ssl:error] [pid 2542835:tid 2542835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:11.402853 2026] [ssl:error] [pid 2540402:tid 2540402] (EAI 2)Name or service not known: [client 144.76.19.72:60816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:11.402886 2026] [ssl:error] [pid 2540402:tid 2540402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:12.845482 2026] [security2:error] [pid 2537161:tid 2537161] [client 150.5.134.199:19359] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJeP7KNmJnOlH-mGH0pgAAAA4"]
[Thu Jul 30 09:21:12.845528 2026] [security2:error] [pid 2537161:tid 2537161] [client 150.5.134.199:19359] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsJeP7KNmJnOlH-mGH0pgAAAA4"]
[Thu Jul 30 09:21:12.845792 2026] [security2:error] [pid 2537161:tid 2537161] [client 150.5.134.199:19359] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsJeP7KNmJnOlH-mGH0pgAAAA4"]
[Thu Jul 30 09:21:13.191097 2026] [security2:error] [pid 2535058:tid 2535058] [client 185.191.171.12:61690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/band-2-housing-waiting-time"] [unique_id "amsJeS_HwAj4vFB1AT5NrAAAABQ"]
[Thu Jul 30 09:21:13.432098 2026] [authz_core:error] [pid 2538566:tid 2538566] [client 146.70.194.222:42166] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/customize/error_log
[Thu Jul 30 09:21:14.458614 2026] [ssl:error] [pid 2540403:tid 2540403] (EAI 2)Name or service not known: [client 144.76.19.72:60820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:14.458641 2026] [ssl:error] [pid 2540403:tid 2540403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:14.514838 2026] [ssl:error] [pid 2538304:tid 2538304] (EAI 2)Name or service not known: [client 144.76.19.72:60830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:14.514863 2026] [ssl:error] [pid 2538304:tid 2538304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:15.880183 2026] [authz_core:error] [pid 2527098:tid 2527098] [client 57.141.0.18:65510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:15.880865 2026] [authz_core:error] [pid 2527098:tid 2527098] [client 57.141.0.18:65510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:17.483906 2026] [security2:error] [pid 2541672:tid 2541672] [client 49.235.136.28:42120] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "amsJfWVT8yEm1kRzLvpoywAAABs"]
[Thu Jul 30 09:21:17.568302 2026] [ssl:error] [pid 2527098:tid 2527098] (EAI 2)Name or service not known: [client 144.76.19.72:60836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:17.568337 2026] [ssl:error] [pid 2527098:tid 2527098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:17.622744 2026] [ssl:error] [pid 2532903:tid 2532903] (EAI 2)Name or service not known: [client 144.76.19.72:60838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:17.622772 2026] [ssl:error] [pid 2532903:tid 2532903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:17.806363 2026] [core:error] [pid 2537788:tid 2537788] [client 66.249.64.172:65373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:21:17.806402 2026] [core:error] [pid 2537788:tid 2537788] [client 66.249.64.172:65373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:21:18.485825 2026] [cgi:error] [pid 2544460:tid 2544460] [client 146.70.194.222:42424] AH02812: stderr from /home/spampcou/public_html/spamp.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:21:19.648316 2026] [ssl:error] [pid 2529793:tid 2529793] (70014)End of file found: [client 216.73.216.199:7670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:20.679029 2026] [ssl:error] [pid 2538304:tid 2538304] (EAI 2)Name or service not known: [client 144.76.19.72:48928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:20.679058 2026] [ssl:error] [pid 2538304:tid 2538304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:20.733488 2026] [ssl:error] [pid 2540259:tid 2540259] (EAI 2)Name or service not known: [client 144.76.19.72:48930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:20.733515 2026] [ssl:error] [pid 2540259:tid 2540259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:20.877119 2026] [ssl:error] [pid 2542191:tid 2542191] (70014)End of file found: [client 216.73.216.199:61479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:21.067204 2026] [security2:error] [pid 2540259:tid 2540259] [client 85.208.96.211:18728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1246.0/prev_next,next.html"] [unique_id "amsJgd2DjuIbYahyagd5vAAAAAw"]
[Thu Jul 30 09:21:21.899713 2026] [core:error] [pid 2539964:tid 2539964] [client 66.249.66.8:36994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:21:21.899739 2026] [core:error] [pid 2539964:tid 2539964] [client 66.249.66.8:36994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:21:23.351919 2026] [core:error] [pid 2541672:tid 2541672] (13)Permission denied: [client 216.73.216.199:46297] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/irq
[Thu Jul 30 09:21:23.787046 2026] [ssl:error] [pid 2540403:tid 2540403] (EAI 2)Name or service not known: [client 144.76.19.72:48942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:23.787078 2026] [ssl:error] [pid 2540403:tid 2540403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:23.840730 2026] [ssl:error] [pid 2537161:tid 2537161] (EAI 2)Name or service not known: [client 144.76.19.72:48954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:23.840776 2026] [ssl:error] [pid 2537161:tid 2537161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:24.563689 2026] [ssl:error] [pid 2541672:tid 2541672] (70014)End of file found: [client 216.73.216.199:46297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:25.125108 2026] [core:error] [pid 2542190:tid 2542190] (13)Permission denied: [client 216.73.216.199:41274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 09:21:26.040476 2026] [security2:error] [pid 2544458:tid 2544458] [client 43.130.102.7:45266] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "amsJhkm7MxBzz1KMmGfaswAAAA8"]
[Thu Jul 30 09:21:26.175819 2026] [core:error] [pid 2542190:tid 2542190] (13)Permission denied: [client 216.73.216.199:41274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/port
[Thu Jul 30 09:21:26.899454 2026] [ssl:error] [pid 2544353:tid 2544353] (EAI 2)Name or service not known: [client 144.76.19.72:48960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:26.899484 2026] [ssl:error] [pid 2544353:tid 2544353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:26.953112 2026] [ssl:error] [pid 2538566:tid 2538566] (EAI 2)Name or service not known: [client 144.76.19.72:48974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:26.953136 2026] [ssl:error] [pid 2538566:tid 2538566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:27.499093 2026] [authz_core:error] [pid 2542189:tid 2542189] [client 57.141.0.24:51958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:27.499732 2026] [authz_core:error] [pid 2542189:tid 2542189] [client 57.141.0.24:51958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:27.748044 2026] [ssl:error] [pid 2542190:tid 2542190] (70014)End of file found: [client 216.73.216.199:41274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:28.963503 2026] [ssl:error] [pid 2540903:tid 2540903] (70014)End of file found: [client 216.73.216.199:56381] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:30.011695 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:22242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:30.011741 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:30.058305 2026] [authz_core:error] [pid 2542192:tid 2542192] [client 57.141.0.15:29856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:30.058930 2026] [authz_core:error] [pid 2542192:tid 2542192] [client 57.141.0.15:29856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:30.065134 2026] [ssl:error] [pid 2545083:tid 2545083] (EAI 2)Name or service not known: [client 144.76.19.72:22252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:30.065160 2026] [ssl:error] [pid 2545083:tid 2545083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:31.968787 2026] [authz_core:error] [pid 2542192:tid 2542192] [client 216.73.216.199:1604] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 09:21:32.065827 2026] [authz_core:error] [pid 2542192:tid 2542192] [client 216.73.216.199:1604] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 09:21:32.149360 2026] [authz_core:error] [pid 2544461:tid 2544461] [client 146.70.194.222:52592] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/block-patterns/error_log
[Thu Jul 30 09:21:32.623827 2026] [authz_core:error] [pid 2545083:tid 2545083] [client 146.70.194.222:33012] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/block-supports/error_log
[Thu Jul 30 09:21:33.121718 2026] [ssl:error] [pid 2542190:tid 2542190] (EAI 2)Name or service not known: [client 144.76.19.72:22254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:33.121748 2026] [ssl:error] [pid 2542190:tid 2542190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:33.177618 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:22268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:33.177647 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:35.114758 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 144.172.105.5:47200] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/Smarty/templates_c/error_log
[Thu Jul 30 09:21:35.230944 2026] [security2:error] [pid 2537717:tid 2537717] [client 94.154.43.187:57560] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "lukess.me"] [uri "/.env"] [unique_id "amsJj_-cDudpOfXry4PcygAAABI"]
[Thu Jul 30 09:21:35.231145 2026] [security2:error] [pid 2537717:tid 2537717] [client 94.154.43.187:57560] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "lukess.me"] [uri "/.env"] [unique_id "amsJj_-cDudpOfXry4PcygAAABI"]
[Thu Jul 30 09:21:35.231355 2026] [security2:error] [pid 2537717:tid 2537717] [client 94.154.43.187:57560] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "lukess.me"] [uri "/.env"] [unique_id "amsJj_-cDudpOfXry4PcygAAABI"]
[Thu Jul 30 09:21:35.370890 2026] [security2:error] [pid 2532797:tid 2532797] [client 144.172.105.5:47200] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%0A^0A5^0A57CC2A%%ReportsCustomize.tpl.php"] [unique_id "amsJj8VSwDHKUN37iunqXwAAABA"]
[Thu Jul 30 09:21:35.776754 2026] [security2:error] [pid 2545133:tid 2545133] [client 144.172.105.5:57362] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%00^00A^00AEAECB%%SetMenu.tpl.php"] [unique_id "amsJj4sCSelhAfe83RreSQAAAAo"]
[Thu Jul 30 09:21:35.776887 2026] [security2:error] [pid 2545133:tid 2545133] [client 144.172.105.5:57362] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%00^00A^00AEAECB%%SetMenu.tpl.php"] [unique_id "amsJj4sCSelhAfe83RreSQAAAAo"]
[Thu Jul 30 09:21:35.777225 2026] [security2:error] [pid 2545133:tid 2545133] [client 144.172.105.5:57362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%00^00A^00AEAECB%%SetMenu.tpl.php"] [unique_id "amsJj4sCSelhAfe83RreSQAAAAo"]
[Thu Jul 30 09:21:35.777638 2026] [security2:error] [pid 2545133:tid 2545133] [client 144.172.105.5:57362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 7 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Invalid character in request (null character)"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%00^00A^00AEAECB%%SetMenu.tpl.php"] [unique_id "amsJj4sCSelhAfe83RreSQAAAAo"]
[Thu Jul 30 09:21:35.906971 2026] [security2:error] [pid 2545133:tid 2545133] [client 144.172.105.5:57362] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%03^032^0328A38A%%Buttons_List1.tpl.php"] [unique_id "amsJj4sCSelhAfe83RreSgAAAAo"]
[Thu Jul 30 09:21:36.247295 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:22270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:36.247334 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:36.300119 2026] [ssl:error] [pid 2544353:tid 2544353] (EAI 2)Name or service not known: [client 144.76.19.72:22286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:36.300145 2026] [ssl:error] [pid 2544353:tid 2544353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:36.310977 2026] [security2:error] [pid 2538521:tid 2538521] [client 144.172.105.5:57372] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%03^033^033AEA8A%%Quickview.tpl.php"] [unique_id "amsJkId5HmpLvFcZvt9xgAAAADM"]
[Thu Jul 30 09:21:36.716987 2026] [security2:error] [pid 2539964:tid 2539964] [client 144.172.105.5:57374] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%05^051^05187CE7%%RelatedLists.tpl.php"] [unique_id "amsJkDHx9eCuu0ycTSNM7wAAAAM"]
[Thu Jul 30 09:21:37.131819 2026] [security2:error] [pid 2538304:tid 2538304] [client 144.172.105.5:57386] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%1C^1C4^1C4AF207%%MySitesContents.tpl.php"] [unique_id "amsJkVU9OTCsd8OrsfB9RgAAACs"]
[Thu Jul 30 09:21:37.538134 2026] [security2:error] [pid 2537717:tid 2537717] [client 144.172.105.5:57400] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%1C^1C8^1C86EFF9%%RolePopup.tpl.php"] [unique_id "amsJkf-cDudpOfXry4PcywAAABI"]
[Thu Jul 30 09:21:37.677030 2026] [security2:error] [pid 2537717:tid 2537717] [client 144.172.105.5:57400] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%1D^1D1^1D1F966A%%Header.tpl.php"] [unique_id "amsJkf-cDudpOfXry4PczAAAABI"]
[Thu Jul 30 09:21:37.895127 2026] [ssl:error] [pid 2542189:tid 2542189] (70014)End of file found: [client 216.73.216.199:39115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:21:38.103240 2026] [security2:error] [pid 2544459:tid 2544459] [client 144.172.105.5:57414] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%1D^1D6^1D69F72E%%LoginHeader.tpl.php"] [unique_id "amsJkh4jneHQ_Qb1Oot5SgAAABY"]
[Thu Jul 30 09:21:38.234355 2026] [security2:error] [pid 2544459:tid 2544459] [client 144.172.105.5:57414] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%1E^1E5^1E53CCF1%%AdvanceFilter.tpl.php"] [unique_id "amsJkh4jneHQ_Qb1Oot5SwAAABY"]
[Thu Jul 30 09:21:38.644573 2026] [security2:error] [pid 2542192:tid 2542192] [client 144.172.105.5:57422] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%3A^3AE^3AEBC6E6%%ReportContents.tpl.php"] [unique_id "amsJktkiPOT04qTA-_P0swAAADk"]
[Thu Jul 30 09:21:39.047986 2026] [security2:error] [pid 2538567:tid 2538567] [client 144.172.105.5:57424] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%3B^3B1^3B1D8CFA%%MainHomeBlock.tpl.php"] [unique_id "amsJk-5wwnGGOHd0XkHCOwAAADc"]
[Thu Jul 30 09:21:39.354098 2026] [ssl:error] [pid 2542119:tid 2542119] (EAI 2)Name or service not known: [client 144.76.19.72:22296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:39.354141 2026] [ssl:error] [pid 2542119:tid 2542119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:39.408754 2026] [ssl:error] [pid 2544459:tid 2544459] (EAI 2)Name or service not known: [client 144.76.19.72:22306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:39.408810 2026] [ssl:error] [pid 2544459:tid 2544459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:39.453331 2026] [security2:error] [pid 2527098:tid 2527098] [client 144.172.105.5:57432] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%4D^4D4^4D44B579%%Settings.tpl.php"] [unique_id "amsJk_bgLO_vx1x-F8upoAAAAAc"]
[Thu Jul 30 09:21:39.852479 2026] [security2:error] [pid 2544461:tid 2544461] [client 144.172.105.5:57442] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%4F^4F5^4F5B4753%%ReportRun.tpl.php"] [unique_id "amsJkx15w_aaQhy8rzxgYwAAABw"]
[Thu Jul 30 09:21:40.255838 2026] [security2:error] [pid 2544412:tid 2544412] [client 144.172.105.5:57452] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%4F^4F9^4F91E029%%salesEditView.tpl.php"] [unique_id "amsJlLLEvf-80yRR0HGXTQAAAAQ"]
[Thu Jul 30 09:21:40.302032 2026] [core:error] [pid 2538304:tid 2538304] (13)Permission denied: [client 216.73.216.199:2636] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS1/custom_divisor
[Thu Jul 30 09:21:40.643501 2026] [security2:error] [pid 2538567:tid 2538567] [client 144.172.105.5:57460] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%5B^5BB^5BB1958E%%Homestuff.tpl.php"] [unique_id "amsJlO5wwnGGOHd0XkHCPAAAADc"]
[Thu Jul 30 09:21:40.669103 2026] [security2:error] [pid 2542119:tid 2542119] [client 43.157.158.178:46272] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mgarrmushrooms.com"] [uri "/"] [unique_id "amsJlKhuyJ1JW91_JZsOkgAAACc"]
[Thu Jul 30 09:21:41.045533 2026] [security2:error] [pid 2544459:tid 2544459] [client 144.172.105.5:57466] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%5D^5D4^5D43DB5C%%DetailView.tpl.php"] [unique_id "amsJlR4jneHQ_Qb1Oot5TAAAABY"]
[Thu Jul 30 09:21:41.451400 2026] [security2:error] [pid 2544461:tid 2544461] [client 144.172.105.5:57470] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%6A^6A1^6A109FE1%%EmailConfig.tpl.php"] [unique_id "amsJlR15w_aaQhy8rzxgZAAAABw"]
[Thu Jul 30 09:21:41.833752 2026] [security2:error] [pid 2538567:tid 2538567] [client 144.172.105.5:57472] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%6A^6AD^6AD3F172%%LayoutBlockList.tpl.php"] [unique_id "amsJle5wwnGGOHd0XkHCPQAAADc"]
[Thu Jul 30 09:21:42.210527 2026] [security2:error] [pid 2544459:tid 2544459] [client 144.172.105.5:57478] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%6B^6B7^6B7FC656%%ModuleManagerAjax.tpl.php"] [unique_id "amsJlh4jneHQ_Qb1Oot5TQAAABY"]
[Thu Jul 30 09:21:42.465794 2026] [ssl:error] [pid 2538567:tid 2538567] (EAI 2)Name or service not known: [client 144.76.19.72:44226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:42.465833 2026] [ssl:error] [pid 2538567:tid 2538567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:42.519125 2026] [ssl:error] [pid 2538478:tid 2538478] (EAI 2)Name or service not known: [client 144.76.19.72:44234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:42.519172 2026] [ssl:error] [pid 2538478:tid 2538478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:42.648472 2026] [security2:error] [pid 2542119:tid 2542119] [client 144.172.105.5:57486] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%6F^6FE^6FE36190%%DetailViewBlockComment.tpl.php"] [unique_id "amsJlqhuyJ1JW91_JZsOlAAAACc"]
[Thu Jul 30 09:21:43.054818 2026] [security2:error] [pid 2540403:tid 2540403] [client 144.172.105.5:57498] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%7D^7D1^7D137E8D%%index.tpl.php"] [unique_id "amsJlyhqdQRND-FRJFJmzwAAACU"]
[Thu Jul 30 09:21:43.119816 2026] [authz_core:error] [pid 2538567:tid 2538567] [client 66.249.66.34:54221] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:21:43.122516 2026] [authz_core:error] [pid 2538567:tid 2538567] [client 66.249.66.34:54221] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:21:43.457297 2026] [security2:error] [pid 2538478:tid 2538478] [client 144.172.105.5:57502] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%7E^7E3^7E3E31BF%%MySites.tpl.php"] [unique_id "amsJl9X3KcI7xHD1qJU5fQAAADA"]
[Thu Jul 30 09:21:43.837744 2026] [security2:error] [pid 2544412:tid 2544412] [client 144.172.105.5:57504] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%8C^8C7^8C7FDBB7%%QuickCreate.tpl.php"] [unique_id "amsJl7LEvf-80yRR0HGXTwAAAAQ"]
[Thu Jul 30 09:21:44.256312 2026] [security2:error] [pid 2537161:tid 2537161] [client 144.172.105.5:57510] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%8D^8D3^8D307248%%Emails.tpl.php"] [unique_id "amsJmP7KNmJnOlH-mGH0uAAAAA4"]
[Thu Jul 30 09:21:44.712408 2026] [security2:error] [pid 2544459:tid 2544459] [client 144.172.105.5:57520] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%8F^8F9^8F9D38C3%%ComposeEmail.tpl.php"] [unique_id "amsJmB4jneHQ_Qb1Oot5TwAAABY"]
[Thu Jul 30 09:21:45.164360 2026] [security2:error] [pid 2538478:tid 2538478] [client 144.172.105.5:42316] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%9E^9E1^9E148BF8%%ListWordTemplates.tpl.php"] [unique_id "amsJmdX3KcI7xHD1qJU5fgAAADA"]
[Thu Jul 30 09:21:45.573381 2026] [security2:error] [pid 2537161:tid 2537161] [client 144.172.105.5:42320] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%14^147^147140CE%%DocumentsListViewEntries.tpl.php"] [unique_id "amsJmf7KNmJnOlH-mGH0uQAAAA4"]
[Thu Jul 30 09:21:45.575526 2026] [ssl:error] [pid 2540335:tid 2540335] (EAI 2)Name or service not known: [client 144.76.19.72:44242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:45.575546 2026] [ssl:error] [pid 2540335:tid 2540335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:45.626727 2026] [ssl:error] [pid 2540403:tid 2540403] (EAI 2)Name or service not known: [client 144.76.19.72:44258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:45.626750 2026] [ssl:error] [pid 2540403:tid 2540403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:45.966506 2026] [security2:error] [pid 2540335:tid 2540335] [client 144.172.105.5:42322] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%15^15E^15EA3DC6%%PopupContents.tpl.php"] [unique_id "amsJmSxdCjJmCywp-HdYQgAAAA0"]
[Thu Jul 30 09:21:46.596023 2026] [security2:error] [pid 2541672:tid 2541672] [client 144.172.105.5:42326] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%18^18B^18B4CC8E%%CreateView.tpl.php"] [unique_id "amsJmmVT8yEm1kRzLvpo4QAAABs"]
[Thu Jul 30 09:21:46.711424 2026] [authz_core:error] [pid 2542119:tid 2542119] [client 57.141.0.19:31684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:46.712046 2026] [authz_core:error] [pid 2542119:tid 2542119] [client 57.141.0.19:31684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:46.989967 2026] [security2:error] [pid 2541672:tid 2541672] [client 144.172.105.5:42330] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%20^207^207FD303%%DocumentsListView.tpl.php"] [unique_id "amsJmmVT8yEm1kRzLvpo4gAAABs"]
[Thu Jul 30 09:21:47.369522 2026] [security2:error] [pid 2542119:tid 2542119] [client 144.172.105.5:42332] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%27^27B^27B328ED%%DetailViewFields.tpl.php"] [unique_id "amsJm6huyJ1JW91_JZsOmAAAACc"]
[Thu Jul 30 09:21:47.819488 2026] [security2:error] [pid 2545083:tid 2545083] [client 144.172.105.5:42348] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%28^289^2898F942%%TagCloud.tpl.php"] [unique_id "amsJmxYUqhgx1FtW2m_eEwAAAAA"]
[Thu Jul 30 09:21:47.952790 2026] [security2:error] [pid 2545083:tid 2545083] [client 144.172.105.5:42348] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%30^303^303C33B5%%EditViewHidden.tpl.php"] [unique_id "amsJmxYUqhgx1FtW2m_eFAAAAAA"]
[Thu Jul 30 09:21:48.329761 2026] [security2:error] [pid 2545083:tid 2545083] [client 144.172.105.5:42362] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%31^314^31430BC4%%HomeButtons.tpl.php"] [unique_id "amsJnBYUqhgx1FtW2m_eFQAAAAA"]
[Thu Jul 30 09:21:48.683528 2026] [ssl:error] [pid 2545083:tid 2545083] (EAI 2)Name or service not known: [client 144.76.19.72:44274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:48.683558 2026] [ssl:error] [pid 2545083:tid 2545083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:48.741084 2026] [ssl:error] [pid 2545083:tid 2545083] (EAI 2)Name or service not known: [client 144.76.19.72:44280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:48.741115 2026] [ssl:error] [pid 2545083:tid 2545083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:48.783834 2026] [security2:error] [pid 2542119:tid 2542119] [client 144.172.105.5:42370] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%32^32D^32DE0AF5%%ListViewEntries.tpl.php"] [unique_id "amsJnKhuyJ1JW91_JZsOmQAAACc"]
[Thu Jul 30 09:21:49.621404 2026] [security2:error] [pid 2536512:tid 2536512] [client 144.172.105.5:42380] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%33^339^339625A4%%ListView.tpl.php"] [unique_id "amsJnYkr4sKZ0CW2LbeqMAAAAAY"]
[Thu Jul 30 09:21:49.769526 2026] [authz_core:error] [pid 2545083:tid 2545083] [client 66.249.66.33:47453] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:21:49.772206 2026] [authz_core:error] [pid 2545083:tid 2545083] [client 66.249.66.33:47453] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:21:50.029508 2026] [security2:error] [pid 2544460:tid 2544460] [client 144.172.105.5:42384] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%34^347^347E6C93%%BackupServer.tpl.php"] [unique_id "amsJnqe7ZBXNUHEC2pCMFAAAABk"]
[Thu Jul 30 09:21:50.415669 2026] [security2:error] [pid 2539964:tid 2539964] [client 144.172.105.5:42398] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%37^377^3775BE77%%SentMailFolders.tpl.php"] [unique_id "amsJnjHx9eCuu0ycTSNM8gAAAAM"]
[Thu Jul 30 09:21:50.796870 2026] [security2:error] [pid 2544460:tid 2544460] [client 144.172.105.5:42404] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%41^41D^41DB8E12%%UserDetailView.tpl.php"] [unique_id "amsJnqe7ZBXNUHEC2pCMFQAAABk"]
[Thu Jul 30 09:21:51.206288 2026] [security2:error] [pid 2539964:tid 2539964] [client 144.172.105.5:42412] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%44^44E^44E69D4A%%ListWorkflows.tpl.php"] [unique_id "amsJnzHx9eCuu0ycTSNM8wAAAAM"]
[Thu Jul 30 09:21:51.793202 2026] [ssl:error] [pid 2542189:tid 2542189] (EAI 2)Name or service not known: [client 144.76.19.72:20996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:51.793235 2026] [ssl:error] [pid 2542189:tid 2542189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:51.849769 2026] [ssl:error] [pid 2538478:tid 2538478] (EAI 2)Name or service not known: [client 144.76.19.72:21010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:51.849798 2026] [ssl:error] [pid 2538478:tid 2538478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:52.037891 2026] [security2:error] [pid 2537788:tid 2537788] [client 144.172.105.5:42426] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%48^484^484D07DA%%CurrencyListViewEntries.tpl.php"] [unique_id "amsJoNbqCWdRLhigEE962wAAACg"]
[Thu Jul 30 09:21:52.451955 2026] [security2:error] [pid 2544412:tid 2544412] [client 144.172.105.5:42428] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%50^50C^50CD3FF2%%ProductDetails.tpl.php"] [unique_id "amsJoLLEvf-80yRR0HGXUgAAAAQ"]
[Thu Jul 30 09:21:52.532462 2026] [authz_core:error] [pid 2539964:tid 2539964] [client 57.141.0.54:40828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:21:52.533104 2026] [authz_core:error] [pid 2539964:tid 2539964] [client 57.141.0.54:40828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:21:52.889869 2026] [security2:error] [pid 2529748:tid 2529748] [client 144.172.105.5:42444] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%53^534^534FD024%%UserListViewContents.tpl.php"] [unique_id "amsJoLoknnVK7uKpm-050QAAACM"]
[Thu Jul 30 09:21:53.294232 2026] [security2:error] [pid 2533669:tid 2533669] [client 144.172.105.5:42458] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%59^59B^59BA81AA%%RelatedListsHidden.tpl.php"] [unique_id "amsJoTYpIRoooV2L-4KhdAAAABg"]
[Thu Jul 30 09:21:53.494750 2026] [security2:error] [pid 2533669:tid 2533669] [client 144.172.105.5:42458] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%60^60E^60E82AB2%%MySitesManage.tpl.php"] [unique_id "amsJoTYpIRoooV2L-4KhdQAAABg"]
[Thu Jul 30 09:21:53.884008 2026] [security2:error] [pid 2538566:tid 2538566] [client 144.172.105.5:42460] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%74^740^74091FC8%%PickList.tpl.php"] [unique_id "amsJoWAzkkMNRru8EAejwwAAADY"]
[Thu Jul 30 09:21:54.283961 2026] [security2:error] [pid 2533669:tid 2533669] [client 144.172.105.5:42470] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%76^769^769207FB%%PickListContents.tpl.php"] [unique_id "amsJojYpIRoooV2L-4KhdgAAABg"]
[Thu Jul 30 09:21:54.662043 2026] [security2:error] [pid 2538521:tid 2538521] [client 144.172.105.5:42480] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%83^83F^83F528E7%%ReportRunContents.tpl.php"] [unique_id "amsJood5HmpLvFcZvt9x5gAAADM"]
[Thu Jul 30 09:21:54.905204 2026] [ssl:error] [pid 2544413:tid 2544413] (EAI 2)Name or service not known: [client 144.76.19.72:21020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:54.905236 2026] [ssl:error] [pid 2544413:tid 2544413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:54.968629 2026] [ssl:error] [pid 2529845:tid 2529845] (EAI 2)Name or service not known: [client 144.76.19.72:21024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:54.968660 2026] [ssl:error] [pid 2529845:tid 2529845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:55.069859 2026] [security2:error] [pid 2546484:tid 2546484] [client 144.172.105.5:50960] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%84^84D^84DEA603%%Settings.tpl.php"] [unique_id "amsJo6Tma6OYtABUoMWJogAAABE"]
[Thu Jul 30 09:21:55.486022 2026] [security2:error] [pid 2538478:tid 2538478] [client 144.172.105.5:50968] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%84^843^84316E51%%DefModuleView.tpl.php"] [unique_id "amsJo9X3KcI7xHD1qJU5gQAAADA"]
[Thu Jul 30 09:21:55.543209 2026] [cgi:error] [pid 2538521:tid 2538521] [client 64.23.197.211:49528] AH02811: stderr from /usr/local/cpanel/cgi-sys/favicon.ico: script not found or unable to stat, referer: http://www.all4s.co.uk/cgi-sys/suspendedpage.cgi
[Thu Jul 30 09:21:55.865418 2026] [security2:error] [pid 2535137:tid 2535137] [client 144.172.105.5:50972] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%86^868^868E93C0%%LayoutBlockEntries.tpl.php"] [unique_id "amsJo7Y6AUW_ZsXORTxuCwAAAB8"]
[Thu Jul 30 09:21:56.249348 2026] [security2:error] [pid 2518708:tid 2518708] [client 144.172.105.5:50980] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%87^878^878BB8CB%%MenuEditor.tpl.php"] [unique_id "amsJpMBE1NQnMrj8NdmC3gAAACI"]
[Thu Jul 30 09:21:56.629315 2026] [security2:error] [pid 2540336:tid 2540336] [client 144.172.105.5:50990] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%87^879^879E00D3%%FirstTimeLogin.tpl.php"] [unique_id "amsJpL0cdldXzIta19OkcQAAABc"]
[Thu Jul 30 09:21:57.039391 2026] [security2:error] [pid 2541672:tid 2541672] [client 144.172.105.5:51006] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%88^881^8817832C%%Buttons_List.tpl.php"] [unique_id "amsJpWVT8yEm1kRzLvpo8QAAABs"]
[Thu Jul 30 09:21:57.460723 2026] [security2:error] [pid 2529845:tid 2529845] [client 144.172.105.5:51020] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%95^951^9513D631%%DetailViewHidden.tpl.php"] [unique_id "amsJpTnz0V0HyYIA5AhqowAAAC0"]
[Thu Jul 30 09:21:57.594766 2026] [security2:error] [pid 2529845:tid 2529845] [client 144.172.105.5:51020] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%99^99B^99BD0EE0%%BasicSetttingsContents.tpl.php"] [unique_id "amsJpTnz0V0HyYIA5AhqpAAAAC0"]
[Thu Jul 30 09:21:57.871772 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.191.171.3:17166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsJpbLEvf-80yRR0HGXVgAAAAQ"]
[Thu Jul 30 09:21:57.977173 2026] [security2:error] [pid 2539964:tid 2539964] [client 144.172.105.5:51022] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%A0^A03^A03C69DC%%InventoryCreateView.tpl.php"] [unique_id "amsJpTHx9eCuu0ycTSNM-QAAAAM"]
[Thu Jul 30 09:21:58.068309 2026] [ssl:error] [pid 2540336:tid 2540336] (EAI 2)Name or service not known: [client 144.76.19.72:21028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:58.068346 2026] [ssl:error] [pid 2540336:tid 2540336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:58.125135 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:21040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:21:58.125161 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:21:58.411179 2026] [security2:error] [pid 2540903:tid 2540903] [client 144.172.105.5:51038] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%A5^A56^A56B4989%%EditViewUI.tpl.php"] [unique_id "amsJppLf6bQG3Q2q_mFZeAAAADQ"]
[Thu Jul 30 09:21:58.650997 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.191.171.2:50610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/chancels.html"] [unique_id "amsJpjYpIRoooV2L-4KhdwAAABg"]
[Thu Jul 30 09:21:58.732756 2026] [authz_core:error] [pid 2537094:tid 2537094] [client 146.70.194.222:42162] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/error_log
[Thu Jul 30 09:21:58.761111 2026] [authz_core:error] [pid 2537094:tid 2537094] [client 146.70.194.222:42162] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 09:21:58.803231 2026] [security2:error] [pid 2535137:tid 2535137] [client 144.172.105.5:51054] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%A8^A8E^A8EB3331%%Reports.tpl.php"] [unique_id "amsJprY6AUW_ZsXORTxuDAAAAB8"]
[Thu Jul 30 09:21:59.194401 2026] [security2:error] [pid 2538566:tid 2538566] [client 144.172.105.5:51058] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%AB^ABE^ABEB075D%%Popup.tpl.php"] [unique_id "amsJp2AzkkMNRru8EAejxwAAADY"]
[Thu Jul 30 09:21:59.279671 2026] [core:error] [pid 2538304:tid 2538304] (13)Permission denied: [client 216.73.216.199:2636] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/iomem_base
[Thu Jul 30 09:21:59.581914 2026] [security2:error] [pid 2537094:tid 2537094] [client 144.172.105.5:51060] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%B5^B5B^B5BE4305%%UserEditView.tpl.php"] [unique_id "amsJpx5FGmHzkGrtAJ2nQAAAAAg"]
[Thu Jul 30 09:21:59.595993 2026] [security2:error] [pid 2546484:tid 2546484] [client 74.7.227.28:36906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/"] [unique_id "amsJp6Tma6OYtABUoMWJpQAAABE"], referer: https://www.websiterace.com
[Thu Jul 30 09:21:59.983747 2026] [security2:error] [pid 2546484:tid 2546484] [client 144.172.105.5:51062] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%B6^B60^B60CC562%%FieldUI.tpl.php"] [unique_id "amsJp6Tma6OYtABUoMWJpgAAABE"]
[Thu Jul 30 09:22:00.277631 2026] [cgi:error] [pid 2529793:tid 2529793] [client 64.23.197.211:37742] AH02811: stderr from /usr/local/cpanel/cgi-sys/favicon.ico: script not found or unable to stat, referer: https://www.all4s.co.uk/cgi-sys/suspendedpage.cgi
[Thu Jul 30 09:22:00.386984 2026] [security2:error] [pid 2533669:tid 2533669] [client 144.172.105.5:51066] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%B8^B8A^B8AE4258%%Header.tpl.php"] [unique_id "amsJqDYpIRoooV2L-4KheQAAABg"]
[Thu Jul 30 09:22:00.776988 2026] [security2:error] [pid 2544412:tid 2544412] [client 144.172.105.5:51076] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%BB^BB4^BB445D9C%%UserGroups.tpl.php"] [unique_id "amsJqLLEvf-80yRR0HGXWgAAAAQ"]
[Thu Jul 30 09:22:00.910881 2026] [security2:error] [pid 2544412:tid 2544412] [client 144.172.105.5:51076] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%BC^BC6^BC63A375%%RelatedListContents.tpl.php"] [unique_id "amsJqLLEvf-80yRR0HGXWwAAAAQ"]
[Thu Jul 30 09:22:01.211360 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:41596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:01.211395 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:01.262966 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:41612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:01.262995 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:01.308483 2026] [security2:error] [pid 2537094:tid 2537094] [client 144.172.105.5:51086] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%BE^BE4^BE444FFA%%DisplayFields.tpl.php"] [unique_id "amsJqR5FGmHzkGrtAJ2nRgAAAAg"]
[Thu Jul 30 09:22:01.460737 2026] [authz_core:error] [pid 2535137:tid 2535137] [client 146.70.194.222:47604] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:22:01.463363 2026] [security2:error] [pid 2537094:tid 2537094] [client 144.172.105.5:51086] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%C3^C34^C34B142B%%BasicSetttings.tpl.php"] [unique_id "amsJqR5FGmHzkGrtAJ2nRwAAAAg"]
[Thu Jul 30 09:22:01.872843 2026] [security2:error] [pid 2544461:tid 2544461] [client 144.172.105.5:51088] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%C6^C63^C63FC9F0%%CurrencyListView.tpl.php"] [unique_id "amsJqR15w_aaQhy8rzxgcQAAABw"]
[Thu Jul 30 09:22:02.079035 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/destroy_by_rcu
[Thu Jul 30 09:22:02.269699 2026] [security2:error] [pid 2537094:tid 2537094] [client 144.172.105.5:51100] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%D2^D23^D2308305%%UnifiedSearchModules.tpl.php"] [unique_id "amsJqh5FGmHzkGrtAJ2nSAAAAAg"]
[Thu Jul 30 09:22:02.313060 2026] [authz_core:error] [pid 2544461:tid 2544461] [client 146.70.194.222:53216] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/rest-api/search/error_log
[Thu Jul 30 09:22:02.653759 2026] [security2:error] [pid 2535137:tid 2535137] [client 144.172.105.5:51112] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%D3^D30^D30F25B2%%UserListView.tpl.php"] [unique_id "amsJqrY6AUW_ZsXORTxuEwAAAB8"]
[Thu Jul 30 09:22:03.067315 2026] [security2:error] [pid 2529793:tid 2529793] [client 144.172.105.5:51114] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%DC^DCF^DCF742A8%%EditQuickView.tpl.php"] [unique_id "amsJq0uNP7pkBEv3DIqjYAAAACY"]
[Thu Jul 30 09:22:03.114533 2026] [authz_core:error] [pid 2532797:tid 2532797] [client 146.70.194.222:53248] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 09:22:03.228788 2026] [core:error] [pid 2544412:tid 2544412] (13)Permission denied: [client 216.73.216.199:58499] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/drivers/vmd/uevent
[Thu Jul 30 09:22:03.582783 2026] [security2:error] [pid 2544461:tid 2544461] [client 144.172.105.5:51118] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%DF^DF2^DF26256E%%QuickCreateHidden.tpl.php"] [unique_id "amsJqx15w_aaQhy8rzxgdgAAABw"]
[Thu Jul 30 09:22:03.858133 2026] [cgi:error] [pid 2544412:tid 2544412] [client 216.73.216.199:58499] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/fil.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:22:03.858303 2026] [cgi:error] [pid 2544412:tid 2544412] [client 216.73.216.199:58499] End of script output before headers: fil.pl
[Thu Jul 30 09:22:03.883951 2026] [authz_core:error] [pid 2545134:tid 2545134] [client 146.70.194.222:53272] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 09:22:04.044013 2026] [security2:error] [pid 2542190:tid 2542190] [client 144.172.105.5:51130] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%E3^E30^E300D538%%Clock.tpl.php"] [unique_id "amsJrJoB_SF4N5AglQSV0AAAADE"]
[Thu Jul 30 09:22:04.315151 2026] [ssl:error] [pid 2541672:tid 2541672] (EAI 2)Name or service not known: [client 144.76.19.72:41622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:04.315193 2026] [ssl:error] [pid 2541672:tid 2541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:04.370218 2026] [ssl:error] [pid 2544461:tid 2544461] (EAI 2)Name or service not known: [client 144.76.19.72:41634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:04.370252 2026] [ssl:error] [pid 2544461:tid 2544461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:04.428428 2026] [security2:error] [pid 2532797:tid 2532797] [client 144.172.105.5:51144] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%E4^E4A^E4ACA2BB%%Footer.tpl.php"] [unique_id "amsJrMVSwDHKUN37iunqbAAAABA"]
[Thu Jul 30 09:22:04.565892 2026] [security2:error] [pid 2532797:tid 2532797] [client 144.172.105.5:51144] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%E4^E4D^E4DAC3FF%%LoginFooter.tpl.php"] [unique_id "amsJrMVSwDHKUN37iunqbQAAABA"]
[Thu Jul 30 09:22:04.631607 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 146.70.194.222:53276] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/error_log
[Thu Jul 30 09:22:04.695260 2026] [security2:error] [pid 2532797:tid 2532797] [client 144.172.105.5:51144] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%E7^E79^E79F9084%%MenuEditorAssign.tpl.php"] [unique_id "amsJrMVSwDHKUN37iunqbgAAABA"]
[Thu Jul 30 09:22:05.083936 2026] [security2:error] [pid 2544461:tid 2544461] [client 144.172.105.5:47730] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%E8^E8A^E8A2FF7B%%Login.tpl.php"] [unique_id "amsJrR15w_aaQhy8rzxgdwAAABw"]
[Thu Jul 30 09:22:05.175036 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 146.70.194.222:53282] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/error_log
[Thu Jul 30 09:22:05.643349 2026] [security2:error] [pid 2537718:tid 2537718] [client 144.172.105.5:47742] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%E8^E89^E892F765%%ModuleManager.tpl.php"] [unique_id "amsJrfi0I7yf3B3eS0-4OQAAABM"]
[Thu Jul 30 09:22:05.788697 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 146.70.194.222:53302] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/ChaCha20/error_log
[Thu Jul 30 09:22:06.074917 2026] [security2:error] [pid 2537161:tid 2537161] [client 144.172.105.5:47746] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%ED^ED8^ED8A47ED%%BackupServerContents.tpl.php"] [unique_id "amsJrv7KNmJnOlH-mGH0wwAAAA4"]
[Thu Jul 30 09:22:06.474471 2026] [security2:error] [pid 2537161:tid 2537161] [client 144.172.105.5:47748] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%EE^EED^EED69B93%%EmailContents.tpl.php"] [unique_id "amsJrv7KNmJnOlH-mGH0xAAAAA4"]
[Thu Jul 30 09:22:06.504748 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 146.70.194.222:53330] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/Curve25519/error_log
[Thu Jul 30 09:22:06.881114 2026] [security2:error] [pid 2546318:tid 2546318] [client 144.172.105.5:47760] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%EF^EF0^EF0081C7%%ModuleTitle.tpl.php"] [unique_id "amsJrlHYMcjG7zK12JuaxgAAAAI"]
[Thu Jul 30 09:22:06.920569 2026] [autoindex:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/annawagent9523/
[Thu Jul 30 09:22:07.092903 2026] [authz_core:error] [pid 2527235:tid 2527235] [client 146.70.194.222:53332] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/error_log
[Thu Jul 30 09:22:07.310302 2026] [security2:error] [pid 2544413:tid 2544413] [client 144.172.105.5:47768] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%F2^F28^F28AAA76%%OrgSharingDetailView.tpl.php"] [unique_id "amsJr76W4nf5Yfmi-LtCxwAAAAk"]
[Thu Jul 30 09:22:07.444811 2026] [ssl:error] [pid 2540335:tid 2540335] (EAI 2)Name or service not known: [client 144.76.19.72:41636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:07.444879 2026] [ssl:error] [pid 2540335:tid 2540335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:07.496802 2026] [ssl:error] [pid 2547393:tid 2547393] (EAI 2)Name or service not known: [client 144.76.19.72:41638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:07.496845 2026] [ssl:error] [pid 2547393:tid 2547393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:07.742357 2026] [security2:error] [pid 2538478:tid 2538478] [client 144.172.105.5:47772] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%F3^F38^F382763C%%RelatedListDataContents.tpl.php"] [unique_id "amsJr9X3KcI7xHD1qJU5hwAAADA"]
[Thu Jul 30 09:22:07.748818 2026] [core:error] [pid 2546536:tid 2546536] (13)Permission denied: [client 216.73.216.199:8820] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/maillog-20260712
[Thu Jul 30 09:22:08.129792 2026] [security2:error] [pid 2544413:tid 2544413] [client 144.172.105.5:47778] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "211"] [id "920220"] [rev "2"] [msg "URL Encoding Abuse Attack Attempt"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/Smarty/templates_c/%%F4^F45^F4554F9F%%EmailDetails.tpl.php"] [unique_id "amsJsL6W4nf5Yfmi-LtCyAAAAAk"]
[Thu Jul 30 09:22:08.325873 2026] [authz_core:error] [pid 2538478:tid 2538478] [client 146.70.194.222:53420] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/namespaced/Core/Poly1305/error_log
[Thu Jul 30 09:22:08.355263 2026] [core:error] [pid 2537161:tid 2537161] [client 66.249.64.170:60504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:22:08.355294 2026] [core:error] [pid 2537161:tid 2537161] [client 66.249.64.170:60504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:22:08.657426 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 144.172.105.5:47794] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/adodb/error_log
[Thu Jul 30 09:22:09.084925 2026] [authz_core:error] [pid 2527235:tid 2527235] [client 57.141.0.16:59784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:09.085554 2026] [authz_core:error] [pid 2527235:tid 2527235] [client 57.141.0.16:59784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:09.175462 2026] [security2:error] [pid 2537161:tid 2537161] [client 94.154.43.184:39606] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bes-systems.co.uk"] [uri "/.env"] [unique_id "amsJsf7KNmJnOlH-mGH0yAAAAA4"]
[Thu Jul 30 09:22:09.175795 2026] [security2:error] [pid 2537161:tid 2537161] [client 94.154.43.184:39606] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bes-systems.co.uk"] [uri "/.env"] [unique_id "amsJsf7KNmJnOlH-mGH0yAAAAA4"]
[Thu Jul 30 09:22:09.176162 2026] [security2:error] [pid 2537161:tid 2537161] [client 94.154.43.184:39606] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bes-systems.co.uk"] [uri "/.env"] [unique_id "amsJsf7KNmJnOlH-mGH0yAAAAA4"]
[Thu Jul 30 09:22:09.254967 2026] [autoindex:error] [pid 2546536:tid 2546536] [client 216.73.216.199:8820] AH01276: Cannot serve directory /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/elgg/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 09:22:09.419996 2026] [authz_core:error] [pid 2540335:tid 2540335] [client 146.70.194.222:53496] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/error_log
[Thu Jul 30 09:22:09.549238 2026] [security2:error] [pid 2544460:tid 2544460] [client 114.119.142.20:27717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579478400/cat_ids~17,103/request_format~html"] [unique_id "amsJsae7ZBXNUHEC2pCMGgAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579478400/cat_ids~17,103,18/request_format~html
[Thu Jul 30 09:22:10.016250 2026] [authz_core:error] [pid 2540335:tid 2540335] [client 146.70.194.222:53496] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 09:22:10.184899 2026] [authz_core:error] [pid 2538478:tid 2538478] [client 57.141.0.9:29272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:10.185527 2026] [authz_core:error] [pid 2538478:tid 2538478] [client 57.141.0.9:29272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:10.556259 2026] [ssl:error] [pid 2542190:tid 2542190] (EAI 2)Name or service not known: [client 144.76.19.72:24696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:10.556297 2026] [ssl:error] [pid 2542190:tid 2542190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:10.597229 2026] [security2:error] [pid 2540902:tid 2540902] [client 114.119.142.20:38113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579478400/cat_ids~17,103/request_format~html"] [unique_id "amsJsv5NpVIkJBIkFaWMVgAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579478400/cat_ids~17,103,18/request_format~html
[Thu Jul 30 09:22:10.612614 2026] [ssl:error] [pid 2527235:tid 2527235] (EAI 2)Name or service not known: [client 144.76.19.72:24706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:10.612643 2026] [ssl:error] [pid 2527235:tid 2527235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:11.346055 2026] [authz_core:error] [pid 2527235:tid 2527235] [client 146.70.194.222:53504] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/ChaCha20/error_log
[Thu Jul 30 09:22:12.056873 2026] [authz_core:error] [pid 2544460:tid 2544460] [client 146.70.194.222:53522] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/Curve25519/error_log
[Thu Jul 30 09:22:12.264849 2026] [ssl:error] [pid 2546536:tid 2546536] (70014)End of file found: [client 216.73.216.199:8820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:22:12.565491 2026] [autoindex:error] [pid 2540402:tid 2540402] [client 216.73.216.199:41106] AH01276: Cannot serve directory /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/softaculous/luxcal/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 09:22:13.167528 2026] [core:error] [pid 2538566:tid 2538566] [client 66.249.64.170:44341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:22:13.167551 2026] [core:error] [pid 2538566:tid 2538566] [client 66.249.64.170:44341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:22:13.276111 2026] [authz_core:error] [pid 2537718:tid 2537718] [client 144.172.105.5:47840] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/adodb/contrib/error_log
[Thu Jul 30 09:22:13.356773 2026] [security2:error] [pid 2547448:tid 2547448] [client 43.166.142.76:57138] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.devwebsitehub.com"] [uri "/"] [unique_id "amsJtZPBAO23C6MAa3YZeQAAAAo"]
[Thu Jul 30 09:22:13.669853 2026] [ssl:error] [pid 2548003:tid 2548003] (EAI 2)Name or service not known: [client 144.76.19.72:24720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:13.669889 2026] [ssl:error] [pid 2548003:tid 2548003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:13.719243 2026] [authz_core:error] [pid 2537718:tid 2537718] [client 146.70.194.222:40504] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core/Poly1305/error_log
[Thu Jul 30 09:22:13.723800 2026] [ssl:error] [pid 2548004:tid 2548004] (EAI 2)Name or service not known: [client 144.76.19.72:24734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:13.723825 2026] [ssl:error] [pid 2548004:tid 2548004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:13.928541 2026] [authz_core:error] [pid 2529748:tid 2529748] [client 144.172.105.5:47846] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/adodb/datadict/error_log
[Thu Jul 30 09:22:14.971641 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/mamaliz.co.uk.db
[Thu Jul 30 09:22:15.213786 2026] [authz_core:error] [pid 2537161:tid 2537161] [client 57.141.0.71:56810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:15.214432 2026] [authz_core:error] [pid 2537161:tid 2537161] [client 57.141.0.71:56810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:15.335209 2026] [authz_core:error] [pid 2548004:tid 2548004] [client 146.70.194.222:46149] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 09:22:15.607514 2026] [authz_core:error] [pid 2544460:tid 2544460] [client 66.249.66.34:50852] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:22:15.610231 2026] [authz_core:error] [pid 2544460:tid 2544460] [client 66.249.66.34:50852] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:22:15.762104 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.11:54972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:15.762797 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.11:54972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:15.999387 2026] [authz_core:error] [pid 2540403:tid 2540403] [client 144.172.105.5:47862] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/adodb/drivers/error_log
[Thu Jul 30 09:22:16.081207 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.53:43178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:16.081829 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.53:43178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:16.354412 2026] [authz_core:error] [pid 2537788:tid 2537788] [client 146.70.194.222:40576] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/ChaCha20/error_log
[Thu Jul 30 09:22:16.776603 2026] [ssl:error] [pid 2548004:tid 2548004] (EAI 2)Name or service not known: [client 144.76.19.72:24746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:16.776633 2026] [ssl:error] [pid 2548004:tid 2548004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:16.779889 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/lve-stats.log-20260301
[Thu Jul 30 09:22:16.828864 2026] [ssl:error] [pid 2548241:tid 2548241] (EAI 2)Name or service not known: [client 144.76.19.72:24754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:16.828907 2026] [ssl:error] [pid 2548241:tid 2548241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:17.055813 2026] [authz_core:error] [pid 2547450:tid 2547450] [client 146.70.194.222:40608] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/Curve25519/error_log
[Thu Jul 30 09:22:18.845626 2026] [authz_core:error] [pid 2547450:tid 2547450] [client 146.70.194.222:40650] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/sodium_compat/src/Core32/Poly1305/error_log
[Thu Jul 30 09:22:19.890158 2026] [ssl:error] [pid 2548315:tid 2548315] (EAI 2)Name or service not known: [client 144.76.19.72:56502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:19.890195 2026] [ssl:error] [pid 2548315:tid 2548315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:19.944509 2026] [ssl:error] [pid 2548241:tid 2548241] (EAI 2)Name or service not known: [client 144.76.19.72:56516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:19.944538 2026] [ssl:error] [pid 2548241:tid 2548241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:20.390843 2026] [ssl:error] [pid 2538566:tid 2538566] (5)Input/output error: [client 216.73.216.199:13396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:22:21.229882 2026] [authz_core:error] [pid 2539964:tid 2539964] [client 146.70.194.222:40728] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/theme-compat/error_log
[Thu Jul 30 09:22:21.259588 2026] [authz_core:error] [pid 2539964:tid 2539964] [client 146.70.194.222:40728] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-includes/widgets/error_log
[Thu Jul 30 09:22:21.319992 2026] [cgi:error] [pid 2527235:tid 2527235] [client 216.73.216.199:24255] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/hu.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:22:21.320038 2026] [cgi:error] [pid 2527235:tid 2527235] [client 216.73.216.199:24255] End of script output before headers: hu.pl
[Thu Jul 30 09:22:22.999088 2026] [ssl:error] [pid 2540903:tid 2540903] (EAI 2)Name or service not known: [client 144.76.19.72:56522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:22.999131 2026] [ssl:error] [pid 2540903:tid 2540903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:23.082653 2026] [ssl:error] [pid 2544413:tid 2544413] (EAI 2)Name or service not known: [client 144.76.19.72:56536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:23.082686 2026] [ssl:error] [pid 2544413:tid 2544413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:26.137595 2026] [ssl:error] [pid 2537718:tid 2537718] (EAI 2)Name or service not known: [client 144.76.19.72:56542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:26.137623 2026] [ssl:error] [pid 2537718:tid 2537718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:26.189094 2026] [ssl:error] [pid 2538566:tid 2538566] (EAI 2)Name or service not known: [client 144.76.19.72:56556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:26.189116 2026] [ssl:error] [pid 2538566:tid 2538566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:26.412510 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_extfree_intent/reclaim_account
[Thu Jul 30 09:22:26.542664 2026] [authz_core:error] [pid 2546535:tid 2546535] [client 144.172.105.5:35292] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/adodb/lang/error_log
[Thu Jul 30 09:22:27.227560 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/._wp-config.php"] [unique_id "amsJw6huyJ1JW91_JZsPBwAAACc"]
[Thu Jul 30 09:22:27.227716 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/._wp-config.php"] [unique_id "amsJw6huyJ1JW91_JZsPBwAAACc"]
[Thu Jul 30 09:22:27.227894 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/._wp-config.php"] [unique_id "amsJw6huyJ1JW91_JZsPBwAAACc"]
[Thu Jul 30 09:22:27.461701 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/.aws/keys.conf"] [unique_id "amsJw6huyJ1JW91_JZsPEQAAACc"]
[Thu Jul 30 09:22:27.461965 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.aws/keys.conf"] [unique_id "amsJw6huyJ1JW91_JZsPEQAAACc"]
[Thu Jul 30 09:22:27.462123 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.aws/keys.conf"] [unique_id "amsJw6huyJ1JW91_JZsPEQAAACc"]
[Thu Jul 30 09:22:27.593954 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amsJw6huyJ1JW91_JZsPFgAAACc"]
[Thu Jul 30 09:22:27.594288 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amsJw6huyJ1JW91_JZsPFgAAACc"]
[Thu Jul 30 09:22:27.594447 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amsJw6huyJ1JW91_JZsPFgAAACc"]
[Thu Jul 30 09:22:27.736789 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amsJw6huyJ1JW91_JZsPHAAAACc"]
[Thu Jul 30 09:22:27.736927 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amsJw6huyJ1JW91_JZsPHAAAACc"]
[Thu Jul 30 09:22:27.737090 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amsJw6huyJ1JW91_JZsPHAAAACc"]
[Thu Jul 30 09:22:28.244754 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amsJxKhuyJ1JW91_JZsPLwAAACc"]
[Thu Jul 30 09:22:28.244940 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amsJxKhuyJ1JW91_JZsPLwAAACc"]
[Thu Jul 30 09:22:28.245130 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amsJxKhuyJ1JW91_JZsPLwAAACc"]
[Thu Jul 30 09:22:28.289023 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.2"] [unique_id "amsJxKhuyJ1JW91_JZsPMQAAACc"]
[Thu Jul 30 09:22:28.289194 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.2"] [unique_id "amsJxKhuyJ1JW91_JZsPMQAAACc"]
[Thu Jul 30 09:22:28.289366 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.2"] [unique_id "amsJxKhuyJ1JW91_JZsPMQAAACc"]
[Thu Jul 30 09:22:28.324013 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws_access_keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.aws_access_keys"] [unique_id "amsJxKhuyJ1JW91_JZsPMgAAACc"]
[Thu Jul 30 09:22:28.324198 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.aws_access_keys"] [unique_id "amsJxKhuyJ1JW91_JZsPMgAAACc"]
[Thu Jul 30 09:22:28.324364 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.aws_access_keys"] [unique_id "amsJxKhuyJ1JW91_JZsPMgAAACc"]
[Thu Jul 30 09:22:28.418777 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.development.local"] [unique_id "amsJxKhuyJ1JW91_JZsPMwAAACc"]
[Thu Jul 30 09:22:28.418916 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.development.local"] [unique_id "amsJxKhuyJ1JW91_JZsPMwAAACc"]
[Thu Jul 30 09:22:28.419099 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.development.local"] [unique_id "amsJxKhuyJ1JW91_JZsPMwAAACc"]
[Thu Jul 30 09:22:28.464150 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.development.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPNAAAACc"]
[Thu Jul 30 09:22:28.464331 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.development.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPNAAAACc"]
[Thu Jul 30 09:22:28.464515 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.development.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPNAAAACc"]
[Thu Jul 30 09:22:28.500676 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.docker.dev"] [unique_id "amsJxKhuyJ1JW91_JZsPNQAAACc"]
[Thu Jul 30 09:22:28.500850 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.docker.dev"] [unique_id "amsJxKhuyJ1JW91_JZsPNQAAACc"]
[Thu Jul 30 09:22:28.501029 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.docker.dev"] [unique_id "amsJxKhuyJ1JW91_JZsPNQAAACc"]
[Thu Jul 30 09:22:28.523403 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.live"] [unique_id "amsJxKhuyJ1JW91_JZsPNgAAACc"]
[Thu Jul 30 09:22:28.523531 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.live"] [unique_id "amsJxKhuyJ1JW91_JZsPNgAAACc"]
[Thu Jul 30 09:22:28.523695 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.live"] [unique_id "amsJxKhuyJ1JW91_JZsPNgAAACc"]
[Thu Jul 30 09:22:28.546687 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer"] [unique_id "amsJxKhuyJ1JW91_JZsPNwAAACc"]
[Thu Jul 30 09:22:28.546822 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer"] [unique_id "amsJxKhuyJ1JW91_JZsPNwAAACc"]
[Thu Jul 30 09:22:28.546986 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer"] [unique_id "amsJxKhuyJ1JW91_JZsPNwAAACc"]
[Thu Jul 30 09:22:28.568112 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_dsn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer_dsn"] [unique_id "amsJxKhuyJ1JW91_JZsPOAAAACc"]
[Thu Jul 30 09:22:28.568275 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer_dsn"] [unique_id "amsJxKhuyJ1JW91_JZsPOAAAACc"]
[Thu Jul 30 09:22:28.568442 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer_dsn"] [unique_id "amsJxKhuyJ1JW91_JZsPOAAAACc"]
[Thu Jul 30 09:22:28.589936 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_url"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer_url"] [unique_id "amsJxKhuyJ1JW91_JZsPOQAAACc"]
[Thu Jul 30 09:22:28.590121 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer_url"] [unique_id "amsJxKhuyJ1JW91_JZsPOQAAACc"]
[Thu Jul 30 09:22:28.590295 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.mailer_url"] [unique_id "amsJxKhuyJ1JW91_JZsPOQAAACc"]
[Thu Jul 30 09:22:28.615989 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.mailgun"] [unique_id "amsJxKhuyJ1JW91_JZsPOgAAACc"]
[Thu Jul 30 09:22:28.616187 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.mailgun"] [unique_id "amsJxKhuyJ1JW91_JZsPOgAAACc"]
[Thu Jul 30 09:22:28.616360 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.mailgun"] [unique_id "amsJxKhuyJ1JW91_JZsPOgAAACc"]
[Thu Jul 30 09:22:28.634180 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailjet"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.mailjet"] [unique_id "amsJxKhuyJ1JW91_JZsPOwAAACc"]
[Thu Jul 30 09:22:28.634302 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.mailjet"] [unique_id "amsJxKhuyJ1JW91_JZsPOwAAACc"]
[Thu Jul 30 09:22:28.634458 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.mailjet"] [unique_id "amsJxKhuyJ1JW91_JZsPOwAAACc"]
[Thu Jul 30 09:22:28.657097 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mandrill"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.mandrill"] [unique_id "amsJxKhuyJ1JW91_JZsPPAAAACc"]
[Thu Jul 30 09:22:28.657259 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.mandrill"] [unique_id "amsJxKhuyJ1JW91_JZsPPAAAACc"]
[Thu Jul 30 09:22:28.657438 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.mandrill"] [unique_id "amsJxKhuyJ1JW91_JZsPPAAAACc"]
[Thu Jul 30 09:22:28.684746 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.prod.local"] [unique_id "amsJxKhuyJ1JW91_JZsPPQAAACc"]
[Thu Jul 30 09:22:28.684919 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.prod.local"] [unique_id "amsJxKhuyJ1JW91_JZsPPQAAACc"]
[Thu Jul 30 09:22:28.685118 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.prod.local"] [unique_id "amsJxKhuyJ1JW91_JZsPPQAAACc"]
[Thu Jul 30 09:22:28.715962 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPPgAAACc"]
[Thu Jul 30 09:22:28.716127 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPPgAAACc"]
[Thu Jul 30 09:22:28.716313 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPPgAAACc"]
[Thu Jul 30 09:22:28.736700 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.sample.php"] [unique_id "amsJxKhuyJ1JW91_JZsPPwAAACc"]
[Thu Jul 30 09:22:28.736866 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.sample.php"] [unique_id "amsJxKhuyJ1JW91_JZsPPwAAACc"]
[Thu Jul 30 09:22:28.737046 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.sample.php"] [unique_id "amsJxKhuyJ1JW91_JZsPPwAAACc"]
[Thu Jul 30 09:22:28.767087 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.sendgrid"] [unique_id "amsJxKhuyJ1JW91_JZsPQAAAACc"]
[Thu Jul 30 09:22:28.767269 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.sendgrid"] [unique_id "amsJxKhuyJ1JW91_JZsPQAAAACc"]
[Thu Jul 30 09:22:28.767464 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.sendgrid"] [unique_id "amsJxKhuyJ1JW91_JZsPQAAAACc"]
[Thu Jul 30 09:22:28.786293 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sparkpost"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.sparkpost"] [unique_id "amsJxKhuyJ1JW91_JZsPQQAAACc"]
[Thu Jul 30 09:22:28.786466 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.sparkpost"] [unique_id "amsJxKhuyJ1JW91_JZsPQQAAACc"]
[Thu Jul 30 09:22:28.786662 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.sparkpost"] [unique_id "amsJxKhuyJ1JW91_JZsPQQAAACc"]
[Thu Jul 30 09:22:28.822373 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/slots/10/module/uevent
[Thu Jul 30 09:22:28.823403 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.swp"] [unique_id "amsJxKhuyJ1JW91_JZsPQgAAACc"]
[Thu Jul 30 09:22:28.823519 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.swp"] [unique_id "amsJxKhuyJ1JW91_JZsPQgAAACc"]
[Thu Jul 30 09:22:28.823698 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.swp"] [unique_id "amsJxKhuyJ1JW91_JZsPQgAAACc"]
[Thu Jul 30 09:22:28.853054 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.localapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amsJxKhuyJ1JW91_JZsPQwAAACc"]
[Thu Jul 30 09:22:28.853239 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amsJxKhuyJ1JW91_JZsPQwAAACc"]
[Thu Jul 30 09:22:28.853415 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amsJxKhuyJ1JW91_JZsPQwAAACc"]
[Thu Jul 30 09:22:28.871701 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.test.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPRAAAACc"]
[Thu Jul 30 09:22:28.871875 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.test.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPRAAAACc"]
[Thu Jul 30 09:22:28.872063 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.test.sample"] [unique_id "amsJxKhuyJ1JW91_JZsPRAAAACc"]
[Thu Jul 30 09:22:28.896899 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.travis"] [unique_id "amsJxKhuyJ1JW91_JZsPRQAAACc"]
[Thu Jul 30 09:22:28.897089 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.travis"] [unique_id "amsJxKhuyJ1JW91_JZsPRQAAACc"]
[Thu Jul 30 09:22:28.897268 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.travis"] [unique_id "amsJxKhuyJ1JW91_JZsPRQAAACc"]
[Thu Jul 30 09:22:28.916323 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.txt"] [unique_id "amsJxKhuyJ1JW91_JZsPRgAAACc"]
[Thu Jul 30 09:22:28.916477 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.txt"] [unique_id "amsJxKhuyJ1JW91_JZsPRgAAACc"]
[Thu Jul 30 09:22:28.916656 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.txt"] [unique_id "amsJxKhuyJ1JW91_JZsPRgAAACc"]
[Thu Jul 30 09:22:28.934926 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.uat"] [unique_id "amsJxKhuyJ1JW91_JZsPRwAAACc"]
[Thu Jul 30 09:22:28.935099 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.uat"] [unique_id "amsJxKhuyJ1JW91_JZsPRwAAACc"]
[Thu Jul 30 09:22:28.935269 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.uat"] [unique_id "amsJxKhuyJ1JW91_JZsPRwAAACc"]
[Thu Jul 30 09:22:28.954188 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.www"] [unique_id "amsJxKhuyJ1JW91_JZsPSAAAACc"]
[Thu Jul 30 09:22:28.954348 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.www"] [unique_id "amsJxKhuyJ1JW91_JZsPSAAAACc"]
[Thu Jul 30 09:22:28.954524 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.www"] [unique_id "amsJxKhuyJ1JW91_JZsPSAAAACc"]
[Thu Jul 30 09:22:28.975360 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{dn}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.{{DN}}"] [unique_id "amsJxKhuyJ1JW91_JZsPSQAAACc"]
[Thu Jul 30 09:22:28.975520 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.{{DN}}"] [unique_id "amsJxKhuyJ1JW91_JZsPSQAAACc"]
[Thu Jul 30 09:22:28.975706 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.{{DN}}"] [unique_id "amsJxKhuyJ1JW91_JZsPSQAAACc"]
[Thu Jul 30 09:22:29.012303 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{sd}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env.{{SD}}"] [unique_id "amsJxahuyJ1JW91_JZsPSgAAACc"]
[Thu Jul 30 09:22:29.012480 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env.{{SD}}"] [unique_id "amsJxahuyJ1JW91_JZsPSgAAACc"]
[Thu Jul 30 09:22:29.012691 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env.{{SD}}"] [unique_id "amsJxahuyJ1JW91_JZsPSgAAACc"]
[Thu Jul 30 09:22:29.032499 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env-example"] [unique_id "amsJxahuyJ1JW91_JZsPSwAAACc"]
[Thu Jul 30 09:22:29.032666 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env-example"] [unique_id "amsJxahuyJ1JW91_JZsPSwAAACc"]
[Thu Jul 30 09:22:29.032833 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env-example"] [unique_id "amsJxahuyJ1JW91_JZsPSwAAACc"]
[Thu Jul 30 09:22:29.148849 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env-sample"] [unique_id "amsJxahuyJ1JW91_JZsPTAAAACc"]
[Thu Jul 30 09:22:29.149053 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env-sample"] [unique_id "amsJxahuyJ1JW91_JZsPTAAAACc"]
[Thu Jul 30 09:22:29.149283 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env-sample"] [unique_id "amsJxahuyJ1JW91_JZsPTAAAACc"]
[Thu Jul 30 09:22:29.168488 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env1"] [unique_id "amsJxahuyJ1JW91_JZsPTQAAACc"]
[Thu Jul 30 09:22:29.168715 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env1"] [unique_id "amsJxahuyJ1JW91_JZsPTQAAACc"]
[Thu Jul 30 09:22:29.168939 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env1"] [unique_id "amsJxahuyJ1JW91_JZsPTQAAACc"]
[Thu Jul 30 09:22:29.188232 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env_1"] [unique_id "amsJxahuyJ1JW91_JZsPTgAAACc"]
[Thu Jul 30 09:22:29.188461 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env_1"] [unique_id "amsJxahuyJ1JW91_JZsPTgAAACc"]
[Thu Jul 30 09:22:29.188735 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env_1"] [unique_id "amsJxahuyJ1JW91_JZsPTgAAACc"]
[Thu Jul 30 09:22:29.214259 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env_bak"] [unique_id "amsJxahuyJ1JW91_JZsPTwAAACc"]
[Thu Jul 30 09:22:29.214502 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env_bak"] [unique_id "amsJxahuyJ1JW91_JZsPTwAAACc"]
[Thu Jul 30 09:22:29.214760 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env_bak"] [unique_id "amsJxahuyJ1JW91_JZsPTwAAACc"]
[Thu Jul 30 09:22:29.233626 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env_old"] [unique_id "amsJxahuyJ1JW91_JZsPUAAAACc"]
[Thu Jul 30 09:22:29.233808 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env_old"] [unique_id "amsJxahuyJ1JW91_JZsPUAAAACc"]
[Thu Jul 30 09:22:29.234007 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env_old"] [unique_id "amsJxahuyJ1JW91_JZsPUAAAACc"]
[Thu Jul 30 09:22:29.244334 2026] [ssl:error] [pid 2547450:tid 2547450] (EAI 2)Name or service not known: [client 144.76.19.72:56566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:29.244374 2026] [ssl:error] [pid 2547450:tid 2547450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:29.252135 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env_sample"] [unique_id "amsJxahuyJ1JW91_JZsPUQAAACc"]
[Thu Jul 30 09:22:29.252344 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env_sample"] [unique_id "amsJxahuyJ1JW91_JZsPUQAAACc"]
[Thu Jul 30 09:22:29.252556 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env_sample"] [unique_id "amsJxahuyJ1JW91_JZsPUQAAACc"]
[Thu Jul 30 09:22:29.274640 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.envrc"] [unique_id "amsJxahuyJ1JW91_JZsPUgAAACc"]
[Thu Jul 30 09:22:29.274851 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.envrc"] [unique_id "amsJxahuyJ1JW91_JZsPUgAAACc"]
[Thu Jul 30 09:22:29.275109 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.envrc"] [unique_id "amsJxahuyJ1JW91_JZsPUgAAACc"]
[Thu Jul 30 09:22:29.293630 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.envs"] [unique_id "amsJxahuyJ1JW91_JZsPUwAAACc"]
[Thu Jul 30 09:22:29.293867 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.envs"] [unique_id "amsJxahuyJ1JW91_JZsPUwAAACc"]
[Thu Jul 30 09:22:29.294129 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.envs"] [unique_id "amsJxahuyJ1JW91_JZsPUwAAACc"]
[Thu Jul 30 09:22:29.297772 2026] [ssl:error] [pid 2538304:tid 2538304] (EAI 2)Name or service not known: [client 144.76.19.72:56578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:29.297803 2026] [ssl:error] [pid 2538304:tid 2538304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:29.332561 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.env~"] [unique_id "amsJxahuyJ1JW91_JZsPVAAAACc"]
[Thu Jul 30 09:22:29.332794 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.env~"] [unique_id "amsJxahuyJ1JW91_JZsPVAAAACc"]
[Thu Jul 30 09:22:29.333053 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.env~"] [unique_id "amsJxahuyJ1JW91_JZsPVAAAACc"]
[Thu Jul 30 09:22:29.423729 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/gsuite.bowersmillhotel.com.db
[Thu Jul 30 09:22:29.526966 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amsJxahuyJ1JW91_JZsPWQAAACc"]
[Thu Jul 30 09:22:29.527232 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amsJxahuyJ1JW91_JZsPWQAAACc"]
[Thu Jul 30 09:22:29.527494 2026] [security2:error] [pid 2542119:tid 2542119] [client 185.177.72.10:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amsJxahuyJ1JW91_JZsPWQAAACc"]
[Thu Jul 30 09:22:30.319482 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.vscode/.env"] [unique_id "amsJxqlwtuGZyGagkdI3WgAAACA"]
[Thu Jul 30 09:22:30.319674 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.vscode/.env"] [unique_id "amsJxqlwtuGZyGagkdI3WgAAACA"]
[Thu Jul 30 09:22:30.319881 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.vscode/.env"] [unique_id "amsJxqlwtuGZyGagkdI3WgAAACA"]
[Thu Jul 30 09:22:30.369806 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.bak"] [unique_id "amsJxqlwtuGZyGagkdI3XAAAACA"]
[Thu Jul 30 09:22:30.369962 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.bak"] [unique_id "amsJxqlwtuGZyGagkdI3XAAAACA"]
[Thu Jul 30 09:22:30.370153 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.bak"] [unique_id "amsJxqlwtuGZyGagkdI3XAAAACA"]
[Thu Jul 30 09:22:30.389042 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swm"] [unique_id "amsJxqlwtuGZyGagkdI3XQAAACA"]
[Thu Jul 30 09:22:30.389206 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swm"] [unique_id "amsJxqlwtuGZyGagkdI3XQAAACA"]
[Thu Jul 30 09:22:30.389381 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swm"] [unique_id "amsJxqlwtuGZyGagkdI3XQAAACA"]
[Thu Jul 30 09:22:30.417228 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swn"] [unique_id "amsJxqlwtuGZyGagkdI3XgAAACA"]
[Thu Jul 30 09:22:30.417382 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swn"] [unique_id "amsJxqlwtuGZyGagkdI3XgAAACA"]
[Thu Jul 30 09:22:30.417559 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swn"] [unique_id "amsJxqlwtuGZyGagkdI3XgAAACA"]
[Thu Jul 30 09:22:30.442437 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swo"] [unique_id "amsJxqlwtuGZyGagkdI3XwAAACA"]
[Thu Jul 30 09:22:30.442629 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swo"] [unique_id "amsJxqlwtuGZyGagkdI3XwAAACA"]
[Thu Jul 30 09:22:30.442832 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/.wp-config.php.swo"] [unique_id "amsJxqlwtuGZyGagkdI3XwAAACA"]
[Thu Jul 30 09:22:30.663259 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3ZgAAACA"]
[Thu Jul 30 09:22:30.663468 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3ZgAAACA"]
[Thu Jul 30 09:22:30.663703 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3ZgAAACA"]
[Thu Jul 30 09:22:30.687661 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3ZwAAACA"]
[Thu Jul 30 09:22:30.687936 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3ZwAAACA"]
[Thu Jul 30 09:22:30.688242 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3ZwAAACA"]
[Thu Jul 30 09:22:30.725359 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3aAAAACA"]
[Thu Jul 30 09:22:30.725554 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3aAAAACA"]
[Thu Jul 30 09:22:30.725766 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3aAAAACA"]
[Thu Jul 30 09:22:30.771931 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3aQAAACA"]
[Thu Jul 30 09:22:30.772132 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3aQAAACA"]
[Thu Jul 30 09:22:30.772344 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3aQAAACA"]
[Thu Jul 30 09:22:30.829892 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3agAAACA"]
[Thu Jul 30 09:22:30.830098 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3agAAACA"]
[Thu Jul 30 09:22:30.830292 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3agAAACA"]
[Thu Jul 30 09:22:30.853464 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3awAAACA"]
[Thu Jul 30 09:22:30.853606 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3awAAACA"]
[Thu Jul 30 09:22:30.853757 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amsJxqlwtuGZyGagkdI3awAAACA"]
[Thu Jul 30 09:22:30.933462 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amsJxqlwtuGZyGagkdI3bgAAACA"]
[Thu Jul 30 09:22:30.933611 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amsJxqlwtuGZyGagkdI3bgAAACA"]
[Thu Jul 30 09:22:30.933758 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amsJxqlwtuGZyGagkdI3bgAAACA"]
[Thu Jul 30 09:22:30.953926 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/31_structure_tests/.env"] [unique_id "amsJxqlwtuGZyGagkdI3bwAAACA"]
[Thu Jul 30 09:22:30.954041 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/31_structure_tests/.env"] [unique_id "amsJxqlwtuGZyGagkdI3bwAAACA"]
[Thu Jul 30 09:22:30.954201 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/31_structure_tests/.env"] [unique_id "amsJxqlwtuGZyGagkdI3bwAAACA"]
[Thu Jul 30 09:22:30.982136 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/API/.env"] [unique_id "amsJxqlwtuGZyGagkdI3cAAAACA"]
[Thu Jul 30 09:22:30.982261 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/API/.env"] [unique_id "amsJxqlwtuGZyGagkdI3cAAAACA"]
[Thu Jul 30 09:22:30.982417 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/API/.env"] [unique_id "amsJxqlwtuGZyGagkdI3cAAAACA"]
[Thu Jul 30 09:22:31.009496 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/API/.env.bak"] [unique_id "amsJx6lwtuGZyGagkdI3cQAAACA"]
[Thu Jul 30 09:22:31.009655 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/API/.env.bak"] [unique_id "amsJx6lwtuGZyGagkdI3cQAAACA"]
[Thu Jul 30 09:22:31.009825 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/API/.env.bak"] [unique_id "amsJx6lwtuGZyGagkdI3cQAAACA"]
[Thu Jul 30 09:22:31.050883 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/API/.env.dev"] [unique_id "amsJx6lwtuGZyGagkdI3cgAAACA"]
[Thu Jul 30 09:22:31.051057 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/API/.env.dev"] [unique_id "amsJx6lwtuGZyGagkdI3cgAAACA"]
[Thu Jul 30 09:22:31.051241 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/API/.env.dev"] [unique_id "amsJx6lwtuGZyGagkdI3cgAAACA"]
[Thu Jul 30 09:22:31.079423 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/API/.env.dist"] [unique_id "amsJx6lwtuGZyGagkdI3cwAAACA"]
[Thu Jul 30 09:22:31.079607 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/API/.env.dist"] [unique_id "amsJx6lwtuGZyGagkdI3cwAAACA"]
[Thu Jul 30 09:22:31.079788 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/API/.env.dist"] [unique_id "amsJx6lwtuGZyGagkdI3cwAAACA"]
[Thu Jul 30 09:22:31.109047 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/API/.env.local"] [unique_id "amsJx6lwtuGZyGagkdI3dAAAACA"]
[Thu Jul 30 09:22:31.109240 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/API/.env.local"] [unique_id "amsJx6lwtuGZyGagkdI3dAAAACA"]
[Thu Jul 30 09:22:31.109417 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/API/.env.local"] [unique_id "amsJx6lwtuGZyGagkdI3dAAAACA"]
[Thu Jul 30 09:22:31.159490 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/APP/.env"] [unique_id "amsJx6lwtuGZyGagkdI3dgAAACA"]
[Thu Jul 30 09:22:31.159632 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/APP/.env"] [unique_id "amsJx6lwtuGZyGagkdI3dgAAACA"]
[Thu Jul 30 09:22:31.159784 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/APP/.env"] [unique_id "amsJx6lwtuGZyGagkdI3dgAAACA"]
[Thu Jul 30 09:22:31.178909 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amsJx6lwtuGZyGagkdI3dwAAACA"]
[Thu Jul 30 09:22:31.179226 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amsJx6lwtuGZyGagkdI3dwAAACA"]
[Thu Jul 30 09:22:31.179386 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amsJx6lwtuGZyGagkdI3dwAAACA"]
[Thu Jul 30 09:22:31.204237 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Archipel/.env"] [unique_id "amsJx6lwtuGZyGagkdI3eAAAACA"]
[Thu Jul 30 09:22:31.204385 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Archipel/.env"] [unique_id "amsJx6lwtuGZyGagkdI3eAAAACA"]
[Thu Jul 30 09:22:31.204555 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Archipel/.env"] [unique_id "amsJx6lwtuGZyGagkdI3eAAAACA"]
[Thu Jul 30 09:22:31.234427 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Assignment3/.env"] [unique_id "amsJx6lwtuGZyGagkdI3eQAAACA"]
[Thu Jul 30 09:22:31.234610 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Assignment3/.env"] [unique_id "amsJx6lwtuGZyGagkdI3eQAAACA"]
[Thu Jul 30 09:22:31.234796 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Assignment3/.env"] [unique_id "amsJx6lwtuGZyGagkdI3eQAAACA"]
[Thu Jul 30 09:22:31.256035 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Assignment4/.env"] [unique_id "amsJx6lwtuGZyGagkdI3egAAACA"]
[Thu Jul 30 09:22:31.256179 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Assignment4/.env"] [unique_id "amsJx6lwtuGZyGagkdI3egAAACA"]
[Thu Jul 30 09:22:31.256338 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Assignment4/.env"] [unique_id "amsJx6lwtuGZyGagkdI3egAAACA"]
[Thu Jul 30 09:22:31.284775 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/BACK/.env"] [unique_id "amsJx6lwtuGZyGagkdI3ewAAACA"]
[Thu Jul 30 09:22:31.284956 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/BACK/.env"] [unique_id "amsJx6lwtuGZyGagkdI3ewAAACA"]
[Thu Jul 30 09:22:31.285150 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/BACK/.env"] [unique_id "amsJx6lwtuGZyGagkdI3ewAAACA"]
[Thu Jul 30 09:22:31.304818 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/BACKEND/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fAAAACA"]
[Thu Jul 30 09:22:31.304979 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/BACKEND/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fAAAACA"]
[Thu Jul 30 09:22:31.305172 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/BACKEND/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fAAAACA"]
[Thu Jul 30 09:22:31.342618 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/BackEnd/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fQAAACA"]
[Thu Jul 30 09:22:31.342753 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/BackEnd/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fQAAACA"]
[Thu Jul 30 09:22:31.342947 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/BackEnd/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fQAAACA"]
[Thu Jul 30 09:22:31.388749 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/Build.bat"] [unique_id "amsJx6lwtuGZyGagkdI3fgAAACA"]
[Thu Jul 30 09:22:31.389078 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Build.bat"] [unique_id "amsJx6lwtuGZyGagkdI3fgAAACA"]
[Thu Jul 30 09:22:31.389260 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Build.bat"] [unique_id "amsJx6lwtuGZyGagkdI3fgAAACA"]
[Thu Jul 30 09:22:31.408843 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Chai/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fwAAACA"]
[Thu Jul 30 09:22:31.409027 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Chai/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fwAAACA"]
[Thu Jul 30 09:22:31.409231 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Chai/.env"] [unique_id "amsJx6lwtuGZyGagkdI3fwAAACA"]
[Thu Jul 30 09:22:31.446893 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ClientApp/.env"] [unique_id "amsJx6lwtuGZyGagkdI3gAAAACA"]
[Thu Jul 30 09:22:31.447043 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ClientApp/.env"] [unique_id "amsJx6lwtuGZyGagkdI3gAAAACA"]
[Thu Jul 30 09:22:31.447245 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ClientApp/.env"] [unique_id "amsJx6lwtuGZyGagkdI3gAAAACA"]
[Thu Jul 30 09:22:31.469494 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amsJx6lwtuGZyGagkdI3gQAAACA"]
[Thu Jul 30 09:22:31.469684 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amsJx6lwtuGZyGagkdI3gQAAACA"]
[Thu Jul 30 09:22:31.469887 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amsJx6lwtuGZyGagkdI3gQAAACA"]
[Thu Jul 30 09:22:31.504968 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amsJx6lwtuGZyGagkdI3ggAAACA"]
[Thu Jul 30 09:22:31.505160 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amsJx6lwtuGZyGagkdI3ggAAACA"]
[Thu Jul 30 09:22:31.505354 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amsJx6lwtuGZyGagkdI3ggAAACA"]
[Thu Jul 30 09:22:31.545736 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hAAAACA"]
[Thu Jul 30 09:22:31.545864 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hAAAACA"]
[Thu Jul 30 09:22:31.546030 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hAAAACA"]
[Thu Jul 30 09:22:31.571862 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hQAAACA"]
[Thu Jul 30 09:22:31.572023 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hQAAACA"]
[Thu Jul 30 09:22:31.572210 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hQAAACA"]
[Thu Jul 30 09:22:31.595170 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/FE/huey/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hgAAACA"]
[Thu Jul 30 09:22:31.595327 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/FE/huey/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hgAAACA"]
[Thu Jul 30 09:22:31.595509 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/FE/huey/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hgAAACA"]
[Thu Jul 30 09:22:31.623998 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hwAAACA"]
[Thu Jul 30 09:22:31.624176 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hwAAACA"]
[Thu Jul 30 09:22:31.624351 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amsJx6lwtuGZyGagkdI3hwAAACA"]
[Thu Jul 30 09:22:31.643732 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/FRONT/.env"] [unique_id "amsJx6lwtuGZyGagkdI3iAAAACA"]
[Thu Jul 30 09:22:31.643889 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/FRONT/.env"] [unique_id "amsJx6lwtuGZyGagkdI3iAAAACA"]
[Thu Jul 30 09:22:31.644061 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/FRONT/.env"] [unique_id "amsJx6lwtuGZyGagkdI3iAAAACA"]
[Thu Jul 30 09:22:31.670480 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/FRONTEND/.env"] [unique_id "amsJx6lwtuGZyGagkdI3iQAAACA"]
[Thu Jul 30 09:22:31.670634 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/FRONTEND/.env"] [unique_id "amsJx6lwtuGZyGagkdI3iQAAACA"]
[Thu Jul 30 09:22:31.670795 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/FRONTEND/.env"] [unique_id "amsJx6lwtuGZyGagkdI3iQAAACA"]
[Thu Jul 30 09:22:31.785301 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jQAAACA"]
[Thu Jul 30 09:22:31.785489 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jQAAACA"]
[Thu Jul 30 09:22:31.785700 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jQAAACA"]
[Thu Jul 30 09:22:31.811377 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jgAAACA"]
[Thu Jul 30 09:22:31.811555 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jgAAACA"]
[Thu Jul 30 09:22:31.811745 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jgAAACA"]
[Thu Jul 30 09:22:31.812438 2026] [security2:error] [pid 2529748:tid 2529748] [client 85.208.96.198:21320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/neil-rackers-wife"] [unique_id "amsJx7oknnVK7uKpm-055gAAACM"]
[Thu Jul 30 09:22:31.857389 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jwAAACA"]
[Thu Jul 30 09:22:31.857571 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jwAAACA"]
[Thu Jul 30 09:22:31.857779 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amsJx6lwtuGZyGagkdI3jwAAACA"]
[Thu Jul 30 09:22:31.893924 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kAAAACA"]
[Thu Jul 30 09:22:31.894117 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kAAAACA"]
[Thu Jul 30 09:22:31.894290 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kAAAACA"]
[Thu Jul 30 09:22:31.919797 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Hash/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kQAAACA"]
[Thu Jul 30 09:22:31.919916 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Hash/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kQAAACA"]
[Thu Jul 30 09:22:31.920109 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Hash/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kQAAACA"]
[Thu Jul 30 09:22:31.945706 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Helmetjs/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kgAAACA"]
[Thu Jul 30 09:22:31.945868 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Helmetjs/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kgAAACA"]
[Thu Jul 30 09:22:31.946040 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Helmetjs/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kgAAACA"]
[Thu Jul 30 09:22:31.967838 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Imagebord/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kwAAACA"]
[Thu Jul 30 09:22:31.968011 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Imagebord/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kwAAACA"]
[Thu Jul 30 09:22:31.968223 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Imagebord/.env"] [unique_id "amsJx6lwtuGZyGagkdI3kwAAACA"]
[Thu Jul 30 09:22:31.990286 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/InstantCV/server/.env"] [unique_id "amsJx6lwtuGZyGagkdI3lAAAACA"]
[Thu Jul 30 09:22:31.990458 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/InstantCV/server/.env"] [unique_id "amsJx6lwtuGZyGagkdI3lAAAACA"]
[Thu Jul 30 09:22:31.990646 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/InstantCV/server/.env"] [unique_id "amsJx6lwtuGZyGagkdI3lAAAACA"]
[Thu Jul 30 09:22:32.015500 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Kubernetes/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lQAAACA"]
[Thu Jul 30 09:22:32.015678 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Kubernetes/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lQAAACA"]
[Thu Jul 30 09:22:32.015870 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Kubernetes/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lQAAACA"]
[Thu Jul 30 09:22:32.034809 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Library/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lgAAACA"]
[Thu Jul 30 09:22:32.034939 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Library/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lgAAACA"]
[Thu Jul 30 09:22:32.035116 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Library/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lgAAACA"]
[Thu Jul 30 09:22:32.091209 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lwAAACA"]
[Thu Jul 30 09:22:32.091390 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lwAAACA"]
[Thu Jul 30 09:22:32.091574 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amsJyKlwtuGZyGagkdI3lwAAACA"]
[Thu Jul 30 09:22:32.112513 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mAAAACA"]
[Thu Jul 30 09:22:32.112705 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mAAAACA"]
[Thu Jul 30 09:22:32.112883 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mAAAACA"]
[Thu Jul 30 09:22:32.132240 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mQAAACA"]
[Thu Jul 30 09:22:32.132394 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mQAAACA"]
[Thu Jul 30 09:22:32.132572 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mQAAACA"]
[Thu Jul 30 09:22:32.176763 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mgAAACA"]
[Thu Jul 30 09:22:32.176936 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mgAAACA"]
[Thu Jul 30 09:22:32.177123 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mgAAACA"]
[Thu Jul 30 09:22:32.202600 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mwAAACA"]
[Thu Jul 30 09:22:32.202760 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mwAAACA"]
[Thu Jul 30 09:22:32.202925 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amsJyKlwtuGZyGagkdI3mwAAACA"]
[Thu Jul 30 09:22:32.238428 2026] [authz_core:error] [pid 2529793:tid 2529793] [client 146.70.194.222:40736] AH01630: client denied by server configuration: /home/spampcou/public_html/spamp.com/wp-admin/includes/error_log
[Thu Jul 30 09:22:32.302892 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Passportjs/.env"] [unique_id "amsJyKlwtuGZyGagkdI3nwAAACA"]
[Thu Jul 30 09:22:32.303059 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Passportjs/.env"] [unique_id "amsJyKlwtuGZyGagkdI3nwAAACA"]
[Thu Jul 30 09:22:32.303245 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Passportjs/.env"] [unique_id "amsJyKlwtuGZyGagkdI3nwAAACA"]
[Thu Jul 30 09:22:32.331491 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Serve_time_server/.env"] [unique_id "amsJyKlwtuGZyGagkdI3oAAAACA"]
[Thu Jul 30 09:22:32.331680 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Serve_time_server/.env"] [unique_id "amsJyKlwtuGZyGagkdI3oAAAACA"]
[Thu Jul 30 09:22:32.331873 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Serve_time_server/.env"] [unique_id "amsJyKlwtuGZyGagkdI3oAAAACA"]
[Thu Jul 30 09:22:32.353004 2026] [ssl:error] [pid 2536512:tid 2536512] (EAI 2)Name or service not known: [client 144.76.19.72:36584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:32.353033 2026] [ssl:error] [pid 2536512:tid 2536512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:32.407660 2026] [ssl:error] [pid 2541672:tid 2541672] (EAI 2)Name or service not known: [client 144.76.19.72:36586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:32.407693 2026] [ssl:error] [pid 2541672:tid 2541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:32.420285 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Server_with_db/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pAAAACA"]
[Thu Jul 30 09:22:32.420449 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Server_with_db/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pAAAACA"]
[Thu Jul 30 09:22:32.420668 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Server_with_db/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pAAAACA"]
[Thu Jul 30 09:22:32.442592 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Simple_server/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pQAAACA"]
[Thu Jul 30 09:22:32.442790 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Simple_server/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pQAAACA"]
[Thu Jul 30 09:22:32.442975 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Simple_server/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pQAAACA"]
[Thu Jul 30 09:22:32.462047 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Socketio/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pgAAACA"]
[Thu Jul 30 09:22:32.462231 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Socketio/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pgAAACA"]
[Thu Jul 30 09:22:32.462400 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Socketio/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pgAAACA"]
[Thu Jul 30 09:22:32.485622 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Sources/API/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pwAAACA"]
[Thu Jul 30 09:22:32.485792 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Sources/API/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pwAAACA"]
[Thu Jul 30 09:22:32.485981 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Sources/API/.env"] [unique_id "amsJyKlwtuGZyGagkdI3pwAAACA"]
[Thu Jul 30 09:22:32.514520 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/SpotiApps/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qAAAACA"]
[Thu Jul 30 09:22:32.514690 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/SpotiApps/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qAAAACA"]
[Thu Jul 30 09:22:32.514863 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/SpotiApps/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qAAAACA"]
[Thu Jul 30 09:22:32.536052 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Tests/Application/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qQAAACA"]
[Thu Jul 30 09:22:32.536217 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Tests/Application/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qQAAACA"]
[Thu Jul 30 09:22:32.536400 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Tests/Application/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qQAAACA"]
[Thu Jul 30 09:22:32.595745 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Travel_form/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qgAAACA"]
[Thu Jul 30 09:22:32.595876 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Travel_form/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qgAAACA"]
[Thu Jul 30 09:22:32.596058 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Travel_form/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qgAAACA"]
[Thu Jul 30 09:22:32.627338 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/User_info/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qwAAACA"]
[Thu Jul 30 09:22:32.627530 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/User_info/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qwAAACA"]
[Thu Jul 30 09:22:32.627765 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/User_info/.env"] [unique_id "amsJyKlwtuGZyGagkdI3qwAAACA"]
[Thu Jul 30 09:22:32.742332 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amsJyKlwtuGZyGagkdI3rgAAACA"]
[Thu Jul 30 09:22:32.742617 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amsJyKlwtuGZyGagkdI3rgAAACA"]
[Thu Jul 30 09:22:32.742915 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:52662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amsJyKlwtuGZyGagkdI3rgAAACA"]
[Thu Jul 30 09:22:33.156284 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/_static/.env"] [unique_id "amsJydKcETKhuQwEqcjeCAAAACo"]
[Thu Jul 30 09:22:33.156454 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/_static/.env"] [unique_id "amsJydKcETKhuQwEqcjeCAAAACo"]
[Thu Jul 30 09:22:33.156682 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/_static/.env"] [unique_id "amsJydKcETKhuQwEqcjeCAAAACo"]
[Thu Jul 30 09:22:33.234675 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /account/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/account/.env"] [unique_id "amsJydKcETKhuQwEqcjeCwAAACo"]
[Thu Jul 30 09:22:33.234858 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/account/.env"] [unique_id "amsJydKcETKhuQwEqcjeCwAAACo"]
[Thu Jul 30 09:22:33.235051 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/account/.env"] [unique_id "amsJydKcETKhuQwEqcjeCwAAACo"]
[Thu Jul 30 09:22:33.274372 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /account/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/account/.git/config"] [unique_id "amsJydKcETKhuQwEqcjeDQAAACo"]
[Thu Jul 30 09:22:33.274547 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/account/.git/config"] [unique_id "amsJydKcETKhuQwEqcjeDQAAACo"]
[Thu Jul 30 09:22:33.274743 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/account/.git/config"] [unique_id "amsJydKcETKhuQwEqcjeDQAAACo"]
[Thu Jul 30 09:22:33.450447 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amsJydKcETKhuQwEqcjeEgAAACo"]
[Thu Jul 30 09:22:33.450818 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amsJydKcETKhuQwEqcjeEgAAACo"]
[Thu Jul 30 09:22:33.451014 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amsJydKcETKhuQwEqcjeEgAAACo"]
[Thu Jul 30 09:22:33.476081 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/account/api-config.ini"] [unique_id "amsJydKcETKhuQwEqcjeEwAAACo"]
[Thu Jul 30 09:22:33.476423 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/account/api-config.ini"] [unique_id "amsJydKcETKhuQwEqcjeEwAAACo"]
[Thu Jul 30 09:22:33.476621 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/account/api-config.ini"] [unique_id "amsJydKcETKhuQwEqcjeEwAAACo"]
[Thu Jul 30 09:22:33.571765 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/account/laravel.log"] [unique_id "amsJydKcETKhuQwEqcjeFgAAACo"]
[Thu Jul 30 09:22:33.572044 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/account/laravel.log"] [unique_id "amsJydKcETKhuQwEqcjeFgAAACo"]
[Thu Jul 30 09:22:33.572222 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/account/laravel.log"] [unique_id "amsJydKcETKhuQwEqcjeFgAAACo"]
[Thu Jul 30 09:22:33.642859 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/account/web.config"] [unique_id "amsJydKcETKhuQwEqcjeGQAAACo"]
[Thu Jul 30 09:22:33.643086 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /account/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/account/web.config"] [unique_id "amsJydKcETKhuQwEqcjeGQAAACo"]
[Thu Jul 30 09:22:33.643202 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/account/web.config"] [unique_id "amsJydKcETKhuQwEqcjeGQAAACo"]
[Thu Jul 30 09:22:33.643354 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/account/web.config"] [unique_id "amsJydKcETKhuQwEqcjeGQAAACo"]
[Thu Jul 30 09:22:33.666826 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/acme-challenge/.env"] [unique_id "amsJydKcETKhuQwEqcjeGgAAACo"]
[Thu Jul 30 09:22:33.666959 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/acme-challenge/.env"] [unique_id "amsJydKcETKhuQwEqcjeGgAAACo"]
[Thu Jul 30 09:22:33.667131 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/acme-challenge/.env"] [unique_id "amsJydKcETKhuQwEqcjeGgAAACo"]
[Thu Jul 30 09:22:33.698397 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/acme/.env"] [unique_id "amsJydKcETKhuQwEqcjeGwAAACo"]
[Thu Jul 30 09:22:33.698542 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/acme/.env"] [unique_id "amsJydKcETKhuQwEqcjeGwAAACo"]
[Thu Jul 30 09:22:33.698721 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/acme/.env"] [unique_id "amsJydKcETKhuQwEqcjeGwAAACo"]
[Thu Jul 30 09:22:33.717401 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/acme_challenges/.env"] [unique_id "amsJydKcETKhuQwEqcjeHAAAACo"]
[Thu Jul 30 09:22:33.717531 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/acme_challenges/.env"] [unique_id "amsJydKcETKhuQwEqcjeHAAAACo"]
[Thu Jul 30 09:22:33.717699 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/acme_challenges/.env"] [unique_id "amsJydKcETKhuQwEqcjeHAAAACo"]
[Thu Jul 30 09:22:33.742392 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/actions-server/.env"] [unique_id "amsJydKcETKhuQwEqcjeHQAAACo"]
[Thu Jul 30 09:22:33.742560 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/actions-server/.env"] [unique_id "amsJydKcETKhuQwEqcjeHQAAACo"]
[Thu Jul 30 09:22:33.742744 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/actions-server/.env"] [unique_id "amsJydKcETKhuQwEqcjeHQAAACo"]
[Thu Jul 30 09:22:33.762606 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/adm/.env"] [unique_id "amsJydKcETKhuQwEqcjeHgAAACo"]
[Thu Jul 30 09:22:33.762750 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/adm/.env"] [unique_id "amsJydKcETKhuQwEqcjeHgAAACo"]
[Thu Jul 30 09:22:33.762909 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/adm/.env"] [unique_id "amsJydKcETKhuQwEqcjeHgAAACo"]
[Thu Jul 30 09:22:33.786769 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.bak"] [unique_id "amsJydKcETKhuQwEqcjeHwAAACo"]
[Thu Jul 30 09:22:33.786920 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.bak"] [unique_id "amsJydKcETKhuQwEqcjeHwAAACo"]
[Thu Jul 30 09:22:33.787105 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.bak"] [unique_id "amsJydKcETKhuQwEqcjeHwAAACo"]
[Thu Jul 30 09:22:33.807386 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.dev"] [unique_id "amsJydKcETKhuQwEqcjeIAAAACo"]
[Thu Jul 30 09:22:33.807529 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.dev"] [unique_id "amsJydKcETKhuQwEqcjeIAAAACo"]
[Thu Jul 30 09:22:33.807697 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.dev"] [unique_id "amsJydKcETKhuQwEqcjeIAAAACo"]
[Thu Jul 30 09:22:33.834008 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.dist"] [unique_id "amsJydKcETKhuQwEqcjeIQAAACo"]
[Thu Jul 30 09:22:33.834157 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.dist"] [unique_id "amsJydKcETKhuQwEqcjeIQAAACo"]
[Thu Jul 30 09:22:33.834308 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.dist"] [unique_id "amsJydKcETKhuQwEqcjeIQAAACo"]
[Thu Jul 30 09:22:33.854321 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.local"] [unique_id "amsJydKcETKhuQwEqcjeIgAAACo"]
[Thu Jul 30 09:22:33.854456 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.local"] [unique_id "amsJydKcETKhuQwEqcjeIgAAACo"]
[Thu Jul 30 09:22:33.854621 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/adm/.env.local"] [unique_id "amsJydKcETKhuQwEqcjeIgAAACo"]
[Thu Jul 30 09:22:34.741784 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/adm/php.ini"] [unique_id "amsJytKcETKhuQwEqcjeRQAAACo"]
[Thu Jul 30 09:22:34.742051 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/adm/php.ini"] [unique_id "amsJytKcETKhuQwEqcjeRQAAACo"]
[Thu Jul 30 09:22:34.742209 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/adm/php.ini"] [unique_id "amsJytKcETKhuQwEqcjeRQAAACo"]
[Thu Jul 30 09:22:34.779257 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/LNXSYSTM:00/LNXSYBUS:00/subsystem/uevent
[Thu Jul 30 09:22:35.160305 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin-app/.env"] [unique_id "amsJy9KcETKhuQwEqcjeWQAAACo"]
[Thu Jul 30 09:22:35.160421 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin-app/.env"] [unique_id "amsJy9KcETKhuQwEqcjeWQAAACo"]
[Thu Jul 30 09:22:35.160568 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin-app/.env"] [unique_id "amsJy9KcETKhuQwEqcjeWQAAACo"]
[Thu Jul 30 09:22:35.179797 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.bak"] [unique_id "amsJy9KcETKhuQwEqcjeWgAAACo"]
[Thu Jul 30 09:22:35.179960 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.bak"] [unique_id "amsJy9KcETKhuQwEqcjeWgAAACo"]
[Thu Jul 30 09:22:35.180148 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.bak"] [unique_id "amsJy9KcETKhuQwEqcjeWgAAACo"]
[Thu Jul 30 09:22:35.199729 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.dev"] [unique_id "amsJy9KcETKhuQwEqcjeWwAAACo"]
[Thu Jul 30 09:22:35.199886 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.dev"] [unique_id "amsJy9KcETKhuQwEqcjeWwAAACo"]
[Thu Jul 30 09:22:35.200052 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.dev"] [unique_id "amsJy9KcETKhuQwEqcjeWwAAACo"]
[Thu Jul 30 09:22:35.219335 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.dist"] [unique_id "amsJy9KcETKhuQwEqcjeXAAAACo"]
[Thu Jul 30 09:22:35.219469 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.dist"] [unique_id "amsJy9KcETKhuQwEqcjeXAAAACo"]
[Thu Jul 30 09:22:35.219628 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.dist"] [unique_id "amsJy9KcETKhuQwEqcjeXAAAACo"]
[Thu Jul 30 09:22:35.241058 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.local"] [unique_id "amsJy9KcETKhuQwEqcjeXQAAACo"]
[Thu Jul 30 09:22:35.241189 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.local"] [unique_id "amsJy9KcETKhuQwEqcjeXQAAACo"]
[Thu Jul 30 09:22:35.241334 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.local"] [unique_id "amsJy9KcETKhuQwEqcjeXQAAACo"]
[Thu Jul 30 09:22:35.260920 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.production"] [unique_id "amsJy9KcETKhuQwEqcjeXgAAACo"]
[Thu Jul 30 09:22:35.261176 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.production"] [unique_id "amsJy9KcETKhuQwEqcjeXgAAACo"]
[Thu Jul 30 09:22:35.261392 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.production"] [unique_id "amsJy9KcETKhuQwEqcjeXgAAACo"]
[Thu Jul 30 09:22:35.282865 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.staging"] [unique_id "amsJy9KcETKhuQwEqcjeXwAAACo"]
[Thu Jul 30 09:22:35.283110 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.staging"] [unique_id "amsJy9KcETKhuQwEqcjeXwAAACo"]
[Thu Jul 30 09:22:35.283348 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.env.staging"] [unique_id "amsJy9KcETKhuQwEqcjeXwAAACo"]
[Thu Jul 30 09:22:35.322644 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/.git/config"] [unique_id "amsJy9KcETKhuQwEqcjeYQAAACo"]
[Thu Jul 30 09:22:35.322904 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/.git/config"] [unique_id "amsJy9KcETKhuQwEqcjeYQAAACo"]
[Thu Jul 30 09:22:35.323161 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/.git/config"] [unique_id "amsJy9KcETKhuQwEqcjeYQAAACo"]
[Thu Jul 30 09:22:35.434240 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amsJy9KcETKhuQwEqcjeZgAAACo"]
[Thu Jul 30 09:22:35.434685 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amsJy9KcETKhuQwEqcjeZgAAACo"]
[Thu Jul 30 09:22:35.434922 2026] [security2:error] [pid 2548319:tid 2548319] [client 185.177.72.10:52674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amsJy9KcETKhuQwEqcjeZgAAACo"]
[Thu Jul 30 09:22:35.462312 2026] [ssl:error] [pid 2541672:tid 2541672] (EAI 2)Name or service not known: [client 144.76.19.72:36600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:35.462358 2026] [ssl:error] [pid 2541672:tid 2541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:35.492746 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/admin/api-config.ini"] [unique_id "amsJyzJoBMXYcF1V60e2-AAAABo"]
[Thu Jul 30 09:22:35.493119 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/api-config.ini"] [unique_id "amsJyzJoBMXYcF1V60e2-AAAABo"]
[Thu Jul 30 09:22:35.493307 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/api-config.ini"] [unique_id "amsJyzJoBMXYcF1V60e2-AAAABo"]
[Thu Jul 30 09:22:35.513806 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:36604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:35.513826 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:36.193526 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/admin/laravel.log"] [unique_id "amsJzDJoBMXYcF1V60e3HAAAABo"]
[Thu Jul 30 09:22:36.193833 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/laravel.log"] [unique_id "amsJzDJoBMXYcF1V60e3HAAAABo"]
[Thu Jul 30 09:22:36.193991 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/laravel.log"] [unique_id "amsJzDJoBMXYcF1V60e3HAAAABo"]
[Thu Jul 30 09:22:36.328169 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/admin/php.ini"] [unique_id "amsJzDJoBMXYcF1V60e3IwAAABo"]
[Thu Jul 30 09:22:36.328431 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/php.ini"] [unique_id "amsJzDJoBMXYcF1V60e3IwAAABo"]
[Thu Jul 30 09:22:36.328574 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/php.ini"] [unique_id "amsJzDJoBMXYcF1V60e3IwAAABo"]
[Thu Jul 30 09:22:36.552703 2026] [authz_core:error] [pid 2540902:tid 2540902] [client 144.172.105.5:45922] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/adodb/session/error_log
[Thu Jul 30 09:22:36.692746 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/admin/web.config"] [unique_id "amsJzDJoBMXYcF1V60e3NgAAABo"]
[Thu Jul 30 09:22:36.692949 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /admin/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admin/web.config"] [unique_id "amsJzDJoBMXYcF1V60e3NgAAABo"]
[Thu Jul 30 09:22:36.693051 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admin/web.config"] [unique_id "amsJzDJoBMXYcF1V60e3NgAAABo"]
[Thu Jul 30 09:22:36.693207 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admin/web.config"] [unique_id "amsJzDJoBMXYcF1V60e3NgAAABo"]
[Thu Jul 30 09:22:36.767491 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/adminer/.env"] [unique_id "amsJzDJoBMXYcF1V60e3OgAAABo"]
[Thu Jul 30 09:22:36.767671 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/adminer/.env"] [unique_id "amsJzDJoBMXYcF1V60e3OgAAABo"]
[Thu Jul 30 09:22:36.767847 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/adminer/.env"] [unique_id "amsJzDJoBMXYcF1V60e3OgAAABo"]
[Thu Jul 30 09:22:36.788545 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/administration/.env"] [unique_id "amsJzDJoBMXYcF1V60e3OwAAABo"]
[Thu Jul 30 09:22:36.788796 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/administration/.env"] [unique_id "amsJzDJoBMXYcF1V60e3OwAAABo"]
[Thu Jul 30 09:22:36.789015 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/administration/.env"] [unique_id "amsJzDJoBMXYcF1V60e3OwAAABo"]
[Thu Jul 30 09:22:36.806407 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.bak"] [unique_id "amsJzDJoBMXYcF1V60e3PAAAABo"]
[Thu Jul 30 09:22:36.806573 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.bak"] [unique_id "amsJzDJoBMXYcF1V60e3PAAAABo"]
[Thu Jul 30 09:22:36.806745 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.bak"] [unique_id "amsJzDJoBMXYcF1V60e3PAAAABo"]
[Thu Jul 30 09:22:36.825051 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.dev"] [unique_id "amsJzDJoBMXYcF1V60e3PQAAABo"]
[Thu Jul 30 09:22:36.825186 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.dev"] [unique_id "amsJzDJoBMXYcF1V60e3PQAAABo"]
[Thu Jul 30 09:22:36.825329 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.dev"] [unique_id "amsJzDJoBMXYcF1V60e3PQAAABo"]
[Thu Jul 30 09:22:36.845329 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.dist"] [unique_id "amsJzDJoBMXYcF1V60e3PgAAABo"]
[Thu Jul 30 09:22:36.845454 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.dist"] [unique_id "amsJzDJoBMXYcF1V60e3PgAAABo"]
[Thu Jul 30 09:22:36.845612 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.dist"] [unique_id "amsJzDJoBMXYcF1V60e3PgAAABo"]
[Thu Jul 30 09:22:36.863945 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.local"] [unique_id "amsJzDJoBMXYcF1V60e3PwAAABo"]
[Thu Jul 30 09:22:36.864156 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.local"] [unique_id "amsJzDJoBMXYcF1V60e3PwAAABo"]
[Thu Jul 30 09:22:36.864365 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:35108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/administration/.env.local"] [unique_id "amsJzDJoBMXYcF1V60e3PwAAABo"]
[Thu Jul 30 09:22:37.565419 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/administration/php.ini"] [unique_id "amsJzTYpIRoooV2L-4KhiwAAABg"]
[Thu Jul 30 09:22:37.565721 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/administration/php.ini"] [unique_id "amsJzTYpIRoooV2L-4KhiwAAABg"]
[Thu Jul 30 09:22:37.565880 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/administration/php.ini"] [unique_id "amsJzTYpIRoooV2L-4KhiwAAABg"]
[Thu Jul 30 09:22:38.023426 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admins/.env"] [unique_id "amsJzjYpIRoooV2L-4KhogAAABg"]
[Thu Jul 30 09:22:38.023572 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admins/.env"] [unique_id "amsJzjYpIRoooV2L-4KhogAAABg"]
[Thu Jul 30 09:22:38.023742 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admins/.env"] [unique_id "amsJzjYpIRoooV2L-4KhogAAABg"]
[Thu Jul 30 09:22:38.043148 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.bak"] [unique_id "amsJzjYpIRoooV2L-4KhowAAABg"]
[Thu Jul 30 09:22:38.043292 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.bak"] [unique_id "amsJzjYpIRoooV2L-4KhowAAABg"]
[Thu Jul 30 09:22:38.043448 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.bak"] [unique_id "amsJzjYpIRoooV2L-4KhowAAABg"]
[Thu Jul 30 09:22:38.062075 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.dev"] [unique_id "amsJzjYpIRoooV2L-4KhpAAAABg"]
[Thu Jul 30 09:22:38.062215 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.dev"] [unique_id "amsJzjYpIRoooV2L-4KhpAAAABg"]
[Thu Jul 30 09:22:38.062366 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.dev"] [unique_id "amsJzjYpIRoooV2L-4KhpAAAABg"]
[Thu Jul 30 09:22:38.081509 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.dist"] [unique_id "amsJzjYpIRoooV2L-4KhpQAAABg"]
[Thu Jul 30 09:22:38.081651 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.dist"] [unique_id "amsJzjYpIRoooV2L-4KhpQAAABg"]
[Thu Jul 30 09:22:38.081798 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.dist"] [unique_id "amsJzjYpIRoooV2L-4KhpQAAABg"]
[Thu Jul 30 09:22:38.093243 2026] [core:error] [pid 2540402:tid 2540402] (13)Permission denied: [client 216.73.216.199:41106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/slots/19/module/uevent
[Thu Jul 30 09:22:38.100839 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.local"] [unique_id "amsJzjYpIRoooV2L-4KhpgAAABg"]
[Thu Jul 30 09:22:38.100999 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.local"] [unique_id "amsJzjYpIRoooV2L-4KhpgAAABg"]
[Thu Jul 30 09:22:38.101158 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admins/.env.local"] [unique_id "amsJzjYpIRoooV2L-4KhpgAAABg"]
[Thu Jul 30 09:22:38.608664 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:36612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:38.608696 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:38.660373 2026] [ssl:error] [pid 2545134:tid 2545134] (EAI 2)Name or service not known: [client 144.76.19.72:36614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:38.660407 2026] [ssl:error] [pid 2545134:tid 2545134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:38.838934 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/admins/php.ini"] [unique_id "amsJzjYpIRoooV2L-4KhyQAAABg"]
[Thu Jul 30 09:22:38.839558 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/admins/php.ini"] [unique_id "amsJzjYpIRoooV2L-4KhyQAAABg"]
[Thu Jul 30 09:22:38.839878 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/admins/php.ini"] [unique_id "amsJzjYpIRoooV2L-4KhyQAAABg"]
[Thu Jul 30 09:22:39.233905 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/agora/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3AAAABg"]
[Thu Jul 30 09:22:39.234039 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/agora/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3AAAABg"]
[Thu Jul 30 09:22:39.234244 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/agora/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3AAAABg"]
[Thu Jul 30 09:22:39.253116 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/alpha/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3QAAABg"]
[Thu Jul 30 09:22:39.253264 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/alpha/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3QAAABg"]
[Thu Jul 30 09:22:39.253446 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/alpha/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3QAAABg"]
[Thu Jul 30 09:22:39.273171 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/anaconda/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3gAAABg"]
[Thu Jul 30 09:22:39.273372 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/anaconda/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3gAAABg"]
[Thu Jul 30 09:22:39.273548 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/anaconda/.env"] [unique_id "amsJzzYpIRoooV2L-4Kh3gAAABg"]
[Thu Jul 30 09:22:39.395656 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/api-config.ini"] [unique_id "amsJzzYpIRoooV2L-4Kh5AAAABg"]
[Thu Jul 30 09:22:39.396154 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api-config.ini"] [unique_id "amsJzzYpIRoooV2L-4Kh5AAAABg"]
[Thu Jul 30 09:22:39.396423 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api-config.ini"] [unique_id "amsJzzYpIRoooV2L-4Kh5AAAABg"]
[Thu Jul 30 09:22:39.417300 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/api/.env.bak"] [unique_id "amsJzzYpIRoooV2L-4Kh5QAAABg"]
[Thu Jul 30 09:22:39.417484 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/.env.bak"] [unique_id "amsJzzYpIRoooV2L-4Kh5QAAABg"]
[Thu Jul 30 09:22:39.417668 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/.env.bak"] [unique_id "amsJzzYpIRoooV2L-4Kh5QAAABg"]
[Thu Jul 30 09:22:39.437119 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/api/.env.dev"] [unique_id "amsJzzYpIRoooV2L-4Kh5gAAABg"]
[Thu Jul 30 09:22:39.437251 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/.env.dev"] [unique_id "amsJzzYpIRoooV2L-4Kh5gAAABg"]
[Thu Jul 30 09:22:39.437424 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/.env.dev"] [unique_id "amsJzzYpIRoooV2L-4Kh5gAAABg"]
[Thu Jul 30 09:22:39.457980 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/api/.env.dist"] [unique_id "amsJzzYpIRoooV2L-4Kh5wAAABg"]
[Thu Jul 30 09:22:39.458174 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/.env.dist"] [unique_id "amsJzzYpIRoooV2L-4Kh5wAAABg"]
[Thu Jul 30 09:22:39.458405 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/.env.dist"] [unique_id "amsJzzYpIRoooV2L-4Kh5wAAABg"]
[Thu Jul 30 09:22:39.477945 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/api/.env.test"] [unique_id "amsJzzYpIRoooV2L-4Kh6AAAABg"]
[Thu Jul 30 09:22:39.478114 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/.env.test"] [unique_id "amsJzzYpIRoooV2L-4Kh6AAAABg"]
[Thu Jul 30 09:22:39.478304 2026] [security2:error] [pid 2533669:tid 2533669] [client 185.177.72.10:35124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/.env.test"] [unique_id "amsJzzYpIRoooV2L-4Kh6AAAABg"]
[Thu Jul 30 09:22:39.935893 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 57.141.0.21:47466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:39.936516 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 57.141.0.21:47466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:40.208456 2026] [authz_core:error] [pid 2546536:tid 2546536] [client 144.172.105.5:45988] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/adodb/session/old/error_log
[Thu Jul 30 09:22:40.258005 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/api/php.ini"] [unique_id "amsJ0P5NpVIkJBIkFaWMjgAAAC8"]
[Thu Jul 30 09:22:40.258280 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/php.ini"] [unique_id "amsJ0P5NpVIkJBIkFaWMjgAAAC8"]
[Thu Jul 30 09:22:40.258443 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/php.ini"] [unique_id "amsJ0P5NpVIkJBIkFaWMjgAAAC8"]
[Thu Jul 30 09:22:40.484905 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/api/src/.env"] [unique_id "amsJ0P5NpVIkJBIkFaWMmgAAAC8"]
[Thu Jul 30 09:22:40.485034 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/api/src/.env"] [unique_id "amsJ0P5NpVIkJBIkFaWMmgAAAC8"]
[Thu Jul 30 09:22:40.485198 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/api/src/.env"] [unique_id "amsJ0P5NpVIkJBIkFaWMmgAAAC8"]
[Thu Jul 30 09:22:40.883006 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apis/.env"] [unique_id "amsJ0P5NpVIkJBIkFaWMrgAAAC8"]
[Thu Jul 30 09:22:40.883175 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/.env"] [unique_id "amsJ0P5NpVIkJBIkFaWMrgAAAC8"]
[Thu Jul 30 09:22:40.883329 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/.env"] [unique_id "amsJ0P5NpVIkJBIkFaWMrgAAAC8"]
[Thu Jul 30 09:22:40.904542 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.bak"] [unique_id "amsJ0P5NpVIkJBIkFaWMrwAAAC8"]
[Thu Jul 30 09:22:40.904710 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.bak"] [unique_id "amsJ0P5NpVIkJBIkFaWMrwAAAC8"]
[Thu Jul 30 09:22:40.904864 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.bak"] [unique_id "amsJ0P5NpVIkJBIkFaWMrwAAAC8"]
[Thu Jul 30 09:22:40.922975 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.dev"] [unique_id "amsJ0P5NpVIkJBIkFaWMsAAAAC8"]
[Thu Jul 30 09:22:40.923118 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.dev"] [unique_id "amsJ0P5NpVIkJBIkFaWMsAAAAC8"]
[Thu Jul 30 09:22:40.923266 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.dev"] [unique_id "amsJ0P5NpVIkJBIkFaWMsAAAAC8"]
[Thu Jul 30 09:22:40.942796 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.dist"] [unique_id "amsJ0P5NpVIkJBIkFaWMsQAAAC8"]
[Thu Jul 30 09:22:40.942945 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.dist"] [unique_id "amsJ0P5NpVIkJBIkFaWMsQAAAC8"]
[Thu Jul 30 09:22:40.943121 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.dist"] [unique_id "amsJ0P5NpVIkJBIkFaWMsQAAAC8"]
[Thu Jul 30 09:22:40.961552 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.local"] [unique_id "amsJ0P5NpVIkJBIkFaWMsgAAAC8"]
[Thu Jul 30 09:22:40.961723 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.local"] [unique_id "amsJ0P5NpVIkJBIkFaWMsgAAAC8"]
[Thu Jul 30 09:22:40.961888 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.local"] [unique_id "amsJ0P5NpVIkJBIkFaWMsgAAAC8"]
[Thu Jul 30 09:22:40.983592 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.production"] [unique_id "amsJ0P5NpVIkJBIkFaWMswAAAC8"]
[Thu Jul 30 09:22:40.983738 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.production"] [unique_id "amsJ0P5NpVIkJBIkFaWMswAAAC8"]
[Thu Jul 30 09:22:40.983913 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.production"] [unique_id "amsJ0P5NpVIkJBIkFaWMswAAAC8"]
[Thu Jul 30 09:22:41.002326 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.staging"] [unique_id "amsJ0f5NpVIkJBIkFaWMtAAAAC8"]
[Thu Jul 30 09:22:41.002465 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.staging"] [unique_id "amsJ0f5NpVIkJBIkFaWMtAAAAC8"]
[Thu Jul 30 09:22:41.002630 2026] [security2:error] [pid 2540902:tid 2540902] [client 185.177.72.10:35134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/.env.staging"] [unique_id "amsJ0f5NpVIkJBIkFaWMtAAAAC8"]
[Thu Jul 30 09:22:41.412998 2026] [core:error] [pid 2548319:tid 2548319] (13)Permission denied: [client 216.73.216.199:11443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/spampmusic.co.uk.db
[Thu Jul 30 09:22:41.445370 2026] [authz_core:error] [pid 2549677:tid 2549677] [client 82.102.18.190:59300] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/html-api/error_log
[Thu Jul 30 09:22:41.698249 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/apis/php.ini"] [unique_id "amsJ0UxyS1lMSLNDyjkEdAAAAA8"]
[Thu Jul 30 09:22:41.698609 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apis/php.ini"] [unique_id "amsJ0UxyS1lMSLNDyjkEdAAAAA8"]
[Thu Jul 30 09:22:41.698790 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apis/php.ini"] [unique_id "amsJ0UxyS1lMSLNDyjkEdAAAAA8"]
[Thu Jul 30 09:22:41.716466 2026] [core:crit] [pid 2548319:tid 2548319] (13)Permission denied: [client 216.73.216.199:11443] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/pstore/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/pstore/' is executable
[Thu Jul 30 09:22:41.716521 2026] [core:crit] [pid 2548319:tid 2548319] (13)Permission denied: [client 216.73.216.199:11443] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/bpf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/fs/bpf/' is executable
[Thu Jul 30 09:22:41.723918 2026] [ssl:error] [pid 2540902:tid 2540902] (EAI 2)Name or service not known: [client 144.76.19.72:53594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:41.723946 2026] [ssl:error] [pid 2540902:tid 2540902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:41.780228 2026] [ssl:error] [pid 2546536:tid 2546536] (EAI 2)Name or service not known: [client 144.76.19.72:53600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:41.780257 2026] [ssl:error] [pid 2546536:tid 2546536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:42.028293 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app-order-client/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEhgAAAA8"]
[Thu Jul 30 09:22:42.028469 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app-order-client/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEhgAAAA8"]
[Thu Jul 30 09:22:42.028663 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app-order-client/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEhgAAAA8"]
[Thu Jul 30 09:22:42.048053 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/.env.bak"] [unique_id "amsJ0kxyS1lMSLNDyjkEhwAAAA8"]
[Thu Jul 30 09:22:42.048234 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/.env.bak"] [unique_id "amsJ0kxyS1lMSLNDyjkEhwAAAA8"]
[Thu Jul 30 09:22:42.048407 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/.env.bak"] [unique_id "amsJ0kxyS1lMSLNDyjkEhwAAAA8"]
[Thu Jul 30 09:22:42.068129 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/.env.dev"] [unique_id "amsJ0kxyS1lMSLNDyjkEiAAAAA8"]
[Thu Jul 30 09:22:42.068302 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/.env.dev"] [unique_id "amsJ0kxyS1lMSLNDyjkEiAAAAA8"]
[Thu Jul 30 09:22:42.068503 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/.env.dev"] [unique_id "amsJ0kxyS1lMSLNDyjkEiAAAAA8"]
[Thu Jul 30 09:22:42.086053 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/.env.dist"] [unique_id "amsJ0kxyS1lMSLNDyjkEiQAAAA8"]
[Thu Jul 30 09:22:42.086201 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/.env.dist"] [unique_id "amsJ0kxyS1lMSLNDyjkEiQAAAA8"]
[Thu Jul 30 09:22:42.086370 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/.env.dist"] [unique_id "amsJ0kxyS1lMSLNDyjkEiQAAAA8"]
[Thu Jul 30 09:22:42.109661 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/.env.test"] [unique_id "amsJ0kxyS1lMSLNDyjkEigAAAA8"]
[Thu Jul 30 09:22:42.109836 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/.env.test"] [unique_id "amsJ0kxyS1lMSLNDyjkEigAAAA8"]
[Thu Jul 30 09:22:42.110027 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/.env.test"] [unique_id "amsJ0kxyS1lMSLNDyjkEigAAAA8"]
[Thu Jul 30 09:22:42.280915 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/client/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEkwAAAA8"]
[Thu Jul 30 09:22:42.281105 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/client/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEkwAAAA8"]
[Thu Jul 30 09:22:42.281276 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/client/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEkwAAAA8"]
[Thu Jul 30 09:22:42.298153 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkElAAAAA8"]
[Thu Jul 30 09:22:42.298327 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkElAAAAA8"]
[Thu Jul 30 09:22:42.298508 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkElAAAAA8"]
[Thu Jul 30 09:22:42.431463 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/config/dev/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEmwAAAA8"]
[Thu Jul 30 09:22:42.431647 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/config/dev/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEmwAAAA8"]
[Thu Jul 30 09:22:42.431822 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/config/dev/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkEmwAAAA8"]
[Thu Jul 30 09:22:42.504252 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/config/parameters.yml"] [unique_id "amsJ0kxyS1lMSLNDyjkEnwAAAA8"]
[Thu Jul 30 09:22:42.504400 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/config/parameters.yml"] [unique_id "amsJ0kxyS1lMSLNDyjkEnwAAAA8"]
[Thu Jul 30 09:22:42.504574 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/config/parameters.yml"] [unique_id "amsJ0kxyS1lMSLNDyjkEnwAAAA8"]
[Thu Jul 30 09:22:42.617189 2026] [core:error] [pid 2548319:tid 2548319] (13)Permission denied: [client 216.73.216.199:11443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/x86_emulator/reclaim_account
[Thu Jul 30 09:22:42.784302 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app/frontend/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkErgAAAA8"]
[Thu Jul 30 09:22:42.784554 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/frontend/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkErgAAAA8"]
[Thu Jul 30 09:22:42.784823 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/frontend/.env"] [unique_id "amsJ0kxyS1lMSLNDyjkErgAAAA8"]
[Thu Jul 30 09:22:43.067844 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/app/php.ini"] [unique_id "amsJ00xyS1lMSLNDyjkEvQAAAA8"]
[Thu Jul 30 09:22:43.068437 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app/php.ini"] [unique_id "amsJ00xyS1lMSLNDyjkEvQAAAA8"]
[Thu Jul 30 09:22:43.068711 2026] [security2:error] [pid 2547450:tid 2547450] [client 185.177.72.10:35150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app/php.ini"] [unique_id "amsJ00xyS1lMSLNDyjkEvQAAAA8"]
[Thu Jul 30 09:22:43.448370 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app1-static/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCcgAAAAg"]
[Thu Jul 30 09:22:43.448559 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app1-static/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCcgAAAAg"]
[Thu Jul 30 09:22:43.448806 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app1-static/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCcgAAAAg"]
[Thu Jul 30 09:22:43.468159 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app2-static/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCcwAAAAg"]
[Thu Jul 30 09:22:43.468307 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app2-static/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCcwAAAAg"]
[Thu Jul 30 09:22:43.468497 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app2-static/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCcwAAAAg"]
[Thu Jul 30 09:22:43.491405 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app_dir/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdAAAAAg"]
[Thu Jul 30 09:22:43.491574 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app_dir/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdAAAAAg"]
[Thu Jul 30 09:22:43.491767 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app_dir/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdAAAAAg"]
[Thu Jul 30 09:22:43.510209 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdQAAAAg"]
[Thu Jul 30 09:22:43.510364 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdQAAAAg"]
[Thu Jul 30 09:22:43.510551 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdQAAAAg"]
[Thu Jul 30 09:22:43.537203 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/application.conf"] [unique_id "amsJ0zgt6zUum_6Jl2GCdgAAAAg"]
[Thu Jul 30 09:22:43.537470 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/application.conf"] [unique_id "amsJ0zgt6zUum_6Jl2GCdgAAAAg"]
[Thu Jul 30 09:22:43.537648 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/application.conf"] [unique_id "amsJ0zgt6zUum_6Jl2GCdgAAAAg"]
[Thu Jul 30 09:22:43.556136 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/application/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdwAAAAg"]
[Thu Jul 30 09:22:43.556266 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/application/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdwAAAAg"]
[Thu Jul 30 09:22:43.556429 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/application/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCdwAAAAg"]
[Thu Jul 30 09:22:43.574759 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/application/configs/application.ini"] [unique_id "amsJ0zgt6zUum_6Jl2GCeAAAAAg"]
[Thu Jul 30 09:22:43.575345 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/application/configs/application.ini"] [unique_id "amsJ0zgt6zUum_6Jl2GCeAAAAAg"]
[Thu Jul 30 09:22:43.575632 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/application/configs/application.ini"] [unique_id "amsJ0zgt6zUum_6Jl2GCeAAAAAg"]
[Thu Jul 30 09:22:43.612292 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/apps/client/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCegAAAAg"]
[Thu Jul 30 09:22:43.612515 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/apps/client/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCegAAAAg"]
[Thu Jul 30 09:22:43.612784 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/apps/client/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCegAAAAg"]
[Thu Jul 30 09:22:43.656594 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/asset_img/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCfAAAAAg"]
[Thu Jul 30 09:22:43.656768 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/asset_img/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCfAAAAAg"]
[Thu Jul 30 09:22:43.656943 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/asset_img/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCfAAAAAg"]
[Thu Jul 30 09:22:43.756552 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/audio/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCgQAAAAg"]
[Thu Jul 30 09:22:43.756724 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/audio/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCgQAAAAg"]
[Thu Jul 30 09:22:43.756901 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/audio/.env"] [unique_id "amsJ0zgt6zUum_6Jl2GCgQAAAAg"]
[Thu Jul 30 09:22:43.981972 2026] [core:error] [pid 2547450:tid 2547450] [client 66.249.66.8:58242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:22:43.982017 2026] [core:error] [pid 2547450:tid 2547450] [client 66.249.66.8:58242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:22:44.037888 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/awstats/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCjwAAAAg"]
[Thu Jul 30 09:22:44.038061 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/awstats/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCjwAAAAg"]
[Thu Jul 30 09:22:44.038267 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/awstats/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCjwAAAAg"]
[Thu Jul 30 09:22:44.078937 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkQAAAAg"]
[Thu Jul 30 09:22:44.079146 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkQAAAAg"]
[Thu Jul 30 09:22:44.079331 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkQAAAAg"]
[Thu Jul 30 09:22:44.107752 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkgAAAAg"]
[Thu Jul 30 09:22:44.108009 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkgAAAAg"]
[Thu Jul 30 09:22:44.108233 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkgAAAAg"]
[Thu Jul 30 09:22:44.127556 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkwAAAAg"]
[Thu Jul 30 09:22:44.127741 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkwAAAAg"]
[Thu Jul 30 09:22:44.127911 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCkwAAAAg"]
[Thu Jul 30 09:22:44.146397 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClAAAAAg"]
[Thu Jul 30 09:22:44.146594 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClAAAAAg"]
[Thu Jul 30 09:22:44.146775 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClAAAAAg"]
[Thu Jul 30 09:22:44.165146 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClQAAAAg"]
[Thu Jul 30 09:22:44.165315 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClQAAAAg"]
[Thu Jul 30 09:22:44.165482 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClQAAAAg"]
[Thu Jul 30 09:22:44.183438 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClgAAAAg"]
[Thu Jul 30 09:22:44.183595 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClgAAAAg"]
[Thu Jul 30 09:22:44.183754 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClgAAAAg"]
[Thu Jul 30 09:22:44.202680 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClwAAAAg"]
[Thu Jul 30 09:22:44.202808 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClwAAAAg"]
[Thu Jul 30 09:22:44.202961 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GClwAAAAg"]
[Thu Jul 30 09:22:44.223243 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/back-end/app/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmAAAAAg"]
[Thu Jul 30 09:22:44.223371 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/back-end/app/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmAAAAAg"]
[Thu Jul 30 09:22:44.223524 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/back-end/app/.env"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmAAAAAg"]
[Thu Jul 30 09:22:44.241682 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/back/.env.bak"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmQAAAAg"]
[Thu Jul 30 09:22:44.241834 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/back/.env.bak"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmQAAAAg"]
[Thu Jul 30 09:22:44.241997 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/back/.env.bak"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmQAAAAg"]
[Thu Jul 30 09:22:44.260017 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/back/.env.dev"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmgAAAAg"]
[Thu Jul 30 09:22:44.260169 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/back/.env.dev"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmgAAAAg"]
[Thu Jul 30 09:22:44.260323 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/back/.env.dev"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmgAAAAg"]
[Thu Jul 30 09:22:44.278245 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/back/.env.dist"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmwAAAAg"]
[Thu Jul 30 09:22:44.278412 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/back/.env.dist"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmwAAAAg"]
[Thu Jul 30 09:22:44.278591 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/back/.env.dist"] [unique_id "amsJ1Dgt6zUum_6Jl2GCmwAAAAg"]
[Thu Jul 30 09:22:44.833794 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:53602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:44.833831 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:44.890494 2026] [ssl:error] [pid 2539964:tid 2539964] (EAI 2)Name or service not known: [client 144.76.19.72:53616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:44.890524 2026] [ssl:error] [pid 2539964:tid 2539964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:44.966375 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/back/php.ini"] [unique_id "amsJ1Dgt6zUum_6Jl2GCvgAAAAg"]
[Thu Jul 30 09:22:44.966720 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/back/php.ini"] [unique_id "amsJ1Dgt6zUum_6Jl2GCvgAAAAg"]
[Thu Jul 30 09:22:44.966900 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/back/php.ini"] [unique_id "amsJ1Dgt6zUum_6Jl2GCvgAAAAg"]
[Thu Jul 30 09:22:45.316879 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.bak"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0AAAAAg"]
[Thu Jul 30 09:22:45.317028 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.bak"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0AAAAAg"]
[Thu Jul 30 09:22:45.317204 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.bak"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0AAAAAg"]
[Thu Jul 30 09:22:45.335188 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.dev"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0QAAAAg"]
[Thu Jul 30 09:22:45.335353 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.dev"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0QAAAAg"]
[Thu Jul 30 09:22:45.335529 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.dev"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0QAAAAg"]
[Thu Jul 30 09:22:45.353367 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.dist"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0gAAAAg"]
[Thu Jul 30 09:22:45.353527 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.dist"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0gAAAAg"]
[Thu Jul 30 09:22:45.353701 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:35164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backend/.env.dist"] [unique_id "amsJ1Tgt6zUum_6Jl2GC0gAAAAg"]
[Thu Jul 30 09:22:46.196872 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/backend/php.ini"] [unique_id "amsJ1s6r7Zd1zXM1G48fIAAAACE"]
[Thu Jul 30 09:22:46.197181 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backend/php.ini"] [unique_id "amsJ1s6r7Zd1zXM1G48fIAAAACE"]
[Thu Jul 30 09:22:46.197351 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backend/php.ini"] [unique_id "amsJ1s6r7Zd1zXM1G48fIAAAACE"]
[Thu Jul 30 09:22:46.519467 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backend/src/.env"] [unique_id "amsJ1s6r7Zd1zXM1G48fLwAAACE"]
[Thu Jul 30 09:22:46.519644 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backend/src/.env"] [unique_id "amsJ1s6r7Zd1zXM1G48fLwAAACE"]
[Thu Jul 30 09:22:46.519816 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backend/src/.env"] [unique_id "amsJ1s6r7Zd1zXM1G48fLwAAACE"]
[Thu Jul 30 09:22:46.680298 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backendfinaltest/.env"] [unique_id "amsJ1s6r7Zd1zXM1G48fNwAAACE"]
[Thu Jul 30 09:22:46.680440 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backendfinaltest/.env"] [unique_id "amsJ1s6r7Zd1zXM1G48fNwAAACE"]
[Thu Jul 30 09:22:46.680633 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backendfinaltest/.env"] [unique_id "amsJ1s6r7Zd1zXM1G48fNwAAACE"]
[Thu Jul 30 09:22:46.701230 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /backup.wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup.wp-config.php"] [unique_id "amsJ1s6r7Zd1zXM1G48fOAAAACE"]
[Thu Jul 30 09:22:46.701378 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup.wp-config.php"] [unique_id "amsJ1s6r7Zd1zXM1G48fOAAAACE"]
[Thu Jul 30 09:22:46.701544 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup.wp-config.php"] [unique_id "amsJ1s6r7Zd1zXM1G48fOAAAACE"]
[Thu Jul 30 09:22:46.722986 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.bak"] [unique_id "amsJ1s6r7Zd1zXM1G48fOQAAACE"]
[Thu Jul 30 09:22:46.723157 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.bak"] [unique_id "amsJ1s6r7Zd1zXM1G48fOQAAACE"]
[Thu Jul 30 09:22:46.723313 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.bak"] [unique_id "amsJ1s6r7Zd1zXM1G48fOQAAACE"]
[Thu Jul 30 09:22:46.742597 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.dev"] [unique_id "amsJ1s6r7Zd1zXM1G48fOgAAACE"]
[Thu Jul 30 09:22:46.742743 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.dev"] [unique_id "amsJ1s6r7Zd1zXM1G48fOgAAACE"]
[Thu Jul 30 09:22:46.742908 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.dev"] [unique_id "amsJ1s6r7Zd1zXM1G48fOgAAACE"]
[Thu Jul 30 09:22:46.761999 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.dist"] [unique_id "amsJ1s6r7Zd1zXM1G48fOwAAACE"]
[Thu Jul 30 09:22:46.762138 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.dist"] [unique_id "amsJ1s6r7Zd1zXM1G48fOwAAACE"]
[Thu Jul 30 09:22:46.762302 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.dist"] [unique_id "amsJ1s6r7Zd1zXM1G48fOwAAACE"]
[Thu Jul 30 09:22:46.781101 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.local"] [unique_id "amsJ1s6r7Zd1zXM1G48fPAAAACE"]
[Thu Jul 30 09:22:46.781254 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.local"] [unique_id "amsJ1s6r7Zd1zXM1G48fPAAAACE"]
[Thu Jul 30 09:22:46.781419 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.local"] [unique_id "amsJ1s6r7Zd1zXM1G48fPAAAACE"]
[Thu Jul 30 09:22:46.801246 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.production"] [unique_id "amsJ1s6r7Zd1zXM1G48fPQAAACE"]
[Thu Jul 30 09:22:46.801400 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.production"] [unique_id "amsJ1s6r7Zd1zXM1G48fPQAAACE"]
[Thu Jul 30 09:22:46.801567 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.production"] [unique_id "amsJ1s6r7Zd1zXM1G48fPQAAACE"]
[Thu Jul 30 09:22:46.821869 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.staging"] [unique_id "amsJ1s6r7Zd1zXM1G48fPgAAACE"]
[Thu Jul 30 09:22:46.822041 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.staging"] [unique_id "amsJ1s6r7Zd1zXM1G48fPgAAACE"]
[Thu Jul 30 09:22:46.822239 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/.env.staging"] [unique_id "amsJ1s6r7Zd1zXM1G48fPgAAACE"]
[Thu Jul 30 09:22:46.862395 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backup/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/.git/config"] [unique_id "amsJ1s6r7Zd1zXM1G48fQAAAACE"]
[Thu Jul 30 09:22:46.862547 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/.git/config"] [unique_id "amsJ1s6r7Zd1zXM1G48fQAAAACE"]
[Thu Jul 30 09:22:46.862731 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/.git/config"] [unique_id "amsJ1s6r7Zd1zXM1G48fQAAAACE"]
[Thu Jul 30 09:22:46.960981 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amsJ1s6r7Zd1zXM1G48fRQAAACE"]
[Thu Jul 30 09:22:46.961342 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amsJ1s6r7Zd1zXM1G48fRQAAACE"]
[Thu Jul 30 09:22:46.961521 2026] [security2:error] [pid 2528544:tid 2528544] [client 185.177.72.10:5112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amsJ1s6r7Zd1zXM1G48fRQAAACE"]
[Thu Jul 30 09:22:47.176524 2026] [authz_core:error] [pid 2549730:tid 2549730] [client 57.141.0.17:50830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:47.177152 2026] [authz_core:error] [pid 2549730:tid 2549730] [client 57.141.0.17:50830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:47.312044 2026] [authz_core:error] [pid 2548004:tid 2548004] [client 144.172.105.5:46012] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/class_http/error_log
[Thu Jul 30 09:22:47.484315 2026] [security2:error] [pid 2549729:tid 2549729] [client 156.59.198.136:33052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/files/terranigma/UTE/historico.TXT"] [unique_id "amsJ1y4Vh6fwOzWLVQobcAAAAAY"]
[Thu Jul 30 09:22:47.945722 2026] [ssl:error] [pid 2540259:tid 2540259] (EAI 2)Name or service not known: [client 144.76.19.72:53618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:47.945748 2026] [ssl:error] [pid 2540259:tid 2540259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:47.960235 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/backup/laravel.log"] [unique_id "amsJ1zgt6zUum_6Jl2GC7AAAAAg"]
[Thu Jul 30 09:22:47.960607 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/laravel.log"] [unique_id "amsJ1zgt6zUum_6Jl2GC7AAAAAg"]
[Thu Jul 30 09:22:47.960805 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/laravel.log"] [unique_id "amsJ1zgt6zUum_6Jl2GC7AAAAAg"]
[Thu Jul 30 09:22:47.998482 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:53628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:47.998508 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:48.244829 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 144.172.105.5:45450] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/cron/error_log
[Thu Jul 30 09:22:48.515621 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/backup/php.ini"] [unique_id "amsJ2Dgt6zUum_6Jl2GDBwAAAAg"]
[Thu Jul 30 09:22:48.515902 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/php.ini"] [unique_id "amsJ2Dgt6zUum_6Jl2GDBwAAAAg"]
[Thu Jul 30 09:22:48.516093 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/php.ini"] [unique_id "amsJ2Dgt6zUum_6Jl2GDBwAAAAg"]
[Thu Jul 30 09:22:49.106732 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/backup/web.config"] [unique_id "amsJ2Tgt6zUum_6Jl2GDJAAAAAg"]
[Thu Jul 30 09:22:49.106946 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /backup/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/backup/web.config"] [unique_id "amsJ2Tgt6zUum_6Jl2GDJAAAAAg"]
[Thu Jul 30 09:22:49.107105 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/backup/web.config"] [unique_id "amsJ2Tgt6zUum_6Jl2GDJAAAAAg"]
[Thu Jul 30 09:22:49.107271 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/backup/web.config"] [unique_id "amsJ2Tgt6zUum_6Jl2GDJAAAAAg"]
[Thu Jul 30 09:22:49.187491 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/base/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKAAAAAg"]
[Thu Jul 30 09:22:49.187691 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/base/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKAAAAAg"]
[Thu Jul 30 09:22:49.187859 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/base/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKAAAAAg"]
[Thu Jul 30 09:22:49.208855 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/base_dir/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKQAAAAg"]
[Thu Jul 30 09:22:49.209025 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/base_dir/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKQAAAAg"]
[Thu Jul 30 09:22:49.209205 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/base_dir/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKQAAAAg"]
[Thu Jul 30 09:22:49.228789 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/basic-network/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKgAAAAg"]
[Thu Jul 30 09:22:49.228964 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/basic-network/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKgAAAAg"]
[Thu Jul 30 09:22:49.229145 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/basic-network/.env"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKgAAAAg"]
[Thu Jul 30 09:22:49.248401 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.bak"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKwAAAAg"]
[Thu Jul 30 09:22:49.248565 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.bak"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKwAAAAg"]
[Thu Jul 30 09:22:49.248759 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.bak"] [unique_id "amsJ2Tgt6zUum_6Jl2GDKwAAAAg"]
[Thu Jul 30 09:22:49.268189 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.dev"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLAAAAAg"]
[Thu Jul 30 09:22:49.268361 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.dev"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLAAAAAg"]
[Thu Jul 30 09:22:49.268539 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.dev"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLAAAAAg"]
[Thu Jul 30 09:22:49.288288 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.dist"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLQAAAAg"]
[Thu Jul 30 09:22:49.288437 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.dist"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLQAAAAg"]
[Thu Jul 30 09:22:49.288615 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.dist"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLQAAAAg"]
[Thu Jul 30 09:22:49.307906 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.local"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLgAAAAg"]
[Thu Jul 30 09:22:49.308085 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.local"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLgAAAAg"]
[Thu Jul 30 09:22:49.308275 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.local"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLgAAAAg"]
[Thu Jul 30 09:22:49.327854 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.production"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLwAAAAg"]
[Thu Jul 30 09:22:49.328027 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.production"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLwAAAAg"]
[Thu Jul 30 09:22:49.328218 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.production"] [unique_id "amsJ2Tgt6zUum_6Jl2GDLwAAAAg"]
[Thu Jul 30 09:22:49.348060 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.staging"] [unique_id "amsJ2Tgt6zUum_6Jl2GDMAAAAAg"]
[Thu Jul 30 09:22:49.348205 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.staging"] [unique_id "amsJ2Tgt6zUum_6Jl2GDMAAAAAg"]
[Thu Jul 30 09:22:49.348377 2026] [security2:error] [pid 2549730:tid 2549730] [client 185.177.72.10:5116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/beta/.env.staging"] [unique_id "amsJ2Tgt6zUum_6Jl2GDMAAAAAg"]
[Thu Jul 30 09:22:49.716169 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.47:32182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:49.716787 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.47:32182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:50.072191 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/beta/php.ini"] [unique_id "amsJ2tbqCWdRLhigEE97EwAAACg"]
[Thu Jul 30 09:22:50.072532 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/beta/php.ini"] [unique_id "amsJ2tbqCWdRLhigEE97EwAAACg"]
[Thu Jul 30 09:22:50.072725 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/beta/php.ini"] [unique_id "amsJ2tbqCWdRLhigEE97EwAAACg"]
[Thu Jul 30 09:22:50.447855 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bgoldd/.env"] [unique_id "amsJ2tbqCWdRLhigEE97JQAAACg"]
[Thu Jul 30 09:22:50.448027 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bgoldd/.env"] [unique_id "amsJ2tbqCWdRLhigEE97JQAAACg"]
[Thu Jul 30 09:22:50.448206 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bgoldd/.env"] [unique_id "amsJ2tbqCWdRLhigEE97JQAAACg"]
[Thu Jul 30 09:22:50.488777 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bitcoind/.env"] [unique_id "amsJ2tbqCWdRLhigEE97JwAAACg"]
[Thu Jul 30 09:22:50.488917 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bitcoind/.env"] [unique_id "amsJ2tbqCWdRLhigEE97JwAAACg"]
[Thu Jul 30 09:22:50.489088 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bitcoind/.env"] [unique_id "amsJ2tbqCWdRLhigEE97JwAAACg"]
[Thu Jul 30 09:22:50.510015 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bkp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bkp/.env"] [unique_id "amsJ2tbqCWdRLhigEE97KAAAACg"]
[Thu Jul 30 09:22:50.510184 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bkp/.env"] [unique_id "amsJ2tbqCWdRLhigEE97KAAAACg"]
[Thu Jul 30 09:22:50.510350 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bkp/.env"] [unique_id "amsJ2tbqCWdRLhigEE97KAAAACg"]
[Thu Jul 30 09:22:50.550090 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /bkp/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bkp/.git/config"] [unique_id "amsJ2tbqCWdRLhigEE97KgAAACg"]
[Thu Jul 30 09:22:50.550262 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bkp/.git/config"] [unique_id "amsJ2tbqCWdRLhigEE97KgAAACg"]
[Thu Jul 30 09:22:50.550434 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bkp/.git/config"] [unique_id "amsJ2tbqCWdRLhigEE97KgAAACg"]
[Thu Jul 30 09:22:50.651716 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amsJ2tbqCWdRLhigEE97LwAAACg"]
[Thu Jul 30 09:22:50.652090 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amsJ2tbqCWdRLhigEE97LwAAACg"]
[Thu Jul 30 09:22:50.652266 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amsJ2tbqCWdRLhigEE97LwAAACg"]
[Thu Jul 30 09:22:50.672654 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/bkp/api-config.ini"] [unique_id "amsJ2tbqCWdRLhigEE97MAAAACg"]
[Thu Jul 30 09:22:50.672992 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bkp/api-config.ini"] [unique_id "amsJ2tbqCWdRLhigEE97MAAAACg"]
[Thu Jul 30 09:22:50.673184 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bkp/api-config.ini"] [unique_id "amsJ2tbqCWdRLhigEE97MAAAACg"]
[Thu Jul 30 09:22:50.732144 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/bkp/laravel.log"] [unique_id "amsJ2tbqCWdRLhigEE97MwAAACg"]
[Thu Jul 30 09:22:50.732500 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bkp/laravel.log"] [unique_id "amsJ2tbqCWdRLhigEE97MwAAACg"]
[Thu Jul 30 09:22:50.732699 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bkp/laravel.log"] [unique_id "amsJ2tbqCWdRLhigEE97MwAAACg"]
[Thu Jul 30 09:22:50.796062 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/bkp/web.config"] [unique_id "amsJ2tbqCWdRLhigEE97NgAAACg"]
[Thu Jul 30 09:22:50.796290 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /bkp/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bkp/web.config"] [unique_id "amsJ2tbqCWdRLhigEE97NgAAACg"]
[Thu Jul 30 09:22:50.796423 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bkp/web.config"] [unique_id "amsJ2tbqCWdRLhigEE97NgAAACg"]
[Thu Jul 30 09:22:50.796612 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bkp/web.config"] [unique_id "amsJ2tbqCWdRLhigEE97NgAAACg"]
[Thu Jul 30 09:22:50.818748 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/blankon/.env"] [unique_id "amsJ2tbqCWdRLhigEE97NwAAACg"]
[Thu Jul 30 09:22:50.818911 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blankon/.env"] [unique_id "amsJ2tbqCWdRLhigEE97NwAAACg"]
[Thu Jul 30 09:22:50.819104 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blankon/.env"] [unique_id "amsJ2tbqCWdRLhigEE97NwAAACg"]
[Thu Jul 30 09:22:50.838969 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/blob/.env"] [unique_id "amsJ2tbqCWdRLhigEE97OAAAACg"]
[Thu Jul 30 09:22:50.839241 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blob/.env"] [unique_id "amsJ2tbqCWdRLhigEE97OAAAACg"]
[Thu Jul 30 09:22:50.839442 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blob/.env"] [unique_id "amsJ2tbqCWdRLhigEE97OAAAACg"]
[Thu Jul 30 09:22:50.880667 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/blog/.git/config"] [unique_id "amsJ2tbqCWdRLhigEE97OgAAACg"]
[Thu Jul 30 09:22:50.880821 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blog/.git/config"] [unique_id "amsJ2tbqCWdRLhigEE97OgAAACg"]
[Thu Jul 30 09:22:50.880976 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blog/.git/config"] [unique_id "amsJ2tbqCWdRLhigEE97OgAAACg"]
[Thu Jul 30 09:22:50.981407 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amsJ2tbqCWdRLhigEE97PwAAACg"]
[Thu Jul 30 09:22:50.981695 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amsJ2tbqCWdRLhigEE97PwAAACg"]
[Thu Jul 30 09:22:50.981855 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amsJ2tbqCWdRLhigEE97PwAAACg"]
[Thu Jul 30 09:22:51.001633 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/blog/api-config.ini"] [unique_id "amsJ29bqCWdRLhigEE97QAAAACg"]
[Thu Jul 30 09:22:51.001913 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blog/api-config.ini"] [unique_id "amsJ29bqCWdRLhigEE97QAAAACg"]
[Thu Jul 30 09:22:51.002084 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blog/api-config.ini"] [unique_id "amsJ29bqCWdRLhigEE97QAAAACg"]
[Thu Jul 30 09:22:51.055336 2026] [ssl:error] [pid 2549677:tid 2549677] (EAI 2)Name or service not known: [client 144.76.19.72:64014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:51.055371 2026] [ssl:error] [pid 2549677:tid 2549677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:51.060521 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/blog/laravel.log"] [unique_id "amsJ29bqCWdRLhigEE97QwAAACg"]
[Thu Jul 30 09:22:51.060844 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blog/laravel.log"] [unique_id "amsJ29bqCWdRLhigEE97QwAAACg"]
[Thu Jul 30 09:22:51.061010 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blog/laravel.log"] [unique_id "amsJ29bqCWdRLhigEE97QwAAACg"]
[Thu Jul 30 09:22:51.110236 2026] [ssl:error] [pid 2550093:tid 2550093] (EAI 2)Name or service not known: [client 144.76.19.72:64020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:51.110272 2026] [ssl:error] [pid 2550093:tid 2550093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:51.122511 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/blog/web.config"] [unique_id "amsJ29bqCWdRLhigEE97RgAAACg"]
[Thu Jul 30 09:22:51.122729 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /blog/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/blog/web.config"] [unique_id "amsJ29bqCWdRLhigEE97RgAAACg"]
[Thu Jul 30 09:22:51.122867 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blog/web.config"] [unique_id "amsJ29bqCWdRLhigEE97RgAAACg"]
[Thu Jul 30 09:22:51.123039 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blog/web.config"] [unique_id "amsJ29bqCWdRLhigEE97RgAAACg"]
[Thu Jul 30 09:22:51.143188 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/blue/.env"] [unique_id "amsJ29bqCWdRLhigEE97RwAAACg"]
[Thu Jul 30 09:22:51.143352 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/blue/.env"] [unique_id "amsJ29bqCWdRLhigEE97RwAAACg"]
[Thu Jul 30 09:22:51.143524 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/blue/.env"] [unique_id "amsJ29bqCWdRLhigEE97RwAAACg"]
[Thu Jul 30 09:22:51.162419 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bookchain-client/.env"] [unique_id "amsJ29bqCWdRLhigEE97SAAAACg"]
[Thu Jul 30 09:22:51.162660 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bookchain-client/.env"] [unique_id "amsJ29bqCWdRLhigEE97SAAAACg"]
[Thu Jul 30 09:22:51.162838 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bookchain-client/.env"] [unique_id "amsJ29bqCWdRLhigEE97SAAAACg"]
[Thu Jul 30 09:22:51.182461 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bootstrap/.env"] [unique_id "amsJ29bqCWdRLhigEE97SQAAACg"]
[Thu Jul 30 09:22:51.182600 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bootstrap/.env"] [unique_id "amsJ29bqCWdRLhigEE97SQAAACg"]
[Thu Jul 30 09:22:51.182754 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bootstrap/.env"] [unique_id "amsJ29bqCWdRLhigEE97SQAAACg"]
[Thu Jul 30 09:22:51.201655 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bot/.env"] [unique_id "amsJ29bqCWdRLhigEE97SgAAACg"]
[Thu Jul 30 09:22:51.201775 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bot/.env"] [unique_id "amsJ29bqCWdRLhigEE97SgAAACg"]
[Thu Jul 30 09:22:51.201932 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bot/.env"] [unique_id "amsJ29bqCWdRLhigEE97SgAAACg"]
[Thu Jul 30 09:22:51.221834 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.bak"] [unique_id "amsJ29bqCWdRLhigEE97SwAAACg"]
[Thu Jul 30 09:22:51.221944 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.bak"] [unique_id "amsJ29bqCWdRLhigEE97SwAAACg"]
[Thu Jul 30 09:22:51.222100 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.bak"] [unique_id "amsJ29bqCWdRLhigEE97SwAAACg"]
[Thu Jul 30 09:22:51.242617 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.dev"] [unique_id "amsJ29bqCWdRLhigEE97TAAAACg"]
[Thu Jul 30 09:22:51.242749 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.dev"] [unique_id "amsJ29bqCWdRLhigEE97TAAAACg"]
[Thu Jul 30 09:22:51.242915 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.dev"] [unique_id "amsJ29bqCWdRLhigEE97TAAAACg"]
[Thu Jul 30 09:22:51.264506 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.dist"] [unique_id "amsJ29bqCWdRLhigEE97TQAAACg"]
[Thu Jul 30 09:22:51.264684 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.dist"] [unique_id "amsJ29bqCWdRLhigEE97TQAAACg"]
[Thu Jul 30 09:22:51.264860 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.dist"] [unique_id "amsJ29bqCWdRLhigEE97TQAAACg"]
[Thu Jul 30 09:22:51.284827 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.local"] [unique_id "amsJ29bqCWdRLhigEE97TgAAACg"]
[Thu Jul 30 09:22:51.284995 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.local"] [unique_id "amsJ29bqCWdRLhigEE97TgAAACg"]
[Thu Jul 30 09:22:51.285182 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bot/.env.local"] [unique_id "amsJ29bqCWdRLhigEE97TgAAACg"]
[Thu Jul 30 09:22:52.029269 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/bot/php.ini"] [unique_id "amsJ3DJoBMXYcF1V60e3dQAAABo"]
[Thu Jul 30 09:22:52.029651 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bot/php.ini"] [unique_id "amsJ3DJoBMXYcF1V60e3dQAAABo"]
[Thu Jul 30 09:22:52.029870 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bot/php.ini"] [unique_id "amsJ3DJoBMXYcF1V60e3dQAAABo"]
[Thu Jul 30 09:22:52.427164 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iAAAABo"]
[Thu Jul 30 09:22:52.427336 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iAAAABo"]
[Thu Jul 30 09:22:52.427526 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iAAAABo"]
[Thu Jul 30 09:22:52.446843 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iQAAABo"]
[Thu Jul 30 09:22:52.447028 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iQAAABo"]
[Thu Jul 30 09:22:52.447227 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iQAAABo"]
[Thu Jul 30 09:22:52.467280 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3igAAABo"]
[Thu Jul 30 09:22:52.467426 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3igAAABo"]
[Thu Jul 30 09:22:52.467633 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3igAAABo"]
[Thu Jul 30 09:22:52.486869 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/bucoffea/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iwAAABo"]
[Thu Jul 30 09:22:52.487045 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/bucoffea/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iwAAABo"]
[Thu Jul 30 09:22:52.487271 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/bucoffea/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3iwAAABo"]
[Thu Jul 30 09:22:52.527356 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/build.log"] [unique_id "amsJ3DJoBMXYcF1V60e3jQAAABo"]
[Thu Jul 30 09:22:52.527714 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/build.log"] [unique_id "amsJ3DJoBMXYcF1V60e3jQAAABo"]
[Thu Jul 30 09:22:52.527899 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/build.log"] [unique_id "amsJ3DJoBMXYcF1V60e3jQAAABo"]
[Thu Jul 30 09:22:52.630356 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/build/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3kgAAABo"]
[Thu Jul 30 09:22:52.630533 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/build/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3kgAAABo"]
[Thu Jul 30 09:22:52.630723 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/build/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3kgAAABo"]
[Thu Jul 30 09:22:52.802396 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cache/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3mgAAABo"]
[Thu Jul 30 09:22:52.802554 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cache/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3mgAAABo"]
[Thu Jul 30 09:22:52.802743 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cache/.env"] [unique_id "amsJ3DJoBMXYcF1V60e3mgAAABo"]
[Thu Jul 30 09:22:52.841690 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cache/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cache/.git/config"] [unique_id "amsJ3DJoBMXYcF1V60e3nAAAABo"]
[Thu Jul 30 09:22:52.841855 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cache/.git/config"] [unique_id "amsJ3DJoBMXYcF1V60e3nAAAABo"]
[Thu Jul 30 09:22:52.842021 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cache/.git/config"] [unique_id "amsJ3DJoBMXYcF1V60e3nAAAABo"]
[Thu Jul 30 09:22:52.924346 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amsJ3DJoBMXYcF1V60e3oAAAABo"]
[Thu Jul 30 09:22:52.924676 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amsJ3DJoBMXYcF1V60e3oAAAABo"]
[Thu Jul 30 09:22:52.924847 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amsJ3DJoBMXYcF1V60e3oAAAABo"]
[Thu Jul 30 09:22:52.949657 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/cache/api-config.ini"] [unique_id "amsJ3DJoBMXYcF1V60e3oQAAABo"]
[Thu Jul 30 09:22:52.949975 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cache/api-config.ini"] [unique_id "amsJ3DJoBMXYcF1V60e3oQAAABo"]
[Thu Jul 30 09:22:52.950188 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cache/api-config.ini"] [unique_id "amsJ3DJoBMXYcF1V60e3oQAAABo"]
[Thu Jul 30 09:22:52.994756 2026] [authz_core:error] [pid 2533669:tid 2533669] [client 144.172.105.5:45470] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/data/error_log
[Thu Jul 30 09:22:53.012699 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/cache/laravel.log"] [unique_id "amsJ3TJoBMXYcF1V60e3pAAAABo"]
[Thu Jul 30 09:22:53.013038 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cache/laravel.log"] [unique_id "amsJ3TJoBMXYcF1V60e3pAAAABo"]
[Thu Jul 30 09:22:53.013222 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cache/laravel.log"] [unique_id "amsJ3TJoBMXYcF1V60e3pAAAABo"]
[Thu Jul 30 09:22:53.031798 2026] [authz_core:error] [pid 2548315:tid 2548315] [client 66.249.66.34:52813] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:22:53.034501 2026] [authz_core:error] [pid 2548315:tid 2548315] [client 66.249.66.34:52813] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:22:53.072232 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/cache/web.config"] [unique_id "amsJ3TJoBMXYcF1V60e3pwAAABo"]
[Thu Jul 30 09:22:53.072517 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /cache/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cache/web.config"] [unique_id "amsJ3TJoBMXYcF1V60e3pwAAABo"]
[Thu Jul 30 09:22:53.072692 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cache/web.config"] [unique_id "amsJ3TJoBMXYcF1V60e3pwAAABo"]
[Thu Jul 30 09:22:53.072877 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cache/web.config"] [unique_id "amsJ3TJoBMXYcF1V60e3pwAAABo"]
[Thu Jul 30 09:22:53.092564 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cardea/backend/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qAAAABo"]
[Thu Jul 30 09:22:53.092754 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cardea/backend/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qAAAABo"]
[Thu Jul 30 09:22:53.092931 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cardea/backend/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qAAAABo"]
[Thu Jul 30 09:22:53.118897 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cdw-backend/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qQAAABo"]
[Thu Jul 30 09:22:53.119082 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cdw-backend/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qQAAABo"]
[Thu Jul 30 09:22:53.119275 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cdw-backend/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qQAAABo"]
[Thu Jul 30 09:22:53.138555 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qgAAABo"]
[Thu Jul 30 09:22:53.138732 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qgAAABo"]
[Thu Jul 30 09:22:53.138903 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qgAAABo"]
[Thu Jul 30 09:22:53.157815 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qwAAABo"]
[Thu Jul 30 09:22:53.157983 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qwAAABo"]
[Thu Jul 30 09:22:53.158183 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3qwAAABo"]
[Thu Jul 30 09:22:53.177227 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rAAAABo"]
[Thu Jul 30 09:22:53.177398 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rAAAABo"]
[Thu Jul 30 09:22:53.177594 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rAAAABo"]
[Thu Jul 30 09:22:53.196740 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rQAAABo"]
[Thu Jul 30 09:22:53.196864 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rQAAABo"]
[Thu Jul 30 09:22:53.197022 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rQAAABo"]
[Thu Jul 30 09:22:53.216268 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rgAAABo"]
[Thu Jul 30 09:22:53.216439 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rgAAABo"]
[Thu Jul 30 09:22:53.216625 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rgAAABo"]
[Thu Jul 30 09:22:53.236971 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rwAAABo"]
[Thu Jul 30 09:22:53.237240 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rwAAABo"]
[Thu Jul 30 09:22:53.237508 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3rwAAABo"]
[Thu Jul 30 09:22:53.259848 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sAAAABo"]
[Thu Jul 30 09:22:53.260018 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sAAAABo"]
[Thu Jul 30 09:22:53.260210 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sAAAABo"]
[Thu Jul 30 09:22:53.279868 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sQAAABo"]
[Thu Jul 30 09:22:53.280044 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sQAAABo"]
[Thu Jul 30 09:22:53.280285 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sQAAABo"]
[Thu Jul 30 09:22:53.299969 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/challenge/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sgAAABo"]
[Thu Jul 30 09:22:53.300141 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/challenge/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sgAAABo"]
[Thu Jul 30 09:22:53.300330 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/challenge/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3sgAAABo"]
[Thu Jul 30 09:22:53.322732 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/challenges/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3swAAABo"]
[Thu Jul 30 09:22:53.322901 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/challenges/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3swAAABo"]
[Thu Jul 30 09:22:53.323090 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/challenges/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3swAAABo"]
[Thu Jul 30 09:22:53.364247 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3tQAAABo"]
[Thu Jul 30 09:22:53.364421 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3tQAAABo"]
[Thu Jul 30 09:22:53.364606 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3tQAAABo"]
[Thu Jul 30 09:22:53.385430 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/chat-client/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3tgAAABo"]
[Thu Jul 30 09:22:53.385617 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/chat-client/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3tgAAABo"]
[Thu Jul 30 09:22:53.385792 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/chat-client/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3tgAAABo"]
[Thu Jul 30 09:22:53.447325 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/chiminey/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3uQAAABo"]
[Thu Jul 30 09:22:53.447479 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/chiminey/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3uQAAABo"]
[Thu Jul 30 09:22:53.447680 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/chiminey/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3uQAAABo"]
[Thu Jul 30 09:22:53.467247 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client-app/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3ugAAABo"]
[Thu Jul 30 09:22:53.467414 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client-app/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3ugAAABo"]
[Thu Jul 30 09:22:53.467607 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client-app/.env"] [unique_id "amsJ3TJoBMXYcF1V60e3ugAAABo"]
[Thu Jul 30 09:22:53.487498 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/.env.bak"] [unique_id "amsJ3TJoBMXYcF1V60e3uwAAABo"]
[Thu Jul 30 09:22:53.487702 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/.env.bak"] [unique_id "amsJ3TJoBMXYcF1V60e3uwAAABo"]
[Thu Jul 30 09:22:53.487895 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/.env.bak"] [unique_id "amsJ3TJoBMXYcF1V60e3uwAAABo"]
[Thu Jul 30 09:22:53.507415 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/.env.dev"] [unique_id "amsJ3TJoBMXYcF1V60e3vAAAABo"]
[Thu Jul 30 09:22:53.507595 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/.env.dev"] [unique_id "amsJ3TJoBMXYcF1V60e3vAAAABo"]
[Thu Jul 30 09:22:53.507779 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/.env.dev"] [unique_id "amsJ3TJoBMXYcF1V60e3vAAAABo"]
[Thu Jul 30 09:22:53.527417 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/.env.dist"] [unique_id "amsJ3TJoBMXYcF1V60e3vQAAABo"]
[Thu Jul 30 09:22:53.527608 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/.env.dist"] [unique_id "amsJ3TJoBMXYcF1V60e3vQAAABo"]
[Thu Jul 30 09:22:53.527793 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/.env.dist"] [unique_id "amsJ3TJoBMXYcF1V60e3vQAAABo"]
[Thu Jul 30 09:22:53.547031 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/.env.local"] [unique_id "amsJ3TJoBMXYcF1V60e3vgAAABo"]
[Thu Jul 30 09:22:53.547221 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/.env.local"] [unique_id "amsJ3TJoBMXYcF1V60e3vgAAABo"]
[Thu Jul 30 09:22:53.547411 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/.env.local"] [unique_id "amsJ3TJoBMXYcF1V60e3vgAAABo"]
[Thu Jul 30 09:22:53.566467 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/.env.production"] [unique_id "amsJ3TJoBMXYcF1V60e3vwAAABo"]
[Thu Jul 30 09:22:53.566625 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/.env.production"] [unique_id "amsJ3TJoBMXYcF1V60e3vwAAABo"]
[Thu Jul 30 09:22:53.566797 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/.env.production"] [unique_id "amsJ3TJoBMXYcF1V60e3vwAAABo"]
[Thu Jul 30 09:22:53.585761 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/.env.staging"] [unique_id "amsJ3TJoBMXYcF1V60e3wAAAABo"]
[Thu Jul 30 09:22:53.585914 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/.env.staging"] [unique_id "amsJ3TJoBMXYcF1V60e3wAAAABo"]
[Thu Jul 30 09:22:53.586105 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/.env.staging"] [unique_id "amsJ3TJoBMXYcF1V60e3wAAAABo"]
[Thu Jul 30 09:22:53.625995 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /client/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/.git/config"] [unique_id "amsJ3TJoBMXYcF1V60e3wgAAABo"]
[Thu Jul 30 09:22:53.626204 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/.git/config"] [unique_id "amsJ3TJoBMXYcF1V60e3wgAAABo"]
[Thu Jul 30 09:22:53.626385 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/.git/config"] [unique_id "amsJ3TJoBMXYcF1V60e3wgAAABo"]
[Thu Jul 30 09:22:53.725166 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amsJ3TJoBMXYcF1V60e3xwAAABo"]
[Thu Jul 30 09:22:53.725518 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amsJ3TJoBMXYcF1V60e3xwAAABo"]
[Thu Jul 30 09:22:53.725711 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amsJ3TJoBMXYcF1V60e3xwAAABo"]
[Thu Jul 30 09:22:53.765662 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/client/api-config.ini"] [unique_id "amsJ3TJoBMXYcF1V60e3yQAAABo"]
[Thu Jul 30 09:22:53.766032 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/api-config.ini"] [unique_id "amsJ3TJoBMXYcF1V60e3yQAAABo"]
[Thu Jul 30 09:22:53.766236 2026] [security2:error] [pid 2546536:tid 2546536] [client 185.177.72.10:5134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/api-config.ini"] [unique_id "amsJ3TJoBMXYcF1V60e3yQAAABo"]
[Thu Jul 30 09:22:54.165595 2026] [ssl:error] [pid 2549729:tid 2549729] (EAI 2)Name or service not known: [client 144.76.19.72:64024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:54.165629 2026] [ssl:error] [pid 2549729:tid 2549729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:54.218856 2026] [ssl:error] [pid 2537161:tid 2537161] (EAI 2)Name or service not known: [client 144.76.19.72:64036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:54.218882 2026] [ssl:error] [pid 2537161:tid 2537161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:54.443129 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/client/laravel.log"] [unique_id "amsJ3tbqCWdRLhigEE97ggAAACg"]
[Thu Jul 30 09:22:54.443403 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/laravel.log"] [unique_id "amsJ3tbqCWdRLhigEE97ggAAACg"]
[Thu Jul 30 09:22:54.443568 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/laravel.log"] [unique_id "amsJ3tbqCWdRLhigEE97ggAAACg"]
[Thu Jul 30 09:22:54.454250 2026] [authz_core:error] [pid 2542119:tid 2542119] [client 144.172.105.5:45488] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/database/error_log
[Thu Jul 30 09:22:54.520159 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amsJ3tbqCWdRLhigEE97hgAAACg"]
[Thu Jul 30 09:22:54.520285 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amsJ3tbqCWdRLhigEE97hgAAACg"]
[Thu Jul 30 09:22:54.520433 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amsJ3tbqCWdRLhigEE97hgAAACg"]
[Thu Jul 30 09:22:54.558570 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/client/php.ini"] [unique_id "amsJ3tbqCWdRLhigEE97iAAAACg"]
[Thu Jul 30 09:22:54.558909 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/php.ini"] [unique_id "amsJ3tbqCWdRLhigEE97iAAAACg"]
[Thu Jul 30 09:22:54.559076 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/php.ini"] [unique_id "amsJ3tbqCWdRLhigEE97iAAAACg"]
[Thu Jul 30 09:22:54.699119 2026] [core:error] [pid 2548003:tid 2548003] (13)Permission denied: [client 216.73.216.199:13790] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/uhci_hcd/drivers/pci:uhci_hcd/new_id
[Thu Jul 30 09:22:54.858501 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/src/.env"] [unique_id "amsJ3tbqCWdRLhigEE97lwAAACg"]
[Thu Jul 30 09:22:54.858692 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/src/.env"] [unique_id "amsJ3tbqCWdRLhigEE97lwAAACg"]
[Thu Jul 30 09:22:54.858870 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/src/.env"] [unique_id "amsJ3tbqCWdRLhigEE97lwAAACg"]
[Thu Jul 30 09:22:54.938276 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/client/web.config"] [unique_id "amsJ3tbqCWdRLhigEE97mwAAACg"]
[Thu Jul 30 09:22:54.938505 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /client/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/client/web.config"] [unique_id "amsJ3tbqCWdRLhigEE97mwAAACg"]
[Thu Jul 30 09:22:54.938696 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/client/web.config"] [unique_id "amsJ3tbqCWdRLhigEE97mwAAACg"]
[Thu Jul 30 09:22:54.938876 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/client/web.config"] [unique_id "amsJ3tbqCWdRLhigEE97mwAAACg"]
[Thu Jul 30 09:22:55.017373 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/clld_dir/.env"] [unique_id "amsJ39bqCWdRLhigEE97nwAAACg"]
[Thu Jul 30 09:22:55.017511 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/clld_dir/.env"] [unique_id "amsJ39bqCWdRLhigEE97nwAAACg"]
[Thu Jul 30 09:22:55.017682 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/clld_dir/.env"] [unique_id "amsJ39bqCWdRLhigEE97nwAAACg"]
[Thu Jul 30 09:22:55.036953 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amsJ39bqCWdRLhigEE97oAAAACg"]
[Thu Jul 30 09:22:55.037134 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amsJ39bqCWdRLhigEE97oAAAACg"]
[Thu Jul 30 09:22:55.037307 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amsJ39bqCWdRLhigEE97oAAAACg"]
[Thu Jul 30 09:22:55.056271 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.bak"] [unique_id "amsJ39bqCWdRLhigEE97oQAAACg"]
[Thu Jul 30 09:22:55.056403 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.bak"] [unique_id "amsJ39bqCWdRLhigEE97oQAAACg"]
[Thu Jul 30 09:22:55.056563 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.bak"] [unique_id "amsJ39bqCWdRLhigEE97oQAAACg"]
[Thu Jul 30 09:22:55.075963 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.dev"] [unique_id "amsJ39bqCWdRLhigEE97ogAAACg"]
[Thu Jul 30 09:22:55.076136 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.dev"] [unique_id "amsJ39bqCWdRLhigEE97ogAAACg"]
[Thu Jul 30 09:22:55.076309 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.dev"] [unique_id "amsJ39bqCWdRLhigEE97ogAAACg"]
[Thu Jul 30 09:22:55.095849 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.dist"] [unique_id "amsJ39bqCWdRLhigEE97owAAACg"]
[Thu Jul 30 09:22:55.096002 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.dist"] [unique_id "amsJ39bqCWdRLhigEE97owAAACg"]
[Thu Jul 30 09:22:55.096209 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.dist"] [unique_id "amsJ39bqCWdRLhigEE97owAAACg"]
[Thu Jul 30 09:22:55.116826 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.local"] [unique_id "amsJ39bqCWdRLhigEE97pAAAACg"]
[Thu Jul 30 09:22:55.116976 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.local"] [unique_id "amsJ39bqCWdRLhigEE97pAAAACg"]
[Thu Jul 30 09:22:55.117154 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cms/.env.local"] [unique_id "amsJ39bqCWdRLhigEE97pAAAACg"]
[Thu Jul 30 09:22:55.136393 2026] [authz_core:error] [pid 2545134:tid 2545134] [client 144.172.105.5:50590] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/error_log
[Thu Jul 30 09:22:55.809077 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/cms/php.ini"] [unique_id "amsJ39bqCWdRLhigEE97xwAAACg"]
[Thu Jul 30 09:22:55.809354 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cms/php.ini"] [unique_id "amsJ39bqCWdRLhigEE97xwAAACg"]
[Thu Jul 30 09:22:55.809510 2026] [security2:error] [pid 2537788:tid 2537788] [client 185.177.72.10:5136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cms/php.ini"] [unique_id "amsJ39bqCWdRLhigEE97xwAAACg"]
[Thu Jul 30 09:22:56.095531 2026] [authz_core:error] [pid 2550549:tid 2550549] [client 57.141.0.47:36308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:22:56.096190 2026] [authz_core:error] [pid 2550549:tid 2550549] [client 57.141.0.47:36308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:22:56.204436 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/code/api/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH06wAAAA4"]
[Thu Jul 30 09:22:56.204556 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/code/api/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH06wAAAA4"]
[Thu Jul 30 09:22:56.204723 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/code/api/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH06wAAAA4"]
[Thu Jul 30 09:22:56.224946 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/code/web/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH07AAAAA4"]
[Thu Jul 30 09:22:56.225125 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/code/web/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH07AAAAA4"]
[Thu Jul 30 09:22:56.225314 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/code/web/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH07AAAAA4"]
[Thu Jul 30 09:22:56.244870 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codeigniter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/codeigniter/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH07QAAAA4"]
[Thu Jul 30 09:22:56.245043 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/codeigniter/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH07QAAAA4"]
[Thu Jul 30 09:22:56.245232 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/codeigniter/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH07QAAAA4"]
[Thu Jul 30 09:22:56.413364 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/codenames-frontend/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09QAAAA4"]
[Thu Jul 30 09:22:56.413539 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/codenames-frontend/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09QAAAA4"]
[Thu Jul 30 09:22:56.413730 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/codenames-frontend/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09QAAAA4"]
[Thu Jul 30 09:22:56.434265 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09gAAAA4"]
[Thu Jul 30 09:22:56.434445 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09gAAAA4"]
[Thu Jul 30 09:22:56.434634 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09gAAAA4"]
[Thu Jul 30 09:22:56.454177 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/collected_static/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09wAAAA4"]
[Thu Jul 30 09:22:56.454327 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/collected_static/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09wAAAA4"]
[Thu Jul 30 09:22:56.454485 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/collected_static/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH09wAAAA4"]
[Thu Jul 30 09:22:56.495840 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/common/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH0-QAAAA4"]
[Thu Jul 30 09:22:56.496006 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/common/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH0-QAAAA4"]
[Thu Jul 30 09:22:56.496189 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/common/.env"] [unique_id "amsJ4P7KNmJnOlH-mGH0-QAAAA4"]
[Thu Jul 30 09:22:56.515335 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/common/.env.bak"] [unique_id "amsJ4P7KNmJnOlH-mGH0-gAAAA4"]
[Thu Jul 30 09:22:56.515456 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/common/.env.bak"] [unique_id "amsJ4P7KNmJnOlH-mGH0-gAAAA4"]
[Thu Jul 30 09:22:56.515618 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/common/.env.bak"] [unique_id "amsJ4P7KNmJnOlH-mGH0-gAAAA4"]
[Thu Jul 30 09:22:56.538877 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/common/.env.dev"] [unique_id "amsJ4P7KNmJnOlH-mGH0-wAAAA4"]
[Thu Jul 30 09:22:56.539052 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/common/.env.dev"] [unique_id "amsJ4P7KNmJnOlH-mGH0-wAAAA4"]
[Thu Jul 30 09:22:56.539243 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/common/.env.dev"] [unique_id "amsJ4P7KNmJnOlH-mGH0-wAAAA4"]
[Thu Jul 30 09:22:56.558835 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/common/.env.dist"] [unique_id "amsJ4P7KNmJnOlH-mGH0_AAAAA4"]
[Thu Jul 30 09:22:56.558967 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/common/.env.dist"] [unique_id "amsJ4P7KNmJnOlH-mGH0_AAAAA4"]
[Thu Jul 30 09:22:56.559141 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/common/.env.dist"] [unique_id "amsJ4P7KNmJnOlH-mGH0_AAAAA4"]
[Thu Jul 30 09:22:56.579979 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/common/.env.local"] [unique_id "amsJ4P7KNmJnOlH-mGH0_QAAAA4"]
[Thu Jul 30 09:22:56.580191 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/common/.env.local"] [unique_id "amsJ4P7KNmJnOlH-mGH0_QAAAA4"]
[Thu Jul 30 09:22:56.580357 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/common/.env.local"] [unique_id "amsJ4P7KNmJnOlH-mGH0_QAAAA4"]
[Thu Jul 30 09:22:56.805911 2026] [core:error] [pid 2548003:tid 2548003] (13)Permission denied: [client 216.73.216.199:13790] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_state/reclaim_account
[Thu Jul 30 09:22:57.272163 2026] [ssl:error] [pid 2518708:tid 2518708] (EAI 2)Name or service not known: [client 144.76.19.72:64052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:57.272190 2026] [ssl:error] [pid 2518708:tid 2518708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:57.303673 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/common/php.ini"] [unique_id "amsJ4f7KNmJnOlH-mGH1IAAAAA4"]
[Thu Jul 30 09:22:57.304016 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/common/php.ini"] [unique_id "amsJ4f7KNmJnOlH-mGH1IAAAAA4"]
[Thu Jul 30 09:22:57.304209 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/common/php.ini"] [unique_id "amsJ4f7KNmJnOlH-mGH1IAAAAA4"]
[Thu Jul 30 09:22:57.325227 2026] [ssl:error] [pid 2547448:tid 2547448] (EAI 2)Name or service not known: [client 144.76.19.72:64056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:22:57.325259 2026] [ssl:error] [pid 2547448:tid 2547448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:22:57.699735 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/community/.env"] [unique_id "amsJ4f7KNmJnOlH-mGH1MwAAAA4"]
[Thu Jul 30 09:22:57.699914 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/community/.env"] [unique_id "amsJ4f7KNmJnOlH-mGH1MwAAAA4"]
[Thu Jul 30 09:22:57.700131 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/community/.env"] [unique_id "amsJ4f7KNmJnOlH-mGH1MwAAAA4"]
[Thu Jul 30 09:22:57.883554 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conf/.env"] [unique_id "amsJ4f7KNmJnOlH-mGH1PAAAAA4"]
[Thu Jul 30 09:22:57.883760 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conf/.env"] [unique_id "amsJ4f7KNmJnOlH-mGH1PAAAAA4"]
[Thu Jul 30 09:22:57.883955 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conf/.env"] [unique_id "amsJ4f7KNmJnOlH-mGH1PAAAAA4"]
[Thu Jul 30 09:22:57.904937 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.bak"] [unique_id "amsJ4f7KNmJnOlH-mGH1PQAAAA4"]
[Thu Jul 30 09:22:57.905137 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.bak"] [unique_id "amsJ4f7KNmJnOlH-mGH1PQAAAA4"]
[Thu Jul 30 09:22:57.905342 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.bak"] [unique_id "amsJ4f7KNmJnOlH-mGH1PQAAAA4"]
[Thu Jul 30 09:22:57.924802 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.dev"] [unique_id "amsJ4f7KNmJnOlH-mGH1PgAAAA4"]
[Thu Jul 30 09:22:57.924977 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.dev"] [unique_id "amsJ4f7KNmJnOlH-mGH1PgAAAA4"]
[Thu Jul 30 09:22:57.925211 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.dev"] [unique_id "amsJ4f7KNmJnOlH-mGH1PgAAAA4"]
[Thu Jul 30 09:22:57.945593 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.dist"] [unique_id "amsJ4f7KNmJnOlH-mGH1PwAAAA4"]
[Thu Jul 30 09:22:57.945772 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.dist"] [unique_id "amsJ4f7KNmJnOlH-mGH1PwAAAA4"]
[Thu Jul 30 09:22:57.945967 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.177.72.10:19364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.dist"] [unique_id "amsJ4f7KNmJnOlH-mGH1PwAAAA4"]
[Thu Jul 30 09:22:57.982830 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.local"] [unique_id "amsJ4SJxu_HJ66qd7DUddgAAACk"]
[Thu Jul 30 09:22:57.983082 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.local"] [unique_id "amsJ4SJxu_HJ66qd7DUddgAAACk"]
[Thu Jul 30 09:22:57.983352 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conf/.env.local"] [unique_id "amsJ4SJxu_HJ66qd7DUddgAAACk"]
[Thu Jul 30 09:22:58.635487 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/conf/php.ini"] [unique_id "amsJ4iJxu_HJ66qd7DUdmQAAACk"]
[Thu Jul 30 09:22:58.635797 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conf/php.ini"] [unique_id "amsJ4iJxu_HJ66qd7DUdmQAAACk"]
[Thu Jul 30 09:22:58.635957 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conf/php.ini"] [unique_id "amsJ4iJxu_HJ66qd7DUdmQAAACk"]
[Thu Jul 30 09:22:58.981302 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config.bak"] [unique_id "amsJ4iJxu_HJ66qd7DUdrAAAACk"]
[Thu Jul 30 09:22:58.981621 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config.bak"] [unique_id "amsJ4iJxu_HJ66qd7DUdrAAAACk"]
[Thu Jul 30 09:22:58.981779 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config.bak"] [unique_id "amsJ4iJxu_HJ66qd7DUdrAAAACk"]
[Thu Jul 30 09:22:59.037993 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config.conf"] [unique_id "amsJ4yJxu_HJ66qd7DUdrwAAACk"]
[Thu Jul 30 09:22:59.038334 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config.conf"] [unique_id "amsJ4yJxu_HJ66qd7DUdrwAAACk"]
[Thu Jul 30 09:22:59.038499 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config.conf"] [unique_id "amsJ4yJxu_HJ66qd7DUdrwAAACk"]
[Thu Jul 30 09:22:59.074609 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config.dat"] [unique_id "amsJ4yJxu_HJ66qd7DUdsQAAACk"]
[Thu Jul 30 09:22:59.074916 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config.dat"] [unique_id "amsJ4yJxu_HJ66qd7DUdsQAAACk"]
[Thu Jul 30 09:22:59.075088 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config.dat"] [unique_id "amsJ4yJxu_HJ66qd7DUdsQAAACk"]
[Thu Jul 30 09:22:59.168203 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config.inc"] [unique_id "amsJ4yJxu_HJ66qd7DUdtgAAACk"]
[Thu Jul 30 09:22:59.168525 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config.inc"] [unique_id "amsJ4yJxu_HJ66qd7DUdtgAAACk"]
[Thu Jul 30 09:22:59.168698 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config.inc"] [unique_id "amsJ4yJxu_HJ66qd7DUdtgAAACk"]
[Thu Jul 30 09:22:59.205991 2026] [security2:error] [pid 2547448:tid 2547448] [client 85.208.96.204:15592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/markwayne-mullin-military-service"] [unique_id "amsJ45PBAO23C6MAa3YZjgAAAAo"]
[Thu Jul 30 09:22:59.431131 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config.old"] [unique_id "amsJ4yJxu_HJ66qd7DUdxAAAACk"]
[Thu Jul 30 09:22:59.431444 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config.old"] [unique_id "amsJ4yJxu_HJ66qd7DUdxAAAACk"]
[Thu Jul 30 09:22:59.431629 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config.old"] [unique_id "amsJ4yJxu_HJ66qd7DUdxAAAACk"]
[Thu Jul 30 09:22:59.785364 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config.sql"] [unique_id "amsJ4yJxu_HJ66qd7DUd1gAAACk"]
[Thu Jul 30 09:22:59.785746 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config.sql"] [unique_id "amsJ4yJxu_HJ66qd7DUd1gAAACk"]
[Thu Jul 30 09:22:59.785944 2026] [security2:error] [pid 2548315:tid 2548315] [client 185.177.72.10:19374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config.sql"] [unique_id "amsJ4yJxu_HJ66qd7DUd1gAAACk"]
[Thu Jul 30 09:22:59.894457 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/config/.env.bak"] [unique_id "amsJ41U9OTCsd8OrsfB9pQAAACs"]
[Thu Jul 30 09:22:59.894659 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/.env.bak"] [unique_id "amsJ41U9OTCsd8OrsfB9pQAAACs"]
[Thu Jul 30 09:22:59.894861 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/.env.bak"] [unique_id "amsJ41U9OTCsd8OrsfB9pQAAACs"]
[Thu Jul 30 09:22:59.912957 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/config/.env.dev"] [unique_id "amsJ41U9OTCsd8OrsfB9pgAAACs"]
[Thu Jul 30 09:22:59.913152 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/.env.dev"] [unique_id "amsJ41U9OTCsd8OrsfB9pgAAACs"]
[Thu Jul 30 09:22:59.913360 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/.env.dev"] [unique_id "amsJ41U9OTCsd8OrsfB9pgAAACs"]
[Thu Jul 30 09:22:59.932329 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/config/.env.dist"] [unique_id "amsJ41U9OTCsd8OrsfB9pwAAACs"]
[Thu Jul 30 09:22:59.932509 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/.env.dist"] [unique_id "amsJ41U9OTCsd8OrsfB9pwAAACs"]
[Thu Jul 30 09:22:59.932699 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/.env.dist"] [unique_id "amsJ41U9OTCsd8OrsfB9pwAAACs"]
[Thu Jul 30 09:22:59.951472 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/config/.env.test"] [unique_id "amsJ41U9OTCsd8OrsfB9qAAAACs"]
[Thu Jul 30 09:22:59.951644 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/.env.test"] [unique_id "amsJ41U9OTCsd8OrsfB9qAAAACs"]
[Thu Jul 30 09:22:59.951921 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/.env.test"] [unique_id "amsJ41U9OTCsd8OrsfB9qAAAACs"]
[Thu Jul 30 09:22:59.988722 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/config/.git/config"] [unique_id "amsJ41U9OTCsd8OrsfB9qgAAACs"]
[Thu Jul 30 09:22:59.988879 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/.git/config"] [unique_id "amsJ41U9OTCsd8OrsfB9qgAAACs"]
[Thu Jul 30 09:22:59.989045 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/.git/config"] [unique_id "amsJ41U9OTCsd8OrsfB9qgAAACs"]
[Thu Jul 30 09:23:00.082833 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config/AppData.config"] [unique_id "amsJ5FU9OTCsd8OrsfB9rwAAACs"]
[Thu Jul 30 09:23:00.083107 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/AppData.config"] [unique_id "amsJ5FU9OTCsd8OrsfB9rwAAACs"]
[Thu Jul 30 09:23:00.083261 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/AppData.config"] [unique_id "amsJ5FU9OTCsd8OrsfB9rwAAACs"]
[Thu Jul 30 09:23:00.101315 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amsJ5FU9OTCsd8OrsfB9sAAAACs"]
[Thu Jul 30 09:23:00.101600 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amsJ5FU9OTCsd8OrsfB9sAAAACs"]
[Thu Jul 30 09:23:00.101752 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amsJ5FU9OTCsd8OrsfB9sAAAACs"]
[Thu Jul 30 09:23:00.139119 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config/api-config.ini"] [unique_id "amsJ5FU9OTCsd8OrsfB9sgAAACs"]
[Thu Jul 30 09:23:00.139424 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/api-config.ini"] [unique_id "amsJ5FU9OTCsd8OrsfB9sgAAACs"]
[Thu Jul 30 09:23:00.139589 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/api-config.ini"] [unique_id "amsJ5FU9OTCsd8OrsfB9sgAAACs"]
[Thu Jul 30 09:23:00.377776 2026] [ssl:error] [pid 2518708:tid 2518708] (EAI 2)Name or service not known: [client 144.76.19.72:33780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:00.377823 2026] [ssl:error] [pid 2518708:tid 2518708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:00.432242 2026] [ssl:error] [pid 2550335:tid 2550335] (EAI 2)Name or service not known: [client 144.76.19.72:33782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:00.432271 2026] [ssl:error] [pid 2550335:tid 2550335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:00.448397 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config/config.inc"] [unique_id "amsJ5FU9OTCsd8OrsfB9wgAAACs"]
[Thu Jul 30 09:23:00.448667 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/config.inc"] [unique_id "amsJ5FU9OTCsd8OrsfB9wgAAACs"]
[Thu Jul 30 09:23:00.448814 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/config.inc"] [unique_id "amsJ5FU9OTCsd8OrsfB9wgAAACs"]
[Thu Jul 30 09:23:00.630055 2026] [core:error] [pid 2547912:tid 2547912] [client 66.249.64.171:51510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:00.630094 2026] [core:error] [pid 2547912:tid 2547912] [client 66.249.64.171:51510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:00.851803 2026] [authz_core:error] [pid 2539964:tid 2539964] [client 144.172.105.5:50694] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/Ajax/error_log
[Thu Jul 30 09:23:01.027814 2026] [security2:error] [pid 2547448:tid 2547448] [client 185.191.171.14:47328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/monte-vista-elementary-school-teachers"] [unique_id "amsJ5ZPBAO23C6MAa3YZkAAAAAo"]
[Thu Jul 30 09:23:01.268561 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config/laravel.log"] [unique_id "amsJ5VU9OTCsd8OrsfB97QAAACs"]
[Thu Jul 30 09:23:01.268897 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/laravel.log"] [unique_id "amsJ5VU9OTCsd8OrsfB97QAAACs"]
[Thu Jul 30 09:23:01.269053 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:19388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/laravel.log"] [unique_id "amsJ5VU9OTCsd8OrsfB97QAAACs"]
[Thu Jul 30 09:23:01.818405 2026] [security2:error] [pid 2537161:tid 2537161] [client 185.191.171.9:64740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2009/06/05/what-is-architecture/"] [unique_id "amsJ5f7KNmJnOlH-mGH1QwAAAA4"]
[Thu Jul 30 09:23:01.934877 2026] [authz_core:error] [pid 2547912:tid 2547912] [client 144.172.105.5:50700] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/HTTP_Session/error_log
[Thu Jul 30 09:23:02.953275 2026] [core:error] [pid 2550093:tid 2550093] (13)Permission denied: [client 216.73.216.199:4813] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/myplacelondon.com.db
[Thu Jul 30 09:23:03.011880 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:19394] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config/settings.inc"] [unique_id "amsJ58BE1NQnMrj8NdmDpAAAACI"]
[Thu Jul 30 09:23:03.012158 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:19394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/settings.inc"] [unique_id "amsJ58BE1NQnMrj8NdmDpAAAACI"]
[Thu Jul 30 09:23:03.012313 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:19394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/settings.inc"] [unique_id "amsJ58BE1NQnMrj8NdmDpAAAACI"]
[Thu Jul 30 09:23:03.255402 2026] [ssl:error] [pid 2550093:tid 2550093] (70014)End of file found: [client 216.73.216.199:4813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:23:03.485747 2026] [ssl:error] [pid 2549729:tid 2549729] (EAI 2)Name or service not known: [client 144.76.19.72:33786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:03.485773 2026] [ssl:error] [pid 2549729:tid 2549729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:03.538381 2026] [ssl:error] [pid 2539964:tid 2539964] (EAI 2)Name or service not known: [client 144.76.19.72:33794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:03.538407 2026] [ssl:error] [pid 2539964:tid 2539964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:03.658445 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:19394] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/config/web.config"] [unique_id "amsJ58BE1NQnMrj8NdmDxwAAACI"]
[Thu Jul 30 09:23:03.658732 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:19394] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /config/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/config/web.config"] [unique_id "amsJ58BE1NQnMrj8NdmDxwAAACI"]
[Thu Jul 30 09:23:03.658935 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:19394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/config/web.config"] [unique_id "amsJ58BE1NQnMrj8NdmDxwAAACI"]
[Thu Jul 30 09:23:03.659176 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:19394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/config/web.config"] [unique_id "amsJ58BE1NQnMrj8NdmDxwAAACI"]
[Thu Jul 30 09:23:03.766384 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /configuration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/configuration/.env"] [unique_id "amsJ5y4Vh6fwOzWLVQobdwAAAAY"]
[Thu Jul 30 09:23:03.766552 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/configuration/.env"] [unique_id "amsJ5y4Vh6fwOzWLVQobdwAAAAY"]
[Thu Jul 30 09:23:03.766743 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/configuration/.env"] [unique_id "amsJ5y4Vh6fwOzWLVQobdwAAAAY"]
[Thu Jul 30 09:23:03.802922 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /configuration/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/configuration/.git/config"] [unique_id "amsJ5y4Vh6fwOzWLVQobeQAAAAY"]
[Thu Jul 30 09:23:03.803111 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/configuration/.git/config"] [unique_id "amsJ5y4Vh6fwOzWLVQobeQAAAAY"]
[Thu Jul 30 09:23:03.803293 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/configuration/.git/config"] [unique_id "amsJ5y4Vh6fwOzWLVQobeQAAAAY"]
[Thu Jul 30 09:23:03.888777 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amsJ5y4Vh6fwOzWLVQobfgAAAAY"]
[Thu Jul 30 09:23:03.889133 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amsJ5y4Vh6fwOzWLVQobfgAAAAY"]
[Thu Jul 30 09:23:03.889322 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amsJ5y4Vh6fwOzWLVQobfgAAAAY"]
[Thu Jul 30 09:23:03.908776 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/configuration/api-config.ini"] [unique_id "amsJ5y4Vh6fwOzWLVQobfwAAAAY"]
[Thu Jul 30 09:23:03.909143 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/configuration/api-config.ini"] [unique_id "amsJ5y4Vh6fwOzWLVQobfwAAAAY"]
[Thu Jul 30 09:23:03.909323 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/configuration/api-config.ini"] [unique_id "amsJ5y4Vh6fwOzWLVQobfwAAAAY"]
[Thu Jul 30 09:23:03.959331 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/configuration/laravel.log"] [unique_id "amsJ5y4Vh6fwOzWLVQobggAAAAY"]
[Thu Jul 30 09:23:03.959675 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/configuration/laravel.log"] [unique_id "amsJ5y4Vh6fwOzWLVQobggAAAAY"]
[Thu Jul 30 09:23:03.959844 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/configuration/laravel.log"] [unique_id "amsJ5y4Vh6fwOzWLVQobggAAAAY"]
[Thu Jul 30 09:23:04.009996 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/configuration/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobhQAAAAY"]
[Thu Jul 30 09:23:04.010234 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /configuration/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/configuration/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobhQAAAAY"]
[Thu Jul 30 09:23:04.010371 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/configuration/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobhQAAAAY"]
[Thu Jul 30 09:23:04.010531 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/configuration/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobhQAAAAY"]
[Thu Jul 30 09:23:04.144991 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conta/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobjQAAAAY"]
[Thu Jul 30 09:23:04.145155 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conta/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobjQAAAAY"]
[Thu Jul 30 09:23:04.145312 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conta/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobjQAAAAY"]
[Thu Jul 30 09:23:04.179444 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /conta/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conta/.git/config"] [unique_id "amsJ6C4Vh6fwOzWLVQobjwAAAAY"]
[Thu Jul 30 09:23:04.179625 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conta/.git/config"] [unique_id "amsJ6C4Vh6fwOzWLVQobjwAAAAY"]
[Thu Jul 30 09:23:04.179794 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conta/.git/config"] [unique_id "amsJ6C4Vh6fwOzWLVQobjwAAAAY"]
[Thu Jul 30 09:23:04.255134 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.191.171.16:44352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/casas-baratas-en-ontario-california"] [unique_id "amsJ6LLEvf-80yRR0HGXiAAAAAQ"]
[Thu Jul 30 09:23:04.264101 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amsJ6C4Vh6fwOzWLVQoblAAAAAY"]
[Thu Jul 30 09:23:04.264367 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amsJ6C4Vh6fwOzWLVQoblAAAAAY"]
[Thu Jul 30 09:23:04.264511 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amsJ6C4Vh6fwOzWLVQoblAAAAAY"]
[Thu Jul 30 09:23:04.289531 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/conta/api-config.ini"] [unique_id "amsJ6C4Vh6fwOzWLVQoblQAAAAY"]
[Thu Jul 30 09:23:04.289814 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conta/api-config.ini"] [unique_id "amsJ6C4Vh6fwOzWLVQoblQAAAAY"]
[Thu Jul 30 09:23:04.289981 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conta/api-config.ini"] [unique_id "amsJ6C4Vh6fwOzWLVQoblQAAAAY"]
[Thu Jul 30 09:23:04.342545 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/conta/laravel.log"] [unique_id "amsJ6C4Vh6fwOzWLVQobmAAAAAY"]
[Thu Jul 30 09:23:04.342838 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conta/laravel.log"] [unique_id "amsJ6C4Vh6fwOzWLVQobmAAAAAY"]
[Thu Jul 30 09:23:04.342993 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conta/laravel.log"] [unique_id "amsJ6C4Vh6fwOzWLVQobmAAAAAY"]
[Thu Jul 30 09:23:04.393728 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/conta/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobmwAAAAY"]
[Thu Jul 30 09:23:04.393942 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /conta/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/conta/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobmwAAAAY"]
[Thu Jul 30 09:23:04.394062 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/conta/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobmwAAAAY"]
[Thu Jul 30 09:23:04.394232 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/conta/web.config"] [unique_id "amsJ6C4Vh6fwOzWLVQobmwAAAAY"]
[Thu Jul 30 09:23:04.410460 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/content/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobnAAAAAY"]
[Thu Jul 30 09:23:04.410594 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/content/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobnAAAAAY"]
[Thu Jul 30 09:23:04.410743 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/content/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobnAAAAAY"]
[Thu Jul 30 09:23:04.510635 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/core/persistence/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobogAAAAY"]
[Thu Jul 30 09:23:04.510798 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/core/persistence/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobogAAAAY"]
[Thu Jul 30 09:23:04.510966 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/core/persistence/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobogAAAAY"]
[Thu Jul 30 09:23:04.578445 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobpgAAAAY"]
[Thu Jul 30 09:23:04.578615 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobpgAAAAY"]
[Thu Jul 30 09:23:04.578780 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobpgAAAAY"]
[Thu Jul 30 09:23:04.595262 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/counterblockd/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobpwAAAAY"]
[Thu Jul 30 09:23:04.595414 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/counterblockd/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobpwAAAAY"]
[Thu Jul 30 09:23:04.595588 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/counterblockd/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobpwAAAAY"]
[Thu Jul 30 09:23:04.612253 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/counterwallet/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqAAAAAY"]
[Thu Jul 30 09:23:04.612379 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/counterwallet/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqAAAAAY"]
[Thu Jul 30 09:23:04.612541 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/counterwallet/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqAAAAAY"]
[Thu Jul 30 09:23:04.628723 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cp/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqQAAAAY"]
[Thu Jul 30 09:23:04.628862 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cp/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqQAAAAY"]
[Thu Jul 30 09:23:04.629029 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cp/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqQAAAAY"]
[Thu Jul 30 09:23:04.645562 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/crm/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqgAAAAY"]
[Thu Jul 30 09:23:04.645754 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqgAAAAY"]
[Thu Jul 30 09:23:04.645949 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/.env"] [unique_id "amsJ6C4Vh6fwOzWLVQobqgAAAAY"]
[Thu Jul 30 09:23:04.662126 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.bak"] [unique_id "amsJ6C4Vh6fwOzWLVQobqwAAAAY"]
[Thu Jul 30 09:23:04.662300 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.bak"] [unique_id "amsJ6C4Vh6fwOzWLVQobqwAAAAY"]
[Thu Jul 30 09:23:04.662471 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.bak"] [unique_id "amsJ6C4Vh6fwOzWLVQobqwAAAAY"]
[Thu Jul 30 09:23:04.679148 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.dev"] [unique_id "amsJ6C4Vh6fwOzWLVQobrAAAAAY"]
[Thu Jul 30 09:23:04.679339 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.dev"] [unique_id "amsJ6C4Vh6fwOzWLVQobrAAAAAY"]
[Thu Jul 30 09:23:04.679537 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.dev"] [unique_id "amsJ6C4Vh6fwOzWLVQobrAAAAAY"]
[Thu Jul 30 09:23:04.696134 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.dist"] [unique_id "amsJ6C4Vh6fwOzWLVQobrQAAAAY"]
[Thu Jul 30 09:23:04.696326 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.dist"] [unique_id "amsJ6C4Vh6fwOzWLVQobrQAAAAY"]
[Thu Jul 30 09:23:04.696540 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.dist"] [unique_id "amsJ6C4Vh6fwOzWLVQobrQAAAAY"]
[Thu Jul 30 09:23:04.713442 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.local"] [unique_id "amsJ6C4Vh6fwOzWLVQobrgAAAAY"]
[Thu Jul 30 09:23:04.713652 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.local"] [unique_id "amsJ6C4Vh6fwOzWLVQobrgAAAAY"]
[Thu Jul 30 09:23:04.713847 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.local"] [unique_id "amsJ6C4Vh6fwOzWLVQobrgAAAAY"]
[Thu Jul 30 09:23:04.732330 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.production"] [unique_id "amsJ6C4Vh6fwOzWLVQobrwAAAAY"]
[Thu Jul 30 09:23:04.732481 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.production"] [unique_id "amsJ6C4Vh6fwOzWLVQobrwAAAAY"]
[Thu Jul 30 09:23:04.732654 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.production"] [unique_id "amsJ6C4Vh6fwOzWLVQobrwAAAAY"]
[Thu Jul 30 09:23:04.748829 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.staging"] [unique_id "amsJ6C4Vh6fwOzWLVQobsAAAAAY"]
[Thu Jul 30 09:23:04.748972 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.staging"] [unique_id "amsJ6C4Vh6fwOzWLVQobsAAAAAY"]
[Thu Jul 30 09:23:04.749147 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/.env.staging"] [unique_id "amsJ6C4Vh6fwOzWLVQobsAAAAAY"]
[Thu Jul 30 09:23:04.798093 2026] [cgi:error] [pid 2548003:tid 2548003] [client 216.73.216.199:13790] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/lib64/perl5/vendor_perl/Unicode/Collate/Locale/haw.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:23:04.798134 2026] [cgi:error] [pid 2548003:tid 2548003] [client 216.73.216.199:13790] End of script output before headers: haw.pl
[Thu Jul 30 09:23:04.843116 2026] [authz_core:error] [pid 2547912:tid 2547912] [client 144.172.105.5:50728] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/ListView/error_log
[Thu Jul 30 09:23:05.376656 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/crm/php.ini"] [unique_id "amsJ6S4Vh6fwOzWLVQob0wAAAAY"]
[Thu Jul 30 09:23:05.377026 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/crm/php.ini"] [unique_id "amsJ6S4Vh6fwOzWLVQob0wAAAAY"]
[Thu Jul 30 09:23:05.377251 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:19396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/crm/php.ini"] [unique_id "amsJ6S4Vh6fwOzWLVQob0wAAAAY"]
[Thu Jul 30 09:23:05.767416 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.bak"] [unique_id "amsJ6UEe0D56M9wzuVuxIQAAABY"]
[Thu Jul 30 09:23:05.767543 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.bak"] [unique_id "amsJ6UEe0D56M9wzuVuxIQAAABY"]
[Thu Jul 30 09:23:05.767727 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.bak"] [unique_id "amsJ6UEe0D56M9wzuVuxIQAAABY"]
[Thu Jul 30 09:23:05.785423 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.dev"] [unique_id "amsJ6UEe0D56M9wzuVuxIgAAABY"]
[Thu Jul 30 09:23:05.785558 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.dev"] [unique_id "amsJ6UEe0D56M9wzuVuxIgAAABY"]
[Thu Jul 30 09:23:05.785744 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.dev"] [unique_id "amsJ6UEe0D56M9wzuVuxIgAAABY"]
[Thu Jul 30 09:23:05.804304 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.dist"] [unique_id "amsJ6UEe0D56M9wzuVuxIwAAABY"]
[Thu Jul 30 09:23:05.804453 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.dist"] [unique_id "amsJ6UEe0D56M9wzuVuxIwAAABY"]
[Thu Jul 30 09:23:05.804640 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.dist"] [unique_id "amsJ6UEe0D56M9wzuVuxIwAAABY"]
[Thu Jul 30 09:23:05.823207 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.local"] [unique_id "amsJ6UEe0D56M9wzuVuxJAAAABY"]
[Thu Jul 30 09:23:05.823360 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.local"] [unique_id "amsJ6UEe0D56M9wzuVuxJAAAABY"]
[Thu Jul 30 09:23:05.823543 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.local"] [unique_id "amsJ6UEe0D56M9wzuVuxJAAAABY"]
[Thu Jul 30 09:23:05.841113 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.production"] [unique_id "amsJ6UEe0D56M9wzuVuxJQAAABY"]
[Thu Jul 30 09:23:05.841245 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.production"] [unique_id "amsJ6UEe0D56M9wzuVuxJQAAABY"]
[Thu Jul 30 09:23:05.841410 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.production"] [unique_id "amsJ6UEe0D56M9wzuVuxJQAAABY"]
[Thu Jul 30 09:23:05.859489 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.staging"] [unique_id "amsJ6UEe0D56M9wzuVuxJgAAABY"]
[Thu Jul 30 09:23:05.859631 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.staging"] [unique_id "amsJ6UEe0D56M9wzuVuxJgAAABY"]
[Thu Jul 30 09:23:05.859801 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cron/.env.staging"] [unique_id "amsJ6UEe0D56M9wzuVuxJgAAABY"]
[Thu Jul 30 09:23:05.973292 2026] [core:error] [pid 2548319:tid 2548319] (13)Permission denied: [client 216.73.216.199:14387] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/slots/23/module/uevent
[Thu Jul 30 09:23:06.470513 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.22:60946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:23:06.471161 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.22:60946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:23:06.529689 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/cron/php.ini"] [unique_id "amsJ6kEe0D56M9wzuVuxSQAAABY"]
[Thu Jul 30 09:23:06.529959 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cron/php.ini"] [unique_id "amsJ6kEe0D56M9wzuVuxSQAAABY"]
[Thu Jul 30 09:23:06.530143 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cron/php.ini"] [unique_id "amsJ6kEe0D56M9wzuVuxSQAAABY"]
[Thu Jul 30 09:23:06.591654 2026] [ssl:error] [pid 2540903:tid 2540903] (EAI 2)Name or service not known: [client 144.76.19.72:33810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:06.591682 2026] [ssl:error] [pid 2540903:tid 2540903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:06.647563 2026] [ssl:error] [pid 2548315:tid 2548315] (EAI 2)Name or service not known: [client 144.76.19.72:33820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:06.647613 2026] [ssl:error] [pid 2548315:tid 2548315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:06.842134 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 144.172.105.5:36848] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/QueryGenerator/error_log
[Thu Jul 30 09:23:06.885165 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/cryo_project/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXAAAABY"]
[Thu Jul 30 09:23:06.885294 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/cryo_project/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXAAAABY"]
[Thu Jul 30 09:23:06.885447 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/cryo_project/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXAAAABY"]
[Thu Jul 30 09:23:06.902993 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/css/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXQAAABY"]
[Thu Jul 30 09:23:06.903149 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/css/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXQAAABY"]
[Thu Jul 30 09:23:06.903296 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/css/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXQAAABY"]
[Thu Jul 30 09:23:06.920819 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/current/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXgAAABY"]
[Thu Jul 30 09:23:06.920956 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXgAAABY"]
[Thu Jul 30 09:23:06.921128 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/.env"] [unique_id "amsJ6kEe0D56M9wzuVuxXgAAABY"]
[Thu Jul 30 09:23:06.939277 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/current/.env.bak"] [unique_id "amsJ6kEe0D56M9wzuVuxXwAAABY"]
[Thu Jul 30 09:23:06.939434 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/.env.bak"] [unique_id "amsJ6kEe0D56M9wzuVuxXwAAABY"]
[Thu Jul 30 09:23:06.939602 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/.env.bak"] [unique_id "amsJ6kEe0D56M9wzuVuxXwAAABY"]
[Thu Jul 30 09:23:06.957214 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/current/.env.dev"] [unique_id "amsJ6kEe0D56M9wzuVuxYAAAABY"]
[Thu Jul 30 09:23:06.957329 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/.env.dev"] [unique_id "amsJ6kEe0D56M9wzuVuxYAAAABY"]
[Thu Jul 30 09:23:06.957475 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/.env.dev"] [unique_id "amsJ6kEe0D56M9wzuVuxYAAAABY"]
[Thu Jul 30 09:23:06.975683 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/current/.env.dist"] [unique_id "amsJ6kEe0D56M9wzuVuxYQAAABY"]
[Thu Jul 30 09:23:06.975903 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/.env.dist"] [unique_id "amsJ6kEe0D56M9wzuVuxYQAAABY"]
[Thu Jul 30 09:23:06.976045 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/.env.dist"] [unique_id "amsJ6kEe0D56M9wzuVuxYQAAABY"]
[Thu Jul 30 09:23:06.994853 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/current/.env.local"] [unique_id "amsJ6kEe0D56M9wzuVuxYgAAABY"]
[Thu Jul 30 09:23:06.994999 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/.env.local"] [unique_id "amsJ6kEe0D56M9wzuVuxYgAAABY"]
[Thu Jul 30 09:23:06.995173 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/.env.local"] [unique_id "amsJ6kEe0D56M9wzuVuxYgAAABY"]
[Thu Jul 30 09:23:07.013185 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/current/.env.production"] [unique_id "amsJ60Ee0D56M9wzuVuxYwAAABY"]
[Thu Jul 30 09:23:07.013327 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/.env.production"] [unique_id "amsJ60Ee0D56M9wzuVuxYwAAABY"]
[Thu Jul 30 09:23:07.013478 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/.env.production"] [unique_id "amsJ60Ee0D56M9wzuVuxYwAAABY"]
[Thu Jul 30 09:23:07.031259 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/current/.env.staging"] [unique_id "amsJ60Ee0D56M9wzuVuxZAAAABY"]
[Thu Jul 30 09:23:07.031392 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/.env.staging"] [unique_id "amsJ60Ee0D56M9wzuVuxZAAAABY"]
[Thu Jul 30 09:23:07.031541 2026] [security2:error] [pid 2547912:tid 2547912] [client 185.177.72.10:25546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/.env.staging"] [unique_id "amsJ60Ee0D56M9wzuVuxZAAAABY"]
[Thu Jul 30 09:23:07.588155 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 144.172.105.5:36854] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/Webservices/error_log
[Thu Jul 30 09:23:07.719204 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/current/php.ini"] [unique_id "amsJ6-5wwnGGOHd0XkHCZAAAADc"]
[Thu Jul 30 09:23:07.719608 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/current/php.ini"] [unique_id "amsJ6-5wwnGGOHd0XkHCZAAAADc"]
[Thu Jul 30 09:23:07.719818 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/current/php.ini"] [unique_id "amsJ6-5wwnGGOHd0XkHCZAAAADc"]
[Thu Jul 30 09:23:08.071805 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/custom/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHCdwAAADc"]
[Thu Jul 30 09:23:08.071920 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/custom/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHCdwAAADc"]
[Thu Jul 30 09:23:08.072097 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/custom/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHCdwAAADc"]
[Thu Jul 30 09:23:08.113751 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /customer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/customer/.git/config"] [unique_id "amsJ7O5wwnGGOHd0XkHCeQAAADc"]
[Thu Jul 30 09:23:08.113901 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/customer/.git/config"] [unique_id "amsJ7O5wwnGGOHd0XkHCeQAAADc"]
[Thu Jul 30 09:23:08.114053 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/customer/.git/config"] [unique_id "amsJ7O5wwnGGOHd0XkHCeQAAADc"]
[Thu Jul 30 09:23:08.205396 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCfgAAADc"]
[Thu Jul 30 09:23:08.205665 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCfgAAADc"]
[Thu Jul 30 09:23:08.205809 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCfgAAADc"]
[Thu Jul 30 09:23:08.223612 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/customer/api-config.ini"] [unique_id "amsJ7O5wwnGGOHd0XkHCfwAAADc"]
[Thu Jul 30 09:23:08.223934 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/customer/api-config.ini"] [unique_id "amsJ7O5wwnGGOHd0XkHCfwAAADc"]
[Thu Jul 30 09:23:08.224092 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/customer/api-config.ini"] [unique_id "amsJ7O5wwnGGOHd0XkHCfwAAADc"]
[Thu Jul 30 09:23:08.272696 2026] [core:error] [pid 2532797:tid 2532797] [client 66.249.64.170:56114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:08.272724 2026] [core:error] [pid 2532797:tid 2532797] [client 66.249.64.170:56114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:08.278879 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/customer/laravel.log"] [unique_id "amsJ7O5wwnGGOHd0XkHCggAAADc"]
[Thu Jul 30 09:23:08.279247 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/customer/laravel.log"] [unique_id "amsJ7O5wwnGGOHd0XkHCggAAADc"]
[Thu Jul 30 09:23:08.279482 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/customer/laravel.log"] [unique_id "amsJ7O5wwnGGOHd0XkHCggAAADc"]
[Thu Jul 30 09:23:08.336838 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/customer/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHChQAAADc"]
[Thu Jul 30 09:23:08.337096 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /customer/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/customer/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHChQAAADc"]
[Thu Jul 30 09:23:08.337278 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/customer/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHChQAAADc"]
[Thu Jul 30 09:23:08.337482 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/customer/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHChQAAADc"]
[Thu Jul 30 09:23:08.355338 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/d/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHChgAAADc"]
[Thu Jul 30 09:23:08.355551 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/d/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHChgAAADc"]
[Thu Jul 30 09:23:08.355778 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/d/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHChgAAADc"]
[Thu Jul 30 09:23:08.374332 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dashboard/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHChwAAADc"]
[Thu Jul 30 09:23:08.374481 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dashboard/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHChwAAADc"]
[Thu Jul 30 09:23:08.374666 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dashboard/.env"] [unique_id "amsJ7O5wwnGGOHd0XkHChwAAADc"]
[Thu Jul 30 09:23:08.414019 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dashboard/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dashboard/.git/config"] [unique_id "amsJ7O5wwnGGOHd0XkHCiQAAADc"]
[Thu Jul 30 09:23:08.414275 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dashboard/.git/config"] [unique_id "amsJ7O5wwnGGOHd0XkHCiQAAADc"]
[Thu Jul 30 09:23:08.414505 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dashboard/.git/config"] [unique_id "amsJ7O5wwnGGOHd0XkHCiQAAADc"]
[Thu Jul 30 09:23:08.506553 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCjgAAADc"]
[Thu Jul 30 09:23:08.506956 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCjgAAADc"]
[Thu Jul 30 09:23:08.507190 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCjgAAADc"]
[Thu Jul 30 09:23:08.584735 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amsJ7O5wwnGGOHd0XkHCkgAAADc"]
[Thu Jul 30 09:23:08.585106 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amsJ7O5wwnGGOHd0XkHCkgAAADc"]
[Thu Jul 30 09:23:08.585291 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amsJ7O5wwnGGOHd0XkHCkgAAADc"]
[Thu Jul 30 09:23:08.769122 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dashboard/laravel.log"] [unique_id "amsJ7O5wwnGGOHd0XkHCmwAAADc"]
[Thu Jul 30 09:23:08.769474 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dashboard/laravel.log"] [unique_id "amsJ7O5wwnGGOHd0XkHCmwAAADc"]
[Thu Jul 30 09:23:08.769667 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dashboard/laravel.log"] [unique_id "amsJ7O5wwnGGOHd0XkHCmwAAADc"]
[Thu Jul 30 09:23:08.925904 2026] [security2:error] [pid 2537161:tid 2537161] [client 85.208.96.208:44552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/stone-county-mugshots"] [unique_id "amsJ7P7KNmJnOlH-mGH1RQAAAA4"]
[Thu Jul 30 09:23:08.934592 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 57.141.0.41:57042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:23:08.935214 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 57.141.0.41:57042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:23:08.978289 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dashboard/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCpgAAADc"]
[Thu Jul 30 09:23:08.978482 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dashboard/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dashboard/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCpgAAADc"]
[Thu Jul 30 09:23:08.978597 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dashboard/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCpgAAADc"]
[Thu Jul 30 09:23:08.978744 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dashboard/web.config"] [unique_id "amsJ7O5wwnGGOHd0XkHCpgAAADc"]
[Thu Jul 30 09:23:09.115367 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dataset/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrQAAADc"]
[Thu Jul 30 09:23:09.115540 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dataset/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrQAAADc"]
[Thu Jul 30 09:23:09.115726 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dataset/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrQAAADc"]
[Thu Jul 30 09:23:09.133905 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dataset1/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrgAAADc"]
[Thu Jul 30 09:23:09.134087 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dataset1/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrgAAADc"]
[Thu Jul 30 09:23:09.134263 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dataset1/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrgAAADc"]
[Thu Jul 30 09:23:09.152280 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dataset2/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrwAAADc"]
[Thu Jul 30 09:23:09.152426 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dataset2/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrwAAADc"]
[Thu Jul 30 09:23:09.152596 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dataset2/.env"] [unique_id "amsJ7e5wwnGGOHd0XkHCrwAAADc"]
[Thu Jul 30 09:23:09.189960 2026] [cgi:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] AH02811: stderr from /home/printmyc/thewhitefamily.uk/debug.cgi: script not found or unable to stat
[Thu Jul 30 09:23:09.208188 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/debug.inc"] [unique_id "amsJ7e5wwnGGOHd0XkHCsgAAADc"]
[Thu Jul 30 09:23:09.208512 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/debug.inc"] [unique_id "amsJ7e5wwnGGOHd0XkHCsgAAADc"]
[Thu Jul 30 09:23:09.208695 2026] [security2:error] [pid 2538567:tid 2538567] [client 185.177.72.10:25562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/debug.inc"] [unique_id "amsJ7e5wwnGGOHd0XkHCsgAAADc"]
[Thu Jul 30 09:23:09.541101 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/default/.env"] [unique_id "amsJ7ShqdQRND-FRJFJnmAAAACU"]
[Thu Jul 30 09:23:09.541276 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/default/.env"] [unique_id "amsJ7ShqdQRND-FRJFJnmAAAACU"]
[Thu Jul 30 09:23:09.541461 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/default/.env"] [unique_id "amsJ7ShqdQRND-FRJFJnmAAAACU"]
[Thu Jul 30 09:23:09.559352 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/default/.env.bak"] [unique_id "amsJ7ShqdQRND-FRJFJnmQAAACU"]
[Thu Jul 30 09:23:09.559522 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/default/.env.bak"] [unique_id "amsJ7ShqdQRND-FRJFJnmQAAACU"]
[Thu Jul 30 09:23:09.559706 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/default/.env.bak"] [unique_id "amsJ7ShqdQRND-FRJFJnmQAAACU"]
[Thu Jul 30 09:23:09.577024 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/default/.env.dev"] [unique_id "amsJ7ShqdQRND-FRJFJnmgAAACU"]
[Thu Jul 30 09:23:09.577212 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/default/.env.dev"] [unique_id "amsJ7ShqdQRND-FRJFJnmgAAACU"]
[Thu Jul 30 09:23:09.577382 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/default/.env.dev"] [unique_id "amsJ7ShqdQRND-FRJFJnmgAAACU"]
[Thu Jul 30 09:23:09.595159 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/default/.env.dist"] [unique_id "amsJ7ShqdQRND-FRJFJnmwAAACU"]
[Thu Jul 30 09:23:09.595331 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/default/.env.dist"] [unique_id "amsJ7ShqdQRND-FRJFJnmwAAACU"]
[Thu Jul 30 09:23:09.595511 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/default/.env.dist"] [unique_id "amsJ7ShqdQRND-FRJFJnmwAAACU"]
[Thu Jul 30 09:23:09.613401 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/default/.env.local"] [unique_id "amsJ7ShqdQRND-FRJFJnnAAAACU"]
[Thu Jul 30 09:23:09.613555 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/default/.env.local"] [unique_id "amsJ7ShqdQRND-FRJFJnnAAAACU"]
[Thu Jul 30 09:23:09.613727 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/default/.env.local"] [unique_id "amsJ7ShqdQRND-FRJFJnnAAAACU"]
[Thu Jul 30 09:23:09.731410 2026] [ssl:error] [pid 2532797:tid 2532797] (EAI 2)Name or service not known: [client 144.76.19.72:48574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:09.731443 2026] [ssl:error] [pid 2532797:tid 2532797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:09.787025 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:48580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:09.787045 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:10.261138 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/default/php.ini"] [unique_id "amsJ7ihqdQRND-FRJFJnvwAAACU"]
[Thu Jul 30 09:23:10.261497 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/default/php.ini"] [unique_id "amsJ7ihqdQRND-FRJFJnvwAAACU"]
[Thu Jul 30 09:23:10.261717 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/default/php.ini"] [unique_id "amsJ7ihqdQRND-FRJFJnvwAAACU"]
[Thu Jul 30 09:23:10.609891 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/delivery/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn0gAAACU"]
[Thu Jul 30 09:23:10.610042 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/delivery/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn0gAAACU"]
[Thu Jul 30 09:23:10.610221 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/delivery/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn0gAAACU"]
[Thu Jul 30 09:23:10.649343 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo-app/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn1AAAACU"]
[Thu Jul 30 09:23:10.649514 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo-app/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn1AAAACU"]
[Thu Jul 30 09:23:10.649715 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo-app/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn1AAAACU"]
[Thu Jul 30 09:23:10.667167 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn1QAAACU"]
[Thu Jul 30 09:23:10.667316 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn1QAAACU"]
[Thu Jul 30 09:23:10.667471 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/.env"] [unique_id "amsJ7ihqdQRND-FRJFJn1QAAACU"]
[Thu Jul 30 09:23:10.685688 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.bak"] [unique_id "amsJ7ihqdQRND-FRJFJn1gAAACU"]
[Thu Jul 30 09:23:10.685814 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.bak"] [unique_id "amsJ7ihqdQRND-FRJFJn1gAAACU"]
[Thu Jul 30 09:23:10.685972 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.bak"] [unique_id "amsJ7ihqdQRND-FRJFJn1gAAACU"]
[Thu Jul 30 09:23:10.703388 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.dev"] [unique_id "amsJ7ihqdQRND-FRJFJn1wAAACU"]
[Thu Jul 30 09:23:10.703518 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.dev"] [unique_id "amsJ7ihqdQRND-FRJFJn1wAAACU"]
[Thu Jul 30 09:23:10.703683 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.dev"] [unique_id "amsJ7ihqdQRND-FRJFJn1wAAACU"]
[Thu Jul 30 09:23:10.721022 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.dist"] [unique_id "amsJ7ihqdQRND-FRJFJn2AAAACU"]
[Thu Jul 30 09:23:10.721164 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.dist"] [unique_id "amsJ7ihqdQRND-FRJFJn2AAAACU"]
[Thu Jul 30 09:23:10.721314 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.dist"] [unique_id "amsJ7ihqdQRND-FRJFJn2AAAACU"]
[Thu Jul 30 09:23:10.739362 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.local"] [unique_id "amsJ7ihqdQRND-FRJFJn2QAAACU"]
[Thu Jul 30 09:23:10.739475 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.local"] [unique_id "amsJ7ihqdQRND-FRJFJn2QAAACU"]
[Thu Jul 30 09:23:10.739625 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.local"] [unique_id "amsJ7ihqdQRND-FRJFJn2QAAACU"]
[Thu Jul 30 09:23:10.757839 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.production"] [unique_id "amsJ7ihqdQRND-FRJFJn2gAAACU"]
[Thu Jul 30 09:23:10.757956 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.production"] [unique_id "amsJ7ihqdQRND-FRJFJn2gAAACU"]
[Thu Jul 30 09:23:10.758119 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.production"] [unique_id "amsJ7ihqdQRND-FRJFJn2gAAACU"]
[Thu Jul 30 09:23:10.775411 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.staging"] [unique_id "amsJ7ihqdQRND-FRJFJn2wAAACU"]
[Thu Jul 30 09:23:10.775526 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.staging"] [unique_id "amsJ7ihqdQRND-FRJFJn2wAAACU"]
[Thu Jul 30 09:23:10.775687 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:25568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/.env.staging"] [unique_id "amsJ7ihqdQRND-FRJFJn2wAAACU"]
[Thu Jul 30 09:23:11.004001 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.14:39308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:23:11.004636 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 57.141.0.14:39308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:23:11.457795 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/demo/php.ini"] [unique_id "amsJ78BE1NQnMrj8NdmD1QAAACI"]
[Thu Jul 30 09:23:11.458156 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/demo/php.ini"] [unique_id "amsJ78BE1NQnMrj8NdmD1QAAACI"]
[Thu Jul 30 09:23:11.458362 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/demo/php.ini"] [unique_id "amsJ78BE1NQnMrj8NdmD1QAAACI"]
[Thu Jul 30 09:23:11.874146 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env"] [unique_id "amsJ78BE1NQnMrj8NdmD6QAAACI"]
[Thu Jul 30 09:23:11.874297 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env"] [unique_id "amsJ78BE1NQnMrj8NdmD6QAAACI"]
[Thu Jul 30 09:23:11.874458 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env"] [unique_id "amsJ78BE1NQnMrj8NdmD6QAAACI"]
[Thu Jul 30 09:23:11.893181 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.bak"] [unique_id "amsJ78BE1NQnMrj8NdmD6gAAACI"]
[Thu Jul 30 09:23:11.893332 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.bak"] [unique_id "amsJ78BE1NQnMrj8NdmD6gAAACI"]
[Thu Jul 30 09:23:11.893511 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.bak"] [unique_id "amsJ78BE1NQnMrj8NdmD6gAAACI"]
[Thu Jul 30 09:23:11.912354 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.dev"] [unique_id "amsJ78BE1NQnMrj8NdmD6wAAACI"]
[Thu Jul 30 09:23:11.912515 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.dev"] [unique_id "amsJ78BE1NQnMrj8NdmD6wAAACI"]
[Thu Jul 30 09:23:11.912694 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.dev"] [unique_id "amsJ78BE1NQnMrj8NdmD6wAAACI"]
[Thu Jul 30 09:23:11.931846 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.dist"] [unique_id "amsJ78BE1NQnMrj8NdmD7AAAACI"]
[Thu Jul 30 09:23:11.932007 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.dist"] [unique_id "amsJ78BE1NQnMrj8NdmD7AAAACI"]
[Thu Jul 30 09:23:11.932203 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.dist"] [unique_id "amsJ78BE1NQnMrj8NdmD7AAAACI"]
[Thu Jul 30 09:23:11.950905 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.local"] [unique_id "amsJ78BE1NQnMrj8NdmD7QAAACI"]
[Thu Jul 30 09:23:11.951032 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.local"] [unique_id "amsJ78BE1NQnMrj8NdmD7QAAACI"]
[Thu Jul 30 09:23:11.951200 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deploy/.env.local"] [unique_id "amsJ78BE1NQnMrj8NdmD7QAAACI"]
[Thu Jul 30 09:23:12.403792 2026] [authz_core:error] [pid 2538304:tid 2538304] [client 216.73.216.199:31305] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 09:23:12.715847 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/deploy/php.ini"] [unique_id "amsJ8MBE1NQnMrj8NdmEEgAAACI"]
[Thu Jul 30 09:23:12.716257 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deploy/php.ini"] [unique_id "amsJ8MBE1NQnMrj8NdmEEgAAACI"]
[Thu Jul 30 09:23:12.716494 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deploy/php.ini"] [unique_id "amsJ8MBE1NQnMrj8NdmEEgAAACI"]
[Thu Jul 30 09:23:12.798274 2026] [core:error] [pid 2540403:tid 2540403] [client 66.249.66.169:40250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:12.798305 2026] [core:error] [pid 2540403:tid 2540403] [client 66.249.66.169:40250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:12.801930 2026] [core:error] [pid 2549730:tid 2549730] [client 66.249.66.167:45603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:12.801956 2026] [core:error] [pid 2549730:tid 2549730] [client 66.249.66.167:45603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:12.849706 2026] [ssl:error] [pid 2541672:tid 2541672] (EAI 2)Name or service not known: [client 144.76.19.72:48582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:12.849740 2026] [ssl:error] [pid 2541672:tid 2541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:12.903099 2026] [ssl:error] [pid 2549729:tid 2549729] (EAI 2)Name or service not known: [client 144.76.19.72:48594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:12.903146 2026] [ssl:error] [pid 2549729:tid 2549729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:13.098492 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env"] [unique_id "amsJ8cBE1NQnMrj8NdmEJQAAACI"]
[Thu Jul 30 09:23:13.098697 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env"] [unique_id "amsJ8cBE1NQnMrj8NdmEJQAAACI"]
[Thu Jul 30 09:23:13.098907 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env"] [unique_id "amsJ8cBE1NQnMrj8NdmEJQAAACI"]
[Thu Jul 30 09:23:13.119011 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.bak"] [unique_id "amsJ8cBE1NQnMrj8NdmEJgAAACI"]
[Thu Jul 30 09:23:13.119159 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.bak"] [unique_id "amsJ8cBE1NQnMrj8NdmEJgAAACI"]
[Thu Jul 30 09:23:13.119340 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.bak"] [unique_id "amsJ8cBE1NQnMrj8NdmEJgAAACI"]
[Thu Jul 30 09:23:13.139349 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.dev"] [unique_id "amsJ8cBE1NQnMrj8NdmEJwAAACI"]
[Thu Jul 30 09:23:13.139511 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.dev"] [unique_id "amsJ8cBE1NQnMrj8NdmEJwAAACI"]
[Thu Jul 30 09:23:13.139709 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.dev"] [unique_id "amsJ8cBE1NQnMrj8NdmEJwAAACI"]
[Thu Jul 30 09:23:13.159376 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.dist"] [unique_id "amsJ8cBE1NQnMrj8NdmEKAAAACI"]
[Thu Jul 30 09:23:13.159541 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.dist"] [unique_id "amsJ8cBE1NQnMrj8NdmEKAAAACI"]
[Thu Jul 30 09:23:13.159724 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.dist"] [unique_id "amsJ8cBE1NQnMrj8NdmEKAAAACI"]
[Thu Jul 30 09:23:13.178955 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.local"] [unique_id "amsJ8cBE1NQnMrj8NdmEKQAAACI"]
[Thu Jul 30 09:23:13.179150 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.local"] [unique_id "amsJ8cBE1NQnMrj8NdmEKQAAACI"]
[Thu Jul 30 09:23:13.179334 2026] [security2:error] [pid 2518708:tid 2518708] [client 185.177.72.10:25580] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deployment/.env.local"] [unique_id "amsJ8cBE1NQnMrj8NdmEKQAAACI"]
[Thu Jul 30 09:23:13.607206 2026] [access_compat:error] [pid 2540403:tid 2540403] [client 74.176.227.102:62400] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/chris-cam
[Thu Jul 30 09:23:13.607310 2026] [access_compat:error] [pid 2540403:tid 2540403] [client 74.176.227.102:62400] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:23:13.905709 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/deployment/php.ini"] [unique_id "amsJ8S4Vh6fwOzWLVQob9gAAAAY"]
[Thu Jul 30 09:23:13.906058 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/deployment/php.ini"] [unique_id "amsJ8S4Vh6fwOzWLVQob9gAAAAY"]
[Thu Jul 30 09:23:13.906251 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/deployment/php.ini"] [unique_id "amsJ8S4Vh6fwOzWLVQob9gAAAAY"]
[Thu Jul 30 09:23:13.908271 2026] [authz_core:error] [pid 2518708:tid 2518708] [client 216.73.216.199:30241] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/interactivity-api/error_log
[Thu Jul 30 09:23:13.976853 2026] [security2:error] [pid 2540903:tid 2540903] [client 43.157.95.239:57620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amsJ8ZLf6bQG3Q2q_mFZ9gAAADQ"]
[Thu Jul 30 09:23:14.340454 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.bak"] [unique_id "amsJ8i4Vh6fwOzWLVQocCwAAAAY"]
[Thu Jul 30 09:23:14.340622 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.bak"] [unique_id "amsJ8i4Vh6fwOzWLVQocCwAAAAY"]
[Thu Jul 30 09:23:14.340789 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.bak"] [unique_id "amsJ8i4Vh6fwOzWLVQocCwAAAAY"]
[Thu Jul 30 09:23:14.360694 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.dev"] [unique_id "amsJ8i4Vh6fwOzWLVQocDAAAAAY"]
[Thu Jul 30 09:23:14.360917 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.dev"] [unique_id "amsJ8i4Vh6fwOzWLVQocDAAAAAY"]
[Thu Jul 30 09:23:14.361185 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.dev"] [unique_id "amsJ8i4Vh6fwOzWLVQocDAAAAAY"]
[Thu Jul 30 09:23:14.385212 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.dist"] [unique_id "amsJ8i4Vh6fwOzWLVQocDQAAAAY"]
[Thu Jul 30 09:23:14.385424 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.dist"] [unique_id "amsJ8i4Vh6fwOzWLVQocDQAAAAY"]
[Thu Jul 30 09:23:14.385622 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.dist"] [unique_id "amsJ8i4Vh6fwOzWLVQocDQAAAAY"]
[Thu Jul 30 09:23:14.404674 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.local"] [unique_id "amsJ8i4Vh6fwOzWLVQocDgAAAAY"]
[Thu Jul 30 09:23:14.404848 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.local"] [unique_id "amsJ8i4Vh6fwOzWLVQocDgAAAAY"]
[Thu Jul 30 09:23:14.405047 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.local"] [unique_id "amsJ8i4Vh6fwOzWLVQocDgAAAAY"]
[Thu Jul 30 09:23:14.428656 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.production"] [unique_id "amsJ8i4Vh6fwOzWLVQocDwAAAAY"]
[Thu Jul 30 09:23:14.428850 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.production"] [unique_id "amsJ8i4Vh6fwOzWLVQocDwAAAAY"]
[Thu Jul 30 09:23:14.429041 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.production"] [unique_id "amsJ8i4Vh6fwOzWLVQocDwAAAAY"]
[Thu Jul 30 09:23:14.448675 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.staging"] [unique_id "amsJ8i4Vh6fwOzWLVQocEAAAAAY"]
[Thu Jul 30 09:23:14.448854 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.staging"] [unique_id "amsJ8i4Vh6fwOzWLVQocEAAAAAY"]
[Thu Jul 30 09:23:14.449042 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.env.staging"] [unique_id "amsJ8i4Vh6fwOzWLVQocEAAAAAY"]
[Thu Jul 30 09:23:14.488094 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dev/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/.git/config"] [unique_id "amsJ8i4Vh6fwOzWLVQocEgAAAAY"]
[Thu Jul 30 09:23:14.488283 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/.git/config"] [unique_id "amsJ8i4Vh6fwOzWLVQocEgAAAAY"]
[Thu Jul 30 09:23:14.488463 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/.git/config"] [unique_id "amsJ8i4Vh6fwOzWLVQocEgAAAAY"]
[Thu Jul 30 09:23:14.566980 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amsJ8i4Vh6fwOzWLVQocFgAAAAY"]
[Thu Jul 30 09:23:14.567338 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amsJ8i4Vh6fwOzWLVQocFgAAAAY"]
[Thu Jul 30 09:23:14.567515 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amsJ8i4Vh6fwOzWLVQocFgAAAAY"]
[Thu Jul 30 09:23:14.608322 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dev/api-config.ini"] [unique_id "amsJ8i4Vh6fwOzWLVQocGAAAAAY"]
[Thu Jul 30 09:23:14.608677 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/api-config.ini"] [unique_id "amsJ8i4Vh6fwOzWLVQocGAAAAAY"]
[Thu Jul 30 09:23:14.608851 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/api-config.ini"] [unique_id "amsJ8i4Vh6fwOzWLVQocGAAAAAY"]
[Thu Jul 30 09:23:14.843127 2026] [security2:error] [pid 2548319:tid 2548319] [client 43.157.95.239:50084] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amsJ8tKcETKhuQwEqcjelAAAACo"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 09:23:15.263065 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dev/laravel.log"] [unique_id "amsJ8y4Vh6fwOzWLVQocOAAAAAY"]
[Thu Jul 30 09:23:15.263442 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/laravel.log"] [unique_id "amsJ8y4Vh6fwOzWLVQocOAAAAAY"]
[Thu Jul 30 09:23:15.263642 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/laravel.log"] [unique_id "amsJ8y4Vh6fwOzWLVQocOAAAAAY"]
[Thu Jul 30 09:23:15.366744 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dev/php.ini"] [unique_id "amsJ8y4Vh6fwOzWLVQocPQAAAAY"]
[Thu Jul 30 09:23:15.367122 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/php.ini"] [unique_id "amsJ8y4Vh6fwOzWLVQocPQAAAAY"]
[Thu Jul 30 09:23:15.367310 2026] [security2:error] [pid 2549729:tid 2549729] [client 185.177.72.10:25588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/php.ini"] [unique_id "amsJ8y4Vh6fwOzWLVQocPQAAAAY"]
[Thu Jul 30 09:23:15.591285 2026] [security2:error] [pid 2532797:tid 2532797] [client 185.191.171.8:33558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hatch-works.com"] [uri "/robots.txt"] [unique_id "amsJ88VSwDHKUN37iunqhwAAABA"]
[Thu Jul 30 09:23:15.670982 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/dev/web.config"] [unique_id "amsJ81U9OTCsd8OrsfB-JgAAACs"]
[Thu Jul 30 09:23:15.671208 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dev/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dev/web.config"] [unique_id "amsJ81U9OTCsd8OrsfB-JgAAACs"]
[Thu Jul 30 09:23:15.671338 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dev/web.config"] [unique_id "amsJ81U9OTCsd8OrsfB-JgAAACs"]
[Thu Jul 30 09:23:15.671510 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dev/web.config"] [unique_id "amsJ81U9OTCsd8OrsfB-JgAAACs"]
[Thu Jul 30 09:23:15.739704 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.local"] [unique_id "amsJ81U9OTCsd8OrsfB-KgAAACs"]
[Thu Jul 30 09:23:15.739853 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.local"] [unique_id "amsJ81U9OTCsd8OrsfB-KgAAACs"]
[Thu Jul 30 09:23:15.740028 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.local"] [unique_id "amsJ81U9OTCsd8OrsfB-KgAAACs"]
[Thu Jul 30 09:23:15.756396 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.production"] [unique_id "amsJ81U9OTCsd8OrsfB-KwAAACs"]
[Thu Jul 30 09:23:15.756550 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.production"] [unique_id "amsJ81U9OTCsd8OrsfB-KwAAACs"]
[Thu Jul 30 09:23:15.756724 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.production"] [unique_id "amsJ81U9OTCsd8OrsfB-KwAAACs"]
[Thu Jul 30 09:23:15.772894 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.staging"] [unique_id "amsJ81U9OTCsd8OrsfB-LAAAACs"]
[Thu Jul 30 09:23:15.773018 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.staging"] [unique_id "amsJ81U9OTCsd8OrsfB-LAAAACs"]
[Thu Jul 30 09:23:15.773188 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/develop/.env.staging"] [unique_id "amsJ81U9OTCsd8OrsfB-LAAAACs"]
[Thu Jul 30 09:23:15.839854 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/developer/.env"] [unique_id "amsJ81U9OTCsd8OrsfB-MAAAACs"]
[Thu Jul 30 09:23:15.840010 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/developer/.env"] [unique_id "amsJ81U9OTCsd8OrsfB-MAAAACs"]
[Thu Jul 30 09:23:15.840189 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/developer/.env"] [unique_id "amsJ81U9OTCsd8OrsfB-MAAAACs"]
[Thu Jul 30 09:23:15.856401 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.bak"] [unique_id "amsJ81U9OTCsd8OrsfB-MQAAACs"]
[Thu Jul 30 09:23:15.856518 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.bak"] [unique_id "amsJ81U9OTCsd8OrsfB-MQAAACs"]
[Thu Jul 30 09:23:15.856681 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.bak"] [unique_id "amsJ81U9OTCsd8OrsfB-MQAAACs"]
[Thu Jul 30 09:23:15.873194 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.dev"] [unique_id "amsJ81U9OTCsd8OrsfB-MgAAACs"]
[Thu Jul 30 09:23:15.873313 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.dev"] [unique_id "amsJ81U9OTCsd8OrsfB-MgAAACs"]
[Thu Jul 30 09:23:15.873462 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.dev"] [unique_id "amsJ81U9OTCsd8OrsfB-MgAAACs"]
[Thu Jul 30 09:23:15.889992 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.dist"] [unique_id "amsJ81U9OTCsd8OrsfB-MwAAACs"]
[Thu Jul 30 09:23:15.890161 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.dist"] [unique_id "amsJ81U9OTCsd8OrsfB-MwAAACs"]
[Thu Jul 30 09:23:15.890324 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.dist"] [unique_id "amsJ81U9OTCsd8OrsfB-MwAAACs"]
[Thu Jul 30 09:23:15.907824 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.local"] [unique_id "amsJ81U9OTCsd8OrsfB-NAAAACs"]
[Thu Jul 30 09:23:15.907997 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.local"] [unique_id "amsJ81U9OTCsd8OrsfB-NAAAACs"]
[Thu Jul 30 09:23:15.908183 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/developer/.env.local"] [unique_id "amsJ81U9OTCsd8OrsfB-NAAAACs"]
[Thu Jul 30 09:23:15.959823 2026] [ssl:error] [pid 2549729:tid 2549729] (EAI 2)Name or service not known: [client 144.76.19.72:48600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:15.959852 2026] [ssl:error] [pid 2549729:tid 2549729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:16.011182 2026] [ssl:error] [pid 2548003:tid 2548003] (EAI 2)Name or service not known: [client 144.76.19.72:48604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:16.011210 2026] [ssl:error] [pid 2548003:tid 2548003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:16.285751 2026] [security2:error] [pid 2551870:tid 2551870] [client 85.208.96.205:27542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hatch-works.com"] [uri "/author/wpadmin/"] [unique_id "amsJ9FNTy9SNrPmUaSfBBQAAAA8"]
[Thu Jul 30 09:23:16.546400 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/developer/php.ini"] [unique_id "amsJ9FU9OTCsd8OrsfB-VwAAACs"]
[Thu Jul 30 09:23:16.546861 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/developer/php.ini"] [unique_id "amsJ9FU9OTCsd8OrsfB-VwAAACs"]
[Thu Jul 30 09:23:16.547131 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/developer/php.ini"] [unique_id "amsJ9FU9OTCsd8OrsfB-VwAAACs"]
[Thu Jul 30 09:23:16.888004 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/developerslv/.env"] [unique_id "amsJ9FU9OTCsd8OrsfB-agAAACs"]
[Thu Jul 30 09:23:16.888256 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/developerslv/.env"] [unique_id "amsJ9FU9OTCsd8OrsfB-agAAACs"]
[Thu Jul 30 09:23:16.888507 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/developerslv/.env"] [unique_id "amsJ9FU9OTCsd8OrsfB-agAAACs"]
[Thu Jul 30 09:23:16.905573 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/development/.env.bak"] [unique_id "amsJ9FU9OTCsd8OrsfB-awAAACs"]
[Thu Jul 30 09:23:16.905837 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/development/.env.bak"] [unique_id "amsJ9FU9OTCsd8OrsfB-awAAACs"]
[Thu Jul 30 09:23:16.906091 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/development/.env.bak"] [unique_id "amsJ9FU9OTCsd8OrsfB-awAAACs"]
[Thu Jul 30 09:23:16.922570 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/development/.env.dev"] [unique_id "amsJ9FU9OTCsd8OrsfB-bAAAACs"]
[Thu Jul 30 09:23:16.922736 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/development/.env.dev"] [unique_id "amsJ9FU9OTCsd8OrsfB-bAAAACs"]
[Thu Jul 30 09:23:16.922950 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/development/.env.dev"] [unique_id "amsJ9FU9OTCsd8OrsfB-bAAAACs"]
[Thu Jul 30 09:23:16.940371 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/development/.env.dist"] [unique_id "amsJ9FU9OTCsd8OrsfB-bQAAACs"]
[Thu Jul 30 09:23:16.940629 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/development/.env.dist"] [unique_id "amsJ9FU9OTCsd8OrsfB-bQAAACs"]
[Thu Jul 30 09:23:16.940898 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/development/.env.dist"] [unique_id "amsJ9FU9OTCsd8OrsfB-bQAAACs"]
[Thu Jul 30 09:23:16.957844 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/development/.env.local"] [unique_id "amsJ9FU9OTCsd8OrsfB-bgAAACs"]
[Thu Jul 30 09:23:16.958046 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/development/.env.local"] [unique_id "amsJ9FU9OTCsd8OrsfB-bgAAACs"]
[Thu Jul 30 09:23:16.958302 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/development/.env.local"] [unique_id "amsJ9FU9OTCsd8OrsfB-bgAAACs"]
[Thu Jul 30 09:23:16.975298 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/development/.env.production"] [unique_id "amsJ9FU9OTCsd8OrsfB-bwAAACs"]
[Thu Jul 30 09:23:16.975556 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/development/.env.production"] [unique_id "amsJ9FU9OTCsd8OrsfB-bwAAACs"]
[Thu Jul 30 09:23:16.975818 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/development/.env.production"] [unique_id "amsJ9FU9OTCsd8OrsfB-bwAAACs"]
[Thu Jul 30 09:23:16.992559 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/development/.env.staging"] [unique_id "amsJ9FU9OTCsd8OrsfB-cAAAACs"]
[Thu Jul 30 09:23:16.992811 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/development/.env.staging"] [unique_id "amsJ9FU9OTCsd8OrsfB-cAAAACs"]
[Thu Jul 30 09:23:16.993048 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.177.72.10:31540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/development/.env.staging"] [unique_id "amsJ9FU9OTCsd8OrsfB-cAAAACs"]
[Thu Jul 30 09:23:17.278516 2026] [authz_core:error] [pid 2548315:tid 2548315] [client 144.172.105.5:36832] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/Zend/Json/error_log
[Thu Jul 30 09:23:17.324639 2026] [security2:error] [pid 2532797:tid 2532797] [client 85.208.96.208:41728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/rhys-whitfield-interview"] [unique_id "amsJ9cVSwDHKUN37iunqiQAAABA"]
[Thu Jul 30 09:23:17.666232 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/development/php.ini"] [unique_id "amsJ9VNTy9SNrPmUaSfBGwAAAA8"]
[Thu Jul 30 09:23:17.666527 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/development/php.ini"] [unique_id "amsJ9VNTy9SNrPmUaSfBGwAAAA8"]
[Thu Jul 30 09:23:17.666715 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/development/php.ini"] [unique_id "amsJ9VNTy9SNrPmUaSfBGwAAAA8"]
[Thu Jul 30 09:23:18.038343 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/directories/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBLwAAAA8"]
[Thu Jul 30 09:23:18.038513 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/directories/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBLwAAAA8"]
[Thu Jul 30 09:23:18.038682 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/directories/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBLwAAAA8"]
[Thu Jul 30 09:23:18.055967 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dist/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMAAAAA8"]
[Thu Jul 30 09:23:18.056101 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dist/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMAAAAA8"]
[Thu Jul 30 09:23:18.056253 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dist/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMAAAAA8"]
[Thu Jul 30 09:23:18.092420 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/django-blog/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMgAAAA8"]
[Thu Jul 30 09:23:18.092537 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/django-blog/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMgAAAA8"]
[Thu Jul 30 09:23:18.092695 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/django-blog/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMgAAAA8"]
[Thu Jul 30 09:23:18.110092 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/django/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMwAAAA8"]
[Thu Jul 30 09:23:18.110220 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/django/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMwAAAA8"]
[Thu Jul 30 09:23:18.110367 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/django/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBMwAAAA8"]
[Thu Jul 30 09:23:18.259479 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/django_project_path/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBOwAAAA8"]
[Thu Jul 30 09:23:18.259654 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/django_project_path/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBOwAAAA8"]
[Thu Jul 30 09:23:18.259821 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/django_project_path/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBOwAAAA8"]
[Thu Jul 30 09:23:18.260200 2026] [core:error] [pid 2549729:tid 2549729] [client 66.249.64.170:52385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:18.260228 2026] [core:error] [pid 2549729:tid 2549729] [client 66.249.64.170:52385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:23:18.277640 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/doc/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBPAAAAA8"]
[Thu Jul 30 09:23:18.277796 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/doc/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBPAAAAA8"]
[Thu Jul 30 09:23:18.277958 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/doc/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBPAAAAA8"]
[Thu Jul 30 09:23:18.331332 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker-compose/platform/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBPwAAAA8"]
[Thu Jul 30 09:23:18.331488 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker-compose/platform/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBPwAAAA8"]
[Thu Jul 30 09:23:18.331664 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker-compose/platform/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBPwAAAA8"]
[Thu Jul 30 09:23:18.348710 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker-elk/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQAAAAA8"]
[Thu Jul 30 09:23:18.348844 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker-elk/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQAAAAA8"]
[Thu Jul 30 09:23:18.349000 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker-elk/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQAAAAA8"]
[Thu Jul 30 09:23:18.366351 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker-network-healthcheck/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQQAAAA8"]
[Thu Jul 30 09:23:18.366498 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker-network-healthcheck/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQQAAAA8"]
[Thu Jul 30 09:23:18.366668 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker-network-healthcheck/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQQAAAA8"]
[Thu Jul 30 09:23:18.384680 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQgAAAA8"]
[Thu Jul 30 09:23:18.384836 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQgAAAA8"]
[Thu Jul 30 09:23:18.385002 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBQgAAAA8"]
[Thu Jul 30 09:23:18.493708 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/app/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSAAAAA8"]
[Thu Jul 30 09:23:18.493879 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/app/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSAAAAA8"]
[Thu Jul 30 09:23:18.494053 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/app/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSAAAAA8"]
[Thu Jul 30 09:23:18.511343 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/compose/withMongo/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSQAAAA8"]
[Thu Jul 30 09:23:18.511503 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/compose/withMongo/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSQAAAA8"]
[Thu Jul 30 09:23:18.511679 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/compose/withMongo/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSQAAAA8"]
[Thu Jul 30 09:23:18.529337 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSgAAAA8"]
[Thu Jul 30 09:23:18.529503 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSgAAAA8"]
[Thu Jul 30 09:23:18.529691 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSgAAAA8"]
[Thu Jul 30 09:23:18.546738 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/database/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSwAAAA8"]
[Thu Jul 30 09:23:18.546856 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/database/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSwAAAA8"]
[Thu Jul 30 09:23:18.547006 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/database/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBSwAAAA8"]
[Thu Jul 30 09:23:18.564843 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/db/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTAAAAA8"]
[Thu Jul 30 09:23:18.564956 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/db/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTAAAAA8"]
[Thu Jul 30 09:23:18.565113 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/db/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTAAAAA8"]
[Thu Jul 30 09:23:18.582102 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/examples/compose/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTQAAAA8"]
[Thu Jul 30 09:23:18.582236 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/examples/compose/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTQAAAA8"]
[Thu Jul 30 09:23:18.582381 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/examples/compose/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTQAAAA8"]
[Thu Jul 30 09:23:18.600402 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/postgres/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTgAAAA8"]
[Thu Jul 30 09:23:18.600515 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/postgres/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTgAAAA8"]
[Thu Jul 30 09:23:18.600670 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/postgres/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTgAAAA8"]
[Thu Jul 30 09:23:18.618095 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docker/webdav/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTwAAAA8"]
[Thu Jul 30 09:23:18.618221 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docker/webdav/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTwAAAA8"]
[Thu Jul 30 09:23:18.618364 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docker/webdav/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBTwAAAA8"]
[Thu Jul 30 09:23:18.673595 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /docs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docs/.git/config"] [unique_id "amsJ9lNTy9SNrPmUaSfBUgAAAA8"]
[Thu Jul 30 09:23:18.673718 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docs/.git/config"] [unique_id "amsJ9lNTy9SNrPmUaSfBUgAAAA8"]
[Thu Jul 30 09:23:18.673862 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docs/.git/config"] [unique_id "amsJ9lNTy9SNrPmUaSfBUgAAAA8"]
[Thu Jul 30 09:23:18.718721 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 144.172.105.5:36850] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/antlr/error_log
[Thu Jul 30 09:23:18.762421 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/docs/api-config.ini"] [unique_id "amsJ9lNTy9SNrPmUaSfBVwAAAA8"]
[Thu Jul 30 09:23:18.762704 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docs/api-config.ini"] [unique_id "amsJ9lNTy9SNrPmUaSfBVwAAAA8"]
[Thu Jul 30 09:23:18.762853 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docs/api-config.ini"] [unique_id "amsJ9lNTy9SNrPmUaSfBVwAAAA8"]
[Thu Jul 30 09:23:18.815792 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/docs/laravel.log"] [unique_id "amsJ9lNTy9SNrPmUaSfBWgAAAA8"]
[Thu Jul 30 09:23:18.816090 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docs/laravel.log"] [unique_id "amsJ9lNTy9SNrPmUaSfBWgAAAA8"]
[Thu Jul 30 09:23:18.816237 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docs/laravel.log"] [unique_id "amsJ9lNTy9SNrPmUaSfBWgAAAA8"]
[Thu Jul 30 09:23:18.870721 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/docs/web.config"] [unique_id "amsJ9lNTy9SNrPmUaSfBXQAAAA8"]
[Thu Jul 30 09:23:18.870914 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /docs/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/docs/web.config"] [unique_id "amsJ9lNTy9SNrPmUaSfBXQAAAA8"]
[Thu Jul 30 09:23:18.871015 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/docs/web.config"] [unique_id "amsJ9lNTy9SNrPmUaSfBXQAAAA8"]
[Thu Jul 30 09:23:18.871176 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/docs/web.config"] [unique_id "amsJ9lNTy9SNrPmUaSfBXQAAAA8"]
[Thu Jul 30 09:23:18.888383 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dodoswap-client/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBXgAAAA8"]
[Thu Jul 30 09:23:18.888524 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dodoswap-client/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBXgAAAA8"]
[Thu Jul 30 09:23:18.888681 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dodoswap-client/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBXgAAAA8"]
[Thu Jul 30 09:23:18.906350 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/dotfiles/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBXwAAAA8"]
[Thu Jul 30 09:23:18.906516 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/dotfiles/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBXwAAAA8"]
[Thu Jul 30 09:23:18.906701 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/dotfiles/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBXwAAAA8"]
[Thu Jul 30 09:23:18.925013 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/downloads/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBYAAAAA8"]
[Thu Jul 30 09:23:18.925176 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/downloads/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBYAAAAA8"]
[Thu Jul 30 09:23:18.925336 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/downloads/.env"] [unique_id "amsJ9lNTy9SNrPmUaSfBYAAAAA8"]
[Thu Jul 30 09:23:18.960678 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /downloads/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/downloads/.git/config"] [unique_id "amsJ9lNTy9SNrPmUaSfBYgAAAA8"]
[Thu Jul 30 09:23:18.960794 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/downloads/.git/config"] [unique_id "amsJ9lNTy9SNrPmUaSfBYgAAAA8"]
[Thu Jul 30 09:23:18.960942 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/downloads/.git/config"] [unique_id "amsJ9lNTy9SNrPmUaSfBYgAAAA8"]
[Thu Jul 30 09:23:19.032235 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amsJ91NTy9SNrPmUaSfBZgAAAA8"]
[Thu Jul 30 09:23:19.032533 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amsJ91NTy9SNrPmUaSfBZgAAAA8"]
[Thu Jul 30 09:23:19.032702 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amsJ91NTy9SNrPmUaSfBZgAAAA8"]
[Thu Jul 30 09:23:19.050538 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/downloads/api-config.ini"] [unique_id "amsJ91NTy9SNrPmUaSfBZwAAAA8"]
[Thu Jul 30 09:23:19.051135 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/downloads/api-config.ini"] [unique_id "amsJ91NTy9SNrPmUaSfBZwAAAA8"]
[Thu Jul 30 09:23:19.051386 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/downloads/api-config.ini"] [unique_id "amsJ91NTy9SNrPmUaSfBZwAAAA8"]
[Thu Jul 30 09:23:19.062841 2026] [ssl:error] [pid 2549729:tid 2549729] (EAI 2)Name or service not known: [client 144.76.19.72:48606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:19.062885 2026] [ssl:error] [pid 2549729:tid 2549729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:19.104703 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/downloads/laravel.log"] [unique_id "amsJ91NTy9SNrPmUaSfBagAAAA8"]
[Thu Jul 30 09:23:19.104971 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/downloads/laravel.log"] [unique_id "amsJ91NTy9SNrPmUaSfBagAAAA8"]
[Thu Jul 30 09:23:19.105148 2026] [security2:error] [pid 2551870:tid 2551870] [client 185.177.72.10:31554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/downloads/laravel.log"] [unique_id "amsJ91NTy9SNrPmUaSfBagAAAA8"]
[Thu Jul 30 09:23:19.114340 2026] [ssl:error] [pid 2549677:tid 2549677] (EAI 2)Name or service not known: [client 144.76.19.72:48618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:19.114360 2026] [ssl:error] [pid 2549677:tid 2549677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:19.173051 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/downloads/web.config"] [unique_id "amsJ9yhqdQRND-FRJFJn_AAAACU"]
[Thu Jul 30 09:23:19.173385 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /downloads/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/downloads/web.config"] [unique_id "amsJ9yhqdQRND-FRJFJn_AAAACU"]
[Thu Jul 30 09:23:19.173599 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/downloads/web.config"] [unique_id "amsJ9yhqdQRND-FRJFJn_AAAACU"]
[Thu Jul 30 09:23:19.173825 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/downloads/web.config"] [unique_id "amsJ9yhqdQRND-FRJFJn_AAAACU"]
[Thu Jul 30 09:23:19.207494 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/e2e/.env"] [unique_id "amsJ9yhqdQRND-FRJFJn_gAAACU"]
[Thu Jul 30 09:23:19.207726 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/e2e/.env"] [unique_id "amsJ9yhqdQRND-FRJFJn_gAAACU"]
[Thu Jul 30 09:23:19.207962 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/e2e/.env"] [unique_id "amsJ9yhqdQRND-FRJFJn_gAAACU"]
[Thu Jul 30 09:23:19.298570 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/env.backup"] [unique_id "amsJ9yhqdQRND-FRJFJoAwAAACU"]
[Thu Jul 30 09:23:19.298885 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/env.backup"] [unique_id "amsJ9yhqdQRND-FRJFJoAwAAACU"]
[Thu Jul 30 09:23:19.299045 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/env.backup"] [unique_id "amsJ9yhqdQRND-FRJFJoAwAAACU"]
[Thu Jul 30 09:23:19.316357 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/env.bak"] [unique_id "amsJ9yhqdQRND-FRJFJoBAAAACU"]
[Thu Jul 30 09:23:19.316710 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/env.bak"] [unique_id "amsJ9yhqdQRND-FRJFJoBAAAACU"]
[Thu Jul 30 09:23:19.316891 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/env.bak"] [unique_id "amsJ9yhqdQRND-FRJFJoBAAAACU"]
[Thu Jul 30 09:23:19.467599 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDAAAACU"]
[Thu Jul 30 09:23:19.467789 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDAAAACU"]
[Thu Jul 30 09:23:19.467970 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDAAAACU"]
[Thu Jul 30 09:23:19.484729 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/env/dockers/php-apache/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDQAAACU"]
[Thu Jul 30 09:23:19.484903 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/env/dockers/php-apache/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDQAAACU"]
[Thu Jul 30 09:23:19.485091 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/env/dockers/php-apache/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDQAAACU"]
[Thu Jul 30 09:23:19.501760 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/env/example/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDgAAACU"]
[Thu Jul 30 09:23:19.501941 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/env/example/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDgAAACU"]
[Thu Jul 30 09:23:19.502128 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/env/example/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoDgAAACU"]
[Thu Jul 30 09:23:19.537786 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/env/template/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoEAAAACU"]
[Thu Jul 30 09:23:19.537938 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/env/template/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoEAAAACU"]
[Thu Jul 30 09:23:19.538116 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/env/template/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoEAAAACU"]
[Thu Jul 30 09:23:19.590312 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/environments/local/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoEwAAACU"]
[Thu Jul 30 09:23:19.590486 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/environments/local/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoEwAAACU"]
[Thu Jul 30 09:23:19.590678 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/environments/local/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoEwAAACU"]
[Thu Jul 30 09:23:19.626711 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/environments/production/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoFQAAACU"]
[Thu Jul 30 09:23:19.626873 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/environments/production/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoFQAAACU"]
[Thu Jul 30 09:23:19.627032 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/environments/production/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoFQAAACU"]
[Thu Jul 30 09:23:19.661487 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/erp/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoFwAAACU"]
[Thu Jul 30 09:23:19.661682 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/erp/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoFwAAACU"]
[Thu Jul 30 09:23:19.661856 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/erp/.env"] [unique_id "amsJ9yhqdQRND-FRJFJoFwAAACU"]
[Thu Jul 30 09:23:19.682141 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.bak"] [unique_id "amsJ9yhqdQRND-FRJFJoGAAAACU"]
[Thu Jul 30 09:23:19.682319 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.bak"] [unique_id "amsJ9yhqdQRND-FRJFJoGAAAACU"]
[Thu Jul 30 09:23:19.682517 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.bak"] [unique_id "amsJ9yhqdQRND-FRJFJoGAAAACU"]
[Thu Jul 30 09:23:19.699841 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.dev"] [unique_id "amsJ9yhqdQRND-FRJFJoGQAAACU"]
[Thu Jul 30 09:23:19.700018 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.dev"] [unique_id "amsJ9yhqdQRND-FRJFJoGQAAACU"]
[Thu Jul 30 09:23:19.700203 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.dev"] [unique_id "amsJ9yhqdQRND-FRJFJoGQAAACU"]
[Thu Jul 30 09:23:19.716984 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.dist"] [unique_id "amsJ9yhqdQRND-FRJFJoGgAAACU"]
[Thu Jul 30 09:23:19.717151 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.dist"] [unique_id "amsJ9yhqdQRND-FRJFJoGgAAACU"]
[Thu Jul 30 09:23:19.717317 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.dist"] [unique_id "amsJ9yhqdQRND-FRJFJoGgAAACU"]
[Thu Jul 30 09:23:19.734319 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.local"] [unique_id "amsJ9yhqdQRND-FRJFJoGwAAACU"]
[Thu Jul 30 09:23:19.734485 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.local"] [unique_id "amsJ9yhqdQRND-FRJFJoGwAAACU"]
[Thu Jul 30 09:23:19.734653 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/erp/.env.local"] [unique_id "amsJ9yhqdQRND-FRJFJoGwAAACU"]
[Thu Jul 30 09:23:20.347221 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/erp/php.ini"] [unique_id "amsJ-ChqdQRND-FRJFJoPgAAACU"]
[Thu Jul 30 09:23:20.347496 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/erp/php.ini"] [unique_id "amsJ-ChqdQRND-FRJFJoPgAAACU"]
[Thu Jul 30 09:23:20.347657 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/erp/php.ini"] [unique_id "amsJ-ChqdQRND-FRJFJoPgAAACU"]
[Thu Jul 30 09:23:20.698470 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/error/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoUgAAACU"]
[Thu Jul 30 09:23:20.698669 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/error/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoUgAAACU"]
[Thu Jul 30 09:23:20.698868 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/error/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoUgAAACU"]
[Thu Jul 30 09:23:20.734695 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/errors/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVAAAACU"]
[Thu Jul 30 09:23:20.734873 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/errors/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVAAAACU"]
[Thu Jul 30 09:23:20.735056 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/errors/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVAAAACU"]
[Thu Jul 30 09:23:20.751893 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/example/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVQAAACU"]
[Thu Jul 30 09:23:20.752104 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/example/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVQAAACU"]
[Thu Jul 30 09:23:20.752297 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/example/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVQAAACU"]
[Thu Jul 30 09:23:20.769997 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVgAAACU"]
[Thu Jul 30 09:23:20.770194 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVgAAACU"]
[Thu Jul 30 09:23:20.770383 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVgAAACU"]
[Thu Jul 30 09:23:20.787086 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVwAAACU"]
[Thu Jul 30 09:23:20.787277 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVwAAACU"]
[Thu Jul 30 09:23:20.787475 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoVwAAACU"]
[Thu Jul 30 09:23:20.804003 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWAAAACU"]
[Thu Jul 30 09:23:20.804200 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWAAAACU"]
[Thu Jul 30 09:23:20.804419 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWAAAACU"]
[Thu Jul 30 09:23:20.821940 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWQAAACU"]
[Thu Jul 30 09:23:20.822139 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWQAAACU"]
[Thu Jul 30 09:23:20.822332 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWQAAACU"]
[Thu Jul 30 09:23:20.839841 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/01-simple-model/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWgAAACU"]
[Thu Jul 30 09:23:20.840015 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/01-simple-model/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWgAAACU"]
[Thu Jul 30 09:23:20.840212 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/01-simple-model/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWgAAACU"]
[Thu Jul 30 09:23:20.856495 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/02-complex-example/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWwAAACU"]
[Thu Jul 30 09:23:20.856653 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/02-complex-example/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWwAAACU"]
[Thu Jul 30 09:23:20.856812 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/02-complex-example/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoWwAAACU"]
[Thu Jul 30 09:23:20.873122 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXAAAACU"]
[Thu Jul 30 09:23:20.873263 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXAAAACU"]
[Thu Jul 30 09:23:20.873429 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXAAAACU"]
[Thu Jul 30 09:23:20.890846 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXQAAACU"]
[Thu Jul 30 09:23:20.891027 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXQAAACU"]
[Thu Jul 30 09:23:20.891230 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXQAAACU"]
[Thu Jul 30 09:23:20.907963 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/05-migrations/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXgAAACU"]
[Thu Jul 30 09:23:20.908142 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/05-migrations/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXgAAACU"]
[Thu Jul 30 09:23:20.908309 2026] [security2:error] [pid 2540403:tid 2540403] [client 185.177.72.10:31558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/05-migrations/.env"] [unique_id "amsJ-ChqdQRND-FRJFJoXgAAACU"]
[Thu Jul 30 09:23:20.943349 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/06-base-service/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXmgAAAAQ"]
[Thu Jul 30 09:23:20.943501 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/06-base-service/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXmgAAAAQ"]
[Thu Jul 30 09:23:20.943689 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/06-base-service/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXmgAAAAQ"]
[Thu Jul 30 09:23:20.946989 2026] [core:error] [pid 2540903:tid 2540903] (13)Permission denied: [client 216.73.216.199:8552] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/objects_partial
[Thu Jul 30 09:23:20.961372 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/07-feature-flags/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXmwAAAAQ"]
[Thu Jul 30 09:23:20.961522 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/07-feature-flags/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXmwAAAAQ"]
[Thu Jul 30 09:23:20.961700 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/07-feature-flags/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXmwAAAAQ"]
[Thu Jul 30 09:23:20.980313 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/08-performance/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXnAAAAAQ"]
[Thu Jul 30 09:23:20.980495 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/08-performance/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXnAAAAAQ"]
[Thu Jul 30 09:23:20.980683 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/08-performance/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXnAAAAAQ"]
[Thu Jul 30 09:23:20.998947 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/09-production/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXnQAAAAQ"]
[Thu Jul 30 09:23:20.999138 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/09-production/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXnQAAAAQ"]
[Thu Jul 30 09:23:20.999319 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/09-production/.env"] [unique_id "amsJ-LLEvf-80yRR0HGXnQAAAAQ"]
[Thu Jul 30 09:23:21.017312 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/10-subscriptions/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXngAAAAQ"]
[Thu Jul 30 09:23:21.017496 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/10-subscriptions/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXngAAAAQ"]
[Thu Jul 30 09:23:21.017699 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/10-subscriptions/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXngAAAAQ"]
[Thu Jul 30 09:23:21.037829 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/11-transactions/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXnwAAAAQ"]
[Thu Jul 30 09:23:21.037985 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/11-transactions/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXnwAAAAQ"]
[Thu Jul 30 09:23:21.038170 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/11-transactions/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXnwAAAAQ"]
[Thu Jul 30 09:23:21.059788 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXoAAAAAQ"]
[Thu Jul 30 09:23:21.059965 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXoAAAAAQ"]
[Thu Jul 30 09:23:21.060153 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXoAAAAAQ"]
[Thu Jul 30 09:23:21.078089 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXoQAAAAQ"]
[Thu Jul 30 09:23:21.078249 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXoQAAAAQ"]
[Thu Jul 30 09:23:21.078440 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXoQAAAAQ"]
[Thu Jul 30 09:23:21.097098 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/sdl-first/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXogAAAAQ"]
[Thu Jul 30 09:23:21.097294 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/sdl-first/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXogAAAAQ"]
[Thu Jul 30 09:23:21.097479 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/sdl-first/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXogAAAAQ"]
[Thu Jul 30 09:23:21.116179 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXowAAAAQ"]
[Thu Jul 30 09:23:21.116360 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXowAAAAQ"]
[Thu Jul 30 09:23:21.116541 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXowAAAAQ"]
[Thu Jul 30 09:23:21.135838 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpAAAAAQ"]
[Thu Jul 30 09:23:21.136001 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpAAAAAQ"]
[Thu Jul 30 09:23:21.136201 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpAAAAAQ"]
[Thu Jul 30 09:23:21.155049 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/web/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpQAAAAQ"]
[Thu Jul 30 09:23:21.155221 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/web/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpQAAAAQ"]
[Thu Jul 30 09:23:21.155398 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/web/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpQAAAAQ"]
[Thu Jul 30 09:23:21.173753 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpgAAAAQ"]
[Thu Jul 30 09:23:21.173940 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpgAAAAQ"]
[Thu Jul 30 09:23:21.174129 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpgAAAAQ"]
[Thu Jul 30 09:23:21.192245 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/with-dotenv/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpwAAAAQ"]
[Thu Jul 30 09:23:21.192418 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/with-dotenv/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpwAAAAQ"]
[Thu Jul 30 09:23:21.192615 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/with-dotenv/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXpwAAAAQ"]
[Thu Jul 30 09:23:21.211684 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqAAAAAQ"]
[Thu Jul 30 09:23:21.211867 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqAAAAAQ"]
[Thu Jul 30 09:23:21.212052 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqAAAAAQ"]
[Thu Jul 30 09:23:21.230855 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqQAAAAQ"]
[Thu Jul 30 09:23:21.231020 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqQAAAAQ"]
[Thu Jul 30 09:23:21.231213 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqQAAAAQ"]
[Thu Jul 30 09:23:21.246650 2026] [core:error] [pid 2540903:tid 2540903] (13)Permission denied: [client 216.73.216.199:8552] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dio/objects_partial
[Thu Jul 30 09:23:21.250220 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/with-relay-modern/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqgAAAAQ"]
[Thu Jul 30 09:23:21.250368 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/with-relay-modern/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqgAAAAQ"]
[Thu Jul 30 09:23:21.250530 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/with-relay-modern/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqgAAAAQ"]
[Thu Jul 30 09:23:21.269441 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqwAAAAQ"]
[Thu Jul 30 09:23:21.269641 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqwAAAAQ"]
[Thu Jul 30 09:23:21.269825 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXqwAAAAQ"]
[Thu Jul 30 09:23:21.288766 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/export/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrAAAAAQ"]
[Thu Jul 30 09:23:21.288952 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/export/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrAAAAAQ"]
[Thu Jul 30 09:23:21.289143 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/export/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrAAAAAQ"]
[Thu Jul 30 09:23:21.309919 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fastlane/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrQAAAAQ"]
[Thu Jul 30 09:23:21.310097 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fastlane/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrQAAAAQ"]
[Thu Jul 30 09:23:21.310288 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fastlane/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrQAAAAQ"]
[Thu Jul 30 09:23:21.332774 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/favicons/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrgAAAAQ"]
[Thu Jul 30 09:23:21.332917 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/favicons/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrgAAAAQ"]
[Thu Jul 30 09:23:21.333093 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/favicons/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrgAAAAQ"]
[Thu Jul 30 09:23:21.351872 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/favs/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrwAAAAQ"]
[Thu Jul 30 09:23:21.352037 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/favs/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrwAAAAQ"]
[Thu Jul 30 09:23:21.352226 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/favs/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXrwAAAAQ"]
[Thu Jul 30 09:23:21.370227 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/feature/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXsAAAAAQ"]
[Thu Jul 30 09:23:21.370370 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/feature/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXsAAAAAQ"]
[Thu Jul 30 09:23:21.370523 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/feature/.env"] [unique_id "amsJ-bLEvf-80yRR0HGXsAAAAAQ"]
[Thu Jul 30 09:23:21.388406 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.bak"] [unique_id "amsJ-bLEvf-80yRR0HGXsQAAAAQ"]
[Thu Jul 30 09:23:21.388547 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.bak"] [unique_id "amsJ-bLEvf-80yRR0HGXsQAAAAQ"]
[Thu Jul 30 09:23:21.388724 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.bak"] [unique_id "amsJ-bLEvf-80yRR0HGXsQAAAAQ"]
[Thu Jul 30 09:23:21.407124 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.dev"] [unique_id "amsJ-bLEvf-80yRR0HGXsgAAAAQ"]
[Thu Jul 30 09:23:21.407263 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.dev"] [unique_id "amsJ-bLEvf-80yRR0HGXsgAAAAQ"]
[Thu Jul 30 09:23:21.407421 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.dev"] [unique_id "amsJ-bLEvf-80yRR0HGXsgAAAAQ"]
[Thu Jul 30 09:23:21.425634 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.dist"] [unique_id "amsJ-bLEvf-80yRR0HGXswAAAAQ"]
[Thu Jul 30 09:23:21.425761 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.dist"] [unique_id "amsJ-bLEvf-80yRR0HGXswAAAAQ"]
[Thu Jul 30 09:23:21.425918 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.dist"] [unique_id "amsJ-bLEvf-80yRR0HGXswAAAAQ"]
[Thu Jul 30 09:23:21.444349 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.local"] [unique_id "amsJ-bLEvf-80yRR0HGXtAAAAAQ"]
[Thu Jul 30 09:23:21.444502 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.local"] [unique_id "amsJ-bLEvf-80yRR0HGXtAAAAAQ"]
[Thu Jul 30 09:23:21.444671 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/feature/.env.local"] [unique_id "amsJ-bLEvf-80yRR0HGXtAAAAAQ"]
[Thu Jul 30 09:23:21.547658 2026] [core:error] [pid 2540903:tid 2540903] (13)Permission denied: [client 216.73.216.199:8552] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dentry/objects
[Thu Jul 30 09:23:22.115963 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/feature/php.ini"] [unique_id "amsJ-rLEvf-80yRR0HGX1wAAAAQ"]
[Thu Jul 30 09:23:22.116332 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/feature/php.ini"] [unique_id "amsJ-rLEvf-80yRR0HGX1wAAAAQ"]
[Thu Jul 30 09:23:22.116507 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/feature/php.ini"] [unique_id "amsJ-rLEvf-80yRR0HGX1wAAAAQ"]
[Thu Jul 30 09:23:22.204687 2026] [ssl:error] [pid 2548241:tid 2548241] (EAI 2)Name or service not known: [client 144.76.19.72:30646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:22.204716 2026] [ssl:error] [pid 2548241:tid 2548241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:22.260529 2026] [ssl:error] [pid 2523136:tid 2523136] (EAI 2)Name or service not known: [client 144.76.19.72:30662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:22.260561 2026] [ssl:error] [pid 2523136:tid 2523136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:22.491935 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fedex/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX6gAAAAQ"]
[Thu Jul 30 09:23:22.492170 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fedex/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX6gAAAAQ"]
[Thu Jul 30 09:23:22.492398 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fedex/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX6gAAAAQ"]
[Thu Jul 30 09:23:22.532284 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fhir-api/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX7AAAAAQ"]
[Thu Jul 30 09:23:22.532485 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fhir-api/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX7AAAAAQ"]
[Thu Jul 30 09:23:22.532761 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fhir-api/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX7AAAAAQ"]
[Thu Jul 30 09:23:22.595445 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/files/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX7wAAAAQ"]
[Thu Jul 30 09:23:22.595742 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/files/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX7wAAAAQ"]
[Thu Jul 30 09:23:22.596031 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/files/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX7wAAAAQ"]
[Thu Jul 30 09:23:22.614970 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fileserver/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8AAAAAQ"]
[Thu Jul 30 09:23:22.615223 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fileserver/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8AAAAAQ"]
[Thu Jul 30 09:23:22.615475 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fileserver/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8AAAAAQ"]
[Thu Jul 30 09:23:22.633963 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/films/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8QAAAAQ"]
[Thu Jul 30 09:23:22.634216 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/films/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8QAAAAQ"]
[Thu Jul 30 09:23:22.634489 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/films/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8QAAAAQ"]
[Thu Jul 30 09:23:22.654681 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8gAAAAQ"]
[Thu Jul 30 09:23:22.654931 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8gAAAAQ"]
[Thu Jul 30 09:23:22.655218 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8gAAAAQ"]
[Thu Jul 30 09:23:22.673548 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/first-network/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8wAAAAQ"]
[Thu Jul 30 09:23:22.673832 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/first-network/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8wAAAAQ"]
[Thu Jul 30 09:23:22.674081 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/first-network/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX8wAAAAQ"]
[Thu Jul 30 09:23:22.692742 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fisdom/fisdom/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9AAAAAQ"]
[Thu Jul 30 09:23:22.692946 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fisdom/fisdom/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9AAAAAQ"]
[Thu Jul 30 09:23:22.693170 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fisdom/fisdom/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9AAAAAQ"]
[Thu Jul 30 09:23:22.716950 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fixtures/blocks/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9QAAAAQ"]
[Thu Jul 30 09:23:22.717118 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fixtures/blocks/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9QAAAAQ"]
[Thu Jul 30 09:23:22.717303 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fixtures/blocks/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9QAAAAQ"]
[Thu Jul 30 09:23:22.735887 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9gAAAAQ"]
[Thu Jul 30 09:23:22.736075 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9gAAAAQ"]
[Thu Jul 30 09:23:22.736282 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9gAAAAQ"]
[Thu Jul 30 09:23:22.754241 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fixtures/flight/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9wAAAAQ"]
[Thu Jul 30 09:23:22.754380 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fixtures/flight/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9wAAAAQ"]
[Thu Jul 30 09:23:22.754551 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fixtures/flight/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX9wAAAAQ"]
[Thu Jul 30 09:23:22.773026 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fixtures/kitchensink/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX-AAAAAQ"]
[Thu Jul 30 09:23:22.773216 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fixtures/kitchensink/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX-AAAAAQ"]
[Thu Jul 30 09:23:22.773401 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fixtures/kitchensink/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX-AAAAAQ"]
[Thu Jul 30 09:23:22.793525 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/flask/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX-QAAAAQ"]
[Thu Jul 30 09:23:22.793726 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/flask/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX-QAAAAQ"]
[Thu Jul 30 09:23:22.793919 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/flask/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX-QAAAAQ"]
[Thu Jul 30 09:23:22.887791 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/flask_test_uploads/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX_gAAAAQ"]
[Thu Jul 30 09:23:22.887958 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/flask_test_uploads/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX_gAAAAQ"]
[Thu Jul 30 09:23:22.888137 2026] [security2:error] [pid 2544412:tid 2544412] [client 185.177.72.10:31570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/flask_test_uploads/.env"] [unique_id "amsJ-rLEvf-80yRR0HGX_gAAAAQ"]
[Thu Jul 30 09:23:22.924435 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fm/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjQAAAAM"]
[Thu Jul 30 09:23:22.924748 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fm/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjQAAAAM"]
[Thu Jul 30 09:23:22.925022 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fm/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjQAAAAM"]
[Thu Jul 30 09:23:22.944460 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/font-icons/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjgAAAAM"]
[Thu Jul 30 09:23:22.944735 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/font-icons/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjgAAAAM"]
[Thu Jul 30 09:23:22.944986 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/font-icons/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjgAAAAM"]
[Thu Jul 30 09:23:22.964188 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/fonts/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjwAAAAM"]
[Thu Jul 30 09:23:22.964441 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/fonts/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjwAAAAM"]
[Thu Jul 30 09:23:22.964753 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/fonts/.env"] [unique_id "amsJ-jHx9eCuu0ycTSNNjwAAAAM"]
[Thu Jul 30 09:23:23.041482 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/front-app/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNkwAAAAM"]
[Thu Jul 30 09:23:23.041728 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/front-app/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNkwAAAAM"]
[Thu Jul 30 09:23:23.041952 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/front-app/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNkwAAAAM"]
[Thu Jul 30 09:23:23.059625 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/front-empathy/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlAAAAAM"]
[Thu Jul 30 09:23:23.059903 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/front-empathy/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlAAAAAM"]
[Thu Jul 30 09:23:23.060185 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/front-empathy/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlAAAAAM"]
[Thu Jul 30 09:23:23.078017 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/front-end/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlQAAAAM"]
[Thu Jul 30 09:23:23.078259 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/front-end/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlQAAAAM"]
[Thu Jul 30 09:23:23.078484 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/front-end/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlQAAAAM"]
[Thu Jul 30 09:23:23.096215 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/front/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlgAAAAM"]
[Thu Jul 30 09:23:23.096422 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/front/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlgAAAAM"]
[Thu Jul 30 09:23:23.096725 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/front/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlgAAAAM"]
[Thu Jul 30 09:23:23.114427 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/front/src/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlwAAAAM"]
[Thu Jul 30 09:23:23.114700 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/front/src/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlwAAAAM"]
[Thu Jul 30 09:23:23.114957 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/front/src/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNlwAAAAM"]
[Thu Jul 30 09:23:23.152294 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/frontend/momentum-fe/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmQAAAAM"]
[Thu Jul 30 09:23:23.152526 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/frontend/momentum-fe/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmQAAAAM"]
[Thu Jul 30 09:23:23.152840 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/frontend/momentum-fe/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmQAAAAM"]
[Thu Jul 30 09:23:23.170979 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/frontend/react/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmgAAAAM"]
[Thu Jul 30 09:23:23.171198 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/frontend/react/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmgAAAAM"]
[Thu Jul 30 09:23:23.171426 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/frontend/react/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmgAAAAM"]
[Thu Jul 30 09:23:23.192680 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/frontend/vue/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmwAAAAM"]
[Thu Jul 30 09:23:23.192849 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/frontend/vue/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmwAAAAM"]
[Thu Jul 30 09:23:23.193051 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/frontend/vue/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNmwAAAAM"]
[Thu Jul 30 09:23:23.231163 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/frontendfinaltest/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNnQAAAAM"]
[Thu Jul 30 09:23:23.231385 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/frontendfinaltest/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNnQAAAAM"]
[Thu Jul 30 09:23:23.231654 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/frontendfinaltest/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNnQAAAAM"]
[Thu Jul 30 09:23:23.249353 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ftp/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNngAAAAM"]
[Thu Jul 30 09:23:23.249556 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ftp/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNngAAAAM"]
[Thu Jul 30 09:23:23.249834 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ftp/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNngAAAAM"]
[Thu Jul 30 09:23:23.267902 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ftpmaster/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNnwAAAAM"]
[Thu Jul 30 09:23:23.268146 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ftpmaster/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNnwAAAAM"]
[Thu Jul 30 09:23:23.268360 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ftpmaster/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNnwAAAAM"]
[Thu Jul 30 09:23:23.286502 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/function/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNoAAAAAM"]
[Thu Jul 30 09:23:23.286768 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/function/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNoAAAAAM"]
[Thu Jul 30 09:23:23.286991 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/function/.env"] [unique_id "amsJ-zHx9eCuu0ycTSNNoAAAAAM"]
[Thu Jul 30 09:23:23.304768 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/function/.env.bak"] [unique_id "amsJ-zHx9eCuu0ycTSNNoQAAAAM"]
[Thu Jul 30 09:23:23.304999 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/function/.env.bak"] [unique_id "amsJ-zHx9eCuu0ycTSNNoQAAAAM"]
[Thu Jul 30 09:23:23.305261 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/function/.env.bak"] [unique_id "amsJ-zHx9eCuu0ycTSNNoQAAAAM"]
[Thu Jul 30 09:23:23.325644 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/function/.env.dev"] [unique_id "amsJ-zHx9eCuu0ycTSNNogAAAAM"]
[Thu Jul 30 09:23:23.325898 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/function/.env.dev"] [unique_id "amsJ-zHx9eCuu0ycTSNNogAAAAM"]
[Thu Jul 30 09:23:23.326152 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/function/.env.dev"] [unique_id "amsJ-zHx9eCuu0ycTSNNogAAAAM"]
[Thu Jul 30 09:23:23.344399 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/function/.env.dist"] [unique_id "amsJ-zHx9eCuu0ycTSNNowAAAAM"]
[Thu Jul 30 09:23:23.344666 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/function/.env.dist"] [unique_id "amsJ-zHx9eCuu0ycTSNNowAAAAM"]
[Thu Jul 30 09:23:23.344903 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/function/.env.dist"] [unique_id "amsJ-zHx9eCuu0ycTSNNowAAAAM"]
[Thu Jul 30 09:23:23.362465 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/function/.env.local"] [unique_id "amsJ-zHx9eCuu0ycTSNNpAAAAAM"]
[Thu Jul 30 09:23:23.362686 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/function/.env.local"] [unique_id "amsJ-zHx9eCuu0ycTSNNpAAAAAM"]
[Thu Jul 30 09:23:23.362903 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/function/.env.local"] [unique_id "amsJ-zHx9eCuu0ycTSNNpAAAAAM"]
[Thu Jul 30 09:23:24.026837 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/function/php.ini"] [unique_id "amsJ_DHx9eCuu0ycTSNNxwAAAAM"]
[Thu Jul 30 09:23:24.027187 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/function/php.ini"] [unique_id "amsJ_DHx9eCuu0ycTSNNxwAAAAM"]
[Thu Jul 30 09:23:24.027375 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/function/php.ini"] [unique_id "amsJ_DHx9eCuu0ycTSNNxwAAAAM"]
[Thu Jul 30 09:23:24.347422 2026] [security2:error] [pid 2546535:tid 2546535] [client 51.68.111.204:30123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsJ_KufVfI1ub72zyGRUgAAABU"]
[Thu Jul 30 09:23:24.430841 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/gists/cache/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN2wAAAAM"]
[Thu Jul 30 09:23:24.431027 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/gists/cache/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN2wAAAAM"]
[Thu Jul 30 09:23:24.431272 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/gists/cache/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN2wAAAAM"]
[Thu Jul 30 09:23:24.451090 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/gists/laravel/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3AAAAAM"]
[Thu Jul 30 09:23:24.451301 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/gists/laravel/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3AAAAAM"]
[Thu Jul 30 09:23:24.451508 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/gists/laravel/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3AAAAAM"]
[Thu Jul 30 09:23:24.470041 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/pusher/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/gists/pusher/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3QAAAAM"]
[Thu Jul 30 09:23:24.470278 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/gists/pusher/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3QAAAAM"]
[Thu Jul 30 09:23:24.470524 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/gists/pusher/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3QAAAAM"]
[Thu Jul 30 09:23:24.488371 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/github-connect/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3gAAAAM"]
[Thu Jul 30 09:23:24.488611 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/github-connect/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3gAAAAM"]
[Thu Jul 30 09:23:24.488852 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/github-connect/.env"] [unique_id "amsJ_DHx9eCuu0ycTSNN3gAAAAM"]
[Thu Jul 30 09:23:24.506373 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/global.asa"] [unique_id "amsJ_DHx9eCuu0ycTSNN3wAAAAM"]
[Thu Jul 30 09:23:24.506798 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/global.asa"] [unique_id "amsJ_DHx9eCuu0ycTSNN3wAAAAM"]
[Thu Jul 30 09:23:24.507041 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/global.asa"] [unique_id "amsJ_DHx9eCuu0ycTSNN3wAAAAM"]
[Thu Jul 30 09:23:24.616829 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asax"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/global.asax"] [unique_id "amsJ_DHx9eCuu0ycTSNN5QAAAAM"]
[Thu Jul 30 09:23:24.617140 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/global.asax"] [unique_id "amsJ_DHx9eCuu0ycTSNN5QAAAAM"]
[Thu Jul 30 09:23:24.617326 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/global.asax"] [unique_id "amsJ_DHx9eCuu0ycTSNN5QAAAAM"]
[Thu Jul 30 09:23:24.845781 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/globals.inc"] [unique_id "amsJ_DHx9eCuu0ycTSNN8QAAAAM"]
[Thu Jul 30 09:23:24.846141 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/globals.inc"] [unique_id "amsJ_DHx9eCuu0ycTSNN8QAAAAM"]
[Thu Jul 30 09:23:24.846318 2026] [security2:error] [pid 2539964:tid 2539964] [client 185.177.72.10:31576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/globals.inc"] [unique_id "amsJ_DHx9eCuu0ycTSNN8QAAAAM"]
[Thu Jul 30 09:23:24.859437 2026] [core:error] [pid 2540903:tid 2540903] (13)Permission denied: [client 216.73.216.199:8552] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/cpu_partial
[Thu Jul 30 09:23:24.923285 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/grems-api/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4AgAAACA"]
[Thu Jul 30 09:23:24.923542 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/grems-api/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4AgAAACA"]
[Thu Jul 30 09:23:24.923842 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/grems-api/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4AgAAACA"]
[Thu Jul 30 09:23:24.944161 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/grems-frontend/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4AwAAACA"]
[Thu Jul 30 09:23:24.944426 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/grems-frontend/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4AwAAACA"]
[Thu Jul 30 09:23:24.944719 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/grems-frontend/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4AwAAACA"]
[Thu Jul 30 09:23:24.963917 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/hasura/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4BAAAACA"]
[Thu Jul 30 09:23:24.964096 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/hasura/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4BAAAACA"]
[Thu Jul 30 09:23:24.964308 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/hasura/.env"] [unique_id "amsJ_KlwtuGZyGagkdI4BAAAACA"]
[Thu Jul 30 09:23:25.044788 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/helper/.env"] [unique_id "amsJ_alwtuGZyGagkdI4CAAAACA"]
[Thu Jul 30 09:23:25.045123 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/helper/.env"] [unique_id "amsJ_alwtuGZyGagkdI4CAAAACA"]
[Thu Jul 30 09:23:25.045349 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/helper/.env"] [unique_id "amsJ_alwtuGZyGagkdI4CAAAACA"]
[Thu Jul 30 09:23:25.065244 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.bak"] [unique_id "amsJ_alwtuGZyGagkdI4CQAAACA"]
[Thu Jul 30 09:23:25.065477 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.bak"] [unique_id "amsJ_alwtuGZyGagkdI4CQAAACA"]
[Thu Jul 30 09:23:25.065825 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.bak"] [unique_id "amsJ_alwtuGZyGagkdI4CQAAACA"]
[Thu Jul 30 09:23:25.084955 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.dev"] [unique_id "amsJ_alwtuGZyGagkdI4CgAAACA"]
[Thu Jul 30 09:23:25.085208 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.dev"] [unique_id "amsJ_alwtuGZyGagkdI4CgAAACA"]
[Thu Jul 30 09:23:25.085470 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.dev"] [unique_id "amsJ_alwtuGZyGagkdI4CgAAACA"]
[Thu Jul 30 09:23:25.107355 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.dist"] [unique_id "amsJ_alwtuGZyGagkdI4CwAAACA"]
[Thu Jul 30 09:23:25.107615 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.dist"] [unique_id "amsJ_alwtuGZyGagkdI4CwAAACA"]
[Thu Jul 30 09:23:25.107865 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.dist"] [unique_id "amsJ_alwtuGZyGagkdI4CwAAACA"]
[Thu Jul 30 09:23:25.127896 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.local"] [unique_id "amsJ_alwtuGZyGagkdI4DAAAACA"]
[Thu Jul 30 09:23:25.128146 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.local"] [unique_id "amsJ_alwtuGZyGagkdI4DAAAACA"]
[Thu Jul 30 09:23:25.128386 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/helper/.env.local"] [unique_id "amsJ_alwtuGZyGagkdI4DAAAACA"]
[Thu Jul 30 09:23:25.160700 2026] [core:error] [pid 2540903:tid 2540903] (13)Permission denied: [client 216.73.216.199:8552] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/cpu_partial
[Thu Jul 30 09:23:25.362328 2026] [ssl:error] [pid 2551869:tid 2551869] (EAI 2)Name or service not known: [client 144.76.19.72:30666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:25.362361 2026] [ssl:error] [pid 2551869:tid 2551869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:25.417411 2026] [ssl:error] [pid 2532624:tid 2532624] (EAI 2)Name or service not known: [client 144.76.19.72:30668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:25.417435 2026] [ssl:error] [pid 2532624:tid 2532624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:25.868125 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/helper/php.ini"] [unique_id "amsJ_alwtuGZyGagkdI4LwAAACA"]
[Thu Jul 30 09:23:25.868560 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/helper/php.ini"] [unique_id "amsJ_alwtuGZyGagkdI4LwAAACA"]
[Thu Jul 30 09:23:25.868834 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/helper/php.ini"] [unique_id "amsJ_alwtuGZyGagkdI4LwAAACA"]
[Thu Jul 30 09:23:26.280393 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/hgs-static/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4QgAAACA"]
[Thu Jul 30 09:23:26.280634 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/hgs-static/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4QgAAACA"]
[Thu Jul 30 09:23:26.280874 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/hgs-static/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4QgAAACA"]
[Thu Jul 30 09:23:26.303571 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/higlass-website/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4QwAAACA"]
[Thu Jul 30 09:23:26.303865 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/higlass-website/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4QwAAACA"]
[Thu Jul 30 09:23:26.304109 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/higlass-website/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4QwAAACA"]
[Thu Jul 30 09:23:26.347759 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/horde/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RQAAACA"]
[Thu Jul 30 09:23:26.347966 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/horde/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RQAAACA"]
[Thu Jul 30 09:23:26.348192 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/horde/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RQAAACA"]
[Thu Jul 30 09:23:26.368270 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/hotpot-app-frontend/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RgAAACA"]
[Thu Jul 30 09:23:26.368472 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/hotpot-app-frontend/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RgAAACA"]
[Thu Jul 30 09:23:26.368717 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/hotpot-app-frontend/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RgAAACA"]
[Thu Jul 30 09:23:26.390685 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/htdocs/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RwAAACA"]
[Thu Jul 30 09:23:26.390943 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/htdocs/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RwAAACA"]
[Thu Jul 30 09:23:26.391208 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/htdocs/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4RwAAACA"]
[Thu Jul 30 09:23:26.412666 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/html/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4SAAAACA"]
[Thu Jul 30 09:23:26.412892 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/html/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4SAAAACA"]
[Thu Jul 30 09:23:26.413168 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/html/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4SAAAACA"]
[Thu Jul 30 09:23:26.477836 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/http/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4SwAAACA"]
[Thu Jul 30 09:23:26.478051 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/http/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4SwAAACA"]
[Thu Jul 30 09:23:26.478285 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/http/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4SwAAACA"]
[Thu Jul 30 09:23:26.500935 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/httpboot/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TAAAACA"]
[Thu Jul 30 09:23:26.501235 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/httpboot/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TAAAACA"]
[Thu Jul 30 09:23:26.501505 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/httpboot/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TAAAACA"]
[Thu Jul 30 09:23:26.521261 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/icon/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TQAAACA"]
[Thu Jul 30 09:23:26.521494 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/icon/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TQAAACA"]
[Thu Jul 30 09:23:26.521714 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/icon/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TQAAACA"]
[Thu Jul 30 09:23:26.541994 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/icons/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TgAAACA"]
[Thu Jul 30 09:23:26.542247 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/icons/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TgAAACA"]
[Thu Jul 30 09:23:26.542460 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/icons/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TgAAACA"]
[Thu Jul 30 09:23:26.566546 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/ikiwiki/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TwAAACA"]
[Thu Jul 30 09:23:26.566847 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/ikiwiki/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TwAAACA"]
[Thu Jul 30 09:23:26.567100 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/ikiwiki/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4TwAAACA"]
[Thu Jul 30 09:23:26.589825 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/image_data/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UAAAACA"]
[Thu Jul 30 09:23:26.590034 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/image_data/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UAAAACA"]
[Thu Jul 30 09:23:26.590248 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/image_data/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UAAAACA"]
[Thu Jul 30 09:23:26.610412 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/images/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UQAAACA"]
[Thu Jul 30 09:23:26.610683 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/images/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UQAAACA"]
[Thu Jul 30 09:23:26.610930 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/images/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UQAAACA"]
[Thu Jul 30 09:23:26.631016 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/img/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UgAAACA"]
[Thu Jul 30 09:23:26.631250 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/img/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UgAAACA"]
[Thu Jul 30 09:23:26.631469 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/img/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4UgAAACA"]
[Thu Jul 30 09:23:26.840176 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/info/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4XAAAACA"]
[Thu Jul 30 09:23:26.840383 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/info/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4XAAAACA"]
[Thu Jul 30 09:23:26.840648 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/info/.env"] [unique_id "amsJ_qlwtuGZyGagkdI4XAAAACA"]
[Thu Jul 30 09:23:26.861016 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/info/.env.bak"] [unique_id "amsJ_qlwtuGZyGagkdI4XQAAACA"]
[Thu Jul 30 09:23:26.861292 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/info/.env.bak"] [unique_id "amsJ_qlwtuGZyGagkdI4XQAAACA"]
[Thu Jul 30 09:23:26.861500 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/info/.env.bak"] [unique_id "amsJ_qlwtuGZyGagkdI4XQAAACA"]
[Thu Jul 30 09:23:26.882710 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/info/.env.dev"] [unique_id "amsJ_qlwtuGZyGagkdI4XgAAACA"]
[Thu Jul 30 09:23:26.882931 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/info/.env.dev"] [unique_id "amsJ_qlwtuGZyGagkdI4XgAAACA"]
[Thu Jul 30 09:23:26.883185 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/info/.env.dev"] [unique_id "amsJ_qlwtuGZyGagkdI4XgAAACA"]
[Thu Jul 30 09:23:26.902370 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/info/.env.dist"] [unique_id "amsJ_qlwtuGZyGagkdI4XwAAACA"]
[Thu Jul 30 09:23:26.902569 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/info/.env.dist"] [unique_id "amsJ_qlwtuGZyGagkdI4XwAAACA"]
[Thu Jul 30 09:23:26.902835 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/info/.env.dist"] [unique_id "amsJ_qlwtuGZyGagkdI4XwAAACA"]
[Thu Jul 30 09:23:26.922594 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/info/.env.local"] [unique_id "amsJ_qlwtuGZyGagkdI4YAAAACA"]
[Thu Jul 30 09:23:26.922860 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/info/.env.local"] [unique_id "amsJ_qlwtuGZyGagkdI4YAAAACA"]
[Thu Jul 30 09:23:26.923128 2026] [security2:error] [pid 2548004:tid 2548004] [client 185.177.72.10:54208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/info/.env.local"] [unique_id "amsJ_qlwtuGZyGagkdI4YAAAACA"]
[Thu Jul 30 09:23:27.603510 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thewhitefamily.uk"] [uri "/info/php.ini"] [unique_id "amsJ_2lh7eBMNgfIh-kwdAAAADI"]
[Thu Jul 30 09:23:27.603930 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/info/php.ini"] [unique_id "amsJ_2lh7eBMNgfIh-kwdAAAADI"]
[Thu Jul 30 09:23:27.604197 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/info/php.ini"] [unique_id "amsJ_2lh7eBMNgfIh-kwdAAAADI"]
[Thu Jul 30 09:23:28.110184 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/install/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwkAAAADI"]
[Thu Jul 30 09:23:28.110306 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/install/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwkAAAADI"]
[Thu Jul 30 09:23:28.110480 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/install/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwkAAAADI"]
[Thu Jul 30 09:23:28.283207 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/items/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwmgAAADI"]
[Thu Jul 30 09:23:28.283347 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/items/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwmgAAADI"]
[Thu Jul 30 09:23:28.283500 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/items/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwmgAAADI"]
[Thu Jul 30 09:23:28.299809 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.uk"] [uri "/javascript/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwmwAAADI"]
[Thu Jul 30 09:23:28.299953 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.uk"] [uri "/javascript/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwmwAAADI"]
[Thu Jul 30 09:23:28.300136 2026] [security2:error] [pid 2529850:tid 2529850] [client 185.177.72.10:54218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.uk"] [uri "/javascript/.env"] [unique_id "amsKAGlh7eBMNgfIh-kwmwAAADI"]
[Thu Jul 30 09:23:28.475839 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:30676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:28.475881 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:28.531941 2026] [ssl:error] [pid 2549730:tid 2549730] (EAI 2)Name or service not known: [client 144.76.19.72:30684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:28.531974 2026] [ssl:error] [pid 2549730:tid 2549730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:29.874122 2026] [core:error] [pid 2532624:tid 2532624] (13)Permission denied: [client 216.73.216.199:30127] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmem_cache/objects_partial
[Thu Jul 30 09:23:31.587550 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:44844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:31.587598 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:31.643699 2026] [ssl:error] [pid 2548319:tid 2548319] (EAI 2)Name or service not known: [client 144.76.19.72:44858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:31.643740 2026] [ssl:error] [pid 2548319:tid 2548319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:31.908457 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.68:34304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:23:31.909123 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.68:34304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:23:32.242848 2026] [authz_core:error] [pid 2540403:tid 2540403] [client 57.141.0.69:33646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:23:32.243481 2026] [authz_core:error] [pid 2540403:tid 2540403] [client 57.141.0.69:33646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:23:32.585121 2026] [core:error] [pid 2532624:tid 2532624] (13)Permission denied: [client 216.73.216.199:30127] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/joydev/sections/__bug_table
[Thu Jul 30 09:23:33.988544 2026] [security2:error] [pid 2540402:tid 2540402] [client 114.119.135.136:62243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579132800/request_format~html/cat_ids~30"] [unique_id "amsKBQ06BU2qmC9YS1bpZgAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579132800/request_format~html
[Thu Jul 30 09:23:34.030207 2026] [security2:error] [pid 2546484:tid 2546484] [client 185.191.171.3:13636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/press-release-announcing-candidacy-for-city-council"] [unique_id "amsKBqTma6OYtABUoMWKGwAAABE"]
[Thu Jul 30 09:23:34.698651 2026] [ssl:error] [pid 2548003:tid 2548003] (EAI 2)Name or service not known: [client 144.76.19.72:44866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:34.698678 2026] [ssl:error] [pid 2548003:tid 2548003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:34.751904 2026] [ssl:error] [pid 2551869:tid 2551869] (EAI 2)Name or service not known: [client 144.76.19.72:44882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:34.751929 2026] [ssl:error] [pid 2551869:tid 2551869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:35.850573 2026] [security2:error] [pid 2540402:tid 2540402] [client 114.119.135.136:62251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579132800/request_format~html/cat_ids~30"] [unique_id "amsKBw06BU2qmC9YS1bpZwAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579132800/request_format~html
[Thu Jul 30 09:23:36.311923 2026] [security2:error] [pid 2553113:tid 2553113] [client 170.106.11.141:49566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amsKCP6qIDaCtVPnU8PpBQAAACc"]
[Thu Jul 30 09:23:36.799929 2026] [core:error] [pid 2532624:tid 2532624] (13)Permission denied: [client 216.73.216.199:30127] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dax_cache/objects_partial
[Thu Jul 30 09:23:37.281144 2026] [authz_core:error] [pid 2552516:tid 2552516] [client 57.141.0.67:47564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:23:37.281859 2026] [authz_core:error] [pid 2552516:tid 2552516] [client 57.141.0.67:47564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:23:37.402351 2026] [core:error] [pid 2532624:tid 2532624] (13)Permission denied: [client 216.73.216.199:30127] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/objects
[Thu Jul 30 09:23:37.830597 2026] [ssl:error] [pid 2546535:tid 2546535] (EAI 2)Name or service not known: [client 144.76.19.72:44884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:37.830655 2026] [ssl:error] [pid 2546535:tid 2546535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:37.884055 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:44890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:37.884121 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:40.169256 2026] [access_compat:error] [pid 2553052:tid 2553052] [client 47.236.148.184:1112] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/06/harry-eng-impossible-bottles.jpg
[Thu Jul 30 09:23:40.169381 2026] [access_compat:error] [pid 2553052:tid 2553052] [client 47.236.148.184:1112] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:23:40.959892 2026] [ssl:error] [pid 2547912:tid 2547912] (EAI 2)Name or service not known: [client 144.76.19.72:49204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:40.959933 2026] [ssl:error] [pid 2547912:tid 2547912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:41.023634 2026] [ssl:error] [pid 2552463:tid 2552463] (EAI 2)Name or service not known: [client 144.76.19.72:49220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:41.023668 2026] [ssl:error] [pid 2552463:tid 2552463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:41.957025 2026] [security2:error] [pid 2523136:tid 2523136] [client 43.153.96.79:51904] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-sun.com"] [uri "/"] [unique_id "amsKDTwONh6G-u-ykgM3DgAAAAE"]
[Thu Jul 30 09:23:42.351311 2026] [authz_core:error] [pid 2550335:tid 2550335] [client 57.141.0.47:42384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:23:42.351947 2026] [authz_core:error] [pid 2550335:tid 2550335] [client 57.141.0.47:42384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:23:42.834548 2026] [lsapi:warn] [pid 2532624:tid 2532624] [client 216.73.216.199:30127] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 09:23:42.834587 2026] [lsapi:error] [pid 2532624:tid 2532624] [client 216.73.216.199:30127] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/sql.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 09:23:44.109824 2026] [ssl:error] [pid 2551869:tid 2551869] (EAI 2)Name or service not known: [client 144.76.19.72:49232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:44.109852 2026] [ssl:error] [pid 2551869:tid 2551869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:44.165624 2026] [ssl:error] [pid 2547448:tid 2547448] (EAI 2)Name or service not known: [client 144.76.19.72:49240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:44.165656 2026] [ssl:error] [pid 2547448:tid 2547448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:47.223571 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:49246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:47.223617 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:47.278223 2026] [ssl:error] [pid 2550549:tid 2550549] (EAI 2)Name or service not known: [client 144.76.19.72:49258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:47.278262 2026] [ssl:error] [pid 2550549:tid 2550549] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:48.840181 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 66.249.66.34:62939] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:23:48.842909 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 66.249.66.34:62939] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:23:49.914861 2026] [lsapi:warn] [pid 2544412:tid 2544412] [client 45.158.164.139:52836] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:23:49.914905 2026] [lsapi:warn] [pid 2544412:tid 2544412] [client 45.158.164.139:52836] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:23:49.917707 2026] [lsapi:warn] [pid 2553052:tid 2553052] [client 173.252.69.3:47010] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:23:49.917748 2026] [lsapi:warn] [pid 2553052:tid 2553052] [client 173.252.69.3:47010] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:23:49.939216 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env"] [unique_id "amsKFVU9OTCsd8OrsfB-kgAAACs"]
[Thu Jul 30 09:23:49.939399 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env"] [unique_id "amsKFVU9OTCsd8OrsfB-kgAAACs"]
[Thu Jul 30 09:23:49.939604 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFVU9OTCsd8OrsfB-kgAAACs"]
[Thu Jul 30 09:23:49.956658 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/api/.env"] [unique_id "amsKFVU9OTCsd8OrsfB-kwAAACs"]
[Thu Jul 30 09:23:49.956851 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/api/.env"] [unique_id "amsKFVU9OTCsd8OrsfB-kwAAACs"]
[Thu Jul 30 09:23:49.957046 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFVU9OTCsd8OrsfB-kwAAACs"]
[Thu Jul 30 09:23:49.974416 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/backend/.env"] [unique_id "amsKFVU9OTCsd8OrsfB-lAAAACs"]
[Thu Jul 30 09:23:49.974617 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/backend/.env"] [unique_id "amsKFVU9OTCsd8OrsfB-lAAAACs"]
[Thu Jul 30 09:23:49.974794 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFVU9OTCsd8OrsfB-lAAAACs"]
[Thu Jul 30 09:23:50.009399 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/admin/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-lgAAACs"]
[Thu Jul 30 09:23:50.009552 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/admin/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-lgAAACs"]
[Thu Jul 30 09:23:50.009746 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-lgAAACs"]
[Thu Jul 30 09:23:50.044275 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/laravel/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-mAAAACs"]
[Thu Jul 30 09:23:50.044447 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/laravel/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-mAAAACs"]
[Thu Jul 30 09:23:50.044626 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-mAAAACs"]
[Thu Jul 30 09:23:50.061768 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/core/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-mQAAACs"]
[Thu Jul 30 09:23:50.061932 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/core/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-mQAAACs"]
[Thu Jul 30 09:23:50.062126 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-mQAAACs"]
[Thu Jul 30 09:23:50.096966 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.example"] [unique_id "amsKFlU9OTCsd8OrsfB-mwAAACs"]
[Thu Jul 30 09:23:50.097164 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.example"] [unique_id "amsKFlU9OTCsd8OrsfB-mwAAACs"]
[Thu Jul 30 09:23:50.097335 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-mwAAACs"]
[Thu Jul 30 09:23:50.114648 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/app/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-nAAAACs"]
[Thu Jul 30 09:23:50.114829 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/app/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-nAAAACs"]
[Thu Jul 30 09:23:50.115014 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-nAAAACs"]
[Thu Jul 30 09:23:50.132087 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/dev/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-nQAAACs"]
[Thu Jul 30 09:23:50.132229 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/dev/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-nQAAACs"]
[Thu Jul 30 09:23:50.132401 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-nQAAACs"]
[Thu Jul 30 09:23:50.167361 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/server/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-nwAAACs"]
[Thu Jul 30 09:23:50.167553 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/server/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-nwAAACs"]
[Thu Jul 30 09:23:50.167747 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-nwAAACs"]
[Thu Jul 30 09:23:50.184903 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.save"] [unique_id "amsKFlU9OTCsd8OrsfB-oAAAACs"]
[Thu Jul 30 09:23:50.185104 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.save"] [unique_id "amsKFlU9OTCsd8OrsfB-oAAAACs"]
[Thu Jul 30 09:23:50.185284 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-oAAAACs"]
[Thu Jul 30 09:23:50.221915 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/staging/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-ogAAACs"]
[Thu Jul 30 09:23:50.222118 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/staging/.env"] [unique_id "amsKFlU9OTCsd8OrsfB-ogAAACs"]
[Thu Jul 30 09:23:50.222295 2026] [security2:error] [pid 2538304:tid 2538304] [client 185.93.89.167:5165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsKFlU9OTCsd8OrsfB-ogAAACs"]
[Thu Jul 30 09:23:50.285449 2026] [lsapi:warn] [pid 2549677:tid 2549677] [client 45.158.164.139:52850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:23:50.285492 2026] [lsapi:warn] [pid 2549677:tid 2549677] [client 45.158.164.139:52850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:23:50.287670 2026] [lsapi:warn] [pid 2547912:tid 2547912] [client 173.252.69.7:54148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:23:50.287726 2026] [lsapi:warn] [pid 2547912:tid 2547912] [client 173.252.69.7:54148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:23:50.333682 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:19686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:50.333717 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:50.389174 2026] [ssl:error] [pid 2538304:tid 2538304] (EAI 2)Name or service not known: [client 144.76.19.72:19698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:50.389194 2026] [ssl:error] [pid 2538304:tid 2538304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:50.439435 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMHgAAAAI"]
[Thu Jul 30 09:23:50.439571 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMHgAAAAI"]
[Thu Jul 30 09:23:50.439768 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMHgAAAAI"]
[Thu Jul 30 09:23:50.461460 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/api/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMHwAAAAI"]
[Thu Jul 30 09:23:50.461622 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/api/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMHwAAAAI"]
[Thu Jul 30 09:23:50.461782 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/api/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMHwAAAAI"]
[Thu Jul 30 09:23:50.481999 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/backend/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMIAAAAAI"]
[Thu Jul 30 09:23:50.482182 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/backend/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMIAAAAAI"]
[Thu Jul 30 09:23:50.482352 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/backend/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMIAAAAAI"]
[Thu Jul 30 09:23:50.523266 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/admin/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMIgAAAAI"]
[Thu Jul 30 09:23:50.523442 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/admin/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMIgAAAAI"]
[Thu Jul 30 09:23:50.523630 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/admin/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMIgAAAAI"]
[Thu Jul 30 09:23:50.564203 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/laravel/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMJAAAAAI"]
[Thu Jul 30 09:23:50.564343 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/laravel/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMJAAAAAI"]
[Thu Jul 30 09:23:50.564500 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/laravel/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMJAAAAAI"]
[Thu Jul 30 09:23:50.584766 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/core/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMJQAAAAI"]
[Thu Jul 30 09:23:50.584955 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/core/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMJQAAAAI"]
[Thu Jul 30 09:23:50.585155 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/core/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMJQAAAAI"]
[Thu Jul 30 09:23:50.626321 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.example"] [unique_id "amsKFsm6hHIq2cYgfLXMJwAAAAI"]
[Thu Jul 30 09:23:50.626518 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.example"] [unique_id "amsKFsm6hHIq2cYgfLXMJwAAAAI"]
[Thu Jul 30 09:23:50.626730 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.example"] [unique_id "amsKFsm6hHIq2cYgfLXMJwAAAAI"]
[Thu Jul 30 09:23:50.646972 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/app/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKAAAAAI"]
[Thu Jul 30 09:23:50.647190 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/app/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKAAAAAI"]
[Thu Jul 30 09:23:50.647376 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/app/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKAAAAAI"]
[Thu Jul 30 09:23:50.667705 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/dev/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKQAAAAI"]
[Thu Jul 30 09:23:50.667892 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/dev/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKQAAAAI"]
[Thu Jul 30 09:23:50.668090 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/dev/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKQAAAAI"]
[Thu Jul 30 09:23:50.729304 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/server/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKwAAAAI"]
[Thu Jul 30 09:23:50.729518 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/server/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKwAAAAI"]
[Thu Jul 30 09:23:50.729723 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/server/.env"] [unique_id "amsKFsm6hHIq2cYgfLXMKwAAAAI"]
[Thu Jul 30 09:23:50.750029 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.save"] [unique_id "amsKFsm6hHIq2cYgfLXMLAAAAAI"]
[Thu Jul 30 09:23:50.750226 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.save"] [unique_id "amsKFsm6hHIq2cYgfLXMLAAAAAI"]
[Thu Jul 30 09:23:50.750407 2026] [security2:error] [pid 2549677:tid 2549677] [client 185.93.89.167:38093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/.env.save"] [unique_id "amsKFsm6hHIq2cYgfLXMLAAAAAI"]
[Thu Jul 30 09:23:53.445939 2026] [ssl:error] [pid 2553051:tid 2553051] (EAI 2)Name or service not known: [client 144.76.19.72:19704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:53.445975 2026] [ssl:error] [pid 2553051:tid 2553051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:53.505524 2026] [ssl:error] [pid 2529793:tid 2529793] (EAI 2)Name or service not known: [client 144.76.19.72:19708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:53.505554 2026] [ssl:error] [pid 2529793:tid 2529793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:55.207552 2026] [authz_core:error] [pid 2540903:tid 2540903] [client 144.172.105.5:57530] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/database/error_log
[Thu Jul 30 09:23:56.067540 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 144.172.105.5:46462] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/db_backup/error_log
[Thu Jul 30 09:23:56.560658 2026] [ssl:error] [pid 2553112:tid 2553112] (EAI 2)Name or service not known: [client 144.76.19.72:19714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:56.560696 2026] [ssl:error] [pid 2553112:tid 2553112] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:56.615790 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:19718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:56.615834 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:57.165102 2026] [security2:error] [pid 2538567:tid 2538567] [client 110.42.208.131:51742] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "evtech.ltd"] [uri "/"] [unique_id "amsKHe5wwnGGOHd0XkHCzwAAADc"]
[Thu Jul 30 09:23:58.418575 2026] [authz_core:error] [pid 2529793:tid 2529793] [client 144.172.105.5:46498] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/db_backup/Targets/error_log
[Thu Jul 30 09:23:59.670646 2026] [ssl:error] [pid 2552928:tid 2552928] (EAI 2)Name or service not known: [client 144.76.19.72:54234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:59.670684 2026] [ssl:error] [pid 2552928:tid 2552928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:23:59.728637 2026] [ssl:error] [pid 2553051:tid 2553051] (EAI 2)Name or service not known: [client 144.76.19.72:54248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:23:59.728665 2026] [ssl:error] [pid 2553051:tid 2553051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:00.243665 2026] [authz_core:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/events/error_log
[Thu Jul 30 09:24:00.374895 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/SqlResultIterator.inc"] [unique_id "amsKIDPnOlHAoLElwHr3eQAAACw"]
[Thu Jul 30 09:24:00.375175 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/SqlResultIterator.inc"] [unique_id "amsKIDPnOlHAoLElwHr3eQAAACw"]
[Thu Jul 30 09:24:00.375555 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/SqlResultIterator.inc"] [unique_id "amsKIDPnOlHAoLElwHr3eQAAACw"]
[Thu Jul 30 09:24:00.519916 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEntityData.inc"] [unique_id "amsKIDPnOlHAoLElwHr3egAAACw"]
[Thu Jul 30 09:24:00.520175 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEntityData.inc"] [unique_id "amsKIDPnOlHAoLElwHr3egAAACw"]
[Thu Jul 30 09:24:00.520519 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEntityData.inc"] [unique_id "amsKIDPnOlHAoLElwHr3egAAACw"]
[Thu Jul 30 09:24:00.649167 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEntityType.inc"] [unique_id "amsKIDPnOlHAoLElwHr3ewAAACw"]
[Thu Jul 30 09:24:00.649449 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEntityType.inc"] [unique_id "amsKIDPnOlHAoLElwHr3ewAAACw"]
[Thu Jul 30 09:24:00.649823 2026] [security2:error] [pid 2553115:tid 2553115] [client 144.172.105.5:46532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEntityType.inc"] [unique_id "amsKIDPnOlHAoLElwHr3ewAAACw"]
[Thu Jul 30 09:24:01.898633 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventHandler.inc"] [unique_id "amsKIc6r7Zd1zXM1G48fsQAAACE"]
[Thu Jul 30 09:24:01.898871 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventHandler.inc"] [unique_id "amsKIc6r7Zd1zXM1G48fsQAAACE"]
[Thu Jul 30 09:24:01.899212 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventHandler.inc"] [unique_id "amsKIc6r7Zd1zXM1G48fsQAAACE"]
[Thu Jul 30 09:24:02.030888 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventTrigger.inc"] [unique_id "amsKIs6r7Zd1zXM1G48fsgAAACE"]
[Thu Jul 30 09:24:02.031174 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventTrigger.inc"] [unique_id "amsKIs6r7Zd1zXM1G48fsgAAACE"]
[Thu Jul 30 09:24:02.031575 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventTrigger.inc"] [unique_id "amsKIs6r7Zd1zXM1G48fsgAAACE"]
[Thu Jul 30 09:24:02.159728 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventsManager.inc"] [unique_id "amsKIs6r7Zd1zXM1G48fswAAACE"]
[Thu Jul 30 09:24:02.159963 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventsManager.inc"] [unique_id "amsKIs6r7Zd1zXM1G48fswAAACE"]
[Thu Jul 30 09:24:02.160348 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTEventsManager.inc"] [unique_id "amsKIs6r7Zd1zXM1G48fswAAACE"]
[Thu Jul 30 09:24:02.305390 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTWSEntityType.inc"] [unique_id "amsKIs6r7Zd1zXM1G48ftAAAACE"]
[Thu Jul 30 09:24:02.305646 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTWSEntityType.inc"] [unique_id "amsKIs6r7Zd1zXM1G48ftAAAACE"]
[Thu Jul 30 09:24:02.305994 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/VTWSEntityType.inc"] [unique_id "amsKIs6r7Zd1zXM1G48ftAAAACE"]
[Thu Jul 30 09:24:02.400411 2026] [authz_core:error] [pid 2552677:tid 2552677] [client 66.249.66.34:53686] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:24:02.403061 2026] [authz_core:error] [pid 2552677:tid 2552677] [client 66.249.66.34:53686] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:24:02.433749 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/include.inc"] [unique_id "amsKIs6r7Zd1zXM1G48ftQAAACE"]
[Thu Jul 30 09:24:02.434011 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/include.inc"] [unique_id "amsKIs6r7Zd1zXM1G48ftQAAACE"]
[Thu Jul 30 09:24:02.434376 2026] [security2:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/events/include.inc"] [unique_id "amsKIs6r7Zd1zXM1G48ftQAAACE"]
[Thu Jul 30 09:24:02.699792 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 144.172.105.5:46546] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/fields/error_log
[Thu Jul 30 09:24:02.791644 2026] [ssl:error] [pid 2523136:tid 2523136] (EAI 2)Name or service not known: [client 144.76.19.72:54258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:02.791673 2026] [ssl:error] [pid 2523136:tid 2523136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:02.847869 2026] [ssl:error] [pid 2548004:tid 2548004] (EAI 2)Name or service not known: [client 144.76.19.72:54272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:02.847896 2026] [ssl:error] [pid 2548004:tid 2548004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:03.523680 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 144.172.105.5:46554] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/fpdf/error_log
[Thu Jul 30 09:24:03.630723 2026] [access_compat:error] [pid 2539964:tid 2539964] [client 45.78.203.112:43584] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/10/keeley.jpg, referer: http://blog.alism.com
[Thu Jul 30 09:24:03.630821 2026] [access_compat:error] [pid 2539964:tid 2539964] [client 45.78.203.112:43584] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: http://blog.alism.com
[Thu Jul 30 09:24:04.525891 2026] [security2:error] [pid 2529845:tid 2529845] [client 20.171.55.167:7545] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.raidersofthegamecupboard.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsKJDnz0V0HyYIA5AhrZAAAAC0"]
[Thu Jul 30 09:24:04.526116 2026] [security2:error] [pid 2529845:tid 2529845] [client 20.171.55.167:7545] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.raidersofthegamecupboard.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsKJDnz0V0HyYIA5AhrZAAAAC0"]
[Thu Jul 30 09:24:04.553341 2026] [security2:error] [pid 2529845:tid 2529845] [client 20.171.55.167:7545] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.raidersofthegamecupboard.co.uk"] [uri "/403.shtml"] [unique_id "amsKJDnz0V0HyYIA5AhrZAAAAC0"]
[Thu Jul 30 09:24:05.241098 2026] [security2:error] [pid 2535137:tid 2535137] [client 101.33.80.42:34416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/default.htm.backup"] [unique_id "amsKJbY6AUW_ZsXORTxuRAAAAB8"]
[Thu Jul 30 09:24:05.904469 2026] [ssl:error] [pid 2535137:tid 2535137] (EAI 2)Name or service not known: [client 144.76.19.72:54286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:05.904503 2026] [ssl:error] [pid 2535137:tid 2535137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:05.960500 2026] [ssl:error] [pid 2552928:tid 2552928] (EAI 2)Name or service not known: [client 144.76.19.72:54300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:05.960527 2026] [ssl:error] [pid 2552928:tid 2552928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:06.752439 2026] [security2:error] [pid 2535137:tid 2535137] [client 185.191.171.6:16584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/map-of-victorian-rubbish-dumps-wales"] [unique_id "amsKJrY6AUW_ZsXORTxuSAAAAB8"]
[Thu Jul 30 09:24:07.145857 2026] [authz_core:error] [pid 2549677:tid 2549677] [client 144.172.105.5:48144] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/freetag/error_log
[Thu Jul 30 09:24:07.943570 2026] [authz_core:error] [pid 2552928:tid 2552928] [client 57.141.0.70:41430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:07.944548 2026] [authz_core:error] [pid 2552928:tid 2552928] [client 57.141.0.70:41430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:09.035389 2026] [ssl:error] [pid 2554822:tid 2554822] (EAI 2)Name or service not known: [client 144.76.19.72:54302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:09.035455 2026] [ssl:error] [pid 2554822:tid 2554822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:09.230513 2026] [ssl:error] [pid 2554821:tid 2554821] (EAI 2)Name or service not known: [client 144.76.19.72:54312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:09.230568 2026] [ssl:error] [pid 2554821:tid 2554821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:11.331972 2026] [authz_core:error] [pid 2555022:tid 2555022] [client 144.172.105.5:48198] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/htmlpurifier/library/HTMLPurifier/error_log
[Thu Jul 30 09:24:12.289167 2026] [ssl:error] [pid 2538567:tid 2538567] (EAI 2)Name or service not known: [client 144.76.19.72:31996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:12.289212 2026] [ssl:error] [pid 2538567:tid 2538567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:12.346254 2026] [ssl:error] [pid 2551870:tid 2551870] (EAI 2)Name or service not known: [client 144.76.19.72:31998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:12.346291 2026] [ssl:error] [pid 2551870:tid 2551870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:13.012423 2026] [core:error] [pid 2553113:tid 2553113] [client 66.249.64.171:59186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:13.012447 2026] [core:error] [pid 2553113:tid 2553113] [client 66.249.64.171:59186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:15.401322 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:32000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:15.401350 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:15.453861 2026] [ssl:error] [pid 2554821:tid 2554821] (EAI 2)Name or service not known: [client 144.76.19.72:32014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:15.453884 2026] [ssl:error] [pid 2554821:tid 2554821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:18.632503 2026] [ssl:error] [pid 2552928:tid 2552928] (EAI 2)Name or service not known: [client 144.76.19.72:32022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:18.632534 2026] [ssl:error] [pid 2552928:tid 2552928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:18.686718 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:32028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:18.686749 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:19.758647 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 158.158.38.215:21317] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/Requests/error_log
[Thu Jul 30 09:24:20.758333 2026] [authz_core:error] [pid 2553112:tid 2553112] [client 144.172.105.5:42694] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/htmlpurifier/library/HTMLPurifier/AttrDef/error_log
[Thu Jul 30 09:24:21.424592 2026] [core:error] [pid 2548003:tid 2548003] [client 66.249.64.170:64737] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:21.424637 2026] [core:error] [pid 2548003:tid 2548003] [client 66.249.64.170:64737] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:21.741007 2026] [ssl:error] [pid 2551803:tid 2551803] (EAI 2)Name or service not known: [client 144.76.19.72:25990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:21.741042 2026] [ssl:error] [pid 2551803:tid 2551803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:21.780437 2026] [cgi:error] [pid 2546375:tid 2546375] [client 20.104.22.47:61662] AH02811: stderr from /home/familyja/public_html/nc/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:24:21.797813 2026] [ssl:error] [pid 2555021:tid 2555021] (EAI 2)Name or service not known: [client 144.76.19.72:26002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:21.797848 2026] [ssl:error] [pid 2555021:tid 2555021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:22.302038 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 57.141.0.20:59500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:22.302681 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 57.141.0.20:59500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:22.741097 2026] [authz_core:error] [pid 2533669:tid 2533669] [client 57.141.0.4:24334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:22.741719 2026] [authz_core:error] [pid 2533669:tid 2533669] [client 57.141.0.4:24334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:24.337701 2026] [core:error] [pid 2554772:tid 2554772] [client 66.249.66.8:41293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:24.337732 2026] [core:error] [pid 2554772:tid 2554772] [client 66.249.66.8:41293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:24.855678 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:26012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:24.855701 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:24.907108 2026] [ssl:error] [pid 2538567:tid 2538567] (EAI 2)Name or service not known: [client 144.76.19.72:26024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:24.907134 2026] [ssl:error] [pid 2538567:tid 2538567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:27.540664 2026] [authz_core:error] [pid 2555748:tid 2555748] [client 57.141.0.40:44022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:27.541298 2026] [authz_core:error] [pid 2555748:tid 2555748] [client 57.141.0.40:44022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:27.719483 2026] [authz_core:error] [pid 2555638:tid 2555638] [client 57.141.0.13:24476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:27.720121 2026] [authz_core:error] [pid 2555638:tid 2555638] [client 57.141.0.13:24476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:27.968603 2026] [ssl:error] [pid 2554772:tid 2554772] (EAI 2)Name or service not known: [client 144.76.19.72:26040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:27.968637 2026] [ssl:error] [pid 2554772:tid 2554772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:28.024836 2026] [ssl:error] [pid 2555638:tid 2555638] (EAI 2)Name or service not known: [client 144.76.19.72:26050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:28.024871 2026] [ssl:error] [pid 2555638:tid 2555638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:29.018046 2026] [security2:error] [pid 2554822:tid 2554822] [client 110.249.201.201:10192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsKPbV259uF81zrrOykUQAAAAs"]
[Thu Jul 30 09:24:30.542800 2026] [authz_core:error] [pid 2553115:tid 2553115] [client 144.172.105.5:52128] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/htmlpurifier/library/HTMLPurifier/ChildDef/error_log
[Thu Jul 30 09:24:31.080571 2026] [ssl:error] [pid 2553112:tid 2553112] (EAI 2)Name or service not known: [client 144.76.19.72:47300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:31.080608 2026] [ssl:error] [pid 2553112:tid 2553112] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:31.136403 2026] [ssl:error] [pid 2555695:tid 2555695] (EAI 2)Name or service not known: [client 144.76.19.72:47310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:31.136429 2026] [ssl:error] [pid 2555695:tid 2555695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:32.859194 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:32.859307 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:33.145444 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:33.145557 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:33.540993 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:33.541120 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:34.193307 2026] [ssl:error] [pid 2555747:tid 2555747] (EAI 2)Name or service not known: [client 144.76.19.72:47320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:34.193356 2026] [ssl:error] [pid 2555747:tid 2555747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:34.250306 2026] [ssl:error] [pid 2555748:tid 2555748] (EAI 2)Name or service not known: [client 144.76.19.72:47334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:34.250352 2026] [ssl:error] [pid 2555748:tid 2555748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:34.271694 2026] [authz_core:error] [pid 2551870:tid 2551870] [client 57.141.0.20:59700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:34.272318 2026] [authz_core:error] [pid 2551870:tid 2551870] [client 57.141.0.20:59700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:34.834536 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:34.834666 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:35.441590 2026] [core:error] [pid 2555751:tid 2555751] [client 74.248.33.8:27221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:35.441624 2026] [core:error] [pid 2555751:tid 2555751] [client 74.248.33.8:27221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:35.946466 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:35.946587 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:36.233559 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:36.233676 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:36.522482 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:36.522602 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:37.178547 2026] [authz_core:error] [pid 2547912:tid 2547912] [client 144.172.105.5:52000] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/htmlpurifier/library/HTMLPurifier/HTMLModule/error_log
[Thu Jul 30 09:24:37.306096 2026] [ssl:error] [pid 2540903:tid 2540903] (EAI 2)Name or service not known: [client 144.76.19.72:47356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:37.306144 2026] [ssl:error] [pid 2540903:tid 2540903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:37.359302 2026] [ssl:error] [pid 2554973:tid 2554973] (EAI 2)Name or service not known: [client 144.76.19.72:47368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:37.359330 2026] [ssl:error] [pid 2554973:tid 2554973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:37.742696 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:37.742815 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:38.135230 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:38.135354 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:38.405058 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:38.405190 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:38.737908 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:38.738038 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:39.044877 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:39.045001 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:39.359683 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:39.359796 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:40.000125 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:40.000241 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:40.197648 2026] [access_compat:error] [pid 2555748:tid 2555748] [client 74.248.33.8:34125] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/m.php
[Thu Jul 30 09:24:40.198010 2026] [core:error] [pid 2555748:tid 2555748] [client 74.248.33.8:34125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:40.309184 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:40.309303 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:40.425259 2026] [core:error] [pid 2546535:tid 2546535] [client 74.248.33.8:34164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:40.425284 2026] [core:error] [pid 2546535:tid 2546535] [client 74.248.33.8:34164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:40.435614 2026] [ssl:error] [pid 2547912:tid 2547912] (EAI 2)Name or service not known: [client 144.76.19.72:39296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:40.435654 2026] [ssl:error] [pid 2547912:tid 2547912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:40.488497 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:39304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:40.488521 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:40.650981 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:40.651112 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:40.868150 2026] [core:error] [pid 2547912:tid 2547912] [client 74.248.33.8:34126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:40.868173 2026] [core:error] [pid 2547912:tid 2547912] [client 74.248.33.8:34126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:40.941202 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:40.941312 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:41.079809 2026] [authz_core:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01630: client denied by server configuration: /home/theislip/public_html/php.ini
[Thu Jul 30 09:24:41.368946 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:41.369087 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:41.685902 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:41.686021 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:41.957715 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:41.957838 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:42.007175 2026] [security2:error] [pid 2551803:tid 2551803] [client 110.249.201.148:15570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ditchlingfair.ditchfest.com"] [uri "/robots.txt"] [unique_id "amsKSt15OdTwnP3SRL09RQAAAAA"]
[Thu Jul 30 09:24:42.284850 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:42.284976 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:42.304372 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 57.141.0.35:24694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:42.304998 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 57.141.0.35:24694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:42.571450 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:42.571560 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:42.917054 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:42.917214 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:42.998170 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.10:55852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:42.998791 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.10:55852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:43.193238 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:43.193383 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:43.483084 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:43.483192 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:43.540702 2026] [ssl:error] [pid 2540903:tid 2540903] (EAI 2)Name or service not known: [client 144.76.19.72:39318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:43.540742 2026] [ssl:error] [pid 2540903:tid 2540903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:43.592190 2026] [ssl:error] [pid 2548241:tid 2548241] (EAI 2)Name or service not known: [client 144.76.19.72:39334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:43.592213 2026] [ssl:error] [pid 2548241:tid 2548241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:43.786232 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:43.786353 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:44.051255 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:44.051370 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:44.349824 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:44.349934 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:44.654954 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:44.655073 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:44.940817 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:44.940928 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:45.210510 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:45.210630 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:45.542360 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:45.542470 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:45.846899 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:45.847015 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:46.141754 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:46.141877 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:46.414088 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:46.414234 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:46.645842 2026] [ssl:error] [pid 2554973:tid 2554973] (EAI 2)Name or service not known: [client 144.76.19.72:39344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:46.645874 2026] [ssl:error] [pid 2554973:tid 2554973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:46.700573 2026] [ssl:error] [pid 2554772:tid 2554772] (EAI 2)Name or service not known: [client 144.76.19.72:39346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:46.700612 2026] [ssl:error] [pid 2554772:tid 2554772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:46.772954 2026] [access_compat:error] [pid 2546535:tid 2546535] [client 74.248.33.8:28061] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mini.php
[Thu Jul 30 09:24:46.791190 2026] [core:error] [pid 2546535:tid 2546535] [client 74.248.33.8:28061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:46.795154 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:46.795282 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:47.358440 2026] [authz_core:error] [pid 2554772:tid 2554772] [client 57.141.0.4:21410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:47.359139 2026] [authz_core:error] [pid 2554772:tid 2554772] [client 57.141.0.4:21410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:47.442849 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 52.167.144.23:62932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:47.443504 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 52.167.144.23:62932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:47.532241 2026] [access_compat:error] [pid 2546535:tid 2546535] [client 74.248.33.8:9021] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aa.php
[Thu Jul 30 09:24:47.532591 2026] [core:error] [pid 2546535:tid 2546535] [client 74.248.33.8:9021] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:47.955841 2026] [core:error] [pid 2555021:tid 2555021] (13)Permission denied: [client 216.73.216.199:1746] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/validate
[Thu Jul 30 09:24:49.284828 2026] [core:error] [pid 2555748:tid 2555748] [client 66.249.64.170:35873] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:49.284865 2026] [core:error] [pid 2555748:tid 2555748] [client 66.249.64.170:35873] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:49.341809 2026] [authz_core:error] [pid 2552677:tid 2552677] [client 144.172.105.5:41734] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/htmlpurifier/library/HTMLPurifier/Lexer/error_log
[Thu Jul 30 09:24:49.647733 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:49.647849 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:49.755090 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:60146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:49.755124 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:49.814636 2026] [ssl:error] [pid 2545134:tid 2545134] (EAI 2)Name or service not known: [client 144.76.19.72:60150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:49.814661 2026] [ssl:error] [pid 2545134:tid 2545134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:50.902625 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:50.902737 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:52.514208 2026] [authz_core:error] [pid 2551870:tid 2551870] [client 144.172.105.5:41790] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/htmlpurifier/library/HTMLPurifier/Strategy/error_log
[Thu Jul 30 09:24:52.661478 2026] [access_compat:error] [pid 2544412:tid 2544412] [client 74.248.33.8:28274] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/w.php
[Thu Jul 30 09:24:52.661851 2026] [core:error] [pid 2544412:tid 2544412] [client 74.248.33.8:28274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:52.868212 2026] [ssl:error] [pid 2555748:tid 2555748] (EAI 2)Name or service not known: [client 144.76.19.72:60152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:52.868250 2026] [ssl:error] [pid 2555748:tid 2555748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:52.923424 2026] [ssl:error] [pid 2544412:tid 2544412] (EAI 2)Name or service not known: [client 144.76.19.72:60164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:52.923452 2026] [ssl:error] [pid 2544412:tid 2544412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:52.969802 2026] [core:error] [pid 2557420:tid 2557420] [client 74.248.33.8:51945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:52.969859 2026] [core:error] [pid 2557420:tid 2557420] [client 74.248.33.8:51945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:54.438973 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:54.439101 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:54.501437 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 57.141.0.11:52032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:24:54.502081 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 57.141.0.11:52032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:24:54.549963 2026] [ssl:error] [pid 2548004:tid 2548004] (70014)End of file found: [client 216.73.216.199:52446] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:24:55.277872 2026] [access_compat:error] [pid 2555021:tid 2555021] [client 74.248.33.8:28245] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/404.php
[Thu Jul 30 09:24:55.278245 2026] [core:error] [pid 2555021:tid 2555021] [client 74.248.33.8:28245] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:55.475489 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:55.475617 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:55.756723 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:55.756839 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:55.979926 2026] [ssl:error] [pid 2552516:tid 2552516] (EAI 2)Name or service not known: [client 144.76.19.72:60170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:55.979961 2026] [ssl:error] [pid 2552516:tid 2552516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:56.034977 2026] [ssl:error] [pid 2548319:tid 2548319] (EAI 2)Name or service not known: [client 144.76.19.72:60172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:56.035002 2026] [ssl:error] [pid 2548319:tid 2548319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:56.048192 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:56.048318 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:56.334571 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:56.334697 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:56.422857 2026] [security2:error] [pid 2548241:tid 2548241] [client 114.119.132.171:65087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579132800/request_format~html"] [unique_id "amsKWFe7Hj_xcjQ2Rw5qxAAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579132800/request_format~html/cat_ids~30
[Thu Jul 30 09:24:56.575937 2026] [access_compat:error] [pid 2545134:tid 2545134] [client 74.248.33.8:22263] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/init.php
[Thu Jul 30 09:24:56.576304 2026] [core:error] [pid 2545134:tid 2545134] [client 74.248.33.8:22263] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:56.645866 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:56.645986 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:56.954189 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:56.954311 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:57.035675 2026] [access_compat:error] [pid 2552928:tid 2552928] [client 121.229.156.91:38918] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/sherlock-holmes
[Thu Jul 30 09:24:57.035775 2026] [access_compat:error] [pid 2552928:tid 2552928] [client 121.229.156.91:38918] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:24:57.103210 2026] [security2:error] [pid 2545134:tid 2545134] [client 185.191.171.14:51238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10768.0/prev_next,prev.html"] [unique_id "amsKWfX-00_RcZsrXGX5mgAAABQ"]
[Thu Jul 30 09:24:57.272512 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:57.272632 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:57.596616 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:57.596734 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:57.682813 2026] [security2:error] [pid 2557661:tid 2557661] [client 114.119.132.171:65101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579132800/request_format~html"] [unique_id "amsKWQk7SsL8zgp6jS09pwAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579132800/request_format~html/cat_ids~30
[Thu Jul 30 09:24:57.899135 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:57.899268 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:57.977495 2026] [access_compat:error] [pid 2547912:tid 2547912] [client 74.248.33.8:28066] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/adminfuns.php
[Thu Jul 30 09:24:57.977841 2026] [core:error] [pid 2547912:tid 2547912] [client 74.248.33.8:28066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:24:58.245685 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:58.245800 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:58.507596 2026] [authz_core:error] [pid 2557757:tid 2557757] [client 144.172.105.5:34210] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/htmlpurifier/library/HTMLPurifier/URIFilter/error_log
[Thu Jul 30 09:24:58.518888 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:24:58.519015 2026] [cgi:error] [pid 2553052:tid 2553052] [client 20.9.4.9:26884] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:24:59.091335 2026] [ssl:error] [pid 2557757:tid 2557757] (EAI 2)Name or service not known: [client 144.76.19.72:60188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:59.091373 2026] [ssl:error] [pid 2557757:tid 2557757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:59.144844 2026] [ssl:error] [pid 2557756:tid 2557756] (EAI 2)Name or service not known: [client 144.76.19.72:60192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:24:59.144873 2026] [ssl:error] [pid 2557756:tid 2557756] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:24:59.181838 2026] [access_compat:error] [pid 2547912:tid 2547912] [client 74.248.33.8:28273] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file.php
[Thu Jul 30 09:24:59.182183 2026] [core:error] [pid 2547912:tid 2547912] [client 74.248.33.8:28273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:25:01.340060 2026] [authz_core:error] [pid 2555695:tid 2555695] [client 57.141.0.17:32370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:25:01.340706 2026] [authz_core:error] [pid 2555695:tid 2555695] [client 57.141.0.17:32370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:25:02.270558 2026] [ssl:error] [pid 2552928:tid 2552928] (EAI 2)Name or service not known: [client 144.76.19.72:50788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:02.270599 2026] [ssl:error] [pid 2552928:tid 2552928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:02.324478 2026] [ssl:error] [pid 2554822:tid 2554822] (EAI 2)Name or service not known: [client 144.76.19.72:50790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:02.324517 2026] [ssl:error] [pid 2554822:tid 2554822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:02.573897 2026] [security2:error] [pid 2558048:tid 2558048] [client 185.191.171.3:21744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.1710.html"] [unique_id "amsKXqGVpkR_LhdDXE25TAAAADE"]
[Thu Jul 30 09:25:03.594014 2026] [access_compat:error] [pid 2547448:tid 2547448] [client 20.104.16.169:26986] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/edd/
[Thu Jul 30 09:25:03.596033 2026] [access_compat:error] [pid 2547448:tid 2547448] [client 20.104.16.169:26986] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:25:03.596093 2026] [access_compat:error] [pid 2547448:tid 2547448] [client 20.104.16.169:26986] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 09:25:04.934789 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:04.934927 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:05.233649 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:05.233764 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:05.377685 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:50794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:05.377716 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:05.431761 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:50804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:05.431787 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:05.581632 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:05.581756 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:05.905164 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:05.905282 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:06.223381 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:06.223493 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:06.304991 2026] [authz_core:error] [pid 2557420:tid 2557420] [client 66.249.66.35:49205] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:25:06.307673 2026] [authz_core:error] [pid 2557420:tid 2557420] [client 66.249.66.35:49205] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:25:06.532407 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:06.532530 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:06.686157 2026] [authz_core:error] [pid 2546375:tid 2546375] [client 57.141.0.3:53862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:25:06.686778 2026] [authz_core:error] [pid 2546375:tid 2546375] [client 57.141.0.3:53862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:25:06.810655 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:06.810769 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:07.270992 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_cache.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYQAAADM"]
[Thu Jul 30 09:25:07.271309 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_cache.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYQAAADM"]
[Thu Jul 30 09:25:07.271796 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_cache.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYQAAADM"]
[Thu Jul 30 09:25:07.290147 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:07.290260 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:07.406442 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_fetch.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYgAAADM"]
[Thu Jul 30 09:25:07.406793 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_fetch.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYgAAADM"]
[Thu Jul 30 09:25:07.407288 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_fetch.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYgAAADM"]
[Thu Jul 30 09:25:07.536742 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_parse.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYwAAADM"]
[Thu Jul 30 09:25:07.537111 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_parse.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYwAAADM"]
[Thu Jul 30 09:25:07.537641 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_parse.inc"] [unique_id "amsKY6ioGP9-TfANFmjqYwAAADM"]
[Thu Jul 30 09:25:07.573158 2026] [security2:error] [pid 2558186:tid 2558186] [client 185.191.171.2:38848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/tony-vlachos-trump"] [unique_id "amsKY2fBsOLXG7tKrChs2QAAADI"]
[Thu Jul 30 09:25:07.667692 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_utils.inc"] [unique_id "amsKY6ioGP9-TfANFmjqZAAAADM"]
[Thu Jul 30 09:25:07.668049 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_utils.inc"] [unique_id "amsKY6ioGP9-TfANFmjqZAAAADM"]
[Thu Jul 30 09:25:07.668551 2026] [security2:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/include/magpierss/rss_utils.inc"] [unique_id "amsKY6ioGP9-TfANFmjqZAAAADM"]
[Thu Jul 30 09:25:07.833097 2026] [security2:error] [pid 2540903:tid 2540903] [client 85.208.98.23:44738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsKY5Lf6bQG3Q2q_mFaqgAAADQ"]
[Thu Jul 30 09:25:08.442520 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:08.442835 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:08.468670 2026] [authz_core:error] [pid 2558187:tid 2558187] [client 144.172.105.5:34342] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/nusoap/error_log
[Thu Jul 30 09:25:08.486439 2026] [ssl:error] [pid 2551869:tid 2551869] (EAI 2)Name or service not known: [client 144.76.19.72:50818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:08.486463 2026] [ssl:error] [pid 2551869:tid 2551869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:08.540828 2026] [ssl:error] [pid 2558186:tid 2558186] (EAI 2)Name or service not known: [client 144.76.19.72:50820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:08.540862 2026] [ssl:error] [pid 2558186:tid 2558186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:08.742908 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:08.743025 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:09.033940 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:09.034055 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:09.363035 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:09.363161 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:09.647214 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:09.647322 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:09.921365 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:09.921482 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:10.213000 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:10.213134 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:10.503976 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:10.504111 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:11.611408 2026] [ssl:error] [pid 2558679:tid 2558679] (EAI 2)Name or service not known: [client 144.76.19.72:56488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:11.611491 2026] [ssl:error] [pid 2558679:tid 2558679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:11.666679 2026] [ssl:error] [pid 2546375:tid 2546375] (EAI 2)Name or service not known: [client 144.76.19.72:56494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:11.666727 2026] [ssl:error] [pid 2546375:tid 2546375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:12.368420 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:12.368535 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:12.708397 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:12.708515 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:12.998201 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:12.998330 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:13.230291 2026] [authz_core:error] [pid 2555748:tid 2555748] [client 144.172.105.5:44870] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/php_writeexcel/error_log
[Thu Jul 30 09:25:13.701124 2026] [access_compat:error] [pid 2554026:tid 2554026] [client 20.104.16.169:2050] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 09:25:13.701193 2026] [access_compat:error] [pid 2554026:tid 2554026] [client 20.104.16.169:2050] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 09:25:13.704038 2026] [access_compat:error] [pid 2554026:tid 2554026] [client 20.104.16.169:2050] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 09:25:13.705200 2026] [access_compat:error] [pid 2554026:tid 2554026] [client 20.104.16.169:2050] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 09:25:14.721356 2026] [ssl:error] [pid 2545134:tid 2545134] (EAI 2)Name or service not known: [client 144.76.19.72:56510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:14.721388 2026] [ssl:error] [pid 2545134:tid 2545134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:14.777500 2026] [ssl:error] [pid 2553115:tid 2553115] (EAI 2)Name or service not known: [client 144.76.19.72:56516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:14.777571 2026] [ssl:error] [pid 2553115:tid 2553115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:14.917316 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/IXR/error_log
[Thu Jul 30 09:25:16.935654 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:16.935780 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:17.231590 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:17.231715 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:17.503709 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:17.503823 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:17.806590 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:17.806703 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:17.832538 2026] [ssl:error] [pid 2558187:tid 2558187] (EAI 2)Name or service not known: [client 144.76.19.72:56518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:17.832574 2026] [ssl:error] [pid 2558187:tid 2558187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:17.888802 2026] [ssl:error] [pid 2549729:tid 2549729] (EAI 2)Name or service not known: [client 144.76.19.72:56524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:17.888830 2026] [ssl:error] [pid 2549729:tid 2549729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:18.088105 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:18.088217 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:18.340868 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 144.172.105.5:59164] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/tcpdf/error_log
[Thu Jul 30 09:25:18.366896 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:18.367015 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:18.654494 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:18.654609 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:18.953142 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:18.953255 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:19.229657 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:19.229768 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:19.565828 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:19.565942 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:19.796026 2026] [ssl:error] [pid 2554772:tid 2554772] (70014)End of file found: [client 216.73.216.199:4970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:25:19.837004 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:19.837130 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:20.155641 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:20.155754 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:20.245299 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 09:25:20.442421 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:20.442536 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:20.721949 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:20.722061 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:20.942148 2026] [ssl:error] [pid 2546375:tid 2546375] (EAI 2)Name or service not known: [client 144.76.19.72:62016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:20.942195 2026] [ssl:error] [pid 2546375:tid 2546375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:20.998632 2026] [ssl:error] [pid 2557759:tid 2557759] (EAI 2)Name or service not known: [client 144.76.19.72:62030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:20.998663 2026] [ssl:error] [pid 2557759:tid 2557759] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:21.003334 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:21.003447 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:21.145756 2026] [authz_core:error] [pid 2551803:tid 2551803] [client 144.172.105.5:59220] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/tcpdf/barcode/error_log
[Thu Jul 30 09:25:21.277314 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:21.277428 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:21.558249 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:21.558360 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:21.833609 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:21.833719 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:22.125784 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:22.125897 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:22.425008 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:22.425128 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:22.715741 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 09:25:22.715871 2026] [cgi:error] [pid 2557756:tid 2557756] [client 20.9.4.9:26953] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 09:25:23.348673 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 09:25:23.464909 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 09:25:24.054549 2026] [ssl:error] [pid 2548004:tid 2548004] (EAI 2)Name or service not known: [client 144.76.19.72:62032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:24.054589 2026] [ssl:error] [pid 2548004:tid 2548004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:24.110382 2026] [ssl:error] [pid 2555695:tid 2555695] (EAI 2)Name or service not known: [client 144.76.19.72:62046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:24.110417 2026] [ssl:error] [pid 2555695:tid 2555695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:26.810386 2026] [security2:error] [pid 2551803:tid 2551803] [client 185.191.171.6:47450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spamp.co.uk"] [uri "/robots.txt"] [unique_id "amsKdt15OdTwnP3SRL09xwAAAAA"]
[Thu Jul 30 09:25:27.068596 2026] [security2:error] [pid 2554026:tid 2554026] [client 185.191.171.2:24064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "amsKd0akFptUaxxO0A-YCQAAAA4"]
[Thu Jul 30 09:25:27.203209 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:62054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:27.203239 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:27.258963 2026] [ssl:error] [pid 2552516:tid 2552516] (EAI 2)Name or service not known: [client 144.76.19.72:62056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:27.258987 2026] [ssl:error] [pid 2552516:tid 2552516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:29.430951 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 144.172.105.5:59278] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/tcpdf/fonts/error_log
[Thu Jul 30 09:25:30.351577 2026] [ssl:error] [pid 2557662:tid 2557662] (EAI 2)Name or service not known: [client 144.76.19.72:39282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:30.351625 2026] [ssl:error] [pid 2557662:tid 2557662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:30.405256 2026] [ssl:error] [pid 2555638:tid 2555638] (EAI 2)Name or service not known: [client 144.76.19.72:39292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:30.405280 2026] [ssl:error] [pid 2555638:tid 2555638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:31.935145 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:25:33.459267 2026] [ssl:error] [pid 2548319:tid 2548319] (EAI 2)Name or service not known: [client 144.76.19.72:39298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:33.459304 2026] [ssl:error] [pid 2548319:tid 2548319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:33.512983 2026] [ssl:error] [pid 2548003:tid 2548003] (EAI 2)Name or service not known: [client 144.76.19.72:39306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:33.513012 2026] [ssl:error] [pid 2548003:tid 2548003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:33.794798 2026] [security2:error] [pid 2554026:tid 2554026] [client 170.106.197.109:50110] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amsKfUakFptUaxxO0A-YDgAAAA4"]
[Thu Jul 30 09:25:34.638403 2026] [security2:error] [pid 2548319:tid 2548319] [client 170.106.197.109:43230] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsKftKcETKhuQwEqcjfEQAAACo"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:25:34.640297 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 170.106.197.109:43230] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:25:34.643135 2026] [authz_core:error] [pid 2548319:tid 2548319] [client 170.106.197.109:43230] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 09:25:34.709863 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/html-api/error_log
[Thu Jul 30 09:25:35.044551 2026] [security2:error] [pid 2554822:tid 2554822] [client 85.208.98.29:35486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/h&m-international-trainee-program-k.html"] [unique_id "amsKf7V259uF81zrrOyk1gAAAAs"]
[Thu Jul 30 09:25:36.039717 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 09:25:36.570020 2026] [ssl:error] [pid 2548319:tid 2548319] (EAI 2)Name or service not known: [client 144.76.19.72:39320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:36.570047 2026] [ssl:error] [pid 2548319:tid 2548319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:36.623095 2026] [ssl:error] [pid 2545134:tid 2545134] (EAI 2)Name or service not known: [client 144.76.19.72:39332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:36.623117 2026] [ssl:error] [pid 2545134:tid 2545134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:36.706561 2026] [security2:error] [pid 2547448:tid 2547448] [client 43.130.174.37:53050] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "webstersltd.com"] [uri "/"] [unique_id "amsKgJPBAO23C6MAa3YaOQAAAAo"]
[Thu Jul 30 09:25:36.938042 2026] [security2:error] [pid 2554822:tid 2554822] [client 62.182.86.17:44414] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsKgLV259uF81zrrOyk2AAAAAs"]
[Thu Jul 30 09:25:37.637674 2026] [security2:error] [pid 2558679:tid 2558679] [client 43.130.174.37:50094] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "webstersltd.com"] [uri "/"] [unique_id "amsKgXqDHX_nxkKdv2okwQAAABw"], referer: http://webstersltd.com
[Thu Jul 30 09:25:38.177512 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 66.249.66.34:63629] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:25:38.180354 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 66.249.66.34:63629] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:25:39.151815 2026] [security2:error] [pid 2557759:tid 2557759] [client 43.130.110.130:40010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnstopwatches.com"] [uri "/"] [unique_id "amsKg7qfVXKL9MOnOmj74wAAADA"]
[Thu Jul 30 09:25:39.562152 2026] [lsapi:warn] [pid 2549677:tid 2549677] [client 45.158.164.139:42194] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:25:39.562197 2026] [lsapi:warn] [pid 2549677:tid 2549677] [client 45.158.164.139:42194] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:25:39.564630 2026] [lsapi:warn] [pid 2552516:tid 2552516] [client 89.197.16.98:36745] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:25:39.564670 2026] [lsapi:warn] [pid 2552516:tid 2552516] [client 89.197.16.98:36745] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:25:39.703757 2026] [ssl:error] [pid 2557661:tid 2557661] (EAI 2)Name or service not known: [client 144.76.19.72:42880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:39.703792 2026] [ssl:error] [pid 2557661:tid 2557661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:39.757758 2026] [ssl:error] [pid 2551869:tid 2551869] (EAI 2)Name or service not known: [client 144.76.19.72:42894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:39.757801 2026] [ssl:error] [pid 2551869:tid 2551869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:39.838846 2026] [security2:error] [pid 2540903:tid 2540903] [client 94.154.43.184:39126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKg5Lf6bQG3Q2q_mFasgAAADQ"]
[Thu Jul 30 09:25:39.839009 2026] [security2:error] [pid 2540903:tid 2540903] [client 94.154.43.184:39126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKg5Lf6bQG3Q2q_mFasgAAADQ"]
[Thu Jul 30 09:25:39.946273 2026] [security2:error] [pid 2555638:tid 2555638] [client 94.154.43.188:40424] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKg9jyJLy8jTMX-djB6AAAAAk"]
[Thu Jul 30 09:25:39.946516 2026] [security2:error] [pid 2555638:tid 2555638] [client 94.154.43.188:40424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKg9jyJLy8jTMX-djB6AAAAAk"]
[Thu Jul 30 09:25:40.054316 2026] [security2:error] [pid 2548319:tid 2548319] [client 85.208.96.207:47674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/11/05/obama-november-4th-2008/"] [unique_id "amsKhNKcETKhuQwEqcjfEwAAACo"]
[Thu Jul 30 09:25:40.144541 2026] [authz_core:error] [pid 2557759:tid 2557759] [client 57.141.0.1:56282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:25:40.145244 2026] [authz_core:error] [pid 2557759:tid 2557759] [client 57.141.0.1:56282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:25:40.384498 2026] [access_compat:error] [pid 2547448:tid 2547448] [client 45.158.164.139:42198] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:25:40.580212 2026] [security2:error] [pid 2552516:tid 2552516] [client 94.154.43.188:40454] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.dev.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKhELYpj82upi1rARfRAAAABc"]
[Thu Jul 30 09:25:40.580385 2026] [security2:error] [pid 2552516:tid 2552516] [client 94.154.43.188:40454] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dev.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKhELYpj82upi1rARfRAAAABc"]
[Thu Jul 30 09:25:40.580743 2026] [core:error] [pid 2552516:tid 2552516] [client 94.154.43.188:40454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:25:40.580864 2026] [security2:error] [pid 2552516:tid 2552516] [client 94.154.43.188:40454] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.dev.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKhELYpj82upi1rARfRAAAABc"]
[Thu Jul 30 09:25:40.961935 2026] [security2:error] [pid 2540903:tid 2540903] [client 94.154.43.184:39126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "the-pryors.co.uk"] [uri "/index.php"] [unique_id "amsKg5Lf6bQG3Q2q_mFasgAAADQ"]
[Thu Jul 30 09:25:41.144508 2026] [security2:error] [pid 2557661:tid 2557661] [client 94.154.43.187:38716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKhQk7SsL8zgp6jS0-FQAAAB0"]
[Thu Jul 30 09:25:41.144785 2026] [security2:error] [pid 2557661:tid 2557661] [client 94.154.43.187:38716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKhQk7SsL8zgp6jS0-FQAAAB0"]
[Thu Jul 30 09:25:41.645216 2026] [security2:error] [pid 2557661:tid 2557661] [client 94.154.43.187:38716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.the-pryors.co.uk"] [uri "/index.php"] [unique_id "amsKhQk7SsL8zgp6jS0-FQAAAB0"]
[Thu Jul 30 09:25:42.812633 2026] [ssl:error] [pid 2559852:tid 2559852] (EAI 2)Name or service not known: [client 144.76.19.72:42906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:42.812668 2026] [ssl:error] [pid 2559852:tid 2559852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:42.867626 2026] [ssl:error] [pid 2551869:tid 2551869] (EAI 2)Name or service not known: [client 144.76.19.72:42908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:42.867665 2026] [ssl:error] [pid 2551869:tid 2551869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:43.932913 2026] [core:crit] [pid 2559852:tid 2559852] (13)Permission denied: [client 169.58.80.213:45874] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:25:44.264339 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 09:25:45.925141 2026] [ssl:error] [pid 2558187:tid 2558187] (EAI 2)Name or service not known: [client 144.76.19.72:42920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:45.925167 2026] [ssl:error] [pid 2558187:tid 2558187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:45.981510 2026] [ssl:error] [pid 2559852:tid 2559852] (EAI 2)Name or service not known: [client 144.76.19.72:42936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:45.981538 2026] [ssl:error] [pid 2559852:tid 2559852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:47.132798 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 09:25:47.134601 2026] [access_compat:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 09:25:47.136905 2026] [access_compat:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 09:25:47.139711 2026] [access_compat:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 09:25:47.143102 2026] [access_compat:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 09:25:47.143154 2026] [access_compat:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 09:25:48.075568 2026] [security2:error] [pid 2553974:tid 2553974] [client 129.159.56.14:35706] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.borovetsexpress.banskoexpress.com"] [uri "/.env"] [unique_id "amsKjPMyyrobjVWUoxs2AgAAAAU"]
[Thu Jul 30 09:25:48.075766 2026] [security2:error] [pid 2553974:tid 2553974] [client 129.159.56.14:35706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.borovetsexpress.banskoexpress.com"] [uri "/.env"] [unique_id "amsKjPMyyrobjVWUoxs2AgAAAAU"]
[Thu Jul 30 09:25:48.638161 2026] [security2:error] [pid 2553974:tid 2553974] [client 129.159.56.14:35706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.borovetsexpress.banskoexpress.com"] [uri "/index.php"] [unique_id "amsKjPMyyrobjVWUoxs2AgAAAAU"]
[Thu Jul 30 09:25:48.902442 2026] [security2:error] [pid 2529793:tid 2529793] [client 43.162.103.213:36164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.com"] [uri "/"] [unique_id "amsKjEuNP7pkBEv3DIqkcAAAACY"]
[Thu Jul 30 09:25:49.038559 2026] [ssl:error] [pid 2554026:tid 2554026] (EAI 2)Name or service not known: [client 144.76.19.72:42938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:49.038622 2026] [ssl:error] [pid 2554026:tid 2554026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:49.092047 2026] [ssl:error] [pid 2552516:tid 2552516] (EAI 2)Name or service not known: [client 144.76.19.72:42950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:49.092089 2026] [ssl:error] [pid 2552516:tid 2552516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:49.744587 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 172.202.44.182:22669] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 09:25:50.652893 2026] [security2:error] [pid 2555638:tid 2555638] [client 94.154.43.188:40424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.dev1.the-pryors.co.uk"] [uri "/index.php"] [unique_id "amsKg9jyJLy8jTMX-djB6AAAAAk"]
[Thu Jul 30 09:25:50.803359 2026] [security2:error] [pid 2547448:tid 2547448] [client 94.154.43.177:29144] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKjpPBAO23C6MAa3YaPwAAAAo"]
[Thu Jul 30 09:25:50.803527 2026] [security2:error] [pid 2547448:tid 2547448] [client 94.154.43.177:29144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsKjpPBAO23C6MAa3YaPwAAAAo"]
[Thu Jul 30 09:25:51.146595 2026] [security2:error] [pid 2547448:tid 2547448] [client 94.154.43.177:29144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dev1.the-pryors.co.uk"] [uri "/index.php"] [unique_id "amsKjpPBAO23C6MAa3YaPwAAAAo"]
[Thu Jul 30 09:25:52.150847 2026] [ssl:error] [pid 2558186:tid 2558186] (EAI 2)Name or service not known: [client 144.76.19.72:34002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:52.150880 2026] [ssl:error] [pid 2558186:tid 2558186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:52.205463 2026] [ssl:error] [pid 2554026:tid 2554026] (EAI 2)Name or service not known: [client 144.76.19.72:34006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:52.205487 2026] [ssl:error] [pid 2554026:tid 2554026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:56.507898 2026] [ssl:error] [pid 2529845:tid 2529845] (EAI 2)Name or service not known: [client 144.76.19.72:34010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:56.507940 2026] [ssl:error] [pid 2529845:tid 2529845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:56.558151 2026] [security2:error] [pid 2529845:tid 2529845] [client 94.154.43.188:17134] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "islay.me"] [uri "/.env"] [unique_id "amsKlDnz0V0HyYIA5AhrbgAAAC0"]
[Thu Jul 30 09:25:56.558417 2026] [security2:error] [pid 2529845:tid 2529845] [client 94.154.43.188:17134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "islay.me"] [uri "/.env"] [unique_id "amsKlDnz0V0HyYIA5AhrbgAAAC0"]
[Thu Jul 30 09:25:56.558689 2026] [security2:error] [pid 2529845:tid 2529845] [client 94.154.43.188:17134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "islay.me"] [uri "/.env"] [unique_id "amsKlDnz0V0HyYIA5AhrbgAAAC0"]
[Thu Jul 30 09:25:56.662947 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.39:33562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:25:56.663599 2026] [authz_core:error] [pid 2529845:tid 2529845] [client 57.141.0.39:33562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:25:56.781489 2026] [ssl:error] [pid 2561001:tid 2561001] (EAI 2)Name or service not known: [client 144.76.19.72:34022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:56.781531 2026] [ssl:error] [pid 2561001:tid 2561001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:59.664400 2026] [ssl:error] [pid 2552928:tid 2552928] (70014)End of file found: [client 216.73.216.199:18761] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:25:59.897902 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:27348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:59.897941 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:25:59.954342 2026] [ssl:error] [pid 2561130:tid 2561130] (EAI 2)Name or service not known: [client 144.76.19.72:27352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:25:59.954381 2026] [ssl:error] [pid 2561130:tid 2561130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:00.055760 2026] [authz_core:error] [pid 2555638:tid 2555638] [client 57.141.0.31:64480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:00.056411 2026] [authz_core:error] [pid 2555638:tid 2555638] [client 57.141.0.31:64480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:00.370742 2026] [authz_core:error] [pid 2561130:tid 2561130] [client 57.141.0.71:28308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:00.371385 2026] [authz_core:error] [pid 2561130:tid 2561130] [client 57.141.0.71:28308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:03.012041 2026] [security2:error] [pid 2553052:tid 2553052] [client 175.27.136.83:56710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-ganymede.com"] [uri "/"] [unique_id "amsKmwLnUSRHM4vjb6m5rgAAABs"]
[Thu Jul 30 09:26:03.014503 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:27360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:03.014543 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:03.119851 2026] [ssl:error] [pid 2529793:tid 2529793] (EAI 2)Name or service not known: [client 144.76.19.72:27366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:03.119877 2026] [ssl:error] [pid 2529793:tid 2529793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:04.897913 2026] [authz_core:error] [pid 2561157:tid 2561157] [client 57.141.0.47:61990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:04.898543 2026] [authz_core:error] [pid 2561157:tid 2561157] [client 57.141.0.47:61990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:05.656519 2026] [ssl:error] [pid 2561156:tid 2561156] (70014)End of file found: [client 216.73.216.199:25662] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:26:06.172928 2026] [ssl:error] [pid 2557662:tid 2557662] (EAI 2)Name or service not known: [client 144.76.19.72:27372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:06.172955 2026] [ssl:error] [pid 2557662:tid 2557662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:06.229533 2026] [ssl:error] [pid 2529845:tid 2529845] (EAI 2)Name or service not known: [client 144.76.19.72:27386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:06.229563 2026] [ssl:error] [pid 2529845:tid 2529845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:08.035188 2026] [security2:error] [pid 2548003:tid 2548003] [client 185.191.171.4:34754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/funny-response-to-what's-your-address"] [unique_id "amsKoJ8PIMA-JxAi8YD7IAAAAB4"]
[Thu Jul 30 09:26:09.281407 2026] [ssl:error] [pid 2551870:tid 2551870] (EAI 2)Name or service not known: [client 144.76.19.72:27398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:09.281441 2026] [ssl:error] [pid 2551870:tid 2551870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:09.337866 2026] [ssl:error] [pid 2548003:tid 2548003] (EAI 2)Name or service not known: [client 144.76.19.72:27404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:09.337893 2026] [ssl:error] [pid 2548003:tid 2548003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:09.838142 2026] [authz_core:error] [pid 2557759:tid 2557759] [client 82.102.18.190:40858] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 09:26:10.168753 2026] [authz_core:error] [pid 2561383:tid 2561383] [client 144.172.105.5:47814] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/tcpdf/templates/error_log
[Thu Jul 30 09:26:10.843451 2026] [authz_core:error] [pid 2548241:tid 2548241] [client 144.172.105.5:47820] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/include/utils/error_log
[Thu Jul 30 09:26:12.394863 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:50602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:12.394899 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:12.451103 2026] [ssl:error] [pid 2557758:tid 2557758] (EAI 2)Name or service not known: [client 144.76.19.72:50616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:12.451138 2026] [ssl:error] [pid 2557758:tid 2557758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:13.247187 2026] [core:error] [pid 2561154:tid 2561154] [client 66.249.64.171:63072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:13.247214 2026] [core:error] [pid 2561154:tid 2561154] [client 66.249.64.171:63072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:14.480761 2026] [authz_core:error] [pid 2557759:tid 2557759] [client 57.141.0.38:33632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:14.481420 2026] [authz_core:error] [pid 2557759:tid 2557759] [client 57.141.0.38:33632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:15.510502 2026] [ssl:error] [pid 2561001:tid 2561001] (EAI 2)Name or service not known: [client 144.76.19.72:50620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:15.510537 2026] [ssl:error] [pid 2561001:tid 2561001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:15.563795 2026] [ssl:error] [pid 2546375:tid 2546375] (EAI 2)Name or service not known: [client 144.76.19.72:50624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:15.563845 2026] [ssl:error] [pid 2546375:tid 2546375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:15.952322 2026] [core:error] [pid 2561155:tid 2561155] (13)Permission denied: [client 216.73.216.199:45266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-1k/objects_partial
[Thu Jul 30 09:26:17.781050 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 144.172.105.5:50318] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/jscalendar/error_log
[Thu Jul 30 09:26:18.426953 2026] [access_compat:error] [pid 2553114:tid 2553114] [client 144.172.105.5:50318] AH01797: client denied by server configuration: /home/winterb/public_html/vtigercrm/kcfinder/doc/
[Thu Jul 30 09:26:18.430433 2026] [access_compat:error] [pid 2553114:tid 2553114] [client 144.172.105.5:50318] AH01797: client denied by server configuration: /home/winterb/public_html/vtigercrm/kcfinder/core/
[Thu Jul 30 09:26:18.430505 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 144.172.105.5:50318] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/kcfinder/error_log
[Thu Jul 30 09:26:18.434056 2026] [access_compat:error] [pid 2553114:tid 2553114] [client 144.172.105.5:50318] AH01797: client denied by server configuration: /home/winterb/public_html/vtigercrm/kcfinder/tpl/
[Thu Jul 30 09:26:18.439541 2026] [access_compat:error] [pid 2553114:tid 2553114] [client 144.172.105.5:50318] AH01797: client denied by server configuration: /home/winterb/public_html/vtigercrm/kcfinder/lib/
[Thu Jul 30 09:26:18.441687 2026] [access_compat:error] [pid 2553114:tid 2553114] [client 144.172.105.5:50318] AH01797: client denied by server configuration: /home/winterb/public_html/vtigercrm/kcfinder/lang/
[Thu Jul 30 09:26:18.621833 2026] [ssl:error] [pid 2552928:tid 2552928] (EAI 2)Name or service not known: [client 144.76.19.72:50640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:18.621882 2026] [ssl:error] [pid 2552928:tid 2552928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:18.677225 2026] [ssl:error] [pid 2557662:tid 2557662] (EAI 2)Name or service not known: [client 144.76.19.72:50646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:18.677261 2026] [ssl:error] [pid 2557662:tid 2557662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:20.070447 2026] [security2:error] [pid 2554026:tid 2554026] [client 114.119.157.183:26913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579132800/cat_ids~30,17/request_format~html"] [unique_id "amsKrEakFptUaxxO0A-YhAAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579132800/request_format~html/cat_ids~30
[Thu Jul 30 09:26:20.526922 2026] [authz_core:error] [pid 2561383:tid 2561383] [client 66.249.66.35:51956] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:26:20.529611 2026] [authz_core:error] [pid 2561383:tid 2561383] [client 66.249.66.35:51956] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:26:20.919429 2026] [core:error] [pid 2555638:tid 2555638] [client 66.249.66.3:45833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:20.919460 2026] [core:error] [pid 2555638:tid 2555638] [client 66.249.66.3:45833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:20.920464 2026] [core:error] [pid 2552928:tid 2552928] [client 66.249.66.169:40286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:20.920495 2026] [core:error] [pid 2552928:tid 2552928] [client 66.249.66.169:40286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:21.103426 2026] [security2:error] [pid 2561156:tid 2561156] [client 114.119.157.183:26915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579132800/cat_ids~30,17/request_format~html"] [unique_id "amsKrQidjhT9iw9JRMVSwwAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1579132800/request_format~html/cat_ids~30
[Thu Jul 30 09:26:21.734852 2026] [ssl:error] [pid 2540903:tid 2540903] (EAI 2)Name or service not known: [client 144.76.19.72:48408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:21.734899 2026] [ssl:error] [pid 2540903:tid 2540903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:21.791186 2026] [ssl:error] [pid 2561154:tid 2561154] (EAI 2)Name or service not known: [client 144.76.19.72:48418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:21.791238 2026] [ssl:error] [pid 2561154:tid 2561154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:23.480925 2026] [authz_core:error] [pid 2561130:tid 2561130] [client 144.172.105.5:50358] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/log4php.debug/error_log
[Thu Jul 30 09:26:24.848538 2026] [ssl:error] [pid 2561154:tid 2561154] (EAI 2)Name or service not known: [client 144.76.19.72:48426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:24.848594 2026] [ssl:error] [pid 2561154:tid 2561154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:24.872547 2026] [authz_core:error] [pid 2540903:tid 2540903] [client 57.141.0.26:42200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:24.873187 2026] [authz_core:error] [pid 2540903:tid 2540903] [client 57.141.0.26:42200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:24.903233 2026] [ssl:error] [pid 2561156:tid 2561156] (EAI 2)Name or service not known: [client 144.76.19.72:48436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:24.903273 2026] [ssl:error] [pid 2561156:tid 2561156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:26.707629 2026] [core:error] [pid 2554026:tid 2554026] (13)Permission denied: [client 216.73.216.199:61470] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/RAW/objects
[Thu Jul 30 09:26:27.015344 2026] [security2:error] [pid 2561130:tid 2561130] [client 185.191.171.3:51172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1246.0.html"] [unique_id "amsKs3hdty-55LV2HMZysgAAABQ"]
[Thu Jul 30 09:26:27.974192 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:48452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:27.974225 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:28.002849 2026] [authz_core:error] [pid 2560974:tid 2560974] [client 144.172.105.5:36794] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/log4php.debug/appenders/error_log
[Thu Jul 30 09:26:28.027772 2026] [ssl:error] [pid 2546375:tid 2546375] (EAI 2)Name or service not known: [client 144.76.19.72:48462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:28.027812 2026] [ssl:error] [pid 2546375:tid 2546375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:30.677056 2026] [authz_core:error] [pid 2557662:tid 2557662] [client 144.172.105.5:36800] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/log4php.debug/helpers/error_log
[Thu Jul 30 09:26:31.081210 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:44826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:31.081248 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:31.134265 2026] [ssl:error] [pid 2561130:tid 2561130] (EAI 2)Name or service not known: [client 144.76.19.72:44840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:31.134296 2026] [ssl:error] [pid 2561130:tid 2561130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:31.876841 2026] [authz_core:error] [pid 2552677:tid 2552677] [client 144.172.105.5:36808] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/log4php.debug/layouts/error_log
[Thu Jul 30 09:26:33.008981 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 57.141.0.45:34132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:33.009615 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 57.141.0.45:34132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:34.188227 2026] [ssl:error] [pid 2562261:tid 2562261] (EAI 2)Name or service not known: [client 144.76.19.72:44848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:34.188295 2026] [ssl:error] [pid 2562261:tid 2562261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:34.241819 2026] [ssl:error] [pid 2561130:tid 2561130] (EAI 2)Name or service not known: [client 144.76.19.72:44856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:34.241849 2026] [ssl:error] [pid 2561130:tid 2561130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:34.435924 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 66.249.66.33:44510] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:26:34.438612 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 66.249.66.33:44510] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:26:36.147615 2026] [authz_core:error] [pid 2562260:tid 2562260] [client 82.102.18.190:58486] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 09:26:36.465876 2026] [authz_core:error] [pid 2544412:tid 2544412] [client 144.172.105.5:33428] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/log4php.debug/xml/error_log
[Thu Jul 30 09:26:36.971016 2026] [security2:error] [pid 2551869:tid 2551869] [client 47.128.24.88:12192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/translations/sp/A.40_Ecuador2016-SP.pdf"] [unique_id "amsKvKbcIjKRvgXuO4dbRQAAAAw"]
[Thu Jul 30 09:26:37.180564 2026] [authz_core:error] [pid 2562209:tid 2562209] [client 144.172.105.5:33436] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/log4php/error_log
[Thu Jul 30 09:26:37.298944 2026] [ssl:error] [pid 2562261:tid 2562261] (EAI 2)Name or service not known: [client 144.76.19.72:44862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:37.298984 2026] [ssl:error] [pid 2562261:tid 2562261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:37.352684 2026] [ssl:error] [pid 2562262:tid 2562262] (EAI 2)Name or service not known: [client 144.76.19.72:44870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:37.352719 2026] [ssl:error] [pid 2562262:tid 2562262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:40.408012 2026] [ssl:error] [pid 2540903:tid 2540903] (EAI 2)Name or service not known: [client 144.76.19.72:59306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:40.408046 2026] [ssl:error] [pid 2540903:tid 2540903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:40.461688 2026] [ssl:error] [pid 2561001:tid 2561001] (EAI 2)Name or service not known: [client 144.76.19.72:59322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:40.461733 2026] [ssl:error] [pid 2561001:tid 2561001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:43.518678 2026] [ssl:error] [pid 2562859:tid 2562859] (EAI 2)Name or service not known: [client 144.76.19.72:59370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:43.518711 2026] [ssl:error] [pid 2562859:tid 2562859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:43.573624 2026] [ssl:error] [pid 2561383:tid 2561383] (EAI 2)Name or service not known: [client 144.76.19.72:59382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:43.573661 2026] [ssl:error] [pid 2561383:tid 2561383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:44.990527 2026] [authz_core:error] [pid 2562260:tid 2562260] [client 57.141.0.13:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:44.991767 2026] [authz_core:error] [pid 2562260:tid 2562260] [client 57.141.0.13:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:46.625797 2026] [ssl:error] [pid 2557662:tid 2557662] (EAI 2)Name or service not known: [client 144.76.19.72:59408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:46.625821 2026] [ssl:error] [pid 2557662:tid 2557662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:46.677235 2026] [ssl:error] [pid 2555021:tid 2555021] (EAI 2)Name or service not known: [client 144.76.19.72:59428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:46.677267 2026] [ssl:error] [pid 2555021:tid 2555021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:46.725363 2026] [security2:error] [pid 2562262:tid 2562262] [client 129.232.187.42:37522] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsKxotzqVejHzKuqIZz8AAAACI"]
[Thu Jul 30 09:26:47.666643 2026] [cgi:error] [pid 2555021:tid 2555021] [client 20.9.4.9:51428] AH02812: stderr from /home/asia/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:26:49.574368 2026] [authz_core:error] [pid 2554026:tid 2554026] [client 66.249.66.33:36751] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:26:49.577023 2026] [authz_core:error] [pid 2554026:tid 2554026] [client 66.249.66.33:36751] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:26:49.732086 2026] [ssl:error] [pid 2552928:tid 2552928] (EAI 2)Name or service not known: [client 144.76.19.72:39880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:49.732116 2026] [ssl:error] [pid 2552928:tid 2552928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:49.786915 2026] [ssl:error] [pid 2562994:tid 2562994] (EAI 2)Name or service not known: [client 144.76.19.72:39886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:49.786958 2026] [ssl:error] [pid 2562994:tid 2562994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:49.952233 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 20.9.4.9:51428] AH01630: client denied by server configuration: /home/asia/public_html/php.ini
[Thu Jul 30 09:26:50.626546 2026] [core:error] [pid 2537717:tid 2537717] [client 69.171.249.8:51816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:50.626573 2026] [core:error] [pid 2537717:tid 2537717] [client 69.171.249.8:51816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:51.333594 2026] [core:error] [pid 2563233:tid 2563233] [client 57.141.0.68:50126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:51.333661 2026] [core:error] [pid 2563233:tid 2563233] [client 57.141.0.68:50126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:26:52.652950 2026] [authz_core:error] [pid 2563233:tid 2563233] [client 57.141.0.11:22604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:52.653604 2026] [authz_core:error] [pid 2563233:tid 2563233] [client 57.141.0.11:22604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:52.843716 2026] [ssl:error] [pid 2561092:tid 2561092] (EAI 2)Name or service not known: [client 144.76.19.72:39902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:52.843743 2026] [ssl:error] [pid 2561092:tid 2561092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:52.897349 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:39908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:52.897384 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:53.747899 2026] [security2:error] [pid 2561155:tid 2561155] [client 143.198.119.177:47322] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "mjs-services.com"] [uri "/xmlrpc.php"] [unique_id "amsKzf6xn4uiHF_HeKh68gAAABY"]
[Thu Jul 30 09:26:55.348518 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 66.249.66.33:46246] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:26:55.351284 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 66.249.66.33:46246] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:26:55.951742 2026] [ssl:error] [pid 2557662:tid 2557662] (EAI 2)Name or service not known: [client 144.76.19.72:39912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:55.951780 2026] [ssl:error] [pid 2557662:tid 2557662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:56.009505 2026] [ssl:error] [pid 2563343:tid 2563343] (EAI 2)Name or service not known: [client 144.76.19.72:39926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:56.009542 2026] [ssl:error] [pid 2563343:tid 2563343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:56.244373 2026] [authz_core:error] [pid 2561002:tid 2561002] [client 57.141.0.47:27438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:26:56.245000 2026] [authz_core:error] [pid 2561002:tid 2561002] [client 57.141.0.47:27438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:26:56.744880 2026] [authz_core:error] [pid 2562210:tid 2562210] [client 144.172.105.5:54970] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/CronTasks/error_log
[Thu Jul 30 09:26:58.008859 2026] [authz_core:error] [pid 2547448:tid 2547448] [client 52.167.144.176:23362] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 09:26:59.084342 2026] [ssl:error] [pid 2557662:tid 2557662] (EAI 2)Name or service not known: [client 144.76.19.72:39928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:59.084386 2026] [ssl:error] [pid 2557662:tid 2557662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:26:59.135851 2026] [ssl:error] [pid 2560974:tid 2560974] (EAI 2)Name or service not known: [client 144.76.19.72:39930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:26:59.135907 2026] [ssl:error] [pid 2560974:tid 2560974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:02.194741 2026] [ssl:error] [pid 2561130:tid 2561130] (EAI 2)Name or service not known: [client 144.76.19.72:59784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:02.194787 2026] [ssl:error] [pid 2561130:tid 2561130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:02.249312 2026] [ssl:error] [pid 2563343:tid 2563343] (EAI 2)Name or service not known: [client 144.76.19.72:59798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:02.249337 2026] [ssl:error] [pid 2563343:tid 2563343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:02.830492 2026] [core:error] [pid 2561001:tid 2561001] (13)Permission denied: [client 216.73.216.199:51074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/shmem_inode_cache/validate
[Thu Jul 30 09:27:03.042765 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.22:47918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:27:03.043395 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.22:47918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:27:05.306565 2026] [ssl:error] [pid 2557662:tid 2557662] (EAI 2)Name or service not known: [client 144.76.19.72:59802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:05.306601 2026] [ssl:error] [pid 2557662:tid 2557662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:05.359315 2026] [ssl:error] [pid 2547448:tid 2547448] (EAI 2)Name or service not known: [client 144.76.19.72:59810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:05.359341 2026] [ssl:error] [pid 2547448:tid 2547448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:05.429670 2026] [authz_core:error] [pid 2561155:tid 2561155] [client 82.102.18.190:48096] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 09:27:06.849441 2026] [lsapi:warn] [pid 2555696:tid 2555696] [client 62.60.130.235:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:27:07.742922 2026] [lsapi:warn] [pid 2547448:tid 2547448] [client 62.60.130.235:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:27:08.414232 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:59812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:08.414261 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:08.466988 2026] [ssl:error] [pid 2562859:tid 2562859] (EAI 2)Name or service not known: [client 144.76.19.72:59828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:08.467016 2026] [ssl:error] [pid 2562859:tid 2562859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:08.518917 2026] [security2:error] [pid 2563028:tid 2563028] [client 85.208.96.209:24978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/pimple-keeps-coming-back-after-popping"] [unique_id "amsK3KDZ3VSP-ftoXd6YaQAAAA8"]
[Thu Jul 30 09:27:08.966186 2026] [core:crit] [pid 2561130:tid 2561130] (13)Permission denied: [client 66.132.195.94:10520] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:27:10.967705 2026] [core:crit] [pid 2561002:tid 2561002] (13)Permission denied: [client 52.167.144.204:8742] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:27:11.523341 2026] [ssl:error] [pid 2562172:tid 2562172] (EAI 2)Name or service not known: [client 144.76.19.72:43920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:11.523375 2026] [ssl:error] [pid 2562172:tid 2562172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:11.576720 2026] [ssl:error] [pid 2558186:tid 2558186] (EAI 2)Name or service not known: [client 144.76.19.72:43928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:11.576744 2026] [ssl:error] [pid 2558186:tid 2558186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:13.489015 2026] [authz_core:error] [pid 2564393:tid 2564393] [client 52.167.144.158:18861] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 09:27:13.497332 2026] [authz_core:error] [pid 2564393:tid 2564393] [client 52.167.144.158:18861] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 09:27:14.038218 2026] [core:error] [pid 2547448:tid 2547448] [client 66.132.195.94:10552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:14.038253 2026] [core:error] [pid 2547448:tid 2547448] [client 66.132.195.94:10552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:14.083223 2026] [access_compat:error] [pid 2562260:tid 2562260] [client 47.236.96.46:62470] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2009/02/bolt-rhino.jpg
[Thu Jul 30 09:27:14.083349 2026] [access_compat:error] [pid 2562260:tid 2562260] [client 47.236.96.46:62470] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:27:14.631463 2026] [ssl:error] [pid 2554026:tid 2554026] (EAI 2)Name or service not known: [client 144.76.19.72:43930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:14.631496 2026] [ssl:error] [pid 2554026:tid 2554026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:14.689235 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:43932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:14.689281 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:16.210984 2026] [authz_core:error] [pid 2529748:tid 2529748] [client 57.141.0.13:23254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:27:16.211631 2026] [authz_core:error] [pid 2529748:tid 2529748] [client 57.141.0.13:23254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:27:17.782297 2026] [ssl:error] [pid 2561002:tid 2561002] (EAI 2)Name or service not known: [client 144.76.19.72:43946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:17.782343 2026] [ssl:error] [pid 2561002:tid 2561002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:17.836533 2026] [core:error] [pid 2561001:tid 2561001] (13)Permission denied: [client 216.73.216.199:51074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP/total_objects
[Thu Jul 30 09:27:17.839982 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:43950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:17.840005 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:20.931871 2026] [ssl:error] [pid 2563028:tid 2563028] (EAI 2)Name or service not known: [client 144.76.19.72:59378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:20.931914 2026] [ssl:error] [pid 2563028:tid 2563028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:20.988745 2026] [ssl:error] [pid 2552928:tid 2552928] (EAI 2)Name or service not known: [client 144.76.19.72:59386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:20.988769 2026] [ssl:error] [pid 2552928:tid 2552928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:22.837646 2026] [core:error] [pid 2561001:tid 2561001] (13)Permission denied: [client 216.73.216.199:51074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory59/node0/compact
[Thu Jul 30 09:27:23.602285 2026] [authz_core:error] [pid 2555696:tid 2555696] [client 57.141.0.1:27754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:27:23.602909 2026] [authz_core:error] [pid 2555696:tid 2555696] [client 57.141.0.1:27754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:27:24.047315 2026] [ssl:error] [pid 2547448:tid 2547448] (EAI 2)Name or service not known: [client 144.76.19.72:59402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:24.047354 2026] [ssl:error] [pid 2547448:tid 2547448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:24.099199 2026] [ssl:error] [pid 2565049:tid 2565049] (EAI 2)Name or service not known: [client 144.76.19.72:59410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:24.099243 2026] [ssl:error] [pid 2565049:tid 2565049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:27.182055 2026] [ssl:error] [pid 2563233:tid 2563233] (EAI 2)Name or service not known: [client 144.76.19.72:59412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:27.182113 2026] [ssl:error] [pid 2563233:tid 2563233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:27.234080 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:59414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:27.234102 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:30.138218 2026] [core:error] [pid 2561154:tid 2561154] [client 66.249.66.169:60205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:30.138249 2026] [core:error] [pid 2561154:tid 2561154] [client 66.249.66.169:60205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:30.144684 2026] [core:error] [pid 2546375:tid 2546375] [client 66.249.66.68:40116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:30.144733 2026] [core:error] [pid 2546375:tid 2546375] [client 66.249.66.68:40116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:30.290198 2026] [ssl:error] [pid 2558186:tid 2558186] (EAI 2)Name or service not known: [client 144.76.19.72:59262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:30.290241 2026] [ssl:error] [pid 2558186:tid 2558186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:30.346321 2026] [ssl:error] [pid 2564979:tid 2564979] (EAI 2)Name or service not known: [client 144.76.19.72:59266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:30.346351 2026] [ssl:error] [pid 2564979:tid 2564979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:33.404536 2026] [ssl:error] [pid 2563233:tid 2563233] (EAI 2)Name or service not known: [client 144.76.19.72:59282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:33.404565 2026] [ssl:error] [pid 2563233:tid 2563233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:33.459473 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:59296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:33.459503 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:33.461047 2026] [ssl:error] [pid 2563343:tid 2563343] (70014)End of file found: [client 216.73.216.199:20859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:27:35.698986 2026] [security2:error] [pid 2561737:tid 2561737] [client 85.208.98.23:20646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsK9xxsL9WnDiWUa5PHswAAABA"]
[Thu Jul 30 09:27:36.031951 2026] [security2:error] [pid 2564473:tid 2564473] [client 185.191.171.2:61562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9874.0/prev_next,next.html"] [unique_id "amsK-K1UDTxkYsMLPLqMAgAAAAQ"]
[Thu Jul 30 09:27:36.522510 2026] [ssl:error] [pid 2564473:tid 2564473] (EAI 2)Name or service not known: [client 144.76.19.72:59308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:36.522559 2026] [ssl:error] [pid 2564473:tid 2564473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:36.579598 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:59324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:36.579626 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:39.635622 2026] [ssl:error] [pid 2560701:tid 2560701] (EAI 2)Name or service not known: [client 144.76.19.72:61870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:39.635658 2026] [ssl:error] [pid 2560701:tid 2560701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:39.692050 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:61880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:39.692088 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:40.807900 2026] [authz_core:error] [pid 2561737:tid 2561737] [client 144.172.105.5:39222] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/PickList/error_log
[Thu Jul 30 09:27:41.296838 2026] [core:crit] [pid 2562261:tid 2562261] (13)Permission denied: [client 66.132.195.94:61130] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:27:42.173595 2026] [authz_core:error] [pid 2562261:tid 2562261] [client 66.132.195.94:61130] AH01630: client denied by server configuration: /home/edbear/public_html/wp-admin__7af9720/error_log, referer: https://edwardkensington.com:443/wp-admin__7af9720
[Thu Jul 30 09:27:42.747785 2026] [ssl:error] [pid 2563028:tid 2563028] (EAI 2)Name or service not known: [client 144.76.19.72:61882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:42.747810 2026] [ssl:error] [pid 2563028:tid 2563028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:42.802029 2026] [ssl:error] [pid 2555021:tid 2555021] (EAI 2)Name or service not known: [client 144.76.19.72:61886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:42.802061 2026] [ssl:error] [pid 2555021:tid 2555021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:42.933138 2026] [authz_core:error] [pid 2562261:tid 2562261] [client 66.132.195.94:61130] AH01630: client denied by server configuration: /home/edbear/public_html/wp-admin__7af9720/user/error_log, referer: https://edwardkensington.com:443/wp-admin__7af9720/user
[Thu Jul 30 09:27:42.971958 2026] [security2:error] [pid 2558186:tid 2558186] [client 43.136.86.241:58462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/"] [unique_id "amsK_mfBsOLXG7tKrChtCgAAADI"]
[Thu Jul 30 09:27:43.178720 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.60:65380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:27:43.179372 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 57.141.0.60:65380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:27:43.834110 2026] [authz_core:error] [pid 2562261:tid 2562261] [client 66.132.195.94:61130] AH01630: client denied by server configuration: /home/edbear/public_html/wp-admin__7af9720/maint/error_log, referer: https://edwardkensington.com:443/wp-admin__7af9720/maint
[Thu Jul 30 09:27:44.006725 2026] [security2:error] [pid 2562210:tid 2562210] [client 114.119.155.144:32039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/request_format~html/cat_ids~30"] [unique_id "amsLAN0LZA7Lt3yJM9GCEwAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~14-1-2020
[Thu Jul 30 09:27:45.781723 2026] [security2:error] [pid 2555021:tid 2555021] [client 114.119.155.144:32043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/request_format~html/cat_ids~30"] [unique_id "amsLATupRRkFpzSolNlJOwAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~14-1-2020
[Thu Jul 30 09:27:45.784254 2026] [authz_core:error] [pid 2561383:tid 2561383] [client 66.249.66.35:54715] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:27:45.787020 2026] [authz_core:error] [pid 2561383:tid 2561383] [client 66.249.66.35:54715] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:27:45.853643 2026] [ssl:error] [pid 2562210:tid 2562210] (EAI 2)Name or service not known: [client 144.76.19.72:61898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:45.853675 2026] [ssl:error] [pid 2562210:tid 2562210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:45.908724 2026] [ssl:error] [pid 2533669:tid 2533669] (EAI 2)Name or service not known: [client 144.76.19.72:61902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:45.908751 2026] [ssl:error] [pid 2533669:tid 2533669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:46.187512 2026] [security2:error] [pid 2555748:tid 2555748] [client 43.136.86.241:59568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "amsLAsZ7HQk7O2LRmbA94QAAACU"], referer: http://www.taylorshouse.com
[Thu Jul 30 09:27:47.418793 2026] [security2:error] [pid 2555021:tid 2555021] [client 43.136.86.241:34118] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "amsLAzupRRkFpzSolNlJPAAAABM"], referer: http://www.taylorshouse.com/home
[Thu Jul 30 09:27:47.826149 2026] [authz_core:error] [pid 2563233:tid 2563233] [client 57.141.0.24:42532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:27:47.826787 2026] [authz_core:error] [pid 2563233:tid 2563233] [client 57.141.0.24:42532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:27:47.866719 2026] [core:error] [pid 2562260:tid 2562260] [client 66.249.66.194:47421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:47.866742 2026] [core:error] [pid 2562260:tid 2562260] [client 66.249.66.194:47421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:48.962667 2026] [ssl:error] [pid 2561155:tid 2561155] (EAI 2)Name or service not known: [client 144.76.19.72:61918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:48.962715 2026] [ssl:error] [pid 2561155:tid 2561155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:49.019470 2026] [ssl:error] [pid 2563233:tid 2563233] (EAI 2)Name or service not known: [client 144.76.19.72:61924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:49.019498 2026] [ssl:error] [pid 2563233:tid 2563233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:49.238114 2026] [security2:error] [pid 2561155:tid 2561155] [client 43.136.86.241:35652] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "amsLBf6xn4uiHF_HeKh7RwAAABY"], referer: http://www.taylorshouse.com/home/
[Thu Jul 30 09:27:51.061900 2026] [core:error] [pid 2562260:tid 2562260] [client 66.249.66.66:51676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:51.061933 2026] [core:error] [pid 2562260:tid 2562260] [client 66.249.66.66:51676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:27:52.062564 2026] [security2:error] [pid 2528544:tid 2528544] [client 85.208.98.29:50820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/polo-ralph-lauren-outlet-%CF%83%CF%80%CE%B1%CF%84%CE%B1-k.html"] [unique_id "amsLCM6r7Zd1zXM1G48gRwAAACE"]
[Thu Jul 30 09:27:52.076111 2026] [ssl:error] [pid 2563233:tid 2563233] (EAI 2)Name or service not known: [client 144.76.19.72:64510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:52.076136 2026] [ssl:error] [pid 2563233:tid 2563233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:52.129519 2026] [ssl:error] [pid 2561002:tid 2561002] (EAI 2)Name or service not known: [client 144.76.19.72:64514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:52.129546 2026] [ssl:error] [pid 2561002:tid 2561002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:53.469293 2026] [ssl:error] [pid 2564393:tid 2564393] (70014)End of file found: [client 216.73.216.199:54667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:27:55.195240 2026] [ssl:error] [pid 2566257:tid 2566257] (EAI 2)Name or service not known: [client 144.76.19.72:64522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:55.195294 2026] [ssl:error] [pid 2566257:tid 2566257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:55.279144 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:64534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:55.279176 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:57.611013 2026] [security2:error] [pid 2561383:tid 2561383] [client 185.191.171.9:16272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5764.0/prev_next,prev.html"] [unique_id "amsLDXWeF_2dy-pwY8gc4wAAAAs"]
[Thu Jul 30 09:27:57.727540 2026] [cgi:error] [pid 2566325:tid 2566325] [client 190.182.137.244:58440] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:27:58.348748 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:64536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:58.348790 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:27:58.405107 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:64548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:27:58.405132 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:00.092889 2026] [security2:error] [pid 2555748:tid 2555748] [client 129.232.187.42:54886] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsLEMZ7HQk7O2LRmbA96QAAACU"]
[Thu Jul 30 09:28:01.463082 2026] [ssl:error] [pid 2560701:tid 2560701] (EAI 2)Name or service not known: [client 144.76.19.72:39812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:01.463114 2026] [ssl:error] [pid 2560701:tid 2560701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:01.516006 2026] [ssl:error] [pid 2563233:tid 2563233] (EAI 2)Name or service not known: [client 144.76.19.72:39816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:01.516035 2026] [ssl:error] [pid 2563233:tid 2563233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:02.408190 2026] [access_compat:error] [pid 2565048:tid 2565048] [client 2.189.5.162:52328] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:28:02.880431 2026] [authz_core:error] [pid 2552677:tid 2552677] [client 144.172.105.5:37688] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/Quotes/error_log
[Thu Jul 30 09:28:04.571568 2026] [ssl:error] [pid 2548003:tid 2548003] (EAI 2)Name or service not known: [client 144.76.19.72:39830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:04.571607 2026] [ssl:error] [pid 2548003:tid 2548003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:04.623433 2026] [ssl:error] [pid 2547448:tid 2547448] (EAI 2)Name or service not known: [client 144.76.19.72:39842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:04.623459 2026] [ssl:error] [pid 2547448:tid 2547448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:04.899491 2026] [authz_core:error] [pid 2562261:tid 2562261] [client 66.132.195.94:61130] AH01630: client denied by server configuration: /home/edbear/public_html/wp-admin__7af9720/network/error_log, referer: https://edwardkensington.com:443/wp-admin__7af9720/network
[Thu Jul 30 09:28:07.677950 2026] [ssl:error] [pid 2561092:tid 2561092] (EAI 2)Name or service not known: [client 144.76.19.72:39846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:07.677985 2026] [ssl:error] [pid 2561092:tid 2561092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:07.733673 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:39856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:07.733710 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:08.345258 2026] [security2:error] [pid 2566257:tid 2566257] [client 85.208.96.204:59344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.3540.html"] [unique_id "amsLGJaqy9a760Kepm9IBwAAAA4"]
[Thu Jul 30 09:28:09.992263 2026] [security2:error] [pid 2566327:tid 2566327] [client 185.191.171.4:11794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/town-of-ellisburg-ny-zoning-map"] [unique_id "amsLGVmbg10pOmiayhLUaAAAAB0"]
[Thu Jul 30 09:28:10.787419 2026] [ssl:error] [pid 2561002:tid 2561002] (EAI 2)Name or service not known: [client 144.76.19.72:53916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:10.787446 2026] [ssl:error] [pid 2561002:tid 2561002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:10.840826 2026] [ssl:error] [pid 2566327:tid 2566327] (EAI 2)Name or service not known: [client 144.76.19.72:53922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:10.840863 2026] [ssl:error] [pid 2566327:tid 2566327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:12.527289 2026] [authz_core:error] [pid 2566328:tid 2566328] [client 144.172.105.5:43848] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/Quotes/pdf_templates/error_log
[Thu Jul 30 09:28:13.620437 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 144.172.105.5:43866] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/Quotes/pdf_templates/lastpage/error_log
[Thu Jul 30 09:28:13.897539 2026] [ssl:error] [pid 2555021:tid 2555021] (EAI 2)Name or service not known: [client 144.76.19.72:53934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:13.897566 2026] [ssl:error] [pid 2555021:tid 2555021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:13.950749 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:53950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:13.950787 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:14.452172 2026] [security2:error] [pid 2528544:tid 2528544] [client 43.159.152.4:37428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sudokulogicapp.com"] [uri "/"] [unique_id "amsLHs6r7Zd1zXM1G48gTwAAACE"]
[Thu Jul 30 09:28:14.827703 2026] [security2:error] [pid 2548003:tid 2548003] [client 74.7.241.38:55534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.horus-wellbeing.co.uk"] [uri "/sitemap_index.xml"] [unique_id "amsLHp8PIMA-JxAi8YD8GgAAAB4"]
[Thu Jul 30 09:28:17.081247 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:53952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:17.081294 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:17.135766 2026] [ssl:error] [pid 2561002:tid 2561002] (EAI 2)Name or service not known: [client 144.76.19.72:53954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:17.135791 2026] [ssl:error] [pid 2561002:tid 2561002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:18.650657 2026] [core:error] [pid 2562859:tid 2562859] [client 66.249.64.172:36277] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:28:18.650690 2026] [core:error] [pid 2562859:tid 2562859] [client 66.249.64.172:36277] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:28:19.082614 2026] [security2:error] [pid 2562261:tid 2562261] [client 216.73.216.199:3851] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/sockets.ini"] [unique_id "amsLIx8T63ng5AVmkut8ggAAACA"]
[Thu Jul 30 09:28:19.082903 2026] [security2:error] [pid 2562261:tid 2562261] [client 216.73.216.199:3851] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/sockets.ini"] [unique_id "amsLIx8T63ng5AVmkut8ggAAACA"]
[Thu Jul 30 09:28:19.083197 2026] [security2:error] [pid 2562261:tid 2562261] [client 216.73.216.199:3851] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/sockets.ini"] [unique_id "amsLIx8T63ng5AVmkut8ggAAACA"]
[Thu Jul 30 09:28:20.080254 2026] [security2:error] [pid 2560701:tid 2560701] [client 74.7.227.135:45970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.techsuccess.refraction.co.uk"] [uri "/"] [unique_id "amsLJGwtnXkgsHHT_bmVwAAAAAA"]
[Thu Jul 30 09:28:20.230226 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:35218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:20.230257 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:20.283511 2026] [ssl:error] [pid 2565048:tid 2565048] (EAI 2)Name or service not known: [client 144.76.19.72:35230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:20.283549 2026] [ssl:error] [pid 2565048:tid 2565048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:20.358481 2026] [security2:error] [pid 2562859:tid 2562859] [client 84.75.155.9:59684] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsLJMPqMPsanrTaBZOmSgAAAAk"]
[Thu Jul 30 09:28:20.358521 2026] [security2:error] [pid 2562859:tid 2562859] [client 84.75.155.9:59684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsLJMPqMPsanrTaBZOmSgAAAAk"]
[Thu Jul 30 09:28:20.358795 2026] [security2:error] [pid 2562859:tid 2562859] [client 84.75.155.9:59684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsLJMPqMPsanrTaBZOmSgAAAAk"]
[Thu Jul 30 09:28:23.344464 2026] [ssl:error] [pid 2562859:tid 2562859] (EAI 2)Name or service not known: [client 144.76.19.72:35232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:23.344494 2026] [ssl:error] [pid 2562859:tid 2562859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:23.397371 2026] [ssl:error] [pid 2564393:tid 2564393] (EAI 2)Name or service not known: [client 144.76.19.72:35248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:23.397404 2026] [ssl:error] [pid 2564393:tid 2564393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:23.488189 2026] [access_compat:error] [pid 2552677:tid 2552677] [client 45.158.164.234:47524] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 09:28:25.740633 2026] [security2:error] [pid 2553114:tid 2553114] [client 43.162.109.249:56196] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kirmond.com"] [uri "/"] [unique_id "amsLKVSsFFmP61QNlt2TfgAAACg"]
[Thu Jul 30 09:28:25.743452 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 43.162.109.249:56196] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 09:28:26.451251 2026] [ssl:error] [pid 2564595:tid 2564595] (EAI 2)Name or service not known: [client 144.76.19.72:35262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:26.451283 2026] [ssl:error] [pid 2564595:tid 2564595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:26.505188 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:35270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:26.505214 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:28.651762 2026] [authz_core:error] [pid 2553974:tid 2553974] [client 144.172.105.5:44602] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/System/error_log
[Thu Jul 30 09:28:29.580943 2026] [ssl:error] [pid 2561130:tid 2561130] (EAI 2)Name or service not known: [client 144.76.19.72:27772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:29.580978 2026] [ssl:error] [pid 2561130:tid 2561130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:29.635855 2026] [ssl:error] [pid 2563028:tid 2563028] (EAI 2)Name or service not known: [client 144.76.19.72:27788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:29.635901 2026] [ssl:error] [pid 2563028:tid 2563028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:30.410452 2026] [authz_core:error] [pid 2566194:tid 2566194] [client 144.172.105.5:44644] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:28:30.413132 2026] [authz_core:error] [pid 2566194:tid 2566194] [client 144.172.105.5:44644] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:28:30.642603 2026] [authz_core:error] [pid 2566328:tid 2566328] [client 144.172.105.5:44628] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/System/includes/error_log
[Thu Jul 30 09:28:32.693896 2026] [ssl:error] [pid 2565049:tid 2565049] (EAI 2)Name or service not known: [client 144.76.19.72:27804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:32.693920 2026] [ssl:error] [pid 2565049:tid 2565049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:32.749348 2026] [ssl:error] [pid 2563028:tid 2563028] (EAI 2)Name or service not known: [client 144.76.19.72:27810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:32.749378 2026] [ssl:error] [pid 2563028:tid 2563028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:33.782026 2026] [authz_core:error] [pid 2566326:tid 2566326] [client 66.249.66.33:59815] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:28:33.784861 2026] [authz_core:error] [pid 2566326:tid 2566326] [client 66.249.66.33:59815] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:28:33.866540 2026] [security2:error] [pid 2566257:tid 2566257] [client 170.106.113.235:52290] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ogsoil.com"] [uri "/"] [unique_id "amsLMZaqy9a760Kepm9IFAAAAA4"]
[Thu Jul 30 09:28:33.932216 2026] [core:error] [pid 2565049:tid 2565049] [client 66.249.64.170:60012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:28:33.932238 2026] [core:error] [pid 2565049:tid 2565049] [client 66.249.64.170:60012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:28:35.911648 2026] [ssl:error] [pid 2548003:tid 2548003] (EAI 2)Name or service not known: [client 144.76.19.72:27826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:35.911680 2026] [ssl:error] [pid 2548003:tid 2548003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:36.018263 2026] [ssl:error] [pid 2568660:tid 2568660] (EAI 2)Name or service not known: [client 144.76.19.72:27840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:36.018303 2026] [ssl:error] [pid 2568660:tid 2568660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:36.974878 2026] [security2:error] [pid 2548003:tid 2548003] [client 68.183.9.16:53870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "localhero.org.uk"] [uri "/.env"] [unique_id "amsLNJ8PIMA-JxAi8YD8JAAAAB4"]
[Thu Jul 30 09:28:36.975060 2026] [security2:error] [pid 2548003:tid 2548003] [client 68.183.9.16:53870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "localhero.org.uk"] [uri "/.env"] [unique_id "amsLNJ8PIMA-JxAi8YD8JAAAAB4"]
[Thu Jul 30 09:28:37.080975 2026] [security2:error] [pid 2548003:tid 2548003] [client 68.183.9.16:53870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "localhero.org.uk"] [uri "/index.php"] [unique_id "amsLNJ8PIMA-JxAi8YD8JAAAAB4"]
[Thu Jul 30 09:28:39.093950 2026] [ssl:error] [pid 2568729:tid 2568729] (EAI 2)Name or service not known: [client 144.76.19.72:27854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:39.093993 2026] [ssl:error] [pid 2568729:tid 2568729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:39.152942 2026] [ssl:error] [pid 2568730:tid 2568730] (EAI 2)Name or service not known: [client 144.76.19.72:27858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:39.152980 2026] [ssl:error] [pid 2568730:tid 2568730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:40.993897 2026] [security2:error] [pid 2566326:tid 2566326] [client 68.183.9.16:53900] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "localhero.org.uk"] [uri "/.git/config"] [unique_id "amsLOD_mOQQkWyl2qYW7jQAAABk"]
[Thu Jul 30 09:28:40.994096 2026] [security2:error] [pid 2566326:tid 2566326] [client 68.183.9.16:53900] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "localhero.org.uk"] [uri "/.git/config"] [unique_id "amsLOD_mOQQkWyl2qYW7jQAAABk"]
[Thu Jul 30 09:28:41.099885 2026] [security2:error] [pid 2566326:tid 2566326] [client 68.183.9.16:53900] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "localhero.org.uk"] [uri "/index.php"] [unique_id "amsLOD_mOQQkWyl2qYW7jQAAABk"]
[Thu Jul 30 09:28:41.632867 2026] [authz_core:error] [pid 2568730:tid 2568730] [client 57.141.0.32:52738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:28:41.633506 2026] [authz_core:error] [pid 2568730:tid 2568730] [client 57.141.0.32:52738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:28:42.210146 2026] [ssl:error] [pid 2568697:tid 2568697] (EAI 2)Name or service not known: [client 144.76.19.72:56152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:42.210173 2026] [ssl:error] [pid 2568697:tid 2568697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:42.264765 2026] [ssl:error] [pid 2561002:tid 2561002] (EAI 2)Name or service not known: [client 144.76.19.72:56154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:42.264792 2026] [ssl:error] [pid 2561002:tid 2561002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:42.483034 2026] [authz_core:error] [pid 2566257:tid 2566257] [client 66.249.66.34:42827] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:28:42.485697 2026] [authz_core:error] [pid 2566257:tid 2566257] [client 66.249.66.34:42827] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:28:42.952850 2026] [authz_core:error] [pid 2568732:tid 2568732] [client 57.141.0.55:30398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:28:42.953470 2026] [authz_core:error] [pid 2568732:tid 2568732] [client 57.141.0.55:30398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:28:44.682077 2026] [authz_core:error] [pid 2533669:tid 2533669] [client 57.141.0.28:44960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:28:44.682699 2026] [authz_core:error] [pid 2533669:tid 2533669] [client 57.141.0.28:44960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:28:45.317877 2026] [ssl:error] [pid 2566194:tid 2566194] (EAI 2)Name or service not known: [client 144.76.19.72:56166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:45.317912 2026] [ssl:error] [pid 2566194:tid 2566194] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:45.378184 2026] [ssl:error] [pid 2568627:tid 2568627] (EAI 2)Name or service not known: [client 144.76.19.72:56182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:45.378217 2026] [ssl:error] [pid 2568627:tid 2568627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:48.435249 2026] [ssl:error] [pid 2568734:tid 2568734] (EAI 2)Name or service not known: [client 144.76.19.72:56184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:48.435280 2026] [ssl:error] [pid 2568734:tid 2568734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:48.436518 2026] [security2:error] [pid 2568731:tid 2568731] [client 185.191.171.15:28706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6494.0.html"] [unique_id "amsLQPY9Q9XZFdfKSv1ZCgAAAC0"]
[Thu Jul 30 09:28:48.491851 2026] [ssl:error] [pid 2568660:tid 2568660] (EAI 2)Name or service not known: [client 144.76.19.72:56196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:48.491882 2026] [ssl:error] [pid 2568660:tid 2568660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:49.139421 2026] [security2:error] [pid 2566257:tid 2566257] [client 68.183.9.16:54156] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "localhero.org.uk"] [uri "/trace.axd"] [unique_id "amsLQZaqy9a760Kepm9IGAAAAA4"]
[Thu Jul 30 09:28:49.139707 2026] [security2:error] [pid 2566257:tid 2566257] [client 68.183.9.16:54156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "localhero.org.uk"] [uri "/trace.axd"] [unique_id "amsLQZaqy9a760Kepm9IGAAAAA4"]
[Thu Jul 30 09:28:49.255710 2026] [security2:error] [pid 2566257:tid 2566257] [client 68.183.9.16:54156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "localhero.org.uk"] [uri "/index.php"] [unique_id "amsLQZaqy9a760Kepm9IGAAAAA4"]
[Thu Jul 30 09:28:49.732388 2026] [security2:error] [pid 2568734:tid 2568734] [client 43.165.198.5:37150] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsLQWE_u7PA-9g3ryYdHQAAADA"], referer: http://rock-ola.co.uk
[Thu Jul 30 09:28:51.547298 2026] [ssl:error] [pid 2565049:tid 2565049] (EAI 2)Name or service not known: [client 144.76.19.72:39438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:51.547332 2026] [ssl:error] [pid 2565049:tid 2565049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:51.604899 2026] [ssl:error] [pid 2568729:tid 2568729] (EAI 2)Name or service not known: [client 144.76.19.72:39440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:51.604934 2026] [ssl:error] [pid 2568729:tid 2568729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:51.848093 2026] [security2:error] [pid 2568627:tid 2568627] [client 43.165.198.5:45064] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsLQ9iapcQVd6DkAWeDBgAAAAI"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 09:28:54.451688 2026] [security2:error] [pid 2561155:tid 2561155] [client 43.153.96.79:45488] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.fast-hosting.co.uk"] [uri "/"] [unique_id "amsLRv6xn4uiHF_HeKh7ugAAABY"]
[Thu Jul 30 09:28:54.659538 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:39452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:54.659591 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:54.712525 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:39462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:54.712558 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:55.290017 2026] [authz_core:error] [pid 2548003:tid 2548003] [client 144.172.105.5:38682] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/Users/error_log
[Thu Jul 30 09:28:55.505754 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.65:60592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:28:55.506406 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.65:60592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:28:57.768138 2026] [ssl:error] [pid 2563233:tid 2563233] (EAI 2)Name or service not known: [client 144.76.19.72:39476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:57.768185 2026] [ssl:error] [pid 2563233:tid 2563233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:28:57.821053 2026] [ssl:error] [pid 2561155:tid 2561155] (EAI 2)Name or service not known: [client 144.76.19.72:39482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:28:57.821113 2026] [ssl:error] [pid 2561155:tid 2561155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:00.891151 2026] [ssl:error] [pid 2561001:tid 2561001] (EAI 2)Name or service not known: [client 144.76.19.72:18902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:00.891210 2026] [ssl:error] [pid 2561001:tid 2561001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:00.949300 2026] [ssl:error] [pid 2568661:tid 2568661] (EAI 2)Name or service not known: [client 144.76.19.72:18912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:00.949342 2026] [ssl:error] [pid 2568661:tid 2568661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:01.101709 2026] [authz_core:error] [pid 2560701:tid 2560701] [client 52.167.144.232:53696] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:29:01.104432 2026] [authz_core:error] [pid 2560701:tid 2560701] [client 52.167.144.232:53696] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:29:02.735935 2026] [security2:error] [pid 2568696:tid 2568696] [client 43.135.145.77:56552] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.annawelshagent.com"] [uri "/"] [unique_id "amsLTqKEtD4z04O2d9Dv-gAAAAw"]
[Thu Jul 30 09:29:03.804266 2026] [security2:error] [pid 2568661:tid 2568661] [client 185.191.171.7:19832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7939.0/prev_next,next.html"] [unique_id "amsLTyFIrECpF2KXQY7qpwAAAAs"]
[Thu Jul 30 09:29:04.004536 2026] [ssl:error] [pid 2568729:tid 2568729] (EAI 2)Name or service not known: [client 144.76.19.72:18926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:04.004598 2026] [ssl:error] [pid 2568729:tid 2568729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:04.083775 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:18928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:04.083806 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:04.133976 2026] [cgi:error] [pid 2555021:tid 2555021] [client 62.60.130.233:52519] AH02811: stderr from /home/bessys/public_html/cgi-bin/cgi-bin: script not found or unable to stat, referer: www.google.com
[Thu Jul 30 09:29:06.599467 2026] [security2:error] [pid 2568731:tid 2568731] [client 85.208.98.23:21748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsLUvY9Q9XZFdfKSv1ZEgAAAC0"]
[Thu Jul 30 09:29:06.963395 2026] [security2:error] [pid 2528544:tid 2528544] [client 114.119.135.136:29883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~19,17,30/request_format~html"] [unique_id "amsLUs6r7Zd1zXM1G48gnwAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~19,17/request_format~html
[Thu Jul 30 09:29:07.138964 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:18930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:07.139006 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:07.193618 2026] [ssl:error] [pid 2569658:tid 2569658] (EAI 2)Name or service not known: [client 144.76.19.72:18932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:07.193659 2026] [ssl:error] [pid 2569658:tid 2569658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:08.213172 2026] [security2:error] [pid 2560701:tid 2560701] [client 51.68.111.216:21829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.3dworkstation.co.uk"] [uri "/robots.txt"] [unique_id "amsLVGwtnXkgsHHT_bmWLgAAAAA"]
[Thu Jul 30 09:29:08.548626 2026] [security2:error] [pid 2566257:tid 2566257] [client 114.119.135.136:29899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~19,17,30/request_format~html"] [unique_id "amsLVJaqy9a760Kepm9IHgAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~19,17/request_format~html
[Thu Jul 30 09:29:10.249964 2026] [ssl:error] [pid 2568696:tid 2568696] (EAI 2)Name or service not known: [client 144.76.19.72:61494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:10.250007 2026] [ssl:error] [pid 2568696:tid 2568696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:10.303414 2026] [ssl:error] [pid 2562261:tid 2562261] (EAI 2)Name or service not known: [client 144.76.19.72:61502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:10.303444 2026] [ssl:error] [pid 2562261:tid 2562261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:10.815807 2026] [security2:error] [pid 2569658:tid 2569658] [client 85.208.96.210:20462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/jimmy-league-morro-bay-obituary"] [unique_id "amsLVm9vazVPmYqjE2_pnAAAAAE"]
[Thu Jul 30 09:29:11.881117 2026] [security2:error] [pid 2555696:tid 2555696] [client 185.191.171.11:63900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2010/06/09/who-needs-powerpoint-try-prezi-instead/"] [unique_id "amsLV_OYkUMd8T9LADHR1gAAABE"]
[Thu Jul 30 09:29:11.914895 2026] [core:error] [pid 2553974:tid 2553974] (13)Permission denied: [client 216.73.216.199:47691] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/red_zone
[Thu Jul 30 09:29:13.402679 2026] [ssl:error] [pid 2569658:tid 2569658] (EAI 2)Name or service not known: [client 144.76.19.72:61508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:13.402726 2026] [ssl:error] [pid 2569658:tid 2569658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:13.459141 2026] [ssl:error] [pid 2555696:tid 2555696] (EAI 2)Name or service not known: [client 144.76.19.72:61522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:13.459175 2026] [ssl:error] [pid 2555696:tid 2555696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:14.582803 2026] [authz_core:error] [pid 2555696:tid 2555696] [client 66.249.66.33:63377] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:29:14.585458 2026] [authz_core:error] [pid 2555696:tid 2555696] [client 66.249.66.33:63377] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:29:16.675499 2026] [security2:error] [pid 2568734:tid 2568734] [client 74.7.241.59:57620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "berehap.be"] [uri "/"] [unique_id "amsLXGE_u7PA-9g3ryYdJwAAADA"]
[Thu Jul 30 09:29:16.779371 2026] [ssl:error] [pid 2546375:tid 2546375] (EAI 2)Name or service not known: [client 144.76.19.72:61530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:16.779414 2026] [ssl:error] [pid 2546375:tid 2546375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:16.842633 2026] [ssl:error] [pid 2562260:tid 2562260] (EAI 2)Name or service not known: [client 144.76.19.72:61536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:16.842670 2026] [ssl:error] [pid 2562260:tid 2562260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:16.870603 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 57.141.0.8:47736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:16.871322 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 57.141.0.8:47736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:17.966090 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 144.172.105.5:52766] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/Utilities/error_log
[Thu Jul 30 09:29:19.215224 2026] [authz_core:error] [pid 2565049:tid 2565049] [client 57.141.0.65:56258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:19.215881 2026] [authz_core:error] [pid 2565049:tid 2565049] [client 57.141.0.65:56258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:19.901011 2026] [ssl:error] [pid 2553114:tid 2553114] (EAI 2)Name or service not known: [client 144.76.19.72:20908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:19.901040 2026] [ssl:error] [pid 2553114:tid 2553114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:19.957438 2026] [ssl:error] [pid 2563233:tid 2563233] (EAI 2)Name or service not known: [client 144.76.19.72:20920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:19.957464 2026] [ssl:error] [pid 2563233:tid 2563233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:20.907411 2026] [cgi:error] [pid 2563233:tid 2563233] [client 147.161.144.170:61754] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:29:22.042255 2026] [security2:error] [pid 2561092:tid 2561092] [client 51.68.236.73:27949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.iapib.com"] [uri "/robots.txt"] [unique_id "amsLYse32gSxxm4tVUOAVwAAAA0"]
[Thu Jul 30 09:29:22.216198 2026] [security2:error] [pid 2537717:tid 2537717] [client 51.68.236.73:18435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.iapib.com"] [uri "/"] [unique_id "amsLYv-cDudpOfXry4PegAAAABI"]
[Thu Jul 30 09:29:22.361924 2026] [security2:error] [pid 2562261:tid 2562261] [client 51.68.236.73:26791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "iapib.com"] [uri "/robots.txt"] [unique_id "amsLYh8T63ng5AVmkut8kwAAACA"]
[Thu Jul 30 09:29:22.746666 2026] [authz_core:error] [pid 2566326:tid 2566326] [client 57.141.0.49:42994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:22.747339 2026] [authz_core:error] [pid 2566326:tid 2566326] [client 57.141.0.49:42994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:22.768747 2026] [security2:error] [pid 2569658:tid 2569658] [client 74.7.227.20:33776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tjwilliamscarpentry.josieandmatt.co.uk"] [uri "/"] [unique_id "amsLYm9vazVPmYqjE2_poQAAAAE"]
[Thu Jul 30 09:29:23.059743 2026] [ssl:error] [pid 2566328:tid 2566328] (EAI 2)Name or service not known: [client 144.76.19.72:20930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:23.059797 2026] [ssl:error] [pid 2566328:tid 2566328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:23.115981 2026] [ssl:error] [pid 2560701:tid 2560701] (EAI 2)Name or service not known: [client 144.76.19.72:20942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:23.116009 2026] [ssl:error] [pid 2560701:tid 2560701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:24.821916 2026] [authz_core:error] [pid 2565049:tid 2565049] [client 144.172.105.5:52800] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/Vtiger/error_log
[Thu Jul 30 09:29:25.030471 2026] [authz_core:error] [pid 2569985:tid 2569985] [client 57.141.0.48:25246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:25.031127 2026] [authz_core:error] [pid 2569985:tid 2569985] [client 57.141.0.48:25246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:25.850129 2026] [core:error] [pid 2566728:tid 2566728] [client 66.249.66.40:56696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:29:25.850171 2026] [core:error] [pid 2566728:tid 2566728] [client 66.249.66.40:56696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:29:25.853438 2026] [core:error] [pid 2568734:tid 2568734] [client 66.249.66.169:41984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:29:25.853482 2026] [core:error] [pid 2568734:tid 2568734] [client 66.249.66.169:41984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:29:26.169100 2026] [ssl:error] [pid 2569985:tid 2569985] (EAI 2)Name or service not known: [client 144.76.19.72:20950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:26.169137 2026] [ssl:error] [pid 2569985:tid 2569985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:26.221196 2026] [ssl:error] [pid 2568696:tid 2568696] (EAI 2)Name or service not known: [client 144.76.19.72:20964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:26.221229 2026] [ssl:error] [pid 2568696:tid 2568696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:26.922321 2026] [core:error] [pid 2553974:tid 2553974] (13)Permission denied: [client 216.73.216.199:47691] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/order
[Thu Jul 30 09:29:27.571092 2026] [authz_core:error] [pid 2566258:tid 2566258] [client 57.141.0.4:34346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:27.571748 2026] [authz_core:error] [pid 2566258:tid 2566258] [client 57.141.0.4:34346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:28.345992 2026] [security2:error] [pid 2568698:tid 2568698] [client 85.208.96.206:38754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,511.0/prev_next,prev.html"] [unique_id "amsLaA3pfF-m3DUWaLw53gAAABc"]
[Thu Jul 30 09:29:29.300889 2026] [ssl:error] [pid 2568661:tid 2568661] (EAI 2)Name or service not known: [client 144.76.19.72:20972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:29.300926 2026] [ssl:error] [pid 2568661:tid 2568661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:29.355177 2026] [ssl:error] [pid 2562260:tid 2562260] (EAI 2)Name or service not known: [client 144.76.19.72:20976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:29.355211 2026] [ssl:error] [pid 2562260:tid 2562260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:31.957271 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.31:50368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:31.957909 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.31:50368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:32.428166 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:48214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:32.428204 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:32.483409 2026] [ssl:error] [pid 2546375:tid 2546375] (EAI 2)Name or service not known: [client 144.76.19.72:48226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:32.483458 2026] [ssl:error] [pid 2546375:tid 2546375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:32.720821 2026] [authz_core:error] [pid 2568731:tid 2568731] [client 57.141.0.70:33700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:32.721457 2026] [authz_core:error] [pid 2568731:tid 2568731] [client 57.141.0.70:33700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:35.538638 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:48232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:35.538670 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:35.597252 2026] [ssl:error] [pid 2561092:tid 2561092] (EAI 2)Name or service not known: [client 144.76.19.72:48246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:35.597283 2026] [ssl:error] [pid 2561092:tid 2561092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:38.651816 2026] [ssl:error] [pid 2561092:tid 2561092] (EAI 2)Name or service not known: [client 144.76.19.72:48248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:38.651858 2026] [ssl:error] [pid 2561092:tid 2561092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:38.705725 2026] [ssl:error] [pid 2560701:tid 2560701] (EAI 2)Name or service not known: [client 144.76.19.72:48262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:38.705761 2026] [ssl:error] [pid 2560701:tid 2560701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:39.785401 2026] [security2:error] [pid 2570892:tid 2570892] [client 43.130.154.56:58962] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "loca.co.uk"] [uri "/"] [unique_id "amsLc5_ohiXbFF1WhUxQCwAAACQ"]
[Thu Jul 30 09:29:41.765452 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:44570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:41.765482 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:41.824687 2026] [ssl:error] [pid 2562261:tid 2562261] (EAI 2)Name or service not known: [client 144.76.19.72:44586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:41.824720 2026] [ssl:error] [pid 2562261:tid 2562261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:41.927870 2026] [ssl:error] [pid 2553974:tid 2553974] (70014)End of file found: [client 216.73.216.199:47691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:29:42.403671 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/com_vtiger_workflow/error_log
[Thu Jul 30 09:29:42.535168 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTConditionalExpression.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L9gAAACk"]
[Thu Jul 30 09:29:42.535499 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTConditionalExpression.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L9gAAACk"]
[Thu Jul 30 09:29:42.535956 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTConditionalExpression.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L9gAAACk"]
[Thu Jul 30 09:29:42.660197 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEmailRecipientsTemplate.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L9wAAACk"]
[Thu Jul 30 09:29:42.660535 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEmailRecipientsTemplate.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L9wAAACk"]
[Thu Jul 30 09:29:42.661012 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEmailRecipientsTemplate.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L9wAAACk"]
[Thu Jul 30 09:29:42.785424 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEntityCache.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L-AAAACk"]
[Thu Jul 30 09:29:42.786039 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEntityCache.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L-AAAACk"]
[Thu Jul 30 09:29:42.786672 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEntityCache.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L-AAAACk"]
[Thu Jul 30 09:29:42.911125 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEntityMethodManager.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L-QAAACk"]
[Thu Jul 30 09:29:42.911551 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEntityMethodManager.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L-QAAACk"]
[Thu Jul 30 09:29:42.912225 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEntityMethodManager.inc"] [unique_id "amsLdnXpWQqAqP0uNK4L-QAAACk"]
[Thu Jul 30 09:29:43.041485 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEventHandler.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L-gAAACk"]
[Thu Jul 30 09:29:43.041814 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEventHandler.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L-gAAACk"]
[Thu Jul 30 09:29:43.042284 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTEventHandler.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L-gAAACk"]
[Thu Jul 30 09:29:43.170941 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTJsonCondition.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L-wAAACk"]
[Thu Jul 30 09:29:43.171338 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTJsonCondition.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L-wAAACk"]
[Thu Jul 30 09:29:43.171846 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTJsonCondition.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L-wAAACk"]
[Thu Jul 30 09:29:43.297247 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTSimpleTemplate.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_AAAACk"]
[Thu Jul 30 09:29:43.297570 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTSimpleTemplate.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_AAAACk"]
[Thu Jul 30 09:29:43.297991 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTSimpleTemplate.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_AAAACk"]
[Thu Jul 30 09:29:43.424126 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTTaskManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_QAAACk"]
[Thu Jul 30 09:29:43.424429 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTTaskManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_QAAACk"]
[Thu Jul 30 09:29:43.424874 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTTaskManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_QAAACk"]
[Thu Jul 30 09:29:43.548871 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTTaskQueue.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_gAAACk"]
[Thu Jul 30 09:29:43.549218 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTTaskQueue.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_gAAACk"]
[Thu Jul 30 09:29:43.549679 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTTaskQueue.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_gAAACk"]
[Thu Jul 30 09:29:43.678516 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowApplication.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_wAAACk"]
[Thu Jul 30 09:29:43.678869 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowApplication.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_wAAACk"]
[Thu Jul 30 09:29:43.679345 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowApplication.inc"] [unique_id "amsLd3XpWQqAqP0uNK4L_wAAACk"]
[Thu Jul 30 09:29:43.805434 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4MAAAAACk"]
[Thu Jul 30 09:29:43.805739 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4MAAAAACk"]
[Thu Jul 30 09:29:43.806202 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4MAAAAACk"]
[Thu Jul 30 09:29:43.932519 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowTemplateManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4MAQAAACk"]
[Thu Jul 30 09:29:43.932860 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowTemplateManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4MAQAAACk"]
[Thu Jul 30 09:29:43.933333 2026] [security2:error] [pid 2570989:tid 2570989] [client 144.172.105.5:50424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/VTWorkflowTemplateManager.inc"] [unique_id "amsLd3XpWQqAqP0uNK4MAQAAACk"]
[Thu Jul 30 09:29:44.243868 2026] [access_compat:error] [pid 2568698:tid 2568698] [client 135.119.63.61:4302] AH01797: client denied by server configuration: /home/prenicou/public_html/images/about.php
[Thu Jul 30 09:29:44.664198 2026] [security2:error] [pid 2546375:tid 2546375] [client 52.112.124.240:1088] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amsLeBVSbugQUOygmD7AegAAAAc"]
[Thu Jul 30 09:29:44.664532 2026] [security2:error] [pid 2546375:tid 2546375] [client 52.112.124.240:1088] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amsLeBVSbugQUOygmD7AegAAAAc"]
[Thu Jul 30 09:29:44.690361 2026] [security2:error] [pid 2546375:tid 2546375] [client 52.112.124.240:1088] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/403.shtml"] [unique_id "amsLeBVSbugQUOygmD7AegAAAAc"]
[Thu Jul 30 09:29:44.882781 2026] [ssl:error] [pid 2569939:tid 2569939] (EAI 2)Name or service not known: [client 144.76.19.72:44590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:44.882826 2026] [ssl:error] [pid 2569939:tid 2569939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:44.936684 2026] [ssl:error] [pid 2568729:tid 2568729] (EAI 2)Name or service not known: [client 144.76.19.72:44602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:44.936719 2026] [ssl:error] [pid 2568729:tid 2568729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:45.033051 2026] [security2:error] [pid 2568699:tid 2568699] [client 144.172.105.5:40270] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/config.inc"] [unique_id "amsLeZpZ0pCtkcrs5P1f0AAAABw"]
[Thu Jul 30 09:29:45.033340 2026] [security2:error] [pid 2568699:tid 2568699] [client 144.172.105.5:40270] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/config.inc"] [unique_id "amsLeZpZ0pCtkcrs5P1f0AAAABw"]
[Thu Jul 30 09:29:45.033761 2026] [security2:error] [pid 2568699:tid 2568699] [client 144.172.105.5:40270] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/config.inc"] [unique_id "amsLeZpZ0pCtkcrs5P1f0AAAABw"]
[Thu Jul 30 09:29:47.128488 2026] [access_compat:error] [pid 2568698:tid 2568698] [client 135.119.63.61:4302] AH01797: client denied by server configuration: /home/prenicou/public_html/images/cloud.php
[Thu Jul 30 09:29:47.479338 2026] [security2:error] [pid 2564595:tid 2564595] [client 144.172.105.5:40324] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/include.inc"] [unique_id "amsLe4MmAJpnDHoe4o56KgAAACY"]
[Thu Jul 30 09:29:47.479559 2026] [security2:error] [pid 2564595:tid 2564595] [client 144.172.105.5:40324] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/include.inc"] [unique_id "amsLe4MmAJpnDHoe4o56KgAAACY"]
[Thu Jul 30 09:29:47.479902 2026] [security2:error] [pid 2564595:tid 2564595] [client 144.172.105.5:40324] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/include.inc"] [unique_id "amsLe4MmAJpnDHoe4o56KgAAACY"]
[Thu Jul 30 09:29:47.891120 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.15:52462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:47.891769 2026] [authz_core:error] [pid 2553114:tid 2553114] [client 57.141.0.15:52462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:47.991515 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:44604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:47.991550 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:48.043035 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:44620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:48.043082 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:51.050618 2026] [security2:error] [pid 2570819:tid 2570819] [client 47.128.50.33:17670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/robots.txt"] [unique_id "amsLf7tvfIHXtds1b4G3rwAAABg"]
[Thu Jul 30 09:29:51.094950 2026] [ssl:error] [pid 2571673:tid 2571673] (EAI 2)Name or service not known: [client 144.76.19.72:27122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:51.094988 2026] [ssl:error] [pid 2571673:tid 2571673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:51.151510 2026] [ssl:error] [pid 2570991:tid 2570991] (EAI 2)Name or service not known: [client 144.76.19.72:27134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:51.151555 2026] [ssl:error] [pid 2570991:tid 2570991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:52.443645 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTExpressionEvaluater.inc"] [unique_id "amsLgMe32gSxxm4tVUOAYwAAAA0"]
[Thu Jul 30 09:29:52.443917 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTExpressionEvaluater.inc"] [unique_id "amsLgMe32gSxxm4tVUOAYwAAAA0"]
[Thu Jul 30 09:29:52.444303 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTExpressionEvaluater.inc"] [unique_id "amsLgMe32gSxxm4tVUOAYwAAAA0"]
[Thu Jul 30 09:29:52.576821 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTExpressionsManager.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZAAAAA0"]
[Thu Jul 30 09:29:52.577118 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTExpressionsManager.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZAAAAA0"]
[Thu Jul 30 09:29:52.577516 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTExpressionsManager.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZAAAAA0"]
[Thu Jul 30 09:29:52.710015 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTParser.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZQAAAA0"]
[Thu Jul 30 09:29:52.710298 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTParser.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZQAAAA0"]
[Thu Jul 30 09:29:52.710686 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTParser.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZQAAAA0"]
[Thu Jul 30 09:29:52.845614 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTTokenizer.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZgAAAA0"]
[Thu Jul 30 09:29:52.845887 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTTokenizer.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZgAAAA0"]
[Thu Jul 30 09:29:52.846272 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/VTTokenizer.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZgAAAA0"]
[Thu Jul 30 09:29:52.975690 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/include.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZwAAAA0"]
[Thu Jul 30 09:29:52.976008 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/include.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZwAAAA0"]
[Thu Jul 30 09:29:52.976379 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/expression_engine/include.inc"] [unique_id "amsLgMe32gSxxm4tVUOAZwAAAA0"]
[Thu Jul 30 09:29:54.209084 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:27144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:54.209118 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:54.263282 2026] [ssl:error] [pid 2571858:tid 2571858] (EAI 2)Name or service not known: [client 144.76.19.72:27158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:54.263314 2026] [ssl:error] [pid 2571858:tid 2571858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:54.291441 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateEntityTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcAAAAA0"]
[Thu Jul 30 09:29:54.291723 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateEntityTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcAAAAA0"]
[Thu Jul 30 09:29:54.292118 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateEntityTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcAAAAA0"]
[Thu Jul 30 09:29:54.421795 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateEventTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcQAAAA0"]
[Thu Jul 30 09:29:54.422022 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateEventTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcQAAAA0"]
[Thu Jul 30 09:29:54.422381 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateEventTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcQAAAA0"]
[Thu Jul 30 09:29:54.551225 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateTodoTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcgAAAA0"]
[Thu Jul 30 09:29:54.551497 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateTodoTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcgAAAA0"]
[Thu Jul 30 09:29:54.551885 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTCreateTodoTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcgAAAA0"]
[Thu Jul 30 09:29:54.684707 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTDummyTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcwAAAA0"]
[Thu Jul 30 09:29:54.684973 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTDummyTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcwAAAA0"]
[Thu Jul 30 09:29:54.685342 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTDummyTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAcwAAAA0"]
[Thu Jul 30 09:29:54.726957 2026] [authz_core:error] [pid 2563233:tid 2563233] [client 57.141.0.62:50964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:29:54.727598 2026] [authz_core:error] [pid 2563233:tid 2563233] [client 57.141.0.62:50964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:29:54.817468 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTEmailTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAdAAAAA0"]
[Thu Jul 30 09:29:54.817708 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTEmailTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAdAAAAA0"]
[Thu Jul 30 09:29:54.818080 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTEmailTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAdAAAAA0"]
[Thu Jul 30 09:29:54.948318 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTEntityMethodTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAdQAAAA0"]
[Thu Jul 30 09:29:54.948579 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTEntityMethodTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAdQAAAA0"]
[Thu Jul 30 09:29:54.948939 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTEntityMethodTask.inc"] [unique_id "amsLgse32gSxxm4tVUOAdQAAAA0"]
[Thu Jul 30 09:29:55.081838 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTSMSTask.inc"] [unique_id "amsLg8e32gSxxm4tVUOAdgAAAA0"]
[Thu Jul 30 09:29:55.082047 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTSMSTask.inc"] [unique_id "amsLg8e32gSxxm4tVUOAdgAAAA0"]
[Thu Jul 30 09:29:55.082402 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTSMSTask.inc"] [unique_id "amsLg8e32gSxxm4tVUOAdgAAAA0"]
[Thu Jul 30 09:29:55.211855 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTUpdateFieldsTask.inc"] [unique_id "amsLg8e32gSxxm4tVUOAdwAAAA0"]
[Thu Jul 30 09:29:55.212115 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTUpdateFieldsTask.inc"] [unique_id "amsLg8e32gSxxm4tVUOAdwAAAA0"]
[Thu Jul 30 09:29:55.212488 2026] [security2:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/modules/com_vtiger_workflow/tasks/VTUpdateFieldsTask.inc"] [unique_id "amsLg8e32gSxxm4tVUOAdwAAAA0"]
[Thu Jul 30 09:29:55.999330 2026] [authz_core:error] [pid 2561092:tid 2561092] [client 144.172.105.5:40418] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/modules/uploads/error_log
[Thu Jul 30 09:29:57.320610 2026] [ssl:error] [pid 2569986:tid 2569986] (EAI 2)Name or service not known: [client 144.76.19.72:27162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:57.320645 2026] [ssl:error] [pid 2569986:tid 2569986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:57.376859 2026] [ssl:error] [pid 2566326:tid 2566326] (EAI 2)Name or service not known: [client 144.76.19.72:27168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:29:57.376894 2026] [ssl:error] [pid 2566326:tid 2566326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:29:59.409232 2026] [authz_core:error] [pid 2563233:tid 2563233] [client 144.172.105.5:40934] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/soap/error_log
[Thu Jul 30 09:30:00.444204 2026] [ssl:error] [pid 2568698:tid 2568698] (EAI 2)Name or service not known: [client 144.76.19.72:48516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:00.444274 2026] [ssl:error] [pid 2568698:tid 2568698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:00.500673 2026] [ssl:error] [pid 2571673:tid 2571673] (EAI 2)Name or service not known: [client 144.76.19.72:48528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:00.500700 2026] [ssl:error] [pid 2571673:tid 2571673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:01.665290 2026] [cgi:error] [pid 2552677:tid 2552677] [client 144.172.105.5:40992] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php80: script not found or unable to stat
[Thu Jul 30 09:30:01.926854 2026] [core:error] [pid 2571594:tid 2571594] (13)Permission denied: [client 216.73.216.199:8790] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/red_zone
[Thu Jul 30 09:30:03.555877 2026] [ssl:error] [pid 2570892:tid 2570892] (EAI 2)Name or service not known: [client 144.76.19.72:48534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:03.555909 2026] [ssl:error] [pid 2570892:tid 2570892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:03.610974 2026] [ssl:error] [pid 2566257:tid 2566257] (EAI 2)Name or service not known: [client 144.76.19.72:48544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:03.610998 2026] [ssl:error] [pid 2566257:tid 2566257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:04.839457 2026] [security2:error] [pid 2568699:tid 2568699] [client 74.7.227.45:50828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsLjJpZ0pCtkcrs5P1f2wAAABw"]
[Thu Jul 30 09:30:05.045562 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 57.141.0.59:24192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:30:05.046202 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 57.141.0.59:24192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:30:06.669388 2026] [ssl:error] [pid 2570299:tid 2570299] (EAI 2)Name or service not known: [client 144.76.19.72:48550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:06.669414 2026] [ssl:error] [pid 2570299:tid 2570299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:06.726894 2026] [ssl:error] [pid 2572663:tid 2572663] (EAI 2)Name or service not known: [client 144.76.19.72:48562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:06.726929 2026] [ssl:error] [pid 2572663:tid 2572663] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:08.508340 2026] [authz_core:error] [pid 2568699:tid 2568699] [client 57.141.0.15:62854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:30:08.508966 2026] [authz_core:error] [pid 2568699:tid 2568699] [client 57.141.0.15:62854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:30:09.783630 2026] [ssl:error] [pid 2572664:tid 2572664] (EAI 2)Name or service not known: [client 144.76.19.72:54238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:09.783663 2026] [ssl:error] [pid 2572664:tid 2572664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:09.841565 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:54248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:09.841604 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:10.587175 2026] [authz_core:error] [pid 2568698:tid 2568698] [client 57.141.0.13:31972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:30:10.587797 2026] [authz_core:error] [pid 2568698:tid 2568698] [client 57.141.0.13:31972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:30:11.305423 2026] [security2:error] [pid 2569985:tid 2569985] [client 85.208.96.212:47714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/caitlin-napoleoni-husband"] [unique_id "amsLk0-u3SrRinEhlo54wQAAABA"]
[Thu Jul 30 09:30:12.388617 2026] [security2:error] [pid 2562859:tid 2562859] [client 74.7.227.128:54280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/"] [unique_id "amsLlMPqMPsanrTaBZOm1wAAAAk"]
[Thu Jul 30 09:30:12.897265 2026] [ssl:error] [pid 2555021:tid 2555021] (EAI 2)Name or service not known: [client 144.76.19.72:54252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:12.897295 2026] [ssl:error] [pid 2555021:tid 2555021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:12.951274 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:54254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:12.951297 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:14.041708 2026] [core:error] [pid 2562859:tid 2562859] [client 66.249.66.169:43117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:14.041733 2026] [core:error] [pid 2562859:tid 2562859] [client 66.249.66.169:43117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:14.517536 2026] [access_compat:error] [pid 2569658:tid 2569658] [client 20.100.187.180:45650] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:30:15.188634 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 144.172.105.5:45566] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/vtlib/Vtiger/error_log
[Thu Jul 30 09:30:16.006117 2026] [ssl:error] [pid 2570299:tid 2570299] (EAI 2)Name or service not known: [client 144.76.19.72:54268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:16.006147 2026] [ssl:error] [pid 2570299:tid 2570299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:16.061874 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:54278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:16.061902 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:17.404643 2026] [security2:error] [pid 2570891:tid 2570891] [client 43.157.38.131:38958] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.edwardkensington.com"] [uri "/"] [unique_id "amsLmdI_Pz-9mcL0OstCqwAAAB4"]
[Thu Jul 30 09:30:17.408614 2026] [core:crit] [pid 2570891:tid 2570891] (13)Permission denied: [client 43.157.38.131:38958] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:30:19.118116 2026] [ssl:error] [pid 2566326:tid 2566326] (EAI 2)Name or service not known: [client 144.76.19.72:54290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:19.118144 2026] [ssl:error] [pid 2566326:tid 2566326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:19.172905 2026] [ssl:error] [pid 2566257:tid 2566257] (EAI 2)Name or service not known: [client 144.76.19.72:54306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:19.172948 2026] [ssl:error] [pid 2566257:tid 2566257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:21.725417 2026] [security2:error] [pid 2569984:tid 2569984] [client 47.128.44.41:31180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "nineteenthirtythree.butteredcat.com"] [uri "/robots.txt"] [unique_id "amsLnfxXcCowsLguGqAicwAAAAg"]
[Thu Jul 30 09:30:21.843666 2026] [core:error] [pid 2555021:tid 2555021] [client 66.249.66.67:39364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:21.843709 2026] [core:error] [pid 2555021:tid 2555021] [client 66.249.66.67:39364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:22.227369 2026] [ssl:error] [pid 2566728:tid 2566728] (EAI 2)Name or service not known: [client 144.76.19.72:36526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:22.227406 2026] [ssl:error] [pid 2566728:tid 2566728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:22.283435 2026] [ssl:error] [pid 2572608:tid 2572608] (EAI 2)Name or service not known: [client 144.76.19.72:36536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:22.283470 2026] [ssl:error] [pid 2572608:tid 2572608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:22.586808 2026] [authz_core:error] [pid 2571858:tid 2571858] [client 144.172.105.5:45674] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/vtlib/Vtiger/Net/error_log
[Thu Jul 30 09:30:22.975783 2026] [authz_core:error] [pid 2571858:tid 2571858] [client 144.172.105.5:45674] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/vtlib/Vtiger/PDF/error_log
[Thu Jul 30 09:30:25.336163 2026] [ssl:error] [pid 2555696:tid 2555696] (EAI 2)Name or service not known: [client 144.76.19.72:36552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:25.336201 2026] [ssl:error] [pid 2555696:tid 2555696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:25.390660 2026] [ssl:error] [pid 2570991:tid 2570991] (EAI 2)Name or service not known: [client 144.76.19.72:36554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:25.390692 2026] [ssl:error] [pid 2570991:tid 2570991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:27.348929 2026] [core:error] [pid 2568729:tid 2568729] (13)Permission denied: [client 216.73.216.199:17103] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_system_zone/trace
[Thu Jul 30 09:30:27.368320 2026] [authz_core:error] [pid 2569985:tid 2569985] [client 144.172.105.5:45694] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/vtlib/thirdparty/network/error_log
[Thu Jul 30 09:30:28.202440 2026] [security2:error] [pid 2566728:tid 2566728] [client 85.208.98.19:47774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/under-armour-compression-golf-k.html"] [unique_id "amsLpDdjLTyWP0bN8blrugAAACs"]
[Thu Jul 30 09:30:28.443418 2026] [ssl:error] [pid 2573513:tid 2573513] (EAI 2)Name or service not known: [client 144.76.19.72:36564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:28.443499 2026] [ssl:error] [pid 2573513:tid 2573513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:28.499412 2026] [ssl:error] [pid 2566728:tid 2566728] (EAI 2)Name or service not known: [client 144.76.19.72:36578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:28.499443 2026] [ssl:error] [pid 2566728:tid 2566728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:29.676866 2026] [security2:error] [pid 2573513:tid 2573513] [client 144.172.105.5:60544] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/vtlib/thirdparty/parser/feed/simplepie.inc"] [unique_id "amsLpX0IPjrTu_C1PMneKAAAAAY"]
[Thu Jul 30 09:30:29.677167 2026] [security2:error] [pid 2573513:tid 2573513] [client 144.172.105.5:60544] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/vtlib/thirdparty/parser/feed/simplepie.inc"] [unique_id "amsLpX0IPjrTu_C1PMneKAAAAAY"]
[Thu Jul 30 09:30:29.677548 2026] [security2:error] [pid 2573513:tid 2573513] [client 144.172.105.5:60544] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/vtlib/thirdparty/parser/feed/simplepie.inc"] [unique_id "amsLpX0IPjrTu_C1PMneKAAAAAY"]
[Thu Jul 30 09:30:30.042791 2026] [security2:error] [pid 2570891:tid 2570891] [client 43.166.246.180:35474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bashforthbell.com"] [uri "/"] [unique_id "amsLptI_Pz-9mcL0OstCsAAAAB4"]
[Thu Jul 30 09:30:30.179819 2026] [security2:error] [pid 2528544:tid 2528544] [client 114.119.155.144:31767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15/request_format~html"] [unique_id "amsLps6r7Zd1zXM1G48gxAAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~15/request_format~html
[Thu Jul 30 09:30:31.259182 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.166.246.180:35878] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amsLp1WJAdF0CnOeHdAADAAAADA"], referer: http://bashforthbell.com
[Thu Jul 30 09:30:31.572141 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:55586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:31.572176 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:31.624874 2026] [ssl:error] [pid 2572663:tid 2572663] (EAI 2)Name or service not known: [client 144.76.19.72:55592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:31.624900 2026] [ssl:error] [pid 2572663:tid 2572663] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:31.633002 2026] [security2:error] [pid 2573649:tid 2573649] [client 114.119.155.144:31769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15/request_format~html"] [unique_id "amsLp1QAEWzEnzjjuDt8RQAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~15/request_format~html
[Thu Jul 30 09:30:33.580373 2026] [cgi:error] [pid 2569910:tid 2569910] [client 20.100.187.180:51819] AH02812: stderr from /home/orgent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:30:34.690515 2026] [ssl:error] [pid 2570819:tid 2570819] (EAI 2)Name or service not known: [client 144.76.19.72:55608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:34.690558 2026] [ssl:error] [pid 2570819:tid 2570819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:34.746886 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:55622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:34.746907 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:35.899170 2026] [authz_core:error] [pid 2569658:tid 2569658] [client 20.100.187.180:45650] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/l10n/error_log
[Thu Jul 30 09:30:35.990298 2026] [access_compat:error] [pid 2569658:tid 2569658] [client 20.100.187.180:45650] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:30:36.917838 2026] [authz_core:error] [pid 2570819:tid 2570819] [client 57.141.0.4:45464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:30:36.918461 2026] [authz_core:error] [pid 2570819:tid 2570819] [client 57.141.0.4:45464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:30:37.800476 2026] [ssl:error] [pid 2572665:tid 2572665] (EAI 2)Name or service not known: [client 144.76.19.72:55632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:37.800505 2026] [ssl:error] [pid 2572665:tid 2572665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:37.858500 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:55648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:37.858528 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:38.858296 2026] [security2:error] [pid 2529748:tid 2529748] [client 23.23.103.31:58011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2024/09/6-Easedale-Tarn.jpg"] [unique_id "amsLrroknnVK7uKpm-07gAAAACM"]
[Thu Jul 30 09:30:40.936301 2026] [ssl:error] [pid 2566258:tid 2566258] (EAI 2)Name or service not known: [client 144.76.19.72:64568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:40.936348 2026] [ssl:error] [pid 2566258:tid 2566258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:40.994381 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:64572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:40.994412 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:41.674008 2026] [authz_core:error] [pid 2572608:tid 2572608] [client 57.141.0.58:62282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:30:41.674638 2026] [authz_core:error] [pid 2572608:tid 2572608] [client 57.141.0.58:62282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:30:43.305156 2026] [security2:error] [pid 2573851:tid 2573851] [client 23.21.228.180:39432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/6519"] [unique_id "amsLs7ezYKDwH88o69jQogAAAAk"]
[Thu Jul 30 09:30:43.817936 2026] [security2:error] [pid 2570892:tid 2570892] [client 185.191.171.9:15732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8615.0/prev_next,next.html"] [unique_id "amsLs5_ohiXbFF1WhUxQJQAAACQ"]
[Thu Jul 30 09:30:44.176334 2026] [ssl:error] [pid 2574328:tid 2574328] (EAI 2)Name or service not known: [client 144.76.19.72:64578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:44.176376 2026] [ssl:error] [pid 2574328:tid 2574328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:44.260593 2026] [ssl:error] [pid 2570299:tid 2570299] (EAI 2)Name or service not known: [client 144.76.19.72:64590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:44.260618 2026] [ssl:error] [pid 2570299:tid 2570299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:44.495092 2026] [core:error] [pid 2570299:tid 2570299] [client 66.249.64.170:46087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:44.495121 2026] [core:error] [pid 2570299:tid 2570299] [client 66.249.64.170:46087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:47.128181 2026] [security2:error] [pid 2572663:tid 2572663] [client 98.84.184.80:12350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/18796"] [unique_id "amsLt1WJAdF0CnOeHdAAFwAAADA"]
[Thu Jul 30 09:30:47.317256 2026] [ssl:error] [pid 2570992:tid 2570992] (EAI 2)Name or service not known: [client 144.76.19.72:64604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:47.317312 2026] [ssl:error] [pid 2570992:tid 2570992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:47.373984 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:64614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:47.374047 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:47.640271 2026] [lsapi:warn] [pid 2574428:tid 2574428] [client 145.14.10.39:50056] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:30:47.640316 2026] [lsapi:warn] [pid 2574428:tid 2574428] [client 145.14.10.39:50056] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:30:50.433269 2026] [ssl:error] [pid 2574654:tid 2574654] (EAI 2)Name or service not known: [client 144.76.19.72:57336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:50.433309 2026] [ssl:error] [pid 2574654:tid 2574654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:50.485551 2026] [ssl:error] [pid 2573851:tid 2573851] (EAI 2)Name or service not known: [client 144.76.19.72:57346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:50.485616 2026] [ssl:error] [pid 2573851:tid 2573851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:51.198570 2026] [core:error] [pid 2555696:tid 2555696] [client 66.249.64.171:58888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:51.198605 2026] [core:error] [pid 2555696:tid 2555696] [client 66.249.64.171:58888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:30:51.246058 2026] [security2:error] [pid 2574654:tid 2574654] [client 54.225.98.148:16898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/feed/"] [unique_id "amsLuwKAjV26v9kzD-xDewAAADU"]
[Thu Jul 30 09:30:51.723308 2026] [authz_core:error] [pid 2570892:tid 2570892] [client 57.141.0.63:30964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:30:51.724118 2026] [authz_core:error] [pid 2570892:tid 2570892] [client 57.141.0.63:30964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:30:51.928763 2026] [security2:error] [pid 2570992:tid 2570992] [client 43.130.101.151:48684] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-atrox-killers.net"] [uri "/"] [unique_id "amsLuxt5Eaw6Mzr3Vr35dgAAAC4"]
[Thu Jul 30 09:30:53.541368 2026] [ssl:error] [pid 2529748:tid 2529748] (EAI 2)Name or service not known: [client 144.76.19.72:57350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:53.541400 2026] [ssl:error] [pid 2529748:tid 2529748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:53.597064 2026] [ssl:error] [pid 2555696:tid 2555696] (EAI 2)Name or service not known: [client 144.76.19.72:57356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:53.597114 2026] [ssl:error] [pid 2555696:tid 2555696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:54.745042 2026] [security2:error] [pid 2570991:tid 2570991] [client 20.171.55.167:1246] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mwdesign.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsLvoPZlc0e_o1SiqYcGwAAAC0"]
[Thu Jul 30 09:30:54.745270 2026] [security2:error] [pid 2570991:tid 2570991] [client 20.171.55.167:1246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mwdesign.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsLvoPZlc0e_o1SiqYcGwAAAC0"]
[Thu Jul 30 09:30:54.745514 2026] [security2:error] [pid 2570991:tid 2570991] [client 20.171.55.167:1246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mwdesign.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsLvoPZlc0e_o1SiqYcGwAAAC0"]
[Thu Jul 30 09:30:56.652959 2026] [ssl:error] [pid 2574424:tid 2574424] (EAI 2)Name or service not known: [client 144.76.19.72:57358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:56.652993 2026] [ssl:error] [pid 2574424:tid 2574424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:56.710020 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:57372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:56.710054 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:58.792891 2026] [lsapi:warn] [pid 2572663:tid 2572663] [client 194.249.231.23:45420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 09:30:58.792936 2026] [lsapi:warn] [pid 2572663:tid 2572663] [client 194.249.231.23:45420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 09:30:59.763997 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:59296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:59.764026 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:30:59.820273 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:59312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:30:59.820299 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:00.106413 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 144.172.105.5:60762] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/error_log
[Thu Jul 30 09:31:02.357987 2026] [core:error] [pid 2568729:tid 2568729] (13)Permission denied: [client 216.73.216.199:17103] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/scsi_sense_cache/validate
[Thu Jul 30 09:31:02.915998 2026] [ssl:error] [pid 2570991:tid 2570991] (EAI 2)Name or service not known: [client 144.76.19.72:59324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:02.916040 2026] [ssl:error] [pid 2570991:tid 2570991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:02.968836 2026] [ssl:error] [pid 2570892:tid 2570892] (EAI 2)Name or service not known: [client 144.76.19.72:59332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:02.968863 2026] [ssl:error] [pid 2570892:tid 2570892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:06.024757 2026] [ssl:error] [pid 2570892:tid 2570892] (EAI 2)Name or service not known: [client 144.76.19.72:59344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:06.024790 2026] [ssl:error] [pid 2570892:tid 2570892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:06.081723 2026] [ssl:error] [pid 2566257:tid 2566257] (EAI 2)Name or service not known: [client 144.76.19.72:59360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:06.081747 2026] [ssl:error] [pid 2566257:tid 2566257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:06.442644 2026] [core:error] [pid 2570989:tid 2570989] [client 66.249.66.8:37742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:06.442671 2026] [core:error] [pid 2570989:tid 2570989] [client 66.249.66.8:37742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:09.135214 2026] [ssl:error] [pid 2573851:tid 2573851] (EAI 2)Name or service not known: [client 144.76.19.72:59372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:09.135245 2026] [ssl:error] [pid 2573851:tid 2573851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:09.190523 2026] [ssl:error] [pid 2574116:tid 2574116] (EAI 2)Name or service not known: [client 144.76.19.72:59384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:09.190554 2026] [ssl:error] [pid 2574116:tid 2574116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:09.833615 2026] [authz_core:error] [pid 2574426:tid 2574426] [client 144.172.105.5:32958] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/error_log
[Thu Jul 30 09:31:10.778931 2026] [access_compat:error] [pid 2574428:tid 2574428] [client 52.167.144.23:63733] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/cloverfield
[Thu Jul 30 09:31:10.779031 2026] [access_compat:error] [pid 2574428:tid 2574428] [client 52.167.144.23:63733] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:31:11.336658 2026] [security2:error] [pid 2569984:tid 2569984] [client 74.7.227.142:48322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.vain.band"] [uri "/sitemap.xml"] [unique_id "amsLz_xXcCowsLguGqAivgAAAAg"]
[Thu Jul 30 09:31:11.916264 2026] [security2:error] [pid 2562261:tid 2562261] [client 185.191.171.17:60230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/private-mental-hospital-in-sri-lanka"] [unique_id "amsLzx8T63ng5AVmkut8oAAAACA"]
[Thu Jul 30 09:31:12.245005 2026] [ssl:error] [pid 2562261:tid 2562261] (EAI 2)Name or service not known: [client 144.76.19.72:61662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:12.245047 2026] [ssl:error] [pid 2562261:tid 2562261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:12.298518 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:61666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:12.298559 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:13.339180 2026] [authz_core:error] [pid 2573851:tid 2573851] [client 52.167.144.142:35532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:31:13.339822 2026] [authz_core:error] [pid 2573851:tid 2573851] [client 52.167.144.142:35532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:31:15.356282 2026] [ssl:error] [pid 2564595:tid 2564595] (EAI 2)Name or service not known: [client 144.76.19.72:61672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:15.356313 2026] [ssl:error] [pid 2564595:tid 2564595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:15.410508 2026] [ssl:error] [pid 2566257:tid 2566257] (EAI 2)Name or service not known: [client 144.76.19.72:61686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:15.410531 2026] [ssl:error] [pid 2566257:tid 2566257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:17.361738 2026] [ssl:error] [pid 2568729:tid 2568729] (70014)End of file found: [client 216.73.216.199:17103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:31:18.471894 2026] [ssl:error] [pid 2566257:tid 2566257] (EAI 2)Name or service not known: [client 144.76.19.72:61702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:18.471932 2026] [ssl:error] [pid 2566257:tid 2566257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:18.528942 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:61716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:18.528972 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:19.848520 2026] [core:error] [pid 2574116:tid 2574116] [client 66.249.64.170:55519] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:19.848555 2026] [core:error] [pid 2574116:tid 2574116] [client 66.249.64.170:55519] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:20.130937 2026] [authz_core:error] [pid 2573649:tid 2573649] [client 57.141.0.2:38490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:31:20.131568 2026] [authz_core:error] [pid 2573649:tid 2573649] [client 57.141.0.2:38490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:31:21.234460 2026] [access_compat:error] [pid 2573649:tid 2573649] [client 94.154.43.186:28188] AH01797: client denied by server configuration: /home/winterb/public_html/drupal2/.env
[Thu Jul 30 09:31:21.236645 2026] [security2:error] [pid 2570989:tid 2570989] [client 94.154.43.186:28174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.nortonnews.dbstart.co.uk"] [uri "/.env"] [unique_id "amsL2XXpWQqAqP0uNK4MLQAAACk"]
[Thu Jul 30 09:31:21.236881 2026] [security2:error] [pid 2570989:tid 2570989] [client 94.154.43.186:28174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nortonnews.dbstart.co.uk"] [uri "/.env"] [unique_id "amsL2XXpWQqAqP0uNK4MLQAAACk"]
[Thu Jul 30 09:31:21.237307 2026] [security2:error] [pid 2570989:tid 2570989] [client 94.154.43.186:28174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.nortonnews.dbstart.co.uk"] [uri "/.env"] [unique_id "amsL2XXpWQqAqP0uNK4MLQAAACk"]
[Thu Jul 30 09:31:21.427580 2026] [core:error] [pid 2528544:tid 2528544] [client 104.210.140.133:5961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:21.427634 2026] [core:error] [pid 2528544:tid 2528544] [client 104.210.140.133:5961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:21.591774 2026] [ssl:error] [pid 2572608:tid 2572608] (EAI 2)Name or service not known: [client 144.76.19.72:45864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:21.591822 2026] [ssl:error] [pid 2572608:tid 2572608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:21.643038 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:45868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:21.643089 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:21.990821 2026] [security2:error] [pid 2566728:tid 2566728] [client 94.154.43.179:51548] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsL2TdjLTyWP0bN8blr0gAAACs"]
[Thu Jul 30 09:31:21.991030 2026] [security2:error] [pid 2566728:tid 2566728] [client 94.154.43.179:51548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsL2TdjLTyWP0bN8blr0gAAACs"]
[Thu Jul 30 09:31:21.991409 2026] [security2:error] [pid 2566728:tid 2566728] [client 94.154.43.179:51548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsL2TdjLTyWP0bN8blr0gAAACs"]
[Thu Jul 30 09:31:22.132590 2026] [access_compat:error] [pid 2573649:tid 2573649] [client 47.128.120.175:63446] AH01797: client denied by server configuration: /home/nspandor/public_html/robots.txt
[Thu Jul 30 09:31:22.471836 2026] [authz_core:error] [pid 2574381:tid 2574381] [client 66.249.66.34:62288] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:31:22.474648 2026] [authz_core:error] [pid 2574381:tid 2574381] [client 66.249.66.34:62288] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:31:24.557198 2026] [authz_core:error] [pid 2574328:tid 2574328] [client 57.141.0.17:36458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:31:24.557824 2026] [authz_core:error] [pid 2574328:tid 2574328] [client 57.141.0.17:36458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:31:24.698640 2026] [ssl:error] [pid 2574060:tid 2574060] (EAI 2)Name or service not known: [client 144.76.19.72:45874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:24.698672 2026] [ssl:error] [pid 2574060:tid 2574060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:24.753333 2026] [ssl:error] [pid 2572665:tid 2572665] (EAI 2)Name or service not known: [client 144.76.19.72:45878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:24.753369 2026] [ssl:error] [pid 2572665:tid 2572665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:27.584868 2026] [authz_core:error] [pid 2574428:tid 2574428] [client 172.71.158.204:10752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:31:27.585594 2026] [authz_core:error] [pid 2574428:tid 2574428] [client 172.71.158.204:10752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:31:27.807551 2026] [ssl:error] [pid 2570299:tid 2570299] (EAI 2)Name or service not known: [client 144.76.19.72:45886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:27.807594 2026] [ssl:error] [pid 2570299:tid 2570299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:27.863853 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:45888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:27.863898 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:29.403420 2026] [security2:error] [pid 2576499:tid 2576499] [client 47.128.34.24:14204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amsL4cQzgmnSEII5c7NM7AAAABE"]
[Thu Jul 30 09:31:29.828716 2026] [security2:error] [pid 2566257:tid 2566257] [client 185.191.171.10:39748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9762.0.html"] [unique_id "amsL4Zaqy9a760Kepm9IaAAAAA4"]
[Thu Jul 30 09:31:29.864922 2026] [access_compat:error] [pid 2547448:tid 2547448] [client 45.158.164.139:53686] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:31:30.921854 2026] [ssl:error] [pid 2577576:tid 2577576] (EAI 2)Name or service not known: [client 144.76.19.72:60962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:30.921908 2026] [ssl:error] [pid 2577576:tid 2577576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:30.975469 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:60972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:30.975502 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:32.222767 2026] [ssl:error] [pid 2571594:tid 2571594] (70014)End of file found: [client 216.73.216.199:63155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:31:34.042142 2026] [ssl:error] [pid 2574116:tid 2574116] (EAI 2)Name or service not known: [client 144.76.19.72:60978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:34.042204 2026] [ssl:error] [pid 2574116:tid 2574116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:34.096762 2026] [ssl:error] [pid 2555021:tid 2555021] (EAI 2)Name or service not known: [client 144.76.19.72:60980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:34.096801 2026] [ssl:error] [pid 2555021:tid 2555021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:34.814964 2026] [authz_core:error] [pid 2547448:tid 2547448] [client 66.249.66.33:58805] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:31:34.817718 2026] [authz_core:error] [pid 2547448:tid 2547448] [client 66.249.66.33:58805] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:31:35.982291 2026] [authz_core:error] [pid 2575413:tid 2575413] [client 144.172.105.5:57214] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/ID3/error_log
[Thu Jul 30 09:31:36.409052 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.166.224.244:40732] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amsL6M5R61aQyc9i4fQmPgAAACU"]
[Thu Jul 30 09:31:37.154607 2026] [ssl:error] [pid 2574382:tid 2574382] (EAI 2)Name or service not known: [client 144.76.19.72:60984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:37.154656 2026] [ssl:error] [pid 2574382:tid 2574382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:37.215526 2026] [ssl:error] [pid 2575413:tid 2575413] (EAI 2)Name or service not known: [client 144.76.19.72:60988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:37.215567 2026] [ssl:error] [pid 2575413:tid 2575413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:38.871662 2026] [security2:error] [pid 2572665:tid 2572665] [client 85.208.98.20:49016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/mobilya-ayak-tablas%C4%B1-k.html"] [unique_id "amsL6kdGyaSc7FKZxb0B9AAAADI"]
[Thu Jul 30 09:31:39.293965 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.166.224.244:35360] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsL685R61aQyc9i4fQmPwAAACU"], referer: http://retrodisco.co.uk
[Thu Jul 30 09:31:40.270542 2026] [ssl:error] [pid 2566258:tid 2566258] (EAI 2)Name or service not known: [client 144.76.19.72:26458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:40.270591 2026] [ssl:error] [pid 2566258:tid 2566258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:40.321933 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:26460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:40.321986 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:41.446243 2026] [authz_core:error] [pid 2537717:tid 2537717] [client 144.172.105.5:57354] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/SimplePie/error_log
[Thu Jul 30 09:31:42.418994 2026] [ssl:error] [pid 2577527:tid 2577527] (70014)End of file found: [client 216.73.216.199:59129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:31:42.571252 2026] [security2:error] [pid 2547448:tid 2547448] [client 94.154.43.185:35836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.env"] [unique_id "amsL7pPBAO23C6MAa3YbogAAAAo"]
[Thu Jul 30 09:31:42.571444 2026] [security2:error] [pid 2547448:tid 2547448] [client 94.154.43.185:35836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.env"] [unique_id "amsL7pPBAO23C6MAa3YbogAAAAo"]
[Thu Jul 30 09:31:42.571624 2026] [security2:error] [pid 2547448:tid 2547448] [client 94.154.43.185:35836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/403.shtml"] [unique_id "amsL7pPBAO23C6MAa3YbogAAAAo"]
[Thu Jul 30 09:31:43.379531 2026] [ssl:error] [pid 2547448:tid 2547448] (EAI 2)Name or service not known: [client 144.76.19.72:26466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:43.379563 2026] [ssl:error] [pid 2547448:tid 2547448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:43.489610 2026] [ssl:error] [pid 2570991:tid 2570991] (EAI 2)Name or service not known: [client 144.76.19.72:26478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:43.489659 2026] [ssl:error] [pid 2570991:tid 2570991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:44.515046 2026] [security2:error] [pid 2564595:tid 2564595] [client 144.172.105.5:57360] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wordpress0/wp-includes/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dbstart.co.uk"] [uri "/wordpress0/wp-includes/SimplePie/gzdecode.php"] [unique_id "amsL8IMmAJpnDHoe4o56TQAAACY"]
[Thu Jul 30 09:31:44.515238 2026] [security2:error] [pid 2564595:tid 2564595] [client 144.172.105.5:57360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/wordpress0/wp-includes/SimplePie/gzdecode.php"] [unique_id "amsL8IMmAJpnDHoe4o56TQAAACY"]
[Thu Jul 30 09:31:44.515624 2026] [security2:error] [pid 2564595:tid 2564595] [client 144.172.105.5:57360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/wordpress0/wp-includes/SimplePie/gzdecode.php"] [unique_id "amsL8IMmAJpnDHoe4o56TQAAACY"]
[Thu Jul 30 09:31:44.771115 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 144.172.105.5:57360] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/SimplePie/Cache/error_log
[Thu Jul 30 09:31:46.261033 2026] [access_compat:error] [pid 2564595:tid 2564595] [client 47.128.120.230:22998] AH01797: client denied by server configuration: /home/nspandor/public_html/NSSCANNER-QUEUE-ae87408d9ea2f1a7aa8a38b63ef6c537.txt
[Thu Jul 30 09:31:46.544246 2026] [ssl:error] [pid 2569985:tid 2569985] (EAI 2)Name or service not known: [client 144.76.19.72:26480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:46.544273 2026] [ssl:error] [pid 2569985:tid 2569985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:46.608567 2026] [ssl:error] [pid 2578371:tid 2578371] (EAI 2)Name or service not known: [client 144.76.19.72:26494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:46.608614 2026] [ssl:error] [pid 2578371:tid 2578371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:47.943306 2026] [security2:error] [pid 2573649:tid 2573649] [client 74.7.227.58:43380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/wp-sitemap.xml"] [unique_id "amsL81QAEWzEnzjjuDt8XgAAAAc"]
[Thu Jul 30 09:31:49.461689 2026] [authz_core:error] [pid 2572665:tid 2572665] [client 57.141.0.41:51564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:31:49.462315 2026] [authz_core:error] [pid 2572665:tid 2572665] [client 57.141.0.41:51564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:31:49.650493 2026] [security2:error] [pid 2578668:tid 2578668] [client 85.208.96.199:16442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9109.0/prev_next,next.html"] [unique_id "amsL9UNcDPQCuirD9TM79wAAACg"]
[Thu Jul 30 09:31:49.666248 2026] [ssl:error] [pid 2570892:tid 2570892] (EAI 2)Name or service not known: [client 144.76.19.72:38508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:49.666271 2026] [ssl:error] [pid 2570892:tid 2570892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:49.721134 2026] [ssl:error] [pid 2570891:tid 2570891] (EAI 2)Name or service not known: [client 144.76.19.72:38518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:49.721169 2026] [ssl:error] [pid 2570891:tid 2570891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:51.771466 2026] [authz_core:error] [pid 2578371:tid 2578371] [client 57.141.0.49:26600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:31:51.772100 2026] [authz_core:error] [pid 2578371:tid 2578371] [client 57.141.0.49:26600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:31:52.442474 2026] [ssl:error] [pid 2578796:tid 2578796] (70014)End of file found: [client 216.73.216.199:14087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:31:52.776924 2026] [ssl:error] [pid 2578797:tid 2578797] (EAI 2)Name or service not known: [client 144.76.19.72:38534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:52.776955 2026] [ssl:error] [pid 2578797:tid 2578797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:52.834370 2026] [ssl:error] [pid 2564595:tid 2564595] (EAI 2)Name or service not known: [client 144.76.19.72:38550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:52.834400 2026] [ssl:error] [pid 2564595:tid 2564595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:54.168333 2026] [security2:error] [pid 2578795:tid 2578795] [client 114.119.158.38:36317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15,104/request_format~html"] [unique_id "amsL-lX_fqIxYoVu9feDbQAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,104,30/request_format~html
[Thu Jul 30 09:31:55.534459 2026] [authz_core:error] [pid 2578668:tid 2578668] [client 57.141.0.48:63292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:31:55.535117 2026] [authz_core:error] [pid 2578668:tid 2578668] [client 57.141.0.48:63292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:31:55.695229 2026] [security2:error] [pid 2566258:tid 2566258] [client 114.119.158.38:36323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15,104/request_format~html"] [unique_id "amsL-2bLrH8J63ezKP64RAAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,104,30/request_format~html
[Thu Jul 30 09:31:55.858536 2026] [authz_core:error] [pid 2569985:tid 2569985] [client 66.249.66.33:38629] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:31:55.861209 2026] [authz_core:error] [pid 2569985:tid 2569985] [client 66.249.66.33:38629] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:31:55.891525 2026] [ssl:error] [pid 2578795:tid 2578795] (EAI 2)Name or service not known: [client 144.76.19.72:38554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:55.891556 2026] [ssl:error] [pid 2578795:tid 2578795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:55.944935 2026] [ssl:error] [pid 2572608:tid 2572608] (EAI 2)Name or service not known: [client 144.76.19.72:38566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:55.944963 2026] [ssl:error] [pid 2572608:tid 2572608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:56.516199 2026] [core:error] [pid 2578103:tid 2578103] [client 20.104.22.47:22289] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:56.516238 2026] [core:error] [pid 2578103:tid 2578103] [client 20.104.22.47:22289] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:56.925737 2026] [authz_core:error] [pid 2571594:tid 2571594] [client 144.172.105.5:44522] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/js/tinymce/error_log
[Thu Jul 30 09:31:57.293168 2026] [core:error] [pid 2578103:tid 2578103] [client 20.104.22.47:22791] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:57.293203 2026] [core:error] [pid 2578103:tid 2578103] [client 20.104.22.47:22791] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:57.739205 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:57.739233 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:58.275248 2026] [core:error] [pid 2570299:tid 2570299] [client 20.104.22.47:22314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:58.275287 2026] [core:error] [pid 2570299:tid 2570299] [client 20.104.22.47:22314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:58.697172 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:58.697201 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:58.998709 2026] [ssl:error] [pid 2577576:tid 2577576] (EAI 2)Name or service not known: [client 144.76.19.72:38576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:58.998737 2026] [ssl:error] [pid 2577576:tid 2577576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:59.049848 2026] [ssl:error] [pid 2572608:tid 2572608] (EAI 2)Name or service not known: [client 144.76.19.72:38582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:31:59.049881 2026] [ssl:error] [pid 2572608:tid 2572608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:31:59.896501 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:31:59.896525 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:00.198877 2026] [security2:error] [pid 2570989:tid 2570989] [client 118.24.135.34:45646] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sijames.com"] [uri "/"] [unique_id "amsMAHXpWQqAqP0uNK4MlwAAACk"]
[Thu Jul 30 09:32:00.774960 2026] [authz_core:error] [pid 2571594:tid 2571594] [client 144.172.105.5:37722] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/js/tinymce/plugins/spellchecker/error_log
[Thu Jul 30 09:32:00.783467 2026] [authz_core:error] [pid 2569985:tid 2569985] [client 57.141.0.44:36304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:32:00.784095 2026] [authz_core:error] [pid 2569985:tid 2569985] [client 57.141.0.44:36304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:32:01.137946 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amsMAUdGyaSc7FKZxb0CBAAAADI"]
[Thu Jul 30 09:32:01.138160 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amsMAUdGyaSc7FKZxb0CBAAAADI"]
[Thu Jul 30 09:32:01.138683 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAUdGyaSc7FKZxb0CBAAAADI"]
[Thu Jul 30 09:32:01.163548 2026] [security2:error] [pid 2572609:tid 2572609] [client 43.165.5.90:50180] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amsMAXcI8VAC3Ysgn4seUAAAAB8"]
[Thu Jul 30 09:32:01.163744 2026] [security2:error] [pid 2572609:tid 2572609] [client 43.165.5.90:50180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amsMAXcI8VAC3Ysgn4seUAAAAB8"]
[Thu Jul 30 09:32:01.163958 2026] [security2:error] [pid 2572609:tid 2572609] [client 43.165.5.90:50180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAXcI8VAC3Ysgn4seUAAAAB8"]
[Thu Jul 30 09:32:01.458329 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "amsMAUdGyaSc7FKZxb0CBQAAADI"]
[Thu Jul 30 09:32:01.458532 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "amsMAUdGyaSc7FKZxb0CBQAAADI"]
[Thu Jul 30 09:32:01.459008 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAUdGyaSc7FKZxb0CBQAAADI"]
[Thu Jul 30 09:32:01.525035 2026] [security2:error] [pid 2572609:tid 2572609] [client 43.165.5.90:50186] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "amsMAXcI8VAC3Ysgn4seUQAAAB8"]
[Thu Jul 30 09:32:01.525248 2026] [security2:error] [pid 2572609:tid 2572609] [client 43.165.5.90:50186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "amsMAXcI8VAC3Ysgn4seUQAAAB8"]
[Thu Jul 30 09:32:01.525460 2026] [security2:error] [pid 2572609:tid 2572609] [client 43.165.5.90:50186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAXcI8VAC3Ysgn4seUQAAAB8"]
[Thu Jul 30 09:32:01.841132 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:50208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amsMAfjZrlWmSE7FhEVvBAAAACI"]
[Thu Jul 30 09:32:01.841321 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:50208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amsMAfjZrlWmSE7FhEVvBAAAACI"]
[Thu Jul 30 09:32:01.841558 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:50208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAfjZrlWmSE7FhEVvBAAAACI"]
[Thu Jul 30 09:32:01.850525 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "amsMAUdGyaSc7FKZxb0CBgAAADI"]
[Thu Jul 30 09:32:01.850707 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "amsMAUdGyaSc7FKZxb0CBgAAADI"]
[Thu Jul 30 09:32:01.851219 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAUdGyaSc7FKZxb0CBgAAADI"]
[Thu Jul 30 09:32:01.909295 2026] [security2:error] [pid 2578729:tid 2578729] [client 43.165.5.90:50214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "amsMARKTqStORFOZb54AvAAAACs"]
[Thu Jul 30 09:32:01.909492 2026] [security2:error] [pid 2578729:tid 2578729] [client 43.165.5.90:50214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "amsMARKTqStORFOZb54AvAAAACs"]
[Thu Jul 30 09:32:01.909721 2026] [security2:error] [pid 2578729:tid 2578729] [client 43.165.5.90:50214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMARKTqStORFOZb54AvAAAACs"]
[Thu Jul 30 09:32:01.924699 2026] [authz_core:error] [pid 2573649:tid 2573649] [client 57.141.0.31:39868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:32:01.925335 2026] [authz_core:error] [pid 2573649:tid 2573649] [client 57.141.0.31:39868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:32:02.101934 2026] [ssl:error] [pid 2573851:tid 2573851] (EAI 2)Name or service not known: [client 144.76.19.72:52036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:02.101965 2026] [ssl:error] [pid 2573851:tid 2573851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:02.155231 2026] [ssl:error] [pid 2574382:tid 2574382] (EAI 2)Name or service not known: [client 144.76.19.72:52046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:02.155261 2026] [ssl:error] [pid 2574382:tid 2574382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:02.354285 2026] [security2:error] [pid 2573513:tid 2573513] [client 43.165.5.90:50218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "amsMAn0IPjrTu_C1PMnengAAAAY"]
[Thu Jul 30 09:32:02.354472 2026] [security2:error] [pid 2573513:tid 2573513] [client 43.165.5.90:50218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "amsMAn0IPjrTu_C1PMnengAAAAY"]
[Thu Jul 30 09:32:02.354692 2026] [security2:error] [pid 2573513:tid 2573513] [client 43.165.5.90:50218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAn0IPjrTu_C1PMnengAAAAY"]
[Thu Jul 30 09:32:02.606312 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "amsMAkdGyaSc7FKZxb0CBwAAADI"]
[Thu Jul 30 09:32:02.606522 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "amsMAkdGyaSc7FKZxb0CBwAAADI"]
[Thu Jul 30 09:32:02.606996 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAkdGyaSc7FKZxb0CBwAAADI"]
[Thu Jul 30 09:32:02.686694 2026] [core:error] [pid 2573649:tid 2573649] [client 20.104.22.47:22317] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:02.686720 2026] [core:error] [pid 2573649:tid 2573649] [client 20.104.22.47:22317] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:02.704895 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:50234] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "amsMAm4pI4io4GF2Xyo8QgAAABQ"]
[Thu Jul 30 09:32:02.705150 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:50234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "amsMAm4pI4io4GF2Xyo8QgAAABQ"]
[Thu Jul 30 09:32:02.705376 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:50234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAm4pI4io4GF2Xyo8QgAAABQ"]
[Thu Jul 30 09:32:02.754383 2026] [security2:error] [pid 2578729:tid 2578729] [client 43.165.5.90:50244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "amsMAhKTqStORFOZb54AvgAAACs"]
[Thu Jul 30 09:32:02.754571 2026] [security2:error] [pid 2578729:tid 2578729] [client 43.165.5.90:50244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "amsMAhKTqStORFOZb54AvgAAACs"]
[Thu Jul 30 09:32:02.754778 2026] [security2:error] [pid 2578729:tid 2578729] [client 43.165.5.90:50244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMAhKTqStORFOZb54AvgAAACs"]
[Thu Jul 30 09:32:03.208962 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "amsMA0dGyaSc7FKZxb0CCAAAADI"]
[Thu Jul 30 09:32:03.209222 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "amsMA0dGyaSc7FKZxb0CCAAAADI"]
[Thu Jul 30 09:32:03.209730 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMA0dGyaSc7FKZxb0CCAAAADI"]
[Thu Jul 30 09:32:03.300314 2026] [security2:error] [pid 2572608:tid 2572608] [client 43.165.5.90:50258] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "amsMA1Iexmijbt9jLarV0AAAABs"]
[Thu Jul 30 09:32:03.300520 2026] [security2:error] [pid 2572608:tid 2572608] [client 43.165.5.90:50258] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "amsMA1Iexmijbt9jLarV0AAAABs"]
[Thu Jul 30 09:32:03.300738 2026] [security2:error] [pid 2572608:tid 2572608] [client 43.165.5.90:50258] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMA1Iexmijbt9jLarV0AAAABs"]
[Thu Jul 30 09:32:03.356493 2026] [security2:error] [pid 2578371:tid 2578371] [client 43.165.5.90:50262] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "amsMA_bqC0sfeZj432j5CAAAABc"]
[Thu Jul 30 09:32:03.356693 2026] [security2:error] [pid 2578371:tid 2578371] [client 43.165.5.90:50262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "amsMA_bqC0sfeZj432j5CAAAABc"]
[Thu Jul 30 09:32:03.356885 2026] [security2:error] [pid 2578371:tid 2578371] [client 43.165.5.90:50262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMA_bqC0sfeZj432j5CAAAABc"]
[Thu Jul 30 09:32:03.452303 2026] [authz_core:error] [pid 2577576:tid 2577576] [client 144.172.105.5:37740] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/pomo/error_log
[Thu Jul 30 09:32:03.495001 2026] [core:error] [pid 2574115:tid 2574115] [client 20.104.22.47:22334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:03.495039 2026] [core:error] [pid 2574115:tid 2574115] [client 20.104.22.47:22334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:03.923501 2026] [core:error] [pid 2572609:tid 2572609] [client 20.104.22.47:22290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:03.923533 2026] [core:error] [pid 2572609:tid 2572609] [client 20.104.22.47:22290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:04.074717 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:50290] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "amsMBIMmAJpnDHoe4o56vQAAACY"]
[Thu Jul 30 09:32:04.074914 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:50290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "amsMBIMmAJpnDHoe4o56vQAAACY"]
[Thu Jul 30 09:32:04.075188 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:50290] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMBIMmAJpnDHoe4o56vQAAACY"]
[Thu Jul 30 09:32:04.378578 2026] [authz_core:error] [pid 2577576:tid 2577576] [client 144.172.105.5:37740] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/theme-compat/error_log
[Thu Jul 30 09:32:04.432086 2026] [core:error] [pid 2572665:tid 2572665] [client 20.104.22.47:22324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:04.432109 2026] [core:error] [pid 2572665:tid 2572665] [client 20.104.22.47:22324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:05.033660 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 57.141.0.49:47634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:32:05.034311 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 57.141.0.49:47634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:32:05.181139 2026] [core:error] [pid 2573513:tid 2573513] [client 20.104.22.47:22801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:05.181171 2026] [core:error] [pid 2573513:tid 2573513] [client 20.104.22.47:22801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:05.243112 2026] [ssl:error] [pid 2578729:tid 2578729] (EAI 2)Name or service not known: [client 144.76.19.72:52048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:05.243150 2026] [ssl:error] [pid 2578729:tid 2578729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:05.298313 2026] [ssl:error] [pid 2574115:tid 2574115] (EAI 2)Name or service not known: [client 144.76.19.72:52052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:05.298348 2026] [ssl:error] [pid 2574115:tid 2574115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:05.727835 2026] [core:error] [pid 2562261:tid 2562261] [client 20.104.22.47:22312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:05.727860 2026] [core:error] [pid 2562261:tid 2562261] [client 20.104.22.47:22312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:06.243787 2026] [core:error] [pid 2547448:tid 2547448] [client 20.104.22.47:22811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:06.243810 2026] [core:error] [pid 2547448:tid 2547448] [client 20.104.22.47:22811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:06.991113 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:06.991143 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:07.495859 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:07.495888 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:08.066049 2026] [core:error] [pid 2564595:tid 2564595] [client 20.104.22.47:22321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:08.066094 2026] [core:error] [pid 2564595:tid 2564595] [client 20.104.22.47:22321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:08.351675 2026] [ssl:error] [pid 2574428:tid 2574428] (EAI 2)Name or service not known: [client 144.76.19.72:52062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:08.351702 2026] [ssl:error] [pid 2574428:tid 2574428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:08.403154 2026] [ssl:error] [pid 2578371:tid 2578371] (EAI 2)Name or service not known: [client 144.76.19.72:52074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:08.403176 2026] [ssl:error] [pid 2578371:tid 2578371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:09.326264 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41352] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "amsMCVWJAdF0CnOeHdAAfAAAADA"]
[Thu Jul 30 09:32:09.326520 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "amsMCVWJAdF0CnOeHdAAfAAAADA"]
[Thu Jul 30 09:32:09.327032 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMCVWJAdF0CnOeHdAAfAAAADA"]
[Thu Jul 30 09:32:09.397171 2026] [security2:error] [pid 2573851:tid 2573851] [client 43.165.5.90:50370] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "amsMCbezYKDwH88o69jQzgAAAAk"]
[Thu Jul 30 09:32:09.397447 2026] [security2:error] [pid 2573851:tid 2573851] [client 43.165.5.90:50370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "amsMCbezYKDwH88o69jQzgAAAAk"]
[Thu Jul 30 09:32:09.397667 2026] [security2:error] [pid 2573851:tid 2573851] [client 43.165.5.90:50370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMCbezYKDwH88o69jQzgAAAAk"]
[Thu Jul 30 09:32:09.588670 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41352] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.config/gcloud/credentials.db"] [unique_id "amsMCVWJAdF0CnOeHdAAfQAAADA"]
[Thu Jul 30 09:32:09.588944 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.config/gcloud/credentials.db"] [unique_id "amsMCVWJAdF0CnOeHdAAfQAAADA"]
[Thu Jul 30 09:32:09.589453 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMCVWJAdF0CnOeHdAAfQAAADA"]
[Thu Jul 30 09:32:09.663765 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:50398] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.config/gcloud/credentials.db"] [unique_id "amsMCXXpWQqAqP0uNK4MoAAAACk"]
[Thu Jul 30 09:32:09.663964 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:50398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.config/gcloud/credentials.db"] [unique_id "amsMCXXpWQqAqP0uNK4MoAAAACk"]
[Thu Jul 30 09:32:09.664189 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:50398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMCXXpWQqAqP0uNK4MoAAAACk"]
[Thu Jul 30 09:32:10.217493 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:50416] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "amsMCs5R61aQyc9i4fQmTgAAACU"]
[Thu Jul 30 09:32:10.217769 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:50416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "amsMCs5R61aQyc9i4fQmTgAAACU"]
[Thu Jul 30 09:32:10.217987 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:50416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMCs5R61aQyc9i4fQmTgAAACU"]
[Thu Jul 30 09:32:10.235850 2026] [security2:error] [pid 2569985:tid 2569985] [client 43.165.5.90:50428] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.config/gcloud/credentials.db"] [unique_id "amsMCk-u3SrRinEhlo55jQAAABA"]
[Thu Jul 30 09:32:10.236043 2026] [security2:error] [pid 2569985:tid 2569985] [client 43.165.5.90:50428] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.config/gcloud/credentials.db"] [unique_id "amsMCk-u3SrRinEhlo55jQAAABA"]
[Thu Jul 30 09:32:10.236243 2026] [security2:error] [pid 2569985:tid 2569985] [client 43.165.5.90:50428] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMCk-u3SrRinEhlo55jQAAABA"]
[Thu Jul 30 09:32:11.056362 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:41886] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.aws/credentials.backup"] [unique_id "amsMC_jZrlWmSE7FhEVvCgAAACI"]
[Thu Jul 30 09:32:11.056561 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:41886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.aws/credentials.backup"] [unique_id "amsMC_jZrlWmSE7FhEVvCgAAACI"]
[Thu Jul 30 09:32:11.057106 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:41886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMC_jZrlWmSE7FhEVvCgAAACI"]
[Thu Jul 30 09:32:11.114903 2026] [security2:error] [pid 2571594:tid 2571594] [client 43.165.5.90:41186] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.aws/credentials.backup"] [unique_id "amsMC0mh8jcxn2A76B7FsAAAAAQ"]
[Thu Jul 30 09:32:11.115182 2026] [security2:error] [pid 2571594:tid 2571594] [client 43.165.5.90:41186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.aws/credentials.backup"] [unique_id "amsMC0mh8jcxn2A76B7FsAAAAAQ"]
[Thu Jul 30 09:32:11.115378 2026] [security2:error] [pid 2571594:tid 2571594] [client 43.165.5.90:41186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMC0mh8jcxn2A76B7FsAAAAAQ"]
[Thu Jul 30 09:32:11.365857 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:41886] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.aws/credentials.bak"] [unique_id "amsMC_jZrlWmSE7FhEVvCwAAACI"]
[Thu Jul 30 09:32:11.366086 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:41886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.aws/credentials.bak"] [unique_id "amsMC_jZrlWmSE7FhEVvCwAAACI"]
[Thu Jul 30 09:32:11.366538 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:41886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMC_jZrlWmSE7FhEVvCwAAACI"]
[Thu Jul 30 09:32:11.440936 2026] [security2:error] [pid 2577576:tid 2577576] [client 43.165.5.90:41204] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.aws/credentials.bak"] [unique_id "amsMCyx2qAszxH7ti-jpfQAAABg"]
[Thu Jul 30 09:32:11.441228 2026] [security2:error] [pid 2577576:tid 2577576] [client 43.165.5.90:41204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.aws/credentials.bak"] [unique_id "amsMCyx2qAszxH7ti-jpfQAAABg"]
[Thu Jul 30 09:32:11.441429 2026] [security2:error] [pid 2577576:tid 2577576] [client 43.165.5.90:41204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMCyx2qAszxH7ti-jpfQAAABg"]
[Thu Jul 30 09:32:11.457495 2026] [ssl:error] [pid 2571594:tid 2571594] (EAI 2)Name or service not known: [client 144.76.19.72:52766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:11.457523 2026] [ssl:error] [pid 2571594:tid 2571594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:11.509343 2026] [ssl:error] [pid 2572663:tid 2572663] (EAI 2)Name or service not known: [client 144.76.19.72:52776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:11.509365 2026] [ssl:error] [pid 2572663:tid 2572663] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:11.726897 2026] [cgi:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22300] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:32:11.727222 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:11.952238 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41238] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.aws/credentials.backup"] [unique_id "amsMC1WJAdF0CnOeHdAAgAAAADA"]
[Thu Jul 30 09:32:11.952493 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.aws/credentials.backup"] [unique_id "amsMC1WJAdF0CnOeHdAAgAAAADA"]
[Thu Jul 30 09:32:11.952694 2026] [security2:error] [pid 2572663:tid 2572663] [client 43.165.5.90:41238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMC1WJAdF0CnOeHdAAgAAAADA"]
[Thu Jul 30 09:32:12.103887 2026] [security2:error] [pid 2570989:tid 2570989] [client 74.7.227.157:44890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "parallelcoordinates.org.ppcl.com"] [uri "/"] [unique_id "amsMDHXpWQqAqP0uNK4MpgAAACk"]
[Thu Jul 30 09:32:12.176160 2026] [security2:error] [pid 2573411:tid 2573411] [client 43.165.5.90:41250] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.aws/credentials.bak"] [unique_id "amsMDJj9XQf2VEs52TBs1QAAAAA"]
[Thu Jul 30 09:32:12.176472 2026] [security2:error] [pid 2573411:tid 2573411] [client 43.165.5.90:41250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.aws/credentials.bak"] [unique_id "amsMDJj9XQf2VEs52TBs1QAAAAA"]
[Thu Jul 30 09:32:12.176694 2026] [security2:error] [pid 2573411:tid 2573411] [client 43.165.5.90:41250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMDJj9XQf2VEs52TBs1QAAAAA"]
[Thu Jul 30 09:32:12.336592 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:12.336622 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:12.419905 2026] [security2:error] [pid 2573411:tid 2573411] [client 85.208.96.207:18028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/used-sherp-for-sale-in-florida"] [unique_id "amsMDJj9XQf2VEs52TBs1gAAAAA"]
[Thu Jul 30 09:32:12.857357 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:12.857382 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:13.685624 2026] [core:error] [pid 2574115:tid 2574115] [client 20.104.22.47:22600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:13.685653 2026] [core:error] [pid 2574115:tid 2574115] [client 20.104.22.47:22600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:14.561853 2026] [ssl:error] [pid 2574428:tid 2574428] (EAI 2)Name or service not known: [client 144.76.19.72:52778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:14.561881 2026] [ssl:error] [pid 2574428:tid 2574428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:14.614456 2026] [ssl:error] [pid 2547448:tid 2547448] (EAI 2)Name or service not known: [client 144.76.19.72:52788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:14.614492 2026] [ssl:error] [pid 2547448:tid 2547448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:14.826811 2026] [access_compat:error] [pid 2574382:tid 2574382] [client 24.113.109.118:35013] AH01797: client denied by server configuration: /home/nspandor/public_html/NSSCANNER-QUEUE-ae87408d9ea2f1a7aa8a38b63ef6c537.txt
[Thu Jul 30 09:32:14.924598 2026] [authz_core:error] [pid 2547448:tid 2547448] [client 57.141.0.69:41128] AH01630: client denied by server configuration: /home/nkxfsjcw/public_html/xmlrpc.php
[Thu Jul 30 09:32:15.632386 2026] [core:error] [pid 2571594:tid 2571594] [client 20.104.22.47:22275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:15.632418 2026] [core:error] [pid 2571594:tid 2571594] [client 20.104.22.47:22275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:16.151751 2026] [core:error] [pid 2578728:tid 2578728] [client 66.249.64.170:59181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:16.151778 2026] [core:error] [pid 2578728:tid 2578728] [client 66.249.64.170:59181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:16.738227 2026] [security2:error] [pid 2578371:tid 2578371] [client 43.165.5.90:41446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/app/.env"] [unique_id "amsMEPbqC0sfeZj432j5FQAAABc"]
[Thu Jul 30 09:32:16.738418 2026] [security2:error] [pid 2578371:tid 2578371] [client 43.165.5.90:41446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/app/.env"] [unique_id "amsMEPbqC0sfeZj432j5FQAAABc"]
[Thu Jul 30 09:32:16.738615 2026] [security2:error] [pid 2578371:tid 2578371] [client 43.165.5.90:41446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEPbqC0sfeZj432j5FQAAABc"]
[Thu Jul 30 09:32:16.781888 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/app/.env"] [unique_id "amsMEA2vMuoHN1atQKmYlAAAACo"]
[Thu Jul 30 09:32:16.782095 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/app/.env"] [unique_id "amsMEA2vMuoHN1atQKmYlAAAACo"]
[Thu Jul 30 09:32:16.782621 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEA2vMuoHN1atQKmYlAAAACo"]
[Thu Jul 30 09:32:17.134493 2026] [security2:error] [pid 2564595:tid 2564595] [client 185.191.171.10:49792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8896.0/prev_next,prev.html"] [unique_id "amsMEYMmAJpnDHoe4o56yAAAACY"]
[Thu Jul 30 09:32:17.303792 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/srv/.env"] [unique_id "amsMEZOo8u1_pwy7CS3ByAAAAA8"]
[Thu Jul 30 09:32:17.303981 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/srv/.env"] [unique_id "amsMEZOo8u1_pwy7CS3ByAAAAA8"]
[Thu Jul 30 09:32:17.304191 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEZOo8u1_pwy7CS3ByAAAAA8"]
[Thu Jul 30 09:32:17.389040 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/srv/.env"] [unique_id "amsMEQ2vMuoHN1atQKmYlQAAACo"]
[Thu Jul 30 09:32:17.389255 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/srv/.env"] [unique_id "amsMEQ2vMuoHN1atQKmYlQAAACo"]
[Thu Jul 30 09:32:17.389772 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEQ2vMuoHN1atQKmYlQAAACo"]
[Thu Jul 30 09:32:17.394410 2026] [core:error] [pid 2570989:tid 2570989] [client 20.104.22.47:22598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:17.394430 2026] [core:error] [pid 2570989:tid 2570989] [client 20.104.22.47:22598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:17.575494 2026] [security2:error] [pid 2572608:tid 2572608] [client 43.165.5.90:41478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/app/.env"] [unique_id "amsMEVIexmijbt9jLarWDgAAABs"]
[Thu Jul 30 09:32:17.575688 2026] [security2:error] [pid 2572608:tid 2572608] [client 43.165.5.90:41478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/app/.env"] [unique_id "amsMEVIexmijbt9jLarWDgAAABs"]
[Thu Jul 30 09:32:17.575880 2026] [security2:error] [pid 2572608:tid 2572608] [client 43.165.5.90:41478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEVIexmijbt9jLarWDgAAABs"]
[Thu Jul 30 09:32:17.667509 2026] [ssl:error] [pid 2574060:tid 2574060] (EAI 2)Name or service not known: [client 144.76.19.72:52798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:17.667543 2026] [ssl:error] [pid 2574060:tid 2574060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:17.723833 2026] [ssl:error] [pid 2568729:tid 2568729] (EAI 2)Name or service not known: [client 144.76.19.72:52804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:17.723857 2026] [ssl:error] [pid 2568729:tid 2568729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:17.820303 2026] [access_compat:error] [pid 2572609:tid 2572609] [client 123.21.187.115:51872] AH01797: client denied by server configuration: /home/nspandor/public_html/NSSCANNER-QUEUE-ae87408d9ea2f1a7aa8a38b63ef6c537.txt
[Thu Jul 30 09:32:17.961149 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41492] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/opt/.env"] [unique_id "amsMEZOo8u1_pwy7CS3ByQAAAA8"]
[Thu Jul 30 09:32:17.961284 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41492] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/opt/.env"] [unique_id "amsMEZOo8u1_pwy7CS3ByQAAAA8"]
[Thu Jul 30 09:32:17.961481 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41492] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEZOo8u1_pwy7CS3ByQAAAA8"]
[Thu Jul 30 09:32:17.968268 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/opt/.env"] [unique_id "amsMEQ2vMuoHN1atQKmYlgAAACo"]
[Thu Jul 30 09:32:17.968394 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/opt/.env"] [unique_id "amsMEQ2vMuoHN1atQKmYlgAAACo"]
[Thu Jul 30 09:32:17.968847 2026] [security2:error] [pid 2578728:tid 2578728] [client 43.165.5.90:41958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEQ2vMuoHN1atQKmYlgAAACo"]
[Thu Jul 30 09:32:18.104803 2026] [cgi:error] [pid 2570892:tid 2570892] [client 216.73.216.199:53471] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/perl5/bytes_heavy.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:32:18.104858 2026] [cgi:error] [pid 2570892:tid 2570892] [client 216.73.216.199:53471] End of script output before headers: bytes_heavy.pl
[Thu Jul 30 09:32:18.146547 2026] [security2:error] [pid 2570991:tid 2570991] [client 43.165.5.90:41508] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/srv/.env"] [unique_id "amsMEoPZlc0e_o1SiqYcTAAAAC0"]
[Thu Jul 30 09:32:18.146722 2026] [security2:error] [pid 2570991:tid 2570991] [client 43.165.5.90:41508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/srv/.env"] [unique_id "amsMEoPZlc0e_o1SiqYcTAAAAC0"]
[Thu Jul 30 09:32:18.146958 2026] [security2:error] [pid 2570991:tid 2570991] [client 43.165.5.90:41508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEoPZlc0e_o1SiqYcTAAAAC0"]
[Thu Jul 30 09:32:18.322470 2026] [core:error] [pid 2572608:tid 2572608] [client 20.104.22.47:22617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:18.322513 2026] [core:error] [pid 2572608:tid 2572608] [client 20.104.22.47:22617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:18.451982 2026] [access_compat:error] [pid 2572609:tid 2572609] [client 123.21.187.115:51872] AH01797: client denied by server configuration: /home/nspandor/public_html/favicon.ico, referer: https://www.ns-pandora.com/NSSCANNER-QUEUE-ae87408d9ea2f1a7aa8a38b63ef6c537.txt
[Thu Jul 30 09:32:18.658695 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41526] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/opt/.env"] [unique_id "amsMEkdGyaSc7FKZxb0CEwAAADI"]
[Thu Jul 30 09:32:18.658879 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41526] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/opt/.env"] [unique_id "amsMEkdGyaSc7FKZxb0CEwAAADI"]
[Thu Jul 30 09:32:18.659123 2026] [security2:error] [pid 2572665:tid 2572665] [client 43.165.5.90:41526] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMEkdGyaSc7FKZxb0CEwAAADI"]
[Thu Jul 30 09:32:18.863869 2026] [security2:error] [pid 2574328:tid 2574328] [client 122.51.236.174:39404] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-earth.com"] [uri "/"] [unique_id "amsMEpij00mkZA5EygzrSQAAABk"]
[Thu Jul 30 09:32:19.274808 2026] [core:error] [pid 2572608:tid 2572608] [client 20.104.22.47:22639] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:19.274847 2026] [core:error] [pid 2572608:tid 2572608] [client 20.104.22.47:22639] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:20.228128 2026] [core:error] [pid 2570892:tid 2570892] [client 20.104.22.47:22629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:20.228155 2026] [core:error] [pid 2570892:tid 2570892] [client 20.104.22.47:22629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:20.335946 2026] [authz_core:error] [pid 2577576:tid 2577576] [client 66.249.66.34:39060] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:32:20.338713 2026] [authz_core:error] [pid 2577576:tid 2577576] [client 66.249.66.34:39060] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:32:20.777640 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:22254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:20.777666 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:20.788502 2026] [security2:error] [pid 2572665:tid 2572665] [client 47.128.26.99:55900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/robots.txt"] [unique_id "amsMFEdGyaSc7FKZxb0CFQAAADI"]
[Thu Jul 30 09:32:20.788819 2026] [access_compat:error] [pid 2572665:tid 2572665] [client 47.128.26.99:55900] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:32:20.830558 2026] [ssl:error] [pid 2578728:tid 2578728] (EAI 2)Name or service not known: [client 144.76.19.72:22266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:20.830604 2026] [ssl:error] [pid 2578728:tid 2578728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:20.852323 2026] [core:error] [pid 2574328:tid 2574328] [client 20.104.22.47:22604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:20.852344 2026] [core:error] [pid 2574328:tid 2574328] [client 20.104.22.47:22604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:22.489832 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 66.249.66.33:42069] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:32:22.492541 2026] [authz_core:error] [pid 2555021:tid 2555021] [client 66.249.66.33:42069] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:32:22.626200 2026] [security2:error] [pid 2572662:tid 2572662] [client 47.128.45.86:30576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/robots.txt"] [unique_id "amsMFkOR_UbPziKzP98zMwAAAC8"]
[Thu Jul 30 09:32:23.272276 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:23.272299 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:23.887734 2026] [ssl:error] [pid 2578795:tid 2578795] (EAI 2)Name or service not known: [client 144.76.19.72:22280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:23.887761 2026] [ssl:error] [pid 2578795:tid 2578795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:23.946199 2026] [ssl:error] [pid 2570989:tid 2570989] (EAI 2)Name or service not known: [client 144.76.19.72:22294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:23.946243 2026] [ssl:error] [pid 2570989:tid 2570989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:24.017852 2026] [access_compat:error] [pid 2578103:tid 2578103] [client 97.242.190.94:54428] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/robots.txt
[Thu Jul 30 09:32:24.017954 2026] [access_compat:error] [pid 2578103:tid 2578103] [client 97.242.190.94:54428] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:32:25.778459 2026] [authz_core:error] [pid 2570991:tid 2570991] [client 57.141.0.66:47420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:32:25.779100 2026] [authz_core:error] [pid 2570991:tid 2570991] [client 57.141.0.66:47420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:32:27.004504 2026] [ssl:error] [pid 2577527:tid 2577527] (EAI 2)Name or service not known: [client 144.76.19.72:22308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:27.004544 2026] [ssl:error] [pid 2577527:tid 2577527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:27.060804 2026] [ssl:error] [pid 2570989:tid 2570989] (EAI 2)Name or service not known: [client 144.76.19.72:22324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:27.060829 2026] [ssl:error] [pid 2570989:tid 2570989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:27.927607 2026] [core:error] [pid 2570892:tid 2570892] [client 20.104.22.47:22285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:27.927631 2026] [core:error] [pid 2570892:tid 2570892] [client 20.104.22.47:22285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:28.086007 2026] [ssl:error] [pid 2578796:tid 2578796] (70014)End of file found: [client 216.73.216.199:22670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:32:28.467519 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:22616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:28.467542 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:22616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:29.221354 2026] [core:error] [pid 2578794:tid 2578794] [client 20.104.22.47:22331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:29.221384 2026] [core:error] [pid 2578794:tid 2578794] [client 20.104.22.47:22331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:29.908651 2026] [core:error] [pid 2569984:tid 2569984] [client 66.249.64.171:40712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:29.908676 2026] [core:error] [pid 2569984:tid 2569984] [client 66.249.64.171:40712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:29.912610 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:39366] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.azure/clouds.config"] [unique_id "amsMHfRKHg0uhf6ew6JZgwAAAAw"]
[Thu Jul 30 09:32:29.912878 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:39366] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.azure/clouds.config"] [unique_id "amsMHfRKHg0uhf6ew6JZgwAAAAw"]
[Thu Jul 30 09:32:29.913104 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:39366] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMHfRKHg0uhf6ew6JZgwAAAAw"]
[Thu Jul 30 09:32:30.126864 2026] [ssl:error] [pid 2578371:tid 2578371] (EAI 2)Name or service not known: [client 144.76.19.72:27842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:30.126907 2026] [ssl:error] [pid 2578371:tid 2578371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:30.182359 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:27852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:30.182388 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:30.506960 2026] [authz_core:error] [pid 2572664:tid 2572664] [client 20.203.142.71:43900] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/Requests/error_log
[Thu Jul 30 09:32:30.673713 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:47714] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.azure/clouds.config"] [unique_id "amsMHpOo8u1_pwy7CS3B0gAAAA8"]
[Thu Jul 30 09:32:30.674014 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:47714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.azure/clouds.config"] [unique_id "amsMHpOo8u1_pwy7CS3B0gAAAA8"]
[Thu Jul 30 09:32:30.674255 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:47714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMHpOo8u1_pwy7CS3B0gAAAA8"]
[Thu Jul 30 09:32:31.584092 2026] [core:error] [pid 2577527:tid 2577527] [client 20.104.22.47:22636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:31.584130 2026] [core:error] [pid 2577527:tid 2577527] [client 20.104.22.47:22636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:32.516897 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:22613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:32.516935 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:22613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:32.620187 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:47764] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/app.db"] [unique_id "amsMIHXpWQqAqP0uNK4MvgAAACk"]
[Thu Jul 30 09:32:32.620660 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:47764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/app.db"] [unique_id "amsMIHXpWQqAqP0uNK4MvgAAACk"]
[Thu Jul 30 09:32:32.621048 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:47764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMIHXpWQqAqP0uNK4MvgAAACk"]
[Thu Jul 30 09:32:33.151827 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:47782] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/database.db"] [unique_id "amsMIfRKHg0uhf6ew6JZiAAAAAw"]
[Thu Jul 30 09:32:33.152094 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:47782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/database.db"] [unique_id "amsMIfRKHg0uhf6ew6JZiAAAAAw"]
[Thu Jul 30 09:32:33.152291 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:47782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMIfRKHg0uhf6ew6JZiAAAAAw"]
[Thu Jul 30 09:32:33.238643 2026] [ssl:error] [pid 2578729:tid 2578729] (EAI 2)Name or service not known: [client 144.76.19.72:27868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:33.238671 2026] [ssl:error] [pid 2578729:tid 2578729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:33.291600 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:27876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:33.291626 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:33.334543 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:47792] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/app.db"] [unique_id "amsMIfxXcCowsLguGqAjSgAAAAg"]
[Thu Jul 30 09:32:33.334817 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:47792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/app.db"] [unique_id "amsMIfxXcCowsLguGqAjSgAAAAg"]
[Thu Jul 30 09:32:33.335018 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:47792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMIfxXcCowsLguGqAjSgAAAAg"]
[Thu Jul 30 09:32:33.641917 2026] [security2:error] [pid 2578796:tid 2578796] [client 43.165.5.90:47800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/data.db"] [unique_id "amsMIXT7z_WkBCuhUk6PIAAAADM"]
[Thu Jul 30 09:32:33.642258 2026] [security2:error] [pid 2578796:tid 2578796] [client 43.165.5.90:47800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/data.db"] [unique_id "amsMIXT7z_WkBCuhUk6PIAAAADM"]
[Thu Jul 30 09:32:33.642478 2026] [security2:error] [pid 2578796:tid 2578796] [client 43.165.5.90:47800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMIXT7z_WkBCuhUk6PIAAAADM"]
[Thu Jul 30 09:32:33.876020 2026] [core:error] [pid 2570989:tid 2570989] [client 20.104.22.47:22833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:33.876085 2026] [core:error] [pid 2570989:tid 2570989] [client 20.104.22.47:22833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:34.000311 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:47802] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/database.db"] [unique_id "amsMIW4pI4io4GF2Xyo8UQAAABQ"]
[Thu Jul 30 09:32:34.000569 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:47802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/database.db"] [unique_id "amsMIW4pI4io4GF2Xyo8UQAAABQ"]
[Thu Jul 30 09:32:34.000782 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:47802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMIW4pI4io4GF2Xyo8UQAAABQ"]
[Thu Jul 30 09:32:34.337536 2026] [security2:error] [pid 2578103:tid 2578103] [client 43.165.5.90:47818] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/data.db"] [unique_id "amsMIpL01hsssfFG5EZOswAAAA4"]
[Thu Jul 30 09:32:34.337805 2026] [security2:error] [pid 2578103:tid 2578103] [client 43.165.5.90:47818] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/data.db"] [unique_id "amsMIpL01hsssfFG5EZOswAAAA4"]
[Thu Jul 30 09:32:34.338027 2026] [security2:error] [pid 2578103:tid 2578103] [client 43.165.5.90:47818] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMIpL01hsssfFG5EZOswAAAA4"]
[Thu Jul 30 09:32:35.159746 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:35.159788 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:36.219796 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 57.141.0.13:62942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:32:36.220448 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 57.141.0.13:62942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:32:36.366111 2026] [ssl:error] [pid 2574115:tid 2574115] (EAI 2)Name or service not known: [client 144.76.19.72:27882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:36.366158 2026] [ssl:error] [pid 2574115:tid 2574115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:36.418174 2026] [ssl:error] [pid 2566258:tid 2566258] (EAI 2)Name or service not known: [client 144.76.19.72:27890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:36.418208 2026] [ssl:error] [pid 2566258:tid 2566258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:37.015476 2026] [cgi:error] [pid 2574328:tid 2574328] [client 20.104.22.47:22291] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:32:37.015844 2026] [core:error] [pid 2574328:tid 2574328] [client 20.104.22.47:22291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:37.845101 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:47830] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/prisma/dev.db"] [unique_id "amsMJc5R61aQyc9i4fQmWgAAACU"]
[Thu Jul 30 09:32:37.845375 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:47830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/prisma/dev.db"] [unique_id "amsMJc5R61aQyc9i4fQmWgAAACU"]
[Thu Jul 30 09:32:37.845592 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:47830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMJc5R61aQyc9i4fQmWgAAACU"]
[Thu Jul 30 09:32:37.872476 2026] [core:error] [pid 2572662:tid 2572662] [client 20.104.22.47:22592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:37.872500 2026] [core:error] [pid 2572662:tid 2572662] [client 20.104.22.47:22592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:38.132881 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 109.248.143.16:46381] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 09:32:38.135577 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 109.248.143.16:46381] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 09:32:38.418121 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:47842] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/prisma/dev.db"] [unique_id "amsMJpOo8u1_pwy7CS3B1gAAAA8"]
[Thu Jul 30 09:32:38.418441 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:47842] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/prisma/dev.db"] [unique_id "amsMJpOo8u1_pwy7CS3B1gAAAA8"]
[Thu Jul 30 09:32:38.418683 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:47842] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMJpOo8u1_pwy7CS3B1gAAAA8"]
[Thu Jul 30 09:32:38.888631 2026] [core:error] [pid 2572608:tid 2572608] (13)Permission denied: [client 216.73.216.199:24834] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS0/flags
[Thu Jul 30 09:32:38.945200 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:46252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/.azure/clouds.config"] [unique_id "amsMJs5R61aQyc9i4fQmXAAAACU"]
[Thu Jul 30 09:32:38.945458 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:46252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.azure/clouds.config"] [unique_id "amsMJs5R61aQyc9i4fQmXAAAACU"]
[Thu Jul 30 09:32:38.946031 2026] [security2:error] [pid 2568729:tid 2568729] [client 43.165.5.90:46252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMJs5R61aQyc9i4fQmXAAAACU"]
[Thu Jul 30 09:32:39.024764 2026] [security2:error] [pid 2578103:tid 2578103] [client 74.7.243.236:33712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "plastic-sheeting.org"] [uri "/"] [unique_id "amsMJ5L01hsssfFG5EZOuAAAAA4"], referer: http://www.way2check.art
[Thu Jul 30 09:32:39.470135 2026] [ssl:error] [pid 2578103:tid 2578103] (EAI 2)Name or service not known: [client 144.76.19.72:27894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:39.470171 2026] [ssl:error] [pid 2578103:tid 2578103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:39.523788 2026] [ssl:error] [pid 2577576:tid 2577576] (EAI 2)Name or service not known: [client 144.76.19.72:27910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:39.523815 2026] [ssl:error] [pid 2577576:tid 2577576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:41.120553 2026] [core:error] [pid 2577527:tid 2577527] [client 20.104.22.47:22647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:41.120601 2026] [core:error] [pid 2577527:tid 2577527] [client 20.104.22.47:22647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:41.662269 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/app.db"] [unique_id "amsMKZOo8u1_pwy7CS3B2QAAAA8"]
[Thu Jul 30 09:32:41.662515 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/app.db"] [unique_id "amsMKZOo8u1_pwy7CS3B2QAAAA8"]
[Thu Jul 30 09:32:41.663006 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMKZOo8u1_pwy7CS3B2QAAAA8"]
[Thu Jul 30 09:32:41.839031 2026] [core:error] [pid 2566258:tid 2566258] [client 20.104.22.47:22272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:41.839059 2026] [core:error] [pid 2566258:tid 2566258] [client 20.104.22.47:22272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:42.099913 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/database.db"] [unique_id "amsMKpOo8u1_pwy7CS3B2gAAAA8"]
[Thu Jul 30 09:32:42.100142 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/database.db"] [unique_id "amsMKpOo8u1_pwy7CS3B2gAAAA8"]
[Thu Jul 30 09:32:42.100626 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMKpOo8u1_pwy7CS3B2gAAAA8"]
[Thu Jul 30 09:32:42.578184 2026] [ssl:error] [pid 2569985:tid 2569985] (EAI 2)Name or service not known: [client 144.76.19.72:38810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:42.578211 2026] [ssl:error] [pid 2569985:tid 2569985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:42.618196 2026] [authz_core:error] [pid 2566258:tid 2566258] [client 57.141.0.55:24464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:32:42.618825 2026] [authz_core:error] [pid 2566258:tid 2566258] [client 57.141.0.55:24464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:32:42.619697 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/data.db"] [unique_id "amsMKpOo8u1_pwy7CS3B2wAAAA8"]
[Thu Jul 30 09:32:42.619882 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/data.db"] [unique_id "amsMKpOo8u1_pwy7CS3B2wAAAA8"]
[Thu Jul 30 09:32:42.620363 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMKpOo8u1_pwy7CS3B2wAAAA8"]
[Thu Jul 30 09:32:42.622136 2026] [core:error] [pid 2564595:tid 2564595] [client 20.104.22.47:22617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:42.622153 2026] [core:error] [pid 2564595:tid 2564595] [client 20.104.22.47:22617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:42.633573 2026] [ssl:error] [pid 2577576:tid 2577576] (EAI 2)Name or service not known: [client 144.76.19.72:38812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:42.633603 2026] [ssl:error] [pid 2577576:tid 2577576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:43.109789 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/prisma/dev.db"] [unique_id "amsMK5Oo8u1_pwy7CS3B3AAAAA8"]
[Thu Jul 30 09:32:43.110054 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/prisma/dev.db"] [unique_id "amsMK5Oo8u1_pwy7CS3B3AAAAA8"]
[Thu Jul 30 09:32:43.110569 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:46600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMK5Oo8u1_pwy7CS3B3AAAAA8"]
[Thu Jul 30 09:32:43.261944 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22637] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:43.261970 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22637] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:43.422457 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 66.249.66.33:44833] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:32:43.425187 2026] [authz_core:error] [pid 2564595:tid 2564595] [client 66.249.66.33:44833] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:32:43.793140 2026] [core:error] [pid 2566258:tid 2566258] [client 20.104.22.47:22605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:43.793166 2026] [core:error] [pid 2566258:tid 2566258] [client 20.104.22.47:22605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:43.887734 2026] [ssl:error] [pid 2572608:tid 2572608] (70014)End of file found: [client 216.73.216.199:24834] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:32:44.217100 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:41934] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.env"] [unique_id "amsMLPxXcCowsLguGqAjUAAAAAg"]
[Thu Jul 30 09:32:44.217291 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:41934] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.env"] [unique_id "amsMLPxXcCowsLguGqAjUAAAAAg"]
[Thu Jul 30 09:32:44.217476 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:41934] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMLPxXcCowsLguGqAjUAAAAAg"]
[Thu Jul 30 09:32:44.588237 2026] [cgi:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22644] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:32:44.588527 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:44.635360 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41962] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.env.local"] [unique_id "amsMLJOo8u1_pwy7CS3B4AAAAA8"]
[Thu Jul 30 09:32:44.635536 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41962] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.env.local"] [unique_id "amsMLJOo8u1_pwy7CS3B4AAAAA8"]
[Thu Jul 30 09:32:44.635741 2026] [security2:error] [pid 2577527:tid 2577527] [client 43.165.5.90:41962] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMLJOo8u1_pwy7CS3B4AAAAA8"]
[Thu Jul 30 09:32:44.854986 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:41976] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.env"] [unique_id "amsMLPxXcCowsLguGqAjUgAAAAg"]
[Thu Jul 30 09:32:44.855192 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:41976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.env"] [unique_id "amsMLPxXcCowsLguGqAjUgAAAAg"]
[Thu Jul 30 09:32:44.855379 2026] [security2:error] [pid 2569984:tid 2569984] [client 43.165.5.90:41976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMLPxXcCowsLguGqAjUgAAAAg"]
[Thu Jul 30 09:32:45.207614 2026] [core:error] [pid 2566258:tid 2566258] [client 20.104.22.47:22626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:45.207639 2026] [core:error] [pid 2566258:tid 2566258] [client 20.104.22.47:22626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:45.272553 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:41988] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.env.local"] [unique_id "amsMLW4pI4io4GF2Xyo8ZAAAABQ"]
[Thu Jul 30 09:32:45.272710 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:41988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.env.local"] [unique_id "amsMLW4pI4io4GF2Xyo8ZAAAABQ"]
[Thu Jul 30 09:32:45.272940 2026] [security2:error] [pid 2574115:tid 2574115] [client 43.165.5.90:41988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMLW4pI4io4GF2Xyo8ZAAAABQ"]
[Thu Jul 30 09:32:45.688643 2026] [ssl:error] [pid 2574115:tid 2574115] (EAI 2)Name or service not known: [client 144.76.19.72:38814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:45.688670 2026] [ssl:error] [pid 2574115:tid 2574115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:45.745027 2026] [ssl:error] [pid 2577576:tid 2577576] (EAI 2)Name or service not known: [client 144.76.19.72:38816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:45.745062 2026] [ssl:error] [pid 2577576:tid 2577576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:48.802656 2026] [ssl:error] [pid 2581947:tid 2581947] (EAI 2)Name or service not known: [client 144.76.19.72:38830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:48.802697 2026] [ssl:error] [pid 2581947:tid 2581947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:48.860425 2026] [ssl:error] [pid 2574328:tid 2574328] (EAI 2)Name or service not known: [client 144.76.19.72:38836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:48.860452 2026] [ssl:error] [pid 2574328:tid 2574328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:48.880717 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:42100] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.openclaw/.env"] [unique_id "amsMMPRKHg0uhf6ew6JZjwAAAAw"]
[Thu Jul 30 09:32:48.880964 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:42100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.openclaw/.env"] [unique_id "amsMMPRKHg0uhf6ew6JZjwAAAAw"]
[Thu Jul 30 09:32:48.881206 2026] [security2:error] [pid 2574060:tid 2574060] [client 43.165.5.90:42100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMMPRKHg0uhf6ew6JZjwAAAAw"]
[Thu Jul 30 09:32:49.002907 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:46690] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.env"] [unique_id "amsMMYMmAJpnDHoe4o560QAAACY"]
[Thu Jul 30 09:32:49.003108 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:46690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.env"] [unique_id "amsMMYMmAJpnDHoe4o560QAAACY"]
[Thu Jul 30 09:32:49.003615 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:46690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMMYMmAJpnDHoe4o560QAAACY"]
[Thu Jul 30 09:32:49.277320 2026] [security2:error] [pid 2578668:tid 2578668] [client 43.165.5.90:42120] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.openclaw/workspace/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.openclaw/workspace/.env.local"] [unique_id "amsMMUNcDPQCuirD9TM8UgAAACg"]
[Thu Jul 30 09:32:49.277464 2026] [security2:error] [pid 2578668:tid 2578668] [client 43.165.5.90:42120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.openclaw/workspace/.env.local"] [unique_id "amsMMUNcDPQCuirD9TM8UgAAACg"]
[Thu Jul 30 09:32:49.277482 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22649] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:49.277502 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22649] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:49.277670 2026] [security2:error] [pid 2578668:tid 2578668] [client 43.165.5.90:42120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMMUNcDPQCuirD9TM8UgAAACg"]
[Thu Jul 30 09:32:49.365568 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:46690] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.env.local"] [unique_id "amsMMYMmAJpnDHoe4o560gAAACY"]
[Thu Jul 30 09:32:49.365774 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:46690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.env.local"] [unique_id "amsMMYMmAJpnDHoe4o560gAAACY"]
[Thu Jul 30 09:32:49.366245 2026] [security2:error] [pid 2564595:tid 2564595] [client 43.165.5.90:46690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMMYMmAJpnDHoe4o560gAAACY"]
[Thu Jul 30 09:32:49.607767 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:42136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.openclaw/.env"] [unique_id "amsMMXXpWQqAqP0uNK4M0AAAACk"]
[Thu Jul 30 09:32:49.607991 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:42136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.openclaw/.env"] [unique_id "amsMMXXpWQqAqP0uNK4M0AAAACk"]
[Thu Jul 30 09:32:49.608209 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:42136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMMXXpWQqAqP0uNK4M0AAAACk"]
[Thu Jul 30 09:32:49.642315 2026] [access_compat:error] [pid 2578796:tid 2578796] [client 45.158.164.139:44586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:32:49.791830 2026] [cgi:error] [pid 2574060:tid 2574060] [client 20.104.22.47:24127] AH02812: stderr from /home/uukkeqwo/public_html/blog/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:32:49.792330 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:24127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:49.845041 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:42162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.openclaw/workspace/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.openclaw/workspace/.env.local"] [unique_id "amsMMfjZrlWmSE7FhEVvGwAAACI"]
[Thu Jul 30 09:32:49.845238 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:42162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.openclaw/workspace/.env.local"] [unique_id "amsMMfjZrlWmSE7FhEVvGwAAACI"]
[Thu Jul 30 09:32:49.845438 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.165.5.90:42162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMMfjZrlWmSE7FhEVvGwAAACI"]
[Thu Jul 30 09:32:51.081179 2026] [authz_core:error] [pid 2568729:tid 2568729] [client 57.141.0.33:42664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:32:51.081801 2026] [authz_core:error] [pid 2568729:tid 2568729] [client 57.141.0.33:42664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:32:51.918300 2026] [ssl:error] [pid 2568729:tid 2568729] (EAI 2)Name or service not known: [client 144.76.19.72:34564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:51.918330 2026] [ssl:error] [pid 2568729:tid 2568729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:52.022113 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:34566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:52.022146 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:53.053834 2026] [security2:error] [pid 2575413:tid 2575413] [client 175.27.171.245:37130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.com"] [uri "/"] [unique_id "amsMNf41dHFBRbzVLuw2AwAAAAM"]
[Thu Jul 30 09:32:53.131949 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:24117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:53.131978 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:24117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:54.035804 2026] [security2:error] [pid 2581947:tid 2581947] [client 43.165.5.90:52362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.nerve/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.nerve/.env"] [unique_id "amsMNh-iDM_u_w3C5BweCwAAAAo"]
[Thu Jul 30 09:32:54.036001 2026] [security2:error] [pid 2581947:tid 2581947] [client 43.165.5.90:52362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.nerve/.env"] [unique_id "amsMNh-iDM_u_w3C5BweCwAAAAo"]
[Thu Jul 30 09:32:54.036239 2026] [security2:error] [pid 2581947:tid 2581947] [client 43.165.5.90:52362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMNh-iDM_u_w3C5BweCwAAAAo"]
[Thu Jul 30 09:32:54.289139 2026] [core:error] [pid 2552677:tid 2552677] [client 20.104.22.47:22612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:54.289170 2026] [core:error] [pid 2552677:tid 2552677] [client 20.104.22.47:22612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:54.609962 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:52386] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.nerve/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.nerve/.env"] [unique_id "amsMNv41dHFBRbzVLuw2BAAAAAM"]
[Thu Jul 30 09:32:54.610157 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:52386] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.nerve/.env"] [unique_id "amsMNv41dHFBRbzVLuw2BAAAAAM"]
[Thu Jul 30 09:32:54.610346 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:52386] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMNv41dHFBRbzVLuw2BAAAAAM"]
[Thu Jul 30 09:32:55.079369 2026] [ssl:error] [pid 2574115:tid 2574115] (EAI 2)Name or service not known: [client 144.76.19.72:34580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:55.079403 2026] [ssl:error] [pid 2574115:tid 2574115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:55.124362 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:24124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:55.124383 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:24124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:55.132228 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:34588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:55.132250 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:55.237239 2026] [security2:error] [pid 2537717:tid 2537717] [client 43.165.5.90:52420] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.backup"] [unique_id "amsMN_-cDudpOfXry4PfpwAAABI"]
[Thu Jul 30 09:32:55.237489 2026] [security2:error] [pid 2537717:tid 2537717] [client 43.165.5.90:52420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.backup"] [unique_id "amsMN_-cDudpOfXry4PfpwAAABI"]
[Thu Jul 30 09:32:55.237696 2026] [security2:error] [pid 2537717:tid 2537717] [client 43.165.5.90:52420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMN_-cDudpOfXry4PfpwAAABI"]
[Thu Jul 30 09:32:55.308491 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:45006] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.openclaw/.env"] [unique_id "amsMN_41dHFBRbzVLuw2BQAAAAM"]
[Thu Jul 30 09:32:55.308673 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:45006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.openclaw/.env"] [unique_id "amsMN_41dHFBRbzVLuw2BQAAAAM"]
[Thu Jul 30 09:32:55.309162 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:45006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMN_41dHFBRbzVLuw2BQAAAAM"]
[Thu Jul 30 09:32:55.565136 2026] [security2:error] [pid 2581688:tid 2581688] [client 43.165.5.90:52446] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.bak"] [unique_id "amsMNzmnb6G6UkvxGLrTxQAAAAE"]
[Thu Jul 30 09:32:55.565378 2026] [security2:error] [pid 2581688:tid 2581688] [client 43.165.5.90:52446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.bak"] [unique_id "amsMNzmnb6G6UkvxGLrTxQAAAAE"]
[Thu Jul 30 09:32:55.565566 2026] [security2:error] [pid 2581688:tid 2581688] [client 43.165.5.90:52446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMNzmnb6G6UkvxGLrTxQAAAAE"]
[Thu Jul 30 09:32:55.621212 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:45006] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.openclaw/workspace/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.openclaw/workspace/.env.local"] [unique_id "amsMN_41dHFBRbzVLuw2BgAAAAM"]
[Thu Jul 30 09:32:55.621409 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:45006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.openclaw/workspace/.env.local"] [unique_id "amsMN_41dHFBRbzVLuw2BgAAAAM"]
[Thu Jul 30 09:32:55.621930 2026] [security2:error] [pid 2575413:tid 2575413] [client 43.165.5.90:45006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMN_41dHFBRbzVLuw2BgAAAAM"]
[Thu Jul 30 09:32:55.752680 2026] [core:error] [pid 2574115:tid 2574115] [client 20.104.22.47:22594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:55.752711 2026] [core:error] [pid 2574115:tid 2574115] [client 20.104.22.47:22594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:55.975686 2026] [security2:error] [pid 2574428:tid 2574428] [client 43.165.5.90:52470] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.backup"] [unique_id "amsMN5F62edzbHjnecE3-QAAADQ"]
[Thu Jul 30 09:32:55.975936 2026] [security2:error] [pid 2574428:tid 2574428] [client 43.165.5.90:52470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.backup"] [unique_id "amsMN5F62edzbHjnecE3-QAAADQ"]
[Thu Jul 30 09:32:55.976144 2026] [security2:error] [pid 2574428:tid 2574428] [client 43.165.5.90:52470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMN5F62edzbHjnecE3-QAAADQ"]
[Thu Jul 30 09:32:56.147226 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:52482] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.bak"] [unique_id "amsMOHXpWQqAqP0uNK4M1QAAACk"]
[Thu Jul 30 09:32:56.147518 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:52482] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.bak"] [unique_id "amsMOHXpWQqAqP0uNK4M1QAAACk"]
[Thu Jul 30 09:32:56.147720 2026] [security2:error] [pid 2570989:tid 2570989] [client 43.165.5.90:52482] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMOHXpWQqAqP0uNK4M1QAAACk"]
[Thu Jul 30 09:32:56.326672 2026] [core:error] [pid 2528544:tid 2528544] [client 20.104.22.47:22595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:56.326699 2026] [core:error] [pid 2528544:tid 2528544] [client 20.104.22.47:22595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:56.847208 2026] [security2:error] [pid 2574115:tid 2574115] [client 101.32.15.141:50708] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-admin/"] [unique_id "amsMOG4pI4io4GF2Xyo8agAAABQ"]
[Thu Jul 30 09:32:57.338702 2026] [core:error] [pid 2570989:tid 2570989] [client 20.104.22.47:24115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:57.338731 2026] [core:error] [pid 2570989:tid 2570989] [client 20.104.22.47:24115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:57.751640 2026] [core:error] [pid 2582323:tid 2582323] [client 20.104.22.47:24107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:57.751684 2026] [core:error] [pid 2582323:tid 2582323] [client 20.104.22.47:24107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:58.188770 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:34596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:58.188805 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:58.240986 2026] [ssl:error] [pid 2570989:tid 2570989] (EAI 2)Name or service not known: [client 144.76.19.72:34598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:32:58.241010 2026] [ssl:error] [pid 2570989:tid 2570989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:32:58.646806 2026] [core:error] [pid 2552677:tid 2552677] [client 20.104.22.47:22327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:58.646834 2026] [core:error] [pid 2552677:tid 2552677] [client 20.104.22.47:22327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:32:59.280827 2026] [security2:error] [pid 2574382:tid 2574382] [client 43.157.46.118:52538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amsMO_jZrlWmSE7FhEVvHwAAACI"]
[Thu Jul 30 09:32:59.546754 2026] [security2:error] [pid 2578795:tid 2578795] [client 43.165.5.90:45040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.nerve/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/root/.nerve/.env"] [unique_id "amsMO1X_fqIxYoVu9feDjwAAAC4"]
[Thu Jul 30 09:32:59.546947 2026] [security2:error] [pid 2578795:tid 2578795] [client 43.165.5.90:45040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.nerve/.env"] [unique_id "amsMO1X_fqIxYoVu9feDjwAAAC4"]
[Thu Jul 30 09:32:59.547453 2026] [security2:error] [pid 2578795:tid 2578795] [client 43.165.5.90:45040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMO1X_fqIxYoVu9feDjwAAAC4"]
[Thu Jul 30 09:32:59.719824 2026] [security2:error] [pid 2577576:tid 2577576] [client 101.32.15.141:35368] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-admin/"] [unique_id "amsMOyx2qAszxH7ti-jplgAAABg"], referer: http://kinesiologylondon.co.uk/wp-admin/
[Thu Jul 30 09:33:00.219402 2026] [core:error] [pid 2578103:tid 2578103] [client 20.104.22.47:24104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:00.219429 2026] [core:error] [pid 2578103:tid 2578103] [client 20.104.22.47:24104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:00.943765 2026] [security2:error] [pid 2576499:tid 2576499] [client 20.171.55.167:1240] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "karenthomasjewellery.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsMPMQzgmnSEII5c7NNsAAAABE"]
[Thu Jul 30 09:33:00.943941 2026] [security2:error] [pid 2576499:tid 2576499] [client 20.171.55.167:1240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "karenthomasjewellery.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsMPMQzgmnSEII5c7NNsAAAABE"]
[Thu Jul 30 09:33:00.944137 2026] [security2:error] [pid 2576499:tid 2576499] [client 20.171.55.167:1240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amsMPMQzgmnSEII5c7NNsAAAABE"]
[Thu Jul 30 09:33:01.223048 2026] [security2:error] [pid 2552677:tid 2552677] [client 43.165.5.90:40902] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.backup"] [unique_id "amsMPXxABMo1eq1bLmKgYAAAABo"]
[Thu Jul 30 09:33:01.223342 2026] [security2:error] [pid 2552677:tid 2552677] [client 43.165.5.90:40902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.backup"] [unique_id "amsMPXxABMo1eq1bLmKgYAAAABo"]
[Thu Jul 30 09:33:01.223865 2026] [security2:error] [pid 2552677:tid 2552677] [client 43.165.5.90:40902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMPXxABMo1eq1bLmKgYAAAABo"]
[Thu Jul 30 09:33:01.297661 2026] [ssl:error] [pid 2578795:tid 2578795] (EAI 2)Name or service not known: [client 144.76.19.72:32380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:01.297693 2026] [ssl:error] [pid 2578795:tid 2578795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:01.395623 2026] [ssl:error] [pid 2578668:tid 2578668] (EAI 2)Name or service not known: [client 144.76.19.72:32386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:01.395666 2026] [ssl:error] [pid 2578668:tid 2578668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:01.466834 2026] [authz_core:error] [pid 2568729:tid 2568729] [client 169.58.39.191:60491] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 09:33:01.532010 2026] [security2:error] [pid 2552677:tid 2552677] [client 43.165.5.90:40902] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.bak"] [unique_id "amsMPXxABMo1eq1bLmKgYQAAABo"]
[Thu Jul 30 09:33:01.532290 2026] [security2:error] [pid 2552677:tid 2552677] [client 43.165.5.90:40902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/root/.aws/credentials.bak"] [unique_id "amsMPXxABMo1eq1bLmKgYQAAABo"]
[Thu Jul 30 09:33:01.532816 2026] [security2:error] [pid 2552677:tid 2552677] [client 43.165.5.90:40902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsMPXxABMo1eq1bLmKgYQAAABo"]
[Thu Jul 30 09:33:01.687663 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:01.687696 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:02.111095 2026] [authz_core:error] [pid 2575413:tid 2575413] [client 57.141.0.25:38864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:33:02.111719 2026] [authz_core:error] [pid 2575413:tid 2575413] [client 57.141.0.25:38864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:33:02.271602 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:24101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:02.271632 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:24101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:02.304573 2026] [security2:error] [pid 2578794:tid 2578794] [client 101.32.15.141:35630] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-login.php"] [unique_id "amsMPlszK_udK7z8AUvqbAAAACw"], referer: https://kinesiologylondon.co.uk/wp-admin/
[Thu Jul 30 09:33:03.546698 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:24123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:03.546726 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:24123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:03.772353 2026] [core:error] [pid 2537717:tid 2537717] [client 66.249.64.172:61485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:03.772380 2026] [core:error] [pid 2537717:tid 2537717] [client 66.249.64.172:61485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:04.468283 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:32394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:04.468334 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:04.523164 2026] [ssl:error] [pid 2537717:tid 2537717] (EAI 2)Name or service not known: [client 144.76.19.72:32404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:04.523191 2026] [ssl:error] [pid 2537717:tid 2537717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:05.100935 2026] [security2:error] [pid 2537717:tid 2537717] [client 85.208.96.201:63502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amsMQf-cDudpOfXry4PfrwAAABI"]
[Thu Jul 30 09:33:05.121500 2026] [authz_core:error] [pid 2581946:tid 2581946] [client 169.58.39.191:61698] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 09:33:07.188887 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:07.188917 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:07.504154 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 65.38.99.245:52458] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 09:33:07.504203 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 65.38.99.245:52458] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 09:33:07.579426 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:32406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:07.579464 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:07.640255 2026] [ssl:error] [pid 2581688:tid 2581688] (EAI 2)Name or service not known: [client 144.76.19.72:32422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:07.640293 2026] [ssl:error] [pid 2581688:tid 2581688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:07.824659 2026] [security2:error] [pid 2582590:tid 2582590] [client 185.191.171.11:23716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8466.0/prev_next,prev.html"] [unique_id "amsMQyaQqt2Cg9rHrfCM_QAAABM"]
[Thu Jul 30 09:33:08.493352 2026] [core:error] [pid 2581915:tid 2581915] [client 20.104.22.47:22261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:08.493379 2026] [core:error] [pid 2581915:tid 2581915] [client 20.104.22.47:22261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:10.299793 2026] [cgi:error] [pid 2528544:tid 2528544] [client 20.104.22.47:22231] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:33:10.300133 2026] [core:error] [pid 2528544:tid 2528544] [client 20.104.22.47:22231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:10.741272 2026] [ssl:error] [pid 2552677:tid 2552677] (EAI 2)Name or service not known: [client 144.76.19.72:45010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:10.741300 2026] [ssl:error] [pid 2552677:tid 2552677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:10.794274 2026] [ssl:error] [pid 2578371:tid 2578371] (EAI 2)Name or service not known: [client 144.76.19.72:45016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:10.794302 2026] [ssl:error] [pid 2578371:tid 2578371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:11.255927 2026] [core:error] [pid 2581946:tid 2581946] [client 20.104.22.47:22234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:11.255955 2026] [core:error] [pid 2581946:tid 2581946] [client 20.104.22.47:22234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:12.650309 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:12.650335 2026] [core:error] [pid 2537717:tid 2537717] [client 20.104.22.47:22258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:12.818915 2026] [security2:error] [pid 2582760:tid 2582760] [client 185.191.171.1:17884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/site-initiation-visit-in-clinical-trials-ppt"] [unique_id "amsMSAO7Whfrm42LhtBeGgAAABY"]
[Thu Jul 30 09:33:12.828368 2026] [security2:error] [pid 2574382:tid 2574382] [client 74.7.241.59:47658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "barbaramatarrese.com"] [uri "/"] [unique_id "amsMSPjZrlWmSE7FhEVvJAAAACI"]
[Thu Jul 30 09:33:13.405349 2026] [core:error] [pid 2581947:tid 2581947] [client 20.104.22.47:23987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:13.405373 2026] [core:error] [pid 2581947:tid 2581947] [client 20.104.22.47:23987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:13.848064 2026] [ssl:error] [pid 2581688:tid 2581688] (EAI 2)Name or service not known: [client 144.76.19.72:45026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:13.848116 2026] [ssl:error] [pid 2581688:tid 2581688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:13.889309 2026] [cgi:error] [pid 2573411:tid 2573411] [client 20.104.22.47:22911] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:33:13.889618 2026] [core:error] [pid 2573411:tid 2573411] [client 20.104.22.47:22911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:13.895571 2026] [ssl:error] [pid 2574060:tid 2574060] (70014)End of file found: [client 216.73.216.199:21196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:33:13.902862 2026] [ssl:error] [pid 2578796:tid 2578796] (EAI 2)Name or service not known: [client 144.76.19.72:45030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:13.902896 2026] [ssl:error] [pid 2578796:tid 2578796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:14.848390 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22851] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:14.848426 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22851] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:15.951434 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 169.58.39.191:65438] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 09:33:16.833133 2026] [core:error] [pid 2572664:tid 2572664] [client 20.104.22.47:22855] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:16.833160 2026] [core:error] [pid 2572664:tid 2572664] [client 20.104.22.47:22855] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:16.957422 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:45040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:16.957454 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:17.010545 2026] [ssl:error] [pid 2581767:tid 2581767] (EAI 2)Name or service not known: [client 144.76.19.72:45050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:17.010581 2026] [ssl:error] [pid 2581767:tid 2581767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:17.310032 2026] [security2:error] [pid 2552677:tid 2552677] [client 85.208.98.22:44446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nike-air-833662-k.html"] [unique_id "amsMTXxABMo1eq1bLmKgaQAAABo"]
[Thu Jul 30 09:33:17.455658 2026] [security2:error] [pid 2528544:tid 2528544] [client 114.119.142.20:40127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15,103,18/request_format~html"] [unique_id "amsMTc6r7Zd1zXM1G48htQAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,103/request_format~html
[Thu Jul 30 09:33:18.228187 2026] [authz_core:error] [pid 2581767:tid 2581767] [client 66.249.66.34:37434] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:33:18.230969 2026] [authz_core:error] [pid 2581767:tid 2581767] [client 66.249.66.34:37434] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:33:19.427413 2026] [security2:error] [pid 2581915:tid 2581915] [client 114.119.142.20:40143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15,103,18/request_format~html"] [unique_id "amsMT5TCAZVUeZ9__X4ovAAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,103/request_format~html
[Thu Jul 30 09:33:19.803399 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 169.58.39.191:50544] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 09:33:20.068855 2026] [ssl:error] [pid 2572664:tid 2572664] (EAI 2)Name or service not known: [client 144.76.19.72:64762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:20.068891 2026] [ssl:error] [pid 2572664:tid 2572664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:20.130525 2026] [ssl:error] [pid 2577576:tid 2577576] (EAI 2)Name or service not known: [client 144.76.19.72:64768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:20.130555 2026] [ssl:error] [pid 2577576:tid 2577576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:20.687620 2026] [core:error] [pid 2573945:tid 2573945] [client 20.104.22.47:23951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:20.687646 2026] [core:error] [pid 2573945:tid 2573945] [client 20.104.22.47:23951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:21.200097 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 57.141.0.18:58878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:33:21.200762 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 57.141.0.18:58878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:33:21.884877 2026] [core:error] [pid 2578794:tid 2578794] [client 20.104.22.47:22861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:21.884907 2026] [core:error] [pid 2578794:tid 2578794] [client 20.104.22.47:22861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:21.904386 2026] [core:error] [pid 2581915:tid 2581915] [client 66.249.66.8:36408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:21.904411 2026] [core:error] [pid 2581915:tid 2581915] [client 66.249.66.8:36408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:22.444307 2026] [core:error] [pid 2576499:tid 2576499] [client 20.104.22.47:22906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:22.444330 2026] [core:error] [pid 2576499:tid 2576499] [client 20.104.22.47:22906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:23.187895 2026] [ssl:error] [pid 2574428:tid 2574428] (EAI 2)Name or service not known: [client 144.76.19.72:64776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:23.187925 2026] [ssl:error] [pid 2574428:tid 2574428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:23.244358 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:64792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:23.244385 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:25.391251 2026] [security2:error] [pid 2581767:tid 2581767] [client 185.191.171.18:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2016/04/17/winning-performance-by-revo-riders-in-somerset/"] [unique_id "amsMVTqCw1ZbsrY9RURvIwAAAAQ"]
[Thu Jul 30 09:33:25.495003 2026] [core:error] [pid 2569985:tid 2569985] [client 20.104.22.47:23941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:25.495030 2026] [core:error] [pid 2569985:tid 2569985] [client 20.104.22.47:23941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:25.657391 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.50:59834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:33:25.658058 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.50:59834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:33:25.758040 2026] [security2:error] [pid 2581688:tid 2581688] [client 47.128.19.164:60720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "4k-monitors.co.uk"] [uri "/robots.txt"] [unique_id "amsMVTmnb6G6UkvxGLrT0QAAAAE"]
[Thu Jul 30 09:33:25.936842 2026] [core:crit] [pid 2569984:tid 2569984] (13)Permission denied: [client 52.167.144.201:12135] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:33:25.970989 2026] [security2:error] [pid 2574382:tid 2574382] [client 74.7.242.30:52356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.ericashmore.org"] [uri "/"] [unique_id "amsMVfjZrlWmSE7FhEVvKwAAACI"]
[Thu Jul 30 09:33:26.162780 2026] [core:crit] [pid 2569984:tid 2569984] (13)Permission denied: [client 52.167.144.201:12135] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:33:26.227643 2026] [core:error] [pid 2569985:tid 2569985] [client 20.104.22.47:22904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:26.227667 2026] [core:error] [pid 2569985:tid 2569985] [client 20.104.22.47:22904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:26.754831 2026] [ssl:error] [pid 2581767:tid 2581767] (EAI 2)Name or service not known: [client 144.76.19.72:64808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:26.754860 2026] [ssl:error] [pid 2581767:tid 2581767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:26.814520 2026] [ssl:error] [pid 2572608:tid 2572608] (EAI 2)Name or service not known: [client 144.76.19.72:64824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:26.814544 2026] [ssl:error] [pid 2572608:tid 2572608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:28.494797 2026] [core:error] [pid 2569985:tid 2569985] [client 20.104.22.47:22869] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:28.494825 2026] [core:error] [pid 2569985:tid 2569985] [client 20.104.22.47:22869] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:29.552622 2026] [core:error] [pid 2572608:tid 2572608] [client 20.104.22.47:22908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:29.552650 2026] [core:error] [pid 2572608:tid 2572608] [client 20.104.22.47:22908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:29.872637 2026] [ssl:error] [pid 2582506:tid 2582506] (EAI 2)Name or service not known: [client 144.76.19.72:55296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:29.872670 2026] [ssl:error] [pid 2582506:tid 2582506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:29.932519 2026] [ssl:error] [pid 2583433:tid 2583433] (EAI 2)Name or service not known: [client 144.76.19.72:55306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:29.932562 2026] [ssl:error] [pid 2583433:tid 2583433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:30.579150 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:30.579177 2026] [core:error] [pid 2574428:tid 2574428] [client 20.104.22.47:22899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:30.597821 2026] [authz_core:error] [pid 2570991:tid 2570991] [client 57.141.0.22:35294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:33:30.598459 2026] [authz_core:error] [pid 2570991:tid 2570991] [client 57.141.0.22:35294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:33:31.874767 2026] [security2:error] [pid 2581915:tid 2581915] [client 85.208.96.206:33442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7056.0.html"] [unique_id "amsMW5TCAZVUeZ9__X4owAAAAAY"]
[Thu Jul 30 09:33:32.585909 2026] [core:error] [pid 2578796:tid 2578796] [client 66.249.64.170:38791] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:32.585937 2026] [core:error] [pid 2578796:tid 2578796] [client 66.249.64.170:38791] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:32.985636 2026] [ssl:error] [pid 2583300:tid 2583300] (EAI 2)Name or service not known: [client 144.76.19.72:55314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:32.985674 2026] [ssl:error] [pid 2583300:tid 2583300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:33.039277 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:55322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:33.039308 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:33.740239 2026] [security2:error] [pid 2581688:tid 2581688] [client 114.119.136.86:59243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amsMXTmnb6G6UkvxGLrT1wAAAAE"], referer: http://www.mcgarvey.co.uk/robots.txt
[Thu Jul 30 09:33:33.906280 2026] [ssl:error] [pid 2576499:tid 2576499] (70014)End of file found: [client 216.73.216.199:5447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:33:35.039036 2026] [core:error] [pid 2573411:tid 2573411] [client 20.104.22.47:23940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:35.039060 2026] [core:error] [pid 2573411:tid 2573411] [client 20.104.22.47:23940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:35.540409 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:23972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:35.540436 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:23972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:35.716908 2026] [authz_core:error] [pid 2573411:tid 2573411] [client 66.249.66.33:46938] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:33:35.719604 2026] [authz_core:error] [pid 2573411:tid 2573411] [client 66.249.66.33:46938] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:33:36.114045 2026] [ssl:error] [pid 2583335:tid 2583335] (EAI 2)Name or service not known: [client 144.76.19.72:55324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:36.114106 2026] [ssl:error] [pid 2583335:tid 2583335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:36.172232 2026] [ssl:error] [pid 2574115:tid 2574115] (EAI 2)Name or service not known: [client 144.76.19.72:55340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:36.172263 2026] [ssl:error] [pid 2574115:tid 2574115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:36.279176 2026] [core:error] [pid 2573649:tid 2573649] [client 20.104.22.47:22876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:36.279202 2026] [core:error] [pid 2573649:tid 2573649] [client 20.104.22.47:22876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:37.766435 2026] [security2:error] [pid 2578794:tid 2578794] [client 85.208.96.194:24358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,930.0/prev_next,prev.html"] [unique_id "amsMYVszK_udK7z8AUvqfwAAACw"]
[Thu Jul 30 09:33:38.781258 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 20.100.169.152:52367] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:33:38.797187 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 20.100.169.152:52367] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/mc4wp-debug-log.php
[Thu Jul 30 09:33:38.886598 2026] [core:error] [pid 2573649:tid 2573649] [client 20.104.22.47:22868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:38.886625 2026] [core:error] [pid 2573649:tid 2573649] [client 20.104.22.47:22868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:39.057607 2026] [security2:error] [pid 2574382:tid 2574382] [client 85.208.96.203:28290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9649.0.html"] [unique_id "amsMY_jZrlWmSE7FhEVvNAAAACI"]
[Thu Jul 30 09:33:39.226742 2026] [ssl:error] [pid 2583433:tid 2583433] (EAI 2)Name or service not known: [client 144.76.19.72:55342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:39.226769 2026] [ssl:error] [pid 2583433:tid 2583433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:39.282304 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:55352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:39.282329 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:40.596979 2026] [security2:error] [pid 2576499:tid 2576499] [client 47.128.126.222:10082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amsMZMQzgmnSEII5c7NOJQAAABE"]
[Thu Jul 30 09:33:41.360263 2026] [authz_core:error] [pid 2583433:tid 2583433] [client 57.141.0.60:61706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:33:41.360899 2026] [authz_core:error] [pid 2583433:tid 2583433] [client 57.141.0.60:61706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:33:42.062939 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/IXR/error_log
[Thu Jul 30 09:33:42.068000 2026] [core:error] [pid 2583333:tid 2583333] [client 66.249.64.170:44502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:42.068020 2026] [core:error] [pid 2583333:tid 2583333] [client 66.249.64.170:44502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:42.335641 2026] [ssl:error] [pid 2582506:tid 2582506] (EAI 2)Name or service not known: [client 144.76.19.72:18584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:42.335667 2026] [ssl:error] [pid 2582506:tid 2582506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:42.393306 2026] [ssl:error] [pid 2577576:tid 2577576] (EAI 2)Name or service not known: [client 144.76.19.72:18586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:42.393331 2026] [ssl:error] [pid 2577576:tid 2577576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:43.317755 2026] [core:error] [pid 2583433:tid 2583433] [client 20.104.22.47:23942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:43.317786 2026] [core:error] [pid 2583433:tid 2583433] [client 20.104.22.47:23942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:45.451315 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:18588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:45.451345 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:45.505566 2026] [ssl:error] [pid 2574060:tid 2574060] (EAI 2)Name or service not known: [client 144.76.19.72:18602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:45.505603 2026] [ssl:error] [pid 2574060:tid 2574060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:45.678665 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:45.678694 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:46.271950 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:22895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:46.271979 2026] [core:error] [pid 2574060:tid 2574060] [client 20.104.22.47:22895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:48.560998 2026] [ssl:error] [pid 2572664:tid 2572664] (EAI 2)Name or service not known: [client 144.76.19.72:18606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:48.561024 2026] [ssl:error] [pid 2572664:tid 2572664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:48.616963 2026] [ssl:error] [pid 2578796:tid 2578796] (EAI 2)Name or service not known: [client 144.76.19.72:18616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:48.616995 2026] [ssl:error] [pid 2578796:tid 2578796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:48.983433 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 09:33:49.444860 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:49.444890 2026] [core:error] [pid 2574382:tid 2574382] [client 20.104.22.47:22903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:50.591709 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:50.591737 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:51.673697 2026] [ssl:error] [pid 2569985:tid 2569985] (EAI 2)Name or service not known: [client 144.76.19.72:56934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:51.673727 2026] [ssl:error] [pid 2569985:tid 2569985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:51.726911 2026] [ssl:error] [pid 2583434:tid 2583434] (EAI 2)Name or service not known: [client 144.76.19.72:56938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:51.726941 2026] [ssl:error] [pid 2583434:tid 2583434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:52.187686 2026] [core:error] [pid 2581946:tid 2581946] [client 20.104.22.47:22872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:52.187716 2026] [core:error] [pid 2581946:tid 2581946] [client 20.104.22.47:22872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:53.495252 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 09:33:53.593607 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 09:33:53.853898 2026] [core:error] [pid 2583434:tid 2583434] [client 20.104.22.47:22894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:53.853928 2026] [core:error] [pid 2583434:tid 2583434] [client 20.104.22.47:22894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:53.906445 2026] [ssl:error] [pid 2581767:tid 2581767] (70014)End of file found: [client 216.73.216.199:43613] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:33:54.779045 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:56944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:54.779083 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:54.815709 2026] [cgi:error] [pid 2569910:tid 2569910] [client 20.100.169.152:52362] AH02812: stderr from /home/purple/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:33:54.832051 2026] [ssl:error] [pid 2582760:tid 2582760] (EAI 2)Name or service not known: [client 144.76.19.72:56958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:54.832102 2026] [ssl:error] [pid 2582760:tid 2582760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:54.842730 2026] [core:error] [pid 2583434:tid 2583434] [client 20.104.22.47:22884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:54.842751 2026] [core:error] [pid 2583434:tid 2583434] [client 20.104.22.47:22884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:55.535382 2026] [core:error] [pid 2573945:tid 2573945] [client 20.104.22.47:22230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:55.535405 2026] [core:error] [pid 2573945:tid 2573945] [client 20.104.22.47:22230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:55.735725 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 20.100.169.152:52367] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/l10n/error_log
[Thu Jul 30 09:33:55.772315 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 20.100.169.152:52367] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:33:55.785369 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 20.100.169.152:52367] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/mc4wp-debug-log.php
[Thu Jul 30 09:33:56.598787 2026] [cgi:error] [pid 2553974:tid 2553974] [client 20.104.22.47:22862] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:33:56.599124 2026] [core:error] [pid 2553974:tid 2553974] [client 20.104.22.47:22862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:57.516572 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:22889] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:57.516606 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:22889] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:57.887710 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:56970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:57.887736 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:57.945432 2026] [ssl:error] [pid 2574115:tid 2574115] (EAI 2)Name or service not known: [client 144.76.19.72:56980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:33:57.945460 2026] [ssl:error] [pid 2574115:tid 2574115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:33:58.370984 2026] [core:error] [pid 2577576:tid 2577576] [client 66.249.64.170:42778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:58.371008 2026] [core:error] [pid 2577576:tid 2577576] [client 66.249.64.170:42778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:58.697992 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:22893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:33:58.698016 2026] [core:error] [pid 2574381:tid 2574381] [client 20.104.22.47:22893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:00.420347 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:00.420375 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:22443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:00.843697 2026] [core:error] [pid 2573649:tid 2573649] [client 66.249.64.170:45765] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:00.843724 2026] [core:error] [pid 2573649:tid 2573649] [client 66.249.64.170:45765] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:01.002336 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:58754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:01.002377 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:01.056561 2026] [ssl:error] [pid 2582760:tid 2582760] (EAI 2)Name or service not known: [client 144.76.19.72:58758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:01.056598 2026] [ssl:error] [pid 2582760:tid 2582760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:01.280665 2026] [core:error] [pid 2583434:tid 2583434] [client 20.104.22.47:22458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:01.280693 2026] [core:error] [pid 2583434:tid 2583434] [client 20.104.22.47:22458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:02.453259 2026] [security2:error] [pid 2582760:tid 2582760] [client 85.208.96.194:32322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3609.0/prev_next,prev.html"] [unique_id "amsMegO7Whfrm42LhtBeMAAAABY"]
[Thu Jul 30 09:34:02.643350 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:23975] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:02.643377 2026] [core:error] [pid 2569984:tid 2569984] [client 20.104.22.47:23975] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:04.133249 2026] [ssl:error] [pid 2583335:tid 2583335] (EAI 2)Name or service not known: [client 144.76.19.72:58766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:04.133283 2026] [ssl:error] [pid 2583335:tid 2583335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:04.152351 2026] [core:error] [pid 2572664:tid 2572664] [client 20.104.22.47:22337] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:04.152383 2026] [core:error] [pid 2572664:tid 2572664] [client 20.104.22.47:22337] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:04.187540 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:58770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:04.187572 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:04.715471 2026] [core:error] [pid 2572664:tid 2572664] [client 20.104.22.47:22405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:04.715498 2026] [core:error] [pid 2572664:tid 2572664] [client 20.104.22.47:22405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:05.322524 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:34:07.268640 2026] [ssl:error] [pid 2583434:tid 2583434] (EAI 2)Name or service not known: [client 144.76.19.72:58774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:07.268675 2026] [ssl:error] [pid 2583434:tid 2583434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:07.321415 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:58782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:07.321446 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:08.772335 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/html-api/error_log
[Thu Jul 30 09:34:10.160404 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 09:34:10.378528 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:48574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:10.378559 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:10.435653 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:48586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:10.435691 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:12.094977 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.37:54836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:12.095633 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.37:54836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:13.494329 2026] [ssl:error] [pid 2573411:tid 2573411] (EAI 2)Name or service not known: [client 144.76.19.72:48600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:13.494370 2026] [ssl:error] [pid 2573411:tid 2573411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:13.550733 2026] [ssl:error] [pid 2570991:tid 2570991] (EAI 2)Name or service not known: [client 144.76.19.72:48602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:13.550758 2026] [ssl:error] [pid 2570991:tid 2570991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:14.184894 2026] [authz_core:error] [pid 2581767:tid 2581767] [client 169.58.39.191:54240] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 09:34:15.108174 2026] [security2:error] [pid 2553974:tid 2553974] [client 185.191.171.16:42250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/lawrenceburg,-ky-breaking-news"] [unique_id "amsMh_MyyrobjVWUoxs3JAAAAAU"]
[Thu Jul 30 09:34:16.602556 2026] [ssl:error] [pid 2581947:tid 2581947] (EAI 2)Name or service not known: [client 144.76.19.72:48604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:16.602598 2026] [ssl:error] [pid 2581947:tid 2581947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:16.660518 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:48608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:16.660555 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:16.975936 2026] [authz_core:error] [pid 2583389:tid 2583389] [client 169.58.39.191:55213] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 09:34:17.584176 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 57.141.0.6:42310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:17.584804 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 57.141.0.6:42310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:19.291347 2026] [security2:error] [pid 2570892:tid 2570892] [client 74.7.227.185:45154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.acthoroughbreds.com"] [uri "/"] [unique_id "amsMi5_ohiXbFF1WhUxQeQAAACQ"]
[Thu Jul 30 09:34:19.715504 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:26138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:19.715531 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:19.769317 2026] [ssl:error] [pid 2570892:tid 2570892] (EAI 2)Name or service not known: [client 144.76.19.72:26150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:19.769343 2026] [ssl:error] [pid 2570892:tid 2570892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:20.659982 2026] [security2:error] [pid 2585509:tid 2585509] [client 85.208.96.212:63938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.1620.html"] [unique_id "amsMjCVYicJoZ6Bq26WyqQAAABQ"]
[Thu Jul 30 09:34:21.293359 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 09:34:21.875944 2026] [authz_core:error] [pid 2578794:tid 2578794] [client 57.141.0.52:43044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:21.876563 2026] [authz_core:error] [pid 2578794:tid 2578794] [client 57.141.0.52:43044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:22.775087 2026] [authz_core:error] [pid 2570991:tid 2570991] [client 104.22.17.150:11922] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 09:34:22.823575 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:26158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:22.823608 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:22.919349 2026] [ssl:error] [pid 2585581:tid 2585581] (EAI 2)Name or service not known: [client 144.76.19.72:26160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:22.919386 2026] [ssl:error] [pid 2585581:tid 2585581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:23.364255 2026] [core:error] [pid 2583433:tid 2583433] [client 66.249.64.170:49101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:23.364289 2026] [core:error] [pid 2583433:tid 2583433] [client 66.249.64.170:49101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:23.615608 2026] [authz_core:error] [pid 2585583:tid 2585583] [client 57.141.0.23:52914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:23.616258 2026] [authz_core:error] [pid 2585583:tid 2585583] [client 57.141.0.23:52914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:24.789261 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:34:25.446950 2026] [core:error] [pid 2585583:tid 2585583] [client 66.249.66.8:45163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:25.446980 2026] [core:error] [pid 2585583:tid 2585583] [client 66.249.66.8:45163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:25.524572 2026] [core:crit] [pid 2583333:tid 2583333] (13)Permission denied: [client 216.73.216.199:60174] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/libexec/initscripts/legacy-actions/auditd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/libexec/initscripts/legacy-actions/auditd/' is executable
[Thu Jul 30 09:34:25.974380 2026] [ssl:error] [pid 2572664:tid 2572664] (EAI 2)Name or service not known: [client 144.76.19.72:26170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:25.974404 2026] [ssl:error] [pid 2572664:tid 2572664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:26.051263 2026] [ssl:error] [pid 2569985:tid 2569985] (EAI 2)Name or service not known: [client 144.76.19.72:26182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:26.051291 2026] [ssl:error] [pid 2569985:tid 2569985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:26.338183 2026] [authz_core:error] [pid 2582760:tid 2582760] [client 66.249.66.35:52435] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:34:26.341269 2026] [authz_core:error] [pid 2582760:tid 2582760] [client 66.249.66.35:52435] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:34:27.750686 2026] [authz_core:error] [pid 2581688:tid 2581688] [client 57.141.0.68:34260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:27.751316 2026] [authz_core:error] [pid 2581688:tid 2581688] [client 57.141.0.68:34260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:28.231688 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 20.151.221.234:51674] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 09:34:29.104951 2026] [ssl:error] [pid 2581946:tid 2581946] (EAI 2)Name or service not known: [client 144.76.19.72:26196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:29.104992 2026] [ssl:error] [pid 2581946:tid 2581946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:29.159785 2026] [ssl:error] [pid 2578796:tid 2578796] (EAI 2)Name or service not known: [client 144.76.19.72:26212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:29.159826 2026] [ssl:error] [pid 2578796:tid 2578796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:30.326606 2026] [core:error] [pid 2583333:tid 2583333] (13)Permission denied: [client 216.73.216.199:60174] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/destroy_by_rcu
[Thu Jul 30 09:34:30.855692 2026] [core:error] [pid 2584388:tid 2584388] [client 66.249.66.41:39757] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:30.855733 2026] [core:error] [pid 2584388:tid 2584388] [client 66.249.66.41:39757] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:30.859459 2026] [core:error] [pid 2581767:tid 2581767] [client 66.249.66.3:58877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:30.859483 2026] [core:error] [pid 2581767:tid 2581767] [client 66.249.66.3:58877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:31.100940 2026] [authz_core:error] [pid 2566258:tid 2566258] [client 169.58.39.191:60321] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 09:34:32.072159 2026] [security2:error] [pid 2578795:tid 2578795] [client 85.208.98.31:48256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/d%C3%B6nerli-teker-k.html"] [unique_id "amsMmFX_fqIxYoVu9feDtgAAAC4"]
[Thu Jul 30 09:34:32.211991 2026] [ssl:error] [pid 2566258:tid 2566258] (EAI 2)Name or service not known: [client 144.76.19.72:64890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:32.212017 2026] [ssl:error] [pid 2566258:tid 2566258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:32.263059 2026] [ssl:error] [pid 2578796:tid 2578796] (EAI 2)Name or service not known: [client 144.76.19.72:64894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:32.263096 2026] [ssl:error] [pid 2578796:tid 2578796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:33.511146 2026] [authz_core:error] [pid 2578796:tid 2578796] [client 57.141.0.65:25236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:33.511774 2026] [authz_core:error] [pid 2578796:tid 2578796] [client 57.141.0.65:25236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:34.049303 2026] [authz_core:error] [pid 2581688:tid 2581688] [client 57.141.0.35:58122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:34.049928 2026] [authz_core:error] [pid 2581688:tid 2581688] [client 57.141.0.35:58122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:34.295789 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 169.58.39.191:61602] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 09:34:35.319511 2026] [ssl:error] [pid 2580492:tid 2580492] (EAI 2)Name or service not known: [client 144.76.19.72:64910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:35.319564 2026] [ssl:error] [pid 2580492:tid 2580492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:35.324212 2026] [ssl:error] [pid 2583333:tid 2583333] (70014)End of file found: [client 216.73.216.199:60174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:34:35.374649 2026] [ssl:error] [pid 2585540:tid 2585540] (EAI 2)Name or service not known: [client 144.76.19.72:64912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:35.374679 2026] [ssl:error] [pid 2585540:tid 2585540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:38.448492 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:64922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:38.448534 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:38.503207 2026] [ssl:error] [pid 2585580:tid 2585580] (EAI 2)Name or service not known: [client 144.76.19.72:64924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:38.503241 2026] [ssl:error] [pid 2585580:tid 2585580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:38.891139 2026] [core:error] [pid 2581947:tid 2581947] [client 66.249.64.170:53476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:38.891166 2026] [core:error] [pid 2581947:tid 2581947] [client 66.249.64.170:53476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:38.988104 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 169.58.39.191:63141] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 09:34:40.357818 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 57.141.0.60:40250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:40.358442 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 57.141.0.60:40250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:41.406483 2026] [security2:error] [pid 2573945:tid 2573945] [client 114.119.155.144:45483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~104,30/request_format~html"] [unique_id "amsMoUHRvfVkTLPT7gr74wAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,104,30/request_format~html
[Thu Jul 30 09:34:41.564579 2026] [ssl:error] [pid 2583811:tid 2583811] (EAI 2)Name or service not known: [client 144.76.19.72:56626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:41.564626 2026] [ssl:error] [pid 2583811:tid 2583811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:41.619363 2026] [ssl:error] [pid 2585509:tid 2585509] (EAI 2)Name or service not known: [client 144.76.19.72:56640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:41.619391 2026] [ssl:error] [pid 2585509:tid 2585509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:42.233839 2026] [authz_core:error] [pid 2585580:tid 2585580] [client 169.58.39.191:64323] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 09:34:42.267655 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 57.141.0.2:62130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:42.268299 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 57.141.0.2:62130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:42.409879 2026] [security2:error] [pid 2585509:tid 2585509] [client 114.119.155.144:45497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~104,30/request_format~html"] [unique_id "amsMoiVYicJoZ6Bq26WytgAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,104,30/request_format~html
[Thu Jul 30 09:34:44.676219 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:56648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:44.676243 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:44.730985 2026] [ssl:error] [pid 2585509:tid 2585509] (EAI 2)Name or service not known: [client 144.76.19.72:56650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:44.731011 2026] [ssl:error] [pid 2585509:tid 2585509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:45.413580 2026] [security2:error] [pid 2574381:tid 2574381] [client 43.228.157.102:57630] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ziltdesign.be"] [uri "/.git/config"] [unique_id "amsMpTYn5iXb3msZj5WYpgAAABw"]
[Thu Jul 30 09:34:45.413751 2026] [security2:error] [pid 2574381:tid 2574381] [client 43.228.157.102:57630] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziltdesign.be"] [uri "/.git/config"] [unique_id "amsMpTYn5iXb3msZj5WYpgAAABw"]
[Thu Jul 30 09:34:45.413967 2026] [security2:error] [pid 2574381:tid 2574381] [client 43.228.157.102:57630] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ziltdesign.be"] [uri "/.git/config"] [unique_id "amsMpTYn5iXb3msZj5WYpgAAABw"]
[Thu Jul 30 09:34:45.526870 2026] [core:error] [pid 2585582:tid 2585582] (13)Permission denied: [client 216.73.216.199:42166] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/boot/System.map-4.18.0-553.123.2.lve.el8.x86_64
[Thu Jul 30 09:34:45.833096 2026] [core:error] [pid 2573945:tid 2573945] [client 66.249.64.170:45894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:45.833132 2026] [core:error] [pid 2573945:tid 2573945] [client 66.249.64.170:45894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:34:47.574148 2026] [authz_core:error] [pid 2582760:tid 2582760] [client 180.17.33.4:48284] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: android-app://com.google.android.googlequicksearchbox/
[Thu Jul 30 09:34:47.576813 2026] [authz_core:error] [pid 2582760:tid 2582760] [client 180.17.33.4:48284] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: android-app://com.google.android.googlequicksearchbox/
[Thu Jul 30 09:34:47.785506 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:56656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:47.785532 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:47.837158 2026] [ssl:error] [pid 2570989:tid 2570989] (EAI 2)Name or service not known: [client 144.76.19.72:56672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:47.837187 2026] [ssl:error] [pid 2570989:tid 2570989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:48.677819 2026] [authz_core:error] [pid 2573649:tid 2573649] [client 57.141.0.55:60142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:48.678442 2026] [authz_core:error] [pid 2573649:tid 2573649] [client 57.141.0.55:60142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:49.573006 2026] [authz_core:error] [pid 2585581:tid 2585581] [client 57.141.0.67:46798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:49.573637 2026] [authz_core:error] [pid 2585581:tid 2585581] [client 57.141.0.67:46798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:50.328052 2026] [core:error] [pid 2585582:tid 2585582] (13)Permission denied: [client 216.73.216.199:42166] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/boot/System.map-4.18.0-553.126.2.lve.el8.x86_64
[Thu Jul 30 09:34:50.890540 2026] [ssl:error] [pid 2566258:tid 2566258] (EAI 2)Name or service not known: [client 144.76.19.72:26532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:50.890569 2026] [ssl:error] [pid 2566258:tid 2566258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:50.943647 2026] [ssl:error] [pid 2574060:tid 2574060] (EAI 2)Name or service not known: [client 144.76.19.72:26546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:50.943671 2026] [ssl:error] [pid 2574060:tid 2574060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:52.957454 2026] [security2:error] [pid 2585583:tid 2585583] [client 85.208.96.193:25530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9639.0/prev_next,prev.html"] [unique_id "amsMrAGe_QtE7_Ot5p1eWgAAACY"]
[Thu Jul 30 09:34:53.760834 2026] [authz_core:error] [pid 2585509:tid 2585509] [client 57.141.0.10:46640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:34:53.761464 2026] [authz_core:error] [pid 2585509:tid 2585509] [client 57.141.0.10:46640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:34:54.002304 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:26562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:54.002332 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:54.058242 2026] [ssl:error] [pid 2585509:tid 2585509] (EAI 2)Name or service not known: [client 144.76.19.72:26576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:54.058270 2026] [ssl:error] [pid 2585509:tid 2585509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:54.558705 2026] [authz_core:error] [pid 2581947:tid 2581947] [client 66.249.66.34:52675] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:34:54.561374 2026] [authz_core:error] [pid 2581947:tid 2581947] [client 66.249.66.34:52675] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:34:57.114740 2026] [ssl:error] [pid 2573411:tid 2573411] (EAI 2)Name or service not known: [client 144.76.19.72:26590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:57.114773 2026] [ssl:error] [pid 2573411:tid 2573411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:34:57.166333 2026] [ssl:error] [pid 2586939:tid 2586939] (EAI 2)Name or service not known: [client 144.76.19.72:26604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:34:57.166376 2026] [ssl:error] [pid 2586939:tid 2586939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:00.220216 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:63156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:00.220244 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:00.272882 2026] [ssl:error] [pid 2582590:tid 2582590] (EAI 2)Name or service not known: [client 144.76.19.72:63166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:00.272919 2026] [ssl:error] [pid 2582590:tid 2582590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:00.831330 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 66.249.66.33:48272] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:35:00.834007 2026] [authz_core:error] [pid 2572662:tid 2572662] [client 66.249.66.33:48272] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:35:00.969340 2026] [security2:error] [pid 2585509:tid 2585509] [client 185.191.171.9:21628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4180.0/prev_next,next.html"] [unique_id "amsMtCVYicJoZ6Bq26WyxAAAABQ"]
[Thu Jul 30 09:35:01.163099 2026] [core:error] [pid 2582760:tid 2582760] [client 66.249.64.170:38377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:01.163128 2026] [core:error] [pid 2582760:tid 2582760] [client 66.249.64.170:38377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:01.473018 2026] [core:error] [pid 2587038:tid 2587038] [client 66.249.66.195:35034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:01.473085 2026] [core:error] [pid 2587038:tid 2587038] [client 66.249.66.195:35034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:03.328220 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:63180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:03.328259 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:03.386039 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:63196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:03.386116 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:05.335178 2026] [core:error] [pid 2585582:tid 2585582] (13)Permission denied: [client 216.73.216.199:42166] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/sanity_checks
[Thu Jul 30 09:35:05.543786 2026] [access_compat:error] [pid 2583333:tid 2583333] [client 185.93.89.167:55307] AH01797: client denied by server configuration: /home/nspandor/public_html/.env
[Thu Jul 30 09:35:05.564230 2026] [access_compat:error] [pid 2583333:tid 2583333] [client 185.93.89.167:55307] AH01797: client denied by server configuration: /home/nspandor/public_html/api
[Thu Jul 30 09:35:05.584708 2026] [access_compat:error] [pid 2583333:tid 2583333] [client 185.93.89.167:55307] AH01797: client denied by server configuration: /home/nspandor/public_html/backend
[Thu Jul 30 09:35:05.604977 2026] [access_compat:error] [pid 2583333:tid 2583333] [client 185.93.89.167:55307] AH01797: client denied by server configuration: /home/nspandor/public_html/phpinfo.php
[Thu Jul 30 09:35:05.605024 2026] [access_compat:error] [pid 2583333:tid 2583333] [client 185.93.89.167:55307] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:35:05.625279 2026] [access_compat:error] [pid 2583333:tid 2583333] [client 185.93.89.167:55307] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 09:35:06.443477 2026] [ssl:error] [pid 2585583:tid 2585583] (EAI 2)Name or service not known: [client 144.76.19.72:63200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:06.443519 2026] [ssl:error] [pid 2585583:tid 2585583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:06.496959 2026] [ssl:error] [pid 2586776:tid 2586776] (EAI 2)Name or service not known: [client 144.76.19.72:63214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:06.496990 2026] [ssl:error] [pid 2586776:tid 2586776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:06.595851 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 185.93.89.167:39891] AH01797: client denied by server configuration: /home/nspandor/public_html/.env
[Thu Jul 30 09:35:06.614723 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 185.93.89.167:39891] AH01797: client denied by server configuration: /home/nspandor/public_html/api
[Thu Jul 30 09:35:06.633545 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 185.93.89.167:39891] AH01797: client denied by server configuration: /home/nspandor/public_html/backend
[Thu Jul 30 09:35:06.652324 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 185.93.89.167:39891] AH01797: client denied by server configuration: /home/nspandor/public_html/phpinfo.php
[Thu Jul 30 09:35:06.652365 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 185.93.89.167:39891] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:35:06.671217 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 185.93.89.167:39891] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 09:35:07.960563 2026] [security2:error] [pid 2580492:tid 2580492] [client 94.154.43.188:61822] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amsMuy5QtR4uwl4PgH3GvwAAAB0"]
[Thu Jul 30 09:35:07.960768 2026] [security2:error] [pid 2580492:tid 2580492] [client 94.154.43.188:61822] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amsMuy5QtR4uwl4PgH3GvwAAAB0"]
[Thu Jul 30 09:35:07.960998 2026] [security2:error] [pid 2580492:tid 2580492] [client 94.154.43.188:61822] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amsMuy5QtR4uwl4PgH3GvwAAAB0"]
[Thu Jul 30 09:35:08.013242 2026] [security2:error] [pid 2585509:tid 2585509] [client 94.154.43.188:61834] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsMvCVYicJoZ6Bq26WyxwAAABQ"]
[Thu Jul 30 09:35:08.013444 2026] [security2:error] [pid 2585509:tid 2585509] [client 94.154.43.188:61834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsMvCVYicJoZ6Bq26WyxwAAABQ"]
[Thu Jul 30 09:35:08.013674 2026] [security2:error] [pid 2585509:tid 2585509] [client 94.154.43.188:61834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsMvCVYicJoZ6Bq26WyxwAAABQ"]
[Thu Jul 30 09:35:08.465188 2026] [authz_core:error] [pid 2580492:tid 2580492] [client 57.141.0.5:52248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:08.465891 2026] [authz_core:error] [pid 2580492:tid 2580492] [client 57.141.0.5:52248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:09.569207 2026] [ssl:error] [pid 2572662:tid 2572662] (EAI 2)Name or service not known: [client 144.76.19.72:60918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:09.569240 2026] [ssl:error] [pid 2572662:tid 2572662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:09.624998 2026] [ssl:error] [pid 2580492:tid 2580492] (EAI 2)Name or service not known: [client 144.76.19.72:60934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:09.625032 2026] [ssl:error] [pid 2580492:tid 2580492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:09.788361 2026] [core:error] [pid 2585509:tid 2585509] [client 66.249.64.170:56185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:09.788388 2026] [core:error] [pid 2585509:tid 2585509] [client 66.249.64.170:56185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:10.937998 2026] [core:error] [pid 2572662:tid 2572662] [client 66.249.64.170:37771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:10.938027 2026] [core:error] [pid 2572662:tid 2572662] [client 66.249.64.170:37771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:12.681345 2026] [ssl:error] [pid 2587037:tid 2587037] (EAI 2)Name or service not known: [client 144.76.19.72:60950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:12.681384 2026] [ssl:error] [pid 2587037:tid 2587037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:12.736491 2026] [ssl:error] [pid 2585581:tid 2585581] (EAI 2)Name or service not known: [client 144.76.19.72:60960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:12.736517 2026] [ssl:error] [pid 2585581:tid 2585581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:12.813810 2026] [authz_core:error] [pid 2586776:tid 2586776] [client 57.141.0.67:33596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:12.814435 2026] [authz_core:error] [pid 2586776:tid 2586776] [client 57.141.0.67:33596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:14.942903 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 51.103.154.47:12555] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:35:15.335574 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 57.141.0.51:40742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:15.336218 2026] [authz_core:error] [pid 2570989:tid 2570989] [client 57.141.0.51:40742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:15.793006 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:60974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:15.793033 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:15.847730 2026] [ssl:error] [pid 2586776:tid 2586776] (EAI 2)Name or service not known: [client 144.76.19.72:60982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:15.847758 2026] [ssl:error] [pid 2586776:tid 2586776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:15.921735 2026] [security2:error] [pid 2587037:tid 2587037] [client 85.208.96.212:26324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/moneyball-ice-t"] [unique_id "amsMw_cnd-CpnzcOL1wi5QAAABk"]
[Thu Jul 30 09:35:17.253816 2026] [access_compat:error] [pid 2587287:tid 2587287] [client 45.158.164.139:58296] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:35:18.049242 2026] [authz_core:error] [pid 2587287:tid 2587287] [client 57.141.0.60:55976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:18.049864 2026] [authz_core:error] [pid 2587287:tid 2587287] [client 57.141.0.60:55976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:18.693306 2026] [authz_core:error] [pid 2587037:tid 2587037] [client 169.58.39.191:60658] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/pomo/error_log, referer: binance.com
[Thu Jul 30 09:35:18.796836 2026] [core:error] [pid 2574381:tid 2574381] [client 66.249.64.170:42475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:18.796861 2026] [core:error] [pid 2574381:tid 2574381] [client 66.249.64.170:42475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:18.905498 2026] [ssl:error] [pid 2586776:tid 2586776] (EAI 2)Name or service not known: [client 144.76.19.72:60984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:18.905522 2026] [ssl:error] [pid 2586776:tid 2586776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:18.963507 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:60990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:18.963532 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:18.977876 2026] [authz_core:error] [pid 2587888:tid 2587888] [client 57.141.0.8:38424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:18.978522 2026] [authz_core:error] [pid 2587888:tid 2587888] [client 57.141.0.8:38424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:19.522198 2026] [authz_core:error] [pid 2574381:tid 2574381] [client 57.141.0.24:63348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:19.522842 2026] [authz_core:error] [pid 2574381:tid 2574381] [client 57.141.0.24:63348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:21.599511 2026] [authz_core:error] [pid 2585539:tid 2585539] [client 169.58.39.191:61598] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/pomo/error_log, referer: binance.com
[Thu Jul 30 09:35:22.020933 2026] [ssl:error] [pid 2588066:tid 2588066] (EAI 2)Name or service not known: [client 144.76.19.72:50590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:22.020992 2026] [ssl:error] [pid 2588066:tid 2588066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:22.073106 2026] [ssl:error] [pid 2588066:tid 2588066] (EAI 2)Name or service not known: [client 144.76.19.72:50606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:22.073137 2026] [ssl:error] [pid 2588066:tid 2588066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:24.809908 2026] [security2:error] [pid 2587038:tid 2587038] [client 43.228.157.102:58518] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.git/config"] [unique_id "amsMzAwr70XyFNLKZ4g_fQAAABs"]
[Thu Jul 30 09:35:24.810121 2026] [security2:error] [pid 2587038:tid 2587038] [client 43.228.157.102:58518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.git/config"] [unique_id "amsMzAwr70XyFNLKZ4g_fQAAABs"]
[Thu Jul 30 09:35:24.810349 2026] [security2:error] [pid 2587038:tid 2587038] [client 43.228.157.102:58518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.git/config"] [unique_id "amsMzAwr70XyFNLKZ4g_fQAAABs"]
[Thu Jul 30 09:35:25.125358 2026] [ssl:error] [pid 2580492:tid 2580492] (EAI 2)Name or service not known: [client 144.76.19.72:50610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:25.125389 2026] [ssl:error] [pid 2580492:tid 2580492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:25.180889 2026] [ssl:error] [pid 2573411:tid 2573411] (EAI 2)Name or service not known: [client 144.76.19.72:50622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:25.180912 2026] [ssl:error] [pid 2573411:tid 2573411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:28.239558 2026] [ssl:error] [pid 2578794:tid 2578794] (EAI 2)Name or service not known: [client 144.76.19.72:50634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:28.239618 2026] [ssl:error] [pid 2578794:tid 2578794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:28.307612 2026] [ssl:error] [pid 2588355:tid 2588355] (EAI 2)Name or service not known: [client 144.76.19.72:50642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:28.307654 2026] [ssl:error] [pid 2588355:tid 2588355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:29.040156 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUuAAAACQ"]
[Thu Jul 30 09:35:29.040370 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUuAAAACQ"]
[Thu Jul 30 09:35:29.040812 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUuAAAACQ"]
[Thu Jul 30 09:35:29.104101 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUuQAAACQ"]
[Thu Jul 30 09:35:29.104297 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUuQAAACQ"]
[Thu Jul 30 09:35:29.104701 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUuQAAACQ"]
[Thu Jul 30 09:35:29.535963 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUvQAAACQ"]
[Thu Jul 30 09:35:29.536190 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUvQAAACQ"]
[Thu Jul 30 09:35:29.536605 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUvQAAACQ"]
[Thu Jul 30 09:35:29.572867 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.bak"] [unique_id "amsM0ce0S3E6w5cqM-cUvgAAACQ"]
[Thu Jul 30 09:35:29.573078 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.bak"] [unique_id "amsM0ce0S3E6w5cqM-cUvgAAACQ"]
[Thu Jul 30 09:35:29.573486 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.bak"] [unique_id "amsM0ce0S3E6w5cqM-cUvgAAACQ"]
[Thu Jul 30 09:35:29.705731 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/stripe/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUwQAAACQ"]
[Thu Jul 30 09:35:29.705915 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/stripe/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUwQAAACQ"]
[Thu Jul 30 09:35:29.706311 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/stripe/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUwQAAACQ"]
[Thu Jul 30 09:35:29.793626 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.aws"] [unique_id "amsM0ce0S3E6w5cqM-cUwgAAACQ"]
[Thu Jul 30 09:35:29.793813 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.aws"] [unique_id "amsM0ce0S3E6w5cqM-cUwgAAACQ"]
[Thu Jul 30 09:35:29.794212 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.aws"] [unique_id "amsM0ce0S3E6w5cqM-cUwgAAACQ"]
[Thu Jul 30 09:35:29.813384 2026] [security2:error] [pid 2573649:tid 2573649] [client 114.119.136.66:31745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/asia-shelter-forum-2020-playlist/"] [unique_id "amsM0VQAEWzEnzjjuDt9KQAAAAc"], referer: http://www.shelterforum.info/asia-shelter-forum-2020-playlist/
[Thu Jul 30 09:35:29.849199 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.save"] [unique_id "amsM0ce0S3E6w5cqM-cUwwAAACQ"]
[Thu Jul 30 09:35:29.849370 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.save"] [unique_id "amsM0ce0S3E6w5cqM-cUwwAAACQ"]
[Thu Jul 30 09:35:29.849767 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.save"] [unique_id "amsM0ce0S3E6w5cqM-cUwwAAACQ"]
[Thu Jul 30 09:35:29.890376 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.local"] [unique_id "amsM0ce0S3E6w5cqM-cUxAAAACQ"]
[Thu Jul 30 09:35:29.890559 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.local"] [unique_id "amsM0ce0S3E6w5cqM-cUxAAAACQ"]
[Thu Jul 30 09:35:29.890951 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.local"] [unique_id "amsM0ce0S3E6w5cqM-cUxAAAACQ"]
[Thu Jul 30 09:35:29.935246 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUxQAAACQ"]
[Thu Jul 30 09:35:29.935435 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUxQAAACQ"]
[Thu Jul 30 09:35:29.935824 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amsM0ce0S3E6w5cqM-cUxQAAACQ"]
[Thu Jul 30 09:35:30.026387 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.backup"] [unique_id "amsM0se0S3E6w5cqM-cUxwAAACQ"]
[Thu Jul 30 09:35:30.026555 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.backup"] [unique_id "amsM0se0S3E6w5cqM-cUxwAAACQ"]
[Thu Jul 30 09:35:30.026933 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.backup"] [unique_id "amsM0se0S3E6w5cqM-cUxwAAACQ"]
[Thu Jul 30 09:35:30.069394 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.old"] [unique_id "amsM0se0S3E6w5cqM-cUyAAAACQ"]
[Thu Jul 30 09:35:30.069575 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.old"] [unique_id "amsM0se0S3E6w5cqM-cUyAAAACQ"]
[Thu Jul 30 09:35:30.069978 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.old"] [unique_id "amsM0se0S3E6w5cqM-cUyAAAACQ"]
[Thu Jul 30 09:35:30.107243 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.tmp"] [unique_id "amsM0se0S3E6w5cqM-cUyQAAACQ"]
[Thu Jul 30 09:35:30.107414 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.tmp"] [unique_id "amsM0se0S3E6w5cqM-cUyQAAACQ"]
[Thu Jul 30 09:35:30.107794 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.tmp"] [unique_id "amsM0se0S3E6w5cqM-cUyQAAACQ"]
[Thu Jul 30 09:35:30.148932 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.php.bak"] [unique_id "amsM0se0S3E6w5cqM-cUygAAACQ"]
[Thu Jul 30 09:35:30.149131 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.php.bak"] [unique_id "amsM0se0S3E6w5cqM-cUygAAACQ"]
[Thu Jul 30 09:35:30.149514 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.php.bak"] [unique_id "amsM0se0S3E6w5cqM-cUygAAACQ"]
[Thu Jul 30 09:35:30.188189 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.php"] [unique_id "amsM0se0S3E6w5cqM-cUywAAACQ"]
[Thu Jul 30 09:35:30.188378 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.php"] [unique_id "amsM0se0S3E6w5cqM-cUywAAACQ"]
[Thu Jul 30 09:35:30.188795 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.php"] [unique_id "amsM0se0S3E6w5cqM-cUywAAACQ"]
[Thu Jul 30 09:35:30.225427 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.txt"] [unique_id "amsM0se0S3E6w5cqM-cUzAAAACQ"]
[Thu Jul 30 09:35:30.225635 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.txt"] [unique_id "amsM0se0S3E6w5cqM-cUzAAAACQ"]
[Thu Jul 30 09:35:30.226040 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.txt"] [unique_id "amsM0se0S3E6w5cqM-cUzAAAACQ"]
[Thu Jul 30 09:35:30.269300 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.prod"] [unique_id "amsM0se0S3E6w5cqM-cUzQAAACQ"]
[Thu Jul 30 09:35:30.269494 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.prod"] [unique_id "amsM0se0S3E6w5cqM-cUzQAAACQ"]
[Thu Jul 30 09:35:30.269936 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.prod"] [unique_id "amsM0se0S3E6w5cqM-cUzQAAACQ"]
[Thu Jul 30 09:35:30.412227 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.dev"] [unique_id "amsM0se0S3E6w5cqM-cUzgAAACQ"]
[Thu Jul 30 09:35:30.412412 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.dev"] [unique_id "amsM0se0S3E6w5cqM-cUzgAAACQ"]
[Thu Jul 30 09:35:30.412817 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.dev"] [unique_id "amsM0se0S3E6w5cqM-cUzgAAACQ"]
[Thu Jul 30 09:35:30.570034 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsM0se0S3E6w5cqM-cU0AAAACQ"]
[Thu Jul 30 09:35:30.570216 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsM0se0S3E6w5cqM-cU0AAAACQ"]
[Thu Jul 30 09:35:30.570568 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsM0se0S3E6w5cqM-cU0AAAACQ"]
[Thu Jul 30 09:35:30.608652 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/wp-config.php"] [unique_id "amsM0se0S3E6w5cqM-cU0QAAACQ"]
[Thu Jul 30 09:35:30.608833 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/wp-config.php"] [unique_id "amsM0se0S3E6w5cqM-cU0QAAACQ"]
[Thu Jul 30 09:35:30.609205 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/wp-config.php"] [unique_id "amsM0se0S3E6w5cqM-cU0QAAACQ"]
[Thu Jul 30 09:35:30.749187 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/wp-config.php.old"] [unique_id "amsM0se0S3E6w5cqM-cU0gAAACQ"]
[Thu Jul 30 09:35:30.749386 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/wp-config.php.old"] [unique_id "amsM0se0S3E6w5cqM-cU0gAAACQ"]
[Thu Jul 30 09:35:30.749790 2026] [security2:error] [pid 2587952:tid 2587952] [client 45.148.10.62:57002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/wp-config.php.old"] [unique_id "amsM0se0S3E6w5cqM-cU0gAAACQ"]
[Thu Jul 30 09:35:31.363086 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:59944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:31.363116 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:31.420924 2026] [ssl:error] [pid 2587010:tid 2587010] (EAI 2)Name or service not known: [client 144.76.19.72:59956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:31.420956 2026] [ssl:error] [pid 2587010:tid 2587010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:32.257759 2026] [authz_core:error] [pid 2574060:tid 2574060] [client 169.58.39.191:65217] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 09:35:34.068009 2026] [security2:error] [pid 2573411:tid 2573411] [client 85.208.96.212:38392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.0.html"] [unique_id "amsM1pj9XQf2VEs52TBtzgAAAAA"]
[Thu Jul 30 09:35:34.431897 2026] [authz_core:error] [pid 2583333:tid 2583333] [client 169.58.39.191:49753] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 09:35:34.433485 2026] [core:error] [pid 2587037:tid 2587037] [client 66.249.64.170:40445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:34.433506 2026] [core:error] [pid 2587037:tid 2587037] [client 66.249.64.170:40445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:34.476421 2026] [ssl:error] [pid 2587888:tid 2587888] (EAI 2)Name or service not known: [client 144.76.19.72:59960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:34.476465 2026] [ssl:error] [pid 2587888:tid 2587888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:34.529865 2026] [ssl:error] [pid 2586776:tid 2586776] (EAI 2)Name or service not known: [client 144.76.19.72:59968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:34.529895 2026] [ssl:error] [pid 2586776:tid 2586776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:37.585656 2026] [ssl:error] [pid 2588445:tid 2588445] (EAI 2)Name or service not known: [client 144.76.19.72:59970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:37.585686 2026] [ssl:error] [pid 2588445:tid 2588445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:37.639425 2026] [ssl:error] [pid 2581688:tid 2581688] (EAI 2)Name or service not known: [client 144.76.19.72:59984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:37.639457 2026] [ssl:error] [pid 2581688:tid 2581688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:37.962471 2026] [authz_core:error] [pid 2588527:tid 2588527] [client 57.141.0.14:31798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:37.963095 2026] [authz_core:error] [pid 2588527:tid 2588527] [client 57.141.0.14:31798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:40.787192 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:20254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:40.787242 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:40.842245 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:20270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:40.842272 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:43.541832 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 09:35:43.541941 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 09:35:43.542115 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 09:35:43.542284 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 09:35:43.542349 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 09:35:43.542505 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 09:35:43.542662 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 09:35:43.542727 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 09:35:43.542885 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 09:35:43.542997 2026] [authz_core:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 09:35:43.543048 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 09:35:43.543120 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 09:35:43.543280 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 09:35:43.543458 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 09:35:43.543523 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 09:35:43.543686 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 09:35:43.543854 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 09:35:43.543919 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 09:35:43.544084 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 09:35:43.544884 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 09:35:43.544949 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 09:35:43.545119 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 09:35:43.545288 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 09:35:43.545352 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 09:35:43.545514 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 09:35:43.546004 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 09:35:43.546077 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 09:35:43.546239 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 09:35:43.546398 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 09:35:43.546462 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 09:35:43.546629 2026] [access_compat:error] [pid 2576499:tid 2576499] [client 66.132.186.178:19788] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 09:35:43.898523 2026] [ssl:error] [pid 2580492:tid 2580492] (EAI 2)Name or service not known: [client 144.76.19.72:20286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:43.898555 2026] [ssl:error] [pid 2580492:tid 2580492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:43.952366 2026] [ssl:error] [pid 2573945:tid 2573945] (EAI 2)Name or service not known: [client 144.76.19.72:20290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:43.952394 2026] [ssl:error] [pid 2573945:tid 2573945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:44.070947 2026] [authz_core:error] [pid 2586776:tid 2586776] [client 57.141.0.11:22330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:44.071571 2026] [authz_core:error] [pid 2586776:tid 2586776] [client 57.141.0.11:22330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:46.405934 2026] [security2:error] [pid 2588355:tid 2588355] [client 43.166.226.57:46050] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hatch-works.com"] [uri "/"] [unique_id "amsM4m1fD-9OJnXtceritwAAAC4"]
[Thu Jul 30 09:35:47.005573 2026] [ssl:error] [pid 2588445:tid 2588445] (EAI 2)Name or service not known: [client 144.76.19.72:20304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:47.005611 2026] [ssl:error] [pid 2588445:tid 2588445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:47.058480 2026] [ssl:error] [pid 2588527:tid 2588527] (EAI 2)Name or service not known: [client 144.76.19.72:20316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:47.058509 2026] [ssl:error] [pid 2588527:tid 2588527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:47.416481 2026] [core:error] [pid 2586776:tid 2586776] [client 66.249.64.170:65291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:47.416504 2026] [core:error] [pid 2586776:tid 2586776] [client 66.249.64.170:65291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:48.332626 2026] [security2:error] [pid 2574381:tid 2574381] [client 110.249.201.83:22402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chateausaintjeannet.com"] [uri "/robots.txt"] [unique_id "amsM5DYn5iXb3msZj5WY0gAAABw"]
[Thu Jul 30 09:35:50.116443 2026] [ssl:error] [pid 2561092:tid 2561092] (EAI 2)Name or service not known: [client 144.76.19.72:61254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:50.116476 2026] [ssl:error] [pid 2561092:tid 2561092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:50.169519 2026] [ssl:error] [pid 2580492:tid 2580492] (EAI 2)Name or service not known: [client 144.76.19.72:61258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:50.169550 2026] [ssl:error] [pid 2580492:tid 2580492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:50.222356 2026] [authz_core:error] [pid 2576499:tid 2576499] [client 57.141.0.25:24654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:35:50.222972 2026] [authz_core:error] [pid 2576499:tid 2576499] [client 57.141.0.25:24654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:35:53.224146 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:61264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:53.224170 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:53.279692 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:61272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:53.279725 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:55.094114 2026] [security2:error] [pid 2581946:tid 2581946] [client 85.208.98.31:45282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/shop-online-adidas-k.html"] [unique_id "amsM6zACFKlCm7feqVaRogAAAAk"]
[Thu Jul 30 09:35:56.357507 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:61286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:56.357535 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:56.413787 2026] [ssl:error] [pid 2569910:tid 2569910] (EAI 2)Name or service not known: [client 144.76.19.72:61292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:56.413816 2026] [ssl:error] [pid 2569910:tid 2569910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:57.341090 2026] [core:error] [pid 2575413:tid 2575413] [client 66.249.64.170:42410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:57.341122 2026] [core:error] [pid 2575413:tid 2575413] [client 66.249.64.170:42410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:35:59.474504 2026] [ssl:error] [pid 2589437:tid 2589437] (EAI 2)Name or service not known: [client 144.76.19.72:61302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:59.474542 2026] [ssl:error] [pid 2589437:tid 2589437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:35:59.528362 2026] [ssl:error] [pid 2589438:tid 2589438] (EAI 2)Name or service not known: [client 144.76.19.72:61306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:35:59.528405 2026] [ssl:error] [pid 2589438:tid 2589438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:00.566318 2026] [authz_core:error] [pid 2589438:tid 2589438] [client 57.141.0.25:29856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:00.569780 2026] [authz_core:error] [pid 2589438:tid 2589438] [client 57.141.0.25:29856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:00.677373 2026] [cgi:error] [pid 2583335:tid 2583335] [client 20.104.22.47:57206] AH02812: stderr from /home/pstudioc/public_html/sewyork.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:36:02.591512 2026] [ssl:error] [pid 2588355:tid 2588355] (EAI 2)Name or service not known: [client 144.76.19.72:33090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:02.591538 2026] [ssl:error] [pid 2588355:tid 2588355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:02.642632 2026] [ssl:error] [pid 2574428:tid 2574428] (EAI 2)Name or service not known: [client 144.76.19.72:33092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:02.642657 2026] [ssl:error] [pid 2574428:tid 2574428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:04.736815 2026] [security2:error] [pid 2585539:tid 2585539] [client 114.119.142.20:46721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,18,19/request_format~html"] [unique_id "amsM9Nry5YS2zhyXGg407QAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~103,18/request_format~html
[Thu Jul 30 09:36:05.696976 2026] [ssl:error] [pid 2575413:tid 2575413] (EAI 2)Name or service not known: [client 144.76.19.72:33106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:05.697006 2026] [ssl:error] [pid 2575413:tid 2575413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:05.777823 2026] [ssl:error] [pid 2581946:tid 2581946] (EAI 2)Name or service not known: [client 144.76.19.72:33110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:05.777848 2026] [ssl:error] [pid 2581946:tid 2581946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:06.174417 2026] [security2:error] [pid 2587888:tid 2587888] [client 114.119.142.20:46735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,18,19/request_format~html"] [unique_id "amsM9vz7WbMZBCjXZ0BA1AAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~103,18/request_format~html
[Thu Jul 30 09:36:06.520182 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 09:36:06.520285 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 09:36:06.520446 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 09:36:06.520617 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 09:36:06.520682 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 09:36:06.520839 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 09:36:06.520989 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 09:36:06.521054 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 09:36:06.521237 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 09:36:06.521351 2026] [authz_core:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 09:36:06.521425 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 09:36:06.521492 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 09:36:06.521668 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 09:36:06.521819 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 09:36:06.521897 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 09:36:06.522053 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 09:36:06.522222 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 09:36:06.522287 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 09:36:06.522442 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 09:36:06.523233 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 09:36:06.523300 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 09:36:06.523456 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 09:36:06.523625 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 09:36:06.523689 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 09:36:06.523850 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 09:36:06.524329 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 09:36:06.524394 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 09:36:06.524551 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 09:36:06.524707 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 09:36:06.524771 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 09:36:06.524927 2026] [access_compat:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 09:36:06.880949 2026] [security2:error] [pid 2569984:tid 2569984] [client 20.203.200.218:6705] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "newtronic.newtronicmedia.com"] [uri "/wp-config.php"] [unique_id "amsM9vxXcCowsLguGqAkfwAAAAg"]
[Thu Jul 30 09:36:06.881101 2026] [security2:error] [pid 2569984:tid 2569984] [client 20.203.200.218:6705] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "newtronic.newtronicmedia.com"] [uri "/wp-config.php"] [unique_id "amsM9vxXcCowsLguGqAkfwAAAAg"]
[Thu Jul 30 09:36:06.881286 2026] [security2:error] [pid 2569984:tid 2569984] [client 20.203.200.218:6705] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "newtronic.newtronicmedia.com"] [uri "/wp-config.php"] [unique_id "amsM9vxXcCowsLguGqAkfwAAAAg"]
[Thu Jul 30 09:36:07.583166 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "clientseodata.com"] [uri "/73velX.bak"] [unique_id "amsM9zYn5iXb3msZj5WY4wAAABw"]
[Thu Jul 30 09:36:07.583382 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clientseodata.com"] [uri "/73velX.bak"] [unique_id "amsM9zYn5iXb3msZj5WY4wAAABw"]
[Thu Jul 30 09:36:07.583547 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "clientseodata.com"] [uri "/73velX.bak"] [unique_id "amsM9zYn5iXb3msZj5WY4wAAABw"]
[Thu Jul 30 09:36:08.850481 2026] [ssl:error] [pid 2578796:tid 2578796] (EAI 2)Name or service not known: [client 144.76.19.72:33116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:08.850518 2026] [ssl:error] [pid 2578796:tid 2578796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:08.904832 2026] [ssl:error] [pid 2589368:tid 2589368] (EAI 2)Name or service not known: [client 144.76.19.72:33118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:08.904864 2026] [ssl:error] [pid 2589368:tid 2589368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:09.355676 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "clientseodata.com"] [uri "/6FZuDC.bak"] [unique_id "amsM-TYn5iXb3msZj5WY5AAAABw"]
[Thu Jul 30 09:36:09.355928 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clientseodata.com"] [uri "/6FZuDC.bak"] [unique_id "amsM-TYn5iXb3msZj5WY5AAAABw"]
[Thu Jul 30 09:36:09.356120 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "clientseodata.com"] [uri "/6FZuDC.bak"] [unique_id "amsM-TYn5iXb3msZj5WY5AAAABw"]
[Thu Jul 30 09:36:11.931612 2026] [security2:error] [pid 2581947:tid 2581947] [client 175.178.110.121:46122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/"] [unique_id "amsM-x-iDM_u_w3C5BweYwAAAAo"]
[Thu Jul 30 09:36:11.958858 2026] [ssl:error] [pid 2585539:tid 2585539] (EAI 2)Name or service not known: [client 144.76.19.72:60298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:11.958894 2026] [ssl:error] [pid 2585539:tid 2585539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:12.013999 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:60314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:12.014029 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:12.156784 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "clientseodata.com"] [uri "/cjlMuwS.bak"] [unique_id "amsM_DYn5iXb3msZj5WY5wAAABw"]
[Thu Jul 30 09:36:12.157104 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clientseodata.com"] [uri "/cjlMuwS.bak"] [unique_id "amsM_DYn5iXb3msZj5WY5wAAABw"]
[Thu Jul 30 09:36:12.157289 2026] [security2:error] [pid 2574381:tid 2574381] [client 66.132.186.178:5326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "clientseodata.com"] [uri "/cjlMuwS.bak"] [unique_id "amsM_DYn5iXb3msZj5WY5wAAABw"]
[Thu Jul 30 09:36:12.646159 2026] [security2:error] [pid 2581947:tid 2581947] [client 94.154.43.179:40644] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ogsoil.com"] [uri "/.env"] [unique_id "amsM_B-iDM_u_w3C5BweZAAAAAo"]
[Thu Jul 30 09:36:12.646418 2026] [security2:error] [pid 2581947:tid 2581947] [client 94.154.43.179:40644] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ogsoil.com"] [uri "/.env"] [unique_id "amsM_B-iDM_u_w3C5BweZAAAAAo"]
[Thu Jul 30 09:36:12.646707 2026] [security2:error] [pid 2581947:tid 2581947] [client 94.154.43.179:40644] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ogsoil.com"] [uri "/.env"] [unique_id "amsM_B-iDM_u_w3C5BweZAAAAAo"]
[Thu Jul 30 09:36:12.906482 2026] [security2:error] [pid 2576499:tid 2576499] [client 175.178.110.121:46900] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsM_MQzgmnSEII5c7NOvwAAABE"], referer: http://clarepillinger.co.uk
[Thu Jul 30 09:36:13.443142 2026] [security2:error] [pid 2569910:tid 2569910] [client 20.203.200.218:55728] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "newtronic.newtronicmedia.com"] [uri "/var/log/error.log"] [unique_id "amsM_ao9rOMuRJE0u5b7VwAAAAI"]
[Thu Jul 30 09:36:13.443322 2026] [security2:error] [pid 2569910:tid 2569910] [client 20.203.200.218:55728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "newtronic.newtronicmedia.com"] [uri "/var/log/error.log"] [unique_id "amsM_ao9rOMuRJE0u5b7VwAAAAI"]
[Thu Jul 30 09:36:13.443498 2026] [security2:error] [pid 2569910:tid 2569910] [client 20.203.200.218:55728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "newtronic.newtronicmedia.com"] [uri "/var/log/error.log"] [unique_id "amsM_ao9rOMuRJE0u5b7VwAAAAI"]
[Thu Jul 30 09:36:13.555445 2026] [authz_core:error] [pid 2587955:tid 2587955] [client 57.141.0.26:31666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:13.556139 2026] [authz_core:error] [pid 2587955:tid 2587955] [client 57.141.0.26:31666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:15.070877 2026] [ssl:error] [pid 2576499:tid 2576499] (EAI 2)Name or service not known: [client 144.76.19.72:60318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:15.070919 2026] [ssl:error] [pid 2576499:tid 2576499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:15.124895 2026] [ssl:error] [pid 2581946:tid 2581946] (EAI 2)Name or service not known: [client 144.76.19.72:60330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:15.124924 2026] [ssl:error] [pid 2581946:tid 2581946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:15.259237 2026] [authz_core:error] [pid 2583333:tid 2583333] [client 57.141.0.29:59970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:15.259868 2026] [authz_core:error] [pid 2583333:tid 2583333] [client 57.141.0.29:59970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:16.561565 2026] [security2:error] [pid 2583333:tid 2583333] [client 185.191.171.19:11184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/wasilla-homes-for-sale"] [unique_id "amsNAJoVZ93PPqMXSLDKogAAABo"]
[Thu Jul 30 09:36:18.183538 2026] [ssl:error] [pid 2588445:tid 2588445] (EAI 2)Name or service not known: [client 144.76.19.72:60346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:18.183567 2026] [ssl:error] [pid 2588445:tid 2588445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:18.236673 2026] [ssl:error] [pid 2570991:tid 2570991] (EAI 2)Name or service not known: [client 144.76.19.72:60354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:18.236704 2026] [ssl:error] [pid 2570991:tid 2570991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:19.699689 2026] [authz_core:error] [pid 2569910:tid 2569910] [client 57.141.0.27:22824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:19.700314 2026] [authz_core:error] [pid 2569910:tid 2569910] [client 57.141.0.27:22824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:20.742085 2026] [core:error] [pid 2570991:tid 2570991] [client 66.249.64.170:41776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:36:20.742115 2026] [core:error] [pid 2570991:tid 2570991] [client 66.249.64.170:41776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:36:20.996689 2026] [authz_core:error] [pid 2588445:tid 2588445] [client 89.36.76.100:52246] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 09:36:21.004739 2026] [authz_core:error] [pid 2588445:tid 2588445] [client 89.36.76.100:52246] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 09:36:21.292591 2026] [ssl:error] [pid 2582590:tid 2582590] (EAI 2)Name or service not known: [client 144.76.19.72:40058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:21.292640 2026] [ssl:error] [pid 2582590:tid 2582590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:21.345312 2026] [ssl:error] [pid 2583811:tid 2583811] (EAI 2)Name or service not known: [client 144.76.19.72:40068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:21.345343 2026] [ssl:error] [pid 2583811:tid 2583811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:24.500684 2026] [ssl:error] [pid 2586776:tid 2586776] (EAI 2)Name or service not known: [client 144.76.19.72:40080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:24.500725 2026] [ssl:error] [pid 2586776:tid 2586776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:24.554955 2026] [ssl:error] [pid 2586776:tid 2586776] (EAI 2)Name or service not known: [client 144.76.19.72:40082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:24.554979 2026] [ssl:error] [pid 2586776:tid 2586776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:25.508415 2026] [core:error] [pid 2590766:tid 2590766] [client 66.249.64.171:40771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:36:25.508461 2026] [core:error] [pid 2590766:tid 2590766] [client 66.249.64.171:40771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:36:27.607387 2026] [ssl:error] [pid 2582590:tid 2582590] (EAI 2)Name or service not known: [client 144.76.19.72:40086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:27.607418 2026] [ssl:error] [pid 2582590:tid 2582590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:27.682147 2026] [ssl:error] [pid 2589437:tid 2589437] (EAI 2)Name or service not known: [client 144.76.19.72:40096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:27.682175 2026] [ssl:error] [pid 2589437:tid 2589437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:28.190011 2026] [ssl:error] [pid 2588066:tid 2588066] (70014)End of file found: [client 216.73.216.199:34233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:36:29.843515 2026] [security2:error] [pid 2587890:tid 2587890] [client 47.128.24.251:47096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amsNDdroqVqivI09dZdmIQAAABU"]
[Thu Jul 30 09:36:30.550396 2026] [authz_core:error] [pid 2581688:tid 2581688] [client 57.141.0.39:58670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:30.551000 2026] [authz_core:error] [pid 2581688:tid 2581688] [client 57.141.0.39:58670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:30.733755 2026] [ssl:error] [pid 2588355:tid 2588355] (EAI 2)Name or service not known: [client 144.76.19.72:34968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:30.733784 2026] [ssl:error] [pid 2588355:tid 2588355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:30.771759 2026] [security2:error] [pid 2587010:tid 2587010] [client 170.106.167.214:48518] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "familyjames.com"] [uri "/"] [unique_id "amsNDik6ITlVOCYD154jrQAAABg"]
[Thu Jul 30 09:36:30.789256 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:34978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:30.789281 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:33.490975 2026] [ssl:error] [pid 2590729:tid 2590729] (70014)End of file found: [client 216.73.216.199:46363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:36:33.842780 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:34994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:33.842810 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:33.897792 2026] [ssl:error] [pid 2583333:tid 2583333] (EAI 2)Name or service not known: [client 144.76.19.72:34998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:33.897830 2026] [ssl:error] [pid 2583333:tid 2583333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:34.335296 2026] [authz_core:error] [pid 2574428:tid 2574428] [client 57.141.0.8:62554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:34.335915 2026] [authz_core:error] [pid 2574428:tid 2574428] [client 57.141.0.8:62554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:35.146344 2026] [cgi:error] [pid 2582590:tid 2582590] [client 20.203.200.218:56447] AH02811: stderr from /home/gkfcxzov/public_html/newtronic.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 09:36:35.310674 2026] [authz_core:error] [pid 2582590:tid 2582590] [client 20.203.200.218:56447] AH01630: client denied by server configuration: /home/gkfcxzov/public_html/newtronic.com/php.ini
[Thu Jul 30 09:36:36.955153 2026] [ssl:error] [pid 2590232:tid 2590232] (EAI 2)Name or service not known: [client 144.76.19.72:35004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:36.955183 2026] [ssl:error] [pid 2590232:tid 2590232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:37.015028 2026] [ssl:error] [pid 2587890:tid 2587890] (EAI 2)Name or service not known: [client 144.76.19.72:35020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:37.015058 2026] [ssl:error] [pid 2587890:tid 2587890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:38.058185 2026] [authz_core:error] [pid 2585580:tid 2585580] [client 66.249.66.34:55728] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:36:38.060898 2026] [authz_core:error] [pid 2585580:tid 2585580] [client 66.249.66.34:55728] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:36:40.088611 2026] [ssl:error] [pid 2587037:tid 2587037] (EAI 2)Name or service not known: [client 144.76.19.72:53442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:40.088658 2026] [ssl:error] [pid 2587037:tid 2587037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:40.140124 2026] [ssl:error] [pid 2588355:tid 2588355] (EAI 2)Name or service not known: [client 144.76.19.72:53444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:40.140150 2026] [ssl:error] [pid 2588355:tid 2588355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:41.568212 2026] [ssl:error] [pid 2578103:tid 2578103] (70014)End of file found: [client 216.73.216.199:17387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:36:43.197283 2026] [ssl:error] [pid 2587037:tid 2587037] (EAI 2)Name or service not known: [client 144.76.19.72:53472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:43.197315 2026] [ssl:error] [pid 2587037:tid 2587037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:43.255088 2026] [ssl:error] [pid 2583333:tid 2583333] (EAI 2)Name or service not known: [client 144.76.19.72:53474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:43.255131 2026] [ssl:error] [pid 2583333:tid 2583333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:43.985373 2026] [core:error] [pid 2587037:tid 2587037] [client 66.249.64.170:38204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:36:43.985399 2026] [core:error] [pid 2587037:tid 2587037] [client 66.249.64.170:38204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:36:46.312377 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:53492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:46.312404 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:46.368459 2026] [ssl:error] [pid 2585580:tid 2585580] (EAI 2)Name or service not known: [client 144.76.19.72:53506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:46.368482 2026] [ssl:error] [pid 2585580:tid 2585580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:49.936845 2026] [ssl:error] [pid 2591515:tid 2591515] (EAI 2)Name or service not known: [client 144.76.19.72:53532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:49.936890 2026] [ssl:error] [pid 2591515:tid 2591515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:50.111291 2026] [ssl:error] [pid 2591515:tid 2591515] (EAI 2)Name or service not known: [client 144.76.19.72:25420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:50.111318 2026] [ssl:error] [pid 2591515:tid 2591515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:52.283414 2026] [authz_core:error] [pid 2591557:tid 2591557] [client 57.141.0.63:41522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:52.284062 2026] [authz_core:error] [pid 2591557:tid 2591557] [client 57.141.0.63:41522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:53.168612 2026] [ssl:error] [pid 2581947:tid 2581947] (EAI 2)Name or service not known: [client 144.76.19.72:25436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:53.168646 2026] [ssl:error] [pid 2581947:tid 2581947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:53.223534 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:25448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:53.223562 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:56.279142 2026] [ssl:error] [pid 2588445:tid 2588445] (EAI 2)Name or service not known: [client 144.76.19.72:25454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:56.279167 2026] [ssl:error] [pid 2588445:tid 2588445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:56.336726 2026] [ssl:error] [pid 2591462:tid 2591462] (EAI 2)Name or service not known: [client 144.76.19.72:25462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:56.336756 2026] [ssl:error] [pid 2591462:tid 2591462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:56.822827 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 57.141.0.58:21404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:36:56.823460 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 57.141.0.58:21404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:36:59.391012 2026] [ssl:error] [pid 2591555:tid 2591555] (EAI 2)Name or service not known: [client 144.76.19.72:25466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:59.391051 2026] [ssl:error] [pid 2591555:tid 2591555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:36:59.444397 2026] [ssl:error] [pid 2591515:tid 2591515] (EAI 2)Name or service not known: [client 144.76.19.72:25472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:36:59.444429 2026] [ssl:error] [pid 2591515:tid 2591515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:00.923351 2026] [authz_core:error] [pid 2553974:tid 2553974] [client 57.141.0.5:35682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:37:00.923971 2026] [authz_core:error] [pid 2553974:tid 2553974] [client 57.141.0.5:35682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:37:02.497640 2026] [ssl:error] [pid 2589438:tid 2589438] (EAI 2)Name or service not known: [client 144.76.19.72:27434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:02.497668 2026] [ssl:error] [pid 2589438:tid 2589438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:02.553681 2026] [ssl:error] [pid 2591515:tid 2591515] (EAI 2)Name or service not known: [client 144.76.19.72:27450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:02.553702 2026] [ssl:error] [pid 2591515:tid 2591515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:03.538404 2026] [security2:error] [pid 2569984:tid 2569984] [client 85.208.98.19:51192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/adidas-la-trainer-43-k.html"] [unique_id "amsNL_xXcCowsLguGqAklQAAAAg"]
[Thu Jul 30 09:37:03.827819 2026] [authz_core:error] [pid 2587955:tid 2587955] [client 57.141.0.52:54450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:37:03.828447 2026] [authz_core:error] [pid 2587955:tid 2587955] [client 57.141.0.52:54450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:37:05.659559 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:27458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:05.659604 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:05.715626 2026] [ssl:error] [pid 2587010:tid 2587010] (EAI 2)Name or service not known: [client 144.76.19.72:27474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:05.715657 2026] [ssl:error] [pid 2587010:tid 2587010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:06.216234 2026] [authz_core:error] [pid 2585580:tid 2585580] [client 37.111.245.10:0] AH01630: client denied by server configuration: /home/kikikend/liveinhopedieincaergwrle.co.uk/php.ini
[Thu Jul 30 09:37:08.771860 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:27484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:08.771887 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:08.826263 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:27496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:08.826287 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:11.602475 2026] [ssl:error] [pid 2583333:tid 2583333] (70014)End of file found: [client 216.73.216.199:25102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:37:11.897558 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:54532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:11.897599 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:11.953431 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:54538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:11.953458 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:15.011023 2026] [ssl:error] [pid 2585580:tid 2585580] (EAI 2)Name or service not known: [client 144.76.19.72:54544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:15.011050 2026] [ssl:error] [pid 2585580:tid 2585580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:15.066114 2026] [ssl:error] [pid 2591516:tid 2591516] (EAI 2)Name or service not known: [client 144.76.19.72:54546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:15.066143 2026] [ssl:error] [pid 2591516:tid 2591516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:17.999187 2026] [security2:error] [pid 2570991:tid 2570991] [client 185.191.171.13:25046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/yelena-morera-ortiz-yomaira-ortiz-feliciano"] [unique_id "amsNPYPZlc0e_o1SiqYcwAAAAC0"]
[Thu Jul 30 09:37:18.123598 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:54556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:18.123632 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:18.175550 2026] [ssl:error] [pid 2591557:tid 2591557] (EAI 2)Name or service not known: [client 144.76.19.72:54558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:18.175593 2026] [ssl:error] [pid 2591557:tid 2591557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:18.297383 2026] [security2:error] [pid 2585580:tid 2585580] [client 66.93.5.28:49214] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "multipart/alternative"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "familyjames.com"] [uri "/"] [unique_id "amsNPtto2RX2NaaxJoz0UwAAAB8"]
[Thu Jul 30 09:37:18.298470 2026] [security2:error] [pid 2585580:tid 2585580] [client 66.93.5.28:49214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "familyjames.com"] [uri "/"] [unique_id "amsNPtto2RX2NaaxJoz0UwAAAB8"]
[Thu Jul 30 09:37:18.299047 2026] [security2:error] [pid 2585580:tid 2585580] [client 66.93.5.28:49214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "familyjames.com"] [uri "/403.shtml"] [unique_id "amsNPtto2RX2NaaxJoz0UwAAAB8"]
[Thu Jul 30 09:37:21.228571 2026] [ssl:error] [pid 2592114:tid 2592114] (EAI 2)Name or service not known: [client 144.76.19.72:50990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:21.228612 2026] [ssl:error] [pid 2592114:tid 2592114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:21.283935 2026] [ssl:error] [pid 2592277:tid 2592277] (EAI 2)Name or service not known: [client 144.76.19.72:50998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:21.283961 2026] [ssl:error] [pid 2592277:tid 2592277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:24.289109 2026] [authz_core:error] [pid 2591515:tid 2591515] [client 160.249.40.226:52937] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:37:24.292151 2026] [authz_core:error] [pid 2591515:tid 2591515] [client 160.249.40.226:52937] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:37:24.336564 2026] [ssl:error] [pid 2591553:tid 2591553] (EAI 2)Name or service not known: [client 144.76.19.72:51008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:24.336608 2026] [ssl:error] [pid 2591553:tid 2591553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:24.443711 2026] [cgi:error] [pid 2592114:tid 2592114] [client 20.9.63.139:6842] AH02812: stderr from /home/gkfcxzov/public_html/martingriese.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:37:24.460627 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:51016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:24.460657 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:24.802158 2026] [authz_core:error] [pid 2592881:tid 2592881] [client 57.141.0.34:21526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:37:24.802811 2026] [authz_core:error] [pid 2592881:tid 2592881] [client 57.141.0.34:21526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:37:24.866329 2026] [security2:error] [pid 2578103:tid 2578103] [client 85.208.96.198:18906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.epmsonline.co.uk"] [uri "/robots.txt"] [unique_id "amsNRJL01hsssfFG5EZP1QAAAA4"]
[Thu Jul 30 09:37:25.099599 2026] [security2:error] [pid 2591553:tid 2591553] [client 185.191.171.4:53224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.epmsonline.co.uk"] [uri "/index.php/our-concerts/35-tickets"] [unique_id "amsNRYvgcJ2RTzJvGajtEAAAABM"]
[Thu Jul 30 09:37:28.087904 2026] [authz_core:error] [pid 2592114:tid 2592114] [client 20.9.63.139:6842] AH01630: client denied by server configuration: /home/gkfcxzov/public_html/martingriese.com/php.ini
[Thu Jul 30 09:37:28.348051 2026] [security2:error] [pid 2591515:tid 2591515] [client 114.119.158.38:24235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14/request_format~html"] [unique_id "amsNSHt_lDNLApLA5A8i5gAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~103,14/request_format~html
[Thu Jul 30 09:37:28.360852 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:51028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:28.360877 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:28.417184 2026] [ssl:error] [pid 2574381:tid 2574381] (EAI 2)Name or service not known: [client 144.76.19.72:51034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:28.417213 2026] [ssl:error] [pid 2574381:tid 2574381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:29.775933 2026] [cgi:error] [pid 2588355:tid 2588355] [client 20.220.15.170:24023] AH02811: stderr from /home/freakorg/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:37:29.825290 2026] [security2:error] [pid 2592410:tid 2592410] [client 114.119.158.38:24239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14/request_format~html"] [unique_id "amsNSbtVI2KauAROYhT0swAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~103,14/request_format~html
[Thu Jul 30 09:37:30.520894 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/inputs.php
[Thu Jul 30 09:37:30.520960 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:30.585859 2026] [core:error] [pid 2591557:tid 2591557] [client 57.141.0.19:27780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:30.585891 2026] [core:error] [pid 2591557:tid 2591557] [client 57.141.0.19:27780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:30.660316 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/classsmtps.php
[Thu Jul 30 09:37:30.660363 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:30.853677 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-blog-header.php
[Thu Jul 30 09:37:30.853751 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:30.964610 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-trackback.php
[Thu Jul 30 09:37:30.964657 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.075272 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-signup.php
[Thu Jul 30 09:37:31.075337 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.186442 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-comments-post.php
[Thu Jul 30 09:37:31.186488 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.297298 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-cron.php
[Thu Jul 30 09:37:31.297343 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.446173 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-load.php
[Thu Jul 30 09:37:31.446219 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.473931 2026] [ssl:error] [pid 2591515:tid 2591515] (EAI 2)Name or service not known: [client 144.76.19.72:35672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:31.473956 2026] [ssl:error] [pid 2591515:tid 2591515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:31.529707 2026] [ssl:error] [pid 2583811:tid 2583811] (EAI 2)Name or service not known: [client 144.76.19.72:35682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:31.529742 2026] [ssl:error] [pid 2583811:tid 2583811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:31.561563 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-mail.php
[Thu Jul 30 09:37:31.561648 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.701692 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/edit.php
[Thu Jul 30 09:37:31.701741 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.812723 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-activate.php
[Thu Jul 30 09:37:31.812768 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:31.923337 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/plugins.php
[Thu Jul 30 09:37:31.923383 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.038477 2026] [authz_core:error] [pid 2570991:tid 2570991] [client 57.141.0.43:56308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:37:32.039113 2026] [authz_core:error] [pid 2570991:tid 2570991] [client 57.141.0.43:56308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:37:32.087232 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/post.php
[Thu Jul 30 09:37:32.087288 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.198023 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin.php
[Thu Jul 30 09:37:32.198085 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.336478 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about.php
[Thu Jul 30 09:37:32.336529 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.513968 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-2019.php
[Thu Jul 30 09:37:32.514017 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.624772 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/atomlib.php
[Thu Jul 30 09:37:32.624815 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.735804 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/css.php
[Thu Jul 30 09:37:32.735848 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.846561 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/simple.php
[Thu Jul 30 09:37:32.846616 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:32.957609 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/log.php
[Thu Jul 30 09:37:32.957654 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.068441 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/index.php
[Thu Jul 30 09:37:33.068492 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.179499 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mail.php
[Thu Jul 30 09:37:33.179546 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.342657 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lufix.php
[Thu Jul 30 09:37:33.342702 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.453891 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/doc.php
[Thu Jul 30 09:37:33.453936 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.566569 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bak.php
[Thu Jul 30 09:37:33.566641 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.677255 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/content.php
[Thu Jul 30 09:37:33.677301 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.788137 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/upfile.php
[Thu Jul 30 09:37:33.788187 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:33.902974 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp.php
[Thu Jul 30 09:37:33.903020 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.046937 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-conflg.php
[Thu Jul 30 09:37:34.046992 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.207638 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bypass.php
[Thu Jul 30 09:37:34.207687 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.324117 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.php
[Thu Jul 30 09:37:34.324172 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.437954 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/updates.php
[Thu Jul 30 09:37:34.438026 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.605710 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:35696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:34.605740 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:34.625945 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/radio.php
[Thu Jul 30 09:37:34.626007 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.696321 2026] [ssl:error] [pid 2587955:tid 2587955] (EAI 2)Name or service not known: [client 144.76.19.72:35706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:34.696351 2026] [ssl:error] [pid 2587955:tid 2587955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:34.761136 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xmrlpc.php
[Thu Jul 30 09:37:34.761184 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.812785 2026] [core:error] [pid 2553974:tid 2553974] [client 66.249.64.172:42159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:34.812813 2026] [core:error] [pid 2553974:tid 2553974] [client 66.249.64.172:42159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:34.896874 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ae.php
[Thu Jul 30 09:37:34.896920 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:34.964560 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.15:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:37:34.965625 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.15:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:37:35.034506 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/moon.php
[Thu Jul 30 09:37:35.034600 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.145442 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/blog.php
[Thu Jul 30 09:37:35.145489 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.259727 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/themes.php
[Thu Jul 30 09:37:35.259774 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.419954 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ini.php
[Thu Jul 30 09:37:35.420004 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.533282 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/as.php
[Thu Jul 30 09:37:35.533347 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.631931 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 66.249.66.33:57957] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:37:35.634663 2026] [authz_core:error] [pid 2528544:tid 2528544] [client 66.249.66.33:57957] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:37:35.644179 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/shell.php
[Thu Jul 30 09:37:35.644260 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.755219 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws.php
[Thu Jul 30 09:37:35.755267 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.866624 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dropdown.php
[Thu Jul 30 09:37:35.866673 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:35.977394 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/makeasmtp.php
[Thu Jul 30 09:37:35.977441 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:36.088340 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-sigunq.php
[Thu Jul 30 09:37:36.088387 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:36.200989 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wso112233.php
[Thu Jul 30 09:37:36.201038 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:36.312416 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/alfanew.php
[Thu Jul 30 09:37:36.312467 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:36.486170 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fw.php
[Thu Jul 30 09:37:36.486216 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:36.698036 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/install.php
[Thu Jul 30 09:37:36.698156 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:36.809474 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-login.php
[Thu Jul 30 09:37:36.809515 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:36.972674 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 09:37:37.105571 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/chosen.php
[Thu Jul 30 09:37:37.105632 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:37.260720 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/simple.php
[Thu Jul 30 09:37:37.260782 2026] [access_compat:error] [pid 2592771:tid 2592771] [client 172.202.98.196:5125] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:37:37.753351 2026] [ssl:error] [pid 2578103:tid 2578103] (EAI 2)Name or service not known: [client 144.76.19.72:35712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:37.753380 2026] [ssl:error] [pid 2578103:tid 2578103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:37.809407 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:35720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:37.809433 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:38.670841 2026] [lsapi:warn] [pid 2578103:tid 2578103] [client 45.32.171.24:40926] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 09:37:38.670884 2026] [lsapi:warn] [pid 2578103:tid 2578103] [client 45.32.171.24:40926] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 09:37:39.982021 2026] [core:error] [pid 2578103:tid 2578103] [client 66.249.66.71:51587] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:39.982056 2026] [core:error] [pid 2578103:tid 2578103] [client 66.249.66.71:51587] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:40.886524 2026] [ssl:error] [pid 2575413:tid 2575413] (EAI 2)Name or service not known: [client 144.76.19.72:47392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:40.886549 2026] [ssl:error] [pid 2575413:tid 2575413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:40.937857 2026] [ssl:error] [pid 2591557:tid 2591557] (EAI 2)Name or service not known: [client 144.76.19.72:47394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:40.937881 2026] [ssl:error] [pid 2591557:tid 2591557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:42.221894 2026] [authz_core:error] [pid 2553974:tid 2553974] [client 57.141.0.3:21076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:37:42.222528 2026] [authz_core:error] [pid 2553974:tid 2553974] [client 57.141.0.3:21076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:37:44.006809 2026] [ssl:error] [pid 2581688:tid 2581688] (EAI 2)Name or service not known: [client 144.76.19.72:47408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:44.006838 2026] [ssl:error] [pid 2581688:tid 2581688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:44.063047 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:47416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:44.063084 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:46.861218 2026] [security2:error] [pid 2593983:tid 2593983] [client 85.208.96.207:20554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4619.0.html"] [unique_id "amsNWhlXIJphFhSvHgDddwAAADM"]
[Thu Jul 30 09:37:47.120932 2026] [ssl:error] [pid 2593984:tid 2593984] (EAI 2)Name or service not known: [client 144.76.19.72:47430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:47.120977 2026] [ssl:error] [pid 2593984:tid 2593984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:47.177436 2026] [ssl:error] [pid 2581688:tid 2581688] (EAI 2)Name or service not known: [client 144.76.19.72:47436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:47.177458 2026] [ssl:error] [pid 2581688:tid 2581688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:49.961214 2026] [authz_core:error] [pid 2593569:tid 2593569] [client 57.141.0.70:53014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:37:49.961833 2026] [authz_core:error] [pid 2593569:tid 2593569] [client 57.141.0.70:53014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:37:50.247640 2026] [core:error] [pid 2575413:tid 2575413] [client 66.249.66.167:38347] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:50.247663 2026] [core:error] [pid 2575413:tid 2575413] [client 66.249.66.167:38347] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:50.248608 2026] [core:error] [pid 2587829:tid 2587829] [client 66.249.66.169:41136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:50.248635 2026] [core:error] [pid 2587829:tid 2587829] [client 66.249.66.169:41136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:50.310034 2026] [ssl:error] [pid 2591515:tid 2591515] (EAI 2)Name or service not known: [client 144.76.19.72:62652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:50.310057 2026] [ssl:error] [pid 2591515:tid 2591515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:50.362837 2026] [ssl:error] [pid 2593786:tid 2593786] (EAI 2)Name or service not known: [client 144.76.19.72:62662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:50.362876 2026] [ssl:error] [pid 2593786:tid 2593786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:53.420513 2026] [ssl:error] [pid 2591515:tid 2591515] (EAI 2)Name or service not known: [client 144.76.19.72:62666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:53.420543 2026] [ssl:error] [pid 2591515:tid 2591515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:53.474870 2026] [ssl:error] [pid 2587829:tid 2587829] (EAI 2)Name or service not known: [client 144.76.19.72:62668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:53.474906 2026] [ssl:error] [pid 2587829:tid 2587829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:56.468089 2026] [core:error] [pid 2573649:tid 2573649] [client 66.249.66.66:48424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:56.468116 2026] [core:error] [pid 2573649:tid 2573649] [client 66.249.66.66:48424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:56.531605 2026] [ssl:error] [pid 2590766:tid 2590766] (EAI 2)Name or service not known: [client 144.76.19.72:62676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:56.531641 2026] [ssl:error] [pid 2590766:tid 2590766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:56.551868 2026] [core:error] [pid 2591557:tid 2591557] [client 66.249.66.194:43149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:56.551893 2026] [core:error] [pid 2591557:tid 2591557] [client 66.249.66.194:43149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:37:56.605886 2026] [ssl:error] [pid 2590232:tid 2590232] (EAI 2)Name or service not known: [client 144.76.19.72:62686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:56.605913 2026] [ssl:error] [pid 2590232:tid 2590232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:59.664734 2026] [ssl:error] [pid 2593569:tid 2593569] (EAI 2)Name or service not known: [client 144.76.19.72:63656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:59.664772 2026] [ssl:error] [pid 2593569:tid 2593569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:37:59.719582 2026] [ssl:error] [pid 2591557:tid 2591557] (EAI 2)Name or service not known: [client 144.76.19.72:63660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:37:59.719622 2026] [ssl:error] [pid 2591557:tid 2591557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:01.858965 2026] [authz_core:error] [pid 2589437:tid 2589437] [client 57.141.0.67:61150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:01.859628 2026] [authz_core:error] [pid 2589437:tid 2589437] [client 57.141.0.67:61150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:02.773570 2026] [ssl:error] [pid 2573649:tid 2573649] (EAI 2)Name or service not known: [client 144.76.19.72:63676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:02.773612 2026] [ssl:error] [pid 2573649:tid 2573649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:02.825102 2026] [ssl:error] [pid 2591558:tid 2591558] (EAI 2)Name or service not known: [client 144.76.19.72:63688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:02.825139 2026] [ssl:error] [pid 2591558:tid 2591558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:04.556281 2026] [security2:error] [pid 2592882:tid 2592882] [client 185.191.171.12:12370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6234.0/prev_next,prev.html"] [unique_id "amsNbGWziZQHvhMKZLZjPQAAAC8"]
[Thu Jul 30 09:38:05.715321 2026] [security2:error] [pid 2591555:tid 2591555] [client 212.34.19.158:50442] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNbXTFf_RwaDkQMLFlIgAAAB4"]
[Thu Jul 30 09:38:05.715367 2026] [security2:error] [pid 2591555:tid 2591555] [client 212.34.19.158:50442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNbXTFf_RwaDkQMLFlIgAAAB4"]
[Thu Jul 30 09:38:05.715616 2026] [security2:error] [pid 2591555:tid 2591555] [client 212.34.19.158:50442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsNbXTFf_RwaDkQMLFlIgAAAB4"]
[Thu Jul 30 09:38:05.841157 2026] [authz_core:error] [pid 2588355:tid 2588355] [client 57.141.0.16:23846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:05.841779 2026] [authz_core:error] [pid 2588355:tid 2588355] [client 57.141.0.16:23846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:05.895965 2026] [ssl:error] [pid 2592842:tid 2592842] (EAI 2)Name or service not known: [client 144.76.19.72:63694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:05.895997 2026] [ssl:error] [pid 2592842:tid 2592842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:05.972013 2026] [ssl:error] [pid 2592882:tid 2592882] (EAI 2)Name or service not known: [client 144.76.19.72:63710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:05.972045 2026] [ssl:error] [pid 2592882:tid 2592882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:06.609930 2026] [authz_core:error] [pid 2594689:tid 2594689] [client 57.141.0.42:36188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:06.610596 2026] [authz_core:error] [pid 2594689:tid 2594689] [client 57.141.0.42:36188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:07.088387 2026] [security2:error] [pid 2587037:tid 2587037] [client 85.208.96.204:48982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3067.0/prev_next,prev.html"] [unique_id "amsNb_cnd-CpnzcOL1wjKwAAABk"]
[Thu Jul 30 09:38:08.543514 2026] [security2:error] [pid 2592771:tid 2592771] [client 102.252.1.12:4177] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNcIw-m6Jf09L4wxrhPAAAAAA"]
[Thu Jul 30 09:38:08.543558 2026] [security2:error] [pid 2592771:tid 2592771] [client 102.252.1.12:4177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNcIw-m6Jf09L4wxrhPAAAAAA"]
[Thu Jul 30 09:38:08.543799 2026] [security2:error] [pid 2592771:tid 2592771] [client 102.252.1.12:4177] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsNcIw-m6Jf09L4wxrhPAAAAAA"]
[Thu Jul 30 09:38:09.029134 2026] [ssl:error] [pid 2528544:tid 2528544] (EAI 2)Name or service not known: [client 144.76.19.72:63716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:09.029161 2026] [ssl:error] [pid 2528544:tid 2528544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:09.084937 2026] [ssl:error] [pid 2592882:tid 2592882] (EAI 2)Name or service not known: [client 144.76.19.72:63722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:09.084966 2026] [ssl:error] [pid 2592882:tid 2592882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:09.376337 2026] [authz_core:error] [pid 2592771:tid 2592771] [client 57.141.0.60:47430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:09.376953 2026] [authz_core:error] [pid 2592771:tid 2592771] [client 57.141.0.60:47430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:12.162376 2026] [ssl:error] [pid 2581947:tid 2581947] (EAI 2)Name or service not known: [client 144.76.19.72:45434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:12.162413 2026] [ssl:error] [pid 2581947:tid 2581947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:12.216231 2026] [ssl:error] [pid 2592113:tid 2592113] (EAI 2)Name or service not known: [client 144.76.19.72:45444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:12.216263 2026] [ssl:error] [pid 2592113:tid 2592113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:12.795448 2026] [core:error] [pid 2592882:tid 2592882] [client 66.249.66.168:41427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:38:12.795475 2026] [core:error] [pid 2592882:tid 2592882] [client 66.249.66.168:41427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:38:14.623980 2026] [core:error] [pid 2592277:tid 2592277] [client 66.249.64.172:57212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:38:14.624010 2026] [core:error] [pid 2592277:tid 2592277] [client 66.249.64.172:57212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:38:15.268401 2026] [ssl:error] [pid 2594689:tid 2594689] (EAI 2)Name or service not known: [client 144.76.19.72:45446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:15.268440 2026] [ssl:error] [pid 2594689:tid 2594689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:15.322120 2026] [ssl:error] [pid 2587037:tid 2587037] (EAI 2)Name or service not known: [client 144.76.19.72:45454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:15.322177 2026] [ssl:error] [pid 2587037:tid 2587037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:17.287795 2026] [authz_core:error] [pid 2587287:tid 2587287] [client 57.141.0.69:53274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:17.288432 2026] [authz_core:error] [pid 2587287:tid 2587287] [client 57.141.0.69:53274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:18.375680 2026] [ssl:error] [pid 2593569:tid 2593569] (EAI 2)Name or service not known: [client 144.76.19.72:45468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:18.375710 2026] [ssl:error] [pid 2593569:tid 2593569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:18.428959 2026] [ssl:error] [pid 2587010:tid 2587010] (EAI 2)Name or service not known: [client 144.76.19.72:45472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:18.428992 2026] [ssl:error] [pid 2587010:tid 2587010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:18.514721 2026] [security2:error] [pid 2589437:tid 2589437] [client 185.191.171.8:65312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/mobile-massage-phoenix,-az"] [unique_id "amsNejUh5yp3v8fg0V85XgAAAAw"]
[Thu Jul 30 09:38:19.783642 2026] [security2:error] [pid 2591553:tid 2591553] [client 197.184.83.223:20886] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNe4vgcJ2RTzJvGajtZwAAABM"]
[Thu Jul 30 09:38:19.783706 2026] [security2:error] [pid 2591553:tid 2591553] [client 197.184.83.223:20886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNe4vgcJ2RTzJvGajtZwAAABM"]
[Thu Jul 30 09:38:19.783970 2026] [security2:error] [pid 2591553:tid 2591553] [client 197.184.83.223:20886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsNe4vgcJ2RTzJvGajtZwAAABM"]
[Thu Jul 30 09:38:20.311917 2026] [security2:error] [pid 2593569:tid 2593569] [client 3.223.134.5:38090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2020/01/Systems-Management-Blog-Header-Image-Prosperon-Networks.png"] [unique_id "amsNfO-ObBDwH9exmbkFVgAAAAI"]
[Thu Jul 30 09:38:21.485403 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:64448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:21.485432 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:21.539521 2026] [ssl:error] [pid 2592277:tid 2592277] (EAI 2)Name or service not known: [client 144.76.19.72:64450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:21.539548 2026] [ssl:error] [pid 2592277:tid 2592277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:21.906551 2026] [security2:error] [pid 2592187:tid 2592187] [client 85.208.98.29:59080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nike-bike-shirts-k.html"] [unique_id "amsNfWDpA3nAy2AXCI2U0gAAACI"]
[Thu Jul 30 09:38:22.255176 2026] [security2:error] [pid 2592187:tid 2592187] [client 43.135.115.233:37562] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.broadcast-support.com"] [uri "/"] [unique_id "amsNfmDpA3nAy2AXCI2U0wAAACI"]
[Thu Jul 30 09:38:22.374947 2026] [security2:error] [pid 2592410:tid 2592410] [client 170.106.180.246:35744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "halmanninvestments.com"] [uri "/"] [unique_id "amsNfrtVI2KauAROYhT0wQAAACk"]
[Thu Jul 30 09:38:24.373530 2026] [security2:error] [pid 2582760:tid 2582760] [client 23.21.227.240:27800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2019/12/Application-Performance-Capacity-Forecase-Blog-Banner-Prosperon-Networks.png"] [unique_id "amsNgAO7Whfrm42LhtBe6gAAABY"]
[Thu Jul 30 09:38:24.600577 2026] [ssl:error] [pid 2593787:tid 2593787] (EAI 2)Name or service not known: [client 144.76.19.72:64460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:24.600616 2026] [ssl:error] [pid 2593787:tid 2593787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:24.656936 2026] [ssl:error] [pid 2594689:tid 2594689] (EAI 2)Name or service not known: [client 144.76.19.72:64474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:24.656960 2026] [ssl:error] [pid 2594689:tid 2594689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:27.713667 2026] [ssl:error] [pid 2578103:tid 2578103] (EAI 2)Name or service not known: [client 144.76.19.72:64486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:27.713697 2026] [ssl:error] [pid 2578103:tid 2578103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:27.766629 2026] [ssl:error] [pid 2587829:tid 2587829] (EAI 2)Name or service not known: [client 144.76.19.72:64490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:27.766655 2026] [ssl:error] [pid 2587829:tid 2587829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:30.819817 2026] [ssl:error] [pid 2592113:tid 2592113] (EAI 2)Name or service not known: [client 144.76.19.72:29410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:30.819847 2026] [ssl:error] [pid 2592113:tid 2592113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:30.876599 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:29422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:30.876631 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:33.930620 2026] [ssl:error] [pid 2592881:tid 2592881] (EAI 2)Name or service not known: [client 144.76.19.72:29434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:33.930657 2026] [ssl:error] [pid 2592881:tid 2592881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:33.988317 2026] [ssl:error] [pid 2582760:tid 2582760] (EAI 2)Name or service not known: [client 144.76.19.72:29446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:33.988345 2026] [ssl:error] [pid 2582760:tid 2582760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:34.226330 2026] [authz_core:error] [pid 2537717:tid 2537717] [client 57.141.0.20:25014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:34.226951 2026] [authz_core:error] [pid 2537717:tid 2537717] [client 57.141.0.20:25014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:35.611116 2026] [authz_core:error] [pid 2592881:tid 2592881] [client 57.141.0.64:35582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:35.611739 2026] [authz_core:error] [pid 2592881:tid 2592881] [client 57.141.0.64:35582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:36.868427 2026] [ssl:error] [pid 2592086:tid 2592086] (70014)End of file found: [client 216.73.216.199:30837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:38:37.045010 2026] [ssl:error] [pid 2592881:tid 2592881] (EAI 2)Name or service not known: [client 144.76.19.72:29460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:37.045034 2026] [ssl:error] [pid 2592881:tid 2592881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:37.099816 2026] [ssl:error] [pid 2592277:tid 2592277] (EAI 2)Name or service not known: [client 144.76.19.72:29472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:37.099840 2026] [ssl:error] [pid 2592277:tid 2592277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:38.964104 2026] [security2:error] [pid 2592277:tid 2592277] [client 111.225.148.158:27138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.plastic-sheeting.org"] [uri "/robots.txt"] [unique_id "amsNjrsymaQsteK2EfN_qQAAACM"]
[Thu Jul 30 09:38:39.461885 2026] [access_compat:error] [pid 2595232:tid 2595232] [client 162.62.213.165:45616] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:38:40.155902 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:31262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:40.155931 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:40.209510 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:31270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:40.209537 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:41.257107 2026] [security2:error] [pid 2595511:tid 2595511] [client 94.143.141.223:56850] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "sarahwiseman.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsNkZngO3SXWCK1zR_AwgAAAA0"]
[Thu Jul 30 09:38:41.856706 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 82.102.18.190:47768] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:38:43.294888 2026] [ssl:error] [pid 2592410:tid 2592410] (EAI 2)Name or service not known: [client 144.76.19.72:31272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:43.294926 2026] [ssl:error] [pid 2592410:tid 2592410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:43.352886 2026] [ssl:error] [pid 2591558:tid 2591558] (EAI 2)Name or service not known: [client 144.76.19.72:31282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:43.352914 2026] [ssl:error] [pid 2591558:tid 2591558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:45.064089 2026] [authz_core:error] [pid 2588355:tid 2588355] [client 57.141.0.17:60012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:45.064731 2026] [authz_core:error] [pid 2588355:tid 2588355] [client 57.141.0.17:60012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:45.682053 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.31:60346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:45.682700 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.31:60346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:46.410972 2026] [ssl:error] [pid 2591553:tid 2591553] (EAI 2)Name or service not known: [client 144.76.19.72:31296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:46.411006 2026] [ssl:error] [pid 2591553:tid 2591553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:46.506939 2026] [ssl:error] [pid 2578103:tid 2578103] (EAI 2)Name or service not known: [client 144.76.19.72:31306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:46.506986 2026] [ssl:error] [pid 2578103:tid 2578103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:47.521200 2026] [authz_core:error] [pid 2592842:tid 2592842] [client 57.141.0.16:36236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:47.521836 2026] [authz_core:error] [pid 2592842:tid 2592842] [client 57.141.0.16:36236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:49.353925 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsNmdto2RX2NaaxJoz0bgAAAB8"]
[Thu Jul 30 09:38:49.354126 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsNmdto2RX2NaaxJoz0bgAAAB8"]
[Thu Jul 30 09:38:49.354352 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsNmdto2RX2NaaxJoz0bgAAAB8"]
[Thu Jul 30 09:38:49.387798 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsNmdto2RX2NaaxJoz0bwAAAB8"]
[Thu Jul 30 09:38:49.388001 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsNmdto2RX2NaaxJoz0bwAAAB8"]
[Thu Jul 30 09:38:49.388239 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amsNmdto2RX2NaaxJoz0bwAAAB8"]
[Thu Jul 30 09:38:49.524806 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/api/.env"] [unique_id "amsNmdto2RX2NaaxJoz0cwAAAB8"]
[Thu Jul 30 09:38:49.524990 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/api/.env"] [unique_id "amsNmdto2RX2NaaxJoz0cwAAAB8"]
[Thu Jul 30 09:38:49.525233 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/api/.env"] [unique_id "amsNmdto2RX2NaaxJoz0cwAAAB8"]
[Thu Jul 30 09:38:49.564113 2026] [ssl:error] [pid 2596458:tid 2596458] (EAI 2)Name or service not known: [client 144.76.19.72:39612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:49.564152 2026] [ssl:error] [pid 2596458:tid 2596458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:49.622313 2026] [ssl:error] [pid 2596459:tid 2596459] (EAI 2)Name or service not known: [client 144.76.19.72:39614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:49.622352 2026] [ssl:error] [pid 2596459:tid 2596459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:49.637010 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.bak"] [unique_id "amsNmdto2RX2NaaxJoz0dAAAAB8"]
[Thu Jul 30 09:38:49.637218 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.bak"] [unique_id "amsNmdto2RX2NaaxJoz0dAAAAB8"]
[Thu Jul 30 09:38:49.637447 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.bak"] [unique_id "amsNmdto2RX2NaaxJoz0dAAAAB8"]
[Thu Jul 30 09:38:49.744033 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/stripe/.env"] [unique_id "amsNmdto2RX2NaaxJoz0dwAAAB8"]
[Thu Jul 30 09:38:49.744235 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/stripe/.env"] [unique_id "amsNmdto2RX2NaaxJoz0dwAAAB8"]
[Thu Jul 30 09:38:49.744452 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/stripe/.env"] [unique_id "amsNmdto2RX2NaaxJoz0dwAAAB8"]
[Thu Jul 30 09:38:49.796701 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.aws"] [unique_id "amsNmdto2RX2NaaxJoz0eAAAAB8"]
[Thu Jul 30 09:38:49.796890 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.aws"] [unique_id "amsNmdto2RX2NaaxJoz0eAAAAB8"]
[Thu Jul 30 09:38:49.797118 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.aws"] [unique_id "amsNmdto2RX2NaaxJoz0eAAAAB8"]
[Thu Jul 30 09:38:49.834511 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.save"] [unique_id "amsNmdto2RX2NaaxJoz0eQAAAB8"]
[Thu Jul 30 09:38:49.834709 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.save"] [unique_id "amsNmdto2RX2NaaxJoz0eQAAAB8"]
[Thu Jul 30 09:38:49.834919 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.save"] [unique_id "amsNmdto2RX2NaaxJoz0eQAAAB8"]
[Thu Jul 30 09:38:49.879481 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.local"] [unique_id "amsNmdto2RX2NaaxJoz0egAAAB8"]
[Thu Jul 30 09:38:49.879668 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.local"] [unique_id "amsNmdto2RX2NaaxJoz0egAAAB8"]
[Thu Jul 30 09:38:49.879872 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.local"] [unique_id "amsNmdto2RX2NaaxJoz0egAAAB8"]
[Thu Jul 30 09:38:49.914503 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/backend/.env"] [unique_id "amsNmdto2RX2NaaxJoz0ewAAAB8"]
[Thu Jul 30 09:38:49.914670 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/backend/.env"] [unique_id "amsNmdto2RX2NaaxJoz0ewAAAB8"]
[Thu Jul 30 09:38:49.914863 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/backend/.env"] [unique_id "amsNmdto2RX2NaaxJoz0ewAAAB8"]
[Thu Jul 30 09:38:49.982803 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.backup"] [unique_id "amsNmdto2RX2NaaxJoz0fQAAAB8"]
[Thu Jul 30 09:38:49.982986 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.backup"] [unique_id "amsNmdto2RX2NaaxJoz0fQAAAB8"]
[Thu Jul 30 09:38:49.983189 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.backup"] [unique_id "amsNmdto2RX2NaaxJoz0fQAAAB8"]
[Thu Jul 30 09:38:50.047840 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.old"] [unique_id "amsNmtto2RX2NaaxJoz0fgAAAB8"]
[Thu Jul 30 09:38:50.048029 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.old"] [unique_id "amsNmtto2RX2NaaxJoz0fgAAAB8"]
[Thu Jul 30 09:38:50.048246 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.old"] [unique_id "amsNmtto2RX2NaaxJoz0fgAAAB8"]
[Thu Jul 30 09:38:50.077698 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.tmp"] [unique_id "amsNmtto2RX2NaaxJoz0fwAAAB8"]
[Thu Jul 30 09:38:50.077877 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.tmp"] [unique_id "amsNmtto2RX2NaaxJoz0fwAAAB8"]
[Thu Jul 30 09:38:50.078092 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.tmp"] [unique_id "amsNmtto2RX2NaaxJoz0fwAAAB8"]
[Thu Jul 30 09:38:50.115955 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.php.bak"] [unique_id "amsNmtto2RX2NaaxJoz0gAAAAB8"]
[Thu Jul 30 09:38:50.116171 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.php.bak"] [unique_id "amsNmtto2RX2NaaxJoz0gAAAAB8"]
[Thu Jul 30 09:38:50.116388 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.php.bak"] [unique_id "amsNmtto2RX2NaaxJoz0gAAAAB8"]
[Thu Jul 30 09:38:50.155678 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.php"] [unique_id "amsNmtto2RX2NaaxJoz0gQAAAB8"]
[Thu Jul 30 09:38:50.155880 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.php"] [unique_id "amsNmtto2RX2NaaxJoz0gQAAAB8"]
[Thu Jul 30 09:38:50.156104 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.php"] [unique_id "amsNmtto2RX2NaaxJoz0gQAAAB8"]
[Thu Jul 30 09:38:50.197660 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.txt"] [unique_id "amsNmtto2RX2NaaxJoz0ggAAAB8"]
[Thu Jul 30 09:38:50.197847 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.txt"] [unique_id "amsNmtto2RX2NaaxJoz0ggAAAB8"]
[Thu Jul 30 09:38:50.198057 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.txt"] [unique_id "amsNmtto2RX2NaaxJoz0ggAAAB8"]
[Thu Jul 30 09:38:50.275362 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.prod"] [unique_id "amsNmtto2RX2NaaxJoz0gwAAAB8"]
[Thu Jul 30 09:38:50.275558 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.prod"] [unique_id "amsNmtto2RX2NaaxJoz0gwAAAB8"]
[Thu Jul 30 09:38:50.275774 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.prod"] [unique_id "amsNmtto2RX2NaaxJoz0gwAAAB8"]
[Thu Jul 30 09:38:50.326678 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.dev"] [unique_id "amsNmtto2RX2NaaxJoz0hAAAAB8"]
[Thu Jul 30 09:38:50.326859 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.dev"] [unique_id "amsNmtto2RX2NaaxJoz0hAAAAB8"]
[Thu Jul 30 09:38:50.327091 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env.dev"] [unique_id "amsNmtto2RX2NaaxJoz0hAAAAB8"]
[Thu Jul 30 09:38:50.408099 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "amsNmtto2RX2NaaxJoz0hgAAAB8"]
[Thu Jul 30 09:38:50.408287 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "amsNmtto2RX2NaaxJoz0hgAAAB8"]
[Thu Jul 30 09:38:50.408498 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "amsNmtto2RX2NaaxJoz0hgAAAB8"]
[Thu Jul 30 09:38:50.530420 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/wp-config.php"] [unique_id "amsNmtto2RX2NaaxJoz0hwAAAB8"]
[Thu Jul 30 09:38:50.530627 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/wp-config.php"] [unique_id "amsNmtto2RX2NaaxJoz0hwAAAB8"]
[Thu Jul 30 09:38:50.530841 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/wp-config.php"] [unique_id "amsNmtto2RX2NaaxJoz0hwAAAB8"]
[Thu Jul 30 09:38:50.578351 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/wp-config.php.old"] [unique_id "amsNmtto2RX2NaaxJoz0iAAAAB8"]
[Thu Jul 30 09:38:50.578522 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/wp-config.php.old"] [unique_id "amsNmtto2RX2NaaxJoz0iAAAAB8"]
[Thu Jul 30 09:38:50.578745 2026] [security2:error] [pid 2585580:tid 2585580] [client 45.148.10.62:48762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/wp-config.php.old"] [unique_id "amsNmtto2RX2NaaxJoz0iAAAAB8"]
[Thu Jul 30 09:38:52.042324 2026] [core:error] [pid 2596459:tid 2596459] [client 57.141.0.48:46954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:38:52.042355 2026] [core:error] [pid 2596459:tid 2596459] [client 57.141.0.48:46954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:38:52.619013 2026] [security2:error] [pid 2596459:tid 2596459] [client 114.119.132.171:43719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14,30,102/request_format~html"] [unique_id "amsNnJ2aXd4ITB9DesAWcwAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14,30/request_format~html
[Thu Jul 30 09:38:52.679489 2026] [ssl:error] [pid 2595233:tid 2595233] (EAI 2)Name or service not known: [client 144.76.19.72:39616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:52.679514 2026] [ssl:error] [pid 2595233:tid 2595233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:52.736471 2026] [ssl:error] [pid 2595233:tid 2595233] (EAI 2)Name or service not known: [client 144.76.19.72:39626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:52.736493 2026] [ssl:error] [pid 2595233:tid 2595233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:53.657140 2026] [authz_core:error] [pid 2596638:tid 2596638] [client 57.141.0.2:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:38:53.657789 2026] [authz_core:error] [pid 2596638:tid 2596638] [client 57.141.0.2:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:38:54.827132 2026] [security2:error] [pid 2582760:tid 2582760] [client 114.119.132.171:43729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14,30,102/request_format~html"] [unique_id "amsNngO7Whfrm42LhtBe8QAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14,30/request_format~html
[Thu Jul 30 09:38:55.792740 2026] [ssl:error] [pid 2593569:tid 2593569] (EAI 2)Name or service not known: [client 144.76.19.72:39634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:55.792775 2026] [ssl:error] [pid 2593569:tid 2593569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:55.848566 2026] [ssl:error] [pid 2596639:tid 2596639] (EAI 2)Name or service not known: [client 144.76.19.72:39644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:55.848607 2026] [ssl:error] [pid 2596639:tid 2596639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:58.902035 2026] [ssl:error] [pid 2582760:tid 2582760] (EAI 2)Name or service not known: [client 144.76.19.72:39660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:58.902079 2026] [ssl:error] [pid 2582760:tid 2582760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:38:58.955083 2026] [ssl:error] [pid 2592410:tid 2592410] (EAI 2)Name or service not known: [client 144.76.19.72:39672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:38:58.955127 2026] [ssl:error] [pid 2592410:tid 2592410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:02.050969 2026] [ssl:error] [pid 2587952:tid 2587952] (EAI 2)Name or service not known: [client 144.76.19.72:57940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:02.051011 2026] [ssl:error] [pid 2587952:tid 2587952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:02.106729 2026] [ssl:error] [pid 2594829:tid 2594829] (EAI 2)Name or service not known: [client 144.76.19.72:57952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:02.106775 2026] [ssl:error] [pid 2594829:tid 2594829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:02.346225 2026] [ssl:error] [pid 2592842:tid 2592842] (70014)End of file found: [client 216.73.216.199:5642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:39:03.891308 2026] [authz_core:error] [pid 2592771:tid 2592771] [client 57.141.0.61:53154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:39:03.891930 2026] [authz_core:error] [pid 2592771:tid 2592771] [client 57.141.0.61:53154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:39:05.165642 2026] [ssl:error] [pid 2587010:tid 2587010] (EAI 2)Name or service not known: [client 144.76.19.72:57964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:05.165678 2026] [ssl:error] [pid 2587010:tid 2587010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:05.218671 2026] [ssl:error] [pid 2596420:tid 2596420] (EAI 2)Name or service not known: [client 144.76.19.72:57980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:05.218714 2026] [ssl:error] [pid 2596420:tid 2596420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:06.630344 2026] [authz_core:error] [pid 2596420:tid 2596420] [client 57.141.0.30:54910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:39:06.631064 2026] [authz_core:error] [pid 2596420:tid 2596420] [client 57.141.0.30:54910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:39:08.276424 2026] [ssl:error] [pid 2596459:tid 2596459] (EAI 2)Name or service not known: [client 144.76.19.72:57988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:08.276452 2026] [ssl:error] [pid 2596459:tid 2596459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:08.329530 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:57992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:08.329560 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:11.386410 2026] [ssl:error] [pid 2589437:tid 2589437] (EAI 2)Name or service not known: [client 144.76.19.72:65442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:11.386455 2026] [ssl:error] [pid 2589437:tid 2589437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:11.440551 2026] [ssl:error] [pid 2587010:tid 2587010] (EAI 2)Name or service not known: [client 144.76.19.72:65446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:11.440575 2026] [ssl:error] [pid 2587010:tid 2587010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:12.940168 2026] [security2:error] [pid 2587037:tid 2587037] [client 52.2.83.227:25283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board"] [unique_id "amsNsPcnd-CpnzcOL1wjOQAAABk"]
[Thu Jul 30 09:39:14.512182 2026] [ssl:error] [pid 2596638:tid 2596638] (EAI 2)Name or service not known: [client 144.76.19.72:65460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:14.512234 2026] [ssl:error] [pid 2596638:tid 2596638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:14.568647 2026] [ssl:error] [pid 2592086:tid 2592086] (EAI 2)Name or service not known: [client 144.76.19.72:65464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:14.568685 2026] [ssl:error] [pid 2592086:tid 2592086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:15.082863 2026] [security2:error] [pid 2595233:tid 2595233] [client 170.106.167.214:34422] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsNs8vPPcgaJpNId6O9uAAAAAo"]
[Thu Jul 30 09:39:15.623202 2026] [security2:error] [pid 2553974:tid 2553974] [client 51.68.247.216:58368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/cruise-ship-killers-erica-real-name"] [unique_id "amsNs_MyyrobjVWUoxs3fwAAAAU"]
[Thu Jul 30 09:39:15.934637 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 57.141.0.33:64836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:39:15.935262 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 57.141.0.33:64836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:39:16.124920 2026] [core:error] [pid 2553974:tid 2553974] [client 66.249.64.171:49682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:16.124953 2026] [core:error] [pid 2553974:tid 2553974] [client 66.249.64.171:49682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:16.564221 2026] [security2:error] [pid 2587287:tid 2587287] [client 85.208.98.23:56806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/robots.txt"] [unique_id "amsNtNahPvz-6W_WjZ33tAAAACA"]
[Thu Jul 30 09:39:16.889941 2026] [security2:error] [pid 2594829:tid 2594829] [client 177.74.209.113:5297] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNtFXOsRqkRyelQI2DxgAAAAM"]
[Thu Jul 30 09:39:16.889985 2026] [security2:error] [pid 2594829:tid 2594829] [client 177.74.209.113:5297] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNtFXOsRqkRyelQI2DxgAAAAM"]
[Thu Jul 30 09:39:16.890270 2026] [security2:error] [pid 2594829:tid 2594829] [client 177.74.209.113:5297] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsNtFXOsRqkRyelQI2DxgAAAAM"]
[Thu Jul 30 09:39:16.906784 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 66.249.66.33:44038] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:39:16.909450 2026] [authz_core:error] [pid 2578103:tid 2578103] [client 66.249.66.33:44038] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:39:17.127877 2026] [security2:error] [pid 2595233:tid 2595233] [client 170.106.167.214:34600] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsNtcvPPcgaJpNId6O9uQAAAAo"], referer: http://spamp.com
[Thu Jul 30 09:39:17.620963 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:65468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:17.620989 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:17.673654 2026] [ssl:error] [pid 2596420:tid 2596420] (EAI 2)Name or service not known: [client 144.76.19.72:65472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:17.673675 2026] [ssl:error] [pid 2596420:tid 2596420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:18.881911 2026] [authz_core:error] [pid 2597598:tid 2597598] [client 40.77.167.55:54491] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:39:18.882549 2026] [authz_core:error] [pid 2597598:tid 2597598] [client 40.77.167.55:54491] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:39:18.916220 2026] [security2:error] [pid 2587287:tid 2587287] [client 85.208.96.199:63190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/iris-patterns-furrows"] [unique_id "amsNttahPvz-6W_WjZ33tQAAACA"]
[Thu Jul 30 09:39:19.552804 2026] [security2:error] [pid 2595233:tid 2595233] [client 212.227.236.81:48454] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsNt8vPPcgaJpNId6O9ugAAAAo"]
[Thu Jul 30 09:39:19.909088 2026] [security2:error] [pid 2595232:tid 2595232] [client 14.172.130.151:45475] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNt_BeZWGLqK4V8t4V0wAAAAk"]
[Thu Jul 30 09:39:19.909131 2026] [security2:error] [pid 2595232:tid 2595232] [client 14.172.130.151:45475] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNt_BeZWGLqK4V8t4V0wAAAAk"]
[Thu Jul 30 09:39:19.909392 2026] [security2:error] [pid 2595232:tid 2595232] [client 14.172.130.151:45475] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsNt_BeZWGLqK4V8t4V0wAAAAk"]
[Thu Jul 30 09:39:20.614771 2026] [core:error] [pid 2587037:tid 2587037] [client 66.249.64.170:61614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:20.614796 2026] [core:error] [pid 2587037:tid 2587037] [client 66.249.64.170:61614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:20.727827 2026] [ssl:error] [pid 2592410:tid 2592410] (EAI 2)Name or service not known: [client 144.76.19.72:58444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:20.727864 2026] [ssl:error] [pid 2592410:tid 2592410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:20.781045 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:58456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:20.781081 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:22.295825 2026] [core:error] [pid 2597428:tid 2597428] [client 66.249.64.171:58771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:22.295851 2026] [core:error] [pid 2597428:tid 2597428] [client 66.249.64.171:58771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:22.660311 2026] [core:error] [pid 2595741:tid 2595741] (13)Permission denied: [client 216.73.216.199:51956] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/bin/sudoreplay
[Thu Jul 30 09:39:23.836841 2026] [ssl:error] [pid 2591557:tid 2591557] (EAI 2)Name or service not known: [client 144.76.19.72:58472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:23.836878 2026] [ssl:error] [pid 2591557:tid 2591557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:23.891399 2026] [ssl:error] [pid 2593569:tid 2593569] (EAI 2)Name or service not known: [client 144.76.19.72:58476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:23.891435 2026] [ssl:error] [pid 2593569:tid 2593569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:25.087005 2026] [security2:error] [pid 2597428:tid 2597428] [client 179.1.199.88:54614] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNvZM2PYtgR67tkPKMLAAAAAY"]
[Thu Jul 30 09:39:25.087060 2026] [security2:error] [pid 2597428:tid 2597428] [client 179.1.199.88:54614] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsNvZM2PYtgR67tkPKMLAAAAAY"]
[Thu Jul 30 09:39:25.087353 2026] [security2:error] [pid 2597428:tid 2597428] [client 179.1.199.88:54614] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsNvZM2PYtgR67tkPKMLAAAAAY"]
[Thu Jul 30 09:39:26.950413 2026] [ssl:error] [pid 2593787:tid 2593787] (EAI 2)Name or service not known: [client 144.76.19.72:58484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:26.950442 2026] [ssl:error] [pid 2593787:tid 2593787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:27.003420 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:58494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:27.003450 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:30.060173 2026] [ssl:error] [pid 2587287:tid 2587287] (EAI 2)Name or service not known: [client 144.76.19.72:18138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:30.060204 2026] [ssl:error] [pid 2587287:tid 2587287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:30.113456 2026] [ssl:error] [pid 2592086:tid 2592086] (EAI 2)Name or service not known: [client 144.76.19.72:18144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:30.113481 2026] [ssl:error] [pid 2592086:tid 2592086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:32.794706 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.38:52326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:39:32.795331 2026] [authz_core:error] [pid 2569984:tid 2569984] [client 57.141.0.38:52326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:39:32.979574 2026] [core:error] [pid 2597428:tid 2597428] [client 66.249.64.170:64614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:32.979612 2026] [core:error] [pid 2597428:tid 2597428] [client 66.249.64.170:64614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:33.170537 2026] [ssl:error] [pid 2593569:tid 2593569] (EAI 2)Name or service not known: [client 144.76.19.72:18158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:33.170564 2026] [ssl:error] [pid 2593569:tid 2593569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:33.223354 2026] [ssl:error] [pid 2591557:tid 2591557] (EAI 2)Name or service not known: [client 144.76.19.72:18168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:33.223380 2026] [ssl:error] [pid 2591557:tid 2591557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:36.279942 2026] [ssl:error] [pid 2593723:tid 2593723] (EAI 2)Name or service not known: [client 144.76.19.72:18172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:36.279976 2026] [ssl:error] [pid 2593723:tid 2593723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:36.334498 2026] [ssl:error] [pid 2588355:tid 2588355] (EAI 2)Name or service not known: [client 144.76.19.72:18180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:36.334527 2026] [ssl:error] [pid 2588355:tid 2588355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:36.760844 2026] [authz_core:error] [pid 2592410:tid 2592410] [client 57.141.0.11:52468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:39:36.761469 2026] [authz_core:error] [pid 2592410:tid 2592410] [client 57.141.0.11:52468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:39:39.388391 2026] [ssl:error] [pid 2593569:tid 2593569] (EAI 2)Name or service not known: [client 144.76.19.72:18184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:39.388427 2026] [ssl:error] [pid 2593569:tid 2593569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:39.443131 2026] [ssl:error] [pid 2593787:tid 2593787] (EAI 2)Name or service not known: [client 144.76.19.72:18196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:39.443166 2026] [ssl:error] [pid 2593787:tid 2593787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:41.229478 2026] [security2:error] [pid 2593569:tid 2593569] [client 146.56.199.139:45038] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "martingriese.com"] [uri "/"] [unique_id "amsNze-ObBDwH9exmbkFagAAAAI"]
[Thu Jul 30 09:39:42.458580 2026] [security2:error] [pid 2595204:tid 2595204] [client 85.208.98.31:36934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/under-armour-tank-tops-k.html"] [unique_id "amsNzgbnr26yXB21sYjBgAAAAAc"]
[Thu Jul 30 09:39:42.487245 2026] [core:error] [pid 2592771:tid 2592771] (13)Permission denied: [client 216.73.216.199:3012] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/btmp
[Thu Jul 30 09:39:42.497949 2026] [ssl:error] [pid 2596459:tid 2596459] (EAI 2)Name or service not known: [client 144.76.19.72:28968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:42.497972 2026] [ssl:error] [pid 2596459:tid 2596459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:42.555320 2026] [ssl:error] [pid 2592842:tid 2592842] (EAI 2)Name or service not known: [client 144.76.19.72:28974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:42.555350 2026] [ssl:error] [pid 2592842:tid 2592842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:45.636099 2026] [ssl:error] [pid 2587037:tid 2587037] (EAI 2)Name or service not known: [client 144.76.19.72:28976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:45.636140 2026] [ssl:error] [pid 2587037:tid 2587037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:45.693195 2026] [ssl:error] [pid 2587037:tid 2587037] (EAI 2)Name or service not known: [client 144.76.19.72:28980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:45.693219 2026] [ssl:error] [pid 2587037:tid 2587037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:47.166101 2026] [authz_core:error] [pid 2598622:tid 2598622] [client 34.229.57.16:57306] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 09:39:47.166147 2026] [authz_core:error] [pid 2598622:tid 2598622] [client 34.229.57.16:57306] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 09:39:48.091567 2026] [core:error] [pid 2598622:tid 2598622] [client 66.249.64.170:49163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:48.091614 2026] [core:error] [pid 2598622:tid 2598622] [client 66.249.64.170:49163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:48.738470 2026] [core:error] [pid 2578103:tid 2578103] [client 66.249.64.170:49071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:48.738496 2026] [core:error] [pid 2578103:tid 2578103] [client 66.249.64.170:49071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:48.746315 2026] [ssl:error] [pid 2593787:tid 2593787] (EAI 2)Name or service not known: [client 144.76.19.72:28988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:48.746346 2026] [ssl:error] [pid 2593787:tid 2593787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:48.800509 2026] [ssl:error] [pid 2592842:tid 2592842] (EAI 2)Name or service not known: [client 144.76.19.72:28996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:48.800537 2026] [ssl:error] [pid 2592842:tid 2592842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:49.257779 2026] [authz_core:error] [pid 2598653:tid 2598653] [client 57.141.0.1:34498] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:39:49.260495 2026] [authz_core:error] [pid 2598653:tid 2598653] [client 57.141.0.1:34498] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:39:51.302789 2026] [security2:error] [pid 2598583:tid 2598583] [client 100.27.153.9:3416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.butteredcat.com"] [uri "/robots.txt"] [unique_id "amsN17PLS-HYaIgumpS1rQAAAAM"]
[Thu Jul 30 09:39:51.856105 2026] [ssl:error] [pid 2596638:tid 2596638] (EAI 2)Name or service not known: [client 144.76.19.72:34390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:51.856135 2026] [ssl:error] [pid 2596638:tid 2596638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:51.912050 2026] [ssl:error] [pid 2569984:tid 2569984] (EAI 2)Name or service not known: [client 144.76.19.72:34396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:51.912084 2026] [ssl:error] [pid 2569984:tid 2569984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:51.912970 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.10:32274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:39:51.913609 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.10:32274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:39:54.966240 2026] [ssl:error] [pid 2587952:tid 2587952] (EAI 2)Name or service not known: [client 144.76.19.72:34400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:54.966271 2026] [ssl:error] [pid 2587952:tid 2587952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:55.019206 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:34410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:55.019229 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:55.296175 2026] [security2:error] [pid 2598656:tid 2598656] [client 52.5.242.243:23732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.butteredcat.com"] [uri "/index.php"] [unique_id "amsN22AcjAs02iliG-NukQAAABs"]
[Thu Jul 30 09:39:56.090244 2026] [core:error] [pid 2598656:tid 2598656] [client 66.249.64.170:46384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:56.090269 2026] [core:error] [pid 2598656:tid 2598656] [client 66.249.64.170:46384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:39:58.071002 2026] [ssl:error] [pid 2591553:tid 2591553] (EAI 2)Name or service not known: [client 144.76.19.72:34420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:58.071032 2026] [ssl:error] [pid 2591553:tid 2591553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:39:58.216011 2026] [ssl:error] [pid 2598656:tid 2598656] (EAI 2)Name or service not known: [client 144.76.19.72:34426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:39:58.216039 2026] [ssl:error] [pid 2598656:tid 2598656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:01.300637 2026] [ssl:error] [pid 2598959:tid 2598959] (EAI 2)Name or service not known: [client 144.76.19.72:27636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:01.300671 2026] [ssl:error] [pid 2598959:tid 2598959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:01.355453 2026] [ssl:error] [pid 2591557:tid 2591557] (EAI 2)Name or service not known: [client 144.76.19.72:27638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:01.355485 2026] [ssl:error] [pid 2591557:tid 2591557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:04.442491 2026] [ssl:error] [pid 2598959:tid 2598959] (EAI 2)Name or service not known: [client 144.76.19.72:27654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:04.442521 2026] [ssl:error] [pid 2598959:tid 2598959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:04.495524 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:27660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:04.495574 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:05.447933 2026] [authz_core:error] [pid 2598654:tid 2598654] [client 57.141.0.2:33542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:40:05.448579 2026] [authz_core:error] [pid 2598654:tid 2598654] [client 57.141.0.2:33542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:40:07.108582 2026] [security2:error] [pid 2598656:tid 2598656] [client 176.44.140.72:53644] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsN52AcjAs02iliG-NulQAAABs"]
[Thu Jul 30 09:40:07.108654 2026] [security2:error] [pid 2598656:tid 2598656] [client 176.44.140.72:53644] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsN52AcjAs02iliG-NulQAAABs"]
[Thu Jul 30 09:40:07.108937 2026] [security2:error] [pid 2598656:tid 2598656] [client 176.44.140.72:53644] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsN52AcjAs02iliG-NulQAAABs"]
[Thu Jul 30 09:40:07.551240 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:27662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:07.551268 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:07.607545 2026] [ssl:error] [pid 2598654:tid 2598654] (EAI 2)Name or service not known: [client 144.76.19.72:27674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:07.607597 2026] [ssl:error] [pid 2598654:tid 2598654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:08.187019 2026] [security2:error] [pid 2592187:tid 2592187] [client 94.154.43.179:39468] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "evilworkshop.com.davidebell.com"] [uri "/.env"] [unique_id "amsN6GDpA3nAy2AXCI2U5gAAACI"]
[Thu Jul 30 09:40:08.187232 2026] [security2:error] [pid 2592187:tid 2592187] [client 94.154.43.179:39468] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evilworkshop.com.davidebell.com"] [uri "/.env"] [unique_id "amsN6GDpA3nAy2AXCI2U5gAAACI"]
[Thu Jul 30 09:40:08.187441 2026] [security2:error] [pid 2592187:tid 2592187] [client 94.154.43.179:39468] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "evilworkshop.com.davidebell.com"] [uri "/.env"] [unique_id "amsN6GDpA3nAy2AXCI2U5gAAACI"]
[Thu Jul 30 09:40:09.847236 2026] [security2:error] [pid 2591553:tid 2591553] [client 43.133.193.86:44655] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsN6YvgcJ2RTzJvGajtgAAAABM"]
[Thu Jul 30 09:40:09.847305 2026] [security2:error] [pid 2591553:tid 2591553] [client 43.133.193.86:44655] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsN6YvgcJ2RTzJvGajtgAAAABM"]
[Thu Jul 30 09:40:09.847598 2026] [security2:error] [pid 2591553:tid 2591553] [client 43.133.193.86:44655] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsN6YvgcJ2RTzJvGajtgAAAABM"]
[Thu Jul 30 09:40:10.664785 2026] [ssl:error] [pid 2599713:tid 2599713] (EAI 2)Name or service not known: [client 144.76.19.72:63604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:10.664826 2026] [ssl:error] [pid 2599713:tid 2599713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:10.725451 2026] [ssl:error] [pid 2597365:tid 2597365] (EAI 2)Name or service not known: [client 144.76.19.72:63620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:10.725477 2026] [ssl:error] [pid 2597365:tid 2597365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:12.182708 2026] [security2:error] [pid 2595741:tid 2595741] [client 43.133.193.86:10779] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsN7Bds730720SsqtiYDgAAABA"]
[Thu Jul 30 09:40:12.182758 2026] [security2:error] [pid 2595741:tid 2595741] [client 43.133.193.86:10779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsN7Bds730720SsqtiYDgAAABA"]
[Thu Jul 30 09:40:12.183038 2026] [security2:error] [pid 2595741:tid 2595741] [client 43.133.193.86:10779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsN7Bds730720SsqtiYDgAAABA"]
[Thu Jul 30 09:40:13.779103 2026] [ssl:error] [pid 2587952:tid 2587952] (EAI 2)Name or service not known: [client 144.76.19.72:63632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:13.779133 2026] [ssl:error] [pid 2587952:tid 2587952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:13.839575 2026] [ssl:error] [pid 2588355:tid 2588355] (EAI 2)Name or service not known: [client 144.76.19.72:63648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:13.839609 2026] [ssl:error] [pid 2588355:tid 2588355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:14.471229 2026] [security2:error] [pid 2587037:tid 2587037] [client 114.119.145.130:26765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/tag/wolverine/page/4"] [unique_id "amsN7vcnd-CpnzcOL1wjSAAAABk"], referer: http://www.localhero.org.uk/tag/wolverine/page/3
[Thu Jul 30 09:40:15.556456 2026] [authz_core:error] [pid 2599837:tid 2599837] [client 66.249.66.34:58513] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:40:15.559158 2026] [authz_core:error] [pid 2599837:tid 2599837] [client 66.249.66.34:58513] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:40:16.281738 2026] [security2:error] [pid 2599840:tid 2599840] [client 114.119.155.205:54529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/C.20-Turkey-Lice-1975-Earthquake.pdf"] [unique_id "amsN8DF7uWbUdkYGdSDe4AAAADI"]
[Thu Jul 30 09:40:16.914082 2026] [ssl:error] [pid 2589437:tid 2589437] (EAI 2)Name or service not known: [client 144.76.19.72:63650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:16.914127 2026] [ssl:error] [pid 2589437:tid 2589437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:16.970220 2026] [ssl:error] [pid 2592086:tid 2592086] (EAI 2)Name or service not known: [client 144.76.19.72:63666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:16.970252 2026] [ssl:error] [pid 2592086:tid 2592086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:17.753130 2026] [authz_core:error] [pid 2599793:tid 2599793] [client 57.141.0.38:34446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:40:17.753761 2026] [authz_core:error] [pid 2599793:tid 2599793] [client 57.141.0.38:34446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:40:19.377942 2026] [security2:error] [pid 2598655:tid 2598655] [client 85.208.96.193:49540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/class-action-lawsuit-vaccine-mandates"] [unique_id "amsN8zKtkRYC9ryQ3W3IuQAAABU"]
[Thu Jul 30 09:40:20.023942 2026] [ssl:error] [pid 2582760:tid 2582760] (EAI 2)Name or service not known: [client 144.76.19.72:52418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:20.023987 2026] [ssl:error] [pid 2582760:tid 2582760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:20.077112 2026] [ssl:error] [pid 2598653:tid 2598653] (EAI 2)Name or service not known: [client 144.76.19.72:52432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:20.077142 2026] [ssl:error] [pid 2598653:tid 2598653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:20.925233 2026] [security2:error] [pid 2599754:tid 2599754] [client 114.119.144.31:47133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,19/request_format~html"] [unique_id "amsN9N43N-kw7MkSJ7WfZgAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,19,14/request_format~html
[Thu Jul 30 09:40:23.132721 2026] [ssl:error] [pid 2599837:tid 2599837] (EAI 2)Name or service not known: [client 144.76.19.72:52438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:23.132762 2026] [ssl:error] [pid 2599837:tid 2599837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:23.191032 2026] [ssl:error] [pid 2599843:tid 2599843] (EAI 2)Name or service not known: [client 144.76.19.72:52448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:23.191077 2026] [ssl:error] [pid 2599843:tid 2599843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:23.469941 2026] [authz_core:error] [pid 2596516:tid 2596516] [client 57.141.0.52:47142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:40:23.470565 2026] [authz_core:error] [pid 2596516:tid 2596516] [client 57.141.0.52:47142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:40:24.084423 2026] [security2:error] [pid 2592086:tid 2592086] [client 114.119.144.31:22655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,19/request_format~html"] [unique_id "amsN-Dp3mdve2RRX-WUdiQAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,19,14/request_format~html
[Thu Jul 30 09:40:26.245911 2026] [ssl:error] [pid 2599843:tid 2599843] (EAI 2)Name or service not known: [client 144.76.19.72:52462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:26.245947 2026] [ssl:error] [pid 2599843:tid 2599843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:26.300118 2026] [ssl:error] [pid 2591558:tid 2591558] (EAI 2)Name or service not known: [client 144.76.19.72:52468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:26.300148 2026] [ssl:error] [pid 2591558:tid 2591558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:27.193299 2026] [core:error] [pid 2598959:tid 2598959] [client 66.249.64.172:46759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:40:27.193326 2026] [core:error] [pid 2598959:tid 2598959] [client 66.249.64.172:46759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:40:29.177218 2026] [security2:error] [pid 2591557:tid 2591557] [client 94.154.43.188:56218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env"] [unique_id "amsN_fQSdr7ZusQPcelWugAAACY"]
[Thu Jul 30 09:40:29.177429 2026] [security2:error] [pid 2591557:tid 2591557] [client 94.154.43.188:56218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env"] [unique_id "amsN_fQSdr7ZusQPcelWugAAACY"]
[Thu Jul 30 09:40:29.177826 2026] [security2:error] [pid 2591557:tid 2591557] [client 94.154.43.188:56218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env"] [unique_id "amsN_fQSdr7ZusQPcelWugAAACY"]
[Thu Jul 30 09:40:29.347757 2026] [security2:error] [pid 2598959:tid 2598959] [client 94.154.43.229:59650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thesilkshed.co.uk"] [uri "/.env"] [unique_id "amsN_RESWUd6tq-vNvjW-wAAAAY"]
[Thu Jul 30 09:40:29.347960 2026] [security2:error] [pid 2598959:tid 2598959] [client 94.154.43.229:59650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thesilkshed.co.uk"] [uri "/.env"] [unique_id "amsN_RESWUd6tq-vNvjW-wAAAAY"]
[Thu Jul 30 09:40:29.349839 2026] [security2:error] [pid 2598959:tid 2598959] [client 94.154.43.229:59650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thesilkshed.co.uk"] [uri "/.env"] [unique_id "amsN_RESWUd6tq-vNvjW-wAAAAY"]
[Thu Jul 30 09:40:29.354497 2026] [ssl:error] [pid 2595232:tid 2595232] (EAI 2)Name or service not known: [client 144.76.19.72:52470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:29.354530 2026] [ssl:error] [pid 2595232:tid 2595232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:29.408043 2026] [ssl:error] [pid 2599334:tid 2599334] (EAI 2)Name or service not known: [client 144.76.19.72:52480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:29.408094 2026] [ssl:error] [pid 2599334:tid 2599334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:32.467100 2026] [ssl:error] [pid 2593723:tid 2593723] (EAI 2)Name or service not known: [client 144.76.19.72:54196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:32.467130 2026] [ssl:error] [pid 2593723:tid 2593723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:32.523652 2026] [ssl:error] [pid 2553974:tid 2553974] (EAI 2)Name or service not known: [client 144.76.19.72:54212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:32.523681 2026] [ssl:error] [pid 2553974:tid 2553974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:35.577944 2026] [ssl:error] [pid 2598656:tid 2598656] (EAI 2)Name or service not known: [client 144.76.19.72:54226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:35.577971 2026] [ssl:error] [pid 2598656:tid 2598656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:35.632487 2026] [ssl:error] [pid 2598583:tid 2598583] (EAI 2)Name or service not known: [client 144.76.19.72:54242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:35.632523 2026] [ssl:error] [pid 2598583:tid 2598583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:37.704832 2026] [security2:error] [pid 2599334:tid 2599334] [client 84.75.150.12:44320] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOBRJhbLVkHNHY6LEYawAAAAg"]
[Thu Jul 30 09:40:37.704877 2026] [security2:error] [pid 2599334:tid 2599334] [client 84.75.150.12:44320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOBRJhbLVkHNHY6LEYawAAAAg"]
[Thu Jul 30 09:40:37.705157 2026] [security2:error] [pid 2599334:tid 2599334] [client 84.75.150.12:44320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOBRJhbLVkHNHY6LEYawAAAAg"]
[Thu Jul 30 09:40:38.334418 2026] [security2:error] [pid 2597365:tid 2597365] [client 37.66.225.6:44422] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOBnvjyIrgH8BDYNvcNgAAAAE"]
[Thu Jul 30 09:40:38.334474 2026] [security2:error] [pid 2597365:tid 2597365] [client 37.66.225.6:44422] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOBnvjyIrgH8BDYNvcNgAAAAE"]
[Thu Jul 30 09:40:38.334752 2026] [security2:error] [pid 2597365:tid 2597365] [client 37.66.225.6:44422] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOBnvjyIrgH8BDYNvcNgAAAAE"]
[Thu Jul 30 09:40:38.686266 2026] [ssl:error] [pid 2592410:tid 2592410] (EAI 2)Name or service not known: [client 144.76.19.72:54254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:38.686296 2026] [ssl:error] [pid 2592410:tid 2592410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:38.740962 2026] [ssl:error] [pid 2598653:tid 2598653] (EAI 2)Name or service not known: [client 144.76.19.72:54256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:38.740992 2026] [ssl:error] [pid 2598653:tid 2598653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:41.794420 2026] [ssl:error] [pid 2593723:tid 2593723] (EAI 2)Name or service not known: [client 144.76.19.72:20876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:41.794453 2026] [ssl:error] [pid 2593723:tid 2593723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:41.850423 2026] [ssl:error] [pid 2599754:tid 2599754] (EAI 2)Name or service not known: [client 144.76.19.72:20892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:41.850462 2026] [ssl:error] [pid 2599754:tid 2599754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:42.479700 2026] [security2:error] [pid 2598656:tid 2598656] [client 114.119.145.25:42729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-787.xml"] [unique_id "amsOCmAcjAs02iliG-NunQAAABs"]
[Thu Jul 30 09:40:44.906571 2026] [ssl:error] [pid 2601212:tid 2601212] (EAI 2)Name or service not known: [client 144.76.19.72:20906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:44.906613 2026] [ssl:error] [pid 2601212:tid 2601212] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:44.961273 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:20916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:44.961295 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:48.035561 2026] [ssl:error] [pid 2598583:tid 2598583] (EAI 2)Name or service not known: [client 144.76.19.72:20938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:48.035615 2026] [ssl:error] [pid 2598583:tid 2598583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:48.089671 2026] [ssl:error] [pid 2601442:tid 2601442] (EAI 2)Name or service not known: [client 144.76.19.72:20946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:48.089699 2026] [ssl:error] [pid 2601442:tid 2601442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:48.134806 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 57.141.0.70:49424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:40:48.135497 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 57.141.0.70:49424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:40:49.786562 2026] [security2:error] [pid 2596516:tid 2596516] [client 114.119.153.38:47903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/teak-root-side-table"] [unique_id "amsOEX2QhqjWCF_8TJwozwAAAB4"], referer: https://tripodhome.co.uk/product-category/furniture
[Thu Jul 30 09:40:49.932919 2026] [security2:error] [pid 2592114:tid 2592114] [client 47.128.114.251:21290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amsOEfM6i-FoXVuM275OQwAAABc"]
[Thu Jul 30 09:40:50.699925 2026] [cgi:error] [pid 2587287:tid 2587287] [client 20.9.4.9:0] AH02812: stderr from /home/quantumc/shop.papier.com.mt/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:40:50.810999 2026] [security2:error] [pid 2599754:tid 2599754] [client 52.54.249.218:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/index.php/customer/account/forgotpasswordpost/"] [unique_id "amsOEt43N-kw7MkSJ7WfcgAAAB8"]
[Thu Jul 30 09:40:51.147292 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:55390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:51.147318 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:51.207636 2026] [ssl:error] [pid 2598806:tid 2598806] (EAI 2)Name or service not known: [client 144.76.19.72:55400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:51.207674 2026] [ssl:error] [pid 2598806:tid 2598806] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:52.522383 2026] [authz_core:error] [pid 2599838:tid 2599838] [client 20.9.4.9:0] AH01630: client denied by server configuration: /home/quantumc/shop.papier.com.mt/php.ini
[Thu Jul 30 09:40:53.081459 2026] [authz_core:error] [pid 2592410:tid 2592410] [client 57.141.0.15:59242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:40:53.082088 2026] [authz_core:error] [pid 2592410:tid 2592410] [client 57.141.0.15:59242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:40:54.270420 2026] [ssl:error] [pid 2588355:tid 2588355] (EAI 2)Name or service not known: [client 144.76.19.72:55402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:54.270458 2026] [ssl:error] [pid 2588355:tid 2588355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:54.325567 2026] [ssl:error] [pid 2599755:tid 2599755] (EAI 2)Name or service not known: [client 144.76.19.72:55416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:54.325622 2026] [ssl:error] [pid 2599755:tid 2599755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:55.433905 2026] [authz_core:error] [pid 2599838:tid 2599838] [client 82.102.18.190:48666] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/rest-api/search/error_log
[Thu Jul 30 09:40:55.931436 2026] [core:error] [pid 2591557:tid 2591557] [client 66.249.64.171:45168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:40:55.931462 2026] [core:error] [pid 2591557:tid 2591557] [client 66.249.64.171:45168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:40:57.379236 2026] [ssl:error] [pid 2599334:tid 2599334] (EAI 2)Name or service not known: [client 144.76.19.72:55418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:57.379264 2026] [ssl:error] [pid 2599334:tid 2599334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:57.433527 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:55424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:40:57.433554 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:40:57.733688 2026] [core:error] [pid 2591557:tid 2591557] [client 66.249.64.171:42944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:40:57.733714 2026] [core:error] [pid 2591557:tid 2591557] [client 66.249.64.171:42944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:40:58.677421 2026] [security2:error] [pid 2599755:tid 2599755] [client 43.134.93.164:35410] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amsOGpOtPcNxPRODY-TBdgAAACE"]
[Thu Jul 30 09:40:58.921554 2026] [security2:error] [pid 2591557:tid 2591557] [client 198.58.96.57:59334] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amsOGvQSdr7ZusQPcelWwwAAACY"]
[Thu Jul 30 09:41:00.412561 2026] [security2:error] [pid 2596515:tid 2596515] [client 43.134.93.164:38880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amsOHAZzu-nhBfCDajx4jwAAABw"], referer: http://www.borovetsexpress.com
[Thu Jul 30 09:41:00.489462 2026] [ssl:error] [pid 2599755:tid 2599755] (EAI 2)Name or service not known: [client 144.76.19.72:61394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:00.489488 2026] [ssl:error] [pid 2599755:tid 2599755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:00.542384 2026] [ssl:error] [pid 2601441:tid 2601441] (EAI 2)Name or service not known: [client 144.76.19.72:61400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:00.542412 2026] [ssl:error] [pid 2601441:tid 2601441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:03.366179 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 52.167.144.173:15855] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:03.366796 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 52.167.144.173:15855] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:03.601275 2026] [ssl:error] [pid 2599754:tid 2599754] (EAI 2)Name or service not known: [client 144.76.19.72:61406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:03.601308 2026] [ssl:error] [pid 2599754:tid 2599754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:03.657508 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:61408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:03.657537 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:03.916766 2026] [authz_core:error] [pid 2599838:tid 2599838] [client 57.141.0.16:54038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:03.917387 2026] [authz_core:error] [pid 2599838:tid 2599838] [client 57.141.0.16:54038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:06.709159 2026] [ssl:error] [pid 2598654:tid 2598654] (EAI 2)Name or service not known: [client 144.76.19.72:61414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:06.709191 2026] [ssl:error] [pid 2598654:tid 2598654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:06.764756 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:61418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:06.764783 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:07.478906 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.45:26160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:07.479528 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.45:26160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:09.822306 2026] [ssl:error] [pid 2591557:tid 2591557] (EAI 2)Name or service not known: [client 144.76.19.72:37446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:09.822335 2026] [ssl:error] [pid 2591557:tid 2591557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:09.875199 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:37454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:09.875234 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:10.553666 2026] [security2:error] [pid 2601381:tid 2601381] [client 74.7.242.36:50550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "amsOJsqyuV3J8WlWcbYWrQAAAAw"]
[Thu Jul 30 09:41:11.277125 2026] [authz_core:error] [pid 2599796:tid 2599796] [client 57.141.0.18:21876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:11.277756 2026] [authz_core:error] [pid 2599796:tid 2599796] [client 57.141.0.18:21876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:12.828481 2026] [security2:error] [pid 2599796:tid 2599796] [client 103.138.171.164:59646] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOKJhmuqAj2RVSY7okYgAAACw"]
[Thu Jul 30 09:41:12.828530 2026] [security2:error] [pid 2599796:tid 2599796] [client 103.138.171.164:59646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOKJhmuqAj2RVSY7okYgAAACw"]
[Thu Jul 30 09:41:12.828794 2026] [security2:error] [pid 2599796:tid 2599796] [client 103.138.171.164:59646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOKJhmuqAj2RVSY7okYgAAACw"]
[Thu Jul 30 09:41:12.929311 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:37464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:12.929343 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:12.986534 2026] [ssl:error] [pid 2598656:tid 2598656] (EAI 2)Name or service not known: [client 144.76.19.72:37474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:12.986563 2026] [ssl:error] [pid 2598656:tid 2598656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:14.060760 2026] [security2:error] [pid 2601212:tid 2601212] [client 43.157.49.103:42403] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOKtcwCoVcuGl6GJ9oNAAAAAY"]
[Thu Jul 30 09:41:14.060823 2026] [security2:error] [pid 2601212:tid 2601212] [client 43.157.49.103:42403] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOKtcwCoVcuGl6GJ9oNAAAAAY"]
[Thu Jul 30 09:41:14.061090 2026] [security2:error] [pid 2601212:tid 2601212] [client 43.157.49.103:42403] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOKtcwCoVcuGl6GJ9oNAAAAAY"]
[Thu Jul 30 09:41:14.807735 2026] [core:error] [pid 2592187:tid 2592187] [client 66.249.64.171:56236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:14.807765 2026] [core:error] [pid 2592187:tid 2592187] [client 66.249.64.171:56236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:14.816220 2026] [security2:error] [pid 2599838:tid 2599838] [client 114.119.130.248:52249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/section/35/3"] [unique_id "amsOKi9fjxCSZm_71fRhJwAAAC8"], referer: https://www.jonathanmeyerart.com/section/35/6
[Thu Jul 30 09:41:16.078536 2026] [ssl:error] [pid 2600886:tid 2600886] (EAI 2)Name or service not known: [client 144.76.19.72:37484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:16.078568 2026] [ssl:error] [pid 2600886:tid 2600886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:16.154416 2026] [ssl:error] [pid 2598655:tid 2598655] (EAI 2)Name or service not known: [client 144.76.19.72:37500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:16.154444 2026] [ssl:error] [pid 2598655:tid 2598655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:16.207580 2026] [security2:error] [pid 2592187:tid 2592187] [client 43.157.49.103:56959] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOLGDpA3nAy2AXCI2VWgAAACI"]
[Thu Jul 30 09:41:16.207650 2026] [security2:error] [pid 2592187:tid 2592187] [client 43.157.49.103:56959] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOLGDpA3nAy2AXCI2VWgAAACI"]
[Thu Jul 30 09:41:16.207903 2026] [security2:error] [pid 2592187:tid 2592187] [client 43.157.49.103:56959] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOLGDpA3nAy2AXCI2VWgAAACI"]
[Thu Jul 30 09:41:17.068430 2026] [authz_core:error] [pid 2598583:tid 2598583] [client 57.141.0.17:64466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:17.069053 2026] [authz_core:error] [pid 2598583:tid 2598583] [client 57.141.0.17:64466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:18.187235 2026] [security2:error] [pid 2598655:tid 2598655] [client 85.208.98.23:37350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "karenthomasjewellery.co.uk"] [uri "/robots.txt"] [unique_id "amsOLjKtkRYC9ryQ3W3IyAAAABU"]
[Thu Jul 30 09:41:19.237011 2026] [ssl:error] [pid 2599844:tid 2599844] (EAI 2)Name or service not known: [client 144.76.19.72:37522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:19.237054 2026] [ssl:error] [pid 2599844:tid 2599844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:19.290310 2026] [ssl:error] [pid 2592114:tid 2592114] (EAI 2)Name or service not known: [client 144.76.19.72:37534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:19.290341 2026] [ssl:error] [pid 2592114:tid 2592114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:19.911415 2026] [security2:error] [pid 2601442:tid 2601442] [client 85.208.96.200:32062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/cybill-shepherd-grandchildren"] [unique_id "amsOLwVscJluIrBahJDhUAAAACM"]
[Thu Jul 30 09:41:20.925796 2026] [core:error] [pid 2595204:tid 2595204] [client 66.249.66.5:51810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:20.925822 2026] [core:error] [pid 2595204:tid 2595204] [client 66.249.66.5:51810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:20.926329 2026] [core:error] [pid 2598653:tid 2598653] [client 66.249.66.195:51015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:20.926364 2026] [core:error] [pid 2598653:tid 2598653] [client 66.249.66.195:51015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:22.343558 2026] [ssl:error] [pid 2599754:tid 2599754] (EAI 2)Name or service not known: [client 144.76.19.72:32572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:22.343596 2026] [ssl:error] [pid 2599754:tid 2599754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:22.364626 2026] [authz_core:error] [pid 2601212:tid 2601212] [client 57.141.0.8:30532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:22.365247 2026] [authz_core:error] [pid 2601212:tid 2601212] [client 57.141.0.8:30532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:22.399504 2026] [ssl:error] [pid 2599334:tid 2599334] (EAI 2)Name or service not known: [client 144.76.19.72:32586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:22.399532 2026] [ssl:error] [pid 2599334:tid 2599334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:24.162852 2026] [security2:error] [pid 2592114:tid 2592114] [client 114.119.136.72:43969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/images/13_mana_4_3.png"] [unique_id "amsONPM6i-FoXVuM275OTQAAABc"], referer: https://www.robin64.co.uk/customborders
[Thu Jul 30 09:41:25.451913 2026] [ssl:error] [pid 2601212:tid 2601212] (EAI 2)Name or service not known: [client 144.76.19.72:32598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:25.451939 2026] [ssl:error] [pid 2601212:tid 2601212] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:25.503007 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:32614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:25.503033 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:25.552440 2026] [authz_core:error] [pid 2599754:tid 2599754] [client 66.249.66.34:44334] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:41:25.555106 2026] [authz_core:error] [pid 2599754:tid 2599754] [client 66.249.66.34:44334] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:41:26.248840 2026] [authz_core:error] [pid 2599844:tid 2599844] [client 57.141.0.69:22858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:26.249465 2026] [authz_core:error] [pid 2599844:tid 2599844] [client 57.141.0.69:22858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:28.557815 2026] [ssl:error] [pid 2599839:tid 2599839] (EAI 2)Name or service not known: [client 144.76.19.72:32628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:28.557850 2026] [ssl:error] [pid 2599839:tid 2599839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:28.612676 2026] [ssl:error] [pid 2598654:tid 2598654] (EAI 2)Name or service not known: [client 144.76.19.72:32642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:28.612703 2026] [ssl:error] [pid 2598654:tid 2598654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:29.192550 2026] [security2:error] [pid 2599844:tid 2599844] [client 94.154.43.186:37594] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "minervamha.co.uk"] [uri "/.env"] [unique_id "amsOOQQFt2UhWkemBzoJBwAAADY"]
[Thu Jul 30 09:41:29.192711 2026] [security2:error] [pid 2599844:tid 2599844] [client 94.154.43.186:37594] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "minervamha.co.uk"] [uri "/.env"] [unique_id "amsOOQQFt2UhWkemBzoJBwAAADY"]
[Thu Jul 30 09:41:29.192908 2026] [security2:error] [pid 2599844:tid 2599844] [client 94.154.43.186:37594] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "minervamha.co.uk"] [uri "/.env"] [unique_id "amsOOQQFt2UhWkemBzoJBwAAADY"]
[Thu Jul 30 09:41:29.896689 2026] [security2:error] [pid 2599838:tid 2599838] [client 47.128.24.248:63270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amsOOS9fjxCSZm_71fRhKgAAAC8"]
[Thu Jul 30 09:41:31.665695 2026] [ssl:error] [pid 2598654:tid 2598654] (EAI 2)Name or service not known: [client 144.76.19.72:36800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:31.665724 2026] [ssl:error] [pid 2598654:tid 2598654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:31.717085 2026] [ssl:error] [pid 2601439:tid 2601439] (EAI 2)Name or service not known: [client 144.76.19.72:36802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:31.717120 2026] [ssl:error] [pid 2601439:tid 2601439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:33.632439 2026] [authz_core:error] [pid 2596638:tid 2596638] [client 66.249.66.34:40887] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:41:33.635279 2026] [authz_core:error] [pid 2596638:tid 2596638] [client 66.249.66.34:40887] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:41:34.774127 2026] [ssl:error] [pid 2601212:tid 2601212] (EAI 2)Name or service not known: [client 144.76.19.72:36818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:34.774158 2026] [ssl:error] [pid 2601212:tid 2601212] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:34.831749 2026] [ssl:error] [pid 2599754:tid 2599754] (EAI 2)Name or service not known: [client 144.76.19.72:36832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:34.831782 2026] [ssl:error] [pid 2599754:tid 2599754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:36.050233 2026] [core:error] [pid 2603982:tid 2603982] [client 45.135.3.148:47211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:36.050290 2026] [core:error] [pid 2603982:tid 2603982] [client 45.135.3.148:47211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:36.252506 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.4:27806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:36.253136 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.4:27806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:36.877280 2026] [core:error] [pid 2603587:tid 2603587] [client 45.135.3.148:55613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:36.877306 2026] [core:error] [pid 2603587:tid 2603587] [client 45.135.3.148:55613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:37.691214 2026] [core:error] [pid 2601441:tid 2601441] [client 45.135.3.148:9843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:37.691239 2026] [core:error] [pid 2601441:tid 2601441] [client 45.135.3.148:9843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:37.888541 2026] [ssl:error] [pid 2598653:tid 2598653] (EAI 2)Name or service not known: [client 144.76.19.72:36836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:37.888566 2026] [ssl:error] [pid 2598653:tid 2598653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:37.942753 2026] [ssl:error] [pid 2598654:tid 2598654] (EAI 2)Name or service not known: [client 144.76.19.72:36838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:37.942787 2026] [ssl:error] [pid 2598654:tid 2598654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:38.511660 2026] [core:error] [pid 2601441:tid 2601441] [client 45.135.3.148:30701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:38.511686 2026] [core:error] [pid 2601441:tid 2601441] [client 45.135.3.148:30701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:39.327440 2026] [core:error] [pid 2601441:tid 2601441] [client 45.135.3.148:50101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:39.327461 2026] [core:error] [pid 2601441:tid 2601441] [client 45.135.3.148:50101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:39.725525 2026] [security2:error] [pid 2598654:tid 2598654] [client 114.119.158.38:32539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,103/request_format~html"] [unique_id "amsOQzM0OPOvLqoRKl_hAAAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18/request_format~html
[Thu Jul 30 09:41:40.143375 2026] [authz_core:error] [pid 2598653:tid 2598653] [client 45.135.3.148:26295] AH01630: client denied by server configuration: /home/clss/public_html/error_log, referer: https://www.google.com
[Thu Jul 30 09:41:40.953485 2026] [core:error] [pid 2604294:tid 2604294] [client 45.135.3.148:41329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:40.953532 2026] [core:error] [pid 2604294:tid 2604294] [client 45.135.3.148:41329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:41.015295 2026] [ssl:error] [pid 2598654:tid 2598654] (EAI 2)Name or service not known: [client 144.76.19.72:35070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:41.015319 2026] [ssl:error] [pid 2598654:tid 2598654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:41.072031 2026] [ssl:error] [pid 2599755:tid 2599755] (EAI 2)Name or service not known: [client 144.76.19.72:35080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:41.072058 2026] [ssl:error] [pid 2599755:tid 2599755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:41.709976 2026] [security2:error] [pid 2591557:tid 2591557] [client 85.208.98.29:44916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/medikal-tekerlek-k.html"] [unique_id "amsORfQSdr7ZusQPcelXMAAAACY"]
[Thu Jul 30 09:41:41.769582 2026] [core:error] [pid 2598654:tid 2598654] [client 45.135.3.148:30339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:41.769617 2026] [core:error] [pid 2598654:tid 2598654] [client 45.135.3.148:30339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:42.287691 2026] [security2:error] [pid 2587010:tid 2587010] [client 114.119.158.38:32555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,103/request_format~html"] [unique_id "amsORik6ITlVOCYD154kMAAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18/request_format~html
[Thu Jul 30 09:41:42.576290 2026] [core:error] [pid 2598654:tid 2598654] [client 45.135.3.148:58335] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:42.576326 2026] [core:error] [pid 2598654:tid 2598654] [client 45.135.3.148:58335] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:43.385518 2026] [core:error] [pid 2599837:tid 2599837] [client 45.135.3.148:46119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:43.385547 2026] [core:error] [pid 2599837:tid 2599837] [client 45.135.3.148:46119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com
[Thu Jul 30 09:41:43.622162 2026] [security2:error] [pid 2604401:tid 2604401] [client 43.166.237.57:34912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-trackback.php"] [unique_id "amsOR_Eg91sy3iqDk1R2XQAAAA0"]
[Thu Jul 30 09:41:44.123402 2026] [ssl:error] [pid 2599713:tid 2599713] (EAI 2)Name or service not known: [client 144.76.19.72:35086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:44.123429 2026] [ssl:error] [pid 2599713:tid 2599713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:44.179194 2026] [ssl:error] [pid 2598656:tid 2598656] (EAI 2)Name or service not known: [client 144.76.19.72:35100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:44.179217 2026] [ssl:error] [pid 2598656:tid 2598656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:46.551978 2026] [security2:error] [pid 2604568:tid 2604568] [client 44.194.134.53:13555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/php.dlo"] [unique_id "amsOSiZWsD6bHGZ6qFtNBAAAABE"]
[Thu Jul 30 09:41:46.571331 2026] [authz_core:error] [pid 2598653:tid 2598653] [client 57.141.0.39:58364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:46.571960 2026] [authz_core:error] [pid 2598653:tid 2598653] [client 57.141.0.39:58364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:47.267042 2026] [ssl:error] [pid 2591553:tid 2591553] (EAI 2)Name or service not known: [client 144.76.19.72:35116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:47.267097 2026] [ssl:error] [pid 2591553:tid 2591553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:47.322947 2026] [ssl:error] [pid 2604568:tid 2604568] (EAI 2)Name or service not known: [client 144.76.19.72:35130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:47.322979 2026] [ssl:error] [pid 2604568:tid 2604568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:47.894465 2026] [authz_core:error] [pid 2604666:tid 2604666] [client 57.141.0.13:34816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:47.895130 2026] [authz_core:error] [pid 2604666:tid 2604666] [client 57.141.0.13:34816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:48.928287 2026] [access_compat:error] [pid 2599755:tid 2599755] [client 45.158.164.139:55942] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:41:49.967294 2026] [security2:error] [pid 2599755:tid 2599755] [client 34.204.150.196:43446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/php.ini_backup"] [unique_id "amsOTZOtPcNxPRODY-TBhQAAACE"]
[Thu Jul 30 09:41:50.441756 2026] [ssl:error] [pid 2603587:tid 2603587] (EAI 2)Name or service not known: [client 144.76.19.72:48292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:50.441799 2026] [ssl:error] [pid 2603587:tid 2603587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:50.495291 2026] [ssl:error] [pid 2604775:tid 2604775] (EAI 2)Name or service not known: [client 144.76.19.72:48302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:50.495326 2026] [ssl:error] [pid 2604775:tid 2604775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:50.609333 2026] [core:error] [pid 2599755:tid 2599755] [client 66.249.64.171:60313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:50.609357 2026] [core:error] [pid 2599755:tid 2599755] [client 66.249.64.171:60313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:41:53.553464 2026] [ssl:error] [pid 2601441:tid 2601441] (EAI 2)Name or service not known: [client 144.76.19.72:48304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:53.553498 2026] [ssl:error] [pid 2601441:tid 2601441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:53.606798 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:48314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:53.606824 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:54.175700 2026] [security2:error] [pid 2592187:tid 2592187] [client 44.209.35.147:62117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/default.htm"] [unique_id "amsOUmDpA3nAy2AXCI2VxwAAACI"]
[Thu Jul 30 09:41:55.479771 2026] [security2:error] [pid 2599844:tid 2599844] [client 216.73.216.199:51747] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dbus-1/session.conf"] [unique_id "amsOUwQFt2UhWkemBzoJDwAAADY"]
[Thu Jul 30 09:41:55.480040 2026] [security2:error] [pid 2599844:tid 2599844] [client 216.73.216.199:51747] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dbus-1/session.conf"] [unique_id "amsOUwQFt2UhWkemBzoJDwAAADY"]
[Thu Jul 30 09:41:55.480256 2026] [security2:error] [pid 2599844:tid 2599844] [client 216.73.216.199:51747] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dbus-1/session.conf"] [unique_id "amsOUwQFt2UhWkemBzoJDwAAADY"]
[Thu Jul 30 09:41:55.623115 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.43:63596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:55.623735 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.43:63596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:56.545523 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.32:20130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:41:56.546157 2026] [authz_core:error] [pid 2598656:tid 2598656] [client 57.141.0.32:20130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:41:56.660746 2026] [ssl:error] [pid 2604775:tid 2604775] (EAI 2)Name or service not known: [client 144.76.19.72:48322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:56.660775 2026] [ssl:error] [pid 2604775:tid 2604775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:56.716644 2026] [ssl:error] [pid 2604711:tid 2604711] (EAI 2)Name or service not known: [client 144.76.19.72:48328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:56.716673 2026] [ssl:error] [pid 2604711:tid 2604711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:59.205167 2026] [core:crit] [pid 2598656:tid 2598656] (13)Permission denied: [client 66.132.195.104:9738] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:41:59.768805 2026] [ssl:error] [pid 2603587:tid 2603587] (EAI 2)Name or service not known: [client 144.76.19.72:65318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:59.768836 2026] [ssl:error] [pid 2603587:tid 2603587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:41:59.822123 2026] [ssl:error] [pid 2596516:tid 2596516] (EAI 2)Name or service not known: [client 144.76.19.72:65328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:41:59.822161 2026] [ssl:error] [pid 2596516:tid 2596516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:00.479874 2026] [core:error] [pid 2599844:tid 2599844] (13)Permission denied: [client 216.73.216.199:51747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/jonathanmeyer.co.uk.db
[Thu Jul 30 09:42:02.698653 2026] [authz_core:error] [pid 2596516:tid 2596516] [client 57.141.0.64:42380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:42:02.699284 2026] [authz_core:error] [pid 2596516:tid 2596516] [client 57.141.0.64:42380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:42:02.880149 2026] [ssl:error] [pid 2599837:tid 2599837] (EAI 2)Name or service not known: [client 144.76.19.72:65340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:02.880176 2026] [ssl:error] [pid 2599837:tid 2599837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:02.932041 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:65352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:02.932077 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:03.166343 2026] [authz_core:error] [pid 2604775:tid 2604775] [client 57.141.0.39:25160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:42:03.166967 2026] [authz_core:error] [pid 2604775:tid 2604775] [client 57.141.0.39:25160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:42:03.425617 2026] [security2:error] [pid 2599754:tid 2599754] [client 54.84.147.79:13439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/wp-content-677f/uploads/2014/04/stocks.jpg"] [unique_id "amsOW943N-kw7MkSJ7WfhwAAAB8"]
[Thu Jul 30 09:42:04.593856 2026] [lsapi:warn] [pid 2596516:tid 2596516] [client 108.179.194.35:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:42:05.986677 2026] [ssl:error] [pid 2599837:tid 2599837] (EAI 2)Name or service not known: [client 144.76.19.72:65354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:05.986729 2026] [ssl:error] [pid 2599837:tid 2599837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:06.037844 2026] [ssl:error] [pid 2598806:tid 2598806] (EAI 2)Name or service not known: [client 144.76.19.72:65364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:06.037874 2026] [ssl:error] [pid 2598806:tid 2598806] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:06.397174 2026] [core:error] [pid 2604776:tid 2604776] [client 66.132.195.104:55584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:06.397214 2026] [core:error] [pid 2604776:tid 2604776] [client 66.132.195.104:55584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:06.716526 2026] [authz_core:error] [pid 2592410:tid 2592410] [client 57.141.0.39:39016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:42:06.717209 2026] [authz_core:error] [pid 2592410:tid 2592410] [client 57.141.0.39:39016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:42:07.444010 2026] [security2:error] [pid 2599837:tid 2599837] [client 47.239.26.227:13347] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOX_jgUhVoDyuGbEqewwAAAC0"]
[Thu Jul 30 09:42:07.444086 2026] [security2:error] [pid 2599837:tid 2599837] [client 47.239.26.227:13347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOX_jgUhVoDyuGbEqewwAAAC0"]
[Thu Jul 30 09:42:07.444433 2026] [security2:error] [pid 2599837:tid 2599837] [client 47.239.26.227:13347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOX_jgUhVoDyuGbEqewwAAAC0"]
[Thu Jul 30 09:42:09.092909 2026] [ssl:error] [pid 2604774:tid 2604774] (EAI 2)Name or service not known: [client 144.76.19.72:65370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:09.092940 2026] [ssl:error] [pid 2604774:tid 2604774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:09.151129 2026] [ssl:error] [pid 2599837:tid 2599837] (EAI 2)Name or service not known: [client 144.76.19.72:65372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:09.151180 2026] [ssl:error] [pid 2599837:tid 2599837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:09.190489 2026] [security2:error] [pid 2604891:tid 2604891] [client 76.32.148.17:64078] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOYS0utnHKXux_B5ed_AAAADQ"]
[Thu Jul 30 09:42:09.190536 2026] [security2:error] [pid 2604891:tid 2604891] [client 76.32.148.17:64078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOYS0utnHKXux_B5ed_AAAADQ"]
[Thu Jul 30 09:42:09.190811 2026] [security2:error] [pid 2604891:tid 2604891] [client 76.32.148.17:64078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOYS0utnHKXux_B5ed_AAAADQ"]
[Thu Jul 30 09:42:09.411794 2026] [authz_core:error] [pid 2580492:tid 2580492] [client 57.141.0.20:33010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:42:09.412443 2026] [authz_core:error] [pid 2580492:tid 2580492] [client 57.141.0.20:33010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:42:12.206627 2026] [ssl:error] [pid 2599839:tid 2599839] (EAI 2)Name or service not known: [client 144.76.19.72:20730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:12.206670 2026] [ssl:error] [pid 2599839:tid 2599839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:12.264622 2026] [ssl:error] [pid 2601440:tid 2601440] (EAI 2)Name or service not known: [client 144.76.19.72:20740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:12.264651 2026] [ssl:error] [pid 2601440:tid 2601440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:14.306380 2026] [core:error] [pid 2604712:tid 2604712] [client 66.249.64.171:52098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:14.306419 2026] [core:error] [pid 2604712:tid 2604712] [client 66.249.64.171:52098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:15.322427 2026] [ssl:error] [pid 2603345:tid 2603345] (EAI 2)Name or service not known: [client 144.76.19.72:20752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:15.322462 2026] [ssl:error] [pid 2603345:tid 2603345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:15.377655 2026] [ssl:error] [pid 2603587:tid 2603587] (EAI 2)Name or service not known: [client 144.76.19.72:20764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:15.377682 2026] [ssl:error] [pid 2603587:tid 2603587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:18.353218 2026] [security2:error] [pid 2603587:tid 2603587] [client 85.208.96.195:54806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2872.0/prev_next,next.html"] [unique_id "amsOatzaWaAc3WnkM18rwQAAAAI"]
[Thu Jul 30 09:42:18.428246 2026] [core:error] [pid 2598653:tid 2598653] [client 66.249.66.199:52360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:18.428273 2026] [core:error] [pid 2598653:tid 2598653] [client 66.249.66.199:52360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:18.451282 2026] [ssl:error] [pid 2599837:tid 2599837] (EAI 2)Name or service not known: [client 144.76.19.72:20770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:18.451319 2026] [ssl:error] [pid 2599837:tid 2599837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:18.504985 2026] [ssl:error] [pid 2604776:tid 2604776] (EAI 2)Name or service not known: [client 144.76.19.72:20786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:18.505033 2026] [ssl:error] [pid 2604776:tid 2604776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:18.827507 2026] [security2:error] [pid 2603982:tid 2603982] [client 129.211.229.121:47160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "abc-dyslexia.com"] [uri "/"] [unique_id "amsOanW6X5q4VUBjsN_NuAAAAAU"]
[Thu Jul 30 09:42:19.634732 2026] [security2:error] [pid 2604776:tid 2604776] [client 185.191.171.9:56786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1615.0/prev_next,prev.html"] [unique_id "amsOa_fMMQ_-CPqNF5DhNgAAADM"]
[Thu Jul 30 09:42:20.570277 2026] [security2:error] [pid 2604776:tid 2604776] [client 185.191.171.1:35814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/princess-cruises-daily-newsletter"] [unique_id "amsObPfMMQ_-CPqNF5DhNwAAADM"]
[Thu Jul 30 09:42:21.023727 2026] [core:crit] [pid 2596638:tid 2596638] (13)Permission denied: [client 66.132.195.104:63442] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:42:21.561896 2026] [ssl:error] [pid 2604775:tid 2604775] (EAI 2)Name or service not known: [client 144.76.19.72:23864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:21.561924 2026] [ssl:error] [pid 2604775:tid 2604775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:21.613252 2026] [ssl:error] [pid 2604776:tid 2604776] (EAI 2)Name or service not known: [client 144.76.19.72:23868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:21.613280 2026] [ssl:error] [pid 2604776:tid 2604776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:24.669503 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:23880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:24.669531 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:24.721625 2026] [ssl:error] [pid 2592410:tid 2592410] (EAI 2)Name or service not known: [client 144.76.19.72:23888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:24.721651 2026] [ssl:error] [pid 2592410:tid 2592410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:27.776296 2026] [ssl:error] [pid 2604775:tid 2604775] (EAI 2)Name or service not known: [client 144.76.19.72:23890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:27.776329 2026] [ssl:error] [pid 2604775:tid 2604775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:27.829404 2026] [ssl:error] [pid 2592410:tid 2592410] (EAI 2)Name or service not known: [client 144.76.19.72:23898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:27.829427 2026] [ssl:error] [pid 2592410:tid 2592410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:29.282122 2026] [access_compat:error] [pid 2606282:tid 2606282] [client 172.202.95.21:10799] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 09:42:30.692388 2026] [authz_core:error] [pid 2606607:tid 2606607] [client 57.141.0.14:34146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:42:30.693033 2026] [authz_core:error] [pid 2606607:tid 2606607] [client 57.141.0.14:34146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:42:30.929523 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:31406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:30.929551 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:30.985474 2026] [ssl:error] [pid 2596638:tid 2596638] (EAI 2)Name or service not known: [client 144.76.19.72:31420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:30.985498 2026] [ssl:error] [pid 2596638:tid 2596638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:32.925662 2026] [authz_core:error] [pid 2606531:tid 2606531] [client 57.141.0.12:43528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:42:32.926339 2026] [authz_core:error] [pid 2606531:tid 2606531] [client 57.141.0.12:43528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:42:34.079077 2026] [ssl:error] [pid 2599838:tid 2599838] (EAI 2)Name or service not known: [client 144.76.19.72:31424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:34.079112 2026] [ssl:error] [pid 2599838:tid 2599838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:34.136885 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:31430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:34.136914 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:35.186467 2026] [security2:error] [pid 2603587:tid 2603587] [client 43.153.135.208:48268] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/"] [unique_id "amsOe9zaWaAc3WnkM18ryQAAAAI"]
[Thu Jul 30 09:42:35.323207 2026] [authz_core:error] [pid 2599838:tid 2599838] [client 57.141.0.12:43530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:42:35.323821 2026] [authz_core:error] [pid 2599838:tid 2599838] [client 57.141.0.12:43530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:42:37.191226 2026] [ssl:error] [pid 2590232:tid 2590232] (EAI 2)Name or service not known: [client 144.76.19.72:31438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:37.191270 2026] [ssl:error] [pid 2590232:tid 2590232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:37.246630 2026] [ssl:error] [pid 2606531:tid 2606531] (EAI 2)Name or service not known: [client 144.76.19.72:31442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:37.246667 2026] [ssl:error] [pid 2606531:tid 2606531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:40.304499 2026] [ssl:error] [pid 2590232:tid 2590232] (EAI 2)Name or service not known: [client 144.76.19.72:25294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:40.304527 2026] [ssl:error] [pid 2590232:tid 2590232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:40.357664 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:25304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:40.357708 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:42.992670 2026] [security2:error] [pid 2603587:tid 2603587] [client 162.14.109.170:34748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amsOgtzaWaAc3WnkM18r0QAAAAI"]
[Thu Jul 30 09:42:43.413555 2026] [ssl:error] [pid 2606606:tid 2606606] (EAI 2)Name or service not known: [client 144.76.19.72:25320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:43.413598 2026] [ssl:error] [pid 2606606:tid 2606606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:43.468272 2026] [ssl:error] [pid 2606607:tid 2606607] (EAI 2)Name or service not known: [client 144.76.19.72:25324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:43.468306 2026] [ssl:error] [pid 2606607:tid 2606607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:43.616605 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 82.102.18.190:58136] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 09:42:46.523054 2026] [ssl:error] [pid 2599838:tid 2599838] (EAI 2)Name or service not known: [client 144.76.19.72:25336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:46.523101 2026] [ssl:error] [pid 2599838:tid 2599838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:46.581954 2026] [ssl:error] [pid 2608021:tid 2608021] (EAI 2)Name or service not known: [client 144.76.19.72:25350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:46.581990 2026] [ssl:error] [pid 2608021:tid 2608021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:47.926792 2026] [core:error] [pid 2599838:tid 2599838] [client 66.249.66.67:60404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:47.926819 2026] [core:error] [pid 2599838:tid 2599838] [client 66.249.66.67:60404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:47.934925 2026] [core:error] [pid 2604712:tid 2604712] [client 66.249.66.40:59049] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:47.934946 2026] [core:error] [pid 2604712:tid 2604712] [client 66.249.66.40:59049] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:42:49.659293 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:28812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:49.659346 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:49.717472 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:28816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:49.717504 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:52.775498 2026] [ssl:error] [pid 2592114:tid 2592114] (EAI 2)Name or service not known: [client 144.76.19.72:28818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:52.775524 2026] [ssl:error] [pid 2592114:tid 2592114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:52.831540 2026] [ssl:error] [pid 2606459:tid 2606459] (EAI 2)Name or service not known: [client 144.76.19.72:28832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:52.831573 2026] [ssl:error] [pid 2606459:tid 2606459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:55.149480 2026] [authz_core:error] [pid 2592086:tid 2592086] [client 20.63.98.115:30567] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:42:55.893811 2026] [ssl:error] [pid 2606531:tid 2606531] (EAI 2)Name or service not known: [client 144.76.19.72:28836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:55.893839 2026] [ssl:error] [pid 2606531:tid 2606531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:55.954696 2026] [ssl:error] [pid 2606531:tid 2606531] (EAI 2)Name or service not known: [client 144.76.19.72:28846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:55.954718 2026] [ssl:error] [pid 2606531:tid 2606531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:59.007451 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:28852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:59.007483 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:42:59.062092 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:28866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:42:59.062122 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:02.117044 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:37538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:02.117087 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:02.169904 2026] [ssl:error] [pid 2604891:tid 2604891] (EAI 2)Name or service not known: [client 144.76.19.72:37554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:02.169938 2026] [ssl:error] [pid 2604891:tid 2604891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:02.231727 2026] [security2:error] [pid 2606530:tid 2606530] [client 114.119.132.171:52703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15,19/request_format~html"] [unique_id "amsOlgiFXWoFjYbOrmYjIwAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15/request_format~html
[Thu Jul 30 09:43:03.234146 2026] [security2:error] [pid 2604891:tid 2604891] [client 114.119.132.171:52705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15,19/request_format~html"] [unique_id "amsOly0utnHKXux_B5eeOQAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15/request_format~html
[Thu Jul 30 09:43:03.590226 2026] [security2:error] [pid 2603982:tid 2603982] [client 43.134.56.214:38188] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amsOl3W6X5q4VUBjsN_NyQAAAAU"]
[Thu Jul 30 09:43:05.225388 2026] [ssl:error] [pid 2608553:tid 2608553] (EAI 2)Name or service not known: [client 144.76.19.72:37568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:05.225421 2026] [ssl:error] [pid 2608553:tid 2608553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:05.283295 2026] [ssl:error] [pid 2592114:tid 2592114] (EAI 2)Name or service not known: [client 144.76.19.72:37574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:05.283321 2026] [ssl:error] [pid 2592114:tid 2592114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:05.952244 2026] [ssl:error] [pid 2598656:tid 2598656] (70014)End of file found: [client 216.73.216.199:23624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:43:06.227469 2026] [authz_core:error] [pid 2608772:tid 2608772] [client 57.141.0.45:37026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:06.228097 2026] [authz_core:error] [pid 2608772:tid 2608772] [client 57.141.0.45:37026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:07.777283 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.28:45384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:07.777912 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.28:45384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:08.341054 2026] [ssl:error] [pid 2606530:tid 2606530] (EAI 2)Name or service not known: [client 144.76.19.72:37590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:08.341142 2026] [ssl:error] [pid 2606530:tid 2606530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:08.397680 2026] [ssl:error] [pid 2603587:tid 2603587] (EAI 2)Name or service not known: [client 144.76.19.72:37596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:08.397717 2026] [ssl:error] [pid 2603587:tid 2603587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:11.451309 2026] [ssl:error] [pid 2604294:tid 2604294] (EAI 2)Name or service not known: [client 144.76.19.72:48388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:11.451343 2026] [ssl:error] [pid 2604294:tid 2604294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:11.514545 2026] [ssl:error] [pid 2606605:tid 2606605] (EAI 2)Name or service not known: [client 144.76.19.72:48402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:11.514572 2026] [ssl:error] [pid 2606605:tid 2606605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:12.830583 2026] [security2:error] [pid 2598656:tid 2598656] [client 101.47.24.4:28619] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOoGAcjAs02iliG-Nu0AAAABs"]
[Thu Jul 30 09:43:12.830642 2026] [security2:error] [pid 2598656:tid 2598656] [client 101.47.24.4:28619] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOoGAcjAs02iliG-Nu0AAAABs"]
[Thu Jul 30 09:43:12.830888 2026] [security2:error] [pid 2598656:tid 2598656] [client 101.47.24.4:28619] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOoGAcjAs02iliG-Nu0AAAABs"]
[Thu Jul 30 09:43:13.213712 2026] [authz_core:error] [pid 2596515:tid 2596515] [client 57.141.0.25:35788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:13.214339 2026] [authz_core:error] [pid 2596515:tid 2596515] [client 57.141.0.25:35788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:14.571336 2026] [ssl:error] [pid 2606530:tid 2606530] (EAI 2)Name or service not known: [client 144.76.19.72:48410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:14.571362 2026] [ssl:error] [pid 2606530:tid 2606530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:14.624531 2026] [ssl:error] [pid 2604294:tid 2604294] (EAI 2)Name or service not known: [client 144.76.19.72:48412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:14.624559 2026] [ssl:error] [pid 2604294:tid 2604294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:15.635943 2026] [security2:error] [pid 2595204:tid 2595204] [client 202.91.43.92:57700] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOowbnr26yXB21sYjCjwAAAAc"]
[Thu Jul 30 09:43:15.635999 2026] [security2:error] [pid 2595204:tid 2595204] [client 202.91.43.92:57700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOowbnr26yXB21sYjCjwAAAAc"]
[Thu Jul 30 09:43:15.636264 2026] [security2:error] [pid 2595204:tid 2595204] [client 202.91.43.92:57700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOowbnr26yXB21sYjCjwAAAAc"]
[Thu Jul 30 09:43:17.174361 2026] [core:error] [pid 2608021:tid 2608021] [client 158.158.76.106:14982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:17.174384 2026] [core:error] [pid 2608021:tid 2608021] [client 158.158.76.106:14982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:17.679023 2026] [ssl:error] [pid 2608772:tid 2608772] (EAI 2)Name or service not known: [client 144.76.19.72:48414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:17.679056 2026] [ssl:error] [pid 2608772:tid 2608772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:17.735548 2026] [ssl:error] [pid 2604294:tid 2604294] (EAI 2)Name or service not known: [client 144.76.19.72:48418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:17.735574 2026] [ssl:error] [pid 2604294:tid 2604294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:19.498433 2026] [security2:error] [pid 2603587:tid 2603587] [client 191.84.253.112:45052] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOp9zaWaAc3WnkM18r3AAAAAI"]
[Thu Jul 30 09:43:19.498479 2026] [security2:error] [pid 2603587:tid 2603587] [client 191.84.253.112:45052] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsOp9zaWaAc3WnkM18r3AAAAAI"]
[Thu Jul 30 09:43:19.498732 2026] [security2:error] [pid 2603587:tid 2603587] [client 191.84.253.112:45052] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsOp9zaWaAc3WnkM18r3AAAAAI"]
[Thu Jul 30 09:43:20.808417 2026] [ssl:error] [pid 2606459:tid 2606459] (EAI 2)Name or service not known: [client 144.76.19.72:41570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:20.808447 2026] [ssl:error] [pid 2606459:tid 2606459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:20.864095 2026] [ssl:error] [pid 2606607:tid 2606607] (EAI 2)Name or service not known: [client 144.76.19.72:41578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:20.864122 2026] [ssl:error] [pid 2606607:tid 2606607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:20.946409 2026] [authz_core:error] [pid 2608772:tid 2608772] [client 82.102.18.190:34354] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 09:43:21.066855 2026] [security2:error] [pid 2601381:tid 2601381] [client 185.191.171.19:29736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9464.0/prev_next,next.html"] [unique_id "amsOqcqyuV3J8WlWcbYXBAAAAAw"]
[Thu Jul 30 09:43:21.182530 2026] [security2:error] [pid 2606607:tid 2606607] [client 185.191.171.15:43038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/12-week-glute-program-at-home"] [unique_id "amsOqUK77Yy0eYedWLlbdAAAACM"]
[Thu Jul 30 09:43:22.568244 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:4867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:22.568266 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:4867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:22.832198 2026] [cgi:error] [pid 2606530:tid 2606530] [client 216.73.216.163:3442] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/robots.txt
[Thu Jul 30 09:43:23.074119 2026] [cgi:error] [pid 2606530:tid 2606530] [client 216.73.216.163:3442] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/sitemap.xml
[Thu Jul 30 09:43:23.918999 2026] [ssl:error] [pid 2609812:tid 2609812] (EAI 2)Name or service not known: [client 144.76.19.72:41584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:23.919034 2026] [ssl:error] [pid 2609812:tid 2609812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:23.975188 2026] [ssl:error] [pid 2590232:tid 2590232] (EAI 2)Name or service not known: [client 144.76.19.72:41596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:23.975214 2026] [ssl:error] [pid 2590232:tid 2590232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:25.248534 2026] [authz_core:error] [pid 2609812:tid 2609812] [client 57.141.0.61:55192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:25.249286 2026] [authz_core:error] [pid 2609812:tid 2609812] [client 57.141.0.61:55192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:26.166364 2026] [security2:error] [pid 2596515:tid 2596515] [client 43.165.197.116:46630] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.maisongerlyn.be"] [uri "/"] [unique_id "amsOrgZzu-nhBfCDajx5IwAAABw"]
[Thu Jul 30 09:43:26.218639 2026] [core:error] [pid 2610041:tid 2610041] [client 158.158.76.106:4886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:26.218681 2026] [core:error] [pid 2610041:tid 2610041] [client 158.158.76.106:4886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:27.028629 2026] [ssl:error] [pid 2608126:tid 2608126] (EAI 2)Name or service not known: [client 144.76.19.72:41600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:27.028660 2026] [ssl:error] [pid 2608126:tid 2608126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:27.084987 2026] [ssl:error] [pid 2609812:tid 2609812] (EAI 2)Name or service not known: [client 144.76.19.72:41608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:27.085010 2026] [ssl:error] [pid 2609812:tid 2609812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:27.566193 2026] [core:error] [pid 2606459:tid 2606459] [client 158.158.76.106:7180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:27.566217 2026] [core:error] [pid 2606459:tid 2606459] [client 158.158.76.106:7180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:28.617714 2026] [authz_core:error] [pid 2592187:tid 2592187] [client 57.141.0.3:36196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:28.618342 2026] [authz_core:error] [pid 2592187:tid 2592187] [client 57.141.0.3:36196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:30.142532 2026] [ssl:error] [pid 2608126:tid 2608126] (EAI 2)Name or service not known: [client 144.76.19.72:29320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:30.142571 2026] [ssl:error] [pid 2608126:tid 2608126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:30.199941 2026] [ssl:error] [pid 2603587:tid 2603587] (EAI 2)Name or service not known: [client 144.76.19.72:29330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:30.199965 2026] [ssl:error] [pid 2603587:tid 2603587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:30.304849 2026] [core:error] [pid 2592114:tid 2592114] [client 66.249.64.172:49547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:30.304874 2026] [core:error] [pid 2592114:tid 2592114] [client 66.249.64.172:49547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:32.308947 2026] [core:error] [pid 2604294:tid 2604294] [client 158.158.76.106:46213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:32.308969 2026] [core:error] [pid 2604294:tid 2604294] [client 158.158.76.106:46213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:33.253417 2026] [ssl:error] [pid 2610001:tid 2610001] (EAI 2)Name or service not known: [client 144.76.19.72:29340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:33.253452 2026] [ssl:error] [pid 2610001:tid 2610001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:33.308580 2026] [ssl:error] [pid 2609881:tid 2609881] (EAI 2)Name or service not known: [client 144.76.19.72:29356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:33.308624 2026] [ssl:error] [pid 2609881:tid 2609881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:33.311986 2026] [security2:error] [pid 2608126:tid 2608126] [client 185.191.171.13:21212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11454.0.html"] [unique_id "amsOtXqNzXqO8-Q0B3QhnAAAABA"]
[Thu Jul 30 09:43:33.943024 2026] [security2:error] [pid 2606608:tid 2606608] [client 170.106.140.110:60506] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "amsOtZNoDjQk6Ci_kqXvMQAAACQ"]
[Thu Jul 30 09:43:34.442613 2026] [access_compat:error] [pid 2610001:tid 2610001] [client 45.158.164.139:43840] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:43:35.282312 2026] [core:error] [pid 2610041:tid 2610041] [client 158.158.76.106:7069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:35.282349 2026] [core:error] [pid 2610041:tid 2610041] [client 158.158.76.106:7069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:36.364383 2026] [ssl:error] [pid 2601381:tid 2601381] (EAI 2)Name or service not known: [client 144.76.19.72:29372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:36.364413 2026] [ssl:error] [pid 2601381:tid 2601381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:36.422112 2026] [ssl:error] [pid 2610041:tid 2610041] (EAI 2)Name or service not known: [client 144.76.19.72:29374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:36.422143 2026] [ssl:error] [pid 2610041:tid 2610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:36.565692 2026] [security2:error] [pid 2599838:tid 2599838] [client 170.106.140.110:33452] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsOuC9fjxCSZm_71fRhqAAAAC8"], referer: http://the-pryors.co.uk
[Thu Jul 30 09:43:38.041775 2026] [security2:error] [pid 2595204:tid 2595204] [client 43.165.197.116:38258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsOugbnr26yXB21sYjClgAAAAc"], referer: http://www.maisongerlyn.be
[Thu Jul 30 09:43:39.315970 2026] [security2:error] [pid 2608126:tid 2608126] [client 181.50.156.137:48682] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOu3qNzXqO8-Q0B3QhngAAABA"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:39.316427 2026] [security2:error] [pid 2608126:tid 2608126] [client 181.50.156.137:48682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOu3qNzXqO8-Q0B3QhngAAABA"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:39.316642 2026] [security2:error] [pid 2608126:tid 2608126] [client 181.50.156.137:48682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOu3qNzXqO8-Q0B3QhngAAABA"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:39.550988 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:29378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:39.551033 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:39.726294 2026] [authz_core:error] [pid 2610779:tid 2610779] [client 57.141.0.6:20052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:39.726945 2026] [authz_core:error] [pid 2610779:tid 2610779] [client 57.141.0.6:20052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:39.851501 2026] [ssl:error] [pid 2610779:tid 2610779] (EAI 2)Name or service not known: [client 144.76.19.72:54958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:39.851532 2026] [ssl:error] [pid 2610779:tid 2610779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:40.760353 2026] [cgi:error] [pid 2606531:tid 2606531] [client 20.48.234.177:29614] AH02812: stderr from /home/wmsfirea/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:43:41.792249 2026] [core:error] [pid 2598656:tid 2598656] (13)Permission denied: [client 216.73.216.199:52398] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/butteredcat.com.db
[Thu Jul 30 09:43:42.480681 2026] [core:error] [pid 2610875:tid 2610875] [client 158.158.76.106:35193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:42.480726 2026] [core:error] [pid 2610875:tid 2610875] [client 158.158.76.106:35193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:42.909580 2026] [ssl:error] [pid 2606607:tid 2606607] (EAI 2)Name or service not known: [client 144.76.19.72:54966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:42.909614 2026] [ssl:error] [pid 2606607:tid 2606607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:42.966416 2026] [ssl:error] [pid 2604891:tid 2604891] (EAI 2)Name or service not known: [client 144.76.19.72:54978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:42.966440 2026] [ssl:error] [pid 2604891:tid 2604891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:43.225828 2026] [core:error] [pid 2608775:tid 2608775] [client 158.158.76.106:46254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:43.225875 2026] [core:error] [pid 2608775:tid 2608775] [client 158.158.76.106:46254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:43.482694 2026] [core:error] [pid 2604891:tid 2604891] [client 158.158.76.106:7086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:43.482730 2026] [core:error] [pid 2604891:tid 2604891] [client 158.158.76.106:7086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:43.890528 2026] [authz_core:error] [pid 2610041:tid 2610041] [client 57.141.0.23:31272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:43.891222 2026] [authz_core:error] [pid 2610041:tid 2610041] [client 57.141.0.23:31272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:44.695234 2026] [authz_core:error] [pid 2610876:tid 2610876] [client 20.9.4.9:11078] AH01630: client denied by server configuration: /home/redsocks/public_html/php.ini
[Thu Jul 30 09:43:45.317099 2026] [security2:error] [pid 2610041:tid 2610041] [client 85.221.150.94:32231] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOwYDttqNwiOZkZrqTSAAAABo"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:45.317676 2026] [security2:error] [pid 2610041:tid 2610041] [client 85.221.150.94:32231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOwYDttqNwiOZkZrqTSAAAABo"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:45.317930 2026] [security2:error] [pid 2610041:tid 2610041] [client 85.221.150.94:32231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOwYDttqNwiOZkZrqTSAAAABo"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:45.596699 2026] [core:error] [pid 2599713:tid 2599713] [client 66.249.64.171:38082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:45.596735 2026] [core:error] [pid 2599713:tid 2599713] [client 66.249.64.171:38082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:46.019847 2026] [ssl:error] [pid 2592187:tid 2592187] (EAI 2)Name or service not known: [client 144.76.19.72:54994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:46.019891 2026] [ssl:error] [pid 2592187:tid 2592187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:46.076529 2026] [ssl:error] [pid 2610041:tid 2610041] (EAI 2)Name or service not known: [client 144.76.19.72:54998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:46.076558 2026] [ssl:error] [pid 2610041:tid 2610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:47.774956 2026] [security2:error] [pid 2604891:tid 2604891] [client 124.6.227.7:53414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOwy0utnHKXux_B5eeRgAAADQ"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:47.775436 2026] [security2:error] [pid 2604891:tid 2604891] [client 124.6.227.7:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOwy0utnHKXux_B5eeRgAAADQ"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:47.775640 2026] [security2:error] [pid 2604891:tid 2604891] [client 124.6.227.7:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amsOwy0utnHKXux_B5eeRgAAADQ"], referer: http://kinesiologylondon.co.uk
[Thu Jul 30 09:43:49.152712 2026] [ssl:error] [pid 2608126:tid 2608126] (EAI 2)Name or service not known: [client 144.76.19.72:55012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:49.152754 2026] [ssl:error] [pid 2608126:tid 2608126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:49.208853 2026] [ssl:error] [pid 2609921:tid 2609921] (EAI 2)Name or service not known: [client 144.76.19.72:55020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:49.208893 2026] [ssl:error] [pid 2609921:tid 2609921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:49.457553 2026] [core:error] [pid 2604891:tid 2604891] [client 158.158.76.106:7083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:49.457580 2026] [core:error] [pid 2604891:tid 2604891] [client 158.158.76.106:7083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:51.354880 2026] [core:error] [pid 2608772:tid 2608772] [client 158.158.76.106:7087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:51.354918 2026] [core:error] [pid 2608772:tid 2608772] [client 158.158.76.106:7087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:51.716311 2026] [authz_core:error] [pid 2610874:tid 2610874] [client 57.141.0.11:37686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:51.716937 2026] [authz_core:error] [pid 2610874:tid 2610874] [client 57.141.0.11:37686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:52.264666 2026] [ssl:error] [pid 2592114:tid 2592114] (EAI 2)Name or service not known: [client 144.76.19.72:31584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:52.264697 2026] [ssl:error] [pid 2592114:tid 2592114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:52.317915 2026] [ssl:error] [pid 2608772:tid 2608772] (EAI 2)Name or service not known: [client 144.76.19.72:31592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:52.317964 2026] [ssl:error] [pid 2608772:tid 2608772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:54.049167 2026] [security2:error] [pid 2608716:tid 2608716] [client 49.232.104.223:51444] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.com"] [uri "/"] [unique_id "amsOynp8QyQMxYfaFUSR9QAAAC0"]
[Thu Jul 30 09:43:54.542660 2026] [authz_core:error] [pid 2604712:tid 2604712] [client 57.141.0.42:49382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:43:54.543287 2026] [authz_core:error] [pid 2604712:tid 2604712] [client 57.141.0.42:49382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:43:55.372455 2026] [ssl:error] [pid 2609812:tid 2609812] (EAI 2)Name or service not known: [client 144.76.19.72:31596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:55.372488 2026] [ssl:error] [pid 2609812:tid 2609812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:55.427427 2026] [ssl:error] [pid 2606608:tid 2606608] (EAI 2)Name or service not known: [client 144.76.19.72:31606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:55.427478 2026] [ssl:error] [pid 2606608:tid 2606608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:56.439921 2026] [core:error] [pid 2606459:tid 2606459] [client 158.158.76.106:46210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:56.439946 2026] [core:error] [pid 2606459:tid 2606459] [client 158.158.76.106:46210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:43:58.516110 2026] [ssl:error] [pid 2610874:tid 2610874] (EAI 2)Name or service not known: [client 144.76.19.72:31608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:58.516149 2026] [ssl:error] [pid 2610874:tid 2610874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:43:58.572415 2026] [ssl:error] [pid 2599793:tid 2599793] (EAI 2)Name or service not known: [client 144.76.19.72:31618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:43:58.572449 2026] [ssl:error] [pid 2599793:tid 2599793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:01.625048 2026] [ssl:error] [pid 2610041:tid 2610041] (EAI 2)Name or service not known: [client 144.76.19.72:42442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:01.625084 2026] [ssl:error] [pid 2610041:tid 2610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:01.679378 2026] [ssl:error] [pid 2604401:tid 2604401] (EAI 2)Name or service not known: [client 144.76.19.72:42446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:01.679411 2026] [ssl:error] [pid 2604401:tid 2604401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:02.151823 2026] [authz_core:error] [pid 2604294:tid 2604294] [client 82.102.18.190:41476] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sodium_compat/namespaced/error_log
[Thu Jul 30 09:44:02.389901 2026] [core:error] [pid 2604401:tid 2604401] [client 66.249.64.171:64518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:02.389925 2026] [core:error] [pid 2604401:tid 2604401] [client 66.249.64.171:64518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:02.808307 2026] [security2:error] [pid 2610568:tid 2610568] [client 51.68.236.114:26881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "juliaashmore.org"] [uri "/robots.txt"] [unique_id "amsO0kP95OIjrcgURqmcCAAAACk"]
[Thu Jul 30 09:44:04.735109 2026] [ssl:error] [pid 2610876:tid 2610876] (EAI 2)Name or service not known: [client 144.76.19.72:42448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:04.735161 2026] [ssl:error] [pid 2610876:tid 2610876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:04.790142 2026] [ssl:error] [pid 2608772:tid 2608772] (EAI 2)Name or service not known: [client 144.76.19.72:42464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:04.790189 2026] [ssl:error] [pid 2608772:tid 2608772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:05.660454 2026] [authz_core:error] [pid 2610041:tid 2610041] [client 57.141.0.12:61314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:05.661098 2026] [authz_core:error] [pid 2610041:tid 2610041] [client 57.141.0.12:61314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:06.610247 2026] [core:error] [pid 2592114:tid 2592114] [client 158.158.76.106:7095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:06.610270 2026] [core:error] [pid 2592114:tid 2592114] [client 158.158.76.106:7095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:07.842940 2026] [ssl:error] [pid 2601439:tid 2601439] (EAI 2)Name or service not known: [client 144.76.19.72:42470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:07.842970 2026] [ssl:error] [pid 2601439:tid 2601439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:07.898607 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:42480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:07.898635 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:08.821191 2026] [core:error] [pid 2608126:tid 2608126] [client 158.158.76.106:7059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:08.821230 2026] [core:error] [pid 2608126:tid 2608126] [client 158.158.76.106:7059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:10.561509 2026] [core:error] [pid 2610566:tid 2610566] [client 158.158.76.106:65054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:10.561536 2026] [core:error] [pid 2610566:tid 2610566] [client 158.158.76.106:65054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:10.956019 2026] [ssl:error] [pid 2604712:tid 2604712] (EAI 2)Name or service not known: [client 144.76.19.72:55734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:10.956058 2026] [ssl:error] [pid 2604712:tid 2604712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:11.011143 2026] [ssl:error] [pid 2610566:tid 2610566] (EAI 2)Name or service not known: [client 144.76.19.72:55744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:11.011172 2026] [ssl:error] [pid 2610566:tid 2610566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:11.299994 2026] [authz_core:error] [pid 2610779:tid 2610779] [client 57.141.0.4:42096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:11.300723 2026] [authz_core:error] [pid 2610779:tid 2610779] [client 57.141.0.4:42096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:12.832391 2026] [access_compat:error] [pid 2610566:tid 2610566] [client 2.189.5.162:51780] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:44:13.062887 2026] [core:error] [pid 2606531:tid 2606531] [client 158.158.76.106:4875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:13.062931 2026] [core:error] [pid 2606531:tid 2606531] [client 158.158.76.106:4875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:14.067843 2026] [ssl:error] [pid 2608716:tid 2608716] (EAI 2)Name or service not known: [client 144.76.19.72:55754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:14.067897 2026] [ssl:error] [pid 2608716:tid 2608716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:14.121516 2026] [ssl:error] [pid 2610566:tid 2610566] (EAI 2)Name or service not known: [client 144.76.19.72:55770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:14.121553 2026] [ssl:error] [pid 2610566:tid 2610566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:17.006760 2026] [cgi:error] [pid 2606531:tid 2606531] [client 199.45.155.105:59554] AH02812: stderr from /home/pstudioc/public_html/yorkguitarworkshop.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://mail.yorkguitarworkshop.co.uk:80/cgi-bin
[Thu Jul 30 09:44:17.176047 2026] [ssl:error] [pid 2610566:tid 2610566] (EAI 2)Name or service not known: [client 144.76.19.72:55778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:17.176099 2026] [ssl:error] [pid 2610566:tid 2610566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:17.231804 2026] [ssl:error] [pid 2610779:tid 2610779] (EAI 2)Name or service not known: [client 144.76.19.72:55784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:17.231841 2026] [ssl:error] [pid 2610779:tid 2610779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:19.135014 2026] [core:error] [pid 2611844:tid 2611844] [client 158.158.76.106:24588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:19.135054 2026] [core:error] [pid 2611844:tid 2611844] [client 158.158.76.106:24588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:19.165955 2026] [authz_core:error] [pid 2599713:tid 2599713] [client 57.141.0.62:31250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:19.166607 2026] [authz_core:error] [pid 2599713:tid 2599713] [client 57.141.0.62:31250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:19.724861 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 66.249.66.33:47737] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:44:19.727568 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 66.249.66.33:47737] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:44:20.288980 2026] [ssl:error] [pid 2610874:tid 2610874] (EAI 2)Name or service not known: [client 144.76.19.72:35188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:20.289006 2026] [ssl:error] [pid 2610874:tid 2610874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:20.346510 2026] [ssl:error] [pid 2610874:tid 2610874] (EAI 2)Name or service not known: [client 144.76.19.72:35200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:20.346533 2026] [ssl:error] [pid 2610874:tid 2610874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:20.667805 2026] [security2:error] [pid 2599713:tid 2599713] [client 43.157.38.228:38890] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chrisdyble.com"] [uri "/"] [unique_id "amsO5AxQbXcbTQGaG-qlmAAAAAs"]
[Thu Jul 30 09:44:21.700860 2026] [security2:error] [pid 2610874:tid 2610874] [client 85.208.96.196:51668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/nightbot-blacklist-words-list"] [unique_id "amsO5Wdl972JiQszoodUqQAAADc"]
[Thu Jul 30 09:44:23.420331 2026] [ssl:error] [pid 2610042:tid 2610042] (EAI 2)Name or service not known: [client 144.76.19.72:35208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:23.420399 2026] [ssl:error] [pid 2610042:tid 2610042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:23.475115 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:35222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:23.475154 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:24.035288 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:4902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:24.035318 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:4902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:25.628277 2026] [security2:error] [pid 2596515:tid 2596515] [client 114.119.155.144:21617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15,18/request_format~html"] [unique_id "amsO6QZzu-nhBfCDajx5aAAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15/request_format~html
[Thu Jul 30 09:44:26.256478 2026] [authz_core:error] [pid 2612571:tid 2612571] [client 57.141.0.61:50442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:26.257126 2026] [authz_core:error] [pid 2612571:tid 2612571] [client 57.141.0.61:50442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:26.531977 2026] [ssl:error] [pid 2611881:tid 2611881] (EAI 2)Name or service not known: [client 144.76.19.72:35224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:26.532025 2026] [ssl:error] [pid 2611881:tid 2611881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:26.587201 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:35228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:26.587228 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:26.666378 2026] [security2:error] [pid 2611882:tid 2611882] [client 114.119.155.144:21633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15,18/request_format~html"] [unique_id "amsO6ghWMH-dftTwbQcEMwAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,15/request_format~html
[Thu Jul 30 09:44:29.644928 2026] [ssl:error] [pid 2599713:tid 2599713] (EAI 2)Name or service not known: [client 144.76.19.72:27620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:29.644980 2026] [ssl:error] [pid 2599713:tid 2599713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:29.698315 2026] [ssl:error] [pid 2611882:tid 2611882] (EAI 2)Name or service not known: [client 144.76.19.72:27626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:29.698371 2026] [ssl:error] [pid 2611882:tid 2611882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:29.715997 2026] [authz_core:error] [pid 2587287:tid 2587287] [client 57.141.0.27:33232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:29.716646 2026] [authz_core:error] [pid 2587287:tid 2587287] [client 57.141.0.27:33232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:30.615706 2026] [security2:error] [pid 2606531:tid 2606531] [client 47.128.24.76:55176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsO7ocJ5OfP9Nq4fCmPlAAAABU"]
[Thu Jul 30 09:44:32.754718 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:27638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:32.754757 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:32.810916 2026] [ssl:error] [pid 2610876:tid 2610876] (EAI 2)Name or service not known: [client 144.76.19.72:27640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:32.810948 2026] [ssl:error] [pid 2610876:tid 2610876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:32.839678 2026] [core:error] [pid 2592114:tid 2592114] [client 158.158.76.106:25463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:32.839702 2026] [core:error] [pid 2592114:tid 2592114] [client 158.158.76.106:25463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:33.547509 2026] [core:error] [pid 2610876:tid 2610876] [client 66.249.66.167:57822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:33.547538 2026] [core:error] [pid 2610876:tid 2610876] [client 66.249.66.167:57822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:35.869024 2026] [ssl:error] [pid 2608661:tid 2608661] (EAI 2)Name or service not known: [client 144.76.19.72:27656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:35.869119 2026] [ssl:error] [pid 2608661:tid 2608661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:35.924260 2026] [ssl:error] [pid 2592114:tid 2592114] (EAI 2)Name or service not known: [client 144.76.19.72:27662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:35.924283 2026] [ssl:error] [pid 2592114:tid 2592114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:36.338533 2026] [authz_core:error] [pid 2608126:tid 2608126] [client 57.141.0.13:48292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:36.339192 2026] [authz_core:error] [pid 2608126:tid 2608126] [client 57.141.0.13:48292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:36.646519 2026] [cgi:error] [pid 2604712:tid 2604712] [client 52.238.192.78:9590] AH02812: stderr from /home/stadiumd/wartypig.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:44:38.348856 2026] [security2:error] [pid 2609812:tid 2609812] [client 43.157.82.252:55406] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amsO9irUFJb_LMVx3oSZcwAAAAM"]
[Thu Jul 30 09:44:38.381279 2026] [core:error] [pid 2612418:tid 2612418] [client 191.232.199.39:24765] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:38.381305 2026] [core:error] [pid 2612418:tid 2612418] [client 191.232.199.39:24765] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:38.391656 2026] [core:error] [pid 2610834:tid 2610834] [client 158.158.76.106:46245] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:38.391687 2026] [core:error] [pid 2610834:tid 2610834] [client 158.158.76.106:46245] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:38.981358 2026] [ssl:error] [pid 2610042:tid 2610042] (EAI 2)Name or service not known: [client 144.76.19.72:27676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:38.981397 2026] [ssl:error] [pid 2610042:tid 2610042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:39.037420 2026] [ssl:error] [pid 2609812:tid 2609812] (EAI 2)Name or service not known: [client 144.76.19.72:27684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:39.037447 2026] [ssl:error] [pid 2609812:tid 2609812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:39.187890 2026] [access_compat:error] [pid 2606608:tid 2606608] [client 191.232.199.39:25055] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/av.php
[Thu Jul 30 09:44:39.188306 2026] [core:error] [pid 2606608:tid 2606608] [client 191.232.199.39:25055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:39.219961 2026] [security2:error] [pid 2608126:tid 2608126] [client 43.157.82.252:39608] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amsO93qNzXqO8-Q0B3QhugAAABA"], referer: http://glottalstop.co.uk
[Thu Jul 30 09:44:40.818125 2026] [access_compat:error] [pid 2599713:tid 2599713] [client 191.232.199.39:25079] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/mini.php
[Thu Jul 30 09:44:40.818482 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:25079] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:40.985939 2026] [authz_core:error] [pid 2599796:tid 2599796] [client 57.141.0.50:27844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:40.986572 2026] [authz_core:error] [pid 2599796:tid 2599796] [client 57.141.0.50:27844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:41.819375 2026] [access_compat:error] [pid 2601439:tid 2601439] [client 191.232.199.39:24746] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/aa.php
[Thu Jul 30 09:44:41.819730 2026] [core:error] [pid 2601439:tid 2601439] [client 191.232.199.39:24746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:42.137839 2026] [ssl:error] [pid 2612418:tid 2612418] (EAI 2)Name or service not known: [client 144.76.19.72:43102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:42.137872 2026] [ssl:error] [pid 2612418:tid 2612418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:42.189627 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:43114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:42.189652 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:42.601633 2026] [access_compat:error] [pid 2612418:tid 2612418] [client 191.232.199.39:25062] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/w.php
[Thu Jul 30 09:44:42.601986 2026] [core:error] [pid 2612418:tid 2612418] [client 191.232.199.39:25062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:43.485434 2026] [security2:error] [pid 2610874:tid 2610874] [client 66.9.160.91:49660] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsO-2dl972JiQszoodUsQAAADc"]
[Thu Jul 30 09:44:43.485491 2026] [security2:error] [pid 2610874:tid 2610874] [client 66.9.160.91:49660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsO-2dl972JiQszoodUsQAAADc"]
[Thu Jul 30 09:44:43.485762 2026] [security2:error] [pid 2610874:tid 2610874] [client 66.9.160.91:49660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsO-2dl972JiQszoodUsQAAADc"]
[Thu Jul 30 09:44:43.757853 2026] [core:error] [pid 2610876:tid 2610876] [client 191.232.199.39:24707] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:43.757883 2026] [core:error] [pid 2610876:tid 2610876] [client 191.232.199.39:24707] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:44.163378 2026] [core:crit] [pid 2609881:tid 2609881] (13)Permission denied: [client 40.77.167.55:56920] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:44:44.862233 2026] [core:error] [pid 2603587:tid 2603587] [client 191.232.199.39:25061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:44.862258 2026] [core:error] [pid 2603587:tid 2603587] [client 191.232.199.39:25061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:45.122403 2026] [security2:error] [pid 2608554:tid 2608554] [client 190.92.6.247:63234] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsO_cXI2yH6bE9HuWnBHQAAAB8"]
[Thu Jul 30 09:44:45.122455 2026] [security2:error] [pid 2608554:tid 2608554] [client 190.92.6.247:63234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsO_cXI2yH6bE9HuWnBHQAAAB8"]
[Thu Jul 30 09:44:45.122754 2026] [security2:error] [pid 2608554:tid 2608554] [client 190.92.6.247:63234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsO_cXI2yH6bE9HuWnBHQAAAB8"]
[Thu Jul 30 09:44:45.284714 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:43122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:45.284762 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:45.340677 2026] [ssl:error] [pid 2613388:tid 2613388] (EAI 2)Name or service not known: [client 144.76.19.72:43138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:45.340732 2026] [ssl:error] [pid 2613388:tid 2613388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:45.447511 2026] [core:error] [pid 2606608:tid 2606608] [client 158.158.76.106:25469] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:45.447537 2026] [core:error] [pid 2606608:tid 2606608] [client 158.158.76.106:25469] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:45.693141 2026] [access_compat:error] [pid 2610518:tid 2610518] [client 191.232.199.39:42564] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/m.php
[Thu Jul 30 09:44:45.693531 2026] [core:error] [pid 2610518:tid 2610518] [client 191.232.199.39:42564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:46.436953 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:21272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:46.436977 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:21272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:46.865491 2026] [core:error] [pid 2606608:tid 2606608] [client 191.232.199.39:25042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:46.865517 2026] [core:error] [pid 2606608:tid 2606608] [client 191.232.199.39:25042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:47.226259 2026] [core:error] [pid 2603587:tid 2603587] [client 158.158.76.106:43565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:47.226298 2026] [core:error] [pid 2603587:tid 2603587] [client 158.158.76.106:43565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:48.087439 2026] [core:error] [pid 2603587:tid 2603587] [client 191.232.199.39:42600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:48.087467 2026] [core:error] [pid 2603587:tid 2603587] [client 191.232.199.39:42600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:48.396063 2026] [ssl:error] [pid 2613316:tid 2613316] (EAI 2)Name or service not known: [client 144.76.19.72:43162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:48.396109 2026] [ssl:error] [pid 2613316:tid 2613316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:48.450880 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:43178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:48.450905 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:48.490700 2026] [security2:error] [pid 2608716:tid 2608716] [client 5.38.8.166:26710] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPAHp8QyQMxYfaFUSSEQAAAC0"]
[Thu Jul 30 09:44:48.490754 2026] [security2:error] [pid 2608716:tid 2608716] [client 5.38.8.166:26710] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPAHp8QyQMxYfaFUSSEQAAAC0"]
[Thu Jul 30 09:44:48.491056 2026] [security2:error] [pid 2608716:tid 2608716] [client 5.38.8.166:26710] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPAHp8QyQMxYfaFUSSEQAAAC0"]
[Thu Jul 30 09:44:49.050909 2026] [access_compat:error] [pid 2606531:tid 2606531] [client 191.232.199.39:24715] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/classwithtostring.php
[Thu Jul 30 09:44:49.051274 2026] [core:error] [pid 2606531:tid 2606531] [client 191.232.199.39:24715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:50.083554 2026] [access_compat:error] [pid 2610874:tid 2610874] [client 191.232.199.39:25073] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/gmo.php
[Thu Jul 30 09:44:50.083910 2026] [core:error] [pid 2610874:tid 2610874] [client 191.232.199.39:25073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:50.389222 2026] [security2:error] [pid 2608554:tid 2608554] [client 35.236.211.174:10240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/"] [unique_id "amsPAsXI2yH6bE9HuWnBIgAAAB8"]
[Thu Jul 30 09:44:50.637287 2026] [core:error] [pid 2609812:tid 2609812] [client 66.249.64.170:46617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:50.637313 2026] [core:error] [pid 2609812:tid 2609812] [client 66.249.64.170:46617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:50.896132 2026] [core:error] [pid 2604294:tid 2604294] [client 191.232.199.39:24730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:50.896166 2026] [core:error] [pid 2604294:tid 2604294] [client 191.232.199.39:24730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:51.052744 2026] [security2:error] [pid 2599793:tid 2599793] [client 35.236.211.174:10241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "amsPAxPZ8UgunnLPI9rq_AAAACc"], referer: https://shelterforum.info/
[Thu Jul 30 09:44:51.176307 2026] [core:error] [pid 2603587:tid 2603587] [client 158.158.76.106:6703] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:51.176334 2026] [core:error] [pid 2603587:tid 2603587] [client 158.158.76.106:6703] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:51.505625 2026] [ssl:error] [pid 2610041:tid 2610041] (EAI 2)Name or service not known: [client 144.76.19.72:50900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:51.505650 2026] [ssl:error] [pid 2610041:tid 2610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:51.557163 2026] [ssl:error] [pid 2608716:tid 2608716] (EAI 2)Name or service not known: [client 144.76.19.72:50914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:51.557199 2026] [ssl:error] [pid 2608716:tid 2608716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:51.706522 2026] [access_compat:error] [pid 2613383:tid 2613383] [client 191.232.199.39:42567] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-the.php
[Thu Jul 30 09:44:51.706896 2026] [core:error] [pid 2613383:tid 2613383] [client 191.232.199.39:42567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:53.670942 2026] [security2:error] [pid 2612418:tid 2612418] [client 43.161.234.148:52924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-london.com"] [uri "/"] [unique_id "amsPBUjI-5HyTSsMagLyqQAAAA8"]
[Thu Jul 30 09:44:54.000058 2026] [access_compat:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24726] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/404.php
[Thu Jul 30 09:44:54.000446 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:54.046054 2026] [authz_core:error] [pid 2606459:tid 2606459] [client 57.141.0.12:28976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:54.046693 2026] [authz_core:error] [pid 2606459:tid 2606459] [client 57.141.0.12:28976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:54.500812 2026] [core:error] [pid 2604712:tid 2604712] [client 158.158.76.106:6897] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:54.500835 2026] [core:error] [pid 2604712:tid 2604712] [client 158.158.76.106:6897] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:54.634985 2026] [ssl:error] [pid 2610874:tid 2610874] (EAI 2)Name or service not known: [client 144.76.19.72:50924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:54.635017 2026] [ssl:error] [pid 2610874:tid 2610874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:54.690850 2026] [ssl:error] [pid 2613387:tid 2613387] (EAI 2)Name or service not known: [client 144.76.19.72:50936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:54.690879 2026] [ssl:error] [pid 2613387:tid 2613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:55.181011 2026] [security2:error] [pid 2611881:tid 2611881] [client 43.161.234.148:55506] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsPByq8zjkVEUe5vAqYHAAAAAo"], referer: http://kinesiology-london.com
[Thu Jul 30 09:44:55.183034 2026] [authz_core:error] [pid 2611881:tid 2611881] [client 43.161.234.148:55506] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-london.com
[Thu Jul 30 09:44:55.185752 2026] [authz_core:error] [pid 2611881:tid 2611881] [client 43.161.234.148:55506] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-london.com
[Thu Jul 30 09:44:55.193686 2026] [access_compat:error] [pid 2606459:tid 2606459] [client 191.232.199.39:25056] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/init.php
[Thu Jul 30 09:44:55.194038 2026] [core:error] [pid 2606459:tid 2606459] [client 191.232.199.39:25056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:56.171986 2026] [security2:error] [pid 2613316:tid 2613316] [client 183.87.96.120:45815] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "georgehotelofstamford.com"] [uri "/terms-and-conditions"] [unique_id "amsPCMUZCOxC00SIVBkOPQAAABY"], referer: https://georgehotelofstamford.com/
[Thu Jul 30 09:44:56.555496 2026] [access_compat:error] [pid 2613387:tid 2613387] [client 191.232.199.39:24736] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/file5.php
[Thu Jul 30 09:44:56.555840 2026] [core:error] [pid 2613387:tid 2613387] [client 191.232.199.39:24736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:57.252162 2026] [security2:error] [pid 2613387:tid 2613387] [client 42.201.192.30:35732] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/terms-and-conditions"] [unique_id "amsPCWKsDV14BtvjfsBDSAAAAB0"], referer: https://georgehotelofstamford.com/
[Thu Jul 30 09:44:57.415542 2026] [core:error] [pid 2608716:tid 2608716] [client 191.232.199.39:25034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:57.415567 2026] [core:error] [pid 2608716:tid 2608716] [client 191.232.199.39:25034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:57.479372 2026] [security2:error] [pid 2599796:tid 2599796] [client 43.157.95.131:44328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchlingfair.com"] [uri "/"] [unique_id "amsPCZhmuqAj2RVSY7okpQAAACw"]
[Thu Jul 30 09:44:57.746922 2026] [ssl:error] [pid 2610041:tid 2610041] (EAI 2)Name or service not known: [client 144.76.19.72:50946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:57.746945 2026] [ssl:error] [pid 2610041:tid 2610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:57.800103 2026] [ssl:error] [pid 2599755:tid 2599755] (EAI 2)Name or service not known: [client 144.76.19.72:50956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:44:57.800127 2026] [ssl:error] [pid 2599755:tid 2599755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:44:58.507459 2026] [access_compat:error] [pid 2613316:tid 2613316] [client 191.232.199.39:24732] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/shell.php
[Thu Jul 30 09:44:58.507836 2026] [core:error] [pid 2613316:tid 2613316] [client 191.232.199.39:24732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:59.362048 2026] [authz_core:error] [pid 2613316:tid 2613316] [client 57.141.0.38:33608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:59.362680 2026] [authz_core:error] [pid 2613316:tid 2613316] [client 57.141.0.38:33608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:44:59.601523 2026] [access_compat:error] [pid 2608717:tid 2608717] [client 191.232.199.39:24926] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/f35.php
[Thu Jul 30 09:44:59.601900 2026] [core:error] [pid 2608717:tid 2608717] [client 191.232.199.39:24926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:44:59.638667 2026] [authz_core:error] [pid 2613382:tid 2613382] [client 57.141.0.53:46840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:44:59.639295 2026] [authz_core:error] [pid 2613382:tid 2613382] [client 57.141.0.53:46840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:00.858474 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:46844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:00.858501 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:00.911192 2026] [ssl:error] [pid 2608717:tid 2608717] (EAI 2)Name or service not known: [client 144.76.19.72:46858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:00.911225 2026] [ssl:error] [pid 2608717:tid 2608717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:01.152504 2026] [access_compat:error] [pid 2606459:tid 2606459] [client 191.232.199.39:24896] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/new.php
[Thu Jul 30 09:45:01.152857 2026] [core:error] [pid 2606459:tid 2606459] [client 191.232.199.39:24896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:02.515682 2026] [access_compat:error] [pid 2614355:tid 2614355] [client 191.232.199.39:24957] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/adminfuns.php
[Thu Jul 30 09:45:02.516033 2026] [core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:24957] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:03.258296 2026] [core:error] [pid 2610042:tid 2610042] [client 191.232.199.39:25087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:03.258323 2026] [core:error] [pid 2610042:tid 2610042] [client 191.232.199.39:25087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:03.966700 2026] [ssl:error] [pid 2614355:tid 2614355] (EAI 2)Name or service not known: [client 144.76.19.72:46864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:03.966734 2026] [ssl:error] [pid 2614355:tid 2614355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:04.021808 2026] [ssl:error] [pid 2613387:tid 2613387] (EAI 2)Name or service not known: [client 144.76.19.72:46870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:04.021853 2026] [ssl:error] [pid 2613387:tid 2613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:06.618282 2026] [core:error] [pid 2614592:tid 2614592] [client 191.232.199.39:42576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:06.618327 2026] [core:error] [pid 2614592:tid 2614592] [client 191.232.199.39:42576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:07.074014 2026] [ssl:error] [pid 2614353:tid 2614353] (EAI 2)Name or service not known: [client 144.76.19.72:46880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:07.074046 2026] [ssl:error] [pid 2614353:tid 2614353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:07.127278 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:46892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:07.127306 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:07.541714 2026] [access_compat:error] [pid 2614592:tid 2614592] [client 191.232.199.39:24942] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/fm.php
[Thu Jul 30 09:45:07.542061 2026] [core:error] [pid 2614592:tid 2614592] [client 191.232.199.39:24942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:09.621604 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:09.621635 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:09.945799 2026] [core:error] [pid 2612418:tid 2612418] [client 66.249.64.172:57995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:09.945825 2026] [core:error] [pid 2612418:tid 2612418] [client 66.249.64.172:57995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:10.185817 2026] [ssl:error] [pid 2610876:tid 2610876] (EAI 2)Name or service not known: [client 144.76.19.72:63372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:10.185844 2026] [ssl:error] [pid 2610876:tid 2610876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:10.240534 2026] [ssl:error] [pid 2614353:tid 2614353] (EAI 2)Name or service not known: [client 144.76.19.72:63374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:10.240572 2026] [ssl:error] [pid 2614353:tid 2614353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:10.529842 2026] [access_compat:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24900] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/file.php
[Thu Jul 30 09:45:10.530190 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:11.493516 2026] [core:error] [pid 2613387:tid 2613387] [client 191.232.199.39:42580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:11.493541 2026] [core:error] [pid 2613387:tid 2613387] [client 191.232.199.39:42580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:12.464236 2026] [security2:error] [pid 2599755:tid 2599755] [client 37.237.165.116:8003] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPGJOtPcNxPRODY-TBkgAAACE"]
[Thu Jul 30 09:45:12.464291 2026] [security2:error] [pid 2599755:tid 2599755] [client 37.237.165.116:8003] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPGJOtPcNxPRODY-TBkgAAACE"]
[Thu Jul 30 09:45:12.464559 2026] [security2:error] [pid 2599755:tid 2599755] [client 37.237.165.116:8003] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPGJOtPcNxPRODY-TBkgAAACE"]
[Thu Jul 30 09:45:12.950410 2026] [access_compat:error] [pid 2610042:tid 2610042] [client 191.232.199.39:24950] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/bolt.php
[Thu Jul 30 09:45:12.950757 2026] [core:error] [pid 2610042:tid 2610042] [client 191.232.199.39:24950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:13.299385 2026] [ssl:error] [pid 2613382:tid 2613382] (EAI 2)Name or service not known: [client 144.76.19.72:63376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:13.299424 2026] [ssl:error] [pid 2613382:tid 2613382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:13.355879 2026] [ssl:error] [pid 2613262:tid 2613262] (EAI 2)Name or service not known: [client 144.76.19.72:63390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:13.355908 2026] [ssl:error] [pid 2613262:tid 2613262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:13.780800 2026] [access_compat:error] [pid 2604712:tid 2604712] [client 191.232.199.39:42569] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/3.php
[Thu Jul 30 09:45:13.781206 2026] [core:error] [pid 2604712:tid 2604712] [client 191.232.199.39:42569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:14.736151 2026] [security2:error] [pid 2610041:tid 2610041] [client 49.43.0.8:55771] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPGoDttqNwiOZkZrqTcwAAABo"]
[Thu Jul 30 09:45:14.736213 2026] [security2:error] [pid 2610041:tid 2610041] [client 49.43.0.8:55771] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPGoDttqNwiOZkZrqTcwAAABo"]
[Thu Jul 30 09:45:14.736540 2026] [security2:error] [pid 2610041:tid 2610041] [client 49.43.0.8:55771] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPGoDttqNwiOZkZrqTcwAAABo"]
[Thu Jul 30 09:45:15.203770 2026] [access_compat:error] [pid 2610834:tid 2610834] [client 191.232.199.39:24694] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/222.php
[Thu Jul 30 09:45:15.204152 2026] [core:error] [pid 2610834:tid 2610834] [client 191.232.199.39:24694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:15.699242 2026] [core:error] [pid 2614592:tid 2614592] [client 158.158.76.106:27647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:15.699266 2026] [core:error] [pid 2614592:tid 2614592] [client 158.158.76.106:27647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:15.734193 2026] [cgi:error] [pid 2608126:tid 2608126] [client 20.220.227.237:30928] AH01215: stderr from /home/inrcorgu/public_html/cgi-bin/index.html: suexec policy violation: see suexec log for more details
[Thu Jul 30 09:45:15.734242 2026] [cgi:error] [pid 2608126:tid 2608126] [client 20.220.227.237:30928] End of script output before headers: index.html
[Thu Jul 30 09:45:15.852533 2026] [authz_core:error] [pid 2610042:tid 2610042] [client 57.141.0.46:32462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:15.853167 2026] [authz_core:error] [pid 2610042:tid 2610042] [client 57.141.0.46:32462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:16.228061 2026] [core:error] [pid 2601439:tid 2601439] [client 191.232.199.39:24690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:16.228100 2026] [core:error] [pid 2601439:tid 2601439] [client 191.232.199.39:24690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:16.412852 2026] [ssl:error] [pid 2610041:tid 2610041] (EAI 2)Name or service not known: [client 144.76.19.72:63392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:16.412896 2026] [ssl:error] [pid 2610041:tid 2610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:16.467542 2026] [ssl:error] [pid 2614792:tid 2614792] (EAI 2)Name or service not known: [client 144.76.19.72:63396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:16.467573 2026] [ssl:error] [pid 2614792:tid 2614792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:17.055046 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:24652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:17.055085 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:24652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:18.312758 2026] [core:error] [pid 2599796:tid 2599796] [client 191.232.199.39:24922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:18.312800 2026] [core:error] [pid 2599796:tid 2599796] [client 191.232.199.39:24922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:18.478772 2026] [security2:error] [pid 2610041:tid 2610041] [client 102.66.181.227:7994] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPHoDttqNwiOZkZrqTeAAAABo"]
[Thu Jul 30 09:45:18.478818 2026] [security2:error] [pid 2610041:tid 2610041] [client 102.66.181.227:7994] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPHoDttqNwiOZkZrqTeAAAABo"]
[Thu Jul 30 09:45:18.479063 2026] [security2:error] [pid 2610041:tid 2610041] [client 102.66.181.227:7994] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPHoDttqNwiOZkZrqTeAAAABo"]
[Thu Jul 30 09:45:19.401651 2026] [core:error] [pid 2614353:tid 2614353] [client 158.158.76.106:51471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:19.401683 2026] [core:error] [pid 2614353:tid 2614353] [client 158.158.76.106:51471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:19.525192 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:63404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:19.525222 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:19.589465 2026] [ssl:error] [pid 2610874:tid 2610874] (EAI 2)Name or service not known: [client 144.76.19.72:21882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:19.589493 2026] [ssl:error] [pid 2610874:tid 2610874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:19.711466 2026] [core:error] [pid 2599796:tid 2599796] [client 191.232.199.39:24663] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:19.711494 2026] [core:error] [pid 2599796:tid 2599796] [client 191.232.199.39:24663] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:20.025738 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wk
[Thu Jul 30 09:45:20.070604 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 09:45:20.070659 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.102340 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/mini.php
[Thu Jul 30 09:45:20.102388 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.135219 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 09:45:20.135273 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.171802 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 09:45:20.171855 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.222984 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 09:45:20.223031 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.258338 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:20.289960 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/m.php
[Thu Jul 30 09:45:20.290010 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.322189 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:20.353725 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:20.385314 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 09:45:20.385362 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.467456 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/gmo.php
[Thu Jul 30 09:45:20.467503 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.498976 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:20.593807 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-the.php
[Thu Jul 30 09:45:20.593855 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.625832 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 09:45:20.625878 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.683325 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/init.php
[Thu Jul 30 09:45:20.683370 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.756617 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 09:45:20.756665 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.789824 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:20.823537 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/shell.php
[Thu Jul 30 09:45:20.823584 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.854972 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 09:45:20.855020 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.886692 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/new.php
[Thu Jul 30 09:45:20.886755 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:20.918374 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 09:45:20.918434 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.034677 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:21.065829 2026] [core:error] [pid 2610518:tid 2610518] [client 191.232.199.39:25355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:21.065867 2026] [core:error] [pid 2610518:tid 2610518] [client 191.232.199.39:25355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:21.087002 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.118902 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/fm.php
[Thu Jul 30 09:45:21.118962 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.150439 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 09:45:21.182576 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 09:45:21.182647 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.247552 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:21.281471 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/bolt.php
[Thu Jul 30 09:45:21.281524 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.314605 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/3.php
[Thu Jul 30 09:45:21.314655 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.346084 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 09:45:21.346135 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.377563 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:21.409425 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.440937 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.534837 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:21.566258 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-configs.php
[Thu Jul 30 09:45:21.566305 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.598765 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/php.php
[Thu Jul 30 09:45:21.598849 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.650159 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.681874 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:21.716745 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.748511 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.753719 2026] [access_compat:error] [pid 2610041:tid 2610041] [client 191.232.199.39:25369] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/php.php
[Thu Jul 30 09:45:21.754060 2026] [core:error] [pid 2610041:tid 2610041] [client 191.232.199.39:25369] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:21.804668 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.836487 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin.php
[Thu Jul 30 09:45:21.836551 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.868329 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/size.php
[Thu Jul 30 09:45:21.868390 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.900238 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:21.970676 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.php
[Thu Jul 30 09:45:21.970738 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:21.997605 2026] [authz_core:error] [pid 2614592:tid 2614592] [client 20.220.227.237:45439] AH01630: client denied by server configuration: /home/inrcorgu/public_html/php.ini
[Thu Jul 30 09:45:22.069739 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:22.101800 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 09:45:22.101870 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:22.158825 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:22.190389 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:22.278763 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins.php
[Thu Jul 30 09:45:22.278834 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:22.310454 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:22.372199 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/go.php
[Thu Jul 30 09:45:22.372247 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:22.449575 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/test1.php
[Thu Jul 30 09:45:22.449639 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:22.633518 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:22.636148 2026] [security2:error] [pid 2614353:tid 2614353] [client 185.191.171.4:56454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/ezra-lusk-net-worth"] [unique_id "amsPIkaZO7DYAHrrEu6ggwAAAAQ"]
[Thu Jul 30 09:45:22.677273 2026] [ssl:error] [pid 2613382:tid 2613382] (EAI 2)Name or service not known: [client 144.76.19.72:21892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:22.677311 2026] [ssl:error] [pid 2613382:tid 2613382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:22.707038 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 09:45:22.736547 2026] [ssl:error] [pid 2592114:tid 2592114] (EAI 2)Name or service not known: [client 144.76.19.72:21902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:22.736579 2026] [ssl:error] [pid 2592114:tid 2592114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:22.739452 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:22.782654 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/asd.php
[Thu Jul 30 09:45:22.782704 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:22.814625 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:22.846195 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:22.851627 2026] [security2:error] [pid 2599796:tid 2599796] [client 43.165.7.74:42810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-ganymede.com"] [uri "/"] [unique_id "amsPIphmuqAj2RVSY7oktwAAACw"]
[Thu Jul 30 09:45:22.878642 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/atomlib.php
[Thu Jul 30 09:45:22.878687 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:22.945054 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:23.006227 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:23.037704 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:23.088476 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:23.172913 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:23.219170 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:23.251429 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 09:45:23.251474 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:23.301895 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:23.335125 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:23.371655 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:23.416684 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/plugin.php
[Thu Jul 30 09:45:23.416730 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:23.482561 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 09:45:23.482624 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:23.514101 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 09:45:23.514148 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:23.545643 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:23.577648 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 09:45:23.577696 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:23.618545 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:23.652008 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:23.742257 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:23.773812 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:23.824100 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:23.846893 2026] [security2:error] [pid 2599713:tid 2599713] [client 74.7.227.186:42504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/"] [unique_id "amsPIwxQbXcbTQGaG-qlsQAAAAs"]
[Thu Jul 30 09:45:23.884739 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/index
[Thu Jul 30 09:45:23.980660 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:24.013432 2026] [authz_core:error] [pid 2610041:tid 2610041] [client 57.141.0.25:48660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:24.014056 2026] [authz_core:error] [pid 2610041:tid 2610041] [client 57.141.0.25:48660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:24.069758 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:24.090225 2026] [core:error] [pid 2592114:tid 2592114] [client 191.232.199.39:24662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:24.090247 2026] [core:error] [pid 2592114:tid 2592114] [client 191.232.199.39:24662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:24.102436 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 09:45:24.102491 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.207825 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/getid3-core.php
[Thu Jul 30 09:45:24.207873 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.239355 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/adminer.php
[Thu Jul 30 09:45:24.239402 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.275770 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:24.307393 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa.php
[Thu Jul 30 09:45:24.307439 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.339155 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:24.373972 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:24.405495 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:24.437265 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:24.468807 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 09:45:24.468856 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.500412 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:24.538535 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:24.570283 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/sf.php
[Thu Jul 30 09:45:24.570330 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.684250 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:24.715876 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/wso.php
[Thu Jul 30 09:45:24.715934 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.747437 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 09:45:24.747481 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.788464 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/file56.php
[Thu Jul 30 09:45:24.788510 2026] [access_compat:error] [pid 2603982:tid 2603982] [client 172.213.208.20:45579] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:24.830894 2026] [core:error] [pid 2595204:tid 2595204] [client 191.232.199.39:24911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:24.830916 2026] [core:error] [pid 2595204:tid 2595204] [client 191.232.199.39:24911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:25.124756 2026] [security2:error] [pid 2601439:tid 2601439] [client 111.230.233.46:41144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "curvmed.com"] [uri "/"] [unique_id "amsPJUdRN8TegeJhu_NQTAAAAA4"]
[Thu Jul 30 09:45:25.788779 2026] [core:error] [pid 2592114:tid 2592114] [client 191.232.199.39:24648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:25.788802 2026] [core:error] [pid 2592114:tid 2592114] [client 191.232.199.39:24648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:25.794569 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:21906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:25.794602 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:25.851946 2026] [ssl:error] [pid 2598654:tid 2598654] (EAI 2)Name or service not known: [client 144.76.19.72:21910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:25.851967 2026] [ssl:error] [pid 2598654:tid 2598654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:25.936724 2026] [authz_core:error] [pid 2613316:tid 2613316] [client 57.141.0.37:55384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:25.937348 2026] [authz_core:error] [pid 2613316:tid 2613316] [client 57.141.0.37:55384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:26.704863 2026] [core:error] [pid 2592114:tid 2592114] [client 66.249.64.170:39305] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:26.704894 2026] [core:error] [pid 2592114:tid 2592114] [client 66.249.64.170:39305] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:26.763762 2026] [core:error] [pid 2598654:tid 2598654] [client 191.232.199.39:25348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:26.763783 2026] [core:error] [pid 2598654:tid 2598654] [client 191.232.199.39:25348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:26.867409 2026] [authz_core:error] [pid 2614296:tid 2614296] [client 57.141.0.19:33322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:26.868033 2026] [authz_core:error] [pid 2614296:tid 2614296] [client 57.141.0.19:33322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:27.578314 2026] [core:error] [pid 2604294:tid 2604294] [client 191.232.199.39:24907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:27.578344 2026] [core:error] [pid 2604294:tid 2604294] [client 191.232.199.39:24907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:28.453785 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:28.487232 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 09:45:28.521708 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:28.552878 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/2.php
[Thu Jul 30 09:45:28.552926 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:28.594222 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:28.655115 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/mah.php
[Thu Jul 30 09:45:28.655160 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:28.694932 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/send.php
[Thu Jul 30 09:45:28.694979 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:28.738899 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:28.770052 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 09:45:28.816862 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 09:45:28.816908 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:28.881076 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/options.php
[Thu Jul 30 09:45:28.881122 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:28.907976 2026] [ssl:error] [pid 2614296:tid 2614296] (EAI 2)Name or service not known: [client 144.76.19.72:21912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:28.908007 2026] [ssl:error] [pid 2614296:tid 2614296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:28.912381 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 09:45:28.943793 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-file.php
[Thu Jul 30 09:45:28.943835 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:28.961163 2026] [ssl:error] [pid 2615823:tid 2615823] (EAI 2)Name or service not known: [client 144.76.19.72:21920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:28.961187 2026] [ssl:error] [pid 2615823:tid 2615823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:29.015440 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/sid3.php
[Thu Jul 30 09:45:29.015487 2026] [access_compat:error] [pid 2613388:tid 2613388] [client 172.213.208.20:17102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 09:45:30.687323 2026] [core:error] [pid 2615823:tid 2615823] [client 191.232.199.39:25407] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:30.687350 2026] [core:error] [pid 2615823:tid 2615823] [client 191.232.199.39:25407] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:31.722558 2026] [access_compat:error] [pid 2599755:tid 2599755] [client 191.232.199.39:25397] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/size.php
[Thu Jul 30 09:45:31.722913 2026] [core:error] [pid 2599755:tid 2599755] [client 191.232.199.39:25397] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:31.833058 2026] [core:error] [pid 2598656:tid 2598656] (13)Permission denied: [client 216.73.216.199:52398] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-128/slab_size
[Thu Jul 30 09:45:32.181647 2026] [ssl:error] [pid 2613316:tid 2613316] (EAI 2)Name or service not known: [client 144.76.19.72:37826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:32.181674 2026] [ssl:error] [pid 2613316:tid 2613316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:32.235450 2026] [ssl:error] [pid 2612418:tid 2612418] (EAI 2)Name or service not known: [client 144.76.19.72:37842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:32.235480 2026] [ssl:error] [pid 2612418:tid 2612418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:33.150531 2026] [core:error] [pid 2615917:tid 2615917] [client 191.232.199.39:25385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:33.150577 2026] [core:error] [pid 2615917:tid 2615917] [client 191.232.199.39:25385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:34.496460 2026] [authz_core:error] [pid 2604294:tid 2604294] [client 57.141.0.52:58928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:34.497109 2026] [authz_core:error] [pid 2604294:tid 2604294] [client 57.141.0.52:58928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:34.720231 2026] [access_compat:error] [pid 2609812:tid 2609812] [client 191.232.199.39:24688] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/403.php
[Thu Jul 30 09:45:34.720583 2026] [core:error] [pid 2609812:tid 2609812] [client 191.232.199.39:24688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:35.292480 2026] [ssl:error] [pid 2615822:tid 2615822] (EAI 2)Name or service not known: [client 144.76.19.72:37856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:35.292536 2026] [ssl:error] [pid 2615822:tid 2615822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:35.347788 2026] [ssl:error] [pid 2612571:tid 2612571] (EAI 2)Name or service not known: [client 144.76.19.72:37860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:35.347843 2026] [ssl:error] [pid 2612571:tid 2612571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:35.558475 2026] [core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:25069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:35.558504 2026] [core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:25069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:35.955995 2026] [access_compat:error] [pid 2614355:tid 2614355] [client 20.203.142.71:46311] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 09:45:36.558518 2026] [access_compat:error] [pid 2609812:tid 2609812] [client 191.232.199.39:25381] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/as.php
[Thu Jul 30 09:45:36.558876 2026] [core:error] [pid 2609812:tid 2609812] [client 191.232.199.39:25381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:36.607008 2026] [core:error] [pid 2604401:tid 2604401] [client 158.158.76.106:34664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:36.607034 2026] [core:error] [pid 2604401:tid 2604401] [client 158.158.76.106:34664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:37.239918 2026] [lsapi:warn] [pid 2604401:tid 2604401] [client 51.116.221.107:59651] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:45:37.239966 2026] [lsapi:warn] [pid 2604401:tid 2604401] [client 51.116.221.107:59651] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:45:37.392902 2026] [ssl:error] [pid 2614296:tid 2614296] (70014)End of file found: [client 216.73.216.199:52734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:45:37.434218 2026] [core:error] [pid 2606531:tid 2606531] [client 66.249.66.168:48071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:37.434245 2026] [core:error] [pid 2606531:tid 2606531] [client 66.249.66.168:48071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:37.443183 2026] [core:error] [pid 2611881:tid 2611881] [client 66.249.66.168:53223] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:37.443209 2026] [core:error] [pid 2611881:tid 2611881] [client 66.249.66.168:53223] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:37.464804 2026] [core:error] [pid 2615001:tid 2615001] [client 191.232.199.39:24701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:37.464832 2026] [core:error] [pid 2615001:tid 2615001] [client 191.232.199.39:24701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:37.529011 2026] [security2:error] [pid 2615822:tid 2615822] [client 37.59.204.159:24932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/author/joan/"] [unique_id "amsPMfUDaabxwKOPCg-xzQAAACs"]
[Thu Jul 30 09:45:38.408357 2026] [ssl:error] [pid 2615822:tid 2615822] (EAI 2)Name or service not known: [client 144.76.19.72:37874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:38.408386 2026] [ssl:error] [pid 2615822:tid 2615822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:38.464352 2026] [ssl:error] [pid 2595204:tid 2595204] (EAI 2)Name or service not known: [client 144.76.19.72:37880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:38.464382 2026] [ssl:error] [pid 2595204:tid 2595204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:38.682782 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.26:21178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:38.683438 2026] [authz_core:error] [pid 2595204:tid 2595204] [client 57.141.0.26:21178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:38.743855 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:38.743889 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:39.002674 2026] [core:error] [pid 2610834:tid 2610834] [client 158.158.76.106:22112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:39.002701 2026] [core:error] [pid 2610834:tid 2610834] [client 158.158.76.106:22112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:39.694051 2026] [core:error] [pid 2610874:tid 2610874] [client 191.232.199.39:24675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:39.694096 2026] [core:error] [pid 2610874:tid 2610874] [client 191.232.199.39:24675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:39.979983 2026] [authz_core:error] [pid 2614792:tid 2614792] [client 57.141.0.47:22290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:39.980645 2026] [authz_core:error] [pid 2614792:tid 2614792] [client 57.141.0.47:22290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:40.839672 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:25368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:40.839699 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:25368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:41.551998 2026] [ssl:error] [pid 2615001:tid 2615001] (EAI 2)Name or service not known: [client 144.76.19.72:41912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:41.552039 2026] [ssl:error] [pid 2615001:tid 2615001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:41.608224 2026] [ssl:error] [pid 2613382:tid 2613382] (EAI 2)Name or service not known: [client 144.76.19.72:41922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:41.608270 2026] [ssl:error] [pid 2613382:tid 2613382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:41.789965 2026] [access_compat:error] [pid 2604891:tid 2604891] [client 191.232.199.39:25037] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/go.php
[Thu Jul 30 09:45:41.790334 2026] [core:error] [pid 2604891:tid 2604891] [client 191.232.199.39:25037] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:42.089369 2026] [authz_core:error] [pid 2599796:tid 2599796] [client 4.225.166.222:20724] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 09:45:43.422502 2026] [core:error] [pid 2614592:tid 2614592] [client 66.249.66.45:40723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:43.422526 2026] [core:error] [pid 2614592:tid 2614592] [client 66.249.66.45:40723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:43.570531 2026] [access_compat:error] [pid 2604401:tid 2604401] [client 191.232.199.39:25582] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/test1.php
[Thu Jul 30 09:45:43.570860 2026] [core:error] [pid 2604401:tid 2604401] [client 191.232.199.39:25582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:44.467746 2026] [core:error] [pid 2614592:tid 2614592] [client 191.232.199.39:25359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:44.467772 2026] [core:error] [pid 2614592:tid 2614592] [client 191.232.199.39:25359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:44.697451 2026] [ssl:error] [pid 2611881:tid 2611881] (EAI 2)Name or service not known: [client 144.76.19.72:41924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:44.697474 2026] [ssl:error] [pid 2611881:tid 2611881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:44.750528 2026] [ssl:error] [pid 2606608:tid 2606608] (EAI 2)Name or service not known: [client 144.76.19.72:41930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:44.750558 2026] [ssl:error] [pid 2606608:tid 2606608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:45.384167 2026] [core:error] [pid 2612571:tid 2612571] [client 191.232.199.39:25367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:45.384191 2026] [core:error] [pid 2612571:tid 2612571] [client 191.232.199.39:25367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:45.637064 2026] [core:error] [pid 2608716:tid 2608716] [client 158.158.76.106:22101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:45.637124 2026] [core:error] [pid 2608716:tid 2608716] [client 158.158.76.106:22101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:45.849640 2026] [authz_core:error] [pid 2613383:tid 2613383] [client 172.213.10.64:42186] AH01630: client denied by server configuration: /home/monitors/public_html/highbrightness.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 09:45:47.297434 2026] [core:error] [pid 2615823:tid 2615823] [client 191.232.199.39:24658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:47.297463 2026] [core:error] [pid 2615823:tid 2615823] [client 191.232.199.39:24658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:47.805998 2026] [ssl:error] [pid 2608716:tid 2608716] (EAI 2)Name or service not known: [client 144.76.19.72:41934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:47.806040 2026] [ssl:error] [pid 2608716:tid 2608716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:47.863497 2026] [ssl:error] [pid 2603982:tid 2603982] (EAI 2)Name or service not known: [client 144.76.19.72:41936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:47.863535 2026] [ssl:error] [pid 2603982:tid 2603982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:48.554653 2026] [access_compat:error] [pid 2608775:tid 2608775] [client 191.232.199.39:25577] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/asd.php
[Thu Jul 30 09:45:48.555000 2026] [core:error] [pid 2608775:tid 2608775] [client 191.232.199.39:25577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:48.911296 2026] [security2:error] [pid 2608716:tid 2608716] [client 114.119.158.38:44953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~14,17/request_format~html"] [unique_id "amsPPHp8QyQMxYfaFUSSLwAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~14,17/request_format~html
[Thu Jul 30 09:45:49.540087 2026] [core:error] [pid 2615823:tid 2615823] [client 191.232.199.39:25584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:49.540113 2026] [core:error] [pid 2615823:tid 2615823] [client 191.232.199.39:25584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:50.369884 2026] [security2:error] [pid 2598654:tid 2598654] [client 114.119.158.38:44957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~14,17/request_format~html"] [unique_id "amsPPjM0OPOvLqoRKl_iwwAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~14,17/request_format~html
[Thu Jul 30 09:45:50.918796 2026] [ssl:error] [pid 2599793:tid 2599793] (EAI 2)Name or service not known: [client 144.76.19.72:51228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:50.918827 2026] [ssl:error] [pid 2599793:tid 2599793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:50.945598 2026] [core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:25209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:50.945625 2026] [core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:25209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:50.974870 2026] [ssl:error] [pid 2614792:tid 2614792] (EAI 2)Name or service not known: [client 144.76.19.72:51232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:50.974896 2026] [ssl:error] [pid 2614792:tid 2614792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:51.908199 2026] [access_compat:error] [pid 2599755:tid 2599755] [client 191.232.199.39:25597] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/atomlib.php
[Thu Jul 30 09:45:51.908520 2026] [core:error] [pid 2599755:tid 2599755] [client 191.232.199.39:25597] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:53.760719 2026] [authz_core:error] [pid 2614792:tid 2614792] [client 66.249.66.33:56883] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:45:53.763422 2026] [authz_core:error] [pid 2614792:tid 2614792] [client 66.249.66.33:56883] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:45:54.042283 2026] [ssl:error] [pid 2610041:tid 2610041] (EAI 2)Name or service not known: [client 144.76.19.72:51242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:54.042309 2026] [ssl:error] [pid 2610041:tid 2610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:54.099729 2026] [ssl:error] [pid 2615823:tid 2615823] (EAI 2)Name or service not known: [client 144.76.19.72:51254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:54.099762 2026] [ssl:error] [pid 2615823:tid 2615823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:54.168051 2026] [core:error] [pid 2608554:tid 2608554] [client 191.232.199.39:25544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:54.168103 2026] [core:error] [pid 2608554:tid 2608554] [client 191.232.199.39:25544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:55.106347 2026] [core:error] [pid 2608554:tid 2608554] [client 191.232.199.39:25557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:55.106388 2026] [core:error] [pid 2608554:tid 2608554] [client 191.232.199.39:25557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:55.315430 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 57.141.0.44:21314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:45:55.316074 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 57.141.0.44:21314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:45:55.324391 2026] [security2:error] [pid 2610834:tid 2610834] [client 185.191.171.8:16814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6864.0/prev_next,prev.html"] [unique_id "amsPQ_JqI3jvpG7WZuU_mQAAADE"]
[Thu Jul 30 09:45:55.983919 2026] [authz_core:error] [pid 2603982:tid 2603982] [client 66.249.66.33:54093] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:45:55.986662 2026] [authz_core:error] [pid 2603982:tid 2603982] [client 66.249.66.33:54093] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:45:56.718038 2026] [core:error] [pid 2604712:tid 2604712] [client 191.232.199.39:24648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:56.718077 2026] [core:error] [pid 2604712:tid 2604712] [client 191.232.199.39:24648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:57.156421 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:51256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:57.156456 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:57.209133 2026] [ssl:error] [pid 2612571:tid 2612571] (EAI 2)Name or service not known: [client 144.76.19.72:51268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:45:57.209163 2026] [ssl:error] [pid 2612571:tid 2612571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:45:57.232173 2026] [authz_core:error] [pid 2615823:tid 2615823] [client 82.102.18.190:50252] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sodium_compat/namespaced/Core/error_log
[Thu Jul 30 09:45:57.310284 2026] [core:error] [pid 2604712:tid 2604712] [client 158.158.76.106:57792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:57.310314 2026] [core:error] [pid 2604712:tid 2604712] [client 158.158.76.106:57792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:57.713363 2026] [ssl:error] [pid 2604891:tid 2604891] (70014)End of file found: [client 216.73.216.199:17976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:45:57.851584 2026] [core:error] [pid 2610876:tid 2610876] [client 191.232.199.39:25164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:57.851620 2026] [core:error] [pid 2610876:tid 2610876] [client 191.232.199.39:25164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:58.890448 2026] [core:error] [pid 2599793:tid 2599793] [client 158.158.76.106:59609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:58.890474 2026] [core:error] [pid 2599793:tid 2599793] [client 158.158.76.106:59609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:59.474633 2026] [core:error] [pid 2608717:tid 2608717] [client 191.232.199.39:24653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:59.474660 2026] [core:error] [pid 2608717:tid 2608717] [client 191.232.199.39:24653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:59.666520 2026] [core:error] [pid 2613387:tid 2613387] [client 158.158.76.106:6472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:45:59.666551 2026] [core:error] [pid 2613387:tid 2613387] [client 158.158.76.106:6472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:00.267574 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:37204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:00.267613 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:00.268133 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:25536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:00.268156 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:25536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:00.325101 2026] [ssl:error] [pid 2609812:tid 2609812] (EAI 2)Name or service not known: [client 144.76.19.72:37216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:00.325145 2026] [ssl:error] [pid 2609812:tid 2609812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:00.399456 2026] [security2:error] [pid 2614792:tid 2614792] [client 185.191.171.13:51246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1382.0/prev_next,next.html"] [unique_id "amsPSCoHds1Jd-AtV5wqDgAAAC8"]
[Thu Jul 30 09:46:01.088496 2026] [access_compat:error] [pid 2591557:tid 2591557] [client 191.232.199.39:25168] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/inputs.php
[Thu Jul 30 09:46:01.088922 2026] [core:error] [pid 2591557:tid 2591557] [client 191.232.199.39:25168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:01.575245 2026] [security2:error] [pid 2603982:tid 2603982] [client 162.14.109.170:52568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.com"] [uri "/"] [unique_id "amsPSXW6X5q4VUBjsN_ORQAAAAU"]
[Thu Jul 30 09:46:02.088618 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:29697] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:02.088647 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:29697] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:03.384140 2026] [ssl:error] [pid 2608553:tid 2608553] (EAI 2)Name or service not known: [client 144.76.19.72:37232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:03.384172 2026] [ssl:error] [pid 2608553:tid 2608553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:03.435607 2026] [ssl:error] [pid 2608717:tid 2608717] (EAI 2)Name or service not known: [client 144.76.19.72:37234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:03.435631 2026] [ssl:error] [pid 2608717:tid 2608717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:03.454600 2026] [core:error] [pid 2608775:tid 2608775] [client 191.232.199.39:29743] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:03.454621 2026] [core:error] [pid 2608775:tid 2608775] [client 191.232.199.39:29743] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:04.121530 2026] [security2:error] [pid 2608717:tid 2608717] [client 124.156.226.179:55130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "amsPTI1XoCJQPiTX5C2LTAAAAC4"]
[Thu Jul 30 09:46:04.786488 2026] [core:error] [pid 2599796:tid 2599796] [client 158.158.76.106:41230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:04.786516 2026] [core:error] [pid 2599796:tid 2599796] [client 158.158.76.106:41230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:05.212148 2026] [core:error] [pid 2610834:tid 2610834] [client 191.232.199.39:25548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:05.212176 2026] [core:error] [pid 2610834:tid 2610834] [client 191.232.199.39:25548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:06.118988 2026] [security2:error] [pid 2599713:tid 2599713] [client 124.156.226.179:43566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "amsPTgxQbXcbTQGaG-qlwgAAAAs"], referer: http://www.ditchfest.com
[Thu Jul 30 09:46:06.490668 2026] [ssl:error] [pid 2598656:tid 2598656] (EAI 2)Name or service not known: [client 144.76.19.72:37250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:06.490701 2026] [ssl:error] [pid 2598656:tid 2598656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:06.503545 2026] [security2:error] [pid 2598654:tid 2598654] [client 47.128.60.20:33472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chateausaintjeannet.com"] [uri "/robots.txt"] [unique_id "amsPTjM0OPOvLqoRKl_iygAAABI"]
[Thu Jul 30 09:46:06.545240 2026] [ssl:error] [pid 2613387:tid 2613387] (EAI 2)Name or service not known: [client 144.76.19.72:37254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:06.545267 2026] [ssl:error] [pid 2613387:tid 2613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:07.962535 2026] [security2:error] [pid 2601439:tid 2601439] [client 201.177.128.64:48966] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amsPT0dRN8TegeJhu_NQXAAAAA4"]
[Thu Jul 30 09:46:07.962742 2026] [security2:error] [pid 2601439:tid 2601439] [client 201.177.128.64:48966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amsPT0dRN8TegeJhu_NQXAAAAA4"]
[Thu Jul 30 09:46:07.962870 2026] [security2:error] [pid 2601439:tid 2601439] [client 201.177.128.64:48966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amsPT0dRN8TegeJhu_NQXAAAAA4"]
[Thu Jul 30 09:46:08.042900 2026] [core:error] [pid 2617629:tid 2617629] [client 158.158.76.106:25323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:08.042941 2026] [core:error] [pid 2617629:tid 2617629] [client 158.158.76.106:25323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:08.625221 2026] [core:error] [pid 2608717:tid 2608717] [client 191.232.199.39:29750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:08.625249 2026] [core:error] [pid 2608717:tid 2608717] [client 191.232.199.39:29750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:09.623459 2026] [ssl:error] [pid 2599713:tid 2599713] (EAI 2)Name or service not known: [client 144.76.19.72:33720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:09.623492 2026] [ssl:error] [pid 2599713:tid 2599713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:09.676239 2026] [ssl:error] [pid 2599713:tid 2599713] (EAI 2)Name or service not known: [client 144.76.19.72:33734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:09.676265 2026] [ssl:error] [pid 2599713:tid 2599713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:10.174645 2026] [access_compat:error] [pid 2599713:tid 2599713] [client 191.232.199.39:25570] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/1.php
[Thu Jul 30 09:46:10.175006 2026] [core:error] [pid 2599713:tid 2599713] [client 191.232.199.39:25570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:10.984878 2026] [authz_core:error] [pid 2610834:tid 2610834] [client 57.141.0.25:33816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:46:10.985508 2026] [authz_core:error] [pid 2610834:tid 2610834] [client 57.141.0.25:33816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:46:11.301821 2026] [access_compat:error] [pid 2610834:tid 2610834] [client 191.232.199.39:29912] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/gg.php
[Thu Jul 30 09:46:11.302183 2026] [core:error] [pid 2610834:tid 2610834] [client 191.232.199.39:29912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:12.732646 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:33736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:12.732677 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:12.790099 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:33746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:12.790134 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:12.995337 2026] [core:error] [pid 2617765:tid 2617765] [client 191.232.199.39:29722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:12.995375 2026] [core:error] [pid 2617765:tid 2617765] [client 191.232.199.39:29722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:13.925651 2026] [access_compat:error] [pid 2600886:tid 2600886] [client 191.232.199.39:25573] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp.php
[Thu Jul 30 09:46:13.925989 2026] [core:error] [pid 2600886:tid 2600886] [client 191.232.199.39:25573] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:15.068951 2026] [core:error] [pid 2608553:tid 2608553] [client 191.232.199.39:25160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:15.068974 2026] [core:error] [pid 2608553:tid 2608553] [client 191.232.199.39:25160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:15.844598 2026] [ssl:error] [pid 2614353:tid 2614353] (EAI 2)Name or service not known: [client 144.76.19.72:33758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:15.844627 2026] [ssl:error] [pid 2614353:tid 2614353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:15.890904 2026] [core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:29935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:15.890929 2026] [core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:29935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:15.899489 2026] [ssl:error] [pid 2617765:tid 2617765] (EAI 2)Name or service not known: [client 144.76.19.72:33770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:15.899514 2026] [ssl:error] [pid 2617765:tid 2617765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:17.464712 2026] [core:error] [pid 2617672:tid 2617672] [client 66.249.64.170:41760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:17.464749 2026] [core:error] [pid 2617672:tid 2617672] [client 66.249.64.170:41760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:17.720855 2026] [ssl:error] [pid 2599755:tid 2599755] (70014)End of file found: [client 216.73.216.199:2115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:46:17.818532 2026] [core:error] [pid 2613383:tid 2613383] [client 191.232.199.39:45135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:17.818571 2026] [core:error] [pid 2613383:tid 2613383] [client 191.232.199.39:45135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:18.612024 2026] [core:error] [pid 2596515:tid 2596515] [client 191.232.199.39:45127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:18.612052 2026] [core:error] [pid 2596515:tid 2596515] [client 191.232.199.39:45127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:18.955445 2026] [ssl:error] [pid 2613387:tid 2613387] (EAI 2)Name or service not known: [client 144.76.19.72:33778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:18.955477 2026] [ssl:error] [pid 2613387:tid 2613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:19.007091 2026] [ssl:error] [pid 2617673:tid 2617673] (EAI 2)Name or service not known: [client 144.76.19.72:33794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:19.007127 2026] [ssl:error] [pid 2617673:tid 2617673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:19.977556 2026] [core:error] [pid 2617760:tid 2617760] [client 191.232.199.39:29931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:19.977584 2026] [core:error] [pid 2617760:tid 2617760] [client 191.232.199.39:29931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:20.406658 2026] [core:error] [pid 2617762:tid 2617762] [client 158.158.76.106:25285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:20.406686 2026] [core:error] [pid 2617762:tid 2617762] [client 158.158.76.106:25285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:20.662902 2026] [authz_core:error] [pid 2606608:tid 2606608] [client 66.249.66.33:51011] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:46:20.665575 2026] [authz_core:error] [pid 2606608:tid 2606608] [client 66.249.66.33:51011] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:46:21.355690 2026] [core:error] [pid 2617672:tid 2617672] [client 191.232.199.39:29950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:21.355715 2026] [core:error] [pid 2617672:tid 2617672] [client 191.232.199.39:29950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:21.745561 2026] [access_compat:error] [pid 2617760:tid 2617760] [client 94.154.43.187:51686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/.env
[Thu Jul 30 09:46:21.745711 2026] [access_compat:error] [pid 2617760:tid 2617760] [client 94.154.43.187:51686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 09:46:21.756122 2026] [access_compat:error] [pid 2617672:tid 2617672] [client 94.154.43.178:57056] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env
[Thu Jul 30 09:46:21.782539 2026] [access_compat:error] [pid 2608716:tid 2608716] [client 94.154.43.186:46854] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.env
[Thu Jul 30 09:46:22.063352 2026] [ssl:error] [pid 2617760:tid 2617760] (EAI 2)Name or service not known: [client 144.76.19.72:33910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:22.063383 2026] [ssl:error] [pid 2617760:tid 2617760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:22.118418 2026] [ssl:error] [pid 2608716:tid 2608716] (EAI 2)Name or service not known: [client 144.76.19.72:33926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:22.118444 2026] [ssl:error] [pid 2608716:tid 2608716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:22.273272 2026] [core:error] [pid 2617716:tid 2617716] [client 191.232.199.39:45126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:22.273302 2026] [core:error] [pid 2617716:tid 2617716] [client 191.232.199.39:45126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:23.137570 2026] [security2:error] [pid 2615823:tid 2615823] [client 85.208.96.206:43348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/cultural-movements-of-the-21st-century"] [unique_id "amsPX6hCNDJKK3e4gjwcGwAAADA"]
[Thu Jul 30 09:46:23.487642 2026] [core:error] [pid 2614792:tid 2614792] [client 191.232.199.39:29892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:23.487667 2026] [core:error] [pid 2614792:tid 2614792] [client 191.232.199.39:29892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:23.603859 2026] [security2:error] [pid 2614353:tid 2614353] [client 43.130.101.151:50896] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsPX0aZO7DYAHrrEu6g7gAAAAQ"]
[Thu Jul 30 09:46:24.133673 2026] [security2:error] [pid 2596515:tid 2596515] [client 105.164.24.44:1126] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPYAZzu-nhBfCDajx5lAAAABw"]
[Thu Jul 30 09:46:24.133735 2026] [security2:error] [pid 2596515:tid 2596515] [client 105.164.24.44:1126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPYAZzu-nhBfCDajx5lAAAABw"]
[Thu Jul 30 09:46:24.133989 2026] [security2:error] [pid 2596515:tid 2596515] [client 105.164.24.44:1126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPYAZzu-nhBfCDajx5lAAAABw"]
[Thu Jul 30 09:46:24.417321 2026] [core:error] [pid 2599755:tid 2599755] [client 158.158.76.106:8327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:24.417347 2026] [core:error] [pid 2599755:tid 2599755] [client 158.158.76.106:8327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:24.787910 2026] [access_compat:error] [pid 2617759:tid 2617759] [client 191.232.199.39:29947] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/aaa.php
[Thu Jul 30 09:46:24.788287 2026] [core:error] [pid 2617759:tid 2617759] [client 191.232.199.39:29947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:24.891214 2026] [security2:error] [pid 2612418:tid 2612418] [client 43.130.101.151:48898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsPYEjI-5HyTSsMagLy0QAAAA8"], referer: http://www.staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 09:46:25.194835 2026] [ssl:error] [pid 2617672:tid 2617672] (EAI 2)Name or service not known: [client 144.76.19.72:33932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:25.194881 2026] [ssl:error] [pid 2617672:tid 2617672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:25.249605 2026] [ssl:error] [pid 2600886:tid 2600886] (EAI 2)Name or service not known: [client 144.76.19.72:33938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:25.249631 2026] [ssl:error] [pid 2600886:tid 2600886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:25.646459 2026] [access_compat:error] [pid 2617759:tid 2617759] [client 191.232.199.39:29717] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/getid3-core.php
[Thu Jul 30 09:46:25.646796 2026] [core:error] [pid 2617759:tid 2617759] [client 191.232.199.39:29717] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:26.273144 2026] [authz_core:error] [pid 2617716:tid 2617716] [client 17.241.219.73:39706] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/log4php.debug/spi/error_log
[Thu Jul 30 09:46:26.836252 2026] [access_compat:error] [pid 2617761:tid 2617761] [client 191.232.199.39:29934] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/adminer.php
[Thu Jul 30 09:46:26.836682 2026] [core:error] [pid 2617761:tid 2617761] [client 191.232.199.39:29934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:27.119598 2026] [security2:error] [pid 2611881:tid 2611881] [client 43.130.101.151:49836] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsPYyq8zjkVEUe5vAqYSwAAAAo"], referer: https://www.staffordshirephoenixrifleandpistolclub.co.uk/
[Thu Jul 30 09:46:27.977493 2026] [core:error] [pid 2604712:tid 2604712] [client 191.232.199.39:35199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:27.977518 2026] [core:error] [pid 2604712:tid 2604712] [client 191.232.199.39:35199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:28.306168 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:33940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:28.306196 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:28.359647 2026] [ssl:error] [pid 2600886:tid 2600886] (EAI 2)Name or service not known: [client 144.76.19.72:33944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:28.359672 2026] [ssl:error] [pid 2600886:tid 2600886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:28.652609 2026] [security2:error] [pid 2608775:tid 2608775] [client 169.224.19.237:32311] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPZDgm2PMOsjRzHkR68QAAADY"]
[Thu Jul 30 09:46:28.652666 2026] [security2:error] [pid 2608775:tid 2608775] [client 169.224.19.237:32311] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPZDgm2PMOsjRzHkR68QAAADY"]
[Thu Jul 30 09:46:28.652925 2026] [security2:error] [pid 2608775:tid 2608775] [client 169.224.19.237:32311] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPZDgm2PMOsjRzHkR68QAAADY"]
[Thu Jul 30 09:46:29.071746 2026] [access_compat:error] [pid 2604712:tid 2604712] [client 191.232.199.39:25171] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/alfa.php
[Thu Jul 30 09:46:29.072088 2026] [core:error] [pid 2604712:tid 2604712] [client 191.232.199.39:25171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:29.505312 2026] [core:error] [pid 2603982:tid 2603982] [client 195.2.84.198:57563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/#comment-141510
[Thu Jul 30 09:46:29.505336 2026] [core:error] [pid 2603982:tid 2603982] [client 195.2.84.198:57563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/#comment-141510
[Thu Jul 30 09:46:29.638781 2026] [core:crit] [pid 2604891:tid 2604891] (13)Permission denied: [client 195.2.84.198:57577] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/
[Thu Jul 30 09:46:30.185348 2026] [security2:error] [pid 2618114:tid 2618114] [client 51.68.236.87:16597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hatch-works.com"] [uri "/robots.txt"] [unique_id "amsPZofUOphR06IHGfwz8wAAAAs"]
[Thu Jul 30 09:46:30.539014 2026] [core:error] [pid 2603982:tid 2603982] [client 191.232.199.39:29937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:30.539042 2026] [core:error] [pid 2603982:tid 2603982] [client 191.232.199.39:29937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:30.745233 2026] [access_compat:error] [pid 2614792:tid 2614792] [client 45.158.164.139:42600] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:46:31.415964 2026] [ssl:error] [pid 2614353:tid 2614353] (EAI 2)Name or service not known: [client 144.76.19.72:44674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:31.415991 2026] [ssl:error] [pid 2614353:tid 2614353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:31.468874 2026] [ssl:error] [pid 2606608:tid 2606608] (EAI 2)Name or service not known: [client 144.76.19.72:44688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:31.468903 2026] [ssl:error] [pid 2606608:tid 2606608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:32.311530 2026] [core:error] [pid 2603982:tid 2603982] [client 191.232.199.39:29895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:32.311555 2026] [core:error] [pid 2603982:tid 2603982] [client 191.232.199.39:29895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:32.620353 2026] [security2:error] [pid 2617716:tid 2617716] [client 103.153.210.48:33488] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPaBK_dvPX03fJSfTE7gAAABA"]
[Thu Jul 30 09:46:32.620403 2026] [security2:error] [pid 2617716:tid 2617716] [client 103.153.210.48:33488] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPaBK_dvPX03fJSfTE7gAAABA"]
[Thu Jul 30 09:46:32.620673 2026] [security2:error] [pid 2617716:tid 2617716] [client 103.153.210.48:33488] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPaBK_dvPX03fJSfTE7gAAABA"]
[Thu Jul 30 09:46:34.034697 2026] [core:error] [pid 2618493:tid 2618493] [client 191.232.199.39:25183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:34.034738 2026] [core:error] [pid 2618493:tid 2618493] [client 191.232.199.39:25183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:34.523354 2026] [ssl:error] [pid 2618522:tid 2618522] (EAI 2)Name or service not known: [client 144.76.19.72:44696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:34.523386 2026] [ssl:error] [pid 2618522:tid 2618522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:34.576688 2026] [ssl:error] [pid 2618523:tid 2618523] (EAI 2)Name or service not known: [client 144.76.19.72:44710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:34.576720 2026] [ssl:error] [pid 2618523:tid 2618523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:35.141763 2026] [core:error] [pid 2618522:tid 2618522] [client 191.232.199.39:25152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:35.141788 2026] [core:error] [pid 2618522:tid 2618522] [client 191.232.199.39:25152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:36.082292 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:57254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:36.082321 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:57254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:37.634625 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:44712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:37.634653 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:37.689734 2026] [ssl:error] [pid 2609812:tid 2609812] (EAI 2)Name or service not known: [client 144.76.19.72:44718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:37.689765 2026] [ssl:error] [pid 2609812:tid 2609812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:40.263357 2026] [security2:error] [pid 2618522:tid 2618522] [client 162.14.66.219:39198] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.be"] [uri "/"] [unique_id "amsPcKSMVybND23D0Z5UrQAAAA4"]
[Thu Jul 30 09:46:40.747673 2026] [ssl:error] [pid 2612418:tid 2612418] (EAI 2)Name or service not known: [client 144.76.19.72:43354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:40.747711 2026] [ssl:error] [pid 2612418:tid 2612418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:40.804942 2026] [ssl:error] [pid 2618523:tid 2618523] (EAI 2)Name or service not known: [client 144.76.19.72:43358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:40.805000 2026] [ssl:error] [pid 2618523:tid 2618523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:41.316725 2026] [core:error] [pid 2617716:tid 2617716] [client 191.232.199.39:25360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:41.316752 2026] [core:error] [pid 2617716:tid 2617716] [client 191.232.199.39:25360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:42.864646 2026] [core:error] [pid 2612418:tid 2612418] [client 191.232.199.39:40765] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:42.864672 2026] [core:error] [pid 2612418:tid 2612418] [client 191.232.199.39:40765] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:43.145317 2026] [core:error] [pid 2617759:tid 2617759] [client 158.158.76.106:6954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:43.145342 2026] [core:error] [pid 2617759:tid 2617759] [client 158.158.76.106:6954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:43.153019 2026] [core:error] [pid 2608775:tid 2608775] (13)Permission denied: [client 216.73.216.199:20470] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS3/line
[Thu Jul 30 09:46:43.315909 2026] [security2:error] [pid 2614792:tid 2614792] [client 162.14.66.219:54210] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsPcyoHds1Jd-AtV5wqJQAAAC8"], referer: http://orgent.be
[Thu Jul 30 09:46:43.683964 2026] [core:error] [pid 2618839:tid 2618839] [client 191.232.199.39:25556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:43.684010 2026] [core:error] [pid 2618839:tid 2618839] [client 191.232.199.39:25556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:43.859199 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:43364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:43.859221 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:43.914928 2026] [ssl:error] [pid 2613387:tid 2613387] (EAI 2)Name or service not known: [client 144.76.19.72:43380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:43.914962 2026] [ssl:error] [pid 2613387:tid 2613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:45.029850 2026] [access_compat:error] [pid 2614353:tid 2614353] [client 191.232.199.39:25512] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/sf.php
[Thu Jul 30 09:46:45.030216 2026] [core:error] [pid 2614353:tid 2614353] [client 191.232.199.39:25512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:45.347311 2026] [core:error] [pid 2617673:tid 2617673] [client 66.249.66.168:60828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:45.347341 2026] [core:error] [pid 2617673:tid 2617673] [client 66.249.66.168:60828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:45.800977 2026] [authz_core:error] [pid 2610834:tid 2610834] [client 66.249.66.33:64123] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:46:45.803960 2026] [authz_core:error] [pid 2610834:tid 2610834] [client 66.249.66.33:64123] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:46:45.855190 2026] [security2:error] [pid 2614353:tid 2614353] [client 146.56.197.150:35676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.fr"] [uri "/"] [unique_id "amsPdUaZO7DYAHrrEu6g_AAAAAQ"]
[Thu Jul 30 09:46:46.537608 2026] [core:error] [pid 2613387:tid 2613387] [client 191.232.199.39:40716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:46.537636 2026] [core:error] [pid 2613387:tid 2613387] [client 191.232.199.39:40716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:46.971458 2026] [ssl:error] [pid 2614353:tid 2614353] (EAI 2)Name or service not known: [client 144.76.19.72:43394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:46.971506 2026] [ssl:error] [pid 2614353:tid 2614353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:47.027657 2026] [ssl:error] [pid 2613387:tid 2613387] (EAI 2)Name or service not known: [client 144.76.19.72:43404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:47.027685 2026] [ssl:error] [pid 2613387:tid 2613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:47.197667 2026] [core:error] [pid 2618584:tid 2618584] [client 66.249.66.45:36683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:47.197693 2026] [core:error] [pid 2618584:tid 2618584] [client 66.249.66.45:36683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:47.324427 2026] [access_compat:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24668] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wso.php
[Thu Jul 30 09:46:47.324794 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:24668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:48.240053 2026] [access_compat:error] [pid 2618584:tid 2618584] [client 191.232.199.39:25592] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/ioxi-o.php
[Thu Jul 30 09:46:48.240390 2026] [core:error] [pid 2618584:tid 2618584] [client 191.232.199.39:25592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:49.061869 2026] [core:error] [pid 2608554:tid 2608554] [client 158.158.76.106:8564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:49.061895 2026] [core:error] [pid 2608554:tid 2608554] [client 158.158.76.106:8564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:49.139165 2026] [authz_core:error] [pid 2618873:tid 2618873] [client 57.141.0.10:44940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:46:49.139790 2026] [authz_core:error] [pid 2618873:tid 2618873] [client 57.141.0.10:44940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:46:50.084170 2026] [ssl:error] [pid 2618523:tid 2618523] (EAI 2)Name or service not known: [client 144.76.19.72:18774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:50.084218 2026] [ssl:error] [pid 2618523:tid 2618523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:50.141882 2026] [ssl:error] [pid 2617761:tid 2617761] (EAI 2)Name or service not known: [client 144.76.19.72:18784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:50.141932 2026] [ssl:error] [pid 2617761:tid 2617761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:50.223781 2026] [access_compat:error] [pid 2617760:tid 2617760] [client 191.232.199.39:40719] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/file56.php
[Thu Jul 30 09:46:50.224142 2026] [core:error] [pid 2617760:tid 2617760] [client 191.232.199.39:40719] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:51.216745 2026] [core:error] [pid 2614353:tid 2614353] [client 191.232.199.39:25591] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:51.216771 2026] [core:error] [pid 2614353:tid 2614353] [client 191.232.199.39:25591] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:52.415162 2026] [core:error] [pid 2617672:tid 2617672] [client 191.232.199.39:25405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:52.415197 2026] [core:error] [pid 2617672:tid 2617672] [client 191.232.199.39:25405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:53.223312 2026] [ssl:error] [pid 2614792:tid 2614792] (EAI 2)Name or service not known: [client 144.76.19.72:18790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:53.223344 2026] [ssl:error] [pid 2614792:tid 2614792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:53.279311 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:18798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:53.279334 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:53.520687 2026] [core:error] [pid 2608553:tid 2608553] [client 191.232.199.39:25555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:53.520708 2026] [core:error] [pid 2608553:tid 2608553] [client 191.232.199.39:25555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:54.147985 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 57.141.0.11:60110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:46:54.148648 2026] [authz_core:error] [pid 2599755:tid 2599755] [client 57.141.0.11:60110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:46:54.913837 2026] [access_compat:error] [pid 2604712:tid 2604712] [client 191.232.199.39:40767] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/2.php
[Thu Jul 30 09:46:54.914180 2026] [core:error] [pid 2604712:tid 2604712] [client 191.232.199.39:40767] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:56.123382 2026] [core:error] [pid 2604891:tid 2604891] [client 66.249.64.170:43823] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:56.123406 2026] [core:error] [pid 2604891:tid 2604891] [client 66.249.64.170:43823] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:56.132726 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:40731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:56.132746 2026] [core:error] [pid 2611881:tid 2611881] [client 191.232.199.39:40731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:56.335624 2026] [ssl:error] [pid 2617760:tid 2617760] (EAI 2)Name or service not known: [client 144.76.19.72:18808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:56.335659 2026] [ssl:error] [pid 2617760:tid 2617760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:56.393548 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:18812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:56.393572 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:57.392397 2026] [core:error] [pid 2618684:tid 2618684] [client 191.232.199.39:40736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:57.392427 2026] [core:error] [pid 2618684:tid 2618684] [client 191.232.199.39:40736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:58.217747 2026] [core:error] [pid 2617759:tid 2617759] [client 158.158.76.106:64413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:58.217771 2026] [core:error] [pid 2617759:tid 2617759] [client 158.158.76.106:64413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:58.296379 2026] [access_compat:error] [pid 2604294:tid 2604294] [client 191.232.199.39:25554] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/send.php
[Thu Jul 30 09:46:58.296732 2026] [core:error] [pid 2604294:tid 2604294] [client 191.232.199.39:25554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:58.752082 2026] [core:error] [pid 2611881:tid 2611881] [client 158.158.76.106:30221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:58.752105 2026] [core:error] [pid 2611881:tid 2611881] [client 158.158.76.106:30221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:59.450061 2026] [ssl:error] [pid 2611881:tid 2611881] (EAI 2)Name or service not known: [client 144.76.19.72:18818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:59.450098 2026] [ssl:error] [pid 2611881:tid 2611881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:46:59.471260 2026] [core:error] [pid 2613383:tid 2613383] [client 191.232.199.39:25484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:59.471283 2026] [core:error] [pid 2613383:tid 2613383] [client 191.232.199.39:25484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:46:59.505611 2026] [ssl:error] [pid 2613387:tid 2613387] (EAI 2)Name or service not known: [client 144.76.19.72:18828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:46:59.505633 2026] [ssl:error] [pid 2613387:tid 2613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:02.442310 2026] [security2:error] [pid 2617763:tid 2617763] [client 20.113.148.57:11166] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "evilworkshop.com.davidebell.com"] [uri "/wp-config.php"] [unique_id "amsPhk2RkEpfWHf7UIQc5wAAABo"]
[Thu Jul 30 09:47:02.442424 2026] [security2:error] [pid 2617763:tid 2617763] [client 20.113.148.57:11166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evilworkshop.com.davidebell.com"] [uri "/wp-config.php"] [unique_id "amsPhk2RkEpfWHf7UIQc5wAAABo"]
[Thu Jul 30 09:47:02.442610 2026] [security2:error] [pid 2617763:tid 2617763] [client 20.113.148.57:11166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "evilworkshop.com.davidebell.com"] [uri "/wp-config.php"] [unique_id "amsPhk2RkEpfWHf7UIQc5wAAABo"]
[Thu Jul 30 09:47:02.563648 2026] [ssl:error] [pid 2619506:tid 2619506] (EAI 2)Name or service not known: [client 144.76.19.72:20850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:02.563678 2026] [ssl:error] [pid 2619506:tid 2619506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:02.628311 2026] [security2:error] [pid 2617763:tid 2617763] [client 85.208.96.194:47304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8201.0/prev_next,next.html"] [unique_id "amsPhk2RkEpfWHf7UIQc6gAAABo"]
[Thu Jul 30 09:47:02.658755 2026] [ssl:error] [pid 2617759:tid 2617759] (EAI 2)Name or service not known: [client 144.76.19.72:20856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:02.658792 2026] [ssl:error] [pid 2617759:tid 2617759] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:02.676314 2026] [core:error] [pid 2613383:tid 2613383] [client 191.232.199.39:25534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:02.676335 2026] [core:error] [pid 2613383:tid 2613383] [client 191.232.199.39:25534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:02.993893 2026] [security2:error] [pid 2619506:tid 2619506] [client 129.28.84.30:55786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchellphotography.co.uk"] [uri "/"] [unique_id "amsPhiN795bHNTfnx1gFjgAAAAg"]
[Thu Jul 30 09:47:03.432361 2026] [authz_core:error] [pid 2619552:tid 2619552] [client 66.249.66.34:55420] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:47:03.435199 2026] [authz_core:error] [pid 2619552:tid 2619552] [client 66.249.66.34:55420] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:47:04.211335 2026] [core:error] [pid 2618839:tid 2618839] [client 191.232.199.39:40721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:04.211358 2026] [core:error] [pid 2618839:tid 2618839] [client 191.232.199.39:40721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:05.713113 2026] [ssl:error] [pid 2617716:tid 2617716] (EAI 2)Name or service not known: [client 144.76.19.72:20862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:05.713152 2026] [ssl:error] [pid 2617716:tid 2617716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:05.764901 2026] [ssl:error] [pid 2617763:tid 2617763] (EAI 2)Name or service not known: [client 144.76.19.72:20876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:05.764935 2026] [ssl:error] [pid 2617763:tid 2617763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:05.985883 2026] [security2:error] [pid 2598656:tid 2598656] [client 20.113.148.57:11138] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "evilworkshop.com.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amsPiWAcjAs02iliG-NvQgAAABs"]
[Thu Jul 30 09:47:05.986096 2026] [security2:error] [pid 2598656:tid 2598656] [client 20.113.148.57:11138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evilworkshop.com.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amsPiWAcjAs02iliG-NvQgAAABs"]
[Thu Jul 30 09:47:05.986284 2026] [security2:error] [pid 2598656:tid 2598656] [client 20.113.148.57:11138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "evilworkshop.com.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amsPiWAcjAs02iliG-NvQgAAABs"]
[Thu Jul 30 09:47:06.691867 2026] [core:error] [pid 2619662:tid 2619662] [client 191.232.199.39:36865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:06.691915 2026] [core:error] [pid 2619662:tid 2619662] [client 191.232.199.39:36865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:07.669867 2026] [core:error] [pid 2619662:tid 2619662] [client 191.232.199.39:50131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:07.669896 2026] [core:error] [pid 2619662:tid 2619662] [client 191.232.199.39:50131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:08.421230 2026] [authz_core:error] [pid 2619506:tid 2619506] [client 20.203.142.71:45243] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/Requests/error_log
[Thu Jul 30 09:47:08.822717 2026] [ssl:error] [pid 2619660:tid 2619660] (EAI 2)Name or service not known: [client 144.76.19.72:20890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:08.822744 2026] [ssl:error] [pid 2619660:tid 2619660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:08.868166 2026] [access_compat:error] [pid 2604294:tid 2604294] [client 191.232.199.39:36917] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-file.php
[Thu Jul 30 09:47:08.868486 2026] [core:error] [pid 2604294:tid 2604294] [client 191.232.199.39:36917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:08.877096 2026] [ssl:error] [pid 2608775:tid 2608775] (EAI 2)Name or service not known: [client 144.76.19.72:20898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:08.877122 2026] [ssl:error] [pid 2608775:tid 2608775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:09.076642 2026] [lsapi:error] [pid 2619667:tid 2619667] [client 85.204.70.116:46438] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 20480 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-fatal-error-handler.php on line 67\n
[Thu Jul 30 09:47:09.076685 2026] [lsapi:error] [pid 2619667:tid 2619667] [client 85.204.70.116:46438] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 20480 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/plugin.php on line 182\n
[Thu Jul 30 09:47:09.560089 2026] [access_compat:error] [pid 2617763:tid 2617763] [client 191.232.199.39:36872] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/sid3.php
[Thu Jul 30 09:47:09.560417 2026] [core:error] [pid 2617763:tid 2617763] [client 191.232.199.39:36872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:10.372315 2026] [authz_core:error] [pid 2617763:tid 2617763] [client 57.141.0.49:50324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:47:10.372935 2026] [authz_core:error] [pid 2617763:tid 2617763] [client 57.141.0.49:50324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:47:11.013027 2026] [security2:error] [pid 2618684:tid 2618684] [client 47.128.20.52:13438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amsPj4GCNpAFDH84dp33wwAAABQ"]
[Thu Jul 30 09:47:11.013509 2026] [core:error] [pid 2618684:tid 2618684] [client 47.128.20.52:13438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:11.933981 2026] [ssl:error] [pid 2614792:tid 2614792] (EAI 2)Name or service not known: [client 144.76.19.72:57590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:11.934007 2026] [ssl:error] [pid 2614792:tid 2614792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:11.987317 2026] [ssl:error] [pid 2618684:tid 2618684] (EAI 2)Name or service not known: [client 144.76.19.72:57600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:11.987344 2026] [ssl:error] [pid 2618684:tid 2618684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:12.672829 2026] [security2:error] [pid 2617629:tid 2617629] [client 114.119.155.144:37259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~14,104/request_format~html"] [unique_id "amsPkFKysFh7YC3PyATFLwAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~14,104/request_format~html
[Thu Jul 30 09:47:13.334920 2026] [core:error] [pid 2599755:tid 2599755] [client 158.158.76.106:48832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:13.334947 2026] [core:error] [pid 2599755:tid 2599755] [client 158.158.76.106:48832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:13.855884 2026] [core:error] [pid 2599755:tid 2599755] [client 158.158.76.106:8539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:13.855906 2026] [core:error] [pid 2599755:tid 2599755] [client 158.158.76.106:8539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:14.249133 2026] [core:error] [pid 2619666:tid 2619666] [client 158.158.76.106:21636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:14.249161 2026] [core:error] [pid 2619666:tid 2619666] [client 158.158.76.106:21636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:14.264227 2026] [security2:error] [pid 2618584:tid 2618584] [client 114.119.155.144:37263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~14,104/request_format~html"] [unique_id "amsPkmpdwHxxxh_98x_lxwAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~14,104/request_format~html
[Thu Jul 30 09:47:15.044346 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:57616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:15.044372 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:15.097392 2026] [ssl:error] [pid 2618872:tid 2618872] (EAI 2)Name or service not known: [client 144.76.19.72:57630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:15.097428 2026] [ssl:error] [pid 2618872:tid 2618872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:16.759086 2026] [cgi:error] [pid 2617716:tid 2617716] [client 20.113.148.57:11146] AH02811: stderr from /home/davidebell/public_html/evilworkshop.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 09:47:16.837841 2026] [authz_core:error] [pid 2617716:tid 2617716] [client 20.113.148.57:11146] AH01630: client denied by server configuration: /home/davidebell/public_html/evilworkshop.com/php.ini
[Thu Jul 30 09:47:16.895457 2026] [core:error] [pid 2619607:tid 2619607] [client 158.158.76.106:62678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:16.895488 2026] [core:error] [pid 2619607:tid 2619607] [client 158.158.76.106:62678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:18.154353 2026] [ssl:error] [pid 2618872:tid 2618872] (EAI 2)Name or service not known: [client 144.76.19.72:57638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:18.154382 2026] [ssl:error] [pid 2618872:tid 2618872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:18.210203 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:57652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:18.210228 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:18.281739 2026] [security2:error] [pid 2619609:tid 2619609] [client 163.7.14.231:37927] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPligyV4H6wE-hQtPR9gAAAC4"]
[Thu Jul 30 09:47:18.281785 2026] [security2:error] [pid 2619609:tid 2619609] [client 163.7.14.231:37927] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPligyV4H6wE-hQtPR9gAAAC4"]
[Thu Jul 30 09:47:18.282039 2026] [security2:error] [pid 2619609:tid 2619609] [client 163.7.14.231:37927] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPligyV4H6wE-hQtPR9gAAAC4"]
[Thu Jul 30 09:47:20.050887 2026] [core:error] [pid 2606608:tid 2606608] [client 66.249.66.167:46033] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:20.050913 2026] [core:error] [pid 2606608:tid 2606608] [client 66.249.66.167:46033] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:20.395559 2026] [security2:error] [pid 2617716:tid 2617716] [client 209.141.49.73:39382] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "mjs-services.com"] [uri "/xmlrpc.php"] [unique_id "amsPmBK_dvPX03fJSfTFcAAAABA"]
[Thu Jul 30 09:47:20.860607 2026] [security2:error] [pid 2599755:tid 2599755] [client 101.47.18.186:47271] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPmJOtPcNxPRODY-TBywAAACE"]
[Thu Jul 30 09:47:20.860652 2026] [security2:error] [pid 2599755:tid 2599755] [client 101.47.18.186:47271] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPmJOtPcNxPRODY-TBywAAACE"]
[Thu Jul 30 09:47:20.860900 2026] [security2:error] [pid 2599755:tid 2599755] [client 101.47.18.186:47271] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPmJOtPcNxPRODY-TBywAAACE"]
[Thu Jul 30 09:47:20.995791 2026] [authz_core:error] [pid 2612418:tid 2612418] [client 66.249.66.37:43853] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 09:47:21.267981 2026] [ssl:error] [pid 2619665:tid 2619665] (EAI 2)Name or service not known: [client 144.76.19.72:24720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:21.268011 2026] [ssl:error] [pid 2619665:tid 2619665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:21.323059 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:24736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:21.323107 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:21.773353 2026] [authz_core:error] [pid 2608775:tid 2608775] [client 57.141.0.24:22950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:47:21.773974 2026] [authz_core:error] [pid 2608775:tid 2608775] [client 57.141.0.24:22950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:47:23.567088 2026] [security2:error] [pid 2617716:tid 2617716] [client 185.191.171.7:10552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/pros-and-cons-of-being-a-leasing-agent"] [unique_id "amsPmxK_dvPX03fJSfTFcgAAABA"]
[Thu Jul 30 09:47:24.406359 2026] [ssl:error] [pid 2608775:tid 2608775] (EAI 2)Name or service not known: [client 144.76.19.72:24742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:24.406395 2026] [ssl:error] [pid 2608775:tid 2608775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:24.462451 2026] [ssl:error] [pid 2618872:tid 2618872] (EAI 2)Name or service not known: [client 144.76.19.72:24748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:24.462474 2026] [ssl:error] [pid 2618872:tid 2618872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:24.596977 2026] [security2:error] [pid 2613383:tid 2613383] [client 101.47.18.186:10531] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPnPV4N74zHMLN2XyP_wAAABk"]
[Thu Jul 30 09:47:24.597025 2026] [security2:error] [pid 2613383:tid 2613383] [client 101.47.18.186:10531] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPnPV4N74zHMLN2XyP_wAAABk"]
[Thu Jul 30 09:47:24.597285 2026] [security2:error] [pid 2613383:tid 2613383] [client 101.47.18.186:10531] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPnPV4N74zHMLN2XyP_wAAABk"]
[Thu Jul 30 09:47:24.650783 2026] [authz_core:error] [pid 2619666:tid 2619666] [client 57.141.0.39:53466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:47:24.651432 2026] [authz_core:error] [pid 2619666:tid 2619666] [client 57.141.0.39:53466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:47:25.089090 2026] [core:error] [pid 2619666:tid 2619666] [client 158.158.76.106:18009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:25.089113 2026] [core:error] [pid 2619666:tid 2619666] [client 158.158.76.106:18009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:27.515014 2026] [ssl:error] [pid 2617763:tid 2617763] (EAI 2)Name or service not known: [client 144.76.19.72:24750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:27.515046 2026] [ssl:error] [pid 2617763:tid 2617763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:27.571257 2026] [ssl:error] [pid 2612418:tid 2612418] (EAI 2)Name or service not known: [client 144.76.19.72:24766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:27.571288 2026] [ssl:error] [pid 2612418:tid 2612418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:27.648720 2026] [core:error] [pid 2614792:tid 2614792] [client 158.158.76.106:21634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:27.648747 2026] [core:error] [pid 2614792:tid 2614792] [client 158.158.76.106:21634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:27.688653 2026] [authz_core:error] [pid 2608775:tid 2608775] [client 57.141.0.61:26096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:47:27.689277 2026] [authz_core:error] [pid 2608775:tid 2608775] [client 57.141.0.61:26096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:47:28.177738 2026] [core:error] [pid 2618873:tid 2618873] (13)Permission denied: [client 216.73.216.199:25202] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-4k/free_calls
[Thu Jul 30 09:47:30.630540 2026] [ssl:error] [pid 2618493:tid 2618493] (EAI 2)Name or service not known: [client 144.76.19.72:62858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:30.630583 2026] [ssl:error] [pid 2618493:tid 2618493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:30.691839 2026] [ssl:error] [pid 2618684:tid 2618684] (EAI 2)Name or service not known: [client 144.76.19.72:62872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:30.691880 2026] [ssl:error] [pid 2618684:tid 2618684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:30.996082 2026] [core:error] [pid 2617763:tid 2617763] [client 66.249.64.171:65024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:30.996109 2026] [core:error] [pid 2617763:tid 2617763] [client 66.249.64.171:65024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:31.513101 2026] [authz_core:error] [pid 2618493:tid 2618493] [client 57.141.0.55:62916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:47:31.513729 2026] [authz_core:error] [pid 2618493:tid 2618493] [client 57.141.0.55:62916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:47:33.039278 2026] [core:error] [pid 2617760:tid 2617760] [client 158.158.76.106:19520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:33.039301 2026] [core:error] [pid 2617760:tid 2617760] [client 158.158.76.106:19520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:33.743658 2026] [ssl:error] [pid 2618493:tid 2618493] (EAI 2)Name or service not known: [client 144.76.19.72:62888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:33.743687 2026] [ssl:error] [pid 2618493:tid 2618493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:33.797544 2026] [ssl:error] [pid 2617760:tid 2617760] (EAI 2)Name or service not known: [client 144.76.19.72:62894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:33.797568 2026] [ssl:error] [pid 2617760:tid 2617760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:34.707334 2026] [security2:error] [pid 2618684:tid 2618684] [client 100.28.57.133:20076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/index.php"] [unique_id "amsPpoGCNpAFDH84dp330AAAABQ"]
[Thu Jul 30 09:47:36.854878 2026] [ssl:error] [pid 2618493:tid 2618493] (EAI 2)Name or service not known: [client 144.76.19.72:62906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:36.854909 2026] [ssl:error] [pid 2618493:tid 2618493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:36.910705 2026] [ssl:error] [pid 2619666:tid 2619666] (EAI 2)Name or service not known: [client 144.76.19.72:62912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:36.910746 2026] [ssl:error] [pid 2619666:tid 2619666] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:38.725357 2026] [core:error] [pid 2608554:tid 2608554] [client 158.158.76.106:7689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:38.725382 2026] [core:error] [pid 2608554:tid 2608554] [client 158.158.76.106:7689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:38.742795 2026] [security2:error] [pid 2617629:tid 2617629] [client 43.159.143.187:51878] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amsPqlKysFh7YC3PyATFOQAAAAI"]
[Thu Jul 30 09:47:39.966460 2026] [ssl:error] [pid 2618493:tid 2618493] (EAI 2)Name or service not known: [client 144.76.19.72:37644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:39.966492 2026] [ssl:error] [pid 2618493:tid 2618493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:40.019542 2026] [ssl:error] [pid 2603982:tid 2603982] (EAI 2)Name or service not known: [client 144.76.19.72:37656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:40.019572 2026] [ssl:error] [pid 2603982:tid 2603982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:41.078997 2026] [core:error] [pid 2619609:tid 2619609] [client 66.249.64.171:58843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:41.079026 2026] [core:error] [pid 2619609:tid 2619609] [client 66.249.64.171:58843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:43.071527 2026] [ssl:error] [pid 2619606:tid 2619606] (EAI 2)Name or service not known: [client 144.76.19.72:37672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:43.071558 2026] [ssl:error] [pid 2619606:tid 2619606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:43.126910 2026] [ssl:error] [pid 2619609:tid 2619609] (EAI 2)Name or service not known: [client 144.76.19.72:37680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:43.126945 2026] [ssl:error] [pid 2619609:tid 2619609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:46.181163 2026] [ssl:error] [pid 2619660:tid 2619660] (EAI 2)Name or service not known: [client 144.76.19.72:37692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:46.181191 2026] [ssl:error] [pid 2619660:tid 2619660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:46.238925 2026] [ssl:error] [pid 2617711:tid 2617711] (EAI 2)Name or service not known: [client 144.76.19.72:37708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:46.238958 2026] [ssl:error] [pid 2617711:tid 2617711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:48.994677 2026] [security2:error] [pid 2621059:tid 2621059] [client 43.161.217.205:48320] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsPtBD_cGc3pOz6vi7XtQAAAAs"], referer: http://banskoexpress.co.uk
[Thu Jul 30 09:47:49.201455 2026] [core:error] [pid 2621060:tid 2621060] [client 66.249.66.8:48188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:49.201510 2026] [core:error] [pid 2621060:tid 2621060] [client 66.249.66.8:48188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:47:49.409029 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:37710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:49.409060 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:49.466299 2026] [ssl:error] [pid 2619608:tid 2619608] (EAI 2)Name or service not known: [client 144.76.19.72:37714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:49.466332 2026] [ssl:error] [pid 2619608:tid 2619608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:52.522349 2026] [ssl:error] [pid 2617762:tid 2617762] (EAI 2)Name or service not known: [client 144.76.19.72:48996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:52.522400 2026] [ssl:error] [pid 2617762:tid 2617762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:52.575705 2026] [ssl:error] [pid 2604294:tid 2604294] (EAI 2)Name or service not known: [client 144.76.19.72:49006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:52.575739 2026] [ssl:error] [pid 2604294:tid 2604294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:53.030191 2026] [security2:error] [pid 2619608:tid 2619608] [client 43.161.217.205:60314] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsPuRauEwWWC4zZWLFOrAAAACs"], referer: http://www.banskoexpress.com
[Thu Jul 30 09:47:53.186314 2026] [ssl:error] [pid 2618873:tid 2618873] (70014)End of file found: [client 216.73.216.199:25202] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:47:55.646831 2026] [ssl:error] [pid 2603982:tid 2603982] (EAI 2)Name or service not known: [client 144.76.19.72:49010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:55.646869 2026] [ssl:error] [pid 2603982:tid 2603982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:55.702670 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:49018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:55.702699 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:55.881015 2026] [authz_core:error] [pid 2618684:tid 2618684] [client 57.141.0.6:60956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:47:55.881654 2026] [authz_core:error] [pid 2618684:tid 2618684] [client 57.141.0.6:60956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:47:56.439461 2026] [security2:error] [pid 2621294:tid 2621294] [client 14.191.142.106:9475] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amsPvJyH40wdMyB819Pk5QAAABI"]
[Thu Jul 30 09:47:56.439741 2026] [security2:error] [pid 2621294:tid 2621294] [client 14.191.142.106:9475] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amsPvJyH40wdMyB819Pk5QAAABI"]
[Thu Jul 30 09:47:56.439921 2026] [security2:error] [pid 2621294:tid 2621294] [client 14.191.142.106:9475] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amsPvJyH40wdMyB819Pk5QAAABI"]
[Thu Jul 30 09:47:56.809478 2026] [security2:error] [pid 2608554:tid 2608554] [client 85.208.96.206:24238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2011.0/prev_next,prev.html"] [unique_id "amsPvMXI2yH6bE9HuWnBvwAAAB8"]
[Thu Jul 30 09:47:56.997619 2026] [authz_core:error] [pid 2612418:tid 2612418] [client 66.249.66.33:60922] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:47:57.000264 2026] [authz_core:error] [pid 2612418:tid 2612418] [client 66.249.66.33:60922] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:47:58.758136 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:49020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:58.758162 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:58.814372 2026] [ssl:error] [pid 2618873:tid 2618873] (EAI 2)Name or service not known: [client 144.76.19.72:49026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:47:58.814409 2026] [ssl:error] [pid 2618873:tid 2618873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:47:59.263193 2026] [security2:error] [pid 2621360:tid 2621360] [client 43.130.105.21:58644] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsPv9nnHiu7m3N_7RMYbgAAAB4"]
[Thu Jul 30 09:48:01.763456 2026] [security2:error] [pid 2621059:tid 2621059] [client 43.130.105.21:53682] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsPwRD_cGc3pOz6vi7XuAAAAAs"], referer: http://www.purple-childcare.co.uk
[Thu Jul 30 09:48:01.869162 2026] [ssl:error] [pid 2617763:tid 2617763] (EAI 2)Name or service not known: [client 144.76.19.72:26648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:01.869193 2026] [ssl:error] [pid 2617763:tid 2617763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:01.924762 2026] [ssl:error] [pid 2618873:tid 2618873] (EAI 2)Name or service not known: [client 144.76.19.72:26658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:01.924795 2026] [ssl:error] [pid 2618873:tid 2618873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:02.371540 2026] [security2:error] [pid 2617672:tid 2617672] [client 43.164.129.191:59150] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.com"] [uri "/"] [unique_id "amsPwjCyJ0cf1KfZ82uLTQAAAAc"]
[Thu Jul 30 09:48:02.747679 2026] [authz_core:error] [pid 2612418:tid 2612418] [client 57.141.0.1:49640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:02.748326 2026] [authz_core:error] [pid 2612418:tid 2612418] [client 57.141.0.1:49640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:03.227599 2026] [cgi:error] [pid 2620845:tid 2620845] [client 104.234.4.200:60232] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:03.381832 2026] [ssl:error] [pid 2618873:tid 2618873] (70014)End of file found: [client 216.73.216.199:41925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:48:03.581835 2026] [security2:error] [pid 2617711:tid 2617711] [client 74.7.242.26:51258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thewhitefamily.uk"] [uri "/"] [unique_id "amsPw7-AjNIZnWjk7Yn9ZwAAAAw"]
[Thu Jul 30 09:48:04.988244 2026] [ssl:error] [pid 2620845:tid 2620845] (EAI 2)Name or service not known: [client 144.76.19.72:26660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:04.988298 2026] [ssl:error] [pid 2620845:tid 2620845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:05.041766 2026] [ssl:error] [pid 2617711:tid 2617711] (EAI 2)Name or service not known: [client 144.76.19.72:26674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:05.041793 2026] [ssl:error] [pid 2617711:tid 2617711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:08.095283 2026] [ssl:error] [pid 2621036:tid 2621036] (EAI 2)Name or service not known: [client 144.76.19.72:26682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:08.095321 2026] [ssl:error] [pid 2621036:tid 2621036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:08.150118 2026] [ssl:error] [pid 2609812:tid 2609812] (EAI 2)Name or service not known: [client 144.76.19.72:26698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:08.150147 2026] [ssl:error] [pid 2609812:tid 2609812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:09.156733 2026] [security2:error] [pid 2604294:tid 2604294] [client 43.164.129.191:35576] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.be"] [uri "/"] [unique_id "amsPyVx7XgAsBr_VO_zDWAAAAAk"]
[Thu Jul 30 09:48:11.144426 2026] [security2:error] [pid 2617711:tid 2617711] [client 85.208.98.23:63490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsPy7-AjNIZnWjk7Yn9aAAAAAw"]
[Thu Jul 30 09:48:11.203434 2026] [ssl:error] [pid 2621319:tid 2621319] (EAI 2)Name or service not known: [client 144.76.19.72:63084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:11.203468 2026] [ssl:error] [pid 2621319:tid 2621319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:11.256473 2026] [ssl:error] [pid 2617763:tid 2617763] (EAI 2)Name or service not known: [client 144.76.19.72:63096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:11.256502 2026] [ssl:error] [pid 2617763:tid 2617763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:11.582907 2026] [authz_core:error] [pid 2618839:tid 2618839] [client 57.141.0.69:48300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:11.583537 2026] [authz_core:error] [pid 2618839:tid 2618839] [client 57.141.0.69:48300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:11.825446 2026] [security2:error] [pid 2618873:tid 2618873] [client 43.164.129.191:42104] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsPy-86s8DcofxWggs-8gAAACY"], referer: http://www.orgent.be
[Thu Jul 30 09:48:13.552620 2026] [ssl:error] [pid 2617761:tid 2617761] (70014)End of file found: [client 216.73.216.199:1174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:48:13.812255 2026] [security2:error] [pid 2621319:tid 2621319] [client 43.166.237.57:51458] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.quantum.com.mt"] [uri "/"] [unique_id "amsPzZNkf70ffu0OmSV_KwAAABs"]
[Thu Jul 30 09:48:14.025175 2026] [security2:error] [pid 2618839:tid 2618839] [client 43.228.157.102:39954] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.broadbentandsmith.ditchfest.com"] [uri "/.git/config"] [unique_id "amsPzig0mH2zVUWjMqYT8QAAAAA"]
[Thu Jul 30 09:48:14.025365 2026] [security2:error] [pid 2618839:tid 2618839] [client 43.228.157.102:39954] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.broadbentandsmith.ditchfest.com"] [uri "/.git/config"] [unique_id "amsPzig0mH2zVUWjMqYT8QAAAAA"]
[Thu Jul 30 09:48:14.025571 2026] [security2:error] [pid 2618839:tid 2618839] [client 43.228.157.102:39954] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.broadbentandsmith.ditchfest.com"] [uri "/.git/config"] [unique_id "amsPzig0mH2zVUWjMqYT8QAAAAA"]
[Thu Jul 30 09:48:14.310488 2026] [ssl:error] [pid 2604294:tid 2604294] (EAI 2)Name or service not known: [client 144.76.19.72:63110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:14.310518 2026] [ssl:error] [pid 2604294:tid 2604294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:14.366285 2026] [ssl:error] [pid 2617762:tid 2617762] (EAI 2)Name or service not known: [client 144.76.19.72:63122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:14.366314 2026] [ssl:error] [pid 2617762:tid 2617762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:14.367477 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:14.614283 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:14.733458 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:14.893889 2026] [core:error] [pid 2618493:tid 2618493] [client 158.158.76.106:29585] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:14.893931 2026] [core:error] [pid 2618493:tid 2618493] [client 158.158.76.106:29585] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:14.983520 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:15.159006 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:15.627365 2026] [security2:error] [pid 2621319:tid 2621319] [client 79.181.157.209:12564] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPz5Nkf70ffu0OmSV_LAAAABs"]
[Thu Jul 30 09:48:15.627413 2026] [security2:error] [pid 2621319:tid 2621319] [client 79.181.157.209:12564] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsPz5Nkf70ffu0OmSV_LAAAABs"]
[Thu Jul 30 09:48:15.627693 2026] [security2:error] [pid 2621319:tid 2621319] [client 79.181.157.209:12564] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsPz5Nkf70ffu0OmSV_LAAAABs"]
[Thu Jul 30 09:48:15.712476 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:15.883341 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:16.188218 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:16.283837 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:16.435447 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:16.491569 2026] [authz_core:error] [pid 2621294:tid 2621294] [client 57.141.0.27:33326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:16.492204 2026] [authz_core:error] [pid 2621294:tid 2621294] [client 57.141.0.27:33326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:16.814960 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:16.907474 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.022086 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.115234 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.215492 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.371610 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.424867 2026] [ssl:error] [pid 2617762:tid 2617762] (EAI 2)Name or service not known: [client 144.76.19.72:63132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:17.424896 2026] [ssl:error] [pid 2617762:tid 2617762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:17.468090 2026] [security2:error] [pid 2617763:tid 2617763] [client 43.106.8.152:52907] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsP0U2RkEpfWHf7UIQdBAAAABo"]
[Thu Jul 30 09:48:17.468136 2026] [security2:error] [pid 2617763:tid 2617763] [client 43.106.8.152:52907] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsP0U2RkEpfWHf7UIQdBAAAABo"]
[Thu Jul 30 09:48:17.468363 2026] [security2:error] [pid 2617763:tid 2617763] [client 43.106.8.152:52907] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsP0U2RkEpfWHf7UIQdBAAAABo"]
[Thu Jul 30 09:48:17.480027 2026] [ssl:error] [pid 2621361:tid 2621361] (EAI 2)Name or service not known: [client 144.76.19.72:63148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:17.480053 2026] [ssl:error] [pid 2621361:tid 2621361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:17.606271 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.740031 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.833729 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:17.973278 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:18.085640 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:18.111143 2026] [core:error] [pid 2617762:tid 2617762] [client 158.158.76.106:43731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:18.111171 2026] [core:error] [pid 2617762:tid 2617762] [client 158.158.76.106:43731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:18.206601 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:18.326375 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:18.668767 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:18.839101 2026] [core:error] [pid 2609812:tid 2609812] [client 66.249.66.68:58364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:18.839128 2026] [core:error] [pid 2609812:tid 2609812] [client 66.249.66.68:58364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:18.931716 2026] [core:error] [pid 2619665:tid 2619665] [client 158.158.76.106:62979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:18.931740 2026] [core:error] [pid 2619665:tid 2619665] [client 158.158.76.106:62979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:19.016527 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:19.108019 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:19.328166 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:19.607633 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:19.704454 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:19.915116 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:20.017858 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:20.081097 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:18016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:20.081125 2026] [core:error] [pid 2609812:tid 2609812] [client 158.158.76.106:18016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:20.142326 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:20.538371 2026] [ssl:error] [pid 2603982:tid 2603982] (EAI 2)Name or service not known: [client 144.76.19.72:61688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:20.538399 2026] [ssl:error] [pid 2603982:tid 2603982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:20.549790 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:20.595805 2026] [ssl:error] [pid 2618873:tid 2618873] (EAI 2)Name or service not known: [client 144.76.19.72:61692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:20.595843 2026] [ssl:error] [pid 2618873:tid 2618873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:20.663357 2026] [security2:error] [pid 2615823:tid 2615823] [client 43.106.8.152:10903] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsP1KhCNDJKK3e4gjwcIgAAADA"]
[Thu Jul 30 09:48:20.663411 2026] [security2:error] [pid 2615823:tid 2615823] [client 43.106.8.152:10903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsP1KhCNDJKK3e4gjwcIgAAADA"]
[Thu Jul 30 09:48:20.663693 2026] [security2:error] [pid 2615823:tid 2615823] [client 43.106.8.152:10903] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsP1KhCNDJKK3e4gjwcIgAAADA"]
[Thu Jul 30 09:48:20.696899 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:21.044673 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:21.215782 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:21.308650 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:21.572261 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:21.928219 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:21.964573 2026] [core:error] [pid 2615823:tid 2615823] [client 158.158.76.106:30964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:21.964611 2026] [core:error] [pid 2615823:tid 2615823] [client 158.158.76.106:30964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:22.167997 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:22.297311 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:22.430414 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:22.522930 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:22.643271 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:22.773684 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:22.889386 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:23.020118 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:23.085398 2026] [security2:error] [pid 2621319:tid 2621319] [client 43.164.0.21:52406] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tyredandmotional.co.uk"] [uri "/"] [unique_id "amsP15Nkf70ffu0OmSV_LwAAABs"]
[Thu Jul 30 09:48:23.188833 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:23.295396 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:63102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:23.295425 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:63102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:23.312843 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:23.474707 2026] [cgi:error] [pid 2617672:tid 2617672] [client 51.120.83.160:9676] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:23.654751 2026] [ssl:error] [pid 2596515:tid 2596515] (EAI 2)Name or service not known: [client 144.76.19.72:61698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:23.654781 2026] [ssl:error] [pid 2596515:tid 2596515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:23.710713 2026] [ssl:error] [pid 2621622:tid 2621622] (EAI 2)Name or service not known: [client 144.76.19.72:61706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:23.710745 2026] [ssl:error] [pid 2621622:tid 2621622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:23.872692 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:7703] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:23.872714 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:7703] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:23.991215 2026] [security2:error] [pid 2603345:tid 2603345] [client 85.208.96.197:25882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/three-line-equal-sign-latex"] [unique_id "amsP18Gf_gh-QOQqVW2ctQAAAAE"]
[Thu Jul 30 09:48:24.812674 2026] [security2:error] [pid 2596515:tid 2596515] [client 43.164.0.21:55256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amsP2AZzu-nhBfCDajx6GwAAABw"], referer: http://tyredandmotional.co.uk
[Thu Jul 30 09:48:24.870564 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:25.015950 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:25.129424 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:25.187317 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:29624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:25.187345 2026] [core:error] [pid 2613383:tid 2613383] [client 158.158.76.106:29624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:25.397851 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:25.514762 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:25.776209 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:25.896188 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:26.151416 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:26.465049 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:26.599903 2026] [authz_core:error] [pid 2619608:tid 2619608] [client 57.141.0.16:55164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:26.600558 2026] [authz_core:error] [pid 2619608:tid 2619608] [client 57.141.0.16:55164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:26.780755 2026] [ssl:error] [pid 2613383:tid 2613383] (EAI 2)Name or service not known: [client 144.76.19.72:61718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:26.780796 2026] [ssl:error] [pid 2613383:tid 2613383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:26.828943 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:26.833683 2026] [ssl:error] [pid 2621036:tid 2621036] (EAI 2)Name or service not known: [client 144.76.19.72:61726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:26.833706 2026] [ssl:error] [pid 2621036:tid 2621036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:26.834644 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:63086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:26.834663 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:63086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:27.170791 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:27.463379 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:27.805937 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:27.855439 2026] [authz_core:error] [pid 2621059:tid 2621059] [client 57.141.0.17:63494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:27.856061 2026] [authz_core:error] [pid 2621059:tid 2621059] [client 57.141.0.17:63494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:28.012927 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:28.324785 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:28.673018 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:29.111222 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:29.435721 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:29.585297 2026] [core:error] [pid 2621059:tid 2621059] [client 158.158.76.106:63056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:29.585331 2026] [core:error] [pid 2621059:tid 2621059] [client 158.158.76.106:63056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:29.588559 2026] [cgi:error] [pid 2621622:tid 2621622] [client 51.120.83.160:63338] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 09:48:29.890427 2026] [ssl:error] [pid 2615823:tid 2615823] (EAI 2)Name or service not known: [client 144.76.19.72:52006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:29.890459 2026] [ssl:error] [pid 2615823:tid 2615823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:29.946498 2026] [ssl:error] [pid 2617763:tid 2617763] (EAI 2)Name or service not known: [client 144.76.19.72:52012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:29.946528 2026] [ssl:error] [pid 2617763:tid 2617763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:30.686382 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:11142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:30.686415 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:11142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:31.292715 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:62987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:31.292741 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:62987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:32.421063 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:43725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:32.421101 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:43725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:32.633029 2026] [authz_core:error] [pid 2619606:tid 2619606] [client 57.141.0.50:25744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:32.633665 2026] [authz_core:error] [pid 2619606:tid 2619606] [client 57.141.0.50:25744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:33.000166 2026] [ssl:error] [pid 2619608:tid 2619608] (EAI 2)Name or service not known: [client 144.76.19.72:52020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:33.000198 2026] [ssl:error] [pid 2619608:tid 2619608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:33.091595 2026] [ssl:error] [pid 2617761:tid 2617761] (EAI 2)Name or service not known: [client 144.76.19.72:52022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:33.091622 2026] [ssl:error] [pid 2617761:tid 2617761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:35.441979 2026] [core:error] [pid 2623182:tid 2623182] [client 158.158.76.106:64038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:35.442007 2026] [core:error] [pid 2623182:tid 2623182] [client 158.158.76.106:64038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:36.143986 2026] [ssl:error] [pid 2604294:tid 2604294] (EAI 2)Name or service not known: [client 144.76.19.72:52032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:36.144020 2026] [ssl:error] [pid 2604294:tid 2604294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:36.196710 2026] [ssl:error] [pid 2603982:tid 2603982] (EAI 2)Name or service not known: [client 144.76.19.72:52042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:36.196745 2026] [ssl:error] [pid 2603982:tid 2603982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:37.300831 2026] [security2:error] [pid 2608554:tid 2608554] [client 114.119.142.20:25787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~104,103/request_format~html"] [unique_id "amsP5cXI2yH6bE9HuWnB_gAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~104,103,19/request_format~html
[Thu Jul 30 09:48:38.502781 2026] [security2:error] [pid 2621361:tid 2621361] [client 114.119.142.20:25803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~104,103/request_format~html"] [unique_id "amsP5sN1m3KstbhQZvKz9gAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~104,103,19/request_format~html
[Thu Jul 30 09:48:39.253203 2026] [ssl:error] [pid 2621360:tid 2621360] (EAI 2)Name or service not known: [client 144.76.19.72:52052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:39.253237 2026] [ssl:error] [pid 2621360:tid 2621360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:39.307968 2026] [ssl:error] [pid 2621294:tid 2621294] (EAI 2)Name or service not known: [client 144.76.19.72:52064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:39.308002 2026] [ssl:error] [pid 2621294:tid 2621294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:42.367398 2026] [ssl:error] [pid 2623704:tid 2623704] (EAI 2)Name or service not known: [client 144.76.19.72:24936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:42.367442 2026] [ssl:error] [pid 2623704:tid 2623704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:42.422461 2026] [ssl:error] [pid 2621319:tid 2621319] (EAI 2)Name or service not known: [client 144.76.19.72:24944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:42.422493 2026] [ssl:error] [pid 2621319:tid 2621319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:43.415513 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:30940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:43.415553 2026] [core:error] [pid 2619662:tid 2619662] [client 158.158.76.106:30940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:45.359042 2026] [core:error] [pid 2620845:tid 2620845] [client 158.158.76.106:26386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:45.359082 2026] [core:error] [pid 2620845:tid 2620845] [client 158.158.76.106:26386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:45.478405 2026] [ssl:error] [pid 2617672:tid 2617672] (EAI 2)Name or service not known: [client 144.76.19.72:24960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:45.478440 2026] [ssl:error] [pid 2617672:tid 2617672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:45.535603 2026] [ssl:error] [pid 2619608:tid 2619608] (EAI 2)Name or service not known: [client 144.76.19.72:24964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:45.535629 2026] [ssl:error] [pid 2619608:tid 2619608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:45.960034 2026] [core:error] [pid 2622219:tid 2622219] [client 158.158.76.106:26378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:45.960056 2026] [core:error] [pid 2622219:tid 2622219] [client 158.158.76.106:26378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:46.235844 2026] [authz_core:error] [pid 2621319:tid 2621319] [client 57.141.0.56:38794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:46.236471 2026] [authz_core:error] [pid 2621319:tid 2621319] [client 57.141.0.56:38794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:48.425310 2026] [core:error] [pid 2621319:tid 2621319] [client 158.158.76.106:52820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:48.425345 2026] [core:error] [pid 2621319:tid 2621319] [client 158.158.76.106:52820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:48.589059 2026] [ssl:error] [pid 2617711:tid 2617711] (EAI 2)Name or service not known: [client 144.76.19.72:24980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:48.589101 2026] [ssl:error] [pid 2617711:tid 2617711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:48.641810 2026] [ssl:error] [pid 2620845:tid 2620845] (EAI 2)Name or service not known: [client 144.76.19.72:24984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:48.641843 2026] [ssl:error] [pid 2620845:tid 2620845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:51.211184 2026] [core:error] [pid 2624122:tid 2624122] [client 158.158.76.106:52805] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:51.211238 2026] [core:error] [pid 2624122:tid 2624122] [client 158.158.76.106:52805] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:51.698233 2026] [ssl:error] [pid 2621622:tid 2621622] (EAI 2)Name or service not known: [client 144.76.19.72:45508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:51.698267 2026] [ssl:error] [pid 2621622:tid 2621622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:51.755027 2026] [ssl:error] [pid 2603345:tid 2603345] (EAI 2)Name or service not known: [client 144.76.19.72:45524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:51.755053 2026] [ssl:error] [pid 2603345:tid 2603345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:53.732830 2026] [security2:error] [pid 2619609:tid 2619609] [client 152.136.23.159:51182] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "acthoroughbreds.com"] [uri "/"] [unique_id "amsP9SgyV4H6wE-hQtPScgAAAC4"]
[Thu Jul 30 09:48:53.733418 2026] [authz_core:error] [pid 2619609:tid 2619609] [client 152.136.23.159:51182] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 09:48:53.733453 2026] [authz_core:error] [pid 2619609:tid 2619609] [client 152.136.23.159:51182] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 09:48:54.312328 2026] [authz_core:error] [pid 2623182:tid 2623182] [client 66.249.66.33:47551] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:48:54.314982 2026] [authz_core:error] [pid 2623182:tid 2623182] [client 66.249.66.33:47551] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:48:54.788987 2026] [core:error] [pid 2608554:tid 2608554] [client 66.249.66.8:35149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:54.789016 2026] [core:error] [pid 2608554:tid 2608554] [client 66.249.66.8:35149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:54.812306 2026] [ssl:error] [pid 2621360:tid 2621360] (EAI 2)Name or service not known: [client 144.76.19.72:45528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:54.812339 2026] [ssl:error] [pid 2621360:tid 2621360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:54.865215 2026] [ssl:error] [pid 2622219:tid 2622219] (EAI 2)Name or service not known: [client 144.76.19.72:45536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:48:54.865245 2026] [ssl:error] [pid 2622219:tid 2622219] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:48:55.185848 2026] [core:error] [pid 2619608:tid 2619608] [client 158.158.76.106:11301] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:55.185888 2026] [core:error] [pid 2619608:tid 2619608] [client 158.158.76.106:11301] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:48:55.521433 2026] [authz_core:error] [pid 2622219:tid 2622219] [client 57.141.0.18:34120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:55.522097 2026] [authz_core:error] [pid 2622219:tid 2622219] [client 57.141.0.18:34120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:48:56.101155 2026] [authz_core:error] [pid 2608554:tid 2608554] [client 57.141.0.10:60350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:48:56.101774 2026] [authz_core:error] [pid 2608554:tid 2608554] [client 57.141.0.10:60350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:00.382164 2026] [core:error] [pid 2619667:tid 2619667] [client 158.158.76.106:63088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:00.382194 2026] [core:error] [pid 2619667:tid 2619667] [client 158.158.76.106:63088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:02.472793 2026] [security2:error] [pid 2615823:tid 2615823] [client 170.80.238.44:5542] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsP_qhCNDJKK3e4gjwcMAAAADA"]
[Thu Jul 30 09:49:02.472841 2026] [security2:error] [pid 2615823:tid 2615823] [client 170.80.238.44:5542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsP_qhCNDJKK3e4gjwcMAAAADA"]
[Thu Jul 30 09:49:02.473089 2026] [security2:error] [pid 2615823:tid 2615823] [client 170.80.238.44:5542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsP_qhCNDJKK3e4gjwcMAAAADA"]
[Thu Jul 30 09:49:03.710613 2026] [ssl:error] [pid 2624518:tid 2624518] (EAI 2)Name or service not known: [client 144.76.19.72:45550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:03.710675 2026] [ssl:error] [pid 2624518:tid 2624518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:03.825193 2026] [authz_core:error] [pid 2624518:tid 2624518] [client 57.141.0.7:34154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:03.825897 2026] [authz_core:error] [pid 2624518:tid 2624518] [client 57.141.0.7:34154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:04.359686 2026] [ssl:error] [pid 2624611:tid 2624611] (EAI 2)Name or service not known: [client 144.76.19.72:63134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:04.359727 2026] [ssl:error] [pid 2624611:tid 2624611] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:04.861900 2026] [authz_core:error] [pid 2610834:tid 2610834] [client 192.71.38.71:42963] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 09:49:05.492688 2026] [core:error] [pid 2619667:tid 2619667] [client 158.158.76.106:52810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:05.492713 2026] [core:error] [pid 2619667:tid 2619667] [client 158.158.76.106:52810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:06.236923 2026] [core:error] [pid 2624437:tid 2624437] [client 158.158.76.106:62720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:06.236962 2026] [core:error] [pid 2624437:tid 2624437] [client 158.158.76.106:62720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:06.889389 2026] [core:error] [pid 2624443:tid 2624443] [client 223.235.96.214:22657] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:06.889430 2026] [core:error] [pid 2624443:tid 2624443] [client 223.235.96.214:22657] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:07.418081 2026] [ssl:error] [pid 2623544:tid 2623544] (EAI 2)Name or service not known: [client 144.76.19.72:63144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:07.418125 2026] [ssl:error] [pid 2623544:tid 2623544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:07.418812 2026] [core:error] [pid 2619607:tid 2619607] [client 158.158.76.106:64062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:07.418836 2026] [core:error] [pid 2619607:tid 2619607] [client 158.158.76.106:64062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:07.473081 2026] [ssl:error] [pid 2623992:tid 2623992] (EAI 2)Name or service not known: [client 144.76.19.72:63156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:07.473120 2026] [ssl:error] [pid 2623992:tid 2623992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:07.477961 2026] [security2:error] [pid 2624679:tid 2624679] [client 101.128.121.90:56680] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQA2jE7CPZdKALPN1-rgAAAFE"]
[Thu Jul 30 09:49:07.478002 2026] [security2:error] [pid 2624679:tid 2624679] [client 101.128.121.90:56680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQA2jE7CPZdKALPN1-rgAAAFE"]
[Thu Jul 30 09:49:07.478293 2026] [security2:error] [pid 2624679:tid 2624679] [client 101.128.121.90:56680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQA2jE7CPZdKALPN1-rgAAAFE"]
[Thu Jul 30 09:49:07.529842 2026] [authz_core:error] [pid 2624443:tid 2624443] [client 57.141.0.1:35892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:07.530463 2026] [authz_core:error] [pid 2624443:tid 2624443] [client 57.141.0.1:35892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:07.771874 2026] [core:error] [pid 2624440:tid 2624440] [client 158.158.76.106:22804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:07.771899 2026] [core:error] [pid 2624440:tid 2624440] [client 158.158.76.106:22804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:08.521943 2026] [core:error] [pid 2624679:tid 2624679] [client 158.158.76.106:61124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:08.521969 2026] [core:error] [pid 2624679:tid 2624679] [client 158.158.76.106:61124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:09.669189 2026] [core:error] [pid 2624507:tid 2624507] [client 158.158.76.106:7857] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:09.669226 2026] [core:error] [pid 2624507:tid 2624507] [client 158.158.76.106:7857] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:10.528261 2026] [ssl:error] [pid 2624375:tid 2624375] (EAI 2)Name or service not known: [client 144.76.19.72:49676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:10.528305 2026] [ssl:error] [pid 2624375:tid 2624375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:10.583216 2026] [ssl:error] [pid 2621294:tid 2621294] (EAI 2)Name or service not known: [client 144.76.19.72:49686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:10.583251 2026] [ssl:error] [pid 2621294:tid 2621294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:13.639194 2026] [ssl:error] [pid 2624679:tid 2624679] (EAI 2)Name or service not known: [client 144.76.19.72:49698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:13.639251 2026] [ssl:error] [pid 2624679:tid 2624679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:13.693198 2026] [ssl:error] [pid 2621294:tid 2621294] (EAI 2)Name or service not known: [client 144.76.19.72:49714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:13.693233 2026] [ssl:error] [pid 2621294:tid 2621294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:16.747728 2026] [ssl:error] [pid 2624516:tid 2624516] (EAI 2)Name or service not known: [client 144.76.19.72:49724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:16.747768 2026] [ssl:error] [pid 2624516:tid 2624516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:16.801477 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:49732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:16.801507 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:17.394309 2026] [authz_core:error] [pid 2621294:tid 2621294] [client 57.141.0.27:59186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:17.394929 2026] [authz_core:error] [pid 2621294:tid 2621294] [client 57.141.0.27:59186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:18.148876 2026] [authz_core:error] [pid 2624681:tid 2624681] [client 82.102.18.190:41246] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sodium_compat/src/error_log
[Thu Jul 30 09:49:19.033661 2026] [security2:error] [pid 2623704:tid 2623704] [client 49.36.126.187:48470] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQD0rWhzZux4L0lTuGbwAAABM"]
[Thu Jul 30 09:49:19.033710 2026] [security2:error] [pid 2623704:tid 2623704] [client 49.36.126.187:48470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQD0rWhzZux4L0lTuGbwAAABM"]
[Thu Jul 30 09:49:19.033993 2026] [security2:error] [pid 2623704:tid 2623704] [client 49.36.126.187:48470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQD0rWhzZux4L0lTuGbwAAABM"]
[Thu Jul 30 09:49:19.855458 2026] [ssl:error] [pid 2624509:tid 2624509] (EAI 2)Name or service not known: [client 144.76.19.72:40624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:19.855497 2026] [ssl:error] [pid 2624509:tid 2624509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:19.913559 2026] [ssl:error] [pid 2624441:tid 2624441] (EAI 2)Name or service not known: [client 144.76.19.72:40628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:19.913608 2026] [ssl:error] [pid 2624441:tid 2624441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:20.530396 2026] [authz_core:error] [pid 2621294:tid 2621294] [client 66.249.66.33:38533] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:49:20.533282 2026] [authz_core:error] [pid 2621294:tid 2621294] [client 66.249.66.33:38533] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:49:22.973522 2026] [ssl:error] [pid 2624440:tid 2624440] (EAI 2)Name or service not known: [client 144.76.19.72:40644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:22.973562 2026] [ssl:error] [pid 2624440:tid 2624440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:23.030225 2026] [ssl:error] [pid 2624406:tid 2624406] (EAI 2)Name or service not known: [client 144.76.19.72:40650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:23.030268 2026] [ssl:error] [pid 2624406:tid 2624406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:23.312823 2026] [authz_core:error] [pid 2624681:tid 2624681] [client 82.102.18.190:41246] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 09:49:24.023950 2026] [authz_core:error] [pid 2624120:tid 2624120] [client 57.141.0.13:58758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:24.024582 2026] [authz_core:error] [pid 2624120:tid 2624120] [client 57.141.0.13:58758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:24.509955 2026] [security2:error] [pid 2609812:tid 2609812] [client 85.208.96.201:37384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/hmong-blessing-ceremony"] [unique_id "amsQFCrUFJb_LMVx3oSZ6AAAAAM"]
[Thu Jul 30 09:49:25.328437 2026] [authz_core:error] [pid 2624521:tid 2624521] [client 66.249.66.33:59618] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:49:25.331105 2026] [authz_core:error] [pid 2624521:tid 2624521] [client 66.249.66.33:59618] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:49:26.082595 2026] [ssl:error] [pid 2620845:tid 2620845] (EAI 2)Name or service not known: [client 144.76.19.72:40656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:26.082626 2026] [ssl:error] [pid 2620845:tid 2620845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:26.134084 2026] [ssl:error] [pid 2624120:tid 2624120] (EAI 2)Name or service not known: [client 144.76.19.72:40658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:26.134119 2026] [ssl:error] [pid 2624120:tid 2624120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:27.065887 2026] [lsapi:error] [pid 2614355:tid 2614355] [client 87.199.209.34:44704] [host www.bigbangburgerbar.co.uk] Request retrieving failed. Reason: unknown, On: request body, Source: client, Where: unknown, referer: http://www.bigbangburgerbar.co.uk/Forum/index.php?PHPSESSID=9551of1p3broj8b4l15cucd4j6&action=register
[Thu Jul 30 09:49:27.065936 2026] [lsapi:error] [pid 2614355:tid 2614355] [client 87.199.209.34:44704] [host www.bigbangburgerbar.co.uk] In order to get more info about fail reason try to change LogLevel to Info in httpd.conf and restart Apache, referer: http://www.bigbangburgerbar.co.uk/Forum/index.php?PHPSESSID=9551of1p3broj8b4l15cucd4j6&action=register
[Thu Jul 30 09:49:27.065953 2026] [lsapi:error] [pid 2614355:tid 2614355] [client 87.199.209.34:44704] [host www.bigbangburgerbar.co.uk] Client error on sending request(POST /Forum/index.php?action=register2 HTTP/1.0); uri(/Forum/index.php?action=register2) content-length(95098): user_get_body(tmpstackbuf, 16384): read from client failed, referer: http://www.bigbangburgerbar.co.uk/Forum/index.php?PHPSESSID=9551of1p3broj8b4l15cucd4j6&action=register
[Thu Jul 30 09:49:28.690461 2026] [ssl:error] [pid 2621319:tid 2621319] (70014)End of file found: [client 216.73.216.199:15623] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:49:29.208138 2026] [ssl:error] [pid 2623544:tid 2623544] (EAI 2)Name or service not known: [client 144.76.19.72:40672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:29.208175 2026] [ssl:error] [pid 2623544:tid 2623544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:29.263091 2026] [ssl:error] [pid 2619607:tid 2619607] (EAI 2)Name or service not known: [client 144.76.19.72:40674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:29.263132 2026] [ssl:error] [pid 2619607:tid 2619607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:32.010305 2026] [authz_core:error] [pid 2624512:tid 2624512] [client 57.141.0.4:47180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:32.010930 2026] [authz_core:error] [pid 2624512:tid 2624512] [client 57.141.0.4:47180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:32.319048 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:21522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:32.319091 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:32.375757 2026] [ssl:error] [pid 2624521:tid 2624521] (EAI 2)Name or service not known: [client 144.76.19.72:21534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:32.375795 2026] [ssl:error] [pid 2624521:tid 2624521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:33.327190 2026] [authz_core:error] [pid 2624681:tid 2624681] [client 57.141.0.45:52628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:33.327817 2026] [authz_core:error] [pid 2624681:tid 2624681] [client 57.141.0.45:52628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:35.431740 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:21548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:35.431775 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:35.555389 2026] [ssl:error] [pid 2624516:tid 2624516] (EAI 2)Name or service not known: [client 144.76.19.72:21560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:35.555419 2026] [ssl:error] [pid 2624516:tid 2624516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:38.606924 2026] [ssl:error] [pid 2624405:tid 2624405] (EAI 2)Name or service not known: [client 144.76.19.72:21566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:38.606962 2026] [ssl:error] [pid 2624405:tid 2624405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:38.663495 2026] [ssl:error] [pid 2619665:tid 2619665] (EAI 2)Name or service not known: [client 144.76.19.72:21574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:38.663524 2026] [ssl:error] [pid 2619665:tid 2619665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:39.066234 2026] [security2:error] [pid 2619667:tid 2619667] [client 47.128.23.212:54070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsQI233guArmqQ55aGeiQAAADs"]
[Thu Jul 30 09:49:41.467839 2026] [cgi:error] [pid 2623900:tid 2623900] [client 66.249.68.37:59620] AH02812: stderr from /home/spurrorg/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:49:42.251346 2026] [ssl:error] [pid 2624517:tid 2624517] (EAI 2)Name or service not known: [client 144.76.19.72:32156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:42.251375 2026] [ssl:error] [pid 2624517:tid 2624517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:42.512720 2026] [ssl:error] [pid 2626058:tid 2626058] (EAI 2)Name or service not known: [client 144.76.19.72:32168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:42.512762 2026] [ssl:error] [pid 2626058:tid 2626058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:43.278082 2026] [core:error] [pid 2626058:tid 2626058] [client 66.249.66.169:44408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:43.278113 2026] [core:error] [pid 2626058:tid 2626058] [client 66.249.66.169:44408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:43.280343 2026] [core:error] [pid 2623145:tid 2623145] [client 66.249.66.168:58008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:43.280366 2026] [core:error] [pid 2623145:tid 2623145] [client 66.249.66.168:58008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:45.568636 2026] [ssl:error] [pid 2624518:tid 2624518] (EAI 2)Name or service not known: [client 144.76.19.72:32170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:45.568677 2026] [ssl:error] [pid 2624518:tid 2624518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:45.623160 2026] [ssl:error] [pid 2626164:tid 2626164] (EAI 2)Name or service not known: [client 144.76.19.72:32182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:45.623198 2026] [ssl:error] [pid 2626164:tid 2626164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:45.884881 2026] [core:error] [pid 2625934:tid 2625934] [client 66.249.66.5:35139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:45.884911 2026] [core:error] [pid 2625934:tid 2625934] [client 66.249.66.5:35139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:47.084199 2026] [authz_core:error] [pid 2619667:tid 2619667] [client 57.141.0.40:32592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:47.084826 2026] [authz_core:error] [pid 2619667:tid 2619667] [client 57.141.0.40:32592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:47.312679 2026] [authz_core:error] [pid 2623900:tid 2623900] [client 191.232.199.39:47706] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/pomo/error_log
[Thu Jul 30 09:49:48.681781 2026] [ssl:error] [pid 2624517:tid 2624517] (EAI 2)Name or service not known: [client 144.76.19.72:32192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:48.681813 2026] [ssl:error] [pid 2624517:tid 2624517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:48.734566 2026] [ssl:error] [pid 2624120:tid 2624120] (EAI 2)Name or service not known: [client 144.76.19.72:32200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:48.734601 2026] [ssl:error] [pid 2624120:tid 2624120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:50.022563 2026] [authz_core:error] [pid 2624519:tid 2624519] [client 57.141.0.54:64880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:50.023196 2026] [authz_core:error] [pid 2624519:tid 2624519] [client 57.141.0.54:64880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:51.797745 2026] [ssl:error] [pid 2618873:tid 2618873] (EAI 2)Name or service not known: [client 144.76.19.72:18844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:51.797788 2026] [ssl:error] [pid 2618873:tid 2618873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:51.849238 2026] [ssl:error] [pid 2626057:tid 2626057] (EAI 2)Name or service not known: [client 144.76.19.72:18860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:51.849276 2026] [ssl:error] [pid 2626057:tid 2626057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:53.693923 2026] [ssl:error] [pid 2625898:tid 2625898] (70014)End of file found: [client 216.73.216.199:15837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:49:54.901804 2026] [ssl:error] [pid 2621294:tid 2621294] (EAI 2)Name or service not known: [client 144.76.19.72:18868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:54.901831 2026] [ssl:error] [pid 2621294:tid 2621294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:54.957502 2026] [ssl:error] [pid 2615823:tid 2615823] (EAI 2)Name or service not known: [client 144.76.19.72:18874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:54.957534 2026] [ssl:error] [pid 2615823:tid 2615823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:55.545215 2026] [authz_core:error] [pid 2623900:tid 2623900] [client 52.238.199.152:36408] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-includes/ID3/error_log
[Thu Jul 30 09:49:57.771279 2026] [authz_core:error] [pid 2621318:tid 2621318] [client 57.141.0.11:63412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:49:57.771914 2026] [authz_core:error] [pid 2621318:tid 2621318] [client 57.141.0.11:63412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:49:57.851442 2026] [core:error] [pid 2614355:tid 2614355] [client 66.249.66.8:63732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:57.851469 2026] [core:error] [pid 2614355:tid 2614355] [client 66.249.66.8:63732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:49:58.030637 2026] [ssl:error] [pid 2624441:tid 2624441] (EAI 2)Name or service not known: [client 144.76.19.72:18882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:58.030678 2026] [ssl:error] [pid 2624441:tid 2624441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:58.052632 2026] [authz_core:error] [pid 2623900:tid 2623900] [client 52.238.199.152:36408] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-admin/includes/error_log
[Thu Jul 30 09:49:58.083775 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:18898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:49:58.083813 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:49:58.979366 2026] [authz_core:error] [pid 2623900:tid 2623900] [client 52.238.199.152:36408] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-includes/error_log
[Thu Jul 30 09:49:59.914604 2026] [security2:error] [pid 2625898:tid 2625898] [client 43.167.232.38:48902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "elhassanartist.com"] [uri "/"] [unique_id "amsQNxVfysOkv5FzxbDr_AAAAAU"]
[Thu Jul 30 09:50:01.140526 2026] [ssl:error] [pid 2624441:tid 2624441] (EAI 2)Name or service not known: [client 144.76.19.72:43752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:01.140559 2026] [ssl:error] [pid 2624441:tid 2624441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:01.167133 2026] [authz_core:error] [pid 2614355:tid 2614355] [client 191.232.199.39:47703] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/IXR/error_log
[Thu Jul 30 09:50:01.191742 2026] [ssl:error] [pid 2626057:tid 2626057] (EAI 2)Name or service not known: [client 144.76.19.72:43758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:01.191776 2026] [ssl:error] [pid 2626057:tid 2626057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:04.139780 2026] [security2:error] [pid 2619667:tid 2619667] [client 85.208.98.24:51146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/6-plus-%C5%9Farj-soketi-k.html"] [unique_id "amsQPG33guArmqQ55aGelwAAADs"]
[Thu Jul 30 09:50:04.244272 2026] [ssl:error] [pid 2624681:tid 2624681] (EAI 2)Name or service not known: [client 144.76.19.72:43766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:04.244314 2026] [ssl:error] [pid 2624681:tid 2624681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:04.305539 2026] [ssl:error] [pid 2611844:tid 2611844] (EAI 2)Name or service not known: [client 144.76.19.72:43782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:04.305597 2026] [ssl:error] [pid 2611844:tid 2611844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:07.250941 2026] [authz_core:error] [pid 2625934:tid 2625934] [client 52.238.199.152:2182] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 09:50:07.362270 2026] [ssl:error] [pid 2611844:tid 2611844] (EAI 2)Name or service not known: [client 144.76.19.72:43790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:07.362299 2026] [ssl:error] [pid 2611844:tid 2611844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:07.415345 2026] [ssl:error] [pid 2615823:tid 2615823] (EAI 2)Name or service not known: [client 144.76.19.72:43802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:07.415372 2026] [ssl:error] [pid 2615823:tid 2615823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:07.548473 2026] [security2:error] [pid 2626164:tid 2626164] [client 189.131.195.237:42160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQP7BOfMyKLqcSMjmyXAAAAA4"]
[Thu Jul 30 09:50:07.548524 2026] [security2:error] [pid 2626164:tid 2626164] [client 189.131.195.237:42160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQP7BOfMyKLqcSMjmyXAAAAA4"]
[Thu Jul 30 09:50:07.548802 2026] [security2:error] [pid 2626164:tid 2626164] [client 189.131.195.237:42160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQP7BOfMyKLqcSMjmyXAAAAA4"]
[Thu Jul 30 09:50:07.613892 2026] [security2:error] [pid 2624443:tid 2624443] [client 162.14.114.97:39982] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "broadcast-support.com"] [uri "/"] [unique_id "amsQP6soj4B54vn03-srUwAAAD8"]
[Thu Jul 30 09:50:09.140496 2026] [security2:error] [pid 2608554:tid 2608554] [client 89.205.95.49:51012] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQQcXI2yH6bE9HuWnCGQAAAB8"]
[Thu Jul 30 09:50:09.140547 2026] [security2:error] [pid 2608554:tid 2608554] [client 89.205.95.49:51012] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQQcXI2yH6bE9HuWnCGQAAAB8"]
[Thu Jul 30 09:50:09.140794 2026] [security2:error] [pid 2608554:tid 2608554] [client 89.205.95.49:51012] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQQcXI2yH6bE9HuWnCGQAAAB8"]
[Thu Jul 30 09:50:10.497962 2026] [ssl:error] [pid 2625898:tid 2625898] (EAI 2)Name or service not known: [client 144.76.19.72:31568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:10.497998 2026] [ssl:error] [pid 2625898:tid 2625898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:10.555699 2026] [ssl:error] [pid 2624443:tid 2624443] (EAI 2)Name or service not known: [client 144.76.19.72:31574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:10.555739 2026] [ssl:error] [pid 2624443:tid 2624443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:11.320527 2026] [security2:error] [pid 2624681:tid 2624681] [client 74.75.156.165:44344] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQQ6RybkvKjuCZFsP5bgAAAFM"]
[Thu Jul 30 09:50:11.320578 2026] [security2:error] [pid 2624681:tid 2624681] [client 74.75.156.165:44344] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQQ6RybkvKjuCZFsP5bgAAAFM"]
[Thu Jul 30 09:50:11.320871 2026] [security2:error] [pid 2624681:tid 2624681] [client 74.75.156.165:44344] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQQ6RybkvKjuCZFsP5bgAAAFM"]
[Thu Jul 30 09:50:11.449232 2026] [security2:error] [pid 2624407:tid 2624407] [client 20.171.55.167:2704] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "horus-wellbeing.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsQQ_ga-fyW1WKORGphhwAAADQ"]
[Thu Jul 30 09:50:11.449439 2026] [security2:error] [pid 2624407:tid 2624407] [client 20.171.55.167:2704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "horus-wellbeing.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsQQ_ga-fyW1WKORGphhwAAADQ"]
[Thu Jul 30 09:50:11.881857 2026] [security2:error] [pid 2624407:tid 2624407] [client 20.171.55.167:2704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "horus-wellbeing.co.uk"] [uri "/index.php"] [unique_id "amsQQ_ga-fyW1WKORGphhwAAADQ"]
[Thu Jul 30 09:50:13.613901 2026] [ssl:error] [pid 2619665:tid 2619665] (EAI 2)Name or service not known: [client 144.76.19.72:31580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:13.613934 2026] [ssl:error] [pid 2619665:tid 2619665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:13.697477 2026] [ssl:error] [pid 2614355:tid 2614355] (70014)End of file found: [client 216.73.216.199:43289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:50:13.707370 2026] [ssl:error] [pid 2624439:tid 2624439] (EAI 2)Name or service not known: [client 144.76.19.72:31582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:13.707406 2026] [ssl:error] [pid 2624439:tid 2624439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:16.762680 2026] [ssl:error] [pid 2624509:tid 2624509] (EAI 2)Name or service not known: [client 144.76.19.72:31608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:16.762713 2026] [ssl:error] [pid 2624509:tid 2624509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:16.820548 2026] [ssl:error] [pid 2624439:tid 2624439] (EAI 2)Name or service not known: [client 144.76.19.72:31610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:16.820577 2026] [ssl:error] [pid 2624439:tid 2624439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:17.895139 2026] [security2:error] [pid 2625898:tid 2625898] [client 85.208.96.197:30540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8905.0.html"] [unique_id "amsQSRVfysOkv5FzxbDsBAAAAAU"]
[Thu Jul 30 09:50:19.879298 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:44490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:19.879325 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:19.934885 2026] [ssl:error] [pid 2626058:tid 2626058] (EAI 2)Name or service not known: [client 144.76.19.72:44504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:19.934916 2026] [ssl:error] [pid 2626058:tid 2626058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:21.454236 2026] [authz_core:error] [pid 2625898:tid 2625898] [client 57.141.0.71:48566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:50:21.454859 2026] [authz_core:error] [pid 2625898:tid 2625898] [client 57.141.0.71:48566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:50:22.406201 2026] [authz_core:error] [pid 2628081:tid 2628081] [client 34.55.172.41:32834] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:50:22.408912 2026] [authz_core:error] [pid 2628081:tid 2628081] [client 34.55.172.41:32834] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:50:22.990760 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:44506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:22.990801 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:23.045472 2026] [ssl:error] [pid 2621318:tid 2621318] (EAI 2)Name or service not known: [client 144.76.19.72:44508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:23.045513 2026] [ssl:error] [pid 2621318:tid 2621318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:23.794553 2026] [ssl:error] [pid 2626017:tid 2626017] (70014)End of file found: [client 216.73.216.199:27528] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:50:24.275992 2026] [authz_core:error] [pid 2599796:tid 2599796] [client 57.141.0.56:44988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:50:24.276616 2026] [authz_core:error] [pid 2599796:tid 2599796] [client 57.141.0.56:44988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:50:25.556219 2026] [security2:error] [pid 2625935:tid 2625935] [client 185.191.171.11:28096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/oratore-greco-balbuziente"] [unique_id "amsQUeTDzhSZ0ItsucdBfQAAAAg"]
[Thu Jul 30 09:50:26.100381 2026] [ssl:error] [pid 2626720:tid 2626720] (EAI 2)Name or service not known: [client 144.76.19.72:44516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:26.100428 2026] [ssl:error] [pid 2626720:tid 2626720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:26.154019 2026] [ssl:error] [pid 2619665:tid 2619665] (EAI 2)Name or service not known: [client 144.76.19.72:44530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:26.154046 2026] [ssl:error] [pid 2619665:tid 2619665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:28.781074 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:35939] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:50:28.783749 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:35939] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:50:29.225769 2026] [ssl:error] [pid 2625898:tid 2625898] (EAI 2)Name or service not known: [client 144.76.19.72:44538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:29.225810 2026] [ssl:error] [pid 2625898:tid 2625898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:29.282715 2026] [ssl:error] [pid 2626057:tid 2626057] (EAI 2)Name or service not known: [client 144.76.19.72:44544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:29.282747 2026] [ssl:error] [pid 2626057:tid 2626057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:29.742118 2026] [authz_core:error] [pid 2615823:tid 2615823] [client 57.141.0.13:44448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:50:29.742742 2026] [authz_core:error] [pid 2615823:tid 2615823] [client 57.141.0.13:44448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:50:31.591738 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:35939] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:50:31.594419 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:35939] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:50:32.339534 2026] [ssl:error] [pid 2608554:tid 2608554] (EAI 2)Name or service not known: [client 144.76.19.72:34350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:32.339570 2026] [ssl:error] [pid 2608554:tid 2608554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:32.393921 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:34358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:32.393952 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:35.139057 2026] [authz_core:error] [pid 2625935:tid 2625935] [client 57.141.0.12:27208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:50:35.139701 2026] [authz_core:error] [pid 2625935:tid 2625935] [client 57.141.0.12:27208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:50:35.449082 2026] [ssl:error] [pid 2628534:tid 2628534] (EAI 2)Name or service not known: [client 144.76.19.72:34360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:35.449125 2026] [ssl:error] [pid 2628534:tid 2628534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:35.502482 2026] [ssl:error] [pid 2628501:tid 2628501] (EAI 2)Name or service not known: [client 144.76.19.72:34368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:35.502518 2026] [ssl:error] [pid 2628501:tid 2628501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:35.609797 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:35939] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:50:35.612477 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:35939] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:50:38.555811 2026] [ssl:error] [pid 2624516:tid 2624516] (EAI 2)Name or service not known: [client 144.76.19.72:34380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:38.555838 2026] [ssl:error] [pid 2624516:tid 2624516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:38.610596 2026] [ssl:error] [pid 2618684:tid 2618684] (EAI 2)Name or service not known: [client 144.76.19.72:34384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:38.610622 2026] [ssl:error] [pid 2618684:tid 2618684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:38.798487 2026] [ssl:error] [pid 2617761:tid 2617761] (70014)End of file found: [client 216.73.216.199:41358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:50:40.148975 2026] [authz_core:error] [pid 2624516:tid 2624516] [client 191.232.199.39:13070] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 09:50:41.895583 2026] [ssl:error] [pid 2628834:tid 2628834] (EAI 2)Name or service not known: [client 144.76.19.72:25392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:41.895634 2026] [ssl:error] [pid 2628834:tid 2628834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:41.951482 2026] [ssl:error] [pid 2628835:tid 2628835] (EAI 2)Name or service not known: [client 144.76.19.72:25408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:41.951541 2026] [ssl:error] [pid 2628835:tid 2628835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:42.761521 2026] [authz_core:error] [pid 2619665:tid 2619665] [client 66.249.66.33:47095] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:50:42.764185 2026] [authz_core:error] [pid 2619665:tid 2619665] [client 66.249.66.33:47095] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:50:43.347818 2026] [authz_core:error] [pid 2628836:tid 2628836] [client 66.249.66.33:57748] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:50:43.350570 2026] [authz_core:error] [pid 2628836:tid 2628836] [client 66.249.66.33:57748] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:50:44.447138 2026] [authz_core:error] [pid 2628940:tid 2628940] [client 57.141.0.46:46662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:50:44.447801 2026] [authz_core:error] [pid 2628940:tid 2628940] [client 57.141.0.46:46662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:50:45.179626 2026] [ssl:error] [pid 2628940:tid 2628940] (EAI 2)Name or service not known: [client 144.76.19.72:25420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:45.179656 2026] [ssl:error] [pid 2628940:tid 2628940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:45.235864 2026] [ssl:error] [pid 2628940:tid 2628940] (EAI 2)Name or service not known: [client 144.76.19.72:25434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:45.235894 2026] [ssl:error] [pid 2628940:tid 2628940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:48.288928 2026] [ssl:error] [pid 2626017:tid 2626017] (EAI 2)Name or service not known: [client 144.76.19.72:25446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:48.288972 2026] [ssl:error] [pid 2626017:tid 2626017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:48.342155 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:25450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:48.342185 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:48.398279 2026] [security2:error] [pid 2629059:tid 2629059] [client 85.208.96.206:37708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amsQaKznh0IZ7zaGwps6ogAAACs"]
[Thu Jul 30 09:50:49.006516 2026] [ssl:error] [pid 2619665:tid 2619665] (70014)End of file found: [client 216.73.216.199:59351] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:50:49.455393 2026] [access_compat:error] [pid 2628119:tid 2628119] [client 45.158.164.139:36764] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:50:49.736214 2026] [authz_core:error] [pid 2626057:tid 2626057] [client 191.232.199.39:13076] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 09:50:51.411850 2026] [ssl:error] [pid 2629059:tid 2629059] (EAI 2)Name or service not known: [client 144.76.19.72:62964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:51.411887 2026] [ssl:error] [pid 2629059:tid 2629059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:51.468012 2026] [ssl:error] [pid 2628119:tid 2628119] (EAI 2)Name or service not known: [client 144.76.19.72:62980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:51.468050 2026] [ssl:error] [pid 2628119:tid 2628119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:54.522236 2026] [ssl:error] [pid 2625935:tid 2625935] (EAI 2)Name or service not known: [client 144.76.19.72:62986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:54.522271 2026] [ssl:error] [pid 2625935:tid 2625935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:54.574041 2026] [ssl:error] [pid 2624435:tid 2624435] (EAI 2)Name or service not known: [client 144.76.19.72:62992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:54.574090 2026] [ssl:error] [pid 2624435:tid 2624435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:57.626581 2026] [ssl:error] [pid 2624375:tid 2624375] (EAI 2)Name or service not known: [client 144.76.19.72:62998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:57.626618 2026] [ssl:error] [pid 2624375:tid 2624375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:57.707211 2026] [ssl:error] [pid 2628119:tid 2628119] (EAI 2)Name or service not known: [client 144.76.19.72:63012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:50:57.707244 2026] [ssl:error] [pid 2628119:tid 2628119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:50:57.859060 2026] [security2:error] [pid 2624375:tid 2624375] [client 85.208.96.209:60516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.2100.html"] [unique_id "amsQcahZ0I6tbi64PVwZBQAAAA0"]
[Thu Jul 30 09:50:58.775564 2026] [authz_core:error] [pid 2629057:tid 2629057] [client 57.141.0.49:62298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:50:58.776218 2026] [authz_core:error] [pid 2629057:tid 2629057] [client 57.141.0.49:62298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:51:00.762244 2026] [ssl:error] [pid 2624440:tid 2624440] (EAI 2)Name or service not known: [client 144.76.19.72:47134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:00.762271 2026] [ssl:error] [pid 2624440:tid 2624440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:00.815577 2026] [ssl:error] [pid 2628991:tid 2628991] (EAI 2)Name or service not known: [client 144.76.19.72:47140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:00.815620 2026] [ssl:error] [pid 2628991:tid 2628991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:01.386148 2026] [authz_core:error] [pid 2626017:tid 2626017] [client 57.141.0.8:23938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:51:01.386768 2026] [authz_core:error] [pid 2626017:tid 2626017] [client 57.141.0.8:23938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:51:03.816754 2026] [core:error] [pid 2624375:tid 2624375] (13)Permission denied: [client 216.73.216.199:45301] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/physical_node/0000:00:07.0/resource4
[Thu Jul 30 09:51:03.904036 2026] [ssl:error] [pid 2624435:tid 2624435] (EAI 2)Name or service not known: [client 144.76.19.72:47154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:03.904062 2026] [ssl:error] [pid 2624435:tid 2624435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:03.959679 2026] [ssl:error] [pid 2621294:tid 2621294] (EAI 2)Name or service not known: [client 144.76.19.72:47166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:03.959704 2026] [ssl:error] [pid 2621294:tid 2621294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:04.603327 2026] [security2:error] [pid 2624435:tid 2624435] [client 51.195.244.238:17986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3712.0.html"] [unique_id "amsQeA0xskC6cuJ-PDXjLwAAADY"]
[Thu Jul 30 09:51:05.736658 2026] [cgi:error] [pid 2628990:tid 2628990] [client 20.226.5.174:13491] AH02811: stderr from /home/redsocks/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:51:07.048205 2026] [ssl:error] [pid 2624405:tid 2624405] (EAI 2)Name or service not known: [client 144.76.19.72:47176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:07.048243 2026] [ssl:error] [pid 2624405:tid 2624405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:07.069389 2026] [core:error] [pid 2629059:tid 2629059] [client 66.249.66.71:37010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:07.069410 2026] [core:error] [pid 2629059:tid 2629059] [client 66.249.66.71:37010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:07.146021 2026] [ssl:error] [pid 2628501:tid 2628501] (EAI 2)Name or service not known: [client 144.76.19.72:47182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:07.146052 2026] [ssl:error] [pid 2628501:tid 2628501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:07.526282 2026] [cgi:error] [pid 2628990:tid 2628990] [client 20.226.5.174:13491] AH02811: stderr from /home/redsocks/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:51:10.047650 2026] [security2:error] [pid 2628501:tid 2628501] [client 37.239.199.13:38870] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQfgYjXIz5SVxhoFzgcwAAAAQ"]
[Thu Jul 30 09:51:10.047696 2026] [security2:error] [pid 2628501:tid 2628501] [client 37.239.199.13:38870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQfgYjXIz5SVxhoFzgcwAAAAQ"]
[Thu Jul 30 09:51:10.047955 2026] [security2:error] [pid 2628501:tid 2628501] [client 37.239.199.13:38870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQfgYjXIz5SVxhoFzgcwAAAAQ"]
[Thu Jul 30 09:51:10.230372 2026] [ssl:error] [pid 2624443:tid 2624443] (EAI 2)Name or service not known: [client 144.76.19.72:29956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:10.230399 2026] [ssl:error] [pid 2624443:tid 2624443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:10.287518 2026] [ssl:error] [pid 2628835:tid 2628835] (EAI 2)Name or service not known: [client 144.76.19.72:29958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:10.287550 2026] [ssl:error] [pid 2628835:tid 2628835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:11.582882 2026] [security2:error] [pid 2621294:tid 2621294] [client 47.128.21.105:50666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amsQf5yH40wdMyB819PlHAAAABI"]
[Thu Jul 30 09:51:11.583399 2026] [core:error] [pid 2621294:tid 2621294] [client 47.128.21.105:50666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:13.341040 2026] [ssl:error] [pid 2625935:tid 2625935] (EAI 2)Name or service not known: [client 144.76.19.72:29974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:13.341080 2026] [ssl:error] [pid 2625935:tid 2625935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:13.395351 2026] [ssl:error] [pid 2628724:tid 2628724] (EAI 2)Name or service not known: [client 144.76.19.72:29984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:13.395380 2026] [ssl:error] [pid 2628724:tid 2628724] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:14.854984 2026] [authz_core:error] [pid 2628834:tid 2628834] [client 57.141.0.20:33636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:51:14.855614 2026] [authz_core:error] [pid 2628834:tid 2628834] [client 57.141.0.20:33636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:51:15.374280 2026] [security2:error] [pid 2625935:tid 2625935] [client 181.199.61.167:33228] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQg-TDzhSZ0ItsucdBmAAAAAg"]
[Thu Jul 30 09:51:15.374330 2026] [security2:error] [pid 2625935:tid 2625935] [client 181.199.61.167:33228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQg-TDzhSZ0ItsucdBmAAAAAg"]
[Thu Jul 30 09:51:15.374618 2026] [security2:error] [pid 2625935:tid 2625935] [client 181.199.61.167:33228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQg-TDzhSZ0ItsucdBmAAAAAg"]
[Thu Jul 30 09:51:16.449260 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:29998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:16.449291 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:16.506676 2026] [ssl:error] [pid 2624405:tid 2624405] (EAI 2)Name or service not known: [client 144.76.19.72:30008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:16.506699 2026] [ssl:error] [pid 2624405:tid 2624405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:16.976837 2026] [security2:error] [pid 2630968:tid 2630968] [client 85.208.98.19:34818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/black-vans-red-laces-k.html"] [unique_id "amsQhDVWTZxnyE1XqPgXEwAAAAs"]
[Thu Jul 30 09:51:19.020673 2026] [security2:error] [pid 2631042:tid 2631042] [client 14.174.101.178:50436] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQh4YqZfpOP01WjFVBIgAAACI"]
[Thu Jul 30 09:51:19.020746 2026] [security2:error] [pid 2631042:tid 2631042] [client 14.174.101.178:50436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQh4YqZfpOP01WjFVBIgAAACI"]
[Thu Jul 30 09:51:19.021136 2026] [security2:error] [pid 2631042:tid 2631042] [client 14.174.101.178:50436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQh4YqZfpOP01WjFVBIgAAACI"]
[Thu Jul 30 09:51:19.561408 2026] [ssl:error] [pid 2631040:tid 2631040] (EAI 2)Name or service not known: [client 144.76.19.72:62424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:19.561444 2026] [ssl:error] [pid 2631040:tid 2631040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:19.618489 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:62432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:19.618520 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:19.727485 2026] [security2:error] [pid 2619665:tid 2619665] [client 185.191.171.13:15626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,724.0/prev_next,prev.html"] [unique_id "amsQhySV0D4_5tZlaq0dCgAAADk"]
[Thu Jul 30 09:51:22.675668 2026] [ssl:error] [pid 2631106:tid 2631106] (EAI 2)Name or service not known: [client 144.76.19.72:62446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:22.675701 2026] [ssl:error] [pid 2631106:tid 2631106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:22.730493 2026] [ssl:error] [pid 2624439:tid 2624439] (EAI 2)Name or service not known: [client 144.76.19.72:62450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:22.730524 2026] [ssl:error] [pid 2624439:tid 2624439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:23.113092 2026] [security2:error] [pid 2624439:tid 2624439] [client 114.119.142.20:41395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/a-scandalous-salvation/"] [unique_id "amsQi6scP04dMtubPVHomAAAADo"], referer: http://www.erskinenazarene.co.uk/service-type/sunday-am/page/8/
[Thu Jul 30 09:51:24.203241 2026] [security2:error] [pid 2610834:tid 2610834] [client 114.119.142.20:41399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/sermons/a-scandalous-salvation/"] [unique_id "amsQjPJqI3jvpG7WZuU_9gAAADE"], referer: http://www.erskinenazarene.co.uk/service-type/sunday-am/page/8/
[Thu Jul 30 09:51:25.160317 2026] [authz_core:error] [pid 2629057:tid 2629057] [client 51.38.177.7:63984] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 09:51:25.221889 2026] [core:error] [pid 2630896:tid 2630896] [client 51.38.177.7:52303] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:25.221919 2026] [core:error] [pid 2630896:tid 2630896] [client 51.38.177.7:52303] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:25.241884 2026] [lsapi:warn] [pid 2628777:tid 2628777] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:51:25.260031 2026] [core:error] [pid 2629060:tid 2629060] [client 51.38.177.7:50208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:25.348910 2026] [core:error] [pid 2624439:tid 2624439] [client 51.38.177.7:65514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:25.785674 2026] [ssl:error] [pid 2624443:tid 2624443] (EAI 2)Name or service not known: [client 144.76.19.72:62452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:25.785702 2026] [ssl:error] [pid 2624443:tid 2624443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:25.840203 2026] [ssl:error] [pid 2617761:tid 2617761] (EAI 2)Name or service not known: [client 144.76.19.72:62464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:25.840234 2026] [ssl:error] [pid 2617761:tid 2617761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:25.877805 2026] [security2:error] [pid 2631101:tid 2631101] [client 185.191.171.11:20924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/edge_foros_temas.asp"] [unique_id "amsQjawOn4ZWLNVnvIZO0gAAACk"]
[Thu Jul 30 09:51:26.486167 2026] [security2:error] [pid 2599796:tid 2599796] [client 185.191.171.12:36040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/naomi-judd-cause-of-death-autopsy-photos"] [unique_id "amsQjphmuqAj2RVSY7olQAAAACw"]
[Thu Jul 30 09:51:28.212639 2026] [security2:error] [pid 2599796:tid 2599796] [client 114.119.136.8:23911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amsQkJhmuqAj2RVSY7olQwAAACw"], referer: http://www.kinesiologylondon.co.uk/robots.txt
[Thu Jul 30 09:51:28.409891 2026] [authz_core:error] [pid 2630896:tid 2630896] [client 57.141.0.41:55902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:51:28.410537 2026] [authz_core:error] [pid 2630896:tid 2630896] [client 57.141.0.41:55902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:51:28.912759 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:62474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:28.912796 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:28.967130 2026] [ssl:error] [pid 2630896:tid 2630896] (EAI 2)Name or service not known: [client 144.76.19.72:62484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:28.967163 2026] [ssl:error] [pid 2630896:tid 2630896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:32.022780 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:28024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:32.022808 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:32.078846 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:28036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:32.078873 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:32.748387 2026] [security2:error] [pid 2619667:tid 2619667] [client 54.235.191.179:18552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bookings.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsQlG33guArmqQ55aGetwAAADs"]
[Thu Jul 30 09:51:32.927223 2026] [security2:error] [pid 2624439:tid 2624439] [client 110.249.202.168:43720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsQlKscP04dMtubPVHonQAAADo"]
[Thu Jul 30 09:51:33.419458 2026] [security2:error] [pid 2631040:tid 2631040] [client 94.154.43.185:48892] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "butteredcat.com"] [uri "/.env"] [unique_id "amsQlQC3y2OU_h9CA-0eWAAAABw"]
[Thu Jul 30 09:51:33.419644 2026] [security2:error] [pid 2631040:tid 2631040] [client 94.154.43.185:48892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "butteredcat.com"] [uri "/.env"] [unique_id "amsQlQC3y2OU_h9CA-0eWAAAABw"]
[Thu Jul 30 09:51:33.419879 2026] [security2:error] [pid 2631040:tid 2631040] [client 94.154.43.185:48892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "butteredcat.com"] [uri "/.env"] [unique_id "amsQlQC3y2OU_h9CA-0eWAAAABw"]
[Thu Jul 30 09:51:34.784697 2026] [security2:error] [pid 2624439:tid 2624439] [client 94.154.43.187:45698] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.staffordshirephoenixrifleandpistolclub.butteredcat.com"] [uri "/.env"] [unique_id "amsQlqscP04dMtubPVHongAAADo"]
[Thu Jul 30 09:51:34.784890 2026] [security2:error] [pid 2624439:tid 2624439] [client 94.154.43.187:45698] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.staffordshirephoenixrifleandpistolclub.butteredcat.com"] [uri "/.env"] [unique_id "amsQlqscP04dMtubPVHongAAADo"]
[Thu Jul 30 09:51:34.785123 2026] [security2:error] [pid 2624439:tid 2624439] [client 94.154.43.187:45698] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.staffordshirephoenixrifleandpistolclub.butteredcat.com"] [uri "/.env"] [unique_id "amsQlqscP04dMtubPVHongAAADo"]
[Thu Jul 30 09:51:34.810254 2026] [security2:error] [pid 2604294:tid 2604294] [client 94.154.43.187:45712] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/.env"] [unique_id "amsQllx7XgAsBr_VO_zEGgAAAAk"]
[Thu Jul 30 09:51:34.810436 2026] [security2:error] [pid 2604294:tid 2604294] [client 94.154.43.187:45712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/.env"] [unique_id "amsQllx7XgAsBr_VO_zEGgAAAAk"]
[Thu Jul 30 09:51:34.810670 2026] [security2:error] [pid 2604294:tid 2604294] [client 94.154.43.187:45712] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/.env"] [unique_id "amsQllx7XgAsBr_VO_zEGgAAAAk"]
[Thu Jul 30 09:51:34.816161 2026] [security2:error] [pid 2631040:tid 2631040] [client 185.191.171.12:51122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3396.0/prev_next,prev.html"] [unique_id "amsQlgC3y2OU_h9CA-0eWQAAABw"]
[Thu Jul 30 09:51:34.896235 2026] [security2:error] [pid 2599796:tid 2599796] [client 18.215.77.19:9425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bookings.georgehotelofstamford.com"] [uri "/"] [unique_id "amsQlphmuqAj2RVSY7olRQAAACw"]
[Thu Jul 30 09:51:34.948416 2026] [security2:error] [pid 2624519:tid 2624519] [client 110.249.202.217:17120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsQlsBbRDfM0YcO_B5plwAAAE0"]
[Thu Jul 30 09:51:35.054657 2026] [authz_core:error] [pid 2630968:tid 2630968] [client 66.249.66.33:38241] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:51:35.057346 2026] [authz_core:error] [pid 2630968:tid 2630968] [client 66.249.66.33:38241] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:51:35.132030 2026] [ssl:error] [pid 2624439:tid 2624439] (EAI 2)Name or service not known: [client 144.76.19.72:28046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:35.132056 2026] [ssl:error] [pid 2624439:tid 2624439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:35.187699 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:28058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:35.187731 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:35.332054 2026] [lsapi:warn] [pid 2604294:tid 2604294] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:51:37.842253 2026] [core:error] [pid 2624519:tid 2624519] [client 64.227.109.80:40572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.apennyforyourthoughts.sarahwiseman.co.uk/
[Thu Jul 30 09:51:37.842282 2026] [core:error] [pid 2624519:tid 2624519] [client 64.227.109.80:40572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.apennyforyourthoughts.sarahwiseman.co.uk/
[Thu Jul 30 09:51:38.245541 2026] [ssl:error] [pid 2628501:tid 2628501] (EAI 2)Name or service not known: [client 144.76.19.72:28072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:38.245571 2026] [ssl:error] [pid 2628501:tid 2628501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:38.300560 2026] [ssl:error] [pid 2628776:tid 2628776] (EAI 2)Name or service not known: [client 144.76.19.72:28084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:38.300606 2026] [ssl:error] [pid 2628776:tid 2628776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:38.912274 2026] [access_compat:error] [pid 2628776:tid 2628776] [client 2.189.5.142:41000] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:51:39.253364 2026] [authz_core:error] [pid 2617761:tid 2617761] [client 20.104.22.47:20669] AH01630: client denied by server configuration: /home/acthorou/public_html/php.ini
[Thu Jul 30 09:51:40.696382 2026] [authz_core:error] [pid 2631042:tid 2631042] [client 57.141.0.29:36560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:51:40.697009 2026] [authz_core:error] [pid 2631042:tid 2631042] [client 57.141.0.29:36560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:51:41.356882 2026] [ssl:error] [pid 2628776:tid 2628776] (EAI 2)Name or service not known: [client 144.76.19.72:58870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:41.356913 2026] [ssl:error] [pid 2628776:tid 2628776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:41.410003 2026] [ssl:error] [pid 2624519:tid 2624519] (EAI 2)Name or service not known: [client 144.76.19.72:58882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:41.410045 2026] [ssl:error] [pid 2624519:tid 2624519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:41.566132 2026] [authz_core:error] [pid 2628777:tid 2628777] [client 57.141.0.49:51712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:51:41.566800 2026] [authz_core:error] [pid 2628777:tid 2628777] [client 57.141.0.49:51712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:51:41.778469 2026] [core:error] [pid 2631103:tid 2631103] [client 66.249.64.170:61328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:41.778492 2026] [core:error] [pid 2631103:tid 2631103] [client 66.249.64.170:61328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:51:42.255264 2026] [cgi:error] [pid 2628533:tid 2628533] [client 20.9.4.9:15514] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:51:42.571988 2026] [core:error] [pid 2631042:tid 2631042] [client 64.227.109.80:33690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apennyforyourthoughts.sarahwiseman.co.uk/
[Thu Jul 30 09:51:42.572023 2026] [core:error] [pid 2631042:tid 2631042] [client 64.227.109.80:33690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apennyforyourthoughts.sarahwiseman.co.uk/
[Thu Jul 30 09:51:43.830235 2026] [cgi:error] [pid 2628835:tid 2628835] [client 194.9.110.170:8364] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:51:44.466663 2026] [ssl:error] [pid 2624637:tid 2624637] (EAI 2)Name or service not known: [client 144.76.19.72:58896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:44.466703 2026] [ssl:error] [pid 2624637:tid 2624637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:44.518480 2026] [ssl:error] [pid 2631100:tid 2631100] (EAI 2)Name or service not known: [client 144.76.19.72:58912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:44.518510 2026] [ssl:error] [pid 2631100:tid 2631100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:45.736906 2026] [lsapi:warn] [pid 2626017:tid 2626017] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:51:45.824261 2026] [authz_core:error] [pid 2630969:tid 2630969] [client 57.141.0.47:29804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:51:45.824886 2026] [authz_core:error] [pid 2630969:tid 2630969] [client 57.141.0.47:29804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:51:47.577360 2026] [ssl:error] [pid 2624435:tid 2624435] (EAI 2)Name or service not known: [client 144.76.19.72:58926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:47.577389 2026] [ssl:error] [pid 2624435:tid 2624435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:47.630558 2026] [ssl:error] [pid 2630969:tid 2630969] (EAI 2)Name or service not known: [client 144.76.19.72:58940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:47.630602 2026] [ssl:error] [pid 2630969:tid 2630969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:49.259646 2026] [authz_core:error] [pid 2629057:tid 2629057] [client 38.253.224.39:53428] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:51:49.264381 2026] [authz_core:error] [pid 2629057:tid 2629057] [client 38.253.224.39:53428] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:51:50.687535 2026] [ssl:error] [pid 2629059:tid 2629059] (EAI 2)Name or service not known: [client 144.76.19.72:47034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:50.687566 2026] [ssl:error] [pid 2629059:tid 2629059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:50.743535 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:47046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:50.743557 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:53.797634 2026] [ssl:error] [pid 2615770:tid 2615770] (EAI 2)Name or service not known: [client 144.76.19.72:47062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:53.797670 2026] [ssl:error] [pid 2615770:tid 2615770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:53.849198 2026] [ssl:error] [pid 2610834:tid 2610834] (EAI 2)Name or service not known: [client 144.76.19.72:47072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:53.849224 2026] [ssl:error] [pid 2610834:tid 2610834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:54.867218 2026] [authz_core:error] [pid 2631104:tid 2631104] [client 66.249.66.33:54649] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:51:54.869963 2026] [authz_core:error] [pid 2631104:tid 2631104] [client 66.249.66.33:54649] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:51:56.272407 2026] [lsapi:warn] [pid 2628834:tid 2628834] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:51:56.905210 2026] [ssl:error] [pid 2624435:tid 2624435] (EAI 2)Name or service not known: [client 144.76.19.72:47086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:56.905244 2026] [ssl:error] [pid 2624435:tid 2624435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:56.958719 2026] [ssl:error] [pid 2632917:tid 2632917] (EAI 2)Name or service not known: [client 144.76.19.72:47102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:51:56.958751 2026] [ssl:error] [pid 2632917:tid 2632917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:51:59.472730 2026] [security2:error] [pid 2599796:tid 2599796] [client 114.119.136.66:62301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "amsQr5hmuqAj2RVSY7olTQAAACw"], referer: http://www.asian-kitchen.co.uk/?Start
[Thu Jul 30 09:52:00.054176 2026] [ssl:error] [pid 2631104:tid 2631104] (EAI 2)Name or service not known: [client 144.76.19.72:63194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:00.054263 2026] [ssl:error] [pid 2631104:tid 2631104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:00.112500 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:63208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:00.112527 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:00.254512 2026] [security2:error] [pid 2630896:tid 2630896] [client 74.7.242.23:52428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "healthkinesiologylondon.co.uk.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsQsFQJ4CGVjg0gK-quBQAAAAE"]
[Thu Jul 30 09:52:03.170802 2026] [ssl:error] [pid 2631042:tid 2631042] (EAI 2)Name or service not known: [client 144.76.19.72:63218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:03.170835 2026] [ssl:error] [pid 2631042:tid 2631042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:03.227414 2026] [ssl:error] [pid 2628777:tid 2628777] (EAI 2)Name or service not known: [client 144.76.19.72:63224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:03.227451 2026] [ssl:error] [pid 2628777:tid 2628777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:04.492374 2026] [core:error] [pid 2632981:tid 2632981] (13)Permission denied: [client 216.73.216.199:51001] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/codeworks.co.uk.db
[Thu Jul 30 09:52:04.610969 2026] [lsapi:warn] [pid 2599796:tid 2599796] [client 198.57.247.148:0] [host mail.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:52:06.281535 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:63240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:06.281563 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:06.288675 2026] [security2:error] [pid 2624518:tid 2624518] [client 114.119.155.69:36903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/author/Jacqui"] [unique_id "amsQtv4Wprs2n64sWeGangAAAEw"], referer: http://woodsandgreenfurniture.co.uk/rona-gazebo-no-roof-800-2
[Thu Jul 30 09:52:06.339555 2026] [ssl:error] [pid 2632979:tid 2632979] (EAI 2)Name or service not known: [client 144.76.19.72:63244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:06.339598 2026] [ssl:error] [pid 2632979:tid 2632979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:06.830788 2026] [lsapi:warn] [pid 2628777:tid 2628777] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:52:09.120914 2026] [security2:error] [pid 2628990:tid 2628990] [client 110.249.202.154:31662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsQubIWK6Z6Dkw1f1DeLAAAACU"]
[Thu Jul 30 09:52:09.394031 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:63260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:09.394055 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:09.450086 2026] [ssl:error] [pid 2630896:tid 2630896] (EAI 2)Name or service not known: [client 144.76.19.72:63270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:09.450112 2026] [ssl:error] [pid 2630896:tid 2630896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:09.493331 2026] [ssl:error] [pid 2632981:tid 2632981] (70014)End of file found: [client 216.73.216.199:51001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:52:09.861612 2026] [security2:error] [pid 2625935:tid 2625935] [client 126.209.19.65:53342] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQueTDzhSZ0ItsucdBpgAAAAg"]
[Thu Jul 30 09:52:09.861660 2026] [security2:error] [pid 2625935:tid 2625935] [client 126.209.19.65:53342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQueTDzhSZ0ItsucdBpgAAAAg"]
[Thu Jul 30 09:52:09.861913 2026] [security2:error] [pid 2625935:tid 2625935] [client 126.209.19.65:53342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQueTDzhSZ0ItsucdBpgAAAAg"]
[Thu Jul 30 09:52:09.883455 2026] [authz_core:error] [pid 2624518:tid 2624518] [client 57.141.0.27:26336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:52:09.884086 2026] [authz_core:error] [pid 2624518:tid 2624518] [client 57.141.0.27:26336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:52:12.343727 2026] [security2:error] [pid 2629059:tid 2629059] [client 43.156.113.82:51169] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQvKznh0IZ7zaGwps6yAAAACs"]
[Thu Jul 30 09:52:12.343775 2026] [security2:error] [pid 2629059:tid 2629059] [client 43.156.113.82:51169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQvKznh0IZ7zaGwps6yAAAACs"]
[Thu Jul 30 09:52:12.344025 2026] [security2:error] [pid 2629059:tid 2629059] [client 43.156.113.82:51169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQvKznh0IZ7zaGwps6yAAAACs"]
[Thu Jul 30 09:52:12.508848 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:41772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:12.508875 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:12.560355 2026] [ssl:error] [pid 2631105:tid 2631105] (EAI 2)Name or service not known: [client 144.76.19.72:41778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:12.560388 2026] [ssl:error] [pid 2631105:tid 2631105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:12.720127 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/.env"] [unique_id "amsQvKFYiRirV-idXiSsuAAAAAk"]
[Thu Jul 30 09:52:12.720336 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/.env"] [unique_id "amsQvKFYiRirV-idXiSsuAAAAAk"]
[Thu Jul 30 09:52:12.727793 2026] [authz_core:error] [pid 2628990:tid 2628990] [client 57.141.0.50:49926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:52:12.728424 2026] [authz_core:error] [pid 2628990:tid 2628990] [client 57.141.0.50:49926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:52:12.757051 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvKFYiRirV-idXiSsuAAAAAk"]
[Thu Jul 30 09:52:12.774301 2026] [security2:error] [pid 2629059:tid 2629059] [client 52.44.174.136:43981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amsQvKznh0IZ7zaGwps6yQAAACs"]
[Thu Jul 30 09:52:12.800030 2026] [core:error] [pid 2619667:tid 2619667] [client 66.249.66.71:47610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:52:12.800057 2026] [core:error] [pid 2619667:tid 2619667] [client 66.249.66.71:47610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:52:13.014015 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/api/.env"] [unique_id "amsQvaFYiRirV-idXiSsvAAAAAk"]
[Thu Jul 30 09:52:13.014290 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/api/.env"] [unique_id "amsQvaFYiRirV-idXiSsvAAAAAk"]
[Thu Jul 30 09:52:13.052311 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSsvAAAAAk"]
[Thu Jul 30 09:52:13.174693 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/dev/.env"] [unique_id "amsQvaFYiRirV-idXiSsvgAAAAk"]
[Thu Jul 30 09:52:13.174880 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/dev/.env"] [unique_id "amsQvaFYiRirV-idXiSsvgAAAAk"]
[Thu Jul 30 09:52:13.208838 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSsvgAAAAk"]
[Thu Jul 30 09:52:13.320553 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/admin/.env"] [unique_id "amsQvaFYiRirV-idXiSswAAAAAk"]
[Thu Jul 30 09:52:13.320728 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/admin/.env"] [unique_id "amsQvaFYiRirV-idXiSswAAAAAk"]
[Thu Jul 30 09:52:13.362016 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSswAAAAAk"]
[Thu Jul 30 09:52:13.400902 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/laravel/.env"] [unique_id "amsQvaFYiRirV-idXiSswQAAAAk"]
[Thu Jul 30 09:52:13.401098 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/laravel/.env"] [unique_id "amsQvaFYiRirV-idXiSswQAAAAk"]
[Thu Jul 30 09:52:13.436325 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSswQAAAAk"]
[Thu Jul 30 09:52:13.548259 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/backend/.env"] [unique_id "amsQvaFYiRirV-idXiSswwAAAAk"]
[Thu Jul 30 09:52:13.548394 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/backend/.env"] [unique_id "amsQvaFYiRirV-idXiSswwAAAAk"]
[Thu Jul 30 09:52:13.586148 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSswwAAAAk"]
[Thu Jul 30 09:52:13.698422 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.example"] [unique_id "amsQvaFYiRirV-idXiSsxQAAAAk"]
[Thu Jul 30 09:52:13.698628 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.example"] [unique_id "amsQvaFYiRirV-idXiSsxQAAAAk"]
[Thu Jul 30 09:52:13.736302 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSsxQAAAAk"]
[Thu Jul 30 09:52:13.774933 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/web/.env"] [unique_id "amsQvaFYiRirV-idXiSsxgAAAAk"]
[Thu Jul 30 09:52:13.775102 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/web/.env"] [unique_id "amsQvaFYiRirV-idXiSsxgAAAAk"]
[Thu Jul 30 09:52:13.808914 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSsxgAAAAk"]
[Thu Jul 30 09:52:13.847855 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.bak"] [unique_id "amsQvaFYiRirV-idXiSsxwAAAAk"]
[Thu Jul 30 09:52:13.848030 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.bak"] [unique_id "amsQvaFYiRirV-idXiSsxwAAAAk"]
[Thu Jul 30 09:52:13.881179 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSsxwAAAAk"]
[Thu Jul 30 09:52:13.920110 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/staging/.env"] [unique_id "amsQvaFYiRirV-idXiSsyAAAAAk"]
[Thu Jul 30 09:52:13.920293 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/staging/.env"] [unique_id "amsQvaFYiRirV-idXiSsyAAAAAk"]
[Thu Jul 30 09:52:13.953324 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvaFYiRirV-idXiSsyAAAAAk"]
[Thu Jul 30 09:52:14.064224 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/core/.env"] [unique_id "amsQvqFYiRirV-idXiSsygAAAAk"]
[Thu Jul 30 09:52:14.064395 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/core/.env"] [unique_id "amsQvqFYiRirV-idXiSsygAAAAk"]
[Thu Jul 30 09:52:14.097663 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvqFYiRirV-idXiSsygAAAAk"]
[Thu Jul 30 09:52:14.210311 2026] [security2:error] [pid 2628120:tid 2628120] [client 110.249.202.22:10110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsQviqCrh0o4antW6s7nwAAABM"]
[Thu Jul 30 09:52:14.280929 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/images/.env"] [unique_id "amsQvqFYiRirV-idXiSszQAAAAk"]
[Thu Jul 30 09:52:14.281109 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/images/.env"] [unique_id "amsQvqFYiRirV-idXiSszQAAAAk"]
[Thu Jul 30 09:52:14.316562 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvqFYiRirV-idXiSszQAAAAk"]
[Thu Jul 30 09:52:14.355286 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.save.1"] [unique_id "amsQvqFYiRirV-idXiSszgAAAAk"]
[Thu Jul 30 09:52:14.355469 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.save.1"] [unique_id "amsQvqFYiRirV-idXiSszgAAAAk"]
[Thu Jul 30 09:52:14.389179 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvqFYiRirV-idXiSszgAAAAk"]
[Thu Jul 30 09:52:14.427884 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.save"] [unique_id "amsQvqFYiRirV-idXiSszwAAAAk"]
[Thu Jul 30 09:52:14.428029 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/.env.save"] [unique_id "amsQvqFYiRirV-idXiSszwAAAAk"]
[Thu Jul 30 09:52:14.464979 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvqFYiRirV-idXiSszwAAAAk"]
[Thu Jul 30 09:52:14.503875 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/API/.env"] [unique_id "amsQvqFYiRirV-idXiSs0AAAAAk"]
[Thu Jul 30 09:52:14.504062 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/API/.env"] [unique_id "amsQvqFYiRirV-idXiSs0AAAAAk"]
[Thu Jul 30 09:52:14.539711 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvqFYiRirV-idXiSs0AAAAAk"]
[Thu Jul 30 09:52:14.578283 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.akoptimize.online"] [uri "/app/.env"] [unique_id "amsQvqFYiRirV-idXiSs0QAAAAk"]
[Thu Jul 30 09:52:14.578432 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.akoptimize.online"] [uri "/app/.env"] [unique_id "amsQvqFYiRirV-idXiSs0QAAAAk"]
[Thu Jul 30 09:52:14.612355 2026] [security2:error] [pid 2632978:tid 2632978] [client 77.90.185.230:5347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQvqFYiRirV-idXiSs0QAAAAk"]
[Thu Jul 30 09:52:15.440199 2026] [security2:error] [pid 2624439:tid 2624439] [client 43.156.113.82:28429] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQv6scP04dMtubPVHorAAAADo"]
[Thu Jul 30 09:52:15.440250 2026] [security2:error] [pid 2624439:tid 2624439] [client 43.156.113.82:28429] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsQv6scP04dMtubPVHorAAAADo"]
[Thu Jul 30 09:52:15.440507 2026] [security2:error] [pid 2624439:tid 2624439] [client 43.156.113.82:28429] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsQv6scP04dMtubPVHorAAAADo"]
[Thu Jul 30 09:52:15.650143 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:41790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:15.650169 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:15.704165 2026] [ssl:error] [pid 2633693:tid 2633693] (EAI 2)Name or service not known: [client 144.76.19.72:41804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:15.704193 2026] [ssl:error] [pid 2633693:tid 2633693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:16.463965 2026] [security2:error] [pid 2633693:tid 2633693] [client 34.205.163.103:39968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amsQwDH8rIZf5-549j4iKwAAAAQ"]
[Thu Jul 30 09:52:17.100307 2026] [security2:error] [pid 2633693:tid 2633693] [client 77.90.185.230:14981] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/.env"] [unique_id "amsQwTH8rIZf5-549j4iLAAAAAQ"]
[Thu Jul 30 09:52:17.100537 2026] [security2:error] [pid 2633693:tid 2633693] [client 77.90.185.230:14981] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/.env"] [unique_id "amsQwTH8rIZf5-549j4iLAAAAAQ"]
[Thu Jul 30 09:52:17.132531 2026] [security2:error] [pid 2633693:tid 2633693] [client 77.90.185.230:14981] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwTH8rIZf5-549j4iLAAAAAQ"]
[Thu Jul 30 09:52:17.380669 2026] [lsapi:warn] [pid 2625934:tid 2625934] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:52:17.691027 2026] [security2:error] [pid 2624439:tid 2624439] [client 77.90.185.230:17601] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/api/.env"] [unique_id "amsQwascP04dMtubPVHoyAAAADo"]
[Thu Jul 30 09:52:17.691203 2026] [security2:error] [pid 2624439:tid 2624439] [client 77.90.185.230:17601] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/api/.env"] [unique_id "amsQwascP04dMtubPVHoyAAAADo"]
[Thu Jul 30 09:52:17.716239 2026] [security2:error] [pid 2624439:tid 2624439] [client 77.90.185.230:17601] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwascP04dMtubPVHoyAAAADo"]
[Thu Jul 30 09:52:17.981213 2026] [security2:error] [pid 2624439:tid 2624439] [client 77.90.185.230:33463] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/dev/.env"] [unique_id "amsQwascP04dMtubPVHoyQAAADo"]
[Thu Jul 30 09:52:17.981426 2026] [security2:error] [pid 2624439:tid 2624439] [client 77.90.185.230:33463] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/dev/.env"] [unique_id "amsQwascP04dMtubPVHoyQAAADo"]
[Thu Jul 30 09:52:18.006488 2026] [security2:error] [pid 2624439:tid 2624439] [client 77.90.185.230:33463] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwascP04dMtubPVHoyQAAADo"]
[Thu Jul 30 09:52:18.261764 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:41741] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/admin/.env"] [unique_id "amsQwjFABoNyQecs7NzShwAAAAc"]
[Thu Jul 30 09:52:18.261924 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:41741] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/admin/.env"] [unique_id "amsQwjFABoNyQecs7NzShwAAAAc"]
[Thu Jul 30 09:52:18.285315 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:41741] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwjFABoNyQecs7NzShwAAAAc"]
[Thu Jul 30 09:52:18.385632 2026] [access_compat:error] [pid 2628533:tid 2628533] [client 103.82.255.195:59043] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xmlrpc.php
[Thu Jul 30 09:52:18.385689 2026] [access_compat:error] [pid 2628533:tid 2628533] [client 103.82.255.195:59043] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:52:18.402519 2026] [security2:error] [pid 2615770:tid 2615770] [client 77.90.185.230:54037] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/laravel/.env"] [unique_id "amsQwl2Gvo-53i8FT0iJ2gAAACM"]
[Thu Jul 30 09:52:18.402746 2026] [security2:error] [pid 2615770:tid 2615770] [client 77.90.185.230:54037] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/laravel/.env"] [unique_id "amsQwl2Gvo-53i8FT0iJ2gAAACM"]
[Thu Jul 30 09:52:18.428059 2026] [security2:error] [pid 2615770:tid 2615770] [client 77.90.185.230:54037] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwl2Gvo-53i8FT0iJ2gAAACM"]
[Thu Jul 30 09:52:18.693094 2026] [security2:error] [pid 2614355:tid 2614355] [client 77.90.185.230:58161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/backend/.env"] [unique_id "amsQwhcozqdbwIoyUtE1pwAAACA"]
[Thu Jul 30 09:52:18.693275 2026] [security2:error] [pid 2614355:tid 2614355] [client 77.90.185.230:58161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/backend/.env"] [unique_id "amsQwhcozqdbwIoyUtE1pwAAACA"]
[Thu Jul 30 09:52:18.718749 2026] [security2:error] [pid 2614355:tid 2614355] [client 77.90.185.230:58161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwhcozqdbwIoyUtE1pwAAACA"]
[Thu Jul 30 09:52:18.786041 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:41816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:18.786087 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:18.841763 2026] [ssl:error] [pid 2614355:tid 2614355] (EAI 2)Name or service not known: [client 144.76.19.72:41826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:18.841786 2026] [ssl:error] [pid 2614355:tid 2614355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:18.977722 2026] [security2:error] [pid 2617761:tid 2617761] [client 77.90.185.230:28149] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.example"] [unique_id "amsQwquEiTLCQIfFSIucfgAAABc"]
[Thu Jul 30 09:52:18.977887 2026] [security2:error] [pid 2617761:tid 2617761] [client 77.90.185.230:28149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.example"] [unique_id "amsQwquEiTLCQIfFSIucfgAAABc"]
[Thu Jul 30 09:52:19.002356 2026] [security2:error] [pid 2617761:tid 2617761] [client 77.90.185.230:28149] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwquEiTLCQIfFSIucfgAAABc"]
[Thu Jul 30 09:52:19.122609 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:41279] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/web/.env"] [unique_id "amsQwzFABoNyQecs7NzSigAAAAc"]
[Thu Jul 30 09:52:19.122810 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:41279] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/web/.env"] [unique_id "amsQwzFABoNyQecs7NzSigAAAAc"]
[Thu Jul 30 09:52:19.148473 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:41279] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQwzFABoNyQecs7NzSigAAAAc"]
[Thu Jul 30 09:52:19.262190 2026] [security2:error] [pid 2632979:tid 2632979] [client 77.90.185.230:42107] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.bak"] [unique_id "amsQw0B6cUZdrsa4uP60kAAAAAo"]
[Thu Jul 30 09:52:19.262431 2026] [security2:error] [pid 2632979:tid 2632979] [client 77.90.185.230:42107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.bak"] [unique_id "amsQw0B6cUZdrsa4uP60kAAAAAo"]
[Thu Jul 30 09:52:19.288635 2026] [security2:error] [pid 2632979:tid 2632979] [client 77.90.185.230:42107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQw0B6cUZdrsa4uP60kAAAAAo"]
[Thu Jul 30 09:52:19.410463 2026] [security2:error] [pid 2628119:tid 2628119] [client 77.90.185.230:14273] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/staging/.env"] [unique_id "amsQw5LEoKpXx2VwoyybrwAAABE"]
[Thu Jul 30 09:52:19.410678 2026] [security2:error] [pid 2628119:tid 2628119] [client 77.90.185.230:14273] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/staging/.env"] [unique_id "amsQw5LEoKpXx2VwoyybrwAAABE"]
[Thu Jul 30 09:52:19.436006 2026] [security2:error] [pid 2628119:tid 2628119] [client 77.90.185.230:14273] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQw5LEoKpXx2VwoyybrwAAABE"]
[Thu Jul 30 09:52:20.185042 2026] [security2:error] [pid 2632946:tid 2632946] [client 77.90.185.230:53993] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/core/.env"] [unique_id "amsQxHPF1iWJTw6P5RnczgAAAAY"]
[Thu Jul 30 09:52:20.185255 2026] [security2:error] [pid 2632946:tid 2632946] [client 77.90.185.230:53993] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/core/.env"] [unique_id "amsQxHPF1iWJTw6P5RnczgAAAAY"]
[Thu Jul 30 09:52:20.211467 2026] [security2:error] [pid 2632946:tid 2632946] [client 77.90.185.230:53993] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQxHPF1iWJTw6P5RnczgAAAAY"]
[Thu Jul 30 09:52:20.611382 2026] [security2:error] [pid 2617761:tid 2617761] [client 77.90.185.230:25623] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/images/.env"] [unique_id "amsQxKuEiTLCQIfFSIucgwAAABc"]
[Thu Jul 30 09:52:20.611598 2026] [security2:error] [pid 2617761:tid 2617761] [client 77.90.185.230:25623] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/images/.env"] [unique_id "amsQxKuEiTLCQIfFSIucgwAAABc"]
[Thu Jul 30 09:52:20.637339 2026] [security2:error] [pid 2617761:tid 2617761] [client 77.90.185.230:25623] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQxKuEiTLCQIfFSIucgwAAABc"]
[Thu Jul 30 09:52:20.641403 2026] [security2:error] [pid 2632978:tid 2632978] [client 82.39.212.105:53570] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "amsQxKFYiRirV-idXiSs2AAAAAk"]
[Thu Jul 30 09:52:20.641606 2026] [security2:error] [pid 2632978:tid 2632978] [client 82.39.212.105:53570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "amsQxKFYiRirV-idXiSs2AAAAAk"]
[Thu Jul 30 09:52:20.641820 2026] [security2:error] [pid 2632978:tid 2632978] [client 82.39.212.105:53570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "amsQxKFYiRirV-idXiSs2AAAAAk"]
[Thu Jul 30 09:52:20.749460 2026] [security2:error] [pid 2624518:tid 2624518] [client 77.90.185.230:2049] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.save.1"] [unique_id "amsQxP4Wprs2n64sWeGaqQAAAEw"]
[Thu Jul 30 09:52:20.750214 2026] [security2:error] [pid 2624518:tid 2624518] [client 77.90.185.230:2049] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.save.1"] [unique_id "amsQxP4Wprs2n64sWeGaqQAAAEw"]
[Thu Jul 30 09:52:20.774269 2026] [security2:error] [pid 2624518:tid 2624518] [client 77.90.185.230:2049] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQxP4Wprs2n64sWeGaqQAAAEw"]
[Thu Jul 30 09:52:20.894408 2026] [security2:error] [pid 2624637:tid 2624637] [client 77.90.185.230:15885] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.save"] [unique_id "amsQxPMfkgoHimFe1nDdgwAAAFA"]
[Thu Jul 30 09:52:20.894620 2026] [security2:error] [pid 2624637:tid 2624637] [client 77.90.185.230:15885] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.save"] [unique_id "amsQxPMfkgoHimFe1nDdgwAAAFA"]
[Thu Jul 30 09:52:20.920265 2026] [security2:error] [pid 2624637:tid 2624637] [client 77.90.185.230:15885] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQxPMfkgoHimFe1nDdgwAAAFA"]
[Thu Jul 30 09:52:20.940189 2026] [security2:error] [pid 2631101:tid 2631101] [client 82.39.212.105:53578] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wotmania.spamp.co.uk"] [uri "/.git/HEAD"] [unique_id "amsQxKwOn4ZWLNVnvIZPFQAAACk"]
[Thu Jul 30 09:52:20.940392 2026] [security2:error] [pid 2631101:tid 2631101] [client 82.39.212.105:53578] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wotmania.spamp.co.uk"] [uri "/.git/HEAD"] [unique_id "amsQxKwOn4ZWLNVnvIZPFQAAACk"]
[Thu Jul 30 09:52:20.940630 2026] [security2:error] [pid 2631101:tid 2631101] [client 82.39.212.105:53578] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wotmania.spamp.co.uk"] [uri "/.git/HEAD"] [unique_id "amsQxKwOn4ZWLNVnvIZPFQAAACk"]
[Thu Jul 30 09:52:21.043703 2026] [security2:error] [pid 2624518:tid 2624518] [client 77.90.185.230:6017] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/API/.env"] [unique_id "amsQxf4Wprs2n64sWeGaqgAAAEw"]
[Thu Jul 30 09:52:21.043932 2026] [security2:error] [pid 2624518:tid 2624518] [client 77.90.185.230:6017] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/API/.env"] [unique_id "amsQxf4Wprs2n64sWeGaqgAAAEw"]
[Thu Jul 30 09:52:21.069220 2026] [security2:error] [pid 2624518:tid 2624518] [client 77.90.185.230:6017] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQxf4Wprs2n64sWeGaqgAAAEw"]
[Thu Jul 30 09:52:21.188988 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:60485] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.akoptimize.online"] [uri "/app/.env"] [unique_id "amsQxTFABoNyQecs7NzSkgAAAAc"]
[Thu Jul 30 09:52:21.189160 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:60485] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.akoptimize.online"] [uri "/app/.env"] [unique_id "amsQxTFABoNyQecs7NzSkgAAAAc"]
[Thu Jul 30 09:52:21.214649 2026] [security2:error] [pid 2625934:tid 2625934] [client 77.90.185.230:60485] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.akoptimize.online"] [uri "/403.shtml"] [unique_id "amsQxTFABoNyQecs7NzSkgAAAAc"]
[Thu Jul 30 09:52:21.896748 2026] [ssl:error] [pid 2633653:tid 2633653] (EAI 2)Name or service not known: [client 144.76.19.72:48370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:21.896785 2026] [ssl:error] [pid 2633653:tid 2633653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:21.950541 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:48378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:21.950569 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:25.003445 2026] [ssl:error] [pid 2599796:tid 2599796] (EAI 2)Name or service not known: [client 144.76.19.72:48388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:25.003480 2026] [ssl:error] [pid 2599796:tid 2599796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:25.059375 2026] [ssl:error] [pid 2629059:tid 2629059] (EAI 2)Name or service not known: [client 144.76.19.72:48392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:25.059408 2026] [ssl:error] [pid 2629059:tid 2629059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:27.332742 2026] [security2:error] [pid 2624519:tid 2624519] [client 185.191.171.14:53178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/gemtech-3-lug-mount-thread-pitch"] [unique_id "amsQy8BbRDfM0YcO_B5pogAAAE0"]
[Thu Jul 30 09:52:27.949915 2026] [lsapi:warn] [pid 2633951:tid 2633951] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:52:28.115737 2026] [ssl:error] [pid 2633653:tid 2633653] (EAI 2)Name or service not known: [client 144.76.19.72:48404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:28.115768 2026] [ssl:error] [pid 2633653:tid 2633653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:28.173212 2026] [ssl:error] [pid 2631101:tid 2631101] (EAI 2)Name or service not known: [client 144.76.19.72:48418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:28.173251 2026] [ssl:error] [pid 2631101:tid 2631101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:31.121308 2026] [security2:error] [pid 2619667:tid 2619667] [client 85.208.96.212:45354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6120.0.html"] [unique_id "amsQz233guArmqQ55aGeygAAADs"]
[Thu Jul 30 09:52:31.253253 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:53634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:31.253292 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:31.306572 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:53650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:31.306615 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:32.376114 2026] [security2:error] [pid 2628081:tid 2628081] [client 43.131.45.213:36734] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "abc-dyslexia.com"] [uri "/"] [unique_id "amsQ0OTkGT2Hso37DbC1kAAAAAM"]
[Thu Jul 30 09:52:34.364281 2026] [ssl:error] [pid 2633951:tid 2633951] (EAI 2)Name or service not known: [client 144.76.19.72:53656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:34.364344 2026] [ssl:error] [pid 2633951:tid 2633951] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:34.424063 2026] [ssl:error] [pid 2624637:tid 2624637] (EAI 2)Name or service not known: [client 144.76.19.72:53658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:34.424108 2026] [ssl:error] [pid 2624637:tid 2624637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:37.486906 2026] [ssl:error] [pid 2628724:tid 2628724] (EAI 2)Name or service not known: [client 144.76.19.72:53668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:37.486957 2026] [ssl:error] [pid 2628724:tid 2628724] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:37.540218 2026] [ssl:error] [pid 2624637:tid 2624637] (EAI 2)Name or service not known: [client 144.76.19.72:53680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:37.540241 2026] [ssl:error] [pid 2624637:tid 2624637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:38.666851 2026] [lsapi:warn] [pid 2628990:tid 2628990] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:52:40.985536 2026] [ssl:error] [pid 2634653:tid 2634653] (EAI 2)Name or service not known: [client 144.76.19.72:64758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:40.985570 2026] [ssl:error] [pid 2634653:tid 2634653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:41.260156 2026] [ssl:error] [pid 2628724:tid 2628724] (EAI 2)Name or service not known: [client 144.76.19.72:64760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:41.260188 2026] [ssl:error] [pid 2628724:tid 2628724] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:43.755169 2026] [access_compat:error] [pid 2628776:tid 2628776] [client 217.160.202.182:46128] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 09:52:44.263954 2026] [lsapi:warn] [pid 2632979:tid 2632979] [client 138.68.252.209:47150] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 09:52:44.263999 2026] [lsapi:warn] [pid 2632979:tid 2632979] [client 138.68.252.209:47150] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 09:52:44.338022 2026] [ssl:error] [pid 2628534:tid 2628534] (EAI 2)Name or service not known: [client 144.76.19.72:64764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:44.338052 2026] [ssl:error] [pid 2628534:tid 2628534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:44.392640 2026] [ssl:error] [pid 2632978:tid 2632978] (EAI 2)Name or service not known: [client 144.76.19.72:64770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:44.392684 2026] [ssl:error] [pid 2632978:tid 2632978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:46.158081 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.251.199.203:39028] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsQ3m33guArmqQ55aGezwAAADs"]
[Thu Jul 30 09:52:46.498986 2026] [security2:error] [pid 2634694:tid 2634694] [client 114.119.132.171:34963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/series/mission/"] [unique_id "amsQ3oNtqKkb7yTDCoLW5QAAACg"], referer: http://www.erskinenazarene.co.uk/sermons/page/5/
[Thu Jul 30 09:52:47.477697 2026] [ssl:error] [pid 2634653:tid 2634653] (EAI 2)Name or service not known: [client 144.76.19.72:64776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:47.477732 2026] [ssl:error] [pid 2634653:tid 2634653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:47.532416 2026] [ssl:error] [pid 2634656:tid 2634656] (EAI 2)Name or service not known: [client 144.76.19.72:64780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:47.532446 2026] [ssl:error] [pid 2634656:tid 2634656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:48.092266 2026] [security2:error] [pid 2634701:tid 2634701] [client 114.119.132.171:46467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/series/mission/"] [unique_id "amsQ4BnjaJxiLVaogKicAwAAADM"], referer: http://www.erskinenazarene.co.uk/sermons/page/5/
[Thu Jul 30 09:52:49.491111 2026] [lsapi:warn] [pid 2624439:tid 2624439] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:52:50.589833 2026] [ssl:error] [pid 2634654:tid 2634654] (EAI 2)Name or service not known: [client 144.76.19.72:19216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:50.589865 2026] [ssl:error] [pid 2634654:tid 2634654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:50.643639 2026] [ssl:error] [pid 2634701:tid 2634701] (EAI 2)Name or service not known: [client 144.76.19.72:19224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:50.643669 2026] [ssl:error] [pid 2634701:tid 2634701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:51.269987 2026] [authz_core:error] [pid 2634654:tid 2634654] [client 57.141.0.15:62714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:52:51.270627 2026] [authz_core:error] [pid 2634654:tid 2634654] [client 57.141.0.15:62714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:52:53.696612 2026] [ssl:error] [pid 2632982:tid 2632982] (EAI 2)Name or service not known: [client 144.76.19.72:19226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:53.696647 2026] [ssl:error] [pid 2632982:tid 2632982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:53.750363 2026] [ssl:error] [pid 2632946:tid 2632946] (EAI 2)Name or service not known: [client 144.76.19.72:19234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:53.750409 2026] [ssl:error] [pid 2632946:tid 2632946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:54.330891 2026] [authz_core:error] [pid 2624637:tid 2624637] [client 66.249.66.33:39903] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:52:54.333576 2026] [authz_core:error] [pid 2624637:tid 2624637] [client 66.249.66.33:39903] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:52:54.540191 2026] [ssl:error] [pid 2634653:tid 2634653] (70014)End of file found: [client 216.73.216.199:3009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:52:55.478806 2026] [core:error] [pid 2629059:tid 2629059] [client 57.141.0.37:34882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:52:55.478842 2026] [core:error] [pid 2629059:tid 2629059] [client 57.141.0.37:34882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:52:56.724377 2026] [core:crit] [pid 2628119:tid 2628119] (13)Permission denied: [client 40.77.167.35:63413] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 09:52:56.823711 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.191.171.2:45402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2993.0/prev_next,next.html"] [unique_id "amsQ6EaoJEg5NiQAkXduiAAAABI"]
[Thu Jul 30 09:52:56.909289 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:19250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:56.909318 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:56.962229 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:19256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:52:56.962254 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:52:58.034723 2026] [core:error] [pid 2635258:tid 2635258] [client 66.249.64.170:60615] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:52:58.034770 2026] [core:error] [pid 2635258:tid 2635258] [client 66.249.64.170:60615] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:52:59.492793 2026] [security2:error] [pid 2628533:tid 2628533] [client 94.154.43.177:63524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hatch-works.com"] [uri "/.env"] [unique_id "amsQ6y7Q1FE0-q2LacL2ZwAAABU"]
[Thu Jul 30 09:52:59.492999 2026] [security2:error] [pid 2628533:tid 2628533] [client 94.154.43.177:63524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hatch-works.com"] [uri "/.env"] [unique_id "amsQ6y7Q1FE0-q2LacL2ZwAAABU"]
[Thu Jul 30 09:52:59.696833 2026] [security2:error] [pid 2628533:tid 2628533] [client 94.154.43.177:63524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hatch-works.com"] [uri "/index.php"] [unique_id "amsQ6y7Q1FE0-q2LacL2ZwAAABU"]
[Thu Jul 30 09:53:00.030689 2026] [ssl:error] [pid 2632981:tid 2632981] (EAI 2)Name or service not known: [client 144.76.19.72:58296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:00.030738 2026] [ssl:error] [pid 2632981:tid 2632981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:00.084399 2026] [ssl:error] [pid 2635290:tid 2635290] (EAI 2)Name or service not known: [client 144.76.19.72:58308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:00.084439 2026] [ssl:error] [pid 2635290:tid 2635290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:00.169510 2026] [lsapi:warn] [pid 2631403:tid 2631403] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:53:00.626120 2026] [security2:error] [pid 2635292:tid 2635292] [client 49.235.136.28:40044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "pamporovoexpress.com"] [uri "/"] [unique_id "amsQ7AsPYeq-Lvt1FfNVIQAAACI"]
[Thu Jul 30 09:53:01.101438 2026] [authz_core:error] [pid 2634653:tid 2634653] [client 57.141.0.13:39212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:53:01.102054 2026] [authz_core:error] [pid 2634653:tid 2634653] [client 57.141.0.13:39212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:53:02.589888 2026] [security2:error] [pid 2634653:tid 2634653] [client 43.166.134.114:37416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampman.com"] [uri "/"] [unique_id "amsQ7hlCbzYyQyOPgBE0oQAAABs"]
[Thu Jul 30 09:53:03.141902 2026] [ssl:error] [pid 2624405:tid 2624405] (EAI 2)Name or service not known: [client 144.76.19.72:58324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:03.141934 2026] [ssl:error] [pid 2624405:tid 2624405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:03.194860 2026] [ssl:error] [pid 2632946:tid 2632946] (EAI 2)Name or service not known: [client 144.76.19.72:58330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:03.194886 2026] [ssl:error] [pid 2632946:tid 2632946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:03.404049 2026] [security2:error] [pid 2628120:tid 2628120] [client 43.166.134.114:47774] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsQ7yqCrh0o4antW6s7swAAABM"], referer: http://www.spampman.com
[Thu Jul 30 09:53:06.249742 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:58340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:06.249771 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:06.302641 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:58352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:06.302673 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:09.135417 2026] [authz_core:error] [pid 2634695:tid 2634695] [client 66.249.66.33:58258] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:53:09.138075 2026] [authz_core:error] [pid 2634695:tid 2634695] [client 66.249.66.33:58258] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:53:09.357269 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:58358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:09.357301 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:09.414636 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:58374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:09.414658 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:10.550489 2026] [cgi:error] [pid 2634700:tid 2634700] [client 68.67.112.68:22636] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:53:10.636113 2026] [ssl:error] [pid 2631403:tid 2631403] [client 13.219.121.241:47894] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname soul-connections.net provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 09:53:10.751823 2026] [lsapi:warn] [pid 2635292:tid 2635292] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:53:12.244527 2026] [core:error] [pid 2634628:tid 2634628] [client 66.249.66.169:35985] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:53:12.244568 2026] [core:error] [pid 2634628:tid 2634628] [client 66.249.66.169:35985] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:53:12.250573 2026] [core:error] [pid 2631101:tid 2631101] [client 66.249.66.167:41011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:53:12.250605 2026] [core:error] [pid 2631101:tid 2631101] [client 66.249.66.167:41011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:53:12.471159 2026] [ssl:error] [pid 2623544:tid 2623544] (EAI 2)Name or service not known: [client 144.76.19.72:22778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:12.471192 2026] [ssl:error] [pid 2623544:tid 2623544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:12.524789 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:22792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:12.524837 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:13.139455 2026] [authz_core:error] [pid 2624405:tid 2624405] [client 57.141.0.20:60474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:53:13.140087 2026] [authz_core:error] [pid 2624405:tid 2624405] [client 57.141.0.20:60474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:53:15.582469 2026] [ssl:error] [pid 2624405:tid 2624405] (EAI 2)Name or service not known: [client 144.76.19.72:22802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:15.582495 2026] [ssl:error] [pid 2624405:tid 2624405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:15.635735 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:22814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:15.635760 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:18.690715 2026] [ssl:error] [pid 2635292:tid 2635292] (EAI 2)Name or service not known: [client 144.76.19.72:22824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:18.690749 2026] [ssl:error] [pid 2635292:tid 2635292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:18.742889 2026] [ssl:error] [pid 2635292:tid 2635292] (EAI 2)Name or service not known: [client 144.76.19.72:22834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:18.742911 2026] [ssl:error] [pid 2635292:tid 2635292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:18.845109 2026] [security2:error] [pid 2635292:tid 2635292] [client 43.166.244.66:60972] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/fzmv/"] [unique_id "amsQ_gsPYeq-Lvt1FfNVJQAAACI"]
[Thu Jul 30 09:53:20.136964 2026] [ssl:error] [pid 2628990:tid 2628990] (70014)End of file found: [client 216.73.216.199:59874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:53:21.269672 2026] [lsapi:warn] [pid 2636053:tid 2636053] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:53:21.741215 2026] [core:error] [pid 2619667:tid 2619667] [client 66.249.66.8:48694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:53:21.741241 2026] [core:error] [pid 2619667:tid 2619667] [client 66.249.66.8:48694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:53:22.470635 2026] [security2:error] [pid 2633748:tid 2633748] [client 74.7.243.236:59624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "plastic-sheeting.org"] [uri "/"] [unique_id "amsRArFSxSHp_ADTrvteQAAAAB8"], referer: https://pagesearch.net
[Thu Jul 30 09:53:22.785978 2026] [ssl:error] [pid 2624405:tid 2624405] (EAI 2)Name or service not known: [client 144.76.19.72:21272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:22.786010 2026] [ssl:error] [pid 2624405:tid 2624405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:22.847151 2026] [ssl:error] [pid 2636017:tid 2636017] (EAI 2)Name or service not known: [client 144.76.19.72:21276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:22.847183 2026] [ssl:error] [pid 2636017:tid 2636017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:24.564171 2026] [security2:error] [pid 2624637:tid 2624637] [client 180.74.224.172:55173] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRBPMfkgoHimFe1nDdmwAAAFA"]
[Thu Jul 30 09:53:24.564220 2026] [security2:error] [pid 2624637:tid 2624637] [client 180.74.224.172:55173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRBPMfkgoHimFe1nDdmwAAAFA"]
[Thu Jul 30 09:53:24.564487 2026] [security2:error] [pid 2624637:tid 2624637] [client 180.74.224.172:55173] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRBPMfkgoHimFe1nDdmwAAAFA"]
[Thu Jul 30 09:53:25.282776 2026] [lsapi:warn] [pid 2634700:tid 2634700] [client 216.73.216.90:24523] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:53:25.282822 2026] [lsapi:warn] [pid 2634700:tid 2634700] [client 216.73.216.90:24523] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:53:25.904876 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:21286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:25.904904 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:25.957519 2026] [ssl:error] [pid 2636152:tid 2636152] (EAI 2)Name or service not known: [client 144.76.19.72:21290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:25.957547 2026] [ssl:error] [pid 2636152:tid 2636152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:26.775302 2026] [security2:error] [pid 2634699:tid 2634699] [client 47.243.198.207:26519] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRBhKjPZkro1utGC7-nwAAAC4"]
[Thu Jul 30 09:53:26.775348 2026] [security2:error] [pid 2634699:tid 2634699] [client 47.243.198.207:26519] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRBhKjPZkro1utGC7-nwAAAC4"]
[Thu Jul 30 09:53:26.775579 2026] [security2:error] [pid 2634699:tid 2634699] [client 47.243.198.207:26519] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRBhKjPZkro1utGC7-nwAAAC4"]
[Thu Jul 30 09:53:28.248039 2026] [lsapi:warn] [pid 2633694:tid 2633694] [client 112.86.225.243:47278] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:53:28.248108 2026] [lsapi:warn] [pid 2633694:tid 2633694] [client 112.86.225.243:47278] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:53:28.480800 2026] [security2:error] [pid 2625934:tid 2625934] [client 85.208.96.209:30300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/strategic-financial-solutions-esop-lawsuit"] [unique_id "amsRCDFABoNyQecs7NzSqgAAAAc"]
[Thu Jul 30 09:53:29.013000 2026] [ssl:error] [pid 2636052:tid 2636052] (EAI 2)Name or service not known: [client 144.76.19.72:21296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:29.013032 2026] [ssl:error] [pid 2636052:tid 2636052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:29.074407 2026] [ssl:error] [pid 2636410:tid 2636410] (EAI 2)Name or service not known: [client 144.76.19.72:21298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:29.074436 2026] [ssl:error] [pid 2636410:tid 2636410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:30.192360 2026] [security2:error] [pid 2624637:tid 2624637] [client 47.243.198.207:28247] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRCvMfkgoHimFe1nDdnAAAAFA"]
[Thu Jul 30 09:53:30.192410 2026] [security2:error] [pid 2624637:tid 2624637] [client 47.243.198.207:28247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRCvMfkgoHimFe1nDdnAAAAFA"]
[Thu Jul 30 09:53:30.192652 2026] [security2:error] [pid 2624637:tid 2624637] [client 47.243.198.207:28247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRCvMfkgoHimFe1nDdnAAAAFA"]
[Thu Jul 30 09:53:30.584459 2026] [authz_core:error] [pid 2624405:tid 2624405] [client 57.141.0.70:61646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:53:30.585085 2026] [authz_core:error] [pid 2624405:tid 2624405] [client 57.141.0.70:61646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:53:32.015798 2026] [lsapi:warn] [pid 2636017:tid 2636017] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:53:32.148310 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:54936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:32.148345 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:32.206292 2026] [ssl:error] [pid 2636538:tid 2636538] (EAI 2)Name or service not known: [client 144.76.19.72:54938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:32.206329 2026] [ssl:error] [pid 2636538:tid 2636538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:33.008645 2026] [security2:error] [pid 2636051:tid 2636051] [client 198.244.183.153:27382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "stampys.eu"] [uri "/store/wishlist/index/add/product/6/form_key/PfsYrZfzhMGBd1Ay/"] [unique_id "amsRDQc1meWwNPSaP46pdwAAAAk"]
[Thu Jul 30 09:53:35.264804 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:54942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:35.264835 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:35.317806 2026] [ssl:error] [pid 2634698:tid 2634698] (EAI 2)Name or service not known: [client 144.76.19.72:54948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:35.317837 2026] [ssl:error] [pid 2634698:tid 2634698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:38.375371 2026] [ssl:error] [pid 2635290:tid 2635290] (EAI 2)Name or service not known: [client 144.76.19.72:54964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:38.375404 2026] [ssl:error] [pid 2635290:tid 2635290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:38.431694 2026] [ssl:error] [pid 2636352:tid 2636352] (EAI 2)Name or service not known: [client 144.76.19.72:54968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:38.431725 2026] [ssl:error] [pid 2636352:tid 2636352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:41.485416 2026] [ssl:error] [pid 2629059:tid 2629059] (EAI 2)Name or service not known: [client 144.76.19.72:21508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:41.485442 2026] [ssl:error] [pid 2629059:tid 2629059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:41.541214 2026] [ssl:error] [pid 2632982:tid 2632982] (EAI 2)Name or service not known: [client 144.76.19.72:21516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:41.541248 2026] [ssl:error] [pid 2632982:tid 2632982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:42.352333 2026] [authz_core:error] [pid 2636051:tid 2636051] [client 57.141.0.54:63722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:53:42.353030 2026] [authz_core:error] [pid 2636051:tid 2636051] [client 57.141.0.54:63722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:53:42.449610 2026] [authz_core:error] [pid 2636152:tid 2636152] [client 66.249.66.33:43349] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:53:42.452270 2026] [authz_core:error] [pid 2636152:tid 2636152] [client 66.249.66.33:43349] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:53:42.663091 2026] [lsapi:warn] [pid 2631403:tid 2631403] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:53:43.079654 2026] [security2:error] [pid 2637197:tid 2637197] [client 163.61.60.30:54982] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsRF7S7nEiok9ey2r1j6QAAABw"]
[Thu Jul 30 09:53:44.594109 2026] [ssl:error] [pid 2637197:tid 2637197] (EAI 2)Name or service not known: [client 144.76.19.72:21520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:44.594142 2026] [ssl:error] [pid 2637197:tid 2637197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:44.650694 2026] [ssl:error] [pid 2633748:tid 2633748] (EAI 2)Name or service not known: [client 144.76.19.72:21530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:44.650731 2026] [ssl:error] [pid 2633748:tid 2633748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:45.160666 2026] [ssl:error] [pid 2636410:tid 2636410] (70014)End of file found: [client 216.73.216.199:21682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:53:47.705002 2026] [ssl:error] [pid 2624637:tid 2624637] (EAI 2)Name or service not known: [client 144.76.19.72:21536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:47.705031 2026] [ssl:error] [pid 2624637:tid 2624637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:47.760654 2026] [ssl:error] [pid 2628990:tid 2628990] (EAI 2)Name or service not known: [client 144.76.19.72:21546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:47.760692 2026] [ssl:error] [pid 2628990:tid 2628990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:50.819477 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:39036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:50.819511 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:50.874510 2026] [ssl:error] [pid 2628119:tid 2628119] (EAI 2)Name or service not known: [client 144.76.19.72:39038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:50.874537 2026] [ssl:error] [pid 2628119:tid 2628119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:51.821193 2026] [security2:error] [pid 2633746:tid 2633746] [client 20.113.148.57:13545] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/wp-config.php"] [unique_id "amsRH9KufSsZ36a8zRsPDAAAAB0"]
[Thu Jul 30 09:53:51.821313 2026] [security2:error] [pid 2633746:tid 2633746] [client 20.113.148.57:13545] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/wp-config.php"] [unique_id "amsRH9KufSsZ36a8zRsPDAAAAB0"]
[Thu Jul 30 09:53:51.821483 2026] [security2:error] [pid 2633746:tid 2633746] [client 20.113.148.57:13545] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/403.shtml"] [unique_id "amsRH9KufSsZ36a8zRsPDAAAAB0"]
[Thu Jul 30 09:53:53.283279 2026] [lsapi:warn] [pid 2636017:tid 2636017] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:53:53.932186 2026] [ssl:error] [pid 2612418:tid 2612418] (EAI 2)Name or service not known: [client 144.76.19.72:39050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:53.932217 2026] [ssl:error] [pid 2612418:tid 2612418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:53.986219 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:39060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:53:53.986251 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:53:59.127457 2026] [core:crit] [pid 2633748:tid 2633748] (13)Permission denied: [client 93.158.90.66:57627] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 09:53:59.127524 2026] [authz_core:error] [pid 2633748:tid 2633748] [client 93.158.90.66:57627] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 09:53:59.128352 2026] [core:crit] [pid 2633748:tid 2633748] (13)Permission denied: [client 93.158.90.66:57627] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 09:53:59.128384 2026] [core:crit] [pid 2633748:tid 2633748] (13)Permission denied: [client 93.158.90.66:57627] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 09:53:59.128414 2026] [core:crit] [pid 2633748:tid 2633748] (13)Permission denied: [client 93.158.90.66:57627] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 09:54:03.046996 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:39062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:03.047047 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:04.050734 2026] [ssl:error] [pid 2637816:tid 2637816] (EAI 2)Name or service not known: [client 144.76.19.72:24182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:04.050792 2026] [ssl:error] [pid 2637816:tid 2637816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:05.095675 2026] [lsapi:warn] [pid 2625934:tid 2625934] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:54:05.460693 2026] [security2:error] [pid 2637602:tid 2637602] [client 20.113.148.57:13489] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/var/log/error.log"] [unique_id "amsRLa1xSc3by5lq6XCM1wAAABQ"]
[Thu Jul 30 09:54:05.460883 2026] [security2:error] [pid 2637602:tid 2637602] [client 20.113.148.57:13489] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/var/log/error.log"] [unique_id "amsRLa1xSc3by5lq6XCM1wAAABQ"]
[Thu Jul 30 09:54:05.461047 2026] [security2:error] [pid 2637602:tid 2637602] [client 20.113.148.57:13489] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/403.shtml"] [unique_id "amsRLa1xSc3by5lq6XCM1wAAABQ"]
[Thu Jul 30 09:54:07.103965 2026] [ssl:error] [pid 2637918:tid 2637918] (EAI 2)Name or service not known: [client 144.76.19.72:24192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:07.104008 2026] [ssl:error] [pid 2637918:tid 2637918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:07.160822 2026] [ssl:error] [pid 2637920:tid 2637920] (EAI 2)Name or service not known: [client 144.76.19.72:24206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:07.160859 2026] [ssl:error] [pid 2637920:tid 2637920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:07.282849 2026] [security2:error] [pid 2637921:tid 2637921] [client 43.128.149.102:57108] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-mail.php"] [unique_id "amsRL75b3LXIioI_1eFcpwAAAFU"]
[Thu Jul 30 09:54:10.219818 2026] [ssl:error] [pid 2637602:tid 2637602] (EAI 2)Name or service not known: [client 144.76.19.72:25956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:10.219874 2026] [ssl:error] [pid 2637602:tid 2637602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:10.277084 2026] [ssl:error] [pid 2624439:tid 2624439] (EAI 2)Name or service not known: [client 144.76.19.72:25960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:10.277111 2026] [ssl:error] [pid 2624439:tid 2624439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:10.419743 2026] [security2:error] [pid 2637684:tid 2637684] [client 114.119.144.31:59461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/paul_tarrant/"] [unique_id "amsRMjNV-5EIcPTlc2tQkAAAAEI"], referer: http://www.erskinenazarene.co.uk/sermons/page/9/
[Thu Jul 30 09:54:11.784536 2026] [security2:error] [pid 2619667:tid 2619667] [client 213.139.53.169:45984] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRM233guArmqQ55aGfFwAAADs"]
[Thu Jul 30 09:54:11.784584 2026] [security2:error] [pid 2619667:tid 2619667] [client 213.139.53.169:45984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRM233guArmqQ55aGfFwAAADs"]
[Thu Jul 30 09:54:11.784906 2026] [security2:error] [pid 2619667:tid 2619667] [client 213.139.53.169:45984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRM233guArmqQ55aGfFwAAADs"]
[Thu Jul 30 09:54:11.788424 2026] [security2:error] [pid 2637620:tid 2637620] [client 114.119.144.31:38729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/preacher/paul_tarrant/"] [unique_id "amsRMz6kFzw0QMzfYT8pMwAAABU"], referer: http://www.erskinenazarene.co.uk/sermons/page/9/
[Thu Jul 30 09:54:11.938619 2026] [security2:error] [pid 2633748:tid 2633748] [client 47.128.125.120:58518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2009/02/18/using-2d-barcodes/"] [unique_id "amsRM7FSxSHp_ADTrvtebAAAAB8"]
[Thu Jul 30 09:54:13.310742 2026] [security2:error] [pid 2637697:tid 2637697] [client 24.152.55.28:58240] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRNW3klkCAvRGd4-GA7AAAAEo"]
[Thu Jul 30 09:54:13.310799 2026] [security2:error] [pid 2637697:tid 2637697] [client 24.152.55.28:58240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRNW3klkCAvRGd4-GA7AAAAEo"]
[Thu Jul 30 09:54:13.311075 2026] [security2:error] [pid 2637697:tid 2637697] [client 24.152.55.28:58240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRNW3klkCAvRGd4-GA7AAAAEo"]
[Thu Jul 30 09:54:13.332080 2026] [ssl:error] [pid 2637685:tid 2637685] (EAI 2)Name or service not known: [client 144.76.19.72:25962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:13.332118 2026] [ssl:error] [pid 2637685:tid 2637685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:13.386125 2026] [ssl:error] [pid 2624513:tid 2624513] (EAI 2)Name or service not known: [client 144.76.19.72:25976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:13.386184 2026] [ssl:error] [pid 2624513:tid 2624513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:14.552420 2026] [security2:error] [pid 2624404:tid 2624404] [client 37.59.204.153:63342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.com"] [uri "/robots.txt"] [unique_id "amsRNtKkdS-TEUzPCkT6vgAAAC8"]
[Thu Jul 30 09:54:14.629972 2026] [lsapi:warn] [pid 2637701:tid 2637701] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:54:15.166681 2026] [ssl:error] [pid 2612418:tid 2612418] (70014)End of file found: [client 216.73.216.199:39455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:54:15.682668 2026] [security2:error] [pid 2636537:tid 2636537] [client 51.195.215.5:28994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.com"] [uri "/nortonnews/jumtl625.php"] [unique_id "amsRN_Ta6K3L7aTiAIfRHgAAADQ"]
[Thu Jul 30 09:54:15.771770 2026] [authz_core:error] [pid 2625934:tid 2625934] [client 57.141.0.68:20390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:54:15.772391 2026] [authz_core:error] [pid 2625934:tid 2625934] [client 57.141.0.68:20390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:54:16.256397 2026] [security2:error] [pid 2628119:tid 2628119] [client 109.255.73.201:60596] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsROJLEoKpXx2Vwoyyb1wAAABE"]
[Thu Jul 30 09:54:16.256445 2026] [security2:error] [pid 2628119:tid 2628119] [client 109.255.73.201:60596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsROJLEoKpXx2Vwoyyb1wAAABE"]
[Thu Jul 30 09:54:16.256711 2026] [security2:error] [pid 2628119:tid 2628119] [client 109.255.73.201:60596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsROJLEoKpXx2Vwoyyb1wAAABE"]
[Thu Jul 30 09:54:16.443940 2026] [ssl:error] [pid 2637650:tid 2637650] (EAI 2)Name or service not known: [client 144.76.19.72:25988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:16.443971 2026] [ssl:error] [pid 2637650:tid 2637650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:16.502635 2026] [ssl:error] [pid 2637700:tid 2637700] (EAI 2)Name or service not known: [client 144.76.19.72:26000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:16.502668 2026] [ssl:error] [pid 2637700:tid 2637700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:19.559674 2026] [ssl:error] [pid 2637701:tid 2637701] (EAI 2)Name or service not known: [client 144.76.19.72:26658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:19.559723 2026] [ssl:error] [pid 2637701:tid 2637701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:19.615857 2026] [ssl:error] [pid 2635971:tid 2635971] (EAI 2)Name or service not known: [client 144.76.19.72:26670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:19.615904 2026] [ssl:error] [pid 2635971:tid 2635971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:22.247706 2026] [access_compat:error] [pid 2628119:tid 2628119] [client 82.13.210.83:62954] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200
[Thu Jul 30 09:54:22.487500 2026] [security2:error] [pid 2637702:tid 2637702] [client 47.128.28.119:39432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amsRPljsQitwqei4Mc7wAQAAAE4"]
[Thu Jul 30 09:54:22.596111 2026] [access_compat:error] [pid 2637649:tid 2637649] [client 172.224.226.89:26006] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/change-password
[Thu Jul 30 09:54:22.673772 2026] [ssl:error] [pid 2637584:tid 2637584] (EAI 2)Name or service not known: [client 144.76.19.72:26684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:22.673807 2026] [ssl:error] [pid 2637584:tid 2637584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:22.730101 2026] [ssl:error] [pid 2637701:tid 2637701] (EAI 2)Name or service not known: [client 144.76.19.72:26690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:22.730138 2026] [ssl:error] [pid 2637701:tid 2637701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:25.165452 2026] [security2:error] [pid 2636536:tid 2636536] [client 114.119.141.133:34879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/robots.txt"] [unique_id "amsRQTThHr3ZcAAm2S7I7AAAACw"], referer: http://prosperon.co.uk/robots.txt
[Thu Jul 30 09:54:25.356490 2026] [core:error] [pid 2636409:tid 2636409] (13)Permission denied: [client 216.73.216.199:23267] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty54/subsystem/ttyS3/line
[Thu Jul 30 09:54:25.382601 2026] [lsapi:warn] [pid 2637702:tid 2637702] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:54:25.605484 2026] [security2:error] [pid 2624513:tid 2624513] [client 44.213.36.21:18726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/churchwardens.html"] [unique_id "amsRQTjQ8bN5rQa36HABrQAAAEc"]
[Thu Jul 30 09:54:25.790024 2026] [ssl:error] [pid 2625934:tid 2625934] (EAI 2)Name or service not known: [client 144.76.19.72:26692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:25.790054 2026] [ssl:error] [pid 2625934:tid 2625934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:25.843194 2026] [ssl:error] [pid 2637649:tid 2637649] (EAI 2)Name or service not known: [client 144.76.19.72:26708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:25.843236 2026] [ssl:error] [pid 2637649:tid 2637649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:27.800379 2026] [cgi:error] [pid 2637620:tid 2637620] [client 20.113.148.57:13440] AH02811: stderr from /home/websters/public_html/itsupportinayrshire.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 09:54:27.902644 2026] [authz_core:error] [pid 2637691:tid 2637691] [client 20.113.148.57:13448] AH01630: client denied by server configuration: /home/websters/public_html/itsupportinayrshire.com/php.ini
[Thu Jul 30 09:54:28.896145 2026] [ssl:error] [pid 2637681:tid 2637681] (EAI 2)Name or service not known: [client 144.76.19.72:26724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:28.896177 2026] [ssl:error] [pid 2637681:tid 2637681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:28.949600 2026] [ssl:error] [pid 2637841:tid 2637841] (EAI 2)Name or service not known: [client 144.76.19.72:26732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:28.949626 2026] [ssl:error] [pid 2637841:tid 2637841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:29.101941 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.191.171.18:15776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/southend-racquet-club"] [unique_id "amsRRaznh0IZ7zaGwps6-gAAACs"]
[Thu Jul 30 09:54:32.019746 2026] [ssl:error] [pid 2637841:tid 2637841] (EAI 2)Name or service not known: [client 144.76.19.72:61344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:32.019778 2026] [ssl:error] [pid 2637841:tid 2637841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:32.072773 2026] [ssl:error] [pid 2635971:tid 2635971] (EAI 2)Name or service not known: [client 144.76.19.72:61358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:32.072797 2026] [ssl:error] [pid 2635971:tid 2635971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:32.191431 2026] [lsapi:warn] [pid 2628120:tid 2628120] [client 85.255.27.44:4074] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.bing.com/
[Thu Jul 30 09:54:32.191473 2026] [lsapi:warn] [pid 2628120:tid 2628120] [client 85.255.27.44:4074] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.bing.com/
[Thu Jul 30 09:54:34.114335 2026] [security2:error] [pid 2637682:tid 2637682] [client 162.62.132.25:52822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amsRSiFup3sWqvilDytiUQAAAEA"]
[Thu Jul 30 09:54:34.982995 2026] [security2:error] [pid 2635971:tid 2635971] [client 85.208.96.193:15350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9536.0/prev_next,prev.html"] [unique_id "amsRStrNiwh_YEV5LfzihAAAAAE"]
[Thu Jul 30 09:54:35.126685 2026] [ssl:error] [pid 2635290:tid 2635290] (EAI 2)Name or service not known: [client 144.76.19.72:61374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:35.126714 2026] [ssl:error] [pid 2635290:tid 2635290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:35.181371 2026] [ssl:error] [pid 2631403:tid 2631403] (EAI 2)Name or service not known: [client 144.76.19.72:61386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:35.181401 2026] [ssl:error] [pid 2631403:tid 2631403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:35.404290 2026] [lsapi:warn] [pid 2633746:tid 2633746] [client 85.255.27.44:4330] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 09:54:35.404335 2026] [lsapi:warn] [pid 2633746:tid 2633746] [client 85.255.27.44:4330] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 09:54:35.981192 2026] [lsapi:warn] [pid 2637701:tid 2637701] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:54:36.468353 2026] [core:error] [pid 2625934:tid 2625934] [client 57.141.0.46:35632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:36.468377 2026] [core:error] [pid 2625934:tid 2625934] [client 57.141.0.46:35632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:38.234422 2026] [ssl:error] [pid 2637701:tid 2637701] (EAI 2)Name or service not known: [client 144.76.19.72:61388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:38.234451 2026] [ssl:error] [pid 2637701:tid 2637701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:38.287534 2026] [ssl:error] [pid 2637696:tid 2637696] (EAI 2)Name or service not known: [client 144.76.19.72:61402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:38.287563 2026] [ssl:error] [pid 2637696:tid 2637696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:40.731706 2026] [core:error] [pid 2637685:tid 2637685] (13)Permission denied: [client 216.73.216.199:25981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/pyromusical.co.uk.db
[Thu Jul 30 09:54:41.335107 2026] [core:error] [pid 2637685:tid 2637685] (13)Permission denied: [client 216.73.216.199:25981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/virtio_pci/uevent
[Thu Jul 30 09:54:41.343734 2026] [ssl:error] [pid 2637197:tid 2637197] (EAI 2)Name or service not known: [client 144.76.19.72:19944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:41.343758 2026] [ssl:error] [pid 2637197:tid 2637197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:41.399319 2026] [ssl:error] [pid 2637841:tid 2637841] (EAI 2)Name or service not known: [client 144.76.19.72:19960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:41.399342 2026] [ssl:error] [pid 2637841:tid 2637841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:43.151288 2026] [core:error] [pid 2637685:tid 2637685] (13)Permission denied: [client 216.73.216.199:25981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/virtio/drivers/virtio_net/unbind
[Thu Jul 30 09:54:43.372959 2026] [authz_core:error] [pid 2637653:tid 2637653] [client 57.141.0.63:60558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:54:43.373605 2026] [authz_core:error] [pid 2637653:tid 2637653] [client 57.141.0.63:60558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:54:43.451717 2026] [ssl:error] [pid 2637685:tid 2637685] (70014)End of file found: [client 216.73.216.199:25981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:54:44.453704 2026] [ssl:error] [pid 2637622:tid 2637622] (EAI 2)Name or service not known: [client 144.76.19.72:19976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:44.453742 2026] [ssl:error] [pid 2637622:tid 2637622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:44.512354 2026] [ssl:error] [pid 2635971:tid 2635971] (EAI 2)Name or service not known: [client 144.76.19.72:19984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:44.512383 2026] [ssl:error] [pid 2635971:tid 2635971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:44.561200 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:37358] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/._wp-config.php"] [unique_id "amsRVLS7nEiok9ey2r1j8gAAABw"]
[Thu Jul 30 09:54:44.561388 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:37358] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/._wp-config.php"] [unique_id "amsRVLS7nEiok9ey2r1j8gAAABw"]
[Thu Jul 30 09:54:44.703195 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:37358] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRVLS7nEiok9ey2r1j8gAAABw"]
[Thu Jul 30 09:54:44.957194 2026] [core:error] [pid 2619667:tid 2619667] (13)Permission denied: [client 216.73.216.199:28013] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/drivers/pvpanic/unbind
[Thu Jul 30 09:54:45.736321 2026] [core:error] [pid 2617761:tid 2617761] [client 66.249.64.172:60106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:45.736348 2026] [core:error] [pid 2617761:tid 2617761] [client 66.249.64.172:60106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:45.863094 2026] [ssl:error] [pid 2619667:tid 2619667] (70014)End of file found: [client 216.73.216.199:28013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:54:46.350291 2026] [authz_core:error] [pid 2637841:tid 2637841] [client 57.141.0.67:20540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:54:46.350914 2026] [authz_core:error] [pid 2637841:tid 2637841] [client 57.141.0.67:20540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:54:46.397125 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:23080] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/.aws/keys.conf"] [unique_id "amsRVqscP04dMtubPVHo6AAAADo"]
[Thu Jul 30 09:54:46.397413 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:23080] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.aws/keys.conf"] [unique_id "amsRVqscP04dMtubPVHo6AAAADo"]
[Thu Jul 30 09:54:46.516843 2026] [lsapi:warn] [pid 2637691:tid 2637691] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:54:46.537012 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:23080] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRVqscP04dMtubPVHo6AAAADo"]
[Thu Jul 30 09:54:47.295741 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:23126] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amsRV_Zh6EVXZe6yv9f6vwAAAAQ"]
[Thu Jul 30 09:54:47.296135 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:23126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.aws/s3/credentials.ini"] [unique_id "amsRV_Zh6EVXZe6yv9f6vwAAAAQ"]
[Thu Jul 30 09:54:47.435389 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:23126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRV_Zh6EVXZe6yv9f6vwAAAAQ"]
[Thu Jul 30 09:54:47.568936 2026] [ssl:error] [pid 2637650:tid 2637650] (EAI 2)Name or service not known: [client 144.76.19.72:19994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:47.568962 2026] [ssl:error] [pid 2637650:tid 2637650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:47.622268 2026] [ssl:error] [pid 2624119:tid 2624119] (EAI 2)Name or service not known: [client 144.76.19.72:20004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:47.622298 2026] [ssl:error] [pid 2624119:tid 2624119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:48.387385 2026] [security2:error] [pid 2625934:tid 2625934] [client 185.177.72.10:23184] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amsRWDFABoNyQecs7NzTIwAAAAc"]
[Thu Jul 30 09:54:48.387528 2026] [security2:error] [pid 2625934:tid 2625934] [client 185.177.72.10:23184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.c9/metadata/environment/.env"] [unique_id "amsRWDFABoNyQecs7NzTIwAAAAc"]
[Thu Jul 30 09:54:48.527495 2026] [security2:error] [pid 2625934:tid 2625934] [client 185.177.72.10:23184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRWDFABoNyQecs7NzTIwAAAAc"]
[Thu Jul 30 09:54:48.578880 2026] [autoindex:error] [pid 2628120:tid 2628120] (13)Permission denied: [client 216.73.216.199:35524] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/outsourc/
[Thu Jul 30 09:54:48.879635 2026] [autoindex:error] [pid 2628120:tid 2628120] (13)Permission denied: [client 216.73.216.199:35524] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/acthorou/
[Thu Jul 30 09:54:50.680198 2026] [ssl:error] [pid 2637197:tid 2637197] (EAI 2)Name or service not known: [client 144.76.19.72:22478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:50.680223 2026] [ssl:error] [pid 2637197:tid 2637197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:50.733350 2026] [ssl:error] [pid 2637921:tid 2637921] (EAI 2)Name or service not known: [client 144.76.19.72:22492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:50.733383 2026] [ssl:error] [pid 2637921:tid 2637921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:51.183149 2026] [authz_core:error] [pid 2636052:tid 2636052] [client 57.141.0.38:65156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:54:51.183773 2026] [authz_core:error] [pid 2636052:tid 2636052] [client 57.141.0.38:65156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:54:51.965317 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:23356] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amsRW7S7nEiok9ey2r1j9gAAABw"]
[Thu Jul 30 09:54:51.965492 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:23356] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.docker/laravel/app/.env"] [unique_id "amsRW7S7nEiok9ey2r1j9gAAABw"]
[Thu Jul 30 09:54:52.104026 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:23356] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRW7S7nEiok9ey2r1j9gAAABw"]
[Thu Jul 30 09:54:52.331797 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:23372] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.2"] [unique_id "amsRXG33guArmqQ55aGfLAAAADs"]
[Thu Jul 30 09:54:52.331955 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:23372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.2"] [unique_id "amsRXG33guArmqQ55aGfLAAAADs"]
[Thu Jul 30 09:54:52.472997 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:23372] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXG33guArmqQ55aGfLAAAADs"]
[Thu Jul 30 09:54:52.491793 2026] [autoindex:error] [pid 2628120:tid 2628120] (13)Permission denied: [client 216.73.216.199:35524] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/washcluster/
[Thu Jul 30 09:54:52.516651 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:23378] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws_access_keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.aws_access_keys"] [unique_id "amsRXMGkWgjymjZ4HfQf7wAAABA"]
[Thu Jul 30 09:54:52.516777 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:23378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.aws_access_keys"] [unique_id "amsRXMGkWgjymjZ4HfQf7wAAABA"]
[Thu Jul 30 09:54:52.674942 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:23378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXMGkWgjymjZ4HfQf7wAAABA"]
[Thu Jul 30 09:54:52.727534 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:23390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.development.local"] [unique_id "amsRXC-FlZbtiRnhtvZNnQAAAEM"]
[Thu Jul 30 09:54:52.727697 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:23390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.development.local"] [unique_id "amsRXC-FlZbtiRnhtvZNnQAAAEM"]
[Thu Jul 30 09:54:52.870341 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:23390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXC-FlZbtiRnhtvZNnQAAAEM"]
[Thu Jul 30 09:54:52.912456 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:23396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.development.sample"] [unique_id "amsRXFjsQitwqei4Mc7wBgAAAE4"]
[Thu Jul 30 09:54:52.912636 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:23396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.development.sample"] [unique_id "amsRXFjsQitwqei4Mc7wBgAAAE4"]
[Thu Jul 30 09:54:52.931283 2026] [authz_core:error] [pid 2637647:tid 2637647] [client 66.249.66.33:38594] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:54:52.933922 2026] [authz_core:error] [pid 2637647:tid 2637647] [client 66.249.66.33:38594] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:54:53.051732 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:23396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXFjsQitwqei4Mc7wBgAAAE4"]
[Thu Jul 30 09:54:53.093833 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:23408] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.docker.dev"] [unique_id "amsRXTNV-5EIcPTlc2tQmwAAAEI"]
[Thu Jul 30 09:54:53.093970 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:23408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.docker.dev"] [unique_id "amsRXTNV-5EIcPTlc2tQmwAAAEI"]
[Thu Jul 30 09:54:53.239735 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:23408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXTNV-5EIcPTlc2tQmwAAAEI"]
[Thu Jul 30 09:54:53.287054 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:23414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.live"] [unique_id "amsRXbS7nEiok9ey2r1j9wAAABw"]
[Thu Jul 30 09:54:53.287214 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:23414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.live"] [unique_id "amsRXbS7nEiok9ey2r1j9wAAABw"]
[Thu Jul 30 09:54:53.427982 2026] [security2:error] [pid 2637197:tid 2637197] [client 185.177.72.10:23414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXbS7nEiok9ey2r1j9wAAABw"]
[Thu Jul 30 09:54:53.483839 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:23418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailer"] [unique_id "amsRXUaoJEg5NiQAkXdvCwAAABI"]
[Thu Jul 30 09:54:53.483994 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:23418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailer"] [unique_id "amsRXUaoJEg5NiQAkXdvCwAAABI"]
[Thu Jul 30 09:54:53.623902 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:23418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXUaoJEg5NiQAkXdvCwAAABI"]
[Thu Jul 30 09:54:53.664331 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:23422] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_dsn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailer_dsn"] [unique_id "amsRXW33guArmqQ55aGfLQAAADs"]
[Thu Jul 30 09:54:53.664501 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:23422] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailer_dsn"] [unique_id "amsRXW33guArmqQ55aGfLQAAADs"]
[Thu Jul 30 09:54:53.701767 2026] [ssl:error] [pid 2628120:tid 2628120] (70014)End of file found: [client 216.73.216.199:35524] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:54:53.785777 2026] [ssl:error] [pid 2623544:tid 2623544] (EAI 2)Name or service not known: [client 144.76.19.72:22494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:53.785803 2026] [ssl:error] [pid 2623544:tid 2623544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:53.803488 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:23422] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXW33guArmqQ55aGfLQAAADs"]
[Thu Jul 30 09:54:53.841400 2026] [ssl:error] [pid 2637841:tid 2637841] (EAI 2)Name or service not known: [client 144.76.19.72:22496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:53.841441 2026] [ssl:error] [pid 2637841:tid 2637841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:53.897277 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:23434] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailer_url"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailer_url"] [unique_id "amsRXb0K2JrWLOe59h9fzQAAAAY"]
[Thu Jul 30 09:54:53.897434 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:23434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailer_url"] [unique_id "amsRXb0K2JrWLOe59h9fzQAAAAY"]
[Thu Jul 30 09:54:53.953954 2026] [authz_core:error] [pid 2637702:tid 2637702] [client 66.249.66.33:59577] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:54:53.956597 2026] [authz_core:error] [pid 2637702:tid 2637702] [client 66.249.66.33:59577] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:54:53.996248 2026] [ssl:error] [pid 2637685:tid 2637685] (70014)End of file found: [client 216.73.216.199:45037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:54:54.039163 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:23434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXb0K2JrWLOe59h9fzQAAAAY"]
[Thu Jul 30 09:54:54.169681 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:23440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailgun"] [unique_id "amsRXm3klkCAvRGd4-GBWAAAAEo"]
[Thu Jul 30 09:54:54.169836 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:23440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailgun"] [unique_id "amsRXm3klkCAvRGd4-GBWAAAAEo"]
[Thu Jul 30 09:54:54.309457 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:23440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXm3klkCAvRGd4-GBWAAAAEo"]
[Thu Jul 30 09:54:54.371800 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:23450] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailjet"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailjet"] [unique_id "amsRXkaoJEg5NiQAkXdvDAAAABI"]
[Thu Jul 30 09:54:54.371943 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:23450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.mailjet"] [unique_id "amsRXkaoJEg5NiQAkXdvDAAAABI"]
[Thu Jul 30 09:54:54.511332 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:23450] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXkaoJEg5NiQAkXdvDAAAABI"]
[Thu Jul 30 09:54:54.557882 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:23452] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mandrill"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.mandrill"] [unique_id "amsRXs2-LGO2xP3vg6n3_AAAAEY"]
[Thu Jul 30 09:54:54.558044 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:23452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.mandrill"] [unique_id "amsRXs2-LGO2xP3vg6n3_AAAAEY"]
[Thu Jul 30 09:54:54.697228 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:23452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXs2-LGO2xP3vg6n3_AAAAEY"]
[Thu Jul 30 09:54:54.731711 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:23462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.prod.local"] [unique_id "amsRXm3klkCAvRGd4-GBWQAAAEo"]
[Thu Jul 30 09:54:54.731891 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:23462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.prod.local"] [unique_id "amsRXm3klkCAvRGd4-GBWQAAAEo"]
[Thu Jul 30 09:54:54.873059 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:23462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXm3klkCAvRGd4-GBWQAAAEo"]
[Thu Jul 30 09:54:54.917753 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48804] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.sample"] [unique_id "amsRXkaoJEg5NiQAkXdvDQAAABI"]
[Thu Jul 30 09:54:54.917930 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.sample"] [unique_id "amsRXkaoJEg5NiQAkXdvDQAAABI"]
[Thu Jul 30 09:54:55.057732 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXkaoJEg5NiQAkXdvDQAAABI"]
[Thu Jul 30 09:54:55.100574 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48820] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.sample.php"] [unique_id "amsRX6scP04dMtubPVHo6wAAADo"]
[Thu Jul 30 09:54:55.100758 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48820] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.sample.php"] [unique_id "amsRX6scP04dMtubPVHo6wAAADo"]
[Thu Jul 30 09:54:55.239870 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48820] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRX6scP04dMtubPVHo6wAAADo"]
[Thu Jul 30 09:54:55.287820 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:48836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.sendgrid"] [unique_id "amsRX82-LGO2xP3vg6n3_QAAAEY"]
[Thu Jul 30 09:54:55.288014 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:48836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.sendgrid"] [unique_id "amsRX82-LGO2xP3vg6n3_QAAAEY"]
[Thu Jul 30 09:54:55.429642 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:48836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRX82-LGO2xP3vg6n3_QAAAEY"]
[Thu Jul 30 09:54:55.487525 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48846] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sparkpost"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.sparkpost"] [unique_id "amsRX23klkCAvRGd4-GBWgAAAEo"]
[Thu Jul 30 09:54:55.487709 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.sparkpost"] [unique_id "amsRX23klkCAvRGd4-GBWgAAAEo"]
[Thu Jul 30 09:54:55.629150 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48846] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRX23klkCAvRGd4-GBWgAAAEo"]
[Thu Jul 30 09:54:55.670223 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.swp"] [unique_id "amsRX0aoJEg5NiQAkXdvDgAAABI"]
[Thu Jul 30 09:54:55.670401 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.swp"] [unique_id "amsRX0aoJEg5NiQAkXdvDgAAABI"]
[Thu Jul 30 09:54:55.817341 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRX0aoJEg5NiQAkXdvDgAAABI"]
[Thu Jul 30 09:54:55.859828 2026] [security2:error] [pid 2637650:tid 2637650] [client 185.177.72.10:48862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.localapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amsRXx71FCbX6Wnjz0MTRwAAADc"]
[Thu Jul 30 09:54:55.860032 2026] [security2:error] [pid 2637650:tid 2637650] [client 185.177.72.10:48862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.test.localapi/.env"] [unique_id "amsRXx71FCbX6Wnjz0MTRwAAADc"]
[Thu Jul 30 09:54:56.000524 2026] [security2:error] [pid 2637650:tid 2637650] [client 185.177.72.10:48862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRXx71FCbX6Wnjz0MTRwAAADc"]
[Thu Jul 30 09:54:56.043913 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:48870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.test.sample"] [unique_id "amsRYBR4QchRU-0eVC_NMQAAACA"]
[Thu Jul 30 09:54:56.044110 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:48870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.test.sample"] [unique_id "amsRYBR4QchRU-0eVC_NMQAAACA"]
[Thu Jul 30 09:54:56.192386 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:48870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYBR4QchRU-0eVC_NMQAAACA"]
[Thu Jul 30 09:54:56.315437 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.travis"] [unique_id "amsRYG3klkCAvRGd4-GBWwAAAEo"]
[Thu Jul 30 09:54:56.315638 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.travis"] [unique_id "amsRYG3klkCAvRGd4-GBWwAAAEo"]
[Thu Jul 30 09:54:56.456075 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYG3klkCAvRGd4-GBWwAAAEo"]
[Thu Jul 30 09:54:56.506129 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48878] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.txt"] [unique_id "amsRYEaoJEg5NiQAkXdvDwAAABI"]
[Thu Jul 30 09:54:56.506309 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.txt"] [unique_id "amsRYEaoJEg5NiQAkXdvDwAAABI"]
[Thu Jul 30 09:54:56.649056 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYEaoJEg5NiQAkXdvDwAAABI"]
[Thu Jul 30 09:54:56.711203 2026] [security2:error] [pid 2637653:tid 2637653] [client 185.177.72.10:48884] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.uat"] [unique_id "amsRYJT_ydvYp89NZblQVgAAADw"]
[Thu Jul 30 09:54:56.711359 2026] [security2:error] [pid 2637653:tid 2637653] [client 185.177.72.10:48884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.uat"] [unique_id "amsRYJT_ydvYp89NZblQVgAAADw"]
[Thu Jul 30 09:54:56.852479 2026] [security2:error] [pid 2637653:tid 2637653] [client 185.177.72.10:48884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYJT_ydvYp89NZblQVgAAADw"]
[Thu Jul 30 09:54:56.893294 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:48892] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.www"] [unique_id "amsRYD6AfuWxH-yVE9PXBwAAAFI"]
[Thu Jul 30 09:54:56.893483 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:48892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.www"] [unique_id "amsRYD6AfuWxH-yVE9PXBwAAAFI"]
[Thu Jul 30 09:54:56.898456 2026] [ssl:error] [pid 2636409:tid 2636409] (EAI 2)Name or service not known: [client 144.76.19.72:22504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:56.898493 2026] [ssl:error] [pid 2636409:tid 2636409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:56.998482 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:22512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:54:56.998515 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:54:57.033747 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:48892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYD6AfuWxH-yVE9PXBwAAAFI"]
[Thu Jul 30 09:54:57.077300 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48894] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{dn}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.{{DN}}"] [unique_id "amsRYUaoJEg5NiQAkXdvEAAAABI"]
[Thu Jul 30 09:54:57.077488 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.{{DN}}"] [unique_id "amsRYUaoJEg5NiQAkXdvEAAAABI"]
[Thu Jul 30 09:54:57.111837 2026] [lsapi:warn] [pid 2637697:tid 2637697] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:54:57.217960 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYUaoJEg5NiQAkXdvEAAAABI"]
[Thu Jul 30 09:54:57.256443 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.{{sd}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env.{{SD}}"] [unique_id "amsRYascP04dMtubPVHo7QAAADo"]
[Thu Jul 30 09:54:57.256646 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env.{{SD}}"] [unique_id "amsRYascP04dMtubPVHo7QAAADo"]
[Thu Jul 30 09:54:57.396988 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYascP04dMtubPVHo7QAAADo"]
[Thu Jul 30 09:54:57.451044 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:48910] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env-example"] [unique_id "amsRYRR4QchRU-0eVC_NMgAAACA"]
[Thu Jul 30 09:54:57.451237 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:48910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env-example"] [unique_id "amsRYRR4QchRU-0eVC_NMgAAACA"]
[Thu Jul 30 09:54:57.593327 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:48910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYRR4QchRU-0eVC_NMgAAACA"]
[Thu Jul 30 09:54:57.644352 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48926] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env-sample"] [unique_id "amsRYascP04dMtubPVHo7gAAADo"]
[Thu Jul 30 09:54:57.644480 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env-sample"] [unique_id "amsRYascP04dMtubPVHo7gAAADo"]
[Thu Jul 30 09:54:57.785631 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:48926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYascP04dMtubPVHo7gAAADo"]
[Thu Jul 30 09:54:57.857258 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48936] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env1"] [unique_id "amsRYW3klkCAvRGd4-GBXQAAAEo"]
[Thu Jul 30 09:54:57.857439 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env1"] [unique_id "amsRYW3klkCAvRGd4-GBXQAAAEo"]
[Thu Jul 30 09:54:57.966055 2026] [core:error] [pid 2624439:tid 2624439] [client 66.249.66.168:43015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:57.966091 2026] [core:error] [pid 2624439:tid 2624439] [client 66.249.66.168:43015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:57.975716 2026] [core:error] [pid 2637689:tid 2637689] [client 66.249.66.40:50094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:57.975744 2026] [core:error] [pid 2637689:tid 2637689] [client 66.249.66.40:50094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:54:58.001659 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYW3klkCAvRGd4-GBXQAAAEo"]
[Thu Jul 30 09:54:58.041772 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48938] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env_1"] [unique_id "amsRYkaoJEg5NiQAkXdvEwAAABI"]
[Thu Jul 30 09:54:58.041955 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env_1"] [unique_id "amsRYkaoJEg5NiQAkXdvEwAAABI"]
[Thu Jul 30 09:54:58.182944 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYkaoJEg5NiQAkXdvEwAAABI"]
[Thu Jul 30 09:54:58.219246 2026] [ssl:error] [pid 2619667:tid 2619667] (70014)End of file found: [client 216.73.216.199:23250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:54:58.229462 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:48952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env_bak"] [unique_id "amsRYkLxYlQ9rOjGgkMwswAAAEQ"]
[Thu Jul 30 09:54:58.229613 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:48952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env_bak"] [unique_id "amsRYkLxYlQ9rOjGgkMwswAAAEQ"]
[Thu Jul 30 09:54:58.369746 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:48952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYkLxYlQ9rOjGgkMwswAAAEQ"]
[Thu Jul 30 09:54:58.409660 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env_old"] [unique_id "amsRYm3klkCAvRGd4-GBXgAAAEo"]
[Thu Jul 30 09:54:58.409844 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env_old"] [unique_id "amsRYm3klkCAvRGd4-GBXgAAAEo"]
[Thu Jul 30 09:54:58.548606 2026] [security2:error] [pid 2637697:tid 2637697] [client 185.177.72.10:48958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYm3klkCAvRGd4-GBXgAAAEo"]
[Thu Jul 30 09:54:58.592232 2026] [security2:error] [pid 2637689:tid 2637689] [client 185.177.72.10:48974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env_sample"] [unique_id "amsRYkGp03glWUqGyUsWFwAAAEU"]
[Thu Jul 30 09:54:58.592424 2026] [security2:error] [pid 2637689:tid 2637689] [client 185.177.72.10:48974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env_sample"] [unique_id "amsRYkGp03glWUqGyUsWFwAAAEU"]
[Thu Jul 30 09:54:58.730489 2026] [security2:error] [pid 2637689:tid 2637689] [client 185.177.72.10:48974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYkGp03glWUqGyUsWFwAAAEU"]
[Thu Jul 30 09:54:58.767753 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48980] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.envrc"] [unique_id "amsRYkaoJEg5NiQAkXdvFAAAABI"]
[Thu Jul 30 09:54:58.767933 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.envrc"] [unique_id "amsRYkaoJEg5NiQAkXdvFAAAABI"]
[Thu Jul 30 09:54:58.905753 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:48980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYkaoJEg5NiQAkXdvFAAAABI"]
[Thu Jul 30 09:54:58.941799 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:48988] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.envs"] [unique_id "amsRYkLxYlQ9rOjGgkMwtAAAAEQ"]
[Thu Jul 30 09:54:58.941967 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:48988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.envs"] [unique_id "amsRYkLxYlQ9rOjGgkMwtAAAAEQ"]
[Thu Jul 30 09:54:59.079386 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:48988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRYkLxYlQ9rOjGgkMwtAAAAEQ"]
[Thu Jul 30 09:54:59.116037 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:48990] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env~"] [unique_id "amsRY9rNiwh_YEV5LfziiAAAAAE"]
[Thu Jul 30 09:54:59.116240 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:48990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env~"] [unique_id "amsRY9rNiwh_YEV5LfziiAAAAAE"]
[Thu Jul 30 09:54:59.259326 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:48990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRY9rNiwh_YEV5LfziiAAAAAE"]
[Thu Jul 30 09:54:59.886308 2026] [ssl:error] [pid 2636052:tid 2636052] (70014)End of file found: [client 216.73.216.199:31377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:00.046062 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:49030] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amsRZDNV-5EIcPTlc2tQnQAAAEI"]
[Thu Jul 30 09:55:00.046216 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:49030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.gitlab-ci/.env"] [unique_id "amsRZDNV-5EIcPTlc2tQnQAAAEI"]
[Thu Jul 30 09:55:00.056885 2026] [ssl:error] [pid 2634695:tid 2634695] (EAI 2)Name or service not known: [client 144.76.19.72:20226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:00.056918 2026] [ssl:error] [pid 2634695:tid 2634695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:00.113154 2026] [ssl:error] [pid 2635971:tid 2635971] (EAI 2)Name or service not known: [client 144.76.19.72:20240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:00.113184 2026] [ssl:error] [pid 2635971:tid 2635971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:00.184823 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:49030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRZDNV-5EIcPTlc2tQnQAAAEI"]
[Thu Jul 30 09:55:01.231519 2026] [ssl:error] [pid 2637685:tid 2637685] (70014)End of file found: [client 216.73.216.199:28336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:03.200250 2026] [ssl:error] [pid 2637842:tid 2637842] (EAI 2)Name or service not known: [client 144.76.19.72:20252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:03.200296 2026] [ssl:error] [pid 2637842:tid 2637842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:03.258346 2026] [ssl:error] [pid 2637918:tid 2637918] (EAI 2)Name or service not known: [client 144.76.19.72:20264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:03.258373 2026] [ssl:error] [pid 2637918:tid 2637918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:03.647750 2026] [ssl:error] [pid 2637691:tid 2637691] (70014)End of file found: [client 216.73.216.199:14656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:05.458126 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:50202] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.vscode/.env"] [unique_id "amsRaaRaLIYerH3cJUfbQwAAAAM"]
[Thu Jul 30 09:55:05.458311 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:50202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.vscode/.env"] [unique_id "amsRaaRaLIYerH3cJUfbQwAAAAM"]
[Thu Jul 30 09:55:05.598475 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:50202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRaaRaLIYerH3cJUfbQwAAAAM"]
[Thu Jul 30 09:55:05.810656 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:50220] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.bak"] [unique_id "amsRacGkWgjymjZ4HfQf9QAAABA"]
[Thu Jul 30 09:55:05.810858 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:50220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.bak"] [unique_id "amsRacGkWgjymjZ4HfQf9QAAABA"]
[Thu Jul 30 09:55:05.942849 2026] [ssl:error] [pid 2619667:tid 2619667] (70014)End of file found: [client 216.73.216.199:46298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:05.949897 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:50220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRacGkWgjymjZ4HfQf9QAAABA"]
[Thu Jul 30 09:55:05.985266 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:50234] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.swm"] [unique_id "amsRafhEGOJ2bsiZ998E6wAAAAo"]
[Thu Jul 30 09:55:05.985448 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:50234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.swm"] [unique_id "amsRafhEGOJ2bsiZ998E6wAAAAo"]
[Thu Jul 30 09:55:06.093099 2026] [authz_core:error] [pid 2629059:tid 2629059] [client 57.141.0.58:55532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:06.093735 2026] [authz_core:error] [pid 2629059:tid 2629059] [client 57.141.0.58:55532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:06.125018 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:50234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRafhEGOJ2bsiZ998E6wAAAAo"]
[Thu Jul 30 09:55:06.163964 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:50244] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.swn"] [unique_id "amsRakLxYlQ9rOjGgkMwuwAAAEQ"]
[Thu Jul 30 09:55:06.164167 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:50244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.swn"] [unique_id "amsRakLxYlQ9rOjGgkMwuwAAAEQ"]
[Thu Jul 30 09:55:06.308088 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:50244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRakLxYlQ9rOjGgkMwuwAAAEQ"]
[Thu Jul 30 09:55:06.316505 2026] [ssl:error] [pid 2637918:tid 2637918] (EAI 2)Name or service not known: [client 144.76.19.72:20266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:06.316533 2026] [ssl:error] [pid 2637918:tid 2637918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:06.344114 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:50260] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.swo"] [unique_id "amsRaqRaLIYerH3cJUfbRAAAAAM"]
[Thu Jul 30 09:55:06.344297 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:50260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.wp-config.php.swo"] [unique_id "amsRaqRaLIYerH3cJUfbRAAAAAM"]
[Thu Jul 30 09:55:06.374259 2026] [ssl:error] [pid 2637684:tid 2637684] (EAI 2)Name or service not known: [client 144.76.19.72:20276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:06.374297 2026] [ssl:error] [pid 2637684:tid 2637684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:06.486847 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:50260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRaqRaLIYerH3cJUfbRAAAAAM"]
[Thu Jul 30 09:55:06.848442 2026] [ssl:error] [pid 2637647:tid 2637647] (70014)End of file found: [client 216.73.216.199:13318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:07.569117 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amsRaxU5Uj2Ma80kjTBToAAAAE0"]
[Thu Jul 30 09:55:07.569309 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "amsRaxU5Uj2Ma80kjTBToAAAAE0"]
[Thu Jul 30 09:55:07.623959 2026] [lsapi:warn] [pid 2628120:tid 2628120] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:55:07.708123 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRaxU5Uj2Ma80kjTBToAAAAE0"]
[Thu Jul 30 09:55:07.745955 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50328] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amsRay-FlZbtiRnhtvZNpQAAAEM"]
[Thu Jul 30 09:55:07.746147 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "amsRay-FlZbtiRnhtvZNpQAAAEM"]
[Thu Jul 30 09:55:07.858521 2026] [security2:error] [pid 2637686:tid 2637686] [client 177.223.160.121:21776] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRa0LxYlQ9rOjGgkMwvQAAAEQ"]
[Thu Jul 30 09:55:07.858569 2026] [security2:error] [pid 2637686:tid 2637686] [client 177.223.160.121:21776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRa0LxYlQ9rOjGgkMwvQAAAEQ"]
[Thu Jul 30 09:55:07.858849 2026] [security2:error] [pid 2637686:tid 2637686] [client 177.223.160.121:21776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRa0LxYlQ9rOjGgkMwvQAAAEQ"]
[Thu Jul 30 09:55:07.885898 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRay-FlZbtiRnhtvZNpQAAAEM"]
[Thu Jul 30 09:55:07.925845 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:50336] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amsRazNV-5EIcPTlc2tQpAAAAEI"]
[Thu Jul 30 09:55:07.926027 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:50336] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "amsRazNV-5EIcPTlc2tQpAAAAEI"]
[Thu Jul 30 09:55:08.072855 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:50336] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRazNV-5EIcPTlc2tQpAAAAEI"]
[Thu Jul 30 09:55:08.107304 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50338] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amsRbBU5Uj2Ma80kjTBToQAAAE0"]
[Thu Jul 30 09:55:08.107493 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "amsRbBU5Uj2Ma80kjTBToQAAAE0"]
[Thu Jul 30 09:55:08.248096 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbBU5Uj2Ma80kjTBToQAAAE0"]
[Thu Jul 30 09:55:08.284825 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50340] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amsRbC-FlZbtiRnhtvZNpgAAAEM"]
[Thu Jul 30 09:55:08.284960 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50340] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "amsRbC-FlZbtiRnhtvZNpgAAAEM"]
[Thu Jul 30 09:55:08.426236 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50340] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbC-FlZbtiRnhtvZNpgAAAEM"]
[Thu Jul 30 09:55:08.464761 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:50352] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amsRbDNV-5EIcPTlc2tQpQAAAEI"]
[Thu Jul 30 09:55:08.464948 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:50352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "amsRbDNV-5EIcPTlc2tQpQAAAEI"]
[Thu Jul 30 09:55:08.605577 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:50352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbDNV-5EIcPTlc2tQpQAAAEI"]
[Thu Jul 30 09:55:08.989821 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amsRbC-FlZbtiRnhtvZNpwAAAEM"]
[Thu Jul 30 09:55:08.990002 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/3-sequelize/final/.env"] [unique_id "amsRbC-FlZbtiRnhtvZNpwAAAEM"]
[Thu Jul 30 09:55:09.127283 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:50388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbC-FlZbtiRnhtvZNpwAAAEM"]
[Thu Jul 30 09:55:09.166049 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:50402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/31_structure_tests/.env"] [unique_id "amsRbaznh0IZ7zaGwps7BgAAACs"]
[Thu Jul 30 09:55:09.166244 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:50402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/31_structure_tests/.env"] [unique_id "amsRbaznh0IZ7zaGwps7BgAAACs"]
[Thu Jul 30 09:55:09.305017 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:50402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbaznh0IZ7zaGwps7BgAAACs"]
[Thu Jul 30 09:55:09.341367 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50410] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/API/.env"] [unique_id "amsRbSqCrh0o4antW6s77gAAABM"]
[Thu Jul 30 09:55:09.341532 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/API/.env"] [unique_id "amsRbSqCrh0o4antW6s77gAAABM"]
[Thu Jul 30 09:55:09.431793 2026] [ssl:error] [pid 2637918:tid 2637918] (EAI 2)Name or service not known: [client 144.76.19.72:20280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:09.431826 2026] [ssl:error] [pid 2637918:tid 2637918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:09.479767 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbSqCrh0o4antW6s77gAAABM"]
[Thu Jul 30 09:55:09.482913 2026] [ssl:error] [pid 2629059:tid 2629059] (EAI 2)Name or service not known: [client 144.76.19.72:20282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:09.482946 2026] [ssl:error] [pid 2629059:tid 2629059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:09.515371 2026] [security2:error] [pid 2637918:tid 2637918] [client 185.177.72.10:50422] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.bak"] [unique_id "amsRbRs8IyPxIwGMQd1_iwAAAFE"]
[Thu Jul 30 09:55:09.515560 2026] [security2:error] [pid 2637918:tid 2637918] [client 185.177.72.10:50422] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.bak"] [unique_id "amsRbRs8IyPxIwGMQd1_iwAAAFE"]
[Thu Jul 30 09:55:09.652636 2026] [security2:error] [pid 2637918:tid 2637918] [client 185.177.72.10:50422] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbRs8IyPxIwGMQd1_iwAAAFE"]
[Thu Jul 30 09:55:09.690541 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:50434] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.dev"] [unique_id "amsRbaznh0IZ7zaGwps7BwAAACs"]
[Thu Jul 30 09:55:09.690729 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:50434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.dev"] [unique_id "amsRbaznh0IZ7zaGwps7BwAAACs"]
[Thu Jul 30 09:55:09.830099 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:50434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbaznh0IZ7zaGwps7BwAAACs"]
[Thu Jul 30 09:55:09.860430 2026] [ssl:error] [pid 2637816:tid 2637816] (70014)End of file found: [client 216.73.216.199:35427] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:09.867851 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.dist"] [unique_id "amsRbSqCrh0o4antW6s78AAAABM"]
[Thu Jul 30 09:55:09.868007 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.dist"] [unique_id "amsRbSqCrh0o4antW6s78AAAABM"]
[Thu Jul 30 09:55:10.010734 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbSqCrh0o4antW6s78AAAABM"]
[Thu Jul 30 09:55:10.046219 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.local"] [unique_id "amsRbhU5Uj2Ma80kjTBTpAAAAE0"]
[Thu Jul 30 09:55:10.046402 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/API/.env.local"] [unique_id "amsRbhU5Uj2Ma80kjTBTpAAAAE0"]
[Thu Jul 30 09:55:10.161047 2026] [security2:error] [pid 2637918:tid 2637918] [client 182.63.60.223:29750] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRbhs8IyPxIwGMQd1_jAAAAFE"]
[Thu Jul 30 09:55:10.161125 2026] [security2:error] [pid 2637918:tid 2637918] [client 182.63.60.223:29750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRbhs8IyPxIwGMQd1_jAAAAFE"]
[Thu Jul 30 09:55:10.161355 2026] [security2:error] [pid 2637918:tid 2637918] [client 182.63.60.223:29750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRbhs8IyPxIwGMQd1_jAAAAFE"]
[Thu Jul 30 09:55:10.185221 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbhU5Uj2Ma80kjTBTpAAAAE0"]
[Thu Jul 30 09:55:10.259383 2026] [authz_core:error] [pid 2636409:tid 2636409] [client 57.141.0.65:55066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:10.260008 2026] [authz_core:error] [pid 2636409:tid 2636409] [client 57.141.0.65:55066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:10.390990 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:50478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/APP/.env"] [unique_id "amsRbpOWgsaO9_iL1IXGBQAAAE8"]
[Thu Jul 30 09:55:10.391187 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:50478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/APP/.env"] [unique_id "amsRbpOWgsaO9_iL1IXGBQAAAE8"]
[Thu Jul 30 09:55:10.531127 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:50478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbpOWgsaO9_iL1IXGBQAAAE8"]
[Thu Jul 30 09:55:10.565400 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50488] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amsRbhU5Uj2Ma80kjTBTpQAAAE0"]
[Thu Jul 30 09:55:10.565701 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50488] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/App_Config/ConnectionStrings.config"] [unique_id "amsRbhU5Uj2Ma80kjTBTpQAAAE0"]
[Thu Jul 30 09:55:10.705133 2026] [security2:error] [pid 2637701:tid 2637701] [client 185.177.72.10:50488] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbhU5Uj2Ma80kjTBTpQAAAE0"]
[Thu Jul 30 09:55:10.741148 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:50502] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Archipel/.env"] [unique_id "amsRbljsQitwqei4Mc7wDAAAAE4"]
[Thu Jul 30 09:55:10.741324 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:50502] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Archipel/.env"] [unique_id "amsRbljsQitwqei4Mc7wDAAAAE4"]
[Thu Jul 30 09:55:10.880873 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:50502] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbljsQitwqei4Mc7wDAAAAE4"]
[Thu Jul 30 09:55:10.920199 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Assignment3/.env"] [unique_id "amsRbiqCrh0o4antW6s78gAAABM"]
[Thu Jul 30 09:55:10.920375 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Assignment3/.env"] [unique_id "amsRbiqCrh0o4antW6s78gAAABM"]
[Thu Jul 30 09:55:11.058624 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbiqCrh0o4antW6s78gAAABM"]
[Thu Jul 30 09:55:11.093875 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:50524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Assignment4/.env"] [unique_id "amsRb5OWgsaO9_iL1IXGBgAAAE8"]
[Thu Jul 30 09:55:11.094051 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:50524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Assignment4/.env"] [unique_id "amsRb5OWgsaO9_iL1IXGBgAAAE8"]
[Thu Jul 30 09:55:11.234855 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:50524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRb5OWgsaO9_iL1IXGBgAAAE8"]
[Thu Jul 30 09:55:11.270993 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:50528] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/BACK/.env"] [unique_id "amsRb233guArmqQ55aGfPAAAADs"]
[Thu Jul 30 09:55:11.271205 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:50528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/BACK/.env"] [unique_id "amsRb233guArmqQ55aGfPAAAADs"]
[Thu Jul 30 09:55:11.414225 2026] [security2:error] [pid 2619667:tid 2619667] [client 185.177.72.10:50528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRb233guArmqQ55aGfPAAAADs"]
[Thu Jul 30 09:55:11.450479 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/BACKEND/.env"] [unique_id "amsRbyqCrh0o4antW6s78wAAABM"]
[Thu Jul 30 09:55:11.450674 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/BACKEND/.env"] [unique_id "amsRbyqCrh0o4antW6s78wAAABM"]
[Thu Jul 30 09:55:11.590986 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbyqCrh0o4antW6s78wAAABM"]
[Thu Jul 30 09:55:11.625730 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:50554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/BackEnd/.env"] [unique_id "amsRb0aoJEg5NiQAkXdvHAAAABI"]
[Thu Jul 30 09:55:11.625906 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:50554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/BackEnd/.env"] [unique_id "amsRb0aoJEg5NiQAkXdvHAAAABI"]
[Thu Jul 30 09:55:11.762775 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:50554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRb0aoJEg5NiQAkXdvHAAAABI"]
[Thu Jul 30 09:55:11.798655 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:50566] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/Build.bat"] [unique_id "amsRb3WaT4zTpQY8omRx7wAAAAI"]
[Thu Jul 30 09:55:11.798996 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:50566] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Build.bat"] [unique_id "amsRb3WaT4zTpQY8omRx7wAAAAI"]
[Thu Jul 30 09:55:11.940020 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:50566] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRb3WaT4zTpQY8omRx7wAAAAI"]
[Thu Jul 30 09:55:11.976638 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Chai/.env"] [unique_id "amsRbyqCrh0o4antW6s79AAAABM"]
[Thu Jul 30 09:55:11.976807 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Chai/.env"] [unique_id "amsRbyqCrh0o4antW6s79AAAABM"]
[Thu Jul 30 09:55:12.116324 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:50568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRbyqCrh0o4antW6s79AAAABM"]
[Thu Jul 30 09:55:12.152236 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50584] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ClientApp/.env"] [unique_id "amsRcNbwjkuln4nh4vsPCQAAACg"]
[Thu Jul 30 09:55:12.152413 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ClientApp/.env"] [unique_id "amsRcNbwjkuln4nh4vsPCQAAACg"]
[Thu Jul 30 09:55:12.290500 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcNbwjkuln4nh4vsPCQAAACg"]
[Thu Jul 30 09:55:12.327364 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:50596] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amsRcHWaT4zTpQY8omRx8AAAAAI"]
[Thu Jul 30 09:55:12.327555 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:50596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "amsRcHWaT4zTpQY8omRx8AAAAAI"]
[Thu Jul 30 09:55:12.465075 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:50596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcHWaT4zTpQY8omRx8AAAAAI"]
[Thu Jul 30 09:55:12.498837 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:50608] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amsRcEaoJEg5NiQAkXdvHgAAABI"]
[Thu Jul 30 09:55:12.499017 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:50608] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ContainerRegistry/.env"] [unique_id "amsRcEaoJEg5NiQAkXdvHgAAABI"]
[Thu Jul 30 09:55:12.538231 2026] [ssl:error] [pid 2637648:tid 2637648] (EAI 2)Name or service not known: [client 144.76.19.72:25430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:12.538269 2026] [ssl:error] [pid 2637648:tid 2637648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:12.593793 2026] [ssl:error] [pid 2640277:tid 2640277] (EAI 2)Name or service not known: [client 144.76.19.72:25444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:12.593828 2026] [ssl:error] [pid 2640277:tid 2640277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:12.636364 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:50608] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcEaoJEg5NiQAkXdvHgAAABI"]
[Thu Jul 30 09:55:12.845505 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50632] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amsRcNbwjkuln4nh4vsPCgAAACg"]
[Thu Jul 30 09:55:12.845700 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50632] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Exercise.Frontend/.env"] [unique_id "amsRcNbwjkuln4nh4vsPCgAAACg"]
[Thu Jul 30 09:55:12.982264 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50632] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcNbwjkuln4nh4vsPCgAAACg"]
[Thu Jul 30 09:55:13.021403 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:50642] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amsRcV2Z44Nlu_PVQ-cypQAAAAA"]
[Thu Jul 30 09:55:13.021604 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:50642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "amsRcV2Z44Nlu_PVQ-cypQAAAAA"]
[Thu Jul 30 09:55:13.162581 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:50642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcV2Z44Nlu_PVQ-cypQAAAAA"]
[Thu Jul 30 09:55:13.197521 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/FE/huey/.env"] [unique_id "amsRcdbwjkuln4nh4vsPCwAAACg"]
[Thu Jul 30 09:55:13.197711 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/FE/huey/.env"] [unique_id "amsRcdbwjkuln4nh4vsPCwAAACg"]
[Thu Jul 30 09:55:13.337369 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:50650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcdbwjkuln4nh4vsPCwAAACg"]
[Thu Jul 30 09:55:13.374670 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:50662] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amsRcV2Z44Nlu_PVQ-cypgAAAAA"]
[Thu Jul 30 09:55:13.374853 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:50662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/FIRST_CONFIG/.env"] [unique_id "amsRcV2Z44Nlu_PVQ-cypgAAAAA"]
[Thu Jul 30 09:55:13.519694 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:50662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcV2Z44Nlu_PVQ-cypgAAAAA"]
[Thu Jul 30 09:55:13.556981 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:50670] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/FRONT/.env"] [unique_id "amsRccdksUVuC8DeHncpmQAAAAc"]
[Thu Jul 30 09:55:13.557213 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:50670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/FRONT/.env"] [unique_id "amsRccdksUVuC8DeHncpmQAAAAc"]
[Thu Jul 30 09:55:13.714017 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:50670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRccdksUVuC8DeHncpmQAAAAc"]
[Thu Jul 30 09:55:13.746875 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:50674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/FRONTEND/.env"] [unique_id "amsRce3fbkCzGaEVElxKaQAAADE"]
[Thu Jul 30 09:55:13.747055 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:50674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/FRONTEND/.env"] [unique_id "amsRce3fbkCzGaEVElxKaQAAADE"]
[Thu Jul 30 09:55:13.884815 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:50674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRce3fbkCzGaEVElxKaQAAADE"]
[Thu Jul 30 09:55:14.353534 2026] [security2:error] [pid 2632917:tid 2632917] [client 46.217.253.163:46590] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRcnWaT4zTpQY8omRx8gAAAAI"]
[Thu Jul 30 09:55:14.353609 2026] [security2:error] [pid 2632917:tid 2632917] [client 46.217.253.163:46590] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRcnWaT4zTpQY8omRx8gAAAAI"]
[Thu Jul 30 09:55:14.353859 2026] [security2:error] [pid 2632917:tid 2632917] [client 46.217.253.163:46590] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRcnWaT4zTpQY8omRx8gAAAAI"]
[Thu Jul 30 09:55:14.441531 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:50716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amsRcj6AfuWxH-yVE9PXDAAAAFI"]
[Thu Jul 30 09:55:14.441732 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:50716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "amsRcj6AfuWxH-yVE9PXDAAAAFI"]
[Thu Jul 30 09:55:14.578729 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:50716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcj6AfuWxH-yVE9PXDAAAAFI"]
[Thu Jul 30 09:55:14.616483 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:50718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amsRcsGkWgjymjZ4HfQf-gAAABA"]
[Thu Jul 30 09:55:14.616687 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:50718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "amsRcsGkWgjymjZ4HfQf-gAAABA"]
[Thu Jul 30 09:55:14.756049 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:50718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcsGkWgjymjZ4HfQf-gAAABA"]
[Thu Jul 30 09:55:14.790050 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30186] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amsRci56pRJ6BmSOOElaEQAAAAg"]
[Thu Jul 30 09:55:14.790245 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "amsRci56pRJ6BmSOOElaEQAAAAg"]
[Thu Jul 30 09:55:14.930316 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRci56pRJ6BmSOOElaEQAAAAg"]
[Thu Jul 30 09:55:14.962598 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30198] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amsRcj6AfuWxH-yVE9PXDQAAAFI"]
[Thu Jul 30 09:55:14.962798 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/HUNIV_migration/.env"] [unique_id "amsRcj6AfuWxH-yVE9PXDQAAAFI"]
[Thu Jul 30 09:55:15.102154 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcj6AfuWxH-yVE9PXDQAAAFI"]
[Thu Jul 30 09:55:15.138288 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:30202] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Hash/.env"] [unique_id "amsRc8dksUVuC8DeHncpnAAAAAc"]
[Thu Jul 30 09:55:15.138471 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:30202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Hash/.env"] [unique_id "amsRc8dksUVuC8DeHncpnAAAAAc"]
[Thu Jul 30 09:55:15.276745 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:30202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRc8dksUVuC8DeHncpnAAAAAc"]
[Thu Jul 30 09:55:15.280916 2026] [ssl:error] [pid 2637701:tid 2637701] (70014)End of file found: [client 216.73.216.199:62211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:15.311985 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30212] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Helmetjs/.env"] [unique_id "amsRcy56pRJ6BmSOOElaEgAAAAg"]
[Thu Jul 30 09:55:15.312185 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Helmetjs/.env"] [unique_id "amsRcy56pRJ6BmSOOElaEgAAAAg"]
[Thu Jul 30 09:55:15.454126 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcy56pRJ6BmSOOElaEgAAAAg"]
[Thu Jul 30 09:55:15.491783 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:30224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Imagebord/.env"] [unique_id "amsRc6RaLIYerH3cJUfbSwAAAAM"]
[Thu Jul 30 09:55:15.491962 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:30224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Imagebord/.env"] [unique_id "amsRc6RaLIYerH3cJUfbSwAAAAM"]
[Thu Jul 30 09:55:15.631565 2026] [security2:error] [pid 2637816:tid 2637816] [client 185.177.72.10:30224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRc6RaLIYerH3cJUfbSwAAAAM"]
[Thu Jul 30 09:55:15.647278 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:25466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:15.647301 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:15.665836 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/InstantCV/server/.env"] [unique_id "amsRcz6AfuWxH-yVE9PXDgAAAFI"]
[Thu Jul 30 09:55:15.666022 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/InstantCV/server/.env"] [unique_id "amsRcz6AfuWxH-yVE9PXDgAAAFI"]
[Thu Jul 30 09:55:15.704518 2026] [ssl:error] [pid 2637691:tid 2637691] (EAI 2)Name or service not known: [client 144.76.19.72:25472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:15.704554 2026] [ssl:error] [pid 2637691:tid 2637691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:15.808047 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcz6AfuWxH-yVE9PXDgAAAFI"]
[Thu Jul 30 09:55:15.845440 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:30238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Kubernetes/.env"] [unique_id "amsRcy-FlZbtiRnhtvZNqQAAAEM"]
[Thu Jul 30 09:55:15.845629 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:30238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Kubernetes/.env"] [unique_id "amsRcy-FlZbtiRnhtvZNqQAAAEM"]
[Thu Jul 30 09:55:15.984207 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:30238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRcy-FlZbtiRnhtvZNqQAAAEM"]
[Thu Jul 30 09:55:16.020970 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Library/.env"] [unique_id "amsRdC56pRJ6BmSOOElaEwAAAAg"]
[Thu Jul 30 09:55:16.021164 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Library/.env"] [unique_id "amsRdC56pRJ6BmSOOElaEwAAAAg"]
[Thu Jul 30 09:55:16.158667 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdC56pRJ6BmSOOElaEwAAAAg"]
[Thu Jul 30 09:55:16.192832 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30254] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amsRdD6AfuWxH-yVE9PXDwAAAFI"]
[Thu Jul 30 09:55:16.192961 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Modix/ClientApp/.env"] [unique_id "amsRdD6AfuWxH-yVE9PXDwAAAFI"]
[Thu Jul 30 09:55:16.332387 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdD6AfuWxH-yVE9PXDwAAAFI"]
[Thu Jul 30 09:55:16.366762 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:30264] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amsRdC-FlZbtiRnhtvZNqgAAAEM"]
[Thu Jul 30 09:55:16.366954 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:30264] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "amsRdC-FlZbtiRnhtvZNqgAAAEM"]
[Thu Jul 30 09:55:16.506890 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:30264] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdC-FlZbtiRnhtvZNqgAAAEM"]
[Thu Jul 30 09:55:16.541910 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30266] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amsRdC56pRJ6BmSOOElaFAAAAAg"]
[Thu Jul 30 09:55:16.542110 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "amsRdC56pRJ6BmSOOElaFAAAAAg"]
[Thu Jul 30 09:55:16.683200 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:30266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdC56pRJ6BmSOOElaFAAAAAg"]
[Thu Jul 30 09:55:16.717503 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:30280] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amsRdKznh0IZ7zaGwps7CgAAACs"]
[Thu Jul 30 09:55:16.717719 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:30280] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "amsRdKznh0IZ7zaGwps7CgAAACs"]
[Thu Jul 30 09:55:16.858021 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:30280] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdKznh0IZ7zaGwps7CgAAACs"]
[Thu Jul 30 09:55:16.892581 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30282] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amsRdD6AfuWxH-yVE9PXEAAAAFI"]
[Thu Jul 30 09:55:16.892788 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30282] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Nuke.App.Ui/.env"] [unique_id "amsRdD6AfuWxH-yVE9PXEAAAAFI"]
[Thu Jul 30 09:55:17.032005 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30282] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdD6AfuWxH-yVE9PXEAAAAFI"]
[Thu Jul 30 09:55:17.088654 2026] [ssl:error] [pid 2632917:tid 2632917] (70014)End of file found: [client 216.73.216.199:36075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:17.457679 2026] [authz_core:error] [pid 2640305:tid 2640305] [client 57.141.0.39:23714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:17.458310 2026] [authz_core:error] [pid 2640305:tid 2640305] [client 57.141.0.39:23714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:17.589212 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30324] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Passportjs/.env"] [unique_id "amsRdT6AfuWxH-yVE9PXEQAAAFI"]
[Thu Jul 30 09:55:17.589395 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30324] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Passportjs/.env"] [unique_id "amsRdT6AfuWxH-yVE9PXEQAAAFI"]
[Thu Jul 30 09:55:17.730665 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:30324] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdT6AfuWxH-yVE9PXEQAAAFI"]
[Thu Jul 30 09:55:17.767629 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:30340] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Serve_time_server/.env"] [unique_id "amsRdfhEGOJ2bsiZ998E8QAAAAo"]
[Thu Jul 30 09:55:17.767811 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:30340] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Serve_time_server/.env"] [unique_id "amsRdfhEGOJ2bsiZ998E8QAAAAo"]
[Thu Jul 30 09:55:17.907607 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:30340] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdfhEGOJ2bsiZ998E8QAAAAo"]
[Thu Jul 30 09:55:18.181673 2026] [lsapi:warn] [pid 2640305:tid 2640305] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:55:18.254819 2026] [authz_core:error] [pid 2635971:tid 2635971] [client 57.141.0.49:42346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:18.255440 2026] [authz_core:error] [pid 2635971:tid 2635971] [client 57.141.0.49:42346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:18.465102 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:30380] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Server_with_db/.env"] [unique_id "amsRdiFup3sWqvilDytiXwAAAEA"]
[Thu Jul 30 09:55:18.465282 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:30380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Server_with_db/.env"] [unique_id "amsRdiFup3sWqvilDytiXwAAAEA"]
[Thu Jul 30 09:55:18.572125 2026] [core:error] [pid 2637120:tid 2637120] [client 66.249.64.171:59450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:18.572153 2026] [core:error] [pid 2637120:tid 2637120] [client 66.249.64.171:59450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:18.603558 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:30380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdiFup3sWqvilDytiXwAAAEA"]
[Thu Jul 30 09:55:18.637747 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:30394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Simple_server/.env"] [unique_id "amsRdtrNiwh_YEV5LfzikQAAAAE"]
[Thu Jul 30 09:55:18.637921 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:30394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Simple_server/.env"] [unique_id "amsRdtrNiwh_YEV5LfzikQAAAAE"]
[Thu Jul 30 09:55:18.758850 2026] [ssl:error] [pid 2637918:tid 2637918] (EAI 2)Name or service not known: [client 144.76.19.72:25488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:18.758894 2026] [ssl:error] [pid 2637918:tid 2637918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:18.775983 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:30394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdtrNiwh_YEV5LfzikQAAAAE"]
[Thu Jul 30 09:55:18.812058 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:30406] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Socketio/.env"] [unique_id "amsRdljsQitwqei4Mc7wDwAAAE4"]
[Thu Jul 30 09:55:18.812254 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:30406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Socketio/.env"] [unique_id "amsRdljsQitwqei4Mc7wDwAAAE4"]
[Thu Jul 30 09:55:18.813247 2026] [ssl:error] [pid 2629059:tid 2629059] (EAI 2)Name or service not known: [client 144.76.19.72:25490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:18.813267 2026] [ssl:error] [pid 2629059:tid 2629059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:18.951774 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:30406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdljsQitwqei4Mc7wDwAAAE4"]
[Thu Jul 30 09:55:18.986855 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:30416] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Sources/API/.env"] [unique_id "amsRdvZh6EVXZe6yv9f64wAAAAQ"]
[Thu Jul 30 09:55:18.987112 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:30416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Sources/API/.env"] [unique_id "amsRdvZh6EVXZe6yv9f64wAAAAQ"]
[Thu Jul 30 09:55:19.125292 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:30416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRdvZh6EVXZe6yv9f64wAAAAQ"]
[Thu Jul 30 09:55:19.164362 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:30424] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/SpotiApps/.env"] [unique_id "amsRd9rNiwh_YEV5LfzikgAAAAE"]
[Thu Jul 30 09:55:19.164540 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:30424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/SpotiApps/.env"] [unique_id "amsRd9rNiwh_YEV5LfzikgAAAAE"]
[Thu Jul 30 09:55:19.303549 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:30424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRd9rNiwh_YEV5LfzikgAAAAE"]
[Thu Jul 30 09:55:19.341083 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:30428] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Tests/Application/.env"] [unique_id "amsRd6znh0IZ7zaGwps7DgAAACs"]
[Thu Jul 30 09:55:19.341254 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:30428] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Tests/Application/.env"] [unique_id "amsRd6znh0IZ7zaGwps7DgAAACs"]
[Thu Jul 30 09:55:19.479395 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:30428] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRd6znh0IZ7zaGwps7DgAAACs"]
[Thu Jul 30 09:55:19.513017 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:30434] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Travel_form/.env"] [unique_id "amsRd0aoJEg5NiQAkXdvIAAAABI"]
[Thu Jul 30 09:55:19.513152 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:30434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Travel_form/.env"] [unique_id "amsRd0aoJEg5NiQAkXdvIAAAABI"]
[Thu Jul 30 09:55:19.651390 2026] [security2:error] [pid 2631403:tid 2631403] [client 185.177.72.10:30434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRd0aoJEg5NiQAkXdvIAAAABI"]
[Thu Jul 30 09:55:19.685748 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:30436] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/User_info/.env"] [unique_id "amsRd6scP04dMtubPVHo9gAAADo"]
[Thu Jul 30 09:55:19.685933 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:30436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/User_info/.env"] [unique_id "amsRd6scP04dMtubPVHo9gAAADo"]
[Thu Jul 30 09:55:19.823670 2026] [security2:error] [pid 2624439:tid 2624439] [client 185.177.72.10:30436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRd6scP04dMtubPVHo9gAAADo"]
[Thu Jul 30 09:55:20.206521 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:30456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amsReJOWgsaO9_iL1IXGCwAAAE8"]
[Thu Jul 30 09:55:20.206722 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:30456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/Web/siteMariage/.env"] [unique_id "amsReJOWgsaO9_iL1IXGCwAAAE8"]
[Thu Jul 30 09:55:20.343987 2026] [security2:error] [pid 2637842:tid 2637842] [client 185.177.72.10:30456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsReJOWgsaO9_iL1IXGCwAAAE8"]
[Thu Jul 30 09:55:21.014637 2026] [ssl:error] [pid 2640304:tid 2640304] (70014)End of file found: [client 216.73.216.199:55845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:21.866424 2026] [ssl:error] [pid 2640277:tid 2640277] (EAI 2)Name or service not known: [client 144.76.19.72:24430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:21.866456 2026] [ssl:error] [pid 2640277:tid 2640277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:21.919380 2026] [ssl:error] [pid 2637647:tid 2637647] (EAI 2)Name or service not known: [client 144.76.19.72:24440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:21.919427 2026] [ssl:error] [pid 2637647:tid 2637647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:22.242891 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:30552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/_static/.env"] [unique_id "amsRel2Z44Nlu_PVQ-cyqgAAAAA"]
[Thu Jul 30 09:55:22.243034 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:30552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/_static/.env"] [unique_id "amsRel2Z44Nlu_PVQ-cyqgAAAAA"]
[Thu Jul 30 09:55:22.344801 2026] [authz_core:error] [pid 2637647:tid 2637647] [client 66.249.66.33:49869] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:55:22.347444 2026] [authz_core:error] [pid 2637647:tid 2637647] [client 66.249.66.33:49869] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:55:22.402466 2026] [security2:error] [pid 2640277:tid 2640277] [client 185.177.72.10:30552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRel2Z44Nlu_PVQ-cyqgAAAAA"]
[Thu Jul 30 09:55:22.525433 2026] [ssl:error] [pid 2637842:tid 2637842] (70014)End of file found: [client 216.73.216.199:1350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:22.826252 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:30572] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /account/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/account/.env"] [unique_id "amsRenWaT4zTpQY8omRx-gAAAAI"]
[Thu Jul 30 09:55:22.826456 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:30572] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/account/.env"] [unique_id "amsRenWaT4zTpQY8omRx-gAAAAI"]
[Thu Jul 30 09:55:22.971442 2026] [security2:error] [pid 2632917:tid 2632917] [client 185.177.72.10:30572] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRenWaT4zTpQY8omRx-gAAAAI"]
[Thu Jul 30 09:55:23.730169 2026] [ssl:error] [pid 2632917:tid 2632917] (70014)End of file found: [client 216.73.216.199:49216] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:23.901261 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:30590] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /account/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/account/.git/config"] [unique_id "amsRe0LxYlQ9rOjGgkMwwQAAAEQ"]
[Thu Jul 30 09:55:23.901436 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:30590] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/account/.git/config"] [unique_id "amsRe0LxYlQ9rOjGgkMwwQAAAEQ"]
[Thu Jul 30 09:55:24.043082 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:30590] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRe0LxYlQ9rOjGgkMwwQAAAEQ"]
[Thu Jul 30 09:55:24.801186 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:54660] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amsRfPhEGOJ2bsiZ998E-AAAAAo"]
[Thu Jul 30 09:55:24.801543 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:54660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/account/App_Config/ConnectionStrings.config"] [unique_id "amsRfPhEGOJ2bsiZ998E-AAAAAo"]
[Thu Jul 30 09:55:24.940035 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:54660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfPhEGOJ2bsiZ998E-AAAAAo"]
[Thu Jul 30 09:55:24.972544 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54662] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/account/api-config.ini"] [unique_id "amsRfD6AfuWxH-yVE9PXFQAAAFI"]
[Thu Jul 30 09:55:24.972924 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/account/api-config.ini"] [unique_id "amsRfD6AfuWxH-yVE9PXFQAAAFI"]
[Thu Jul 30 09:55:24.972997 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:24452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:24.973015 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:25.026202 2026] [ssl:error] [pid 2636409:tid 2636409] (EAI 2)Name or service not known: [client 144.76.19.72:24458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:25.026234 2026] [ssl:error] [pid 2636409:tid 2636409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:25.113535 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfD6AfuWxH-yVE9PXFQAAAFI"]
[Thu Jul 30 09:55:25.510649 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54686] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/account/laravel.log"] [unique_id "amsRfT6AfuWxH-yVE9PXFgAAAFI"]
[Thu Jul 30 09:55:25.511017 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/account/laravel.log"] [unique_id "amsRfT6AfuWxH-yVE9PXFgAAAFI"]
[Thu Jul 30 09:55:25.655985 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfT6AfuWxH-yVE9PXFgAAAFI"]
[Thu Jul 30 09:55:25.909931 2026] [security2:error] [pid 2636052:tid 2636052] [client 43.135.145.73:58906] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amsRffhEGOJ2bsiZ998E-gAAAAo"]
[Thu Jul 30 09:55:26.034743 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:54716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/account/web.config"] [unique_id "amsRfoW_fWF6QfgPXMIo7QAAAA8"]
[Thu Jul 30 09:55:26.035011 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:54716] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /account/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/account/web.config"] [unique_id "amsRfoW_fWF6QfgPXMIo7QAAAA8"]
[Thu Jul 30 09:55:26.035235 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:54716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/account/web.config"] [unique_id "amsRfoW_fWF6QfgPXMIo7QAAAA8"]
[Thu Jul 30 09:55:26.173359 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:54716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfoW_fWF6QfgPXMIo7QAAAA8"]
[Thu Jul 30 09:55:26.210099 2026] [security2:error] [pid 2640700:tid 2640700] [client 185.177.72.10:54724] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/acme-challenge/.env"] [unique_id "amsRfqAia4OM3v82BhNHHAAAABQ"]
[Thu Jul 30 09:55:26.210329 2026] [security2:error] [pid 2640700:tid 2640700] [client 185.177.72.10:54724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/acme-challenge/.env"] [unique_id "amsRfqAia4OM3v82BhNHHAAAABQ"]
[Thu Jul 30 09:55:26.348793 2026] [security2:error] [pid 2640700:tid 2640700] [client 185.177.72.10:54724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfqAia4OM3v82BhNHHAAAABQ"]
[Thu Jul 30 09:55:26.383528 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54730] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/acme/.env"] [unique_id "amsRfj6AfuWxH-yVE9PXFwAAAFI"]
[Thu Jul 30 09:55:26.383707 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54730] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/acme/.env"] [unique_id "amsRfj6AfuWxH-yVE9PXFwAAAFI"]
[Thu Jul 30 09:55:26.521481 2026] [security2:error] [pid 2637919:tid 2637919] [client 185.177.72.10:54730] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfj6AfuWxH-yVE9PXFwAAAFI"]
[Thu Jul 30 09:55:26.559249 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:54738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/acme_challenges/.env"] [unique_id "amsRflbEqVhwrVygyWaWIQAAADI"]
[Thu Jul 30 09:55:26.559437 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:54738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/acme_challenges/.env"] [unique_id "amsRflbEqVhwrVygyWaWIQAAADI"]
[Thu Jul 30 09:55:26.698662 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:54738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRflbEqVhwrVygyWaWIQAAADI"]
[Thu Jul 30 09:55:26.733322 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:54746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/actions-server/.env"] [unique_id "amsRfhR4QchRU-0eVC_NOwAAACA"]
[Thu Jul 30 09:55:26.733505 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:54746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/actions-server/.env"] [unique_id "amsRfhR4QchRU-0eVC_NOwAAACA"]
[Thu Jul 30 09:55:26.740674 2026] [ssl:error] [pid 2637686:tid 2637686] (70014)End of file found: [client 216.73.216.199:19498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:26.870757 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:54746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfhR4QchRU-0eVC_NOwAAACA"]
[Thu Jul 30 09:55:26.906656 2026] [security2:error] [pid 2637689:tid 2637689] [client 185.177.72.10:54752] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env"] [unique_id "amsRfkGp03glWUqGyUsWHwAAAEU"]
[Thu Jul 30 09:55:26.906803 2026] [security2:error] [pid 2637689:tid 2637689] [client 185.177.72.10:54752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env"] [unique_id "amsRfkGp03glWUqGyUsWHwAAAEU"]
[Thu Jul 30 09:55:27.045091 2026] [security2:error] [pid 2637689:tid 2637689] [client 185.177.72.10:54752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRfkGp03glWUqGyUsWHwAAAEU"]
[Thu Jul 30 09:55:27.080973 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:54764] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.bak"] [unique_id "amsRf9rNiwh_YEV5LfzilQAAAAE"]
[Thu Jul 30 09:55:27.081164 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:54764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.bak"] [unique_id "amsRf9rNiwh_YEV5LfzilQAAAAE"]
[Thu Jul 30 09:55:27.191708 2026] [security2:error] [pid 2637120:tid 2637120] [client 43.135.145.73:50688] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amsRf_Zh6EVXZe6yv9f66AAAAAQ"], referer: http://banskoexpress.com
[Thu Jul 30 09:55:27.220632 2026] [security2:error] [pid 2635971:tid 2635971] [client 185.177.72.10:54764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRf9rNiwh_YEV5LfzilQAAAAE"]
[Thu Jul 30 09:55:27.252554 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:54772] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.dev"] [unique_id "amsRf4W_fWF6QfgPXMIo7gAAAA8"]
[Thu Jul 30 09:55:27.252740 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:54772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.dev"] [unique_id "amsRf4W_fWF6QfgPXMIo7gAAAA8"]
[Thu Jul 30 09:55:27.391992 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:54772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRf4W_fWF6QfgPXMIo7gAAAA8"]
[Thu Jul 30 09:55:27.428215 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:54778] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.dist"] [unique_id "amsRf_hEGOJ2bsiZ998E-wAAAAo"]
[Thu Jul 30 09:55:27.428394 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:54778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.dist"] [unique_id "amsRf_hEGOJ2bsiZ998E-wAAAAo"]
[Thu Jul 30 09:55:27.567811 2026] [security2:error] [pid 2636052:tid 2636052] [client 185.177.72.10:54778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRf_hEGOJ2bsiZ998E-wAAAAo"]
[Thu Jul 30 09:55:27.601858 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:54792] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.local"] [unique_id "amsRf_e6kgva7vVQtaGIvwAAADk"]
[Thu Jul 30 09:55:27.602039 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:54792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/adm/.env.local"] [unique_id "amsRf_e6kgva7vVQtaGIvwAAADk"]
[Thu Jul 30 09:55:27.739360 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:54792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRf_e6kgva7vVQtaGIvwAAADk"]
[Thu Jul 30 09:55:27.922929 2026] [core:error] [pid 2635971:tid 2635971] [client 69.171.231.2:42538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:27.922962 2026] [core:error] [pid 2635971:tid 2635971] [client 69.171.231.2:42538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:28.160379 2026] [ssl:error] [pid 2637842:tid 2637842] (EAI 2)Name or service not known: [client 144.76.19.72:24468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:28.160407 2026] [ssl:error] [pid 2637842:tid 2637842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:28.216311 2026] [ssl:error] [pid 2637652:tid 2637652] (EAI 2)Name or service not known: [client 144.76.19.72:24474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:28.216349 2026] [ssl:error] [pid 2637652:tid 2637652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:28.395967 2026] [core:error] [pid 2637689:tid 2637689] [client 69.171.231.4:48120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:28.395997 2026] [core:error] [pid 2637689:tid 2637689] [client 69.171.231.4:48120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:28.770892 2026] [security2:error] [pid 2635971:tid 2635971] [client 43.135.145.73:52078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsRgNrNiwh_YEV5LfzilwAAAAE"], referer: https://banskoexpress.com/
[Thu Jul 30 09:55:28.853544 2026] [ssl:error] [pid 2637648:tid 2637648] (70014)End of file found: [client 216.73.216.199:29154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:28.963850 2026] [lsapi:warn] [pid 2636052:tid 2636052] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:55:29.429859 2026] [security2:error] [pid 2628120:tid 2628120] [client 124.156.204.51:46652] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amsRgSqCrh0o4antW6s7_AAAABM"]
[Thu Jul 30 09:55:29.690883 2026] [security2:error] [pid 2637689:tid 2637689] [client 85.208.96.208:17676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/sherman-thompson-injury"] [unique_id "amsRgUGp03glWUqGyUsWIwAAAEU"]
[Thu Jul 30 09:55:30.354783 2026] [ssl:error] [pid 2637684:tid 2637684] (70014)End of file found: [client 216.73.216.199:4502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:31.273268 2026] [ssl:error] [pid 2636052:tid 2636052] (EAI 2)Name or service not known: [client 144.76.19.72:49332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:31.273297 2026] [ssl:error] [pid 2636052:tid 2636052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:31.327553 2026] [ssl:error] [pid 2637702:tid 2637702] (EAI 2)Name or service not known: [client 144.76.19.72:49344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:31.327586 2026] [ssl:error] [pid 2637702:tid 2637702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:32.465640 2026] [ssl:error] [pid 2624439:tid 2624439] (70014)End of file found: [client 216.73.216.199:49869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:33.564519 2026] [security2:error] [pid 2640663:tid 2640663] [client 114.119.157.183:62867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/prayre-holy-week/"] [unique_id "amsRhWEIshVUjXK33SfXDQAAAAs"], referer: http://www.erskinenazarene.co.uk/prayre-holy-week/?instance_id=39462
[Thu Jul 30 09:55:33.731848 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:55122] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/adm/php.ini"] [unique_id "amsRhcGkWgjymjZ4HfQgCgAAABA"]
[Thu Jul 30 09:55:33.732222 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:55122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/adm/php.ini"] [unique_id "amsRhcGkWgjymjZ4HfQgCgAAABA"]
[Thu Jul 30 09:55:33.869966 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:55122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRhcGkWgjymjZ4HfQgCgAAABA"]
[Thu Jul 30 09:55:34.400762 2026] [ssl:error] [pid 2637120:tid 2637120] (EAI 2)Name or service not known: [client 144.76.19.72:49350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:34.400810 2026] [ssl:error] [pid 2637120:tid 2637120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:34.457364 2026] [ssl:error] [pid 2635971:tid 2635971] (EAI 2)Name or service not known: [client 144.76.19.72:49352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:34.457392 2026] [ssl:error] [pid 2635971:tid 2635971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:34.569646 2026] [ssl:error] [pid 2631403:tid 2631403] (70014)End of file found: [client 216.73.216.199:29204] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:34.882134 2026] [security2:error] [pid 2637647:tid 2637647] [client 114.119.157.183:62873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/prayre-holy-week/"] [unique_id "amsRhtbwjkuln4nh4vsPGAAAACg"], referer: http://www.erskinenazarene.co.uk/prayre-holy-week/?instance_id=39462
[Thu Jul 30 09:55:37.255817 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:61358] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin-app/.env"] [unique_id "amsRifZh6EVXZe6yv9f67AAAAAQ"]
[Thu Jul 30 09:55:37.255980 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:61358] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin-app/.env"] [unique_id "amsRifZh6EVXZe6yv9f67AAAAAQ"]
[Thu Jul 30 09:55:37.392873 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:61358] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRifZh6EVXZe6yv9f67AAAAAQ"]
[Thu Jul 30 09:55:37.430169 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:61362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.bak"] [unique_id "amsRiSFup3sWqvilDytiaQAAAEA"]
[Thu Jul 30 09:55:37.430352 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:61362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.bak"] [unique_id "amsRiSFup3sWqvilDytiaQAAAEA"]
[Thu Jul 30 09:55:37.516028 2026] [ssl:error] [pid 2637647:tid 2637647] (EAI 2)Name or service not known: [client 144.76.19.72:49362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:37.516059 2026] [ssl:error] [pid 2637647:tid 2637647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:37.568098 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:61362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRiSFup3sWqvilDytiaQAAAEA"]
[Thu Jul 30 09:55:37.570386 2026] [ssl:error] [pid 2637841:tid 2637841] (EAI 2)Name or service not known: [client 144.76.19.72:49364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:37.570405 2026] [ssl:error] [pid 2637841:tid 2637841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:37.604586 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61372] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.dev"] [unique_id "amsRicGkWgjymjZ4HfQgDQAAABA"]
[Thu Jul 30 09:55:37.604772 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.dev"] [unique_id "amsRicGkWgjymjZ4HfQgDQAAABA"]
[Thu Jul 30 09:55:37.742603 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61372] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRicGkWgjymjZ4HfQgDQAAABA"]
[Thu Jul 30 09:55:37.775313 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:61384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.dist"] [unique_id "amsRicdksUVuC8DeHncprgAAAAc"]
[Thu Jul 30 09:55:37.775489 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:61384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.dist"] [unique_id "amsRicdksUVuC8DeHncprgAAAAc"]
[Thu Jul 30 09:55:37.912460 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:61384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRicdksUVuC8DeHncprgAAAAc"]
[Thu Jul 30 09:55:37.947787 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:61386] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.local"] [unique_id "amsRiaRybkvKjuCZFsP5dwAAAFM"]
[Thu Jul 30 09:55:37.947977 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:61386] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.local"] [unique_id "amsRiaRybkvKjuCZFsP5dwAAAFM"]
[Thu Jul 30 09:55:38.090425 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:61386] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRiaRybkvKjuCZFsP5dwAAAFM"]
[Thu Jul 30 09:55:38.123108 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:61398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.production"] [unique_id "amsRilbEqVhwrVygyWaWJwAAADI"]
[Thu Jul 30 09:55:38.123277 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:61398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.production"] [unique_id "amsRilbEqVhwrVygyWaWJwAAADI"]
[Thu Jul 30 09:55:38.261735 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:61398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRilbEqVhwrVygyWaWJwAAADI"]
[Thu Jul 30 09:55:38.298814 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:61400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.staging"] [unique_id "amsRitbwjkuln4nh4vsPGQAAACg"]
[Thu Jul 30 09:55:38.298992 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:61400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/.env.staging"] [unique_id "amsRitbwjkuln4nh4vsPGQAAACg"]
[Thu Jul 30 09:55:38.494719 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:61400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRitbwjkuln4nh4vsPGQAAACg"]
[Thu Jul 30 09:55:38.701853 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61410] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/.git/config"] [unique_id "amsRisGkWgjymjZ4HfQgDgAAABA"]
[Thu Jul 30 09:55:38.702050 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/.git/config"] [unique_id "amsRisGkWgjymjZ4HfQgDgAAABA"]
[Thu Jul 30 09:55:38.870783 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRisGkWgjymjZ4HfQgDgAAABA"]
[Thu Jul 30 09:55:39.606984 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61454] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amsRi8GkWgjymjZ4HfQgDwAAABA"]
[Thu Jul 30 09:55:39.607343 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61454] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/App_Config/ConnectionStrings.config"] [unique_id "amsRi8GkWgjymjZ4HfQgDwAAABA"]
[Thu Jul 30 09:55:39.637448 2026] [lsapi:warn] [pid 2637120:tid 2637120] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:55:39.745437 2026] [security2:error] [pid 2623544:tid 2623544] [client 185.177.72.10:61454] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRi8GkWgjymjZ4HfQgDwAAABA"]
[Thu Jul 30 09:55:39.972883 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:61466] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/admin/api-config.ini"] [unique_id "amsRi82-LGO2xP3vg6n4EQAAAEY"]
[Thu Jul 30 09:55:39.973267 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:61466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/api-config.ini"] [unique_id "amsRi82-LGO2xP3vg6n4EQAAAEY"]
[Thu Jul 30 09:55:40.117097 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:61466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRi82-LGO2xP3vg6n4EQAAAEY"]
[Thu Jul 30 09:55:40.623840 2026] [ssl:error] [pid 2619667:tid 2619667] (EAI 2)Name or service not known: [client 144.76.19.72:29378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:40.623873 2026] [ssl:error] [pid 2619667:tid 2619667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:40.678383 2026] [ssl:error] [pid 2637584:tid 2637584] (EAI 2)Name or service not known: [client 144.76.19.72:29380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:40.678412 2026] [ssl:error] [pid 2637584:tid 2637584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:42.411234 2026] [core:error] [pid 2637691:tid 2637691] [client 66.249.66.167:56881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:42.411261 2026] [core:error] [pid 2637691:tid 2637691] [client 66.249.66.167:56881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:42.648845 2026] [authz_core:error] [pid 2637685:tid 2637685] [client 57.141.0.67:65100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:42.649480 2026] [authz_core:error] [pid 2637685:tid 2637685] [client 57.141.0.67:65100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:43.526061 2026] [ssl:error] [pid 2637653:tid 2637653] (70014)End of file found: [client 216.73.216.199:17597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:43.769738 2026] [security2:error] [pid 2640700:tid 2640700] [client 185.191.171.2:61664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9476.0/prev_next,prev.html"] [unique_id "amsRj6Aia4OM3v82BhNHJQAAABQ"]
[Thu Jul 30 09:55:43.886443 2026] [ssl:error] [pid 2640700:tid 2640700] (EAI 2)Name or service not known: [client 144.76.19.72:29388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:43.886489 2026] [ssl:error] [pid 2640700:tid 2640700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:44.044466 2026] [ssl:error] [pid 2637697:tid 2637697] (EAI 2)Name or service not known: [client 144.76.19.72:29400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:44.044508 2026] [ssl:error] [pid 2637697:tid 2637697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:45.080506 2026] [core:error] [pid 2640304:tid 2640304] [client 66.249.66.40:54513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:45.080533 2026] [core:error] [pid 2640304:tid 2640304] [client 66.249.66.40:54513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:46.545986 2026] [core:error] [pid 2637697:tid 2637697] (13)Permission denied: [client 216.73.216.199:11389] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS2/irq
[Thu Jul 30 09:55:46.707128 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:60716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/admin/laravel.log"] [unique_id "amsRkoW_fWF6QfgPXMIo9AAAAA8"]
[Thu Jul 30 09:55:46.707429 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:60716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/laravel.log"] [unique_id "amsRkoW_fWF6QfgPXMIo9AAAAA8"]
[Thu Jul 30 09:55:46.843302 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:60716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRkoW_fWF6QfgPXMIo9AAAAA8"]
[Thu Jul 30 09:55:47.002611 2026] [core:error] [pid 2637816:tid 2637816] [client 66.249.66.67:57449] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:47.002639 2026] [core:error] [pid 2637816:tid 2637816] [client 66.249.66.67:57449] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:47.098209 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:29416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:47.098235 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:47.155938 2026] [ssl:error] [pid 2637647:tid 2637647] (EAI 2)Name or service not known: [client 144.76.19.72:29420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:47.155963 2026] [ssl:error] [pid 2637647:tid 2637647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:47.257466 2026] [authz_core:error] [pid 2637685:tid 2637685] [client 57.141.0.38:53702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:47.258089 2026] [authz_core:error] [pid 2637685:tid 2637685] [client 57.141.0.38:53702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:47.451016 2026] [authz_core:error] [pid 2640663:tid 2640663] [client 57.141.0.56:43310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:47.451683 2026] [authz_core:error] [pid 2640663:tid 2640663] [client 57.141.0.56:43310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:47.912294 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:60780] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/admin/php.ini"] [unique_id "amsRk0LxYlQ9rOjGgkMwzAAAAEQ"]
[Thu Jul 30 09:55:47.912657 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:60780] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/php.ini"] [unique_id "amsRk0LxYlQ9rOjGgkMwzAAAAEQ"]
[Thu Jul 30 09:55:48.054024 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:60780] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRk0LxYlQ9rOjGgkMwzAAAAEQ"]
[Thu Jul 30 09:55:48.998106 2026] [security2:error] [pid 2640698:tid 2640698] [client 85.208.96.208:56988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRlIW_fWF6QfgPXMIo9gAAAA8"]
[Thu Jul 30 09:55:50.212347 2026] [ssl:error] [pid 2624681:tid 2624681] (EAI 2)Name or service not known: [client 144.76.19.72:49590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:50.212379 2026] [ssl:error] [pid 2624681:tid 2624681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:50.266499 2026] [ssl:error] [pid 2637841:tid 2637841] (EAI 2)Name or service not known: [client 144.76.19.72:49604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:50.266525 2026] [ssl:error] [pid 2637841:tid 2637841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:50.409736 2026] [lsapi:warn] [pid 2623544:tid 2623544] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:55:51.354284 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:60940] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/admin/web.config"] [unique_id "amsRl7zDi7bAxSTb5kpA1QAAAAI"]
[Thu Jul 30 09:55:51.354508 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:60940] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /admin/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admin/web.config"] [unique_id "amsRl7zDi7bAxSTb5kpA1QAAAAI"]
[Thu Jul 30 09:55:51.354691 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:60940] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admin/web.config"] [unique_id "amsRl7zDi7bAxSTb5kpA1QAAAAI"]
[Thu Jul 30 09:55:51.364962 2026] [ssl:error] [pid 2637697:tid 2637697] (70014)End of file found: [client 216.73.216.199:11389] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:51.491813 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:60940] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRl7zDi7bAxSTb5kpA1QAAAAI"]
[Thu Jul 30 09:55:51.614357 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.191.171.9:43752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11402.0/prev_next,next.html"] [unique_id "amsRl7zDi7bAxSTb5kpA1gAAAAI"]
[Thu Jul 30 09:55:52.078138 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:60978] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/adminer/.env"] [unique_id "amsRmLzDi7bAxSTb5kpA2AAAAAI"]
[Thu Jul 30 09:55:52.078291 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:60978] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/adminer/.env"] [unique_id "amsRmLzDi7bAxSTb5kpA2AAAAAI"]
[Thu Jul 30 09:55:52.231386 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:60978] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRmLzDi7bAxSTb5kpA2AAAAAI"]
[Thu Jul 30 09:55:52.266353 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:60982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env"] [unique_id "amsRmBR4QchRU-0eVC_NTQAAACA"]
[Thu Jul 30 09:55:52.266491 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:60982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env"] [unique_id "amsRmBR4QchRU-0eVC_NTQAAACA"]
[Thu Jul 30 09:55:52.409143 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:60982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRmBR4QchRU-0eVC_NTQAAACA"]
[Thu Jul 30 09:55:52.442872 2026] [security2:error] [pid 2641653:tid 2641653] [client 185.177.72.10:60992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.bak"] [unique_id "amsRmA21dAkMxj6TAQlhKAAAABE"]
[Thu Jul 30 09:55:52.443121 2026] [security2:error] [pid 2641653:tid 2641653] [client 185.177.72.10:60992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.bak"] [unique_id "amsRmA21dAkMxj6TAQlhKAAAABE"]
[Thu Jul 30 09:55:52.603412 2026] [security2:error] [pid 2641653:tid 2641653] [client 185.177.72.10:60992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRmA21dAkMxj6TAQlhKAAAABE"]
[Thu Jul 30 09:55:52.635823 2026] [security2:error] [pid 2641653:tid 2641653] [client 185.177.72.10:60996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.dev"] [unique_id "amsRmA21dAkMxj6TAQlhKQAAABE"]
[Thu Jul 30 09:55:52.635996 2026] [security2:error] [pid 2641653:tid 2641653] [client 185.177.72.10:60996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.dev"] [unique_id "amsRmA21dAkMxj6TAQlhKQAAABE"]
[Thu Jul 30 09:55:52.795353 2026] [security2:error] [pid 2641653:tid 2641653] [client 185.177.72.10:60996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRmA21dAkMxj6TAQlhKQAAABE"]
[Thu Jul 30 09:55:52.857219 2026] [security2:error] [pid 2640639:tid 2640639] [client 185.177.72.10:61010] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.dist"] [unique_id "amsRmIyyXZV23mJ8J5x2OgAAAAk"]
[Thu Jul 30 09:55:52.857350 2026] [security2:error] [pid 2640639:tid 2640639] [client 185.177.72.10:61010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.dist"] [unique_id "amsRmIyyXZV23mJ8J5x2OgAAAAk"]
[Thu Jul 30 09:55:53.001939 2026] [security2:error] [pid 2640639:tid 2640639] [client 185.177.72.10:61010] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRmIyyXZV23mJ8J5x2OgAAAAk"]
[Thu Jul 30 09:55:53.114405 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:61014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administration/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.local"] [unique_id "amsRmcdksUVuC8DeHncptgAAAAc"]
[Thu Jul 30 09:55:53.114645 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:61014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/administration/.env.local"] [unique_id "amsRmcdksUVuC8DeHncptgAAAAc"]
[Thu Jul 30 09:55:53.261625 2026] [security2:error] [pid 2640304:tid 2640304] [client 185.177.72.10:61014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRmcdksUVuC8DeHncptgAAAAc"]
[Thu Jul 30 09:55:53.355065 2026] [ssl:error] [pid 2641721:tid 2641721] (EAI 2)Name or service not known: [client 144.76.19.72:49612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:53.355116 2026] [ssl:error] [pid 2641721:tid 2641721] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:53.423619 2026] [ssl:error] [pid 2640304:tid 2640304] (EAI 2)Name or service not known: [client 144.76.19.72:49622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:53.423649 2026] [ssl:error] [pid 2640304:tid 2640304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:53.543536 2026] [authz_core:error] [pid 2640304:tid 2640304] [client 66.249.66.33:38617] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:55:53.546191 2026] [authz_core:error] [pid 2640304:tid 2640304] [client 66.249.66.33:38617] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:55:55.275876 2026] [ssl:error] [pid 2637919:tid 2637919] (70014)End of file found: [client 216.73.216.199:3162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:55:55.574551 2026] [authz_core:error] [pid 2640700:tid 2640700] [client 57.141.0.58:41334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:55.575186 2026] [authz_core:error] [pid 2640700:tid 2640700] [client 57.141.0.58:41334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:56.411247 2026] [core:error] [pid 2641789:tid 2641789] [client 66.249.64.170:65060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:56.411275 2026] [core:error] [pid 2641789:tid 2641789] [client 66.249.64.170:65060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:55:56.430273 2026] [authz_core:error] [pid 2625898:tid 2625898] [client 57.141.0.20:61176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:55:56.430890 2026] [authz_core:error] [pid 2625898:tid 2625898] [client 57.141.0.20:61176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:55:56.483226 2026] [ssl:error] [pid 2641839:tid 2641839] (EAI 2)Name or service not known: [client 144.76.19.72:49628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:56.483261 2026] [ssl:error] [pid 2641839:tid 2641839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:56.577850 2026] [ssl:error] [pid 2641841:tid 2641841] (EAI 2)Name or service not known: [client 144.76.19.72:49632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:56.577896 2026] [ssl:error] [pid 2641841:tid 2641841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:59.634762 2026] [ssl:error] [pid 2637650:tid 2637650] (EAI 2)Name or service not known: [client 144.76.19.72:47952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:59.634788 2026] [ssl:error] [pid 2637650:tid 2637650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:59.660875 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4410] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/administration/php.ini"] [unique_id "amsRn1jsQitwqei4Mc7wJgAAAE4"]
[Thu Jul 30 09:55:59.661243 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/administration/php.ini"] [unique_id "amsRn1jsQitwqei4Mc7wJgAAAE4"]
[Thu Jul 30 09:55:59.687561 2026] [ssl:error] [pid 2640698:tid 2640698] (EAI 2)Name or service not known: [client 144.76.19.72:47966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:55:59.687596 2026] [ssl:error] [pid 2640698:tid 2640698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:55:59.734787 2026] [authz_core:error] [pid 2640305:tid 2640305] [client 66.249.66.33:52220] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:55:59.737433 2026] [authz_core:error] [pid 2640305:tid 2640305] [client 66.249.66.33:52220] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:55:59.798097 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRn1jsQitwqei4Mc7wJgAAAE4"]
[Thu Jul 30 09:56:00.391695 2026] [ssl:error] [pid 2636409:tid 2636409] (70014)End of file found: [client 216.73.216.199:14420] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:00.951273 2026] [lsapi:warn] [pid 2640698:tid 2640698] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:56:01.858365 2026] [authz_core:error] [pid 2623544:tid 2623544] [client 82.102.18.190:45606] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 09:56:02.743624 2026] [ssl:error] [pid 2637685:tid 2637685] (EAI 2)Name or service not known: [client 144.76.19.72:47980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:02.743651 2026] [ssl:error] [pid 2637685:tid 2637685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:02.799442 2026] [ssl:error] [pid 2637120:tid 2637120] (EAI 2)Name or service not known: [client 144.76.19.72:47994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:02.799468 2026] [ssl:error] [pid 2637120:tid 2637120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:02.807357 2026] [ssl:error] [pid 2641721:tid 2641721] (70014)End of file found: [client 216.73.216.199:53745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:03.713946 2026] [core:error] [pid 2641839:tid 2641839] (13)Permission denied: [client 216.73.216.199:20942] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS1/port
[Thu Jul 30 09:56:03.922977 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env"] [unique_id "amsRo1jsQitwqei4Mc7wKgAAAE4"]
[Thu Jul 30 09:56:03.923231 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env"] [unique_id "amsRo1jsQitwqei4Mc7wKgAAAE4"]
[Thu Jul 30 09:56:04.061867 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRo1jsQitwqei4Mc7wKgAAAE4"]
[Thu Jul 30 09:56:04.078992 2026] [core:error] [pid 2641845:tid 2641845] [client 66.249.64.170:63973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:56:04.079017 2026] [core:error] [pid 2641845:tid 2641845] [client 66.249.64.170:63973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:56:04.104836 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:4664] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.bak"] [unique_id "amsRpPe6kgva7vVQtaGIywAAADk"]
[Thu Jul 30 09:56:04.104987 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:4664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.bak"] [unique_id "amsRpPe6kgva7vVQtaGIywAAADk"]
[Thu Jul 30 09:56:04.245204 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:4664] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRpPe6kgva7vVQtaGIywAAADk"]
[Thu Jul 30 09:56:04.286458 2026] [security2:error] [pid 2641842:tid 2641842] [client 185.177.72.10:4672] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.dev"] [unique_id "amsRpNr8BldpjqaxTPxZ6wAAAB4"]
[Thu Jul 30 09:56:04.286651 2026] [security2:error] [pid 2641842:tid 2641842] [client 185.177.72.10:4672] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.dev"] [unique_id "amsRpNr8BldpjqaxTPxZ6wAAAB4"]
[Thu Jul 30 09:56:04.428373 2026] [security2:error] [pid 2641842:tid 2641842] [client 185.177.72.10:4672] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRpNr8BldpjqaxTPxZ6wAAAB4"]
[Thu Jul 30 09:56:04.465147 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:4684] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.dist"] [unique_id "amsRpPZh6EVXZe6yv9f6_QAAAAQ"]
[Thu Jul 30 09:56:04.465348 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:4684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.dist"] [unique_id "amsRpPZh6EVXZe6yv9f6_QAAAAQ"]
[Thu Jul 30 09:56:04.616246 2026] [security2:error] [pid 2641839:tid 2641839] [client 216.73.216.199:20942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib64/cracklib_dict.pwd"] [unique_id "amsRpJdQZ3EKXZ4_8fJeTQAAABo"]
[Thu Jul 30 09:56:04.616529 2026] [security2:error] [pid 2641839:tid 2641839] [client 216.73.216.199:20942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib64/cracklib_dict.pwd"] [unique_id "amsRpJdQZ3EKXZ4_8fJeTQAAABo"]
[Thu Jul 30 09:56:04.616773 2026] [security2:error] [pid 2641839:tid 2641839] [client 216.73.216.199:20942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib64/cracklib_dict.pwd"] [unique_id "amsRpJdQZ3EKXZ4_8fJeTQAAABo"]
[Thu Jul 30 09:56:04.621537 2026] [security2:error] [pid 2637120:tid 2637120] [client 185.177.72.10:4684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRpPZh6EVXZe6yv9f6_QAAAAQ"]
[Thu Jul 30 09:56:04.654312 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4692] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admins/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.local"] [unique_id "amsRpFjsQitwqei4Mc7wKwAAAE4"]
[Thu Jul 30 09:56:04.654515 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admins/.env.local"] [unique_id "amsRpFjsQitwqei4Mc7wKwAAAE4"]
[Thu Jul 30 09:56:04.807574 2026] [security2:error] [pid 2637702:tid 2637702] [client 185.177.72.10:4692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRpFjsQitwqei4Mc7wKwAAAE4"]
[Thu Jul 30 09:56:05.047787 2026] [authz_core:error] [pid 2624439:tid 2624439] [client 57.141.0.50:22888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:56:05.048412 2026] [authz_core:error] [pid 2624439:tid 2624439] [client 57.141.0.50:22888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:56:05.883433 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:47996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:05.883480 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:05.935645 2026] [ssl:error] [pid 2640305:tid 2640305] (EAI 2)Name or service not known: [client 144.76.19.72:48010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:05.935690 2026] [ssl:error] [pid 2640305:tid 2640305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:06.429017 2026] [security2:error] [pid 2637686:tid 2637686] [client 103.93.12.87:55209] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRpkLxYlQ9rOjGgkMw1AAAAEQ"]
[Thu Jul 30 09:56:06.429078 2026] [security2:error] [pid 2637686:tid 2637686] [client 103.93.12.87:55209] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRpkLxYlQ9rOjGgkMw1AAAAEQ"]
[Thu Jul 30 09:56:06.429334 2026] [security2:error] [pid 2637686:tid 2637686] [client 103.93.12.87:55209] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRpkLxYlQ9rOjGgkMw1AAAAEQ"]
[Thu Jul 30 09:56:06.697006 2026] [security2:error] [pid 2641402:tid 2641402] [client 3.224.215.150:45951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2008/ref/D4-Bangladesh.pdf"] [unique_id "amsRpnUvt_1QRd57dE9UjAAAAAw"]
[Thu Jul 30 09:56:07.302244 2026] [security2:error] [pid 2641402:tid 2641402] [client 34.225.24.180:14087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2010/A02-Chile-2010.pdf"] [unique_id "amsRp3Uvt_1QRd57dE9UjQAAAAw"]
[Thu Jul 30 09:56:08.125936 2026] [authz_core:error] [pid 2640305:tid 2640305] [client 171.95.210.199:8053] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 09:56:08.972801 2026] [security2:error] [pid 2637652:tid 2637652] [client 103.17.36.36:33190] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRqPe6kgva7vVQtaGI0gAAADk"]
[Thu Jul 30 09:56:08.972858 2026] [security2:error] [pid 2637652:tid 2637652] [client 103.17.36.36:33190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRqPe6kgva7vVQtaGI0gAAADk"]
[Thu Jul 30 09:56:08.973150 2026] [security2:error] [pid 2637652:tid 2637652] [client 103.17.36.36:33190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRqPe6kgva7vVQtaGI0gAAADk"]
[Thu Jul 30 09:56:09.175031 2026] [ssl:error] [pid 2637652:tid 2637652] (EAI 2)Name or service not known: [client 144.76.19.72:48014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:09.175088 2026] [ssl:error] [pid 2637652:tid 2637652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:09.360511 2026] [ssl:error] [pid 2637652:tid 2637652] (EAI 2)Name or service not known: [client 144.76.19.72:48028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:09.360535 2026] [ssl:error] [pid 2637652:tid 2637652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:09.361301 2026] [security2:error] [pid 2640639:tid 2640639] [client 45.233.148.131:49826] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amsRqYyyXZV23mJ8J5x2RAAAAAk"]
[Thu Jul 30 09:56:10.524526 2026] [ssl:error] [pid 2641839:tid 2641839] (70014)End of file found: [client 216.73.216.199:20942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:10.944734 2026] [security2:error] [pid 2642742:tid 2642742] [client 43.163.206.70:59044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amsRqq6KuX4rRscgdjLKigAAAAo"]
[Thu Jul 30 09:56:11.692567 2026] [security2:error] [pid 2642789:tid 2642789] [client 54.144.185.255:11040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2010/A19-A20-Myanmar-2008.pdf"] [unique_id "amsRq6tq9IZf4m9o66UWSQAAABQ"]
[Thu Jul 30 09:56:11.891745 2026] [lsapi:warn] [pid 2624439:tid 2624439] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:56:12.270676 2026] [security2:error] [pid 2641843:tid 2641843] [client 201.159.212.192:39886] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRrNLtE5pbZz85vIbzugAAAB8"]
[Thu Jul 30 09:56:12.270723 2026] [security2:error] [pid 2641843:tid 2641843] [client 201.159.212.192:39886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsRrNLtE5pbZz85vIbzugAAAB8"]
[Thu Jul 30 09:56:12.270994 2026] [security2:error] [pid 2641843:tid 2641843] [client 201.159.212.192:39886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsRrNLtE5pbZz85vIbzugAAAB8"]
[Thu Jul 30 09:56:12.768254 2026] [ssl:error] [pid 2642789:tid 2642789] (EAI 2)Name or service not known: [client 144.76.19.72:62892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:12.768286 2026] [ssl:error] [pid 2642789:tid 2642789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:12.796557 2026] [security2:error] [pid 2642789:tid 2642789] [client 43.163.206.70:60704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsRrKtq9IZf4m9o66UWTAAAABQ"], referer: http://swingaddiction.co.uk
[Thu Jul 30 09:56:12.843140 2026] [cgi:error] [pid 2642789:tid 2642789] [client 43.163.206.70:60704] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://swingaddiction.co.uk
[Thu Jul 30 09:56:13.173308 2026] [ssl:error] [pid 2642846:tid 2642846] (EAI 2)Name or service not known: [client 144.76.19.72:62896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:13.173351 2026] [ssl:error] [pid 2642846:tid 2642846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:13.265696 2026] [authz_core:error] [pid 2642851:tid 2642851] [client 66.249.66.33:46671] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:56:13.270934 2026] [authz_core:error] [pid 2642851:tid 2642851] [client 66.249.66.33:46671] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:56:13.585487 2026] [security2:error] [pid 2642790:tid 2642790] [client 185.177.72.10:49040] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/admins/php.ini"] [unique_id "amsRrfeRI1bxcYnvVd1YuQAAABY"]
[Thu Jul 30 09:56:13.585888 2026] [security2:error] [pid 2642790:tid 2642790] [client 185.177.72.10:49040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/admins/php.ini"] [unique_id "amsRrfeRI1bxcYnvVd1YuQAAABY"]
[Thu Jul 30 09:56:13.733514 2026] [security2:error] [pid 2642790:tid 2642790] [client 185.177.72.10:49040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRrfeRI1bxcYnvVd1YuQAAABY"]
[Thu Jul 30 09:56:16.242562 2026] [ssl:error] [pid 2642907:tid 2642907] (EAI 2)Name or service not known: [client 144.76.19.72:62906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:16.242612 2026] [ssl:error] [pid 2642907:tid 2642907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:16.297835 2026] [ssl:error] [pid 2642848:tid 2642848] (EAI 2)Name or service not known: [client 144.76.19.72:62910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:16.297868 2026] [ssl:error] [pid 2642848:tid 2642848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:17.034273 2026] [security2:error] [pid 2642894:tid 2642894] [client 185.177.72.10:51724] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/agora/.env"] [unique_id "amsRsZ3LdpYMAHiLDqHrRQAAACw"]
[Thu Jul 30 09:56:17.034454 2026] [security2:error] [pid 2642894:tid 2642894] [client 185.177.72.10:51724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/agora/.env"] [unique_id "amsRsZ3LdpYMAHiLDqHrRQAAACw"]
[Thu Jul 30 09:56:17.175581 2026] [security2:error] [pid 2642894:tid 2642894] [client 185.177.72.10:51724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRsZ3LdpYMAHiLDqHrRQAAACw"]
[Thu Jul 30 09:56:17.208404 2026] [security2:error] [pid 2642903:tid 2642903] [client 185.177.72.10:51732] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/alpha/.env"] [unique_id "amsRsUTEElsC0eUFdAA_VAAAAD4"]
[Thu Jul 30 09:56:17.208666 2026] [security2:error] [pid 2642903:tid 2642903] [client 185.177.72.10:51732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/alpha/.env"] [unique_id "amsRsUTEElsC0eUFdAA_VAAAAD4"]
[Thu Jul 30 09:56:17.347088 2026] [security2:error] [pid 2642903:tid 2642903] [client 185.177.72.10:51732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRsUTEElsC0eUFdAA_VAAAAD4"]
[Thu Jul 30 09:56:17.381191 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:51736] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/anaconda/.env"] [unique_id "amsRsb0K2JrWLOe59h9f9gAAAAY"]
[Thu Jul 30 09:56:17.381372 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:51736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/anaconda/.env"] [unique_id "amsRsb0K2JrWLOe59h9f9gAAAAY"]
[Thu Jul 30 09:56:17.520102 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:51736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRsb0K2JrWLOe59h9f9gAAAAY"]
[Thu Jul 30 09:56:17.714088 2026] [lsapi:warn] [pid 2642902:tid 2642902] [client 74.116.33.38:8954] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:56:17.714143 2026] [lsapi:warn] [pid 2642902:tid 2642902] [client 74.116.33.38:8954] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:56:18.507801 2026] [security2:error] [pid 2642900:tid 2642900] [client 185.177.72.10:51776] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/api-config.ini"] [unique_id "amsRssiwsW-BRKf6hW4NFAAAADg"]
[Thu Jul 30 09:56:18.508143 2026] [security2:error] [pid 2642900:tid 2642900] [client 185.177.72.10:51776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/api-config.ini"] [unique_id "amsRssiwsW-BRKf6hW4NFAAAADg"]
[Thu Jul 30 09:56:18.662043 2026] [security2:error] [pid 2642900:tid 2642900] [client 185.177.72.10:51776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRssiwsW-BRKf6hW4NFAAAADg"]
[Thu Jul 30 09:56:18.700633 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:51784] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.bak"] [unique_id "amsRsjNV-5EIcPTlc2tQxAAAAEI"]
[Thu Jul 30 09:56:18.700815 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:51784] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.bak"] [unique_id "amsRsjNV-5EIcPTlc2tQxAAAAEI"]
[Thu Jul 30 09:56:18.842259 2026] [security2:error] [pid 2637684:tid 2637684] [client 185.177.72.10:51784] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRsjNV-5EIcPTlc2tQxAAAAEI"]
[Thu Jul 30 09:56:18.875015 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:51790] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.dev"] [unique_id "amsRsi56pRJ6BmSOOElaLAAAAAg"]
[Thu Jul 30 09:56:18.875219 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:51790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.dev"] [unique_id "amsRsi56pRJ6BmSOOElaLAAAAAg"]
[Thu Jul 30 09:56:19.024690 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:51790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRsi56pRJ6BmSOOElaLAAAAAg"]
[Thu Jul 30 09:56:19.058874 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:51798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.dist"] [unique_id "amsRs2jWdiBXMMEujLKIaQAAAEg"]
[Thu Jul 30 09:56:19.059014 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:51798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.dist"] [unique_id "amsRs2jWdiBXMMEujLKIaQAAAEg"]
[Thu Jul 30 09:56:19.216733 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:51798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRs2jWdiBXMMEujLKIaQAAAEg"]
[Thu Jul 30 09:56:19.262089 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:51806] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.test"] [unique_id "amsRs-AOfUDYJWq_uNeFyQAAACI"]
[Thu Jul 30 09:56:19.262269 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:51806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/api/.env.test"] [unique_id "amsRs-AOfUDYJWq_uNeFyQAAACI"]
[Thu Jul 30 09:56:19.354424 2026] [ssl:error] [pid 2637584:tid 2637584] (EAI 2)Name or service not known: [client 144.76.19.72:62912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:19.354460 2026] [ssl:error] [pid 2637584:tid 2637584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:19.401295 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:51806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRs-AOfUDYJWq_uNeFyQAAACI"]
[Thu Jul 30 09:56:19.407543 2026] [ssl:error] [pid 2640697:tid 2640697] (EAI 2)Name or service not known: [client 144.76.19.72:62924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:19.407567 2026] [ssl:error] [pid 2640697:tid 2640697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:21.248611 2026] [security2:error] [pid 2637652:tid 2637652] [client 85.208.98.23:37706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsRtfe6kgva7vVQtaGI3QAAADk"]
[Thu Jul 30 09:56:21.951125 2026] [lsapi:error] [pid 2641792:tid 2641792] [client 172.202.95.21:36994] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 20480 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-fatal-error-handler.php on line 67\n
[Thu Jul 30 09:56:22.121637 2026] [authz_core:error] [pid 2637652:tid 2637652] [client 57.141.0.19:36056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:56:22.122324 2026] [authz_core:error] [pid 2637652:tid 2637652] [client 57.141.0.19:36056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:56:22.432281 2026] [lsapi:warn] [pid 2640639:tid 2640639] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:56:22.465946 2026] [ssl:error] [pid 2640697:tid 2640697] (EAI 2)Name or service not known: [client 144.76.19.72:19292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:22.465979 2026] [ssl:error] [pid 2640697:tid 2640697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:22.525226 2026] [ssl:error] [pid 2641841:tid 2641841] (EAI 2)Name or service not known: [client 144.76.19.72:19304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:22.525256 2026] [ssl:error] [pid 2641841:tid 2641841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:23.533314 2026] [security2:error] [pid 2640698:tid 2640698] [client 68.183.31.46:44674] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "georgehotelofstamford.com"] [uri "/xmlrpc.php"] [unique_id "amsRt4W_fWF6QfgPXMIpBgAAAA8"]
[Thu Jul 30 09:56:25.580341 2026] [ssl:error] [pid 2640698:tid 2640698] (EAI 2)Name or service not known: [client 144.76.19.72:19308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:25.580396 2026] [ssl:error] [pid 2640698:tid 2640698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:25.635032 2026] [ssl:error] [pid 2640305:tid 2640305] (EAI 2)Name or service not known: [client 144.76.19.72:19318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:25.635061 2026] [ssl:error] [pid 2640305:tid 2640305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:26.186686 2026] [ssl:error] [pid 2641402:tid 2641402] (70014)End of file found: [client 216.73.216.199:52545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:26.193017 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:47214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/api/php.ini"] [unique_id "amsRuluA8utF9-6bZmXfbgAAACo"]
[Thu Jul 30 09:56:26.193466 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:47214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/api/php.ini"] [unique_id "amsRuluA8utF9-6bZmXfbgAAACo"]
[Thu Jul 30 09:56:26.332012 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:47214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRuluA8utF9-6bZmXfbgAAACo"]
[Thu Jul 30 09:56:27.384414 2026] [core:error] [pid 2641839:tid 2641839] (13)Permission denied: [client 216.73.216.199:62145] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/trustedmailhosts
[Thu Jul 30 09:56:27.884549 2026] [authz_core:error] [pid 2642903:tid 2642903] [client 57.141.0.17:59026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:56:27.885184 2026] [authz_core:error] [pid 2642903:tid 2642903] [client 57.141.0.17:59026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:56:28.342643 2026] [security2:error] [pid 2642905:tid 2642905] [client 185.177.72.10:47308] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/api/src/.env"] [unique_id "amsRvG_iGhhiLx4XlQPVvAAAAEE"]
[Thu Jul 30 09:56:28.342801 2026] [security2:error] [pid 2642905:tid 2642905] [client 185.177.72.10:47308] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/api/src/.env"] [unique_id "amsRvG_iGhhiLx4XlQPVvAAAAEE"]
[Thu Jul 30 09:56:28.482283 2026] [security2:error] [pid 2642905:tid 2642905] [client 185.177.72.10:47308] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRvG_iGhhiLx4XlQPVvAAAAEE"]
[Thu Jul 30 09:56:28.689716 2026] [ssl:error] [pid 2642897:tid 2642897] (EAI 2)Name or service not known: [client 144.76.19.72:19326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:28.689745 2026] [ssl:error] [pid 2642897:tid 2642897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:28.746421 2026] [ssl:error] [pid 2642851:tid 2642851] (EAI 2)Name or service not known: [client 144.76.19.72:19328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:28.746450 2026] [ssl:error] [pid 2642851:tid 2642851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:28.890159 2026] [core:error] [pid 2641839:tid 2641839] (13)Permission denied: [client 216.73.216.199:62145] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/virtio/drivers/virtio_blk/unbind
[Thu Jul 30 09:56:30.012147 2026] [security2:error] [pid 2641844:tid 2641844] [client 94.154.43.187:23938] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.nl"] [uri "/.env"] [unique_id "amsRvuAOfUDYJWq_uNeFzgAAACI"]
[Thu Jul 30 09:56:30.012343 2026] [security2:error] [pid 2641844:tid 2641844] [client 94.154.43.187:23938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.nl"] [uri "/.env"] [unique_id "amsRvuAOfUDYJWq_uNeFzgAAACI"]
[Thu Jul 30 09:56:30.214877 2026] [security2:error] [pid 2642846:tid 2642846] [client 185.191.171.18:22866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/too-hands-cafe-new-lambton-menu"] [unique_id "amsRvt9rxtvY5d-zmdCdfAAAAB4"]
[Thu Jul 30 09:56:30.389913 2026] [security2:error] [pid 2641845:tid 2641845] [client 94.154.43.177:22332] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.be"] [uri "/.env"] [unique_id "amsRviA5I1nMSfJA2UnYXgAAACM"]
[Thu Jul 30 09:56:30.390124 2026] [security2:error] [pid 2641845:tid 2641845] [client 94.154.43.177:22332] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.be"] [uri "/.env"] [unique_id "amsRviA5I1nMSfJA2UnYXgAAACM"]
[Thu Jul 30 09:56:30.518557 2026] [security2:error] [pid 2641371:tid 2641371] [client 94.154.43.177:22338] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.eu"] [uri "/.env"] [unique_id "amsRvrzDi7bAxSTb5kpA5wAAAAI"]
[Thu Jul 30 09:56:30.518813 2026] [security2:error] [pid 2641371:tid 2641371] [client 94.154.43.177:22338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.eu"] [uri "/.env"] [unique_id "amsRvrzDi7bAxSTb5kpA5wAAAAI"]
[Thu Jul 30 09:56:30.821798 2026] [security2:error] [pid 2642902:tid 2642902] [client 94.154.43.179:22336] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/.env"] [unique_id "amsRvjrECJcqpnQkQsjEGQAAAD0"]
[Thu Jul 30 09:56:30.821981 2026] [security2:error] [pid 2642902:tid 2642902] [client 94.154.43.179:22336] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/.env"] [unique_id "amsRvjrECJcqpnQkQsjEGQAAAD0"]
[Thu Jul 30 09:56:31.603270 2026] [core:error] [pid 2641839:tid 2641839] (13)Permission denied: [client 216.73.216.199:62145] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/subsystem/ttyS0/custom_divisor
[Thu Jul 30 09:56:31.802630 2026] [ssl:error] [pid 2642909:tid 2642909] (EAI 2)Name or service not known: [client 144.76.19.72:44030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:31.802660 2026] [ssl:error] [pid 2642909:tid 2642909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:31.856583 2026] [ssl:error] [pid 2641792:tid 2641792] (EAI 2)Name or service not known: [client 144.76.19.72:44034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:31.856637 2026] [ssl:error] [pid 2641792:tid 2641792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:31.952194 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:47496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env"] [unique_id "amsRv6tq9IZf4m9o66UWUgAAABQ"]
[Thu Jul 30 09:56:31.952372 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:47496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env"] [unique_id "amsRv6tq9IZf4m9o66UWUgAAABQ"]
[Thu Jul 30 09:56:32.031057 2026] [security2:error] [pid 2637685:tid 2637685] [client 85.208.96.200:46182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3769.0/prev_next,next.html"] [unique_id "amsRwC-FlZbtiRnhtvZNxwAAAEM"]
[Thu Jul 30 09:56:32.091442 2026] [security2:error] [pid 2641844:tid 2641844] [client 94.154.43.187:23938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.nl"] [uri "/index.php"] [unique_id "amsRvuAOfUDYJWq_uNeFzgAAACI"]
[Thu Jul 30 09:56:32.104289 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:47496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRv6tq9IZf4m9o66UWUgAAABQ"]
[Thu Jul 30 09:56:32.140189 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:47506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.bak"] [unique_id "amsRwD02YtZ-iv7LRwF1HQAAADs"]
[Thu Jul 30 09:56:32.140372 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:47506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.bak"] [unique_id "amsRwD02YtZ-iv7LRwF1HQAAADs"]
[Thu Jul 30 09:56:32.279352 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:47506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRwD02YtZ-iv7LRwF1HQAAADs"]
[Thu Jul 30 09:56:32.312522 2026] [security2:error] [pid 2641792:tid 2641792] [client 185.177.72.10:47508] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.dev"] [unique_id "amsRwFFtnyjQWa0Q15gttAAAABk"]
[Thu Jul 30 09:56:32.312738 2026] [security2:error] [pid 2641792:tid 2641792] [client 185.177.72.10:47508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.dev"] [unique_id "amsRwFFtnyjQWa0Q15gttAAAABk"]
[Thu Jul 30 09:56:32.452338 2026] [security2:error] [pid 2641792:tid 2641792] [client 185.177.72.10:47508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRwFFtnyjQWa0Q15gttAAAABk"]
[Thu Jul 30 09:56:32.493304 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:47510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.dist"] [unique_id "amsRwOAOfUDYJWq_uNeFzwAAACI"]
[Thu Jul 30 09:56:32.493528 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:47510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.dist"] [unique_id "amsRwOAOfUDYJWq_uNeFzwAAACI"]
[Thu Jul 30 09:56:32.640979 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:47510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRwOAOfUDYJWq_uNeFzwAAACI"]
[Thu Jul 30 09:56:32.677261 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:47514] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.local"] [unique_id "amsRwD02YtZ-iv7LRwF1HgAAADs"]
[Thu Jul 30 09:56:32.677450 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:47514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.local"] [unique_id "amsRwD02YtZ-iv7LRwF1HgAAADs"]
[Thu Jul 30 09:56:32.810368 2026] [ssl:error] [pid 2642844:tid 2642844] (70014)End of file found: [client 216.73.216.199:11163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:32.822754 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:47514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRwD02YtZ-iv7LRwF1HgAAADs"]
[Thu Jul 30 09:56:32.857728 2026] [security2:error] [pid 2641792:tid 2641792] [client 185.177.72.10:47526] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.production"] [unique_id "amsRwFFtnyjQWa0Q15gttQAAABk"]
[Thu Jul 30 09:56:32.857851 2026] [security2:error] [pid 2641792:tid 2641792] [client 185.177.72.10:47526] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.production"] [unique_id "amsRwFFtnyjQWa0Q15gttQAAABk"]
[Thu Jul 30 09:56:32.997337 2026] [security2:error] [pid 2641792:tid 2641792] [client 185.177.72.10:47526] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRwFFtnyjQWa0Q15gttQAAABk"]
[Thu Jul 30 09:56:33.028494 2026] [lsapi:warn] [pid 2642846:tid 2642846] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:56:33.031095 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:47532] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.staging"] [unique_id "amsRweAOfUDYJWq_uNeF0AAAACI"]
[Thu Jul 30 09:56:33.031272 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:47532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/.env.staging"] [unique_id "amsRweAOfUDYJWq_uNeF0AAAACI"]
[Thu Jul 30 09:56:33.197680 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:47532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRweAOfUDYJWq_uNeF0AAAACI"]
[Thu Jul 30 09:56:33.780298 2026] [security2:error] [pid 2641845:tid 2641845] [client 94.154.43.177:22332] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.be"] [uri "/index.php"] [unique_id "amsRviA5I1nMSfJA2UnYXgAAACM"]
[Thu Jul 30 09:56:33.816885 2026] [security2:error] [pid 2641402:tid 2641402] [client 51.68.111.216:32769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amsRwXUvt_1QRd57dE9UrQAAAAw"]
[Thu Jul 30 09:56:33.910240 2026] [security2:error] [pid 2628120:tid 2628120] [client 51.68.111.216:24773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsRwSqCrh0o4antW6s8FgAAABM"]
[Thu Jul 30 09:56:34.013388 2026] [security2:error] [pid 2637702:tid 2637702] [client 51.68.111.216:10231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amsRwljsQitwqei4Mc7wRQAAAE4"]
[Thu Jul 30 09:56:34.094596 2026] [security2:error] [pid 2641371:tid 2641371] [client 94.154.43.177:22338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.eu"] [uri "/index.php"] [unique_id "amsRvrzDi7bAxSTb5kpA5wAAAAI"]
[Thu Jul 30 09:56:34.510732 2026] [security2:error] [pid 2642902:tid 2642902] [client 94.154.43.179:22336] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amsRvjrECJcqpnQkQsjEGQAAAD0"]
[Thu Jul 30 09:56:34.944163 2026] [ssl:error] [pid 2641791:tid 2641791] (EAI 2)Name or service not known: [client 144.76.19.72:44046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:34.944207 2026] [ssl:error] [pid 2641791:tid 2641791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:34.999198 2026] [ssl:error] [pid 2642908:tid 2642908] (EAI 2)Name or service not known: [client 144.76.19.72:44054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:34.999227 2026] [ssl:error] [pid 2642908:tid 2642908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:35.726514 2026] [ssl:error] [pid 2641839:tid 2641839] (70014)End of file found: [client 216.73.216.199:62145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:36.923815 2026] [security2:error] [pid 2642846:tid 2642846] [client 85.208.98.24:50202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/product/C"] [unique_id "amsRxN9rxtvY5d-zmdCdhAAAAB4"]
[Thu Jul 30 09:56:36.935196 2026] [ssl:error] [pid 2642788:tid 2642788] (70014)End of file found: [client 216.73.216.199:6367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:37.089757 2026] [security2:error] [pid 2641844:tid 2641844] [client 43.153.122.30:39356] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.co.uk"] [uri "/"] [unique_id "amsRxeAOfUDYJWq_uNeF1AAAACI"]
[Thu Jul 30 09:56:38.056130 2026] [ssl:error] [pid 2637684:tid 2637684] (EAI 2)Name or service not known: [client 144.76.19.72:44064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:38.056161 2026] [ssl:error] [pid 2637684:tid 2637684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:38.111889 2026] [ssl:error] [pid 2637584:tid 2637584] (EAI 2)Name or service not known: [client 144.76.19.72:44078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:38.111916 2026] [ssl:error] [pid 2637584:tid 2637584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:38.111927 2026] [security2:error] [pid 2642848:tid 2642848] [client 43.153.122.30:40662] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsRxnP_2Xt-c2uSBqPVDAAAACY"], referer: http://www.spamp.co.uk
[Thu Jul 30 09:56:38.175546 2026] [security2:error] [pid 2637702:tid 2637702] [client 74.207.234.148:53618] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "blow-hairstudio.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsRxljsQitwqei4Mc7wSAAAAE4"]
[Thu Jul 30 09:56:38.344145 2026] [core:crit] [pid 2641721:tid 2641721] (13)Permission denied: [client 216.73.216.199:38402] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/up2date/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/up2date/' is executable
[Thu Jul 30 09:56:38.344217 2026] [core:crit] [pid 2641721:tid 2641721] (13)Permission denied: [client 216.73.216.199:38402] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/cron.suspended/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/cron.suspended/' is executable
[Thu Jul 30 09:56:38.348658 2026] [core:crit] [pid 2641721:tid 2641721] (13)Permission denied: [client 216.73.216.199:38402] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/cron/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/cron/' is executable
[Thu Jul 30 09:56:38.348695 2026] [core:crit] [pid 2641721:tid 2641721] (13)Permission denied: [client 216.73.216.199:38402] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/at/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/spool/at/' is executable
[Thu Jul 30 09:56:39.382266 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:38626] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/apis/php.ini"] [unique_id "amsRx66KuX4rRscgdjLKlAAAAAo"]
[Thu Jul 30 09:56:39.382706 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:38626] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apis/php.ini"] [unique_id "amsRx66KuX4rRscgdjLKlAAAAAo"]
[Thu Jul 30 09:56:39.520051 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:38626] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRx66KuX4rRscgdjLKlAAAAAo"]
[Thu Jul 30 09:56:39.732892 2026] [security2:error] [pid 2641844:tid 2641844] [client 43.153.122.30:41850] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsRx-AOfUDYJWq_uNeF2QAAACI"], referer: http://spamp.com/
[Thu Jul 30 09:56:39.954798 2026] [ssl:error] [pid 2641721:tid 2641721] (70014)End of file found: [client 216.73.216.199:38402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:40.853429 2026] [authz_core:error] [pid 2637584:tid 2637584] [client 66.249.66.33:43394] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:56:40.856187 2026] [authz_core:error] [pid 2637584:tid 2637584] [client 66.249.66.33:43394] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:56:41.165637 2026] [ssl:error] [pid 2642844:tid 2642844] (EAI 2)Name or service not known: [client 144.76.19.72:30840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:41.165671 2026] [ssl:error] [pid 2642844:tid 2642844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:41.219267 2026] [ssl:error] [pid 2641839:tid 2641839] (EAI 2)Name or service not known: [client 144.76.19.72:30850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:41.219296 2026] [ssl:error] [pid 2641839:tid 2641839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:41.455615 2026] [core:error] [pid 2642895:tid 2642895] (13)Permission denied: [client 216.73.216.199:50143] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/subsystem/drivers/ec/uevent
[Thu Jul 30 09:56:41.531771 2026] [authz_core:error] [pid 2642844:tid 2642844] [client 57.141.0.69:39530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:56:41.532400 2026] [authz_core:error] [pid 2642844:tid 2642844] [client 57.141.0.69:39530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:56:42.358362 2026] [core:error] [pid 2642895:tid 2642895] (13)Permission denied: [client 216.73.216.199:50143] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty50/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 09:56:42.604643 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:38778] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app-order-client/.env"] [unique_id "amsRyu3fbkCzGaEVElxKywAAADE"]
[Thu Jul 30 09:56:42.604837 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:38778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app-order-client/.env"] [unique_id "amsRyu3fbkCzGaEVElxKywAAADE"]
[Thu Jul 30 09:56:42.748227 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:38778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRyu3fbkCzGaEVElxKywAAADE"]
[Thu Jul 30 09:56:42.784177 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:38784] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.bak"] [unique_id "amsRyluA8utF9-6bZmXfewAAACo"]
[Thu Jul 30 09:56:42.784456 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:38784] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.bak"] [unique_id "amsRyluA8utF9-6bZmXfewAAACo"]
[Thu Jul 30 09:56:42.929049 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:38784] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRyluA8utF9-6bZmXfewAAACo"]
[Thu Jul 30 09:56:42.966256 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:38790] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.dev"] [unique_id "amsRyuAOfUDYJWq_uNeF3wAAACI"]
[Thu Jul 30 09:56:42.966410 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:38790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.dev"] [unique_id "amsRyuAOfUDYJWq_uNeF3wAAACI"]
[Thu Jul 30 09:56:43.105567 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:38790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRyuAOfUDYJWq_uNeF3wAAACI"]
[Thu Jul 30 09:56:43.138972 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:38798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.dist"] [unique_id "amsRy6znh0IZ7zaGwps7iAAAACs"]
[Thu Jul 30 09:56:43.139159 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:38798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.dist"] [unique_id "amsRy6znh0IZ7zaGwps7iAAAACs"]
[Thu Jul 30 09:56:43.280332 2026] [security2:error] [pid 2629059:tid 2629059] [client 185.177.72.10:38798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRy6znh0IZ7zaGwps7iAAAACs"]
[Thu Jul 30 09:56:43.317650 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:38806] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.test"] [unique_id "amsRy-3fbkCzGaEVElxKzAAAADE"]
[Thu Jul 30 09:56:43.317833 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:38806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/.env.test"] [unique_id "amsRy-3fbkCzGaEVElxKzAAAADE"]
[Thu Jul 30 09:56:43.466616 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:38806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRy-3fbkCzGaEVElxKzAAAADE"]
[Thu Jul 30 09:56:43.599979 2026] [lsapi:warn] [pid 2642851:tid 2642851] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:56:43.770410 2026] [ssl:error] [pid 2642905:tid 2642905] (70014)End of file found: [client 216.73.216.199:38663] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:44.273469 2026] [ssl:error] [pid 2629059:tid 2629059] (EAI 2)Name or service not known: [client 144.76.19.72:30856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:44.273492 2026] [ssl:error] [pid 2629059:tid 2629059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:44.322447 2026] [authz_core:error] [pid 2624681:tid 2624681] [client 57.141.0.8:23614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:56:44.323157 2026] [authz_core:error] [pid 2624681:tid 2624681] [client 57.141.0.8:23614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:56:44.327812 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:30868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:44.327833 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:44.767203 2026] [ssl:error] [pid 2642895:tid 2642895] (70014)End of file found: [client 216.73.216.199:50143] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:44.908523 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:37102] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/client/.env"] [unique_id "amsRzELxYlQ9rOjGgkMw5gAAAEQ"]
[Thu Jul 30 09:56:44.908677 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:37102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/client/.env"] [unique_id "amsRzELxYlQ9rOjGgkMw5gAAAEQ"]
[Thu Jul 30 09:56:45.047012 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:37102] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRzELxYlQ9rOjGgkMw5gAAAEQ"]
[Thu Jul 30 09:56:45.081118 2026] [security2:error] [pid 2637653:tid 2637653] [client 185.177.72.10:37112] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amsRzZT_ydvYp89NZblQjwAAADw"]
[Thu Jul 30 09:56:45.081303 2026] [security2:error] [pid 2637653:tid 2637653] [client 185.177.72.10:37112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "amsRzZT_ydvYp89NZblQjwAAADw"]
[Thu Jul 30 09:56:45.224349 2026] [security2:error] [pid 2637653:tid 2637653] [client 185.177.72.10:37112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRzZT_ydvYp89NZblQjwAAADw"]
[Thu Jul 30 09:56:45.669866 2026] [ssl:error] [pid 2641791:tid 2641791] (70014)End of file found: [client 216.73.216.199:52553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:46.330125 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:37170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/config/dev/.env"] [unique_id "amsRzkLxYlQ9rOjGgkMw6AAAAEQ"]
[Thu Jul 30 09:56:46.330282 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:37170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/config/dev/.env"] [unique_id "amsRzkLxYlQ9rOjGgkMw6AAAAEQ"]
[Thu Jul 30 09:56:46.482304 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:37170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRzkLxYlQ9rOjGgkMw6AAAAEQ"]
[Thu Jul 30 09:56:47.043357 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:37194] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/config/parameters.yml"] [unique_id "amsRz6RybkvKjuCZFsP5lgAAAFM"]
[Thu Jul 30 09:56:47.043509 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:37194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/config/parameters.yml"] [unique_id "amsRz6RybkvKjuCZFsP5lgAAAFM"]
[Thu Jul 30 09:56:47.185476 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:37194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsRz6RybkvKjuCZFsP5lgAAAFM"]
[Thu Jul 30 09:56:47.382832 2026] [ssl:error] [pid 2640639:tid 2640639] (EAI 2)Name or service not known: [client 144.76.19.72:30880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:47.382871 2026] [ssl:error] [pid 2640639:tid 2640639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:47.437850 2026] [ssl:error] [pid 2637653:tid 2637653] (EAI 2)Name or service not known: [client 144.76.19.72:30884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:47.437888 2026] [ssl:error] [pid 2637653:tid 2637653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:49.761138 2026] [security2:error] [pid 2642846:tid 2642846] [client 185.177.72.10:37346] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app/frontend/.env"] [unique_id "amsR0d9rxtvY5d-zmdCdigAAAB4"]
[Thu Jul 30 09:56:49.761345 2026] [security2:error] [pid 2642846:tid 2642846] [client 185.177.72.10:37346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/frontend/.env"] [unique_id "amsR0d9rxtvY5d-zmdCdigAAAB4"]
[Thu Jul 30 09:56:49.875390 2026] [cgi:error] [pid 2642741:tid 2642741] [client 20.104.22.47:61588] AH02811: stderr from /home/familyja/public_html/nc/cgi-bin: script not found or unable to stat
[Thu Jul 30 09:56:49.900550 2026] [security2:error] [pid 2642846:tid 2642846] [client 185.177.72.10:37346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR0d9rxtvY5d-zmdCdigAAAB4"]
[Thu Jul 30 09:56:49.937404 2026] [authz_core:error] [pid 2642898:tid 2642898] [client 57.141.0.8:56284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:56:49.938031 2026] [authz_core:error] [pid 2642898:tid 2642898] [client 57.141.0.8:56284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:56:50.492899 2026] [ssl:error] [pid 2642849:tid 2642849] (EAI 2)Name or service not known: [client 144.76.19.72:57680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:50.492928 2026] [ssl:error] [pid 2642849:tid 2642849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:50.549458 2026] [ssl:error] [pid 2637684:tid 2637684] (EAI 2)Name or service not known: [client 144.76.19.72:57690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:50.549491 2026] [ssl:error] [pid 2637684:tid 2637684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:51.696442 2026] [ssl:error] [pid 2642741:tid 2642741] (70014)End of file found: [client 216.73.216.199:62037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:52.448681 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:37484] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/app/php.ini"] [unique_id "amsR1PmlxjveQUcDDF4lYQAAAC4"]
[Thu Jul 30 09:56:52.449029 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:37484] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app/php.ini"] [unique_id "amsR1PmlxjveQUcDDF4lYQAAAC4"]
[Thu Jul 30 09:56:52.590633 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:37484] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR1PmlxjveQUcDDF4lYQAAAC4"]
[Thu Jul 30 09:56:52.607693 2026] [core:error] [pid 2642845:tid 2642845] (13)Permission denied: [client 216.73.216.199:54156] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 09:56:53.450871 2026] [security2:error] [pid 2642898:tid 2642898] [client 47.128.98.91:40360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsR1TNZk_TMZxK8v2ORoAAAADM"]
[Thu Jul 30 09:56:53.608981 2026] [ssl:error] [pid 2642896:tid 2642896] (EAI 2)Name or service not known: [client 144.76.19.72:57706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:53.609009 2026] [ssl:error] [pid 2642896:tid 2642896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:53.666768 2026] [ssl:error] [pid 2637702:tid 2637702] (EAI 2)Name or service not known: [client 144.76.19.72:57718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:53.666798 2026] [ssl:error] [pid 2637702:tid 2637702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:54.159143 2026] [lsapi:warn] [pid 2625898:tid 2625898] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:56:54.847368 2026] [ssl:error] [pid 2642845:tid 2642845] (70014)End of file found: [client 216.73.216.199:54156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:55.964289 2026] [ssl:error] [pid 2641371:tid 2641371] (5)Input/output error: [client 216.73.216.199:60424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:56:56.135374 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:39652] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app1-static/.env"] [unique_id "amsR2K6KuX4rRscgdjLKnAAAAAo"]
[Thu Jul 30 09:56:56.135542 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:39652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app1-static/.env"] [unique_id "amsR2K6KuX4rRscgdjLKnAAAAAo"]
[Thu Jul 30 09:56:56.276141 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:39652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2K6KuX4rRscgdjLKnAAAAAo"]
[Thu Jul 30 09:56:56.310662 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:39658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app2-static/.env"] [unique_id "amsR2JoL8w3BzPER_zV8PQAAACQ"]
[Thu Jul 30 09:56:56.310848 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:39658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app2-static/.env"] [unique_id "amsR2JoL8w3BzPER_zV8PQAAACQ"]
[Thu Jul 30 09:56:56.455525 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:39658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2JoL8w3BzPER_zV8PQAAACQ"]
[Thu Jul 30 09:56:56.490498 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:39664] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app_dir/.env"] [unique_id "amsR2C56pRJ6BmSOOElaOgAAAAg"]
[Thu Jul 30 09:56:56.490703 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:39664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app_dir/.env"] [unique_id "amsR2C56pRJ6BmSOOElaOgAAAAg"]
[Thu Jul 30 09:56:56.633049 2026] [security2:error] [pid 2640305:tid 2640305] [client 185.177.72.10:39664] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2C56pRJ6BmSOOElaOgAAAAg"]
[Thu Jul 30 09:56:56.669200 2026] [security2:error] [pid 2642898:tid 2642898] [client 185.177.72.10:39680] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amsR2DNZk_TMZxK8v2ORpAAAADM"]
[Thu Jul 30 09:56:56.669402 2026] [security2:error] [pid 2642898:tid 2642898] [client 185.177.72.10:39680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/app_nginx_static_path/.env"] [unique_id "amsR2DNZk_TMZxK8v2ORpAAAADM"]
[Thu Jul 30 09:56:56.728582 2026] [ssl:error] [pid 2641844:tid 2641844] (EAI 2)Name or service not known: [client 144.76.19.72:57730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:56.728634 2026] [ssl:error] [pid 2641844:tid 2641844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:56.783144 2026] [ssl:error] [pid 2642851:tid 2642851] (EAI 2)Name or service not known: [client 144.76.19.72:57732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:56:56.783176 2026] [ssl:error] [pid 2642851:tid 2642851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:56:56.811174 2026] [security2:error] [pid 2642898:tid 2642898] [client 185.177.72.10:39680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2DNZk_TMZxK8v2ORpAAAADM"]
[Thu Jul 30 09:56:56.846932 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:39682] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/application.conf"] [unique_id "amsR2K6KuX4rRscgdjLKnQAAAAo"]
[Thu Jul 30 09:56:56.847268 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:39682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/application.conf"] [unique_id "amsR2K6KuX4rRscgdjLKnQAAAAo"]
[Thu Jul 30 09:56:56.985492 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:39682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2K6KuX4rRscgdjLKnQAAAAo"]
[Thu Jul 30 09:56:57.024887 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:39686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/application/.env"] [unique_id "amsR2S-FlZbtiRnhtvZNzwAAAEM"]
[Thu Jul 30 09:56:57.025039 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:39686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/application/.env"] [unique_id "amsR2S-FlZbtiRnhtvZNzwAAAEM"]
[Thu Jul 30 09:56:57.163577 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:39686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2S-FlZbtiRnhtvZNzwAAAEM"]
[Thu Jul 30 09:56:57.196992 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39698] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/application/configs/application.ini"] [unique_id "amsR2b0K2JrWLOe59h9gEgAAAAY"]
[Thu Jul 30 09:56:57.197346 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39698] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/application/configs/application.ini"] [unique_id "amsR2b0K2JrWLOe59h9gEgAAAAY"]
[Thu Jul 30 09:56:57.335082 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39698] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2b0K2JrWLOe59h9gEgAAAAY"]
[Thu Jul 30 09:56:57.368264 2026] [authz_core:error] [pid 2642851:tid 2642851] [client 57.141.0.52:27410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:56:57.368882 2026] [authz_core:error] [pid 2642851:tid 2642851] [client 57.141.0.52:27410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:56:57.549779 2026] [security2:error] [pid 2642692:tid 2642692] [client 185.177.72.10:39724] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/apps/client/.env"] [unique_id "amsR2fvvhd5vlx15qOYTUgAAAAA"]
[Thu Jul 30 09:56:57.549995 2026] [security2:error] [pid 2642692:tid 2642692] [client 185.177.72.10:39724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/apps/client/.env"] [unique_id "amsR2fvvhd5vlx15qOYTUgAAAAA"]
[Thu Jul 30 09:56:57.689493 2026] [security2:error] [pid 2642692:tid 2642692] [client 185.177.72.10:39724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2fvvhd5vlx15qOYTUgAAAAA"]
[Thu Jul 30 09:56:57.762717 2026] [security2:error] [pid 2642898:tid 2642898] [client 114.119.146.111:38293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/jigsaw-childrens-ministry/"] [unique_id "amsR2TNZk_TMZxK8v2ORpgAAADM"], referer: http://www.erskinenazarene.co.uk/event/jigsaw-childrens-ministry/?instance_id=36101
[Thu Jul 30 09:56:57.800510 2026] [core:error] [pid 2637702:tid 2637702] [client 66.249.66.196:44759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:56:57.800533 2026] [core:error] [pid 2637702:tid 2637702] [client 66.249.66.196:44759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:56:57.801757 2026] [core:error] [pid 2628120:tid 2628120] [client 66.249.66.169:47934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:56:57.801777 2026] [core:error] [pid 2628120:tid 2628120] [client 66.249.66.169:47934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:56:57.913832 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:39746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/asset_img/.env"] [unique_id "amsR2Q0xskC6cuJ-PDXjagAAADY"]
[Thu Jul 30 09:56:57.914023 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:39746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/asset_img/.env"] [unique_id "amsR2Q0xskC6cuJ-PDXjagAAADY"]
[Thu Jul 30 09:56:58.057676 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:39746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2Q0xskC6cuJ-PDXjagAAADY"]
[Thu Jul 30 09:56:58.266780 2026] [security2:error] [pid 2637702:tid 2637702] [client 74.7.227.21:43578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.loca.sijames.com"] [uri "/"] [unique_id "amsR2ljsQitwqei4Mc7wUwAAAE4"]
[Thu Jul 30 09:56:58.799264 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:39784] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/audio/.env"] [unique_id "amsR2i-FlZbtiRnhtvZN0gAAAEM"]
[Thu Jul 30 09:56:58.799418 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:39784] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/audio/.env"] [unique_id "amsR2i-FlZbtiRnhtvZN0gAAAEM"]
[Thu Jul 30 09:56:58.940913 2026] [security2:error] [pid 2637685:tid 2637685] [client 185.177.72.10:39784] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR2i-FlZbtiRnhtvZN0gAAAEM"]
[Thu Jul 30 09:56:59.323782 2026] [security2:error] [pid 2637685:tid 2637685] [client 114.119.146.111:38297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/jigsaw-childrens-ministry/"] [unique_id "amsR2y-FlZbtiRnhtvZN0wAAAEM"], referer: http://www.erskinenazarene.co.uk/event/jigsaw-childrens-ministry/?instance_id=36101
[Thu Jul 30 09:56:59.594295 2026] [core:error] [pid 2641846:tid 2641846] (13)Permission denied: [client 216.73.216.199:20732] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/firmware/acpi/tables/DSDT
[Thu Jul 30 09:56:59.894840 2026] [core:error] [pid 2641846:tid 2641846] (13)Permission denied: [client 216.73.216.199:20732] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/orgent.be.db
[Thu Jul 30 09:57:00.131192 2026] [ssl:error] [pid 2644678:tid 2644678] (EAI 2)Name or service not known: [client 144.76.19.72:50166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:00.131221 2026] [ssl:error] [pid 2644678:tid 2644678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:00.192190 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:50178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:00.192217 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:00.502313 2026] [ssl:error] [pid 2641846:tid 2641846] (70014)End of file found: [client 216.73.216.199:20732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:01.329220 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:39886] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/awstats/.env"] [unique_id "amsR3atq9IZf4m9o66UWbQAAABQ"]
[Thu Jul 30 09:57:01.329424 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:39886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/awstats/.env"] [unique_id "amsR3atq9IZf4m9o66UWbQAAABQ"]
[Thu Jul 30 09:57:01.470093 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:39886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3atq9IZf4m9o66UWbQAAABQ"]
[Thu Jul 30 09:57:01.679542 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:39904] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amsR3XUvt_1QRd57dE9UtwAAAAw"]
[Thu Jul 30 09:57:01.679688 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:39904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "amsR3XUvt_1QRd57dE9UtwAAAAw"]
[Thu Jul 30 09:57:01.820317 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:39904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3XUvt_1QRd57dE9UtwAAAAw"]
[Thu Jul 30 09:57:01.854934 2026] [security2:error] [pid 2642741:tid 2642741] [client 185.177.72.10:39916] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amsR3eITKSQWaJMTYmEUlQAAAAc"]
[Thu Jul 30 09:57:01.855155 2026] [security2:error] [pid 2642741:tid 2642741] [client 185.177.72.10:39916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "amsR3eITKSQWaJMTYmEUlQAAAAc"]
[Thu Jul 30 09:57:02.006739 2026] [security2:error] [pid 2642741:tid 2642741] [client 185.177.72.10:39916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3eITKSQWaJMTYmEUlQAAAAc"]
[Thu Jul 30 09:57:02.022106 2026] [security2:error] [pid 2637652:tid 2637652] [client 216.73.216.199:10023] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/vconsole.conf"] [unique_id "amsR3ve6kgva7vVQtaGI7QAAADk"]
[Thu Jul 30 09:57:02.022388 2026] [security2:error] [pid 2637652:tid 2637652] [client 216.73.216.199:10023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/vconsole.conf"] [unique_id "amsR3ve6kgva7vVQtaGI7QAAADk"]
[Thu Jul 30 09:57:02.022818 2026] [security2:error] [pid 2637652:tid 2637652] [client 216.73.216.199:10023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/vconsole.conf"] [unique_id "amsR3ve6kgva7vVQtaGI7QAAADk"]
[Thu Jul 30 09:57:02.045538 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39920] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amsR3r0K2JrWLOe59h9gGAAAAAY"]
[Thu Jul 30 09:57:02.045751 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39920] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "amsR3r0K2JrWLOe59h9gGAAAAAY"]
[Thu Jul 30 09:57:02.185467 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39920] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3r0K2JrWLOe59h9gGAAAAAY"]
[Thu Jul 30 09:57:02.222040 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:39928] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amsR3qtq9IZf4m9o66UWbgAAABQ"]
[Thu Jul 30 09:57:02.222196 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:39928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "amsR3qtq9IZf4m9o66UWbgAAABQ"]
[Thu Jul 30 09:57:02.361805 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:39928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3qtq9IZf4m9o66UWbgAAABQ"]
[Thu Jul 30 09:57:02.395779 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:39936] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amsR3rzDi7bAxSTb5kpA-QAAAAI"]
[Thu Jul 30 09:57:02.395924 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:39936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "amsR3rzDi7bAxSTb5kpA-QAAAAI"]
[Thu Jul 30 09:57:02.544668 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:39936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3rzDi7bAxSTb5kpA-QAAAAI"]
[Thu Jul 30 09:57:02.581909 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:39938] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amsR3mjWdiBXMMEujLKI4AAAAEg"]
[Thu Jul 30 09:57:02.582109 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:39938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "amsR3mjWdiBXMMEujLKI4AAAAEg"]
[Thu Jul 30 09:57:02.724853 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:39938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3mjWdiBXMMEujLKI4AAAAEg"]
[Thu Jul 30 09:57:02.760539 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:39948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amsR3rzDi7bAxSTb5kpA-gAAAAI"]
[Thu Jul 30 09:57:02.760705 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:39948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "amsR3rzDi7bAxSTb5kpA-gAAAAI"]
[Thu Jul 30 09:57:02.902455 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:39948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3rzDi7bAxSTb5kpA-gAAAAI"]
[Thu Jul 30 09:57:02.928434 2026] [ssl:error] [pid 2637652:tid 2637652] (70014)End of file found: [client 216.73.216.199:10023] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:02.936379 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:39960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/back-end/app/.env"] [unique_id "amsR3mjWdiBXMMEujLKI4QAAAEg"]
[Thu Jul 30 09:57:02.936515 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:39960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/back-end/app/.env"] [unique_id "amsR3mjWdiBXMMEujLKI4QAAAEg"]
[Thu Jul 30 09:57:03.076746 2026] [security2:error] [pid 2642908:tid 2642908] [client 185.177.72.10:39960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR3mjWdiBXMMEujLKI4QAAAEg"]
[Thu Jul 30 09:57:03.112606 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39962] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/back/.env.bak"] [unique_id "amsR370K2JrWLOe59h9gGgAAAAY"]
[Thu Jul 30 09:57:03.112785 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39962] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/back/.env.bak"] [unique_id "amsR370K2JrWLOe59h9gGgAAAAY"]
[Thu Jul 30 09:57:03.256918 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:39962] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR370K2JrWLOe59h9gGgAAAAY"]
[Thu Jul 30 09:57:03.297836 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:39974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/back/.env.dev"] [unique_id "amsR33Uvt_1QRd57dE9UuQAAAAw"]
[Thu Jul 30 09:57:03.297967 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:39974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/back/.env.dev"] [unique_id "amsR33Uvt_1QRd57dE9UuQAAAAw"]
[Thu Jul 30 09:57:03.306996 2026] [ssl:error] [pid 2637685:tid 2637685] (EAI 2)Name or service not known: [client 144.76.19.72:50180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:03.307019 2026] [ssl:error] [pid 2637685:tid 2637685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:03.368871 2026] [ssl:error] [pid 2642741:tid 2642741] (EAI 2)Name or service not known: [client 144.76.19.72:50188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:03.368907 2026] [ssl:error] [pid 2642741:tid 2642741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:03.442139 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:39974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR33Uvt_1QRd57dE9UuQAAAAw"]
[Thu Jul 30 09:57:03.477898 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:39988] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/back/.env.dist"] [unique_id "amsR34W_fWF6QfgPXMIpeAAAAA8"]
[Thu Jul 30 09:57:03.478092 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:39988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/back/.env.dist"] [unique_id "amsR34W_fWF6QfgPXMIpeAAAAA8"]
[Thu Jul 30 09:57:03.533276 2026] [ssl:error] [pid 2642908:tid 2642908] (70014)End of file found: [client 216.73.216.199:16753] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:03.615176 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:39988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR34W_fWF6QfgPXMIpeAAAAA8"]
[Thu Jul 30 09:57:04.386691 2026] [core:error] [pid 2642692:tid 2642692] [client 66.249.66.167:50907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:57:04.386716 2026] [core:error] [pid 2642692:tid 2642692] [client 66.249.66.167:50907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:57:04.664537 2026] [authz_core:error] [pid 2642742:tid 2642742] [client 57.141.0.70:23964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:04.665164 2026] [authz_core:error] [pid 2642742:tid 2642742] [client 57.141.0.70:23964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:04.875848 2026] [lsapi:warn] [pid 2641371:tid 2641371] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:57:05.044294 2026] [security2:error] [pid 2641791:tid 2641791] [client 213.230.92.224:45982] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsR4dHOC4vvbRc8Hei6EgAAABg"]
[Thu Jul 30 09:57:05.044353 2026] [security2:error] [pid 2641791:tid 2641791] [client 213.230.92.224:45982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsR4dHOC4vvbRc8Hei6EgAAABg"]
[Thu Jul 30 09:57:05.044614 2026] [security2:error] [pid 2641791:tid 2641791] [client 213.230.92.224:45982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsR4dHOC4vvbRc8Hei6EgAAABg"]
[Thu Jul 30 09:57:05.190915 2026] [authz_core:error] [pid 2642845:tid 2642845] [client 57.141.0.29:23302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:05.191542 2026] [authz_core:error] [pid 2642845:tid 2642845] [client 57.141.0.29:23302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:06.439493 2026] [ssl:error] [pid 2642901:tid 2642901] (EAI 2)Name or service not known: [client 144.76.19.72:50202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:06.439544 2026] [ssl:error] [pid 2642901:tid 2642901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:06.496554 2026] [ssl:error] [pid 2637702:tid 2637702] (EAI 2)Name or service not known: [client 144.76.19.72:50212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:06.496585 2026] [ssl:error] [pid 2637702:tid 2637702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:07.320689 2026] [security2:error] [pid 2629059:tid 2629059] [client 78.190.176.102:14360] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsR46znh0IZ7zaGwps7lAAAACs"]
[Thu Jul 30 09:57:07.320738 2026] [security2:error] [pid 2629059:tid 2629059] [client 78.190.176.102:14360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsR46znh0IZ7zaGwps7lAAAACs"]
[Thu Jul 30 09:57:07.320986 2026] [security2:error] [pid 2629059:tid 2629059] [client 78.190.176.102:14360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsR46znh0IZ7zaGwps7lAAAACs"]
[Thu Jul 30 09:57:07.778306 2026] [authz_core:error] [pid 2642742:tid 2642742] [client 216.73.216.199:1377] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core32/Poly1305/error_log
[Thu Jul 30 09:57:09.547861 2026] [authz_core:error] [pid 2637685:tid 2637685] [client 57.141.0.70:40128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:09.548476 2026] [authz_core:error] [pid 2637685:tid 2637685] [client 57.141.0.70:40128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:09.549963 2026] [ssl:error] [pid 2642897:tid 2642897] (EAI 2)Name or service not known: [client 144.76.19.72:50226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:09.549982 2026] [ssl:error] [pid 2642897:tid 2642897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:09.603047 2026] [ssl:error] [pid 2637584:tid 2637584] (EAI 2)Name or service not known: [client 144.76.19.72:62748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:09.603093 2026] [ssl:error] [pid 2637584:tid 2637584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:09.650100 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:11214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/back/php.ini"] [unique_id "amsR5T02YtZ-iv7LRwF1MQAAADs"]
[Thu Jul 30 09:57:09.650392 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:11214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/back/php.ini"] [unique_id "amsR5T02YtZ-iv7LRwF1MQAAADs"]
[Thu Jul 30 09:57:09.787378 2026] [security2:error] [pid 2642901:tid 2642901] [client 185.177.72.10:11214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR5T02YtZ-iv7LRwF1MQAAADs"]
[Thu Jul 30 09:57:09.883445 2026] [core:error] [pid 2642742:tid 2642742] (13)Permission denied: [client 216.73.216.199:1377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/sharonduggal.com.db
[Thu Jul 30 09:57:10.664086 2026] [security2:error] [pid 2628120:tid 2628120] [client 202.152.43.238:49984] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsR5iqCrh0o4antW6s8tQAAABM"]
[Thu Jul 30 09:57:10.664138 2026] [security2:error] [pid 2628120:tid 2628120] [client 202.152.43.238:49984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsR5iqCrh0o4antW6s8tQAAABM"]
[Thu Jul 30 09:57:10.664379 2026] [security2:error] [pid 2628120:tid 2628120] [client 202.152.43.238:49984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsR5iqCrh0o4antW6s8tQAAABM"]
[Thu Jul 30 09:57:10.673451 2026] [security2:error] [pid 2629059:tid 2629059] [client 74.7.241.63:60746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amsR5qznh0IZ7zaGwps7mgAAACs"]
[Thu Jul 30 09:57:11.087985 2026] [ssl:error] [pid 2642908:tid 2642908] (70014)End of file found: [client 216.73.216.199:16103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:11.388712 2026] [ssl:error] [pid 2642742:tid 2642742] (70014)End of file found: [client 216.73.216.199:1377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:11.688309 2026] [authz_core:error] [pid 2645423:tid 2645423] [client 57.141.0.36:38702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:11.688954 2026] [authz_core:error] [pid 2645423:tid 2645423] [client 57.141.0.36:38702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:12.658816 2026] [ssl:error] [pid 2645465:tid 2645465] (EAI 2)Name or service not known: [client 144.76.19.72:62764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:12.658862 2026] [ssl:error] [pid 2645465:tid 2645465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:12.715544 2026] [ssl:error] [pid 2642896:tid 2642896] (EAI 2)Name or service not known: [client 144.76.19.72:62774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:12.715574 2026] [ssl:error] [pid 2642896:tid 2642896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:12.960976 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:11386] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backend/.env.bak"] [unique_id "amsR6PmlxjveQUcDDF4lbAAAAC4"]
[Thu Jul 30 09:57:12.961125 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:11386] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backend/.env.bak"] [unique_id "amsR6PmlxjveQUcDDF4lbAAAAC4"]
[Thu Jul 30 09:57:13.098634 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:11386] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR6PmlxjveQUcDDF4lbAAAAC4"]
[Thu Jul 30 09:57:13.136115 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:11390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backend/.env.dev"] [unique_id "amsR6dHOC4vvbRc8Hei6GQAAABg"]
[Thu Jul 30 09:57:13.136298 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:11390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backend/.env.dev"] [unique_id "amsR6dHOC4vvbRc8Hei6GQAAABg"]
[Thu Jul 30 09:57:13.277515 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:11390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR6dHOC4vvbRc8Hei6GQAAABg"]
[Thu Jul 30 09:57:13.313288 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:11402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backend/.env.dist"] [unique_id "amsR6XUvt_1QRd57dE9UwwAAAAw"]
[Thu Jul 30 09:57:13.313542 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:11402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backend/.env.dist"] [unique_id "amsR6XUvt_1QRd57dE9UwwAAAAw"]
[Thu Jul 30 09:57:13.454954 2026] [security2:error] [pid 2641402:tid 2641402] [client 185.177.72.10:11402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR6XUvt_1QRd57dE9UwwAAAAw"]
[Thu Jul 30 09:57:13.802717 2026] [ssl:error] [pid 2641844:tid 2641844] (70014)End of file found: [client 216.73.216.199:17738] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:13.892111 2026] [access_compat:error] [pid 2645508:tid 2645508] [client 94.154.43.185:36336] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/.env
[Thu Jul 30 09:57:13.892308 2026] [access_compat:error] [pid 2645508:tid 2645508] [client 94.154.43.185:36336] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 09:57:13.905318 2026] [security2:error] [pid 2645509:tid 2645509] [client 94.154.43.178:45716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.static3.alism.com"] [uri "/.env"] [unique_id "amsR6S9F4ZNnIPCAvAQNsAAAAA0"]
[Thu Jul 30 09:57:13.905550 2026] [security2:error] [pid 2645509:tid 2645509] [client 94.154.43.178:45716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.static3.alism.com"] [uri "/.env"] [unique_id "amsR6S9F4ZNnIPCAvAQNsAAAAA0"]
[Thu Jul 30 09:57:13.905862 2026] [security2:error] [pid 2645509:tid 2645509] [client 94.154.43.178:45716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.static3.alism.com"] [uri "/.env"] [unique_id "amsR6S9F4ZNnIPCAvAQNsAAAAA0"]
[Thu Jul 30 09:57:15.723851 2026] [lsapi:warn] [pid 2642905:tid 2642905] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:57:15.768756 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:62776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:15.768784 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:15.824895 2026] [ssl:error] [pid 2645179:tid 2645179] (EAI 2)Name or service not known: [client 144.76.19.72:62784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:15.824932 2026] [ssl:error] [pid 2645179:tid 2645179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:16.423503 2026] [ssl:error] [pid 2641791:tid 2641791] (70014)End of file found: [client 216.73.216.199:3675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:18.576661 2026] [authz_core:error] [pid 2642848:tid 2642848] [client 57.141.0.63:58664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:18.577288 2026] [authz_core:error] [pid 2642848:tid 2642848] [client 57.141.0.63:58664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:18.643959 2026] [ssl:error] [pid 2641845:tid 2641845] (70014)End of file found: [client 216.73.216.199:13056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:18.879899 2026] [ssl:error] [pid 2641371:tid 2641371] (EAI 2)Name or service not known: [client 144.76.19.72:62786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:18.879932 2026] [ssl:error] [pid 2641371:tid 2641371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:18.932556 2026] [ssl:error] [pid 2642905:tid 2642905] (EAI 2)Name or service not known: [client 144.76.19.72:62790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:18.932607 2026] [ssl:error] [pid 2642905:tid 2642905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:19.566149 2026] [ssl:error] [pid 2642789:tid 2642789] (70014)End of file found: [client 216.73.216.199:22209] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:19.640300 2026] [security2:error] [pid 2642905:tid 2642905] [client 85.208.96.197:55904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns1.ns-narvi.com"] [uri "/robots.txt"] [unique_id "amsR72_iGhhiLx4XlQPV1QAAAEE"]
[Thu Jul 30 09:57:20.484229 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:24556] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/backend/php.ini"] [unique_id "amsR8Pe6kgva7vVQtaGI-AAAADk"]
[Thu Jul 30 09:57:20.484628 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:24556] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backend/php.ini"] [unique_id "amsR8Pe6kgva7vVQtaGI-AAAADk"]
[Thu Jul 30 09:57:20.622551 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:24556] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR8Pe6kgva7vVQtaGI-AAAADk"]
[Thu Jul 30 09:57:21.368889 2026] [authz_core:error] [pid 2641844:tid 2641844] [client 66.249.66.33:43921] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:57:21.371585 2026] [authz_core:error] [pid 2641844:tid 2641844] [client 66.249.66.33:43921] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:57:21.984923 2026] [ssl:error] [pid 2637648:tid 2637648] (EAI 2)Name or service not known: [client 144.76.19.72:37074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:21.984953 2026] [ssl:error] [pid 2637648:tid 2637648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:22.039265 2026] [ssl:error] [pid 2642851:tid 2642851] (EAI 2)Name or service not known: [client 144.76.19.72:37078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:22.039292 2026] [ssl:error] [pid 2642851:tid 2642851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:22.609477 2026] [ssl:error] [pid 2641791:tid 2641791] (70014)End of file found: [client 216.73.216.199:29923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:23.269869 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:24684] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backend/src/.env"] [unique_id "amsR85oL8w3BzPER_zV8UwAAACQ"]
[Thu Jul 30 09:57:23.270043 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:24684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backend/src/.env"] [unique_id "amsR85oL8w3BzPER_zV8UwAAACQ"]
[Thu Jul 30 09:57:23.428300 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:24684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR85oL8w3BzPER_zV8UwAAACQ"]
[Thu Jul 30 09:57:24.735026 2026] [security2:error] [pid 2645179:tid 2645179] [client 185.177.72.10:24738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backendfinaltest/.env"] [unique_id "amsR9ES2FQOZrI2hwskEAwAAAAE"]
[Thu Jul 30 09:57:24.735190 2026] [security2:error] [pid 2645179:tid 2645179] [client 185.177.72.10:24738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backendfinaltest/.env"] [unique_id "amsR9ES2FQOZrI2hwskEAwAAAAE"]
[Thu Jul 30 09:57:24.873987 2026] [security2:error] [pid 2645179:tid 2645179] [client 185.177.72.10:24738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9ES2FQOZrI2hwskEAwAAAAE"]
[Thu Jul 30 09:57:24.912603 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:17966] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /backup.wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup.wp-config.php"] [unique_id "amsR9Pe6kgva7vVQtaGI_QAAADk"]
[Thu Jul 30 09:57:24.912791 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:17966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup.wp-config.php"] [unique_id "amsR9Pe6kgva7vVQtaGI_QAAADk"]
[Thu Jul 30 09:57:25.059264 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:17966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9Pe6kgva7vVQtaGI_QAAADk"]
[Thu Jul 30 09:57:25.094571 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:17974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.bak"] [unique_id "amsR9ZoL8w3BzPER_zV8VgAAACQ"]
[Thu Jul 30 09:57:25.094724 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:17974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.bak"] [unique_id "amsR9ZoL8w3BzPER_zV8VgAAACQ"]
[Thu Jul 30 09:57:25.095240 2026] [ssl:error] [pid 2642789:tid 2642789] (EAI 2)Name or service not known: [client 144.76.19.72:37090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:25.095264 2026] [ssl:error] [pid 2642789:tid 2642789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:25.151230 2026] [ssl:error] [pid 2645508:tid 2645508] (EAI 2)Name or service not known: [client 144.76.19.72:37100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:25.151268 2026] [ssl:error] [pid 2645508:tid 2645508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:25.241497 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:17974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9ZoL8w3BzPER_zV8VgAAACQ"]
[Thu Jul 30 09:57:25.277954 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:17982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.dev"] [unique_id "amsR9YW_fWF6QfgPXMIp2wAAAA8"]
[Thu Jul 30 09:57:25.278167 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:17982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.dev"] [unique_id "amsR9YW_fWF6QfgPXMIp2wAAAA8"]
[Thu Jul 30 09:57:25.430911 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:17982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9YW_fWF6QfgPXMIp2wAAAA8"]
[Thu Jul 30 09:57:25.468016 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:17984] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.dist"] [unique_id "amsR9SA5I1nMSfJA2UnYhwAAACM"]
[Thu Jul 30 09:57:25.468214 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:17984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.dist"] [unique_id "amsR9SA5I1nMSfJA2UnYhwAAACM"]
[Thu Jul 30 09:57:25.607904 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:17984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9SA5I1nMSfJA2UnYhwAAACM"]
[Thu Jul 30 09:57:25.642888 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:17992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.local"] [unique_id "amsR9SGRHSAq2-9F29gSpQAAAAs"]
[Thu Jul 30 09:57:25.643101 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:17992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.local"] [unique_id "amsR9SGRHSAq2-9F29gSpQAAAAs"]
[Thu Jul 30 09:57:25.790371 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:17992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9SGRHSAq2-9F29gSpQAAAAs"]
[Thu Jul 30 09:57:25.826387 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:17998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.production"] [unique_id "amsR9e3fbkCzGaEVElxK3wAAADE"]
[Thu Jul 30 09:57:25.826534 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:17998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.production"] [unique_id "amsR9e3fbkCzGaEVElxK3wAAADE"]
[Thu Jul 30 09:57:25.974362 2026] [security2:error] [pid 2637841:tid 2637841] [client 185.177.72.10:17998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9e3fbkCzGaEVElxK3wAAADE"]
[Thu Jul 30 09:57:26.010946 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:18002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.staging"] [unique_id "amsR9uAOfUDYJWq_uNeF9wAAACI"]
[Thu Jul 30 09:57:26.011144 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:18002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/.env.staging"] [unique_id "amsR9uAOfUDYJWq_uNeF9wAAACI"]
[Thu Jul 30 09:57:26.150280 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:18002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9uAOfUDYJWq_uNeF9wAAACI"]
[Thu Jul 30 09:57:26.358934 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:18018] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /backup/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/.git/config"] [unique_id "amsR9qtq9IZf4m9o66UWhgAAABQ"]
[Thu Jul 30 09:57:26.359138 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:18018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/.git/config"] [unique_id "amsR9qtq9IZf4m9o66UWhgAAABQ"]
[Thu Jul 30 09:57:26.390662 2026] [lsapi:warn] [pid 2642742:tid 2642742] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:57:26.497925 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:18018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR9qtq9IZf4m9o66UWhgAAABQ"]
[Thu Jul 30 09:57:27.241220 2026] [security2:error] [pid 2640639:tid 2640639] [client 185.177.72.10:18062] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amsR94yyXZV23mJ8J5x2eAAAAAk"]
[Thu Jul 30 09:57:27.241610 2026] [security2:error] [pid 2640639:tid 2640639] [client 185.177.72.10:18062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/App_Config/ConnectionStrings.config"] [unique_id "amsR94yyXZV23mJ8J5x2eAAAAAk"]
[Thu Jul 30 09:57:27.380307 2026] [security2:error] [pid 2640639:tid 2640639] [client 185.177.72.10:18062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR94yyXZV23mJ8J5x2eAAAAAk"]
[Thu Jul 30 09:57:27.397409 2026] [core:error] [pid 2642789:tid 2642789] (13)Permission denied: [client 216.73.216.199:56284] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS2/close_delay
[Thu Jul 30 09:57:28.208210 2026] [ssl:error] [pid 2640639:tid 2640639] (EAI 2)Name or service not known: [client 144.76.19.72:37114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:28.208240 2026] [ssl:error] [pid 2640639:tid 2640639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:28.264510 2026] [ssl:error] [pid 2641844:tid 2641844] (EAI 2)Name or service not known: [client 144.76.19.72:37130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:28.264541 2026] [ssl:error] [pid 2641844:tid 2641844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:28.464922 2026] [ssl:error] [pid 2624435:tid 2624435] (70014)End of file found: [client 216.73.216.199:43075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:28.767831 2026] [core:error] [pid 2642789:tid 2642789] (13)Permission denied: [client 216.73.216.199:56284] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-256/slabs_cpu_partial
[Thu Jul 30 09:57:29.898656 2026] [authz_core:error] [pid 2642897:tid 2642897] [client 57.141.0.41:38136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:29.899276 2026] [authz_core:error] [pid 2642897:tid 2642897] [client 57.141.0.41:38136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:30.870714 2026] [security2:error] [pid 2642897:tid 2642897] [client 185.191.171.4:41390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/vesna-vulovic-cause-of-death"] [unique_id "amsR-gBDiiyW3ogUkAlIxAAAAC8"]
[Thu Jul 30 09:57:31.320209 2026] [ssl:error] [pid 2642851:tid 2642851] (EAI 2)Name or service not known: [client 144.76.19.72:48262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:31.320251 2026] [ssl:error] [pid 2642851:tid 2642851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:31.375837 2026] [ssl:error] [pid 2637652:tid 2637652] (EAI 2)Name or service not known: [client 144.76.19.72:48268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:31.375867 2026] [ssl:error] [pid 2637652:tid 2637652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:32.159053 2026] [core:error] [pid 2642789:tid 2642789] (13)Permission denied: [client 216.73.216.199:56284] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_vcpu/store_user
[Thu Jul 30 09:57:33.034121 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:32008] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2508166.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.b8a5d8f0.tmp
[Thu Jul 30 09:57:33.636570 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:32008] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2207978.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.84df1fc1.tmp
[Thu Jul 30 09:57:33.937331 2026] [ssl:error] [pid 2641791:tid 2641791] (70014)End of file found: [client 216.73.216.199:32008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:34.431250 2026] [ssl:error] [pid 2642741:tid 2642741] (EAI 2)Name or service not known: [client 144.76.19.72:48270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:34.431282 2026] [ssl:error] [pid 2642741:tid 2642741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:34.485579 2026] [ssl:error] [pid 2633745:tid 2633745] (EAI 2)Name or service not known: [client 144.76.19.72:48280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:34.485624 2026] [ssl:error] [pid 2633745:tid 2633745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:34.866739 2026] [authz_core:error] [pid 2646365:tid 2646365] [client 57.141.0.9:43684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:34.867386 2026] [authz_core:error] [pid 2646365:tid 2646365] [client 57.141.0.9:43684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:35.211983 2026] [authz_core:error] [pid 2637682:tid 2637682] [client 66.249.66.33:55981] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:57:35.214644 2026] [authz_core:error] [pid 2637682:tid 2637682] [client 66.249.66.33:55981] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:57:35.744566 2026] [ssl:error] [pid 2642789:tid 2642789] (70014)End of file found: [client 216.73.216.199:56284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:35.927993 2026] [security2:error] [pid 2633745:tid 2633745] [client 185.177.72.10:45062] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/backup/laravel.log"] [unique_id "amsR_7FDknH9BmgMWJbGjgAAAA4"]
[Thu Jul 30 09:57:35.928386 2026] [security2:error] [pid 2633745:tid 2633745] [client 185.177.72.10:45062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/laravel.log"] [unique_id "amsR_7FDknH9BmgMWJbGjgAAAA4"]
[Thu Jul 30 09:57:36.050470 2026] [ssl:error] [pid 2637841:tid 2637841] (70014)End of file found: [client 216.73.216.199:23757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:36.090694 2026] [security2:error] [pid 2633745:tid 2633745] [client 185.177.72.10:45062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsR_7FDknH9BmgMWJbGjgAAAA4"]
[Thu Jul 30 09:57:36.747926 2026] [authz_core:error] [pid 2633745:tid 2633745] [client 57.141.0.61:32510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:36.748567 2026] [authz_core:error] [pid 2633745:tid 2633745] [client 57.141.0.61:32510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:37.055533 2026] [lsapi:warn] [pid 2637686:tid 2637686] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:57:37.556373 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:48296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:37.556412 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:37.615998 2026] [ssl:error] [pid 2636409:tid 2636409] (EAI 2)Name or service not known: [client 144.76.19.72:48310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:37.616027 2026] [ssl:error] [pid 2636409:tid 2636409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:40.362630 2026] [core:error] [pid 2642848:tid 2642848] [client 66.249.66.66:62165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:57:40.362664 2026] [core:error] [pid 2642848:tid 2642848] [client 66.249.66.66:62165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:57:40.672022 2026] [ssl:error] [pid 2641791:tid 2641791] (EAI 2)Name or service not known: [client 144.76.19.72:56196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:40.672047 2026] [ssl:error] [pid 2641791:tid 2641791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:40.726720 2026] [ssl:error] [pid 2646483:tid 2646483] (EAI 2)Name or service not known: [client 144.76.19.72:56198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:40.726753 2026] [ssl:error] [pid 2646483:tid 2646483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:40.817936 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:45346] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/backup/php.ini"] [unique_id "amsSBFgVrr9daLoI-iQyUQAAACE"]
[Thu Jul 30 09:57:40.818311 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:45346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/php.ini"] [unique_id "amsSBFgVrr9daLoI-iQyUQAAACE"]
[Thu Jul 30 09:57:40.957756 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:45346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSBFgVrr9daLoI-iQyUQAAACE"]
[Thu Jul 30 09:57:41.068566 2026] [authz_core:error] [pid 2646442:tid 2646442] [client 130.12.182.254:2682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:41.069227 2026] [authz_core:error] [pid 2646442:tid 2646442] [client 130.12.182.254:2682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:42.975803 2026] [core:error] [pid 2642897:tid 2642897] (13)Permission denied: [client 216.73.216.199:60691] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/118708.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.aa55fde7.tmp
[Thu Jul 30 09:57:43.212828 2026] [authz_core:error] [pid 2640698:tid 2640698] [client 4.185.41.66:5118] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 09:57:43.214477 2026] [access_compat:error] [pid 2640698:tid 2640698] [client 4.185.41.66:5118] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 09:57:43.216614 2026] [access_compat:error] [pid 2640698:tid 2640698] [client 4.185.41.66:5118] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 09:57:43.219206 2026] [access_compat:error] [pid 2640698:tid 2640698] [client 4.185.41.66:5118] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 09:57:43.222374 2026] [access_compat:error] [pid 2640698:tid 2640698] [client 4.185.41.66:5118] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 09:57:43.222428 2026] [access_compat:error] [pid 2640698:tid 2640698] [client 4.185.41.66:5118] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 09:57:43.277098 2026] [ssl:error] [pid 2642897:tid 2642897] (70014)End of file found: [client 216.73.216.199:60691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:43.781879 2026] [ssl:error] [pid 2633951:tid 2633951] (EAI 2)Name or service not known: [client 144.76.19.72:56212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:43.781907 2026] [ssl:error] [pid 2633951:tid 2633951] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:43.837984 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:56218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:43.838013 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:45.098084 2026] [core:error] [pid 2615823:tid 2615823] (13)Permission denied: [client 216.73.216.199:47570] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/4100454.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.4037c862.tmp
[Thu Jul 30 09:57:45.714971 2026] [ssl:error] [pid 2615823:tid 2615823] (70014)End of file found: [client 216.73.216.199:47570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:45.743893 2026] [authz_core:error] [pid 2631105:tid 2631105] [client 57.141.0.32:50194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:45.744513 2026] [authz_core:error] [pid 2631105:tid 2631105] [client 57.141.0.32:50194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:46.017635 2026] [core:error] [pid 2637682:tid 2637682] (13)Permission denied: [client 216.73.216.199:23643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3533012.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.088d191e.tmp
[Thu Jul 30 09:57:46.106645 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:24386] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/backup/web.config"] [unique_id "amsSCi9F4ZNnIPCAvAQNwAAAAA0"]
[Thu Jul 30 09:57:46.106848 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:24386] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /backup/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/backup/web.config"] [unique_id "amsSCi9F4ZNnIPCAvAQNwAAAAA0"]
[Thu Jul 30 09:57:46.106981 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:24386] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/backup/web.config"] [unique_id "amsSCi9F4ZNnIPCAvAQNwAAAAA0"]
[Thu Jul 30 09:57:46.247835 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:24386] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSCi9F4ZNnIPCAvAQNwAAAAA0"]
[Thu Jul 30 09:57:46.319176 2026] [core:error] [pid 2637682:tid 2637682] (13)Permission denied: [client 216.73.216.199:23643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/recent_recipient_mail_server_ips
[Thu Jul 30 09:57:46.863704 2026] [security2:error] [pid 2646365:tid 2646365] [client 185.177.72.10:24408] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/base/.env"] [unique_id "amsSCgIzqjZm0m1TZna5UQAAAAA"]
[Thu Jul 30 09:57:46.863833 2026] [security2:error] [pid 2646365:tid 2646365] [client 185.177.72.10:24408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/base/.env"] [unique_id "amsSCgIzqjZm0m1TZna5UQAAAAA"]
[Thu Jul 30 09:57:46.896081 2026] [ssl:error] [pid 2637648:tid 2637648] (EAI 2)Name or service not known: [client 144.76.19.72:56224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:46.896105 2026] [ssl:error] [pid 2637648:tid 2637648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:46.934249 2026] [security2:error] [pid 2645509:tid 2645509] [client 94.154.43.229:35074] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mgarrmushrooms.com"] [uri "/.env"] [unique_id "amsSCi9F4ZNnIPCAvAQNwgAAAA0"]
[Thu Jul 30 09:57:46.934398 2026] [security2:error] [pid 2645509:tid 2645509] [client 94.154.43.229:35074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mgarrmushrooms.com"] [uri "/.env"] [unique_id "amsSCi9F4ZNnIPCAvAQNwgAAAA0"]
[Thu Jul 30 09:57:46.934610 2026] [security2:error] [pid 2645509:tid 2645509] [client 94.154.43.229:35074] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mgarrmushrooms.com"] [uri "/.env"] [unique_id "amsSCi9F4ZNnIPCAvAQNwgAAAA0"]
[Thu Jul 30 09:57:46.951723 2026] [ssl:error] [pid 2624681:tid 2624681] (EAI 2)Name or service not known: [client 144.76.19.72:56238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:46.951749 2026] [ssl:error] [pid 2624681:tid 2624681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:47.006322 2026] [security2:error] [pid 2646365:tid 2646365] [client 185.177.72.10:24408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSCgIzqjZm0m1TZna5UQAAAAA"]
[Thu Jul 30 09:57:47.044261 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:24412] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/base_dir/.env"] [unique_id "amsSC1bEqVhwrVygyWaWRAAAADI"]
[Thu Jul 30 09:57:47.044391 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:24412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/base_dir/.env"] [unique_id "amsSC1bEqVhwrVygyWaWRAAAADI"]
[Thu Jul 30 09:57:47.185380 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:24412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSC1bEqVhwrVygyWaWRAAAADI"]
[Thu Jul 30 09:57:47.222153 2026] [security2:error] [pid 2646365:tid 2646365] [client 185.177.72.10:24418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/basic-network/.env"] [unique_id "amsSCwIzqjZm0m1TZna5UgAAAAA"]
[Thu Jul 30 09:57:47.222340 2026] [security2:error] [pid 2646365:tid 2646365] [client 185.177.72.10:24418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/basic-network/.env"] [unique_id "amsSCwIzqjZm0m1TZna5UgAAAAA"]
[Thu Jul 30 09:57:47.228474 2026] [core:error] [pid 2637682:tid 2637682] (13)Permission denied: [client 216.73.216.199:23643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/847697.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.addddd16.tmp
[Thu Jul 30 09:57:47.359961 2026] [security2:error] [pid 2646365:tid 2646365] [client 185.177.72.10:24418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSCwIzqjZm0m1TZna5UgAAAAA"]
[Thu Jul 30 09:57:47.392648 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:24422] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.bak"] [unique_id "amsSC-AOfUDYJWq_uNeGAwAAACI"]
[Thu Jul 30 09:57:47.392817 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:24422] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.bak"] [unique_id "amsSC-AOfUDYJWq_uNeGAwAAACI"]
[Thu Jul 30 09:57:47.402942 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 09:57:47.433366 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 09:57:47.433404 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.463845 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ioxi-o.php
[Thu Jul 30 09:57:47.463883 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.507740 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/66.php
[Thu Jul 30 09:57:47.507781 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.529434 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:24422] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSC-AOfUDYJWq_uNeGAwAAACI"]
[Thu Jul 30 09:57:47.538387 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ms-edit.php
[Thu Jul 30 09:57:47.538425 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.570001 2026] [security2:error] [pid 2642741:tid 2642741] [client 185.177.72.10:24426] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.dev"] [unique_id "amsSC-ITKSQWaJMTYmEUrQAAAAc"]
[Thu Jul 30 09:57:47.570188 2026] [security2:error] [pid 2642741:tid 2642741] [client 185.177.72.10:24426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.dev"] [unique_id "amsSC-ITKSQWaJMTYmEUrQAAAAc"]
[Thu Jul 30 09:57:47.621272 2026] [security2:error] [pid 2645510:tid 2645510] [client 94.154.43.184:29044] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mgarrmushrooms.com.stampys.eu"] [uri "/.env"] [unique_id "amsSCzbpHDvCwivhdECx9gAAABA"]
[Thu Jul 30 09:57:47.621462 2026] [security2:error] [pid 2645510:tid 2645510] [client 94.154.43.184:29044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mgarrmushrooms.com.stampys.eu"] [uri "/.env"] [unique_id "amsSCzbpHDvCwivhdECx9gAAABA"]
[Thu Jul 30 09:57:47.621704 2026] [security2:error] [pid 2645510:tid 2645510] [client 94.154.43.184:29044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mgarrmushrooms.com.stampys.eu"] [uri "/.env"] [unique_id "amsSCzbpHDvCwivhdECx9gAAABA"]
[Thu Jul 30 09:57:47.692445 2026] [lsapi:warn] [pid 2637648:tid 2637648] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:57:47.718050 2026] [security2:error] [pid 2642741:tid 2642741] [client 185.177.72.10:24426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSC-ITKSQWaJMTYmEUrQAAAAc"]
[Thu Jul 30 09:57:47.751708 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.dist"] [unique_id "amsSCzbpHDvCwivhdECx9wAAABA"]
[Thu Jul 30 09:57:47.751881 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.dist"] [unique_id "amsSCzbpHDvCwivhdECx9wAAABA"]
[Thu Jul 30 09:57:47.845482 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aaa.php
[Thu Jul 30 09:57:47.845530 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.875985 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bgymj.php
[Thu Jul 30 09:57:47.876032 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.890965 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSCzbpHDvCwivhdECx9wAAABA"]
[Thu Jul 30 09:57:47.907538 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ah25.php
[Thu Jul 30 09:57:47.907580 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.927414 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.local"] [unique_id "amsSCzbpHDvCwivhdECx-AAAABA"]
[Thu Jul 30 09:57:47.927581 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.local"] [unique_id "amsSCzbpHDvCwivhdECx-AAAABA"]
[Thu Jul 30 09:57:47.938718 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/main.php
[Thu Jul 30 09:57:47.938756 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:47.972969 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/new4.php
[Thu Jul 30 09:57:47.973007 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:48.004947 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/inputs.php
[Thu Jul 30 09:57:48.004989 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:48.085057 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSCzbpHDvCwivhdECx-AAAABA"]
[Thu Jul 30 09:57:48.118983 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.production"] [unique_id "amsSDDbpHDvCwivhdECx-QAAABA"]
[Thu Jul 30 09:57:48.119173 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.production"] [unique_id "amsSDDbpHDvCwivhdECx-QAAABA"]
[Thu Jul 30 09:57:48.132301 2026] [core:error] [pid 2637682:tid 2637682] (13)Permission denied: [client 216.73.216.199:23643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1914314.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.2b618bfb.tmp
[Thu Jul 30 09:57:48.271235 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:24458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSDDbpHDvCwivhdECx-QAAABA"]
[Thu Jul 30 09:57:48.304871 2026] [security2:error] [pid 2642849:tid 2642849] [client 185.177.72.10:24462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.staging"] [unique_id "amsSDGpWjfU67Rlav_1qqwAAACc"]
[Thu Jul 30 09:57:48.305145 2026] [security2:error] [pid 2642849:tid 2642849] [client 185.177.72.10:24462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/beta/.env.staging"] [unique_id "amsSDGpWjfU67Rlav_1qqwAAACc"]
[Thu Jul 30 09:57:48.434136 2026] [core:error] [pid 2637682:tid 2637682] (13)Permission denied: [client 216.73.216.199:23643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2447727.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.acb72bf3.tmp
[Thu Jul 30 09:57:48.444728 2026] [security2:error] [pid 2642849:tid 2642849] [client 185.177.72.10:24462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSDGpWjfU67Rlav_1qqwAAACc"]
[Thu Jul 30 09:57:49.947037 2026] [core:error] [pid 2637682:tid 2637682] (13)Permission denied: [client 216.73.216.199:23643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2059449.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f7f669eb.tmp
[Thu Jul 30 09:57:50.005186 2026] [ssl:error] [pid 2642897:tid 2642897] (EAI 2)Name or service not known: [client 144.76.19.72:23834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:50.005220 2026] [ssl:error] [pid 2642897:tid 2642897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:50.059862 2026] [ssl:error] [pid 2641791:tid 2641791] (EAI 2)Name or service not known: [client 144.76.19.72:23848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:50.059892 2026] [ssl:error] [pid 2641791:tid 2641791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:50.060934 2026] [authz_core:error] [pid 2646930:tid 2646930] [client 57.141.0.29:40152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:57:50.061579 2026] [authz_core:error] [pid 2646930:tid 2646930] [client 57.141.0.29:40152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:57:50.831475 2026] [authz_core:error] [pid 2640698:tid 2640698] [client 4.185.41.66:5118] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/error_log
[Thu Jul 30 09:57:51.156414 2026] [core:error] [pid 2642789:tid 2642789] (13)Permission denied: [client 216.73.216.199:5361] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3720717.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.fd7afcf4.tmp
[Thu Jul 30 09:57:51.504498 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/edit.php
[Thu Jul 30 09:57:51.504542 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:51.556359 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a2.php
[Thu Jul 30 09:57:51.556404 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:51.592455 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 09:57:51.623033 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/0.php
[Thu Jul 30 09:57:51.623100 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:51.658885 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lock360.php
[Thu Jul 30 09:57:51.658927 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:51.693577 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/plss3.php
[Thu Jul 30 09:57:51.693635 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:51.751753 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp.php
[Thu Jul 30 09:57:51.751799 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:51.789456 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/x.php
[Thu Jul 30 09:57:51.789500 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.242513 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aq.php
[Thu Jul 30 09:57:52.242560 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.274960 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 09:57:52.306246 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/css.php
[Thu Jul 30 09:57:52.306308 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.336984 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/public
[Thu Jul 30 09:57:52.382653 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wsd.php
[Thu Jul 30 09:57:52.382700 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.428755 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/gecko-litespeed.php
[Thu Jul 30 09:57:52.428801 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.459139 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/nw.php
[Thu Jul 30 09:57:52.459182 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.491925 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 09:57:52.904296 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-the.php
[Thu Jul 30 09:57:52.904341 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.941949 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/myfile.php
[Thu Jul 30 09:57:52.941989 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:52.959127 2026] [core:error] [pid 2637682:tid 2637682] (13)Permission denied: [client 216.73.216.199:23643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/110376.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.c7cc9944.tmp
[Thu Jul 30 09:57:52.994375 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/info.php
[Thu Jul 30 09:57:52.994416 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.079468 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/file.php
[Thu Jul 30 09:57:53.079515 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.110049 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fs.php
[Thu Jul 30 09:57:53.110104 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.114709 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:23850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:53.114732 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:53.140453 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ff.php
[Thu Jul 30 09:57:53.140494 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.168275 2026] [ssl:error] [pid 2641846:tid 2641846] (EAI 2)Name or service not known: [client 144.76.19.72:23866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:53.168313 2026] [ssl:error] [pid 2641846:tid 2641846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:53.295510 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/axx.php
[Thu Jul 30 09:57:53.295556 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.326214 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-access.php
[Thu Jul 30 09:57:53.326258 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.386545 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/Sanskrit.php
[Thu Jul 30 09:57:53.386596 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.426558 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a.php
[Thu Jul 30 09:57:53.426611 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.461074 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/plugins.php
[Thu Jul 30 09:57:53.461113 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.491351 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/style.php
[Thu Jul 30 09:57:53.491388 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.670519 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-act.php
[Thu Jul 30 09:57:53.670565 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.707533 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 09:57:53.827712 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/222.php
[Thu Jul 30 09:57:53.827763 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.886676 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 09:57:53.935502 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ms.php
[Thu Jul 30 09:57:53.935546 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:53.965935 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/abcd.php
[Thu Jul 30 09:57:53.965978 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.004978 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/06.php
[Thu Jul 30 09:57:54.005022 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.070275 2026] [lsapi:warn] [pid 2642789:tid 2642789] [client 216.73.216.199:5361] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  file_put_contents([[suphp_file]]): Failed to open stream: Read-only file system in /var/softaculous/zikula/check_suphp.php on line 4\n
[Thu Jul 30 09:57:54.162039 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/155.php
[Thu Jul 30 09:57:54.162114 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.166359 2026] [ssl:error] [pid 2642789:tid 2642789] (70014)End of file found: [client 216.73.216.199:5361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:54.192478 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ol.php
[Thu Jul 30 09:57:54.192516 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.393341 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/X57.php
[Thu Jul 30 09:57:54.393389 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.443710 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/file59.php
[Thu Jul 30 09:57:54.443754 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.464971 2026] [ssl:error] [pid 2637682:tid 2637682] (70014)End of file found: [client 216.73.216.199:23643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:57:54.490390 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/vx.php
[Thu Jul 30 09:57:54.490432 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.520887 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/prv8.php
[Thu Jul 30 09:57:54.520931 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.561523 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/166.php
[Thu Jul 30 09:57:54.561568 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.617924 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/we.php
[Thu Jul 30 09:57:54.617996 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.648778 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 09:57:54.679630 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 09:57:54.729914 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a1vx.php
[Thu Jul 30 09:57:54.729985 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.763416 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/edit.php
[Thu Jul 30 09:57:54.763495 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.771918 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:19480] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/beta/php.ini"] [unique_id "amsSElgVrr9daLoI-iQyWAAAACE"]
[Thu Jul 30 09:57:54.772518 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:19480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/beta/php.ini"] [unique_id "amsSElgVrr9daLoI-iQyWAAAACE"]
[Thu Jul 30 09:57:54.794751 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/666.php
[Thu Jul 30 09:57:54.794789 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.841322 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cu.php
[Thu Jul 30 09:57:54.841366 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.875179 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/re.php
[Thu Jul 30 09:57:54.875222 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:54.905737 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 09:57:54.910742 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:19480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSElgVrr9daLoI-iQyWAAAACE"]
[Thu Jul 30 09:57:54.951896 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 09:57:54.972697 2026] [lsapi:warn] [pid 2637686:tid 2637686] [client 216.73.216.199:43362] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 09:57:54.972725 2026] [lsapi:error] [pid 2637686:tid 2637686] [client 216.73.216.199:43362] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-services-weather/examples/metar-extensive.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 09:57:54.982438 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/kj.php
[Thu Jul 30 09:57:54.982480 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.013024 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 09:57:55.045001 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/styll.php
[Thu Jul 30 09:57:55.045048 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.099544 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/av.php
[Thu Jul 30 09:57:55.099600 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.392043 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aw.php
[Thu Jul 30 09:57:55.392113 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.476113 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xqq.php
[Thu Jul 30 09:57:55.476157 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.506571 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 09:57:55.541088 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-update.php
[Thu Jul 30 09:57:55.541138 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.569665 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3170496.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.b2b35e90.tmp
[Thu Jul 30 09:57:55.571516 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/k.php
[Thu Jul 30 09:57:55.571553 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.601879 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/opts.php
[Thu Jul 30 09:57:55.601923 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.778420 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/manager.php
[Thu Jul 30 09:57:55.778469 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.809545 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 09:57:55.844770 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/8xyz.php
[Thu Jul 30 09:57:55.844815 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:55.893476 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-blog.php
[Thu Jul 30 09:57:55.893523 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:56.198416 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gifclass.php
[Thu Jul 30 09:57:56.198466 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:56.220533 2026] [ssl:error] [pid 2631105:tid 2631105] (EAI 2)Name or service not known: [client 144.76.19.72:23868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:56.220560 2026] [ssl:error] [pid 2631105:tid 2631105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:56.244565 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws60.php
[Thu Jul 30 09:57:56.244622 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:56.273584 2026] [ssl:error] [pid 2615823:tid 2615823] (EAI 2)Name or service not known: [client 144.76.19.72:23876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:56.273621 2026] [ssl:error] [pid 2615823:tid 2615823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:56.278410 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ff1.php
[Thu Jul 30 09:57:56.278451 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:56.453303 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/init.php
[Thu Jul 30 09:57:56.453345 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:56.483544 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/grsiuk.php
[Thu Jul 30 09:57:56.483611 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:56.533315 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/admin.php
[Thu Jul 30 09:57:56.533360 2026] [access_compat:error] [pid 2624681:tid 2624681] [client 51.120.83.160:33537] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 09:57:56.577563 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3533787.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.b4fd670f.tmp
[Thu Jul 30 09:57:57.388295 2026] [authz_core:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 09:57:57.388341 2026] [authz_core:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 09:57:57.412566 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/.env"] [unique_id "amsSFZoL8w3BzPER_zV8cgAAACQ"]
[Thu Jul 30 09:57:57.412714 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/.env"] [unique_id "amsSFZoL8w3BzPER_zV8cgAAACQ"]
[Thu Jul 30 09:57:57.412825 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/.env"] [unique_id "amsSFZoL8w3BzPER_zV8cgAAACQ"]
[Thu Jul 30 09:57:57.430553 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/.env.bak"] [unique_id "amsSFZoL8w3BzPER_zV8cwAAACQ"]
[Thu Jul 30 09:57:57.430700 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/.env.bak"] [unique_id "amsSFZoL8w3BzPER_zV8cwAAACQ"]
[Thu Jul 30 09:57:57.430804 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/.env.bak"] [unique_id "amsSFZoL8w3BzPER_zV8cwAAACQ"]
[Thu Jul 30 09:57:57.448012 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/.env.save"] [unique_id "amsSFZoL8w3BzPER_zV8dAAAACQ"]
[Thu Jul 30 09:57:57.448155 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/.env.save"] [unique_id "amsSFZoL8w3BzPER_zV8dAAAACQ"]
[Thu Jul 30 09:57:57.448261 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/.env.save"] [unique_id "amsSFZoL8w3BzPER_zV8dAAAACQ"]
[Thu Jul 30 09:57:57.465557 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/.env.backup"] [unique_id "amsSFZoL8w3BzPER_zV8dQAAACQ"]
[Thu Jul 30 09:57:57.465696 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/.env.backup"] [unique_id "amsSFZoL8w3BzPER_zV8dQAAACQ"]
[Thu Jul 30 09:57:57.465811 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/.env.backup"] [unique_id "amsSFZoL8w3BzPER_zV8dQAAACQ"]
[Thu Jul 30 09:57:57.483336 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/backend/.env"] [unique_id "amsSFZoL8w3BzPER_zV8dgAAACQ"]
[Thu Jul 30 09:57:57.483473 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/backend/.env"] [unique_id "amsSFZoL8w3BzPER_zV8dgAAACQ"]
[Thu Jul 30 09:57:57.483578 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/backend/.env"] [unique_id "amsSFZoL8w3BzPER_zV8dgAAACQ"]
[Thu Jul 30 09:57:57.500972 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/admin/.env"] [unique_id "amsSFZoL8w3BzPER_zV8dwAAACQ"]
[Thu Jul 30 09:57:57.501132 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/admin/.env"] [unique_id "amsSFZoL8w3BzPER_zV8dwAAACQ"]
[Thu Jul 30 09:57:57.501250 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/admin/.env"] [unique_id "amsSFZoL8w3BzPER_zV8dwAAACQ"]
[Thu Jul 30 09:57:57.518587 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/.git/config"] [unique_id "amsSFZoL8w3BzPER_zV8eAAAACQ"]
[Thu Jul 30 09:57:57.518729 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/.git/config"] [unique_id "amsSFZoL8w3BzPER_zV8eAAAACQ"]
[Thu Jul 30 09:57:57.518842 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/.git/config"] [unique_id "amsSFZoL8w3BzPER_zV8eAAAACQ"]
[Thu Jul 30 09:57:57.529952 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/102211.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.e85ee49a.tmp
[Thu Jul 30 09:57:57.536246 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/wp-config.php"] [unique_id "amsSFZoL8w3BzPER_zV8eQAAACQ"]
[Thu Jul 30 09:57:57.536365 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/wp-config.php"] [unique_id "amsSFZoL8w3BzPER_zV8eQAAACQ"]
[Thu Jul 30 09:57:57.536480 2026] [security2:error] [pid 2641846:tid 2641846] [client 195.178.110.223:65462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/wp-config.php"] [unique_id "amsSFZoL8w3BzPER_zV8eQAAACQ"]
[Thu Jul 30 09:57:58.029200 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19652] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bgoldd/.env"] [unique_id "amsSFiA5I1nMSfJA2UnYigAAACM"]
[Thu Jul 30 09:57:58.029389 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bgoldd/.env"] [unique_id "amsSFiA5I1nMSfJA2UnYigAAACM"]
[Thu Jul 30 09:57:58.131661 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/4023329.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.e1b224ff.tmp
[Thu Jul 30 09:57:58.165767 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSFiA5I1nMSfJA2UnYigAAACM"]
[Thu Jul 30 09:57:58.348141 2026] [lsapi:warn] [pid 2646442:tid 2646442] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:57:58.385323 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:19672] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bitcoind/.env"] [unique_id "amsSFluA8utF9-6bZmXfmQAAACo"]
[Thu Jul 30 09:57:58.385508 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:19672] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bitcoind/.env"] [unique_id "amsSFluA8utF9-6bZmXfmQAAACo"]
[Thu Jul 30 09:57:58.525291 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:19672] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSFluA8utF9-6bZmXfmQAAACo"]
[Thu Jul 30 09:57:58.558035 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:19676] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bkp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bkp/.env"] [unique_id "amsSFrzDi7bAxSTb5kpBFwAAAAI"]
[Thu Jul 30 09:57:58.558231 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:19676] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bkp/.env"] [unique_id "amsSFrzDi7bAxSTb5kpBFwAAAAI"]
[Thu Jul 30 09:57:58.709685 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:19676] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSFrzDi7bAxSTb5kpBFwAAAAI"]
[Thu Jul 30 09:57:58.926139 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19694] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /bkp/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bkp/.git/config"] [unique_id "amsSFiA5I1nMSfJA2UnYiwAAACM"]
[Thu Jul 30 09:57:58.926368 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bkp/.git/config"] [unique_id "amsSFiA5I1nMSfJA2UnYiwAAACM"]
[Thu Jul 30 09:57:59.078160 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSFiA5I1nMSfJA2UnYiwAAACM"]
[Thu Jul 30 09:57:59.330693 2026] [ssl:error] [pid 2636409:tid 2636409] (EAI 2)Name or service not known: [client 144.76.19.72:23882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:59.330723 2026] [ssl:error] [pid 2636409:tid 2636409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:59.346814 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3860933.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.45014fce.tmp
[Thu Jul 30 09:57:59.393512 2026] [ssl:error] [pid 2642851:tid 2642851] (EAI 2)Name or service not known: [client 144.76.19.72:23896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:57:59.393540 2026] [ssl:error] [pid 2642851:tid 2642851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:57:59.950033 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3388232.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.fd7f729d.tmp
[Thu Jul 30 09:57:59.950952 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:19734] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amsSF-AOfUDYJWq_uNeGCQAAACI"]
[Thu Jul 30 09:57:59.951237 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:19734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bkp/App_Config/ConnectionStrings.config"] [unique_id "amsSF-AOfUDYJWq_uNeGCQAAACI"]
[Thu Jul 30 09:58:00.115388 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:19734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSF-AOfUDYJWq_uNeGCQAAACI"]
[Thu Jul 30 09:58:00.150349 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:19744] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/bkp/api-config.ini"] [unique_id "amsSGBR4QchRU-0eVC_NagAAACA"]
[Thu Jul 30 09:58:00.150719 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:19744] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bkp/api-config.ini"] [unique_id "amsSGBR4QchRU-0eVC_NagAAACA"]
[Thu Jul 30 09:58:00.249847 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3575008.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.5aec2a9f.tmp
[Thu Jul 30 09:58:00.304123 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:19744] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSGBR4QchRU-0eVC_NagAAACA"]
[Thu Jul 30 09:58:00.550763 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/swapfile
[Thu Jul 30 09:58:00.708851 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19758] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/bkp/laravel.log"] [unique_id "amsSGCA5I1nMSfJA2UnYjQAAACM"]
[Thu Jul 30 09:58:00.709315 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bkp/laravel.log"] [unique_id "amsSGCA5I1nMSfJA2UnYjQAAACM"]
[Thu Jul 30 09:58:00.849382 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSGCA5I1nMSfJA2UnYjQAAACM"]
[Thu Jul 30 09:58:00.853344 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3536077.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.d2ab6d11.tmp
[Thu Jul 30 09:58:01.163281 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/799102.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.fb67358e.tmp
[Thu Jul 30 09:58:01.241178 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:19792] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/bkp/web.config"] [unique_id "amsSGRR4QchRU-0eVC_NawAAACA"]
[Thu Jul 30 09:58:01.241407 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:19792] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /bkp/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bkp/web.config"] [unique_id "amsSGRR4QchRU-0eVC_NawAAACA"]
[Thu Jul 30 09:58:01.241596 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:19792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bkp/web.config"] [unique_id "amsSGRR4QchRU-0eVC_NawAAACA"]
[Thu Jul 30 09:58:01.388457 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:19792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSGRR4QchRU-0eVC_NawAAACA"]
[Thu Jul 30 09:58:01.421108 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:19798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/blankon/.env"] [unique_id "amsSGa6KuX4rRscgdjLKwwAAAAo"]
[Thu Jul 30 09:58:01.421284 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:19798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blankon/.env"] [unique_id "amsSGa6KuX4rRscgdjLKwwAAAAo"]
[Thu Jul 30 09:58:01.464172 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/sysimgblt/sections/__ksymtab
[Thu Jul 30 09:58:01.570231 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:19798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSGa6KuX4rRscgdjLKwwAAAAo"]
[Thu Jul 30 09:58:01.605376 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19812] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/blob/.env"] [unique_id "amsSGSA5I1nMSfJA2UnYjgAAACM"]
[Thu Jul 30 09:58:01.605570 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blob/.env"] [unique_id "amsSGSA5I1nMSfJA2UnYjgAAACM"]
[Thu Jul 30 09:58:01.747854 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:19812] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSGSA5I1nMSfJA2UnYjgAAACM"]
[Thu Jul 30 09:58:01.764884 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1765611.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.34cbac8f.tmp
[Thu Jul 30 09:58:01.965316 2026] [authz_core:error] [pid 2641792:tid 2641792] [client 57.141.0.34:57072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:58:01.965970 2026] [authz_core:error] [pid 2641792:tid 2641792] [client 57.141.0.34:57072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:58:01.984354 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:19826] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/blog/.git/config"] [unique_id "amsSGVuA8utF9-6bZmXfnAAAACo"]
[Thu Jul 30 09:58:01.984523 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:19826] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blog/.git/config"] [unique_id "amsSGVuA8utF9-6bZmXfnAAAACo"]
[Thu Jul 30 09:58:02.153111 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:19826] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSGVuA8utF9-6bZmXfnAAAACo"]
[Thu Jul 30 09:58:02.300327 2026] [access_compat:error] [pid 2636409:tid 2636409] [client 45.158.164.139:42950] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:58:02.368020 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3991491.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.1df96fa7.tmp
[Thu Jul 30 09:58:02.447986 2026] [ssl:error] [pid 2642742:tid 2642742] (EAI 2)Name or service not known: [client 144.76.19.72:55546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:02.448032 2026] [ssl:error] [pid 2642742:tid 2642742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:02.501619 2026] [ssl:error] [pid 2646442:tid 2646442] (EAI 2)Name or service not known: [client 144.76.19.72:55562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:02.501656 2026] [ssl:error] [pid 2646442:tid 2646442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:02.926403 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:19882] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amsSGiFup3sWqvilDyti1QAAAEA"]
[Thu Jul 30 09:58:02.926769 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:19882] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blog/App_Config/ConnectionStrings.config"] [unique_id "amsSGiFup3sWqvilDyti1QAAAEA"]
[Thu Jul 30 09:58:02.970208 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3002540.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.3bebfa48.tmp
[Thu Jul 30 09:58:03.082241 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:19882] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSGiFup3sWqvilDyti1QAAAEA"]
[Thu Jul 30 09:58:03.121209 2026] [security2:error] [pid 2646824:tid 2646824] [client 185.177.72.10:19890] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/blog/api-config.ini"] [unique_id "amsSG2zrRueeTvm_T4dsMgAAAAk"]
[Thu Jul 30 09:58:03.121571 2026] [security2:error] [pid 2646824:tid 2646824] [client 185.177.72.10:19890] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blog/api-config.ini"] [unique_id "amsSG2zrRueeTvm_T4dsMgAAAAk"]
[Thu Jul 30 09:58:03.259346 2026] [security2:error] [pid 2646824:tid 2646824] [client 185.177.72.10:19890] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSG2zrRueeTvm_T4dsMgAAAAk"]
[Thu Jul 30 09:58:03.680492 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:19926] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/blog/laravel.log"] [unique_id "amsSG_mlxjveQUcDDF4lhgAAAC4"]
[Thu Jul 30 09:58:03.680846 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:19926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blog/laravel.log"] [unique_id "amsSG_mlxjveQUcDDF4lhgAAAC4"]
[Thu Jul 30 09:58:03.817207 2026] [security2:error] [pid 2642896:tid 2642896] [client 185.177.72.10:19926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSG_mlxjveQUcDDF4lhgAAAC4"]
[Thu Jul 30 09:58:03.962797 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/848546.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.dec2e065.tmp
[Thu Jul 30 09:58:04.199825 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:19940] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/blog/web.config"] [unique_id "amsSHCFup3sWqvilDyti1gAAAEA"]
[Thu Jul 30 09:58:04.200042 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:19940] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /blog/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/blog/web.config"] [unique_id "amsSHCFup3sWqvilDyti1gAAAEA"]
[Thu Jul 30 09:58:04.200209 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:19940] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blog/web.config"] [unique_id "amsSHCFup3sWqvilDyti1gAAAEA"]
[Thu Jul 30 09:58:04.337265 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:19940] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHCFup3sWqvilDyti1gAAAEA"]
[Thu Jul 30 09:58:04.372043 2026] [security2:error] [pid 2633745:tid 2633745] [client 185.177.72.10:19948] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/blue/.env"] [unique_id "amsSHLFDknH9BmgMWJbGmwAAAA4"]
[Thu Jul 30 09:58:04.372248 2026] [security2:error] [pid 2633745:tid 2633745] [client 185.177.72.10:19948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/blue/.env"] [unique_id "amsSHLFDknH9BmgMWJbGmwAAAA4"]
[Thu Jul 30 09:58:04.511370 2026] [security2:error] [pid 2633745:tid 2633745] [client 185.177.72.10:19948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHLFDknH9BmgMWJbGmwAAAA4"]
[Thu Jul 30 09:58:04.551113 2026] [security2:error] [pid 2646893:tid 2646893] [client 185.177.72.10:19958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bookchain-client/.env"] [unique_id "amsSHE2cUF8VNgn4OGd8pwAAABE"]
[Thu Jul 30 09:58:04.551282 2026] [security2:error] [pid 2646893:tid 2646893] [client 185.177.72.10:19958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bookchain-client/.env"] [unique_id "amsSHE2cUF8VNgn4OGd8pwAAABE"]
[Thu Jul 30 09:58:04.688906 2026] [security2:error] [pid 2646893:tid 2646893] [client 185.177.72.10:19958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHE2cUF8VNgn4OGd8pwAAABE"]
[Thu Jul 30 09:58:04.725661 2026] [security2:error] [pid 2642897:tid 2642897] [client 185.177.72.10:19964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bootstrap/.env"] [unique_id "amsSHABDiiyW3ogUkAlI3AAAAC8"]
[Thu Jul 30 09:58:04.725842 2026] [security2:error] [pid 2642897:tid 2642897] [client 185.177.72.10:19964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bootstrap/.env"] [unique_id "amsSHABDiiyW3ogUkAlI3AAAAC8"]
[Thu Jul 30 09:58:04.864586 2026] [security2:error] [pid 2642897:tid 2642897] [client 185.177.72.10:19964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHABDiiyW3ogUkAlI3AAAAC8"]
[Thu Jul 30 09:58:04.897896 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:46920] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env"] [unique_id "amsSHA0xskC6cuJ-PDXj1AAAADY"]
[Thu Jul 30 09:58:04.898082 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:46920] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env"] [unique_id "amsSHA0xskC6cuJ-PDXj1AAAADY"]
[Thu Jul 30 09:58:05.037154 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:46920] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHA0xskC6cuJ-PDXj1AAAADY"]
[Thu Jul 30 09:58:05.069205 2026] [security2:error] [pid 2642849:tid 2642849] [client 185.177.72.10:46926] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.bak"] [unique_id "amsSHWpWjfU67Rlav_1qsgAAACc"]
[Thu Jul 30 09:58:05.069360 2026] [security2:error] [pid 2642849:tid 2642849] [client 185.177.72.10:46926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.bak"] [unique_id "amsSHWpWjfU67Rlav_1qsgAAACc"]
[Thu Jul 30 09:58:05.209052 2026] [security2:error] [pid 2642849:tid 2642849] [client 185.177.72.10:46926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHWpWjfU67Rlav_1qsgAAACc"]
[Thu Jul 30 09:58:05.242129 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:46932] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.dev"] [unique_id "amsSHVuA8utF9-6bZmXfngAAACo"]
[Thu Jul 30 09:58:05.242312 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:46932] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.dev"] [unique_id "amsSHVuA8utF9-6bZmXfngAAACo"]
[Thu Jul 30 09:58:05.379679 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/346239.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.a608ccb8.tmp
[Thu Jul 30 09:58:05.394910 2026] [security2:error] [pid 2642851:tid 2642851] [client 185.177.72.10:46932] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHVuA8utF9-6bZmXfngAAACo"]
[Thu Jul 30 09:58:05.428707 2026] [security2:error] [pid 2646483:tid 2646483] [client 185.177.72.10:46946] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.dist"] [unique_id "amsSHRTWz9irmh6yr8qBxwAAAAU"]
[Thu Jul 30 09:58:05.428887 2026] [security2:error] [pid 2646483:tid 2646483] [client 185.177.72.10:46946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.dist"] [unique_id "amsSHRTWz9irmh6yr8qBxwAAAAU"]
[Thu Jul 30 09:58:05.559656 2026] [ssl:error] [pid 2641845:tid 2641845] (EAI 2)Name or service not known: [client 144.76.19.72:55572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:05.559696 2026] [ssl:error] [pid 2641845:tid 2641845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:05.568128 2026] [security2:error] [pid 2646483:tid 2646483] [client 185.177.72.10:46946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHRTWz9irmh6yr8qBxwAAAAU"]
[Thu Jul 30 09:58:05.603453 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:46960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bot/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.local"] [unique_id "amsSHSFup3sWqvilDyti1wAAAEA"]
[Thu Jul 30 09:58:05.603587 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:46960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bot/.env.local"] [unique_id "amsSHSFup3sWqvilDyti1wAAAEA"]
[Thu Jul 30 09:58:05.617495 2026] [ssl:error] [pid 2633745:tid 2633745] (EAI 2)Name or service not known: [client 144.76.19.72:55586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:05.617526 2026] [ssl:error] [pid 2633745:tid 2633745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:05.753396 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:46960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSHSFup3sWqvilDyti1wAAAEA"]
[Thu Jul 30 09:58:05.893116 2026] [authz_core:error] [pid 2646893:tid 2646893] [client 57.141.0.2:36174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:58:05.893739 2026] [authz_core:error] [pid 2646893:tid 2646893] [client 57.141.0.2:36174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:58:05.945144 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 09:58:05.984109 2026] [core:error] [pid 2645508:tid 2645508] (13)Permission denied: [client 216.73.216.199:55861] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1397651.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.3572fa3e.tmp
[Thu Jul 30 09:58:07.079725 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 09:58:07.186728 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:33749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2607368.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.2f3fbea0.tmp
[Thu Jul 30 09:58:07.789109 2026] [ssl:error] [pid 2641791:tid 2641791] (70014)End of file found: [client 216.73.216.199:33749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:08.302452 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/ini.php
[Thu Jul 30 09:58:08.390897 2026] [core:error] [pid 2645508:tid 2645508] (13)Permission denied: [client 216.73.216.199:55861] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2853974.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.e2354b2e.tmp
[Thu Jul 30 09:58:08.691524 2026] [ssl:error] [pid 2642742:tid 2642742] (EAI 2)Name or service not known: [client 144.76.19.72:55588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:08.691562 2026] [ssl:error] [pid 2642742:tid 2642742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:08.747812 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:55600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:08.747839 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:08.827326 2026] [lsapi:warn] [pid 2645509:tid 2645509] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:58:08.845554 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/autoload_classmap.php
[Thu Jul 30 09:58:09.397604 2026] [security2:error] [pid 2624681:tid 2624681] [client 51.68.107.150:27379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/robots.txt"] [unique_id "amsSIaRybkvKjuCZFsP6JwAAAFM"]
[Thu Jul 30 09:58:09.400554 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 09:58:10.799680 2026] [core:error] [pid 2645508:tid 2645508] (13)Permission denied: [client 216.73.216.199:55861] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1041324.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.8a4496d3.tmp
[Thu Jul 30 09:58:11.039606 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/lufix.php
[Thu Jul 30 09:58:11.586881 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/media.php
[Thu Jul 30 09:58:11.834532 2026] [ssl:error] [pid 2641845:tid 2641845] (EAI 2)Name or service not known: [client 144.76.19.72:51904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:11.834562 2026] [ssl:error] [pid 2641845:tid 2641845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:11.887552 2026] [ssl:error] [pid 2637652:tid 2637652] (EAI 2)Name or service not known: [client 144.76.19.72:51916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:11.887580 2026] [ssl:error] [pid 2637652:tid 2637652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:11.963832 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:47266] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/bot/php.ini"] [unique_id "amsSI_e6kgva7vVQtaGJCgAAADk"]
[Thu Jul 30 09:58:11.964191 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:47266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bot/php.ini"] [unique_id "amsSI_e6kgva7vVQtaGJCgAAADk"]
[Thu Jul 30 09:58:12.003863 2026] [ssl:error] [pid 2645508:tid 2645508] (70014)End of file found: [client 216.73.216.199:55861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:12.103672 2026] [security2:error] [pid 2637652:tid 2637652] [client 185.177.72.10:47266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSI_e6kgva7vVQtaGJCgAAADk"]
[Thu Jul 30 09:58:12.158001 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 09:58:12.304864 2026] [security2:error] [pid 2634653:tid 2634653] [client 216.73.216.199:19878] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cldeploy.log"] [unique_id "amsSJBlCbzYyQyOPgBE0pgAAABs"]
[Thu Jul 30 09:58:12.305115 2026] [security2:error] [pid 2634653:tid 2634653] [client 216.73.216.199:19878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cldeploy.log"] [unique_id "amsSJBlCbzYyQyOPgBE0pgAAABs"]
[Thu Jul 30 09:58:12.305315 2026] [security2:error] [pid 2634653:tid 2634653] [client 216.73.216.199:19878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cldeploy.log"] [unique_id "amsSJBlCbzYyQyOPgBE0pgAAABs"]
[Thu Jul 30 09:58:12.604956 2026] [core:error] [pid 2634653:tid 2634653] (13)Permission denied: [client 216.73.216.199:19878] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/4049925.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.d9f2b983.tmp
[Thu Jul 30 09:58:12.851163 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/contact.php
[Thu Jul 30 09:58:13.505937 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/byp.php
[Thu Jul 30 09:58:13.660390 2026] [cgi:error] [pid 2647871:tid 2647871] [client 177.71.26.176:45287] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:58:13.809357 2026] [core:error] [pid 2634653:tid 2634653] (13)Permission denied: [client 216.73.216.199:19878] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmpDSK
[Thu Jul 30 09:58:14.109946 2026] [ssl:error] [pid 2634653:tid 2634653] (70014)End of file found: [client 216.73.216.199:19878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:15.295142 2026] [security2:error] [pid 2640698:tid 2640698] [client 138.219.242.68:24469] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSJ4W_fWF6QfgPXMIqJAAAAA8"]
[Thu Jul 30 09:58:15.295194 2026] [security2:error] [pid 2640698:tid 2640698] [client 138.219.242.68:24469] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSJ4W_fWF6QfgPXMIqJAAAAA8"]
[Thu Jul 30 09:58:15.295457 2026] [security2:error] [pid 2640698:tid 2640698] [client 138.219.242.68:24469] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSJ4W_fWF6QfgPXMIqJAAAAA8"]
[Thu Jul 30 09:58:15.346538 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/cong.php
[Thu Jul 30 09:58:15.551328 2026] [ssl:error] [pid 2645509:tid 2645509] (EAI 2)Name or service not known: [client 144.76.19.72:51918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:15.551358 2026] [ssl:error] [pid 2645509:tid 2645509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:15.823985 2026] [authz_core:error] [pid 2645509:tid 2645509] [client 57.141.0.4:58760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:58:15.824622 2026] [authz_core:error] [pid 2645509:tid 2645509] [client 57.141.0.4:58760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:58:16.683600 2026] [ssl:error] [pid 2647985:tid 2647985] (EAI 2)Name or service not known: [client 144.76.19.72:51932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:16.683674 2026] [ssl:error] [pid 2647985:tid 2647985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:17.182571 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/bak.php
[Thu Jul 30 09:58:17.423866 2026] [security2:error] [pid 2637686:tid 2637686] [client 43.135.133.241:34166] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.greenduckgallery.co.uk"] [uri "/"] [unique_id "amsSKULxYlQ9rOjGgkMxUwAAAEQ"]
[Thu Jul 30 09:58:17.653543 2026] [lsapi:warn] [pid 2637652:tid 2637652] [client 173.252.69.14:45998] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:17.653605 2026] [lsapi:warn] [pid 2637652:tid 2637652] [client 173.252.69.14:45998] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:17.837235 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-info.php
[Thu Jul 30 09:58:17.842395 2026] [security2:error] [pid 2647987:tid 2647987] [client 43.159.54.180:30241] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSKeQHGLNT6gIx6k15ZwAAAB0"]
[Thu Jul 30 09:58:17.842445 2026] [security2:error] [pid 2647987:tid 2647987] [client 43.159.54.180:30241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSKeQHGLNT6gIx6k15ZwAAAB0"]
[Thu Jul 30 09:58:17.842678 2026] [security2:error] [pid 2647987:tid 2647987] [client 43.159.54.180:30241] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSKeQHGLNT6gIx6k15ZwAAAB0"]
[Thu Jul 30 09:58:18.812077 2026] [security2:error] [pid 2648111:tid 2648111] [client 185.177.72.10:6070] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amsSKvZPRx2RqysC7fZcrwAAACY"]
[Thu Jul 30 09:58:18.812237 2026] [security2:error] [pid 2648111:tid 2648111] [client 185.177.72.10:6070] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "amsSKvZPRx2RqysC7fZcrwAAACY"]
[Thu Jul 30 09:58:18.926938 2026] [core:error] [pid 2647937:tid 2647937] (13)Permission denied: [client 216.73.216.199:52695] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/bin/chfn
[Thu Jul 30 09:58:18.951782 2026] [security2:error] [pid 2648111:tid 2648111] [client 185.177.72.10:6070] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSKvZPRx2RqysC7fZcrwAAACY"]
[Thu Jul 30 09:58:18.990545 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:6086] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amsSKiFup3sWqvilDyti3AAAAEA"]
[Thu Jul 30 09:58:18.990722 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:6086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "amsSKiFup3sWqvilDyti3AAAAEA"]
[Thu Jul 30 09:58:19.036086 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/css.php
[Thu Jul 30 09:58:19.078868 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.191.171.4:50866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/Contact"] [unique_id "amsSKxR4QchRU-0eVC_NdQAAACA"]
[Thu Jul 30 09:58:19.086367 2026] [authz_core:error] [pid 2648111:tid 2648111] [client 57.141.0.50:43812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:58:19.086975 2026] [authz_core:error] [pid 2648111:tid 2648111] [client 57.141.0.50:43812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:58:19.143332 2026] [security2:error] [pid 2637682:tid 2637682] [client 185.177.72.10:6086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSKiFup3sWqvilDyti3AAAAEA"]
[Thu Jul 30 09:58:19.177790 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6102] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amsSK_N-5F7DhH3GE0mKWwAAABY"]
[Thu Jul 30 09:58:19.177980 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "amsSK_N-5F7DhH3GE0mKWwAAABY"]
[Thu Jul 30 09:58:19.330118 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6102] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSK_N-5F7DhH3GE0mKWwAAABY"]
[Thu Jul 30 09:58:19.365030 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:6118] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/bucoffea/.env"] [unique_id "amsSKyGRHSAq2-9F29gS1QAAAAs"]
[Thu Jul 30 09:58:19.365203 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:6118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/bucoffea/.env"] [unique_id "amsSKyGRHSAq2-9F29gS1QAAAAs"]
[Thu Jul 30 09:58:19.508551 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:6118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSKyGRHSAq2-9F29gS1QAAAAs"]
[Thu Jul 30 09:58:19.635646 2026] [lsapi:warn] [pid 2634653:tid 2634653] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:58:19.731924 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6138] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/build.log"] [unique_id "amsSK_N-5F7DhH3GE0mKXAAAABY"]
[Thu Jul 30 09:58:19.732321 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/build.log"] [unique_id "amsSK_N-5F7DhH3GE0mKXAAAABY"]
[Thu Jul 30 09:58:19.739242 2026] [ssl:error] [pid 2641791:tid 2641791] (EAI 2)Name or service not known: [client 144.76.19.72:46770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:19.739270 2026] [ssl:error] [pid 2641791:tid 2641791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:19.790564 2026] [ssl:error] [pid 2647987:tid 2647987] (EAI 2)Name or service not known: [client 144.76.19.72:46786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:19.790612 2026] [ssl:error] [pid 2647987:tid 2647987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:19.876962 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSK_N-5F7DhH3GE0mKXAAAABY"]
[Thu Jul 30 09:58:19.918536 2026] [authz_core:error] [pid 2645508:tid 2645508] [client 57.141.0.24:54696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:58:19.919167 2026] [authz_core:error] [pid 2645508:tid 2645508] [client 57.141.0.24:54696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:58:20.200600 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/bak.php
[Thu Jul 30 09:58:20.653218 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:6194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/build/.env"] [unique_id "amsSLBR4QchRU-0eVC_NdwAAACA"]
[Thu Jul 30 09:58:20.653398 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:6194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/build/.env"] [unique_id "amsSLBR4QchRU-0eVC_NdwAAACA"]
[Thu Jul 30 09:58:20.794508 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:6194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSLBR4QchRU-0eVC_NdwAAACA"]
[Thu Jul 30 09:58:20.829487 2026] [security2:error] [pid 2647901:tid 2647901] [client 85.208.96.201:21100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsSLIZ4swPkyX76U98pKgAAAAQ"]
[Thu Jul 30 09:58:20.999008 2026] [core:error] [pid 2615823:tid 2615823] (13)Permission denied: [client 216.73.216.199:16383] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS3/close_delay
[Thu Jul 30 09:58:21.142088 2026] [security2:error] [pid 2647937:tid 2647937] [client 114.119.135.136:46305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~30,104,18/request_format~html"] [unique_id "amsSLREsaqVuMDhyelsuYwAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~30,104,18,14/request_format~html
[Thu Jul 30 09:58:21.327966 2026] [security2:error] [pid 2636409:tid 2636409] [client 43.159.54.180:46369] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSLRR4QchRU-0eVC_NeAAAACA"]
[Thu Jul 30 09:58:21.328028 2026] [security2:error] [pid 2636409:tid 2636409] [client 43.159.54.180:46369] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSLRR4QchRU-0eVC_NeAAAACA"]
[Thu Jul 30 09:58:21.328350 2026] [security2:error] [pid 2636409:tid 2636409] [client 43.159.54.180:46369] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSLRR4QchRU-0eVC_NeAAAACA"]
[Thu Jul 30 09:58:21.440091 2026] [security2:error] [pid 2647936:tid 2647936] [client 85.208.96.205:28348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/graves.html"] [unique_id "amsSLRIpYY1kAgz_RsqhWgAAAAg"]
[Thu Jul 30 09:58:21.484752 2026] [ssl:error] [pid 2615823:tid 2615823] (70014)End of file found: [client 216.73.216.199:16383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:22.095199 2026] [security2:error] [pid 2647984:tid 2647984] [client 114.119.135.136:46317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~30,104,18/request_format~html"] [unique_id "amsSLvN-5F7DhH3GE0mKXwAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~30,104,18,14/request_format~html
[Thu Jul 30 09:58:22.148786 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/cloud.php
[Thu Jul 30 09:58:22.158925 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:6262] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cache/.env"] [unique_id "amsSLhIpYY1kAgz_RsqhWwAAAAg"]
[Thu Jul 30 09:58:22.159128 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:6262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cache/.env"] [unique_id "amsSLhIpYY1kAgz_RsqhWwAAAAg"]
[Thu Jul 30 09:58:22.326393 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:6262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSLhIpYY1kAgz_RsqhWwAAAAg"]
[Thu Jul 30 09:58:22.544565 2026] [security2:error] [pid 2647983:tid 2647983] [client 185.177.72.10:6276] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /cache/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cache/.git/config"] [unique_id "amsSLhdxmX6xpODXh8H_ugAAAA4"]
[Thu Jul 30 09:58:22.544776 2026] [security2:error] [pid 2647983:tid 2647983] [client 185.177.72.10:6276] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cache/.git/config"] [unique_id "amsSLhdxmX6xpODXh8H_ugAAAA4"]
[Thu Jul 30 09:58:22.696449 2026] [security2:error] [pid 2647983:tid 2647983] [client 185.177.72.10:6276] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSLhdxmX6xpODXh8H_ugAAAA4"]
[Thu Jul 30 09:58:22.843458 2026] [ssl:error] [pid 2645509:tid 2645509] (EAI 2)Name or service not known: [client 144.76.19.72:46790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:22.843486 2026] [ssl:error] [pid 2645509:tid 2645509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:22.899010 2026] [ssl:error] [pid 2637686:tid 2637686] (EAI 2)Name or service not known: [client 144.76.19.72:46798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:22.899041 2026] [ssl:error] [pid 2637686:tid 2637686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:22.904427 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/readme.php
[Thu Jul 30 09:58:23.275632 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:6318] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amsSLy1MDKD59KKldBY-dwAAABc"]
[Thu Jul 30 09:58:23.275964 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:6318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cache/App_Config/ConnectionStrings.config"] [unique_id "amsSLy1MDKD59KKldBY-dwAAABc"]
[Thu Jul 30 09:58:23.497709 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:6318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSLy1MDKD59KKldBY-dwAAABc"]
[Thu Jul 30 09:58:23.535032 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:6330] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/cache/api-config.ini"] [unique_id "amsSL6RybkvKjuCZFsP6LwAAAFM"]
[Thu Jul 30 09:58:23.535448 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:6330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cache/api-config.ini"] [unique_id "amsSL6RybkvKjuCZFsP6LwAAAFM"]
[Thu Jul 30 09:58:23.682184 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:6330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSL6RybkvKjuCZFsP6LwAAAFM"]
[Thu Jul 30 09:58:24.100734 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6342] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/cache/laravel.log"] [unique_id "amsSMPN-5F7DhH3GE0mKYAAAABY"]
[Thu Jul 30 09:58:24.101110 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cache/laravel.log"] [unique_id "amsSMPN-5F7DhH3GE0mKYAAAABY"]
[Thu Jul 30 09:58:24.260498 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMPN-5F7DhH3GE0mKYAAAABY"]
[Thu Jul 30 09:58:24.546619 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/404.php
[Thu Jul 30 09:58:24.660185 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6368] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/cache/web.config"] [unique_id "amsSMPN-5F7DhH3GE0mKYQAAABY"]
[Thu Jul 30 09:58:24.660408 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6368] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /cache/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cache/web.config"] [unique_id "amsSMPN-5F7DhH3GE0mKYQAAABY"]
[Thu Jul 30 09:58:24.660573 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6368] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cache/web.config"] [unique_id "amsSMPN-5F7DhH3GE0mKYQAAABY"]
[Thu Jul 30 09:58:24.727484 2026] [ssl:error] [pid 2647983:tid 2647983] (70014)End of file found: [client 216.73.216.199:2911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:24.799098 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:6368] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMPN-5F7DhH3GE0mKYQAAABY"]
[Thu Jul 30 09:58:24.835405 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:38008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cardea/backend/.env"] [unique_id "amsSMC1MDKD59KKldBY-eQAAABc"]
[Thu Jul 30 09:58:24.835583 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:38008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cardea/backend/.env"] [unique_id "amsSMC1MDKD59KKldBY-eQAAABc"]
[Thu Jul 30 09:58:24.974202 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:38008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMC1MDKD59KKldBY-eQAAABc"]
[Thu Jul 30 09:58:25.010252 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cdw-backend/.env"] [unique_id "amsSMeQHGLNT6gIx6k15awAAAB0"]
[Thu Jul 30 09:58:25.010409 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cdw-backend/.env"] [unique_id "amsSMeQHGLNT6gIx6k15awAAAB0"]
[Thu Jul 30 09:58:25.154485 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMeQHGLNT6gIx6k15awAAAB0"]
[Thu Jul 30 09:58:25.194423 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:38030] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amsSMQ0xskC6cuJ-PDXj3gAAADY"]
[Thu Jul 30 09:58:25.194739 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:38030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch2-mytodo/.env"] [unique_id "amsSMQ0xskC6cuJ-PDXj3gAAADY"]
[Thu Jul 30 09:58:25.345346 2026] [security2:error] [pid 2624435:tid 2624435] [client 185.177.72.10:38030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMQ0xskC6cuJ-PDXj3gAAADY"]
[Thu Jul 30 09:58:25.379498 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:38044] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amsSMc2-LGO2xP3vg6n4KAAAAEY"]
[Thu Jul 30 09:58:25.379706 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:38044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch6-mytodo/.env"] [unique_id "amsSMc2-LGO2xP3vg6n4KAAAAEY"]
[Thu Jul 30 09:58:25.529195 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:38044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMc2-LGO2xP3vg6n4KAAAAEY"]
[Thu Jul 30 09:58:25.564446 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:38058] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amsSMfN-5F7DhH3GE0mKYgAAABY"]
[Thu Jul 30 09:58:25.564653 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:38058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch6a-mytodo/.env"] [unique_id "amsSMfN-5F7DhH3GE0mKYgAAABY"]
[Thu Jul 30 09:58:25.736983 2026] [security2:error] [pid 2647984:tid 2647984] [client 185.177.72.10:38058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMfN-5F7DhH3GE0mKYgAAABY"]
[Thu Jul 30 09:58:25.772491 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38074] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amsSMeQHGLNT6gIx6k15bAAAAB0"]
[Thu Jul 30 09:58:25.772705 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch7-mytodo/.env"] [unique_id "amsSMeQHGLNT6gIx6k15bAAAAB0"]
[Thu Jul 30 09:58:25.937233 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38074] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMeQHGLNT6gIx6k15bAAAAB0"]
[Thu Jul 30 09:58:25.952478 2026] [ssl:error] [pid 2633951:tid 2633951] (EAI 2)Name or service not known: [client 144.76.19.72:46812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:25.952507 2026] [ssl:error] [pid 2633951:tid 2633951] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:25.976100 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:38084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amsSMc2-LGO2xP3vg6n4KQAAAEY"]
[Thu Jul 30 09:58:25.976348 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:38084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch7a-mytodo/.env"] [unique_id "amsSMc2-LGO2xP3vg6n4KQAAAEY"]
[Thu Jul 30 09:58:26.014341 2026] [ssl:error] [pid 2647938:tid 2647938] (EAI 2)Name or service not known: [client 144.76.19.72:46814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:26.014377 2026] [ssl:error] [pid 2647938:tid 2647938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:26.127631 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:38084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMc2-LGO2xP3vg6n4KQAAAEY"]
[Thu Jul 30 09:58:26.162245 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38086] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amsSMuQHGLNT6gIx6k15bQAAAB0"]
[Thu Jul 30 09:58:26.162423 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch8-mytodo/.env"] [unique_id "amsSMuQHGLNT6gIx6k15bQAAAB0"]
[Thu Jul 30 09:58:26.312628 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMuQHGLNT6gIx6k15bQAAAB0"]
[Thu Jul 30 09:58:26.347775 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:38100] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amsSMlgVrr9daLoI-iQyxgAAACE"]
[Thu Jul 30 09:58:26.347961 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:38100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch8a-mytodo/.env"] [unique_id "amsSMlgVrr9daLoI-iQyxgAAACE"]
[Thu Jul 30 09:58:26.418853 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/dropdown.php
[Thu Jul 30 09:58:26.496632 2026] [security2:error] [pid 2633951:tid 2633951] [client 185.177.72.10:38100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMlgVrr9daLoI-iQyxgAAACE"]
[Thu Jul 30 09:58:26.533093 2026] [security2:error] [pid 2647986:tid 2647986] [client 185.177.72.10:38110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amsSMrs-KYmoltpa0UoATgAAABw"]
[Thu Jul 30 09:58:26.533297 2026] [security2:error] [pid 2647986:tid 2647986] [client 185.177.72.10:38110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ch8b-mytodo/.env"] [unique_id "amsSMrs-KYmoltpa0UoATgAAABw"]
[Thu Jul 30 09:58:26.684886 2026] [security2:error] [pid 2647986:tid 2647986] [client 185.177.72.10:38110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMrs-KYmoltpa0UoATgAAABw"]
[Thu Jul 30 09:58:26.719732 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:38116] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/challenge/.env"] [unique_id "amsSMiGRHSAq2-9F29gS2AAAAAs"]
[Thu Jul 30 09:58:26.719998 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:38116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/challenge/.env"] [unique_id "amsSMiGRHSAq2-9F29gS2AAAAAs"]
[Thu Jul 30 09:58:26.902726 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:38116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMiGRHSAq2-9F29gS2AAAAAs"]
[Thu Jul 30 09:58:26.936996 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:38124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/challenges/.env"] [unique_id "amsSMpscAi6piyeNcGN0TgAAACw"]
[Thu Jul 30 09:58:26.937237 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:38124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/challenges/.env"] [unique_id "amsSMpscAi6piyeNcGN0TgAAACw"]
[Thu Jul 30 09:58:27.041501 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/404.php
[Thu Jul 30 09:58:27.085105 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:38124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMpscAi6piyeNcGN0TgAAACw"]
[Thu Jul 30 09:58:27.307454 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:38146] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amsSMxR4QchRU-0eVC_NegAAACA"]
[Thu Jul 30 09:58:27.307642 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:38146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/charts/liveObjects/.env"] [unique_id "amsSMxR4QchRU-0eVC_NegAAACA"]
[Thu Jul 30 09:58:27.447866 2026] [cgi:error] [pid 2642742:tid 2642742] [client 20.9.63.139:17963] AH02812: stderr from /home/josieand/public_html/mwdesign.me.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 09:58:27.454980 2026] [security2:error] [pid 2636409:tid 2636409] [client 185.177.72.10:38146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSMxR4QchRU-0eVC_NegAAACA"]
[Thu Jul 30 09:58:27.492022 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38154] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/chat-client/.env"] [unique_id "amsSM-QHGLNT6gIx6k15bwAAAB0"]
[Thu Jul 30 09:58:27.492213 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/chat-client/.env"] [unique_id "amsSM-QHGLNT6gIx6k15bwAAAB0"]
[Thu Jul 30 09:58:27.656009 2026] [security2:error] [pid 2647987:tid 2647987] [client 185.177.72.10:38154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSM-QHGLNT6gIx6k15bwAAAB0"]
[Thu Jul 30 09:58:28.033772 2026] [ssl:error] [pid 2647900:tid 2647900] (70014)End of file found: [client 216.73.216.199:31812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:28.076270 2026] [security2:error] [pid 2634653:tid 2634653] [client 185.177.72.10:38174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/chiminey/.env"] [unique_id "amsSNBlCbzYyQyOPgBE0sQAAABs"]
[Thu Jul 30 09:58:28.076448 2026] [security2:error] [pid 2634653:tid 2634653] [client 185.177.72.10:38174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/chiminey/.env"] [unique_id "amsSNBlCbzYyQyOPgBE0sQAAABs"]
[Thu Jul 30 09:58:28.233912 2026] [security2:error] [pid 2634653:tid 2634653] [client 185.177.72.10:38174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNBlCbzYyQyOPgBE0sQAAABs"]
[Thu Jul 30 09:58:28.270180 2026] [security2:error] [pid 2646929:tid 2646929] [client 185.177.72.10:38188] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client-app/.env"] [unique_id "amsSNE8ONYlZCbps1wULhwAAABI"]
[Thu Jul 30 09:58:28.270408 2026] [security2:error] [pid 2646929:tid 2646929] [client 185.177.72.10:38188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client-app/.env"] [unique_id "amsSNE8ONYlZCbps1wULhwAAABI"]
[Thu Jul 30 09:58:28.477583 2026] [security2:error] [pid 2646929:tid 2646929] [client 185.177.72.10:38188] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNE8ONYlZCbps1wULhwAAABI"]
[Thu Jul 30 09:58:28.529508 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38198] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.bak"] [unique_id "amsSNLzDi7bAxSTb5kpBIQAAAAI"]
[Thu Jul 30 09:58:28.529698 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.bak"] [unique_id "amsSNLzDi7bAxSTb5kpBIQAAAAI"]
[Thu Jul 30 09:58:28.598434 2026] [ssl:error] [pid 2646929:tid 2646929] (70014)End of file found: [client 216.73.216.199:32432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:28.733736 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNLzDi7bAxSTb5kpBIQAAAAI"]
[Thu Jul 30 09:58:28.771986 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38202] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.dev"] [unique_id "amsSNLzDi7bAxSTb5kpBIgAAAAI"]
[Thu Jul 30 09:58:28.772176 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.dev"] [unique_id "amsSNLzDi7bAxSTb5kpBIgAAAAI"]
[Thu Jul 30 09:58:28.922005 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNLzDi7bAxSTb5kpBIgAAAAI"]
[Thu Jul 30 09:58:28.957981 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38208] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.dist"] [unique_id "amsSNLzDi7bAxSTb5kpBIwAAAAI"]
[Thu Jul 30 09:58:28.958183 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.dist"] [unique_id "amsSNLzDi7bAxSTb5kpBIwAAAAI"]
[Thu Jul 30 09:58:29.074955 2026] [ssl:error] [pid 2647871:tid 2647871] (EAI 2)Name or service not known: [client 144.76.19.72:46816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:29.075006 2026] [ssl:error] [pid 2647871:tid 2647871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:29.133527 2026] [ssl:error] [pid 2645509:tid 2645509] (EAI 2)Name or service not known: [client 144.76.19.72:46822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:29.133557 2026] [ssl:error] [pid 2645509:tid 2645509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:29.135376 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:38208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNLzDi7bAxSTb5kpBIwAAAAI"]
[Thu Jul 30 09:58:29.175920 2026] [security2:error] [pid 2647871:tid 2647871] [client 185.177.72.10:38214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.local"] [unique_id "amsSNYY7OSG6colBrs8SZAAAAAA"]
[Thu Jul 30 09:58:29.176053 2026] [security2:error] [pid 2647871:tid 2647871] [client 185.177.72.10:38214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.local"] [unique_id "amsSNYY7OSG6colBrs8SZAAAAAA"]
[Thu Jul 30 09:58:29.345693 2026] [security2:error] [pid 2647871:tid 2647871] [client 185.177.72.10:38214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNYY7OSG6colBrs8SZAAAAAA"]
[Thu Jul 30 09:58:29.380289 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:38230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.production"] [unique_id "amsSNZccwZDV82S8NjKmrgAAAB4"]
[Thu Jul 30 09:58:29.380471 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:38230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.production"] [unique_id "amsSNZccwZDV82S8NjKmrgAAAB4"]
[Thu Jul 30 09:58:29.446027 2026] [lsapi:warn] [pid 2642851:tid 2642851] [client 74.116.33.38:30827] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:29.446091 2026] [lsapi:warn] [pid 2642851:tid 2642851] [client 74.116.33.38:30827] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:29.469144 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/cloud.php
[Thu Jul 30 09:58:29.530924 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:38230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNZccwZDV82S8NjKmrgAAAB4"]
[Thu Jul 30 09:58:29.564570 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:38238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.staging"] [unique_id "amsSNZccwZDV82S8NjKmrwAAAB4"]
[Thu Jul 30 09:58:29.564781 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:38238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/.env.staging"] [unique_id "amsSNZccwZDV82S8NjKmrwAAAB4"]
[Thu Jul 30 09:58:29.717904 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:38238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNZccwZDV82S8NjKmrwAAAB4"]
[Thu Jul 30 09:58:29.975830 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:38262] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /client/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/.git/config"] [unique_id "amsSNc1D5kGVeKsIMQUzXwAAADE"]
[Thu Jul 30 09:58:29.976120 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:38262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/.git/config"] [unique_id "amsSNc1D5kGVeKsIMQUzXwAAADE"]
[Thu Jul 30 09:58:30.122639 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:38262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNc1D5kGVeKsIMQUzXwAAADE"]
[Thu Jul 30 09:58:30.283169 2026] [lsapi:warn] [pid 2647988:tid 2647988] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:58:30.910718 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:38302] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amsSNiA5I1nMSfJA2UnYlgAAACM"]
[Thu Jul 30 09:58:30.911101 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:38302] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/App_Config/ConnectionStrings.config"] [unique_id "amsSNiA5I1nMSfJA2UnYlgAAACM"]
[Thu Jul 30 09:58:31.062182 2026] [security2:error] [pid 2641845:tid 2641845] [client 185.177.72.10:38302] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSNiA5I1nMSfJA2UnYlgAAACM"]
[Thu Jul 30 09:58:31.299460 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:38322] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/client/api-config.ini"] [unique_id "amsSN81D5kGVeKsIMQUzYQAAADE"]
[Thu Jul 30 09:58:31.299818 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:38322] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/api-config.ini"] [unique_id "amsSN81D5kGVeKsIMQUzYQAAADE"]
[Thu Jul 30 09:58:31.352714 2026] [ssl:error] [pid 2648952:tid 2648952] (70014)End of file found: [client 216.73.216.199:15474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:31.379773 2026] [security2:error] [pid 2641792:tid 2641792] [client 185.191.171.3:24458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/jack-fisher-obituary"] [unique_id "amsSN1FtnyjQWa0Q15guEQAAABk"]
[Thu Jul 30 09:58:31.441732 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:38322] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSN81D5kGVeKsIMQUzYQAAADE"]
[Thu Jul 30 09:58:32.120923 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 09:58:32.189700 2026] [ssl:error] [pid 2636409:tid 2636409] (EAI 2)Name or service not known: [client 144.76.19.72:45126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:32.189739 2026] [ssl:error] [pid 2636409:tid 2636409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:32.245368 2026] [ssl:error] [pid 2641846:tid 2641846] (EAI 2)Name or service not known: [client 144.76.19.72:45140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:32.245398 2026] [ssl:error] [pid 2641846:tid 2641846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:32.744269 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/autoload_classmap.php
[Thu Jul 30 09:58:33.761508 2026] [ssl:error] [pid 2647935:tid 2647935] (70014)End of file found: [client 216.73.216.199:27036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:34.267636 2026] [ssl:error] [pid 2642849:tid 2642849] (70014)End of file found: [client 216.73.216.199:48971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:34.761796 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/file.php
[Thu Jul 30 09:58:35.300271 2026] [ssl:error] [pid 2642897:tid 2642897] (EAI 2)Name or service not known: [client 144.76.19.72:45158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:35.300322 2026] [ssl:error] [pid 2642897:tid 2642897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:35.353556 2026] [ssl:error] [pid 2624435:tid 2624435] (EAI 2)Name or service not known: [client 144.76.19.72:45172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:35.353588 2026] [ssl:error] [pid 2624435:tid 2624435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:35.369381 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-trackback.php
[Thu Jul 30 09:58:36.663702 2026] [core:crit] [pid 2647937:tid 2647937] (13)Permission denied: [client 216.73.216.199:27612] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/lock/lmlib/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/lock/lmlib/' is executable
[Thu Jul 30 09:58:37.108090 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:1220] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/client/laravel.log"] [unique_id "amsSPdbwjkuln4nh4vsPbgAAACg"]
[Thu Jul 30 09:58:37.108530 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:1220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/laravel.log"] [unique_id "amsSPdbwjkuln4nh4vsPbgAAACg"]
[Thu Jul 30 09:58:37.263698 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:1220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSPdbwjkuln4nh4vsPbgAAACg"]
[Thu Jul 30 09:58:37.381131 2026] [core:error] [pid 2647937:tid 2647937] (13)Permission denied: [client 216.73.216.199:27612] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/ctor
[Thu Jul 30 09:58:37.843689 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:1244] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amsSPSGRHSAq2-9F29gS4AAAAAs"]
[Thu Jul 30 09:58:37.843873 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:1244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/mutual-fund-app/.env"] [unique_id "amsSPSGRHSAq2-9F29gS4AAAAAs"]
[Thu Jul 30 09:58:37.866722 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/cloud.php
[Thu Jul 30 09:58:37.992015 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:1244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSPSGRHSAq2-9F29gS4AAAAAs"]
[Thu Jul 30 09:58:38.219758 2026] [security2:error] [pid 2648111:tid 2648111] [client 185.177.72.10:1264] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/client/php.ini"] [unique_id "amsSPvZPRx2RqysC7fZcuQAAACY"]
[Thu Jul 30 09:58:38.220217 2026] [security2:error] [pid 2648111:tid 2648111] [client 185.177.72.10:1264] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/php.ini"] [unique_id "amsSPvZPRx2RqysC7fZcuQAAACY"]
[Thu Jul 30 09:58:38.289029 2026] [core:error] [pid 2647937:tid 2647937] (13)Permission denied: [client 216.73.216.199:27612] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/close_delay
[Thu Jul 30 09:58:38.370305 2026] [security2:error] [pid 2648111:tid 2648111] [client 185.177.72.10:1264] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSPvZPRx2RqysC7fZcuQAAACY"]
[Thu Jul 30 09:58:38.428500 2026] [ssl:error] [pid 2645508:tid 2645508] (EAI 2)Name or service not known: [client 144.76.19.72:45186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:38.428540 2026] [ssl:error] [pid 2645508:tid 2645508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:38.466390 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/wp-load.php
[Thu Jul 30 09:58:38.490667 2026] [ssl:error] [pid 2634653:tid 2634653] (EAI 2)Name or service not known: [client 144.76.19.72:45190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:38.490707 2026] [ssl:error] [pid 2634653:tid 2634653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:38.889638 2026] [ssl:error] [pid 2647937:tid 2647937] (70014)End of file found: [client 216.73.216.199:27612] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:39.086545 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/file.php
[Thu Jul 30 09:58:39.408730 2026] [ssl:error] [pid 2648953:tid 2648953] (70014)End of file found: [client 216.73.216.199:16934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:39.674312 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/makeasmtp.php
[Thu Jul 30 09:58:40.670240 2026] [security2:error] [pid 2647985:tid 2647985] [client 23.22.59.87:62263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSQC1MDKD59KKldBY-uAAAABc"]
[Thu Jul 30 09:58:40.935184 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:1394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/src/.env"] [unique_id "amsSQC9F4ZNnIPCAvAQN2QAAAA0"]
[Thu Jul 30 09:58:40.935368 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:1394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/src/.env"] [unique_id "amsSQC9F4ZNnIPCAvAQN2QAAAA0"]
[Thu Jul 30 09:58:41.004548 2026] [lsapi:warn] [pid 2645508:tid 2645508] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:58:41.106784 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:1394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQC9F4ZNnIPCAvAQN2QAAAA0"]
[Thu Jul 30 09:58:41.492024 2026] [security2:error] [pid 2624435:tid 2624435] [client 34.224.132.215:61733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSQQ0xskC6cuJ-PDXj5QAAADY"]
[Thu Jul 30 09:58:41.544046 2026] [ssl:error] [pid 2647985:tid 2647985] (EAI 2)Name or service not known: [client 144.76.19.72:41386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:41.544089 2026] [ssl:error] [pid 2647985:tid 2647985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:41.554646 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/404.php
[Thu Jul 30 09:58:41.596848 2026] [ssl:error] [pid 2645509:tid 2645509] (EAI 2)Name or service not known: [client 144.76.19.72:41402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:41.596885 2026] [ssl:error] [pid 2645509:tid 2645509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:41.636893 2026] [authz_core:error] [pid 2646483:tid 2646483] [client 57.141.0.42:36774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:58:41.637511 2026] [authz_core:error] [pid 2646483:tid 2646483] [client 57.141.0.42:36774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:58:41.700740 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:1434] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/client/web.config"] [unique_id "amsSQZccwZDV82S8NjKmtgAAAB4"]
[Thu Jul 30 09:58:41.700973 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:1434] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /client/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/client/web.config"] [unique_id "amsSQZccwZDV82S8NjKmtgAAAB4"]
[Thu Jul 30 09:58:41.701156 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:1434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/client/web.config"] [unique_id "amsSQZccwZDV82S8NjKmtgAAAB4"]
[Thu Jul 30 09:58:41.843580 2026] [security2:error] [pid 2647988:tid 2647988] [client 185.177.72.10:1434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQZccwZDV82S8NjKmtgAAAB4"]
[Thu Jul 30 09:58:42.197761 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/makeasmtp.php
[Thu Jul 30 09:58:42.276573 2026] [authz_core:error] [pid 2641792:tid 2641792] [client 4.184.185.91:16793] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-content/uploads/sucuri/index.php
[Thu Jul 30 09:58:42.284747 2026] [security2:error] [pid 2647985:tid 2647985] [client 150.109.230.210:57476] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amsSQi1MDKD59KKldBY-uQAAABc"]
[Thu Jul 30 09:58:42.401525 2026] [authz_core:error] [pid 2641792:tid 2641792] [client 4.184.185.91:16793] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-includes/Text/error_log
[Thu Jul 30 09:58:42.418064 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:1468] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/clld_dir/.env"] [unique_id "amsSQi9F4ZNnIPCAvAQN2gAAAA0"]
[Thu Jul 30 09:58:42.418281 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:1468] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/clld_dir/.env"] [unique_id "amsSQi9F4ZNnIPCAvAQN2gAAAA0"]
[Thu Jul 30 09:58:42.558733 2026] [security2:error] [pid 2645509:tid 2645509] [client 185.177.72.10:1468] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQi9F4ZNnIPCAvAQN2gAAAA0"]
[Thu Jul 30 09:58:42.592563 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:1476] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amsSQiGRHSAq2-9F29gS5AAAAAs"]
[Thu Jul 30 09:58:42.592751 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:1476] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "amsSQiGRHSAq2-9F29gS5AAAAAs"]
[Thu Jul 30 09:58:42.732734 2026] [security2:error] [pid 2645508:tid 2645508] [client 185.177.72.10:1476] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQiGRHSAq2-9F29gS5AAAAAs"]
[Thu Jul 30 09:58:42.766986 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:1488] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.bak"] [unique_id "amsSQoW_fWF6QfgPXMIqLgAAAA8"]
[Thu Jul 30 09:58:42.767236 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:1488] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.bak"] [unique_id "amsSQoW_fWF6QfgPXMIqLgAAAA8"]
[Thu Jul 30 09:58:42.776795 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/radio.php
[Thu Jul 30 09:58:42.834182 2026] [core:error] [pid 2647935:tid 2647935] (13)Permission denied: [client 216.73.216.199:1369] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/slabs_cpu_partial
[Thu Jul 30 09:58:42.918345 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:1488] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQoW_fWF6QfgPXMIqLgAAAA8"]
[Thu Jul 30 09:58:42.952393 2026] [security2:error] [pid 2646483:tid 2646483] [client 185.177.72.10:1500] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.dev"] [unique_id "amsSQhTWz9irmh6yr8qCFAAAAAU"]
[Thu Jul 30 09:58:42.952678 2026] [security2:error] [pid 2646483:tid 2646483] [client 185.177.72.10:1500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.dev"] [unique_id "amsSQhTWz9irmh6yr8qCFAAAAAU"]
[Thu Jul 30 09:58:43.098098 2026] [security2:error] [pid 2646483:tid 2646483] [client 185.177.72.10:1500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQhTWz9irmh6yr8qCFAAAAAU"]
[Thu Jul 30 09:58:43.131843 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:1508] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.dist"] [unique_id "amsSQ9HOC4vvbRc8Hei6awAAABg"]
[Thu Jul 30 09:58:43.132014 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:1508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.dist"] [unique_id "amsSQ9HOC4vvbRc8Hei6awAAABg"]
[Thu Jul 30 09:58:43.282203 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:1508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQ9HOC4vvbRc8Hei6awAAABg"]
[Thu Jul 30 09:58:43.319750 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:1524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.local"] [unique_id "amsSQxIpYY1kAgz_RsqhZQAAAAg"]
[Thu Jul 30 09:58:43.319994 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:1524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cms/.env.local"] [unique_id "amsSQxIpYY1kAgz_RsqhZQAAAAg"]
[Thu Jul 30 09:58:43.461386 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:1524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSQxIpYY1kAgz_RsqhZQAAAAg"]
[Thu Jul 30 09:58:44.173987 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/system_log.php
[Thu Jul 30 09:58:44.191107 2026] [ssl:error] [pid 2647935:tid 2647935] (70014)End of file found: [client 216.73.216.199:1369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:44.510493 2026] [security2:error] [pid 2647900:tid 2647900] [client 85.128.143.151:54016] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amsSRObdxXBBki0uR9II5wAAAAM"]
[Thu Jul 30 09:58:44.652810 2026] [ssl:error] [pid 2646483:tid 2646483] (EAI 2)Name or service not known: [client 144.76.19.72:41408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:44.652838 2026] [ssl:error] [pid 2646483:tid 2646483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:44.682149 2026] [security2:error] [pid 2647986:tid 2647986] [client 3.232.102.111:42052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSRLs-KYmoltpa0UoAVwAAABw"]
[Thu Jul 30 09:58:44.706032 2026] [ssl:error] [pid 2641791:tid 2641791] (EAI 2)Name or service not known: [client 144.76.19.72:41420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:44.706054 2026] [ssl:error] [pid 2641791:tid 2641791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:44.733408 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/wp-activate.php
[Thu Jul 30 09:58:45.371302 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/makeasmtp.php
[Thu Jul 30 09:58:45.773987 2026] [security2:error] [pid 2647986:tid 2647986] [client 85.208.96.193:32622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.7650.html"] [unique_id "amsSRbs-KYmoltpa0UoAWAAAABw"]
[Thu Jul 30 09:58:46.170896 2026] [core:error] [pid 2647985:tid 2647985] (13)Permission denied: [client 216.73.216.199:31357] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/ctor
[Thu Jul 30 09:58:46.633672 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/link.php
[Thu Jul 30 09:58:47.199337 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/autoload_classmap.php
[Thu Jul 30 09:58:47.694316 2026] [ssl:error] [pid 2647985:tid 2647985] (70014)End of file found: [client 216.73.216.199:31357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:47.765726 2026] [ssl:error] [pid 2624435:tid 2624435] (EAI 2)Name or service not known: [client 144.76.19.72:41422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:47.765755 2026] [ssl:error] [pid 2624435:tid 2624435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:47.821751 2026] [ssl:error] [pid 2642742:tid 2642742] (EAI 2)Name or service not known: [client 144.76.19.72:41438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:47.821783 2026] [ssl:error] [pid 2642742:tid 2642742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:47.995712 2026] [ssl:error] [pid 2648952:tid 2648952] (70014)End of file found: [client 216.73.216.199:15855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:48.548474 2026] [lsapi:warn] [pid 2624435:tid 2624435] [client 173.252.95.57:37738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:48.548522 2026] [lsapi:warn] [pid 2624435:tid 2624435] [client 173.252.95.57:37738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:48.619924 2026] [lsapi:warn] [pid 2648183:tid 2648183] [client 173.252.95.37:55650] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:48.619975 2026] [lsapi:warn] [pid 2648183:tid 2648183] [client 173.252.95.37:55650] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:48.777328 2026] [authz_core:error] [pid 2647936:tid 2647936] [client 66.249.66.33:60173] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:58:48.780234 2026] [authz_core:error] [pid 2647936:tid 2647936] [client 66.249.66.33:60173] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:58:48.891686 2026] [lsapi:warn] [pid 2642742:tid 2642742] [client 173.252.95.45:59446] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:48.891736 2026] [lsapi:warn] [pid 2642742:tid 2642742] [client 173.252.95.45:59446] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:48.934608 2026] [lsapi:warn] [pid 2645510:tid 2645510] [client 173.252.95.37:55656] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:48.934669 2026] [lsapi:warn] [pid 2645510:tid 2645510] [client 173.252.95.37:55656] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:49.096245 2026] [security2:error] [pid 2645508:tid 2645508] [client 3.221.244.28:17770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSSSGRHSAq2-9F29gS5gAAAAs"]
[Thu Jul 30 09:58:49.096385 2026] [security2:error] [pid 2646893:tid 2646893] [client 185.191.171.2:34920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8817.45.html"] [unique_id "amsSSU2cUF8VNgn4OGd8vAAAABE"]
[Thu Jul 30 09:58:49.880935 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:14306] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/cms/php.ini"] [unique_id "amsSSa6KuX4rRscgdjLLNAAAAAo"]
[Thu Jul 30 09:58:49.881317 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:14306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cms/php.ini"] [unique_id "amsSSa6KuX4rRscgdjLLNAAAAAo"]
[Thu Jul 30 09:58:50.026584 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:14306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSSa6KuX4rRscgdjLLNAAAAAo"]
[Thu Jul 30 09:58:50.986318 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/log.php
[Thu Jul 30 09:58:51.042897 2026] [security2:error] [pid 2646893:tid 2646893] [client 74.7.242.21:56766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amsSS02cUF8VNgn4OGd8wAAAABE"]
[Thu Jul 30 09:58:51.071176 2026] [ssl:error] [pid 2650005:tid 2650005] (EAI 2)Name or service not known: [client 144.76.19.72:62032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:51.071234 2026] [ssl:error] [pid 2650005:tid 2650005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:51.148020 2026] [ssl:error] [pid 2637691:tid 2637691] (EAI 2)Name or service not known: [client 144.76.19.72:62034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:51.148088 2026] [ssl:error] [pid 2637691:tid 2637691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:51.630000 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/wp-signup.php
[Thu Jul 30 09:58:51.741910 2026] [ssl:error] [pid 2641792:tid 2641792] (70014)End of file found: [client 216.73.216.199:35358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:51.826103 2026] [lsapi:warn] [pid 2648953:tid 2648953] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:58:51.912835 2026] [lsapi:warn] [pid 2650005:tid 2650005] [client 173.252.82.63:37906] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:51.912880 2026] [lsapi:warn] [pid 2650005:tid 2650005] [client 173.252.82.63:37906] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:52.426805 2026] [lsapi:warn] [pid 2637691:tid 2637691] [client 173.252.82.114:55780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:52.426862 2026] [lsapi:warn] [pid 2637691:tid 2637691] [client 173.252.82.114:55780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:52.433317 2026] [lsapi:warn] [pid 2642897:tid 2642897] [client 173.252.82.21:59782] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:52.433366 2026] [lsapi:warn] [pid 2642897:tid 2642897] [client 173.252.82.21:59782] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:52.487359 2026] [security2:error] [pid 2647990:tid 2647990] [client 94.154.43.229:53000] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreen.rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amsSTPS6kbDr1_R1AfLUSQAAACU"]
[Thu Jul 30 09:58:52.487561 2026] [security2:error] [pid 2647990:tid 2647990] [client 94.154.43.229:53000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreen.rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amsSTPS6kbDr1_R1AfLUSQAAACU"]
[Thu Jul 30 09:58:52.487815 2026] [security2:error] [pid 2647990:tid 2647990] [client 94.154.43.229:53000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreen.rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amsSTPS6kbDr1_R1AfLUSQAAACU"]
[Thu Jul 30 09:58:52.656905 2026] [lsapi:warn] [pid 2650005:tid 2650005] [client 173.252.82.42:37812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:52.656940 2026] [lsapi:warn] [pid 2650005:tid 2650005] [client 173.252.82.42:37812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:52.789747 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/radio.php
[Thu Jul 30 09:58:52.916308 2026] [security2:error] [pid 2628120:tid 2628120] [client 98.83.94.113:35322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSTCqCrh0o4antW6s87AAAABM"]
[Thu Jul 30 09:58:53.455253 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-mail.php
[Thu Jul 30 09:58:54.024160 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:14466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/code/api/.env"] [unique_id "amsSTiqCrh0o4antW6s87QAAABM"]
[Thu Jul 30 09:58:54.024302 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:14466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/code/api/.env"] [unique_id "amsSTiqCrh0o4antW6s87QAAABM"]
[Thu Jul 30 09:58:54.168918 2026] [core:error] [pid 2650049:tid 2650049] (13)Permission denied: [client 216.73.216.199:62596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/cpu_slabs
[Thu Jul 30 09:58:54.180437 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:14466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSTiqCrh0o4antW6s87QAAABM"]
[Thu Jul 30 09:58:54.205611 2026] [ssl:error] [pid 2641845:tid 2641845] (EAI 2)Name or service not known: [client 144.76.19.72:62036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:54.205646 2026] [ssl:error] [pid 2641845:tid 2641845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:54.215039 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:14474] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/code/web/.env"] [unique_id "amsSTnClVEbRTOXMCakECAAAACs"]
[Thu Jul 30 09:58:54.215238 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:14474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/code/web/.env"] [unique_id "amsSTnClVEbRTOXMCakECAAAACs"]
[Thu Jul 30 09:58:54.262882 2026] [ssl:error] [pid 2648952:tid 2648952] (EAI 2)Name or service not known: [client 144.76.19.72:62050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:54.262923 2026] [ssl:error] [pid 2648952:tid 2648952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:54.377492 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:14474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSTnClVEbRTOXMCakECAAAACs"]
[Thu Jul 30 09:58:54.409566 2026] [security2:error] [pid 2646930:tid 2646930] [client 43.166.251.233:47656] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kirstybashforth.com"] [uri "/"] [unique_id "amsSTi7ph9NlTLG2nfUEqQAAABU"]
[Thu Jul 30 09:58:54.412863 2026] [security2:error] [pid 2648182:tid 2648182] [client 185.177.72.10:14486] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codeigniter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/codeigniter/.env"] [unique_id "amsSTk9IA2suWhBWS3B48wAAACk"]
[Thu Jul 30 09:58:54.413017 2026] [security2:error] [pid 2648182:tid 2648182] [client 185.177.72.10:14486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/codeigniter/.env"] [unique_id "amsSTk9IA2suWhBWS3B48wAAACk"]
[Thu Jul 30 09:58:54.472339 2026] [ssl:error] [pid 2650049:tid 2650049] (70014)End of file found: [client 216.73.216.199:62596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:54.562182 2026] [security2:error] [pid 2648182:tid 2648182] [client 185.177.72.10:14486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSTk9IA2suWhBWS3B48wAAACk"]
[Thu Jul 30 09:58:54.790877 2026] [authz_core:error] [pid 2637648:tid 2637648] [client 57.141.0.54:53410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:58:54.791502 2026] [authz_core:error] [pid 2637648:tid 2637648] [client 57.141.0.54:53410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:58:55.081809 2026] [ssl:error] [pid 2637691:tid 2637691] (70014)End of file found: [client 216.73.216.199:55369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:55.846809 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-links-opml.php
[Thu Jul 30 09:58:55.867556 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:3774] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/codenames-frontend/.env"] [unique_id "amsSTycQvq1zlONumHJ79wAAAC0"]
[Thu Jul 30 09:58:55.867814 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:3774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/codenames-frontend/.env"] [unique_id "amsSTycQvq1zlONumHJ79wAAAC0"]
[Thu Jul 30 09:58:56.015922 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:3774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSTycQvq1zlONumHJ79wAAAC0"]
[Thu Jul 30 09:58:56.050251 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:3778] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amsSUKtq9IZf4m9o66UWvwAAABQ"]
[Thu Jul 30 09:58:56.050388 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:3778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "amsSUKtq9IZf4m9o66UWvwAAABQ"]
[Thu Jul 30 09:58:56.189040 2026] [security2:error] [pid 2642789:tid 2642789] [client 185.177.72.10:3778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSUKtq9IZf4m9o66UWvwAAABQ"]
[Thu Jul 30 09:58:56.224663 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:3780] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/collected_static/.env"] [unique_id "amsSUDdnWhdb5n_RrTLGUwAAADg"]
[Thu Jul 30 09:58:56.224847 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:3780] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/collected_static/.env"] [unique_id "amsSUDdnWhdb5n_RrTLGUwAAADg"]
[Thu Jul 30 09:58:56.401399 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:3780] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSUDdnWhdb5n_RrTLGUwAAADg"]
[Thu Jul 30 09:58:56.480149 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/radio.php
[Thu Jul 30 09:58:56.614381 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:3810] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/common/.env"] [unique_id "amsSUC7ph9NlTLG2nfUEqgAAABU"]
[Thu Jul 30 09:58:56.614565 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:3810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/common/.env"] [unique_id "amsSUC7ph9NlTLG2nfUEqgAAABU"]
[Thu Jul 30 09:58:56.755461 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:3810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSUC7ph9NlTLG2nfUEqgAAABU"]
[Thu Jul 30 09:58:56.791851 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:3822] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.bak"] [unique_id "amsSUBIpYY1kAgz_RsqhawAAAAg"]
[Thu Jul 30 09:58:56.792033 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:3822] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.bak"] [unique_id "amsSUBIpYY1kAgz_RsqhawAAAAg"]
[Thu Jul 30 09:58:56.931708 2026] [security2:error] [pid 2647936:tid 2647936] [client 185.177.72.10:3822] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSUBIpYY1kAgz_RsqhawAAAAg"]
[Thu Jul 30 09:58:56.969648 2026] [security2:error] [pid 2647983:tid 2647983] [client 23.21.250.48:49195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSUBdxmX6xpODXh8H_zAAAAA4"]
[Thu Jul 30 09:58:56.970277 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:3830] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.dev"] [unique_id "amsSUNbwjkuln4nh4vsPdwAAACg"]
[Thu Jul 30 09:58:56.970487 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:3830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.dev"] [unique_id "amsSUNbwjkuln4nh4vsPdwAAACg"]
[Thu Jul 30 09:58:57.112961 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:3830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSUNbwjkuln4nh4vsPdwAAACg"]
[Thu Jul 30 09:58:57.150056 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:3846] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.dist"] [unique_id "amsSUScQvq1zlONumHJ7-AAAAC0"]
[Thu Jul 30 09:58:57.150262 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:3846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.dist"] [unique_id "amsSUScQvq1zlONumHJ7-AAAAC0"]
[Thu Jul 30 09:58:57.162721 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/images/file.php
[Thu Jul 30 09:58:57.294311 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:3846] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSUScQvq1zlONumHJ7-AAAAC0"]
[Thu Jul 30 09:58:57.330776 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:3862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /common/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.local"] [unique_id "amsSUULxYlQ9rOjGgkMxjAAAAEQ"]
[Thu Jul 30 09:58:57.330943 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:3862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/common/.env.local"] [unique_id "amsSUULxYlQ9rOjGgkMxjAAAAEQ"]
[Thu Jul 30 09:58:57.340819 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:62064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:57.340849 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:57.345206 2026] [security2:error] [pid 2637648:tid 2637648] [client 163.61.60.30:55328] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsSUVbEqVhwrVygyWaWWQAAADI"]
[Thu Jul 30 09:58:57.395789 2026] [ssl:error] [pid 2650004:tid 2650004] (EAI 2)Name or service not known: [client 144.76.19.72:62068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:58:57.395837 2026] [ssl:error] [pid 2650004:tid 2650004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:58:57.471167 2026] [security2:error] [pid 2637686:tid 2637686] [client 185.177.72.10:3862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSUULxYlQ9rOjGgkMxjAAAAEQ"]
[Thu Jul 30 09:58:57.530648 2026] [security2:error] [pid 2648183:tid 2648183] [client 43.153.10.83:54410] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsSUXClVEbRTOXMCakECgAAACs"]
[Thu Jul 30 09:58:57.532201 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 43.153.10.83:54410] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:58:57.533937 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 43.153.10.83:54410] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:58:58.104765 2026] [ssl:error] [pid 2647988:tid 2647988] (70014)End of file found: [client 216.73.216.199:22126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:58:58.934240 2026] [lsapi:warn] [pid 2646483:tid 2646483] [client 173.252.70.61:54526] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:58.934288 2026] [lsapi:warn] [pid 2646483:tid 2646483] [client 173.252.70.61:54526] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:58:59.602279 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/license.php
[Thu Jul 30 09:58:59.930637 2026] [lsapi:warn] [pid 2646930:tid 2646930] [client 173.252.70.39:35252] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:58:59.930683 2026] [lsapi:warn] [pid 2646930:tid 2646930] [client 173.252.70.39:35252] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:59:00.040384 2026] [lsapi:warn] [pid 2647900:tid 2647900] [client 173.252.70.53:43862] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:59:00.040430 2026] [lsapi:warn] [pid 2647900:tid 2647900] [client 173.252.70.53:43862] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:59:00.089692 2026] [lsapi:warn] [pid 2650044:tid 2650044] [client 173.252.70.13:55402] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 09:59:00.089736 2026] [lsapi:warn] [pid 2650044:tid 2650044] [client 173.252.70.13:55402] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 09:59:00.235310 2026] [ssl:error] [pid 2646893:tid 2646893] (70014)End of file found: [client 216.73.216.199:51705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:00.244146 2026] [security2:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "the-pryors.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsSVCyXJ9YNKvmU7XOF2gAAAAE"]
[Thu Jul 30 09:59:00.244371 2026] [security2:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "the-pryors.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsSVCyXJ9YNKvmU7XOF2gAAAAE"]
[Thu Jul 30 09:59:00.453588 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:65498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:00.453629 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:00.506873 2026] [ssl:error] [pid 2648183:tid 2648183] (EAI 2)Name or service not known: [client 144.76.19.72:65508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:00.506911 2026] [ssl:error] [pid 2648183:tid 2648183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:00.689363 2026] [security2:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "the-pryors.co.uk"] [uri "/index.php"] [unique_id "amsSVCyXJ9YNKvmU7XOF2gAAAAE"]
[Thu Jul 30 09:59:01.014944 2026] [authz_core:error] [pid 2650045:tid 2650045] [client 57.141.0.67:54320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:59:01.015608 2026] [authz_core:error] [pid 2650045:tid 2650045] [client 57.141.0.67:54320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:59:01.330221 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/radio.php
[Thu Jul 30 09:59:02.357588 2026] [access_compat:error] [pid 2647901:tid 2647901] [client 45.158.164.139:42030] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 09:59:02.646390 2026] [lsapi:warn] [pid 2650005:tid 2650005] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:59:03.049028 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/autoload_classmap.php
[Thu Jul 30 09:59:03.271106 2026] [ssl:error] [pid 2645510:tid 2645510] (70014)End of file found: [client 216.73.216.199:51838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:03.559553 2026] [ssl:error] [pid 2647935:tid 2647935] (EAI 2)Name or service not known: [client 144.76.19.72:65510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:03.559621 2026] [ssl:error] [pid 2647935:tid 2647935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:03.616239 2026] [ssl:error] [pid 2646930:tid 2646930] (EAI 2)Name or service not known: [client 144.76.19.72:65514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:03.616273 2026] [ssl:error] [pid 2646930:tid 2646930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:03.708430 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:4212] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/common/php.ini"] [unique_id "amsSV7XZCFa7ftwinVV3bwAAADc"]
[Thu Jul 30 09:59:03.708795 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:4212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/common/php.ini"] [unique_id "amsSV7XZCFa7ftwinVV3bwAAADc"]
[Thu Jul 30 09:59:03.850533 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:4212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSV7XZCFa7ftwinVV3bwAAADc"]
[Thu Jul 30 09:59:04.269668 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/wp-load.php
[Thu Jul 30 09:59:04.873319 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/file.php
[Thu Jul 30 09:59:05.451208 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/dropdown.php
[Thu Jul 30 09:59:06.039897 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/plugins/dropdown.php
[Thu Jul 30 09:59:06.675834 2026] [ssl:error] [pid 2648953:tid 2648953] (EAI 2)Name or service not known: [client 144.76.19.72:65518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:06.675871 2026] [ssl:error] [pid 2648953:tid 2648953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:06.729715 2026] [ssl:error] [pid 2646893:tid 2646893] (EAI 2)Name or service not known: [client 144.76.19.72:65528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:06.729770 2026] [ssl:error] [pid 2646893:tid 2646893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:07.154437 2026] [security2:error] [pid 2642897:tid 2642897] [client 185.177.72.10:15782] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/community/.env"] [unique_id "amsSWwBDiiyW3ogUkAlI9QAAAC8"]
[Thu Jul 30 09:59:07.154698 2026] [security2:error] [pid 2642897:tid 2642897] [client 185.177.72.10:15782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/community/.env"] [unique_id "amsSWwBDiiyW3ogUkAlI9QAAAC8"]
[Thu Jul 30 09:59:07.231221 2026] [access_compat:error] [pid 2646442:tid 2646442] [client 20.171.55.167:1250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-signup.php
[Thu Jul 30 09:59:07.304021 2026] [security2:error] [pid 2642897:tid 2642897] [client 185.177.72.10:15782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSWwBDiiyW3ogUkAlI9QAAAC8"]
[Thu Jul 30 09:59:07.522719 2026] [core:error] [pid 2648183:tid 2648183] (13)Permission denied: [client 216.73.216.199:4713] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS0/flags
[Thu Jul 30 09:59:07.851953 2026] [authz_core:error] [pid 2637691:tid 2637691] [client 192.175.111.248:13172] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 09:59:07.853463 2026] [authz_core:error] [pid 2637691:tid 2637691] [client 192.175.111.248:13172] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 09:59:08.265050 2026] [security2:error] [pid 2628120:tid 2628120] [client 8.216.47.179:19913] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSXCqCrh0o4antW6s88QAAABM"]
[Thu Jul 30 09:59:08.265131 2026] [security2:error] [pid 2628120:tid 2628120] [client 8.216.47.179:19913] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSXCqCrh0o4antW6s88QAAABM"]
[Thu Jul 30 09:59:08.265429 2026] [security2:error] [pid 2628120:tid 2628120] [client 8.216.47.179:19913] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSXCqCrh0o4antW6s88QAAABM"]
[Thu Jul 30 09:59:08.270752 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/images/css.php
[Thu Jul 30 09:59:08.794483 2026] [security2:error] [pid 2646893:tid 2646893] [client 185.177.72.10:15862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env"] [unique_id "amsSXE2cUF8VNgn4OGd8ywAAABE"]
[Thu Jul 30 09:59:08.794682 2026] [security2:error] [pid 2646893:tid 2646893] [client 185.177.72.10:15862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env"] [unique_id "amsSXE2cUF8VNgn4OGd8ywAAABE"]
[Thu Jul 30 09:59:08.894681 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 09:59:08.945447 2026] [security2:error] [pid 2646893:tid 2646893] [client 185.177.72.10:15862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSXE2cUF8VNgn4OGd8ywAAABE"]
[Thu Jul 30 09:59:08.979714 2026] [security2:error] [pid 2650051:tid 2650051] [client 185.177.72.10:15878] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.bak"] [unique_id "amsSXMX45e2SLwulEf0z6gAAAD4"]
[Thu Jul 30 09:59:08.979950 2026] [security2:error] [pid 2650051:tid 2650051] [client 185.177.72.10:15878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.bak"] [unique_id "amsSXMX45e2SLwulEf0z6gAAAD4"]
[Thu Jul 30 09:59:09.128185 2026] [security2:error] [pid 2650051:tid 2650051] [client 185.177.72.10:15878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSXMX45e2SLwulEf0z6gAAAD4"]
[Thu Jul 30 09:59:09.164850 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:15886] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.dev"] [unique_id "amsSXTbpHDvCwivhdECybAAAABA"]
[Thu Jul 30 09:59:09.165086 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:15886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.dev"] [unique_id "amsSXTbpHDvCwivhdECybAAAABA"]
[Thu Jul 30 09:59:09.317375 2026] [security2:error] [pid 2645510:tid 2645510] [client 185.177.72.10:15886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSXTbpHDvCwivhdECybAAAABA"]
[Thu Jul 30 09:59:09.344153 2026] [authz_core:error] [pid 2615823:tid 2615823] [client 57.141.0.20:61984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:59:09.344791 2026] [authz_core:error] [pid 2615823:tid 2615823] [client 57.141.0.20:61984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:59:09.353035 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:15900] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.dist"] [unique_id "amsSXZoL8w3BzPER_zV8mwAAACQ"]
[Thu Jul 30 09:59:09.353204 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:15900] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.dist"] [unique_id "amsSXZoL8w3BzPER_zV8mwAAACQ"]
[Thu Jul 30 09:59:09.493546 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:15900] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSXZoL8w3BzPER_zV8mwAAACQ"]
[Thu Jul 30 09:59:09.504143 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/cong.php
[Thu Jul 30 09:59:09.534372 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:15910] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.local"] [unique_id "amsSXdbwjkuln4nh4vsPfAAAACg"]
[Thu Jul 30 09:59:09.534603 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:15910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conf/.env.local"] [unique_id "amsSXdbwjkuln4nh4vsPfAAAACg"]
[Thu Jul 30 09:59:09.680625 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:15910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSXdbwjkuln4nh4vsPfAAAACg"]
[Thu Jul 30 09:59:09.817166 2026] [ssl:error] [pid 2646483:tid 2646483] (EAI 2)Name or service not known: [client 144.76.19.72:54366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:09.817230 2026] [ssl:error] [pid 2646483:tid 2646483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:09.826054 2026] [security2:error] [pid 2650051:tid 2650051] [client 43.166.244.66:40186] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/"] [unique_id "amsSXcX45e2SLwulEf0z6wAAAD4"]
[Thu Jul 30 09:59:09.875151 2026] [ssl:error] [pid 2642789:tid 2642789] (EAI 2)Name or service not known: [client 144.76.19.72:54382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:09.875185 2026] [ssl:error] [pid 2642789:tid 2642789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:10.851252 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/ova-tools.php
[Thu Jul 30 09:59:10.981659 2026] [security2:error] [pid 2648825:tid 2648825] [client 43.166.244.66:40886] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsSXicQvq1zlONumHJ7_QAAAC0"], referer: http://theislipgarage.co.uk
[Thu Jul 30 09:59:12.763907 2026] [security2:error] [pid 2647937:tid 2647937] [client 101.47.26.250:55037] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSYBEsaqVuMDhyelsufgAAAAk"]
[Thu Jul 30 09:59:12.763958 2026] [security2:error] [pid 2647937:tid 2647937] [client 101.47.26.250:55037] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSYBEsaqVuMDhyelsufgAAAAk"]
[Thu Jul 30 09:59:12.764230 2026] [security2:error] [pid 2647937:tid 2647937] [client 101.47.26.250:55037] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSYBEsaqVuMDhyelsufgAAAAk"]
[Thu Jul 30 09:59:12.929622 2026] [ssl:error] [pid 2650051:tid 2650051] (EAI 2)Name or service not known: [client 144.76.19.72:54394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:12.929659 2026] [ssl:error] [pid 2650051:tid 2650051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:12.982365 2026] [ssl:error] [pid 2648183:tid 2648183] (70014)End of file found: [client 216.73.216.199:4713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:12.986283 2026] [ssl:error] [pid 2641792:tid 2641792] (EAI 2)Name or service not known: [client 144.76.19.72:54402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:12.986311 2026] [ssl:error] [pid 2641792:tid 2641792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:13.277311 2026] [lsapi:warn] [pid 2642851:tid 2642851] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:59:14.605672 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/license.php
[Thu Jul 30 09:59:15.346894 2026] [core:error] [pid 2642851:tid 2642851] [client 66.249.66.167:62868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:59:15.346924 2026] [core:error] [pid 2642851:tid 2642851] [client 66.249.66.167:62868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:59:15.348508 2026] [core:error] [pid 2650051:tid 2650051] [client 66.249.66.168:53135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:59:15.348524 2026] [core:error] [pid 2650051:tid 2650051] [client 66.249.66.168:53135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:59:15.500669 2026] [ssl:error] [pid 2640698:tid 2640698] (70014)End of file found: [client 216.73.216.199:24967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:15.524269 2026] [security2:error] [pid 2615823:tid 2615823] [client 101.47.26.250:26373] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSY6hCNDJKK3e4gjwcgwAAADA"]
[Thu Jul 30 09:59:15.524319 2026] [security2:error] [pid 2615823:tid 2615823] [client 101.47.26.250:26373] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSY6hCNDJKK3e4gjwcgwAAADA"]
[Thu Jul 30 09:59:15.524568 2026] [security2:error] [pid 2615823:tid 2615823] [client 101.47.26.250:26373] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSY6hCNDJKK3e4gjwcgwAAADA"]
[Thu Jul 30 09:59:15.944985 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:44936] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/conf/php.ini"] [unique_id "amsSY66KuX4rRscgdjLLPQAAAAo"]
[Thu Jul 30 09:59:15.945371 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:44936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conf/php.ini"] [unique_id "amsSY66KuX4rRscgdjLLPQAAAAo"]
[Thu Jul 30 09:59:16.041869 2026] [ssl:error] [pid 2642851:tid 2642851] (EAI 2)Name or service not known: [client 144.76.19.72:54418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:16.041903 2026] [ssl:error] [pid 2642851:tid 2642851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:16.085883 2026] [security2:error] [pid 2642742:tid 2642742] [client 185.177.72.10:44936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSY66KuX4rRscgdjLLPQAAAAo"]
[Thu Jul 30 09:59:16.095365 2026] [ssl:error] [pid 2628120:tid 2628120] (EAI 2)Name or service not known: [client 144.76.19.72:54428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:16.095392 2026] [ssl:error] [pid 2628120:tid 2628120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:18.064011 2026] [security2:error] [pid 2637647:tid 2637647] [client 49.235.136.28:41962] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "itsupportinayrshire.com"] [uri "/"] [unique_id "amsSZtbwjkuln4nh4vsPfwAAACg"]
[Thu Jul 30 09:59:19.150092 2026] [ssl:error] [pid 2647936:tid 2647936] (EAI 2)Name or service not known: [client 144.76.19.72:54438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:19.150126 2026] [ssl:error] [pid 2647936:tid 2647936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:19.203525 2026] [ssl:error] [pid 2648825:tid 2648825] (EAI 2)Name or service not known: [client 144.76.19.72:54442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:19.203582 2026] [ssl:error] [pid 2648825:tid 2648825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:19.361564 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:45118] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config.bak"] [unique_id "amsSZy7ph9NlTLG2nfUEugAAABU"]
[Thu Jul 30 09:59:19.361945 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:45118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config.bak"] [unique_id "amsSZy7ph9NlTLG2nfUEugAAABU"]
[Thu Jul 30 09:59:19.503432 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:45118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSZy7ph9NlTLG2nfUEugAAABU"]
[Thu Jul 30 09:59:19.630197 2026] [security2:error] [pid 2648680:tid 2648680] [client 43.136.86.241:33786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ilkagriese.com"] [uri "/"] [unique_id "amsSZ5scAi6piyeNcGN0fwAAACw"]
[Thu Jul 30 09:59:19.900100 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:45136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config.conf"] [unique_id "amsSZyqCrh0o4antW6s89gAAABM"]
[Thu Jul 30 09:59:19.900418 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:45136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config.conf"] [unique_id "amsSZyqCrh0o4antW6s89gAAABM"]
[Thu Jul 30 09:59:20.040196 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:45136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSZyqCrh0o4antW6s89gAAABM"]
[Thu Jul 30 09:59:20.228185 2026] [core:error] [pid 2647983:tid 2647983] (13)Permission denied: [client 216.73.216.199:38742] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/bin/sudoreplay
[Thu Jul 30 09:59:20.271369 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:45150] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config.dat"] [unique_id "amsSaC7ph9NlTLG2nfUEuwAAABU"]
[Thu Jul 30 09:59:20.271724 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:45150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config.dat"] [unique_id "amsSaC7ph9NlTLG2nfUEuwAAABU"]
[Thu Jul 30 09:59:20.275501 2026] [security2:error] [pid 2646483:tid 2646483] [client 49.235.136.28:44774] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "itsupportinayrshire.com"] [uri "/"] [unique_id "amsSaBTWz9irmh6yr8qCIAAAAAU"], referer: http://itsupportinayrshire.com
[Thu Jul 30 09:59:20.410422 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:45150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSaC7ph9NlTLG2nfUEuwAAABU"]
[Thu Jul 30 09:59:20.803483 2026] [cgi:error] [pid 2648680:tid 2648680] [client 170.85.62.170:10104] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 09:59:21.154937 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:45196] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config.inc"] [unique_id "amsSaQNdLgvGIHel4alYiAAAADo"]
[Thu Jul 30 09:59:21.155302 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:45196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config.inc"] [unique_id "amsSaQNdLgvGIHel4alYiAAAADo"]
[Thu Jul 30 09:59:21.294185 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:45196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSaQNdLgvGIHel4alYiAAAADo"]
[Thu Jul 30 09:59:21.463100 2026] [core:error] [pid 2647983:tid 2647983] (13)Permission denied: [client 216.73.216.199:38742] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS0/flags
[Thu Jul 30 09:59:22.171488 2026] [authz_core:error] [pid 2647936:tid 2647936] [client 57.141.0.41:20610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:59:22.172123 2026] [authz_core:error] [pid 2647936:tid 2647936] [client 57.141.0.41:20610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:59:22.338091 2026] [ssl:error] [pid 2648952:tid 2648952] (EAI 2)Name or service not known: [client 144.76.19.72:41858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:22.338118 2026] [ssl:error] [pid 2648952:tid 2648952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:22.390818 2026] [ssl:error] [pid 2637647:tid 2637647] (EAI 2)Name or service not known: [client 144.76.19.72:41868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:22.390848 2026] [ssl:error] [pid 2637647:tid 2637647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:23.630904 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:45328] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config.old"] [unique_id "amsSa9bwjkuln4nh4vsPgwAAACg"]
[Thu Jul 30 09:59:23.631283 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:45328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config.old"] [unique_id "amsSa9bwjkuln4nh4vsPgwAAACg"]
[Thu Jul 30 09:59:23.766993 2026] [security2:error] [pid 2637647:tid 2637647] [client 185.177.72.10:45328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSa9bwjkuln4nh4vsPgwAAACg"]
[Thu Jul 30 09:59:23.913484 2026] [lsapi:warn] [pid 2646930:tid 2646930] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:59:24.778648 2026] [ssl:error] [pid 2647983:tid 2647983] (70014)End of file found: [client 216.73.216.199:38742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:25.446549 2026] [ssl:error] [pid 2637647:tid 2637647] (EAI 2)Name or service not known: [client 144.76.19.72:41874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:25.446577 2026] [ssl:error] [pid 2637647:tid 2637647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:25.501237 2026] [ssl:error] [pid 2642789:tid 2642789] (EAI 2)Name or service not known: [client 144.76.19.72:41876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:25.501274 2026] [ssl:error] [pid 2642789:tid 2642789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:25.550497 2026] [access_compat:error] [pid 2615823:tid 2615823] [client 2.189.5.222:57668] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:59:26.801039 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59600] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config.sql"] [unique_id "amsSbr0K2JrWLOe59h9gXAAAAAY"]
[Thu Jul 30 09:59:26.801420 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config.sql"] [unique_id "amsSbr0K2JrWLOe59h9gXAAAAAY"]
[Thu Jul 30 09:59:26.937912 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSbr0K2JrWLOe59h9gXAAAAAY"]
[Thu Jul 30 09:59:27.675254 2026] [security2:error] [pid 2631105:tid 2631105] [client 185.177.72.10:59640] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.bak"] [unique_id "amsSb5tzJL7EKNhgR0i76wAAADU"]
[Thu Jul 30 09:59:27.675436 2026] [security2:error] [pid 2631105:tid 2631105] [client 185.177.72.10:59640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.bak"] [unique_id "amsSb5tzJL7EKNhgR0i76wAAADU"]
[Thu Jul 30 09:59:27.814210 2026] [security2:error] [pid 2631105:tid 2631105] [client 185.177.72.10:59640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSb5tzJL7EKNhgR0i76wAAADU"]
[Thu Jul 30 09:59:27.849032 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:59652] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.dev"] [unique_id "amsSb1bEqVhwrVygyWaWYQAAADI"]
[Thu Jul 30 09:59:27.849213 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:59652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.dev"] [unique_id "amsSb1bEqVhwrVygyWaWYQAAADI"]
[Thu Jul 30 09:59:27.993838 2026] [security2:error] [pid 2637648:tid 2637648] [client 185.177.72.10:59652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSb1bEqVhwrVygyWaWYQAAADI"]
[Thu Jul 30 09:59:28.031891 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59664] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.dist"] [unique_id "amsScL0K2JrWLOe59h9gXwAAAAY"]
[Thu Jul 30 09:59:28.032089 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.dist"] [unique_id "amsScL0K2JrWLOe59h9gXwAAAAY"]
[Thu Jul 30 09:59:28.171889 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59664] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsScL0K2JrWLOe59h9gXwAAAAY"]
[Thu Jul 30 09:59:28.208534 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.test"] [unique_id "amsScL0K2JrWLOe59h9gYAAAAAY"]
[Thu Jul 30 09:59:28.208670 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/.env.test"] [unique_id "amsScL0K2JrWLOe59h9gYAAAAAY"]
[Thu Jul 30 09:59:28.346826 2026] [security2:error] [pid 2637584:tid 2637584] [client 185.177.72.10:59674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsScL0K2JrWLOe59h9gYAAAAAY"]
[Thu Jul 30 09:59:28.994919 2026] [core:error] [pid 2648183:tid 2648183] (13)Permission denied: [client 216.73.216.199:57031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_console/drivers/virtio:virtio_rproc_serial/unbind
[Thu Jul 30 09:59:29.448128 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:59694] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /config/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/config/.git/config"] [unique_id "amsScSqCrh0o4antW6s8-wAAABM"]
[Thu Jul 30 09:59:29.448312 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:59694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/.git/config"] [unique_id "amsScSqCrh0o4antW6s8-wAAABM"]
[Thu Jul 30 09:59:29.586628 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:59694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsScSqCrh0o4antW6s8-wAAABM"]
[Thu Jul 30 09:59:30.092256 2026] [ssl:error] [pid 2651607:tid 2651607] (EAI 2)Name or service not known: [client 144.76.19.72:41888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:30.092292 2026] [ssl:error] [pid 2651607:tid 2651607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:30.204304 2026] [ssl:error] [pid 2647985:tid 2647985] (70014)End of file found: [client 216.73.216.199:12255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:30.499978 2026] [core:error] [pid 2648183:tid 2648183] (13)Permission denied: [client 216.73.216.199:57031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/cpu_slabs
[Thu Jul 30 09:59:30.801660 2026] [ssl:error] [pid 2648183:tid 2648183] (70014)End of file found: [client 216.73.216.199:57031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:31.199379 2026] [lsapi:warn] [pid 2650048:tid 2650048] [client 81.133.8.31:57350] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 09:59:31.199422 2026] [lsapi:warn] [pid 2650048:tid 2650048] [client 81.133.8.31:57350] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 09:59:31.607318 2026] [ssl:error] [pid 2646930:tid 2646930] (EAI 2)Name or service not known: [client 144.76.19.72:60414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:31.607343 2026] [ssl:error] [pid 2646930:tid 2646930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:31.636443 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:59728] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config/AppData.config"] [unique_id "amsScy7ph9NlTLG2nfUEwAAAABU"]
[Thu Jul 30 09:59:31.636755 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:59728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/AppData.config"] [unique_id "amsScy7ph9NlTLG2nfUEwAAAABU"]
[Thu Jul 30 09:59:31.684933 2026] [lsapi:warn] [pid 2651673:tid 2651673] [client 82.163.176.100:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:59:31.771477 2026] [security2:error] [pid 2651674:tid 2651674] [client 35.174.253.85:13895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsScxEp5-KvXBfbjwTiLAAAABw"]
[Thu Jul 30 09:59:31.779905 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:59728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsScy7ph9NlTLG2nfUEwAAAABU"]
[Thu Jul 30 09:59:31.820835 2026] [ssl:error] [pid 2647936:tid 2647936] (70014)End of file found: [client 216.73.216.199:31981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:32.004080 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:59744] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amsSdC7ph9NlTLG2nfUEwQAAABU"]
[Thu Jul 30 09:59:32.004406 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:59744] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/App_Config/ConnectionStrings.config"] [unique_id "amsSdC7ph9NlTLG2nfUEwQAAABU"]
[Thu Jul 30 09:59:32.145296 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:59744] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSdC7ph9NlTLG2nfUEwQAAABU"]
[Thu Jul 30 09:59:32.403104 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:59758] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config/api-config.ini"] [unique_id "amsSdIW_fWF6QfgPXMIqWQAAAA8"]
[Thu Jul 30 09:59:32.403483 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:59758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/api-config.ini"] [unique_id "amsSdIW_fWF6QfgPXMIqWQAAAA8"]
[Thu Jul 30 09:59:32.546392 2026] [security2:error] [pid 2640698:tid 2640698] [client 185.177.72.10:59758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSdIW_fWF6QfgPXMIqWQAAAA8"]
[Thu Jul 30 09:59:32.591719 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/cloud.php
[Thu Jul 30 09:59:33.263340 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/network/cloud.php
[Thu Jul 30 09:59:33.855712 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/cloud.php
[Thu Jul 30 09:59:34.079971 2026] [security2:error] [pid 2651741:tid 2651741] [client 85.208.96.207:48258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/paula-vasu-biography"] [unique_id "amsSdpWA8eXVbmMAhWtVuQAAACE"]
[Thu Jul 30 09:59:34.086488 2026] [authz_core:error] [pid 2651749:tid 2651749] [client 57.141.0.12:53074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:59:34.087138 2026] [authz_core:error] [pid 2651749:tid 2651749] [client 57.141.0.12:53074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:59:34.228814 2026] [lsapi:warn] [pid 2637691:tid 2637691] [client 81.133.8.31:63275] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 09:59:34.228851 2026] [lsapi:warn] [pid 2637691:tid 2637691] [client 81.133.8.31:63275] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 09:59:34.636789 2026] [lsapi:warn] [pid 2647984:tid 2647984] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:59:34.663988 2026] [ssl:error] [pid 2651755:tid 2651755] (EAI 2)Name or service not known: [client 144.76.19.72:60420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:34.664023 2026] [ssl:error] [pid 2651755:tid 2651755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:34.717535 2026] [ssl:error] [pid 2651743:tid 2651743] (EAI 2)Name or service not known: [client 144.76.19.72:60434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:34.717572 2026] [ssl:error] [pid 2651743:tid 2651743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:34.741472 2026] [security2:error] [pid 2651753:tid 2651753] [client 52.71.216.196:30079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/fairtrade-fiction/fp3-cover-best/"] [unique_id "amsSdsY-XStH23H1Il_8xwAAAEE"]
[Thu Jul 30 09:59:35.108662 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/updates.php
[Thu Jul 30 09:59:35.812248 2026] [security2:error] [pid 2651743:tid 2651743] [client 52.71.216.196:19427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/fp3-cover-best/"] [unique_id "amsSd5gzkCA9wDorTxD53gAAACU"]
[Thu Jul 30 09:59:36.235861 2026] [core:error] [pid 2651757:tid 2651757] (13)Permission denied: [client 216.73.216.199:18592] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS0/flags
[Thu Jul 30 09:59:36.386557 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/user/cloud.php
[Thu Jul 30 09:59:36.637859 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:60070] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config/config.inc"] [unique_id "amsSeHYICBgk62rgMlVJAQAAAD8"]
[Thu Jul 30 09:59:36.638190 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:60070] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/config.inc"] [unique_id "amsSeHYICBgk62rgMlVJAQAAAD8"]
[Thu Jul 30 09:59:36.776458 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:60070] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSeHYICBgk62rgMlVJAQAAAD8"]
[Thu Jul 30 09:59:36.834181 2026] [ssl:error] [pid 2650044:tid 2650044] (70014)End of file found: [client 216.73.216.199:1493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:37.139343 2026] [ssl:error] [pid 2651757:tid 2651757] (70014)End of file found: [client 216.73.216.199:18592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:37.653787 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/coffee/cloud.php
[Thu Jul 30 09:59:37.788799 2026] [ssl:error] [pid 2651741:tid 2651741] (EAI 2)Name or service not known: [client 144.76.19.72:60450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:37.788850 2026] [ssl:error] [pid 2651741:tid 2651741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:37.846480 2026] [ssl:error] [pid 2651670:tid 2651670] (EAI 2)Name or service not known: [client 144.76.19.72:60462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:37.846528 2026] [ssl:error] [pid 2651670:tid 2651670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:38.241962 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/images/cloud.php
[Thu Jul 30 09:59:38.645329 2026] [ssl:error] [pid 2651742:tid 2651742] (70014)End of file found: [client 216.73.216.199:31774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:38.782854 2026] [security2:error] [pid 2651554:tid 2651554] [client 3.215.59.93:62260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/schools-librarians/literacy-resources/armistice_runner-icon/"] [unique_id "amsSemJp-8Y_5BigSpt8gAAAAAE"]
[Thu Jul 30 09:59:38.811280 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/avaa.php
[Thu Jul 30 09:59:39.133537 2026] [authz_core:error] [pid 2651677:tid 2651677] [client 66.249.66.33:62331] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:59:39.137306 2026] [authz_core:error] [pid 2651677:tid 2651677] [client 66.249.66.33:62331] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:59:39.973530 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/js/widgets/cloud.php
[Thu Jul 30 09:59:40.947491 2026] [ssl:error] [pid 2648952:tid 2648952] (EAI 2)Name or service not known: [client 144.76.19.72:44026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:40.947523 2026] [ssl:error] [pid 2648952:tid 2648952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:41.000260 2026] [ssl:error] [pid 2651554:tid 2651554] (EAI 2)Name or service not known: [client 144.76.19.72:44036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:41.000303 2026] [ssl:error] [pid 2651554:tid 2651554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:41.255177 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/cloud.php
[Thu Jul 30 09:59:41.651867 2026] [authz_core:error] [pid 2637652:tid 2637652] [client 66.249.66.15:41465] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 09:59:41.654622 2026] [authz_core:error] [pid 2637652:tid 2637652] [client 66.249.66.15:41465] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 09:59:41.887157 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/includes/cloud.php
[Thu Jul 30 09:59:42.163650 2026] [ssl:error] [pid 2637648:tid 2637648] (70014)End of file found: [client 216.73.216.199:28373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:42.553613 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/blue/cloud.php
[Thu Jul 30 09:59:43.000452 2026] [security2:error] [pid 2650044:tid 2650044] [client 3.224.215.150:8128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/rugby/"] [unique_id "amsSf3RNsDgGwpwAtkb7uAAAADM"]
[Thu Jul 30 09:59:43.117119 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/cloud.php
[Thu Jul 30 09:59:43.724475 2026] [security2:error] [pid 2651609:tid 2651609] [client 177.198.106.65:43159] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "47"] [id "920100"] [rev "2"] [msg "Invalid HTTP Request Line"] [data "GET http://www.banskoexpress.com HTTP/1.1"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_REQ"] [tag "CAPEC-272"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsSf3wjqb36bSo_KiGVBwAAAAw"]
[Thu Jul 30 09:59:43.810900 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/updates.php
[Thu Jul 30 09:59:44.036024 2026] [ssl:error] [pid 2650048:tid 2650048] (70014)End of file found: [client 216.73.216.199:2961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:44.057421 2026] [ssl:error] [pid 2651554:tid 2651554] (EAI 2)Name or service not known: [client 144.76.19.72:44050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:44.057447 2026] [ssl:error] [pid 2651554:tid 2651554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:44.112279 2026] [ssl:error] [pid 2641792:tid 2641792] (EAI 2)Name or service not known: [client 144.76.19.72:44066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:44.112309 2026] [ssl:error] [pid 2641792:tid 2641792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:44.388424 2026] [security2:error] [pid 2651749:tid 2651749] [client 114.119.144.31:51717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563663600/cat_ids~103,14,15/request_format~html"] [unique_id "amsSgBotHL6VKbxpSwcy7QAAAD4"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563663600/cat_ids~103,14/request_format~html
[Thu Jul 30 09:59:44.469089 2026] [security2:error] [pid 2648952:tid 2648952] [client 185.177.72.10:60414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config/laravel.log"] [unique_id "amsSgCvilbxreO9-qsyC2QAAAC4"]
[Thu Jul 30 09:59:44.469519 2026] [security2:error] [pid 2648952:tid 2648952] [client 185.177.72.10:60414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/laravel.log"] [unique_id "amsSgCvilbxreO9-qsyC2QAAAC4"]
[Thu Jul 30 09:59:44.609952 2026] [security2:error] [pid 2648952:tid 2648952] [client 185.177.72.10:60414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSgCvilbxreO9-qsyC2QAAAC4"]
[Thu Jul 30 09:59:44.621446 2026] [security2:error] [pid 2637686:tid 2637686] [client 123.207.65.62:41344] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amsSgELxYlQ9rOjGgkMxnQAAAEQ"]
[Thu Jul 30 09:59:45.255745 2026] [lsapi:warn] [pid 2650044:tid 2650044] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:59:45.472425 2026] [security2:error] [pid 2651743:tid 2651743] [client 114.119.144.31:51725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563663600/cat_ids~103,14,15/request_format~html"] [unique_id "amsSgZgzkCA9wDorTxD54AAAACU"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563663600/cat_ids~103,14/request_format~html
[Thu Jul 30 09:59:46.522076 2026] [security2:error] [pid 2648952:tid 2648952] [client 185.191.171.6:48410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6409.0.html"] [unique_id "amsSgivilbxreO9-qsyC2wAAAC4"]
[Thu Jul 30 09:59:46.655009 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/alfanew.php
[Thu Jul 30 09:59:46.730670 2026] [ssl:error] [pid 2637652:tid 2637652] (70014)End of file found: [client 216.73.216.199:7827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:47.166801 2026] [ssl:error] [pid 2647937:tid 2647937] (EAI 2)Name or service not known: [client 144.76.19.72:44076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:47.166833 2026] [ssl:error] [pid 2647937:tid 2647937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:47.223809 2026] [ssl:error] [pid 2650045:tid 2650045] (EAI 2)Name or service not known: [client 144.76.19.72:44092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:47.223870 2026] [ssl:error] [pid 2650045:tid 2650045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:48.563316 2026] [security2:error] [pid 2641846:tid 2641846] [client 43.134.62.67:34682] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.apotheekcandidejacobs.be"] [uri "/"] [unique_id "amsShJoL8w3BzPER_zV8pgAAACQ"]
[Thu Jul 30 09:59:48.564301 2026] [authz_core:error] [pid 2641846:tid 2641846] [client 43.134.62.67:34682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:59:48.564842 2026] [authz_core:error] [pid 2641846:tid 2641846] [client 43.134.62.67:34682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:59:49.530272 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/repeater.php
[Thu Jul 30 09:59:49.562515 2026] [core:error] [pid 2651742:tid 2651742] (13)Permission denied: [client 216.73.216.199:37835] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/store_user
[Thu Jul 30 09:59:50.164872 2026] [core:error] [pid 2651742:tid 2651742] (13)Permission denied: [client 216.73.216.199:37835] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS0/close_delay
[Thu Jul 30 09:59:50.197773 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/repeater.php
[Thu Jul 30 09:59:50.281489 2026] [ssl:error] [pid 2651609:tid 2651609] (EAI 2)Name or service not known: [client 144.76.19.72:52232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:50.281562 2026] [ssl:error] [pid 2651609:tid 2651609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:50.339808 2026] [ssl:error] [pid 2650048:tid 2650048] (EAI 2)Name or service not known: [client 144.76.19.72:52242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:50.339843 2026] [ssl:error] [pid 2650048:tid 2650048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:50.756526 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/repeater.php
[Thu Jul 30 09:59:50.896053 2026] [security2:error] [pid 2637686:tid 2637686] [client 85.208.98.23:52238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsShkLxYlQ9rOjGgkMxoAAAAEQ"]
[Thu Jul 30 09:59:51.418304 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wsoyanz.php
[Thu Jul 30 09:59:51.970985 2026] [ssl:error] [pid 2651742:tid 2651742] (70014)End of file found: [client 216.73.216.199:37835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:51.989607 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/yanz.php
[Thu Jul 30 09:59:53.238910 2026] [lsapi:warn] [pid 2651494:tid 2651494] [client 81.133.8.31:64605] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/about/
[Thu Jul 30 09:59:53.238954 2026] [lsapi:warn] [pid 2651494:tid 2651494] [client 81.133.8.31:64605] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/about/
[Thu Jul 30 09:59:53.398176 2026] [ssl:error] [pid 2637652:tid 2637652] (EAI 2)Name or service not known: [client 144.76.19.72:52244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:53.398205 2026] [ssl:error] [pid 2637652:tid 2637652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:53.455474 2026] [ssl:error] [pid 2648953:tid 2648953] (EAI 2)Name or service not known: [client 144.76.19.72:52260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:53.455506 2026] [ssl:error] [pid 2648953:tid 2648953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:53.783894 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/cache-compat.php
[Thu Jul 30 09:59:53.971196 2026] [core:error] [pid 2648953:tid 2648953] (13)Permission denied: [client 216.73.216.199:12748] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/trace
[Thu Jul 30 09:59:54.367616 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/ajax-actions.php
[Thu Jul 30 09:59:54.938439 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/ajax-actions.php
[Thu Jul 30 09:59:55.035880 2026] [authz_core:error] [pid 2648825:tid 2648825] [client 57.141.0.67:30416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:59:55.036515 2026] [authz_core:error] [pid 2648825:tid 2648825] [client 57.141.0.67:30416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:59:55.141048 2026] [security2:error] [pid 2637691:tid 2637691] [client 152.136.23.159:43330] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "amsSi82-LGO2xP3vg6n4fwAAAEY"]
[Thu Jul 30 09:59:55.253299 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 89.45.53.3:33916] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:59:55.591107 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-consar.php
[Thu Jul 30 09:59:55.855881 2026] [lsapi:warn] [pid 2647935:tid 2647935] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 09:59:56.103628 2026] [access_compat:error] [pid 2631105:tid 2631105] [client 2.189.5.218:43860] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:59:56.152980 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/repeater.php
[Thu Jul 30 09:59:56.362266 2026] [access_compat:error] [pid 2646483:tid 2646483] [client 2.189.5.142:50034] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:59:56.371396 2026] [access_compat:error] [pid 2652688:tid 2652688] [client 89.45.53.30:50602] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 09:59:56.515407 2026] [ssl:error] [pid 2651745:tid 2651745] (EAI 2)Name or service not known: [client 144.76.19.72:52272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:56.515439 2026] [ssl:error] [pid 2651745:tid 2651745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:56.570505 2026] [ssl:error] [pid 2651744:tid 2651744] (EAI 2)Name or service not known: [client 144.76.19.72:52278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:56.570536 2026] [ssl:error] [pid 2651744:tid 2651744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:56.598423 2026] [security2:error] [pid 2637691:tid 2637691] [client 152.136.23.159:44558] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amsSjM2-LGO2xP3vg6n4gQAAAEY"], referer: http://thesilkshed.co.uk
[Thu Jul 30 09:59:56.761645 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/admin-post.php
[Thu Jul 30 09:59:56.787322 2026] [ssl:error] [pid 2648953:tid 2648953] (70014)End of file found: [client 216.73.216.199:12748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:56.825359 2026] [core:error] [pid 2641846:tid 2641846] [client 66.249.64.171:36619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:59:56.825397 2026] [core:error] [pid 2641846:tid 2641846] [client 66.249.64.171:36619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 09:59:57.706128 2026] [authz_core:error] [pid 2646930:tid 2646930] [client 216.73.216.199:24571] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/selector.etc/php.ini
[Thu Jul 30 09:59:57.950736 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/dropdown.php
[Thu Jul 30 09:59:58.305928 2026] [core:error] [pid 2646930:tid 2646930] (13)Permission denied: [client 216.73.216.199:24571] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfit/sections/__ksymtab_strings
[Thu Jul 30 09:59:58.511855 2026] [authz_core:error] [pid 2650045:tid 2650045] [client 57.141.0.44:50674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 09:59:58.512478 2026] [authz_core:error] [pid 2650045:tid 2650045] [client 57.141.0.44:50674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 09:59:58.607625 2026] [ssl:error] [pid 2646930:tid 2646930] (70014)End of file found: [client 216.73.216.199:24571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:58.711097 2026] [security2:error] [pid 2648825:tid 2648825] [client 85.208.96.205:57968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5317.0.html"] [unique_id "amsSjicQvq1zlONumHJ8DwAAAC0"]
[Thu Jul 30 09:59:59.119893 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/dropdown.php
[Thu Jul 30 09:59:59.205865 2026] [ssl:error] [pid 2631105:tid 2631105] (70014)End of file found: [client 216.73.216.199:17914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 09:59:59.624109 2026] [ssl:error] [pid 2651742:tid 2651742] (EAI 2)Name or service not known: [client 144.76.19.72:29056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:59.624146 2026] [ssl:error] [pid 2651742:tid 2651742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 09:59:59.682172 2026] [ssl:error] [pid 2652688:tid 2652688] (EAI 2)Name or service not known: [client 144.76.19.72:29058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 09:59:59.682208 2026] [ssl:error] [pid 2652688:tid 2652688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:00.814227 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:58656] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config/settings.inc"] [unique_id "amsSkM2-LGO2xP3vg6n4hQAAAEY"]
[Thu Jul 30 10:00:00.814542 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:58656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/settings.inc"] [unique_id "amsSkM2-LGO2xP3vg6n4hQAAAEY"]
[Thu Jul 30 10:00:00.983471 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:58656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSkM2-LGO2xP3vg6n4hQAAAEY"]
[Thu Jul 30 10:00:02.738726 2026] [ssl:error] [pid 2650048:tid 2650048] (EAI 2)Name or service not known: [client 144.76.19.72:29072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:02.738762 2026] [ssl:error] [pid 2650048:tid 2650048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:02.762014 2026] [ssl:error] [pid 2651675:tid 2651675] (70014)End of file found: [client 216.73.216.199:17252] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:02.830377 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:29074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:02.830402 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:02.830887 2026] [access_compat:error] [pid 2615823:tid 2615823] [client 45.158.164.139:39564] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:00:03.483782 2026] [authz_core:error] [pid 2650048:tid 2650048] [client 57.141.0.30:62764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:03.484425 2026] [authz_core:error] [pid 2650048:tid 2650048] [client 57.141.0.30:62764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:03.961917 2026] [security2:error] [pid 2651670:tid 2651670] [client 216.73.216.199:8061] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/phar.ini"] [unique_id "amsSk0ZiKrCcyOK1_iVZkQAAABA"]
[Thu Jul 30 10:00:03.962237 2026] [security2:error] [pid 2651670:tid 2651670] [client 216.73.216.199:8061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/phar.ini"] [unique_id "amsSk0ZiKrCcyOK1_iVZkQAAABA"]
[Thu Jul 30 10:00:03.962474 2026] [security2:error] [pid 2651670:tid 2651670] [client 216.73.216.199:8061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/phar.ini"] [unique_id "amsSk0ZiKrCcyOK1_iVZkQAAABA"]
[Thu Jul 30 10:00:05.769403 2026] [ssl:error] [pid 2651670:tid 2651670] (70014)End of file found: [client 216.73.216.199:8061] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:05.891391 2026] [ssl:error] [pid 2651744:tid 2651744] (EAI 2)Name or service not known: [client 144.76.19.72:29076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:05.891418 2026] [ssl:error] [pid 2651744:tid 2651744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:05.943493 2026] [ssl:error] [pid 2648953:tid 2648953] (EAI 2)Name or service not known: [client 144.76.19.72:29078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:05.943519 2026] [ssl:error] [pid 2648953:tid 2648953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:06.208664 2026] [core:error] [pid 2637691:tid 2637691] [client 52.238.199.152:47545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:06.208692 2026] [core:error] [pid 2637691:tid 2637691] [client 52.238.199.152:47545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:06.277394 2026] [core:error] [pid 2651744:tid 2651744] [client 66.249.66.39:52748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:06.277423 2026] [core:error] [pid 2651744:tid 2651744] [client 66.249.66.39:52748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:06.605835 2026] [lsapi:warn] [pid 2646483:tid 2646483] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:00:06.972725 2026] [core:error] [pid 2650047:tid 2650047] (13)Permission denied: [client 216.73.216.199:42125] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/eventpoll_pwq/cpu_partial
[Thu Jul 30 10:00:07.393379 2026] [core:error] [pid 2651744:tid 2651744] [client 66.249.64.172:62817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:07.393405 2026] [core:error] [pid 2651744:tid 2651744] [client 66.249.64.172:62817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:07.576928 2026] [core:error] [pid 2650047:tid 2650047] (13)Permission denied: [client 216.73.216.199:42125] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/bin/sudoreplay
[Thu Jul 30 10:00:07.774609 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:29668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/config/web.config"] [unique_id "amsSlznP5whSPdmixesy3QAAAAY"]
[Thu Jul 30 10:00:07.774842 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:29668] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /config/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/config/web.config"] [unique_id "amsSlznP5whSPdmixesy3QAAAAY"]
[Thu Jul 30 10:00:07.775007 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:29668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/config/web.config"] [unique_id "amsSlznP5whSPdmixesy3QAAAAY"]
[Thu Jul 30 10:00:07.916602 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:29668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSlznP5whSPdmixesy3QAAAAY"]
[Thu Jul 30 10:00:08.187458 2026] [ssl:error] [pid 2650047:tid 2650047] (70014)End of file found: [client 216.73.216.199:42125] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:08.493260 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/xmrlpc.php
[Thu Jul 30 10:00:08.665150 2026] [core:error] [pid 2641791:tid 2641791] [client 52.238.199.152:20206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:08.665189 2026] [core:error] [pid 2641791:tid 2641791] [client 52.238.199.152:20206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:08.786140 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29708] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /configuration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/configuration/.env"] [unique_id "amsSmGgaDFrAz0TuNXQ4vAAAABs"]
[Thu Jul 30 10:00:08.786323 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29708] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/configuration/.env"] [unique_id "amsSmGgaDFrAz0TuNXQ4vAAAABs"]
[Thu Jul 30 10:00:08.927967 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29708] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSmGgaDFrAz0TuNXQ4vAAAABs"]
[Thu Jul 30 10:00:09.025108 2026] [ssl:error] [pid 2651744:tid 2651744] (EAI 2)Name or service not known: [client 144.76.19.72:29092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:09.025144 2026] [ssl:error] [pid 2651744:tid 2651744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:09.081377 2026] [ssl:error] [pid 2653351:tid 2653351] (EAI 2)Name or service not known: [client 144.76.19.72:29096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:09.081419 2026] [ssl:error] [pid 2653351:tid 2653351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:09.130642 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.191.171.14:54652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9396.0/prev_next,prev.html"] [unique_id "amsSmWgaDFrAz0TuNXQ4vQAAABs"]
[Thu Jul 30 10:00:09.140798 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/network/xmrlpc.php
[Thu Jul 30 10:00:09.149285 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:29720] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /configuration/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/configuration/.git/config"] [unique_id "amsSmeDqQN_GEwmvH4ZtLgAAACY"]
[Thu Jul 30 10:00:09.149447 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:29720] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/configuration/.git/config"] [unique_id "amsSmeDqQN_GEwmvH4ZtLgAAACY"]
[Thu Jul 30 10:00:09.167296 2026] [authz_core:error] [pid 2651742:tid 2651742] [client 57.141.0.2:40864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:09.167925 2026] [authz_core:error] [pid 2651742:tid 2651742] [client 57.141.0.2:40864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:09.314485 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:29720] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSmeDqQN_GEwmvH4ZtLgAAACY"]
[Thu Jul 30 10:00:09.358121 2026] [access_compat:error] [pid 2651741:tid 2651741] [client 52.238.199.152:55635] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/uploads/min.php
[Thu Jul 30 10:00:09.358529 2026] [core:error] [pid 2651741:tid 2651741] [client 52.238.199.152:55635] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:09.399036 2026] [ssl:error] [pid 2651675:tid 2651675] (70014)End of file found: [client 216.73.216.199:12090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:09.620886 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 10:00:09.771685 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 20.171.55.167:1255] AH01797: client denied by server configuration: /home/thepryor/public_html/xmrlpc.php
[Thu Jul 30 10:00:10.110630 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29774] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amsSmmgaDFrAz0TuNXQ4vwAAABs"]
[Thu Jul 30 10:00:10.111001 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/configuration/App_Config/ConnectionStrings.config"] [unique_id "amsSmmgaDFrAz0TuNXQ4vwAAABs"]
[Thu Jul 30 10:00:10.270704 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSmmgaDFrAz0TuNXQ4vwAAABs"]
[Thu Jul 30 10:00:10.305614 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:29788] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/configuration/api-config.ini"] [unique_id "amsSmnRNsDgGwpwAtkb7wQAAADM"]
[Thu Jul 30 10:00:10.305974 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:29788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/configuration/api-config.ini"] [unique_id "amsSmnRNsDgGwpwAtkb7wQAAADM"]
[Thu Jul 30 10:00:10.459213 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:29788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSmnRNsDgGwpwAtkb7wQAAADM"]
[Thu Jul 30 10:00:10.476791 2026] [authz_core:error] [pid 2651554:tid 2651554] [client 57.141.0.41:54630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:10.477477 2026] [authz_core:error] [pid 2651554:tid 2651554] [client 57.141.0.41:54630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:10.863131 2026] [security2:error] [pid 2647937:tid 2647937] [client 185.177.72.10:29816] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/configuration/laravel.log"] [unique_id "amsSmhEsaqVuMDhyelsu3QAAAAk"]
[Thu Jul 30 10:00:10.863477 2026] [security2:error] [pid 2647937:tid 2647937] [client 185.177.72.10:29816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/configuration/laravel.log"] [unique_id "amsSmhEsaqVuMDhyelsu3QAAAAk"]
[Thu Jul 30 10:00:11.003856 2026] [security2:error] [pid 2647937:tid 2647937] [client 185.177.72.10:29816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSmhEsaqVuMDhyelsu3QAAAAk"]
[Thu Jul 30 10:00:11.032364 2026] [authz_core:error] [pid 2651743:tid 2651743] [client 104.219.215.141:59262] AH01630: client denied by server configuration: /home/lukess/public_html/error_log, referer: http://lukess.me/?yt1
[Thu Jul 30 10:00:11.388424 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29832] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/configuration/web.config"] [unique_id "amsSm2gaDFrAz0TuNXQ4wAAAABs"]
[Thu Jul 30 10:00:11.388675 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29832] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /configuration/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/configuration/web.config"] [unique_id "amsSm2gaDFrAz0TuNXQ4wAAAABs"]
[Thu Jul 30 10:00:11.388840 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29832] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/configuration/web.config"] [unique_id "amsSm2gaDFrAz0TuNXQ4wAAAABs"]
[Thu Jul 30 10:00:11.527143 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29832] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSm2gaDFrAz0TuNXQ4wAAAABs"]
[Thu Jul 30 10:00:11.794646 2026] [authz_core:error] [pid 2648680:tid 2648680] [client 57.141.0.6:24876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:11.795268 2026] [authz_core:error] [pid 2648680:tid 2648680] [client 57.141.0.6:24876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:11.821180 2026] [ssl:error] [pid 2651749:tid 2651749] (70014)End of file found: [client 216.73.216.199:60742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:11.957207 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/user/xmrlpc.php
[Thu Jul 30 10:00:12.135143 2026] [ssl:error] [pid 2651670:tid 2651670] (EAI 2)Name or service not known: [client 144.76.19.72:53998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:12.135171 2026] [ssl:error] [pid 2651670:tid 2651670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:12.186417 2026] [ssl:error] [pid 2651608:tid 2651608] (EAI 2)Name or service not known: [client 144.76.19.72:54002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:12.186456 2026] [ssl:error] [pid 2651608:tid 2651608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:12.337864 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 10:00:12.373994 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 10:00:12.426844 2026] [core:error] [pid 2651494:tid 2651494] [client 52.238.199.152:20004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:12.426892 2026] [core:error] [pid 2651494:tid 2651494] [client 52.238.199.152:20004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:12.879332 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:29910] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conta/.env"] [unique_id "amsSnCcQvq1zlONumHJ8FgAAAC0"]
[Thu Jul 30 10:00:12.879522 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:29910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conta/.env"] [unique_id "amsSnCcQvq1zlONumHJ8FgAAAC0"]
[Thu Jul 30 10:00:13.019404 2026] [security2:error] [pid 2648825:tid 2648825] [client 185.177.72.10:29910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSnCcQvq1zlONumHJ8FgAAAC0"]
[Thu Jul 30 10:00:13.202968 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/coffee/xmrlpc.php
[Thu Jul 30 10:00:13.231487 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29928] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /conta/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conta/.git/config"] [unique_id "amsSnWgaDFrAz0TuNXQ4wQAAABs"]
[Thu Jul 30 10:00:13.231684 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conta/.git/config"] [unique_id "amsSnWgaDFrAz0TuNXQ4wQAAABs"]
[Thu Jul 30 10:00:13.266429 2026] [core:error] [pid 2651741:tid 2651741] [client 52.238.199.152:47513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:13.266451 2026] [core:error] [pid 2651741:tid 2651741] [client 52.238.199.152:47513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:13.385274 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:29928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSnWgaDFrAz0TuNXQ4wQAAABs"]
[Thu Jul 30 10:00:13.524460 2026] [core:error] [pid 2637652:tid 2637652] (13)Permission denied: [client 216.73.216.199:60325] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-1k/align
[Thu Jul 30 10:00:13.777672 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/images/xmrlpc.php
[Thu Jul 30 10:00:14.162330 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:29968] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amsSns2-LGO2xP3vg6n4jQAAAEY"]
[Thu Jul 30 10:00:14.162706 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:29968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conta/App_Config/ConnectionStrings.config"] [unique_id "amsSns2-LGO2xP3vg6n4jQAAAEY"]
[Thu Jul 30 10:00:14.304885 2026] [security2:error] [pid 2637691:tid 2637691] [client 185.177.72.10:29968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSns2-LGO2xP3vg6n4jQAAAEY"]
[Thu Jul 30 10:00:14.343183 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:29982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/conta/api-config.ini"] [unique_id "amsSnnRNsDgGwpwAtkb7wwAAADM"]
[Thu Jul 30 10:00:14.343692 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:29982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conta/api-config.ini"] [unique_id "amsSnnRNsDgGwpwAtkb7wwAAADM"]
[Thu Jul 30 10:00:14.484360 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:29982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSnnRNsDgGwpwAtkb7wwAAADM"]
[Thu Jul 30 10:00:14.533993 2026] [ssl:error] [pid 2637652:tid 2637652] (70014)End of file found: [client 216.73.216.199:60325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:14.648964 2026] [security2:error] [pid 2651677:tid 2651677] [client 95.174.117.213:33934] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSnjeUUh8HPzZW5ohFigAAACA"]
[Thu Jul 30 10:00:14.649015 2026] [security2:error] [pid 2651677:tid 2651677] [client 95.174.117.213:33934] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSnjeUUh8HPzZW5ohFigAAACA"]
[Thu Jul 30 10:00:14.649281 2026] [security2:error] [pid 2651677:tid 2651677] [client 95.174.117.213:33934] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSnjeUUh8HPzZW5ohFigAAACA"]
[Thu Jul 30 10:00:14.906487 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:64514] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/conta/laravel.log"] [unique_id "amsSnjdnWhdb5n_RrTLGvgAAADg"]
[Thu Jul 30 10:00:14.906849 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:64514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conta/laravel.log"] [unique_id "amsSnjdnWhdb5n_RrTLGvgAAADg"]
[Thu Jul 30 10:00:14.934003 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/js/widgets/xmrlpc.php
[Thu Jul 30 10:00:15.046285 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:64514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSnjdnWhdb5n_RrTLGvgAAADg"]
[Thu Jul 30 10:00:15.241601 2026] [ssl:error] [pid 2651670:tid 2651670] (EAI 2)Name or service not known: [client 144.76.19.72:54016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:15.241638 2026] [ssl:error] [pid 2651670:tid 2651670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:15.300566 2026] [ssl:error] [pid 2650048:tid 2650048] (EAI 2)Name or service not known: [client 144.76.19.72:54024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:15.300604 2026] [ssl:error] [pid 2650048:tid 2650048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:15.313747 2026] [core:error] [pid 2651554:tid 2651554] [client 52.238.199.152:20179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:15.313775 2026] [core:error] [pid 2651554:tid 2651554] [client 52.238.199.152:20179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:15.441306 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:64532] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/conta/web.config"] [unique_id "amsSn-DqQN_GEwmvH4ZtNAAAACY"]
[Thu Jul 30 10:00:15.441524 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:64532] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /conta/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/conta/web.config"] [unique_id "amsSn-DqQN_GEwmvH4ZtNAAAACY"]
[Thu Jul 30 10:00:15.441657 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:64532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/conta/web.config"] [unique_id "amsSn-DqQN_GEwmvH4ZtNAAAACY"]
[Thu Jul 30 10:00:15.546449 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/xmrlpc.php
[Thu Jul 30 10:00:15.581554 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:64532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSn-DqQN_GEwmvH4ZtNAAAACY"]
[Thu Jul 30 10:00:15.620820 2026] [security2:error] [pid 2650050:tid 2650050] [client 185.177.72.10:64546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/content/.env"] [unique_id "amsSn2_Nx9VXTxi80WhydAAAAD0"]
[Thu Jul 30 10:00:15.621118 2026] [security2:error] [pid 2650050:tid 2650050] [client 185.177.72.10:64546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/content/.env"] [unique_id "amsSn2_Nx9VXTxi80WhydAAAAD0"]
[Thu Jul 30 10:00:15.769935 2026] [security2:error] [pid 2650050:tid 2650050] [client 185.177.72.10:64546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSn2_Nx9VXTxi80WhydAAAAD0"]
[Thu Jul 30 10:00:15.908667 2026] [security2:error] [pid 2648953:tid 2648953] [client 47.128.111.159:56964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mjs-services.com"] [uri "/robots.txt"] [unique_id "amsSn81D5kGVeKsIMQUzlAAAADE"]
[Thu Jul 30 10:00:15.949016 2026] [security2:error] [pid 2651675:tid 2651675] [client 85.11.167.225:32008] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.taylorshouse.com"] [uri "/.git/config"] [unique_id "amsSn2pCJI-EQdiJkJn6wAAAAB4"]
[Thu Jul 30 10:00:15.949239 2026] [security2:error] [pid 2651675:tid 2651675] [client 85.11.167.225:32008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.taylorshouse.com"] [uri "/.git/config"] [unique_id "amsSn2pCJI-EQdiJkJn6wAAAAB4"]
[Thu Jul 30 10:00:15.949457 2026] [security2:error] [pid 2651675:tid 2651675] [client 85.11.167.225:32008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.taylorshouse.com"] [uri "/.git/config"] [unique_id "amsSn2pCJI-EQdiJkJn6wAAAAB4"]
[Thu Jul 30 10:00:15.980344 2026] [core:error] [pid 2641846:tid 2641846] [client 52.238.199.152:20108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:15.980369 2026] [core:error] [pid 2641846:tid 2641846] [client 52.238.199.152:20108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:16.340240 2026] [core:error] [pid 2651741:tid 2651741] (13)Permission denied: [client 216.73.216.199:42023] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/cred_jar/object_size
[Thu Jul 30 10:00:16.611847 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:40096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:16.611878 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:40096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:16.641337 2026] [ssl:error] [pid 2651741:tid 2651741] (70014)End of file found: [client 216.73.216.199:42023] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:16.669466 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/includes/xmrlpc.php
[Thu Jul 30 10:00:16.718018 2026] [security2:error] [pid 2651670:tid 2651670] [client 185.177.72.10:64606] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/core/persistence/.env"] [unique_id "amsSoEZiKrCcyOK1_iVZmQAAABA"]
[Thu Jul 30 10:00:16.718217 2026] [security2:error] [pid 2651670:tid 2651670] [client 185.177.72.10:64606] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/core/persistence/.env"] [unique_id "amsSoEZiKrCcyOK1_iVZmQAAABA"]
[Thu Jul 30 10:00:16.858287 2026] [security2:error] [pid 2651670:tid 2651670] [client 185.177.72.10:64606] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSoEZiKrCcyOK1_iVZmQAAABA"]
[Thu Jul 30 10:00:16.987091 2026] [security2:error] [pid 2650044:tid 2650044] [client 43.228.157.102:45084] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.git/config"] [unique_id "amsSoHRNsDgGwpwAtkb7xQAAADM"]
[Thu Jul 30 10:00:16.987355 2026] [security2:error] [pid 2650044:tid 2650044] [client 43.228.157.102:45084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.git/config"] [unique_id "amsSoHRNsDgGwpwAtkb7xQAAADM"]
[Thu Jul 30 10:00:17.189218 2026] [lsapi:warn] [pid 2646930:tid 2646930] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:00:17.267030 2026] [security2:error] [pid 2651675:tid 2651675] [client 85.11.167.225:31996] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.taylorshouse.com"] [uri "/.git/HEAD"] [unique_id "amsSoWpCJI-EQdiJkJn6wQAAAB4"]
[Thu Jul 30 10:00:17.267212 2026] [security2:error] [pid 2651675:tid 2651675] [client 85.11.167.225:31996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.taylorshouse.com"] [uri "/.git/HEAD"] [unique_id "amsSoWpCJI-EQdiJkJn6wQAAAB4"]
[Thu Jul 30 10:00:17.267412 2026] [security2:error] [pid 2651675:tid 2651675] [client 85.11.167.225:31996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.taylorshouse.com"] [uri "/.git/HEAD"] [unique_id "amsSoWpCJI-EQdiJkJn6wQAAAB4"]
[Thu Jul 30 10:00:17.316684 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/blue/xmrlpc.php
[Thu Jul 30 10:00:17.427474 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:64642] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amsSoTdnWhdb5n_RrTLGwAAAADg"]
[Thu Jul 30 10:00:17.427718 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:64642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "amsSoTdnWhdb5n_RrTLGwAAAADg"]
[Thu Jul 30 10:00:17.544299 2026] [core:error] [pid 2651555:tid 2651555] (13)Permission denied: [client 216.73.216.199:49268] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS2/uartclk
[Thu Jul 30 10:00:17.567633 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:64642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSoTdnWhdb5n_RrTLGwAAAADg"]
[Thu Jul 30 10:00:17.602125 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:64658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/counterblockd/.env"] [unique_id "amsSoTeUUh8HPzZW5ohFjAAAACA"]
[Thu Jul 30 10:00:17.602343 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:64658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/counterblockd/.env"] [unique_id "amsSoTeUUh8HPzZW5ohFjAAAACA"]
[Thu Jul 30 10:00:17.619325 2026] [core:error] [pid 2651745:tid 2651745] [client 52.238.199.152:20134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:17.619360 2026] [core:error] [pid 2651745:tid 2651745] [client 52.238.199.152:20134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:17.700863 2026] [security2:error] [pid 2650044:tid 2650044] [client 43.228.157.102:45084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/index.php"] [unique_id "amsSoHRNsDgGwpwAtkb7xQAAADM"]
[Thu Jul 30 10:00:17.741496 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:64658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSoTeUUh8HPzZW5ohFjAAAACA"]
[Thu Jul 30 10:00:17.779937 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:64672] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/counterwallet/.env"] [unique_id "amsSoSqCrh0o4antW6s9CgAAABM"]
[Thu Jul 30 10:00:17.780141 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:64672] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/counterwallet/.env"] [unique_id "amsSoSqCrh0o4antW6s9CgAAABM"]
[Thu Jul 30 10:00:17.885996 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/xmrlpc.php
[Thu Jul 30 10:00:17.920603 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:64672] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSoSqCrh0o4antW6s9CgAAABM"]
[Thu Jul 30 10:00:17.956794 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:64688] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cp/.env"] [unique_id "amsSoc1D5kGVeKsIMQUzlgAAADE"]
[Thu Jul 30 10:00:17.956982 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:64688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cp/.env"] [unique_id "amsSoc1D5kGVeKsIMQUzlgAAADE"]
[Thu Jul 30 10:00:18.106012 2026] [security2:error] [pid 2648953:tid 2648953] [client 185.177.72.10:64688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSoc1D5kGVeKsIMQUzlgAAADE"]
[Thu Jul 30 10:00:18.140017 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64696] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env"] [unique_id "amsSojnP5whSPdmixesy4AAAAAY"]
[Thu Jul 30 10:00:18.140208 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env"] [unique_id "amsSojnP5whSPdmixesy4AAAAAY"]
[Thu Jul 30 10:00:18.275285 2026] [core:error] [pid 2651742:tid 2651742] [client 52.238.199.152:20218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:18.275311 2026] [core:error] [pid 2651742:tid 2651742] [client 52.238.199.152:20218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:18.288923 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64696] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSojnP5whSPdmixesy4AAAAAY"]
[Thu Jul 30 10:00:18.324427 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:64706] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.bak"] [unique_id "amsSonRNsDgGwpwAtkb7xgAAADM"]
[Thu Jul 30 10:00:18.324663 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:64706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.bak"] [unique_id "amsSonRNsDgGwpwAtkb7xgAAADM"]
[Thu Jul 30 10:00:18.354489 2026] [ssl:error] [pid 2640698:tid 2640698] (EAI 2)Name or service not known: [client 144.76.19.72:54040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:18.354515 2026] [ssl:error] [pid 2640698:tid 2640698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:18.412112 2026] [ssl:error] [pid 2651677:tid 2651677] (EAI 2)Name or service not known: [client 144.76.19.72:54046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:18.412169 2026] [ssl:error] [pid 2651677:tid 2651677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:18.478349 2026] [security2:error] [pid 2650044:tid 2650044] [client 185.177.72.10:64706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSonRNsDgGwpwAtkb7xgAAADM"]
[Thu Jul 30 10:00:18.480664 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/text.php
[Thu Jul 30 10:00:18.512988 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:64722] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.dev"] [unique_id "amsSoi7ph9NlTLG2nfUE1wAAABU"]
[Thu Jul 30 10:00:18.513186 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:64722] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.dev"] [unique_id "amsSoi7ph9NlTLG2nfUE1wAAABU"]
[Thu Jul 30 10:00:18.630670 2026] [security2:error] [pid 2648953:tid 2648953] [client 103.225.59.90:21494] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSos1D5kGVeKsIMQUzlwAAADE"]
[Thu Jul 30 10:00:18.630722 2026] [security2:error] [pid 2648953:tid 2648953] [client 103.225.59.90:21494] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsSos1D5kGVeKsIMQUzlwAAADE"]
[Thu Jul 30 10:00:18.630993 2026] [security2:error] [pid 2648953:tid 2648953] [client 103.225.59.90:21494] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsSos1D5kGVeKsIMQUzlwAAADE"]
[Thu Jul 30 10:00:18.639884 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:52505] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:00:18.642574 2026] [authz_core:error] [pid 2628120:tid 2628120] [client 66.249.66.33:52505] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:00:18.654557 2026] [security2:error] [pid 2646930:tid 2646930] [client 185.177.72.10:64722] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSoi7ph9NlTLG2nfUE1wAAABU"]
[Thu Jul 30 10:00:18.694853 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64730] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.dist"] [unique_id "amsSojnP5whSPdmixesy4QAAAAY"]
[Thu Jul 30 10:00:18.695036 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64730] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.dist"] [unique_id "amsSojnP5whSPdmixesy4QAAAAY"]
[Thu Jul 30 10:00:18.834333 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64730] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSojnP5whSPdmixesy4QAAAAY"]
[Thu Jul 30 10:00:18.866270 2026] [authz_core:error] [pid 2640698:tid 2640698] [client 57.141.0.8:59850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:18.866895 2026] [authz_core:error] [pid 2640698:tid 2640698] [client 57.141.0.8:59850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:18.870534 2026] [security2:error] [pid 2651742:tid 2651742] [client 185.177.72.10:64736] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.local"] [unique_id "amsSooJ2ccAfJyjhEjtioQAAACM"]
[Thu Jul 30 10:00:18.870704 2026] [security2:error] [pid 2651742:tid 2651742] [client 185.177.72.10:64736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.local"] [unique_id "amsSooJ2ccAfJyjhEjtioQAAACM"]
[Thu Jul 30 10:00:19.010802 2026] [security2:error] [pid 2651742:tid 2651742] [client 185.177.72.10:64736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSooJ2ccAfJyjhEjtioQAAACM"]
[Thu Jul 30 10:00:19.012004 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:40068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:19.012024 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:40068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:19.047454 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:64738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.production"] [unique_id "amsSozc6pcH3xNdqZAL3yQAAAEU"]
[Thu Jul 30 10:00:19.047666 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:64738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.production"] [unique_id "amsSozc6pcH3xNdqZAL3yQAAAEU"]
[Thu Jul 30 10:00:19.049836 2026] [ssl:error] [pid 2651555:tid 2651555] (70014)End of file found: [client 216.73.216.199:49268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:19.178522 2026] [authz_core:error] [pid 2648953:tid 2648953] [client 66.249.66.33:52367] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:00:19.181279 2026] [authz_core:error] [pid 2648953:tid 2648953] [client 66.249.66.33:52367] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:00:19.194180 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:64738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSozc6pcH3xNdqZAL3yQAAAEU"]
[Thu Jul 30 10:00:19.230653 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.staging"] [unique_id "amsSoznP5whSPdmixesy4gAAAAY"]
[Thu Jul 30 10:00:19.230823 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/.env.staging"] [unique_id "amsSoznP5whSPdmixesy4gAAAAY"]
[Thu Jul 30 10:00:19.377273 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:64746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSoznP5whSPdmixesy4gAAAAY"]
[Thu Jul 30 10:00:19.745758 2026] [access_compat:error] [pid 2647985:tid 2647985] [client 20.171.55.167:1230] AH01797: client denied by server configuration: /home/thepryor/public_html/makeasmtp.php
[Thu Jul 30 10:00:21.163280 2026] [ssl:error] [pid 2653813:tid 2653813] (70014)End of file found: [client 216.73.216.199:44255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:21.965445 2026] [access_compat:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/edd/
[Thu Jul 30 10:00:21.967515 2026] [access_compat:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 10:00:21.967571 2026] [access_compat:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 10:00:22.263027 2026] [ssl:error] [pid 2653872:tid 2653872] (EAI 2)Name or service not known: [client 144.76.19.72:47488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:22.263103 2026] [ssl:error] [pid 2653872:tid 2653872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:22.737576 2026] [ssl:error] [pid 2653473:tid 2653473] (EAI 2)Name or service not known: [client 144.76.19.72:47496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:22.737617 2026] [ssl:error] [pid 2653473:tid 2653473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:22.855139 2026] [core:error] [pid 2651742:tid 2651742] [client 52.238.199.152:20102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:22.855165 2026] [core:error] [pid 2651742:tid 2651742] [client 52.238.199.152:20102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:23.276701 2026] [ssl:error] [pid 2653875:tid 2653875] (70014)End of file found: [client 216.73.216.199:30135] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:24.068765 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 10:00:24.091138 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:24.202509 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 10:00:24.202571 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.238423 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 10:00:24.238481 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.297538 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/by.php
[Thu Jul 30 10:00:24.297607 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.360508 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/cxs.php
[Thu Jul 30 10:00:24.360555 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.443000 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/coffexium.php
[Thu Jul 30 10:00:24.443047 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.556464 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/asdf.php
[Thu Jul 30 10:00:24.556514 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.592320 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/red.php
[Thu Jul 30 10:00:24.592371 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.628355 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:24.677009 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:24.747850 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:24.786459 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/footer.php
[Thu Jul 30 10:00:24.786508 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.821999 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:24.858093 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:24.895108 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:00:24.962529 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/zoro.php
[Thu Jul 30 10:00:24.962576 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:24.998052 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wm.php
[Thu Jul 30 10:00:24.998109 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.069052 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/bajah.php
[Thu Jul 30 10:00:25.069119 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.080120 2026] [core:error] [pid 2653917:tid 2653917] (13)Permission denied: [client 216.73.216.199:62318] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-64/min_partial
[Thu Jul 30 10:00:25.104491 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/cream1.php
[Thu Jul 30 10:00:25.104536 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.140254 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/lim.php
[Thu Jul 30 10:00:25.140301 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.177030 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/heat3.php
[Thu Jul 30 10:00:25.177090 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.212517 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/greap.php
[Thu Jul 30 10:00:25.212566 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.248185 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/177.php
[Thu Jul 30 10:00:25.248237 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.284322 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/199.php
[Thu Jul 30 10:00:25.284369 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.358173 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/file52.php
[Thu Jul 30 10:00:25.358222 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.381198 2026] [core:error] [pid 2653917:tid 2653917] (13)Permission denied: [client 216.73.216.199:62318] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu5/crash_notes
[Thu Jul 30 10:00:25.393879 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/122.php
[Thu Jul 30 10:00:25.393925 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.429604 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/green1.php
[Thu Jul 30 10:00:25.429654 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.465498 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/sukce.php
[Thu Jul 30 10:00:25.465542 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.501209 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/xb.php
[Thu Jul 30 10:00:25.501272 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.537195 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/biufile.php
[Thu Jul 30 10:00:25.537241 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.541125 2026] [authz_core:error] [pid 2653916:tid 2653916] [client 57.141.0.46:24892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:25.541743 2026] [authz_core:error] [pid 2653916:tid 2653916] [client 57.141.0.46:24892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:25.572669 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wpconf.php
[Thu Jul 30 10:00:25.572712 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.638099 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/ultradybbuks.php
[Thu Jul 30 10:00:25.638149 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.679517 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/novax.php
[Thu Jul 30 10:00:25.679562 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.715203 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/mosty.php
[Thu Jul 30 10:00:25.715245 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.774603 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/dejavu.php
[Thu Jul 30 10:00:25.774651 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.793140 2026] [ssl:error] [pid 2647937:tid 2647937] (EAI 2)Name or service not known: [client 144.76.19.72:47508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:25.793167 2026] [ssl:error] [pid 2647937:tid 2647937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:25.810046 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/aaf.php
[Thu Jul 30 10:00:25.810106 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.844748 2026] [ssl:error] [pid 2653874:tid 2653874] (EAI 2)Name or service not known: [client 144.76.19.72:47522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:25.844783 2026] [ssl:error] [pid 2653874:tid 2653874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:25.845586 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/b00869ae6e.php
[Thu Jul 30 10:00:25.845654 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.881431 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/term.php
[Thu Jul 30 10:00:25.881477 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.917141 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wander.php
[Thu Jul 30 10:00:25.917184 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.952599 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/ha.php
[Thu Jul 30 10:00:25.952649 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:25.984583 2026] [ssl:error] [pid 2653917:tid 2653917] (70014)End of file found: [client 216.73.216.199:62318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:25.988019 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/hur.php
[Thu Jul 30 10:00:25.988077 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.023638 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/2222.php
[Thu Jul 30 10:00:26.023688 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.057090 2026] [security2:error] [pid 2653915:tid 2653915] [client 185.191.171.1:16108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2074.0/prev_next,next.html"] [unique_id "amsSqk7rB_fpk9-k72nuYgAAACU"]
[Thu Jul 30 10:00:26.061432 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/h02ugyh.php
[Thu Jul 30 10:00:26.061474 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.097167 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/seiso.php
[Thu Jul 30 10:00:26.097219 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.162390 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 10:00:26.162437 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.197854 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/ppp.php
[Thu Jul 30 10:00:26.197897 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.233434 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/201.php
[Thu Jul 30 10:00:26.233479 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.281142 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 10:00:26.281188 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.316664 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/samll.php
[Thu Jul 30 10:00:26.316709 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.353004 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/ingfo.php
[Thu Jul 30 10:00:26.353049 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.388698 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/error_log.php
[Thu Jul 30 10:00:26.388741 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.449120 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/xenon1337.php
[Thu Jul 30 10:00:26.449166 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.494474 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/test11.php
[Thu Jul 30 10:00:26.494517 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.530473 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/koala.php
[Thu Jul 30 10:00:26.530517 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.576627 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 10:00:26.576674 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.636688 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/25d653587fdfd1.php
[Thu Jul 30 10:00:26.636746 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.672287 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wefile.php
[Thu Jul 30 10:00:26.672333 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.707905 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/modules
[Thu Jul 30 10:00:26.743444 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:26.779339 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:26.828381 2026] [security2:error] [pid 2650046:tid 2650046] [client 114.119.144.163:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/robots.txt"] [unique_id "amsSqrXZCFa7ftwinVV32wAAADc"], referer: https://papier.com.mt/robots.txt
[Thu Jul 30 10:00:26.845544 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:26.872780 2026] [core:error] [pid 2637691:tid 2637691] [client 52.238.199.152:20217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:26.872802 2026] [core:error] [pid 2637691:tid 2637691] [client 52.238.199.152:20217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:26.882304 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/2P.php
[Thu Jul 30 10:00:26.882344 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.917755 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/tires.php
[Thu Jul 30 10:00:26.917801 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:26.959826 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wordpress
[Thu Jul 30 10:00:26.995630 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/about.php
[Thu Jul 30 10:00:26.995696 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.045804 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:27.081442 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/bob.php
[Thu Jul 30 10:00:27.081503 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.120355 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/t3s.php
[Thu Jul 30 10:00:27.120399 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.155947 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:27.199583 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:27.240800 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/uwu.php
[Thu Jul 30 10:00:27.240848 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.276599 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/uwa.php
[Thu Jul 30 10:00:27.276644 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.306997 2026] [security2:error] [pid 2653813:tid 2653813] [client 110.42.208.131:51938] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sarahwiseman.co.uk"] [uri "/"] [unique_id "amsSq1HOfcRU_68LxnlKqwAAAAE"]
[Thu Jul 30 10:00:27.313780 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/crgio.php
[Thu Jul 30 10:00:27.313821 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.375265 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/geforce.php
[Thu Jul 30 10:00:27.375312 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.442532 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/pucci.php
[Thu Jul 30 10:00:27.442577 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.481446 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:27.517214 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:27.545952 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:33662] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/crm/php.ini"] [unique_id "amsSqzeUUh8HPzZW5ohFlQAAACA"]
[Thu Jul 30 10:00:27.546327 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:33662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/crm/php.ini"] [unique_id "amsSqzeUUh8HPzZW5ohFlQAAACA"]
[Thu Jul 30 10:00:27.552670 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-temp.php
[Thu Jul 30 10:00:27.552709 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.590508 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:27.626298 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/mode.php
[Thu Jul 30 10:00:27.626339 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.661787 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:27.675542 2026] [core:error] [pid 2653915:tid 2653915] [client 52.238.199.152:47503] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:27.675566 2026] [core:error] [pid 2653915:tid 2653915] [client 52.238.199.152:47503] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:27.699956 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/dx.php
[Thu Jul 30 10:00:27.699996 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.702016 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:33662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSqzeUUh8HPzZW5ohFlQAAACA"]
[Thu Jul 30 10:00:27.735516 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/puc.php
[Thu Jul 30 10:00:27.735557 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.771089 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/themes.php
[Thu Jul 30 10:00:27.771135 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.832289 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/dx.php
[Thu Jul 30 10:00:27.832334 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.878811 2026] [lsapi:warn] [pid 2650050:tid 2650050] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:00:27.897983 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/11.php
[Thu Jul 30 10:00:27.898026 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.933414 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/p.php
[Thu Jul 30 10:00:27.933459 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:27.968813 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:28.005574 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/bthil.php
[Thu Jul 30 10:00:28.005633 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.041480 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 10:00:28.041521 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.091144 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 10:00:28.091202 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.097144 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:8981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_event/partial
[Thu Jul 30 10:00:28.126784 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 10:00:28.126832 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.170507 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/100.php
[Thu Jul 30 10:00:28.170551 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.206084 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:00:28.206130 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.242359 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:00:28.242404 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.278351 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 10:00:28.278399 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.317745 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:28.353339 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/f6.php
[Thu Jul 30 10:00:28.353385 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.391215 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 10:00:28.391262 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.456604 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 10:00:28.456649 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.526617 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 10:00:28.526660 2026] [access_compat:error] [pid 2653913:tid 2653913] [client 20.240.254.167:57713] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.663534 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:28.698988 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 10:00:28.699032 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.736853 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:28.772349 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:28.855461 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 10:00:28.855505 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.902634 2026] [ssl:error] [pid 2651677:tid 2651677] (EAI 2)Name or service not known: [client 144.76.19.72:47528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:28.902658 2026] [ssl:error] [pid 2651677:tid 2651677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:28.914966 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 10:00:28.915007 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:28.951703 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:20160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:28.951724 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:20160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:28.957239 2026] [ssl:error] [pid 2653915:tid 2653915] (EAI 2)Name or service not known: [client 144.76.19.72:47542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:28.957265 2026] [ssl:error] [pid 2653915:tid 2653915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:28.992177 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-edit.php
[Thu Jul 30 10:00:28.992219 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.000042 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:8981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-192/cpu_slabs
[Thu Jul 30 10:00:29.031899 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 10:00:29.031942 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.077528 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/index.php
[Thu Jul 30 10:00:29.077579 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.113325 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:29.148608 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/BDKR28WP.php
[Thu Jul 30 10:00:29.148650 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.184052 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:29.272359 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:29.401532 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 10:00:29.401582 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.449908 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 10:00:29.449951 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.477711 2026] [core:error] [pid 2653916:tid 2653916] [client 52.238.199.152:20165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:29.477735 2026] [core:error] [pid 2653916:tid 2653916] [client 52.238.199.152:20165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:29.540604 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/a1.php
[Thu Jul 30 10:00:29.540648 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.601487 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:8981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack/cache_dma
[Thu Jul 30 10:00:29.603132 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:29.670206 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/bal.php
[Thu Jul 30 10:00:29.670252 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.705917 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/admin.php
[Thu Jul 30 10:00:29.705968 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.742157 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/gettest.php
[Thu Jul 30 10:00:29.742200 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.801510 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:29.803522 2026] [security2:error] [pid 2650050:tid 2650050] [client 85.208.98.16:50506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/toner-canon-541-k.html"] [unique_id "amsSrW_Nx9VXTxi80WhyeQAAAD0"]
[Thu Jul 30 10:00:29.837059 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:29.872681 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 10:00:29.872723 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.902861 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:8981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/min_partial
[Thu Jul 30 10:00:29.910410 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/kj.php
[Thu Jul 30 10:00:29.910453 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:29.974486 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 10:00:29.974531 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.015577 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/hypo.php
[Thu Jul 30 10:00:30.015635 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.051330 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:30.087296 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 10:00:30.087340 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.124509 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:30.179741 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 10:00:30.179788 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.185667 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:40097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:30.185692 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:40097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:30.206821 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:8981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/close_delay
[Thu Jul 30 10:00:30.215189 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/als.php
[Thu Jul 30 10:00:30.215235 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.254746 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/pol.php
[Thu Jul 30 10:00:30.254794 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.290201 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/006.php
[Thu Jul 30 10:00:30.290248 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.326646 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 10:00:30.326697 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.362432 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/4PJcpMFsD8B.php
[Thu Jul 30 10:00:30.362480 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.399476 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 10:00:30.399523 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.441278 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/cfile.php
[Thu Jul 30 10:00:30.441325 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.477019 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/class-wp.php
[Thu Jul 30 10:00:30.477076 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.517717 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:00:30.517765 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.553519 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/aa2.php
[Thu Jul 30 10:00:30.553561 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.589515 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/ccou.php
[Thu Jul 30 10:00:30.589558 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.625040 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/dr.php
[Thu Jul 30 10:00:30.625106 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.676264 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/xamp.php
[Thu Jul 30 10:00:30.676311 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.712490 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/bless.php
[Thu Jul 30 10:00:30.712531 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.818416 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file46.php
[Thu Jul 30 10:00:30.818462 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.860730 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/eee.php
[Thu Jul 30 10:00:30.860775 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.916456 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file25.php
[Thu Jul 30 10:00:30.916499 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:30.972192 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/hg.php
[Thu Jul 30 10:00:30.972237 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.019597 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file48.php
[Thu Jul 30 10:00:31.019646 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.090729 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/ff.php
[Thu Jul 30 10:00:31.090775 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.126295 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file31.php
[Thu Jul 30 10:00:31.126341 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.162570 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file6.php
[Thu Jul 30 10:00:31.162624 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.288139 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/a2.php
[Thu Jul 30 10:00:31.288186 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.341488 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file15.php
[Thu Jul 30 10:00:31.341532 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.361057 2026] [core:error] [pid 2631105:tid 2631105] [client 52.238.199.152:40108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:31.361100 2026] [core:error] [pid 2631105:tid 2631105] [client 52.238.199.152:40108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:31.361950 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:33846] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.bak"] [unique_id "amsSr_4oyjAu1rtt0oL-gAAAAA0"]
[Thu Jul 30 10:00:31.362158 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:33846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.bak"] [unique_id "amsSr_4oyjAu1rtt0oL-gAAAAA0"]
[Thu Jul 30 10:00:31.390825 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/no1.php
[Thu Jul 30 10:00:31.390866 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.447990 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/jp.php
[Thu Jul 30 10:00:31.448032 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.512981 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:33846] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSr_4oyjAu1rtt0oL-gAAAAA0"]
[Thu Jul 30 10:00:31.523538 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 10:00:31.523586 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.555793 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:33852] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.dev"] [unique_id "amsSrzvxQELplpHJCGhKbQAAAAQ"]
[Thu Jul 30 10:00:31.555979 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:33852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.dev"] [unique_id "amsSrzvxQELplpHJCGhKbQAAAAQ"]
[Thu Jul 30 10:00:31.580505 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 10:00:31.580548 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.616022 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/xwpg.php
[Thu Jul 30 10:00:31.616080 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.651773 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:31.687355 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/ddd.php
[Thu Jul 30 10:00:31.687404 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.697475 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:33852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSrzvxQELplpHJCGhKbQAAAAQ"]
[Thu Jul 30 10:00:31.723053 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:31.733950 2026] [security2:error] [pid 2653912:tid 2653912] [client 185.177.72.10:33856] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.dist"] [unique_id "amsSr193LbYpKaDlF8onbwAAABY"]
[Thu Jul 30 10:00:31.734147 2026] [security2:error] [pid 2653912:tid 2653912] [client 185.177.72.10:33856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.dist"] [unique_id "amsSr193LbYpKaDlF8onbwAAABY"]
[Thu Jul 30 10:00:31.758604 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/waf.php
[Thu Jul 30 10:00:31.758649 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.794131 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/xstelth.php
[Thu Jul 30 10:00:31.794184 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.829848 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:31.865557 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-links.php
[Thu Jul 30 10:00:31.865612 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.873994 2026] [security2:error] [pid 2653912:tid 2653912] [client 185.177.72.10:33856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSr193LbYpKaDlF8onbwAAABY"]
[Thu Jul 30 10:00:31.901208 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:31.908857 2026] [security2:error] [pid 2653917:tid 2653917] [client 185.177.72.10:33864] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.local"] [unique_id "amsSr2d00PgTSaWz8WjvbAAAACo"]
[Thu Jul 30 10:00:31.909051 2026] [security2:error] [pid 2653917:tid 2653917] [client 185.177.72.10:33864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.local"] [unique_id "amsSr2d00PgTSaWz8WjvbAAAACo"]
[Thu Jul 30 10:00:31.913994 2026] [core:error] [pid 2653913:tid 2653913] [client 52.238.199.152:20193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:31.914014 2026] [core:error] [pid 2653913:tid 2653913] [client 52.238.199.152:20193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:31.951487 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/class-t.api.php
[Thu Jul 30 10:00:31.951538 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:31.988984 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/zwso.php
[Thu Jul 30 10:00:31.989034 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.014463 2026] [ssl:error] [pid 2651744:tid 2651744] (EAI 2)Name or service not known: [client 144.76.19.72:57784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:32.014499 2026] [ssl:error] [pid 2651744:tid 2651744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:32.024803 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:32.050159 2026] [security2:error] [pid 2653917:tid 2653917] [client 185.177.72.10:33864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSr2d00PgTSaWz8WjvbAAAACo"]
[Thu Jul 30 10:00:32.051614 2026] [security2:error] [pid 2650050:tid 2650050] [client 110.42.208.131:54946] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amsSsG_Nx9VXTxi80WhyewAAAD0"], referer: http://www.sarahwiseman.co.uk
[Thu Jul 30 10:00:32.067672 2026] [ssl:error] [pid 2631105:tid 2631105] (EAI 2)Name or service not known: [client 144.76.19.72:57798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:32.067698 2026] [ssl:error] [pid 2631105:tid 2631105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:32.077603 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/class19.php
[Thu Jul 30 10:00:32.077642 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.087741 2026] [security2:error] [pid 2651745:tid 2651745] [client 185.177.72.10:33874] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.production"] [unique_id "amsSsC4pCUBYr58IiWdMvQAAACk"]
[Thu Jul 30 10:00:32.087889 2026] [security2:error] [pid 2651745:tid 2651745] [client 185.177.72.10:33874] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.production"] [unique_id "amsSsC4pCUBYr58IiWdMvQAAACk"]
[Thu Jul 30 10:00:32.180181 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/class20.php
[Thu Jul 30 10:00:32.180243 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.191011 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:8981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iint_cache/slab_size
[Thu Jul 30 10:00:32.216603 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:00:32.216652 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.238657 2026] [security2:error] [pid 2651745:tid 2651745] [client 185.177.72.10:33874] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSsC4pCUBYr58IiWdMvQAAACk"]
[Thu Jul 30 10:00:32.252189 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/randkeyword.php
[Thu Jul 30 10:00:32.252230 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.274298 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:33884] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.staging"] [unique_id "amsSsDvxQELplpHJCGhKbgAAAAQ"]
[Thu Jul 30 10:00:32.274478 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:33884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cron/.env.staging"] [unique_id "amsSsDvxQELplpHJCGhKbgAAAAQ"]
[Thu Jul 30 10:00:32.291803 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/fwe.php
[Thu Jul 30 10:00:32.291846 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.328482 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:00:32.365857 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/g.php
[Thu Jul 30 10:00:32.365915 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.402519 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/tx1.php
[Thu Jul 30 10:00:32.402567 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.431445 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:33884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSsDvxQELplpHJCGhKbgAAAAQ"]
[Thu Jul 30 10:00:32.440705 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/xv.php
[Thu Jul 30 10:00:32.440747 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.538000 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/x56.php
[Thu Jul 30 10:00:32.538046 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.576349 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/htaccess.php
[Thu Jul 30 10:00:32.576397 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.612057 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/readme.php
[Thu Jul 30 10:00:32.612117 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.647456 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/x50.php
[Thu Jul 30 10:00:32.647501 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.673337 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:40121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:32.673361 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:40121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:32.734960 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/fv.php
[Thu Jul 30 10:00:32.735011 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.770676 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 10:00:32.770726 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.806311 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/lsd.php
[Thu Jul 30 10:00:32.806358 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.893334 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 10:00:32.893396 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.898521 2026] [authz_core:error] [pid 2651745:tid 2651745] [client 66.249.66.33:45360] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:00:32.901206 2026] [authz_core:error] [pid 2651745:tid 2651745] [client 66.249.66.33:45360] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:00:32.929197 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wsd.php
[Thu Jul 30 10:00:32.929256 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:32.965160 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/gtc.php
[Thu Jul 30 10:00:32.965217 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.003333 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/atx.php
[Thu Jul 30 10:00:33.003387 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.040535 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/z60.php
[Thu Jul 30 10:00:33.040585 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.078530 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.php
[Thu Jul 30 10:00:33.078588 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.127586 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/m.php
[Thu Jul 30 10:00:33.127654 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.172262 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/themes.php
[Thu Jul 30 10:00:33.172338 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.282606 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:33.333007 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:33.369002 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/click.php
[Thu Jul 30 10:00:33.369058 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.391402 2026] [ssl:error] [pid 2653911:tid 2653911] (70014)End of file found: [client 216.73.216.199:12356] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:33.414877 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/install.php
[Thu Jul 30 10:00:33.414927 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.450973 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/lv.php
[Thu Jul 30 10:00:33.451025 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.570644 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 10:00:33.570695 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.613159 2026] [core:error] [pid 2631105:tid 2631105] [client 52.238.199.152:40078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:33.613190 2026] [core:error] [pid 2631105:tid 2631105] [client 52.238.199.152:40078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:33.619631 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 10:00:33.619681 2026] [access_compat:error] [pid 2647935:tid 2647935] [client 20.240.254.167:57719] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.779282 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/cong.php
[Thu Jul 30 10:00:33.779333 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.822347 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:33.858376 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/cong.php
[Thu Jul 30 10:00:33.858440 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.919154 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 10:00:33.919201 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.954906 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 10:00:33.954953 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:33.990687 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 10:00:33.990737 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.026445 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/0x.php
[Thu Jul 30 10:00:34.026498 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.085716 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 10:00:34.085765 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.121492 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 10:00:34.121540 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.157345 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:34.228317 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:00:34.228360 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.264680 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:34.300644 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 10:00:34.300693 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.340358 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 10:00:34.340407 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.402484 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 10:00:34.402532 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.439454 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 10:00:34.439502 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.479479 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:00:34.479521 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.515386 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa.php
[Thu Jul 30 10:00:34.515431 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.551373 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/themes
[Thu Jul 30 10:00:34.615235 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.191.171.14:56580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/how-far-can-a-tsunami-travel-in-california"] [unique_id "amsSsrzDi7bAxSTb5kpBKQAAAAI"]
[Thu Jul 30 10:00:34.621380 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:34.661207 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:34.740109 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:34.777280 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:19688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:34.777304 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:19688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:34.782129 2026] [authz_core:error] [pid 2651555:tid 2651555] [client 57.141.0.64:39232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:34.782810 2026] [authz_core:error] [pid 2651555:tid 2651555] [client 57.141.0.64:39232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:34.785723 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/manager.php
[Thu Jul 30 10:00:34.785772 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.852485 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/item.php
[Thu Jul 30 10:00:34.852532 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.888198 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins
[Thu Jul 30 10:00:34.924212 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 10:00:34.924287 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:34.980132 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/mail.php
[Thu Jul 30 10:00:34.980179 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.015731 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:35.057880 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/sx.php
[Thu Jul 30 10:00:35.057955 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.094484 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:35.121976 2026] [ssl:error] [pid 2653917:tid 2653917] (EAI 2)Name or service not known: [client 144.76.19.72:57806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:35.122009 2026] [ssl:error] [pid 2653917:tid 2653917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:35.177426 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa.php
[Thu Jul 30 10:00:35.177471 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.222539 2026] [ssl:error] [pid 2640698:tid 2640698] (EAI 2)Name or service not known: [client 144.76.19.72:57810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:35.222565 2026] [ssl:error] [pid 2640698:tid 2640698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:35.226228 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 10:00:35.226267 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.305857 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/byp.php
[Thu Jul 30 10:00:35.305929 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.361127 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-trackback.php
[Thu Jul 30 10:00:35.361173 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.397160 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/index.php
[Thu Jul 30 10:00:35.397207 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.432778 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:35.471024 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:35.508419 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/gmo.php
[Thu Jul 30 10:00:35.508462 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:35.550196 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:35.589379 2026] [core:error] [pid 2650048:tid 2650048] [client 52.238.199.152:20033] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:35.589401 2026] [core:error] [pid 2650048:tid 2650048] [client 52.238.199.152:20033] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:35.614774 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/css
[Thu Jul 30 10:00:35.650940 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:35.686706 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:35.759146 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/filemanager
[Thu Jul 30 10:00:35.802868 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:35.859139 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:35.896584 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/index
[Thu Jul 30 10:00:35.933152 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/uploads
[Thu Jul 30 10:00:35.968943 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:36.027754 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ww1.php
[Thu Jul 30 10:00:36.027801 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.093937 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/about
[Thu Jul 30 10:00:36.129764 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 10:00:36.139999 2026] [core:error] [pid 2640698:tid 2640698] [client 52.238.199.152:20034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:36.140021 2026] [core:error] [pid 2640698:tid 2640698] [client 52.238.199.152:20034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:36.166938 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/acme-challenge/index.php
[Thu Jul 30 10:00:36.166982 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.202964 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/css
[Thu Jul 30 10:00:36.239449 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/security.php
[Thu Jul 30 10:00:36.239503 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.288730 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:36.330964 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:36.366947 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:36.454436 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:36.490470 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:36.526331 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:36.562383 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/admin.php
[Thu Jul 30 10:00:36.562448 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.598252 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:36.634179 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:36.671552 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:00:36.712443 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/log.php
[Thu Jul 30 10:00:36.712485 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.748705 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/class.php
[Thu Jul 30 10:00:36.748750 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.752581 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:19692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:36.752609 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:19692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:36.784491 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/bless5.php
[Thu Jul 30 10:00:36.784533 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.820353 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:36.865518 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:00:36.901559 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 10:00:36.901614 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.938104 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 10:00:36.938153 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:36.988517 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o1.php
[Thu Jul 30 10:00:36.988562 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.025630 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/juuuu.php
[Thu Jul 30 10:00:37.025675 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.061400 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ha.php
[Thu Jul 30 10:00:37.061456 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.153284 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 10:00:37.153327 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.225226 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/we2.php
[Thu Jul 30 10:00:37.225270 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.261366 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/04.php
[Thu Jul 30 10:00:37.261407 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.296985 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/333.php
[Thu Jul 30 10:00:37.297024 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.342441 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/520.php
[Thu Jul 30 10:00:37.342485 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.382214 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ar.php
[Thu Jul 30 10:00:37.382261 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.418120 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 10:00:37.418199 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.470548 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/xx.php
[Thu Jul 30 10:00:37.470603 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.521418 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/gifclass4.php
[Thu Jul 30 10:00:37.521472 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.558948 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:20123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:37.558969 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:20123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:37.560621 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/2clas.php
[Thu Jul 30 10:00:37.560658 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.596216 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ave.php
[Thu Jul 30 10:00:37.596253 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.603467 2026] [core:error] [pid 2641791:tid 2641791] (13)Permission denied: [client 216.73.216.199:8981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS2/uartclk
[Thu Jul 30 10:00:37.634487 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wrt.php
[Thu Jul 30 10:00:37.634525 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.702478 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/bibil.php
[Thu Jul 30 10:00:37.702523 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.738229 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/radio.php
[Thu Jul 30 10:00:37.738275 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.773903 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/files.php
[Thu Jul 30 10:00:37.773947 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.818362 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/file7.php
[Thu Jul 30 10:00:37.818405 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.854023 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/gifclass.php
[Thu Jul 30 10:00:37.854077 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.889701 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:37.925948 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/nox.php
[Thu Jul 30 10:00:37.925992 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.961764 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/file48.php
[Thu Jul 30 10:00:37.961804 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:37.997621 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 10:00:37.997667 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.044876 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/class9.php
[Thu Jul 30 10:00:38.044919 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.106027 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/la.php
[Thu Jul 30 10:00:38.106086 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.144239 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/bless11.php
[Thu Jul 30 10:00:38.144283 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.195431 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ccou.php
[Thu Jul 30 10:00:38.195472 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.240241 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/ton.php
[Thu Jul 30 10:00:38.240286 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.275977 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.php
[Thu Jul 30 10:00:38.276023 2026] [access_compat:error] [pid 2637691:tid 2637691] [client 20.240.254.167:64089] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.277258 2026] [ssl:error] [pid 2651741:tid 2651741] (EAI 2)Name or service not known: [client 144.76.19.72:57826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:38.277289 2026] [ssl:error] [pid 2651741:tid 2651741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:38.331401 2026] [ssl:error] [pid 2651745:tid 2651745] (EAI 2)Name or service not known: [client 144.76.19.72:57828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:38.331428 2026] [ssl:error] [pid 2651745:tid 2651745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:38.401276 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/file9.php
[Thu Jul 30 10:00:38.401325 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.463486 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/ac.php
[Thu Jul 30 10:00:38.463532 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.477229 2026] [lsapi:warn] [pid 2650048:tid 2650048] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:00:38.499871 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/new4.php
[Thu Jul 30 10:00:38.499917 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.511490 2026] [ssl:error] [pid 2653351:tid 2653351] (70014)End of file found: [client 216.73.216.199:43501] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:38.533909 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/pop.php
[Thu Jul 30 10:00:38.533960 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.567895 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/az.php
[Thu Jul 30 10:00:38.567943 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.580713 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:27022] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/cron/php.ini"] [unique_id "amsStuDqQN_GEwmvH4ZtOgAAACY"]
[Thu Jul 30 10:00:38.581031 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:27022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cron/php.ini"] [unique_id "amsStuDqQN_GEwmvH4ZtOgAAACY"]
[Thu Jul 30 10:00:38.602287 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/xaz.php
[Thu Jul 30 10:00:38.602334 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.640099 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/up4.php
[Thu Jul 30 10:00:38.640150 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.676876 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/1aa.php
[Thu Jul 30 10:00:38.676919 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.711141 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/elp.php
[Thu Jul 30 10:00:38.711187 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.735149 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:27022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsStuDqQN_GEwmvH4ZtOgAAACY"]
[Thu Jul 30 10:00:38.745081 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/wtz.php
[Thu Jul 30 10:00:38.745123 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.788798 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/galex.php
[Thu Jul 30 10:00:38.788840 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.823410 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/xb.php
[Thu Jul 30 10:00:38.823453 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.858185 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/ova.php
[Thu Jul 30 10:00:38.858239 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.884807 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:20133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:38.884831 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:20133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:38.892438 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/vx.php
[Thu Jul 30 10:00:38.892479 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.927725 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/rh.php
[Thu Jul 30 10:00:38.927770 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:38.963121 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/,init.php
[Thu Jul 30 10:00:38.963161 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.030966 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/env.php
[Thu Jul 30 10:00:39.031011 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.079385 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/elf.php
[Thu Jul 30 10:00:39.079428 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.128522 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/cyr6l.php
[Thu Jul 30 10:00:39.128568 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.165524 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/51whn.php
[Thu Jul 30 10:00:39.165565 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.199669 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa-rex.php7
[Thu Jul 30 10:00:39.199713 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.233764 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/alfanew.php7
[Thu Jul 30 10:00:39.233816 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.268112 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/tanliste.php
[Thu Jul 30 10:00:39.268159 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.302008 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/atomlib.php.suspected
[Thu Jul 30 10:00:39.308253 2026] [ssl:error] [pid 2650046:tid 2650046] (70014)End of file found: [client 216.73.216.199:51975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:39.336004 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/ehszwsab.php
[Thu Jul 30 10:00:39.336049 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.371678 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/meta.php
[Thu Jul 30 10:00:39.371724 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.405861 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/colleen986.php
[Thu Jul 30 10:00:39.405906 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.474476 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/szezaxab.php
[Thu Jul 30 10:00:39.474520 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.510677 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/function.php
[Thu Jul 30 10:00:39.510723 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.545466 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/cierra632.php
[Thu Jul 30 10:00:39.545513 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.579829 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/ciera702.php
[Thu Jul 30 10:00:39.579873 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.613821 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/chaya986.php
[Thu Jul 30 10:00:39.613862 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.647803 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/charmaine744.php
[Thu Jul 30 10:00:39.647848 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.690106 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/charity744.php
[Thu Jul 30 10:00:39.690151 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.724116 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/camryn118.php
[Thu Jul 30 10:00:39.724159 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.758193 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/byrdie906.php
[Thu Jul 30 10:00:39.758241 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.797495 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/async-upload.php
[Thu Jul 30 10:00:39.797543 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.832523 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/br5is.php
[Thu Jul 30 10:00:39.832566 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.871508 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/bonita76.php
[Thu Jul 30 10:00:39.871551 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.906329 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/angie712.php
[Thu Jul 30 10:00:39.906384 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.947984 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko.php
[Thu Jul 30 10:00:39.948037 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:39.983619 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/andria828.php
[Thu Jul 30 10:00:39.983670 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.017904 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/botol.php
[Thu Jul 30 10:00:40.017959 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.107293 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/amya985.php
[Thu Jul 30 10:00:40.107351 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.153148 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/ui.php
[Thu Jul 30 10:00:40.153197 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.190471 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/zz.php
[Thu Jul 30 10:00:40.190521 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.225159 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/allyson162.php
[Thu Jul 30 10:00:40.225208 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.259460 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/digiwoll.php
[Thu Jul 30 10:00:40.259505 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.308064 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/tinyfilemanager.php
[Thu Jul 30 10:00:40.308127 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.350561 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/70.php
[Thu Jul 30 10:00:40.350619 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.385091 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/content.php
[Thu Jul 30 10:00:40.385138 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.419725 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/lord.php
[Thu Jul 30 10:00:40.419773 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.453890 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/cyl.php
[Thu Jul 30 10:00:40.453951 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.488097 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/alfav4.1-tesla.php
[Thu Jul 30 10:00:40.488142 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.522248 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/-.php
[Thu Jul 30 10:00:40.522297 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.556399 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/fx.php
[Thu Jul 30 10:00:40.556448 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.619945 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/p0wny.php
[Thu Jul 30 10:00:40.619992 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.626560 2026] [ssl:error] [pid 2641791:tid 2641791] (70014)End of file found: [client 216.73.216.199:8981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:40.654610 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/69.php
[Thu Jul 30 10:00:40.654665 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.700433 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/67.php
[Thu Jul 30 10:00:40.700485 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.734408 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/68.php
[Thu Jul 30 10:00:40.734457 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.768340 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/66.php
[Thu Jul 30 10:00:40.768384 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.802659 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/65.php
[Thu Jul 30 10:00:40.802709 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.837764 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/64.php
[Thu Jul 30 10:00:40.837832 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.871957 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/63.php
[Thu Jul 30 10:00:40.872011 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.906125 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/62.php
[Thu Jul 30 10:00:40.906173 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.940419 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/61.php
[Thu Jul 30 10:00:40.940469 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:40.977052 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/60.php
[Thu Jul 30 10:00:40.977117 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.011112 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/59.php
[Thu Jul 30 10:00:41.011164 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.045252 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/58.php
[Thu Jul 30 10:00:41.045303 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.079294 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/57.php
[Thu Jul 30 10:00:41.079344 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.113659 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/56.php
[Thu Jul 30 10:00:41.113704 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.147585 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/55.php
[Thu Jul 30 10:00:41.147644 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.191718 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/51.php
[Thu Jul 30 10:00:41.191780 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.240622 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/54.php
[Thu Jul 30 10:00:41.240675 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.293312 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/53.php
[Thu Jul 30 10:00:41.293360 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.338273 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/52.php
[Thu Jul 30 10:00:41.338321 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.372232 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/50.php
[Thu Jul 30 10:00:41.372279 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.406235 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/49.php
[Thu Jul 30 10:00:41.406283 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.409556 2026] [ssl:error] [pid 2653872:tid 2653872] (EAI 2)Name or service not known: [client 144.76.19.72:64376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:41.409587 2026] [ssl:error] [pid 2653872:tid 2653872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:41.442409 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/48.php
[Thu Jul 30 10:00:41.442457 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.466942 2026] [ssl:error] [pid 2653302:tid 2653302] (EAI 2)Name or service not known: [client 144.76.19.72:64378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:41.466972 2026] [ssl:error] [pid 2653302:tid 2653302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:41.501424 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/47.php
[Thu Jul 30 10:00:41.501474 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.535406 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/46.php
[Thu Jul 30 10:00:41.535454 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.577334 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/44.php
[Thu Jul 30 10:00:41.577388 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.611465 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/43.php
[Thu Jul 30 10:00:41.611513 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.647331 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/37.php
[Thu Jul 30 10:00:41.647382 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.682172 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/42.php
[Thu Jul 30 10:00:41.682219 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.717580 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/41.php
[Thu Jul 30 10:00:41.717646 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.761470 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/40.php
[Thu Jul 30 10:00:41.761516 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.796919 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/39.php
[Thu Jul 30 10:00:41.796974 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.832682 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/38.php
[Thu Jul 30 10:00:41.832737 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.840972 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 10:00:41.867905 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/36.php
[Thu Jul 30 10:00:41.867954 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.916489 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/35.php
[Thu Jul 30 10:00:41.916556 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.950535 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/34.php
[Thu Jul 30 10:00:41.950584 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:41.989078 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/123456.php
[Thu Jul 30 10:00:41.989129 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.026517 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/33.php
[Thu Jul 30 10:00:42.026571 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.060522 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/25.php
[Thu Jul 30 10:00:42.060569 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.094396 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/24.php
[Thu Jul 30 10:00:42.094442 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.128387 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/12345.php
[Thu Jul 30 10:00:42.128436 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.162675 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/1234.php
[Thu Jul 30 10:00:42.162729 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.202003 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/10.php
[Thu Jul 30 10:00:42.202052 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.236086 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/9.php
[Thu Jul 30 10:00:42.236137 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.280154 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/8.php
[Thu Jul 30 10:00:42.280202 2026] [access_compat:error] [pid 2653837:tid 2653837] [client 20.240.254.167:64110] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.365526 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/7.php
[Thu Jul 30 10:00:42.365579 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.400338 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/6.php
[Thu Jul 30 10:00:42.400383 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.428207 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:27186] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/cryo_project/.env"] [unique_id "amsSujmg8j7OyB4K1U63tgAAAAs"]
[Thu Jul 30 10:00:42.428382 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:27186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/cryo_project/.env"] [unique_id "amsSujmg8j7OyB4K1U63tgAAAAs"]
[Thu Jul 30 10:00:42.468775 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/5.php
[Thu Jul 30 10:00:42.468823 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.510614 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/4.php
[Thu Jul 30 10:00:42.510664 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.545194 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/3.php
[Thu Jul 30 10:00:42.545240 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.579553 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/2.php
[Thu Jul 30 10:00:42.579611 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.605378 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:27186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSujmg8j7OyB4K1U63tgAAAAs"]
[Thu Jul 30 10:00:42.615143 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/1.php
[Thu Jul 30 10:00:42.615187 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.643026 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27190] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/css/.env"] [unique_id "amsSusnWehx0znQgGy91qQAAAAU"]
[Thu Jul 30 10:00:42.643237 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/css/.env"] [unique_id "amsSusnWehx0znQgGy91qQAAAAU"]
[Thu Jul 30 10:00:42.649696 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/0.php
[Thu Jul 30 10:00:42.649741 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.683869 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/z.php
[Thu Jul 30 10:00:42.683914 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.742964 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/new
[Thu Jul 30 10:00:42.788379 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/y.php
[Thu Jul 30 10:00:42.788429 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.866627 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSusnWehx0znQgGy91qQAAAAU"]
[Thu Jul 30 10:00:42.873054 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/x.php
[Thu Jul 30 10:00:42.873104 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.903827 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27204] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/current/.env"] [unique_id "amsSugqZ_sP2VocwkWgdGgAAAAg"]
[Thu Jul 30 10:00:42.903969 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/.env"] [unique_id "amsSugqZ_sP2VocwkWgdGgAAAAg"]
[Thu Jul 30 10:00:42.916662 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/w.php
[Thu Jul 30 10:00:42.916705 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:42.951713 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/v.php
[Thu Jul 30 10:00:42.951757 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.000243 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/u.php
[Thu Jul 30 10:00:43.000292 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.034755 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/t.php
[Thu Jul 30 10:00:43.034800 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.044965 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSugqZ_sP2VocwkWgdGgAAAAg"]
[Thu Jul 30 10:00:43.069162 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/s.php
[Thu Jul 30 10:00:43.069215 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.082951 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:27220] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.bak"] [unique_id "amsSuyqCrh0o4antW6s9EQAAABM"]
[Thu Jul 30 10:00:43.083139 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:27220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.bak"] [unique_id "amsSuyqCrh0o4antW6s9EQAAABM"]
[Thu Jul 30 10:00:43.103378 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/r.php
[Thu Jul 30 10:00:43.103421 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.160604 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/q.php
[Thu Jul 30 10:00:43.160652 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.222450 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/p.php
[Thu Jul 30 10:00:43.222495 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.232281 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:27220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSuyqCrh0o4antW6s9EQAAABM"]
[Thu Jul 30 10:00:43.262510 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/o.php
[Thu Jul 30 10:00:43.262554 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.268241 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.dev"] [unique_id "amsSu8nWehx0znQgGy91qgAAAAU"]
[Thu Jul 30 10:00:43.268427 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.dev"] [unique_id "amsSu8nWehx0znQgGy91qgAAAAU"]
[Thu Jul 30 10:00:43.296943 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/n.php
[Thu Jul 30 10:00:43.296990 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.332424 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/m.php
[Thu Jul 30 10:00:43.332467 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.366709 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/l.php
[Thu Jul 30 10:00:43.366753 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.413323 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSu8nWehx0znQgGy91qgAAAAU"]
[Thu Jul 30 10:00:43.431858 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/k.php
[Thu Jul 30 10:00:43.431901 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.448966 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.dist"] [unique_id "amsSuwqZ_sP2VocwkWgdGwAAAAg"]
[Thu Jul 30 10:00:43.449178 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.dist"] [unique_id "amsSuwqZ_sP2VocwkWgdGwAAAAg"]
[Thu Jul 30 10:00:43.466083 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/i.php
[Thu Jul 30 10:00:43.466126 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.502341 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/j.php
[Thu Jul 30 10:00:43.502389 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.537089 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/backup
[Thu Jul 30 10:00:43.572827 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/h.php
[Thu Jul 30 10:00:43.572872 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.612774 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/old
[Thu Jul 30 10:00:43.647314 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/g.php
[Thu Jul 30 10:00:43.647359 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.692904 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/test
[Thu Jul 30 10:00:43.702333 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSuwqZ_sP2VocwkWgdGwAAAAg"]
[Thu Jul 30 10:00:43.737801 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.local"] [unique_id "amsSu8nWehx0znQgGy91qwAAAAU"]
[Thu Jul 30 10:00:43.737953 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.local"] [unique_id "amsSu8nWehx0znQgGy91qwAAAAU"]
[Thu Jul 30 10:00:43.771260 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/f.php
[Thu Jul 30 10:00:43.771308 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.805571 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/blog
[Thu Jul 30 10:00:43.866322 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/e.php
[Thu Jul 30 10:00:43.866369 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.899353 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSu8nWehx0znQgGy91qwAAAAU"]
[Thu Jul 30 10:00:43.912578 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/wordpress
[Thu Jul 30 10:00:43.931509 2026] [authz_core:error] [pid 2648183:tid 2648183] [client 74.248.33.8:51378] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/html-api/error_log
[Thu Jul 30 10:00:43.936215 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27250] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.production"] [unique_id "amsSuwqZ_sP2VocwkWgdHAAAAAg"]
[Thu Jul 30 10:00:43.936341 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.production"] [unique_id "amsSuwqZ_sP2VocwkWgdHAAAAAg"]
[Thu Jul 30 10:00:43.959336 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/d.php
[Thu Jul 30 10:00:43.959374 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:43.993521 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/c.php
[Thu Jul 30 10:00:43.993565 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.027881 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/b.php
[Thu Jul 30 10:00:44.027930 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.062794 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/a.php
[Thu Jul 30 10:00:44.062833 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.095123 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.177.72.10:27250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSuwqZ_sP2VocwkWgdHAAAAAg"]
[Thu Jul 30 10:00:44.098415 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/js.php
[Thu Jul 30 10:00:44.098454 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.132038 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27256] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.staging"] [unique_id "amsSvMnWehx0znQgGy91rAAAAAU"]
[Thu Jul 30 10:00:44.132237 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/.env.staging"] [unique_id "amsSvMnWehx0znQgGy91rAAAAAU"]
[Thu Jul 30 10:00:44.132864 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:44.167162 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/jembut.php
[Thu Jul 30 10:00:44.167203 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.209484 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/class.php
[Thu Jul 30 10:00:44.209528 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.233077 2026] [ssl:error] [pid 2628120:tid 2628120] (70014)End of file found: [client 216.73.216.199:49527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:44.244470 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/seo.php
[Thu Jul 30 10:00:44.244512 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.278643 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/cannonical.php
[Thu Jul 30 10:00:44.278687 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.313510 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/format.php
[Thu Jul 30 10:00:44.313553 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.348548 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/loader.php
[Thu Jul 30 10:00:44.348607 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.360398 2026] [security2:error] [pid 2653837:tid 2653837] [client 185.177.72.10:27256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSvMnWehx0znQgGy91rAAAAAU"]
[Thu Jul 30 10:00:44.382944 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/log.php
[Thu Jul 30 10:00:44.382987 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.417388 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/functions.php
[Thu Jul 30 10:00:44.417434 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.452903 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/taxonomy.php
[Thu Jul 30 10:00:44.452964 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.487548 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/footer.php
[Thu Jul 30 10:00:44.487605 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.523763 2026] [ssl:error] [pid 2653912:tid 2653912] (EAI 2)Name or service not known: [client 144.76.19.72:64390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:44.523799 2026] [ssl:error] [pid 2653912:tid 2653912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:44.525613 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/mouse.php
[Thu Jul 30 10:00:44.525653 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.559936 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/hp.php
[Thu Jul 30 10:00:44.559980 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.588344 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:64404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:44.588372 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:44.630448 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/asu.php
[Thu Jul 30 10:00:44.630491 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.676634 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/sql.php
[Thu Jul 30 10:00:44.676684 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.711453 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/tol.php
[Thu Jul 30 10:00:44.711497 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.745823 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/lol.php
[Thu Jul 30 10:00:44.745866 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.780137 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/dor.php
[Thu Jul 30 10:00:44.780177 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.814567 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/coy.php
[Thu Jul 30 10:00:44.814620 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.848913 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/hehe.php
[Thu Jul 30 10:00:44.848954 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.900507 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/php.php
[Thu Jul 30 10:00:44.900552 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.934815 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/for.php
[Thu Jul 30 10:00:44.934856 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:44.972717 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/perl.php
[Thu Jul 30 10:00:44.972760 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.011767 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi.php
[Thu Jul 30 10:00:45.011812 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.050147 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/tmp.php
[Thu Jul 30 10:00:45.050188 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.085649 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/login.php
[Thu Jul 30 10:00:45.085693 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.120635 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/logout.php
[Thu Jul 30 10:00:45.120679 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.141173 2026] [core:error] [pid 2653813:tid 2653813] (13)Permission denied: [client 216.73.216.199:22996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-16/cpu_slabs
[Thu Jul 30 10:00:45.205339 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/fuck.php
[Thu Jul 30 10:00:45.205383 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.240552 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/outside.php
[Thu Jul 30 10:00:45.240606 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.278416 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/exists.php
[Thu Jul 30 10:00:45.278460 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.312930 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/exit.php
[Thu Jul 30 10:00:45.312973 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.354550 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/b374k.php
[Thu Jul 30 10:00:45.354605 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.403460 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/assets.php
[Thu Jul 30 10:00:45.403510 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.438371 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/system.php
[Thu Jul 30 10:00:45.438417 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.472547 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/git.php
[Thu Jul 30 10:00:45.472600 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.530549 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/got.php
[Thu Jul 30 10:00:45.530601 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.565223 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/app.php
[Thu Jul 30 10:00:45.565270 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.601677 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/application.php
[Thu Jul 30 10:00:45.601725 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.664123 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/clown.php
[Thu Jul 30 10:00:45.664176 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.675418 2026] [authz_core:error] [pid 2653837:tid 2653837] [client 51.120.70.186:41255] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/pomo/error_log
[Thu Jul 30 10:00:45.698477 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/byp403.php
[Thu Jul 30 10:00:45.698519 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.732624 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/green.php
[Thu Jul 30 10:00:45.732668 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.813428 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/fm.php
[Thu Jul 30 10:00:45.813477 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.872296 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/uploads.php
[Thu Jul 30 10:00:45.872338 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.907043 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/uploader.php
[Thu Jul 30 10:00:45.907103 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:45.988519 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/remote.php
[Thu Jul 30 10:00:45.988565 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.036471 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/shellbypass.php
[Thu Jul 30 10:00:46.036523 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.071322 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/backup.php
[Thu Jul 30 10:00:46.071366 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.129338 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/pwnd.php
[Thu Jul 30 10:00:46.129379 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.164409 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/root.php
[Thu Jul 30 10:00:46.164452 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.199092 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/rootshell.php
[Thu Jul 30 10:00:46.199135 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.233996 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/yuuki.php
[Thu Jul 30 10:00:46.234043 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.278657 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/register.php
[Thu Jul 30 10:00:46.278707 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.321868 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/developer.php
[Thu Jul 30 10:00:46.321913 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.356225 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/dev.php
[Thu Jul 30 10:00:46.356270 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.439649 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/devil.php
[Thu Jul 30 10:00:46.439701 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.518623 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/zero.php
[Thu Jul 30 10:00:46.518669 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.553826 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/byte.php
[Thu Jul 30 10:00:46.553872 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.588052 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/+.php
[Thu Jul 30 10:00:46.588108 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.645077 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/ucenhaxor.php
[Thu Jul 30 10:00:46.645131 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.645825 2026] [core:error] [pid 2637691:tid 2637691] (13)Permission denied: [client 216.73.216.199:6664] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/uartclk
[Thu Jul 30 10:00:46.680143 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/radio.php
[Thu Jul 30 10:00:46.680184 2026] [access_compat:error] [pid 2651607:tid 2651607] [client 20.240.254.167:57635] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.762169 2026] [authz_core:error] [pid 2653912:tid 2653912] [client 74.248.33.8:51923] AH01630: client denied by server configuration: /home/horusw/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 10:00:46.780167 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/coba.php
[Thu Jul 30 10:00:46.780225 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.817113 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/replace.php
[Thu Jul 30 10:00:46.817159 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.861946 2026] [authz_core:error] [pid 2648825:tid 2648825] [client 66.249.66.33:64965] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:00:46.864628 2026] [authz_core:error] [pid 2648825:tid 2648825] [client 66.249.66.33:64965] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:00:46.895525 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/echo.php
[Thu Jul 30 10:00:46.895574 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:46.930335 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/haxor.php
[Thu Jul 30 10:00:46.930382 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.009482 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/sym.php
[Thu Jul 30 10:00:47.009528 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.043740 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/symlink.php
[Thu Jul 30 10:00:47.043787 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.177165 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/sym403.php
[Thu Jul 30 10:00:47.177226 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.212536 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/fw.php
[Thu Jul 30 10:00:47.212585 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.246782 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/xyz.php
[Thu Jul 30 10:00:47.246823 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.281017 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/tolol.php
[Thu Jul 30 10:00:47.281078 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.316053 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/anjing.php
[Thu Jul 30 10:00:47.316111 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.350294 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/memek.php
[Thu Jul 30 10:00:47.350354 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.385024 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/jancok.php
[Thu Jul 30 10:00:47.385087 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.419355 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/goblok.php
[Thu Jul 30 10:00:47.419407 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.453774 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wso1.php
[Thu Jul 30 10:00:47.453826 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.487912 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:00:47.487958 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.522491 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wso.php
[Thu Jul 30 10:00:47.522543 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.556727 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/fox.php
[Thu Jul 30 10:00:47.556770 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.590774 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/CNsAwv8e6ui.php
[Thu Jul 30 10:00:47.590821 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.637847 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/mass.php
[Thu Jul 30 10:00:47.637892 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.643800 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:64420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:47.643821 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:47.699624 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:64436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:47.699650 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:47.713416 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/digi.php
[Thu Jul 30 10:00:47.713456 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.750923 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/indoxploit.php
[Thu Jul 30 10:00:47.750968 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.785152 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/tesla.php
[Thu Jul 30 10:00:47.785197 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.828499 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/alfates.php
[Thu Jul 30 10:00:47.828543 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.862717 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/themes.php
[Thu Jul 30 10:00:47.862764 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.896747 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/update.php
[Thu Jul 30 10:00:47.896792 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.937095 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/upgrade.php
[Thu Jul 30 10:00:47.937141 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:47.977016 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/ajax.php
[Thu Jul 30 10:00:47.977081 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.007838 2026] [core:error] [pid 2654941:tid 2654941] [client 66.249.64.170:57343] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:48.007866 2026] [core:error] [pid 2654941:tid 2654941] [client 66.249.64.170:57343] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:48.018983 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-mail.php
[Thu Jul 30 10:00:48.019024 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.087868 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/dashboard.php
[Thu Jul 30 10:00:48.087913 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.122929 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/misc.php
[Thu Jul 30 10:00:48.122978 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.162217 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/class-IXR.php
[Thu Jul 30 10:00:48.162259 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.196286 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/plugin.php
[Thu Jul 30 10:00:48.196332 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.232387 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/revision.php
[Thu Jul 30 10:00:48.232431 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.256722 2026] [core:error] [pid 2650048:tid 2650048] [client 52.238.199.152:20105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:48.256765 2026] [core:error] [pid 2650048:tid 2650048] [client 52.238.199.152:20105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:48.271951 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/screen.php
[Thu Jul 30 10:00:48.271994 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.306494 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/atomlib.php
[Thu Jul 30 10:00:48.306540 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.389097 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/class-wp.php
[Thu Jul 30 10:00:48.389142 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.423737 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/date.php
[Thu Jul 30 10:00:48.423784 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.458195 2026] [ssl:error] [pid 2653813:tid 2653813] (70014)End of file found: [client 216.73.216.199:22996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:48.459499 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/deprecated.php
[Thu Jul 30 10:00:48.459536 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.494359 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/feed-atom.php
[Thu Jul 30 10:00:48.494410 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.528507 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/feed.php
[Thu Jul 30 10:00:48.528548 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.562636 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/defense.php
[Thu Jul 30 10:00:48.562681 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.596712 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/defend.php
[Thu Jul 30 10:00:48.596757 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.631015 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/load.php
[Thu Jul 30 10:00:48.631056 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.665025 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/options.php
[Thu Jul 30 10:00:48.665086 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.699415 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/option.php
[Thu Jul 30 10:00:48.699462 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.733527 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/query.php
[Thu Jul 30 10:00:48.733572 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.759603 2026] [ssl:error] [pid 2637691:tid 2637691] (70014)End of file found: [client 216.73.216.199:6664] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:48.768519 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/post.php
[Thu Jul 30 10:00:48.768560 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.817513 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/sessions.php
[Thu Jul 30 10:00:48.817558 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.859282 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/rss.php
[Thu Jul 30 10:00:48.859326 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.895273 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/sitemaps.php
[Thu Jul 30 10:00:48.895320 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:48.939164 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/template.php
[Thu Jul 30 10:00:48.939205 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.005089 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/vars.php
[Thu Jul 30 10:00:49.005137 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.057469 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/version.php
[Thu Jul 30 10:00:49.057508 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.061126 2026] [lsapi:warn] [pid 2655135:tid 2655135] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:00:49.143962 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/user.php
[Thu Jul 30 10:00:49.144007 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.214506 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/widgets.php
[Thu Jul 30 10:00:49.214552 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.249167 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/theme.php
[Thu Jul 30 10:00:49.249216 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.285201 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/category.php
[Thu Jul 30 10:00:49.285248 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.323619 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/block.php
[Thu Jul 30 10:00:49.323678 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.362410 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/admin-bar.php
[Thu Jul 30 10:00:49.362464 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.407609 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/mar.php
[Thu Jul 30 10:00:49.407667 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.449545 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/revisi.php
[Thu Jul 30 10:00:49.449609 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.487399 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-activate.php
[Thu Jul 30 10:00:49.487445 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.522719 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/xmrlpc.php
[Thu Jul 30 10:00:49.522767 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.557634 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-settings.php
[Thu Jul 30 10:00:49.557681 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.561553 2026] [ssl:error] [pid 2650048:tid 2650048] (70014)End of file found: [client 216.73.216.199:40493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:49.591858 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/kon.php
[Thu Jul 30 10:00:49.591905 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.626194 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/kontol.php
[Thu Jul 30 10:00:49.626242 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.687438 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 10:00:49.687493 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.722025 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/readme.php
[Thu Jul 30 10:00:49.722083 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.765312 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/error_log.php
[Thu Jul 30 10:00:49.765355 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.806547 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin.php
[Thu Jul 30 10:00:49.806609 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.842612 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-login.php
[Thu Jul 30 10:00:49.842663 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.887913 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/administrator.php
[Thu Jul 30 10:00:49.887960 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.922230 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 10:00:49.922280 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.956600 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes.php
[Thu Jul 30 10:00:49.956647 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:49.991259 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content.php
[Thu Jul 30 10:00:49.991302 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.043171 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:44659] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:50.043201 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:44659] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:50.073307 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/index.php
[Thu Jul 30 10:00:50.073351 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.123924 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/bypp.php
[Thu Jul 30 10:00:50.123969 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.158141 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/byp7.php
[Thu Jul 30 10:00:50.158188 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.193431 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/anonsec.php
[Thu Jul 30 10:00:50.193479 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.255697 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/anon.php
[Thu Jul 30 10:00:50.255744 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.296638 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/bypas.php
[Thu Jul 30 10:00:50.296689 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.334671 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/ucen.php
[Thu Jul 30 10:00:50.334729 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.377057 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/miya.php
[Thu Jul 30 10:00:50.377135 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.411694 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/error.php
[Thu Jul 30 10:00:50.411760 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.446459 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/alfav.php
[Thu Jul 30 10:00:50.446518 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.489966 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/alpas.php
[Thu Jul 30 10:00:50.490021 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.524401 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa.php
[Thu Jul 30 10:00:50.524464 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.559014 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/0byte.php
[Thu Jul 30 10:00:50.559088 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.618008 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/index3.php
[Thu Jul 30 10:00:50.618080 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.652744 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/index2.php
[Thu Jul 30 10:00:50.652805 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.689002 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/index1.php
[Thu Jul 30 10:00:50.689089 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.729720 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/303.php
[Thu Jul 30 10:00:50.729778 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.753996 2026] [ssl:error] [pid 2651741:tid 2651741] (EAI 2)Name or service not known: [client 144.76.19.72:22032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:50.754025 2026] [ssl:error] [pid 2651741:tid 2651741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:50.765355 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/505.php
[Thu Jul 30 10:00:50.765415 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.785435 2026] [ssl:error] [pid 2651610:tid 2651610] (70014)End of file found: [client 216.73.216.199:54564] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:50.799769 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/500.php
[Thu Jul 30 10:00:50.799828 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.808507 2026] [ssl:error] [pid 2651755:tid 2651755] (EAI 2)Name or service not known: [client 144.76.19.72:22036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:50.808539 2026] [ssl:error] [pid 2651755:tid 2651755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:50.834620 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/77.php
[Thu Jul 30 10:00:50.834681 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.869539 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/76.php
[Thu Jul 30 10:00:50.869607 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.905440 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/74.php
[Thu Jul 30 10:00:50.905487 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.906237 2026] [authz_core:error] [pid 2653915:tid 2653915] [client 82.102.18.190:34990] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/theme-compat/error_log
[Thu Jul 30 10:00:50.912708 2026] [core:error] [pid 2653302:tid 2653302] [client 66.249.66.67:61777] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:50.912727 2026] [core:error] [pid 2653302:tid 2653302] [client 66.249.66.67:61777] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:50.917358 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:47518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:50.917375 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:47518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:50.939793 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-config.php
[Thu Jul 30 10:00:50.939827 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:50.973765 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/75.php
[Thu Jul 30 10:00:50.973806 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.013615 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/71.php
[Thu Jul 30 10:00:51.013676 2026] [access_compat:error] [pid 2651744:tid 2651744] [client 20.240.254.167:57676] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.107978 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/72.php
[Thu Jul 30 10:00:51.108027 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.122092 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:57036] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/current/php.ini"] [unique_id "amsSwyqCrh0o4antW6s9FwAAABM"]
[Thu Jul 30 10:00:51.122440 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:57036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/current/php.ini"] [unique_id "amsSwyqCrh0o4antW6s9FwAAABM"]
[Thu Jul 30 10:00:51.124955 2026] [authz_core:error] [pid 2653915:tid 2653915] [client 82.102.18.190:34990] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/widgets/error_log
[Thu Jul 30 10:00:51.144946 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/70.php
[Thu Jul 30 10:00:51.144987 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.214464 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/69.php
[Thu Jul 30 10:00:51.214514 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.251170 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/68.php
[Thu Jul 30 10:00:51.251219 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.286605 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/66.php
[Thu Jul 30 10:00:51.286656 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.315829 2026] [authz_core:error] [pid 2651755:tid 2651755] [client 66.249.66.33:56423] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:00:51.318474 2026] [authz_core:error] [pid 2651755:tid 2651755] [client 66.249.66.33:56423] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:00:51.325519 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/67.php
[Thu Jul 30 10:00:51.325558 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.341653 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:57036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSwyqCrh0o4antW6s9FwAAABM"]
[Thu Jul 30 10:00:51.367252 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/65.php
[Thu Jul 30 10:00:51.367299 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.410529 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/64.php
[Thu Jul 30 10:00:51.410578 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.444797 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/63.php
[Thu Jul 30 10:00:51.444857 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.499079 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/62.php
[Thu Jul 30 10:00:51.499127 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.533433 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/61.php
[Thu Jul 30 10:00:51.533478 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.567934 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/60.php
[Thu Jul 30 10:00:51.567979 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.592552 2026] [ssl:error] [pid 2641792:tid 2641792] (70014)End of file found: [client 216.73.216.199:4182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:51.606208 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/58.php
[Thu Jul 30 10:00:51.606252 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.647090 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/59.php
[Thu Jul 30 10:00:51.647143 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.726061 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/57.php
[Thu Jul 30 10:00:51.726125 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.768421 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/55.php
[Thu Jul 30 10:00:51.768469 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.802776 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/54.php
[Thu Jul 30 10:00:51.802828 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.866482 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/53.php
[Thu Jul 30 10:00:51.866526 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.901160 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/52.php
[Thu Jul 30 10:00:51.901222 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:51.935990 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/51.php
[Thu Jul 30 10:00:51.936037 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.001372 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/50.php
[Thu Jul 30 10:00:52.001419 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.057463 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/49.php
[Thu Jul 30 10:00:52.057506 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.092533 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/48.php
[Thu Jul 30 10:00:52.092575 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.127086 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/47.php
[Thu Jul 30 10:00:52.127131 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.161463 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/46.php
[Thu Jul 30 10:00:52.161507 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.205543 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/44.php
[Thu Jul 30 10:00:52.205601 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.241125 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/43.php
[Thu Jul 30 10:00:52.241170 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.264986 2026] [security2:error] [pid 2651744:tid 2651744] [client 85.208.96.195:31918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amsSxODqQN_GEwmvH4ZtpAAAACY"]
[Thu Jul 30 10:00:52.275244 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/42.php
[Thu Jul 30 10:00:52.275287 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.317333 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/41.php
[Thu Jul 30 10:00:52.317381 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.334569 2026] [core:error] [pid 2654941:tid 2654941] [client 52.238.199.152:20148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:52.334606 2026] [core:error] [pid 2654941:tid 2654941] [client 52.238.199.152:20148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:52.351654 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/40.php
[Thu Jul 30 10:00:52.351696 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.386191 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/39.php
[Thu Jul 30 10:00:52.386240 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.450811 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/38.php
[Thu Jul 30 10:00:52.450860 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.487654 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/37.php
[Thu Jul 30 10:00:52.487704 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.595637 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/36.php
[Thu Jul 30 10:00:52.595690 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.597169 2026] [ssl:error] [pid 2651741:tid 2651741] (70014)End of file found: [client 216.73.216.199:59652] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:52.681715 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/35.php
[Thu Jul 30 10:00:52.681764 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.727192 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/34.php
[Thu Jul 30 10:00:52.727246 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.781579 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/33.php
[Thu Jul 30 10:00:52.781653 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.797228 2026] [security2:error] [pid 2631105:tid 2631105] [client 85.208.96.208:31170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/pages/posts/playtesting-credits22.php"] [unique_id "amsSxJtzJL7EKNhgR0i8DgAAADU"]
[Thu Jul 30 10:00:52.816140 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/25.php
[Thu Jul 30 10:00:52.816186 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.854488 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/24.php
[Thu Jul 30 10:00:52.854535 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.889507 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/15.php
[Thu Jul 30 10:00:52.889553 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.924505 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/123456.php
[Thu Jul 30 10:00:52.924548 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:52.985709 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/12345.php
[Thu Jul 30 10:00:52.985752 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.020039 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/1234.php
[Thu Jul 30 10:00:53.020098 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.096833 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/10.php
[Thu Jul 30 10:00:53.096883 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.131506 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/9.php
[Thu Jul 30 10:00:53.131553 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.166170 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 10:00:53.166233 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.210027 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 10:00:53.210092 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.261117 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/6.php
[Thu Jul 30 10:00:53.261165 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.295632 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/5.php
[Thu Jul 30 10:00:53.295675 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.314916 2026] [core:error] [pid 2651744:tid 2651744] [client 52.238.199.152:19513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:53.314943 2026] [core:error] [pid 2651744:tid 2651744] [client 52.238.199.152:19513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:53.334105 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/4.php
[Thu Jul 30 10:00:53.334151 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.370739 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/3.php
[Thu Jul 30 10:00:53.370790 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.431231 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/2.php
[Thu Jul 30 10:00:53.431280 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.465795 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 10:00:53.465843 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.500326 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/0.php
[Thu Jul 30 10:00:53.500373 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.534601 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/z.php
[Thu Jul 30 10:00:53.534663 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.568907 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/y.php
[Thu Jul 30 10:00:53.568948 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.603357 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 10:00:53.603402 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.637828 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 10:00:53.637877 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.696814 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/v.php
[Thu Jul 30 10:00:53.696859 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.731127 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/u.php
[Thu Jul 30 10:00:53.731176 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.766139 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/s.php
[Thu Jul 30 10:00:53.766191 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.809647 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/t.php
[Thu Jul 30 10:00:53.809696 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.864507 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/r.php
[Thu Jul 30 10:00:53.864552 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.864941 2026] [ssl:error] [pid 2651609:tid 2651609] (EAI 2)Name or service not known: [client 144.76.19.72:22046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:53.864962 2026] [ssl:error] [pid 2651609:tid 2651609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:53.899504 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/q.php
[Thu Jul 30 10:00:53.899546 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.917761 2026] [ssl:error] [pid 2631105:tid 2631105] (EAI 2)Name or service not known: [client 144.76.19.72:22048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:53.917804 2026] [ssl:error] [pid 2631105:tid 2631105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:53.940624 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/p.php
[Thu Jul 30 10:00:53.940688 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:53.975156 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/n.php
[Thu Jul 30 10:00:53.975214 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.009936 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/o.php
[Thu Jul 30 10:00:54.009988 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.044691 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/m.php
[Thu Jul 30 10:00:54.044749 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.079196 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/l.php
[Thu Jul 30 10:00:54.079260 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.084399 2026] [core:error] [pid 2648825:tid 2648825] [client 52.238.199.152:44623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:54.084424 2026] [core:error] [pid 2648825:tid 2648825] [client 52.238.199.152:44623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:54.113817 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 10:00:54.113871 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.151616 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/j.php
[Thu Jul 30 10:00:54.151672 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.211771 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/i.php
[Thu Jul 30 10:00:54.211832 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.246306 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/h.php
[Thu Jul 30 10:00:54.246380 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.300334 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/g.php
[Thu Jul 30 10:00:54.300401 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.339527 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/f.php
[Thu Jul 30 10:00:54.339585 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.378666 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/e.php
[Thu Jul 30 10:00:54.378725 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.413304 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/d.php
[Thu Jul 30 10:00:54.413365 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.452019 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/c.php
[Thu Jul 30 10:00:54.452106 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.486773 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/b.php
[Thu Jul 30 10:00:54.486829 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.522097 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/indexc.php
[Thu Jul 30 10:00:54.522152 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.533891 2026] [authz_core:error] [pid 2651609:tid 2651609] [client 57.141.0.47:36264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:00:54.534519 2026] [authz_core:error] [pid 2651609:tid 2651609] [client 57.141.0.47:36264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:00:54.560561 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/147w3sdtB9D.php
[Thu Jul 30 10:00:54.560620 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.595924 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/12htKbyVOUv.php
[Thu Jul 30 10:00:54.595973 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.638394 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/0PeeTQW2sZ.php
[Thu Jul 30 10:00:54.638438 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.674505 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/.561988674612251.php
[Thu Jul 30 10:00:54.674553 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.709539 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/indexw.php
[Thu Jul 30 10:00:54.709601 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.744146 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/.284214373991941.php
[Thu Jul 30 10:00:54.744191 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.811518 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/.109753674214724.php
[Thu Jul 30 10:00:54.811566 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.845982 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/kjihe.php
[Thu Jul 30 10:00:54.846026 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.866994 2026] [core:error] [pid 2641791:tid 2641791] [client 52.238.199.152:19461] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:54.867019 2026] [core:error] [pid 2641791:tid 2641791] [client 52.238.199.152:19461] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:54.880499 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/Uploading.php
[Thu Jul 30 10:00:54.880541 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:54.909039 2026] [security2:error] [pid 2653813:tid 2653813] [client 185.177.72.10:13658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/custom/.env"] [unique_id "amsSxlHOfcRU_68LxnlKvgAAAAE"]
[Thu Jul 30 10:00:54.909259 2026] [security2:error] [pid 2653813:tid 2653813] [client 185.177.72.10:13658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/custom/.env"] [unique_id "amsSxlHOfcRU_68LxnlKvgAAAAE"]
[Thu Jul 30 10:00:54.933154 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/ip.php
[Thu Jul 30 10:00:54.933200 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.008876 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/__1975.php
[Thu Jul 30 10:00:55.008920 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.021915 2026] [security2:error] [pid 2651609:tid 2651609] [client 185.191.171.13:24858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8831.0.html"] [unique_id "amsSx3wjqb36bSo_KiGVHwAAAAw"]
[Thu Jul 30 10:00:55.047970 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/gaya.php
[Thu Jul 30 10:00:55.048023 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.055141 2026] [security2:error] [pid 2653813:tid 2653813] [client 185.177.72.10:13658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSxlHOfcRU_68LxnlKvgAAAAE"]
[Thu Jul 30 10:00:55.086359 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/jal.php
[Thu Jul 30 10:00:55.086402 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.120788 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/pfa.php
[Thu Jul 30 10:00:55.120831 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.155148 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/advanced-cf7-db.php
[Thu Jul 30 10:00:55.155193 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.190671 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/Astagaaaaa.php
[Thu Jul 30 10:00:55.190720 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.244580 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-user.php
[Thu Jul 30 10:00:55.244635 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.279174 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/theme-insnhpf.php
[Thu Jul 30 10:00:55.279220 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.330816 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:13670] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /customer/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/customer/.git/config"] [unique_id "amsSxwNdLgvGIHel4alYuAAAADo"]
[Thu Jul 30 10:00:55.331004 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:13670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/customer/.git/config"] [unique_id "amsSxwNdLgvGIHel4alYuAAAADo"]
[Thu Jul 30 10:00:55.355938 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/process_login.php
[Thu Jul 30 10:00:55.355989 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.392684 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/liverpool-health.php
[Thu Jul 30 10:00:55.392732 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.471907 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/.012263646060568.php
[Thu Jul 30 10:00:55.471954 2026] [access_compat:error] [pid 2655135:tid 2655135] [client 20.240.254.167:57692] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.547352 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/jmbt.php
[Thu Jul 30 10:00:55.547412 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.561730 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:13670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSxwNdLgvGIHel4alYuAAAADo"]
[Thu Jul 30 10:00:55.581484 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/maho.php
[Thu Jul 30 10:00:55.581527 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.615957 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/mia.php
[Thu Jul 30 10:00:55.616004 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.650107 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/qwe.php
[Thu Jul 30 10:00:55.650159 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.684640 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/shell_finder.php
[Thu Jul 30 10:00:55.684693 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.728528 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/cfinder.php
[Thu Jul 30 10:00:55.728575 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.798530 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/pasired.php
[Thu Jul 30 10:00:55.798578 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.834849 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/adm.php
[Thu Jul 30 10:00:55.834895 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.872632 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/noob.php
[Thu Jul 30 10:00:55.872683 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.906698 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/..php
[Thu Jul 30 10:00:55.906758 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:55.941230 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/Lol.php
[Thu Jul 30 10:00:55.941273 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.020644 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/b2.php
[Thu Jul 30 10:00:56.020698 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.054535 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/ex.php
[Thu Jul 30 10:00:56.054582 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.088907 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/dhanush.php
[Thu Jul 30 10:00:56.088956 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.161782 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/asw.php
[Thu Jul 30 10:00:56.161830 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.248373 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/mini.php5
[Thu Jul 30 10:00:56.248421 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.280238 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:20147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:56.280268 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:20147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:56.282365 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/ler.php
[Thu Jul 30 10:00:56.282406 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.354304 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/def.php
[Thu Jul 30 10:00:56.354354 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.389111 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/extremecrw.php
[Thu Jul 30 10:00:56.389173 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.424477 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/indx.php
[Thu Jul 30 10:00:56.424522 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.458544 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/bv7binary.php
[Thu Jul 30 10:00:56.458599 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.493465 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/webroot.php
[Thu Jul 30 10:00:56.493513 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.527573 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/h4cker.php
[Thu Jul 30 10:00:56.527634 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.578566 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:13692] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amsSyDeUUh8HPzZW5ohFowAAACA"]
[Thu Jul 30 10:00:56.578971 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:13692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/customer/App_Config/ConnectionStrings.config"] [unique_id "amsSyDeUUh8HPzZW5ohFowAAACA"]
[Thu Jul 30 10:00:56.612881 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/gazashell.php
[Thu Jul 30 10:00:56.612927 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.651787 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/syrianshell.php
[Thu Jul 30 10:00:56.651841 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.686026 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/locus7shell.php
[Thu Jul 30 10:00:56.686079 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.718467 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:13692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSyDeUUh8HPzZW5ohFowAAACA"]
[Thu Jul 30 10:00:56.720619 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/cyberwarrior.php
[Thu Jul 30 10:00:56.720661 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.751439 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:13694] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/customer/api-config.ini"] [unique_id "amsSyFoNhnDns3iJW-XSoAAAAB8"]
[Thu Jul 30 10:00:56.751827 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:13694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/customer/api-config.ini"] [unique_id "amsSyFoNhnDns3iJW-XSoAAAAB8"]
[Thu Jul 30 10:00:56.754625 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/ernebypass.php
[Thu Jul 30 10:00:56.754664 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.801492 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/g6shell.php
[Thu Jul 30 10:00:56.801536 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.842531 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/pouyaserver.php
[Thu Jul 30 10:00:56.842583 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.876420 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/saudishell.php
[Thu Jul 30 10:00:56.876464 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.914215 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/sosyeteshell.php
[Thu Jul 30 10:00:56.914260 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.948449 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/tryagshell.php
[Thu Jul 30 10:00:56.948493 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:56.975303 2026] [ssl:error] [pid 2651752:tid 2651752] (EAI 2)Name or service not known: [client 144.76.19.72:22060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:56.975333 2026] [ssl:error] [pid 2651752:tid 2651752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:56.982578 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/uploadshell.php
[Thu Jul 30 10:00:56.982637 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.003916 2026] [core:error] [pid 2640698:tid 2640698] [client 52.238.199.152:20136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:57.003943 2026] [core:error] [pid 2640698:tid 2640698] [client 52.238.199.152:20136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:57.019882 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/zehir4shell.php
[Thu Jul 30 10:00:57.019928 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.032878 2026] [ssl:error] [pid 2651673:tid 2651673] (EAI 2)Name or service not known: [client 144.76.19.72:22068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:00:57.032915 2026] [ssl:error] [pid 2651673:tid 2651673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:00:57.054256 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/lostdcshell.php
[Thu Jul 30 10:00:57.054300 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.088224 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/commandshell.php
[Thu Jul 30 10:00:57.088270 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.103386 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:13694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSyFoNhnDns3iJW-XSoAAAAB8"]
[Thu Jul 30 10:00:57.122947 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/mailershell.php
[Thu Jul 30 10:00:57.122990 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.157464 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/cwshell.php
[Thu Jul 30 10:00:57.157506 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.191512 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/iranshell.php
[Thu Jul 30 10:00:57.191557 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.225503 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/indishell.php
[Thu Jul 30 10:00:57.225547 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.259924 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/zehirshell.php
[Thu Jul 30 10:00:57.259967 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.293869 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/g6sshell.php
[Thu Jul 30 10:00:57.293913 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.327706 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/sqlshell.php
[Thu Jul 30 10:00:57.327752 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.376045 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/simshell.php
[Thu Jul 30 10:00:57.376100 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.410163 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/k2ll33d.php
[Thu Jul 30 10:00:57.410207 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.450538 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/b1n4ry.php
[Thu Jul 30 10:00:57.450583 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.484506 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/default.php
[Thu Jul 30 10:00:57.484549 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.515321 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:13718] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/customer/laravel.log"] [unique_id "amsSyf4oyjAu1rtt0oL-iwAAAA0"]
[Thu Jul 30 10:00:57.515752 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:13718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/customer/laravel.log"] [unique_id "amsSyf4oyjAu1rtt0oL-iwAAAA0"]
[Thu Jul 30 10:00:57.528092 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/blank.php
[Thu Jul 30 10:00:57.528139 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.565295 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/admin-demo
[Thu Jul 30 10:00:57.599779 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/var
[Thu Jul 30 10:00:57.654652 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:13718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSyf4oyjAu1rtt0oL-iwAAAA0"]
[Thu Jul 30 10:00:57.660625 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-login.php
[Thu Jul 30 10:00:57.660670 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.694619 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/01.php
[Thu Jul 30 10:00:57.694662 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.728790 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/xs.php
[Thu Jul 30 10:00:57.728834 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.763115 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/data.php
[Thu Jul 30 10:00:57.763162 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.773548 2026] [core:error] [pid 2650048:tid 2650048] (13)Permission denied: [client 216.73.216.199:44770] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_dqtrx/alloc_calls
[Thu Jul 30 10:00:57.797872 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/dph.php
[Thu Jul 30 10:00:57.797918 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.832085 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/todo.php
[Thu Jul 30 10:00:57.832134 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.866942 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/shoop.php
[Thu Jul 30 10:00:57.866988 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.903474 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/wsa.php
[Thu Jul 30 10:00:57.903517 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:57.937632 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/22625814acb09634e45d67c98c55a6a2f6e2532c_0.file.painel.html.php
[Thu Jul 30 10:00:57.937678 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.006560 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/m4m4nkmud4.php
[Thu Jul 30 10:00:58.006624 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.041618 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-go.php
[Thu Jul 30 10:00:58.041677 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.075933 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/red404.php
[Thu Jul 30 10:00:58.075993 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.121257 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/kdoor.php
[Thu Jul 30 10:00:58.121319 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.157791 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/years.php
[Thu Jul 30 10:00:58.157845 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.189902 2026] [ssl:error] [pid 2650048:tid 2650048] (70014)End of file found: [client 216.73.216.199:44770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:58.193172 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/galekjaya.php
[Thu Jul 30 10:00:58.193226 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.245091 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:13760] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/customer/web.config"] [unique_id "amsSyv4oyjAu1rtt0oL-jAAAAA0"]
[Thu Jul 30 10:00:58.245308 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:13760] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /customer/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/customer/web.config"] [unique_id "amsSyv4oyjAu1rtt0oL-jAAAAA0"]
[Thu Jul 30 10:00:58.245494 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:13760] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/customer/web.config"] [unique_id "amsSyv4oyjAu1rtt0oL-jAAAAA0"]
[Thu Jul 30 10:00:58.260718 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:58.294982 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:00:58.330123 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/turkiye.php
[Thu Jul 30 10:00:58.330181 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.397172 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/max.php
[Thu Jul 30 10:00:58.397226 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.407351 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:13760] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSyv4oyjAu1rtt0oL-jAAAAA0"]
[Thu Jul 30 10:00:58.432406 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/you.php
[Thu Jul 30 10:00:58.432462 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.444142 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:13770] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/d/.env"] [unique_id "amsSymgaDFrAz0TuNXQ43AAAABs"]
[Thu Jul 30 10:00:58.444319 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:13770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/d/.env"] [unique_id "amsSymgaDFrAz0TuNXQ43AAAABs"]
[Thu Jul 30 10:00:58.466645 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 10:00:58.466704 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.502342 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/ap.php
[Thu Jul 30 10:00:58.502402 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.536838 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/000000.php
[Thu Jul 30 10:00:58.536895 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.571373 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/mosok.php
[Thu Jul 30 10:00:58.571439 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.584351 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:13770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSymgaDFrAz0TuNXQ43AAAABs"]
[Thu Jul 30 10:00:58.605992 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/kamu.php
[Thu Jul 30 10:00:58.606058 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.622426 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:13784] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/.env"] [unique_id "amsSytHOC4vvbRc8Hei6nwAAABg"]
[Thu Jul 30 10:00:58.622674 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:13784] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/.env"] [unique_id "amsSytHOC4vvbRc8Hei6nwAAABg"]
[Thu Jul 30 10:00:58.656271 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/inject.php
[Thu Jul 30 10:00:58.656327 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.674904 2026] [ssl:error] [pid 2651555:tid 2651555] (70014)End of file found: [client 216.73.216.199:27890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:58.693101 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/shell.asp
[Thu Jul 30 10:00:58.727325 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/iya.php
[Thu Jul 30 10:00:58.727379 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.761630 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/sj.php
[Thu Jul 30 10:00:58.761687 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.762400 2026] [security2:error] [pid 2641791:tid 2641791] [client 185.177.72.10:13784] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSytHOC4vvbRc8Hei6nwAAABg"]
[Thu Jul 30 10:00:58.828804 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/gca.php
[Thu Jul 30 10:00:58.828860 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.863114 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/koe.php
[Thu Jul 30 10:00:58.863176 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.903681 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/konten.php
[Thu Jul 30 10:00:58.903742 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.972194 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:44613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:58.972219 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:44613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:00:58.976839 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:13806] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dashboard/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/.git/config"] [unique_id "amsSyjeUUh8HPzZW5ohFpQAAACA"]
[Thu Jul 30 10:00:58.976970 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:13806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/.git/config"] [unique_id "amsSyjeUUh8HPzZW5ohFpQAAACA"]
[Thu Jul 30 10:00:58.987449 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/bekdur.php
[Thu Jul 30 10:00:58.987487 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:58.987739 2026] [ssl:error] [pid 2653302:tid 2653302] (70014)End of file found: [client 216.73.216.199:5041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:00:59.054470 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/webadmin.php
[Thu Jul 30 10:00:59.054518 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.111739 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/r57.php
[Thu Jul 30 10:00:59.111785 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.116308 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:13806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSyjeUUh8HPzZW5ohFpQAAACA"]
[Thu Jul 30 10:00:59.151304 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/c99.php
[Thu Jul 30 10:00:59.151344 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.190409 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 10:00:59.190459 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.238461 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/arab.php
[Thu Jul 30 10:00:59.238503 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.289414 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/bd.php
[Thu Jul 30 10:00:59.289462 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.377700 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/komet.php
[Thu Jul 30 10:00:59.377750 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.411902 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/1337.php
[Thu Jul 30 10:00:59.411950 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.462358 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/backd00r.php
[Thu Jul 30 10:00:59.462403 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.496684 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/backdoor.php
[Thu Jul 30 10:00:59.496728 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.530682 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/andela.php
[Thu Jul 30 10:00:59.530730 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.565155 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/jkt48.php
[Thu Jul 30 10:00:59.565200 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.599169 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/gaza.php
[Thu Jul 30 10:00:59.599210 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.633158 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/injection.php
[Thu Jul 30 10:00:59.633200 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.677520 2026] [lsapi:warn] [pid 2641791:tid 2641791] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:00:59.696338 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/bejak.php
[Thu Jul 30 10:00:59.696382 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.730407 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/idca_shell.php
[Thu Jul 30 10:00:59.730455 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.744157 2026] [authz_core:error] [pid 2641792:tid 2641792] [client 51.120.70.186:14718] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/IXR/error_log
[Thu Jul 30 10:00:59.803479 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/idca.php
[Thu Jul 30 10:00:59.803524 2026] [access_compat:error] [pid 2653473:tid 2653473] [client 20.240.254.167:57681] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.896918 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/indoxploit_shell.php
[Thu Jul 30 10:00:59.896967 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.939560 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/sbh.php
[Thu Jul 30 10:00:59.939617 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:00:59.973762 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/bh.php
[Thu Jul 30 10:00:59.973809 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.015000 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/sh3ll.php
[Thu Jul 30 10:01:00.015049 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.077126 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:13848] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amsSzLzDi7bAxSTb5kpBMwAAAAI"]
[Thu Jul 30 10:01:00.077494 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:13848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/App_Config/ConnectionStrings.config"] [unique_id "amsSzLzDi7bAxSTb5kpBMwAAAAI"]
[Thu Jul 30 10:01:00.087689 2026] [ssl:error] [pid 2651741:tid 2651741] (EAI 2)Name or service not known: [client 144.76.19.72:53704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:00.087720 2026] [ssl:error] [pid 2651741:tid 2651741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:00.090352 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/shell.php
[Thu Jul 30 10:01:00.090392 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.139665 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/indonesia.php
[Thu Jul 30 10:01:00.139714 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.173796 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/1n73ction.php
[Thu Jul 30 10:01:00.173836 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.208997 2026] [ssl:error] [pid 2653914:tid 2653914] (EAI 2)Name or service not known: [client 144.76.19.72:53710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:00.209031 2026] [ssl:error] [pid 2653914:tid 2653914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:00.235407 2026] [security2:error] [pid 2641371:tid 2641371] [client 185.177.72.10:13848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSzLzDi7bAxSTb5kpBMwAAAAI"]
[Thu Jul 30 10:01:00.269028 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/374k.php
[Thu Jul 30 10:01:00.269082 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.335103 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/cmd.php
[Thu Jul 30 10:01:00.335151 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.370192 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/jkt48_1.php
[Thu Jul 30 10:01:00.370235 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.404377 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/adminer.php
[Thu Jul 30 10:01:00.404426 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.439202 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/rootx.php
[Thu Jul 30 10:01:00.439249 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.485222 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/ls.php
[Thu Jul 30 10:01:00.485262 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.540486 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/sym2019.php
[Thu Jul 30 10:01:00.540823 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.576367 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/cc.php
[Thu Jul 30 10:01:00.576415 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.628619 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/45.php
[Thu Jul 30 10:01:00.628663 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.662572 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/1945.php
[Thu Jul 30 10:01:00.662628 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.696646 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wos.php
[Thu Jul 30 10:01:00.696691 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.739418 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/ty.php
[Thu Jul 30 10:01:00.739468 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.773912 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/1945.php
[Thu Jul 30 10:01:00.773971 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.810892 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wos.php
[Thu Jul 30 10:01:00.810933 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.842750 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:13882] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amsSzFoNhnDns3iJW-XSpAAAAB8"]
[Thu Jul 30 10:01:00.843096 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:13882] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/api-config.ini"] [unique_id "amsSzFoNhnDns3iJW-XSpAAAAB8"]
[Thu Jul 30 10:01:00.874436 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wso-2.5.php
[Thu Jul 30 10:01:00.874479 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.912038 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/ngacir88.php
[Thu Jul 30 10:01:00.912096 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.946518 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/&heker!.php
[Thu Jul 30 10:01:00.946564 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.980613 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/shellv3.php
[Thu Jul 30 10:01:00.980657 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:00.996380 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:13882] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSzFoNhnDns3iJW-XSpAAAAB8"]
[Thu Jul 30 10:01:01.039466 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/UnknownSec.php
[Thu Jul 30 10:01:01.039510 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.081710 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/cilik.php
[Thu Jul 30 10:01:01.081757 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.132999 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/zxcok.php
[Thu Jul 30 10:01:01.133094 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.210713 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-supports.php
[Thu Jul 30 10:01:01.210789 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.246898 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/bkv74.php
[Thu Jul 30 10:01:01.246945 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.281030 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/css
[Thu Jul 30 10:01:01.351996 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/edit-video.php
[Thu Jul 30 10:01:01.352042 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.386195 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/up.php
[Thu Jul 30 10:01:01.386242 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.420588 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/shell.php
[Thu Jul 30 10:01:01.420644 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.454845 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/.dha.php
[Thu Jul 30 10:01:01.454896 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.489510 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/403.php
[Thu Jul 30 10:01:01.489557 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.529062 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/fox.php
[Thu Jul 30 10:01:01.529119 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.563139 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/alfa.php
[Thu Jul 30 10:01:01.563186 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.601504 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/wso.php
[Thu Jul 30 10:01:01.601556 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.636562 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/java.php
[Thu Jul 30 10:01:01.636619 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.670696 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known
[Thu Jul 30 10:01:01.726131 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:01.760312 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/js
[Thu Jul 30 10:01:01.794957 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:01.833132 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:01.882704 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:01.931693 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/f0x.php
[Thu Jul 30 10:01:01.931742 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:01.994541 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:01:02.029659 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:01:02.133050 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:02.183128 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:02.219828 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:02.254348 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:02.297791 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wordpress
[Thu Jul 30 10:01:02.332836 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:02.366818 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:02.401044 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/bypass.php
[Thu Jul 30 10:01:02.401100 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.435043 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/w50.php
[Thu Jul 30 10:01:02.435101 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.469826 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/xccc.php
[Thu Jul 30 10:01:02.469871 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.492622 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:13974] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/laravel.log"] [unique_id "amsSzjdnWhdb5n_RrTLG0QAAADg"]
[Thu Jul 30 10:01:02.492973 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:13974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/laravel.log"] [unique_id "amsSzjdnWhdb5n_RrTLG0QAAADg"]
[Thu Jul 30 10:01:02.503990 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/moon.php
[Thu Jul 30 10:01:02.504031 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.538191 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wkwk.php
[Thu Jul 30 10:01:02.538239 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.595860 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wpvitamins.php
[Thu Jul 30 10:01:02.595907 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.631444 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:13974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsSzjdnWhdb5n_RrTLG0QAAADg"]
[Thu Jul 30 10:01:02.651981 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:02.691565 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/meiwei.php
[Thu Jul 30 10:01:02.691619 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.726848 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/fonts
[Thu Jul 30 10:01:02.761162 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/vendor
[Thu Jul 30 10:01:02.798088 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/css
[Thu Jul 30 10:01:02.843329 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/assets
[Thu Jul 30 10:01:02.877418 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/js
[Thu Jul 30 10:01:02.911759 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:02.945988 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/Xploit.php
[Thu Jul 30 10:01:02.946033 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:02.984099 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wso2.5.1.php
[Thu Jul 30 10:01:02.984142 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.018113 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wibu.php
[Thu Jul 30 10:01:03.018161 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.052570 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/Wop.php
[Thu Jul 30 10:01:03.052624 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.086544 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/pah.php
[Thu Jul 30 10:01:03.086586 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.121617 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/webshell.php
[Thu Jul 30 10:01:03.121663 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.156000 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wso25.php
[Thu Jul 30 10:01:03.156047 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.190400 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wso2022_shell.php
[Thu Jul 30 10:01:03.190448 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.256244 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wpxadmin.php
[Thu Jul 30 10:01:03.256291 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.264550 2026] [ssl:error] [pid 2653872:tid 2653872] (EAI 2)Name or service not known: [client 144.76.19.72:53712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:03.264577 2026] [ssl:error] [pid 2653872:tid 2653872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:03.294702 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wso2.5.php
[Thu Jul 30 10:01:03.294745 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.320282 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:53722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:03.320328 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:03.339712 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-mode.php
[Thu Jul 30 10:01:03.339760 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.392785 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-mailcek.php
[Thu Jul 30 10:01:03.392833 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.426862 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-config-blog.php
[Thu Jul 30 10:01:03.426905 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.465291 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-thumbs.php
[Thu Jul 30 10:01:03.465339 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.499401 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-mobfi.php
[Thu Jul 30 10:01:03.499448 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.568636 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-comments-post.php
[Thu Jul 30 10:01:03.568686 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.603764 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-config-style.php
[Thu Jul 30 10:01:03.603811 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.609106 2026] [core:error] [pid 2651750:tid 2651750] (13)Permission denied: [client 216.73.216.199:46350] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Parse/validate
[Thu Jul 30 10:01:03.637880 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-logo.php
[Thu Jul 30 10:01:03.637925 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.672102 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-config-sample.php
[Thu Jul 30 10:01:03.672147 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.716473 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/blog
[Thu Jul 30 10:01:03.796056 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-optionss.php
[Thu Jul 30 10:01:03.796117 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.832986 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/work.php
[Thu Jul 30 10:01:03.833031 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.867115 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-config-pantheon.php
[Thu Jul 30 10:01:03.867162 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.901219 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-xmlx.php
[Thu Jul 30 10:01:03.901268 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:03.938514 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-room.ph
[Thu Jul 30 10:01:03.972821 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/pwp-.myluv.php
[Thu Jul 30 10:01:03.972875 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.025564 2026] [core:error] [pid 2641791:tid 2641791] [client 52.238.199.152:20191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:04.025588 2026] [core:error] [pid 2641791:tid 2641791] [client 52.238.199.152:20191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:04.034421 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blogs
[Thu Jul 30 10:01:04.081536 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wihp1.php
[Thu Jul 30 10:01:04.081582 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.122265 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 10:01:04.122312 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.171556 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-utchershill.php
[Thu Jul 30 10:01:04.171648 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.206410 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-log.php
[Thu Jul 30 10:01:04.206454 2026] [access_compat:error] [pid 2650050:tid 2650050] [client 20.240.254.167:57652] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.328542 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-god.Php
[Thu Jul 30 10:01:04.328603 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.368011 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/web-setting.php
[Thu Jul 30 10:01:04.368085 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.402329 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-ettoyag.php
[Thu Jul 30 10:01:04.402374 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.448209 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/venom.php
[Thu Jul 30 10:01:04.448254 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.482443 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/veno.ph
[Thu Jul 30 10:01:04.513202 2026] [core:error] [pid 2651750:tid 2651750] (13)Permission denied: [client 216.73.216.199:46350] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Parse/alloc_calls
[Thu Jul 30 10:01:04.528810 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/vuln.php
[Thu Jul 30 10:01:04.528859 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.564482 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/V5.php
[Thu Jul 30 10:01:04.564528 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.602996 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/v5.php
[Thu Jul 30 10:01:04.603047 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.639568 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/Unknown45.php
[Thu Jul 30 10:01:04.639627 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.664917 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:14064] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/web.config"] [unique_id "amsS0DnP5whSPdmixesy-gAAAAY"]
[Thu Jul 30 10:01:04.665162 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:14064] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dashboard/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/web.config"] [unique_id "amsS0DnP5whSPdmixesy-gAAAAY"]
[Thu Jul 30 10:01:04.665336 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:14064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dashboard/web.config"] [unique_id "amsS0DnP5whSPdmixesy-gAAAAY"]
[Thu Jul 30 10:01:04.675226 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/vinus.php
[Thu Jul 30 10:01:04.675272 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.692580 2026] [core:error] [pid 2653837:tid 2653837] [client 52.238.199.152:40072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:04.692619 2026] [core:error] [pid 2653837:tid 2653837] [client 52.238.199.152:40072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:04.714534 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/store.php
[Thu Jul 30 10:01:04.714583 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.748937 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/unzip.php
[Thu Jul 30 10:01:04.748999 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.791509 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/think.php
[Thu Jul 30 10:01:04.791553 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.823302 2026] [security2:error] [pid 2653302:tid 2653302] [client 185.177.72.10:14064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS0DnP5whSPdmixesy-gAAAAY"]
[Thu Jul 30 10:01:04.829881 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/tod.php
[Thu Jul 30 10:01:04.829923 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.869022 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/setor.php
[Thu Jul 30 10:01:04.869078 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.903405 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/thr.php
[Thu Jul 30 10:01:04.903449 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.944528 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/tmv.php
[Thu Jul 30 10:01:04.944573 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:04.978745 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/terminal.php
[Thu Jul 30 10:01:04.978787 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.084003 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/titid.php
[Thu Jul 30 10:01:05.084055 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.114203 2026] [ssl:error] [pid 2651750:tid 2651750] (70014)End of file found: [client 216.73.216.199:46350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:05.120517 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/sllolx.php
[Thu Jul 30 10:01:05.120561 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.186753 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/small.php
[Thu Jul 30 10:01:05.186810 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.233617 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/style-js.php
[Thu Jul 30 10:01:05.233664 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.267985 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/style.php
[Thu Jul 30 10:01:05.268031 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.302407 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/Success.php
[Thu Jul 30 10:01:05.302448 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.342564 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/syad.php
[Thu Jul 30 10:01:05.342619 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.377328 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/success.php
[Thu Jul 30 10:01:05.377395 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.411354 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/swm@asd365.php
[Thu Jul 30 10:01:05.411395 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.417184 2026] [authz_core:error] [pid 2651677:tid 2651677] [client 57.141.0.56:63036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:01:05.417794 2026] [authz_core:error] [pid 2651677:tid 2651677] [client 57.141.0.56:63036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:01:05.462152 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/smtphec.php
[Thu Jul 30 10:01:05.462196 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.497368 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/s_on.php
[Thu Jul 30 10:01:05.497416 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.531625 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/selaras.php
[Thu Jul 30 10:01:05.531671 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.571101 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/ssh.php
[Thu Jul 30 10:01:05.571151 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.618416 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/s4d.php
[Thu Jul 30 10:01:05.618462 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.652721 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/slot.php
[Thu Jul 30 10:01:05.652769 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.699355 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/sad.php
[Thu Jul 30 10:01:05.699403 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.733673 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/sec.php
[Thu Jul 30 10:01:05.733718 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.797921 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/shapes.php
[Thu Jul 30 10:01:05.797966 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.836473 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/sos.php
[Thu Jul 30 10:01:05.836528 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.870252 2026] [security2:error] [pid 2641846:tid 2641846] [client 43.166.242.189:35932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsS0ZoL8w3BzPER_zV9FAAAACQ"]
[Thu Jul 30 10:01:05.874401 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/print.php
[Thu Jul 30 10:01:05.874461 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.910409 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/pdi.php
[Thu Jul 30 10:01:05.910452 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.944716 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/rayzky.php
[Thu Jul 30 10:01:05.944760 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:05.979709 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/repair.php
[Thu Jul 30 10:01:05.979755 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.013835 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/raw.php
[Thu Jul 30 10:01:06.013881 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.050523 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/py.php
[Thu Jul 30 10:01:06.050568 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.106434 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/ray.php
[Thu Jul 30 10:01:06.106479 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.202320 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/Q2-.php
[Thu Jul 30 10:01:06.202369 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.236572 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/python.php
[Thu Jul 30 10:01:06.236639 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.309586 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:27050] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dataset/.env"] [unique_id "amsS0nClVEbRTOXMCakEkgAAACs"]
[Thu Jul 30 10:01:06.309882 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:27050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dataset/.env"] [unique_id "amsS0nClVEbRTOXMCakEkgAAACs"]
[Thu Jul 30 10:01:06.314828 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-pop.php
[Thu Jul 30 10:01:06.314869 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.317925 2026] [ssl:error] [pid 2653837:tid 2653837] (70014)End of file found: [client 216.73.216.199:65014] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:06.363784 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/marjan.php
[Thu Jul 30 10:01:06.363855 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.401734 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/on.php
[Thu Jul 30 10:01:06.401809 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.402915 2026] [ssl:error] [pid 2641792:tid 2641792] (EAI 2)Name or service not known: [client 144.76.19.72:53724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:06.402945 2026] [ssl:error] [pid 2641792:tid 2641792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:06.436542 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/mari.php
[Thu Jul 30 10:01:06.436619 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.463305 2026] [ssl:error] [pid 2653838:tid 2653838] (EAI 2)Name or service not known: [client 144.76.19.72:53738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:06.463338 2026] [ssl:error] [pid 2653838:tid 2653838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:06.470281 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:27050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS0nClVEbRTOXMCakEkgAAACs"]
[Thu Jul 30 10:01:06.473500 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/old-index.php
[Thu Jul 30 10:01:06.473538 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.507198 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:27064] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dataset1/.env"] [unique_id "amsS0jmg8j7OyB4K1U64IAAAAAs"]
[Thu Jul 30 10:01:06.507492 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:27064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dataset1/.env"] [unique_id "amsS0jmg8j7OyB4K1U64IAAAAAs"]
[Thu Jul 30 10:01:06.508392 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/ocgi.php
[Thu Jul 30 10:01:06.508430 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.542561 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/ngocokpeli.php
[Thu Jul 30 10:01:06.542612 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.576968 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/new_license.php
[Thu Jul 30 10:01:06.577019 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.615476 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/miyabajingankoe.php
[Thu Jul 30 10:01:06.615519 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.653278 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:27064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS0jmg8j7OyB4K1U64IAAAAAs"]
[Thu Jul 30 10:01:06.660113 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/done.php
[Thu Jul 30 10:01:06.660156 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.689291 2026] [security2:error] [pid 2653875:tid 2653875] [client 185.177.72.10:27078] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dataset2/.env"] [unique_id "amsS0m7qZPiQJg2d82VnmgAAABI"]
[Thu Jul 30 10:01:06.689485 2026] [security2:error] [pid 2653875:tid 2653875] [client 185.177.72.10:27078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dataset2/.env"] [unique_id "amsS0m7qZPiQJg2d82VnmgAAABI"]
[Thu Jul 30 10:01:06.694304 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/eviltwin.php
[Thu Jul 30 10:01:06.694344 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.729857 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/manage.php
[Thu Jul 30 10:01:06.729900 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.755521 2026] [core:error] [pid 2650048:tid 2650048] [client 66.249.64.170:62583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:06.755548 2026] [core:error] [pid 2650048:tid 2650048] [client 66.249.64.170:62583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:06.819915 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/mforh.php
[Thu Jul 30 10:01:06.819961 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.841147 2026] [security2:error] [pid 2653875:tid 2653875] [client 185.177.72.10:27078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS0m7qZPiQJg2d82VnmgAAABI"]
[Thu Jul 30 10:01:06.859424 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/mek.ph
[Thu Jul 30 10:01:06.904426 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/mygagal.php
[Thu Jul 30 10:01:06.904476 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.938922 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/manda.php
[Thu Jul 30 10:01:06.938968 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:06.973115 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/pmemek.php
[Thu Jul 30 10:01:06.973162 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.009888 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/mmk.php
[Thu Jul 30 10:01:07.009937 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.044108 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/EvilTwin.php
[Thu Jul 30 10:01:07.044152 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.097319 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/da111.php
[Thu Jul 30 10:01:07.097364 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.134310 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/duck php
[Thu Jul 30 10:01:07.179308 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/DA.php
[Thu Jul 30 10:01:07.179357 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.215285 2026] [cgi:error] [pid 2654843:tid 2654843] [client 172.213.17.107:8672] AH02812: stderr from /home/hatchw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:01:07.248780 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/bismilah.php
[Thu Jul 30 10:01:07.248822 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.260906 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:27102] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/debug.inc"] [unique_id "amsS0wNdLgvGIHel4alYwgAAADo"]
[Thu Jul 30 10:01:07.261273 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:27102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/debug.inc"] [unique_id "amsS0wNdLgvGIHel4alYwgAAADo"]
[Thu Jul 30 10:01:07.390498 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/.dha.php
[Thu Jul 30 10:01:07.390545 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.413858 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:27102] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS0wNdLgvGIHel4alYwgAAADo"]
[Thu Jul 30 10:01:07.428465 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cpanel.php
[Thu Jul 30 10:01:07.428506 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.492468 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/devill.php
[Thu Jul 30 10:01:07.492515 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.528438 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/dikne.php
[Thu Jul 30 10:01:07.528488 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.562561 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cPanel.php
[Thu Jul 30 10:01:07.562617 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.596779 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cargo.php
[Thu Jul 30 10:01:07.596822 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.631056 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/col1.php
[Thu Jul 30 10:01:07.631111 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.665419 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/coli.php
[Thu Jul 30 10:01:07.665476 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.699709 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cylul.php
[Thu Jul 30 10:01:07.699752 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.733841 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/Cylul007.php
[Thu Jul 30 10:01:07.733885 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.768164 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-alfa.php
[Thu Jul 30 10:01:07.768210 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.850209 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cok.php
[Thu Jul 30 10:01:07.850254 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.857508 2026] [authz_core:error] [pid 2647985:tid 2647985] [client 57.141.0.62:59814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:01:07.858140 2026] [authz_core:error] [pid 2647985:tid 2647985] [client 57.141.0.62:59814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:01:07.884802 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cgipro.php
[Thu Jul 30 10:01:07.884843 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.936041 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 10:01:07.936105 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:07.975305 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cp.php
[Thu Jul 30 10:01:07.975350 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.009543 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cyto.php
[Thu Jul 30 10:01:08.009587 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.013696 2026] [security2:error] [pid 2637691:tid 2637691] [client 114.119.146.111:26707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~103,30/request_format~html"] [unique_id "amsS1M2-LGO2xP3vg6n5AwAAAEY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~103,30/request_format~html
[Thu Jul 30 10:01:08.060946 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/con7.php
[Thu Jul 30 10:01:08.060990 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.095119 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/locale.php
[Thu Jul 30 10:01:08.095161 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.129081 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/enter.php
[Thu Jul 30 10:01:08.129129 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.163898 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-enter.php
[Thu Jul 30 10:01:08.163939 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.209894 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cakt.php
[Thu Jul 30 10:01:08.209940 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.289254 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/CytoXploit.php
[Thu Jul 30 10:01:08.289294 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.339323 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/ccc.php
[Thu Jul 30 10:01:08.339364 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.380129 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/cxc.php
[Thu Jul 30 10:01:08.380169 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.415034 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/constant.php
[Thu Jul 30 10:01:08.415091 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.429643 2026] [core:error] [pid 2653918:tid 2653918] (13)Permission denied: [client 216.73.216.199:10960] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-224/slabs_cpu_partial
[Thu Jul 30 10:01:08.450721 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/celeng.php
[Thu Jul 30 10:01:08.450760 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.490883 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/bypassing.php
[Thu Jul 30 10:01:08.490924 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.528092 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/bypshell.php
[Thu Jul 30 10:01:08.528134 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.563993 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/bingo.php
[Thu Jul 30 10:01:08.564031 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.598471 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/backd00rshit.php
[Thu Jul 30 10:01:08.598512 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.640853 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/ichi.php
[Thu Jul 30 10:01:08.640896 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.717391 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/~.php
[Thu Jul 30 10:01:08.717437 2026] [access_compat:error] [pid 2648953:tid 2648953] [client 20.240.254.167:57675] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.787299 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 10:01:08.787347 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.816743 2026] [security2:error] [pid 2653838:tid 2653838] [client 43.166.242.189:46074] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsS1AqZ_sP2VocwkWgdJAAAAAg"], referer: http://tompalmer.co.uk
[Thu Jul 30 10:01:08.836702 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/licensi.php
[Thu Jul 30 10:01:08.836746 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.869809 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/Marvins.php
[Thu Jul 30 10:01:08.869854 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.904488 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/lolz.php
[Thu Jul 30 10:01:08.904531 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.939400 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/libs-func.php
[Thu Jul 30 10:01:08.939444 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:08.993027 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/lloh.phtml
[Thu Jul 30 10:01:08.993086 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.026459 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/anu.phtml
[Thu Jul 30 10:01:09.026511 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.059706 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/anu.php
[Thu Jul 30 10:01:09.059750 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.065502 2026] [security2:error] [pid 2653872:tid 2653872] [client 114.119.146.111:26717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~103,30/request_format~html"] [unique_id "amsS1Tmg8j7OyB4K1U64IwAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~103,30/request_format~html
[Thu Jul 30 10:01:09.102538 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/loip2.php
[Thu Jul 30 10:01:09.102585 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.136456 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/json.php
[Thu Jul 30 10:01:09.136508 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.169630 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/java.php
[Thu Jul 30 10:01:09.169682 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.204526 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/kntl.php
[Thu Jul 30 10:01:09.204626 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.238794 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/klee.php
[Thu Jul 30 10:01:09.238840 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.357721 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/kalokataitusayagatauya.php
[Thu Jul 30 10:01:09.357767 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.369951 2026] [cgi:error] [pid 2628120:tid 2628120] [client 20.104.22.47:21296] AH02812: stderr from /home/enigmasu/Enigmasupies.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:01:09.392182 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/jpg.php
[Thu Jul 30 10:01:09.392230 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.425085 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/jak.php
[Thu Jul 30 10:01:09.425134 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.461558 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/image.php
[Thu Jul 30 10:01:09.461624 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.494552 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 10:01:09.494617 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.532221 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/htdocs.php
[Thu Jul 30 10:01:09.532269 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.533839 2026] [ssl:error] [pid 2648953:tid 2648953] (EAI 2)Name or service not known: [client 144.76.19.72:53740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:09.533868 2026] [ssl:error] [pid 2648953:tid 2648953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:09.569274 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/hello.php
[Thu Jul 30 10:01:09.569326 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.586838 2026] [ssl:error] [pid 2648183:tid 2648183] (EAI 2)Name or service not known: [client 144.76.19.72:35784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:09.586864 2026] [ssl:error] [pid 2648183:tid 2648183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:09.602094 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 10:01:09.602146 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.661546 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/ini.php
[Thu Jul 30 10:01:09.661611 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.729676 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/help.php
[Thu Jul 30 10:01:09.729732 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.811583 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/highda php
[Thu Jul 30 10:01:09.856236 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/high.php
[Thu Jul 30 10:01:09.856286 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.941219 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/hehee.php
[Thu Jul 30 10:01:09.941268 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:09.996538 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/human.php
[Thu Jul 30 10:01:09.996599 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.029530 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/him.php
[Thu Jul 30 10:01:10.029582 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.073528 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/hh.php
[Thu Jul 30 10:01:10.073578 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.135694 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/hz.php
[Thu Jul 30 10:01:10.135747 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.234937 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/here.php
[Thu Jul 30 10:01:10.234991 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.268366 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/hxh.php
[Thu Jul 30 10:01:10.268418 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.280077 2026] [lsapi:warn] [pid 2651741:tid 2651741] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:01:10.392115 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/FX.php
[Thu Jul 30 10:01:10.392175 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.425334 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/ga.php
[Thu Jul 30 10:01:10.425394 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.458766 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/ganz.php
[Thu Jul 30 10:01:10.458820 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.492108 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/gas.php
[Thu Jul 30 10:01:10.492162 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.507181 2026] [security2:error] [pid 2653915:tid 2653915] [client 185.177.72.10:27250] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/default/.env"] [unique_id "amsS1k7rB_fpk9-k72nuegAAACU"]
[Thu Jul 30 10:01:10.507361 2026] [security2:error] [pid 2653915:tid 2653915] [client 185.177.72.10:27250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/default/.env"] [unique_id "amsS1k7rB_fpk9-k72nuegAAACU"]
[Thu Jul 30 10:01:10.526012 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 10:01:10.526066 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.559125 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/gelis.php
[Thu Jul 30 10:01:10.559176 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.633111 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/FierzaXploit.php
[Thu Jul 30 10:01:10.633164 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.666571 2026] [security2:error] [pid 2653915:tid 2653915] [client 185.177.72.10:27250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS1k7rB_fpk9-k72nuegAAACU"]
[Thu Jul 30 10:01:10.667460 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/fxshell.php
[Thu Jul 30 10:01:10.667505 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.685713 2026] [core:error] [pid 2650047:tid 2650047] [client 66.249.64.170:64009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:10.685739 2026] [core:error] [pid 2650047:tid 2650047] [client 66.249.64.170:64009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:10.703059 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:27258] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.bak"] [unique_id "amsS1nYICBgk62rgMlVJcwAAAD8"]
[Thu Jul 30 10:01:10.703254 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:27258] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.bak"] [unique_id "amsS1nYICBgk62rgMlVJcwAAAD8"]
[Thu Jul 30 10:01:10.704444 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/fk.php7
[Thu Jul 30 10:01:10.704489 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.737439 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/eagle.php
[Thu Jul 30 10:01:10.737485 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.781491 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/Eagle.php
[Thu Jul 30 10:01:10.781537 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.814331 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/.error_log.php
[Thu Jul 30 10:01:10.814379 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.851346 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:27258] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS1nYICBgk62rgMlVJcwAAAD8"]
[Thu Jul 30 10:01:10.854384 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/666.php
[Thu Jul 30 10:01:10.854423 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.886199 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:27262] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.dev"] [unique_id "amsS1hTagygMYv94UJPcCgAAAA4"]
[Thu Jul 30 10:01:10.886345 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:27262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.dev"] [unique_id "amsS1hTagygMYv94UJPcCgAAAA4"]
[Thu Jul 30 10:01:10.923103 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/Xzd.php
[Thu Jul 30 10:01:10.923175 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:10.959505 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-sitess.php
[Thu Jul 30 10:01:10.959552 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.026403 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/aku.php
[Thu Jul 30 10:01:11.026451 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.034154 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:27262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS1hTagygMYv94UJPcCgAAAA4"]
[Thu Jul 30 10:01:11.059268 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/syg.php
[Thu Jul 30 10:01:11.059309 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.066855 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:27272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.dist"] [unique_id "amsS13ClVEbRTOXMCakElgAAACs"]
[Thu Jul 30 10:01:11.067038 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:27272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.dist"] [unique_id "amsS13ClVEbRTOXMCakElgAAACs"]
[Thu Jul 30 10:01:11.092436 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/contactz.php
[Thu Jul 30 10:01:11.092492 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.125278 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/orange.php
[Thu Jul 30 10:01:11.125322 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.158497 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/hcd01.php
[Thu Jul 30 10:01:11.158545 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.207989 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:27272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS13ClVEbRTOXMCakElgAAACs"]
[Thu Jul 30 10:01:11.240586 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:27284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.local"] [unique_id "amsS12gaDFrAz0TuNXQ45gAAABs"]
[Thu Jul 30 10:01:11.240768 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:27284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/default/.env.local"] [unique_id "amsS12gaDFrAz0TuNXQ45gAAABs"]
[Thu Jul 30 10:01:11.257530 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/prof.php
[Thu Jul 30 10:01:11.257580 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.292528 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/AkuSayangKamu45.php
[Thu Jul 30 10:01:11.292578 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.325930 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/googlebots.php
[Thu Jul 30 10:01:11.325972 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.326718 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:47524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:11.326739 2026] [core:error] [pid 2653302:tid 2653302] [client 52.238.199.152:47524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:11.370768 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/ben.php
[Thu Jul 30 10:01:11.370818 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.388081 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:27284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS12gaDFrAz0TuNXQ45gAAABs"]
[Thu Jul 30 10:01:11.405915 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/9191.php
[Thu Jul 30 10:01:11.405963 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.455156 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/kjtpoad.php
[Thu Jul 30 10:01:11.455201 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.491549 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/blackcat.php
[Thu Jul 30 10:01:11.491602 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.526978 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/sure.php
[Thu Jul 30 10:01:11.527023 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.563745 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/dl.php
[Thu Jul 30 10:01:11.563787 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.602656 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/donate.php
[Thu Jul 30 10:01:11.602709 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.635991 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/tntmar.php
[Thu Jul 30 10:01:11.636055 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.707656 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/dd.php
[Thu Jul 30 10:01:11.707713 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.740492 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/rr.PHP56
[Thu Jul 30 10:01:11.804539 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/lf.php
[Thu Jul 30 10:01:11.804605 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.869601 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/saya.php
[Thu Jul 30 10:01:11.869654 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.916536 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/do.php
[Thu Jul 30 10:01:11.916599 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.949454 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/funtion.php
[Thu Jul 30 10:01:11.949509 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:11.991572 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/xixi.php
[Thu Jul 30 10:01:11.991639 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.024724 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-cli.php
[Thu Jul 30 10:01:12.024810 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.068670 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/IP.php
[Thu Jul 30 10:01:12.068717 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.101645 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/XiXi.php
[Thu Jul 30 10:01:12.101694 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.150463 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/.piongroup.php
[Thu Jul 30 10:01:12.150522 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.183589 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/oke.php
[Thu Jul 30 10:01:12.183649 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.264239 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/MKY.php
[Thu Jul 30 10:01:12.264287 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.297322 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/xl33t.php
[Thu Jul 30 10:01:12.297367 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.330208 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/1n73ct10n.php
[Thu Jul 30 10:01:12.330254 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.363858 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/not_acceptable.php
[Thu Jul 30 10:01:12.363899 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.396651 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/dada.php
[Thu Jul 30 10:01:12.396695 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.431642 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/0x1337.php
[Thu Jul 30 10:01:12.431688 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.464435 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/xltavrat.php
[Thu Jul 30 10:01:12.464480 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.499685 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/12j.php
[Thu Jul 30 10:01:12.499730 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.554814 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/danon.php
[Thu Jul 30 10:01:12.554880 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.587909 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/xd.php
[Thu Jul 30 10:01:12.587960 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.622220 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/dada.php
[Thu Jul 30 10:01:12.622267 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.638550 2026] [ssl:error] [pid 2651607:tid 2651607] (EAI 2)Name or service not known: [client 144.76.19.72:35786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:12.638576 2026] [ssl:error] [pid 2651607:tid 2651607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:12.655797 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/xml.php
[Thu Jul 30 10:01:12.655838 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.688846 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/xm.php
[Thu Jul 30 10:01:12.688890 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.693337 2026] [ssl:error] [pid 2648183:tid 2648183] (EAI 2)Name or service not known: [client 144.76.19.72:35790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:12.693359 2026] [ssl:error] [pid 2648183:tid 2648183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:12.721620 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/xamp.php
[Thu Jul 30 10:01:12.721664 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.772197 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/ya.php
[Thu Jul 30 10:01:12.772245 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.827780 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/zer0.php
[Thu Jul 30 10:01:12.827839 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.864370 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/63dor.php
[Thu Jul 30 10:01:12.864414 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.952722 2026] [ssl:error] [pid 2651673:tid 2651673] (70014)End of file found: [client 216.73.216.199:1399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:12.958521 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/dh.php
[Thu Jul 30 10:01:12.958564 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:12.994465 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/\xe5\xb9\xb3\xe4\xbb\xae\xe5\x90\x8ds.php
[Thu Jul 30 10:01:12.994510 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.027328 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:01:13.060326 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/anbu.php
[Thu Jul 30 10:01:13.060372 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.093352 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:13.094915 2026] [core:error] [pid 2654941:tid 2654941] [client 52.238.199.152:47506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:13.094934 2026] [core:error] [pid 2654941:tid 2654941] [client 52.238.199.152:47506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:13.132513 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:13.166683 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins.php
[Thu Jul 30 10:01:13.166727 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.200218 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:13.233197 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57609] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:13.360506 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.php
[Thu Jul 30 10:01:13.360554 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.394858 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:01:13.429698 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/00.php
[Thu Jul 30 10:01:13.429745 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.469463 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/000.php
[Thu Jul 30 10:01:13.469506 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.550766 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/okkk.php
[Thu Jul 30 10:01:13.550811 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.585510 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/yamate.php
[Thu Jul 30 10:01:13.585556 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.622433 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/upppp.php
[Thu Jul 30 10:01:13.622479 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.659561 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/up.php
[Thu Jul 30 10:01:13.659612 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.693798 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/l3.php
[Thu Jul 30 10:01:13.693838 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.730249 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/fellganteng.php
[Thu Jul 30 10:01:13.730289 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.841139 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/fell.php
[Thu Jul 30 10:01:13.841185 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.904235 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/ok.php
[Thu Jul 30 10:01:13.904279 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.939388 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/herp.php
[Thu Jul 30 10:01:13.939432 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:13.976647 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/nptice.php
[Thu Jul 30 10:01:13.976693 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.011433 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/tuyul.php
[Thu Jul 30 10:01:14.011479 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.048310 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/nikung.php
[Thu Jul 30 10:01:14.048354 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.082795 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/tertykung.php
[Thu Jul 30 10:01:14.082841 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.161106 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 10:01:14.161151 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.207116 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/codrs.php
[Thu Jul 30 10:01:14.207162 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.272970 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/jingan.php
[Thu Jul 30 10:01:14.273014 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.307482 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/chan.php
[Thu Jul 30 10:01:14.307527 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.342406 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/losX.php
[Thu Jul 30 10:01:14.342448 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.377969 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/mom.php
[Thu Jul 30 10:01:14.378015 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.381689 2026] [security2:error] [pid 2653473:tid 2653473] [client 129.204.188.64:37890] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bashforthbell.com"] [uri "/"] [unique_id "amsS2hTagygMYv94UJPcDgAAAA4"]
[Thu Jul 30 10:01:14.412144 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/killer.php
[Thu Jul 30 10:01:14.412187 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.448414 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/Sh3ll.php
[Thu Jul 30 10:01:14.448455 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.483448 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/new.php
[Thu Jul 30 10:01:14.483496 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.525215 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/Sym.php
[Thu Jul 30 10:01:14.525261 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.597323 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/dom.php
[Thu Jul 30 10:01:14.597371 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.636940 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/v4ga.php
[Thu Jul 30 10:01:14.636984 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.674194 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/s3c.php
[Thu Jul 30 10:01:14.674237 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.748456 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/madspotshell.php
[Thu Jul 30 10:01:14.748502 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.761699 2026] [ssl:error] [pid 2653918:tid 2653918] (70014)End of file found: [client 216.73.216.199:10960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:14.804500 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/sa.php
[Thu Jul 30 10:01:14.804560 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.841680 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/noname.php
[Thu Jul 30 10:01:14.841726 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.877290 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/kntol.php
[Thu Jul 30 10:01:14.877335 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.911549 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/WSO.php
[Thu Jul 30 10:01:14.911607 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.946351 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/IndoXploit.php
[Thu Jul 30 10:01:14.946394 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:14.983236 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/bajingan.php
[Thu Jul 30 10:01:14.983280 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.023668 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/Good.php
[Thu Jul 30 10:01:15.023741 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.038779 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:47541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:15.038806 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:47541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:15.060642 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/pas.phtml
[Thu Jul 30 10:01:15.060709 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.108473 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/pas.php
[Thu Jul 30 10:01:15.108524 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.163684 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/abc.php
[Thu Jul 30 10:01:15.163740 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.201848 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/indexx.php
[Thu Jul 30 10:01:15.201891 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.238272 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/browse.php
[Thu Jul 30 10:01:15.238316 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.317674 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/up1.php
[Thu Jul 30 10:01:15.317719 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.377453 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/haha.php
[Thu Jul 30 10:01:15.377500 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.472463 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/sc.php
[Thu Jul 30 10:01:15.472507 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.511671 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/fvck.php
[Thu Jul 30 10:01:15.511717 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.546511 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/0x.php
[Thu Jul 30 10:01:15.546558 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.590520 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/up.php5
[Thu Jul 30 10:01:15.590563 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.624944 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/shell.php5
[Thu Jul 30 10:01:15.624993 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.660502 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/inc
[Thu Jul 30 10:01:15.697523 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/ix.php
[Thu Jul 30 10:01:15.697582 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.751526 2026] [ssl:error] [pid 2641792:tid 2641792] (EAI 2)Name or service not known: [client 144.76.19.72:35804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:15.751556 2026] [ssl:error] [pid 2641792:tid 2641792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:15.784165 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/r0x.php
[Thu Jul 30 10:01:15.784211 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.812502 2026] [ssl:error] [pid 2641791:tid 2641791] (EAI 2)Name or service not known: [client 144.76.19.72:35808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:15.812532 2026] [ssl:error] [pid 2641791:tid 2641791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:15.835002 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/bn.php
[Thu Jul 30 10:01:15.835044 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.835994 2026] [access_compat:error] [pid 2648680:tid 2648680] [client 45.158.164.139:53202] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:01:15.879919 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/dm.php
[Thu Jul 30 10:01:15.879966 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.917636 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/gator.php
[Thu Jul 30 10:01:15.917684 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:15.951989 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/perlcgi.pl
[Thu Jul 30 10:01:15.975417 2026] [ssl:error] [pid 2651607:tid 2651607] (70014)End of file found: [client 216.73.216.199:18221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:15.997468 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/mail.php
[Thu Jul 30 10:01:15.997514 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.086402 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/mailer.php
[Thu Jul 30 10:01:16.086447 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.176508 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/php.ini
[Thu Jul 30 10:01:16.176572 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.240556 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/modul.php
[Thu Jul 30 10:01:16.240616 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.330525 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/configuration.php
[Thu Jul 30 10:01:16.330569 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.364908 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/tai.php
[Thu Jul 30 10:01:16.364954 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.399353 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/www.php
[Thu Jul 30 10:01:16.399398 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.444204 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/x13.php
[Thu Jul 30 10:01:16.444250 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.451525 2026] [security2:error] [pid 2651555:tid 2651555] [client 129.204.188.64:40104] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amsS3KzN5wOz0XNGs1T06AAAAAM"], referer: http://bashforthbell.com
[Thu Jul 30 10:01:16.484548 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/ntaps.php
[Thu Jul 30 10:01:16.484599 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.519099 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/zip.php
[Thu Jul 30 10:01:16.519147 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.553383 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/@.php
[Thu Jul 30 10:01:16.553430 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.625757 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/ea.php
[Thu Jul 30 10:01:16.625803 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.661088 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/aaaa.php
[Thu Jul 30 10:01:16.661134 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.700947 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/cinfo.php
[Thu Jul 30 10:01:16.700989 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.766956 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/newfile.php
[Thu Jul 30 10:01:16.766997 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.828262 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/pro.php
[Thu Jul 30 10:01:16.828302 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.871453 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 10:01:16.871497 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.906477 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/11.php
[Thu Jul 30 10:01:16.906520 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.941724 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/title.php
[Thu Jul 30 10:01:16.941769 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:16.976136 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 10:01:16.976182 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.010699 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/pass.php
[Thu Jul 30 10:01:17.010752 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.045053 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/Cpanel.php
[Thu Jul 30 10:01:17.045120 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.106840 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/unknown.php
[Thu Jul 30 10:01:17.106890 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.150493 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/sel.php
[Thu Jul 30 10:01:17.150539 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.235544 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/14.php
[Thu Jul 30 10:01:17.235602 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.270498 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:01:17.270546 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.309289 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/angel.php
[Thu Jul 30 10:01:17.309334 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.345008 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/c100.php
[Thu Jul 30 10:01:17.345056 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.381783 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/simattacker.php
[Thu Jul 30 10:01:17.381828 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.401960 2026] [core:error] [pid 2655135:tid 2655135] [client 52.238.199.152:47515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:17.401988 2026] [core:error] [pid 2655135:tid 2655135] [client 52.238.199.152:47515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:17.416184 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/wsoshell.php
[Thu Jul 30 10:01:17.416230 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.451034 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 10:01:17.451107 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.492939 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/12.php
[Thu Jul 30 10:01:17.492985 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.559198 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/wikiindex.php
[Thu Jul 30 10:01:17.559248 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.622231 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/alex.php
[Thu Jul 30 10:01:17.622273 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.678585 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-0.php
[Thu Jul 30 10:01:17.678636 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.748674 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-1.php
[Thu Jul 30 10:01:17.748722 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.799401 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/xindex.php
[Thu Jul 30 10:01:17.799444 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.885545 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/wiki-index.php
[Thu Jul 30 10:01:17.885588 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.941472 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/Bulle.php
[Thu Jul 30 10:01:17.941514 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:17.989889 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/srx.php
[Thu Jul 30 10:01:17.989935 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.034901 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:18.111023 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/tersembunyi.php
[Thu Jul 30 10:01:18.111078 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.121970 2026] [core:error] [pid 2656569:tid 2656569] [client 52.238.199.152:55660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:18.121993 2026] [core:error] [pid 2656569:tid 2656569] [client 52.238.199.152:55660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:18.145485 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/lab.php
[Thu Jul 30 10:01:18.145526 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.211871 2026] [access_compat:error] [pid 2653915:tid 2653915] [client 20.240.254.167:64075] AH01797: client denied by server configuration: /home/nspandor/public_html/1.aspx
[Thu Jul 30 10:01:18.383478 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/shell.aspx
[Thu Jul 30 10:01:18.416088 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/a.aspx
[Thu Jul 30 10:01:18.448983 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-raze.php
[Thu Jul 30 10:01:18.449027 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.482089 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-init.php
[Thu Jul 30 10:01:18.482131 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.535453 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/lyda.php
[Thu Jul 30 10:01:18.535495 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.568056 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/alfashell.php
[Thu Jul 30 10:01:18.568112 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.666255 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 10:01:18.666311 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.733631 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:47978] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/default/php.ini"] [unique_id "amsS3poL8w3BzPER_zV9HAAAACQ"]
[Thu Jul 30 10:01:18.733990 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:47978] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/default/php.ini"] [unique_id "amsS3poL8w3BzPER_zV9HAAAACQ"]
[Thu Jul 30 10:01:18.782543 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/upl.php
[Thu Jul 30 10:01:18.782588 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.823349 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/login.phtml
[Thu Jul 30 10:01:18.823394 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.855895 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/gelay.php
[Thu Jul 30 10:01:18.855938 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.948187 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/darkshell.php
[Thu Jul 30 10:01:18.948232 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:18.986645 2026] [security2:error] [pid 2641846:tid 2641846] [client 185.177.72.10:47978] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS3poL8w3BzPER_zV9HAAAACQ"]
[Thu Jul 30 10:01:19.007235 2026] [ssl:error] [pid 2641846:tid 2641846] (EAI 2)Name or service not known: [client 144.76.19.72:35824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:19.007257 2026] [ssl:error] [pid 2641846:tid 2641846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:19.008478 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/gel4y.php
[Thu Jul 30 10:01:19.008528 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:19.041810 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/contacts.php
[Thu Jul 30 10:01:19.041851 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:19.134463 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/yo.php
[Thu Jul 30 10:01:19.134507 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:19.169546 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:19.227085 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:19.269012 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.296518 2026] [ssl:error] [pid 2651744:tid 2651744] (EAI 2)Name or service not known: [client 144.76.19.72:35840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:19.296549 2026] [ssl:error] [pid 2651744:tid 2651744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:19.301421 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.326950 2026] [ssl:error] [pid 2656570:tid 2656570] (70014)End of file found: [client 216.73.216.199:62909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:19.369505 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.436745 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.466814 2026] [core:error] [pid 2641846:tid 2641846] [client 52.238.199.152:55668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:19.466834 2026] [core:error] [pid 2641846:tid 2641846] [client 52.238.199.152:55668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:19.469047 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.501495 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/imageswp-init.php
[Thu Jul 30 10:01:19.501534 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:19.534132 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.567096 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.599850 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.632278 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.664685 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.697099 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.729614 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.762729 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.795162 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.905488 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:19.938578 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:20.007701 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:20.040808 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:20.111601 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 10:01:20.118255 2026] [core:error] [pid 2653918:tid 2653918] (13)Permission denied: [client 216.73.216.199:7152] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-248/align
[Thu Jul 30 10:01:20.149460 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/w3llstore.php
[Thu Jul 30 10:01:20.149503 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.220720 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/alfi.php
[Thu Jul 30 10:01:20.220768 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.253239 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/DC.php
[Thu Jul 30 10:01:20.253283 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.285637 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:20.321899 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:20.354197 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:20.388627 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:20.421133 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:20.453919 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/Ninja.php
[Thu Jul 30 10:01:20.453953 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.497375 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-incleude.php
[Thu Jul 30 10:01:20.497410 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.530408 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/fpebr.php
[Thu Jul 30 10:01:20.530450 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.563229 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/snd21.php
[Thu Jul 30 10:01:20.563262 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.633953 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/olu.php
[Thu Jul 30 10:01:20.633996 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.668460 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/tuco.php
[Thu Jul 30 10:01:20.668503 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.702180 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/ice.php
[Thu Jul 30 10:01:20.702224 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.734659 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/codeboy1877x.php
[Thu Jul 30 10:01:20.734699 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.801238 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wsanon.php
[Thu Jul 30 10:01:20.801279 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.849898 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/Alfa.php
[Thu Jul 30 10:01:20.849937 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:20.878150 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:19603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:20.878179 2026] [core:error] [pid 2641792:tid 2641792] [client 52.238.199.152:19603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:20.882689 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:20.915125 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:20.950373 2026] [lsapi:warn] [pid 2651745:tid 2651745] [client 2401:4900:8fe3:bddd:299a:d33e:1120:2dc0:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:01:20.955077 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:20.990446 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:01:21.023347 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:21.058484 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:01:21.101484 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:01:21.134031 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/ym.php
[Thu Jul 30 10:01:21.134087 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.166456 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa1.php
[Thu Jul 30 10:01:21.166499 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.200628 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/159.php
[Thu Jul 30 10:01:21.200702 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.245206 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/tesla1.php
[Thu Jul 30 10:01:21.245251 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.288314 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/shadowx.php
[Thu Jul 30 10:01:21.288356 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.358215 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/hexor.php
[Thu Jul 30 10:01:21.358260 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.391998 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/leaf.php
[Thu Jul 30 10:01:21.392044 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.424779 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/FoxWSOv1.php
[Thu Jul 30 10:01:21.424826 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.457323 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/foxwsov1.php
[Thu Jul 30 10:01:21.457368 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.489822 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/FoxWSOv2.php
[Thu Jul 30 10:01:21.489865 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.550065 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/foxwsov2.php
[Thu Jul 30 10:01:21.550158 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.618587 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/shellx.php
[Thu Jul 30 10:01:21.618644 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.651024 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/1index.php
[Thu Jul 30 10:01:21.651076 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.683422 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/2index.php
[Thu Jul 30 10:01:21.683465 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.730228 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/3index.php
[Thu Jul 30 10:01:21.730270 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.785878 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/4index.php
[Thu Jul 30 10:01:21.785924 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.787546 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:19636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:21.787566 2026] [core:error] [pid 2651677:tid 2651677] [client 52.238.199.152:19636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:21.819641 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/5index.php
[Thu Jul 30 10:01:21.819687 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.852051 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/6index.php
[Thu Jul 30 10:01:21.852108 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:21.948206 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/7index.php
[Thu Jul 30 10:01:21.948248 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.021747 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/8index.php
[Thu Jul 30 10:01:22.021792 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.123019 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/9index.php
[Thu Jul 30 10:01:22.123061 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.184865 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/index4.php
[Thu Jul 30 10:01:22.184922 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.220714 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/index5.php
[Thu Jul 30 10:01:22.220758 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.253260 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/index6.php
[Thu Jul 30 10:01:22.253301 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.314156 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/index7.php
[Thu Jul 30 10:01:22.314203 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.316345 2026] [core:error] [pid 2656776:tid 2656776] [client 66.249.66.167:38296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:22.316364 2026] [core:error] [pid 2656776:tid 2656776] [client 66.249.66.167:38296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:22.354749 2026] [ssl:error] [pid 2651677:tid 2651677] (EAI 2)Name or service not known: [client 144.76.19.72:54066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:22.354780 2026] [ssl:error] [pid 2651677:tid 2651677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:22.394393 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/index8.php
[Thu Jul 30 10:01:22.394438 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.407473 2026] [ssl:error] [pid 2651755:tid 2651755] (EAI 2)Name or service not known: [client 144.76.19.72:54076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:22.407498 2026] [ssl:error] [pid 2651755:tid 2651755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:22.426998 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/index9.php
[Thu Jul 30 10:01:22.427039 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.459442 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/indeex.php
[Thu Jul 30 10:01:22.459482 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.491964 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/jindex.php
[Thu Jul 30 10:01:22.492001 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.532977 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/p0wny-shell.php
[Thu Jul 30 10:01:22.533019 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.565776 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/ex0shell.php
[Thu Jul 30 10:01:22.565814 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.598836 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/exp.php
[Thu Jul 30 10:01:22.598873 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.631333 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/pHpINJ.php
[Thu Jul 30 10:01:22.631370 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.696461 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/robot.php
[Thu Jul 30 10:01:22.696507 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.729288 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/sys32.php
[Thu Jul 30 10:01:22.729330 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.765984 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/simple_cmd.php
[Thu Jul 30 10:01:22.766025 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.813759 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/alpa.php
[Thu Jul 30 10:01:22.813802 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.848749 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/themes
[Thu Jul 30 10:01:22.881771 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/su.php
[Thu Jul 30 10:01:22.881816 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.914673 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/xx.php
[Thu Jul 30 10:01:22.914733 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57663] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:22.968754 2026] [core:error] [pid 2628120:tid 2628120] [client 52.238.199.152:55619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:22.968776 2026] [core:error] [pid 2628120:tid 2628120] [client 52.238.199.152:55619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:22.969146 2026] [ssl:error] [pid 2653918:tid 2653918] (70014)End of file found: [client 216.73.216.199:7152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:23.073012 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/byps.php
[Thu Jul 30 10:01:23.073062 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.110332 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/themes
[Thu Jul 30 10:01:23.144529 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/and.php
[Thu Jul 30 10:01:23.144573 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.178619 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/skizoo.php
[Thu Jul 30 10:01:23.178662 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.187927 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:48188] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/delivery/.env"] [unique_id "amsS45scAi6piyeNcGN0lQAAACw"]
[Thu Jul 30 10:01:23.188116 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:48188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/delivery/.env"] [unique_id "amsS45scAi6piyeNcGN0lQAAACw"]
[Thu Jul 30 10:01:23.215123 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wsmini.php
[Thu Jul 30 10:01:23.215164 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.251152 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/86.php
[Thu Jul 30 10:01:23.251196 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.293511 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/min.php
[Thu Jul 30 10:01:23.293556 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.328508 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-backup-sql-302.php
[Thu Jul 30 10:01:23.328552 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.333544 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:48188] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS45scAi6piyeNcGN0lQAAACw"]
[Thu Jul 30 10:01:23.380269 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/json-php.php
[Thu Jul 30 10:01:23.380314 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.419874 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/0x0.php
[Thu Jul 30 10:01:23.419914 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.454323 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/0z.php
[Thu Jul 30 10:01:23.454366 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.493477 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/13.php
[Thu Jul 30 10:01:23.493521 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.528522 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/1index.php
[Thu Jul 30 10:01:23.528563 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.547497 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:48198] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo-app/.env"] [unique_id "amsS4yqCrh0o4antW6s9gwAAABM"]
[Thu Jul 30 10:01:23.547639 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:48198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo-app/.env"] [unique_id "amsS4yqCrh0o4antW6s9gwAAABM"]
[Thu Jul 30 10:01:23.562668 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/22xc.php
[Thu Jul 30 10:01:23.562706 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.598340 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/26.php
[Thu Jul 30 10:01:23.598386 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.639709 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/2index.php
[Thu Jul 30 10:01:23.639760 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.674204 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/32.php
[Thu Jul 30 10:01:23.674254 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.689366 2026] [security2:error] [pid 2628120:tid 2628120] [client 185.177.72.10:48198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS4yqCrh0o4antW6s9gwAAABM"]
[Thu Jul 30 10:01:23.716124 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 10:01:23.716169 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.725739 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:48206] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env"] [unique_id "amsS4wNdLgvGIHel4alYygAAADo"]
[Thu Jul 30 10:01:23.725935 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:48206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env"] [unique_id "amsS4wNdLgvGIHel4alYygAAADo"]
[Thu Jul 30 10:01:23.751302 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/4x4.php
[Thu Jul 30 10:01:23.751343 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.837441 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/73.php
[Thu Jul 30 10:01:23.837483 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.871941 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:48206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS4wNdLgvGIHel4alYygAAADo"]
[Thu Jul 30 10:01:23.893925 2026] [core:error] [pid 2650047:tid 2650047] [client 52.238.199.152:20008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:23.893946 2026] [core:error] [pid 2650047:tid 2650047] [client 52.238.199.152:20008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:23.899543 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/al.php
[Thu Jul 30 10:01:23.899582 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:23.908222 2026] [security2:error] [pid 2656778:tid 2656778] [client 185.177.72.10:48216] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.bak"] [unique_id "amsS49iajjCrty9zObGKhAAAABw"]
[Thu Jul 30 10:01:23.908392 2026] [security2:error] [pid 2656778:tid 2656778] [client 185.177.72.10:48216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.bak"] [unique_id "amsS49iajjCrty9zObGKhAAAABw"]
[Thu Jul 30 10:01:23.951213 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/alf.php
[Thu Jul 30 10:01:23.951257 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.014438 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/alf4.php
[Thu Jul 30 10:01:24.014489 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.066992 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa-shell-v4.php
[Thu Jul 30 10:01:24.067035 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.099167 2026] [security2:error] [pid 2656778:tid 2656778] [client 185.177.72.10:48216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS49iajjCrty9zObGKhAAAABw"]
[Thu Jul 30 10:01:24.103481 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/alfakun.php
[Thu Jul 30 10:01:24.103520 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.137477 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:48232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.dev"] [unique_id "amsS5PMRvA5UKQZZ7j6cnAAAABY"]
[Thu Jul 30 10:01:24.137672 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:48232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.dev"] [unique_id "amsS5PMRvA5UKQZZ7j6cnAAAABY"]
[Thu Jul 30 10:01:24.145467 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/alfatesla.php
[Thu Jul 30 10:01:24.145508 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.189184 2026] [core:error] [pid 2651610:tid 2651610] (13)Permission denied: [client 216.73.216.199:61539] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/eventpoll_epi/hwcache_align
[Thu Jul 30 10:01:24.191391 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/alfateslav4.php
[Thu Jul 30 10:01:24.191431 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.264581 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/alwso.php
[Thu Jul 30 10:01:24.264639 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.299203 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/anjay.php
[Thu Jul 30 10:01:24.299245 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.351400 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:48232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS5PMRvA5UKQZZ7j6cnAAAABY"]
[Thu Jul 30 10:01:24.372934 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/anons79.php
[Thu Jul 30 10:01:24.372979 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.386753 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:48242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.dist"] [unique_id "amsS5ANdLgvGIHel4alYywAAADo"]
[Thu Jul 30 10:01:24.386926 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:48242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.dist"] [unique_id "amsS5ANdLgvGIHel4alYywAAADo"]
[Thu Jul 30 10:01:24.407095 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/base.php
[Thu Jul 30 10:01:24.407138 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.457796 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/batm.php
[Thu Jul 30 10:01:24.457838 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.488829 2026] [ssl:error] [pid 2651610:tid 2651610] (70014)End of file found: [client 216.73.216.199:61539] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:24.491787 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/bj.php
[Thu Jul 30 10:01:24.491824 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.526554 2026] [core:error] [pid 2651755:tid 2651755] [client 52.238.199.152:20009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:24.526575 2026] [core:error] [pid 2651755:tid 2651755] [client 52.238.199.152:20009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:24.526858 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/black.php
[Thu Jul 30 10:01:24.526895 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.530306 2026] [security2:error] [pid 2628120:tid 2628120] [client 85.208.96.202:50428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,261.0/prev_next,prev.html"] [unique_id "amsS5CqCrh0o4antW6s9hAAAABM"]
[Thu Jul 30 10:01:24.532151 2026] [security2:error] [pid 2650048:tid 2650048] [client 185.177.72.10:48242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS5ANdLgvGIHel4alYywAAADo"]
[Thu Jul 30 10:01:24.560881 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/by.php
[Thu Jul 30 10:01:24.560937 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.569852 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:48252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.local"] [unique_id "amsS5ODqQN_GEwmvH4ZttgAAACY"]
[Thu Jul 30 10:01:24.570005 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:48252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.local"] [unique_id "amsS5ODqQN_GEwmvH4ZttgAAACY"]
[Thu Jul 30 10:01:24.596551 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/byp.php
[Thu Jul 30 10:01:24.596602 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.631449 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/con.php
[Thu Jul 30 10:01:24.631492 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.673951 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/con7ext.php
[Thu Jul 30 10:01:24.673992 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.717169 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/loader
[Thu Jul 30 10:01:24.720930 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:48252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS5ODqQN_GEwmvH4ZttgAAACY"]
[Thu Jul 30 10:01:24.756579 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:42220] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.production"] [unique_id "amsS5JscAi6piyeNcGN0lwAAACw"]
[Thu Jul 30 10:01:24.756718 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:42220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.production"] [unique_id "amsS5JscAi6piyeNcGN0lwAAACw"]
[Thu Jul 30 10:01:24.781848 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/dbx.php
[Thu Jul 30 10:01:24.781886 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.816438 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/degeselih.php
[Thu Jul 30 10:01:24.816483 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.851348 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/doc.php
[Thu Jul 30 10:01:24.851392 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.885583 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/docindex.php
[Thu Jul 30 10:01:24.885638 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.919886 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/dosya.php
[Thu Jul 30 10:01:24.919931 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.954543 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/error.php
[Thu Jul 30 10:01:24.954584 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.989737 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/evil.php
[Thu Jul 30 10:01:24.989775 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:24.995259 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:42220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS5JscAi6piyeNcGN0lwAAACw"]
[Thu Jul 30 10:01:25.024170 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 10:01:25.024217 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.029019 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:42228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.staging"] [unique_id "amsS5eDqQN_GEwmvH4ZttwAAACY"]
[Thu Jul 30 10:01:25.029156 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:42228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/.env.staging"] [unique_id "amsS5eDqQN_GEwmvH4ZttwAAACY"]
[Thu Jul 30 10:01:25.058414 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/FoxWSO-full.php
[Thu Jul 30 10:01:25.058461 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.092715 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/FoxWSO.php
[Thu Jul 30 10:01:25.092760 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.133464 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/foxwso.php
[Thu Jul 30 10:01:25.133514 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.167964 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/gank.php
[Thu Jul 30 10:01:25.168007 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.168958 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:42228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS5eDqQN_GEwmvH4ZttwAAACY"]
[Thu Jul 30 10:01:25.204264 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/gank.php.PhP
[Thu Jul 30 10:01:25.204310 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.274742 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/gh.php
[Thu Jul 30 10:01:25.274806 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.360105 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/id.php
[Thu Jul 30 10:01:25.360153 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.395105 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/ids.php
[Thu Jul 30 10:01:25.395154 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.429771 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/idx.php
[Thu Jul 30 10:01:25.429821 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.462545 2026] [ssl:error] [pid 2656777:tid 2656777] (EAI 2)Name or service not known: [client 144.76.19.72:54088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:25.462586 2026] [ssl:error] [pid 2656777:tid 2656777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:25.465292 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/init.php
[Thu Jul 30 10:01:25.465333 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.499784 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/kepo.php
[Thu Jul 30 10:01:25.499833 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.514393 2026] [ssl:error] [pid 2656776:tid 2656776] (EAI 2)Name or service not known: [client 144.76.19.72:54098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:25.514425 2026] [ssl:error] [pid 2656776:tid 2656776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:25.534537 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/kk.php
[Thu Jul 30 10:01:25.534581 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.568734 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/kndw1.php
[Thu Jul 30 10:01:25.568776 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.602871 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/la.php
[Thu Jul 30 10:01:25.602913 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.734962 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/lnedx.php
[Thu Jul 30 10:01:25.735010 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.817512 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/local.php
[Thu Jul 30 10:01:25.817559 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.853644 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/lolzk.php
[Thu Jul 30 10:01:25.853699 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.887939 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/marijuana.php
[Thu Jul 30 10:01:25.887987 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.925512 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/mas.php
[Thu Jul 30 10:01:25.925558 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:25.980163 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/mini.php
[Thu Jul 30 10:01:25.980209 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.007130 2026] [core:error] [pid 2656570:tid 2656570] (13)Permission denied: [client 216.73.216.199:28640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/859593.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.9946f086.tmp
[Thu Jul 30 10:01:26.014360 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/minik.php
[Thu Jul 30 10:01:26.014401 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.059909 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/minishell.php
[Thu Jul 30 10:01:26.059955 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.129522 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/mrjn.php
[Thu Jul 30 10:01:26.129572 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.179520 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/ninja.php
[Thu Jul 30 10:01:26.179564 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.265618 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/ohayo.php
[Thu Jul 30 10:01:26.265666 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.312430 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/olux.php
[Thu Jul 30 10:01:26.312479 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.348330 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/phpinfo.php
[Thu Jul 30 10:01:26.348376 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.383821 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/postfs.php
[Thu Jul 30 10:01:26.383866 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.418049 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/pref.php
[Thu Jul 30 10:01:26.418106 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.452317 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/priv.php
[Thu Jul 30 10:01:26.452363 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.491473 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/priv8.php
[Thu Jul 30 10:01:26.491516 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.526320 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/qindex.php
[Thu Jul 30 10:01:26.526362 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.563212 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/radio.php
[Thu Jul 30 10:01:26.563254 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.605006 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/shell20211028.php
[Thu Jul 30 10:01:26.605055 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.639302 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/shells.php
[Thu Jul 30 10:01:26.639351 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.673636 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/stupid.php
[Thu Jul 30 10:01:26.673683 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.723013 2026] [core:error] [pid 2650048:tid 2650048] [client 52.238.199.152:19972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:26.723037 2026] [core:error] [pid 2650048:tid 2650048] [client 52.238.199.152:19972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:26.748794 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/sys.php
[Thu Jul 30 10:01:26.748838 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.816453 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/tes.php
[Thu Jul 30 10:01:26.816499 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.856219 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/teslav.php
[Thu Jul 30 10:01:26.856264 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.890893 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/tshop.php
[Thu Jul 30 10:01:26.890940 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.925660 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/twin.php
[Thu Jul 30 10:01:26.925709 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:26.986231 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/upload.php
[Thu Jul 30 10:01:26.986276 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.020802 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/ups.php
[Thu Jul 30 10:01:27.020848 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.056427 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/usb.php
[Thu Jul 30 10:01:27.056472 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.091956 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/usr.php
[Thu Jul 30 10:01:27.092003 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.126249 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/utchiha.phP
[Thu Jul 30 10:01:27.126295 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.219941 2026] [authz_core:error] [pid 2651755:tid 2651755] [client 51.120.70.186:41591] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 10:01:27.225125 2026] [authz_core:error] [pid 2653914:tid 2653914] [client 66.249.66.35:40012] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:01:27.226699 2026] [core:error] [pid 2656570:tid 2656570] (13)Permission denied: [client 216.73.216.199:28640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1757190.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.88552f2a.tmp
[Thu Jul 30 10:01:27.227769 2026] [authz_core:error] [pid 2653914:tid 2653914] [client 66.249.66.35:40012] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:01:27.254606 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/v3.php
[Thu Jul 30 10:01:27.254648 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.299330 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/v4.php
[Thu Jul 30 10:01:27.299376 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.333552 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wikindex.php
[Thu Jul 30 10:01:27.333608 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.371969 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-2019.php
[Thu Jul 30 10:01:27.372012 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.412918 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-atom.php
[Thu Jul 30 10:01:27.412966 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.447259 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-bita.php
[Thu Jul 30 10:01:27.447302 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.487532 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-conflg.php
[Thu Jul 30 10:01:27.487577 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.523353 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-ctac.php
[Thu Jul 30 10:01:27.523403 2026] [access_compat:error] [pid 2641792:tid 2641792] [client 20.240.254.167:57669] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.629430 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-defaul.php
[Thu Jul 30 10:01:27.629476 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.669484 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-hmdra.php
[Thu Jul 30 10:01:27.669536 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.702527 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-iav.php
[Thu Jul 30 10:01:27.702579 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.757491 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-info.php
[Thu Jul 30 10:01:27.757540 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.807517 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-inlcudes.php
[Thu Jul 30 10:01:27.807563 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.841498 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-installer.php
[Thu Jul 30 10:01:27.841542 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.874211 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-js.php
[Thu Jul 30 10:01:27.874256 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.907513 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-mails.php
[Thu Jul 30 10:01:27.907571 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.941248 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-one.php
[Thu Jul 30 10:01:27.941293 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:27.973741 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-pluging.php
[Thu Jul 30 10:01:27.973785 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.006506 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-plugins.php
[Thu Jul 30 10:01:28.006560 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.062200 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-rss.php
[Thu Jul 30 10:01:28.062244 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.094877 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-singupp.php
[Thu Jul 30 10:01:28.094923 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.146160 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-site.php
[Thu Jul 30 10:01:28.146204 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.178623 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-system.php
[Thu Jul 30 10:01:28.178666 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.215279 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-title.php
[Thu Jul 30 10:01:28.215325 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.280421 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-we.php
[Thu Jul 30 10:01:28.280464 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.321919 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wpindex.php
[Thu Jul 30 10:01:28.321961 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.336392 2026] [core:error] [pid 2651609:tid 2651609] [client 52.238.199.152:19990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:28.336413 2026] [core:error] [pid 2651609:tid 2651609] [client 52.238.199.152:19990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:28.370463 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp_wrong_datlib.php
[Thu Jul 30 10:01:28.370513 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.427276 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/ws.php
[Thu Jul 30 10:01:28.427324 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.480548 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/notfound.php
[Thu Jul 30 10:01:28.480608 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.513397 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wso1337.php
[Thu Jul 30 10:01:28.513455 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.546121 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wso2.php
[Thu Jul 30 10:01:28.546172 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.566559 2026] [ssl:error] [pid 2653918:tid 2653918] (EAI 2)Name or service not known: [client 144.76.19.72:54114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:28.566604 2026] [ssl:error] [pid 2653918:tid 2653918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:28.578995 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/xcv.php
[Thu Jul 30 10:01:28.579036 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.622534 2026] [ssl:error] [pid 2656777:tid 2656777] (EAI 2)Name or service not known: [client 144.76.19.72:54120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:28.622563 2026] [ssl:error] [pid 2656777:tid 2656777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:28.660527 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/xl.php
[Thu Jul 30 10:01:28.660571 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.713554 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/xleet.php
[Thu Jul 30 10:01:28.713616 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.772852 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/XxX.php
[Thu Jul 30 10:01:28.772899 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.809938 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/zk.php
[Thu Jul 30 10:01:28.809982 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.871772 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/zone.php
[Thu Jul 30 10:01:28.871815 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.904291 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/zx.php
[Thu Jul 30 10:01:28.904340 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:28.988508 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/.conf.php
[Thu Jul 30 10:01:28.988556 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.026824 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/decer.php
[Thu Jul 30 10:01:29.026871 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.059296 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/auto_seo.php
[Thu Jul 30 10:01:29.059341 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.092514 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/alone.php
[Thu Jul 30 10:01:29.092559 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.131457 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/error.php
[Thu Jul 30 10:01:29.131506 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.160893 2026] [core:error] [pid 2653915:tid 2653915] [client 52.238.199.152:46916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:29.160924 2026] [core:error] [pid 2653915:tid 2653915] [client 52.238.199.152:46916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:29.186450 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 10:01:29.186498 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.286623 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/xx.php
[Thu Jul 30 10:01:29.286671 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.407441 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 10:01:29.407486 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.466332 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/444.php
[Thu Jul 30 10:01:29.466377 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.498738 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file9.php
[Thu Jul 30 10:01:29.498780 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.531509 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/filesss.php
[Thu Jul 30 10:01:29.531551 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.563935 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file88.php
[Thu Jul 30 10:01:29.563982 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.641259 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/gifclass4.php
[Thu Jul 30 10:01:29.641303 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.674211 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/class19.php
[Thu Jul 30 10:01:29.674255 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.709493 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/2clas.php
[Thu Jul 30 10:01:29.709538 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.766600 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/bless5.php
[Thu Jul 30 10:01:29.766649 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.790284 2026] [ssl:error] [pid 2656570:tid 2656570] (70014)End of file found: [client 216.73.216.199:28640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:29.835454 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file15.php
[Thu Jul 30 10:01:29.835505 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.868135 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/333.php
[Thu Jul 30 10:01:29.868182 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.900513 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/alpa.php
[Thu Jul 30 10:01:29.900557 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.933173 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file21.php
[Thu Jul 30 10:01:29.933218 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:29.974582 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.179:32674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akoptimize.gatkabfs.com"] [uri "/.env"] [unique_id "amsS6edjDh7oBT6qCsO04QAAAAE"]
[Thu Jul 30 10:01:29.974788 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.179:32674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.akoptimize.gatkabfs.com"] [uri "/.env"] [unique_id "amsS6edjDh7oBT6qCsO04QAAAAE"]
[Thu Jul 30 10:01:29.975019 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.179:32674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.akoptimize.gatkabfs.com"] [uri "/.env"] [unique_id "amsS6edjDh7oBT6qCsO04QAAAAE"]
[Thu Jul 30 10:01:30.020235 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/ut.php
[Thu Jul 30 10:01:30.020282 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.089803 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/inde.php
[Thu Jul 30 10:01:30.089847 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.114918 2026] [authz_core:error] [pid 2653473:tid 2653473] [client 52.238.199.152:55676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/error_log
[Thu Jul 30 10:01:30.200719 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/classgoto24.php
[Thu Jul 30 10:01:30.200770 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.272609 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/thh.php
[Thu Jul 30 10:01:30.272654 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.306115 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/fffff.php
[Thu Jul 30 10:01:30.306162 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.339543 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/indo.php
[Thu Jul 30 10:01:30.339603 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.371992 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/fileas.php
[Thu Jul 30 10:01:30.372037 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.406041 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/yellow.php
[Thu Jul 30 10:01:30.406108 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.441452 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wfile.php
[Thu Jul 30 10:01:30.441499 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.473890 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/class20.php
[Thu Jul 30 10:01:30.473938 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.507494 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/build.php
[Thu Jul 30 10:01:30.507541 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.542137 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 10:01:30.542188 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.581494 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/usep.php
[Thu Jul 30 10:01:30.581559 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.614181 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wa.php
[Thu Jul 30 10:01:30.614242 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.646828 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wb.php
[Thu Jul 30 10:01:30.646868 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.681978 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file1.php
[Thu Jul 30 10:01:30.682018 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.756971 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/gmo.php
[Thu Jul 30 10:01:30.757023 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.855241 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 10:01:30.855291 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.891504 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file2.php
[Thu Jul 30 10:01:30.891554 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.929609 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/lv.php
[Thu Jul 30 10:01:30.929673 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:30.962183 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:01:30.962232 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.006550 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 10:01:31.006612 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.064804 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 10:01:31.064849 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.097261 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/pp.php
[Thu Jul 30 10:01:31.097304 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.147718 2026] [core:error] [pid 2653473:tid 2653473] [client 52.238.199.152:55676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:31.147740 2026] [core:error] [pid 2653473:tid 2653473] [client 52.238.199.152:55676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:31.224724 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/geck.php
[Thu Jul 30 10:01:31.224768 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.227582 2026] [security2:error] [pid 2651673:tid 2651673] [client 94.154.43.186:44636] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "akoptimize.co.uk"] [uri "/.env"] [unique_id "amsS62gaDFrAz0TuNXQ48QAAABs"]
[Thu Jul 30 10:01:31.227777 2026] [security2:error] [pid 2651673:tid 2651673] [client 94.154.43.186:44636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "akoptimize.co.uk"] [uri "/.env"] [unique_id "amsS62gaDFrAz0TuNXQ48QAAABs"]
[Thu Jul 30 10:01:31.227979 2026] [security2:error] [pid 2651673:tid 2651673] [client 94.154.43.186:44636] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "akoptimize.co.uk"] [uri "/.env"] [unique_id "amsS62gaDFrAz0TuNXQ48QAAABs"]
[Thu Jul 30 10:01:31.257398 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/gm.php
[Thu Jul 30 10:01:31.257441 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.290729 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file4.php
[Thu Jul 30 10:01:31.290770 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.335676 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/520.php
[Thu Jul 30 10:01:31.335724 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.393082 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file18.php
[Thu Jul 30 10:01:31.393126 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.425507 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/ffile.php
[Thu Jul 30 10:01:31.425548 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.457920 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file7.php
[Thu Jul 30 10:01:31.457965 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.505357 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 10:01:31.505406 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.538215 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/vee.php
[Thu Jul 30 10:01:31.538263 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.570733 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/efile.php
[Thu Jul 30 10:01:31.570779 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.604170 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/afile.php
[Thu Jul 30 10:01:31.604218 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.636612 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 10:01:31.636656 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.674717 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 10:01:31.674762 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.677380 2026] [ssl:error] [pid 2653473:tid 2653473] (EAI 2)Name or service not known: [client 144.76.19.72:18442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:31.677400 2026] [ssl:error] [pid 2653473:tid 2653473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:31.730249 2026] [ssl:error] [pid 2637691:tid 2637691] (EAI 2)Name or service not known: [client 144.76.19.72:18456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:31.730274 2026] [ssl:error] [pid 2637691:tid 2637691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:31.751370 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/enclas.php
[Thu Jul 30 10:01:31.751417 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.784213 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 10:01:31.784257 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.816638 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:31.849380 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 10:01:31.849426 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.881828 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/image.php
[Thu Jul 30 10:01:31.881870 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:31.901460 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:19631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:31.901482 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:19631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:31.914086 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:01:32.006588 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-freya.php
[Thu Jul 30 10:01:32.006648 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.006950 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:42510] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/demo/php.ini"] [unique_id "amsS7BTagygMYv94UJPcFgAAAA4"]
[Thu Jul 30 10:01:32.007328 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:42510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/demo/php.ini"] [unique_id "amsS7BTagygMYv94UJPcFgAAAA4"]
[Thu Jul 30 10:01:32.055599 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/X7x.php
[Thu Jul 30 10:01:32.055652 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.101975 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/admir.php
[Thu Jul 30 10:01:32.102023 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.139171 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/file52.php
[Thu Jul 30 10:01:32.139214 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.197506 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/zde.php
[Thu Jul 30 10:01:32.197554 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.198482 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:42510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS7BTagygMYv94UJPcFgAAAA4"]
[Thu Jul 30 10:01:32.254705 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/wpo.php
[Thu Jul 30 10:01:32.254753 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.315416 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/aj.php
[Thu Jul 30 10:01:32.315459 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.338379 2026] [ssl:error] [pid 2656776:tid 2656776] (70014)End of file found: [client 216.73.216.199:14456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:32.349147 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/opts.php
[Thu Jul 30 10:01:32.349192 2026] [access_compat:error] [pid 2656738:tid 2656738] [client 20.240.254.167:64102] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.448507 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/filer.php
[Thu Jul 30 10:01:32.448553 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.495544 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/lites.php
[Thu Jul 30 10:01:32.495601 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.530132 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/0x.php
[Thu Jul 30 10:01:32.530180 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.569601 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/bless3.php
[Thu Jul 30 10:01:32.569645 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.579250 2026] [security2:error] [pid 2657436:tid 2657436] [client 114.119.153.237:55979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "all4s.co.uk"] [uri "/sitemap-hot-3156636.xml"] [unique_id "amsS7Cp63DTm9InCeAKnLAAAABw"], referer: https://all4s.co.uk/sitemap-hot-3156636.xml
[Thu Jul 30 10:01:32.604043 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/wsd.php
[Thu Jul 30 10:01:32.604106 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.640985 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/f6.php
[Thu Jul 30 10:01:32.641027 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.675911 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/he.php
[Thu Jul 30 10:01:32.675957 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.729892 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/aves.php
[Thu Jul 30 10:01:32.729936 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.769924 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/acme-challenge/about.php
[Thu Jul 30 10:01:32.769966 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.858257 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/gorila.php
[Thu Jul 30 10:01:32.858300 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:32.864767 2026] [core:error] [pid 2656738:tid 2656738] [client 66.249.66.168:36442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:32.864791 2026] [core:error] [pid 2656738:tid 2656738] [client 66.249.66.168:36442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:32.876154 2026] [core:error] [pid 2637691:tid 2637691] (13)Permission denied: [client 216.73.216.199:5223] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1325477.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.aacdba11.tmp
[Thu Jul 30 10:01:32.893194 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/vanta.php
[Thu Jul 30 10:01:32.893244 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.051548 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/sh3ll.php
[Thu Jul 30 10:01:33.051614 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.101498 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/cabs.php
[Thu Jul 30 10:01:33.101559 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.183280 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/filesss.php
[Thu Jul 30 10:01:33.183327 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.225816 2026] [core:error] [pid 2650046:tid 2650046] [client 66.249.64.171:42077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:33.225846 2026] [core:error] [pid 2650046:tid 2650046] [client 66.249.64.171:42077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:33.239489 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-aaa.php
[Thu Jul 30 10:01:33.239536 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.290680 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 10:01:33.290729 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.296211 2026] [authz_core:error] [pid 2651752:tid 2651752] [client 57.141.0.3:39186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:01:33.296829 2026] [authz_core:error] [pid 2651752:tid 2651752] [client 57.141.0.3:39186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:01:33.317479 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:55631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:33.317503 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:55631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:33.326634 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 10:01:33.326675 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.366492 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 10:01:33.366535 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.400969 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/modules
[Thu Jul 30 10:01:33.454219 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/fm.php
[Thu Jul 30 10:01:33.454278 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.486167 2026] [security2:error] [pid 2637691:tid 2637691] [client 216.73.216.199:5223] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-latency-performance/tuned.conf"] [unique_id "amsS7c2-LGO2xP3vg6n5EwAAAEY"]
[Thu Jul 30 10:01:33.486416 2026] [security2:error] [pid 2637691:tid 2637691] [client 216.73.216.199:5223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-latency-performance/tuned.conf"] [unique_id "amsS7c2-LGO2xP3vg6n5EwAAAEY"]
[Thu Jul 30 10:01:33.486616 2026] [security2:error] [pid 2637691:tid 2637691] [client 216.73.216.199:5223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-latency-performance/tuned.conf"] [unique_id "amsS7c2-LGO2xP3vg6n5EwAAAEY"]
[Thu Jul 30 10:01:33.489387 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.php
[Thu Jul 30 10:01:33.489423 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.523402 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:01:33.523448 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.589426 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/lv.php
[Thu Jul 30 10:01:33.589473 2026] [access_compat:error] [pid 2651610:tid 2651610] [client 20.240.254.167:57647] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:01:33.601133 2026] [core:error] [pid 2653915:tid 2653915] [client 66.249.64.171:63710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:33.601172 2026] [core:error] [pid 2653915:tid 2653915] [client 66.249.64.171:63710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:33.788825 2026] [authz_core:error] [pid 2637691:tid 2637691] [client 216.73.216.199:5223] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/interactivity-api/error_log
[Thu Jul 30 10:01:34.327423 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:55671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:34.327452 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:55671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:34.704701 2026] [ssl:error] [pid 2637691:tid 2637691] (70014)End of file found: [client 216.73.216.199:5223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:34.715501 2026] [core:error] [pid 2651741:tid 2651741] [client 66.249.64.171:64297] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:34.715523 2026] [core:error] [pid 2651741:tid 2651741] [client 66.249.64.171:64297] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:34.789100 2026] [ssl:error] [pid 2651607:tid 2651607] (EAI 2)Name or service not known: [client 144.76.19.72:18462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:34.789123 2026] [ssl:error] [pid 2651607:tid 2651607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:34.844783 2026] [ssl:error] [pid 2651755:tid 2651755] (EAI 2)Name or service not known: [client 144.76.19.72:18470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:34.844808 2026] [ssl:error] [pid 2651755:tid 2651755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:35.507874 2026] [security2:error] [pid 2655135:tid 2655135] [client 85.208.96.210:63784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/best-startups-to-work-for-london"] [unique_id "amsS7weNBYST_UjtTFiH-QAAABE"]
[Thu Jul 30 10:01:35.711545 2026] [core:error] [pid 2651607:tid 2651607] [client 66.249.66.8:52291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:35.711570 2026] [core:error] [pid 2651607:tid 2651607] [client 66.249.66.8:52291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:35.931643 2026] [core:error] [pid 2650046:tid 2650046] (13)Permission denied: [client 216.73.216.199:31444] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3506394.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f295d75d.tmp
[Thu Jul 30 10:01:35.967644 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:13522] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env"] [unique_id "amsS7-djDh7oBT6qCsO05AAAAAE"]
[Thu Jul 30 10:01:35.967805 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:13522] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env"] [unique_id "amsS7-djDh7oBT6qCsO05AAAAAE"]
[Thu Jul 30 10:01:36.119292 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:13522] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS7-djDh7oBT6qCsO05AAAAAE"]
[Thu Jul 30 10:01:36.157112 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:13524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.bak"] [unique_id "amsS8CuxlaRmP82WWxXjawAAACc"]
[Thu Jul 30 10:01:36.157322 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:13524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.bak"] [unique_id "amsS8CuxlaRmP82WWxXjawAAACc"]
[Thu Jul 30 10:01:36.162429 2026] [core:error] [pid 2653914:tid 2653914] [client 52.238.199.152:19642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:36.162451 2026] [core:error] [pid 2653914:tid 2653914] [client 52.238.199.152:19642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:36.242157 2026] [ssl:error] [pid 2650046:tid 2650046] (70014)End of file found: [client 216.73.216.199:31444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:36.307176 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:13524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS8CuxlaRmP82WWxXjawAAACc"]
[Thu Jul 30 10:01:36.342734 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:13538] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.dev"] [unique_id "amsS8OdjDh7oBT6qCsO05QAAAAE"]
[Thu Jul 30 10:01:36.342917 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:13538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.dev"] [unique_id "amsS8OdjDh7oBT6qCsO05QAAAAE"]
[Thu Jul 30 10:01:36.483006 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:13538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS8OdjDh7oBT6qCsO05QAAAAE"]
[Thu Jul 30 10:01:36.525528 2026] [security2:error] [pid 2656570:tid 2656570] [client 185.177.72.10:13546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.dist"] [unique_id "amsS8BZOFCxeFQrq_Zj3UQAAAAU"]
[Thu Jul 30 10:01:36.525711 2026] [security2:error] [pid 2656570:tid 2656570] [client 185.177.72.10:13546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.dist"] [unique_id "amsS8BZOFCxeFQrq_Zj3UQAAAAU"]
[Thu Jul 30 10:01:36.537045 2026] [authz_core:error] [pid 2651609:tid 2651609] [client 57.141.0.4:20028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:01:36.537690 2026] [authz_core:error] [pid 2651609:tid 2651609] [client 57.141.0.4:20028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:01:36.683286 2026] [security2:error] [pid 2656570:tid 2656570] [client 185.177.72.10:13546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS8BZOFCxeFQrq_Zj3UQAAAAU"]
[Thu Jul 30 10:01:36.720493 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:13552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.local"] [unique_id "amsS8Dc6pcH3xNdqZAL36AAAAEU"]
[Thu Jul 30 10:01:36.720684 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:13552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deploy/.env.local"] [unique_id "amsS8Dc6pcH3xNdqZAL36AAAAEU"]
[Thu Jul 30 10:01:36.858842 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:13552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS8Dc6pcH3xNdqZAL36AAAAEU"]
[Thu Jul 30 10:01:37.900954 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:18482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:37.900984 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:37.953812 2026] [ssl:error] [pid 2651609:tid 2651609] (EAI 2)Name or service not known: [client 144.76.19.72:18490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:37.953834 2026] [ssl:error] [pid 2651609:tid 2651609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:39.755860 2026] [core:error] [pid 2657476:tid 2657476] [client 66.249.64.170:55141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:39.755893 2026] [core:error] [pid 2657476:tid 2657476] [client 66.249.64.170:55141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:39.799509 2026] [lsapi:error] [pid 2648680:tid 2648680] [client 216.73.216.199:26893] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Drupal.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Drupal.php on line 8\n
[Thu Jul 30 10:01:40.312419 2026] [core:error] [pid 2648680:tid 2648680] [client 66.249.66.167:35313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:40.312445 2026] [core:error] [pid 2648680:tid 2648680] [client 66.249.66.167:35313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:40.517781 2026] [core:error] [pid 2657476:tid 2657476] (13)Permission denied: [client 216.73.216.199:58206] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3719805.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.67f053d7.tmp
[Thu Jul 30 10:01:41.024456 2026] [ssl:error] [pid 2654941:tid 2654941] (EAI 2)Name or service not known: [client 144.76.19.72:34374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:41.024516 2026] [ssl:error] [pid 2654941:tid 2654941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:41.081137 2026] [ssl:error] [pid 2650048:tid 2650048] (EAI 2)Name or service not known: [client 144.76.19.72:34378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:41.081163 2026] [ssl:error] [pid 2650048:tid 2650048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:41.093219 2026] [authz_core:error] [pid 2651752:tid 2651752] [client 57.141.0.59:37958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:01:41.093835 2026] [authz_core:error] [pid 2651752:tid 2651752] [client 57.141.0.59:37958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:01:41.421473 2026] [ssl:error] [pid 2657839:tid 2657839] (70014)End of file found: [client 216.73.216.199:15525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:41.710996 2026] [core:error] [pid 2656776:tid 2656776] [client 52.238.199.152:44438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:41.711017 2026] [core:error] [pid 2656776:tid 2656776] [client 52.238.199.152:44438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:41.722774 2026] [ssl:error] [pid 2657476:tid 2657476] (70014)End of file found: [client 216.73.216.199:58206] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:42.528132 2026] [core:error] [pid 2654941:tid 2654941] [client 52.238.199.152:63537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:42.528157 2026] [core:error] [pid 2654941:tid 2654941] [client 52.238.199.152:63537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:42.631283 2026] [ssl:error] [pid 2651677:tid 2651677] (70014)End of file found: [client 216.73.216.199:63029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:43.100180 2026] [core:error] [pid 2650048:tid 2650048] [client 57.141.0.9:29236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:43.100207 2026] [core:error] [pid 2650048:tid 2650048] [client 57.141.0.9:29236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:43.659317 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:13884] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/deploy/php.ini"] [unique_id "amsS9_ANSd5D324CfbnUPQAAAAc"]
[Thu Jul 30 10:01:43.659674 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:13884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deploy/php.ini"] [unique_id "amsS9_ANSd5D324CfbnUPQAAAAc"]
[Thu Jul 30 10:01:43.804613 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:13884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS9_ANSd5D324CfbnUPQAAAAc"]
[Thu Jul 30 10:01:43.994497 2026] [core:error] [pid 2648183:tid 2648183] [client 52.238.199.152:29844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:43.994525 2026] [core:error] [pid 2648183:tid 2648183] [client 52.238.199.152:29844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:44.134622 2026] [ssl:error] [pid 2641791:tid 2641791] (EAI 2)Name or service not known: [client 144.76.19.72:34394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:44.134660 2026] [ssl:error] [pid 2641791:tid 2641791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:44.187925 2026] [ssl:error] [pid 2651555:tid 2651555] (EAI 2)Name or service not known: [client 144.76.19.72:34400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:44.187968 2026] [ssl:error] [pid 2651555:tid 2651555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:45.090123 2026] [authz_core:error] [pid 2651555:tid 2651555] [client 57.141.0.49:36218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:01:45.090741 2026] [authz_core:error] [pid 2651555:tid 2651555] [client 57.141.0.49:36218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:01:45.468583 2026] [core:error] [pid 2648183:tid 2648183] [client 52.238.199.152:29877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:45.468617 2026] [core:error] [pid 2648183:tid 2648183] [client 52.238.199.152:29877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:45.890625 2026] [core:error] [pid 2656570:tid 2656570] [client 52.238.199.152:44453] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:45.890652 2026] [core:error] [pid 2656570:tid 2656570] [client 52.238.199.152:44453] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:47.217648 2026] [core:error] [pid 2628120:tid 2628120] [client 52.238.199.152:63523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:47.217671 2026] [core:error] [pid 2628120:tid 2628120] [client 52.238.199.152:63523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:47.244639 2026] [ssl:error] [pid 2657476:tid 2657476] (EAI 2)Name or service not known: [client 144.76.19.72:34416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:47.244674 2026] [ssl:error] [pid 2657476:tid 2657476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:47.296782 2026] [ssl:error] [pid 2648680:tid 2648680] (EAI 2)Name or service not known: [client 144.76.19.72:34422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:47.296813 2026] [ssl:error] [pid 2648680:tid 2648680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:47.434647 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:61896] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env"] [unique_id "amsS-3YICBgk62rgMlVJgAAAAD8"]
[Thu Jul 30 10:01:47.434825 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:61896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env"] [unique_id "amsS-3YICBgk62rgMlVJgAAAAD8"]
[Thu Jul 30 10:01:47.473450 2026] [ssl:error] [pid 2641846:tid 2641846] (70014)End of file found: [client 216.73.216.199:44141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:47.576021 2026] [security2:error] [pid 2651750:tid 2651750] [client 185.177.72.10:61896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS-3YICBgk62rgMlVJgAAAAD8"]
[Thu Jul 30 10:01:47.612299 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:61902] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.bak"] [unique_id "amsS-5scAi6piyeNcGN0oQAAACw"]
[Thu Jul 30 10:01:47.612484 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:61902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.bak"] [unique_id "amsS-5scAi6piyeNcGN0oQAAACw"]
[Thu Jul 30 10:01:47.754813 2026] [security2:error] [pid 2648680:tid 2648680] [client 185.177.72.10:61902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS-5scAi6piyeNcGN0oQAAACw"]
[Thu Jul 30 10:01:47.793128 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:61916] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.dev"] [unique_id "amsS-3ClVEbRTOXMCakEogAAACs"]
[Thu Jul 30 10:01:47.793307 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:61916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.dev"] [unique_id "amsS-3ClVEbRTOXMCakEogAAACs"]
[Thu Jul 30 10:01:47.960899 2026] [ssl:error] [pid 2657476:tid 2657476] (70014)End of file found: [client 216.73.216.199:31842] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:48.004464 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:61916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS-3ClVEbRTOXMCakEogAAACs"]
[Thu Jul 30 10:01:48.041323 2026] [security2:error] [pid 2657839:tid 2657839] [client 185.177.72.10:61922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.dist"] [unique_id "amsS_Ho56iuCBO2NPbLJpAAAACU"]
[Thu Jul 30 10:01:48.041527 2026] [security2:error] [pid 2657839:tid 2657839] [client 185.177.72.10:61922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.dist"] [unique_id "amsS_Ho56iuCBO2NPbLJpAAAACU"]
[Thu Jul 30 10:01:48.208293 2026] [authz_core:error] [pid 2651750:tid 2651750] [client 66.249.66.33:39205] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:01:48.210992 2026] [authz_core:error] [pid 2651750:tid 2651750] [client 66.249.66.33:39205] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:01:48.215886 2026] [security2:error] [pid 2657839:tid 2657839] [client 185.177.72.10:61922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS_Ho56iuCBO2NPbLJpAAAACU"]
[Thu Jul 30 10:01:48.250754 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:61936] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.local"] [unique_id "amsS_GgaDFrAz0TuNXQ4-QAAABs"]
[Thu Jul 30 10:01:48.250940 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:61936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deployment/.env.local"] [unique_id "amsS_GgaDFrAz0TuNXQ4-QAAABs"]
[Thu Jul 30 10:01:48.369365 2026] [ssl:error] [pid 2654843:tid 2654843] (70014)End of file found: [client 216.73.216.199:35419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:48.392029 2026] [authz_core:error] [pid 2651677:tid 2651677] [client 51.120.70.186:43078] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 10:01:48.393164 2026] [security2:error] [pid 2651673:tid 2651673] [client 185.177.72.10:61936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsS_GgaDFrAz0TuNXQ4-QAAABs"]
[Thu Jul 30 10:01:50.370821 2026] [ssl:error] [pid 2653302:tid 2653302] (EAI 2)Name or service not known: [client 144.76.19.72:21530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:50.370854 2026] [ssl:error] [pid 2653302:tid 2653302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:50.425023 2026] [ssl:error] [pid 2648680:tid 2648680] (EAI 2)Name or service not known: [client 144.76.19.72:21532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:50.425057 2026] [ssl:error] [pid 2648680:tid 2648680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:51.213587 2026] [security2:error] [pid 2658607:tid 2658607] [client 51.75.236.131:17682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/robots.txt"] [unique_id "amsS_7z_CaPKfDIWaVe7JAAAAAM"]
[Thu Jul 30 10:01:52.364425 2026] [security2:error] [pid 2658713:tid 2658713] [client 92.222.108.120:22598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsTAIB2kAk0sUSRruca8QAAABg"]
[Thu Jul 30 10:01:53.511542 2026] [ssl:error] [pid 2657476:tid 2657476] (EAI 2)Name or service not known: [client 144.76.19.72:21540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:53.511573 2026] [ssl:error] [pid 2657476:tid 2657476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:53.567420 2026] [ssl:error] [pid 2653911:tid 2653911] (EAI 2)Name or service not known: [client 144.76.19.72:21542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:53.567465 2026] [ssl:error] [pid 2653911:tid 2653911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:54.174277 2026] [core:error] [pid 2650047:tid 2650047] [client 52.238.199.152:57177] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:54.174320 2026] [core:error] [pid 2650047:tid 2650047] [client 52.238.199.152:57177] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:55.025254 2026] [core:error] [pid 2651752:tid 2651752] (13)Permission denied: [client 216.73.216.199:1820] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/close_delay
[Thu Jul 30 10:01:55.133266 2026] [core:error] [pid 2653914:tid 2653914] [client 66.249.64.170:35886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:55.133294 2026] [core:error] [pid 2653914:tid 2653914] [client 66.249.64.170:35886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:55.498388 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:11314] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/deployment/php.ini"] [unique_id "amsTA_ANSd5D324CfbnUTgAAAAc"]
[Thu Jul 30 10:01:55.498819 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:11314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/deployment/php.ini"] [unique_id "amsTA_ANSd5D324CfbnUTgAAAAc"]
[Thu Jul 30 10:01:55.639985 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:11314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTA_ANSd5D324CfbnUTgAAAAc"]
[Thu Jul 30 10:01:55.929777 2026] [ssl:error] [pid 2651752:tid 2651752] (70014)End of file found: [client 216.73.216.199:1820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:56.418000 2026] [ssl:error] [pid 2656695:tid 2656695] (70014)End of file found: [client 216.73.216.199:10806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:56.621270 2026] [ssl:error] [pid 2653914:tid 2653914] (EAI 2)Name or service not known: [client 144.76.19.72:21552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:56.621305 2026] [ssl:error] [pid 2653914:tid 2653914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:56.679708 2026] [ssl:error] [pid 2651745:tid 2651745] (EAI 2)Name or service not known: [client 144.76.19.72:21558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:56.679737 2026] [ssl:error] [pid 2651745:tid 2651745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:56.734611 2026] [ssl:error] [pid 2656738:tid 2656738] (70014)End of file found: [client 216.73.216.199:22538] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:56.809776 2026] [authz_core:error] [pid 2650047:tid 2650047] [client 51.120.70.186:54140] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 10:01:57.294098 2026] [core:error] [pid 2656569:tid 2656569] [client 52.238.199.152:64128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:57.294127 2026] [core:error] [pid 2656569:tid 2656569] [client 52.238.199.152:64128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:57.946350 2026] [core:error] [pid 2651610:tid 2651610] [client 52.238.199.152:29879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:57.946374 2026] [core:error] [pid 2651610:tid 2651610] [client 52.238.199.152:29879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:58.894734 2026] [core:error] [pid 2648680:tid 2648680] [client 52.238.199.152:29881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:58.894762 2026] [core:error] [pid 2648680:tid 2648680] [client 52.238.199.152:29881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:58.896026 2026] [ssl:error] [pid 2657475:tid 2657475] (70014)End of file found: [client 216.73.216.199:10189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:59.398362 2026] [ssl:error] [pid 2648183:tid 2648183] (70014)End of file found: [client 216.73.216.199:10562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:01:59.689870 2026] [core:error] [pid 2656569:tid 2656569] (13)Permission denied: [client 216.73.216.199:39086] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_pending_reservation/slabs_cpu_partial
[Thu Jul 30 10:01:59.736801 2026] [ssl:error] [pid 2658607:tid 2658607] (EAI 2)Name or service not known: [client 144.76.19.72:42466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:59.736854 2026] [ssl:error] [pid 2658607:tid 2658607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:01:59.773662 2026] [core:error] [pid 2656776:tid 2656776] [client 52.238.199.152:57181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:59.773689 2026] [core:error] [pid 2656776:tid 2656776] [client 52.238.199.152:57181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:01:59.793225 2026] [ssl:error] [pid 2653914:tid 2653914] (EAI 2)Name or service not known: [client 144.76.19.72:42482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:01:59.793252 2026] [ssl:error] [pid 2653914:tid 2653914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:00.030473 2026] [security2:error] [pid 2657839:tid 2657839] [client 185.177.72.10:11494] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.bak"] [unique_id "amsTCHo56iuCBO2NPbLJqQAAACU"]
[Thu Jul 30 10:02:00.030666 2026] [security2:error] [pid 2657839:tid 2657839] [client 185.177.72.10:11494] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.bak"] [unique_id "amsTCHo56iuCBO2NPbLJqQAAACU"]
[Thu Jul 30 10:02:00.230428 2026] [security2:error] [pid 2657839:tid 2657839] [client 185.177.72.10:11494] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCHo56iuCBO2NPbLJqQAAACU"]
[Thu Jul 30 10:02:00.265002 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:11496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.dev"] [unique_id "amsTCDeUUh8HPzZW5ohFugAAACA"]
[Thu Jul 30 10:02:00.265207 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:11496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.dev"] [unique_id "amsTCDeUUh8HPzZW5ohFugAAACA"]
[Thu Jul 30 10:02:00.405949 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:11496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCDeUUh8HPzZW5ohFugAAACA"]
[Thu Jul 30 10:02:00.441913 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:11506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.dist"] [unique_id "amsTCODqQN_GEwmvH4Zt9QAAACY"]
[Thu Jul 30 10:02:00.442155 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:11506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.dist"] [unique_id "amsTCODqQN_GEwmvH4Zt9QAAACY"]
[Thu Jul 30 10:02:00.581267 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:11506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCODqQN_GEwmvH4Zt9QAAACY"]
[Thu Jul 30 10:02:00.620283 2026] [security2:error] [pid 2657436:tid 2657436] [client 185.177.72.10:11510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.local"] [unique_id "amsTCCp63DTm9InCeAKnOQAAABw"]
[Thu Jul 30 10:02:00.620507 2026] [security2:error] [pid 2657436:tid 2657436] [client 185.177.72.10:11510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.local"] [unique_id "amsTCCp63DTm9InCeAKnOQAAABw"]
[Thu Jul 30 10:02:00.823417 2026] [security2:error] [pid 2657436:tid 2657436] [client 185.177.72.10:11510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCCp63DTm9InCeAKnOQAAABw"]
[Thu Jul 30 10:02:00.861050 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:11524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.production"] [unique_id "amsTCFoNhnDns3iJW-XSxwAAAB8"]
[Thu Jul 30 10:02:00.861250 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:11524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.production"] [unique_id "amsTCFoNhnDns3iJW-XSxwAAAB8"]
[Thu Jul 30 10:02:01.023051 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:11524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCFoNhnDns3iJW-XSxwAAAB8"]
[Thu Jul 30 10:02:01.061087 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:11528] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.staging"] [unique_id "amsTCTeUUh8HPzZW5ohFuwAAACA"]
[Thu Jul 30 10:02:01.061271 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:11528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/.env.staging"] [unique_id "amsTCTeUUh8HPzZW5ohFuwAAACA"]
[Thu Jul 30 10:02:01.229721 2026] [core:error] [pid 2656777:tid 2656777] [client 52.238.199.152:44083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:01.229749 2026] [core:error] [pid 2656777:tid 2656777] [client 52.238.199.152:44083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:01.287352 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:11528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCTeUUh8HPzZW5ohFuwAAACA"]
[Thu Jul 30 10:02:01.543797 2026] [security2:error] [pid 2651752:tid 2651752] [client 185.177.72.10:11538] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /dev/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/.git/config"] [unique_id "amsTCUH94ms7jJb2kBXYYQAAAEA"]
[Thu Jul 30 10:02:01.544023 2026] [security2:error] [pid 2651752:tid 2651752] [client 185.177.72.10:11538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/.git/config"] [unique_id "amsTCUH94ms7jJb2kBXYYQAAAEA"]
[Thu Jul 30 10:02:01.694751 2026] [security2:error] [pid 2651752:tid 2651752] [client 185.177.72.10:11538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCUH94ms7jJb2kBXYYQAAAEA"]
[Thu Jul 30 10:02:02.395671 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:11564] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amsTCuDqQN_GEwmvH4Zt9wAAACY"]
[Thu Jul 30 10:02:02.396039 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:11564] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/App_Config/ConnectionStrings.config"] [unique_id "amsTCuDqQN_GEwmvH4Zt9wAAACY"]
[Thu Jul 30 10:02:02.552580 2026] [security2:error] [pid 2651744:tid 2651744] [client 185.177.72.10:11564] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCuDqQN_GEwmvH4Zt9wAAACY"]
[Thu Jul 30 10:02:02.602122 2026] [core:error] [pid 2656695:tid 2656695] [client 52.238.199.152:64147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:02.602149 2026] [core:error] [pid 2656695:tid 2656695] [client 52.238.199.152:64147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:02.773759 2026] [security2:error] [pid 2651752:tid 2651752] [client 185.177.72.10:11578] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dev/api-config.ini"] [unique_id "amsTCkH94ms7jJb2kBXYYgAAAEA"]
[Thu Jul 30 10:02:02.774200 2026] [security2:error] [pid 2651752:tid 2651752] [client 185.177.72.10:11578] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/api-config.ini"] [unique_id "amsTCkH94ms7jJb2kBXYYgAAAEA"]
[Thu Jul 30 10:02:02.855575 2026] [ssl:error] [pid 2651677:tid 2651677] (EAI 2)Name or service not known: [client 144.76.19.72:42498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:02.855620 2026] [ssl:error] [pid 2651677:tid 2651677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:02.908313 2026] [ssl:error] [pid 2648680:tid 2648680] (EAI 2)Name or service not known: [client 144.76.19.72:42504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:02.908352 2026] [ssl:error] [pid 2648680:tid 2648680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:02.915346 2026] [security2:error] [pid 2651752:tid 2651752] [client 185.177.72.10:11578] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTCkH94ms7jJb2kBXYYgAAAEA"]
[Thu Jul 30 10:02:04.145423 2026] [core:error] [pid 2651744:tid 2651744] [client 52.238.199.152:57166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:04.145451 2026] [core:error] [pid 2651744:tid 2651744] [client 52.238.199.152:57166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:04.317802 2026] [ssl:error] [pid 2656569:tid 2656569] (70014)End of file found: [client 216.73.216.199:39086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:05.390438 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:63530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:05.390477 2026] [core:error] [pid 2651673:tid 2651673] [client 52.238.199.152:63530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:05.778677 2026] [authz_core:error] [pid 2656775:tid 2656775] [client 40.77.167.24:3804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:02:05.779298 2026] [authz_core:error] [pid 2656775:tid 2656775] [client 40.77.167.24:3804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:02:05.962878 2026] [ssl:error] [pid 2651744:tid 2651744] (EAI 2)Name or service not known: [client 144.76.19.72:42506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:05.962900 2026] [ssl:error] [pid 2651744:tid 2651744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:06.016179 2026] [ssl:error] [pid 2658607:tid 2658607] (EAI 2)Name or service not known: [client 144.76.19.72:42522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:06.016223 2026] [ssl:error] [pid 2658607:tid 2658607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:06.697507 2026] [core:error] [pid 2648183:tid 2648183] [client 52.238.199.152:44067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:06.697532 2026] [core:error] [pid 2648183:tid 2648183] [client 52.238.199.152:44067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:07.934053 2026] [ssl:error] [pid 2656777:tid 2656777] (70014)End of file found: [client 216.73.216.199:39143] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:08.996178 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:62688] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dev/laravel.log"] [unique_id "amsTEFbY9mNS7d0SJ78iLAAAABQ"]
[Thu Jul 30 10:02:08.996609 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:62688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/laravel.log"] [unique_id "amsTEFbY9mNS7d0SJ78iLAAAABQ"]
[Thu Jul 30 10:02:09.071128 2026] [ssl:error] [pid 2651744:tid 2651744] (EAI 2)Name or service not known: [client 144.76.19.72:42528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:09.071155 2026] [ssl:error] [pid 2651744:tid 2651744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:09.124414 2026] [ssl:error] [pid 2657871:tid 2657871] (EAI 2)Name or service not known: [client 144.76.19.72:42542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:09.124457 2026] [ssl:error] [pid 2657871:tid 2657871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:09.176615 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:62688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTEFbY9mNS7d0SJ78iLAAAABQ"]
[Thu Jul 30 10:02:09.257254 2026] [security2:error] [pid 2656738:tid 2656738] [client 85.208.96.193:65288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/02/26/selling-microsoft/"] [unique_id "amsTEZ3lo8mADIj4aR-YAgAAAA8"]
[Thu Jul 30 10:02:09.440007 2026] [ssl:error] [pid 2657665:tid 2657665] (70014)End of file found: [client 216.73.216.199:36345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:10.141171 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:62728] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dev/php.ini"] [unique_id "amsTEhotHL6VKbxpSwcy-gAAAD4"]
[Thu Jul 30 10:02:10.141494 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:62728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/php.ini"] [unique_id "amsTEhotHL6VKbxpSwcy-gAAAD4"]
[Thu Jul 30 10:02:10.282329 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:62728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTEhotHL6VKbxpSwcy-gAAAD4"]
[Thu Jul 30 10:02:10.337338 2026] [ssl:error] [pid 2653911:tid 2653911] (70014)End of file found: [client 216.73.216.199:8120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:12.178963 2026] [ssl:error] [pid 2654941:tid 2654941] (EAI 2)Name or service not known: [client 144.76.19.72:20292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:12.179008 2026] [ssl:error] [pid 2654941:tid 2654941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:12.207237 2026] [core:error] [pid 2651749:tid 2651749] [client 66.249.64.172:60792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:12.207268 2026] [core:error] [pid 2651749:tid 2651749] [client 66.249.64.172:60792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:12.232160 2026] [ssl:error] [pid 2651673:tid 2651673] (EAI 2)Name or service not known: [client 144.76.19.72:20308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:12.232192 2026] [ssl:error] [pid 2651673:tid 2651673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:12.306422 2026] [security2:error] [pid 2657868:tid 2657868] [client 114.119.159.8:41849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amsTFJ8pyQCyh-5gXHG7ogAAACg"], referer: https://jonathanmeyerart.co.uk/
[Thu Jul 30 10:02:13.061633 2026] [security2:error] [pid 2651673:tid 2651673] [client 47.128.125.142:51248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/11/10/will-mesh-kick-start-information-rights-management/"] [unique_id "amsTFWgaDFrAz0TuNXQ5AwAAABs"]
[Thu Jul 30 10:02:13.182713 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:62866] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/dev/web.config"] [unique_id "amsTFTXenJQOMzHiNu5RRAAAABI"]
[Thu Jul 30 10:02:13.182960 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:62866] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /dev/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dev/web.config"] [unique_id "amsTFTXenJQOMzHiNu5RRAAAABI"]
[Thu Jul 30 10:02:13.183136 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:62866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dev/web.config"] [unique_id "amsTFTXenJQOMzHiNu5RRAAAABI"]
[Thu Jul 30 10:02:13.323395 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:62866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTFTXenJQOMzHiNu5RRAAAABI"]
[Thu Jul 30 10:02:13.931883 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:62896] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/develop/.env.local"] [unique_id "amsTFfMRvA5UKQZZ7j6dGgAAABY"]
[Thu Jul 30 10:02:13.932084 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:62896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/develop/.env.local"] [unique_id "amsTFfMRvA5UKQZZ7j6dGgAAABY"]
[Thu Jul 30 10:02:14.153240 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:62896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTFfMRvA5UKQZZ7j6dGgAAABY"]
[Thu Jul 30 10:02:14.187949 2026] [security2:error] [pid 2657868:tid 2657868] [client 185.177.72.10:62908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/develop/.env.production"] [unique_id "amsTFp8pyQCyh-5gXHG7pAAAACg"]
[Thu Jul 30 10:02:14.188156 2026] [security2:error] [pid 2657868:tid 2657868] [client 185.177.72.10:62908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/develop/.env.production"] [unique_id "amsTFp8pyQCyh-5gXHG7pAAAACg"]
[Thu Jul 30 10:02:14.343437 2026] [security2:error] [pid 2657868:tid 2657868] [client 185.177.72.10:62908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTFp8pyQCyh-5gXHG7pAAAACg"]
[Thu Jul 30 10:02:14.380260 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:62918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/develop/.env.staging"] [unique_id "amsTFjdnWhdb5n_RrTLG-QAAADg"]
[Thu Jul 30 10:02:14.380439 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:62918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/develop/.env.staging"] [unique_id "amsTFjdnWhdb5n_RrTLG-QAAADg"]
[Thu Jul 30 10:02:14.521122 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:62918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTFjdnWhdb5n_RrTLG-QAAADg"]
[Thu Jul 30 10:02:14.709494 2026] [core:error] [pid 2651749:tid 2651749] (13)Permission denied: [client 216.73.216.199:8808] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCPv6/slabs
[Thu Jul 30 10:02:14.900767 2026] [authz_core:error] [pid 2656777:tid 2656777] [client 66.249.66.33:39232] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:02:14.903402 2026] [authz_core:error] [pid 2656777:tid 2656777] [client 66.249.66.33:39232] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:02:14.934243 2026] [core:error] [pid 2656570:tid 2656570] [client 52.238.199.152:19439] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:14.934266 2026] [core:error] [pid 2656570:tid 2656570] [client 52.238.199.152:19439] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:15.139809 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:9776] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env"] [unique_id "amsTFzdnWhdb5n_RrTLG-gAAADg"]
[Thu Jul 30 10:02:15.140046 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:9776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env"] [unique_id "amsTFzdnWhdb5n_RrTLG-gAAADg"]
[Thu Jul 30 10:02:15.279426 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:9776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTFzdnWhdb5n_RrTLG-gAAADg"]
[Thu Jul 30 10:02:15.311645 2026] [ssl:error] [pid 2651741:tid 2651741] (EAI 2)Name or service not known: [client 144.76.19.72:20322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:15.311699 2026] [ssl:error] [pid 2651741:tid 2651741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:15.313534 2026] [security2:error] [pid 2651609:tid 2651609] [client 185.177.72.10:9792] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.bak"] [unique_id "amsTF3wjqb36bSo_KiGVQAAAAAw"]
[Thu Jul 30 10:02:15.313754 2026] [security2:error] [pid 2651609:tid 2651609] [client 185.177.72.10:9792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.bak"] [unique_id "amsTF3wjqb36bSo_KiGVQAAAAAw"]
[Thu Jul 30 10:02:15.367702 2026] [ssl:error] [pid 2654941:tid 2654941] (EAI 2)Name or service not known: [client 144.76.19.72:20330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:15.367747 2026] [ssl:error] [pid 2654941:tid 2654941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:15.454003 2026] [security2:error] [pid 2651609:tid 2651609] [client 185.177.72.10:9792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTF3wjqb36bSo_KiGVQAAAAAw"]
[Thu Jul 30 10:02:15.458549 2026] [ssl:error] [pid 2651749:tid 2651749] (70014)End of file found: [client 216.73.216.199:8808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:15.486697 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:9798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.dev"] [unique_id "amsTF_ANSd5D324CfbnUWQAAAAc"]
[Thu Jul 30 10:02:15.486888 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:9798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.dev"] [unique_id "amsTF_ANSd5D324CfbnUWQAAAAc"]
[Thu Jul 30 10:02:15.804848 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:9798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTF_ANSd5D324CfbnUWQAAAAc"]
[Thu Jul 30 10:02:15.838849 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:9808] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.dist"] [unique_id "amsTF8rVQNVyV8AakLOgZwAAABA"]
[Thu Jul 30 10:02:15.839114 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:9808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.dist"] [unique_id "amsTF8rVQNVyV8AakLOgZwAAABA"]
[Thu Jul 30 10:02:15.894835 2026] [core:error] [pid 2651741:tid 2651741] [client 52.238.199.152:19990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:15.894863 2026] [core:error] [pid 2651741:tid 2651741] [client 52.238.199.152:19990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:15.980731 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:9808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTF8rVQNVyV8AakLOgZwAAABA"]
[Thu Jul 30 10:02:16.020333 2026] [security2:error] [pid 2651609:tid 2651609] [client 185.177.72.10:9812] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.local"] [unique_id "amsTGHwjqb36bSo_KiGVQQAAAAw"]
[Thu Jul 30 10:02:16.020576 2026] [security2:error] [pid 2651609:tid 2651609] [client 185.177.72.10:9812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/developer/.env.local"] [unique_id "amsTGHwjqb36bSo_KiGVQQAAAAw"]
[Thu Jul 30 10:02:16.061268 2026] [core:error] [pid 2650048:tid 2650048] (13)Permission denied: [client 216.73.216.199:42271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/named.conf.cache
[Thu Jul 30 10:02:16.160689 2026] [security2:error] [pid 2651609:tid 2651609] [client 185.177.72.10:9812] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTGHwjqb36bSo_KiGVQQAAAAw"]
[Thu Jul 30 10:02:16.911762 2026] [core:error] [pid 2653473:tid 2653473] [client 66.249.64.170:56905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:16.911812 2026] [core:error] [pid 2653473:tid 2653473] [client 66.249.64.170:56905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:16.964744 2026] [core:error] [pid 2650048:tid 2650048] (13)Permission denied: [client 216.73.216.199:42271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-128/min_partial
[Thu Jul 30 10:02:17.220317 2026] [core:error] [pid 2651607:tid 2651607] [client 52.238.199.152:19789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:17.220344 2026] [core:error] [pid 2651607:tid 2651607] [client 52.238.199.152:19789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:17.819110 2026] [core:error] [pid 2653914:tid 2653914] [client 52.238.199.152:29847] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:17.819137 2026] [core:error] [pid 2653914:tid 2653914] [client 52.238.199.152:29847] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:17.987861 2026] [core:error] [pid 2651677:tid 2651677] [client 66.249.64.171:43725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:17.987886 2026] [core:error] [pid 2651677:tid 2651677] [client 66.249.64.171:43725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:18.422566 2026] [ssl:error] [pid 2651755:tid 2651755] (EAI 2)Name or service not known: [client 144.76.19.72:20334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:18.422611 2026] [ssl:error] [pid 2651755:tid 2651755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:18.475748 2026] [ssl:error] [pid 2656695:tid 2656695] (EAI 2)Name or service not known: [client 144.76.19.72:20348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:18.475798 2026] [ssl:error] [pid 2656695:tid 2656695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:18.773279 2026] [core:error] [pid 2650048:tid 2650048] (13)Permission denied: [client 216.73.216.199:42271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tw_sock_TCP/min_partial
[Thu Jul 30 10:02:19.165074 2026] [core:error] [pid 2653914:tid 2653914] [client 52.238.199.152:47524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:19.165102 2026] [core:error] [pid 2653914:tid 2653914] [client 52.238.199.152:47524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:19.674644 2026] [core:error] [pid 2650048:tid 2650048] (13)Permission denied: [client 216.73.216.199:42271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-128/order
[Thu Jul 30 10:02:19.954503 2026] [core:error] [pid 2653473:tid 2653473] [client 52.238.199.152:29846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:19.954539 2026] [core:error] [pid 2653473:tid 2653473] [client 52.238.199.152:29846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:20.276792 2026] [ssl:error] [pid 2650048:tid 2650048] (70014)End of file found: [client 216.73.216.199:42271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:20.283952 2026] [security2:error] [pid 2659899:tid 2659899] [client 43.164.1.211:48794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/test.php"] [unique_id "amsTHGQFU-ToQAoCJ-FcgwAAAAY"]
[Thu Jul 30 10:02:20.328444 2026] [security2:error] [pid 2654941:tid 2654941] [client 101.32.52.164:54048] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "cssystems.co.uk"] [uri "/"] [unique_id "amsTHMrVQNVyV8AakLOgbAAAABA"], referer: http://cssystems.co.uk
[Thu Jul 30 10:02:20.676341 2026] [core:error] [pid 2656775:tid 2656775] [client 52.238.199.152:19434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:20.676379 2026] [core:error] [pid 2656775:tid 2656775] [client 52.238.199.152:19434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:21.179196 2026] [core:error] [pid 2648183:tid 2648183] (13)Permission denied: [client 216.73.216.199:29497] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS3/uartclk
[Thu Jul 30 10:02:21.531663 2026] [ssl:error] [pid 2656777:tid 2656777] (EAI 2)Name or service not known: [client 144.76.19.72:29514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:21.531692 2026] [ssl:error] [pid 2656777:tid 2656777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:21.585891 2026] [ssl:error] [pid 2653911:tid 2653911] (EAI 2)Name or service not known: [client 144.76.19.72:29518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:21.585938 2026] [ssl:error] [pid 2653911:tid 2653911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:22.112899 2026] [core:error] [pid 2656777:tid 2656777] [client 52.238.199.152:44047] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:22.112926 2026] [core:error] [pid 2656777:tid 2656777] [client 52.238.199.152:44047] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:22.603060 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:10112] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/developer/php.ini"] [unique_id "amsTHhTagygMYv94UJPcMAAAAA4"]
[Thu Jul 30 10:02:22.603460 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:10112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/developer/php.ini"] [unique_id "amsTHhTagygMYv94UJPcMAAAAA4"]
[Thu Jul 30 10:02:22.729815 2026] [security2:error] [pid 2656738:tid 2656738] [client 122.183.42.174:21072] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTHp3lo8mADIj4aR-YCgAAAA8"]
[Thu Jul 30 10:02:22.729907 2026] [security2:error] [pid 2656738:tid 2656738] [client 122.183.42.174:21072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTHp3lo8mADIj4aR-YCgAAAA8"]
[Thu Jul 30 10:02:22.730310 2026] [security2:error] [pid 2656738:tid 2656738] [client 122.183.42.174:21072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTHp3lo8mADIj4aR-YCgAAAA8"]
[Thu Jul 30 10:02:22.743280 2026] [security2:error] [pid 2653473:tid 2653473] [client 185.177.72.10:10112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTHhTagygMYv94UJPcMAAAAA4"]
[Thu Jul 30 10:02:23.588883 2026] [ssl:error] [pid 2648183:tid 2648183] (70014)End of file found: [client 216.73.216.199:29497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:24.189926 2026] [security2:error] [pid 2656570:tid 2656570] [client 216.73.216.199:30035] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/protected.d/setup.conf"] [unique_id "amsTIBZOFCxeFQrq_Zj3ZgAAAAU"]
[Thu Jul 30 10:02:24.190234 2026] [security2:error] [pid 2656570:tid 2656570] [client 216.73.216.199:30035] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/protected.d/setup.conf"] [unique_id "amsTIBZOFCxeFQrq_Zj3ZgAAAAU"]
[Thu Jul 30 10:02:24.190456 2026] [security2:error] [pid 2656570:tid 2656570] [client 216.73.216.199:30035] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/protected.d/setup.conf"] [unique_id "amsTIBZOFCxeFQrq_Zj3ZgAAAAU"]
[Thu Jul 30 10:02:24.569872 2026] [core:error] [pid 2651610:tid 2651610] [client 52.238.199.152:19569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:24.569901 2026] [core:error] [pid 2651610:tid 2651610] [client 52.238.199.152:19569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:24.638007 2026] [ssl:error] [pid 2658607:tid 2658607] (EAI 2)Name or service not known: [client 144.76.19.72:29522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:24.638044 2026] [ssl:error] [pid 2658607:tid 2658607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:24.690146 2026] [ssl:error] [pid 2660126:tid 2660126] (EAI 2)Name or service not known: [client 144.76.19.72:29538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:24.690191 2026] [ssl:error] [pid 2660126:tid 2660126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:25.523914 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:48904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:25.523940 2026] [core:error] [pid 2650046:tid 2650046] [client 52.238.199.152:48904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:26.187958 2026] [security2:error] [pid 2660127:tid 2660127] [client 144.124.192.15:13371] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTIlaGIShPGr2lSQLufQAAABM"]
[Thu Jul 30 10:02:26.188013 2026] [security2:error] [pid 2660127:tid 2660127] [client 144.124.192.15:13371] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTIlaGIShPGr2lSQLufQAAABM"]
[Thu Jul 30 10:02:26.188292 2026] [security2:error] [pid 2660127:tid 2660127] [client 144.124.192.15:13371] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTIlaGIShPGr2lSQLufQAAABM"]
[Thu Jul 30 10:02:26.424057 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:16442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/developerslv/.env"] [unique_id "amsTIrXZCFa7ftwinVV4IgAAADc"]
[Thu Jul 30 10:02:26.424253 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:16442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/developerslv/.env"] [unique_id "amsTIrXZCFa7ftwinVV4IgAAADc"]
[Thu Jul 30 10:02:26.565860 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:16442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTIrXZCFa7ftwinVV4IgAAADc"]
[Thu Jul 30 10:02:26.598682 2026] [ssl:error] [pid 2656570:tid 2656570] (70014)End of file found: [client 216.73.216.199:30035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:26.602279 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:16450] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.bak"] [unique_id "amsTIjvxQELplpHJCGhLBwAAAAQ"]
[Thu Jul 30 10:02:26.602449 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:16450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.bak"] [unique_id "amsTIjvxQELplpHJCGhLBwAAAAQ"]
[Thu Jul 30 10:02:26.742965 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:16450] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTIjvxQELplpHJCGhLBwAAAAQ"]
[Thu Jul 30 10:02:26.778607 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:16466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.dev"] [unique_id "amsTIrXZCFa7ftwinVV4IwAAADc"]
[Thu Jul 30 10:02:26.778793 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:16466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.dev"] [unique_id "amsTIrXZCFa7ftwinVV4IwAAADc"]
[Thu Jul 30 10:02:26.929371 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:16466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTIrXZCFa7ftwinVV4IwAAADc"]
[Thu Jul 30 10:02:26.965772 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:16472] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.dist"] [unique_id "amsTIudjDh7oBT6qCsO09gAAAAE"]
[Thu Jul 30 10:02:26.966016 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:16472] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.dist"] [unique_id "amsTIudjDh7oBT6qCsO09gAAAAE"]
[Thu Jul 30 10:02:27.202503 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:16472] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTIudjDh7oBT6qCsO09gAAAAE"]
[Thu Jul 30 10:02:27.239176 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:16482] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.local"] [unique_id "amsTIxotHL6VKbxpSwczCAAAAD4"]
[Thu Jul 30 10:02:27.239374 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:16482] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.local"] [unique_id "amsTIxotHL6VKbxpSwczCAAAAD4"]
[Thu Jul 30 10:02:27.446999 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:16482] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTIxotHL6VKbxpSwczCAAAAD4"]
[Thu Jul 30 10:02:27.483836 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:16498] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.production"] [unique_id "amsTIzeUUh8HPzZW5ohFygAAACA"]
[Thu Jul 30 10:02:27.484091 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:16498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.production"] [unique_id "amsTIzeUUh8HPzZW5ohFygAAACA"]
[Thu Jul 30 10:02:27.623543 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:16498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTIzeUUh8HPzZW5ohFygAAACA"]
[Thu Jul 30 10:02:27.659299 2026] [security2:error] [pid 2660127:tid 2660127] [client 185.177.72.10:16514] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.staging"] [unique_id "amsTI1aGIShPGr2lSQLufwAAABM"]
[Thu Jul 30 10:02:27.659524 2026] [security2:error] [pid 2660127:tid 2660127] [client 185.177.72.10:16514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/development/.env.staging"] [unique_id "amsTI1aGIShPGr2lSQLufwAAABM"]
[Thu Jul 30 10:02:27.751671 2026] [ssl:error] [pid 2651749:tid 2651749] (EAI 2)Name or service not known: [client 144.76.19.72:29544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:27.751698 2026] [ssl:error] [pid 2651749:tid 2651749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:27.806399 2026] [ssl:error] [pid 2657868:tid 2657868] (EAI 2)Name or service not known: [client 144.76.19.72:29550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:27.806430 2026] [ssl:error] [pid 2657868:tid 2657868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:27.826890 2026] [security2:error] [pid 2660127:tid 2660127] [client 185.177.72.10:16514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTI1aGIShPGr2lSQLufwAAABM"]
[Thu Jul 30 10:02:28.014028 2026] [ssl:error] [pid 2660226:tid 2660226] (70014)End of file found: [client 216.73.216.199:23113] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:29.509696 2026] [authz_core:error] [pid 2656695:tid 2656695] [client 51.120.70.186:34446] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 10:02:29.518108 2026] [ssl:error] [pid 2648183:tid 2648183] (70014)End of file found: [client 216.73.216.199:40293] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:30.863217 2026] [ssl:error] [pid 2657871:tid 2657871] (EAI 2)Name or service not known: [client 144.76.19.72:53126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:30.863247 2026] [ssl:error] [pid 2657871:tid 2657871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:30.916206 2026] [ssl:error] [pid 2658607:tid 2658607] (EAI 2)Name or service not known: [client 144.76.19.72:53130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:30.916248 2026] [ssl:error] [pid 2658607:tid 2658607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:31.671098 2026] [security2:error] [pid 2657476:tid 2657476] [client 114.119.135.136:64461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~103,15/request_format~html"] [unique_id "amsTJ8qaWt419_qS7Q22CwAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~103,15,18/request_format~html
[Thu Jul 30 10:02:31.953343 2026] [core:crit] [pid 2651607:tid 2651607] (13)Permission denied: [client 66.132.224.89:44620] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 10:02:32.603286 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.191.171.16:38412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "karenthomasjewellery.co.uk"] [uri "/robots.txt"] [unique_id "amsTKFbY9mNS7d0SJ78iOAAAABQ"]
[Thu Jul 30 10:02:32.671241 2026] [security2:error] [pid 2650048:tid 2650048] [client 114.119.135.136:64477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~103,15/request_format~html"] [unique_id "amsTKANdLgvGIHel4alY9gAAADo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~103,15,18/request_format~html
[Thu Jul 30 10:02:32.844726 2026] [ssl:error] [pid 2657871:tid 2657871] (70014)End of file found: [client 216.73.216.199:51465] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:33.135949 2026] [security2:error] [pid 2659899:tid 2659899] [client 85.208.96.206:31524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "karenthomasjewellery.co.uk"] [uri "/index.htm"] [unique_id "amsTKWQFU-ToQAoCJ-FckAAAAAY"]
[Thu Jul 30 10:02:33.971939 2026] [ssl:error] [pid 2651607:tid 2651607] (EAI 2)Name or service not known: [client 144.76.19.72:53132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:33.971965 2026] [ssl:error] [pid 2651607:tid 2651607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:34.023239 2026] [ssl:error] [pid 2660347:tid 2660347] (EAI 2)Name or service not known: [client 144.76.19.72:53136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:34.023273 2026] [ssl:error] [pid 2660347:tid 2660347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:34.629872 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:16798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/development/php.ini"] [unique_id "amsTKmQFU-ToQAoCJ-FckgAAAAY"]
[Thu Jul 30 10:02:34.630239 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:16798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/development/php.ini"] [unique_id "amsTKmQFU-ToQAoCJ-FckgAAAAY"]
[Thu Jul 30 10:02:34.651422 2026] [ssl:error] [pid 2660456:tid 2660456] (70014)End of file found: [client 216.73.216.199:31677] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:34.786389 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:16798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTKmQFU-ToQAoCJ-FckgAAAAY"]
[Thu Jul 30 10:02:35.846361 2026] [ssl:error] [pid 2648183:tid 2648183] (70014)End of file found: [client 216.73.216.199:26008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:35.935981 2026] [security2:error] [pid 2651610:tid 2651610] [client 85.208.96.194:16792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/stabbing-in-hucknall-nottingham-today"] [unique_id "amsTK_4oyjAu1rtt0oL_OwAAAA0"]
[Thu Jul 30 10:02:37.076943 2026] [ssl:error] [pid 2656777:tid 2656777] (EAI 2)Name or service not known: [client 144.76.19.72:53152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:37.076974 2026] [ssl:error] [pid 2656777:tid 2656777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:37.129970 2026] [ssl:error] [pid 2651677:tid 2651677] (EAI 2)Name or service not known: [client 144.76.19.72:53164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:37.130002 2026] [ssl:error] [pid 2651677:tid 2651677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:37.228394 2026] [security2:error] [pid 2657868:tid 2657868] [client 74.7.242.7:40706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.eganconsulting.co.uk"] [uri "/"] [unique_id "amsTLZ8pyQCyh-5gXHG7sAAAACg"]
[Thu Jul 30 10:02:38.538780 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:21676] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/directories/.env"] [unique_id "amsTLudjDh7oBT6qCsO0-gAAAAE"]
[Thu Jul 30 10:02:38.538964 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:21676] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/directories/.env"] [unique_id "amsTLudjDh7oBT6qCsO0-gAAAAE"]
[Thu Jul 30 10:02:38.794944 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:21676] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTLudjDh7oBT6qCsO0-gAAAAE"]
[Thu Jul 30 10:02:38.831510 2026] [security2:error] [pid 2658607:tid 2658607] [client 185.177.72.10:21692] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dist/.env"] [unique_id "amsTLrz_CaPKfDIWaVe7PAAAAAM"]
[Thu Jul 30 10:02:38.831707 2026] [security2:error] [pid 2658607:tid 2658607] [client 185.177.72.10:21692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dist/.env"] [unique_id "amsTLrz_CaPKfDIWaVe7PAAAAAM"]
[Thu Jul 30 10:02:38.983046 2026] [security2:error] [pid 2658607:tid 2658607] [client 185.177.72.10:21692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTLrz_CaPKfDIWaVe7PAAAAAM"]
[Thu Jul 30 10:02:39.199538 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:21702] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/django-blog/.env"] [unique_id "amsTLxxpKUWFUOGbzJlkzAAAACU"]
[Thu Jul 30 10:02:39.199805 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:21702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/django-blog/.env"] [unique_id "amsTLxxpKUWFUOGbzJlkzAAAACU"]
[Thu Jul 30 10:02:39.347424 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:21702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTLxxpKUWFUOGbzJlkzAAAACU"]
[Thu Jul 30 10:02:39.383533 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:21718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/django/.env"] [unique_id "amsTLxotHL6VKbxpSwczCwAAAD4"]
[Thu Jul 30 10:02:39.383724 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:21718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/django/.env"] [unique_id "amsTLxotHL6VKbxpSwczCwAAAD4"]
[Thu Jul 30 10:02:39.526657 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:21718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTLxotHL6VKbxpSwczCwAAAD4"]
[Thu Jul 30 10:02:39.580654 2026] [core:error] [pid 2656569:tid 2656569] [client 66.249.64.170:54342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:39.580682 2026] [core:error] [pid 2656569:tid 2656569] [client 66.249.64.170:54342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:40.062481 2026] [core:error] [pid 2641839:tid 2641839] [client 66.132.224.89:6126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:40.062517 2026] [core:error] [pid 2641839:tid 2641839] [client 66.132.224.89:6126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:40.200647 2026] [ssl:error] [pid 2660456:tid 2660456] (EAI 2)Name or service not known: [client 144.76.19.72:23944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:40.200688 2026] [ssl:error] [pid 2660456:tid 2660456] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:40.256927 2026] [ssl:error] [pid 2657868:tid 2657868] (EAI 2)Name or service not known: [client 144.76.19.72:23960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:40.256976 2026] [ssl:error] [pid 2657868:tid 2657868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:40.374739 2026] [core:error] [pid 2659899:tid 2659899] (13)Permission denied: [client 216.73.216.199:50318] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:64/flags
[Thu Jul 30 10:02:40.967660 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:21794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/django_project_path/.env"] [unique_id "amsTMBGyrjYSqISJXfzCwAAAAAI"]
[Thu Jul 30 10:02:40.967794 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:21794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/django_project_path/.env"] [unique_id "amsTMBGyrjYSqISJXfzCwAAAAAI"]
[Thu Jul 30 10:02:41.119414 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:21794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMBGyrjYSqISJXfzCwAAAAAI"]
[Thu Jul 30 10:02:41.154995 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:21802] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/doc/.env"] [unique_id "amsTMTeUUh8HPzZW5ohF1QAAACA"]
[Thu Jul 30 10:02:41.155200 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:21802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/doc/.env"] [unique_id "amsTMTeUUh8HPzZW5ohF1QAAACA"]
[Thu Jul 30 10:02:41.327946 2026] [security2:error] [pid 2651677:tid 2651677] [client 185.177.72.10:21802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMTeUUh8HPzZW5ohF1QAAACA"]
[Thu Jul 30 10:02:41.584322 2026] [ssl:error] [pid 2659899:tid 2659899] (70014)End of file found: [client 216.73.216.199:50318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:41.769893 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:21822] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker-compose/platform/.env"] [unique_id "amsTMSuxlaRmP82WWxXjigAAACc"]
[Thu Jul 30 10:02:41.770037 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:21822] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker-compose/platform/.env"] [unique_id "amsTMSuxlaRmP82WWxXjigAAACc"]
[Thu Jul 30 10:02:41.922785 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:21822] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMSuxlaRmP82WWxXjigAAACc"]
[Thu Jul 30 10:02:41.957099 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:21830] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker-elk/.env"] [unique_id "amsTMRGyrjYSqISJXfzCwQAAAAI"]
[Thu Jul 30 10:02:41.957285 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:21830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker-elk/.env"] [unique_id "amsTMRGyrjYSqISJXfzCwQAAAAI"]
[Thu Jul 30 10:02:42.100696 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:21830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMRGyrjYSqISJXfzCwQAAAAI"]
[Thu Jul 30 10:02:42.144029 2026] [security2:error] [pid 2657476:tid 2657476] [client 185.177.72.10:21832] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker-network-healthcheck/.env"] [unique_id "amsTMsqaWt419_qS7Q22DgAAACM"]
[Thu Jul 30 10:02:42.144221 2026] [security2:error] [pid 2657476:tid 2657476] [client 185.177.72.10:21832] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker-network-healthcheck/.env"] [unique_id "amsTMsqaWt419_qS7Q22DgAAACM"]
[Thu Jul 30 10:02:42.295225 2026] [security2:error] [pid 2657476:tid 2657476] [client 185.177.72.10:21832] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMsqaWt419_qS7Q22DgAAACM"]
[Thu Jul 30 10:02:42.332349 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amsTMjB7kZOR-5vHJiE3gAAAABg"]
[Thu Jul 30 10:02:42.332551 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker-node-mongo-redis/.env"] [unique_id "amsTMjB7kZOR-5vHJiE3gAAAABg"]
[Thu Jul 30 10:02:42.586656 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMjB7kZOR-5vHJiE3gAAAABg"]
[Thu Jul 30 10:02:43.089855 2026] [core:error] [pid 2641839:tid 2641839] (13)Permission denied: [client 216.73.216.199:47795] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS1/flags
[Thu Jul 30 10:02:43.313231 2026] [ssl:error] [pid 2656525:tid 2656525] (EAI 2)Name or service not known: [client 144.76.19.72:23974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:43.313275 2026] [ssl:error] [pid 2656525:tid 2656525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:43.369477 2026] [ssl:error] [pid 2651610:tid 2651610] (EAI 2)Name or service not known: [client 144.76.19.72:23990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:43.369522 2026] [ssl:error] [pid 2651610:tid 2651610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:43.519939 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:21902] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/app/.env"] [unique_id "amsTMzvxQELplpHJCGhLFgAAAAQ"]
[Thu Jul 30 10:02:43.520144 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:21902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/app/.env"] [unique_id "amsTMzvxQELplpHJCGhLFgAAAAQ"]
[Thu Jul 30 10:02:43.798611 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:21902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMzvxQELplpHJCGhLFgAAAAQ"]
[Thu Jul 30 10:02:43.833758 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21916] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/compose/withMongo/.env"] [unique_id "amsTMzB7kZOR-5vHJiE3ggAAABg"]
[Thu Jul 30 10:02:43.833929 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/compose/withMongo/.env"] [unique_id "amsTMzB7kZOR-5vHJiE3ggAAABg"]
[Thu Jul 30 10:02:43.992811 2026] [ssl:error] [pid 2651610:tid 2651610] (70014)End of file found: [client 216.73.216.199:15575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:43.993720 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTMzB7kZOR-5vHJiE3ggAAABg"]
[Thu Jul 30 10:02:44.026237 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:21932] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amsTNCuxlaRmP82WWxXjjAAAACc"]
[Thu Jul 30 10:02:44.026405 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:21932] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/compose/withPostgres/.env"] [unique_id "amsTNCuxlaRmP82WWxXjjAAAACc"]
[Thu Jul 30 10:02:44.168782 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:21932] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNCuxlaRmP82WWxXjjAAAACc"]
[Thu Jul 30 10:02:44.201168 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:21936] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/database/.env"] [unique_id "amsTNDvxQELplpHJCGhLFwAAAAQ"]
[Thu Jul 30 10:02:44.201300 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:21936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/database/.env"] [unique_id "amsTNDvxQELplpHJCGhLFwAAAAQ"]
[Thu Jul 30 10:02:44.340293 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:21936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNDvxQELplpHJCGhLFwAAAAQ"]
[Thu Jul 30 10:02:44.378329 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/db/.env"] [unique_id "amsTNDB7kZOR-5vHJiE3gwAAABg"]
[Thu Jul 30 10:02:44.378609 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/db/.env"] [unique_id "amsTNDB7kZOR-5vHJiE3gwAAABg"]
[Thu Jul 30 10:02:44.520402 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:21952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNDB7kZOR-5vHJiE3gwAAABg"]
[Thu Jul 30 10:02:44.555604 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:21964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/examples/compose/.env"] [unique_id "amsTNKvuWuB4kJyFwb79UAAAAAk"]
[Thu Jul 30 10:02:44.555795 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:21964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/examples/compose/.env"] [unique_id "amsTNKvuWuB4kJyFwb79UAAAAAk"]
[Thu Jul 30 10:02:44.703451 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:21964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNKvuWuB4kJyFwb79UAAAAAk"]
[Thu Jul 30 10:02:44.742024 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:1102] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/postgres/.env"] [unique_id "amsTNMrVQNVyV8AakLOgdAAAABA"]
[Thu Jul 30 10:02:44.742230 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:1102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/postgres/.env"] [unique_id "amsTNMrVQNVyV8AakLOgdAAAABA"]
[Thu Jul 30 10:02:44.896787 2026] [ssl:error] [pid 2641839:tid 2641839] (70014)End of file found: [client 216.73.216.199:47795] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:44.907995 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:1102] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNMrVQNVyV8AakLOgdAAAABA"]
[Thu Jul 30 10:02:44.951963 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1106] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docker/webdav/.env"] [unique_id "amsTNA4zgjvU6Dxa0XwrEwAAAAU"]
[Thu Jul 30 10:02:44.952262 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docker/webdav/.env"] [unique_id "amsTNA4zgjvU6Dxa0XwrEwAAAAU"]
[Thu Jul 30 10:02:45.099107 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNA4zgjvU6Dxa0XwrEwAAAAU"]
[Thu Jul 30 10:02:45.410949 2026] [authz_core:error] [pid 2654941:tid 2654941] [client 66.249.66.33:39806] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:02:45.413965 2026] [authz_core:error] [pid 2654941:tid 2654941] [client 66.249.66.33:39806] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:02:45.448944 2026] [security2:error] [pid 2651609:tid 2651609] [client 43.163.206.70:41742] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.islay.me"] [uri "/"] [unique_id "amsTNXwjqb36bSo_KiGVTAAAAAw"]
[Thu Jul 30 10:02:45.517914 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1130] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /docs/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docs/.git/config"] [unique_id "amsTNQ4zgjvU6Dxa0XwrFAAAAAU"]
[Thu Jul 30 10:02:45.518112 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docs/.git/config"] [unique_id "amsTNQ4zgjvU6Dxa0XwrFAAAAAU"]
[Thu Jul 30 10:02:45.661447 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNQ4zgjvU6Dxa0XwrFAAAAAU"]
[Thu Jul 30 10:02:46.442083 2026] [ssl:error] [pid 2653473:tid 2653473] (EAI 2)Name or service not known: [client 144.76.19.72:23994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:46.442125 2026] [ssl:error] [pid 2653473:tid 2653473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:46.493635 2026] [ssl:error] [pid 2651749:tid 2651749] (EAI 2)Name or service not known: [client 144.76.19.72:23996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:46.493663 2026] [ssl:error] [pid 2651749:tid 2651749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:46.519050 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:1164] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/docs/api-config.ini"] [unique_id "amsTNjB7kZOR-5vHJiE3hwAAABg"]
[Thu Jul 30 10:02:46.519428 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:1164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docs/api-config.ini"] [unique_id "amsTNjB7kZOR-5vHJiE3hwAAABg"]
[Thu Jul 30 10:02:46.660957 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:1164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNjB7kZOR-5vHJiE3hwAAABg"]
[Thu Jul 30 10:02:47.158929 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:1184] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/docs/laravel.log"] [unique_id "amsTNxotHL6VKbxpSwczDgAAAD4"]
[Thu Jul 30 10:02:47.159296 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:1184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docs/laravel.log"] [unique_id "amsTNxotHL6VKbxpSwczDgAAAD4"]
[Thu Jul 30 10:02:47.304272 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:1184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNxotHL6VKbxpSwczDgAAAD4"]
[Thu Jul 30 10:02:47.794000 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:1228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/docs/web.config"] [unique_id "amsTN_ANSd5D324CfbnUjAAAAAc"]
[Thu Jul 30 10:02:47.794232 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:1228] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /docs/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/docs/web.config"] [unique_id "amsTN_ANSd5D324CfbnUjAAAAAc"]
[Thu Jul 30 10:02:47.794396 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:1228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/docs/web.config"] [unique_id "amsTN_ANSd5D324CfbnUjAAAAAc"]
[Thu Jul 30 10:02:47.903331 2026] [ssl:error] [pid 2660697:tid 2660697] (70014)End of file found: [client 216.73.216.199:3717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:47.940161 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:1228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTN_ANSd5D324CfbnUjAAAAAc"]
[Thu Jul 30 10:02:47.975272 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:1234] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dodoswap-client/.env"] [unique_id "amsTNzvxQELplpHJCGhLGwAAAAQ"]
[Thu Jul 30 10:02:47.975460 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:1234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dodoswap-client/.env"] [unique_id "amsTNzvxQELplpHJCGhLGwAAAAQ"]
[Thu Jul 30 10:02:48.126558 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:1234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTNzvxQELplpHJCGhLGwAAAAQ"]
[Thu Jul 30 10:02:48.150639 2026] [core:crit] [pid 2660226:tid 2660226] (13)Permission denied: [client 66.132.224.89:6128] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 10:02:48.161560 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:1236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/dotfiles/.env"] [unique_id "amsTOHClVEbRTOXMCakExgAAACs"]
[Thu Jul 30 10:02:48.161719 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:1236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/dotfiles/.env"] [unique_id "amsTOHClVEbRTOXMCakExgAAACs"]
[Thu Jul 30 10:02:48.305499 2026] [security2:error] [pid 2648183:tid 2648183] [client 185.177.72.10:1236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTOHClVEbRTOXMCakExgAAACs"]
[Thu Jul 30 10:02:48.340757 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:1242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/downloads/.env"] [unique_id "amsTODvxQELplpHJCGhLHAAAAAQ"]
[Thu Jul 30 10:02:48.340884 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:1242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/downloads/.env"] [unique_id "amsTODvxQELplpHJCGhLHAAAAAQ"]
[Thu Jul 30 10:02:48.490055 2026] [security2:error] [pid 2651607:tid 2651607] [client 185.177.72.10:1242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTODvxQELplpHJCGhLHAAAAAQ"]
[Thu Jul 30 10:02:48.709910 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:1256] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /downloads/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/downloads/.git/config"] [unique_id "amsTOPANSd5D324CfbnUjgAAAAc"]
[Thu Jul 30 10:02:48.710114 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:1256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/downloads/.git/config"] [unique_id "amsTOPANSd5D324CfbnUjgAAAAc"]
[Thu Jul 30 10:02:48.851991 2026] [security2:error] [pid 2656695:tid 2656695] [client 185.177.72.10:1256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTOPANSd5D324CfbnUjgAAAAc"]
[Thu Jul 30 10:02:49.442099 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:1290] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amsTOS1MDKD59KKldBY_1wAAABc"]
[Thu Jul 30 10:02:49.442457 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:1290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/downloads/App_Config/ConnectionStrings.config"] [unique_id "amsTOS1MDKD59KKldBY_1wAAABc"]
[Thu Jul 30 10:02:49.549384 2026] [ssl:error] [pid 2651610:tid 2651610] (EAI 2)Name or service not known: [client 144.76.19.72:24004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:49.549413 2026] [ssl:error] [pid 2651610:tid 2651610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:49.583839 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:1290] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTOS1MDKD59KKldBY_1wAAABc"]
[Thu Jul 30 10:02:49.603683 2026] [ssl:error] [pid 2660397:tid 2660397] (EAI 2)Name or service not known: [client 144.76.19.72:25708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:49.603710 2026] [ssl:error] [pid 2660397:tid 2660397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:49.619667 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1302] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/downloads/api-config.ini"] [unique_id "amsTOTc6pcH3xNdqZAL4YwAAAEU"]
[Thu Jul 30 10:02:49.620043 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1302] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/downloads/api-config.ini"] [unique_id "amsTOTc6pcH3xNdqZAL4YwAAAEU"]
[Thu Jul 30 10:02:49.759763 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1302] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTOTc6pcH3xNdqZAL4YwAAAEU"]
[Thu Jul 30 10:02:49.995351 2026] [core:error] [pid 2656695:tid 2656695] [client 66.249.66.8:60858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:49.995379 2026] [core:error] [pid 2656695:tid 2656695] [client 66.249.66.8:60858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:02:50.011233 2026] [ssl:error] [pid 2651607:tid 2651607] (70014)End of file found: [client 216.73.216.199:63072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:50.148081 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:1336] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/downloads/laravel.log"] [unique_id "amsTOsrVQNVyV8AakLOgdgAAABA"]
[Thu Jul 30 10:02:50.148430 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:1336] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/downloads/laravel.log"] [unique_id "amsTOsrVQNVyV8AakLOgdgAAABA"]
[Thu Jul 30 10:02:50.290795 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:1336] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTOsrVQNVyV8AakLOgdgAAABA"]
[Thu Jul 30 10:02:50.519395 2026] [ssl:error] [pid 2654941:tid 2654941] (70014)End of file found: [client 216.73.216.199:30651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:51.191341 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1354] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/downloads/web.config"] [unique_id "amsTOzc6pcH3xNdqZAL4ZQAAAEU"]
[Thu Jul 30 10:02:51.191560 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1354] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /downloads/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/downloads/web.config"] [unique_id "amsTOzc6pcH3xNdqZAL4ZQAAAEU"]
[Thu Jul 30 10:02:51.191737 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1354] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/downloads/web.config"] [unique_id "amsTOzc6pcH3xNdqZAL4ZQAAAEU"]
[Thu Jul 30 10:02:51.353727 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1354] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTOzc6pcH3xNdqZAL4ZQAAAEU"]
[Thu Jul 30 10:02:51.912335 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:1382] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/e2e/.env"] [unique_id "amsTO1oNhnDns3iJW-XS3gAAAB8"]
[Thu Jul 30 10:02:51.912532 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:1382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/e2e/.env"] [unique_id "amsTO1oNhnDns3iJW-XS3gAAAB8"]
[Thu Jul 30 10:02:52.055770 2026] [security2:error] [pid 2653914:tid 2653914] [client 185.177.72.10:1382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTO1oNhnDns3iJW-XS3gAAAB8"]
[Thu Jul 30 10:02:52.673347 2026] [ssl:error] [pid 2661650:tid 2661650] (EAI 2)Name or service not known: [client 144.76.19.72:25714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:52.673384 2026] [ssl:error] [pid 2661650:tid 2661650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:52.787134 2026] [ssl:error] [pid 2661599:tid 2661599] (EAI 2)Name or service not known: [client 144.76.19.72:25724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:52.787176 2026] [ssl:error] [pid 2661599:tid 2661599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:52.879683 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1450] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/env.backup"] [unique_id "amsTPDc6pcH3xNdqZAL4ZwAAAEU"]
[Thu Jul 30 10:02:52.880038 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/env.backup"] [unique_id "amsTPDc6pcH3xNdqZAL4ZwAAAEU"]
[Thu Jul 30 10:02:53.027426 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:1450] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTPDc6pcH3xNdqZAL4ZwAAAEU"]
[Thu Jul 30 10:02:53.064887 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/env.bak"] [unique_id "amsTPQ4zgjvU6Dxa0XwrGwAAAAU"]
[Thu Jul 30 10:02:53.065265 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/env.bak"] [unique_id "amsTPQ4zgjvU6Dxa0XwrGwAAAAU"]
[Thu Jul 30 10:02:53.207839 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTPQ4zgjvU6Dxa0XwrGwAAAAU"]
[Thu Jul 30 10:02:54.235970 2026] [ssl:error] [pid 2651755:tid 2651755] (70014)End of file found: [client 216.73.216.199:20477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:02:54.623413 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1528] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amsTPg4zgjvU6Dxa0XwrHgAAAAU"]
[Thu Jul 30 10:02:54.623621 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "amsTPg4zgjvU6Dxa0XwrHgAAAAU"]
[Thu Jul 30 10:02:54.762780 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:1528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTPg4zgjvU6Dxa0XwrHgAAAAU"]
[Thu Jul 30 10:02:54.802197 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:14876] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/env/dockers/php-apache/.env"] [unique_id "amsTPqoMUy6NWS4BIAk-_QAAAAo"]
[Thu Jul 30 10:02:54.802352 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:14876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/env/dockers/php-apache/.env"] [unique_id "amsTPqoMUy6NWS4BIAk-_QAAAAo"]
[Thu Jul 30 10:02:54.947394 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:14876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTPqoMUy6NWS4BIAk-_QAAAAo"]
[Thu Jul 30 10:02:54.979563 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:14878] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/env/example/.env"] [unique_id "amsTPiuxlaRmP82WWxXjjwAAACc"]
[Thu Jul 30 10:02:54.979761 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:14878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/env/example/.env"] [unique_id "amsTPiuxlaRmP82WWxXjjwAAACc"]
[Thu Jul 30 10:02:55.121411 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:14878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTPiuxlaRmP82WWxXjjwAAACc"]
[Thu Jul 30 10:02:55.336869 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:14904] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/env/template/.env"] [unique_id "amsTP6oMUy6NWS4BIAk-_gAAAAo"]
[Thu Jul 30 10:02:55.337054 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:14904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/env/template/.env"] [unique_id "amsTP6oMUy6NWS4BIAk-_gAAAAo"]
[Thu Jul 30 10:02:55.477325 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:14904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTP6oMUy6NWS4BIAk-_gAAAAo"]
[Thu Jul 30 10:02:55.845003 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:25728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:55.845034 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:55.901253 2026] [ssl:error] [pid 2651749:tid 2651749] (EAI 2)Name or service not known: [client 144.76.19.72:25740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:55.901282 2026] [ssl:error] [pid 2651749:tid 2651749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:55.989470 2026] [security2:error] [pid 2641839:tid 2641839] [client 185.177.72.10:14934] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/environments/local/.env"] [unique_id "amsTP5dQZ3EKXZ4_8fJeqQAAABo"]
[Thu Jul 30 10:02:55.989795 2026] [security2:error] [pid 2641839:tid 2641839] [client 185.177.72.10:14934] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/environments/local/.env"] [unique_id "amsTP5dQZ3EKXZ4_8fJeqQAAABo"]
[Thu Jul 30 10:02:56.133213 2026] [security2:error] [pid 2641839:tid 2641839] [client 185.177.72.10:14934] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTP5dQZ3EKXZ4_8fJeqQAAABo"]
[Thu Jul 30 10:02:56.346331 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:14950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/environments/production/.env"] [unique_id "amsTQDXenJQOMzHiNu5RUwAAABI"]
[Thu Jul 30 10:02:56.346536 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:14950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/environments/production/.env"] [unique_id "amsTQDXenJQOMzHiNu5RUwAAABI"]
[Thu Jul 30 10:02:56.589585 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:14950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTQDXenJQOMzHiNu5RUwAAABI"]
[Thu Jul 30 10:02:56.812055 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:14970] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env"] [unique_id "amsTQLHF7Tkt0Xyi3WPxeAAAACA"]
[Thu Jul 30 10:02:56.812197 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:14970] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env"] [unique_id "amsTQLHF7Tkt0Xyi3WPxeAAAACA"]
[Thu Jul 30 10:02:56.961146 2026] [security2:error] [pid 2648183:tid 2648183] [client 44.213.36.21:8836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/starcraft_enslavers.html"] [unique_id "amsTQHClVEbRTOXMCakEyAAAACs"]
[Thu Jul 30 10:02:56.970435 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:14970] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTQLHF7Tkt0Xyi3WPxeAAAACA"]
[Thu Jul 30 10:02:57.009119 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:14984] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.bak"] [unique_id "amsTQRotHL6VKbxpSwczEwAAAD4"]
[Thu Jul 30 10:02:57.009312 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:14984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.bak"] [unique_id "amsTQRotHL6VKbxpSwczEwAAAD4"]
[Thu Jul 30 10:02:57.151157 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:14984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTQRotHL6VKbxpSwczEwAAAD4"]
[Thu Jul 30 10:02:57.186654 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:15000] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.dev"] [unique_id "amsTQcrVQNVyV8AakLOgegAAABA"]
[Thu Jul 30 10:02:57.186914 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:15000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.dev"] [unique_id "amsTQcrVQNVyV8AakLOgegAAABA"]
[Thu Jul 30 10:02:57.327632 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.177.72.10:15000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTQcrVQNVyV8AakLOgegAAABA"]
[Thu Jul 30 10:02:57.364854 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:15012] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.dist"] [unique_id "amsTQSuxlaRmP82WWxXjkQAAACc"]
[Thu Jul 30 10:02:57.365025 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:15012] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.dist"] [unique_id "amsTQSuxlaRmP82WWxXjkQAAACc"]
[Thu Jul 30 10:02:57.505891 2026] [security2:error] [pid 2657665:tid 2657665] [client 185.177.72.10:15012] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTQSuxlaRmP82WWxXjkQAAACc"]
[Thu Jul 30 10:02:57.542363 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:15022] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.local"] [unique_id "amsTQbHF7Tkt0Xyi3WPxeQAAACA"]
[Thu Jul 30 10:02:57.542542 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:15022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/erp/.env.local"] [unique_id "amsTQbHF7Tkt0Xyi3WPxeQAAACA"]
[Thu Jul 30 10:02:57.709156 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:15022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTQbHF7Tkt0Xyi3WPxeQAAACA"]
[Thu Jul 30 10:02:58.440336 2026] [security2:error] [pid 2656695:tid 2656695] [client 52.2.58.41:59151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "magic-cookie.co.uk"] [uri "/jargon/jarg310/jarg-README.txt"] [unique_id "amsTQvANSd5D324CfbnUlgAAAAc"]
[Thu Jul 30 10:02:58.656974 2026] [core:error] [pid 2651610:tid 2651610] (13)Permission denied: [client 216.73.216.199:15925] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/ctor
[Thu Jul 30 10:02:58.954659 2026] [ssl:error] [pid 2647985:tid 2647985] (EAI 2)Name or service not known: [client 144.76.19.72:25746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:58.954691 2026] [ssl:error] [pid 2647985:tid 2647985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:59.006132 2026] [ssl:error] [pid 2656695:tid 2656695] (EAI 2)Name or service not known: [client 144.76.19.72:25750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:02:59.006159 2026] [ssl:error] [pid 2656695:tid 2656695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:02:59.560584 2026] [ssl:error] [pid 2651610:tid 2651610] (70014)End of file found: [client 216.73.216.199:15925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:01.175089 2026] [security2:error] [pid 2656695:tid 2656695] [client 49.51.252.146:38396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsTRfANSd5D324CfbnUmAAAAAc"]
[Thu Jul 30 10:03:01.764469 2026] [authz_core:error] [pid 2656777:tid 2656777] [client 34.79.246.102:33316] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:03:01.767415 2026] [authz_core:error] [pid 2656777:tid 2656777] [client 34.79.246.102:33316] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:03:01.972355 2026] [ssl:error] [pid 2657665:tid 2657665] (70014)End of file found: [client 216.73.216.199:39868] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:02.101541 2026] [ssl:error] [pid 2654843:tid 2654843] (EAI 2)Name or service not known: [client 144.76.19.72:62038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:02.101584 2026] [ssl:error] [pid 2654843:tid 2654843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:02.159457 2026] [ssl:error] [pid 2657476:tid 2657476] (EAI 2)Name or service not known: [client 144.76.19.72:62050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:02.159503 2026] [ssl:error] [pid 2657476:tid 2657476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:02.569176 2026] [security2:error] [pid 2661695:tid 2661695] [client 49.51.252.146:47484] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsTRrHF7Tkt0Xyi3WPxfgAAACA"], referer: http://hornsey-town-hall.org.uk
[Thu Jul 30 10:03:02.870682 2026] [ssl:error] [pid 2656775:tid 2656775] (70014)End of file found: [client 216.73.216.199:4432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:04.141415 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:15348] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/erp/php.ini"] [unique_id "amsTSGQFU-ToQAoCJ-FcrQAAAAY"]
[Thu Jul 30 10:03:04.141773 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:15348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/erp/php.ini"] [unique_id "amsTSGQFU-ToQAoCJ-FcrQAAAAY"]
[Thu Jul 30 10:03:04.280399 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:15348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTSGQFU-ToQAoCJ-FcrQAAAAY"]
[Thu Jul 30 10:03:05.257693 2026] [ssl:error] [pid 2624681:tid 2624681] (EAI 2)Name or service not known: [client 144.76.19.72:62058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:05.257731 2026] [ssl:error] [pid 2624681:tid 2624681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:05.312545 2026] [ssl:error] [pid 2661695:tid 2661695] (EAI 2)Name or service not known: [client 144.76.19.72:62060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:05.312587 2026] [ssl:error] [pid 2661695:tid 2661695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:06.125953 2026] [security2:error] [pid 2661695:tid 2661695] [client 43.131.32.36:38778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amsTSrHF7Tkt0Xyi3WPxgQAAACA"]
[Thu Jul 30 10:03:07.091105 2026] [core:error] [pid 2651749:tid 2651749] (13)Permission denied: [client 216.73.216.199:9109] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/closing_wait
[Thu Jul 30 10:03:07.683846 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:55372] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/error/.env"] [unique_id "amsTSw4zgjvU6Dxa0XwrJAAAAAU"]
[Thu Jul 30 10:03:07.684026 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:55372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/error/.env"] [unique_id "amsTSw4zgjvU6Dxa0XwrJAAAAAU"]
[Thu Jul 30 10:03:07.824909 2026] [security2:error] [pid 2660697:tid 2660697] [client 185.177.72.10:55372] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTSw4zgjvU6Dxa0XwrJAAAAAU"]
[Thu Jul 30 10:03:08.038820 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/errors/.env"] [unique_id "amsTTLHF7Tkt0Xyi3WPxgwAAACA"]
[Thu Jul 30 10:03:08.038999 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/errors/.env"] [unique_id "amsTTLHF7Tkt0Xyi3WPxgwAAACA"]
[Thu Jul 30 10:03:08.177852 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTLHF7Tkt0Xyi3WPxgwAAACA"]
[Thu Jul 30 10:03:08.214474 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/example/.env"] [unique_id "amsTTBxpKUWFUOGbzJlk2QAAACU"]
[Thu Jul 30 10:03:08.214670 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/example/.env"] [unique_id "amsTTBxpKUWFUOGbzJlk2QAAACU"]
[Thu Jul 30 10:03:08.354440 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTBxpKUWFUOGbzJlk2QAAACU"]
[Thu Jul 30 10:03:08.368173 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:62068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:08.368199 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:08.392522 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:55412] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amsTTOAOfUDYJWq_uNeGDQAAACI"]
[Thu Jul 30 10:03:08.392721 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:55412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "amsTTOAOfUDYJWq_uNeGDQAAACI"]
[Thu Jul 30 10:03:08.424544 2026] [ssl:error] [pid 2656569:tid 2656569] (EAI 2)Name or service not known: [client 144.76.19.72:62074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:08.424575 2026] [ssl:error] [pid 2656569:tid 2656569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:08.532668 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:55412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTOAOfUDYJWq_uNeGDQAAACI"]
[Thu Jul 30 10:03:08.569443 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:55418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amsTTKvuWuB4kJyFwb79WAAAAAk"]
[Thu Jul 30 10:03:08.569641 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:55418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "amsTTKvuWuB4kJyFwb79WAAAAAk"]
[Thu Jul 30 10:03:08.710474 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:55418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTKvuWuB4kJyFwb79WAAAAAk"]
[Thu Jul 30 10:03:08.743874 2026] [security2:error] [pid 2660459:tid 2660459] [client 111.230.233.46:47676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsTTMUYS7C89SvbdgvZiwAAAC0"]
[Thu Jul 30 10:03:08.746463 2026] [security2:error] [pid 2661696:tid 2661696] [client 185.177.72.10:55424] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amsTTGoW_dkBMJHY218O4wAAACY"]
[Thu Jul 30 10:03:08.746612 2026] [security2:error] [pid 2661696:tid 2661696] [client 185.177.72.10:55424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "amsTTGoW_dkBMJHY218O4wAAACY"]
[Thu Jul 30 10:03:08.885329 2026] [security2:error] [pid 2661696:tid 2661696] [client 185.177.72.10:55424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTGoW_dkBMJHY218O4wAAACY"]
[Thu Jul 30 10:03:08.924632 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:55436] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/.env"] [unique_id "amsTTMID0if8VsKUbzok0AAAABw"]
[Thu Jul 30 10:03:08.924815 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:55436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/.env"] [unique_id "amsTTMID0if8VsKUbzok0AAAABw"]
[Thu Jul 30 10:03:09.062895 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:55436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTMID0if8VsKUbzok0AAAABw"]
[Thu Jul 30 10:03:09.097409 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:55446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/01-simple-model/.env"] [unique_id "amsTTTXenJQOMzHiNu5RXAAAABI"]
[Thu Jul 30 10:03:09.097604 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:55446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/01-simple-model/.env"] [unique_id "amsTTTXenJQOMzHiNu5RXAAAABI"]
[Thu Jul 30 10:03:09.237217 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:55446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTTXenJQOMzHiNu5RXAAAABI"]
[Thu Jul 30 10:03:09.273021 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/02-complex-example/.env"] [unique_id "amsTTbHF7Tkt0Xyi3WPxhAAAACA"]
[Thu Jul 30 10:03:09.273212 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/02-complex-example/.env"] [unique_id "amsTTbHF7Tkt0Xyi3WPxhAAAACA"]
[Thu Jul 30 10:03:09.416220 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTbHF7Tkt0Xyi3WPxhAAAACA"]
[Thu Jul 30 10:03:09.452319 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55464] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amsTTRxpKUWFUOGbzJlk2gAAACU"]
[Thu Jul 30 10:03:09.452511 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "amsTTRxpKUWFUOGbzJlk2gAAACU"]
[Thu Jul 30 10:03:09.593762 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTRxpKUWFUOGbzJlk2gAAACU"]
[Thu Jul 30 10:03:09.632865 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:55466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amsTTbXZCFa7ftwinVV4igAAADc"]
[Thu Jul 30 10:03:09.633055 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:55466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "amsTTbXZCFa7ftwinVV4igAAADc"]
[Thu Jul 30 10:03:09.774134 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:55466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTbXZCFa7ftwinVV4igAAADc"]
[Thu Jul 30 10:03:09.809821 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:55470] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/05-migrations/.env"] [unique_id "amsTTRGyrjYSqISJXfzCygAAAAI"]
[Thu Jul 30 10:03:09.810014 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:55470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/05-migrations/.env"] [unique_id "amsTTRGyrjYSqISJXfzCygAAAAI"]
[Thu Jul 30 10:03:09.964180 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:55470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTRGyrjYSqISJXfzCygAAAAI"]
[Thu Jul 30 10:03:10.005656 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:55478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/06-base-service/.env"] [unique_id "amsTTqvuWuB4kJyFwb79WQAAAAk"]
[Thu Jul 30 10:03:10.005839 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:55478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/06-base-service/.env"] [unique_id "amsTTqvuWuB4kJyFwb79WQAAAAk"]
[Thu Jul 30 10:03:10.152529 2026] [security2:error] [pid 2654843:tid 2654843] [client 185.177.72.10:55478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTqvuWuB4kJyFwb79WQAAAAk"]
[Thu Jul 30 10:03:10.188364 2026] [security2:error] [pid 2657476:tid 2657476] [client 185.177.72.10:55482] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/07-feature-flags/.env"] [unique_id "amsTTsqaWt419_qS7Q22GgAAACM"]
[Thu Jul 30 10:03:10.188566 2026] [security2:error] [pid 2657476:tid 2657476] [client 185.177.72.10:55482] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/07-feature-flags/.env"] [unique_id "amsTTsqaWt419_qS7Q22GgAAACM"]
[Thu Jul 30 10:03:10.247623 2026] [ssl:error] [pid 2661696:tid 2661696] (70014)End of file found: [client 216.73.216.199:53696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:10.333550 2026] [security2:error] [pid 2657476:tid 2657476] [client 185.177.72.10:55482] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTsqaWt419_qS7Q22GgAAACM"]
[Thu Jul 30 10:03:10.367809 2026] [security2:error] [pid 2660459:tid 2660459] [client 185.177.72.10:55486] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/08-performance/.env"] [unique_id "amsTTsUYS7C89SvbdgvZjAAAAC0"]
[Thu Jul 30 10:03:10.367992 2026] [security2:error] [pid 2660459:tid 2660459] [client 185.177.72.10:55486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/08-performance/.env"] [unique_id "amsTTsUYS7C89SvbdgvZjAAAAC0"]
[Thu Jul 30 10:03:10.477109 2026] [security2:error] [pid 2656775:tid 2656775] [client 153.66.193.68:13191] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTTjXenJQOMzHiNu5RXQAAABI"]
[Thu Jul 30 10:03:10.477172 2026] [security2:error] [pid 2656775:tid 2656775] [client 153.66.193.68:13191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTTjXenJQOMzHiNu5RXQAAABI"]
[Thu Jul 30 10:03:10.477421 2026] [security2:error] [pid 2656775:tid 2656775] [client 153.66.193.68:13191] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTTjXenJQOMzHiNu5RXQAAABI"]
[Thu Jul 30 10:03:10.508316 2026] [security2:error] [pid 2660459:tid 2660459] [client 185.177.72.10:55486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTsUYS7C89SvbdgvZjAAAAC0"]
[Thu Jul 30 10:03:10.543748 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:55496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/09-production/.env"] [unique_id "amsTTmQFU-ToQAoCJ-FcrwAAAAY"]
[Thu Jul 30 10:03:10.543892 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:55496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/09-production/.env"] [unique_id "amsTTmQFU-ToQAoCJ-FcrwAAAAY"]
[Thu Jul 30 10:03:10.683913 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:55496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTmQFU-ToQAoCJ-FcrwAAAAY"]
[Thu Jul 30 10:03:10.719036 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55504] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/10-subscriptions/.env"] [unique_id "amsTTrHF7Tkt0Xyi3WPxhQAAACA"]
[Thu Jul 30 10:03:10.719241 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/10-subscriptions/.env"] [unique_id "amsTTrHF7Tkt0Xyi3WPxhQAAACA"]
[Thu Jul 30 10:03:10.859104 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55504] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTrHF7Tkt0Xyi3WPxhQAAACA"]
[Thu Jul 30 10:03:10.898688 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55520] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/11-transactions/.env"] [unique_id "amsTTi1MDKD59KKldBY_5AAAABc"]
[Thu Jul 30 10:03:10.898971 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55520] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/11-transactions/.env"] [unique_id "amsTTi1MDKD59KKldBY_5AAAABc"]
[Thu Jul 30 10:03:11.038033 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55520] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTi1MDKD59KKldBY_5AAAABc"]
[Thu Jul 30 10:03:11.072036 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:55532] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amsTT7XZCFa7ftwinVV4iwAAADc"]
[Thu Jul 30 10:03:11.072241 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:55532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/drupal-separate-services/.env"] [unique_id "amsTT7XZCFa7ftwinVV4iwAAADc"]
[Thu Jul 30 10:03:11.212604 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:55532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTT7XZCFa7ftwinVV4iwAAADc"]
[Thu Jul 30 10:03:11.252128 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:55542] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amsTTxGyrjYSqISJXfzCywAAAAI"]
[Thu Jul 30 10:03:11.252298 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:55542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "amsTTxGyrjYSqISJXfzCywAAAAI"]
[Thu Jul 30 10:03:11.392204 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:55542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTxGyrjYSqISJXfzCywAAAAI"]
[Thu Jul 30 10:03:11.427055 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:55546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/sdl-first/.env"] [unique_id "amsTT_MRvA5UKQZZ7j6dKgAAABY"]
[Thu Jul 30 10:03:11.427267 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:55546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/sdl-first/.env"] [unique_id "amsTT_MRvA5UKQZZ7j6dKgAAABY"]
[Thu Jul 30 10:03:11.482619 2026] [ssl:error] [pid 2654843:tid 2654843] (EAI 2)Name or service not known: [client 144.76.19.72:23674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:11.482653 2026] [ssl:error] [pid 2654843:tid 2654843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:11.540500 2026] [ssl:error] [pid 2660459:tid 2660459] (EAI 2)Name or service not known: [client 144.76.19.72:23688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:11.540538 2026] [ssl:error] [pid 2660459:tid 2660459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:11.567569 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:55546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTT_MRvA5UKQZZ7j6dKgAAABY"]
[Thu Jul 30 10:03:11.604668 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:55556] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amsTT-AOfUDYJWq_uNeGDwAAACI"]
[Thu Jul 30 10:03:11.604969 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:55556] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "amsTT-AOfUDYJWq_uNeGDwAAACI"]
[Thu Jul 30 10:03:11.744091 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:55556] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTT-AOfUDYJWq_uNeGDwAAACI"]
[Thu Jul 30 10:03:11.777802 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:55572] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amsTT2QFU-ToQAoCJ-FcsAAAAAY"]
[Thu Jul 30 10:03:11.777980 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:55572] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "amsTT2QFU-ToQAoCJ-FcsAAAAAY"]
[Thu Jul 30 10:03:11.916766 2026] [security2:error] [pid 2659899:tid 2659899] [client 185.177.72.10:55572] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTT2QFU-ToQAoCJ-FcsAAAAAY"]
[Thu Jul 30 10:03:11.953424 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/web/.env"] [unique_id "amsTTxxpKUWFUOGbzJlk2wAAACU"]
[Thu Jul 30 10:03:11.953707 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/web/.env"] [unique_id "amsTTxxpKUWFUOGbzJlk2wAAACU"]
[Thu Jul 30 10:03:12.114904 2026] [security2:error] [pid 2660455:tid 2660455] [client 185.177.72.10:55574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTTxxpKUWFUOGbzJlk2wAAACU"]
[Thu Jul 30 10:03:12.152279 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55586] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amsTUC1MDKD59KKldBY_5QAAABc"]
[Thu Jul 30 10:03:12.152467 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "amsTUC1MDKD59KKldBY_5QAAABc"]
[Thu Jul 30 10:03:12.241326 2026] [security2:error] [pid 2654843:tid 2654843] [client 186.73.98.33:47886] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTUKvuWuB4kJyFwb79WgAAAAk"]
[Thu Jul 30 10:03:12.241376 2026] [security2:error] [pid 2654843:tid 2654843] [client 186.73.98.33:47886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTUKvuWuB4kJyFwb79WgAAAAk"]
[Thu Jul 30 10:03:12.241639 2026] [security2:error] [pid 2654843:tid 2654843] [client 186.73.98.33:47886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTUKvuWuB4kJyFwb79WgAAAAk"]
[Thu Jul 30 10:03:12.294825 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUC1MDKD59KKldBY_5QAAABc"]
[Thu Jul 30 10:03:12.332502 2026] [security2:error] [pid 2660459:tid 2660459] [client 185.177.72.10:55600] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-dotenv/.env"] [unique_id "amsTUMUYS7C89SvbdgvZjQAAAC0"]
[Thu Jul 30 10:03:12.332651 2026] [security2:error] [pid 2660459:tid 2660459] [client 185.177.72.10:55600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-dotenv/.env"] [unique_id "amsTUMUYS7C89SvbdgvZjQAAAC0"]
[Thu Jul 30 10:03:12.474387 2026] [security2:error] [pid 2660459:tid 2660459] [client 185.177.72.10:55600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUMUYS7C89SvbdgvZjQAAAC0"]
[Thu Jul 30 10:03:12.509322 2026] [security2:error] [pid 2661693:tid 2661693] [client 185.177.72.10:55616] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amsTUAOcT6fma_D9CpFEGgAAABk"]
[Thu Jul 30 10:03:12.509505 2026] [security2:error] [pid 2661693:tid 2661693] [client 185.177.72.10:55616] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "amsTUAOcT6fma_D9CpFEGgAAABk"]
[Thu Jul 30 10:03:12.651416 2026] [security2:error] [pid 2661693:tid 2661693] [client 185.177.72.10:55616] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUAOcT6fma_D9CpFEGgAAABk"]
[Thu Jul 30 10:03:12.687952 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:55632] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amsTUP4oyjAu1rtt0oL_UgAAAA0"]
[Thu Jul 30 10:03:12.688293 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:55632] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "amsTUP4oyjAu1rtt0oL_UgAAAA0"]
[Thu Jul 30 10:03:12.885161 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:55632] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUP4oyjAu1rtt0oL_UgAAAA0"]
[Thu Jul 30 10:03:12.926536 2026] [security2:error] [pid 2651494:tid 2651494] [client 185.177.72.10:55648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-relay-modern/.env"] [unique_id "amsTUCYLh1_YwRjhC_4ATAAAAAA"]
[Thu Jul 30 10:03:12.926739 2026] [security2:error] [pid 2651494:tid 2651494] [client 185.177.72.10:55648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-relay-modern/.env"] [unique_id "amsTUCYLh1_YwRjhC_4ATAAAAAA"]
[Thu Jul 30 10:03:13.069400 2026] [security2:error] [pid 2651494:tid 2651494] [client 185.177.72.10:55648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUCYLh1_YwRjhC_4ATAAAAAA"]
[Thu Jul 30 10:03:13.105370 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55664] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amsTUbHF7Tkt0Xyi3WPxhwAAACA"]
[Thu Jul 30 10:03:13.105557 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "amsTUbHF7Tkt0Xyi3WPxhwAAACA"]
[Thu Jul 30 10:03:13.244111 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:55664] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUbHF7Tkt0Xyi3WPxhwAAACA"]
[Thu Jul 30 10:03:13.278913 2026] [security2:error] [pid 2661925:tid 2661925] [client 185.177.72.10:55678] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/export/.env"] [unique_id "amsTUay-Sp5GfCqe-ySNTgAAAC4"]
[Thu Jul 30 10:03:13.279104 2026] [security2:error] [pid 2661925:tid 2661925] [client 185.177.72.10:55678] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/export/.env"] [unique_id "amsTUay-Sp5GfCqe-ySNTgAAAC4"]
[Thu Jul 30 10:03:13.418694 2026] [security2:error] [pid 2661925:tid 2661925] [client 185.177.72.10:55678] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUay-Sp5GfCqe-ySNTgAAAC4"]
[Thu Jul 30 10:03:13.455841 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55688] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fastlane/.env"] [unique_id "amsTUS1MDKD59KKldBY_5gAAABc"]
[Thu Jul 30 10:03:13.456020 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fastlane/.env"] [unique_id "amsTUS1MDKD59KKldBY_5gAAABc"]
[Thu Jul 30 10:03:13.594965 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUS1MDKD59KKldBY_5gAAABc"]
[Thu Jul 30 10:03:13.629563 2026] [security2:error] [pid 2660458:tid 2660458] [client 185.177.72.10:55704] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/favicons/.env"] [unique_id "amsTUSBjcoyh9l3xXu2QAAAAACw"]
[Thu Jul 30 10:03:13.629762 2026] [security2:error] [pid 2660458:tid 2660458] [client 185.177.72.10:55704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/favicons/.env"] [unique_id "amsTUSBjcoyh9l3xXu2QAAAAACw"]
[Thu Jul 30 10:03:13.769743 2026] [security2:error] [pid 2660458:tid 2660458] [client 185.177.72.10:55704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUSBjcoyh9l3xXu2QAAAAACw"]
[Thu Jul 30 10:03:13.805317 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:55712] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/favs/.env"] [unique_id "amsTUTdnWhdb5n_RrTLHCwAAADg"]
[Thu Jul 30 10:03:13.805510 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:55712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/favs/.env"] [unique_id "amsTUTdnWhdb5n_RrTLHCwAAADg"]
[Thu Jul 30 10:03:13.945097 2026] [security2:error] [pid 2650047:tid 2650047] [client 185.177.72.10:55712] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUTdnWhdb5n_RrTLHCwAAADg"]
[Thu Jul 30 10:03:13.979560 2026] [security2:error] [pid 2661693:tid 2661693] [client 185.177.72.10:55726] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env"] [unique_id "amsTUQOcT6fma_D9CpFEGwAAABk"]
[Thu Jul 30 10:03:13.979803 2026] [security2:error] [pid 2661693:tid 2661693] [client 185.177.72.10:55726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env"] [unique_id "amsTUQOcT6fma_D9CpFEGwAAABk"]
[Thu Jul 30 10:03:14.123097 2026] [security2:error] [pid 2661693:tid 2661693] [client 185.177.72.10:55726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUQOcT6fma_D9CpFEGwAAABk"]
[Thu Jul 30 10:03:14.156919 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:55730] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.bak"] [unique_id "amsTUv4oyjAu1rtt0oL_UwAAAA0"]
[Thu Jul 30 10:03:14.157130 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:55730] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.bak"] [unique_id "amsTUv4oyjAu1rtt0oL_UwAAAA0"]
[Thu Jul 30 10:03:14.296440 2026] [security2:error] [pid 2651610:tid 2651610] [client 185.177.72.10:55730] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUv4oyjAu1rtt0oL_UwAAAA0"]
[Thu Jul 30 10:03:14.331840 2026] [security2:error] [pid 2660456:tid 2660456] [client 185.177.72.10:55734] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.dev"] [unique_id "amsTUm7e_cGH67403vE5zQAAACk"]
[Thu Jul 30 10:03:14.331994 2026] [security2:error] [pid 2660456:tid 2660456] [client 185.177.72.10:55734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.dev"] [unique_id "amsTUm7e_cGH67403vE5zQAAACk"]
[Thu Jul 30 10:03:14.371497 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.191.171.18:40848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2337.0/prev_next,next.html"] [unique_id "amsTUrXZCFa7ftwinVV4jQAAADc"]
[Thu Jul 30 10:03:14.475530 2026] [security2:error] [pid 2660456:tid 2660456] [client 185.177.72.10:55734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUm7e_cGH67403vE5zQAAACk"]
[Thu Jul 30 10:03:14.510881 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55750] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.dist"] [unique_id "amsTUi1MDKD59KKldBY_5wAAABc"]
[Thu Jul 30 10:03:14.511058 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.dist"] [unique_id "amsTUi1MDKD59KKldBY_5wAAABc"]
[Thu Jul 30 10:03:14.597205 2026] [ssl:error] [pid 2660458:tid 2660458] (EAI 2)Name or service not known: [client 144.76.19.72:23702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:14.597245 2026] [ssl:error] [pid 2660458:tid 2660458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:14.651197 2026] [ssl:error] [pid 2654843:tid 2654843] (EAI 2)Name or service not known: [client 144.76.19.72:23708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:14.651232 2026] [ssl:error] [pid 2654843:tid 2654843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:14.670260 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.177.72.10:55750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUi1MDKD59KKldBY_5wAAABc"]
[Thu Jul 30 10:03:14.706094 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:55762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.local"] [unique_id "amsTUjmg8j7OyB4K1U64JgAAAAs"]
[Thu Jul 30 10:03:14.706277 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:55762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/feature/.env.local"] [unique_id "amsTUjmg8j7OyB4K1U64JgAAAAs"]
[Thu Jul 30 10:03:14.848142 2026] [security2:error] [pid 2653872:tid 2653872] [client 185.177.72.10:55762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTUjmg8j7OyB4K1U64JgAAAAs"]
[Thu Jul 30 10:03:15.457961 2026] [core:error] [pid 2660396:tid 2660396] (13)Permission denied: [client 216.73.216.199:5609] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_defrag_ipv6/sections/__ksymtab_strings
[Thu Jul 30 10:03:15.569036 2026] [security2:error] [pid 2661695:tid 2661695] [client 182.2.103.24:49098] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTU7HF7Tkt0Xyi3WPxiQAAACA"]
[Thu Jul 30 10:03:15.569098 2026] [security2:error] [pid 2661695:tid 2661695] [client 182.2.103.24:49098] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsTU7HF7Tkt0Xyi3WPxiQAAACA"]
[Thu Jul 30 10:03:15.569368 2026] [security2:error] [pid 2661695:tid 2661695] [client 182.2.103.24:49098] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTU7HF7Tkt0Xyi3WPxiQAAACA"]
[Thu Jul 30 10:03:15.634017 2026] [security2:error] [pid 2650046:tid 2650046] [client 43.130.40.120:60714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.co.uk"] [uri "/"] [unique_id "amsTU7XZCFa7ftwinVV4jgAAADc"]
[Thu Jul 30 10:03:16.742941 2026] [security2:error] [pid 2661696:tid 2661696] [client 43.130.40.120:54024] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsTVGoW_dkBMJHY218O5QAAACY"], referer: http://saturnsports.co.uk
[Thu Jul 30 10:03:17.719893 2026] [ssl:error] [pid 2661696:tid 2661696] (EAI 2)Name or service not known: [client 144.76.19.72:23714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:17.719933 2026] [ssl:error] [pid 2661696:tid 2661696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:17.774218 2026] [ssl:error] [pid 2651609:tid 2651609] (EAI 2)Name or service not known: [client 144.76.19.72:23720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:17.774243 2026] [ssl:error] [pid 2651609:tid 2651609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:17.867164 2026] [ssl:error] [pid 2660396:tid 2660396] (70014)End of file found: [client 216.73.216.199:5609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:19.673472 2026] [ssl:error] [pid 2656569:tid 2656569] (70014)End of file found: [client 216.73.216.199:28210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:20.830156 2026] [ssl:error] [pid 2662802:tid 2662802] (EAI 2)Name or service not known: [client 144.76.19.72:49154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:20.830185 2026] [ssl:error] [pid 2662802:tid 2662802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:20.877604 2026] [core:error] [pid 2641844:tid 2641844] (13)Permission denied: [client 216.73.216.199:4061] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/physical_node/resource0
[Thu Jul 30 10:03:20.883934 2026] [ssl:error] [pid 2651749:tid 2651749] (EAI 2)Name or service not known: [client 144.76.19.72:49162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:20.883955 2026] [ssl:error] [pid 2651749:tid 2651749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:21.279321 2026] [security2:error] [pid 2662802:tid 2662802] [client 185.177.72.10:59646] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/feature/php.ini"] [unique_id "amsTWX5QBEd5vBkI6VR-TQAAAAM"]
[Thu Jul 30 10:03:21.279695 2026] [security2:error] [pid 2662802:tid 2662802] [client 185.177.72.10:59646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/feature/php.ini"] [unique_id "amsTWX5QBEd5vBkI6VR-TQAAAAM"]
[Thu Jul 30 10:03:21.425269 2026] [security2:error] [pid 2662802:tid 2662802] [client 185.177.72.10:59646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTWX5QBEd5vBkI6VR-TQAAAAM"]
[Thu Jul 30 10:03:23.939005 2026] [ssl:error] [pid 2656777:tid 2656777] (EAI 2)Name or service not known: [client 144.76.19.72:49172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:23.939033 2026] [ssl:error] [pid 2656777:tid 2656777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:23.996631 2026] [ssl:error] [pid 2647985:tid 2647985] (EAI 2)Name or service not known: [client 144.76.19.72:49184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:23.996659 2026] [ssl:error] [pid 2647985:tid 2647985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:24.492883 2026] [ssl:error] [pid 2641844:tid 2641844] (70014)End of file found: [client 216.73.216.199:4061] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:25.399610 2026] [ssl:error] [pid 2653911:tid 2653911] (70014)End of file found: [client 216.73.216.199:34837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:25.865844 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:26976] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fedex/.env"] [unique_id "amsTXaIXxyCSWyU3dWQKugAAAAs"]
[Thu Jul 30 10:03:25.866011 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:26976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fedex/.env"] [unique_id "amsTXaIXxyCSWyU3dWQKugAAAAs"]
[Thu Jul 30 10:03:26.003437 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:26976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTXaIXxyCSWyU3dWQKugAAAAs"]
[Thu Jul 30 10:03:26.217960 2026] [security2:error] [pid 2661925:tid 2661925] [client 185.177.72.10:26986] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fhir-api/.env"] [unique_id "amsTXqy-Sp5GfCqe-ySNVAAAAC4"]
[Thu Jul 30 10:03:26.218169 2026] [security2:error] [pid 2661925:tid 2661925] [client 185.177.72.10:26986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fhir-api/.env"] [unique_id "amsTXqy-Sp5GfCqe-ySNVAAAAC4"]
[Thu Jul 30 10:03:26.358833 2026] [security2:error] [pid 2661925:tid 2661925] [client 185.177.72.10:26986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTXqy-Sp5GfCqe-ySNVAAAAC4"]
[Thu Jul 30 10:03:26.762856 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:27010] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/files/.env"] [unique_id "amsTXqIXxyCSWyU3dWQKuwAAAAs"]
[Thu Jul 30 10:03:26.763015 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:27010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/files/.env"] [unique_id "amsTXqIXxyCSWyU3dWQKuwAAAAs"]
[Thu Jul 30 10:03:26.904509 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:27010] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTXqIXxyCSWyU3dWQKuwAAAAs"]
[Thu Jul 30 10:03:26.939242 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fileserver/.env"] [unique_id "amsTXtXVHCKnVbaOyeEyOwAAAAA"]
[Thu Jul 30 10:03:26.939376 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fileserver/.env"] [unique_id "amsTXtXVHCKnVbaOyeEyOwAAAAA"]
[Thu Jul 30 10:03:27.056101 2026] [ssl:error] [pid 2651749:tid 2651749] (EAI 2)Name or service not known: [client 144.76.19.72:49196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:27.056129 2026] [ssl:error] [pid 2651749:tid 2651749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:27.083990 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTXtXVHCKnVbaOyeEyOwAAAAA"]
[Thu Jul 30 10:03:27.114244 2026] [ssl:error] [pid 2662985:tid 2662985] (EAI 2)Name or service not known: [client 144.76.19.72:49210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:27.114274 2026] [ssl:error] [pid 2662985:tid 2662985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:27.120926 2026] [security2:error] [pid 2657665:tid 2657665] [client 94.154.43.177:18586] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsTXyuxlaRmP82WWxXjoQAAACc"]
[Thu Jul 30 10:03:27.121132 2026] [security2:error] [pid 2657665:tid 2657665] [client 94.154.43.177:18586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsTXyuxlaRmP82WWxXjoQAAACc"]
[Thu Jul 30 10:03:27.122391 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27028] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/films/.env"] [unique_id "amsTX3lHpIskE27UX9_MPAAAAAU"]
[Thu Jul 30 10:03:27.122527 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/films/.env"] [unique_id "amsTX3lHpIskE27UX9_MPAAAAAU"]
[Thu Jul 30 10:03:27.221723 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.229:39294] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.proto.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsTX-djDh7oBT6qCsO1EgAAAAE"]
[Thu Jul 30 10:03:27.221940 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.229:39294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.proto.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsTX-djDh7oBT6qCsO1EgAAAAE"]
[Thu Jul 30 10:03:27.222407 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.229:39294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.proto.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsTX-djDh7oBT6qCsO1EgAAAAE"]
[Thu Jul 30 10:03:27.263689 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27028] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTX3lHpIskE27UX9_MPAAAAAU"]
[Thu Jul 30 10:03:27.302425 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:27030] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amsTXxotHL6VKbxpSwczJQAAAD4"]
[Thu Jul 30 10:03:27.302618 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:27030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "amsTXxotHL6VKbxpSwczJQAAAD4"]
[Thu Jul 30 10:03:27.440620 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:27030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTXxotHL6VKbxpSwczJQAAAD4"]
[Thu Jul 30 10:03:27.479175 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/first-network/.env"] [unique_id "amsTX9XVHCKnVbaOyeEyPAAAAAA"]
[Thu Jul 30 10:03:27.479352 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/first-network/.env"] [unique_id "amsTX9XVHCKnVbaOyeEyPAAAAAA"]
[Thu Jul 30 10:03:27.613849 2026] [core:error] [pid 2662985:tid 2662985] [client 66.249.66.68:49835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:03:27.613876 2026] [core:error] [pid 2662985:tid 2662985] [client 66.249.66.68:49835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:03:27.615728 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTX9XVHCKnVbaOyeEyPAAAAAA"]
[Thu Jul 30 10:03:27.623826 2026] [core:error] [pid 2656525:tid 2656525] [client 66.249.66.41:59133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:03:27.623858 2026] [core:error] [pid 2656525:tid 2656525] [client 66.249.66.41:59133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:03:27.651790 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27048] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fisdom/fisdom/.env"] [unique_id "amsTX3lHpIskE27UX9_MPQAAAAU"]
[Thu Jul 30 10:03:27.651968 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fisdom/fisdom/.env"] [unique_id "amsTX3lHpIskE27UX9_MPQAAAAU"]
[Thu Jul 30 10:03:27.793387 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTX3lHpIskE27UX9_MPQAAAAU"]
[Thu Jul 30 10:03:27.801233 2026] [ssl:error] [pid 2651610:tid 2651610] (70014)End of file found: [client 216.73.216.199:65033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:27.829312 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:27064] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/blocks/.env"] [unique_id "amsTXxotHL6VKbxpSwczJgAAAD4"]
[Thu Jul 30 10:03:27.829492 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:27064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/blocks/.env"] [unique_id "amsTXxotHL6VKbxpSwczJgAAAD4"]
[Thu Jul 30 10:03:27.969500 2026] [security2:error] [pid 2651749:tid 2651749] [client 185.177.72.10:27064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTXxotHL6VKbxpSwczJgAAAD4"]
[Thu Jul 30 10:03:28.006763 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:27072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amsTYOdjDh7oBT6qCsO1FAAAAAE"]
[Thu Jul 30 10:03:28.006950 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:27072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "amsTYOdjDh7oBT6qCsO1FAAAAAE"]
[Thu Jul 30 10:03:28.148650 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:27072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYOdjDh7oBT6qCsO1FAAAAAE"]
[Thu Jul 30 10:03:28.182804 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/flight/.env"] [unique_id "amsTYHlHpIskE27UX9_MPgAAAAU"]
[Thu Jul 30 10:03:28.182983 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/flight/.env"] [unique_id "amsTYHlHpIskE27UX9_MPgAAAAU"]
[Thu Jul 30 10:03:28.325359 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYHlHpIskE27UX9_MPgAAAAU"]
[Thu Jul 30 10:03:28.363995 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:27094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/kitchensink/.env"] [unique_id "amsTYDXenJQOMzHiNu5RYwAAABI"]
[Thu Jul 30 10:03:28.364234 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:27094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fixtures/kitchensink/.env"] [unique_id "amsTYDXenJQOMzHiNu5RYwAAABI"]
[Thu Jul 30 10:03:28.506409 2026] [security2:error] [pid 2656775:tid 2656775] [client 185.177.72.10:27094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYDXenJQOMzHiNu5RYwAAABI"]
[Thu Jul 30 10:03:28.541702 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27104] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/flask/.env"] [unique_id "amsTYNXVHCKnVbaOyeEyPgAAAAA"]
[Thu Jul 30 10:03:28.541892 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/flask/.env"] [unique_id "amsTYNXVHCKnVbaOyeEyPgAAAAA"]
[Thu Jul 30 10:03:28.696516 2026] [security2:error] [pid 2662765:tid 2662765] [client 185.177.72.10:27104] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYNXVHCKnVbaOyeEyPgAAAAA"]
[Thu Jul 30 10:03:28.884698 2026] [security2:error] [pid 2657665:tid 2657665] [client 94.154.43.177:18586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amsTXyuxlaRmP82WWxXjoQAAACc"]
[Thu Jul 30 10:03:29.014634 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.187:28552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsTYedjDh7oBT6qCsO1FQAAAAE"]
[Thu Jul 30 10:03:29.014824 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.187:28552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsTYedjDh7oBT6qCsO1FQAAAAE"]
[Thu Jul 30 10:03:29.462921 2026] [security2:error] [pid 2662846:tid 2662846] [client 185.177.72.10:27140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/flask_test_uploads/.env"] [unique_id "amsTYRt0XzpON9ngh7LyoAAAABo"]
[Thu Jul 30 10:03:29.463122 2026] [security2:error] [pid 2662846:tid 2662846] [client 185.177.72.10:27140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/flask_test_uploads/.env"] [unique_id "amsTYRt0XzpON9ngh7LyoAAAABo"]
[Thu Jul 30 10:03:29.603889 2026] [security2:error] [pid 2662846:tid 2662846] [client 185.177.72.10:27140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYRt0XzpON9ngh7LyoAAAABo"]
[Thu Jul 30 10:03:29.640467 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27154] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fm/.env"] [unique_id "amsTYXlHpIskE27UX9_MQAAAAAU"]
[Thu Jul 30 10:03:29.640631 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fm/.env"] [unique_id "amsTYXlHpIskE27UX9_MQAAAAAU"]
[Thu Jul 30 10:03:29.787074 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:27154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYXlHpIskE27UX9_MQAAAAAU"]
[Thu Jul 30 10:03:29.791273 2026] [security2:error] [pid 2656525:tid 2656525] [client 94.154.43.187:28552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amsTYedjDh7oBT6qCsO1FQAAAAE"]
[Thu Jul 30 10:03:29.795438 2026] [core:error] [pid 2656775:tid 2656775] (13)Permission denied: [client 216.73.216.199:46496] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 10:03:29.823782 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:27164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/font-icons/.env"] [unique_id "amsTYTB7kZOR-5vHJiE3lwAAABg"]
[Thu Jul 30 10:03:29.823953 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:27164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/font-icons/.env"] [unique_id "amsTYTB7kZOR-5vHJiE3lwAAABg"]
[Thu Jul 30 10:03:29.909830 2026] [core:error] [pid 2656775:tid 2656775] (13)Permission denied: [client 216.73.216.199:46496] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/sunrpc/sections/__ksymtab_gpl
[Thu Jul 30 10:03:29.963905 2026] [security2:error] [pid 2660226:tid 2660226] [client 185.177.72.10:27164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYTB7kZOR-5vHJiE3lwAAABg"]
[Thu Jul 30 10:03:30.002476 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:27168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/fonts/.env"] [unique_id "amsTYnkoAM9zKsL2ko7r0wAAADA"]
[Thu Jul 30 10:03:30.002672 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:27168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/fonts/.env"] [unique_id "amsTYnkoAM9zKsL2ko7r0wAAADA"]
[Thu Jul 30 10:03:30.163864 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:27168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYnkoAM9zKsL2ko7r0wAAADA"]
[Thu Jul 30 10:03:30.167794 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:27590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:30.167819 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:30.220503 2026] [ssl:error] [pid 2656525:tid 2656525] (EAI 2)Name or service not known: [client 144.76.19.72:27596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:30.220529 2026] [ssl:error] [pid 2656525:tid 2656525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:30.740190 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:27194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/front-app/.env"] [unique_id "amsTYnkoAM9zKsL2ko7r1AAAADA"]
[Thu Jul 30 10:03:30.740324 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:27194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/front-app/.env"] [unique_id "amsTYnkoAM9zKsL2ko7r1AAAADA"]
[Thu Jul 30 10:03:30.881185 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:27194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYnkoAM9zKsL2ko7r1AAAADA"]
[Thu Jul 30 10:03:30.915379 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27198] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/front-empathy/.env"] [unique_id "amsTYuAOfUDYJWq_uNeGIgAAACI"]
[Thu Jul 30 10:03:30.915501 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/front-empathy/.env"] [unique_id "amsTYuAOfUDYJWq_uNeGIgAAACI"]
[Thu Jul 30 10:03:31.054766 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYuAOfUDYJWq_uNeGIgAAACI"]
[Thu Jul 30 10:03:31.091209 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:27206] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/front-end/.env"] [unique_id "amsTYzc6pcH3xNdqZAL4rAAAAEU"]
[Thu Jul 30 10:03:31.091361 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:27206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/front-end/.env"] [unique_id "amsTYzc6pcH3xNdqZAL4rAAAAEU"]
[Thu Jul 30 10:03:31.241348 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:27206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYzc6pcH3xNdqZAL4rAAAAEU"]
[Thu Jul 30 10:03:31.279483 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27212] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/front/.env"] [unique_id "amsTY-AOfUDYJWq_uNeGIwAAACI"]
[Thu Jul 30 10:03:31.279723 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/front/.env"] [unique_id "amsTY-AOfUDYJWq_uNeGIwAAACI"]
[Thu Jul 30 10:03:31.439168 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTY-AOfUDYJWq_uNeGIwAAACI"]
[Thu Jul 30 10:03:31.476782 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:27220] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/front/src/.env"] [unique_id "amsTYzc6pcH3xNdqZAL4rQAAAEU"]
[Thu Jul 30 10:03:31.476917 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:27220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/front/src/.env"] [unique_id "amsTYzc6pcH3xNdqZAL4rQAAAEU"]
[Thu Jul 30 10:03:31.636306 2026] [security2:error] [pid 2651755:tid 2651755] [client 185.177.72.10:27220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYzc6pcH3xNdqZAL4rQAAAEU"]
[Thu Jul 30 10:03:31.863931 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:27238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/frontend/momentum-fe/.env"] [unique_id "amsTYyWFM8hQoRh50ymkCgAAAC8"]
[Thu Jul 30 10:03:31.864157 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:27238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/frontend/momentum-fe/.env"] [unique_id "amsTYyWFM8hQoRh50ymkCgAAAC8"]
[Thu Jul 30 10:03:32.001549 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:27238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTYyWFM8hQoRh50ymkCgAAAC8"]
[Thu Jul 30 10:03:32.036141 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27248] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/frontend/react/.env"] [unique_id "amsTZACxqLdzIG01-6wpRQAAAA8"]
[Thu Jul 30 10:03:32.036310 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/frontend/react/.env"] [unique_id "amsTZACxqLdzIG01-6wpRQAAAA8"]
[Thu Jul 30 10:03:32.184461 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZACxqLdzIG01-6wpRQAAAA8"]
[Thu Jul 30 10:03:32.221904 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:27254] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/frontend/vue/.env"] [unique_id "amsTZOdjDh7oBT6qCsO1FwAAAAE"]
[Thu Jul 30 10:03:32.222087 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:27254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/frontend/vue/.env"] [unique_id "amsTZOdjDh7oBT6qCsO1FwAAAAE"]
[Thu Jul 30 10:03:32.363555 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:27254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZOdjDh7oBT6qCsO1FwAAAAE"]
[Thu Jul 30 10:03:32.577122 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:27266] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/frontendfinaltest/.env"] [unique_id "amsTZCWFM8hQoRh50ymkCwAAAC8"]
[Thu Jul 30 10:03:32.577304 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:27266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/frontendfinaltest/.env"] [unique_id "amsTZCWFM8hQoRh50ymkCwAAAC8"]
[Thu Jul 30 10:03:32.715926 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:27266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZCWFM8hQoRh50ymkCwAAAC8"]
[Thu Jul 30 10:03:32.752058 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27274] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ftp/.env"] [unique_id "amsTZACxqLdzIG01-6wpRgAAAA8"]
[Thu Jul 30 10:03:32.752246 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ftp/.env"] [unique_id "amsTZACxqLdzIG01-6wpRgAAAA8"]
[Thu Jul 30 10:03:32.890119 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZACxqLdzIG01-6wpRgAAAA8"]
[Thu Jul 30 10:03:32.925331 2026] [security2:error] [pid 2663434:tid 2663434] [client 185.177.72.10:27278] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ftpmaster/.env"] [unique_id "amsTZHH_bBKCmxYKHFsfqgAAADM"]
[Thu Jul 30 10:03:32.925614 2026] [security2:error] [pid 2663434:tid 2663434] [client 185.177.72.10:27278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ftpmaster/.env"] [unique_id "amsTZHH_bBKCmxYKHFsfqgAAADM"]
[Thu Jul 30 10:03:33.067309 2026] [security2:error] [pid 2663434:tid 2663434] [client 185.177.72.10:27278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZHH_bBKCmxYKHFsfqgAAADM"]
[Thu Jul 30 10:03:33.100760 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:27292] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/function/.env"] [unique_id "amsTZc8k6raxiuAenpn68QAAACk"]
[Thu Jul 30 10:03:33.100914 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:27292] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/function/.env"] [unique_id "amsTZc8k6raxiuAenpn68QAAACk"]
[Thu Jul 30 10:03:33.242988 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:27292] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZc8k6raxiuAenpn68QAAACk"]
[Thu Jul 30 10:03:33.277440 2026] [ssl:error] [pid 2651610:tid 2651610] (EAI 2)Name or service not known: [client 144.76.19.72:27608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:33.277467 2026] [ssl:error] [pid 2651610:tid 2651610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:33.278728 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.bak"] [unique_id "amsTZQCxqLdzIG01-6wpRwAAAA8"]
[Thu Jul 30 10:03:33.278899 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.bak"] [unique_id "amsTZQCxqLdzIG01-6wpRwAAAA8"]
[Thu Jul 30 10:03:33.333890 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:27622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:33.333916 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:33.417491 2026] [security2:error] [pid 2661599:tid 2661599] [client 185.177.72.10:27296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZQCxqLdzIG01-6wpRwAAAA8"]
[Thu Jul 30 10:03:33.450425 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:27300] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.dev"] [unique_id "amsTZc8k6raxiuAenpn68gAAACk"]
[Thu Jul 30 10:03:33.450611 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:27300] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.dev"] [unique_id "amsTZc8k6raxiuAenpn68gAAACk"]
[Thu Jul 30 10:03:33.588091 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:27300] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZc8k6raxiuAenpn68gAAACk"]
[Thu Jul 30 10:03:33.626411 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27302] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.dist"] [unique_id "amsTZeAOfUDYJWq_uNeGJQAAACI"]
[Thu Jul 30 10:03:33.626607 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27302] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.dist"] [unique_id "amsTZeAOfUDYJWq_uNeGJQAAACI"]
[Thu Jul 30 10:03:33.767654 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:27302] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZeAOfUDYJWq_uNeGJQAAACI"]
[Thu Jul 30 10:03:33.806311 2026] [security2:error] [pid 2663435:tid 2663435] [client 185.177.72.10:27306] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /function/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.local"] [unique_id "amsTZSNHRWAt2oEI0OxCKAAAADQ"]
[Thu Jul 30 10:03:33.806568 2026] [security2:error] [pid 2663435:tid 2663435] [client 185.177.72.10:27306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/function/.env.local"] [unique_id "amsTZSNHRWAt2oEI0OxCKAAAADQ"]
[Thu Jul 30 10:03:33.945262 2026] [security2:error] [pid 2663435:tid 2663435] [client 185.177.72.10:27306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTZSNHRWAt2oEI0OxCKAAAADQ"]
[Thu Jul 30 10:03:34.429151 2026] [ssl:error] [pid 2656775:tid 2656775] (70014)End of file found: [client 216.73.216.199:46496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:34.729743 2026] [ssl:error] [pid 2662902:tid 2662902] (70014)End of file found: [client 216.73.216.199:29939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:35.364147 2026] [security2:error] [pid 2656569:tid 2656569] [client 74.7.242.23:37250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "iapib.com"] [uri "/"] [unique_id "amsTZxGyrjYSqISJXfzC2gAAAAI"]
[Thu Jul 30 10:03:36.388751 2026] [ssl:error] [pid 2662896:tid 2662896] (EAI 2)Name or service not known: [client 144.76.19.72:27624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:36.388785 2026] [ssl:error] [pid 2662896:tid 2662896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:36.440954 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:27630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:36.440980 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:36.842584 2026] [ssl:error] [pid 2662985:tid 2662985] (70014)End of file found: [client 216.73.216.199:37103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:36.905313 2026] [security2:error] [pid 2657476:tid 2657476] [client 185.191.171.16:49482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/minerva-marrow-thieves-quotes"] [unique_id "amsTaMqaWt419_qS7Q22JQAAACM"]
[Thu Jul 30 10:03:39.496532 2026] [ssl:error] [pid 2661695:tid 2661695] (EAI 2)Name or service not known: [client 144.76.19.72:27644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:39.496566 2026] [ssl:error] [pid 2661695:tid 2661695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:39.554520 2026] [ssl:error] [pid 2656525:tid 2656525] (EAI 2)Name or service not known: [client 144.76.19.72:27656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:39.554550 2026] [ssl:error] [pid 2656525:tid 2656525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:40.103616 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:22458] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/function/php.ini"] [unique_id "amsTbDFpNZWRgzOxX1L60wAAACQ"]
[Thu Jul 30 10:03:40.103957 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:22458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/function/php.ini"] [unique_id "amsTbDFpNZWRgzOxX1L60wAAACQ"]
[Thu Jul 30 10:03:40.264587 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:22458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTbDFpNZWRgzOxX1L60wAAACQ"]
[Thu Jul 30 10:03:40.388859 2026] [core:error] [pid 2663435:tid 2663435] [client 45.32.151.65:33196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:03:40.388885 2026] [core:error] [pid 2663435:tid 2663435] [client 45.32.151.65:33196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:03:40.683091 2026] [ssl:error] [pid 2661925:tid 2661925] (70014)End of file found: [client 216.73.216.199:1366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:42.608190 2026] [ssl:error] [pid 2656695:tid 2656695] (EAI 2)Name or service not known: [client 144.76.19.72:62352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:42.608233 2026] [ssl:error] [pid 2656695:tid 2656695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:42.661341 2026] [ssl:error] [pid 2624681:tid 2624681] (EAI 2)Name or service not known: [client 144.76.19.72:62366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:42.661365 2026] [ssl:error] [pid 2624681:tid 2624681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:43.388650 2026] [ssl:error] [pid 2662897:tid 2662897] (70014)End of file found: [client 216.73.216.199:21049] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:43.730940 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:22624] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/gists/cache/.env"] [unique_id "amsTb6RybkvKjuCZFsP6PAAAAFM"]
[Thu Jul 30 10:03:43.731080 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:22624] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/gists/cache/.env"] [unique_id "amsTb6RybkvKjuCZFsP6PAAAAFM"]
[Thu Jul 30 10:03:43.876542 2026] [security2:error] [pid 2624681:tid 2624681] [client 185.177.72.10:22624] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTb6RybkvKjuCZFsP6PAAAAFM"]
[Thu Jul 30 10:03:43.894309 2026] [lsapi:warn] [pid 2657868:tid 2657868] [client 194.249.231.23:35956] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 10:03:43.894352 2026] [lsapi:warn] [pid 2657868:tid 2657868] [client 194.249.231.23:35956] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 10:03:43.909108 2026] [security2:error] [pid 2662985:tid 2662985] [client 185.177.72.10:22628] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/gists/laravel/.env"] [unique_id "amsTb7ybTVqszS4rtMjPKQAAADI"]
[Thu Jul 30 10:03:43.909277 2026] [security2:error] [pid 2662985:tid 2662985] [client 185.177.72.10:22628] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/gists/laravel/.env"] [unique_id "amsTb7ybTVqszS4rtMjPKQAAADI"]
[Thu Jul 30 10:03:44.054583 2026] [security2:error] [pid 2662985:tid 2662985] [client 185.177.72.10:22628] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTb7ybTVqszS4rtMjPKQAAADI"]
[Thu Jul 30 10:03:44.101715 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:22640] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gists/pusher/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/gists/pusher/.env"] [unique_id "amsTcKoMUy6NWS4BIAk_CQAAAAo"]
[Thu Jul 30 10:03:44.101895 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:22640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/gists/pusher/.env"] [unique_id "amsTcKoMUy6NWS4BIAk_CQAAAAo"]
[Thu Jul 30 10:03:44.242246 2026] [security2:error] [pid 2660087:tid 2660087] [client 185.177.72.10:22640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTcKoMUy6NWS4BIAk_CQAAAAo"]
[Thu Jul 30 10:03:44.276524 2026] [security2:error] [pid 2662903:tid 2662903] [client 185.177.72.10:22648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/github-connect/.env"] [unique_id "amsTcMVkr5pNb9G6729ZFwAAADE"]
[Thu Jul 30 10:03:44.276715 2026] [security2:error] [pid 2662903:tid 2662903] [client 185.177.72.10:22648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/github-connect/.env"] [unique_id "amsTcMVkr5pNb9G6729ZFwAAADE"]
[Thu Jul 30 10:03:44.425722 2026] [security2:error] [pid 2662903:tid 2662903] [client 185.177.72.10:22648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTcMVkr5pNb9G6729ZFwAAADE"]
[Thu Jul 30 10:03:44.460398 2026] [security2:error] [pid 2661696:tid 2661696] [client 185.177.72.10:22654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/global.asa"] [unique_id "amsTcGoW_dkBMJHY218O7wAAACY"]
[Thu Jul 30 10:03:44.460713 2026] [security2:error] [pid 2661696:tid 2661696] [client 185.177.72.10:22654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/global.asa"] [unique_id "amsTcGoW_dkBMJHY218O7wAAACY"]
[Thu Jul 30 10:03:44.608500 2026] [security2:error] [pid 2661696:tid 2661696] [client 185.177.72.10:22654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTcGoW_dkBMJHY218O7wAAACY"]
[Thu Jul 30 10:03:45.586462 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:19288] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".asax"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/global.asax"] [unique_id "amsTcSWFM8hQoRh50ymkEQAAAC8"]
[Thu Jul 30 10:03:45.586958 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:19288] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/global.asax"] [unique_id "amsTcSWFM8hQoRh50ymkEQAAAC8"]
[Thu Jul 30 10:03:45.720146 2026] [ssl:error] [pid 2661650:tid 2661650] (EAI 2)Name or service not known: [client 144.76.19.72:62380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:45.720177 2026] [ssl:error] [pid 2661650:tid 2661650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:45.734323 2026] [security2:error] [pid 2663392:tid 2663392] [client 185.177.72.10:19288] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTcSWFM8hQoRh50ymkEQAAAC8"]
[Thu Jul 30 10:03:45.773524 2026] [ssl:error] [pid 2662803:tid 2662803] (EAI 2)Name or service not known: [client 144.76.19.72:62394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:45.773553 2026] [ssl:error] [pid 2662803:tid 2662803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:45.797021 2026] [ssl:error] [pid 2661695:tid 2661695] (70014)End of file found: [client 216.73.216.199:8892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:46.226668 2026] [security2:error] [pid 2661925:tid 2661925] [client 43.153.48.240:34686] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsTcqy-Sp5GfCqe-ySNXwAAAC4"]
[Thu Jul 30 10:03:47.832231 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:19392] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/globals.inc"] [unique_id "amsTc3HjW_MCXTSG6ZazIgAAABE"]
[Thu Jul 30 10:03:47.832525 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:19392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/globals.inc"] [unique_id "amsTc3HjW_MCXTSG6ZazIgAAABE"]
[Thu Jul 30 10:03:47.987266 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:19392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTc3HjW_MCXTSG6ZazIgAAABE"]
[Thu Jul 30 10:03:48.294176 2026] [security2:error] [pid 2662803:tid 2662803] [client 43.153.48.240:38134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsTdHlHpIskE27UX9_MTQAAAAU"], referer: http://beechhouseselfcatering.co.uk
[Thu Jul 30 10:03:48.387088 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:19418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/grems-api/.env"] [unique_id "amsTdKIXxyCSWyU3dWQKxwAAAAs"]
[Thu Jul 30 10:03:48.387276 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:19418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/grems-api/.env"] [unique_id "amsTdKIXxyCSWyU3dWQKxwAAAAs"]
[Thu Jul 30 10:03:48.544009 2026] [security2:error] [pid 2662843:tid 2662843] [client 185.177.72.10:19418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTdKIXxyCSWyU3dWQKxwAAAAs"]
[Thu Jul 30 10:03:48.577743 2026] [security2:error] [pid 2663435:tid 2663435] [client 185.177.72.10:19434] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/grems-frontend/.env"] [unique_id "amsTdCNHRWAt2oEI0OxCMQAAADQ"]
[Thu Jul 30 10:03:48.577932 2026] [security2:error] [pid 2663435:tid 2663435] [client 185.177.72.10:19434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/grems-frontend/.env"] [unique_id "amsTdCNHRWAt2oEI0OxCMQAAADQ"]
[Thu Jul 30 10:03:48.732136 2026] [security2:error] [pid 2663435:tid 2663435] [client 185.177.72.10:19434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTdCNHRWAt2oEI0OxCMQAAADQ"]
[Thu Jul 30 10:03:48.767810 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/hasura/.env"] [unique_id "amsTdK-36wuRRqmCRO-EjwAAAAY"]
[Thu Jul 30 10:03:48.768054 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/hasura/.env"] [unique_id "amsTdK-36wuRRqmCRO-EjwAAAAY"]
[Thu Jul 30 10:03:48.845129 2026] [ssl:error] [pid 2660087:tid 2660087] (EAI 2)Name or service not known: [client 144.76.19.72:62410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:48.845171 2026] [ssl:error] [pid 2660087:tid 2660087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:48.897224 2026] [ssl:error] [pid 2662897:tid 2662897] (EAI 2)Name or service not known: [client 144.76.19.72:62412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:48.897254 2026] [ssl:error] [pid 2662897:tid 2662897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:48.907287 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTdK-36wuRRqmCRO-EjwAAAAY"]
[Thu Jul 30 10:03:49.114179 2026] [ssl:error] [pid 2656695:tid 2656695] (70014)End of file found: [client 216.73.216.199:32377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:49.469711 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19480] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env"] [unique_id "amsTda-36wuRRqmCRO-EkAAAAAY"]
[Thu Jul 30 10:03:49.469890 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env"] [unique_id "amsTda-36wuRRqmCRO-EkAAAAAY"]
[Thu Jul 30 10:03:49.609388 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTda-36wuRRqmCRO-EkAAAAAY"]
[Thu Jul 30 10:03:49.645352 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:19492] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.bak"] [unique_id "amsTdXlHpIskE27UX9_MTgAAAAU"]
[Thu Jul 30 10:03:49.645503 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:19492] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.bak"] [unique_id "amsTdXlHpIskE27UX9_MTgAAAAU"]
[Thu Jul 30 10:03:49.789094 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:19492] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTdXlHpIskE27UX9_MTgAAAAU"]
[Thu Jul 30 10:03:49.823413 2026] [security2:error] [pid 2662985:tid 2662985] [client 185.177.72.10:19500] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.dev"] [unique_id "amsTdbybTVqszS4rtMjPKwAAADI"]
[Thu Jul 30 10:03:49.823535 2026] [security2:error] [pid 2662985:tid 2662985] [client 185.177.72.10:19500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.dev"] [unique_id "amsTdbybTVqszS4rtMjPKwAAADI"]
[Thu Jul 30 10:03:49.961034 2026] [security2:error] [pid 2662985:tid 2662985] [client 185.177.72.10:19500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTdbybTVqszS4rtMjPKwAAADI"]
[Thu Jul 30 10:03:49.996055 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:19514] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.dist"] [unique_id "amsTdTFpNZWRgzOxX1L62AAAACQ"]
[Thu Jul 30 10:03:49.996247 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:19514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.dist"] [unique_id "amsTdTFpNZWRgzOxX1L62AAAACQ"]
[Thu Jul 30 10:03:50.017515 2026] [ssl:error] [pid 2662902:tid 2662902] (70014)End of file found: [client 216.73.216.199:21654] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:50.133672 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:19514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTdTFpNZWRgzOxX1L62AAAACQ"]
[Thu Jul 30 10:03:50.169537 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19520] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.local"] [unique_id "amsTdq-36wuRRqmCRO-EkQAAAAY"]
[Thu Jul 30 10:03:50.169727 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19520] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/helper/.env.local"] [unique_id "amsTdq-36wuRRqmCRO-EkQAAAAY"]
[Thu Jul 30 10:03:50.307587 2026] [security2:error] [pid 2664209:tid 2664209] [client 185.177.72.10:19520] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTdq-36wuRRqmCRO-EkQAAAAY"]
[Thu Jul 30 10:03:51.220571 2026] [ssl:error] [pid 2660087:tid 2660087] (70014)End of file found: [client 216.73.216.199:44411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:51.949495 2026] [ssl:error] [pid 2662897:tid 2662897] (EAI 2)Name or service not known: [client 144.76.19.72:23728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:51.949521 2026] [ssl:error] [pid 2662897:tid 2662897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:52.002748 2026] [ssl:error] [pid 2664209:tid 2664209] (EAI 2)Name or service not known: [client 144.76.19.72:23738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:52.002781 2026] [ssl:error] [pid 2664209:tid 2664209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:55.059800 2026] [ssl:error] [pid 2662845:tid 2662845] (EAI 2)Name or service not known: [client 144.76.19.72:23750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:55.059848 2026] [ssl:error] [pid 2662845:tid 2662845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:55.113164 2026] [ssl:error] [pid 2661650:tid 2661650] (EAI 2)Name or service not known: [client 144.76.19.72:23762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:55.113190 2026] [ssl:error] [pid 2661650:tid 2661650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:55.320222 2026] [security2:error] [pid 2651609:tid 2651609] [client 114.119.144.31:64151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578355200/cat_ids~30,19,18,104/request_format~html"] [unique_id "amsTe3wjqb36bSo_KiGVYQAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578355200/cat_ids~30,19,18/request_format~html
[Thu Jul 30 10:03:56.275235 2026] [security2:error] [pid 2657868:tid 2657868] [client 114.119.144.31:64163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578355200/cat_ids~30,19,18,104/request_format~html"] [unique_id "amsTfJ8pyQCyh-5gXHG70AAAACg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578355200/cat_ids~30,19,18/request_format~html
[Thu Jul 30 10:03:56.388110 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:33144] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/helper/php.ini"] [unique_id "amsTfFbY9mNS7d0SJ78iTgAAABQ"]
[Thu Jul 30 10:03:56.388465 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:33144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/helper/php.ini"] [unique_id "amsTfFbY9mNS7d0SJ78iTgAAABQ"]
[Thu Jul 30 10:03:56.533040 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:33144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTfFbY9mNS7d0SJ78iTgAAABQ"]
[Thu Jul 30 10:03:58.143411 2026] [ssl:error] [pid 2662985:tid 2662985] (70014)End of file found: [client 216.73.216.199:15283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:58.172515 2026] [ssl:error] [pid 2641844:tid 2641844] (EAI 2)Name or service not known: [client 144.76.19.72:23776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:58.172543 2026] [ssl:error] [pid 2641844:tid 2641844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:58.226879 2026] [ssl:error] [pid 2653911:tid 2653911] (EAI 2)Name or service not known: [client 144.76.19.72:23782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:03:58.226911 2026] [ssl:error] [pid 2653911:tid 2653911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:03:59.045699 2026] [ssl:error] [pid 2656777:tid 2656777] (70014)End of file found: [client 216.73.216.199:62684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:03:59.165172 2026] [security2:error] [pid 2657868:tid 2657868] [client 43.130.101.151:45932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/goods.php"] [unique_id "amsTf58pyQCyh-5gXHG70gAAACg"]
[Thu Jul 30 10:03:59.350780 2026] [core:error] [pid 2663145:tid 2663145] (13)Permission denied: [client 216.73.216.199:48910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/order
[Thu Jul 30 10:03:59.721587 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:33308] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/hgs-static/.env"] [unique_id "amsTf88k6raxiuAenpn7SwAAACk"]
[Thu Jul 30 10:03:59.721794 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:33308] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/hgs-static/.env"] [unique_id "amsTf88k6raxiuAenpn7SwAAACk"]
[Thu Jul 30 10:03:59.861039 2026] [security2:error] [pid 2662900:tid 2662900] [client 185.177.72.10:33308] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTf88k6raxiuAenpn7SwAAACk"]
[Thu Jul 30 10:03:59.897012 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33314] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/higlass-website/.env"] [unique_id "amsTf-AOfUDYJWq_uNeGLgAAACI"]
[Thu Jul 30 10:03:59.897210 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/higlass-website/.env"] [unique_id "amsTf-AOfUDYJWq_uNeGLgAAACI"]
[Thu Jul 30 10:04:00.034354 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTf-AOfUDYJWq_uNeGLgAAACI"]
[Thu Jul 30 10:04:00.244631 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:33346] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/horde/.env"] [unique_id "amsTgHHjW_MCXTSG6ZazKwAAABE"]
[Thu Jul 30 10:04:00.244781 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:33346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/horde/.env"] [unique_id "amsTgHHjW_MCXTSG6ZazKwAAABE"]
[Thu Jul 30 10:04:00.382434 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:33346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgHHjW_MCXTSG6ZazKwAAABE"]
[Thu Jul 30 10:04:00.422012 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:33352] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/hotpot-app-frontend/.env"] [unique_id "amsTgBGyrjYSqISJXfzC4QAAAAI"]
[Thu Jul 30 10:04:00.422203 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:33352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/hotpot-app-frontend/.env"] [unique_id "amsTgBGyrjYSqISJXfzC4QAAAAI"]
[Thu Jul 30 10:04:00.564842 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:33352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgBGyrjYSqISJXfzC4QAAAAI"]
[Thu Jul 30 10:04:00.599999 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33354] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/htdocs/.env"] [unique_id "amsTgOAOfUDYJWq_uNeGLwAAACI"]
[Thu Jul 30 10:04:00.600184 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33354] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/htdocs/.env"] [unique_id "amsTgOAOfUDYJWq_uNeGLwAAACI"]
[Thu Jul 30 10:04:00.740206 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33354] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgOAOfUDYJWq_uNeGLwAAACI"]
[Thu Jul 30 10:04:00.774653 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33364] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/html/.env"] [unique_id "amsTgOdjDh7oBT6qCsO1KgAAAAE"]
[Thu Jul 30 10:04:00.774831 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/html/.env"] [unique_id "amsTgOdjDh7oBT6qCsO1KgAAAAE"]
[Thu Jul 30 10:04:00.915183 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgOdjDh7oBT6qCsO1KgAAAAE"]
[Thu Jul 30 10:04:01.282037 2026] [ssl:error] [pid 2661650:tid 2661650] (EAI 2)Name or service not known: [client 144.76.19.72:38610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:01.282081 2026] [ssl:error] [pid 2661650:tid 2661650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:01.294508 2026] [security2:error] [pid 2662899:tid 2662899] [client 185.177.72.10:33396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/http/.env"] [unique_id "amsTgZYTcUcIwUm1CN_tOgAAACU"]
[Thu Jul 30 10:04:01.294697 2026] [security2:error] [pid 2662899:tid 2662899] [client 185.177.72.10:33396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/http/.env"] [unique_id "amsTgZYTcUcIwUm1CN_tOgAAACU"]
[Thu Jul 30 10:04:01.335327 2026] [ssl:error] [pid 2656569:tid 2656569] (EAI 2)Name or service not known: [client 144.76.19.72:38618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:01.335355 2026] [ssl:error] [pid 2656569:tid 2656569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:01.437142 2026] [security2:error] [pid 2662899:tid 2662899] [client 185.177.72.10:33396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgZYTcUcIwUm1CN_tOgAAACU"]
[Thu Jul 30 10:04:01.474033 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/httpboot/.env"] [unique_id "amsTgeAOfUDYJWq_uNeGMAAAACI"]
[Thu Jul 30 10:04:01.474178 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/httpboot/.env"] [unique_id "amsTgeAOfUDYJWq_uNeGMAAAACI"]
[Thu Jul 30 10:04:01.622862 2026] [security2:error] [pid 2641844:tid 2641844] [client 185.177.72.10:33400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgeAOfUDYJWq_uNeGMAAAACI"]
[Thu Jul 30 10:04:01.656981 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:33402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/icon/.env"] [unique_id "amsTgbXZCFa7ftwinVV46gAAADc"]
[Thu Jul 30 10:04:01.657140 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:33402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/icon/.env"] [unique_id "amsTgbXZCFa7ftwinVV46gAAADc"]
[Thu Jul 30 10:04:01.810194 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:33402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgbXZCFa7ftwinVV46gAAADc"]
[Thu Jul 30 10:04:01.847039 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:33414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/icons/.env"] [unique_id "amsTgXHjW_MCXTSG6ZazLAAAABE"]
[Thu Jul 30 10:04:01.847235 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:33414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/icons/.env"] [unique_id "amsTgXHjW_MCXTSG6ZazLAAAABE"]
[Thu Jul 30 10:04:01.991784 2026] [security2:error] [pid 2661650:tid 2661650] [client 185.177.72.10:33414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgXHjW_MCXTSG6ZazLAAAABE"]
[Thu Jul 30 10:04:02.029727 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:33418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/ikiwiki/.env"] [unique_id "amsTghGyrjYSqISJXfzC4gAAAAI"]
[Thu Jul 30 10:04:02.029910 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:33418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/ikiwiki/.env"] [unique_id "amsTghGyrjYSqISJXfzC4gAAAAI"]
[Thu Jul 30 10:04:02.169455 2026] [security2:error] [pid 2656569:tid 2656569] [client 185.177.72.10:33418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTghGyrjYSqISJXfzC4gAAAAI"]
[Thu Jul 30 10:04:02.204573 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:33428] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/image_data/.env"] [unique_id "amsTgjFpNZWRgzOxX1L63AAAACQ"]
[Thu Jul 30 10:04:02.204769 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:33428] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/image_data/.env"] [unique_id "amsTgjFpNZWRgzOxX1L63AAAACQ"]
[Thu Jul 30 10:04:02.347216 2026] [security2:error] [pid 2662898:tid 2662898] [client 185.177.72.10:33428] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgjFpNZWRgzOxX1L63AAAACQ"]
[Thu Jul 30 10:04:02.386998 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/images/.env"] [unique_id "amsTgudjDh7oBT6qCsO1LAAAAAE"]
[Thu Jul 30 10:04:02.387192 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/images/.env"] [unique_id "amsTgudjDh7oBT6qCsO1LAAAAAE"]
[Thu Jul 30 10:04:02.533903 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgudjDh7oBT6qCsO1LAAAAAE"]
[Thu Jul 30 10:04:02.572562 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:33444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/img/.env"] [unique_id "amsTgrXZCFa7ftwinVV46wAAADc"]
[Thu Jul 30 10:04:02.572805 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:33444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/img/.env"] [unique_id "amsTgrXZCFa7ftwinVV46wAAADc"]
[Thu Jul 30 10:04:02.712527 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.177.72.10:33444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTgrXZCFa7ftwinVV46wAAADc"]
[Thu Jul 30 10:04:04.239249 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:33512] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/info/.env"] [unique_id "amsThLHF7Tkt0Xyi3WPxoQAAACA"]
[Thu Jul 30 10:04:04.239426 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:33512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/info/.env"] [unique_id "amsThLHF7Tkt0Xyi3WPxoQAAACA"]
[Thu Jul 30 10:04:04.385055 2026] [security2:error] [pid 2661695:tid 2661695] [client 185.177.72.10:33512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsThLHF7Tkt0Xyi3WPxoQAAACA"]
[Thu Jul 30 10:04:04.388985 2026] [ssl:error] [pid 2662896:tid 2662896] (EAI 2)Name or service not known: [client 144.76.19.72:38628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:04.389008 2026] [ssl:error] [pid 2662896:tid 2662896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:04.425938 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33518] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.bak"] [unique_id "amsThOdjDh7oBT6qCsO1LgAAAAE"]
[Thu Jul 30 10:04:04.426128 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.bak"] [unique_id "amsThOdjDh7oBT6qCsO1LgAAAAE"]
[Thu Jul 30 10:04:04.445515 2026] [ssl:error] [pid 2660226:tid 2660226] (EAI 2)Name or service not known: [client 144.76.19.72:38640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:04.445550 2026] [ssl:error] [pid 2660226:tid 2660226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:04.582668 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:33518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsThOdjDh7oBT6qCsO1LgAAAAE"]
[Thu Jul 30 10:04:04.617659 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:33530] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.dev"] [unique_id "amsThHkoAM9zKsL2ko7r4QAAADA"]
[Thu Jul 30 10:04:04.617836 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:33530] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.dev"] [unique_id "amsThHkoAM9zKsL2ko7r4QAAADA"]
[Thu Jul 30 10:04:04.790845 2026] [security2:error] [pid 2662902:tid 2662902] [client 185.177.72.10:33530] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsThHkoAM9zKsL2ko7r4QAAADA"]
[Thu Jul 30 10:04:04.828020 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:11004] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.dist"] [unique_id "amsThPMRvA5UKQZZ7j6dQwAAABY"]
[Thu Jul 30 10:04:04.828211 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:11004] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.dist"] [unique_id "amsThPMRvA5UKQZZ7j6dQwAAABY"]
[Thu Jul 30 10:04:04.875220 2026] [security2:error] [pid 2657868:tid 2657868] [client 185.191.171.7:55480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsThJ8pyQCyh-5gXHG70wAAACg"]
[Thu Jul 30 10:04:04.972867 2026] [security2:error] [pid 2656777:tid 2656777] [client 185.177.72.10:11004] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsThPMRvA5UKQZZ7j6dQwAAABY"]
[Thu Jul 30 10:04:05.009242 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:11020] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /info/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.local"] [unique_id "amsThVbY9mNS7d0SJ78iUQAAABQ"]
[Thu Jul 30 10:04:05.009428 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:11020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/info/.env.local"] [unique_id "amsThVbY9mNS7d0SJ78iUQAAABQ"]
[Thu Jul 30 10:04:05.160043 2026] [security2:error] [pid 2653911:tid 2653911] [client 185.177.72.10:11020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsThVbY9mNS7d0SJ78iUQAAABQ"]
[Thu Jul 30 10:04:05.228512 2026] [security2:error] [pid 2662896:tid 2662896] [client 85.208.96.206:61414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10274.0/prev_next,prev.html"] [unique_id "amsThegzXsPMq-qGSBBjCQAAAB8"]
[Thu Jul 30 10:04:05.980340 2026] [core:error] [pid 2663145:tid 2663145] (13)Permission denied: [client 216.73.216.199:48910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/physical_node/resource1
[Thu Jul 30 10:04:06.237222 2026] [security2:error] [pid 2661695:tid 2661695] [client 44.223.115.10:52894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/pechakucha-2014a/"] [unique_id "amsThrHF7Tkt0Xyi3WPxowAAACA"]
[Thu Jul 30 10:04:06.582663 2026] [core:error] [pid 2663145:tid 2663145] (13)Permission denied: [client 216.73.216.199:48910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup10/device/physical_node/resource4
[Thu Jul 30 10:04:07.502737 2026] [ssl:error] [pid 2656525:tid 2656525] (EAI 2)Name or service not known: [client 144.76.19.72:38648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:07.502763 2026] [ssl:error] [pid 2656525:tid 2656525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:07.560225 2026] [ssl:error] [pid 2661695:tid 2661695] (EAI 2)Name or service not known: [client 144.76.19.72:38658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:07.560250 2026] [ssl:error] [pid 2661695:tid 2661695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:10.617735 2026] [ssl:error] [pid 2657476:tid 2657476] (EAI 2)Name or service not known: [client 144.76.19.72:65198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:10.617789 2026] [ssl:error] [pid 2657476:tid 2657476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:10.670289 2026] [ssl:error] [pid 2648183:tid 2648183] (EAI 2)Name or service not known: [client 144.76.19.72:65204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:10.670317 2026] [ssl:error] [pid 2648183:tid 2648183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:11.494043 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:11356] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/info/php.ini"] [unique_id "amsTi8ID0if8VsKUbzolAgAAABw"]
[Thu Jul 30 10:04:11.494414 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:11356] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/info/php.ini"] [unique_id "amsTi8ID0if8VsKUbzolAgAAABw"]
[Thu Jul 30 10:04:11.635174 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:11356] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTi8ID0if8VsKUbzolAgAAABw"]
[Thu Jul 30 10:04:13.332168 2026] [ssl:error] [pid 2657476:tid 2657476] (70014)End of file found: [client 216.73.216.199:59381] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:13.703010 2026] [security2:error] [pid 2665173:tid 2665173] [client 43.155.195.141:55516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sharonduggal.co.uk"] [uri "/"] [unique_id "amsTjcQlpSudphDmLxH4YwAAAAc"]
[Thu Jul 30 10:04:14.393513 2026] [ssl:error] [pid 2662803:tid 2662803] (EAI 2)Name or service not known: [client 144.76.19.72:65210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:14.393539 2026] [ssl:error] [pid 2662803:tid 2662803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:14.963131 2026] [ssl:error] [pid 2662985:tid 2662985] (EAI 2)Name or service not known: [client 144.76.19.72:65218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:14.963160 2026] [ssl:error] [pid 2662985:tid 2662985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:16.043799 2026] [ssl:error] [pid 2665204:tid 2665204] (70014)End of file found: [client 216.73.216.199:62498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:17.511081 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:26738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/install/.env"] [unique_id "amsTkXlHpIskE27UX9_MYQAAAAU"]
[Thu Jul 30 10:04:17.512378 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:26738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/install/.env"] [unique_id "amsTkXlHpIskE27UX9_MYQAAAAU"]
[Thu Jul 30 10:04:17.655980 2026] [security2:error] [pid 2662803:tid 2662803] [client 185.177.72.10:26738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTkXlHpIskE27UX9_MYQAAAAU"]
[Thu Jul 30 10:04:18.071852 2026] [ssl:error] [pid 2665245:tid 2665245] (EAI 2)Name or service not known: [client 144.76.19.72:65226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:18.071911 2026] [ssl:error] [pid 2665245:tid 2665245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:18.126873 2026] [ssl:error] [pid 2662985:tid 2662985] (EAI 2)Name or service not known: [client 144.76.19.72:65238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:18.126909 2026] [ssl:error] [pid 2662985:tid 2662985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:19.052994 2026] [ssl:error] [pid 2661925:tid 2661925] (70014)End of file found: [client 216.73.216.199:9386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:19.288696 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:26820] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/items/.env"] [unique_id "amsTk8ID0if8VsKUbzolBQAAABw"]
[Thu Jul 30 10:04:19.288894 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:26820] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/items/.env"] [unique_id "amsTk8ID0if8VsKUbzolBQAAABw"]
[Thu Jul 30 10:04:19.428487 2026] [security2:error] [pid 2660396:tid 2660396] [client 185.177.72.10:26820] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTk8ID0if8VsKUbzolBQAAABw"]
[Thu Jul 30 10:04:19.462522 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:26828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/javascript/.env"] [unique_id "amsTk-djDh7oBT6qCsO1NAAAAAE"]
[Thu Jul 30 10:04:19.462727 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:26828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/javascript/.env"] [unique_id "amsTk-djDh7oBT6qCsO1NAAAAAE"]
[Thu Jul 30 10:04:19.600762 2026] [security2:error] [pid 2656525:tid 2656525] [client 185.177.72.10:26828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsTk-djDh7oBT6qCsO1NAAAAAE"]
[Thu Jul 30 10:04:19.659106 2026] [core:error] [pid 2665245:tid 2665245] (13)Permission denied: [client 216.73.216.199:32423] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/red_zone
[Thu Jul 30 10:04:21.225012 2026] [ssl:error] [pid 2661650:tid 2661650] (EAI 2)Name or service not known: [client 144.76.19.72:35992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:21.225042 2026] [ssl:error] [pid 2661650:tid 2661650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:21.279967 2026] [ssl:error] [pid 2657476:tid 2657476] (EAI 2)Name or service not known: [client 144.76.19.72:35998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:21.279995 2026] [ssl:error] [pid 2657476:tid 2657476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:23.875119 2026] [core:error] [pid 2665245:tid 2665245] (13)Permission denied: [client 216.73.216.199:32423] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:04:24.334918 2026] [ssl:error] [pid 2661599:tid 2661599] (EAI 2)Name or service not known: [client 144.76.19.72:36010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:24.334943 2026] [ssl:error] [pid 2661599:tid 2661599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:24.392478 2026] [ssl:error] [pid 2662803:tid 2662803] (EAI 2)Name or service not known: [client 144.76.19.72:36018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:24.392507 2026] [ssl:error] [pid 2662803:tid 2662803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:24.778063 2026] [ssl:error] [pid 2665245:tid 2665245] (70014)End of file found: [client 216.73.216.199:32423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:27.448842 2026] [ssl:error] [pid 2663145:tid 2663145] (EAI 2)Name or service not known: [client 144.76.19.72:36028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:27.448883 2026] [ssl:error] [pid 2663145:tid 2663145] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:27.486468 2026] [ssl:error] [pid 2657868:tid 2657868] (70014)End of file found: [client 216.73.216.199:21749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:27.503745 2026] [ssl:error] [pid 2662803:tid 2662803] (EAI 2)Name or service not known: [client 144.76.19.72:36042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:27.503772 2026] [ssl:error] [pid 2662803:tid 2662803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:27.791794 2026] [core:error] [pid 2662898:tid 2662898] (13)Permission denied: [client 216.73.216.199:17891] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/rtc/rtc0/device/subsystem/uevent
[Thu Jul 30 10:04:28.092849 2026] [ssl:error] [pid 2662898:tid 2662898] (70014)End of file found: [client 216.73.216.199:17891] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:30.556672 2026] [ssl:error] [pid 2656777:tid 2656777] (EAI 2)Name or service not known: [client 144.76.19.72:22964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:30.556702 2026] [ssl:error] [pid 2656777:tid 2656777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:30.613583 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:22968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:30.613636 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:31.098978 2026] [ssl:error] [pid 2656525:tid 2656525] (70014)End of file found: [client 216.73.216.199:58960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:31.421120 2026] [security2:error] [pid 2662902:tid 2662902] [client 47.76.139.123:33283] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,148.0.html"] [unique_id "amsTn3koAM9zKsL2ko7r6wAAADA"]
[Thu Jul 30 10:04:31.421168 2026] [security2:error] [pid 2662902:tid 2662902] [client 47.76.139.123:33283] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,148.0.html"] [unique_id "amsTn3koAM9zKsL2ko7r6wAAADA"]
[Thu Jul 30 10:04:31.421404 2026] [security2:error] [pid 2662902:tid 2662902] [client 47.76.139.123:33283] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTn3koAM9zKsL2ko7r6wAAADA"]
[Thu Jul 30 10:04:32.810868 2026] [ssl:error] [pid 2663145:tid 2663145] (70014)End of file found: [client 216.73.216.199:2761] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:33.411038 2026] [ssl:error] [pid 2662843:tid 2662843] (70014)End of file found: [client 216.73.216.199:40003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:33.672029 2026] [ssl:error] [pid 2665201:tid 2665201] (EAI 2)Name or service not known: [client 144.76.19.72:22974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:33.672086 2026] [ssl:error] [pid 2665201:tid 2665201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:33.729492 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:22988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:33.729522 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:34.615670 2026] [security2:error] [pid 2662897:tid 2662897] [client 181.99.103.65:41590] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,148.0.html"] [unique_id "amsTonbKaa_tkayrRuchzwAAACE"]
[Thu Jul 30 10:04:34.615730 2026] [security2:error] [pid 2662897:tid 2662897] [client 181.99.103.65:41590] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,148.0.html"] [unique_id "amsTonbKaa_tkayrRuchzwAAACE"]
[Thu Jul 30 10:04:34.615969 2026] [security2:error] [pid 2662897:tid 2662897] [client 181.99.103.65:41590] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTonbKaa_tkayrRuchzwAAACE"]
[Thu Jul 30 10:04:36.819345 2026] [ssl:error] [pid 2665173:tid 2665173] (70014)End of file found: [client 216.73.216.199:27121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:36.844398 2026] [ssl:error] [pid 2662897:tid 2662897] (EAI 2)Name or service not known: [client 144.76.19.72:22990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:36.844427 2026] [ssl:error] [pid 2662897:tid 2662897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:36.901830 2026] [ssl:error] [pid 2661650:tid 2661650] (EAI 2)Name or service not known: [client 144.76.19.72:22992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:36.901861 2026] [ssl:error] [pid 2661650:tid 2661650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:37.425445 2026] [security2:error] [pid 2654941:tid 2654941] [client 185.191.171.10:20426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/catholic-deacon-apparel"] [unique_id "amsTpcrVQNVyV8AakLOg5gAAABA"]
[Thu Jul 30 10:04:38.067903 2026] [core:error] [pid 2665853:tid 2665853] [client 66.249.64.170:46932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:04:38.067930 2026] [core:error] [pid 2665853:tid 2665853] [client 66.249.64.170:46932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:04:38.604634 2026] [security2:error] [pid 2661599:tid 2661599] [client 14.230.129.31:48413] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,148.0.html"] [unique_id "amsTpgCxqLdzIG01-6wpYAAAAA8"]
[Thu Jul 30 10:04:38.604696 2026] [security2:error] [pid 2661599:tid 2661599] [client 14.230.129.31:48413] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,148.0.html"] [unique_id "amsTpgCxqLdzIG01-6wpYAAAAA8"]
[Thu Jul 30 10:04:38.604944 2026] [security2:error] [pid 2661599:tid 2661599] [client 14.230.129.31:48413] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsTpgCxqLdzIG01-6wpYAAAAA8"]
[Thu Jul 30 10:04:38.679386 2026] [lsapi:warn] [pid 2663145:tid 2663145] [client 31.94.22.221:23042] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 10:04:38.679432 2026] [lsapi:warn] [pid 2663145:tid 2663145] [client 31.94.22.221:23042] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 10:04:39.958062 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:19636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:39.958107 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:40.014862 2026] [ssl:error] [pid 2665854:tid 2665854] (EAI 2)Name or service not known: [client 144.76.19.72:19640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:40.014894 2026] [ssl:error] [pid 2665854:tid 2665854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:40.300701 2026] [security2:error] [pid 2662803:tid 2662803] [client 5.39.1.249:57682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/best-steam-point-shop-items"] [unique_id "amsTqHlHpIskE27UX9_MagAAAAU"]
[Thu Jul 30 10:04:41.251217 2026] [core:error] [pid 2654941:tid 2654941] (13)Permission denied: [client 216.73.216.199:9436] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/ctor
[Thu Jul 30 10:04:41.553325 2026] [ssl:error] [pid 2654941:tid 2654941] (70014)End of file found: [client 216.73.216.199:9436] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:41.854467 2026] [authz_core:error] [pid 2662803:tid 2662803] [client 66.249.66.34:59966] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:04:41.857150 2026] [authz_core:error] [pid 2662803:tid 2662803] [client 66.249.66.34:59966] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:04:42.451696 2026] [ssl:error] [pid 2637691:tid 2637691] (70014)End of file found: [client 216.73.216.199:35366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:43.077517 2026] [ssl:error] [pid 2657871:tid 2657871] (EAI 2)Name or service not known: [client 144.76.19.72:19644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:43.077559 2026] [ssl:error] [pid 2657871:tid 2657871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:43.130572 2026] [ssl:error] [pid 2651607:tid 2651607] (EAI 2)Name or service not known: [client 144.76.19.72:19650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:43.130619 2026] [ssl:error] [pid 2651607:tid 2651607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:43.541281 2026] [security2:error] [pid 2660226:tid 2660226] [client 43.135.135.57:34158] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.leaccess.co.uk"] [uri "/"] [unique_id "amsTqzB7kZOR-5vHJiE3rAAAABg"]
[Thu Jul 30 10:04:44.860794 2026] [ssl:error] [pid 2650046:tid 2650046] (70014)End of file found: [client 216.73.216.199:23689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:46.186805 2026] [ssl:error] [pid 2656569:tid 2656569] (EAI 2)Name or service not known: [client 144.76.19.72:19666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:46.186836 2026] [ssl:error] [pid 2656569:tid 2656569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:46.201795 2026] [core:error] [pid 2665202:tid 2665202] [client 66.249.66.167:56896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:04:46.201824 2026] [core:error] [pid 2665202:tid 2665202] [client 66.249.66.167:56896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:04:46.202942 2026] [core:error] [pid 2660226:tid 2660226] [client 66.249.66.5:57933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:04:46.202963 2026] [core:error] [pid 2660226:tid 2660226] [client 66.249.66.5:57933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:04:46.241391 2026] [ssl:error] [pid 2653473:tid 2653473] (EAI 2)Name or service not known: [client 144.76.19.72:19668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:46.241423 2026] [ssl:error] [pid 2653473:tid 2653473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:46.970741 2026] [ssl:error] [pid 2665240:tid 2665240] (70014)End of file found: [client 216.73.216.199:13924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:48.269582 2026] [lsapi:warn] [pid 2660226:tid 2660226] [client 31.94.22.221:38874] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 10:04:48.269654 2026] [lsapi:warn] [pid 2660226:tid 2660226] [client 31.94.22.221:38874] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 10:04:48.476127 2026] [ssl:error] [pid 2662902:tid 2662902] (70014)End of file found: [client 216.73.216.199:1134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:49.325418 2026] [ssl:error] [pid 2637691:tid 2637691] (EAI 2)Name or service not known: [client 144.76.19.72:19678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:49.325464 2026] [ssl:error] [pid 2637691:tid 2637691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:49.379668 2026] [ssl:error] [pid 2657871:tid 2657871] (EAI 2)Name or service not known: [client 144.76.19.72:19690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:49.379696 2026] [ssl:error] [pid 2657871:tid 2657871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:50.281740 2026] [ssl:error] [pid 2661925:tid 2661925] (70014)End of file found: [client 216.73.216.199:61213] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:51.003841 2026] [authz_core:error] [pid 2662985:tid 2662985] [client 66.249.66.33:35799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:04:51.006501 2026] [authz_core:error] [pid 2662985:tid 2662985] [client 66.249.66.33:35799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:04:52.434521 2026] [ssl:error] [pid 2656569:tid 2656569] (EAI 2)Name or service not known: [client 144.76.19.72:42138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:52.434559 2026] [ssl:error] [pid 2656569:tid 2656569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:52.492369 2026] [ssl:error] [pid 2647985:tid 2647985] (EAI 2)Name or service not known: [client 144.76.19.72:42146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:52.492397 2026] [ssl:error] [pid 2647985:tid 2647985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:52.994191 2026] [ssl:error] [pid 2663145:tid 2663145] (70014)End of file found: [client 216.73.216.199:59968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:54.501380 2026] [ssl:error] [pid 2647985:tid 2647985] (70014)End of file found: [client 216.73.216.199:11919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:54.878190 2026] [security2:error] [pid 2665239:tid 2665239] [client 47.128.99.148:27898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsTtqyQYjl2V8Ut2vtF4AAAAB0"]
[Thu Jul 30 10:04:55.029738 2026] [authz_core:error] [pid 2665853:tid 2665853] [client 66.249.66.33:43478] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:04:55.032383 2026] [authz_core:error] [pid 2665853:tid 2665853] [client 66.249.66.33:43478] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:04:55.547505 2026] [ssl:error] [pid 2665201:tid 2665201] (EAI 2)Name or service not known: [client 144.76.19.72:42154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:55.547535 2026] [ssl:error] [pid 2665201:tid 2665201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:55.589311 2026] [core:error] [pid 2651607:tid 2651607] (13)Permission denied: [client 216.73.216.199:39861] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu5/driver/unbind
[Thu Jul 30 10:04:55.599186 2026] [ssl:error] [pid 2661695:tid 2661695] (EAI 2)Name or service not known: [client 144.76.19.72:42156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:55.599210 2026] [ssl:error] [pid 2661695:tid 2661695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:56.001978 2026] [ssl:error] [pid 2651607:tid 2651607] (70014)End of file found: [client 216.73.216.199:39861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:04:58.654981 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:42162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:58.655017 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:58.706471 2026] [ssl:error] [pid 2665141:tid 2665141] (EAI 2)Name or service not known: [client 144.76.19.72:42178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:04:58.706506 2026] [ssl:error] [pid 2665141:tid 2665141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:04:59.614450 2026] [ssl:error] [pid 2662985:tid 2662985] (70014)End of file found: [client 216.73.216.199:31602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:00.517498 2026] [ssl:error] [pid 2665238:tid 2665238] (70014)End of file found: [client 216.73.216.199:59292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:01.761675 2026] [ssl:error] [pid 2665141:tid 2665141] (EAI 2)Name or service not known: [client 144.76.19.72:28830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:01.761714 2026] [ssl:error] [pid 2665141:tid 2665141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:01.816355 2026] [ssl:error] [pid 2665242:tid 2665242] (EAI 2)Name or service not known: [client 144.76.19.72:28842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:01.816397 2026] [ssl:error] [pid 2665242:tid 2665242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:02.032411 2026] [ssl:error] [pid 2653473:tid 2653473] (70014)End of file found: [client 216.73.216.199:45778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:02.448768 2026] [security2:error] [pid 2657871:tid 2657871] [client 212.92.58.67:42993] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsTvotaToUUdljzUIAv8AAAACo"]
[Thu Jul 30 10:05:02.922022 2026] [security2:error] [pid 2660226:tid 2660226] [client 85.208.96.205:48612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3633.0/prev_next,prev.html"] [unique_id "amsTvjB7kZOR-5vHJiE3sAAAABg"]
[Thu Jul 30 10:05:03.896564 2026] [security2:error] [pid 2647985:tid 2647985] [client 43.166.244.66:51636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "techsuccess.uk"] [uri "/"] [unique_id "amsTvy1MDKD59KKldBZAEQAAABc"]
[Thu Jul 30 10:05:04.869031 2026] [ssl:error] [pid 2661925:tid 2661925] (EAI 2)Name or service not known: [client 144.76.19.72:28854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:04.869097 2026] [ssl:error] [pid 2661925:tid 2661925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:04.924449 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:28870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:04.924474 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:06.062928 2026] [lsapi:warn] [pid 2666521:tid 2666521] [client 81.128.186.214:59758] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.bing.com/
[Thu Jul 30 10:05:06.062971 2026] [lsapi:warn] [pid 2666521:tid 2666521] [client 81.128.186.214:59758] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.bing.com/
[Thu Jul 30 10:05:07.745580 2026] [ssl:error] [pid 2661695:tid 2661695] (70014)End of file found: [client 216.73.216.199:39797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:07.980840 2026] [ssl:error] [pid 2656569:tid 2656569] (EAI 2)Name or service not known: [client 144.76.19.72:28882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:07.980863 2026] [ssl:error] [pid 2656569:tid 2656569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:08.035625 2026] [ssl:error] [pid 2665854:tid 2665854] (EAI 2)Name or service not known: [client 144.76.19.72:28884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:08.035646 2026] [ssl:error] [pid 2665854:tid 2665854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:08.233861 2026] [ssl:error] [pid 2653473:tid 2653473] (70014)End of file found: [client 216.73.216.199:56228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:09.412768 2026] [security2:error] [pid 2665141:tid 2665141] [client 43.166.224.244:51594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amsTxZ27EnqqFpOveQDltAAAAAA"]
[Thu Jul 30 10:05:09.549281 2026] [authz_core:error] [pid 2665201:tid 2665201] [client 66.249.66.35:37708] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:05:09.551936 2026] [authz_core:error] [pid 2665201:tid 2665201] [client 66.249.66.35:37708] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:05:11.092158 2026] [ssl:error] [pid 2667086:tid 2667086] (EAI 2)Name or service not known: [client 144.76.19.72:25346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:11.092199 2026] [ssl:error] [pid 2667086:tid 2667086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:11.147209 2026] [ssl:error] [pid 2665141:tid 2665141] (EAI 2)Name or service not known: [client 144.76.19.72:25350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:11.147242 2026] [ssl:error] [pid 2665141:tid 2665141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:11.363562 2026] [core:error] [pid 2657476:tid 2657476] (13)Permission denied: [client 216.73.216.199:32379] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/aliases
[Thu Jul 30 10:05:11.617412 2026] [security2:error] [pid 2653838:tid 2653838] [client 43.166.224.244:45642] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amsTxwqZ_sP2VocwkWgdMgAAAAg"], referer: http://baketastic.co.uk
[Thu Jul 30 10:05:11.664847 2026] [ssl:error] [pid 2657476:tid 2657476] (70014)End of file found: [client 216.73.216.199:32379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:14.201523 2026] [ssl:error] [pid 2653838:tid 2653838] (EAI 2)Name or service not known: [client 144.76.19.72:25358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:14.201558 2026] [ssl:error] [pid 2653838:tid 2653838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:14.257298 2026] [ssl:error] [pid 2665203:tid 2665203] (EAI 2)Name or service not known: [client 144.76.19.72:25372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:14.257339 2026] [ssl:error] [pid 2665203:tid 2665203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:14.449687 2026] [authz_core:error] [pid 2666522:tid 2666522] [client 66.249.66.33:59373] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:05:14.452343 2026] [authz_core:error] [pid 2666522:tid 2666522] [client 66.249.66.33:59373] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:05:15.576906 2026] [ssl:error] [pid 2637691:tid 2637691] (70014)End of file found: [client 216.73.216.199:12202] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:16.178810 2026] [ssl:error] [pid 2667118:tid 2667118] (70014)End of file found: [client 216.73.216.199:27141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:17.311084 2026] [ssl:error] [pid 2667086:tid 2667086] (EAI 2)Name or service not known: [client 144.76.19.72:25376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:17.311122 2026] [ssl:error] [pid 2667086:tid 2667086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:17.365194 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:25378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:17.365223 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:18.590777 2026] [ssl:error] [pid 2665203:tid 2665203] (70014)End of file found: [client 216.73.216.199:59444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:18.750860 2026] [security2:error] [pid 2665854:tid 2665854] [client 114.119.146.111:27315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578355200/cat_ids~18,104/request_format~html"] [unique_id "amsTzq7wjGf5oPYR-XtZjAAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578355200/cat_ids~14,18,104/request_format~html
[Thu Jul 30 10:05:19.428550 2026] [access_compat:error] [pid 2657871:tid 2657871] [client 45.158.164.139:58448] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:05:19.849230 2026] [security2:error] [pid 2651749:tid 2651749] [client 114.119.146.111:27331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578355200/cat_ids~18,104/request_format~html"] [unique_id "amsTzxotHL6VKbxpSwczNgAAAD4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578355200/cat_ids~14,18,104/request_format~html
[Thu Jul 30 10:05:20.433434 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:21482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:20.433488 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:20.490166 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:21498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:20.490200 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:21.691054 2026] [security2:error] [pid 2667118:tid 2667118] [client 110.235.114.127:34050] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsT0cl9tASoPEkeUkVgNwAAAAs"]
[Thu Jul 30 10:05:21.691152 2026] [security2:error] [pid 2667118:tid 2667118] [client 110.235.114.127:34050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsT0cl9tASoPEkeUkVgNwAAAAs"]
[Thu Jul 30 10:05:21.691480 2026] [security2:error] [pid 2667118:tid 2667118] [client 110.235.114.127:34050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsT0cl9tASoPEkeUkVgNwAAAAs"]
[Thu Jul 30 10:05:23.091995 2026] [security2:error] [pid 2667117:tid 2667117] [client 43.157.98.187:40646] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amsT0-1u5CinWcYxsZR_PAAAAAM"]
[Thu Jul 30 10:05:23.406574 2026] [core:error] [pid 2650046:tid 2650046] (13)Permission denied: [client 216.73.216.199:53429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/alt-php-internal-common/php.ini-production
[Thu Jul 30 10:05:23.549740 2026] [ssl:error] [pid 2665173:tid 2665173] (EAI 2)Name or service not known: [client 144.76.19.72:21530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:23.549779 2026] [ssl:error] [pid 2665173:tid 2665173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:23.603107 2026] [ssl:error] [pid 2654843:tid 2654843] (EAI 2)Name or service not known: [client 144.76.19.72:21538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:23.603132 2026] [ssl:error] [pid 2654843:tid 2654843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:23.991352 2026] [security2:error] [pid 2667410:tid 2667410] [client 43.157.98.187:37176] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amsT08zIXbvxi7rNGMCVEQAAABE"], referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 10:05:24.198202 2026] [core:error] [pid 2667411:tid 2667411] (13)Permission denied: [client 216.73.216.199:21897] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:05:25.105470 2026] [security2:error] [pid 2665173:tid 2665173] [client 163.7.15.8:50577] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsT1cQlpSudphDmLxH4dgAAAAc"]
[Thu Jul 30 10:05:25.105524 2026] [security2:error] [pid 2665173:tid 2665173] [client 163.7.15.8:50577] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsT1cQlpSudphDmLxH4dgAAAAc"]
[Thu Jul 30 10:05:25.105784 2026] [security2:error] [pid 2665173:tid 2665173] [client 163.7.15.8:50577] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsT1cQlpSudphDmLxH4dgAAAAc"]
[Thu Jul 30 10:05:26.659392 2026] [ssl:error] [pid 2656569:tid 2656569] (EAI 2)Name or service not known: [client 144.76.19.72:21558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:26.659425 2026] [ssl:error] [pid 2656569:tid 2656569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:26.717272 2026] [ssl:error] [pid 2665141:tid 2665141] (EAI 2)Name or service not known: [client 144.76.19.72:21572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:26.717300 2026] [ssl:error] [pid 2665141:tid 2665141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:27.017466 2026] [ssl:error] [pid 2667411:tid 2667411] (70014)End of file found: [client 216.73.216.199:21897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:27.318252 2026] [core:error] [pid 2650046:tid 2650046] (13)Permission denied: [client 216.73.216.199:53429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:05:27.555787 2026] [security2:error] [pid 2665238:tid 2665238] [client 43.133.91.48:55764] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yourpartyyourway.com"] [uri "/"] [unique_id "amsT160tuvgeToCsjvuaWQAAABo"], referer: http://www.yourpartyyourway.com
[Thu Jul 30 10:05:27.926708 2026] [core:error] [pid 2650046:tid 2650046] (13)Permission denied: [client 216.73.216.199:53429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS3/flags
[Thu Jul 30 10:05:29.785284 2026] [ssl:error] [pid 2657868:tid 2657868] (EAI 2)Name or service not known: [client 144.76.19.72:34158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:29.785312 2026] [ssl:error] [pid 2657868:tid 2657868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:29.872246 2026] [ssl:error] [pid 2657871:tid 2657871] (EAI 2)Name or service not known: [client 144.76.19.72:34162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:29.872275 2026] [ssl:error] [pid 2657871:tid 2657871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:30.190123 2026] [security2:error] [pid 2651675:tid 2651675] [client 43.133.91.48:32924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amsT2mpCJI-EQdiJkJn6ywAAAB4"]
[Thu Jul 30 10:05:31.549610 2026] [core:error] [pid 2650046:tid 2650046] (13)Permission denied: [client 216.73.216.199:53429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/eject
[Thu Jul 30 10:05:32.932376 2026] [ssl:error] [pid 2665239:tid 2665239] (EAI 2)Name or service not known: [client 144.76.19.72:34164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:32.932412 2026] [ssl:error] [pid 2665239:tid 2665239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:33.020566 2026] [ssl:error] [pid 2651755:tid 2651755] (EAI 2)Name or service not known: [client 144.76.19.72:34168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:33.020609 2026] [ssl:error] [pid 2651755:tid 2651755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:33.098929 2026] [security2:error] [pid 2665203:tid 2665203] [client 163.7.15.8:36489] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsT3VON0OXDFqPpsqjXZwAAABM"]
[Thu Jul 30 10:05:33.098973 2026] [security2:error] [pid 2665203:tid 2665203] [client 163.7.15.8:36489] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,21.0.html"] [unique_id "amsT3VON0OXDFqPpsqjXZwAAABM"]
[Thu Jul 30 10:05:33.099209 2026] [security2:error] [pid 2665203:tid 2665203] [client 163.7.15.8:36489] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsT3VON0OXDFqPpsqjXZwAAABM"]
[Thu Jul 30 10:05:36.077221 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:34176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:36.077247 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:36.134498 2026] [ssl:error] [pid 2667118:tid 2667118] (EAI 2)Name or service not known: [client 144.76.19.72:34182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:36.134534 2026] [ssl:error] [pid 2667118:tid 2667118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:37.826195 2026] [security2:error] [pid 2667118:tid 2667118] [client 185.191.171.2:31224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/flattest-shooting-caliber-to-1000-yards"] [unique_id "amsT4cl9tASoPEkeUkVgOQAAAAs"]
[Thu Jul 30 10:05:38.559685 2026] [security2:error] [pid 2665238:tid 2665238] [client 43.166.129.247:35834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amsT4q0tuvgeToCsjvuaXAAAABo"]
[Thu Jul 30 10:05:39.197923 2026] [ssl:error] [pid 2665239:tid 2665239] (EAI 2)Name or service not known: [client 144.76.19.72:34186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:39.197957 2026] [ssl:error] [pid 2665239:tid 2665239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:39.252271 2026] [ssl:error] [pid 2665201:tid 2665201] (EAI 2)Name or service not known: [client 144.76.19.72:34192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:39.252299 2026] [ssl:error] [pid 2665201:tid 2665201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:40.703682 2026] [security2:error] [pid 2667118:tid 2667118] [client 43.166.129.247:35154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsT5Ml9tASoPEkeUkVgOgAAAAs"], referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 10:05:40.705493 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 43.166.129.247:35154] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 10:05:40.708164 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 43.166.129.247:35154] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 10:05:42.303991 2026] [ssl:error] [pid 2667706:tid 2667706] (EAI 2)Name or service not known: [client 144.76.19.72:52640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:42.304022 2026] [ssl:error] [pid 2667706:tid 2667706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:42.355646 2026] [ssl:error] [pid 2651607:tid 2651607] (EAI 2)Name or service not known: [client 144.76.19.72:52642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:42.355668 2026] [ssl:error] [pid 2651607:tid 2651607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:45.301740 2026] [security2:error] [pid 2665141:tid 2665141] [client 85.208.96.209:43338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9740.0/prev_next,next.html"] [unique_id "amsT6Z27EnqqFpOveQDlvQAAAAA"]
[Thu Jul 30 10:05:45.412479 2026] [ssl:error] [pid 2667706:tid 2667706] (EAI 2)Name or service not known: [client 144.76.19.72:52646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:45.412514 2026] [ssl:error] [pid 2667706:tid 2667706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:45.468234 2026] [ssl:error] [pid 2651607:tid 2651607] (EAI 2)Name or service not known: [client 144.76.19.72:52658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:45.468265 2026] [ssl:error] [pid 2651607:tid 2651607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:46.589412 2026] [security2:error] [pid 2665242:tid 2665242] [client 114.119.150.27:39049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "loca.co.uk"] [uri "/robots.txt"] [unique_id "amsT6hTO45Ox9_fJoxIkAwAAACU"], referer: https://loca.co.uk/robots.txt
[Thu Jul 30 10:05:47.832031 2026] [security2:error] [pid 2651749:tid 2651749] [client 85.208.96.206:30428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,310.0.html"] [unique_id "amsT6xotHL6VKbxpSwczQwAAAD4"]
[Thu Jul 30 10:05:48.523439 2026] [ssl:error] [pid 2667382:tid 2667382] (EAI 2)Name or service not known: [client 144.76.19.72:52672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:48.523478 2026] [ssl:error] [pid 2667382:tid 2667382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:48.579675 2026] [ssl:error] [pid 2667737:tid 2667737] (EAI 2)Name or service not known: [client 144.76.19.72:52688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:48.579709 2026] [ssl:error] [pid 2667737:tid 2667737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:51.346604 2026] [ssl:error] [pid 2651675:tid 2651675] (70014)End of file found: [client 216.73.216.199:26239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:51.652947 2026] [ssl:error] [pid 2667413:tid 2667413] (EAI 2)Name or service not known: [client 144.76.19.72:28648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:51.652993 2026] [ssl:error] [pid 2667413:tid 2667413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:51.707893 2026] [ssl:error] [pid 2667086:tid 2667086] (EAI 2)Name or service not known: [client 144.76.19.72:28652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:51.707920 2026] [ssl:error] [pid 2667086:tid 2667086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:52.497157 2026] [authz_core:error] [pid 2651755:tid 2651755] [client 66.249.66.33:41903] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:05:52.499818 2026] [authz_core:error] [pid 2651755:tid 2651755] [client 66.249.66.33:41903] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:05:54.764249 2026] [ssl:error] [pid 2667382:tid 2667382] (EAI 2)Name or service not known: [client 144.76.19.72:28656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:54.764290 2026] [ssl:error] [pid 2667382:tid 2667382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:54.817577 2026] [ssl:error] [pid 2657871:tid 2657871] (EAI 2)Name or service not known: [client 144.76.19.72:28666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:54.817636 2026] [ssl:error] [pid 2657871:tid 2657871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:56.018254 2026] [ssl:error] [pid 2661695:tid 2661695] (70014)End of file found: [client 216.73.216.199:53254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:56.632002 2026] [ssl:error] [pid 2668409:tid 2668409] (70014)End of file found: [client 216.73.216.199:47583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:57.123914 2026] [ssl:error] [pid 2657476:tid 2657476] (70014)End of file found: [client 216.73.216.199:61847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:05:57.168589 2026] [security2:error] [pid 2651675:tid 2651675] [client 43.162.114.69:48366] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amsT9WpCJI-EQdiJkJn62gAAAB4"]
[Thu Jul 30 10:05:57.870567 2026] [ssl:error] [pid 2637691:tid 2637691] (EAI 2)Name or service not known: [client 144.76.19.72:28680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:57.870612 2026] [ssl:error] [pid 2637691:tid 2637691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:05:57.928875 2026] [ssl:error] [pid 2668487:tid 2668487] (EAI 2)Name or service not known: [client 144.76.19.72:28690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:05:57.928917 2026] [ssl:error] [pid 2668487:tid 2668487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:00.986263 2026] [ssl:error] [pid 2660396:tid 2660396] (EAI 2)Name or service not known: [client 144.76.19.72:19662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:00.986315 2026] [ssl:error] [pid 2660396:tid 2660396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:01.039576 2026] [ssl:error] [pid 2647985:tid 2647985] (EAI 2)Name or service not known: [client 144.76.19.72:19676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:01.039614 2026] [ssl:error] [pid 2647985:tid 2647985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:01.346867 2026] [ssl:error] [pid 2665238:tid 2665238] (70014)End of file found: [client 216.73.216.199:46251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:01.570212 2026] [authz_core:error] [pid 2651749:tid 2651749] [client 91.202.233.115:50098] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log, referer: https://google.com/
[Thu Jul 30 10:06:01.570266 2026] [authz_core:error] [pid 2651749:tid 2651749] [client 91.202.233.115:50098] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config, referer: https://google.com/
[Thu Jul 30 10:06:02.059922 2026] [ssl:error] [pid 2650047:tid 2650047] (70014)End of file found: [client 216.73.216.199:13724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:03.265192 2026] [ssl:error] [pid 2656569:tid 2656569] (70014)End of file found: [client 216.73.216.199:61608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:04.093929 2026] [ssl:error] [pid 2668491:tid 2668491] (EAI 2)Name or service not known: [client 144.76.19.72:19680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:04.093963 2026] [ssl:error] [pid 2668491:tid 2668491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:04.149006 2026] [ssl:error] [pid 2667086:tid 2667086] (EAI 2)Name or service not known: [client 144.76.19.72:19684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:04.149032 2026] [ssl:error] [pid 2667086:tid 2667086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:05.182120 2026] [core:error] [pid 2667382:tid 2667382] [client 66.249.66.8:35334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:06:05.182160 2026] [core:error] [pid 2667382:tid 2667382] [client 66.249.66.8:35334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:06:05.240695 2026] [security2:error] [pid 2665239:tid 2665239] [client 43.159.141.150:38662] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "m.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsT_ayQYjl2V8Ut2vtF8wAAAB0"]
[Thu Jul 30 10:06:07.183925 2026] [ssl:error] [pid 2665239:tid 2665239] (70014)End of file found: [client 216.73.216.199:63175] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:07.203934 2026] [ssl:error] [pid 2665238:tid 2665238] (EAI 2)Name or service not known: [client 144.76.19.72:19686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:07.203975 2026] [ssl:error] [pid 2665238:tid 2665238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:07.261051 2026] [ssl:error] [pid 2668487:tid 2668487] (EAI 2)Name or service not known: [client 144.76.19.72:19692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:07.261107 2026] [ssl:error] [pid 2668487:tid 2668487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:08.087882 2026] [ssl:error] [pid 2668489:tid 2668489] (70014)End of file found: [client 216.73.216.199:50867] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:08.990102 2026] [security2:error] [pid 2662900:tid 2662900] [client 216.73.216.199:38211] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/nftables.conf"] [unique_id "amsUAM8k6raxiuAenpn7WQAAACk"]
[Thu Jul 30 10:06:08.990390 2026] [security2:error] [pid 2662900:tid 2662900] [client 216.73.216.199:38211] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/nftables.conf"] [unique_id "amsUAM8k6raxiuAenpn7WQAAACk"]
[Thu Jul 30 10:06:08.990637 2026] [security2:error] [pid 2662900:tid 2662900] [client 216.73.216.199:38211] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/nftables.conf"] [unique_id "amsUAM8k6raxiuAenpn7WQAAACk"]
[Thu Jul 30 10:06:09.964649 2026] [security2:error] [pid 2656569:tid 2656569] [client 43.165.65.117:44004] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "45.158.164.139"] [uri "/"] [unique_id "amsUARGyrjYSqISJXfzDAQAAAAI"]
[Thu Jul 30 10:06:10.317174 2026] [ssl:error] [pid 2661696:tid 2661696] (EAI 2)Name or service not known: [client 144.76.19.72:55252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:10.317211 2026] [ssl:error] [pid 2661696:tid 2661696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:10.372435 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:55264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:10.372484 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:10.496916 2026] [ssl:error] [pid 2662900:tid 2662900] (70014)End of file found: [client 216.73.216.199:38211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:13.206494 2026] [ssl:error] [pid 2647985:tid 2647985] (70014)End of file found: [client 216.73.216.199:26536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:13.430504 2026] [ssl:error] [pid 2656569:tid 2656569] (EAI 2)Name or service not known: [client 144.76.19.72:55270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:13.430534 2026] [ssl:error] [pid 2656569:tid 2656569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:13.486499 2026] [ssl:error] [pid 2651749:tid 2651749] (EAI 2)Name or service not known: [client 144.76.19.72:55276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:13.486530 2026] [ssl:error] [pid 2651749:tid 2651749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:14.115793 2026] [core:error] [pid 2656569:tid 2656569] [client 66.249.64.171:58387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:06:14.115825 2026] [core:error] [pid 2656569:tid 2656569] [client 66.249.64.171:58387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:06:14.830534 2026] [cgi:error] [pid 2668489:tid 2668489] [client 199.240.97.251:49385] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:06:15.913756 2026] [ssl:error] [pid 2651675:tid 2651675] (70014)End of file found: [client 216.73.216.199:1151] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:16.540042 2026] [ssl:error] [pid 2667086:tid 2667086] (EAI 2)Name or service not known: [client 144.76.19.72:55280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:16.540082 2026] [ssl:error] [pid 2667086:tid 2667086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:16.591675 2026] [ssl:error] [pid 2667706:tid 2667706] (EAI 2)Name or service not known: [client 144.76.19.72:55284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:16.591701 2026] [ssl:error] [pid 2667706:tid 2667706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:17.547801 2026] [security2:error] [pid 2667412:tid 2667412] [client 119.45.7.86:41800] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.annasmithagent.com"] [uri "/"] [unique_id "amsUCZrT00meCrKyO6v7_gAAABQ"]
[Thu Jul 30 10:06:18.056824 2026] [security2:error] [pid 2668491:tid 2668491] [client 74.7.242.14:58366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.dev.theactivefootco.co.uk"] [uri "/"] [unique_id "amsUCrF2_Gxp6LtueDhmVgAAABg"]
[Thu Jul 30 10:06:18.627113 2026] [ssl:error] [pid 2668448:tid 2668448] (70014)End of file found: [client 216.73.216.199:38920] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:19.151346 2026] [security2:error] [pid 2661695:tid 2661695] [client 119.45.7.86:43048] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "localhero.org.uk"] [uri "/"] [unique_id "amsUC7HF7Tkt0Xyi3WPyHQAAACA"]
[Thu Jul 30 10:06:19.672460 2026] [ssl:error] [pid 2660396:tid 2660396] (EAI 2)Name or service not known: [client 144.76.19.72:36210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:19.672489 2026] [ssl:error] [pid 2660396:tid 2660396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:19.728394 2026] [ssl:error] [pid 2647985:tid 2647985] (EAI 2)Name or service not known: [client 144.76.19.72:36218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:19.728423 2026] [ssl:error] [pid 2647985:tid 2647985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:21.035256 2026] [ssl:error] [pid 2669712:tid 2669712] (70014)End of file found: [client 216.73.216.199:62672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:21.519433 2026] [ssl:error] [pid 2667737:tid 2667737] (70014)End of file found: [client 216.73.216.199:51676] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:21.566920 2026] [security2:error] [pid 2668409:tid 2668409] [client 43.153.35.128:34570] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-sun.com"] [uri "/"] [unique_id "amsUDTzzrsAb8npTzatG3QAAAAQ"]
[Thu Jul 30 10:06:22.787008 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:36234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:22.787047 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:22.844148 2026] [ssl:error] [pid 2669177:tid 2669177] (EAI 2)Name or service not known: [client 144.76.19.72:36236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:22.844188 2026] [ssl:error] [pid 2669177:tid 2669177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:23.241984 2026] [security2:error] [pid 2669803:tid 2669803] [client 185.191.171.16:21740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2100.0/prev_next,next.html"] [unique_id "amsUDyIqLX86bjBmJNnBWgAAACg"]
[Thu Jul 30 10:06:25.745851 2026] [core:error] [pid 2650046:tid 2650046] (13)Permission denied: [client 216.73.216.199:17295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory2/subsystem/uevent
[Thu Jul 30 10:06:25.899545 2026] [ssl:error] [pid 2665141:tid 2665141] (EAI 2)Name or service not known: [client 144.76.19.72:36250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:25.899578 2026] [ssl:error] [pid 2665141:tid 2665141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:25.956188 2026] [ssl:error] [pid 2669805:tid 2669805] (EAI 2)Name or service not known: [client 144.76.19.72:36260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:25.956218 2026] [ssl:error] [pid 2669805:tid 2669805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:29.010980 2026] [ssl:error] [pid 2666522:tid 2666522] (EAI 2)Name or service not known: [client 144.76.19.72:36268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:29.011009 2026] [ssl:error] [pid 2666522:tid 2666522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:29.064604 2026] [ssl:error] [pid 2667118:tid 2667118] (EAI 2)Name or service not known: [client 144.76.19.72:36280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:29.064631 2026] [ssl:error] [pid 2667118:tid 2667118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:29.362434 2026] [core:error] [pid 2667413:tid 2667413] (13)Permission denied: [client 216.73.216.199:56434] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/slab_size
[Thu Jul 30 10:06:29.685655 2026] [cgi:error] [pid 2650046:tid 2650046] [client 216.73.216.199:17295] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/perl5/dumpvar.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:06:29.685700 2026] [cgi:error] [pid 2650046:tid 2650046] [client 216.73.216.199:17295] End of script output before headers: dumpvar.pl
[Thu Jul 30 10:06:30.097839 2026] [cgi:error] [pid 2668489:tid 2668489] [client 20.104.22.47:31408] AH02812: stderr from /home/josieand/public_html/www.somethingweb.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:06:30.566507 2026] [ssl:error] [pid 2667413:tid 2667413] (70014)End of file found: [client 216.73.216.199:56434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:31.164155 2026] [ssl:error] [pid 2660396:tid 2660396] (70014)End of file found: [client 216.73.216.199:23504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:31.674165 2026] [core:error] [pid 2668488:tid 2668488] (13)Permission denied: [client 216.73.216.199:53822] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/sbin/userhelper
[Thu Jul 30 10:06:32.121921 2026] [ssl:error] [pid 2667412:tid 2667412] (EAI 2)Name or service not known: [client 144.76.19.72:53360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:32.121958 2026] [ssl:error] [pid 2667412:tid 2667412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:32.178051 2026] [ssl:error] [pid 2667118:tid 2667118] (EAI 2)Name or service not known: [client 144.76.19.72:53374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:32.178097 2026] [ssl:error] [pid 2667118:tid 2667118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:34.179529 2026] [ssl:error] [pid 2668488:tid 2668488] (70014)End of file found: [client 216.73.216.199:53822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:34.690484 2026] [authz_core:error] [pid 2668489:tid 2668489] [client 20.104.22.47:31408] AH01630: client denied by server configuration: /home/josieand/public_html/www.somethingweb.co.uk/php.ini
[Thu Jul 30 10:06:35.235575 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:53386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:35.235616 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:35.292797 2026] [ssl:error] [pid 2669802:tid 2669802] (EAI 2)Name or service not known: [client 144.76.19.72:53388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:35.292832 2026] [ssl:error] [pid 2669802:tid 2669802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:37.185388 2026] [core:error] [pid 2669802:tid 2669802] (13)Permission denied: [client 216.73.216.199:11697] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm/sections/__kcrctab_gpl
[Thu Jul 30 10:06:37.486337 2026] [ssl:error] [pid 2669802:tid 2669802] (70014)End of file found: [client 216.73.216.199:11697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:38.039889 2026] [authz_core:error] [pid 2669177:tid 2669177] [client 66.249.66.164:41035] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:06:38.042541 2026] [authz_core:error] [pid 2669177:tid 2669177] [client 66.249.66.164:41035] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:06:38.290454 2026] [security2:error] [pid 2668409:tid 2668409] [client 84.54.120.89:19375] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUHjzzrsAb8npTzatG5gAAAAQ"]
[Thu Jul 30 10:06:38.290503 2026] [security2:error] [pid 2668409:tid 2668409] [client 84.54.120.89:19375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUHjzzrsAb8npTzatG5gAAAAQ"]
[Thu Jul 30 10:06:38.290760 2026] [security2:error] [pid 2668409:tid 2668409] [client 84.54.120.89:19375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUHjzzrsAb8npTzatG5gAAAAQ"]
[Thu Jul 30 10:06:38.317165 2026] [security2:error] [pid 2651675:tid 2651675] [client 185.191.171.1:16526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/jane-randall-politics"] [unique_id "amsUHmpCJI-EQdiJkJn68gAAAB4"]
[Thu Jul 30 10:06:38.347114 2026] [ssl:error] [pid 2668487:tid 2668487] (EAI 2)Name or service not known: [client 144.76.19.72:53400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:38.347147 2026] [ssl:error] [pid 2668487:tid 2668487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:38.403842 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:53416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:38.403874 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:40.527694 2026] [security2:error] [pid 2667412:tid 2667412] [client 165.51.207.221:33818] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUIJrT00meCrKyO6v8HAAAABQ"]
[Thu Jul 30 10:06:40.527747 2026] [security2:error] [pid 2667412:tid 2667412] [client 165.51.207.221:33818] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUIJrT00meCrKyO6v8HAAAABQ"]
[Thu Jul 30 10:06:40.528023 2026] [security2:error] [pid 2667412:tid 2667412] [client 165.51.207.221:33818] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUIJrT00meCrKyO6v8HAAAABQ"]
[Thu Jul 30 10:06:41.098481 2026] [core:error] [pid 2647985:tid 2647985] (13)Permission denied: [client 216.73.216.199:1486] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/hwcache_align
[Thu Jul 30 10:06:41.456995 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:59040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:41.457036 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:41.510107 2026] [ssl:error] [pid 2669629:tid 2669629] (EAI 2)Name or service not known: [client 144.76.19.72:59048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:41.510135 2026] [ssl:error] [pid 2669629:tid 2669629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:41.700706 2026] [core:error] [pid 2647985:tid 2647985] (1)Operation not permitted: [client 216.73.216.199:1486] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/net/softnet_stat
[Thu Jul 30 10:06:42.758691 2026] [security2:error] [pid 2669177:tid 2669177] [client 114.119.142.20:50607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/request_format~html/cat_ids~17"] [unique_id "amsUIjo3wBZcfNnqolWXtAAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/request_format%7Ehtml
[Thu Jul 30 10:06:42.949849 2026] [security2:error] [pid 2670998:tid 2670998] [client 85.208.96.200:45342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7190.0/prev_next,next.html"] [unique_id "amsUImY4bSWjRjLUQG9T_AAAAAo"]
[Thu Jul 30 10:06:44.014172 2026] [security2:error] [pid 2667412:tid 2667412] [client 114.119.142.20:50619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/request_format~html/cat_ids~17"] [unique_id "amsUJJrT00meCrKyO6v8JAAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/request_format%7Ehtml
[Thu Jul 30 10:06:44.410269 2026] [ssl:error] [pid 2647985:tid 2647985] (70014)End of file found: [client 216.73.216.199:1486] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:44.568580 2026] [ssl:error] [pid 2670998:tid 2670998] (EAI 2)Name or service not known: [client 144.76.19.72:59056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:44.568622 2026] [ssl:error] [pid 2670998:tid 2670998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:44.621916 2026] [ssl:error] [pid 2667117:tid 2667117] (EAI 2)Name or service not known: [client 144.76.19.72:59066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:44.621948 2026] [ssl:error] [pid 2667117:tid 2667117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:44.719686 2026] [security2:error] [pid 2667118:tid 2667118] [client 78.48.23.44:63699] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUJMl9tASoPEkeUkVgqQAAAAs"]
[Thu Jul 30 10:06:44.719733 2026] [security2:error] [pid 2667118:tid 2667118] [client 78.48.23.44:63699] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUJMl9tASoPEkeUkVgqQAAAAs"]
[Thu Jul 30 10:06:44.719991 2026] [security2:error] [pid 2667118:tid 2667118] [client 78.48.23.44:63699] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUJMl9tASoPEkeUkVgqQAAAAs"]
[Thu Jul 30 10:06:45.012085 2026] [ssl:error] [pid 2657665:tid 2657665] (70014)End of file found: [client 216.73.216.199:7435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:46.521988 2026] [ssl:error] [pid 2668488:tid 2668488] (70014)End of file found: [client 216.73.216.199:32482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:47.676360 2026] [ssl:error] [pid 2653838:tid 2653838] (EAI 2)Name or service not known: [client 144.76.19.72:59076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:47.676392 2026] [ssl:error] [pid 2653838:tid 2653838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:47.732248 2026] [ssl:error] [pid 2667086:tid 2667086] (EAI 2)Name or service not known: [client 144.76.19.72:59084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:47.732278 2026] [ssl:error] [pid 2667086:tid 2667086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:49.829209 2026] [core:error] [pid 2669935:tid 2669935] (13)Permission denied: [client 216.73.216.199:58062] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kernfs_iattrs_cache/cpu_slabs
[Thu Jul 30 10:06:50.105004 2026] [security2:error] [pid 2667086:tid 2667086] [client 94.154.43.186:51206] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.dev2.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsUKsU70SDC7lqlVXu5IgAAAAE"]
[Thu Jul 30 10:06:50.105212 2026] [security2:error] [pid 2667086:tid 2667086] [client 94.154.43.186:51206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dev2.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsUKsU70SDC7lqlVXu5IgAAAAE"]
[Thu Jul 30 10:06:50.105571 2026] [core:error] [pid 2667086:tid 2667086] [client 94.154.43.186:51206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:06:50.105723 2026] [security2:error] [pid 2667086:tid 2667086] [client 94.154.43.186:51206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.dev2.the-pryors.co.uk"] [uri "/.env"] [unique_id "amsUKsU70SDC7lqlVXu5IgAAAAE"]
[Thu Jul 30 10:06:50.131336 2026] [ssl:error] [pid 2669935:tid 2669935] (70014)End of file found: [client 216.73.216.199:58062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:50.808116 2026] [ssl:error] [pid 2671381:tid 2671381] (EAI 2)Name or service not known: [client 144.76.19.72:53968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:50.808149 2026] [ssl:error] [pid 2671381:tid 2671381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:50.862443 2026] [ssl:error] [pid 2667117:tid 2667117] (EAI 2)Name or service not known: [client 144.76.19.72:53976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:50.862467 2026] [ssl:error] [pid 2667117:tid 2667117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:51.052250 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.191.171.17:20118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/robots.txt"] [unique_id "amsUK7XZCFa7ftwinVV5agAAADc"]
[Thu Jul 30 10:06:51.337261 2026] [core:error] [pid 2647985:tid 2647985] (13)Permission denied: [client 216.73.216.199:27301] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/drm/sections/__kcrctab_gpl
[Thu Jul 30 10:06:51.865850 2026] [security2:error] [pid 2650046:tid 2650046] [client 185.191.171.6:58206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsUK7XZCFa7ftwinVV5awAAADc"]
[Thu Jul 30 10:06:51.938586 2026] [security2:error] [pid 2647985:tid 2647985] [client 216.73.216.199:27301] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/pam.conf"] [unique_id "amsUKy1MDKD59KKldBZAZAAAABc"]
[Thu Jul 30 10:06:51.938839 2026] [security2:error] [pid 2647985:tid 2647985] [client 216.73.216.199:27301] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/pam.conf"] [unique_id "amsUKy1MDKD59KKldBZAZAAAABc"]
[Thu Jul 30 10:06:51.939050 2026] [security2:error] [pid 2647985:tid 2647985] [client 216.73.216.199:27301] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/pam.conf"] [unique_id "amsUKy1MDKD59KKldBZAZAAAABc"]
[Thu Jul 30 10:06:53.918587 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:53986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:53.918626 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:53.971815 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:53998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:53.971846 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:54.047047 2026] [security2:error] [pid 2647985:tid 2647985] [client 216.73.216.199:27301] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-pure-ftpd/pureftpd-pgsql.conf"] [unique_id "amsULi1MDKD59KKldBZAawAAABc"]
[Thu Jul 30 10:06:54.047358 2026] [security2:error] [pid 2647985:tid 2647985] [client 216.73.216.199:27301] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-pure-ftpd/pureftpd-pgsql.conf"] [unique_id "amsULi1MDKD59KKldBZAawAAABc"]
[Thu Jul 30 10:06:54.047575 2026] [security2:error] [pid 2647985:tid 2647985] [client 216.73.216.199:27301] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-pure-ftpd/pureftpd-pgsql.conf"] [unique_id "amsULi1MDKD59KKldBZAawAAABc"]
[Thu Jul 30 10:06:56.020388 2026] [ssl:error] [pid 2665201:tid 2665201] (70014)End of file found: [client 216.73.216.199:50149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:56.626406 2026] [ssl:error] [pid 2657871:tid 2657871] (70014)End of file found: [client 216.73.216.199:3745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:06:57.028547 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:54008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:57.028573 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:06:57.082333 2026] [ssl:error] [pid 2668409:tid 2668409] (EAI 2)Name or service not known: [client 144.76.19.72:54024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:06:57.082363 2026] [ssl:error] [pid 2668409:tid 2668409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:00.169675 2026] [ssl:error] [pid 2667117:tid 2667117] (EAI 2)Name or service not known: [client 144.76.19.72:35862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:00.169705 2026] [ssl:error] [pid 2667117:tid 2667117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:00.225797 2026] [ssl:error] [pid 2651749:tid 2651749] (EAI 2)Name or service not known: [client 144.76.19.72:35870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:00.225842 2026] [ssl:error] [pid 2651749:tid 2651749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:02.648666 2026] [ssl:error] [pid 2650046:tid 2650046] (70014)End of file found: [client 216.73.216.199:46401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:03.318932 2026] [ssl:error] [pid 2660396:tid 2660396] (EAI 2)Name or service not known: [client 144.76.19.72:35886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:03.318961 2026] [ssl:error] [pid 2660396:tid 2660396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:03.373012 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:35896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:03.373034 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:05.056442 2026] [security2:error] [pid 2650047:tid 2650047] [client 216.73.216.199:65345] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/nscd.conf"] [unique_id "amsUOTdnWhdb5n_RrTLHPAAAADg"]
[Thu Jul 30 10:07:05.056734 2026] [security2:error] [pid 2650047:tid 2650047] [client 216.73.216.199:65345] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/nscd.conf"] [unique_id "amsUOTdnWhdb5n_RrTLHPAAAADg"]
[Thu Jul 30 10:07:05.056964 2026] [security2:error] [pid 2650047:tid 2650047] [client 216.73.216.199:65345] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/nscd.conf"] [unique_id "amsUOTdnWhdb5n_RrTLHPAAAADg"]
[Thu Jul 30 10:07:05.963832 2026] [ssl:error] [pid 2651675:tid 2651675] (70014)End of file found: [client 216.73.216.199:62872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:06.427653 2026] [ssl:error] [pid 2668491:tid 2668491] (EAI 2)Name or service not known: [client 144.76.19.72:35898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:06.427678 2026] [ssl:error] [pid 2668491:tid 2668491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:06.482273 2026] [ssl:error] [pid 2668487:tid 2668487] (EAI 2)Name or service not known: [client 144.76.19.72:35914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:06.482300 2026] [ssl:error] [pid 2668487:tid 2668487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:07.370536 2026] [core:error] [pid 2667117:tid 2667117] [client 66.249.66.168:40250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:07.370561 2026] [core:error] [pid 2667117:tid 2667117] [client 66.249.66.168:40250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:07.371712 2026] [core:error] [pid 2670475:tid 2670475] [client 66.249.66.68:45525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:07.371732 2026] [core:error] [pid 2670475:tid 2670475] [client 66.249.66.68:45525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:07.816433 2026] [core:error] [pid 2650047:tid 2650047] (13)Permission denied: [client 216.73.216.199:65345] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:0c/eject
[Thu Jul 30 10:07:09.534339 2026] [ssl:error] [pid 2669629:tid 2669629] (EAI 2)Name or service not known: [client 144.76.19.72:35924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:09.534389 2026] [ssl:error] [pid 2669629:tid 2669629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:09.590126 2026] [ssl:error] [pid 2668487:tid 2668487] (EAI 2)Name or service not known: [client 144.76.19.72:51890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:09.590154 2026] [ssl:error] [pid 2668487:tid 2668487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:09.742092 2026] [core:error] [pid 2651749:tid 2651749] [client 20.240.137.17:50431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:09.742130 2026] [core:error] [pid 2651749:tid 2651749] [client 20.240.137.17:50431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:09.868469 2026] [core:error] [pid 2670475:tid 2670475] (13)Permission denied: [client 216.73.216.199:16267] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/binfmt_misc/uevent
[Thu Jul 30 10:07:10.471054 2026] [core:error] [pid 2670475:tid 2670475] (13)Permission denied: [client 216.73.216.199:16267] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/shrink
[Thu Jul 30 10:07:11.872521 2026] [core:error] [pid 2651675:tid 2651675] [client 20.240.137.17:50416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:11.872549 2026] [core:error] [pid 2651675:tid 2651675] [client 20.240.137.17:50416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:11.979739 2026] [core:crit] [pid 2670475:tid 2670475] (13)Permission denied: [client 216.73.216.199:16267] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/cleanup_storage/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/cleanup_storage/' is executable
[Thu Jul 30 10:07:11.982056 2026] [core:crit] [pid 2670475:tid 2670475] (13)Permission denied: [client 216.73.216.199:16267] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/tmp_cleanup/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/tmp_cleanup/' is executable
[Thu Jul 30 10:07:11.982232 2026] [core:crit] [pid 2670475:tid 2670475] (13)Permission denied: [client 216.73.216.199:16267] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/tmp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/tmp/' is executable
[Thu Jul 30 10:07:11.982387 2026] [core:crit] [pid 2670475:tid 2670475] (13)Permission denied: [client 216.73.216.199:16267] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/uploads/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/uploads/' is executable
[Thu Jul 30 10:07:12.649488 2026] [ssl:error] [pid 2668409:tid 2668409] (EAI 2)Name or service not known: [client 144.76.19.72:51904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:12.649516 2026] [ssl:error] [pid 2668409:tid 2668409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:12.706800 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:51906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:12.706830 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:12.880768 2026] [ssl:error] [pid 2670475:tid 2670475] (70014)End of file found: [client 216.73.216.199:16267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:13.783778 2026] [ssl:error] [pid 2672524:tid 2672524] (70014)End of file found: [client 216.73.216.199:25312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:14.088959 2026] [core:error] [pid 2668491:tid 2668491] (13)Permission denied: [client 216.73.216.199:43639] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/ip6tables-config
[Thu Jul 30 10:07:15.057513 2026] [authz_core:error] [pid 2665241:tid 2665241] [client 40.77.167.16:4018] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:07:15.060197 2026] [authz_core:error] [pid 2665241:tid 2665241] [client 40.77.167.16:4018] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:07:15.594456 2026] [ssl:error] [pid 2668491:tid 2668491] (70014)End of file found: [client 216.73.216.199:43639] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:15.759789 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:51914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:15.759818 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:15.820910 2026] [ssl:error] [pid 2661696:tid 2661696] (EAI 2)Name or service not known: [client 144.76.19.72:51920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:15.820936 2026] [ssl:error] [pid 2661696:tid 2661696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:16.872805 2026] [core:error] [pid 2665239:tid 2665239] [client 20.240.137.17:50308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:16.872829 2026] [core:error] [pid 2665239:tid 2665239] [client 20.240.137.17:50308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:17.458027 2026] [authz_core:error] [pid 2669713:tid 2669713] [client 66.249.66.34:62732] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:07:17.458904 2026] [security2:error] [pid 2657871:tid 2657871] [client 43.133.139.6:34498] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amsURYtaToUUdljzUIAwrQAAACo"]
[Thu Jul 30 10:07:17.460773 2026] [authz_core:error] [pid 2669713:tid 2669713] [client 66.249.66.34:62732] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:07:17.822227 2026] [authz_core:error] [pid 2665239:tid 2665239] [client 66.249.66.33:41868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:07:17.824855 2026] [authz_core:error] [pid 2665239:tid 2665239] [client 66.249.66.33:41868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:07:18.828157 2026] [core:error] [pid 2672572:tid 2672572] [client 20.240.137.17:49955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:18.828189 2026] [core:error] [pid 2672572:tid 2672572] [client 20.240.137.17:49955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:18.903612 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:51924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:18.903637 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:18.904923 2026] [ssl:error] [pid 2657871:tid 2657871] (70014)End of file found: [client 216.73.216.199:5315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:18.955611 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:51926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:18.955633 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:19.446985 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:50383] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:19.447007 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:50383] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:19.754668 2026] [security2:error] [pid 2651749:tid 2651749] [client 74.7.227.191:41084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/"] [unique_id "amsURxotHL6VKbxpSwczyQAAAD4"]
[Thu Jul 30 10:07:20.105535 2026] [ssl:error] [pid 2669629:tid 2669629] (70014)End of file found: [client 216.73.216.199:2934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:20.907185 2026] [ssl:error] [pid 2660396:tid 2660396] (70014)End of file found: [client 216.73.216.199:13820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:20.987582 2026] [core:error] [pid 2669803:tid 2669803] [client 20.240.137.17:60227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:20.987617 2026] [core:error] [pid 2669803:tid 2669803] [client 20.240.137.17:60227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:22.015106 2026] [security2:error] [pid 2661696:tid 2661696] [client 109.107.224.52:26496] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUSmoW_dkBMJHY218PdwAAACY"]
[Thu Jul 30 10:07:22.015152 2026] [security2:error] [pid 2661696:tid 2661696] [client 109.107.224.52:26496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUSmoW_dkBMJHY218PdwAAACY"]
[Thu Jul 30 10:07:22.015426 2026] [security2:error] [pid 2661696:tid 2661696] [client 109.107.224.52:26496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUSmoW_dkBMJHY218PdwAAACY"]
[Thu Jul 30 10:07:22.026471 2026] [ssl:error] [pid 2669803:tid 2669803] (EAI 2)Name or service not known: [client 144.76.19.72:38998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:22.026508 2026] [ssl:error] [pid 2669803:tid 2669803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:22.079990 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:39002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:22.080013 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:23.227805 2026] [core:error] [pid 2650047:tid 2650047] [client 20.240.137.17:45949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:23.227830 2026] [core:error] [pid 2650047:tid 2650047] [client 20.240.137.17:45949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:23.896905 2026] [core:error] [pid 2650047:tid 2650047] [client 20.240.137.17:60256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:23.896928 2026] [core:error] [pid 2650047:tid 2650047] [client 20.240.137.17:60256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:24.100476 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/pomo/error_log
[Thu Jul 30 10:07:24.266538 2026] [core:error] [pid 2650047:tid 2650047] [client 20.240.137.17:63534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:24.266559 2026] [core:error] [pid 2650047:tid 2650047] [client 20.240.137.17:63534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:25.132201 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:39006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:25.132233 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:25.139501 2026] [ssl:error] [pid 2667413:tid 2667413] (70014)End of file found: [client 216.73.216.199:26355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:25.188119 2026] [ssl:error] [pid 2665201:tid 2665201] (EAI 2)Name or service not known: [client 144.76.19.72:39022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:25.188144 2026] [ssl:error] [pid 2665201:tid 2665201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:25.511397 2026] [core:error] [pid 2657871:tid 2657871] [client 20.240.137.17:50350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:25.511421 2026] [core:error] [pid 2657871:tid 2657871] [client 20.240.137.17:50350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:26.042175 2026] [ssl:error] [pid 2667118:tid 2667118] (70014)End of file found: [client 216.73.216.199:56048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:27.847730 2026] [ssl:error] [pid 2660396:tid 2660396] (70014)End of file found: [client 216.73.216.199:7951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:28.246753 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:39034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:28.246780 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:28.301434 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:39038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:28.301462 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:29.013787 2026] [core:error] [pid 2669713:tid 2669713] [client 20.240.137.17:43332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:29.013813 2026] [core:error] [pid 2669713:tid 2669713] [client 20.240.137.17:43332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:29.290479 2026] [security2:error] [pid 2672524:tid 2672524] [client 185.191.171.17:63516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/robots.txt"] [unique_id "amsUUaCcg6JbNnBL1t0auwAAAAY"]
[Thu Jul 30 10:07:29.457029 2026] [core:crit] [pid 2669713:tid 2669713] (13)Permission denied: [client 40.77.167.55:4672] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 10:07:30.895457 2026] [core:error] [pid 2667117:tid 2667117] [client 66.249.66.167:63036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:30.895483 2026] [core:error] [pid 2667117:tid 2667117] [client 66.249.66.167:63036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:31.287269 2026] [authz_core:error] [pid 2672524:tid 2672524] [client 158.69.118.188:52387] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 10:07:31.289035 2026] [authz_core:error] [pid 2672524:tid 2672524] [client 158.69.118.188:52387] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 10:07:31.359031 2026] [ssl:error] [pid 2673259:tid 2673259] (EAI 2)Name or service not known: [client 144.76.19.72:24100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:31.359063 2026] [ssl:error] [pid 2673259:tid 2673259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:31.413731 2026] [ssl:error] [pid 2673259:tid 2673259] (EAI 2)Name or service not known: [client 144.76.19.72:24102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:31.413753 2026] [ssl:error] [pid 2673259:tid 2673259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:31.445177 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:45904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:31.445197 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:45904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:33.876218 2026] [ssl:error] [pid 2667118:tid 2667118] (70014)End of file found: [client 216.73.216.199:13133] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:34.176904 2026] [ssl:error] [pid 2665241:tid 2665241] (70014)End of file found: [client 216.73.216.199:11971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:34.243385 2026] [core:error] [pid 2660396:tid 2660396] [client 40.77.167.132:22382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:34.243410 2026] [core:error] [pid 2660396:tid 2660396] [client 40.77.167.132:22382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:34.471588 2026] [ssl:error] [pid 2668491:tid 2668491] (EAI 2)Name or service not known: [client 144.76.19.72:24114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:34.471622 2026] [ssl:error] [pid 2668491:tid 2668491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:34.588924 2026] [ssl:error] [pid 2673303:tid 2673303] (EAI 2)Name or service not known: [client 144.76.19.72:24126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:34.588951 2026] [ssl:error] [pid 2673303:tid 2673303] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:36.888464 2026] [core:error] [pid 2672524:tid 2672524] (13)Permission denied: [client 216.73.216.199:15888] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack/order
[Thu Jul 30 10:07:37.250187 2026] [core:error] [pid 2647985:tid 2647985] [client 20.240.137.17:45933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:37.250214 2026] [core:error] [pid 2647985:tid 2647985] [client 20.240.137.17:45933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:37.672052 2026] [ssl:error] [pid 2672484:tid 2672484] (EAI 2)Name or service not known: [client 144.76.19.72:24134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:37.672101 2026] [ssl:error] [pid 2672484:tid 2672484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:37.728997 2026] [ssl:error] [pid 2661695:tid 2661695] (EAI 2)Name or service not known: [client 144.76.19.72:24140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:37.729026 2026] [ssl:error] [pid 2661695:tid 2661695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:37.799938 2026] [ssl:error] [pid 2672524:tid 2672524] (70014)End of file found: [client 216.73.216.199:15888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:37.826572 2026] [core:error] [pid 2667413:tid 2667413] [client 20.240.137.17:50428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:37.826609 2026] [core:error] [pid 2667413:tid 2667413] [client 20.240.137.17:50428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:39.137793 2026] [security2:error] [pid 2647985:tid 2647985] [client 185.191.171.14:42376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/michael-crabtree-wife-name"] [unique_id "amsUWy1MDKD59KKldBZAhQAAABc"]
[Thu Jul 30 10:07:39.302100 2026] [cgi:error] [pid 2672484:tid 2672484] [client 173.46.86.134:20068] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: https://refraction.co.uk/blog/tag/installer/
[Thu Jul 30 10:07:39.444982 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 10:07:39.909407 2026] [ssl:error] [pid 2673669:tid 2673669] (70014)End of file found: [client 216.73.216.199:54011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:40.393195 2026] [ssl:error] [pid 2660396:tid 2660396] (70014)End of file found: [client 216.73.216.199:18768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:40.783664 2026] [ssl:error] [pid 2672572:tid 2672572] (EAI 2)Name or service not known: [client 144.76.19.72:29318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:40.783695 2026] [ssl:error] [pid 2672572:tid 2672572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:40.840173 2026] [ssl:error] [pid 2673259:tid 2673259] (EAI 2)Name or service not known: [client 144.76.19.72:29334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:40.840204 2026] [ssl:error] [pid 2673259:tid 2673259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:42.279957 2026] [security2:error] [pid 2668491:tid 2668491] [client 185.191.171.1:56812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5405.0/prev_next,next.html"] [unique_id "amsUXrF2_Gxp6LtueDhm5AAAABg"]
[Thu Jul 30 10:07:43.100980 2026] [core:error] [pid 2672570:tid 2672570] (13)Permission denied: [client 216.73.216.199:52079] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-32/sanity_checks
[Thu Jul 30 10:07:43.897027 2026] [ssl:error] [pid 2673516:tid 2673516] (EAI 2)Name or service not known: [client 144.76.19.72:29342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:43.897056 2026] [ssl:error] [pid 2673516:tid 2673516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:43.952502 2026] [ssl:error] [pid 2672571:tid 2672571] (EAI 2)Name or service not known: [client 144.76.19.72:29352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:43.952528 2026] [ssl:error] [pid 2672571:tid 2672571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:46.831198 2026] [ssl:error] [pid 2653473:tid 2653473] (70014)End of file found: [client 216.73.216.199:39399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:47.007548 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:29366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:47.007582 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:47.059400 2026] [ssl:error] [pid 2667737:tid 2667737] (EAI 2)Name or service not known: [client 144.76.19.72:29378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:47.059426 2026] [ssl:error] [pid 2667737:tid 2667737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:47.478605 2026] [authz_core:error] [pid 2669935:tid 2669935] [client 82.102.18.190:42848] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/error_log
[Thu Jul 30 10:07:47.513360 2026] [authz_core:error] [pid 2669935:tid 2669935] [client 82.102.18.190:42848] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/admin/error_log
[Thu Jul 30 10:07:48.046918 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:52079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:50.015235 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/Requests/library/error_log
[Thu Jul 30 10:07:50.113927 2026] [ssl:error] [pid 2651675:tid 2651675] (EAI 2)Name or service not known: [client 144.76.19.72:21232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:50.113955 2026] [ssl:error] [pid 2651675:tid 2651675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:50.167474 2026] [ssl:error] [pid 2651675:tid 2651675] (EAI 2)Name or service not known: [client 144.76.19.72:21242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:50.167497 2026] [ssl:error] [pid 2651675:tid 2651675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:51.009955 2026] [lsapi:warn] [pid 2651675:tid 2651675] [client 192.241.213.188:45854] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 10:07:51.010000 2026] [lsapi:warn] [pid 2651675:tid 2651675] [client 192.241.213.188:45854] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 10:07:51.203563 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 66.249.66.33:55844] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:07:51.206262 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 66.249.66.33:55844] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:07:52.016571 2026] [core:error] [pid 2669803:tid 2669803] [client 20.240.137.17:49924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:52.016607 2026] [core:error] [pid 2669803:tid 2669803] [client 20.240.137.17:49924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:52.588994 2026] [ssl:error] [pid 2669805:tid 2669805] (70014)End of file found: [client 216.73.216.199:36707] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:53.202519 2026] [core:error] [pid 2660396:tid 2660396] (13)Permission denied: [client 216.73.216.199:53405] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/cache_dma
[Thu Jul 30 10:07:53.236626 2026] [ssl:error] [pid 2665239:tid 2665239] (EAI 2)Name or service not known: [client 144.76.19.72:21258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:53.236663 2026] [ssl:error] [pid 2665239:tid 2665239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:53.288293 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:21268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:53.288325 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:53.410267 2026] [core:error] [pid 2669629:tid 2669629] [client 20.240.137.17:45897] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:53.410294 2026] [core:error] [pid 2669629:tid 2669629] [client 20.240.137.17:45897] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:53.721983 2026] [core:error] [pid 2672524:tid 2672524] [client 74.7.175.142:48814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:53.722007 2026] [core:error] [pid 2672524:tid 2672524] [client 74.7.175.142:48814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:54.407100 2026] [ssl:error] [pid 2660396:tid 2660396] (70014)End of file found: [client 216.73.216.199:53405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:55.769256 2026] [ssl:error] [pid 2665239:tid 2665239] (70014)End of file found: [client 216.73.216.199:22312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:07:56.123413 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 10:07:56.313531 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 10:07:56.343160 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:21284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:56.343193 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:56.398771 2026] [ssl:error] [pid 2672572:tid 2672572] (EAI 2)Name or service not known: [client 144.76.19.72:21294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:56.398799 2026] [ssl:error] [pid 2672572:tid 2672572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:57.594018 2026] [core:error] [pid 2673304:tid 2673304] [client 66.249.64.170:39541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:57.594045 2026] [core:error] [pid 2673304:tid 2673304] [client 66.249.64.170:39541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:07:59.454648 2026] [ssl:error] [pid 2661695:tid 2661695] (EAI 2)Name or service not known: [client 144.76.19.72:21304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:59.454679 2026] [ssl:error] [pid 2661695:tid 2661695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:07:59.510538 2026] [ssl:error] [pid 2651675:tid 2651675] (EAI 2)Name or service not known: [client 144.76.19.72:21312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:07:59.510565 2026] [ssl:error] [pid 2651675:tid 2651675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:02.095365 2026] [ssl:error] [pid 2667412:tid 2667412] (70014)End of file found: [client 216.73.216.199:60291] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:02.565170 2026] [ssl:error] [pid 2672571:tid 2672571] (EAI 2)Name or service not known: [client 144.76.19.72:25000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:02.565199 2026] [ssl:error] [pid 2672571:tid 2672571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:02.622672 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:25014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:02.622697 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:05.064257 2026] [lsapi:warn] [pid 2667117:tid 2667117] [client 82.132.217.194:2602] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 10:08:05.064302 2026] [lsapi:warn] [pid 2667117:tid 2667117] [client 82.132.217.194:2602] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 10:08:05.161438 2026] [authz_core:error] [pid 2672573:tid 2672573] [client 66.249.66.33:43873] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:08:05.164100 2026] [authz_core:error] [pid 2672573:tid 2672573] [client 66.249.66.33:43873] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:08:05.621590 2026] [security2:error] [pid 2650047:tid 2650047] [client 114.119.142.20:35429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/request_format~html/cat_ids~103"] [unique_id "amsUdTdnWhdb5n_RrTLHxQAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/request_format%7Ehtml
[Thu Jul 30 10:08:05.676240 2026] [ssl:error] [pid 2653473:tid 2653473] (EAI 2)Name or service not known: [client 144.76.19.72:25018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:05.676265 2026] [ssl:error] [pid 2653473:tid 2653473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:05.716480 2026] [core:error] [pid 2653838:tid 2653838] (13)Permission denied: [client 216.73.216.199:43576] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/device/driver/unbind
[Thu Jul 30 10:08:05.727731 2026] [ssl:error] [pid 2667382:tid 2667382] (EAI 2)Name or service not known: [client 144.76.19.72:25034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:05.727756 2026] [ssl:error] [pid 2667382:tid 2667382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:06.619363 2026] [ssl:error] [pid 2653838:tid 2653838] (70014)End of file found: [client 216.73.216.199:43576] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:06.683806 2026] [security2:error] [pid 2672484:tid 2672484] [client 114.119.142.20:35431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/request_format~html/cat_ids~103"] [unique_id "amsUdvWJgM1w85aB5HxDEAAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/request_format%7Ehtml
[Thu Jul 30 10:08:07.720391 2026] [authz_core:error] [pid 2667086:tid 2667086] [client 82.102.18.190:58968] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/admin/includes/error_log
[Thu Jul 30 10:08:07.825003 2026] [core:error] [pid 2669803:tid 2669803] (13)Permission denied: [client 216.73.216.199:33378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/vars/altnodejselstoken
[Thu Jul 30 10:08:08.728448 2026] [core:error] [pid 2669803:tid 2669803] (13)Permission denied: [client 216.73.216.199:33378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-32/store_user
[Thu Jul 30 10:08:08.815370 2026] [ssl:error] [pid 2669713:tid 2669713] (EAI 2)Name or service not known: [client 144.76.19.72:25044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:08.815404 2026] [ssl:error] [pid 2669713:tid 2669713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:08.921305 2026] [ssl:error] [pid 2668491:tid 2668491] (EAI 2)Name or service not known: [client 144.76.19.72:25060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:08.921328 2026] [ssl:error] [pid 2668491:tid 2668491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:11.442764 2026] [core:error] [pid 2672572:tid 2672572] (13)Permission denied: [client 216.73.216.199:37841] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-96/sanity_checks
[Thu Jul 30 10:08:11.946916 2026] [core:error] [pid 2672573:tid 2672573] [client 20.240.137.17:50382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:11.946937 2026] [core:error] [pid 2672573:tid 2672573] [client 20.240.137.17:50382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:12.036110 2026] [ssl:error] [pid 2667117:tid 2667117] (EAI 2)Name or service not known: [client 144.76.19.72:26310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:12.036150 2026] [ssl:error] [pid 2667117:tid 2667117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:12.089477 2026] [ssl:error] [pid 2675508:tid 2675508] (EAI 2)Name or service not known: [client 144.76.19.72:26318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:12.089514 2026] [ssl:error] [pid 2675508:tid 2675508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:12.345911 2026] [core:error] [pid 2672572:tid 2672572] (13)Permission denied: [client 216.73.216.199:37841] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCP/sanity_checks
[Thu Jul 30 10:08:12.428853 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:50320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:12.428874 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:50320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:12.948002 2026] [ssl:error] [pid 2672572:tid 2672572] (70014)End of file found: [client 216.73.216.199:37841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:13.218533 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 10:08:13.244346 2026] [core:error] [pid 2669803:tid 2669803] (13)Permission denied: [client 216.73.216.199:33378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/rhn/systemid
[Thu Jul 30 10:08:14.607025 2026] [ssl:error] [pid 2669803:tid 2669803] (70014)End of file found: [client 216.73.216.199:33378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:15.101374 2026] [security2:error] [pid 2675674:tid 2675674] [client 185.191.171.15:10532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5760.0/prev_next,prev.html"] [unique_id "amsUf2pHD-7MOOr_ChWlkwAAABY"]
[Thu Jul 30 10:08:15.152661 2026] [ssl:error] [pid 2673259:tid 2673259] (EAI 2)Name or service not known: [client 144.76.19.72:26328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:15.152693 2026] [ssl:error] [pid 2673259:tid 2673259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:15.207198 2026] [ssl:error] [pid 2665239:tid 2665239] (EAI 2)Name or service not known: [client 144.76.19.72:26334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:15.207227 2026] [ssl:error] [pid 2665239:tid 2665239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:15.938829 2026] [security2:error] [pid 2672571:tid 2672571] [client 47.128.55.154:21508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hoo-hah.co.uk"] [uri "/robots.txt"] [unique_id "amsUf9S264wK3OIHj07c_QAAACM"]
[Thu Jul 30 10:08:16.022983 2026] [authz_core:error] [pid 2670998:tid 2670998] [client 66.249.66.34:42041] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:08:16.025657 2026] [authz_core:error] [pid 2670998:tid 2670998] [client 66.249.66.34:42041] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:08:17.726630 2026] [security2:error] [pid 2672524:tid 2672524] [client 152.42.165.47:56385] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glasgowball.com"] [uri "/sftp-config.json"] [unique_id "amsUgaCcg6JbNnBL1t0a9gAAAAY"]
[Thu Jul 30 10:08:17.726817 2026] [security2:error] [pid 2672524:tid 2672524] [client 152.42.165.47:56385] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glasgowball.com"] [uri "/sftp-config.json"] [unique_id "amsUgaCcg6JbNnBL1t0a9gAAAAY"]
[Thu Jul 30 10:08:17.727009 2026] [security2:error] [pid 2672524:tid 2672524] [client 152.42.165.47:56385] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glasgowball.com"] [uri "/sftp-config.json"] [unique_id "amsUgaCcg6JbNnBL1t0a9gAAAAY"]
[Thu Jul 30 10:08:17.966697 2026] [core:error] [pid 2675674:tid 2675674] [client 66.249.66.168:60914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:17.966721 2026] [core:error] [pid 2675674:tid 2675674] [client 66.249.66.168:60914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:17.966722 2026] [core:error] [pid 2671468:tid 2671468] [client 66.249.66.168:49314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:17.966744 2026] [core:error] [pid 2671468:tid 2671468] [client 66.249.66.168:49314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:18.164362 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/html-api/error_log
[Thu Jul 30 10:08:18.261607 2026] [ssl:error] [pid 2671468:tid 2671468] (EAI 2)Name or service not known: [client 144.76.19.72:26336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:18.261644 2026] [ssl:error] [pid 2671468:tid 2671468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:18.320296 2026] [ssl:error] [pid 2653838:tid 2653838] (EAI 2)Name or service not known: [client 144.76.19.72:26350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:18.320329 2026] [ssl:error] [pid 2653838:tid 2653838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:18.428246 2026] [security2:error] [pid 2675866:tid 2675866] [client 156.59.198.136:39588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUgg-tA9mxsDqG96ONNQAAABc"]
[Thu Jul 30 10:08:19.148447 2026] [security2:error] [pid 2672572:tid 2672572] [client 43.134.115.40:36797] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUgw199VjjhLmfTpbdpwAAACU"]
[Thu Jul 30 10:08:19.148497 2026] [security2:error] [pid 2672572:tid 2672572] [client 43.134.115.40:36797] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUgw199VjjhLmfTpbdpwAAACU"]
[Thu Jul 30 10:08:19.148908 2026] [security2:error] [pid 2672572:tid 2672572] [client 43.134.115.40:36797] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUgw199VjjhLmfTpbdpwAAACU"]
[Thu Jul 30 10:08:20.473022 2026] [core:error] [pid 2667086:tid 2667086] (13)Permission denied: [client 216.73.216.199:40523] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:65/uartclk
[Thu Jul 30 10:08:20.556437 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/rest-api/error_log
[Thu Jul 30 10:08:20.633718 2026] [security2:error] [pid 2672571:tid 2672571] [client 156.59.198.136:56572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUhNS264wK3OIHj07dBQAAACM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:20.666322 2026] [security2:error] [pid 2672572:tid 2672572] [client 119.15.92.126:55772] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUhA199VjjhLmfTpbdrAAAACU"]
[Thu Jul 30 10:08:20.666379 2026] [security2:error] [pid 2672572:tid 2672572] [client 119.15.92.126:55772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUhA199VjjhLmfTpbdrAAAACU"]
[Thu Jul 30 10:08:20.666617 2026] [security2:error] [pid 2672572:tid 2672572] [client 119.15.92.126:55772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUhA199VjjhLmfTpbdrAAAACU"]
[Thu Jul 30 10:08:21.074297 2026] [core:error] [pid 2667086:tid 2667086] (13)Permission denied: [client 216.73.216.199:40523] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/run/rsyslogd.pid
[Thu Jul 30 10:08:21.396887 2026] [ssl:error] [pid 2675258:tid 2675258] (EAI 2)Name or service not known: [client 144.76.19.72:41250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:21.396931 2026] [ssl:error] [pid 2675258:tid 2675258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:21.450409 2026] [ssl:error] [pid 2651675:tid 2651675] (EAI 2)Name or service not known: [client 144.76.19.72:41264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:21.450435 2026] [ssl:error] [pid 2651675:tid 2651675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:21.976721 2026] [security2:error] [pid 2667086:tid 2667086] [client 216.73.216.199:40523] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default-cgv1/tuned.conf"] [unique_id "amsUhcU70SDC7lqlVXu5zQAAAAE"]
[Thu Jul 30 10:08:21.977001 2026] [security2:error] [pid 2667086:tid 2667086] [client 216.73.216.199:40523] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default-cgv1/tuned.conf"] [unique_id "amsUhcU70SDC7lqlVXu5zQAAAAE"]
[Thu Jul 30 10:08:21.977256 2026] [security2:error] [pid 2667086:tid 2667086] [client 216.73.216.199:40523] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-default-cgv1/tuned.conf"] [unique_id "amsUhcU70SDC7lqlVXu5zQAAAAE"]
[Thu Jul 30 10:08:22.406061 2026] [security2:error] [pid 2672571:tid 2672571] [client 156.59.198.135:22858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUhtS264wK3OIHj07dBwAAACM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:23.451840 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 172.202.44.182:52512] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/IXR/error_log
[Thu Jul 30 10:08:23.807529 2026] [core:error] [pid 2675359:tid 2675359] [client 20.240.137.17:50427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:23.807553 2026] [core:error] [pid 2675359:tid 2675359] [client 20.240.137.17:50427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:23.896791 2026] [security2:error] [pid 2669935:tid 2669935] [client 156.59.198.135:45394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUhxkw3CyGYN1Iw4DQPAAAAC4"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:24.043055 2026] [security2:error] [pid 2653473:tid 2653473] [client 38.156.253.81:23831] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUiBTagygMYv94UJPdKgAAAA4"]
[Thu Jul 30 10:08:24.043122 2026] [security2:error] [pid 2653473:tid 2653473] [client 38.156.253.81:23831] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUiBTagygMYv94UJPdKgAAAA4"]
[Thu Jul 30 10:08:24.043403 2026] [security2:error] [pid 2653473:tid 2653473] [client 38.156.253.81:23831] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUiBTagygMYv94UJPdKgAAAA4"]
[Thu Jul 30 10:08:24.392034 2026] [authz_core:error] [pid 2675508:tid 2675508] [client 66.249.66.33:40459] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:08:24.394736 2026] [authz_core:error] [pid 2675508:tid 2675508] [client 66.249.66.33:40459] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:08:24.508664 2026] [ssl:error] [pid 2651673:tid 2651673] (EAI 2)Name or service not known: [client 144.76.19.72:41268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:24.508691 2026] [ssl:error] [pid 2651673:tid 2651673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:24.563194 2026] [ssl:error] [pid 2667382:tid 2667382] (EAI 2)Name or service not known: [client 144.76.19.72:41282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:24.563220 2026] [ssl:error] [pid 2667382:tid 2667382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:25.664652 2026] [security2:error] [pid 2671526:tid 2671526] [client 156.59.198.135:27108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUiXT6qvko5Z25Y8ME-AAAACE"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:25.785290 2026] [core:error] [pid 2662900:tid 2662900] (13)Permission denied: [client 216.73.216.199:40135] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack_expect/cpu_slabs
[Thu Jul 30 10:08:26.732975 2026] [authz_core:error] [pid 2660396:tid 2660396] [client 20.104.16.169:43107] AH01630: client denied by server configuration: /home/georgeho/public_html/.alf.php
[Thu Jul 30 10:08:26.997387 2026] [ssl:error] [pid 2667086:tid 2667086] (70014)End of file found: [client 216.73.216.199:40523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:27.105011 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 172.202.44.182:52512] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 10:08:27.468109 2026] [core:error] [pid 2670475:tid 2670475] [client 20.240.137.17:60243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:27.468137 2026] [core:error] [pid 2670475:tid 2670475] [client 20.240.137.17:60243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:27.619755 2026] [ssl:error] [pid 2675359:tid 2675359] (EAI 2)Name or service not known: [client 144.76.19.72:41294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:27.619800 2026] [ssl:error] [pid 2675359:tid 2675359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:27.668631 2026] [cgi:error] [pid 2672571:tid 2672571] [client 20.63.10.215:28116] AH02812: stderr from /home/josieand/public_html/tjwilliamscarpentry.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:08:27.673000 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:41310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:27.673023 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:27.860428 2026] [security2:error] [pid 2665853:tid 2665853] [client 156.59.198.135:37450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUi6nh-o5MwxN_JSZtgAAAAAw"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:27.879689 2026] [security2:error] [pid 2671526:tid 2671526] [client 43.130.101.151:42690] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "barbaramatarrese.com"] [uri "/"] [unique_id "amsUi3T6qvko5Z25Y8ME_QAAACE"]
[Thu Jul 30 10:08:27.942814 2026] [authz_core:error] [pid 2660396:tid 2660396] [client 20.104.16.169:43107] AH01630: client denied by server configuration: /home/georgeho/public_html/.bod
[Thu Jul 30 10:08:28.460655 2026] [authz_core:error] [pid 2660396:tid 2660396] [client 20.104.16.169:43107] AH01630: client denied by server configuration: /home/georgeho/public_html/.trash7206
[Thu Jul 30 10:08:29.196802 2026] [security2:error] [pid 2676242:tid 2676242] [client 156.59.198.135:65364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUjRHznCfFdOIj17IM-AAAACI"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:29.302321 2026] [core:error] [pid 2675866:tid 2675866] [client 20.240.137.17:52513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:29.302344 2026] [core:error] [pid 2675866:tid 2675866] [client 20.240.137.17:52513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:29.326182 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 172.202.44.182:52512] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 10:08:30.184928 2026] [security2:error] [pid 2667412:tid 2667412] [client 47.128.24.38:54236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsUjprT00meCrKyO6v8SQAAABQ"]
[Thu Jul 30 10:08:30.472568 2026] [security2:error] [pid 2671468:tid 2671468] [client 156.59.198.136:32190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUjvGsNs--nYJm_JPazgAAABA"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:30.725951 2026] [ssl:error] [pid 2651675:tid 2651675] (EAI 2)Name or service not known: [client 144.76.19.72:47984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:30.725977 2026] [ssl:error] [pid 2651675:tid 2651675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:30.781486 2026] [ssl:error] [pid 2675508:tid 2675508] (EAI 2)Name or service not known: [client 144.76.19.72:47996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:30.781508 2026] [ssl:error] [pid 2675508:tid 2675508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:30.910643 2026] [core:error] [pid 2675359:tid 2675359] (13)Permission denied: [client 216.73.216.199:36402] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/intel_rapl_msr/sections/__verbose
[Thu Jul 30 10:08:31.513653 2026] [ssl:error] [pid 2675359:tid 2675359] (70014)End of file found: [client 216.73.216.199:36402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:32.281605 2026] [security2:error] [pid 2665853:tid 2665853] [client 156.59.198.136:62240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUkKnh-o5MwxN_JSZthwAAAAw"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:32.417361 2026] [ssl:error] [pid 2662900:tid 2662900] (70014)End of file found: [client 216.73.216.199:40135] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:33.769209 2026] [security2:error] [pid 2667412:tid 2667412] [client 156.59.198.136:35092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUkZrT00meCrKyO6v8UAAAABQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:33.834261 2026] [ssl:error] [pid 2651673:tid 2651673] (EAI 2)Name or service not known: [client 144.76.19.72:47998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:33.834299 2026] [ssl:error] [pid 2651673:tid 2651673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:33.889675 2026] [ssl:error] [pid 2676023:tid 2676023] (EAI 2)Name or service not known: [client 144.76.19.72:48014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:33.889715 2026] [ssl:error] [pid 2676023:tid 2676023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:34.830824 2026] [core:error] [pid 2667086:tid 2667086] (13)Permission denied: [client 216.73.216.199:15851] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/shrink
[Thu Jul 30 10:08:35.018110 2026] [access_compat:error] [pid 2672573:tid 2672573] [client 45.158.164.139:50792] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:08:35.422941 2026] [security2:error] [pid 2669629:tid 2669629] [client 156.59.198.136:62114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUk6p9LGr2WuoQiOSBdwAAABk"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:36.144524 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 172.202.44.182:52512] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 10:08:36.390617 2026] [core:error] [pid 2672571:tid 2672571] [client 20.240.137.17:60269] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:36.390638 2026] [core:error] [pid 2672571:tid 2672571] [client 20.240.137.17:60269] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:36.909485 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/PHPMailer/error_log
[Thu Jul 30 10:08:37.228860 2026] [security2:error] [pid 2667117:tid 2667117] [client 156.59.198.136:47060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUle1u5CinWcYxsZSAAwAAAAM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:37.242179 2026] [core:error] [pid 2669805:tid 2669805] (13)Permission denied: [client 216.73.216.199:49772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dquot/order
[Thu Jul 30 10:08:38.141205 2026] [ssl:error] [pid 2669805:tid 2669805] (70014)End of file found: [client 216.73.216.199:49772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:38.283673 2026] [ssl:error] [pid 2676242:tid 2676242] (EAI 2)Name or service not known: [client 144.76.19.72:48016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:38.283712 2026] [ssl:error] [pid 2676242:tid 2676242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:38.610251 2026] [ssl:error] [pid 2676896:tid 2676896] (EAI 2)Name or service not known: [client 144.76.19.72:48024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:38.610288 2026] [ssl:error] [pid 2676896:tid 2676896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:38.904135 2026] [security2:error] [pid 2670998:tid 2670998] [client 156.59.198.136:26580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUlmY4bSWjRjLUQG9UlQAAAAo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:38.927749 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 172.202.44.182:52512] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 10:08:39.464494 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 10:08:39.571784 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 10:08:39.571829 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:39.602603 2026] [security2:error] [pid 2672571:tid 2672571] [client 185.191.171.6:12660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/laurel,-md-news-shooting"] [unique_id "amsUl9S264wK3OIHj07dPwAAACM"]
[Thu Jul 30 10:08:39.660472 2026] [ssl:error] [pid 2667086:tid 2667086] (70014)End of file found: [client 216.73.216.199:15851] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:39.696502 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xstelth.php
[Thu Jul 30 10:08:39.696544 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:39.803571 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/584062352875874akp.php
[Thu Jul 30 10:08:39.803623 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:39.915565 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/newfile.php
[Thu Jul 30 10:08:39.915619 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:40.022944 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tBEZGQz.php
[Thu Jul 30 10:08:40.022994 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:40.142631 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/phpinfo
[Thu Jul 30 10:08:40.259737 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/drykl.php
[Thu Jul 30 10:08:40.259781 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:40.367037 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 10:08:40.403379 2026] [security2:error] [pid 2668491:tid 2668491] [client 156.59.198.136:62454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUmLF2_Gxp6LtueDhnjAAAABg"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:40.496569 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ls.php
[Thu Jul 30 10:08:40.496636 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:40.603721 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dx.php
[Thu Jul 30 10:08:40.603765 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:40.719152 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mac.php
[Thu Jul 30 10:08:40.719197 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:40.865021 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:63003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:41.234692 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/485.php
[Thu Jul 30 10:08:41.234740 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:41.350330 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gelio1.php
[Thu Jul 30 10:08:41.350371 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:41.457442 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lp6.php
[Thu Jul 30 10:08:41.457484 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:41.588462 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 10:08:41.691560 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:25850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:41.691588 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:41.705466 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 10:08:41.749497 2026] [ssl:error] [pid 2651675:tid 2651675] (EAI 2)Name or service not known: [client 144.76.19.72:25866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:41.749521 2026] [ssl:error] [pid 2651675:tid 2651675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:41.831530 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/w3llscc.php
[Thu Jul 30 10:08:41.831572 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:41.864883 2026] [security2:error] [pid 2675866:tid 2675866] [client 156.59.198.136:31338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUmQ-tA9mxsDqG96ONRAAAABc"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:41.951708 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/miru3.php
[Thu Jul 30 10:08:41.951754 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:42.075472 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/autoload_classmap.php
[Thu Jul 30 10:08:42.075516 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:42.182681 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 10:08:42.291151 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 10:08:42.398435 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/av.php
[Thu Jul 30 10:08:42.398481 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:42.524206 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 10:08:42.656367 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wordpress
[Thu Jul 30 10:08:42.776752 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tiny.php
[Thu Jul 30 10:08:42.776794 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:42.886200 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/BsMPQ6Wavdefault.php
[Thu Jul 30 10:08:42.886242 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:43.011452 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/zrrhj.php
[Thu Jul 30 10:08:43.011496 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:43.125570 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gwaih1gfzp5vuwr04Cdefault.php
[Thu Jul 30 10:08:43.125629 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:43.232834 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wpgum.php
[Thu Jul 30 10:08:43.232888 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:43.343322 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ywwbf.php
[Thu Jul 30 10:08:43.343368 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:43.377327 2026] [security2:error] [pid 2670475:tid 2670475] [client 156.59.198.135:56588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUm7UYjHl1h5v7nmSbdQAAAAA"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:43.727728 2026] [authz_core:error] [pid 2669805:tid 2669805] [client 66.249.66.33:45288] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:08:43.730402 2026] [authz_core:error] [pid 2669805:tid 2669805] [client 66.249.66.33:45288] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:08:43.862008 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xoldj.php
[Thu Jul 30 10:08:43.862052 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:43.871533 2026] [ssl:error] [pid 2672484:tid 2672484] (70014)End of file found: [client 216.73.216.199:38079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:44.328161 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/f35.php
[Thu Jul 30 10:08:44.328205 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:44.443459 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gk.php
[Thu Jul 30 10:08:44.443500 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:44.566420 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/584062352875874akp.php
[Thu Jul 30 10:08:44.566463 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:44.809452 2026] [ssl:error] [pid 2667086:tid 2667086] (EAI 2)Name or service not known: [client 144.76.19.72:25868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:44.809476 2026] [ssl:error] [pid 2667086:tid 2667086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:44.866929 2026] [ssl:error] [pid 2675359:tid 2675359] (EAI 2)Name or service not known: [client 144.76.19.72:25872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:44.866956 2026] [ssl:error] [pid 2675359:tid 2675359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:44.887270 2026] [security2:error] [pid 2660459:tid 2660459] [client 156.59.198.135:27876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUnMUYS7C89SvbdgvZoQAAAC0"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:44.970790 2026] [access_compat:error] [pid 2670475:tid 2670475] [client 196.75.51.247:62936] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:08:45.407405 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wper3.php
[Thu Jul 30 10:08:45.407454 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:45.849601 2026] [security2:error] [pid 2673259:tid 2673259] [client 31.42.112.11:40131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/saveshrine/secret-of-mana/images/logo.png"] [unique_id "amsUnVT_xpRGKQRyOXdKFgAAAAQ"], referer: https://robin64.co.uk/saveshrine/
[Thu Jul 30 10:08:45.983440 2026] [ssl:error] [pid 2667117:tid 2667117] (70014)End of file found: [client 216.73.216.199:23226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:46.632480 2026] [security2:error] [pid 2675674:tid 2675674] [client 156.59.198.135:15912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUnmpHD-7MOOr_ChWlqAAAABY"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:47.254540 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bthil.php
[Thu Jul 30 10:08:47.254601 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:47.373966 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wyzer1.php
[Thu Jul 30 10:08:47.374009 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:47.405154 2026] [authz_core:error] [pid 2668488:tid 2668488] [client 191.232.199.39:43774] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/block-supports/error_log
[Thu Jul 30 10:08:47.488636 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mh.php
[Thu Jul 30 10:08:47.488685 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:47.609526 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gvg1bvpsgtot1rpklCdefault.php
[Thu Jul 30 10:08:47.609569 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:47.666079 2026] [core:error] [pid 2672571:tid 2672571] [client 20.240.137.17:9759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:47.666112 2026] [core:error] [pid 2672571:tid 2672571] [client 20.240.137.17:9759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:47.719510 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/1.php
[Thu Jul 30 10:08:47.719555 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:47.823624 2026] [cgi:error] [pid 2653473:tid 2653473] [client 20.104.22.47:34498] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:08:47.826682 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/chosen.php
[Thu Jul 30 10:08:47.826723 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:47.922620 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:25888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:47.922647 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:47.977522 2026] [ssl:error] [pid 2676023:tid 2676023] (EAI 2)Name or service not known: [client 144.76.19.72:25890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:47.977546 2026] [ssl:error] [pid 2676023:tid 2676023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:48.099367 2026] [autoindex:error] [pid 2677391:tid 2677391] (13)Permission denied: [client 216.73.216.199:37316] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/cagefs/
[Thu Jul 30 10:08:48.224263 2026] [security2:error] [pid 2675674:tid 2675674] [client 156.59.198.135:42534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUoGpHD-7MOOr_ChWlqQAAABY"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:48.462309 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sd.php
[Thu Jul 30 10:08:48.462363 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:48.579529 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/z60.php
[Thu Jul 30 10:08:48.579572 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:48.692209 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/home.php
[Thu Jul 30 10:08:48.692251 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:48.799347 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws58.php
[Thu Jul 30 10:08:48.799392 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:48.833574 2026] [authz_core:error] [pid 2667118:tid 2667118] [client 172.202.44.182:52512] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 10:08:48.907094 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gulu.php
[Thu Jul 30 10:08:48.907138 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:49.000055 2026] [ssl:error] [pid 2677391:tid 2677391] (70014)End of file found: [client 216.73.216.199:37316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:49.033875 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/6xBAm3vODE05BSzkJZRAws.php
[Thu Jul 30 10:08:49.033920 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:49.149993 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wpls.php
[Thu Jul 30 10:08:49.150038 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:49.257078 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/php.php
[Thu Jul 30 10:08:49.257124 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:49.300254 2026] [ssl:error] [pid 2667412:tid 2667412] (70014)End of file found: [client 216.73.216.199:42228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:49.377544 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/100.php
[Thu Jul 30 10:08:49.377588 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:49.495344 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/BDKR28WP.php
[Thu Jul 30 10:08:49.495390 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:49.602416 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/browse.php
[Thu Jul 30 10:08:49.602460 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:49.739913 2026] [security2:error] [pid 2675866:tid 2675866] [client 156.59.198.136:17166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUoQ-tA9mxsDqG96ONRwAAABc"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:49.784393 2026] [ssl:error] [pid 2675359:tid 2675359] (70014)End of file found: [client 216.73.216.199:24199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:50.010517 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-good.php
[Thu Jul 30 10:08:50.010565 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:50.143517 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/8573.php
[Thu Jul 30 10:08:50.143563 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:50.250779 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 10:08:50.357951 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/classwithtostring.php
[Thu Jul 30 10:08:50.357999 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:50.482144 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ohct.php
[Thu Jul 30 10:08:50.482188 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:50.589261 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bless.php
[Thu Jul 30 10:08:50.589305 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:50.698103 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about.php
[Thu Jul 30 10:08:50.698152 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:50.805417 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/public
[Thu Jul 30 10:08:50.912570 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ta0ol.php
[Thu Jul 30 10:08:50.912625 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:51.019772 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sa.php7
[Thu Jul 30 10:08:51.019818 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:51.032505 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:49276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:51.032540 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:51.086499 2026] [ssl:error] [pid 2669629:tid 2669629] (EAI 2)Name or service not known: [client 144.76.19.72:49278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:51.086524 2026] [ssl:error] [pid 2669629:tid 2669629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:51.141005 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-class.php
[Thu Jul 30 10:08:51.141050 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:51.249753 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/8.php
[Thu Jul 30 10:08:51.249796 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:51.363394 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bootstrap.php
[Thu Jul 30 10:08:51.363442 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:51.384629 2026] [access_compat:error] [pid 2677340:tid 2677340] [client 196.75.51.247:63421] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:08:51.502330 2026] [security2:error] [pid 2653838:tid 2653838] [client 156.59.198.136:60790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUowqZ_sP2VocwkWgd7gAAAAg"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:51.814541 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-blog-header.php
[Thu Jul 30 10:08:51.814586 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:51.922836 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aa.php
[Thu Jul 30 10:08:51.922880 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:51.943639 2026] [authz_core:error] [pid 2653473:tid 2653473] [client 20.104.22.47:34498] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 10:08:52.029988 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tx79.php
[Thu Jul 30 10:08:52.030033 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:52.139249 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/motu.php
[Thu Jul 30 10:08:52.139295 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:52.246403 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-head.php
[Thu Jul 30 10:08:52.246445 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:52.374793 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 10:08:52.509255 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/60856e3a4findex.php
[Thu Jul 30 10:08:52.509297 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:52.628411 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-the.php
[Thu Jul 30 10:08:52.628455 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:52.758289 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp.php
[Thu Jul 30 10:08:52.758335 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:52.783242 2026] [security2:error] [pid 2660459:tid 2660459] [client 156.59.198.135:32718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUpMUYS7C89SvbdgvZpgAAAC0"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:52.882454 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/users.php
[Thu Jul 30 10:08:52.882501 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:52.995471 2026] [core:error] [pid 2675674:tid 2675674] [client 20.240.137.17:30308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:52.995495 2026] [core:error] [pid 2675674:tid 2675674] [client 20.240.137.17:30308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:53.012969 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tinysd.php
[Thu Jul 30 10:08:53.013013 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:53.123349 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws78.php
[Thu Jul 30 10:08:53.123390 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:53.241085 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/elp.php
[Thu Jul 30 10:08:53.241128 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:53.348162 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/atomlib.php
[Thu Jul 30 10:08:53.348202 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:53.455359 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wyzer3.php
[Thu Jul 30 10:08:53.455406 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:53.492710 2026] [core:error] [pid 2675258:tid 2675258] [client 20.240.137.17:54721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:53.492739 2026] [core:error] [pid 2675258:tid 2675258] [client 20.240.137.17:54721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:53.565430 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/max.php
[Thu Jul 30 10:08:53.565473 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:53.672701 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ftde.php
[Thu Jul 30 10:08:53.672743 2026] [access_compat:error] [pid 2669935:tid 2669935] [client 172.202.95.21:44897] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 10:08:54.047714 2026] [security2:error] [pid 2677385:tid 2677385] [client 156.59.198.136:50066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUptoXTz9bB1V3XV1sWQAAADE"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:54.160804 2026] [ssl:error] [pid 2673259:tid 2673259] (EAI 2)Name or service not known: [client 144.76.19.72:49294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:54.160878 2026] [ssl:error] [pid 2673259:tid 2673259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:54.214061 2026] [ssl:error] [pid 2668491:tid 2668491] (EAI 2)Name or service not known: [client 144.76.19.72:49304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:54.214107 2026] [ssl:error] [pid 2668491:tid 2668491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:54.217783 2026] [core:error] [pid 2670998:tid 2670998] [client 20.240.137.17:54735] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:54.217822 2026] [core:error] [pid 2670998:tid 2670998] [client 20.240.137.17:54735] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:54.422374 2026] [ssl:error] [pid 2670475:tid 2670475] (70014)End of file found: [client 216.73.216.199:25059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:55.105044 2026] [ssl:error] [pid 2668491:tid 2668491] (70014)End of file found: [client 216.73.216.199:55146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:55.538440 2026] [security2:error] [pid 2675258:tid 2675258] [client 156.59.198.136:64036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUpwuaUZYh9Qrcv8b4IwAAAAU"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:55.726890 2026] [core:error] [pid 2667412:tid 2667412] [client 20.240.137.17:63068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:55.726914 2026] [core:error] [pid 2667412:tid 2667412] [client 20.240.137.17:63068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:56.229126 2026] [ssl:error] [pid 2660459:tid 2660459] (5)Input/output error: [client 216.73.216.199:3253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:08:56.498140 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:63071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:56.498165 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:63071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:08:56.867646 2026] [security2:error] [pid 2675258:tid 2675258] [client 156.59.198.135:36844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUqAuaUZYh9Qrcv8b4JAAAAAU"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:57.269387 2026] [ssl:error] [pid 2673259:tid 2673259] (EAI 2)Name or service not known: [client 144.76.19.72:49310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:57.269418 2026] [ssl:error] [pid 2673259:tid 2673259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:57.323670 2026] [ssl:error] [pid 2672484:tid 2672484] (EAI 2)Name or service not known: [client 144.76.19.72:49324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:08:57.323693 2026] [ssl:error] [pid 2672484:tid 2672484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:08:58.161367 2026] [security2:error] [pid 2675258:tid 2675258] [client 156.59.198.136:55870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUqguaUZYh9Qrcv8b4JQAAAAU"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:58.450732 2026] [access_compat:error] [pid 2672571:tid 2672571] [client 196.75.51.247:64089] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:08:59.622295 2026] [security2:error] [pid 2665853:tid 2665853] [client 156.59.198.135:20570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUq6nh-o5MwxN_JSZtrQAAAAw"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:08:59.740544 2026] [security2:error] [pid 2672570:tid 2672570] [client 49.51.47.100:53164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wmsfirearmstraining.com"] [uri "/"] [unique_id "amsUq1i_3pHPaouWvCXLcgAAAB8"]
[Thu Jul 30 10:09:00.375843 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:44234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:00.375868 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:00.430634 2026] [ssl:error] [pid 2675674:tid 2675674] (EAI 2)Name or service not known: [client 144.76.19.72:44246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:00.430707 2026] [ssl:error] [pid 2675674:tid 2675674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:01.048010 2026] [security2:error] [pid 2675674:tid 2675674] [client 49.51.47.100:42934] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wmsfirearmstraining.com"] [uri "/"] [unique_id "amsUrWpHD-7MOOr_ChWlsQAAABY"], referer: http://wmsfirearmstraining.com
[Thu Jul 30 10:09:01.355444 2026] [security2:error] [pid 2667412:tid 2667412] [client 156.59.198.135:54480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUrZrT00meCrKyO6v8YAAAABQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:01.556141 2026] [lsapi:error] [pid 2676896:tid 2676896] [client 216.73.216.199:13854] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Duda.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Duda.php on line 8\n
[Thu Jul 30 10:09:02.147750 2026] [security2:error] [pid 2671526:tid 2671526] [client 43.157.149.188:42524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.co.uk"] [uri "/"] [unique_id "amsUrnT6qvko5Z25Y8MFCwAAACE"]
[Thu Jul 30 10:09:02.547414 2026] [ssl:error] [pid 2665239:tid 2665239] (70014)End of file found: [client 216.73.216.199:15954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:03.154625 2026] [core:error] [pid 2668491:tid 2668491] (13)Permission denied: [client 216.73.216.199:8845] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/reclaim_account
[Thu Jul 30 10:09:03.484165 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:44260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:03.484197 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:03.537416 2026] [ssl:error] [pid 2678052:tid 2678052] (EAI 2)Name or service not known: [client 144.76.19.72:44266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:03.537452 2026] [ssl:error] [pid 2678052:tid 2678052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:03.893531 2026] [security2:error] [pid 2669803:tid 2669803] [client 49.51.47.100:44436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amsUryIqLX86bjBmJNnCXgAAACg"], referer: https://wmsfirearmstraining.com/
[Thu Jul 30 10:09:03.974749 2026] [security2:error] [pid 2677340:tid 2677340] [client 156.59.198.136:15076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUr9suQFPezmsQQk-zhQAAACo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:04.962696 2026] [core:error] [pid 2667412:tid 2667412] (13)Permission denied: [client 216.73.216.199:14078] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_defrag_ipv6/sections/__jump_table
[Thu Jul 30 10:09:04.998573 2026] [access_compat:error] [pid 2670475:tid 2670475] [client 196.75.51.247:64732] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:05.166744 2026] [core:error] [pid 2677389:tid 2677389] [client 20.240.137.17:9555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:05.166778 2026] [core:error] [pid 2677389:tid 2677389] [client 20.240.137.17:9555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:05.504283 2026] [security2:error] [pid 2678053:tid 2678053] [client 156.59.198.136:59156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUsYB3fDgS7Z0u0Bp63QAAABU"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:05.864917 2026] [core:error] [pid 2667412:tid 2667412] (13)Permission denied: [client 216.73.216.199:14078] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/rng_core/uevent
[Thu Jul 30 10:09:06.165710 2026] [core:error] [pid 2667412:tid 2667412] (13)Permission denied: [client 216.73.216.199:14078] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS3/line
[Thu Jul 30 10:09:06.592660 2026] [ssl:error] [pid 2669803:tid 2669803] (EAI 2)Name or service not known: [client 144.76.19.72:44298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:06.592685 2026] [ssl:error] [pid 2669803:tid 2669803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:06.647058 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:44308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:06.647089 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:06.984893 2026] [security2:error] [pid 2677340:tid 2677340] [client 156.59.198.135:36148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUstsuQFPezmsQQk-zhgAAACo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:08.611790 2026] [security2:error] [pid 2651749:tid 2651749] [client 156.59.198.135:61150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUtBotHL6VKbxpSwc0NwAAAD4"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:08.876321 2026] [ssl:error] [pid 2667412:tid 2667412] (70014)End of file found: [client 216.73.216.199:14078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:09.478090 2026] [ssl:error] [pid 2668491:tid 2668491] (70014)End of file found: [client 216.73.216.199:8845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:09.700513 2026] [ssl:error] [pid 2651675:tid 2651675] (EAI 2)Name or service not known: [client 144.76.19.72:43038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:09.700541 2026] [ssl:error] [pid 2651675:tid 2651675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:09.751758 2026] [ssl:error] [pid 2667117:tid 2667117] (EAI 2)Name or service not known: [client 144.76.19.72:43054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:09.751784 2026] [ssl:error] [pid 2667117:tid 2667117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:09.889442 2026] [security2:error] [pid 2672571:tid 2672571] [client 156.59.198.135:38808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUtdS264wK3OIHj07dUgAAACM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:10.381198 2026] [ssl:error] [pid 2668448:tid 2668448] (70014)End of file found: [client 216.73.216.199:7669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:10.750727 2026] [cgi:error] [pid 2672484:tid 2672484] [client 66.132.224.79:29774] AH02812: stderr from /home/quantumc/public_html/quantum.com.mt/cgi-bin/: attempt to invoke directory as script, referer: https://mail.quantum.com.mt:443/cgi-bin
[Thu Jul 30 10:09:11.374036 2026] [security2:error] [pid 2661695:tid 2661695] [client 156.59.198.136:54506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUt7HF7Tkt0Xyi3WPyhwAAACA"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:11.471434 2026] [core:error] [pid 2657665:tid 2657665] [client 20.240.137.17:54723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:11.471457 2026] [core:error] [pid 2657665:tid 2657665] [client 20.240.137.17:54723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:11.699779 2026] [access_compat:error] [pid 2671526:tid 2671526] [client 196.75.51.247:65306] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:12.128425 2026] [authz_core:error] [pid 2662900:tid 2662900] [client 82.102.18.190:57990] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/includes/error_log
[Thu Jul 30 10:09:12.270906 2026] [security2:error] [pid 2657665:tid 2657665] [client 45.227.219.240:57346] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,74.0.html"] [unique_id "amsUuCuxlaRmP82WWxXkXQAAACc"]
[Thu Jul 30 10:09:12.270960 2026] [security2:error] [pid 2657665:tid 2657665] [client 45.227.219.240:57346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,74.0.html"] [unique_id "amsUuCuxlaRmP82WWxXkXQAAACc"]
[Thu Jul 30 10:09:12.271246 2026] [security2:error] [pid 2657665:tid 2657665] [client 45.227.219.240:57346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUuCuxlaRmP82WWxXkXQAAACc"]
[Thu Jul 30 10:09:12.747722 2026] [core:error] [pid 2675674:tid 2675674] [client 20.240.137.17:10090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:12.747748 2026] [core:error] [pid 2675674:tid 2675674] [client 20.240.137.17:10090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:12.805730 2026] [ssl:error] [pid 2667118:tid 2667118] (EAI 2)Name or service not known: [client 144.76.19.72:43066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:12.805754 2026] [ssl:error] [pid 2667118:tid 2667118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:12.861818 2026] [ssl:error] [pid 2677301:tid 2677301] (EAI 2)Name or service not known: [client 144.76.19.72:43072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:12.861855 2026] [ssl:error] [pid 2677301:tid 2677301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:12.920695 2026] [security2:error] [pid 2667118:tid 2667118] [client 94.154.43.188:45896] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saturnsports.com"] [uri "/.env"] [unique_id "amsUuMl9tASoPEkeUkViJwAAAAs"]
[Thu Jul 30 10:09:12.920884 2026] [security2:error] [pid 2667118:tid 2667118] [client 94.154.43.188:45896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saturnsports.com"] [uri "/.env"] [unique_id "amsUuMl9tASoPEkeUkViJwAAAAs"]
[Thu Jul 30 10:09:12.921126 2026] [security2:error] [pid 2667118:tid 2667118] [client 94.154.43.188:45896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saturnsports.com"] [uri "/.env"] [unique_id "amsUuMl9tASoPEkeUkViJwAAAAs"]
[Thu Jul 30 10:09:13.006521 2026] [security2:error] [pid 2673259:tid 2673259] [client 156.59.198.135:34804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUuVT_xpRGKQRyOXdKKwAAAAQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:14.222980 2026] [core:error] [pid 2653473:tid 2653473] [client 20.240.137.17:29858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:14.223004 2026] [core:error] [pid 2653473:tid 2653473] [client 20.240.137.17:29858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:14.490033 2026] [security2:error] [pid 2673259:tid 2673259] [client 156.59.198.136:54568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUulT_xpRGKQRyOXdKLAAAAAQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:15.289392 2026] [security2:error] [pid 2678555:tid 2678555] [client 114.119.136.176:62859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/contact/"] [unique_id "amsUu6bxlr3VoRwx8eAoHQAAAA8"], referer: https://www.the-pryors.co.uk/about/
[Thu Jul 30 10:09:15.413106 2026] [security2:error] [pid 2667117:tid 2667117] [client 41.56.235.204:7676] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,74.0.html"] [unique_id "amsUu-1u5CinWcYxsZSAHQAAAAM"]
[Thu Jul 30 10:09:15.413155 2026] [security2:error] [pid 2667117:tid 2667117] [client 41.56.235.204:7676] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,74.0.html"] [unique_id "amsUu-1u5CinWcYxsZSAHQAAAAM"]
[Thu Jul 30 10:09:15.413383 2026] [security2:error] [pid 2667117:tid 2667117] [client 41.56.235.204:7676] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUu-1u5CinWcYxsZSAHQAAAAM"]
[Thu Jul 30 10:09:15.799488 2026] [ssl:error] [pid 2667412:tid 2667412] (70014)End of file found: [client 216.73.216.199:18645] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:15.920564 2026] [ssl:error] [pid 2678052:tid 2678052] (EAI 2)Name or service not known: [client 144.76.19.72:43086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:15.920589 2026] [ssl:error] [pid 2678052:tid 2678052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:15.977905 2026] [ssl:error] [pid 2672573:tid 2672573] (EAI 2)Name or service not known: [client 144.76.19.72:43090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:15.977946 2026] [ssl:error] [pid 2672573:tid 2672573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:16.022373 2026] [security2:error] [pid 2667117:tid 2667117] [client 156.59.198.135:32510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUvO1u5CinWcYxsZSAHgAAAAM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:16.692461 2026] [core:error] [pid 2678052:tid 2678052] [client 20.240.137.17:54726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:16.692489 2026] [core:error] [pid 2678052:tid 2678052] [client 20.240.137.17:54726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:17.360499 2026] [security2:error] [pid 2667117:tid 2667117] [client 156.59.198.136:59634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUve1u5CinWcYxsZSAHwAAAAM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:17.521803 2026] [ssl:error] [pid 2676896:tid 2676896] (70014)End of file found: [client 216.73.216.199:53047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:17.593683 2026] [core:error] [pid 2678555:tid 2678555] [client 66.249.64.170:47874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:17.593710 2026] [core:error] [pid 2678555:tid 2678555] [client 66.249.64.170:47874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:18.009474 2026] [ssl:error] [pid 2672484:tid 2672484] (70014)End of file found: [client 216.73.216.199:7518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:18.615700 2026] [access_compat:error] [pid 2672571:tid 2672571] [client 196.75.51.247:49556] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:18.682366 2026] [security2:error] [pid 2672524:tid 2672524] [client 156.59.198.136:24648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUvqCcg6JbNnBL1t0bFgAAAAY"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:19.032740 2026] [ssl:error] [pid 2677301:tid 2677301] (EAI 2)Name or service not known: [client 144.76.19.72:43098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:19.032773 2026] [ssl:error] [pid 2677301:tid 2677301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:19.121924 2026] [ssl:error] [pid 2672573:tid 2672573] (EAI 2)Name or service not known: [client 144.76.19.72:43104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:19.121953 2026] [ssl:error] [pid 2672573:tid 2672573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:19.380188 2026] [security2:error] [pid 2675359:tid 2675359] [client 181.225.203.220:41062] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,74.0.html"] [unique_id "amsUvwaEcONFRZS8RXOx8QAAAA0"]
[Thu Jul 30 10:09:19.380232 2026] [security2:error] [pid 2675359:tid 2675359] [client 181.225.203.220:41062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,74.0.html"] [unique_id "amsUvwaEcONFRZS8RXOx8QAAAA0"]
[Thu Jul 30 10:09:19.380462 2026] [security2:error] [pid 2675359:tid 2675359] [client 181.225.203.220:41062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUvwaEcONFRZS8RXOx8QAAAA0"]
[Thu Jul 30 10:09:20.295214 2026] [security2:error] [pid 2671526:tid 2671526] [client 156.59.198.135:49910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUwHT6qvko5Z25Y8MFGAAAACE"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:21.582571 2026] [security2:error] [pid 2675674:tid 2675674] [client 156.59.198.135:23122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUwWpHD-7MOOr_ChWlxgAAABY"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:22.051251 2026] [lsapi:error] [pid 2663435:tid 2663435] [client 216.73.216.199:3921] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/CakePHP.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/CakePHP.php on line 8\n
[Thu Jul 30 10:09:22.181010 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:63336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:22.181037 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:22.211416 2026] [core:error] [pid 2678596:tid 2678596] [client 20.240.137.17:10107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:22.211448 2026] [core:error] [pid 2678596:tid 2678596] [client 20.240.137.17:10107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:22.235422 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:63342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:22.235453 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:23.231060 2026] [security2:error] [pid 2678596:tid 2678596] [client 156.59.198.136:38804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUw_mLvWlg9tsbHZzmpQAAABo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:23.271377 2026] [core:error] [pid 2672570:tid 2672570] (13)Permission denied: [client 216.73.216.199:23213] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfnetlink/sections/__kcrctab_gpl
[Thu Jul 30 10:09:23.588795 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:9418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:23.588818 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:9418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:23.881495 2026] [core:error] [pid 2672570:tid 2672570] (13)Permission denied: [client 216.73.216.199:23213] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS3/flags
[Thu Jul 30 10:09:24.187494 2026] [core:error] [pid 2668491:tid 2668491] [client 20.240.137.17:29859] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:24.187518 2026] [core:error] [pid 2668491:tid 2668491] [client 20.240.137.17:29859] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:24.189383 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:23213] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:24.885290 2026] [security2:error] [pid 2678473:tid 2678473] [client 156.59.198.135:17550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUxGB1EE5i5lyGC6qipAAAAAE"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:25.309468 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:63354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:25.309507 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:25.362368 2026] [ssl:error] [pid 2678596:tid 2678596] (EAI 2)Name or service not known: [client 144.76.19.72:63366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:25.362407 2026] [ssl:error] [pid 2678596:tid 2678596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:25.688670 2026] [ssl:error] [pid 2650047:tid 2650047] (70014)End of file found: [client 216.73.216.199:52921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:26.522443 2026] [security2:error] [pid 2678596:tid 2678596] [client 156.59.198.135:55936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUxvmLvWlg9tsbHZzmpgAAABo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:27.137198 2026] [access_compat:error] [pid 2678473:tid 2678473] [client 196.75.51.247:50183] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:27.796082 2026] [ssl:error] [pid 2650046:tid 2650046] (70014)End of file found: [client 216.73.216.199:63813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:28.422539 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:63382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:28.422568 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:28.478411 2026] [ssl:error] [pid 2653838:tid 2653838] (EAI 2)Name or service not known: [client 144.76.19.72:63388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:28.478435 2026] [ssl:error] [pid 2653838:tid 2653838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:28.576530 2026] [security2:error] [pid 2676896:tid 2676896] [client 156.59.198.136:55724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUyDu8WjQ7JBqU-KQolAAAACU"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:29.498650 2026] [autoindex:error] [pid 2677996:tid 2677996] (13)Permission denied: [client 216.73.216.199:35375] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/mysql/
[Thu Jul 30 10:09:29.601612 2026] [ssl:error] [pid 2677996:tid 2677996] (70014)End of file found: [client 216.73.216.199:35375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:29.786291 2026] [core:error] [pid 2671526:tid 2671526] [client 20.240.137.17:38144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:29.786311 2026] [core:error] [pid 2671526:tid 2671526] [client 20.240.137.17:38144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:29.888123 2026] [security2:error] [pid 2661695:tid 2661695] [client 156.59.198.135:36464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUybHF7Tkt0Xyi3WPyjwAAACA"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:30.334474 2026] [security2:error] [pid 2671526:tid 2671526] [client 114.119.146.111:62637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,103/request_format~html"] [unique_id "amsUynT6qvko5Z25Y8MFHQAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,17,103/request_format~html
[Thu Jul 30 10:09:30.445838 2026] [core:error] [pid 2667118:tid 2667118] [client 20.240.137.17:38207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:30.445861 2026] [core:error] [pid 2667118:tid 2667118] [client 20.240.137.17:38207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:31.222257 2026] [security2:error] [pid 2667118:tid 2667118] [client 156.59.198.136:47728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUy8l9tASoPEkeUkVikgAAAAs"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:31.530271 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:29944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:31.530298 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:31.586216 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:29960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:31.586246 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:31.610297 2026] [security2:error] [pid 2679458:tid 2679458] [client 114.119.146.111:62639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,103/request_format~html"] [unique_id "amsUy7D7f5xqyhuZQX4PpQAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,17,103/request_format~html
[Thu Jul 30 10:09:31.670261 2026] [core:error] [pid 2671526:tid 2671526] [client 20.240.137.17:38165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:31.670292 2026] [core:error] [pid 2671526:tid 2671526] [client 20.240.137.17:38165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:31.720263 2026] [ssl:error] [pid 2661695:tid 2661695] (70014)End of file found: [client 216.73.216.199:38150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:32.536188 2026] [security2:error] [pid 2678596:tid 2678596] [client 156.59.198.136:62484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUzPmLvWlg9tsbHZzmqAAAABo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:32.638779 2026] [core:error] [pid 2667118:tid 2667118] [client 20.240.137.17:56438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:32.638800 2026] [core:error] [pid 2667118:tid 2667118] [client 20.240.137.17:56438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:33.098726 2026] [ssl:error] [pid 2667412:tid 2667412] (70014)End of file found: [client 216.73.216.199:27836] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:33.392311 2026] [security2:error] [pid 2679458:tid 2679458] [client 200.142.236.27:44300] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUzbD7f5xqyhuZQX4PpgAAABA"]
[Thu Jul 30 10:09:33.392360 2026] [security2:error] [pid 2679458:tid 2679458] [client 200.142.236.27:44300] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsUzbD7f5xqyhuZQX4PpgAAABA"]
[Thu Jul 30 10:09:33.392622 2026] [security2:error] [pid 2679458:tid 2679458] [client 200.142.236.27:44300] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsUzbD7f5xqyhuZQX4PpgAAABA"]
[Thu Jul 30 10:09:33.588189 2026] [access_compat:error] [pid 2667118:tid 2667118] [client 196.75.51.247:50750] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:33.998076 2026] [security2:error] [pid 2679591:tid 2679591] [client 156.59.198.135:32662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUzUhmlkWMVlQnoR57KQAAACM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:34.119049 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 40.77.167.132:22367] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:09:34.119732 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 40.77.167.132:22367] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:09:34.288198 2026] [core:error] [pid 2667117:tid 2667117] [client 20.240.137.17:38020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:34.288222 2026] [core:error] [pid 2667117:tid 2667117] [client 20.240.137.17:38020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:34.641613 2026] [ssl:error] [pid 2679590:tid 2679590] (EAI 2)Name or service not known: [client 144.76.19.72:29970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:34.641643 2026] [ssl:error] [pid 2679590:tid 2679590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:34.696601 2026] [ssl:error] [pid 2662900:tid 2662900] (EAI 2)Name or service not known: [client 144.76.19.72:29974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:34.696627 2026] [ssl:error] [pid 2662900:tid 2662900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:34.914735 2026] [authz_core:error] [pid 2678473:tid 2678473] [client 82.102.18.190:34908] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/includes/config-validator/error_log
[Thu Jul 30 10:09:35.020045 2026] [ssl:error] [pid 2679593:tid 2679593] (70014)End of file found: [client 216.73.216.199:45766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:35.020361 2026] [authz_core:error] [pid 2677996:tid 2677996] [client 66.249.66.35:40673] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:09:35.023015 2026] [authz_core:error] [pid 2677996:tid 2677996] [client 66.249.66.35:40673] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:09:35.042206 2026] [security2:error] [pid 2672570:tid 2672570] [client 185.191.171.17:14354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1279.0.html"] [unique_id "amsUz1i_3pHPaouWvCXLgQAAAB8"]
[Thu Jul 30 10:09:35.428947 2026] [core:error] [pid 2662900:tid 2662900] [client 20.240.137.17:53896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:35.428984 2026] [core:error] [pid 2662900:tid 2662900] [client 20.240.137.17:53896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:35.498943 2026] [security2:error] [pid 2667117:tid 2667117] [client 156.59.198.136:55104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsUz-1u5CinWcYxsZSAKAAAAAM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:36.067451 2026] [core:error] [pid 2678596:tid 2678596] [client 20.240.137.17:56437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:36.067473 2026] [core:error] [pid 2678596:tid 2678596] [client 20.240.137.17:56437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:36.801599 2026] [security2:error] [pid 2675674:tid 2675674] [client 84.54.66.29:48574] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsU0GpHD-7MOOr_ChWlywAAABY"]
[Thu Jul 30 10:09:36.801650 2026] [security2:error] [pid 2675674:tid 2675674] [client 84.54.66.29:48574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsU0GpHD-7MOOr_ChWlywAAABY"]
[Thu Jul 30 10:09:36.801894 2026] [security2:error] [pid 2675674:tid 2675674] [client 84.54.66.29:48574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsU0GpHD-7MOOr_ChWlywAAABY"]
[Thu Jul 30 10:09:37.204163 2026] [security2:error] [pid 2678555:tid 2678555] [client 156.59.198.136:25004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU0abxlr3VoRwx8eAoJAAAAA8"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:37.302442 2026] [core:error] [pid 2675674:tid 2675674] [client 20.240.137.17:44715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:37.302476 2026] [core:error] [pid 2675674:tid 2675674] [client 20.240.137.17:44715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:37.335500 2026] [ssl:error] [pid 2677391:tid 2677391] (70014)End of file found: [client 216.73.216.199:55089] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:37.752121 2026] [ssl:error] [pid 2678052:tid 2678052] (EAI 2)Name or service not known: [client 144.76.19.72:29988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:37.752146 2026] [ssl:error] [pid 2678052:tid 2678052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:37.809903 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:29994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:37.809935 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:38.667366 2026] [security2:error] [pid 2675258:tid 2675258] [client 156.59.198.135:12364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU0guaUZYh9Qrcv8b4lgAAAAU"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:38.948289 2026] [ssl:error] [pid 2650047:tid 2650047] (70014)End of file found: [client 216.73.216.199:18394] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:40.009504 2026] [security2:error] [pid 2672484:tid 2672484] [client 85.208.96.208:40830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/charlene-gonzales-family"] [unique_id "amsU1PWJgM1w85aB5HxDSQAAAAI"]
[Thu Jul 30 10:09:40.244539 2026] [access_compat:error] [pid 2679458:tid 2679458] [client 196.75.51.247:51287] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:40.346519 2026] [security2:error] [pid 2677301:tid 2677301] [client 156.59.198.135:39414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU1GH_7cYz68DY6Wb6YQAAACI"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:40.758665 2026] [ssl:error] [pid 2677340:tid 2677340] (70014)End of file found: [client 216.73.216.199:40358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:40.775053 2026] [access_compat:error] [pid 2677996:tid 2677996] [client 45.158.164.139:40880] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:09:40.896497 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:27826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:40.896520 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:40.949664 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:27834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:40.949688 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:41.847641 2026] [security2:error] [pid 2653838:tid 2653838] [client 156.59.198.136:15098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU1QqZ_sP2VocwkWgeCwAAAAg"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:42.006362 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:38151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:42.006393 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:38151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:42.603401 2026] [security2:error] [pid 2673259:tid 2673259] [client 94.154.43.187:57828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tompalmer.co.uk"] [uri "/.env"] [unique_id "amsU1lT_xpRGKQRyOXdKPQAAAAQ"]
[Thu Jul 30 10:09:42.603589 2026] [security2:error] [pid 2673259:tid 2673259] [client 94.154.43.187:57828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tompalmer.co.uk"] [uri "/.env"] [unique_id "amsU1lT_xpRGKQRyOXdKPQAAAAQ"]
[Thu Jul 30 10:09:42.762479 2026] [core:error] [pid 2679589:tid 2679589] (13)Permission denied: [client 216.73.216.199:33280] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:12/eject
[Thu Jul 30 10:09:43.171256 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:33280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:43.209222 2026] [security2:error] [pid 2672570:tid 2672570] [client 156.59.198.135:51756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU11i_3pHPaouWvCXLgwAAAB8"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:44.021140 2026] [security2:error] [pid 2673259:tid 2673259] [client 94.154.43.187:57828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "tompalmer.co.uk"] [uri "/index.php"] [unique_id "amsU1lT_xpRGKQRyOXdKPQAAAAQ"]
[Thu Jul 30 10:09:44.041351 2026] [ssl:error] [pid 2653838:tid 2653838] (EAI 2)Name or service not known: [client 144.76.19.72:27842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:44.041386 2026] [ssl:error] [pid 2653838:tid 2653838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:44.097750 2026] [ssl:error] [pid 2673669:tid 2673669] (EAI 2)Name or service not known: [client 144.76.19.72:27848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:44.097794 2026] [ssl:error] [pid 2673669:tid 2673669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:44.552034 2026] [security2:error] [pid 2672573:tid 2672573] [client 156.59.198.136:62358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU2BsTXMKcE1hZXvzGNQAAAC8"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:44.680688 2026] [security2:error] [pid 2678555:tid 2678555] [client 216.73.216.199:53399] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/libselinux.conf"] [unique_id "amsU2Kbxlr3VoRwx8eAoLAAAAA8"]
[Thu Jul 30 10:09:44.680912 2026] [security2:error] [pid 2678555:tid 2678555] [client 216.73.216.199:53399] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/libselinux.conf"] [unique_id "amsU2Kbxlr3VoRwx8eAoLAAAAA8"]
[Thu Jul 30 10:09:44.681129 2026] [security2:error] [pid 2678555:tid 2678555] [client 216.73.216.199:53399] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/libselinux.conf"] [unique_id "amsU2Kbxlr3VoRwx8eAoLAAAAA8"]
[Thu Jul 30 10:09:45.885861 2026] [ssl:error] [pid 2678555:tid 2678555] (70014)End of file found: [client 216.73.216.199:53399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:45.963831 2026] [authz_core:error] [pid 2670475:tid 2670475] [client 66.249.66.33:50438] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:09:45.966480 2026] [authz_core:error] [pid 2670475:tid 2670475] [client 66.249.66.33:50438] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:09:46.059178 2026] [security2:error] [pid 2653838:tid 2653838] [client 156.59.198.136:23810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU2gqZ_sP2VocwkWgeDgAAAAg"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:47.156213 2026] [ssl:error] [pid 2672573:tid 2672573] (EAI 2)Name or service not known: [client 144.76.19.72:27862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:47.156252 2026] [ssl:error] [pid 2672573:tid 2672573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:47.213891 2026] [ssl:error] [pid 2665853:tid 2665853] (EAI 2)Name or service not known: [client 144.76.19.72:27878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:47.213918 2026] [ssl:error] [pid 2665853:tid 2665853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:47.357419 2026] [access_compat:error] [pid 2673669:tid 2673669] [client 196.75.51.247:51888] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:47.519084 2026] [security2:error] [pid 2650047:tid 2650047] [client 156.59.198.135:64928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU2zdnWhdb5n_RrTLITQAAADg"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:49.203538 2026] [security2:error] [pid 2653838:tid 2653838] [client 156.59.198.135:40536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU3QqZ_sP2VocwkWgeEAAAAAg"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:50.269044 2026] [ssl:error] [pid 2678473:tid 2678473] (EAI 2)Name or service not known: [client 144.76.19.72:48758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:50.269091 2026] [ssl:error] [pid 2678473:tid 2678473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:50.326688 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:48768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:50.326719 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:50.416500 2026] [authz_core:error] [pid 2669935:tid 2669935] [client 66.249.66.33:65004] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:09:50.419229 2026] [authz_core:error] [pid 2669935:tid 2669935] [client 66.249.66.33:65004] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:09:50.598549 2026] [security2:error] [pid 2653473:tid 2653473] [client 47.128.98.144:47874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsU3hTagygMYv94UJPdpgAAAA4"]
[Thu Jul 30 10:09:50.787740 2026] [security2:error] [pid 2677996:tid 2677996] [client 156.59.198.136:53074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU3oQ4xnrrThp_fy59swAAAAo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:51.017866 2026] [core:error] [pid 2679589:tid 2679589] [client 20.240.137.17:26200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:51.017888 2026] [core:error] [pid 2679589:tid 2679589] [client 20.240.137.17:26200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:51.316586 2026] [core:error] [pid 2677391:tid 2677391] [client 20.240.137.17:51113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:51.316624 2026] [core:error] [pid 2677391:tid 2677391] [client 20.240.137.17:51113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:51.455905 2026] [ssl:error] [pid 2667737:tid 2667737] (70014)End of file found: [client 216.73.216.199:28441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:51.844929 2026] [core:error] [pid 2679525:tid 2679525] [client 20.240.137.17:20548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:51.844952 2026] [core:error] [pid 2679525:tid 2679525] [client 20.240.137.17:20548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:51.971579 2026] [security2:error] [pid 2653838:tid 2653838] [client 185.191.171.17:33752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsU3wqZ_sP2VocwkWgeEgAAAAg"]
[Thu Jul 30 10:09:52.234364 2026] [security2:error] [pid 2679593:tid 2679593] [client 85.208.96.198:45670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/CCCM.html"] [unique_id "amsU4J1tHumfXvOoUCYZPAAAACQ"]
[Thu Jul 30 10:09:52.275048 2026] [security2:error] [pid 2679589:tid 2679589] [client 156.59.198.135:36654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU4Lri3HdMfe9EwMJjtwAAABw"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:52.354359 2026] [ssl:error] [pid 2677996:tid 2677996] (70014)End of file found: [client 216.73.216.199:23718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:53.113983 2026] [security2:error] [pid 2678555:tid 2678555] [client 103.247.50.149:1795] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsU4abxlr3VoRwx8eAoMwAAAA8"]
[Thu Jul 30 10:09:53.114055 2026] [security2:error] [pid 2678555:tid 2678555] [client 103.247.50.149:1795] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsU4abxlr3VoRwx8eAoMwAAAA8"]
[Thu Jul 30 10:09:53.114333 2026] [security2:error] [pid 2678555:tid 2678555] [client 103.247.50.149:1795] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsU4abxlr3VoRwx8eAoMwAAAA8"]
[Thu Jul 30 10:09:53.262777 2026] [ssl:error] [pid 2672484:tid 2672484] (70014)End of file found: [client 216.73.216.199:14841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:53.380512 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:48784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:53.380545 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:53.434114 2026] [ssl:error] [pid 2680487:tid 2680487] (EAI 2)Name or service not known: [client 144.76.19.72:48796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:53.434145 2026] [ssl:error] [pid 2680487:tid 2680487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:53.573199 2026] [security2:error] [pid 2653473:tid 2653473] [client 156.59.198.136:54136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU4RTagygMYv94UJPdqQAAAA4"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:53.999839 2026] [access_compat:error] [pid 2650046:tid 2650046] [client 196.75.51.247:52444] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:09:54.625777 2026] [core:error] [pid 2675258:tid 2675258] [client 66.249.66.3:60174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:54.625803 2026] [core:error] [pid 2675258:tid 2675258] [client 66.249.66.3:60174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:54.631749 2026] [core:error] [pid 2668491:tid 2668491] [client 66.249.66.3:62654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:54.631767 2026] [core:error] [pid 2668491:tid 2668491] [client 66.249.66.3:62654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:54.678887 2026] [core:error] [pid 2675359:tid 2675359] [client 20.240.137.17:42606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:54.678911 2026] [core:error] [pid 2675359:tid 2675359] [client 20.240.137.17:42606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:55.098170 2026] [security2:error] [pid 2663435:tid 2663435] [client 156.59.198.135:29482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU4yNHRWAt2oEI0OxCRgAAADQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:55.758618 2026] [core:error] [pid 2675866:tid 2675866] [client 20.240.137.17:60778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:55.758646 2026] [core:error] [pid 2675866:tid 2675866] [client 20.240.137.17:60778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:56.491507 2026] [ssl:error] [pid 2675866:tid 2675866] (EAI 2)Name or service not known: [client 144.76.19.72:48802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:56.491544 2026] [ssl:error] [pid 2675866:tid 2675866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:56.547570 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:48810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:56.547608 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:56.653317 2026] [security2:error] [pid 2677389:tid 2677389] [client 156.59.198.136:46656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU5GO3BhTMdhaJtcFvsQAAADM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:56.798321 2026] [core:error] [pid 2673669:tid 2673669] [client 66.249.64.170:58886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:56.798343 2026] [core:error] [pid 2673669:tid 2673669] [client 66.249.64.170:58886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:57.175800 2026] [ssl:error] [pid 2679458:tid 2679458] (70014)End of file found: [client 216.73.216.199:33806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:57.586580 2026] [core:error] [pid 2673669:tid 2673669] [client 20.240.137.17:9882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:57.586616 2026] [core:error] [pid 2673669:tid 2673669] [client 20.240.137.17:9882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:57.675864 2026] [ssl:error] [pid 2650047:tid 2650047] (70014)End of file found: [client 216.73.216.199:21313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:58.119523 2026] [security2:error] [pid 2675866:tid 2675866] [client 156.59.198.136:16600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU5g-tA9mxsDqG96ONaQAAABc"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:58.182765 2026] [authz_core:error] [pid 2665239:tid 2665239] [client 66.249.66.33:62029] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:09:58.185416 2026] [authz_core:error] [pid 2665239:tid 2665239] [client 66.249.66.33:62029] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:09:58.475915 2026] [core:error] [pid 2673669:tid 2673669] [client 20.240.137.17:26230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:58.475943 2026] [core:error] [pid 2673669:tid 2673669] [client 20.240.137.17:26230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:58.579633 2026] [ssl:error] [pid 2672524:tid 2672524] (70014)End of file found: [client 216.73.216.199:39101] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:09:59.618064 2026] [ssl:error] [pid 2673669:tid 2673669] (EAI 2)Name or service not known: [client 144.76.19.72:28352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:59.618149 2026] [ssl:error] [pid 2673669:tid 2673669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:59.660194 2026] [security2:error] [pid 2672570:tid 2672570] [client 156.59.198.135:60690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU51i_3pHPaouWvCXLjAAAAB8"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:09:59.671157 2026] [ssl:error] [pid 2678555:tid 2678555] (EAI 2)Name or service not known: [client 144.76.19.72:28364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:09:59.671186 2026] [ssl:error] [pid 2678555:tid 2678555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:09:59.941653 2026] [core:error] [pid 2669935:tid 2669935] [client 20.240.137.17:41470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:09:59.941698 2026] [core:error] [pid 2669935:tid 2669935] [client 20.240.137.17:41470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:00.378257 2026] [access_compat:error] [pid 2671526:tid 2671526] [client 196.75.51.247:52953] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:01.249385 2026] [security2:error] [pid 2669935:tid 2669935] [client 156.59.198.136:31140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU6Rkw3CyGYN1Iw4DRpgAAAC4"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:01.742020 2026] [core:error] [pid 2675674:tid 2675674] [client 66.249.64.172:49719] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:01.742063 2026] [core:error] [pid 2675674:tid 2675674] [client 66.249.64.172:49719] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:02.728488 2026] [ssl:error] [pid 2673669:tid 2673669] (EAI 2)Name or service not known: [client 144.76.19.72:28378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:02.728525 2026] [ssl:error] [pid 2673669:tid 2673669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:02.783166 2026] [ssl:error] [pid 2669935:tid 2669935] (EAI 2)Name or service not known: [client 144.76.19.72:28392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:02.783210 2026] [ssl:error] [pid 2669935:tid 2669935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:02.807089 2026] [security2:error] [pid 2663435:tid 2663435] [client 156.59.198.135:60958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU6iNHRWAt2oEI0OxCSwAAADQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:03.266959 2026] [ssl:error] [pid 2672573:tid 2672573] (70014)End of file found: [client 216.73.216.199:60174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:03.799756 2026] [core:error] [pid 2669935:tid 2669935] [client 66.249.66.167:43124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:03.799784 2026] [core:error] [pid 2669935:tid 2669935] [client 66.249.66.167:43124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:04.167862 2026] [ssl:error] [pid 2680487:tid 2680487] (70014)End of file found: [client 216.73.216.199:25434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:04.371183 2026] [security2:error] [pid 2663435:tid 2663435] [client 156.59.198.136:11948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU7CNHRWAt2oEI0OxCTAAAADQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:04.405716 2026] [ssl:error] [pid 2650047:tid 2650047] (70014)End of file found: [client 216.73.216.199:56998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:05.839770 2026] [ssl:error] [pid 2675674:tid 2675674] (EAI 2)Name or service not known: [client 144.76.19.72:28408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:05.839801 2026] [ssl:error] [pid 2675674:tid 2675674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:05.881626 2026] [security2:error] [pid 2669935:tid 2669935] [client 156.59.198.136:41924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU7Rkw3CyGYN1Iw4DRqQAAAC4"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:05.894011 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:28416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:05.894044 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:06.256303 2026] [core:error] [pid 2663435:tid 2663435] [client 20.240.137.17:7682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:06.256329 2026] [core:error] [pid 2663435:tid 2663435] [client 20.240.137.17:7682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:06.738998 2026] [access_compat:error] [pid 2679589:tid 2679589] [client 196.75.51.247:53463] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:07.369183 2026] [security2:error] [pid 2667737:tid 2667737] [client 156.59.198.135:32226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU73O0wlDk-jhCNpVyXwAAAAc"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:08.811046 2026] [ssl:error] [pid 2679593:tid 2679593] (70014)End of file found: [client 216.73.216.199:10564] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:08.844274 2026] [security2:error] [pid 2679458:tid 2679458] [client 156.59.198.136:40280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU8LD7f5xqyhuZQX4PrwAAABA"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:08.852475 2026] [security2:error] [pid 2678052:tid 2678052] [client 43.157.62.101:48610] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "asian-kitchen.co.uk"] [uri "/"] [unique_id "amsU8ONGcBZ_SIDbMb6NZwAAABI"]
[Thu Jul 30 10:10:08.951515 2026] [ssl:error] [pid 2657665:tid 2657665] (EAI 2)Name or service not known: [client 144.76.19.72:28426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:08.951546 2026] [ssl:error] [pid 2657665:tid 2657665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:09.004498 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:28442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:09.004527 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:09.707626 2026] [ssl:error] [pid 2672573:tid 2672573] (70014)End of file found: [client 216.73.216.199:22153] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:10.334927 2026] [security2:error] [pid 2677996:tid 2677996] [client 156.59.198.135:29668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU8oQ4xnrrThp_fy59vwAAAAo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:10.836335 2026] [core:error] [pid 2677339:tid 2677339] [client 66.249.64.171:55098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:10.836361 2026] [core:error] [pid 2677339:tid 2677339] [client 66.249.64.171:55098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:11.191191 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:60750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:11.191217 2026] [core:error] [pid 2673259:tid 2673259] [client 20.240.137.17:60750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:11.327079 2026] [ssl:error] [pid 2681033:tid 2681033] (70014)End of file found: [client 216.73.216.199:38885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:11.627390 2026] [security2:error] [pid 2679458:tid 2679458] [client 156.59.198.136:38208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU87D7f5xqyhuZQX4PsAAAABA"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:12.059135 2026] [ssl:error] [pid 2677996:tid 2677996] (EAI 2)Name or service not known: [client 144.76.19.72:60416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:12.059188 2026] [ssl:error] [pid 2677996:tid 2677996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:12.070736 2026] [security2:error] [pid 2673259:tid 2673259] [client 85.208.96.204:59612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3859.0/prev_next,next.html"] [unique_id "amsU9FT_xpRGKQRyOXdKRAAAAAQ"]
[Thu Jul 30 10:10:12.115418 2026] [ssl:error] [pid 2678052:tid 2678052] (EAI 2)Name or service not known: [client 144.76.19.72:60430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:12.115448 2026] [ssl:error] [pid 2678052:tid 2678052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:13.201798 2026] [security2:error] [pid 2667412:tid 2667412] [client 156.59.198.135:21956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU9ZrT00meCrKyO6v8eQAAABQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:13.279426 2026] [access_compat:error] [pid 2665203:tid 2665203] [client 196.75.51.247:53942] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:14.235713 2026] [ssl:error] [pid 2678555:tid 2678555] (70014)End of file found: [client 216.73.216.199:1476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:14.482578 2026] [security2:error] [pid 2673259:tid 2673259] [client 156.59.198.136:24966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU9lT_xpRGKQRyOXdKRQAAAAQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:14.581759 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:9377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:14.581781 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:9377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:15.171958 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:60442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:15.171992 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:15.228290 2026] [ssl:error] [pid 2680960:tid 2680960] (EAI 2)Name or service not known: [client 144.76.19.72:60444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:15.228322 2026] [ssl:error] [pid 2680960:tid 2680960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:15.991445 2026] [security2:error] [pid 2671526:tid 2671526] [client 156.59.198.135:51692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU93T6qvko5Z25Y8MFMQAAACE"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:17.559188 2026] [security2:error] [pid 2672524:tid 2672524] [client 156.59.198.136:10960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU-aCcg6JbNnBL1t0bKwAAAAY"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:18.286646 2026] [ssl:error] [pid 2673669:tid 2673669] (EAI 2)Name or service not known: [client 144.76.19.72:60448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:18.286678 2026] [ssl:error] [pid 2673669:tid 2673669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:18.344285 2026] [ssl:error] [pid 2667117:tid 2667117] (EAI 2)Name or service not known: [client 144.76.19.72:60462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:18.344318 2026] [ssl:error] [pid 2667117:tid 2667117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:19.390584 2026] [security2:error] [pid 2665239:tid 2665239] [client 156.59.198.136:59266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU-6yQYjl2V8Ut2vtGyQAAAB0"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:19.751407 2026] [access_compat:error] [pid 2677996:tid 2677996] [client 196.75.51.247:54367] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:20.514818 2026] [security2:error] [pid 2672524:tid 2672524] [client 114.119.141.139:35417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/robots.txt"] [unique_id "amsU_KCcg6JbNnBL1t0bLAAAAAY"], referer: https://www.jonathanmeyerart.com/robots.txt
[Thu Jul 30 10:10:20.893054 2026] [security2:error] [pid 2663435:tid 2663435] [client 156.59.198.135:49148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU_CNHRWAt2oEI0OxCUwAAADQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:21.400423 2026] [ssl:error] [pid 2665239:tid 2665239] (EAI 2)Name or service not known: [client 144.76.19.72:33820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:21.400453 2026] [ssl:error] [pid 2665239:tid 2665239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:21.456322 2026] [ssl:error] [pid 2673669:tid 2673669] (EAI 2)Name or service not known: [client 144.76.19.72:33828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:21.456353 2026] [ssl:error] [pid 2673669:tid 2673669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:22.388930 2026] [security2:error] [pid 2665203:tid 2665203] [client 156.59.198.135:19774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU_lON0OXDFqPpsqjXaQAAABM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:22.677367 2026] [ssl:error] [pid 2679593:tid 2679593] (70014)End of file found: [client 216.73.216.199:15625] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:22.851310 2026] [core:error] [pid 2653838:tid 2653838] [client 20.240.137.17:60740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:22.851338 2026] [core:error] [pid 2653838:tid 2653838] [client 20.240.137.17:60740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:22.979193 2026] [ssl:error] [pid 2680994:tid 2680994] (70014)End of file found: [client 216.73.216.199:37745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:23.479929 2026] [ssl:error] [pid 2663435:tid 2663435] (70014)End of file found: [client 216.73.216.199:59968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:23.875794 2026] [security2:error] [pid 2679458:tid 2679458] [client 156.59.198.135:49948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsU_7D7f5xqyhuZQX4PswAAABA"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:23.963867 2026] [core:error] [pid 2650046:tid 2650046] [client 66.249.66.39:35875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:23.963905 2026] [core:error] [pid 2650046:tid 2650046] [client 66.249.66.39:35875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:24.007656 2026] [core:error] [pid 2665203:tid 2665203] [client 20.240.137.17:7730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:24.007689 2026] [core:error] [pid 2665203:tid 2665203] [client 20.240.137.17:7730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:24.390235 2026] [core:error] [pid 2667117:tid 2667117] [client 66.249.64.170:36133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:24.390258 2026] [core:error] [pid 2667117:tid 2667117] [client 66.249.64.170:36133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:24.513097 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:33838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:24.513124 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:24.564454 2026] [ssl:error] [pid 2650046:tid 2650046] (EAI 2)Name or service not known: [client 144.76.19.72:33842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:24.564493 2026] [ssl:error] [pid 2650046:tid 2650046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:25.153385 2026] [security2:error] [pid 2667117:tid 2667117] [client 156.59.198.135:21770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVAe1u5CinWcYxsZSAcAAAAAM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:25.536487 2026] [core:error] [pid 2681657:tid 2681657] [client 20.240.137.17:7727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:25.536514 2026] [core:error] [pid 2681657:tid 2681657] [client 20.240.137.17:7727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:25.686908 2026] [security2:error] [pid 2665239:tid 2665239] [client 85.208.96.199:35506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9401.0/prev_next,prev.html"] [unique_id "amsVAayQYjl2V8Ut2vtGzQAAAB0"]
[Thu Jul 30 10:10:26.294602 2026] [access_compat:error] [pid 2665239:tid 2665239] [client 196.75.51.247:54904] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:26.469132 2026] [security2:error] [pid 2681693:tid 2681693] [client 156.59.198.136:14914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVAt9CSChfhBA8o4k5iwAAAA4"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:27.375812 2026] [core:error] [pid 2681036:tid 2681036] [client 20.240.137.17:42578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:27.375842 2026] [core:error] [pid 2681036:tid 2681036] [client 20.240.137.17:42578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:27.618169 2026] [ssl:error] [pid 2672484:tid 2672484] (EAI 2)Name or service not known: [client 144.76.19.72:33854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:27.618198 2026] [ssl:error] [pid 2672484:tid 2672484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:27.645377 2026] [core:error] [pid 2680995:tid 2680995] [client 20.240.137.17:9350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:27.645399 2026] [core:error] [pid 2680995:tid 2680995] [client 20.240.137.17:9350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:27.672904 2026] [ssl:error] [pid 2681693:tid 2681693] (EAI 2)Name or service not known: [client 144.76.19.72:33866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:27.672931 2026] [ssl:error] [pid 2681693:tid 2681693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:27.985870 2026] [ssl:error] [pid 2681739:tid 2681739] (70014)End of file found: [client 216.73.216.199:37787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:28.173526 2026] [security2:error] [pid 2681036:tid 2681036] [client 156.59.198.135:54210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVBPqmSwMCBVwNj7zwPQAAABs"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:28.346172 2026] [core:error] [pid 2681738:tid 2681738] [client 20.240.137.17:60753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:28.346207 2026] [core:error] [pid 2681738:tid 2681738] [client 20.240.137.17:60753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:29.010675 2026] [ssl:error] [pid 2680995:tid 2680995] (70014)End of file found: [client 216.73.216.199:57459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:29.756052 2026] [security2:error] [pid 2663435:tid 2663435] [client 156.59.198.136:63604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVBSNHRWAt2oEI0OxCVQAAADQ"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:30.213698 2026] [ssl:error] [pid 2680487:tid 2680487] (70014)End of file found: [client 216.73.216.199:42765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:30.437273 2026] [security2:error] [pid 2681740:tid 2681740] [client 114.119.159.92:26489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/products/iprint/"] [unique_id "amsVBqzDK5LjZBck3FbQ3QAAACA"], referer: http://codeworks.co.uk/products/
[Thu Jul 30 10:10:30.747976 2026] [ssl:error] [pid 2680994:tid 2680994] (EAI 2)Name or service not known: [client 144.76.19.72:37598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:30.748023 2026] [ssl:error] [pid 2680994:tid 2680994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:30.805266 2026] [ssl:error] [pid 2672573:tid 2672573] (EAI 2)Name or service not known: [client 144.76.19.72:37600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:30.805294 2026] [ssl:error] [pid 2672573:tid 2672573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:31.429306 2026] [security2:error] [pid 2677339:tid 2677339] [client 156.59.198.135:64478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVBwT4KPzhAYOgILO7LwAAACY"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:31.997177 2026] [security2:error] [pid 2681036:tid 2681036] [client 43.228.157.102:56840] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.git/config"] [unique_id "amsVB_qmSwMCBVwNj7zwQAAAABs"]
[Thu Jul 30 10:10:31.997366 2026] [security2:error] [pid 2681036:tid 2681036] [client 43.228.157.102:56840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.git/config"] [unique_id "amsVB_qmSwMCBVwNj7zwQAAAABs"]
[Thu Jul 30 10:10:31.997616 2026] [security2:error] [pid 2681036:tid 2681036] [client 43.228.157.102:56840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.git/config"] [unique_id "amsVB_qmSwMCBVwNj7zwQAAAABs"]
[Thu Jul 30 10:10:32.540390 2026] [access_compat:error] [pid 2665203:tid 2665203] [client 196.75.51.247:55362] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:32.728767 2026] [core:error] [pid 2681740:tid 2681740] [client 20.240.137.17:7698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:32.728793 2026] [core:error] [pid 2681740:tid 2681740] [client 20.240.137.17:7698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:32.884093 2026] [lsapi:warn] [pid 2675674:tid 2675674] [client 89.197.16.98:34135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:10:32.884132 2026] [lsapi:warn] [pid 2675674:tid 2675674] [client 89.197.16.98:34135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:10:32.961420 2026] [security2:error] [pid 2681035:tid 2681035] [client 156.59.198.136:16384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVCBuPZG-LF6IlWvJVJgAAABo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:33.001364 2026] [security2:error] [pid 2681657:tid 2681657] [client 186.69.235.231:39338] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVCOGGTshsuv_syGdqbgAAAAE"]
[Thu Jul 30 10:10:33.001429 2026] [security2:error] [pid 2681657:tid 2681657] [client 186.69.235.231:39338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVCOGGTshsuv_syGdqbgAAAAE"]
[Thu Jul 30 10:10:33.001704 2026] [security2:error] [pid 2681657:tid 2681657] [client 186.69.235.231:39338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVCOGGTshsuv_syGdqbgAAAAE"]
[Thu Jul 30 10:10:33.429650 2026] [ssl:error] [pid 2681737:tid 2681737] (70014)End of file found: [client 216.73.216.199:33170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:33.859807 2026] [ssl:error] [pid 2678555:tid 2678555] (EAI 2)Name or service not known: [client 144.76.19.72:37608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:33.859837 2026] [ssl:error] [pid 2678555:tid 2678555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:33.914137 2026] [ssl:error] [pid 2677996:tid 2677996] (EAI 2)Name or service not known: [client 144.76.19.72:37616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:33.914161 2026] [ssl:error] [pid 2677996:tid 2677996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:34.649051 2026] [security2:error] [pid 2681035:tid 2681035] [client 156.59.198.136:55288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVChuPZG-LF6IlWvJVJwAAABo"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:35.448617 2026] [core:error] [pid 2681740:tid 2681740] [client 20.240.137.17:41455] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:35.448645 2026] [core:error] [pid 2681740:tid 2681740] [client 20.240.137.17:41455] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:35.939700 2026] [security2:error] [pid 2680995:tid 2680995] [client 156.59.198.136:27522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVC7hfLcJBuUAzctFx-QAAAA0"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:36.241451 2026] [core:error] [pid 2665239:tid 2665239] (13)Permission denied: [client 216.73.216.199:46641] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/sbin/csf
[Thu Jul 30 10:10:36.602537 2026] [security2:error] [pid 2678555:tid 2678555] [client 150.5.130.211:16299] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVDKbxlr3VoRwx8eAoQAAAAA8"]
[Thu Jul 30 10:10:36.602590 2026] [security2:error] [pid 2678555:tid 2678555] [client 150.5.130.211:16299] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVDKbxlr3VoRwx8eAoQAAAAA8"]
[Thu Jul 30 10:10:36.602872 2026] [security2:error] [pid 2678555:tid 2678555] [client 150.5.130.211:16299] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVDKbxlr3VoRwx8eAoQAAAAA8"]
[Thu Jul 30 10:10:36.605352 2026] [core:error] [pid 2681740:tid 2681740] [client 20.240.137.17:51096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:36.605372 2026] [core:error] [pid 2681740:tid 2681740] [client 20.240.137.17:51096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:36.969420 2026] [ssl:error] [pid 2682084:tid 2682084] (EAI 2)Name or service not known: [client 144.76.19.72:37620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:36.969467 2026] [ssl:error] [pid 2682084:tid 2682084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:37.023270 2026] [ssl:error] [pid 2672573:tid 2672573] (EAI 2)Name or service not known: [client 144.76.19.72:37636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:37.023303 2026] [ssl:error] [pid 2672573:tid 2672573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:37.239606 2026] [security2:error] [pid 2667117:tid 2667117] [client 156.59.198.136:44164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/SW_SAM_datasheet.pdf"] [unique_id "amsVDe1u5CinWcYxsZSAdgAAAAM"], referer: https://www.prosperon.co.uk/assets/brochures/solarwinds/SW_SAM_datasheet.pdf
[Thu Jul 30 10:10:37.446186 2026] [ssl:error] [pid 2665239:tid 2665239] (70014)End of file found: [client 216.73.216.199:46641] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:39.290123 2026] [core:error] [pid 2682084:tid 2682084] [client 20.240.137.17:42612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:39.290154 2026] [core:error] [pid 2682084:tid 2682084] [client 20.240.137.17:42612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:39.854300 2026] [core:error] [pid 2672573:tid 2672573] (13)Permission denied: [client 216.73.216.199:26195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:16/eject
[Thu Jul 30 10:10:40.103094 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:58588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:40.103124 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:40.155340 2026] [core:error] [pid 2672573:tid 2672573] (13)Permission denied: [client 216.73.216.199:26195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:18/eject
[Thu Jul 30 10:10:40.196762 2026] [access_compat:error] [pid 2680487:tid 2680487] [client 196.75.51.247:55986] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:40.235965 2026] [ssl:error] [pid 2667737:tid 2667737] (EAI 2)Name or service not known: [client 144.76.19.72:58604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:40.235996 2026] [ssl:error] [pid 2667737:tid 2667737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:40.456632 2026] [ssl:error] [pid 2672573:tid 2672573] (70014)End of file found: [client 216.73.216.199:26195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:40.758589 2026] [ssl:error] [pid 2667117:tid 2667117] (70014)End of file found: [client 216.73.216.199:14969] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:41.237515 2026] [security2:error] [pid 2681036:tid 2681036] [client 185.191.171.14:18844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/queen-creek-unified-school-district-superintendent"] [unique_id "amsVEfqmSwMCBVwNj7zwQwAAABs"]
[Thu Jul 30 10:10:42.864728 2026] [ssl:error] [pid 2681740:tid 2681740] (70014)End of file found: [client 216.73.216.199:15290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:43.291356 2026] [ssl:error] [pid 2679591:tid 2679591] (EAI 2)Name or service not known: [client 144.76.19.72:58616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:43.291400 2026] [ssl:error] [pid 2679591:tid 2679591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:43.343527 2026] [ssl:error] [pid 2665239:tid 2665239] (EAI 2)Name or service not known: [client 144.76.19.72:58626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:43.343564 2026] [ssl:error] [pid 2665239:tid 2665239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:44.554192 2026] [security2:error] [pid 2667412:tid 2667412] [client 85.208.96.210:28168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1471.0.html"] [unique_id "amsVFJrT00meCrKyO6v8hQAAABQ"]
[Thu Jul 30 10:10:44.854051 2026] [core:error] [pid 2682524:tid 2682524] [client 20.240.137.17:9862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:44.854115 2026] [core:error] [pid 2682524:tid 2682524] [client 20.240.137.17:9862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:46.273659 2026] [access_compat:error] [pid 2675674:tid 2675674] [client 196.75.51.247:56442] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:46.398783 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:58636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:46.398814 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:46.454643 2026] [ssl:error] [pid 2679593:tid 2679593] (EAI 2)Name or service not known: [client 144.76.19.72:58650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:46.454675 2026] [ssl:error] [pid 2679593:tid 2679593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:46.514800 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:65066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:46.867798 2026] [access_compat:error] [pid 2653838:tid 2653838] [client 45.158.164.139:34992] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:10:47.402606 2026] [security2:error] [pid 2663435:tid 2663435] [client 47.128.125.132:48296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/tag/blog/"] [unique_id "amsVFyNHRWAt2oEI0OxCiwAAADQ"]
[Thu Jul 30 10:10:47.422281 2026] [core:error] [pid 2682523:tid 2682523] (13)Permission denied: [client 216.73.216.199:23051] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma/store_user
[Thu Jul 30 10:10:48.838317 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:9356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:48.838346 2026] [core:error] [pid 2672524:tid 2672524] [client 20.240.137.17:9356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:10:49.057936 2026] [security2:error] [pid 2681694:tid 2681694] [client 43.157.175.122:54860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amsVGaBvHcn2WqscYQT2qwAAABE"]
[Thu Jul 30 10:10:49.228539 2026] [core:error] [pid 2682523:tid 2682523] (13)Permission denied: [client 216.73.216.199:23051] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/subsystem/drivers_probe
[Thu Jul 30 10:10:49.511981 2026] [ssl:error] [pid 2672573:tid 2672573] (EAI 2)Name or service not known: [client 144.76.19.72:58654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:49.512012 2026] [ssl:error] [pid 2672573:tid 2672573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:49.590553 2026] [ssl:error] [pid 2680487:tid 2680487] (EAI 2)Name or service not known: [client 144.76.19.72:19296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:49.590583 2026] [ssl:error] [pid 2680487:tid 2680487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:50.088650 2026] [authz_core:error] [pid 2681815:tid 2681815] [client 66.249.66.33:45413] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:10:50.091492 2026] [authz_core:error] [pid 2681815:tid 2681815] [client 66.249.66.33:45413] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:10:50.132608 2026] [ssl:error] [pid 2682523:tid 2682523] (70014)End of file found: [client 216.73.216.199:23051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:50.190772 2026] [authz_core:error] [pid 2681694:tid 2681694] [client 66.249.66.35:42629] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:10:50.193407 2026] [authz_core:error] [pid 2681694:tid 2681694] [client 66.249.66.35:42629] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:10:50.737450 2026] [security2:error] [pid 2677339:tid 2677339] [client 43.157.175.122:44334] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amsVGgT4KPzhAYOgILO7NgAAACY"], referer: http://www.mwdesign.me.uk
[Thu Jul 30 10:10:51.043237 2026] [ssl:error] [pid 2650046:tid 2650046] (70014)End of file found: [client 216.73.216.199:9964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:51.830678 2026] [core:error] [pid 2679525:tid 2679525] (13)Permission denied: [client 216.73.216.199:20487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 10:10:51.941864 2026] [core:error] [pid 2679525:tid 2679525] (13)Permission denied: [client 216.73.216.199:20487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_ili/trace
[Thu Jul 30 10:10:52.544250 2026] [core:error] [pid 2679525:tid 2679525] (13)Permission denied: [client 216.73.216.199:20487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_conntrack/sections/__ksymtab_gpl
[Thu Jul 30 10:10:52.687543 2026] [ssl:error] [pid 2681738:tid 2681738] (EAI 2)Name or service not known: [client 144.76.19.72:19300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:52.687583 2026] [ssl:error] [pid 2681738:tid 2681738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:52.744090 2026] [ssl:error] [pid 2670475:tid 2670475] (EAI 2)Name or service not known: [client 144.76.19.72:19316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:52.744117 2026] [ssl:error] [pid 2670475:tid 2670475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:52.788792 2026] [security2:error] [pid 2667117:tid 2667117] [client 114.119.142.20:55071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~19,30,104/request_format~html"] [unique_id "amsVHO1u5CinWcYxsZSAfAAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~19,30/request_format~html
[Thu Jul 30 10:10:52.825926 2026] [access_compat:error] [pid 2680995:tid 2680995] [client 196.75.51.247:56915] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:53.688585 2026] [security2:error] [pid 2672524:tid 2672524] [client 150.5.130.211:29461] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVHaCcg6JbNnBL1t0bOAAAAAY"]
[Thu Jul 30 10:10:53.688647 2026] [security2:error] [pid 2672524:tid 2672524] [client 150.5.130.211:29461] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVHaCcg6JbNnBL1t0bOAAAAAY"]
[Thu Jul 30 10:10:53.688927 2026] [security2:error] [pid 2672524:tid 2672524] [client 150.5.130.211:29461] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVHaCcg6JbNnBL1t0bOAAAAAY"]
[Thu Jul 30 10:10:54.012107 2026] [security2:error] [pid 2681036:tid 2681036] [client 114.119.142.20:55073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~19,30,104/request_format~html"] [unique_id "amsVHvqmSwMCBVwNj7zwRgAAABs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~19,30/request_format~html
[Thu Jul 30 10:10:54.952096 2026] [ssl:error] [pid 2679525:tid 2679525] (70014)End of file found: [client 216.73.216.199:20487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:55.455586 2026] [autoindex:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:19666] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/davidact/
[Thu Jul 30 10:10:55.559437 2026] [security2:error] [pid 2675674:tid 2675674] [client 216.73.216.199:19666] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/network-throughput/tuned.conf"] [unique_id "amsVH2pHD-7MOOr_ChWl5QAAABY"]
[Thu Jul 30 10:10:55.559730 2026] [security2:error] [pid 2675674:tid 2675674] [client 216.73.216.199:19666] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/network-throughput/tuned.conf"] [unique_id "amsVH2pHD-7MOOr_ChWl5QAAABY"]
[Thu Jul 30 10:10:55.559943 2026] [security2:error] [pid 2675674:tid 2675674] [client 216.73.216.199:19666] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/network-throughput/tuned.conf"] [unique_id "amsVH2pHD-7MOOr_ChWl5QAAABY"]
[Thu Jul 30 10:10:55.820694 2026] [ssl:error] [pid 2682084:tid 2682084] (EAI 2)Name or service not known: [client 144.76.19.72:19326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:55.820723 2026] [ssl:error] [pid 2682084:tid 2682084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:55.878082 2026] [ssl:error] [pid 2682316:tid 2682316] (EAI 2)Name or service not known: [client 144.76.19.72:19336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:55.878113 2026] [ssl:error] [pid 2682316:tid 2682316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:56.765949 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:19666] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/filp/store_user
[Thu Jul 30 10:10:57.367144 2026] [ssl:error] [pid 2675674:tid 2675674] (70014)End of file found: [client 216.73.216.199:19666] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:57.863025 2026] [ssl:error] [pid 2680487:tid 2680487] (70014)End of file found: [client 216.73.216.199:46469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:10:58.704016 2026] [access_compat:error] [pid 2668448:tid 2668448] [client 196.75.51.247:57294] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:10:58.950185 2026] [ssl:error] [pid 2677339:tid 2677339] (EAI 2)Name or service not known: [client 144.76.19.72:19354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:58.950235 2026] [ssl:error] [pid 2677339:tid 2677339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:10:59.002496 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:19358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:10:59.002526 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:01.286324 2026] [ssl:error] [pid 2665203:tid 2665203] (70014)End of file found: [client 216.73.216.199:49511] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:02.061419 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:59050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:02.061445 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:02.116504 2026] [ssl:error] [pid 2679525:tid 2679525] (EAI 2)Name or service not known: [client 144.76.19.72:59062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:02.116543 2026] [ssl:error] [pid 2679525:tid 2679525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:02.117541 2026] [cgi:error] [pid 2650047:tid 2650047] [client 20.151.254.105:9297] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:11:04.191437 2026] [ssl:error] [pid 2678555:tid 2678555] (70014)End of file found: [client 216.73.216.199:45607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:04.593818 2026] [core:error] [pid 2672570:tid 2672570] (13)Permission denied: [client 216.73.216.199:36524] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-224/ctor
[Thu Jul 30 10:11:04.744138 2026] [access_compat:error] [pid 2670475:tid 2670475] [client 196.75.51.247:57733] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:05.172290 2026] [ssl:error] [pid 2682084:tid 2682084] (EAI 2)Name or service not known: [client 144.76.19.72:59068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:05.172325 2026] [ssl:error] [pid 2682084:tid 2682084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:05.228134 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:59070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:05.228169 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:05.372228 2026] [access_compat:error] [pid 2682457:tid 2682457] [client 2.189.5.162:50832] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:11:05.497818 2026] [core:error] [pid 2672570:tid 2672570] (13)Permission denied: [client 216.73.216.199:36524] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tw_sock_TCPv6/cpu_slabs
[Thu Jul 30 10:11:06.099652 2026] [core:error] [pid 2672570:tid 2672570] (13)Permission denied: [client 216.73.216.199:36524] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/numa_policy/min_partial
[Thu Jul 30 10:11:06.400794 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:36524] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:07.308606 2026] [core:error] [pid 2681738:tid 2681738] (13)Permission denied: [client 216.73.216.199:64857] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/db/nscd/hosts
[Thu Jul 30 10:11:07.451580 2026] [authz_core:error] [pid 2682316:tid 2682316] [client 66.249.66.35:54712] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:11:07.454319 2026] [authz_core:error] [pid 2682316:tid 2682316] [client 66.249.66.35:54712] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:11:08.281601 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:59080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:08.281639 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:08.333127 2026] [ssl:error] [pid 2665203:tid 2665203] (EAI 2)Name or service not known: [client 144.76.19.72:59092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:08.333161 2026] [ssl:error] [pid 2665203:tid 2665203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:10.560932 2026] [access_compat:error] [pid 2679589:tid 2679589] [client 196.75.51.247:58172] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:11.389147 2026] [ssl:error] [pid 2665203:tid 2665203] (EAI 2)Name or service not known: [client 144.76.19.72:37384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:11.389189 2026] [ssl:error] [pid 2665203:tid 2665203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:11.441939 2026] [ssl:error] [pid 2683802:tid 2683802] (EAI 2)Name or service not known: [client 144.76.19.72:37398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:11.441983 2026] [ssl:error] [pid 2683802:tid 2683802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:12.708106 2026] [security2:error] [pid 2681036:tid 2681036] [client 49.36.97.35:56213] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVMPqmSwMCBVwNj7zwTgAAABs"]
[Thu Jul 30 10:11:12.708157 2026] [security2:error] [pid 2681036:tid 2681036] [client 49.36.97.35:56213] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVMPqmSwMCBVwNj7zwTgAAABs"]
[Thu Jul 30 10:11:12.708433 2026] [security2:error] [pid 2681036:tid 2681036] [client 49.36.97.35:56213] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVMPqmSwMCBVwNj7zwTgAAABs"]
[Thu Jul 30 10:11:13.126129 2026] [security2:error] [pid 2670475:tid 2670475] [client 43.135.145.73:59122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sewyork.co.uk"] [uri "/"] [unique_id "amsVMbUYjHl1h5v7nmSbpwAAAAA"]
[Thu Jul 30 10:11:13.977749 2026] [ssl:error] [pid 2681738:tid 2681738] (70014)End of file found: [client 216.73.216.199:64857] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:14.503266 2026] [ssl:error] [pid 2675674:tid 2675674] (EAI 2)Name or service not known: [client 144.76.19.72:37400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:14.503299 2026] [ssl:error] [pid 2675674:tid 2675674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:14.556190 2026] [ssl:error] [pid 2677339:tid 2677339] (EAI 2)Name or service not known: [client 144.76.19.72:37414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:14.556219 2026] [ssl:error] [pid 2677339:tid 2677339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:15.192914 2026] [ssl:error] [pid 2682988:tid 2682988] (70014)End of file found: [client 216.73.216.199:43297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:15.554645 2026] [authz_core:error] [pid 2663435:tid 2663435] [client 66.249.66.34:55604] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:11:15.557309 2026] [authz_core:error] [pid 2663435:tid 2663435] [client 66.249.66.34:55604] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:11:15.706895 2026] [ssl:error] [pid 2682084:tid 2682084] (70014)End of file found: [client 216.73.216.199:52678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:16.132061 2026] [security2:error] [pid 2670475:tid 2670475] [client 157.48.97.15:51158] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVNLUYjHl1h5v7nmSbrAAAAAA"]
[Thu Jul 30 10:11:16.132119 2026] [security2:error] [pid 2670475:tid 2670475] [client 157.48.97.15:51158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVNLUYjHl1h5v7nmSbrAAAAAA"]
[Thu Jul 30 10:11:16.132366 2026] [security2:error] [pid 2670475:tid 2670475] [client 157.48.97.15:51158] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVNLUYjHl1h5v7nmSbrAAAAAA"]
[Thu Jul 30 10:11:16.550621 2026] [access_compat:error] [pid 2678555:tid 2678555] [client 196.75.51.247:58689] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:17.037631 2026] [core:error] [pid 2650047:tid 2650047] (13)Permission denied: [client 216.73.216.199:1862] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/sanity_checks
[Thu Jul 30 10:11:17.842080 2026] [ssl:error] [pid 2681036:tid 2681036] (EAI 2)Name or service not known: [client 144.76.19.72:37424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:17.842115 2026] [ssl:error] [pid 2681036:tid 2681036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:17.967261 2026] [core:error] [pid 2681036:tid 2681036] [client 66.249.64.170:64392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:11:17.967289 2026] [core:error] [pid 2681036:tid 2681036] [client 66.249.64.170:64392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:11:18.532490 2026] [ssl:error] [pid 2684099:tid 2684099] (EAI 2)Name or service not known: [client 144.76.19.72:37436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:18.532534 2026] [ssl:error] [pid 2684099:tid 2684099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:18.558045 2026] [core:error] [pid 2650047:tid 2650047] (13)Permission denied: [client 216.73.216.199:1862] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/destroy_by_rcu
[Thu Jul 30 10:11:20.006965 2026] [cgi:error] [pid 2680995:tid 2680995] [client 51.120.79.193:16532] AH02812: stderr from /home/stcols/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:11:20.426414 2026] [authz_core:error] [pid 2680995:tid 2680995] [client 51.120.79.193:16532] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/l10n/error_log
[Thu Jul 30 10:11:21.375587 2026] [cgi:error] [pid 2682988:tid 2682988] [client 167.103.3.80:20367] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:11:21 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:11:21.375740 2026] [cgi:error] [pid 2682988:tid 2682988] [client 167.103.3.80:20367] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:11:21 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:11:21.375839 2026] [cgi:error] [pid 2682988:tid 2682988] [client 167.103.3.80:20367] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:11:21 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:11:21.375938 2026] [cgi:error] [pid 2682988:tid 2682988] [client 167.103.3.80:20367] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:11:21 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:11:21.376037 2026] [cgi:error] [pid 2682988:tid 2682988] [client 167.103.3.80:20367] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:11:21 2026] iplist-cgi.pl: Use of uninitialized value $mask in pattern match (m//) at iplist-cgi.pl line 31.
[Thu Jul 30 10:11:21.584778 2026] [ssl:error] [pid 2683838:tid 2683838] (EAI 2)Name or service not known: [client 144.76.19.72:33154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:21.584811 2026] [ssl:error] [pid 2683838:tid 2683838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:21.641498 2026] [ssl:error] [pid 2684159:tid 2684159] (EAI 2)Name or service not known: [client 144.76.19.72:33160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:21.641530 2026] [ssl:error] [pid 2684159:tid 2684159] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:21.943917 2026] [security2:error] [pid 2684162:tid 2684162] [client 157.20.116.205:46790] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVOeMSQaLbLUyjQqgv1AAAADc"]
[Thu Jul 30 10:11:21.943960 2026] [security2:error] [pid 2684162:tid 2684162] [client 157.20.116.205:46790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVOeMSQaLbLUyjQqgv1AAAADc"]
[Thu Jul 30 10:11:21.944233 2026] [security2:error] [pid 2684162:tid 2684162] [client 157.20.116.205:46790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVOeMSQaLbLUyjQqgv1AAAADc"]
[Thu Jul 30 10:11:22.393834 2026] [access_compat:error] [pid 2683802:tid 2683802] [client 196.75.51.247:59092] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:23.693405 2026] [ssl:error] [pid 2650047:tid 2650047] (5)Input/output error: [client 216.73.216.199:1862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:24.290401 2026] [authz_core:error] [pid 2680995:tid 2680995] [client 51.120.79.193:16532] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 10:11:24.699778 2026] [ssl:error] [pid 2684026:tid 2684026] (EAI 2)Name or service not known: [client 144.76.19.72:33170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:24.699815 2026] [ssl:error] [pid 2684026:tid 2684026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:24.752715 2026] [ssl:error] [pid 2680994:tid 2680994] (EAI 2)Name or service not known: [client 144.76.19.72:33180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:24.752756 2026] [ssl:error] [pid 2680994:tid 2680994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:25.205390 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:55495] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS2/iomem_base
[Thu Jul 30 10:11:26.421245 2026] [ssl:error] [pid 2681035:tid 2681035] (5)Input/output error: [client 216.73.216.199:18251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:26.732590 2026] [ssl:error] [pid 2675674:tid 2675674] (70014)End of file found: [client 216.73.216.199:55495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:27.806099 2026] [ssl:error] [pid 2679525:tid 2679525] (EAI 2)Name or service not known: [client 144.76.19.72:33184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:27.806126 2026] [ssl:error] [pid 2679525:tid 2679525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:27.864559 2026] [ssl:error] [pid 2684098:tid 2684098] (EAI 2)Name or service not known: [client 144.76.19.72:33194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:27.864590 2026] [ssl:error] [pid 2684098:tid 2684098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:28.289786 2026] [access_compat:error] [pid 2667117:tid 2667117] [client 196.75.51.247:59593] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:30.940058 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:43824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:30.940115 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:30.993705 2026] [ssl:error] [pid 2683837:tid 2683837] (EAI 2)Name or service not known: [client 144.76.19.72:43838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:30.993734 2026] [ssl:error] [pid 2683837:tid 2683837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:31.291524 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:37726] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:31.598760 2026] [ssl:error] [pid 2684101:tid 2684101] (70014)End of file found: [client 216.73.216.199:55496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:32.086127 2026] [core:error] [pid 2681035:tid 2681035] (13)Permission denied: [client 216.73.216.199:1457] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nft_limit/uevent
[Thu Jul 30 10:11:32.201434 2026] [ssl:error] [pid 2681035:tid 2681035] (70014)End of file found: [client 216.73.216.199:1457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:34.411118 2026] [ssl:error] [pid 2684878:tid 2684878] (EAI 2)Name or service not known: [client 144.76.19.72:43842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:34.411165 2026] [ssl:error] [pid 2684878:tid 2684878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:34.464266 2026] [ssl:error] [pid 2684878:tid 2684878] (EAI 2)Name or service not known: [client 144.76.19.72:43854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:34.464294 2026] [ssl:error] [pid 2684878:tid 2684878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:36.474707 2026] [access_compat:error] [pid 2667117:tid 2667117] [client 196.75.51.247:60061] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:36.624670 2026] [ssl:error] [pid 2684878:tid 2684878] (70014)End of file found: [client 216.73.216.199:4858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:37.518867 2026] [ssl:error] [pid 2684101:tid 2684101] (EAI 2)Name or service not known: [client 144.76.19.72:43862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:37.518910 2026] [ssl:error] [pid 2684101:tid 2684101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:37.573494 2026] [ssl:error] [pid 2682523:tid 2682523] (EAI 2)Name or service not known: [client 144.76.19.72:43872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:37.573530 2026] [ssl:error] [pid 2682523:tid 2682523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:37.624527 2026] [ssl:error] [pid 2684952:tid 2684952] (70014)End of file found: [client 216.73.216.199:49458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:38.131408 2026] [ssl:error] [pid 2667737:tid 2667737] (70014)End of file found: [client 216.73.216.199:48653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:40.627840 2026] [ssl:error] [pid 2685298:tid 2685298] (EAI 2)Name or service not known: [client 144.76.19.72:43336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:40.627874 2026] [ssl:error] [pid 2685298:tid 2685298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:40.682561 2026] [ssl:error] [pid 2684101:tid 2684101] (EAI 2)Name or service not known: [client 144.76.19.72:43342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:40.682604 2026] [ssl:error] [pid 2684101:tid 2684101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:41.703640 2026] [security2:error] [pid 2679458:tid 2679458] [client 85.208.96.209:27690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/arbitrageurs-in-foreign-exchange-markets-mcqs"] [unique_id "amsVTbD7f5xqyhuZQX4QhQAAABA"]
[Thu Jul 30 10:11:42.037818 2026] [ssl:error] [pid 2682457:tid 2682457] (70014)End of file found: [client 216.73.216.199:44409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:42.378737 2026] [access_compat:error] [pid 2684156:tid 2684156] [client 196.75.51.247:60444] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:43.354075 2026] [ssl:error] [pid 2684953:tid 2684953] (70014)End of file found: [client 216.73.216.199:34978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:43.737224 2026] [ssl:error] [pid 2667412:tid 2667412] (EAI 2)Name or service not known: [client 144.76.19.72:43350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:43.737253 2026] [ssl:error] [pid 2667412:tid 2667412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:43.797549 2026] [ssl:error] [pid 2680995:tid 2680995] (EAI 2)Name or service not known: [client 144.76.19.72:43352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:43.797602 2026] [ssl:error] [pid 2680995:tid 2680995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:43.855536 2026] [ssl:error] [pid 2684950:tid 2684950] (70014)End of file found: [client 216.73.216.199:1741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:44.937559 2026] [security2:error] [pid 2675674:tid 2675674] [client 43.133.220.37:49308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.webstersltd.com"] [uri "/"] [unique_id "amsVUGpHD-7MOOr_ChWmBQAAABY"]
[Thu Jul 30 10:11:45.421823 2026] [cgi:error] [pid 2679589:tid 2679589] [client 20.104.22.47:1287] AH02812: stderr from /home/davidebell/public_html/tartanbag.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:11:46.386686 2026] [security2:error] [pid 2681815:tid 2681815] [client 43.133.220.37:46914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.webstersltd.com"] [uri "/"] [unique_id "amsVUje1pHlCPCqysgXYHwAAACI"], referer: http://www.webstersltd.com
[Thu Jul 30 10:11:46.852333 2026] [ssl:error] [pid 2667737:tid 2667737] (EAI 2)Name or service not known: [client 144.76.19.72:43364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:46.852356 2026] [ssl:error] [pid 2667737:tid 2667737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:46.908662 2026] [ssl:error] [pid 2684158:tid 2684158] (EAI 2)Name or service not known: [client 144.76.19.72:43380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:46.908695 2026] [ssl:error] [pid 2684158:tid 2684158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:47.454357 2026] [ssl:error] [pid 2684158:tid 2684158] (70014)End of file found: [client 216.73.216.199:54630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:48.203383 2026] [access_compat:error] [pid 2681815:tid 2681815] [client 196.75.51.247:60740] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:48.726786 2026] [cgi:error] [pid 2678555:tid 2678555] [client 20.63.10.215:23763] AH02812: stderr from /home/jonatha/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:11:48.741655 2026] [access_compat:error] [pid 2684953:tid 2684953] [client 45.158.164.139:35550] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:11:49.078971 2026] [ssl:error] [pid 2677339:tid 2677339] (70014)End of file found: [client 216.73.216.199:24645] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:49.574197 2026] [ssl:error] [pid 2683802:tid 2683802] (70014)End of file found: [client 216.73.216.199:24404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:49.968563 2026] [ssl:error] [pid 2684952:tid 2684952] (EAI 2)Name or service not known: [client 144.76.19.72:48668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:49.968606 2026] [ssl:error] [pid 2684952:tid 2684952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:50.026418 2026] [ssl:error] [pid 2684157:tid 2684157] (EAI 2)Name or service not known: [client 144.76.19.72:48682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:50.026451 2026] [ssl:error] [pid 2684157:tid 2684157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:52.747225 2026] [core:error] [pid 2683837:tid 2683837] [client 66.249.64.171:62825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:11:52.747250 2026] [core:error] [pid 2683837:tid 2683837] [client 66.249.64.171:62825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:11:52.892587 2026] [ssl:error] [pid 2684156:tid 2684156] (70014)End of file found: [client 216.73.216.199:10341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:53.074542 2026] [ssl:error] [pid 2679458:tid 2679458] (EAI 2)Name or service not known: [client 84.139.255.197:59762] AH01972: could not resolve address of OCSP responder r3.o.lencr.org
[Thu Jul 30 10:11:53.074645 2026] [ssl:error] [pid 2679458:tid 2679458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:53.086212 2026] [ssl:error] [pid 2684950:tid 2684950] (EAI 2)Name or service not known: [client 144.76.19.72:48688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:53.086236 2026] [ssl:error] [pid 2684950:tid 2684950] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:53.143987 2026] [ssl:error] [pid 2684158:tid 2684158] (EAI 2)Name or service not known: [client 144.76.19.72:48704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:53.144006 2026] [ssl:error] [pid 2684158:tid 2684158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:54.393612 2026] [ssl:error] [pid 2667117:tid 2667117] (70014)End of file found: [client 216.73.216.199:5179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:54.510051 2026] [access_compat:error] [pid 2671526:tid 2671526] [client 196.75.51.247:61063] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:11:54.876499 2026] [security2:error] [pid 2684101:tid 2684101] [client 47.128.24.56:45058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsVWowOF27n0q-59SlnaQAAAC0"]
[Thu Jul 30 10:11:54.999291 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:50844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:56.200251 2026] [ssl:error] [pid 2684953:tid 2684953] (EAI 2)Name or service not known: [client 144.76.19.72:48710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:56.200293 2026] [ssl:error] [pid 2684953:tid 2684953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:56.253356 2026] [ssl:error] [pid 2683838:tid 2683838] (EAI 2)Name or service not known: [client 144.76.19.72:48726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:56.253381 2026] [ssl:error] [pid 2683838:tid 2683838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:56.525586 2026] [core:error] [pid 2680487:tid 2680487] (13)Permission denied: [client 216.73.216.199:49872] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS3/irq
[Thu Jul 30 10:11:58.525131 2026] [ssl:error] [pid 2680487:tid 2680487] (70014)End of file found: [client 216.73.216.199:49872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:59.292293 2026] [security2:error] [pid 2681035:tid 2681035] [client 47.128.42.102:42534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/robots.txt"] [unique_id "amsVXxuPZG-LF6IlWvJVXwAAABo"]
[Thu Jul 30 10:11:59.309092 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:48740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:59.309122 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:11:59.351003 2026] [ssl:error] [pid 2684878:tid 2684878] (70014)End of file found: [client 216.73.216.199:4856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:11:59.439236 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:48746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:11:59.439266 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:00.313861 2026] [access_compat:error] [pid 2672570:tid 2672570] [client 196.75.51.247:61429] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:00.856007 2026] [core:error] [pid 2681815:tid 2681815] (13)Permission denied: [client 216.73.216.199:44496] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 10:12:01.157798 2026] [ssl:error] [pid 2681815:tid 2681815] (70014)End of file found: [client 216.73.216.199:44496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:02.519757 2026] [ssl:error] [pid 2650047:tid 2650047] (EAI 2)Name or service not known: [client 144.76.19.72:47498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:02.519796 2026] [ssl:error] [pid 2650047:tid 2650047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:02.574368 2026] [ssl:error] [pid 2682084:tid 2682084] (EAI 2)Name or service not known: [client 144.76.19.72:47504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:02.574394 2026] [ssl:error] [pid 2682084:tid 2682084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:02.995368 2026] [security2:error] [pid 2683802:tid 2683802] [client 185.191.171.7:23358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9438.0/prev_next,next.html"] [unique_id "amsVYtqnUPrsBMrj3SBJHgAAABE"]
[Thu Jul 30 10:12:04.069854 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:7352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:05.628359 2026] [ssl:error] [pid 2684953:tid 2684953] (EAI 2)Name or service not known: [client 144.76.19.72:47516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:05.628396 2026] [ssl:error] [pid 2684953:tid 2684953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:05.682529 2026] [ssl:error] [pid 2683837:tid 2683837] (EAI 2)Name or service not known: [client 144.76.19.72:47526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:05.682559 2026] [ssl:error] [pid 2683837:tid 2683837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:05.980603 2026] [ssl:error] [pid 2684161:tid 2684161] (70014)End of file found: [client 216.73.216.199:38565] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:06.585470 2026] [access_compat:error] [pid 2684162:tid 2684162] [client 196.75.51.247:61758] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:08.739832 2026] [ssl:error] [pid 2681815:tid 2681815] (EAI 2)Name or service not known: [client 144.76.19.72:47534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:08.739866 2026] [ssl:error] [pid 2681815:tid 2681815] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:08.793603 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:47548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:08.793638 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:09.594237 2026] [ssl:error] [pid 2683837:tid 2683837] (70014)End of file found: [client 216.73.216.199:26429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:11.103846 2026] [core:error] [pid 2683802:tid 2683802] (13)Permission denied: [client 216.73.216.199:45229] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS3/irq
[Thu Jul 30 10:12:11.849434 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:29630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:11.849461 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:11.903675 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:29640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:11.903702 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:12.025666 2026] [cgi:error] [pid 2684877:tid 2684877] [client 167.103.186.117:39667] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:12:12 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:12:12.025816 2026] [cgi:error] [pid 2684877:tid 2684877] [client 167.103.186.117:39667] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:12:12 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:12:12.025916 2026] [cgi:error] [pid 2684877:tid 2684877] [client 167.103.186.117:39667] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:12:12 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:12:12.026015 2026] [cgi:error] [pid 2684877:tid 2684877] [client 167.103.186.117:39667] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:12:12 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:12:12.026126 2026] [cgi:error] [pid 2684877:tid 2684877] [client 167.103.186.117:39667] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:12:12 2026] iplist-cgi.pl: Use of uninitialized value $mask in pattern match (m//) at iplist-cgi.pl line 31.
[Thu Jul 30 10:12:12.211948 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 84.17.60.236:36044] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:12:12.214640 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 84.17.60.236:36044] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:12:12.309810 2026] [core:error] [pid 2683802:tid 2683802] (13)Permission denied: [client 216.73.216.199:45229] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/port
[Thu Jul 30 10:12:12.401682 2026] [access_compat:error] [pid 2675258:tid 2675258] [client 196.75.51.247:62110] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:13.213374 2026] [core:error] [pid 2683802:tid 2683802] (13)Permission denied: [client 216.73.216.199:45229] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/irq
[Thu Jul 30 10:12:13.439854 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 84.17.60.236:36044] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:12:13.443899 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 84.17.60.236:36044] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:12:13.513894 2026] [core:error] [pid 2683802:tid 2683802] (13)Permission denied: [client 216.73.216.199:45229] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 10:12:13.518246 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 84.17.60.236:36044] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:12:13.520896 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 84.17.60.236:36044] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:12:13.815525 2026] [core:error] [pid 2683802:tid 2683802] (13)Permission denied: [client 216.73.216.199:45229] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu1/subsystem/uevent
[Thu Jul 30 10:12:14.120969 2026] [ssl:error] [pid 2683802:tid 2683802] (70014)End of file found: [client 216.73.216.199:45229] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:14.267368 2026] [security2:error] [pid 2686706:tid 2686706] [client 47.84.41.150:23069] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVblbL2yT8cFe5mxnD3gAAAAk"]
[Thu Jul 30 10:12:14.267427 2026] [security2:error] [pid 2686706:tid 2686706] [client 47.84.41.150:23069] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVblbL2yT8cFe5mxnD3gAAAAk"]
[Thu Jul 30 10:12:14.267755 2026] [security2:error] [pid 2686706:tid 2686706] [client 47.84.41.150:23069] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVblbL2yT8cFe5mxnD3gAAAAk"]
[Thu Jul 30 10:12:14.966530 2026] [ssl:error] [pid 2684162:tid 2684162] (EAI 2)Name or service not known: [client 144.76.19.72:29656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:14.966564 2026] [ssl:error] [pid 2684162:tid 2684162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:15.022658 2026] [ssl:error] [pid 2683152:tid 2683152] (EAI 2)Name or service not known: [client 144.76.19.72:29658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:15.022694 2026] [ssl:error] [pid 2683152:tid 2683152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:15.075560 2026] [authz_core:error] [pid 2663435:tid 2663435] [client 209.141.32.143:50424] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 10:12:15.075618 2026] [authz_core:error] [pid 2663435:tid 2663435] [client 209.141.32.143:50424] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 10:12:16.228844 2026] [core:error] [pid 2686258:tid 2686258] (13)Permission denied: [client 216.73.216.199:21932] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS3/port
[Thu Jul 30 10:12:16.408349 2026] [security2:error] [pid 2686706:tid 2686706] [client 92.222.108.125:34810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amsVcFbL2yT8cFe5mxnD3wAAAAk"]
[Thu Jul 30 10:12:16.487269 2026] [security2:error] [pid 2683152:tid 2683152] [client 92.222.108.125:37210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/403.shtml"] [unique_id "amsVcK4NBqAl2caBgLAqcQAAACg"]
[Thu Jul 30 10:12:16.512800 2026] [security2:error] [pid 2686707:tid 2686707] [client 114.119.158.38:49743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~19,17/request_format~html"] [unique_id "amsVcJh7xpvnWlBoz1wG-wAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~102,19,17/request_format~html
[Thu Jul 30 10:12:16.728258 2026] [security2:error] [pid 2684155:tid 2684155] [client 185.191.171.16:51642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5578.0.html"] [unique_id "amsVcOXVNUyapgHSmXCVSwAAAC4"]
[Thu Jul 30 10:12:17.483680 2026] [security2:error] [pid 2667412:tid 2667412] [client 114.119.158.38:49749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~19,17/request_format~html"] [unique_id "amsVcZrT00meCrKyO6v9DQAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~102,19,17/request_format~html
[Thu Jul 30 10:12:17.536491 2026] [security2:error] [pid 2672524:tid 2672524] [client 198.244.226.161:33216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/"] [unique_id "amsVcaCcg6JbNnBL1t0bnAAAAAY"]
[Thu Jul 30 10:12:17.587439 2026] [security2:error] [pid 2683628:tid 2683628] [client 124.156.204.51:47594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/playlogbeta/"] [unique_id "amsVcUGyzFcKva_zAn7z2AAAAAg"]
[Thu Jul 30 10:12:18.102159 2026] [ssl:error] [pid 2684877:tid 2684877] (EAI 2)Name or service not known: [client 144.76.19.72:29668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:18.102207 2026] [ssl:error] [pid 2684877:tid 2684877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:18.144836 2026] [access_compat:error] [pid 2684952:tid 2684952] [client 196.75.51.247:62509] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:18.159220 2026] [ssl:error] [pid 2679458:tid 2679458] (EAI 2)Name or service not known: [client 144.76.19.72:29682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:18.159249 2026] [ssl:error] [pid 2679458:tid 2679458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:18.938816 2026] [ssl:error] [pid 2684101:tid 2684101] (70014)End of file found: [client 216.73.216.199:6909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:19.239850 2026] [core:error] [pid 2686258:tid 2686258] (13)Permission denied: [client 216.73.216.199:21932] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS3/port
[Thu Jul 30 10:12:21.046912 2026] [ssl:error] [pid 2686258:tid 2686258] (70014)End of file found: [client 216.73.216.199:21932] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:21.216813 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:30742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:21.216847 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:21.268563 2026] [ssl:error] [pid 2684877:tid 2684877] (EAI 2)Name or service not known: [client 144.76.19.72:30752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:21.268588 2026] [ssl:error] [pid 2684877:tid 2684877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:22.766430 2026] [authz_core:error] [pid 2663435:tid 2663435] [client 66.249.66.35:43939] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:12:22.769218 2026] [authz_core:error] [pid 2663435:tid 2663435] [client 66.249.66.35:43939] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:12:23.914681 2026] [access_compat:error] [pid 2684156:tid 2684156] [client 196.75.51.247:62806] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:24.322336 2026] [ssl:error] [pid 2684101:tid 2684101] (EAI 2)Name or service not known: [client 144.76.19.72:30766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:24.322366 2026] [ssl:error] [pid 2684101:tid 2684101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:24.376557 2026] [ssl:error] [pid 2684162:tid 2684162] (EAI 2)Name or service not known: [client 144.76.19.72:30782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:24.376585 2026] [ssl:error] [pid 2684162:tid 2684162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:24.614015 2026] [lsapi:warn] [pid 2683802:tid 2683802] [client 64.227.169.26:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:12:26.295050 2026] [security2:error] [pid 2684877:tid 2684877] [client 47.128.50.119:43644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hornsey-town-hall.org.uk"] [uri "/robots.txt"] [unique_id "amsVeuofoAf1ECjHHdH9WQAAABM"]
[Thu Jul 30 10:12:26.480246 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 172.202.44.182:39555] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/IXR/error_log
[Thu Jul 30 10:12:26.656309 2026] [core:error] [pid 2675258:tid 2675258] (13)Permission denied: [client 216.73.216.199:56964] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/destroy_by_rcu
[Thu Jul 30 10:12:27.429791 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:30784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:27.429824 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:27.482695 2026] [ssl:error] [pid 2678555:tid 2678555] (EAI 2)Name or service not known: [client 144.76.19.72:30798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:27.482726 2026] [ssl:error] [pid 2678555:tid 2678555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:27.638895 2026] [core:error] [pid 2675258:tid 2675258] (13)Permission denied: [client 216.73.216.199:56964] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS3/port
[Thu Jul 30 10:12:29.704170 2026] [access_compat:error] [pid 2684877:tid 2684877] [client 196.75.51.247:63102] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:30.404030 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 172.202.44.182:39555] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 10:12:30.540120 2026] [ssl:error] [pid 2684026:tid 2684026] (EAI 2)Name or service not known: [client 144.76.19.72:59712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:30.540143 2026] [ssl:error] [pid 2684026:tid 2684026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:30.596259 2026] [ssl:error] [pid 2678555:tid 2678555] (EAI 2)Name or service not known: [client 144.76.19.72:59720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:30.596288 2026] [ssl:error] [pid 2678555:tid 2678555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:31.192950 2026] [cgi:error] [pid 2687040:tid 2687040] [client 20.220.15.170:33644] AH02812: stderr from /home/enigmasu/sentimentgifts.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:12:31.805989 2026] [core:error] [pid 2672570:tid 2672570] (13)Permission denied: [client 216.73.216.199:39892] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:53/subsystem/ttyS3/iomem_base
[Thu Jul 30 10:12:32.946326 2026] [authz_core:error] [pid 2686676:tid 2686676] [client 66.249.66.33:62466] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:12:32.948980 2026] [authz_core:error] [pid 2686676:tid 2686676] [client 66.249.66.33:62466] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:12:33.381731 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 172.202.44.182:39555] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 10:12:33.466590 2026] [security2:error] [pid 2684162:tid 2684162] [client 94.154.43.183:38390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewhitefamily.co.uk"] [uri "/.env"] [unique_id "amsVgeMSQaLbLUyjQqgwKgAAADc"]
[Thu Jul 30 10:12:33.466759 2026] [security2:error] [pid 2684162:tid 2684162] [client 94.154.43.183:38390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewhitefamily.co.uk"] [uri "/.env"] [unique_id "amsVgeMSQaLbLUyjQqgwKgAAADc"]
[Thu Jul 30 10:12:33.466947 2026] [security2:error] [pid 2684162:tid 2684162] [client 94.154.43.183:38390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewhitefamily.co.uk"] [uri "/.env"] [unique_id "amsVgeMSQaLbLUyjQqgwKgAAADc"]
[Thu Jul 30 10:12:33.617156 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:39892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:33.693112 2026] [ssl:error] [pid 2675258:tid 2675258] (EAI 2)Name or service not known: [client 144.76.19.72:59732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:33.693159 2026] [ssl:error] [pid 2675258:tid 2675258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:33.749102 2026] [ssl:error] [pid 2684156:tid 2684156] (EAI 2)Name or service not known: [client 144.76.19.72:59742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:33.749138 2026] [ssl:error] [pid 2684156:tid 2684156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:34.427165 2026] [security2:error] [pid 2682457:tid 2682457] [client 94.154.43.183:38392] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.webmail.thewhitefamily.co.uk"] [uri "/.env"] [unique_id "amsVguSCqcHBgGy3oMEsxwAAAA4"]
[Thu Jul 30 10:12:34.427333 2026] [security2:error] [pid 2682457:tid 2682457] [client 94.154.43.183:38392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.webmail.thewhitefamily.co.uk"] [uri "/.env"] [unique_id "amsVguSCqcHBgGy3oMEsxwAAAA4"]
[Thu Jul 30 10:12:34.427492 2026] [security2:error] [pid 2682457:tid 2682457] [client 94.154.43.183:38392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.webmail.thewhitefamily.co.uk"] [uri "/403.shtml"] [unique_id "amsVguSCqcHBgGy3oMEsxwAAAA4"]
[Thu Jul 30 10:12:34.520791 2026] [core:error] [pid 2663435:tid 2663435] (13)Permission denied: [client 216.73.216.199:48916] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/port
[Thu Jul 30 10:12:34.821758 2026] [core:error] [pid 2663435:tid 2663435] (13)Permission denied: [client 216.73.216.199:48916] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS3/iomem_base
[Thu Jul 30 10:12:35.453229 2026] [access_compat:error] [pid 2683802:tid 2683802] [client 196.75.51.247:63424] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:35.724001 2026] [core:error] [pid 2663435:tid 2663435] (13)Permission denied: [client 216.73.216.199:48916] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/subsystem/ttyS3/iomem_base
[Thu Jul 30 10:12:36.045261 2026] [security2:error] [pid 2672524:tid 2672524] [client 47.128.55.107:47448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/robots.txt"] [unique_id "amsVhKCcg6JbNnBL1t0bpAAAAAY"]
[Thu Jul 30 10:12:36.752129 2026] [security2:error] [pid 2683837:tid 2683837] [client 182.253.179.144:59023] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVhARCPPC4h-V2O-8cFgAAABc"]
[Thu Jul 30 10:12:36.752177 2026] [security2:error] [pid 2683837:tid 2683837] [client 182.253.179.144:59023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVhARCPPC4h-V2O-8cFgAAABc"]
[Thu Jul 30 10:12:36.752420 2026] [security2:error] [pid 2683837:tid 2683837] [client 182.253.179.144:59023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVhARCPPC4h-V2O-8cFgAAABc"]
[Thu Jul 30 10:12:36.801782 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:59758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:36.801817 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:36.858983 2026] [ssl:error] [pid 2687040:tid 2687040] (EAI 2)Name or service not known: [client 144.76.19.72:59774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:36.859028 2026] [ssl:error] [pid 2687040:tid 2687040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:37.653247 2026] [security2:error] [pid 2678555:tid 2678555] [client 47.128.52.30:31808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "amsVhabxlr3VoRwx8eAoawAAAA8"]
[Thu Jul 30 10:12:37.838385 2026] [ssl:error] [pid 2663435:tid 2663435] (70014)End of file found: [client 216.73.216.199:48916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:38.134943 2026] [ssl:error] [pid 2685157:tid 2685157] (70014)End of file found: [client 216.73.216.199:7375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:39.915017 2026] [ssl:error] [pid 2684952:tid 2684952] (EAI 2)Name or service not known: [client 144.76.19.72:63726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:39.915047 2026] [ssl:error] [pid 2684952:tid 2684952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:39.968247 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:63740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:39.968278 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:40.360457 2026] [security2:error] [pid 2684026:tid 2684026] [client 47.128.52.30:35134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/robots.txt"] [unique_id "amsViNGofqIef-FI9gB5mQAAACM"]
[Thu Jul 30 10:12:41.248400 2026] [access_compat:error] [pid 2672570:tid 2672570] [client 196.75.51.247:63619] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:41.545828 2026] [security2:error] [pid 2684156:tid 2684156] [client 156.59.198.135:40954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/saveshrine/secret-of-mana/images/logo.png"] [unique_id "amsVidnISPjcHjfkBiQKmAAAAC8"], referer: https://robin64.co.uk/saveshrine/
[Thu Jul 30 10:12:41.732623 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 172.202.44.182:39555] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 10:12:41.762973 2026] [core:error] [pid 2672524:tid 2672524] (13)Permission denied: [client 216.73.216.199:24021] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/haltpoll/uevent
[Thu Jul 30 10:12:42.115210 2026] [security2:error] [pid 2684952:tid 2684952] [client 85.208.96.201:51520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/fashion-trend-forecast-2023-vogue"] [unique_id "amsVipBKaepTzPO3AWeM_QAAACk"]
[Thu Jul 30 10:12:43.680469 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:63742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:43.680501 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:43.738107 2026] [ssl:error] [pid 2683151:tid 2683151] (EAI 2)Name or service not known: [client 144.76.19.72:63750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:43.738145 2026] [ssl:error] [pid 2683151:tid 2683151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:45.194309 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 172.202.44.182:39555] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 10:12:46.030898 2026] [authz_core:error] [pid 2684026:tid 2684026] [client 82.102.18.190:33212] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/includes/swv/error_log
[Thu Jul 30 10:12:46.584657 2026] [core:error] [pid 2677339:tid 2677339] (13)Permission denied: [client 216.73.216.199:41199] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS3/iomem_base
[Thu Jul 30 10:12:46.829055 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:63760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:46.829096 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:46.842017 2026] [security2:error] [pid 2686707:tid 2686707] [client 82.156.34.74:40294] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wmsfirearmstraining.com"] [uri "/"] [unique_id "amsVjph7xpvnWlBoz1wHBQAAAAw"]
[Thu Jul 30 10:12:46.886099 2026] [ssl:error] [pid 2684101:tid 2684101] (EAI 2)Name or service not known: [client 144.76.19.72:63768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:46.886123 2026] [ssl:error] [pid 2684101:tid 2684101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:47.049320 2026] [access_compat:error] [pid 2679458:tid 2679458] [client 196.75.51.247:63728] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:47.071425 2026] [core:error] [pid 2675258:tid 2675258] [client 66.249.64.172:55199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:47.071449 2026] [core:error] [pid 2675258:tid 2675258] [client 66.249.64.172:55199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:48.096028 2026] [ssl:error] [pid 2677339:tid 2677339] (70014)End of file found: [client 216.73.216.199:41199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:48.693756 2026] [ssl:error] [pid 2672524:tid 2672524] (70014)End of file found: [client 216.73.216.199:24021] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:49.942771 2026] [ssl:error] [pid 2687073:tid 2687073] (EAI 2)Name or service not known: [client 144.76.19.72:56904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:49.942803 2026] [ssl:error] [pid 2687073:tid 2687073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:50.000684 2026] [ssl:error] [pid 2683837:tid 2683837] (EAI 2)Name or service not known: [client 144.76.19.72:56910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:50.000707 2026] [ssl:error] [pid 2683837:tid 2683837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:50.504218 2026] [ssl:error] [pid 2671526:tid 2671526] (70014)End of file found: [client 216.73.216.199:40345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:51.245857 2026] [authz_core:error] [pid 2687040:tid 2687040] [client 66.249.66.33:65116] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:12:51.248509 2026] [authz_core:error] [pid 2687040:tid 2687040] [client 66.249.66.33:65116] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:12:52.802031 2026] [access_compat:error] [pid 2684161:tid 2684161] [client 196.75.51.247:64024] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:53.056884 2026] [ssl:error] [pid 2682523:tid 2682523] (EAI 2)Name or service not known: [client 144.76.19.72:56920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:53.056907 2026] [ssl:error] [pid 2682523:tid 2682523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:53.110257 2026] [ssl:error] [pid 2684877:tid 2684877] (EAI 2)Name or service not known: [client 144.76.19.72:56928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:53.110280 2026] [ssl:error] [pid 2684877:tid 2684877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:53.336290 2026] [access_compat:error] [pid 2681815:tid 2681815] [client 45.158.164.139:34024] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:12:54.112567 2026] [ssl:error] [pid 2683837:tid 2683837] (70014)End of file found: [client 216.73.216.199:14478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:12:54.138501 2026] [core:error] [pid 2681738:tid 2681738] [client 66.249.66.169:42346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:54.138522 2026] [core:error] [pid 2681738:tid 2681738] [client 66.249.66.169:42346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:54.150908 2026] [core:error] [pid 2684162:tid 2684162] [client 66.249.66.4:44212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:54.150929 2026] [core:error] [pid 2684162:tid 2684162] [client 66.249.66.4:44212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:55.514901 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 172.202.44.182:39555] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 10:12:56.168426 2026] [ssl:error] [pid 2681738:tid 2681738] (EAI 2)Name or service not known: [client 144.76.19.72:56934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:56.168454 2026] [ssl:error] [pid 2681738:tid 2681738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:56.221392 2026] [ssl:error] [pid 2684162:tid 2684162] (EAI 2)Name or service not known: [client 144.76.19.72:56946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:56.221417 2026] [ssl:error] [pid 2684162:tid 2684162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:56.428292 2026] [core:error] [pid 2683628:tid 2683628] [client 66.249.66.8:59241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:56.428327 2026] [core:error] [pid 2683628:tid 2683628] [client 66.249.66.8:59241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:12:56.718036 2026] [security2:error] [pid 2682316:tid 2682316] [client 47.128.98.78:27820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/category/news/"] [unique_id "amsVmN8EDKWDxppX53Vg5QAAAAQ"]
[Thu Jul 30 10:12:57.067136 2026] [security2:error] [pid 2687973:tid 2687973] [client 170.106.167.214:51518] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bashforthbell.com"] [uri "/"] [unique_id "amsVmSyP3DkI21Dcw4xyRQAAAAc"]
[Thu Jul 30 10:12:57.530974 2026] [security2:error] [pid 2672524:tid 2672524] [client 43.135.211.148:40794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/google74cd9ca112b32b7c.html"] [unique_id "amsVmaCcg6JbNnBL1t0bugAAAAY"]
[Thu Jul 30 10:12:57.885937 2026] [core:error] [pid 2682523:tid 2682523] (13)Permission denied: [client 216.73.216.199:17809] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nf_nat/uevent
[Thu Jul 30 10:12:57.973739 2026] [security2:error] [pid 2687040:tid 2687040] [client 170.106.167.214:52010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amsVmTC2cGqYigTq1w3LswAAAAk"], referer: http://www.bashforthbell.com
[Thu Jul 30 10:12:58.756482 2026] [authz_core:error] [pid 2683628:tid 2683628] [client 66.249.66.33:35796] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:12:58.759155 2026] [authz_core:error] [pid 2683628:tid 2683628] [client 66.249.66.33:35796] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:12:59.108710 2026] [access_compat:error] [pid 2687973:tid 2687973] [client 196.75.51.247:64240] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:12:59.278263 2026] [ssl:error] [pid 2677996:tid 2677996] (EAI 2)Name or service not known: [client 144.76.19.72:56954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:59.278307 2026] [ssl:error] [pid 2677996:tid 2677996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:12:59.330824 2026] [ssl:error] [pid 2688008:tid 2688008] (EAI 2)Name or service not known: [client 144.76.19.72:56966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:12:59.330853 2026] [ssl:error] [pid 2688008:tid 2688008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:02.402862 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:58712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:02.402917 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:02.459536 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:58724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:02.459564 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:02.969802 2026] [security2:error] [pid 2688008:tid 2688008] [client 170.106.11.6:38942] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnstopwatches.com"] [uri "/"] [unique_id "amsVniqAL3rUppUQLLfOjgAAABs"]
[Thu Jul 30 10:13:04.864976 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:49874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:13:04.887088 2026] [access_compat:error] [pid 2663435:tid 2663435] [client 196.75.51.247:64370] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:05.514515 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:58734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:05.514545 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:05.569130 2026] [ssl:error] [pid 2686676:tid 2686676] (EAI 2)Name or service not known: [client 144.76.19.72:58742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:05.569170 2026] [ssl:error] [pid 2686676:tid 2686676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:06.055879 2026] [security2:error] [pid 2685298:tid 2685298] [client 85.208.96.209:63756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4508.0/prev_next,next.html"] [unique_id "amsVot6ote5PWFCaBJBGrwAAADU"]
[Thu Jul 30 10:13:06.368392 2026] [ssl:error] [pid 2682523:tid 2682523] (70014)End of file found: [client 216.73.216.199:17809] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:13:07.396636 2026] [cgi:error] [pid 2667117:tid 2667117] [client 20.220.15.170:27141] AH02812: stderr from /home/alismcom/public_html/static1/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:13:08.624202 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:58754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:08.624238 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:08.677380 2026] [ssl:error] [pid 2687973:tid 2687973] (EAI 2)Name or service not known: [client 144.76.19.72:58764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:08.677411 2026] [ssl:error] [pid 2687973:tid 2687973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:10.773824 2026] [access_compat:error] [pid 2684026:tid 2684026] [client 196.75.51.247:64663] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:12.015706 2026] [security2:error] [pid 2679589:tid 2679589] [client 146.56.197.150:39994] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amsVqLri3HdMfe9EwMJkxwAAABw"]
[Thu Jul 30 10:13:12.115311 2026] [ssl:error] [pid 2683628:tid 2683628] (70014)End of file found: [client 216.73.216.199:39545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:13:12.299499 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:46926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:12.299525 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:12.512765 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:46930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:12.512791 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:13.021225 2026] [core:error] [pid 2668491:tid 2668491] (13)Permission denied: [client 216.73.216.199:18537] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/free_calls
[Thu Jul 30 10:13:14.836489 2026] [ssl:error] [pid 2668491:tid 2668491] (70014)End of file found: [client 216.73.216.199:18537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:13:15.568858 2026] [ssl:error] [pid 2677996:tid 2677996] (EAI 2)Name or service not known: [client 144.76.19.72:46940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:15.568890 2026] [ssl:error] [pid 2677996:tid 2677996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:15.624611 2026] [ssl:error] [pid 2686258:tid 2686258] (EAI 2)Name or service not known: [client 144.76.19.72:46948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:15.624649 2026] [ssl:error] [pid 2686258:tid 2686258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:16.541122 2026] [access_compat:error] [pid 2677996:tid 2677996] [client 196.75.51.247:64785] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:18.676943 2026] [ssl:error] [pid 2681815:tid 2681815] (EAI 2)Name or service not known: [client 144.76.19.72:46950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:18.676972 2026] [ssl:error] [pid 2681815:tid 2681815] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:18.733562 2026] [ssl:error] [pid 2687559:tid 2687559] (EAI 2)Name or service not known: [client 144.76.19.72:46964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:18.733600 2026] [ssl:error] [pid 2687559:tid 2687559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:20.497172 2026] [cgi:error] [pid 2683628:tid 2683628] [client 167.103.186.117:63864] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:13:20 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:13:20.497323 2026] [cgi:error] [pid 2683628:tid 2683628] [client 167.103.186.117:63864] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:13:20 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:13:20.497430 2026] [cgi:error] [pid 2683628:tid 2683628] [client 167.103.186.117:63864] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:13:20 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:13:20.497542 2026] [cgi:error] [pid 2683628:tid 2683628] [client 167.103.186.117:63864] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:13:20 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 10:13:20.497651 2026] [cgi:error] [pid 2683628:tid 2683628] [client 167.103.186.117:63864] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 10:13:20 2026] iplist-cgi.pl: Use of uninitialized value $mask in pattern match (m//) at iplist-cgi.pl line 31.
[Thu Jul 30 10:13:21.790376 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:35608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:21.790401 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:21.843924 2026] [ssl:error] [pid 2689232:tid 2689232] (EAI 2)Name or service not known: [client 144.76.19.72:35618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:21.843963 2026] [ssl:error] [pid 2689232:tid 2689232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:22.375476 2026] [access_compat:error] [pid 2684026:tid 2684026] [client 196.75.51.247:64895] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:24.513895 2026] [authz_core:error] [pid 2689232:tid 2689232] [client 66.249.66.35:47670] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:13:24.516559 2026] [authz_core:error] [pid 2689232:tid 2689232] [client 66.249.66.35:47670] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:13:24.900864 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:35624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:24.900892 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:24.958267 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:35630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:24.958293 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:25.696711 2026] [core:error] [pid 2667117:tid 2667117] (13)Permission denied: [client 216.73.216.199:20167] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/cirrus/uevent
[Thu Jul 30 10:13:27.836776 2026] [core:error] [pid 2683628:tid 2683628] [client 66.249.66.39:58740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:13:27.836812 2026] [core:error] [pid 2683628:tid 2683628] [client 66.249.66.39:58740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:13:28.016989 2026] [ssl:error] [pid 2688863:tid 2688863] (EAI 2)Name or service not known: [client 144.76.19.72:35636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:28.017018 2026] [ssl:error] [pid 2688863:tid 2688863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:28.073538 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:35646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:28.073570 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:28.113525 2026] [access_compat:error] [pid 2685298:tid 2685298] [client 196.75.51.247:65088] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:28.435703 2026] [cgi:error] [pid 2671526:tid 2671526] [client 172.202.98.196:36368] AH02812: stderr from /home/hatchw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:13:28.784272 2026] [security2:error] [pid 2668491:tid 2668491] [client 196.118.21.56:38978] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVuLF2_Gxp6LtueDhn-wAAABg"]
[Thu Jul 30 10:13:28.784319 2026] [security2:error] [pid 2668491:tid 2668491] [client 196.118.21.56:38978] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVuLF2_Gxp6LtueDhn-wAAABg"]
[Thu Jul 30 10:13:28.784600 2026] [security2:error] [pid 2668491:tid 2668491] [client 196.118.21.56:38978] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVuLF2_Gxp6LtueDhn-wAAABg"]
[Thu Jul 30 10:13:30.954866 2026] [security2:error] [pid 2684026:tid 2684026] [client 151.249.170.91:2555] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVutGofqIef-FI9gB5oAAAACM"]
[Thu Jul 30 10:13:30.954927 2026] [security2:error] [pid 2684026:tid 2684026] [client 151.249.170.91:2555] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVutGofqIef-FI9gB5oAAAACM"]
[Thu Jul 30 10:13:30.955228 2026] [security2:error] [pid 2684026:tid 2684026] [client 151.249.170.91:2555] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVutGofqIef-FI9gB5oAAAACM"]
[Thu Jul 30 10:13:31.050405 2026] [authz_core:error] [pid 2685157:tid 2685157] [client 66.249.66.34:51813] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:13:31.053054 2026] [authz_core:error] [pid 2685157:tid 2685157] [client 66.249.66.34:51813] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:13:31.127321 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:55736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:31.127351 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:31.185280 2026] [ssl:error] [pid 2686676:tid 2686676] (EAI 2)Name or service not known: [client 144.76.19.72:55752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:31.185307 2026] [ssl:error] [pid 2686676:tid 2686676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:32.727759 2026] [ssl:error] [pid 2667117:tid 2667117] (70014)End of file found: [client 216.73.216.199:20167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:13:33.318414 2026] [ssl:error] [pid 2689294:tid 2689294] (70014)End of file found: [client 216.73.216.199:17334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:13:33.876878 2026] [access_compat:error] [pid 2668491:tid 2668491] [client 196.75.51.247:65331] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:34.267350 2026] [ssl:error] [pid 2689008:tid 2689008] (EAI 2)Name or service not known: [client 144.76.19.72:55760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:34.267391 2026] [ssl:error] [pid 2689008:tid 2689008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:34.325266 2026] [ssl:error] [pid 2681815:tid 2681815] (EAI 2)Name or service not known: [client 144.76.19.72:55776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:34.325293 2026] [ssl:error] [pid 2681815:tid 2681815] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:35.055988 2026] [access_compat:error] [pid 2687040:tid 2687040] [client 5.127.0.46:48278] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:13:35.325368 2026] [security2:error] [pid 2681815:tid 2681815] [client 204.51.36.220:16528] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVvze1pHlCPCqysgXYogAAACI"]
[Thu Jul 30 10:13:35.325427 2026] [security2:error] [pid 2681815:tid 2681815] [client 204.51.36.220:16528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsVvze1pHlCPCqysgXYogAAACI"]
[Thu Jul 30 10:13:35.325719 2026] [security2:error] [pid 2681815:tid 2681815] [client 204.51.36.220:16528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsVvze1pHlCPCqysgXYogAAACI"]
[Thu Jul 30 10:13:37.382297 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:55792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:37.382343 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:37.435448 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:55800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:37.435471 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:39.563021 2026] [authz_core:error] [pid 2671526:tid 2671526] [client 172.202.98.196:36368] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 10:13:39.648328 2026] [access_compat:error] [pid 2689294:tid 2689294] [client 196.75.51.247:49212] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:40.494756 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:23432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:40.494785 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:40.552305 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:23442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:40.552339 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:42.540137 2026] [security2:error] [pid 2684155:tid 2684155] [client 85.208.96.199:38760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/duke-thorson-sealmaster"] [unique_id "amsVxuXVNUyapgHSmXCVbQAAAC4"]
[Thu Jul 30 10:13:42.893325 2026] [security2:error] [pid 2686676:tid 2686676] [client 114.119.167.129:55453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/sitemap-pt-post-2008-02.xml"] [unique_id "amsVxtb6s1co17lv4fXOsgAAAAA"], referer: http://www.localhero.org.uk/sitemap-pt-post-2008-02.xml
[Thu Jul 30 10:13:43.673949 2026] [ssl:error] [pid 2686258:tid 2686258] (EAI 2)Name or service not known: [client 144.76.19.72:23448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:43.673979 2026] [ssl:error] [pid 2686258:tid 2686258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:43.730078 2026] [ssl:error] [pid 2687040:tid 2687040] (EAI 2)Name or service not known: [client 144.76.19.72:23456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:43.730105 2026] [ssl:error] [pid 2687040:tid 2687040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:44.620295 2026] [security2:error] [pid 2686258:tid 2686258] [client 114.119.150.190:25275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/B.25-Uganda-2007-Slow-onset-floods.pdf"] [unique_id "amsVyKXzMcVEgs4NrOP53AAAAAE"]
[Thu Jul 30 10:13:45.477626 2026] [access_compat:error] [pid 2686258:tid 2686258] [client 196.75.51.247:49467] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:45.841140 2026] [lsapi:warn] [pid 2690373:tid 2690373] [client 45.158.164.139:42128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:13:45.841177 2026] [lsapi:warn] [pid 2690373:tid 2690373] [client 45.158.164.139:42128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:13:45.845442 2026] [lsapi:warn] [pid 2683802:tid 2683802] [client 173.252.69.116:36404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:13:45.845483 2026] [lsapi:warn] [pid 2683802:tid 2683802] [client 173.252.69.116:36404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:13:46.014965 2026] [lsapi:warn] [pid 2684155:tid 2684155] [client 45.158.164.139:42156] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:13:46.015007 2026] [lsapi:warn] [pid 2684155:tid 2684155] [client 45.158.164.139:42156] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:13:46.018244 2026] [lsapi:warn] [pid 2677996:tid 2677996] [client 173.252.69.16:53658] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:13:46.018281 2026] [lsapi:warn] [pid 2677996:tid 2677996] [client 173.252.69.16:53658] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:13:46.761603 2026] [ssl:error] [pid 2685298:tid 2685298] (70014)End of file found: [client 216.73.216.199:33008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:13:46.784487 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:23472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:46.784517 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:46.837382 2026] [ssl:error] [pid 2677996:tid 2677996] (EAI 2)Name or service not known: [client 144.76.19.72:23486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:46.837407 2026] [ssl:error] [pid 2677996:tid 2677996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:47.397675 2026] [security2:error] [pid 2687559:tid 2687559] [client 209.141.49.73:42448] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsVy8NLqAx32FhLpSgoIwAAABo"]
[Thu Jul 30 10:13:49.743077 2026] [security2:error] [pid 2683628:tid 2683628] [client 94.154.43.179:27162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amsVzUGyzFcKva_zAn70CQAAAAg"]
[Thu Jul 30 10:13:49.743279 2026] [security2:error] [pid 2683628:tid 2683628] [client 94.154.43.179:27162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amsVzUGyzFcKva_zAn70CQAAAAg"]
[Thu Jul 30 10:13:49.743496 2026] [security2:error] [pid 2683628:tid 2683628] [client 94.154.43.179:27162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amsVzUGyzFcKva_zAn70CQAAAAg"]
[Thu Jul 30 10:13:49.779000 2026] [security2:error] [pid 2690567:tid 2690567] [client 94.154.43.229:27048] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/.env"] [unique_id "amsVzeRNtxixPZBQLyOaCQAAACQ"]
[Thu Jul 30 10:13:49.779218 2026] [security2:error] [pid 2690567:tid 2690567] [client 94.154.43.229:27048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/.env"] [unique_id "amsVzeRNtxixPZBQLyOaCQAAACQ"]
[Thu Jul 30 10:13:49.779484 2026] [security2:error] [pid 2690567:tid 2690567] [client 94.154.43.229:27048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.itsupportinayrshire.webstersltd.com"] [uri "/.env"] [unique_id "amsVzeRNtxixPZBQLyOaCQAAACQ"]
[Thu Jul 30 10:13:49.792251 2026] [security2:error] [pid 2687559:tid 2687559] [client 94.154.43.187:40856] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "itsupportinayrshire.com"] [uri "/.env"] [unique_id "amsVzcNLqAx32FhLpSgoJQAAABo"]
[Thu Jul 30 10:13:49.792395 2026] [security2:error] [pid 2687559:tid 2687559] [client 94.154.43.187:40856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "itsupportinayrshire.com"] [uri "/.env"] [unique_id "amsVzcNLqAx32FhLpSgoJQAAABo"]
[Thu Jul 30 10:13:49.792585 2026] [security2:error] [pid 2687559:tid 2687559] [client 94.154.43.187:40856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "itsupportinayrshire.com"] [uri "/.env"] [unique_id "amsVzcNLqAx32FhLpSgoJQAAABo"]
[Thu Jul 30 10:13:49.894087 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:50654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:49.894112 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:49.951828 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:50662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:49.951851 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:51.281641 2026] [access_compat:error] [pid 2663435:tid 2663435] [client 196.75.51.247:49611] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:51.518751 2026] [authz_core:error] [pid 2682523:tid 2682523] [client 66.249.66.33:50067] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:13:51.521425 2026] [authz_core:error] [pid 2682523:tid 2682523] [client 66.249.66.33:50067] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:13:53.005022 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:50672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:53.005052 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:53.057587 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:50686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:53.057626 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:53.831747 2026] [security2:error] [pid 2690150:tid 2690150] [client 85.208.96.206:26058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2292.0.html"] [unique_id "amsV0R-i0EI98-uMngxPVwAAABs"]
[Thu Jul 30 10:13:55.809482 2026] [lsapi:warn] [pid 2687040:tid 2687040] [client 216.73.216.199:18188] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Constant PASSWORD_DEFAULT already defined in /var/softaculous/moodle41/update_pass.php on line 17\n
[Thu Jul 30 10:13:56.115166 2026] [ssl:error] [pid 2690567:tid 2690567] (EAI 2)Name or service not known: [client 144.76.19.72:50688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:56.115205 2026] [ssl:error] [pid 2690567:tid 2690567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:56.168519 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:50702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:56.168550 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:58.073901 2026] [access_compat:error] [pid 2689996:tid 2689996] [client 196.75.51.247:49765] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:13:58.604813 2026] [access_compat:error] [pid 2668491:tid 2668491] [client 45.158.164.139:42040] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:13:59.221835 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:50710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:59.221868 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:59.277865 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:50716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:13:59.277899 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:13:59.422993 2026] [lsapi:error] [pid 2687040:tid 2687040] [client 216.73.216.199:18188] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Array and string offset access syntax with curly braces is no longer supported in /var/softaculous/lime5/sha256.php on line 258\n
[Thu Jul 30 10:14:00.697869 2026] [core:error] [pid 2685298:tid 2685298] [client 66.249.66.8:48578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:00.697895 2026] [core:error] [pid 2685298:tid 2685298] [client 66.249.66.8:48578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:02.363031 2026] [ssl:error] [pid 2682316:tid 2682316] (EAI 2)Name or service not known: [client 144.76.19.72:23750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:02.363092 2026] [ssl:error] [pid 2682316:tid 2682316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:02.419034 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:23758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:02.419077 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:04.403742 2026] [access_compat:error] [pid 2667412:tid 2667412] [client 196.75.51.247:49944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:05.478809 2026] [ssl:error] [pid 2683802:tid 2683802] (EAI 2)Name or service not known: [client 144.76.19.72:23760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:05.478844 2026] [ssl:error] [pid 2683802:tid 2683802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:05.535886 2026] [ssl:error] [pid 2687973:tid 2687973] (EAI 2)Name or service not known: [client 144.76.19.72:23766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:05.535920 2026] [ssl:error] [pid 2687973:tid 2687973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:06.331959 2026] [core:error] [pid 2683628:tid 2683628] [client 66.249.66.196:64243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:06.331989 2026] [core:error] [pid 2683628:tid 2683628] [client 66.249.66.196:64243] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:06.650946 2026] [security2:error] [pid 2686676:tid 2686676] [client 216.73.216.199:17575] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/pwhistory.conf"] [unique_id "amsV3tb6s1co17lv4fXPGwAAAAA"]
[Thu Jul 30 10:14:06.651253 2026] [security2:error] [pid 2686676:tid 2686676] [client 216.73.216.199:17575] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/pwhistory.conf"] [unique_id "amsV3tb6s1co17lv4fXPGwAAAAA"]
[Thu Jul 30 10:14:06.651488 2026] [security2:error] [pid 2686676:tid 2686676] [client 216.73.216.199:17575] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/pwhistory.conf"] [unique_id "amsV3tb6s1co17lv4fXPGwAAAAA"]
[Thu Jul 30 10:14:08.590805 2026] [ssl:error] [pid 2682316:tid 2682316] (EAI 2)Name or service not known: [client 144.76.19.72:23776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:08.590839 2026] [ssl:error] [pid 2682316:tid 2682316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:08.643947 2026] [ssl:error] [pid 2672524:tid 2672524] (EAI 2)Name or service not known: [client 144.76.19.72:23792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:08.643978 2026] [ssl:error] [pid 2672524:tid 2672524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:09.144139 2026] [security2:error] [pid 2682316:tid 2682316] [client 85.208.96.212:42142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1808.0/prev_next,next.html"] [unique_id "amsV4d8EDKWDxppX53VhAwAAAAQ"]
[Thu Jul 30 10:14:10.194244 2026] [access_compat:error] [pid 2686707:tid 2686707] [client 196.75.51.247:50150] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:11.513364 2026] [ssl:error] [pid 2663435:tid 2663435] (70014)End of file found: [client 216.73.216.199:11651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:11.857633 2026] [ssl:error] [pid 2685157:tid 2685157] (EAI 2)Name or service not known: [client 144.76.19.72:22964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:11.857675 2026] [ssl:error] [pid 2685157:tid 2685157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:11.913053 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:22980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:11.913110 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:12.718113 2026] [ssl:error] [pid 2686676:tid 2686676] (70014)End of file found: [client 216.73.216.199:17575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:13.733584 2026] [core:error] [pid 2679589:tid 2679589] [client 81.246.6.190:63231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:13.733628 2026] [core:error] [pid 2679589:tid 2679589] [client 81.246.6.190:63231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:14.267862 2026] [core:error] [pid 2672570:tid 2672570] [client 81.246.6.190:55018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/over-ons/
[Thu Jul 30 10:14:14.267893 2026] [core:error] [pid 2672570:tid 2672570] [client 81.246.6.190:55018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/over-ons/
[Thu Jul 30 10:14:15.011034 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:22990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:15.011084 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:15.066924 2026] [ssl:error] [pid 2684161:tid 2684161] (EAI 2)Name or service not known: [client 144.76.19.72:23002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:15.066952 2026] [ssl:error] [pid 2684161:tid 2684161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:15.136289 2026] [ssl:error] [pid 2691498:tid 2691498] (70014)End of file found: [client 216.73.216.199:37596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:15.345702 2026] [security2:error] [pid 2690150:tid 2690150] [client 185.191.171.9:31416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9678.0.html"] [unique_id "amsV5x-i0EI98-uMngxPXQAAABs"]
[Thu Jul 30 10:14:15.842125 2026] [authz_core:error] [pid 2668491:tid 2668491] [client 66.249.66.34:43238] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:14:15.844810 2026] [authz_core:error] [pid 2668491:tid 2668491] [client 66.249.66.34:43238] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:14:15.968576 2026] [access_compat:error] [pid 2684155:tid 2684155] [client 196.75.51.247:50227] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:17.818757 2026] [core:error] [pid 2687559:tid 2687559] [client 66.249.93.129:50002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:17.818784 2026] [core:error] [pid 2687559:tid 2687559] [client 66.249.93.129:50002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:17.840432 2026] [core:error] [pid 2691646:tid 2691646] [client 66.249.81.129:49582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:17.840479 2026] [core:error] [pid 2691646:tid 2691646] [client 66.249.81.129:49582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:17.879313 2026] [core:error] [pid 2663435:tid 2663435] [client 162.120.187.182:34759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:17.879340 2026] [core:error] [pid 2663435:tid 2663435] [client 162.120.187.182:34759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:18.048301 2026] [core:error] [pid 2682316:tid 2682316] [client 162.120.188.183:35648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:18.048340 2026] [core:error] [pid 2682316:tid 2682316] [client 162.120.188.183:35648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:18.119895 2026] [ssl:error] [pid 2685298:tid 2685298] (EAI 2)Name or service not known: [client 144.76.19.72:23004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:18.119922 2026] [ssl:error] [pid 2685298:tid 2685298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:18.170987 2026] [ssl:error] [pid 2686707:tid 2686707] (EAI 2)Name or service not known: [client 144.76.19.72:23016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:18.171023 2026] [ssl:error] [pid 2686707:tid 2686707] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:18.437300 2026] [access_compat:error] [pid 2687559:tid 2687559] [client 145.223.131.188:39870] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/vermatik-4-in-1-pest-repeller-review
[Thu Jul 30 10:14:18.437409 2026] [access_compat:error] [pid 2687559:tid 2687559] [client 145.223.131.188:39870] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:14:18.778195 2026] [lsapi:warn] [pid 2691465:tid 2691465] [client 216.73.216.199:19330] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Constant PASSWORD_DEFAULT already defined in /var/softaculous/xmb/update_pass.php on line 17\n
[Thu Jul 30 10:14:19.167373 2026] [authz_core:error] [pid 2682316:tid 2682316] [client 66.249.66.33:54202] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:14:19.170059 2026] [authz_core:error] [pid 2682316:tid 2682316] [client 66.249.66.33:54202] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:14:20.281259 2026] [ssl:error] [pid 2691465:tid 2691465] (70014)End of file found: [client 216.73.216.199:19330] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:20.392330 2026] [core:error] [pid 2686258:tid 2686258] [client 81.246.6.190:54457] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:20.392357 2026] [core:error] [pid 2686258:tid 2686258] [client 81.246.6.190:54457] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:20.652169 2026] [core:error] [pid 2682457:tid 2682457] [client 66.249.64.171:56571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:20.652198 2026] [core:error] [pid 2682457:tid 2682457] [client 66.249.64.171:56571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:20.952288 2026] [core:error] [pid 2687559:tid 2687559] [client 81.246.6.190:50951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/contact/
[Thu Jul 30 10:14:20.952320 2026] [core:error] [pid 2687559:tid 2687559] [client 81.246.6.190:50951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/contact/
[Thu Jul 30 10:14:21.228949 2026] [ssl:error] [pid 2691498:tid 2691498] (EAI 2)Name or service not known: [client 144.76.19.72:53658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:21.228987 2026] [ssl:error] [pid 2691498:tid 2691498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:21.282532 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:53668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:21.282561 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:21.481371 2026] [ssl:error] [pid 2667412:tid 2667412] (70014)End of file found: [client 216.73.216.199:1991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:21.749056 2026] [access_compat:error] [pid 2686258:tid 2686258] [client 196.75.51.247:50444] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:24.338165 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:53672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:24.338194 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:24.394370 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:53688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:24.394393 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:24.398158 2026] [security2:error] [pid 2684952:tid 2684952] [client 168.222.198.94:58634] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsV8JBKaepTzPO3AWeNhgAAACk"]
[Thu Jul 30 10:14:24.398199 2026] [security2:error] [pid 2684952:tid 2684952] [client 168.222.198.94:58634] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsV8JBKaepTzPO3AWeNhgAAACk"]
[Thu Jul 30 10:14:24.398465 2026] [security2:error] [pid 2684952:tid 2684952] [client 168.222.198.94:58634] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsV8JBKaepTzPO3AWeNhgAAACk"]
[Thu Jul 30 10:14:25.128222 2026] [security2:error] [pid 2682316:tid 2682316] [client 114.119.142.20:24749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/wp-content/uploads/2013/01/audacious_faith-300x200.jpg"] [unique_id "amsV8d8EDKWDxppX53VhCQAAAAQ"], referer: http://www.erskinenazarene.co.uk/wp-content/uploads/2013/01/audacious_faith-300x200.jpg
[Thu Jul 30 10:14:26.273006 2026] [security2:error] [pid 2684161:tid 2684161] [client 114.119.142.20:24757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/wp-content/uploads/2013/01/audacious_faith-300x200.jpg"] [unique_id "amsV8mXdmh_SuA2SwPM20QAAADY"], referer: http://www.erskinenazarene.co.uk/wp-content/uploads/2013/01/audacious_faith-300x200.jpg
[Thu Jul 30 10:14:27.117776 2026] [security2:error] [pid 2689996:tid 2689996] [client 123.20.237.31:32873] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsV88twELoM1Htp8Wd2OQAAAAs"]
[Thu Jul 30 10:14:27.117820 2026] [security2:error] [pid 2689996:tid 2689996] [client 123.20.237.31:32873] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsV88twELoM1Htp8Wd2OQAAAAs"]
[Thu Jul 30 10:14:27.118053 2026] [security2:error] [pid 2689996:tid 2689996] [client 123.20.237.31:32873] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsV88twELoM1Htp8Wd2OQAAAAs"]
[Thu Jul 30 10:14:27.447505 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:53700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:27.447534 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:27.499348 2026] [access_compat:error] [pid 2682457:tid 2682457] [client 196.75.51.247:50645] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:27.503671 2026] [ssl:error] [pid 2685157:tid 2685157] (EAI 2)Name or service not known: [client 144.76.19.72:53708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:27.503694 2026] [ssl:error] [pid 2685157:tid 2685157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:27.847661 2026] [ssl:error] [pid 2691499:tid 2691499] (70014)End of file found: [client 216.73.216.199:7259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:28.339826 2026] [ssl:error] [pid 2691465:tid 2691465] (70014)End of file found: [client 216.73.216.199:3173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:28.542105 2026] [core:error] [pid 2689996:tid 2689996] [client 162.120.187.55:55659] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:28.542130 2026] [core:error] [pid 2689996:tid 2689996] [client 162.120.187.55:55659] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/
[Thu Jul 30 10:14:30.267740 2026] [ssl:error] [pid 2685157:tid 2685157] (70014)End of file found: [client 216.73.216.199:36580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:30.561108 2026] [ssl:error] [pid 2692035:tid 2692035] (EAI 2)Name or service not known: [client 144.76.19.72:40666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:30.561150 2026] [ssl:error] [pid 2692035:tid 2692035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:30.619555 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:40674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:30.619586 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:31.033552 2026] [security2:error] [pid 2675258:tid 2675258] [client 222.253.226.164:38851] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsV9wuaUZYh9Qrcv8b5OAAAAAU"]
[Thu Jul 30 10:14:31.033610 2026] [security2:error] [pid 2675258:tid 2675258] [client 222.253.226.164:38851] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsV9wuaUZYh9Qrcv8b5OAAAAAU"]
[Thu Jul 30 10:14:31.033868 2026] [security2:error] [pid 2675258:tid 2675258] [client 222.253.226.164:38851] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsV9wuaUZYh9Qrcv8b5OAAAAAU"]
[Thu Jul 30 10:14:33.178351 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:58521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:33.254302 2026] [access_compat:error] [pid 2691498:tid 2691498] [client 196.75.51.247:50922] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:33.684767 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:40676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:33.684801 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:33.740810 2026] [ssl:error] [pid 2668491:tid 2668491] (EAI 2)Name or service not known: [client 144.76.19.72:40692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:33.740838 2026] [ssl:error] [pid 2668491:tid 2668491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:34.037271 2026] [access_compat:error] [pid 2691466:tid 2691466] [client 145.223.130.178:58014] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/this-is-a-free-national-awareness-message
[Thu Jul 30 10:14:34.037372 2026] [access_compat:error] [pid 2691466:tid 2691466] [client 145.223.130.178:58014] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:14:35.081743 2026] [core:error] [pid 2684155:tid 2684155] (13)Permission denied: [client 216.73.216.199:56319] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/free_calls
[Thu Jul 30 10:14:36.592778 2026] [ssl:error] [pid 2684155:tid 2684155] (70014)End of file found: [client 216.73.216.199:56319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:36.794710 2026] [ssl:error] [pid 2681738:tid 2681738] (EAI 2)Name or service not known: [client 144.76.19.72:40696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:36.794745 2026] [ssl:error] [pid 2681738:tid 2681738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:36.847789 2026] [ssl:error] [pid 2691466:tid 2691466] (EAI 2)Name or service not known: [client 144.76.19.72:40712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:36.847819 2026] [ssl:error] [pid 2691466:tid 2691466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:36.893029 2026] [ssl:error] [pid 2685157:tid 2685157] (70014)End of file found: [client 216.73.216.199:29593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:39.013141 2026] [ssl:error] [pid 2686258:tid 2686258] (70014)End of file found: [client 216.73.216.199:20036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:39.068221 2026] [access_compat:error] [pid 2683628:tid 2683628] [client 196.75.51.247:51174] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:39.904442 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:38310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:39.904471 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:39.957249 2026] [ssl:error] [pid 2691465:tid 2691465] (EAI 2)Name or service not known: [client 144.76.19.72:38322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:39.957284 2026] [ssl:error] [pid 2691465:tid 2691465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:40.947917 2026] [authz_core:error] [pid 2672570:tid 2672570] [client 66.249.66.33:37825] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:14:40.950567 2026] [authz_core:error] [pid 2672570:tid 2672570] [client 66.249.66.33:37825] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:14:42.835079 2026] [security2:error] [pid 2685157:tid 2685157] [client 114.119.154.186:51455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-742.xml"] [unique_id "amsWAjOvpTjcqGhlUHy3_wAAACw"]
[Thu Jul 30 10:14:42.897982 2026] [core:error] [pid 2692035:tid 2692035] [client 66.249.66.194:61816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:42.898012 2026] [core:error] [pid 2692035:tid 2692035] [client 66.249.66.194:61816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:14:42.932023 2026] [ssl:error] [pid 2684155:tid 2684155] (70014)End of file found: [client 216.73.216.199:12302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:43.014550 2026] [ssl:error] [pid 2682316:tid 2682316] (EAI 2)Name or service not known: [client 144.76.19.72:38328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:43.014574 2026] [ssl:error] [pid 2682316:tid 2682316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:43.067862 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:38338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:43.067890 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:43.312765 2026] [security2:error] [pid 2679589:tid 2679589] [client 85.208.96.206:42788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/scooter's-prickly-pear-infusion-recipe"] [unique_id "amsWA7ri3HdMfe9EwMJk6QAAABw"]
[Thu Jul 30 10:14:43.757330 2026] [access_compat:error] [pid 2685298:tid 2685298] [client 20.104.16.169:52363] AH01797: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-content/uploads/ps_auto_sitemap/
[Thu Jul 30 10:14:44.888656 2026] [access_compat:error] [pid 2682316:tid 2682316] [client 196.75.51.247:51376] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:45.776308 2026] [ssl:error] [pid 2691434:tid 2691434] (70014)End of file found: [client 216.73.216.199:14332] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:46.125027 2026] [ssl:error] [pid 2689996:tid 2689996] (EAI 2)Name or service not known: [client 144.76.19.72:38346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:46.125076 2026] [ssl:error] [pid 2689996:tid 2689996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:46.178272 2026] [ssl:error] [pid 2692264:tid 2692264] (EAI 2)Name or service not known: [client 144.76.19.72:38362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:46.178303 2026] [ssl:error] [pid 2692264:tid 2692264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:46.680890 2026] [ssl:error] [pid 2668491:tid 2668491] (70014)End of file found: [client 216.73.216.199:50387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:47.768786 2026] [security2:error] [pid 2671526:tid 2671526] [client 95.173.103.120:48068] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsWB3T6qvko5Z25Y8MFvAAAACE"]
[Thu Jul 30 10:14:47.879199 2026] [security2:error] [pid 2691646:tid 2691646] [client 47.128.125.141:51310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/tag/blog/"] [unique_id "amsWB2N0t5o_156cIourRAAAACQ"]
[Thu Jul 30 10:14:49.233342 2026] [ssl:error] [pid 2691497:tid 2691497] (EAI 2)Name or service not known: [client 144.76.19.72:38368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:49.233373 2026] [ssl:error] [pid 2691497:tid 2691497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:49.291120 2026] [ssl:error] [pid 2691646:tid 2691646] (EAI 2)Name or service not known: [client 144.76.19.72:38380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:49.291155 2026] [ssl:error] [pid 2691646:tid 2691646] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:49.421042 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:2866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:50.625327 2026] [access_compat:error] [pid 2691498:tid 2691498] [client 196.75.51.247:51666] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:50.895511 2026] [authz_core:error] [pid 2683837:tid 2683837] [client 94.109.3.232:18131] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log, referer: https://www.google.com/
[Thu Jul 30 10:14:50.896182 2026] [authz_core:error] [pid 2683837:tid 2683837] [client 94.109.3.232:18131] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini, referer: https://www.google.com/
[Thu Jul 30 10:14:51.426931 2026] [core:error] [pid 2683837:tid 2683837] [client 94.109.3.232:18131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apotheekcandidejacobs.be/?ved=2ahUKEwiGl_Lsh_qVAxVicKQEHb3xIEsQgU96BAgREAw
[Thu Jul 30 10:14:51.426958 2026] [core:error] [pid 2683837:tid 2683837] [client 94.109.3.232:18131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apotheekcandidejacobs.be/?ved=2ahUKEwiGl_Lsh_qVAxVicKQEHb3xIEsQgU96BAgREAw
[Thu Jul 30 10:14:51.873507 2026] [ssl:error] [pid 2691466:tid 2691466] (70014)End of file found: [client 216.73.216.199:15498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:52.347355 2026] [security2:error] [pid 2685298:tid 2685298] [client 43.165.65.117:45236] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsWDN6ote5PWFCaBJBG_AAAADU"], referer: http://www.rock-ola.co.uk
[Thu Jul 30 10:14:52.349149 2026] [ssl:error] [pid 2692000:tid 2692000] (EAI 2)Name or service not known: [client 144.76.19.72:47730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:52.349178 2026] [ssl:error] [pid 2692000:tid 2692000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:52.406831 2026] [ssl:error] [pid 2691434:tid 2691434] (EAI 2)Name or service not known: [client 144.76.19.72:47742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:52.406878 2026] [ssl:error] [pid 2691434:tid 2691434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:53.988676 2026] [security2:error] [pid 2663435:tid 2663435] [client 43.165.65.117:36442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsWDSNHRWAt2oEI0OxDIwAAADQ"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 10:14:54.567273 2026] [core:error] [pid 2688863:tid 2688863] (13)Permission denied: [client 216.73.216.199:47243] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/objs_per_slab
[Thu Jul 30 10:14:55.477280 2026] [ssl:error] [pid 2688863:tid 2688863] (70014)End of file found: [client 216.73.216.199:47243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:14:55.490535 2026] [ssl:error] [pid 2668491:tid 2668491] (EAI 2)Name or service not known: [client 144.76.19.72:47754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:55.490559 2026] [ssl:error] [pid 2668491:tid 2668491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:55.548027 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:47760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:55.548055 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:56.377499 2026] [access_compat:error] [pid 2685157:tid 2685157] [client 196.75.51.247:51959] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:14:58.607185 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:47774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:58.607219 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:14:58.659654 2026] [ssl:error] [pid 2686258:tid 2686258] (EAI 2)Name or service not known: [client 144.76.19.72:47788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:14:58.659685 2026] [ssl:error] [pid 2686258:tid 2686258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:00.421344 2026] [cgi:error] [pid 2685298:tid 2685298] [client 20.104.22.47:56413] AH02812: stderr from /home/purple/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:15:01.716124 2026] [ssl:error] [pid 2689996:tid 2689996] (EAI 2)Name or service not known: [client 144.76.19.72:38258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:01.716153 2026] [ssl:error] [pid 2689996:tid 2689996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:01.769056 2026] [ssl:error] [pid 2689996:tid 2689996] (EAI 2)Name or service not known: [client 144.76.19.72:38266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:01.769094 2026] [ssl:error] [pid 2689996:tid 2689996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:02.180800 2026] [access_compat:error] [pid 2668491:tid 2668491] [client 196.75.51.247:52225] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:02.708810 2026] [access_compat:error] [pid 2693039:tid 2693039] [client 45.158.164.139:57990] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:15:04.178329 2026] [security2:error] [pid 2693039:tid 2693039] [client 123.207.65.62:38122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-narvi.com"] [uri "/"] [unique_id "amsWGFp_9m4FIy0Iw1asRwAAACU"]
[Thu Jul 30 10:15:04.255589 2026] [ssl:error] [pid 2692000:tid 2692000] (70014)End of file found: [client 216.73.216.199:41878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:04.890816 2026] [ssl:error] [pid 2693120:tid 2693120] (EAI 2)Name or service not known: [client 144.76.19.72:38280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:04.890869 2026] [ssl:error] [pid 2693120:tid 2693120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:04.946137 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:38294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:04.946174 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:07.873446 2026] [lsapi:error] [pid 2691465:tid 2691465] [client 216.73.216.199:3528] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Clipbucket_db" not found in /var/softaculous/clip/dbconnect.php:22\nStack trace:\n#0 {main}\n  thrown in /var/softaculous/clip/dbconnect.php on line 22\n
[Thu Jul 30 10:15:08.039485 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:38312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:08.039510 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:08.094099 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:38324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:08.094125 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:08.508376 2026] [access_compat:error] [pid 2692034:tid 2692034] [client 196.75.51.247:52461] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:09.563318 2026] [security2:error] [pid 2683802:tid 2683802] [client 170.106.180.246:53002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chateausaintjeannet.org"] [uri "/"] [unique_id "amsWHdqnUPrsBMrj3SBJyQAAABE"]
[Thu Jul 30 10:15:11.147321 2026] [ssl:error] [pid 2693117:tid 2693117] (EAI 2)Name or service not known: [client 144.76.19.72:42538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:11.147350 2026] [ssl:error] [pid 2693117:tid 2693117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:11.179759 2026] [ssl:error] [pid 2691646:tid 2691646] (70014)End of file found: [client 216.73.216.199:9742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:11.199400 2026] [ssl:error] [pid 2692963:tid 2692963] (EAI 2)Name or service not known: [client 144.76.19.72:42546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:11.199428 2026] [ssl:error] [pid 2692963:tid 2692963] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:12.087180 2026] [ssl:error] [pid 2690150:tid 2690150] (70014)End of file found: [client 216.73.216.199:18855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:12.684459 2026] [ssl:error] [pid 2663435:tid 2663435] (70014)End of file found: [client 216.73.216.199:31865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:13.066397 2026] [authz_core:error] [pid 2685298:tid 2685298] [client 20.104.22.47:56413] AH01630: client denied by server configuration: /home/purple/public_html/php.ini
[Thu Jul 30 10:15:14.254445 2026] [access_compat:error] [pid 2679589:tid 2679589] [client 196.75.51.247:52598] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:14.255942 2026] [ssl:error] [pid 2693117:tid 2693117] (EAI 2)Name or service not known: [client 144.76.19.72:42554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:14.255965 2026] [ssl:error] [pid 2693117:tid 2693117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:14.313113 2026] [ssl:error] [pid 2692963:tid 2692963] (EAI 2)Name or service not known: [client 144.76.19.72:42556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:14.313140 2026] [ssl:error] [pid 2692963:tid 2692963] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:15.468432 2026] [security2:error] [pid 2693117:tid 2693117] [client 177.181.5.115:26922] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWI8A-EK9-PvzQAjtSGgAAADA"]
[Thu Jul 30 10:15:15.468483 2026] [security2:error] [pid 2693117:tid 2693117] [client 177.181.5.115:26922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWI8A-EK9-PvzQAjtSGgAAADA"]
[Thu Jul 30 10:15:15.468801 2026] [security2:error] [pid 2693117:tid 2693117] [client 177.181.5.115:26922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWI8A-EK9-PvzQAjtSGgAAADA"]
[Thu Jul 30 10:15:15.598418 2026] [ssl:error] [pid 2691498:tid 2691498] (70014)End of file found: [client 216.73.216.199:17542] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:16.798154 2026] [ssl:error] [pid 2685157:tid 2685157] (70014)End of file found: [client 216.73.216.199:36027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:17.287895 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:50315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:17.411588 2026] [ssl:error] [pid 2681738:tid 2681738] (EAI 2)Name or service not known: [client 144.76.19.72:42562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:17.411627 2026] [ssl:error] [pid 2681738:tid 2681738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:17.466121 2026] [ssl:error] [pid 2671526:tid 2671526] (EAI 2)Name or service not known: [client 144.76.19.72:42564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:17.466158 2026] [ssl:error] [pid 2671526:tid 2671526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:18.367054 2026] [ssl:error] [pid 2683802:tid 2683802] (70014)End of file found: [client 216.73.216.199:29170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:19.234078 2026] [security2:error] [pid 2691465:tid 2691465] [client 150.5.134.169:10913] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWJ-XuAK0_nCCHZu-k0wAAAAc"]
[Thu Jul 30 10:15:19.234125 2026] [security2:error] [pid 2691465:tid 2691465] [client 150.5.134.169:10913] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWJ-XuAK0_nCCHZu-k0wAAAAc"]
[Thu Jul 30 10:15:19.234384 2026] [security2:error] [pid 2691465:tid 2691465] [client 150.5.134.169:10913] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWJ-XuAK0_nCCHZu-k0wAAAAc"]
[Thu Jul 30 10:15:19.309536 2026] [ssl:error] [pid 2693122:tid 2693122] (70014)End of file found: [client 216.73.216.199:30571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:20.034822 2026] [access_compat:error] [pid 2672570:tid 2672570] [client 196.75.51.247:52739] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:20.319270 2026] [ssl:error] [pid 2690150:tid 2690150] (70014)End of file found: [client 216.73.216.199:51719] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:20.518375 2026] [ssl:error] [pid 2691465:tid 2691465] (EAI 2)Name or service not known: [client 144.76.19.72:56234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:20.518409 2026] [ssl:error] [pid 2691465:tid 2691465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:20.572947 2026] [ssl:error] [pid 2681738:tid 2681738] (EAI 2)Name or service not known: [client 144.76.19.72:56246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:20.572991 2026] [ssl:error] [pid 2681738:tid 2681738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:21.817156 2026] [security2:error] [pid 2691498:tid 2691498] [client 150.5.134.169:45203] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWKVtAktaRiTwsTQqvAgAAACA"]
[Thu Jul 30 10:15:21.817209 2026] [security2:error] [pid 2691498:tid 2691498] [client 150.5.134.169:45203] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWKVtAktaRiTwsTQqvAgAAACA"]
[Thu Jul 30 10:15:21.817463 2026] [security2:error] [pid 2691498:tid 2691498] [client 150.5.134.169:45203] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWKVtAktaRiTwsTQqvAgAAACA"]
[Thu Jul 30 10:15:23.672471 2026] [ssl:error] [pid 2693121:tid 2693121] (EAI 2)Name or service not known: [client 144.76.19.72:56254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:23.672510 2026] [ssl:error] [pid 2693121:tid 2693121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:23.730536 2026] [ssl:error] [pid 2691498:tid 2691498] (EAI 2)Name or service not known: [client 144.76.19.72:56270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:23.730566 2026] [ssl:error] [pid 2691498:tid 2691498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:23.841543 2026] [ssl:error] [pid 2691465:tid 2691465] (70014)End of file found: [client 216.73.216.199:8697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:25.819241 2026] [access_compat:error] [pid 2690150:tid 2690150] [client 196.75.51.247:53081] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:26.810448 2026] [ssl:error] [pid 2692000:tid 2692000] (EAI 2)Name or service not known: [client 144.76.19.72:56274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:26.810474 2026] [ssl:error] [pid 2692000:tid 2692000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:26.863306 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:56286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:26.863330 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:29.920704 2026] [ssl:error] [pid 2683802:tid 2683802] (EAI 2)Name or service not known: [client 144.76.19.72:29108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:29.920743 2026] [ssl:error] [pid 2683802:tid 2683802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:29.973509 2026] [ssl:error] [pid 2691646:tid 2691646] (EAI 2)Name or service not known: [client 144.76.19.72:29118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:29.973542 2026] [ssl:error] [pid 2691646:tid 2691646] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:31.642391 2026] [access_compat:error] [pid 2693040:tid 2693040] [client 196.75.51.247:53464] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:31.955248 2026] [authz_core:error] [pid 2685298:tid 2685298] [client 20.104.22.47:56413] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/maint/error_log
[Thu Jul 30 10:15:32.574801 2026] [core:error] [pid 2692963:tid 2692963] (13)Permission denied: [client 216.73.216.199:30740] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/net_namespace/objects_partial
[Thu Jul 30 10:15:33.026500 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:29130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:33.026530 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:33.077510 2026] [ssl:error] [pid 2684877:tid 2684877] (EAI 2)Name or service not known: [client 144.76.19.72:29134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:33.077536 2026] [ssl:error] [pid 2684877:tid 2684877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:33.178159 2026] [core:error] [pid 2692963:tid 2692963] (13)Permission denied: [client 216.73.216.199:30740] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu3/crash_notes
[Thu Jul 30 10:15:33.779619 2026] [ssl:error] [pid 2692963:tid 2692963] (70014)End of file found: [client 216.73.216.199:30740] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:34.079474 2026] [core:error] [pid 2691499:tid 2691499] (13)Permission denied: [client 216.73.216.199:26005] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/netconsole/sections/__param
[Thu Jul 30 10:15:34.483841 2026] [authz_core:error] [pid 2693122:tid 2693122] [client 66.249.66.15:63814] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:15:34.486544 2026] [authz_core:error] [pid 2693122:tid 2693122] [client 66.249.66.15:63814] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:15:36.147895 2026] [ssl:error] [pid 2691466:tid 2691466] (EAI 2)Name or service not known: [client 144.76.19.72:29146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:36.147930 2026] [ssl:error] [pid 2691466:tid 2691466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:36.189326 2026] [access_compat:error] [pid 2691496:tid 2691496] [client 20.104.16.169:29553] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 10:15:36.200722 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:29152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:36.200743 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:36.792272 2026] [ssl:error] [pid 2691499:tid 2691499] (70014)End of file found: [client 216.73.216.199:26005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:37.490985 2026] [access_compat:error] [pid 2681737:tid 2681737] [client 196.75.51.247:53613] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:38.003832 2026] [ssl:error] [pid 2684877:tid 2684877] (70014)End of file found: [client 216.73.216.199:25047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:39.254044 2026] [ssl:error] [pid 2693123:tid 2693123] (EAI 2)Name or service not known: [client 144.76.19.72:29168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:39.254108 2026] [ssl:error] [pid 2693123:tid 2693123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:39.307470 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:29176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:39.307499 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:40.361977 2026] [security2:error] [pid 2693040:tid 2693040] [client 85.208.96.194:19258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2919.0/prev_next,next.html"] [unique_id "amsWPKiJBtd3tOOGvYiVlwAAACg"]
[Thu Jul 30 10:15:40.422717 2026] [ssl:error] [pid 2682316:tid 2682316] (70014)End of file found: [client 216.73.216.199:35419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:41.261051 2026] [security2:error] [pid 2692263:tid 2692263] [client 43.166.128.187:49054] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsWPcU_JuFK_Fs1st9ruwAAACY"]
[Thu Jul 30 10:15:41.862810 2026] [core:error] [pid 2691465:tid 2691465] [client 66.249.64.172:50460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:15:41.862839 2026] [core:error] [pid 2691465:tid 2691465] [client 66.249.64.172:50460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:15:42.361404 2026] [ssl:error] [pid 2693042:tid 2693042] (EAI 2)Name or service not known: [client 144.76.19.72:61230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:42.361440 2026] [ssl:error] [pid 2693042:tid 2693042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:42.419655 2026] [ssl:error] [pid 2684026:tid 2684026] (EAI 2)Name or service not known: [client 144.76.19.72:61232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:42.419734 2026] [ssl:error] [pid 2684026:tid 2684026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:42.570834 2026] [security2:error] [pid 2693123:tid 2693123] [client 43.166.128.187:57794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsWPoUL5_HNFV7aDDJBmQAAADg"], referer: http://berehap.be
[Thu Jul 30 10:15:42.810155 2026] [core:error] [pid 2691498:tid 2691498] [client 66.249.66.169:39785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:15:42.810188 2026] [core:error] [pid 2691498:tid 2691498] [client 66.249.66.169:39785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:15:43.133610 2026] [ssl:error] [pid 2692035:tid 2692035] (70014)End of file found: [client 216.73.216.199:14081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:43.220622 2026] [access_compat:error] [pid 2683628:tid 2683628] [client 196.75.51.247:53876] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:43.804912 2026] [security2:error] [pid 2691499:tid 2691499] [client 85.208.96.194:19264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/electrical-surplus-buyers"] [unique_id "amsWP_9SF5oW3ENPoMtm3QAAACI"]
[Thu Jul 30 10:15:44.037664 2026] [ssl:error] [pid 2692263:tid 2692263] (70014)End of file found: [client 216.73.216.199:11440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:44.687061 2026] [security2:error] [pid 2684877:tid 2684877] [client 43.166.128.187:58596] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsWQOofoAf1ECjHHdH9cwAAABM"], referer: https://www.berehap.be/
[Thu Jul 30 10:15:45.475111 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:61238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:45.475145 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:45.591511 2026] [ssl:error] [pid 2693123:tid 2693123] (EAI 2)Name or service not known: [client 144.76.19.72:61246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:45.591556 2026] [ssl:error] [pid 2693123:tid 2693123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:46.146293 2026] [ssl:error] [pid 2691499:tid 2691499] (70014)End of file found: [client 216.73.216.199:38485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:46.773474 2026] [core:error] [pid 2692963:tid 2692963] [client 74.7.241.186:41182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:15:46.773500 2026] [core:error] [pid 2692963:tid 2692963] [client 74.7.241.186:41182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:15:46.949257 2026] [security2:error] [pid 2682316:tid 2682316] [client 198.244.168.3:52138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/joanne-tarrant/feed/"] [unique_id "amsWQt8EDKWDxppX53VhggAAAAQ"]
[Thu Jul 30 10:15:48.646965 2026] [ssl:error] [pid 2682316:tid 2682316] (EAI 2)Name or service not known: [client 144.76.19.72:61262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:48.647014 2026] [ssl:error] [pid 2682316:tid 2682316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:48.699364 2026] [ssl:error] [pid 2687040:tid 2687040] (EAI 2)Name or service not known: [client 144.76.19.72:61268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:48.699398 2026] [ssl:error] [pid 2687040:tid 2687040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:48.934047 2026] [security2:error] [pid 2679589:tid 2679589] [client 51.89.129.242:17112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "londonkinesiology.com"] [uri "/robots.txt"] [unique_id "amsWRLri3HdMfe9EwMJk-gAAABw"]
[Thu Jul 30 10:15:49.018411 2026] [access_compat:error] [pid 2691465:tid 2691465] [client 196.75.51.247:54164] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:49.867972 2026] [authz_core:error] [pid 2692263:tid 2692263] [client 216.73.216.199:35377] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log
[Thu Jul 30 10:15:50.016543 2026] [security2:error] [pid 2691498:tid 2691498] [client 198.244.168.2:50296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "londonkinesiology.com"] [uri "/"] [unique_id "amsWRltAktaRiTwsTQqvCAAAACA"]
[Thu Jul 30 10:15:51.752981 2026] [ssl:error] [pid 2692263:tid 2692263] (EAI 2)Name or service not known: [client 144.76.19.72:40790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:51.753019 2026] [ssl:error] [pid 2692263:tid 2692263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:51.844484 2026] [ssl:error] [pid 2684877:tid 2684877] (EAI 2)Name or service not known: [client 144.76.19.72:40804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:51.844532 2026] [ssl:error] [pid 2684877:tid 2684877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:52.079937 2026] [authz_core:error] [pid 2691498:tid 2691498] [client 216.73.216.199:52859] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Transport/error_log
[Thu Jul 30 10:15:52.596367 2026] [ssl:error] [pid 2663435:tid 2663435] (70014)End of file found: [client 216.73.216.199:52023] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:53.184455 2026] [ssl:error] [pid 2684026:tid 2684026] (70014)End of file found: [client 216.73.216.199:26003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:54.868416 2026] [access_compat:error] [pid 2693040:tid 2693040] [client 196.75.51.247:54420] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:15:54.899282 2026] [ssl:error] [pid 2694008:tid 2694008] (EAI 2)Name or service not known: [client 144.76.19.72:40816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:54.899307 2026] [ssl:error] [pid 2694008:tid 2694008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:54.951612 2026] [ssl:error] [pid 2694830:tid 2694830] (EAI 2)Name or service not known: [client 144.76.19.72:40818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:54.951649 2026] [ssl:error] [pid 2694830:tid 2694830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:54.993371 2026] [ssl:error] [pid 2692263:tid 2692263] (70014)End of file found: [client 216.73.216.199:56550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:58.007433 2026] [ssl:error] [pid 2694009:tid 2694009] (EAI 2)Name or service not known: [client 144.76.19.72:40820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:58.007468 2026] [ssl:error] [pid 2694009:tid 2694009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:58.060550 2026] [ssl:error] [pid 2691465:tid 2691465] (EAI 2)Name or service not known: [client 144.76.19.72:40826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:15:58.060579 2026] [ssl:error] [pid 2691465:tid 2691465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:15:59.302263 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:10236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:15:59.598944 2026] [ssl:error] [pid 2693042:tid 2693042] (70014)End of file found: [client 216.73.216.199:10416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:00.693331 2026] [access_compat:error] [pid 2693122:tid 2693122] [client 196.75.51.247:54771] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:00.820009 2026] [ssl:error] [pid 2692035:tid 2692035] (70014)End of file found: [client 216.73.216.199:47035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:01.117490 2026] [ssl:error] [pid 2692263:tid 2692263] (EAI 2)Name or service not known: [client 144.76.19.72:32940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:01.117519 2026] [ssl:error] [pid 2692263:tid 2692263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:01.173647 2026] [ssl:error] [pid 2684877:tid 2684877] (EAI 2)Name or service not known: [client 144.76.19.72:32956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:01.173693 2026] [ssl:error] [pid 2684877:tid 2684877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:04.247949 2026] [ssl:error] [pid 2692263:tid 2692263] (EAI 2)Name or service not known: [client 144.76.19.72:32958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:04.247983 2026] [ssl:error] [pid 2692263:tid 2692263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:04.333489 2026] [ssl:error] [pid 2663435:tid 2663435] (EAI 2)Name or service not known: [client 144.76.19.72:32972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:04.333521 2026] [ssl:error] [pid 2663435:tid 2663435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:04.657461 2026] [ssl:error] [pid 2693040:tid 2693040] (70014)End of file found: [client 216.73.216.199:65491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:04.892655 2026] [security2:error] [pid 2693121:tid 2693121] [client 185.191.171.3:57122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9328.0.html"] [unique_id "amsWVI1oCB4tL6jBxP0rnwAAADY"]
[Thu Jul 30 10:16:05.282605 2026] [security2:error] [pid 2681738:tid 2681738] [client 101.33.55.204:39750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.loca.co.uk"] [uri "/"] [unique_id "amsWVW1CGRxKXyU4ZXzv6QAAABk"]
[Thu Jul 30 10:16:05.983367 2026] [ssl:error] [pid 2683628:tid 2683628] (70014)End of file found: [client 216.73.216.199:57919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:06.468722 2026] [access_compat:error] [pid 2684026:tid 2684026] [client 196.75.51.247:54922] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:06.484261 2026] [ssl:error] [pid 2693042:tid 2693042] (70014)End of file found: [client 216.73.216.199:24709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:07.004443 2026] [access_compat:error] [pid 2693121:tid 2693121] [client 45.158.164.139:49788] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:16:07.405117 2026] [ssl:error] [pid 2692035:tid 2692035] (EAI 2)Name or service not known: [client 144.76.19.72:32988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:07.405160 2026] [ssl:error] [pid 2692035:tid 2692035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:07.461498 2026] [ssl:error] [pid 2686258:tid 2686258] (EAI 2)Name or service not known: [client 144.76.19.72:32992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:07.461525 2026] [ssl:error] [pid 2686258:tid 2686258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:10.170823 2026] [ssl:error] [pid 2692035:tid 2692035] (70014)End of file found: [client 216.73.216.199:27253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:10.517580 2026] [ssl:error] [pid 2694830:tid 2694830] (EAI 2)Name or service not known: [client 144.76.19.72:23984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:10.517623 2026] [ssl:error] [pid 2694830:tid 2694830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:10.571958 2026] [ssl:error] [pid 2693040:tid 2693040] (EAI 2)Name or service not known: [client 144.76.19.72:24000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:10.571993 2026] [ssl:error] [pid 2693040:tid 2693040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:12.069473 2026] [ssl:error] [pid 2687517:tid 2687517] (70014)End of file found: [client 216.73.216.199:15458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:12.775240 2026] [access_compat:error] [pid 2683628:tid 2683628] [client 196.75.51.247:55157] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:12.982177 2026] [ssl:error] [pid 2692263:tid 2692263] (70014)End of file found: [client 216.73.216.199:37413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:13.626947 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:24014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:13.626979 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:13.681441 2026] [ssl:error] [pid 2684877:tid 2684877] (EAI 2)Name or service not known: [client 144.76.19.72:24022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:13.681471 2026] [ssl:error] [pid 2684877:tid 2684877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:16.737368 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:24034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:16.737413 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:16.789632 2026] [ssl:error] [pid 2681737:tid 2681737] (EAI 2)Name or service not known: [client 144.76.19.72:24036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:16.789670 2026] [ssl:error] [pid 2681737:tid 2681737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:18.560942 2026] [access_compat:error] [pid 2683837:tid 2683837] [client 196.75.51.247:55441] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:18.614347 2026] [ssl:error] [pid 2693123:tid 2693123] (70014)End of file found: [client 216.73.216.199:27296] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:18.837756 2026] [ssl:error] [pid 2687517:tid 2687517] (70014)End of file found: [client 216.73.216.199:33272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:19.437142 2026] [ssl:error] [pid 2691465:tid 2691465] (70014)End of file found: [client 216.73.216.199:55436] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:19.846549 2026] [ssl:error] [pid 2681737:tid 2681737] (EAI 2)Name or service not known: [client 144.76.19.72:65010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:19.846574 2026] [ssl:error] [pid 2681737:tid 2681737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:19.904463 2026] [ssl:error] [pid 2693042:tid 2693042] (EAI 2)Name or service not known: [client 144.76.19.72:65012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:19.904496 2026] [ssl:error] [pid 2693042:tid 2693042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:22.959346 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:65014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:22.959383 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:23.014998 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:65018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:23.015028 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:24.313044 2026] [access_compat:error] [pid 2690150:tid 2690150] [client 196.75.51.247:55752] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:25.101880 2026] [ssl:error] [pid 2671526:tid 2671526] (70014)End of file found: [client 216.73.216.199:5561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:25.104800 2026] [security2:error] [pid 2693123:tid 2693123] [client 43.157.80.207:20391] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWaYUL5_HNFV7aDDJBpgAAADg"]
[Thu Jul 30 10:16:25.104844 2026] [security2:error] [pid 2693123:tid 2693123] [client 43.157.80.207:20391] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWaYUL5_HNFV7aDDJBpgAAADg"]
[Thu Jul 30 10:16:25.105101 2026] [security2:error] [pid 2693123:tid 2693123] [client 43.157.80.207:20391] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWaYUL5_HNFV7aDDJBpgAAADg"]
[Thu Jul 30 10:16:25.401028 2026] [lsapi:warn] [pid 2683628:tid 2683628] [client 216.73.216.199:12648] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 10:16:25.401058 2026] [lsapi:error] [pid 2683628:tid 2683628] [client 216.73.216.199:12648] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/win.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 10:16:26.069557 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:65022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:26.069604 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:26.124169 2026] [ssl:error] [pid 2683837:tid 2683837] (EAI 2)Name or service not known: [client 144.76.19.72:65024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:26.124205 2026] [ssl:error] [pid 2683837:tid 2683837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:27.028399 2026] [security2:error] [pid 2695948:tid 2695948] [client 150.109.24.94:49677] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWazgyUy9JGjk-4qUFLAAAAAo"]
[Thu Jul 30 10:16:27.028459 2026] [security2:error] [pid 2695948:tid 2695948] [client 150.109.24.94:49677] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWazgyUy9JGjk-4qUFLAAAAAo"]
[Thu Jul 30 10:16:27.028789 2026] [security2:error] [pid 2695948:tid 2695948] [client 150.109.24.94:49677] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWazgyUy9JGjk-4qUFLAAAAAo"]
[Thu Jul 30 10:16:27.244538 2026] [ssl:error] [pid 2695930:tid 2695930] (70014)End of file found: [client 216.73.216.199:1306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:28.271863 2026] [authz_core:error] [pid 2695948:tid 2695948] [client 66.249.66.35:58143] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:16:28.274509 2026] [authz_core:error] [pid 2695948:tid 2695948] [client 66.249.66.35:58143] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:16:29.180470 2026] [ssl:error] [pid 2685157:tid 2685157] (EAI 2)Name or service not known: [client 144.76.19.72:65036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:29.180502 2026] [ssl:error] [pid 2685157:tid 2685157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:29.233246 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:65052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:29.233276 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:29.405827 2026] [authz_core:error] [pid 2693122:tid 2693122] [client 66.249.66.33:54362] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:16:29.408481 2026] [authz_core:error] [pid 2693122:tid 2693122] [client 66.249.66.33:54362] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:16:29.919827 2026] [security2:error] [pid 2696015:tid 2696015] [client 150.109.24.94:59187] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWbbUBIrmmwMULwB5ULgAAABg"]
[Thu Jul 30 10:16:29.919888 2026] [security2:error] [pid 2696015:tid 2696015] [client 150.109.24.94:59187] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWbbUBIrmmwMULwB5ULgAAABg"]
[Thu Jul 30 10:16:29.920214 2026] [security2:error] [pid 2696015:tid 2696015] [client 150.109.24.94:59187] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWbbUBIrmmwMULwB5ULgAAABg"]
[Thu Jul 30 10:16:29.941894 2026] [ssl:error] [pid 2687558:tid 2687558] (70014)End of file found: [client 216.73.216.199:24872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:30.076536 2026] [access_compat:error] [pid 2696018:tid 2696018] [client 196.75.51.247:56169] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:30.113663 2026] [ssl:error] [pid 2696016:tid 2696016] (70014)End of file found: [client 216.73.216.199:36242] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:30.493871 2026] [core:error] [pid 2696019:tid 2696019] [client 66.249.64.171:45261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:30.493918 2026] [core:error] [pid 2696019:tid 2696019] [client 66.249.64.171:45261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:31.637669 2026] [ssl:error] [pid 2696021:tid 2696021] (70014)End of file found: [client 216.73.216.199:12401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:32.155038 2026] [authz_core:error] [pid 2693123:tid 2693123] [client 62.60.130.231:61161] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:16:32.157699 2026] [authz_core:error] [pid 2693123:tid 2693123] [client 62.60.130.231:61161] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:16:32.374636 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 62.60.130.231:61275] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:16:32.377296 2026] [authz_core:error] [pid 2679589:tid 2679589] [client 62.60.130.231:61275] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:16:32.379798 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:37028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:32.379818 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:32.488631 2026] [ssl:error] [pid 2693121:tid 2693121] (EAI 2)Name or service not known: [client 144.76.19.72:37040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:32.488661 2026] [ssl:error] [pid 2693121:tid 2693121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:35.561152 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:37046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:35.561187 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:35.618948 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:37056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:35.618976 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:35.860523 2026] [access_compat:error] [pid 2679589:tid 2679589] [client 196.75.51.247:56499] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:35.877195 2026] [ssl:error] [pid 2695930:tid 2695930] (70014)End of file found: [client 216.73.216.199:55248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:36.785272 2026] [ssl:error] [pid 2684155:tid 2684155] (70014)End of file found: [client 216.73.216.199:37402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:37.302405 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:22942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:38.678586 2026] [ssl:error] [pid 2696021:tid 2696021] (EAI 2)Name or service not known: [client 144.76.19.72:37070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:38.678647 2026] [ssl:error] [pid 2696021:tid 2696021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:38.732949 2026] [ssl:error] [pid 2695986:tid 2695986] (EAI 2)Name or service not known: [client 144.76.19.72:37084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:38.732974 2026] [ssl:error] [pid 2695986:tid 2695986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:38.783257 2026] [security2:error] [pid 2671526:tid 2671526] [client 5.39.1.255:48690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.soul-connections.net"] [uri "/robots.txt"] [unique_id "amsWdnT6qvko5Z25Y8MF1QAAACE"]
[Thu Jul 30 10:16:39.846205 2026] [security2:error] [pid 2696021:tid 2696021] [client 54.38.147.41:53338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.soul-connections.net"] [uri "/cplogin.php"] [unique_id "amsWd6yeWobygz7UJWoHbAAAACQ"]
[Thu Jul 30 10:16:41.251868 2026] [ssl:error] [pid 2693844:tid 2693844] (70014)End of file found: [client 216.73.216.199:32604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:41.659083 2026] [access_compat:error] [pid 2693042:tid 2693042] [client 196.75.51.247:56749] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:41.788104 2026] [ssl:error] [pid 2695578:tid 2695578] (EAI 2)Name or service not known: [client 144.76.19.72:59106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:41.788135 2026] [ssl:error] [pid 2695578:tid 2695578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:41.840497 2026] [ssl:error] [pid 2695986:tid 2695986] (EAI 2)Name or service not known: [client 144.76.19.72:59108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:41.840527 2026] [ssl:error] [pid 2695986:tid 2695986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:42.547293 2026] [ssl:error] [pid 2696018:tid 2696018] (70014)End of file found: [client 216.73.216.199:62182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:44.057302 2026] [ssl:error] [pid 2687558:tid 2687558] (70014)End of file found: [client 216.73.216.199:50895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:44.889710 2026] [security2:error] [pid 2672570:tid 2672570] [client 185.191.171.13:46528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/michael-ennis-bartlesville"] [unique_id "amsWfFi_3pHPaouWvCXMcAAAAB8"]
[Thu Jul 30 10:16:44.897033 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:59118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:44.897057 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:44.966551 2026] [ssl:error] [pid 2679589:tid 2679589] (EAI 2)Name or service not known: [client 144.76.19.72:59130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:44.966573 2026] [ssl:error] [pid 2679589:tid 2679589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:45.029147 2026] [core:error] [pid 2691465:tid 2691465] [client 66.249.64.170:40282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:45.029167 2026] [core:error] [pid 2691465:tid 2691465] [client 66.249.64.170:40282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:46.256065 2026] [security2:error] [pid 2672570:tid 2672570] [client 185.191.171.17:48004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9930.0/prev_next,next.html"] [unique_id "amsWfli_3pHPaouWvCXMcQAAAB8"]
[Thu Jul 30 10:16:47.448521 2026] [access_compat:error] [pid 2696019:tid 2696019] [client 196.75.51.247:57063] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:47.748915 2026] [ssl:error] [pid 2679589:tid 2679589] (70014)End of file found: [client 216.73.216.199:53126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:16:48.021608 2026] [ssl:error] [pid 2695578:tid 2695578] (EAI 2)Name or service not known: [client 144.76.19.72:59132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:48.021641 2026] [ssl:error] [pid 2695578:tid 2695578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:48.077584 2026] [ssl:error] [pid 2693844:tid 2693844] (EAI 2)Name or service not known: [client 144.76.19.72:59144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:48.077626 2026] [ssl:error] [pid 2693844:tid 2693844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:48.859772 2026] [security2:error] [pid 2696021:tid 2696021] [client 114.119.142.20:40197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/ryan-smith/"] [unique_id "amsWgKyeWobygz7UJWoHbgAAACQ"], referer: http://www.erskinenazarene.co.uk/sermons/page/5/
[Thu Jul 30 10:16:49.735786 2026] [core:error] [pid 2696018:tid 2696018] [client 66.249.64.170:64794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:49.735815 2026] [core:error] [pid 2696018:tid 2696018] [client 66.249.64.170:64794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:50.239930 2026] [security2:error] [pid 2675674:tid 2675674] [client 114.119.142.20:40203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/preacher/ryan-smith/"] [unique_id "amsWgmpHD-7MOOr_ChWmBgAAABY"], referer: http://www.erskinenazarene.co.uk/sermons/page/5/
[Thu Jul 30 10:16:51.133486 2026] [ssl:error] [pid 2693844:tid 2693844] (EAI 2)Name or service not known: [client 144.76.19.72:64464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:51.133520 2026] [ssl:error] [pid 2693844:tid 2693844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:51.191313 2026] [ssl:error] [pid 2696023:tid 2696023] (EAI 2)Name or service not known: [client 144.76.19.72:64468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:51.191347 2026] [ssl:error] [pid 2696023:tid 2696023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:51.633659 2026] [core:error] [pid 2681738:tid 2681738] [client 66.249.66.41:57122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:51.633701 2026] [core:error] [pid 2681738:tid 2681738] [client 66.249.66.41:57122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:51.634176 2026] [core:error] [pid 2693844:tid 2693844] [client 66.249.66.168:39824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:51.634194 2026] [core:error] [pid 2693844:tid 2693844] [client 66.249.66.168:39824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:16:51.668149 2026] [security2:error] [pid 2685298:tid 2685298] [client 47.128.53.105:64920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/robots.txt"] [unique_id "amsWg96ote5PWFCaBJBHVQAAADU"]
[Thu Jul 30 10:16:53.194499 2026] [access_compat:error] [pid 2681738:tid 2681738] [client 196.75.51.247:57211] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:53.858622 2026] [core:error] [pid 2684026:tid 2684026] (13)Permission denied: [client 216.73.216.199:40958] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/usersize
[Thu Jul 30 10:16:54.247959 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:64474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:54.247984 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:54.300582 2026] [ssl:error] [pid 2696021:tid 2696021] (EAI 2)Name or service not known: [client 144.76.19.72:64482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:54.300619 2026] [ssl:error] [pid 2696021:tid 2696021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:54.472402 2026] [core:error] [pid 2684026:tid 2684026] (13)Permission denied: [client 216.73.216.199:40958] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_system_zone/total_objects
[Thu Jul 30 10:16:54.975705 2026] [access_compat:error] [pid 2685298:tid 2685298] [client 221.204.217.16:27282] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 10:16:54.975806 2026] [access_compat:error] [pid 2685298:tid 2685298] [client 221.204.217.16:27282] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:16:56.692839 2026] [security2:error] [pid 2691496:tid 2691496] [client 47.128.98.67:29920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/category/news/"] [unique_id "amsWiExdUiEVhz2ET3Q-7wAAABA"]
[Thu Jul 30 10:16:56.887283 2026] [core:error] [pid 2684026:tid 2684026] (13)Permission denied: [client 216.73.216.199:40958] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_mark/total_objects
[Thu Jul 30 10:16:57.356798 2026] [ssl:error] [pid 2692963:tid 2692963] (EAI 2)Name or service not known: [client 144.76.19.72:64492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:57.356833 2026] [ssl:error] [pid 2692963:tid 2692963] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:57.408350 2026] [ssl:error] [pid 2691465:tid 2691465] (EAI 2)Name or service not known: [client 144.76.19.72:64496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:16:57.408371 2026] [ssl:error] [pid 2691465:tid 2691465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:16:57.826195 2026] [cgi:error] [pid 2684026:tid 2684026] [client 216.73.216.199:40958] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/dovecot_set_defaults.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:16:57.826262 2026] [cgi:error] [pid 2684026:tid 2684026] [client 216.73.216.199:40958] End of script output before headers: dovecot_set_defaults.pl
[Thu Jul 30 10:16:58.004804 2026] [access_compat:error] [pid 2685298:tid 2685298] [client 221.204.217.16:27282] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/favicon.ico, referer: https://blog.alism.com/
[Thu Jul 30 10:16:58.004905 2026] [access_compat:error] [pid 2685298:tid 2685298] [client 221.204.217.16:27282] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/
[Thu Jul 30 10:16:58.930864 2026] [access_compat:error] [pid 2696018:tid 2696018] [client 196.75.51.247:57384] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:16:59.328179 2026] [core:error] [pid 2696022:tid 2696022] (13)Permission denied: [client 216.73.216.199:47114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/cpu_partial
[Thu Jul 30 10:17:00.470539 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:42756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:00.470567 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:00.572208 2026] [ssl:error] [pid 2695983:tid 2695983] (EAI 2)Name or service not known: [client 144.76.19.72:42770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:00.572237 2026] [ssl:error] [pid 2695983:tid 2695983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:02.041247 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:12919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/min_partial
[Thu Jul 30 10:17:03.111712 2026] [access_compat:error] [pid 2693844:tid 2693844] [client 111.51.164.35:46910] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 10:17:03.111801 2026] [access_compat:error] [pid 2693844:tid 2693844] [client 111.51.164.35:46910] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:17:03.513115 2026] [access_compat:error] [pid 2693844:tid 2693844] [client 111.51.164.35:46910] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/favicon.ico, referer: https://blog.alism.com/
[Thu Jul 30 10:17:03.513214 2026] [access_compat:error] [pid 2693844:tid 2693844] [client 111.51.164.35:46910] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/
[Thu Jul 30 10:17:03.628870 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:42776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:03.628897 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:03.685461 2026] [ssl:error] [pid 2692963:tid 2692963] (EAI 2)Name or service not known: [client 144.76.19.72:42786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:03.685490 2026] [ssl:error] [pid 2692963:tid 2692963] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:04.693842 2026] [access_compat:error] [pid 2685157:tid 2685157] [client 196.75.51.247:57582] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:06.758773 2026] [ssl:error] [pid 2685298:tid 2685298] (EAI 2)Name or service not known: [client 144.76.19.72:42798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:06.758804 2026] [ssl:error] [pid 2685298:tid 2685298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:06.812587 2026] [ssl:error] [pid 2684952:tid 2684952] (EAI 2)Name or service not known: [client 144.76.19.72:42808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:06.812649 2026] [ssl:error] [pid 2684952:tid 2684952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:07.207282 2026] [security2:error] [pid 2691496:tid 2691496] [client 37.238.36.143:59713] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWk0xdUiEVhz2ET3Q-8gAAABA"]
[Thu Jul 30 10:17:07.207325 2026] [security2:error] [pid 2691496:tid 2691496] [client 37.238.36.143:59713] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWk0xdUiEVhz2ET3Q-8gAAABA"]
[Thu Jul 30 10:17:07.207588 2026] [security2:error] [pid 2691496:tid 2691496] [client 37.238.36.143:59713] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWk0xdUiEVhz2ET3Q-8gAAABA"]
[Thu Jul 30 10:17:09.866998 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:32996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:09.867023 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:09.891895 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:12919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/sunrpc/sections/__bug_table
[Thu Jul 30 10:17:09.919237 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:32998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:09.919257 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:10.433475 2026] [access_compat:error] [pid 2695948:tid 2695948] [client 196.75.51.247:57900] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:10.989412 2026] [access_compat:error] [pid 2684155:tid 2684155] [client 45.158.164.139:42376] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:17:10.996294 2026] [core:error] [pid 2684952:tid 2684952] [client 66.249.66.71:46772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:10.996317 2026] [core:error] [pid 2684952:tid 2684952] [client 66.249.66.71:46772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:11.102774 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:12919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/objects_partial
[Thu Jul 30 10:17:11.959541 2026] [security2:error] [pid 2696018:tid 2696018] [client 196.77.18.233:50508] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWl9XPPZrxWHHjSsdZIAAAAB4"]
[Thu Jul 30 10:17:11.959602 2026] [security2:error] [pid 2696018:tid 2696018] [client 196.77.18.233:50508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWl9XPPZrxWHHjSsdZIAAAAB4"]
[Thu Jul 30 10:17:11.959863 2026] [security2:error] [pid 2696018:tid 2696018] [client 196.77.18.233:50508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWl9XPPZrxWHHjSsdZIAAAAB4"]
[Thu Jul 30 10:17:12.015148 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:12919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/objects_partial
[Thu Jul 30 10:17:12.621860 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:12919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/objects_partial
[Thu Jul 30 10:17:12.670154 2026] [access_compat:error] [pid 2693123:tid 2693123] [client 43.164.192.151:51358] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 10:17:12.931852 2026] [core:error] [pid 2675674:tid 2675674] (13)Permission denied: [client 216.73.216.199:12919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm_intel/sections/__param
[Thu Jul 30 10:17:12.972706 2026] [ssl:error] [pid 2685157:tid 2685157] (EAI 2)Name or service not known: [client 144.76.19.72:33002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:12.972746 2026] [ssl:error] [pid 2685157:tid 2685157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:13.030422 2026] [ssl:error] [pid 2695949:tid 2695949] (EAI 2)Name or service not known: [client 144.76.19.72:33014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:13.030454 2026] [ssl:error] [pid 2695949:tid 2695949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:14.042350 2026] [security2:error] [pid 2696022:tid 2696022] [client 47.128.19.154:25002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "4k-monitors.co.uk"] [uri "/robots.txt"] [unique_id "amsWmtfow80AWyjB91zq8gAAACU"]
[Thu Jul 30 10:17:16.088397 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:33026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:16.088445 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:16.142965 2026] [ssl:error] [pid 2685298:tid 2685298] (EAI 2)Name or service not known: [client 144.76.19.72:33030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:16.142995 2026] [ssl:error] [pid 2685298:tid 2685298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:16.744831 2026] [access_compat:error] [pid 2695949:tid 2695949] [client 196.75.51.247:58097] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:17.157352 2026] [core:error] [pid 2697676:tid 2697676] (13)Permission denied: [client 216.73.216.199:16975] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_extent_status/objects_partial
[Thu Jul 30 10:17:18.060189 2026] [ssl:error] [pid 2697676:tid 2697676] (70014)End of file found: [client 216.73.216.199:16975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:18.964343 2026] [ssl:error] [pid 2675674:tid 2675674] (70014)End of file found: [client 216.73.216.199:12919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:19.200018 2026] [ssl:error] [pid 2697867:tid 2697867] (EAI 2)Name or service not known: [client 144.76.19.72:33040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:19.200080 2026] [ssl:error] [pid 2697867:tid 2697867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:19.258937 2026] [ssl:error] [pid 2697866:tid 2697866] (EAI 2)Name or service not known: [client 144.76.19.72:33046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:19.258969 2026] [ssl:error] [pid 2697866:tid 2697866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:19.561305 2026] [core:error] [pid 2685298:tid 2685298] (13)Permission denied: [client 216.73.216.199:47677] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/objects_partial
[Thu Jul 30 10:17:21.067899 2026] [core:error] [pid 2685298:tid 2685298] (13)Permission denied: [client 216.73.216.199:47677] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/min_partial
[Thu Jul 30 10:17:22.271448 2026] [ssl:error] [pid 2685298:tid 2685298] (70014)End of file found: [client 216.73.216.199:47677] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:22.314245 2026] [ssl:error] [pid 2697437:tid 2697437] (EAI 2)Name or service not known: [client 144.76.19.72:59044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:22.314274 2026] [ssl:error] [pid 2697437:tid 2697437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:22.372080 2026] [ssl:error] [pid 2697952:tid 2697952] (EAI 2)Name or service not known: [client 144.76.19.72:59054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:22.372113 2026] [ssl:error] [pid 2697952:tid 2697952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:22.626210 2026] [access_compat:error] [pid 2697953:tid 2697953] [client 196.75.51.247:58427] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:24.981087 2026] [ssl:error] [pid 2697958:tid 2697958] (70014)End of file found: [client 216.73.216.199:28799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:25.427210 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:59068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:25.427247 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:25.481508 2026] [ssl:error] [pid 2697956:tid 2697956] (EAI 2)Name or service not known: [client 144.76.19.72:59070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:25.481539 2026] [ssl:error] [pid 2697956:tid 2697956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:28.106933 2026] [core:error] [pid 2696023:tid 2696023] (13)Permission denied: [client 216.73.216.199:10473] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/validate
[Thu Jul 30 10:17:28.413055 2026] [access_compat:error] [pid 2693962:tid 2693962] [client 196.75.51.247:58713] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:28.534148 2026] [ssl:error] [pid 2697911:tid 2697911] (EAI 2)Name or service not known: [client 144.76.19.72:59080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:28.534181 2026] [ssl:error] [pid 2697911:tid 2697911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:28.588314 2026] [ssl:error] [pid 2685157:tid 2685157] (EAI 2)Name or service not known: [client 144.76.19.72:59082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:28.588340 2026] [ssl:error] [pid 2685157:tid 2685157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:28.635152 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:23964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:29.234294 2026] [ssl:error] [pid 2696023:tid 2696023] (70014)End of file found: [client 216.73.216.199:10473] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:31.085891 2026] [security2:error] [pid 2697911:tid 2697911] [client 185.191.171.1:23660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3859.0.html"] [unique_id "amsWq8dSHGZ1oqlwaGGtNAAAABo"]
[Thu Jul 30 10:17:31.354646 2026] [core:error] [pid 2690150:tid 2690150] (13)Permission denied: [client 216.73.216.199:29002] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCP/partial
[Thu Jul 30 10:17:31.644545 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:29158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:31.644577 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:31.700254 2026] [ssl:error] [pid 2684952:tid 2684952] (EAI 2)Name or service not known: [client 144.76.19.72:29164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:31.700280 2026] [ssl:error] [pid 2684952:tid 2684952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:32.892706 2026] [ssl:error] [pid 2690150:tid 2690150] (70014)End of file found: [client 216.73.216.199:29002] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:34.091428 2026] [core:error] [pid 2695984:tid 2695984] (13)Permission denied: [client 216.73.216.199:20146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/objects
[Thu Jul 30 10:17:34.207087 2026] [access_compat:error] [pid 2687558:tid 2687558] [client 196.75.51.247:59018] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:34.694417 2026] [ssl:error] [pid 2695984:tid 2695984] (70014)End of file found: [client 216.73.216.199:20146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:34.755052 2026] [ssl:error] [pid 2681738:tid 2681738] (EAI 2)Name or service not known: [client 144.76.19.72:29174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:34.755099 2026] [ssl:error] [pid 2681738:tid 2681738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:34.809519 2026] [ssl:error] [pid 2697953:tid 2697953] (EAI 2)Name or service not known: [client 144.76.19.72:29176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:34.809549 2026] [ssl:error] [pid 2697953:tid 2697953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:35.754852 2026] [security2:error] [pid 2687040:tid 2687040] [client 43.157.156.190:40086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.com"] [uri "/"] [unique_id "amsWrzC2cGqYigTq1w3MjgAAAAk"]
[Thu Jul 30 10:17:35.758791 2026] [authz_core:error] [pid 2687040:tid 2687040] [client 43.157.156.190:40086] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 10:17:35.765400 2026] [authz_core:error] [pid 2687040:tid 2687040] [client 43.157.156.190:40086] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 10:17:36.808687 2026] [core:error] [pid 2696022:tid 2696022] (13)Permission denied: [client 216.73.216.199:3841] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-96/partial
[Thu Jul 30 10:17:37.413905 2026] [ssl:error] [pid 2696022:tid 2696022] (70014)End of file found: [client 216.73.216.199:3841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:37.881111 2026] [ssl:error] [pid 2693844:tid 2693844] (EAI 2)Name or service not known: [client 144.76.19.72:29180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:37.881145 2026] [ssl:error] [pid 2693844:tid 2693844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:37.935131 2026] [ssl:error] [pid 2697866:tid 2697866] (EAI 2)Name or service not known: [client 144.76.19.72:29188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:37.935157 2026] [ssl:error] [pid 2697866:tid 2697866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:38.221929 2026] [ssl:error] [pid 2695986:tid 2695986] (70014)End of file found: [client 216.73.216.199:40541] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:39.757715 2026] [core:error] [pid 2693844:tid 2693844] [client 66.249.64.170:49186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:39.757738 2026] [core:error] [pid 2693844:tid 2693844] [client 66.249.64.170:49186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:39.986634 2026] [access_compat:error] [pid 2697866:tid 2697866] [client 196.75.51.247:59226] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:40.031573 2026] [ssl:error] [pid 2690150:tid 2690150] (70014)End of file found: [client 216.73.216.199:65270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:40.991563 2026] [ssl:error] [pid 2693844:tid 2693844] (EAI 2)Name or service not known: [client 144.76.19.72:32732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:40.991587 2026] [ssl:error] [pid 2693844:tid 2693844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:41.049823 2026] [ssl:error] [pid 2696018:tid 2696018] (EAI 2)Name or service not known: [client 144.76.19.72:32744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:41.049851 2026] [ssl:error] [pid 2696018:tid 2696018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:42.625501 2026] [core:error] [pid 2697957:tid 2697957] [client 66.249.64.170:54155] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:42.625532 2026] [core:error] [pid 2697957:tid 2697957] [client 66.249.64.170:54155] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:42.774760 2026] [ssl:error] [pid 2693844:tid 2693844] (70014)End of file found: [client 216.73.216.199:62062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:43.451215 2026] [core:error] [pid 2672570:tid 2672570] [client 66.249.66.169:56726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:43.451243 2026] [core:error] [pid 2672570:tid 2672570] [client 66.249.66.169:56726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:17:43.672404 2026] [ssl:error] [pid 2687558:tid 2687558] (70014)End of file found: [client 216.73.216.199:52048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:44.105560 2026] [ssl:error] [pid 2695986:tid 2695986] (EAI 2)Name or service not known: [client 144.76.19.72:32752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:44.105589 2026] [ssl:error] [pid 2695986:tid 2695986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:44.188096 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:32768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:44.188126 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:45.384184 2026] [security2:error] [pid 2692963:tid 2692963] [client 185.191.171.8:25062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/how-much-house-can-i-afford-with-40k-salary"] [unique_id "amsWuXaVqD7nexaln6HDNgAAAB0"]
[Thu Jul 30 10:17:45.478341 2026] [ssl:error] [pid 2698778:tid 2698778] (70014)End of file found: [client 216.73.216.199:10131] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:45.752279 2026] [access_compat:error] [pid 2696023:tid 2696023] [client 196.75.51.247:59494] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:47.243201 2026] [ssl:error] [pid 2697437:tid 2697437] (EAI 2)Name or service not known: [client 144.76.19.72:32772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:47.243229 2026] [ssl:error] [pid 2697437:tid 2697437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:47.299307 2026] [ssl:error] [pid 2698824:tid 2698824] (EAI 2)Name or service not known: [client 144.76.19.72:32786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:47.299335 2026] [ssl:error] [pid 2698824:tid 2698824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:48.917481 2026] [ssl:error] [pid 2687040:tid 2687040] (70014)End of file found: [client 216.73.216.199:42026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:50.352745 2026] [ssl:error] [pid 2687558:tid 2687558] (EAI 2)Name or service not known: [client 144.76.19.72:59332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:50.352775 2026] [ssl:error] [pid 2687558:tid 2687558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:50.405887 2026] [ssl:error] [pid 2697958:tid 2697958] (EAI 2)Name or service not known: [client 144.76.19.72:59336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:50.405913 2026] [ssl:error] [pid 2697958:tid 2697958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:51.557672 2026] [access_compat:error] [pid 2696022:tid 2696022] [client 196.75.51.247:59718] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:52.478843 2026] [security2:error] [pid 2684101:tid 2684101] [client 114.119.146.111:21253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/prayer-gathering/"] [unique_id "amsWwIwOF27n0q-59SlngwAAAC0"], referer: http://www.erskinenazarene.co.uk/event/prayer-gathering/?instance_id=35864
[Thu Jul 30 10:17:52.871342 2026] [core:error] [pid 2698823:tid 2698823] (13)Permission denied: [client 216.73.216.199:38706] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/trace
[Thu Jul 30 10:17:53.474104 2026] [ssl:error] [pid 2698823:tid 2698823] (70014)End of file found: [client 216.73.216.199:38706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:53.483710 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:59344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:53.483750 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:53.540759 2026] [ssl:error] [pid 2690150:tid 2690150] (EAI 2)Name or service not known: [client 144.76.19.72:59360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:53.540779 2026] [ssl:error] [pid 2690150:tid 2690150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:54.079160 2026] [core:error] [pid 2697911:tid 2697911] (13)Permission denied: [client 216.73.216.199:29775] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory150/node0/compact
[Thu Jul 30 10:17:54.390133 2026] [ssl:error] [pid 2697911:tid 2697911] (70014)End of file found: [client 216.73.216.199:29775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:54.882428 2026] [core:error] [pid 2690150:tid 2690150] (13)Permission denied: [client 216.73.216.199:54499] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory145/node0/compact
[Thu Jul 30 10:17:55.169613 2026] [security2:error] [pid 2687040:tid 2687040] [client 114.119.146.111:21263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/prayer-gathering/"] [unique_id "amsWwzC2cGqYigTq1w3MlwAAAAk"], referer: http://www.erskinenazarene.co.uk/event/prayer-gathering/?instance_id=35864
[Thu Jul 30 10:17:55.295513 2026] [ssl:error] [pid 2690150:tid 2690150] (70014)End of file found: [client 216.73.216.199:54499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:17:56.617092 2026] [ssl:error] [pid 2696023:tid 2696023] (EAI 2)Name or service not known: [client 144.76.19.72:59362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:56.617122 2026] [ssl:error] [pid 2696023:tid 2696023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:56.674897 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:59364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:56.674921 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:56.724208 2026] [security2:error] [pid 2685298:tid 2685298] [client 49.51.183.220:42032] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.org.uk"] [uri "/"] [unique_id "amsWxN6ote5PWFCaBJBH0AAAADU"]
[Thu Jul 30 10:17:57.388947 2026] [access_compat:error] [pid 2696018:tid 2696018] [client 196.75.51.247:59822] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:17:57.842350 2026] [security2:error] [pid 2687040:tid 2687040] [client 49.51.183.220:42484] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amsWxTC2cGqYigTq1w3MmAAAAAk"], referer: http://shelterforum.org.uk
[Thu Jul 30 10:17:58.158660 2026] [core:error] [pid 2697866:tid 2697866] (13)Permission denied: [client 216.73.216.199:36929] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory158/node0/compact
[Thu Jul 30 10:17:58.968684 2026] [core:error] [pid 2684952:tid 2684952] (13)Permission denied: [client 216.73.216.199:32962] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory211/node0/compact
[Thu Jul 30 10:17:59.268827 2026] [core:error] [pid 2684952:tid 2684952] (13)Permission denied: [client 216.73.216.199:32962] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory203/node0/compact
[Thu Jul 30 10:17:59.728849 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:48672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:59.728881 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:17:59.784688 2026] [ssl:error] [pid 2687040:tid 2687040] (EAI 2)Name or service not known: [client 144.76.19.72:48684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:17:59.784718 2026] [ssl:error] [pid 2687040:tid 2687040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:00.774038 2026] [ssl:error] [pid 2697866:tid 2697866] (70014)End of file found: [client 216.73.216.199:36929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:01.075902 2026] [ssl:error] [pid 2684952:tid 2684952] (70014)End of file found: [client 216.73.216.199:32962] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:01.588399 2026] [security2:error] [pid 2690150:tid 2690150] [client 116.98.249.30:30944] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWyR-i0EI98-uMngxPmgAAABs"]
[Thu Jul 30 10:18:01.588446 2026] [security2:error] [pid 2690150:tid 2690150] [client 116.98.249.30:30944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWyR-i0EI98-uMngxPmgAAABs"]
[Thu Jul 30 10:18:01.588695 2026] [security2:error] [pid 2690150:tid 2690150] [client 116.98.249.30:30944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWyR-i0EI98-uMngxPmgAAABs"]
[Thu Jul 30 10:18:01.820118 2026] [lsapi:warn] [pid 2672570:tid 2672570] [client 45.158.164.139:53354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:18:01.820162 2026] [lsapi:warn] [pid 2672570:tid 2672570] [client 45.158.164.139:53354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:18:01.821612 2026] [lsapi:warn] [pid 2697437:tid 2697437] [client 89.197.16.98:44690] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:18:01.821647 2026] [lsapi:warn] [pid 2697437:tid 2697437] [client 89.197.16.98:44690] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:18:02.457512 2026] [ssl:error] [pid 2691465:tid 2691465] (70014)End of file found: [client 216.73.216.199:25067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:02.763630 2026] [ssl:error] [pid 2697959:tid 2697959] (70014)End of file found: [client 216.73.216.199:42143] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:02.844684 2026] [ssl:error] [pid 2693962:tid 2693962] (EAI 2)Name or service not known: [client 144.76.19.72:48690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:02.844713 2026] [ssl:error] [pid 2693962:tid 2693962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:02.902316 2026] [ssl:error] [pid 2695984:tid 2695984] (EAI 2)Name or service not known: [client 144.76.19.72:48694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:02.902346 2026] [ssl:error] [pid 2695984:tid 2695984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:03.080921 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:51845] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/zip.ini"] [unique_id "amsWyyu9kg7rpQXVfCIFAAAAAAY"]
[Thu Jul 30 10:18:03.081164 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:51845] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/zip.ini"] [unique_id "amsWyyu9kg7rpQXVfCIFAAAAAAY"]
[Thu Jul 30 10:18:03.081386 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:51845] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/zip.ini"] [unique_id "amsWyyu9kg7rpQXVfCIFAAAAAAY"]
[Thu Jul 30 10:18:03.147855 2026] [access_compat:error] [pid 2695984:tid 2695984] [client 196.75.51.247:59871] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:03.476416 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:51845] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory202/node0/compact
[Thu Jul 30 10:18:03.783142 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:51845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:04.222147 2026] [core:error] [pid 2699687:tid 2699687] [client 66.249.64.170:52728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:04.222189 2026] [core:error] [pid 2699687:tid 2699687] [client 66.249.64.170:52728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:04.817428 2026] [security2:error] [pid 2698824:tid 2698824] [client 187.148.11.15:43700] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWzBKOdlR7Hcqt2BrzYAAAAAw"]
[Thu Jul 30 10:18:04.817500 2026] [security2:error] [pid 2698824:tid 2698824] [client 187.148.11.15:43700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWzBKOdlR7Hcqt2BrzYAAAAAw"]
[Thu Jul 30 10:18:04.817904 2026] [security2:error] [pid 2698824:tid 2698824] [client 187.148.11.15:43700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWzBKOdlR7Hcqt2BrzYAAAAAw"]
[Thu Jul 30 10:18:05.079229 2026] [security2:error] [pid 2698824:tid 2698824] [client 43.156.36.169:49024] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanhill.co.uk"] [uri "/"] [unique_id "amsWzRKOdlR7Hcqt2BrzYQAAAAw"]
[Thu Jul 30 10:18:05.960549 2026] [ssl:error] [pid 2699744:tid 2699744] (EAI 2)Name or service not known: [client 144.76.19.72:48702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:05.960604 2026] [ssl:error] [pid 2699744:tid 2699744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:06.017163 2026] [ssl:error] [pid 2685298:tid 2685298] (EAI 2)Name or service not known: [client 144.76.19.72:48704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:06.017201 2026] [ssl:error] [pid 2685298:tid 2685298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:06.906265 2026] [security2:error] [pid 2697866:tid 2697866] [client 43.156.36.169:50388] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsWzhGKqjKw-i3mJ34Z_wAAABI"], referer: http://jonathanhill.co.uk
[Thu Jul 30 10:18:07.424258 2026] [security2:error] [pid 2683628:tid 2683628] [client 103.119.66.76:44703] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWz0GyzFcKva_zAn70SAAAAAg"]
[Thu Jul 30 10:18:07.424314 2026] [security2:error] [pid 2683628:tid 2683628] [client 103.119.66.76:44703] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsWz0GyzFcKva_zAn70SAAAAAg"]
[Thu Jul 30 10:18:07.424583 2026] [security2:error] [pid 2683628:tid 2683628] [client 103.119.66.76:44703] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsWz0GyzFcKva_zAn70SAAAAAg"]
[Thu Jul 30 10:18:08.244784 2026] [authz_core:error] [pid 2687517:tid 2687517] [client 66.249.66.33:54092] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:18:08.247518 2026] [authz_core:error] [pid 2687517:tid 2687517] [client 66.249.66.33:54092] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:18:08.358397 2026] [ssl:error] [pid 2691465:tid 2691465] (70014)End of file found: [client 216.73.216.199:39600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:08.668190 2026] [ssl:error] [pid 2699743:tid 2699743] (70014)End of file found: [client 216.73.216.199:15807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:08.916566 2026] [access_compat:error] [pid 2696018:tid 2696018] [client 196.75.51.247:60012] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:09.108588 2026] [ssl:error] [pid 2684101:tid 2684101] (EAI 2)Name or service not known: [client 144.76.19.72:48714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:09.108623 2026] [ssl:error] [pid 2684101:tid 2684101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:09.159999 2026] [ssl:error] [pid 2684155:tid 2684155] (EAI 2)Name or service not known: [client 144.76.19.72:48720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:09.160024 2026] [ssl:error] [pid 2684155:tid 2684155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:09.793442 2026] [security2:error] [pid 2684101:tid 2684101] [client 43.164.0.96:38592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.com"] [uri "/"] [unique_id "amsW0YwOF27n0q-59SlnhwAAAC0"]
[Thu Jul 30 10:18:10.170565 2026] [ssl:error] [pid 2697956:tid 2697956] (70014)End of file found: [client 216.73.216.199:64600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:11.727266 2026] [security2:error] [pid 2699686:tid 2699686] [client 43.164.0.96:50668] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsW04EgybhzWBIYS30gcgAAAAs"], referer: http://www.spamp.com
[Thu Jul 30 10:18:12.214962 2026] [ssl:error] [pid 2697953:tid 2697953] (EAI 2)Name or service not known: [client 144.76.19.72:32742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:12.214987 2026] [ssl:error] [pid 2697953:tid 2697953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:12.268453 2026] [ssl:error] [pid 2695948:tid 2695948] (EAI 2)Name or service not known: [client 144.76.19.72:32748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:12.268487 2026] [ssl:error] [pid 2695948:tid 2695948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:13.830368 2026] [core:error] [pid 2692963:tid 2692963] (13)Permission denied: [client 216.73.216.199:62499] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/validate
[Thu Jul 30 10:18:14.644805 2026] [access_compat:error] [pid 2696023:tid 2696023] [client 196.75.51.247:60124] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:15.027058 2026] [ssl:error] [pid 2699260:tid 2699260] (70014)End of file found: [client 216.73.216.199:60073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:15.158769 2026] [access_compat:error] [pid 2697958:tid 2697958] [client 45.158.164.139:48472] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:18:15.323437 2026] [ssl:error] [pid 2683628:tid 2683628] (EAI 2)Name or service not known: [client 144.76.19.72:32760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:15.323466 2026] [ssl:error] [pid 2683628:tid 2683628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:15.334309 2026] [ssl:error] [pid 2692963:tid 2692963] (70014)End of file found: [client 216.73.216.199:62499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:15.375432 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:32762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:15.375457 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:16.536710 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:19534] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:18.419225 2026] [security2:error] [pid 2683628:tid 2683628] [client 43.136.167.197:55308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.devwebsitehub.com"] [uri "/"] [unique_id "amsW2kGyzFcKva_zAn70rwAAAAg"]
[Thu Jul 30 10:18:18.429226 2026] [ssl:error] [pid 2697866:tid 2697866] (EAI 2)Name or service not known: [client 144.76.19.72:32770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:18.429251 2026] [ssl:error] [pid 2697866:tid 2697866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:18.483891 2026] [ssl:error] [pid 2695986:tid 2695986] (EAI 2)Name or service not known: [client 144.76.19.72:32774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:18.483915 2026] [ssl:error] [pid 2695986:tid 2695986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:20.641649 2026] [core:error] [pid 2685298:tid 2685298] (13)Permission denied: [client 216.73.216.199:64836] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory62/node0/compact
[Thu Jul 30 10:18:20.756853 2026] [ssl:error] [pid 2685298:tid 2685298] (70014)End of file found: [client 216.73.216.199:64836] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:20.917628 2026] [access_compat:error] [pid 2697953:tid 2697953] [client 196.75.51.247:60286] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:21.059153 2026] [ssl:error] [pid 2695985:tid 2695985] (70014)End of file found: [client 216.73.216.199:29015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:21.541694 2026] [ssl:error] [pid 2691496:tid 2691496] (EAI 2)Name or service not known: [client 144.76.19.72:55390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:21.541718 2026] [ssl:error] [pid 2691496:tid 2691496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:21.598948 2026] [ssl:error] [pid 2699260:tid 2699260] (EAI 2)Name or service not known: [client 144.76.19.72:55400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:21.598975 2026] [ssl:error] [pid 2699260:tid 2699260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:22.572897 2026] [core:error] [pid 2699687:tid 2699687] [client 66.249.64.170:53320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:22.572930 2026] [core:error] [pid 2699687:tid 2699687] [client 66.249.64.170:53320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:23.174034 2026] [ssl:error] [pid 2692963:tid 2692963] (70014)End of file found: [client 216.73.216.199:23120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:24.657587 2026] [ssl:error] [pid 2697437:tid 2697437] (EAI 2)Name or service not known: [client 144.76.19.72:55406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:24.657626 2026] [ssl:error] [pid 2697437:tid 2697437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:24.714662 2026] [ssl:error] [pid 2698778:tid 2698778] (EAI 2)Name or service not known: [client 144.76.19.72:55414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:24.714696 2026] [ssl:error] [pid 2698778:tid 2698778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:25.767604 2026] [core:error] [pid 2684155:tid 2684155] [client 66.249.64.172:50711] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:25.767628 2026] [core:error] [pid 2684155:tid 2684155] [client 66.249.64.172:50711] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:26.101355 2026] [ssl:error] [pid 2693122:tid 2693122] (70014)End of file found: [client 216.73.216.199:39048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:26.682544 2026] [access_compat:error] [pid 2697959:tid 2697959] [client 196.75.51.247:60505] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:27.772692 2026] [ssl:error] [pid 2699687:tid 2699687] (EAI 2)Name or service not known: [client 144.76.19.72:55430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:27.772729 2026] [ssl:error] [pid 2699687:tid 2699687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:27.826567 2026] [ssl:error] [pid 2699741:tid 2699741] (EAI 2)Name or service not known: [client 144.76.19.72:55436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:27.826613 2026] [ssl:error] [pid 2699741:tid 2699741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:30.880460 2026] [ssl:error] [pid 2699687:tid 2699687] (EAI 2)Name or service not known: [client 144.76.19.72:32532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:30.880486 2026] [ssl:error] [pid 2699687:tid 2699687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:30.933253 2026] [ssl:error] [pid 2700761:tid 2700761] (EAI 2)Name or service not known: [client 144.76.19.72:32538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:30.933281 2026] [ssl:error] [pid 2700761:tid 2700761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:31.692056 2026] [ssl:error] [pid 2699687:tid 2699687] (70014)End of file found: [client 216.73.216.199:38689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:31.991229 2026] [ssl:error] [pid 2696018:tid 2696018] (70014)End of file found: [client 216.73.216.199:53248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:32.289641 2026] [ssl:error] [pid 2700761:tid 2700761] (70014)End of file found: [client 216.73.216.199:1428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:32.498981 2026] [access_compat:error] [pid 2700846:tid 2700846] [client 196.75.51.247:60633] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:33.988689 2026] [ssl:error] [pid 2695948:tid 2695948] (EAI 2)Name or service not known: [client 144.76.19.72:32550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:33.988723 2026] [ssl:error] [pid 2695948:tid 2695948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:34.042758 2026] [ssl:error] [pid 2701003:tid 2701003] (EAI 2)Name or service not known: [client 144.76.19.72:32566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:34.042798 2026] [ssl:error] [pid 2701003:tid 2701003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:35.185784 2026] [security2:error] [pid 2685298:tid 2685298] [client 43.166.128.86:52288] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wartypig.com"] [uri "/"] [unique_id "amsW696ote5PWFCaBJBIPgAAADU"]
[Thu Jul 30 10:18:35.855607 2026] [security2:error] [pid 2693844:tid 2693844] [client 85.208.96.195:24856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.brodie-engineering.co.uk"] [uri "/robots.txt"] [unique_id "amsW640ATiVsQ9eklbCttAAAAAM"]
[Thu Jul 30 10:18:36.856035 2026] [security2:error] [pid 2672570:tid 2672570] [client 43.157.179.227:36140] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.co.uk"] [uri "/"] [unique_id "amsW7Fi_3pHPaouWvCXMjAAAAB8"]
[Thu Jul 30 10:18:36.859252 2026] [authz_core:error] [pid 2672570:tid 2672570] [client 43.157.179.227:36140] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 10:18:36.865482 2026] [authz_core:error] [pid 2672570:tid 2672570] [client 43.157.179.227:36140] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 10:18:37.119020 2026] [ssl:error] [pid 2691465:tid 2691465] (EAI 2)Name or service not known: [client 144.76.19.72:32576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:37.119052 2026] [ssl:error] [pid 2691465:tid 2691465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:37.174528 2026] [ssl:error] [pid 2697911:tid 2697911] (EAI 2)Name or service not known: [client 144.76.19.72:32586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:37.174555 2026] [ssl:error] [pid 2697911:tid 2697911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:37.261332 2026] [ssl:error] [pid 2698823:tid 2698823] (70014)End of file found: [client 216.73.216.199:35675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:37.459485 2026] [security2:error] [pid 2692034:tid 2692034] [client 185.191.171.16:62444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.brodie-engineering.co.uk"] [uri "/news/class-153-active-travel-carriages-redelivery.html"] [unique_id "amsW7Su9kg7rpQXVfCIFOAAAAAY"]
[Thu Jul 30 10:18:37.620241 2026] [ssl:error] [pid 2699742:tid 2699742] (70014)End of file found: [client 216.73.216.199:30266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:38.344259 2026] [access_compat:error] [pid 2699743:tid 2699743] [client 196.75.51.247:60775] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:38.819874 2026] [ssl:error] [pid 2672570:tid 2672570] (70014)End of file found: [client 216.73.216.199:5725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:40.227396 2026] [ssl:error] [pid 2696018:tid 2696018] (EAI 2)Name or service not known: [client 144.76.19.72:38740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:40.227423 2026] [ssl:error] [pid 2696018:tid 2696018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:40.278781 2026] [ssl:error] [pid 2691465:tid 2691465] (EAI 2)Name or service not known: [client 144.76.19.72:38742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:40.278812 2026] [ssl:error] [pid 2691465:tid 2691465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:41.743220 2026] [core:error] [pid 2700846:tid 2700846] [client 66.249.64.170:54605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:41.743243 2026] [core:error] [pid 2700846:tid 2700846] [client 66.249.64.170:54605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:43.330394 2026] [ssl:error] [pid 2700846:tid 2700846] (EAI 2)Name or service not known: [client 144.76.19.72:38754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:43.330427 2026] [ssl:error] [pid 2700846:tid 2700846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:43.385618 2026] [ssl:error] [pid 2693123:tid 2693123] (EAI 2)Name or service not known: [client 144.76.19.72:38758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:43.385642 2026] [ssl:error] [pid 2693123:tid 2693123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:43.682501 2026] [ssl:error] [pid 2696022:tid 2696022] (70014)End of file found: [client 216.73.216.199:33617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:44.100674 2026] [access_compat:error] [pid 2687558:tid 2687558] [client 196.75.51.247:60879] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:45.784521 2026] [ssl:error] [pid 2685157:tid 2685157] (70014)End of file found: [client 216.73.216.199:55359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:45.853028 2026] [security2:error] [pid 2693123:tid 2693123] [client 85.208.96.210:19130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/scorpio-rising-woman-dressing-style"] [unique_id "amsW9YUL5_HNFV7aDDJB_QAAADg"]
[Thu Jul 30 10:18:46.086033 2026] [ssl:error] [pid 2693122:tid 2693122] (70014)End of file found: [client 216.73.216.199:57892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:46.438762 2026] [ssl:error] [pid 2697911:tid 2697911] (EAI 2)Name or service not known: [client 144.76.19.72:38760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:46.438793 2026] [ssl:error] [pid 2697911:tid 2697911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:46.495906 2026] [ssl:error] [pid 2695948:tid 2695948] (EAI 2)Name or service not known: [client 144.76.19.72:38770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:46.495931 2026] [ssl:error] [pid 2695948:tid 2695948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:46.501037 2026] [core:error] [pid 2700761:tid 2700761] [client 66.249.66.168:59262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:46.501059 2026] [core:error] [pid 2700761:tid 2700761] [client 66.249.66.168:59262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:46.504814 2026] [core:error] [pid 2699741:tid 2699741] [client 66.249.66.168:47222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:46.504833 2026] [core:error] [pid 2699741:tid 2699741] [client 66.249.66.168:47222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:47.841080 2026] [authz_core:error] [pid 2693123:tid 2693123] [client 207.148.75.247:53058] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 10:18:49.015924 2026] [ssl:error] [pid 2683628:tid 2683628] (70014)End of file found: [client 216.73.216.199:31802] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:49.219861 2026] [core:error] [pid 2697953:tid 2697953] [client 66.249.64.170:46939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:49.219888 2026] [core:error] [pid 2697953:tid 2697953] [client 66.249.64.170:46939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:49.554316 2026] [ssl:error] [pid 2696023:tid 2696023] (EAI 2)Name or service not known: [client 144.76.19.72:38774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:49.554341 2026] [ssl:error] [pid 2696023:tid 2696023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:49.611376 2026] [ssl:error] [pid 2697866:tid 2697866] (EAI 2)Name or service not known: [client 144.76.19.72:22136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:49.611399 2026] [ssl:error] [pid 2697866:tid 2697866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:49.639266 2026] [security2:error] [pid 2700761:tid 2700761] [client 43.157.175.122:59996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "amsW-YpsYrQRmInI_qU0gAAAAAs"]
[Thu Jul 30 10:18:49.878861 2026] [access_compat:error] [pid 2697953:tid 2697953] [client 196.75.51.247:61033] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:50.909750 2026] [core:error] [pid 2700761:tid 2700761] [client 66.249.66.167:57374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:50.909772 2026] [core:error] [pid 2700761:tid 2700761] [client 66.249.66.167:57374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:18:51.540043 2026] [ssl:error] [pid 2696018:tid 2696018] (70014)End of file found: [client 216.73.216.199:42702] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:52.663962 2026] [ssl:error] [pid 2687558:tid 2687558] (EAI 2)Name or service not known: [client 144.76.19.72:22138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:52.663991 2026] [ssl:error] [pid 2687558:tid 2687558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:52.718247 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:22140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:52.718272 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:54.560200 2026] [ssl:error] [pid 2685157:tid 2685157] (70014)End of file found: [client 216.73.216.199:64336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:55.453879 2026] [ssl:error] [pid 2695986:tid 2695986] (70014)End of file found: [client 216.73.216.199:14067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:55.657468 2026] [access_compat:error] [pid 2702172:tid 2702172] [client 196.75.51.247:61236] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:18:55.775665 2026] [ssl:error] [pid 2699687:tid 2699687] (EAI 2)Name or service not known: [client 144.76.19.72:22148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:55.775689 2026] [ssl:error] [pid 2699687:tid 2699687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:55.828652 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:22154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:55.828675 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:56.348030 2026] [authz_core:error] [pid 2699687:tid 2699687] [client 82.102.18.190:56342] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/modules/error_log
[Thu Jul 30 10:18:57.575748 2026] [ssl:error] [pid 2693844:tid 2693844] (70014)End of file found: [client 216.73.216.199:30697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:18:57.984121 2026] [security2:error] [pid 2702261:tid 2702261] [client 74.7.227.11:54512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.londonkinesiology.com.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsXAaJfhIu3qIg3XQ43rgAAAC4"]
[Thu Jul 30 10:18:58.583983 2026] [cgi:error] [pid 2697437:tid 2697437] [client 66.249.66.195:39755] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:18:58.885467 2026] [ssl:error] [pid 2697957:tid 2697957] (EAI 2)Name or service not known: [client 144.76.19.72:22170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:58.885500 2026] [ssl:error] [pid 2697957:tid 2697957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:18:58.942918 2026] [ssl:error] [pid 2695983:tid 2695983] (EAI 2)Name or service not known: [client 144.76.19.72:22184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:18:58.942943 2026] [ssl:error] [pid 2695983:tid 2695983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:00.597556 2026] [ssl:error] [pid 2696023:tid 2696023] (70014)End of file found: [client 216.73.216.199:26173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:01.454575 2026] [access_compat:error] [pid 2699260:tid 2699260] [client 196.75.51.247:61385] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:01.999452 2026] [ssl:error] [pid 2697958:tid 2697958] (EAI 2)Name or service not known: [client 144.76.19.72:27296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:01.999478 2026] [ssl:error] [pid 2697958:tid 2697958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:02.050547 2026] [ssl:error] [pid 2700761:tid 2700761] (EAI 2)Name or service not known: [client 144.76.19.72:27300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:02.050572 2026] [ssl:error] [pid 2700761:tid 2700761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:02.121214 2026] [ssl:error] [pid 2693123:tid 2693123] (70014)End of file found: [client 216.73.216.199:35916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:03.646553 2026] [core:error] [pid 2697958:tid 2697958] (13)Permission denied: [client 216.73.216.199:44129] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/min_partial
[Thu Jul 30 10:19:04.553218 2026] [ssl:error] [pid 2697958:tid 2697958] (70014)End of file found: [client 216.73.216.199:44129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:05.022138 2026] [core:error] [pid 2697437:tid 2697437] [client 66.249.64.170:60507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:19:05.022165 2026] [core:error] [pid 2697437:tid 2697437] [client 66.249.64.170:60507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:19:05.105153 2026] [ssl:error] [pid 2702172:tid 2702172] (EAI 2)Name or service not known: [client 144.76.19.72:27314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:05.105183 2026] [ssl:error] [pid 2702172:tid 2702172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:05.162940 2026] [ssl:error] [pid 2702259:tid 2702259] (EAI 2)Name or service not known: [client 144.76.19.72:27328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:05.162965 2026] [ssl:error] [pid 2702259:tid 2702259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:05.267758 2026] [security2:error] [pid 2702265:tid 2702265] [client 80.244.44.55:52154] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXCY9XxAC93zkKUk6SOgAAADE"]
[Thu Jul 30 10:19:05.267815 2026] [security2:error] [pid 2702265:tid 2702265] [client 80.244.44.55:52154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXCY9XxAC93zkKUk6SOgAAADE"]
[Thu Jul 30 10:19:05.268124 2026] [security2:error] [pid 2702265:tid 2702265] [client 80.244.44.55:52154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXCY9XxAC93zkKUk6SOgAAADE"]
[Thu Jul 30 10:19:06.429952 2026] [security2:error] [pid 2702263:tid 2702263] [client 146.56.199.139:41218] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "q-s-e.org"] [uri "/"] [unique_id "amsXCprfo9maM5bkPc-XawAAADA"]
[Thu Jul 30 10:19:06.693939 2026] [core:error] [pid 2697953:tid 2697953] (13)Permission denied: [client 216.73.216.199:14112] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/hwcache_align
[Thu Jul 30 10:19:07.183301 2026] [lsapi:warn] [pid 2702257:tid 2702257] [client 107.155.97.54:58060] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:19:07.183341 2026] [lsapi:warn] [pid 2702257:tid 2702257] [client 107.155.97.54:58060] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:19:07.218863 2026] [access_compat:error] [pid 2702171:tid 2702171] [client 196.75.51.247:61522] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:07.470927 2026] [ssl:error] [pid 2697953:tid 2697953] (70014)End of file found: [client 216.73.216.199:14112] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:07.566038 2026] [lsapi:warn] [pid 2702257:tid 2702257] [client 107.155.97.54:58060] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:19:07.566077 2026] [lsapi:warn] [pid 2702257:tid 2702257] [client 107.155.97.54:58060] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:19:08.236395 2026] [ssl:error] [pid 2685157:tid 2685157] (EAI 2)Name or service not known: [client 144.76.19.72:27342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:08.236435 2026] [ssl:error] [pid 2685157:tid 2685157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:08.287877 2026] [ssl:error] [pid 2687558:tid 2687558] (EAI 2)Name or service not known: [client 144.76.19.72:27346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:08.287901 2026] [ssl:error] [pid 2687558:tid 2687558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:08.437039 2026] [authz_core:error] [pid 2702263:tid 2702263] [client 66.249.66.33:38059] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:19:08.439712 2026] [authz_core:error] [pid 2702263:tid 2702263] [client 66.249.66.33:38059] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:19:10.660741 2026] [security2:error] [pid 2698824:tid 2698824] [client 189.139.141.74:60740] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXDhKOdlR7Hcqt2BrzdwAAAAw"]
[Thu Jul 30 10:19:10.660788 2026] [security2:error] [pid 2698824:tid 2698824] [client 189.139.141.74:60740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXDhKOdlR7Hcqt2BrzdwAAAAw"]
[Thu Jul 30 10:19:10.661014 2026] [security2:error] [pid 2698824:tid 2698824] [client 189.139.141.74:60740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXDhKOdlR7Hcqt2BrzdwAAAAw"]
[Thu Jul 30 10:19:11.342407 2026] [ssl:error] [pid 2672570:tid 2672570] (EAI 2)Name or service not known: [client 144.76.19.72:64802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:11.342436 2026] [ssl:error] [pid 2672570:tid 2672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:11.395395 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:64812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:11.395421 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:11.535828 2026] [security2:error] [pid 2699743:tid 2699743] [client 216.73.216.199:16220] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/imap.ini"] [unique_id "amsXD8LZsI4dzJm22maZAwAAACI"]
[Thu Jul 30 10:19:11.536144 2026] [security2:error] [pid 2699743:tid 2699743] [client 216.73.216.199:16220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/imap.ini"] [unique_id "amsXD8LZsI4dzJm22maZAwAAACI"]
[Thu Jul 30 10:19:11.536373 2026] [security2:error] [pid 2699743:tid 2699743] [client 216.73.216.199:16220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/imap.ini"] [unique_id "amsXD8LZsI4dzJm22maZAwAAACI"]
[Thu Jul 30 10:19:12.581561 2026] [security2:error] [pid 2696018:tid 2696018] [client 47.128.99.157:20758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rediscoveredgarden.co.uk"] [uri "/robots.txt"] [unique_id "amsXENXPPZrxWHHjSsdZOwAAAB4"]
[Thu Jul 30 10:19:12.978034 2026] [access_compat:error] [pid 2687040:tid 2687040] [client 196.75.51.247:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:14.453245 2026] [ssl:error] [pid 2697953:tid 2697953] (EAI 2)Name or service not known: [client 144.76.19.72:64828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:14.453284 2026] [ssl:error] [pid 2697953:tid 2697953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:14.505837 2026] [ssl:error] [pid 2697437:tid 2697437] (EAI 2)Name or service not known: [client 144.76.19.72:64836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:14.505864 2026] [ssl:error] [pid 2697437:tid 2697437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:16.174508 2026] [security2:error] [pid 2697953:tid 2697953] [client 114.119.144.31:48781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/parents-and-toddlers/"] [unique_id "amsXFA7pGVZx7kAJpoSAMQAAACE"], referer: http://www.erskinenazarene.co.uk/event/parents-and-toddlers/?instance_id=35291
[Thu Jul 30 10:19:16.554180 2026] [security2:error] [pid 2687558:tid 2687558] [client 186.65.99.4:52839] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXFOHfIU5dQbvzYcUqSAAAABU"]
[Thu Jul 30 10:19:16.554236 2026] [security2:error] [pid 2687558:tid 2687558] [client 186.65.99.4:52839] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXFOHfIU5dQbvzYcUqSAAAABU"]
[Thu Jul 30 10:19:16.554482 2026] [security2:error] [pid 2687558:tid 2687558] [client 186.65.99.4:52839] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXFOHfIU5dQbvzYcUqSAAAABU"]
[Thu Jul 30 10:19:17.559327 2026] [ssl:error] [pid 2702624:tid 2702624] (EAI 2)Name or service not known: [client 144.76.19.72:64840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:17.559360 2026] [ssl:error] [pid 2702624:tid 2702624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:17.614591 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:64850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:17.614631 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:18.665084 2026] [security2:error] [pid 2702624:tid 2702624] [client 114.119.144.31:48791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/parents-and-toddlers/"] [unique_id "amsXFoF90BkxSpT_MNa7LgAAABo"], referer: http://www.erskinenazarene.co.uk/event/parents-and-toddlers/?instance_id=35291
[Thu Jul 30 10:19:18.726621 2026] [access_compat:error] [pid 2695985:tid 2695985] [client 196.75.51.247:61973] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:19.228459 2026] [access_compat:error] [pid 2693123:tid 2693123] [client 45.158.164.139:50722] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:19:19.535616 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.191.171.9:29628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsXF1kQ81qJQops1CcmlAAAACY"]
[Thu Jul 30 10:19:19.587048 2026] [ssl:error] [pid 2693844:tid 2693844] (70014)End of file found: [client 216.73.216.199:32910] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:20.498581 2026] [core:error] [pid 2699743:tid 2699743] (13)Permission denied: [client 216.73.216.199:16220] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/cpu_partial
[Thu Jul 30 10:19:20.668506 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:49300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:20.668529 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:20.776991 2026] [ssl:error] [pid 2702624:tid 2702624] (EAI 2)Name or service not known: [client 144.76.19.72:49302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:20.777019 2026] [ssl:error] [pid 2702624:tid 2702624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:23.864444 2026] [ssl:error] [pid 2702624:tid 2702624] (EAI 2)Name or service not known: [client 144.76.19.72:49304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:23.864470 2026] [ssl:error] [pid 2702624:tid 2702624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:23.877466 2026] [ssl:error] [pid 2699743:tid 2699743] (70014)End of file found: [client 216.73.216.199:16220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:23.915751 2026] [ssl:error] [pid 2684952:tid 2684952] (EAI 2)Name or service not known: [client 144.76.19.72:49308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:23.915771 2026] [ssl:error] [pid 2684952:tid 2684952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:25.021731 2026] [access_compat:error] [pid 2702624:tid 2702624] [client 196.75.51.247:62165] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:25.388041 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:33429] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo.ini"] [unique_id "amsXHSu9kg7rpQXVfCIFkgAAAAY"]
[Thu Jul 30 10:19:25.388346 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:33429] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo.ini"] [unique_id "amsXHSu9kg7rpQXVfCIFkgAAAAY"]
[Thu Jul 30 10:19:25.388561 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:33429] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/pdo.ini"] [unique_id "amsXHSu9kg7rpQXVfCIFkgAAAAY"]
[Thu Jul 30 10:19:25.457213 2026] [authz_core:error] [pid 2691465:tid 2691465] [client 66.249.66.33:48042] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:19:25.459870 2026] [authz_core:error] [pid 2691465:tid 2691465] [client 66.249.66.33:48042] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:19:25.675513 2026] [security2:error] [pid 2696022:tid 2696022] [client 185.191.171.7:34666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2417.0.html"] [unique_id "amsXHdfow80AWyjB91zrfQAAACU"]
[Thu Jul 30 10:19:25.689776 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:33429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory118/node0/compact
[Thu Jul 30 10:19:25.917254 2026] [access_compat:error] [pid 2702266:tid 2702266] [client 66.102.8.110:62355] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/04/clash-of-the-titans-bacofoil.jpg
[Thu Jul 30 10:19:25.917375 2026] [access_compat:error] [pid 2702266:tid 2702266] [client 66.102.8.110:62355] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:19:26.967956 2026] [ssl:error] [pid 2702171:tid 2702171] (EAI 2)Name or service not known: [client 144.76.19.72:49322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:26.967987 2026] [ssl:error] [pid 2702171:tid 2702171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:27.024322 2026] [ssl:error] [pid 2696022:tid 2696022] (EAI 2)Name or service not known: [client 144.76.19.72:49338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:27.024350 2026] [ssl:error] [pid 2696022:tid 2696022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:29.204360 2026] [security2:error] [pid 2702172:tid 2702172] [client 51.68.247.192:24806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/category/news/feed/"] [unique_id "amsXIbvXsxyBiTz6pjF7CgAAACA"]
[Thu Jul 30 10:19:29.310529 2026] [security2:error] [pid 2702170:tid 2702170] [client 94.154.43.229:19882] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "banskoexpress.com"] [uri "/.env"] [unique_id "amsXIazAZtOCBw0QyRra8QAAABs"]
[Thu Jul 30 10:19:29.310733 2026] [security2:error] [pid 2702170:tid 2702170] [client 94.154.43.229:19882] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "banskoexpress.com"] [uri "/.env"] [unique_id "amsXIazAZtOCBw0QyRra8QAAABs"]
[Thu Jul 30 10:19:29.310943 2026] [security2:error] [pid 2702170:tid 2702170] [client 94.154.43.229:19882] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsXIazAZtOCBw0QyRra8QAAABs"]
[Thu Jul 30 10:19:29.927650 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:33429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dentry/usersize
[Thu Jul 30 10:19:30.079099 2026] [ssl:error] [pid 2702170:tid 2702170] (EAI 2)Name or service not known: [client 144.76.19.72:58508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:30.079137 2026] [ssl:error] [pid 2702170:tid 2702170] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:30.131275 2026] [ssl:error] [pid 2698824:tid 2698824] (EAI 2)Name or service not known: [client 144.76.19.72:58518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:30.131305 2026] [ssl:error] [pid 2698824:tid 2698824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:30.773276 2026] [access_compat:error] [pid 2702170:tid 2702170] [client 196.75.51.247:62459] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:30.840383 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:33429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:31.144172 2026] [core:error] [pid 2684952:tid 2684952] (13)Permission denied: [client 216.73.216.199:37799] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_log_ticket/objects_partial
[Thu Jul 30 10:19:31.764008 2026] [core:error] [pid 2684952:tid 2684952] (13)Permission denied: [client 216.73.216.199:37799] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Parse/objects_partial
[Thu Jul 30 10:19:32.675428 2026] [ssl:error] [pid 2684952:tid 2684952] (70014)End of file found: [client 216.73.216.199:37799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:33.183219 2026] [ssl:error] [pid 2696023:tid 2696023] (EAI 2)Name or service not known: [client 144.76.19.72:58528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:33.183251 2026] [ssl:error] [pid 2696023:tid 2696023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:33.234679 2026] [ssl:error] [pid 2699741:tid 2699741] (EAI 2)Name or service not known: [client 144.76.19.72:58534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:33.234708 2026] [ssl:error] [pid 2699741:tid 2699741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:36.288607 2026] [ssl:error] [pid 2697959:tid 2697959] (EAI 2)Name or service not known: [client 144.76.19.72:58560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:36.288648 2026] [ssl:error] [pid 2697959:tid 2697959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:36.315527 2026] [core:error] [pid 2704078:tid 2704078] (13)Permission denied: [client 216.73.216.199:29711] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fasync_cache/poison
[Thu Jul 30 10:19:36.342361 2026] [ssl:error] [pid 2699637:tid 2699637] (EAI 2)Name or service not known: [client 144.76.19.72:58576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:36.342397 2026] [ssl:error] [pid 2699637:tid 2699637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:36.595812 2026] [access_compat:error] [pid 2693123:tid 2693123] [client 196.75.51.247:62573] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:37.523241 2026] [core:error] [pid 2704078:tid 2704078] (13)Permission denied: [client 216.73.216.199:29711] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/red_zone
[Thu Jul 30 10:19:39.028010 2026] [ssl:error] [pid 2704078:tid 2704078] (70014)End of file found: [client 216.73.216.199:29711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:39.412943 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:58580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:39.412974 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:39.465654 2026] [ssl:error] [pid 2699637:tid 2699637] (EAI 2)Name or service not known: [client 144.76.19.72:58588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:39.465683 2026] [ssl:error] [pid 2699637:tid 2699637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:41.438419 2026] [ssl:error] [pid 2693122:tid 2693122] (70014)End of file found: [client 216.73.216.199:39514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:42.352158 2026] [access_compat:error] [pid 2695985:tid 2695985] [client 196.75.51.247:62697] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:42.523569 2026] [ssl:error] [pid 2702266:tid 2702266] (EAI 2)Name or service not known: [client 144.76.19.72:40316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:42.523613 2026] [ssl:error] [pid 2702266:tid 2702266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:42.580524 2026] [ssl:error] [pid 2691465:tid 2691465] (EAI 2)Name or service not known: [client 144.76.19.72:40326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:42.580552 2026] [ssl:error] [pid 2691465:tid 2691465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:44.903041 2026] [security2:error] [pid 2696018:tid 2696018] [client 85.208.96.200:18778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5235.0/prev_next,prev.html"] [unique_id "amsXMNXPPZrxWHHjSsdZRgAAAB4"]
[Thu Jul 30 10:19:45.637198 2026] [ssl:error] [pid 2699637:tid 2699637] (EAI 2)Name or service not known: [client 144.76.19.72:40328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:45.637232 2026] [ssl:error] [pid 2699637:tid 2699637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:45.691562 2026] [ssl:error] [pid 2693123:tid 2693123] (EAI 2)Name or service not known: [client 144.76.19.72:40334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:45.691586 2026] [ssl:error] [pid 2693123:tid 2693123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:46.437043 2026] [security2:error] [pid 2684952:tid 2684952] [client 85.208.96.200:18790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/what-percentage-do-pimps-take"] [unique_id "amsXMpBKaepTzPO3AWeOHgAAACk"]
[Thu Jul 30 10:19:47.336061 2026] [security2:error] [pid 2697437:tid 2697437] [client 216.73.216.199:33303] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/NetworkManager/NetworkManager.conf"] [unique_id "amsXM6O-PWjiyTdD6-7LGQAAAAA"]
[Thu Jul 30 10:19:47.336456 2026] [security2:error] [pid 2697437:tid 2697437] [client 216.73.216.199:33303] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/NetworkManager/NetworkManager.conf"] [unique_id "amsXM6O-PWjiyTdD6-7LGQAAAAA"]
[Thu Jul 30 10:19:47.336730 2026] [security2:error] [pid 2697437:tid 2697437] [client 216.73.216.199:33303] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/NetworkManager/NetworkManager.conf"] [unique_id "amsXM6O-PWjiyTdD6-7LGQAAAAA"]
[Thu Jul 30 10:19:48.156700 2026] [access_compat:error] [pid 2704211:tid 2704211] [client 196.75.51.247:62956] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:48.748613 2026] [ssl:error] [pid 2693122:tid 2693122] (EAI 2)Name or service not known: [client 144.76.19.72:40350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:48.748651 2026] [ssl:error] [pid 2693122:tid 2693122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:48.801720 2026] [ssl:error] [pid 2687558:tid 2687558] (EAI 2)Name or service not known: [client 144.76.19.72:40360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:48.801753 2026] [ssl:error] [pid 2687558:tid 2687558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:49.092327 2026] [core:error] [pid 2702172:tid 2702172] (13)Permission denied: [client 216.73.216.199:4535] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/objects
[Thu Jul 30 10:19:50.303556 2026] [core:error] [pid 2702172:tid 2702172] (13)Permission denied: [client 216.73.216.199:4535] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/objects
[Thu Jul 30 10:19:51.213132 2026] [core:error] [pid 2702172:tid 2702172] (13)Permission denied: [client 216.73.216.199:4535] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-2k/alloc_calls
[Thu Jul 30 10:19:51.856442 2026] [ssl:error] [pid 2696022:tid 2696022] (EAI 2)Name or service not known: [client 144.76.19.72:41350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:51.856476 2026] [ssl:error] [pid 2696022:tid 2696022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:51.909297 2026] [ssl:error] [pid 2702171:tid 2702171] (EAI 2)Name or service not known: [client 144.76.19.72:41352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:51.909332 2026] [ssl:error] [pid 2702171:tid 2702171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:52.423523 2026] [core:error] [pid 2702172:tid 2702172] (13)Permission denied: [client 216.73.216.199:4535] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip6_dst_cache/cpu_slabs
[Thu Jul 30 10:19:52.731892 2026] [ssl:error] [pid 2702172:tid 2702172] (70014)End of file found: [client 216.73.216.199:4535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:53.637769 2026] [ssl:error] [pid 2697437:tid 2697437] (70014)End of file found: [client 216.73.216.199:33303] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:53.976642 2026] [access_compat:error] [pid 2704825:tid 2704825] [client 196.75.51.247:63093] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:19:54.851945 2026] [security2:error] [pid 2687040:tid 2687040] [client 216.73.216.199:39258] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/gd.ini"] [unique_id "amsXOjC2cGqYigTq1w3M6gAAAAk"]
[Thu Jul 30 10:19:54.852242 2026] [security2:error] [pid 2687040:tid 2687040] [client 216.73.216.199:39258] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/gd.ini"] [unique_id "amsXOjC2cGqYigTq1w3M6gAAAAk"]
[Thu Jul 30 10:19:54.852443 2026] [security2:error] [pid 2687040:tid 2687040] [client 216.73.216.199:39258] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/gd.ini"] [unique_id "amsXOjC2cGqYigTq1w3M6gAAAAk"]
[Thu Jul 30 10:19:54.968565 2026] [ssl:error] [pid 2687558:tid 2687558] (EAI 2)Name or service not known: [client 144.76.19.72:41362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:54.968621 2026] [ssl:error] [pid 2687558:tid 2687558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:55.026551 2026] [ssl:error] [pid 2696023:tid 2696023] (EAI 2)Name or service not known: [client 144.76.19.72:41376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:55.026615 2026] [ssl:error] [pid 2696023:tid 2696023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:55.455352 2026] [ssl:error] [pid 2687040:tid 2687040] (70014)End of file found: [client 216.73.216.199:39258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:58.079689 2026] [ssl:error] [pid 2700846:tid 2700846] (EAI 2)Name or service not known: [client 144.76.19.72:41390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:58.079714 2026] [ssl:error] [pid 2700846:tid 2700846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:58.132986 2026] [ssl:error] [pid 2693844:tid 2693844] (EAI 2)Name or service not known: [client 144.76.19.72:41404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:19:58.133014 2026] [ssl:error] [pid 2693844:tid 2693844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:19:58.489090 2026] [ssl:error] [pid 2705163:tid 2705163] (70014)End of file found: [client 216.73.216.199:5101] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:59.097478 2026] [ssl:error] [pid 2695986:tid 2695986] (70014)End of file found: [client 216.73.216.199:12054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:19:59.771276 2026] [access_compat:error] [pid 2695948:tid 2695948] [client 196.75.51.247:63236] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:20:00.005160 2026] [authz_core:error] [pid 2705265:tid 2705265] [client 82.102.18.190:55012] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/modules/akismet/error_log
[Thu Jul 30 10:20:01.187572 2026] [ssl:error] [pid 2687040:tid 2687040] (EAI 2)Name or service not known: [client 144.76.19.72:47474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:01.187615 2026] [ssl:error] [pid 2687040:tid 2687040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:01.240273 2026] [ssl:error] [pid 2699260:tid 2699260] (EAI 2)Name or service not known: [client 144.76.19.72:47480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:01.240297 2026] [ssl:error] [pid 2699260:tid 2699260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:01.541840 2026] [core:error] [pid 2702101:tid 2702101] [client 66.249.64.170:38052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:01.541868 2026] [core:error] [pid 2702101:tid 2702101] [client 66.249.64.170:38052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:04.292277 2026] [ssl:error] [pid 2702171:tid 2702171] (EAI 2)Name or service not known: [client 144.76.19.72:47482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:04.292322 2026] [ssl:error] [pid 2702171:tid 2702171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:04.345085 2026] [ssl:error] [pid 2702101:tid 2702101] (EAI 2)Name or service not known: [client 144.76.19.72:47490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:04.345116 2026] [ssl:error] [pid 2702101:tid 2702101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:04.554494 2026] [core:error] [pid 2691465:tid 2691465] (13)Permission denied: [client 216.73.216.199:35588] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/trace
[Thu Jul 30 10:20:05.523220 2026] [access_compat:error] [pid 2693122:tid 2693122] [client 196.75.51.247:63342] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:20:06.193555 2026] [core:error] [pid 2684952:tid 2684952] [client 66.249.64.171:63471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:06.193579 2026] [core:error] [pid 2684952:tid 2684952] [client 66.249.64.171:63471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:07.401341 2026] [ssl:error] [pid 2702261:tid 2702261] (EAI 2)Name or service not known: [client 144.76.19.72:47516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:07.401380 2026] [ssl:error] [pid 2702261:tid 2702261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:07.457980 2026] [ssl:error] [pid 2704149:tid 2704149] (EAI 2)Name or service not known: [client 144.76.19.72:47524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:07.458010 2026] [ssl:error] [pid 2704149:tid 2704149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:07.893876 2026] [core:error] [pid 2705265:tid 2705265] (13)Permission denied: [client 216.73.216.199:1891] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/min_partial
[Thu Jul 30 10:20:08.498184 2026] [core:error] [pid 2705265:tid 2705265] (13)Permission denied: [client 216.73.216.199:1891] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/iptable_mangle/uevent
[Thu Jul 30 10:20:10.528544 2026] [ssl:error] [pid 2696022:tid 2696022] (EAI 2)Name or service not known: [client 144.76.19.72:57068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:10.528579 2026] [ssl:error] [pid 2696022:tid 2696022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:10.584754 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:57084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:10.584782 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:11.338939 2026] [access_compat:error] [pid 2696022:tid 2696022] [client 196.75.51.247:63496] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:20:11.804438 2026] [lsapi:warn] [pid 2693844:tid 2693844] [client 87.201.112.222:23192] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:20:11.823244 2026] [core:error] [pid 2691465:tid 2691465] (13)Permission denied: [client 216.73.216.199:35588] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_inode_cache/aliases
[Thu Jul 30 10:20:13.647833 2026] [ssl:error] [pid 2705979:tid 2705979] (EAI 2)Name or service not known: [client 144.76.19.72:57088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:13.647868 2026] [ssl:error] [pid 2705979:tid 2705979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:13.704059 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:57096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:13.704106 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:14.764331 2026] [cgi:error] [pid 2705165:tid 2705165] [client 20.104.22.47:55697] AH02812: stderr from /home/blxghro/social.thecameramonkey.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:20:16.331572 2026] [core:error] [pid 2691465:tid 2691465] (13)Permission denied: [client 216.73.216.199:35588] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/aio_kiocb/objects_partial
[Thu Jul 30 10:20:16.756431 2026] [ssl:error] [pid 2699260:tid 2699260] (EAI 2)Name or service not known: [client 144.76.19.72:57102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:16.756465 2026] [ssl:error] [pid 2699260:tid 2699260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:16.812724 2026] [ssl:error] [pid 2705162:tid 2705162] (EAI 2)Name or service not known: [client 144.76.19.72:57114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:16.812755 2026] [ssl:error] [pid 2705162:tid 2705162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:17.112580 2026] [access_compat:error] [pid 2693844:tid 2693844] [client 196.75.51.247:63642] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:20:17.864196 2026] [core:error] [pid 2705114:tid 2705114] [client 66.249.66.194:58574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:17.864223 2026] [core:error] [pid 2705114:tid 2705114] [client 66.249.66.194:58574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:17.865115 2026] [core:error] [pid 2705162:tid 2705162] [client 66.249.66.196:48536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:17.865136 2026] [core:error] [pid 2705162:tid 2705162] [client 66.249.66.196:48536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:18.454854 2026] [core:error] [pid 2691465:tid 2691465] (13)Permission denied: [client 216.73.216.199:35588] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/min_partial
[Thu Jul 30 10:20:19.866197 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:18758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:19.866225 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:19.919172 2026] [ssl:error] [pid 2695948:tid 2695948] (EAI 2)Name or service not known: [client 144.76.19.72:18772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:19.919199 2026] [ssl:error] [pid 2695948:tid 2695948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:22.148232 2026] [lsapi:warn] [pid 2702260:tid 2702260] [client 87.201.112.222:23231] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:20:22.877062 2026] [access_compat:error] [pid 2684952:tid 2684952] [client 196.75.51.247:63826] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:20:22.977721 2026] [ssl:error] [pid 2706226:tid 2706226] (EAI 2)Name or service not known: [client 144.76.19.72:18784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:22.977757 2026] [ssl:error] [pid 2706226:tid 2706226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:23.031547 2026] [ssl:error] [pid 2699637:tid 2699637] (EAI 2)Name or service not known: [client 144.76.19.72:18792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:23.031577 2026] [ssl:error] [pid 2699637:tid 2699637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:23.401407 2026] [access_compat:error] [pid 2702101:tid 2702101] [client 45.158.164.139:44870] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:20:24.655015 2026] [security2:error] [pid 2706296:tid 2706296] [client 43.159.139.164:42918] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hatch-works.com"] [uri "/"] [unique_id "amsXWJE0oDxrzjZR-tOyUAAAABs"]
[Thu Jul 30 10:20:26.087622 2026] [ssl:error] [pid 2699637:tid 2699637] (EAI 2)Name or service not known: [client 144.76.19.72:18814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:26.087652 2026] [ssl:error] [pid 2699637:tid 2699637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:26.144103 2026] [ssl:error] [pid 2706327:tid 2706327] (EAI 2)Name or service not known: [client 144.76.19.72:18820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:26.144141 2026] [ssl:error] [pid 2706327:tid 2706327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:26.243712 2026] [security2:error] [pid 2706328:tid 2706328] [client 43.159.139.164:44000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hatch-works.com"] [uri "/"] [unique_id "amsXWhlNcMhNT5ei1WWLqQAAACE"], referer: http://www.hatch-works.com
[Thu Jul 30 10:20:26.888080 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:29066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_console/sections/__jump_table
[Thu Jul 30 10:20:29.088733 2026] [security2:error] [pid 2687517:tid 2687517] [client 43.166.237.57:49720] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-ganymede.com"] [uri "/"] [unique_id "amsXXfP_YVZw9vDSjF7XfQAAAAI"]
[Thu Jul 30 10:20:29.199446 2026] [ssl:error] [pid 2698824:tid 2698824] (EAI 2)Name or service not known: [client 144.76.19.72:18822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:29.199489 2026] [ssl:error] [pid 2698824:tid 2698824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:29.253337 2026] [ssl:error] [pid 2705936:tid 2705936] (EAI 2)Name or service not known: [client 144.76.19.72:18836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:29.253369 2026] [ssl:error] [pid 2705936:tid 2705936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:30.453720 2026] [security2:error] [pid 2698824:tid 2698824] [client 103.179.25.214:34926] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXXhKOdlR7Hcqt2Brz1QAAAAw"]
[Thu Jul 30 10:20:30.453766 2026] [security2:error] [pid 2698824:tid 2698824] [client 103.179.25.214:34926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXXhKOdlR7Hcqt2Brz1QAAAAw"]
[Thu Jul 30 10:20:30.454009 2026] [security2:error] [pid 2698824:tid 2698824] [client 103.179.25.214:34926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXXhKOdlR7Hcqt2Brz1QAAAAw"]
[Thu Jul 30 10:20:31.945773 2026] [lsapi:warn] [pid 2687517:tid 2687517] [client 87.201.112.222:44893] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:20:32.202842 2026] [security2:error] [pid 2702260:tid 2702260] [client 43.135.144.126:52786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chateausaintjeannet.com"] [uri "/"] [unique_id "amsXYFkQ81qJQops1CcnCgAAACY"]
[Thu Jul 30 10:20:32.313101 2026] [ssl:error] [pid 2696018:tid 2696018] (EAI 2)Name or service not known: [client 144.76.19.72:64246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:32.313132 2026] [ssl:error] [pid 2696018:tid 2696018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:32.368845 2026] [ssl:error] [pid 2706226:tid 2706226] (EAI 2)Name or service not known: [client 144.76.19.72:64262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:32.368878 2026] [ssl:error] [pid 2706226:tid 2706226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:32.381680 2026] [security2:error] [pid 2699741:tid 2699741] [client 123.22.67.23:39778] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXYACIpgJeP76CxHpHFgAAABw"]
[Thu Jul 30 10:20:32.381722 2026] [security2:error] [pid 2699741:tid 2699741] [client 123.22.67.23:39778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXYACIpgJeP76CxHpHFgAAABw"]
[Thu Jul 30 10:20:32.381968 2026] [security2:error] [pid 2699741:tid 2699741] [client 123.22.67.23:39778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXYACIpgJeP76CxHpHFgAAABw"]
[Thu Jul 30 10:20:33.637604 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:29066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/flags
[Thu Jul 30 10:20:33.675775 2026] [security2:error] [pid 2705265:tid 2705265] [client 43.135.144.126:35472] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chateausaintjeannet.com"] [uri "/"] [unique_id "amsXYWpJoqve65hatRD7RwAAACQ"], referer: http://chateausaintjeannet.com
[Thu Jul 30 10:20:35.142322 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:29066] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/python311/etc/locked_extensions.ini"] [unique_id "amsXYyu9kg7rpQXVfCIF3gAAAAY"]
[Thu Jul 30 10:20:35.142719 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:29066] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/python311/etc/locked_extensions.ini"] [unique_id "amsXYyu9kg7rpQXVfCIF3gAAAAY"]
[Thu Jul 30 10:20:35.143016 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:29066] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/python311/etc/locked_extensions.ini"] [unique_id "amsXYyu9kg7rpQXVfCIF3gAAAAY"]
[Thu Jul 30 10:20:35.260133 2026] [security2:error] [pid 2706351:tid 2706351] [client 111.119.39.99:14773] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXY3zNhIW7A4lF1LZwawAAACc"]
[Thu Jul 30 10:20:35.260188 2026] [security2:error] [pid 2706351:tid 2706351] [client 111.119.39.99:14773] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXY3zNhIW7A4lF1LZwawAAACc"]
[Thu Jul 30 10:20:35.260533 2026] [security2:error] [pid 2706351:tid 2706351] [client 111.119.39.99:14773] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXY3zNhIW7A4lF1LZwawAAACc"]
[Thu Jul 30 10:20:35.549218 2026] [ssl:error] [pid 2706328:tid 2706328] (EAI 2)Name or service not known: [client 144.76.19.72:64272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:35.549263 2026] [ssl:error] [pid 2706328:tid 2706328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:35.603283 2026] [ssl:error] [pid 2702171:tid 2702171] (EAI 2)Name or service not known: [client 144.76.19.72:64280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:35.603310 2026] [ssl:error] [pid 2702171:tid 2702171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:35.745261 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:29066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm/sections/__ex_table
[Thu Jul 30 10:20:36.752952 2026] [core:error] [pid 2705265:tid 2705265] [client 66.249.66.8:52986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:36.752989 2026] [core:error] [pid 2705265:tid 2705265] [client 66.249.66.8:52986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:38.687689 2026] [security2:error] [pid 2706328:tid 2706328] [client 43.135.144.126:39284] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "amsXZhlNcMhNT5ei1WWLqwAAACE"], referer: https://chateausaintjeannet.com/
[Thu Jul 30 10:20:38.700494 2026] [ssl:error] [pid 2695948:tid 2695948] (EAI 2)Name or service not known: [client 144.76.19.72:64294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:38.700524 2026] [ssl:error] [pid 2695948:tid 2695948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:38.756426 2026] [ssl:error] [pid 2695986:tid 2695986] (EAI 2)Name or service not known: [client 144.76.19.72:64308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:38.756481 2026] [ssl:error] [pid 2695986:tid 2695986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:39.266424 2026] [security2:error] [pid 2704149:tid 2704149] [client 114.119.155.144:44439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565564400/cat_ids~104,18/request_format~html"] [unique_id "amsXZwF65Aj6fJDHjFZxlAAAAAU"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1565564400/cat_ids~104/request_format~html
[Thu Jul 30 10:20:40.570000 2026] [security2:error] [pid 2695986:tid 2695986] [client 114.119.155.144:44441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565564400/cat_ids~104,18/request_format~html"] [unique_id "amsXaEYVmsOEeQ7nveabbwAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1565564400/cat_ids~104/request_format~html
[Thu Jul 30 10:20:40.862288 2026] [ssl:error] [pid 2706352:tid 2706352] (70014)End of file found: [client 216.73.216.199:13474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:20:41.701512 2026] [security2:error] [pid 2706920:tid 2706920] [client 54.37.252.212:58052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.sijames.com"] [uri "/robots.txt"] [unique_id "amsXaZv2LoKJQrgIP1G3kAAAABw"]
[Thu Jul 30 10:20:41.837113 2026] [ssl:error] [pid 2706921:tid 2706921] (EAI 2)Name or service not known: [client 144.76.19.72:32722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:41.837161 2026] [ssl:error] [pid 2706921:tid 2706921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:42.117689 2026] [ssl:error] [pid 2695986:tid 2695986] (EAI 2)Name or service not known: [client 144.76.19.72:32732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:42.117719 2026] [ssl:error] [pid 2695986:tid 2695986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:42.587244 2026] [lsapi:warn] [pid 2695986:tid 2695986] [client 87.201.112.222:23219] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:20:45.176539 2026] [ssl:error] [pid 2707033:tid 2707033] (EAI 2)Name or service not known: [client 144.76.19.72:32746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:45.176588 2026] [ssl:error] [pid 2707033:tid 2707033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:45.235156 2026] [ssl:error] [pid 2707034:tid 2707034] (EAI 2)Name or service not known: [client 144.76.19.72:32758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:45.235200 2026] [ssl:error] [pid 2707034:tid 2707034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:45.983151 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:29066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:20:46.279196 2026] [ssl:error] [pid 2704149:tid 2704149] (70014)End of file found: [client 216.73.216.199:60776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:20:46.835340 2026] [security2:error] [pid 2691465:tid 2691465] [client 185.191.171.5:35530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/is-dimethicone-banned-in-europe"] [unique_id "amsXbuXuAK0_nCCHZu-mBQAAAAc"]
[Thu Jul 30 10:20:46.946688 2026] [core:error] [pid 2687517:tid 2687517] [client 45.148.10.119:10196] AH00037: Symbolic link not allowed or link target not accessible: /home/hxsrumdr/public_html/test/index.php, referer: https://soul-connections.net/test/
[Thu Jul 30 10:20:48.290032 2026] [ssl:error] [pid 2707028:tid 2707028] (EAI 2)Name or service not known: [client 144.76.19.72:32762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:48.290063 2026] [ssl:error] [pid 2707028:tid 2707028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:48.342187 2026] [ssl:error] [pid 2706352:tid 2706352] (EAI 2)Name or service not known: [client 144.76.19.72:32764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:48.342247 2026] [ssl:error] [pid 2706352:tid 2706352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:48.689746 2026] [ssl:error] [pid 2699637:tid 2699637] (70014)End of file found: [client 216.73.216.199:34250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:20:50.646282 2026] [security2:error] [pid 2696018:tid 2696018] [client 49.51.50.147:47508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchlingfair.com"] [uri "/"] [unique_id "amsXctXPPZrxWHHjSsdZtwAAAB4"]
[Thu Jul 30 10:20:51.396368 2026] [ssl:error] [pid 2704078:tid 2704078] (EAI 2)Name or service not known: [client 144.76.19.72:65520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:51.396410 2026] [ssl:error] [pid 2704078:tid 2704078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:51.495126 2026] [ssl:error] [pid 2706968:tid 2706968] (EAI 2)Name or service not known: [client 144.76.19.72:65526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:51.495156 2026] [ssl:error] [pid 2706968:tid 2706968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:52.618393 2026] [ssl:error] [pid 2707028:tid 2707028] (70014)End of file found: [client 216.73.216.199:60971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:20:52.863776 2026] [lsapi:warn] [pid 2705265:tid 2705265] [client 87.201.112.222:23217] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:20:53.215464 2026] [security2:error] [pid 2705113:tid 2705113] [client 216.73.216.199:10280] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/mysqlnd.ini"] [unique_id "amsXdffH3Rr0Mm1at1zMHwAAABY"]
[Thu Jul 30 10:20:53.215765 2026] [security2:error] [pid 2705113:tid 2705113] [client 216.73.216.199:10280] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/mysqlnd.ini"] [unique_id "amsXdffH3Rr0Mm1at1zMHwAAABY"]
[Thu Jul 30 10:20:53.215992 2026] [security2:error] [pid 2705113:tid 2705113] [client 216.73.216.199:10280] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/mysqlnd.ini"] [unique_id "amsXdffH3Rr0Mm1at1zMHwAAABY"]
[Thu Jul 30 10:20:54.119495 2026] [ssl:error] [pid 2705113:tid 2705113] (70014)End of file found: [client 216.73.216.199:10280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:20:54.553507 2026] [ssl:error] [pid 2706226:tid 2706226] (EAI 2)Name or service not known: [client 144.76.19.72:18006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:54.553553 2026] [ssl:error] [pid 2706226:tid 2706226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:54.608009 2026] [ssl:error] [pid 2705165:tid 2705165] (EAI 2)Name or service not known: [client 144.76.19.72:18020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:54.608055 2026] [ssl:error] [pid 2705165:tid 2705165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:54.621988 2026] [ssl:error] [pid 2705265:tid 2705265] (70014)End of file found: [client 216.73.216.199:25637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:20:57.567214 2026] [core:error] [pid 2706327:tid 2706327] [client 66.249.64.170:36967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:57.567242 2026] [core:error] [pid 2706327:tid 2706327] [client 66.249.64.170:36967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:57.664806 2026] [ssl:error] [pid 2705936:tid 2705936] (EAI 2)Name or service not known: [client 144.76.19.72:18036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:57.664839 2026] [ssl:error] [pid 2705936:tid 2705936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:57.722365 2026] [ssl:error] [pid 2695985:tid 2695985] (EAI 2)Name or service not known: [client 144.76.19.72:18038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:20:57.722406 2026] [ssl:error] [pid 2695985:tid 2695985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:20:58.431647 2026] [core:error] [pid 2702171:tid 2702171] [client 66.249.64.170:62665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:58.431689 2026] [core:error] [pid 2702171:tid 2702171] [client 66.249.64.170:62665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:59.215104 2026] [security2:error] [pid 2704149:tid 2704149] [client 43.165.126.130:55912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "nigelmassey.com"] [uri "/"] [unique_id "amsXewF65Aj6fJDHjFZxmQAAAAU"]
[Thu Jul 30 10:20:59.578400 2026] [core:error] [pid 2706296:tid 2706296] [client 66.249.64.170:58365] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:20:59.578436 2026] [core:error] [pid 2706296:tid 2706296] [client 66.249.64.170:58365] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:00.777440 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:60712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:00.777475 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:00.834813 2026] [ssl:error] [pid 2707031:tid 2707031] (EAI 2)Name or service not known: [client 144.76.19.72:60720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:00.834850 2026] [ssl:error] [pid 2707031:tid 2707031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:01.211941 2026] [security2:error] [pid 2707032:tid 2707032] [client 114.119.156.225:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "revoracing.org.uk"] [uri "/robots.txt"] [unique_id "amsXfWgP785dNiGtJLb3hQAAADU"], referer: https://revoracing.org.uk/robots.txt
[Thu Jul 30 10:21:01.803563 2026] [authz_core:error] [pid 2705113:tid 2705113] [client 82.102.18.190:59490] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/modules/constant-contact/error_log
[Thu Jul 30 10:21:02.762877 2026] [security2:error] [pid 2704149:tid 2704149] [client 114.119.156.225:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/robots.txt"] [unique_id "amsXfgF65Aj6fJDHjFZxmgAAAAU"], referer: https://revoracing.org.uk/robots.txt
[Thu Jul 30 10:21:03.050830 2026] [core:error] [pid 2687517:tid 2687517] (13)Permission denied: [client 216.73.216.199:1771] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/remote_node_defrag_ratio
[Thu Jul 30 10:21:03.657142 2026] [security2:error] [pid 2706920:tid 2706920] [client 85.208.96.212:11240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,733.0/prev_next,next.html"] [unique_id "amsXf5v2LoKJQrgIP1G3lwAAABw"]
[Thu Jul 30 10:21:03.769169 2026] [lsapi:warn] [pid 2692034:tid 2692034] [client 87.201.112.222:58739] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:21:03.892851 2026] [ssl:error] [pid 2702172:tid 2702172] (EAI 2)Name or service not known: [client 144.76.19.72:60722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:03.892900 2026] [ssl:error] [pid 2702172:tid 2702172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:03.949097 2026] [ssl:error] [pid 2705165:tid 2705165] (EAI 2)Name or service not known: [client 144.76.19.72:60728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:03.949136 2026] [ssl:error] [pid 2705165:tid 2705165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:04.725173 2026] [security2:error] [pid 2682457:tid 2682457] [client 43.166.142.118:42303] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXgOSCqcHBgGy3oMEtHwAAAA4"]
[Thu Jul 30 10:21:04.725227 2026] [security2:error] [pid 2682457:tid 2682457] [client 43.166.142.118:42303] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXgOSCqcHBgGy3oMEtHwAAAA4"]
[Thu Jul 30 10:21:04.725555 2026] [security2:error] [pid 2682457:tid 2682457] [client 43.166.142.118:42303] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXgOSCqcHBgGy3oMEtHwAAAA4"]
[Thu Jul 30 10:21:05.461503 2026] [ssl:error] [pid 2687517:tid 2687517] (70014)End of file found: [client 216.73.216.199:1771] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:06.048511 2026] [security2:error] [pid 2706967:tid 2706967] [client 185.191.171.8:64380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amsXgpWhW14otalDCGbeCAAAACk"]
[Thu Jul 30 10:21:06.920398 2026] [core:error] [pid 2692034:tid 2692034] [client 66.249.64.172:48830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:06.920443 2026] [core:error] [pid 2692034:tid 2692034] [client 66.249.64.172:48830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:06.960688 2026] [security2:error] [pid 2702172:tid 2702172] [client 43.153.6.72:36923] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXgrvXsxyBiTz6pjF7LgAAACA"]
[Thu Jul 30 10:21:06.960751 2026] [security2:error] [pid 2702172:tid 2702172] [client 43.153.6.72:36923] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXgrvXsxyBiTz6pjF7LgAAACA"]
[Thu Jul 30 10:21:06.961052 2026] [security2:error] [pid 2702172:tid 2702172] [client 43.153.6.72:36923] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXgrvXsxyBiTz6pjF7LgAAACA"]
[Thu Jul 30 10:21:07.001727 2026] [ssl:error] [pid 2704266:tid 2704266] (EAI 2)Name or service not known: [client 144.76.19.72:60730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:07.001771 2026] [ssl:error] [pid 2704266:tid 2704266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:07.056766 2026] [ssl:error] [pid 2707032:tid 2707032] (EAI 2)Name or service not known: [client 144.76.19.72:60734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:07.056816 2026] [ssl:error] [pid 2707032:tid 2707032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:07.573815 2026] [ssl:error] [pid 2706920:tid 2706920] (70014)End of file found: [client 216.73.216.199:46900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:09.979624 2026] [core:crit] [pid 2696022:tid 2696022] (13)Permission denied: [client 216.73.216.199:20154] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/py-selector/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/py-selector/' is executable
[Thu Jul 30 10:21:09.980381 2026] [core:crit] [pid 2696022:tid 2696022] (13)Permission denied: [client 216.73.216.199:20154] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/wizard/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/wizard/' is executable
[Thu Jul 30 10:21:09.980803 2026] [core:crit] [pid 2696022:tid 2696022] (13)Permission denied: [client 216.73.216.199:20154] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/hooks/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/hooks/' is executable
[Thu Jul 30 10:21:10.130203 2026] [ssl:error] [pid 2707033:tid 2707033] (EAI 2)Name or service not known: [client 144.76.19.72:18870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:10.130241 2026] [ssl:error] [pid 2707033:tid 2707033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:10.186107 2026] [ssl:error] [pid 2707034:tid 2707034] (EAI 2)Name or service not known: [client 144.76.19.72:18874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:10.186148 2026] [ssl:error] [pid 2707034:tid 2707034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:10.278934 2026] [ssl:error] [pid 2696022:tid 2696022] (70014)End of file found: [client 216.73.216.199:20154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:10.645235 2026] [security2:error] [pid 2707033:tid 2707033] [client 43.153.6.72:44631] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXhlgFZLb7-VPuFob_PAAAADY"]
[Thu Jul 30 10:21:10.645279 2026] [security2:error] [pid 2707033:tid 2707033] [client 43.153.6.72:44631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXhlgFZLb7-VPuFob_PAAAADY"]
[Thu Jul 30 10:21:10.645533 2026] [security2:error] [pid 2707033:tid 2707033] [client 43.153.6.72:44631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXhlgFZLb7-VPuFob_PAAAADY"]
[Thu Jul 30 10:21:11.111325 2026] [ssl:error] [pid 2707033:tid 2707033] (70014)End of file found: [client 216.73.216.199:11717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:11.524770 2026] [authz_core:error] [pid 2707939:tid 2707939] [client 104.193.252.131:61827] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 10:21:11.526527 2026] [authz_core:error] [pid 2707939:tid 2707939] [client 104.193.252.131:61827] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 10:21:12.631362 2026] [security2:error] [pid 2707938:tid 2707938] [client 47.128.99.105:50380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amsXiEbE0iiNQFiEcLM4xgAAAAc"]
[Thu Jul 30 10:21:12.662770 2026] [security2:error] [pid 2705936:tid 2705936] [client 85.208.96.196:20846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7141.45.html"] [unique_id "amsXiBAzQuPE_b9cO9fkXQAAAAA"]
[Thu Jul 30 10:21:13.058839 2026] [authz_core:error] [pid 2705936:tid 2705936] [client 66.249.66.35:62728] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:21:13.061487 2026] [authz_core:error] [pid 2705936:tid 2705936] [client 66.249.66.35:62728] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:21:13.242343 2026] [ssl:error] [pid 2707970:tid 2707970] (EAI 2)Name or service not known: [client 144.76.19.72:18886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:13.242385 2026] [ssl:error] [pid 2707970:tid 2707970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:13.276791 2026] [core:error] [pid 2707969:tid 2707969] [client 66.249.66.168:48196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:13.276851 2026] [core:error] [pid 2707969:tid 2707969] [client 66.249.66.168:48196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:13.298951 2026] [ssl:error] [pid 2707972:tid 2707972] (EAI 2)Name or service not known: [client 144.76.19.72:18900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:13.298990 2026] [ssl:error] [pid 2707972:tid 2707972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:13.971447 2026] [security2:error] [pid 2707969:tid 2707969] [client 85.208.96.203:20936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,495.0/prev_next,prev.html"] [unique_id "amsXiSuONwe9AnNvWWcOYgAAAAo"]
[Thu Jul 30 10:21:14.087908 2026] [lsapi:warn] [pid 2707970:tid 2707970] [client 87.201.112.222:44881] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:21:14.526903 2026] [security2:error] [pid 2704078:tid 2704078] [client 43.157.98.187:60292] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amsXipT1ih0L3DpssKLKFQAAAAQ"]
[Thu Jul 30 10:21:15.115301 2026] [ssl:error] [pid 2707027:tid 2707027] (70014)End of file found: [client 216.73.216.199:45290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:16.358939 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:18916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:16.358980 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:16.388583 2026] [security2:error] [pid 2708020:tid 2708020] [client 123.207.65.62:45776] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amsXjP_G47cJXxlyFJeM2gAAACI"]
[Thu Jul 30 10:21:16.412936 2026] [ssl:error] [pid 2708022:tid 2708022] (EAI 2)Name or service not known: [client 144.76.19.72:18924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:16.412970 2026] [ssl:error] [pid 2708022:tid 2708022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:19.468372 2026] [ssl:error] [pid 2687517:tid 2687517] (EAI 2)Name or service not known: [client 144.76.19.72:18934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:19.468406 2026] [ssl:error] [pid 2687517:tid 2687517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:19.521474 2026] [ssl:error] [pid 2708022:tid 2708022] (EAI 2)Name or service not known: [client 144.76.19.72:18950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:19.521501 2026] [ssl:error] [pid 2708022:tid 2708022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:22.577557 2026] [ssl:error] [pid 2704149:tid 2704149] (EAI 2)Name or service not known: [client 144.76.19.72:55830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:22.577585 2026] [ssl:error] [pid 2704149:tid 2704149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:22.631228 2026] [ssl:error] [pid 2704825:tid 2704825] (EAI 2)Name or service not known: [client 144.76.19.72:55838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:22.631284 2026] [ssl:error] [pid 2704825:tid 2704825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:25.305537 2026] [lsapi:warn] [pid 2699637:tid 2699637] [client 87.201.112.222:23179] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:21:25.690096 2026] [ssl:error] [pid 2707938:tid 2707938] (EAI 2)Name or service not known: [client 144.76.19.72:55848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:25.690137 2026] [ssl:error] [pid 2707938:tid 2707938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:25.745551 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:55856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:25.745623 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:26.049268 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amsXllkQ81qJQops1CcnGQAAACY"]
[Thu Jul 30 10:21:26.049457 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amsXllkQ81qJQops1CcnGQAAACY"]
[Thu Jul 30 10:21:26.049707 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amsXllkQ81qJQops1CcnGQAAACY"]
[Thu Jul 30 10:21:26.063262 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amsXlmgP785dNiGtJLb3iQAAADU"]
[Thu Jul 30 10:21:26.063444 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amsXlmgP785dNiGtJLb3iQAAADU"]
[Thu Jul 30 10:21:26.063649 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amsXlmgP785dNiGtJLb3iQAAADU"]
[Thu Jul 30 10:21:26.066815 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/api/.env"] [unique_id "amsXllkQ81qJQops1CcnGgAAACY"]
[Thu Jul 30 10:21:26.066948 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/api/.env"] [unique_id "amsXllkQ81qJQops1CcnGgAAACY"]
[Thu Jul 30 10:21:26.067166 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/api/.env"] [unique_id "amsXllkQ81qJQops1CcnGgAAACY"]
[Thu Jul 30 10:21:26.084303 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/backend/.env"] [unique_id "amsXllkQ81qJQops1CcnGwAAACY"]
[Thu Jul 30 10:21:26.084447 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/api/.env"] [unique_id "amsXlmgP785dNiGtJLb3igAAADU"]
[Thu Jul 30 10:21:26.084464 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/backend/.env"] [unique_id "amsXllkQ81qJQops1CcnGwAAACY"]
[Thu Jul 30 10:21:26.084589 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/api/.env"] [unique_id "amsXlmgP785dNiGtJLb3igAAADU"]
[Thu Jul 30 10:21:26.084671 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/backend/.env"] [unique_id "amsXllkQ81qJQops1CcnGwAAACY"]
[Thu Jul 30 10:21:26.084773 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/api/.env"] [unique_id "amsXlmgP785dNiGtJLb3igAAADU"]
[Thu Jul 30 10:21:26.104925 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/backend/.env"] [unique_id "amsXlmgP785dNiGtJLb3iwAAADU"]
[Thu Jul 30 10:21:26.105084 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/backend/.env"] [unique_id "amsXlmgP785dNiGtJLb3iwAAADU"]
[Thu Jul 30 10:21:26.105250 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/backend/.env"] [unique_id "amsXlmgP785dNiGtJLb3iwAAADU"]
[Thu Jul 30 10:21:26.119749 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/admin/.env"] [unique_id "amsXllkQ81qJQops1CcnHQAAACY"]
[Thu Jul 30 10:21:26.119912 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/admin/.env"] [unique_id "amsXllkQ81qJQops1CcnHQAAACY"]
[Thu Jul 30 10:21:26.120127 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/admin/.env"] [unique_id "amsXllkQ81qJQops1CcnHQAAACY"]
[Thu Jul 30 10:21:26.146383 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/admin/.env"] [unique_id "amsXlmgP785dNiGtJLb3jQAAADU"]
[Thu Jul 30 10:21:26.146535 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/admin/.env"] [unique_id "amsXlmgP785dNiGtJLb3jQAAADU"]
[Thu Jul 30 10:21:26.146716 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/admin/.env"] [unique_id "amsXlmgP785dNiGtJLb3jQAAADU"]
[Thu Jul 30 10:21:26.154841 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/laravel/.env"] [unique_id "amsXllkQ81qJQops1CcnHwAAACY"]
[Thu Jul 30 10:21:26.154991 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/laravel/.env"] [unique_id "amsXllkQ81qJQops1CcnHwAAACY"]
[Thu Jul 30 10:21:26.155196 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/laravel/.env"] [unique_id "amsXllkQ81qJQops1CcnHwAAACY"]
[Thu Jul 30 10:21:26.172367 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/core/.env"] [unique_id "amsXllkQ81qJQops1CcnIAAAACY"]
[Thu Jul 30 10:21:26.172505 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/core/.env"] [unique_id "amsXllkQ81qJQops1CcnIAAAACY"]
[Thu Jul 30 10:21:26.172701 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/core/.env"] [unique_id "amsXllkQ81qJQops1CcnIAAAACY"]
[Thu Jul 30 10:21:26.187961 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/laravel/.env"] [unique_id "amsXlmgP785dNiGtJLb3jwAAADU"]
[Thu Jul 30 10:21:26.188155 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/laravel/.env"] [unique_id "amsXlmgP785dNiGtJLb3jwAAADU"]
[Thu Jul 30 10:21:26.188338 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/laravel/.env"] [unique_id "amsXlmgP785dNiGtJLb3jwAAADU"]
[Thu Jul 30 10:21:26.207374 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env.example"] [unique_id "amsXllkQ81qJQops1CcnIgAAACY"]
[Thu Jul 30 10:21:26.207548 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env.example"] [unique_id "amsXllkQ81qJQops1CcnIgAAACY"]
[Thu Jul 30 10:21:26.207757 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env.example"] [unique_id "amsXllkQ81qJQops1CcnIgAAACY"]
[Thu Jul 30 10:21:26.208415 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/core/.env"] [unique_id "amsXlmgP785dNiGtJLb3kAAAADU"]
[Thu Jul 30 10:21:26.208544 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/core/.env"] [unique_id "amsXlmgP785dNiGtJLb3kAAAADU"]
[Thu Jul 30 10:21:26.208711 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/core/.env"] [unique_id "amsXlmgP785dNiGtJLb3kAAAADU"]
[Thu Jul 30 10:21:26.224955 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/app/.env"] [unique_id "amsXllkQ81qJQops1CcnIwAAACY"]
[Thu Jul 30 10:21:26.225125 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/app/.env"] [unique_id "amsXllkQ81qJQops1CcnIwAAACY"]
[Thu Jul 30 10:21:26.225311 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/app/.env"] [unique_id "amsXllkQ81qJQops1CcnIwAAACY"]
[Thu Jul 30 10:21:26.242402 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/dev/.env"] [unique_id "amsXllkQ81qJQops1CcnJAAAACY"]
[Thu Jul 30 10:21:26.242533 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/dev/.env"] [unique_id "amsXllkQ81qJQops1CcnJAAAACY"]
[Thu Jul 30 10:21:26.242733 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/dev/.env"] [unique_id "amsXllkQ81qJQops1CcnJAAAACY"]
[Thu Jul 30 10:21:26.249687 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env.example"] [unique_id "amsXlmgP785dNiGtJLb3kgAAADU"]
[Thu Jul 30 10:21:26.249847 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env.example"] [unique_id "amsXlmgP785dNiGtJLb3kgAAADU"]
[Thu Jul 30 10:21:26.250088 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env.example"] [unique_id "amsXlmgP785dNiGtJLb3kgAAADU"]
[Thu Jul 30 10:21:26.273515 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/app/.env"] [unique_id "amsXlmgP785dNiGtJLb3kwAAADU"]
[Thu Jul 30 10:21:26.273674 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/app/.env"] [unique_id "amsXlmgP785dNiGtJLb3kwAAADU"]
[Thu Jul 30 10:21:26.273852 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/app/.env"] [unique_id "amsXlmgP785dNiGtJLb3kwAAADU"]
[Thu Jul 30 10:21:26.294270 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/dev/.env"] [unique_id "amsXlmgP785dNiGtJLb3lAAAADU"]
[Thu Jul 30 10:21:26.294451 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/dev/.env"] [unique_id "amsXlmgP785dNiGtJLb3lAAAADU"]
[Thu Jul 30 10:21:26.294651 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/dev/.env"] [unique_id "amsXlmgP785dNiGtJLb3lAAAADU"]
[Thu Jul 30 10:21:26.556008 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/server/.env"] [unique_id "amsXllkQ81qJQops1CcnJgAAACY"]
[Thu Jul 30 10:21:26.556203 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/server/.env"] [unique_id "amsXllkQ81qJQops1CcnJgAAACY"]
[Thu Jul 30 10:21:26.556395 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/server/.env"] [unique_id "amsXllkQ81qJQops1CcnJgAAACY"]
[Thu Jul 30 10:21:26.573449 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env.save"] [unique_id "amsXllkQ81qJQops1CcnJwAAACY"]
[Thu Jul 30 10:21:26.573610 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env.save"] [unique_id "amsXllkQ81qJQops1CcnJwAAACY"]
[Thu Jul 30 10:21:26.573784 2026] [security2:error] [pid 2702260:tid 2702260] [client 185.93.89.167:47853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env.save"] [unique_id "amsXllkQ81qJQops1CcnJwAAACY"]
[Thu Jul 30 10:21:26.661997 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/server/.env"] [unique_id "amsXlmgP785dNiGtJLb3lgAAADU"]
[Thu Jul 30 10:21:26.662211 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/server/.env"] [unique_id "amsXlmgP785dNiGtJLb3lgAAADU"]
[Thu Jul 30 10:21:26.662395 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/server/.env"] [unique_id "amsXlmgP785dNiGtJLb3lgAAADU"]
[Thu Jul 30 10:21:26.682936 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env.save"] [unique_id "amsXlmgP785dNiGtJLb3lwAAADU"]
[Thu Jul 30 10:21:26.683133 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env.save"] [unique_id "amsXlmgP785dNiGtJLb3lwAAADU"]
[Thu Jul 30 10:21:26.683336 2026] [security2:error] [pid 2707032:tid 2707032] [client 185.93.89.167:54779] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env.save"] [unique_id "amsXlmgP785dNiGtJLb3lwAAADU"]
[Thu Jul 30 10:21:27.143763 2026] [ssl:error] [pid 2708021:tid 2708021] (70014)End of file found: [client 216.73.216.199:26207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:27.234168 2026] [core:error] [pid 2702169:tid 2702169] [client 66.249.64.171:46158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:27.234196 2026] [core:error] [pid 2702169:tid 2702169] [client 66.249.64.171:46158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:28.803748 2026] [ssl:error] [pid 2704149:tid 2704149] (EAI 2)Name or service not known: [client 144.76.19.72:55866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:28.803776 2026] [ssl:error] [pid 2704149:tid 2704149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:28.919479 2026] [ssl:error] [pid 2705113:tid 2705113] (EAI 2)Name or service not known: [client 144.76.19.72:55882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:28.919515 2026] [ssl:error] [pid 2705113:tid 2705113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:30.845224 2026] [ssl:error] [pid 2707938:tid 2707938] (70014)End of file found: [client 216.73.216.199:17578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:31.974950 2026] [ssl:error] [pid 2707032:tid 2707032] (EAI 2)Name or service not known: [client 144.76.19.72:24628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:31.975005 2026] [ssl:error] [pid 2707032:tid 2707032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:32.077006 2026] [ssl:error] [pid 2704149:tid 2704149] (EAI 2)Name or service not known: [client 144.76.19.72:24654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:32.077037 2026] [ssl:error] [pid 2704149:tid 2704149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:33.376388 2026] [access_compat:error] [pid 2693123:tid 2693123] [client 43.130.116.87:33222] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:21:33.845035 2026] [security2:error] [pid 2708015:tid 2708015] [client 43.167.245.18:33976] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amsXnYiSX3JkwGAxuauPWQAAABI"]
[Thu Jul 30 10:21:34.762040 2026] [core:error] [pid 2708021:tid 2708021] (13)Permission denied: [client 216.73.216.199:29897] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/slabs_cpu_partial
[Thu Jul 30 10:21:35.135172 2026] [ssl:error] [pid 2705936:tid 2705936] (EAI 2)Name or service not known: [client 144.76.19.72:24664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:35.135198 2026] [ssl:error] [pid 2705936:tid 2705936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:35.190972 2026] [ssl:error] [pid 2702260:tid 2702260] (EAI 2)Name or service not known: [client 144.76.19.72:24672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:35.191013 2026] [ssl:error] [pid 2702260:tid 2702260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:35.594666 2026] [lsapi:warn] [pid 2707032:tid 2707032] [client 87.201.112.222:44875] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:21:36.267277 2026] [core:error] [pid 2708021:tid 2708021] (13)Permission denied: [client 216.73.216.199:29897] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory147/subsystem/uevent
[Thu Jul 30 10:21:36.568581 2026] [ssl:error] [pid 2708021:tid 2708021] (70014)End of file found: [client 216.73.216.199:29897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:37.166370 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory162/subsystem/uevent
[Thu Jul 30 10:21:37.767856 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-2k/object_size
[Thu Jul 30 10:21:38.068687 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory43/subsystem/uevent
[Thu Jul 30 10:21:38.250941 2026] [ssl:error] [pid 2706970:tid 2706970] (EAI 2)Name or service not known: [client 144.76.19.72:24678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:38.250973 2026] [ssl:error] [pid 2706970:tid 2706970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:38.304427 2026] [ssl:error] [pid 2708017:tid 2708017] (EAI 2)Name or service not known: [client 144.76.19.72:24686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:38.304457 2026] [ssl:error] [pid 2708017:tid 2708017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:38.579106 2026] [access_compat:error] [pid 2706970:tid 2706970] [client 167.99.240.84:43012] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:21:39.186403 2026] [access_compat:error] [pid 2705165:tid 2705165] [client 45.158.164.139:54196] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:21:39.573509 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/slabs
[Thu Jul 30 10:21:40.602731 2026] [security2:error] [pid 2702169:tid 2702169] [client 128.1.120.112:49952] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "www.dbstart.com"] [uri "/"] [unique_id "amsXpH0pqAGdTzV2z8NimQAAABk"]
[Thu Jul 30 10:21:40.603786 2026] [security2:error] [pid 2702169:tid 2702169] [client 128.1.120.112:49952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dbstart.com"] [uri "/"] [unique_id "amsXpH0pqAGdTzV2z8NimQAAABk"]
[Thu Jul 30 10:21:40.604145 2026] [security2:error] [pid 2702169:tid 2702169] [client 128.1.120.112:49952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "www.dbstart.com"] [uri "/"] [unique_id "amsXpH0pqAGdTzV2z8NimQAAABk"]
[Thu Jul 30 10:21:40.777413 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/cpu_slabs
[Thu Jul 30 10:21:41.377226 2026] [ssl:error] [pid 2709114:tid 2709114] (EAI 2)Name or service not known: [client 144.76.19.72:63148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:41.377277 2026] [ssl:error] [pid 2709114:tid 2709114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:41.380156 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory231/subsystem/uevent
[Thu Jul 30 10:21:41.406969 2026] [cgi:error] [pid 2706968:tid 2706968] [client 20.9.4.9:23806] AH02812: stderr from /home/winterb/public_html/ezazz/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:21:41.431321 2026] [ssl:error] [pid 2693123:tid 2693123] (EAI 2)Name or service not known: [client 144.76.19.72:63162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:41.431347 2026] [ssl:error] [pid 2693123:tid 2693123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:41.681102 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory259/subsystem/uevent
[Thu Jul 30 10:21:41.982088 2026] [core:error] [pid 2699637:tid 2699637] (13)Permission denied: [client 216.73.216.199:4056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory129/subsystem/uevent
[Thu Jul 30 10:21:43.189982 2026] [core:error] [pid 2708017:tid 2708017] (13)Permission denied: [client 216.73.216.199:46801] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/slabs
[Thu Jul 30 10:21:44.238639 2026] [cgi:error] [pid 2705113:tid 2705113] [client 194.9.110.170:54847] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:21:44.488224 2026] [ssl:error] [pid 2704825:tid 2704825] (EAI 2)Name or service not known: [client 144.76.19.72:63168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:44.488255 2026] [ssl:error] [pid 2704825:tid 2704825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:44.541208 2026] [ssl:error] [pid 2702169:tid 2702169] (EAI 2)Name or service not known: [client 144.76.19.72:63184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:44.541246 2026] [ssl:error] [pid 2702169:tid 2702169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:45.495944 2026] [security2:error] [pid 2702169:tid 2702169] [client 94.154.43.185:32356] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brodie-engineering.co.uk"] [uri "/.env"] [unique_id "amsXqX0pqAGdTzV2z8NimgAAABk"]
[Thu Jul 30 10:21:45.496146 2026] [security2:error] [pid 2702169:tid 2702169] [client 94.154.43.185:32356] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "brodie-engineering.co.uk"] [uri "/.env"] [unique_id "amsXqX0pqAGdTzV2z8NimgAAABk"]
[Thu Jul 30 10:21:45.496387 2026] [security2:error] [pid 2702169:tid 2702169] [client 94.154.43.185:32356] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "brodie-engineering.co.uk"] [uri "/.env"] [unique_id "amsXqX0pqAGdTzV2z8NimgAAABk"]
[Thu Jul 30 10:21:45.692615 2026] [lsapi:warn] [pid 2693123:tid 2693123] [client 87.201.112.222:44926] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:21:46.501958 2026] [core:error] [pid 2708017:tid 2708017] (13)Permission denied: [client 216.73.216.199:46801] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory112/subsystem/uevent
[Thu Jul 30 10:21:47.258034 2026] [security2:error] [pid 2693123:tid 2693123] [client 185.191.171.17:57680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/is-kate-phillips-in-poldark"] [unique_id "amsXq4UL5_HNFV7aDDJCeQAAADg"]
[Thu Jul 30 10:21:47.597589 2026] [ssl:error] [pid 2709373:tid 2709373] (EAI 2)Name or service not known: [client 144.76.19.72:63186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:47.597646 2026] [ssl:error] [pid 2709373:tid 2709373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:47.649585 2026] [ssl:error] [pid 2707027:tid 2707027] (EAI 2)Name or service not known: [client 144.76.19.72:63190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:47.649626 2026] [ssl:error] [pid 2707027:tid 2707027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:47.712973 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/.env"] [unique_id "amsXqx80Xp5zXLJvCqSBDAAAAAg"]
[Thu Jul 30 10:21:47.713164 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/.env"] [unique_id "amsXqx80Xp5zXLJvCqSBDAAAAAg"]
[Thu Jul 30 10:21:47.749314 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXqx80Xp5zXLJvCqSBDAAAAAg"]
[Thu Jul 30 10:21:48.008220 2026] [ssl:error] [pid 2708017:tid 2708017] (70014)End of file found: [client 216.73.216.199:46801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:48.020716 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBEAAAAAg"]
[Thu Jul 30 10:21:48.020855 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBEAAAAAg"]
[Thu Jul 30 10:21:48.055691 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBEAAAAAg"]
[Thu Jul 30 10:21:48.168740 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBEgAAAAg"]
[Thu Jul 30 10:21:48.168922 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBEgAAAAg"]
[Thu Jul 30 10:21:48.203097 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBEgAAAAg"]
[Thu Jul 30 10:21:48.317253 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBFAAAAAg"]
[Thu Jul 30 10:21:48.317401 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBFAAAAAg"]
[Thu Jul 30 10:21:48.351367 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBFAAAAAg"]
[Thu Jul 30 10:21:48.390527 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBFQAAAAg"]
[Thu Jul 30 10:21:48.390726 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBFQAAAAg"]
[Thu Jul 30 10:21:48.425343 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBFQAAAAg"]
[Thu Jul 30 10:21:48.543186 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBFwAAAAg"]
[Thu Jul 30 10:21:48.543394 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBFwAAAAg"]
[Thu Jul 30 10:21:48.578234 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBFwAAAAg"]
[Thu Jul 30 10:21:48.690831 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXrB80Xp5zXLJvCqSBGQAAAAg"]
[Thu Jul 30 10:21:48.691008 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXrB80Xp5zXLJvCqSBGQAAAAg"]
[Thu Jul 30 10:21:48.725679 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBGQAAAAg"]
[Thu Jul 30 10:21:48.764644 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBGgAAAAg"]
[Thu Jul 30 10:21:48.764834 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBGgAAAAg"]
[Thu Jul 30 10:21:48.805649 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBGgAAAAg"]
[Thu Jul 30 10:21:48.844675 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXrB80Xp5zXLJvCqSBGwAAAAg"]
[Thu Jul 30 10:21:48.844867 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXrB80Xp5zXLJvCqSBGwAAAAg"]
[Thu Jul 30 10:21:48.878315 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBGwAAAAg"]
[Thu Jul 30 10:21:48.917171 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBHAAAAAg"]
[Thu Jul 30 10:21:48.917322 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXrB80Xp5zXLJvCqSBHAAAAAg"]
[Thu Jul 30 10:21:48.951052 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrB80Xp5zXLJvCqSBHAAAAAg"]
[Thu Jul 30 10:21:48.980111 2026] [security2:error] [pid 2708015:tid 2708015] [client 77.90.185.230:8913] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env"] [unique_id "amsXrIiSX3JkwGAxuauPYAAAABI"]
[Thu Jul 30 10:21:48.980315 2026] [security2:error] [pid 2708015:tid 2708015] [client 77.90.185.230:8913] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env"] [unique_id "amsXrIiSX3JkwGAxuauPYAAAABI"]
[Thu Jul 30 10:21:48.980521 2026] [security2:error] [pid 2708015:tid 2708015] [client 77.90.185.230:8913] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrIiSX3JkwGAxuauPYAAAABI"]
[Thu Jul 30 10:21:49.063286 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBHgAAAAg"]
[Thu Jul 30 10:21:49.063501 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBHgAAAAg"]
[Thu Jul 30 10:21:49.100892 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrR80Xp5zXLJvCqSBHgAAAAg"]
[Thu Jul 30 10:21:49.210548 2026] [security2:error] [pid 2708015:tid 2708015] [client 77.90.185.230:33221] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env"] [unique_id "amsXrYiSX3JkwGAxuauPYQAAABI"]
[Thu Jul 30 10:21:49.210800 2026] [security2:error] [pid 2708015:tid 2708015] [client 77.90.185.230:33221] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env"] [unique_id "amsXrYiSX3JkwGAxuauPYQAAABI"]
[Thu Jul 30 10:21:49.211018 2026] [security2:error] [pid 2708015:tid 2708015] [client 77.90.185.230:33221] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrYiSX3JkwGAxuauPYQAAABI"]
[Thu Jul 30 10:21:49.291335 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBIQAAAAg"]
[Thu Jul 30 10:21:49.291522 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBIQAAAAg"]
[Thu Jul 30 10:21:49.327041 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrR80Xp5zXLJvCqSBIQAAAAg"]
[Thu Jul 30 10:21:49.365713 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXrR80Xp5zXLJvCqSBIgAAAAg"]
[Thu Jul 30 10:21:49.365899 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXrR80Xp5zXLJvCqSBIgAAAAg"]
[Thu Jul 30 10:21:49.402353 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrR80Xp5zXLJvCqSBIgAAAAg"]
[Thu Jul 30 10:21:49.441039 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXrR80Xp5zXLJvCqSBIwAAAAg"]
[Thu Jul 30 10:21:49.441220 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXrR80Xp5zXLJvCqSBIwAAAAg"]
[Thu Jul 30 10:21:49.467291 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:48573] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXrffH3Rr0Mm1at1zMLQAAABY"]
[Thu Jul 30 10:21:49.467638 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:48573] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXrffH3Rr0Mm1at1zMLQAAABY"]
[Thu Jul 30 10:21:49.467898 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:48573] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrffH3Rr0Mm1at1zMLQAAABY"]
[Thu Jul 30 10:21:49.476436 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrR80Xp5zXLJvCqSBIwAAAAg"]
[Thu Jul 30 10:21:49.515209 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBJAAAAAg"]
[Thu Jul 30 10:21:49.515365 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBJAAAAAg"]
[Thu Jul 30 10:21:49.552719 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrR80Xp5zXLJvCqSBJAAAAAg"]
[Thu Jul 30 10:21:49.591759 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autoconfig.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBJQAAAAg"]
[Thu Jul 30 10:21:49.591998 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autoconfig.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXrR80Xp5zXLJvCqSBJQAAAAg"]
[Thu Jul 30 10:21:49.637010 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:16659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autoconfig.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrR80Xp5zXLJvCqSBJQAAAAg"]
[Thu Jul 30 10:21:49.688887 2026] [security2:error] [pid 2695986:tid 2695986] [client 77.90.185.230:29961] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXrUYVmsOEeQ7nveab5AAAABQ"]
[Thu Jul 30 10:21:49.689128 2026] [security2:error] [pid 2695986:tid 2695986] [client 77.90.185.230:29961] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXrUYVmsOEeQ7nveab5AAAABQ"]
[Thu Jul 30 10:21:49.689380 2026] [security2:error] [pid 2695986:tid 2695986] [client 77.90.185.230:29961] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrUYVmsOEeQ7nveab5AAAABQ"]
[Thu Jul 30 10:21:49.714703 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:35017] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXrdmaJH1bf1jjmZ8i7AAAADE"]
[Thu Jul 30 10:21:49.714992 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:35017] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXrdmaJH1bf1jjmZ8i7AAAADE"]
[Thu Jul 30 10:21:49.715324 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:35017] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrdmaJH1bf1jjmZ8i7AAAADE"]
[Thu Jul 30 10:21:49.929331 2026] [security2:error] [pid 2707938:tid 2707938] [client 77.90.185.230:24951] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXrUbE0iiNQFiEcLM5FQAAAAc"]
[Thu Jul 30 10:21:49.929484 2026] [security2:error] [pid 2707938:tid 2707938] [client 77.90.185.230:24951] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXrUbE0iiNQFiEcLM5FQAAAAc"]
[Thu Jul 30 10:21:49.929694 2026] [security2:error] [pid 2707938:tid 2707938] [client 77.90.185.230:24951] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrUbE0iiNQFiEcLM5FQAAAAc"]
[Thu Jul 30 10:21:49.959054 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:41783] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXrTd0RERFosCpxcIMFgAAABM"]
[Thu Jul 30 10:21:49.959332 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:41783] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXrTd0RERFosCpxcIMFgAAABM"]
[Thu Jul 30 10:21:49.959666 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:41783] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrTd0RERFosCpxcIMFgAAABM"]
[Thu Jul 30 10:21:50.082715 2026] [security2:error] [pid 2695986:tid 2695986] [client 77.90.185.230:28793] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXrkYVmsOEeQ7nveab5QAAABQ"]
[Thu Jul 30 10:21:50.082951 2026] [security2:error] [pid 2695986:tid 2695986] [client 77.90.185.230:28793] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXrkYVmsOEeQ7nveab5QAAABQ"]
[Thu Jul 30 10:21:50.083192 2026] [security2:error] [pid 2695986:tid 2695986] [client 77.90.185.230:28793] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrkYVmsOEeQ7nveab5QAAABQ"]
[Thu Jul 30 10:21:50.161572 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:13733] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXrh80Xp5zXLJvCqSBJwAAAAg"]
[Thu Jul 30 10:21:50.161786 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:13733] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXrh80Xp5zXLJvCqSBJwAAAAg"]
[Thu Jul 30 10:21:50.161992 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:13733] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrh80Xp5zXLJvCqSBJwAAAAg"]
[Thu Jul 30 10:21:50.207160 2026] [security2:error] [pid 2706970:tid 2706970] [client 43.164.196.244:42040] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsXrjfPO1FYXLyc20uGCAAAAC8"], referer: http://banskoexpresstransfers.co.uk
[Thu Jul 30 10:21:50.278910 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:62141] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXruSCqcHBgGy3oMEtKAAAAA4"]
[Thu Jul 30 10:21:50.279122 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:62141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXruSCqcHBgGy3oMEtKAAAAA4"]
[Thu Jul 30 10:21:50.279326 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:62141] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXruSCqcHBgGy3oMEtKAAAAA4"]
[Thu Jul 30 10:21:50.322383 2026] [security2:error] [pid 2709177:tid 2709177] [client 77.90.185.230:64411] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXrkXXm1O9TvkXBa0xuAAAACI"]
[Thu Jul 30 10:21:50.322576 2026] [security2:error] [pid 2709177:tid 2709177] [client 77.90.185.230:64411] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXrkXXm1O9TvkXBa0xuAAAACI"]
[Thu Jul 30 10:21:50.322823 2026] [security2:error] [pid 2709177:tid 2709177] [client 77.90.185.230:64411] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrkXXm1O9TvkXBa0xuAAAACI"]
[Thu Jul 30 10:21:50.521467 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:45117] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXrjd0RERFosCpxcIMFwAAABM"]
[Thu Jul 30 10:21:50.521762 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:45117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXrjd0RERFosCpxcIMFwAAABM"]
[Thu Jul 30 10:21:50.522051 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:45117] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrjd0RERFosCpxcIMFwAAABM"]
[Thu Jul 30 10:21:50.564003 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:32909] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXrtuUs8bq9M-pzIi0igAAABc"]
[Thu Jul 30 10:21:50.564169 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:32909] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXrtuUs8bq9M-pzIi0igAAABc"]
[Thu Jul 30 10:21:50.564390 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:32909] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrtuUs8bq9M-pzIi0igAAABc"]
[Thu Jul 30 10:21:50.685500 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:60453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXrh80Xp5zXLJvCqSBKAAAAAg"]
[Thu Jul 30 10:21:50.685709 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:60453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXrh80Xp5zXLJvCqSBKAAAAAg"]
[Thu Jul 30 10:21:50.685911 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:60453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrh80Xp5zXLJvCqSBKAAAAAg"]
[Thu Jul 30 10:21:50.705356 2026] [ssl:error] [pid 2706920:tid 2706920] (EAI 2)Name or service not known: [client 144.76.19.72:22980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:50.705418 2026] [ssl:error] [pid 2706920:tid 2706920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:50.727025 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:6229] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/.env"] [unique_id "amsXrtmaJH1bf1jjmZ8i7gAAADE"]
[Thu Jul 30 10:21:50.727213 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:6229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/.env"] [unique_id "amsXrtmaJH1bf1jjmZ8i7gAAADE"]
[Thu Jul 30 10:21:50.753933 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:6229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrtmaJH1bf1jjmZ8i7gAAADE"]
[Thu Jul 30 10:21:50.763062 2026] [ssl:error] [pid 2707939:tid 2707939] (EAI 2)Name or service not known: [client 144.76.19.72:22988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:50.763103 2026] [ssl:error] [pid 2707939:tid 2707939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:50.767576 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:10903] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXruSCqcHBgGy3oMEtKQAAAA4"]
[Thu Jul 30 10:21:50.767774 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:10903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXruSCqcHBgGy3oMEtKQAAAA4"]
[Thu Jul 30 10:21:50.767977 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:10903] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXruSCqcHBgGy3oMEtKQAAAA4"]
[Thu Jul 30 10:21:50.810627 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:10493] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXrvfH3Rr0Mm1at1zMMAAAABY"]
[Thu Jul 30 10:21:50.810971 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:10493] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXrvfH3Rr0Mm1at1zMMAAAABY"]
[Thu Jul 30 10:21:50.811331 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:10493] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrvfH3Rr0Mm1at1zMMAAAABY"]
[Thu Jul 30 10:21:50.891220 2026] [security2:error] [pid 2706970:tid 2706970] [client 77.90.185.230:46471] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXrjfPO1FYXLyc20uGCQAAAC8"]
[Thu Jul 30 10:21:50.891565 2026] [security2:error] [pid 2706970:tid 2706970] [client 77.90.185.230:46471] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXrjfPO1FYXLyc20uGCQAAAC8"]
[Thu Jul 30 10:21:50.891932 2026] [security2:error] [pid 2706970:tid 2706970] [client 77.90.185.230:46471] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrjfPO1FYXLyc20uGCQAAAC8"]
[Thu Jul 30 10:21:50.931349 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:57153] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXrtuUs8bq9M-pzIi0iwAAABc"]
[Thu Jul 30 10:21:50.931545 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:57153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXrtuUs8bq9M-pzIi0iwAAABc"]
[Thu Jul 30 10:21:50.931772 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:57153] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrtuUs8bq9M-pzIi0iwAAABc"]
[Thu Jul 30 10:21:51.007786 2026] [security2:error] [pid 2707027:tid 2707027] [client 77.90.185.230:39559] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXr9nHuZ0Rc03rkd_aNgAAADA"]
[Thu Jul 30 10:21:51.007984 2026] [security2:error] [pid 2707027:tid 2707027] [client 77.90.185.230:39559] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXr9nHuZ0Rc03rkd_aNgAAADA"]
[Thu Jul 30 10:21:51.008234 2026] [security2:error] [pid 2707027:tid 2707027] [client 77.90.185.230:39559] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr9nHuZ0Rc03rkd_aNgAAADA"]
[Thu Jul 30 10:21:51.134906 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:1569] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXr4QdQLE1fGYvAh32ZwAAAAk"]
[Thu Jul 30 10:21:51.135126 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:1569] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXr4QdQLE1fGYvAh32ZwAAAAk"]
[Thu Jul 30 10:21:51.135350 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:1569] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr4QdQLE1fGYvAh32ZwAAAAk"]
[Thu Jul 30 10:21:51.169693 2026] [security2:error] [pid 2709113:tid 2709113] [client 77.90.185.230:21507] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXr0aM1CKDwldxzV69TAAAAAo"]
[Thu Jul 30 10:21:51.169868 2026] [security2:error] [pid 2709113:tid 2709113] [client 77.90.185.230:21507] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXr0aM1CKDwldxzV69TAAAAAo"]
[Thu Jul 30 10:21:51.170088 2026] [security2:error] [pid 2709113:tid 2709113] [client 77.90.185.230:21507] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr0aM1CKDwldxzV69TAAAAAo"]
[Thu Jul 30 10:21:51.290243 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:54571] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env"] [unique_id "amsXr5v2LoKJQrgIP1G4CAAAABw"]
[Thu Jul 30 10:21:51.290562 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:54571] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env"] [unique_id "amsXr5v2LoKJQrgIP1G4CAAAABw"]
[Thu Jul 30 10:21:51.290973 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:54571] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr5v2LoKJQrgIP1G4CAAAABw"]
[Thu Jul 30 10:21:51.327748 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:29915] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXr9maJH1bf1jjmZ8i7wAAADE"]
[Thu Jul 30 10:21:51.327903 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:29915] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXr9maJH1bf1jjmZ8i7wAAADE"]
[Thu Jul 30 10:21:51.361558 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:29915] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr9maJH1bf1jjmZ8i7wAAADE"]
[Thu Jul 30 10:21:51.370723 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:1565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXr0FsCb_fTZTR_6766QAAABo"]
[Thu Jul 30 10:21:51.370887 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:1565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXr0FsCb_fTZTR_6766QAAABo"]
[Thu Jul 30 10:21:51.371095 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:1565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr0FsCb_fTZTR_6766QAAABo"]
[Thu Jul 30 10:21:51.514941 2026] [security2:error] [pid 2709373:tid 2709373] [client 43.164.196.244:37742] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsXrzd0RERFosCpxcIMGQAAABM"], referer: http://www.banskoexpress.com
[Thu Jul 30 10:21:51.526347 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:24773] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXr5v2LoKJQrgIP1G4CQAAABw"]
[Thu Jul 30 10:21:51.526529 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:24773] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXr5v2LoKJQrgIP1G4CQAAABw"]
[Thu Jul 30 10:21:51.526743 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:24773] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr5v2LoKJQrgIP1G4CQAAABw"]
[Thu Jul 30 10:21:51.619320 2026] [security2:error] [pid 2693123:tid 2693123] [client 216.73.216.199:50884] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/gd.ini"] [unique_id "amsXr4UL5_HNFV7aDDJCfgAAADg"]
[Thu Jul 30 10:21:51.619616 2026] [security2:error] [pid 2693123:tid 2693123] [client 216.73.216.199:50884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/gd.ini"] [unique_id "amsXr4UL5_HNFV7aDDJCfgAAADg"]
[Thu Jul 30 10:21:51.619821 2026] [security2:error] [pid 2693123:tid 2693123] [client 216.73.216.199:50884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/gd.ini"] [unique_id "amsXr4UL5_HNFV7aDDJCfgAAADg"]
[Thu Jul 30 10:21:51.624298 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:3507] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXr0FsCb_fTZTR_6766gAAABo"]
[Thu Jul 30 10:21:51.624436 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:3507] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXr0FsCb_fTZTR_6766gAAABo"]
[Thu Jul 30 10:21:51.650961 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:35191] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXr4QdQLE1fGYvAh32aQAAAAk"]
[Thu Jul 30 10:21:51.651187 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:35191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXr4QdQLE1fGYvAh32aQAAAAk"]
[Thu Jul 30 10:21:51.651452 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:35191] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr4QdQLE1fGYvAh32aQAAAAk"]
[Thu Jul 30 10:21:51.652442 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:3507] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr0FsCb_fTZTR_6766gAAABo"]
[Thu Jul 30 10:21:51.716793 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:1029] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXr-SCqcHBgGy3oMEtLAAAAA4"]
[Thu Jul 30 10:21:51.716985 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:1029] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXr-SCqcHBgGy3oMEtLAAAAA4"]
[Thu Jul 30 10:21:51.717195 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:1029] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr-SCqcHBgGy3oMEtLAAAAA4"]
[Thu Jul 30 10:21:51.769011 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:60589] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXr5v2LoKJQrgIP1G4CgAAABw"]
[Thu Jul 30 10:21:51.769210 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:60589] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXr5v2LoKJQrgIP1G4CgAAABw"]
[Thu Jul 30 10:21:51.769426 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:60589] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr5v2LoKJQrgIP1G4CgAAABw"]
[Thu Jul 30 10:21:51.776253 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:40895] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXr9uUs8bq9M-pzIi0jgAAABc"]
[Thu Jul 30 10:21:51.776406 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:40895] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/api/.env"] [unique_id "amsXr9uUs8bq9M-pzIi0jgAAABc"]
[Thu Jul 30 10:21:51.776638 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:40895] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr9uUs8bq9M-pzIi0jgAAABc"]
[Thu Jul 30 10:21:51.835253 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:62713] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXr9maJH1bf1jjmZ8i8QAAADE"]
[Thu Jul 30 10:21:51.835443 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:62713] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXr9maJH1bf1jjmZ8i8QAAADE"]
[Thu Jul 30 10:21:51.835659 2026] [security2:error] [pid 2707028:tid 2707028] [client 77.90.185.230:62713] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr9maJH1bf1jjmZ8i8QAAADE"]
[Thu Jul 30 10:21:51.884917 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:39179] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXrx80Xp5zXLJvCqSBLQAAAAg"]
[Thu Jul 30 10:21:51.885117 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:39179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXrx80Xp5zXLJvCqSBLQAAAAg"]
[Thu Jul 30 10:21:51.885313 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:39179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXrx80Xp5zXLJvCqSBLQAAAAg"]
[Thu Jul 30 10:21:51.915742 2026] [security2:error] [pid 2709113:tid 2709113] [client 77.90.185.230:32225] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXr0aM1CKDwldxzV69TwAAAAo"]
[Thu Jul 30 10:21:51.915880 2026] [security2:error] [pid 2709113:tid 2709113] [client 77.90.185.230:32225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXr0aM1CKDwldxzV69TwAAAAo"]
[Thu Jul 30 10:21:51.921193 2026] [core:error] [pid 2693123:tid 2693123] (13)Permission denied: [client 216.73.216.199:50884] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory59/subsystem/uevent
[Thu Jul 30 10:21:51.942942 2026] [security2:error] [pid 2709113:tid 2709113] [client 77.90.185.230:32225] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr0aM1CKDwldxzV69TwAAAAo"]
[Thu Jul 30 10:21:51.955916 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:1377] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXr0FsCb_fTZTR_6766wAAABo"]
[Thu Jul 30 10:21:51.956215 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:1377] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXr0FsCb_fTZTR_6766wAAABo"]
[Thu Jul 30 10:21:51.956526 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:1377] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXr0FsCb_fTZTR_6766wAAABo"]
[Thu Jul 30 10:21:52.004855 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:19703] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXsOSCqcHBgGy3oMEtLQAAAA4"]
[Thu Jul 30 10:21:52.005048 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:19703] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXsOSCqcHBgGy3oMEtLQAAAA4"]
[Thu Jul 30 10:21:52.005282 2026] [security2:error] [pid 2682457:tid 2682457] [client 77.90.185.230:19703] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsOSCqcHBgGy3oMEtLQAAAA4"]
[Thu Jul 30 10:21:52.016825 2026] [security2:error] [pid 2708022:tid 2708022] [client 77.90.185.230:1119] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXsEmpNWmJotB3RdvAKQAAACg"]
[Thu Jul 30 10:21:52.016996 2026] [security2:error] [pid 2708022:tid 2708022] [client 77.90.185.230:1119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsXsEmpNWmJotB3RdvAKQAAACg"]
[Thu Jul 30 10:21:52.017214 2026] [security2:error] [pid 2708022:tid 2708022] [client 77.90.185.230:1119] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsEmpNWmJotB3RdvAKQAAACg"]
[Thu Jul 30 10:21:52.057795 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:54905] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXsJv2LoKJQrgIP1G4CwAAABw"]
[Thu Jul 30 10:21:52.058032 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:54905] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXsJv2LoKJQrgIP1G4CwAAABw"]
[Thu Jul 30 10:21:52.072051 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:10519] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXsNuUs8bq9M-pzIi0jwAAABc"]
[Thu Jul 30 10:21:52.072274 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:10519] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXsNuUs8bq9M-pzIi0jwAAABc"]
[Thu Jul 30 10:21:52.072499 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:10519] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsNuUs8bq9M-pzIi0jwAAABc"]
[Thu Jul 30 10:21:52.093204 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:54905] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsJv2LoKJQrgIP1G4CwAAABw"]
[Thu Jul 30 10:21:52.191701 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:17401] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXsIQdQLE1fGYvAh32awAAAAk"]
[Thu Jul 30 10:21:52.191880 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:17401] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXsIQdQLE1fGYvAh32awAAAAk"]
[Thu Jul 30 10:21:52.192094 2026] [security2:error] [pid 2707939:tid 2707939] [client 77.90.185.230:17401] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsIQdQLE1fGYvAh32awAAAAk"]
[Thu Jul 30 10:21:52.250641 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:23223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXsEFsCb_fTZTR_6767AAAABo"]
[Thu Jul 30 10:21:52.250786 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:23223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsXsEFsCb_fTZTR_6767AAAABo"]
[Thu Jul 30 10:21:52.250986 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:23223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsEFsCb_fTZTR_6767AAAABo"]
[Thu Jul 30 10:21:52.366759 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:6049] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXsNuUs8bq9M-pzIi0kAAAABc"]
[Thu Jul 30 10:21:52.366779 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:65447] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXsB80Xp5zXLJvCqSBLwAAAAg"]
[Thu Jul 30 10:21:52.366941 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:65447] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsXsB80Xp5zXLJvCqSBLwAAAAg"]
[Thu Jul 30 10:21:52.366941 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:6049] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXsNuUs8bq9M-pzIi0kAAAABc"]
[Thu Jul 30 10:21:52.367166 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:65447] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsB80Xp5zXLJvCqSBLwAAAAg"]
[Thu Jul 30 10:21:52.399759 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:6049] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsNuUs8bq9M-pzIi0kAAAABc"]
[Thu Jul 30 10:21:52.608388 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:60837] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXsEFsCb_fTZTR_6767QAAABo"]
[Thu Jul 30 10:21:52.608566 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:60837] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsXsEFsCb_fTZTR_6767QAAABo"]
[Thu Jul 30 10:21:52.608771 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:60837] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsEFsCb_fTZTR_6767QAAABo"]
[Thu Jul 30 10:21:52.663645 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:7883] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXsDd0RERFosCpxcIMGgAAABM"]
[Thu Jul 30 10:21:52.663844 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:7883] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXsDd0RERFosCpxcIMGgAAABM"]
[Thu Jul 30 10:21:52.698513 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:7883] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsDd0RERFosCpxcIMGgAAABM"]
[Thu Jul 30 10:21:52.819963 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:52349] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXsB80Xp5zXLJvCqSBMAAAAAg"]
[Thu Jul 30 10:21:52.820175 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:52349] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXsB80Xp5zXLJvCqSBMAAAAAg"]
[Thu Jul 30 10:21:52.855288 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:52349] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsB80Xp5zXLJvCqSBMAAAAAg"]
[Thu Jul 30 10:21:52.855688 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:21139] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXsNuUs8bq9M-pzIi0kQAAABc"]
[Thu Jul 30 10:21:52.855879 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:21139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.example"] [unique_id "amsXsNuUs8bq9M-pzIi0kQAAABc"]
[Thu Jul 30 10:21:52.856077 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:21139] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsNuUs8bq9M-pzIi0kQAAABc"]
[Thu Jul 30 10:21:52.975444 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:10533] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXsJTLIpYr9kPKbURYsgAAABA"]
[Thu Jul 30 10:21:52.975711 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:10533] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/web/.env"] [unique_id "amsXsJTLIpYr9kPKbURYsgAAABA"]
[Thu Jul 30 10:21:52.975959 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:10533] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsJTLIpYr9kPKbURYsgAAABA"]
[Thu Jul 30 10:21:52.982713 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:7343] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXsEFsCb_fTZTR_6767gAAABo"]
[Thu Jul 30 10:21:52.982912 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:7343] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXsEFsCb_fTZTR_6767gAAABo"]
[Thu Jul 30 10:21:53.012844 2026] [security2:error] [pid 2705114:tid 2705114] [client 77.90.185.230:7343] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsEFsCb_fTZTR_6767gAAABo"]
[Thu Jul 30 10:21:53.098582 2026] [security2:error] [pid 2708022:tid 2708022] [client 77.90.185.230:10169] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXsUmpNWmJotB3RdvALAAAACg"]
[Thu Jul 30 10:21:53.098792 2026] [security2:error] [pid 2708022:tid 2708022] [client 77.90.185.230:10169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsXsUmpNWmJotB3RdvALAAAACg"]
[Thu Jul 30 10:21:53.099006 2026] [security2:error] [pid 2708022:tid 2708022] [client 77.90.185.230:10169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsUmpNWmJotB3RdvALAAAACg"]
[Thu Jul 30 10:21:53.133115 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:44121] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXsffH3Rr0Mm1at1zMMwAAABY"]
[Thu Jul 30 10:21:53.133263 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:44121] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXsffH3Rr0Mm1at1zMMwAAABY"]
[Thu Jul 30 10:21:53.165587 2026] [security2:error] [pid 2705113:tid 2705113] [client 77.90.185.230:44121] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsffH3Rr0Mm1at1zMMwAAABY"]
[Thu Jul 30 10:21:53.220692 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:64769] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXsZv2LoKJQrgIP1G4DgAAABw"]
[Thu Jul 30 10:21:53.220897 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:64769] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsXsZv2LoKJQrgIP1G4DgAAABw"]
[Thu Jul 30 10:21:53.221128 2026] [security2:error] [pid 2706920:tid 2706920] [client 77.90.185.230:64769] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsZv2LoKJQrgIP1G4DgAAABw"]
[Thu Jul 30 10:21:53.442013 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:14631] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXsR80Xp5zXLJvCqSBMQAAAAg"]
[Thu Jul 30 10:21:53.442179 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:14631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXsR80Xp5zXLJvCqSBMQAAAAg"]
[Thu Jul 30 10:21:53.470131 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:30597] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXsZTLIpYr9kPKbURYswAAABA"]
[Thu Jul 30 10:21:53.470382 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:30597] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/core/.env"] [unique_id "amsXsZTLIpYr9kPKbURYswAAABA"]
[Thu Jul 30 10:21:53.470626 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:30597] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsZTLIpYr9kPKbURYswAAABA"]
[Thu Jul 30 10:21:53.471811 2026] [security2:error] [pid 2704825:tid 2704825] [client 77.90.185.230:14631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsR80Xp5zXLJvCqSBMQAAAAg"]
[Thu Jul 30 10:21:53.726712 2026] [ssl:error] [pid 2709114:tid 2709114] (70014)End of file found: [client 216.73.216.199:30967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:53.816900 2026] [ssl:error] [pid 2705114:tid 2705114] (EAI 2)Name or service not known: [client 144.76.19.72:23000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:53.816932 2026] [ssl:error] [pid 2705114:tid 2705114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:53.832682 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:63571] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXsZj6dLbHQA7eEHpaqgAAAAI"]
[Thu Jul 30 10:21:53.832880 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:63571] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXsZj6dLbHQA7eEHpaqgAAAAI"]
[Thu Jul 30 10:21:53.833099 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:63571] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsZj6dLbHQA7eEHpaqgAAAAI"]
[Thu Jul 30 10:21:53.864652 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:31457] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXsZTLIpYr9kPKbURYtAAAABA"]
[Thu Jul 30 10:21:53.864785 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:31457] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/images/.env"] [unique_id "amsXsZTLIpYr9kPKbURYtAAAABA"]
[Thu Jul 30 10:21:53.872797 2026] [ssl:error] [pid 2709373:tid 2709373] (EAI 2)Name or service not known: [client 144.76.19.72:23012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:53.872817 2026] [ssl:error] [pid 2709373:tid 2709373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:53.891221 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:31457] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsZTLIpYr9kPKbURYtAAAABA"]
[Thu Jul 30 10:21:53.952499 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:1757] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXsfSzHtbuTwtPq29EawAAABs"]
[Thu Jul 30 10:21:53.952720 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:1757] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXsfSzHtbuTwtPq29EawAAABs"]
[Thu Jul 30 10:21:53.952922 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:1757] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsfSzHtbuTwtPq29EawAAABs"]
[Thu Jul 30 10:21:54.008669 2026] [security2:error] [pid 2706328:tid 2706328] [client 77.90.185.230:34105] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXshlNcMhNT5ei1WWLsQAAACE"]
[Thu Jul 30 10:21:54.008853 2026] [security2:error] [pid 2706328:tid 2706328] [client 77.90.185.230:34105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsXshlNcMhNT5ei1WWLsQAAACE"]
[Thu Jul 30 10:21:54.040352 2026] [security2:error] [pid 2706328:tid 2706328] [client 77.90.185.230:34105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXshlNcMhNT5ei1WWLsQAAACE"]
[Thu Jul 30 10:21:54.075712 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:33453] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXsjd0RERFosCpxcIMHQAAABM"]
[Thu Jul 30 10:21:54.075864 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:33453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXsjd0RERFosCpxcIMHQAAABM"]
[Thu Jul 30 10:21:54.076059 2026] [security2:error] [pid 2709373:tid 2709373] [client 77.90.185.230:33453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsjd0RERFosCpxcIMHQAAABM"]
[Thu Jul 30 10:21:54.157055 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:34451] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXspTLIpYr9kPKbURYtQAAABA"]
[Thu Jul 30 10:21:54.157197 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:34451] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/.env.save"] [unique_id "amsXspTLIpYr9kPKbURYtQAAABA"]
[Thu Jul 30 10:21:54.183697 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:34451] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXspTLIpYr9kPKbURYtQAAABA"]
[Thu Jul 30 10:21:54.194495 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:5283] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXsvSzHtbuTwtPq29EbAAAABs"]
[Thu Jul 30 10:21:54.194660 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:5283] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXsvSzHtbuTwtPq29EbAAAABs"]
[Thu Jul 30 10:21:54.194844 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:5283] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsvSzHtbuTwtPq29EbAAAABs"]
[Thu Jul 30 10:21:54.303829 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:44123] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXspTLIpYr9kPKbURYtgAAABA"]
[Thu Jul 30 10:21:54.303955 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:44123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/API/.env"] [unique_id "amsXspTLIpYr9kPKbURYtgAAABA"]
[Thu Jul 30 10:21:54.317499 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:65233] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXsvSzHtbuTwtPq29EbQAAABs"]
[Thu Jul 30 10:21:54.317637 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:65233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXsvSzHtbuTwtPq29EbQAAABs"]
[Thu Jul 30 10:21:54.317825 2026] [security2:error] [pid 2708017:tid 2708017] [client 77.90.185.230:65233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXsvSzHtbuTwtPq29EbQAAABs"]
[Thu Jul 30 10:21:54.369320 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:44123] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXspTLIpYr9kPKbURYtgAAABA"]
[Thu Jul 30 10:21:54.529840 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:5033] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXspTLIpYr9kPKbURYuAAAABA"]
[Thu Jul 30 10:21:54.529984 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:5033] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-sun.com"] [uri "/app/.env"] [unique_id "amsXspTLIpYr9kPKbURYuAAAABA"]
[Thu Jul 30 10:21:54.555983 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:5033] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsXspTLIpYr9kPKbURYuAAAABA"]
[Thu Jul 30 10:21:55.232841 2026] [ssl:error] [pid 2702102:tid 2702102] (70014)End of file found: [client 216.73.216.199:8005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:56.136328 2026] [ssl:error] [pid 2707971:tid 2707971] (70014)End of file found: [client 216.73.216.199:11829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:21:56.671294 2026] [security2:error] [pid 2706968:tid 2706968] [client 43.130.34.74:52782] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amsXtOqK323sEMQdIlqpEgAAAC0"]
[Thu Jul 30 10:21:56.818662 2026] [lsapi:warn] [pid 2705978:tid 2705978] [client 87.201.112.222:58748] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:21:56.929618 2026] [ssl:error] [pid 2709831:tid 2709831] (EAI 2)Name or service not known: [client 144.76.19.72:23022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:56.929646 2026] [ssl:error] [pid 2709831:tid 2709831] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:57.039090 2026] [ssl:error] [pid 2709793:tid 2709793] (EAI 2)Name or service not known: [client 144.76.19.72:23024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:21:57.039123 2026] [ssl:error] [pid 2709793:tid 2709793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:21:57.057494 2026] [core:error] [pid 2709831:tid 2709831] [client 66.249.64.170:39984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:57.057520 2026] [core:error] [pid 2709831:tid 2709831] [client 66.249.64.170:39984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:21:58.975459 2026] [core:error] [pid 2707028:tid 2707028] (13)Permission denied: [client 216.73.216.199:48395] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/key_jar/cpu_partial
[Thu Jul 30 10:21:59.689817 2026] [core:error] [pid 2707028:tid 2707028] (13)Permission denied: [client 216.73.216.199:48395] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/drm/parameters/debug
[Thu Jul 30 10:21:59.989406 2026] [core:error] [pid 2707028:tid 2707028] (13)Permission denied: [client 216.73.216.199:48395] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_vcpu/align
[Thu Jul 30 10:22:00.093471 2026] [ssl:error] [pid 2707939:tid 2707939] (EAI 2)Name or service not known: [client 144.76.19.72:28858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:00.093499 2026] [ssl:error] [pid 2707939:tid 2707939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:00.150283 2026] [ssl:error] [pid 2706328:tid 2706328] (EAI 2)Name or service not known: [client 144.76.19.72:28870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:00.150313 2026] [ssl:error] [pid 2706328:tid 2706328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:01.193950 2026] [ssl:error] [pid 2707028:tid 2707028] (70014)End of file found: [client 216.73.216.199:48395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:01.807392 2026] [ssl:error] [pid 2704266:tid 2704266] (70014)End of file found: [client 216.73.216.199:7873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:02.709197 2026] [core:error] [pid 2707032:tid 2707032] (13)Permission denied: [client 216.73.216.199:9399] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/total_objects
[Thu Jul 30 10:22:03.207477 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:28876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:03.207507 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:03.263311 2026] [ssl:error] [pid 2708022:tid 2708022] (EAI 2)Name or service not known: [client 144.76.19.72:28888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:03.263340 2026] [ssl:error] [pid 2708022:tid 2708022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:03.854539 2026] [security2:error] [pid 2707027:tid 2707027] [client 114.119.132.171:54157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~104,19/request_format~html"] [unique_id "amsXu9nHuZ0Rc03rkd_aOwAAADA"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/cat_ids~104,19,30/request_format~html
[Thu Jul 30 10:22:03.977956 2026] [cgi:error] [pid 2702172:tid 2702172] [client 20.220.15.170:27214] AH02812: stderr from /home/alismcom/public_html/static1/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:22:04.517193 2026] [ssl:error] [pid 2707032:tid 2707032] (70014)End of file found: [client 216.73.216.199:9399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:05.221607 2026] [security2:error] [pid 2708021:tid 2708021] [client 114.119.132.171:54173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~104,19/request_format~html"] [unique_id "amsXvc8Hpn7k9hraIzGYDgAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/cat_ids~104,19,30/request_format~html
[Thu Jul 30 10:22:06.317689 2026] [ssl:error] [pid 2709175:tid 2709175] (EAI 2)Name or service not known: [client 144.76.19.72:28902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:06.317745 2026] [ssl:error] [pid 2709175:tid 2709175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:06.371165 2026] [ssl:error] [pid 2709793:tid 2709793] (EAI 2)Name or service not known: [client 144.76.19.72:28912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:06.371192 2026] [ssl:error] [pid 2709793:tid 2709793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:06.532588 2026] [lsapi:warn] [pid 2708022:tid 2708022] [client 87.201.112.222:44913] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:22:06.928800 2026] [core:error] [pid 2704149:tid 2704149] (13)Permission denied: [client 216.73.216.199:58613] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm/sections/_ftrace_eval_map
[Thu Jul 30 10:22:07.230196 2026] [core:error] [pid 2704149:tid 2704149] (13)Permission denied: [client 216.73.216.199:58613] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-512/remote_node_defrag_ratio
[Thu Jul 30 10:22:07.630791 2026] [security2:error] [pid 2709869:tid 2709869] [client 43.155.26.193:42042] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amsXvyiipqVFNqqSuwLX0AAAADo"], referer: http://peterboroughdiocesanregistry.co.uk
[Thu Jul 30 10:22:08.677587 2026] [security2:error] [pid 2708021:tid 2708021] [client 47.245.142.69:64105] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXwM8Hpn7k9hraIzGYDwAAACQ"]
[Thu Jul 30 10:22:08.677643 2026] [security2:error] [pid 2708021:tid 2708021] [client 47.245.142.69:64105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXwM8Hpn7k9hraIzGYDwAAACQ"]
[Thu Jul 30 10:22:08.677898 2026] [security2:error] [pid 2708021:tid 2708021] [client 47.245.142.69:64105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXwM8Hpn7k9hraIzGYDwAAACQ"]
[Thu Jul 30 10:22:09.343643 2026] [core:error] [pid 2704149:tid 2704149] (13)Permission denied: [client 216.73.216.199:58613] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_alias/trace
[Thu Jul 30 10:22:09.425997 2026] [ssl:error] [pid 2708022:tid 2708022] (EAI 2)Name or service not known: [client 144.76.19.72:28914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:09.426041 2026] [ssl:error] [pid 2708022:tid 2708022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:09.480346 2026] [ssl:error] [pid 2709832:tid 2709832] (EAI 2)Name or service not known: [client 144.76.19.72:28918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:09.480374 2026] [ssl:error] [pid 2709832:tid 2709832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:11.445625 2026] [security2:error] [pid 2705978:tid 2705978] [client 84.54.122.229:5560] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXw7cvDJZZkrmJEQz14AAAAAE"]
[Thu Jul 30 10:22:11.445683 2026] [security2:error] [pid 2705978:tid 2705978] [client 84.54.122.229:5560] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXw7cvDJZZkrmJEQz14AAAAAE"]
[Thu Jul 30 10:22:11.445926 2026] [security2:error] [pid 2705978:tid 2705978] [client 84.54.122.229:5560] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXw7cvDJZZkrmJEQz14AAAAAE"]
[Thu Jul 30 10:22:11.797192 2026] [security2:error] [pid 2709832:tid 2709832] [client 94.154.43.184:21366] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "plastic-sheeting.org"] [uri "/.env"] [unique_id "amsXwzCRe4lN2za3oFaVXAAAADQ"]
[Thu Jul 30 10:22:11.797381 2026] [security2:error] [pid 2709832:tid 2709832] [client 94.154.43.184:21366] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "plastic-sheeting.org"] [uri "/.env"] [unique_id "amsXwzCRe4lN2za3oFaVXAAAADQ"]
[Thu Jul 30 10:22:11.797615 2026] [security2:error] [pid 2709832:tid 2709832] [client 94.154.43.184:21366] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "plastic-sheeting.org"] [uri "/.env"] [unique_id "amsXwzCRe4lN2za3oFaVXAAAADQ"]
[Thu Jul 30 10:22:12.228691 2026] [security2:error] [pid 2702172:tid 2702172] [client 114.119.143.130:38267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/1-wg-logo-1040/"] [unique_id "amsXxLvXsxyBiTz6pjF7oAAAACA"], referer: https://woodsandgreenfurniture.co.uk/1-wg-logo-1040
[Thu Jul 30 10:22:12.552779 2026] [ssl:error] [pid 2706355:tid 2706355] (EAI 2)Name or service not known: [client 144.76.19.72:36076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:12.552821 2026] [ssl:error] [pid 2706355:tid 2706355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:12.611326 2026] [ssl:error] [pid 2707970:tid 2707970] (EAI 2)Name or service not known: [client 144.76.19.72:36082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:12.611371 2026] [ssl:error] [pid 2707970:tid 2707970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:12.657632 2026] [ssl:error] [pid 2704149:tid 2704149] (70014)End of file found: [client 216.73.216.199:58613] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:15.667866 2026] [ssl:error] [pid 2702172:tid 2702172] (EAI 2)Name or service not known: [client 144.76.19.72:36098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:15.667893 2026] [ssl:error] [pid 2702172:tid 2702172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:15.721223 2026] [ssl:error] [pid 2707028:tid 2707028] (EAI 2)Name or service not known: [client 144.76.19.72:36106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:15.721252 2026] [ssl:error] [pid 2707028:tid 2707028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:16.333438 2026] [security2:error] [pid 2709793:tid 2709793] [client 74.7.243.248:36476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.ezazz.dbstart.co.uk"] [uri "/"] [unique_id "amsXyG5iePo5_ZkdK5CWowAAACo"]
[Thu Jul 30 10:22:17.257867 2026] [core:error] [pid 2707970:tid 2707970] (13)Permission denied: [client 216.73.216.199:27348] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UNIX/slabs_cpu_partial
[Thu Jul 30 10:22:17.343212 2026] [lsapi:warn] [pid 2709866:tid 2709866] [client 87.201.112.222:44906] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:22:18.777451 2026] [ssl:error] [pid 2707939:tid 2707939] (EAI 2)Name or service not known: [client 144.76.19.72:36116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:18.777504 2026] [ssl:error] [pid 2707939:tid 2707939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:18.830921 2026] [ssl:error] [pid 2709176:tid 2709176] (EAI 2)Name or service not known: [client 144.76.19.72:36126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:18.830961 2026] [ssl:error] [pid 2709176:tid 2709176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:18.977552 2026] [core:error] [pid 2702102:tid 2702102] (13)Permission denied: [client 216.73.216.199:12119] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCPv6/validate
[Thu Jul 30 10:22:21.383114 2026] [ssl:error] [pid 2707970:tid 2707970] (70014)End of file found: [client 216.73.216.199:27348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:21.690656 2026] [security2:error] [pid 2709829:tid 2709829] [client 102.67.21.77:54026] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXzVN12EFFJfTzb2yWsAAAACs"]
[Thu Jul 30 10:22:21.690713 2026] [security2:error] [pid 2709829:tid 2709829] [client 102.67.21.77:54026] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsXzVN12EFFJfTzb2yWsAAAACs"]
[Thu Jul 30 10:22:21.690973 2026] [security2:error] [pid 2709829:tid 2709829] [client 102.67.21.77:54026] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsXzVN12EFFJfTzb2yWsAAAACs"]
[Thu Jul 30 10:22:21.887869 2026] [ssl:error] [pid 2705936:tid 2705936] (EAI 2)Name or service not known: [client 144.76.19.72:57756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:21.887904 2026] [ssl:error] [pid 2705936:tid 2705936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:21.967613 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:57766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:21.967644 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:22.026929 2026] [security2:error] [pid 2709874:tid 2709874] [client 114.119.133.158:28595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "butteredcat.com"] [uri "/fswknowledge.store/"] [unique_id "amsXzkHzmlw82KlsY3J4bAAAAD4"], referer: https://butteredcat.com/
[Thu Jul 30 10:22:23.453018 2026] [core:error] [pid 2709175:tid 2709175] [client 66.249.66.8:54629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:23.453045 2026] [core:error] [pid 2709175:tid 2709175] [client 66.249.66.8:54629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:24.380676 2026] [security2:error] [pid 2704149:tid 2704149] [client 43.166.238.12:55940] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsX0AF65Aj6fJDHjFZxvwAAAAU"]
[Thu Jul 30 10:22:25.022841 2026] [core:error] [pid 2709755:tid 2709755] [client 66.249.66.194:43818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:25.022862 2026] [core:error] [pid 2709832:tid 2709832] [client 66.249.66.66:52232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:25.022870 2026] [core:error] [pid 2709755:tid 2709755] [client 66.249.66.194:43818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:25.022895 2026] [core:error] [pid 2709832:tid 2709832] [client 66.249.66.66:52232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:25.026123 2026] [ssl:error] [pid 2709175:tid 2709175] (EAI 2)Name or service not known: [client 144.76.19.72:57770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:25.026146 2026] [ssl:error] [pid 2709175:tid 2709175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:25.082045 2026] [ssl:error] [pid 2707032:tid 2707032] (EAI 2)Name or service not known: [client 144.76.19.72:57784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:25.082087 2026] [ssl:error] [pid 2707032:tid 2707032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:25.786999 2026] [security2:error] [pid 2708022:tid 2708022] [client 43.166.238.12:33636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsX0UmpNWmJotB3RdvAMwAAACg"], referer: http://www.glottalstop.co.uk
[Thu Jul 30 10:22:25.906112 2026] [core:error] [pid 2709873:tid 2709873] (13)Permission denied: [client 216.73.216.199:60066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCP/object_size
[Thu Jul 30 10:22:26.162563 2026] [authz_core:error] [pid 2709113:tid 2709113] [client 66.249.66.33:51992] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:22:26.165220 2026] [authz_core:error] [pid 2709113:tid 2709113] [client 66.249.66.33:51992] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:22:27.986501 2026] [lsapi:warn] [pid 2708485:tid 2708485] [client 87.201.112.222:44901] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:22:28.134218 2026] [ssl:error] [pid 2707970:tid 2707970] (EAI 2)Name or service not known: [client 144.76.19.72:57790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:28.134249 2026] [ssl:error] [pid 2707970:tid 2707970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:28.188955 2026] [ssl:error] [pid 2706920:tid 2706920] (EAI 2)Name or service not known: [client 144.76.19.72:57800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:28.188981 2026] [ssl:error] [pid 2706920:tid 2706920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:29.392298 2026] [ssl:error] [pid 2709373:tid 2709373] (70014)End of file found: [client 216.73.216.199:4593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:30.501285 2026] [security2:error] [pid 2707970:tid 2707970] [client 51.68.107.138:13047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/robots.txt"] [unique_id "amsX1pC-JZsF5-caBEdX6gAAAAw"]
[Thu Jul 30 10:22:30.582607 2026] [security2:error] [pid 2702172:tid 2702172] [client 51.68.107.138:14493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amsX1rvXsxyBiTz6pjF7owAAACA"]
[Thu Jul 30 10:22:30.704790 2026] [security2:error] [pid 2709177:tid 2709177] [client 51.68.107.138:10449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/robots.txt"] [unique_id "amsX1kXXm1O9TvkXBa0xxAAAACI"]
[Thu Jul 30 10:22:31.242820 2026] [ssl:error] [pid 2707970:tid 2707970] (EAI 2)Name or service not known: [client 144.76.19.72:63664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:31.242849 2026] [ssl:error] [pid 2707970:tid 2707970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:31.298737 2026] [ssl:error] [pid 2707970:tid 2707970] (EAI 2)Name or service not known: [client 144.76.19.72:63672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:31.298764 2026] [ssl:error] [pid 2707970:tid 2707970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:31.360535 2026] [security2:error] [pid 2707970:tid 2707970] [client 51.68.107.138:24967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/403.shtml"] [unique_id "amsX15C-JZsF5-caBEdX7AAAAAw"]
[Thu Jul 30 10:22:33.046539 2026] [security2:error] [pid 2704149:tid 2704149] [client 43.164.0.96:43064] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "butteredcat.com"] [uri "/"] [unique_id "amsX2QF65Aj6fJDHjFZxwQAAAAU"]
[Thu Jul 30 10:22:33.047366 2026] [authz_core:error] [pid 2704149:tid 2704149] [client 43.164.0.96:43064] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 10:22:33.636543 2026] [core:error] [pid 2709873:tid 2709873] (13)Permission denied: [client 216.73.216.199:60066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-192/min_partial
[Thu Jul 30 10:22:33.937863 2026] [core:error] [pid 2709873:tid 2709873] (13)Permission denied: [client 216.73.216.199:60066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/vm_area_struct/cpu_slabs
[Thu Jul 30 10:22:34.241656 2026] [ssl:error] [pid 2709873:tid 2709873] (70014)End of file found: [client 216.73.216.199:60066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:34.352317 2026] [ssl:error] [pid 2704149:tid 2704149] (EAI 2)Name or service not known: [client 144.76.19.72:63674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:34.352355 2026] [ssl:error] [pid 2704149:tid 2704149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:34.406133 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:63682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:34.406173 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:35.441286 2026] [core:error] [pid 2702172:tid 2702172] (13)Permission denied: [client 216.73.216.199:14100] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/total_objects
[Thu Jul 30 10:22:37.267208 2026] [core:error] [pid 2702172:tid 2702172] (13)Permission denied: [client 216.73.216.199:14100] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/shrink
[Thu Jul 30 10:22:37.446283 2026] [access_compat:error] [pid 2707970:tid 2707970] [client 2.189.5.162:52730] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:22:37.461702 2026] [ssl:error] [pid 2709829:tid 2709829] (EAI 2)Name or service not known: [client 144.76.19.72:63686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:37.461735 2026] [ssl:error] [pid 2709829:tid 2709829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:37.518004 2026] [ssl:error] [pid 2709832:tid 2709832] (EAI 2)Name or service not known: [client 144.76.19.72:63696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:37.518036 2026] [ssl:error] [pid 2709832:tid 2709832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:37.568492 2026] [ssl:error] [pid 2702172:tid 2702172] (70014)End of file found: [client 216.73.216.199:14100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:38.162573 2026] [lsapi:warn] [pid 2707892:tid 2707892] [client 87.201.112.222:44909] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:22:40.301447 2026] [core:error] [pid 2708022:tid 2708022] (13)Permission denied: [client 216.73.216.199:15102] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_icr/objects_partial
[Thu Jul 30 10:22:40.629824 2026] [ssl:error] [pid 2710889:tid 2710889] (EAI 2)Name or service not known: [client 144.76.19.72:51380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:40.629855 2026] [ssl:error] [pid 2710889:tid 2710889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:40.687552 2026] [ssl:error] [pid 2709873:tid 2709873] (EAI 2)Name or service not known: [client 144.76.19.72:51394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:40.687586 2026] [ssl:error] [pid 2709873:tid 2709873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:41.506688 2026] [ssl:error] [pid 2704149:tid 2704149] (70014)End of file found: [client 216.73.216.199:21046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:42.410522 2026] [ssl:error] [pid 2708022:tid 2708022] (70014)End of file found: [client 216.73.216.199:15102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:42.897202 2026] [core:error] [pid 2708015:tid 2708015] (13)Permission denied: [client 216.73.216.199:52976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-1k/usersize
[Thu Jul 30 10:22:43.330176 2026] [core:error] [pid 2708015:tid 2708015] (13)Permission denied: [client 216.73.216.199:52976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP/align
[Thu Jul 30 10:22:43.771228 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:51400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:43.771263 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:43.822816 2026] [ssl:error] [pid 2709832:tid 2709832] (EAI 2)Name or service not known: [client 144.76.19.72:51414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:43.822844 2026] [ssl:error] [pid 2709832:tid 2709832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:44.539691 2026] [core:error] [pid 2708015:tid 2708015] (13)Permission denied: [client 216.73.216.199:52976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/remote_node_defrag_ratio
[Thu Jul 30 10:22:44.840029 2026] [core:error] [pid 2708015:tid 2708015] (13)Permission denied: [client 216.73.216.199:52976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-16/min_partial
[Thu Jul 30 10:22:46.240504 2026] [security2:error] [pid 2708021:tid 2708021] [client 43.167.232.38:42226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "londonkinesiology.com"] [uri "/"] [unique_id "amsX5s8Hpn7k9hraIzGYFwAAACQ"]
[Thu Jul 30 10:22:46.874285 2026] [ssl:error] [pid 2709867:tid 2709867] (EAI 2)Name or service not known: [client 144.76.19.72:51424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:46.874315 2026] [ssl:error] [pid 2709867:tid 2709867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:46.930389 2026] [ssl:error] [pid 2704149:tid 2704149] (EAI 2)Name or service not known: [client 144.76.19.72:51440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:46.930418 2026] [ssl:error] [pid 2704149:tid 2704149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:47.627845 2026] [security2:error] [pid 2709867:tid 2709867] [client 85.208.96.208:31306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/does-colgate-contain-xylitol"] [unique_id "amsX5394yjv-oYH83Y-MhwAAADc"]
[Thu Jul 30 10:22:48.420713 2026] [security2:error] [pid 2711402:tid 2711402] [client 43.167.232.38:55436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsX6KGbSfkqtlHrqwo4twAAAA8"], referer: http://londonkinesiology.com
[Thu Jul 30 10:22:48.422686 2026] [authz_core:error] [pid 2711402:tid 2711402] [client 43.167.232.38:55436] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://londonkinesiology.com
[Thu Jul 30 10:22:48.425331 2026] [authz_core:error] [pid 2711402:tid 2711402] [client 43.167.232.38:55436] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://londonkinesiology.com
[Thu Jul 30 10:22:48.488033 2026] [lsapi:warn] [pid 2711403:tid 2711403] [client 87.201.112.222:12088] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:22:48.532552 2026] [core:error] [pid 2711405:tid 2711405] [client 66.249.66.67:35512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:48.532612 2026] [core:error] [pid 2711405:tid 2711405] [client 66.249.66.67:35512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:48.540778 2026] [core:error] [pid 2704149:tid 2704149] [client 66.249.64.172:57488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:48.540802 2026] [core:error] [pid 2704149:tid 2704149] [client 66.249.64.172:57488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:49.984499 2026] [ssl:error] [pid 2709113:tid 2709113] (EAI 2)Name or service not known: [client 144.76.19.72:45218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:49.984534 2026] [ssl:error] [pid 2709113:tid 2709113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:50.039287 2026] [ssl:error] [pid 2711405:tid 2711405] (EAI 2)Name or service not known: [client 144.76.19.72:45222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:50.039323 2026] [ssl:error] [pid 2711405:tid 2711405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:51.595918 2026] [security2:error] [pid 2707939:tid 2707939] [client 43.153.123.4:52968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ericashmore.org"] [uri "/"] [unique_id "amsX64QdQLE1fGYvAh32fwAAAAk"]
[Thu Jul 30 10:22:51.959285 2026] [authz_core:error] [pid 2711028:tid 2711028] [client 66.249.66.33:48601] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:22:51.961944 2026] [authz_core:error] [pid 2711028:tid 2711028] [client 66.249.66.33:48601] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:22:53.120239 2026] [ssl:error] [pid 2709755:tid 2709755] (EAI 2)Name or service not known: [client 144.76.19.72:45238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:53.120279 2026] [ssl:error] [pid 2709755:tid 2709755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:53.175704 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:45250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:53.175747 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:53.830262 2026] [authz_core:error] [pid 2711360:tid 2711360] [client 104.219.215.141:57412] AH01630: client denied by server configuration: /home/sfi/public_html/error_log, referer: https://securitiesfinance.co.uk/?yt1
[Thu Jul 30 10:22:56.261797 2026] [ssl:error] [pid 2702102:tid 2702102] (EAI 2)Name or service not known: [client 144.76.19.72:45256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:56.261854 2026] [ssl:error] [pid 2702102:tid 2702102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:56.356756 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:45272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:56.356788 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:56.987818 2026] [ssl:error] [pid 2709867:tid 2709867] (70014)End of file found: [client 216.73.216.199:27797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:57.317764 2026] [core:error] [pid 2682457:tid 2682457] [client 66.249.64.171:52719] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:57.317794 2026] [core:error] [pid 2682457:tid 2682457] [client 66.249.64.171:52719] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:22:57.935093 2026] [security2:error] [pid 2707029:tid 2707029] [client 106.52.49.148:41144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.com"] [uri "/"] [unique_id "amsX8bk2pyVPSwCgPRBbAgAAADI"]
[Thu Jul 30 10:22:58.192586 2026] [core:error] [pid 2706920:tid 2706920] (13)Permission denied: [client 216.73.216.199:12645] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/wwwacct
[Thu Jul 30 10:22:58.684662 2026] [authz_core:error] [pid 2709373:tid 2709373] [client 20.104.16.169:26115] AH01630: client denied by server configuration: /home/baketast/public_html/xmlrpc.php
[Thu Jul 30 10:22:58.796968 2026] [ssl:error] [pid 2706920:tid 2706920] (70014)End of file found: [client 216.73.216.199:12645] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:22:58.829193 2026] [security2:error] [pid 2707892:tid 2707892] [client 43.130.111.40:54616] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.liberator-no-email.com"] [uri "/"] [unique_id "amsX8jzDp6KEG6y7n2UNuQAAAAM"]
[Thu Jul 30 10:22:59.303352 2026] [lsapi:warn] [pid 2711405:tid 2711405] [client 87.201.112.222:44889] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:22:59.393295 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:32196] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env"] [unique_id "amsX8zzDp6KEG6y7n2UNugAAAAM"]
[Thu Jul 30 10:22:59.393482 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:32196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env"] [unique_id "amsX8zzDp6KEG6y7n2UNugAAAAM"]
[Thu Jul 30 10:22:59.394091 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:32196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX8zzDp6KEG6y7n2UNugAAAAM"]
[Thu Jul 30 10:22:59.411581 2026] [ssl:error] [pid 2702102:tid 2702102] (EAI 2)Name or service not known: [client 144.76.19.72:45286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:59.411614 2026] [ssl:error] [pid 2702102:tid 2702102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:59.467427 2026] [ssl:error] [pid 2707029:tid 2707029] (EAI 2)Name or service not known: [client 144.76.19.72:45298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:22:59.467469 2026] [ssl:error] [pid 2707029:tid 2707029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:22:59.504184 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:40420] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env"] [unique_id "amsX8zzDp6KEG6y7n2UNuwAAAAM"]
[Thu Jul 30 10:22:59.504353 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:40420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env"] [unique_id "amsX8zzDp6KEG6y7n2UNuwAAAAM"]
[Thu Jul 30 10:22:59.504880 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:40420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX8zzDp6KEG6y7n2UNuwAAAAM"]
[Thu Jul 30 10:22:59.677207 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:17474] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/api/.env"] [unique_id "amsX86HvicbwoC-uQPxITgAAAAc"]
[Thu Jul 30 10:22:59.677394 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:17474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/api/.env"] [unique_id "amsX86HvicbwoC-uQPxITgAAAAc"]
[Thu Jul 30 10:22:59.677918 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:17474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX86HvicbwoC-uQPxITgAAAAc"]
[Thu Jul 30 10:22:59.783959 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:8413] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/api/.env"] [unique_id "amsX8xKajFqMGejAstq7iQAAABk"]
[Thu Jul 30 10:22:59.784215 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:8413] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/api/.env"] [unique_id "amsX8xKajFqMGejAstq7iQAAABk"]
[Thu Jul 30 10:22:59.784847 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:8413] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX8xKajFqMGejAstq7iQAAABk"]
[Thu Jul 30 10:22:59.838748 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:63240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsX83FueT4F6XZhbm_4XgAAABU"]
[Thu Jul 30 10:22:59.838896 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:63240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsX83FueT4F6XZhbm_4XgAAABU"]
[Thu Jul 30 10:22:59.839433 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:63240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX83FueT4F6XZhbm_4XgAAABU"]
[Thu Jul 30 10:22:59.942184 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:33881] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsX85j6dLbHQA7eEHpawgAAAAI"]
[Thu Jul 30 10:22:59.942360 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:33881] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsX85j6dLbHQA7eEHpawgAAAAI"]
[Thu Jul 30 10:22:59.942892 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:33881] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX85j6dLbHQA7eEHpawgAAAAI"]
[Thu Jul 30 10:22:59.997562 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:40069] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsX8zzDp6KEG6y7n2UNvgAAAAM"]
[Thu Jul 30 10:22:59.997766 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:40069] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsX8zzDp6KEG6y7n2UNvgAAAAM"]
[Thu Jul 30 10:22:59.998300 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:40069] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX8zzDp6KEG6y7n2UNvgAAAAM"]
[Thu Jul 30 10:23:00.077022 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:21637] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsX9KHvicbwoC-uQPxIUAAAAAc"]
[Thu Jul 30 10:23:00.077232 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:21637] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsX9KHvicbwoC-uQPxIUAAAAAc"]
[Thu Jul 30 10:23:00.077737 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:21637] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9KHvicbwoC-uQPxIUAAAAAc"]
[Thu Jul 30 10:23:00.109131 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:40072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsX9JTLIpYr9kPKbURZBAAAABA"]
[Thu Jul 30 10:23:00.109320 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:40072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsX9JTLIpYr9kPKbURZBAAAABA"]
[Thu Jul 30 10:23:00.109904 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:40072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9JTLIpYr9kPKbURZBAAAABA"]
[Thu Jul 30 10:23:00.190423 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:8210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsX9Lk2pyVPSwCgPRBbCwAAADI"]
[Thu Jul 30 10:23:00.190628 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:8210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsX9Lk2pyVPSwCgPRBbCwAAADI"]
[Thu Jul 30 10:23:00.191197 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:8210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9Lk2pyVPSwCgPRBbCwAAADI"]
[Thu Jul 30 10:23:00.237854 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:57195] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsX9DzDp6KEG6y7n2UNvwAAAAM"]
[Thu Jul 30 10:23:00.238051 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:57195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsX9DzDp6KEG6y7n2UNvwAAAAM"]
[Thu Jul 30 10:23:00.238573 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:57195] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9DzDp6KEG6y7n2UNvwAAAAM"]
[Thu Jul 30 10:23:00.346967 2026] [security2:error] [pid 2709792:tid 2709792] [client 74.7.242.61:54026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "holistic-clear.co.uk.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsX9BKajFqMGejAstq7iwAAABk"]
[Thu Jul 30 10:23:00.349861 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:36907] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsX9JTLIpYr9kPKbURZBQAAABA"]
[Thu Jul 30 10:23:00.350098 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:36907] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsX9JTLIpYr9kPKbURZBQAAABA"]
[Thu Jul 30 10:23:00.350809 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:36907] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9JTLIpYr9kPKbURZBQAAABA"]
[Thu Jul 30 10:23:00.395946 2026] [security2:error] [pid 2711404:tid 2711404] [client 77.90.185.230:39593] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.example"] [unique_id "amsX9JfcpXcDYvja6peb4QAAABQ"]
[Thu Jul 30 10:23:00.396178 2026] [security2:error] [pid 2711404:tid 2711404] [client 77.90.185.230:39593] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.example"] [unique_id "amsX9JfcpXcDYvja6peb4QAAABQ"]
[Thu Jul 30 10:23:00.396751 2026] [security2:error] [pid 2711404:tid 2711404] [client 77.90.185.230:39593] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9JfcpXcDYvja6peb4QAAABQ"]
[Thu Jul 30 10:23:00.476866 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:48172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/web/.env"] [unique_id "amsX9Jj6dLbHQA7eEHpaxAAAAAI"]
[Thu Jul 30 10:23:00.477174 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:48172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/web/.env"] [unique_id "amsX9Jj6dLbHQA7eEHpaxAAAAAI"]
[Thu Jul 30 10:23:00.477991 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:48172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9Jj6dLbHQA7eEHpaxAAAAAI"]
[Thu Jul 30 10:23:00.506294 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:19665] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.example"] [unique_id "amsX9Lk2pyVPSwCgPRBbDAAAADI"]
[Thu Jul 30 10:23:00.506555 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:19665] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.example"] [unique_id "amsX9Lk2pyVPSwCgPRBbDAAAADI"]
[Thu Jul 30 10:23:00.507452 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:19665] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9Lk2pyVPSwCgPRBbDAAAADI"]
[Thu Jul 30 10:23:00.560206 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:51938] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsX9DzDp6KEG6y7n2UNwAAAAAM"]
[Thu Jul 30 10:23:00.560398 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:51938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsX9DzDp6KEG6y7n2UNwAAAAAM"]
[Thu Jul 30 10:23:00.560899 2026] [security2:error] [pid 2707892:tid 2707892] [client 77.90.185.230:51938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9DzDp6KEG6y7n2UNwAAAAAM"]
[Thu Jul 30 10:23:00.583790 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:7140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/web/.env"] [unique_id "amsX9KHvicbwoC-uQPxIUgAAAAc"]
[Thu Jul 30 10:23:00.583920 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:7140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/web/.env"] [unique_id "amsX9KHvicbwoC-uQPxIUgAAAAc"]
[Thu Jul 30 10:23:00.584410 2026] [security2:error] [pid 2711028:tid 2711028] [client 77.90.185.230:7140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9KHvicbwoC-uQPxIUgAAAAc"]
[Thu Jul 30 10:23:00.642383 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:47330] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsX9JTLIpYr9kPKbURZBgAAABA"]
[Thu Jul 30 10:23:00.642570 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:47330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsX9JTLIpYr9kPKbURZBgAAABA"]
[Thu Jul 30 10:23:00.643120 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:47330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9JTLIpYr9kPKbURZBgAAABA"]
[Thu Jul 30 10:23:00.665331 2026] [security2:error] [pid 2711404:tid 2711404] [client 77.90.185.230:19132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsX9JfcpXcDYvja6peb4gAAABQ"]
[Thu Jul 30 10:23:00.665516 2026] [security2:error] [pid 2711404:tid 2711404] [client 77.90.185.230:19132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsX9JfcpXcDYvja6peb4gAAABQ"]
[Thu Jul 30 10:23:00.666015 2026] [security2:error] [pid 2711404:tid 2711404] [client 77.90.185.230:19132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9JfcpXcDYvja6peb4gAAABQ"]
[Thu Jul 30 10:23:00.744051 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:25050] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsX9G5iePo5_ZkdK5CW3wAAACo"]
[Thu Jul 30 10:23:00.744201 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:25050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsX9G5iePo5_ZkdK5CW3wAAACo"]
[Thu Jul 30 10:23:00.744753 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:25050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9G5iePo5_ZkdK5CW3wAAACo"]
[Thu Jul 30 10:23:00.800811 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:8278] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/core/.env"] [unique_id "amsX9Jj6dLbHQA7eEHpaxQAAAAI"]
[Thu Jul 30 10:23:00.801017 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:8278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/core/.env"] [unique_id "amsX9Jj6dLbHQA7eEHpaxQAAAAI"]
[Thu Jul 30 10:23:00.801534 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:8278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9Jj6dLbHQA7eEHpaxQAAAAI"]
[Thu Jul 30 10:23:00.905027 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:44689] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/core/.env"] [unique_id "amsX9NuUs8bq9M-pzIi0oAAAABc"]
[Thu Jul 30 10:23:00.905282 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:44689] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/core/.env"] [unique_id "amsX9NuUs8bq9M-pzIi0oAAAABc"]
[Thu Jul 30 10:23:00.905939 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:44689] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9NuUs8bq9M-pzIi0oAAAABc"]
[Thu Jul 30 10:23:01.035330 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:60843] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/images/.env"] [unique_id "amsX9XFueT4F6XZhbm_4YAAAABU"]
[Thu Jul 30 10:23:01.035535 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:60843] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/images/.env"] [unique_id "amsX9XFueT4F6XZhbm_4YAAAABU"]
[Thu Jul 30 10:23:01.036045 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:60843] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9XFueT4F6XZhbm_4YAAAABU"]
[Thu Jul 30 10:23:01.122182 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:42541] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsX9W5iePo5_ZkdK5CW4AAAACo"]
[Thu Jul 30 10:23:01.122377 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:42541] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsX9W5iePo5_ZkdK5CW4AAAACo"]
[Thu Jul 30 10:23:01.122926 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:42541] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9W5iePo5_ZkdK5CW4AAAACo"]
[Thu Jul 30 10:23:01.141785 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:34501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/images/.env"] [unique_id "amsX9Zj6dLbHQA7eEHpaxgAAAAI"]
[Thu Jul 30 10:23:01.141963 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:34501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/images/.env"] [unique_id "amsX9Zj6dLbHQA7eEHpaxgAAAAI"]
[Thu Jul 30 10:23:01.142507 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:34501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9Zj6dLbHQA7eEHpaxgAAAAI"]
[Thu Jul 30 10:23:01.201159 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:3857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/.env.save"] [unique_id "amsX9bk2pyVPSwCgPRBbDgAAADI"]
[Thu Jul 30 10:23:01.201355 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:3857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/.env.save"] [unique_id "amsX9bk2pyVPSwCgPRBbDgAAADI"]
[Thu Jul 30 10:23:01.201870 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:3857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9bk2pyVPSwCgPRBbDgAAADI"]
[Thu Jul 30 10:23:01.224233 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:35955] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsX9duUs8bq9M-pzIi0oQAAABc"]
[Thu Jul 30 10:23:01.224460 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:35955] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsX9duUs8bq9M-pzIi0oQAAABc"]
[Thu Jul 30 10:23:01.225123 2026] [security2:error] [pid 2699637:tid 2699637] [client 77.90.185.230:35955] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9duUs8bq9M-pzIi0oQAAABc"]
[Thu Jul 30 10:23:01.278127 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:28251] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/API/.env"] [unique_id "amsX9Tmkx-YL0RRdgidpEwAAACk"]
[Thu Jul 30 10:23:01.278320 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:28251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/API/.env"] [unique_id "amsX9Tmkx-YL0RRdgidpEwAAACk"]
[Thu Jul 30 10:23:01.278843 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:28251] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9Tmkx-YL0RRdgidpEwAAACk"]
[Thu Jul 30 10:23:01.298387 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:17151] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/.env.save"] [unique_id "amsX9ZTLIpYr9kPKbURZCAAAABA"]
[Thu Jul 30 10:23:01.298562 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:17151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/.env.save"] [unique_id "amsX9ZTLIpYr9kPKbURZCAAAABA"]
[Thu Jul 30 10:23:01.299095 2026] [security2:error] [pid 2702102:tid 2702102] [client 77.90.185.230:17151] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9ZTLIpYr9kPKbURZCAAAABA"]
[Thu Jul 30 10:23:01.359421 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:7441] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-sun.com"] [uri "/app/.env"] [unique_id "amsX9RKajFqMGejAstq7jgAAABk"]
[Thu Jul 30 10:23:01.359626 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:7441] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-sun.com"] [uri "/app/.env"] [unique_id "amsX9RKajFqMGejAstq7jgAAABk"]
[Thu Jul 30 10:23:01.360147 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:7441] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9RKajFqMGejAstq7jgAAABk"]
[Thu Jul 30 10:23:01.372206 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:59159] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/API/.env"] [unique_id "amsX9W5iePo5_ZkdK5CW4QAAACo"]
[Thu Jul 30 10:23:01.372387 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:59159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/API/.env"] [unique_id "amsX9W5iePo5_ZkdK5CW4QAAACo"]
[Thu Jul 30 10:23:01.372926 2026] [security2:error] [pid 2709793:tid 2709793] [client 77.90.185.230:59159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9W5iePo5_ZkdK5CW4QAAACo"]
[Thu Jul 30 10:23:01.450657 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:21151] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.ns-sun.com"] [uri "/app/.env"] [unique_id "amsX9bk2pyVPSwCgPRBbDwAAADI"]
[Thu Jul 30 10:23:01.450842 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:21151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.ns-sun.com"] [uri "/app/.env"] [unique_id "amsX9bk2pyVPSwCgPRBbDwAAADI"]
[Thu Jul 30 10:23:01.451367 2026] [security2:error] [pid 2707029:tid 2707029] [client 77.90.185.230:21151] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9bk2pyVPSwCgPRBbDwAAADI"]
[Thu Jul 30 10:23:01.822197 2026] [core:error] [pid 2708015:tid 2708015] (13)Permission denied: [client 216.73.216.199:52976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-4k/trace
[Thu Jul 30 10:23:02.425901 2026] [ssl:error] [pid 2708015:tid 2708015] (70014)End of file found: [client 216.73.216.199:52976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:02.522034 2026] [ssl:error] [pid 2708485:tid 2708485] (EAI 2)Name or service not known: [client 144.76.19.72:29130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:02.522096 2026] [ssl:error] [pid 2708485:tid 2708485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:02.577015 2026] [ssl:error] [pid 2709829:tid 2709829] (EAI 2)Name or service not known: [client 144.76.19.72:29140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:02.577046 2026] [ssl:error] [pid 2709829:tid 2709829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:02.941779 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:65077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:02.945033 2026] [security2:error] [pid 2709829:tid 2709829] [client 77.90.185.230:8796] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env"] [unique_id "amsX9lN12EFFJfTzb2yWuwAAACs"]
[Thu Jul 30 10:23:02.945205 2026] [security2:error] [pid 2709829:tid 2709829] [client 77.90.185.230:8796] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env"] [unique_id "amsX9lN12EFFJfTzb2yWuwAAACs"]
[Thu Jul 30 10:23:02.945709 2026] [security2:error] [pid 2709829:tid 2709829] [client 77.90.185.230:8796] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9lN12EFFJfTzb2yWuwAAACs"]
[Thu Jul 30 10:23:03.235157 2026] [security2:error] [pid 2709871:tid 2709871] [client 77.90.185.230:20606] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/api/.env"] [unique_id "amsX90TOCejCaI2kGM2PeAAAADw"]
[Thu Jul 30 10:23:03.235360 2026] [security2:error] [pid 2709871:tid 2709871] [client 77.90.185.230:20606] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/api/.env"] [unique_id "amsX90TOCejCaI2kGM2PeAAAADw"]
[Thu Jul 30 10:23:03.235956 2026] [security2:error] [pid 2709871:tid 2709871] [client 77.90.185.230:20606] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX90TOCejCaI2kGM2PeAAAADw"]
[Thu Jul 30 10:23:03.392211 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:58351] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsX9xKajFqMGejAstq7kgAAABk"]
[Thu Jul 30 10:23:03.392423 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:58351] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/dev/.env"] [unique_id "amsX9xKajFqMGejAstq7kgAAABk"]
[Thu Jul 30 10:23:03.392992 2026] [security2:error] [pid 2709792:tid 2709792] [client 77.90.185.230:58351] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9xKajFqMGejAstq7kgAAABk"]
[Thu Jul 30 10:23:03.521690 2026] [security2:error] [pid 2709871:tid 2709871] [client 51.68.107.156:34145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/robots.txt"] [unique_id "amsX90TOCejCaI2kGM2PeQAAADw"]
[Thu Jul 30 10:23:03.551988 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:18238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsX93FueT4F6XZhbm_4YwAAABU"]
[Thu Jul 30 10:23:03.552201 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:18238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/admin/.env"] [unique_id "amsX93FueT4F6XZhbm_4YwAAABU"]
[Thu Jul 30 10:23:03.552724 2026] [security2:error] [pid 2711405:tid 2711405] [client 77.90.185.230:18238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX93FueT4F6XZhbm_4YwAAABU"]
[Thu Jul 30 10:23:03.632037 2026] [security2:error] [pid 2709867:tid 2709867] [client 77.90.185.230:15314] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsX9394yjv-oYH83Y-MkQAAADc"]
[Thu Jul 30 10:23:03.632277 2026] [security2:error] [pid 2709867:tid 2709867] [client 77.90.185.230:15314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/laravel/.env"] [unique_id "amsX9394yjv-oYH83Y-MkQAAADc"]
[Thu Jul 30 10:23:03.632844 2026] [security2:error] [pid 2709867:tid 2709867] [client 77.90.185.230:15314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9394yjv-oYH83Y-MkQAAADc"]
[Thu Jul 30 10:23:03.637084 2026] [security2:error] [pid 2709792:tid 2709792] [client 51.68.107.156:12917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "amsX9xKajFqMGejAstq7kwAAABk"]
[Thu Jul 30 10:23:03.739387 2026] [security2:error] [pid 2707892:tid 2707892] [client 51.68.107.156:12273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/robots.txt"] [unique_id "amsX9zzDp6KEG6y7n2UNxgAAAAM"]
[Thu Jul 30 10:23:03.800294 2026] [security2:error] [pid 2709871:tid 2709871] [client 77.90.185.230:44104] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsX90TOCejCaI2kGM2PegAAADw"]
[Thu Jul 30 10:23:03.800489 2026] [security2:error] [pid 2709871:tid 2709871] [client 77.90.185.230:44104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/backend/.env"] [unique_id "amsX90TOCejCaI2kGM2PegAAADw"]
[Thu Jul 30 10:23:03.801032 2026] [security2:error] [pid 2709871:tid 2709871] [client 77.90.185.230:44104] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX90TOCejCaI2kGM2PegAAADw"]
[Thu Jul 30 10:23:03.957945 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:31107] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.example"] [unique_id "amsX9zmkx-YL0RRdgidpMAAAACk"]
[Thu Jul 30 10:23:03.958165 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:31107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.example"] [unique_id "amsX9zmkx-YL0RRdgidpMAAAACk"]
[Thu Jul 30 10:23:03.958742 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:31107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX9zmkx-YL0RRdgidpMAAAACk"]
[Thu Jul 30 10:23:04.038767 2026] [security2:error] [pid 2712160:tid 2712160] [client 77.90.185.230:39830] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/web/.env"] [unique_id "amsX-JWbFoDuqp0gBpc7EwAAAAo"]
[Thu Jul 30 10:23:04.039015 2026] [security2:error] [pid 2712160:tid 2712160] [client 77.90.185.230:39830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/web/.env"] [unique_id "amsX-JWbFoDuqp0gBpc7EwAAAAo"]
[Thu Jul 30 10:23:04.039716 2026] [security2:error] [pid 2712160:tid 2712160] [client 77.90.185.230:39830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-JWbFoDuqp0gBpc7EwAAAAo"]
[Thu Jul 30 10:23:04.121231 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:33420] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsX-Jj6dLbHQA7eEHpaygAAAAI"]
[Thu Jul 30 10:23:04.121431 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:33420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.bak"] [unique_id "amsX-Jj6dLbHQA7eEHpaygAAAAI"]
[Thu Jul 30 10:23:04.121968 2026] [security2:error] [pid 2708485:tid 2708485] [client 77.90.185.230:33420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-Jj6dLbHQA7eEHpaygAAAAI"]
[Thu Jul 30 10:23:04.206046 2026] [security2:error] [pid 2706921:tid 2706921] [client 77.90.185.230:15591] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsX-DFmJQ0WlypdVWitqAAAACc"]
[Thu Jul 30 10:23:04.206253 2026] [security2:error] [pid 2706921:tid 2706921] [client 77.90.185.230:15591] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/staging/.env"] [unique_id "amsX-DFmJQ0WlypdVWitqAAAACc"]
[Thu Jul 30 10:23:04.206793 2026] [security2:error] [pid 2706921:tid 2706921] [client 77.90.185.230:15591] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-DFmJQ0WlypdVWitqAAAACc"]
[Thu Jul 30 10:23:04.363927 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:37512] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/core/.env"] [unique_id "amsX-Dmkx-YL0RRdgidpMgAAACk"]
[Thu Jul 30 10:23:04.364153 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:37512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/core/.env"] [unique_id "amsX-Dmkx-YL0RRdgidpMgAAACk"]
[Thu Jul 30 10:23:04.364723 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:37512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-Dmkx-YL0RRdgidpMgAAACk"]
[Thu Jul 30 10:23:04.389586 2026] [security2:error] [pid 2709829:tid 2709829] [client 51.68.107.156:33217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/403.shtml"] [unique_id "amsX-FN12EFFJfTzb2yWvQAAACs"]
[Thu Jul 30 10:23:04.608275 2026] [security2:error] [pid 2705165:tid 2705165] [client 77.90.185.230:37513] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/images/.env"] [unique_id "amsX-PgBKim8-6OtEv_QdQAAACM"]
[Thu Jul 30 10:23:04.608479 2026] [security2:error] [pid 2705165:tid 2705165] [client 77.90.185.230:37513] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/images/.env"] [unique_id "amsX-PgBKim8-6OtEv_QdQAAACM"]
[Thu Jul 30 10:23:04.609020 2026] [security2:error] [pid 2705165:tid 2705165] [client 77.90.185.230:37513] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-PgBKim8-6OtEv_QdQAAACM"]
[Thu Jul 30 10:23:04.685721 2026] [security2:error] [pid 2706921:tid 2706921] [client 77.90.185.230:11215] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsX-DFmJQ0WlypdVWitqgAAACc"]
[Thu Jul 30 10:23:04.685909 2026] [security2:error] [pid 2706921:tid 2706921] [client 77.90.185.230:11215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.save.1"] [unique_id "amsX-DFmJQ0WlypdVWitqgAAACc"]
[Thu Jul 30 10:23:04.686472 2026] [security2:error] [pid 2706921:tid 2706921] [client 77.90.185.230:11215] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-DFmJQ0WlypdVWitqgAAACc"]
[Thu Jul 30 10:23:04.765676 2026] [security2:error] [pid 2705165:tid 2705165] [client 77.90.185.230:26440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/.env.save"] [unique_id "amsX-PgBKim8-6OtEv_QdgAAACM"]
[Thu Jul 30 10:23:04.765866 2026] [security2:error] [pid 2705165:tid 2705165] [client 77.90.185.230:26440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/.env.save"] [unique_id "amsX-PgBKim8-6OtEv_QdgAAACM"]
[Thu Jul 30 10:23:04.766401 2026] [security2:error] [pid 2705165:tid 2705165] [client 77.90.185.230:26440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-PgBKim8-6OtEv_QdgAAACM"]
[Thu Jul 30 10:23:04.847725 2026] [security2:error] [pid 2712207:tid 2712207] [client 77.90.185.230:12892] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/API/.env"] [unique_id "amsX-J916V5O-XD4ZY1ZpQAAABo"]
[Thu Jul 30 10:23:04.847979 2026] [security2:error] [pid 2712207:tid 2712207] [client 77.90.185.230:12892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/API/.env"] [unique_id "amsX-J916V5O-XD4ZY1ZpQAAABo"]
[Thu Jul 30 10:23:04.848686 2026] [security2:error] [pid 2712207:tid 2712207] [client 77.90.185.230:12892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-J916V5O-XD4ZY1ZpQAAABo"]
[Thu Jul 30 10:23:04.932472 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:32474] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns1.ns-sun.com"] [uri "/app/.env"] [unique_id "amsX-Dmkx-YL0RRdgidpNQAAACk"]
[Thu Jul 30 10:23:04.932680 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:32474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-sun.com"] [uri "/app/.env"] [unique_id "amsX-Dmkx-YL0RRdgidpNQAAACk"]
[Thu Jul 30 10:23:04.933264 2026] [security2:error] [pid 2709755:tid 2709755] [client 77.90.185.230:32474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns1.ns-sun.com"] [uri "/403.shtml"] [unique_id "amsX-Dmkx-YL0RRdgidpNQAAACk"]
[Thu Jul 30 10:23:05.629693 2026] [ssl:error] [pid 2709874:tid 2709874] (EAI 2)Name or service not known: [client 144.76.19.72:29142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:05.629739 2026] [ssl:error] [pid 2709874:tid 2709874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:05.683500 2026] [ssl:error] [pid 2709755:tid 2709755] (EAI 2)Name or service not known: [client 144.76.19.72:29144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:05.683540 2026] [ssl:error] [pid 2709755:tid 2709755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:06.050853 2026] [security2:error] [pid 2706921:tid 2706921] [client 103.163.116.77:48254] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsX-jFmJQ0WlypdVWitqwAAACc"]
[Thu Jul 30 10:23:06.050904 2026] [security2:error] [pid 2706921:tid 2706921] [client 103.163.116.77:48254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsX-jFmJQ0WlypdVWitqwAAACc"]
[Thu Jul 30 10:23:06.051167 2026] [security2:error] [pid 2706921:tid 2706921] [client 103.163.116.77:48254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsX-jFmJQ0WlypdVWitqwAAACc"]
[Thu Jul 30 10:23:06.065305 2026] [ssl:error] [pid 2711405:tid 2711405] (70014)End of file found: [client 216.73.216.199:38785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:07.434833 2026] [autoindex:error] [pid 2709373:tid 2709373] [client 20.104.16.169:26115] AH01276: Cannot serve directory /home/baketast/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:23:08.740909 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:29160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:08.740934 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:08.795245 2026] [ssl:error] [pid 2708015:tid 2708015] (EAI 2)Name or service not known: [client 144.76.19.72:29168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:08.795274 2026] [ssl:error] [pid 2708015:tid 2708015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:08.823416 2026] [core:error] [pid 2704149:tid 2704149] [client 66.249.64.171:58909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:08.823442 2026] [core:error] [pid 2704149:tid 2704149] [client 66.249.64.171:58909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:09.810463 2026] [lsapi:warn] [pid 2702172:tid 2702172] [client 87.201.112.222:23206] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:23:10.284664 2026] [core:error] [pid 2707892:tid 2707892] (13)Permission denied: [client 216.73.216.199:18274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/ssh/ssh_host_rsa_key
[Thu Jul 30 10:23:10.385674 2026] [security2:error] [pid 2712206:tid 2712206] [client 116.212.185.1:36566] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsX_mXPz62s9ljsbd77fgAAAA8"]
[Thu Jul 30 10:23:10.385721 2026] [security2:error] [pid 2712206:tid 2712206] [client 116.212.185.1:36566] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsX_mXPz62s9ljsbd77fgAAAA8"]
[Thu Jul 30 10:23:10.386018 2026] [security2:error] [pid 2712206:tid 2712206] [client 116.212.185.1:36566] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsX_mXPz62s9ljsbd77fgAAAA8"]
[Thu Jul 30 10:23:11.789381 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/user_map.conf"] [unique_id "amsX_zzDp6KEG6y7n2UN1gAAAAM"]
[Thu Jul 30 10:23:11.789810 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/user_map.conf"] [unique_id "amsX_zzDp6KEG6y7n2UN1gAAAAM"]
[Thu Jul 30 10:23:11.790139 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/user_map.conf"] [unique_id "amsX_zzDp6KEG6y7n2UN1gAAAAM"]
[Thu Jul 30 10:23:11.873145 2026] [ssl:error] [pid 2712160:tid 2712160] (EAI 2)Name or service not known: [client 144.76.19.72:49280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:11.873193 2026] [ssl:error] [pid 2712160:tid 2712160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:11.935886 2026] [ssl:error] [pid 2702172:tid 2702172] (EAI 2)Name or service not known: [client 144.76.19.72:49290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:11.935913 2026] [ssl:error] [pid 2702172:tid 2702172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:12.091275 2026] [core:error] [pid 2707892:tid 2707892] (13)Permission denied: [client 216.73.216.199:18274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/slabs
[Thu Jul 30 10:23:12.588641 2026] [core:error] [pid 2711028:tid 2711028] [client 66.249.66.194:63329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:12.588668 2026] [core:error] [pid 2711028:tid 2711028] [client 66.249.66.194:63329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:13.595955 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:59495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:13.903581 2026] [core:error] [pid 2707892:tid 2707892] (13)Permission denied: [client 216.73.216.199:18274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/tmpDSK
[Thu Jul 30 10:23:14.278749 2026] [security2:error] [pid 2709868:tid 2709868] [client 1.15.52.154:53060] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "josephashmore.org"] [uri "/"] [unique_id "amsYAtURbS0aSaM2IUaERgAAADk"]
[Thu Jul 30 10:23:14.506125 2026] [core:error] [pid 2707892:tid 2707892] (13)Permission denied: [client 216.73.216.199:18274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/net_namespace/partial
[Thu Jul 30 10:23:14.992225 2026] [ssl:error] [pid 2711403:tid 2711403] (EAI 2)Name or service not known: [client 144.76.19.72:49300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:14.992276 2026] [ssl:error] [pid 2711403:tid 2711403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:15.050016 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:49314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:15.050043 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:15.107327 2026] [core:error] [pid 2707892:tid 2707892] (13)Permission denied: [client 216.73.216.199:18274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/seq_file/min_partial
[Thu Jul 30 10:23:16.325148 2026] [security2:error] [pid 2710953:tid 2710953] [client 111.225.148.210:37188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsYBEzrPGbl-2QUcjlvowAAAAE"]
[Thu Jul 30 10:23:16.395702 2026] [security2:error] [pid 2682457:tid 2682457] [client 202.59.209.38:35608] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYBOSCqcHBgGy3oMEtRwAAAA4"]
[Thu Jul 30 10:23:16.395754 2026] [security2:error] [pid 2682457:tid 2682457] [client 202.59.209.38:35608] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYBOSCqcHBgGy3oMEtRwAAAA4"]
[Thu Jul 30 10:23:16.396026 2026] [security2:error] [pid 2682457:tid 2682457] [client 202.59.209.38:35608] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYBOSCqcHBgGy3oMEtRwAAAA4"]
[Thu Jul 30 10:23:17.219958 2026] [core:error] [pid 2707892:tid 2707892] (13)Permission denied: [client 216.73.216.199:18274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-1k/slabs_cpu_partial
[Thu Jul 30 10:23:17.520328 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/fileinfo.ini"] [unique_id "amsYBTzDp6KEG6y7n2UN5AAAAAM"]
[Thu Jul 30 10:23:17.520746 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/fileinfo.ini"] [unique_id "amsYBTzDp6KEG6y7n2UN5AAAAAM"]
[Thu Jul 30 10:23:17.521061 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/fileinfo.ini"] [unique_id "amsYBTzDp6KEG6y7n2UN5AAAAAM"]
[Thu Jul 30 10:23:17.683391 2026] [security2:error] [pid 2692034:tid 2692034] [client 47.128.117.142:21638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.glottalstop.co.uk"] [uri "/robots.txt"] [unique_id "amsYBSu9kg7rpQXVfCIGBQAAAAY"]
[Thu Jul 30 10:23:18.105230 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:49316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:18.105262 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:18.122089 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysctl.d/cloudlinux-linksafe.conf"] [unique_id "amsYBjzDp6KEG6y7n2UN5gAAAAM"]
[Thu Jul 30 10:23:18.122471 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysctl.d/cloudlinux-linksafe.conf"] [unique_id "amsYBjzDp6KEG6y7n2UN5gAAAAM"]
[Thu Jul 30 10:23:18.122815 2026] [security2:error] [pid 2707892:tid 2707892] [client 216.73.216.199:18274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysctl.d/cloudlinux-linksafe.conf"] [unique_id "amsYBjzDp6KEG6y7n2UN5gAAAAM"]
[Thu Jul 30 10:23:18.164698 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:49332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:18.164736 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:18.460216 2026] [cgi:error] [pid 2707970:tid 2707970] [client 20.104.22.47:21861] AH02812: stderr from /home/stcols/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:23:20.084476 2026] [lsapi:warn] [pid 2692034:tid 2692034] [client 87.201.112.222:44888] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:23:21.220707 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:52786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:21.220739 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:21.275261 2026] [ssl:error] [pid 2709829:tid 2709829] (EAI 2)Name or service not known: [client 144.76.19.72:52800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:21.275291 2026] [ssl:error] [pid 2709829:tid 2709829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:22.098095 2026] [ssl:error] [pid 2708015:tid 2708015] (70014)End of file found: [client 216.73.216.199:4082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:22.716161 2026] [lsapi:warn] [pid 2711028:tid 2711028] [client 112.86.225.236:46088] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:23:22.716218 2026] [lsapi:warn] [pid 2711028:tid 2711028] [client 112.86.225.236:46088] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:23:23.453092 2026] [lsapi:warn] [pid 2711028:tid 2711028] [client 112.86.225.236:46088] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:23:23.453171 2026] [lsapi:warn] [pid 2711028:tid 2711028] [client 112.86.225.236:46088] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:23:24.329202 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:52814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:24.329234 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:24.384848 2026] [ssl:error] [pid 2712160:tid 2712160] (EAI 2)Name or service not known: [client 144.76.19.72:52824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:24.384882 2026] [ssl:error] [pid 2712160:tid 2712160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:25.158725 2026] [core:crit] [pid 2709829:tid 2709829] (13)Permission denied: [client 216.73.216.199:57369] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/mysql/plugin/auth_pam_tool_dir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/mysql/plugin/auth_pam_tool_dir/' is executable
[Thu Jul 30 10:23:25.457654 2026] [ssl:error] [pid 2709829:tid 2709829] (70014)End of file found: [client 216.73.216.199:57369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:25.654478 2026] [core:error] [pid 2710953:tid 2710953] [client 204.12.208.18:64672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 10:23:25.654503 2026] [core:error] [pid 2710953:tid 2710953] [client 204.12.208.18:64672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 10:23:25.763697 2026] [ssl:error] [pid 2712207:tid 2712207] (70014)End of file found: [client 216.73.216.199:5703] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:25.825924 2026] [security2:error] [pid 2709871:tid 2709871] [client 114.119.142.20:42515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~23-7-2020"] [unique_id "amsYDUTOCejCaI2kGM2PgAAAADw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1593558000/cat_ids%7E18,102,14/request_format%7Ehtml
[Thu Jul 30 10:23:26.157605 2026] [core:error] [pid 2709373:tid 2709373] [client 204.12.208.18:64683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 10:23:26.157634 2026] [core:error] [pid 2709373:tid 2709373] [client 204.12.208.18:64683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 10:23:26.627521 2026] [core:error] [pid 2711405:tid 2711405] [client 204.12.208.18:64689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 10:23:26.627547 2026] [core:error] [pid 2711405:tid 2711405] [client 204.12.208.18:64689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://apotheekcandidejacobs.be/wp-content/pl5f9623/edit.php
[Thu Jul 30 10:23:26.931896 2026] [security2:error] [pid 2707892:tid 2707892] [client 114.119.142.20:42527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~23-7-2020"] [unique_id "amsYDjzDp6KEG6y7n2UN7QAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1593558000/cat_ids%7E18,102,14/request_format%7Ehtml
[Thu Jul 30 10:23:27.439540 2026] [ssl:error] [pid 2708485:tid 2708485] (EAI 2)Name or service not known: [client 144.76.19.72:52826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:27.439576 2026] [ssl:error] [pid 2708485:tid 2708485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:27.495564 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:52834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:27.495618 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:27.565231 2026] [ssl:error] [pid 2709868:tid 2709868] (70014)End of file found: [client 216.73.216.199:4956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:29.961045 2026] [core:error] [pid 2709373:tid 2709373] [client 66.249.64.172:36544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:29.961090 2026] [core:error] [pid 2709373:tid 2709373] [client 66.249.64.172:36544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:30.554804 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:34952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:30.554837 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:30.609506 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:34964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:30.609554 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:31.181712 2026] [ssl:error] [pid 2709793:tid 2709793] (70014)End of file found: [client 216.73.216.199:13361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:31.540870 2026] [lsapi:warn] [pid 2704149:tid 2704149] [client 87.201.112.222:44864] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:23:32.688018 2026] [core:error] [pid 2711404:tid 2711404] (13)Permission denied: [client 216.73.216.199:8203] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/slab_size
[Thu Jul 30 10:23:33.664441 2026] [ssl:error] [pid 2707028:tid 2707028] (EAI 2)Name or service not known: [client 144.76.19.72:34980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:33.664475 2026] [ssl:error] [pid 2707028:tid 2707028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:33.718805 2026] [ssl:error] [pid 2699637:tid 2699637] (EAI 2)Name or service not known: [client 144.76.19.72:34988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:33.718846 2026] [ssl:error] [pid 2699637:tid 2699637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:34.456302 2026] [authz_core:error] [pid 2708019:tid 2708019] [client 66.249.66.163:42658] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:23:34.458944 2026] [authz_core:error] [pid 2708019:tid 2708019] [client 66.249.66.163:42658] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:23:34.637461 2026] [ssl:error] [pid 2709868:tid 2709868] (70014)End of file found: [client 216.73.216.199:52571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:34.932181 2026] [ssl:error] [pid 2709871:tid 2709871] (70014)End of file found: [client 216.73.216.199:41578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:35.234189 2026] [ssl:error] [pid 2699637:tid 2699637] (70014)End of file found: [client 216.73.216.199:29186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:36.073679 2026] [security2:error] [pid 2709874:tid 2709874] [client 43.157.191.20:56436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.familyjames.com"] [uri "/"] [unique_id "amsYGEHzmlw82KlsY3J44AAAAD4"]
[Thu Jul 30 10:23:36.775128 2026] [ssl:error] [pid 2708485:tid 2708485] (EAI 2)Name or service not known: [client 144.76.19.72:35000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:36.775166 2026] [ssl:error] [pid 2708485:tid 2708485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:36.832635 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:35004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:36.832666 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:39.887500 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:19586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:39.887532 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:39.939106 2026] [ssl:error] [pid 2711404:tid 2711404] (EAI 2)Name or service not known: [client 144.76.19.72:19590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:39.939142 2026] [ssl:error] [pid 2711404:tid 2711404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:40.052434 2026] [ssl:error] [pid 2706920:tid 2706920] (70014)End of file found: [client 216.73.216.199:49498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:40.057720 2026] [security2:error] [pid 2708021:tid 2708021] [client 110.249.202.178:21914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsYHM8Hpn7k9hraIzGYJAAAACQ"]
[Thu Jul 30 10:23:40.356189 2026] [ssl:error] [pid 2708019:tid 2708019] (70014)End of file found: [client 216.73.216.199:57921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:40.657416 2026] [ssl:error] [pid 2709792:tid 2709792] (70014)End of file found: [client 216.73.216.199:15504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:42.906770 2026] [lsapi:warn] [pid 2711360:tid 2711360] [client 87.201.112.222:44871] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:23:43.011214 2026] [ssl:error] [pid 2709867:tid 2709867] (EAI 2)Name or service not known: [client 144.76.19.72:19596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:43.011251 2026] [ssl:error] [pid 2709867:tid 2709867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:43.066949 2026] [ssl:error] [pid 2709755:tid 2709755] (EAI 2)Name or service not known: [client 144.76.19.72:19608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:43.066980 2026] [ssl:error] [pid 2709755:tid 2709755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:43.148706 2026] [security2:error] [pid 2702172:tid 2702172] [client 110.249.202.131:59418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/403.shtml"] [unique_id "amsYH7vXsxyBiTz6pjF7vAAAACA"]
[Thu Jul 30 10:23:43.806538 2026] [security2:error] [pid 2709871:tid 2709871] [client 110.249.202.21:59574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/robots.txt"] [unique_id "amsYH0TOCejCaI2kGM2PhAAAADw"]
[Thu Jul 30 10:23:45.460687 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:62906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:45.786945 2026] [core:error] [pid 2709871:tid 2709871] (13)Permission denied: [client 216.73.216.199:35785] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/bin/sudo
[Thu Jul 30 10:23:46.121685 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:19618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:46.121720 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:46.176390 2026] [ssl:error] [pid 2709792:tid 2709792] (70014)End of file found: [client 216.73.216.199:25989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:46.177885 2026] [ssl:error] [pid 2699637:tid 2699637] (EAI 2)Name or service not known: [client 144.76.19.72:19624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:46.177927 2026] [ssl:error] [pid 2699637:tid 2699637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:46.219174 2026] [security2:error] [pid 2708019:tid 2708019] [client 43.153.76.247:54192] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.com"] [uri "/"] [unique_id "amsYIhVjibqdChz1IjbbIAAAAB4"]
[Thu Jul 30 10:23:46.472487 2026] [ssl:error] [pid 2709871:tid 2709871] (70014)End of file found: [client 216.73.216.199:35785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:47.551676 2026] [security2:error] [pid 2682457:tid 2682457] [client 43.153.76.247:49478] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsYI-SCqcHBgGy3oMEtUQAAAA4"], referer: http://www.saturnsports.com
[Thu Jul 30 10:23:48.050258 2026] [security2:error] [pid 2709874:tid 2709874] [client 185.191.171.8:39072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/police-incident-worthing"] [unique_id "amsYJEHzmlw82KlsY3J45QAAAD4"]
[Thu Jul 30 10:23:49.235777 2026] [ssl:error] [pid 2709867:tid 2709867] (EAI 2)Name or service not known: [client 144.76.19.72:19630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:49.235810 2026] [ssl:error] [pid 2709867:tid 2709867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:49.297455 2026] [ssl:error] [pid 2708015:tid 2708015] (EAI 2)Name or service not known: [client 144.76.19.72:19638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:49.297484 2026] [ssl:error] [pid 2708015:tid 2708015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:49.362749 2026] [core:error] [pid 2713611:tid 2713611] [client 66.249.64.171:57904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:49.362806 2026] [core:error] [pid 2713611:tid 2713611] [client 66.249.64.171:57904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:49.439675 2026] [core:error] [pid 2708021:tid 2708021] [client 66.249.64.171:63264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:49.439701 2026] [core:error] [pid 2708021:tid 2708021] [client 66.249.64.171:63264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:50.885739 2026] [ssl:error] [pid 2713474:tid 2713474] (70014)End of file found: [client 216.73.216.199:17661] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:50.930499 2026] [cgi:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH02812: stderr from /home/dawnrobi/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:23:51.797113 2026] [ssl:error] [pid 2706920:tid 2706920] (70014)End of file found: [client 216.73.216.199:18380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:51.908167 2026] [lsapi:warn] [pid 2713681:tid 2713681] [client 87.201.112.222:44872] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:23:52.029136 2026] [core:error] [pid 2708019:tid 2708019] [client 66.249.64.171:47120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:52.029165 2026] [core:error] [pid 2708019:tid 2708019] [client 66.249.64.171:47120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:52.194566 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:45713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:52.613099 2026] [ssl:error] [pid 2713681:tid 2713681] (EAI 2)Name or service not known: [client 144.76.19.72:44920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:52.613136 2026] [ssl:error] [pid 2713681:tid 2713681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:52.687722 2026] [ssl:error] [pid 2709792:tid 2709792] (EAI 2)Name or service not known: [client 144.76.19.72:44930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:52.687760 2026] [ssl:error] [pid 2709792:tid 2709792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:53.106584 2026] [security2:error] [pid 2702172:tid 2702172] [client 43.164.190.28:58254] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amsYKbvXsxyBiTz6pjF7vwAAACA"]
[Thu Jul 30 10:23:55.750622 2026] [ssl:error] [pid 2713610:tid 2713610] (EAI 2)Name or service not known: [client 144.76.19.72:44944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:55.750657 2026] [ssl:error] [pid 2713610:tid 2713610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:55.838996 2026] [ssl:error] [pid 2707970:tid 2707970] (EAI 2)Name or service not known: [client 144.76.19.72:44950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:55.839025 2026] [ssl:error] [pid 2707970:tid 2707970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:56.305651 2026] [core:error] [pid 2707970:tid 2707970] (13)Permission denied: [client 216.73.216.199:12097] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/aliases
[Thu Jul 30 10:23:56.412881 2026] [ssl:error] [pid 2707970:tid 2707970] (70014)End of file found: [client 216.73.216.199:12097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:57.196486 2026] [ssl:error] [pid 2711028:tid 2711028] (70014)End of file found: [client 216.73.216.199:22774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:57.502192 2026] [ssl:error] [pid 2707028:tid 2707028] (70014)End of file found: [client 216.73.216.199:52989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:23:58.893678 2026] [ssl:error] [pid 2707939:tid 2707939] (EAI 2)Name or service not known: [client 144.76.19.72:44964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:58.893716 2026] [ssl:error] [pid 2707939:tid 2707939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:58.946430 2026] [ssl:error] [pid 2682457:tid 2682457] (EAI 2)Name or service not known: [client 144.76.19.72:44974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:23:58.946453 2026] [ssl:error] [pid 2682457:tid 2682457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:23:59.137048 2026] [core:error] [pid 2692034:tid 2692034] [client 66.249.66.168:58194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:59.137086 2026] [core:error] [pid 2692034:tid 2692034] [client 66.249.66.168:58194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:59.248234 2026] [core:error] [pid 2709755:tid 2709755] [client 66.249.66.4:65523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:59.248259 2026] [core:error] [pid 2709755:tid 2709755] [client 66.249.66.4:65523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:23:59.822217 2026] [security2:error] [pid 2708019:tid 2708019] [client 49.51.36.179:46822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thatwall.com"] [uri "/"] [unique_id "amsYLxVjibqdChz1IjbbJwAAAB4"]
[Thu Jul 30 10:24:01.712463 2026] [ssl:error] [pid 2709874:tid 2709874] (70014)End of file found: [client 216.73.216.199:19146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:02.001116 2026] [ssl:error] [pid 2713681:tid 2713681] (EAI 2)Name or service not known: [client 144.76.19.72:57350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:02.001139 2026] [ssl:error] [pid 2713681:tid 2713681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:02.057090 2026] [ssl:error] [pid 2707029:tid 2707029] (EAI 2)Name or service not known: [client 144.76.19.72:57360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:02.057113 2026] [ssl:error] [pid 2707029:tid 2707029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:02.636860 2026] [ssl:error] [pid 2713883:tid 2713883] (70014)End of file found: [client 216.73.216.199:18537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:02.808775 2026] [lsapi:warn] [pid 2713608:tid 2713608] [client 87.201.112.222:23228] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:24:02.921038 2026] [ssl:error] [pid 2713882:tid 2713882] (70014)End of file found: [client 216.73.216.199:29038] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:03.525987 2026] [security2:error] [pid 2713681:tid 2713681] [client 177.44.211.116:5578] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYM9IiG1h6GC-xZbaaOQAAAB8"]
[Thu Jul 30 10:24:03.526049 2026] [security2:error] [pid 2713681:tid 2713681] [client 177.44.211.116:5578] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYM9IiG1h6GC-xZbaaOQAAAB8"]
[Thu Jul 30 10:24:03.526326 2026] [security2:error] [pid 2713681:tid 2713681] [client 177.44.211.116:5578] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYM9IiG1h6GC-xZbaaOQAAAB8"]
[Thu Jul 30 10:24:05.111047 2026] [ssl:error] [pid 2709867:tid 2709867] (EAI 2)Name or service not known: [client 144.76.19.72:57374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:05.111097 2026] [ssl:error] [pid 2709867:tid 2709867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:05.167572 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:57378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:05.167610 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:05.267803 2026] [security2:error] [pid 2713925:tid 2713925] [client 103.229.85.53:50184] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYNXyEGZ8YFn0x0VKUpwAAACw"]
[Thu Jul 30 10:24:05.267867 2026] [security2:error] [pid 2713925:tid 2713925] [client 103.229.85.53:50184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYNXyEGZ8YFn0x0VKUpwAAACw"]
[Thu Jul 30 10:24:05.268245 2026] [security2:error] [pid 2713925:tid 2713925] [client 103.229.85.53:50184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYNXyEGZ8YFn0x0VKUpwAAACw"]
[Thu Jul 30 10:24:05.468304 2026] [authz_core:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 10:24:05.469853 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 10:24:05.471863 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 10:24:05.474291 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 10:24:05.477247 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 10:24:05.477284 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 10:24:05.633426 2026] [security2:error] [pid 2711405:tid 2711405] [client 85.208.96.209:36052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7577.0/prev_next,next.html"] [unique_id "amsYNXFueT4F6XZhbm_4fAAAABU"]
[Thu Jul 30 10:24:06.083722 2026] [authz_core:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 10:24:06.142948 2026] [security2:error] [pid 2713881:tid 2713881] [client 170.106.147.63:47754] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amsYNi9gXE9FDlocw5lNEwAAACY"]
[Thu Jul 30 10:24:08.221815 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:57386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:08.221851 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:08.273999 2026] [ssl:error] [pid 2711405:tid 2711405] (EAI 2)Name or service not known: [client 144.76.19.72:57398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:08.274039 2026] [ssl:error] [pid 2711405:tid 2711405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:08.447534 2026] [ssl:error] [pid 2713846:tid 2713846] (70014)End of file found: [client 216.73.216.199:4418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:08.923022 2026] [security2:error] [pid 2709874:tid 2709874] [client 14.191.180.54:26886] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYOEHzmlw82KlsY3J46gAAAD4"]
[Thu Jul 30 10:24:08.923084 2026] [security2:error] [pid 2709874:tid 2709874] [client 14.191.180.54:26886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYOEHzmlw82KlsY3J46gAAAD4"]
[Thu Jul 30 10:24:08.923405 2026] [security2:error] [pid 2709874:tid 2709874] [client 14.191.180.54:26886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYOEHzmlw82KlsY3J46gAAAD4"]
[Thu Jul 30 10:24:09.337941 2026] [core:error] [pid 2713569:tid 2713569] [client 66.249.66.68:39250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:09.337966 2026] [core:error] [pid 2713569:tid 2713569] [client 66.249.66.68:39250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:10.805639 2026] [authz_core:error] [pid 2710953:tid 2710953] [client 66.249.66.34:61824] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:24:10.808300 2026] [authz_core:error] [pid 2710953:tid 2710953] [client 66.249.66.34:61824] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:24:11.330900 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:35316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:11.330929 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:11.383537 2026] [ssl:error] [pid 2713569:tid 2713569] (EAI 2)Name or service not known: [client 144.76.19.72:35322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:11.383567 2026] [ssl:error] [pid 2713569:tid 2713569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:12.704428 2026] [authz_core:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 10:24:12.706061 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 10:24:12.708101 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 10:24:12.710541 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 10:24:12.713524 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 10:24:12.713555 2026] [access_compat:error] [pid 2709832:tid 2709832] [client 172.202.98.196:34133] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 10:24:13.456969 2026] [lsapi:warn] [pid 2713681:tid 2713681] [client 87.201.112.222:58727] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:24:13.870707 2026] [core:error] [pid 2713929:tid 2713929] [client 216.73.216.199:53738] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/python3.12/%(docloc)s)
[Thu Jul 30 10:24:14.450242 2026] [ssl:error] [pid 2712207:tid 2712207] (EAI 2)Name or service not known: [client 144.76.19.72:35330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:14.450283 2026] [ssl:error] [pid 2712207:tid 2712207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:14.502223 2026] [ssl:error] [pid 2713569:tid 2713569] (EAI 2)Name or service not known: [client 144.76.19.72:35332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:14.502248 2026] [ssl:error] [pid 2713569:tid 2713569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:17.661116 2026] [ssl:error] [pid 2707939:tid 2707939] (EAI 2)Name or service not known: [client 144.76.19.72:35338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:17.661165 2026] [ssl:error] [pid 2707939:tid 2707939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:17.722077 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:35344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:17.722119 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:18.804379 2026] [security2:error] [pid 2713930:tid 2713930] [client 47.128.126.160:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/robots.txt"] [unique_id "amsYQuELN1EK3H7eSg5FCQAAADM"]
[Thu Jul 30 10:24:19.286901 2026] [core:error] [pid 2713608:tid 2713608] (13)Permission denied: [client 216.73.216.199:39039] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/order
[Thu Jul 30 10:24:20.780447 2026] [ssl:error] [pid 2713808:tid 2713808] (EAI 2)Name or service not known: [client 144.76.19.72:38898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:20.780492 2026] [ssl:error] [pid 2713808:tid 2713808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:20.866703 2026] [ssl:error] [pid 2707028:tid 2707028] (EAI 2)Name or service not known: [client 144.76.19.72:38902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:20.866743 2026] [ssl:error] [pid 2707028:tid 2707028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:21.398428 2026] [core:error] [pid 2713608:tid 2713608] (13)Permission denied: [client 216.73.216.199:39039] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/cpu_slabs
[Thu Jul 30 10:24:22.303204 2026] [ssl:error] [pid 2713608:tid 2713608] (70014)End of file found: [client 216.73.216.199:39039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:23.854845 2026] [lsapi:warn] [pid 2713927:tid 2713927] [client 87.201.112.222:44875] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:24:23.920379 2026] [ssl:error] [pid 2709755:tid 2709755] (EAI 2)Name or service not known: [client 144.76.19.72:38906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:23.920422 2026] [ssl:error] [pid 2709755:tid 2709755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:23.976986 2026] [ssl:error] [pid 2713883:tid 2713883] (EAI 2)Name or service not known: [client 144.76.19.72:38922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:23.977041 2026] [ssl:error] [pid 2713883:tid 2713883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:24.292311 2026] [security2:error] [pid 2713808:tid 2713808] [client 45.32.206.232:45604] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1)&(1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1)&(1 found within ARGS:author_exclude: 0) AND (1=1)-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsYSIihKCBtbw0QqFPymgAAACE"]
[Thu Jul 30 10:24:24.292376 2026] [security2:error] [pid 2713808:tid 2713808] [client 45.32.206.232:45604] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1)&(1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1)&(1 found within ARGS:author_exclude: 0) AND (1=1)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsYSIihKCBtbw0QqFPymgAAACE"]
[Thu Jul 30 10:24:24.292556 2026] [security2:error] [pid 2713808:tid 2713808] [client 45.32.206.232:45604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsYSIihKCBtbw0QqFPymgAAACE"]
[Thu Jul 30 10:24:24.448334 2026] [security2:error] [pid 2713808:tid 2713808] [client 45.32.206.232:45604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=10,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): SQL Injection Attack Detected via libinjection"] [tag "event-correlation"] [hostname "www.mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amsYSIihKCBtbw0QqFPymgAAACE"]
[Thu Jul 30 10:24:24.944115 2026] [security2:error] [pid 2709868:tid 2709868] [client 85.208.96.208:53530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,645.0/prev_next,prev.html"] [unique_id "amsYSNURbS0aSaM2IUaEVgAAADk"]
[Thu Jul 30 10:24:25.262704 2026] [security2:error] [pid 2710953:tid 2710953] [client 111.225.148.152:35408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/robots.txt"] [unique_id "amsYSUzrPGbl-2QUcjlvtQAAAAE"]
[Thu Jul 30 10:24:27.031508 2026] [ssl:error] [pid 2711404:tid 2711404] (EAI 2)Name or service not known: [client 144.76.19.72:38938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:27.031560 2026] [ssl:error] [pid 2711404:tid 2711404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:27.084713 2026] [ssl:error] [pid 2711405:tid 2711405] (EAI 2)Name or service not known: [client 144.76.19.72:38946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:27.084754 2026] [ssl:error] [pid 2711405:tid 2711405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:29.828050 2026] [ssl:error] [pid 2713929:tid 2713929] (70014)End of file found: [client 216.73.216.199:57778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:30.141046 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:59346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:30.141099 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:30.196512 2026] [ssl:error] [pid 2709792:tid 2709792] (EAI 2)Name or service not known: [client 144.76.19.72:59350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:30.196540 2026] [ssl:error] [pid 2709792:tid 2709792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:30.314100 2026] [core:error] [pid 2713880:tid 2713880] (13)Permission denied: [client 216.73.216.199:26451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/sunrpc/sections/__tracepoints_strings
[Thu Jul 30 10:24:30.888230 2026] [core:error] [pid 2708019:tid 2708019] [client 66.249.64.172:61103] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:30.888256 2026] [core:error] [pid 2708019:tid 2708019] [client 66.249.64.172:61103] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:31.332463 2026] [ssl:error] [pid 2713880:tid 2713880] (70014)End of file found: [client 216.73.216.199:26451] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:32.908396 2026] [security2:error] [pid 2710953:tid 2710953] [client 43.164.0.96:37532] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsYUEzrPGbl-2QUcjlvtwAAAAE"], referer: http://www.banskoexpress.co.uk
[Thu Jul 30 10:24:33.383339 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:59352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:33.383379 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:33.503854 2026] [ssl:error] [pid 2699687:tid 2699687] (EAI 2)Name or service not known: [client 144.76.19.72:59364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:33.503879 2026] [ssl:error] [pid 2699687:tid 2699687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:33.746702 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:1369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:35.710715 2026] [lsapi:warn] [pid 2705113:tid 2705113] [client 87.201.112.222:23220] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:24:36.560143 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:59370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:36.560177 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:36.611489 2026] [ssl:error] [pid 2713930:tid 2713930] (EAI 2)Name or service not known: [client 144.76.19.72:59374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:36.611520 2026] [ssl:error] [pid 2713930:tid 2713930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:37.266255 2026] [ssl:error] [pid 2707028:tid 2707028] (70014)End of file found: [client 216.73.216.199:29040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:38.173501 2026] [ssl:error] [pid 2709792:tid 2709792] (70014)End of file found: [client 216.73.216.199:5954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:39.380439 2026] [lsapi:error] [pid 2713931:tid 2713931] [client 216.73.216.199:12157] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Ruby.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Ruby.php on line 8\n
[Thu Jul 30 10:24:39.695292 2026] [ssl:error] [pid 2715587:tid 2715587] (EAI 2)Name or service not known: [client 144.76.19.72:64364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:39.695326 2026] [ssl:error] [pid 2715587:tid 2715587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:39.751542 2026] [ssl:error] [pid 2711404:tid 2711404] (EAI 2)Name or service not known: [client 144.76.19.72:64376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:39.751572 2026] [ssl:error] [pid 2711404:tid 2711404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:40.116625 2026] [cgi:error] [pid 2709793:tid 2709793] [client 20.151.254.105:52910] AH02811: stderr from /home/redsocks/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:24:41.938008 2026] [security2:error] [pid 2715661:tid 2715661] [client 43.164.0.96:50184] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsYWTnzldLYVPkt2aAM4AAAAAU"], referer: http://www.banskoexpress.com
[Thu Jul 30 10:24:42.833513 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:64378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:42.833539 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:42.889466 2026] [ssl:error] [pid 2715587:tid 2715587] (EAI 2)Name or service not known: [client 144.76.19.72:64384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:42.889491 2026] [ssl:error] [pid 2715587:tid 2715587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:42.994344 2026] [ssl:error] [pid 2702172:tid 2702172] (70014)End of file found: [client 216.73.216.199:20684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:44.565995 2026] [security2:error] [pid 2715620:tid 2715620] [client 110.249.201.210:65440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsYXMSSJB99tPj4H7tTowAAAAQ"]
[Thu Jul 30 10:24:45.397557 2026] [ssl:error] [pid 2715773:tid 2715773] (70014)End of file found: [client 216.73.216.199:17790] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:45.429650 2026] [lsapi:warn] [pid 2707939:tid 2707939] [client 87.201.112.222:58685] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:24:45.698548 2026] [ssl:error] [pid 2713846:tid 2713846] (70014)End of file found: [client 216.73.216.199:50770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:45.958989 2026] [ssl:error] [pid 2705113:tid 2705113] (EAI 2)Name or service not known: [client 144.76.19.72:64394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:45.959026 2026] [ssl:error] [pid 2705113:tid 2705113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:45.970819 2026] [core:error] [pid 2692034:tid 2692034] [client 66.249.64.171:52475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:45.970841 2026] [core:error] [pid 2692034:tid 2692034] [client 66.249.64.171:52475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:46.017286 2026] [ssl:error] [pid 2713927:tid 2713927] (EAI 2)Name or service not known: [client 144.76.19.72:64404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:46.017326 2026] [ssl:error] [pid 2713927:tid 2713927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:46.171981 2026] [core:error] [pid 2713608:tid 2713608] [client 66.249.66.40:48624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:46.172010 2026] [core:error] [pid 2713608:tid 2713608] [client 66.249.66.40:48624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:46.517150 2026] [security2:error] [pid 2709755:tid 2709755] [client 110.249.201.228:39248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/css/bootstrap.min.css"] [unique_id "amsYXjmkx-YL0RRdgidpiwAAACk"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:46.620091 2026] [core:error] [pid 2713927:tid 2713927] [client 66.249.66.194:51622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:46.620112 2026] [core:error] [pid 2713927:tid 2713927] [client 66.249.66.194:51622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:46.635471 2026] [security2:error] [pid 2715735:tid 2715735] [client 110.249.201.185:61760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/css/dashicons.min.css"] [unique_id "amsYXubZn9WRuyQf__goBwAAAA0"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:46.687898 2026] [security2:error] [pid 2713931:tid 2713931] [client 110.249.201.159:44920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/essential-grid/public/includes/builders/gutenberg/build/index.css"] [unique_id "amsYXrmwEr8-9VCs4FjYtgAAADU"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:46.781465 2026] [security2:error] [pid 2709792:tid 2709792] [client 110.249.201.237:49084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/css/zoutula-responsive.css"] [unique_id "amsYXhKajFqMGejAstq7-wAAABk"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:46.807197 2026] [security2:error] [pid 2707939:tid 2707939] [client 110.249.201.163:45528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/contact-form-7/includes/css/styles.css"] [unique_id "amsYXoQdQLE1fGYvAh32wgAAAAk"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:46.837390 2026] [security2:error] [pid 2705113:tid 2705113] [client 85.208.96.194:50584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.1440.html"] [unique_id "amsYXvfH3Rr0Mm1at1zMvAAAABY"]
[Thu Jul 30 10:24:47.289177 2026] [security2:error] [pid 2707029:tid 2707029] [client 110.249.201.245:56422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/css/zoutula-shortcodes.css"] [unique_id "amsYX7k2pyVPSwCgPRBbLQAAADI"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:48.468721 2026] [security2:error] [pid 2702172:tid 2702172] [client 85.208.96.207:46284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/ursa-waco-resident-portal"] [unique_id "amsYYLvXsxyBiTz6pjF72gAAACA"]
[Thu Jul 30 10:24:49.073883 2026] [ssl:error] [pid 2713608:tid 2713608] (EAI 2)Name or service not known: [client 144.76.19.72:64410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:49.073913 2026] [ssl:error] [pid 2713608:tid 2713608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:49.127665 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:64420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:49.127689 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:49.916003 2026] [security2:error] [pid 2715662:tid 2715662] [client 114.119.142.20:65523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1601074800/request_format~html/cat_ids~103"] [unique_id "amsYYYcf9ncsRiXvePJnzQAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1601074800/request_format~html/cat_ids~103
[Thu Jul 30 10:24:50.677797 2026] [security2:error] [pid 2702172:tid 2702172] [client 110.249.201.96:10756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/css/owl.carousel.min.css"] [unique_id "amsYYrvXsxyBiTz6pjF73AAAACA"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:50.852653 2026] [core:error] [pid 2716214:tid 2716214] [client 66.249.64.170:57787] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:50.852684 2026] [core:error] [pid 2716214:tid 2716214] [client 66.249.64.170:57787] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:24:50.927079 2026] [security2:error] [pid 2715662:tid 2715662] [client 114.119.142.20:49303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1601074800/request_format~html/cat_ids~103"] [unique_id "amsYYocf9ncsRiXvePJnzgAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1601074800/request_format~html/cat_ids~103
[Thu Jul 30 10:24:51.432186 2026] [security2:error] [pid 2715773:tid 2715773] [client 110.249.201.98:12882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/font-icons/flaticon.css"] [unique_id "amsYYy434usLfyVYtTj9ZQAAABA"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:51.707606 2026] [security2:error] [pid 2716214:tid 2716214] [client 110.249.201.155:55746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/style.css"] [unique_id "amsYY3096qyUxvxRqDcBjwAAAAM"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:52.043642 2026] [security2:error] [pid 2713931:tid 2713931] [client 110.249.201.116:16864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/revslider/public/css/sr7.css"] [unique_id "amsYZLmwEr8-9VCs4FjYtwAAADU"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:52.044038 2026] [security2:error] [pid 2707028:tid 2707028] [client 110.249.201.134:27306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/css/enfant-responsive.css"] [unique_id "amsYZNmaJH1bf1jjmZ8jNwAAADE"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:52.191505 2026] [ssl:error] [pid 2707939:tid 2707939] (EAI 2)Name or service not known: [client 144.76.19.72:22282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:52.191538 2026] [ssl:error] [pid 2707939:tid 2707939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:52.245695 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:22286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:52.245725 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:52.322675 2026] [ssl:error] [pid 2715620:tid 2715620] (70014)End of file found: [client 216.73.216.199:13331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:52.433224 2026] [security2:error] [pid 2713609:tid 2713609] [client 110.249.201.25:44114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant-child/style.css"] [unique_id "amsYZLPEOVV8OrEqv9r6DwAAABM"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:54.285405 2026] [ssl:error] [pid 2713608:tid 2713608] (70014)End of file found: [client 216.73.216.199:1414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:55.014086 2026] [security2:error] [pid 2716353:tid 2716353] [client 110.249.201.141:45482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/css/enfant-flaticon.css"] [unique_id "amsYZy9YiZSJ6stVI8VJuwAAABc"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:55.303542 2026] [ssl:error] [pid 2709793:tid 2709793] (EAI 2)Name or service not known: [client 144.76.19.72:22288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:55.303567 2026] [ssl:error] [pid 2709793:tid 2709793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:55.361475 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:22294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:55.361501 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:56.090849 2026] [security2:error] [pid 2710953:tid 2710953] [client 110.249.201.159:30136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/css/font-awesome.min.css"] [unique_id "amsYaEzrPGbl-2QUcjlvwAAAAAE"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:56.200877 2026] [lsapi:warn] [pid 2709874:tid 2709874] [client 87.201.112.222:58645] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:24:56.522242 2026] [security2:error] [pid 2716316:tid 2716316] [client 110.249.201.35:26148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/js_composer/assets/css/js_composer.min.css"] [unique_id "amsYaHdfByIFeh7-5AIEOwAAABI"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:56.817199 2026] [security2:error] [pid 2713924:tid 2713924] [client 110.249.201.186:37648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/essential-grid/public/assets/css/settings.css"] [unique_id "amsYaAPKvbAI5eCHWBJu-gAAACs"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:57.334157 2026] [security2:error] [pid 2715773:tid 2715773] [client 110.249.201.71:64230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css"] [unique_id "amsYaS434usLfyVYtTj9ZgAAABA"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:57.545229 2026] [security2:error] [pid 2692034:tid 2692034] [client 110.249.201.87:41256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/essential-grid/public/assets/css/jquery.esgbox.min.css"] [unique_id "amsYaSu9kg7rpQXVfCIGHQAAAAY"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:58.302629 2026] [security2:error] [pid 2707028:tid 2707028] [client 110.249.201.201:14972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/font-icons/flaticon.css"] [unique_id "amsYatmaJH1bf1jjmZ8jOAAAADE"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:24:58.415133 2026] [ssl:error] [pid 2715771:tid 2715771] (EAI 2)Name or service not known: [client 144.76.19.72:22298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:58.415162 2026] [ssl:error] [pid 2715771:tid 2715771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:58.467032 2026] [ssl:error] [pid 2709874:tid 2709874] (EAI 2)Name or service not known: [client 144.76.19.72:22300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:24:58.467060 2026] [ssl:error] [pid 2709874:tid 2709874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:24:59.547988 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:43093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:24:59.942947 2026] [security2:error] [pid 2716177:tid 2716177] [client 110.249.201.142:16850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/js/jquery/jquery.min.js"] [unique_id "amsYayV4IJU849XZuM1LmgAAAAI"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:00.753945 2026] [security2:error] [pid 2705113:tid 2705113] [client 110.249.201.84:13652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/js/jquery/jquery-migrate.min.js"] [unique_id "amsYbPfH3Rr0Mm1at1zMvwAAABY"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:00.756274 2026] [ssl:error] [pid 2699687:tid 2699687] (70014)End of file found: [client 216.73.216.199:9203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:01.022750 2026] [authz_core:error] [pid 2709874:tid 2709874] [client 66.249.66.34:35165] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:25:01.025421 2026] [authz_core:error] [pid 2709874:tid 2709874] [client 66.249.66.34:35165] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:25:01.404272 2026] [security2:error] [pid 2709755:tid 2709755] [client 110.249.201.176:65052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/uploads/logo.png"] [unique_id "amsYbTmkx-YL0RRdgidpjgAAACk"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:01.523096 2026] [ssl:error] [pid 2713608:tid 2713608] (EAI 2)Name or service not known: [client 144.76.19.72:40230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:01.523123 2026] [ssl:error] [pid 2713608:tid 2713608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:01.579302 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:40246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:01.579335 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:02.020224 2026] [security2:error] [pid 2711028:tid 2711028] [client 110.249.201.102:31500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/uploads/left-quote-purple.png"] [unique_id "amsYbqHvicbwoC-uQPxIdgAAAAc"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:03.044535 2026] [security2:error] [pid 2692034:tid 2692034] [client 176.28.149.76:26738] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYbyu9kg7rpQXVfCIGHgAAAAY"]
[Thu Jul 30 10:25:03.044583 2026] [security2:error] [pid 2692034:tid 2692034] [client 176.28.149.76:26738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYbyu9kg7rpQXVfCIGHgAAAAY"]
[Thu Jul 30 10:25:03.044855 2026] [security2:error] [pid 2692034:tid 2692034] [client 176.28.149.76:26738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYbyu9kg7rpQXVfCIGHgAAAAY"]
[Thu Jul 30 10:25:04.369699 2026] [security2:error] [pid 2710953:tid 2710953] [client 216.73.216.199:17667] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/czech/errmsg.sys"] [unique_id "amsYcEzrPGbl-2QUcjlvywAAAAE"]
[Thu Jul 30 10:25:04.369950 2026] [security2:error] [pid 2710953:tid 2710953] [client 216.73.216.199:17667] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/czech/errmsg.sys"] [unique_id "amsYcEzrPGbl-2QUcjlvywAAAAE"]
[Thu Jul 30 10:25:04.370185 2026] [security2:error] [pid 2710953:tid 2710953] [client 216.73.216.199:17667] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/czech/errmsg.sys"] [unique_id "amsYcEzrPGbl-2QUcjlvywAAAAE"]
[Thu Jul 30 10:25:04.605583 2026] [security2:error] [pid 2713927:tid 2713927] [client 110.249.201.100:46834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/uploads/right-quote-purple.png"] [unique_id "amsYcIOTpt1JNGUXz6z3PQAAAC4"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:04.634988 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:40252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:04.635015 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:04.659313 2026] [security2:error] [pid 2715620:tid 2715620] [client 110.249.201.74:14800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/js/dist/i18n.min.js"] [unique_id "amsYcMSSJB99tPj4H7tTtAAAAAQ"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:04.690874 2026] [ssl:error] [pid 2702172:tid 2702172] (EAI 2)Name or service not known: [client 144.76.19.72:40256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:04.690905 2026] [ssl:error] [pid 2702172:tid 2702172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:04.720566 2026] [security2:error] [pid 2713568:tid 2713568] [client 110.249.201.88:61930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/js/dist/hooks.min.js"] [unique_id "amsYcJOOrwTTZPYnwaKZwQAAAA8"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:04.850520 2026] [security2:error] [pid 2713924:tid 2713924] [client 110.249.201.145:19098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/contact-form-7/includes/js/index.js"] [unique_id "amsYcAPKvbAI5eCHWBJu_AAAACs"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:05.167387 2026] [security2:error] [pid 2709832:tid 2709832] [client 110.249.201.94:61350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/contact-form-7/includes/swv/js/index.js"] [unique_id "amsYcTCRe4lN2za3oFaV0wAAADQ"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:05.274332 2026] [security2:error] [pid 2715773:tid 2715773] [client 147.235.223.185:33474] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYcS434usLfyVYtTj9aAAAABA"]
[Thu Jul 30 10:25:05.274393 2026] [security2:error] [pid 2715773:tid 2715773] [client 147.235.223.185:33474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYcS434usLfyVYtTj9aAAAABA"]
[Thu Jul 30 10:25:05.274649 2026] [security2:error] [pid 2715773:tid 2715773] [client 147.235.223.185:33474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYcS434usLfyVYtTj9aAAAABA"]
[Thu Jul 30 10:25:05.996354 2026] [security2:error] [pid 2716177:tid 2716177] [client 110.249.201.89:12700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/js/jquery.countdown.js"] [unique_id "amsYcSV4IJU849XZuM1LmwAAAAI"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:06.822574 2026] [cgi:error] [pid 2715662:tid 2715662] [client 74.248.16.8:47105] AH02812: stderr from /home/hatchw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:25:07.070736 2026] [lsapi:warn] [pid 2702172:tid 2702172] [client 87.201.112.222:58746] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:25:07.744589 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:40264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:07.744632 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:07.802254 2026] [ssl:error] [pid 2715663:tid 2715663] (EAI 2)Name or service not known: [client 144.76.19.72:40272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:07.802290 2026] [ssl:error] [pid 2715663:tid 2715663] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:09.150785 2026] [security2:error] [pid 2713931:tid 2713931] [client 110.249.201.91:48844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/js/countUp.min.js"] [unique_id "amsYdbmwEr8-9VCs4FjYugAAADU"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:09.292170 2026] [security2:error] [pid 2713927:tid 2713927] [client 105.117.21.46:23687] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYdYOTpt1JNGUXz6z3PgAAAC4"]
[Thu Jul 30 10:25:09.292214 2026] [security2:error] [pid 2713927:tid 2713927] [client 105.117.21.46:23687] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYdYOTpt1JNGUXz6z3PgAAAC4"]
[Thu Jul 30 10:25:09.292461 2026] [security2:error] [pid 2713927:tid 2713927] [client 105.117.21.46:23687] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYdYOTpt1JNGUXz6z3PgAAAC4"]
[Thu Jul 30 10:25:09.302533 2026] [security2:error] [pid 2713609:tid 2713609] [client 216.73.216.199:44100] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/chinese/errmsg.sys"] [unique_id "amsYdbPEOVV8OrEqv9r6FwAAABM"]
[Thu Jul 30 10:25:09.302786 2026] [security2:error] [pid 2713609:tid 2713609] [client 216.73.216.199:44100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/chinese/errmsg.sys"] [unique_id "amsYdbPEOVV8OrEqv9r6FwAAABM"]
[Thu Jul 30 10:25:09.302991 2026] [security2:error] [pid 2713609:tid 2713609] [client 216.73.216.199:44100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/chinese/errmsg.sys"] [unique_id "amsYdbPEOVV8OrEqv9r6FwAAABM"]
[Thu Jul 30 10:25:09.669862 2026] [security2:error] [pid 2713929:tid 2713929] [client 110.249.201.183:25980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/js/owl.carousel.min.js"] [unique_id "amsYdULr0RYD8cMBPjOTjgAAADA"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:10.009939 2026] [security2:error] [pid 2715620:tid 2715620] [client 110.249.201.119:40120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/enfant-theme-extension/shortcodes/assets/js/shortcodes.js"] [unique_id "amsYdsSSJB99tPj4H7tTtQAAAAQ"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:10.326268 2026] [security2:error] [pid 2713568:tid 2713568] [client 110.249.201.133:37714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/js/bootstrap.min.js"] [unique_id "amsYdpOOrwTTZPYnwaKZwgAAAA8"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:10.361883 2026] [security2:error] [pid 2713924:tid 2713924] [client 110.249.201.197:22964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/js/enfant-navigation.js"] [unique_id "amsYdgPKvbAI5eCHWBJu_gAAACs"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:10.608711 2026] [ssl:error] [pid 2713609:tid 2713609] (70014)End of file found: [client 216.73.216.199:44100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:10.872478 2026] [ssl:error] [pid 2709832:tid 2709832] (EAI 2)Name or service not known: [client 144.76.19.72:20336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:10.872506 2026] [ssl:error] [pid 2709832:tid 2709832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:10.927036 2026] [ssl:error] [pid 2716177:tid 2716177] (EAI 2)Name or service not known: [client 144.76.19.72:20338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:10.927087 2026] [ssl:error] [pid 2716177:tid 2716177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:10.975207 2026] [core:error] [pid 2709792:tid 2709792] [client 66.249.64.172:48834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:10.975231 2026] [core:error] [pid 2709792:tid 2709792] [client 66.249.64.172:48834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:11.142280 2026] [security2:error] [pid 2702172:tid 2702172] [client 110.249.201.229:55092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/js/inview.min.js"] [unique_id "amsYd7vXsxyBiTz6pjF74gAAACA"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:11.512433 2026] [ssl:error] [pid 2699687:tid 2699687] (70014)End of file found: [client 216.73.216.199:21825] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:11.538426 2026] [security2:error] [pid 2716962:tid 2716962] [client 43.166.244.251:47020] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "amsYd_Q7UZoEbXBlGDaNLQAAAAk"]
[Thu Jul 30 10:25:11.666133 2026] [security2:error] [pid 2709832:tid 2709832] [client 110.249.201.59:37998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/js/jquery.waypoints.min.js"] [unique_id "amsYdzCRe4lN2za3oFaV1QAAADQ"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:12.676315 2026] [security2:error] [pid 2710953:tid 2710953] [client 43.166.244.251:47560] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amsYeEzrPGbl-2QUcjlv0wAAAAE"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 10:25:13.320701 2026] [ssl:error] [pid 2716177:tid 2716177] (70014)End of file found: [client 216.73.216.199:57410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:13.340386 2026] [security2:error] [pid 2715773:tid 2715773] [client 110.249.201.23:23622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/js/underscore.min.js"] [unique_id "amsYeS434usLfyVYtTj9agAAABA"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:13.982558 2026] [ssl:error] [pid 2711404:tid 2711404] (EAI 2)Name or service not known: [client 144.76.19.72:20352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:13.982588 2026] [ssl:error] [pid 2711404:tid 2711404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:14.039801 2026] [ssl:error] [pid 2713883:tid 2713883] (EAI 2)Name or service not known: [client 144.76.19.72:20354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:14.039826 2026] [ssl:error] [pid 2713883:tid 2713883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:14.375239 2026] [security2:error] [pid 2716215:tid 2716215] [client 110.249.201.200:57718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/js/retina.min.js"] [unique_id "amsYepml1GfvTnmcS6L8qwAAAAU"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:15.074978 2026] [security2:error] [pid 2713882:tid 2713882] [client 43.157.150.69:56644] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-earth.com"] [uri "/"] [unique_id "amsYe1u_hiw_nknTu7U5hgAAACc"]
[Thu Jul 30 10:25:15.079486 2026] [security2:error] [pid 2709874:tid 2709874] [client 110.249.201.63:20620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/themes/enfant/js/enfant-general.js"] [unique_id "amsYe0Hzmlw82KlsY3J4-wAAAD4"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:15.530194 2026] [security2:error] [pid 2711405:tid 2711405] [client 110.249.201.201:57660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/contact-form-7/modules/recaptcha/index.js"] [unique_id "amsYe3FueT4F6XZhbm_4jAAAABU"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:15.904525 2026] [security2:error] [pid 2711404:tid 2711404] [client 110.249.201.74:21150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-includes/js/dist/vendor/wp-polyfill.min.js"] [unique_id "amsYe5fcpXcDYvja6pecEgAAABQ"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:16.033722 2026] [security2:error] [pid 2713924:tid 2713924] [client 110.249.201.211:38044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/js_composer/assets/lib/vendor/dist/skrollr/dist/skrollr.min.js"] [unique_id "amsYfAPKvbAI5eCHWBJu_wAAACs"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:16.338000 2026] [ssl:error] [pid 2713608:tid 2713608] (70014)End of file found: [client 216.73.216.199:39459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:16.764658 2026] [security2:error] [pid 2716316:tid 2716316] [client 110.249.201.166:31036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js"] [unique_id "amsYfHdfByIFeh7-5AIEPwAAABI"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:17.125279 2026] [ssl:error] [pid 2705979:tid 2705979] (EAI 2)Name or service not known: [client 144.76.19.72:20366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:17.125329 2026] [ssl:error] [pid 2705979:tid 2705979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:17.182588 2026] [ssl:error] [pid 2699687:tid 2699687] (EAI 2)Name or service not known: [client 144.76.19.72:20378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:17.182629 2026] [ssl:error] [pid 2699687:tid 2699687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:17.241209 2026] [ssl:error] [pid 2713609:tid 2713609] (70014)End of file found: [client 216.73.216.199:39017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:17.450172 2026] [security2:error] [pid 2715773:tid 2715773] [client 110.249.201.179:16274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/revslider/public/js/sr7.js"] [unique_id "amsYfS434usLfyVYtTj9awAAABA"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:17.544416 2026] [lsapi:warn] [pid 2713882:tid 2713882] [client 87.201.112.222:23213] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:25:19.051489 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:40959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:19.266966 2026] [security2:error] [pid 2699687:tid 2699687] [client 110.249.201.219:33454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/revslider/public/js/libs/tptools.js"] [unique_id "amsYf6ZYVkW9BqFPeF66dQAAABg"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:20.237979 2026] [ssl:error] [pid 2715771:tid 2715771] (EAI 2)Name or service not known: [client 144.76.19.72:52822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:20.238007 2026] [ssl:error] [pid 2715771:tid 2715771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:20.294812 2026] [ssl:error] [pid 2716177:tid 2716177] (EAI 2)Name or service not known: [client 144.76.19.72:52824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:20.294840 2026] [ssl:error] [pid 2716177:tid 2716177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:20.640353 2026] [security2:error] [pid 2709792:tid 2709792] [client 110.249.201.21:55202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/essential-grid/public/assets/js/esg.min.js"] [unique_id "amsYgBKajFqMGejAstq8AQAAABk"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:20.822093 2026] [security2:error] [pid 2709874:tid 2709874] [client 110.249.201.167:21028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/plugins/essential-grid/public/assets/js/esgbox.min.js"] [unique_id "amsYgEHzmlw82KlsY3J4_AAAAD4"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:20.993215 2026] [security2:error] [pid 2709832:tid 2709832] [client 110.249.201.115:56004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/wp-content/uploads/AdobeStock_215522547-1-1.jpg"] [unique_id "amsYgDCRe4lN2za3oFaV1wAAADQ"], referer: https://www.purple-childcare.co.uk/
[Thu Jul 30 10:25:23.151382 2026] [security2:error] [pid 2716316:tid 2716316] [client 170.106.179.68:43492] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.halmanninvestments.com"] [uri "/"] [unique_id "amsYg3dfByIFeh7-5AIEQAAAABI"]
[Thu Jul 30 10:25:23.351308 2026] [ssl:error] [pid 2715773:tid 2715773] (EAI 2)Name or service not known: [client 144.76.19.72:52838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:23.351341 2026] [ssl:error] [pid 2715773:tid 2715773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:23.408235 2026] [ssl:error] [pid 2699687:tid 2699687] (EAI 2)Name or service not known: [client 144.76.19.72:52854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:23.408263 2026] [ssl:error] [pid 2699687:tid 2699687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:23.478083 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:19105] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:26.295682 2026] [security2:error] [pid 2715735:tid 2715735] [client 216.73.216.199:47648] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/georgian/errmsg.sys"] [unique_id "amsYhubZn9WRuyQf__goJAAAAA0"]
[Thu Jul 30 10:25:26.295972 2026] [security2:error] [pid 2715735:tid 2715735] [client 216.73.216.199:47648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/georgian/errmsg.sys"] [unique_id "amsYhubZn9WRuyQf__goJAAAAA0"]
[Thu Jul 30 10:25:26.296185 2026] [security2:error] [pid 2715735:tid 2715735] [client 216.73.216.199:47648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/georgian/errmsg.sys"] [unique_id "amsYhubZn9WRuyQf__goJAAAAA0"]
[Thu Jul 30 10:25:26.462764 2026] [ssl:error] [pid 2716215:tid 2716215] (EAI 2)Name or service not known: [client 144.76.19.72:52866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:26.462800 2026] [ssl:error] [pid 2716215:tid 2716215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:26.519276 2026] [ssl:error] [pid 2716892:tid 2716892] (EAI 2)Name or service not known: [client 144.76.19.72:52880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:26.519309 2026] [ssl:error] [pid 2716892:tid 2716892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:29.006150 2026] [ssl:error] [pid 2715735:tid 2715735] (70014)End of file found: [client 216.73.216.199:47648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:29.189324 2026] [lsapi:warn] [pid 2692034:tid 2692034] [client 87.201.112.222:23218] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:25:29.572882 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:27778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:29.572912 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:29.624368 2026] [ssl:error] [pid 2707029:tid 2707029] (EAI 2)Name or service not known: [client 144.76.19.72:27780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:29.624392 2026] [ssl:error] [pid 2707029:tid 2707029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:29.958840 2026] [security2:error] [pid 2709874:tid 2709874] [client 85.208.96.201:41692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/robots.txt"] [unique_id "amsYiUHzmlw82KlsY3J4_wAAAD4"]
[Thu Jul 30 10:25:30.811964 2026] [ssl:error] [pid 2711028:tid 2711028] (70014)End of file found: [client 216.73.216.199:18862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:32.680237 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:27782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:32.680284 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:32.740642 2026] [ssl:error] [pid 2707029:tid 2707029] (EAI 2)Name or service not known: [client 144.76.19.72:27784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:32.740675 2026] [ssl:error] [pid 2707029:tid 2707029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:32.925416 2026] [authz_core:error] [pid 2709874:tid 2709874] [client 66.249.66.33:63372] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:25:32.928060 2026] [authz_core:error] [pid 2709874:tid 2709874] [client 66.249.66.33:63372] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:25:33.230331 2026] [core:error] [pid 2709755:tid 2709755] [client 66.249.66.3:39811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:33.230366 2026] [core:error] [pid 2709755:tid 2709755] [client 66.249.66.3:39811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:33.237290 2026] [core:error] [pid 2715773:tid 2715773] [client 66.249.66.4:50853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:33.237312 2026] [core:error] [pid 2715773:tid 2715773] [client 66.249.66.4:50853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:33.525261 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:1058] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS3/close_delay
[Thu Jul 30 10:25:33.619641 2026] [security2:error] [pid 2709792:tid 2709792] [client 185.191.171.9:15272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6466.0/prev_next,prev.html"] [unique_id "amsYjRKajFqMGejAstq8BAAAABk"]
[Thu Jul 30 10:25:35.631881 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:1058] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/hungarian/errmsg.sys"] [unique_id "amsYjyu9kg7rpQXVfCIGMwAAAAY"]
[Thu Jul 30 10:25:35.632182 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:1058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/hungarian/errmsg.sys"] [unique_id "amsYjyu9kg7rpQXVfCIGMwAAAAY"]
[Thu Jul 30 10:25:35.632408 2026] [security2:error] [pid 2692034:tid 2692034] [client 216.73.216.199:1058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/hungarian/errmsg.sys"] [unique_id "amsYjyu9kg7rpQXVfCIGMwAAAAY"]
[Thu Jul 30 10:25:35.798502 2026] [ssl:error] [pid 2716892:tid 2716892] (EAI 2)Name or service not known: [client 144.76.19.72:27790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:35.798533 2026] [ssl:error] [pid 2716892:tid 2716892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:35.860563 2026] [ssl:error] [pid 2715662:tid 2715662] (EAI 2)Name or service not known: [client 144.76.19.72:27806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:35.860611 2026] [ssl:error] [pid 2715662:tid 2715662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:36.535301 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:1058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:36.691556 2026] [lsapi:warn] [pid 2715735:tid 2715735] [client 162.0.217.83:0] [host mail.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:25:38.117743 2026] [lsapi:warn] [pid 2716892:tid 2716892] [client 87.201.112.222:23201] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:25:38.577554 2026] [security2:error] [pid 2707028:tid 2707028] [client 198.244.240.237:36130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/tag/mobile-phone/"] [unique_id "amsYktmaJH1bf1jjmZ8jPwAAADE"]
[Thu Jul 30 10:25:38.918558 2026] [ssl:error] [pid 2716316:tid 2716316] (EAI 2)Name or service not known: [client 144.76.19.72:27810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:38.918606 2026] [ssl:error] [pid 2716316:tid 2716316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:38.999879 2026] [ssl:error] [pid 2715735:tid 2715735] (EAI 2)Name or service not known: [client 144.76.19.72:27814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:38.999920 2026] [ssl:error] [pid 2715735:tid 2715735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:39.436118 2026] [security2:error] [pid 2711405:tid 2711405] [client 216.73.216.199:52525] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/japanese/errmsg.sys"] [unique_id "amsYk3FueT4F6XZhbm_4mgAAABU"]
[Thu Jul 30 10:25:39.436401 2026] [security2:error] [pid 2711405:tid 2711405] [client 216.73.216.199:52525] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/japanese/errmsg.sys"] [unique_id "amsYk3FueT4F6XZhbm_4mgAAABU"]
[Thu Jul 30 10:25:39.436648 2026] [security2:error] [pid 2711405:tid 2711405] [client 216.73.216.199:52525] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/japanese/errmsg.sys"] [unique_id "amsYk3FueT4F6XZhbm_4mgAAABU"]
[Thu Jul 30 10:25:40.041502 2026] [ssl:error] [pid 2711405:tid 2711405] (70014)End of file found: [client 216.73.216.199:52525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:40.759894 2026] [authz_core:error] [pid 2716316:tid 2716316] [client 35.187.31.229:42826] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:25:40.762579 2026] [authz_core:error] [pid 2716316:tid 2716316] [client 35.187.31.229:42826] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:25:41.272420 2026] [cgi:error] [pid 2713931:tid 2713931] [client 216.73.216.199:26143] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/perl5/Config_git.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:25:41.272496 2026] [cgi:error] [pid 2713931:tid 2713931] [client 216.73.216.199:26143] End of script output before headers: Config_git.pl
[Thu Jul 30 10:25:42.055346 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:39838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:42.055377 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:42.109759 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:39854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:42.109790 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:42.151996 2026] [security2:error] [pid 2715771:tid 2715771] [client 216.73.216.199:27763] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/estonian/errmsg.sys"] [unique_id "amsYlojz8oX2FtbAoFsjDwAAAA4"]
[Thu Jul 30 10:25:42.152311 2026] [security2:error] [pid 2715771:tid 2715771] [client 216.73.216.199:27763] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/estonian/errmsg.sys"] [unique_id "amsYlojz8oX2FtbAoFsjDwAAAA4"]
[Thu Jul 30 10:25:42.152560 2026] [security2:error] [pid 2715771:tid 2715771] [client 216.73.216.199:27763] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/estonian/errmsg.sys"] [unique_id "amsYlojz8oX2FtbAoFsjDwAAAA4"]
[Thu Jul 30 10:25:44.264298 2026] [core:error] [pid 2715771:tid 2715771] (13)Permission denied: [client 216.73.216.199:27763] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS1/flags
[Thu Jul 30 10:25:45.014198 2026] [ssl:error] [pid 2715771:tid 2715771] (70014)End of file found: [client 216.73.216.199:27763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:45.190914 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:39870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:45.190949 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:45.245257 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:39880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:45.245283 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:46.077699 2026] [ssl:error] [pid 2713568:tid 2713568] (70014)End of file found: [client 216.73.216.199:35929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:48.297840 2026] [ssl:error] [pid 2713609:tid 2713609] (EAI 2)Name or service not known: [client 144.76.19.72:39890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:48.297874 2026] [ssl:error] [pid 2713609:tid 2713609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:48.354063 2026] [ssl:error] [pid 2707029:tid 2707029] (EAI 2)Name or service not known: [client 144.76.19.72:39902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:48.354103 2026] [ssl:error] [pid 2707029:tid 2707029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:48.499982 2026] [ssl:error] [pid 2717843:tid 2717843] (70014)End of file found: [client 216.73.216.199:57434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:48.667867 2026] [lsapi:warn] [pid 2716316:tid 2716316] [client 87.201.112.222:23192] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:25:48.988469 2026] [security2:error] [pid 2718105:tid 2718105] [client 85.208.96.201:13134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/consumer-council-spam-calls"] [unique_id "amsYnClPWGobzP1X5sIxrgAAABk"]
[Thu Jul 30 10:25:49.062718 2026] [security2:error] [pid 2718107:tid 2718107] [client 43.166.226.186:43744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-london.com"] [uri "/"] [unique_id "amsYnXhmvVibq0qz3a3lYwAAABs"]
[Thu Jul 30 10:25:50.084886 2026] [security2:error] [pid 2713609:tid 2713609] [client 43.166.226.186:34216] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsYnrPEOVV8OrEqv9r6IwAAABM"], referer: http://www.kinesiology-london.com
[Thu Jul 30 10:25:50.086723 2026] [authz_core:error] [pid 2713609:tid 2713609] [client 43.166.226.186:34216] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-london.com
[Thu Jul 30 10:25:50.089405 2026] [authz_core:error] [pid 2713609:tid 2713609] [client 43.166.226.186:34216] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-london.com
[Thu Jul 30 10:25:51.407633 2026] [ssl:error] [pid 2718107:tid 2718107] (EAI 2)Name or service not known: [client 144.76.19.72:30334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:51.407666 2026] [ssl:error] [pid 2718107:tid 2718107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:51.505606 2026] [ssl:error] [pid 2711028:tid 2711028] (EAI 2)Name or service not known: [client 144.76.19.72:30344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:51.505631 2026] [ssl:error] [pid 2711028:tid 2711028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:51.834321 2026] [ssl:error] [pid 2707029:tid 2707029] (70014)End of file found: [client 216.73.216.199:51862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:52.113323 2026] [core:error] [pid 2716892:tid 2716892] [client 66.249.64.171:56632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:52.113353 2026] [core:error] [pid 2716892:tid 2716892] [client 66.249.64.171:56632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:25:52.738823 2026] [ssl:error] [pid 2716215:tid 2716215] (70014)End of file found: [client 216.73.216.199:59515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:53.367261 2026] [security2:error] [pid 2713929:tid 2713929] [client 43.228.157.102:41246] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsYoULr0RYD8cMBPjOT-wAAADA"]
[Thu Jul 30 10:25:53.367487 2026] [security2:error] [pid 2713929:tid 2713929] [client 43.228.157.102:41246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsYoULr0RYD8cMBPjOT-wAAADA"]
[Thu Jul 30 10:25:53.367707 2026] [security2:error] [pid 2713929:tid 2713929] [client 43.228.157.102:41246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsYoULr0RYD8cMBPjOT-wAAADA"]
[Thu Jul 30 10:25:53.795196 2026] [security2:error] [pid 2708019:tid 2708019] [client 74.7.241.1:51732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.static1.alism.com"] [uri "/"] [unique_id "amsYoRVjibqdChz1IjbbbAAAAB4"]
[Thu Jul 30 10:25:54.558790 2026] [ssl:error] [pid 2713609:tid 2713609] (EAI 2)Name or service not known: [client 144.76.19.72:30348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:54.558815 2026] [ssl:error] [pid 2713609:tid 2713609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:54.610006 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:30352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:54.610032 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:54.847962 2026] [ssl:error] [pid 2715620:tid 2715620] (70014)End of file found: [client 216.73.216.199:15130] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:55.661171 2026] [security2:error] [pid 2708019:tid 2708019] [client 43.153.85.46:39292] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mjs-services.com"] [uri "/"] [unique_id "amsYoxVjibqdChz1IjbbbQAAAB4"]
[Thu Jul 30 10:25:57.087562 2026] [security2:error] [pid 2718106:tid 2718106] [client 43.153.85.46:35704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mjs-services.com"] [uri "/"] [unique_id "amsYpa4A5E0krOAoWFX8oAAAABo"], referer: http://mjs-services.com
[Thu Jul 30 10:25:57.665476 2026] [ssl:error] [pid 2705113:tid 2705113] (EAI 2)Name or service not known: [client 144.76.19.72:30368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:57.665507 2026] [ssl:error] [pid 2705113:tid 2705113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:57.717216 2026] [ssl:error] [pid 2716177:tid 2716177] (EAI 2)Name or service not known: [client 144.76.19.72:30372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:25:57.717240 2026] [ssl:error] [pid 2716177:tid 2716177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:25:58.161888 2026] [ssl:error] [pid 2717463:tid 2717463] (70014)End of file found: [client 216.73.216.199:52547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:58.668514 2026] [ssl:error] [pid 2718106:tid 2718106] (70014)End of file found: [client 216.73.216.199:1071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:25:58.929731 2026] [security2:error] [pid 2709832:tid 2709832] [client 18.207.89.138:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/js/spacer.gif"] [unique_id "amsYpjCRe4lN2za3oFaV6wAAADQ"]
[Thu Jul 30 10:25:59.052671 2026] [lsapi:warn] [pid 2718661:tid 2718661] [client 87.201.112.222:44885] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:26:00.774885 2026] [ssl:error] [pid 2716892:tid 2716892] (EAI 2)Name or service not known: [client 144.76.19.72:22662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:00.774935 2026] [ssl:error] [pid 2716892:tid 2716892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:00.832677 2026] [ssl:error] [pid 2716215:tid 2716215] (EAI 2)Name or service not known: [client 144.76.19.72:22666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:00.832717 2026] [ssl:error] [pid 2716215:tid 2716215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:01.566733 2026] [security2:error] [pid 2715620:tid 2715620] [client 43.130.32.245:58456] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "butteredcat.com"] [uri "/wp/"] [unique_id "amsYqcSSJB99tPj4H7tTwAAAAAQ"]
[Thu Jul 30 10:26:03.153909 2026] [security2:error] [pid 2716177:tid 2716177] [client 43.163.206.70:52744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amsYqyV4IJU849XZuM1LyAAAAAI"]
[Thu Jul 30 10:26:03.427801 2026] [core:error] [pid 2716892:tid 2716892] [client 66.249.64.170:56722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:03.427826 2026] [core:error] [pid 2716892:tid 2716892] [client 66.249.64.170:56722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:03.886009 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:22678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:03.886045 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:03.942093 2026] [ssl:error] [pid 2713609:tid 2713609] (EAI 2)Name or service not known: [client 144.76.19.72:22686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:03.942120 2026] [ssl:error] [pid 2713609:tid 2713609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:05.603141 2026] [security2:error] [pid 2713929:tid 2713929] [client 39.49.210.249:46908] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYrULr0RYD8cMBPjOT_QAAADA"]
[Thu Jul 30 10:26:05.603193 2026] [security2:error] [pid 2713929:tid 2713929] [client 39.49.210.249:46908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYrULr0RYD8cMBPjOT_QAAADA"]
[Thu Jul 30 10:26:05.603436 2026] [security2:error] [pid 2713929:tid 2713929] [client 39.49.210.249:46908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYrULr0RYD8cMBPjOT_QAAADA"]
[Thu Jul 30 10:26:06.297693 2026] [core:error] [pid 2718053:tid 2718053] (13)Permission denied: [client 216.73.216.199:25113] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/free_calls
[Thu Jul 30 10:26:06.900263 2026] [ssl:error] [pid 2718053:tid 2718053] (70014)End of file found: [client 216.73.216.199:25113] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:07.001220 2026] [ssl:error] [pid 2716316:tid 2716316] (EAI 2)Name or service not known: [client 144.76.19.72:22702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:07.001267 2026] [ssl:error] [pid 2716316:tid 2716316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:07.055809 2026] [ssl:error] [pid 2709755:tid 2709755] (EAI 2)Name or service not known: [client 144.76.19.72:22706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:07.055842 2026] [ssl:error] [pid 2709755:tid 2709755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:08.029846 2026] [security2:error] [pid 2708019:tid 2708019] [client 109.161.142.216:58640] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYsBVjibqdChz1IjbbcAAAAB4"]
[Thu Jul 30 10:26:08.029902 2026] [security2:error] [pid 2708019:tid 2708019] [client 109.161.142.216:58640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYsBVjibqdChz1IjbbcAAAAB4"]
[Thu Jul 30 10:26:08.030205 2026] [security2:error] [pid 2708019:tid 2708019] [client 109.161.142.216:58640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYsBVjibqdChz1IjbbcAAAAB4"]
[Thu Jul 30 10:26:10.114422 2026] [ssl:error] [pid 2716215:tid 2716215] (EAI 2)Name or service not known: [client 144.76.19.72:50570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:10.114450 2026] [ssl:error] [pid 2716215:tid 2716215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:10.168781 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:50576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:10.168810 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:10.728772 2026] [lsapi:warn] [pid 2716316:tid 2716316] [client 87.201.112.222:58636] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:26:10.956804 2026] [ssl:error] [pid 2717463:tid 2717463] (70014)End of file found: [client 216.73.216.199:13441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:11.559200 2026] [ssl:error] [pid 2719084:tid 2719084] (70014)End of file found: [client 216.73.216.199:20032] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:11.579297 2026] [security2:error] [pid 2705113:tid 2705113] [client 128.65.39.50:49220] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYs_fH3Rr0Mm1at1zNNAAAABY"]
[Thu Jul 30 10:26:11.579352 2026] [security2:error] [pid 2705113:tid 2705113] [client 128.65.39.50:49220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsYs_fH3Rr0Mm1at1zNNAAAABY"]
[Thu Jul 30 10:26:11.579571 2026] [security2:error] [pid 2705113:tid 2705113] [client 128.65.39.50:49220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsYs_fH3Rr0Mm1at1zNNAAAABY"]
[Thu Jul 30 10:26:11.637315 2026] [core:error] [pid 2719085:tid 2719085] [client 66.249.64.170:41248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:11.637358 2026] [core:error] [pid 2719085:tid 2719085] [client 66.249.64.170:41248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:12.963850 2026] [core:error] [pid 2709871:tid 2709871] (13)Permission denied: [client 216.73.216.199:18273] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/ctor
[Thu Jul 30 10:26:13.222347 2026] [ssl:error] [pid 2719085:tid 2719085] (EAI 2)Name or service not known: [client 144.76.19.72:50584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:13.222384 2026] [ssl:error] [pid 2719085:tid 2719085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:13.274395 2026] [ssl:error] [pid 2716316:tid 2716316] (EAI 2)Name or service not known: [client 144.76.19.72:50600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:13.274425 2026] [ssl:error] [pid 2716316:tid 2716316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:13.478457 2026] [security2:error] [pid 2718053:tid 2718053] [client 114.119.142.20:43443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1598742000/request_format~html/cat_ids~15"] [unique_id "amsYtaKzzCsj0dlFb7BQ9AAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E30-8-2020
[Thu Jul 30 10:26:14.507490 2026] [security2:error] [pid 2713927:tid 2713927] [client 114.119.142.20:43451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1598742000/request_format~html/cat_ids~15"] [unique_id "amsYtoOTpt1JNGUXz6z3SgAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E30-8-2020
[Thu Jul 30 10:26:14.977523 2026] [authz_core:error] [pid 2715735:tid 2715735] [client 66.249.66.34:50174] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:26:14.980224 2026] [authz_core:error] [pid 2715735:tid 2715735] [client 66.249.66.34:50174] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:26:15.073204 2026] [core:error] [pid 2709871:tid 2709871] (13)Permission denied: [client 216.73.216.199:18273] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP/remote_node_defrag_ratio
[Thu Jul 30 10:26:15.372532 2026] [core:error] [pid 2709871:tid 2709871] (13)Permission denied: [client 216.73.216.199:18273] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-128/total_objects
[Thu Jul 30 10:26:15.674105 2026] [ssl:error] [pid 2709871:tid 2709871] (70014)End of file found: [client 216.73.216.199:18273] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:16.406879 2026] [ssl:error] [pid 2718107:tid 2718107] (EAI 2)Name or service not known: [client 144.76.19.72:50610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:16.406922 2026] [ssl:error] [pid 2718107:tid 2718107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:16.458301 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:50624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:16.458334 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:19.510498 2026] [ssl:error] [pid 2716215:tid 2716215] (EAI 2)Name or service not known: [client 144.76.19.72:50628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:19.510536 2026] [ssl:error] [pid 2716215:tid 2716215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:19.562162 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:32248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:19.562198 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:19.590866 2026] [ssl:error] [pid 2718108:tid 2718108] (70014)End of file found: [client 216.73.216.199:34708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:20.058666 2026] [core:error] [pid 2717999:tid 2717999] [client 66.249.64.170:63868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:20.058693 2026] [core:error] [pid 2717999:tid 2717999] [client 66.249.64.170:63868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:20.190731 2026] [core:crit] [pid 2717463:tid 2717463] (13)Permission denied: [client 216.73.216.199:34270] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/boot/loader/entries/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/boot/loader/entries/' is executable
[Thu Jul 30 10:26:20.247674 2026] [lsapi:warn] [pid 2718106:tid 2718106] [client 87.201.112.222:23214] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:26:20.878241 2026] [security2:error] [pid 2710953:tid 2710953] [client 74.7.243.231:42942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amsYvEzrPGbl-2QUcjlv5QAAAAE"]
[Thu Jul 30 10:26:21.380553 2026] [security2:error] [pid 2716215:tid 2716215] [client 185.191.171.9:17792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8959.0.html"] [unique_id "amsYvZml1GfvTnmcS6L8uwAAAAU"]
[Thu Jul 30 10:26:22.615761 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:32272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:22.615797 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:22.671512 2026] [ssl:error] [pid 2718106:tid 2718106] (EAI 2)Name or service not known: [client 144.76.19.72:32280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:22.671545 2026] [ssl:error] [pid 2718106:tid 2718106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:23.198349 2026] [ssl:error] [pid 2718107:tid 2718107] (70014)End of file found: [client 216.73.216.199:3287] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:25.608328 2026] [ssl:error] [pid 2717463:tid 2717463] (70014)End of file found: [client 216.73.216.199:34270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:25.726861 2026] [ssl:error] [pid 2713609:tid 2713609] (EAI 2)Name or service not known: [client 144.76.19.72:32308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:25.726887 2026] [ssl:error] [pid 2713609:tid 2713609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:25.781039 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:32310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:25.781086 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:26.812276 2026] [core:error] [pid 2716215:tid 2716215] (13)Permission denied: [client 216.73.216.199:49641] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/psmouse/uevent
[Thu Jul 30 10:26:27.113875 2026] [ssl:error] [pid 2716215:tid 2716215] (70014)End of file found: [client 216.73.216.199:49641] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:28.834366 2026] [ssl:error] [pid 2717843:tid 2717843] (EAI 2)Name or service not known: [client 144.76.19.72:32328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:28.834396 2026] [ssl:error] [pid 2717843:tid 2717843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:28.889405 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:32338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:28.889430 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:30.428928 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:20401] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/cpu_slabs
[Thu Jul 30 10:26:30.729888 2026] [core:error] [pid 2692034:tid 2692034] (13)Permission denied: [client 216.73.216.199:20401] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/cache_dma
[Thu Jul 30 10:26:30.964152 2026] [lsapi:warn] [pid 2718107:tid 2718107] [client 87.201.112.222:23210] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:26:31.947113 2026] [core:error] [pid 2713609:tid 2713609] [client 66.249.64.170:40759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:31.947136 2026] [core:error] [pid 2713609:tid 2713609] [client 66.249.64.170:40759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:26:31.949266 2026] [ssl:error] [pid 2719603:tid 2719603] (EAI 2)Name or service not known: [client 144.76.19.72:63024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:31.949304 2026] [ssl:error] [pid 2719603:tid 2719603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:32.004497 2026] [ssl:error] [pid 2719604:tid 2719604] (EAI 2)Name or service not known: [client 144.76.19.72:63028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:32.004535 2026] [ssl:error] [pid 2719604:tid 2719604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:32.536417 2026] [ssl:error] [pid 2692034:tid 2692034] (70014)End of file found: [client 216.73.216.199:20401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:33.038505 2026] [ssl:error] [pid 2718107:tid 2718107] (70014)End of file found: [client 216.73.216.199:61864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:33.329530 2026] [ssl:error] [pid 2713929:tid 2713929] (70014)End of file found: [client 216.73.216.199:15093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:35.061628 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:63032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:35.061663 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:35.114398 2026] [ssl:error] [pid 2713609:tid 2713609] (EAI 2)Name or service not known: [client 144.76.19.72:63042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:35.114421 2026] [ssl:error] [pid 2713609:tid 2713609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:35.203964 2026] [security2:error] [pid 2715773:tid 2715773] [client 146.190.242.161:54432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.positivelydisruptive.co.uk"] [uri "/.env"] [unique_id "amsYyy434usLfyVYtTj9fQAAABA"]
[Thu Jul 30 10:26:35.204124 2026] [security2:error] [pid 2715773:tid 2715773] [client 146.190.242.161:54432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.positivelydisruptive.co.uk"] [uri "/.env"] [unique_id "amsYyy434usLfyVYtTj9fQAAABA"]
[Thu Jul 30 10:26:35.816721 2026] [security2:error] [pid 2715773:tid 2715773] [client 146.190.242.161:54432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.positivelydisruptive.co.uk"] [uri "/index.php"] [unique_id "amsYyy434usLfyVYtTj9fQAAABA"]
[Thu Jul 30 10:26:37.482487 2026] [authz_core:error] [pid 2719786:tid 2719786] [client 66.249.66.33:38768] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:26:37.485417 2026] [authz_core:error] [pid 2719786:tid 2719786] [client 66.249.66.33:38768] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:26:38.170586 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:63046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:38.170632 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:38.226510 2026] [ssl:error] [pid 2716316:tid 2716316] (EAI 2)Name or service not known: [client 144.76.19.72:63060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:38.226541 2026] [ssl:error] [pid 2716316:tid 2716316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:39.179145 2026] [security2:error] [pid 2719818:tid 2719818] [client 146.190.242.161:54454] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.positivelydisruptive.co.uk"] [uri "/.git/config"] [unique_id "amsYz1J3c6b0QBq-O9ysIQAAABg"]
[Thu Jul 30 10:26:39.179386 2026] [security2:error] [pid 2719818:tid 2719818] [client 146.190.242.161:54454] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.positivelydisruptive.co.uk"] [uri "/.git/config"] [unique_id "amsYz1J3c6b0QBq-O9ysIQAAABg"]
[Thu Jul 30 10:26:39.805258 2026] [security2:error] [pid 2719818:tid 2719818] [client 146.190.242.161:54454] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.positivelydisruptive.co.uk"] [uri "/index.php"] [unique_id "amsYz1J3c6b0QBq-O9ysIQAAABg"]
[Thu Jul 30 10:26:40.729552 2026] [security2:error] [pid 2717463:tid 2717463] [client 216.73.216.199:48575] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/wddx.ini"] [unique_id "amsY0H67pZfRnRaFXfSWDAAAAAk"]
[Thu Jul 30 10:26:40.729844 2026] [security2:error] [pid 2717463:tid 2717463] [client 216.73.216.199:48575] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/wddx.ini"] [unique_id "amsY0H67pZfRnRaFXfSWDAAAAAk"]
[Thu Jul 30 10:26:40.730064 2026] [security2:error] [pid 2717463:tid 2717463] [client 216.73.216.199:48575] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/wddx.ini"] [unique_id "amsY0H67pZfRnRaFXfSWDAAAAAk"]
[Thu Jul 30 10:26:41.285821 2026] [ssl:error] [pid 2719921:tid 2719921] (EAI 2)Name or service not known: [client 144.76.19.72:24384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:41.285863 2026] [ssl:error] [pid 2719921:tid 2719921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:41.312012 2026] [lsapi:warn] [pid 2707029:tid 2707029] [client 87.201.112.222:58689] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:26:41.349940 2026] [ssl:error] [pid 2719922:tid 2719922] (EAI 2)Name or service not known: [client 144.76.19.72:24396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:41.349976 2026] [ssl:error] [pid 2719922:tid 2719922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:44.116663 2026] [security2:error] [pid 2713931:tid 2713931] [client 51.68.107.150:31453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amsY1LmwEr8-9VCs4FjY1AAAADU"]
[Thu Jul 30 10:26:44.406817 2026] [ssl:error] [pid 2718054:tid 2718054] (EAI 2)Name or service not known: [client 144.76.19.72:24408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:44.406872 2026] [ssl:error] [pid 2718054:tid 2718054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:44.461721 2026] [ssl:error] [pid 2718661:tid 2718661] (EAI 2)Name or service not known: [client 144.76.19.72:24418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:44.461754 2026] [ssl:error] [pid 2718661:tid 2718661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:44.516172 2026] [core:error] [pid 2708019:tid 2708019] (13)Permission denied: [client 216.73.216.199:5847] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/object_size
[Thu Jul 30 10:26:44.815198 2026] [core:error] [pid 2708019:tid 2708019] (13)Permission denied: [client 216.73.216.199:5847] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/shadow
[Thu Jul 30 10:26:45.429013 2026] [ssl:error] [pid 2717463:tid 2717463] (70014)End of file found: [client 216.73.216.199:48575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:45.717915 2026] [core:error] [pid 2708019:tid 2708019] (13)Permission denied: [client 216.73.216.199:5847] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/slab_size
[Thu Jul 30 10:26:46.043792 2026] [ssl:error] [pid 2708019:tid 2708019] (70014)End of file found: [client 216.73.216.199:5847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:46.102749 2026] [authz_core:error] [pid 2715662:tid 2715662] [client 66.249.66.33:54124] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:26:46.105451 2026] [authz_core:error] [pid 2715662:tid 2715662] [client 66.249.66.33:54124] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:26:46.530860 2026] [ssl:error] [pid 2718054:tid 2718054] (70014)End of file found: [client 216.73.216.199:22347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:47.534914 2026] [ssl:error] [pid 2692034:tid 2692034] (EAI 2)Name or service not known: [client 144.76.19.72:24424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:47.534951 2026] [ssl:error] [pid 2692034:tid 2692034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:47.589219 2026] [ssl:error] [pid 2716215:tid 2716215] (EAI 2)Name or service not known: [client 144.76.19.72:24434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:47.589253 2026] [ssl:error] [pid 2716215:tid 2716215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:49.429743 2026] [security2:error] [pid 2707029:tid 2707029] [client 85.208.96.200:34868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/an-adventure-in-paris-analysis"] [unique_id "amsY2bk2pyVPSwCgPRBbWgAAADI"]
[Thu Jul 30 10:26:50.644532 2026] [ssl:error] [pid 2718053:tid 2718053] (EAI 2)Name or service not known: [client 144.76.19.72:32156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:50.644571 2026] [ssl:error] [pid 2718053:tid 2718053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:50.699610 2026] [ssl:error] [pid 2719603:tid 2719603] (EAI 2)Name or service not known: [client 144.76.19.72:32170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:50.699650 2026] [ssl:error] [pid 2719603:tid 2719603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:50.766377 2026] [ssl:error] [pid 2713568:tid 2713568] (70014)End of file found: [client 216.73.216.199:42370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:51.862204 2026] [lsapi:warn] [pid 2717463:tid 2717463] [client 87.201.112.222:23191] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:26:53.280016 2026] [security2:error] [pid 2716892:tid 2716892] [client 146.190.242.161:58720] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.positivelydisruptive.co.uk"] [uri "/trace.axd"] [unique_id "amsY3Z27BIPollNdRDVLagAAAAM"]
[Thu Jul 30 10:26:53.280251 2026] [security2:error] [pid 2716892:tid 2716892] [client 146.190.242.161:58720] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.positivelydisruptive.co.uk"] [uri "/trace.axd"] [unique_id "amsY3Z27BIPollNdRDVLagAAAAM"]
[Thu Jul 30 10:26:53.754909 2026] [ssl:error] [pid 2719603:tid 2719603] (EAI 2)Name or service not known: [client 144.76.19.72:32172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:53.754944 2026] [ssl:error] [pid 2719603:tid 2719603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:53.808264 2026] [ssl:error] [pid 2717463:tid 2717463] (EAI 2)Name or service not known: [client 144.76.19.72:32188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:53.808297 2026] [ssl:error] [pid 2717463:tid 2717463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:53.923698 2026] [security2:error] [pid 2716892:tid 2716892] [client 146.190.242.161:58720] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.positivelydisruptive.co.uk"] [uri "/index.php"] [unique_id "amsY3Z27BIPollNdRDVLagAAAAM"]
[Thu Jul 30 10:26:55.094043 2026] [ssl:error] [pid 2719921:tid 2719921] (70014)End of file found: [client 216.73.216.199:20659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:56.865004 2026] [ssl:error] [pid 2716215:tid 2716215] (EAI 2)Name or service not known: [client 144.76.19.72:32194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:56.865034 2026] [ssl:error] [pid 2716215:tid 2716215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:56.918451 2026] [ssl:error] [pid 2720090:tid 2720090] (EAI 2)Name or service not known: [client 144.76.19.72:32200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:56.918531 2026] [ssl:error] [pid 2720090:tid 2720090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:26:58.707941 2026] [ssl:error] [pid 2710953:tid 2710953] (70014)End of file found: [client 216.73.216.199:33758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:26:59.976273 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:49042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:26:59.976307 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:00.032026 2026] [ssl:error] [pid 2719604:tid 2719604] (EAI 2)Name or service not known: [client 144.76.19.72:49054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:00.032054 2026] [ssl:error] [pid 2719604:tid 2719604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:00.211812 2026] [core:error] [pid 2709755:tid 2709755] (13)Permission denied: [client 216.73.216.199:15239] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/slab_size
[Thu Jul 30 10:27:02.413679 2026] [lsapi:warn] [pid 2719817:tid 2719817] [client 87.201.112.222:44908] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:27:02.920736 2026] [core:error] [pid 2709755:tid 2709755] (13)Permission denied: [client 216.73.216.199:15239] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfnetlink/sections/__ksymtab_strings
[Thu Jul 30 10:27:03.091770 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:49060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:03.091797 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:03.149271 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:49062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:03.149304 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:03.162329 2026] [security2:error] [pid 2719786:tid 2719786] [client 43.153.35.128:49724] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.abc-dyslexia.com"] [uri "/"] [unique_id "amsY5xyHAkU-KB8bVQN51QAAABQ"]
[Thu Jul 30 10:27:04.077723 2026] [security2:error] [pid 2719052:tid 2719052] [client 43.157.24.68:14935] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsY6PvanEOZyWhkHx2nnQAAAA4"]
[Thu Jul 30 10:27:04.077786 2026] [security2:error] [pid 2719052:tid 2719052] [client 43.157.24.68:14935] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsY6PvanEOZyWhkHx2nnQAAAA4"]
[Thu Jul 30 10:27:04.078039 2026] [security2:error] [pid 2719052:tid 2719052] [client 43.157.24.68:14935] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsY6PvanEOZyWhkHx2nnQAAAA4"]
[Thu Jul 30 10:27:04.438944 2026] [ssl:error] [pid 2709755:tid 2709755] (70014)End of file found: [client 216.73.216.199:15239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:06.226671 2026] [ssl:error] [pid 2719883:tid 2719883] (EAI 2)Name or service not known: [client 144.76.19.72:49070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:06.226708 2026] [ssl:error] [pid 2719883:tid 2719883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:06.282523 2026] [ssl:error] [pid 2719052:tid 2719052] (EAI 2)Name or service not known: [client 144.76.19.72:49072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:06.282562 2026] [ssl:error] [pid 2719052:tid 2719052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:06.287963 2026] [authz_core:error] [pid 2710953:tid 2710953] [client 52.167.144.231:14735] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:27:06.288605 2026] [authz_core:error] [pid 2710953:tid 2710953] [client 52.167.144.231:14735] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:27:06.779493 2026] [security2:error] [pid 2719052:tid 2719052] [client 201.165.25.15:53440] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsY6vvanEOZyWhkHx2nngAAAA4"]
[Thu Jul 30 10:27:06.779542 2026] [security2:error] [pid 2719052:tid 2719052] [client 201.165.25.15:53440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsY6vvanEOZyWhkHx2nngAAAA4"]
[Thu Jul 30 10:27:06.779782 2026] [security2:error] [pid 2719052:tid 2719052] [client 201.165.25.15:53440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsY6vvanEOZyWhkHx2nngAAAA4"]
[Thu Jul 30 10:27:06.842686 2026] [lsapi:warn] [pid 2720057:tid 2720057] [client 45.158.164.139:50970] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:27:06.842727 2026] [lsapi:warn] [pid 2720057:tid 2720057] [client 45.158.164.139:50970] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:27:06.844980 2026] [lsapi:warn] [pid 2718108:tid 2718108] [client 62.7.102.3:62829] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:27:06.845016 2026] [lsapi:warn] [pid 2718108:tid 2718108] [client 62.7.102.3:62829] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:27:06.847189 2026] [ssl:error] [pid 2718107:tid 2718107] (70014)End of file found: [client 216.73.216.199:32391] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:07.414630 2026] [security2:error] [pid 2720374:tid 2720374] [client 23.251.47.39:56794] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "video/quicktime"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "www.sijames.com"] [uri "/"] [unique_id "amsY69_ffuREPpRcN-UXqAAAABA"]
[Thu Jul 30 10:27:07.415541 2026] [security2:error] [pid 2720374:tid 2720374] [client 23.251.47.39:56794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sijames.com"] [uri "/"] [unique_id "amsY69_ffuREPpRcN-UXqAAAABA"]
[Thu Jul 30 10:27:07.886200 2026] [security2:error] [pid 2720374:tid 2720374] [client 23.251.47.39:56794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "www.sijames.com"] [uri "/"] [unique_id "amsY69_ffuREPpRcN-UXqAAAABA"]
[Thu Jul 30 10:27:08.352018 2026] [core:error] [pid 2719604:tid 2719604] (13)Permission denied: [client 216.73.216.199:33592] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/cpu_slabs
[Thu Jul 30 10:27:08.967143 2026] [ssl:error] [pid 2719604:tid 2719604] (70014)End of file found: [client 216.73.216.199:33592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:09.337281 2026] [ssl:error] [pid 2719052:tid 2719052] (EAI 2)Name or service not known: [client 144.76.19.72:49082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:09.337310 2026] [ssl:error] [pid 2719052:tid 2719052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:09.398505 2026] [ssl:error] [pid 2719922:tid 2719922] (EAI 2)Name or service not known: [client 144.76.19.72:49090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:09.398532 2026] [ssl:error] [pid 2719922:tid 2719922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:11.508924 2026] [security2:error] [pid 2720057:tid 2720057] [client 103.190.228.172:48197] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsY7x-3xqA_M7yM5p6ViwAAACM"]
[Thu Jul 30 10:27:11.508975 2026] [security2:error] [pid 2720057:tid 2720057] [client 103.190.228.172:48197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsY7x-3xqA_M7yM5p6ViwAAACM"]
[Thu Jul 30 10:27:11.509239 2026] [security2:error] [pid 2720057:tid 2720057] [client 103.190.228.172:48197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsY7x-3xqA_M7yM5p6ViwAAACM"]
[Thu Jul 30 10:27:12.418656 2026] [core:error] [pid 2713568:tid 2713568] (13)Permission denied: [client 216.73.216.199:56282] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_console/drivers/virtio:virtio_console/unbind
[Thu Jul 30 10:27:12.453174 2026] [ssl:error] [pid 2718107:tid 2718107] (EAI 2)Name or service not known: [client 144.76.19.72:18662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:12.453204 2026] [ssl:error] [pid 2718107:tid 2718107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:12.541888 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:18670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:12.541916 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:12.885813 2026] [lsapi:warn] [pid 2718054:tid 2718054] [client 87.201.112.222:23208] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:27:13.308391 2026] [security2:error] [pid 2708019:tid 2708019] [client 74.7.241.22:53140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.strategem-ireland.com"] [uri "/"] [unique_id "amsY8RVjibqdChz1IjbbjgAAAB4"]
[Thu Jul 30 10:27:13.308826 2026] [security2:error] [pid 2720374:tid 2720374] [client 127.0.0.1:48098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "amsY8d_ffuREPpRcN-UXqQAAABA"]
[Thu Jul 30 10:27:14.232528 2026] [core:error] [pid 2713568:tid 2713568] (13)Permission denied: [client 216.73.216.199:56282] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/scsi_sense_cache/slabs_cpu_partial
[Thu Jul 30 10:27:15.439660 2026] [ssl:error] [pid 2713568:tid 2713568] (70014)End of file found: [client 216.73.216.199:56282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:15.598446 2026] [ssl:error] [pid 2718107:tid 2718107] (EAI 2)Name or service not known: [client 144.76.19.72:18684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:15.598479 2026] [ssl:error] [pid 2718107:tid 2718107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:15.652881 2026] [ssl:error] [pid 2719604:tid 2719604] (EAI 2)Name or service not known: [client 144.76.19.72:18688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:15.652911 2026] [ssl:error] [pid 2719604:tid 2719604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:17.027316 2026] [security2:error] [pid 2719922:tid 2719922] [client 110.249.202.3:42570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amsY9Zs1pot-Bfm5hXTTbAAAACE"]
[Thu Jul 30 10:27:18.753503 2026] [ssl:error] [pid 2718107:tid 2718107] (EAI 2)Name or service not known: [client 144.76.19.72:18704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:18.753536 2026] [ssl:error] [pid 2718107:tid 2718107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:18.811262 2026] [ssl:error] [pid 2721032:tid 2721032] (EAI 2)Name or service not known: [client 144.76.19.72:18720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:18.811305 2026] [ssl:error] [pid 2721032:tid 2721032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:21.524773 2026] [ssl:error] [pid 2719922:tid 2719922] (70014)End of file found: [client 216.73.216.199:45268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:21.895419 2026] [ssl:error] [pid 2721032:tid 2721032] (EAI 2)Name or service not known: [client 144.76.19.72:46342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:21.895445 2026] [ssl:error] [pid 2721032:tid 2721032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:21.948322 2026] [ssl:error] [pid 2719572:tid 2719572] (EAI 2)Name or service not known: [client 144.76.19.72:46350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:21.948350 2026] [ssl:error] [pid 2719572:tid 2719572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:23.058938 2026] [lsapi:warn] [pid 2713568:tid 2713568] [client 87.201.112.222:58726] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:27:23.328302 2026] [core:error] [pid 2719604:tid 2719604] (13)Permission denied: [client 216.73.216.199:8684] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/elevate-cpanel
[Thu Jul 30 10:27:23.453883 2026] [authz_core:error] [pid 2719052:tid 2719052] [client 66.249.66.34:64448] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:27:23.456687 2026] [authz_core:error] [pid 2719052:tid 2719052] [client 66.249.66.34:64448] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:27:23.621184 2026] [authz_core:error] [pid 2717463:tid 2717463] [client 66.249.66.33:39980] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:27:23.623919 2026] [authz_core:error] [pid 2717463:tid 2717463] [client 66.249.66.33:39980] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:27:23.632968 2026] [ssl:error] [pid 2719604:tid 2719604] (70014)End of file found: [client 216.73.216.199:8684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:25.017079 2026] [ssl:error] [pid 2715662:tid 2715662] (EAI 2)Name or service not known: [client 144.76.19.72:46358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:25.017105 2026] [ssl:error] [pid 2715662:tid 2715662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:25.099220 2026] [ssl:error] [pid 2716892:tid 2716892] (EAI 2)Name or service not known: [client 144.76.19.72:46368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:25.099244 2026] [ssl:error] [pid 2716892:tid 2716892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:26.655637 2026] [ssl:error] [pid 2720090:tid 2720090] (70014)End of file found: [client 216.73.216.199:19297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:27.148121 2026] [ssl:error] [pid 2718108:tid 2718108] (70014)End of file found: [client 216.73.216.199:22235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:27.864279 2026] [authz_core:error] [pid 2719922:tid 2719922] [client 52.167.144.158:6584] AH01630: client denied by server configuration: /home/winterb/public_html/ezazz/sohoadmin/program/includes/error_log
[Thu Jul 30 10:27:28.153253 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:46380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:28.153287 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:28.210473 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:46386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:28.210498 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:29.992768 2026] [ssl:error] [pid 2709755:tid 2709755] (70014)End of file found: [client 216.73.216.199:11838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:30.856018 2026] [access_compat:error] [pid 2715662:tid 2715662] [client 20.104.16.169:43563] AH01797: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 10:27:31.150239 2026] [core:error] [pid 2719572:tid 2719572] [client 66.249.66.40:46500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:27:31.150268 2026] [core:error] [pid 2719572:tid 2719572] [client 66.249.66.40:46500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:27:31.268652 2026] [ssl:error] [pid 2721032:tid 2721032] (EAI 2)Name or service not known: [client 144.76.19.72:53632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:31.268679 2026] [ssl:error] [pid 2721032:tid 2721032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:31.357216 2026] [ssl:error] [pid 2718660:tid 2718660] (EAI 2)Name or service not known: [client 144.76.19.72:53648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:31.357251 2026] [ssl:error] [pid 2718660:tid 2718660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:32.412316 2026] [ssl:error] [pid 2718660:tid 2718660] (70014)End of file found: [client 216.73.216.199:54972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:33.617304 2026] [ssl:error] [pid 2720090:tid 2720090] (70014)End of file found: [client 216.73.216.199:37572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:34.033128 2026] [lsapi:warn] [pid 2721560:tid 2721560] [client 87.201.112.222:44864] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:27:34.410093 2026] [ssl:error] [pid 2721607:tid 2721607] (EAI 2)Name or service not known: [client 144.76.19.72:53650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:34.410139 2026] [ssl:error] [pid 2721607:tid 2721607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:34.464158 2026] [ssl:error] [pid 2721608:tid 2721608] (EAI 2)Name or service not known: [client 144.76.19.72:53666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:34.464199 2026] [ssl:error] [pid 2721608:tid 2721608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:35.736224 2026] [ssl:error] [pid 2719052:tid 2719052] (70014)End of file found: [client 216.73.216.199:48336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:37.321872 2026] [security2:error] [pid 2717463:tid 2717463] [client 114.119.158.38:42055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/request_format~html/cat_ids~30"] [unique_id "amsZCX67pZfRnRaFXfSWGQAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E13-1-2020
[Thu Jul 30 10:27:37.521937 2026] [ssl:error] [pid 2721732:tid 2721732] (EAI 2)Name or service not known: [client 144.76.19.72:53670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:37.521975 2026] [ssl:error] [pid 2721732:tid 2721732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:37.578272 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:53678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:37.578301 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:38.582233 2026] [security2:error] [pid 2718660:tid 2718660] [client 114.119.158.38:49377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/request_format~html/cat_ids~30"] [unique_id "amsZCnq6OZUz3r4249bQSwAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E13-1-2020
[Thu Jul 30 10:27:39.053165 2026] [ssl:error] [pid 2719818:tid 2719818] (70014)End of file found: [client 216.73.216.199:18681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:39.543346 2026] [ssl:error] [pid 2717463:tid 2717463] (70014)End of file found: [client 216.73.216.199:53929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:40.634641 2026] [ssl:error] [pid 2720090:tid 2720090] (EAI 2)Name or service not known: [client 144.76.19.72:55894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:40.634670 2026] [ssl:error] [pid 2720090:tid 2720090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:40.689368 2026] [ssl:error] [pid 2718108:tid 2718108] (EAI 2)Name or service not known: [client 144.76.19.72:55910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:40.689403 2026] [ssl:error] [pid 2718108:tid 2718108] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:42.067661 2026] [ssl:error] [pid 2716892:tid 2716892] (70014)End of file found: [client 216.73.216.199:54708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:43.743157 2026] [ssl:error] [pid 2721608:tid 2721608] (EAI 2)Name or service not known: [client 144.76.19.72:55918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:43.743193 2026] [ssl:error] [pid 2721608:tid 2721608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:43.800315 2026] [ssl:error] [pid 2721607:tid 2721607] (EAI 2)Name or service not known: [client 144.76.19.72:55924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:43.800344 2026] [ssl:error] [pid 2721607:tid 2721607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:44.419579 2026] [lsapi:warn] [pid 2721279:tid 2721279] [client 87.201.112.222:44878] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:27:44.482319 2026] [ssl:error] [pid 2713929:tid 2713929] (70014)End of file found: [client 216.73.216.199:61470] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:45.389851 2026] [ssl:error] [pid 2715735:tid 2715735] (70014)End of file found: [client 216.73.216.199:18976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:46.887786 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:55926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:46.887826 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:46.941130 2026] [ssl:error] [pid 2720057:tid 2720057] (EAI 2)Name or service not known: [client 144.76.19.72:55932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:46.941159 2026] [ssl:error] [pid 2720057:tid 2720057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:47.431462 2026] [ssl:error] [pid 2717463:tid 2717463] (70014)End of file found: [client 216.73.216.199:31176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:48.882579 2026] [ssl:error] [pid 2709871:tid 2709871] (70014)End of file found: [client 216.73.216.199:13330] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:49.187589 2026] [ssl:error] [pid 2710889:tid 2710889] (70014)End of file found: [client 216.73.216.199:9069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:49.850450 2026] [security2:error] [pid 2719921:tid 2719921] [client 185.191.171.13:44534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/mr-world-bodybuilding-list"] [unique_id "amsZFbFxszpS6hOjUk9AmwAAACA"]
[Thu Jul 30 10:27:49.993579 2026] [ssl:error] [pid 2721033:tid 2721033] (EAI 2)Name or service not known: [client 144.76.19.72:25088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:49.993626 2026] [ssl:error] [pid 2721033:tid 2721033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:50.046951 2026] [ssl:error] [pid 2718660:tid 2718660] (EAI 2)Name or service not known: [client 144.76.19.72:25102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:50.046976 2026] [ssl:error] [pid 2718660:tid 2718660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:50.994144 2026] [ssl:error] [pid 2719989:tid 2719989] (70014)End of file found: [client 216.73.216.199:37840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:53.135193 2026] [ssl:error] [pid 2715662:tid 2715662] (EAI 2)Name or service not known: [client 144.76.19.72:25116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:53.135224 2026] [ssl:error] [pid 2715662:tid 2715662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:53.187841 2026] [ssl:error] [pid 2719572:tid 2719572] (EAI 2)Name or service not known: [client 144.76.19.72:25120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:53.187873 2026] [ssl:error] [pid 2719572:tid 2719572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:54.767126 2026] [lsapi:warn] [pid 2722394:tid 2722394] [client 87.201.112.222:58645] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:27:56.116674 2026] [ssl:error] [pid 2715662:tid 2715662] (70014)End of file found: [client 216.73.216.199:32563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:56.311790 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:25124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:56.311817 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:56.351895 2026] [security2:error] [pid 2722394:tid 2722394] [client 47.245.135.214:31289] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZHLBKQRnQ0OXtI3i-aAAAABY"]
[Thu Jul 30 10:27:56.351942 2026] [security2:error] [pid 2722394:tid 2722394] [client 47.245.135.214:31289] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZHLBKQRnQ0OXtI3i-aAAAABY"]
[Thu Jul 30 10:27:56.352236 2026] [security2:error] [pid 2722394:tid 2722394] [client 47.245.135.214:31289] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZHLBKQRnQ0OXtI3i-aAAAABY"]
[Thu Jul 30 10:27:56.364694 2026] [ssl:error] [pid 2709873:tid 2709873] (EAI 2)Name or service not known: [client 144.76.19.72:25134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:56.364723 2026] [ssl:error] [pid 2709873:tid 2709873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:56.534036 2026] [access_compat:error] [pid 2722494:tid 2722494] [client 196.75.51.247:60683] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 10:27:56.728139 2026] [ssl:error] [pid 2719572:tid 2719572] (70014)End of file found: [client 216.73.216.199:22069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:57.079628 2026] [access_compat:error] [pid 2710953:tid 2710953] [client 45.158.164.139:56250] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:27:57.213649 2026] [ssl:error] [pid 2716215:tid 2716215] (70014)End of file found: [client 216.73.216.199:2727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:27:57.879021 2026] [security2:error] [pid 2722252:tid 2722252] [client 189.130.111.141:60144] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZHY4QxAwsg7PCHXtEawAAAAo"]
[Thu Jul 30 10:27:57.879083 2026] [security2:error] [pid 2722252:tid 2722252] [client 189.130.111.141:60144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZHY4QxAwsg7PCHXtEawAAAAo"]
[Thu Jul 30 10:27:57.879337 2026] [security2:error] [pid 2722252:tid 2722252] [client 189.130.111.141:60144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZHY4QxAwsg7PCHXtEawAAAAo"]
[Thu Jul 30 10:27:58.216577 2026] [core:error] [pid 2709873:tid 2709873] [client 66.249.64.172:57577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:27:58.216623 2026] [core:error] [pid 2709873:tid 2709873] [client 66.249.64.172:57577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:27:58.839356 2026] [access_compat:error] [pid 2719883:tid 2719883] [client 196.75.51.247:60831] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 10:27:59.444505 2026] [ssl:error] [pid 2722297:tid 2722297] (EAI 2)Name or service not known: [client 144.76.19.72:25146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:59.444538 2026] [ssl:error] [pid 2722297:tid 2722297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:59.547775 2026] [ssl:error] [pid 2722494:tid 2722494] (EAI 2)Name or service not known: [client 144.76.19.72:25150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:27:59.547810 2026] [ssl:error] [pid 2722494:tid 2722494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:27:59.706304 2026] [access_compat:error] [pid 2719883:tid 2719883] [client 196.75.51.247:60831] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 10:28:00.430910 2026] [security2:error] [pid 2721608:tid 2721608] [client 152.42.165.47:57900] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "gangway-media.com"] [uri "/sftp-config.json"] [unique_id "amsZIMOeDXa0_vThkW1SmAAAABo"]
[Thu Jul 30 10:28:00.431111 2026] [security2:error] [pid 2721608:tid 2721608] [client 152.42.165.47:57900] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "gangway-media.com"] [uri "/sftp-config.json"] [unique_id "amsZIMOeDXa0_vThkW1SmAAAABo"]
[Thu Jul 30 10:28:00.554738 2026] [security2:error] [pid 2719818:tid 2719818] [client 171.247.82.92:41864] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZIFJ3c6b0QBq-O9ysOQAAABg"]
[Thu Jul 30 10:28:00.554789 2026] [security2:error] [pid 2719818:tid 2719818] [client 171.247.82.92:41864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZIFJ3c6b0QBq-O9ysOQAAABg"]
[Thu Jul 30 10:28:00.555083 2026] [security2:error] [pid 2719818:tid 2719818] [client 171.247.82.92:41864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZIFJ3c6b0QBq-O9ysOQAAABg"]
[Thu Jul 30 10:28:00.961940 2026] [security2:error] [pid 2721608:tid 2721608] [client 152.42.165.47:57900] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "gangway-media.com"] [uri "/index.php"] [unique_id "amsZIMOeDXa0_vThkW1SmAAAABo"]
[Thu Jul 30 10:28:01.518562 2026] [authz_core:error] [pid 2720090:tid 2720090] [client 66.249.66.34:60947] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:28:01.521266 2026] [authz_core:error] [pid 2720090:tid 2720090] [client 66.249.66.34:60947] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:28:02.177080 2026] [ssl:error] [pid 2715735:tid 2715735] (70014)End of file found: [client 216.73.216.199:5914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:02.604933 2026] [ssl:error] [pid 2722494:tid 2722494] (EAI 2)Name or service not known: [client 144.76.19.72:42138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:02.604960 2026] [ssl:error] [pid 2722494:tid 2722494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:02.656494 2026] [ssl:error] [pid 2718660:tid 2718660] (EAI 2)Name or service not known: [client 144.76.19.72:42154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:02.656521 2026] [ssl:error] [pid 2718660:tid 2718660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:04.503166 2026] [security2:error] [pid 2713931:tid 2713931] [client 146.56.197.150:36888] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hugoashmore.org"] [uri "/"] [unique_id "amsZJLmwEr8-9VCs4FjZDgAAADU"]
[Thu Jul 30 10:28:05.466519 2026] [lsapi:warn] [pid 2718660:tid 2718660] [client 87.201.112.222:58742] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:28:05.708538 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:42156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:05.708570 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:05.762637 2026] [ssl:error] [pid 2719883:tid 2719883] (EAI 2)Name or service not known: [client 144.76.19.72:42160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:05.762689 2026] [ssl:error] [pid 2719883:tid 2719883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:07.243152 2026] [security2:error] [pid 2722445:tid 2722445] [client 5.10.225.11:57630] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZJ_7-unxYUYNOjJrojwAAABw"]
[Thu Jul 30 10:28:07.243202 2026] [security2:error] [pid 2722445:tid 2722445] [client 5.10.225.11:57630] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZJ_7-unxYUYNOjJrojwAAABw"]
[Thu Jul 30 10:28:07.243463 2026] [security2:error] [pid 2722445:tid 2722445] [client 5.10.225.11:57630] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZJ_7-unxYUYNOjJrojwAAABw"]
[Thu Jul 30 10:28:07.907368 2026] [security2:error] [pid 2717463:tid 2717463] [client 43.157.46.118:49640] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chrisdyble.com"] [uri "/"] [unique_id "amsZJ367pZfRnRaFXfSWKwAAAAk"]
[Thu Jul 30 10:28:08.674451 2026] [security2:error] [pid 2713568:tid 2713568] [client 43.134.100.175:49122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amsZKJOOrwTTZPYnwaKZ8wAAAA8"]
[Thu Jul 30 10:28:08.814329 2026] [ssl:error] [pid 2720994:tid 2720994] (EAI 2)Name or service not known: [client 144.76.19.72:42176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:08.814357 2026] [ssl:error] [pid 2720994:tid 2720994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:08.868784 2026] [ssl:error] [pid 2719989:tid 2719989] (EAI 2)Name or service not known: [client 144.76.19.72:42192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:08.868815 2026] [ssl:error] [pid 2719989:tid 2719989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:09.714176 2026] [security2:error] [pid 2692034:tid 2692034] [client 47.77.235.113:60519] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZKSu9kg7rpQXVfCIGlwAAAAY"]
[Thu Jul 30 10:28:09.714239 2026] [security2:error] [pid 2692034:tid 2692034] [client 47.77.235.113:60519] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZKSu9kg7rpQXVfCIGlwAAAAY"]
[Thu Jul 30 10:28:09.714557 2026] [security2:error] [pid 2692034:tid 2692034] [client 47.77.235.113:60519] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZKSu9kg7rpQXVfCIGlwAAAAY"]
[Thu Jul 30 10:28:10.017227 2026] [core:error] [pid 2715662:tid 2715662] (13)Permission denied: [client 216.73.216.199:33430] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/boot/System.map-4.18.0-553.141.2.lve.el8.x86_64
[Thu Jul 30 10:28:11.222056 2026] [ssl:error] [pid 2715662:tid 2715662] (70014)End of file found: [client 216.73.216.199:33430] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:11.922478 2026] [ssl:error] [pid 2717999:tid 2717999] (EAI 2)Name or service not known: [client 144.76.19.72:34880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:11.922513 2026] [ssl:error] [pid 2717999:tid 2717999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:11.977003 2026] [ssl:error] [pid 2719604:tid 2719604] (EAI 2)Name or service not known: [client 144.76.19.72:34886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:11.977028 2026] [ssl:error] [pid 2719604:tid 2719604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:12.383314 2026] [security2:error] [pid 2720057:tid 2720057] [client 47.77.235.113:43693] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZLB-3xqA_M7yM5p6V-wAAACM"]
[Thu Jul 30 10:28:12.383378 2026] [security2:error] [pid 2720057:tid 2720057] [client 47.77.235.113:43693] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZLB-3xqA_M7yM5p6V-wAAACM"]
[Thu Jul 30 10:28:12.383634 2026] [security2:error] [pid 2720057:tid 2720057] [client 47.77.235.113:43693] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZLB-3xqA_M7yM5p6V-wAAACM"]
[Thu Jul 30 10:28:15.034659 2026] [ssl:error] [pid 2710889:tid 2710889] (EAI 2)Name or service not known: [client 144.76.19.72:34896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:15.034689 2026] [ssl:error] [pid 2710889:tid 2710889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:15.090733 2026] [ssl:error] [pid 2722494:tid 2722494] (EAI 2)Name or service not known: [client 144.76.19.72:34910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:15.090757 2026] [ssl:error] [pid 2722494:tid 2722494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:15.858913 2026] [lsapi:warn] [pid 2722494:tid 2722494] [client 87.201.112.222:58659] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:28:16.210430 2026] [security2:error] [pid 2713931:tid 2713931] [client 34.199.252.22:49274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amsZMLmwEr8-9VCs4FjZEQAAADU"]
[Thu Jul 30 10:28:17.255748 2026] [ssl:error] [pid 2722492:tid 2722492] (70014)End of file found: [client 216.73.216.199:26894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:17.950606 2026] [core:error] [pid 2722494:tid 2722494] [client 66.249.66.195:46583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:17.950636 2026] [core:error] [pid 2722494:tid 2722494] [client 66.249.66.195:46583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:18.169929 2026] [ssl:error] [pid 2710953:tid 2710953] (EAI 2)Name or service not known: [client 144.76.19.72:34926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:18.169974 2026] [ssl:error] [pid 2710953:tid 2710953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:18.224450 2026] [ssl:error] [pid 2715735:tid 2715735] (EAI 2)Name or service not known: [client 144.76.19.72:34930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:18.224479 2026] [ssl:error] [pid 2715735:tid 2715735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:19.957984 2026] [core:crit] [pid 2715662:tid 2715662] (13)Permission denied: [client 66.249.64.130:65401] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 10:28:19.958030 2026] [authz_core:error] [pid 2715662:tid 2715662] [client 66.249.64.130:65401] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 10:28:19.958378 2026] [core:crit] [pid 2715662:tid 2715662] (13)Permission denied: [client 66.249.64.130:65401] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 10:28:19.958396 2026] [core:crit] [pid 2715662:tid 2715662] (13)Permission denied: [client 66.249.64.130:65401] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 10:28:19.958428 2026] [core:crit] [pid 2715662:tid 2715662] (13)Permission denied: [client 66.249.64.130:65401] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 10:28:20.269556 2026] [security2:error] [pid 2692034:tid 2692034] [client 34.236.41.241:14867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2021/06/Full-Stack-Application-Monitoring-with-SolarWinds-Blog-Banner-Prosperon-Networks.png"] [unique_id "amsZNCu9kg7rpQXVfCIGmgAAAAY"]
[Thu Jul 30 10:28:21.360799 2026] [ssl:error] [pid 2723683:tid 2723683] (EAI 2)Name or service not known: [client 144.76.19.72:33576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:21.360842 2026] [ssl:error] [pid 2723683:tid 2723683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:21.413245 2026] [ssl:error] [pid 2723684:tid 2723684] (EAI 2)Name or service not known: [client 144.76.19.72:33590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:21.413290 2026] [ssl:error] [pid 2723684:tid 2723684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:21.896724 2026] [ssl:error] [pid 2720374:tid 2720374] (70014)End of file found: [client 216.73.216.199:64179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:22.192866 2026] [core:error] [pid 2719883:tid 2719883] (13)Permission denied: [client 216.73.216.199:27142] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty39/subsystem/ttyS0/flags
[Thu Jul 30 10:28:22.976570 2026] [cgi:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:24.393759 2026] [security2:error] [pid 2723715:tid 2723715] [client 52.200.54.136:20955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2022/07/Webinar-On-Demand-SolarWinds-Database-Monitoring-Actual-Bona-Fide-Database-Administrators-Blog-Banner-Prosperon-Networks.png"] [unique_id "amsZODCamXGaadxXLRGuIAAAACs"]
[Thu Jul 30 10:28:24.467098 2026] [ssl:error] [pid 2723716:tid 2723716] (EAI 2)Name or service not known: [client 144.76.19.72:33604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:24.467137 2026] [ssl:error] [pid 2723716:tid 2723716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:24.525673 2026] [ssl:error] [pid 2723717:tid 2723717] (EAI 2)Name or service not known: [client 144.76.19.72:33610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:24.525717 2026] [ssl:error] [pid 2723717:tid 2723717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:25.326740 2026] [core:error] [pid 2719818:tid 2719818] [client 66.249.64.172:49706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:25.326765 2026] [core:error] [pid 2719818:tid 2719818] [client 66.249.64.172:49706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:25.504194 2026] [ssl:error] [pid 2719883:tid 2719883] (70014)End of file found: [client 216.73.216.199:27142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:26.112220 2026] [ssl:error] [pid 2708019:tid 2708019] (70014)End of file found: [client 216.73.216.199:50899] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:26.712471 2026] [lsapi:warn] [pid 2715662:tid 2715662] [client 87.201.112.222:23231] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:28:26.936954 2026] [access_compat:error] [pid 2723714:tid 2723714] [client 196.75.51.247:61768] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 10:28:27.584014 2026] [ssl:error] [pid 2723647:tid 2723647] (EAI 2)Name or service not known: [client 144.76.19.72:33626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:27.584046 2026] [ssl:error] [pid 2723647:tid 2723647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:27.635709 2026] [ssl:error] [pid 2723717:tid 2723717] (EAI 2)Name or service not known: [client 144.76.19.72:33640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:27.635732 2026] [ssl:error] [pid 2723717:tid 2723717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:28.219521 2026] [ssl:error] [pid 2709873:tid 2709873] (70014)End of file found: [client 216.73.216.199:16040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:28.935127 2026] [cgi:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:29.670332 2026] [cgi:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:30.656183 2026] [security2:error] [pid 2723716:tid 2723716] [client 43.164.0.96:38128] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsZPtCPVQx51alaqUC1rQAAACw"]
[Thu Jul 30 10:28:30.690693 2026] [ssl:error] [pid 2723715:tid 2723715] (EAI 2)Name or service not known: [client 144.76.19.72:34204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:30.690723 2026] [ssl:error] [pid 2723715:tid 2723715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:30.747923 2026] [ssl:error] [pid 2720374:tid 2720374] (EAI 2)Name or service not known: [client 144.76.19.72:34214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:30.747954 2026] [ssl:error] [pid 2720374:tid 2720374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:31.146483 2026] [security2:error] [pid 2710889:tid 2710889] [client 43.135.139.165:41342] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsZP2AxJEIJ0Qgptxf2XgAAAAA"]
[Thu Jul 30 10:28:31.702134 2026] [cgi:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:32.743743 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 10:28:32.743852 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:32.828588 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/this_is_a_new_hello_world.php
[Thu Jul 30 10:28:32.828647 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:32.850881 2026] [security2:error] [pid 2719883:tid 2719883] [client 43.135.139.165:50232] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsZQJqriEdqXbfKs5GFNQAAAB8"], referer: http://raidersofthegamecupboard.co.uk
[Thu Jul 30 10:28:32.910498 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ioxi-o.php
[Thu Jul 30 10:28:32.910546 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:32.943049 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/66.php
[Thu Jul 30 10:28:32.943128 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:32.974041 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ms-edit.php
[Thu Jul 30 10:28:32.974106 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:33.017889 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/aaa.php
[Thu Jul 30 10:28:33.017944 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:33.522589 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/bgymj.php
[Thu Jul 30 10:28:33.522652 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:33.554054 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ah25.php
[Thu Jul 30 10:28:33.554115 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:33.596229 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/main.php
[Thu Jul 30 10:28:33.596280 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:33.626560 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/new4.php
[Thu Jul 30 10:28:33.626617 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:33.656604 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/inputs.php
[Thu Jul 30 10:28:33.656649 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:33.801948 2026] [ssl:error] [pid 2723684:tid 2723684] (EAI 2)Name or service not known: [client 144.76.19.72:34226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:33.801974 2026] [ssl:error] [pid 2723684:tid 2723684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:33.836455 2026] [core:error] [pid 2722493:tid 2722493] [client 66.249.64.171:35890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:33.836477 2026] [core:error] [pid 2722493:tid 2722493] [client 66.249.64.171:35890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:33.856293 2026] [ssl:error] [pid 2723647:tid 2723647] (EAI 2)Name or service not known: [client 144.76.19.72:34242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:33.856318 2026] [ssl:error] [pid 2723647:tid 2723647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:34.246523 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/edit.php
[Thu Jul 30 10:28:34.246572 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:34.276637 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/a2.php
[Thu Jul 30 10:28:34.276685 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:34.366511 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 10:28:34.366628 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:34.420088 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/0.php
[Thu Jul 30 10:28:34.420139 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:34.902546 2026] [cgi:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:34.909868 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/lock360.php
[Thu Jul 30 10:28:34.909910 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:34.941456 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/plss3.php
[Thu Jul 30 10:28:34.941497 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:34.996825 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp.php
[Thu Jul 30 10:28:34.996877 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.027061 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/x.php
[Thu Jul 30 10:28:35.027134 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.066717 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/aq.php
[Thu Jul 30 10:28:35.066765 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.099577 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 10:28:35.099688 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:35.141979 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/css.php
[Thu Jul 30 10:28:35.142025 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.189641 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/public
[Thu Jul 30 10:28:35.189741 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:35.237061 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wsd.php
[Thu Jul 30 10:28:35.237118 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.278788 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/.well-known/gecko-litespeed.php
[Thu Jul 30 10:28:35.278843 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.325169 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/nw.php
[Thu Jul 30 10:28:35.325221 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.355630 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 10:28:35.355737 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:35.403136 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-the.php
[Thu Jul 30 10:28:35.403187 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.433328 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/myfile.php
[Thu Jul 30 10:28:35.433388 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.462343 2026] [ssl:error] [pid 2722297:tid 2722297] (70014)End of file found: [client 216.73.216.199:2024] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:35.463626 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/info.php
[Thu Jul 30 10:28:35.463667 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.493881 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/file.php
[Thu Jul 30 10:28:35.493928 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.537416 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/fs.php
[Thu Jul 30 10:28:35.537465 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.567905 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ff.php
[Thu Jul 30 10:28:35.567980 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.611897 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/axx.php
[Thu Jul 30 10:28:35.611944 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.660803 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-access.php
[Thu Jul 30 10:28:35.660854 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.700686 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/Sanskrit.php
[Thu Jul 30 10:28:35.700732 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.714555 2026] [security2:error] [pid 2723684:tid 2723684] [client 94.154.43.183:65146] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsZQ2nzWJDTbcD2vnhBFAAAABo"]
[Thu Jul 30 10:28:35.714789 2026] [security2:error] [pid 2723684:tid 2723684] [client 94.154.43.183:65146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsZQ2nzWJDTbcD2vnhBFAAAABo"]
[Thu Jul 30 10:28:35.714997 2026] [security2:error] [pid 2723684:tid 2723684] [client 94.154.43.183:65146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amsZQ2nzWJDTbcD2vnhBFAAAABo"]
[Thu Jul 30 10:28:35.744915 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/a.php
[Thu Jul 30 10:28:35.744959 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.782948 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/plugins.php
[Thu Jul 30 10:28:35.782993 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.813164 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/style.php
[Thu Jul 30 10:28:35.813212 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.843268 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-act.php
[Thu Jul 30 10:28:35.843312 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.873443 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 10:28:35.873554 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:35.919013 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/222.php
[Thu Jul 30 10:28:35.919061 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:35.949157 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 10:28:35.949267 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:36.001189 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ms.php
[Thu Jul 30 10:28:36.001243 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.044461 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/abcd.php
[Thu Jul 30 10:28:36.044513 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.078274 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/06.php
[Thu Jul 30 10:28:36.078318 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.122493 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/155.php
[Thu Jul 30 10:28:36.122538 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.377939 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ol.php
[Thu Jul 30 10:28:36.377992 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.410100 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/X57.php
[Thu Jul 30 10:28:36.410151 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.440132 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/file59.php
[Thu Jul 30 10:28:36.440179 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.492882 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/vx.php
[Thu Jul 30 10:28:36.492928 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.636367 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/prv8.php
[Thu Jul 30 10:28:36.636412 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.894100 2026] [cgi:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:36.913149 2026] [ssl:error] [pid 2723683:tid 2723683] (EAI 2)Name or service not known: [client 144.76.19.72:34254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:36.913170 2026] [ssl:error] [pid 2723683:tid 2723683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:36.928511 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/166.php
[Thu Jul 30 10:28:36.928555 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:36.966300 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:34264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:36.966322 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:37.057231 2026] [lsapi:warn] [pid 2715662:tid 2715662] [client 87.201.112.222:23203] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:28:37.212276 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/we.php
[Thu Jul 30 10:28:37.212331 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:37.609160 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 10:28:37.609267 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:37.753416 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 10:28:37.753532 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:37.833272 2026] [cgi:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:38.033421 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/a1vx.php
[Thu Jul 30 10:28:38.033472 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.160724 2026] [security2:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "annawelshagent.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZRpPM06swPasR2m456QAAAAI"]
[Thu Jul 30 10:28:38.160946 2026] [security2:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "annawelshagent.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZRpPM06swPasR2m456QAAAAI"]
[Thu Jul 30 10:28:38.161207 2026] [security2:error] [pid 2723369:tid 2723369] [client 20.171.55.167:4247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "annawelshagent.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZRpPM06swPasR2m456QAAAAI"]
[Thu Jul 30 10:28:38.175032 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/edit.php
[Thu Jul 30 10:28:38.175088 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.209053 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/666.php
[Thu Jul 30 10:28:38.209117 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.445556 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/cu.php
[Thu Jul 30 10:28:38.445618 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.490586 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/re.php
[Thu Jul 30 10:28:38.490640 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.521545 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 10:28:38.521660 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:38.566210 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 10:28:38.566326 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:38.596726 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/kj.php
[Thu Jul 30 10:28:38.596769 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.637391 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 10:28:38.637497 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:38.684055 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/styll.php
[Thu Jul 30 10:28:38.684119 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.714151 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/av.php
[Thu Jul 30 10:28:38.714197 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.747270 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/aw.php
[Thu Jul 30 10:28:38.747319 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.777427 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xqq.php
[Thu Jul 30 10:28:38.777471 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.822310 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 10:28:38.822406 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:38.864808 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-update.php
[Thu Jul 30 10:28:38.864857 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:38.895088 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/k.php
[Thu Jul 30 10:28:38.895136 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.040312 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/opts.php
[Thu Jul 30 10:28:39.040362 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.186315 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/manager.php
[Thu Jul 30 10:28:39.186361 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.366132 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 10:28:39.366233 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 10:28:39.412611 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/8xyz.php
[Thu Jul 30 10:28:39.412663 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.442789 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-blog.php
[Thu Jul 30 10:28:39.442838 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.473179 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/gifclass.php
[Thu Jul 30 10:28:39.473231 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.515758 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ws60.php
[Thu Jul 30 10:28:39.515805 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.545836 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ff1.php
[Thu Jul 30 10:28:39.545880 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.576282 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/init.php
[Thu Jul 30 10:28:39.576333 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.759591 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/grsiuk.php
[Thu Jul 30 10:28:39.759667 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:39.807923 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/.well-known/admin.php
[Thu Jul 30 10:28:39.807972 2026] [access_compat:error] [pid 2720374:tid 2720374] [client 158.158.76.106:30004] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 10:28:40.019866 2026] [ssl:error] [pid 2723437:tid 2723437] (EAI 2)Name or service not known: [client 144.76.19.72:29074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:40.019899 2026] [ssl:error] [pid 2723437:tid 2723437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:40.077878 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:29080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:40.077909 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:41.471679 2026] [core:error] [pid 2723437:tid 2723437] [client 66.249.66.195:43883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:41.471705 2026] [core:error] [pid 2723437:tid 2723437] [client 66.249.66.195:43883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:41.501122 2026] [core:error] [pid 2715620:tid 2715620] [client 66.249.66.67:58340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:41.501150 2026] [core:error] [pid 2715620:tid 2715620] [client 66.249.66.67:58340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:41.793665 2026] [ssl:error] [pid 2723715:tid 2723715] (70014)End of file found: [client 216.73.216.199:18421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:42.003636 2026] [security2:error] [pid 2722297:tid 2722297] [client 85.208.96.206:51062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.540.html"] [unique_id "amsZSvtvItfiF_mfQ9a5gAAAABU"]
[Thu Jul 30 10:28:43.136637 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:29096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:43.136669 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:43.193820 2026] [ssl:error] [pid 2723717:tid 2723717] (EAI 2)Name or service not known: [client 144.76.19.72:29100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:43.193845 2026] [ssl:error] [pid 2723717:tid 2723717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:43.301893 2026] [ssl:error] [pid 2722494:tid 2722494] (70014)End of file found: [client 216.73.216.199:14403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:43.309946 2026] [security2:error] [pid 2722493:tid 2722493] [client 156.59.198.135:46004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/couch/uploads/file/brodie-engineering-carbon-reduction-plan.pdf"] [unique_id "amsZS2Rg5dyAlikSQ3Dw5AAAACg"]
[Thu Jul 30 10:28:44.741548 2026] [authz_core:error] [pid 2718054:tid 2718054] [client 66.249.66.33:35462] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:28:44.744251 2026] [authz_core:error] [pid 2718054:tid 2718054] [client 66.249.66.33:35462] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:28:45.705414 2026] [cgi:error] [pid 2710889:tid 2710889] [client 20.171.55.167:4282] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:45.717014 2026] [ssl:error] [pid 2722297:tid 2722297] (70014)End of file found: [client 216.73.216.199:11255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:46.137420 2026] [security2:error] [pid 2724699:tid 2724699] [client 43.157.50.58:53826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "holistic-clear.co.uk"] [uri "/"] [unique_id "amsZTsPercwabr0ne7Y5dgAAAAo"]
[Thu Jul 30 10:28:46.253288 2026] [ssl:error] [pid 2722445:tid 2722445] (EAI 2)Name or service not known: [client 144.76.19.72:29108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:46.253324 2026] [ssl:error] [pid 2722445:tid 2722445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:46.306686 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:29116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:46.306710 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:46.721620 2026] [security2:error] [pid 2713931:tid 2713931] [client 43.157.50.58:56378] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsZTrmwEr8-9VCs4FjZGAAAADU"], referer: http://holistic-clear.co.uk
[Thu Jul 30 10:28:46.723435 2026] [authz_core:error] [pid 2713931:tid 2713931] [client 43.157.50.58:56378] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://holistic-clear.co.uk
[Thu Jul 30 10:28:46.726084 2026] [authz_core:error] [pid 2713931:tid 2713931] [client 43.157.50.58:56378] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://holistic-clear.co.uk
[Thu Jul 30 10:28:47.116614 2026] [cgi:error] [pid 2710889:tid 2710889] [client 20.171.55.167:4282] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:47.515915 2026] [lsapi:warn] [pid 2724660:tid 2724660] [client 87.201.112.222:44879] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:28:47.832685 2026] [ssl:error] [pid 2723714:tid 2723714] (70014)End of file found: [client 216.73.216.199:15525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:48.632420 2026] [ssl:error] [pid 2715620:tid 2715620] (70014)End of file found: [client 216.73.216.199:45017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:28:49.382017 2026] [ssl:error] [pid 2722394:tid 2722394] (EAI 2)Name or service not known: [client 144.76.19.72:29128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:49.382073 2026] [ssl:error] [pid 2722394:tid 2722394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:49.440464 2026] [ssl:error] [pid 2723715:tid 2723715] (EAI 2)Name or service not known: [client 144.76.19.72:29142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:49.440489 2026] [ssl:error] [pid 2723715:tid 2723715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:50.259694 2026] [security2:error] [pid 2718054:tid 2718054] [client 85.208.96.203:23104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/troy-aikman-combine-measurements"] [unique_id "amsZUmAYoVY0H-O0WyZ1pwAAABc"]
[Thu Jul 30 10:28:52.495187 2026] [ssl:error] [pid 2720994:tid 2720994] (EAI 2)Name or service not known: [client 144.76.19.72:30738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:52.495219 2026] [ssl:error] [pid 2720994:tid 2720994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:52.551518 2026] [ssl:error] [pid 2719604:tid 2719604] (EAI 2)Name or service not known: [client 144.76.19.72:30748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:52.551546 2026] [ssl:error] [pid 2719604:tid 2719604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:54.071762 2026] [core:error] [pid 2723715:tid 2723715] [client 66.249.64.171:48691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:54.071789 2026] [core:error] [pid 2723715:tid 2723715] [client 66.249.64.171:48691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:54.779673 2026] [core:error] [pid 2718661:tid 2718661] [client 66.249.64.171:38472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:54.779701 2026] [core:error] [pid 2718661:tid 2718661] [client 66.249.64.171:38472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:28:55.608846 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:30754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:55.608871 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:55.661887 2026] [ssl:error] [pid 2723715:tid 2723715] (EAI 2)Name or service not known: [client 144.76.19.72:30768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:55.661927 2026] [ssl:error] [pid 2723715:tid 2723715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:56.659029 2026] [cgi:error] [pid 2710889:tid 2710889] [client 20.171.55.167:4282] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:28:58.551414 2026] [lsapi:warn] [pid 2723715:tid 2723715] [client 87.201.112.222:58682] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:28:58.801238 2026] [ssl:error] [pid 2715735:tid 2715735] (EAI 2)Name or service not known: [client 144.76.19.72:30774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:58.801267 2026] [ssl:error] [pid 2715735:tid 2715735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:28:58.858711 2026] [ssl:error] [pid 2723684:tid 2723684] (EAI 2)Name or service not known: [client 144.76.19.72:30788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:28:58.858735 2026] [ssl:error] [pid 2723684:tid 2723684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:00.071815 2026] [security2:error] [pid 2725196:tid 2725196] [client 85.208.96.205:60630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2288.0/prev_next,next.html"] [unique_id "amsZXCSNqCroBtgjvXZDLgAAAAE"]
[Thu Jul 30 10:29:01.283676 2026] [security2:error] [pid 2724698:tid 2724698] [client 114.119.142.20:28585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~19,102/request_format~html"] [unique_id "amsZXWvqf5c8LCtt4YIVZwAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,19,102/request_format~html
[Thu Jul 30 10:29:01.332562 2026] [ssl:error] [pid 2723714:tid 2723714] (70014)End of file found: [client 216.73.216.199:23544] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:01.916746 2026] [ssl:error] [pid 2723715:tid 2723715] (EAI 2)Name or service not known: [client 144.76.19.72:31578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:01.916775 2026] [ssl:error] [pid 2723715:tid 2723715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:01.971129 2026] [ssl:error] [pid 2709873:tid 2709873] (EAI 2)Name or service not known: [client 144.76.19.72:31594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:01.971156 2026] [ssl:error] [pid 2709873:tid 2709873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:02.431924 2026] [security2:error] [pid 2722297:tid 2722297] [client 114.119.142.20:28593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~19,102/request_format~html"] [unique_id "amsZXvtvItfiF_mfQ9a5iwAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,19,102/request_format~html
[Thu Jul 30 10:29:03.517633 2026] [security2:error] [pid 2724698:tid 2724698] [client 74.7.227.6:50350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.alismnet.alism.com"] [uri "/"] [unique_id "amsZX2vqf5c8LCtt4YIVaAAAAAY"]
[Thu Jul 30 10:29:04.914356 2026] [security2:error] [pid 2719989:tid 2719989] [client 47.128.113.144:53796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amsZYM-DeZzg5tYcWd1CbwAAACI"]
[Thu Jul 30 10:29:05.022711 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:31602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:05.022737 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:05.076820 2026] [ssl:error] [pid 2722493:tid 2722493] (EAI 2)Name or service not known: [client 144.76.19.72:31618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:05.076853 2026] [ssl:error] [pid 2722493:tid 2722493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:05.158081 2026] [security2:error] [pid 2719604:tid 2719604] [client 51.68.111.214:28125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "chrisdyble.com"] [uri "/robots.txt"] [unique_id "amsZYaL3yQ8NgaXaUiVowgAAABE"]
[Thu Jul 30 10:29:05.299300 2026] [security2:error] [pid 2722297:tid 2722297] [client 85.208.96.202:60082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/robots.txt"] [unique_id "amsZYftvItfiF_mfQ9a5jAAAABU"]
[Thu Jul 30 10:29:05.767674 2026] [security2:error] [pid 2709873:tid 2709873] [client 85.208.96.212:62576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/403.shtml"] [unique_id "amsZYVwRe6lGIF-RuC2uCgAAAD0"]
[Thu Jul 30 10:29:06.131228 2026] [security2:error] [pid 2710889:tid 2710889] [client 185.191.171.10:41312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/contact/"] [unique_id "amsZYmAxJEIJ0Qgptxf20wAAAAA"]
[Thu Jul 30 10:29:07.176764 2026] [ssl:error] [pid 2725248:tid 2725248] (70014)End of file found: [client 216.73.216.199:8584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:08.014274 2026] [security2:error] [pid 2710889:tid 2710889] [client 185.191.171.3:41124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/403.shtml"] [unique_id "amsZZGAxJEIJ0Qgptxf21AAAAAA"]
[Thu Jul 30 10:29:08.063535 2026] [cgi:error] [pid 2715662:tid 2715662] [client 66.132.172.132:5190] AH02812: stderr from /home/quantumc/halmanninvestments.com/cgi-bin/: attempt to invoke directory as script, referer: https://mail.halmanninvestments.com:443/cgi-bin
[Thu Jul 30 10:29:08.131666 2026] [ssl:error] [pid 2719604:tid 2719604] (EAI 2)Name or service not known: [client 144.76.19.72:31632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:08.131711 2026] [ssl:error] [pid 2719604:tid 2719604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:08.185965 2026] [ssl:error] [pid 2725196:tid 2725196] (EAI 2)Name or service not known: [client 144.76.19.72:31638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:08.186000 2026] [ssl:error] [pid 2725196:tid 2725196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:08.376622 2026] [ssl:error] [pid 2722394:tid 2722394] (70014)End of file found: [client 216.73.216.199:27938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:08.683872 2026] [lsapi:warn] [pid 2719786:tid 2719786] [client 87.201.112.222:23225] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:29:09.283924 2026] [ssl:error] [pid 2719883:tid 2719883] (70014)End of file found: [client 216.73.216.199:51429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:10.473054 2026] [authz_core:error] [pid 2723715:tid 2723715] [client 66.249.66.35:58515] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:29:10.475779 2026] [authz_core:error] [pid 2723715:tid 2723715] [client 66.249.66.35:58515] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:29:11.247100 2026] [ssl:error] [pid 2719786:tid 2719786] (EAI 2)Name or service not known: [client 144.76.19.72:59582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:11.247135 2026] [ssl:error] [pid 2719786:tid 2719786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:11.299310 2026] [ssl:error] [pid 2718661:tid 2718661] (EAI 2)Name or service not known: [client 144.76.19.72:59594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:11.299348 2026] [ssl:error] [pid 2718661:tid 2718661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:12.890831 2026] [ssl:error] [pid 2725196:tid 2725196] (70014)End of file found: [client 216.73.216.199:12596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:13.461435 2026] [security2:error] [pid 2722297:tid 2722297] [client 118.24.135.34:52260] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amsZaftvItfiF_mfQ9a5jgAAABU"]
[Thu Jul 30 10:29:13.799305 2026] [ssl:error] [pid 2725248:tid 2725248] (70014)End of file found: [client 216.73.216.199:31154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:14.355588 2026] [ssl:error] [pid 2715620:tid 2715620] (EAI 2)Name or service not known: [client 144.76.19.72:59606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:14.355626 2026] [ssl:error] [pid 2715620:tid 2715620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:14.406777 2026] [ssl:error] [pid 2719989:tid 2719989] (EAI 2)Name or service not known: [client 144.76.19.72:59618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:14.406809 2026] [ssl:error] [pid 2719989:tid 2719989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:14.489608 2026] [core:error] [pid 2724698:tid 2724698] [client 66.249.64.172:55578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:14.489629 2026] [core:error] [pid 2724698:tid 2724698] [client 66.249.64.172:55578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:15.264639 2026] [security2:error] [pid 2718054:tid 2718054] [client 118.24.135.34:53902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/index.html"] [unique_id "amsZa2AYoVY0H-O0WyZ1rwAAABc"], referer: http://www.shelterprojects.org
[Thu Jul 30 10:29:15.920359 2026] [ssl:error] [pid 2715662:tid 2715662] (70014)End of file found: [client 216.73.216.199:10375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:17.462455 2026] [ssl:error] [pid 2719989:tid 2719989] (EAI 2)Name or service not known: [client 144.76.19.72:59622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:17.462484 2026] [ssl:error] [pid 2719989:tid 2719989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:17.518096 2026] [ssl:error] [pid 2718661:tid 2718661] (EAI 2)Name or service not known: [client 144.76.19.72:59624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:17.518122 2026] [ssl:error] [pid 2718661:tid 2718661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:17.915646 2026] [security2:error] [pid 2722494:tid 2722494] [client 104.207.50.193:38695] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZbYzByg2-cixuheaAjwAAACk"], referer: https://www.bing.com/
[Thu Jul 30 10:29:18.201016 2026] [ssl:error] [pid 2709871:tid 2709871] (70014)End of file found: [client 216.73.216.199:17154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:18.252804 2026] [security2:error] [pid 2720994:tid 2720994] [client 45.3.54.11:38509] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZboHDORjEsbDY7SzFJQAAAAc"]
[Thu Jul 30 10:29:18.595328 2026] [security2:error] [pid 2725196:tid 2725196] [client 65.111.23.209:51401] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZbiSNqCroBtgjvXZDNAAAAAE"], referer: https://www.bing.com/
[Thu Jul 30 10:29:19.050354 2026] [lsapi:warn] [pid 2722494:tid 2722494] [client 87.201.112.222:23172] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:29:19.087605 2026] [ssl:error] [pid 2725248:tid 2725248] (70014)End of file found: [client 216.73.216.199:7432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:19.225314 2026] [security2:error] [pid 2723369:tid 2723369] [client 209.50.181.77:63941] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZb5PM06swPasR2m45_AAAAAI"]
[Thu Jul 30 10:29:20.999460 2026] [ssl:error] [pid 2722493:tid 2722493] (70014)End of file found: [client 216.73.216.199:55401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:21.020607 2026] [cgi:error] [pid 2715662:tid 2715662] [client 170.85.62.170:25595] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:29:21.771941 2026] [security2:error] [pid 2726135:tid 2726135] [client 209.50.180.249:62081] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZce8a7pxzNF_BMQ9fRgAAACM"], referer: https://www.bing.com/
[Thu Jul 30 10:29:21.792317 2026] [ssl:error] [pid 2719883:tid 2719883] (EAI 2)Name or service not known: [client 144.76.19.72:60824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:21.792348 2026] [ssl:error] [pid 2719883:tid 2719883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:21.907335 2026] [ssl:error] [pid 2726104:tid 2726104] (70014)End of file found: [client 216.73.216.199:63889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:22.409727 2026] [ssl:error] [pid 2719604:tid 2719604] (EAI 2)Name or service not known: [client 144.76.19.72:60836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:22.409756 2026] [ssl:error] [pid 2719604:tid 2719604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:22.550083 2026] [security2:error] [pid 2715620:tid 2715620] [client 45.3.42.154:54223] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZcsSSJB99tPj4H7tT4QAAAAQ"]
[Thu Jul 30 10:29:22.740556 2026] [access_compat:error] [pid 2723436:tid 2723436] [client 2.189.5.142:54652] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:29:22.886202 2026] [security2:error] [pid 2718054:tid 2718054] [client 65.111.23.13:12391] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZcmAYoVY0H-O0WyZ1sQAAABc"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:23.222438 2026] [cgi:error] [pid 2721033:tid 2721033] [client 20.104.22.47:13088] AH02812: stderr from /home/winterb/public_html/ezazz/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:29:23.226192 2026] [security2:error] [pid 2719989:tid 2719989] [client 104.207.53.1:15051] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZc8-DeZzg5tYcWd1CcgAAACI"], referer: https://www.google.com/
[Thu Jul 30 10:29:24.064369 2026] [access_compat:error] [pid 2723647:tid 2723647] [client 85.10.204.21:61817] AH01797: client denied by server configuration: /home/nspandor/public_html/robots.txt
[Thu Jul 30 10:29:24.133338 2026] [access_compat:error] [pid 2723647:tid 2723647] [client 85.10.204.21:61817] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:29:24.316400 2026] [ssl:error] [pid 2723369:tid 2723369] (70014)End of file found: [client 216.73.216.199:59887] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:24.863917 2026] [security2:error] [pid 2726167:tid 2726167] [client 104.207.53.162:50873] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZdGN2kgSld7u2CNqLZQAAACw"]
[Thu Jul 30 10:29:25.117027 2026] [authz_core:error] [pid 2721033:tid 2721033] [client 20.104.22.47:13088] AH01630: client denied by server configuration: /home/winterb/public_html/ezazz/php.ini
[Thu Jul 30 10:29:25.215660 2026] [security2:error] [pid 2726171:tid 2726171] [client 104.207.50.209:50659] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZdXyyXCb82zN6C4B6jAAAADE"], referer: https://t.co/
[Thu Jul 30 10:29:25.467043 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:60844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:25.467093 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:25.523984 2026] [ssl:error] [pid 2719989:tid 2719989] (EAI 2)Name or service not known: [client 144.76.19.72:60852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:25.524006 2026] [ssl:error] [pid 2719989:tid 2719989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:25.547225 2026] [security2:error] [pid 2722297:tid 2722297] [client 216.26.243.224:27439] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZdftvItfiF_mfQ9a5kgAAABU"]
[Thu Jul 30 10:29:25.873136 2026] [security2:error] [pid 2725248:tid 2725248] [client 45.3.54.5:40197] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZdYkKoUZaUQdwYyi3gwAAABA"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:26.199104 2026] [security2:error] [pid 2713568:tid 2713568] [client 45.3.54.60:40865] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZdpOOrwTTZPYnwaKaBgAAAA8"], referer: https://www.bing.com/
[Thu Jul 30 10:29:26.525333 2026] [security2:error] [pid 2724699:tid 2724699] [client 216.26.243.89:52685] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZdsPercwabr0ne7Y5fwAAAAo"]
[Thu Jul 30 10:29:26.875783 2026] [security2:error] [pid 2726166:tid 2726166] [client 104.207.51.111:62349] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZdlIEGECFdJVacwa6VgAAACc"]
[Thu Jul 30 10:29:27.022701 2026] [ssl:error] [pid 2726069:tid 2726069] (70014)End of file found: [client 216.73.216.199:7193] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:28.269918 2026] [security2:error] [pid 2722297:tid 2722297] [client 65.111.23.108:23707] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZePtvItfiF_mfQ9a5kwAAABU"]
[Thu Jul 30 10:29:28.578610 2026] [ssl:error] [pid 2726168:tid 2726168] (EAI 2)Name or service not known: [client 144.76.19.72:60858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:28.578642 2026] [ssl:error] [pid 2726168:tid 2726168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:28.595851 2026] [security2:error] [pid 2721279:tid 2721279] [client 65.111.22.170:17713] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZeIf99O-eetCMzyz1EQAAABM"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:28.632997 2026] [ssl:error] [pid 2719883:tid 2719883] (EAI 2)Name or service not known: [client 144.76.19.72:60862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:28.633020 2026] [ssl:error] [pid 2719883:tid 2719883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:28.980668 2026] [access_compat:error] [pid 2723647:tid 2723647] [client 85.10.204.21:61817] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:29:29.222390 2026] [security2:error] [pid 2723436:tid 2723436] [client 104.207.51.173:50749] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZeWcAvt7GxXkeZIjNTgAAAAM"]
[Thu Jul 30 10:29:29.496501 2026] [lsapi:warn] [pid 2726171:tid 2726171] [client 87.201.112.222:44917] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:29:29.550896 2026] [security2:error] [pid 2719786:tid 2719786] [client 209.50.180.204:51815] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZeRyHAkU-KB8bVQN6CQAAABQ"]
[Thu Jul 30 10:29:29.893629 2026] [security2:error] [pid 2722297:tid 2722297] [client 104.207.50.120:27943] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZeftvItfiF_mfQ9a5lAAAABU"], referer: https://www.google.com/
[Thu Jul 30 10:29:30.032677 2026] [ssl:error] [pid 2709871:tid 2709871] (70014)End of file found: [client 216.73.216.199:64985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:30.216022 2026] [security2:error] [pid 2726168:tid 2726168] [client 65.111.23.252:33627] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZeo5yTTrzIhx3xJt_CAAAAC0"], referer: https://www.facebook.com/
[Thu Jul 30 10:29:30.542444 2026] [security2:error] [pid 2723437:tid 2723437] [client 216.26.243.88:33313] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZeu8t5j305iW3x0uy3wAAAAw"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:30.641512 2026] [autoindex:error] [pid 2721279:tid 2721279] (13)Permission denied: [client 216.73.216.199:41739] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/grafix/
[Thu Jul 30 10:29:30.879495 2026] [security2:error] [pid 2723436:tid 2723436] [client 216.26.244.148:24931] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZemcAvt7GxXkeZIjNTwAAAAM"]
[Thu Jul 30 10:29:30.939895 2026] [ssl:error] [pid 2721279:tid 2721279] (70014)End of file found: [client 216.73.216.199:41739] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:31.208721 2026] [security2:error] [pid 2719786:tid 2719786] [client 45.3.54.191:29213] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZexyHAkU-KB8bVQN6CgAAABQ"], referer: https://wordpress.org/
[Thu Jul 30 10:29:31.540101 2026] [security2:error] [pid 2708019:tid 2708019] [client 216.26.244.41:60501] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZexVjibqdChz1IjbbrwAAAB4"], referer: https://www.bing.com/
[Thu Jul 30 10:29:31.634871 2026] [security2:error] [pid 2719883:tid 2719883] [client 150.5.132.65:35047] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZe5qriEdqXbfKs5GFQwAAAB8"]
[Thu Jul 30 10:29:31.634927 2026] [security2:error] [pid 2719883:tid 2719883] [client 150.5.132.65:35047] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZe5qriEdqXbfKs5GFQwAAAB8"]
[Thu Jul 30 10:29:31.635201 2026] [security2:error] [pid 2719883:tid 2719883] [client 150.5.132.65:35047] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZe5qriEdqXbfKs5GFQwAAAB8"]
[Thu Jul 30 10:29:31.684859 2026] [ssl:error] [pid 2722495:tid 2722495] (EAI 2)Name or service not known: [client 144.76.19.72:58964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:31.684890 2026] [ssl:error] [pid 2722495:tid 2722495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:31.736727 2026] [ssl:error] [pid 2726165:tid 2726165] (EAI 2)Name or service not known: [client 144.76.19.72:58966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:31.736757 2026] [ssl:error] [pid 2726165:tid 2726165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:31.842286 2026] [core:error] [pid 2726170:tid 2726170] [client 66.249.64.170:51667] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:31.842307 2026] [core:error] [pid 2726170:tid 2726170] [client 66.249.64.170:51667] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:31.868062 2026] [security2:error] [pid 2723437:tid 2723437] [client 104.207.51.231:42483] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZe-8t5j305iW3x0uy4AAAAAw"]
[Thu Jul 30 10:29:32.194445 2026] [security2:error] [pid 2723436:tid 2723436] [client 45.3.54.142:35331] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfGcAvt7GxXkeZIjNUAAAAAM"], referer: https://www.google.com/
[Thu Jul 30 10:29:32.521787 2026] [security2:error] [pid 2722495:tid 2722495] [client 104.207.51.167:44085] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfK0TZYu5ofD0PfBUlQAAACo"], referer: https://www.google.com/
[Thu Jul 30 10:29:32.844827 2026] [security2:error] [pid 2723715:tid 2723715] [client 45.3.54.141:12261] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfDCamXGaadxXLRGuQwAAACs"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:33.176200 2026] [security2:error] [pid 2726170:tid 2726170] [client 104.207.51.38:49261] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfZ-FluYTqNyX7qV_qgAAAC8"]
[Thu Jul 30 10:29:33.291853 2026] [security2:error] [pid 2715735:tid 2715735] [client 188.166.244.214:55142] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "apotheekcandidejacobs.be"] [uri "/xmlrpc.php"] [unique_id "amsZfebZn9WRuyQf__gpCQAAAA0"]
[Thu Jul 30 10:29:33.345363 2026] [ssl:error] [pid 2726134:tid 2726134] (70014)End of file found: [client 216.73.216.199:42578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:33.523903 2026] [security2:error] [pid 2726104:tid 2726104] [client 209.50.180.205:9525] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfZg6EoAldtaB4u1tSwAAAAs"]
[Thu Jul 30 10:29:33.883963 2026] [security2:error] [pid 2726166:tid 2726166] [client 45.3.54.244:10641] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfVIEGECFdJVacwa6WQAAACc"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:34.290036 2026] [security2:error] [pid 2723715:tid 2723715] [client 104.207.51.60:30019] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfjCamXGaadxXLRGuRAAAACs"]
[Thu Jul 30 10:29:34.627435 2026] [security2:error] [pid 2715620:tid 2715620] [client 104.207.50.137:37807] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfsSSJB99tPj4H7tT5AAAAAQ"], referer: https://www.google.com/
[Thu Jul 30 10:29:34.794001 2026] [ssl:error] [pid 2725196:tid 2725196] (EAI 2)Name or service not known: [client 144.76.19.72:58980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:34.794028 2026] [ssl:error] [pid 2725196:tid 2725196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:34.840927 2026] [security2:error] [pid 2726104:tid 2726104] [client 157.245.107.90:54166] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amsZfpg6EoAldtaB4u1tTAAAAAs"]
[Thu Jul 30 10:29:34.851482 2026] [ssl:error] [pid 2723647:tid 2723647] (EAI 2)Name or service not known: [client 144.76.19.72:58988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:34.851510 2026] [ssl:error] [pid 2723647:tid 2723647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:34.975934 2026] [security2:error] [pid 2726167:tid 2726167] [client 104.207.51.17:9667] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfmN2kgSld7u2CNqLaAAAACw"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:35.311385 2026] [security2:error] [pid 2723715:tid 2723715] [client 216.26.244.18:34751] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZfzCamXGaadxXLRGuRQAAACs"], referer: https://www.facebook.com/
[Thu Jul 30 10:29:35.886620 2026] [security2:error] [pid 2713568:tid 2713568] [client 104.207.50.137:60551] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZf5OOrwTTZPYnwaKaCAAAAA8"]
[Thu Jul 30 10:29:36.058797 2026] [ssl:error] [pid 2726135:tid 2726135] (70014)End of file found: [client 216.73.216.199:18939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:36.139259 2026] [authz_core:error] [pid 2722494:tid 2722494] [client 20.63.98.115:50704] AH01630: client denied by server configuration: /home/ericashm/public_html/wp/wp-admin/includes/error_log
[Thu Jul 30 10:29:36.231825 2026] [security2:error] [pid 2725196:tid 2725196] [client 104.207.51.85:33265] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZgCSNqCroBtgjvXZDOwAAAAE"], referer: https://t.co/
[Thu Jul 30 10:29:36.542321 2026] [ssl:error] [pid 2723647:tid 2723647] (70014)End of file found: [client 216.73.216.199:10697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:36.558842 2026] [security2:error] [pid 2720994:tid 2720994] [client 209.50.180.20:64381] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZgIHDORjEsbDY7SzFKQAAAAc"], referer: https://wordpress.org/
[Thu Jul 30 10:29:36.880935 2026] [security2:error] [pid 2726165:tid 2726165] [client 104.207.52.163:49987] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZgLoF_rm5o7Irhz-L-QAAACY"], referer: https://t.co/
[Thu Jul 30 10:29:37.907357 2026] [ssl:error] [pid 2726104:tid 2726104] (EAI 2)Name or service not known: [client 144.76.19.72:58998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:37.907403 2026] [ssl:error] [pid 2726104:tid 2726104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:37.962466 2026] [ssl:error] [pid 2724698:tid 2724698] (EAI 2)Name or service not known: [client 144.76.19.72:59008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:37.962509 2026] [ssl:error] [pid 2724698:tid 2724698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:37.968586 2026] [security2:error] [pid 2726167:tid 2726167] [client 216.26.243.85:42601] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZgWN2kgSld7u2CNqLaQAAACw"]
[Thu Jul 30 10:29:38.660325 2026] [ssl:error] [pid 2725196:tid 2725196] (70014)End of file found: [client 216.73.216.199:64178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:39.326857 2026] [authz_core:error] [pid 2726165:tid 2726165] [client 66.249.66.33:61103] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:29:39.329525 2026] [authz_core:error] [pid 2726165:tid 2726165] [client 66.249.66.33:61103] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:29:39.332555 2026] [security2:error] [pid 2713931:tid 2713931] [client 216.26.244.41:41087] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZg7mwEr8-9VCs4FjZJgAAADU"]
[Thu Jul 30 10:29:39.658893 2026] [security2:error] [pid 2726167:tid 2726167] [client 216.26.244.208:32283] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZg2N2kgSld7u2CNqLagAAACw"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:39.992856 2026] [security2:error] [pid 2722495:tid 2722495] [client 45.3.42.163:29675] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZg60TZYu5ofD0PfBUlwAAACo"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:39.993465 2026] [lsapi:warn] [pid 2726104:tid 2726104] [client 87.201.112.222:44880] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:29:40.318013 2026] [security2:error] [pid 2726069:tid 2726069] [client 209.50.180.213:51263] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhBeTTZ6sgj47WJzCgQAAAAA"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:40.642948 2026] [security2:error] [pid 2726168:tid 2726168] [client 216.26.244.60:50213] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhI5yTTrzIhx3xJt_DAAAAC0"]
[Thu Jul 30 10:29:40.966695 2026] [security2:error] [pid 2713931:tid 2713931] [client 45.3.42.247:63575] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhLmwEr8-9VCs4FjZJwAAADU"]
[Thu Jul 30 10:29:41.020337 2026] [ssl:error] [pid 2722297:tid 2722297] (EAI 2)Name or service not known: [client 144.76.19.72:29084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:41.020378 2026] [ssl:error] [pid 2722297:tid 2722297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:41.073646 2026] [ssl:error] [pid 2726167:tid 2726167] (EAI 2)Name or service not known: [client 144.76.19.72:29090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:41.073683 2026] [ssl:error] [pid 2726167:tid 2726167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:41.544652 2026] [security2:error] [pid 2726069:tid 2726069] [client 104.207.52.39:40617] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhReTTZ6sgj47WJzCggAAAAA"]
[Thu Jul 30 10:29:41.840958 2026] [core:error] [pid 2723684:tid 2723684] (13)Permission denied: [client 216.73.216.199:11640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory43/subsystem/uevent
[Thu Jul 30 10:29:41.885010 2026] [security2:error] [pid 2726135:tid 2726135] [client 65.111.23.183:36775] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhe8a7pxzNF_BMQ9fTAAAACM"], referer: https://www.google.com/
[Thu Jul 30 10:29:42.225581 2026] [security2:error] [pid 2708019:tid 2708019] [client 45.3.42.102:59741] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhhVjibqdChz1IjbbsgAAAB4"], referer: https://wordpress.org/
[Thu Jul 30 10:29:42.566607 2026] [security2:error] [pid 2726135:tid 2726135] [client 209.50.180.67:9909] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhu8a7pxzNF_BMQ9fTQAAACM"], referer: https://www.google.com/
[Thu Jul 30 10:29:42.903410 2026] [security2:error] [pid 2719786:tid 2719786] [client 104.207.51.163:9097] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZhhyHAkU-KB8bVQN6DgAAABQ"]
[Thu Jul 30 10:29:43.497035 2026] [security2:error] [pid 2726135:tid 2726135] [client 216.26.243.173:48661] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZh-8a7pxzNF_BMQ9fTgAAACM"], referer: https://t.co/
[Thu Jul 30 10:29:43.553488 2026] [security2:error] [pid 2726797:tid 2726797] [client 43.157.67.70:48862] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wurlitzer.co.uk"] [uri "/"] [unique_id "amsZh63tMKxWf8Pol1nw9QAAAAI"]
[Thu Jul 30 10:29:43.843482 2026] [security2:error] [pid 2726165:tid 2726165] [client 104.207.53.222:29539] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZh7oF_rm5o7Irhz-L-wAAACY"], referer: https://t.co/
[Thu Jul 30 10:29:44.191856 2026] [ssl:error] [pid 2723684:tid 2723684] (70014)End of file found: [client 216.73.216.199:11640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:44.224732 2026] [security2:error] [pid 2719786:tid 2719786] [client 43.157.67.70:57730] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsZiByHAkU-KB8bVQN6EAAAABQ"], referer: http://wurlitzer.co.uk
[Thu Jul 30 10:29:44.492632 2026] [ssl:error] [pid 2713931:tid 2713931] (70014)End of file found: [client 216.73.216.199:6638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:44.508330 2026] [ssl:error] [pid 2726839:tid 2726839] (EAI 2)Name or service not known: [client 144.76.19.72:29092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:44.508375 2026] [ssl:error] [pid 2726839:tid 2726839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:44.576918 2026] [security2:error] [pid 2726839:tid 2726839] [client 45.3.42.199:56549] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZiK6XXUJRp3On7M78UAAAAAU"], referer: https://www.bing.com/
[Thu Jul 30 10:29:44.808875 2026] [ssl:error] [pid 2726839:tid 2726839] (EAI 2)Name or service not known: [client 144.76.19.72:29110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:44.808899 2026] [ssl:error] [pid 2726839:tid 2726839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:45.011758 2026] [security2:error] [pid 2726134:tid 2726134] [client 65.111.22.17:26563] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZiT6tT_hKgY_btkaDbwAAACE"], referer: https://www.facebook.com/
[Thu Jul 30 10:29:45.789803 2026] [security2:error] [pid 2726864:tid 2726864] [client 216.26.243.6:48751] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZiTtQGpllEXNNvl1qLAAAAAg"], referer: https://www.google.com/
[Thu Jul 30 10:29:45.998719 2026] [ssl:error] [pid 2721033:tid 2721033] (70014)End of file found: [client 216.73.216.199:54036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:46.338467 2026] [security2:error] [pid 2726867:tid 2726867] [client 45.3.42.224:61143] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZii_XVUXyajyf2p2GjQAAABc"]
[Thu Jul 30 10:29:46.666667 2026] [security2:error] [pid 2723437:tid 2723437] [client 104.207.53.58:59107] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZiu8t5j305iW3x0uy5AAAAAw"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:46.992614 2026] [security2:error] [pid 2726867:tid 2726867] [client 104.207.52.202:50721] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZii_XVUXyajyf2p2GjgAAABc"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:47.324322 2026] [security2:error] [pid 2726897:tid 2726897] [client 65.111.22.231:48365] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZi018KZjrao7JLV-NfwAAABg"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:47.647992 2026] [security2:error] [pid 2726867:tid 2726867] [client 104.207.51.161:12817] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZiy_XVUXyajyf2p2GjwAAABc"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:47.865375 2026] [ssl:error] [pid 2726901:tid 2726901] (EAI 2)Name or service not known: [client 144.76.19.72:29114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:47.865413 2026] [ssl:error] [pid 2726901:tid 2726901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:47.917483 2026] [ssl:error] [pid 2726902:tid 2726902] (EAI 2)Name or service not known: [client 144.76.19.72:29130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:47.917526 2026] [ssl:error] [pid 2726902:tid 2726902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:49.031031 2026] [security2:error] [pid 2713568:tid 2713568] [client 216.26.243.56:27839] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZjZOOrwTTZPYnwaKaCwAAAA8"], referer: https://www.google.com/
[Thu Jul 30 10:29:49.388215 2026] [security2:error] [pid 2726167:tid 2726167] [client 45.3.54.170:11009] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZjWN2kgSld7u2CNqLbAAAACw"], referer: https://wordpress.org/
[Thu Jul 30 10:29:50.730327 2026] [security2:error] [pid 2725248:tid 2725248] [client 104.207.52.27:36095] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZjokKoUZaUQdwYyi3iQAAABA"], referer: https://www.google.com/
[Thu Jul 30 10:29:50.822389 2026] [lsapi:warn] [pid 2723684:tid 2723684] [client 87.201.112.222:44891] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:29:51.003617 2026] [ssl:error] [pid 2726867:tid 2726867] (EAI 2)Name or service not known: [client 144.76.19.72:20068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:51.003668 2026] [ssl:error] [pid 2726867:tid 2726867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:51.057488 2026] [ssl:error] [pid 2726135:tid 2726135] (EAI 2)Name or service not known: [client 144.76.19.72:20084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:51.057521 2026] [ssl:error] [pid 2726135:tid 2726135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:51.066253 2026] [security2:error] [pid 2726902:tid 2726902] [client 45.3.54.24:13219] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZj7kBsI4VFaebj2kVugAAAC8"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:51.318857 2026] [security2:error] [pid 2722493:tid 2722493] [client 185.191.171.13:31676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/boston-marathon-2023-qualifying-window"] [unique_id "amsZj2Rg5dyAlikSQ3Dw9wAAACg"]
[Thu Jul 30 10:29:51.429649 2026] [core:error] [pid 2722445:tid 2722445] (13)Permission denied: [client 216.73.216.199:55159] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/physical_node/0000:00:07.0/remove
[Thu Jul 30 10:29:51.642152 2026] [security2:error] [pid 2726866:tid 2726866] [client 45.3.54.19:16873] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZj0q0CwjQu4lKjOfELwAAABE"], referer: https://www.facebook.com/
[Thu Jul 30 10:29:51.731083 2026] [ssl:error] [pid 2722445:tid 2722445] (70014)End of file found: [client 216.73.216.199:55159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:51.963976 2026] [security2:error] [pid 2726838:tid 2726838] [client 65.111.22.179:42309] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZj6RVOYu9ktJcTkCdTgAAAAQ"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:29:52.234037 2026] [core:error] [pid 2726867:tid 2726867] [client 66.249.64.170:51655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:52.234084 2026] [core:error] [pid 2726867:tid 2726867] [client 66.249.64.170:51655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:52.349994 2026] [security2:error] [pid 2726135:tid 2726135] [client 216.26.243.135:58659] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkO8a7pxzNF_BMQ9fUgAAACM"], referer: https://www.bing.com/
[Thu Jul 30 10:29:52.691221 2026] [security2:error] [pid 2719883:tid 2719883] [client 104.207.52.196:26875] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkJqriEdqXbfKs5GFSQAAAB8"], referer: https://www.bing.com/
[Thu Jul 30 10:29:52.933765 2026] [security2:error] [pid 2726865:tid 2726865] [client 43.135.133.241:33932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.elhassanartist.com"] [uri "/"] [unique_id "amsZkJ0bxEwlfqVEuu1DmAAAAA0"]
[Thu Jul 30 10:29:52.993028 2026] [security2:error] [pid 2726165:tid 2726165] [client 212.252.73.84:41276] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZkLoF_rm5o7Irhz-L_wAAACY"]
[Thu Jul 30 10:29:52.993100 2026] [security2:error] [pid 2726165:tid 2726165] [client 212.252.73.84:41276] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZkLoF_rm5o7Irhz-L_wAAACY"]
[Thu Jul 30 10:29:52.993352 2026] [security2:error] [pid 2726165:tid 2726165] [client 212.252.73.84:41276] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZkLoF_rm5o7Irhz-L_wAAACY"]
[Thu Jul 30 10:29:53.025692 2026] [security2:error] [pid 2726104:tid 2726104] [client 45.3.54.116:20125] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkZg6EoAldtaB4u1tUAAAAAs"], referer: https://www.bing.com/
[Thu Jul 30 10:29:53.062974 2026] [security2:error] [pid 2721033:tid 2721033] [client 85.208.96.211:64344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.345.html"] [unique_id "amsZkZyOGgHHSeZw8FSzTQAAABI"]
[Thu Jul 30 10:29:53.246047 2026] [access_compat:error] [pid 2726866:tid 2726866] [client 5.127.0.38:33170] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:29:53.371353 2026] [security2:error] [pid 2726838:tid 2726838] [client 209.50.181.19:14941] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkaRVOYu9ktJcTkCdTwAAAAQ"], referer: https://www.google.com/
[Thu Jul 30 10:29:53.720459 2026] [security2:error] [pid 2723684:tid 2723684] [client 209.50.180.46:62045] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkWnzWJDTbcD2vnhBXQAAABo"], referer: https://wordpress.org/
[Thu Jul 30 10:29:54.046551 2026] [security2:error] [pid 2726838:tid 2726838] [client 216.26.244.109:48681] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkqRVOYu9ktJcTkCdUAAAAAQ"]
[Thu Jul 30 10:29:54.115536 2026] [ssl:error] [pid 2726104:tid 2726104] (EAI 2)Name or service not known: [client 144.76.19.72:20090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:54.115562 2026] [ssl:error] [pid 2726104:tid 2726104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:54.168091 2026] [ssl:error] [pid 2726903:tid 2726903] (EAI 2)Name or service not known: [client 144.76.19.72:20100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:54.168120 2026] [ssl:error] [pid 2726903:tid 2726903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:54.429836 2026] [security2:error] [pid 2726104:tid 2726104] [client 43.135.133.241:34618] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "elhassanartist.com"] [uri "/"] [unique_id "amsZkpg6EoAldtaB4u1tUQAAAAs"], referer: http://www.elhassanartist.com
[Thu Jul 30 10:29:54.620461 2026] [security2:error] [pid 2726903:tid 2726903] [client 104.207.51.119:34651] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkuObDaIRbMJ5K24K9gAAADE"], referer: https://duckduckgo.com/
[Thu Jul 30 10:29:54.968564 2026] [security2:error] [pid 2723684:tid 2723684] [client 104.207.50.79:36649] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZkmnzWJDTbcD2vnhBXwAAABo"], referer: https://www.google.com/
[Thu Jul 30 10:29:55.168701 2026] [core:error] [pid 2726838:tid 2726838] [client 66.249.64.170:39363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:55.168732 2026] [core:error] [pid 2726838:tid 2726838] [client 66.249.64.170:39363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:29:55.514275 2026] [security2:error] [pid 2719989:tid 2719989] [client 65.111.22.86:17563] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZk8-DeZzg5tYcWd1CeQAAACI"], referer: https://t.co/
[Thu Jul 30 10:29:55.531605 2026] [ssl:error] [pid 2722495:tid 2722495] (70014)End of file found: [client 216.73.216.199:43944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:55.839501 2026] [security2:error] [pid 2726897:tid 2726897] [client 45.3.42.72:46943] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZk018KZjrao7JLV-NgAAAABg"], referer: https://wordpress.org/
[Thu Jul 30 10:29:55.841276 2026] [ssl:error] [pid 2708019:tid 2708019] (70014)End of file found: [client 216.73.216.199:2674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:56.135654 2026] [core:error] [pid 2719883:tid 2719883] (13)Permission denied: [client 216.73.216.199:23200] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory23/subsystem/uevent
[Thu Jul 30 10:29:56.216766 2026] [security2:error] [pid 2722494:tid 2722494] [client 65.111.23.139:59965] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZlIzByg2-cixuheaA8gAAACk"]
[Thu Jul 30 10:29:56.246716 2026] [ssl:error] [pid 2719883:tid 2719883] (70014)End of file found: [client 216.73.216.199:23200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:29:56.340723 2026] [security2:error] [pid 2722297:tid 2722297] [client 47.128.98.43:45800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/robots.txt"] [unique_id "amsZlPtvItfiF_mfQ9a5mwAAABU"]
[Thu Jul 30 10:29:56.566329 2026] [security2:error] [pid 2726135:tid 2726135] [client 45.3.42.152:18135] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZlO8a7pxzNF_BMQ9fVwAAACM"], referer: https://www.bing.com/
[Thu Jul 30 10:29:56.897751 2026] [security2:error] [pid 2719786:tid 2719786] [client 45.3.42.193:30591] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZlByHAkU-KB8bVQN6EwAAABQ"], referer: https://t.co/
[Thu Jul 30 10:29:57.222079 2026] [ssl:error] [pid 2722445:tid 2722445] (EAI 2)Name or service not known: [client 144.76.19.72:20106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:57.222110 2026] [ssl:error] [pid 2722445:tid 2722445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:57.234055 2026] [security2:error] [pid 2719989:tid 2719989] [client 104.207.52.135:19709] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZlc-DeZzg5tYcWd1CfAAAACI"]
[Thu Jul 30 10:29:57.274875 2026] [ssl:error] [pid 2726897:tid 2726897] (EAI 2)Name or service not known: [client 144.76.19.72:20120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:29:57.274906 2026] [ssl:error] [pid 2726897:tid 2726897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:29:57.567158 2026] [security2:error] [pid 2726864:tid 2726864] [client 65.111.23.44:53787] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZlTtQGpllEXNNvl1qMAAAAAg"], referer: https://www.facebook.com/
[Thu Jul 30 10:29:57.908875 2026] [security2:error] [pid 2722494:tid 2722494] [client 45.3.54.181:57519] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZlYzByg2-cixuheaA9AAAACk"]
[Thu Jul 30 10:29:58.586781 2026] [security2:error] [pid 2723436:tid 2723436] [client 47.128.98.43:49292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hornsey-town-hall.org.uk"] [uri "/robots.txt"] [unique_id "amsZlmcAvt7GxXkeZIjNVAAAAAM"]
[Thu Jul 30 10:29:59.279410 2026] [security2:error] [pid 2720994:tid 2720994] [client 209.50.181.112:64063] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZl4HDORjEsbDY7SzFLwAAAAc"], referer: https://www.google.com/
[Thu Jul 30 10:29:59.603353 2026] [security2:error] [pid 2722297:tid 2722297] [client 45.3.42.150:46789] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZl_tvItfiF_mfQ9a5nQAAABU"]
[Thu Jul 30 10:29:59.929637 2026] [security2:error] [pid 2726902:tid 2726902] [client 216.26.243.207:34047] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZl7kBsI4VFaebj2kVvgAAAC8"]
[Thu Jul 30 10:30:00.261102 2026] [security2:error] [pid 2723437:tid 2723437] [client 65.111.22.219:36163] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZmO8t5j305iW3x0uy6AAAAAw"]
[Thu Jul 30 10:30:00.327520 2026] [ssl:error] [pid 2721033:tid 2721033] (EAI 2)Name or service not known: [client 144.76.19.72:56658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:00.327550 2026] [ssl:error] [pid 2721033:tid 2721033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:00.380526 2026] [ssl:error] [pid 2726135:tid 2726135] (EAI 2)Name or service not known: [client 144.76.19.72:56668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:00.380552 2026] [ssl:error] [pid 2726135:tid 2726135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:00.590510 2026] [security2:error] [pid 2722297:tid 2722297] [client 104.207.52.157:12271] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZmPtvItfiF_mfQ9a5ngAAABU"], referer: https://www.facebook.com/
[Thu Jul 30 10:30:00.946724 2026] [security2:error] [pid 2726902:tid 2726902] [client 45.3.42.229:42571] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZmLkBsI4VFaebj2kVvwAAAC8"]
[Thu Jul 30 10:30:01.062118 2026] [lsapi:warn] [pid 2726867:tid 2726867] [client 87.201.112.222:58723] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:01.380944 2026] [core:error] [pid 2713931:tid 2713931] (13)Permission denied: [client 216.73.216.199:48607] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory162/subsystem/uevent
[Thu Jul 30 10:30:01.682552 2026] [ssl:error] [pid 2713931:tid 2713931] (70014)End of file found: [client 216.73.216.199:48607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:02.407637 2026] [security2:error] [pid 2726135:tid 2726135] [client 209.50.181.51:34515] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZmu8a7pxzNF_BMQ9fXQAAACM"], referer: https://www.bing.com/
[Thu Jul 30 10:30:02.586503 2026] [ssl:error] [pid 2722495:tid 2722495] (70014)End of file found: [client 216.73.216.199:27133] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:02.768905 2026] [security2:error] [pid 2719883:tid 2719883] [client 104.207.52.18:52541] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZmpqriEdqXbfKs5GFTwAAAB8"]
[Thu Jul 30 10:30:03.103280 2026] [security2:error] [pid 2722297:tid 2722297] [client 104.207.50.153:39025] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZm_tvItfiF_mfQ9a5oAAAABU"], referer: https://duckduckgo.com/
[Thu Jul 30 10:30:03.189270 2026] [core:error] [pid 2726864:tid 2726864] (13)Permission denied: [client 216.73.216.199:31266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/kvm_intel/uevent
[Thu Jul 30 10:30:03.438769 2026] [ssl:error] [pid 2726900:tid 2726900] (EAI 2)Name or service not known: [client 144.76.19.72:56670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:03.438804 2026] [ssl:error] [pid 2726900:tid 2726900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:03.442993 2026] [security2:error] [pid 2725196:tid 2725196] [client 216.26.244.186:35747] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZmySNqCroBtgjvXZDQwAAAAE"], referer: https://www.google.com/
[Thu Jul 30 10:30:03.492504 2026] [ssl:error] [pid 2723437:tid 2723437] (EAI 2)Name or service not known: [client 144.76.19.72:56672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:03.492531 2026] [ssl:error] [pid 2723437:tid 2723437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:03.779581 2026] [security2:error] [pid 2726168:tid 2726168] [client 45.3.42.74:24679] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZm45yTTrzIhx3xJt_EwAAAC0"]
[Thu Jul 30 10:30:04.135554 2026] [security2:error] [pid 2719883:tid 2719883] [client 65.111.22.74:37233] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnJqriEdqXbfKs5GFUAAAAB8"], referer: https://wordpress.org/
[Thu Jul 30 10:30:04.473905 2026] [security2:error] [pid 2723714:tid 2723714] [client 209.50.181.195:29081] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnMXCSRbbSr1XasYaUgAAACA"], referer: https://www.facebook.com/
[Thu Jul 30 10:30:04.798262 2026] [authz_core:error] [pid 2719989:tid 2719989] [client 66.249.66.35:53947] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:30:04.800918 2026] [authz_core:error] [pid 2719989:tid 2719989] [client 66.249.66.35:53947] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:30:04.898050 2026] [security2:error] [pid 2726168:tid 2726168] [client 65.111.23.92:13571] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnI5yTTrzIhx3xJt_FAAAAC0"]
[Thu Jul 30 10:30:05.233668 2026] [security2:error] [pid 2726900:tid 2726900] [client 104.207.52.204:40051] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnVx8dE6CelgGDwYb2QAAACQ"], referer: https://wordpress.org/
[Thu Jul 30 10:30:05.705691 2026] [security2:error] [pid 2723714:tid 2723714] [client 163.7.13.53:10989] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZncXCSRbbSr1XasYaUwAAACA"]
[Thu Jul 30 10:30:05.705741 2026] [security2:error] [pid 2723714:tid 2723714] [client 163.7.13.53:10989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZncXCSRbbSr1XasYaUwAAACA"]
[Thu Jul 30 10:30:05.705978 2026] [security2:error] [pid 2723714:tid 2723714] [client 163.7.13.53:10989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZncXCSRbbSr1XasYaUwAAACA"]
[Thu Jul 30 10:30:05.718466 2026] [security2:error] [pid 2713568:tid 2713568] [client 209.50.181.202:21363] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnZOOrwTTZPYnwaKaEwAAAA8"], referer: https://wordpress.org/
[Thu Jul 30 10:30:06.054619 2026] [security2:error] [pid 2726069:tid 2726069] [client 45.3.54.237:25723] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnheTTZ6sgj47WJzCiQAAAAA"]
[Thu Jul 30 10:30:06.399738 2026] [security2:error] [pid 2713568:tid 2713568] [client 104.207.52.238:20545] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnpOOrwTTZPYnwaKaFAAAAA8"], referer: https://www.google.com/
[Thu Jul 30 10:30:06.548397 2026] [ssl:error] [pid 2726866:tid 2726866] (EAI 2)Name or service not known: [client 144.76.19.72:56674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:06.548432 2026] [ssl:error] [pid 2726866:tid 2726866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:06.602086 2026] [ssl:error] [pid 2719883:tid 2719883] (EAI 2)Name or service not known: [client 144.76.19.72:56688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:06.602116 2026] [ssl:error] [pid 2719883:tid 2719883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:06.727932 2026] [security2:error] [pid 2726897:tid 2726897] [client 45.3.54.91:58661] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnk18KZjrao7JLV-NhAAAABg"]
[Thu Jul 30 10:30:07.061022 2026] [security2:error] [pid 2726866:tid 2726866] [client 209.50.181.190:31821] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZn0q0CwjQu4lKjOfEOQAAABE"]
[Thu Jul 30 10:30:07.395970 2026] [security2:error] [pid 2726165:tid 2726165] [client 104.207.50.25:56809] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZn7oF_rm5o7Irhz-MBwAAACY"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:30:07.702978 2026] [core:error] [pid 2726864:tid 2726864] (13)Permission denied: [client 216.73.216.199:31266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/min_partial
[Thu Jul 30 10:30:07.724644 2026] [security2:error] [pid 2726904:tid 2726904] [client 209.50.181.189:61887] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZnxmVJmilKU5VF3jvZAAAADI"], referer: https://www.google.com/
[Thu Jul 30 10:30:08.004678 2026] [core:error] [pid 2726864:tid 2726864] (13)Permission denied: [client 216.73.216.199:31266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-160/cpu_slabs
[Thu Jul 30 10:30:08.900515 2026] [security2:error] [pid 2726165:tid 2726165] [client 101.47.24.241:42891] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZoLoF_rm5o7Irhz-MCQAAACY"]
[Thu Jul 30 10:30:08.900568 2026] [security2:error] [pid 2726165:tid 2726165] [client 101.47.24.241:42891] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZoLoF_rm5o7Irhz-MCQAAACY"]
[Thu Jul 30 10:30:08.900814 2026] [security2:error] [pid 2726165:tid 2726165] [client 101.47.24.241:42891] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZoLoF_rm5o7Irhz-MCQAAACY"]
[Thu Jul 30 10:30:09.657325 2026] [ssl:error] [pid 2723684:tid 2723684] (EAI 2)Name or service not known: [client 144.76.19.72:28526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:09.657354 2026] [ssl:error] [pid 2723684:tid 2723684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:09.714750 2026] [ssl:error] [pid 2722495:tid 2722495] (EAI 2)Name or service not known: [client 144.76.19.72:28534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:09.714880 2026] [ssl:error] [pid 2722495:tid 2722495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:10.112883 2026] [core:error] [pid 2726864:tid 2726864] (13)Permission denied: [client 216.73.216.199:31266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_1k/slabs
[Thu Jul 30 10:30:10.412422 2026] [security2:error] [pid 2726864:tid 2726864] [client 216.73.216.199:31266] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/openldap/ldap.conf"] [unique_id "amsZojtQGpllEXNNvl1qSwAAAAg"]
[Thu Jul 30 10:30:10.412684 2026] [security2:error] [pid 2726864:tid 2726864] [client 216.73.216.199:31266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/openldap/ldap.conf"] [unique_id "amsZojtQGpllEXNNvl1qSwAAAAg"]
[Thu Jul 30 10:30:10.412881 2026] [security2:error] [pid 2726864:tid 2726864] [client 216.73.216.199:31266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/openldap/ldap.conf"] [unique_id "amsZojtQGpllEXNNvl1qSwAAAAg"]
[Thu Jul 30 10:30:10.714571 2026] [core:error] [pid 2726864:tid 2726864] (13)Permission denied: [client 216.73.216.199:31266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory249/subsystem/uevent
[Thu Jul 30 10:30:11.078737 2026] [security2:error] [pid 2722494:tid 2722494] [client 209.50.181.240:14005] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZo4zByg2-cixuheaA-wAAACk"]
[Thu Jul 30 10:30:11.251123 2026] [authz_core:error] [pid 2708019:tid 2708019] [client 66.249.66.33:34997] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:30:11.253779 2026] [authz_core:error] [pid 2708019:tid 2708019] [client 66.249.66.33:34997] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:30:11.319276 2026] [core:error] [pid 2726864:tid 2726864] (13)Permission denied: [client 216.73.216.199:31266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_dqtrx/ctor
[Thu Jul 30 10:30:11.628167 2026] [security2:error] [pid 2720994:tid 2720994] [client 104.207.50.76:30165] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZo4HDORjEsbDY7SzFNgAAAAc"], referer: https://t.co/
[Thu Jul 30 10:30:11.941510 2026] [lsapi:warn] [pid 2726865:tid 2726865] [client 87.201.112.222:44910] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:11.967241 2026] [security2:error] [pid 2720994:tid 2720994] [client 45.3.54.4:42403] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZo4HDORjEsbDY7SzFNwAAAAc"], referer: https://www.facebook.com/
[Thu Jul 30 10:30:12.159674 2026] [security2:error] [pid 2726839:tid 2726839] [client 20.171.55.167:2006] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.butteredcat.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZpK6XXUJRp3On7M78sAAAAAU"]
[Thu Jul 30 10:30:12.159882 2026] [security2:error] [pid 2726839:tid 2726839] [client 20.171.55.167:2006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.butteredcat.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZpK6XXUJRp3On7M78sAAAAAU"]
[Thu Jul 30 10:30:12.160134 2026] [security2:error] [pid 2726839:tid 2726839] [client 20.171.55.167:2006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.butteredcat.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZpK6XXUJRp3On7M78sAAAAAU"]
[Thu Jul 30 10:30:12.293541 2026] [security2:error] [pid 2726165:tid 2726165] [client 209.50.181.69:51065] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZpLoF_rm5o7Irhz-MDQAAACY"], referer: https://wordpress.org/
[Thu Jul 30 10:30:12.747154 2026] [security2:error] [pid 2726165:tid 2726165] [client 101.47.24.241:15893] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZpLoF_rm5o7Irhz-MEAAAACY"]
[Thu Jul 30 10:30:12.747241 2026] [security2:error] [pid 2726165:tid 2726165] [client 101.47.24.241:15893] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZpLoF_rm5o7Irhz-MEAAAACY"]
[Thu Jul 30 10:30:12.747619 2026] [security2:error] [pid 2726165:tid 2726165] [client 101.47.24.241:15893] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZpLoF_rm5o7Irhz-MEAAAACY"]
[Thu Jul 30 10:30:12.960629 2026] [security2:error] [pid 2726165:tid 2726165] [client 104.207.52.68:45753] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZpLoF_rm5o7Irhz-MEQAAACY"]
[Thu Jul 30 10:30:13.185888 2026] [lsapi:warn] [pid 2728122:tid 2728122] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:13.194332 2026] [ssl:error] [pid 2726165:tid 2726165] (EAI 2)Name or service not known: [client 144.76.19.72:28550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:13.194367 2026] [ssl:error] [pid 2726165:tid 2726165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:13.580853 2026] [ssl:error] [pid 2728162:tid 2728162] (EAI 2)Name or service not known: [client 144.76.19.72:28556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:13.580894 2026] [ssl:error] [pid 2728162:tid 2728162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:13.676289 2026] [security2:error] [pid 2728162:tid 2728162] [client 65.111.22.166:46681] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZpUhAdKFwa-5wNbvJfAAAAAw"]
[Thu Jul 30 10:30:14.041179 2026] [security2:error] [pid 2726165:tid 2726165] [client 104.207.53.3:41787] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZproF_rm5o7Irhz-MFQAAACY"], referer: https://www.facebook.com/
[Thu Jul 30 10:30:14.339745 2026] [ssl:error] [pid 2713568:tid 2713568] (70014)End of file found: [client 216.73.216.199:25570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:14.402583 2026] [security2:error] [pid 2723436:tid 2723436] [client 104.207.53.223:18435] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZpmcAvt7GxXkeZIjNWAAAAAM"]
[Thu Jul 30 10:30:14.738691 2026] [security2:error] [pid 2726867:tid 2726867] [client 216.26.243.125:20335] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZpi_XVUXyajyf2p2GnQAAABc"], referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 10:30:15.157179 2026] [security2:error] [pid 2726165:tid 2726165] [client 65.111.23.98:9089] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZp7oF_rm5o7Irhz-MFwAAACY"], referer: https://www.bing.com/
[Thu Jul 30 10:30:15.417805 2026] [core:error] [pid 2720994:tid 2720994] [client 66.249.64.171:46742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:15.417832 2026] [core:error] [pid 2720994:tid 2720994] [client 66.249.64.171:46742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:15.486648 2026] [security2:error] [pid 2726797:tid 2726797] [client 216.26.243.28:21723] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZp63tMKxWf8Pol1nxAAAAAAI"]
[Thu Jul 30 10:30:15.595535 2026] [core:error] [pid 2726897:tid 2726897] [client 66.249.66.194:62761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:15.595567 2026] [core:error] [pid 2726897:tid 2726897] [client 66.249.66.194:62761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:15.596250 2026] [core:error] [pid 2726839:tid 2726839] [client 66.249.66.167:37202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:15.596268 2026] [core:error] [pid 2726839:tid 2726839] [client 66.249.66.167:37202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:15.834472 2026] [security2:error] [pid 2726165:tid 2726165] [client 65.111.22.122:29853] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZp7oF_rm5o7Irhz-MGAAAACY"], referer: https://www.facebook.com/
[Thu Jul 30 10:30:16.165669 2026] [security2:error] [pid 2723436:tid 2723436] [client 216.26.244.21:29959] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqGcAvt7GxXkeZIjNWwAAAAM"]
[Thu Jul 30 10:30:16.633977 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:28558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:16.634006 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:16.687967 2026] [ssl:error] [pid 2726898:tid 2726898] (EAI 2)Name or service not known: [client 144.76.19.72:28568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:16.687994 2026] [ssl:error] [pid 2726898:tid 2726898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:16.762023 2026] [security2:error] [pid 2725196:tid 2725196] [client 209.50.180.159:32005] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqCSNqCroBtgjvXZDRAAAAAE"], referer: https://www.bing.com/
[Thu Jul 30 10:30:17.103765 2026] [security2:error] [pid 2726167:tid 2726167] [client 104.207.50.76:19159] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqWN2kgSld7u2CNqLeQAAACw"], referer: https://wordpress.org/
[Thu Jul 30 10:30:17.430929 2026] [security2:error] [pid 2726898:tid 2726898] [client 216.26.244.134:39851] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqRqWZQiqsvXXaA_5cwAAABk"], referer: https://www.google.com/
[Thu Jul 30 10:30:17.668085 2026] [core:error] [pid 2726864:tid 2726864] (13)Permission denied: [client 216.73.216.199:31266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/graphics/fb0/device/driver/uevent
[Thu Jul 30 10:30:17.769300 2026] [security2:error] [pid 2725196:tid 2725196] [client 209.50.181.221:29739] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqSSNqCroBtgjvXZDRQAAAAE"], referer: https://t.co/
[Thu Jul 30 10:30:18.101895 2026] [security2:error] [pid 2726797:tid 2726797] [client 216.26.243.211:40693] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqq3tMKxWf8Pol1nxAwAAAAI"], referer: https://wordpress.org/
[Thu Jul 30 10:30:18.449088 2026] [security2:error] [pid 2708019:tid 2708019] [client 45.3.42.19:48905] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqhVjibqdChz1IjbbwgAAAB4"], referer: https://t.co/
[Thu Jul 30 10:30:18.577860 2026] [ssl:error] [pid 2726864:tid 2726864] (70014)End of file found: [client 216.73.216.199:31266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:18.773147 2026] [security2:error] [pid 2722494:tid 2722494] [client 65.111.23.175:11857] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqozByg2-cixuheaA_gAAACk"], referer: https://www.bing.com/
[Thu Jul 30 10:30:19.104143 2026] [security2:error] [pid 2726167:tid 2726167] [client 45.3.54.138:59771] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZq2N2kgSld7u2CNqLewAAACw"]
[Thu Jul 30 10:30:19.446474 2026] [security2:error] [pid 2721033:tid 2721033] [client 104.207.52.201:44735] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZq5yOGgHHSeZw8FSzVAAAABI"]
[Thu Jul 30 10:30:19.746813 2026] [ssl:error] [pid 2722445:tid 2722445] (EAI 2)Name or service not known: [client 144.76.19.72:50846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:19.746842 2026] [ssl:error] [pid 2722445:tid 2722445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:19.791940 2026] [security2:error] [pid 2719786:tid 2719786] [client 216.26.243.151:48835] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZqxyHAkU-KB8bVQN6GwAAABQ"]
[Thu Jul 30 10:30:19.806118 2026] [ssl:error] [pid 2726797:tid 2726797] (EAI 2)Name or service not known: [client 144.76.19.72:50862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:19.806145 2026] [ssl:error] [pid 2726797:tid 2726797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:19.911480 2026] [security2:error] [pid 2725196:tid 2725196] [client 163.53.244.84:34036] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "multipart/mixed"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "www.spamp.com"] [uri "/"] [unique_id "amsZqySNqCroBtgjvXZDSAAAAAE"]
[Thu Jul 30 10:30:19.912176 2026] [security2:error] [pid 2725196:tid 2725196] [client 163.53.244.84:34036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.spamp.com"] [uri "/"] [unique_id "amsZqySNqCroBtgjvXZDSAAAAAE"]
[Thu Jul 30 10:30:20.099583 2026] [security2:error] [pid 2725196:tid 2725196] [client 163.53.244.84:34036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "www.spamp.com"] [uri "/index.php"] [unique_id "amsZqySNqCroBtgjvXZDSAAAAAE"]
[Thu Jul 30 10:30:20.130859 2026] [security2:error] [pid 2726867:tid 2726867] [client 45.3.54.211:51271] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrC_XVUXyajyf2p2GowAAABc"], referer: https://www.google.com/
[Thu Jul 30 10:30:20.157149 2026] [security2:error] [pid 2722445:tid 2722445] [client 185.191.171.16:38902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "4k-monitors.co.uk"] [uri "/robots.txt"] [unique_id "amsZrP7-unxYUYNOjJrpNwAAABw"]
[Thu Jul 30 10:30:20.461132 2026] [security2:error] [pid 2719786:tid 2719786] [client 104.207.51.27:23365] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrByHAkU-KB8bVQN6HAAAABQ"]
[Thu Jul 30 10:30:20.792819 2026] [security2:error] [pid 2723436:tid 2723436] [client 45.3.54.199:39371] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrGcAvt7GxXkeZIjNYQAAAAM"], referer: https://www.bing.com/
[Thu Jul 30 10:30:20.812544 2026] [core:error] [pid 2726904:tid 2726904] [client 66.249.66.8:55378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:20.812569 2026] [core:error] [pid 2726904:tid 2726904] [client 66.249.66.8:55378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:20.882332 2026] [lsapi:warn] [pid 2725196:tid 2725196] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:20.995500 2026] [ssl:error] [pid 2719883:tid 2719883] (70014)End of file found: [client 216.73.216.199:64855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:21.127477 2026] [security2:error] [pid 2726867:tid 2726867] [client 209.50.180.202:25429] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrS_XVUXyajyf2p2GpAAAABc"], referer: https://www.facebook.com/
[Thu Jul 30 10:30:21.302141 2026] [ssl:error] [pid 2713568:tid 2713568] (70014)End of file found: [client 216.73.216.199:33766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:21.454151 2026] [security2:error] [pid 2719786:tid 2719786] [client 104.207.52.178:23209] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrRyHAkU-KB8bVQN6HQAAABQ"]
[Thu Jul 30 10:30:21.781284 2026] [security2:error] [pid 2722445:tid 2722445] [client 209.50.180.87:18633] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrf7-unxYUYNOjJrpOAAAABw"]
[Thu Jul 30 10:30:21.855911 2026] [security2:error] [pid 2726867:tid 2726867] [client 74.7.242.47:38600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bids.outsource-it-now.com"] [uri "/"] [unique_id "amsZrS_XVUXyajyf2p2GpQAAABc"]
[Thu Jul 30 10:30:22.112029 2026] [security2:error] [pid 2726838:tid 2726838] [client 45.3.54.175:15409] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrqRVOYu9ktJcTkCdWwAAAAQ"], referer: https://www.google.com/
[Thu Jul 30 10:30:22.387144 2026] [lsapi:warn] [pid 2726904:tid 2726904] [client 87.201.112.222:23201] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:22.441324 2026] [security2:error] [pid 2722445:tid 2722445] [client 65.111.22.193:26697] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrv7-unxYUYNOjJrpOQAAABw"], referer: https://duckduckgo.com/
[Thu Jul 30 10:30:22.819379 2026] [security2:error] [pid 2728479:tid 2728479] [client 216.26.243.236:35343] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrnN65j64Q5P10tUqVQAAAAA"]
[Thu Jul 30 10:30:22.883062 2026] [ssl:error] [pid 2722445:tid 2722445] (EAI 2)Name or service not known: [client 144.76.19.72:50872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:22.883104 2026] [ssl:error] [pid 2722445:tid 2722445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:23.029147 2026] [ssl:error] [pid 2723715:tid 2723715] (EAI 2)Name or service not known: [client 144.76.19.72:50888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:23.029173 2026] [ssl:error] [pid 2723715:tid 2723715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:23.222796 2026] [security2:error] [pid 2723715:tid 2723715] [client 104.207.53.232:41303] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZrzCamXGaadxXLRGuVAAAACs"]
[Thu Jul 30 10:30:23.648774 2026] [security2:error] [pid 2728479:tid 2728479] [client 104.207.51.145:32705] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZr3N65j64Q5P10tUqVwAAAAA"]
[Thu Jul 30 10:30:23.883287 2026] [authz_core:error] [pid 2728517:tid 2728517] [client 82.102.18.190:45296] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/modules/sendinblue/error_log
[Thu Jul 30 10:30:24.027328 2026] [security2:error] [pid 2726864:tid 2726864] [client 216.26.244.83:31545] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZsDtQGpllEXNNvl1qZgAAAAg"]
[Thu Jul 30 10:30:24.394789 2026] [security2:error] [pid 2728518:tid 2728518] [client 104.207.53.21:42407] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hbsanorth.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsZsOUXDpgdEDgD57gFEwAAABA"]
[Thu Jul 30 10:30:26.127910 2026] [ssl:error] [pid 2720994:tid 2720994] (EAI 2)Name or service not known: [client 144.76.19.72:50890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:26.127940 2026] [ssl:error] [pid 2720994:tid 2720994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:26.179430 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:50894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:26.179458 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:26.323608 2026] [security2:error] [pid 2722297:tid 2722297] [client 94.154.43.188:45192] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "highcleresyndicates.co.uk"] [uri "/.env"] [unique_id "amsZsvtvItfiF_mfQ9a5rQAAABU"]
[Thu Jul 30 10:30:26.323790 2026] [security2:error] [pid 2722297:tid 2722297] [client 94.154.43.188:45192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "highcleresyndicates.co.uk"] [uri "/.env"] [unique_id "amsZsvtvItfiF_mfQ9a5rQAAABU"]
[Thu Jul 30 10:30:26.323994 2026] [security2:error] [pid 2722297:tid 2722297] [client 94.154.43.188:45192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "highcleresyndicates.co.uk"] [uri "/.env"] [unique_id "amsZsvtvItfiF_mfQ9a5rQAAABU"]
[Thu Jul 30 10:30:27.191991 2026] [ssl:error] [pid 2723715:tid 2723715] (70014)End of file found: [client 216.73.216.199:7326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:27.833465 2026] [authz_core:error] [pid 2722494:tid 2722494] [client 74.248.16.8:8188] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 10:30:28.096941 2026] [ssl:error] [pid 2713568:tid 2713568] (70014)End of file found: [client 216.73.216.199:15809] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:29.236186 2026] [ssl:error] [pid 2726901:tid 2726901] (EAI 2)Name or service not known: [client 144.76.19.72:50904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:29.236213 2026] [ssl:error] [pid 2726901:tid 2726901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:29.293459 2026] [ssl:error] [pid 2725196:tid 2725196] (EAI 2)Name or service not known: [client 144.76.19.72:50906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:29.293481 2026] [ssl:error] [pid 2725196:tid 2725196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:29.459283 2026] [security2:error] [pid 2728162:tid 2728162] [client 94.154.43.177:50786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "p2studio.co.uk"] [uri "/.env"] [unique_id "amsZtUhAdKFwa-5wNbvJfwAAAAw"]
[Thu Jul 30 10:30:29.459429 2026] [security2:error] [pid 2728162:tid 2728162] [client 94.154.43.177:50786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "p2studio.co.uk"] [uri "/.env"] [unique_id "amsZtUhAdKFwa-5wNbvJfwAAAAw"]
[Thu Jul 30 10:30:29.459590 2026] [security2:error] [pid 2728162:tid 2728162] [client 94.154.43.177:50786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "p2studio.co.uk"] [uri "/403.shtml"] [unique_id "amsZtUhAdKFwa-5wNbvJfwAAAAw"]
[Thu Jul 30 10:30:30.535645 2026] [core:error] [pid 2721865:tid 2721865] (13)Permission denied: [client 216.73.216.199:5929] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory18/subsystem/uevent
[Thu Jul 30 10:30:31.440784 2026] [ssl:error] [pid 2721865:tid 2721865] (70014)End of file found: [client 216.73.216.199:5929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:31.485265 2026] [lsapi:warn] [pid 2726839:tid 2726839] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:32.352334 2026] [ssl:error] [pid 2726135:tid 2726135] (EAI 2)Name or service not known: [client 144.76.19.72:45246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:32.352361 2026] [ssl:error] [pid 2726135:tid 2726135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:32.403892 2026] [ssl:error] [pid 2728479:tid 2728479] (EAI 2)Name or service not known: [client 144.76.19.72:45262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:32.403920 2026] [ssl:error] [pid 2728479:tid 2728479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:33.062841 2026] [lsapi:warn] [pid 2713931:tid 2713931] [client 87.201.112.222:23212] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:33.548816 2026] [core:error] [pid 2726797:tid 2726797] (13)Permission denied: [client 216.73.216.199:40352] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory192/subsystem/uevent
[Thu Jul 30 10:30:35.457948 2026] [ssl:error] [pid 2726135:tid 2726135] (EAI 2)Name or service not known: [client 144.76.19.72:45272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:35.457987 2026] [ssl:error] [pid 2726135:tid 2726135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:35.512656 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:45274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:35.512681 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:35.663824 2026] [core:error] [pid 2726797:tid 2726797] (13)Permission denied: [client 216.73.216.199:40352] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS1/flags
[Thu Jul 30 10:30:36.064542 2026] [core:error] [pid 2722445:tid 2722445] [client 66.249.64.170:60096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:36.064567 2026] [core:error] [pid 2722445:tid 2722445] [client 66.249.64.170:60096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:36.240638 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.66.3:47705] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:36.240666 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.66.3:47705] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:36.898282 2026] [core:error] [pid 2713931:tid 2713931] (13)Permission denied: [client 216.73.216.199:19172] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/slab_size
[Thu Jul 30 10:30:37.199899 2026] [core:error] [pid 2713931:tid 2713931] (13)Permission denied: [client 216.73.216.199:19172] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/hwcache_align
[Thu Jul 30 10:30:37.573834 2026] [access_compat:error] [pid 2726867:tid 2726867] [client 103.151.172.84:59857] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/10/mark_king_cambridge_level_42.jpg
[Thu Jul 30 10:30:37.573931 2026] [access_compat:error] [pid 2726867:tid 2726867] [client 103.151.172.84:59857] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:30:38.109358 2026] [ssl:error] [pid 2713931:tid 2713931] (70014)End of file found: [client 216.73.216.199:19172] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:38.570473 2026] [ssl:error] [pid 2723714:tid 2723714] (EAI 2)Name or service not known: [client 144.76.19.72:45276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:38.570508 2026] [ssl:error] [pid 2723714:tid 2723714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:38.624361 2026] [ssl:error] [pid 2728957:tid 2728957] (EAI 2)Name or service not known: [client 144.76.19.72:45282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:38.624397 2026] [ssl:error] [pid 2728957:tid 2728957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:39.016721 2026] [ssl:error] [pid 2726135:tid 2726135] (70014)End of file found: [client 216.73.216.199:63077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:39.120007 2026] [core:error] [pid 2723436:tid 2723436] [client 66.249.66.168:49168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:39.120042 2026] [core:error] [pid 2723436:tid 2723436] [client 66.249.66.168:49168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:41.679962 2026] [ssl:error] [pid 2728957:tid 2728957] (EAI 2)Name or service not known: [client 144.76.19.72:44630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:41.679993 2026] [ssl:error] [pid 2728957:tid 2728957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:41.731450 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:44640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:41.731479 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:42.228315 2026] [lsapi:warn] [pid 2726864:tid 2726864] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:42.655224 2026] [ssl:error] [pid 2728162:tid 2728162] (70014)End of file found: [client 216.73.216.199:45545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:43.272954 2026] [lsapi:warn] [pid 2713568:tid 2713568] [client 87.201.112.222:23182] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:43.441283 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:52830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/bin/su
[Thu Jul 30 10:30:44.788485 2026] [ssl:error] [pid 2713931:tid 2713931] (EAI 2)Name or service not known: [client 144.76.19.72:44656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:44.788513 2026] [ssl:error] [pid 2713931:tid 2713931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:44.846031 2026] [ssl:error] [pid 2728518:tid 2728518] (EAI 2)Name or service not known: [client 144.76.19.72:44672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:44.846099 2026] [ssl:error] [pid 2728518:tid 2728518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:47.904308 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:44676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:47.904344 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:47.957057 2026] [ssl:error] [pid 2726838:tid 2726838] (EAI 2)Name or service not known: [client 144.76.19.72:44692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:47.957113 2026] [ssl:error] [pid 2726838:tid 2726838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:48.071357 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:52830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup10/device/physical_node/remove
[Thu Jul 30 10:30:48.313791 2026] [security2:error] [pid 2726168:tid 2726168] [client 147.135.213.27:33598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.org.uk"] [uri "/robots.txt"] [unique_id "amsZyI5yTTrzIhx3xJt_HQAAAC0"]
[Thu Jul 30 10:30:48.604532 2026] [core:error] [pid 2728916:tid 2728916] [client 66.249.64.170:37097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:48.604559 2026] [core:error] [pid 2728916:tid 2728916] [client 66.249.64.170:37097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:49.277517 2026] [ssl:error] [pid 2726904:tid 2726904] (70014)End of file found: [client 216.73.216.199:42297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:49.706130 2026] [security2:error] [pid 2722494:tid 2722494] [client 147.135.213.27:33610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.org.uk"] [uri "/"] [unique_id "amsZyYzByg2-cixuheaBNgAAACk"]
[Thu Jul 30 10:30:50.424977 2026] [security2:error] [pid 2722445:tid 2722445] [client 147.135.213.27:56704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amsZyv7-unxYUYNOjJrpQgAAABw"]
[Thu Jul 30 10:30:51.032533 2026] [ssl:error] [pid 2726864:tid 2726864] (EAI 2)Name or service not known: [client 144.76.19.72:46756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:51.032574 2026] [ssl:error] [pid 2726864:tid 2726864] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:51.086048 2026] [ssl:error] [pid 2726168:tid 2726168] (EAI 2)Name or service not known: [client 144.76.19.72:46764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:51.086096 2026] [ssl:error] [pid 2726168:tid 2726168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:51.816413 2026] [security2:error] [pid 2728518:tid 2728518] [client 85.208.96.202:29448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/what-was-the-last-state-to-abolish-slavery"] [unique_id "amsZy-UXDpgdEDgD57gFGwAAABA"]
[Thu Jul 30 10:30:52.604303 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:52830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/hwcache_align
[Thu Jul 30 10:30:52.905133 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:52830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-192/slabs_cpu_partial
[Thu Jul 30 10:30:53.004238 2026] [security2:error] [pid 2719989:tid 2719989] [client 185.191.171.3:57666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9214.0.html"] [unique_id "amsZzc-DeZzg5tYcWd1CjQAAACI"]
[Thu Jul 30 10:30:53.591306 2026] [lsapi:warn] [pid 2721865:tid 2721865] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:53.808005 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:52830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_ctx/usersize
[Thu Jul 30 10:30:54.123493 2026] [lsapi:warn] [pid 2729606:tid 2729606] [client 87.201.112.222:23203] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:30:54.225683 2026] [ssl:error] [pid 2726839:tid 2726839] (EAI 2)Name or service not known: [client 144.76.19.72:46772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:54.225723 2026] [ssl:error] [pid 2726839:tid 2726839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:54.374447 2026] [ssl:error] [pid 2726904:tid 2726904] (EAI 2)Name or service not known: [client 144.76.19.72:46784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:54.374479 2026] [ssl:error] [pid 2726904:tid 2726904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:54.410627 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:52830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/partial
[Thu Jul 30 10:30:54.711915 2026] [ssl:error] [pid 2722495:tid 2722495] (70014)End of file found: [client 216.73.216.199:52830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:55.615715 2026] [ssl:error] [pid 2728916:tid 2728916] (70014)End of file found: [client 216.73.216.199:9814] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:30:56.059743 2026] [core:error] [pid 2729641:tid 2729641] [client 66.249.64.170:59257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:56.059789 2026] [core:error] [pid 2729641:tid 2729641] [client 66.249.64.170:59257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:57.479052 2026] [ssl:error] [pid 2726104:tid 2726104] (EAI 2)Name or service not known: [client 144.76.19.72:46798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:57.479095 2026] [ssl:error] [pid 2726104:tid 2726104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:57.532456 2026] [ssl:error] [pid 2713568:tid 2713568] (EAI 2)Name or service not known: [client 144.76.19.72:46812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:30:57.532485 2026] [ssl:error] [pid 2713568:tid 2713568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:30:58.137922 2026] [core:error] [pid 2726898:tid 2726898] [client 66.249.64.170:64761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:58.137952 2026] [core:error] [pid 2726898:tid 2726898] [client 66.249.64.170:64761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:30:58.631782 2026] [core:error] [pid 2729642:tid 2729642] (13)Permission denied: [client 216.73.216.199:49624] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/closing_wait
[Thu Jul 30 10:30:59.576736 2026] [security2:error] [pid 2726899:tid 2726899] [client 20.171.55.167:1876] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "purple-childcare.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZ0xeb3w4bC373jfCvuAAAAB0"]
[Thu Jul 30 10:30:59.577128 2026] [security2:error] [pid 2726899:tid 2726899] [client 20.171.55.167:1876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "purple-childcare.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsZ0xeb3w4bC373jfCvuAAAAB0"]
[Thu Jul 30 10:31:00.330181 2026] [ssl:error] [pid 2729605:tid 2729605] (70014)End of file found: [client 216.73.216.199:15193] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:00.358534 2026] [security2:error] [pid 2726838:tid 2726838] [client 198.244.240.226:28988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.nigelmassey.com"] [uri "/robots.txt"] [unique_id "amsZ1KRVOYu9ktJcTkCdaAAAAAQ"]
[Thu Jul 30 10:31:00.439462 2026] [ssl:error] [pid 2729642:tid 2729642] (70014)End of file found: [client 216.73.216.199:49624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:00.589010 2026] [ssl:error] [pid 2728957:tid 2728957] (EAI 2)Name or service not known: [client 144.76.19.72:36522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:00.589040 2026] [ssl:error] [pid 2728957:tid 2728957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:00.643342 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:36532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:00.643369 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:00.772911 2026] [security2:error] [pid 2726899:tid 2726899] [client 20.171.55.167:1876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "purple-childcare.co.uk"] [uri "/index.php"] [unique_id "amsZ0xeb3w4bC373jfCvuAAAAB0"]
[Thu Jul 30 10:31:00.930024 2026] [ssl:error] [pid 2722495:tid 2722495] (70014)End of file found: [client 216.73.216.199:22815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:01.496559 2026] [security2:error] [pid 2726838:tid 2726838] [client 94.23.188.204:30086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.nigelmassey.com"] [uri "/3-green-room.php"] [unique_id "amsZ1aRVOYu9ktJcTkCdaQAAAAQ"]
[Thu Jul 30 10:31:02.034832 2026] [authz_core:error] [pid 2713568:tid 2713568] [client 66.249.66.34:54138] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:31:02.037508 2026] [authz_core:error] [pid 2713568:tid 2713568] [client 66.249.66.34:54138] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:31:02.649157 2026] [core:error] [pid 2728479:tid 2728479] [client 66.249.66.3:37389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:02.649184 2026] [core:error] [pid 2728479:tid 2728479] [client 66.249.66.3:37389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:03.646437 2026] [lsapi:warn] [pid 2726904:tid 2726904] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:03.701038 2026] [ssl:error] [pid 2728479:tid 2728479] (EAI 2)Name or service not known: [client 144.76.19.72:36534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:03.701082 2026] [ssl:error] [pid 2728479:tid 2728479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:03.759300 2026] [ssl:error] [pid 2726901:tid 2726901] (EAI 2)Name or service not known: [client 144.76.19.72:36540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:03.759329 2026] [ssl:error] [pid 2726901:tid 2726901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:04.363497 2026] [lsapi:warn] [pid 2728958:tid 2728958] [client 87.201.112.222:44884] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:06.317103 2026] [core:error] [pid 2729641:tid 2729641] (13)Permission denied: [client 216.73.216.199:34933] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/alloc_calls
[Thu Jul 30 10:31:06.618378 2026] [core:error] [pid 2729641:tid 2729641] (13)Permission denied: [client 216.73.216.199:34933] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/shrink
[Thu Jul 30 10:31:06.814408 2026] [ssl:error] [pid 2722495:tid 2722495] (EAI 2)Name or service not known: [client 144.76.19.72:36550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:06.814438 2026] [ssl:error] [pid 2722495:tid 2722495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:06.866890 2026] [ssl:error] [pid 2728479:tid 2728479] (EAI 2)Name or service not known: [client 144.76.19.72:36564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:06.866915 2026] [ssl:error] [pid 2728479:tid 2728479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:06.919790 2026] [ssl:error] [pid 2729641:tid 2729641] (70014)End of file found: [client 216.73.216.199:34933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:08.005419 2026] [core:error] [pid 2728957:tid 2728957] (13)Permission denied: [client 216.73.216.199:46545] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/validate
[Thu Jul 30 10:31:08.425047 2026] [core:error] [pid 2728957:tid 2728957] (13)Permission denied: [client 216.73.216.199:46545] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/min_partial
[Thu Jul 30 10:31:08.570719 2026] [security2:error] [pid 2721865:tid 2721865] [client 169.224.125.169:37418] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZ3PfKMFtcb-Yal797UQAAACU"]
[Thu Jul 30 10:31:08.570763 2026] [security2:error] [pid 2721865:tid 2721865] [client 169.224.125.169:37418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZ3PfKMFtcb-Yal797UQAAACU"]
[Thu Jul 30 10:31:08.571006 2026] [security2:error] [pid 2721865:tid 2721865] [client 169.224.125.169:37418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZ3PfKMFtcb-Yal797UQAAACU"]
[Thu Jul 30 10:31:09.922130 2026] [ssl:error] [pid 2729638:tid 2729638] (EAI 2)Name or service not known: [client 144.76.19.72:50232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:09.922161 2026] [ssl:error] [pid 2729638:tid 2729638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:09.976898 2026] [ssl:error] [pid 2726899:tid 2726899] (EAI 2)Name or service not known: [client 144.76.19.72:50238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:09.976929 2026] [ssl:error] [pid 2726899:tid 2726899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:10.644486 2026] [lsapi:warn] [pid 2726135:tid 2726135] [client 121.229.156.116:38254] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 10:31:10.833723 2026] [core:error] [pid 2728957:tid 2728957] (13)Permission denied: [client 216.73.216.199:46545] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/alloc_calls
[Thu Jul 30 10:31:11.435368 2026] [ssl:error] [pid 2728957:tid 2728957] (70014)End of file found: [client 216.73.216.199:46545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:12.126544 2026] [security2:error] [pid 2729606:tid 2729606] [client 38.211.41.152:63315] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZ4BWwP0jh_trsDROkDAAAABg"]
[Thu Jul 30 10:31:12.126615 2026] [security2:error] [pid 2729606:tid 2729606] [client 38.211.41.152:63315] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZ4BWwP0jh_trsDROkDAAAABg"]
[Thu Jul 30 10:31:12.126973 2026] [security2:error] [pid 2729606:tid 2729606] [client 38.211.41.152:63315] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZ4BWwP0jh_trsDROkDAAAABg"]
[Thu Jul 30 10:31:13.033694 2026] [ssl:error] [pid 2729641:tid 2729641] (EAI 2)Name or service not known: [client 144.76.19.72:50248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:13.033732 2026] [ssl:error] [pid 2729641:tid 2729641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:13.086134 2026] [ssl:error] [pid 2729606:tid 2729606] (EAI 2)Name or service not known: [client 144.76.19.72:50252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:13.086188 2026] [ssl:error] [pid 2729606:tid 2729606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:13.241620 2026] [core:error] [pid 2730450:tid 2730450] (13)Permission denied: [client 216.73.216.199:25968] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/usersize
[Thu Jul 30 10:31:14.144991 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:20207] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/249651.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.2fd48cfb.tmp
[Thu Jul 30 10:31:14.431860 2026] [lsapi:warn] [pid 2709871:tid 2709871] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:14.618239 2026] [lsapi:warn] [pid 2721865:tid 2721865] [client 87.201.112.222:23226] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:14.746330 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:20207] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-16/slabs_cpu_partial
[Thu Jul 30 10:31:15.656829 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:20207] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-32/red_zone
[Thu Jul 30 10:31:15.884044 2026] [security2:error] [pid 2730614:tid 2730614] [client 114.119.128.50:51865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/plugins/monarch/core/admin/js/version-rollback.js"] [unique_id "amsZ43EWnhsR9Lm4Y6yX-gAAACc"], referer: https://prosperon.co.uk/wp-content/plugins/monarch/core/admin/js?C=D%3BO%3DA
[Thu Jul 30 10:31:16.140434 2026] [ssl:error] [pid 2728122:tid 2728122] (EAI 2)Name or service not known: [client 144.76.19.72:50258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:16.140467 2026] [ssl:error] [pid 2728122:tid 2728122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:16.202786 2026] [ssl:error] [pid 2726838:tid 2726838] (EAI 2)Name or service not known: [client 144.76.19.72:50270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:16.202851 2026] [ssl:error] [pid 2726838:tid 2726838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:16.376860 2026] [core:error] [pid 2719989:tid 2719989] [client 66.249.64.170:59726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:16.376889 2026] [core:error] [pid 2719989:tid 2719989] [client 66.249.64.170:59726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:16.876959 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:20207] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3609846.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.bbd7fb81.tmp
[Thu Jul 30 10:31:18.630534 2026] [security2:error] [pid 2722445:tid 2722445] [client 64.65.125.132:5479] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZ5v7-unxYUYNOjJrpSQAAABw"]
[Thu Jul 30 10:31:18.630593 2026] [security2:error] [pid 2722445:tid 2722445] [client 64.65.125.132:5479] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsZ5v7-unxYUYNOjJrpSQAAABw"]
[Thu Jul 30 10:31:18.630888 2026] [security2:error] [pid 2722445:tid 2722445] [client 64.65.125.132:5479] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsZ5v7-unxYUYNOjJrpSQAAABw"]
[Thu Jul 30 10:31:19.260553 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:50286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:19.260581 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:19.315124 2026] [ssl:error] [pid 2728161:tid 2728161] (EAI 2)Name or service not known: [client 144.76.19.72:50294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:19.315153 2026] [ssl:error] [pid 2728161:tid 2728161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:22.008900 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:20207] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/hid_magicmouse/drivers/hid:magicmouse/uevent
[Thu Jul 30 10:31:22.385901 2026] [ssl:error] [pid 2726104:tid 2726104] (EAI 2)Name or service not known: [client 144.76.19.72:43084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:22.385935 2026] [ssl:error] [pid 2726104:tid 2726104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:22.439171 2026] [ssl:error] [pid 2730614:tid 2730614] (EAI 2)Name or service not known: [client 144.76.19.72:43100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:22.439221 2026] [ssl:error] [pid 2730614:tid 2730614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:25.095311 2026] [lsapi:warn] [pid 2731086:tid 2731086] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:25.261528 2026] [lsapi:warn] [pid 2726867:tid 2726867] [client 87.201.112.222:44883] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:25.493530 2026] [ssl:error] [pid 2719989:tid 2719989] (EAI 2)Name or service not known: [client 144.76.19.72:43112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:25.493567 2026] [ssl:error] [pid 2719989:tid 2719989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:25.545620 2026] [ssl:error] [pid 2722494:tid 2722494] (EAI 2)Name or service not known: [client 144.76.19.72:43120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:25.545651 2026] [ssl:error] [pid 2722494:tid 2722494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:27.137730 2026] [ssl:error] [pid 2728479:tid 2728479] (70014)End of file found: [client 216.73.216.199:20207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:27.822967 2026] [authz_core:error] [pid 2726168:tid 2726168] [client 66.249.66.34:53866] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:31:27.825651 2026] [authz_core:error] [pid 2726168:tid 2726168] [client 66.249.66.34:53866] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:31:28.603814 2026] [ssl:error] [pid 2717463:tid 2717463] (EAI 2)Name or service not known: [client 144.76.19.72:43122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:28.603848 2026] [ssl:error] [pid 2717463:tid 2717463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:28.656689 2026] [ssl:error] [pid 2723714:tid 2723714] (EAI 2)Name or service not known: [client 144.76.19.72:43130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:28.656710 2026] [ssl:error] [pid 2723714:tid 2723714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:29.258101 2026] [core:error] [pid 2729639:tid 2729639] (13)Permission denied: [client 216.73.216.199:25716] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/100320.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f378da8d.tmp
[Thu Jul 30 10:31:29.279204 2026] [security2:error] [pid 2726797:tid 2726797] [client 114.119.153.131:36361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.glottalstop.co.uk"] [uri "/webProjects.section/pages/images/imagewebc61245be524.jpg"] [unique_id "amsZ8a3tMKxWf8Pol1nxHwAAAAI"], referer: https://www.glottalstop.co.uk/web.html
[Thu Jul 30 10:31:30.159875 2026] [ssl:error] [pid 2729639:tid 2729639] (70014)End of file found: [client 216.73.216.199:25716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:31.660101 2026] [ssl:error] [pid 2726838:tid 2726838] (70014)End of file found: [client 216.73.216.199:59523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:31.711498 2026] [ssl:error] [pid 2726901:tid 2726901] (EAI 2)Name or service not known: [client 144.76.19.72:55188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:31.711525 2026] [ssl:error] [pid 2726901:tid 2726901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:31.764375 2026] [ssl:error] [pid 2728122:tid 2728122] (EAI 2)Name or service not known: [client 144.76.19.72:55194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:31.764409 2026] [ssl:error] [pid 2728122:tid 2728122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:33.669156 2026] [core:error] [pid 2728958:tid 2728958] [client 66.249.64.171:47044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:33.669190 2026] [core:error] [pid 2728958:tid 2728958] [client 66.249.64.171:47044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:34.083184 2026] [core:error] [pid 2726867:tid 2726867] (13)Permission denied: [client 216.73.216.199:23250] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/closing_wait
[Thu Jul 30 10:31:34.849837 2026] [ssl:error] [pid 2728958:tid 2728958] (EAI 2)Name or service not known: [client 144.76.19.72:55206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:34.849872 2026] [ssl:error] [pid 2728958:tid 2728958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:34.905845 2026] [ssl:error] [pid 2726168:tid 2726168] (EAI 2)Name or service not known: [client 144.76.19.72:55220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:34.905876 2026] [ssl:error] [pid 2726168:tid 2726168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:34.987509 2026] [ssl:error] [pid 2726867:tid 2726867] (70014)End of file found: [client 216.73.216.199:23250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:35.710678 2026] [lsapi:warn] [pid 2729642:tid 2729642] [client 87.201.112.222:23187] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:35.736660 2026] [lsapi:warn] [pid 2730980:tid 2730980] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:36.379162 2026] [security2:error] [pid 2726168:tid 2726168] [client 47.128.51.201:65424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amsZ-I5yTTrzIhx3xJt_LAAAAC0"]
[Thu Jul 30 10:31:36.942442 2026] [ssl:error] [pid 2728479:tid 2728479] (70014)End of file found: [client 216.73.216.199:22882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:37.455263 2026] [ssl:error] [pid 2721033:tid 2721033] (70014)End of file found: [client 216.73.216.199:4846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:37.958620 2026] [ssl:error] [pid 2708019:tid 2708019] (EAI 2)Name or service not known: [client 144.76.19.72:55222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:37.958648 2026] [ssl:error] [pid 2708019:tid 2708019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:38.012749 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:55228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:38.012797 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:39.419786 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.64.170:64978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:39.419817 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.64.170:64978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:41.072206 2026] [ssl:error] [pid 2731675:tid 2731675] (EAI 2)Name or service not known: [client 144.76.19.72:28460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:41.072244 2026] [ssl:error] [pid 2731675:tid 2731675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:41.128548 2026] [ssl:error] [pid 2726904:tid 2726904] (EAI 2)Name or service not known: [client 144.76.19.72:28474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:41.128574 2026] [ssl:error] [pid 2726904:tid 2726904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:41.163019 2026] [ssl:error] [pid 2726797:tid 2726797] (70014)End of file found: [client 216.73.216.199:33881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:42.818212 2026] [security2:error] [pid 2729642:tid 2729642] [client 110.249.202.30:44144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/robots.txt"] [unique_id "amsZ_lRAIZBFIoDbDB_OLQAAACQ"]
[Thu Jul 30 10:31:43.868020 2026] [ssl:error] [pid 2726904:tid 2726904] (70014)End of file found: [client 216.73.216.199:65049] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:44.184630 2026] [ssl:error] [pid 2709871:tid 2709871] (EAI 2)Name or service not known: [client 144.76.19.72:28488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:44.184656 2026] [ssl:error] [pid 2709871:tid 2709871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:44.238751 2026] [ssl:error] [pid 2729638:tid 2729638] (EAI 2)Name or service not known: [client 144.76.19.72:28498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:44.238778 2026] [ssl:error] [pid 2729638:tid 2729638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:44.775419 2026] [ssl:error] [pid 2717463:tid 2717463] (70014)End of file found: [client 216.73.216.199:53124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:45.909810 2026] [core:error] [pid 2709871:tid 2709871] [client 66.249.66.167:65437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:45.909836 2026] [core:error] [pid 2709871:tid 2709871] [client 66.249.66.167:65437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:45.912585 2026] [core:error] [pid 2722445:tid 2722445] [client 66.249.66.194:59014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:45.912618 2026] [core:error] [pid 2722445:tid 2722445] [client 66.249.66.194:59014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:46.416345 2026] [lsapi:warn] [pid 2726839:tid 2726839] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:46.450358 2026] [lsapi:warn] [pid 2729638:tid 2729638] [client 87.201.112.222:23169] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:46.879372 2026] [ssl:error] [pid 2719989:tid 2719989] (70014)End of file found: [client 216.73.216.199:33145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:47.295175 2026] [ssl:error] [pid 2722495:tid 2722495] (EAI 2)Name or service not known: [client 144.76.19.72:28506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:47.295203 2026] [ssl:error] [pid 2722495:tid 2722495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:47.354049 2026] [ssl:error] [pid 2728122:tid 2728122] (EAI 2)Name or service not known: [client 144.76.19.72:28510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:47.354087 2026] [ssl:error] [pid 2728122:tid 2728122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:47.447097 2026] [core:error] [pid 2726797:tid 2726797] (13)Permission denied: [client 216.73.216.199:13866] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/irq
[Thu Jul 30 10:31:47.625113 2026] [security2:error] [pid 2721033:tid 2721033] [client 114.119.158.38:39019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~17,102/request_format~html"] [unique_id "amsaA5yOGgHHSeZw8FSzyAAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~17,102/request_format~html
[Thu Jul 30 10:31:48.614306 2026] [security2:error] [pid 2726839:tid 2726839] [client 114.119.158.38:52339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~17,102/request_format~html"] [unique_id "amsaBK6XXUJRp3On7M79CgAAAAU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~17,102/request_format~html
[Thu Jul 30 10:31:49.061303 2026] [ssl:error] [pid 2726797:tid 2726797] (70014)End of file found: [client 216.73.216.199:13866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:49.550269 2026] [core:error] [pid 2729455:tid 2729455] (13)Permission denied: [client 216.73.216.199:24608] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/machinecheck/machinecheck6/subsystem/uevent
[Thu Jul 30 10:31:49.964782 2026] [ssl:error] [pid 2729455:tid 2729455] (70014)End of file found: [client 216.73.216.199:24608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:50.407796 2026] [ssl:error] [pid 2726839:tid 2726839] (EAI 2)Name or service not known: [client 144.76.19.72:62790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:50.407835 2026] [ssl:error] [pid 2726839:tid 2726839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:50.461256 2026] [ssl:error] [pid 2728161:tid 2728161] (EAI 2)Name or service not known: [client 144.76.19.72:62806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:50.461280 2026] [ssl:error] [pid 2728161:tid 2728161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:50.572306 2026] [ssl:error] [pid 2729642:tid 2729642] (70014)End of file found: [client 216.73.216.199:28295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:52.320210 2026] [security2:error] [pid 2726898:tid 2726898] [client 85.208.96.199:11906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/rick-reichmuth-wife"] [unique_id "amsaCBqWZQiqsvXXaA_5tQAAABk"]
[Thu Jul 30 10:31:53.534150 2026] [ssl:error] [pid 2733069:tid 2733069] (EAI 2)Name or service not known: [client 144.76.19.72:62814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:53.534209 2026] [ssl:error] [pid 2733069:tid 2733069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:53.591299 2026] [ssl:error] [pid 2733072:tid 2733072] (EAI 2)Name or service not known: [client 144.76.19.72:62816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:53.591346 2026] [ssl:error] [pid 2733072:tid 2733072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:54.808857 2026] [cgi:error] [pid 2726165:tid 2726165] [client 20.151.254.105:9990] AH02812: stderr from /home/josieand/public_html/www.baconkitty.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:31:55.087366 2026] [ssl:error] [pid 2731675:tid 2731675] (70014)End of file found: [client 216.73.216.199:45809] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:55.685667 2026] [ssl:error] [pid 2726797:tid 2726797] (70014)End of file found: [client 216.73.216.199:13244] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:56.188339 2026] [ssl:error] [pid 2726898:tid 2726898] (70014)End of file found: [client 216.73.216.199:33397] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:31:56.293172 2026] [core:error] [pid 2733071:tid 2733071] [client 66.249.64.170:41250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:56.293195 2026] [core:error] [pid 2733071:tid 2733071] [client 66.249.64.170:41250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:31:56.562127 2026] [lsapi:warn] [pid 2732944:tid 2732944] [client 87.201.112.222:44889] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:56.645787 2026] [ssl:error] [pid 2717463:tid 2717463] (EAI 2)Name or service not known: [client 144.76.19.72:62830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:56.645815 2026] [ssl:error] [pid 2717463:tid 2717463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:56.702084 2026] [ssl:error] [pid 2733009:tid 2733009] (EAI 2)Name or service not known: [client 144.76.19.72:62840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:56.702135 2026] [ssl:error] [pid 2733009:tid 2733009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:57.206686 2026] [lsapi:warn] [pid 2733071:tid 2733071] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:31:59.761565 2026] [ssl:error] [pid 2733073:tid 2733073] (EAI 2)Name or service not known: [client 144.76.19.72:27070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:59.761606 2026] [ssl:error] [pid 2733073:tid 2733073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:31:59.820545 2026] [ssl:error] [pid 2732944:tid 2732944] (EAI 2)Name or service not known: [client 144.76.19.72:27086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:31:59.820589 2026] [ssl:error] [pid 2732944:tid 2732944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:00.648734 2026] [core:error] [pid 2729455:tid 2729455] [client 66.249.64.171:59150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:00.648762 2026] [core:error] [pid 2729455:tid 2729455] [client 66.249.64.171:59150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:01.410201 2026] [core:error] [pid 2730615:tid 2730615] (13)Permission denied: [client 216.73.216.199:38739] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/cron.d/cpanel_ssl_reissue
[Thu Jul 30 10:32:01.886480 2026] [security2:error] [pid 2729606:tid 2729606] [client 103.190.133.102:42948] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaERWwP0jh_trsDROkHQAAABg"]
[Thu Jul 30 10:32:01.886536 2026] [security2:error] [pid 2729606:tid 2729606] [client 103.190.133.102:42948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaERWwP0jh_trsDROkHQAAABg"]
[Thu Jul 30 10:32:01.886819 2026] [security2:error] [pid 2729606:tid 2729606] [client 103.190.133.102:42948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaERWwP0jh_trsDROkHQAAABg"]
[Thu Jul 30 10:32:02.880662 2026] [ssl:error] [pid 2726134:tid 2726134] (EAI 2)Name or service not known: [client 144.76.19.72:27098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:02.880709 2026] [ssl:error] [pid 2726134:tid 2726134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:02.934027 2026] [ssl:error] [pid 2726797:tid 2726797] (EAI 2)Name or service not known: [client 144.76.19.72:27106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:02.934054 2026] [ssl:error] [pid 2726797:tid 2726797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:03.514342 2026] [ssl:error] [pid 2730615:tid 2730615] (70014)End of file found: [client 216.73.216.199:38739] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:04.131577 2026] [security2:error] [pid 2730450:tid 2730450] [client 146.59.192.250:50280] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsaFBjmuLKRimiq7eSjhgAAAAg"]
[Thu Jul 30 10:32:05.319761 2026] [ssl:error] [pid 2726134:tid 2726134] (70014)End of file found: [client 216.73.216.199:28842] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:05.816223 2026] [core:error] [pid 2726797:tid 2726797] (13)Permission denied: [client 216.73.216.199:58114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS2/irq
[Thu Jul 30 10:32:06.512608 2026] [ssl:error] [pid 2726838:tid 2726838] (EAI 2)Name or service not known: [client 144.76.19.72:27112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:06.512641 2026] [ssl:error] [pid 2726838:tid 2726838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:06.615009 2026] [ssl:error] [pid 2730450:tid 2730450] (EAI 2)Name or service not known: [client 144.76.19.72:27128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:06.615048 2026] [ssl:error] [pid 2730450:tid 2730450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:07.059780 2026] [lsapi:warn] [pid 2733072:tid 2733072] [client 87.201.112.222:23219] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:07.134889 2026] [ssl:error] [pid 2726797:tid 2726797] (70014)End of file found: [client 216.73.216.199:58114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:07.905103 2026] [lsapi:warn] [pid 2728518:tid 2728518] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:08.823562 2026] [core:error] [pid 2731087:tid 2731087] (13)Permission denied: [client 216.73.216.199:13554] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty54/subsystem/ttyS3/close_delay
[Thu Jul 30 10:32:08.947156 2026] [core:error] [pid 2731087:tid 2731087] (13)Permission denied: [client 216.73.216.199:13554] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 10:32:09.699741 2026] [ssl:error] [pid 2730614:tid 2730614] (EAI 2)Name or service not known: [client 144.76.19.72:62146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:09.699775 2026] [ssl:error] [pid 2730614:tid 2730614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:09.756583 2026] [ssl:error] [pid 2731675:tid 2731675] (EAI 2)Name or service not known: [client 144.76.19.72:62154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:09.756616 2026] [ssl:error] [pid 2731675:tid 2731675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:11.649696 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.64.171:35229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:11.649728 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.64.171:35229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:11.960471 2026] [ssl:error] [pid 2731087:tid 2731087] (70014)End of file found: [client 216.73.216.199:13554] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:12.492906 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.64.170:62630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:12.492962 2026] [core:error] [pid 2728518:tid 2728518] [client 66.249.64.170:62630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:12.813227 2026] [ssl:error] [pid 2733073:tid 2733073] (EAI 2)Name or service not known: [client 144.76.19.72:62170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:12.813273 2026] [ssl:error] [pid 2733073:tid 2733073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:12.869841 2026] [ssl:error] [pid 2719786:tid 2719786] (EAI 2)Name or service not known: [client 144.76.19.72:62178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:12.869880 2026] [ssl:error] [pid 2719786:tid 2719786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:13.389867 2026] [security2:error] [pid 2726797:tid 2726797] [client 195.178.110.100:16246] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.dev"] [unique_id "amsaHa3tMKxWf8Pol1nxPgAAAAI"]
[Thu Jul 30 10:32:13.390112 2026] [security2:error] [pid 2726797:tid 2726797] [client 195.178.110.100:16246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.dev"] [unique_id "amsaHa3tMKxWf8Pol1nxPgAAAAI"]
[Thu Jul 30 10:32:13.390804 2026] [security2:error] [pid 2726797:tid 2726797] [client 195.178.110.100:16246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsaHa3tMKxWf8Pol1nxPgAAAAI"]
[Thu Jul 30 10:32:14.733179 2026] [security2:error] [pid 2723714:tid 2723714] [client 43.167.245.18:54440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "amsaHsXCSRbbSr1XasYaoQAAACA"]
[Thu Jul 30 10:32:14.859094 2026] [security2:error] [pid 2728122:tid 2728122] [client 94.154.43.186:30730] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "epmsonline.co.uk"] [uri "/.env"] [unique_id "amsaHjCHtO-4sG0MO1VjFAAAAAY"]
[Thu Jul 30 10:32:14.859301 2026] [security2:error] [pid 2728122:tid 2728122] [client 94.154.43.186:30730] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "epmsonline.co.uk"] [uri "/.env"] [unique_id "amsaHjCHtO-4sG0MO1VjFAAAAAY"]
[Thu Jul 30 10:32:14.859526 2026] [security2:error] [pid 2728122:tid 2728122] [client 94.154.43.186:30730] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "epmsonline.co.uk"] [uri "/.env"] [unique_id "amsaHjCHtO-4sG0MO1VjFAAAAAY"]
[Thu Jul 30 10:32:15.266451 2026] [ssl:error] [pid 2729606:tid 2729606] (70014)End of file found: [client 216.73.216.199:28362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:15.686172 2026] [ssl:error] [pid 2734240:tid 2734240] (70014)End of file found: [client 216.73.216.199:22412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:15.924854 2026] [ssl:error] [pid 2728916:tid 2728916] (EAI 2)Name or service not known: [client 144.76.19.72:62180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:15.924893 2026] [ssl:error] [pid 2728916:tid 2728916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:15.978147 2026] [ssl:error] [pid 2730450:tid 2730450] (EAI 2)Name or service not known: [client 144.76.19.72:62194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:15.978172 2026] [ssl:error] [pid 2730450:tid 2730450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:16.237843 2026] [security2:error] [pid 2732945:tid 2732945] [client 43.167.245.18:55502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsaIEJ8EbngecitPSmtIgAAACw"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 10:32:16.280308 2026] [cgi:error] [pid 2732945:tid 2732945] [client 43.167.245.18:55502] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 10:32:16.281632 2026] [ssl:error] [pid 2726797:tid 2726797] (70014)End of file found: [client 216.73.216.199:36964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:17.083167 2026] [security2:error] [pid 2734596:tid 2734596] [client 186.249.143.92:30176] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaITuME_BlyGbHsT7BkgAAAAk"]
[Thu Jul 30 10:32:17.083235 2026] [security2:error] [pid 2734596:tid 2734596] [client 186.249.143.92:30176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaITuME_BlyGbHsT7BkgAAAAk"]
[Thu Jul 30 10:32:17.083559 2026] [security2:error] [pid 2734596:tid 2734596] [client 186.249.143.92:30176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaITuME_BlyGbHsT7BkgAAAAk"]
[Thu Jul 30 10:32:17.324029 2026] [core:error] [pid 2726898:tid 2726898] [client 66.249.64.170:46485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:17.324056 2026] [core:error] [pid 2726898:tid 2726898] [client 66.249.64.170:46485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:17.574160 2026] [lsapi:warn] [pid 2719786:tid 2719786] [client 87.201.112.222:44865] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:18.578145 2026] [lsapi:warn] [pid 2733069:tid 2733069] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:19.035542 2026] [ssl:error] [pid 2732944:tid 2732944] (EAI 2)Name or service not known: [client 144.76.19.72:62206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:19.035573 2026] [ssl:error] [pid 2732944:tid 2732944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:19.089993 2026] [ssl:error] [pid 2732945:tid 2732945] (EAI 2)Name or service not known: [client 144.76.19.72:62210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:19.090027 2026] [ssl:error] [pid 2732945:tid 2732945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:20.138946 2026] [authz_core:error] [pid 2733069:tid 2733069] [client 66.249.66.33:45456] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:32:20.141651 2026] [authz_core:error] [pid 2733069:tid 2733069] [client 66.249.66.33:45456] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:32:20.688968 2026] [ssl:error] [pid 2729455:tid 2729455] (70014)End of file found: [client 216.73.216.199:50985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:22.166026 2026] [ssl:error] [pid 2734240:tid 2734240] (EAI 2)Name or service not known: [client 144.76.19.72:36726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:22.166155 2026] [ssl:error] [pid 2734240:tid 2734240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:22.219617 2026] [ssl:error] [pid 2733073:tid 2733073] (EAI 2)Name or service not known: [client 144.76.19.72:36734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:22.219646 2026] [ssl:error] [pid 2733073:tid 2733073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:22.332362 2026] [security2:error] [pid 2733009:tid 2733009] [client 197.185.186.18:14512] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaJg8m7LhgOW4PdFfDtgAAADE"]
[Thu Jul 30 10:32:22.332406 2026] [security2:error] [pid 2733009:tid 2733009] [client 197.185.186.18:14512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaJg8m7LhgOW4PdFfDtgAAADE"]
[Thu Jul 30 10:32:22.332659 2026] [security2:error] [pid 2733009:tid 2733009] [client 197.185.186.18:14512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaJg8m7LhgOW4PdFfDtgAAADE"]
[Thu Jul 30 10:32:22.706144 2026] [ssl:error] [pid 2719989:tid 2719989] (70014)End of file found: [client 216.73.216.199:27059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:24.137319 2026] [ssl:error] [pid 2733072:tid 2733072] (70014)End of file found: [client 216.73.216.199:43189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:25.363652 2026] [ssl:error] [pid 2728916:tid 2728916] (EAI 2)Name or service not known: [client 144.76.19.72:36740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:25.363682 2026] [ssl:error] [pid 2728916:tid 2728916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:25.419708 2026] [ssl:error] [pid 2733071:tid 2733071] (EAI 2)Name or service not known: [client 144.76.19.72:36756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:25.419757 2026] [ssl:error] [pid 2733071:tid 2733071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:25.741189 2026] [core:error] [pid 2729642:tid 2729642] [client 66.249.64.170:61935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:25.741223 2026] [core:error] [pid 2729642:tid 2729642] [client 66.249.64.170:61935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:26.135590 2026] [ssl:error] [pid 2726165:tid 2726165] (70014)End of file found: [client 216.73.216.199:13452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:27.891720 2026] [core:error] [pid 2729642:tid 2729642] [client 66.249.64.170:41094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:27.891747 2026] [core:error] [pid 2729642:tid 2729642] [client 66.249.64.170:41094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:28.292885 2026] [lsapi:warn] [pid 2723714:tid 2723714] [client 87.201.112.222:58746] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:28.475650 2026] [ssl:error] [pid 2729642:tid 2729642] (EAI 2)Name or service not known: [client 144.76.19.72:36758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:28.475692 2026] [ssl:error] [pid 2729642:tid 2729642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:28.532111 2026] [ssl:error] [pid 2728479:tid 2728479] (EAI 2)Name or service not known: [client 144.76.19.72:36760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:28.532155 2026] [ssl:error] [pid 2728479:tid 2728479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:29.146268 2026] [lsapi:warn] [pid 2728957:tid 2728957] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:31.027447 2026] [lsapi:warn] [pid 2728479:tid 2728479] [client 121.229.156.86:50138] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 10:32:31.587437 2026] [ssl:error] [pid 2726165:tid 2726165] (EAI 2)Name or service not known: [client 144.76.19.72:23828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:31.587472 2026] [ssl:error] [pid 2726165:tid 2726165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:31.650765 2026] [ssl:error] [pid 2728479:tid 2728479] (EAI 2)Name or service not known: [client 144.76.19.72:23838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:31.650799 2026] [ssl:error] [pid 2728479:tid 2728479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:32.878464 2026] [ssl:error] [pid 2726898:tid 2726898] (70014)End of file found: [client 216.73.216.199:53118] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:33.179321 2026] [ssl:error] [pid 2726165:tid 2726165] (70014)End of file found: [client 216.73.216.199:34405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:33.680745 2026] [ssl:error] [pid 2728479:tid 2728479] (70014)End of file found: [client 216.73.216.199:55152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:34.706047 2026] [ssl:error] [pid 2733009:tid 2733009] (EAI 2)Name or service not known: [client 144.76.19.72:23854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:34.706088 2026] [ssl:error] [pid 2733009:tid 2733009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:34.759802 2026] [ssl:error] [pid 2735366:tid 2735366] (EAI 2)Name or service not known: [client 144.76.19.72:23870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:34.759829 2026] [ssl:error] [pid 2735366:tid 2735366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:36.306743 2026] [security2:error] [pid 2732878:tid 2732878] [client 43.228.157.102:49540] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.git/config"] [unique_id "amsaNP_WDzNEnDAod7xFmgAAAAs"]
[Thu Jul 30 10:32:36.307031 2026] [security2:error] [pid 2732878:tid 2732878] [client 43.228.157.102:49540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.git/config"] [unique_id "amsaNP_WDzNEnDAod7xFmgAAAAs"]
[Thu Jul 30 10:32:36.307423 2026] [security2:error] [pid 2732878:tid 2732878] [client 43.228.157.102:49540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.git/config"] [unique_id "amsaNP_WDzNEnDAod7xFmgAAAAs"]
[Thu Jul 30 10:32:36.794979 2026] [core:error] [pid 2733072:tid 2733072] [client 66.249.66.66:41637] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:36.795011 2026] [core:error] [pid 2733072:tid 2733072] [client 66.249.66.66:41637] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:37.823547 2026] [ssl:error] [pid 2732878:tid 2732878] (EAI 2)Name or service not known: [client 144.76.19.72:23884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:37.823582 2026] [ssl:error] [pid 2732878:tid 2732878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:37.880050 2026] [ssl:error] [pid 2728958:tid 2728958] (EAI 2)Name or service not known: [client 144.76.19.72:23900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:37.880124 2026] [ssl:error] [pid 2728958:tid 2728958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:38.468974 2026] [lsapi:warn] [pid 2735366:tid 2735366] [client 87.201.112.222:58734] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:39.204012 2026] [ssl:error] [pid 2728958:tid 2728958] (70014)End of file found: [client 216.73.216.199:1050] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:40.110345 2026] [ssl:error] [pid 2733009:tid 2733009] (70014)End of file found: [client 216.73.216.199:11280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:40.156454 2026] [lsapi:warn] [pid 2728479:tid 2728479] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:40.935246 2026] [ssl:error] [pid 2730980:tid 2730980] (EAI 2)Name or service not known: [client 144.76.19.72:37616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:40.935287 2026] [ssl:error] [pid 2730980:tid 2730980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:40.990560 2026] [ssl:error] [pid 2728916:tid 2728916] (EAI 2)Name or service not known: [client 144.76.19.72:37620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:40.990604 2026] [ssl:error] [pid 2728916:tid 2728916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:41.019300 2026] [authz_core:error] [pid 2729641:tid 2729641] [client 82.102.18.190:60188] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/plugins/contact-form-7/modules/turnstile/error_log
[Thu Jul 30 10:32:41.027788 2026] [core:error] [pid 2735366:tid 2735366] [client 66.249.64.170:47500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:41.027824 2026] [core:error] [pid 2735366:tid 2735366] [client 66.249.64.170:47500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:43.918150 2026] [security2:error] [pid 2722495:tid 2722495] [client 156.59.198.136:19602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2023/09/DSC_0108-400x266.jpeg"] [unique_id "amsaO60TZYu5ofD0PfBVSwAAACo"], referer: https://www.wmsfirearmstraining.com/activities/wms-introductory-and-family-rifle-experience-day/
[Thu Jul 30 10:32:44.044416 2026] [ssl:error] [pid 2719989:tid 2719989] (EAI 2)Name or service not known: [client 144.76.19.72:37636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:44.044451 2026] [ssl:error] [pid 2719989:tid 2719989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:44.100160 2026] [ssl:error] [pid 2730980:tid 2730980] (EAI 2)Name or service not known: [client 144.76.19.72:37648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:44.100187 2026] [ssl:error] [pid 2730980:tid 2730980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:44.327170 2026] [ssl:error] [pid 2729642:tid 2729642] (70014)End of file found: [client 216.73.216.199:27297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:45.544300 2026] [core:error] [pid 2733068:tid 2733068] (13)Permission denied: [client 216.73.216.199:46483] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory260/subsystem/uevent
[Thu Jul 30 10:32:46.206112 2026] [authz_core:error] [pid 2729641:tid 2729641] [client 66.249.66.34:62107] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:32:46.208905 2026] [authz_core:error] [pid 2729641:tid 2729641] [client 66.249.66.34:62107] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:32:46.251260 2026] [security2:error] [pid 2733072:tid 2733072] [client 47.128.52.60:28084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/robots.txt"] [unique_id "amsaPljyEMDMvqEbjCmMWgAAADk"]
[Thu Jul 30 10:32:47.159501 2026] [ssl:error] [pid 2720994:tid 2720994] (EAI 2)Name or service not known: [client 144.76.19.72:37650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:47.159528 2026] [ssl:error] [pid 2720994:tid 2720994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:47.199646 2026] [core:error] [pid 2735875:tid 2735875] [client 66.249.64.170:39506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:47.199677 2026] [core:error] [pid 2735875:tid 2735875] [client 66.249.64.170:39506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:32:47.213146 2026] [ssl:error] [pid 2733009:tid 2733009] (EAI 2)Name or service not known: [client 144.76.19.72:37656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:47.213191 2026] [ssl:error] [pid 2733009:tid 2733009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:47.954739 2026] [ssl:error] [pid 2733068:tid 2733068] (70014)End of file found: [client 216.73.216.199:46483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:49.175261 2026] [lsapi:warn] [pid 2726904:tid 2726904] [client 87.201.112.222:58696] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:49.977291 2026] [core:error] [pid 2729642:tid 2729642] (13)Permission denied: [client 216.73.216.199:11937] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-2/free_calls
[Thu Jul 30 10:32:50.266692 2026] [ssl:error] [pid 2726904:tid 2726904] (EAI 2)Name or service not known: [client 144.76.19.72:42420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:50.266736 2026] [ssl:error] [pid 2726904:tid 2726904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:50.323982 2026] [ssl:error] [pid 2735366:tid 2735366] (EAI 2)Name or service not known: [client 144.76.19.72:42422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:50.324011 2026] [ssl:error] [pid 2735366:tid 2735366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:50.682502 2026] [ssl:error] [pid 2729642:tid 2729642] (70014)End of file found: [client 216.73.216.199:11937] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:50.905605 2026] [lsapi:warn] [pid 2726839:tid 2726839] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:50.988060 2026] [core:error] [pid 2730614:tid 2730614] (13)Permission denied: [client 216.73.216.199:55892] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory212/subsystem/uevent
[Thu Jul 30 10:32:51.288852 2026] [core:error] [pid 2730614:tid 2730614] (13)Permission denied: [client 216.73.216.199:55892] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/uhci_urb_priv/align
[Thu Jul 30 10:32:52.718193 2026] [security2:error] [pid 2735875:tid 2735875] [client 185.191.171.18:41932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/incident-in-folkestone-today"] [unique_id "amsaRB8XN_mSCPCusaE6dQAAAAk"]
[Thu Jul 30 10:32:53.395530 2026] [core:error] [pid 2730614:tid 2730614] (13)Permission denied: [client 216.73.216.199:55892] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/destroy_by_rcu
[Thu Jul 30 10:32:53.402292 2026] [ssl:error] [pid 2729641:tid 2729641] (EAI 2)Name or service not known: [client 144.76.19.72:42436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:53.402324 2026] [ssl:error] [pid 2729641:tid 2729641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:53.455396 2026] [ssl:error] [pid 2728122:tid 2728122] (EAI 2)Name or service not known: [client 144.76.19.72:42444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:53.455439 2026] [ssl:error] [pid 2728122:tid 2728122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:53.999376 2026] [ssl:error] [pid 2730614:tid 2730614] (70014)End of file found: [client 216.73.216.199:55892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:54.479856 2026] [ssl:error] [pid 2733071:tid 2733071] (70014)End of file found: [client 216.73.216.199:51761] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:56.512749 2026] [ssl:error] [pid 2730615:tid 2730615] (EAI 2)Name or service not known: [client 144.76.19.72:42460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:56.512782 2026] [ssl:error] [pid 2730615:tid 2730615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:56.570710 2026] [ssl:error] [pid 2732878:tid 2732878] (EAI 2)Name or service not known: [client 144.76.19.72:42472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:56.570735 2026] [ssl:error] [pid 2732878:tid 2732878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:57.008002 2026] [core:error] [pid 2729641:tid 2729641] (13)Permission denied: [client 216.73.216.199:35184] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/objs_per_slab
[Thu Jul 30 10:32:57.609822 2026] [ssl:error] [pid 2729641:tid 2729641] (70014)End of file found: [client 216.73.216.199:35184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:32:58.760915 2026] [security2:error] [pid 2719989:tid 2719989] [client 164.132.49.123:46754] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsaSs-DeZzg5tYcWd1CxQAAACI"]
[Thu Jul 30 10:32:59.382091 2026] [lsapi:warn] [pid 2728916:tid 2728916] [client 87.201.112.222:23182] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:32:59.668501 2026] [ssl:error] [pid 2729455:tid 2729455] (EAI 2)Name or service not known: [client 144.76.19.72:58490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:59.668551 2026] [ssl:error] [pid 2729455:tid 2729455] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:32:59.725621 2026] [ssl:error] [pid 2720994:tid 2720994] (EAI 2)Name or service not known: [client 144.76.19.72:58496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:32:59.725643 2026] [ssl:error] [pid 2720994:tid 2720994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:00.912128 2026] [authz_core:error] [pid 2735875:tid 2735875] [client 66.249.66.34:48348] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:33:00.915009 2026] [authz_core:error] [pid 2735875:tid 2735875] [client 66.249.66.34:48348] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:33:01.750132 2026] [lsapi:warn] [pid 2733008:tid 2733008] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:01.830402 2026] [ssl:error] [pid 2719989:tid 2719989] (70014)End of file found: [client 216.73.216.199:42431] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:02.978550 2026] [ssl:error] [pid 2736725:tid 2736725] (EAI 2)Name or service not known: [client 144.76.19.72:58512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:02.978592 2026] [ssl:error] [pid 2736725:tid 2736725] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:03.035044 2026] [ssl:error] [pid 2736725:tid 2736725] (EAI 2)Name or service not known: [client 144.76.19.72:58526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:03.035085 2026] [ssl:error] [pid 2736725:tid 2736725] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:03.553899 2026] [core:error] [pid 2732945:tid 2732945] [client 66.249.64.171:49990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:03.553933 2026] [core:error] [pid 2732945:tid 2732945] [client 66.249.64.171:49990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:04.629096 2026] [autoindex:error] [pid 2728122:tid 2728122] (13)Permission denied: [client 216.73.216.199:9400] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/annasmithagent/
[Thu Jul 30 10:33:06.088715 2026] [ssl:error] [pid 2736789:tid 2736789] (EAI 2)Name or service not known: [client 144.76.19.72:58534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:06.088774 2026] [ssl:error] [pid 2736789:tid 2736789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:06.145519 2026] [ssl:error] [pid 2726838:tid 2726838] (EAI 2)Name or service not known: [client 144.76.19.72:58540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:06.145553 2026] [ssl:error] [pid 2726838:tid 2726838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:06.934767 2026] [security2:error] [pid 2733071:tid 2733071] [client 85.11.167.225:59774] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.themezcouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amsaUnFD0gr5Tl1c7A1-mwAAADg"]
[Thu Jul 30 10:33:06.935023 2026] [security2:error] [pid 2733071:tid 2733071] [client 85.11.167.225:59774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.themezcouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amsaUnFD0gr5Tl1c7A1-mwAAADg"]
[Thu Jul 30 10:33:06.935434 2026] [security2:error] [pid 2733071:tid 2733071] [client 85.11.167.225:59774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.themezcouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amsaUnFD0gr5Tl1c7A1-mwAAADg"]
[Thu Jul 30 10:33:06.943339 2026] [security2:error] [pid 2736886:tid 2736886] [client 85.11.167.225:59788] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.themezcouk.alism.com"] [uri "/.git/config"] [unique_id "amsaUvhCT2mGXRjF3lMzqQAAACM"]
[Thu Jul 30 10:33:06.943505 2026] [security2:error] [pid 2736886:tid 2736886] [client 85.11.167.225:59788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.themezcouk.alism.com"] [uri "/.git/config"] [unique_id "amsaUvhCT2mGXRjF3lMzqQAAACM"]
[Thu Jul 30 10:33:06.943944 2026] [security2:error] [pid 2736886:tid 2736886] [client 85.11.167.225:59788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.themezcouk.alism.com"] [uri "/.git/config"] [unique_id "amsaUvhCT2mGXRjF3lMzqQAAACM"]
[Thu Jul 30 10:33:07.040486 2026] [core:error] [pid 2732878:tid 2732878] (13)Permission denied: [client 216.73.216.199:32586] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/intel_rapl_common/uevent
[Thu Jul 30 10:33:07.336119 2026] [ssl:error] [pid 2728122:tid 2728122] (70014)End of file found: [client 216.73.216.199:9400] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:08.243171 2026] [ssl:error] [pid 2732878:tid 2732878] (70014)End of file found: [client 216.73.216.199:32586] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:08.449826 2026] [security2:error] [pid 2729570:tid 2729570] [client 164.132.227.147:57968] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "mjs-services.com"] [uri "/xmlrpc.php"] [unique_id "amsaVDM6Dw1Xmsk54DPUFwAAABU"]
[Thu Jul 30 10:33:09.201428 2026] [ssl:error] [pid 2729642:tid 2729642] (EAI 2)Name or service not known: [client 144.76.19.72:58548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:09.201458 2026] [ssl:error] [pid 2729642:tid 2729642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:09.257124 2026] [ssl:error] [pid 2736886:tid 2736886] (EAI 2)Name or service not known: [client 144.76.19.72:58552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:09.257163 2026] [ssl:error] [pid 2736886:tid 2736886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:09.272729 2026] [security2:error] [pid 2728916:tid 2728916] [client 103.77.213.62:50352] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaVcdCwP_rRDFZ4n5NXwAAAA0"]
[Thu Jul 30 10:33:09.272774 2026] [security2:error] [pid 2728916:tid 2728916] [client 103.77.213.62:50352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaVcdCwP_rRDFZ4n5NXwAAAA0"]
[Thu Jul 30 10:33:09.273032 2026] [security2:error] [pid 2728916:tid 2728916] [client 103.77.213.62:50352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaVcdCwP_rRDFZ4n5NXwAAAA0"]
[Thu Jul 30 10:33:09.934514 2026] [lsapi:warn] [pid 2736943:tid 2736943] [client 87.201.112.222:23182] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:10.046294 2026] [ssl:error] [pid 2736945:tid 2736945] (70014)End of file found: [client 216.73.216.199:5716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:12.315535 2026] [ssl:error] [pid 2730980:tid 2730980] (EAI 2)Name or service not known: [client 144.76.19.72:62894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:12.315561 2026] [ssl:error] [pid 2730980:tid 2730980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:12.367905 2026] [ssl:error] [pid 2720994:tid 2720994] (EAI 2)Name or service not known: [client 144.76.19.72:62896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:12.367944 2026] [ssl:error] [pid 2720994:tid 2720994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:12.475083 2026] [lsapi:warn] [pid 2733069:tid 2733069] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:12.528311 2026] [security2:error] [pid 2730614:tid 2730614] [client 114.119.132.171:55195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14/request_format~html"] [unique_id "amsaWHEWnhsR9Lm4Y6yYPwAAACc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14/request_format~html
[Thu Jul 30 10:33:12.863782 2026] [authz_core:error] [pid 2730450:tid 2730450] [client 66.249.66.33:35632] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:33:12.866568 2026] [authz_core:error] [pid 2730450:tid 2730450] [client 66.249.66.33:35632] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:33:13.369332 2026] [ssl:error] [pid 2728916:tid 2728916] (70014)End of file found: [client 216.73.216.199:23954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:14.229843 2026] [security2:error] [pid 2728122:tid 2728122] [client 114.119.132.171:55201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14/request_format~html"] [unique_id "amsaWjCHtO-4sG0MO1VjNAAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14/request_format~html
[Thu Jul 30 10:33:14.328886 2026] [security2:error] [pid 2736789:tid 2736789] [client 150.5.132.66:11207] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaWo_Q1zgxP1JrWwmQ0wAAAB4"]
[Thu Jul 30 10:33:14.328964 2026] [security2:error] [pid 2736789:tid 2736789] [client 150.5.132.66:11207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaWo_Q1zgxP1JrWwmQ0wAAAB4"]
[Thu Jul 30 10:33:14.329280 2026] [security2:error] [pid 2736789:tid 2736789] [client 150.5.132.66:11207] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaWo_Q1zgxP1JrWwmQ0wAAAB4"]
[Thu Jul 30 10:33:15.497867 2026] [ssl:error] [pid 2723436:tid 2723436] (EAI 2)Name or service not known: [client 144.76.19.72:62910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:15.497904 2026] [ssl:error] [pid 2723436:tid 2723436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:15.552798 2026] [ssl:error] [pid 2730614:tid 2730614] (EAI 2)Name or service not known: [client 144.76.19.72:62924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:15.552832 2026] [ssl:error] [pid 2730614:tid 2730614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:15.784501 2026] [ssl:error] [pid 2730980:tid 2730980] (70014)End of file found: [client 216.73.216.199:24257] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:16.061176 2026] [security2:error] [pid 2729642:tid 2729642] [client 20.203.156.12:41858] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hengerdebahn.newtronicmedia.com"] [uri "/wp-config.php"] [unique_id "amsaXFRAIZBFIoDbDB_OaAAAACQ"]
[Thu Jul 30 10:33:16.061294 2026] [security2:error] [pid 2729642:tid 2729642] [client 20.203.156.12:41858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hengerdebahn.newtronicmedia.com"] [uri "/wp-config.php"] [unique_id "amsaXFRAIZBFIoDbDB_OaAAAACQ"]
[Thu Jul 30 10:33:16.061466 2026] [security2:error] [pid 2729642:tid 2729642] [client 20.203.156.12:41858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hengerdebahn.newtronicmedia.com"] [uri "/wp-config.php"] [unique_id "amsaXFRAIZBFIoDbDB_OaAAAACQ"]
[Thu Jul 30 10:33:17.539331 2026] [security2:error] [pid 2730450:tid 2730450] [client 150.5.132.66:19767] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaXRjmuLKRimiq7eSjoQAAAAg"]
[Thu Jul 30 10:33:17.539402 2026] [security2:error] [pid 2730450:tid 2730450] [client 150.5.132.66:19767] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaXRjmuLKRimiq7eSjoQAAAAg"]
[Thu Jul 30 10:33:17.539790 2026] [security2:error] [pid 2730450:tid 2730450] [client 150.5.132.66:19767] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaXRjmuLKRimiq7eSjoQAAAAg"]
[Thu Jul 30 10:33:17.924389 2026] [security2:error] [pid 2737454:tid 2737454] [client 43.159.148.221:40932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsaXbxIcbQj7_5SCitpHQAAAAk"]
[Thu Jul 30 10:33:18.609211 2026] [ssl:error] [pid 2729570:tid 2729570] (EAI 2)Name or service not known: [client 144.76.19.72:62932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:18.609263 2026] [ssl:error] [pid 2729570:tid 2729570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:18.664648 2026] [ssl:error] [pid 2737500:tid 2737500] (EAI 2)Name or service not known: [client 144.76.19.72:62946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:18.664680 2026] [ssl:error] [pid 2737500:tid 2737500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:19.098317 2026] [ssl:error] [pid 2723436:tid 2723436] (70014)End of file found: [client 216.73.216.199:5310] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:19.451728 2026] [security2:error] [pid 2728916:tid 2728916] [client 167.172.227.247:55098] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsaX8dCwP_rRDFZ4n5NZgAAAA0"]
[Thu Jul 30 10:33:20.134295 2026] [security2:error] [pid 2737563:tid 2737563] [client 185.191.171.11:28160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,217.0/prev_next,prev.html"] [unique_id "amsaYC0-Z-1C94KnO_IqUgAAACg"]
[Thu Jul 30 10:33:20.853392 2026] [lsapi:warn] [pid 2729570:tid 2729570] [client 87.201.112.222:23182] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:21.055908 2026] [security2:error] [pid 2729641:tid 2729641] [client 43.159.148.221:34652] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsaYQz4ERMOsE_x3UyXWAAAAB8"], referer: http://www.retrodisco.co.uk
[Thu Jul 30 10:33:21.212717 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:53385] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 10:33:21.722817 2026] [ssl:error] [pid 2728916:tid 2728916] (EAI 2)Name or service not known: [client 144.76.19.72:37668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:21.722849 2026] [ssl:error] [pid 2728916:tid 2728916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:21.779709 2026] [ssl:error] [pid 2730450:tid 2730450] (EAI 2)Name or service not known: [client 144.76.19.72:37680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:21.779745 2026] [ssl:error] [pid 2730450:tid 2730450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:22.794975 2026] [security2:error] [pid 2728957:tid 2728957] [client 110.249.202.61:62736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amsaYtcu5VfhK1LFc_Te_wAAAA4"]
[Thu Jul 30 10:33:23.178199 2026] [lsapi:warn] [pid 2729641:tid 2729641] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:23.503587 2026] [security2:error] [pid 2736788:tid 2736788] [client 20.203.156.12:40586] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.hengerdebahn.newtronicmedia.com"] [uri "/var/log/error.log"] [unique_id "amsaY37JoOLzhZxa6_ScZQAAAB0"]
[Thu Jul 30 10:33:23.503799 2026] [security2:error] [pid 2736788:tid 2736788] [client 20.203.156.12:40586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hengerdebahn.newtronicmedia.com"] [uri "/var/log/error.log"] [unique_id "amsaY37JoOLzhZxa6_ScZQAAAB0"]
[Thu Jul 30 10:33:23.503996 2026] [security2:error] [pid 2736788:tid 2736788] [client 20.203.156.12:40586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.hengerdebahn.newtronicmedia.com"] [uri "/var/log/error.log"] [unique_id "amsaY37JoOLzhZxa6_ScZQAAAB0"]
[Thu Jul 30 10:33:23.848898 2026] [core:error] [pid 2719989:tid 2719989] [client 66.249.66.195:40258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:23.848923 2026] [core:error] [pid 2719989:tid 2719989] [client 66.249.66.195:40258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:23.851663 2026] [core:error] [pid 2731087:tid 2731087] [client 66.249.66.168:52445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:23.851686 2026] [core:error] [pid 2731087:tid 2731087] [client 66.249.66.168:52445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:24.522967 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:53385] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 10:33:24.865496 2026] [ssl:error] [pid 2731087:tid 2731087] (EAI 2)Name or service not known: [client 144.76.19.72:37694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:24.865552 2026] [ssl:error] [pid 2731087:tid 2731087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:24.919666 2026] [ssl:error] [pid 2736943:tid 2736943] (EAI 2)Name or service not known: [client 144.76.19.72:37702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:24.919721 2026] [ssl:error] [pid 2736943:tid 2736943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:25.727539 2026] [core:error] [pid 2728479:tid 2728479] (13)Permission denied: [client 216.73.216.199:53385] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory135/subsystem/uevent
[Thu Jul 30 10:33:26.028408 2026] [ssl:error] [pid 2728479:tid 2728479] (70014)End of file found: [client 216.73.216.199:53385] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:27.231299 2026] [core:error] [pid 2729641:tid 2729641] (13)Permission denied: [client 216.73.216.199:56806] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty55/subsystem/ttyS2/closing_wait
[Thu Jul 30 10:33:27.976723 2026] [ssl:error] [pid 2731087:tid 2731087] (EAI 2)Name or service not known: [client 144.76.19.72:37710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:27.976756 2026] [ssl:error] [pid 2731087:tid 2731087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:28.033805 2026] [ssl:error] [pid 2736943:tid 2736943] (EAI 2)Name or service not known: [client 144.76.19.72:37718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:28.033838 2026] [ssl:error] [pid 2736943:tid 2736943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:30.546931 2026] [core:error] [pid 2729641:tid 2729641] (13)Permission denied: [client 216.73.216.199:56806] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/cirrus/drivers/pci:cirrus/bind
[Thu Jul 30 10:33:31.028048 2026] [core:error] [pid 2730614:tid 2730614] [client 66.249.64.171:40293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:31.028091 2026] [core:error] [pid 2730614:tid 2730614] [client 66.249.64.171:40293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:31.086933 2026] [ssl:error] [pid 2726839:tid 2726839] (EAI 2)Name or service not known: [client 144.76.19.72:29296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:31.086966 2026] [ssl:error] [pid 2726839:tid 2726839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:31.138520 2026] [ssl:error] [pid 2736789:tid 2736789] (EAI 2)Name or service not known: [client 144.76.19.72:29302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:31.138553 2026] [ssl:error] [pid 2736789:tid 2736789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:31.148559 2026] [core:error] [pid 2729641:tid 2729641] (13)Permission denied: [client 216.73.216.199:56806] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS0/close_delay
[Thu Jul 30 10:33:31.148641 2026] [lsapi:warn] [pid 2729570:tid 2729570] [client 87.201.112.222:23191] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:33.568553 2026] [ssl:error] [pid 2729641:tid 2729641] (70014)End of file found: [client 216.73.216.199:56806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:33.922888 2026] [lsapi:warn] [pid 2735366:tid 2735366] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:34.193817 2026] [ssl:error] [pid 2733072:tid 2733072] (EAI 2)Name or service not known: [client 144.76.19.72:29310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:34.193851 2026] [ssl:error] [pid 2733072:tid 2733072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:34.250271 2026] [ssl:error] [pid 2736491:tid 2736491] (70014)End of file found: [client 216.73.216.199:6231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:34.251379 2026] [ssl:error] [pid 2737501:tid 2737501] (EAI 2)Name or service not known: [client 144.76.19.72:29320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:34.251409 2026] [ssl:error] [pid 2737501:tid 2737501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:35.558495 2026] [security2:error] [pid 2733008:tid 2733008] [client 216.73.216.199:37641] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/wddx.ini"] [unique_id "amsabwEJqBVxICauv5ZVTwAAAC4"]
[Thu Jul 30 10:33:35.558809 2026] [security2:error] [pid 2733008:tid 2733008] [client 216.73.216.199:37641] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/wddx.ini"] [unique_id "amsabwEJqBVxICauv5ZVTwAAAC4"]
[Thu Jul 30 10:33:35.559082 2026] [security2:error] [pid 2733008:tid 2733008] [client 216.73.216.199:37641] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/wddx.ini"] [unique_id "amsabwEJqBVxICauv5ZVTwAAAC4"]
[Thu Jul 30 10:33:37.307995 2026] [ssl:error] [pid 2736789:tid 2736789] (EAI 2)Name or service not known: [client 144.76.19.72:29336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:37.308025 2026] [ssl:error] [pid 2736789:tid 2736789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:37.360993 2026] [ssl:error] [pid 2726797:tid 2726797] (EAI 2)Name or service not known: [client 144.76.19.72:29344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:37.361034 2026] [ssl:error] [pid 2726797:tid 2726797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:37.665398 2026] [ssl:error] [pid 2733008:tid 2733008] (70014)End of file found: [client 216.73.216.199:37641] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:39.796588 2026] [core:error] [pid 2736789:tid 2736789] [client 66.249.66.195:41834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:39.796628 2026] [core:error] [pid 2736789:tid 2736789] [client 66.249.66.195:41834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:40.375514 2026] [ssl:error] [pid 2726165:tid 2726165] (70014)End of file found: [client 216.73.216.199:43822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:40.415616 2026] [ssl:error] [pid 2736491:tid 2736491] (EAI 2)Name or service not known: [client 144.76.19.72:49794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:40.415655 2026] [ssl:error] [pid 2736491:tid 2736491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:40.472671 2026] [ssl:error] [pid 2738492:tid 2738492] (EAI 2)Name or service not known: [client 144.76.19.72:49802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:40.472724 2026] [ssl:error] [pid 2738492:tid 2738492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:41.679016 2026] [lsapi:warn] [pid 2719989:tid 2719989] [client 87.201.112.222:23204] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:42.786927 2026] [ssl:error] [pid 2726898:tid 2726898] (70014)End of file found: [client 216.73.216.199:43001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:43.528299 2026] [ssl:error] [pid 2733008:tid 2733008] (EAI 2)Name or service not known: [client 144.76.19.72:49808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:43.528337 2026] [ssl:error] [pid 2733008:tid 2733008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:43.588296 2026] [ssl:error] [pid 2736786:tid 2736786] (EAI 2)Name or service not known: [client 144.76.19.72:49812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:43.588338 2026] [ssl:error] [pid 2736786:tid 2736786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:44.534008 2026] [lsapi:warn] [pid 2738492:tid 2738492] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:44.596140 2026] [core:error] [pid 2736788:tid 2736788] (13)Permission denied: [client 216.73.216.199:23880] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/hid/drivers/magicmouse/unbind
[Thu Jul 30 10:33:44.883932 2026] [cgi:error] [pid 2736491:tid 2736491] [client 20.203.156.12:40596] AH02811: stderr from /home/gkfcxzov/public_html/henger-de-bahn.de/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 10:33:44.983459 2026] [authz_core:error] [pid 2736491:tid 2736491] [client 20.203.156.12:40596] AH01630: client denied by server configuration: /home/gkfcxzov/public_html/henger-de-bahn.de/php.ini
[Thu Jul 30 10:33:46.646416 2026] [ssl:error] [pid 2738600:tid 2738600] (EAI 2)Name or service not known: [client 144.76.19.72:49828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:46.646458 2026] [ssl:error] [pid 2738600:tid 2738600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:46.703486 2026] [ssl:error] [pid 2737565:tid 2737565] (EAI 2)Name or service not known: [client 144.76.19.72:49836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:46.703520 2026] [ssl:error] [pid 2737565:tid 2737565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:47.184993 2026] [ssl:error] [pid 2738602:tid 2738602] (70014)End of file found: [client 216.73.216.199:9535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:47.303881 2026] [core:error] [pid 2736788:tid 2736788] (13)Permission denied: [client 216.73.216.199:23880] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 10:33:49.790986 2026] [ssl:error] [pid 2730614:tid 2730614] (EAI 2)Name or service not known: [client 144.76.19.72:59472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:49.791021 2026] [ssl:error] [pid 2730614:tid 2730614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:49.882636 2026] [ssl:error] [pid 2726797:tid 2726797] (EAI 2)Name or service not known: [client 144.76.19.72:59484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:49.882666 2026] [ssl:error] [pid 2726797:tid 2726797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:50.678471 2026] [core:error] [pid 2737565:tid 2737565] [client 66.249.64.170:49013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:50.678510 2026] [core:error] [pid 2737565:tid 2737565] [client 66.249.64.170:49013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:51.207084 2026] [authz_core:error] [pid 2739064:tid 2739064] [client 66.249.66.33:41722] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:33:51.210053 2026] [authz_core:error] [pid 2739064:tid 2739064] [client 66.249.66.33:41722] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:33:52.176144 2026] [lsapi:warn] [pid 2729641:tid 2729641] [client 87.201.112.222:44896] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:52.424658 2026] [security2:error] [pid 2738601:tid 2738601] [client 159.89.50.224:57854] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsagE_xhtvpKj05ZE2XfQAAAA8"]
[Thu Jul 30 10:33:52.940803 2026] [ssl:error] [pid 2738602:tid 2738602] (EAI 2)Name or service not known: [client 144.76.19.72:59486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:52.940861 2026] [ssl:error] [pid 2738602:tid 2738602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:52.997268 2026] [ssl:error] [pid 2728479:tid 2728479] (EAI 2)Name or service not known: [client 144.76.19.72:59488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:52.997297 2026] [ssl:error] [pid 2728479:tid 2728479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:53.113257 2026] [security2:error] [pid 2713929:tid 2713929] [client 185.191.171.2:39154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/unaired-to-catch-a-predator"] [unique_id "amsagULr0RYD8cMBPjOVngAAADA"]
[Thu Jul 30 10:33:53.823703 2026] [security2:error] [pid 2713929:tid 2713929] [client 43.166.246.180:52044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amsagULr0RYD8cMBPjOVnwAAADA"]
[Thu Jul 30 10:33:54.227762 2026] [ssl:error] [pid 2736788:tid 2736788] (70014)End of file found: [client 216.73.216.199:23880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:54.529846 2026] [ssl:error] [pid 2738601:tid 2738601] (70014)End of file found: [client 216.73.216.199:49434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:55.311369 2026] [lsapi:warn] [pid 2736789:tid 2736789] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:33:56.069309 2026] [ssl:error] [pid 2713929:tid 2713929] (EAI 2)Name or service not known: [client 144.76.19.72:59492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:56.069351 2026] [ssl:error] [pid 2713929:tid 2713929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:56.122653 2026] [ssl:error] [pid 2736945:tid 2736945] (EAI 2)Name or service not known: [client 144.76.19.72:59504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:56.122689 2026] [ssl:error] [pid 2736945:tid 2736945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:57.240145 2026] [ssl:error] [pid 2731675:tid 2731675] (70014)End of file found: [client 216.73.216.199:30374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:33:58.330143 2026] [security2:error] [pid 2733008:tid 2733008] [client 85.208.96.209:62954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amsahgEJqBVxICauv5ZVXgAAAC4"]
[Thu Jul 30 10:33:58.541446 2026] [security2:error] [pid 2736945:tid 2736945] [client 185.191.171.7:36078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2009/10/20/disk2vhd-convert-a-live-disk-into-a-vhd-virtual-image/"] [unique_id "amsahk1uXScmymFfVDRMnQAAACk"]
[Thu Jul 30 10:33:59.202217 2026] [ssl:error] [pid 2739064:tid 2739064] (EAI 2)Name or service not known: [client 144.76.19.72:59514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:59.202250 2026] [ssl:error] [pid 2739064:tid 2739064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:59.257337 2026] [ssl:error] [pid 2736945:tid 2736945] (EAI 2)Name or service not known: [client 144.76.19.72:59518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:33:59.257385 2026] [ssl:error] [pid 2736945:tid 2736945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:33:59.928577 2026] [core:error] [pid 2739108:tid 2739108] [client 66.249.64.170:38261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:33:59.928620 2026] [core:error] [pid 2739108:tid 2739108] [client 66.249.64.170:38261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:01.450699 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:42141] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 10:34:02.052648 2026] [ssl:error] [pid 2722495:tid 2722495] (70014)End of file found: [client 216.73.216.199:42141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:02.358626 2026] [ssl:error] [pid 2733068:tid 2733068] (EAI 2)Name or service not known: [client 144.76.19.72:38712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:02.358666 2026] [ssl:error] [pid 2733068:tid 2733068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:02.410958 2026] [ssl:error] [pid 2736789:tid 2736789] (EAI 2)Name or service not known: [client 144.76.19.72:38716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:02.410988 2026] [ssl:error] [pid 2736789:tid 2736789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:02.558116 2026] [lsapi:warn] [pid 2729455:tid 2729455] [client 87.201.112.222:44889] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:03.195836 2026] [security2:error] [pid 2737501:tid 2737501] [client 94.154.43.187:48958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsai62TXDd-Ld5A92CfRwAAACE"]
[Thu Jul 30 10:34:03.196024 2026] [security2:error] [pid 2737501:tid 2737501] [client 94.154.43.187:48958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsai62TXDd-Ld5A92CfRwAAACE"]
[Thu Jul 30 10:34:03.196488 2026] [security2:error] [pid 2737501:tid 2737501] [client 94.154.43.187:48958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsai62TXDd-Ld5A92CfRwAAACE"]
[Thu Jul 30 10:34:04.972734 2026] [ssl:error] [pid 2738492:tid 2738492] (70014)End of file found: [client 216.73.216.199:59956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:05.467834 2026] [ssl:error] [pid 2731087:tid 2731087] (EAI 2)Name or service not known: [client 144.76.19.72:38724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:05.467882 2026] [ssl:error] [pid 2731087:tid 2731087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:05.520830 2026] [ssl:error] [pid 2729455:tid 2729455] (EAI 2)Name or service not known: [client 144.76.19.72:38736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:05.520861 2026] [ssl:error] [pid 2729455:tid 2729455] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:05.923158 2026] [lsapi:warn] [pid 2737501:tid 2737501] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:08.283362 2026] [ssl:error] [pid 2739064:tid 2739064] (70014)End of file found: [client 216.73.216.199:33689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:08.576105 2026] [ssl:error] [pid 2735366:tid 2735366] (EAI 2)Name or service not known: [client 144.76.19.72:38738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:08.576130 2026] [ssl:error] [pid 2735366:tid 2735366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:08.628589 2026] [ssl:error] [pid 2736787:tid 2736787] (EAI 2)Name or service not known: [client 144.76.19.72:38752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:08.628628 2026] [ssl:error] [pid 2736787:tid 2736787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:08.674378 2026] [authz_core:error] [pid 2730552:tid 2730552] [client 68.221.186.136:1736] AH01630: client denied by server configuration: /home/erskinen/public_html/wp-content/plugins/Cache
[Thu Jul 30 10:34:10.092022 2026] [ssl:error] [pid 2736786:tid 2736786] (70014)End of file found: [client 216.73.216.199:39948] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:12.504895 2026] [core:error] [pid 2740080:tid 2740080] [client 66.249.66.41:63662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:12.504959 2026] [core:error] [pid 2740080:tid 2740080] [client 66.249.66.41:63662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:12.664682 2026] [ssl:error] [pid 2726838:tid 2726838] (EAI 2)Name or service not known: [client 144.76.19.72:47332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:12.664725 2026] [ssl:error] [pid 2726838:tid 2726838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:13.361915 2026] [ssl:error] [pid 2738603:tid 2738603] (EAI 2)Name or service not known: [client 144.76.19.72:47348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:13.361944 2026] [ssl:error] [pid 2738603:tid 2738603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:13.419002 2026] [ssl:error] [pid 2737565:tid 2737565] (70014)End of file found: [client 216.73.216.199:9110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:13.712156 2026] [lsapi:warn] [pid 2739064:tid 2739064] [client 87.201.112.222:23176] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:14.938837 2026] [ssl:error] [pid 2736491:tid 2736491] (70014)End of file found: [client 216.73.216.199:53958] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:15.438944 2026] [autoindex:error] [pid 2738602:tid 2738602] (13)Permission denied: [client 216.73.216.199:35478] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/tompalm/
[Thu Jul 30 10:34:15.540661 2026] [ssl:error] [pid 2738602:tid 2738602] (70014)End of file found: [client 216.73.216.199:35478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:16.032121 2026] [core:error] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory195/subsystem/uevent
[Thu Jul 30 10:34:16.419503 2026] [ssl:error] [pid 2740128:tid 2740128] (EAI 2)Name or service not known: [client 144.76.19.72:47364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:16.419562 2026] [ssl:error] [pid 2740128:tid 2740128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:16.429276 2026] [security2:error] [pid 2739998:tid 2739998] [client 43.160.225.169:52070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "junglejacks.co.uk"] [uri "/"] [unique_id "amsamHbnugW06A4s5shhBAAAACQ"]
[Thu Jul 30 10:34:16.443089 2026] [core:error] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/signal_cache/free_calls
[Thu Jul 30 10:34:16.473335 2026] [ssl:error] [pid 2735077:tid 2735077] (EAI 2)Name or service not known: [client 144.76.19.72:47368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:16.473379 2026] [ssl:error] [pid 2735077:tid 2735077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:16.508438 2026] [security2:error] [pid 2738603:tid 2738603] [client 110.249.202.76:13120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amsamFuTmw5yDOIoUw0fsgAAABI"]
[Thu Jul 30 10:34:16.717633 2026] [lsapi:warn] [pid 2740123:tid 2740123] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:18.715982 2026] [security2:error] [pid 2737500:tid 2737500] [client 43.160.225.169:53592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amsammeXzbv0iuf_k_jH1gAAABY"], referer: http://junglejacks.co.uk
[Thu Jul 30 10:34:19.527763 2026] [ssl:error] [pid 2738491:tid 2738491] (EAI 2)Name or service not known: [client 144.76.19.72:47376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:19.527796 2026] [ssl:error] [pid 2738491:tid 2738491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:19.579969 2026] [ssl:error] [pid 2731087:tid 2731087] (EAI 2)Name or service not known: [client 144.76.19.72:61552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:19.580005 2026] [ssl:error] [pid 2731087:tid 2731087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:21.267891 2026] [core:crit] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/cache/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/cache/' is executable
[Thu Jul 30 10:34:21.268614 2026] [core:crit] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/ns_parse_cache/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/ns_parse_cache/' is executable
[Thu Jul 30 10:34:21.269319 2026] [core:crit] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/dynamic/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/dynamic/' is executable
[Thu Jul 30 10:34:21.269433 2026] [core:crit] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/slaves/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/slaves/' is executable
[Thu Jul 30 10:34:21.272637 2026] [core:crit] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/parse_cache/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/parse_cache/' is executable
[Thu Jul 30 10:34:21.277287 2026] [core:crit] [pid 2740078:tid 2740078] (13)Permission denied: [client 216.73.216.199:2003] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/data/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/data/' is executable
[Thu Jul 30 10:34:22.166405 2026] [ssl:error] [pid 2740078:tid 2740078] (70014)End of file found: [client 216.73.216.199:2003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:22.632668 2026] [ssl:error] [pid 2737500:tid 2737500] (EAI 2)Name or service not known: [client 144.76.19.72:61558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:22.632705 2026] [ssl:error] [pid 2737500:tid 2737500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:22.685513 2026] [ssl:error] [pid 2738603:tid 2738603] (EAI 2)Name or service not known: [client 144.76.19.72:61570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:22.685546 2026] [ssl:error] [pid 2738603:tid 2738603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:23.370362 2026] [ssl:error] [pid 2731087:tid 2731087] (70014)End of file found: [client 216.73.216.199:25853] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:23.511320 2026] [lsapi:warn] [pid 2740126:tid 2740126] [client 87.201.112.222:23208] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:23.868557 2026] [core:error] [pid 2740079:tid 2740079] (13)Permission denied: [client 216.73.216.199:29877] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/poison
[Thu Jul 30 10:34:24.393576 2026] [security2:error] [pid 2739815:tid 2739815] [client 141.94.94.95:49196] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoID1zR7_-6iodQNAJQAAABo"]
[Thu Jul 30 10:34:24.393636 2026] [security2:error] [pid 2739815:tid 2739815] [client 141.94.94.95:49196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoID1zR7_-6iodQNAJQAAABo"]
[Thu Jul 30 10:34:24.393890 2026] [security2:error] [pid 2739815:tid 2739815] [client 141.94.94.95:49196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaoID1zR7_-6iodQNAJQAAABo"]
[Thu Jul 30 10:34:24.512096 2026] [security2:error] [pid 2736725:tid 2736725] [client 51.91.255.78:51750] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoCuokkki-F2_WK-dBQAAABg"]
[Thu Jul 30 10:34:24.512173 2026] [security2:error] [pid 2736725:tid 2736725] [client 51.91.255.78:51750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoCuokkki-F2_WK-dBQAAABg"]
[Thu Jul 30 10:34:24.512442 2026] [security2:error] [pid 2736725:tid 2736725] [client 51.91.255.78:51750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaoCuokkki-F2_WK-dBQAAABg"]
[Thu Jul 30 10:34:24.878252 2026] [ssl:error] [pid 2740079:tid 2740079] (70014)End of file found: [client 216.73.216.199:29877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:25.768587 2026] [ssl:error] [pid 2740126:tid 2740126] (EAI 2)Name or service not known: [client 144.76.19.72:61578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:25.768658 2026] [ssl:error] [pid 2740126:tid 2740126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:25.825482 2026] [ssl:error] [pid 2737500:tid 2737500] (EAI 2)Name or service not known: [client 144.76.19.72:61582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:25.825507 2026] [ssl:error] [pid 2737500:tid 2737500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:27.055568 2026] [security2:error] [pid 2736787:tid 2736787] [client 51.75.23.111:37512] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoxiurlcU4uFG34cS7AAAABw"]
[Thu Jul 30 10:34:27.055652 2026] [security2:error] [pid 2736787:tid 2736787] [client 51.75.23.111:37512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoxiurlcU4uFG34cS7AAAABw"]
[Thu Jul 30 10:34:27.056041 2026] [security2:error] [pid 2736787:tid 2736787] [client 51.75.23.111:37512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaoxiurlcU4uFG34cS7AAAABw"]
[Thu Jul 30 10:34:27.137148 2026] [security2:error] [pid 2739862:tid 2739862] [client 141.94.94.32:34228] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoz2Sx77o_7CFetvFCwAAAB8"]
[Thu Jul 30 10:34:27.137200 2026] [security2:error] [pid 2739862:tid 2739862] [client 141.94.94.32:34228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsaoz2Sx77o_7CFetvFCwAAAB8"]
[Thu Jul 30 10:34:27.137461 2026] [security2:error] [pid 2739862:tid 2739862] [client 141.94.94.32:34228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsaoz2Sx77o_7CFetvFCwAAAB8"]
[Thu Jul 30 10:34:27.440181 2026] [lsapi:warn] [pid 2731675:tid 2731675] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:27.524366 2026] [ssl:error] [pid 2726839:tid 2726839] (70014)End of file found: [client 216.73.216.199:44278] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:27.787709 2026] [core:error] [pid 2729455:tid 2729455] [client 66.249.66.167:42163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:27.787745 2026] [core:error] [pid 2729455:tid 2729455] [client 66.249.66.167:42163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:27.791870 2026] [core:error] [pid 2736660:tid 2736660] [client 66.249.66.40:42675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:27.791906 2026] [core:error] [pid 2736660:tid 2736660] [client 66.249.66.40:42675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:28.763982 2026] [security2:error] [pid 2739862:tid 2739862] [client 141.94.94.32:34228] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.0/prev_next,next.html"] [unique_id "amsapD2Sx77o_7CFetvFDAAAAB8"]
[Thu Jul 30 10:34:28.764047 2026] [security2:error] [pid 2739862:tid 2739862] [client 141.94.94.32:34228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.0/prev_next,next.html"] [unique_id "amsapD2Sx77o_7CFetvFDAAAAB8"]
[Thu Jul 30 10:34:28.764377 2026] [security2:error] [pid 2739862:tid 2739862] [client 141.94.94.32:34228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsapD2Sx77o_7CFetvFDAAAAB8"]
[Thu Jul 30 10:34:28.815356 2026] [security2:error] [pid 2740816:tid 2740816] [client 213.32.68.81:56116] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.0/prev_next,next.html"] [unique_id "amsapMyuYoW8DsfgaEoWOAAAAAI"]
[Thu Jul 30 10:34:28.815409 2026] [security2:error] [pid 2740816:tid 2740816] [client 213.32.68.81:56116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.0/prev_next,next.html"] [unique_id "amsapMyuYoW8DsfgaEoWOAAAAAI"]
[Thu Jul 30 10:34:28.815704 2026] [security2:error] [pid 2740816:tid 2740816] [client 213.32.68.81:56116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsapMyuYoW8DsfgaEoWOAAAAAI"]
[Thu Jul 30 10:34:28.880482 2026] [ssl:error] [pid 2739108:tid 2739108] (EAI 2)Name or service not known: [client 144.76.19.72:61588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:28.880538 2026] [ssl:error] [pid 2739108:tid 2739108] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:28.934185 2026] [ssl:error] [pid 2729455:tid 2729455] (EAI 2)Name or service not known: [client 144.76.19.72:61592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:28.934225 2026] [ssl:error] [pid 2729455:tid 2729455] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:29.140569 2026] [ssl:error] [pid 2730552:tid 2730552] (70014)End of file found: [client 216.73.216.199:48881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:30.048110 2026] [core:error] [pid 2740871:tid 2740871] (13)Permission denied: [client 216.73.216.199:40750] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/cagefs/skeleton.libs.list
[Thu Jul 30 10:34:31.251427 2026] [ssl:error] [pid 2740871:tid 2740871] (70014)End of file found: [client 216.73.216.199:40750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:31.990087 2026] [ssl:error] [pid 2737500:tid 2737500] (EAI 2)Name or service not known: [client 144.76.19.72:20072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:31.990146 2026] [ssl:error] [pid 2737500:tid 2737500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:32.042518 2026] [ssl:error] [pid 2740126:tid 2740126] (EAI 2)Name or service not known: [client 144.76.19.72:20082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:32.042554 2026] [ssl:error] [pid 2740126:tid 2740126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:32.947577 2026] [ssl:error] [pid 2740122:tid 2740122] (70014)End of file found: [client 216.73.216.199:7556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:33.962131 2026] [lsapi:warn] [pid 2740126:tid 2740126] [client 87.201.112.222:23198] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:34.410677 2026] [core:error] [pid 2722495:tid 2722495] [client 66.249.66.66:62755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:34.410712 2026] [core:error] [pid 2722495:tid 2722495] [client 66.249.66.66:62755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:34:34.471052 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-bazvsbkx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-bazvsbkx/' is executable
[Thu Jul 30 10:34:34.475160 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/' is executable
[Thu Jul 30 10:34:34.476952 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-vuk0cupl/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-vuk0cupl/' is executable
[Thu Jul 30 10:34:34.487252 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-zfuqapa9/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-zfuqapa9/' is executable
[Thu Jul 30 10:34:34.487297 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/' is executable
[Thu Jul 30 10:34:34.490360 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/' is executable
[Thu Jul 30 10:34:34.495942 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-m25d8tn_/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-m25d8tn_/' is executable
[Thu Jul 30 10:34:34.500534 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-ptb93rze/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-ptb93rze/' is executable
[Thu Jul 30 10:34:34.500930 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-vs_5h8vw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-vs_5h8vw/' is executable
[Thu Jul 30 10:34:34.502625 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-urki9vq5/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-urki9vq5/' is executable
[Thu Jul 30 10:34:34.504842 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/' is executable
[Thu Jul 30 10:34:34.508887 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pm45e04g/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pm45e04g/' is executable
[Thu Jul 30 10:34:34.511912 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-o2wyv0oj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-o2wyv0oj/' is executable
[Thu Jul 30 10:34:34.514439 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-ilysblsz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-ilysblsz/' is executable
[Thu Jul 30 10:34:34.514739 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/' is executable
[Thu Jul 30 10:34:34.521530 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-bhe4auzv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-bhe4auzv/' is executable
[Thu Jul 30 10:34:34.524853 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-t0mgg3cv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-t0mgg3cv/' is executable
[Thu Jul 30 10:34:34.529653 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-6b4g6ain/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-6b4g6ain/' is executable
[Thu Jul 30 10:34:34.531104 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-xwbnb_cj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-xwbnb_cj/' is executable
[Thu Jul 30 10:34:34.532299 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pzyber_l/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pzyber_l/' is executable
[Thu Jul 30 10:34:34.532558 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-utbgbvka/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-utbgbvka/' is executable
[Thu Jul 30 10:34:34.533422 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pckpp7iz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pckpp7iz/' is executable
[Thu Jul 30 10:34:34.533767 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-q_4s1dmg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-q_4s1dmg/' is executable
[Thu Jul 30 10:34:34.536420 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/' is executable
[Thu Jul 30 10:34:34.537798 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-fb6u1ntx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-fb6u1ntx/' is executable
[Thu Jul 30 10:34:34.539091 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-bpwqiojf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-bpwqiojf/' is executable
[Thu Jul 30 10:34:34.539963 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-q2t2tbi3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-q2t2tbi3/' is executable
[Thu Jul 30 10:34:34.541510 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-ubj5lzzh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-ubj5lzzh/' is executable
[Thu Jul 30 10:34:34.542824 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pkan3sjx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-pkan3sjx/' is executable
[Thu Jul 30 10:34:34.543299 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-rysxxx39/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-rysxxx39/' is executable
[Thu Jul 30 10:34:34.545555 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-2u0lmmbu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-2u0lmmbu/' is executable
[Thu Jul 30 10:34:34.545741 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-5a2k1oi2/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-5a2k1oi2/' is executable
[Thu Jul 30 10:34:34.546095 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/' is executable
[Thu Jul 30 10:34:34.547690 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/lost+found/' is executable
[Thu Jul 30 10:34:34.549023 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-rzzc6i3o/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-rzzc6i3o/' is executable
[Thu Jul 30 10:34:34.549362 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-h1jwcnlk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-h1jwcnlk/' is executable
[Thu Jul 30 10:34:34.552148 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-_6d7rllb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-_6d7rllb/' is executable
[Thu Jul 30 10:34:34.553666 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-2wv4v5mp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-2wv4v5mp/' is executable
[Thu Jul 30 10:34:34.553885 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-wkkpuur3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-wkkpuur3/' is executable
[Thu Jul 30 10:34:34.558189 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-rjd_9s_e/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-rjd_9s_e/' is executable
[Thu Jul 30 10:34:34.568496 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-sj45mp0p/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/pymp-sj45mp0p/' is executable
[Thu Jul 30 10:34:34.569530 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/' is executable
[Thu Jul 30 10:34:34.570608 2026] [core:crit] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/' is executable
[Thu Jul 30 10:34:34.811125 2026] [security2:error] [pid 2726838:tid 2726838] [client 114.119.144.31:30933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,30,18/request_format~html"] [unique_id "amsaqqRVOYu9ktJcTkCd6QAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,30/request_format%7Ehtml
[Thu Jul 30 10:34:35.099578 2026] [ssl:error] [pid 2740872:tid 2740872] (EAI 2)Name or service not known: [client 144.76.19.72:20088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:35.099623 2026] [ssl:error] [pid 2740872:tid 2740872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:35.157800 2026] [ssl:error] [pid 2733008:tid 2733008] (EAI 2)Name or service not known: [client 144.76.19.72:20090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:35.157843 2026] [ssl:error] [pid 2733008:tid 2733008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:35.977565 2026] [authz_core:error] [pid 2723714:tid 2723714] [client 66.249.66.33:53164] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:34:35.980259 2026] [authz_core:error] [pid 2723714:tid 2723714] [client 66.249.66.33:53164] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:34:36.072649 2026] [core:error] [pid 2739107:tid 2739107] (13)Permission denied: [client 216.73.216.199:16747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty27/subsystem/ttyS3/uartclk
[Thu Jul 30 10:34:36.500418 2026] [security2:error] [pid 2740123:tid 2740123] [client 114.119.144.31:30939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,30,18/request_format~html"] [unique_id "amsarKYPXNB7kFuDeuIafAAAADU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,30/request_format%7Ehtml
[Thu Jul 30 10:34:37.778714 2026] [ssl:error] [pid 2740872:tid 2740872] (70014)End of file found: [client 216.73.216.199:8919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:38.164210 2026] [lsapi:warn] [pid 2741216:tid 2741216] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:38.194717 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:39882] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/usbmon/usbmon1/device/usb1/remove
[Thu Jul 30 10:34:38.243056 2026] [ssl:error] [pid 2740122:tid 2740122] (EAI 2)Name or service not known: [client 144.76.19.72:20096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:38.243102 2026] [ssl:error] [pid 2740122:tid 2740122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:38.296884 2026] [ssl:error] [pid 2731675:tid 2731675] (EAI 2)Name or service not known: [client 144.76.19.72:20104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:38.296913 2026] [ssl:error] [pid 2731675:tid 2731675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:38.495562 2026] [ssl:error] [pid 2722495:tid 2722495] (70014)End of file found: [client 216.73.216.199:39882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:39.700321 2026] [ssl:error] [pid 2731675:tid 2731675] (70014)End of file found: [client 216.73.216.199:14679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:40.087249 2026] [security2:error] [pid 2739998:tid 2739998] [client 85.208.96.196:29910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1469.0.html"] [unique_id "amsasHbnugW06A4s5shhDwAAACQ"]
[Thu Jul 30 10:34:40.102407 2026] [authz_core:error] [pid 2741267:tid 2741267] [client 40.77.167.28:47043] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 10:34:41.397689 2026] [ssl:error] [pid 2735366:tid 2735366] (EAI 2)Name or service not known: [client 144.76.19.72:52420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:41.397723 2026] [ssl:error] [pid 2735366:tid 2735366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:41.454311 2026] [ssl:error] [pid 2723714:tid 2723714] (EAI 2)Name or service not known: [client 144.76.19.72:52434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:41.454344 2026] [ssl:error] [pid 2723714:tid 2723714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:44.522503 2026] [ssl:error] [pid 2731087:tid 2731087] (EAI 2)Name or service not known: [client 144.76.19.72:52442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:44.522527 2026] [ssl:error] [pid 2731087:tid 2731087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:44.524427 2026] [ssl:error] [pid 2740872:tid 2740872] (70014)End of file found: [client 216.73.216.199:20000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:44.575920 2026] [ssl:error] [pid 2740037:tid 2740037] (EAI 2)Name or service not known: [client 144.76.19.72:52454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:44.575955 2026] [ssl:error] [pid 2740037:tid 2740037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:44.594182 2026] [lsapi:warn] [pid 2736725:tid 2736725] [client 87.201.112.222:44867] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:46.630695 2026] [ssl:error] [pid 2737454:tid 2737454] (70014)End of file found: [client 216.73.216.199:24410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:47.630570 2026] [ssl:error] [pid 2737565:tid 2737565] (EAI 2)Name or service not known: [client 144.76.19.72:52466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:47.630611 2026] [ssl:error] [pid 2737565:tid 2737565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:47.686838 2026] [ssl:error] [pid 2741690:tid 2741690] (EAI 2)Name or service not known: [client 144.76.19.72:52472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:47.686882 2026] [ssl:error] [pid 2741690:tid 2741690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:48.745300 2026] [lsapi:warn] [pid 2740816:tid 2740816] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:49.039638 2026] [core:error] [pid 2731675:tid 2731675] (13)Permission denied: [client 216.73.216.199:58170] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/sanity_checks
[Thu Jul 30 10:34:49.943151 2026] [ssl:error] [pid 2731675:tid 2731675] (70014)End of file found: [client 216.73.216.199:58170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:50.747914 2026] [ssl:error] [pid 2736789:tid 2736789] (EAI 2)Name or service not known: [client 144.76.19.72:21220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:50.747942 2026] [ssl:error] [pid 2736789:tid 2736789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:50.800666 2026] [ssl:error] [pid 2741691:tid 2741691] (EAI 2)Name or service not known: [client 144.76.19.72:21226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:50.800714 2026] [ssl:error] [pid 2741691:tid 2741691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:50.841093 2026] [ssl:error] [pid 2740078:tid 2740078] (70014)End of file found: [client 216.73.216.199:29687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:51.933495 2026] [proxy_http:error] [pid 2741690:tid 2741690] (70008)Partial results are valid but processing is incomplete: [client 69.63.184.8:51632] AH01110: error reading response
[Thu Jul 30 10:34:52.351517 2026] [ssl:error] [pid 2723714:tid 2723714] (70014)End of file found: [client 216.73.216.199:52345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:53.380769 2026] [access_compat:error] [pid 2741691:tid 2741691] [client 45.158.164.139:41460] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:34:53.538822 2026] [security2:error] [pid 2741597:tid 2741597] [client 85.208.96.208:20976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/2021-peace-dollar-high-relief"] [unique_id "amsavW2EwFrxFYfJAuoZZwAAAAY"]
[Thu Jul 30 10:34:53.762798 2026] [security2:error] [pid 2736789:tid 2736789] [client 216.194.174.116:63846] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "apotheekcandidejacobs.be"] [uri "/xmlrpc.php"] [unique_id "amsavY_Q1zgxP1JrWwmRWQAAAB4"]
[Thu Jul 30 10:34:53.851607 2026] [security2:error] [pid 2741597:tid 2741597] [client 43.166.246.180:51838] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/"] [unique_id "amsavW2EwFrxFYfJAuoZaAAAAAY"]
[Thu Jul 30 10:34:53.855311 2026] [authz_core:error] [pid 2741597:tid 2741597] [client 43.166.246.180:51838] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log
[Thu Jul 30 10:34:53.862631 2026] [ssl:error] [pid 2741636:tid 2741636] (EAI 2)Name or service not known: [client 144.76.19.72:21230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:53.862657 2026] [ssl:error] [pid 2741636:tid 2741636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:53.918680 2026] [ssl:error] [pid 2741501:tid 2741501] (EAI 2)Name or service not known: [client 144.76.19.72:21246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:53.918714 2026] [ssl:error] [pid 2741501:tid 2741501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:54.170858 2026] [authz_core:error] [pid 2739064:tid 2739064] [client 66.249.66.33:51096] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:34:54.173555 2026] [authz_core:error] [pid 2739064:tid 2739064] [client 66.249.66.33:51096] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:34:55.104321 2026] [lsapi:warn] [pid 2741597:tid 2741597] [client 87.201.112.222:44911] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:34:55.278863 2026] [ssl:error] [pid 2741691:tid 2741691] (70014)End of file found: [client 216.73.216.199:57046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:34:56.253624 2026] [security2:error] [pid 2740872:tid 2740872] [client 176.31.139.5:23384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/b2o3-molecular-or-ionic-compound"] [unique_id "amsawExfjGTLlP_hV72unQAAAA0"]
[Thu Jul 30 10:34:56.999765 2026] [ssl:error] [pid 2730552:tid 2730552] (EAI 2)Name or service not known: [client 144.76.19.72:21252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:56.999818 2026] [ssl:error] [pid 2730552:tid 2730552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:57.053108 2026] [ssl:error] [pid 2738603:tid 2738603] (EAI 2)Name or service not known: [client 144.76.19.72:21262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:34:57.053139 2026] [ssl:error] [pid 2738603:tid 2738603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:34:58.420707 2026] [proxy_http:error] [pid 2736789:tid 2736789] (70008)Partial results are valid but processing is incomplete: [client 173.252.70.46:45620] AH01110: error reading response
[Thu Jul 30 10:34:58.722146 2026] [core:error] [pid 2740123:tid 2740123] (13)Permission denied: [client 216.73.216.199:55951] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-16/slabs_cpu_partial
[Thu Jul 30 10:34:59.336439 2026] [lsapi:warn] [pid 2723714:tid 2723714] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:00.137556 2026] [ssl:error] [pid 2742233:tid 2742233] (EAI 2)Name or service not known: [client 144.76.19.72:50818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:00.137622 2026] [ssl:error] [pid 2742233:tid 2742233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:00.212267 2026] [ssl:error] [pid 2723714:tid 2723714] (EAI 2)Name or service not known: [client 144.76.19.72:50824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:00.212301 2026] [ssl:error] [pid 2723714:tid 2723714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:01.730908 2026] [core:error] [pid 2740123:tid 2740123] (13)Permission denied: [client 216.73.216.199:55951] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_tree_mark/free_calls
[Thu Jul 30 10:35:02.031820 2026] [core:error] [pid 2740123:tid 2740123] (13)Permission denied: [client 216.73.216.199:55951] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_conntrack_ftp/sections/__mcount_loc
[Thu Jul 30 10:35:03.240710 2026] [core:error] [pid 2740123:tid 2740123] (13)Permission denied: [client 216.73.216.199:55951] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-16/hwcache_align
[Thu Jul 30 10:35:03.315932 2026] [ssl:error] [pid 2742332:tid 2742332] (EAI 2)Name or service not known: [client 144.76.19.72:50840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:03.315963 2026] [ssl:error] [pid 2742332:tid 2742332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:03.370892 2026] [ssl:error] [pid 2742330:tid 2742330] (EAI 2)Name or service not known: [client 144.76.19.72:50856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:03.370923 2026] [ssl:error] [pid 2742330:tid 2742330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:04.099262 2026] [security2:error] [pid 2728479:tid 2728479] [client 46.34.147.2:57772] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsayHN65j64Q5P10tUq7QAAAAA"]
[Thu Jul 30 10:35:04.099326 2026] [security2:error] [pid 2728479:tid 2728479] [client 46.34.147.2:57772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsayHN65j64Q5P10tUq7QAAAAA"]
[Thu Jul 30 10:35:04.099568 2026] [security2:error] [pid 2728479:tid 2728479] [client 46.34.147.2:57772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsayHN65j64Q5P10tUq7QAAAAA"]
[Thu Jul 30 10:35:04.152503 2026] [ssl:error] [pid 2740123:tid 2740123] (70014)End of file found: [client 216.73.216.199:55951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:04.920673 2026] [ssl:error] [pid 2738603:tid 2738603] (70014)End of file found: [client 216.73.216.199:3808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:05.610120 2026] [lsapi:warn] [pid 2741267:tid 2741267] [client 87.201.112.222:58702] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:06.434493 2026] [ssl:error] [pid 2736491:tid 2736491] (EAI 2)Name or service not known: [client 144.76.19.72:50864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:06.434524 2026] [ssl:error] [pid 2736491:tid 2736491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:06.490302 2026] [ssl:error] [pid 2740036:tid 2740036] (EAI 2)Name or service not known: [client 144.76.19.72:50876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:06.490334 2026] [ssl:error] [pid 2740036:tid 2740036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:06.923159 2026] [security2:error] [pid 2741267:tid 2741267] [client 85.154.7.238:48670] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsayqyRQ335kaj0AOfhQgAAABk"]
[Thu Jul 30 10:35:06.923213 2026] [security2:error] [pid 2741267:tid 2741267] [client 85.154.7.238:48670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsayqyRQ335kaj0AOfhQgAAABk"]
[Thu Jul 30 10:35:06.923475 2026] [security2:error] [pid 2741267:tid 2741267] [client 85.154.7.238:48670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsayqyRQ335kaj0AOfhQgAAABk"]
[Thu Jul 30 10:35:07.611000 2026] [ssl:error] [pid 2740078:tid 2740078] (70014)End of file found: [client 216.73.216.199:45919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:09.542248 2026] [ssl:error] [pid 2742233:tid 2742233] (EAI 2)Name or service not known: [client 144.76.19.72:50892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:09.542271 2026] [ssl:error] [pid 2742233:tid 2742233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:09.593709 2026] [ssl:error] [pid 2737565:tid 2737565] (EAI 2)Name or service not known: [client 144.76.19.72:59184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:09.593734 2026] [ssl:error] [pid 2737565:tid 2737565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:09.613960 2026] [core:error] [pid 2723714:tid 2723714] (13)Permission denied: [client 216.73.216.199:28504] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-248/slabs
[Thu Jul 30 10:35:09.727425 2026] [core:error] [pid 2723714:tid 2723714] (13)Permission denied: [client 216.73.216.199:28504] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/aio_kiocb/ctor
[Thu Jul 30 10:35:10.029183 2026] [ssl:error] [pid 2723714:tid 2723714] (70014)End of file found: [client 216.73.216.199:28504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:10.068711 2026] [lsapi:warn] [pid 2742233:tid 2742233] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:10.374318 2026] [proxy_http:error] [pid 2733008:tid 2733008] (70008)Partial results are valid but processing is incomplete: [client 173.252.70.35:44818] AH01110: error reading response
[Thu Jul 30 10:35:10.427520 2026] [security2:error] [pid 2741597:tid 2741597] [client 185.104.255.151:59004] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsazm2EwFrxFYfJAuoZcAAAAAY"]
[Thu Jul 30 10:35:10.427581 2026] [security2:error] [pid 2741597:tid 2741597] [client 185.104.255.151:59004] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsazm2EwFrxFYfJAuoZcAAAAAY"]
[Thu Jul 30 10:35:10.427841 2026] [security2:error] [pid 2741597:tid 2741597] [client 185.104.255.151:59004] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsazm2EwFrxFYfJAuoZcAAAAAY"]
[Thu Jul 30 10:35:12.024206 2026] [security2:error] [pid 2742233:tid 2742233] [client 185.191.171.16:61226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1983.0/prev_next,prev.html"] [unique_id "amsa0KZstsRULcan2qRdvgAAAAI"]
[Thu Jul 30 10:35:12.445849 2026] [ssl:error] [pid 2740036:tid 2740036] (70014)End of file found: [client 216.73.216.199:7969] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:12.645520 2026] [ssl:error] [pid 2737454:tid 2737454] (EAI 2)Name or service not known: [client 144.76.19.72:59200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:12.645553 2026] [ssl:error] [pid 2737454:tid 2737454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:12.699276 2026] [ssl:error] [pid 2737565:tid 2737565] (EAI 2)Name or service not known: [client 144.76.19.72:59212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:12.699303 2026] [ssl:error] [pid 2737565:tid 2737565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:12.940203 2026] [authz_core:error] [pid 2741638:tid 2741638] [client 20.104.16.169:26382] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 10:35:12.941947 2026] [access_compat:error] [pid 2741638:tid 2741638] [client 20.104.16.169:26382] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 10:35:12.944257 2026] [access_compat:error] [pid 2741638:tid 2741638] [client 20.104.16.169:26382] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 10:35:12.946992 2026] [access_compat:error] [pid 2741638:tid 2741638] [client 20.104.16.169:26382] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 10:35:12.950332 2026] [access_compat:error] [pid 2741638:tid 2741638] [client 20.104.16.169:26382] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 10:35:12.950369 2026] [access_compat:error] [pid 2741638:tid 2741638] [client 20.104.16.169:26382] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 10:35:15.755957 2026] [core:error] [pid 2742233:tid 2742233] (13)Permission denied: [client 216.73.216.199:27438] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_efd_item/store_user
[Thu Jul 30 10:35:15.757811 2026] [ssl:error] [pid 2730552:tid 2730552] (EAI 2)Name or service not known: [client 144.76.19.72:59214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:15.757833 2026] [ssl:error] [pid 2730552:tid 2730552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:15.817377 2026] [ssl:error] [pid 2739107:tid 2739107] (EAI 2)Name or service not known: [client 144.76.19.72:59216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:15.817418 2026] [ssl:error] [pid 2739107:tid 2739107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:16.294909 2026] [lsapi:warn] [pid 2740078:tid 2740078] [client 87.201.112.222:23199] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:16.966776 2026] [ssl:error] [pid 2742233:tid 2742233] (5)Input/output error: [client 216.73.216.199:27438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:17.456532 2026] [ssl:error] [pid 2740080:tid 2740080] (70014)End of file found: [client 216.73.216.199:23478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:17.698314 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.production"] [unique_id "amsa1Suokkki-F2_WK-dJQAAABg"]
[Thu Jul 30 10:35:17.698506 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.production"] [unique_id "amsa1Suokkki-F2_WK-dJQAAABg"]
[Thu Jul 30 10:35:17.698911 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.production"] [unique_id "amsa1Suokkki-F2_WK-dJQAAABg"]
[Thu Jul 30 10:35:17.804856 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amsa1Suokkki-F2_WK-dJgAAABg"]
[Thu Jul 30 10:35:17.805078 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amsa1Suokkki-F2_WK-dJgAAABg"]
[Thu Jul 30 10:35:17.805511 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amsa1Suokkki-F2_WK-dJgAAABg"]
[Thu Jul 30 10:35:17.910973 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/HEAD"] [unique_id "amsa1Suokkki-F2_WK-dJwAAABg"]
[Thu Jul 30 10:35:17.911172 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/HEAD"] [unique_id "amsa1Suokkki-F2_WK-dJwAAABg"]
[Thu Jul 30 10:35:17.911561 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/HEAD"] [unique_id "amsa1Suokkki-F2_WK-dJwAAABg"]
[Thu Jul 30 10:35:18.688283 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.development"] [unique_id "amsa1iuokkki-F2_WK-dKwAAABg"]
[Thu Jul 30 10:35:18.688460 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.development"] [unique_id "amsa1iuokkki-F2_WK-dKwAAABg"]
[Thu Jul 30 10:35:18.688844 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.development"] [unique_id "amsa1iuokkki-F2_WK-dKwAAABg"]
[Thu Jul 30 10:35:18.776726 2026] [security2:error] [pid 2722495:tid 2722495] [client 216.73.216.199:7016] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_rss_eth_z8e.dat"] [unique_id "amsa1q0TZYu5ofD0PfBWfgAAACo"]
[Thu Jul 30 10:35:18.777004 2026] [security2:error] [pid 2722495:tid 2722495] [client 216.73.216.199:7016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_rss_eth_z8e.dat"] [unique_id "amsa1q0TZYu5ofD0PfBWfgAAACo"]
[Thu Jul 30 10:35:18.777225 2026] [security2:error] [pid 2722495:tid 2722495] [client 216.73.216.199:7016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_rss_eth_z8e.dat"] [unique_id "amsa1q0TZYu5ofD0PfBWfgAAACo"]
[Thu Jul 30 10:35:18.835829 2026] [security2:error] [pid 2730552:tid 2730552] [client 82.39.212.105:49922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.local"] [unique_id "amsa1hleqFoe5IkxhggMfgAAAAw"]
[Thu Jul 30 10:35:18.836009 2026] [security2:error] [pid 2730552:tid 2730552] [client 82.39.212.105:49922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.local"] [unique_id "amsa1hleqFoe5IkxhggMfgAAAAw"]
[Thu Jul 30 10:35:18.836423 2026] [security2:error] [pid 2730552:tid 2730552] [client 82.39.212.105:49922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env.local"] [unique_id "amsa1hleqFoe5IkxhggMfgAAAAw"]
[Thu Jul 30 10:35:18.888824 2026] [security2:error] [pid 2740123:tid 2740123] [client 82.39.212.105:49862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amsa1qYPXNB7kFuDeuIargAAADU"]
[Thu Jul 30 10:35:18.888957 2026] [security2:error] [pid 2740123:tid 2740123] [client 82.39.212.105:49862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amsa1qYPXNB7kFuDeuIargAAADU"]
[Thu Jul 30 10:35:18.889354 2026] [security2:error] [pid 2740123:tid 2740123] [client 82.39.212.105:49862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amsa1qYPXNB7kFuDeuIargAAADU"]
[Thu Jul 30 10:35:19.077840 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:7016] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCPv6/destroy_by_rcu
[Thu Jul 30 10:35:19.178082 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsa1yuokkki-F2_WK-dLwAAABg"]
[Thu Jul 30 10:35:19.178252 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsa1yuokkki-F2_WK-dLwAAABg"]
[Thu Jul 30 10:35:19.178645 2026] [security2:error] [pid 2736725:tid 2736725] [client 82.39.212.105:49260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amsa1yuokkki-F2_WK-dLwAAABg"]
[Thu Jul 30 10:35:19.225619 2026] [ssl:error] [pid 2736491:tid 2736491] (EAI 2)Name or service not known: [client 144.76.19.72:59228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:19.225644 2026] [ssl:error] [pid 2736491:tid 2736491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:19.242874 2026] [security2:error] [pid 2728479:tid 2728479] [client 82.39.212.105:49974] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsa13N65j64Q5P10tUq8QAAAAA"]
[Thu Jul 30 10:35:19.243081 2026] [security2:error] [pid 2728479:tid 2728479] [client 82.39.212.105:49974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsa13N65j64Q5P10tUq8QAAAAA"]
[Thu Jul 30 10:35:19.243481 2026] [security2:error] [pid 2728479:tid 2728479] [client 82.39.212.105:49974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsa13N65j64Q5P10tUq8QAAAAA"]
[Thu Jul 30 10:35:19.340094 2026] [cgi:error] [pid 2743321:tid 2743321] [client 82.39.212.105:49906] AH02812: stderr from /home/wmsfirea/public_html/wmsfirearmstraining.org/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:35:19.800489 2026] [ssl:error] [pid 2738602:tid 2738602] (EAI 2)Name or service not known: [client 144.76.19.72:59238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:19.800511 2026] [ssl:error] [pid 2738602:tid 2738602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:19.981374 2026] [core:error] [pid 2722495:tid 2722495] (13)Permission denied: [client 216.73.216.199:7016] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS0/uartclk
[Thu Jul 30 10:35:20.282005 2026] [ssl:error] [pid 2722495:tid 2722495] (70014)End of file found: [client 216.73.216.199:7016] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:22.189057 2026] [lsapi:warn] [pid 2743436:tid 2743436] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:22.855120 2026] [ssl:error] [pid 2740080:tid 2740080] (EAI 2)Name or service not known: [client 144.76.19.72:26680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:22.855161 2026] [ssl:error] [pid 2740080:tid 2740080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:22.912231 2026] [ssl:error] [pid 2740080:tid 2740080] (EAI 2)Name or service not known: [client 144.76.19.72:26688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:22.912256 2026] [ssl:error] [pid 2740080:tid 2740080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:23.013060 2026] [security2:error] [pid 2740080:tid 2740080] [client 139.155.134.17:38704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unique-pr.co.uk"] [uri "/"] [unique_id "amsa26ybbcLPlZ97TQXsKAAAADM"]
[Thu Jul 30 10:35:24.725860 2026] [authz_core:error] [pid 2728479:tid 2728479] [client 57.141.0.34:20736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:35:24.726493 2026] [authz_core:error] [pid 2728479:tid 2728479] [client 57.141.0.34:20736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:35:25.155001 2026] [security2:error] [pid 2736725:tid 2736725] [client 185.191.171.16:29718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7070.0.html"] [unique_id "amsa3Suokkki-F2_WK-dMQAAABg"]
[Thu Jul 30 10:35:25.428878 2026] [ssl:error] [pid 2739107:tid 2739107] (70014)End of file found: [client 216.73.216.199:64324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:25.800496 2026] [security2:error] [pid 2743479:tid 2743479] [client 114.119.136.8:38241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/wallasey-egremont-merseyside/"] [unique_id "amsa3dAXqHrMm5UJPUWm7gAAAD0"], referer: https://www.kinesiologylondon.co.uk/kinesiology-therapy-centre-moorgate-liverpool-street?share=twitter
[Thu Jul 30 10:35:25.966566 2026] [ssl:error] [pid 2743486:tid 2743486] (EAI 2)Name or service not known: [client 144.76.19.72:26702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:25.966615 2026] [ssl:error] [pid 2743486:tid 2743486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:26.021955 2026] [ssl:error] [pid 2743487:tid 2743487] (EAI 2)Name or service not known: [client 144.76.19.72:26704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:26.021984 2026] [ssl:error] [pid 2743487:tid 2743487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:26.328874 2026] [security2:error] [pid 2743441:tid 2743441] [client 216.73.216.199:57325] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/yum/pluginconf.d/copr.conf"] [unique_id "amsa3gRxtuR_2ekUqKpnSQAAADk"]
[Thu Jul 30 10:35:26.329264 2026] [security2:error] [pid 2743441:tid 2743441] [client 216.73.216.199:57325] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/yum/pluginconf.d/copr.conf"] [unique_id "amsa3gRxtuR_2ekUqKpnSQAAADk"]
[Thu Jul 30 10:35:26.329559 2026] [security2:error] [pid 2743441:tid 2743441] [client 216.73.216.199:57325] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/yum/pluginconf.d/copr.conf"] [unique_id "amsa3gRxtuR_2ekUqKpnSQAAADk"]
[Thu Jul 30 10:35:26.630577 2026] [ssl:error] [pid 2743441:tid 2743441] (70014)End of file found: [client 216.73.216.199:57325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:26.865346 2026] [lsapi:warn] [pid 2740080:tid 2740080] [client 87.201.112.222:23222] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:26.997044 2026] [security2:error] [pid 2743478:tid 2743478] [client 170.106.110.146:42462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bes-systems.co.uk"] [uri "/"] [unique_id "amsa3iWPqpcepsfxp3gAXwAAADw"]
[Thu Jul 30 10:35:27.120135 2026] [ssl:error] [pid 2741268:tid 2741268] (70014)End of file found: [client 216.73.216.199:30933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:28.032669 2026] [authz_core:error] [pid 2743491:tid 2743491] [client 57.141.0.70:44106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:35:28.033299 2026] [authz_core:error] [pid 2743491:tid 2743491] [client 57.141.0.70:44106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:35:28.951353 2026] [core:error] [pid 2742331:tid 2742331] [client 57.141.0.5:48610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:28.951394 2026] [core:error] [pid 2742331:tid 2742331] [client 57.141.0.5:48610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:28.968588 2026] [security2:error] [pid 2743480:tid 2743480] [client 170.106.110.146:60198] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsa4OWJdy39sZZu_tTKCgAAAD4"], referer: http://bes-systems.co.uk
[Thu Jul 30 10:35:29.093438 2026] [ssl:error] [pid 2736491:tid 2736491] (EAI 2)Name or service not known: [client 144.76.19.72:26712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:29.093478 2026] [ssl:error] [pid 2736491:tid 2736491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:29.159224 2026] [ssl:error] [pid 2738602:tid 2738602] (EAI 2)Name or service not known: [client 144.76.19.72:26718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:29.159249 2026] [ssl:error] [pid 2738602:tid 2738602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:30.561209 2026] [core:error] [pid 2735366:tid 2735366] [client 57.141.0.26:51216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:30.561272 2026] [core:error] [pid 2735366:tid 2735366] [client 57.141.0.26:51216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:30.729736 2026] [core:error] [pid 2742331:tid 2742331] [client 57.141.0.43:34808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:30.729772 2026] [core:error] [pid 2742331:tid 2742331] [client 57.141.0.43:34808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:31.528350 2026] [lsapi:warn] [pid 2743437:tid 2743437] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:31.548627 2026] [cgi:error] [pid 2743480:tid 2743480] [client 47.128.117.64:20394] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:35:32.212435 2026] [ssl:error] [pid 2731087:tid 2731087] (EAI 2)Name or service not known: [client 144.76.19.72:21646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:32.212467 2026] [ssl:error] [pid 2731087:tid 2731087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:32.273012 2026] [ssl:error] [pid 2742277:tid 2742277] (EAI 2)Name or service not known: [client 144.76.19.72:21652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:32.273040 2026] [ssl:error] [pid 2742277:tid 2742277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:32.498599 2026] [security2:error] [pid 2735366:tid 2735366] [client 114.119.137.232:33007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amsa5HXIt8v7uQzE-MlE4QAAAAo"], referer: http://jonathanmeyerart.co.uk/
[Thu Jul 30 10:35:32.566322 2026] [authz_core:error] [pid 2722495:tid 2722495] [client 57.141.0.46:29066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 10:35:32.566941 2026] [authz_core:error] [pid 2722495:tid 2722495] [client 57.141.0.46:29066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 10:35:32.655926 2026] [ssl:error] [pid 2736491:tid 2736491] (70014)End of file found: [client 216.73.216.199:40873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:34.456907 2026] [ssl:error] [pid 2736725:tid 2736725] (70014)End of file found: [client 216.73.216.199:27421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:35.343024 2026] [ssl:error] [pid 2742330:tid 2742330] (EAI 2)Name or service not known: [client 144.76.19.72:21668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:35.343054 2026] [ssl:error] [pid 2742330:tid 2742330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:35.363766 2026] [core:error] [pid 2743482:tid 2743482] (13)Permission denied: [client 216.73.216.199:32601] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS0/custom_divisor
[Thu Jul 30 10:35:35.424657 2026] [ssl:error] [pid 2731087:tid 2731087] (EAI 2)Name or service not known: [client 144.76.19.72:21680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:35.424699 2026] [ssl:error] [pid 2731087:tid 2731087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:37.169873 2026] [ssl:error] [pid 2743482:tid 2743482] (70014)End of file found: [client 216.73.216.199:32601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:37.222530 2026] [lsapi:warn] [pid 2743436:tid 2743436] [client 87.201.112.222:58726] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:37.358226 2026] [core:error] [pid 2728479:tid 2728479] [client 66.249.66.160:55594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:37.358254 2026] [core:error] [pid 2728479:tid 2728479] [client 66.249.66.160:55594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:38.481566 2026] [ssl:error] [pid 2743487:tid 2743487] (EAI 2)Name or service not known: [client 144.76.19.72:21692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:38.481613 2026] [ssl:error] [pid 2743487:tid 2743487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:38.534265 2026] [ssl:error] [pid 2740128:tid 2740128] (EAI 2)Name or service not known: [client 144.76.19.72:21702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:38.534289 2026] [ssl:error] [pid 2740128:tid 2740128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:38.672966 2026] [ssl:error] [pid 2743492:tid 2743492] (70014)End of file found: [client 216.73.216.199:43044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:40.538194 2026] [core:crit] [pid 2740080:tid 2740080] (13)Permission denied: [client 216.73.216.199:21608] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/var/clcpapi/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/var/clcpapi/' is executable
[Thu Jul 30 10:35:40.787494 2026] [ssl:error] [pid 2740080:tid 2740080] (22)Invalid argument: [client 216.73.216.199:21608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:41.587880 2026] [ssl:error] [pid 2740123:tid 2740123] (EAI 2)Name or service not known: [client 144.76.19.72:54816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:41.587924 2026] [ssl:error] [pid 2740123:tid 2740123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:41.644311 2026] [ssl:error] [pid 2743401:tid 2743401] (EAI 2)Name or service not known: [client 144.76.19.72:54828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:41.644346 2026] [ssl:error] [pid 2743401:tid 2743401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:42.130325 2026] [lsapi:warn] [pid 2743487:tid 2743487] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:42.893094 2026] [ssl:error] [pid 2743479:tid 2743479] (70014)End of file found: [client 216.73.216.199:57567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:44.700784 2026] [ssl:error] [pid 2743402:tid 2743402] (EAI 2)Name or service not known: [client 144.76.19.72:54834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:44.700843 2026] [ssl:error] [pid 2743402:tid 2743402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:44.754739 2026] [ssl:error] [pid 2737454:tid 2737454] (EAI 2)Name or service not known: [client 144.76.19.72:54846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:44.754785 2026] [ssl:error] [pid 2737454:tid 2737454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:47.809260 2026] [ssl:error] [pid 2738492:tid 2738492] (EAI 2)Name or service not known: [client 144.76.19.72:54858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:47.809287 2026] [ssl:error] [pid 2738492:tid 2738492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:47.862094 2026] [ssl:error] [pid 2743361:tid 2743361] (EAI 2)Name or service not known: [client 144.76.19.72:54874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:47.862122 2026] [ssl:error] [pid 2743361:tid 2743361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:48.032922 2026] [ssl:error] [pid 2735077:tid 2735077] (70014)End of file found: [client 216.73.216.199:10241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:48.486566 2026] [lsapi:warn] [pid 2743437:tid 2743437] [client 87.201.112.222:58718] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:48.932191 2026] [core:error] [pid 2726839:tid 2726839] (13)Permission denied: [client 216.73.216.199:45092] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/virtio/drivers/virtio_blk/bind
[Thu Jul 30 10:35:49.195471 2026] [core:error] [pid 2743437:tid 2743437] [client 220.181.108.165:64123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:49.195503 2026] [core:error] [pid 2743437:tid 2743437] [client 220.181.108.165:64123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:49.733517 2026] [core:error] [pid 2744598:tid 2744598] [client 111.225.214.222:63591] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:49.733565 2026] [core:error] [pid 2744598:tid 2744598] [client 111.225.214.222:63591] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:50.273921 2026] [core:error] [pid 2743360:tid 2743360] [client 119.249.100.45:23172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:50.273952 2026] [core:error] [pid 2743360:tid 2743360] [client 119.249.100.45:23172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:35:50.441968 2026] [core:error] [pid 2743440:tid 2743440] (13)Permission denied: [client 216.73.216.199:10573] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma/shrink
[Thu Jul 30 10:35:50.744401 2026] [ssl:error] [pid 2743440:tid 2743440] (70014)End of file found: [client 216.73.216.199:10573] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:50.918012 2026] [ssl:error] [pid 2743439:tid 2743439] (EAI 2)Name or service not known: [client 144.76.19.72:33324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:50.918091 2026] [ssl:error] [pid 2743439:tid 2743439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:50.974477 2026] [ssl:error] [pid 2722495:tid 2722495] (EAI 2)Name or service not known: [client 144.76.19.72:33338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:50.974507 2026] [ssl:error] [pid 2722495:tid 2722495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:52.550545 2026] [core:error] [pid 2726839:tid 2726839] (13)Permission denied: [client 216.73.216.199:45092] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/xt_limit/uevent
[Thu Jul 30 10:35:52.827937 2026] [lsapi:warn] [pid 2743439:tid 2743439] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:53.934726 2026] [security2:error] [pid 2743436:tid 2743436] [client 185.191.171.18:20126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/steve-wilson-louisville,-ky"] [unique_id "amsa-bUx6PnlJd6dWtS33gAAAC8"]
[Thu Jul 30 10:35:54.030562 2026] [ssl:error] [pid 2739064:tid 2739064] (EAI 2)Name or service not known: [client 144.76.19.72:33350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:54.030587 2026] [ssl:error] [pid 2739064:tid 2739064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:54.086656 2026] [ssl:error] [pid 2743480:tid 2743480] (EAI 2)Name or service not known: [client 144.76.19.72:33352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:54.086685 2026] [ssl:error] [pid 2743480:tid 2743480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:54.359208 2026] [ssl:error] [pid 2737501:tid 2737501] (70014)End of file found: [client 216.73.216.199:52734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:54.660391 2026] [autoindex:error] [pid 2726839:tid 2726839] (13)Permission denied: [client 216.73.216.199:45092] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/seedhubdev/
[Thu Jul 30 10:35:55.080623 2026] [security2:error] [pid 2739064:tid 2739064] [client 202.59.207.54:40774] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "blow-hairstudio.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsa-0fJYM4SB1U64qFLngAAAAM"]
[Thu Jul 30 10:35:55.561134 2026] [core:error] [pid 2726839:tid 2726839] (13)Permission denied: [client 216.73.216.199:45092] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory132/subsystem/uevent
[Thu Jul 30 10:35:56.162969 2026] [ssl:error] [pid 2726839:tid 2726839] (70014)End of file found: [client 216.73.216.199:45092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:56.764867 2026] [core:error] [pid 2744935:tid 2744935] (13)Permission denied: [client 216.73.216.199:33576] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/poison
[Thu Jul 30 10:35:57.266469 2026] [ssl:error] [pid 2743484:tid 2743484] (EAI 2)Name or service not known: [client 144.76.19.72:33354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:57.266504 2026] [ssl:error] [pid 2743484:tid 2743484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:57.488817 2026] [ssl:error] [pid 2744989:tid 2744989] (EAI 2)Name or service not known: [client 144.76.19.72:33358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:35:57.488862 2026] [ssl:error] [pid 2744989:tid 2744989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:35:57.968291 2026] [ssl:error] [pid 2744935:tid 2744935] (70014)End of file found: [client 216.73.216.199:33576] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:35:58.393150 2026] [lsapi:warn] [pid 2743360:tid 2743360] [client 87.201.112.222:44877] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:35:59.445211 2026] [security2:error] [pid 2743442:tid 2743442] [client 114.119.157.183:54145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/im-new/the-good-news/"] [unique_id "amsa_-2kSWqN1X8-ahFVDAAAADo"], referer: http://erskinenazarene.co.uk/
[Thu Jul 30 10:36:00.540808 2026] [ssl:error] [pid 2745129:tid 2745129] (70014)End of file found: [client 216.73.216.199:58517] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:00.622092 2026] [core:error] [pid 2745136:tid 2745136] [client 66.249.64.172:58382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:00.622136 2026] [core:error] [pid 2745136:tid 2745136] [client 66.249.64.172:58382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:01.030943 2026] [security2:error] [pid 2745136:tid 2745136] [client 114.119.157.183:42187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/im-new/the-good-news/"] [unique_id "amsbAQWpicgQWd7s_tWxawAAADs"], referer: http://erskinenazarene.co.uk/
[Thu Jul 30 10:36:01.141191 2026] [ssl:error] [pid 2740037:tid 2740037] (EAI 2)Name or service not known: [client 144.76.19.72:56428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:01.141216 2026] [ssl:error] [pid 2740037:tid 2740037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:02.231639 2026] [ssl:error] [pid 2740123:tid 2740123] (EAI 2)Name or service not known: [client 144.76.19.72:56442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:02.231665 2026] [ssl:error] [pid 2740123:tid 2740123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:02.770115 2026] [security2:error] [pid 2743492:tid 2743492] [client 8.216.48.119:29579] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbAl5dJipiXa6RW6ZDoQAAAEo"]
[Thu Jul 30 10:36:02.770165 2026] [security2:error] [pid 2743492:tid 2743492] [client 8.216.48.119:29579] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbAl5dJipiXa6RW6ZDoQAAAEo"]
[Thu Jul 30 10:36:02.770414 2026] [security2:error] [pid 2743492:tid 2743492] [client 8.216.48.119:29579] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbAl5dJipiXa6RW6ZDoQAAAEo"]
[Thu Jul 30 10:36:02.791372 2026] [core:error] [pid 2745061:tid 2745061] (13)Permission denied: [client 216.73.216.199:10354] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/dbowners
[Thu Jul 30 10:36:02.809275 2026] [security2:error] [pid 2745319:tid 2745319] [client 74.7.241.48:60332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mwdesign.josieandmatt.co.uk"] [uri "/"] [unique_id "amsbAumTpDBh3rXJP2HoHwAAAEM"]
[Thu Jul 30 10:36:03.541089 2026] [lsapi:warn] [pid 2744935:tid 2744935] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:04.206777 2026] [ssl:error] [pid 2743321:tid 2743321] (70014)End of file found: [client 216.73.216.199:4436] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:04.372121 2026] [security2:error] [pid 2745373:tid 2745373] [client 84.57.115.52:64450] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbBH8nsnGR_sVwVXkRpwAAAEk"]
[Thu Jul 30 10:36:04.372187 2026] [security2:error] [pid 2745373:tid 2745373] [client 84.57.115.52:64450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbBH8nsnGR_sVwVXkRpwAAAEk"]
[Thu Jul 30 10:36:04.372488 2026] [security2:error] [pid 2745373:tid 2745373] [client 84.57.115.52:64450] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbBH8nsnGR_sVwVXkRpwAAAEk"]
[Thu Jul 30 10:36:05.288057 2026] [ssl:error] [pid 2745373:tid 2745373] (EAI 2)Name or service not known: [client 144.76.19.72:56452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:05.288108 2026] [ssl:error] [pid 2745373:tid 2745373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:05.341476 2026] [ssl:error] [pid 2744990:tid 2744990] (EAI 2)Name or service not known: [client 144.76.19.72:56464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:05.341504 2026] [ssl:error] [pid 2744990:tid 2744990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:06.734718 2026] [core:error] [pid 2742331:tid 2742331] (13)Permission denied: [client 216.73.216.199:7642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-16/alloc_calls
[Thu Jul 30 10:36:07.638894 2026] [ssl:error] [pid 2742331:tid 2742331] (70014)End of file found: [client 216.73.216.199:7642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:08.395893 2026] [ssl:error] [pid 2740123:tid 2740123] (EAI 2)Name or service not known: [client 144.76.19.72:56478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:08.395937 2026] [ssl:error] [pid 2740123:tid 2740123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:08.450531 2026] [ssl:error] [pid 2736491:tid 2736491] (EAI 2)Name or service not known: [client 144.76.19.72:56490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:08.450559 2026] [ssl:error] [pid 2736491:tid 2736491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:08.779237 2026] [lsapi:warn] [pid 2745429:tid 2745429] [client 87.201.112.222:58709] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:08.834685 2026] [security2:error] [pid 2743479:tid 2743479] [client 186.179.192.129:56330] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbCNAXqHrMm5UJPUWnXAAAAD0"]
[Thu Jul 30 10:36:08.834741 2026] [security2:error] [pid 2743479:tid 2743479] [client 186.179.192.129:56330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbCNAXqHrMm5UJPUWnXAAAAD0"]
[Thu Jul 30 10:36:08.834967 2026] [security2:error] [pid 2743479:tid 2743479] [client 186.179.192.129:56330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbCNAXqHrMm5UJPUWnXAAAAD0"]
[Thu Jul 30 10:36:10.643746 2026] [security2:error] [pid 2745374:tid 2745374] [client 216.73.216.199:62229] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/modules.d/98dracut-systemd/dracut-tmpfiles.conf"] [unique_id "amsbCividAP63k36f9yi0wAAAEs"]
[Thu Jul 30 10:36:10.643993 2026] [security2:error] [pid 2745374:tid 2745374] [client 216.73.216.199:62229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/modules.d/98dracut-systemd/dracut-tmpfiles.conf"] [unique_id "amsbCividAP63k36f9yi0wAAAEs"]
[Thu Jul 30 10:36:10.644199 2026] [security2:error] [pid 2745374:tid 2745374] [client 216.73.216.199:62229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/modules.d/98dracut-systemd/dracut-tmpfiles.conf"] [unique_id "amsbCividAP63k36f9yi0wAAAEs"]
[Thu Jul 30 10:36:11.507578 2026] [ssl:error] [pid 2745135:tid 2745135] (EAI 2)Name or service not known: [client 144.76.19.72:24048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:11.507637 2026] [ssl:error] [pid 2745135:tid 2745135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:11.562923 2026] [ssl:error] [pid 2736491:tid 2736491] (EAI 2)Name or service not known: [client 144.76.19.72:24054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:11.562948 2026] [ssl:error] [pid 2736491:tid 2736491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:11.848352 2026] [ssl:error] [pid 2745374:tid 2745374] (70014)End of file found: [client 216.73.216.199:62229] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:12.148878 2026] [ssl:error] [pid 2745371:tid 2745371] (70014)End of file found: [client 216.73.216.199:18224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:13.657017 2026] [core:error] [pid 2743360:tid 2743360] (13)Permission denied: [client 216.73.216.199:7622] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/poison
[Thu Jul 30 10:36:13.934096 2026] [security2:error] [pid 2736788:tid 2736788] [client 20.113.148.57:6735] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "butteredcat.com"] [uri "/wp-config.php"] [unique_id "amsbDX7JoOLzhZxa6_SdFQAAAB0"]
[Thu Jul 30 10:36:13.934227 2026] [security2:error] [pid 2736788:tid 2736788] [client 20.113.148.57:6735] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "butteredcat.com"] [uri "/wp-config.php"] [unique_id "amsbDX7JoOLzhZxa6_SdFQAAAB0"]
[Thu Jul 30 10:36:13.934428 2026] [security2:error] [pid 2736788:tid 2736788] [client 20.113.148.57:6735] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "butteredcat.com"] [uri "/wp-config.php"] [unique_id "amsbDX7JoOLzhZxa6_SdFQAAAB0"]
[Thu Jul 30 10:36:13.957191 2026] [ssl:error] [pid 2743360:tid 2743360] (70014)End of file found: [client 216.73.216.199:7622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:14.228619 2026] [lsapi:warn] [pid 2745136:tid 2745136] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:14.233773 2026] [security2:error] [pid 2740123:tid 2740123] [client 170.106.165.76:46586] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highcleresyndicates.co.uk"] [uri "/"] [unique_id "amsbDqYPXNB7kFuDeuIavAAAADU"]
[Thu Jul 30 10:36:14.620762 2026] [ssl:error] [pid 2745132:tid 2745132] (EAI 2)Name or service not known: [client 144.76.19.72:24064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:14.620806 2026] [ssl:error] [pid 2745132:tid 2745132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:14.674459 2026] [ssl:error] [pid 2745059:tid 2745059] (EAI 2)Name or service not known: [client 144.76.19.72:24080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:14.674492 2026] [ssl:error] [pid 2745059:tid 2745059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:17.583330 2026] [security2:error] [pid 2745372:tid 2745372] [client 20.113.148.57:6725] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "butteredcat.com"] [uri "/var/log/error.log"] [unique_id "amsbEcn2ZQ1wYRlMO8JyZQAAAEg"]
[Thu Jul 30 10:36:17.583488 2026] [security2:error] [pid 2745372:tid 2745372] [client 20.113.148.57:6725] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "butteredcat.com"] [uri "/var/log/error.log"] [unique_id "amsbEcn2ZQ1wYRlMO8JyZQAAAEg"]
[Thu Jul 30 10:36:17.583670 2026] [security2:error] [pid 2745372:tid 2745372] [client 20.113.148.57:6725] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "butteredcat.com"] [uri "/var/log/error.log"] [unique_id "amsbEcn2ZQ1wYRlMO8JyZQAAAEg"]
[Thu Jul 30 10:36:17.734999 2026] [ssl:error] [pid 2739064:tid 2739064] (EAI 2)Name or service not known: [client 144.76.19.72:24086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:17.735039 2026] [ssl:error] [pid 2739064:tid 2739064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:17.789628 2026] [ssl:error] [pid 2745432:tid 2745432] (EAI 2)Name or service not known: [client 144.76.19.72:24102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:17.789661 2026] [ssl:error] [pid 2745432:tid 2745432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:18.476935 2026] [ssl:error] [pid 2743437:tid 2743437] (70014)End of file found: [client 216.73.216.199:1180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:19.361851 2026] [lsapi:warn] [pid 2744935:tid 2744935] [client 87.201.112.222:23174] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:20.580368 2026] [ssl:error] [pid 2740128:tid 2740128] (70014)End of file found: [client 216.73.216.199:36817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:20.925676 2026] [ssl:error] [pid 2745226:tid 2745226] (EAI 2)Name or service not known: [client 144.76.19.72:31368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:20.925706 2026] [ssl:error] [pid 2745226:tid 2745226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:20.979546 2026] [ssl:error] [pid 2745061:tid 2745061] (EAI 2)Name or service not known: [client 144.76.19.72:31384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:20.979588 2026] [ssl:error] [pid 2745061:tid 2745061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:22.367218 2026] [authz_core:error] [pid 2737454:tid 2737454] [client 66.249.66.35:49499] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:36:22.369972 2026] [authz_core:error] [pid 2737454:tid 2737454] [client 66.249.66.35:49499] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:36:22.989652 2026] [core:error] [pid 2739064:tid 2739064] (13)Permission denied: [client 216.73.216.199:59739] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/hid/uevent
[Thu Jul 30 10:36:23.776995 2026] [core:error] [pid 2743487:tid 2743487] (13)Permission denied: [client 216.73.216.199:36872] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/kvm/uevent
[Thu Jul 30 10:36:24.070728 2026] [ssl:error] [pid 2745318:tid 2745318] (EAI 2)Name or service not known: [client 144.76.19.72:31390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:24.070770 2026] [ssl:error] [pid 2745318:tid 2745318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:24.129020 2026] [ssl:error] [pid 2743321:tid 2743321] (EAI 2)Name or service not known: [client 144.76.19.72:31404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:24.129098 2026] [ssl:error] [pid 2743321:tid 2743321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:24.331681 2026] [core:error] [pid 2743441:tid 2743441] [client 66.249.64.170:40257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:24.331715 2026] [core:error] [pid 2743441:tid 2743441] [client 66.249.64.170:40257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:24.966731 2026] [lsapi:warn] [pid 2740123:tid 2740123] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:26.146962 2026] [security2:error] [pid 2745318:tid 2745318] [client 52.45.77.169:3568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amsbGlMkCOKfLWY6ZJZb6wAAAEE"]
[Thu Jul 30 10:36:26.602719 2026] [ssl:error] [pid 2743487:tid 2743487] (70014)End of file found: [client 216.73.216.199:36872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:27.189258 2026] [ssl:error] [pid 2744989:tid 2744989] (EAI 2)Name or service not known: [client 144.76.19.72:31410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:27.189288 2026] [ssl:error] [pid 2744989:tid 2744989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:27.243700 2026] [ssl:error] [pid 2745371:tid 2745371] (EAI 2)Name or service not known: [client 144.76.19.72:31424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:27.243737 2026] [ssl:error] [pid 2745371:tid 2745371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:27.526027 2026] [cgi:error] [pid 2735077:tid 2735077] [client 20.113.148.57:6742] AH02811: stderr from /home/buttere/public_html/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 10:36:27.585080 2026] [authz_core:error] [pid 2735077:tid 2735077] [client 20.113.148.57:6742] AH01630: client denied by server configuration: /home/buttere/public_html/php.ini
[Thu Jul 30 10:36:28.209742 2026] [security2:error] [pid 2743321:tid 2743321] [client 52.2.191.202:40952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amsbHLQxtZFfhFDWLdm53AAAAAQ"]
[Thu Jul 30 10:36:29.838900 2026] [lsapi:warn] [pid 2743436:tid 2743436] [client 87.201.112.222:23177] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:30.324630 2026] [ssl:error] [pid 2745318:tid 2745318] (EAI 2)Name or service not known: [client 144.76.19.72:63240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:30.324686 2026] [ssl:error] [pid 2745318:tid 2745318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:30.382491 2026] [ssl:error] [pid 2735077:tid 2735077] (EAI 2)Name or service not known: [client 144.76.19.72:63248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:30.382536 2026] [ssl:error] [pid 2735077:tid 2735077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:31.221502 2026] [security2:error] [pid 2745430:tid 2745430] [client 54.156.55.147:10106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/481"] [unique_id "amsbH15yIQi4lQu1N3vFmgAAAE4"]
[Thu Jul 30 10:36:31.734351 2026] [ssl:error] [pid 2743360:tid 2743360] (70014)End of file found: [client 216.73.216.199:55636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:32.936319 2026] [ssl:error] [pid 2739064:tid 2739064] (70014)End of file found: [client 216.73.216.199:59739] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:33.440987 2026] [ssl:error] [pid 2743321:tid 2743321] (EAI 2)Name or service not known: [client 144.76.19.72:63256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:33.441015 2026] [ssl:error] [pid 2743321:tid 2743321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:33.494624 2026] [ssl:error] [pid 2737454:tid 2737454] (EAI 2)Name or service not known: [client 144.76.19.72:63264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:33.494660 2026] [ssl:error] [pid 2737454:tid 2737454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:33.695447 2026] [security2:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clientseodata.com"] [uri "/"] [unique_id "amsbIXPp7bcJ8O1aDBFafQAAAC0"]
[Thu Jul 30 10:36:33.696742 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 10:36:33.696842 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 10:36:33.697010 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 10:36:33.697218 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 10:36:33.697292 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 10:36:33.697458 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 10:36:33.697629 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 10:36:33.697699 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 10:36:33.697864 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 10:36:33.697984 2026] [authz_core:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 10:36:33.698043 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 10:36:33.698123 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 10:36:33.698289 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 10:36:33.698447 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 10:36:33.698514 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 10:36:33.698701 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 10:36:33.698862 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 10:36:33.698930 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 10:36:33.699105 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 10:36:33.699946 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 10:36:33.700016 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 10:36:33.700191 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 10:36:33.700367 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 10:36:33.700435 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 10:36:33.700606 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 10:36:33.701128 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 10:36:33.701197 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 10:36:33.701363 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 10:36:33.701521 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 10:36:33.701597 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 10:36:33.701762 2026] [access_compat:error] [pid 2740078:tid 2740078] [client 43.157.150.69:34362] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 10:36:34.850228 2026] [security2:error] [pid 2738601:tid 2738601] [client 23.21.228.180:54950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2025/03/Defenders-Reading-Quiz-at-the-Piece-Hall--213x300.jpg"] [unique_id "amsbIk_xhtvpKj05ZE2YxAAAAA8"]
[Thu Jul 30 10:36:35.767910 2026] [lsapi:warn] [pid 2740078:tid 2740078] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:35.951757 2026] [core:error] [pid 2736788:tid 2736788] (13)Permission denied: [client 216.73.216.199:10292] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 10:36:36.552295 2026] [ssl:error] [pid 2745226:tid 2745226] (EAI 2)Name or service not known: [client 144.76.19.72:63274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:36.552328 2026] [ssl:error] [pid 2745226:tid 2745226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:36.603775 2026] [ssl:error] [pid 2743437:tid 2743437] (EAI 2)Name or service not known: [client 144.76.19.72:63286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:36.603822 2026] [ssl:error] [pid 2743437:tid 2743437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:37.417727 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:36:37.442182 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 10:36:37.442232 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.457984 2026] [ssl:error] [pid 2736788:tid 2736788] (70014)End of file found: [client 216.73.216.199:10292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:37.466636 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 10:36:37.466677 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.491117 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 10:36:37.491164 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.515481 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/xa.php
[Thu Jul 30 10:36:37.515527 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.540119 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/media.php
[Thu Jul 30 10:36:37.540164 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.564907 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 10:36:37.564954 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.590678 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko.php
[Thu Jul 30 10:36:37.590731 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.615095 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/82.php
[Thu Jul 30 10:36:37.615144 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.639654 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/xstelth.php
[Thu Jul 30 10:36:37.639699 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.678148 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/xp.php
[Thu Jul 30 10:36:37.678224 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.717790 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:36:37.717839 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.910309 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/adminner.php
[Thu Jul 30 10:36:37.910356 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.948620 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 10:36:37.948671 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:37.972938 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 10:36:37.973001 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.128626 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 10:36:38.128679 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.153032 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 10:36:38.153095 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.164930 2026] [core:error] [pid 2745135:tid 2745135] (13)Permission denied: [client 216.73.216.199:21126] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/device/driver/uevent
[Thu Jul 30 10:36:38.177686 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:36:38.202117 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:36:38.226547 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 10:36:38.226609 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.278325 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 10:36:38.278373 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.302733 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/FWAZ.php
[Thu Jul 30 10:36:38.302779 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.327111 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/biufile.php
[Thu Jul 30 10:36:38.327157 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.384657 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/coffexium.php
[Thu Jul 30 10:36:38.384706 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.415869 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 10:36:38.415916 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.440242 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 10:36:38.440288 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.477178 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/dex.php
[Thu Jul 30 10:36:38.477224 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.501607 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 10:36:38.501653 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.612735 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:36:38.648521 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/config.json.php
[Thu Jul 30 10:36:38.648577 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.662990 2026] [ssl:error] [pid 2742278:tid 2742278] (70014)End of file found: [client 216.73.216.199:51243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:38.678348 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/k2.php
[Thu Jul 30 10:36:38.678395 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.702733 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/raw.php
[Thu Jul 30 10:36:38.702779 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.772407 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 10:36:38.772452 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.820083 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/fffm.php
[Thu Jul 30 10:36:38.820126 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.848030 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/111.php
[Thu Jul 30 10:36:38.848083 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.883308 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:36:38.907651 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/ws.php
[Thu Jul 30 10:36:38.907698 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.931807 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/coffee.php
[Thu Jul 30 10:36:38.931850 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.956090 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 10:36:38.956131 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:38.980758 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:36:38.980799 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.006621 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:36:39.006673 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.030998 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:36:39.031045 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.065027 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 10:36:39.065082 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.089308 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 10:36:39.089352 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.113548 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 10:36:39.113588 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.138061 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 10:36:39.138114 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.162245 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 10:36:39.162291 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.196677 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 10:36:39.196719 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.235183 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/234ff.php
[Thu Jul 30 10:36:39.235224 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.259547 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/133.php
[Thu Jul 30 10:36:39.259606 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.284224 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-ws68.php
[Thu Jul 30 10:36:39.284280 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.308438 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/mgrr.php
[Thu Jul 30 10:36:39.308479 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 4.185.41.66:15893] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:36:39.337257 2026] [security2:error] [pid 2743482:tid 2743482] [client 98.83.94.113:9973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/39531"] [unique_id "amsbJy45RDRud-cUvcK8owAAAEA"]
[Thu Jul 30 10:36:39.657121 2026] [ssl:error] [pid 2745371:tid 2745371] (EAI 2)Name or service not known: [client 144.76.19.72:64704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:39.657144 2026] [ssl:error] [pid 2745371:tid 2745371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:39.709671 2026] [ssl:error] [pid 2741689:tid 2741689] (EAI 2)Name or service not known: [client 144.76.19.72:64720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:39.709704 2026] [ssl:error] [pid 2741689:tid 2741689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:40.253487 2026] [lsapi:warn] [pid 2745374:tid 2745374] [client 87.201.112.222:58694] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:40.870983 2026] [authz_core:error] [pid 2743438:tid 2743438] [client 66.249.66.33:36511] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:36:40.873679 2026] [authz_core:error] [pid 2743438:tid 2743438] [client 66.249.66.33:36511] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:36:41.381028 2026] [ssl:error] [pid 2745135:tid 2745135] (70014)End of file found: [client 216.73.216.199:21126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:41.656965 2026] [authz_core:error] [pid 2745061:tid 2745061] [client 192.36.109.114:55665] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 10:36:42.767320 2026] [ssl:error] [pid 2745132:tid 2745132] (EAI 2)Name or service not known: [client 144.76.19.72:64732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:42.767350 2026] [ssl:error] [pid 2745132:tid 2745132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:42.822567 2026] [ssl:error] [pid 2745061:tid 2745061] (EAI 2)Name or service not known: [client 144.76.19.72:64748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:42.822605 2026] [ssl:error] [pid 2745061:tid 2745061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:44.695011 2026] [core:error] [pid 2743489:tid 2743489] (13)Permission denied: [client 216.73.216.199:14404] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tw_sock_TCPv6/red_zone
[Thu Jul 30 10:36:44.910248 2026] [security2:error] [pid 2745136:tid 2745136] [client 170.106.165.186:34692] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsbLAWpicgQWd7s_tWx3AAAADs"]
[Thu Jul 30 10:36:44.912181 2026] [authz_core:error] [pid 2745136:tid 2745136] [client 170.106.165.186:34692] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:36:44.914087 2026] [authz_core:error] [pid 2745136:tid 2745136] [client 170.106.165.186:34692] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:36:45.877259 2026] [ssl:error] [pid 2741691:tid 2741691] (EAI 2)Name or service not known: [client 144.76.19.72:64760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:45.877292 2026] [ssl:error] [pid 2741691:tid 2741691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:45.933155 2026] [ssl:error] [pid 2745129:tid 2745129] (EAI 2)Name or service not known: [client 144.76.19.72:64776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:45.933191 2026] [ssl:error] [pid 2745129:tid 2745129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:45.943360 2026] [security2:error] [pid 2745132:tid 2745132] [client 185.191.171.16:16824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8274.0/prev_next,next.html"] [unique_id "amsbLd6h9vNhjDmmgw_PfwAAABw"]
[Thu Jul 30 10:36:46.200789 2026] [core:error] [pid 2743489:tid 2743489] (13)Permission denied: [client 216.73.216.199:14404] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS3/device/driver/unbind
[Thu Jul 30 10:36:46.488707 2026] [lsapi:warn] [pid 2745132:tid 2745132] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:46.501866 2026] [ssl:error] [pid 2743489:tid 2743489] (70014)End of file found: [client 216.73.216.199:14404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:46.808404 2026] [ssl:error] [pid 2737501:tid 2737501] (70014)End of file found: [client 216.73.216.199:62616] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:47.936903 2026] [security2:error] [pid 2744989:tid 2744989] [client 43.165.174.53:53320] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/"] [unique_id "amsbL1-Q_aRArkLoDVDr-gAAAAY"]
[Thu Jul 30 10:36:48.988131 2026] [ssl:error] [pid 2745371:tid 2745371] (EAI 2)Name or service not known: [client 144.76.19.72:64782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:48.988158 2026] [ssl:error] [pid 2745371:tid 2745371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:49.042824 2026] [ssl:error] [pid 2743360:tid 2743360] (EAI 2)Name or service not known: [client 144.76.19.72:64790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:49.042867 2026] [ssl:error] [pid 2743360:tid 2743360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:49.242157 2026] [core:error] [pid 2740037:tid 2740037] (13)Permission denied: [client 216.73.216.199:40219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/kdb/uevent
[Thu Jul 30 10:36:49.543289 2026] [ssl:error] [pid 2740037:tid 2740037] (70014)End of file found: [client 216.73.216.199:40219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:49.990357 2026] [security2:error] [pid 2743492:tid 2743492] [client 43.165.174.53:54778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsbMV5dJipiXa6RW6ZDrwAAAEo"], referer: http://www.theislipgarage.co.uk
[Thu Jul 30 10:36:51.022240 2026] [lsapi:warn] [pid 2743478:tid 2743478] [client 87.201.112.222:44892] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:51.030478 2026] [security2:error] [pid 2743441:tid 2743441] [client 94.154.43.184:62158] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.saturnsports.co.uk"] [uri "/.env"] [unique_id "amsbMwRxtuR_2ekUqKpnZgAAADk"]
[Thu Jul 30 10:36:51.030682 2026] [security2:error] [pid 2743441:tid 2743441] [client 94.154.43.184:62158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.saturnsports.co.uk"] [uri "/.env"] [unique_id "amsbMwRxtuR_2ekUqKpnZgAAADk"]
[Thu Jul 30 10:36:51.030969 2026] [security2:error] [pid 2743441:tid 2743441] [client 94.154.43.184:62158] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.saturnsports.co.uk"] [uri "/403.shtml"] [unique_id "amsbMwRxtuR_2ekUqKpnZgAAADk"]
[Thu Jul 30 10:36:51.115013 2026] [security2:error] [pid 2745318:tid 2745318] [client 94.154.43.184:62168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saturnsports.co.uk"] [uri "/.env"] [unique_id "amsbM1MkCOKfLWY6ZJZb9wAAAEE"]
[Thu Jul 30 10:36:51.115235 2026] [security2:error] [pid 2745318:tid 2745318] [client 94.154.43.184:62168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saturnsports.co.uk"] [uri "/.env"] [unique_id "amsbM1MkCOKfLWY6ZJZb9wAAAEE"]
[Thu Jul 30 10:36:51.115428 2026] [security2:error] [pid 2745318:tid 2745318] [client 94.154.43.184:62168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saturnsports.co.uk"] [uri "/403.shtml"] [unique_id "amsbM1MkCOKfLWY6ZJZb9wAAAEE"]
[Thu Jul 30 10:36:52.100497 2026] [ssl:error] [pid 2741689:tid 2741689] (EAI 2)Name or service not known: [client 144.76.19.72:38934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:52.100526 2026] [ssl:error] [pid 2741689:tid 2741689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:52.125799 2026] [security2:error] [pid 2742278:tid 2742278] [client 94.154.43.188:63366] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.saturnsportscouk.saturnsports.com"] [uri "/.env"] [unique_id "amsbNF4wdcu_js3BikHLCwAAABc"]
[Thu Jul 30 10:36:52.125994 2026] [security2:error] [pid 2742278:tid 2742278] [client 94.154.43.188:63366] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.saturnsportscouk.saturnsports.com"] [uri "/.env"] [unique_id "amsbNF4wdcu_js3BikHLCwAAABc"]
[Thu Jul 30 10:36:52.126273 2026] [security2:error] [pid 2742278:tid 2742278] [client 94.154.43.188:63366] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.saturnsportscouk.saturnsports.com"] [uri "/403.shtml"] [unique_id "amsbNF4wdcu_js3BikHLCwAAABc"]
[Thu Jul 30 10:36:52.153331 2026] [ssl:error] [pid 2743489:tid 2743489] (EAI 2)Name or service not known: [client 144.76.19.72:38942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:52.153373 2026] [ssl:error] [pid 2743489:tid 2743489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:52.861931 2026] [ssl:error] [pid 2743402:tid 2743402] (70014)End of file found: [client 216.73.216.199:41275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:53.456239 2026] [core:error] [pid 2745134:tid 2745134] (13)Permission denied: [client 216.73.216.199:34715] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/drm/uevent
[Thu Jul 30 10:36:54.317188 2026] [security2:error] [pid 2745061:tid 2745061] [client 185.191.171.18:44658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/superstition-mountains-cougar-shadow"] [unique_id "amsbNvIcsl6IXhCARLCdhAAAABA"]
[Thu Jul 30 10:36:54.660733 2026] [ssl:error] [pid 2745134:tid 2745134] (70014)End of file found: [client 216.73.216.199:34715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:55.210096 2026] [ssl:error] [pid 2740037:tid 2740037] (EAI 2)Name or service not known: [client 144.76.19.72:38944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:55.210125 2026] [ssl:error] [pid 2740037:tid 2740037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:55.264256 2026] [ssl:error] [pid 2745130:tid 2745130] (EAI 2)Name or service not known: [client 144.76.19.72:38946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:55.264287 2026] [ssl:error] [pid 2745130:tid 2745130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:55.585310 2026] [core:error] [pid 2741267:tid 2741267] [client 66.249.66.167:55282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:55.585337 2026] [core:error] [pid 2741267:tid 2741267] [client 66.249.66.167:55282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:55.592383 2026] [core:error] [pid 2744989:tid 2744989] [client 66.249.66.41:58708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:55.592405 2026] [core:error] [pid 2744989:tid 2744989] [client 66.249.66.41:58708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:36:56.108120 2026] [security2:error] [pid 2744989:tid 2744989] [client 43.134.91.35:34358] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glasgowball.com"] [uri "/"] [unique_id "amsbOF-Q_aRArkLoDVDr_QAAAAY"]
[Thu Jul 30 10:36:56.166609 2026] [ssl:error] [pid 2747621:tid 2747621] (70014)End of file found: [client 216.73.216.199:43409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:57.158572 2026] [lsapi:warn] [pid 2743487:tid 2743487] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:36:57.253617 2026] [security2:error] [pid 2745130:tid 2745130] [client 43.134.91.35:35366] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020"] [unique_id "amsbOUvrl0boaGg81ZWIewAAABo"], referer: http://glasgowball.com
[Thu Jul 30 10:36:58.166488 2026] [ssl:error] [pid 2745130:tid 2745130] (70014)End of file found: [client 216.73.216.199:64508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:36:58.341254 2026] [ssl:error] [pid 2743487:tid 2743487] (EAI 2)Name or service not known: [client 144.76.19.72:38948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:58.341291 2026] [ssl:error] [pid 2743487:tid 2743487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:58.387236 2026] [security2:error] [pid 2743438:tid 2743438] [client 43.134.91.35:36384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020/"] [unique_id "amsbOvheJdN4q0cmXFHnVAAAADQ"], referer: http://www.glasgowball.com/glaball/2020
[Thu Jul 30 10:36:58.393946 2026] [ssl:error] [pid 2743402:tid 2743402] (EAI 2)Name or service not known: [client 144.76.19.72:38960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:36:58.393976 2026] [ssl:error] [pid 2743402:tid 2743402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:36:59.534248 2026] [authz_core:error] [pid 2740128:tid 2740128] [client 40.77.167.1:11388] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:36:59.536973 2026] [authz_core:error] [pid 2740128:tid 2740128] [client 40.77.167.1:11388] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:36:59.662796 2026] [security2:error] [pid 2743441:tid 2743441] [client 162.62.231.139:59460] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/"] [unique_id "amsbOwRxtuR_2ekUqKpnbAAAADk"]
[Thu Jul 30 10:37:00.386194 2026] [ssl:error] [pid 2743492:tid 2743492] (70014)End of file found: [client 216.73.216.199:59055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:00.549798 2026] [security2:error] [pid 2741689:tid 2741689] [client 162.62.231.139:59810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsbPAZKHalzO7gwDEU9IwAAACM"], referer: http://all4s.co.uk
[Thu Jul 30 10:37:01.450373 2026] [ssl:error] [pid 2745136:tid 2745136] (EAI 2)Name or service not known: [client 144.76.19.72:50534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:01.450419 2026] [ssl:error] [pid 2745136:tid 2745136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:01.456804 2026] [lsapi:warn] [pid 2743487:tid 2743487] [client 87.201.112.222:23226] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:01.506789 2026] [ssl:error] [pid 2736788:tid 2736788] (EAI 2)Name or service not known: [client 144.76.19.72:50546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:01.506829 2026] [ssl:error] [pid 2736788:tid 2736788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:03.941584 2026] [authz_core:error] [pid 2745429:tid 2745429] [client 66.249.66.35:55925] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:37:03.944278 2026] [authz_core:error] [pid 2745429:tid 2745429] [client 66.249.66.35:55925] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:37:04.563713 2026] [ssl:error] [pid 2743482:tid 2743482] (EAI 2)Name or service not known: [client 144.76.19.72:50558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:04.563753 2026] [ssl:error] [pid 2743482:tid 2743482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:04.618738 2026] [ssl:error] [pid 2743480:tid 2743480] (EAI 2)Name or service not known: [client 144.76.19.72:50574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:04.618780 2026] [ssl:error] [pid 2743480:tid 2743480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:05.370576 2026] [core:error] [pid 2745134:tid 2745134] (13)Permission denied: [client 216.73.216.199:14368] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty54/subsystem/ttyS1/flags
[Thu Jul 30 10:37:06.898525 2026] [cgi:error] [pid 2745134:tid 2745134] [client 216.73.216.199:14368] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/rsync-user-homedir.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:37:06.898568 2026] [cgi:error] [pid 2745134:tid 2745134] [client 216.73.216.199:14368] End of script output before headers: rsync-user-homedir.pl
[Thu Jul 30 10:37:07.088648 2026] [authz_core:error] [pid 2745226:tid 2745226] [client 172.202.95.21:28295] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 10:37:07.090660 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 172.202.95.21:28295] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 10:37:07.090712 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 172.202.95.21:28295] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 10:37:07.095169 2026] [access_compat:error] [pid 2745226:tid 2745226] [client 172.202.95.21:28295] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 10:37:07.674631 2026] [ssl:error] [pid 2743482:tid 2743482] (EAI 2)Name or service not known: [client 144.76.19.72:50590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:07.674659 2026] [ssl:error] [pid 2743482:tid 2743482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:07.730542 2026] [ssl:error] [pid 2742278:tid 2742278] (EAI 2)Name or service not known: [client 144.76.19.72:50592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:07.730572 2026] [ssl:error] [pid 2742278:tid 2742278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:07.840582 2026] [lsapi:warn] [pid 2745371:tid 2745371] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:08.681296 2026] [ssl:error] [pid 2745132:tid 2745132] (70014)End of file found: [client 216.73.216.199:20048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:09.312681 2026] [cgi:error] [pid 2743492:tid 2743492] [client 216.73.216.199:12591] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/bio.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:37:09.312730 2026] [cgi:error] [pid 2743492:tid 2743492] [client 216.73.216.199:12591] End of script output before headers: bio.pl
[Thu Jul 30 10:37:10.785791 2026] [ssl:error] [pid 2738601:tid 2738601] (EAI 2)Name or service not known: [client 144.76.19.72:23624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:10.785831 2026] [ssl:error] [pid 2738601:tid 2738601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:10.840665 2026] [ssl:error] [pid 2736788:tid 2736788] (EAI 2)Name or service not known: [client 144.76.19.72:23630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:10.840697 2026] [ssl:error] [pid 2736788:tid 2736788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:11.685562 2026] [security2:error] [pid 2729455:tid 2729455] [client 201.180.96.217:33189] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbR_9PkcbXYD1n3f7l-gAAABE"]
[Thu Jul 30 10:37:11.685633 2026] [security2:error] [pid 2729455:tid 2729455] [client 201.180.96.217:33189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbR_9PkcbXYD1n3f7l-gAAABE"]
[Thu Jul 30 10:37:11.685967 2026] [security2:error] [pid 2729455:tid 2729455] [client 201.180.96.217:33189] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbR_9PkcbXYD1n3f7l-gAAABE"]
[Thu Jul 30 10:37:12.024000 2026] [lsapi:warn] [pid 2748410:tid 2748410] [client 87.201.112.222:44874] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:12.297979 2026] [core:error] [pid 2743492:tid 2743492] (13)Permission denied: [client 216.73.216.199:46584] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory117/subsystem/uevent
[Thu Jul 30 10:37:12.450053 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtQAAAAU"]
[Thu Jul 30 10:37:12.450254 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtQAAAAU"]
[Thu Jul 30 10:37:12.450474 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtQAAAAU"]
[Thu Jul 30 10:37:12.469448 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/api/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtgAAAAU"]
[Thu Jul 30 10:37:12.469737 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/api/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtgAAAAU"]
[Thu Jul 30 10:37:12.469978 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/api/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtgAAAAU"]
[Thu Jul 30 10:37:12.488973 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/backend/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtwAAAAU"]
[Thu Jul 30 10:37:12.489236 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/backend/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtwAAAAU"]
[Thu Jul 30 10:37:12.489468 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/backend/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qtwAAAAU"]
[Thu Jul 30 10:37:12.528175 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/admin/.env"] [unique_id "amsbSHh9yp9xFpQUkj9quQAAAAU"]
[Thu Jul 30 10:37:12.528400 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/admin/.env"] [unique_id "amsbSHh9yp9xFpQUkj9quQAAAAU"]
[Thu Jul 30 10:37:12.528637 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/admin/.env"] [unique_id "amsbSHh9yp9xFpQUkj9quQAAAAU"]
[Thu Jul 30 10:37:12.567172 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/laravel/.env"] [unique_id "amsbSHh9yp9xFpQUkj9quwAAAAU"]
[Thu Jul 30 10:37:12.567418 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/laravel/.env"] [unique_id "amsbSHh9yp9xFpQUkj9quwAAAAU"]
[Thu Jul 30 10:37:12.567658 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/laravel/.env"] [unique_id "amsbSHh9yp9xFpQUkj9quwAAAAU"]
[Thu Jul 30 10:37:12.586680 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/core/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qvAAAAAU"]
[Thu Jul 30 10:37:12.586925 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/core/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qvAAAAAU"]
[Thu Jul 30 10:37:12.587195 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/core/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qvAAAAAU"]
[Thu Jul 30 10:37:12.625733 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.env.example"] [unique_id "amsbSHh9yp9xFpQUkj9qvgAAAAU"]
[Thu Jul 30 10:37:12.625981 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.env.example"] [unique_id "amsbSHh9yp9xFpQUkj9qvgAAAAU"]
[Thu Jul 30 10:37:12.626236 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.env.example"] [unique_id "amsbSHh9yp9xFpQUkj9qvgAAAAU"]
[Thu Jul 30 10:37:12.645092 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/app/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qvwAAAAU"]
[Thu Jul 30 10:37:12.645325 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/app/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qvwAAAAU"]
[Thu Jul 30 10:37:12.645552 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/app/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qvwAAAAU"]
[Thu Jul 30 10:37:12.664450 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/dev/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qwAAAAAU"]
[Thu Jul 30 10:37:12.664690 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/dev/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qwAAAAAU"]
[Thu Jul 30 10:37:12.664899 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/dev/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qwAAAAAU"]
[Thu Jul 30 10:37:12.703479 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/server/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qwgAAAAU"]
[Thu Jul 30 10:37:12.703726 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/server/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qwgAAAAU"]
[Thu Jul 30 10:37:12.703964 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/server/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qwgAAAAU"]
[Thu Jul 30 10:37:12.722884 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.env.save"] [unique_id "amsbSHh9yp9xFpQUkj9qwwAAAAU"]
[Thu Jul 30 10:37:12.723132 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.env.save"] [unique_id "amsbSHh9yp9xFpQUkj9qwwAAAAU"]
[Thu Jul 30 10:37:12.723352 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.env.save"] [unique_id "amsbSHh9yp9xFpQUkj9qwwAAAAU"]
[Thu Jul 30 10:37:12.761865 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/staging/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qxQAAAAU"]
[Thu Jul 30 10:37:12.762133 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/staging/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qxQAAAAU"]
[Thu Jul 30 10:37:12.762360 2026] [security2:error] [pid 2748410:tid 2748410] [client 185.93.89.167:51375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/staging/.env"] [unique_id "amsbSHh9yp9xFpQUkj9qxQAAAAU"]
[Thu Jul 30 10:37:13.799418 2026] [core:error] [pid 2748410:tid 2748410] (13)Permission denied: [client 216.73.216.199:31241] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS3/irq
[Thu Jul 30 10:37:13.900196 2026] [ssl:error] [pid 2745136:tid 2745136] (EAI 2)Name or service not known: [client 144.76.19.72:23634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:13.900224 2026] [ssl:error] [pid 2745136:tid 2745136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:13.974107 2026] [ssl:error] [pid 2745132:tid 2745132] (EAI 2)Name or service not known: [client 144.76.19.72:23646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:13.974142 2026] [ssl:error] [pid 2745132:tid 2745132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:14.309781 2026] [security2:error] [pid 2742278:tid 2742278] [client 102.211.216.198:38406] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbSl4wdcu_js3BikHLFQAAABc"]
[Thu Jul 30 10:37:14.309832 2026] [security2:error] [pid 2742278:tid 2742278] [client 102.211.216.198:38406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbSl4wdcu_js3BikHLFQAAABc"]
[Thu Jul 30 10:37:14.310122 2026] [security2:error] [pid 2742278:tid 2742278] [client 102.211.216.198:38406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbSl4wdcu_js3BikHLFQAAABc"]
[Thu Jul 30 10:37:15.606490 2026] [ssl:error] [pid 2748410:tid 2748410] (70014)End of file found: [client 216.73.216.199:31241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:15.911279 2026] [ssl:error] [pid 2743492:tid 2743492] (70014)End of file found: [client 216.73.216.199:46584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:17.029644 2026] [ssl:error] [pid 2745371:tid 2745371] (EAI 2)Name or service not known: [client 144.76.19.72:23662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:17.029675 2026] [ssl:error] [pid 2745371:tid 2745371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:17.083542 2026] [ssl:error] [pid 2743480:tid 2743480] (EAI 2)Name or service not known: [client 144.76.19.72:23678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:17.083571 2026] [ssl:error] [pid 2743480:tid 2743480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:17.982524 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsbTXZ4Xiyro1Ms4kMrcAAAACk"]
[Thu Jul 30 10:37:17.982669 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsbTXZ4Xiyro1Ms4kMrcAAAACk"]
[Thu Jul 30 10:37:17.982864 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.env"] [unique_id "amsbTXZ4Xiyro1Ms4kMrcAAAACk"]
[Thu Jul 30 10:37:18.001510 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/api/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrcQAAACk"]
[Thu Jul 30 10:37:18.001645 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/api/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrcQAAACk"]
[Thu Jul 30 10:37:18.001822 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/api/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrcQAAACk"]
[Thu Jul 30 10:37:18.020354 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/backend/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrcgAAACk"]
[Thu Jul 30 10:37:18.020476 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/backend/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrcgAAACk"]
[Thu Jul 30 10:37:18.020664 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/backend/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrcgAAACk"]
[Thu Jul 30 10:37:18.058672 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/admin/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdAAAACk"]
[Thu Jul 30 10:37:18.058834 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/admin/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdAAAACk"]
[Thu Jul 30 10:37:18.059018 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/admin/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdAAAACk"]
[Thu Jul 30 10:37:18.099833 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/laravel/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdgAAACk"]
[Thu Jul 30 10:37:18.099985 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/laravel/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdgAAACk"]
[Thu Jul 30 10:37:18.100177 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/laravel/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdgAAACk"]
[Thu Jul 30 10:37:18.118836 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/core/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdwAAACk"]
[Thu Jul 30 10:37:18.118998 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/core/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdwAAACk"]
[Thu Jul 30 10:37:18.119208 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/core/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrdwAAACk"]
[Thu Jul 30 10:37:18.157505 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.env.example"] [unique_id "amsbTnZ4Xiyro1Ms4kMreQAAACk"]
[Thu Jul 30 10:37:18.157715 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.env.example"] [unique_id "amsbTnZ4Xiyro1Ms4kMreQAAACk"]
[Thu Jul 30 10:37:18.157996 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.env.example"] [unique_id "amsbTnZ4Xiyro1Ms4kMreQAAACk"]
[Thu Jul 30 10:37:18.176678 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/app/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMregAAACk"]
[Thu Jul 30 10:37:18.176827 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/app/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMregAAACk"]
[Thu Jul 30 10:37:18.177003 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/app/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMregAAACk"]
[Thu Jul 30 10:37:18.195796 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/dev/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrewAAACk"]
[Thu Jul 30 10:37:18.195966 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/dev/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrewAAACk"]
[Thu Jul 30 10:37:18.196172 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/dev/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrewAAACk"]
[Thu Jul 30 10:37:18.233925 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/server/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrfQAAACk"]
[Thu Jul 30 10:37:18.234054 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/server/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrfQAAACk"]
[Thu Jul 30 10:37:18.234242 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/server/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrfQAAACk"]
[Thu Jul 30 10:37:18.252964 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.env.save"] [unique_id "amsbTnZ4Xiyro1Ms4kMrfgAAACk"]
[Thu Jul 30 10:37:18.253126 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.env.save"] [unique_id "amsbTnZ4Xiyro1Ms4kMrfgAAACk"]
[Thu Jul 30 10:37:18.253297 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.env.save"] [unique_id "amsbTnZ4Xiyro1Ms4kMrfgAAACk"]
[Thu Jul 30 10:37:18.291163 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/staging/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrgAAAACk"]
[Thu Jul 30 10:37:18.291331 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/staging/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrgAAAACk"]
[Thu Jul 30 10:37:18.291531 2026] [security2:error] [pid 2741691:tid 2741691] [client 185.93.89.167:56979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/staging/.env"] [unique_id "amsbTnZ4Xiyro1Ms4kMrgAAAACk"]
[Thu Jul 30 10:37:18.458972 2026] [lsapi:warn] [pid 2748464:tid 2748464] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:19.466219 2026] [core:error] [pid 2729455:tid 2729455] [client 66.249.66.169:61576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:19.466248 2026] [core:error] [pid 2729455:tid 2729455] [client 66.249.66.169:61576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:19.519727 2026] [ssl:error] [pid 2743487:tid 2743487] (70014)End of file found: [client 216.73.216.199:56001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:19.864320 2026] [security2:error] [pid 2748464:tid 2748464] [client 47.239.9.117:52531] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbT1S32GG1TuCDTBMD8QAAAAw"]
[Thu Jul 30 10:37:19.864388 2026] [security2:error] [pid 2748464:tid 2748464] [client 47.239.9.117:52531] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbT1S32GG1TuCDTBMD8QAAAAw"]
[Thu Jul 30 10:37:19.864739 2026] [security2:error] [pid 2748464:tid 2748464] [client 47.239.9.117:52531] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbT1S32GG1TuCDTBMD8QAAAAw"]
[Thu Jul 30 10:37:20.139090 2026] [ssl:error] [pid 2741689:tid 2741689] (EAI 2)Name or service not known: [client 144.76.19.72:32650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:20.139128 2026] [ssl:error] [pid 2741689:tid 2741689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:20.192921 2026] [ssl:error] [pid 2743441:tid 2743441] (EAI 2)Name or service not known: [client 144.76.19.72:32656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:20.192962 2026] [ssl:error] [pid 2743441:tid 2743441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:20.910817 2026] [ssl:error] [pid 2737565:tid 2737565] (70014)End of file found: [client 216.73.216.199:35049] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:21.932493 2026] [ssl:error] [pid 2741689:tid 2741689] (70014)End of file found: [client 216.73.216.199:40521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:22.285966 2026] [security2:error] [pid 2742278:tid 2742278] [client 8.216.41.95:35663] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbUl4wdcu_js3BikHLFwAAABc"]
[Thu Jul 30 10:37:22.286028 2026] [security2:error] [pid 2742278:tid 2742278] [client 8.216.41.95:35663] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbUl4wdcu_js3BikHLFwAAABc"]
[Thu Jul 30 10:37:22.286256 2026] [security2:error] [pid 2742278:tid 2742278] [client 8.216.41.95:35663] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbUl4wdcu_js3BikHLFwAAABc"]
[Thu Jul 30 10:37:22.669231 2026] [lsapi:warn] [pid 2745134:tid 2745134] [client 87.201.112.222:44927] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:22.754617 2026] [security2:error] [pid 2743360:tid 2743360] [client 114.119.146.111:61919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/what-it-looks-like"] [unique_id "amsbUv8GGshMhg1M3N8QVQAAABM"], referer: http://www.erskinenazarene.co.uk/preacher/nick-daldry
[Thu Jul 30 10:37:23.277342 2026] [ssl:error] [pid 2738601:tid 2738601] (EAI 2)Name or service not known: [client 144.76.19.72:32660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:23.277386 2026] [ssl:error] [pid 2738601:tid 2738601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:23.334118 2026] [ssl:error] [pid 2748463:tid 2748463] (EAI 2)Name or service not known: [client 144.76.19.72:32670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:23.334155 2026] [ssl:error] [pid 2748463:tid 2748463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:23.745300 2026] [access_compat:error] [pid 2748519:tid 2748519] [client 45.158.164.139:52066] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:37:24.304672 2026] [security2:error] [pid 2748358:tid 2748358] [client 114.119.146.111:61935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/sermons/what-it-looks-like"] [unique_id "amsbVLwecNHTMca4WGuV_wAAAAQ"], referer: http://www.erskinenazarene.co.uk/preacher/nick-daldry
[Thu Jul 30 10:37:24.824486 2026] [ssl:error] [pid 2742278:tid 2742278] (70014)End of file found: [client 216.73.216.199:15506] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:26.398712 2026] [ssl:error] [pid 2745135:tid 2745135] (EAI 2)Name or service not known: [client 144.76.19.72:32686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:26.398776 2026] [ssl:error] [pid 2745135:tid 2745135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:26.455668 2026] [ssl:error] [pid 2743360:tid 2743360] (EAI 2)Name or service not known: [client 144.76.19.72:32696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:26.455707 2026] [ssl:error] [pid 2743360:tid 2743360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:28.251615 2026] [ssl:error] [pid 2745129:tid 2745129] (70014)End of file found: [client 216.73.216.199:10258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:28.426984 2026] [core:error] [pid 2748465:tid 2748465] [client 66.249.64.171:44935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:28.427016 2026] [core:error] [pid 2748465:tid 2748465] [client 66.249.64.171:44935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:28.598431 2026] [security2:error] [pid 2743482:tid 2743482] [client 43.159.149.216:59230] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amsbWC45RDRud-cUvcK9DAAAAEA"]
[Thu Jul 30 10:37:29.158327 2026] [ssl:error] [pid 2737454:tid 2737454] (70014)End of file found: [client 216.73.216.199:36816] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:29.194912 2026] [lsapi:warn] [pid 2743482:tid 2743482] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:29.537899 2026] [ssl:error] [pid 2741689:tid 2741689] (EAI 2)Name or service not known: [client 144.76.19.72:32704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:29.537940 2026] [ssl:error] [pid 2741689:tid 2741689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:29.595446 2026] [ssl:error] [pid 2743404:tid 2743404] (EAI 2)Name or service not known: [client 144.76.19.72:46852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:29.595484 2026] [ssl:error] [pid 2743404:tid 2743404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:30.229146 2026] [security2:error] [pid 2742278:tid 2742278] [client 106.52.216.13:40154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "iapib.com"] [uri "/"] [unique_id "amsbWl4wdcu_js3BikHLGgAAABc"]
[Thu Jul 30 10:37:31.265872 2026] [ssl:error] [pid 2741267:tid 2741267] (70014)End of file found: [client 216.73.216.199:53373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:32.650816 2026] [ssl:error] [pid 2741689:tid 2741689] (EAI 2)Name or service not known: [client 144.76.19.72:46854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:32.650860 2026] [ssl:error] [pid 2741689:tid 2741689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:32.706724 2026] [ssl:error] [pid 2745130:tid 2745130] (EAI 2)Name or service not known: [client 144.76.19.72:46868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:32.706760 2026] [ssl:error] [pid 2745130:tid 2745130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:33.223734 2026] [lsapi:warn] [pid 2739064:tid 2739064] [client 87.201.112.222:44905] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:34.488151 2026] [ssl:error] [pid 2748463:tid 2748463] (70014)End of file found: [client 216.73.216.199:61852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:35.090703 2026] [ssl:error] [pid 2748518:tid 2748518] (70014)End of file found: [client 216.73.216.199:41838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:35.762637 2026] [ssl:error] [pid 2745130:tid 2745130] (EAI 2)Name or service not known: [client 144.76.19.72:46884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:35.762680 2026] [ssl:error] [pid 2745130:tid 2745130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:35.815871 2026] [ssl:error] [pid 2748524:tid 2748524] (EAI 2)Name or service not known: [client 144.76.19.72:46892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:35.815906 2026] [ssl:error] [pid 2748524:tid 2748524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:35.908678 2026] [core:error] [pid 2748110:tid 2748110] [client 66.249.66.66:52367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:35.908700 2026] [core:error] [pid 2748110:tid 2748110] [client 66.249.66.66:52367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:36.301999 2026] [security2:error] [pid 2745134:tid 2745134] [client 110.249.202.177:43414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/robots.txt"] [unique_id "amsbYKJy1YsiyNJBtxvX9wAAACQ"]
[Thu Jul 30 10:37:38.100642 2026] [ssl:error] [pid 2748411:tid 2748411] (70014)End of file found: [client 216.73.216.199:35166] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:38.875529 2026] [ssl:error] [pid 2745135:tid 2745135] (EAI 2)Name or service not known: [client 144.76.19.72:46900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:38.875557 2026] [ssl:error] [pid 2745135:tid 2745135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:38.929077 2026] [ssl:error] [pid 2748522:tid 2748522] (EAI 2)Name or service not known: [client 144.76.19.72:46906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:38.929106 2026] [ssl:error] [pid 2748522:tid 2748522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:39.565763 2026] [authz_core:error] [pid 2745135:tid 2745135] [client 216.73.216.82:10405] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 10:37:40.073170 2026] [lsapi:warn] [pid 2748522:tid 2748522] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:41.985583 2026] [ssl:error] [pid 2745318:tid 2745318] (EAI 2)Name or service not known: [client 144.76.19.72:56404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:41.985640 2026] [ssl:error] [pid 2745318:tid 2745318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:42.073521 2026] [ssl:error] [pid 2749630:tid 2749630] (EAI 2)Name or service not known: [client 144.76.19.72:56414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:42.073568 2026] [ssl:error] [pid 2749630:tid 2749630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:43.752293 2026] [lsapi:warn] [pid 2748110:tid 2748110] [client 87.201.112.222:44900] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:44.302958 2026] [security2:error] [pid 2749632:tid 2749632] [client 114.119.132.131:36011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.theovertones.co.uk"] [uri "/images/igallery/resized/1-100/overtones210608-8-1000-1000-80.jpg"] [unique_id "amsbaBuk-Zb_zwM4OuCuZQAAACA"], referer: https://www.theovertones.co.uk/?i=overtones210608
[Thu Jul 30 10:37:44.630343 2026] [authz_core:error] [pid 2729455:tid 2729455] [client 66.249.66.33:52047] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:37:44.633012 2026] [authz_core:error] [pid 2729455:tid 2729455] [client 66.249.66.33:52047] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:37:45.160709 2026] [ssl:error] [pid 2743438:tid 2743438] (EAI 2)Name or service not known: [client 144.76.19.72:56428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:45.160756 2026] [ssl:error] [pid 2743438:tid 2743438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:45.212504 2026] [ssl:error] [pid 2749630:tid 2749630] (EAI 2)Name or service not known: [client 144.76.19.72:56436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:45.212532 2026] [ssl:error] [pid 2749630:tid 2749630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:46.234389 2026] [ssl:error] [pid 2748110:tid 2748110] (70014)End of file found: [client 216.73.216.199:25989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:46.531314 2026] [ssl:error] [pid 2743404:tid 2743404] (70014)End of file found: [client 216.73.216.199:18353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:48.041170 2026] [ssl:error] [pid 2749566:tid 2749566] (70014)End of file found: [client 216.73.216.199:34275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:48.300990 2026] [ssl:error] [pid 2748411:tid 2748411] (EAI 2)Name or service not known: [client 144.76.19.72:56446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:48.301025 2026] [ssl:error] [pid 2748411:tid 2748411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:48.357816 2026] [ssl:error] [pid 2743478:tid 2743478] (EAI 2)Name or service not known: [client 144.76.19.72:56452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:48.357887 2026] [ssl:error] [pid 2743478:tid 2743478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:48.630225 2026] [authz_core:error] [pid 2741267:tid 2741267] [client 66.249.66.33:41047] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:37:48.632934 2026] [authz_core:error] [pid 2741267:tid 2741267] [client 66.249.66.33:41047] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:37:50.800128 2026] [lsapi:warn] [pid 2749631:tid 2749631] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:51.413561 2026] [ssl:error] [pid 2744935:tid 2744935] (EAI 2)Name or service not known: [client 144.76.19.72:38554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:51.413611 2026] [ssl:error] [pid 2744935:tid 2744935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:51.465313 2026] [ssl:error] [pid 2748410:tid 2748410] (EAI 2)Name or service not known: [client 144.76.19.72:38570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:51.465348 2026] [ssl:error] [pid 2748410:tid 2748410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:51.549145 2026] [ssl:error] [pid 2749630:tid 2749630] (70014)End of file found: [client 216.73.216.199:19004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:51.859248 2026] [lsapi:warn] [pid 2748410:tid 2748410] [client 216.73.216.199:26554] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Undefined variable $argv in /opt/cpanel/ea-wappspector/composer-installer.php on line 14\n
[Thu Jul 30 10:37:52.506167 2026] [security2:error] [pid 2744935:tid 2744935] [client 114.119.143.177:30397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsbcNq9Nqw_OwK5r93ynAAAAAI"], referer: https://www.jonathanhill.co.uk/?page_id=511
[Thu Jul 30 10:37:53.886737 2026] [lsapi:warn] [pid 2741267:tid 2741267] [client 87.201.112.222:23202] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:37:54.524765 2026] [ssl:error] [pid 2749634:tid 2749634] (EAI 2)Name or service not known: [client 144.76.19.72:38594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:54.524815 2026] [ssl:error] [pid 2749634:tid 2749634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:54.578121 2026] [ssl:error] [pid 2749567:tid 2749567] (EAI 2)Name or service not known: [client 144.76.19.72:38610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:54.578160 2026] [ssl:error] [pid 2749567:tid 2749567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:54.715802 2026] [core:error] [pid 2747621:tid 2747621] [client 66.249.66.39:51388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:54.715832 2026] [core:error] [pid 2747621:tid 2747621] [client 66.249.66.39:51388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:37:55.671471 2026] [security2:error] [pid 2749567:tid 2749567] [client 185.191.171.16:34952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/fort-st-john-news-accident"] [unique_id "amsbczY0eKm3Lnmi6z23xAAAABw"]
[Thu Jul 30 10:37:56.470383 2026] [ssl:error] [pid 2744935:tid 2744935] (70014)End of file found: [client 216.73.216.199:53703] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:37:57.632826 2026] [ssl:error] [pid 2740080:tid 2740080] (EAI 2)Name or service not known: [client 144.76.19.72:38632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:57.632862 2026] [ssl:error] [pid 2740080:tid 2740080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:57.687822 2026] [ssl:error] [pid 2749567:tid 2749567] (EAI 2)Name or service not known: [client 144.76.19.72:38634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:37:57.687869 2026] [ssl:error] [pid 2749567:tid 2749567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:37:59.308176 2026] [core:error] [pid 2744989:tid 2744989] (13)Permission denied: [client 216.73.216.199:56224] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip4-frags/poison
[Thu Jul 30 10:38:00.095882 2026] [security2:error] [pid 2750258:tid 2750258] [client 129.226.174.80:42828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tompalmer.co.uk"] [uri "/"] [unique_id "amsbeBQJruqX6NEfufpjaQAAACg"]
[Thu Jul 30 10:38:00.793297 2026] [ssl:error] [pid 2743482:tid 2743482] (EAI 2)Name or service not known: [client 144.76.19.72:33884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:00.793334 2026] [ssl:error] [pid 2743482:tid 2743482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:00.846094 2026] [ssl:error] [pid 2748464:tid 2748464] (EAI 2)Name or service not known: [client 144.76.19.72:33894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:00.846511 2026] [ssl:error] [pid 2748464:tid 2748464] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:01.430375 2026] [lsapi:warn] [pid 2743361:tid 2743361] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:02.619006 2026] [core:error] [pid 2744989:tid 2744989] (13)Permission denied: [client 216.73.216.199:56224] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/manualmx
[Thu Jul 30 10:38:02.788022 2026] [security2:error] [pid 2748358:tid 2748358] [client 129.226.174.80:42394] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsberwecNHTMca4WGuWDQAAAAQ"], referer: http://www.tompalmer.co.uk
[Thu Jul 30 10:38:03.904615 2026] [ssl:error] [pid 2749505:tid 2749505] (EAI 2)Name or service not known: [client 144.76.19.72:33908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:03.904651 2026] [ssl:error] [pid 2749505:tid 2749505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:03.960823 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:33918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:03.960867 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:04.614880 2026] [lsapi:warn] [pid 2743482:tid 2743482] [client 45.63.51.63:43028] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 10:38:04.614924 2026] [lsapi:warn] [pid 2743482:tid 2743482] [client 45.63.51.63:43028] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 10:38:04.724125 2026] [lsapi:warn] [pid 2748520:tid 2748520] [client 87.201.112.222:23227] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:07.019809 2026] [ssl:error] [pid 2729455:tid 2729455] (EAI 2)Name or service not known: [client 144.76.19.72:33934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:07.019855 2026] [ssl:error] [pid 2729455:tid 2729455] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:07.077090 2026] [ssl:error] [pid 2745135:tid 2745135] (EAI 2)Name or service not known: [client 144.76.19.72:33942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:07.077119 2026] [ssl:error] [pid 2745135:tid 2745135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:08.040195 2026] [ssl:error] [pid 2744989:tid 2744989] (70014)End of file found: [client 216.73.216.199:56224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:08.948347 2026] [ssl:error] [pid 2745134:tid 2745134] (70014)End of file found: [client 216.73.216.199:23328] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:10.131546 2026] [ssl:error] [pid 2743492:tid 2743492] (EAI 2)Name or service not known: [client 144.76.19.72:29578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:10.131587 2026] [ssl:error] [pid 2743492:tid 2743492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:10.186658 2026] [ssl:error] [pid 2748464:tid 2748464] (EAI 2)Name or service not known: [client 144.76.19.72:29588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:10.186695 2026] [ssl:error] [pid 2748464:tid 2748464] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:11.662095 2026] [ssl:error] [pid 2743361:tid 2743361] (70014)End of file found: [client 216.73.216.199:1730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:12.143497 2026] [lsapi:warn] [pid 2748410:tid 2748410] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:13.243021 2026] [ssl:error] [pid 2749162:tid 2749162] (EAI 2)Name or service not known: [client 144.76.19.72:29598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:13.243087 2026] [ssl:error] [pid 2749162:tid 2749162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:13.300528 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:29602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:13.300557 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:13.475181 2026] [lsapi:error] [pid 2742278:tid 2742278] [client 216.73.216.199:18787] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Yii.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Yii.php on line 8\n
[Thu Jul 30 10:38:14.110343 2026] [security2:error] [pid 2748410:tid 2748410] [client 150.5.132.27:63893] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbhnh9yp9xFpQUkj9q6AAAAAU"]
[Thu Jul 30 10:38:14.110395 2026] [security2:error] [pid 2748410:tid 2748410] [client 150.5.132.27:63893] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbhnh9yp9xFpQUkj9q6AAAAAU"]
[Thu Jul 30 10:38:14.110663 2026] [security2:error] [pid 2748410:tid 2748410] [client 150.5.132.27:63893] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbhnh9yp9xFpQUkj9q6AAAAAU"]
[Thu Jul 30 10:38:15.204170 2026] [lsapi:warn] [pid 2750259:tid 2750259] [client 87.201.112.222:23215] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:15.842155 2026] [security2:error] [pid 2749631:tid 2749631] [client 86.120.188.13:51522] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbh2hQhcWyRpu31eOTLgAAAB4"]
[Thu Jul 30 10:38:15.842210 2026] [security2:error] [pid 2749631:tid 2749631] [client 86.120.188.13:51522] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbh2hQhcWyRpu31eOTLgAAAB4"]
[Thu Jul 30 10:38:15.842443 2026] [security2:error] [pid 2749631:tid 2749631] [client 86.120.188.13:51522] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbh2hQhcWyRpu31eOTLgAAAB4"]
[Thu Jul 30 10:38:16.352136 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:29606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:16.352173 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:16.408227 2026] [ssl:error] [pid 2749567:tid 2749567] (EAI 2)Name or service not known: [client 144.76.19.72:29620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:16.408259 2026] [ssl:error] [pid 2749567:tid 2749567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:17.668777 2026] [security2:error] [pid 2749505:tid 2749505] [client 185.191.171.5:63076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1960.0/prev_next,prev.html"] [unique_id "amsbiQ7pxTHXcGIUvIQEMwAAAA0"]
[Thu Jul 30 10:38:18.596887 2026] [ssl:error] [pid 2744989:tid 2744989] (70014)End of file found: [client 216.73.216.199:27292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:19.467182 2026] [ssl:error] [pid 2749630:tid 2749630] (EAI 2)Name or service not known: [client 144.76.19.72:29632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:19.467220 2026] [ssl:error] [pid 2749630:tid 2749630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:19.523720 2026] [ssl:error] [pid 2748358:tid 2748358] (EAI 2)Name or service not known: [client 144.76.19.72:29646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:19.523773 2026] [ssl:error] [pid 2748358:tid 2748358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:20.623881 2026] [security2:error] [pid 2749630:tid 2749630] [client 43.165.4.2:51516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsbjLLi-zU5TB9PAbGHswAAAB0"]
[Thu Jul 30 10:38:21.112576 2026] [security2:error] [pid 2749505:tid 2749505] [client 43.165.4.2:47234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsbjQ7pxTHXcGIUvIQEOAAAAA0"], referer: http://www.saturnsports.co.uk
[Thu Jul 30 10:38:22.055932 2026] [security2:error] [pid 2741689:tid 2741689] [client 47.128.34.233:43800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amsbjgZKHalzO7gwDEU9nQAAACM"]
[Thu Jul 30 10:38:22.209052 2026] [ssl:error] [pid 2748522:tid 2748522] (70014)End of file found: [client 216.73.216.199:24676] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:22.867669 2026] [ssl:error] [pid 2751374:tid 2751374] (EAI 2)Name or service not known: [client 144.76.19.72:28972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:22.867713 2026] [ssl:error] [pid 2751374:tid 2751374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:23.001205 2026] [ssl:error] [pid 2751329:tid 2751329] (EAI 2)Name or service not known: [client 144.76.19.72:28986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:23.001251 2026] [ssl:error] [pid 2751329:tid 2751329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:23.059505 2026] [lsapi:warn] [pid 2751373:tid 2751373] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:23.616515 2026] [core:error] [pid 2750259:tid 2750259] (13)Permission denied: [client 216.73.216.199:13366] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS3/iomem_base
[Thu Jul 30 10:38:24.066441 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:13366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:24.363402 2026] [core:error] [pid 2748410:tid 2748410] (13)Permission denied: [client 216.73.216.199:30392] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/virtio_blk/uevent
[Thu Jul 30 10:38:25.463404 2026] [ssl:error] [pid 2749162:tid 2749162] (70014)End of file found: [client 216.73.216.199:45065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:25.568236 2026] [ssl:error] [pid 2748410:tid 2748410] (70014)End of file found: [client 216.73.216.199:30392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:25.725764 2026] [lsapi:warn] [pid 2744989:tid 2744989] [client 87.201.112.222:23224] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:26.058338 2026] [ssl:error] [pid 2751461:tid 2751461] (EAI 2)Name or service not known: [client 144.76.19.72:29000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:26.058392 2026] [ssl:error] [pid 2751461:tid 2751461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:26.111189 2026] [ssl:error] [pid 2751462:tid 2751462] (EAI 2)Name or service not known: [client 144.76.19.72:29010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:26.111237 2026] [ssl:error] [pid 2751462:tid 2751462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:29.165760 2026] [ssl:error] [pid 2751462:tid 2751462] (EAI 2)Name or service not known: [client 144.76.19.72:29020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:29.165793 2026] [ssl:error] [pid 2751462:tid 2751462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:29.220340 2026] [ssl:error] [pid 2741689:tid 2741689] (EAI 2)Name or service not known: [client 144.76.19.72:29022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:29.220373 2026] [ssl:error] [pid 2741689:tid 2741689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:29.706441 2026] [core:error] [pid 2748464:tid 2748464] [client 66.249.66.168:53989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:29.706480 2026] [core:error] [pid 2748464:tid 2748464] [client 66.249.66.168:53989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:29.708479 2026] [core:error] [pid 2741691:tid 2741691] [client 66.249.66.168:47261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:29.708498 2026] [core:error] [pid 2741691:tid 2741691] [client 66.249.66.168:47261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:30.126163 2026] [ssl:error] [pid 2748411:tid 2748411] (70014)End of file found: [client 216.73.216.199:41184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:30.625656 2026] [ssl:error] [pid 2743489:tid 2743489] (70014)End of file found: [client 216.73.216.199:39218] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:32.331801 2026] [ssl:error] [pid 2743361:tid 2743361] (EAI 2)Name or service not known: [client 144.76.19.72:50566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:32.331849 2026] [ssl:error] [pid 2743361:tid 2743361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:32.385044 2026] [ssl:error] [pid 2749634:tid 2749634] (EAI 2)Name or service not known: [client 144.76.19.72:50574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:32.385093 2026] [ssl:error] [pid 2749634:tid 2749634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:33.438344 2026] [lsapi:warn] [pid 2744935:tid 2744935] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:34.346440 2026] [ssl:error] [pid 2751329:tid 2751329] (70014)End of file found: [client 216.73.216.199:62867] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:35.483144 2026] [ssl:error] [pid 2745134:tid 2745134] (EAI 2)Name or service not known: [client 144.76.19.72:50576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:35.483197 2026] [ssl:error] [pid 2745134:tid 2745134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:35.539241 2026] [ssl:error] [pid 2751459:tid 2751459] (EAI 2)Name or service not known: [client 144.76.19.72:50578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:35.539287 2026] [ssl:error] [pid 2751459:tid 2751459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:36.049553 2026] [ssl:error] [pid 2744935:tid 2744935] (70014)End of file found: [client 216.73.216.199:1547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:36.663593 2026] [lsapi:warn] [pid 2750220:tid 2750220] [client 87.201.112.222:23195] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:36.717613 2026] [core:error] [pid 2748522:tid 2748522] [client 66.249.66.167:49263] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:36.717644 2026] [core:error] [pid 2748522:tid 2748522] [client 66.249.66.167:49263] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:36.757885 2026] [ssl:error] [pid 2749567:tid 2749567] (70014)End of file found: [client 216.73.216.199:30638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:38.596288 2026] [ssl:error] [pid 2751461:tid 2751461] (EAI 2)Name or service not known: [client 144.76.19.72:50586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:38.596321 2026] [ssl:error] [pid 2751461:tid 2751461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:38.648136 2026] [ssl:error] [pid 2751466:tid 2751466] (EAI 2)Name or service not known: [client 144.76.19.72:50602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:38.648170 2026] [ssl:error] [pid 2751466:tid 2751466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:40.489945 2026] [security2:error] [pid 2748411:tid 2748411] [client 43.164.3.23:55962] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kirstybashforth.com"] [uri "/"] [unique_id "amsboHf0PkNIwJuR0l5tugAAAAg"]
[Thu Jul 30 10:38:41.273043 2026] [ssl:error] [pid 2745134:tid 2745134] (70014)End of file found: [client 216.73.216.199:46344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:41.703525 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:52708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:41.703559 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:41.756658 2026] [ssl:error] [pid 2743361:tid 2743361] (EAI 2)Name or service not known: [client 144.76.19.72:52724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:41.756690 2026] [ssl:error] [pid 2743361:tid 2743361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:42.346812 2026] [core:error] [pid 2750259:tid 2750259] [client 46.62.136.105:33824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:42.346847 2026] [core:error] [pid 2750259:tid 2750259] [client 46.62.136.105:33824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:38:43.993364 2026] [ssl:error] [pid 2748411:tid 2748411] (70014)End of file found: [client 216.73.216.199:57740] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:44.212234 2026] [lsapi:warn] [pid 2751374:tid 2751374] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:44.291502 2026] [ssl:error] [pid 2751329:tid 2751329] (70014)End of file found: [client 216.73.216.199:53714] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:44.810882 2026] [ssl:error] [pid 2749630:tid 2749630] (EAI 2)Name or service not known: [client 144.76.19.72:52734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:44.810915 2026] [ssl:error] [pid 2749630:tid 2749630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:44.867548 2026] [ssl:error] [pid 2751373:tid 2751373] (EAI 2)Name or service not known: [client 144.76.19.72:52746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:44.867585 2026] [ssl:error] [pid 2751373:tid 2751373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:46.066142 2026] [security2:error] [pid 2741689:tid 2741689] [client 114.119.135.136:38663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/page/7/"] [unique_id "amsbpgZKHalzO7gwDEU9pgAAACM"], referer: http://www.erskinenazarene.co.uk/sermons/page/8/
[Thu Jul 30 10:38:46.701827 2026] [ssl:error] [pid 2751419:tid 2751419] (70014)End of file found: [client 216.73.216.199:27573] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:47.118699 2026] [lsapi:warn] [pid 2743361:tid 2743361] [client 87.201.112.222:58716] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:47.925482 2026] [ssl:error] [pid 2741689:tid 2741689] (EAI 2)Name or service not known: [client 144.76.19.72:52762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:47.925527 2026] [ssl:error] [pid 2741689:tid 2741689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:47.982046 2026] [ssl:error] [pid 2747621:tid 2747621] (EAI 2)Name or service not known: [client 144.76.19.72:52772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:47.982120 2026] [ssl:error] [pid 2747621:tid 2747621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:48.129017 2026] [security2:error] [pid 2748522:tid 2748522] [client 114.119.135.136:38679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/sermons/page/7/"] [unique_id "amsbqLsAlGyrVKXc9bV55wAAAB8"], referer: http://www.erskinenazarene.co.uk/sermons/page/8/
[Thu Jul 30 10:38:49.302568 2026] [ssl:error] [pid 2743361:tid 2743361] (70014)End of file found: [client 216.73.216.199:25833] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:49.595935 2026] [ssl:error] [pid 2747621:tid 2747621] (70014)End of file found: [client 216.73.216.199:35079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:51.037887 2026] [ssl:error] [pid 2751329:tid 2751329] (EAI 2)Name or service not known: [client 144.76.19.72:22870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:51.037917 2026] [ssl:error] [pid 2751329:tid 2751329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:51.098222 2026] [ssl:error] [pid 2749566:tid 2749566] (EAI 2)Name or service not known: [client 144.76.19.72:22882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:51.098284 2026] [ssl:error] [pid 2749566:tid 2749566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:53.061178 2026] [authz_core:error] [pid 2751463:tid 2751463] [client 66.249.66.33:35973] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:38:53.064322 2026] [authz_core:error] [pid 2751463:tid 2751463] [client 66.249.66.33:35973] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:38:53.353173 2026] [ssl:error] [pid 2749162:tid 2749162] (70014)End of file found: [client 216.73.216.199:34370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:54.245141 2026] [ssl:error] [pid 2745129:tid 2745129] (EAI 2)Name or service not known: [client 144.76.19.72:22884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:54.245167 2026] [ssl:error] [pid 2745129:tid 2745129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:54.413276 2026] [ssl:error] [pid 2743361:tid 2743361] (EAI 2)Name or service not known: [client 144.76.19.72:22900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:54.413301 2026] [ssl:error] [pid 2743361:tid 2743361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:54.926212 2026] [lsapi:warn] [pid 2745129:tid 2745129] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:56.067089 2026] [ssl:error] [pid 2744935:tid 2744935] (70014)End of file found: [client 216.73.216.199:1733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:57.135275 2026] [authz_core:error] [pid 2741689:tid 2741689] [client 20.220.15.170:41060] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 10:38:57.192973 2026] [lsapi:warn] [pid 2752688:tid 2752688] [client 87.201.112.222:23203] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:38:57.455222 2026] [security2:error] [pid 2744989:tid 2744989] [client 185.191.171.13:17222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/jerry-jones-jr-wife"] [unique_id "amsbsV-Q_aRArkLoDVDsWAAAAAY"]
[Thu Jul 30 10:38:57.468031 2026] [ssl:error] [pid 2745129:tid 2745129] (EAI 2)Name or service not known: [client 144.76.19.72:22912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:57.468061 2026] [ssl:error] [pid 2745129:tid 2745129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:57.558222 2026] [ssl:error] [pid 2743489:tid 2743489] (EAI 2)Name or service not known: [client 144.76.19.72:22922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:38:57.558270 2026] [ssl:error] [pid 2743489:tid 2743489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:38:58.643341 2026] [ssl:error] [pid 2752654:tid 2752654] (70014)End of file found: [client 216.73.216.199:5835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:38:59.244966 2026] [ssl:error] [pid 2751465:tid 2751465] (70014)End of file found: [client 216.73.216.199:8015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:00.261687 2026] [security2:error] [pid 2748524:tid 2748524] [client 85.208.96.198:33544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3743.0/prev_next,prev.html"] [unique_id "amsbtE2GmH5T2uXGzTdUFgAAACU"]
[Thu Jul 30 10:39:00.640191 2026] [ssl:error] [pid 2752687:tid 2752687] (EAI 2)Name or service not known: [client 144.76.19.72:43230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:00.640238 2026] [ssl:error] [pid 2752687:tid 2752687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:00.693989 2026] [ssl:error] [pid 2744989:tid 2744989] (EAI 2)Name or service not known: [client 144.76.19.72:43238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:00.694026 2026] [ssl:error] [pid 2744989:tid 2744989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:01.549618 2026] [ssl:error] [pid 2744989:tid 2744989] (70014)End of file found: [client 216.73.216.199:20976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:02.818732 2026] [security2:error] [pid 2752611:tid 2752611] [client 74.7.242.22:51090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dennor.eu"] [uri "/"] [unique_id "amsbtgdZRWabpm6gXWxfnQAAAAQ"]
[Thu Jul 30 10:39:02.869135 2026] [core:error] [pid 2751420:tid 2751420] [client 66.249.66.167:48758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:02.869178 2026] [core:error] [pid 2751420:tid 2751420] [client 66.249.66.167:48758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:03.749257 2026] [ssl:error] [pid 2751420:tid 2751420] (EAI 2)Name or service not known: [client 144.76.19.72:43246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:03.749312 2026] [ssl:error] [pid 2751420:tid 2751420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:03.803467 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:43260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:03.803511 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:04.672056 2026] [ssl:error] [pid 2753003:tid 2753003] (70014)End of file found: [client 216.73.216.199:4792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:05.662094 2026] [lsapi:warn] [pid 2748411:tid 2748411] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:06.857719 2026] [ssl:error] [pid 2748411:tid 2748411] (EAI 2)Name or service not known: [client 144.76.19.72:43272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:06.857759 2026] [ssl:error] [pid 2748411:tid 2748411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:06.912366 2026] [ssl:error] [pid 2753077:tid 2753077] (EAI 2)Name or service not known: [client 144.76.19.72:43274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:06.912397 2026] [ssl:error] [pid 2753077:tid 2753077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:07.388416 2026] [ssl:error] [pid 2751420:tid 2751420] (70014)End of file found: [client 216.73.216.199:54197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:07.474931 2026] [lsapi:warn] [pid 2720994:tid 2720994] [client 87.201.112.222:58722] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:09.119272 2026] [security2:error] [pid 2745429:tid 2745429] [client 213.91.199.240:6817] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbvQhMTL-3vH1BUw5RZAAAAE0"]
[Thu Jul 30 10:39:09.119330 2026] [security2:error] [pid 2745429:tid 2745429] [client 213.91.199.240:6817] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbvQhMTL-3vH1BUw5RZAAAAE0"]
[Thu Jul 30 10:39:09.119569 2026] [security2:error] [pid 2745429:tid 2745429] [client 213.91.199.240:6817] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbvQhMTL-3vH1BUw5RZAAAAE0"]
[Thu Jul 30 10:39:09.495615 2026] [ssl:error] [pid 2752611:tid 2752611] (70014)End of file found: [client 216.73.216.199:2188] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:09.969481 2026] [ssl:error] [pid 2749505:tid 2749505] (EAI 2)Name or service not known: [client 144.76.19.72:35722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:09.969510 2026] [ssl:error] [pid 2749505:tid 2749505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:10.023681 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:35726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:10.023707 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:11.890395 2026] [security2:error] [pid 2745129:tid 2745129] [client 110.249.202.20:26194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/robots.txt"] [unique_id "amsbvzAGToBNyhUFMtKhCwAAABg"]
[Thu Jul 30 10:39:11.905513 2026] [ssl:error] [pid 2747621:tid 2747621] (70014)End of file found: [client 216.73.216.199:64038] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:13.081371 2026] [ssl:error] [pid 2752685:tid 2752685] (EAI 2)Name or service not known: [client 144.76.19.72:35728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:13.081404 2026] [ssl:error] [pid 2752685:tid 2752685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:13.134753 2026] [ssl:error] [pid 2753333:tid 2753333] (EAI 2)Name or service not known: [client 144.76.19.72:35738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:13.134786 2026] [ssl:error] [pid 2753333:tid 2753333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:13.406983 2026] [ssl:error] [pid 2745134:tid 2745134] (70014)End of file found: [client 216.73.216.199:26790] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:13.466879 2026] [security2:error] [pid 2752685:tid 2752685] [client 163.7.13.143:51407] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbwVf4E7QKFFc3BXK_twAAABI"]
[Thu Jul 30 10:39:13.466925 2026] [security2:error] [pid 2752685:tid 2752685] [client 163.7.13.143:51407] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsbwVf4E7QKFFc3BXK_twAAABI"]
[Thu Jul 30 10:39:13.467178 2026] [security2:error] [pid 2752685:tid 2752685] [client 163.7.13.143:51407] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsbwVf4E7QKFFc3BXK_twAAABI"]
[Thu Jul 30 10:39:16.439624 2026] [ssl:error] [pid 2753268:tid 2753268] (EAI 2)Name or service not known: [client 144.76.19.72:35746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:16.439662 2026] [ssl:error] [pid 2753268:tid 2753268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:16.614023 2026] [lsapi:warn] [pid 2744935:tid 2744935] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:17.277991 2026] [cgi:error] [pid 2744935:tid 2744935] [client 74.114.151.68:43119] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/blog/
[Thu Jul 30 10:39:18.825536 2026] [ssl:error] [pid 2732878:tid 2732878] (70014)End of file found: [client 216.73.216.199:43663] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:20.573445 2026] [security2:error] [pid 2749162:tid 2749162] [client 110.249.201.98:52268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amsbyG67taEEfHmS2f8j3gAAABQ"]
[Thu Jul 30 10:39:20.789385 2026] [ssl:error] [pid 2753883:tid 2753883] (EAI 2)Name or service not known: [client 144.76.19.72:35760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:20.789431 2026] [ssl:error] [pid 2753883:tid 2753883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:20.894400 2026] [core:error] [pid 2753884:tid 2753884] [client 66.249.64.171:60028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:20.894452 2026] [core:error] [pid 2753884:tid 2753884] [client 66.249.64.171:60028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:21.744460 2026] [lsapi:warn] [pid 2753883:tid 2753883] [client 87.201.112.222:23225] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:21.843767 2026] [ssl:error] [pid 2751419:tid 2751419] (70014)End of file found: [client 216.73.216.199:57923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:22.016442 2026] [security2:error] [pid 2753890:tid 2753890] [client 156.59.198.135:60502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/terranigma/wxMEdit/ChangeLog.txt"] [unique_id "amsbylr541oAk7cPJNOPOAAAAEw"]
[Thu Jul 30 10:39:23.220244 2026] [security2:error] [pid 2753893:tid 2753893] [client 74.7.243.224:58704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "elhassanartist.com"] [uri "/sitemap.xml"] [unique_id "amsby-WI0fcQfkMc7T8sYAAAAFA"]
[Thu Jul 30 10:39:23.440335 2026] [core:error] [pid 2749634:tid 2749634] [client 20.220.15.170:46231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:23.440366 2026] [core:error] [pid 2749634:tid 2749634] [client 20.220.15.170:46231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:23.846471 2026] [ssl:error] [pid 2751420:tid 2751420] (EAI 2)Name or service not known: [client 144.76.19.72:19204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:23.846496 2026] [ssl:error] [pid 2751420:tid 2751420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:23.905442 2026] [ssl:error] [pid 2753791:tid 2753791] (EAI 2)Name or service not known: [client 144.76.19.72:19212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:23.905471 2026] [ssl:error] [pid 2753791:tid 2753791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:23.950601 2026] [security2:error] [pid 2745134:tid 2745134] [client 85.208.96.212:59550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9247.0/prev_next,next.html"] [unique_id "amsby6Jy1YsiyNJBtxvYjQAAACQ"]
[Thu Jul 30 10:39:24.147477 2026] [core:error] [pid 2753077:tid 2753077] [client 20.220.15.170:46470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:24.147504 2026] [core:error] [pid 2753077:tid 2753077] [client 20.220.15.170:46470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:24.852222 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:48493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:25.347764 2026] [ssl:error] [pid 2749505:tid 2749505] (70014)End of file found: [client 216.73.216.199:15306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:25.369383 2026] [security2:error] [pid 2753957:tid 2753957] [client 110.249.202.137:35628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amsbzULgzP-Hk_jY_HF8eQAAAFU"]
[Thu Jul 30 10:39:25.630923 2026] [core:error] [pid 2748522:tid 2748522] [client 66.249.64.171:51381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:25.630952 2026] [core:error] [pid 2748522:tid 2748522] [client 66.249.64.171:51381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:26.964923 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:19222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:26.964954 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:27.018003 2026] [ssl:error] [pid 2753957:tid 2753957] (EAI 2)Name or service not known: [client 144.76.19.72:19226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:27.018034 2026] [ssl:error] [pid 2753957:tid 2753957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:27.147171 2026] [ssl:error] [pid 2748522:tid 2748522] (70014)End of file found: [client 216.73.216.199:28958] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:27.210033 2026] [lsapi:warn] [pid 2753076:tid 2753076] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:28.650045 2026] [lsapi:warn] [pid 2753893:tid 2753893] [client 87.201.112.222:44870] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:29.967342 2026] [core:error] [pid 2753834:tid 2753834] [client 20.220.15.170:46217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:29.967368 2026] [core:error] [pid 2753834:tid 2753834] [client 20.220.15.170:46217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:30.090117 2026] [ssl:error] [pid 2753882:tid 2753882] (EAI 2)Name or service not known: [client 144.76.19.72:53636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:30.090159 2026] [ssl:error] [pid 2753882:tid 2753882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:30.147035 2026] [ssl:error] [pid 2745429:tid 2745429] (EAI 2)Name or service not known: [client 144.76.19.72:53640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:30.147088 2026] [ssl:error] [pid 2745429:tid 2745429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:30.737392 2026] [ssl:error] [pid 2753890:tid 2753890] (70014)End of file found: [client 216.73.216.199:59137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:30.953502 2026] [core:error] [pid 2751418:tid 2751418] [client 20.220.15.170:46213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:30.953528 2026] [core:error] [pid 2751418:tid 2751418] [client 20.220.15.170:46213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:31.408723 2026] [core:error] [pid 2753743:tid 2753743] [client 20.220.15.170:46479] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:31.408754 2026] [core:error] [pid 2753743:tid 2753743] [client 20.220.15.170:46479] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:31.940275 2026] [ssl:error] [pid 2752685:tid 2752685] (70014)End of file found: [client 216.73.216.199:55749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:32.097322 2026] [core:error] [pid 2753882:tid 2753882] [client 20.220.15.170:46225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:32.097346 2026] [core:error] [pid 2753882:tid 2753882] [client 20.220.15.170:46225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:32.752725 2026] [core:error] [pid 2753894:tid 2753894] [client 20.220.15.170:46492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:32.752749 2026] [core:error] [pid 2753894:tid 2753894] [client 20.220.15.170:46492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:33.140445 2026] [ssl:error] [pid 2753886:tid 2753886] (70014)End of file found: [client 216.73.216.199:25891] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:33.202956 2026] [ssl:error] [pid 2753698:tid 2753698] (EAI 2)Name or service not known: [client 144.76.19.72:53648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:33.202990 2026] [ssl:error] [pid 2753698:tid 2753698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:33.259062 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:33.259106 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:33.259874 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:53658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:33.259892 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:33.612554 2026] [core:error] [pid 2743478:tid 2743478] [client 20.220.15.170:46245] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:33.612579 2026] [core:error] [pid 2743478:tid 2743478] [client 20.220.15.170:46245] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:34.194461 2026] [core:error] [pid 2753882:tid 2753882] [client 20.220.15.170:46240] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:34.194487 2026] [core:error] [pid 2753882:tid 2753882] [client 20.220.15.170:46240] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:34.326752 2026] [authz_core:error] [pid 2753742:tid 2753742] [client 66.249.66.33:42293] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:39:34.329617 2026] [authz_core:error] [pid 2753742:tid 2753742] [client 66.249.66.33:42293] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:39:34.513520 2026] [security2:error] [pid 2753881:tid 2753881] [client 163.7.13.143:51445] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsb1tXJG-6oml-4y9SbjQAAAEM"]
[Thu Jul 30 10:39:34.513571 2026] [security2:error] [pid 2753881:tid 2753881] [client 163.7.13.143:51445] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsb1tXJG-6oml-4y9SbjQAAAEM"]
[Thu Jul 30 10:39:34.513834 2026] [security2:error] [pid 2753881:tid 2753881] [client 163.7.13.143:51445] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsb1tXJG-6oml-4y9SbjQAAAEM"]
[Thu Jul 30 10:39:34.560415 2026] [core:error] [pid 2732878:tid 2732878] [client 20.220.15.170:46246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:34.560443 2026] [core:error] [pid 2732878:tid 2732878] [client 20.220.15.170:46246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:34.938735 2026] [core:error] [pid 2753894:tid 2753894] [client 20.220.15.170:46468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:34.938760 2026] [core:error] [pid 2753894:tid 2753894] [client 20.220.15.170:46468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:35.361947 2026] [core:error] [pid 2753698:tid 2753698] [client 20.220.15.170:46643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:35.361977 2026] [core:error] [pid 2753698:tid 2753698] [client 20.220.15.170:46643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:35.709720 2026] [core:error] [pid 2753841:tid 2753841] [client 20.220.15.170:46476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:35.709749 2026] [core:error] [pid 2753841:tid 2753841] [client 20.220.15.170:46476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:36.097350 2026] [core:error] [pid 2749505:tid 2749505] [client 20.220.15.170:46239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:36.097379 2026] [core:error] [pid 2749505:tid 2749505] [client 20.220.15.170:46239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:36.317126 2026] [ssl:error] [pid 2750150:tid 2750150] (EAI 2)Name or service not known: [client 144.76.19.72:53664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:36.317164 2026] [ssl:error] [pid 2750150:tid 2750150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:36.370559 2026] [ssl:error] [pid 2753881:tid 2753881] (EAI 2)Name or service not known: [client 144.76.19.72:53672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:36.370603 2026] [ssl:error] [pid 2753881:tid 2753881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:36.417093 2026] [core:error] [pid 2732878:tid 2732878] [client 20.220.15.170:46487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:36.417121 2026] [core:error] [pid 2732878:tid 2732878] [client 20.220.15.170:46487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:36.741894 2026] [core:error] [pid 2753837:tid 2753837] [client 20.220.15.170:46262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:36.741927 2026] [core:error] [pid 2753837:tid 2753837] [client 20.220.15.170:46262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:37.151660 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:37.151683 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:37.559056 2026] [core:error] [pid 2753890:tid 2753890] [client 20.220.15.170:46226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:37.559098 2026] [core:error] [pid 2753890:tid 2753890] [client 20.220.15.170:46226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:37.649321 2026] [security2:error] [pid 2753268:tid 2753268] [client 216.73.216.199:45530] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-plugins/cpanel-cagefs/exclude_mounts.conf"] [unique_id "amsb2YT662OYC3TkQ8482AAAACs"]
[Thu Jul 30 10:39:37.649621 2026] [security2:error] [pid 2753268:tid 2753268] [client 216.73.216.199:45530] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-plugins/cpanel-cagefs/exclude_mounts.conf"] [unique_id "amsb2YT662OYC3TkQ8482AAAACs"]
[Thu Jul 30 10:39:37.649855 2026] [security2:error] [pid 2753268:tid 2753268] [client 216.73.216.199:45530] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-plugins/cpanel-cagefs/exclude_mounts.conf"] [unique_id "amsb2YT662OYC3TkQ8482AAAACs"]
[Thu Jul 30 10:39:37.837415 2026] [lsapi:warn] [pid 2753003:tid 2753003] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:37.915807 2026] [core:error] [pid 2753791:tid 2753791] [client 20.220.15.170:46483] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:37.915835 2026] [core:error] [pid 2753791:tid 2753791] [client 20.220.15.170:46483] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:38.321091 2026] [core:error] [pid 2753837:tid 2753837] [client 20.220.15.170:46268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:38.321130 2026] [core:error] [pid 2753837:tid 2753837] [client 20.220.15.170:46268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:38.729944 2026] [core:error] [pid 2753698:tid 2753698] [client 20.220.15.170:46622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:38.729973 2026] [core:error] [pid 2753698:tid 2753698] [client 20.220.15.170:46622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:39.074715 2026] [core:error] [pid 2750259:tid 2750259] [client 20.220.15.170:46484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:39.074742 2026] [core:error] [pid 2750259:tid 2750259] [client 20.220.15.170:46484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:39.194902 2026] [lsapi:warn] [pid 2751466:tid 2751466] [client 87.201.112.222:44918] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:39.238077 2026] [security2:error] [pid 2749162:tid 2749162] [client 185.191.171.12:26282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11089.0/prev_next,prev.html"] [unique_id "amsb2267taEEfHmS2f8j5AAAABQ"]
[Thu Jul 30 10:39:39.412603 2026] [core:error] [pid 2748522:tid 2748522] [client 20.220.15.170:46209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:39.412633 2026] [core:error] [pid 2748522:tid 2748522] [client 20.220.15.170:46209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:39.428476 2026] [ssl:error] [pid 2753790:tid 2753790] (EAI 2)Name or service not known: [client 144.76.19.72:53676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:39.428518 2026] [ssl:error] [pid 2753790:tid 2753790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:39.481847 2026] [ssl:error] [pid 2753896:tid 2753896] (EAI 2)Name or service not known: [client 144.76.19.72:53690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:39.481879 2026] [ssl:error] [pid 2753896:tid 2753896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:39.756768 2026] [core:error] [pid 2753841:tid 2753841] (13)Permission denied: [client 216.73.216.199:36606] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/boot/System.map-4.18.0-553.126.2.lve.el8.x86_64
[Thu Jul 30 10:39:39.822843 2026] [core:error] [pid 2753791:tid 2753791] [client 20.220.15.170:46480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:39.822880 2026] [core:error] [pid 2753791:tid 2753791] [client 20.220.15.170:46480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.211747 2026] [core:error] [pid 2753884:tid 2753884] [client 20.220.15.170:46269] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.211772 2026] [core:error] [pid 2753884:tid 2753884] [client 20.220.15.170:46269] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.311374 2026] [core:error] [pid 2750259:tid 2750259] [client 66.249.66.40:58741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.311405 2026] [core:error] [pid 2750259:tid 2750259] [client 66.249.66.40:58741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.358077 2026] [core:error] [pid 2753841:tid 2753841] (13)Permission denied: [client 216.73.216.199:36606] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/xmit_fifo_size
[Thu Jul 30 10:39:40.558601 2026] [core:error] [pid 2752685:tid 2752685] [client 20.220.15.170:46489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.558629 2026] [core:error] [pid 2752685:tid 2752685] [client 20.220.15.170:46489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.660278 2026] [ssl:error] [pid 2753841:tid 2753841] (70014)End of file found: [client 216.73.216.199:36606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:40.918646 2026] [core:error] [pid 2749162:tid 2749162] [client 20.220.15.170:46237] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.918672 2026] [core:error] [pid 2749162:tid 2749162] [client 20.220.15.170:46237] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:40.960337 2026] [core:error] [pid 2753268:tid 2753268] (13)Permission denied: [client 216.73.216.199:45530] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory152/subsystem/uevent
[Thu Jul 30 10:39:41.285867 2026] [core:error] [pid 2750150:tid 2750150] [client 20.220.15.170:46527] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:41.285897 2026] [core:error] [pid 2750150:tid 2750150] [client 20.220.15.170:46527] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:41.619311 2026] [core:error] [pid 2753998:tid 2753998] [client 66.249.64.170:37482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:41.619344 2026] [core:error] [pid 2753998:tid 2753998] [client 66.249.64.170:37482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:41.623442 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:41.623466 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:41.972569 2026] [core:error] [pid 2753896:tid 2753896] [client 20.220.15.170:46466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:41.972612 2026] [core:error] [pid 2753896:tid 2753896] [client 20.220.15.170:46466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:42.075926 2026] [authz_core:error] [pid 2753698:tid 2753698] [client 66.249.66.33:39392] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:39:42.078619 2026] [authz_core:error] [pid 2753698:tid 2753698] [client 66.249.66.33:39392] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:39:42.396636 2026] [core:error] [pid 2749566:tid 2749566] [client 20.220.15.170:46220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:42.396664 2026] [core:error] [pid 2749566:tid 2749566] [client 20.220.15.170:46220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:42.538618 2026] [ssl:error] [pid 2753883:tid 2753883] (EAI 2)Name or service not known: [client 144.76.19.72:31578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:42.538653 2026] [ssl:error] [pid 2753883:tid 2753883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:42.592578 2026] [ssl:error] [pid 2753882:tid 2753882] (EAI 2)Name or service not known: [client 144.76.19.72:31594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:42.592623 2026] [ssl:error] [pid 2753882:tid 2753882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:42.688243 2026] [core:error] [pid 2753517:tid 2753517] [client 20.220.15.170:46509] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:42.688273 2026] [core:error] [pid 2753517:tid 2753517] [client 20.220.15.170:46509] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:43.062485 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46265] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:43.062515 2026] [core:error] [pid 2753790:tid 2753790] [client 20.220.15.170:46265] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:43.379487 2026] [core:error] [pid 2753896:tid 2753896] [client 20.220.15.170:46236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:43.379509 2026] [core:error] [pid 2753896:tid 2753896] [client 20.220.15.170:46236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:43.591818 2026] [ssl:error] [pid 2753003:tid 2753003] (70014)End of file found: [client 216.73.216.199:40938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:43.649832 2026] [core:error] [pid 2752687:tid 2752687] [client 20.220.15.170:46261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:43.649858 2026] [core:error] [pid 2752687:tid 2752687] [client 20.220.15.170:46261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:44.017510 2026] [core:error] [pid 2753517:tid 2753517] [client 20.220.15.170:46218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:44.017540 2026] [core:error] [pid 2753517:tid 2753517] [client 20.220.15.170:46218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:44.292791 2026] [ssl:error] [pid 2753268:tid 2753268] (70014)End of file found: [client 216.73.216.199:45530] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:44.399613 2026] [core:error] [pid 2752685:tid 2752685] [client 20.220.15.170:46244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:44.399636 2026] [core:error] [pid 2752685:tid 2752685] [client 20.220.15.170:46244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:44.701658 2026] [core:error] [pid 2751464:tid 2751464] [client 20.220.15.170:46251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:44.701684 2026] [core:error] [pid 2751464:tid 2751464] [client 20.220.15.170:46251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:45.110485 2026] [core:error] [pid 2749162:tid 2749162] [client 20.220.15.170:46491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:45.110513 2026] [core:error] [pid 2749162:tid 2749162] [client 20.220.15.170:46491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:45.500005 2026] [core:error] [pid 2752687:tid 2752687] [client 20.220.15.170:46467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:45.500027 2026] [core:error] [pid 2752687:tid 2752687] [client 20.220.15.170:46467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:45.647636 2026] [ssl:error] [pid 2753834:tid 2753834] (EAI 2)Name or service not known: [client 144.76.19.72:31606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:45.647677 2026] [ssl:error] [pid 2753834:tid 2753834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:45.700967 2026] [ssl:error] [pid 2752686:tid 2752686] (EAI 2)Name or service not known: [client 144.76.19.72:31612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:45.701003 2026] [ssl:error] [pid 2752686:tid 2752686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:46.310053 2026] [security2:error] [pid 2751464:tid 2751464] [client 159.89.91.236:45064] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "apotheekcandidejacobs.be"] [uri "/xmlrpc.php"] [unique_id "amsb4tKM69nN7iwXiu3MVAAAAC8"]
[Thu Jul 30 10:39:46.500584 2026] [core:error] [pid 2753892:tid 2753892] [client 20.220.15.170:46606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:46.500623 2026] [core:error] [pid 2753892:tid 2753892] [client 20.220.15.170:46606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:46.802993 2026] [core:error] [pid 2750259:tid 2750259] [client 20.220.15.170:46615] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:46.803022 2026] [core:error] [pid 2750259:tid 2750259] [client 20.220.15.170:46615] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:47.140544 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wk
[Thu Jul 30 10:39:47.140680 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:47.160893 2026] [core:error] [pid 2749505:tid 2749505] [client 20.220.15.170:46232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:47.160920 2026] [core:error] [pid 2749505:tid 2749505] [client 20.220.15.170:46232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:47.256915 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/av.php
[Thu Jul 30 10:39:47.257002 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:47.406260 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/mini.php
[Thu Jul 30 10:39:47.406348 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:47.534944 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aa.php
[Thu Jul 30 10:39:47.535035 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:47.651283 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/w.php
[Thu Jul 30 10:39:47.651372 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:47.771852 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin.php
[Thu Jul 30 10:39:47.771966 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:47.919185 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:47.919273 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:48.035413 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/m.php
[Thu Jul 30 10:39:48.035509 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:48.143123 2026] [core:error] [pid 2753890:tid 2753890] [client 66.249.66.8:53629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:48.143156 2026] [core:error] [pid 2753890:tid 2753890] [client 66.249.66.8:53629] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:39:48.184200 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:48.184292 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:48.300768 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:48.300862 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:48.482231 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/classwithtostring.php
[Thu Jul 30 10:39:48.482329 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:48.632720 2026] [lsapi:warn] [pid 2753789:tid 2753789] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:48.671084 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/gmo.php
[Thu Jul 30 10:39:48.671170 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:48.759121 2026] [ssl:error] [pid 2752686:tid 2752686] (EAI 2)Name or service not known: [client 144.76.19.72:31624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:48.759153 2026] [ssl:error] [pid 2752686:tid 2752686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:48.813639 2026] [ssl:error] [pid 2749505:tid 2749505] (EAI 2)Name or service not known: [client 144.76.19.72:31628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:48.813674 2026] [ssl:error] [pid 2749505:tid 2749505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:48.814334 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:48.814427 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:48.930763 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-the.php
[Thu Jul 30 10:39:48.930855 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.075410 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/404.php
[Thu Jul 30 10:39:49.075501 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.192135 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/init.php
[Thu Jul 30 10:39:49.192224 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.350836 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file5.php
[Thu Jul 30 10:39:49.350924 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.467190 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:49.467283 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.584757 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/shell.php
[Thu Jul 30 10:39:49.584840 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.739239 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/f35.php
[Thu Jul 30 10:39:49.739319 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.868960 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/new.php
[Thu Jul 30 10:39:49.869063 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:49.902921 2026] [lsapi:warn] [pid 2751374:tid 2751374] [client 87.201.112.222:58739] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:49.985850 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/adminfuns.php
[Thu Jul 30 10:39:49.985939 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:50.124582 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:50.124689 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:50.280864 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:50.280958 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:50.417237 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/fm.php
[Thu Jul 30 10:39:50.417334 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:50.570858 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin
[Thu Jul 30 10:39:50.570950 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:50.687410 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file.php
[Thu Jul 30 10:39:50.687499 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:50.845312 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:50.845399 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.000438 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/bolt.php
[Thu Jul 30 10:39:51.000527 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.117032 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/3.php
[Thu Jul 30 10:39:51.117134 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.233882 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/222.php
[Thu Jul 30 10:39:51.233972 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.377211 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:51.377298 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.533907 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:51.533994 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.675889 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:51.675979 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.793246 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:51.793334 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:51.867160 2026] [ssl:error] [pid 2753881:tid 2753881] (EAI 2)Name or service not known: [client 144.76.19.72:22158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:51.867184 2026] [ssl:error] [pid 2753881:tid 2753881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:51.921487 2026] [ssl:error] [pid 2753076:tid 2753076] (EAI 2)Name or service not known: [client 144.76.19.72:22160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:51.921521 2026] [ssl:error] [pid 2753076:tid 2753076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:51.954241 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-configs.php
[Thu Jul 30 10:39:51.954320 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:52.070366 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/php.php
[Thu Jul 30 10:39:52.070464 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:52.186534 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:52.186629 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:52.315766 2026] [ssl:error] [pid 2753887:tid 2753887] (70014)End of file found: [client 216.73.216.199:37908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:52.319312 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:52.319392 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:52.471594 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:52.471683 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:52.587912 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:52.588006 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:52.704345 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:52.704428 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:52.820629 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin.php
[Thu Jul 30 10:39:52.820728 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.047565 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/size.php
[Thu Jul 30 10:39:53.047667 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.072714 2026] [authz_core:error] [pid 2751417:tid 2751417] [client 66.249.66.33:38180] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:39:53.075346 2026] [authz_core:error] [pid 2751417:tid 2751417] [client 66.249.66.33:38180] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:39:53.164427 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:53.164514 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.280804 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.php
[Thu Jul 30 10:39:53.280891 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.430365 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:53.430452 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.590208 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/as.php
[Thu Jul 30 10:39:53.590302 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.706406 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:53.706493 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.825057 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:53.825197 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:53.941725 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/plugins.php
[Thu Jul 30 10:39:53.941834 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.106919 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:54.107050 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.270252 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/go.php
[Thu Jul 30 10:39:54.270375 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.387752 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/test1.php
[Thu Jul 30 10:39:54.387859 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.544706 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:54.544790 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.661899 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/images
[Thu Jul 30 10:39:54.661983 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.778392 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:54.778480 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.803053 2026] [cgi:error] [pid 2753896:tid 2753896] [client 20.63.10.215:62056] AH02812: stderr from /home/jgqawffu/public_html/wildduckdesigns.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:39:54.936628 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/asd.php
[Thu Jul 30 10:39:54.936714 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:54.977253 2026] [ssl:error] [pid 2748520:tid 2748520] (EAI 2)Name or service not known: [client 144.76.19.72:22164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:54.977286 2026] [ssl:error] [pid 2748520:tid 2748520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:55.028989 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:22166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:55.029025 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:55.055507 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:55.055606 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:55.149800 2026] [lsapi:error] [pid 2743478:tid 2743478] [client 216.73.216.199:43214] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Interface "Plesk\\Wappspector\\Matchers\\MatcherInterface" not found in /opt/cpanel/ea-wappspector/src/Matchers/Joomla.php:11\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/Matchers/Joomla.php on line 11\n
[Thu Jul 30 10:39:55.171873 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:55.171958 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:55.342090 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/atomlib.php
[Thu Jul 30 10:39:55.342174 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:55.471213 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:55.471302 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:55.480326 2026] [access_compat:error] [pid 2751463:tid 2751463] [client 45.158.164.139:51132] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:39:55.593941 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:55.594029 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:55.637453 2026] [core:error] [pid 2752654:tid 2752654] (13)Permission denied: [client 216.73.216.199:60005] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS3/port
[Thu Jul 30 10:39:55.724884 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:55.724972 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:55.841850 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:55.841941 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:55.958163 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:55.958243 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.098852 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:56.098935 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.240926 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/inputs.php
[Thu Jul 30 10:39:56.241011 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.357346 2026] [ssl:error] [pid 2753743:tid 2753743] (70014)End of file found: [client 216.73.216.199:25905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:56.384708 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:56.384797 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.500850 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:56.500936 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.646538 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:56.646638 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.654770 2026] [ssl:error] [pid 2752654:tid 2752654] (70014)End of file found: [client 216.73.216.199:60005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:56.762825 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/plugin.php
[Thu Jul 30 10:39:56.762908 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.879109 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1.php
[Thu Jul 30 10:39:56.879198 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:56.995410 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/gg.php
[Thu Jul 30 10:39:56.995509 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:57.175015 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:57.175113 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:57.291132 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp.php
[Thu Jul 30 10:39:57.291217 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:57.407300 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:57.407385 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:57.554256 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:57.554343 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:57.672190 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:57.672305 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:57.799466 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:57.799611 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:57.950892 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:39:57.950982 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:58.068629 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/index
[Thu Jul 30 10:39:58.068718 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:58.111236 2026] [security2:error] [pid 2737454:tid 2737454] [client 85.208.96.211:41842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/what-happened-to-viathon-bikes"] [unique_id "amsb7rxIcbQj7_5SCitpjwAAAAk"]
[Thu Jul 30 10:39:58.200161 2026] [ssl:error] [pid 2737454:tid 2737454] (EAI 2)Name or service not known: [client 144.76.19.72:22182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:58.200208 2026] [ssl:error] [pid 2737454:tid 2737454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:58.201554 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:58.201661 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:58.343507 2026] [ssl:error] [pid 2753889:tid 2753889] (EAI 2)Name or service not known: [client 144.76.19.72:22190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:39:58.343537 2026] [ssl:error] [pid 2753889:tid 2753889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:39:58.369494 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:58.369583 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:58.488212 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aaa.php
[Thu Jul 30 10:39:58.488339 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:58.619646 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/getid3-core.php
[Thu Jul 30 10:39:58.619734 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:58.889756 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/adminer.php
[Thu Jul 30 10:39:58.889844 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.009184 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:59.009317 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.073614 2026] [ssl:error] [pid 2753837:tid 2753837] (70014)End of file found: [client 216.73.216.199:54202] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:39:59.179040 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/alfa.php
[Thu Jul 30 10:39:59.179142 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.297575 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:59.297740 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.381427 2026] [lsapi:warn] [pid 2751464:tid 2751464] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:39:59.457236 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:59.457333 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.575023 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:59.575139 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.733339 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:39:59.733433 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.849855 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/edit.php
[Thu Jul 30 10:39:59.849951 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.967717 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:39:59.967821 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:39:59.984788 2026] [security2:error] [pid 2751374:tid 2751374] [client 43.166.128.86:49348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.co.uk"] [uri "/"] [unique_id "amsb76P4L2hB5RVBO3S_9QAAAA4"]
[Thu Jul 30 10:40:00.089121 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:40:00.089212 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:00.206856 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/sf.php
[Thu Jul 30 10:40:00.206944 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:00.323470 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:40:00.323558 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:00.408139 2026] [lsapi:warn] [pid 2751417:tid 2751417] [client 87.201.112.222:58691] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:00.449167 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wso.php
[Thu Jul 30 10:40:00.449260 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:00.624260 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ioxi-o.php
[Thu Jul 30 10:40:00.624341 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:00.740471 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file56.php
[Thu Jul 30 10:40:00.740558 2026] [rewrite:error] [pid 2753839:tid 2753839] [client 172.202.44.182:38840] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:01.137890 2026] [security2:error] [pid 2749505:tid 2749505] [client 43.166.128.86:49822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsb8Q7pxTHXcGIUvIQEWAAAAA0"], referer: http://jasperandtroy.co.uk
[Thu Jul 30 10:40:01.418699 2026] [ssl:error] [pid 2756320:tid 2756320] (EAI 2)Name or service not known: [client 144.76.19.72:57568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:01.418758 2026] [ssl:error] [pid 2756320:tid 2756320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:01.472268 2026] [ssl:error] [pid 2745129:tid 2745129] (EAI 2)Name or service not known: [client 144.76.19.72:57584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:01.472316 2026] [ssl:error] [pid 2745129:tid 2745129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:04.528480 2026] [ssl:error] [pid 2752687:tid 2752687] (EAI 2)Name or service not known: [client 144.76.19.72:57600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:04.528519 2026] [ssl:error] [pid 2752687:tid 2752687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:04.584108 2026] [ssl:error] [pid 2756317:tid 2756317] (EAI 2)Name or service not known: [client 144.76.19.72:57604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:04.584139 2026] [ssl:error] [pid 2756317:tid 2756317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:05.147760 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:40:05.147865 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:05.305746 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 10:40:05.305832 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:05.424988 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:40:05.425087 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:05.545100 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/2.php
[Thu Jul 30 10:40:05.545184 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:05.665954 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:40:05.666093 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:05.784961 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/mah.php
[Thu Jul 30 10:40:05.785043 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:05.938148 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/send.php
[Thu Jul 30 10:40:05.938257 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:06.003416 2026] [ssl:error] [pid 2753742:tid 2753742] (70014)End of file found: [client 216.73.216.199:58770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:06.105836 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:40:06.105929 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:06.247861 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 10:40:06.247949 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:06.413480 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/about.php
[Thu Jul 30 10:40:06.413564 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:06.559772 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/options.php
[Thu Jul 30 10:40:06.559860 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:06.679107 2026] [core:error] [pid 2749505:tid 2749505] (13)Permission denied: [client 216.73.216.199:6068] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/named.conf.zonedir.cache
[Thu Jul 30 10:40:06.679303 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 10:40:06.679402 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:06.809323 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-file.php
[Thu Jul 30 10:40:06.809411 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:06.866515 2026] [cgi:error] [pid 2745429:tid 2745429] [client 172.202.98.196:35080] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:40:06.943641 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/sid3.php
[Thu Jul 30 10:40:06.943728 2026] [rewrite:error] [pid 2753332:tid 2753332] [client 172.202.44.182:20621] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:40:07.073762 2026] [core:error] [pid 2753895:tid 2753895] (13)Permission denied: [client 216.73.216.199:7705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dquot/poison
[Thu Jul 30 10:40:07.374784 2026] [core:error] [pid 2753895:tid 2753895] (13)Permission denied: [client 216.73.216.199:7705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/alfservicesgroup.com.db
[Thu Jul 30 10:40:07.642926 2026] [ssl:error] [pid 2753957:tid 2753957] (EAI 2)Name or service not known: [client 144.76.19.72:57606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:07.642954 2026] [ssl:error] [pid 2753957:tid 2753957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:07.698872 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:57618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:07.698914 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:08.352958 2026] [security2:error] [pid 2753884:tid 2753884] [client 14.184.18.107:39999] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsb-HxK3n0cp7sGVFT_YgAAAEY"]
[Thu Jul 30 10:40:08.353006 2026] [security2:error] [pid 2753884:tid 2753884] [client 14.184.18.107:39999] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsb-HxK3n0cp7sGVFT_YgAAAEY"]
[Thu Jul 30 10:40:08.353294 2026] [security2:error] [pid 2753884:tid 2753884] [client 14.184.18.107:39999] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsb-HxK3n0cp7sGVFT_YgAAAEY"]
[Thu Jul 30 10:40:08.578455 2026] [security2:error] [pid 2753834:tid 2753834] [client 94.154.43.183:61840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.themezcouk.alism.com"] [uri "/.env"] [unique_id "amsb-I1Oj9mEQ-bOlHecVwAAADo"]
[Thu Jul 30 10:40:08.578661 2026] [security2:error] [pid 2753834:tid 2753834] [client 94.154.43.183:61840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.themezcouk.alism.com"] [uri "/.env"] [unique_id "amsb-I1Oj9mEQ-bOlHecVwAAADo"]
[Thu Jul 30 10:40:08.579087 2026] [security2:error] [pid 2753834:tid 2753834] [client 94.154.43.183:61840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.themezcouk.alism.com"] [uri "/.env"] [unique_id "amsb-I1Oj9mEQ-bOlHecVwAAADo"]
[Thu Jul 30 10:40:09.080528 2026] [security2:error] [pid 2753894:tid 2753894] [client 114.119.144.31:27973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/series/the-gospel-of-mark"] [unique_id "amsb-Sbj7vU8GNjb6RBQsQAAAFE"], referer: http://www.erskinenazarene.co.uk/preacher/pastor-chris-franklin
[Thu Jul 30 10:40:09.484571 2026] [core:error] [pid 2753895:tid 2753895] (13)Permission denied: [client 216.73.216.199:7705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/uevent
[Thu Jul 30 10:40:09.631112 2026] [cgi:error] [pid 2753957:tid 2753957] [client 74.114.151.67:62993] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/blog/
[Thu Jul 30 10:40:09.791372 2026] [ssl:error] [pid 2753895:tid 2753895] (70014)End of file found: [client 216.73.216.199:7705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:10.144687 2026] [lsapi:warn] [pid 2745129:tid 2745129] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:10.388764 2026] [ssl:error] [pid 2749505:tid 2749505] (70014)End of file found: [client 216.73.216.199:6068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:10.593858 2026] [lsapi:warn] [pid 2756319:tid 2756319] [client 87.201.112.222:58732] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:10.650804 2026] [security2:error] [pid 2750259:tid 2750259] [client 114.119.144.31:27987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/series/the-gospel-of-mark"] [unique_id "amsb-nlseJLi0Xe2FxcZ_wAAACo"], referer: http://www.erskinenazarene.co.uk/preacher/pastor-chris-franklin
[Thu Jul 30 10:40:10.754537 2026] [ssl:error] [pid 2751463:tid 2751463] (EAI 2)Name or service not known: [client 144.76.19.72:51842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:10.754572 2026] [ssl:error] [pid 2751463:tid 2751463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:10.810876 2026] [ssl:error] [pid 2753836:tid 2753836] (EAI 2)Name or service not known: [client 144.76.19.72:51850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:10.810908 2026] [ssl:error] [pid 2753836:tid 2753836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:11.418089 2026] [security2:error] [pid 2753881:tid 2753881] [client 191.37.148.200:46910] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsb-9XJG-6oml-4y9SbnQAAAEM"]
[Thu Jul 30 10:40:11.418144 2026] [security2:error] [pid 2753881:tid 2753881] [client 191.37.148.200:46910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsb-9XJG-6oml-4y9SbnQAAAEM"]
[Thu Jul 30 10:40:11.418413 2026] [security2:error] [pid 2753881:tid 2753881] [client 191.37.148.200:46910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsb-9XJG-6oml-4y9SbnQAAAEM"]
[Thu Jul 30 10:40:11.474751 2026] [ssl:error] [pid 2753884:tid 2753884] (70014)End of file found: [client 216.73.216.199:35687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:12.328208 2026] [security2:error] [pid 2752686:tid 2752686] [client 85.208.96.201:35226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.4185.html"] [unique_id "amsb_HDb8RHTElpUkolt8gAAABc"]
[Thu Jul 30 10:40:13.674752 2026] [authz_core:error] [pid 2753838:tid 2753838] [client 66.249.66.34:59545] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:40:13.677388 2026] [authz_core:error] [pid 2753838:tid 2753838] [client 66.249.66.34:59545] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:40:13.866541 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:51858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:13.866566 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:13.929509 2026] [ssl:error] [pid 2756319:tid 2756319] (EAI 2)Name or service not known: [client 144.76.19.72:51868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:13.929541 2026] [ssl:error] [pid 2756319:tid 2756319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:15.809785 2026] [core:error] [pid 2748522:tid 2748522] (13)Permission denied: [client 216.73.216.199:18988] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_defrag_ipv4/sections/__ksymtab_gpl
[Thu Jul 30 10:40:16.713537 2026] [core:error] [pid 2748522:tid 2748522] (13)Permission denied: [client 216.73.216.199:18988] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_reject_ipv4/sections/__mcount_loc
[Thu Jul 30 10:40:16.983666 2026] [ssl:error] [pid 2753895:tid 2753895] (EAI 2)Name or service not known: [client 144.76.19.72:51878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:16.983696 2026] [ssl:error] [pid 2753895:tid 2753895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:17.043522 2026] [ssl:error] [pid 2751464:tid 2751464] (EAI 2)Name or service not known: [client 144.76.19.72:51892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:17.043563 2026] [ssl:error] [pid 2751464:tid 2751464] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:17.616206 2026] [ssl:error] [pid 2748522:tid 2748522] (70014)End of file found: [client 216.73.216.199:18988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:17.778448 2026] [security2:error] [pid 2751420:tid 2751420] [client 122.183.45.192:29528] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscAdHlrqJHbkhGMYuBCwAAACA"]
[Thu Jul 30 10:40:17.778508 2026] [security2:error] [pid 2751420:tid 2751420] [client 122.183.45.192:29528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscAdHlrqJHbkhGMYuBCwAAACA"]
[Thu Jul 30 10:40:17.778787 2026] [security2:error] [pid 2751420:tid 2751420] [client 122.183.45.192:29528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscAdHlrqJHbkhGMYuBCwAAACA"]
[Thu Jul 30 10:40:18.828007 2026] [ssl:error] [pid 2753886:tid 2753886] (70014)End of file found: [client 216.73.216.199:11425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:20.098125 2026] [ssl:error] [pid 2753884:tid 2753884] (EAI 2)Name or service not known: [client 144.76.19.72:25856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:20.098166 2026] [ssl:error] [pid 2753884:tid 2753884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:20.153845 2026] [ssl:error] [pid 2753838:tid 2753838] (EAI 2)Name or service not known: [client 144.76.19.72:25860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:20.153880 2026] [ssl:error] [pid 2753838:tid 2753838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:20.644251 2026] [core:error] [pid 2753332:tid 2753332] (13)Permission denied: [client 216.73.216.199:28521] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS2/custom_divisor
[Thu Jul 30 10:40:20.897645 2026] [lsapi:warn] [pid 2743478:tid 2743478] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:21.465462 2026] [lsapi:warn] [pid 2753895:tid 2753895] [client 87.201.112.222:44927] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:23.209432 2026] [ssl:error] [pid 2753743:tid 2753743] (EAI 2)Name or service not known: [client 144.76.19.72:25862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:23.209520 2026] [ssl:error] [pid 2753743:tid 2753743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:23.245215 2026] [security2:error] [pid 2753896:tid 2753896] [client 94.154.43.229:61254] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wurlitzer.co.uk"] [uri "/.env"] [unique_id "amscByE3srcpKcwP6-UUMAAAAFM"]
[Thu Jul 30 10:40:23.245463 2026] [security2:error] [pid 2753896:tid 2753896] [client 94.154.43.229:61254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wurlitzer.co.uk"] [uri "/.env"] [unique_id "amscByE3srcpKcwP6-UUMAAAAFM"]
[Thu Jul 30 10:40:23.265688 2026] [ssl:error] [pid 2756318:tid 2756318] (EAI 2)Name or service not known: [client 144.76.19.72:25868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:23.265718 2026] [ssl:error] [pid 2756318:tid 2756318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:24.092333 2026] [security2:error] [pid 2753896:tid 2753896] [client 94.154.43.229:61254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wurlitzer.co.uk"] [uri "/index.php"] [unique_id "amscByE3srcpKcwP6-UUMAAAAFM"]
[Thu Jul 30 10:40:24.268266 2026] [security2:error] [pid 2753894:tid 2753894] [client 94.154.43.188:41510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wurlitzer.co.uk"] [uri "/.env"] [unique_id "amscCCbj7vU8GNjb6RBQtgAAAFE"]
[Thu Jul 30 10:40:24.268409 2026] [security2:error] [pid 2753894:tid 2753894] [client 94.154.43.188:41510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wurlitzer.co.uk"] [uri "/.env"] [unique_id "amscCCbj7vU8GNjb6RBQtgAAAFE"]
[Thu Jul 30 10:40:24.768103 2026] [security2:error] [pid 2753894:tid 2753894] [client 94.154.43.188:41510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wurlitzer.co.uk"] [uri "/index.php"] [unique_id "amscCCbj7vU8GNjb6RBQtgAAAFE"]
[Thu Jul 30 10:40:24.869253 2026] [core:error] [pid 2751463:tid 2751463] (13)Permission denied: [client 216.73.216.199:57414] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/trusted_mail_users
[Thu Jul 30 10:40:25.207127 2026] [core:crit] [pid 2751463:tid 2751463] (13)Permission denied: [client 216.73.216.199:57414] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/opt/alt/php-internal/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/opt/alt/php-internal/' is executable
[Thu Jul 30 10:40:25.772218 2026] [core:error] [pid 2751463:tid 2751463] (13)Permission denied: [client 216.73.216.199:57414] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-128/sanity_checks
[Thu Jul 30 10:40:25.789345 2026] [security2:error] [pid 2753790:tid 2753790] [client 43.157.158.178:56508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amscCYHhXEjumtrRQaL8NgAAADc"]
[Thu Jul 30 10:40:26.320810 2026] [ssl:error] [pid 2753997:tid 2753997] (EAI 2)Name or service not known: [client 144.76.19.72:25876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:26.320847 2026] [ssl:error] [pid 2753997:tid 2753997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:26.375923 2026] [ssl:error] [pid 2745129:tid 2745129] (EAI 2)Name or service not known: [client 144.76.19.72:25890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:26.375960 2026] [ssl:error] [pid 2745129:tid 2745129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:26.680208 2026] [ssl:error] [pid 2753332:tid 2753332] (70014)End of file found: [client 216.73.216.199:28521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:27.181724 2026] [security2:error] [pid 2753790:tid 2753790] [client 43.157.158.178:50718] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amscC4HhXEjumtrRQaL8NwAAADc"], referer: http://www.banskoexpress.com
[Thu Jul 30 10:40:27.578271 2026] [core:error] [pid 2751463:tid 2751463] (13)Permission denied: [client 216.73.216.199:57414] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip6-frags/objs_per_slab
[Thu Jul 30 10:40:29.429030 2026] [ssl:error] [pid 2749566:tid 2749566] (EAI 2)Name or service not known: [client 144.76.19.72:25900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:29.429062 2026] [ssl:error] [pid 2749566:tid 2749566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:29.484560 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:25912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:29.484605 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:30.890432 2026] [ssl:error] [pid 2751463:tid 2751463] (70014)End of file found: [client 216.73.216.199:57414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:31.604109 2026] [lsapi:warn] [pid 2753997:tid 2753997] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:31.669656 2026] [lsapi:warn] [pid 2749162:tid 2749162] [client 87.201.112.222:23228] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:32.396130 2026] [core:error] [pid 2753997:tid 2753997] (13)Permission denied: [client 216.73.216.199:40344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cui_item/slabs
[Thu Jul 30 10:40:33.134467 2026] [ssl:error] [pid 2757885:tid 2757885] (EAI 2)Name or service not known: [client 144.76.19.72:54024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:33.134523 2026] [ssl:error] [pid 2757885:tid 2757885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:33.817359 2026] [ssl:error] [pid 2748410:tid 2748410] (EAI 2)Name or service not known: [client 144.76.19.72:54028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:33.817389 2026] [ssl:error] [pid 2748410:tid 2748410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:34.504021 2026] [security2:error] [pid 2749566:tid 2749566] [client 216.73.216.199:54554] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/openldap/ldap.conf"] [unique_id "amscEqDk2URAMq01OtF6yAAAAA8"]
[Thu Jul 30 10:40:34.504269 2026] [security2:error] [pid 2749566:tid 2749566] [client 216.73.216.199:54554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/openldap/ldap.conf"] [unique_id "amscEqDk2URAMq01OtF6yAAAAA8"]
[Thu Jul 30 10:40:34.504471 2026] [security2:error] [pid 2749566:tid 2749566] [client 216.73.216.199:54554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/openldap/ldap.conf"] [unique_id "amscEqDk2URAMq01OtF6yAAAAA8"]
[Thu Jul 30 10:40:35.708671 2026] [core:error] [pid 2753997:tid 2753997] (13)Permission denied: [client 216.73.216.199:40344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS0/iomem_base
[Thu Jul 30 10:40:36.312908 2026] [core:error] [pid 2753997:tid 2753997] (13)Permission denied: [client 216.73.216.199:40344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_rmap_item/slabs
[Thu Jul 30 10:40:36.614648 2026] [core:error] [pid 2753997:tid 2753997] (13)Permission denied: [client 216.73.216.199:40344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/fabperformingarts.com.db
[Thu Jul 30 10:40:36.873764 2026] [ssl:error] [pid 2752653:tid 2752653] (EAI 2)Name or service not known: [client 144.76.19.72:54042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:36.873799 2026] [ssl:error] [pid 2752653:tid 2752653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:36.932014 2026] [ssl:error] [pid 2748410:tid 2748410] (EAI 2)Name or service not known: [client 144.76.19.72:54058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:36.932043 2026] [ssl:error] [pid 2748410:tid 2748410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:38.000108 2026] [core:error] [pid 2753997:tid 2753997] (13)Permission denied: [client 216.73.216.199:40344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/trace_event_file/destroy_by_rcu
[Thu Jul 30 10:40:38.300729 2026] [ssl:error] [pid 2753997:tid 2753997] (70014)End of file found: [client 216.73.216.199:40344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:38.602011 2026] [ssl:error] [pid 2749566:tid 2749566] (70014)End of file found: [client 216.73.216.199:54554] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:39.509433 2026] [core:error] [pid 2756318:tid 2756318] (13)Permission denied: [client 216.73.216.199:17811] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dquot/objs_per_slab
[Thu Jul 30 10:40:39.989204 2026] [ssl:error] [pid 2753332:tid 2753332] (EAI 2)Name or service not known: [client 144.76.19.72:47072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:39.989251 2026] [ssl:error] [pid 2753332:tid 2753332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:40.046372 2026] [ssl:error] [pid 2753838:tid 2753838] (EAI 2)Name or service not known: [client 144.76.19.72:47080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:40.046407 2026] [ssl:error] [pid 2753838:tid 2753838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:40.108983 2026] [security2:error] [pid 2757847:tid 2757847] [client 74.7.227.180:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shop.papier.com.mt"] [uri "/"] [unique_id "amscGGklpyEIeUdrVgIbXQAAAA4"]
[Thu Jul 30 10:40:40.111663 2026] [ssl:error] [pid 2756318:tid 2756318] (70014)End of file found: [client 216.73.216.199:17811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:41.981083 2026] [lsapi:warn] [pid 2757847:tid 2757847] [client 194.249.231.23:36294] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 10:40:41.981130 2026] [lsapi:warn] [pid 2757847:tid 2757847] [client 194.249.231.23:36294] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 10:40:42.133610 2026] [lsapi:warn] [pid 2737454:tid 2737454] [client 87.201.112.222:44896] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:42.487660 2026] [lsapi:warn] [pid 2745429:tid 2745429] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:43.101846 2026] [ssl:error] [pid 2751463:tid 2751463] (EAI 2)Name or service not known: [client 144.76.19.72:47090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:43.101876 2026] [ssl:error] [pid 2751463:tid 2751463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:43.157476 2026] [ssl:error] [pid 2753896:tid 2753896] (EAI 2)Name or service not known: [client 144.76.19.72:47096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:43.157499 2026] [ssl:error] [pid 2753896:tid 2753896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:44.324333 2026] [ssl:error] [pid 2751463:tid 2751463] (70014)End of file found: [client 216.73.216.199:18901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:45.940270 2026] [authz_core:error] [pid 2753896:tid 2753896] [client 66.249.66.35:63859] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:40:45.942980 2026] [authz_core:error] [pid 2753896:tid 2753896] [client 66.249.66.35:63859] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:40:46.213169 2026] [ssl:error] [pid 2753332:tid 2753332] (EAI 2)Name or service not known: [client 144.76.19.72:47110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:46.213201 2026] [ssl:error] [pid 2753332:tid 2753332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:46.266132 2026] [ssl:error] [pid 2756221:tid 2756221] (EAI 2)Name or service not known: [client 144.76.19.72:47122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:46.266167 2026] [ssl:error] [pid 2756221:tid 2756221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:47.645976 2026] [ssl:error] [pid 2749162:tid 2749162] (70014)End of file found: [client 216.73.216.199:65338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:47.943326 2026] [core:error] [pid 2745429:tid 2745429] (13)Permission denied: [client 216.73.216.199:36710] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bui_item/slabs
[Thu Jul 30 10:40:48.243761 2026] [security2:error] [pid 2745429:tid 2745429] [client 216.73.216.199:36710] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/nd_mysqli.ini"] [unique_id "amscIAhMTL-3vH1BUw5R0AAAAE0"]
[Thu Jul 30 10:40:48.243984 2026] [security2:error] [pid 2745429:tid 2745429] [client 216.73.216.199:36710] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/nd_mysqli.ini"] [unique_id "amscIAhMTL-3vH1BUw5R0AAAAE0"]
[Thu Jul 30 10:40:48.244204 2026] [security2:error] [pid 2745429:tid 2745429] [client 216.73.216.199:36710] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/nd_mysqli.ini"] [unique_id "amscIAhMTL-3vH1BUw5R0AAAAE0"]
[Thu Jul 30 10:40:49.321376 2026] [ssl:error] [pid 2737454:tid 2737454] (EAI 2)Name or service not known: [client 144.76.19.72:47136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:49.321406 2026] [ssl:error] [pid 2737454:tid 2737454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:49.374730 2026] [ssl:error] [pid 2753790:tid 2753790] (EAI 2)Name or service not known: [client 144.76.19.72:47150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:49.374758 2026] [ssl:error] [pid 2753790:tid 2753790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:52.160311 2026] [core:error] [pid 2745429:tid 2745429] (13)Permission denied: [client 216.73.216.199:36710] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/reclaim_account
[Thu Jul 30 10:40:52.431658 2026] [ssl:error] [pid 2751465:tid 2751465] (EAI 2)Name or service not known: [client 144.76.19.72:63668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:52.431698 2026] [ssl:error] [pid 2751465:tid 2751465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:52.488115 2026] [ssl:error] [pid 2751465:tid 2751465] (EAI 2)Name or service not known: [client 144.76.19.72:63678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:52.488146 2026] [ssl:error] [pid 2751465:tid 2751465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:53.225157 2026] [lsapi:warn] [pid 2753892:tid 2753892] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:53.276368 2026] [lsapi:warn] [pid 2756318:tid 2756318] [client 87.201.112.222:58691] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:40:53.966428 2026] [ssl:error] [pid 2745429:tid 2745429] (70014)End of file found: [client 216.73.216.199:36710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:54.397615 2026] [access_compat:error] [pid 2758627:tid 2758627] [client 20.206.204.219:62958] AH01797: client denied by server configuration: /home/prenicou/public_html/uploads/index.php, referer: binance.com
[Thu Jul 30 10:40:54.397707 2026] [access_compat:error] [pid 2758627:tid 2758627] [client 20.206.204.219:62958] AH01797: client denied by server configuration: /home/prenicou/public_html/uploads/index.php5, referer: binance.com
[Thu Jul 30 10:40:54.397754 2026] [access_compat:error] [pid 2758627:tid 2758627] [client 20.206.204.219:62958] AH01797: client denied by server configuration: /home/prenicou/public_html/uploads/index.pl, referer: binance.com
[Thu Jul 30 10:40:54.397819 2026] [access_compat:error] [pid 2758627:tid 2758627] [client 20.206.204.219:62958] AH01797: client denied by server configuration: /home/prenicou/public_html/uploads/index.cgi, referer: binance.com
[Thu Jul 30 10:40:54.397880 2026] [access_compat:error] [pid 2758627:tid 2758627] [client 20.206.204.219:62958] AH01797: client denied by server configuration: /home/prenicou/public_html/uploads/index.phtml, referer: binance.com
[Thu Jul 30 10:40:54.442979 2026] [security2:error] [pid 2753838:tid 2753838] [client 47.128.125.129:28298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amscJviqAPUuuG9ac35xxwAAAD8"]
[Thu Jul 30 10:40:54.961286 2026] [core:error] [pid 2758627:tid 2758627] [client 66.249.66.67:40190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:40:54.961317 2026] [core:error] [pid 2758627:tid 2758627] [client 66.249.66.67:40190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:40:55.878397 2026] [ssl:error] [pid 2753332:tid 2753332] (EAI 2)Name or service not known: [client 144.76.19.72:63690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:55.878431 2026] [ssl:error] [pid 2753332:tid 2753332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:55.929842 2026] [ssl:error] [pid 2753332:tid 2753332] (EAI 2)Name or service not known: [client 144.76.19.72:63698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:55.929867 2026] [ssl:error] [pid 2753332:tid 2753332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:56.100145 2026] [security2:error] [pid 2752654:tid 2752654] [client 85.208.96.196:19714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3758.0/prev_next,next.html"] [unique_id "amscKFCRBYoEdqrerSDCPQAAAAw"]
[Thu Jul 30 10:40:56.373793 2026] [ssl:error] [pid 2756318:tid 2756318] (70014)End of file found: [client 216.73.216.199:59417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:57.085231 2026] [security2:error] [pid 2750259:tid 2750259] [client 162.14.81.106:38936] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.annawelshagent.com"] [uri "/"] [unique_id "amscKXlseJLi0Xe2FxcaDAAAACo"]
[Thu Jul 30 10:40:57.168818 2026] [core:error] [pid 2751463:tid 2751463] [client 165.22.194.35:62865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:40:57.168846 2026] [core:error] [pid 2751463:tid 2751463] [client 165.22.194.35:62865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:40:57.219145 2026] [core:error] [pid 2749505:tid 2749505] [client 165.22.194.35:62866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:40:57.258975 2026] [core:error] [pid 2752654:tid 2752654] [client 165.22.194.35:62867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:40:57.259006 2026] [core:error] [pid 2752654:tid 2752654] [client 165.22.194.35:62867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:40:57.577425 2026] [ssl:error] [pid 2748520:tid 2748520] (70014)End of file found: [client 216.73.216.199:10031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:40:58.550312 2026] [security2:error] [pid 2752654:tid 2752654] [client 185.191.171.18:55510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/jack-and-emily-baby-ballroom"] [unique_id "amscKlCRBYoEdqrerSDCQgAAAAw"]
[Thu Jul 30 10:40:58.981623 2026] [ssl:error] [pid 2758789:tid 2758789] (EAI 2)Name or service not known: [client 144.76.19.72:63712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:58.981648 2026] [ssl:error] [pid 2758789:tid 2758789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:59.037603 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:63724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:40:59.037635 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:40:59.690559 2026] [core:error] [pid 2748410:tid 2748410] (13)Permission denied: [client 216.73.216.199:57249] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS0/iomem_reg_shift
[Thu Jul 30 10:41:02.107798 2026] [ssl:error] [pid 2752653:tid 2752653] (EAI 2)Name or service not known: [client 144.76.19.72:43130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:02.107837 2026] [ssl:error] [pid 2752653:tid 2752653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:02.163798 2026] [ssl:error] [pid 2756318:tid 2756318] (EAI 2)Name or service not known: [client 144.76.19.72:43142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:02.163827 2026] [ssl:error] [pid 2756318:tid 2756318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:03.289111 2026] [lsapi:warn] [pid 2758789:tid 2758789] [client 87.201.112.222:44888] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:03.372770 2026] [access_compat:error] [pid 2753517:tid 2753517] [client 20.206.204.219:64540] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.php, referer: binance.com
[Thu Jul 30 10:41:03.372859 2026] [access_compat:error] [pid 2753517:tid 2753517] [client 20.206.204.219:64540] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.php5, referer: binance.com
[Thu Jul 30 10:41:03.372904 2026] [access_compat:error] [pid 2753517:tid 2753517] [client 20.206.204.219:64540] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.pl, referer: binance.com
[Thu Jul 30 10:41:03.372967 2026] [access_compat:error] [pid 2753517:tid 2753517] [client 20.206.204.219:64540] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.cgi, referer: binance.com
[Thu Jul 30 10:41:03.373027 2026] [access_compat:error] [pid 2753517:tid 2753517] [client 20.206.204.219:64540] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.phtml, referer: binance.com
[Thu Jul 30 10:41:03.864227 2026] [lsapi:warn] [pid 2756318:tid 2756318] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:04.340889 2026] [security2:error] [pid 2756319:tid 2756319] [client 43.157.50.58:57066] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amscMHSzuHON6mXJ4L5IqgAAAAg"]
[Thu Jul 30 10:41:04.527677 2026] [ssl:error] [pid 2756320:tid 2756320] (70014)End of file found: [client 216.73.216.199:4844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:05.158220 2026] [access_compat:error] [pid 2758789:tid 2758789] [client 45.158.164.139:39348] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:41:05.220912 2026] [ssl:error] [pid 2753838:tid 2753838] (EAI 2)Name or service not known: [client 144.76.19.72:43148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:05.220944 2026] [ssl:error] [pid 2753838:tid 2753838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:05.278293 2026] [ssl:error] [pid 2753790:tid 2753790] (EAI 2)Name or service not known: [client 144.76.19.72:43150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:05.278328 2026] [ssl:error] [pid 2753790:tid 2753790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:05.288993 2026] [security2:error] [pid 2743478:tid 2743478] [client 43.157.50.58:59584] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amscMSWPqpcepsfxp3gBeQAAADw"], referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 10:41:05.290856 2026] [authz_core:error] [pid 2743478:tid 2743478] [client 43.157.50.58:59584] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 10:41:05.293488 2026] [authz_core:error] [pid 2743478:tid 2743478] [client 43.157.50.58:59584] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 10:41:05.593601 2026] [security2:error] [pid 2753883:tid 2753883] [client 43.167.213.95:25353] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscMT0XKOZ3aIhPosJ36wAAAEU"]
[Thu Jul 30 10:41:05.593650 2026] [security2:error] [pid 2753883:tid 2753883] [client 43.167.213.95:25353] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscMT0XKOZ3aIhPosJ36wAAAEU"]
[Thu Jul 30 10:41:05.593891 2026] [security2:error] [pid 2753883:tid 2753883] [client 43.167.213.95:25353] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscMT0XKOZ3aIhPosJ36wAAAEU"]
[Thu Jul 30 10:41:05.726482 2026] [security2:error] [pid 2753332:tid 2753332] [client 43.166.128.86:47288] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "amscMTUZu2lYKA36RxnEdwAAACU"], referer: http://taylorshouseconsulting.com
[Thu Jul 30 10:41:05.741100 2026] [cgi:error] [pid 2757886:tid 2757886] [client 172.202.98.196:53749] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:41:06.631303 2026] [ssl:error] [pid 2745129:tid 2745129] (70014)End of file found: [client 216.73.216.199:4176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:06.694212 2026] [security2:error] [pid 2745429:tid 2745429] [client 43.166.128.86:47694] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "amscMghMTL-3vH1BUw5R5wAAAE0"], referer: https://www.taylorshouse.com/home
[Thu Jul 30 10:41:07.422772 2026] [ssl:error] [pid 2748410:tid 2748410] (70014)End of file found: [client 216.73.216.199:57249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:08.318254 2026] [security2:error] [pid 2753836:tid 2753836] [client 8.216.34.159:32921] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscNJauR2nyDhQZFqa2BAAAAD0"]
[Thu Jul 30 10:41:08.318303 2026] [security2:error] [pid 2753836:tid 2753836] [client 8.216.34.159:32921] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscNJauR2nyDhQZFqa2BAAAAD0"]
[Thu Jul 30 10:41:08.318536 2026] [security2:error] [pid 2753836:tid 2753836] [client 8.216.34.159:32921] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscNJauR2nyDhQZFqa2BAAAAD0"]
[Thu Jul 30 10:41:08.335685 2026] [ssl:error] [pid 2756319:tid 2756319] (EAI 2)Name or service not known: [client 144.76.19.72:43166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:08.335711 2026] [ssl:error] [pid 2756319:tid 2756319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:08.389985 2026] [ssl:error] [pid 2758788:tid 2758788] (EAI 2)Name or service not known: [client 144.76.19.72:43178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:08.390010 2026] [ssl:error] [pid 2758788:tid 2758788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:08.642365 2026] [lsapi:warn] [pid 2753790:tid 2753790] [client 43.172.45.70:55801] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:41:08.642407 2026] [lsapi:warn] [pid 2753790:tid 2753790] [client 43.172.45.70:55801] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:41:09.268016 2026] [security2:error] [pid 2753883:tid 2753883] [client 43.166.128.86:48704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "amscNT0XKOZ3aIhPosJ37gAAAEU"], referer: https://www.taylorshouse.com/home/
[Thu Jul 30 10:41:10.437006 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:64251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:11.445473 2026] [ssl:error] [pid 2737454:tid 2737454] (EAI 2)Name or service not known: [client 144.76.19.72:20166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:11.445504 2026] [ssl:error] [pid 2737454:tid 2737454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:11.501201 2026] [ssl:error] [pid 2749162:tid 2749162] (EAI 2)Name or service not known: [client 144.76.19.72:20168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:11.501241 2026] [ssl:error] [pid 2749162:tid 2749162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:12.668288 2026] [security2:error] [pid 2748520:tid 2748520] [client 8.216.34.159:23873] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscOPjTKTlirLHoc8jt8wAAABs"]
[Thu Jul 30 10:41:12.668338 2026] [security2:error] [pid 2748520:tid 2748520] [client 8.216.34.159:23873] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscOPjTKTlirLHoc8jt8wAAABs"]
[Thu Jul 30 10:41:12.668557 2026] [security2:error] [pid 2748520:tid 2748520] [client 8.216.34.159:23873] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscOPjTKTlirLHoc8jt8wAAABs"]
[Thu Jul 30 10:41:13.455262 2026] [core:crit] [pid 2745129:tid 2745129] (13)Permission denied: [client 216.73.216.199:15217] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/json-stats/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/json-stats/' is executable
[Thu Jul 30 10:41:13.741475 2026] [lsapi:warn] [pid 2749162:tid 2749162] [client 87.201.112.222:23174] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:14.565894 2026] [ssl:error] [pid 2749566:tid 2749566] (EAI 2)Name or service not known: [client 144.76.19.72:20174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:14.565924 2026] [ssl:error] [pid 2749566:tid 2749566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:14.618806 2026] [ssl:error] [pid 2758789:tid 2758789] (EAI 2)Name or service not known: [client 144.76.19.72:20186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:14.618845 2026] [ssl:error] [pid 2758789:tid 2758789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:14.656336 2026] [lsapi:warn] [pid 2751464:tid 2751464] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:17.678729 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:20198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:17.678756 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:17.731657 2026] [ssl:error] [pid 2753886:tid 2753886] (EAI 2)Name or service not known: [client 144.76.19.72:20212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:17.731690 2026] [ssl:error] [pid 2753886:tid 2753886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:18.870175 2026] [ssl:error] [pid 2758627:tid 2758627] (70014)End of file found: [client 216.73.216.199:22968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:20.789055 2026] [ssl:error] [pid 2749505:tid 2749505] (EAI 2)Name or service not known: [client 144.76.19.72:51216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:20.789103 2026] [ssl:error] [pid 2749505:tid 2749505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:20.842256 2026] [ssl:error] [pid 2753332:tid 2753332] (EAI 2)Name or service not known: [client 144.76.19.72:51228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:20.842282 2026] [ssl:error] [pid 2753332:tid 2753332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:22.176736 2026] [ssl:error] [pid 2745129:tid 2745129] (70014)End of file found: [client 216.73.216.199:15217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:23.897443 2026] [ssl:error] [pid 2758790:tid 2758790] (EAI 2)Name or service not known: [client 144.76.19.72:51242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:23.897475 2026] [ssl:error] [pid 2758790:tid 2758790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:23.928150 2026] [core:error] [pid 2750259:tid 2750259] [client 66.249.66.168:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:23.928174 2026] [core:error] [pid 2750259:tid 2750259] [client 66.249.66.168:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:23.999815 2026] [ssl:error] [pid 2759602:tid 2759602] (EAI 2)Name or service not known: [client 144.76.19.72:51258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:23.999848 2026] [ssl:error] [pid 2759602:tid 2759602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:24.512443 2026] [lsapi:warn] [pid 2757847:tid 2757847] [client 87.201.112.222:44874] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:25.081236 2026] [core:error] [pid 2757886:tid 2757886] (13)Permission denied: [client 216.73.216.199:28222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/xfs/sections/_ftrace_events
[Thu Jul 30 10:41:25.502211 2026] [lsapi:warn] [pid 2756318:tid 2756318] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:25.789185 2026] [core:error] [pid 2753839:tid 2753839] (13)Permission denied: [client 216.73.216.199:12305] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nft_reject_ipv4/sections/__mcount_loc
[Thu Jul 30 10:41:26.692079 2026] [ssl:error] [pid 2757886:tid 2757886] (70014)End of file found: [client 216.73.216.199:28222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:27.055596 2026] [ssl:error] [pid 2753517:tid 2753517] (EAI 2)Name or service not known: [client 144.76.19.72:51272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:27.055636 2026] [ssl:error] [pid 2753517:tid 2753517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:27.110577 2026] [ssl:error] [pid 2749566:tid 2749566] (EAI 2)Name or service not known: [client 144.76.19.72:51284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:27.110621 2026] [ssl:error] [pid 2749566:tid 2749566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:27.346390 2026] [ssl:error] [pid 2758791:tid 2758791] [client 98.88.137.2:49163] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname loca.co.uk provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 10:41:30.040387 2026] [ssl:error] [pid 2753839:tid 2753839] (70014)End of file found: [client 216.73.216.199:12305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:30.162960 2026] [ssl:error] [pid 2758789:tid 2758789] (EAI 2)Name or service not known: [client 144.76.19.72:58454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:30.162998 2026] [ssl:error] [pid 2758789:tid 2758789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:30.214807 2026] [ssl:error] [pid 2753743:tid 2753743] (EAI 2)Name or service not known: [client 144.76.19.72:58470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:30.214860 2026] [ssl:error] [pid 2753743:tid 2753743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:30.643025 2026] [core:error] [pid 2753834:tid 2753834] (13)Permission denied: [client 216.73.216.199:25619] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-192/free_calls
[Thu Jul 30 10:41:33.014048 2026] [security2:error] [pid 2757886:tid 2757886] [client 114.119.155.144:62041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/series/i-am/"] [unique_id "amscTWd3gmeOV6O7U9gO-gAAABI"], referer: http://www.erskinenazarene.co.uk/sermons/i-am-the-light-of-the-world/
[Thu Jul 30 10:41:33.286557 2026] [ssl:error] [pid 2753884:tid 2753884] (EAI 2)Name or service not known: [client 144.76.19.72:58474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:33.286604 2026] [ssl:error] [pid 2753884:tid 2753884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:33.340750 2026] [ssl:error] [pid 2753883:tid 2753883] (EAI 2)Name or service not known: [client 144.76.19.72:58480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:33.340775 2026] [ssl:error] [pid 2753883:tid 2753883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:33.591103 2026] [core:error] [pid 2753883:tid 2753883] [client 66.249.66.67:52531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:33.591130 2026] [core:error] [pid 2753883:tid 2753883] [client 66.249.66.67:52531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:33.593829 2026] [core:error] [pid 2753332:tid 2753332] [client 66.249.66.168:46692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:33.593852 2026] [core:error] [pid 2753332:tid 2753332] [client 66.249.66.168:46692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:34.247693 2026] [ssl:error] [pid 2752654:tid 2752654] (70014)End of file found: [client 216.73.216.199:43382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:34.505968 2026] [security2:error] [pid 2737454:tid 2737454] [client 114.119.155.144:62053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/series/i-am/"] [unique_id "amscTrxIcbQj7_5SCitpuQAAAAk"], referer: http://www.erskinenazarene.co.uk/sermons/i-am-the-light-of-the-world/
[Thu Jul 30 10:41:34.548782 2026] [ssl:error] [pid 2758791:tid 2758791] (70014)End of file found: [client 216.73.216.199:56879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:35.832394 2026] [lsapi:warn] [pid 2759652:tid 2759652] [client 87.201.112.222:44880] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:36.116276 2026] [lsapi:warn] [pid 2753332:tid 2753332] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:36.396602 2026] [ssl:error] [pid 2758788:tid 2758788] (EAI 2)Name or service not known: [client 144.76.19.72:58482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:36.396652 2026] [ssl:error] [pid 2758788:tid 2758788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:36.449494 2026] [ssl:error] [pid 2760488:tid 2760488] (EAI 2)Name or service not known: [client 144.76.19.72:58490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:36.449533 2026] [ssl:error] [pid 2760488:tid 2760488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:39.332217 2026] [authz_core:error] [pid 2753838:tid 2753838] [client 66.249.66.34:46593] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:41:39.334893 2026] [authz_core:error] [pid 2753838:tid 2753838] [client 66.249.66.34:46593] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:41:39.502934 2026] [ssl:error] [pid 2749566:tid 2749566] (EAI 2)Name or service not known: [client 144.76.19.72:58506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:39.502969 2026] [ssl:error] [pid 2749566:tid 2749566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:39.556097 2026] [ssl:error] [pid 2745429:tid 2745429] (EAI 2)Name or service not known: [client 144.76.19.72:32812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:39.556131 2026] [ssl:error] [pid 2745429:tid 2745429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:40.584495 2026] [ssl:error] [pid 2753892:tid 2753892] (70014)End of file found: [client 216.73.216.199:8459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:41.364954 2026] [ssl:error] [pid 2758791:tid 2758791] (70014)End of file found: [client 216.73.216.199:10395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:42.615807 2026] [ssl:error] [pid 2753003:tid 2753003] (EAI 2)Name or service not known: [client 144.76.19.72:32822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:42.615855 2026] [ssl:error] [pid 2753003:tid 2753003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:42.673261 2026] [ssl:error] [pid 2753883:tid 2753883] (EAI 2)Name or service not known: [client 144.76.19.72:32834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:42.673296 2026] [ssl:error] [pid 2753883:tid 2753883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:43.678295 2026] [security2:error] [pid 2753003:tid 2753003] [client 114.119.159.123:31567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/wp-content/uploads/2021/04/UKSF27-3-USAID-BHA-Updates-Chuck-Setchell.pdf&sa=U"] [unique_id "amscV-uMdPuSPdvp4mRsDwAAAAM"], referer: https://anarim.az/img/search.php?newwindow=1&hl=ru&q=bha%2Bemergency%2Bapplication%2Bguidelines
[Thu Jul 30 10:41:45.727116 2026] [ssl:error] [pid 2760786:tid 2760786] (EAI 2)Name or service not known: [client 144.76.19.72:32842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:45.727145 2026] [ssl:error] [pid 2760786:tid 2760786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:45.783452 2026] [ssl:error] [pid 2743478:tid 2743478] (EAI 2)Name or service not known: [client 144.76.19.72:32856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:45.783482 2026] [ssl:error] [pid 2743478:tid 2743478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:46.021820 2026] [autoindex:error] [pid 2750259:tid 2750259] (13)Permission denied: [client 216.73.216.199:39819] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/theislip/
[Thu Jul 30 10:41:46.178108 2026] [lsapi:warn] [pid 2753003:tid 2753003] [client 87.201.112.222:44886] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:46.368986 2026] [cgi:error] [pid 2760488:tid 2760488] [client 161.248.241.132:38784] AH02812: stderr from /home/ppclcom/parallelcoordinates.net/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:41:46.699130 2026] [lsapi:warn] [pid 2756318:tid 2756318] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:46.840507 2026] [security2:error] [pid 2753997:tid 2753997] [client 101.32.15.141:57934] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amscWtXzpqhLDUvaBOb5QAAAAAQ"]
[Thu Jul 30 10:41:47.818908 2026] [core:error] [pid 2751420:tid 2751420] [client 66.249.66.167:36780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:47.818932 2026] [core:error] [pid 2751420:tid 2751420] [client 66.249.66.167:36780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:41:48.728660 2026] [core:error] [pid 2750259:tid 2750259] (13)Permission denied: [client 216.73.216.199:39819] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/destroy_by_rcu
[Thu Jul 30 10:41:48.839776 2026] [ssl:error] [pid 2753003:tid 2753003] (EAI 2)Name or service not known: [client 144.76.19.72:32866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:48.839824 2026] [ssl:error] [pid 2753003:tid 2753003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:48.893156 2026] [ssl:error] [pid 2749566:tid 2749566] (EAI 2)Name or service not known: [client 144.76.19.72:32878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:48.893181 2026] [ssl:error] [pid 2749566:tid 2749566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:49.218625 2026] [security2:error] [pid 2760488:tid 2760488] [client 1.14.110.85:41648] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "borovetsexpress.com"] [uri "/"] [unique_id "amscXQeraKI3uy5r5-eZjgAAAAs"]
[Thu Jul 30 10:41:49.345912 2026] [security2:error] [pid 2758789:tid 2758789] [client 101.32.15.141:42986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amscXfjgS7nODD5x-cYU5gAAABw"], referer: http://blow-hairstudio.co.uk
[Thu Jul 30 10:41:49.933441 2026] [authz_core:error] [pid 2750259:tid 2750259] [client 216.73.216.199:39819] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 10:41:51.437896 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:39819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:41:51.946460 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:41702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:51.946506 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:52.000111 2026] [ssl:error] [pid 2737454:tid 2737454] (EAI 2)Name or service not known: [client 144.76.19.72:41712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:52.000147 2026] [ssl:error] [pid 2737454:tid 2737454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:52.638571 2026] [core:error] [pid 2756318:tid 2756318] (13)Permission denied: [client 216.73.216.199:29378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/printmycontent.com.db
[Thu Jul 30 10:41:54.443929 2026] [core:error] [pid 2756318:tid 2756318] (13)Permission denied: [client 216.73.216.199:29378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/line
[Thu Jul 30 10:41:55.058274 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:41726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:55.058308 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:55.086274 2026] [security2:error] [pid 2758791:tid 2758791] [client 1.14.110.85:34280] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amscYy5lvEXYTYElQXYjpwAAAB4"], referer: http://borovetsexpress.com
[Thu Jul 30 10:41:55.109837 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:41730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:55.109862 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:55.473310 2026] [cgi:error] [pid 2743478:tid 2743478] [client 66.132.186.194:9348] AH02812: stderr from /home/uukkeqwo/officedev.refraction.co.uk/cgi-bin/: attempt to invoke directory as script, referer: https://www.officedev.refraction.co.uk:443/cgi-bin
[Thu Jul 30 10:41:56.632807 2026] [authz_core:error] [pid 2759255:tid 2759255] [client 66.249.66.33:47110] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:41:56.635494 2026] [authz_core:error] [pid 2759255:tid 2759255] [client 66.249.66.33:47110] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:41:57.349622 2026] [lsapi:warn] [pid 2758791:tid 2758791] [client 87.201.112.222:58737] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:57.636861 2026] [lsapi:warn] [pid 2761282:tid 2761282] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:41:58.161803 2026] [ssl:error] [pid 2761284:tid 2761284] (EAI 2)Name or service not known: [client 144.76.19.72:41732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:58.161830 2026] [ssl:error] [pid 2761284:tid 2761284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:58.215637 2026] [ssl:error] [pid 2752654:tid 2752654] (EAI 2)Name or service not known: [client 144.76.19.72:41740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:41:58.215658 2026] [ssl:error] [pid 2752654:tid 2752654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:41:58.947376 2026] [security2:error] [pid 2760829:tid 2760829] [client 85.208.96.210:11190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.3945.html"] [unique_id "amscZq3ZDyUq1GIOv8IyuAAAABI"]
[Thu Jul 30 10:41:58.972261 2026] [security2:error] [pid 2761284:tid 2761284] [client 185.191.171.5:62248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/1972-villanova-football-roster"] [unique_id "amscZnPWWAg_wCVD3qiC0gAAABg"]
[Thu Jul 30 10:42:00.249840 2026] [security2:error] [pid 2753886:tid 2753886] [client 122.51.236.174:51464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mgarrmushrooms.com"] [uri "/"] [unique_id "amscaHLfYzwHbWFD3h5-_gAAAEg"]
[Thu Jul 30 10:42:01.283284 2026] [ssl:error] [pid 2759651:tid 2759651] (EAI 2)Name or service not known: [client 144.76.19.72:48114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:01.283320 2026] [ssl:error] [pid 2759651:tid 2759651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:01.336862 2026] [ssl:error] [pid 2753790:tid 2753790] (EAI 2)Name or service not known: [client 144.76.19.72:48124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:01.336896 2026] [ssl:error] [pid 2753790:tid 2753790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:02.057344 2026] [ssl:error] [pid 2761244:tid 2761244] (70014)End of file found: [client 216.73.216.199:53780] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:02.353473 2026] [ssl:error] [pid 2756318:tid 2756318] (70014)End of file found: [client 216.73.216.199:29378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:02.856472 2026] [ssl:error] [pid 2756319:tid 2756319] (70014)End of file found: [client 216.73.216.199:36067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:03.373820 2026] [security2:error] [pid 2759602:tid 2759602] [client 100.11.236.33:54713] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsca_ZJrjK1bSi0-4URBgAAAB8"]
[Thu Jul 30 10:42:03.373867 2026] [security2:error] [pid 2759602:tid 2759602] [client 100.11.236.33:54713] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsca_ZJrjK1bSi0-4URBgAAAB8"]
[Thu Jul 30 10:42:03.374136 2026] [security2:error] [pid 2759602:tid 2759602] [client 100.11.236.33:54713] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsca_ZJrjK1bSi0-4URBgAAAB8"]
[Thu Jul 30 10:42:04.407404 2026] [ssl:error] [pid 2753790:tid 2753790] (EAI 2)Name or service not known: [client 144.76.19.72:48134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:04.407440 2026] [ssl:error] [pid 2753790:tid 2753790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:04.463249 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:48146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:04.463275 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:07.221631 2026] [security2:error] [pid 2753892:tid 2753892] [client 103.181.153.95:50168] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscb3vgrJRkr3Rt_Vp5rAAAAE8"]
[Thu Jul 30 10:42:07.221698 2026] [security2:error] [pid 2753892:tid 2753892] [client 103.181.153.95:50168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscb3vgrJRkr3Rt_Vp5rAAAAE8"]
[Thu Jul 30 10:42:07.221970 2026] [security2:error] [pid 2753892:tid 2753892] [client 103.181.153.95:50168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscb3vgrJRkr3Rt_Vp5rAAAAE8"]
[Thu Jul 30 10:42:07.374495 2026] [ssl:error] [pid 2753886:tid 2753886] (70014)End of file found: [client 216.73.216.199:9955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:07.520236 2026] [ssl:error] [pid 2761244:tid 2761244] (EAI 2)Name or service not known: [client 144.76.19.72:48156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:07.520287 2026] [ssl:error] [pid 2761244:tid 2761244] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:07.575031 2026] [ssl:error] [pid 2761282:tid 2761282] (EAI 2)Name or service not known: [client 144.76.19.72:48158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:07.575093 2026] [ssl:error] [pid 2761282:tid 2761282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:07.987293 2026] [lsapi:warn] [pid 2756221:tid 2756221] [client 87.201.112.222:44894] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:08.296934 2026] [lsapi:warn] [pid 2756318:tid 2756318] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:09.283672 2026] [ssl:error] [pid 2760488:tid 2760488] (70014)End of file found: [client 216.73.216.199:4662] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:10.488438 2026] [core:error] [pid 2752653:tid 2752653] (13)Permission denied: [client 216.73.216.199:61773] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/sanity_checks
[Thu Jul 30 10:42:10.634284 2026] [ssl:error] [pid 2756318:tid 2756318] (EAI 2)Name or service not known: [client 144.76.19.72:62460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:10.634306 2026] [ssl:error] [pid 2756318:tid 2756318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:10.690246 2026] [ssl:error] [pid 2753834:tid 2753834] (EAI 2)Name or service not known: [client 144.76.19.72:62470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:10.690272 2026] [ssl:error] [pid 2753834:tid 2753834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:11.544802 2026] [security2:error] [pid 2753834:tid 2753834] [client 103.109.238.116:57704] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscc41Oj9mEQ-bOlHechwAAADo"]
[Thu Jul 30 10:42:11.544872 2026] [security2:error] [pid 2753834:tid 2753834] [client 103.109.238.116:57704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscc41Oj9mEQ-bOlHechwAAADo"]
[Thu Jul 30 10:42:11.545152 2026] [security2:error] [pid 2753834:tid 2753834] [client 103.109.238.116:57704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscc41Oj9mEQ-bOlHechwAAADo"]
[Thu Jul 30 10:42:12.295061 2026] [ssl:error] [pid 2752653:tid 2752653] (70014)End of file found: [client 216.73.216.199:61773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:13.743971 2026] [ssl:error] [pid 2757638:tid 2757638] (EAI 2)Name or service not known: [client 144.76.19.72:62472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:13.744010 2026] [ssl:error] [pid 2757638:tid 2757638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:13.795935 2026] [ssl:error] [pid 2753834:tid 2753834] (EAI 2)Name or service not known: [client 144.76.19.72:62480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:13.795971 2026] [ssl:error] [pid 2753834:tid 2753834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:14.816719 2026] [core:error] [pid 2757638:tid 2757638] [client 66.249.66.8:56831] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:42:14.816746 2026] [core:error] [pid 2757638:tid 2757638] [client 66.249.66.8:56831] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:42:15.372712 2026] [security2:error] [pid 2758791:tid 2758791] [client 185.191.171.15:18254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "akoptimize.co.uk"] [uri "/robots.txt"] [unique_id "amscdy5lvEXYTYElQXYjrgAAAB4"]
[Thu Jul 30 10:42:15.791179 2026] [security2:error] [pid 2753790:tid 2753790] [client 85.208.96.203:22192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amscd4HhXEjumtrRQaL8aQAAADc"]
[Thu Jul 30 10:42:16.852482 2026] [ssl:error] [pid 2753838:tid 2753838] (EAI 2)Name or service not known: [client 144.76.19.72:62494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:16.852515 2026] [ssl:error] [pid 2753838:tid 2753838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:16.908635 2026] [ssl:error] [pid 2753883:tid 2753883] (EAI 2)Name or service not known: [client 144.76.19.72:62500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:16.908667 2026] [ssl:error] [pid 2753883:tid 2753883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:18.141528 2026] [lsapi:warn] [pid 2753884:tid 2753884] [client 87.201.112.222:58745] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:18.272755 2026] [core:error] [pid 2749566:tid 2749566] [client 66.249.66.167:39467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:42:18.272778 2026] [core:error] [pid 2749566:tid 2749566] [client 66.249.66.167:39467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:42:18.922282 2026] [ssl:error] [pid 2743478:tid 2743478] (70014)End of file found: [client 216.73.216.199:33216] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:19.071523 2026] [lsapi:warn] [pid 2745429:tid 2745429] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:19.219249 2026] [ssl:error] [pid 2753997:tid 2753997] (70014)End of file found: [client 216.73.216.199:39592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:20.521756 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:29530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:20.521787 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:20.575032 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:29542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:20.575056 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:23.336506 2026] [access_compat:error] [pid 2750259:tid 2750259] [client 213.239.225.116:54177] AH01797: client denied by server configuration: /home/nspandor/public_html/robots.txt
[Thu Jul 30 10:42:23.414720 2026] [access_compat:error] [pid 2750259:tid 2750259] [client 213.239.225.116:54177] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:42:23.442681 2026] [ssl:error] [pid 2762295:tid 2762295] (5)Input/output error: [client 216.73.216.199:29710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:23.634514 2026] [ssl:error] [pid 2762338:tid 2762338] (EAI 2)Name or service not known: [client 144.76.19.72:29554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:23.634549 2026] [ssl:error] [pid 2762338:tid 2762338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:23.708859 2026] [ssl:error] [pid 2756319:tid 2756319] (EAI 2)Name or service not known: [client 144.76.19.72:29562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:23.708885 2026] [ssl:error] [pid 2756319:tid 2756319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:24.802520 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 10:42:25.041440 2026] [security2:error] [pid 2761284:tid 2761284] [client 85.208.96.206:47560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3128.0.html"] [unique_id "amscgXPWWAg_wCVD3qiC3AAAABg"]
[Thu Jul 30 10:42:25.197526 2026] [access_compat:error] [pid 2750259:tid 2750259] [client 213.239.225.116:54177] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:42:25.252240 2026] [access_compat:error] [pid 2757638:tid 2757638] [client 45.158.164.139:52978] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:42:25.968746 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 10:42:26.163868 2026] [ssl:error] [pid 2756319:tid 2756319] (70014)End of file found: [client 216.73.216.199:52944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:26.354681 2026] [security2:error] [pid 2760829:tid 2760829] [client 94.154.43.177:26086] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "oliviamarjorie.com"] [uri "/.env"] [unique_id "amscgq3ZDyUq1GIOv8IyxgAAABI"]
[Thu Jul 30 10:42:26.354867 2026] [security2:error] [pid 2760829:tid 2760829] [client 94.154.43.177:26086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "oliviamarjorie.com"] [uri "/.env"] [unique_id "amscgq3ZDyUq1GIOv8IyxgAAABI"]
[Thu Jul 30 10:42:26.355096 2026] [security2:error] [pid 2760829:tid 2760829] [client 94.154.43.177:26086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "oliviamarjorie.com"] [uri "/.env"] [unique_id "amscgq3ZDyUq1GIOv8IyxgAAABI"]
[Thu Jul 30 10:42:26.567981 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/system_log.php
[Thu Jul 30 10:42:26.573518 2026] [security2:error] [pid 2759651:tid 2759651] [client 94.154.43.229:53844] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "oliviamarjorie.com.ditchfest.com"] [uri "/.env"] [unique_id "amscgttrCph62y94oBCVZwAAACE"]
[Thu Jul 30 10:42:26.573722 2026] [security2:error] [pid 2759651:tid 2759651] [client 94.154.43.229:53844] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "oliviamarjorie.com.ditchfest.com"] [uri "/.env"] [unique_id "amscgttrCph62y94oBCVZwAAACE"]
[Thu Jul 30 10:42:26.573932 2026] [security2:error] [pid 2759651:tid 2759651] [client 94.154.43.229:53844] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "oliviamarjorie.com.ditchfest.com"] [uri "/.env"] [unique_id "amscgttrCph62y94oBCVZwAAACE"]
[Thu Jul 30 10:42:26.761806 2026] [ssl:error] [pid 2762339:tid 2762339] (EAI 2)Name or service not known: [client 144.76.19.72:29578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:26.761832 2026] [ssl:error] [pid 2762339:tid 2762339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:26.814168 2026] [ssl:error] [pid 2753892:tid 2753892] (EAI 2)Name or service not known: [client 144.76.19.72:29590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:26.814201 2026] [ssl:error] [pid 2753892:tid 2753892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:27.213511 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/x.php
[Thu Jul 30 10:42:27.813792 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/autoload_classmap.php
[Thu Jul 30 10:42:28.265055 2026] [ssl:error] [pid 2762297:tid 2762297] (70014)End of file found: [client 216.73.216.199:45114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:28.419639 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/hosty.php
[Thu Jul 30 10:42:28.769286 2026] [ssl:error] [pid 2757638:tid 2757638] (70014)End of file found: [client 216.73.216.199:61984] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:29.022443 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/test1.php
[Thu Jul 30 10:42:29.139468 2026] [lsapi:warn] [pid 2759651:tid 2759651] [client 87.201.112.222:44912] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:29.628610 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/zwso.php
[Thu Jul 30 10:42:29.867746 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:36506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:29.867785 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:29.925502 2026] [ssl:error] [pid 2753892:tid 2753892] (EAI 2)Name or service not known: [client 144.76.19.72:36510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:29.925527 2026] [ssl:error] [pid 2753892:tid 2753892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:30.118496 2026] [lsapi:warn] [pid 2753836:tid 2753836] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:30.208377 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/fpwch.php
[Thu Jul 30 10:42:31.307083 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blog-header.php
[Thu Jul 30 10:42:32.996089 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:36532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:32.996128 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:32.999915 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-signin.php
[Thu Jul 30 10:42:33.049353 2026] [ssl:error] [pid 2759652:tid 2759652] (EAI 2)Name or service not known: [client 144.76.19.72:36540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:33.049389 2026] [ssl:error] [pid 2759652:tid 2759652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:33.536758 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/f35.php
[Thu Jul 30 10:42:34.105322 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/gg.php
[Thu Jul 30 10:42:34.392933 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:15862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:34.487047 2026] [ssl:error] [pid 2758791:tid 2758791] (70014)End of file found: [client 216.73.216.199:9986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:34.663647 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/class.php
[Thu Jul 30 10:42:34.989674 2026] [ssl:error] [pid 2762340:tid 2762340] (70014)End of file found: [client 216.73.216.199:64493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:35.230347 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/flower.php
[Thu Jul 30 10:42:35.840140 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/motu.php
[Thu Jul 30 10:42:36.104745 2026] [ssl:error] [pid 2762339:tid 2762339] (EAI 2)Name or service not known: [client 144.76.19.72:36554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:36.104775 2026] [ssl:error] [pid 2762339:tid 2762339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:36.156417 2026] [ssl:error] [pid 2753838:tid 2753838] (EAI 2)Name or service not known: [client 144.76.19.72:36562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:36.156448 2026] [ssl:error] [pid 2753838:tid 2753838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:36.463757 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 10:42:36.587716 2026] [lsapi:warn] [pid 2759602:tid 2759602] [client 89.197.16.98:46945] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:42:36.587755 2026] [lsapi:warn] [pid 2759602:tid 2759602] [client 89.197.16.98:46945] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:42:37.014800 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/lite.php
[Thu Jul 30 10:42:37.610345 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/lock360.php
[Thu Jul 30 10:42:38.244673 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/wp-conflg.php
[Thu Jul 30 10:42:38.672315 2026] [authz_core:error] [pid 2762336:tid 2762336] [client 212.34.128.179:63512] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 10:42:38.674988 2026] [authz_core:error] [pid 2762336:tid 2762336] [client 212.34.128.179:63512] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 10:42:38.689710 2026] [authz_core:error] [pid 2763319:tid 2763319] [client 212.34.128.179:63517] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 10:42:38.692359 2026] [authz_core:error] [pid 2763319:tid 2763319] [client 212.34.128.179:63517] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 10:42:38.827115 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-links-opml.php
[Thu Jul 30 10:42:39.176233 2026] [lsapi:warn] [pid 2763242:tid 2763242] [client 87.201.112.222:44877] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:39.212444 2026] [ssl:error] [pid 2762297:tid 2762297] (EAI 2)Name or service not known: [client 144.76.19.72:36572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:39.212476 2026] [ssl:error] [pid 2762297:tid 2762297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:39.271774 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:36582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:39.271799 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:39.403298 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/.alf.php
[Thu Jul 30 10:42:39.921908 2026] [ssl:error] [pid 2763318:tid 2763318] (70014)End of file found: [client 216.73.216.199:10316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:39.948515 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/ws.php
[Thu Jul 30 10:42:40.409732 2026] [ssl:error] [pid 2762340:tid 2762340] (70014)End of file found: [client 216.73.216.199:4259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:40.714528 2026] [core:error] [pid 2753834:tid 2753834] (13)Permission denied: [client 216.73.216.199:22993] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/trace
[Thu Jul 30 10:42:40.956544 2026] [lsapi:warn] [pid 2753836:tid 2753836] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:41.114032 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/ioxi-o.php
[Thu Jul 30 10:42:41.667618 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/ws54.php
[Thu Jul 30 10:42:42.045088 2026] [security2:error] [pid 2753834:tid 2753834] [client 216.73.216.199:22993] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/home.conf"] [unique_id "amscko1Oj9mEQ-bOlHecmQAAADo"]
[Thu Jul 30 10:42:42.045319 2026] [security2:error] [pid 2753834:tid 2753834] [client 216.73.216.199:22993] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/home.conf"] [unique_id "amscko1Oj9mEQ-bOlHecmQAAADo"]
[Thu Jul 30 10:42:42.045519 2026] [security2:error] [pid 2753834:tid 2753834] [client 216.73.216.199:22993] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/home.conf"] [unique_id "amscko1Oj9mEQ-bOlHecmQAAADo"]
[Thu Jul 30 10:42:42.245115 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/155.php
[Thu Jul 30 10:42:42.371449 2026] [ssl:error] [pid 2745061:tid 2745061] (EAI 2)Name or service not known: [client 144.76.19.72:47056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:42.371475 2026] [ssl:error] [pid 2745061:tid 2745061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:42.424602 2026] [ssl:error] [pid 2759651:tid 2759651] (EAI 2)Name or service not known: [client 144.76.19.72:47068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:42.424634 2026] [ssl:error] [pid 2759651:tid 2759651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:42.799565 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/min.php
[Thu Jul 30 10:42:42.811607 2026] [security2:error] [pid 2753886:tid 2753886] [client 81.8.91.201:46960] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.shelterforum.info"] [uri "/xmlrpc.php"] [unique_id "amscknLfYzwHbWFD3h5_DgAAAEg"]
[Thu Jul 30 10:42:43.406909 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 10:42:43.937890 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/tinyfilemanager.php
[Thu Jul 30 10:42:44.587158 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/hplfuns.php
[Thu Jul 30 10:42:45.145230 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/bthil.php
[Thu Jul 30 10:42:45.604311 2026] [ssl:error] [pid 2763839:tid 2763839] (EAI 2)Name or service not known: [client 144.76.19.72:47072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:45.604360 2026] [ssl:error] [pid 2763839:tid 2763839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:45.659695 2026] [ssl:error] [pid 2763842:tid 2763842] (EAI 2)Name or service not known: [client 144.76.19.72:47078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:45.659735 2026] [ssl:error] [pid 2763842:tid 2763842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:45.693678 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/cv.php
[Thu Jul 30 10:42:46.301569 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/sf.php
[Thu Jul 30 10:42:46.856871 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content.php
[Thu Jul 30 10:42:47.069062 2026] [security2:error] [pid 2753839:tid 2753839] [client 170.106.15.3:49740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-pass.php"] [unique_id "amsclxo6rOAmibQLFVoEzgAAAEA"]
[Thu Jul 30 10:42:47.707135 2026] [core:error] [pid 2763896:tid 2763896] [client 66.249.64.170:49423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:42:47.707177 2026] [core:error] [pid 2763896:tid 2763896] [client 66.249.64.170:49423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:42:47.983813 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/txets.php
[Thu Jul 30 10:42:48.729144 2026] [ssl:error] [pid 2762340:tid 2762340] (EAI 2)Name or service not known: [client 144.76.19.72:47088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:48.729182 2026] [ssl:error] [pid 2762340:tid 2762340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:48.784490 2026] [ssl:error] [pid 2760435:tid 2760435] (EAI 2)Name or service not known: [client 144.76.19.72:47090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:48.784527 2026] [ssl:error] [pid 2760435:tid 2760435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:49.287886 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 10:42:49.816831 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/new.php
[Thu Jul 30 10:42:50.901751 2026] [lsapi:warn] [pid 2753790:tid 2753790] [client 87.201.112.222:58730] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:51.603632 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 10:42:51.744244 2026] [lsapi:warn] [pid 2762340:tid 2762340] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:42:51.840996 2026] [ssl:error] [pid 2763898:tid 2763898] (EAI 2)Name or service not known: [client 144.76.19.72:62848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:51.841047 2026] [ssl:error] [pid 2763898:tid 2763898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:51.895516 2026] [ssl:error] [pid 2760786:tid 2760786] (EAI 2)Name or service not known: [client 144.76.19.72:62856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:51.895550 2026] [ssl:error] [pid 2760786:tid 2760786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:52.154356 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/error.php
[Thu Jul 30 10:42:52.725804 2026] [access_compat:error] [pid 2743478:tid 2743478] [client 172.202.95.21:34363] AH01797: client denied by server configuration: /home/thepryor/public_html/a7.php
[Thu Jul 30 10:42:54.108198 2026] [security2:error] [pid 2760435:tid 2760435] [client 57.129.81.225:47808] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscntGJoOi8OsJM8CEy4wAAAAU"]
[Thu Jul 30 10:42:54.108261 2026] [security2:error] [pid 2760435:tid 2760435] [client 57.129.81.225:47808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscntGJoOi8OsJM8CEy4wAAAAU"]
[Thu Jul 30 10:42:54.108639 2026] [security2:error] [pid 2760435:tid 2760435] [client 57.129.81.225:47808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscntGJoOi8OsJM8CEy4wAAAAU"]
[Thu Jul 30 10:42:54.232773 2026] [security2:error] [pid 2745061:tid 2745061] [client 57.129.139.88:35034] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscnvIcsl6IXhCARLCd-QAAABA"]
[Thu Jul 30 10:42:54.232824 2026] [security2:error] [pid 2745061:tid 2745061] [client 57.129.139.88:35034] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscnvIcsl6IXhCARLCd-QAAABA"]
[Thu Jul 30 10:42:54.233108 2026] [security2:error] [pid 2745061:tid 2745061] [client 57.129.139.88:35034] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscnvIcsl6IXhCARLCd-QAAABA"]
[Thu Jul 30 10:42:54.953125 2026] [ssl:error] [pid 2757638:tid 2757638] (EAI 2)Name or service not known: [client 144.76.19.72:62872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:54.953157 2026] [ssl:error] [pid 2757638:tid 2757638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:55.009529 2026] [ssl:error] [pid 2758791:tid 2758791] (EAI 2)Name or service not known: [client 144.76.19.72:62880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:55.009565 2026] [ssl:error] [pid 2758791:tid 2758791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:55.851823 2026] [security2:error] [pid 2759602:tid 2759602] [client 114.119.135.136:51947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/see-hear/sermon-series"] [unique_id "amscn_ZJrjK1bSi0-4URHQAAAB8"], referer: http://www.erskinenazarene.co.uk/sitemap
[Thu Jul 30 10:42:56.796148 2026] [security2:error] [pid 2763839:tid 2763839] [client 145.239.81.31:56764] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,22.0.html"] [unique_id "amscoKKxgsiXB8PPCH5ziwAAACg"]
[Thu Jul 30 10:42:56.796201 2026] [security2:error] [pid 2763839:tid 2763839] [client 145.239.81.31:56764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,22.0.html"] [unique_id "amscoKKxgsiXB8PPCH5ziwAAACg"]
[Thu Jul 30 10:42:56.796463 2026] [security2:error] [pid 2763839:tid 2763839] [client 145.239.81.31:56764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscoKKxgsiXB8PPCH5ziwAAACg"]
[Thu Jul 30 10:42:56.906314 2026] [security2:error] [pid 2762340:tid 2762340] [client 141.94.94.121:38076] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,22.0.html"] [unique_id "amscoPbOPdZNFedSKhzOyAAAACM"]
[Thu Jul 30 10:42:56.906371 2026] [security2:error] [pid 2762340:tid 2762340] [client 141.94.94.121:38076] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,22.0.html"] [unique_id "amscoPbOPdZNFedSKhzOyAAAACM"]
[Thu Jul 30 10:42:56.906638 2026] [security2:error] [pid 2762340:tid 2762340] [client 141.94.94.121:38076] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscoPbOPdZNFedSKhzOyAAAACM"]
[Thu Jul 30 10:42:57.292110 2026] [security2:error] [pid 2759602:tid 2759602] [client 114.119.135.136:51953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/see-hear/sermon-series"] [unique_id "amscofZJrjK1bSi0-4URHgAAAB8"], referer: http://www.erskinenazarene.co.uk/sitemap
[Thu Jul 30 10:42:57.406787 2026] [core:error] [pid 2753834:tid 2753834] (13)Permission denied: [client 216.73.216.199:22993] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup12/device/subsystem/uevent
[Thu Jul 30 10:42:58.064984 2026] [ssl:error] [pid 2763842:tid 2763842] (EAI 2)Name or service not known: [client 144.76.19.72:62910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:58.065012 2026] [ssl:error] [pid 2763842:tid 2763842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:58.119392 2026] [ssl:error] [pid 2763841:tid 2763841] (EAI 2)Name or service not known: [client 144.76.19.72:62926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:42:58.119425 2026] [ssl:error] [pid 2763841:tid 2763841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:42:58.316934 2026] [ssl:error] [pid 2753834:tid 2753834] (70014)End of file found: [client 216.73.216.199:22993] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:58.617324 2026] [ssl:error] [pid 2759255:tid 2759255] (70014)End of file found: [client 216.73.216.199:53012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:42:59.393366 2026] [security2:error] [pid 2751420:tid 2751420] [client 151.80.133.171:43880] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsco9HlrqJHbkhGMYuB7AAAACA"]
[Thu Jul 30 10:42:59.393422 2026] [security2:error] [pid 2751420:tid 2751420] [client 151.80.133.171:43880] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsco9HlrqJHbkhGMYuB7AAAACA"]
[Thu Jul 30 10:42:59.393679 2026] [security2:error] [pid 2751420:tid 2751420] [client 151.80.133.171:43880] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsco9HlrqJHbkhGMYuB7AAAACA"]
[Thu Jul 30 10:42:59.479844 2026] [security2:error] [pid 2763242:tid 2763242] [client 185.191.171.2:63600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/creepy-latin-words"] [unique_id "amsco5bkPdiSxjiXqxThXQAAAAM"]
[Thu Jul 30 10:42:59.525289 2026] [security2:error] [pid 2756319:tid 2756319] [client 151.80.133.238:45462] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsco3SzuHON6mXJ4L5I5wAAAAg"]
[Thu Jul 30 10:42:59.525355 2026] [security2:error] [pid 2756319:tid 2756319] [client 151.80.133.238:45462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsco3SzuHON6mXJ4L5I5wAAAAg"]
[Thu Jul 30 10:42:59.525707 2026] [security2:error] [pid 2756319:tid 2756319] [client 151.80.133.238:45462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsco3SzuHON6mXJ4L5I5wAAAAg"]
[Thu Jul 30 10:43:00.104178 2026] [lsapi:warn] [pid 2763841:tid 2763841] [client 87.201.112.222:44912] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:01.177477 2026] [ssl:error] [pid 2760435:tid 2760435] (EAI 2)Name or service not known: [client 144.76.19.72:25164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:01.177511 2026] [ssl:error] [pid 2760435:tid 2760435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:01.234693 2026] [ssl:error] [pid 2757638:tid 2757638] (EAI 2)Name or service not known: [client 144.76.19.72:25170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:01.234727 2026] [ssl:error] [pid 2757638:tid 2757638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:02.627128 2026] [lsapi:warn] [pid 2753839:tid 2753839] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:03.681852 2026] [security2:error] [pid 2762295:tid 2762295] [client 169.224.96.192:52082] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscp4sVNeJghcQnmk22LwAAAAw"]
[Thu Jul 30 10:43:03.681907 2026] [security2:error] [pid 2762295:tid 2762295] [client 169.224.96.192:52082] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscp4sVNeJghcQnmk22LwAAAAw"]
[Thu Jul 30 10:43:03.682196 2026] [security2:error] [pid 2762295:tid 2762295] [client 169.224.96.192:52082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscp4sVNeJghcQnmk22LwAAAAw"]
[Thu Jul 30 10:43:03.902860 2026] [ssl:error] [pid 2753838:tid 2753838] (70014)End of file found: [client 216.73.216.199:46291] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:04.313969 2026] [ssl:error] [pid 2763898:tid 2763898] (EAI 2)Name or service not known: [client 144.76.19.72:25184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:04.314017 2026] [ssl:error] [pid 2763898:tid 2763898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:04.368314 2026] [ssl:error] [pid 2753884:tid 2753884] (EAI 2)Name or service not known: [client 144.76.19.72:25196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:04.368344 2026] [ssl:error] [pid 2753884:tid 2753884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:04.504345 2026] [core:error] [pid 2763841:tid 2763841] (13)Permission denied: [client 216.73.216.199:5888] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/physical_node/0000:00:01.1/resource2
[Thu Jul 30 10:43:05.708914 2026] [ssl:error] [pid 2763841:tid 2763841] (70014)End of file found: [client 216.73.216.199:5888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:06.112003 2026] [security2:error] [pid 2753834:tid 2753834] [client 49.51.183.75:48512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/"] [unique_id "amscqo1Oj9mEQ-bOlHec0AAAADo"]
[Thu Jul 30 10:43:07.425113 2026] [ssl:error] [pid 2763903:tid 2763903] (EAI 2)Name or service not known: [client 144.76.19.72:25210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:07.425147 2026] [ssl:error] [pid 2763903:tid 2763903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:07.478310 2026] [ssl:error] [pid 2743478:tid 2743478] (EAI 2)Name or service not known: [client 144.76.19.72:25218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:07.478338 2026] [ssl:error] [pid 2743478:tid 2743478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:07.655163 2026] [access_compat:error] [pid 2763898:tid 2763898] [client 196.75.51.247:57278] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 10:43:08.228426 2026] [security2:error] [pid 2753834:tid 2753834] [client 103.216.58.36:58666] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscrI1Oj9mEQ-bOlHec0QAAADo"]
[Thu Jul 30 10:43:08.228481 2026] [security2:error] [pid 2753834:tid 2753834] [client 103.216.58.36:58666] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscrI1Oj9mEQ-bOlHec0QAAADo"]
[Thu Jul 30 10:43:08.228731 2026] [security2:error] [pid 2753834:tid 2753834] [client 103.216.58.36:58666] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscrI1Oj9mEQ-bOlHec0QAAADo"]
[Thu Jul 30 10:43:08.331755 2026] [security2:error] [pid 2753839:tid 2753839] [client 43.130.3.120:44764] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "innerspacer.co.uk"] [uri "/"] [unique_id "amscrBo6rOAmibQLFVoE2AAAAEA"]
[Thu Jul 30 10:43:08.727268 2026] [ssl:error] [pid 2756319:tid 2756319] (70014)End of file found: [client 216.73.216.199:15777] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:09.114702 2026] [access_compat:error] [pid 2763839:tid 2763839] [client 196.75.51.247:57372] AH01797: client denied by server configuration: /home/thepryor/public_html/lufix.php
[Thu Jul 30 10:43:09.900548 2026] [access_compat:error] [pid 2753838:tid 2753838] [client 196.75.51.247:57422] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-atom.php
[Thu Jul 30 10:43:10.530406 2026] [ssl:error] [pid 2763898:tid 2763898] (EAI 2)Name or service not known: [client 144.76.19.72:63748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:10.530433 2026] [ssl:error] [pid 2763898:tid 2763898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:10.583056 2026] [ssl:error] [pid 2756318:tid 2756318] (EAI 2)Name or service not known: [client 144.76.19.72:63752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:10.583092 2026] [ssl:error] [pid 2756318:tid 2756318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:10.723024 2026] [lsapi:warn] [pid 2750259:tid 2750259] [client 87.201.112.222:23182] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:11.132112 2026] [ssl:error] [pid 2753834:tid 2753834] (70014)End of file found: [client 216.73.216.199:60270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:11.157826 2026] [access_compat:error] [pid 2751420:tid 2751420] [client 196.75.51.247:57510] AH01797: client denied by server configuration: /home/thepryor/public_html/alfanew.php
[Thu Jul 30 10:43:11.633351 2026] [ssl:error] [pid 2762339:tid 2762339] (70014)End of file found: [client 216.73.216.199:27707] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:11.953308 2026] [access_compat:error] [pid 2762340:tid 2762340] [client 196.75.51.247:61323] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-activate.php
[Thu Jul 30 10:43:12.698457 2026] [access_compat:error] [pid 2762340:tid 2762340] [client 196.75.51.247:61460] AH01797: client denied by server configuration: /home/thepryor/public_html/log.php
[Thu Jul 30 10:43:13.230136 2026] [lsapi:warn] [pid 2765062:tid 2765062] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:13.506306 2026] [access_compat:error] [pid 2762340:tid 2762340] [client 196.75.51.247:61527] AH01797: client denied by server configuration: /home/thepryor/public_html/ws.php
[Thu Jul 30 10:43:13.639730 2026] [ssl:error] [pid 2762338:tid 2762338] (EAI 2)Name or service not known: [client 144.76.19.72:63754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:13.639768 2026] [ssl:error] [pid 2762338:tid 2762338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:13.699666 2026] [ssl:error] [pid 2762338:tid 2762338] (EAI 2)Name or service not known: [client 144.76.19.72:63770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:13.699695 2026] [ssl:error] [pid 2762338:tid 2762338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:14.138151 2026] [ssl:error] [pid 2756319:tid 2756319] (70014)End of file found: [client 216.73.216.199:64431] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:14.268489 2026] [access_compat:error] [pid 2765062:tid 2765062] [client 196.75.51.247:61637] AH01797: client denied by server configuration: /home/thepryor/public_html/atomlib.php
[Thu Jul 30 10:43:15.067663 2026] [security2:error] [pid 2765154:tid 2765154] [client 152.58.33.102:37374] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscs4_X3D8btmgp0XJ1oAAAAA4"]
[Thu Jul 30 10:43:15.067737 2026] [security2:error] [pid 2765154:tid 2765154] [client 152.58.33.102:37374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amscs4_X3D8btmgp0XJ1oAAAAA4"]
[Thu Jul 30 10:43:15.068123 2026] [security2:error] [pid 2765154:tid 2765154] [client 152.58.33.102:37374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amscs4_X3D8btmgp0XJ1oAAAAA4"]
[Thu Jul 30 10:43:15.767962 2026] [access_compat:error] [pid 2763842:tid 2763842] [client 196.75.51.247:61842] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-2019.php
[Thu Jul 30 10:43:16.141573 2026] [security2:error] [pid 2753836:tid 2753836] [client 74.7.242.4:44196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.spamp.spamp.co.uk"] [uri "/"] [unique_id "amsctJauR2nyDhQZFqa2lAAAAD0"]
[Thu Jul 30 10:43:16.444907 2026] [ssl:error] [pid 2753884:tid 2753884] (70014)End of file found: [client 216.73.216.199:58106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:16.523790 2026] [access_compat:error] [pid 2762340:tid 2762340] [client 196.75.51.247:61889] AH01797: client denied by server configuration: /home/thepryor/public_html/sts.php
[Thu Jul 30 10:43:16.764287 2026] [ssl:error] [pid 2763842:tid 2763842] (EAI 2)Name or service not known: [client 144.76.19.72:63772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:16.764322 2026] [ssl:error] [pid 2763842:tid 2763842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:16.894433 2026] [ssl:error] [pid 2759652:tid 2759652] (EAI 2)Name or service not known: [client 144.76.19.72:63776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:16.894468 2026] [ssl:error] [pid 2759652:tid 2759652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:18.062560 2026] [access_compat:error] [pid 2759652:tid 2759652] [client 196.75.51.247:61968] AH01797: client denied by server configuration: /home/thepryor/public_html/dropdown.php
[Thu Jul 30 10:43:18.803148 2026] [access_compat:error] [pid 2763898:tid 2763898] [client 196.75.51.247:61993] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 10:43:19.009172 2026] [core:error] [pid 2763901:tid 2763901] [client 66.249.66.169:48404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:19.009206 2026] [core:error] [pid 2763901:tid 2763901] [client 66.249.66.169:48404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:19.019291 2026] [core:error] [pid 2762339:tid 2762339] [client 66.249.66.167:55543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:19.019316 2026] [core:error] [pid 2762339:tid 2762339] [client 66.249.66.167:55543] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:19.330664 2026] [access_compat:error] [pid 2763898:tid 2763898] [client 196.75.51.247:61993] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 10:43:19.506885 2026] [authz_core:error] [pid 2753834:tid 2753834] [client 82.102.18.190:37534] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/includes/error_log
[Thu Jul 30 10:43:19.952808 2026] [ssl:error] [pid 2765154:tid 2765154] (EAI 2)Name or service not known: [client 144.76.19.72:32670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:19.952844 2026] [ssl:error] [pid 2765154:tid 2765154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:20.008005 2026] [ssl:error] [pid 2762339:tid 2762339] (EAI 2)Name or service not known: [client 144.76.19.72:32680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:20.008036 2026] [ssl:error] [pid 2762339:tid 2762339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:21.370245 2026] [core:error] [pid 2763839:tid 2763839] (13)Permission denied: [client 216.73.216.199:59316] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/named.conf.cache
[Thu Jul 30 10:43:21.697384 2026] [lsapi:warn] [pid 2763897:tid 2763897] [client 87.201.112.222:44885] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:22.087289 2026] [core:error] [pid 2761244:tid 2761244] [client 66.249.64.171:60562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:22.087314 2026] [core:error] [pid 2761244:tid 2761244] [client 66.249.64.171:60562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:22.182973 2026] [security2:error] [pid 2763624:tid 2763624] [client 85.208.96.196:45634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amscul2hLC_auzYZYEy1PAAAACQ"]
[Thu Jul 30 10:43:22.652191 2026] [security2:error] [pid 2763624:tid 2763624] [client 185.191.171.16:43178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg430/"] [unique_id "amscul2hLC_auzYZYEy1PQAAACQ"]
[Thu Jul 30 10:43:22.991701 2026] [access_compat:error] [pid 2759255:tid 2759255] [client 45.158.164.139:33334] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:43:23.067835 2026] [ssl:error] [pid 2763319:tid 2763319] (EAI 2)Name or service not known: [client 144.76.19.72:32692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:23.067876 2026] [ssl:error] [pid 2763319:tid 2763319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:23.126644 2026] [ssl:error] [pid 2765153:tid 2765153] (EAI 2)Name or service not known: [client 144.76.19.72:32696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:23.126673 2026] [ssl:error] [pid 2765153:tid 2765153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:23.478824 2026] [ssl:error] [pid 2757638:tid 2757638] (70014)End of file found: [client 216.73.216.199:62889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:23.806497 2026] [lsapi:warn] [pid 2758789:tid 2758789] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:25.294430 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:59316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:25.623983 2026] [access_compat:error] [pid 2763901:tid 2763901] [client 45.158.164.139:33348] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 10:43:26.179976 2026] [ssl:error] [pid 2758627:tid 2758627] (EAI 2)Name or service not known: [client 144.76.19.72:32712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:26.180017 2026] [ssl:error] [pid 2758627:tid 2758627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:26.235592 2026] [ssl:error] [pid 2753884:tid 2753884] (EAI 2)Name or service not known: [client 144.76.19.72:32720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:26.235625 2026] [ssl:error] [pid 2753884:tid 2753884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:26.501617 2026] [ssl:error] [pid 2761284:tid 2761284] (70014)End of file found: [client 216.73.216.199:13608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:27.288530 2026] [security2:error] [pid 2765062:tid 2765062] [client 47.128.127.46:38310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.epmsonline.co.uk"] [uri "/robots.txt"] [unique_id "amscv4tC7rrWAnMXqyzrzQAAAAA"]
[Thu Jul 30 10:43:29.291580 2026] [ssl:error] [pid 2762338:tid 2762338] (EAI 2)Name or service not known: [client 144.76.19.72:32728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:29.291619 2026] [ssl:error] [pid 2762338:tid 2762338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:29.346090 2026] [ssl:error] [pid 2753838:tid 2753838] (EAI 2)Name or service not known: [client 144.76.19.72:32734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:29.346118 2026] [ssl:error] [pid 2753838:tid 2753838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:30.720428 2026] [ssl:error] [pid 2765896:tid 2765896] (70014)End of file found: [client 216.73.216.199:37502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:31.598116 2026] [lsapi:warn] [pid 2745061:tid 2745061] [client 87.201.112.222:23202] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:32.283083 2026] [access_compat:error] [pid 2753834:tid 2753834] [client 196.75.51.247:62497] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/maint/atomlib.php
[Thu Jul 30 10:43:32.403869 2026] [ssl:error] [pid 2762339:tid 2762339] (EAI 2)Name or service not known: [client 144.76.19.72:21946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:32.403895 2026] [ssl:error] [pid 2762339:tid 2762339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:32.459496 2026] [ssl:error] [pid 2745061:tid 2745061] (EAI 2)Name or service not known: [client 144.76.19.72:21952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:32.459548 2026] [ssl:error] [pid 2745061:tid 2745061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:34.508432 2026] [lsapi:warn] [pid 2753836:tid 2753836] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:34.530595 2026] [security2:error] [pid 2763842:tid 2763842] [client 216.73.216.199:22406] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/rpm.conf"] [unique_id "amscxuTiROEz66l_DUrhPQAAACw"]
[Thu Jul 30 10:43:34.530880 2026] [security2:error] [pid 2763842:tid 2763842] [client 216.73.216.199:22406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/rpm.conf"] [unique_id "amscxuTiROEz66l_DUrhPQAAACw"]
[Thu Jul 30 10:43:34.531117 2026] [security2:error] [pid 2763842:tid 2763842] [client 216.73.216.199:22406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/rpm.conf"] [unique_id "amscxuTiROEz66l_DUrhPQAAACw"]
[Thu Jul 30 10:43:35.430099 2026] [ssl:error] [pid 2753838:tid 2753838] (70014)End of file found: [client 216.73.216.199:42206] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:35.528362 2026] [ssl:error] [pid 2762336:tid 2762336] (EAI 2)Name or service not known: [client 144.76.19.72:21956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:35.528409 2026] [ssl:error] [pid 2762336:tid 2762336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:35.580386 2026] [ssl:error] [pid 2751420:tid 2751420] (EAI 2)Name or service not known: [client 144.76.19.72:21958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:35.580415 2026] [ssl:error] [pid 2751420:tid 2751420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:36.179832 2026] [access_compat:error] [pid 2762339:tid 2762339] [client 196.75.51.247:62620] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/twentytwentythree/patterns/hidden-404.php
[Thu Jul 30 10:43:36.179871 2026] [authz_core:error] [pid 2762339:tid 2762339] [client 196.75.51.247:62620] AH01630: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/twentytwentythree/patterns/error_log
[Thu Jul 30 10:43:36.179891 2026] [access_compat:error] [pid 2762339:tid 2762339] [client 196.75.51.247:62620] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/twentytwentythree/patterns/footer-default.php
[Thu Jul 30 10:43:36.179909 2026] [access_compat:error] [pid 2762339:tid 2762339] [client 196.75.51.247:62620] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/twentytwentythree/patterns/hidden-no-results.php
[Thu Jul 30 10:43:36.179925 2026] [access_compat:error] [pid 2762339:tid 2762339] [client 196.75.51.247:62620] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/twentytwentythree/patterns/post-meta.php
[Thu Jul 30 10:43:36.179947 2026] [access_compat:error] [pid 2762339:tid 2762339] [client 196.75.51.247:62620] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/twentytwentythree/patterns/hidden-comments.php
[Thu Jul 30 10:43:36.179965 2026] [access_compat:error] [pid 2762339:tid 2762339] [client 196.75.51.247:62620] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/twentytwentythree/patterns/call-to-action.php
[Thu Jul 30 10:43:36.227475 2026] [ssl:error] [pid 2762338:tid 2762338] (70014)End of file found: [client 216.73.216.199:2994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:37.245427 2026] [ssl:error] [pid 2763901:tid 2763901] (70014)End of file found: [client 216.73.216.199:48070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:37.544511 2026] [ssl:error] [pid 2763840:tid 2763840] (70014)End of file found: [client 216.73.216.199:27694] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:38.635638 2026] [ssl:error] [pid 2759652:tid 2759652] (EAI 2)Name or service not known: [client 144.76.19.72:21962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:38.635673 2026] [ssl:error] [pid 2759652:tid 2759652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:38.693249 2026] [ssl:error] [pid 2763841:tid 2763841] (EAI 2)Name or service not known: [client 144.76.19.72:21972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:38.693274 2026] [ssl:error] [pid 2763841:tid 2763841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:40.326409 2026] [security2:error] [pid 2743478:tid 2743478] [client 51.68.111.212:29665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brightredsocks.com"] [uri "/robots.txt"] [unique_id "amsczCWPqpcepsfxp3gB3gAAADw"]
[Thu Jul 30 10:43:41.655348 2026] [ssl:error] [pid 2759255:tid 2759255] (70014)End of file found: [client 216.73.216.199:17522] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:41.787842 2026] [ssl:error] [pid 2766396:tid 2766396] (EAI 2)Name or service not known: [client 144.76.19.72:35090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:41.787875 2026] [ssl:error] [pid 2766396:tid 2766396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:41.843414 2026] [ssl:error] [pid 2762336:tid 2762336] (EAI 2)Name or service not known: [client 144.76.19.72:35092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:41.843443 2026] [ssl:error] [pid 2762336:tid 2762336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:42.549443 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:41346] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:42.667491 2026] [lsapi:warn] [pid 2765110:tid 2765110] [client 87.201.112.222:44894] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:44.369021 2026] [security2:error] [pid 2765154:tid 2765154] [client 1.15.52.154:34844] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.edwardkensington.com"] [uri "/"] [unique_id "amsc0I_X3D8btmgp0XJ1swAAAA4"]
[Thu Jul 30 10:43:44.371789 2026] [core:crit] [pid 2765154:tid 2765154] (13)Permission denied: [client 1.15.52.154:34844] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 10:43:44.899738 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:35094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:44.899764 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:44.951086 2026] [ssl:error] [pid 2765111:tid 2765111] (EAI 2)Name or service not known: [client 144.76.19.72:35104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:44.951111 2026] [ssl:error] [pid 2765111:tid 2765111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:45.152288 2026] [lsapi:warn] [pid 2763901:tid 2763901] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:45.676079 2026] [ssl:error] [pid 2745061:tid 2745061] (70014)End of file found: [client 216.73.216.199:19410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:47.715164 2026] [security2:error] [pid 2767131:tid 2767131] [client 94.154.43.179:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "shop.papier.com.mt"] [uri "/.env"] [unique_id "amsc01JWL_GN6x6QzRe-5wAAAA0"]
[Thu Jul 30 10:43:47.715407 2026] [security2:error] [pid 2767131:tid 2767131] [client 94.154.43.179:0] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.papier.com.mt"] [uri "/.env"] [unique_id "amsc01JWL_GN6x6QzRe-5wAAAA0"]
[Thu Jul 30 10:43:47.715698 2026] [security2:error] [pid 2767131:tid 2767131] [client 94.154.43.179:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "shop.papier.com.mt"] [uri "/.env"] [unique_id "amsc01JWL_GN6x6QzRe-5wAAAA0"]
[Thu Jul 30 10:43:48.006919 2026] [ssl:error] [pid 2765896:tid 2765896] (EAI 2)Name or service not known: [client 144.76.19.72:35106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:48.006957 2026] [ssl:error] [pid 2765896:tid 2765896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:48.060303 2026] [ssl:error] [pid 2766674:tid 2766674] (EAI 2)Name or service not known: [client 144.76.19.72:35114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:48.060336 2026] [ssl:error] [pid 2766674:tid 2766674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:49.291704 2026] [security2:error] [pid 2765896:tid 2765896] [client 114.119.159.92:56285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/products/ipages/"] [unique_id "amsc1YkZFWkgeN7seneOdAAAAAs"], referer: http://codeworks.co.uk/products/
[Thu Jul 30 10:43:50.187339 2026] [ssl:error] [pid 2765111:tid 2765111] (70014)End of file found: [client 216.73.216.199:36272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:50.793902 2026] [core:error] [pid 2765152:tid 2765152] (13)Permission denied: [client 216.73.216.199:22081] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu5/driver/bind
[Thu Jul 30 10:43:51.126247 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:41344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:51.126285 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:51.181031 2026] [ssl:error] [pid 2763897:tid 2763897] (EAI 2)Name or service not known: [client 144.76.19.72:41346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:51.181062 2026] [ssl:error] [pid 2763897:tid 2763897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:51.696963 2026] [ssl:error] [pid 2765152:tid 2765152] (70014)End of file found: [client 216.73.216.199:22081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:52.599884 2026] [ssl:error] [pid 2767330:tid 2767330] (70014)End of file found: [client 216.73.216.199:8772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:53.331494 2026] [lsapi:warn] [pid 2763897:tid 2763897] [client 87.201.112.222:23212] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:54.237636 2026] [ssl:error] [pid 2753838:tid 2753838] (EAI 2)Name or service not known: [client 144.76.19.72:41362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:54.237664 2026] [ssl:error] [pid 2753838:tid 2753838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:54.292398 2026] [ssl:error] [pid 2763840:tid 2763840] (EAI 2)Name or service not known: [client 144.76.19.72:41378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:54.292436 2026] [ssl:error] [pid 2763840:tid 2763840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:54.837958 2026] [security2:error] [pid 2763842:tid 2763842] [client 47.128.52.174:53936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.vain.band"] [uri "/robots.txt"] [unique_id "amsc2uTiROEz66l_DUrhRgAAACw"]
[Thu Jul 30 10:43:55.090891 2026] [core:error] [pid 2753884:tid 2753884] [client 66.249.64.171:48154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:55.090925 2026] [core:error] [pid 2753884:tid 2753884] [client 66.249.64.171:48154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:43:55.671434 2026] [lsapi:warn] [pid 2763842:tid 2763842] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:43:56.212470 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:37461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:57.007679 2026] [ssl:error] [pid 2751420:tid 2751420] (70014)End of file found: [client 216.73.216.199:48000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:43:57.351628 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:41380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:57.351670 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:57.407496 2026] [ssl:error] [pid 2767511:tid 2767511] (EAI 2)Name or service not known: [client 144.76.19.72:41396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:43:57.407532 2026] [ssl:error] [pid 2767511:tid 2767511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:43:57.900452 2026] [ssl:error] [pid 2743478:tid 2743478] (70014)End of file found: [client 216.73.216.199:25934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:00.174377 2026] [security2:error] [pid 2765896:tid 2765896] [client 85.208.96.206:60732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/robots.txt"] [unique_id "amsc4IkZFWkgeN7seneOegAAAAs"]
[Thu Jul 30 10:44:00.400059 2026] [security2:error] [pid 2762339:tid 2762339] [client 85.208.96.201:41632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/university-of-chicago-swim-camp"] [unique_id "amsc4ChJ2S0YX-u8rB3CPAAAAB0"]
[Thu Jul 30 10:44:00.462434 2026] [ssl:error] [pid 2763901:tid 2763901] (EAI 2)Name or service not known: [client 144.76.19.72:29732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:00.462476 2026] [ssl:error] [pid 2763901:tid 2763901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:00.515570 2026] [ssl:error] [pid 2767330:tid 2767330] (EAI 2)Name or service not known: [client 144.76.19.72:29738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:00.515619 2026] [ssl:error] [pid 2767330:tid 2767330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:01.528100 2026] [ssl:error] [pid 2763898:tid 2763898] (70014)End of file found: [client 216.73.216.199:64673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:02.083022 2026] [security2:error] [pid 2762339:tid 2762339] [client 110.249.202.73:42846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/robots.txt"] [unique_id "amsc4ihJ2S0YX-u8rB3CPgAAAB0"]
[Thu Jul 30 10:44:02.112204 2026] [security2:error] [pid 2763624:tid 2763624] [client 58.136.159.76:39964] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsc4l2hLC_auzYZYEy1TwAAACQ"]
[Thu Jul 30 10:44:02.112255 2026] [security2:error] [pid 2763624:tid 2763624] [client 58.136.159.76:39964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsc4l2hLC_auzYZYEy1TwAAACQ"]
[Thu Jul 30 10:44:02.112515 2026] [security2:error] [pid 2763624:tid 2763624] [client 58.136.159.76:39964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsc4l2hLC_auzYZYEy1TwAAACQ"]
[Thu Jul 30 10:44:02.411557 2026] [ssl:error] [pid 2761244:tid 2761244] (70014)End of file found: [client 216.73.216.199:6707] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:03.256172 2026] [lsapi:warn] [pid 2745429:tid 2745429] [client 87.201.112.222:23219] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:03.353297 2026] [core:error] [pid 2759255:tid 2759255] [client 66.249.66.169:61471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:44:03.353324 2026] [core:error] [pid 2759255:tid 2759255] [client 66.249.66.169:61471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:44:03.573553 2026] [ssl:error] [pid 2745061:tid 2745061] (EAI 2)Name or service not known: [client 144.76.19.72:29750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:03.573594 2026] [ssl:error] [pid 2745061:tid 2745061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:03.626438 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:29758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:03.626463 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:03.733374 2026] [ssl:error] [pid 2766674:tid 2766674] (70014)End of file found: [client 216.73.216.199:20917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:04.520079 2026] [autoindex:error] [pid 2763624:tid 2763624] [client 191.232.199.39:40977] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:44:04.941194 2026] [security2:error] [pid 2766396:tid 2766396] [client 196.191.221.117:31491] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsc5AWDBi7H6_iFXQEYCAAAAAA"]
[Thu Jul 30 10:44:04.941244 2026] [security2:error] [pid 2766396:tid 2766396] [client 196.191.221.117:31491] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsc5AWDBi7H6_iFXQEYCAAAAAA"]
[Thu Jul 30 10:44:04.941527 2026] [security2:error] [pid 2766396:tid 2766396] [client 196.191.221.117:31491] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsc5AWDBi7H6_iFXQEYCAAAAAA"]
[Thu Jul 30 10:44:06.405797 2026] [lsapi:warn] [pid 2765110:tid 2765110] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:06.705114 2026] [ssl:error] [pid 2745429:tid 2745429] (EAI 2)Name or service not known: [client 144.76.19.72:29762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:06.705156 2026] [ssl:error] [pid 2745429:tid 2745429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:06.757742 2026] [ssl:error] [pid 2763742:tid 2763742] (EAI 2)Name or service not known: [client 144.76.19.72:29768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:06.757778 2026] [ssl:error] [pid 2763742:tid 2763742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:07.647180 2026] [security2:error] [pid 2756269:tid 2756269] [client 185.191.171.4:65266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amsc581VOjntNap3miFs8QAAAAI"]
[Thu Jul 30 10:44:07.648928 2026] [ssl:error] [pid 2767253:tid 2767253] (70014)End of file found: [client 216.73.216.199:16520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:08.147121 2026] [ssl:error] [pid 2762336:tid 2762336] (70014)End of file found: [client 216.73.216.199:39765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:09.766786 2026] [ssl:error] [pid 2767131:tid 2767131] (70014)End of file found: [client 216.73.216.199:28964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:09.810157 2026] [ssl:error] [pid 2763841:tid 2763841] (EAI 2)Name or service not known: [client 144.76.19.72:47748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:09.810179 2026] [ssl:error] [pid 2763841:tid 2763841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:09.862970 2026] [ssl:error] [pid 2761244:tid 2761244] (EAI 2)Name or service not known: [client 144.76.19.72:47758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:09.862994 2026] [ssl:error] [pid 2761244:tid 2761244] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:10.290336 2026] [security2:error] [pid 2745429:tid 2745429] [client 59.103.106.219:19127] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsc6ghMTL-3vH1BUw5SuQAAAE0"]
[Thu Jul 30 10:44:10.290392 2026] [security2:error] [pid 2745429:tid 2745429] [client 59.103.106.219:19127] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsc6ghMTL-3vH1BUw5SuQAAAE0"]
[Thu Jul 30 10:44:10.290653 2026] [security2:error] [pid 2745429:tid 2745429] [client 59.103.106.219:19127] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsc6ghMTL-3vH1BUw5SuQAAAE0"]
[Thu Jul 30 10:44:12.922481 2026] [ssl:error] [pid 2765896:tid 2765896] (EAI 2)Name or service not known: [client 144.76.19.72:47760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:12.922511 2026] [ssl:error] [pid 2765896:tid 2765896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:12.957063 2026] [core:error] [pid 2765154:tid 2765154] (13)Permission denied: [client 216.73.216.199:28532] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/trace
[Thu Jul 30 10:44:12.977491 2026] [ssl:error] [pid 2763841:tid 2763841] (EAI 2)Name or service not known: [client 144.76.19.72:47766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:12.977522 2026] [ssl:error] [pid 2763841:tid 2763841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:13.072773 2026] [core:error] [pid 2765154:tid 2765154] (13)Permission denied: [client 216.73.216.199:28532] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu6/driver/bind
[Thu Jul 30 10:44:13.374573 2026] [ssl:error] [pid 2765154:tid 2765154] (70014)End of file found: [client 216.73.216.199:28532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:13.837267 2026] [lsapi:warn] [pid 2766674:tid 2766674] [client 87.201.112.222:44910] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:13.860637 2026] [ssl:error] [pid 2743478:tid 2743478] (70014)End of file found: [client 216.73.216.199:54617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:16.033462 2026] [ssl:error] [pid 2762340:tid 2762340] (EAI 2)Name or service not known: [client 144.76.19.72:47772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:16.033494 2026] [ssl:error] [pid 2762340:tid 2762340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:16.089450 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:47782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:16.089493 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:16.102470 2026] [core:error] [pid 2765111:tid 2765111] (13)Permission denied: [client 216.73.216.199:50968] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/validate
[Thu Jul 30 10:44:16.758796 2026] [security2:error] [pid 2763839:tid 2763839] [client 49.51.36.179:45734] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsc8KKxgsiXB8PPCH5zugAAACg"]
[Thu Jul 30 10:44:17.005535 2026] [ssl:error] [pid 2765111:tid 2765111] (70014)End of file found: [client 216.73.216.199:50968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:17.195497 2026] [lsapi:warn] [pid 2763624:tid 2763624] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:18.405313 2026] [security2:error] [pid 2753886:tid 2753886] [client 49.51.36.179:53496] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsc8nLfYzwHbWFD3h5_bwAAAEg"], referer: http://www.hornsey-town-hall.org.uk
[Thu Jul 30 10:44:18.695578 2026] [ssl:error] [pid 2766674:tid 2766674] (70014)End of file found: [client 216.73.216.199:1750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:19.144618 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:47790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:19.144653 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:19.200949 2026] [ssl:error] [pid 2762340:tid 2762340] (EAI 2)Name or service not known: [client 144.76.19.72:47804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:19.200974 2026] [ssl:error] [pid 2762340:tid 2762340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:19.734096 2026] [authz_core:error] [pid 2753886:tid 2753886] [client 66.249.66.33:58865] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:44:19.736804 2026] [authz_core:error] [pid 2753886:tid 2753886] [client 66.249.66.33:58865] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:44:19.957639 2026] [security2:error] [pid 2765154:tid 2765154] [client 114.119.142.20:51219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/prayre-holy-week/"] [unique_id "amsc84_X3D8btmgp0XJ1ywAAAA4"], referer: http://www.erskinenazarene.co.uk/prayre-holy-week/?instance_id=39460
[Thu Jul 30 10:44:20.020079 2026] [ssl:error] [pid 2763897:tid 2763897] (70014)End of file found: [client 216.73.216.199:12479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:20.434248 2026] [security2:error] [pid 2767331:tid 2767331] [client 49.51.36.179:54382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsc9A6FmuHv1LmqDaTY0wAAABs"], referer: https://www.hornsey-town-hall.org.uk/
[Thu Jul 30 10:44:21.028630 2026] [security2:error] [pid 2763624:tid 2763624] [client 114.119.142.20:62605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/prayre-holy-week/"] [unique_id "amsc9V2hLC_auzYZYEy1WgAAACQ"], referer: http://www.erskinenazarene.co.uk/prayre-holy-week/?instance_id=39460
[Thu Jul 30 10:44:22.257332 2026] [ssl:error] [pid 2765154:tid 2765154] (EAI 2)Name or service not known: [client 144.76.19.72:60318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:22.257366 2026] [ssl:error] [pid 2765154:tid 2765154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:22.310527 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:60326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:22.310554 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:22.726469 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:12097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:23.058120 2026] [authz_core:error] [pid 2753886:tid 2753886] [client 66.249.66.33:58865] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:44:23.060784 2026] [authz_core:error] [pid 2753886:tid 2753886] [client 66.249.66.33:58865] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:44:23.400204 2026] [security2:error] [pid 2765154:tid 2765154] [client 85.208.96.212:12444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4568.0/prev_next,next.html"] [unique_id "amsc94_X3D8btmgp0XJ1zQAAAA4"]
[Thu Jul 30 10:44:24.124809 2026] [ssl:error] [pid 2762340:tid 2762340] (70014)End of file found: [client 216.73.216.199:50195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:24.399396 2026] [autoindex:error] [pid 2763624:tid 2763624] [client 191.232.199.39:1158] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:44:24.505826 2026] [lsapi:warn] [pid 2743478:tid 2743478] [client 87.201.112.222:44907] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:25.369948 2026] [ssl:error] [pid 2763897:tid 2763897] (EAI 2)Name or service not known: [client 144.76.19.72:60340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:25.369983 2026] [ssl:error] [pid 2763897:tid 2763897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:25.424759 2026] [ssl:error] [pid 2763842:tid 2763842] (EAI 2)Name or service not known: [client 144.76.19.72:60356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:25.424790 2026] [ssl:error] [pid 2763842:tid 2763842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:25.736460 2026] [ssl:error] [pid 2759652:tid 2759652] (70014)End of file found: [client 216.73.216.199:61302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:27.912535 2026] [lsapi:warn] [pid 2769322:tid 2769322] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:28.451487 2026] [ssl:error] [pid 2769321:tid 2769321] (70014)End of file found: [client 216.73.216.199:38336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:28.481010 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:60370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:28.481039 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:28.535290 2026] [ssl:error] [pid 2763897:tid 2763897] (EAI 2)Name or service not known: [client 144.76.19.72:60384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:28.535320 2026] [ssl:error] [pid 2763897:tid 2763897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:29.542129 2026] [ssl:error] [pid 2753886:tid 2753886] (70014)End of file found: [client 216.73.216.199:45017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:29.708108 2026] [security2:error] [pid 2750259:tid 2750259] [client 43.134.236.36:59248] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amsc_XlseJLi0Xe2FxcbPAAAACo"]
[Thu Jul 30 10:44:29.877433 2026] [autoindex:error] [pid 2765154:tid 2765154] [client 191.232.199.39:42105] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:44:30.789347 2026] [security2:error] [pid 2766396:tid 2766396] [client 85.208.96.210:57440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7299.0/prev_next,prev.html"] [unique_id "amsc_gWDBi7H6_iFXQEYDwAAAAA"]
[Thu Jul 30 10:44:31.144542 2026] [authz_core:error] [pid 2767330:tid 2767330] [client 136.112.42.174:47556] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: http://kinesiologylondon.co.uk/wp-includes
[Thu Jul 30 10:44:31.174168 2026] [core:error] [pid 2759652:tid 2759652] (13)Permission denied: [client 216.73.216.199:11953] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup13/device/remove
[Thu Jul 30 10:44:31.266177 2026] [security2:error] [pid 2758627:tid 2758627] [client 43.134.236.36:49538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amsc_-Oi3eNYo73O1VmGgAAAABM"], referer: http://www.wmsfirearmstraining.com
[Thu Jul 30 10:44:31.593127 2026] [ssl:error] [pid 2766396:tid 2766396] (EAI 2)Name or service not known: [client 144.76.19.72:30832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:31.593153 2026] [ssl:error] [pid 2766396:tid 2766396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:31.646361 2026] [ssl:error] [pid 2765896:tid 2765896] (EAI 2)Name or service not known: [client 144.76.19.72:30844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:31.646391 2026] [ssl:error] [pid 2765896:tid 2765896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:31.780324 2026] [ssl:error] [pid 2759652:tid 2759652] (70014)End of file found: [client 216.73.216.199:11953] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:34.708873 2026] [ssl:error] [pid 2763897:tid 2763897] (EAI 2)Name or service not known: [client 144.76.19.72:30852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:34.708901 2026] [ssl:error] [pid 2763897:tid 2763897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:34.774080 2026] [ssl:error] [pid 2763897:tid 2763897] (EAI 2)Name or service not known: [client 144.76.19.72:30868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:34.774106 2026] [ssl:error] [pid 2763897:tid 2763897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:35.001623 2026] [lsapi:warn] [pid 2763903:tid 2763903] [client 87.201.112.222:44879] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:37.087096 2026] [ssl:error] [pid 2758726:tid 2758726] (70014)End of file found: [client 216.73.216.199:17724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:37.467950 2026] [security2:error] [pid 2769630:tid 2769630] [client 43.164.196.244:39088] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amsdBQZQFvmLF_6AV7Z8tQAAACc"]
[Thu Jul 30 10:44:37.842646 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:30882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:37.842682 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:37.895738 2026] [ssl:error] [pid 2769627:tid 2769627] (EAI 2)Name or service not known: [client 144.76.19.72:30888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:37.895797 2026] [ssl:error] [pid 2769627:tid 2769627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:38.576138 2026] [lsapi:warn] [pid 2769627:tid 2769627] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:38.909469 2026] [security2:error] [pid 2763842:tid 2763842] [client 110.249.202.221:48230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webstersltd.com"] [uri "/"] [unique_id "amsdBuTiROEz66l_DUrhYgAAACw"]
[Thu Jul 30 10:44:38.951890 2026] [ssl:error] [pid 2743478:tid 2743478] (70014)End of file found: [client 216.73.216.199:61202] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:40.954396 2026] [ssl:error] [pid 2769295:tid 2769295] (EAI 2)Name or service not known: [client 144.76.19.72:27526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:40.954430 2026] [ssl:error] [pid 2769295:tid 2769295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:41.011492 2026] [ssl:error] [pid 2766674:tid 2766674] (EAI 2)Name or service not known: [client 144.76.19.72:27528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:41.011520 2026] [ssl:error] [pid 2766674:tid 2766674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:43.905766 2026] [authz_core:error] [pid 2745429:tid 2745429] [client 66.249.66.33:53272] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:44:43.908663 2026] [authz_core:error] [pid 2745429:tid 2745429] [client 66.249.66.33:53272] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:44:44.116793 2026] [ssl:error] [pid 2769572:tid 2769572] (EAI 2)Name or service not known: [client 144.76.19.72:27536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:44.116825 2026] [ssl:error] [pid 2769572:tid 2769572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:44.173562 2026] [ssl:error] [pid 2759602:tid 2759602] (EAI 2)Name or service not known: [client 144.76.19.72:27546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:44.173601 2026] [ssl:error] [pid 2759602:tid 2759602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:45.483566 2026] [ssl:error] [pid 2753886:tid 2753886] (70014)End of file found: [client 216.73.216.199:53000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:45.492839 2026] [lsapi:warn] [pid 2769295:tid 2769295] [client 87.201.112.222:23219] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:45.650951 2026] [security2:error] [pid 2750259:tid 2750259] [client 110.249.202.209:38638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amsdDXlseJLi0Xe2FxcbRQAAACo"]
[Thu Jul 30 10:44:46.253194 2026] [core:error] [pid 2763842:tid 2763842] (13)Permission denied: [client 216.73.216.199:62181] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/sanity_checks
[Thu Jul 30 10:44:46.996992 2026] [core:error] [pid 2763842:tid 2763842] (13)Permission denied: [client 216.73.216.199:62181] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/min_partial
[Thu Jul 30 10:44:47.281831 2026] [ssl:error] [pid 2769524:tid 2769524] (EAI 2)Name or service not known: [client 144.76.19.72:27556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:47.281880 2026] [ssl:error] [pid 2769524:tid 2769524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:47.338199 2026] [ssl:error] [pid 2769572:tid 2769572] (EAI 2)Name or service not known: [client 144.76.19.72:27564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:47.338233 2026] [ssl:error] [pid 2769572:tid 2769572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:47.591245 2026] [security2:error] [pid 2769575:tid 2769575] [client 110.249.201.16:32882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webstersltd.com"] [uri "/robots.txt"] [unique_id "amsdD7XwZJh2ng6EHK2I_AAAACE"]
[Thu Jul 30 10:44:47.607123 2026] [ssl:error] [pid 2763842:tid 2763842] (70014)End of file found: [client 216.73.216.199:62181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:48.215996 2026] [core:error] [pid 2750259:tid 2750259] (13)Permission denied: [client 216.73.216.199:12149] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/object_size
[Thu Jul 30 10:44:48.827793 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:12149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:49.414943 2026] [lsapi:warn] [pid 2765154:tid 2765154] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:50.392353 2026] [ssl:error] [pid 2765154:tid 2765154] (EAI 2)Name or service not known: [client 144.76.19.72:55120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:50.392384 2026] [ssl:error] [pid 2765154:tid 2765154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:50.445135 2026] [ssl:error] [pid 2769523:tid 2769523] (EAI 2)Name or service not known: [client 144.76.19.72:55132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:50.445172 2026] [ssl:error] [pid 2769523:tid 2769523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:51.872210 2026] [ssl:error] [pid 2769523:tid 2769523] (70014)End of file found: [client 216.73.216.199:33220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:52.987493 2026] [core:error] [pid 2770656:tid 2770656] (13)Permission denied: [client 216.73.216.199:42839] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/mbcache/uevent
[Thu Jul 30 10:44:53.501633 2026] [ssl:error] [pid 2769635:tid 2769635] (EAI 2)Name or service not known: [client 144.76.19.72:55148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:53.501668 2026] [ssl:error] [pid 2769635:tid 2769635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:53.555603 2026] [ssl:error] [pid 2769321:tid 2769321] (EAI 2)Name or service not known: [client 144.76.19.72:55160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:53.555632 2026] [ssl:error] [pid 2769321:tid 2769321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:55.206977 2026] [ssl:error] [pid 2770656:tid 2770656] (70014)End of file found: [client 216.73.216.199:42839] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:56.209533 2026] [lsapi:warn] [pid 2765110:tid 2765110] [client 87.201.112.222:44919] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:44:56.609417 2026] [ssl:error] [pid 2769632:tid 2769632] (EAI 2)Name or service not known: [client 144.76.19.72:55168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:56.609448 2026] [ssl:error] [pid 2769632:tid 2769632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:56.665724 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:55176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:56.665752 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:57.045763 2026] [core:error] [pid 2750259:tid 2750259] (13)Permission denied: [client 216.73.216.199:7622] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/order
[Thu Jul 30 10:44:57.658768 2026] [core:error] [pid 2750259:tid 2750259] (13)Permission denied: [client 216.73.216.199:7622] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/object_size
[Thu Jul 30 10:44:58.282112 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:7622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:44:59.207721 2026] [core:error] [pid 2762295:tid 2762295] (13)Permission denied: [client 216.73.216.199:48447] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/usersize
[Thu Jul 30 10:44:59.719546 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:45492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:59.719577 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:44:59.771299 2026] [ssl:error] [pid 2758726:tid 2758726] (EAI 2)Name or service not known: [client 144.76.19.72:45494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:44:59.771333 2026] [ssl:error] [pid 2758726:tid 2758726] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:00.161431 2026] [lsapi:warn] [pid 2765154:tid 2765154] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:00.727154 2026] [ssl:error] [pid 2762295:tid 2762295] (70014)End of file found: [client 216.73.216.199:48447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:00.874438 2026] [security2:error] [pid 2763624:tid 2763624] [client 43.153.113.127:59846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sharonduggal.co.uk"] [uri "/"] [unique_id "amsdHF2hLC_auzYZYEy1dgAAACQ"]
[Thu Jul 30 10:45:01.000478 2026] [security2:error] [pid 2765896:tid 2765896] [client 185.191.171.8:17664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/this-team-lost-stoke-city-2:1-on-may-11"] [unique_id "amsdHYkZFWkgeN7seneOlgAAAAs"]
[Thu Jul 30 10:45:01.227352 2026] [core:error] [pid 2758726:tid 2758726] (13)Permission denied: [client 216.73.216.199:50669] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/cache_dma
[Thu Jul 30 10:45:01.328660 2026] [core:error] [pid 2758726:tid 2758726] (13)Permission denied: [client 216.73.216.199:50669] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/key_jar/object_size
[Thu Jul 30 10:45:02.537990 2026] [security2:error] [pid 2759602:tid 2759602] [client 123.18.106.14:40888] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdHvZJrjK1bSi0-4URpwAAAB8"]
[Thu Jul 30 10:45:02.538040 2026] [security2:error] [pid 2759602:tid 2759602] [client 123.18.106.14:40888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdHvZJrjK1bSi0-4URpwAAAB8"]
[Thu Jul 30 10:45:02.538305 2026] [security2:error] [pid 2759602:tid 2759602] [client 123.18.106.14:40888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdHvZJrjK1bSi0-4URpwAAAB8"]
[Thu Jul 30 10:45:02.880226 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:45498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:02.880267 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:02.934752 2026] [ssl:error] [pid 2770861:tid 2770861] (EAI 2)Name or service not known: [client 144.76.19.72:45514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:02.934783 2026] [ssl:error] [pid 2770861:tid 2770861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:03.154709 2026] [ssl:error] [pid 2758726:tid 2758726] (70014)End of file found: [client 216.73.216.199:50669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:04.592616 2026] [security2:error] [pid 2765110:tid 2765110] [client 8.211.144.40:62847] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdIBTNmXhOXIxTlVGDfQAAAAM"]
[Thu Jul 30 10:45:04.592668 2026] [security2:error] [pid 2765110:tid 2765110] [client 8.211.144.40:62847] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdIBTNmXhOXIxTlVGDfQAAAAM"]
[Thu Jul 30 10:45:04.592934 2026] [security2:error] [pid 2765110:tid 2765110] [client 8.211.144.40:62847] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdIBTNmXhOXIxTlVGDfQAAAAM"]
[Thu Jul 30 10:45:04.664847 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:55029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:06.024816 2026] [ssl:error] [pid 2771496:tid 2771496] (EAI 2)Name or service not known: [client 144.76.19.72:45526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:06.024867 2026] [ssl:error] [pid 2771496:tid 2771496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:06.078425 2026] [ssl:error] [pid 2771496:tid 2771496] (EAI 2)Name or service not known: [client 144.76.19.72:45534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:06.078446 2026] [ssl:error] [pid 2771496:tid 2771496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:06.740662 2026] [lsapi:warn] [pid 2769573:tid 2769573] [client 87.201.112.222:44915] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:07.087968 2026] [security2:error] [pid 2762295:tid 2762295] [client 216.73.216.199:56468] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-latency-performance-base/tuned.conf"] [unique_id "amsdI4sVNeJghcQnmk22vgAAAAw"]
[Thu Jul 30 10:45:07.088276 2026] [security2:error] [pid 2762295:tid 2762295] [client 216.73.216.199:56468] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-latency-performance-base/tuned.conf"] [unique_id "amsdI4sVNeJghcQnmk22vgAAAAw"]
[Thu Jul 30 10:45:07.088524 2026] [security2:error] [pid 2762295:tid 2762295] [client 216.73.216.199:56468] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tuned/cloudlinux-latency-performance-base/tuned.conf"] [unique_id "amsdI4sVNeJghcQnmk22vgAAAAw"]
[Thu Jul 30 10:45:08.294674 2026] [ssl:error] [pid 2762295:tid 2762295] (70014)End of file found: [client 216.73.216.199:56468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:08.778662 2026] [core:error] [pid 2759255:tid 2759255] (13)Permission denied: [client 216.73.216.199:18157] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/remote_node_defrag_ratio
[Thu Jul 30 10:45:09.131464 2026] [ssl:error] [pid 2765154:tid 2765154] (EAI 2)Name or service not known: [client 144.76.19.72:45538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:09.131496 2026] [ssl:error] [pid 2765154:tid 2765154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:09.184559 2026] [ssl:error] [pid 2771539:tid 2771539] (EAI 2)Name or service not known: [client 144.76.19.72:45554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:09.184602 2026] [ssl:error] [pid 2771539:tid 2771539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:09.199407 2026] [security2:error] [pid 2759652:tid 2759652] [client 8.211.144.40:11529] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdJSiH8QWPc7pBRlZTOQAAACI"]
[Thu Jul 30 10:45:09.199460 2026] [security2:error] [pid 2759652:tid 2759652] [client 8.211.144.40:11529] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdJSiH8QWPc7pBRlZTOQAAACI"]
[Thu Jul 30 10:45:09.199712 2026] [security2:error] [pid 2759652:tid 2759652] [client 8.211.144.40:11529] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdJSiH8QWPc7pBRlZTOQAAACI"]
[Thu Jul 30 10:45:09.206676 2026] [core:error] [pid 2759255:tid 2759255] (13)Permission denied: [client 216.73.216.199:18157] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/order
[Thu Jul 30 10:45:09.507838 2026] [ssl:error] [pid 2759255:tid 2759255] (70014)End of file found: [client 216.73.216.199:18157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:10.419432 2026] [ssl:error] [pid 2769321:tid 2769321] (70014)End of file found: [client 216.73.216.199:49740] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:10.754846 2026] [lsapi:warn] [pid 2771496:tid 2771496] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:12.240688 2026] [ssl:error] [pid 2762339:tid 2762339] (EAI 2)Name or service not known: [client 144.76.19.72:38820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:12.240720 2026] [ssl:error] [pid 2762339:tid 2762339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:12.293568 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:38824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:12.293604 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:12.356215 2026] [security2:error] [pid 2765151:tid 2765151] [client 110.249.201.179:41702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/robots.txt"] [unique_id "amsdKKhbiCKupDmUtj2PnQAAAAU"]
[Thu Jul 30 10:45:12.730909 2026] [core:error] [pid 2770861:tid 2770861] (13)Permission denied: [client 216.73.216.199:30848] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-1k/red_zone
[Thu Jul 30 10:45:12.852117 2026] [security2:error] [pid 2771538:tid 2771538] [client 110.249.202.138:12394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webstersltd.com"] [uri "/robots.txt"] [unique_id "amsdKKXgLZEqRn3E3-QFzQAAAAc"]
[Thu Jul 30 10:45:13.940462 2026] [security2:error] [pid 2770861:tid 2770861] [client 216.73.216.199:30848] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/libuser.conf"] [unique_id "amsdKfJEH47PsGiy2h3lGAAAABg"]
[Thu Jul 30 10:45:13.940745 2026] [security2:error] [pid 2770861:tid 2770861] [client 216.73.216.199:30848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/libuser.conf"] [unique_id "amsdKfJEH47PsGiy2h3lGAAAABg"]
[Thu Jul 30 10:45:13.940951 2026] [security2:error] [pid 2770861:tid 2770861] [client 216.73.216.199:30848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/libuser.conf"] [unique_id "amsdKfJEH47PsGiy2h3lGAAAABg"]
[Thu Jul 30 10:45:14.654277 2026] [security2:error] [pid 2762339:tid 2762339] [client 110.249.202.166:26396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amsdKihJ2S0YX-u8rB3C4gAAAB0"]
[Thu Jul 30 10:45:15.139725 2026] [autoindex:error] [pid 2771496:tid 2771496] [client 191.232.199.39:1413] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:45:15.351669 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:38826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:15.351707 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:15.404782 2026] [ssl:error] [pid 2770940:tid 2770940] (EAI 2)Name or service not known: [client 144.76.19.72:38840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:15.404822 2026] [ssl:error] [pid 2770940:tid 2770940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:17.037150 2026] [lsapi:warn] [pid 2771496:tid 2771496] [client 87.201.112.222:23215] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:17.455494 2026] [autoindex:error] [pid 2769322:tid 2769322] [client 191.232.199.39:47134] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:45:17.728436 2026] [security2:error] [pid 2758627:tid 2758627] [client 124.156.225.181:60182] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.barbaramatarrese.com"] [uri "/"] [unique_id "amsdLeOi3eNYo73O1VmG7AAAABM"]
[Thu Jul 30 10:45:18.027468 2026] [ssl:error] [pid 2743478:tid 2743478] (70014)End of file found: [client 216.73.216.199:61344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:18.459031 2026] [ssl:error] [pid 2770656:tid 2770656] (EAI 2)Name or service not known: [client 144.76.19.72:38852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:18.459091 2026] [ssl:error] [pid 2770656:tid 2770656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:18.515400 2026] [ssl:error] [pid 2769573:tid 2769573] (EAI 2)Name or service not known: [client 144.76.19.72:38866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:18.515435 2026] [ssl:error] [pid 2769573:tid 2769573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:19.529982 2026] [authz_core:error] [pid 2769523:tid 2769523] [client 66.249.66.34:64052] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:45:19.532724 2026] [authz_core:error] [pid 2769523:tid 2769523] [client 66.249.66.34:64052] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:45:19.535397 2026] [ssl:error] [pid 2770656:tid 2770656] (70014)End of file found: [client 216.73.216.199:3400] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:21.348878 2026] [core:error] [pid 2750259:tid 2750259] (13)Permission denied: [client 216.73.216.199:34058] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/aliases
[Thu Jul 30 10:45:21.569024 2026] [ssl:error] [pid 2763897:tid 2763897] (EAI 2)Name or service not known: [client 144.76.19.72:20314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:21.569047 2026] [ssl:error] [pid 2763897:tid 2763897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:21.606498 2026] [lsapi:warn] [pid 2767331:tid 2767331] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:21.621879 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:20322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:21.621903 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:22.879414 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:34058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:23.198099 2026] [security2:error] [pid 2769632:tid 2769632] [client 110.249.202.59:13366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsdMxsuehVvwlRRxR5WiAAAAC0"]
[Thu Jul 30 10:45:24.094729 2026] [ssl:error] [pid 2769295:tid 2769295] (70014)End of file found: [client 216.73.216.199:11978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:24.681930 2026] [ssl:error] [pid 2743478:tid 2743478] (EAI 2)Name or service not known: [client 144.76.19.72:20332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:24.681959 2026] [ssl:error] [pid 2743478:tid 2743478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:24.735091 2026] [ssl:error] [pid 2765111:tid 2765111] (EAI 2)Name or service not known: [client 144.76.19.72:20348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:24.735122 2026] [ssl:error] [pid 2765111:tid 2765111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:25.879457 2026] [authz_core:error] [pid 2743478:tid 2743478] [client 197.57.233.39:51766] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiologylondon.co.uk
[Thu Jul 30 10:45:25.881191 2026] [authz_core:error] [pid 2743478:tid 2743478] [client 197.57.233.39:51766] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiologylondon.co.uk
[Thu Jul 30 10:45:26.518021 2026] [core:error] [pid 2765110:tid 2765110] (13)Permission denied: [client 216.73.216.199:42068] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/cpu_slabs
[Thu Jul 30 10:45:27.573305 2026] [lsapi:warn] [pid 2763901:tid 2763901] [client 87.201.112.222:44867] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:27.744414 2026] [autoindex:error] [pid 2769524:tid 2769524] [client 191.232.199.39:1125] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:45:27.790165 2026] [ssl:error] [pid 2758627:tid 2758627] (EAI 2)Name or service not known: [client 144.76.19.72:20360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:27.790197 2026] [ssl:error] [pid 2758627:tid 2758627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:27.841511 2026] [ssl:error] [pid 2770656:tid 2770656] (EAI 2)Name or service not known: [client 144.76.19.72:20374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:27.841552 2026] [ssl:error] [pid 2770656:tid 2770656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:28.635706 2026] [core:error] [pid 2765110:tid 2765110] (13)Permission denied: [client 216.73.216.199:42068] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/usersize
[Thu Jul 30 10:45:28.936644 2026] [ssl:error] [pid 2765110:tid 2765110] (70014)End of file found: [client 216.73.216.199:42068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:29.452079 2026] [ssl:error] [pid 2771538:tid 2771538] (70014)End of file found: [client 216.73.216.199:35938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:29.760266 2026] [core:crit] [pid 2772203:tid 2772203] (13)Permission denied: [client 216.73.216.199:58812] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php72/root/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php72/root/root/' is executable
[Thu Jul 30 10:45:29.797245 2026] [security2:error] [pid 2758627:tid 2758627] [client 217.114.214.248:54754] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "unclaimedassets.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsdOeOi3eNYo73O1VmG7wAAABM"]
[Thu Jul 30 10:45:29.800102 2026] [lsapi:warn] [pid 2758627:tid 2758627] [client 217.114.214.248:54754] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:30.896471 2026] [ssl:error] [pid 2771496:tid 2771496] (EAI 2)Name or service not known: [client 144.76.19.72:40108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:30.896503 2026] [ssl:error] [pid 2771496:tid 2771496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:30.953602 2026] [ssl:error] [pid 2763839:tid 2763839] (EAI 2)Name or service not known: [client 144.76.19.72:40118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:30.953630 2026] [ssl:error] [pid 2763839:tid 2763839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:31.052948 2026] [core:error] [pid 2772203:tid 2772203] (13)Permission denied: [client 216.73.216.199:58812] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_io_end/cache_dma
[Thu Jul 30 10:45:31.739045 2026] [autoindex:error] [pid 2758726:tid 2758726] [client 191.232.199.39:40850] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:45:31.966456 2026] [core:error] [pid 2772203:tid 2772203] (13)Permission denied: [client 216.73.216.199:58812] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bud_item/objects
[Thu Jul 30 10:45:32.352503 2026] [lsapi:warn] [pid 2772148:tid 2772148] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:33.696424 2026] [autoindex:error] [pid 2767331:tid 2767331] [client 191.232.199.39:1667] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:45:34.040689 2026] [ssl:error] [pid 2759652:tid 2759652] (EAI 2)Name or service not known: [client 144.76.19.72:40120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:34.040721 2026] [ssl:error] [pid 2759652:tid 2759652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:34.095559 2026] [ssl:error] [pid 2772148:tid 2772148] (EAI 2)Name or service not known: [client 144.76.19.72:40136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:34.095598 2026] [ssl:error] [pid 2772148:tid 2772148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:36.508395 2026] [ssl:error] [pid 2772203:tid 2772203] (70014)End of file found: [client 216.73.216.199:58812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:37.019979 2026] [core:error] [pid 2765110:tid 2765110] (13)Permission denied: [client 216.73.216.199:59302] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_extent_status/cache_dma
[Thu Jul 30 10:45:37.182940 2026] [ssl:error] [pid 2762339:tid 2762339] (EAI 2)Name or service not known: [client 144.76.19.72:40140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:37.182976 2026] [ssl:error] [pid 2762339:tid 2762339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:37.241400 2026] [ssl:error] [pid 2765896:tid 2765896] (EAI 2)Name or service not known: [client 144.76.19.72:40144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:37.241433 2026] [ssl:error] [pid 2765896:tid 2765896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:38.172297 2026] [lsapi:warn] [pid 2762295:tid 2762295] [client 87.201.112.222:44868] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:38.212038 2026] [authz_core:error] [pid 2762339:tid 2762339] [client 66.249.66.33:61576] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:45:38.214698 2026] [authz_core:error] [pid 2762339:tid 2762339] [client 66.249.66.33:61576] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:45:38.642434 2026] [security2:error] [pid 2772148:tid 2772148] [client 47.128.44.152:39972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.purple-childcare.co.uk"] [uri "/robots.txt"] [unique_id "amsdQonWO5famg5oNfRm8wAAAA4"]
[Thu Jul 30 10:45:38.644895 2026] [ssl:error] [pid 2772876:tid 2772876] (70014)End of file found: [client 216.73.216.199:3349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:40.302324 2026] [ssl:error] [pid 2769295:tid 2769295] (EAI 2)Name or service not known: [client 144.76.19.72:28514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:40.302358 2026] [ssl:error] [pid 2769295:tid 2769295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:40.355775 2026] [ssl:error] [pid 2769322:tid 2769322] (EAI 2)Name or service not known: [client 144.76.19.72:28530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:40.355813 2026] [ssl:error] [pid 2769322:tid 2769322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:41.807984 2026] [security2:error] [pid 2743478:tid 2743478] [client 110.249.201.94:12134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsdRSWPqpcepsfxp3gCKAAAADw"]
[Thu Jul 30 10:45:42.894397 2026] [security2:error] [pid 2772203:tid 2772203] [client 114.119.146.111:43961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~15,104,19/request_format~html"] [unique_id "amsdRol9d-O9dmm-s3aNZQAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~15,104,19/request_format~html
[Thu Jul 30 10:45:43.193857 2026] [lsapi:warn] [pid 2769295:tid 2769295] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:43.320370 2026] [core:error] [pid 2769322:tid 2769322] (13)Permission denied: [client 216.73.216.199:15924] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/close_delay
[Thu Jul 30 10:45:43.409776 2026] [ssl:error] [pid 2770656:tid 2770656] (EAI 2)Name or service not known: [client 144.76.19.72:28540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:43.409805 2026] [ssl:error] [pid 2770656:tid 2770656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:43.461511 2026] [ssl:error] [pid 2743478:tid 2743478] (EAI 2)Name or service not known: [client 144.76.19.72:28554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:43.461544 2026] [ssl:error] [pid 2743478:tid 2743478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:43.930253 2026] [security2:error] [pid 2770656:tid 2770656] [client 114.119.146.111:43971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~15,104,19/request_format~html"] [unique_id "amsdRx_wRH0L7lH15K9sWQAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~15,104,19/request_format~html
[Thu Jul 30 10:45:44.874427 2026] [core:error] [pid 2773178:tid 2773178] [client 66.249.64.172:59861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:45:44.874501 2026] [core:error] [pid 2773178:tid 2773178] [client 66.249.64.172:59861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:45:45.324145 2026] [security2:error] [pid 2773179:tid 2773179] [client 110.249.201.71:46710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/403.shtml"] [unique_id "amsdSYPN_0zhYMTxXqo2XAAAAC4"]
[Thu Jul 30 10:45:45.766383 2026] [ssl:error] [pid 2769322:tid 2769322] (70014)End of file found: [client 216.73.216.199:15924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:46.067338 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:18477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:46.515199 2026] [ssl:error] [pid 2773214:tid 2773214] (EAI 2)Name or service not known: [client 144.76.19.72:28568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:46.515240 2026] [ssl:error] [pid 2773214:tid 2773214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:46.536396 2026] [security2:error] [pid 2773213:tid 2773213] [client 85.208.96.206:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/robots.txt"] [unique_id "amsdSqFviE9lEGopyqrzYwAAADA"]
[Thu Jul 30 10:45:46.568658 2026] [ssl:error] [pid 2773216:tid 2773216] (EAI 2)Name or service not known: [client 144.76.19.72:28582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:46.568695 2026] [ssl:error] [pid 2773216:tid 2773216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:47.577399 2026] [core:error] [pid 2766396:tid 2766396] (13)Permission denied: [client 216.73.216.199:3760] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS2/close_delay
[Thu Jul 30 10:45:48.525001 2026] [core:error] [pid 2758726:tid 2758726] [client 66.249.66.194:50580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:45:48.525032 2026] [core:error] [pid 2758726:tid 2758726] [client 66.249.66.194:50580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:45:48.528398 2026] [core:error] [pid 2763624:tid 2763624] [client 66.249.66.67:51567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:45:48.528419 2026] [core:error] [pid 2763624:tid 2763624] [client 66.249.66.67:51567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:45:48.741448 2026] [lsapi:warn] [pid 2765152:tid 2765152] [client 87.201.112.222:23199] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:48.791357 2026] [ssl:error] [pid 2766396:tid 2766396] (70014)End of file found: [client 216.73.216.199:3760] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:49.620887 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:39760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:49.620916 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:49.701899 2026] [ssl:error] [pid 2765152:tid 2765152] (EAI 2)Name or service not known: [client 144.76.19.72:39768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:49.701934 2026] [ssl:error] [pid 2765152:tid 2765152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:51.148977 2026] [autoindex:error] [pid 2762339:tid 2762339] [client 191.232.199.39:35989] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:45:52.108413 2026] [ssl:error] [pid 2773214:tid 2773214] (70014)End of file found: [client 216.73.216.199:61105] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:52.408826 2026] [ssl:error] [pid 2762295:tid 2762295] (70014)End of file found: [client 216.73.216.199:22261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:52.455423 2026] [security2:error] [pid 2763839:tid 2763839] [client 85.208.96.209:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/category/race-reports/"] [unique_id "amsdUKKxgsiXB8PPCH5z6AAAACg"]
[Thu Jul 30 10:45:52.761592 2026] [ssl:error] [pid 2762339:tid 2762339] (EAI 2)Name or service not known: [client 144.76.19.72:39782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:52.761619 2026] [ssl:error] [pid 2762339:tid 2762339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:52.818477 2026] [ssl:error] [pid 2765152:tid 2765152] (EAI 2)Name or service not known: [client 144.76.19.72:39794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:52.818508 2026] [ssl:error] [pid 2765152:tid 2765152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:53.808185 2026] [security2:error] [pid 2771538:tid 2771538] [client 43.173.1.57:41716] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amsdUaXgLZEqRn3E3-QF3AAAAAc"]
[Thu Jul 30 10:45:53.857313 2026] [lsapi:warn] [pid 2773178:tid 2773178] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:45:54.538890 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:9151] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS2/close_delay
[Thu Jul 30 10:45:54.611285 2026] [security2:error] [pid 2763839:tid 2763839] [client 185.191.171.16:63208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9314.0/prev_next,prev.html"] [unique_id "amsdUqKxgsiXB8PPCH5z6QAAACg"]
[Thu Jul 30 10:45:54.838799 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:9151] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/remote_node_defrag_ratio
[Thu Jul 30 10:45:55.461827 2026] [ssl:error] [pid 2763624:tid 2763624] (70014)End of file found: [client 216.73.216.199:9151] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:55.871926 2026] [ssl:error] [pid 2771538:tid 2771538] (EAI 2)Name or service not known: [client 144.76.19.72:39804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:55.871960 2026] [ssl:error] [pid 2771538:tid 2771538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:55.927761 2026] [ssl:error] [pid 2773178:tid 2773178] (EAI 2)Name or service not known: [client 144.76.19.72:39806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:55.927797 2026] [ssl:error] [pid 2773178:tid 2773178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:57.603827 2026] [security2:error] [pid 2773178:tid 2773178] [client 170.106.113.159:52084] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "inrc.org.uk"] [uri "/"] [unique_id "amsdVVUMX6HFGljN_NBEcQAAACw"]
[Thu Jul 30 10:45:58.497153 2026] [ssl:error] [pid 2769321:tid 2769321] (70014)End of file found: [client 216.73.216.199:2596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:45:58.982786 2026] [ssl:error] [pid 2773715:tid 2773715] (EAI 2)Name or service not known: [client 144.76.19.72:39810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:58.982813 2026] [ssl:error] [pid 2773715:tid 2773715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:59.039259 2026] [ssl:error] [pid 2773213:tid 2773213] (EAI 2)Name or service not known: [client 144.76.19.72:39818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:45:59.039299 2026] [ssl:error] [pid 2773213:tid 2773213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:45:59.978726 2026] [lsapi:warn] [pid 2752653:tid 2752653] [client 87.201.112.222:23207] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:00.910866 2026] [ssl:error] [pid 2769629:tid 2769629] (70014)End of file found: [client 216.73.216.199:45036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:01.491779 2026] [security2:error] [pid 2773927:tid 2773927] [client 85.208.96.194:43736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/50-things-to-be-curious-about"] [unique_id "amsdWStQ_abRLsOOi0i-7gAAABM"]
[Thu Jul 30 10:46:02.134884 2026] [ssl:error] [pid 2773927:tid 2773927] (EAI 2)Name or service not known: [client 144.76.19.72:38034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:02.134924 2026] [ssl:error] [pid 2773927:tid 2773927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:02.189829 2026] [ssl:error] [pid 2769322:tid 2769322] (EAI 2)Name or service not known: [client 144.76.19.72:38048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:02.189865 2026] [ssl:error] [pid 2769322:tid 2769322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:02.873509 2026] [core:error] [pid 2774021:tid 2774021] [client 66.249.64.171:64181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:02.873553 2026] [core:error] [pid 2774021:tid 2774021] [client 66.249.64.171:64181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:04.663153 2026] [lsapi:warn] [pid 2773214:tid 2773214] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:04.835490 2026] [core:error] [pid 2773928:tid 2773928] (13)Permission denied: [client 216.73.216.199:25478] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_generic/drivers/pci:ata_generic/bind
[Thu Jul 30 10:46:05.286166 2026] [ssl:error] [pid 2774020:tid 2774020] (EAI 2)Name or service not known: [client 144.76.19.72:38058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:05.286208 2026] [ssl:error] [pid 2774020:tid 2774020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:05.340918 2026] [ssl:error] [pid 2765111:tid 2765111] (EAI 2)Name or service not known: [client 144.76.19.72:38060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:05.340950 2026] [ssl:error] [pid 2765111:tid 2765111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:05.438728 2026] [ssl:error] [pid 2773928:tid 2773928] (70014)End of file found: [client 216.73.216.199:25478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:07.247329 2026] [ssl:error] [pid 2769635:tid 2769635] (70014)End of file found: [client 216.73.216.199:22521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:07.543490 2026] [ssl:error] [pid 2771496:tid 2771496] (70014)End of file found: [client 216.73.216.199:50529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:08.413123 2026] [ssl:error] [pid 2771538:tid 2771538] (EAI 2)Name or service not known: [client 144.76.19.72:38064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:08.413168 2026] [ssl:error] [pid 2771538:tid 2771538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:08.468887 2026] [ssl:error] [pid 2769295:tid 2769295] (EAI 2)Name or service not known: [client 144.76.19.72:38072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:08.468917 2026] [ssl:error] [pid 2769295:tid 2769295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:08.920822 2026] [autoindex:error] [pid 2774021:tid 2774021] [client 191.232.199.39:40838] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:46:09.598986 2026] [lsapi:warn] [pid 2769295:tid 2769295] [client 87.201.112.222:44883] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:11.485246 2026] [authz_core:error] [pid 2773213:tid 2773213] [client 216.73.216.199:33610] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/lve/modlscapi/buildlsphp/php.ini
[Thu Jul 30 10:46:11.522110 2026] [ssl:error] [pid 2769321:tid 2769321] (EAI 2)Name or service not known: [client 144.76.19.72:50902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:11.522137 2026] [ssl:error] [pid 2769321:tid 2769321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:11.576972 2026] [ssl:error] [pid 2765896:tid 2765896] (EAI 2)Name or service not known: [client 144.76.19.72:50916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:11.577004 2026] [ssl:error] [pid 2765896:tid 2765896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:11.815634 2026] [core:error] [pid 2773213:tid 2773213] (13)Permission denied: [client 216.73.216.199:33610] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS2/close_delay
[Thu Jul 30 10:46:12.916550 2026] [ssl:error] [pid 2769523:tid 2769523] (70014)End of file found: [client 216.73.216.199:35145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:13.922815 2026] [core:error] [pid 2773213:tid 2773213] (13)Permission denied: [client 216.73.216.199:33610] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/container/drivers_probe
[Thu Jul 30 10:46:14.289961 2026] [security2:error] [pid 2769635:tid 2769635] [client 150.5.134.214:41231] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdZm-b-la_S2lImdMUqwAAADE"]
[Thu Jul 30 10:46:14.290011 2026] [security2:error] [pid 2769635:tid 2769635] [client 150.5.134.214:41231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdZm-b-la_S2lImdMUqwAAADE"]
[Thu Jul 30 10:46:14.290262 2026] [security2:error] [pid 2769635:tid 2769635] [client 150.5.134.214:41231] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdZm-b-la_S2lImdMUqwAAADE"]
[Thu Jul 30 10:46:14.530022 2026] [ssl:error] [pid 2773213:tid 2773213] (70014)End of file found: [client 216.73.216.199:33610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:14.633308 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:50932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:14.633342 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:14.693079 2026] [ssl:error] [pid 2771496:tid 2771496] (EAI 2)Name or service not known: [client 144.76.19.72:50940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:14.693115 2026] [ssl:error] [pid 2771496:tid 2771496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:15.440388 2026] [lsapi:warn] [pid 2761282:tid 2761282] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:16.131745 2026] [core:error] [pid 2773216:tid 2773216] [client 66.249.64.170:38349] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:16.131775 2026] [core:error] [pid 2773216:tid 2773216] [client 66.249.64.170:38349] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:16.141467 2026] [access_compat:error] [pid 2769573:tid 2769573] [client 145.223.130.83:42374] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/spider-man-3
[Thu Jul 30 10:46:16.141564 2026] [access_compat:error] [pid 2769573:tid 2769573] [client 145.223.130.83:42374] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:46:17.354137 2026] [autoindex:error] [pid 2769635:tid 2769635] [client 191.232.199.39:40876] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:46:17.528792 2026] [security2:error] [pid 2773214:tid 2773214] [client 47.128.43.44:16650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rediscoveredgarden.co.uk"] [uri "/robots.txt"] [unique_id "amsdaRkCzXnp3gpC9oNr5gAAADI"]
[Thu Jul 30 10:46:17.749592 2026] [ssl:error] [pid 2769573:tid 2769573] (EAI 2)Name or service not known: [client 144.76.19.72:50952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:17.749622 2026] [ssl:error] [pid 2769573:tid 2769573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:17.804444 2026] [ssl:error] [pid 2774023:tid 2774023] (EAI 2)Name or service not known: [client 144.76.19.72:50964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:17.804481 2026] [ssl:error] [pid 2774023:tid 2774023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:17.855226 2026] [ssl:error] [pid 2773215:tid 2773215] (70014)End of file found: [client 216.73.216.199:38052] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:17.869151 2026] [security2:error] [pid 2769572:tid 2769572] [client 112.203.168.48:37132] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdadd-UJuuS25AxWXuKgAAABw"]
[Thu Jul 30 10:46:17.869207 2026] [security2:error] [pid 2769572:tid 2769572] [client 112.203.168.48:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdadd-UJuuS25AxWXuKgAAABw"]
[Thu Jul 30 10:46:17.869431 2026] [security2:error] [pid 2769572:tid 2769572] [client 112.203.168.48:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdadd-UJuuS25AxWXuKgAAABw"]
[Thu Jul 30 10:46:18.297265 2026] [core:error] [pid 2765110:tid 2765110] [client 66.249.66.169:61569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:18.297297 2026] [core:error] [pid 2765110:tid 2765110] [client 66.249.66.169:61569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:19.961785 2026] [ssl:error] [pid 2771496:tid 2771496] (70014)End of file found: [client 216.73.216.199:7767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:20.015397 2026] [autoindex:error] [pid 2773715:tid 2773715] [client 191.232.199.39:1383] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:46:20.342679 2026] [lsapi:warn] [pid 2773178:tid 2773178] [client 87.201.112.222:58743] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:20.859980 2026] [ssl:error] [pid 2771538:tid 2771538] (EAI 2)Name or service not known: [client 144.76.19.72:51846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:20.860008 2026] [ssl:error] [pid 2771538:tid 2771538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:20.913203 2026] [ssl:error] [pid 2770941:tid 2770941] (EAI 2)Name or service not known: [client 144.76.19.72:51848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:20.913239 2026] [ssl:error] [pid 2770941:tid 2770941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:20.929762 2026] [authz_core:error] [pid 2772202:tid 2772202] [client 66.249.66.33:55300] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:46:20.932406 2026] [authz_core:error] [pid 2772202:tid 2772202] [client 66.249.66.33:55300] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:46:21.957081 2026] [security2:error] [pid 2773213:tid 2773213] [client 178.34.162.212:4049] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdbaFviE9lEGopyqrzeAAAADA"]
[Thu Jul 30 10:46:21.957137 2026] [security2:error] [pid 2773213:tid 2773213] [client 178.34.162.212:4049] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdbaFviE9lEGopyqrzeAAAADA"]
[Thu Jul 30 10:46:21.957402 2026] [security2:error] [pid 2773213:tid 2773213] [client 178.34.162.212:4049] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdbaFviE9lEGopyqrzeAAAADA"]
[Thu Jul 30 10:46:22.977251 2026] [core:error] [pid 2770656:tid 2770656] (13)Permission denied: [client 216.73.216.199:54716] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/rtc/rtc0/device/subsystem/drivers_probe
[Thu Jul 30 10:46:23.578669 2026] [ssl:error] [pid 2770656:tid 2770656] (70014)End of file found: [client 216.73.216.199:54716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:23.969548 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:51850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:23.969578 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:24.023594 2026] [ssl:error] [pid 2770941:tid 2770941] (EAI 2)Name or service not known: [client 144.76.19.72:51860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:24.023619 2026] [ssl:error] [pid 2770941:tid 2770941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:24.353156 2026] [core:error] [pid 2773715:tid 2773715] [client 66.249.66.167:45188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:24.353182 2026] [core:error] [pid 2773715:tid 2773715] [client 66.249.66.167:45188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:25.879534 2026] [core:error] [pid 2773715:tid 2773715] (13)Permission denied: [client 216.73.216.199:17671] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS2/close_delay
[Thu Jul 30 10:46:26.166190 2026] [lsapi:warn] [pid 2771496:tid 2771496] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:27.075459 2026] [ssl:error] [pid 2769573:tid 2769573] (EAI 2)Name or service not known: [client 144.76.19.72:51874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:27.075495 2026] [ssl:error] [pid 2769573:tid 2769573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:27.131295 2026] [ssl:error] [pid 2773179:tid 2773179] (EAI 2)Name or service not known: [client 144.76.19.72:51880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:27.131337 2026] [ssl:error] [pid 2773179:tid 2773179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:28.485698 2026] [security2:error] [pid 2770861:tid 2770861] [client 20.171.55.167:8898] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.solitons.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsddPJEH47PsGiy2h3liQAAABg"]
[Thu Jul 30 10:46:28.485916 2026] [security2:error] [pid 2770861:tid 2770861] [client 20.171.55.167:8898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.solitons.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsddPJEH47PsGiy2h3liQAAABg"]
[Thu Jul 30 10:46:28.486190 2026] [security2:error] [pid 2770861:tid 2770861] [client 20.171.55.167:8898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.solitons.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsddPJEH47PsGiy2h3liQAAABg"]
[Thu Jul 30 10:46:28.711231 2026] [ssl:error] [pid 2769295:tid 2769295] (70014)End of file found: [client 216.73.216.199:43487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:30.189675 2026] [ssl:error] [pid 2769485:tid 2769485] (EAI 2)Name or service not known: [client 144.76.19.72:26910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:30.189713 2026] [ssl:error] [pid 2769485:tid 2769485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:30.242156 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:26922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:30.242201 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:31.113718 2026] [security2:error] [pid 2773715:tid 2773715] [client 216.73.216.199:17671] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/sudo.conf"] [unique_id "amsdd74q1468wfJCllE_dQAAABk"]
[Thu Jul 30 10:46:31.113957 2026] [security2:error] [pid 2773715:tid 2773715] [client 216.73.216.199:17671] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/sudo.conf"] [unique_id "amsdd74q1468wfJCllE_dQAAABk"]
[Thu Jul 30 10:46:31.114178 2026] [security2:error] [pid 2773715:tid 2773715] [client 216.73.216.199:17671] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/sudo.conf"] [unique_id "amsdd74q1468wfJCllE_dQAAABk"]
[Thu Jul 30 10:46:32.710136 2026] [autoindex:error] [pid 2769573:tid 2769573] [client 191.232.199.39:1385] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:46:32.874161 2026] [core:error] [pid 2773214:tid 2773214] [client 66.249.66.167:53604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:32.874190 2026] [core:error] [pid 2773214:tid 2773214] [client 66.249.66.167:53604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:33.295666 2026] [ssl:error] [pid 2773215:tid 2773215] (EAI 2)Name or service not known: [client 144.76.19.72:26928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:33.295714 2026] [ssl:error] [pid 2773215:tid 2773215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:33.347254 2026] [ssl:error] [pid 2770861:tid 2770861] (EAI 2)Name or service not known: [client 144.76.19.72:26944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:33.347281 2026] [ssl:error] [pid 2770861:tid 2770861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:33.827222 2026] [ssl:error] [pid 2773715:tid 2773715] (70014)End of file found: [client 216.73.216.199:17671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:35.186489 2026] [core:error] [pid 2771538:tid 2771538] [client 66.249.64.170:50802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:35.186513 2026] [core:error] [pid 2771538:tid 2771538] [client 66.249.64.170:50802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:36.403983 2026] [ssl:error] [pid 2770656:tid 2770656] (EAI 2)Name or service not known: [client 144.76.19.72:26950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:36.404018 2026] [ssl:error] [pid 2770656:tid 2770656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:36.456696 2026] [ssl:error] [pid 2773216:tid 2773216] (EAI 2)Name or service not known: [client 144.76.19.72:26962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:36.456729 2026] [ssl:error] [pid 2773216:tid 2773216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:36.537001 2026] [core:error] [pid 2770941:tid 2770941] (13)Permission denied: [client 216.73.216.199:14585] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_system_zone/shrink
[Thu Jul 30 10:46:36.874008 2026] [lsapi:warn] [pid 2770656:tid 2770656] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:37.139017 2026] [core:error] [pid 2770941:tid 2770941] (13)Permission denied: [client 216.73.216.199:14585] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip4-frags/hwcache_align
[Thu Jul 30 10:46:38.777842 2026] [security2:error] [pid 2769635:tid 2769635] [client 49.234.192.248:60952] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampman.com"] [uri "/"] [unique_id "amsdfm-b-la_S2lImdMUsgAAADE"]
[Thu Jul 30 10:46:39.538656 2026] [ssl:error] [pid 2775381:tid 2775381] (EAI 2)Name or service not known: [client 144.76.19.72:26976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:39.538705 2026] [ssl:error] [pid 2775381:tid 2775381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:39.594914 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:39688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:39.594954 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:40.477042 2026] [lsapi:warn] [pid 2775380:tid 2775380] [client 34.124.151.255:60488] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:46:40.477091 2026] [lsapi:warn] [pid 2775380:tid 2775380] [client 34.124.151.255:60488] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:46:41.656043 2026] [ssl:error] [pid 2766396:tid 2766396] (70014)End of file found: [client 216.73.216.199:12730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:42.347152 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:30355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:42.646597 2026] [ssl:error] [pid 2769573:tid 2769573] (EAI 2)Name or service not known: [client 144.76.19.72:39692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:42.646623 2026] [ssl:error] [pid 2769573:tid 2769573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:42.698247 2026] [ssl:error] [pid 2773216:tid 2773216] (EAI 2)Name or service not known: [client 144.76.19.72:39700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:42.698275 2026] [ssl:error] [pid 2773216:tid 2773216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:44.676173 2026] [ssl:error] [pid 2773883:tid 2773883] (70014)End of file found: [client 216.73.216.199:11488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:45.753466 2026] [ssl:error] [pid 2773179:tid 2773179] (EAI 2)Name or service not known: [client 144.76.19.72:39712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:45.753494 2026] [ssl:error] [pid 2773179:tid 2773179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:45.806750 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:39728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:45.806776 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:46.761031 2026] [core:error] [pid 2773178:tid 2773178] [client 66.249.66.194:64396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:46.761061 2026] [core:error] [pid 2773178:tid 2773178] [client 66.249.66.194:64396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:47.401431 2026] [lsapi:warn] [pid 2775668:tid 2775668] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:48.000215 2026] [core:error] [pid 2770941:tid 2770941] (13)Permission denied: [client 216.73.216.199:34693] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/dovecot
[Thu Jul 30 10:46:48.865974 2026] [ssl:error] [pid 2766396:tid 2766396] (EAI 2)Name or service not known: [client 144.76.19.72:39732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:48.866007 2026] [ssl:error] [pid 2766396:tid 2766396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:48.920457 2026] [ssl:error] [pid 2759652:tid 2759652] (EAI 2)Name or service not known: [client 144.76.19.72:39744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:48.920486 2026] [ssl:error] [pid 2759652:tid 2759652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:48.986024 2026] [security2:error] [pid 2767331:tid 2767331] [client 74.7.241.34:57720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.londonkinesiology.com"] [uri "/"] [unique_id "amsdiA6FmuHv1LmqDaTZdgAAABs"]
[Thu Jul 30 10:46:50.830436 2026] [core:error] [pid 2773215:tid 2773215] [client 66.249.64.170:34802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:50.830465 2026] [core:error] [pid 2773215:tid 2773215] [client 66.249.64.170:34802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:51.617444 2026] [ssl:error] [pid 2770941:tid 2770941] (70014)End of file found: [client 216.73.216.199:34693] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:51.931704 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:25562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:51.976209 2026] [ssl:error] [pid 2773215:tid 2773215] (EAI 2)Name or service not known: [client 144.76.19.72:24736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:51.976241 2026] [ssl:error] [pid 2773215:tid 2773215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:52.005237 2026] [core:error] [pid 2770656:tid 2770656] [client 66.249.66.8:43963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:52.005265 2026] [core:error] [pid 2770656:tid 2770656] [client 66.249.66.8:43963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:46:52.031837 2026] [ssl:error] [pid 2769629:tid 2769629] (EAI 2)Name or service not known: [client 144.76.19.72:24752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:52.031880 2026] [ssl:error] [pid 2769629:tid 2769629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:52.392349 2026] [autoindex:error] [pid 2773883:tid 2773883] [client 191.232.199.39:32956] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:46:54.367738 2026] [security2:error] [pid 2770656:tid 2770656] [client 114.119.150.190:45487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2017-2018/SP17-18_A20-Philippines-2015-2017.pdf&sa=U"] [unique_id "amsdjh_wRH0L7lH15K9seQAAAA0"], referer: https://www.shelterprojects.org/shelterprojects2017-2018/SP17-18_A20-Philippines-2015-2017.pdf&sa=U
[Thu Jul 30 10:46:55.088235 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:24768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:55.088270 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:55.144085 2026] [ssl:error] [pid 2775381:tid 2775381] (EAI 2)Name or service not known: [client 144.76.19.72:24776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:55.144111 2026] [ssl:error] [pid 2775381:tid 2775381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:55.418230 2026] [security2:error] [pid 2775668:tid 2775668] [client 114.119.136.76:51425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/sitemap-pt-post-2006-06.xml"] [unique_id "amsdjxc4Q9fU0fLsr71y4AAAAAs"], referer: http://www.localhero.org.uk/sitemap-pt-post-2006-06.xml
[Thu Jul 30 10:46:55.854152 2026] [ssl:error] [pid 2759652:tid 2759652] (70014)End of file found: [client 216.73.216.199:45715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:46:58.139294 2026] [lsapi:warn] [pid 2771538:tid 2771538] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:46:58.202515 2026] [ssl:error] [pid 2775668:tid 2775668] (EAI 2)Name or service not known: [client 144.76.19.72:24784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:58.202578 2026] [ssl:error] [pid 2775668:tid 2775668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:46:58.259055 2026] [ssl:error] [pid 2763839:tid 2763839] (EAI 2)Name or service not known: [client 144.76.19.72:24794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:46:58.259103 2026] [ssl:error] [pid 2763839:tid 2763839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:00.998125 2026] [core:error] [pid 2769573:tid 2769573] [client 66.249.66.67:44158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:00.998150 2026] [core:error] [pid 2769573:tid 2769573] [client 66.249.66.67:44158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:01.004263 2026] [core:error] [pid 2763839:tid 2763839] [client 66.249.66.68:56396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:01.004284 2026] [core:error] [pid 2763839:tid 2763839] [client 66.249.66.68:56396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:01.311599 2026] [ssl:error] [pid 2772202:tid 2772202] (EAI 2)Name or service not known: [client 144.76.19.72:44768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:01.311636 2026] [ssl:error] [pid 2772202:tid 2772202] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:01.368489 2026] [ssl:error] [pid 2759652:tid 2759652] (EAI 2)Name or service not known: [client 144.76.19.72:44780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:01.368538 2026] [ssl:error] [pid 2759652:tid 2759652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:02.220061 2026] [ssl:error] [pid 2770861:tid 2770861] (70014)End of file found: [client 216.73.216.199:47748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:02.263819 2026] [security2:error] [pid 2773215:tid 2773215] [client 85.208.96.204:47000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/garland-edward-eddie-pittman"] [unique_id "amsdlrtUuCz5bq7ZqemNZgAAADM"]
[Thu Jul 30 10:47:03.446992 2026] [security2:error] [pid 2772203:tid 2772203] [client 111.230.233.46:51918] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "familyjames.com"] [uri "/"] [unique_id "amsdl4l9d-O9dmm-s3aNgwAAACM"]
[Thu Jul 30 10:47:03.467842 2026] [security2:error] [pid 2765151:tid 2765151] [client 20.171.55.167:1701] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.hugoashmore.org"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsdl6hbiCKupDmUtj2PvAAAAAU"]
[Thu Jul 30 10:47:03.468018 2026] [security2:error] [pid 2765151:tid 2765151] [client 20.171.55.167:1701] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.hugoashmore.org"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsdl6hbiCKupDmUtj2PvAAAAAU"]
[Thu Jul 30 10:47:03.502677 2026] [security2:error] [pid 2765151:tid 2765151] [client 20.171.55.167:1701] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.hugoashmore.org"] [uri "/403.shtml"] [unique_id "amsdl6hbiCKupDmUtj2PvAAAAAU"]
[Thu Jul 30 10:47:04.426814 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:44788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:04.426850 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:04.483228 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:44802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:04.483296 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:06.142288 2026] [ssl:error] [pid 2773214:tid 2773214] (70014)End of file found: [client 216.73.216.199:32679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:06.401571 2026] [core:error] [pid 2765151:tid 2765151] [client 66.249.64.170:58532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:06.401610 2026] [core:error] [pid 2765151:tid 2765151] [client 66.249.64.170:58532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:07.498175 2026] [security2:error] [pid 2773883:tid 2773883] [client 43.164.192.151:45126] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "broadbentandsmith.com"] [uri "/"] [unique_id "amsdm8J2HnQJmpat5VTK3AAAAA4"]
[Thu Jul 30 10:47:07.557283 2026] [core:error] [pid 2770861:tid 2770861] (13)Permission denied: [client 216.73.216.199:56116] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/order
[Thu Jul 30 10:47:07.588724 2026] [ssl:error] [pid 2775380:tid 2775380] (EAI 2)Name or service not known: [client 144.76.19.72:44816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:07.588796 2026] [ssl:error] [pid 2775380:tid 2775380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:07.706549 2026] [ssl:error] [pid 2773883:tid 2773883] (EAI 2)Name or service not known: [client 144.76.19.72:44830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:07.706605 2026] [ssl:error] [pid 2773883:tid 2773883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:07.823621 2026] [security2:error] [pid 2765110:tid 2765110] [client 43.153.96.79:42022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.baketastic.co.uk"] [uri "/"] [unique_id "amsdmxTNmXhOXIxTlVGDwQAAAAM"]
[Thu Jul 30 10:47:09.063350 2026] [lsapi:warn] [pid 2776779:tid 2776779] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:47:09.872223 2026] [ssl:error] [pid 2775668:tid 2775668] (70014)End of file found: [client 216.73.216.199:11480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:10.150448 2026] [security2:error] [pid 2776827:tid 2776827] [client 114.119.146.18:39787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/SI/devirmail.txt"] [unique_id "amsdnvFfzwwgsbD669AnnAAAADU"], referer: http://www.magic-cookie.co.uk/SI/index.html
[Thu Jul 30 10:47:10.286961 2026] [security2:error] [pid 2773883:tid 2773883] [client 43.164.192.151:52560] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "broadbentandsmith.com"] [uri "/"] [unique_id "amsdnsJ2HnQJmpat5VTK3wAAAA4"], referer: http://broadbentandsmith.com
[Thu Jul 30 10:47:10.313874 2026] [security2:error] [pid 2776123:tid 2776123] [client 43.153.96.79:40996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amsdnjLAVadI_dpewTrXPwAAABI"], referer: http://www.baketastic.co.uk
[Thu Jul 30 10:47:10.647795 2026] [security2:error] [pid 2776827:tid 2776827] [client 185.191.171.5:58084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3350.0.html"] [unique_id "amsdnvFfzwwgsbD669AnnQAAADU"]
[Thu Jul 30 10:47:10.792118 2026] [ssl:error] [pid 2773215:tid 2773215] (EAI 2)Name or service not known: [client 144.76.19.72:28222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:10.792145 2026] [ssl:error] [pid 2773215:tid 2773215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:10.855774 2026] [ssl:error] [pid 2772203:tid 2772203] (EAI 2)Name or service not known: [client 144.76.19.72:28230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:10.855825 2026] [ssl:error] [pid 2772203:tid 2772203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:11.981786 2026] [core:error] [pid 2770861:tid 2770861] (13)Permission denied: [client 216.73.216.199:56116] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/trustedmailhosts
[Thu Jul 30 10:47:12.289118 2026] [security2:error] [pid 2770861:tid 2770861] [client 216.73.216.199:56116] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/namespace.conf"] [unique_id "amsdoPJEH47PsGiy2h3ltAAAABg"]
[Thu Jul 30 10:47:12.289514 2026] [security2:error] [pid 2770861:tid 2770861] [client 216.73.216.199:56116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/namespace.conf"] [unique_id "amsdoPJEH47PsGiy2h3ltAAAABg"]
[Thu Jul 30 10:47:12.289846 2026] [security2:error] [pid 2770861:tid 2770861] [client 216.73.216.199:56116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/namespace.conf"] [unique_id "amsdoPJEH47PsGiy2h3ltAAAABg"]
[Thu Jul 30 10:47:13.611056 2026] [security2:error] [pid 2776897:tid 2776897] [client 190.150.105.140:36285] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdoUYjKM8QQa09gvZdiQAAAD8"]
[Thu Jul 30 10:47:13.611121 2026] [security2:error] [pid 2776897:tid 2776897] [client 190.150.105.140:36285] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdoUYjKM8QQa09gvZdiQAAAD8"]
[Thu Jul 30 10:47:13.611404 2026] [security2:error] [pid 2776897:tid 2776897] [client 190.150.105.140:36285] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdoUYjKM8QQa09gvZdiQAAAD8"]
[Thu Jul 30 10:47:13.898832 2026] [lsapi:warn] [pid 2759652:tid 2759652] [client 176.29.111.99:13024] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.brodie-engineering.co.uk/vacancies
[Thu Jul 30 10:47:13.898891 2026] [lsapi:warn] [pid 2759652:tid 2759652] [client 176.29.111.99:13024] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.brodie-engineering.co.uk/vacancies
[Thu Jul 30 10:47:13.912610 2026] [ssl:error] [pid 2776825:tid 2776825] (EAI 2)Name or service not known: [client 144.76.19.72:28246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:13.912642 2026] [ssl:error] [pid 2776825:tid 2776825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:13.970521 2026] [ssl:error] [pid 2769635:tid 2769635] (EAI 2)Name or service not known: [client 144.76.19.72:28262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:13.970545 2026] [ssl:error] [pid 2769635:tid 2769635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:14.110768 2026] [ssl:error] [pid 2770861:tid 2770861] (70014)End of file found: [client 216.73.216.199:56116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:15.385947 2026] [ssl:error] [pid 2773215:tid 2773215] (70014)End of file found: [client 216.73.216.199:62298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:15.443897 2026] [security2:error] [pid 2769635:tid 2769635] [client 113.162.184.137:57392] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdo2-b-la_S2lImdMUwgAAADE"]
[Thu Jul 30 10:47:15.443949 2026] [security2:error] [pid 2769635:tid 2769635] [client 113.162.184.137:57392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdo2-b-la_S2lImdMUwgAAADE"]
[Thu Jul 30 10:47:15.444232 2026] [security2:error] [pid 2769635:tid 2769635] [client 113.162.184.137:57392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdo2-b-la_S2lImdMUwgAAADE"]
[Thu Jul 30 10:47:16.529962 2026] [ssl:error] [pid 2776825:tid 2776825] (70014)End of file found: [client 216.73.216.199:58635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:16.565912 2026] [security2:error] [pid 2775347:tid 2775347] [client 51.195.215.67:38940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thesilkshed.co.uk"] [uri "/robots.txt"] [unique_id "amsdpItDYBKIUnmiP8Lu8wAAAAY"]
[Thu Jul 30 10:47:17.023883 2026] [ssl:error] [pid 2776739:tid 2776739] (EAI 2)Name or service not known: [client 144.76.19.72:28264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:17.023935 2026] [ssl:error] [pid 2776739:tid 2776739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:17.081790 2026] [ssl:error] [pid 2775380:tid 2775380] (EAI 2)Name or service not known: [client 144.76.19.72:28280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:17.081822 2026] [ssl:error] [pid 2775380:tid 2775380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:17.606900 2026] [security2:error] [pid 2765151:tid 2765151] [client 198.244.226.11:17976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "amsdpahbiCKupDmUtj2PygAAAAU"]
[Thu Jul 30 10:47:18.141289 2026] [security2:error] [pid 2773214:tid 2773214] [client 110.249.202.119:38364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/robots.txt"] [unique_id "amsdphkCzXnp3gpC9oNsMQAAADI"]
[Thu Jul 30 10:47:19.643593 2026] [lsapi:warn] [pid 2758788:tid 2758788] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:47:20.163998 2026] [security2:error] [pid 2775668:tid 2775668] [client 14.231.238.181:49995] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdqBc4Q9fU0fLsr71y9QAAAAs"]
[Thu Jul 30 10:47:20.164052 2026] [security2:error] [pid 2775668:tid 2775668] [client 14.231.238.181:49995] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsdqBc4Q9fU0fLsr71y9QAAAAs"]
[Thu Jul 30 10:47:20.164352 2026] [security2:error] [pid 2775668:tid 2775668] [client 14.231.238.181:49995] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsdqBc4Q9fU0fLsr71y9QAAAAs"]
[Thu Jul 30 10:47:20.175257 2026] [ssl:error] [pid 2774023:tid 2774023] (EAI 2)Name or service not known: [client 144.76.19.72:34988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:20.175313 2026] [ssl:error] [pid 2774023:tid 2774023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:20.226522 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:34990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:20.226553 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:20.456767 2026] [ssl:error] [pid 2773178:tid 2773178] (70014)End of file found: [client 216.73.216.199:1452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:20.775487 2026] [security2:error] [pid 2775380:tid 2775380] [client 114.119.130.105:23301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "baketastic.co.uk"] [uri "/robots.txt"] [unique_id "amsdqNNjCLsu4_1gmYfB3QAAAAk"], referer: https://baketastic.co.uk/robots.txt
[Thu Jul 30 10:47:21.443845 2026] [security2:error] [pid 2773215:tid 2773215] [client 114.119.142.20:37859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~17,15,30/request_format~html"] [unique_id "amsdqbtUuCz5bq7ZqemNcQAAADM"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/cat_ids~17,15/request_format~html
[Thu Jul 30 10:47:21.778639 2026] [security2:error] [pid 2773214:tid 2773214] [client 110.249.202.144:21328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsdqRkCzXnp3gpC9oNsMgAAADI"]
[Thu Jul 30 10:47:22.644226 2026] [security2:error] [pid 2762295:tid 2762295] [client 114.119.142.20:37873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~17,15,30/request_format~html"] [unique_id "amsdqosVNeJghcQnmk231AAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/cat_ids~17,15/request_format~html
[Thu Jul 30 10:47:23.281493 2026] [ssl:error] [pid 2773214:tid 2773214] (EAI 2)Name or service not known: [client 144.76.19.72:34998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:23.281535 2026] [ssl:error] [pid 2773214:tid 2773214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:23.376123 2026] [ssl:error] [pid 2776897:tid 2776897] (EAI 2)Name or service not known: [client 144.76.19.72:35002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:23.376182 2026] [ssl:error] [pid 2776897:tid 2776897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:23.465043 2026] [ssl:error] [pid 2769635:tid 2769635] (70014)End of file found: [client 216.73.216.199:45387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:24.070885 2026] [ssl:error] [pid 2776892:tid 2776892] (70014)End of file found: [client 216.73.216.199:52198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:24.572333 2026] [security2:error] [pid 2776778:tid 2776778] [client 114.119.133.56:26859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-721.xml"] [unique_id "amsdrIitsFO_3KPLIHDPhwAAAB0"]
[Thu Jul 30 10:47:26.431682 2026] [ssl:error] [pid 2766396:tid 2766396] (EAI 2)Name or service not known: [client 144.76.19.72:35006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:26.431716 2026] [ssl:error] [pid 2766396:tid 2766396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:26.487989 2026] [ssl:error] [pid 2773179:tid 2773179] (EAI 2)Name or service not known: [client 144.76.19.72:35008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:26.488032 2026] [ssl:error] [pid 2773179:tid 2773179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:26.780544 2026] [ssl:error] [pid 2773215:tid 2773215] (70014)End of file found: [client 216.73.216.199:30820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:27.215952 2026] [cgi:error] [pid 2769295:tid 2769295] [client 20.9.4.9:26544] AH02812: stderr from /home/jgqawffu/public_html/tyredandmotional.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:47:27.499482 2026] [security2:error] [pid 2772202:tid 2772202] [client 192.95.29.25:46202] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsdrwL-dJA-9y01RevXhgAAACE"]
[Thu Jul 30 10:47:27.639155 2026] [cgi:error] [pid 2771496:tid 2771496] [client 20.9.4.9:26563] AH02812: stderr from /home/jgqawffu/public_html/tyredandmotional.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 10:47:28.260026 2026] [security2:error] [pid 2769573:tid 2769573] [client 49.51.183.15:60240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.techsuccess.uk"] [uri "/"] [unique_id "amsdsEuwz0LB57KYg4AROgAAAB4"]
[Thu Jul 30 10:47:29.183972 2026] [ssl:error] [pid 2772203:tid 2772203] (70014)End of file found: [client 216.73.216.199:61488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:29.300954 2026] [security2:error] [pid 2776778:tid 2776778] [client 47.128.24.241:40160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsdsYitsFO_3KPLIHDPjAAAAB0"]
[Thu Jul 30 10:47:29.367772 2026] [core:error] [pid 2772762:tid 2772762] [client 66.249.64.171:52812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:29.367811 2026] [core:error] [pid 2772762:tid 2772762] [client 66.249.64.171:52812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:47:29.541955 2026] [ssl:error] [pid 2769573:tid 2769573] (EAI 2)Name or service not known: [client 144.76.19.72:35012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:29.542011 2026] [ssl:error] [pid 2769573:tid 2769573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:29.593705 2026] [ssl:error] [pid 2773179:tid 2773179] (EAI 2)Name or service not known: [client 144.76.19.72:19224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:29.593749 2026] [ssl:error] [pid 2773179:tid 2773179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:29.830696 2026] [access_compat:error] [pid 2763839:tid 2763839] [client 74.7.228.7:46558] AH01797: client denied by server configuration: /home/nspandor/public_html/robots.txt
[Thu Jul 30 10:47:30.031561 2026] [security2:error] [pid 2776778:tid 2776778] [client 74.7.241.21:58286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.netscanhosting.com"] [uri "/"] [unique_id "amsdsoitsFO_3KPLIHDPjQAAAB0"]
[Thu Jul 30 10:47:30.031792 2026] [access_compat:error] [pid 2776778:tid 2776778] [client 74.7.241.21:58286] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:47:30.261930 2026] [lsapi:warn] [pid 2769573:tid 2769573] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:47:30.995365 2026] [ssl:error] [pid 2769629:tid 2769629] (70014)End of file found: [client 216.73.216.199:51869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:32.646962 2026] [ssl:error] [pid 2773215:tid 2773215] (EAI 2)Name or service not known: [client 144.76.19.72:19240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:32.646999 2026] [ssl:error] [pid 2773215:tid 2773215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:32.700221 2026] [ssl:error] [pid 2769573:tid 2769573] (EAI 2)Name or service not known: [client 144.76.19.72:19256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:32.700251 2026] [ssl:error] [pid 2769573:tid 2769573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:33.117611 2026] [ssl:error] [pid 2762295:tid 2762295] (70014)End of file found: [client 216.73.216.199:65128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:34.512616 2026] [ssl:error] [pid 2773215:tid 2773215] (70014)End of file found: [client 216.73.216.199:29642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:35.756868 2026] [ssl:error] [pid 2776123:tid 2776123] (EAI 2)Name or service not known: [client 144.76.19.72:19270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:35.756906 2026] [ssl:error] [pid 2776123:tid 2776123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:35.810460 2026] [ssl:error] [pid 2776825:tid 2776825] (EAI 2)Name or service not known: [client 144.76.19.72:19272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:35.810500 2026] [ssl:error] [pid 2776825:tid 2776825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:36.599409 2026] [security2:error] [pid 2773178:tid 2773178] [client 114.119.137.128:37219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/teak-bench/"] [unique_id "amsduFUMX6HFGljN_NBEvQAAACw"], referer: http://tripodhome.co.uk/products/
[Thu Jul 30 10:47:37.938646 2026] [security2:error] [pid 2750259:tid 2750259] [client 216.73.216.199:59441] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sudo-ldap.conf"] [unique_id "amsduXlseJLi0Xe2Fxcb8AAAACo"]
[Thu Jul 30 10:47:37.938964 2026] [security2:error] [pid 2750259:tid 2750259] [client 216.73.216.199:59441] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sudo-ldap.conf"] [unique_id "amsduXlseJLi0Xe2Fxcb8AAAACo"]
[Thu Jul 30 10:47:37.939222 2026] [security2:error] [pid 2750259:tid 2750259] [client 216.73.216.199:59441] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sudo-ldap.conf"] [unique_id "amsduXlseJLi0Xe2Fxcb8AAAACo"]
[Thu Jul 30 10:47:38.890688 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:19274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:38.890753 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:38.947571 2026] [ssl:error] [pid 2776376:tid 2776376] (EAI 2)Name or service not known: [client 144.76.19.72:19288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:38.947616 2026] [ssl:error] [pid 2776376:tid 2776376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:39.142644 2026] [ssl:error] [pid 2750259:tid 2750259] (70014)End of file found: [client 216.73.216.199:59441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:40.171055 2026] [security2:error] [pid 2776896:tid 2776896] [client 110.249.201.154:65180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsdvEZbLpjWPGTkHuduTwAAAD4"]
[Thu Jul 30 10:47:40.859524 2026] [lsapi:warn] [pid 2776893:tid 2776893] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:47:41.414444 2026] [ssl:error] [pid 2776122:tid 2776122] (70014)End of file found: [client 216.73.216.199:31107] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:41.710920 2026] [ssl:error] [pid 2776377:tid 2776377] (70014)End of file found: [client 216.73.216.199:54180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:47:42.050736 2026] [ssl:error] [pid 2776075:tid 2776075] (EAI 2)Name or service not known: [client 144.76.19.72:35378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:42.050771 2026] [ssl:error] [pid 2776075:tid 2776075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:42.102668 2026] [ssl:error] [pid 2772203:tid 2772203] (EAI 2)Name or service not known: [client 144.76.19.72:35380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:42.102695 2026] [ssl:error] [pid 2772203:tid 2772203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:43.986866 2026] [core:error] [pid 2775668:tid 2775668] (13)Permission denied: [client 216.73.216.199:5008] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/configfs_dir_cache/objects_partial
[Thu Jul 30 10:47:44.333507 2026] [security2:error] [pid 2776892:tid 2776892] [client 110.249.201.56:47012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/403.shtml"] [unique_id "amsdwAc3St_bs1muVovkfwAAADk"]
[Thu Jul 30 10:47:45.154663 2026] [ssl:error] [pid 2750259:tid 2750259] (EAI 2)Name or service not known: [client 144.76.19.72:35396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:45.154698 2026] [ssl:error] [pid 2750259:tid 2750259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:45.206164 2026] [ssl:error] [pid 2769629:tid 2769629] (EAI 2)Name or service not known: [client 144.76.19.72:35398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:45.206191 2026] [ssl:error] [pid 2769629:tid 2769629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:45.612883 2026] [authz_core:error] [pid 2769295:tid 2769295] [client 20.9.4.9:26544] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/fonts/error_log
[Thu Jul 30 10:47:47.208357 2026] [core:error] [pid 2772202:tid 2772202] (13)Permission denied: [client 216.73.216.199:54561] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_group/objects_partial
[Thu Jul 30 10:47:48.300793 2026] [ssl:error] [pid 2769573:tid 2769573] (EAI 2)Name or service not known: [client 144.76.19.72:35414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:48.300846 2026] [ssl:error] [pid 2769573:tid 2769573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:48.354283 2026] [ssl:error] [pid 2776122:tid 2776122] (EAI 2)Name or service not known: [client 144.76.19.72:35422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:48.354331 2026] [ssl:error] [pid 2776122:tid 2776122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:48.487356 2026] [authz_core:error] [pid 2775347:tid 2775347] [client 66.249.66.163:38588] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:47:48.490017 2026] [authz_core:error] [pid 2775347:tid 2775347] [client 66.249.66.163:38588] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:47:49.443695 2026] [security2:error] [pid 2769635:tid 2769635] [client 114.119.157.33:32215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/wp-content/uploads/2023/12/IMG_7958-scaled.jpg"] [unique_id "amsdxW-b-la_S2lImdMU0QAAADE"], referer: https://www.retrodisco.co.uk/?gclid=Cj0KCQiA-qGNBhD3ARIsAO_o7ylYBowoyA6lRfTI9EJwXV8lpwb0uck1XJLlzf4SBsXHbyQnGq6Tc_UaAjfzEALw_wcB
[Thu Jul 30 10:47:49.807656 2026] [security2:error] [pid 2758788:tid 2758788] [client 114.119.130.248:20909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/section/26/71"] [unique_id "amsdxcs_dCWDqkiYaxrgOgAAABo"], referer: http://www.jonathanmeyerart.com/section/26/62
[Thu Jul 30 10:47:51.411241 2026] [ssl:error] [pid 2778592:tid 2778592] (EAI 2)Name or service not known: [client 144.76.19.72:34096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:51.411273 2026] [ssl:error] [pid 2778592:tid 2778592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:51.466258 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:34100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:51.466287 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:51.576180 2026] [lsapi:warn] [pid 2776122:tid 2776122] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:47:54.530490 2026] [cgi:error] [pid 2762295:tid 2762295] [client 167.94.146.59:1232] AH02812: stderr from /home/quantumc/halmanninvestments.com/cgi-bin/: attempt to invoke directory as script, referer: https://halmanninvestments.com:443/cgi-bin
[Thu Jul 30 10:47:54.555999 2026] [ssl:error] [pid 2776892:tid 2776892] (EAI 2)Name or service not known: [client 144.76.19.72:34106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:54.556031 2026] [ssl:error] [pid 2776892:tid 2776892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:54.607729 2026] [ssl:error] [pid 2778631:tid 2778631] (EAI 2)Name or service not known: [client 144.76.19.72:34108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:54.607763 2026] [ssl:error] [pid 2778631:tid 2778631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:55.837426 2026] [authz_core:error] [pid 2775347:tid 2775347] [client 20.206.204.219:61370] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 10:47:55.947342 2026] [core:error] [pid 2772202:tid 2772202] (13)Permission denied: [client 216.73.216.199:54561] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/objects
[Thu Jul 30 10:47:56.519177 2026] [security2:error] [pid 2773213:tid 2773213] [client 94.154.43.188:45256] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.techsuccess.uk"] [uri "/.env"] [unique_id "amsdzKFviE9lEGopyqrzwwAAADA"]
[Thu Jul 30 10:47:56.519380 2026] [security2:error] [pid 2773213:tid 2773213] [client 94.154.43.188:45256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.techsuccess.uk"] [uri "/.env"] [unique_id "amsdzKFviE9lEGopyqrzwwAAADA"]
[Thu Jul 30 10:47:56.519612 2026] [security2:error] [pid 2773213:tid 2773213] [client 94.154.43.188:45256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.techsuccess.uk"] [uri "/.env"] [unique_id "amsdzKFviE9lEGopyqrzwwAAADA"]
[Thu Jul 30 10:47:57.024229 2026] [lsapi:warn] [pid 2776337:tid 2776337] [client 45.158.164.139:57792] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:47:57.024275 2026] [lsapi:warn] [pid 2776337:tid 2776337] [client 45.158.164.139:57792] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:47:57.026637 2026] [lsapi:warn] [pid 2773883:tid 2773883] [client 109.248.253.38:63105] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:47:57.026700 2026] [lsapi:warn] [pid 2773883:tid 2773883] [client 109.248.253.38:63105] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:47:57.661648 2026] [ssl:error] [pid 2776894:tid 2776894] (EAI 2)Name or service not known: [client 144.76.19.72:34122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:57.661682 2026] [ssl:error] [pid 2776894:tid 2776894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:57.716743 2026] [ssl:error] [pid 2776892:tid 2776892] (EAI 2)Name or service not known: [client 144.76.19.72:34132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:47:57.716775 2026] [ssl:error] [pid 2776892:tid 2776892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:47:57.753599 2026] [core:error] [pid 2772202:tid 2772202] (13)Permission denied: [client 216.73.216.199:54561] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/objects
[Thu Jul 30 10:47:58.355353 2026] [core:error] [pid 2772202:tid 2772202] (13)Permission denied: [client 216.73.216.199:54561] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip6_dst_cache/objects_partial
[Thu Jul 30 10:48:00.005093 2026] [access_compat:error] [pid 2776892:tid 2776892] [client 74.47.47.66:54816] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/products.json
[Thu Jul 30 10:48:00.005200 2026] [access_compat:error] [pid 2776892:tid 2776892] [client 74.47.47.66:54816] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:48:00.776094 2026] [ssl:error] [pid 2769629:tid 2769629] (EAI 2)Name or service not known: [client 144.76.19.72:52050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:00.776166 2026] [ssl:error] [pid 2769629:tid 2769629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:00.828717 2026] [ssl:error] [pid 2776892:tid 2776892] (EAI 2)Name or service not known: [client 144.76.19.72:52062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:00.828742 2026] [ssl:error] [pid 2776892:tid 2776892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:01.561874 2026] [access_compat:error] [pid 2776377:tid 2776377] [client 74.47.47.66:62727] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 10:48:01.562016 2026] [access_compat:error] [pid 2776377:tid 2776377] [client 74.47.47.66:62727] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 10:48:02.103948 2026] [core:error] [pid 2776892:tid 2776892] [client 66.249.64.172:63148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:02.103980 2026] [core:error] [pid 2776892:tid 2776892] [client 66.249.64.172:63148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:02.219121 2026] [lsapi:warn] [pid 2762295:tid 2762295] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:48:02.678211 2026] [security2:error] [pid 2773883:tid 2773883] [client 85.208.96.196:17218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/yankees-draft-picks-by-year"] [unique_id "amsd0sJ2HnQJmpat5VTK8gAAAA4"]
[Thu Jul 30 10:48:03.182561 2026] [ssl:error] [pid 2772202:tid 2772202] (70014)End of file found: [client 216.73.216.199:54561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:04.445344 2026] [security2:error] [pid 2776892:tid 2776892] [client 114.119.158.0:60277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/customborders/images/37_earthbound_4_3.png"] [unique_id "amsd1Ac3St_bs1muVovkjAAAADk"], referer: https://www.robin64.co.uk/customborders/
[Thu Jul 30 10:48:04.953779 2026] [ssl:error] [pid 2776376:tid 2776376] (EAI 2)Name or service not known: [client 144.76.19.72:52064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:04.953810 2026] [ssl:error] [pid 2776376:tid 2776376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:05.016779 2026] [ssl:error] [pid 2772203:tid 2772203] (EAI 2)Name or service not known: [client 144.76.19.72:52068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:05.016829 2026] [ssl:error] [pid 2772203:tid 2772203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:06.186701 2026] [authz_core:error] [pid 2776892:tid 2776892] [client 20.206.204.219:63676] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 10:48:06.704942 2026] [security2:error] [pid 2778630:tid 2778630] [client 94.154.43.183:36310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "nativespace.com.ns-pandora.com"] [uri "/.env"] [unique_id "amsd1rtFIh9sGRYWKxnzdwAAABg"]
[Thu Jul 30 10:48:06.705263 2026] [security2:error] [pid 2778630:tid 2778630] [client 94.154.43.183:36310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace.com.ns-pandora.com"] [uri "/.env"] [unique_id "amsd1rtFIh9sGRYWKxnzdwAAABg"]
[Thu Jul 30 10:48:06.705553 2026] [security2:error] [pid 2778630:tid 2778630] [client 94.154.43.183:36310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "nativespace.com.ns-pandora.com"] [uri "/.env"] [unique_id "amsd1rtFIh9sGRYWKxnzdwAAABg"]
[Thu Jul 30 10:48:07.307659 2026] [core:error] [pid 2779407:tid 2779407] [client 66.249.66.39:52653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:07.307711 2026] [core:error] [pid 2779407:tid 2779407] [client 66.249.66.39:52653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:07.313402 2026] [core:error] [pid 2773179:tid 2773179] [client 66.249.66.168:43845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:07.313428 2026] [core:error] [pid 2773179:tid 2773179] [client 66.249.66.168:43845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:08.099121 2026] [ssl:error] [pid 2776376:tid 2776376] (EAI 2)Name or service not known: [client 144.76.19.72:52080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:08.099170 2026] [ssl:error] [pid 2776376:tid 2776376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:08.152813 2026] [ssl:error] [pid 2779473:tid 2779473] (EAI 2)Name or service not known: [client 144.76.19.72:52088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:08.152869 2026] [ssl:error] [pid 2779473:tid 2779473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:08.601204 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:20688] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/radix_tree_node/objects_partial
[Thu Jul 30 10:48:09.216782 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:20688] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/objects
[Thu Jul 30 10:48:11.208890 2026] [ssl:error] [pid 2769629:tid 2769629] (EAI 2)Name or service not known: [client 144.76.19.72:20242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:11.208922 2026] [ssl:error] [pid 2769629:tid 2769629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:11.267468 2026] [ssl:error] [pid 2779183:tid 2779183] (EAI 2)Name or service not known: [client 144.76.19.72:20244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:11.267507 2026] [ssl:error] [pid 2779183:tid 2779183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:11.703745 2026] [security2:error] [pid 2776377:tid 2776377] [client 185.191.171.16:56764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/02/21/iptv/"] [unique_id "amsd22NBPUIStkHZMCJfQAAAABU"]
[Thu Jul 30 10:48:12.129095 2026] [security2:error] [pid 2779539:tid 2779539] [client 94.23.188.215:38128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/jesus-revealed/"] [unique_id "amsd3Ca93_jrM-ivOKn_MgAAADQ"]
[Thu Jul 30 10:48:12.227343 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:20688] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/btree_node/objects_partial
[Thu Jul 30 10:48:12.884331 2026] [lsapi:warn] [pid 2776828:tid 2776828] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:48:13.760081 2026] [core:error] [pid 2778632:tid 2778632] [client 66.249.66.167:59413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:13.760117 2026] [core:error] [pid 2778632:tid 2778632] [client 66.249.66.167:59413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:14.319945 2026] [ssl:error] [pid 2776827:tid 2776827] (EAI 2)Name or service not known: [client 144.76.19.72:20246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:14.319998 2026] [ssl:error] [pid 2776827:tid 2776827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:14.375557 2026] [ssl:error] [pid 2758788:tid 2758788] (EAI 2)Name or service not known: [client 144.76.19.72:20258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:14.375605 2026] [ssl:error] [pid 2758788:tid 2758788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:15.499183 2026] [security2:error] [pid 2765110:tid 2765110] [client 185.191.171.14:18910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3308.0/prev_next,prev.html"] [unique_id "amsd3xTNmXhOXIxTlVGD3AAAAAM"]
[Thu Jul 30 10:48:17.432616 2026] [ssl:error] [pid 2776897:tid 2776897] (EAI 2)Name or service not known: [client 144.76.19.72:20274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:17.432670 2026] [ssl:error] [pid 2776897:tid 2776897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:17.488659 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:20280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:17.488693 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:18.140002 2026] [authz_core:error] [pid 2776827:tid 2776827] [client 66.249.66.35:43898] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:48:18.142686 2026] [authz_core:error] [pid 2776827:tid 2776827] [client 66.249.66.35:43898] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:48:18.923986 2026] [access_compat:error] [pid 2773215:tid 2773215] [client 20.9.4.9:26594] AH01797: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-content/uploads/ps_auto_sitemap/
[Thu Jul 30 10:48:20.391267 2026] [security2:error] [pid 2779539:tid 2779539] [client 51.68.236.94:35699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.glottalstop.co.uk"] [uri "/robots.txt"] [unique_id "amsd5Ca93_jrM-ivOKn_NAAAADQ"]
[Thu Jul 30 10:48:20.479247 2026] [security2:error] [pid 2772762:tid 2772762] [client 51.68.236.94:14947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsd5K8AapfCLrsTTzLETgAAACk"]
[Thu Jul 30 10:48:20.548916 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:62208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:20.548966 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:20.577212 2026] [security2:error] [pid 2765151:tid 2765151] [client 51.68.236.94:16937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.glottalstop.co.uk"] [uri "/robots.txt"] [unique_id "amsd5KhbiCKupDmUtj2P4wAAAAU"]
[Thu Jul 30 10:48:20.607431 2026] [ssl:error] [pid 2779539:tid 2779539] (EAI 2)Name or service not known: [client 144.76.19.72:62212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:20.607466 2026] [ssl:error] [pid 2779539:tid 2779539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:22.766416 2026] [authz_core:error] [pid 2775347:tid 2775347] [client 20.9.4.9:26606] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Requests/library/error_log
[Thu Jul 30 10:48:23.503763 2026] [lsapi:warn] [pid 2778630:tid 2778630] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:48:23.664241 2026] [ssl:error] [pid 2776827:tid 2776827] (EAI 2)Name or service not known: [client 144.76.19.72:62222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:23.664271 2026] [ssl:error] [pid 2776827:tid 2776827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:23.717729 2026] [ssl:error] [pid 2779472:tid 2779472] (EAI 2)Name or service not known: [client 144.76.19.72:62232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:23.717779 2026] [ssl:error] [pid 2779472:tid 2779472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:23.973503 2026] [access_compat:error] [pid 2779540:tid 2779540] [client 213.230.88.138:5351] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wedding, referer: http://blog.alism.com/wedding/
[Thu Jul 30 10:48:23.973610 2026] [access_compat:error] [pid 2779540:tid 2779540] [client 213.230.88.138:5351] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: http://blog.alism.com/wedding/
[Thu Jul 30 10:48:24.665604 2026] [lsapi:warn] [pid 2763624:tid 2763624] [client 216.73.216.199:20688] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 10:48:24.665645 2026] [lsapi:error] [pid 2763624:tid 2763624] [client 216.73.216.199:20688] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-http-request/docs/example.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 10:48:24.810995 2026] [cgi:error] [pid 2775380:tid 2775380] [client 216.73.216.199:13058] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Algorithm-Diff/diff.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:48:24.811046 2026] [cgi:error] [pid 2775380:tid 2775380] [client 216.73.216.199:13058] End of script output before headers: diff.pl
[Thu Jul 30 10:48:26.397312 2026] [authz_core:error] [pid 2775347:tid 2775347] [client 20.9.4.9:26606] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/fonts/error_log
[Thu Jul 30 10:48:26.771565 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:62244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:26.771605 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:26.826737 2026] [ssl:error] [pid 2775380:tid 2775380] (EAI 2)Name or service not known: [client 144.76.19.72:62246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:26.826784 2026] [ssl:error] [pid 2775380:tid 2775380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:27.333888 2026] [core:error] [pid 2773214:tid 2773214] [client 66.249.66.8:47564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:27.333924 2026] [core:error] [pid 2773214:tid 2773214] [client 66.249.66.8:47564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:28.085246 2026] [ssl:error] [pid 2775220:tid 2775220] (70014)End of file found: [client 216.73.216.199:60472] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:28.616033 2026] [access_compat:error] [pid 2775347:tid 2775347] [client 20.9.4.9:26606] AH01797: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-content/uploads/ps_auto_sitemap/
[Thu Jul 30 10:48:29.286453 2026] [ssl:error] [pid 2779245:tid 2779245] (70014)End of file found: [client 216.73.216.199:6404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:29.568404 2026] [core:error] [pid 2771496:tid 2771496] [client 52.167.144.158:18818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:29.568443 2026] [core:error] [pid 2771496:tid 2771496] [client 52.167.144.158:18818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:29.773671 2026] [ssl:error] [pid 2779246:tid 2779246] (70014)End of file found: [client 216.73.216.199:19093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:29.881369 2026] [ssl:error] [pid 2779472:tid 2779472] (EAI 2)Name or service not known: [client 144.76.19.72:44728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:29.881406 2026] [ssl:error] [pid 2779472:tid 2779472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:29.932815 2026] [ssl:error] [pid 2771496:tid 2771496] (EAI 2)Name or service not known: [client 144.76.19.72:44744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:29.932840 2026] [ssl:error] [pid 2771496:tid 2771496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:30.653141 2026] [security2:error] [pid 2779539:tid 2779539] [client 54.37.118.81:34406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/author/admin/"] [unique_id "amsd7ia93_jrM-ivOKn_OgAAADQ"]
[Thu Jul 30 10:48:32.991189 2026] [ssl:error] [pid 2775381:tid 2775381] (EAI 2)Name or service not known: [client 144.76.19.72:44752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:32.991217 2026] [ssl:error] [pid 2775381:tid 2775381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:33.047019 2026] [ssl:error] [pid 2776377:tid 2776377] (EAI 2)Name or service not known: [client 144.76.19.72:44760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:33.047081 2026] [ssl:error] [pid 2776377:tid 2776377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:34.095438 2026] [lsapi:warn] [pid 2773179:tid 2773179] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:48:34.723896 2026] [ssl:error] [pid 2772762:tid 2772762] (70014)End of file found: [client 216.73.216.199:31256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:36.113470 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:44772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:36.113512 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:36.166523 2026] [ssl:error] [pid 2775220:tid 2775220] (EAI 2)Name or service not known: [client 144.76.19.72:44778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:36.166575 2026] [ssl:error] [pid 2775220:tid 2775220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:36.501000 2026] [security2:error] [pid 2769573:tid 2769573] [client 146.56.199.139:36308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "halmanninvestments.com"] [uri "/"] [unique_id "amsd9Euwz0LB57KYg4ARUAAAAB4"]
[Thu Jul 30 10:48:36.894968 2026] [core:error] [pid 2779246:tid 2779246] [client 66.249.64.171:49315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:36.895025 2026] [core:error] [pid 2779246:tid 2779246] [client 66.249.64.171:49315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:37.270764 2026] [security2:error] [pid 2769573:tid 2769573] [client 114.119.158.38:48343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~102,18,103,15,30/request_format~html"] [unique_id "amsd9Uuwz0LB57KYg4ARUQAAAB4"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~102,18,103,15/request_format~html
[Thu Jul 30 10:48:38.716285 2026] [ssl:error] [pid 2762295:tid 2762295] (70014)End of file found: [client 216.73.216.199:32499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:39.026530 2026] [authz_core:error] [pid 2773883:tid 2773883] [client 212.34.128.179:56408] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini, referer: http://kirmond.co.uk/
[Thu Jul 30 10:48:39.256303 2026] [ssl:error] [pid 2776376:tid 2776376] (EAI 2)Name or service not known: [client 144.76.19.72:44786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:39.256343 2026] [ssl:error] [pid 2776376:tid 2776376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:39.312942 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:44794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:39.312986 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:39.421136 2026] [ssl:error] [pid 2757638:tid 2757638] (70014)End of file found: [client 216.73.216.199:7555] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:40.580371 2026] [security2:error] [pid 2773883:tid 2773883] [client 114.119.158.38:22379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~102,18,103,15,30/request_format~html"] [unique_id "amsd-MJ2HnQJmpat5VTK_gAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~102,18,103,15/request_format~html
[Thu Jul 30 10:48:40.638364 2026] [core:error] [pid 2778592:tid 2778592] [client 66.249.66.167:43282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:40.638392 2026] [core:error] [pid 2778592:tid 2778592] [client 66.249.66.167:43282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:41.531483 2026] [ssl:error] [pid 2779472:tid 2779472] (70014)End of file found: [client 216.73.216.199:31687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:42.366967 2026] [ssl:error] [pid 2779245:tid 2779245] (EAI 2)Name or service not known: [client 144.76.19.72:18692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:42.367016 2026] [ssl:error] [pid 2779245:tid 2779245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:42.420511 2026] [ssl:error] [pid 2778592:tid 2778592] (EAI 2)Name or service not known: [client 144.76.19.72:18708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:42.420538 2026] [ssl:error] [pid 2778592:tid 2778592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:42.798277 2026] [authz_core:error] [pid 2780664:tid 2780664] [client 66.249.66.33:45238] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:48:42.801009 2026] [authz_core:error] [pid 2780664:tid 2780664] [client 66.249.66.33:45238] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:48:44.429468 2026] [authz_core:error] [pid 2776897:tid 2776897] [client 66.249.66.34:48398] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:48:44.432159 2026] [authz_core:error] [pid 2776897:tid 2776897] [client 66.249.66.34:48398] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:48:44.837362 2026] [lsapi:warn] [pid 2773883:tid 2773883] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:48:44.854352 2026] [ssl:error] [pid 2775380:tid 2775380] (70014)End of file found: [client 216.73.216.199:48393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:45.477799 2026] [ssl:error] [pid 2773214:tid 2773214] (EAI 2)Name or service not known: [client 144.76.19.72:18716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:45.477829 2026] [ssl:error] [pid 2773214:tid 2773214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:45.531914 2026] [ssl:error] [pid 2779246:tid 2779246] (EAI 2)Name or service not known: [client 144.76.19.72:18724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:45.531952 2026] [ssl:error] [pid 2779246:tid 2779246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:46.354415 2026] [ssl:error] [pid 2773179:tid 2773179] (70014)End of file found: [client 216.73.216.199:45681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:46.852636 2026] [ssl:error] [pid 2780622:tid 2780622] (70014)End of file found: [client 216.73.216.199:58336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:47.321209 2026] [security2:error] [pid 2773213:tid 2773213] [client 85.208.96.193:19196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,628.0/prev_next,next.html"] [unique_id "amsd_6FviE9lEGopyqr0AgAAADA"]
[Thu Jul 30 10:48:48.588348 2026] [ssl:error] [pid 2780664:tid 2780664] (EAI 2)Name or service not known: [client 144.76.19.72:18736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:48.588386 2026] [ssl:error] [pid 2780664:tid 2780664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:48.643340 2026] [ssl:error] [pid 2773213:tid 2773213] (EAI 2)Name or service not known: [client 144.76.19.72:18740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:48.643369 2026] [ssl:error] [pid 2773213:tid 2773213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:49.199843 2026] [authz_core:error] [pid 2769573:tid 2769573] [client 66.249.66.33:57423] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:48:49.202511 2026] [authz_core:error] [pid 2769573:tid 2769573] [client 66.249.66.33:57423] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:48:49.619256 2026] [core:error] [pid 2779472:tid 2779472] [client 66.249.64.170:54829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:49.619282 2026] [core:error] [pid 2779472:tid 2779472] [client 66.249.64.170:54829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:48:50.158099 2026] [ssl:error] [pid 2779472:tid 2779472] (70014)End of file found: [client 216.73.216.199:35471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:51.698710 2026] [ssl:error] [pid 2779245:tid 2779245] (EAI 2)Name or service not known: [client 144.76.19.72:50432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:51.698752 2026] [ssl:error] [pid 2779245:tid 2779245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:51.752159 2026] [ssl:error] [pid 2776376:tid 2776376] (EAI 2)Name or service not known: [client 144.76.19.72:50446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:51.752186 2026] [ssl:error] [pid 2776376:tid 2776376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:52.380291 2026] [core:error] [pid 2761282:tid 2761282] (13)Permission denied: [client 216.73.216.199:45191] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/uartclk
[Thu Jul 30 10:48:52.574132 2026] [access_compat:error] [pid 2775380:tid 2775380] [client 2.189.5.218:49222] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:48:52.749811 2026] [access_compat:error] [pid 2778631:tid 2778631] [client 2.189.5.142:49538] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:48:54.810764 2026] [ssl:error] [pid 2779183:tid 2779183] (EAI 2)Name or service not known: [client 144.76.19.72:50492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:54.810791 2026] [ssl:error] [pid 2779183:tid 2779183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:54.864143 2026] [ssl:error] [pid 2773883:tid 2773883] (EAI 2)Name or service not known: [client 144.76.19.72:50498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:54.864181 2026] [ssl:error] [pid 2773883:tid 2773883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:55.323655 2026] [security2:error] [pid 2776337:tid 2776337] [client 129.226.174.80:45312] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.cssystems.co.uk"] [uri "/"] [unique_id "amseB1Hnyj5GiajJyD4s-wAAABM"], referer: http://www.cssystems.co.uk
[Thu Jul 30 10:48:55.399119 2026] [security2:error] [pid 2779245:tid 2779245] [client 216.73.216.199:2593] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-sockets.ini"] [unique_id "amseB6z8s82zK92qWQEZowAAAA8"]
[Thu Jul 30 10:48:55.399419 2026] [security2:error] [pid 2779245:tid 2779245] [client 216.73.216.199:2593] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-sockets.ini"] [unique_id "amseB6z8s82zK92qWQEZowAAAA8"]
[Thu Jul 30 10:48:55.399651 2026] [security2:error] [pid 2779245:tid 2779245] [client 216.73.216.199:2593] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-sockets.ini"] [unique_id "amseB6z8s82zK92qWQEZowAAAA8"]
[Thu Jul 30 10:48:55.499756 2026] [lsapi:warn] [pid 2773883:tid 2773883] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:48:55.952379 2026] [security2:error] [pid 2782042:tid 2782042] [client 43.157.168.43:33754] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.co.uk"] [uri "/"] [unique_id "amseB4wHrGxNeXVJOfpR6gAAAAQ"]
[Thu Jul 30 10:48:57.180127 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 89.45.53.3:60076] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:48:57.229516 2026] [ssl:error] [pid 2779245:tid 2779245] (70014)End of file found: [client 216.73.216.199:2593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:57.834533 2026] [ssl:error] [pid 2761282:tid 2761282] (70014)End of file found: [client 216.73.216.199:45191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:57.920513 2026] [ssl:error] [pid 2778629:tid 2778629] (EAI 2)Name or service not known: [client 144.76.19.72:50514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:57.920562 2026] [ssl:error] [pid 2778629:tid 2778629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:57.974526 2026] [ssl:error] [pid 2782131:tid 2782131] (EAI 2)Name or service not known: [client 144.76.19.72:50524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:48:57.974591 2026] [ssl:error] [pid 2782131:tid 2782131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:48:58.738847 2026] [ssl:error] [pid 2773179:tid 2773179] (70014)End of file found: [client 216.73.216.199:64077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:48:59.768252 2026] [access_compat:error] [pid 2757638:tid 2757638] [client 89.45.53.30:59560] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:49:01.030654 2026] [ssl:error] [pid 2782205:tid 2782205] (EAI 2)Name or service not known: [client 144.76.19.72:48582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:01.030693 2026] [ssl:error] [pid 2782205:tid 2782205] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:01.087798 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:48584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:01.087841 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:02.547269 2026] [ssl:error] [pid 2757638:tid 2757638] (70014)End of file found: [client 216.73.216.199:16906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:03.069951 2026] [security2:error] [pid 2763624:tid 2763624] [client 185.191.171.18:46764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/who-is-dr-charlie-ward"] [unique_id "amseD12hLC_auzYZYEy2DAAAACQ"]
[Thu Jul 30 10:49:03.254826 2026] [ssl:error] [pid 2769573:tid 2769573] (70014)End of file found: [client 216.73.216.199:59293] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:03.421614 2026] [security2:error] [pid 2779245:tid 2779245] [client 51.68.236.94:9873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amseD6z8s82zK92qWQEZqgAAAA8"]
[Thu Jul 30 10:49:04.042556 2026] [ssl:error] [pid 2776828:tid 2776828] (70014)End of file found: [client 216.73.216.199:28164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:04.144213 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:48600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:04.144248 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:04.208343 2026] [ssl:error] [pid 2776897:tid 2776897] (EAI 2)Name or service not known: [client 144.76.19.72:48602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:04.208367 2026] [ssl:error] [pid 2776897:tid 2776897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:04.957946 2026] [security2:error] [pid 2763624:tid 2763624] [client 68.183.195.114:55470] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "berehap.be"] [uri "/xmlrpc.php"] [unique_id "amseEF2hLC_auzYZYEy2DQAAACQ"]
[Thu Jul 30 10:49:05.807079 2026] [security2:error] [pid 2778631:tid 2778631] [client 124.156.238.88:49107] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseEXR0O_2dPMmp8DqLowAAABs"]
[Thu Jul 30 10:49:05.807143 2026] [security2:error] [pid 2778631:tid 2778631] [client 124.156.238.88:49107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseEXR0O_2dPMmp8DqLowAAABs"]
[Thu Jul 30 10:49:05.807493 2026] [security2:error] [pid 2778631:tid 2778631] [client 124.156.238.88:49107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amseEXR0O_2dPMmp8DqLowAAABs"]
[Thu Jul 30 10:49:06.253425 2026] [lsapi:warn] [pid 2782131:tid 2782131] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:49:07.405967 2026] [ssl:error] [pid 2763839:tid 2763839] (EAI 2)Name or service not known: [client 144.76.19.72:48608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:07.406003 2026] [ssl:error] [pid 2763839:tid 2763839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:07.462042 2026] [ssl:error] [pid 2770656:tid 2770656] (EAI 2)Name or service not known: [client 144.76.19.72:48616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:07.462091 2026] [ssl:error] [pid 2770656:tid 2770656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:07.961130 2026] [ssl:error] [pid 2780664:tid 2780664] (70014)End of file found: [client 216.73.216.199:7815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:08.296636 2026] [security2:error] [pid 2775347:tid 2775347] [client 81.49.25.177:45412] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseFItDYBKIUnmiP8LvJwAAAAY"]
[Thu Jul 30 10:49:08.296688 2026] [security2:error] [pid 2775347:tid 2775347] [client 81.49.25.177:45412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseFItDYBKIUnmiP8LvJwAAAAY"]
[Thu Jul 30 10:49:08.296965 2026] [security2:error] [pid 2775347:tid 2775347] [client 81.49.25.177:45412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amseFItDYBKIUnmiP8LvJwAAAAY"]
[Thu Jul 30 10:49:09.118059 2026] [core:error] [pid 2770656:tid 2770656] [client 66.249.66.167:60341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:09.118108 2026] [core:error] [pid 2770656:tid 2770656] [client 66.249.66.167:60341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:09.119398 2026] [core:error] [pid 2763839:tid 2763839] [client 66.249.66.196:42646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:09.119420 2026] [core:error] [pid 2763839:tid 2763839] [client 66.249.66.196:42646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:09.152141 2026] [core:error] [pid 2775347:tid 2775347] [client 66.249.66.168:50864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:09.152166 2026] [core:error] [pid 2775347:tid 2775347] [client 66.249.66.168:50864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:09.758176 2026] [ssl:error] [pid 2782158:tid 2782158] (70014)End of file found: [client 216.73.216.199:43237] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:10.257308 2026] [core:error] [pid 2763839:tid 2763839] (13)Permission denied: [client 216.73.216.199:64087] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/cpu_slabs
[Thu Jul 30 10:49:10.360326 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:64087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:10.532980 2026] [ssl:error] [pid 2776376:tid 2776376] (EAI 2)Name or service not known: [client 144.76.19.72:53680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:10.533056 2026] [ssl:error] [pid 2776376:tid 2776376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:10.588141 2026] [ssl:error] [pid 2778629:tid 2778629] (EAI 2)Name or service not known: [client 144.76.19.72:53692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:10.588172 2026] [ssl:error] [pid 2778629:tid 2778629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:11.341818 2026] [security2:error] [pid 2762295:tid 2762295] [client 90.5.101.185:41230] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseF4sVNeJghcQnmk23-wAAAAw"]
[Thu Jul 30 10:49:11.341875 2026] [security2:error] [pid 2762295:tid 2762295] [client 90.5.101.185:41230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseF4sVNeJghcQnmk23-wAAAAw"]
[Thu Jul 30 10:49:11.342196 2026] [security2:error] [pid 2762295:tid 2762295] [client 90.5.101.185:41230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amseF4sVNeJghcQnmk23-wAAAAw"]
[Thu Jul 30 10:49:12.620560 2026] [core:error] [pid 2776376:tid 2776376] [client 66.249.64.170:49857] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:12.620601 2026] [core:error] [pid 2776376:tid 2776376] [client 66.249.64.170:49857] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:13.643725 2026] [ssl:error] [pid 2782204:tid 2782204] (EAI 2)Name or service not known: [client 144.76.19.72:53700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:13.643781 2026] [ssl:error] [pid 2782204:tid 2782204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:13.697964 2026] [ssl:error] [pid 2776897:tid 2776897] (EAI 2)Name or service not known: [client 144.76.19.72:53706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:13.698004 2026] [ssl:error] [pid 2776897:tid 2776897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:13.974465 2026] [ssl:error] [pid 2782042:tid 2782042] (70014)End of file found: [client 216.73.216.199:37781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:15.680272 2026] [ssl:error] [pid 2761282:tid 2761282] (70014)End of file found: [client 216.73.216.199:46992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:16.753693 2026] [ssl:error] [pid 2782158:tid 2782158] (EAI 2)Name or service not known: [client 144.76.19.72:53718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:16.753740 2026] [ssl:error] [pid 2782158:tid 2782158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:16.810715 2026] [ssl:error] [pid 2783023:tid 2783023] (EAI 2)Name or service not known: [client 144.76.19.72:53722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:16.810749 2026] [ssl:error] [pid 2783023:tid 2783023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:16.911952 2026] [lsapi:warn] [pid 2781757:tid 2781757] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:49:18.489703 2026] [ssl:error] [pid 2779183:tid 2779183] (70014)End of file found: [client 216.73.216.199:28364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:19.869899 2026] [ssl:error] [pid 2783023:tid 2783023] (EAI 2)Name or service not known: [client 144.76.19.72:35864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:19.869934 2026] [ssl:error] [pid 2783023:tid 2783023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:19.924660 2026] [ssl:error] [pid 2782206:tid 2782206] (EAI 2)Name or service not known: [client 144.76.19.72:35880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:19.924698 2026] [ssl:error] [pid 2782206:tid 2782206] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:20.297696 2026] [ssl:error] [pid 2778630:tid 2778630] (70014)End of file found: [client 216.73.216.199:8560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:22.979986 2026] [ssl:error] [pid 2779246:tid 2779246] (EAI 2)Name or service not known: [client 144.76.19.72:35884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:22.980021 2026] [ssl:error] [pid 2779246:tid 2779246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:23.004979 2026] [ssl:error] [pid 2773215:tid 2773215] (70014)End of file found: [client 216.73.216.199:41475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:23.035982 2026] [ssl:error] [pid 2757638:tid 2757638] (EAI 2)Name or service not known: [client 144.76.19.72:35900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:23.036016 2026] [ssl:error] [pid 2757638:tid 2757638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:23.337569 2026] [core:error] [pid 2776897:tid 2776897] [client 66.249.66.3:60962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:23.337611 2026] [core:error] [pid 2776897:tid 2776897] [client 66.249.66.3:60962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:25.515336 2026] [security2:error] [pid 2776827:tid 2776827] [client 85.208.96.212:50242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3833.0.html"] [unique_id "amseJfFfzwwgsbD669AoBwAAADU"]
[Thu Jul 30 10:49:26.150875 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:35916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:26.150913 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:26.233981 2026] [ssl:error] [pid 2761282:tid 2761282] (EAI 2)Name or service not known: [client 144.76.19.72:35918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:26.234012 2026] [ssl:error] [pid 2761282:tid 2761282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:26.617185 2026] [ssl:error] [pid 2779539:tid 2779539] (70014)End of file found: [client 216.73.216.199:5919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:27.525838 2026] [ssl:error] [pid 2780622:tid 2780622] (70014)End of file found: [client 216.73.216.199:51650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:27.624672 2026] [lsapi:warn] [pid 2779183:tid 2779183] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:49:29.031381 2026] [ssl:error] [pid 2772203:tid 2772203] (70014)End of file found: [client 216.73.216.199:3923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:29.287733 2026] [ssl:error] [pid 2773179:tid 2773179] (EAI 2)Name or service not known: [client 144.76.19.72:35932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:29.287782 2026] [ssl:error] [pid 2773179:tid 2773179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:29.342200 2026] [ssl:error] [pid 2773883:tid 2773883] (EAI 2)Name or service not known: [client 144.76.19.72:35948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:29.342235 2026] [ssl:error] [pid 2773883:tid 2773883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:31.921510 2026] [security2:error] [pid 2779183:tid 2779183] [client 43.166.255.122:59066] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "amseK0gYZYrehaWjiFKvfAAAAAA"]
[Thu Jul 30 10:49:32.397267 2026] [ssl:error] [pid 2779246:tid 2779246] (EAI 2)Name or service not known: [client 144.76.19.72:42580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:32.397308 2026] [ssl:error] [pid 2779246:tid 2779246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:32.452970 2026] [ssl:error] [pid 2776377:tid 2776377] (EAI 2)Name or service not known: [client 144.76.19.72:42590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:32.453000 2026] [ssl:error] [pid 2776377:tid 2776377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:32.755887 2026] [core:error] [pid 2781757:tid 2781757] [client 66.249.66.167:37160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:32.755915 2026] [core:error] [pid 2781757:tid 2781757] [client 66.249.66.167:37160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:32.806278 2026] [ssl:error] [pid 2773179:tid 2773179] (70014)End of file found: [client 216.73.216.199:2684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:33.550846 2026] [ssl:error] [pid 2775347:tid 2775347] (70014)End of file found: [client 216.73.216.199:46027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:34.355114 2026] [ssl:error] [pid 2780622:tid 2780622] (70014)End of file found: [client 216.73.216.199:62753] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:35.507672 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:42606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:35.507697 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:35.601810 2026] [security2:error] [pid 2765151:tid 2765151] [client 43.131.253.14:38456] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amseL6hbiCKupDmUtj2QWAAAAAU"]
[Thu Jul 30 10:49:35.605278 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:42620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:35.605297 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:37.293760 2026] [authz_core:error] [pid 2776828:tid 2776828] [client 172.213.10.64:33986] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 10:49:38.264598 2026] [lsapi:warn] [pid 2778629:tid 2778629] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:49:38.686163 2026] [ssl:error] [pid 2779183:tid 2779183] (EAI 2)Name or service not known: [client 144.76.19.72:42626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:38.686199 2026] [ssl:error] [pid 2779183:tid 2779183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:38.786801 2026] [ssl:error] [pid 2775347:tid 2775347] (EAI 2)Name or service not known: [client 144.76.19.72:42628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:38.786842 2026] [ssl:error] [pid 2775347:tid 2775347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:39.447605 2026] [core:error] [pid 2780665:tid 2780665] (13)Permission denied: [client 216.73.216.199:23189] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS2/uartclk
[Thu Jul 30 10:49:40.049369 2026] [ssl:error] [pid 2780665:tid 2780665] (70014)End of file found: [client 216.73.216.199:23189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:41.841769 2026] [ssl:error] [pid 2763839:tid 2763839] (EAI 2)Name or service not known: [client 144.76.19.72:48538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:41.841806 2026] [ssl:error] [pid 2763839:tid 2763839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:41.855769 2026] [core:error] [pid 2782203:tid 2782203] (13)Permission denied: [client 216.73.216.199:26950] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/binfmt_misc/uevent
[Thu Jul 30 10:49:41.893297 2026] [ssl:error] [pid 2779246:tid 2779246] (EAI 2)Name or service not known: [client 144.76.19.72:48554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:41.893328 2026] [ssl:error] [pid 2779246:tid 2779246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:44.267761 2026] [ssl:error] [pid 2782203:tid 2782203] (70014)End of file found: [client 216.73.216.199:26950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:44.568163 2026] [ssl:error] [pid 2775347:tid 2775347] (70014)End of file found: [client 216.73.216.199:45718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:44.946608 2026] [ssl:error] [pid 2779245:tid 2779245] (EAI 2)Name or service not known: [client 144.76.19.72:48560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:44.946639 2026] [ssl:error] [pid 2779245:tid 2779245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:45.000874 2026] [ssl:error] [pid 2775668:tid 2775668] (EAI 2)Name or service not known: [client 144.76.19.72:48562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:45.000905 2026] [ssl:error] [pid 2775668:tid 2775668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:48.052495 2026] [ssl:error] [pid 2776827:tid 2776827] (EAI 2)Name or service not known: [client 144.76.19.72:48566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:48.052529 2026] [ssl:error] [pid 2776827:tid 2776827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:48.108807 2026] [ssl:error] [pid 2757638:tid 2757638] (EAI 2)Name or service not known: [client 144.76.19.72:48586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:48.108836 2026] [ssl:error] [pid 2757638:tid 2757638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:48.837943 2026] [lsapi:warn] [pid 2750259:tid 2750259] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:49:50.288041 2026] [core:error] [pid 2750259:tid 2750259] [client 66.249.66.39:62065] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:50.288090 2026] [core:error] [pid 2750259:tid 2750259] [client 66.249.66.39:62065] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:51.162217 2026] [ssl:error] [pid 2782203:tid 2782203] (EAI 2)Name or service not known: [client 144.76.19.72:43120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:51.162255 2026] [ssl:error] [pid 2782203:tid 2782203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:51.214031 2026] [ssl:error] [pid 2780664:tid 2780664] (EAI 2)Name or service not known: [client 144.76.19.72:43126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:51.214061 2026] [ssl:error] [pid 2780664:tid 2780664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:52.769873 2026] [ssl:error] [pid 2782203:tid 2782203] (70014)End of file found: [client 216.73.216.199:5017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:53.371774 2026] [core:error] [pid 2783023:tid 2783023] [client 66.249.66.66:37917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:53.371801 2026] [core:error] [pid 2783023:tid 2783023] [client 66.249.66.66:37917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:54.269097 2026] [ssl:error] [pid 2780622:tid 2780622] (EAI 2)Name or service not known: [client 144.76.19.72:43138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:54.269149 2026] [ssl:error] [pid 2780622:tid 2780622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:54.325789 2026] [ssl:error] [pid 2784563:tid 2784563] (EAI 2)Name or service not known: [client 144.76.19.72:43150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:54.325819 2026] [ssl:error] [pid 2784563:tid 2784563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:54.436719 2026] [security2:error] [pid 2778631:tid 2778631] [client 114.119.142.20:43931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563145200/cat_ids~18,19,104/request_format~html"] [unique_id "amseQnR0O_2dPMmp8DqLsgAAABs"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~18,19,104/request_format~html
[Thu Jul 30 10:49:55.507897 2026] [security2:error] [pid 2776337:tid 2776337] [client 114.119.142.20:43941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563145200/cat_ids~18,19,104/request_format~html"] [unique_id "amseQ1Hnyj5GiajJyD4tDwAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~18,19,104/request_format~html
[Thu Jul 30 10:49:56.010396 2026] [ssl:error] [pid 2784025:tid 2784025] (70014)End of file found: [client 216.73.216.199:6821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:56.695207 2026] [core:error] [pid 2776827:tid 2776827] [client 66.249.64.172:56031] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:56.695246 2026] [core:error] [pid 2776827:tid 2776827] [client 66.249.64.172:56031] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:49:57.038284 2026] [security2:error] [pid 2783751:tid 2783751] [client 85.208.98.23:59916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amseRZXHnDWy_sxNa4h_vAAAAAg"]
[Thu Jul 30 10:49:57.383350 2026] [ssl:error] [pid 2784024:tid 2784024] (EAI 2)Name or service not known: [client 144.76.19.72:43160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:57.383388 2026] [ssl:error] [pid 2784024:tid 2784024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:57.437990 2026] [ssl:error] [pid 2761282:tid 2761282] (EAI 2)Name or service not known: [client 144.76.19.72:43166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:49:57.438037 2026] [ssl:error] [pid 2761282:tid 2761282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:49:57.758065 2026] [security2:error] [pid 2784024:tid 2784024] [client 85.208.98.23:60542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amseRV97tk88SxNYyxvvRwAAACE"]
[Thu Jul 30 10:49:58.623288 2026] [authz_core:error] [pid 2778629:tid 2778629] [client 66.249.66.33:55148] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:49:58.626006 2026] [authz_core:error] [pid 2778629:tid 2778629] [client 66.249.66.33:55148] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:49:59.026937 2026] [ssl:error] [pid 2773883:tid 2773883] (70014)End of file found: [client 216.73.216.199:36570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:49:59.555982 2026] [lsapi:warn] [pid 2779246:tid 2779246] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:50:00.491298 2026] [ssl:error] [pid 2779246:tid 2779246] (EAI 2)Name or service not known: [client 144.76.19.72:56668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:00.491323 2026] [ssl:error] [pid 2779246:tid 2779246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:00.549158 2026] [ssl:error] [pid 2775347:tid 2775347] (EAI 2)Name or service not known: [client 144.76.19.72:56684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:00.549186 2026] [ssl:error] [pid 2775347:tid 2775347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:00.828361 2026] [ssl:error] [pid 2769574:tid 2769574] (70014)End of file found: [client 216.73.216.199:44073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:01.314750 2026] [ssl:error] [pid 2784782:tid 2784782] (70014)End of file found: [client 216.73.216.199:46496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:03.602906 2026] [ssl:error] [pid 2784025:tid 2784025] (EAI 2)Name or service not known: [client 144.76.19.72:56700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:03.602945 2026] [ssl:error] [pid 2784025:tid 2784025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:03.656450 2026] [ssl:error] [pid 2778629:tid 2778629] (EAI 2)Name or service not known: [client 144.76.19.72:56704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:03.656479 2026] [ssl:error] [pid 2778629:tid 2778629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:03.835252 2026] [security2:error] [pid 2780622:tid 2780622] [client 85.208.96.206:15346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/notts-county-players-wages"] [unique_id "amseS_hz4QhFrQnpNjHUFgAAABI"]
[Thu Jul 30 10:50:04.325320 2026] [ssl:error] [pid 2778592:tid 2778592] (70014)End of file found: [client 216.73.216.199:62943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:06.136150 2026] [security2:error] [pid 2784025:tid 2784025] [client 216.73.216.199:53097] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/systemd/resolv.conf"] [unique_id "amseTqp2LeYiXtdiyPughwAAACU"]
[Thu Jul 30 10:50:06.136395 2026] [security2:error] [pid 2784025:tid 2784025] [client 216.73.216.199:53097] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/systemd/resolv.conf"] [unique_id "amseTqp2LeYiXtdiyPughwAAACU"]
[Thu Jul 30 10:50:06.136629 2026] [security2:error] [pid 2784025:tid 2784025] [client 216.73.216.199:53097] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/systemd/resolv.conf"] [unique_id "amseTqp2LeYiXtdiyPughwAAACU"]
[Thu Jul 30 10:50:06.249375 2026] [ssl:error] [pid 2784025:tid 2784025] (70014)End of file found: [client 216.73.216.199:53097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:06.709756 2026] [ssl:error] [pid 2776337:tid 2776337] (EAI 2)Name or service not known: [client 144.76.19.72:56716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:06.709793 2026] [ssl:error] [pid 2776337:tid 2776337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:06.766279 2026] [ssl:error] [pid 2775668:tid 2775668] (EAI 2)Name or service not known: [client 144.76.19.72:56732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:06.766317 2026] [ssl:error] [pid 2775668:tid 2775668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:06.892447 2026] [security2:error] [pid 2775668:tid 2775668] [client 14.250.237.203:59910] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseThc4Q9fU0fLsr71zLQAAAAs"]
[Thu Jul 30 10:50:06.892501 2026] [security2:error] [pid 2775668:tid 2775668] [client 14.250.237.203:59910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseThc4Q9fU0fLsr71zLQAAAAs"]
[Thu Jul 30 10:50:06.892774 2026] [security2:error] [pid 2775668:tid 2775668] [client 14.250.237.203:59910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amseThc4Q9fU0fLsr71zLQAAAAs"]
[Thu Jul 30 10:50:07.990647 2026] [security2:error] [pid 2763624:tid 2763624] [client 91.176.214.26:34064] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseT12hLC_auzYZYEy2IwAAACQ"]
[Thu Jul 30 10:50:07.990703 2026] [security2:error] [pid 2763624:tid 2763624] [client 91.176.214.26:34064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseT12hLC_auzYZYEy2IwAAACQ"]
[Thu Jul 30 10:50:07.990965 2026] [security2:error] [pid 2763624:tid 2763624] [client 91.176.214.26:34064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amseT12hLC_auzYZYEy2IwAAACQ"]
[Thu Jul 30 10:50:08.871940 2026] [ssl:error] [pid 2776828:tid 2776828] (70014)End of file found: [client 216.73.216.199:33546] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:09.841098 2026] [ssl:error] [pid 2778592:tid 2778592] (EAI 2)Name or service not known: [client 144.76.19.72:18590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:09.841132 2026] [ssl:error] [pid 2778592:tid 2778592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:09.896618 2026] [ssl:error] [pid 2785518:tid 2785518] (EAI 2)Name or service not known: [client 144.76.19.72:18606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:09.896682 2026] [ssl:error] [pid 2785518:tid 2785518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:10.072540 2026] [ssl:error] [pid 2779246:tid 2779246] (70014)End of file found: [client 216.73.216.199:4255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:10.198212 2026] [lsapi:warn] [pid 2785519:tid 2785519] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:50:10.697674 2026] [security2:error] [pid 2750259:tid 2750259] [client 85.208.96.209:46516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amseUnlseJLi0Xe2FxccdwAAACo"]
[Thu Jul 30 10:50:11.554978 2026] [security2:error] [pid 2785452:tid 2785452] [client 185.191.171.13:40570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amseU6uoxR39iy4jOgZ2iQAAADE"]
[Thu Jul 30 10:50:11.711209 2026] [security2:error] [pid 2784846:tid 2784846] [client 182.10.131.93:22810] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseU5rWZJyeQNrU4HvzdQAAACY"]
[Thu Jul 30 10:50:11.711259 2026] [security2:error] [pid 2784846:tid 2784846] [client 182.10.131.93:22810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseU5rWZJyeQNrU4HvzdQAAACY"]
[Thu Jul 30 10:50:11.711494 2026] [security2:error] [pid 2784846:tid 2784846] [client 182.10.131.93:22810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amseU5rWZJyeQNrU4HvzdQAAACY"]
[Thu Jul 30 10:50:12.780926 2026] [security2:error] [pid 2763839:tid 2763839] [client 216.73.216.199:64360] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/group.conf"] [unique_id "amseVKKxgsiXB8PPCH50swAAACg"]
[Thu Jul 30 10:50:12.781246 2026] [security2:error] [pid 2763839:tid 2763839] [client 216.73.216.199:64360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/group.conf"] [unique_id "amseVKKxgsiXB8PPCH50swAAACg"]
[Thu Jul 30 10:50:12.781460 2026] [security2:error] [pid 2763839:tid 2763839] [client 216.73.216.199:64360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/group.conf"] [unique_id "amseVKKxgsiXB8PPCH50swAAACg"]
[Thu Jul 30 10:50:12.906715 2026] [security2:error] [pid 2762295:tid 2762295] [client 43.132.214.228:40516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amseVIsVNeJghcQnmk24HwAAAAw"]
[Thu Jul 30 10:50:13.000864 2026] [ssl:error] [pid 2784846:tid 2784846] (EAI 2)Name or service not known: [client 144.76.19.72:18622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:13.000905 2026] [ssl:error] [pid 2784846:tid 2784846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:13.054624 2026] [ssl:error] [pid 2765110:tid 2765110] (EAI 2)Name or service not known: [client 144.76.19.72:18624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:13.054670 2026] [ssl:error] [pid 2765110:tid 2765110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:13.822248 2026] [security2:error] [pid 2778592:tid 2778592] [client 94.154.43.229:60818] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amseVbfqomlIF83Q_H24twAAAAc"]
[Thu Jul 30 10:50:13.822448 2026] [security2:error] [pid 2778592:tid 2778592] [client 94.154.43.229:60818] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amseVbfqomlIF83Q_H24twAAAAc"]
[Thu Jul 30 10:50:13.822968 2026] [core:error] [pid 2778592:tid 2778592] [client 94.154.43.229:60818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:13.823123 2026] [security2:error] [pid 2778592:tid 2778592] [client 94.154.43.229:60818] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amseVbfqomlIF83Q_H24twAAAAc"]
[Thu Jul 30 10:50:14.285852 2026] [core:error] [pid 2763839:tid 2763839] (13)Permission denied: [client 216.73.216.199:64360] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/libata/uevent
[Thu Jul 30 10:50:14.663929 2026] [security2:error] [pid 2785452:tid 2785452] [client 43.132.214.228:43262] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amseVquoxR39iy4jOgZ2igAAADE"], referer: http://www.beechhouseselfcatering.co.uk
[Thu Jul 30 10:50:15.192825 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:64360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:16.011814 2026] [ssl:error] [pid 2784025:tid 2784025] (70014)End of file found: [client 216.73.216.199:1789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:16.112717 2026] [ssl:error] [pid 2779245:tid 2779245] (EAI 2)Name or service not known: [client 144.76.19.72:18628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:16.112760 2026] [ssl:error] [pid 2779245:tid 2779245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:16.179629 2026] [ssl:error] [pid 2783023:tid 2783023] (EAI 2)Name or service not known: [client 144.76.19.72:18638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:16.179668 2026] [ssl:error] [pid 2783023:tid 2783023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:16.402731 2026] [ssl:error] [pid 2782204:tid 2782204] (70014)End of file found: [client 216.73.216.199:21084] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:19.234848 2026] [ssl:error] [pid 2779246:tid 2779246] (EAI 2)Name or service not known: [client 144.76.19.72:18640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:19.234883 2026] [ssl:error] [pid 2779246:tid 2779246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:19.289515 2026] [ssl:error] [pid 2776893:tid 2776893] (EAI 2)Name or service not known: [client 144.76.19.72:18644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:19.289589 2026] [ssl:error] [pid 2776893:tid 2776893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:20.287845 2026] [core:error] [pid 2776377:tid 2776377] [client 66.249.66.167:59344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:20.287882 2026] [core:error] [pid 2776377:tid 2776377] [client 66.249.66.167:59344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:20.289271 2026] [core:error] [pid 2783986:tid 2783986] [client 66.249.66.167:39815] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:20.289292 2026] [core:error] [pid 2783986:tid 2783986] [client 66.249.66.167:39815] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:20.715426 2026] [security2:error] [pid 2784563:tid 2784563] [client 85.208.98.19:50394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.clarepillinger.co.uk"] [uri "/konik-u%C3%A7lu-matkap-ucu-k.html"] [unique_id "amseXB0bOQQskdS-JF-A7gAAAAA"]
[Thu Jul 30 10:50:20.896535 2026] [lsapi:warn] [pid 2773215:tid 2773215] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:50:21.824717 2026] [ssl:error] [pid 2784024:tid 2784024] (70014)End of file found: [client 216.73.216.199:54245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:22.124670 2026] [ssl:error] [pid 2784782:tid 2784782] (70014)End of file found: [client 216.73.216.199:17289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:22.349385 2026] [ssl:error] [pid 2785453:tid 2785453] (EAI 2)Name or service not known: [client 144.76.19.72:38948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:22.349428 2026] [ssl:error] [pid 2785453:tid 2785453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:22.407495 2026] [ssl:error] [pid 2784563:tid 2784563] (EAI 2)Name or service not known: [client 144.76.19.72:38958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:22.407525 2026] [ssl:error] [pid 2784563:tid 2784563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:22.619399 2026] [ssl:error] [pid 2776828:tid 2776828] (70014)End of file found: [client 216.73.216.199:25942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:23.040566 2026] [core:error] [pid 2785453:tid 2785453] [client 66.249.64.172:53463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:23.040606 2026] [core:error] [pid 2785453:tid 2785453] [client 66.249.64.172:53463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:24.932827 2026] [core:error] [pid 2784563:tid 2784563] [client 66.249.66.8:56451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:24.932857 2026] [core:error] [pid 2784563:tid 2784563] [client 66.249.66.8:56451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:25.462342 2026] [ssl:error] [pid 2757638:tid 2757638] (EAI 2)Name or service not known: [client 144.76.19.72:38964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:25.462373 2026] [ssl:error] [pid 2757638:tid 2757638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:25.513827 2026] [ssl:error] [pid 2780622:tid 2780622] (EAI 2)Name or service not known: [client 144.76.19.72:38980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:25.513857 2026] [ssl:error] [pid 2780622:tid 2780622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:27.252817 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:50:27.271597 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 10:50:27.271655 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.290315 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 10:50:27.290366 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.308864 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 10:50:27.308913 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.327398 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/xa.php
[Thu Jul 30 10:50:27.327438 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.361573 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/media.php
[Thu Jul 30 10:50:27.361638 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.380096 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 10:50:27.380135 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.398466 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko.php
[Thu Jul 30 10:50:27.398505 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.416970 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/82.php
[Thu Jul 30 10:50:27.417011 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.435697 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/xstelth.php
[Thu Jul 30 10:50:27.435764 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.481747 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/xp.php
[Thu Jul 30 10:50:27.481791 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.500282 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:50:27.500331 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.522211 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/adminner.php
[Thu Jul 30 10:50:27.522250 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.540522 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 10:50:27.540562 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.562938 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 10:50:27.562980 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.581488 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 10:50:27.581535 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.618466 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 10:50:27.618513 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.639077 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 10:50:27.657619 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:50:27.676630 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 10:50:27.676689 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.705867 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 10:50:27.705911 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.724492 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/FWAZ.php
[Thu Jul 30 10:50:27.724532 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.743018 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/biufile.php
[Thu Jul 30 10:50:27.743057 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.762959 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/coffexium.php
[Thu Jul 30 10:50:27.762995 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.781558 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 10:50:27.781609 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.800120 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 10:50:27.800160 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.818563 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/dex.php
[Thu Jul 30 10:50:27.818614 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.849289 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 10:50:27.849386 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.867909 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 10:50:27.905527 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/config.json.php
[Thu Jul 30 10:50:27.905566 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.933964 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/k2.php
[Thu Jul 30 10:50:27.934026 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.952632 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/raw.php
[Thu Jul 30 10:50:27.952673 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:27.985876 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 10:50:27.985918 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.017146 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/fffm.php
[Thu Jul 30 10:50:28.017195 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.056874 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/111.php
[Thu Jul 30 10:50:28.056924 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.092957 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 10:50:28.112008 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/ws.php
[Thu Jul 30 10:50:28.112057 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.130622 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/coffee.php
[Thu Jul 30 10:50:28.130671 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.149195 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 10:50:28.149238 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.234885 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:50:28.234935 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.340438 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 10:50:28.340484 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.358876 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 10:50:28.358930 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.382940 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 10:50:28.382986 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.401249 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 10:50:28.401289 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.419622 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 10:50:28.419667 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.438000 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 10:50:28.438039 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.450144 2026] [ssl:error] [pid 2778629:tid 2778629] (70014)End of file found: [client 216.73.216.199:25762] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:28.456509 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 10:50:28.456543 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.475024 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 10:50:28.475087 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.493515 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/234ff.php
[Thu Jul 30 10:50:28.493558 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.512003 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/133.php
[Thu Jul 30 10:50:28.512042 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.570491 2026] [ssl:error] [pid 2786633:tid 2786633] (EAI 2)Name or service not known: [client 144.76.19.72:38990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:28.570530 2026] [ssl:error] [pid 2786633:tid 2786633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:28.572995 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-ws68.php
[Thu Jul 30 10:50:28.573035 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.591379 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/mgrr.php
[Thu Jul 30 10:50:28.591422 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 4.185.41.66:15625] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 10:50:28.655644 2026] [ssl:error] [pid 2784846:tid 2784846] (EAI 2)Name or service not known: [client 144.76.19.72:38992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:28.655676 2026] [ssl:error] [pid 2784846:tid 2784846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:28.754621 2026] [core:error] [pid 2780622:tid 2780622] (13)Permission denied: [client 216.73.216.199:33593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libnvdimm/sections/__kcrctab
[Thu Jul 30 10:50:29.469383 2026] [core:error] [pid 2769574:tid 2769574] [client 66.249.64.171:38597] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:29.469410 2026] [core:error] [pid 2769574:tid 2769574] [client 66.249.64.171:38597] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:29.991905 2026] [security2:error] [pid 2769574:tid 2769574] [client 85.208.98.19:54292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/9242s-k.html"] [unique_id "amseZQsYDQE1K4j7Fk56jAAAACA"]
[Thu Jul 30 10:50:30.257063 2026] [ssl:error] [pid 2786663:tid 2786663] (70014)End of file found: [client 216.73.216.199:26283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:30.516039 2026] [autoindex:error] [pid 2784024:tid 2784024] [client 52.238.199.152:59473] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:50:31.254176 2026] [autoindex:error] [pid 2775668:tid 2775668] [client 52.238.199.152:9707] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:50:31.626364 2026] [lsapi:warn] [pid 2780664:tid 2780664] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:50:31.711996 2026] [ssl:error] [pid 2784024:tid 2784024] (EAI 2)Name or service not known: [client 144.76.19.72:55904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:31.712034 2026] [ssl:error] [pid 2784024:tid 2784024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:31.763636 2026] [ssl:error] [pid 2783751:tid 2783751] (EAI 2)Name or service not known: [client 144.76.19.72:55908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:31.763686 2026] [ssl:error] [pid 2783751:tid 2783751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:32.670265 2026] [ssl:error] [pid 2780622:tid 2780622] (70014)End of file found: [client 216.73.216.199:33593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:33.907226 2026] [authz_core:error] [pid 2783921:tid 2783921] [client 66.249.66.34:47116] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:50:33.909900 2026] [authz_core:error] [pid 2783921:tid 2783921] [client 66.249.66.34:47116] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:50:34.510595 2026] [core:error] [pid 2778629:tid 2778629] [client 66.249.66.168:42492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:34.510632 2026] [core:error] [pid 2778629:tid 2778629] [client 66.249.66.168:42492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:50:34.821098 2026] [ssl:error] [pid 2785453:tid 2785453] (EAI 2)Name or service not known: [client 144.76.19.72:55920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:34.821132 2026] [ssl:error] [pid 2785453:tid 2785453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:34.875652 2026] [ssl:error] [pid 2776893:tid 2776893] (EAI 2)Name or service not known: [client 144.76.19.72:55936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:34.875681 2026] [ssl:error] [pid 2776893:tid 2776893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:35.074818 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:18560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:35.981551 2026] [ssl:error] [pid 2785453:tid 2785453] (70014)End of file found: [client 216.73.216.199:7222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:37.721225 2026] [autoindex:error] [pid 2784782:tid 2784782] [client 52.238.199.152:51503] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:50:37.933593 2026] [ssl:error] [pid 2776377:tid 2776377] (EAI 2)Name or service not known: [client 144.76.19.72:55944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:37.933619 2026] [ssl:error] [pid 2776377:tid 2776377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:37.988099 2026] [ssl:error] [pid 2778629:tid 2778629] (EAI 2)Name or service not known: [client 144.76.19.72:55958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:37.988124 2026] [ssl:error] [pid 2778629:tid 2778629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:38.591551 2026] [ssl:error] [pid 2779246:tid 2779246] (70014)End of file found: [client 216.73.216.199:23543] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:38.957202 2026] [security2:error] [pid 2781757:tid 2781757] [client 151.241.236.108:64927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/favicon.png"] [unique_id "amseboYagVFwGKSh4pktxwAAAAI"], referer: https://robin64.co.uk/
[Thu Jul 30 10:50:41.068614 2026] [ssl:error] [pid 2787069:tid 2787069] (EAI 2)Name or service not known: [client 144.76.19.72:62956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:41.068710 2026] [ssl:error] [pid 2787069:tid 2787069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:41.121458 2026] [ssl:error] [pid 2786633:tid 2786633] (EAI 2)Name or service not known: [client 144.76.19.72:62958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:41.121497 2026] [ssl:error] [pid 2786633:tid 2786633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:41.900896 2026] [ssl:error] [pid 2781757:tid 2781757] (70014)End of file found: [client 216.73.216.199:26985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:42.350470 2026] [lsapi:warn] [pid 2787069:tid 2787069] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:50:42.641077 2026] [security2:error] [pid 2787027:tid 2787027] [client 85.208.96.212:15796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.720.html"] [unique_id "amseciFT4y5iZv5nGGRREgAAACI"]
[Thu Jul 30 10:50:43.409406 2026] [ssl:error] [pid 2776825:tid 2776825] (70014)End of file found: [client 216.73.216.199:46681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:44.175359 2026] [ssl:error] [pid 2787027:tid 2787027] (EAI 2)Name or service not known: [client 144.76.19.72:62970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:44.175395 2026] [ssl:error] [pid 2787027:tid 2787027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:44.233571 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:62980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:44.233616 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:44.307640 2026] [ssl:error] [pid 2775668:tid 2775668] (70014)End of file found: [client 216.73.216.199:15530] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:47.286785 2026] [ssl:error] [pid 2757638:tid 2757638] (EAI 2)Name or service not known: [client 144.76.19.72:62986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:47.286812 2026] [ssl:error] [pid 2757638:tid 2757638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:47.342583 2026] [ssl:error] [pid 2782205:tid 2782205] (EAI 2)Name or service not known: [client 144.76.19.72:63000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:47.342609 2026] [ssl:error] [pid 2782205:tid 2782205] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:47.625289 2026] [ssl:error] [pid 2780622:tid 2780622] (70014)End of file found: [client 216.73.216.199:38669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:49.687392 2026] [security2:error] [pid 2776827:tid 2776827] [client 110.249.201.200:46216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/robots.txt"] [unique_id "amseefFfzwwgsbD669AoHAAAADU"]
[Thu Jul 30 10:50:50.404378 2026] [ssl:error] [pid 2776825:tid 2776825] (EAI 2)Name or service not known: [client 144.76.19.72:52122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:50.404418 2026] [ssl:error] [pid 2776825:tid 2776825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:50.455691 2026] [ssl:error] [pid 2784024:tid 2784024] (EAI 2)Name or service not known: [client 144.76.19.72:52124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:50.455729 2026] [ssl:error] [pid 2784024:tid 2784024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:50.632160 2026] [ssl:error] [pid 2781757:tid 2781757] (70014)End of file found: [client 216.73.216.199:4367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:50.937316 2026] [ssl:error] [pid 2776893:tid 2776893] (70014)End of file found: [client 216.73.216.199:2479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:52.049265 2026] [autoindex:error] [pid 2775668:tid 2775668] [client 52.238.199.152:40934] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:50:52.053778 2026] [authz_core:error] [pid 2776825:tid 2776825] [client 66.249.66.34:59517] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:50:52.056452 2026] [authz_core:error] [pid 2776825:tid 2776825] [client 66.249.66.34:59517] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:50:52.931498 2026] [ssl:error] [pid 2757638:tid 2757638] (70014)End of file found: [client 216.73.216.199:5547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:53.226762 2026] [lsapi:warn] [pid 2759255:tid 2759255] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:50:53.512118 2026] [ssl:error] [pid 2787069:tid 2787069] (EAI 2)Name or service not known: [client 144.76.19.72:52128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:53.512150 2026] [ssl:error] [pid 2787069:tid 2787069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:53.568503 2026] [ssl:error] [pid 2775347:tid 2775347] (EAI 2)Name or service not known: [client 144.76.19.72:52142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:53.568537 2026] [ssl:error] [pid 2775347:tid 2775347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:56.621089 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:52144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:56.621133 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:56.675497 2026] [ssl:error] [pid 2776893:tid 2776893] (EAI 2)Name or service not known: [client 144.76.19.72:52160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:56.675535 2026] [ssl:error] [pid 2776893:tid 2776893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:57.220561 2026] [autoindex:error] [pid 2787070:tid 2787070] [client 52.238.199.152:40953] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:50:57.259914 2026] [core:error] [pid 2782206:tid 2782206] (13)Permission denied: [client 216.73.216.199:10835] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS2/uartclk
[Thu Jul 30 10:50:59.065219 2026] [ssl:error] [pid 2775380:tid 2775380] (70014)End of file found: [client 216.73.216.199:14904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:50:59.732504 2026] [ssl:error] [pid 2787070:tid 2787070] (EAI 2)Name or service not known: [client 144.76.19.72:45060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:59.732551 2026] [ssl:error] [pid 2787070:tid 2787070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:50:59.786025 2026] [ssl:error] [pid 2784563:tid 2784563] (EAI 2)Name or service not known: [client 144.76.19.72:45076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:50:59.786056 2026] [ssl:error] [pid 2784563:tid 2784563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:00.134960 2026] [core:error] [pid 2786663:tid 2786663] [client 66.249.66.66:55605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:00.134987 2026] [core:error] [pid 2786663:tid 2786663] [client 66.249.66.66:55605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:00.569911 2026] [core:error] [pid 2782206:tid 2782206] (13)Permission denied: [client 216.73.216.199:10835] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu1/crash_notes
[Thu Jul 30 10:51:00.870742 2026] [ssl:error] [pid 2782206:tid 2782206] (70014)End of file found: [client 216.73.216.199:10835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:02.071322 2026] [ssl:error] [pid 2786663:tid 2786663] (70014)End of file found: [client 216.73.216.199:5120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:02.843716 2026] [ssl:error] [pid 2785452:tid 2785452] (EAI 2)Name or service not known: [client 144.76.19.72:45102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:02.843761 2026] [ssl:error] [pid 2785452:tid 2785452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:02.898506 2026] [ssl:error] [pid 2762295:tid 2762295] (EAI 2)Name or service not known: [client 144.76.19.72:45108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:02.898534 2026] [ssl:error] [pid 2762295:tid 2762295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:04.034609 2026] [lsapi:warn] [pid 2775347:tid 2775347] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:51:04.367092 2026] [ssl:error] [pid 2787537:tid 2787537] (70014)End of file found: [client 216.73.216.199:38395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:04.384484 2026] [security2:error] [pid 2776825:tid 2776825] [client 85.208.96.212:14056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/lyndon-b-johnson-civil-rights-act"] [unique_id "amseiDbBWLrlcnMAg0UMNAAAAC0"]
[Thu Jul 30 10:51:05.955273 2026] [ssl:error] [pid 2785452:tid 2785452] (EAI 2)Name or service not known: [client 144.76.19.72:45128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:05.955300 2026] [ssl:error] [pid 2785452:tid 2785452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:06.009375 2026] [ssl:error] [pid 2776825:tid 2776825] (EAI 2)Name or service not known: [client 144.76.19.72:45138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:06.009404 2026] [ssl:error] [pid 2776825:tid 2776825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:06.190678 2026] [ssl:error] [pid 2775347:tid 2775347] (70014)End of file found: [client 216.73.216.199:34553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:06.289194 2026] [security2:error] [pid 2776377:tid 2776377] [client 85.208.98.31:48116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/tork-anahtarlari-k.html"] [unique_id "amseimNBPUIStkHZMCJf2QAAABU"]
[Thu Jul 30 10:51:07.284183 2026] [security2:error] [pid 2785452:tid 2785452] [client 150.5.134.22:22265] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsei6uoxR39iy4jOgZ2mgAAADE"]
[Thu Jul 30 10:51:07.284238 2026] [security2:error] [pid 2785452:tid 2785452] [client 150.5.134.22:22265] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsei6uoxR39iy4jOgZ2mgAAADE"]
[Thu Jul 30 10:51:07.284491 2026] [security2:error] [pid 2785452:tid 2785452] [client 150.5.134.22:22265] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsei6uoxR39iy4jOgZ2mgAAADE"]
[Thu Jul 30 10:51:09.066491 2026] [ssl:error] [pid 2787536:tid 2787536] (EAI 2)Name or service not known: [client 144.76.19.72:45158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:09.066536 2026] [ssl:error] [pid 2787536:tid 2787536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:09.122913 2026] [ssl:error] [pid 2776377:tid 2776377] (EAI 2)Name or service not known: [client 144.76.19.72:45174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:09.122956 2026] [ssl:error] [pid 2776377:tid 2776377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:09.509977 2026] [security2:error] [pid 2776377:tid 2776377] [client 169.224.29.40:23220] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsejWNBPUIStkHZMCJf3AAAABU"]
[Thu Jul 30 10:51:09.510034 2026] [security2:error] [pid 2776377:tid 2776377] [client 169.224.29.40:23220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsejWNBPUIStkHZMCJf3AAAABU"]
[Thu Jul 30 10:51:09.510303 2026] [security2:error] [pid 2776377:tid 2776377] [client 169.224.29.40:23220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsejWNBPUIStkHZMCJf3AAAABU"]
[Thu Jul 30 10:51:09.812138 2026] [ssl:error] [pid 2782206:tid 2782206] (70014)End of file found: [client 216.73.216.199:3191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:10.299251 2026] [ssl:error] [pid 2776377:tid 2776377] (70014)End of file found: [client 216.73.216.199:11985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:12.194937 2026] [ssl:error] [pid 2788221:tid 2788221] (EAI 2)Name or service not known: [client 144.76.19.72:32220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:12.194973 2026] [ssl:error] [pid 2788221:tid 2788221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:12.221420 2026] [ssl:error] [pid 2775347:tid 2775347] (70014)End of file found: [client 216.73.216.199:22753] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:12.248846 2026] [ssl:error] [pid 2788514:tid 2788514] (EAI 2)Name or service not known: [client 144.76.19.72:32226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:12.248882 2026] [ssl:error] [pid 2788514:tid 2788514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:14.870444 2026] [lsapi:warn] [pid 2788514:tid 2788514] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:51:15.303296 2026] [ssl:error] [pid 2773213:tid 2773213] (EAI 2)Name or service not known: [client 144.76.19.72:32236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:15.303326 2026] [ssl:error] [pid 2773213:tid 2773213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:15.357557 2026] [ssl:error] [pid 2784024:tid 2784024] (EAI 2)Name or service not known: [client 144.76.19.72:32242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:15.357588 2026] [ssl:error] [pid 2784024:tid 2784024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:15.816735 2026] [ssl:error] [pid 2783751:tid 2783751] (70014)End of file found: [client 216.73.216.199:59970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:17.216845 2026] [core:error] [pid 2776828:tid 2776828] [client 66.249.66.167:58327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:17.216875 2026] [core:error] [pid 2776828:tid 2776828] [client 66.249.66.167:58327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:17.472621 2026] [security2:error] [pid 2786633:tid 2786633] [client 85.132.117.215:12043] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amselffKqySevGlB8NrvSgAAAA8"]
[Thu Jul 30 10:51:17.472685 2026] [security2:error] [pid 2786633:tid 2786633] [client 85.132.117.215:12043] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amselffKqySevGlB8NrvSgAAAA8"]
[Thu Jul 30 10:51:17.473021 2026] [security2:error] [pid 2786633:tid 2786633] [client 85.132.117.215:12043] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amselffKqySevGlB8NrvSgAAAA8"]
[Thu Jul 30 10:51:18.190932 2026] [security2:error] [pid 2781757:tid 2781757] [client 114.119.157.183:37619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1562540400/cat_ids~104,14/request_format~html"] [unique_id "amseloYagVFwGKSh4pkt2wAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1562540400/request_format~html/cat_ids~104
[Thu Jul 30 10:51:18.411908 2026] [ssl:error] [pid 2775380:tid 2775380] (EAI 2)Name or service not known: [client 144.76.19.72:32248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:18.411951 2026] [ssl:error] [pid 2775380:tid 2775380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:18.466535 2026] [ssl:error] [pid 2788221:tid 2788221] (EAI 2)Name or service not known: [client 144.76.19.72:32250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:18.466590 2026] [ssl:error] [pid 2788221:tid 2788221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:19.427896 2026] [ssl:error] [pid 2788514:tid 2788514] (70014)End of file found: [client 216.73.216.199:9200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:19.699035 2026] [security2:error] [pid 2776377:tid 2776377] [client 114.119.157.183:37621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1562540400/cat_ids~104,14/request_format~html"] [unique_id "amsel2NBPUIStkHZMCJf5AAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1562540400/request_format~html/cat_ids~104
[Thu Jul 30 10:51:19.730216 2026] [core:error] [pid 2773213:tid 2773213] (13)Permission denied: [client 216.73.216.199:18072] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/ima/uevent
[Thu Jul 30 10:51:21.520515 2026] [ssl:error] [pid 2783986:tid 2783986] (EAI 2)Name or service not known: [client 144.76.19.72:26280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:21.520562 2026] [ssl:error] [pid 2783986:tid 2783986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:21.536355 2026] [ssl:error] [pid 2773213:tid 2773213] (70014)End of file found: [client 216.73.216.199:18072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:21.578400 2026] [ssl:error] [pid 2782204:tid 2782204] (EAI 2)Name or service not known: [client 144.76.19.72:26288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:21.578441 2026] [ssl:error] [pid 2782204:tid 2782204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:22.022341 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:4794] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:51:22.434171 2026] [security2:error] [pid 2763624:tid 2763624] [client 216.73.216.199:4794] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/dnf.conf"] [unique_id "amseml2hLC_auzYZYEy2RgAAACQ"]
[Thu Jul 30 10:51:22.434627 2026] [security2:error] [pid 2763624:tid 2763624] [client 216.73.216.199:4794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/dnf.conf"] [unique_id "amseml2hLC_auzYZYEy2RgAAACQ"]
[Thu Jul 30 10:51:22.434972 2026] [security2:error] [pid 2763624:tid 2763624] [client 216.73.216.199:4794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/dnf.conf"] [unique_id "amseml2hLC_auzYZYEy2RgAAACQ"]
[Thu Jul 30 10:51:22.873227 2026] [autoindex:error] [pid 2778630:tid 2778630] [client 52.238.199.152:23773] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:51:22.945719 2026] [security2:error] [pid 2787536:tid 2787536] [client 52.204.71.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/index.php/customer/account/create/"] [unique_id "amsempdDSoxWEj4VOGYCGgAAAA0"]
[Thu Jul 30 10:51:23.328727 2026] [security2:error] [pid 2787536:tid 2787536] [client 54.166.126.132:62611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsem5dDSoxWEj4VOGYCGwAAAA0"]
[Thu Jul 30 10:51:23.738049 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.66.194:62822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:23.738085 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.66.194:62822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:23.739311 2026] [core:error] [pid 2762295:tid 2762295] [client 66.249.66.167:50927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:23.739329 2026] [core:error] [pid 2762295:tid 2762295] [client 66.249.66.167:50927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:23.939078 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:4794] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:51:24.632038 2026] [ssl:error] [pid 2787467:tid 2787467] (EAI 2)Name or service not known: [client 144.76.19.72:26300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:24.632084 2026] [ssl:error] [pid 2787467:tid 2787467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:24.683802 2026] [ssl:error] [pid 2776828:tid 2776828] (EAI 2)Name or service not known: [client 144.76.19.72:26314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:24.683846 2026] [ssl:error] [pid 2776828:tid 2776828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:25.740104 2026] [lsapi:warn] [pid 2788474:tid 2788474] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:51:26.649487 2026] [ssl:error] [pid 2763624:tid 2763624] (70014)End of file found: [client 216.73.216.199:4794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:27.740871 2026] [ssl:error] [pid 2786663:tid 2786663] (EAI 2)Name or service not known: [client 144.76.19.72:26322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:27.740905 2026] [ssl:error] [pid 2786663:tid 2786663] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:27.797957 2026] [ssl:error] [pid 2788514:tid 2788514] (EAI 2)Name or service not known: [client 144.76.19.72:26328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:27.797985 2026] [ssl:error] [pid 2788514:tid 2788514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:28.634791 2026] [core:error] [pid 2786663:tid 2786663] [client 51.120.83.160:25634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:28.634819 2026] [core:error] [pid 2786663:tid 2786663] [client 51.120.83.160:25634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:29.057516 2026] [core:error] [pid 2785452:tid 2785452] (13)Permission denied: [client 216.73.216.199:65043] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:55/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:51:29.118947 2026] [security2:error] [pid 2780622:tid 2780622] [client 162.14.109.170:59564] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amseofhz4QhFrQnpNjHUdQAAABI"]
[Thu Jul 30 10:51:29.249939 2026] [access_compat:error] [pid 2787536:tid 2787536] [client 51.120.83.160:25325] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/this_is_a_new_hello_world.php
[Thu Jul 30 10:51:29.250324 2026] [core:error] [pid 2787536:tid 2787536] [client 51.120.83.160:25325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:29.286052 2026] [autoindex:error] [pid 2788514:tid 2788514] [client 52.238.199.152:23633] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 10:51:29.660336 2026] [ssl:error] [pid 2785452:tid 2785452] (70014)End of file found: [client 216.73.216.199:65043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:29.960829 2026] [core:error] [pid 2773213:tid 2773213] (13)Permission denied: [client 216.73.216.199:23815] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS0/closing_wait
[Thu Jul 30 10:51:30.853810 2026] [ssl:error] [pid 2763839:tid 2763839] (EAI 2)Name or service not known: [client 144.76.19.72:50658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:30.853866 2026] [ssl:error] [pid 2763839:tid 2763839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:30.909450 2026] [ssl:error] [pid 2787069:tid 2787069] (EAI 2)Name or service not known: [client 144.76.19.72:50664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:30.909477 2026] [ssl:error] [pid 2787069:tid 2787069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:31.469499 2026] [core:error] [pid 2787027:tid 2787027] [client 66.249.66.3:51129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:31.469528 2026] [core:error] [pid 2787027:tid 2787027] [client 66.249.66.3:51129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:31.594299 2026] [security2:error] [pid 2780665:tid 2780665] [client 162.14.109.170:56078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amseo9aBvY10O0NlRc8XpAAAABw"], referer: http://raidersofthegamecupboard.co.uk
[Thu Jul 30 10:51:33.294562 2026] [authz_core:error] [pid 2776893:tid 2776893] [client 66.249.66.35:48755] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:51:33.297237 2026] [authz_core:error] [pid 2776893:tid 2776893] [client 66.249.66.35:48755] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:51:33.572974 2026] [ssl:error] [pid 2773213:tid 2773213] (70014)End of file found: [client 216.73.216.199:23815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:33.962491 2026] [ssl:error] [pid 2787536:tid 2787536] (EAI 2)Name or service not known: [client 144.76.19.72:50670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:33.962519 2026] [ssl:error] [pid 2787536:tid 2787536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:34.014189 2026] [ssl:error] [pid 2759255:tid 2759255] (EAI 2)Name or service not known: [client 144.76.19.72:50676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:34.014220 2026] [ssl:error] [pid 2759255:tid 2759255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:34.232811 2026] [core:error] [pid 2776377:tid 2776377] [client 51.120.83.160:18681] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:34.232843 2026] [core:error] [pid 2776377:tid 2776377] [client 51.120.83.160:18681] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:36.053459 2026] [security2:error] [pid 2776828:tid 2776828] [client 51.68.111.216:22211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amseqLfc8tUWOSCkrveqPwAAADY"]
[Thu Jul 30 10:51:36.489652 2026] [access_compat:error] [pid 2783751:tid 2783751] [client 51.120.83.160:17295] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/red.php
[Thu Jul 30 10:51:36.490007 2026] [core:error] [pid 2783751:tid 2783751] [client 51.120.83.160:17295] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:36.585666 2026] [ssl:error] [pid 2787027:tid 2787027] (70014)End of file found: [client 216.73.216.199:23348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:36.594468 2026] [lsapi:warn] [pid 2772203:tid 2772203] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:51:37.108772 2026] [ssl:error] [pid 2783751:tid 2783751] (EAI 2)Name or service not known: [client 144.76.19.72:50680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:37.108800 2026] [ssl:error] [pid 2783751:tid 2783751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:37.166270 2026] [ssl:error] [pid 2780665:tid 2780665] (EAI 2)Name or service not known: [client 144.76.19.72:50688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:37.166310 2026] [ssl:error] [pid 2780665:tid 2780665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:37.562127 2026] [security2:error] [pid 2772203:tid 2772203] [client 111.225.149.149:50054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/robots.txt"] [unique_id "amseqYl9d-O9dmm-s3aN2QAAACM"]
[Thu Jul 30 10:51:39.587867 2026] [authz_core:error] [pid 2788975:tid 2788975] [client 20.206.204.219:56618] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 10:51:40.280193 2026] [ssl:error] [pid 2776828:tid 2776828] (EAI 2)Name or service not known: [client 144.76.19.72:21370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:40.280232 2026] [ssl:error] [pid 2776828:tid 2776828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:40.334868 2026] [ssl:error] [pid 2784563:tid 2784563] (EAI 2)Name or service not known: [client 144.76.19.72:21384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:40.334896 2026] [ssl:error] [pid 2784563:tid 2784563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:42.931696 2026] [ssl:error] [pid 2763839:tid 2763839] (70014)End of file found: [client 216.73.216.199:48597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:43.387452 2026] [ssl:error] [pid 2787027:tid 2787027] (EAI 2)Name or service not known: [client 144.76.19.72:21394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:43.387519 2026] [ssl:error] [pid 2787027:tid 2787027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:43.441998 2026] [ssl:error] [pid 2786663:tid 2786663] (EAI 2)Name or service not known: [client 144.76.19.72:21396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:43.442049 2026] [ssl:error] [pid 2786663:tid 2786663] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:43.597177 2026] [cgi:error] [pid 2763624:tid 2763624] [client 194.9.110.170:20971] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:51:44.143398 2026] [ssl:error] [pid 2776828:tid 2776828] (70014)End of file found: [client 216.73.216.199:12294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:46.497169 2026] [ssl:error] [pid 2788474:tid 2788474] (EAI 2)Name or service not known: [client 144.76.19.72:21412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:46.497212 2026] [ssl:error] [pid 2788474:tid 2788474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:46.550792 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:21420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:46.550825 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:47.238794 2026] [access_compat:error] [pid 2775347:tid 2775347] [client 51.120.83.160:25283] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/cc.php
[Thu Jul 30 10:51:47.239178 2026] [core:error] [pid 2775347:tid 2775347] [client 51.120.83.160:25283] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:47.351316 2026] [lsapi:warn] [pid 2788221:tid 2788221] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:51:47.650046 2026] [ssl:error] [pid 2776893:tid 2776893] [client 3.233.59.216:17862] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname spamp.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 10:51:48.251482 2026] [security2:error] [pid 2784024:tid 2784024] [client 85.208.96.207:19230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.7425.html"] [unique_id "amsetF97tk88SxNYyxvvbgAAACE"]
[Thu Jul 30 10:51:48.657834 2026] [access_compat:error] [pid 2775380:tid 2775380] [client 158.158.32.229:40236] AH01797: client denied by server configuration: /home/clientseodata/public_html/.well-known/about.php
[Thu Jul 30 10:51:48.778164 2026] [access_compat:error] [pid 2783751:tid 2783751] [client 51.120.83.160:20766] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/log.php
[Thu Jul 30 10:51:48.778515 2026] [core:error] [pid 2783751:tid 2783751] [client 51.120.83.160:20766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:49.162367 2026] [ssl:error] [pid 2788515:tid 2788515] (70014)End of file found: [client 216.73.216.199:29604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:49.603897 2026] [cgi:error] [pid 2775380:tid 2775380] [client 158.158.32.229:40236] AH02811: stderr from /home/clientseodata/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:51:49.603973 2026] [ssl:error] [pid 2763839:tid 2763839] (EAI 2)Name or service not known: [client 144.76.19.72:47048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:49.604012 2026] [ssl:error] [pid 2763839:tid 2763839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:49.655589 2026] [ssl:error] [pid 2784024:tid 2784024] (EAI 2)Name or service not known: [client 144.76.19.72:47062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:49.655620 2026] [ssl:error] [pid 2784024:tid 2784024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:50.060808 2026] [ssl:error] [pid 2759602:tid 2759602] (70014)End of file found: [client 216.73.216.199:34091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:50.475200 2026] [cgi:error] [pid 2775380:tid 2775380] [client 158.158.32.229:40236] AH02811: stderr from /home/clientseodata/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:51:50.659914 2026] [authz_core:error] [pid 2785452:tid 2785452] [client 20.206.204.219:58695] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 10:51:50.662301 2026] [security2:error] [pid 2778592:tid 2778592] [client 216.73.216.199:1937] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/imunify-agent-proxy.log"] [unique_id "amsetrfqomlIF83Q_H25IgAAAAc"]
[Thu Jul 30 10:51:50.662533 2026] [security2:error] [pid 2778592:tid 2778592] [client 216.73.216.199:1937] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/imunify-agent-proxy.log"] [unique_id "amsetrfqomlIF83Q_H25IgAAAAc"]
[Thu Jul 30 10:51:50.662740 2026] [security2:error] [pid 2778592:tid 2778592] [client 216.73.216.199:1937] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/imunify-agent-proxy.log"] [unique_id "amsetrfqomlIF83Q_H25IgAAAAc"]
[Thu Jul 30 10:51:50.846998 2026] [core:error] [pid 2787467:tid 2787467] [client 51.120.83.160:20767] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:50.847026 2026] [core:error] [pid 2787467:tid 2787467] [client 51.120.83.160:20767] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:51.193495 2026] [core:error] [pid 2776893:tid 2776893] [client 51.120.83.160:24996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:51.193522 2026] [core:error] [pid 2776893:tid 2776893] [client 51.120.83.160:24996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:51.578185 2026] [ssl:error] [pid 2778592:tid 2778592] (70014)End of file found: [client 216.73.216.199:1937] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:51:52.707849 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:47074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:52.707898 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:52.760965 2026] [ssl:error] [pid 2776893:tid 2776893] (EAI 2)Name or service not known: [client 144.76.19.72:47082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:52.760999 2026] [ssl:error] [pid 2776893:tid 2776893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:53.835551 2026] [core:error] [pid 2762295:tid 2762295] [client 66.249.66.167:53371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:53.835588 2026] [core:error] [pid 2762295:tid 2762295] [client 66.249.66.167:53371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:54.402867 2026] [access_compat:error] [pid 2773883:tid 2773883] [client 51.120.83.160:20793] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/style.php
[Thu Jul 30 10:51:54.403278 2026] [core:error] [pid 2773883:tid 2773883] [client 51.120.83.160:20793] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:55.196448 2026] [core:error] [pid 2778630:tid 2778630] (13)Permission denied: [client 216.73.216.199:49785] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/port
[Thu Jul 30 10:51:55.819167 2026] [ssl:error] [pid 2787467:tid 2787467] (EAI 2)Name or service not known: [client 144.76.19.72:47086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:55.819209 2026] [ssl:error] [pid 2787467:tid 2787467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:55.873607 2026] [ssl:error] [pid 2759602:tid 2759602] (EAI 2)Name or service not known: [client 144.76.19.72:47094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:55.873634 2026] [ssl:error] [pid 2759602:tid 2759602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:58.006129 2026] [core:error] [pid 2784846:tid 2784846] [client 51.120.83.160:25862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:58.006161 2026] [core:error] [pid 2784846:tid 2784846] [client 51.120.83.160:25862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:58.167323 2026] [lsapi:warn] [pid 2784845:tid 2784845] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:51:58.544976 2026] [access_compat:error] [pid 2789905:tid 2789905] [client 51.120.83.160:1261] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file.php
[Thu Jul 30 10:51:58.545407 2026] [core:error] [pid 2789905:tid 2789905] [client 51.120.83.160:1261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:51:58.930821 2026] [ssl:error] [pid 2773715:tid 2773715] (EAI 2)Name or service not known: [client 144.76.19.72:47100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:58.930845 2026] [ssl:error] [pid 2773715:tid 2773715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:58.985233 2026] [ssl:error] [pid 2784845:tid 2784845] (EAI 2)Name or service not known: [client 144.76.19.72:47104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:51:58.985265 2026] [ssl:error] [pid 2784845:tid 2784845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:51:59.112554 2026] [core:error] [pid 2778630:tid 2778630] (13)Permission denied: [client 216.73.216.199:49785] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/iomem_base
[Thu Jul 30 10:51:59.413233 2026] [core:error] [pid 2778630:tid 2778630] (13)Permission denied: [client 216.73.216.199:49785] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/red_zone
[Thu Jul 30 10:52:00.250814 2026] [access_compat:error] [pid 2784845:tid 2784845] [client 51.120.83.160:24871] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/uninstall.php
[Thu Jul 30 10:52:00.251244 2026] [core:error] [pid 2784845:tid 2784845] [client 51.120.83.160:24871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:00.863306 2026] [core:error] [pid 2785452:tid 2785452] [client 66.249.66.169:59181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:00.863332 2026] [core:error] [pid 2785452:tid 2785452] [client 66.249.66.169:59181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:00.919188 2026] [ssl:error] [pid 2778630:tid 2778630] (70014)End of file found: [client 216.73.216.199:49785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:01.139449 2026] [security2:error] [pid 2773715:tid 2773715] [client 43.164.196.47:37836] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amsewb4q1468wfJCllE_iwAAABk"]
[Thu Jul 30 10:52:02.040451 2026] [ssl:error] [pid 2776828:tid 2776828] (EAI 2)Name or service not known: [client 144.76.19.72:53934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:02.040488 2026] [ssl:error] [pid 2776828:tid 2776828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:02.096405 2026] [ssl:error] [pid 2787069:tid 2787069] (EAI 2)Name or service not known: [client 144.76.19.72:53948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:02.096441 2026] [ssl:error] [pid 2787069:tid 2787069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:02.124678 2026] [ssl:error] [pid 2762295:tid 2762295] (70014)End of file found: [client 216.73.216.199:16735] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:02.862564 2026] [access_compat:error] [pid 2790747:tid 2790747] [client 51.120.83.160:37745] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/la.php
[Thu Jul 30 10:52:02.863121 2026] [core:error] [pid 2790747:tid 2790747] [client 51.120.83.160:37745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:03.500096 2026] [cgi:error] [pid 2776377:tid 2776377] [client 47.128.117.246:42668] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:52:04.253675 2026] [access_compat:error] [pid 2790785:tid 2790785] [client 51.120.83.160:37712] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/css.php
[Thu Jul 30 10:52:04.254148 2026] [core:error] [pid 2790785:tid 2790785] [client 51.120.83.160:37712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:04.793862 2026] [security2:error] [pid 2776828:tid 2776828] [client 185.191.171.6:39986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/psi-upsilon-syracuse-hazing"] [unique_id "amsexLfc8tUWOSCkrveqWgAAADY"]
[Thu Jul 30 10:52:05.141488 2026] [core:error] [pid 2790672:tid 2790672] (13)Permission denied: [client 216.73.216.199:39415] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS1/closing_wait
[Thu Jul 30 10:52:05.155819 2026] [ssl:error] [pid 2790747:tid 2790747] (EAI 2)Name or service not known: [client 144.76.19.72:53972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:05.155855 2026] [ssl:error] [pid 2790747:tid 2790747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:05.214789 2026] [ssl:error] [pid 2790786:tid 2790786] (EAI 2)Name or service not known: [client 144.76.19.72:53986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:05.214838 2026] [ssl:error] [pid 2790786:tid 2790786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:05.949655 2026] [security2:error] [pid 2790788:tid 2790788] [client 152.173.137.68:40396] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsexVt1HpAwdOUM2SbJvgAAAB0"]
[Thu Jul 30 10:52:05.949722 2026] [security2:error] [pid 2790788:tid 2790788] [client 152.173.137.68:40396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsexVt1HpAwdOUM2SbJvgAAAB0"]
[Thu Jul 30 10:52:05.950009 2026] [security2:error] [pid 2790788:tid 2790788] [client 152.173.137.68:40396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsexVt1HpAwdOUM2SbJvgAAAB0"]
[Thu Jul 30 10:52:06.526274 2026] [access_compat:error] [pid 2783751:tid 2783751] [client 20.104.16.169:27679] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 10:52:07.208235 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMQAAAA0"]
[Thu Jul 30 10:52:07.208435 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMQAAAA0"]
[Thu Jul 30 10:52:07.208691 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMQAAAA0"]
[Thu Jul 30 10:52:07.225980 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/api/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMgAAAA0"]
[Thu Jul 30 10:52:07.226206 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/api/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMgAAAA0"]
[Thu Jul 30 10:52:07.226430 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/api/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMgAAAA0"]
[Thu Jul 30 10:52:07.243670 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/backend/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMwAAAA0"]
[Thu Jul 30 10:52:07.243836 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/backend/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMwAAAA0"]
[Thu Jul 30 10:52:07.244039 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/backend/.env"] [unique_id "amsex5dDSoxWEj4VOGYCMwAAAA0"]
[Thu Jul 30 10:52:07.247162 2026] [core:error] [pid 2790672:tid 2790672] (13)Permission denied: [client 216.73.216.199:39415] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/xt_conntrack/sections/__mcount_loc
[Thu Jul 30 10:52:07.279140 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/admin/.env"] [unique_id "amsex5dDSoxWEj4VOGYCNQAAAA0"]
[Thu Jul 30 10:52:07.279301 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/admin/.env"] [unique_id "amsex5dDSoxWEj4VOGYCNQAAAA0"]
[Thu Jul 30 10:52:07.279534 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/admin/.env"] [unique_id "amsex5dDSoxWEj4VOGYCNQAAAA0"]
[Thu Jul 30 10:52:07.314110 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/laravel/.env"] [unique_id "amsex5dDSoxWEj4VOGYCNwAAAA0"]
[Thu Jul 30 10:52:07.314248 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/laravel/.env"] [unique_id "amsex5dDSoxWEj4VOGYCNwAAAA0"]
[Thu Jul 30 10:52:07.314433 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/laravel/.env"] [unique_id "amsex5dDSoxWEj4VOGYCNwAAAA0"]
[Thu Jul 30 10:52:07.331665 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/core/.env"] [unique_id "amsex5dDSoxWEj4VOGYCOAAAAA0"]
[Thu Jul 30 10:52:07.331824 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/core/.env"] [unique_id "amsex5dDSoxWEj4VOGYCOAAAAA0"]
[Thu Jul 30 10:52:07.332014 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/core/.env"] [unique_id "amsex5dDSoxWEj4VOGYCOAAAAA0"]
[Thu Jul 30 10:52:07.366860 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env.example"] [unique_id "amsex5dDSoxWEj4VOGYCOgAAAA0"]
[Thu Jul 30 10:52:07.367006 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env.example"] [unique_id "amsex5dDSoxWEj4VOGYCOgAAAA0"]
[Thu Jul 30 10:52:07.367213 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env.example"] [unique_id "amsex5dDSoxWEj4VOGYCOgAAAA0"]
[Thu Jul 30 10:52:07.384420 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/app/.env"] [unique_id "amsex5dDSoxWEj4VOGYCOwAAAA0"]
[Thu Jul 30 10:52:07.384601 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/app/.env"] [unique_id "amsex5dDSoxWEj4VOGYCOwAAAA0"]
[Thu Jul 30 10:52:07.384803 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/app/.env"] [unique_id "amsex5dDSoxWEj4VOGYCOwAAAA0"]
[Thu Jul 30 10:52:07.402766 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/dev/.env"] [unique_id "amsex5dDSoxWEj4VOGYCPAAAAA0"]
[Thu Jul 30 10:52:07.402949 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/dev/.env"] [unique_id "amsex5dDSoxWEj4VOGYCPAAAAA0"]
[Thu Jul 30 10:52:07.403188 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/dev/.env"] [unique_id "amsex5dDSoxWEj4VOGYCPAAAAA0"]
[Thu Jul 30 10:52:07.438446 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/server/.env"] [unique_id "amsex5dDSoxWEj4VOGYCPgAAAA0"]
[Thu Jul 30 10:52:07.438625 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/server/.env"] [unique_id "amsex5dDSoxWEj4VOGYCPgAAAA0"]
[Thu Jul 30 10:52:07.438842 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/server/.env"] [unique_id "amsex5dDSoxWEj4VOGYCPgAAAA0"]
[Thu Jul 30 10:52:07.456192 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env.save"] [unique_id "amsex5dDSoxWEj4VOGYCPwAAAA0"]
[Thu Jul 30 10:52:07.456376 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env.save"] [unique_id "amsex5dDSoxWEj4VOGYCPwAAAA0"]
[Thu Jul 30 10:52:07.456601 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env.save"] [unique_id "amsex5dDSoxWEj4VOGYCPwAAAA0"]
[Thu Jul 30 10:52:07.479513 2026] [security2:error] [pid 2786663:tid 2786663] [client 123.20.242.0:44052] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsex_ePCowWolewXgThOwAAABM"]
[Thu Jul 30 10:52:07.479580 2026] [security2:error] [pid 2786663:tid 2786663] [client 123.20.242.0:44052] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsex_ePCowWolewXgThOwAAABM"]
[Thu Jul 30 10:52:07.479899 2026] [security2:error] [pid 2786663:tid 2786663] [client 123.20.242.0:44052] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsex_ePCowWolewXgThOwAAABM"]
[Thu Jul 30 10:52:07.491126 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/staging/.env"] [unique_id "amsex5dDSoxWEj4VOGYCQQAAAA0"]
[Thu Jul 30 10:52:07.491275 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/staging/.env"] [unique_id "amsex5dDSoxWEj4VOGYCQQAAAA0"]
[Thu Jul 30 10:52:07.491471 2026] [security2:error] [pid 2787536:tid 2787536] [client 185.93.89.167:28505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/staging/.env"] [unique_id "amsex5dDSoxWEj4VOGYCQQAAAA0"]
[Thu Jul 30 10:52:07.549329 2026] [ssl:error] [pid 2790672:tid 2790672] (70014)End of file found: [client 216.73.216.199:39415] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:08.028985 2026] [core:error] [pid 2772203:tid 2772203] [client 66.249.64.170:40298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:08.029014 2026] [core:error] [pid 2772203:tid 2772203] [client 66.249.64.170:40298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:08.273000 2026] [ssl:error] [pid 2787027:tid 2787027] (EAI 2)Name or service not known: [client 144.76.19.72:54000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:08.273035 2026] [ssl:error] [pid 2787027:tid 2787027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:08.329122 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:54014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:08.329160 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:08.447031 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:8396] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/closing_wait
[Thu Jul 30 10:52:08.748388 2026] [security2:error] [pid 2763624:tid 2763624] [client 216.73.216.199:8396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-default.conf"] [unique_id "amseyF2hLC_auzYZYEy2kQAAACQ"]
[Thu Jul 30 10:52:08.748685 2026] [security2:error] [pid 2763624:tid 2763624] [client 216.73.216.199:8396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-default.conf"] [unique_id "amseyF2hLC_auzYZYEy2kQAAACQ"]
[Thu Jul 30 10:52:08.748918 2026] [security2:error] [pid 2763624:tid 2763624] [client 216.73.216.199:8396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-default.conf"] [unique_id "amseyF2hLC_auzYZYEy2kQAAACQ"]
[Thu Jul 30 10:52:08.768405 2026] [lsapi:warn] [pid 2780664:tid 2780664] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:52:10.590962 2026] [security2:error] [pid 2787467:tid 2787467] [client 83.134.30.207:37936] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseyo1eAC-VVfR3y3T2OwAAAAQ"]
[Thu Jul 30 10:52:10.591047 2026] [security2:error] [pid 2787467:tid 2787467] [client 83.134.30.207:37936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amseyo1eAC-VVfR3y3T2OwAAAAQ"]
[Thu Jul 30 10:52:10.591423 2026] [security2:error] [pid 2787467:tid 2787467] [client 83.134.30.207:37936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amseyo1eAC-VVfR3y3T2OwAAAAQ"]
[Thu Jul 30 10:52:11.465409 2026] [ssl:error] [pid 2784846:tid 2784846] (70014)End of file found: [client 216.73.216.199:37058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:11.744436 2026] [ssl:error] [pid 2773715:tid 2773715] (EAI 2)Name or service not known: [client 144.76.19.72:40040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:11.744470 2026] [ssl:error] [pid 2773715:tid 2773715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:11.808623 2026] [ssl:error] [pid 2790745:tid 2790745] (EAI 2)Name or service not known: [client 144.76.19.72:40048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:11.808659 2026] [ssl:error] [pid 2790745:tid 2790745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:12.662101 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:8396] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:52:12.926499 2026] [authz_core:error] [pid 2785452:tid 2785452] [client 66.249.66.33:38363] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:52:12.929185 2026] [authz_core:error] [pid 2785452:tid 2785452] [client 66.249.66.33:38363] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:52:13.663592 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amsezbXrsW1jgWbmF31bLQAAAB4"]
[Thu Jul 30 10:52:13.663795 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amsezbXrsW1jgWbmF31bLQAAAB4"]
[Thu Jul 30 10:52:13.664057 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amsezbXrsW1jgWbmF31bLQAAAB4"]
[Thu Jul 30 10:52:13.680045 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/api/.env"] [unique_id "amsezbXrsW1jgWbmF31bLgAAAB4"]
[Thu Jul 30 10:52:13.680285 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/api/.env"] [unique_id "amsezbXrsW1jgWbmF31bLgAAAB4"]
[Thu Jul 30 10:52:13.680512 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/api/.env"] [unique_id "amsezbXrsW1jgWbmF31bLgAAAB4"]
[Thu Jul 30 10:52:13.696437 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/backend/.env"] [unique_id "amsezbXrsW1jgWbmF31bLwAAAB4"]
[Thu Jul 30 10:52:13.696679 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/backend/.env"] [unique_id "amsezbXrsW1jgWbmF31bLwAAAB4"]
[Thu Jul 30 10:52:13.696902 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/backend/.env"] [unique_id "amsezbXrsW1jgWbmF31bLwAAAB4"]
[Thu Jul 30 10:52:13.729994 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/admin/.env"] [unique_id "amsezbXrsW1jgWbmF31bMQAAAB4"]
[Thu Jul 30 10:52:13.730264 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/admin/.env"] [unique_id "amsezbXrsW1jgWbmF31bMQAAAB4"]
[Thu Jul 30 10:52:13.730468 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/admin/.env"] [unique_id "amsezbXrsW1jgWbmF31bMQAAAB4"]
[Thu Jul 30 10:52:13.763061 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/laravel/.env"] [unique_id "amsezbXrsW1jgWbmF31bMwAAAB4"]
[Thu Jul 30 10:52:13.763308 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/laravel/.env"] [unique_id "amsezbXrsW1jgWbmF31bMwAAAB4"]
[Thu Jul 30 10:52:13.763505 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/laravel/.env"] [unique_id "amsezbXrsW1jgWbmF31bMwAAAB4"]
[Thu Jul 30 10:52:13.779179 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/core/.env"] [unique_id "amsezbXrsW1jgWbmF31bNAAAAB4"]
[Thu Jul 30 10:52:13.779329 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/core/.env"] [unique_id "amsezbXrsW1jgWbmF31bNAAAAB4"]
[Thu Jul 30 10:52:13.779519 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/core/.env"] [unique_id "amsezbXrsW1jgWbmF31bNAAAAB4"]
[Thu Jul 30 10:52:13.811888 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env.example"] [unique_id "amsezbXrsW1jgWbmF31bNgAAAB4"]
[Thu Jul 30 10:52:13.812128 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env.example"] [unique_id "amsezbXrsW1jgWbmF31bNgAAAB4"]
[Thu Jul 30 10:52:13.812344 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env.example"] [unique_id "amsezbXrsW1jgWbmF31bNgAAAB4"]
[Thu Jul 30 10:52:13.828347 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/app/.env"] [unique_id "amsezbXrsW1jgWbmF31bNwAAAB4"]
[Thu Jul 30 10:52:13.828605 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/app/.env"] [unique_id "amsezbXrsW1jgWbmF31bNwAAAB4"]
[Thu Jul 30 10:52:13.828816 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/app/.env"] [unique_id "amsezbXrsW1jgWbmF31bNwAAAB4"]
[Thu Jul 30 10:52:13.844767 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/dev/.env"] [unique_id "amsezbXrsW1jgWbmF31bOAAAAB4"]
[Thu Jul 30 10:52:13.845001 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/dev/.env"] [unique_id "amsezbXrsW1jgWbmF31bOAAAAB4"]
[Thu Jul 30 10:52:13.845243 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/dev/.env"] [unique_id "amsezbXrsW1jgWbmF31bOAAAAB4"]
[Thu Jul 30 10:52:13.878223 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/server/.env"] [unique_id "amsezbXrsW1jgWbmF31bOgAAAB4"]
[Thu Jul 30 10:52:13.878481 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/server/.env"] [unique_id "amsezbXrsW1jgWbmF31bOgAAAB4"]
[Thu Jul 30 10:52:13.878712 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/server/.env"] [unique_id "amsezbXrsW1jgWbmF31bOgAAAB4"]
[Thu Jul 30 10:52:13.894787 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env.save"] [unique_id "amsezbXrsW1jgWbmF31bOwAAAB4"]
[Thu Jul 30 10:52:13.895028 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env.save"] [unique_id "amsezbXrsW1jgWbmF31bOwAAAB4"]
[Thu Jul 30 10:52:13.895275 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env.save"] [unique_id "amsezbXrsW1jgWbmF31bOwAAAB4"]
[Thu Jul 30 10:52:13.928062 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/staging/.env"] [unique_id "amsezbXrsW1jgWbmF31bPQAAAB4"]
[Thu Jul 30 10:52:13.928364 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/staging/.env"] [unique_id "amsezbXrsW1jgWbmF31bPQAAAB4"]
[Thu Jul 30 10:52:13.928619 2026] [security2:error] [pid 2783986:tid 2783986] [client 185.93.89.167:55509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/staging/.env"] [unique_id "amsezbXrsW1jgWbmF31bPQAAAB4"]
[Thu Jul 30 10:52:14.868235 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:40060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:14.868271 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:14.919906 2026] [ssl:error] [pid 2790747:tid 2790747] (EAI 2)Name or service not known: [client 144.76.19.72:40072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:14.919956 2026] [ssl:error] [pid 2790747:tid 2790747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:15.045789 2026] [authz_core:error] [pid 2785452:tid 2785452] [client 66.249.66.33:38363] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:52:15.048467 2026] [authz_core:error] [pid 2785452:tid 2785452] [client 66.249.66.33:38363] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:52:16.424440 2026] [authz_core:error] [pid 2790788:tid 2790788] [client 66.249.66.34:42777] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:52:16.427115 2026] [authz_core:error] [pid 2790788:tid 2790788] [client 66.249.66.34:42777] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:52:16.455250 2026] [core:error] [pid 2763624:tid 2763624] (13)Permission denied: [client 216.73.216.199:8396] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/sanity_checks
[Thu Jul 30 10:52:17.659590 2026] [ssl:error] [pid 2763624:tid 2763624] (70014)End of file found: [client 216.73.216.199:8396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:17.974514 2026] [ssl:error] [pid 2787467:tid 2787467] (EAI 2)Name or service not known: [client 144.76.19.72:40082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:17.974555 2026] [ssl:error] [pid 2787467:tid 2787467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:18.030454 2026] [ssl:error] [pid 2759602:tid 2759602] (EAI 2)Name or service not known: [client 144.76.19.72:40088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:18.030493 2026] [ssl:error] [pid 2759602:tid 2759602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:18.471401 2026] [security2:error] [pid 2783751:tid 2783751] [client 110.249.201.149:12864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hornsey-town-hall.org.uk"] [uri "/robots.txt"] [unique_id "amse0pXHnDWy_sxNa4iAeQAAAAg"]
[Thu Jul 30 10:52:19.332023 2026] [security2:error] [pid 2776828:tid 2776828] [client 114.119.155.69:34373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/author/Jacqui/"] [unique_id "amse07fc8tUWOSCkrveqYQAAADY"], referer: http://woodsandgreenfurniture.co.uk/img_9292-2
[Thu Jul 30 10:52:19.432796 2026] [lsapi:warn] [pid 2787467:tid 2787467] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:52:19.664439 2026] [security2:error] [pid 2788221:tid 2788221] [client 85.208.98.20:53608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/metrik-di%C5%9F-k.html"] [unique_id "amse0zhjWZdQ_Ppv_9wATAAAABY"]
[Thu Jul 30 10:52:19.772181 2026] [ssl:error] [pid 2787070:tid 2787070] (70014)End of file found: [client 216.73.216.199:9072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:21.088349 2026] [ssl:error] [pid 2776828:tid 2776828] (EAI 2)Name or service not known: [client 144.76.19.72:56258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:21.088400 2026] [ssl:error] [pid 2776828:tid 2776828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:21.144367 2026] [ssl:error] [pid 2788514:tid 2788514] (EAI 2)Name or service not known: [client 144.76.19.72:56272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:21.144418 2026] [ssl:error] [pid 2788514:tid 2788514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:22.325927 2026] [core:error] [pid 2784563:tid 2784563] [client 66.249.64.171:64507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:22.325957 2026] [core:error] [pid 2784563:tid 2784563] [client 66.249.64.171:64507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:23.388152 2026] [ssl:error] [pid 2783751:tid 2783751] (70014)End of file found: [client 216.73.216.199:53299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:23.424631 2026] [security2:error] [pid 2763839:tid 2763839] [client 52.54.15.103:61428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2024/09/6-Easedale-Tarn-300x300.jpg"] [unique_id "amse16KxgsiXB8PPCH51AgAAACg"]
[Thu Jul 30 10:52:24.199228 2026] [ssl:error] [pid 2787467:tid 2787467] (EAI 2)Name or service not known: [client 144.76.19.72:56274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:24.199272 2026] [ssl:error] [pid 2787467:tid 2787467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:24.252801 2026] [ssl:error] [pid 2791291:tid 2791291] (EAI 2)Name or service not known: [client 144.76.19.72:56286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:24.252867 2026] [ssl:error] [pid 2791291:tid 2791291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:24.895411 2026] [security2:error] [pid 2786633:tid 2786633] [client 216.73.216.199:6349] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/tcsd.conf"] [unique_id "amse2PfKqySevGlB8Nrv2wAAAA8"]
[Thu Jul 30 10:52:24.895711 2026] [security2:error] [pid 2786633:tid 2786633] [client 216.73.216.199:6349] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/tcsd.conf"] [unique_id "amse2PfKqySevGlB8Nrv2wAAAA8"]
[Thu Jul 30 10:52:24.895934 2026] [security2:error] [pid 2786633:tid 2786633] [client 216.73.216.199:6349] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/tcsd.conf"] [unique_id "amse2PfKqySevGlB8Nrv2wAAAA8"]
[Thu Jul 30 10:52:26.437207 2026] [core:error] [pid 2786633:tid 2786633] (13)Permission denied: [client 216.73.216.199:6349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/slabs
[Thu Jul 30 10:52:27.309597 2026] [ssl:error] [pid 2787070:tid 2787070] (EAI 2)Name or service not known: [client 144.76.19.72:56294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:27.309628 2026] [ssl:error] [pid 2787070:tid 2787070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:27.362595 2026] [ssl:error] [pid 2788514:tid 2788514] (EAI 2)Name or service not known: [client 144.76.19.72:56310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:27.362645 2026] [ssl:error] [pid 2788514:tid 2788514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:27.773449 2026] [cgi:error] [pid 2781757:tid 2781757] [client 66.132.172.214:61930] AH02812: stderr from /home/jgqawffu/public_html/learning/cgi-bin/: attempt to invoke directory as script, referer: http://learning.secretbluestone.co.uk:80/cgi-bin
[Thu Jul 30 10:52:28.221344 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.git/config"] [unique_id "amse3JdDSoxWEj4VOGYCTQAAAA0"]
[Thu Jul 30 10:52:28.221558 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.git/config"] [unique_id "amse3JdDSoxWEj4VOGYCTQAAAA0"]
[Thu Jul 30 10:52:28.221753 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse3JdDSoxWEj4VOGYCTQAAAA0"]
[Thu Jul 30 10:52:29.010393 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env"] [unique_id "amse3ZdDSoxWEj4VOGYCTgAAAA0"]
[Thu Jul 30 10:52:29.010799 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env"] [unique_id "amse3ZdDSoxWEj4VOGYCTgAAAA0"]
[Thu Jul 30 10:52:29.010969 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse3ZdDSoxWEj4VOGYCTgAAAA0"]
[Thu Jul 30 10:52:29.440002 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.local"] [unique_id "amse3ZdDSoxWEj4VOGYCTwAAAA0"]
[Thu Jul 30 10:52:29.440500 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.local"] [unique_id "amse3ZdDSoxWEj4VOGYCTwAAAA0"]
[Thu Jul 30 10:52:29.440689 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse3ZdDSoxWEj4VOGYCTwAAAA0"]
[Thu Jul 30 10:52:29.855661 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.production"] [unique_id "amse3ZdDSoxWEj4VOGYCUAAAAA0"]
[Thu Jul 30 10:52:29.856225 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.production"] [unique_id "amse3ZdDSoxWEj4VOGYCUAAAAA0"]
[Thu Jul 30 10:52:29.856439 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse3ZdDSoxWEj4VOGYCUAAAAA0"]
[Thu Jul 30 10:52:30.270755 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.staging"] [unique_id "amse3pdDSoxWEj4VOGYCUQAAAA0"]
[Thu Jul 30 10:52:30.271318 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.staging"] [unique_id "amse3pdDSoxWEj4VOGYCUQAAAA0"]
[Thu Jul 30 10:52:30.271532 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse3pdDSoxWEj4VOGYCUQAAAA0"]
[Thu Jul 30 10:52:30.350708 2026] [core:error] [pid 2787070:tid 2787070] (13)Permission denied: [client 216.73.216.199:47027] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/order
[Thu Jul 30 10:52:30.540815 2026] [lsapi:warn] [pid 2788266:tid 2788266] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:52:30.652337 2026] [ssl:error] [pid 2787070:tid 2787070] (70014)End of file found: [client 216.73.216.199:47027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:30.692260 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.development"] [unique_id "amse3pdDSoxWEj4VOGYCUgAAAA0"]
[Thu Jul 30 10:52:30.692810 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.development"] [unique_id "amse3pdDSoxWEj4VOGYCUgAAAA0"]
[Thu Jul 30 10:52:30.693030 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse3pdDSoxWEj4VOGYCUgAAAA0"]
[Thu Jul 30 10:52:31.109602 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.test"] [unique_id "amse35dDSoxWEj4VOGYCUwAAAA0"]
[Thu Jul 30 10:52:31.110079 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.test"] [unique_id "amse35dDSoxWEj4VOGYCUwAAAA0"]
[Thu Jul 30 10:52:31.110269 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse35dDSoxWEj4VOGYCUwAAAA0"]
[Thu Jul 30 10:52:31.273638 2026] [security2:error] [pid 2776828:tid 2776828] [client 43.155.140.157:51704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "lucynaden.com"] [uri "/"] [unique_id "amse37fc8tUWOSCkrveqZwAAADY"]
[Thu Jul 30 10:52:31.281805 2026] [ssl:error] [pid 2790745:tid 2790745] (EAI 2)Name or service not known: [client 144.76.19.72:32796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:31.281830 2026] [ssl:error] [pid 2790745:tid 2790745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:31.523214 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.remote"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.remote"] [unique_id "amse35dDSoxWEj4VOGYCVAAAAA0"]
[Thu Jul 30 10:52:31.523672 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.remote"] [unique_id "amse35dDSoxWEj4VOGYCVAAAAA0"]
[Thu Jul 30 10:52:31.523856 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse35dDSoxWEj4VOGYCVAAAAA0"]
[Thu Jul 30 10:52:31.540821 2026] [ssl:error] [pid 2772203:tid 2772203] (EAI 2)Name or service not known: [client 144.76.19.72:32808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:31.540852 2026] [ssl:error] [pid 2772203:tid 2772203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:31.941821 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.bak"] [unique_id "amse35dDSoxWEj4VOGYCVQAAAA0"]
[Thu Jul 30 10:52:31.942262 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.bak"] [unique_id "amse35dDSoxWEj4VOGYCVQAAAA0"]
[Thu Jul 30 10:52:31.942421 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse35dDSoxWEj4VOGYCVQAAAA0"]
[Thu Jul 30 10:52:32.363146 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.backup"] [unique_id "amse4JdDSoxWEj4VOGYCVgAAAA0"]
[Thu Jul 30 10:52:32.363630 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.backup"] [unique_id "amse4JdDSoxWEj4VOGYCVgAAAA0"]
[Thu Jul 30 10:52:32.363814 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse4JdDSoxWEj4VOGYCVgAAAA0"]
[Thu Jul 30 10:52:32.460193 2026] [ssl:error] [pid 2786633:tid 2786633] (70014)End of file found: [client 216.73.216.199:6349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:32.817244 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.save"] [unique_id "amse4JdDSoxWEj4VOGYCVwAAAA0"]
[Thu Jul 30 10:52:32.818083 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.save"] [unique_id "amse4JdDSoxWEj4VOGYCVwAAAA0"]
[Thu Jul 30 10:52:32.818378 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse4JdDSoxWEj4VOGYCVwAAAA0"]
[Thu Jul 30 10:52:32.890675 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/geju.php
[Thu Jul 30 10:52:32.890737 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:33.005035 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.039707 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp.php
[Thu Jul 30 10:52:33.039771 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:33.074734 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaa.php
[Thu Jul 30 10:52:33.074790 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:33.157746 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hoot.php
[Thu Jul 30 10:52:33.157799 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:33.194994 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 10:52:33.195049 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:33.229380 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 10:52:33.229437 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:33.243635 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.old"] [unique_id "amse4ZdDSoxWEj4VOGYCWAAAAA0"]
[Thu Jul 30 10:52:33.244097 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.old"] [unique_id "amse4ZdDSoxWEj4VOGYCWAAAAA0"]
[Thu Jul 30 10:52:33.244266 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse4ZdDSoxWEj4VOGYCWAAAAA0"]
[Thu Jul 30 10:52:33.263911 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.301840 2026] [security2:error] [pid 2791824:tid 2791824] [client 94.154.43.185:50928] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.eraten.spamp.co.uk"] [uri "/.env"] [unique_id "amse4YxtmWbgICl6YJxQ4gAAABU"]
[Thu Jul 30 10:52:33.301980 2026] [security2:error] [pid 2791824:tid 2791824] [client 94.154.43.185:50928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.eraten.spamp.co.uk"] [uri "/.env"] [unique_id "amse4YxtmWbgICl6YJxQ4gAAABU"]
[Thu Jul 30 10:52:33.302235 2026] [security2:error] [pid 2791824:tid 2791824] [client 94.154.43.185:50928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.eraten.spamp.co.uk"] [uri "/.env"] [unique_id "amse4YxtmWbgICl6YJxQ4gAAABU"]
[Thu Jul 30 10:52:33.303518 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.340393 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.414673 2026] [security2:error] [pid 2791865:tid 2791865] [client 85.208.96.197:23580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1468.0/prev_next,next.html"] [unique_id "amse4ZawaN5y0tNIIYn1YwAAACo"]
[Thu Jul 30 10:52:33.418203 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.460678 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.495379 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.585938 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.664839 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/content.php
[Thu Jul 30 10:52:33.664906 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:33.666826 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.sample"] [unique_id "amse4ZdDSoxWEj4VOGYCWQAAAA0"]
[Thu Jul 30 10:52:33.667659 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.sample"] [unique_id "amse4ZdDSoxWEj4VOGYCWQAAAA0"]
[Thu Jul 30 10:52:33.667916 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse4ZdDSoxWEj4VOGYCWQAAAA0"]
[Thu Jul 30 10:52:33.701855 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.736118 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.772326 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.894804 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:33.930273 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:34.057886 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:34.086651 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.example"] [unique_id "amse4pdDSoxWEj4VOGYCWgAAAA0"]
[Thu Jul 30 10:52:34.087364 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.example"] [unique_id "amse4pdDSoxWEj4VOGYCWgAAAA0"]
[Thu Jul 30 10:52:34.087622 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse4pdDSoxWEj4VOGYCWgAAAA0"]
[Thu Jul 30 10:52:34.092443 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.162686 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.196644 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.231848 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.274475 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:34.315511 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:34.380162 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/about.php
[Thu Jul 30 10:52:34.380218 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:34.416263 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.450283 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.484458 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/img
[Thu Jul 30 10:52:34.500036 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.dev"] [unique_id "amse4pdDSoxWEj4VOGYCWwAAAA0"]
[Thu Jul 30 10:52:34.500517 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.dev"] [unique_id "amse4pdDSoxWEj4VOGYCWwAAAA0"]
[Thu Jul 30 10:52:34.500689 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse4pdDSoxWEj4VOGYCWwAAAA0"]
[Thu Jul 30 10:52:34.598514 2026] [ssl:error] [pid 2788514:tid 2788514] (EAI 2)Name or service not known: [client 144.76.19.72:32814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:34.598557 2026] [ssl:error] [pid 2788514:tid 2788514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:34.611441 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:34.653200 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:32816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:34.653233 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:34.732425 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.768773 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes.bak
[Thu Jul 30 10:52:34.856682 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.918103 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.prod"] [unique_id "amse4pdDSoxWEj4VOGYCXAAAAA0"]
[Thu Jul 30 10:52:34.918563 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.prod"] [unique_id "amse4pdDSoxWEj4VOGYCXAAAAA0"]
[Thu Jul 30 10:52:34.918741 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse4pdDSoxWEj4VOGYCXAAAAA0"]
[Thu Jul 30 10:52:34.961702 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:34.995958 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:35.032638 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 10:52:35.113949 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:35.157275 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:35.244506 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:35.285593 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:35.340753 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.stage"] [unique_id "amse45dDSoxWEj4VOGYCXQAAAA0"]
[Thu Jul 30 10:52:35.341266 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.stage"] [unique_id "amse45dDSoxWEj4VOGYCXQAAAA0"]
[Thu Jul 30 10:52:35.341466 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse45dDSoxWEj4VOGYCXQAAAA0"]
[Thu Jul 30 10:52:35.360267 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:35.396499 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:35.436377 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/about.php
[Thu Jul 30 10:52:35.436448 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:35.531362 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:35.620673 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:35.656920 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:35.693053 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi-bin/about.php
[Thu Jul 30 10:52:35.693135 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:35.760298 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ci"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.ci"] [unique_id "amse45dDSoxWEj4VOGYCXgAAAA0"]
[Thu Jul 30 10:52:35.760755 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.ci"] [unique_id "amse45dDSoxWEj4VOGYCXgAAAA0"]
[Thu Jul 30 10:52:35.760941 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse45dDSoxWEj4VOGYCXgAAAA0"]
[Thu Jul 30 10:52:35.773003 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:35.842434 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:35.941641 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:35.976932 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.012414 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 10:52:36.052524 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/cloud.php
[Thu Jul 30 10:52:36.052589 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:36.145531 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.176932 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.docker"] [unique_id "amse5JdDSoxWEj4VOGYCXwAAAA0"]
[Thu Jul 30 10:52:36.177402 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.docker"] [unique_id "amse5JdDSoxWEj4VOGYCXwAAAA0"]
[Thu Jul 30 10:52:36.177589 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse5JdDSoxWEj4VOGYCXwAAAA0"]
[Thu Jul 30 10:52:36.180145 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cloud.php
[Thu Jul 30 10:52:36.180194 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:36.298587 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi-bin/cloud.php
[Thu Jul 30 10:52:36.298654 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:36.332974 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:36.368957 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css
[Thu Jul 30 10:52:36.405558 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.448993 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/img
[Thu Jul 30 10:52:36.549397 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.594560 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.live"] [unique_id "amse5JdDSoxWEj4VOGYCYAAAAA0"]
[Thu Jul 30 10:52:36.595019 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.live"] [unique_id "amse5JdDSoxWEj4VOGYCYAAAAA0"]
[Thu Jul 30 10:52:36.595226 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse5JdDSoxWEj4VOGYCYAAAAA0"]
[Thu Jul 30 10:52:36.631233 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.665769 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/avaa.php
[Thu Jul 30 10:52:36.665820 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:36.700654 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/cloud.php
[Thu Jul 30 10:52:36.700708 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:36.773886 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.808597 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:36.842940 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.877689 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:36.996443 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:37.015093 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.preprod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.preprod"] [unique_id "amse5ZdDSoxWEj4VOGYCYQAAAA0"]
[Thu Jul 30 10:52:37.015687 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.preprod"] [unique_id "amse5ZdDSoxWEj4VOGYCYQAAAA0"]
[Thu Jul 30 10:52:37.015917 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse5ZdDSoxWEj4VOGYCYQAAAA0"]
[Thu Jul 30 10:52:37.079004 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:37.133239 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/updates.php
[Thu Jul 30 10:52:37.133288 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:37.172173 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/libraries/legacy/updates.php
[Thu Jul 30 10:52:37.172235 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:37.251961 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/libraries/phpmailer
[Thu Jul 30 10:52:37.289516 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/libraries/vendor/updates.php
[Thu Jul 30 10:52:37.289583 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:37.325995 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa-rex.php7
[Thu Jul 30 10:52:37.326045 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:37.360288 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfanew.php
[Thu Jul 30 10:52:37.360343 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:37.434681 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:37.444722 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.uat"] [unique_id "amse5ZdDSoxWEj4VOGYCYgAAAA0"]
[Thu Jul 30 10:52:37.445213 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.uat"] [unique_id "amse5ZdDSoxWEj4VOGYCYgAAAA0"]
[Thu Jul 30 10:52:37.445382 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse5ZdDSoxWEj4VOGYCYgAAAA0"]
[Thu Jul 30 10:52:37.514832 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:37.549131 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-p.php7
[Thu Jul 30 10:52:37.549181 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 10:52:37.584976 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 10:52:37.620598 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 10:52:37.683730 2026] [lsapi:warn] [pid 2791577:tid 2791577] [client 144.24.44.118:37795] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:52:37.683781 2026] [lsapi:warn] [pid 2791577:tid 2791577] [client 144.24.44.118:37795] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:52:37.711210 2026] [ssl:error] [pid 2783986:tid 2783986] (EAI 2)Name or service not known: [client 144.76.19.72:32828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:37.711247 2026] [ssl:error] [pid 2783986:tid 2783986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:37.733254 2026] [security2:error] [pid 2783751:tid 2783751] [client 94.154.43.178:63670] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.lisichka.spamp.co.uk"] [uri "/.env"] [unique_id "amse5ZXHnDWy_sxNa4iAjgAAAAg"]
[Thu Jul 30 10:52:37.733447 2026] [security2:error] [pid 2783751:tid 2783751] [client 94.154.43.178:63670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.lisichka.spamp.co.uk"] [uri "/.env"] [unique_id "amse5ZXHnDWy_sxNa4iAjgAAAAg"]
[Thu Jul 30 10:52:37.733686 2026] [security2:error] [pid 2783751:tid 2783751] [client 94.154.43.178:63670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.lisichka.spamp.co.uk"] [uri "/.env"] [unique_id "amse5ZXHnDWy_sxNa4iAjgAAAAg"]
[Thu Jul 30 10:52:37.746198 2026] [access_compat:error] [pid 2775668:tid 2775668] [client 20.215.191.139:13511] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 10:52:37.767484 2026] [ssl:error] [pid 2775380:tid 2775380] (EAI 2)Name or service not known: [client 144.76.19.72:32836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:37.767523 2026] [ssl:error] [pid 2775380:tid 2775380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:37.860981 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.dist"] [unique_id "amse5ZdDSoxWEj4VOGYCYwAAAA0"]
[Thu Jul 30 10:52:37.861450 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.dist"] [unique_id "amse5ZdDSoxWEj4VOGYCYwAAAA0"]
[Thu Jul 30 10:52:37.861635 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse5ZdDSoxWEj4VOGYCYwAAAA0"]
[Thu Jul 30 10:52:38.183422 2026] [ssl:error] [pid 2784846:tid 2784846] (70014)End of file found: [client 216.73.216.199:7363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:38.277468 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.swp"] [unique_id "amse5pdDSoxWEj4VOGYCZAAAAA0"]
[Thu Jul 30 10:52:38.277945 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.swp"] [unique_id "amse5pdDSoxWEj4VOGYCZAAAAA0"]
[Thu Jul 30 10:52:38.278145 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse5pdDSoxWEj4VOGYCZAAAAA0"]
[Thu Jul 30 10:52:38.692372 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env~"] [unique_id "amse5pdDSoxWEj4VOGYCZQAAAA0"]
[Thu Jul 30 10:52:38.692827 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env~"] [unique_id "amse5pdDSoxWEj4VOGYCZQAAAA0"]
[Thu Jul 30 10:52:38.692999 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse5pdDSoxWEj4VOGYCZQAAAA0"]
[Thu Jul 30 10:52:39.012204 2026] [security2:error] [pid 2765151:tid 2765151] [client 94.154.43.185:18048] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "lisichka.co.uk"] [uri "/.env"] [unique_id "amse56hbiCKupDmUtj2QmwAAAAU"]
[Thu Jul 30 10:52:39.012477 2026] [security2:error] [pid 2765151:tid 2765151] [client 94.154.43.185:18048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "lisichka.co.uk"] [uri "/.env"] [unique_id "amse56hbiCKupDmUtj2QmwAAAAU"]
[Thu Jul 30 10:52:39.012732 2026] [security2:error] [pid 2765151:tid 2765151] [client 94.154.43.185:18048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "lisichka.co.uk"] [uri "/.env"] [unique_id "amse56hbiCKupDmUtj2QmwAAAAU"]
[Thu Jul 30 10:52:39.111249 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env1"] [unique_id "amse55dDSoxWEj4VOGYCZgAAAA0"]
[Thu Jul 30 10:52:39.111700 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env1"] [unique_id "amse55dDSoxWEj4VOGYCZgAAAA0"]
[Thu Jul 30 10:52:39.111874 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse55dDSoxWEj4VOGYCZgAAAA0"]
[Thu Jul 30 10:52:39.531656 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env2"] [unique_id "amse55dDSoxWEj4VOGYCZwAAAA0"]
[Thu Jul 30 10:52:39.532120 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env2"] [unique_id "amse55dDSoxWEj4VOGYCZwAAAA0"]
[Thu Jul 30 10:52:39.532320 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse55dDSoxWEj4VOGYCZwAAAA0"]
[Thu Jul 30 10:52:39.946209 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env_copy"] [unique_id "amse55dDSoxWEj4VOGYCaAAAAA0"]
[Thu Jul 30 10:52:39.946662 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env_copy"] [unique_id "amse55dDSoxWEj4VOGYCaAAAAA0"]
[Thu Jul 30 10:52:39.946835 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse55dDSoxWEj4VOGYCaAAAAA0"]
[Thu Jul 30 10:52:40.008532 2026] [security2:error] [pid 2788221:tid 2788221] [client 185.191.171.17:20184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg431/"] [unique_id "amse6DhjWZdQ_Ppv_9wAVQAAABY"]
[Thu Jul 30 10:52:40.364322 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.txt"] [unique_id "amse6JdDSoxWEj4VOGYCaQAAAA0"]
[Thu Jul 30 10:52:40.364820 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.txt"] [unique_id "amse6JdDSoxWEj4VOGYCaQAAAA0"]
[Thu Jul 30 10:52:40.364991 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse6JdDSoxWEj4VOGYCaQAAAA0"]
[Thu Jul 30 10:52:40.788587 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.json"] [unique_id "amse6JdDSoxWEj4VOGYCagAAAA0"]
[Thu Jul 30 10:52:40.789032 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.json"] [unique_id "amse6JdDSoxWEj4VOGYCagAAAA0"]
[Thu Jul 30 10:52:40.789237 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse6JdDSoxWEj4VOGYCagAAAA0"]
[Thu Jul 30 10:52:40.820825 2026] [ssl:error] [pid 2791794:tid 2791794] (EAI 2)Name or service not known: [client 144.76.19.72:43978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:40.820866 2026] [ssl:error] [pid 2791794:tid 2791794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:40.863946 2026] [lsapi:warn] [pid 2788221:tid 2788221] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:52:40.875608 2026] [ssl:error] [pid 2791869:tid 2791869] (EAI 2)Name or service not known: [client 144.76.19.72:43982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:40.875655 2026] [ssl:error] [pid 2791869:tid 2791869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:41.203604 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.yaml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.yaml"] [unique_id "amse6ZdDSoxWEj4VOGYCawAAAA0"]
[Thu Jul 30 10:52:41.204046 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.yaml"] [unique_id "amse6ZdDSoxWEj4VOGYCawAAAA0"]
[Thu Jul 30 10:52:41.204227 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse6ZdDSoxWEj4VOGYCawAAAA0"]
[Thu Jul 30 10:52:41.400663 2026] [ssl:error] [pid 2783751:tid 2783751] (70014)End of file found: [client 216.73.216.199:51760] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:41.618333 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.yml"] [unique_id "amse6ZdDSoxWEj4VOGYCbAAAAA0"]
[Thu Jul 30 10:52:41.618799 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.yml"] [unique_id "amse6ZdDSoxWEj4VOGYCbAAAAA0"]
[Thu Jul 30 10:52:41.618970 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse6ZdDSoxWEj4VOGYCbAAAAA0"]
[Thu Jul 30 10:52:42.036520 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/app/.env"] [unique_id "amse6pdDSoxWEj4VOGYCbQAAAA0"]
[Thu Jul 30 10:52:42.036975 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/app/.env"] [unique_id "amse6pdDSoxWEj4VOGYCbQAAAA0"]
[Thu Jul 30 10:52:42.037167 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse6pdDSoxWEj4VOGYCbQAAAA0"]
[Thu Jul 30 10:52:42.451321 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/apps/.env"] [unique_id "amse6pdDSoxWEj4VOGYCbgAAAA0"]
[Thu Jul 30 10:52:42.451792 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/apps/.env"] [unique_id "amse6pdDSoxWEj4VOGYCbgAAAA0"]
[Thu Jul 30 10:52:42.451967 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse6pdDSoxWEj4VOGYCbgAAAA0"]
[Thu Jul 30 10:52:42.637750 2026] [core:error] [pid 2791793:tid 2791793] [client 66.249.66.167:41840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:42.637780 2026] [core:error] [pid 2791793:tid 2791793] [client 66.249.66.167:41840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:42.786701 2026] [security2:error] [pid 2791868:tid 2791868] [client 114.119.132.171:48261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~5-7-2017"] [unique_id "amse6jOqd_dsdrcs5nAWuAAAADA"], referer: http://www.erskinenazarene.co.uk/calendar/action~month/exact_date~1498863600/cat_ids~18,102,103,30,19/request_format~html
[Thu Jul 30 10:52:42.867369 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/api/.env"] [unique_id "amse6pdDSoxWEj4VOGYCbwAAAA0"]
[Thu Jul 30 10:52:42.867815 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/api/.env"] [unique_id "amse6pdDSoxWEj4VOGYCbwAAAA0"]
[Thu Jul 30 10:52:42.867983 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse6pdDSoxWEj4VOGYCbwAAAA0"]
[Thu Jul 30 10:52:43.284636 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/web/.env"] [unique_id "amse65dDSoxWEj4VOGYCcAAAAA0"]
[Thu Jul 30 10:52:43.285089 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/web/.env"] [unique_id "amse65dDSoxWEj4VOGYCcAAAAA0"]
[Thu Jul 30 10:52:43.285273 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse65dDSoxWEj4VOGYCcAAAAA0"]
[Thu Jul 30 10:52:43.299132 2026] [core:error] [pid 2791826:tid 2791826] (13)Permission denied: [client 216.73.216.199:43209] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:53/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:52:43.574829 2026] [core:error] [pid 2791577:tid 2791577] [client 66.249.64.170:51948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:43.574859 2026] [core:error] [pid 2791577:tid 2791577] [client 66.249.64.170:51948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:52:43.703340 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/site/.env"] [unique_id "amse65dDSoxWEj4VOGYCcQAAAA0"]
[Thu Jul 30 10:52:43.703804 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/site/.env"] [unique_id "amse65dDSoxWEj4VOGYCcQAAAA0"]
[Thu Jul 30 10:52:43.703993 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse65dDSoxWEj4VOGYCcQAAAA0"]
[Thu Jul 30 10:52:43.948156 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:43996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:43.948205 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:44.001378 2026] [ssl:error] [pid 2778592:tid 2778592] (EAI 2)Name or service not known: [client 144.76.19.72:44006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:44.001410 2026] [ssl:error] [pid 2778592:tid 2778592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:44.117413 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/public/.env"] [unique_id "amse7JdDSoxWEj4VOGYCcgAAAA0"]
[Thu Jul 30 10:52:44.117857 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/public/.env"] [unique_id "amse7JdDSoxWEj4VOGYCcgAAAA0"]
[Thu Jul 30 10:52:44.118029 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse7JdDSoxWEj4VOGYCcgAAAA0"]
[Thu Jul 30 10:52:44.153651 2026] [security2:error] [pid 2791866:tid 2791866] [client 114.119.132.171:48269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~5-7-2017"] [unique_id "amse7FgY6kgpzx76vv3HQAAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action~month/exact_date~1498863600/cat_ids~18,102,103,30,19/request_format~html
[Thu Jul 30 10:52:44.539919 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/admin/.env"] [unique_id "amse7JdDSoxWEj4VOGYCcwAAAA0"]
[Thu Jul 30 10:52:44.540368 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/admin/.env"] [unique_id "amse7JdDSoxWEj4VOGYCcwAAAA0"]
[Thu Jul 30 10:52:44.540550 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse7JdDSoxWEj4VOGYCcwAAAA0"]
[Thu Jul 30 10:52:44.954624 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/backend/.env"] [unique_id "amse7JdDSoxWEj4VOGYCdAAAAA0"]
[Thu Jul 30 10:52:44.955083 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/backend/.env"] [unique_id "amse7JdDSoxWEj4VOGYCdAAAAA0"]
[Thu Jul 30 10:52:44.955259 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse7JdDSoxWEj4VOGYCdAAAAA0"]
[Thu Jul 30 10:52:45.371025 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/server/.env"] [unique_id "amse7ZdDSoxWEj4VOGYCdQAAAA0"]
[Thu Jul 30 10:52:45.371698 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/server/.env"] [unique_id "amse7ZdDSoxWEj4VOGYCdQAAAA0"]
[Thu Jul 30 10:52:45.371964 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse7ZdDSoxWEj4VOGYCdQAAAA0"]
[Thu Jul 30 10:52:45.572463 2026] [ssl:error] [pid 2781757:tid 2781757] (70014)End of file found: [client 216.73.216.199:40334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:45.794374 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/frontend/.env"] [unique_id "amse7ZdDSoxWEj4VOGYCdgAAAA0"]
[Thu Jul 30 10:52:45.795053 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/frontend/.env"] [unique_id "amse7ZdDSoxWEj4VOGYCdgAAAA0"]
[Thu Jul 30 10:52:45.795319 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse7ZdDSoxWEj4VOGYCdgAAAA0"]
[Thu Jul 30 10:52:46.055197 2026] [ssl:error] [pid 2772203:tid 2772203] (70014)End of file found: [client 216.73.216.199:42717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:46.208881 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/src/.env"] [unique_id "amse7pdDSoxWEj4VOGYCdwAAAA0"]
[Thu Jul 30 10:52:46.209308 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/src/.env"] [unique_id "amse7pdDSoxWEj4VOGYCdwAAAA0"]
[Thu Jul 30 10:52:46.209500 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse7pdDSoxWEj4VOGYCdwAAAA0"]
[Thu Jul 30 10:52:46.627381 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/core/.env"] [unique_id "amse7pdDSoxWEj4VOGYCeAAAAA0"]
[Thu Jul 30 10:52:46.628121 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/core/.env"] [unique_id "amse7pdDSoxWEj4VOGYCeAAAAA0"]
[Thu Jul 30 10:52:46.628388 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse7pdDSoxWEj4VOGYCeAAAAA0"]
[Thu Jul 30 10:52:47.043094 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/core/app/.env"] [unique_id "amse75dDSoxWEj4VOGYCeQAAAA0"]
[Thu Jul 30 10:52:47.043535 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/core/app/.env"] [unique_id "amse75dDSoxWEj4VOGYCeQAAAA0"]
[Thu Jul 30 10:52:47.043724 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse75dDSoxWEj4VOGYCeQAAAA0"]
[Thu Jul 30 10:52:47.055084 2026] [ssl:error] [pid 2780664:tid 2780664] (EAI 2)Name or service not known: [client 144.76.19.72:44012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:47.055108 2026] [ssl:error] [pid 2780664:tid 2780664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:47.088047 2026] [security2:error] [pid 2791865:tid 2791865] [client 185.191.171.2:60098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3086.0/prev_next,next.html"] [unique_id "amse75awaN5y0tNIIYn1aAAAACo"]
[Thu Jul 30 10:52:47.109504 2026] [ssl:error] [pid 2783986:tid 2783986] (EAI 2)Name or service not known: [client 144.76.19.72:44022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:47.109545 2026] [ssl:error] [pid 2783986:tid 2783986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:47.476346 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/config/.env"] [unique_id "amse75dDSoxWEj4VOGYCegAAAA0"]
[Thu Jul 30 10:52:47.476756 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/config/.env"] [unique_id "amse75dDSoxWEj4VOGYCegAAAA0"]
[Thu Jul 30 10:52:47.476926 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse75dDSoxWEj4VOGYCegAAAA0"]
[Thu Jul 30 10:52:47.893214 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/private/.env"] [unique_id "amse75dDSoxWEj4VOGYCewAAAA0"]
[Thu Jul 30 10:52:47.893696 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/private/.env"] [unique_id "amse75dDSoxWEj4VOGYCewAAAA0"]
[Thu Jul 30 10:52:47.893868 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse75dDSoxWEj4VOGYCewAAAA0"]
[Thu Jul 30 10:52:48.236252 2026] [lsapi:warn] [pid 2783986:tid 2783986] [client 45.158.164.139:39764] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:52:48.236315 2026] [lsapi:warn] [pid 2783986:tid 2783986] [client 45.158.164.139:39764] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:52:48.238690 2026] [lsapi:warn] [pid 2790672:tid 2790672] [client 89.197.16.98:43562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:52:48.238736 2026] [lsapi:warn] [pid 2790672:tid 2790672] [client 89.197.16.98:43562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:52:48.316630 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/application/.env"] [unique_id "amse8JdDSoxWEj4VOGYCfAAAAA0"]
[Thu Jul 30 10:52:48.317085 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/application/.env"] [unique_id "amse8JdDSoxWEj4VOGYCfAAAAA0"]
[Thu Jul 30 10:52:48.317268 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse8JdDSoxWEj4VOGYCfAAAAA0"]
[Thu Jul 30 10:52:48.651413 2026] [ssl:error] [pid 2791867:tid 2791867] (70014)End of file found: [client 216.73.216.199:21136] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:48.736126 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/bootstrap/.env"] [unique_id "amse8JdDSoxWEj4VOGYCfQAAAA0"]
[Thu Jul 30 10:52:48.736567 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/bootstrap/.env"] [unique_id "amse8JdDSoxWEj4VOGYCfQAAAA0"]
[Thu Jul 30 10:52:48.736759 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse8JdDSoxWEj4VOGYCfQAAAA0"]
[Thu Jul 30 10:52:48.840922 2026] [security2:error] [pid 2775380:tid 2775380] [client 20.171.55.167:11096] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ericashmore.org"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amse8NNjCLsu4_1gmYfCugAAAAk"]
[Thu Jul 30 10:52:48.841147 2026] [security2:error] [pid 2775380:tid 2775380] [client 20.171.55.167:11096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ericashmore.org"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amse8NNjCLsu4_1gmYfCugAAAAk"]
[Thu Jul 30 10:52:48.867992 2026] [security2:error] [pid 2775380:tid 2775380] [client 20.171.55.167:11096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ericashmore.org"] [uri "/403.shtml"] [unique_id "amse8NNjCLsu4_1gmYfCugAAAAk"]
[Thu Jul 30 10:52:49.150925 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/database/.env"] [unique_id "amse8ZdDSoxWEj4VOGYCfgAAAA0"]
[Thu Jul 30 10:52:49.151361 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/database/.env"] [unique_id "amse8ZdDSoxWEj4VOGYCfgAAAA0"]
[Thu Jul 30 10:52:49.151532 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse8ZdDSoxWEj4VOGYCfgAAAA0"]
[Thu Jul 30 10:52:49.392247 2026] [authz_core:error] [pid 2790788:tid 2790788] [client 40.77.167.57:35554] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:52:49.394901 2026] [authz_core:error] [pid 2790788:tid 2790788] [client 40.77.167.57:35554] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:52:49.566388 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/storage/.env"] [unique_id "amse8ZdDSoxWEj4VOGYCfwAAAA0"]
[Thu Jul 30 10:52:49.566845 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/storage/.env"] [unique_id "amse8ZdDSoxWEj4VOGYCfwAAAA0"]
[Thu Jul 30 10:52:49.567041 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse8ZdDSoxWEj4VOGYCfwAAAA0"]
[Thu Jul 30 10:52:49.980295 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/var/www/.env"] [unique_id "amse8ZdDSoxWEj4VOGYCgAAAAA0"]
[Thu Jul 30 10:52:49.980749 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/var/www/.env"] [unique_id "amse8ZdDSoxWEj4VOGYCgAAAAA0"]
[Thu Jul 30 10:52:49.980918 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse8ZdDSoxWEj4VOGYCgAAAAA0"]
[Thu Jul 30 10:52:50.165972 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:44714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:50.166006 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:50.223700 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:44726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:50.223744 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:50.413110 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/var/www/html/.env"] [unique_id "amse8pdDSoxWEj4VOGYCgQAAAA0"]
[Thu Jul 30 10:52:50.413585 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/var/www/html/.env"] [unique_id "amse8pdDSoxWEj4VOGYCgQAAAA0"]
[Thu Jul 30 10:52:50.413766 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse8pdDSoxWEj4VOGYCgQAAAA0"]
[Thu Jul 30 10:52:50.849239 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/current/.env"] [unique_id "amse8pdDSoxWEj4VOGYCggAAAA0"]
[Thu Jul 30 10:52:50.849780 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/current/.env"] [unique_id "amse8pdDSoxWEj4VOGYCggAAAA0"]
[Thu Jul 30 10:52:50.849958 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse8pdDSoxWEj4VOGYCggAAAA0"]
[Thu Jul 30 10:52:51.277932 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /release/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/release/.env"] [unique_id "amse85dDSoxWEj4VOGYCgwAAAA0"]
[Thu Jul 30 10:52:51.278513 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/release/.env"] [unique_id "amse85dDSoxWEj4VOGYCgwAAAA0"]
[Thu Jul 30 10:52:51.278737 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse85dDSoxWEj4VOGYCgwAAAA0"]
[Thu Jul 30 10:52:51.671483 2026] [lsapi:warn] [pid 2791866:tid 2791866] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:52:51.711753 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/releases/.env"] [unique_id "amse85dDSoxWEj4VOGYChAAAAA0"]
[Thu Jul 30 10:52:51.712321 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/releases/.env"] [unique_id "amse85dDSoxWEj4VOGYChAAAAA0"]
[Thu Jul 30 10:52:51.712546 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse85dDSoxWEj4VOGYChAAAAA0"]
[Thu Jul 30 10:52:52.137817 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/shared/.env"] [unique_id "amse9JdDSoxWEj4VOGYChQAAAA0"]
[Thu Jul 30 10:52:52.138426 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/shared/.env"] [unique_id "amse9JdDSoxWEj4VOGYChQAAAA0"]
[Thu Jul 30 10:52:52.138672 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse9JdDSoxWEj4VOGYChQAAAA0"]
[Thu Jul 30 10:52:52.567396 2026] [ssl:error] [pid 2781757:tid 2781757] (70014)End of file found: [client 216.73.216.199:40432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:52.589023 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/deploy/.env"] [unique_id "amse9JdDSoxWEj4VOGYChgAAAA0"]
[Thu Jul 30 10:52:52.589605 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/deploy/.env"] [unique_id "amse9JdDSoxWEj4VOGYChgAAAA0"]
[Thu Jul 30 10:52:52.589805 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse9JdDSoxWEj4VOGYChgAAAA0"]
[Thu Jul 30 10:52:53.012845 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/build/.env"] [unique_id "amse9ZdDSoxWEj4VOGYChwAAAA0"]
[Thu Jul 30 10:52:53.013417 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/build/.env"] [unique_id "amse9ZdDSoxWEj4VOGYChwAAAA0"]
[Thu Jul 30 10:52:53.013622 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse9ZdDSoxWEj4VOGYChwAAAA0"]
[Thu Jul 30 10:52:53.035997 2026] [security2:error] [pid 2791826:tid 2791826] [client 185.191.171.2:15540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2281.0/prev_next,prev.html"] [unique_id "amse9ULypPCsTbcg8fOo3AAAACE"]
[Thu Jul 30 10:52:53.278267 2026] [ssl:error] [pid 2784563:tid 2784563] (EAI 2)Name or service not known: [client 144.76.19.72:44730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:53.278299 2026] [ssl:error] [pid 2784563:tid 2784563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:53.333594 2026] [ssl:error] [pid 2791826:tid 2791826] (EAI 2)Name or service not known: [client 144.76.19.72:44740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:53.333621 2026] [ssl:error] [pid 2791826:tid 2791826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:53.430983 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/dist/.env"] [unique_id "amse9ZdDSoxWEj4VOGYCiAAAAA0"]
[Thu Jul 30 10:52:53.431530 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/dist/.env"] [unique_id "amse9ZdDSoxWEj4VOGYCiAAAAA0"]
[Thu Jul 30 10:52:53.431764 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse9ZdDSoxWEj4VOGYCiAAAAA0"]
[Thu Jul 30 10:52:53.666279 2026] [security2:error] [pid 2792670:tid 2792670] [client 185.191.171.19:38532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "soul-connections.co.uk"] [uri "/robots.txt"] [unique_id "amse9ZA4nZxP9SmgLraqJAAAAAc"]
[Thu Jul 30 10:52:53.774682 2026] [ssl:error] [pid 2776893:tid 2776893] (70014)End of file found: [client 216.73.216.199:58625] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:52:53.851086 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/public_html/.env"] [unique_id "amse9ZdDSoxWEj4VOGYCiQAAAA0"]
[Thu Jul 30 10:52:53.851637 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/public_html/.env"] [unique_id "amse9ZdDSoxWEj4VOGYCiQAAAA0"]
[Thu Jul 30 10:52:53.851851 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse9ZdDSoxWEj4VOGYCiQAAAA0"]
[Thu Jul 30 10:52:53.902042 2026] [security2:error] [pid 2792671:tid 2792671] [client 85.208.96.195:45376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "soul-connections.co.uk"] [uri "/packages.php"] [unique_id "amse9VhK8UF3TQzHEBGF0AAAAAw"]
[Thu Jul 30 10:52:54.276735 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/htdocs/.env"] [unique_id "amse9pdDSoxWEj4VOGYCigAAAA0"]
[Thu Jul 30 10:52:54.277300 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/htdocs/.env"] [unique_id "amse9pdDSoxWEj4VOGYCigAAAA0"]
[Thu Jul 30 10:52:54.277503 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse9pdDSoxWEj4VOGYCigAAAA0"]
[Thu Jul 30 10:52:54.281947 2026] [core:error] [pid 2792670:tid 2792670] (13)Permission denied: [client 216.73.216.199:3271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:52:54.699245 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/www/.env"] [unique_id "amse9pdDSoxWEj4VOGYCiwAAAA0"]
[Thu Jul 30 10:52:54.699795 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/www/.env"] [unique_id "amse9pdDSoxWEj4VOGYCiwAAAA0"]
[Thu Jul 30 10:52:54.699996 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse9pdDSoxWEj4VOGYCiwAAAA0"]
[Thu Jul 30 10:52:55.118368 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/html/.env"] [unique_id "amse95dDSoxWEj4VOGYCjAAAAA0"]
[Thu Jul 30 10:52:55.118973 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/html/.env"] [unique_id "amse95dDSoxWEj4VOGYCjAAAAA0"]
[Thu Jul 30 10:52:55.119213 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse95dDSoxWEj4VOGYCjAAAAA0"]
[Thu Jul 30 10:52:55.554752 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /live/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/live/.env"] [unique_id "amse95dDSoxWEj4VOGYCjQAAAA0"]
[Thu Jul 30 10:52:55.555185 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/live/.env"] [unique_id "amse95dDSoxWEj4VOGYCjQAAAA0"]
[Thu Jul 30 10:52:55.555360 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse95dDSoxWEj4VOGYCjQAAAA0"]
[Thu Jul 30 10:52:55.637291 2026] [authz_core:error] [pid 2792752:tid 2792752] [client 66.249.66.34:42483] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:52:55.640213 2026] [authz_core:error] [pid 2792752:tid 2792752] [client 66.249.66.34:42483] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:52:55.981053 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/prod/.env"] [unique_id "amse95dDSoxWEj4VOGYCjgAAAA0"]
[Thu Jul 30 10:52:55.981532 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/prod/.env"] [unique_id "amse95dDSoxWEj4VOGYCjgAAAA0"]
[Thu Jul 30 10:52:55.981728 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse95dDSoxWEj4VOGYCjgAAAA0"]
[Thu Jul 30 10:52:56.407923 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/dev/.env"] [unique_id "amse-JdDSoxWEj4VOGYCjwAAAA0"]
[Thu Jul 30 10:52:56.408345 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/dev/.env"] [unique_id "amse-JdDSoxWEj4VOGYCjwAAAA0"]
[Thu Jul 30 10:52:56.408521 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-JdDSoxWEj4VOGYCjwAAAA0"]
[Thu Jul 30 10:52:56.434772 2026] [ssl:error] [pid 2791867:tid 2791867] (EAI 2)Name or service not known: [client 144.76.19.72:44750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:56.434803 2026] [ssl:error] [pid 2791867:tid 2791867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:56.494585 2026] [ssl:error] [pid 2775380:tid 2775380] (EAI 2)Name or service not known: [client 144.76.19.72:44764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:56.494612 2026] [ssl:error] [pid 2775380:tid 2775380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:56.500017 2026] [security2:error] [pid 2792750:tid 2792750] [client 94.154.43.188:60294] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.env"] [unique_id "amse-H806cGybejOXCBmQgAAAA4"]
[Thu Jul 30 10:52:56.500165 2026] [security2:error] [pid 2792750:tid 2792750] [client 94.154.43.188:60294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.env"] [unique_id "amse-H806cGybejOXCBmQgAAAA4"]
[Thu Jul 30 10:52:56.500397 2026] [security2:error] [pid 2792750:tid 2792750] [client 94.154.43.188:60294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.env"] [unique_id "amse-H806cGybejOXCBmQgAAAA4"]
[Thu Jul 30 10:52:56.823935 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/staging/.env"] [unique_id "amse-JdDSoxWEj4VOGYCkAAAAA0"]
[Thu Jul 30 10:52:56.824359 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/staging/.env"] [unique_id "amse-JdDSoxWEj4VOGYCkAAAAA0"]
[Thu Jul 30 10:52:56.824517 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-JdDSoxWEj4VOGYCkAAAAA0"]
[Thu Jul 30 10:52:57.238645 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/opt/.env"] [unique_id "amse-ZdDSoxWEj4VOGYCkQAAAA0"]
[Thu Jul 30 10:52:57.239063 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/opt/.env"] [unique_id "amse-ZdDSoxWEj4VOGYCkQAAAA0"]
[Thu Jul 30 10:52:57.239240 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-ZdDSoxWEj4VOGYCkQAAAA0"]
[Thu Jul 30 10:52:57.660139 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/laravel/.env"] [unique_id "amse-ZdDSoxWEj4VOGYCkgAAAA0"]
[Thu Jul 30 10:52:57.660562 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/laravel/.env"] [unique_id "amse-ZdDSoxWEj4VOGYCkgAAAA0"]
[Thu Jul 30 10:52:57.660732 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-ZdDSoxWEj4VOGYCkgAAAA0"]
[Thu Jul 30 10:52:57.688725 2026] [security2:error] [pid 2792670:tid 2792670] [client 216.73.216.199:3271] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/lfd.log"] [unique_id "amse-ZA4nZxP9SmgLraqLwAAAAc"]
[Thu Jul 30 10:52:57.688948 2026] [security2:error] [pid 2792670:tid 2792670] [client 216.73.216.199:3271] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/lfd.log"] [unique_id "amse-ZA4nZxP9SmgLraqLwAAAAc"]
[Thu Jul 30 10:52:57.689163 2026] [security2:error] [pid 2792670:tid 2792670] [client 216.73.216.199:3271] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/lfd.log"] [unique_id "amse-ZA4nZxP9SmgLraqLwAAAAc"]
[Thu Jul 30 10:52:58.074013 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/symfony/.env"] [unique_id "amse-pdDSoxWEj4VOGYCkwAAAA0"]
[Thu Jul 30 10:52:58.074413 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/symfony/.env"] [unique_id "amse-pdDSoxWEj4VOGYCkwAAAA0"]
[Thu Jul 30 10:52:58.074566 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-pdDSoxWEj4VOGYCkwAAAA0"]
[Thu Jul 30 10:52:58.500744 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/wordpress/.env"] [unique_id "amse-pdDSoxWEj4VOGYClAAAAA0"]
[Thu Jul 30 10:52:58.501177 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/wordpress/.env"] [unique_id "amse-pdDSoxWEj4VOGYClAAAAA0"]
[Thu Jul 30 10:52:58.501334 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-pdDSoxWEj4VOGYClAAAAA0"]
[Thu Jul 30 10:52:58.933830 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/wp/.env"] [unique_id "amse-pdDSoxWEj4VOGYClQAAAA0"]
[Thu Jul 30 10:52:58.934279 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/wp/.env"] [unique_id "amse-pdDSoxWEj4VOGYClQAAAA0"]
[Thu Jul 30 10:52:58.934446 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-pdDSoxWEj4VOGYClQAAAA0"]
[Thu Jul 30 10:52:59.379475 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/cms/.env"] [unique_id "amse-5dDSoxWEj4VOGYClgAAAA0"]
[Thu Jul 30 10:52:59.379940 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/cms/.env"] [unique_id "amse-5dDSoxWEj4VOGYClgAAAA0"]
[Thu Jul 30 10:52:59.380114 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-5dDSoxWEj4VOGYClgAAAA0"]
[Thu Jul 30 10:52:59.547747 2026] [ssl:error] [pid 2791826:tid 2791826] (EAI 2)Name or service not known: [client 144.76.19.72:44768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:59.547771 2026] [ssl:error] [pid 2791826:tid 2791826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:59.599065 2026] [ssl:error] [pid 2791870:tid 2791870] (EAI 2)Name or service not known: [client 144.76.19.72:35052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:52:59.599107 2026] [ssl:error] [pid 2791870:tid 2791870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:52:59.794757 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/drupal/.env"] [unique_id "amse-5dDSoxWEj4VOGYClwAAAA0"]
[Thu Jul 30 10:52:59.795217 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/drupal/.env"] [unique_id "amse-5dDSoxWEj4VOGYClwAAAA0"]
[Thu Jul 30 10:52:59.795402 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse-5dDSoxWEj4VOGYClwAAAA0"]
[Thu Jul 30 10:53:00.212835 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /joomla/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/joomla/.env"] [unique_id "amse_JdDSoxWEj4VOGYCmAAAAA0"]
[Thu Jul 30 10:53:00.213273 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/joomla/.env"] [unique_id "amse_JdDSoxWEj4VOGYCmAAAAA0"]
[Thu Jul 30 10:53:00.213430 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_JdDSoxWEj4VOGYCmAAAAA0"]
[Thu Jul 30 10:53:00.627127 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /magento/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/magento/.env"] [unique_id "amse_JdDSoxWEj4VOGYCmQAAAA0"]
[Thu Jul 30 10:53:00.627687 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/magento/.env"] [unique_id "amse_JdDSoxWEj4VOGYCmQAAAA0"]
[Thu Jul 30 10:53:00.627882 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_JdDSoxWEj4VOGYCmQAAAA0"]
[Thu Jul 30 10:53:01.045199 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shopify/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/shopify/.env"] [unique_id "amse_ZdDSoxWEj4VOGYCmgAAAA0"]
[Thu Jul 30 10:53:01.045664 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/shopify/.env"] [unique_id "amse_ZdDSoxWEj4VOGYCmgAAAA0"]
[Thu Jul 30 10:53:01.045834 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_ZdDSoxWEj4VOGYCmgAAAA0"]
[Thu Jul 30 10:53:01.480298 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prestashop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/prestashop/.env"] [unique_id "amse_ZdDSoxWEj4VOGYCmwAAAA0"]
[Thu Jul 30 10:53:01.480790 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/prestashop/.env"] [unique_id "amse_ZdDSoxWEj4VOGYCmwAAAA0"]
[Thu Jul 30 10:53:01.480968 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_ZdDSoxWEj4VOGYCmwAAAA0"]
[Thu Jul 30 10:53:01.901379 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codeigniter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/codeigniter/.env"] [unique_id "amse_ZdDSoxWEj4VOGYCnAAAAA0"]
[Thu Jul 30 10:53:01.901877 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/codeigniter/.env"] [unique_id "amse_ZdDSoxWEj4VOGYCnAAAAA0"]
[Thu Jul 30 10:53:01.902056 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_ZdDSoxWEj4VOGYCnAAAAA0"]
[Thu Jul 30 10:53:02.205927 2026] [core:error] [pid 2792670:tid 2792670] (13)Permission denied: [client 216.73.216.199:3271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/subsystem/ttyS3/closing_wait
[Thu Jul 30 10:53:02.327145 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cakephp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/cakephp/.env"] [unique_id "amse_pdDSoxWEj4VOGYCnQAAAA0"]
[Thu Jul 30 10:53:02.327597 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/cakephp/.env"] [unique_id "amse_pdDSoxWEj4VOGYCnQAAAA0"]
[Thu Jul 30 10:53:02.327773 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_pdDSoxWEj4VOGYCnQAAAA0"]
[Thu Jul 30 10:53:02.369519 2026] [lsapi:warn] [pid 2775668:tid 2775668] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:53:02.655721 2026] [ssl:error] [pid 2792752:tid 2792752] (EAI 2)Name or service not known: [client 144.76.19.72:35066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:02.655757 2026] [ssl:error] [pid 2792752:tid 2792752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:02.710530 2026] [ssl:error] [pid 2788266:tid 2788266] (EAI 2)Name or service not known: [client 144.76.19.72:35070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:02.710587 2026] [ssl:error] [pid 2788266:tid 2788266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:02.744737 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /zend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/zend/.env"] [unique_id "amse_pdDSoxWEj4VOGYCngAAAA0"]
[Thu Jul 30 10:53:02.745238 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/zend/.env"] [unique_id "amse_pdDSoxWEj4VOGYCngAAAA0"]
[Thu Jul 30 10:53:02.745410 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_pdDSoxWEj4VOGYCngAAAA0"]
[Thu Jul 30 10:53:02.811569 2026] [ssl:error] [pid 2792670:tid 2792670] (70014)End of file found: [client 216.73.216.199:3271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:03.029421 2026] [cgi:error] [pid 2792671:tid 2792671] [client 104.210.56.226:26444] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:53:03.164977 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /yii/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/yii/.env"] [unique_id "amse_5dDSoxWEj4VOGYCnwAAAA0"]
[Thu Jul 30 10:53:03.165453 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/yii/.env"] [unique_id "amse_5dDSoxWEj4VOGYCnwAAAA0"]
[Thu Jul 30 10:53:03.165640 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_5dDSoxWEj4VOGYCnwAAAA0"]
[Thu Jul 30 10:53:03.579808 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel5/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/laravel5/.env"] [unique_id "amse_5dDSoxWEj4VOGYCoAAAAA0"]
[Thu Jul 30 10:53:03.580272 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/laravel5/.env"] [unique_id "amse_5dDSoxWEj4VOGYCoAAAAA0"]
[Thu Jul 30 10:53:03.580442 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_5dDSoxWEj4VOGYCoAAAAA0"]
[Thu Jul 30 10:53:03.992819 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/v1/.env"] [unique_id "amse_5dDSoxWEj4VOGYCoQAAAA0"]
[Thu Jul 30 10:53:03.993297 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/v1/.env"] [unique_id "amse_5dDSoxWEj4VOGYCoQAAAA0"]
[Thu Jul 30 10:53:03.993474 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amse_5dDSoxWEj4VOGYCoQAAAA0"]
[Thu Jul 30 10:53:04.406323 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/v2/.env"] [unique_id "amsfAJdDSoxWEj4VOGYCogAAAA0"]
[Thu Jul 30 10:53:04.406881 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/v2/.env"] [unique_id "amsfAJdDSoxWEj4VOGYCogAAAA0"]
[Thu Jul 30 10:53:04.407111 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfAJdDSoxWEj4VOGYCogAAAA0"]
[Thu Jul 30 10:53:04.612626 2026] [security2:error] [pid 2788266:tid 2788266] [client 216.73.216.199:6584] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/request-key.d/id_resolver.conf"] [unique_id "amsfAHYKWXdTLZ01LmR5RwAAABc"]
[Thu Jul 30 10:53:04.612931 2026] [security2:error] [pid 2788266:tid 2788266] [client 216.73.216.199:6584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/request-key.d/id_resolver.conf"] [unique_id "amsfAHYKWXdTLZ01LmR5RwAAABc"]
[Thu Jul 30 10:53:04.613166 2026] [security2:error] [pid 2788266:tid 2788266] [client 216.73.216.199:6584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/request-key.d/id_resolver.conf"] [unique_id "amsfAHYKWXdTLZ01LmR5RwAAABc"]
[Thu Jul 30 10:53:04.820250 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/v3/.env"] [unique_id "amsfAJdDSoxWEj4VOGYCowAAAA0"]
[Thu Jul 30 10:53:04.820803 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/v3/.env"] [unique_id "amsfAJdDSoxWEj4VOGYCowAAAA0"]
[Thu Jul 30 10:53:04.821021 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfAJdDSoxWEj4VOGYCowAAAA0"]
[Thu Jul 30 10:53:04.914421 2026] [ssl:error] [pid 2788266:tid 2788266] (70014)End of file found: [client 216.73.216.199:6584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:05.232196 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/api/v1/.env"] [unique_id "amsfAZdDSoxWEj4VOGYCpAAAAA0"]
[Thu Jul 30 10:53:05.232756 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/api/v1/.env"] [unique_id "amsfAZdDSoxWEj4VOGYCpAAAAA0"]
[Thu Jul 30 10:53:05.232960 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfAZdDSoxWEj4VOGYCpAAAAA0"]
[Thu Jul 30 10:53:05.553990 2026] [security2:error] [pid 2790672:tid 2790672] [client 85.208.96.209:53140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/compare-and-contrast-bacteriophages-and-animal-viruses"] [unique_id "amsfAeTiKxAZqZ8Rqt0vWwAAAAo"]
[Thu Jul 30 10:53:05.655219 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/api/v2/.env"] [unique_id "amsfAZdDSoxWEj4VOGYCpQAAAA0"]
[Thu Jul 30 10:53:05.655699 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/api/v2/.env"] [unique_id "amsfAZdDSoxWEj4VOGYCpQAAAA0"]
[Thu Jul 30 10:53:05.655896 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfAZdDSoxWEj4VOGYCpQAAAA0"]
[Thu Jul 30 10:53:05.767090 2026] [ssl:error] [pid 2791865:tid 2791865] (EAI 2)Name or service not known: [client 144.76.19.72:35082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:05.767129 2026] [ssl:error] [pid 2791865:tid 2791865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:05.822131 2026] [ssl:error] [pid 2792750:tid 2792750] (EAI 2)Name or service not known: [client 144.76.19.72:35094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:05.822178 2026] [ssl:error] [pid 2792750:tid 2792750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:06.071843 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/rest/.env"] [unique_id "amsfApdDSoxWEj4VOGYCpgAAAA0"]
[Thu Jul 30 10:53:06.072304 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/rest/.env"] [unique_id "amsfApdDSoxWEj4VOGYCpgAAAA0"]
[Thu Jul 30 10:53:06.072477 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfApdDSoxWEj4VOGYCpgAAAA0"]
[Thu Jul 30 10:53:06.494106 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /graphql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/graphql/.env"] [unique_id "amsfApdDSoxWEj4VOGYCpwAAAA0"]
[Thu Jul 30 10:53:06.494558 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/graphql/.env"] [unique_id "amsfApdDSoxWEj4VOGYCpwAAAA0"]
[Thu Jul 30 10:53:06.494755 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfApdDSoxWEj4VOGYCpwAAAA0"]
[Thu Jul 30 10:53:06.911639 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gateway/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/gateway/.env"] [unique_id "amsfApdDSoxWEj4VOGYCqAAAAA0"]
[Thu Jul 30 10:53:06.912109 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/gateway/.env"] [unique_id "amsfApdDSoxWEj4VOGYCqAAAAA0"]
[Thu Jul 30 10:53:06.912276 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfApdDSoxWEj4VOGYCqAAAAA0"]
[Thu Jul 30 10:53:07.327159 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /microservice/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/microservice/.env"] [unique_id "amsfA5dDSoxWEj4VOGYCqQAAAA0"]
[Thu Jul 30 10:53:07.327600 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/microservice/.env"] [unique_id "amsfA5dDSoxWEj4VOGYCqQAAAA0"]
[Thu Jul 30 10:53:07.327787 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfA5dDSoxWEj4VOGYCqQAAAA0"]
[Thu Jul 30 10:53:07.662516 2026] [core:error] [pid 2772203:tid 2772203] [client 66.249.66.169:55207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:07.662551 2026] [core:error] [pid 2772203:tid 2772203] [client 66.249.66.169:55207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:07.743461 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/service/.env"] [unique_id "amsfA5dDSoxWEj4VOGYCqgAAAA0"]
[Thu Jul 30 10:53:07.743924 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/service/.env"] [unique_id "amsfA5dDSoxWEj4VOGYCqgAAAA0"]
[Thu Jul 30 10:53:07.744129 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfA5dDSoxWEj4VOGYCqgAAAA0"]
[Thu Jul 30 10:53:08.161010 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/api/v3/.env"] [unique_id "amsfBJdDSoxWEj4VOGYCqwAAAA0"]
[Thu Jul 30 10:53:08.161480 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/api/v3/.env"] [unique_id "amsfBJdDSoxWEj4VOGYCqwAAAA0"]
[Thu Jul 30 10:53:08.161680 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfBJdDSoxWEj4VOGYCqwAAAA0"]
[Thu Jul 30 10:53:08.575884 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/api/dev/.env"] [unique_id "amsfBJdDSoxWEj4VOGYCrAAAAA0"]
[Thu Jul 30 10:53:08.576349 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/api/dev/.env"] [unique_id "amsfBJdDSoxWEj4VOGYCrAAAAA0"]
[Thu Jul 30 10:53:08.576515 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfBJdDSoxWEj4VOGYCrAAAAA0"]
[Thu Jul 30 10:53:08.695435 2026] [lsapi:warn] [pid 2772203:tid 2772203] [client 167.172.163.51:33940] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 10:53:08.695480 2026] [lsapi:warn] [pid 2772203:tid 2772203] [client 167.172.163.51:33940] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 10:53:08.924715 2026] [ssl:error] [pid 2792596:tid 2792596] (EAI 2)Name or service not known: [client 144.76.19.72:35098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:08.924754 2026] [ssl:error] [pid 2792596:tid 2792596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:08.978134 2026] [ssl:error] [pid 2787027:tid 2787027] (EAI 2)Name or service not known: [client 144.76.19.72:35104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:08.978179 2026] [ssl:error] [pid 2787027:tid 2787027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:08.993496 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/api/staging/.env"] [unique_id "amsfBJdDSoxWEj4VOGYCrQAAAA0"]
[Thu Jul 30 10:53:08.993950 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/api/staging/.env"] [unique_id "amsfBJdDSoxWEj4VOGYCrQAAAA0"]
[Thu Jul 30 10:53:08.994133 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfBJdDSoxWEj4VOGYCrQAAAA0"]
[Thu Jul 30 10:53:09.408176 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/vendor/.env"] [unique_id "amsfBZdDSoxWEj4VOGYCrgAAAA0"]
[Thu Jul 30 10:53:09.408627 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/vendor/.env"] [unique_id "amsfBZdDSoxWEj4VOGYCrgAAAA0"]
[Thu Jul 30 10:53:09.408797 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfBZdDSoxWEj4VOGYCrgAAAA0"]
[Thu Jul 30 10:53:09.832406 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/lib/.env"] [unique_id "amsfBZdDSoxWEj4VOGYCrwAAAA0"]
[Thu Jul 30 10:53:09.832840 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/lib/.env"] [unique_id "amsfBZdDSoxWEj4VOGYCrwAAAA0"]
[Thu Jul 30 10:53:09.833017 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfBZdDSoxWEj4VOGYCrwAAAA0"]
[Thu Jul 30 10:53:10.139051 2026] [security2:error] [pid 2775380:tid 2775380] [client 185.191.171.8:20838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5599.0.html"] [unique_id "amsfBtNjCLsu4_1gmYfCwgAAAAk"]
[Thu Jul 30 10:53:10.249557 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/resources/.env"] [unique_id "amsfBpdDSoxWEj4VOGYCsAAAAA0"]
[Thu Jul 30 10:53:10.250017 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/resources/.env"] [unique_id "amsfBpdDSoxWEj4VOGYCsAAAAA0"]
[Thu Jul 30 10:53:10.250216 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfBpdDSoxWEj4VOGYCsAAAAA0"]
[Thu Jul 30 10:53:10.332149 2026] [ssl:error] [pid 2775668:tid 2775668] (70014)End of file found: [client 216.73.216.199:32247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:10.664247 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/assets/.env"] [unique_id "amsfBpdDSoxWEj4VOGYCsQAAAA0"]
[Thu Jul 30 10:53:10.664728 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/assets/.env"] [unique_id "amsfBpdDSoxWEj4VOGYCsQAAAA0"]
[Thu Jul 30 10:53:10.664889 2026] [security2:error] [pid 2787536:tid 2787536] [client 99.79.10.153:56072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfBpdDSoxWEj4VOGYCsQAAAA0"]
[Thu Jul 30 10:53:11.173739 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/uploads/.env"] [unique_id "amsfB9NjCLsu4_1gmYfCwwAAAAk"]
[Thu Jul 30 10:53:11.174299 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/uploads/.env"] [unique_id "amsfB9NjCLsu4_1gmYfCwwAAAAk"]
[Thu Jul 30 10:53:11.174523 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfB9NjCLsu4_1gmYfCwwAAAAk"]
[Thu Jul 30 10:53:11.239084 2026] [ssl:error] [pid 2778630:tid 2778630] (70014)End of file found: [client 216.73.216.199:25025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:11.278650 2026] [core:error] [pid 2790747:tid 2790747] [client 66.249.66.168:58996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:11.278678 2026] [core:error] [pid 2790747:tid 2790747] [client 66.249.66.168:58996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:11.769694 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /internal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/internal/.env"] [unique_id "amsfB9NjCLsu4_1gmYfCxAAAAAk"]
[Thu Jul 30 10:53:11.770253 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/internal/.env"] [unique_id "amsfB9NjCLsu4_1gmYfCxAAAAAk"]
[Thu Jul 30 10:53:11.770482 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfB9NjCLsu4_1gmYfCxAAAAAk"]
[Thu Jul 30 10:53:12.049335 2026] [ssl:error] [pid 2790596:tid 2790596] (EAI 2)Name or service not known: [client 144.76.19.72:49986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:12.049384 2026] [ssl:error] [pid 2790596:tid 2790596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:12.102803 2026] [ssl:error] [pid 2790747:tid 2790747] (EAI 2)Name or service not known: [client 144.76.19.72:49994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:12.102842 2026] [ssl:error] [pid 2790747:tid 2790747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:12.184773 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/tools/.env"] [unique_id "amsfCNNjCLsu4_1gmYfCxQAAAAk"]
[Thu Jul 30 10:53:12.185359 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/tools/.env"] [unique_id "amsfCNNjCLsu4_1gmYfCxQAAAAk"]
[Thu Jul 30 10:53:12.185599 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfCNNjCLsu4_1gmYfCxQAAAAk"]
[Thu Jul 30 10:53:12.603970 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/scripts/.env"] [unique_id "amsfCNNjCLsu4_1gmYfCxgAAAAk"]
[Thu Jul 30 10:53:12.604533 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/scripts/.env"] [unique_id "amsfCNNjCLsu4_1gmYfCxgAAAAk"]
[Thu Jul 30 10:53:12.604784 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfCNNjCLsu4_1gmYfCxgAAAAk"]
[Thu Jul 30 10:53:12.744272 2026] [ssl:error] [pid 2786633:tid 2786633] (70014)End of file found: [client 216.73.216.199:36341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:13.017972 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/bin/.env"] [unique_id "amsfCdNjCLsu4_1gmYfCxwAAAAk"]
[Thu Jul 30 10:53:13.018507 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/bin/.env"] [unique_id "amsfCdNjCLsu4_1gmYfCxwAAAAk"]
[Thu Jul 30 10:53:13.018726 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfCdNjCLsu4_1gmYfCxwAAAAk"]
[Thu Jul 30 10:53:13.149892 2026] [lsapi:warn] [pid 2790596:tid 2790596] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:53:13.225925 2026] [core:error] [pid 2790747:tid 2790747] [client 66.249.66.167:56594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:13.225960 2026] [core:error] [pid 2790747:tid 2790747] [client 66.249.66.167:56594] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:13.436760 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sbin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/sbin/.env"] [unique_id "amsfCdNjCLsu4_1gmYfCyAAAAAk"]
[Thu Jul 30 10:53:13.437312 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/sbin/.env"] [unique_id "amsfCdNjCLsu4_1gmYfCyAAAAAk"]
[Thu Jul 30 10:53:13.437529 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfCdNjCLsu4_1gmYfCyAAAAAk"]
[Thu Jul 30 10:53:13.865137 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/local/.env"] [unique_id "amsfCdNjCLsu4_1gmYfCyQAAAAk"]
[Thu Jul 30 10:53:13.865651 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/local/.env"] [unique_id "amsfCdNjCLsu4_1gmYfCyQAAAAk"]
[Thu Jul 30 10:53:13.865859 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfCdNjCLsu4_1gmYfCyQAAAAk"]
[Thu Jul 30 10:53:14.290415 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/portal/.env"] [unique_id "amsfCtNjCLsu4_1gmYfCygAAAAk"]
[Thu Jul 30 10:53:14.290972 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/portal/.env"] [unique_id "amsfCtNjCLsu4_1gmYfCygAAAAk"]
[Thu Jul 30 10:53:14.291215 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfCtNjCLsu4_1gmYfCygAAAAk"]
[Thu Jul 30 10:53:14.711643 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/dashboard/.env"] [unique_id "amsfCtNjCLsu4_1gmYfCywAAAAk"]
[Thu Jul 30 10:53:14.712126 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/dashboard/.env"] [unique_id "amsfCtNjCLsu4_1gmYfCywAAAAk"]
[Thu Jul 30 10:53:14.712298 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfCtNjCLsu4_1gmYfCywAAAAk"]
[Thu Jul 30 10:53:15.127877 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/panel/.env"] [unique_id "amsfC9NjCLsu4_1gmYfCzAAAAAk"]
[Thu Jul 30 10:53:15.128331 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/panel/.env"] [unique_id "amsfC9NjCLsu4_1gmYfCzAAAAAk"]
[Thu Jul 30 10:53:15.128489 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfC9NjCLsu4_1gmYfCzAAAAAk"]
[Thu Jul 30 10:53:15.157655 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:49996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:15.157689 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:15.243565 2026] [ssl:error] [pid 2792596:tid 2792596] (EAI 2)Name or service not known: [client 144.76.19.72:50006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:15.243609 2026] [ssl:error] [pid 2792596:tid 2792596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:15.546288 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/crm/.env"] [unique_id "amsfC9NjCLsu4_1gmYfCzQAAAAk"]
[Thu Jul 30 10:53:15.546735 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/crm/.env"] [unique_id "amsfC9NjCLsu4_1gmYfCzQAAAAk"]
[Thu Jul 30 10:53:15.546904 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfC9NjCLsu4_1gmYfCzQAAAAk"]
[Thu Jul 30 10:53:15.959710 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/erp/.env"] [unique_id "amsfC9NjCLsu4_1gmYfCzgAAAAk"]
[Thu Jul 30 10:53:15.960172 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/erp/.env"] [unique_id "amsfC9NjCLsu4_1gmYfCzgAAAAk"]
[Thu Jul 30 10:53:15.960365 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfC9NjCLsu4_1gmYfCzgAAAAk"]
[Thu Jul 30 10:53:16.111855 2026] [security2:error] [pid 2790596:tid 2790596] [client 47.128.99.215:51514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rediscoveredgarden.co.uk"] [uri "/robots.txt"] [unique_id "amsfDBZVREPYiWr9IS6nqgAAAAY"]
[Thu Jul 30 10:53:16.375526 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/shop/.env"] [unique_id "amsfDNNjCLsu4_1gmYfCzwAAAAk"]
[Thu Jul 30 10:53:16.375952 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/shop/.env"] [unique_id "amsfDNNjCLsu4_1gmYfCzwAAAAk"]
[Thu Jul 30 10:53:16.376129 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfDNNjCLsu4_1gmYfCzwAAAAk"]
[Thu Jul 30 10:53:16.793851 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /store/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/store/.env"] [unique_id "amsfDNNjCLsu4_1gmYfC0AAAAAk"]
[Thu Jul 30 10:53:16.794413 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/store/.env"] [unique_id "amsfDNNjCLsu4_1gmYfC0AAAAAk"]
[Thu Jul 30 10:53:16.794643 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfDNNjCLsu4_1gmYfC0AAAAAk"]
[Thu Jul 30 10:53:17.209131 2026] [authz_core:error] [pid 2790788:tid 2790788] [client 66.249.66.34:61821] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:53:17.211824 2026] [authz_core:error] [pid 2790788:tid 2790788] [client 66.249.66.34:61821] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:53:17.217340 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/saas/.env"] [unique_id "amsfDdNjCLsu4_1gmYfC0QAAAAk"]
[Thu Jul 30 10:53:17.217864 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/saas/.env"] [unique_id "amsfDdNjCLsu4_1gmYfC0QAAAAk"]
[Thu Jul 30 10:53:17.218054 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfDdNjCLsu4_1gmYfC0QAAAAk"]
[Thu Jul 30 10:53:17.650507 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/client/.env"] [unique_id "amsfDdNjCLsu4_1gmYfC0gAAAAk"]
[Thu Jul 30 10:53:17.651092 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/client/.env"] [unique_id "amsfDdNjCLsu4_1gmYfC0gAAAAk"]
[Thu Jul 30 10:53:17.651301 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfDdNjCLsu4_1gmYfC0gAAAAk"]
[Thu Jul 30 10:53:18.064244 2026] [core:error] [pid 2792596:tid 2792596] (13)Permission denied: [client 216.73.216.199:5979] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-1k/store_user
[Thu Jul 30 10:53:18.065282 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/project/.env"] [unique_id "amsfDtNjCLsu4_1gmYfC0wAAAAk"]
[Thu Jul 30 10:53:18.065784 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/project/.env"] [unique_id "amsfDtNjCLsu4_1gmYfC0wAAAAk"]
[Thu Jul 30 10:53:18.065981 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfDtNjCLsu4_1gmYfC0wAAAAk"]
[Thu Jul 30 10:53:18.300251 2026] [ssl:error] [pid 2790596:tid 2790596] (EAI 2)Name or service not known: [client 144.76.19.72:50014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:18.300300 2026] [ssl:error] [pid 2790596:tid 2790596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:18.357670 2026] [ssl:error] [pid 2780664:tid 2780664] (EAI 2)Name or service not known: [client 144.76.19.72:50016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:18.357701 2026] [ssl:error] [pid 2780664:tid 2780664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:18.484555 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/admin-panel/.env"] [unique_id "amsfDtNjCLsu4_1gmYfC1AAAAAk"]
[Thu Jul 30 10:53:18.485134 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/admin-panel/.env"] [unique_id "amsfDtNjCLsu4_1gmYfC1AAAAAk"]
[Thu Jul 30 10:53:18.485342 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfDtNjCLsu4_1gmYfC1AAAAAk"]
[Thu Jul 30 10:53:18.644331 2026] [core:error] [pid 2791794:tid 2791794] [client 66.249.64.171:56171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:18.644356 2026] [core:error] [pid 2791794:tid 2791794] [client 66.249.64.171:56171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:18.667370 2026] [ssl:error] [pid 2792596:tid 2792596] (70014)End of file found: [client 216.73.216.199:5979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:18.756495 2026] [security2:error] [pid 2790596:tid 2790596] [client 43.165.7.132:33784] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "amsfDhZVREPYiWr9IS6nrAAAAAY"]
[Thu Jul 30 10:53:18.912150 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /control-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/control-panel/.env"] [unique_id "amsfDtNjCLsu4_1gmYfC1QAAAAk"]
[Thu Jul 30 10:53:18.912610 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/control-panel/.env"] [unique_id "amsfDtNjCLsu4_1gmYfC1QAAAAk"]
[Thu Jul 30 10:53:18.912791 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfDtNjCLsu4_1gmYfC1QAAAAk"]
[Thu Jul 30 10:53:18.972802 2026] [core:error] [pid 2791865:tid 2791865] (13)Permission denied: [client 216.73.216.199:23731] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/pde_opener/min_partial
[Thu Jul 30 10:53:19.342044 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/user-panel/.env"] [unique_id "amsfD9NjCLsu4_1gmYfC1gAAAAk"]
[Thu Jul 30 10:53:19.342542 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/user-panel/.env"] [unique_id "amsfD9NjCLsu4_1gmYfC1gAAAAk"]
[Thu Jul 30 10:53:19.342746 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfD9NjCLsu4_1gmYfC1gAAAAk"]
[Thu Jul 30 10:53:19.575360 2026] [ssl:error] [pid 2791865:tid 2791865] (70014)End of file found: [client 216.73.216.199:23731] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:19.760054 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/node/.env"] [unique_id "amsfD9NjCLsu4_1gmYfC1wAAAAk"]
[Thu Jul 30 10:53:19.760546 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/node/.env"] [unique_id "amsfD9NjCLsu4_1gmYfC1wAAAAk"]
[Thu Jul 30 10:53:19.760758 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfD9NjCLsu4_1gmYfC1wAAAAk"]
[Thu Jul 30 10:53:20.176025 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /express/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/express/.env"] [unique_id "amsfENNjCLsu4_1gmYfC2AAAAAk"]
[Thu Jul 30 10:53:20.176719 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/express/.env"] [unique_id "amsfENNjCLsu4_1gmYfC2AAAAAk"]
[Thu Jul 30 10:53:20.176984 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfENNjCLsu4_1gmYfC2AAAAAk"]
[Thu Jul 30 10:53:20.592449 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /next/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/next/.env"] [unique_id "amsfENNjCLsu4_1gmYfC2QAAAAk"]
[Thu Jul 30 10:53:20.592864 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/next/.env"] [unique_id "amsfENNjCLsu4_1gmYfC2QAAAAk"]
[Thu Jul 30 10:53:20.593025 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfENNjCLsu4_1gmYfC2QAAAAk"]
[Thu Jul 30 10:53:20.784302 2026] [ssl:error] [pid 2772203:tid 2772203] (70014)End of file found: [client 216.73.216.199:30890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:21.008327 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuxt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/nuxt/.env"] [unique_id "amsfEdNjCLsu4_1gmYfC2gAAAAk"]
[Thu Jul 30 10:53:21.008775 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/nuxt/.env"] [unique_id "amsfEdNjCLsu4_1gmYfC2gAAAAk"]
[Thu Jul 30 10:53:21.008943 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfEdNjCLsu4_1gmYfC2gAAAAk"]
[Thu Jul 30 10:53:21.226541 2026] [security2:error] [pid 2790787:tid 2790787] [client 43.159.128.237:49744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "refraction.co.uk"] [uri "/"] [unique_id "amsfEcGy03FPWD7YBD60GAAAABw"]
[Thu Jul 30 10:53:21.413970 2026] [ssl:error] [pid 2791751:tid 2791751] (EAI 2)Name or service not known: [client 144.76.19.72:40492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:21.414005 2026] [ssl:error] [pid 2791751:tid 2791751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:21.423169 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/nest/.env"] [unique_id "amsfEdNjCLsu4_1gmYfC2wAAAAk"]
[Thu Jul 30 10:53:21.423837 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/nest/.env"] [unique_id "amsfEdNjCLsu4_1gmYfC2wAAAAk"]
[Thu Jul 30 10:53:21.424090 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfEdNjCLsu4_1gmYfC2wAAAAk"]
[Thu Jul 30 10:53:21.472579 2026] [ssl:error] [pid 2792753:tid 2792753] (EAI 2)Name or service not known: [client 144.76.19.72:40496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:21.472620 2026] [ssl:error] [pid 2792753:tid 2792753] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:21.838682 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/react/.env"] [unique_id "amsfEdNjCLsu4_1gmYfC3AAAAAk"]
[Thu Jul 30 10:53:21.839200 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/react/.env"] [unique_id "amsfEdNjCLsu4_1gmYfC3AAAAAk"]
[Thu Jul 30 10:53:21.839385 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfEdNjCLsu4_1gmYfC3AAAAAk"]
[Thu Jul 30 10:53:22.260957 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/vue/.env"] [unique_id "amsfEtNjCLsu4_1gmYfC3QAAAAk"]
[Thu Jul 30 10:53:22.261451 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/vue/.env"] [unique_id "amsfEtNjCLsu4_1gmYfC3QAAAAk"]
[Thu Jul 30 10:53:22.261635 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfEtNjCLsu4_1gmYfC3QAAAAk"]
[Thu Jul 30 10:53:22.681716 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /angular/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/angular/.env"] [unique_id "amsfEtNjCLsu4_1gmYfC3gAAAAk"]
[Thu Jul 30 10:53:22.682176 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/angular/.env"] [unique_id "amsfEtNjCLsu4_1gmYfC3gAAAAk"]
[Thu Jul 30 10:53:22.682353 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfEtNjCLsu4_1gmYfC3gAAAAk"]
[Thu Jul 30 10:53:23.097147 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /svelte/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/svelte/.env"] [unique_id "amsfE9NjCLsu4_1gmYfC3wAAAAk"]
[Thu Jul 30 10:53:23.097769 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/svelte/.env"] [unique_id "amsfE9NjCLsu4_1gmYfC3wAAAAk"]
[Thu Jul 30 10:53:23.098010 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfE9NjCLsu4_1gmYfC3wAAAAk"]
[Thu Jul 30 10:53:23.515456 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vite/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/vite/.env"] [unique_id "amsfE9NjCLsu4_1gmYfC4AAAAAk"]
[Thu Jul 30 10:53:23.515859 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/vite/.env"] [unique_id "amsfE9NjCLsu4_1gmYfC4AAAAAk"]
[Thu Jul 30 10:53:23.516011 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfE9NjCLsu4_1gmYfC4AAAAAk"]
[Thu Jul 30 10:53:23.678233 2026] [security2:error] [pid 2773715:tid 2773715] [client 190.143.191.96:36373] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfE74q1468wfJCllE_owAAABk"]
[Thu Jul 30 10:53:23.678292 2026] [security2:error] [pid 2773715:tid 2773715] [client 190.143.191.96:36373] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfE74q1468wfJCllE_owAAABk"]
[Thu Jul 30 10:53:23.678582 2026] [security2:error] [pid 2773715:tid 2773715] [client 190.143.191.96:36373] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfE74q1468wfJCllE_owAAABk"]
[Thu Jul 30 10:53:23.917008 2026] [lsapi:warn] [pid 2765151:tid 2765151] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:53:23.927607 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/backup/.env"] [unique_id "amsfE9NjCLsu4_1gmYfC4QAAAAk"]
[Thu Jul 30 10:53:23.928265 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/backup/.env"] [unique_id "amsfE9NjCLsu4_1gmYfC4QAAAAk"]
[Thu Jul 30 10:53:23.928519 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfE9NjCLsu4_1gmYfC4QAAAAk"]
[Thu Jul 30 10:53:24.347005 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backups/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/backups/.env"] [unique_id "amsfFNNjCLsu4_1gmYfC4gAAAAk"]
[Thu Jul 30 10:53:24.347476 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/backups/.env"] [unique_id "amsfFNNjCLsu4_1gmYfC4gAAAAk"]
[Thu Jul 30 10:53:24.347668 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfFNNjCLsu4_1gmYfC4gAAAAk"]
[Thu Jul 30 10:53:24.531117 2026] [ssl:error] [pid 2791751:tid 2791751] (EAI 2)Name or service not known: [client 144.76.19.72:40512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:24.531149 2026] [ssl:error] [pid 2791751:tid 2791751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:24.584447 2026] [ssl:error] [pid 2792596:tid 2792596] (EAI 2)Name or service not known: [client 144.76.19.72:40524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:24.584478 2026] [ssl:error] [pid 2792596:tid 2792596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:24.767411 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/old/.env"] [unique_id "amsfFNNjCLsu4_1gmYfC4wAAAAk"]
[Thu Jul 30 10:53:24.767882 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/old/.env"] [unique_id "amsfFNNjCLsu4_1gmYfC4wAAAAk"]
[Thu Jul 30 10:53:24.768053 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfFNNjCLsu4_1gmYfC4wAAAAk"]
[Thu Jul 30 10:53:25.181580 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/tmp/.env"] [unique_id "amsfFdNjCLsu4_1gmYfC5AAAAAk"]
[Thu Jul 30 10:53:25.182027 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/tmp/.env"] [unique_id "amsfFdNjCLsu4_1gmYfC5AAAAAk"]
[Thu Jul 30 10:53:25.182220 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfFdNjCLsu4_1gmYfC5AAAAAk"]
[Thu Jul 30 10:53:25.603609 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/temp/.env"] [unique_id "amsfFdNjCLsu4_1gmYfC5QAAAAk"]
[Thu Jul 30 10:53:25.604188 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/temp/.env"] [unique_id "amsfFdNjCLsu4_1gmYfC5QAAAAk"]
[Thu Jul 30 10:53:25.604396 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfFdNjCLsu4_1gmYfC5QAAAAk"]
[Thu Jul 30 10:53:26.020974 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/lab/.env"] [unique_id "amsfFtNjCLsu4_1gmYfC5gAAAAk"]
[Thu Jul 30 10:53:26.021444 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/lab/.env"] [unique_id "amsfFtNjCLsu4_1gmYfC5gAAAAk"]
[Thu Jul 30 10:53:26.021625 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfFtNjCLsu4_1gmYfC5gAAAAk"]
[Thu Jul 30 10:53:26.437174 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/cronlab/.env"] [unique_id "amsfFtNjCLsu4_1gmYfC5wAAAAk"]
[Thu Jul 30 10:53:26.437646 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/cronlab/.env"] [unique_id "amsfFtNjCLsu4_1gmYfC5wAAAAk"]
[Thu Jul 30 10:53:26.437834 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfFtNjCLsu4_1gmYfC5wAAAAk"]
[Thu Jul 30 10:53:26.514294 2026] [core:error] [pid 2791794:tid 2791794] [client 66.249.64.171:53631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:26.514323 2026] [core:error] [pid 2791794:tid 2791794] [client 66.249.64.171:53631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:26.811460 2026] [security2:error] [pid 2775668:tid 2775668] [client 95.86.30.142:55528] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfFhc4Q9fU0fLsr71zzwAAAAs"]
[Thu Jul 30 10:53:26.811513 2026] [security2:error] [pid 2775668:tid 2775668] [client 95.86.30.142:55528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfFhc4Q9fU0fLsr71zzwAAAAs"]
[Thu Jul 30 10:53:26.811760 2026] [security2:error] [pid 2775668:tid 2775668] [client 95.86.30.142:55528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfFhc4Q9fU0fLsr71zzwAAAAs"]
[Thu Jul 30 10:53:26.852830 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/cron/.env"] [unique_id "amsfFtNjCLsu4_1gmYfC6AAAAAk"]
[Thu Jul 30 10:53:26.853310 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/cron/.env"] [unique_id "amsfFtNjCLsu4_1gmYfC6AAAAAk"]
[Thu Jul 30 10:53:26.853487 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfFtNjCLsu4_1gmYfC6AAAAAk"]
[Thu Jul 30 10:53:27.159931 2026] [security2:error] [pid 2791864:tid 2791864] [client 43.135.135.57:42672] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amsfF9QTNCVnmF9F4jYi5gAAACk"]
[Thu Jul 30 10:53:27.267030 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/en/.env"] [unique_id "amsfF9NjCLsu4_1gmYfC6QAAAAk"]
[Thu Jul 30 10:53:27.267501 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/en/.env"] [unique_id "amsfF9NjCLsu4_1gmYfC6QAAAAk"]
[Thu Jul 30 10:53:27.267690 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfF9NjCLsu4_1gmYfC6QAAAAk"]
[Thu Jul 30 10:53:27.412368 2026] [core:error] [pid 2792671:tid 2792671] (13)Permission denied: [client 216.73.216.199:46770] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:02/physical_node/resource4
[Thu Jul 30 10:53:27.667133 2026] [ssl:error] [pid 2792596:tid 2792596] (EAI 2)Name or service not known: [client 144.76.19.72:40540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:27.667161 2026] [ssl:error] [pid 2792596:tid 2792596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:27.681695 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/administrator/.env"] [unique_id "amsfF9NjCLsu4_1gmYfC6gAAAAk"]
[Thu Jul 30 10:53:27.682153 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/administrator/.env"] [unique_id "amsfF9NjCLsu4_1gmYfC6gAAAAk"]
[Thu Jul 30 10:53:27.682329 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfF9NjCLsu4_1gmYfC6gAAAAk"]
[Thu Jul 30 10:53:27.719734 2026] [ssl:error] [pid 2791826:tid 2791826] (EAI 2)Name or service not known: [client 144.76.19.72:40548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:27.719763 2026] [ssl:error] [pid 2791826:tid 2791826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:28.014531 2026] [ssl:error] [pid 2792671:tid 2792671] (70014)End of file found: [client 216.73.216.199:46770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:28.097166 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/psnlink/.env"] [unique_id "amsfGNNjCLsu4_1gmYfC6wAAAAk"]
[Thu Jul 30 10:53:28.097636 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/psnlink/.env"] [unique_id "amsfGNNjCLsu4_1gmYfC6wAAAAk"]
[Thu Jul 30 10:53:28.097800 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfGNNjCLsu4_1gmYfC6wAAAAk"]
[Thu Jul 30 10:53:28.314682 2026] [core:error] [pid 2765151:tid 2765151] (13)Permission denied: [client 216.73.216.199:55963] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_extent_status/red_zone
[Thu Jul 30 10:53:28.511969 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/exapi/.env"] [unique_id "amsfGNNjCLsu4_1gmYfC7AAAAAk"]
[Thu Jul 30 10:53:28.512336 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/exapi/.env"] [unique_id "amsfGNNjCLsu4_1gmYfC7AAAAAk"]
[Thu Jul 30 10:53:28.512504 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfGNNjCLsu4_1gmYfC7AAAAAk"]
[Thu Jul 30 10:53:28.915937 2026] [core:error] [pid 2765151:tid 2765151] (13)Permission denied: [client 216.73.216.199:55963] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PINGv6/slabs
[Thu Jul 30 10:53:28.926494 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/sitemaps/.env"] [unique_id "amsfGNNjCLsu4_1gmYfC7QAAAAk"]
[Thu Jul 30 10:53:28.926951 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/sitemaps/.env"] [unique_id "amsfGNNjCLsu4_1gmYfC7QAAAAk"]
[Thu Jul 30 10:53:28.927126 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfGNNjCLsu4_1gmYfC7QAAAAk"]
[Thu Jul 30 10:53:29.342032 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.backup1"] [unique_id "amsfGdNjCLsu4_1gmYfC7gAAAAk"]
[Thu Jul 30 10:53:29.342469 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.backup1"] [unique_id "amsfGdNjCLsu4_1gmYfC7gAAAAk"]
[Thu Jul 30 10:53:29.342644 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfGdNjCLsu4_1gmYfC7gAAAAk"]
[Thu Jul 30 10:53:29.763293 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.backup2"] [unique_id "amsfGdNjCLsu4_1gmYfC7wAAAAk"]
[Thu Jul 30 10:53:29.763765 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.backup2"] [unique_id "amsfGdNjCLsu4_1gmYfC7wAAAAk"]
[Thu Jul 30 10:53:29.763941 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfGdNjCLsu4_1gmYfC7wAAAAk"]
[Thu Jul 30 10:53:30.202064 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/logs/.env"] [unique_id "amsfGtNjCLsu4_1gmYfC8AAAAAk"]
[Thu Jul 30 10:53:30.202522 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/logs/.env"] [unique_id "amsfGtNjCLsu4_1gmYfC8AAAAAk"]
[Thu Jul 30 10:53:30.202706 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfGtNjCLsu4_1gmYfC8AAAAAk"]
[Thu Jul 30 10:53:30.425749 2026] [ssl:error] [pid 2765151:tid 2765151] (70014)End of file found: [client 216.73.216.199:55963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:30.615636 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/cache/.env"] [unique_id "amsfGtNjCLsu4_1gmYfC8QAAAAk"]
[Thu Jul 30 10:53:30.616102 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/cache/.env"] [unique_id "amsfGtNjCLsu4_1gmYfC8QAAAAk"]
[Thu Jul 30 10:53:30.616273 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfGtNjCLsu4_1gmYfC8QAAAAk"]
[Thu Jul 30 10:53:30.771176 2026] [ssl:error] [pid 2790596:tid 2790596] (EAI 2)Name or service not known: [client 144.76.19.72:39474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:30.771208 2026] [ssl:error] [pid 2790596:tid 2790596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:30.822563 2026] [ssl:error] [pid 2794367:tid 2794367] (EAI 2)Name or service not known: [client 144.76.19.72:39478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:30.822606 2026] [ssl:error] [pid 2794367:tid 2794367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:31.028212 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mailer/.env"] [unique_id "amsfG9NjCLsu4_1gmYfC8gAAAAk"]
[Thu Jul 30 10:53:31.028675 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mailer/.env"] [unique_id "amsfG9NjCLsu4_1gmYfC8gAAAAk"]
[Thu Jul 30 10:53:31.028841 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfG9NjCLsu4_1gmYfC8gAAAAk"]
[Thu Jul 30 10:53:31.444095 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mail/.env"] [unique_id "amsfG9NjCLsu4_1gmYfC8wAAAAk"]
[Thu Jul 30 10:53:31.444557 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mail/.env"] [unique_id "amsfG9NjCLsu4_1gmYfC8wAAAAk"]
[Thu Jul 30 10:53:31.444740 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfG9NjCLsu4_1gmYfC8wAAAAk"]
[Thu Jul 30 10:53:31.857554 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/email/.env"] [unique_id "amsfG9NjCLsu4_1gmYfC9AAAAAk"]
[Thu Jul 30 10:53:31.858016 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/email/.env"] [unique_id "amsfG9NjCLsu4_1gmYfC9AAAAAk"]
[Thu Jul 30 10:53:31.858208 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfG9NjCLsu4_1gmYfC9AAAAAk"]
[Thu Jul 30 10:53:32.122375 2026] [security2:error] [pid 2791864:tid 2791864] [client 154.192.67.22:12491] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfHNQTNCVnmF9F4jYi6wAAACk"]
[Thu Jul 30 10:53:32.122432 2026] [security2:error] [pid 2791864:tid 2791864] [client 154.192.67.22:12491] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfHNQTNCVnmF9F4jYi6wAAACk"]
[Thu Jul 30 10:53:32.122696 2026] [security2:error] [pid 2791864:tid 2791864] [client 154.192.67.22:12491] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfHNQTNCVnmF9F4jYi6wAAACk"]
[Thu Jul 30 10:53:32.270851 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /smtp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/smtp/.env"] [unique_id "amsfHNNjCLsu4_1gmYfC9QAAAAk"]
[Thu Jul 30 10:53:32.271316 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/smtp/.env"] [unique_id "amsfHNNjCLsu4_1gmYfC9QAAAAk"]
[Thu Jul 30 10:53:32.271502 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfHNNjCLsu4_1gmYfC9QAAAAk"]
[Thu Jul 30 10:53:32.292708 2026] [lsapi:warn] [pid 2791794:tid 2791794] [client 66.249.93.162:39123] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:53:32.292751 2026] [lsapi:warn] [pid 2791794:tid 2791794] [client 66.249.93.162:39123] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:53:32.569944 2026] [lsapi:warn] [pid 2773715:tid 2773715] [client 193.186.4.65:36625] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 10:53:32.569993 2026] [lsapi:warn] [pid 2773715:tid 2773715] [client 193.186.4.65:36625] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 10:53:32.691126 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mailing/.env"] [unique_id "amsfHNNjCLsu4_1gmYfC9gAAAAk"]
[Thu Jul 30 10:53:32.691591 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mailing/.env"] [unique_id "amsfHNNjCLsu4_1gmYfC9gAAAAk"]
[Thu Jul 30 10:53:32.691766 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfHNNjCLsu4_1gmYfC9gAAAAk"]
[Thu Jul 30 10:53:33.109513 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /notifications/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/notifications/.env"] [unique_id "amsfHdNjCLsu4_1gmYfC9wAAAAk"]
[Thu Jul 30 10:53:33.109964 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/notifications/.env"] [unique_id "amsfHdNjCLsu4_1gmYfC9wAAAAk"]
[Thu Jul 30 10:53:33.110162 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfHdNjCLsu4_1gmYfC9wAAAAk"]
[Thu Jul 30 10:53:33.523237 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /notify/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/notify/.env"] [unique_id "amsfHdNjCLsu4_1gmYfC-AAAAAk"]
[Thu Jul 30 10:53:33.523694 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/notify/.env"] [unique_id "amsfHdNjCLsu4_1gmYfC-AAAAAk"]
[Thu Jul 30 10:53:33.523866 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfHdNjCLsu4_1gmYfC-AAAAAk"]
[Thu Jul 30 10:53:33.570802 2026] [security2:error] [pid 2794367:tid 2794367] [client 110.249.202.233:63116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsfHc6LLOjoHm7qC5tkbAAAAAo"]
[Thu Jul 30 10:53:33.921746 2026] [ssl:error] [pid 2784563:tid 2784563] (EAI 2)Name or service not known: [client 144.76.19.72:39480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:33.921773 2026] [ssl:error] [pid 2784563:tid 2784563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:33.937178 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sender/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/sender/.env"] [unique_id "amsfHdNjCLsu4_1gmYfC-QAAAAk"]
[Thu Jul 30 10:53:33.937546 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/sender/.env"] [unique_id "amsfHdNjCLsu4_1gmYfC-QAAAAk"]
[Thu Jul 30 10:53:33.937719 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfHdNjCLsu4_1gmYfC-QAAAAk"]
[Thu Jul 30 10:53:33.979324 2026] [ssl:error] [pid 2790788:tid 2790788] (EAI 2)Name or service not known: [client 144.76.19.72:39496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:33.979378 2026] [ssl:error] [pid 2790788:tid 2790788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:34.355501 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /campaign/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/campaign/.env"] [unique_id "amsfHtNjCLsu4_1gmYfC-gAAAAk"]
[Thu Jul 30 10:53:34.355940 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/campaign/.env"] [unique_id "amsfHtNjCLsu4_1gmYfC-gAAAAk"]
[Thu Jul 30 10:53:34.356123 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfHtNjCLsu4_1gmYfC-gAAAAk"]
[Thu Jul 30 10:53:34.649353 2026] [lsapi:warn] [pid 2794545:tid 2794545] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:53:34.772305 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /newsletter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/newsletter/.env"] [unique_id "amsfHtNjCLsu4_1gmYfC-wAAAAk"]
[Thu Jul 30 10:53:34.772770 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/newsletter/.env"] [unique_id "amsfHtNjCLsu4_1gmYfC-wAAAAk"]
[Thu Jul 30 10:53:34.772941 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfHtNjCLsu4_1gmYfC-wAAAAk"]
[Thu Jul 30 10:53:34.941295 2026] [ssl:error] [pid 2790596:tid 2790596] (70014)End of file found: [client 216.73.216.199:25518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:35.192473 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/ses/.env"] [unique_id "amsfH9NjCLsu4_1gmYfC_AAAAAk"]
[Thu Jul 30 10:53:35.192926 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/ses/.env"] [unique_id "amsfH9NjCLsu4_1gmYfC_AAAAAk"]
[Thu Jul 30 10:53:35.193111 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfH9NjCLsu4_1gmYfC_AAAAAk"]
[Thu Jul 30 10:53:35.238155 2026] [ssl:error] [pid 2791824:tid 2791824] (70014)End of file found: [client 216.73.216.199:26249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:35.607757 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/sendgrid/.env"] [unique_id "amsfH9NjCLsu4_1gmYfC_QAAAAk"]
[Thu Jul 30 10:53:35.608214 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/sendgrid/.env"] [unique_id "amsfH9NjCLsu4_1gmYfC_QAAAAk"]
[Thu Jul 30 10:53:35.608389 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfH9NjCLsu4_1gmYfC_QAAAAk"]
[Thu Jul 30 10:53:36.024118 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sparkpost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/sparkpost/.env"] [unique_id "amsfINNjCLsu4_1gmYfC_gAAAAk"]
[Thu Jul 30 10:53:36.024578 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/sparkpost/.env"] [unique_id "amsfINNjCLsu4_1gmYfC_gAAAAk"]
[Thu Jul 30 10:53:36.024753 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfINNjCLsu4_1gmYfC_gAAAAk"]
[Thu Jul 30 10:53:36.448207 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postmark/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/postmark/.env"] [unique_id "amsfINNjCLsu4_1gmYfC_wAAAAk"]
[Thu Jul 30 10:53:36.448671 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/postmark/.env"] [unique_id "amsfINNjCLsu4_1gmYfC_wAAAAk"]
[Thu Jul 30 10:53:36.448837 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfINNjCLsu4_1gmYfC_wAAAAk"]
[Thu Jul 30 10:53:36.861107 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailgun/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mailgun/.env"] [unique_id "amsfINNjCLsu4_1gmYfDAAAAAAk"]
[Thu Jul 30 10:53:36.861546 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mailgun/.env"] [unique_id "amsfINNjCLsu4_1gmYfDAAAAAAk"]
[Thu Jul 30 10:53:36.861726 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfINNjCLsu4_1gmYfDAAAAAAk"]
[Thu Jul 30 10:53:37.035208 2026] [ssl:error] [pid 2788221:tid 2788221] (EAI 2)Name or service not known: [client 144.76.19.72:39502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:37.035259 2026] [ssl:error] [pid 2788221:tid 2788221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:37.095031 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:39508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:37.095098 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:37.276758 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mandrill/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mandrill/.env"] [unique_id "amsfIdNjCLsu4_1gmYfDAQAAAAk"]
[Thu Jul 30 10:53:37.277211 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mandrill/.env"] [unique_id "amsfIdNjCLsu4_1gmYfDAQAAAAk"]
[Thu Jul 30 10:53:37.277384 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfIdNjCLsu4_1gmYfDAQAAAAk"]
[Thu Jul 30 10:53:37.398308 2026] [security2:error] [pid 2776122:tid 2776122] [client 185.191.171.17:33188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7016.0.html"] [unique_id "amsfIR4G-g2-X_lpuQgnbAAAABA"]
[Thu Jul 30 10:53:37.694872 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailjet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mailjet/.env"] [unique_id "amsfIdNjCLsu4_1gmYfDAgAAAAk"]
[Thu Jul 30 10:53:37.695331 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mailjet/.env"] [unique_id "amsfIdNjCLsu4_1gmYfDAgAAAAk"]
[Thu Jul 30 10:53:37.695515 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfIdNjCLsu4_1gmYfDAgAAAAk"]
[Thu Jul 30 10:53:38.113167 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /brevo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/brevo/.env"] [unique_id "amsfItNjCLsu4_1gmYfDAwAAAAk"]
[Thu Jul 30 10:53:38.113667 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/brevo/.env"] [unique_id "amsfItNjCLsu4_1gmYfDAwAAAAk"]
[Thu Jul 30 10:53:38.113861 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfItNjCLsu4_1gmYfDAwAAAAk"]
[Thu Jul 30 10:53:38.252411 2026] [core:error] [pid 2794367:tid 2794367] (13)Permission denied: [client 216.73.216.199:13987] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/xmit_fifo_size
[Thu Jul 30 10:53:38.539769 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /transactional/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/transactional/.env"] [unique_id "amsfItNjCLsu4_1gmYfDBAAAAAk"]
[Thu Jul 30 10:53:38.540282 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/transactional/.env"] [unique_id "amsfItNjCLsu4_1gmYfDBAAAAAk"]
[Thu Jul 30 10:53:38.540498 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfItNjCLsu4_1gmYfDBAAAAAk"]
[Thu Jul 30 10:53:38.955032 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bulk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/bulk/.env"] [unique_id "amsfItNjCLsu4_1gmYfDBQAAAAk"]
[Thu Jul 30 10:53:38.955522 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/bulk/.env"] [unique_id "amsfItNjCLsu4_1gmYfDBQAAAAk"]
[Thu Jul 30 10:53:38.955723 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfItNjCLsu4_1gmYfDBQAAAAk"]
[Thu Jul 30 10:53:39.369249 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/aws/.env"] [unique_id "amsfI9NjCLsu4_1gmYfDBgAAAAk"]
[Thu Jul 30 10:53:39.369763 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/aws/.env"] [unique_id "amsfI9NjCLsu4_1gmYfDBgAAAAk"]
[Thu Jul 30 10:53:39.369978 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfI9NjCLsu4_1gmYfDBgAAAAk"]
[Thu Jul 30 10:53:39.781426 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /azure/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/azure/.env"] [unique_id "amsfI9NjCLsu4_1gmYfDBwAAAAk"]
[Thu Jul 30 10:53:39.781893 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/azure/.env"] [unique_id "amsfI9NjCLsu4_1gmYfDBwAAAAk"]
[Thu Jul 30 10:53:39.782125 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfI9NjCLsu4_1gmYfDBwAAAAk"]
[Thu Jul 30 10:53:40.152104 2026] [ssl:error] [pid 2790747:tid 2790747] (EAI 2)Name or service not known: [client 144.76.19.72:43350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:40.152133 2026] [ssl:error] [pid 2790747:tid 2790747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:40.199125 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gcp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/gcp/.env"] [unique_id "amsfJNNjCLsu4_1gmYfDCAAAAAk"]
[Thu Jul 30 10:53:40.199626 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/gcp/.env"] [unique_id "amsfJNNjCLsu4_1gmYfDCAAAAAk"]
[Thu Jul 30 10:53:40.199850 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJNNjCLsu4_1gmYfDCAAAAAk"]
[Thu Jul 30 10:53:40.203526 2026] [ssl:error] [pid 2773715:tid 2773715] (EAI 2)Name or service not known: [client 144.76.19.72:43364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:40.203550 2026] [ssl:error] [pid 2773715:tid 2773715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:40.616842 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/cloud/.env"] [unique_id "amsfJNNjCLsu4_1gmYfDCQAAAAk"]
[Thu Jul 30 10:53:40.617310 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/cloud/.env"] [unique_id "amsfJNNjCLsu4_1gmYfDCQAAAAk"]
[Thu Jul 30 10:53:40.617521 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJNNjCLsu4_1gmYfDCQAAAAk"]
[Thu Jul 30 10:53:41.034817 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /infrastructure/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/infrastructure/.env"] [unique_id "amsfJdNjCLsu4_1gmYfDCgAAAAk"]
[Thu Jul 30 10:53:41.035263 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/infrastructure/.env"] [unique_id "amsfJdNjCLsu4_1gmYfDCgAAAAk"]
[Thu Jul 30 10:53:41.035482 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJdNjCLsu4_1gmYfDCgAAAAk"]
[Thu Jul 30 10:53:41.171413 2026] [cgi:error] [pid 2791751:tid 2791751] [client 66.132.172.198:29668] AH02812: stderr from /home/uukkeqwo/officedev.refraction.co.uk/cgi-bin/: attempt to invoke directory as script, referer: https://www.officedev.refraction.co.uk:443/cgi-bin
[Thu Jul 30 10:53:41.262761 2026] [ssl:error] [pid 2794367:tid 2794367] (70014)End of file found: [client 216.73.216.199:13987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:41.447741 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/docker/.env"] [unique_id "amsfJdNjCLsu4_1gmYfDCwAAAAk"]
[Thu Jul 30 10:53:41.448220 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/docker/.env"] [unique_id "amsfJdNjCLsu4_1gmYfDCwAAAAk"]
[Thu Jul 30 10:53:41.448410 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJdNjCLsu4_1gmYfDCwAAAAk"]
[Thu Jul 30 10:53:41.514743 2026] [ssl:error] [pid 2788514:tid 2788514] [client 18.235.110.182:57618] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname cpcontacts.thewhitefamily.uk provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 10:53:41.759363 2026] [core:error] [pid 2791824:tid 2791824] (13)Permission denied: [client 216.73.216.199:15436] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark_connector/min_partial
[Thu Jul 30 10:53:41.860211 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /k8s/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/k8s/.env"] [unique_id "amsfJdNjCLsu4_1gmYfDDAAAAAk"]
[Thu Jul 30 10:53:41.860683 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/k8s/.env"] [unique_id "amsfJdNjCLsu4_1gmYfDDAAAAAk"]
[Thu Jul 30 10:53:41.860890 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJdNjCLsu4_1gmYfDDAAAAAk"]
[Thu Jul 30 10:53:41.864190 2026] [security2:error] [pid 2791824:tid 2791824] [client 216.73.216.199:15436] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/dbus.conf"] [unique_id "amsfJYxtmWbgICl6YJxRWAAAABU"]
[Thu Jul 30 10:53:41.864673 2026] [security2:error] [pid 2791824:tid 2791824] [client 216.73.216.199:15436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/dbus.conf"] [unique_id "amsfJYxtmWbgICl6YJxRWAAAABU"]
[Thu Jul 30 10:53:41.864876 2026] [security2:error] [pid 2791824:tid 2791824] [client 216.73.216.199:15436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/dbus.conf"] [unique_id "amsfJYxtmWbgICl6YJxRWAAAABU"]
[Thu Jul 30 10:53:42.275743 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/kubernetes/.env"] [unique_id "amsfJtNjCLsu4_1gmYfDDQAAAAk"]
[Thu Jul 30 10:53:42.276292 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/kubernetes/.env"] [unique_id "amsfJtNjCLsu4_1gmYfDDQAAAAk"]
[Thu Jul 30 10:53:42.276492 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJtNjCLsu4_1gmYfDDQAAAAk"]
[Thu Jul 30 10:53:42.693620 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /terraform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/terraform/.env"] [unique_id "amsfJtNjCLsu4_1gmYfDDgAAAAk"]
[Thu Jul 30 10:53:42.694088 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/terraform/.env"] [unique_id "amsfJtNjCLsu4_1gmYfDDgAAAAk"]
[Thu Jul 30 10:53:42.694307 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJtNjCLsu4_1gmYfDDgAAAAk"]
[Thu Jul 30 10:53:43.110555 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ansible/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/ansible/.env"] [unique_id "amsfJ9NjCLsu4_1gmYfDDwAAAAk"]
[Thu Jul 30 10:53:43.111011 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/ansible/.env"] [unique_id "amsfJ9NjCLsu4_1gmYfDDwAAAAk"]
[Thu Jul 30 10:53:43.111207 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJ9NjCLsu4_1gmYfDDwAAAAk"]
[Thu Jul 30 10:53:43.284221 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:43374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:43.284299 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:43.338643 2026] [ssl:error] [pid 2792670:tid 2792670] (EAI 2)Name or service not known: [client 144.76.19.72:43378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:43.338683 2026] [ssl:error] [pid 2792670:tid 2792670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:43.369309 2026] [ssl:error] [pid 2791824:tid 2791824] (70014)End of file found: [client 216.73.216.199:15436] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:43.527653 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.git/.env"] [unique_id "amsfJ9NjCLsu4_1gmYfDEAAAAAk"]
[Thu Jul 30 10:53:43.528165 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.git/.env"] [unique_id "amsfJ9NjCLsu4_1gmYfDEAAAAAk"]
[Thu Jul 30 10:53:43.528371 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJ9NjCLsu4_1gmYfDEAAAAAk"]
[Thu Jul 30 10:53:43.665593 2026] [ssl:error] [pid 2794886:tid 2794886] (70014)End of file found: [client 216.73.216.199:64205] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:43.930509 2026] [core:error] [pid 2792754:tid 2792754] [client 66.249.66.167:52553] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:43.930541 2026] [core:error] [pid 2792754:tid 2792754] [client 66.249.66.167:52553] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:43.939394 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/ci/.env"] [unique_id "amsfJ9NjCLsu4_1gmYfDEQAAAAk"]
[Thu Jul 30 10:53:43.939800 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/ci/.env"] [unique_id "amsfJ9NjCLsu4_1gmYfDEQAAAAk"]
[Thu Jul 30 10:53:43.939978 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfJ9NjCLsu4_1gmYfDEQAAAAk"]
[Thu Jul 30 10:53:44.356387 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/cd/.env"] [unique_id "amsfKNNjCLsu4_1gmYfDEgAAAAk"]
[Thu Jul 30 10:53:44.356822 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/cd/.env"] [unique_id "amsfKNNjCLsu4_1gmYfDEgAAAAk"]
[Thu Jul 30 10:53:44.356998 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfKNNjCLsu4_1gmYfDEgAAAAk"]
[Thu Jul 30 10:53:44.768434 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jenkins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/jenkins/.env"] [unique_id "amsfKNNjCLsu4_1gmYfDEwAAAAk"]
[Thu Jul 30 10:53:44.768839 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/jenkins/.env"] [unique_id "amsfKNNjCLsu4_1gmYfDEwAAAAk"]
[Thu Jul 30 10:53:44.769008 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfKNNjCLsu4_1gmYfDEwAAAAk"]
[Thu Jul 30 10:53:45.178302 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gitlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/gitlab/.env"] [unique_id "amsfKdNjCLsu4_1gmYfDFAAAAAk"]
[Thu Jul 30 10:53:45.178741 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/gitlab/.env"] [unique_id "amsfKdNjCLsu4_1gmYfDFAAAAAk"]
[Thu Jul 30 10:53:45.178924 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfKdNjCLsu4_1gmYfDFAAAAAk"]
[Thu Jul 30 10:53:45.402902 2026] [lsapi:warn] [pid 2784563:tid 2784563] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:53:45.597850 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/github/.env"] [unique_id "amsfKdNjCLsu4_1gmYfDFQAAAAk"]
[Thu Jul 30 10:53:45.598308 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/github/.env"] [unique_id "amsfKdNjCLsu4_1gmYfDFQAAAAk"]
[Thu Jul 30 10:53:45.598555 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfKdNjCLsu4_1gmYfDFQAAAAk"]
[Thu Jul 30 10:53:46.011271 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/actions/.env"] [unique_id "amsfKtNjCLsu4_1gmYfDFgAAAAk"]
[Thu Jul 30 10:53:46.011724 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/actions/.env"] [unique_id "amsfKtNjCLsu4_1gmYfDFgAAAAk"]
[Thu Jul 30 10:53:46.011899 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfKtNjCLsu4_1gmYfDFgAAAAk"]
[Thu Jul 30 10:53:46.397251 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:43392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:46.397313 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:46.423779 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /circleci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/circleci/.env"] [unique_id "amsfKtNjCLsu4_1gmYfDFwAAAAk"]
[Thu Jul 30 10:53:46.424245 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/circleci/.env"] [unique_id "amsfKtNjCLsu4_1gmYfDFwAAAAk"]
[Thu Jul 30 10:53:46.424432 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfKtNjCLsu4_1gmYfDFwAAAAk"]
[Thu Jul 30 10:53:46.450877 2026] [ssl:error] [pid 2792754:tid 2792754] (EAI 2)Name or service not known: [client 144.76.19.72:43408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:46.450915 2026] [ssl:error] [pid 2792754:tid 2792754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:46.622804 2026] [access_compat:error] [pid 2790596:tid 2790596] [client 2.189.5.162:38104] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 10:53:46.835400 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/travis/.env"] [unique_id "amsfKtNjCLsu4_1gmYfDGAAAAAk"]
[Thu Jul 30 10:53:46.835858 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/travis/.env"] [unique_id "amsfKtNjCLsu4_1gmYfDGAAAAAk"]
[Thu Jul 30 10:53:46.836043 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfKtNjCLsu4_1gmYfDGAAAAAk"]
[Thu Jul 30 10:53:47.247427 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /buildkite/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/buildkite/.env"] [unique_id "amsfK9NjCLsu4_1gmYfDGQAAAAk"]
[Thu Jul 30 10:53:47.247881 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/buildkite/.env"] [unique_id "amsfK9NjCLsu4_1gmYfDGQAAAAk"]
[Thu Jul 30 10:53:47.248061 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfK9NjCLsu4_1gmYfDGQAAAAk"]
[Thu Jul 30 10:53:47.659839 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mysql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mysql/.env"] [unique_id "amsfK9NjCLsu4_1gmYfDGgAAAAk"]
[Thu Jul 30 10:53:47.660295 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mysql/.env"] [unique_id "amsfK9NjCLsu4_1gmYfDGgAAAAk"]
[Thu Jul 30 10:53:47.660463 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfK9NjCLsu4_1gmYfDGgAAAAk"]
[Thu Jul 30 10:53:48.081547 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/postgres/.env"] [unique_id "amsfLNNjCLsu4_1gmYfDGwAAAAk"]
[Thu Jul 30 10:53:48.081976 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/postgres/.env"] [unique_id "amsfLNNjCLsu4_1gmYfDGwAAAAk"]
[Thu Jul 30 10:53:48.082178 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLNNjCLsu4_1gmYfDGwAAAAk"]
[Thu Jul 30 10:53:48.494336 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mongodb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/mongodb/.env"] [unique_id "amsfLNNjCLsu4_1gmYfDHAAAAAk"]
[Thu Jul 30 10:53:48.494782 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/mongodb/.env"] [unique_id "amsfLNNjCLsu4_1gmYfDHAAAAAk"]
[Thu Jul 30 10:53:48.494972 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLNNjCLsu4_1gmYfDHAAAAAk"]
[Thu Jul 30 10:53:48.793362 2026] [autoindex:error] [pid 2791826:tid 2791826] (13)Permission denied: [client 216.73.216.199:26462] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/firework/
[Thu Jul 30 10:53:48.916413 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/redis/.env"] [unique_id "amsfLNNjCLsu4_1gmYfDHQAAAAk"]
[Thu Jul 30 10:53:48.916935 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/redis/.env"] [unique_id "amsfLNNjCLsu4_1gmYfDHQAAAAk"]
[Thu Jul 30 10:53:48.917146 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLNNjCLsu4_1gmYfDHQAAAAk"]
[Thu Jul 30 10:53:49.330678 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /elasticsearch/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/elasticsearch/.env"] [unique_id "amsfLdNjCLsu4_1gmYfDHgAAAAk"]
[Thu Jul 30 10:53:49.331142 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/elasticsearch/.env"] [unique_id "amsfLdNjCLsu4_1gmYfDHgAAAAk"]
[Thu Jul 30 10:53:49.331328 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLdNjCLsu4_1gmYfDHgAAAAk"]
[Thu Jul 30 10:53:49.506245 2026] [ssl:error] [pid 2776122:tid 2776122] (EAI 2)Name or service not known: [client 144.76.19.72:43412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:49.506271 2026] [ssl:error] [pid 2776122:tid 2776122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:49.560413 2026] [ssl:error] [pid 2792754:tid 2792754] (EAI 2)Name or service not known: [client 144.76.19.72:45470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:49.560434 2026] [ssl:error] [pid 2792754:tid 2792754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:49.750425 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rabbitmq/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/rabbitmq/.env"] [unique_id "amsfLdNjCLsu4_1gmYfDHwAAAAk"]
[Thu Jul 30 10:53:49.751139 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/rabbitmq/.env"] [unique_id "amsfLdNjCLsu4_1gmYfDHwAAAAk"]
[Thu Jul 30 10:53:49.751431 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLdNjCLsu4_1gmYfDHwAAAAk"]
[Thu Jul 30 10:53:50.164656 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kafka/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/kafka/.env"] [unique_id "amsfLtNjCLsu4_1gmYfDIAAAAAk"]
[Thu Jul 30 10:53:50.165050 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/kafka/.env"] [unique_id "amsfLtNjCLsu4_1gmYfDIAAAAAk"]
[Thu Jul 30 10:53:50.165238 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLtNjCLsu4_1gmYfDIAAAAAk"]
[Thu Jul 30 10:53:50.576918 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /queue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/queue/.env"] [unique_id "amsfLtNjCLsu4_1gmYfDIQAAAAk"]
[Thu Jul 30 10:53:50.577304 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/queue/.env"] [unique_id "amsfLtNjCLsu4_1gmYfDIQAAAAk"]
[Thu Jul 30 10:53:50.577476 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLtNjCLsu4_1gmYfDIQAAAAk"]
[Thu Jul 30 10:53:50.998703 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /worker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/worker/.env"] [unique_id "amsfLtNjCLsu4_1gmYfDIgAAAAk"]
[Thu Jul 30 10:53:50.999106 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/worker/.env"] [unique_id "amsfLtNjCLsu4_1gmYfDIgAAAAk"]
[Thu Jul 30 10:53:50.999279 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfLtNjCLsu4_1gmYfDIgAAAAk"]
[Thu Jul 30 10:53:51.411497 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /job/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/job/.env"] [unique_id "amsfL9NjCLsu4_1gmYfDIwAAAAk"]
[Thu Jul 30 10:53:51.412200 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/job/.env"] [unique_id "amsfL9NjCLsu4_1gmYfDIwAAAAk"]
[Thu Jul 30 10:53:51.412487 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfL9NjCLsu4_1gmYfDIwAAAAk"]
[Thu Jul 30 10:53:51.795217 2026] [ssl:error] [pid 2791794:tid 2791794] (70014)End of file found: [client 216.73.216.199:59336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:51.830020 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/test/.env"] [unique_id "amsfL9NjCLsu4_1gmYfDJAAAAAk"]
[Thu Jul 30 10:53:51.830470 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/test/.env"] [unique_id "amsfL9NjCLsu4_1gmYfDJAAAAAk"]
[Thu Jul 30 10:53:51.830659 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfL9NjCLsu4_1gmYfDJAAAAAk"]
[Thu Jul 30 10:53:52.243778 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/qa/.env"] [unique_id "amsfMNNjCLsu4_1gmYfDJQAAAAk"]
[Thu Jul 30 10:53:52.244229 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/qa/.env"] [unique_id "amsfMNNjCLsu4_1gmYfDJQAAAAk"]
[Thu Jul 30 10:53:52.244408 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMNNjCLsu4_1gmYfDJQAAAAk"]
[Thu Jul 30 10:53:52.401930 2026] [ssl:error] [pid 2791826:tid 2791826] (70014)End of file found: [client 216.73.216.199:26462] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:52.615869 2026] [ssl:error] [pid 2790747:tid 2790747] (EAI 2)Name or service not known: [client 144.76.19.72:45478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:52.615901 2026] [ssl:error] [pid 2790747:tid 2790747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:52.664255 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/preview/.env"] [unique_id "amsfMNNjCLsu4_1gmYfDJgAAAAk"]
[Thu Jul 30 10:53:52.664660 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/preview/.env"] [unique_id "amsfMNNjCLsu4_1gmYfDJgAAAAk"]
[Thu Jul 30 10:53:52.664839 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMNNjCLsu4_1gmYfDJgAAAAk"]
[Thu Jul 30 10:53:52.668707 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:45484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:52.668733 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:53.078502 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/beta/.env"] [unique_id "amsfMdNjCLsu4_1gmYfDJwAAAAk"]
[Thu Jul 30 10:53:53.079131 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/beta/.env"] [unique_id "amsfMdNjCLsu4_1gmYfDJwAAAAk"]
[Thu Jul 30 10:53:53.079367 2026] [security2:error] [pid 2775380:tid 2775380] [client 99.79.10.153:55390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMdNjCLsu4_1gmYfDJwAAAAk"]
[Thu Jul 30 10:53:53.585056 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uat/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/uat/.env"] [unique_id "amsfMRZVREPYiWr9IS6nvgAAAAY"]
[Thu Jul 30 10:53:53.585763 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/uat/.env"] [unique_id "amsfMRZVREPYiWr9IS6nvgAAAAY"]
[Thu Jul 30 10:53:53.586026 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMRZVREPYiWr9IS6nvgAAAAY"]
[Thu Jul 30 10:53:54.185692 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/stage/.env"] [unique_id "amsfMhZVREPYiWr9IS6nvwAAAAY"]
[Thu Jul 30 10:53:54.186114 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/stage/.env"] [unique_id "amsfMhZVREPYiWr9IS6nvwAAAAY"]
[Thu Jul 30 10:53:54.186303 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMhZVREPYiWr9IS6nvwAAAAY"]
[Thu Jul 30 10:53:54.591963 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/development/.env"] [unique_id "amsfMhZVREPYiWr9IS6nwAAAAAY"]
[Thu Jul 30 10:53:54.592416 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/development/.env"] [unique_id "amsfMhZVREPYiWr9IS6nwAAAAAY"]
[Thu Jul 30 10:53:54.592605 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMhZVREPYiWr9IS6nwAAAAAY"]
[Thu Jul 30 10:53:54.808052 2026] [core:error] [pid 2790788:tid 2790788] (13)Permission denied: [client 216.73.216.199:10427] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS0/closing_wait
[Thu Jul 30 10:53:54.999760 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/production/.env"] [unique_id "amsfMhZVREPYiWr9IS6nwQAAAAY"]
[Thu Jul 30 10:53:55.000205 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/production/.env"] [unique_id "amsfMhZVREPYiWr9IS6nwQAAAAY"]
[Thu Jul 30 10:53:55.000389 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMhZVREPYiWr9IS6nwQAAAAY"]
[Thu Jul 30 10:53:55.108462 2026] [ssl:error] [pid 2790788:tid 2790788] (70014)End of file found: [client 216.73.216.199:10427] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:53:55.410112 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/config/app/.env"] [unique_id "amsfMxZVREPYiWr9IS6nwgAAAAY"]
[Thu Jul 30 10:53:55.410553 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/config/app/.env"] [unique_id "amsfMxZVREPYiWr9IS6nwgAAAAY"]
[Thu Jul 30 10:53:55.410739 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMxZVREPYiWr9IS6nwgAAAAY"]
[Thu Jul 30 10:53:55.725671 2026] [ssl:error] [pid 2795374:tid 2795374] (EAI 2)Name or service not known: [client 144.76.19.72:45498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:55.725718 2026] [ssl:error] [pid 2795374:tid 2795374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:55.780870 2026] [ssl:error] [pid 2788514:tid 2788514] (EAI 2)Name or service not known: [client 144.76.19.72:45514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:53:55.780899 2026] [ssl:error] [pid 2788514:tid 2788514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:53:55.821103 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vault"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.vault"] [unique_id "amsfMxZVREPYiWr9IS6nwwAAAAY"]
[Thu Jul 30 10:53:55.821560 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.vault"] [unique_id "amsfMxZVREPYiWr9IS6nwwAAAAY"]
[Thu Jul 30 10:53:55.821748 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfMxZVREPYiWr9IS6nwwAAAAY"]
[Thu Jul 30 10:53:55.955253 2026] [lsapi:warn] [pid 2775380:tid 2775380] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:53:56.227310 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.fly"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.fly"] [unique_id "amsfNBZVREPYiWr9IS6nxAAAAAY"]
[Thu Jul 30 10:53:56.227771 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.fly"] [unique_id "amsfNBZVREPYiWr9IS6nxAAAAAY"]
[Thu Jul 30 10:53:56.227942 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfNBZVREPYiWr9IS6nxAAAAAY"]
[Thu Jul 30 10:53:56.390664 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.64.170:37522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:56.390705 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.64.170:37522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:56.588703 2026] [core:error] [pid 2795374:tid 2795374] [client 66.249.64.170:59145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:56.588733 2026] [core:error] [pid 2795374:tid 2795374] [client 66.249.64.170:59145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:53:56.637719 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.railway"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.railway"] [unique_id "amsfNBZVREPYiWr9IS6nxQAAAAY"]
[Thu Jul 30 10:53:56.638197 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.railway"] [unique_id "amsfNBZVREPYiWr9IS6nxQAAAAY"]
[Thu Jul 30 10:53:56.638385 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfNBZVREPYiWr9IS6nxQAAAAY"]
[Thu Jul 30 10:53:57.045141 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.render"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.render"] [unique_id "amsfNRZVREPYiWr9IS6nxgAAAAY"]
[Thu Jul 30 10:53:57.045598 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.render"] [unique_id "amsfNRZVREPYiWr9IS6nxgAAAAY"]
[Thu Jul 30 10:53:57.045797 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfNRZVREPYiWr9IS6nxgAAAAY"]
[Thu Jul 30 10:53:57.118565 2026] [core:error] [pid 2778630:tid 2778630] (13)Permission denied: [client 216.73.216.199:63726] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/sanity_checks
[Thu Jul 30 10:53:57.455442 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vercel"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.vercel"] [unique_id "amsfNRZVREPYiWr9IS6nxwAAAAY"]
[Thu Jul 30 10:53:57.455894 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.vercel"] [unique_id "amsfNRZVREPYiWr9IS6nxwAAAAY"]
[Thu Jul 30 10:53:57.456091 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfNRZVREPYiWr9IS6nxwAAAAY"]
[Thu Jul 30 10:53:57.887118 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.supabase"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.supabase"] [unique_id "amsfNRZVREPYiWr9IS6nyAAAAAY"]
[Thu Jul 30 10:53:57.887565 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.supabase"] [unique_id "amsfNRZVREPYiWr9IS6nyAAAAAY"]
[Thu Jul 30 10:53:57.887780 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfNRZVREPYiWr9IS6nyAAAAAY"]
[Thu Jul 30 10:53:58.304007 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.neon"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.banskoexpress.com"] [uri "/.env.neon"] [unique_id "amsfNhZVREPYiWr9IS6nyQAAAAY"]
[Thu Jul 30 10:53:58.304446 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.banskoexpress.com"] [uri "/.env.neon"] [unique_id "amsfNhZVREPYiWr9IS6nyQAAAAY"]
[Thu Jul 30 10:53:58.304623 2026] [security2:error] [pid 2790596:tid 2790596] [client 99.79.10.153:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsfNhZVREPYiWr9IS6nyQAAAAY"]
[Thu Jul 30 10:53:58.727215 2026] [autoindex:error] [pid 2778630:tid 2778630] (13)Permission denied: [client 216.73.216.199:63726] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/cpanel/
[Thu Jul 30 10:53:59.516270 2026] [ssl:error] [pid 2778630:tid 2778630] (70014)End of file found: [client 216.73.216.199:63726] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:00.067131 2026] [ssl:error] [pid 2795542:tid 2795542] (EAI 2)Name or service not known: [client 144.76.19.72:45520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:00.067195 2026] [ssl:error] [pid 2795542:tid 2795542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:00.526829 2026] [core:error] [pid 2795542:tid 2795542] (13)Permission denied: [client 216.73.216.199:23419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bfq_io_cq/hwcache_align
[Thu Jul 30 10:54:00.786193 2026] [authz_core:error] [pid 2787536:tid 2787536] [client 66.249.66.33:46594] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:54:00.788981 2026] [authz_core:error] [pid 2787536:tid 2787536] [client 66.249.66.33:46594] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:54:00.828842 2026] [ssl:error] [pid 2795542:tid 2795542] (70014)End of file found: [client 216.73.216.199:23419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:00.856908 2026] [ssl:error] [pid 2783751:tid 2783751] (EAI 2)Name or service not known: [client 144.76.19.72:50122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:00.856936 2026] [ssl:error] [pid 2783751:tid 2783751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:01.127854 2026] [core:error] [pid 2783751:tid 2783751] (13)Permission denied: [client 216.73.216.199:4497] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/container/drivers_probe
[Thu Jul 30 10:54:02.934779 2026] [ssl:error] [pid 2783751:tid 2783751] (70014)End of file found: [client 216.73.216.199:4497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:02.939947 2026] [security2:error] [pid 2795317:tid 2795317] [client 1.14.110.85:45906] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsfOnc3jS09dH_fAVp5FwAAAAE"]
[Thu Jul 30 10:54:03.780979 2026] [rewrite:error] [pid 2791866:tid 2791866] [client 159.203.31.54:41902] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/
[Thu Jul 30 10:54:03.781110 2026] [rewrite:error] [pid 2791866:tid 2791866] [client 159.203.31.54:41902] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:54:03.911838 2026] [ssl:error] [pid 2794886:tid 2794886] (EAI 2)Name or service not known: [client 144.76.19.72:50134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:03.911888 2026] [ssl:error] [pid 2794886:tid 2794886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:03.967910 2026] [ssl:error] [pid 2795693:tid 2795693] (EAI 2)Name or service not known: [client 144.76.19.72:50150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:03.967949 2026] [ssl:error] [pid 2795693:tid 2795693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:04.016962 2026] [rewrite:error] [pid 2795543:tid 2795543] [client 159.203.31.54:41906] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/favicon.ico, referer: http://www.saturnstopwatchescouk.saturnsports.com/
[Thu Jul 30 10:54:04.017091 2026] [rewrite:error] [pid 2795543:tid 2795543] [client 159.203.31.54:41906] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml, referer: http://www.saturnstopwatchescouk.saturnsports.com/
[Thu Jul 30 10:54:04.407841 2026] [rewrite:error] [pid 2791865:tid 2791865] [client 159.203.31.54:40654] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/
[Thu Jul 30 10:54:04.407935 2026] [rewrite:error] [pid 2791865:tid 2791865] [client 159.203.31.54:40654] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 10:54:05.046048 2026] [core:error] [pid 2790788:tid 2790788] (13)Permission denied: [client 216.73.216.199:33071] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-256/slabs
[Thu Jul 30 10:54:05.488376 2026] [security2:error] [pid 2795317:tid 2795317] [client 114.119.142.20:39347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~27-10-2020"] [unique_id "amsfPXc3jS09dH_fAVp5GAAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/time_limit%7E1564873200/cat_ids%7E18,102,19/request_format%7Ehtml
[Thu Jul 30 10:54:05.647419 2026] [core:error] [pid 2790788:tid 2790788] (13)Permission denied: [client 216.73.216.199:33071] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/cpu_slabs
[Thu Jul 30 10:54:06.086394 2026] [security2:error] [pid 2795508:tid 2795508] [client 85.208.96.200:51960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/shooting-in-exeter-ca-today"] [unique_id "amsfPthTg5LVAJp_Oj1J3QAAABI"]
[Thu Jul 30 10:54:06.503723 2026] [security2:error] [pid 2795474:tid 2795474] [client 114.119.142.20:39353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~27-10-2020"] [unique_id "amsfPjf_dcM0zFBhiT3HSAAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/time_limit%7E1564873200/cat_ids%7E18,102,19/request_format%7Ehtml
[Thu Jul 30 10:54:06.551149 2026] [core:error] [pid 2790788:tid 2790788] (13)Permission denied: [client 216.73.216.199:33071] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup13/device/resource4
[Thu Jul 30 10:54:06.649604 2026] [security2:error] [pid 2786633:tid 2786633] [client 43.166.239.206:39719] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfPvfKqySevGlB8NrwDgAAAA8"]
[Thu Jul 30 10:54:06.649658 2026] [security2:error] [pid 2786633:tid 2786633] [client 43.166.239.206:39719] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfPvfKqySevGlB8NrwDgAAAA8"]
[Thu Jul 30 10:54:06.649937 2026] [security2:error] [pid 2786633:tid 2786633] [client 43.166.239.206:39719] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfPvfKqySevGlB8NrwDgAAAA8"]
[Thu Jul 30 10:54:06.806826 2026] [lsapi:warn] [pid 2789905:tid 2789905] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:54:06.817058 2026] [rewrite:error] [pid 2788221:tid 2788221] [client 159.203.31.54:59046] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/favicon.ico, referer: https://www.saturnstopwatchescouk.saturnsports.com/
[Thu Jul 30 10:54:06.817181 2026] [rewrite:error] [pid 2788221:tid 2788221] [client 159.203.31.54:59046] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml, referer: https://www.saturnstopwatchescouk.saturnsports.com/
[Thu Jul 30 10:54:07.024863 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:50158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:07.024904 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:07.081289 2026] [ssl:error] [pid 2795544:tid 2795544] (EAI 2)Name or service not known: [client 144.76.19.72:50172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:07.081332 2026] [ssl:error] [pid 2795544:tid 2795544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:08.038217 2026] [core:error] [pid 2791864:tid 2791864] [client 66.249.66.4:54881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:08.038268 2026] [core:error] [pid 2791864:tid 2791864] [client 66.249.66.4:54881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:08.658725 2026] [ssl:error] [pid 2795584:tid 2795584] (70014)End of file found: [client 216.73.216.199:11964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:10.002116 2026] [security2:error] [pid 2795509:tid 2795509] [client 1.14.110.85:40210] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsfQl1nQAXGlx2Z2TmSXwAAABM"], referer: http://tompalmer.co.uk
[Thu Jul 30 10:54:10.136926 2026] [ssl:error] [pid 2780664:tid 2780664] (EAI 2)Name or service not known: [client 144.76.19.72:37210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:10.136975 2026] [ssl:error] [pid 2780664:tid 2780664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:10.152882 2026] [security2:error] [pid 2795583:tid 2795583] [client 177.130.233.129:31360] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfQoZs7XvScWNLNapmmQAAACU"]
[Thu Jul 30 10:54:10.152935 2026] [security2:error] [pid 2795583:tid 2795583] [client 177.130.233.129:31360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfQoZs7XvScWNLNapmmQAAACU"]
[Thu Jul 30 10:54:10.153255 2026] [security2:error] [pid 2795583:tid 2795583] [client 177.130.233.129:31360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfQoZs7XvScWNLNapmmQAAACU"]
[Thu Jul 30 10:54:10.193164 2026] [ssl:error] [pid 2795474:tid 2795474] (EAI 2)Name or service not known: [client 144.76.19.72:37220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:10.193216 2026] [ssl:error] [pid 2795474:tid 2795474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:13.265675 2026] [ssl:error] [pid 2786633:tid 2786633] (EAI 2)Name or service not known: [client 144.76.19.72:37232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:13.265719 2026] [ssl:error] [pid 2786633:tid 2786633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:13.319681 2026] [ssl:error] [pid 2795544:tid 2795544] (EAI 2)Name or service not known: [client 144.76.19.72:37236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:13.319708 2026] [ssl:error] [pid 2795544:tid 2795544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:14.081887 2026] [ssl:error] [pid 2790788:tid 2790788] (70014)End of file found: [client 216.73.216.199:33071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:14.678516 2026] [ssl:error] [pid 2795589:tid 2795589] (70014)End of file found: [client 216.73.216.199:52210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:16.374810 2026] [ssl:error] [pid 2794886:tid 2794886] (EAI 2)Name or service not known: [client 144.76.19.72:37250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:16.374846 2026] [ssl:error] [pid 2794886:tid 2794886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:16.444859 2026] [ssl:error] [pid 2791794:tid 2791794] (EAI 2)Name or service not known: [client 144.76.19.72:37254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:16.444906 2026] [ssl:error] [pid 2791794:tid 2791794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:16.845120 2026] [security2:error] [pid 2795584:tid 2795584] [client 37.208.188.56:57440] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfSFDaO1uuchvyXeZauAAAACY"]
[Thu Jul 30 10:54:16.845186 2026] [security2:error] [pid 2795584:tid 2795584] [client 37.208.188.56:57440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfSFDaO1uuchvyXeZauAAAACY"]
[Thu Jul 30 10:54:16.845516 2026] [security2:error] [pid 2795584:tid 2795584] [client 37.208.188.56:57440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfSFDaO1uuchvyXeZauAAAACY"]
[Thu Jul 30 10:54:16.999545 2026] [ssl:error] [pid 2786633:tid 2786633] (70014)End of file found: [client 216.73.216.199:56951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:17.594316 2026] [lsapi:warn] [pid 2792670:tid 2792670] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:54:19.501460 2026] [ssl:error] [pid 2795541:tid 2795541] (EAI 2)Name or service not known: [client 144.76.19.72:37260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:19.501506 2026] [ssl:error] [pid 2795541:tid 2795541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:19.554565 2026] [ssl:error] [pid 2787536:tid 2787536] (EAI 2)Name or service not known: [client 144.76.19.72:63874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:19.554616 2026] [ssl:error] [pid 2787536:tid 2787536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:20.016195 2026] [ssl:error] [pid 2783751:tid 2783751] (70014)End of file found: [client 216.73.216.199:31647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:20.918360 2026] [ssl:error] [pid 2795541:tid 2795541] (70014)End of file found: [client 216.73.216.199:19996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:22.281252 2026] [core:error] [pid 2790788:tid 2790788] [client 66.249.66.168:40521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:22.281295 2026] [core:error] [pid 2790788:tid 2790788] [client 66.249.66.168:40521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:22.321164 2026] [ssl:error] [pid 2795583:tid 2795583] (70014)End of file found: [client 216.73.216.199:49064] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:22.610656 2026] [ssl:error] [pid 2794367:tid 2794367] (EAI 2)Name or service not known: [client 144.76.19.72:63890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:22.610691 2026] [ssl:error] [pid 2794367:tid 2794367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:22.668639 2026] [ssl:error] [pid 2780664:tid 2780664] (EAI 2)Name or service not known: [client 144.76.19.72:63892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:22.668691 2026] [ssl:error] [pid 2780664:tid 2780664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:25.725443 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:63896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:25.725486 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:25.781814 2026] [ssl:error] [pid 2791864:tid 2791864] (EAI 2)Name or service not known: [client 144.76.19.72:63910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:25.781859 2026] [ssl:error] [pid 2791864:tid 2791864] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:27.550918 2026] [ssl:error] [pid 2794367:tid 2794367] (70014)End of file found: [client 216.73.216.199:47659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:28.838268 2026] [ssl:error] [pid 2795474:tid 2795474] (EAI 2)Name or service not known: [client 144.76.19.72:63924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:28.838301 2026] [ssl:error] [pid 2795474:tid 2795474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:28.983415 2026] [ssl:error] [pid 2795509:tid 2795509] (EAI 2)Name or service not known: [client 144.76.19.72:63926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:28.983445 2026] [ssl:error] [pid 2795509:tid 2795509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:29.010213 2026] [lsapi:warn] [pid 2788514:tid 2788514] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:54:30.262314 2026] [core:error] [pid 2795589:tid 2795589] (13)Permission denied: [client 216.73.216.199:53242] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS0/closing_wait
[Thu Jul 30 10:54:32.065903 2026] [ssl:error] [pid 2795509:tid 2795509] (EAI 2)Name or service not known: [client 144.76.19.72:39080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:32.065952 2026] [ssl:error] [pid 2795509:tid 2795509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:32.117929 2026] [ssl:error] [pid 2795374:tid 2795374] (EAI 2)Name or service not known: [client 144.76.19.72:39088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:32.117975 2026] [ssl:error] [pid 2795374:tid 2795374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:33.586582 2026] [core:error] [pid 2795589:tid 2795589] (13)Permission denied: [client 216.73.216.199:53242] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/libcrc32c/uevent
[Thu Jul 30 10:54:34.791524 2026] [ssl:error] [pid 2795589:tid 2795589] (70014)End of file found: [client 216.73.216.199:53242] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:35.172903 2026] [ssl:error] [pid 2791794:tid 2791794] (EAI 2)Name or service not known: [client 144.76.19.72:39092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:35.172952 2026] [ssl:error] [pid 2791794:tid 2791794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:35.249985 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:39106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:35.250017 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:35.504785 2026] [security2:error] [pid 2788514:tid 2788514] [client 74.7.243.238:45538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/sitemap/"] [unique_id "amsfW7HPArxlv8KMjP3ZDwAAAC8"]
[Thu Jul 30 10:54:35.690762 2026] [core:error] [pid 2790596:tid 2790596] (13)Permission denied: [client 216.73.216.199:45399] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/red_zone
[Thu Jul 30 10:54:36.518166 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.66.39:54873] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:36.518192 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.66.39:54873] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:36.527112 2026] [core:error] [pid 2788514:tid 2788514] [client 66.249.66.39:38468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:36.527134 2026] [core:error] [pid 2788514:tid 2788514] [client 66.249.66.39:38468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:36.907080 2026] [ssl:error] [pid 2790596:tid 2790596] (70014)End of file found: [client 216.73.216.199:45399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:38.303229 2026] [ssl:error] [pid 2787536:tid 2787536] (EAI 2)Name or service not known: [client 144.76.19.72:39122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:38.303257 2026] [ssl:error] [pid 2787536:tid 2787536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:38.356081 2026] [ssl:error] [pid 2795508:tid 2795508] (EAI 2)Name or service not known: [client 144.76.19.72:39132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:38.356124 2026] [ssl:error] [pid 2795508:tid 2795508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:39.029397 2026] [ssl:error] [pid 2791794:tid 2791794] (70014)End of file found: [client 216.73.216.199:36243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:39.911497 2026] [security2:error] [pid 2795508:tid 2795508] [client 124.156.226.179:33896] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.org"] [uri "/"] [unique_id "amsfX9hTg5LVAJp_Oj1J5AAAABI"]
[Thu Jul 30 10:54:40.023022 2026] [core:error] [pid 2794886:tid 2794886] [client 66.249.66.39:62176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:40.023048 2026] [core:error] [pid 2794886:tid 2794886] [client 66.249.66.39:62176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:41.658661 2026] [ssl:error] [pid 2795589:tid 2795589] (EAI 2)Name or service not known: [client 144.76.19.72:47148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:41.658691 2026] [ssl:error] [pid 2795589:tid 2795589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:41.715966 2026] [ssl:error] [pid 2795589:tid 2795589] (EAI 2)Name or service not known: [client 144.76.19.72:47152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:41.715997 2026] [ssl:error] [pid 2795589:tid 2795589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:41.755922 2026] [lsapi:warn] [pid 2795541:tid 2795541] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:54:42.037713 2026] [ssl:error] [pid 2790788:tid 2790788] (70014)End of file found: [client 216.73.216.199:44182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:43.237987 2026] [ssl:error] [pid 2789905:tid 2789905] (70014)End of file found: [client 216.73.216.199:44803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:44.787175 2026] [ssl:error] [pid 2791870:tid 2791870] (EAI 2)Name or service not known: [client 144.76.19.72:47158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:44.787213 2026] [ssl:error] [pid 2791870:tid 2791870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:44.842290 2026] [ssl:error] [pid 2795582:tid 2795582] (EAI 2)Name or service not known: [client 144.76.19.72:47174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:44.842323 2026] [ssl:error] [pid 2795582:tid 2795582] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:46.419239 2026] [ssl:error] [pid 2778630:tid 2778630] (70014)End of file found: [client 216.73.216.199:15514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:47.492161 2026] [security2:error] [pid 2791870:tid 2791870] [client 43.153.104.196:37504] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mcgarvey.co.uk"] [uri "/"] [unique_id "amsfZwqbOBEWdmC5aZo4OwAAADI"]
[Thu Jul 30 10:54:47.943776 2026] [ssl:error] [pid 2795586:tid 2795586] (EAI 2)Name or service not known: [client 144.76.19.72:47186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:47.943814 2026] [ssl:error] [pid 2795586:tid 2795586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:47.997795 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:47198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:47.997824 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:49.966398 2026] [authz_core:error] [pid 2791870:tid 2791870] [client 66.249.66.33:57594] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:54:49.969098 2026] [authz_core:error] [pid 2791870:tid 2791870] [client 66.249.66.33:57594] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:54:50.036493 2026] [ssl:error] [pid 2786633:tid 2786633] (70014)End of file found: [client 216.73.216.199:56326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:50.525528 2026] [ssl:error] [pid 2784563:tid 2784563] (70014)End of file found: [client 216.73.216.199:64614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:50.746132 2026] [core:error] [pid 2795508:tid 2795508] [client 66.249.66.194:58193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:50.746162 2026] [core:error] [pid 2795508:tid 2795508] [client 66.249.66.194:58193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:51.052656 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:54088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:51.052695 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:51.104398 2026] [ssl:error] [pid 2797175:tid 2797175] (EAI 2)Name or service not known: [client 144.76.19.72:54096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:51.104432 2026] [ssl:error] [pid 2797175:tid 2797175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:51.509896 2026] [authz_core:error] [pid 2795509:tid 2795509] [client 203.91.74.151:55050] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 10:54:51.982924 2026] [core:error] [pid 2795509:tid 2795509] [client 203.91.74.151:55050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:51.982952 2026] [core:error] [pid 2795509:tid 2795509] [client 203.91.74.151:55050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:53.670446 2026] [cgi:error] [pid 2772203:tid 2772203] [client 216.73.216.199:35015] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Test-Simple/examples/indent.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:54:53.670496 2026] [cgi:error] [pid 2772203:tid 2772203] [client 216.73.216.199:35015] End of script output before headers: indent.pl
[Thu Jul 30 10:54:53.920298 2026] [core:error] [pid 2787536:tid 2787536] [client 203.91.74.151:55052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:53.920330 2026] [core:error] [pid 2787536:tid 2787536] [client 203.91.74.151:55052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:53.980578 2026] [security2:error] [pid 2795693:tid 2795693] [client 43.134.38.171:40024] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsfbVK9Fa6Yk0csW2Tk3QAAADM"]
[Thu Jul 30 10:54:54.156725 2026] [ssl:error] [pid 2772203:tid 2772203] (EAI 2)Name or service not known: [client 144.76.19.72:54112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:54.156758 2026] [ssl:error] [pid 2772203:tid 2772203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:54.210959 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:54116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:54.210991 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:54.858316 2026] [core:error] [pid 2790596:tid 2790596] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/order
[Thu Jul 30 10:54:54.937937 2026] [lsapi:warn] [pid 2787536:tid 2787536] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:54:55.159800 2026] [core:error] [pid 2790596:tid 2790596] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/order
[Thu Jul 30 10:54:55.774969 2026] [core:error] [pid 2787536:tid 2787536] [client 203.91.74.151:55068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:55.774997 2026] [core:error] [pid 2787536:tid 2787536] [client 203.91.74.151:55068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:56.365061 2026] [ssl:error] [pid 2784563:tid 2784563] (70014)End of file found: [client 216.73.216.199:12373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:54:57.183807 2026] [core:error] [pid 2797734:tid 2797734] [client 203.91.74.151:55070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:57.183848 2026] [core:error] [pid 2797734:tid 2797734] [client 203.91.74.151:55070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:54:57.262317 2026] [ssl:error] [pid 2787536:tid 2787536] (EAI 2)Name or service not known: [client 144.76.19.72:54118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:57.262339 2026] [ssl:error] [pid 2787536:tid 2787536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:57.317899 2026] [ssl:error] [pid 2794367:tid 2794367] (EAI 2)Name or service not known: [client 144.76.19.72:54128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:54:57.317920 2026] [ssl:error] [pid 2794367:tid 2794367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:54:57.612512 2026] [authz_core:error] [pid 2765151:tid 2765151] [client 66.249.66.33:63623] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:54:57.615251 2026] [authz_core:error] [pid 2765151:tid 2765151] [client 66.249.66.33:63623] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:54:58.915658 2026] [security2:error] [pid 2792754:tid 2792754] [client 92.222.104.213:22074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/robots.txt"] [unique_id "amsfchoKxk_1Vc260aH-XAAAAB8"]
[Thu Jul 30 10:54:59.682301 2026] [core:error] [pid 2790596:tid 2790596] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/closing_wait
[Thu Jul 30 10:55:00.375492 2026] [ssl:error] [pid 2788266:tid 2788266] (EAI 2)Name or service not known: [client 144.76.19.72:52160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:00.375522 2026] [ssl:error] [pid 2788266:tid 2788266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:00.431128 2026] [ssl:error] [pid 2787536:tid 2787536] (EAI 2)Name or service not known: [client 144.76.19.72:52174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:00.431152 2026] [ssl:error] [pid 2787536:tid 2787536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:00.648607 2026] [security2:error] [pid 2772203:tid 2772203] [client 51.195.244.0:46594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/legal/"] [unique_id "amsfdIl9d-O9dmm-s3aOfAAAACM"]
[Thu Jul 30 10:55:01.188083 2026] [ssl:error] [pid 2790596:tid 2790596] (70014)End of file found: [client 216.73.216.199:65502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:02.456860 2026] [security2:error] [pid 2784563:tid 2784563] [client 43.166.224.244:35664] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewvenables.com"] [uri "/"] [unique_id "amsfdh0bOQQskdS-JF-B-wAAAAA"]
[Thu Jul 30 10:55:02.943680 2026] [security2:error] [pid 2787536:tid 2787536] [client 45.167.232.239:29645] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfdpdDSoxWEj4VOGYDfgAAAA0"]
[Thu Jul 30 10:55:02.943728 2026] [security2:error] [pid 2787536:tid 2787536] [client 45.167.232.239:29645] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfdpdDSoxWEj4VOGYDfgAAAA0"]
[Thu Jul 30 10:55:02.943989 2026] [security2:error] [pid 2787536:tid 2787536] [client 45.167.232.239:29645] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfdpdDSoxWEj4VOGYDfgAAAA0"]
[Thu Jul 30 10:55:02.999427 2026] [ssl:error] [pid 2797734:tid 2797734] (70014)End of file found: [client 216.73.216.199:23806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:03.184032 2026] [security2:error] [pid 2791870:tid 2791870] [client 46.105.38.210:17727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "halmanninvestments.com"] [uri "/robots.txt"] [unique_id "amsfdwqbOBEWdmC5aZo4PwAAADI"]
[Thu Jul 30 10:55:03.491508 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:52190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:03.491535 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:03.548738 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:52204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:03.548764 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:03.594828 2026] [security2:error] [pid 2794367:tid 2794367] [client 43.166.224.244:57442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewvenables.com"] [uri "/"] [unique_id "amsfd86LLOjoHm7qC5tk_QAAAAo"], referer: http://www.andrewvenables.com
[Thu Jul 30 10:55:04.069345 2026] [security2:error] [pid 2778630:tid 2778630] [client 159.89.50.224:55530] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "unclaimedassets.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsfeLtFIh9sGRYWKxn1IgAAABg"]
[Thu Jul 30 10:55:04.072055 2026] [lsapi:warn] [pid 2778630:tid 2778630] [client 159.89.50.224:55530] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:55:04.172117 2026] [security2:error] [pid 2791870:tid 2791870] [client 83.134.232.22:34750] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfeAqbOBEWdmC5aZo4QAAAADI"]
[Thu Jul 30 10:55:04.172166 2026] [security2:error] [pid 2791870:tid 2791870] [client 83.134.232.22:34750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfeAqbOBEWdmC5aZo4QAAAADI"]
[Thu Jul 30 10:55:04.172423 2026] [security2:error] [pid 2791870:tid 2791870] [client 83.134.232.22:34750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfeAqbOBEWdmC5aZo4QAAAADI"]
[Thu Jul 30 10:55:04.817002 2026] [ssl:error] [pid 2791794:tid 2791794] (70014)End of file found: [client 216.73.216.199:53223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:05.029736 2026] [core:error] [pid 2791870:tid 2791870] [client 66.249.66.169:42671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:05.029762 2026] [core:error] [pid 2791870:tid 2791870] [client 66.249.66.169:42671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:05.555879 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.64.172:38539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:05.555911 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.64.172:38539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:06.606421 2026] [ssl:error] [pid 2795586:tid 2795586] (EAI 2)Name or service not known: [client 144.76.19.72:52216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:06.606449 2026] [ssl:error] [pid 2795586:tid 2795586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:06.659740 2026] [ssl:error] [pid 2794367:tid 2794367] (EAI 2)Name or service not known: [client 144.76.19.72:52228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:06.659779 2026] [ssl:error] [pid 2794367:tid 2794367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:06.703107 2026] [security2:error] [pid 2778630:tid 2778630] [client 185.191.171.15:51936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/my-dog-ate-fried-yucca"] [unique_id "amsfertFIh9sGRYWKxn1JAAAABg"]
[Thu Jul 30 10:55:06.834106 2026] [security2:error] [pid 2795586:tid 2795586] [client 14.191.24.238:27584] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfemSFU65uRMfKJhxr6AAAACg"]
[Thu Jul 30 10:55:06.834157 2026] [security2:error] [pid 2795586:tid 2795586] [client 14.191.24.238:27584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfemSFU65uRMfKJhxr6AAAACg"]
[Thu Jul 30 10:55:06.834422 2026] [security2:error] [pid 2795586:tid 2795586] [client 14.191.24.238:27584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfemSFU65uRMfKJhxr6AAAACg"]
[Thu Jul 30 10:55:07.543912 2026] [core:error] [pid 2790788:tid 2790788] (13)Permission denied: [client 216.73.216.199:20455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bfq_io_cq/alloc_calls
[Thu Jul 30 10:55:08.019636 2026] [lsapi:warn] [pid 2796840:tid 2796840] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:55:08.525122 2026] [core:error] [pid 2790788:tid 2790788] (13)Permission denied: [client 216.73.216.199:20455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/userdomains
[Thu Jul 30 10:55:09.348056 2026] [ssl:error] [pid 2797733:tid 2797733] (70014)End of file found: [client 216.73.216.199:13182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:09.712831 2026] [ssl:error] [pid 2791824:tid 2791824] (EAI 2)Name or service not known: [client 144.76.19.72:48190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:09.712891 2026] [ssl:error] [pid 2791824:tid 2791824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:09.767416 2026] [ssl:error] [pid 2795374:tid 2795374] (EAI 2)Name or service not known: [client 144.76.19.72:48204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:09.767442 2026] [ssl:error] [pid 2795374:tid 2795374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:10.394183 2026] [core:error] [pid 2797980:tid 2797980] [client 66.249.66.4:58692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:10.394206 2026] [core:error] [pid 2797980:tid 2797980] [client 66.249.66.4:58692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:11.361809 2026] [ssl:error] [pid 2797686:tid 2797686] (70014)End of file found: [client 216.73.216.199:62979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:12.365939 2026] [ssl:error] [pid 2783751:tid 2783751] (70014)End of file found: [client 216.73.216.199:21644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:12.846698 2026] [ssl:error] [pid 2799010:tid 2799010] (EAI 2)Name or service not known: [client 144.76.19.72:48216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:12.846750 2026] [ssl:error] [pid 2799010:tid 2799010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:12.908491 2026] [ssl:error] [pid 2786633:tid 2786633] (EAI 2)Name or service not known: [client 144.76.19.72:48224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:12.908515 2026] [ssl:error] [pid 2786633:tid 2786633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:15.666926 2026] [security2:error] [pid 2795586:tid 2795586] [client 94.154.43.229:53928] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "rogersbarbershopltd.co.uk"] [uri "/.env"] [unique_id "amsfg2SFU65uRMfKJhxr6gAAACg"]
[Thu Jul 30 10:55:15.667133 2026] [security2:error] [pid 2795586:tid 2795586] [client 94.154.43.229:53928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rogersbarbershopltd.co.uk"] [uri "/.env"] [unique_id "amsfg2SFU65uRMfKJhxr6gAAACg"]
[Thu Jul 30 10:55:15.667346 2026] [security2:error] [pid 2795586:tid 2795586] [client 94.154.43.229:53928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "rogersbarbershopltd.co.uk"] [uri "/403.shtml"] [unique_id "amsfg2SFU65uRMfKJhxr6gAAACg"]
[Thu Jul 30 10:55:15.966496 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:48232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:15.966523 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:16.023622 2026] [ssl:error] [pid 2799010:tid 2799010] (EAI 2)Name or service not known: [client 144.76.19.72:48240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:16.023649 2026] [ssl:error] [pid 2799010:tid 2799010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:17.394582 2026] [ssl:error] [pid 2763624:tid 2763624] (70014)End of file found: [client 216.73.216.199:11343] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:18.798436 2026] [ssl:error] [pid 2786633:tid 2786633] (70014)End of file found: [client 216.73.216.199:60030] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:19.082979 2026] [ssl:error] [pid 2781757:tid 2781757] (EAI 2)Name or service not known: [client 144.76.19.72:48246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:19.083005 2026] [ssl:error] [pid 2781757:tid 2781757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:19.135611 2026] [ssl:error] [pid 2795508:tid 2795508] (EAI 2)Name or service not known: [client 144.76.19.72:48252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:19.135637 2026] [ssl:error] [pid 2795508:tid 2795508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:19.145942 2026] [rewrite:error] [pid 2798340:tid 2798340] [client 185.177.72.53:51642] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:55:19.226431 2026] [core:error] [pid 2799010:tid 2799010] [client 66.249.66.167:63219] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:19.226460 2026] [core:error] [pid 2799010:tid 2799010] [client 66.249.66.167:63219] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:20.540367 2026] [rewrite:error] [pid 2790788:tid 2790788] [client 185.177.72.53:51654] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:55:21.536590 2026] [lsapi:warn] [pid 2795693:tid 2795693] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:55:22.184899 2026] [rewrite:error] [pid 2790788:tid 2790788] [client 185.177.72.53:51654] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:55:22.192039 2026] [ssl:error] [pid 2796840:tid 2796840] (EAI 2)Name or service not known: [client 144.76.19.72:25646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:22.192090 2026] [ssl:error] [pid 2796840:tid 2796840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:22.245753 2026] [ssl:error] [pid 2791826:tid 2791826] (EAI 2)Name or service not known: [client 144.76.19.72:25656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:22.245786 2026] [ssl:error] [pid 2791826:tid 2791826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:22.700967 2026] [core:error] [pid 2791864:tid 2791864] [client 66.249.64.171:39565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:22.701003 2026] [core:error] [pid 2791864:tid 2791864] [client 66.249.64.171:39565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:23.314199 2026] [security2:error] [pid 2797980:tid 2797980] [client 216.73.216.199:1694] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/optimize-serial-console/tuned.conf"] [unique_id "amsfi6l7du3ohYaRgmR5XQAAABE"]
[Thu Jul 30 10:55:23.314431 2026] [security2:error] [pid 2797980:tid 2797980] [client 216.73.216.199:1694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/optimize-serial-console/tuned.conf"] [unique_id "amsfi6l7du3ohYaRgmR5XQAAABE"]
[Thu Jul 30 10:55:23.314657 2026] [security2:error] [pid 2797980:tid 2797980] [client 216.73.216.199:1694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/optimize-serial-console/tuned.conf"] [unique_id "amsfi6l7du3ohYaRgmR5XQAAABE"]
[Thu Jul 30 10:55:23.990489 2026] [core:error] [pid 2786633:tid 2786633] [client 66.249.66.66:41219] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:23.990543 2026] [core:error] [pid 2786633:tid 2786633] [client 66.249.66.66:41219] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:24.108719 2026] [security2:error] [pid 2797175:tid 2797175] [client 110.249.201.43:22292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amsfjOPbzIZNEMInFdixnwAAAAc"]
[Thu Jul 30 10:55:24.218380 2026] [ssl:error] [pid 2797980:tid 2797980] (70014)End of file found: [client 216.73.216.199:1694] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:24.523823 2026] [ssl:error] [pid 2788266:tid 2788266] (70014)End of file found: [client 216.73.216.199:44763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:25.291737 2026] [rewrite:error] [pid 2797734:tid 2797734] [client 185.177.72.53:22156] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:55:25.301158 2026] [ssl:error] [pid 2799693:tid 2799693] (EAI 2)Name or service not known: [client 144.76.19.72:25664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:25.301212 2026] [ssl:error] [pid 2799693:tid 2799693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:25.359487 2026] [ssl:error] [pid 2790788:tid 2790788] (EAI 2)Name or service not known: [client 144.76.19.72:25676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:25.359511 2026] [ssl:error] [pid 2790788:tid 2790788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:25.730398 2026] [ssl:error] [pid 2797686:tid 2797686] (70014)End of file found: [client 216.73.216.199:24143] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:27.293757 2026] [rewrite:error] [pid 2797734:tid 2797734] [client 185.177.72.53:22156] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:55:27.349194 2026] [authz_core:error] [pid 2799771:tid 2799771] [client 199.45.155.107:50246] AH01630: client denied by server configuration: /home/winterb/public_html/naomiwinter/error_log
[Thu Jul 30 10:55:28.417832 2026] [ssl:error] [pid 2799894:tid 2799894] (EAI 2)Name or service not known: [client 144.76.19.72:25680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:28.417877 2026] [ssl:error] [pid 2799894:tid 2799894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:28.469874 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:25682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:28.469906 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:29.344956 2026] [rewrite:error] [pid 2798340:tid 2798340] [client 185.177.72.53:22168] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:55:29.381841 2026] [authz_core:error] [pid 2799894:tid 2799894] [client 66.249.66.33:48398] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:55:29.384552 2026] [authz_core:error] [pid 2799894:tid 2799894] [client 66.249.66.33:48398] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:55:29.422027 2026] [security2:error] [pid 2797980:tid 2797980] [client 114.119.135.136:35085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1586127600/cat_ids~19,17/request_format~html"] [unique_id "amsfkal7du3ohYaRgmR5YQAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1586214000/cat_ids~19,17/request_format~html
[Thu Jul 30 10:55:29.664392 2026] [ssl:error] [pid 2797734:tid 2797734] (70014)End of file found: [client 216.73.216.199:2563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:30.838241 2026] [security2:error] [pid 2795541:tid 2795541] [client 114.119.135.136:35089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1586127600/cat_ids~19,17/request_format~html"] [unique_id "amsfkvWA9PUHEzgJXS5QlQAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1586214000/cat_ids~19,17/request_format~html
[Thu Jul 30 10:55:31.164966 2026] [ssl:error] [pid 2799770:tid 2799770] (70014)End of file found: [client 216.73.216.199:22855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:31.522354 2026] [ssl:error] [pid 2799693:tid 2799693] (EAI 2)Name or service not known: [client 144.76.19.72:26010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:31.522384 2026] [ssl:error] [pid 2799693:tid 2799693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:31.574467 2026] [ssl:error] [pid 2787536:tid 2787536] (EAI 2)Name or service not known: [client 144.76.19.72:26014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:31.574496 2026] [ssl:error] [pid 2787536:tid 2787536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:34.347584 2026] [core:error] [pid 2800225:tid 2800225] [client 66.249.64.170:47710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:34.347640 2026] [core:error] [pid 2800225:tid 2800225] [client 66.249.64.170:47710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:34.496198 2026] [ssl:error] [pid 2784563:tid 2784563] (70014)End of file found: [client 216.73.216.199:43589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:34.497330 2026] [lsapi:warn] [pid 2795583:tid 2795583] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:55:34.629024 2026] [ssl:error] [pid 2799894:tid 2799894] (EAI 2)Name or service not known: [client 144.76.19.72:26034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:34.629059 2026] [ssl:error] [pid 2799894:tid 2799894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:34.686618 2026] [ssl:error] [pid 2800225:tid 2800225] (EAI 2)Name or service not known: [client 144.76.19.72:26038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:34.686658 2026] [ssl:error] [pid 2800225:tid 2800225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:36.376467 2026] [ssl:error] [pid 2799894:tid 2799894] (70014)End of file found: [client 216.73.216.199:45919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:37.773688 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:26054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:37.773755 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:37.829589 2026] [ssl:error] [pid 2799770:tid 2799770] (EAI 2)Name or service not known: [client 144.76.19.72:26068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:37.829623 2026] [ssl:error] [pid 2799770:tid 2799770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:38.706421 2026] [ssl:error] [pid 2795583:tid 2795583] (70014)End of file found: [client 216.73.216.199:32608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:40.911889 2026] [ssl:error] [pid 2797175:tid 2797175] (EAI 2)Name or service not known: [client 144.76.19.72:36796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:40.911924 2026] [ssl:error] [pid 2797175:tid 2797175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:41.036908 2026] [ssl:error] [pid 2797686:tid 2797686] (EAI 2)Name or service not known: [client 144.76.19.72:36810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:41.036948 2026] [ssl:error] [pid 2797686:tid 2797686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:44.129147 2026] [ssl:error] [pid 2791870:tid 2791870] (EAI 2)Name or service not known: [client 144.76.19.72:36814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:44.129213 2026] [ssl:error] [pid 2791870:tid 2791870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:44.183792 2026] [ssl:error] [pid 2797175:tid 2797175] (EAI 2)Name or service not known: [client 144.76.19.72:36822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:44.183833 2026] [ssl:error] [pid 2797175:tid 2797175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:46.396830 2026] [ssl:error] [pid 2778630:tid 2778630] (70014)End of file found: [client 216.73.216.199:27631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:47.239372 2026] [ssl:error] [pid 2799692:tid 2799692] (EAI 2)Name or service not known: [client 144.76.19.72:36834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:47.239405 2026] [ssl:error] [pid 2799692:tid 2799692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:47.293254 2026] [ssl:error] [pid 2763624:tid 2763624] (EAI 2)Name or service not known: [client 144.76.19.72:36840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:47.293293 2026] [ssl:error] [pid 2763624:tid 2763624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:47.699367 2026] [core:error] [pid 2791870:tid 2791870] [client 66.249.66.66:59601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:47.699403 2026] [core:error] [pid 2791870:tid 2791870] [client 66.249.66.66:59601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:47.699876 2026] [core:error] [pid 2790788:tid 2790788] [client 66.249.66.167:35966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:47.699909 2026] [core:error] [pid 2790788:tid 2790788] [client 66.249.66.167:35966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:47.708586 2026] [lsapi:warn] [pid 2797980:tid 2797980] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:55:47.906971 2026] [ssl:error] [pid 2800094:tid 2800094] (70014)End of file found: [client 216.73.216.199:8264] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:48.394752 2026] [ssl:error] [pid 2791826:tid 2791826] (70014)End of file found: [client 216.73.216.199:14228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:48.726402 2026] [core:error] [pid 2799692:tid 2799692] [client 66.249.64.170:57163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:48.726430 2026] [core:error] [pid 2799692:tid 2799692] [client 66.249.64.170:57163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:50.349525 2026] [ssl:error] [pid 2794886:tid 2794886] (EAI 2)Name or service not known: [client 144.76.19.72:32856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:50.349553 2026] [ssl:error] [pid 2794886:tid 2794886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:50.405424 2026] [ssl:error] [pid 2797980:tid 2797980] (EAI 2)Name or service not known: [client 144.76.19.72:32864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:50.405456 2026] [ssl:error] [pid 2797980:tid 2797980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:51.822406 2026] [ssl:error] [pid 2799894:tid 2799894] (70014)End of file found: [client 216.73.216.199:3880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:53.152242 2026] [core:error] [pid 2781757:tid 2781757] [client 66.249.64.170:52720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:53.152271 2026] [core:error] [pid 2781757:tid 2781757] [client 66.249.64.170:52720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:53.464542 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:32874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:53.464589 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:53.521920 2026] [ssl:error] [pid 2795508:tid 2795508] (EAI 2)Name or service not known: [client 144.76.19.72:32880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:53.521954 2026] [ssl:error] [pid 2795508:tid 2795508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:53.627504 2026] [ssl:error] [pid 2795693:tid 2795693] (70014)End of file found: [client 216.73.216.199:36369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:56.581170 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:32890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:56.581204 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:56.637286 2026] [ssl:error] [pid 2795374:tid 2795374] (EAI 2)Name or service not known: [client 144.76.19.72:32898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:56.637322 2026] [ssl:error] [pid 2795374:tid 2795374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:57.151420 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.64.170:65189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:57.151445 2026] [core:error] [pid 2778630:tid 2778630] [client 66.249.64.170:65189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:55:57.541829 2026] [ssl:error] [pid 2791794:tid 2791794] (70014)End of file found: [client 216.73.216.199:10255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:58.449385 2026] [ssl:error] [pid 2765151:tid 2765151] (70014)End of file found: [client 216.73.216.199:44987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:59.661933 2026] [ssl:error] [pid 2795374:tid 2795374] (70014)End of file found: [client 216.73.216.199:14548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:55:59.695459 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:51492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:59.695481 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:55:59.748382 2026] [ssl:error] [pid 2797980:tid 2797980] (EAI 2)Name or service not known: [client 144.76.19.72:51502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:55:59.748408 2026] [ssl:error] [pid 2797980:tid 2797980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:00.825747 2026] [lsapi:warn] [pid 2799771:tid 2799771] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:56:01.594689 2026] [authz_core:error] [pid 2797980:tid 2797980] [client 66.249.66.33:62863] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:56:01.597345 2026] [authz_core:error] [pid 2797980:tid 2797980] [client 66.249.66.33:62863] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:56:02.801810 2026] [ssl:error] [pid 2795508:tid 2795508] (EAI 2)Name or service not known: [client 144.76.19.72:51516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:02.801844 2026] [ssl:error] [pid 2795508:tid 2795508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:02.859104 2026] [ssl:error] [pid 2794886:tid 2794886] (EAI 2)Name or service not known: [client 144.76.19.72:51530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:02.859143 2026] [ssl:error] [pid 2794886:tid 2794886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:03.685233 2026] [rewrite:error] [pid 2795508:tid 2795508] [client 185.177.72.53:41514] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:56:04.468652 2026] [cgi:error] [pid 2791824:tid 2791824] [client 47.128.117.32:10128] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:56:05.547379 2026] [rewrite:error] [pid 2795508:tid 2795508] [client 185.177.72.53:41514] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:56:06.176933 2026] [security2:error] [pid 2797175:tid 2797175] [client 150.5.133.36:36601] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsftuPbzIZNEMInFdixrQAAAAc"]
[Thu Jul 30 10:56:06.177021 2026] [security2:error] [pid 2797175:tid 2797175] [client 150.5.133.36:36601] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsftuPbzIZNEMInFdixrQAAAAc"]
[Thu Jul 30 10:56:06.177386 2026] [security2:error] [pid 2797175:tid 2797175] [client 150.5.133.36:36601] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsftuPbzIZNEMInFdixrQAAAAc"]
[Thu Jul 30 10:56:06.709021 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:51534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:06.709054 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:06.766533 2026] [ssl:error] [pid 2797175:tid 2797175] (EAI 2)Name or service not known: [client 144.76.19.72:51540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:06.766559 2026] [ssl:error] [pid 2797175:tid 2797175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:07.182874 2026] [security2:error] [pid 2801550:tid 2801550] [client 85.208.96.201:24072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/ccap-illinois-inmate-search"] [unique_id "amsft9hAx77JCtw8kSEjyQAAAAk"]
[Thu Jul 30 10:56:07.586382 2026] [rewrite:error] [pid 2797175:tid 2797175] [client 185.177.72.53:41528] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 10:56:07.697185 2026] [core:error] [pid 2798340:tid 2798340] (13)Permission denied: [client 216.73.216.199:48722] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/subsystem/drivers/pvpanic/bind
[Thu Jul 30 10:56:08.757683 2026] [security2:error] [pid 2784563:tid 2784563] [client 43.133.202.241:42613] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfuB0bOQQskdS-JF-CGAAAAAA"]
[Thu Jul 30 10:56:08.757739 2026] [security2:error] [pid 2784563:tid 2784563] [client 43.133.202.241:42613] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfuB0bOQQskdS-JF-CGAAAAAA"]
[Thu Jul 30 10:56:08.757958 2026] [security2:error] [pid 2784563:tid 2784563] [client 43.133.202.241:42613] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfuB0bOQQskdS-JF-CGAAAAAA"]
[Thu Jul 30 10:56:09.713000 2026] [ssl:error] [pid 2795583:tid 2795583] (70014)End of file found: [client 216.73.216.199:31496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:09.827367 2026] [ssl:error] [pid 2790788:tid 2790788] (EAI 2)Name or service not known: [client 144.76.19.72:34562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:09.827400 2026] [ssl:error] [pid 2790788:tid 2790788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:09.885895 2026] [ssl:error] [pid 2791824:tid 2791824] (EAI 2)Name or service not known: [client 144.76.19.72:34568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:09.885921 2026] [ssl:error] [pid 2791824:tid 2791824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:09.976922 2026] [ssl:error] [pid 2798340:tid 2798340] (70014)End of file found: [client 216.73.216.199:48722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:10.995638 2026] [authz_core:error] [pid 2794886:tid 2794886] [client 199.45.155.107:49728] AH01630: client denied by server configuration: /home/winterb/public_html/naomiwinter/error_log
[Thu Jul 30 10:56:12.821798 2026] [ssl:error] [pid 2801612:tid 2801612] (70014)End of file found: [client 216.73.216.199:2913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:12.940719 2026] [ssl:error] [pid 2797734:tid 2797734] (EAI 2)Name or service not known: [client 144.76.19.72:34582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:12.940757 2026] [ssl:error] [pid 2797734:tid 2797734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:12.993958 2026] [ssl:error] [pid 2799692:tid 2799692] (EAI 2)Name or service not known: [client 144.76.19.72:34584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:12.993992 2026] [ssl:error] [pid 2799692:tid 2799692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:13.753746 2026] [lsapi:warn] [pid 2799692:tid 2799692] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:56:15.254314 2026] [ssl:error] [pid 2801952:tid 2801952] (70014)End of file found: [client 216.73.216.199:21421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:15.752337 2026] [core:error] [pid 2800225:tid 2800225] [client 66.249.64.172:64809] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:15.752373 2026] [core:error] [pid 2800225:tid 2800225] [client 66.249.64.172:64809] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:15.841684 2026] [ssl:error] [pid 2791824:tid 2791824] (70014)End of file found: [client 216.73.216.199:63186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:16.073435 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:34600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:16.073489 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:16.126602 2026] [ssl:error] [pid 2786633:tid 2786633] (EAI 2)Name or service not known: [client 144.76.19.72:34616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:16.126631 2026] [ssl:error] [pid 2786633:tid 2786633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:16.174878 2026] [core:error] [pid 2795508:tid 2795508] [client 66.249.66.67:42518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:16.174918 2026] [core:error] [pid 2795508:tid 2795508] [client 66.249.66.67:42518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:16.964938 2026] [authz_core:error] [pid 2778630:tid 2778630] [client 66.249.66.33:45765] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:56:16.967597 2026] [authz_core:error] [pid 2778630:tid 2778630] [client 66.249.66.33:45765] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:56:18.248713 2026] [ssl:error] [pid 2795583:tid 2795583] (70014)End of file found: [client 216.73.216.199:4797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:18.299348 2026] [security2:error] [pid 2791826:tid 2791826] [client 43.133.202.241:22265] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfwkLypPCsTbcg8fOpHgAAACE"]
[Thu Jul 30 10:56:18.299399 2026] [security2:error] [pid 2791826:tid 2791826] [client 43.133.202.241:22265] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsfwkLypPCsTbcg8fOpHgAAACE"]
[Thu Jul 30 10:56:18.299692 2026] [security2:error] [pid 2791826:tid 2791826] [client 43.133.202.241:22265] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsfwkLypPCsTbcg8fOpHgAAACE"]
[Thu Jul 30 10:56:19.215784 2026] [ssl:error] [pid 2800094:tid 2800094] (EAI 2)Name or service not known: [client 144.76.19.72:34622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:19.215826 2026] [ssl:error] [pid 2800094:tid 2800094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:19.272226 2026] [ssl:error] [pid 2795374:tid 2795374] (EAI 2)Name or service not known: [client 144.76.19.72:34630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:19.272261 2026] [ssl:error] [pid 2795374:tid 2795374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:20.921260 2026] [core:error] [pid 2783751:tid 2783751] [client 66.249.66.167:63623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:20.921297 2026] [core:error] [pid 2783751:tid 2783751] [client 66.249.66.167:63623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:22.331281 2026] [ssl:error] [pid 2795374:tid 2795374] (EAI 2)Name or service not known: [client 144.76.19.72:43372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:22.331341 2026] [ssl:error] [pid 2795374:tid 2795374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:22.386905 2026] [ssl:error] [pid 2790788:tid 2790788] (EAI 2)Name or service not known: [client 144.76.19.72:43388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:22.386934 2026] [ssl:error] [pid 2790788:tid 2790788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:22.754192 2026] [core:error] [pid 2786633:tid 2786633] (13)Permission denied: [client 216.73.216.199:15503] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/shrink
[Thu Jul 30 10:56:22.867966 2026] [ssl:error] [pid 2786633:tid 2786633] (70014)End of file found: [client 216.73.216.199:15503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:23.367238 2026] [ssl:error] [pid 2795374:tid 2795374] (70014)End of file found: [client 216.73.216.199:4129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:23.676367 2026] [ssl:error] [pid 2790788:tid 2790788] (70014)End of file found: [client 216.73.216.199:7362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:25.438961 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:43402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:25.438991 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:25.490098 2026] [ssl:error] [pid 2800011:tid 2800011] (EAI 2)Name or service not known: [client 144.76.19.72:43406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:25.490129 2026] [ssl:error] [pid 2800011:tid 2800011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:27.103620 2026] [lsapi:warn] [pid 2800094:tid 2800094] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:56:27.174417 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 185.165.254.23:57597] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2012/02/harry-potter-and-the-deathly-hallows-part-2.jpg, referer: http://blog.alism.com/wp-content/2012/02/harry-potter-and-the-deathly-hallows-part-2.jpg
[Thu Jul 30 10:56:27.174530 2026] [access_compat:error] [pid 2784563:tid 2784563] [client 185.165.254.23:57597] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: http://blog.alism.com/wp-content/2012/02/harry-potter-and-the-deathly-hallows-part-2.jpg
[Thu Jul 30 10:56:28.548902 2026] [ssl:error] [pid 2801610:tid 2801610] (EAI 2)Name or service not known: [client 144.76.19.72:43422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:28.548944 2026] [ssl:error] [pid 2801610:tid 2801610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:28.603584 2026] [ssl:error] [pid 2800094:tid 2800094] (EAI 2)Name or service not known: [client 144.76.19.72:43438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:28.603616 2026] [ssl:error] [pid 2800094:tid 2800094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:30.404800 2026] [core:error] [pid 2801610:tid 2801610] [client 66.249.66.167:49153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:30.404832 2026] [core:error] [pid 2801610:tid 2801610] [client 66.249.66.167:49153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:31.659668 2026] [ssl:error] [pid 2795508:tid 2795508] (EAI 2)Name or service not known: [client 144.76.19.72:49140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:31.659703 2026] [ssl:error] [pid 2795508:tid 2795508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:31.712485 2026] [ssl:error] [pid 2783986:tid 2783986] (EAI 2)Name or service not known: [client 144.76.19.72:49152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:31.712518 2026] [ssl:error] [pid 2783986:tid 2783986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:33.229090 2026] [ssl:error] [pid 2795693:tid 2795693] (70014)End of file found: [client 216.73.216.199:21031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:33.652035 2026] [authz_core:error] [pid 2784563:tid 2784563] [client 66.249.66.33:35727] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:56:33.654694 2026] [authz_core:error] [pid 2784563:tid 2784563] [client 66.249.66.33:35727] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:56:34.753422 2026] [ssl:error] [pid 2802287:tid 2802287] (70014)End of file found: [client 216.73.216.199:3684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:34.771168 2026] [ssl:error] [pid 2794886:tid 2794886] (EAI 2)Name or service not known: [client 144.76.19.72:49156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:34.771195 2026] [ssl:error] [pid 2794886:tid 2794886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:34.871443 2026] [ssl:error] [pid 2800093:tid 2800093] (EAI 2)Name or service not known: [client 144.76.19.72:49172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:34.871482 2026] [ssl:error] [pid 2800093:tid 2800093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:35.668023 2026] [ssl:error] [pid 2802285:tid 2802285] (70014)End of file found: [client 216.73.216.199:42550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:37.927735 2026] [ssl:error] [pid 2795541:tid 2795541] (EAI 2)Name or service not known: [client 144.76.19.72:49186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:37.927767 2026] [ssl:error] [pid 2795541:tid 2795541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:37.983667 2026] [ssl:error] [pid 2797734:tid 2797734] (EAI 2)Name or service not known: [client 144.76.19.72:49198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:37.983695 2026] [ssl:error] [pid 2797734:tid 2797734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:38.616758 2026] [ssl:error] [pid 2791824:tid 2791824] (70014)End of file found: [client 216.73.216.199:40739] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:40.127872 2026] [ssl:error] [pid 2784563:tid 2784563] (70014)End of file found: [client 216.73.216.199:41673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:40.283100 2026] [lsapi:warn] [pid 2801002:tid 2801002] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:56:41.042548 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:52756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:41.042593 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:41.095634 2026] [ssl:error] [pid 2802287:tid 2802287] (EAI 2)Name or service not known: [client 144.76.19.72:52764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:41.095665 2026] [ssl:error] [pid 2802287:tid 2802287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:41.739057 2026] [ssl:error] [pid 2798340:tid 2798340] (70014)End of file found: [client 216.73.216.199:30084] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:43.158744 2026] [core:error] [pid 2801610:tid 2801610] [client 66.249.66.167:44851] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:43.158772 2026] [core:error] [pid 2801610:tid 2801610] [client 66.249.66.167:44851] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:44.053462 2026] [core:error] [pid 2802251:tid 2802251] (13)Permission denied: [client 216.73.216.199:61073] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/shrink
[Thu Jul 30 10:56:44.149805 2026] [ssl:error] [pid 2802287:tid 2802287] (EAI 2)Name or service not known: [client 144.76.19.72:52768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:44.149832 2026] [ssl:error] [pid 2802287:tid 2802287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:44.202984 2026] [ssl:error] [pid 2800093:tid 2800093] (EAI 2)Name or service not known: [client 144.76.19.72:52784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:44.203007 2026] [ssl:error] [pid 2800093:tid 2800093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:44.467797 2026] [ssl:error] [pid 2802251:tid 2802251] (70014)End of file found: [client 216.73.216.199:61073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:44.637563 2026] [core:error] [pid 2797175:tid 2797175] [client 66.249.66.66:60960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:44.637597 2026] [core:error] [pid 2797175:tid 2797175] [client 66.249.66.66:60960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:56:46.588226 2026] [ssl:error] [pid 2802287:tid 2802287] (70014)End of file found: [client 216.73.216.199:1624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:47.071481 2026] [ssl:error] [pid 2799693:tid 2799693] (70014)End of file found: [client 216.73.216.199:27585] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:47.273669 2026] [ssl:error] [pid 2799894:tid 2799894] (EAI 2)Name or service not known: [client 144.76.19.72:52792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:47.273711 2026] [ssl:error] [pid 2799894:tid 2799894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:47.330969 2026] [ssl:error] [pid 2795693:tid 2795693] (EAI 2)Name or service not known: [client 144.76.19.72:52794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:47.330996 2026] [ssl:error] [pid 2795693:tid 2795693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:50.387784 2026] [ssl:error] [pid 2795693:tid 2795693] (EAI 2)Name or service not known: [client 144.76.19.72:25742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:50.387816 2026] [ssl:error] [pid 2795693:tid 2795693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:50.439470 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:25750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:50.439500 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:52.958224 2026] [ssl:error] [pid 2791870:tid 2791870] (70014)End of file found: [client 216.73.216.199:16720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:53.057052 2026] [security2:error] [pid 2789905:tid 2789905] [client 192.250.232.142:37304] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "blow-hairstudio.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsf5cHYWDaxnoBfYcKqmwAAAAM"]
[Thu Jul 30 10:56:53.101255 2026] [lsapi:warn] [pid 2801550:tid 2801550] [client 2401:4900:1c6e:6b42:ece2:5d4e:709d:dc80:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 10:56:53.320608 2026] [security2:error] [pid 2799771:tid 2799771] [client 114.119.142.20:26297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19/request_format~html"] [unique_id "amsf5e21busEGMTvfl6t0gAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19,14/request_format~html
[Thu Jul 30 10:56:53.519862 2026] [ssl:error] [pid 2799773:tid 2799773] (EAI 2)Name or service not known: [client 144.76.19.72:25766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:53.519902 2026] [ssl:error] [pid 2799773:tid 2799773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:53.568460 2026] [core:error] [pid 2800094:tid 2800094] (13)Permission denied: [client 216.73.216.199:13929] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/poison
[Thu Jul 30 10:56:53.576157 2026] [ssl:error] [pid 2797734:tid 2797734] (EAI 2)Name or service not known: [client 144.76.19.72:25776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:53.576179 2026] [ssl:error] [pid 2797734:tid 2797734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:54.429116 2026] [security2:error] [pid 2797734:tid 2797734] [client 114.119.142.20:26299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19/request_format~html"] [unique_id "amsf5t9O8C2FQVsrJhdNbQAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1585695600/cat_ids~17,19,14/request_format~html
[Thu Jul 30 10:56:54.471802 2026] [ssl:error] [pid 2800094:tid 2800094] (70014)End of file found: [client 216.73.216.199:13929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:56.630441 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:25784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:56.630469 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:56.686605 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:25794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:56.686638 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:56.895331 2026] [ssl:error] [pid 2795508:tid 2795508] (70014)End of file found: [client 216.73.216.199:10650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:58.700715 2026] [ssl:error] [pid 2802680:tid 2802680] (70014)End of file found: [client 216.73.216.199:44955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:56:59.740111 2026] [ssl:error] [pid 2797734:tid 2797734] (EAI 2)Name or service not known: [client 144.76.19.72:55282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:59.740143 2026] [ssl:error] [pid 2797734:tid 2797734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:59.793056 2026] [ssl:error] [pid 2800011:tid 2800011] (EAI 2)Name or service not known: [client 144.76.19.72:55294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:56:59.793088 2026] [ssl:error] [pid 2800011:tid 2800011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:56:59.803320 2026] [core:error] [pid 2799693:tid 2799693] (13)Permission denied: [client 216.73.216.199:56612] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS0/line
[Thu Jul 30 10:57:00.207273 2026] [ssl:error] [pid 2799693:tid 2799693] (70014)End of file found: [client 216.73.216.199:56612] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:02.163029 2026] [core:error] [pid 2799773:tid 2799773] [client 66.249.64.170:36786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:02.163079 2026] [core:error] [pid 2799773:tid 2799773] [client 66.249.64.170:36786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:02.851573 2026] [ssl:error] [pid 2803402:tid 2803402] (EAI 2)Name or service not known: [client 144.76.19.72:55304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:02.851610 2026] [ssl:error] [pid 2803402:tid 2803402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:02.903488 2026] [ssl:error] [pid 2802287:tid 2802287] (EAI 2)Name or service not known: [client 144.76.19.72:55306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:02.903520 2026] [ssl:error] [pid 2802287:tid 2802287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:03.217424 2026] [ssl:error] [pid 2801550:tid 2801550] (5)Input/output error: [client 216.73.216.199:46283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:03.539285 2026] [authz_core:error] [pid 2802381:tid 2802381] [client 51.103.154.47:43900] AH01630: client denied by server configuration: /home/heritag1/staging.heritageinsuranceagency.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 10:57:05.957382 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:55322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:05.957418 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:05.960388 2026] [cgi:error] [pid 2765151:tid 2765151] [client 216.73.216.199:52539] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/lib64/perl5/Config_heavy.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 10:57:05.960424 2026] [cgi:error] [pid 2765151:tid 2765151] [client 216.73.216.199:52539] End of script output before headers: Config_heavy.pl
[Thu Jul 30 10:57:06.013049 2026] [ssl:error] [pid 2791870:tid 2791870] (EAI 2)Name or service not known: [client 144.76.19.72:55334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:06.013086 2026] [ssl:error] [pid 2791870:tid 2791870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:06.842471 2026] [ssl:error] [pid 2802381:tid 2802381] (70014)End of file found: [client 216.73.216.199:19053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:07.606811 2026] [security2:error] [pid 2801610:tid 2801610] [client 85.208.96.193:15560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/phil-dragash-the-hobbit"] [unique_id "amsf8_gW-n2aLbqsky55xAAAAAo"]
[Thu Jul 30 10:57:07.746617 2026] [ssl:error] [pid 2783986:tid 2783986] (70014)End of file found: [client 216.73.216.199:38566] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:08.952704 2026] [ssl:error] [pid 2791826:tid 2791826] (70014)End of file found: [client 216.73.216.199:60566] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:09.066335 2026] [ssl:error] [pid 2791794:tid 2791794] (EAI 2)Name or service not known: [client 144.76.19.72:55342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:09.066371 2026] [ssl:error] [pid 2791794:tid 2791794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:09.123551 2026] [ssl:error] [pid 2791824:tid 2791824] (EAI 2)Name or service not known: [client 144.76.19.72:55344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:09.123615 2026] [ssl:error] [pid 2791824:tid 2791824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:10.449688 2026] [core:error] [pid 2791824:tid 2791824] [client 66.249.66.66:53868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:10.449718 2026] [core:error] [pid 2791824:tid 2791824] [client 66.249.66.66:53868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:10.454658 2026] [core:error] [pid 2791870:tid 2791870] [client 66.249.66.40:50369] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:10.454681 2026] [core:error] [pid 2791870:tid 2791870] [client 66.249.66.40:50369] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:12.182858 2026] [ssl:error] [pid 2802680:tid 2802680] (EAI 2)Name or service not known: [client 144.76.19.72:46334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:12.182892 2026] [ssl:error] [pid 2802680:tid 2802680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:12.236222 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:46350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:12.236253 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:12.861194 2026] [core:error] [pid 2801952:tid 2801952] (13)Permission denied: [client 216.73.216.199:55815] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS0/line
[Thu Jul 30 10:57:14.077900 2026] [ssl:error] [pid 2801952:tid 2801952] (70014)End of file found: [client 216.73.216.199:55815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:14.979313 2026] [core:error] [pid 2802381:tid 2802381] (13)Permission denied: [client 216.73.216.199:46756] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/suspend/uevent
[Thu Jul 30 10:57:15.280943 2026] [ssl:error] [pid 2802381:tid 2802381] (70014)End of file found: [client 216.73.216.199:46756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:15.291312 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:46354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:15.291334 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:15.405257 2026] [ssl:error] [pid 2783751:tid 2783751] (EAI 2)Name or service not known: [client 144.76.19.72:46370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:15.405287 2026] [ssl:error] [pid 2783751:tid 2783751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:15.728402 2026] [security2:error] [pid 2791794:tid 2791794] [client 43.165.4.2:60256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.com"] [uri "/"] [unique_id "amsf--ZEqc2IXFwTFwaACQAAABQ"]
[Thu Jul 30 10:57:15.732228 2026] [authz_core:error] [pid 2791794:tid 2791794] [client 43.165.4.2:60256] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 10:57:15.739920 2026] [authz_core:error] [pid 2791794:tid 2791794] [client 43.165.4.2:60256] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 10:57:16.298730 2026] [security2:error] [pid 2765151:tid 2765151] [client 102.141.45.114:40648] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsf_KhbiCKupDmUtj2RTgAAAAU"]
[Thu Jul 30 10:57:16.298776 2026] [security2:error] [pid 2765151:tid 2765151] [client 102.141.45.114:40648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsf_KhbiCKupDmUtj2RTgAAAAU"]
[Thu Jul 30 10:57:16.299011 2026] [security2:error] [pid 2765151:tid 2765151] [client 102.141.45.114:40648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsf_KhbiCKupDmUtj2RTgAAAAU"]
[Thu Jul 30 10:57:17.092751 2026] [ssl:error] [pid 2783986:tid 2783986] (70014)End of file found: [client 216.73.216.199:1132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:18.019777 2026] [security2:error] [pid 2791794:tid 2791794] [client 101.33.66.34:52050] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsf_uZEqc2IXFwTFwaADAAAABQ"]
[Thu Jul 30 10:57:18.487894 2026] [ssl:error] [pid 2803251:tid 2803251] (EAI 2)Name or service not known: [client 144.76.19.72:46378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:18.487935 2026] [ssl:error] [pid 2803251:tid 2803251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:18.543054 2026] [ssl:error] [pid 2795508:tid 2795508] (EAI 2)Name or service not known: [client 144.76.19.72:46390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:18.543105 2026] [ssl:error] [pid 2795508:tid 2795508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:19.801441 2026] [core:error] [pid 2803734:tid 2803734] (13)Permission denied: [client 216.73.216.199:47065] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu3/driver/uevent
[Thu Jul 30 10:57:20.103519 2026] [ssl:error] [pid 2803734:tid 2803734] (70014)End of file found: [client 216.73.216.199:47065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:21.597466 2026] [ssl:error] [pid 2791794:tid 2791794] (EAI 2)Name or service not known: [client 144.76.19.72:59092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:21.597501 2026] [ssl:error] [pid 2791794:tid 2791794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:21.653461 2026] [ssl:error] [pid 2795693:tid 2795693] (EAI 2)Name or service not known: [client 144.76.19.72:59102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:21.653491 2026] [ssl:error] [pid 2795693:tid 2795693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:22.839935 2026] [ssl:error] [pid 2802381:tid 2802381] (70014)End of file found: [client 216.73.216.199:60512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:23.139122 2026] [ssl:error] [pid 2799693:tid 2799693] (70014)End of file found: [client 216.73.216.199:1940] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:23.429615 2026] [ssl:error] [pid 2784563:tid 2784563] (70014)End of file found: [client 216.73.216.199:3357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:24.708602 2026] [ssl:error] [pid 2783986:tid 2783986] (EAI 2)Name or service not known: [client 144.76.19.72:59108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:24.708635 2026] [ssl:error] [pid 2783986:tid 2783986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:24.778667 2026] [ssl:error] [pid 2778630:tid 2778630] (EAI 2)Name or service not known: [client 144.76.19.72:59114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:24.778695 2026] [ssl:error] [pid 2778630:tid 2778630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:27.338874 2026] [core:error] [pid 2791824:tid 2791824] [client 66.249.66.3:46392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:27.338901 2026] [core:error] [pid 2791824:tid 2791824] [client 66.249.66.3:46392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:27.835095 2026] [ssl:error] [pid 2795693:tid 2795693] (EAI 2)Name or service not known: [client 144.76.19.72:59138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:27.835130 2026] [ssl:error] [pid 2795693:tid 2795693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:27.888635 2026] [ssl:error] [pid 2791824:tid 2791824] (EAI 2)Name or service not known: [client 144.76.19.72:59154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:27.888658 2026] [ssl:error] [pid 2791824:tid 2791824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:28.240634 2026] [security2:error] [pid 2803251:tid 2803251] [client 91.106.42.210:33856] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgCIbVnsB7VqH2aN22YAAAAAI"]
[Thu Jul 30 10:57:28.240695 2026] [security2:error] [pid 2803251:tid 2803251] [client 91.106.42.210:33856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgCIbVnsB7VqH2aN22YAAAAAI"]
[Thu Jul 30 10:57:28.240948 2026] [security2:error] [pid 2803251:tid 2803251] [client 91.106.42.210:33856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgCIbVnsB7VqH2aN22YAAAAAI"]
[Thu Jul 30 10:57:28.549549 2026] [ssl:error] [pid 2802381:tid 2802381] (70014)End of file found: [client 216.73.216.199:25123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:28.965515 2026] [ssl:error] [pid 2784563:tid 2784563] (70014)End of file found: [client 216.73.216.199:8441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:29.261615 2026] [ssl:error] [pid 2803947:tid 2803947] (70014)End of file found: [client 216.73.216.199:28933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:30.627006 2026] [security2:error] [pid 2804383:tid 2804383] [client 74.7.243.213:38124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "comicsuncovered.localhero.org.uk"] [uri "/"] [unique_id "amsgCj4FNBSmyGz2_rNUugAAABQ"]
[Thu Jul 30 10:57:30.947322 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:30452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:30.947348 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:31.258623 2026] [ssl:error] [pid 2804383:tid 2804383] (EAI 2)Name or service not known: [client 144.76.19.72:30460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:31.258661 2026] [ssl:error] [pid 2804383:tid 2804383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:33.959444 2026] [core:error] [pid 2804461:tid 2804461] (13)Permission denied: [client 216.73.216.199:64136] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS3/port
[Thu Jul 30 10:57:34.316055 2026] [ssl:error] [pid 2804464:tid 2804464] (EAI 2)Name or service not known: [client 144.76.19.72:30464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:34.316102 2026] [ssl:error] [pid 2804464:tid 2804464] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:34.373426 2026] [ssl:error] [pid 2804465:tid 2804465] (EAI 2)Name or service not known: [client 144.76.19.72:30478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:34.373472 2026] [ssl:error] [pid 2804465:tid 2804465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:34.377447 2026] [ssl:error] [pid 2804461:tid 2804461] (70014)End of file found: [client 216.73.216.199:64136] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:34.980917 2026] [ssl:error] [pid 2795541:tid 2795541] (70014)End of file found: [client 216.73.216.199:34361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:35.464342 2026] [ssl:error] [pid 2790788:tid 2790788] (70014)End of file found: [client 216.73.216.199:18578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:37.167243 2026] [lsapi:warn] [pid 2804466:tid 2804466] [client 152.32.142.138:52558] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 10:57:37.167284 2026] [lsapi:warn] [pid 2804466:tid 2804466] [client 152.32.142.138:52558] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 10:57:37.433523 2026] [ssl:error] [pid 2795693:tid 2795693] (EAI 2)Name or service not known: [client 144.76.19.72:30490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:37.433561 2026] [ssl:error] [pid 2795693:tid 2795693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:37.486905 2026] [ssl:error] [pid 2803734:tid 2803734] (EAI 2)Name or service not known: [client 144.76.19.72:30498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:37.486938 2026] [ssl:error] [pid 2803734:tid 2803734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:40.112430 2026] [ssl:error] [pid 2799773:tid 2799773] (70014)End of file found: [client 216.73.216.199:35629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:40.545636 2026] [ssl:error] [pid 2804462:tid 2804462] (EAI 2)Name or service not known: [client 144.76.19.72:60676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:40.545672 2026] [ssl:error] [pid 2804462:tid 2804462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:40.562192 2026] [security2:error] [pid 2804463:tid 2804463] [client 94.154.43.177:22710] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.blog.markmitchell.org"] [uri "/.env"] [unique_id "amsgFFrNjiKUfL2aX5rAhAAAACk"]
[Thu Jul 30 10:57:40.562382 2026] [security2:error] [pid 2804463:tid 2804463] [client 94.154.43.177:22710] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.blog.markmitchell.org"] [uri "/.env"] [unique_id "amsgFFrNjiKUfL2aX5rAhAAAACk"]
[Thu Jul 30 10:57:40.562611 2026] [security2:error] [pid 2804463:tid 2804463] [client 94.154.43.177:22710] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.blog.markmitchell.org"] [uri "/.env"] [unique_id "amsgFFrNjiKUfL2aX5rAhAAAACk"]
[Thu Jul 30 10:57:40.602179 2026] [ssl:error] [pid 2791870:tid 2791870] (EAI 2)Name or service not known: [client 144.76.19.72:60692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:40.602204 2026] [ssl:error] [pid 2791870:tid 2791870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:40.714309 2026] [ssl:error] [pid 2804461:tid 2804461] (70014)End of file found: [client 216.73.216.199:5815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:41.198595 2026] [core:error] [pid 2803947:tid 2803947] (13)Permission denied: [client 216.73.216.199:17688] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cron
[Thu Jul 30 10:57:42.822122 2026] [ssl:error] [pid 2803947:tid 2803947] (70014)End of file found: [client 216.73.216.199:17688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:43.656887 2026] [ssl:error] [pid 2801610:tid 2801610] (EAI 2)Name or service not known: [client 144.76.19.72:60694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:43.656914 2026] [ssl:error] [pid 2801610:tid 2801610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:43.708594 2026] [ssl:error] [pid 2799693:tid 2799693] (EAI 2)Name or service not known: [client 144.76.19.72:60704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:43.708623 2026] [ssl:error] [pid 2799693:tid 2799693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:44.063020 2026] [authz_core:error] [pid 2804423:tid 2804423] [client 66.249.66.34:51170] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:57:44.065807 2026] [authz_core:error] [pid 2804423:tid 2804423] [client 66.249.66.34:51170] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:57:44.722901 2026] [security2:error] [pid 2798580:tid 2798580] [client 43.153.12.58:54848] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.co.uk"] [uri "/"] [unique_id "amsgGIln7K0azi31-F0XPQAAABo"]
[Thu Jul 30 10:57:44.725989 2026] [authz_core:error] [pid 2798580:tid 2798580] [client 43.153.12.58:54848] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 10:57:44.731937 2026] [authz_core:error] [pid 2798580:tid 2798580] [client 43.153.12.58:54848] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 10:57:45.423892 2026] [ssl:error] [pid 2804465:tid 2804465] (70014)End of file found: [client 216.73.216.199:36571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:46.019588 2026] [ssl:error] [pid 2795693:tid 2795693] (70014)End of file found: [client 216.73.216.199:26197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:46.790479 2026] [ssl:error] [pid 2800011:tid 2800011] (EAI 2)Name or service not known: [client 144.76.19.72:60710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:46.790512 2026] [ssl:error] [pid 2800011:tid 2800011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:46.843479 2026] [ssl:error] [pid 2791824:tid 2791824] (EAI 2)Name or service not known: [client 144.76.19.72:60726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:46.843505 2026] [ssl:error] [pid 2791824:tid 2791824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:47.222205 2026] [security2:error] [pid 2804382:tid 2804382] [client 185.191.171.19:37158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,817.0/prev_next,next.html"] [unique_id "amsgGyqt7aZ40DZXWSZEAgAAABM"]
[Thu Jul 30 10:57:47.863375 2026] [core:error] [pid 2804464:tid 2804464] [client 66.249.66.167:48728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:47.863408 2026] [core:error] [pid 2804464:tid 2804464] [client 66.249.66.167:48728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:57:48.253147 2026] [ssl:error] [pid 2804459:tid 2804459] (70014)End of file found: [client 216.73.216.199:33318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:49.250850 2026] [authz_core:error] [pid 2803947:tid 2803947] [client 66.249.66.33:37320] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:57:49.253537 2026] [authz_core:error] [pid 2803947:tid 2803947] [client 66.249.66.33:37320] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:57:49.902147 2026] [ssl:error] [pid 2804423:tid 2804423] (EAI 2)Name or service not known: [client 144.76.19.72:43108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:49.902183 2026] [ssl:error] [pid 2804423:tid 2804423] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:49.955371 2026] [ssl:error] [pid 2783751:tid 2783751] (EAI 2)Name or service not known: [client 144.76.19.72:43114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:49.955398 2026] [ssl:error] [pid 2783751:tid 2783751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:51.585620 2026] [cgi:error] [pid 2804466:tid 2804466] [client 178.130.43.171:54738] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/blog/?
[Thu Jul 30 10:57:51.680358 2026] [cgi:error] [pid 2797734:tid 2797734] [client 178.130.43.171:54747] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/blog/
[Thu Jul 30 10:57:51.865292 2026] [ssl:error] [pid 2804423:tid 2804423] (70014)End of file found: [client 216.73.216.199:19036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:52.079935 2026] [security2:error] [pid 2795541:tid 2795541] [client 85.208.96.208:42800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9904.0/prev_next,prev.html"] [unique_id "amsgIPWA9PUHEzgJXS5REwAAABk"]
[Thu Jul 30 10:57:52.357372 2026] [ssl:error] [pid 2795693:tid 2795693] (70014)End of file found: [client 216.73.216.199:48839] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:53.007016 2026] [ssl:error] [pid 2791826:tid 2791826] (EAI 2)Name or service not known: [client 144.76.19.72:43126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:53.007062 2026] [ssl:error] [pid 2791826:tid 2791826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:53.061392 2026] [ssl:error] [pid 2797734:tid 2797734] (EAI 2)Name or service not known: [client 144.76.19.72:43140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:53.061426 2026] [ssl:error] [pid 2797734:tid 2797734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:53.225589 2026] [ssl:error] [pid 2795508:tid 2795508] (70014)End of file found: [client 216.73.216.199:52713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:54.685810 2026] [lsapi:warn] [pid 2795541:tid 2795541] [client 152.32.142.138:34640] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/sitemap.xml
[Thu Jul 30 10:57:54.685858 2026] [lsapi:warn] [pid 2795541:tid 2795541] [client 152.32.142.138:34640] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/sitemap.xml
[Thu Jul 30 10:57:55.316525 2026] [security2:error] [pid 2805172:tid 2805172] [client 51.68.236.114:35437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "banskoexpress.com"] [uri "/robots.txt"] [unique_id "amsgI3IPrfpnVsMGSvnEMQAAAAs"]
[Thu Jul 30 10:57:55.928695 2026] [ssl:error] [pid 2797734:tid 2797734] (70014)End of file found: [client 216.73.216.199:6351] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:55.988369 2026] [security2:error] [pid 2802251:tid 2802251] [client 51.68.236.114:32913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amsgIx1sqouM_10L91gB4gAAAA0"]
[Thu Jul 30 10:57:56.212771 2026] [ssl:error] [pid 2805204:tid 2805204] (EAI 2)Name or service not known: [client 144.76.19.72:43150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:56.212812 2026] [ssl:error] [pid 2805204:tid 2805204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:56.235306 2026] [ssl:error] [pid 2791870:tid 2791870] (70014)End of file found: [client 216.73.216.199:50664] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:56.253681 2026] [security2:error] [pid 2805204:tid 2805204] [client 51.68.236.114:13991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amsgJLG2TGwp2xaUVlG04AAAABs"]
[Thu Jul 30 10:57:56.564740 2026] [ssl:error] [pid 2798580:tid 2798580] (EAI 2)Name or service not known: [client 144.76.19.72:43162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:56.564782 2026] [ssl:error] [pid 2798580:tid 2798580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:56.916785 2026] [security2:error] [pid 2804463:tid 2804463] [client 51.68.236.114:14541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsgJFrNjiKUfL2aX5rAiAAAACk"]
[Thu Jul 30 10:57:57.066282 2026] [security2:error] [pid 2804464:tid 2804464] [client 51.68.236.114:27315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amsgJQUWzygx8wIl414yFAAAACs"]
[Thu Jul 30 10:57:57.149344 2026] [security2:error] [pid 2805204:tid 2805204] [client 51.68.236.114:35543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsgJbG2TGwp2xaUVlG04QAAABs"]
[Thu Jul 30 10:57:57.249497 2026] [security2:error] [pid 2804423:tid 2804423] [client 51.68.236.114:17769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsgJSxJh3Fo0j-k4AgxOwAAACM"]
[Thu Jul 30 10:57:59.240415 2026] [ssl:error] [pid 2805239:tid 2805239] (70014)End of file found: [client 216.73.216.199:8693] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:57:59.619941 2026] [ssl:error] [pid 2804463:tid 2804463] (EAI 2)Name or service not known: [client 144.76.19.72:57892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:59.619978 2026] [ssl:error] [pid 2804463:tid 2804463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:57:59.673510 2026] [ssl:error] [pid 2795508:tid 2795508] (EAI 2)Name or service not known: [client 144.76.19.72:57898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:57:59.673544 2026] [ssl:error] [pid 2795508:tid 2795508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:01.348584 2026] [core:error] [pid 2799773:tid 2799773] (13)Permission denied: [client 216.73.216.199:31366] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPLITEv6/sanity_checks
[Thu Jul 30 10:58:01.952009 2026] [ssl:error] [pid 2799773:tid 2799773] (70014)End of file found: [client 216.73.216.199:31366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:02.460395 2026] [ssl:error] [pid 2804459:tid 2804459] (70014)End of file found: [client 216.73.216.199:5217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:02.549276 2026] [security2:error] [pid 2783986:tid 2783986] [client 114.119.136.14:40511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amsgKrXrsW1jgWbmF31b2wAAAB4"], referer: http://hoo-hah.co.uk?i=hh___12
[Thu Jul 30 10:58:02.730176 2026] [ssl:error] [pid 2804462:tid 2804462] (EAI 2)Name or service not known: [client 144.76.19.72:57910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:02.730208 2026] [ssl:error] [pid 2804462:tid 2804462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:02.785583 2026] [ssl:error] [pid 2801610:tid 2801610] (EAI 2)Name or service not known: [client 144.76.19.72:57926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:02.785633 2026] [ssl:error] [pid 2801610:tid 2801610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:04.454947 2026] [security2:error] [pid 2805238:tid 2805238] [client 8.216.47.132:58215] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgLJt_ZZvnQ1m_qAw1bgAAAB8"]
[Thu Jul 30 10:58:04.455006 2026] [security2:error] [pid 2805238:tid 2805238] [client 8.216.47.132:58215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgLJt_ZZvnQ1m_qAw1bgAAAB8"]
[Thu Jul 30 10:58:04.455302 2026] [security2:error] [pid 2805238:tid 2805238] [client 8.216.47.132:58215] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgLJt_ZZvnQ1m_qAw1bgAAAB8"]
[Thu Jul 30 10:58:04.662119 2026] [ssl:error] [pid 2804462:tid 2804462] (70014)End of file found: [client 216.73.216.199:35268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:04.701775 2026] [security2:error] [pid 2783751:tid 2783751] [client 85.208.96.203:38022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thestringman.co.uk"] [uri "/robots.txt"] [unique_id "amsgLJXHnDWy_sxNa4iA7AAAAAg"]
[Thu Jul 30 10:58:04.909967 2026] [security2:error] [pid 2805203:tid 2805203] [client 85.208.96.198:50358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thestringman.co.uk"] [uri "/"] [unique_id "amsgLD3eHrRVZUf-UGSDvQAAABU"]
[Thu Jul 30 10:58:05.839278 2026] [ssl:error] [pid 2783751:tid 2783751] (EAI 2)Name or service not known: [client 144.76.19.72:57932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:05.839313 2026] [ssl:error] [pid 2783751:tid 2783751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:05.896702 2026] [ssl:error] [pid 2783986:tid 2783986] (EAI 2)Name or service not known: [client 144.76.19.72:57936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:05.896732 2026] [ssl:error] [pid 2783986:tid 2783986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:06.781421 2026] [security2:error] [pid 2805239:tid 2805239] [client 85.208.96.195:64072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amsgLrwLOKXpEdsvKmIWMQAAACI"]
[Thu Jul 30 10:58:06.866715 2026] [security2:error] [pid 2783751:tid 2783751] [client 187.188.9.175:12883] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgLpXHnDWy_sxNa4iA7QAAAAg"]
[Thu Jul 30 10:58:06.866773 2026] [security2:error] [pid 2783751:tid 2783751] [client 187.188.9.175:12883] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgLpXHnDWy_sxNa4iA7QAAAAg"]
[Thu Jul 30 10:58:06.867021 2026] [security2:error] [pid 2783751:tid 2783751] [client 187.188.9.175:12883] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgLpXHnDWy_sxNa4iA7QAAAAg"]
[Thu Jul 30 10:58:07.273411 2026] [ssl:error] [pid 2804464:tid 2804464] (70014)End of file found: [client 216.73.216.199:61432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:08.176816 2026] [security2:error] [pid 2791826:tid 2791826] [client 85.208.96.197:12508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/how-many-police-officers-killed-in-2020-uk"] [unique_id "amsgMELypPCsTbcg8fOpPgAAACE"]
[Thu Jul 30 10:58:08.588627 2026] [ssl:error] [pid 2805239:tid 2805239] (70014)End of file found: [client 216.73.216.199:8564] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:08.955157 2026] [ssl:error] [pid 2805237:tid 2805237] (EAI 2)Name or service not known: [client 144.76.19.72:57940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:08.955190 2026] [ssl:error] [pid 2805237:tid 2805237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:09.010287 2026] [ssl:error] [pid 2800011:tid 2800011] (EAI 2)Name or service not known: [client 144.76.19.72:57956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:09.010318 2026] [ssl:error] [pid 2800011:tid 2800011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:10.001276 2026] [ssl:error] [pid 2805203:tid 2805203] (70014)End of file found: [client 216.73.216.199:51199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:10.044377 2026] [core:error] [pid 2804352:tid 2804352] [client 66.249.66.168:59602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:10.044403 2026] [core:error] [pid 2804352:tid 2804352] [client 66.249.66.168:59602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:11.857266 2026] [ssl:error] [pid 2804383:tid 2804383] (70014)End of file found: [client 216.73.216.199:43261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:12.206901 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:42328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:12.206931 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:12.262851 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:42336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:12.262875 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:12.862196 2026] [ssl:error] [pid 2804382:tid 2804382] (70014)End of file found: [client 216.73.216.199:27690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:14.987053 2026] [ssl:error] [pid 2801550:tid 2801550] (70014)End of file found: [client 216.73.216.199:25274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:15.317814 2026] [ssl:error] [pid 2805238:tid 2805238] (EAI 2)Name or service not known: [client 144.76.19.72:42340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:15.317857 2026] [ssl:error] [pid 2805238:tid 2805238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:15.369645 2026] [security2:error] [pid 2783986:tid 2783986] [client 74.7.243.202:33120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.oliviamarjorie.com.ditchfest.com"] [uri "/"] [unique_id "amsgN7XrsW1jgWbmF31b3wAAAB4"]
[Thu Jul 30 10:58:15.373812 2026] [ssl:error] [pid 2805237:tid 2805237] (EAI 2)Name or service not known: [client 144.76.19.72:42356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:15.373837 2026] [ssl:error] [pid 2805237:tid 2805237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:15.687314 2026] [security2:error] [pid 2805238:tid 2805238] [client 49.232.104.223:58104] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsgN5t_ZZvnQ1m_qAw1dAAAAB8"]
[Thu Jul 30 10:58:16.063290 2026] [authz_core:error] [pid 2804462:tid 2804462] [client 45.158.164.139:54326] AH01630: client denied by server configuration: /home/tompalm/public_html/.user.ini
[Thu Jul 30 10:58:16.700899 2026] [security2:error] [pid 2783986:tid 2783986] [client 114.119.155.144:48257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/hogmanay-is-approaching"] [unique_id "amsgOLXrsW1jgWbmF31b4AAAAB4"], referer: https://www.erskinenazarene.co.uk/the-big-five-ask-away
[Thu Jul 30 10:58:17.023243 2026] [security2:error] [pid 2791826:tid 2791826] [client 45.158.164.139:54344] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tompalmer.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amsgOULypPCsTbcg8fOpQQAAACE"]
[Thu Jul 30 10:58:17.023438 2026] [security2:error] [pid 2791826:tid 2791826] [client 45.158.164.139:54344] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tompalmer.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amsgOULypPCsTbcg8fOpQQAAACE"]
[Thu Jul 30 10:58:17.048892 2026] [security2:error] [pid 2805237:tid 2805237] [client 74.7.227.2:49406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "newtronic.newtronicmedia.com"] [uri "/"] [unique_id "amsgOQS5jd5XayJy-TByNAAAAB0"]
[Thu Jul 30 10:58:17.304285 2026] [ssl:error] [pid 2804383:tid 2804383] (70014)End of file found: [client 216.73.216.199:14454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:18.446552 2026] [ssl:error] [pid 2804382:tid 2804382] (EAI 2)Name or service not known: [client 144.76.19.72:42368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:18.446608 2026] [ssl:error] [pid 2804382:tid 2804382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:18.501667 2026] [ssl:error] [pid 2804461:tid 2804461] (EAI 2)Name or service not known: [client 144.76.19.72:42370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:18.501713 2026] [ssl:error] [pid 2804461:tid 2804461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:18.587467 2026] [security2:error] [pid 2805965:tid 2805965] [client 157.35.25.79:43476] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgOqUW7b_LEBPxTa22jgAAACY"]
[Thu Jul 30 10:58:18.587529 2026] [security2:error] [pid 2805965:tid 2805965] [client 157.35.25.79:43476] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgOqUW7b_LEBPxTa22jgAAACY"]
[Thu Jul 30 10:58:18.587868 2026] [security2:error] [pid 2805965:tid 2805965] [client 157.35.25.79:43476] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgOqUW7b_LEBPxTa22jgAAACY"]
[Thu Jul 30 10:58:18.606720 2026] [ssl:error] [pid 2804463:tid 2804463] (70014)End of file found: [client 216.73.216.199:25402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:18.610822 2026] [authz_core:error] [pid 2804465:tid 2804465] [client 20.63.98.115:39474] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 10:58:18.630282 2026] [security2:error] [pid 2800011:tid 2800011] [client 114.119.155.144:46609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/hogmanay-is-approaching"] [unique_id "amsgOuefqSletWiAUU1SrgAAACo"], referer: https://www.erskinenazarene.co.uk/the-big-five-ask-away
[Thu Jul 30 10:58:20.009362 2026] [security2:error] [pid 2791826:tid 2791826] [client 45.158.164.139:54344] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "tompalmer.co.uk"] [uri "/index.php"] [unique_id "amsgOULypPCsTbcg8fOpQQAAACE"]
[Thu Jul 30 10:58:21.560956 2026] [ssl:error] [pid 2805860:tid 2805860] (EAI 2)Name or service not known: [client 144.76.19.72:57692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:21.560989 2026] [ssl:error] [pid 2805860:tid 2805860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:21.617249 2026] [ssl:error] [pid 2805998:tid 2805998] (70014)End of file found: [client 216.73.216.199:7286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:21.637556 2026] [ssl:error] [pid 2805687:tid 2805687] (EAI 2)Name or service not known: [client 144.76.19.72:57696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:21.637590 2026] [ssl:error] [pid 2805687:tid 2805687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:22.723015 2026] [ssl:error] [pid 2791826:tid 2791826] (70014)End of file found: [client 216.73.216.199:42018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:23.917425 2026] [ssl:error] [pid 2805765:tid 2805765] (70014)End of file found: [client 216.73.216.199:9894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:24.722545 2026] [ssl:error] [pid 2805237:tid 2805237] (EAI 2)Name or service not known: [client 144.76.19.72:57710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:24.722578 2026] [ssl:error] [pid 2805237:tid 2805237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:24.775345 2026] [ssl:error] [pid 2798580:tid 2798580] (EAI 2)Name or service not known: [client 144.76.19.72:57722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:24.775373 2026] [ssl:error] [pid 2798580:tid 2798580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:24.785785 2026] [core:error] [pid 2799771:tid 2799771] [client 66.249.66.67:63202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:24.785806 2026] [core:error] [pid 2799771:tid 2799771] [client 66.249.66.67:63202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:24.785844 2026] [core:error] [pid 2804421:tid 2804421] [client 66.249.66.168:49185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:24.785881 2026] [core:error] [pid 2804421:tid 2804421] [client 66.249.66.168:49185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:27.640670 2026] [core:error] [pid 2801350:tid 2801350] (13)Permission denied: [client 216.73.216.199:19704] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/8250/uevent
[Thu Jul 30 10:58:27.828944 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:57736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:27.828974 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:27.882785 2026] [ssl:error] [pid 2800094:tid 2800094] (EAI 2)Name or service not known: [client 144.76.19.72:57752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:27.882816 2026] [ssl:error] [pid 2800094:tid 2800094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:28.452690 2026] [ssl:error] [pid 2805204:tid 2805204] (70014)End of file found: [client 216.73.216.199:16095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:28.741215 2026] [core:error] [pid 2805203:tid 2805203] [client 66.249.64.172:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:28.741245 2026] [core:error] [pid 2805203:tid 2805203] [client 66.249.64.172:39220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:30.062981 2026] [ssl:error] [pid 2801350:tid 2801350] (70014)End of file found: [client 216.73.216.199:19704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:30.571657 2026] [ssl:error] [pid 2795541:tid 2795541] (70014)End of file found: [client 216.73.216.199:21025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:30.940661 2026] [ssl:error] [pid 2804464:tid 2804464] (EAI 2)Name or service not known: [client 144.76.19.72:38248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:30.940691 2026] [ssl:error] [pid 2804464:tid 2804464] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:30.996493 2026] [ssl:error] [pid 2803402:tid 2803402] (EAI 2)Name or service not known: [client 144.76.19.72:38264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:30.996523 2026] [ssl:error] [pid 2803402:tid 2803402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:32.568751 2026] [lsapi:warn] [pid 2804420:tid 2804420] [client 152.32.142.138:37150] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 10:58:32.568796 2026] [lsapi:warn] [pid 2804420:tid 2804420] [client 152.32.142.138:37150] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 10:58:32.885828 2026] [security2:error] [pid 2803402:tid 2803402] [client 185.191.171.6:43250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5714.0/prev_next,prev.html"] [unique_id "amsgSEgKTwlCe5ql10y70gAAAAc"]
[Thu Jul 30 10:58:34.057635 2026] [ssl:error] [pid 2806000:tid 2806000] (EAI 2)Name or service not known: [client 144.76.19.72:38276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:34.057674 2026] [ssl:error] [pid 2806000:tid 2806000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:34.114438 2026] [ssl:error] [pid 2803402:tid 2803402] (EAI 2)Name or service not known: [client 144.76.19.72:38282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:34.114473 2026] [ssl:error] [pid 2803402:tid 2803402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:35.790924 2026] [ssl:error] [pid 2805728:tid 2805728] (70014)End of file found: [client 216.73.216.199:45147] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:37.169230 2026] [ssl:error] [pid 2804421:tid 2804421] (EAI 2)Name or service not known: [client 144.76.19.72:38290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:37.169282 2026] [ssl:error] [pid 2804421:tid 2804421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:37.222592 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:38300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:37.222628 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:37.597403 2026] [ssl:error] [pid 2798580:tid 2798580] (70014)End of file found: [client 216.73.216.199:35647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:38.499787 2026] [ssl:error] [pid 2791870:tid 2791870] (70014)End of file found: [client 216.73.216.199:37914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:40.325311 2026] [ssl:error] [pid 2804420:tid 2804420] (EAI 2)Name or service not known: [client 144.76.19.72:49590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:40.325356 2026] [ssl:error] [pid 2804420:tid 2804420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:40.383323 2026] [ssl:error] [pid 2800094:tid 2800094] (EAI 2)Name or service not known: [client 144.76.19.72:49606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:40.383358 2026] [ssl:error] [pid 2800094:tid 2800094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:41.670405 2026] [ssl:error] [pid 2805687:tid 2805687] (70014)End of file found: [client 216.73.216.199:46640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:43.439448 2026] [ssl:error] [pid 2795541:tid 2795541] (EAI 2)Name or service not known: [client 144.76.19.72:49610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:43.439483 2026] [ssl:error] [pid 2795541:tid 2795541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:43.495502 2026] [ssl:error] [pid 2791826:tid 2791826] (EAI 2)Name or service not known: [client 144.76.19.72:49626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:43.495530 2026] [ssl:error] [pid 2791826:tid 2791826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:44.238207 2026] [security2:error] [pid 2800011:tid 2800011] [client 47.128.24.7:36212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amsgVOefqSletWiAUU1StAAAACo"]
[Thu Jul 30 10:58:44.383399 2026] [core:error] [pid 2805860:tid 2805860] (13)Permission denied: [client 216.73.216.199:25930] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_btree_cur/partial
[Thu Jul 30 10:58:45.286933 2026] [ssl:error] [pid 2805860:tid 2805860] (70014)End of file found: [client 216.73.216.199:25930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:45.692903 2026] [core:error] [pid 2804461:tid 2804461] [client 66.249.66.167:54979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:45.692936 2026] [core:error] [pid 2804461:tid 2804461] [client 66.249.66.167:54979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:45.777871 2026] [ssl:error] [pid 2804421:tid 2804421] (70014)End of file found: [client 216.73.216.199:39540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:46.553467 2026] [ssl:error] [pid 2800011:tid 2800011] (EAI 2)Name or service not known: [client 144.76.19.72:49642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:46.553499 2026] [ssl:error] [pid 2800011:tid 2800011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:46.607905 2026] [ssl:error] [pid 2804463:tid 2804463] (EAI 2)Name or service not known: [client 144.76.19.72:49646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:46.607931 2026] [ssl:error] [pid 2804463:tid 2804463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:47.034260 2026] [lsapi:error] [pid 2805930:tid 2805930] [client 20.52.125.110:3086] [host junglejacks.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Call to undefined function get_template_directory() in /home/junglej/public_html/wp-content/themes/twentythirteen/functions.php:39\nStack trace:\n#0 {main}\n  thrown in /home/junglej/public_html/wp-content/themes/twentythirteen/functions.php on line 39\n
[Thu Jul 30 10:58:47.697269 2026] [core:error] [pid 2805204:tid 2805204] (13)Permission denied: [client 216.73.216.199:19141] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/custom_divisor
[Thu Jul 30 10:58:49.679898 2026] [ssl:error] [pid 2805930:tid 2805930] (EAI 2)Name or service not known: [client 144.76.19.72:50930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:49.679944 2026] [ssl:error] [pid 2805930:tid 2805930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:49.736359 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:50938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:49.736388 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:51.610749 2026] [core:error] [pid 2805204:tid 2805204] (13)Permission denied: [client 216.73.216.199:19141] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/aliases
[Thu Jul 30 10:58:52.212673 2026] [ssl:error] [pid 2805204:tid 2805204] (70014)End of file found: [client 216.73.216.199:19141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:52.845185 2026] [ssl:error] [pid 2805930:tid 2805930] (EAI 2)Name or service not known: [client 144.76.19.72:50952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:52.845215 2026] [ssl:error] [pid 2805930:tid 2805930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:52.898030 2026] [ssl:error] [pid 2805860:tid 2805860] (EAI 2)Name or service not known: [client 144.76.19.72:50968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:52.898059 2026] [ssl:error] [pid 2805860:tid 2805860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:54.033703 2026] [ssl:error] [pid 2806000:tid 2806000] (70014)End of file found: [client 216.73.216.199:45867] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:54.072606 2026] [security2:error] [pid 2783986:tid 2783986] [client 43.157.22.109:53832] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsgXrXrsW1jgWbmF31b7AAAAB4"]
[Thu Jul 30 10:58:54.541283 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.66.167:59522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:54.541332 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.66.167:59522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:58:54.834892 2026] [security2:error] [pid 2804461:tid 2804461] [client 43.157.22.109:52536] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsgXhIaYLFRcC8iO28LbwAAACc"], referer: http://www.berehap.be
[Thu Jul 30 10:58:54.939621 2026] [ssl:error] [pid 2805115:tid 2805115] (70014)End of file found: [client 216.73.216.199:23635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:58:55.996373 2026] [ssl:error] [pid 2798580:tid 2798580] (EAI 2)Name or service not known: [client 144.76.19.72:50980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:55.996398 2026] [ssl:error] [pid 2798580:tid 2798580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:56.049499 2026] [ssl:error] [pid 2805236:tid 2805236] (EAI 2)Name or service not known: [client 144.76.19.72:50986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:56.049531 2026] [ssl:error] [pid 2805236:tid 2805236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:56.485266 2026] [security2:error] [pid 2800094:tid 2800094] [client 43.157.22.109:53848] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsgYKKDoitaxb2aW5D4RAAAACw"], referer: https://www.berehap.be/
[Thu Jul 30 10:58:58.184395 2026] [security2:error] [pid 2799771:tid 2799771] [client 114.119.146.55:53129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/wp-content/uploads/2013/10/Amelia-Rule.pdf"] [unique_id "amsgYu21busEGMTvfl6t-AAAACA"], referer: http://www.shelterforum.info/13th-uk-shelter-forum
[Thu Jul 30 10:58:58.551826 2026] [core:error] [pid 2804421:tid 2804421] (13)Permission denied: [client 216.73.216.199:19256] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/rhn/up2date
[Thu Jul 30 10:58:59.104803 2026] [ssl:error] [pid 2807297:tid 2807297] (EAI 2)Name or service not known: [client 144.76.19.72:50996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:59.104841 2026] [ssl:error] [pid 2807297:tid 2807297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:58:59.156852 2026] [ssl:error] [pid 2807297:tid 2807297] (EAI 2)Name or service not known: [client 144.76.19.72:51012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:58:59.156880 2026] [ssl:error] [pid 2807297:tid 2807297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:00.061479 2026] [ssl:error] [pid 2804421:tid 2804421] (70014)End of file found: [client 216.73.216.199:19256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:59:00.661390 2026] [core:error] [pid 2805728:tid 2805728] (13)Permission denied: [client 216.73.216.199:23050] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_ili/min_partial
[Thu Jul 30 10:59:01.495898 2026] [ssl:error] [pid 2807341:tid 2807341] (5)Input/output error: [client 216.73.216.199:3056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:59:01.631295 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.64.172:46525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:01.631329 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.64.172:46525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:02.213280 2026] [ssl:error] [pid 2807295:tid 2807295] (EAI 2)Name or service not known: [client 144.76.19.72:36468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:02.213323 2026] [ssl:error] [pid 2807295:tid 2807295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:02.266977 2026] [ssl:error] [pid 2807340:tid 2807340] (EAI 2)Name or service not known: [client 144.76.19.72:36478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:02.267004 2026] [ssl:error] [pid 2807340:tid 2807340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:02.426790 2026] [access_compat:error] [pid 2804463:tid 2804463] [client 20.52.125.110:3598] AH01797: client denied by server configuration: /home/junglej/public_html/wp-content/updraft/about.php
[Thu Jul 30 10:59:05.322915 2026] [ssl:error] [pid 2804459:tid 2804459] (EAI 2)Name or service not known: [client 144.76.19.72:36494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:05.322950 2026] [ssl:error] [pid 2804459:tid 2804459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:05.376549 2026] [ssl:error] [pid 2807531:tid 2807531] (EAI 2)Name or service not known: [client 144.76.19.72:36504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:05.376599 2026] [ssl:error] [pid 2807531:tid 2807531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:06.302792 2026] [authz_core:error] [pid 2805999:tid 2805999] [client 66.249.66.34:35162] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:59:06.305743 2026] [authz_core:error] [pid 2805999:tid 2805999] [client 66.249.66.34:35162] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:59:07.007827 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.66.168:54485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:07.007860 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.66.168:54485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:07.370885 2026] [authz_core:error] [pid 2807341:tid 2807341] [client 146.103.115.115:50341] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 10:59:07.372694 2026] [authz_core:error] [pid 2807341:tid 2807341] [client 146.103.115.115:50341] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 10:59:08.434995 2026] [ssl:error] [pid 2807341:tid 2807341] (EAI 2)Name or service not known: [client 144.76.19.72:36514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:08.435037 2026] [ssl:error] [pid 2807341:tid 2807341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:08.488376 2026] [ssl:error] [pid 2807343:tid 2807343] (EAI 2)Name or service not known: [client 144.76.19.72:36528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:08.488411 2026] [ssl:error] [pid 2807343:tid 2807343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:08.638398 2026] [security2:error] [pid 2805966:tid 2805966] [client 137.184.64.22:42580] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsgbJ9-CGoEHWlyeGtwqQAAAC8"]
[Thu Jul 30 10:59:08.695839 2026] [security2:error] [pid 2807338:tid 2807338] [client 85.208.96.206:18688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/house-for-rent-by-owner-morganton,-nc"] [unique_id "amsgbL9NyrZZjCAVhkXlwAAAABM"]
[Thu Jul 30 10:59:09.442149 2026] [core:error] [pid 2804383:tid 2804383] [client 66.249.66.3:41091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:09.442182 2026] [core:error] [pid 2804383:tid 2804383] [client 66.249.66.3:41091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:10.167853 2026] [security2:error] [pid 2807337:tid 2807337] [client 178.184.104.84:45952] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgboedY1DuCFTZL-ngMQAAABI"]
[Thu Jul 30 10:59:10.167914 2026] [security2:error] [pid 2807337:tid 2807337] [client 178.184.104.84:45952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgboedY1DuCFTZL-ngMQAAABI"]
[Thu Jul 30 10:59:10.168184 2026] [security2:error] [pid 2807337:tid 2807337] [client 178.184.104.84:45952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgboedY1DuCFTZL-ngMQAAABI"]
[Thu Jul 30 10:59:11.546709 2026] [ssl:error] [pid 2805203:tid 2805203] (EAI 2)Name or service not known: [client 144.76.19.72:51126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:11.546758 2026] [ssl:error] [pid 2805203:tid 2805203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:11.600084 2026] [ssl:error] [pid 2807531:tid 2807531] (EAI 2)Name or service not known: [client 144.76.19.72:51128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:11.600112 2026] [ssl:error] [pid 2807531:tid 2807531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:12.535184 2026] [security2:error] [pid 2807338:tid 2807338] [client 129.28.84.30:51116] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.info"] [uri "/"] [unique_id "amsgcL9NyrZZjCAVhkXlwgAAABM"]
[Thu Jul 30 10:59:14.240008 2026] [core:crit] [pid 2807296:tid 2807296] (13)Permission denied: [client 52.167.144.217:16942] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 10:59:14.522961 2026] [security2:error] [pid 2807343:tid 2807343] [client 129.28.84.30:54516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "amsgchBdkdRpZ6mRhYKtowAAACs"], referer: http://shelterforum.info
[Thu Jul 30 10:59:15.410867 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:51140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:15.410913 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:15.839927 2026] [ssl:error] [pid 2807338:tid 2807338] (EAI 2)Name or service not known: [client 144.76.19.72:51152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:15.839979 2026] [ssl:error] [pid 2807338:tid 2807338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:16.253323 2026] [security2:error] [pid 2798580:tid 2798580] [client 185.191.171.17:46922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7024.0/prev_next,next.html"] [unique_id "amsgdIln7K0azi31-F0XVgAAABo"]
[Thu Jul 30 10:59:17.181475 2026] [security2:error] [pid 2807343:tid 2807343] [client 103.69.94.37:45788] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgdRBdkdRpZ6mRhYKtpgAAACs"]
[Thu Jul 30 10:59:17.181526 2026] [security2:error] [pid 2807343:tid 2807343] [client 103.69.94.37:45788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgdRBdkdRpZ6mRhYKtpgAAACs"]
[Thu Jul 30 10:59:17.181777 2026] [security2:error] [pid 2807343:tid 2807343] [client 103.69.94.37:45788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgdRBdkdRpZ6mRhYKtpgAAACs"]
[Thu Jul 30 10:59:18.909670 2026] [ssl:error] [pid 2798580:tid 2798580] (EAI 2)Name or service not known: [client 144.76.19.72:51160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:18.909726 2026] [ssl:error] [pid 2798580:tid 2798580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:18.962798 2026] [ssl:error] [pid 2808208:tid 2808208] (EAI 2)Name or service not known: [client 144.76.19.72:51170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:18.962840 2026] [ssl:error] [pid 2808208:tid 2808208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:19.709338 2026] [ssl:error] [pid 2805237:tid 2805237] (5)Input/output error: [client 216.73.216.199:8842] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:59:21.436834 2026] [cgi:error] [pid 2808077:tid 2808077] [client 170.85.62.170:23537] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 10:59:22.023471 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:23316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:22.023516 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:22.081755 2026] [ssl:error] [pid 2807296:tid 2807296] (EAI 2)Name or service not known: [client 144.76.19.72:23332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:22.081804 2026] [ssl:error] [pid 2807296:tid 2807296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:23.491911 2026] [core:error] [pid 2807297:tid 2807297] [client 66.249.66.194:47755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:23.491939 2026] [core:error] [pid 2807297:tid 2807297] [client 66.249.66.194:47755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:24.821675 2026] [cgi:error] [pid 2805687:tid 2805687] [client 158.158.32.229:6409] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:59:25.138899 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:23346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:25.138943 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:25.140181 2026] [cgi:error] [pid 2805687:tid 2805687] [client 158.158.32.229:6409] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 10:59:25.191986 2026] [ssl:error] [pid 2807342:tid 2807342] (EAI 2)Name or service not known: [client 144.76.19.72:23354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:25.192036 2026] [ssl:error] [pid 2807342:tid 2807342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:27.950379 2026] [authz_core:error] [pid 2807344:tid 2807344] [client 66.249.66.33:65432] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 10:59:27.953042 2026] [authz_core:error] [pid 2807344:tid 2807344] [client 66.249.66.33:65432] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 10:59:28.252184 2026] [ssl:error] [pid 2805762:tid 2805762] (EAI 2)Name or service not known: [client 144.76.19.72:23370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:28.252245 2026] [ssl:error] [pid 2805762:tid 2805762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:28.307281 2026] [ssl:error] [pid 2804459:tid 2804459] (EAI 2)Name or service not known: [client 144.76.19.72:23374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:28.307314 2026] [ssl:error] [pid 2804459:tid 2804459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:28.392555 2026] [security2:error] [pid 2807297:tid 2807297] [client 189.172.180.249:51002] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsggAqyOXnaXeNP7NAK5AAAABA"]
[Thu Jul 30 10:59:28.392625 2026] [security2:error] [pid 2807297:tid 2807297] [client 189.172.180.249:51002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsggAqyOXnaXeNP7NAK5AAAABA"]
[Thu Jul 30 10:59:28.392870 2026] [security2:error] [pid 2807297:tid 2807297] [client 189.172.180.249:51002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsggAqyOXnaXeNP7NAK5AAAABA"]
[Thu Jul 30 10:59:28.479710 2026] [core:error] [pid 2800094:tid 2800094] (13)Permission denied: [client 216.73.216.199:1956] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/slabs
[Thu Jul 30 10:59:31.363738 2026] [ssl:error] [pid 2807531:tid 2807531] (EAI 2)Name or service not known: [client 144.76.19.72:36042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:31.363769 2026] [ssl:error] [pid 2807531:tid 2807531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:31.421976 2026] [ssl:error] [pid 2807341:tid 2807341] (EAI 2)Name or service not known: [client 144.76.19.72:36056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:31.422009 2026] [ssl:error] [pid 2807341:tid 2807341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:34.478591 2026] [ssl:error] [pid 2805765:tid 2805765] (EAI 2)Name or service not known: [client 144.76.19.72:36064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:34.478630 2026] [ssl:error] [pid 2805765:tid 2805765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:34.582493 2026] [ssl:error] [pid 2807342:tid 2807342] (EAI 2)Name or service not known: [client 144.76.19.72:36070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:34.582535 2026] [ssl:error] [pid 2807342:tid 2807342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:35.240297 2026] [ssl:error] [pid 2800094:tid 2800094] (70014)End of file found: [client 216.73.216.199:1956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 10:59:35.459722 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.66.39:53233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:35.459754 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.66.39:53233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:35.460227 2026] [core:error] [pid 2807341:tid 2807341] [client 66.249.66.167:51648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:35.460261 2026] [core:error] [pid 2807341:tid 2807341] [client 66.249.66.167:51648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:37.638703 2026] [ssl:error] [pid 2783986:tid 2783986] (EAI 2)Name or service not known: [client 144.76.19.72:36072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:37.638739 2026] [ssl:error] [pid 2783986:tid 2783986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:37.696593 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:36078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:37.696624 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:39.401192 2026] [security2:error] [pid 2783986:tid 2783986] [client 114.119.158.38:60315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/wp-content/uploads/2023/08/Weekend-Away-Info-724x1024.png"] [unique_id "amsgi7XrsW1jgWbmF31b_gAAAB4"], referer: http://www.erskinenazarene.co.uk/august-2023-newsletter/
[Thu Jul 30 10:59:40.753200 2026] [ssl:error] [pid 2807173:tid 2807173] (EAI 2)Name or service not known: [client 144.76.19.72:49116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:40.753235 2026] [ssl:error] [pid 2807173:tid 2807173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:40.806686 2026] [ssl:error] [pid 2800094:tid 2800094] (EAI 2)Name or service not known: [client 144.76.19.72:49122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:40.806723 2026] [ssl:error] [pid 2800094:tid 2800094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:40.829032 2026] [security2:error] [pid 2799771:tid 2799771] [client 114.119.158.38:60325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/wp-content/uploads/2023/08/Weekend-Away-Info-724x1024.png"] [unique_id "amsgjO21busEGMTvfl6uBgAAACA"], referer: http://www.erskinenazarene.co.uk/august-2023-newsletter/
[Thu Jul 30 10:59:43.866874 2026] [ssl:error] [pid 2805728:tid 2805728] (EAI 2)Name or service not known: [client 144.76.19.72:49138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:43.866929 2026] [ssl:error] [pid 2805728:tid 2805728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:43.923464 2026] [ssl:error] [pid 2808207:tid 2808207] (EAI 2)Name or service not known: [client 144.76.19.72:49144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:43.923501 2026] [ssl:error] [pid 2808207:tid 2808207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:43.982965 2026] [core:error] [pid 2800011:tid 2800011] (13)Permission denied: [client 216.73.216.199:7806] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/ima/uevent
[Thu Jul 30 10:59:45.790010 2026] [core:error] [pid 2800011:tid 2800011] (13)Permission denied: [client 216.73.216.199:7806] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/custom_divisor
[Thu Jul 30 10:59:46.603920 2026] [security2:error] [pid 2807262:tid 2807262] [client 43.153.35.128:33060] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wartypig.com"] [uri "/"] [unique_id "amsgktt0x7_OTwPAFNL2ZQAAAAs"]
[Thu Jul 30 10:59:46.981161 2026] [ssl:error] [pid 2791826:tid 2791826] (EAI 2)Name or service not known: [client 144.76.19.72:49154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:46.981195 2026] [ssl:error] [pid 2791826:tid 2791826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:47.036993 2026] [ssl:error] [pid 2807928:tid 2807928] (EAI 2)Name or service not known: [client 144.76.19.72:49164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:47.037028 2026] [ssl:error] [pid 2807928:tid 2807928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:48.343124 2026] [security2:error] [pid 2807297:tid 2807297] [client 43.156.36.169:37792] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.org.uk"] [uri "/"] [unique_id "amsglAqyOXnaXeNP7NAK7AAAABA"]
[Thu Jul 30 10:59:49.694789 2026] [core:error] [pid 2804461:tid 2804461] [client 66.249.66.39:42872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:49.694812 2026] [core:error] [pid 2804461:tid 2804461] [client 66.249.66.39:42872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 10:59:49.784150 2026] [security2:error] [pid 2807341:tid 2807341] [client 43.156.36.169:38846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amsglWTFYQld72XeAz2ZQQAAACI"], referer: http://www.shelterforum.org.uk
[Thu Jul 30 10:59:50.108166 2026] [ssl:error] [pid 2804459:tid 2804459] (EAI 2)Name or service not known: [client 144.76.19.72:48360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:50.108192 2026] [ssl:error] [pid 2804459:tid 2804459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:50.165636 2026] [ssl:error] [pid 2804461:tid 2804461] (EAI 2)Name or service not known: [client 144.76.19.72:48366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:50.165666 2026] [ssl:error] [pid 2804461:tid 2804461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:51.150458 2026] [security2:error] [pid 2804459:tid 2804459] [client 110.249.201.115:55970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/about.html"] [unique_id "amsgl6X1WoaoJK0i7bDA0QAAACQ"]
[Thu Jul 30 10:59:52.034620 2026] [security2:error] [pid 2807298:tid 2807298] [client 43.130.228.73:36610] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsgmJwTpVWXzL8qsT6OBgAAABE"], referer: http://www.banskoexpresstransfers.co.uk
[Thu Jul 30 10:59:53.223767 2026] [ssl:error] [pid 2807342:tid 2807342] (EAI 2)Name or service not known: [client 144.76.19.72:48372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:53.223802 2026] [ssl:error] [pid 2807342:tid 2807342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:53.279400 2026] [ssl:error] [pid 2807343:tid 2807343] (EAI 2)Name or service not known: [client 144.76.19.72:48386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:53.279439 2026] [ssl:error] [pid 2807343:tid 2807343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:53.962687 2026] [security2:error] [pid 2807298:tid 2807298] [client 43.130.228.73:55606] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsgmZwTpVWXzL8qsT6OBwAAABE"], referer: http://www.banskoexpress.com
[Thu Jul 30 10:59:56.396665 2026] [ssl:error] [pid 2807340:tid 2807340] (EAI 2)Name or service not known: [client 144.76.19.72:48390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:56.396694 2026] [ssl:error] [pid 2807340:tid 2807340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:56.452701 2026] [ssl:error] [pid 2807339:tid 2807339] (EAI 2)Name or service not known: [client 144.76.19.72:48400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:56.452737 2026] [ssl:error] [pid 2807339:tid 2807339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:59.334454 2026] [core:error] [pid 2765151:tid 2765151] (13)Permission denied: [client 216.73.216.199:58848] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/nvmem/uevent
[Thu Jul 30 10:59:59.506993 2026] [ssl:error] [pid 2807297:tid 2807297] (EAI 2)Name or service not known: [client 144.76.19.72:48412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:59.507036 2026] [ssl:error] [pid 2807297:tid 2807297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 10:59:59.561367 2026] [ssl:error] [pid 2804420:tid 2804420] (EAI 2)Name or service not known: [client 144.76.19.72:32388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 10:59:59.561405 2026] [ssl:error] [pid 2804420:tid 2804420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:01.347056 2026] [core:error] [pid 2765151:tid 2765151] (13)Permission denied: [client 216.73.216.199:58848] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS2/iomem_base
[Thu Jul 30 11:00:02.252676 2026] [authz_core:error] [pid 2808146:tid 2808146] [client 66.249.66.35:64425] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:00:02.255383 2026] [authz_core:error] [pid 2808146:tid 2808146] [client 66.249.66.35:64425] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:00:02.556866 2026] [lsapi:warn] [pid 2765151:tid 2765151] [client 216.73.216.199:58848] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Undefined array key "pass" in /var/softaculous/moodle41/add_admin.php on line 6\n
[Thu Jul 30 11:00:02.650909 2026] [ssl:error] [pid 2810094:tid 2810094] (EAI 2)Name or service not known: [client 144.76.19.72:32404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:02.650945 2026] [ssl:error] [pid 2810094:tid 2810094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:02.704354 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:32410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:02.704387 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:03.153389 2026] [ssl:error] [pid 2765151:tid 2765151] (70014)End of file found: [client 216.73.216.199:58848] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:03.454002 2026] [ssl:error] [pid 2808207:tid 2808207] (70014)End of file found: [client 216.73.216.199:6966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:03.932261 2026] [core:error] [pid 2789905:tid 2789905] [client 66.249.66.41:35414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:03.932298 2026] [core:error] [pid 2789905:tid 2789905] [client 66.249.66.41:35414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:04.571737 2026] [cgi:error] [pid 2805728:tid 2805728] [client 47.128.117.40:46206] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:00:04.962437 2026] [core:error] [pid 2800011:tid 2800011] (13)Permission denied: [client 216.73.216.199:36383] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS2/iomem_base
[Thu Jul 30 11:00:05.787523 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:32414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:05.787554 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:05.841009 2026] [ssl:error] [pid 2809436:tid 2809436] (EAI 2)Name or service not known: [client 144.76.19.72:32420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:05.841049 2026] [ssl:error] [pid 2809436:tid 2809436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:05.941945 2026] [security2:error] [pid 2810293:tid 2810293] [client 47.128.99.92:33032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "astleydogpark.co.uk"] [uri "/robots.txt"] [unique_id "amsgpbKpNaUs5Gfu-qu7YQAAADY"]
[Thu Jul 30 11:00:08.282090 2026] [ssl:error] [pid 2800011:tid 2800011] (70014)End of file found: [client 216.73.216.199:36383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:08.621492 2026] [authz_core:error] [pid 2810094:tid 2810094] [client 52.167.144.230:22198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:00:08.626593 2026] [authz_core:error] [pid 2810094:tid 2810094] [client 52.167.144.230:22198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:00:08.908130 2026] [ssl:error] [pid 2807298:tid 2807298] (EAI 2)Name or service not known: [client 144.76.19.72:32434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:08.908177 2026] [ssl:error] [pid 2807298:tid 2807298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:08.960087 2026] [ssl:error] [pid 2807231:tid 2807231] (EAI 2)Name or service not known: [client 144.76.19.72:32436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:08.960120 2026] [ssl:error] [pid 2807231:tid 2807231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:09.170673 2026] [security2:error] [pid 2807342:tid 2807342] [client 185.191.171.9:27188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/lake-barkley-homes-for-sale-by-owner"] [unique_id "amsgqRrHgc6M9iqYRsYLzQAAACg"]
[Thu Jul 30 11:00:10.978751 2026] [authz_core:error] [pid 2807567:tid 2807567] [client 126.147.96.181:56150] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:00:10.982103 2026] [authz_core:error] [pid 2807567:tid 2807567] [client 126.147.96.181:56150] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:00:11.018526 2026] [access_compat:error] [pid 2807262:tid 2807262] [client 2.189.5.162:49644] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:00:12.015144 2026] [ssl:error] [pid 2810653:tid 2810653] (EAI 2)Name or service not known: [client 144.76.19.72:25670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:12.015188 2026] [ssl:error] [pid 2810653:tid 2810653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:12.069362 2026] [ssl:error] [pid 2810296:tid 2810296] (EAI 2)Name or service not known: [client 144.76.19.72:25672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:12.069396 2026] [ssl:error] [pid 2810296:tid 2810296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:12.627424 2026] [security2:error] [pid 2804420:tid 2804420] [client 47.128.126.178:18876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "positivelydisruptive.co.uk"] [uri "/robots.txt"] [unique_id "amsgrG3P_oPwg4gqmH9-BQAAABY"]
[Thu Jul 30 11:00:14.904784 2026] [ssl:error] [pid 2765151:tid 2765151] (70014)End of file found: [client 216.73.216.199:26607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:15.122049 2026] [ssl:error] [pid 2810293:tid 2810293] (EAI 2)Name or service not known: [client 144.76.19.72:25682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:15.122096 2026] [ssl:error] [pid 2810293:tid 2810293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:15.178009 2026] [ssl:error] [pid 2804420:tid 2804420] (EAI 2)Name or service not known: [client 144.76.19.72:25692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:15.178046 2026] [ssl:error] [pid 2804420:tid 2804420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:18.231695 2026] [ssl:error] [pid 2810294:tid 2810294] (EAI 2)Name or service not known: [client 144.76.19.72:25698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:18.231739 2026] [ssl:error] [pid 2810294:tid 2810294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:18.288458 2026] [ssl:error] [pid 2807296:tid 2807296] (EAI 2)Name or service not known: [client 144.76.19.72:25710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:18.288488 2026] [ssl:error] [pid 2807296:tid 2807296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:19.378763 2026] [core:error] [pid 2801350:tid 2801350] [client 66.249.66.167:37883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:19.378794 2026] [core:error] [pid 2801350:tid 2801350] [client 66.249.66.167:37883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:21.233715 2026] [security2:error] [pid 2810653:tid 2810653] [client 216.73.216.199:37077] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/modprobe.d/tuned.conf"] [unique_id "amsgtczL0KarVeEi1Tf4cgAAAAo"]
[Thu Jul 30 11:00:21.233982 2026] [security2:error] [pid 2810653:tid 2810653] [client 216.73.216.199:37077] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/modprobe.d/tuned.conf"] [unique_id "amsgtczL0KarVeEi1Tf4cgAAAAo"]
[Thu Jul 30 11:00:21.234201 2026] [security2:error] [pid 2810653:tid 2810653] [client 216.73.216.199:37077] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/modprobe.d/tuned.conf"] [unique_id "amsgtczL0KarVeEi1Tf4cgAAAAo"]
[Thu Jul 30 11:00:21.359140 2026] [ssl:error] [pid 2810293:tid 2810293] (EAI 2)Name or service not known: [client 144.76.19.72:51426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:21.359180 2026] [ssl:error] [pid 2810293:tid 2810293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:21.410257 2026] [ssl:error] [pid 2805203:tid 2805203] (EAI 2)Name or service not known: [client 144.76.19.72:51430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:21.410283 2026] [ssl:error] [pid 2805203:tid 2805203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:23.049114 2026] [security2:error] [pid 2807296:tid 2807296] [client 200.8.210.26:4254] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgt8RxAy7D8PIiYBRiLgAAAA4"]
[Thu Jul 30 11:00:23.049163 2026] [security2:error] [pid 2807296:tid 2807296] [client 200.8.210.26:4254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgt8RxAy7D8PIiYBRiLgAAAA4"]
[Thu Jul 30 11:00:23.049415 2026] [security2:error] [pid 2807296:tid 2807296] [client 200.8.210.26:4254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgt8RxAy7D8PIiYBRiLgAAAA4"]
[Thu Jul 30 11:00:23.481774 2026] [security2:error] [pid 2807567:tid 2807567] [client 185.191.171.7:54152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6381.0.html"] [unique_id "amsgt5onmsyxPzhnxDHKOwAAADA"]
[Thu Jul 30 11:00:23.769930 2026] [core:error] [pid 2765151:tid 2765151] [client 74.248.33.8:34883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:23.769964 2026] [core:error] [pid 2765151:tid 2765151] [client 74.248.33.8:34883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:24.464692 2026] [ssl:error] [pid 2765151:tid 2765151] (EAI 2)Name or service not known: [client 144.76.19.72:51432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:24.464720 2026] [ssl:error] [pid 2765151:tid 2765151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:24.520734 2026] [ssl:error] [pid 2809436:tid 2809436] (EAI 2)Name or service not known: [client 144.76.19.72:51448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:24.520773 2026] [ssl:error] [pid 2809436:tid 2809436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:25.825546 2026] [security2:error] [pid 2800011:tid 2800011] [client 45.12.26.9:29269] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgueefqSletWiAUU1TAwAAACo"]
[Thu Jul 30 11:00:25.825604 2026] [security2:error] [pid 2800011:tid 2800011] [client 45.12.26.9:29269] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgueefqSletWiAUU1TAwAAACo"]
[Thu Jul 30 11:00:25.825864 2026] [security2:error] [pid 2800011:tid 2800011] [client 45.12.26.9:29269] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgueefqSletWiAUU1TAwAAACo"]
[Thu Jul 30 11:00:26.957757 2026] [core:error] [pid 2810293:tid 2810293] (13)Permission denied: [client 216.73.216.199:60788] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:00:27.622469 2026] [ssl:error] [pid 2807173:tid 2807173] (EAI 2)Name or service not known: [client 144.76.19.72:51458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:27.622500 2026] [ssl:error] [pid 2807173:tid 2807173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:27.676612 2026] [ssl:error] [pid 2799623:tid 2799623] (EAI 2)Name or service not known: [client 144.76.19.72:51462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:27.676641 2026] [ssl:error] [pid 2799623:tid 2799623] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:29.216809 2026] [core:error] [pid 2804420:tid 2804420] [client 74.248.33.8:37205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:29.216842 2026] [core:error] [pid 2804420:tid 2804420] [client 74.248.33.8:37205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:29.310976 2026] [security2:error] [pid 2803251:tid 2803251] [client 169.224.121.85:30087] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgvYbVnsB7VqH2aN223wAAAAI"]
[Thu Jul 30 11:00:29.311042 2026] [security2:error] [pid 2803251:tid 2803251] [client 169.224.121.85:30087] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsgvYbVnsB7VqH2aN223wAAAAI"]
[Thu Jul 30 11:00:29.311299 2026] [security2:error] [pid 2803251:tid 2803251] [client 169.224.121.85:30087] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsgvYbVnsB7VqH2aN223wAAAAI"]
[Thu Jul 30 11:00:29.643324 2026] [core:error] [pid 2807341:tid 2807341] [client 74.248.33.8:16234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:29.643355 2026] [core:error] [pid 2807341:tid 2807341] [client 74.248.33.8:16234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:29.656705 2026] [core:error] [pid 2807339:tid 2807339] [client 66.249.66.66:63187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:29.656727 2026] [core:error] [pid 2807339:tid 2807339] [client 66.249.66.66:63187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:30.018540 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:38102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:30.018577 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:38102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:30.383554 2026] [core:error] [pid 2809436:tid 2809436] [client 74.248.33.8:34481] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:30.383593 2026] [core:error] [pid 2809436:tid 2809436] [client 74.248.33.8:34481] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:30.767517 2026] [ssl:error] [pid 2807296:tid 2807296] (EAI 2)Name or service not known: [client 144.76.19.72:20544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:30.767553 2026] [ssl:error] [pid 2807296:tid 2807296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:30.820655 2026] [ssl:error] [pid 2807341:tid 2807341] (EAI 2)Name or service not known: [client 144.76.19.72:20560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:30.820691 2026] [ssl:error] [pid 2807341:tid 2807341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:30.883338 2026] [ssl:error] [pid 2810293:tid 2810293] (70014)End of file found: [client 216.73.216.199:60788] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:31.367773 2026] [ssl:error] [pid 2807173:tid 2807173] (70014)End of file found: [client 216.73.216.199:12070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:31.549791 2026] [core:error] [pid 2810294:tid 2810294] [client 74.248.33.8:32246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:31.549818 2026] [core:error] [pid 2810294:tid 2810294] [client 74.248.33.8:32246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:31.783596 2026] [authz_core:error] [pid 2807341:tid 2807341] [client 169.58.39.193:59122] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 11:00:31.947828 2026] [core:error] [pid 2807339:tid 2807339] [client 74.248.33.8:64075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:31.947850 2026] [core:error] [pid 2807339:tid 2807339] [client 74.248.33.8:64075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:32.396318 2026] [core:error] [pid 2807340:tid 2807340] [client 66.249.66.3:52024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:32.396350 2026] [core:error] [pid 2807340:tid 2807340] [client 66.249.66.3:52024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:33.221049 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:34011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:33.221094 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:34011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:33.714452 2026] [core:error] [pid 2803251:tid 2803251] [client 74.248.33.8:40329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:33.714504 2026] [core:error] [pid 2803251:tid 2803251] [client 74.248.33.8:40329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:33.776088 2026] [ssl:error] [pid 2799623:tid 2799623] (70014)End of file found: [client 216.73.216.199:31346] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:33.877847 2026] [ssl:error] [pid 2810227:tid 2810227] (EAI 2)Name or service not known: [client 144.76.19.72:20570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:33.877894 2026] [ssl:error] [pid 2810227:tid 2810227] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:33.929850 2026] [ssl:error] [pid 2810226:tid 2810226] (EAI 2)Name or service not known: [client 144.76.19.72:20572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:33.929886 2026] [ssl:error] [pid 2810226:tid 2810226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:36.982662 2026] [ssl:error] [pid 2805728:tid 2805728] (EAI 2)Name or service not known: [client 144.76.19.72:20584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:36.982701 2026] [ssl:error] [pid 2805728:tid 2805728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:37.036942 2026] [ssl:error] [pid 2803251:tid 2803251] (EAI 2)Name or service not known: [client 144.76.19.72:20596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:37.036965 2026] [ssl:error] [pid 2803251:tid 2803251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:37.050200 2026] [security2:error] [pid 2810289:tid 2810289] [client 43.130.72.177:53208] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sewyork.co.uk"] [uri "/"] [unique_id "amsgxcfgfQY4-Y_cUJDPgQAAADI"]
[Thu Jul 30 11:00:37.393581 2026] [ssl:error] [pid 2807340:tid 2807340] (70014)End of file found: [client 216.73.216.199:31046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:37.694777 2026] [ssl:error] [pid 2810293:tid 2810293] (70014)End of file found: [client 216.73.216.199:29064] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:37.751952 2026] [security2:error] [pid 2810053:tid 2810053] [client 92.118.39.171:59333] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "amsgxSbL1_JN5oPcolR1XAAAAAA"]
[Thu Jul 30 11:00:37.752160 2026] [security2:error] [pid 2810053:tid 2810053] [client 92.118.39.171:59333] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "amsgxSbL1_JN5oPcolR1XAAAAAA"]
[Thu Jul 30 11:00:37.752378 2026] [security2:error] [pid 2810053:tid 2810053] [client 92.118.39.171:59333] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "amsgxSbL1_JN5oPcolR1XAAAAAA"]
[Thu Jul 30 11:00:38.307893 2026] [core:error] [pid 2803251:tid 2803251] [client 74.248.33.8:64515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:38.307923 2026] [core:error] [pid 2803251:tid 2803251] [client 74.248.33.8:64515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:38.903428 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:64557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:38.903461 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:64557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:39.497730 2026] [ssl:error] [pid 2810053:tid 2810053] (70014)End of file found: [client 216.73.216.199:24482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:40.110840 2026] [ssl:error] [pid 2810294:tid 2810294] (EAI 2)Name or service not known: [client 144.76.19.72:51452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:40.110872 2026] [ssl:error] [pid 2810294:tid 2810294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:40.165148 2026] [ssl:error] [pid 2807296:tid 2807296] (EAI 2)Name or service not known: [client 144.76.19.72:51456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:40.165178 2026] [ssl:error] [pid 2807296:tid 2807296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:40.798959 2026] [security2:error] [pid 2808207:tid 2808207] [client 20.171.55.167:11024] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsgyBH1kViPrCRNY-TzswAAADU"]
[Thu Jul 30 11:00:40.799243 2026] [security2:error] [pid 2808207:tid 2808207] [client 20.171.55.167:11024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsgyBH1kViPrCRNY-TzswAAADU"]
[Thu Jul 30 11:00:40.827237 2026] [security2:error] [pid 2808207:tid 2808207] [client 20.171.55.167:11024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.josieandmatt.co.uk"] [uri "/403.shtml"] [unique_id "amsgyBH1kViPrCRNY-TzswAAADU"]
[Thu Jul 30 11:00:41.089107 2026] [security2:error] [pid 2811604:tid 2811604] [client 94.154.43.186:26532] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewillow1994.co.uk"] [uri "/.env"] [unique_id "amsgyZt4FVW88P-ABvLLawAAAAU"]
[Thu Jul 30 11:00:41.089350 2026] [security2:error] [pid 2811604:tid 2811604] [client 94.154.43.186:26532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thewillow1994.co.uk"] [uri "/.env"] [unique_id "amsgyZt4FVW88P-ABvLLawAAAAU"]
[Thu Jul 30 11:00:41.089662 2026] [security2:error] [pid 2811604:tid 2811604] [client 94.154.43.186:26532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thewillow1994.co.uk"] [uri "/.env"] [unique_id "amsgyZt4FVW88P-ABvLLawAAAAU"]
[Thu Jul 30 11:00:41.357857 2026] [core:error] [pid 2809559:tid 2809559] [client 74.248.33.8:22627] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:41.357888 2026] [core:error] [pid 2809559:tid 2809559] [client 74.248.33.8:22627] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:41.516174 2026] [security2:error] [pid 2808207:tid 2808207] [client 110.249.202.43:65306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amsgyRH1kViPrCRNY-TztAAAADU"]
[Thu Jul 30 11:00:42.058662 2026] [core:error] [pid 2811604:tid 2811604] [client 74.248.33.8:40340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:42.058699 2026] [core:error] [pid 2811604:tid 2811604] [client 74.248.33.8:40340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:42.723954 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:45290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:42.723981 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:45290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:43.148573 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:35205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:43.148597 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:35205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:43.219327 2026] [ssl:error] [pid 2810225:tid 2810225] (EAI 2)Name or service not known: [client 144.76.19.72:51472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:43.219357 2026] [ssl:error] [pid 2810225:tid 2810225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:43.273122 2026] [ssl:error] [pid 2805728:tid 2805728] (EAI 2)Name or service not known: [client 144.76.19.72:51486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:43.273148 2026] [ssl:error] [pid 2805728:tid 2805728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:43.353205 2026] [security2:error] [pid 2807340:tid 2807340] [client 110.249.202.143:65096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/403.shtml"] [unique_id "amsgy7ZqtBeBtu1AYU5FhQAAAB8"]
[Thu Jul 30 11:00:45.063902 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:32643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:45.063934 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:32643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:45.569876 2026] [ssl:error] [pid 2811697:tid 2811697] (70014)End of file found: [client 216.73.216.199:11975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:45.837307 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:64131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:45.837339 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:64131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:45.942825 2026] [access_compat:error] [pid 2810653:tid 2810653] [client 170.106.147.63:50896] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 11:00:46.328048 2026] [ssl:error] [pid 2810653:tid 2810653] (EAI 2)Name or service not known: [client 144.76.19.72:51498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:46.328104 2026] [ssl:error] [pid 2810653:tid 2810653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:46.381824 2026] [ssl:error] [pid 2810289:tid 2810289] (EAI 2)Name or service not known: [client 144.76.19.72:51512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:46.381871 2026] [ssl:error] [pid 2810289:tid 2810289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:46.475751 2026] [ssl:error] [pid 2789905:tid 2789905] (70014)End of file found: [client 216.73.216.199:58477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:46.637536 2026] [core:error] [pid 2810653:tid 2810653] [client 66.249.66.168:54074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:46.637582 2026] [core:error] [pid 2810653:tid 2810653] [client 66.249.66.168:54074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:46.649129 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.66.167:44692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:46.649149 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.66.167:44692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:47.075813 2026] [ssl:error] [pid 2805999:tid 2805999] (70014)End of file found: [client 216.73.216.199:17745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:48.191438 2026] [authz_core:error] [pid 2809559:tid 2809559] [client 66.249.66.14:56669] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:00:48.194150 2026] [authz_core:error] [pid 2809559:tid 2809559] [client 66.249.66.14:56669] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:00:49.255816 2026] [core:error] [pid 2807262:tid 2807262] [client 66.249.66.167:46438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:49.255860 2026] [core:error] [pid 2807262:tid 2807262] [client 66.249.66.167:46438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:49.438121 2026] [ssl:error] [pid 2810294:tid 2810294] (EAI 2)Name or service not known: [client 144.76.19.72:51514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:49.438153 2026] [ssl:error] [pid 2810294:tid 2810294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:49.495512 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:51530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:49.495546 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:50.890593 2026] [core:error] [pid 2807173:tid 2807173] (13)Permission denied: [client 216.73.216.199:23277] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS0/port
[Thu Jul 30 11:00:50.997265 2026] [core:error] [pid 2807173:tid 2807173] (13)Permission denied: [client 216.73.216.199:23277] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/aliases
[Thu Jul 30 11:00:51.927422 2026] [core:error] [pid 2801550:tid 2801550] [client 74.248.33.8:15830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:51.927455 2026] [core:error] [pid 2801550:tid 2801550] [client 74.248.33.8:15830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:52.568361 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:35644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:52.568396 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:52.621681 2026] [ssl:error] [pid 2811825:tid 2811825] (EAI 2)Name or service not known: [client 144.76.19.72:35652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:52.621721 2026] [ssl:error] [pid 2811825:tid 2811825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:53.238081 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:22691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:53.238109 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:22691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:53.407105 2026] [ssl:error] [pid 2807173:tid 2807173] (70014)End of file found: [client 216.73.216.199:23277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:53.957771 2026] [core:error] [pid 2809559:tid 2809559] [client 74.248.33.8:64403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:53.957807 2026] [core:error] [pid 2809559:tid 2809559] [client 74.248.33.8:64403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:54.248549 2026] [core:error] [pid 2808207:tid 2808207] [client 74.248.33.8:24457] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:54.248588 2026] [core:error] [pid 2808207:tid 2808207] [client 74.248.33.8:24457] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:54.567745 2026] [security2:error] [pid 2807339:tid 2807339] [client 146.56.199.139:47070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.com"] [uri "/"] [unique_id "amsg1j8xfHuQs2DZrTJlsAAAABk"]
[Thu Jul 30 11:00:55.506847 2026] [core:error] [pid 2807343:tid 2807343] [client 74.248.33.8:64015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:55.506878 2026] [core:error] [pid 2807343:tid 2807343] [client 74.248.33.8:64015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:55.679438 2026] [ssl:error] [pid 2810653:tid 2810653] (EAI 2)Name or service not known: [client 144.76.19.72:35660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:55.679467 2026] [ssl:error] [pid 2810653:tid 2810653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:55.733927 2026] [ssl:error] [pid 2804463:tid 2804463] (EAI 2)Name or service not known: [client 144.76.19.72:35664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:55.733958 2026] [ssl:error] [pid 2804463:tid 2804463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:55.944704 2026] [security2:error] [pid 2810290:tid 2810290] [client 185.191.171.8:29008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.5010.html"] [unique_id "amsg1_UgWcOm-L274RFBjgAAADM"]
[Thu Jul 30 11:00:56.147138 2026] [core:error] [pid 2810227:tid 2810227] [client 74.248.33.8:52703] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:56.147170 2026] [core:error] [pid 2810227:tid 2810227] [client 74.248.33.8:52703] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:56.892367 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:63939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:56.892396 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:63939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:56.990199 2026] [ssl:error] [pid 2800094:tid 2800094] (70014)End of file found: [client 216.73.216.199:43639] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:57.293781 2026] [core:error] [pid 2810292:tid 2810292] [client 74.248.33.8:34018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:57.293809 2026] [core:error] [pid 2810292:tid 2810292] [client 74.248.33.8:34018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:57.894742 2026] [ssl:error] [pid 2805728:tid 2805728] (70014)End of file found: [client 216.73.216.199:37405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:58.245918 2026] [core:error] [pid 2810290:tid 2810290] [client 74.248.33.8:64740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:58.245955 2026] [core:error] [pid 2810290:tid 2810290] [client 74.248.33.8:64740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:58.619346 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:63971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:58.619371 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:63971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:58.788323 2026] [ssl:error] [pid 2810290:tid 2810290] (EAI 2)Name or service not known: [client 144.76.19.72:35678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:58.788376 2026] [ssl:error] [pid 2810290:tid 2810290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:58.844537 2026] [ssl:error] [pid 2807567:tid 2807567] (EAI 2)Name or service not known: [client 144.76.19.72:35686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:00:58.844590 2026] [ssl:error] [pid 2807567:tid 2807567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:00:59.032047 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:37251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:59.032087 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:37251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:59.397854 2026] [autoindex:error] [pid 2810292:tid 2810292] (13)Permission denied: [client 216.73.216.199:22858] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/local/cpanel/
[Thu Jul 30 11:00:59.697670 2026] [ssl:error] [pid 2810292:tid 2810292] (70014)End of file found: [client 216.73.216.199:22858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:00:59.842668 2026] [core:error] [pid 2789905:tid 2789905] [client 74.248.33.8:63977] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:59.842697 2026] [core:error] [pid 2789905:tid 2789905] [client 74.248.33.8:63977] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:59.978957 2026] [core:error] [pid 2810226:tid 2810226] [client 66.249.64.172:45548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:00:59.978990 2026] [core:error] [pid 2810226:tid 2810226] [client 66.249.64.172:45548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:00.015490 2026] [core:error] [pid 2811825:tid 2811825] [client 66.249.64.172:40452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:00.015531 2026] [core:error] [pid 2811825:tid 2811825] [client 66.249.64.172:40452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:01.899805 2026] [ssl:error] [pid 2810290:tid 2810290] (EAI 2)Name or service not known: [client 144.76.19.72:31664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:01.899835 2026] [ssl:error] [pid 2810290:tid 2810290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:01.952510 2026] [ssl:error] [pid 2807173:tid 2807173] (EAI 2)Name or service not known: [client 144.76.19.72:31674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:01.952541 2026] [ssl:error] [pid 2807173:tid 2807173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:02.005406 2026] [core:error] [pid 2808147:tid 2808147] [client 74.248.33.8:33990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:02.005435 2026] [core:error] [pid 2808147:tid 2808147] [client 74.248.33.8:33990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:02.822255 2026] [security2:error] [pid 2811825:tid 2811825] [client 114.119.158.38:20063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/pentecost-sunday/"] [unique_id "amsg3r8fyUUQ_cha9oMl_gAAAAw"], referer: http://www.erskinenazarene.co.uk/sermons/pentecost-sunday/
[Thu Jul 30 11:01:03.872139 2026] [security2:error] [pid 2805728:tid 2805728] [client 114.119.158.38:20077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/sermons/pentecost-sunday/"] [unique_id "amsg3w0J_TfaJh3UYdf-TwAAAA0"], referer: http://www.erskinenazarene.co.uk/sermons/pentecost-sunday/
[Thu Jul 30 11:01:03.895747 2026] [core:error] [pid 2789905:tid 2789905] [client 74.248.33.8:64720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:03.895776 2026] [core:error] [pid 2789905:tid 2789905] [client 74.248.33.8:64720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:04.407207 2026] [ssl:error] [pid 2811825:tid 2811825] (70014)End of file found: [client 216.73.216.199:10393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:04.819438 2026] [core:error] [pid 2808207:tid 2808207] (13)Permission denied: [client 216.73.216.199:55556] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:01:05.006708 2026] [ssl:error] [pid 2801350:tid 2801350] (EAI 2)Name or service not known: [client 144.76.19.72:31684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:05.006768 2026] [ssl:error] [pid 2801350:tid 2801350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:05.062892 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:31694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:05.062921 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:05.421687 2026] [ssl:error] [pid 2808207:tid 2808207] (70014)End of file found: [client 216.73.216.199:55556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:06.100714 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:20539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:06.100748 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:20539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:06.322618 2026] [ssl:error] [pid 2789905:tid 2789905] (70014)End of file found: [client 216.73.216.199:26180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:06.489180 2026] [core:error] [pid 2801550:tid 2801550] [client 74.248.33.8:63820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:06.489208 2026] [core:error] [pid 2801550:tid 2801550] [client 74.248.33.8:63820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:06.961022 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:26744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:06.961049 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:26744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:07.609044 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:37304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:07.609090 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:37304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:07.984926 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:38838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:07.984954 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:38838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:08.123088 2026] [ssl:error] [pid 2801350:tid 2801350] (EAI 2)Name or service not known: [client 144.76.19.72:31706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:08.123130 2026] [ssl:error] [pid 2801350:tid 2801350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:08.177697 2026] [ssl:error] [pid 2801350:tid 2801350] (EAI 2)Name or service not known: [client 144.76.19.72:31710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:08.177724 2026] [ssl:error] [pid 2801350:tid 2801350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:08.362556 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:34024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:08.362604 2026] [core:error] [pid 2812207:tid 2812207] [client 74.248.33.8:34024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:08.439359 2026] [security2:error] [pid 2801350:tid 2801350] [client 43.166.240.235:36313] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsg5E0Eer-sXseg2GgvewAAAAQ"]
[Thu Jul 30 11:01:08.439411 2026] [security2:error] [pid 2801350:tid 2801350] [client 43.166.240.235:36313] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsg5E0Eer-sXseg2GgvewAAAAQ"]
[Thu Jul 30 11:01:08.439648 2026] [security2:error] [pid 2801350:tid 2801350] [client 43.166.240.235:36313] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsg5E0Eer-sXseg2GgvewAAAAQ"]
[Thu Jul 30 11:01:08.511835 2026] [lsapi:warn] [pid 2812569:tid 2812569] [client 78.86.129.111:15816] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:01:08.511886 2026] [lsapi:warn] [pid 2812569:tid 2812569] [client 78.86.129.111:15816] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:01:09.129841 2026] [authz_core:error] [pid 2810653:tid 2810653] [client 169.58.39.193:65037] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 11:01:09.717840 2026] [security2:error] [pid 2801350:tid 2801350] [client 85.208.96.206:47646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/erin-way-measurements"] [unique_id "amsg5U0Eer-sXseg2GgvgAAAAAQ"]
[Thu Jul 30 11:01:09.736987 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:63841] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:09.737036 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:63841] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:09.788072 2026] [ssl:error] [pid 2807173:tid 2807173] (EAI 2)Name or service not known: [client 74.7.244.30:48238] AH01972: could not resolve address of OCSP responder r3.o.lencr.org
[Thu Jul 30 11:01:09.788114 2026] [ssl:error] [pid 2807173:tid 2807173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:10.103260 2026] [lsapi:warn] [pid 2812607:tid 2812607] [client 160.250.130.168:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:01:10.155670 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:64665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:10.155699 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:64665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:10.383565 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.66.196:54418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:10.383593 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.66.196:54418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:10.438140 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:22612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:10.438168 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:22612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:10.520840 2026] [security2:error] [pid 2810653:tid 2810653] [client 163.7.11.4:32261] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsg5szL0KarVeEi1Tf4igAAAAo"]
[Thu Jul 30 11:01:10.520903 2026] [security2:error] [pid 2810653:tid 2810653] [client 163.7.11.4:32261] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsg5szL0KarVeEi1Tf4igAAAAo"]
[Thu Jul 30 11:01:10.521174 2026] [security2:error] [pid 2810653:tid 2810653] [client 163.7.11.4:32261] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsg5szL0KarVeEi1Tf4igAAAAo"]
[Thu Jul 30 11:01:10.758939 2026] [lsapi:warn] [pid 2808207:tid 2808207] [client 78.86.129.111:15827] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:01:10.758984 2026] [lsapi:warn] [pid 2808207:tid 2808207] [client 78.86.129.111:15827] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:01:10.906353 2026] [core:error] [pid 2812709:tid 2812709] [client 74.248.33.8:22947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:10.906396 2026] [core:error] [pid 2812709:tid 2812709] [client 74.248.33.8:22947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:11.420631 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:33644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:11.420666 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:11.475040 2026] [ssl:error] [pid 2789905:tid 2789905] (EAI 2)Name or service not known: [client 144.76.19.72:33654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:11.475077 2026] [ssl:error] [pid 2789905:tid 2789905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:12.055369 2026] [ssl:error] [pid 2811825:tid 2811825] (5)Input/output error: [client 216.73.216.199:34181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:12.061727 2026] [core:error] [pid 2789905:tid 2789905] [client 74.248.33.8:63833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:12.061751 2026] [core:error] [pid 2789905:tid 2789905] [client 74.248.33.8:63833] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:12.700783 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:64432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:12.700831 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:64432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:13.184871 2026] [authz_core:error] [pid 2807342:tid 2807342] [client 169.58.39.193:49550] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 11:01:13.457358 2026] [security2:error] [pid 2805728:tid 2805728] [client 163.7.11.4:56405] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsg6Q0J_TfaJh3UYdf-UgAAAA0"]
[Thu Jul 30 11:01:13.457404 2026] [security2:error] [pid 2805728:tid 2805728] [client 163.7.11.4:56405] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsg6Q0J_TfaJh3UYdf-UgAAAA0"]
[Thu Jul 30 11:01:13.457660 2026] [security2:error] [pid 2805728:tid 2805728] [client 163.7.11.4:56405] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsg6Q0J_TfaJh3UYdf-UgAAAA0"]
[Thu Jul 30 11:01:14.161171 2026] [ssl:error] [pid 2812765:tid 2812765] (70014)End of file found: [client 216.73.216.199:36165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:14.531345 2026] [ssl:error] [pid 2810653:tid 2810653] (EAI 2)Name or service not known: [client 144.76.19.72:33660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:14.531382 2026] [ssl:error] [pid 2810653:tid 2810653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:14.585782 2026] [ssl:error] [pid 2810224:tid 2810224] (EAI 2)Name or service not known: [client 144.76.19.72:33662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:14.585824 2026] [ssl:error] [pid 2810224:tid 2810224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:15.063455 2026] [ssl:error] [pid 2811604:tid 2811604] (70014)End of file found: [client 216.73.216.199:39905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:15.570348 2026] [lsapi:warn] [pid 2810653:tid 2810653] [client 78.86.129.111:15837] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 11:01:15.570403 2026] [lsapi:warn] [pid 2810653:tid 2810653] [client 78.86.129.111:15837] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 11:01:17.435491 2026] [security2:error] [pid 2810224:tid 2810224] [client 185.191.171.18:46240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5696.0.html"] [unique_id "amsg7Ra78o2mXSJS4cpiBQAAAA8"]
[Thu Jul 30 11:01:17.644170 2026] [ssl:error] [pid 2812709:tid 2812709] (EAI 2)Name or service not known: [client 144.76.19.72:33676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:17.644207 2026] [ssl:error] [pid 2812709:tid 2812709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:17.700720 2026] [ssl:error] [pid 2812940:tid 2812940] (EAI 2)Name or service not known: [client 144.76.19.72:33690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:17.700749 2026] [ssl:error] [pid 2812940:tid 2812940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:18.392864 2026] [ssl:error] [pid 2809559:tid 2809559] (70014)End of file found: [client 216.73.216.199:45440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:18.434099 2026] [lsapi:warn] [pid 2810290:tid 2810290] [client 45.158.164.139:53068] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:01:18.434139 2026] [lsapi:warn] [pid 2810290:tid 2810290] [client 45.158.164.139:53068] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:01:18.436623 2026] [lsapi:warn] [pid 2812975:tid 2812975] [client 78.86.129.111:15846] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:01:18.436657 2026] [lsapi:warn] [pid 2812975:tid 2812975] [client 78.86.129.111:15846] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:01:18.606689 2026] [lsapi:warn] [pid 2810290:tid 2810290] [client 45.158.164.139:53072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:01:18.606714 2026] [lsapi:warn] [pid 2810290:tid 2810290] [client 45.158.164.139:53072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:01:18.609460 2026] [lsapi:warn] [pid 2812709:tid 2812709] [client 78.86.129.111:15845] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:01:18.609496 2026] [lsapi:warn] [pid 2812709:tid 2812709] [client 78.86.129.111:15845] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:01:19.026483 2026] [security2:error] [pid 2807341:tid 2807341] [client 85.208.96.194:41008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9450.0.html"] [unique_id "amsg72TFYQld72XeAz2ZbAAAACI"]
[Thu Jul 30 11:01:19.596526 2026] [ssl:error] [pid 2813006:tid 2813006] (70014)End of file found: [client 216.73.216.199:52938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:20.791262 2026] [ssl:error] [pid 2812765:tid 2812765] (EAI 2)Name or service not known: [client 144.76.19.72:33396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:20.791316 2026] [ssl:error] [pid 2812765:tid 2812765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:20.862774 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:33400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:20.862822 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:23.513429 2026] [ssl:error] [pid 2808146:tid 2808146] (70014)End of file found: [client 216.73.216.199:47031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:23.917808 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:33404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:23.917836 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:23.970945 2026] [ssl:error] [pid 2805728:tid 2805728] (EAI 2)Name or service not known: [client 144.76.19.72:33410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:23.970972 2026] [ssl:error] [pid 2805728:tid 2805728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:25.033802 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:40233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:25.033831 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:40233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:25.451977 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:59508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:25.452003 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:59508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:25.553926 2026] [lsapi:warn] [pid 2813006:tid 2813006] [client 195.26.253.119:0] [host mail.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:01:25.796259 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:24465] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:25.796285 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:24465] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:25.976824 2026] [core:error] [pid 2812976:tid 2812976] [client 66.249.64.170:51881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:25.976864 2026] [core:error] [pid 2812976:tid 2812976] [client 66.249.64.170:51881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:27.028859 2026] [ssl:error] [pid 2813006:tid 2813006] (EAI 2)Name or service not known: [client 144.76.19.72:33414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:27.028889 2026] [ssl:error] [pid 2813006:tid 2813006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:27.081968 2026] [ssl:error] [pid 2811604:tid 2811604] (EAI 2)Name or service not known: [client 144.76.19.72:33428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:27.082004 2026] [ssl:error] [pid 2811604:tid 2811604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:28.238040 2026] [authz_core:error] [pid 2812940:tid 2812940] [client 169.58.39.193:51657] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 11:01:28.830796 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:59463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:28.830823 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:59463] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:29.500181 2026] [core:error] [pid 2812940:tid 2812940] [client 74.248.33.8:12642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:29.500206 2026] [core:error] [pid 2812940:tid 2812940] [client 74.248.33.8:12642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:30.137815 2026] [ssl:error] [pid 2807567:tid 2807567] (EAI 2)Name or service not known: [client 144.76.19.72:37512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:30.137848 2026] [ssl:error] [pid 2807567:tid 2807567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:30.191940 2026] [ssl:error] [pid 2809559:tid 2809559] (EAI 2)Name or service not known: [client 144.76.19.72:37520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:30.191983 2026] [ssl:error] [pid 2809559:tid 2809559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:30.328880 2026] [core:error] [pid 2807343:tid 2807343] (13)Permission denied: [client 216.73.216.199:27776] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:01:30.629029 2026] [ssl:error] [pid 2807343:tid 2807343] (70014)End of file found: [client 216.73.216.199:27776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:32.630820 2026] [ssl:error] [pid 2810653:tid 2810653] (70014)End of file found: [client 216.73.216.199:52616] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:32.716182 2026] [core:error] [pid 2810226:tid 2810226] [client 66.249.64.170:53579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:32.716231 2026] [core:error] [pid 2810226:tid 2810226] [client 66.249.64.170:53579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:33.114076 2026] [authz_core:error] [pid 2810295:tid 2810295] [client 169.58.39.193:52653] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 11:01:33.301628 2026] [ssl:error] [pid 2810224:tid 2810224] (EAI 2)Name or service not known: [client 144.76.19.72:37528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:33.301658 2026] [ssl:error] [pid 2810224:tid 2810224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:33.356893 2026] [ssl:error] [pid 2810292:tid 2810292] (EAI 2)Name or service not known: [client 144.76.19.72:37536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:33.356932 2026] [ssl:error] [pid 2810292:tid 2810292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:34.959977 2026] [core:error] [pid 2812975:tid 2812975] [client 74.248.33.8:12611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:34.960003 2026] [core:error] [pid 2812975:tid 2812975] [client 74.248.33.8:12611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:35.532156 2026] [core:error] [pid 2810225:tid 2810225] [client 66.249.64.170:35426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:35.532187 2026] [core:error] [pid 2810225:tid 2810225] [client 66.249.64.170:35426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:35.758161 2026] [ssl:error] [pid 2812207:tid 2812207] (70014)End of file found: [client 216.73.216.199:12878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:36.442932 2026] [ssl:error] [pid 2807341:tid 2807341] (EAI 2)Name or service not known: [client 144.76.19.72:37544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:36.442971 2026] [ssl:error] [pid 2807341:tid 2807341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:36.500357 2026] [ssl:error] [pid 2813006:tid 2813006] (EAI 2)Name or service not known: [client 144.76.19.72:37558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:36.500401 2026] [ssl:error] [pid 2813006:tid 2813006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:37.567882 2026] [ssl:error] [pid 2810292:tid 2810292] (70014)End of file found: [client 216.73.216.199:10421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:38.319628 2026] [core:error] [pid 2812569:tid 2812569] [client 74.248.33.8:14908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:38.319659 2026] [core:error] [pid 2812569:tid 2812569] [client 74.248.33.8:14908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:38.811384 2026] [core:error] [pid 2812975:tid 2812975] [client 66.249.64.170:47965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:38.811427 2026] [core:error] [pid 2812975:tid 2812975] [client 66.249.64.170:47965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:38.841437 2026] [core:error] [pid 2807567:tid 2807567] [client 74.248.33.8:46075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:38.841466 2026] [core:error] [pid 2807567:tid 2807567] [client 74.248.33.8:46075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:39.216695 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:34810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:39.216720 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:34810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:39.559271 2026] [ssl:error] [pid 2812975:tid 2812975] (EAI 2)Name or service not known: [client 144.76.19.72:51318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:39.559317 2026] [ssl:error] [pid 2812975:tid 2812975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:39.616107 2026] [ssl:error] [pid 2807531:tid 2807531] (EAI 2)Name or service not known: [client 144.76.19.72:51320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:39.616139 2026] [ssl:error] [pid 2807531:tid 2807531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:39.761727 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:41386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:39.761754 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:41386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:39.976921 2026] [ssl:error] [pid 2813414:tid 2813414] (70014)End of file found: [client 216.73.216.199:22151] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:40.052808 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:14871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:40.052832 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:14871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:40.430605 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:30853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:40.430650 2026] [core:error] [pid 2807173:tid 2807173] [client 74.248.33.8:30853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:40.849416 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.64.170:56287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:40.849443 2026] [core:error] [pid 2807173:tid 2807173] [client 66.249.64.170:56287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:40.860461 2026] [security2:error] [pid 2807341:tid 2807341] [client 43.153.71.132:59450] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "amshBGTFYQld72XeAz2ZdAAAACI"]
[Thu Jul 30 11:01:40.897693 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:34884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:40.897718 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:34884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:41.081673 2026] [ssl:error] [pid 2812207:tid 2812207] (5)Input/output error: [client 216.73.216.199:54441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:41.152079 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:33201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:41.152104 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:33201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:41.640594 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:63750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:41.640621 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:63750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:41.980133 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:34893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:41.980168 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:34893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:42.740085 2026] [ssl:error] [pid 2813853:tid 2813853] (EAI 2)Name or service not known: [client 144.76.19.72:51324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:42.740119 2026] [ssl:error] [pid 2813853:tid 2813853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:42.792632 2026] [ssl:error] [pid 2800094:tid 2800094] (EAI 2)Name or service not known: [client 144.76.19.72:51338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:42.792660 2026] [ssl:error] [pid 2800094:tid 2800094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:43.296828 2026] [ssl:error] [pid 2810292:tid 2810292] (70014)End of file found: [client 216.73.216.199:61668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:43.807255 2026] [core:error] [pid 2813518:tid 2813518] [client 66.249.64.170:48312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:43.807290 2026] [core:error] [pid 2813518:tid 2813518] [client 66.249.64.170:48312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:44.738456 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:35588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:44.738482 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:35588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:45.252720 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:62966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:45.252742 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:62966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:45.847492 2026] [ssl:error] [pid 2812766:tid 2812766] (EAI 2)Name or service not known: [client 144.76.19.72:51346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:45.847528 2026] [ssl:error] [pid 2812766:tid 2812766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:45.899460 2026] [ssl:error] [pid 2813947:tid 2813947] (EAI 2)Name or service not known: [client 144.76.19.72:51360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:45.899495 2026] [ssl:error] [pid 2813947:tid 2813947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:46.010302 2026] [ssl:error] [pid 2813974:tid 2813974] (70014)End of file found: [client 216.73.216.199:52140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:46.110139 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:25232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:46.110190 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:25232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:46.868796 2026] [core:error] [pid 2810227:tid 2810227] [client 74.248.33.8:37302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:46.868829 2026] [core:error] [pid 2810227:tid 2810227] [client 74.248.33.8:37302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:47.222762 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:24817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:47.222795 2026] [core:error] [pid 2812608:tid 2812608] [client 74.248.33.8:24817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:47.582907 2026] [core:error] [pid 2813414:tid 2813414] [client 74.248.33.8:64393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:47.582934 2026] [core:error] [pid 2813414:tid 2813414] [client 74.248.33.8:64393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:48.615765 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:41348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:48.615807 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:41348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:48.951962 2026] [ssl:error] [pid 2807343:tid 2807343] (EAI 2)Name or service not known: [client 144.76.19.72:51364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:48.951993 2026] [ssl:error] [pid 2807343:tid 2807343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:49.007972 2026] [ssl:error] [pid 2807567:tid 2807567] (EAI 2)Name or service not known: [client 144.76.19.72:51376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:49.007998 2026] [ssl:error] [pid 2807567:tid 2807567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:50.021294 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.64.170:49746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:50.021325 2026] [core:error] [pid 2807567:tid 2807567] [client 66.249.64.170:49746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:50.232576 2026] [ssl:error] [pid 2808147:tid 2808147] (70014)End of file found: [client 216.73.216.199:13962] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:50.366674 2026] [core:error] [pid 2807531:tid 2807531] [client 74.248.33.8:25502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:50.366709 2026] [core:error] [pid 2807531:tid 2807531] [client 74.248.33.8:25502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:51.024044 2026] [core:error] [pid 2807343:tid 2807343] [client 66.249.66.40:44468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:51.024089 2026] [core:error] [pid 2807343:tid 2807343] [client 66.249.66.40:44468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:51.060927 2026] [core:error] [pid 2804463:tid 2804463] [client 66.249.66.195:41170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:51.060954 2026] [core:error] [pid 2804463:tid 2804463] [client 66.249.66.195:41170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:51.577948 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:45795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:51.577972 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:45795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:52.024023 2026] [core:error] [pid 2813974:tid 2813974] [client 74.248.33.8:18253] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:52.024056 2026] [core:error] [pid 2813974:tid 2813974] [client 74.248.33.8:18253] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:52.080205 2026] [ssl:error] [pid 2808146:tid 2808146] (EAI 2)Name or service not known: [client 144.76.19.72:64524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:52.080270 2026] [ssl:error] [pid 2808146:tid 2808146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:52.149710 2026] [ssl:error] [pid 2809559:tid 2809559] (EAI 2)Name or service not known: [client 144.76.19.72:64534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:52.149744 2026] [ssl:error] [pid 2809559:tid 2809559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:52.245022 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:45786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:52.245064 2026] [core:error] [pid 2805728:tid 2805728] [client 74.248.33.8:45786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:52.938767 2026] [core:error] [pid 2813947:tid 2813947] (13)Permission denied: [client 216.73.216.199:24797] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/rcupdate/uevent
[Thu Jul 30 11:01:53.330307 2026] [security2:error] [pid 2813974:tid 2813974] [client 43.134.62.67:43070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.parallel-coordinates.co.uk"] [uri "/"] [unique_id "amshEQlyMcfndfZjrg7YQAAAABo"]
[Thu Jul 30 11:01:53.451698 2026] [core:error] [pid 2805999:tid 2805999] [client 74.248.33.8:19998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:53.451730 2026] [core:error] [pid 2805999:tid 2805999] [client 74.248.33.8:19998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:55.206130 2026] [ssl:error] [pid 2808146:tid 2808146] (EAI 2)Name or service not known: [client 144.76.19.72:64540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:55.206168 2026] [ssl:error] [pid 2808146:tid 2808146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:55.222931 2026] [ssl:error] [pid 2813947:tid 2813947] (5)Input/output error: [client 216.73.216.199:24797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:01:55.293512 2026] [ssl:error] [pid 2807567:tid 2807567] (EAI 2)Name or service not known: [client 144.76.19.72:64556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:55.293544 2026] [ssl:error] [pid 2807567:tid 2807567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:56.247126 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:45760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:56.247157 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:45760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:56.927970 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:64459] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:56.928001 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:64459] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:57.649206 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:26845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:57.649243 2026] [core:error] [pid 2807231:tid 2807231] [client 74.248.33.8:26845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:57.937426 2026] [core:error] [pid 2813445:tid 2813445] [client 74.248.33.8:36586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:57.937482 2026] [core:error] [pid 2813445:tid 2813445] [client 74.248.33.8:36586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:58.347197 2026] [ssl:error] [pid 2800094:tid 2800094] (EAI 2)Name or service not known: [client 144.76.19.72:64566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:58.347236 2026] [ssl:error] [pid 2800094:tid 2800094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:58.403676 2026] [ssl:error] [pid 2807343:tid 2807343] (EAI 2)Name or service not known: [client 144.76.19.72:64572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:01:58.403703 2026] [ssl:error] [pid 2807343:tid 2807343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:01:59.446619 2026] [core:error] [pid 2807173:tid 2807173] (13)Permission denied: [client 216.73.216.199:3584] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory133/subsystem/uevent
[Thu Jul 30 11:01:59.928983 2026] [core:error] [pid 2809559:tid 2809559] [client 74.248.33.8:64220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:01:59.929008 2026] [core:error] [pid 2809559:tid 2809559] [client 74.248.33.8:64220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:00.422945 2026] [core:error] [pid 2805999:tid 2805999] [client 66.249.66.66:56230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:00.422975 2026] [core:error] [pid 2805999:tid 2805999] [client 66.249.66.66:56230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:00.425251 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:31336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:00.425272 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:31336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:01.426309 2026] [core:error] [pid 2801550:tid 2801550] [client 74.248.33.8:64222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:01.426356 2026] [core:error] [pid 2801550:tid 2801550] [client 74.248.33.8:64222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:01.459686 2026] [ssl:error] [pid 2809559:tid 2809559] (EAI 2)Name or service not known: [client 144.76.19.72:21642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:01.459718 2026] [ssl:error] [pid 2809559:tid 2809559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:01.464085 2026] [ssl:error] [pid 2808147:tid 2808147] (70014)End of file found: [client 216.73.216.199:56070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:01.515828 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:21658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:01.515859 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:01.931424 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:64215] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:01.931450 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:64215] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:02.442954 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:16926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:02.442982 2026] [core:error] [pid 2808146:tid 2808146] [client 74.248.33.8:16926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:02.974056 2026] [core:error] [pid 2814754:tid 2814754] [client 74.248.33.8:31316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:02.974114 2026] [core:error] [pid 2814754:tid 2814754] [client 74.248.33.8:31316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:03.370212 2026] [ssl:error] [pid 2807173:tid 2807173] (70014)End of file found: [client 216.73.216.199:3584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:03.561677 2026] [core:error] [pid 2814754:tid 2814754] [client 74.248.33.8:25279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:03.561705 2026] [core:error] [pid 2814754:tid 2814754] [client 74.248.33.8:25279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:03.671747 2026] [ssl:error] [pid 2801550:tid 2801550] (70014)End of file found: [client 216.73.216.199:19854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:03.949255 2026] [security2:error] [pid 2814757:tid 2814757] [client 49.51.39.209:43498] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ziltdesign.be"] [uri "/"] [unique_id "amshG3gkkNIxirlq5YCgpAAAACU"]
[Thu Jul 30 11:02:04.395094 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:18704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:04.395129 2026] [core:error] [pid 2804463:tid 2804463] [client 74.248.33.8:18704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:04.573338 2026] [ssl:error] [pid 2808146:tid 2808146] (EAI 2)Name or service not known: [client 144.76.19.72:21660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:04.573364 2026] [ssl:error] [pid 2808146:tid 2808146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:04.631307 2026] [ssl:error] [pid 2813444:tid 2813444] (EAI 2)Name or service not known: [client 144.76.19.72:21676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:04.631349 2026] [ssl:error] [pid 2813444:tid 2813444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:04.914984 2026] [core:error] [pid 2814757:tid 2814757] [client 74.248.33.8:25234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:04.915014 2026] [core:error] [pid 2814757:tid 2814757] [client 74.248.33.8:25234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:05.432239 2026] [core:error] [pid 2814756:tid 2814756] [client 74.248.33.8:24473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:05.432262 2026] [core:error] [pid 2814756:tid 2814756] [client 74.248.33.8:24473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:05.977433 2026] [core:error] [pid 2813975:tid 2813975] [client 74.248.33.8:17178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:05.977461 2026] [core:error] [pid 2813975:tid 2813975] [client 74.248.33.8:17178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:06.381758 2026] [core:error] [pid 2812976:tid 2812976] [client 74.248.33.8:37214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:06.381801 2026] [core:error] [pid 2812976:tid 2812976] [client 74.248.33.8:37214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:06.852288 2026] [core:error] [pid 2814709:tid 2814709] [client 74.248.33.8:18288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:06.852317 2026] [core:error] [pid 2814709:tid 2814709] [client 74.248.33.8:18288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:06.988633 2026] [ssl:error] [pid 2800094:tid 2800094] (70014)End of file found: [client 216.73.216.199:58184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:07.686441 2026] [ssl:error] [pid 2810226:tid 2810226] (EAI 2)Name or service not known: [client 144.76.19.72:21686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:07.686476 2026] [ssl:error] [pid 2810226:tid 2810226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:07.742367 2026] [ssl:error] [pid 2814709:tid 2814709] (EAI 2)Name or service not known: [client 144.76.19.72:21694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:07.742403 2026] [ssl:error] [pid 2814709:tid 2814709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:07.975455 2026] [core:error] [pid 2814755:tid 2814755] [client 74.248.33.8:14734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:07.975487 2026] [core:error] [pid 2814755:tid 2814755] [client 74.248.33.8:14734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:08.607827 2026] [core:error] [pid 2813008:tid 2813008] [client 74.248.33.8:37237] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:08.607858 2026] [core:error] [pid 2813008:tid 2813008] [client 74.248.33.8:37237] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:08.800418 2026] [core:error] [pid 2812873:tid 2812873] (13)Permission denied: [client 216.73.216.199:42691] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/iptables-config
[Thu Jul 30 11:02:08.955825 2026] [core:error] [pid 2808147:tid 2808147] [client 74.248.33.8:20465] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:08.955852 2026] [core:error] [pid 2808147:tid 2808147] [client 74.248.33.8:20465] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:09.193210 2026] [core:error] [pid 2814709:tid 2814709] [client 74.248.33.8:37213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:09.193251 2026] [core:error] [pid 2814709:tid 2814709] [client 74.248.33.8:37213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:09.981627 2026] [ssl:error] [pid 2809559:tid 2809559] (70014)End of file found: [client 216.73.216.199:44701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:10.220584 2026] [security2:error] [pid 2805999:tid 2805999] [client 85.208.96.200:53524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/what-is-pharyngeal-stasis"] [unique_id "amshIie1SdbzYMmqO-owZgAAADE"]
[Thu Jul 30 11:02:10.794299 2026] [ssl:error] [pid 2813853:tid 2813853] (EAI 2)Name or service not known: [client 144.76.19.72:50878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:10.794334 2026] [ssl:error] [pid 2813853:tid 2813853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:10.846028 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:50890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:10.846056 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:11.189954 2026] [ssl:error] [pid 2814709:tid 2814709] (70014)End of file found: [client 216.73.216.199:46105] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:11.372248 2026] [security2:error] [pid 2813444:tid 2813444] [client 43.165.167.72:33988] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "amshI7CmIDCaJHvb1tRq_gAAABk"]
[Thu Jul 30 11:02:11.624773 2026] [authz_core:error] [pid 2805999:tid 2805999] [client 85.204.70.116:33032] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:02:11.913601 2026] [authz_core:error] [pid 2805999:tid 2805999] [client 85.204.70.116:33032] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:02:12.273742 2026] [authz_core:error] [pid 2805999:tid 2805999] [client 85.204.70.116:33032] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:02:12.391613 2026] [authz_core:error] [pid 2813974:tid 2813974] [client 216.73.216.199:12295] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 11:02:12.709785 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:28971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:12.709807 2026] [core:error] [pid 2810653:tid 2810653] [client 74.248.33.8:28971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:12.983839 2026] [security2:error] [pid 2800094:tid 2800094] [client 43.165.167.72:58426] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "amshJKKDoitaxb2aW5D4wAAAACw"], referer: http://www.chateausaintjeannet.com
[Thu Jul 30 11:02:13.093905 2026] [core:error] [pid 2814710:tid 2814710] [client 74.248.33.8:38789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:13.093936 2026] [core:error] [pid 2814710:tid 2814710] [client 74.248.33.8:38789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:13.293180 2026] [core:error] [pid 2813974:tid 2813974] (13)Permission denied: [client 216.73.216.199:12295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-1k/free_calls
[Thu Jul 30 11:02:13.663003 2026] [core:error] [pid 2813947:tid 2813947] [client 74.248.33.8:32168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:13.663034 2026] [core:error] [pid 2813947:tid 2813947] [client 74.248.33.8:32168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:13.902572 2026] [ssl:error] [pid 2813008:tid 2813008] (EAI 2)Name or service not known: [client 144.76.19.72:50904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:13.902608 2026] [ssl:error] [pid 2813008:tid 2813008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:13.963132 2026] [ssl:error] [pid 2805765:tid 2805765] (EAI 2)Name or service not known: [client 144.76.19.72:50910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:13.963163 2026] [ssl:error] [pid 2805765:tid 2805765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:14.172619 2026] [cgi:error] [pid 2814755:tid 2814755] [client 66.132.195.100:51922] AH02812: stderr from /home/pbyawsga/akoptimize.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://www.akoptimize.co.uk:80/cgi-bin
[Thu Jul 30 11:02:14.199867 2026] [core:error] [pid 2813974:tid 2813974] (13)Permission denied: [client 216.73.216.199:12295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_extent_status/free_calls
[Thu Jul 30 11:02:14.236251 2026] [core:error] [pid 2813947:tid 2813947] [client 74.248.33.8:64394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:14.236276 2026] [core:error] [pid 2813947:tid 2813947] [client 74.248.33.8:64394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:14.895357 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:32131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:14.895399 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:32131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:15.180647 2026] [core:error] [pid 2812569:tid 2812569] [client 74.248.33.8:28941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:15.180678 2026] [core:error] [pid 2812569:tid 2812569] [client 74.248.33.8:28941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:15.321939 2026] [authz_core:error] [pid 2812873:tid 2812873] [client 66.249.66.33:42779] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:02:15.324627 2026] [authz_core:error] [pid 2812873:tid 2812873] [client 66.249.66.33:42779] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:02:15.540687 2026] [core:error] [pid 2815133:tid 2815133] [client 74.248.33.8:43621] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:15.540723 2026] [core:error] [pid 2815133:tid 2815133] [client 74.248.33.8:43621] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:16.434862 2026] [core:error] [pid 2815347:tid 2815347] [client 74.248.33.8:28951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:16.434908 2026] [core:error] [pid 2815347:tid 2815347] [client 74.248.33.8:28951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:17.019761 2026] [ssl:error] [pid 2807173:tid 2807173] (EAI 2)Name or service not known: [client 144.76.19.72:50912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:17.019796 2026] [ssl:error] [pid 2807173:tid 2807173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:17.073914 2026] [ssl:error] [pid 2814709:tid 2814709] (EAI 2)Name or service not known: [client 144.76.19.72:50918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:17.073943 2026] [ssl:error] [pid 2814709:tid 2814709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:17.208297 2026] [core:error] [pid 2813974:tid 2813974] (13)Permission denied: [client 216.73.216.199:12295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/xt_owner/uevent
[Thu Jul 30 11:02:17.279941 2026] [security2:error] [pid 2813008:tid 2813008] [client 43.130.57.46:48906] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tartanbag.com"] [uri "/"] [unique_id "amshKV4CAnOXJq2w7I5d3AAAACQ"]
[Thu Jul 30 11:02:17.509724 2026] [ssl:error] [pid 2813974:tid 2813974] (70014)End of file found: [client 216.73.216.199:12295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:17.999951 2026] [ssl:error] [pid 2813853:tid 2813853] (70014)End of file found: [client 216.73.216.199:41428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:18.064997 2026] [core:error] [pid 2812975:tid 2812975] [client 74.248.33.8:38840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:18.065033 2026] [core:error] [pid 2812975:tid 2812975] [client 74.248.33.8:38840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:18.977154 2026] [core:error] [pid 2813444:tid 2813444] [client 74.248.33.8:32178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:18.977179 2026] [core:error] [pid 2813444:tid 2813444] [client 74.248.33.8:32178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:19.019900 2026] [ssl:error] [pid 2815133:tid 2815133] (70014)End of file found: [client 216.73.216.199:38408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:19.349613 2026] [core:error] [pid 2813975:tid 2813975] [client 74.248.33.8:64008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:19.349639 2026] [core:error] [pid 2813975:tid 2813975] [client 74.248.33.8:64008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:20.130263 2026] [ssl:error] [pid 2814755:tid 2814755] (EAI 2)Name or service not known: [client 144.76.19.72:39036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:20.130312 2026] [ssl:error] [pid 2814755:tid 2814755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:20.183684 2026] [ssl:error] [pid 2813006:tid 2813006] (EAI 2)Name or service not known: [client 144.76.19.72:39044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:20.183711 2026] [ssl:error] [pid 2813006:tid 2813006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:20.329838 2026] [core:error] [pid 2812976:tid 2812976] [client 74.248.33.8:37257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:20.329862 2026] [core:error] [pid 2812976:tid 2812976] [client 74.248.33.8:37257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:20.673340 2026] [core:error] [pid 2810296:tid 2810296] [client 74.248.33.8:28947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:20.673373 2026] [core:error] [pid 2810296:tid 2810296] [client 74.248.33.8:28947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:22.348535 2026] [core:error] [pid 2810296:tid 2810296] [client 74.248.33.8:63913] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:22.348577 2026] [core:error] [pid 2810296:tid 2810296] [client 74.248.33.8:63913] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:22.822955 2026] [core:error] [pid 2812569:tid 2812569] [client 74.248.33.8:43588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:22.822982 2026] [core:error] [pid 2812569:tid 2812569] [client 74.248.33.8:43588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:22.932622 2026] [ssl:error] [pid 2805765:tid 2805765] (70014)End of file found: [client 216.73.216.199:39996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:23.257905 2026] [ssl:error] [pid 2813444:tid 2813444] (EAI 2)Name or service not known: [client 144.76.19.72:39046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:23.257937 2026] [ssl:error] [pid 2813444:tid 2813444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:23.313849 2026] [ssl:error] [pid 2815347:tid 2815347] (EAI 2)Name or service not known: [client 144.76.19.72:39058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:23.313879 2026] [ssl:error] [pid 2815347:tid 2815347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:23.418025 2026] [ssl:error] [pid 2812569:tid 2812569] (70014)End of file found: [client 216.73.216.199:20477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:23.618035 2026] [lsapi:warn] [pid 2813008:tid 2813008] [client 81.168.48.55:49652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/url?q=https://brodie-engineering.co.uk/contact/&sa=U&sqi=2&ved=2ahUKEwidurLXkvqVAxUvUUEAHYzhHc4QjBB6BAgaEAc&usg=AOvVaw0ATkA4JhaL8eG5o3K1jDyY
[Thu Jul 30 11:02:23.618091 2026] [lsapi:warn] [pid 2813008:tid 2813008] [client 81.168.48.55:49652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/url?q=https://brodie-engineering.co.uk/contact/&sa=U&sqi=2&ved=2ahUKEwidurLXkvqVAxUvUUEAHYzhHc4QjBB6BAgaEAc&usg=AOvVaw0ATkA4JhaL8eG5o3K1jDyY
[Thu Jul 30 11:02:23.703999 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:14762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:23.704022 2026] [core:error] [pid 2800094:tid 2800094] [client 74.248.33.8:14762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:23.903404 2026] [authz_core:error] [pid 2813947:tid 2813947] [client 139.162.177.81:60452] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiologymerseyside.co.uk
[Thu Jul 30 11:02:23.906076 2026] [authz_core:error] [pid 2813947:tid 2813947] [client 139.162.177.81:60452] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiologymerseyside.co.uk
[Thu Jul 30 11:02:24.224218 2026] [core:error] [pid 2813974:tid 2813974] [client 74.248.33.8:24643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:24.224247 2026] [core:error] [pid 2813974:tid 2813974] [client 74.248.33.8:24643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:24.373482 2026] [security2:error] [pid 2813853:tid 2813853] [client 103.159.195.205:52490] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshMHnaL2zygbh4S6EFsQAAAAU"]
[Thu Jul 30 11:02:24.373533 2026] [security2:error] [pid 2813853:tid 2813853] [client 103.159.195.205:52490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshMHnaL2zygbh4S6EFsQAAAAU"]
[Thu Jul 30 11:02:24.373796 2026] [security2:error] [pid 2813853:tid 2813853] [client 103.159.195.205:52490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshMHnaL2zygbh4S6EFsQAAAAU"]
[Thu Jul 30 11:02:24.839189 2026] [security2:error] [pid 2804463:tid 2804463] [client 43.157.158.178:45598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amshMFrNjiKUfL2aX5rBfgAAACk"]
[Thu Jul 30 11:02:25.383275 2026] [security2:error] [pid 2813947:tid 2813947] [client 74.7.227.128:57618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/"] [unique_id "amshMbPV6YmMbr6P3LX7nAAAABU"]
[Thu Jul 30 11:02:25.643332 2026] [ssl:error] [pid 2801550:tid 2801550] (70014)End of file found: [client 216.73.216.199:2030] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:26.922002 2026] [security2:error] [pid 2815670:tid 2815670] [client 114.119.146.111:23687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/june-2022/"] [unique_id "amshMmjKSCy2vz5JUiNiUAAAAAo"], referer: https://www.erskinenazarene.co.uk/sitemap/
[Thu Jul 30 11:02:27.026096 2026] [ssl:error] [pid 2815917:tid 2815917] (EAI 2)Name or service not known: [client 144.76.19.72:39066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:27.026138 2026] [ssl:error] [pid 2815917:tid 2815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:27.054261 2026] [security2:error] [pid 2815917:tid 2815917] [client 14.178.10.214:33162] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshM6aaevkErbrabVwk7gAAADM"]
[Thu Jul 30 11:02:27.054304 2026] [security2:error] [pid 2815917:tid 2815917] [client 14.178.10.214:33162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshM6aaevkErbrabVwk7gAAADM"]
[Thu Jul 30 11:02:27.054609 2026] [security2:error] [pid 2815917:tid 2815917] [client 14.178.10.214:33162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshM6aaevkErbrabVwk7gAAADM"]
[Thu Jul 30 11:02:27.346269 2026] [ssl:error] [pid 2813975:tid 2813975] (EAI 2)Name or service not known: [client 144.76.19.72:39078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:27.346303 2026] [ssl:error] [pid 2813975:tid 2813975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:28.166685 2026] [security2:error] [pid 2813008:tid 2813008] [client 114.119.146.111:23693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/june-2022/"] [unique_id "amshNF4CAnOXJq2w7I5d4wAAACQ"], referer: https://www.erskinenazarene.co.uk/sitemap/
[Thu Jul 30 11:02:28.253678 2026] [core:error] [pid 2813444:tid 2813444] (13)Permission denied: [client 216.73.216.199:60344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/free_calls
[Thu Jul 30 11:02:28.652474 2026] [ssl:error] [pid 2813444:tid 2813444] (70014)End of file found: [client 216.73.216.199:60344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:28.985230 2026] [core:error] [pid 2815810:tid 2815810] [client 74.248.33.8:25563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:28.985269 2026] [core:error] [pid 2815810:tid 2815810] [client 74.248.33.8:25563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:29.195396 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 20.206.204.219:62138] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:02:30.155047 2026] [core:error] [pid 2815979:tid 2815979] [client 74.248.33.8:63752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:30.155085 2026] [core:error] [pid 2815979:tid 2815979] [client 74.248.33.8:63752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:30.403389 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:20486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:30.403424 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:30.456013 2026] [ssl:error] [pid 2807231:tid 2807231] (EAI 2)Name or service not known: [client 144.76.19.72:20496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:30.456044 2026] [ssl:error] [pid 2807231:tid 2807231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:30.761199 2026] [ssl:error] [pid 2815978:tid 2815978] (70014)End of file found: [client 216.73.216.199:2141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:31.214623 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:31794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:31.214653 2026] [core:error] [pid 2810226:tid 2810226] [client 74.248.33.8:31794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:31.508803 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:26574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:31.508828 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:26574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:32.274424 2026] [security2:error] [pid 2812976:tid 2812976] [client 177.22.180.140:50654] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshOIn1fNdQIEPvAltopwAAABc"]
[Thu Jul 30 11:02:32.274483 2026] [security2:error] [pid 2812976:tid 2812976] [client 177.22.180.140:50654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshOIn1fNdQIEPvAltopwAAABc"]
[Thu Jul 30 11:02:32.274742 2026] [security2:error] [pid 2812976:tid 2812976] [client 177.22.180.140:50654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshOIn1fNdQIEPvAltopwAAABc"]
[Thu Jul 30 11:02:32.275196 2026] [security2:error] [pid 2815856:tid 2815856] [client 47.128.52.95:15166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thestringman.co.uk"] [uri "/robots.txt"] [unique_id "amshOCgD_fHdgL6VOUTyYAAAACo"]
[Thu Jul 30 11:02:33.511619 2026] [ssl:error] [pid 2814710:tid 2814710] (EAI 2)Name or service not known: [client 144.76.19.72:20502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:33.511659 2026] [ssl:error] [pid 2814710:tid 2814710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:33.567511 2026] [ssl:error] [pid 2805765:tid 2805765] (EAI 2)Name or service not known: [client 144.76.19.72:20508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:33.567540 2026] [ssl:error] [pid 2805765:tid 2805765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:34.451852 2026] [security2:error] [pid 2805765:tid 2805765] [client 43.134.91.35:39690] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amshOoBZWQyOsr5OZUNydAAAABg"]
[Thu Jul 30 11:02:34.544979 2026] [core:crit] [pid 2813444:tid 2813444] (13)Permission denied: [client 63.177.183.229:22165] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 11:02:34.545032 2026] [authz_core:error] [pid 2813444:tid 2813444] [client 63.177.183.229:22165] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 11:02:34.545482 2026] [core:crit] [pid 2813444:tid 2813444] (13)Permission denied: [client 63.177.183.229:22165] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 11:02:34.545500 2026] [core:crit] [pid 2813444:tid 2813444] (13)Permission denied: [client 63.177.183.229:22165] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 11:02:34.545534 2026] [core:crit] [pid 2813444:tid 2813444] (13)Permission denied: [client 63.177.183.229:22165] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 11:02:35.396811 2026] [security2:error] [pid 2813444:tid 2813444] [client 43.134.91.35:40714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amshO7CmIDCaJHvb1tRrBwAAABk"], referer: http://somethingweb.co.uk
[Thu Jul 30 11:02:35.545756 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:18261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:35.545787 2026] [core:error] [pid 2812873:tid 2812873] [client 74.248.33.8:18261] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:35.924213 2026] [security2:error] [pid 2813414:tid 2813414] [client 47.128.24.50:57946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amshO82DPOc2mYq0qPduqQAAAA4"]
[Thu Jul 30 11:02:36.584647 2026] [core:error] [pid 2805765:tid 2805765] [client 74.248.33.8:26571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:36.584670 2026] [core:error] [pid 2805765:tid 2805765] [client 74.248.33.8:26571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:36.619435 2026] [ssl:error] [pid 2809559:tid 2809559] (EAI 2)Name or service not known: [client 144.76.19.72:20524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:36.619460 2026] [ssl:error] [pid 2809559:tid 2809559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:36.744540 2026] [ssl:error] [pid 2813444:tid 2813444] (EAI 2)Name or service not known: [client 144.76.19.72:20538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:36.744591 2026] [ssl:error] [pid 2813444:tid 2813444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:36.898344 2026] [security2:error] [pid 2813947:tid 2813947] [client 43.134.91.35:51390] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amshPLPV6YmMbr6P3LX7oAAAABU"], referer: http://mwdesign.me.uk
[Thu Jul 30 11:02:37.035325 2026] [security2:error] [pid 2815973:tid 2815973] [client 43.134.91.35:51302] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amshPdRiMTxhO6JQmQCa2wAAADU"], referer: http://mwdesign.me.uk
[Thu Jul 30 11:02:37.219145 2026] [authz_core:error] [pid 2815912:tid 2815912] [client 66.249.66.33:61969] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:02:37.221798 2026] [authz_core:error] [pid 2815912:tid 2815912] [client 66.249.66.33:61969] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:02:37.330432 2026] [core:error] [pid 2810296:tid 2810296] [client 74.248.33.8:25562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:37.330456 2026] [core:error] [pid 2810296:tid 2810296] [client 74.248.33.8:25562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:37.523463 2026] [core:error] [pid 2813414:tid 2813414] [client 66.249.64.171:43233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:37.523494 2026] [core:error] [pid 2813414:tid 2813414] [client 66.249.64.171:43233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:37.687022 2026] [core:error] [pid 2813974:tid 2813974] [client 74.248.33.8:14815] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:37.687046 2026] [core:error] [pid 2813974:tid 2813974] [client 74.248.33.8:14815] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:37.901840 2026] [core:error] [pid 2809559:tid 2809559] [client 66.249.64.172:63559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:37.901873 2026] [core:error] [pid 2809559:tid 2809559] [client 66.249.64.172:63559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:38.201646 2026] [core:error] [pid 2813444:tid 2813444] [client 74.248.33.8:14830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:38.201671 2026] [core:error] [pid 2813444:tid 2813444] [client 74.248.33.8:14830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:38.978717 2026] [core:error] [pid 2815810:tid 2815810] [client 74.248.33.8:25545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:38.978741 2026] [core:error] [pid 2815810:tid 2815810] [client 74.248.33.8:25545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:38.990733 2026] [security2:error] [pid 2801550:tid 2801550] [client 1.13.158.23:49980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highcleresyndicates.co.uk"] [uri "/"] [unique_id "amshPthAx77JCtw8kSElBwAAAAk"]
[Thu Jul 30 11:02:39.120948 2026] [authz_core:error] [pid 2814684:tid 2814684] [client 40.77.167.74:2257] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:02:39.121714 2026] [authz_core:error] [pid 2814684:tid 2814684] [client 40.77.167.74:2257] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:02:39.231674 2026] [ssl:error] [pid 2807231:tid 2807231] (70014)End of file found: [client 216.73.216.199:6719] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:39.489388 2026] [core:error] [pid 2815981:tid 2815981] [client 74.248.33.8:33182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:39.489415 2026] [core:error] [pid 2815981:tid 2815981] [client 74.248.33.8:33182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:39.682155 2026] [authz_core:error] [pid 2814755:tid 2814755] [client 20.206.204.219:64187] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:02:39.712868 2026] [ssl:error] [pid 2813518:tid 2813518] (70014)End of file found: [client 216.73.216.199:23878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:39.799672 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:27630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:39.799707 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:39.854646 2026] [ssl:error] [pid 2813414:tid 2813414] (EAI 2)Name or service not known: [client 144.76.19.72:27636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:39.854682 2026] [ssl:error] [pid 2813414:tid 2813414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:40.100318 2026] [core:error] [pid 2815810:tid 2815810] [client 74.248.33.8:26568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:40.100340 2026] [core:error] [pid 2815810:tid 2815810] [client 74.248.33.8:26568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:41.817445 2026] [ssl:error] [pid 2810296:tid 2810296] (70014)End of file found: [client 216.73.216.199:35042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:42.737169 2026] [security2:error] [pid 2815980:tid 2815980] [client 85.208.96.193:60240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7162.0.html"] [unique_id "amshQugmgC9mtOqG4J-JCAAAADs"]
[Thu Jul 30 11:02:42.909328 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:27646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:42.909362 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:42.962385 2026] [ssl:error] [pid 2815915:tid 2815915] (EAI 2)Name or service not known: [client 144.76.19.72:27650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:42.962417 2026] [ssl:error] [pid 2815915:tid 2815915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:43.898203 2026] [core:error] [pid 2815980:tid 2815980] [client 66.249.64.171:61136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:43.898233 2026] [core:error] [pid 2815980:tid 2815980] [client 66.249.64.171:61136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:44.730909 2026] [security2:error] [pid 2815972:tid 2815972] [client 216.73.216.199:55776] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/imunify360.db"] [unique_id "amshRDUnqVvzbgN83fHqCQAAADQ"]
[Thu Jul 30 11:02:44.731224 2026] [security2:error] [pid 2815972:tid 2815972] [client 216.73.216.199:55776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/imunify360.db"] [unique_id "amshRDUnqVvzbgN83fHqCQAAADQ"]
[Thu Jul 30 11:02:44.731441 2026] [security2:error] [pid 2815972:tid 2815972] [client 216.73.216.199:55776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/imunify360.db"] [unique_id "amshRDUnqVvzbgN83fHqCQAAADQ"]
[Thu Jul 30 11:02:44.844975 2026] [ssl:error] [pid 2815972:tid 2815972] (70014)End of file found: [client 216.73.216.199:55776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:45.188299 2026] [core:error] [pid 2815857:tid 2815857] [client 66.249.66.167:47903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:45.188324 2026] [core:error] [pid 2815857:tid 2815857] [client 66.249.66.167:47903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:45.650285 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:58996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:02:45.650328 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:58996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:02:45.652513 2026] [lsapi:warn] [pid 2813947:tid 2813947] [client 20.52.54.143:12544] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:02:45.652570 2026] [lsapi:warn] [pid 2813947:tid 2813947] [client 20.52.54.143:12544] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:02:46.016453 2026] [ssl:error] [pid 2812976:tid 2812976] (EAI 2)Name or service not known: [client 144.76.19.72:27662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:46.016487 2026] [ssl:error] [pid 2812976:tid 2812976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:46.071599 2026] [ssl:error] [pid 2817014:tid 2817014] (EAI 2)Name or service not known: [client 144.76.19.72:27664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:46.071639 2026] [ssl:error] [pid 2817014:tid 2817014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:47.086345 2026] [core:error] [pid 2814755:tid 2814755] [client 66.249.64.170:44172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:47.086391 2026] [core:error] [pid 2814755:tid 2814755] [client 66.249.64.170:44172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:02:47.858258 2026] [core:error] [pid 2814684:tid 2814684] (13)Permission denied: [client 216.73.216.199:28860] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/serio/drivers/atkbd/bind
[Thu Jul 30 11:02:49.129580 2026] [ssl:error] [pid 2813008:tid 2813008] (EAI 2)Name or service not known: [client 144.76.19.72:27672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:49.129606 2026] [ssl:error] [pid 2813008:tid 2813008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:49.184428 2026] [ssl:error] [pid 2807231:tid 2807231] (EAI 2)Name or service not known: [client 144.76.19.72:27674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:49.184457 2026] [ssl:error] [pid 2807231:tid 2807231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:49.510813 2026] [security2:error] [pid 2813445:tid 2813445] [client 141.94.94.45:56866] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshScpHUhnka2Fq9WoS3gAAACc"]
[Thu Jul 30 11:02:49.510862 2026] [security2:error] [pid 2813445:tid 2813445] [client 141.94.94.45:56866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshScpHUhnka2Fq9WoS3gAAACc"]
[Thu Jul 30 11:02:49.511126 2026] [security2:error] [pid 2813445:tid 2813445] [client 141.94.94.45:56866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshScpHUhnka2Fq9WoS3gAAACc"]
[Thu Jul 30 11:02:49.600049 2026] [security2:error] [pid 2807343:tid 2807343] [client 51.75.24.242:50482] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshSRBdkdRpZ6mRhYKuKgAAACs"]
[Thu Jul 30 11:02:49.600136 2026] [security2:error] [pid 2807343:tid 2807343] [client 51.75.24.242:50482] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshSRBdkdRpZ6mRhYKuKgAAACs"]
[Thu Jul 30 11:02:49.600400 2026] [security2:error] [pid 2807343:tid 2807343] [client 51.75.24.242:50482] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshSRBdkdRpZ6mRhYKuKgAAACs"]
[Thu Jul 30 11:02:49.977854 2026] [ssl:error] [pid 2813974:tid 2813974] (70014)End of file found: [client 216.73.216.199:28122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:50.569522 2026] [authz_core:error] [pid 2813853:tid 2813853] [client 20.206.204.219:49747] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:02:52.241856 2026] [ssl:error] [pid 2815810:tid 2815810] (EAI 2)Name or service not known: [client 144.76.19.72:22218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:52.241893 2026] [ssl:error] [pid 2815810:tid 2815810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:52.294477 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:22222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:52.294513 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:52.426312 2026] [cgi:error] [pid 2814684:tid 2814684] [client 216.73.216.199:28860] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/sslecho.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:02:52.426371 2026] [cgi:error] [pid 2814684:tid 2814684] [client 216.73.216.199:28860] End of script output before headers: sslecho.pl
[Thu Jul 30 11:02:52.669279 2026] [security2:error] [pid 2815981:tid 2815981] [client 213.32.68.86:34942] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshTIBTTHyycykT_X2J1gAAADw"]
[Thu Jul 30 11:02:52.669323 2026] [security2:error] [pid 2815981:tid 2815981] [client 213.32.68.86:34942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshTIBTTHyycykT_X2J1gAAADw"]
[Thu Jul 30 11:02:52.669601 2026] [security2:error] [pid 2815981:tid 2815981] [client 213.32.68.86:34942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshTIBTTHyycykT_X2J1gAAADw"]
[Thu Jul 30 11:02:52.707982 2026] [ssl:error] [pid 2813444:tid 2813444] (70014)End of file found: [client 216.73.216.199:41010] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:52.760730 2026] [security2:error] [pid 2815347:tid 2815347] [client 141.94.95.76:37836] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshTML09RlEQiWHGlR6wwAAABA"]
[Thu Jul 30 11:02:52.760775 2026] [security2:error] [pid 2815347:tid 2815347] [client 141.94.95.76:37836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshTML09RlEQiWHGlR6wwAAABA"]
[Thu Jul 30 11:02:52.761023 2026] [security2:error] [pid 2815347:tid 2815347] [client 141.94.95.76:37836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshTML09RlEQiWHGlR6wwAAABA"]
[Thu Jul 30 11:02:53.637511 2026] [ssl:error] [pid 2813853:tid 2813853] (70014)End of file found: [client 216.73.216.199:33926] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:54.583861 2026] [security2:error] [pid 2813445:tid 2813445] [client 141.94.94.121:52134] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshTspHUhnka2Fq9WoS3wAAACc"]
[Thu Jul 30 11:02:54.583917 2026] [security2:error] [pid 2813445:tid 2813445] [client 141.94.94.121:52134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshTspHUhnka2Fq9WoS3wAAACc"]
[Thu Jul 30 11:02:54.584153 2026] [security2:error] [pid 2813445:tid 2813445] [client 141.94.94.121:52134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshTspHUhnka2Fq9WoS3wAAACc"]
[Thu Jul 30 11:02:54.635597 2026] [security2:error] [pid 2807343:tid 2807343] [client 141.94.95.178:47086] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshThBdkdRpZ6mRhYKuKwAAACs"]
[Thu Jul 30 11:02:54.635648 2026] [security2:error] [pid 2807343:tid 2807343] [client 141.94.95.178:47086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshThBdkdRpZ6mRhYKuKwAAACs"]
[Thu Jul 30 11:02:54.635895 2026] [security2:error] [pid 2807343:tid 2807343] [client 141.94.95.178:47086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshThBdkdRpZ6mRhYKuKwAAACs"]
[Thu Jul 30 11:02:55.052345 2026] [security2:error] [pid 2817440:tid 2817440] [client 74.7.241.31:49004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "gpl.org.uk"] [uri "/"] [unique_id "amshT0In1TgRB4cjIl13GQAAABI"], referer: https://pudhe.com
[Thu Jul 30 11:02:55.364677 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:22230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:55.364715 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:55.500405 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:22236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:55.500428 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:57.605667 2026] [ssl:error] [pid 2817394:tid 2817394] (70014)End of file found: [client 216.73.216.199:22498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:02:58.579605 2026] [ssl:error] [pid 2807173:tid 2807173] (EAI 2)Name or service not known: [client 144.76.19.72:22248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:58.579638 2026] [ssl:error] [pid 2807173:tid 2807173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:58.634192 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:22252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:02:58.634213 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:02:58.637632 2026] [authz_core:error] [pid 2815915:tid 2815915] [client 20.206.204.219:51365] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:02:58.709665 2026] [security2:error] [pid 2807341:tid 2807341] [client 49.51.36.179:57654] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amshUmTFYQld72XeAz2ZhwAAACI"]
[Thu Jul 30 11:02:59.628546 2026] [security2:error] [pid 2801550:tid 2801550] [client 185.191.171.7:44658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5451.0.html"] [unique_id "amshU9hAx77JCtw8kSElDwAAAAk"]
[Thu Jul 30 11:02:59.716731 2026] [ssl:error] [pid 2812765:tid 2812765] (70014)End of file found: [client 216.73.216.199:25468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:01.227769 2026] [core:error] [pid 2813414:tid 2813414] (13)Permission denied: [client 216.73.216.199:41560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/ditchlingfair.com.db
[Thu Jul 30 11:03:01.566110 2026] [security2:error] [pid 2814757:tid 2814757] [client 43.135.211.148:53948] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.org.uk"] [uri "/"] [unique_id "amshVXgkkNIxirlq5YCguQAAACU"]
[Thu Jul 30 11:03:01.688931 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:25612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:01.688964 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:01.733577 2026] [security2:error] [pid 2815976:tid 2815976] [client 43.164.3.182:49110] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amshVX2wfRsr1NZgeQ2wcAAAADc"]
[Thu Jul 30 11:03:01.743783 2026] [ssl:error] [pid 2813008:tid 2813008] (EAI 2)Name or service not known: [client 144.76.19.72:25622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:01.743810 2026] [ssl:error] [pid 2813008:tid 2813008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:02.193391 2026] [security2:error] [pid 2814756:tid 2814756] [client 129.159.56.14:58310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amshVsUVwYg3KenWYOe9UQAAACE"]
[Thu Jul 30 11:03:02.193586 2026] [security2:error] [pid 2814756:tid 2814756] [client 129.159.56.14:58310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amshVsUVwYg3KenWYOe9UQAAACE"]
[Thu Jul 30 11:03:02.459005 2026] [security2:error] [pid 2801550:tid 2801550] [client 43.135.115.233:57284] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "amshVthAx77JCtw8kSElEQAAAAk"]
[Thu Jul 30 11:03:02.755156 2026] [ssl:error] [pid 2813414:tid 2813414] (70014)End of file found: [client 216.73.216.199:41560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:02.956572 2026] [security2:error] [pid 2814756:tid 2814756] [client 129.159.56.14:58310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.dev1.the-pryors.co.uk"] [uri "/index.php"] [unique_id "amshVsUVwYg3KenWYOe9UQAAACE"]
[Thu Jul 30 11:03:03.601246 2026] [security2:error] [pid 2801350:tid 2801350] [client 43.135.211.148:56350] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amshV00Eer-sXseg2GgvrAAAAAQ"], referer: http://shelterforum.org.uk
[Thu Jul 30 11:03:03.698729 2026] [security2:error] [pid 2815856:tid 2815856] [client 129.159.56.14:58314] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amshVygD_fHdgL6VOUTybgAAACo"], referer: https://www.dev1.the-pryors.co.uk/.env
[Thu Jul 30 11:03:03.698925 2026] [security2:error] [pid 2815856:tid 2815856] [client 129.159.56.14:58314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dev1.the-pryors.co.uk"] [uri "/.env"] [unique_id "amshVygD_fHdgL6VOUTybgAAACo"], referer: https://www.dev1.the-pryors.co.uk/.env
[Thu Jul 30 11:03:03.984624 2026] [security2:error] [pid 2815856:tid 2815856] [client 129.159.56.14:58314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dev1.the-pryors.co.uk"] [uri "/index.php"] [unique_id "amshVygD_fHdgL6VOUTybgAAACo"], referer: https://www.dev1.the-pryors.co.uk/.env
[Thu Jul 30 11:03:04.586874 2026] [ssl:error] [pid 2813518:tid 2813518] (70014)End of file found: [client 216.73.216.199:61535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:04.800439 2026] [ssl:error] [pid 2814757:tid 2814757] (EAI 2)Name or service not known: [client 144.76.19.72:25624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:04.800477 2026] [ssl:error] [pid 2814757:tid 2814757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:04.849025 2026] [security2:error] [pid 2814756:tid 2814756] [client 43.165.67.31:53450] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amshWMUVwYg3KenWYOe9UwAAACE"]
[Thu Jul 30 11:03:04.855353 2026] [ssl:error] [pid 2815856:tid 2815856] (EAI 2)Name or service not known: [client 144.76.19.72:25626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:04.855379 2026] [ssl:error] [pid 2815856:tid 2815856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:05.101463 2026] [ssl:error] [pid 2817492:tid 2817492] (70014)End of file found: [client 216.73.216.199:48500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:07.200614 2026] [security2:error] [pid 2814757:tid 2814757] [client 43.165.67.31:48732] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amshW3gkkNIxirlq5YCgvAAAACU"], referer: http://hornsey-town-hall.org.uk
[Thu Jul 30 11:03:07.914514 2026] [ssl:error] [pid 2815856:tid 2815856] (EAI 2)Name or service not known: [client 144.76.19.72:25630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:07.914548 2026] [ssl:error] [pid 2815856:tid 2815856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:07.968850 2026] [ssl:error] [pid 2809559:tid 2809559] (EAI 2)Name or service not known: [client 144.76.19.72:25644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:07.968878 2026] [ssl:error] [pid 2809559:tid 2809559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:08.602221 2026] [ssl:error] [pid 2815347:tid 2815347] (70014)End of file found: [client 216.73.216.199:4915] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:10.724049 2026] [access_compat:error] [pid 2813445:tid 2813445] [client 5.127.0.46:46934] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:03:11.025465 2026] [ssl:error] [pid 2814757:tid 2814757] (EAI 2)Name or service not known: [client 144.76.19.72:35468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:11.025490 2026] [ssl:error] [pid 2814757:tid 2814757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:11.118494 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:35476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:11.118522 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:11.678674 2026] [security2:error] [pid 2815915:tid 2815915] [client 43.155.27.244:48996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mjs-services.com"] [uri "/"] [unique_id "amshXyFsXU5ouby01x-7IQAAADI"]
[Thu Jul 30 11:03:11.801577 2026] [security2:error] [pid 2813445:tid 2813445] [client 185.191.171.16:31956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/qr-code-for-covid-test-results-cvs"] [unique_id "amshX8pHUhnka2Fq9WoS4wAAACc"]
[Thu Jul 30 11:03:11.995751 2026] [core:error] [pid 2810224:tid 2810224] [client 66.249.64.170:37930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:11.995781 2026] [core:error] [pid 2810224:tid 2810224] [client 66.249.64.170:37930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:12.009138 2026] [security2:error] [pid 2813414:tid 2813414] [client 169.224.49.193:13938] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshYM2DPOc2mYq0qPdvHwAAAA4"]
[Thu Jul 30 11:03:12.009185 2026] [security2:error] [pid 2813414:tid 2813414] [client 169.224.49.193:13938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshYM2DPOc2mYq0qPdvHwAAAA4"]
[Thu Jul 30 11:03:12.009431 2026] [security2:error] [pid 2813414:tid 2813414] [client 169.224.49.193:13938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshYM2DPOc2mYq0qPdvHwAAAA4"]
[Thu Jul 30 11:03:13.756874 2026] [ssl:error] [pid 2813008:tid 2813008] (70014)End of file found: [client 216.73.216.199:3046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:14.060237 2026] [security2:error] [pid 2815973:tid 2815973] [client 43.155.27.244:46256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mjs-services.com"] [uri "/"] [unique_id "amshYtRiMTxhO6JQmQCa7QAAADU"], referer: http://www.mjs-services.com
[Thu Jul 30 11:03:14.062349 2026] [ssl:error] [pid 2812975:tid 2812975] (70014)End of file found: [client 216.73.216.199:49461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:14.178538 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:35488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:14.178597 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:14.238226 2026] [ssl:error] [pid 2810224:tid 2810224] (EAI 2)Name or service not known: [client 144.76.19.72:35500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:14.238248 2026] [ssl:error] [pid 2810224:tid 2810224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:15.574249 2026] [lsapi:warn] [pid 2813445:tid 2813445] [client 20.48.34.233:42163] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 11:03:15.592045 2026] [ssl:error] [pid 2812976:tid 2812976] (70014)End of file found: [client 216.73.216.199:9016] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:15.758294 2026] [security2:error] [pid 2817491:tid 2817491] [client 110.249.202.52:16152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/robots.txt"] [unique_id "amshY0AilZO4tS3udAvEegAAADA"]
[Thu Jul 30 11:03:16.361533 2026] [lsapi:warn] [pid 2815973:tid 2815973] [client 20.89.48.69:38253] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 11:03:17.292636 2026] [ssl:error] [pid 2807173:tid 2807173] (EAI 2)Name or service not known: [client 144.76.19.72:35506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:17.292674 2026] [ssl:error] [pid 2807173:tid 2807173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:17.345889 2026] [ssl:error] [pid 2812873:tid 2812873] (EAI 2)Name or service not known: [client 144.76.19.72:35514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:17.345924 2026] [ssl:error] [pid 2812873:tid 2812873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:17.465646 2026] [security2:error] [pid 2817394:tid 2817394] [client 177.27.227.125:56935] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshZZ2ofWVP4oLml5ndSQAAABg"]
[Thu Jul 30 11:03:17.465694 2026] [security2:error] [pid 2817394:tid 2817394] [client 177.27.227.125:56935] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amshZZ2ofWVP4oLml5ndSQAAABg"]
[Thu Jul 30 11:03:17.465952 2026] [security2:error] [pid 2817394:tid 2817394] [client 177.27.227.125:56935] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshZZ2ofWVP4oLml5ndSQAAABg"]
[Thu Jul 30 11:03:17.486116 2026] [lsapi:warn] [pid 2815973:tid 2815973] [client 4.223.77.87:15183] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 11:03:18.556822 2026] [lsapi:warn] [pid 2805999:tid 2805999] [client 74.248.137.81:21775] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 11:03:18.997179 2026] [core:error] [pid 2815979:tid 2815979] [client 66.249.66.39:47001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:18.997202 2026] [core:error] [pid 2815979:tid 2815979] [client 66.249.66.39:47001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:18.999817 2026] [core:error] [pid 2818779:tid 2818779] [client 66.249.66.68:56382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:18.999855 2026] [core:error] [pid 2818779:tid 2818779] [client 66.249.66.68:56382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:19.981473 2026] [security2:error] [pid 2817491:tid 2817491] [client 110.249.201.5:30782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/robots.txt"] [unique_id "amshZ0AilZO4tS3udAvEewAAADA"]
[Thu Jul 30 11:03:20.400110 2026] [ssl:error] [pid 2815979:tid 2815979] (EAI 2)Name or service not known: [client 144.76.19.72:29498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:20.400152 2026] [ssl:error] [pid 2815979:tid 2815979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:20.454768 2026] [ssl:error] [pid 2817394:tid 2817394] (EAI 2)Name or service not known: [client 144.76.19.72:29514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:20.454801 2026] [ssl:error] [pid 2817394:tid 2817394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:20.455571 2026] [security2:error] [pid 2812975:tid 2812975] [client 74.7.227.133:43856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.prosperon.co.uk"] [uri "/"] [unique_id "amshaChP3pNcPMs1B0kuNAAAABY"]
[Thu Jul 30 11:03:20.909753 2026] [security2:error] [pid 2812975:tid 2812975] [client 43.130.74.193:57594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "holistic-clear.co.uk"] [uri "/"] [unique_id "amshaChP3pNcPMs1B0kuNQAAABY"]
[Thu Jul 30 11:03:21.087933 2026] [security2:error] [pid 2810296:tid 2810296] [client 110.249.202.70:42348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amshaZBxEX7_yYrf7psUpAAAADk"]
[Thu Jul 30 11:03:21.642318 2026] [ssl:error] [pid 2818779:tid 2818779] (70014)End of file found: [client 216.73.216.199:44441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:21.936471 2026] [authz_core:error] [pid 2810296:tid 2810296] [client 66.249.66.34:36954] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:03:21.939313 2026] [authz_core:error] [pid 2810296:tid 2810296] [client 66.249.66.34:36954] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:03:23.118871 2026] [security2:error] [pid 2812765:tid 2812765] [client 43.155.195.141:39802] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "secretbluestone.co.uk"] [uri "/"] [unique_id "amsha9BES_Vr5_yq9DBFOwAAABE"]
[Thu Jul 30 11:03:23.330576 2026] [security2:error] [pid 2819031:tid 2819031] [client 85.208.98.18:33284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsha-cZJlJKP7QMJZCJEgAAACw"]
[Thu Jul 30 11:03:23.448539 2026] [core:error] [pid 2813008:tid 2813008] (13)Permission denied: [client 216.73.216.199:63109] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/free_calls
[Thu Jul 30 11:03:23.565391 2026] [ssl:error] [pid 2813414:tid 2813414] (EAI 2)Name or service not known: [client 144.76.19.72:29516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:23.565434 2026] [ssl:error] [pid 2813414:tid 2813414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:23.580989 2026] [security2:error] [pid 2817924:tid 2817924] [client 85.208.98.18:29212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsha0Tf51xoIfo3ok0hvAAAAAU"], referer: http://www.georgehotelofstamford.com/robots.txt
[Thu Jul 30 11:03:23.618596 2026] [ssl:error] [pid 2812873:tid 2812873] (EAI 2)Name or service not known: [client 144.76.19.72:29532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:23.618629 2026] [ssl:error] [pid 2812873:tid 2812873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:23.722949 2026] [security2:error] [pid 2810224:tid 2810224] [client 43.130.74.193:41488] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amshaxa78o2mXSJS4cpjMAAAAA8"], referer: http://holistic-clear.co.uk
[Thu Jul 30 11:03:23.724781 2026] [authz_core:error] [pid 2810224:tid 2810224] [client 43.130.74.193:41488] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://holistic-clear.co.uk
[Thu Jul 30 11:03:23.727405 2026] [authz_core:error] [pid 2810224:tid 2810224] [client 43.130.74.193:41488] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://holistic-clear.co.uk
[Thu Jul 30 11:03:23.750468 2026] [ssl:error] [pid 2813008:tid 2813008] (70014)End of file found: [client 216.73.216.199:63109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:24.406738 2026] [security2:error] [pid 2814757:tid 2814757] [client 43.130.39.254:56526] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saliency.co.uk"] [uri "/"] [unique_id "amshbHgkkNIxirlq5YCgwwAAACU"]
[Thu Jul 30 11:03:24.963830 2026] [ssl:error] [pid 2818566:tid 2818566] (70014)End of file found: [client 216.73.216.199:48278] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:25.126043 2026] [security2:error] [pid 2807173:tid 2807173] [client 129.159.56.14:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.dev2.the-pryors.co.uk"] [uri "/.env"] [unique_id "amshbY0hlShS0GzZAQPh5QAAAAE"]
[Thu Jul 30 11:03:25.126222 2026] [security2:error] [pid 2807173:tid 2807173] [client 129.159.56.14:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dev2.the-pryors.co.uk"] [uri "/.env"] [unique_id "amshbY0hlShS0GzZAQPh5QAAAAE"]
[Thu Jul 30 11:03:25.126624 2026] [core:error] [pid 2807173:tid 2807173] [client 129.159.56.14:40950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:25.126754 2026] [security2:error] [pid 2807173:tid 2807173] [client 129.159.56.14:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.dev2.the-pryors.co.uk"] [uri "/.env"] [unique_id "amshbY0hlShS0GzZAQPh5QAAAAE"]
[Thu Jul 30 11:03:25.387849 2026] [security2:error] [pid 2819031:tid 2819031] [client 43.157.172.39:58622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amshbecZJlJKP7QMJZCJFQAAACw"]
[Thu Jul 30 11:03:25.962419 2026] [security2:error] [pid 2817014:tid 2817014] [client 43.130.74.193:34212] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amshbRQt6qmeL5_2s7by-AAAAA0"]
[Thu Jul 30 11:03:25.989566 2026] [security2:error] [pid 2810224:tid 2810224] [client 43.173.1.57:57706] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amshbRa78o2mXSJS4cpjNAAAAA8"]
[Thu Jul 30 11:03:26.672027 2026] [ssl:error] [pid 2813518:tid 2813518] (EAI 2)Name or service not known: [client 144.76.19.72:29538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:26.672061 2026] [ssl:error] [pid 2813518:tid 2813518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:26.724894 2026] [ssl:error] [pid 2814757:tid 2814757] (EAI 2)Name or service not known: [client 144.76.19.72:29546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:26.724920 2026] [ssl:error] [pid 2814757:tid 2814757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:27.368901 2026] [ssl:error] [pid 2817394:tid 2817394] (70014)End of file found: [client 216.73.216.199:54829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:28.183630 2026] [authz_core:error] [pid 2819031:tid 2819031] [client 169.58.39.193:56637] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 11:03:28.491740 2026] [security2:error] [pid 2817491:tid 2817491] [client 43.130.39.254:33278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amshcEAilZO4tS3udAvEgAAAADA"]
[Thu Jul 30 11:03:29.784094 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:49632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:29.784126 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:29.871076 2026] [ssl:error] [pid 2817490:tid 2817490] (EAI 2)Name or service not known: [client 144.76.19.72:49640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:29.871119 2026] [ssl:error] [pid 2817490:tid 2817490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:30.015370 2026] [security2:error] [pid 2814628:tid 2814628] [client 43.130.39.254:34978] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amshcrGG1zMYdCs_TPj4TQAAAAA"], referer: http://swingaddiction.co.uk
[Thu Jul 30 11:03:30.064694 2026] [cgi:error] [pid 2814628:tid 2814628] [client 43.130.39.254:34978] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://swingaddiction.co.uk
[Thu Jul 30 11:03:30.161486 2026] [security2:error] [pid 2817490:tid 2817490] [client 43.157.170.126:48728] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "randomlearner.org.uk"] [uri "/"] [unique_id "amshcmfeTdbMg2oQcisHEQAAACk"]
[Thu Jul 30 11:03:30.396282 2026] [core:error] [pid 2819411:tid 2819411] (13)Permission denied: [client 216.73.216.199:13476] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/sanity_checks
[Thu Jul 30 11:03:30.697792 2026] [security2:error] [pid 2815857:tid 2815857] [client 43.130.74.193:47440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amshcrwXx2CERl4kDMTkVAAAAC0"], referer: http://retrodisco.co.uk
[Thu Jul 30 11:03:30.990587 2026] [ssl:error] [pid 2819411:tid 2819411] (70014)End of file found: [client 216.73.216.199:13476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:31.291759 2026] [security2:error] [pid 2810296:tid 2810296] [client 43.130.39.254:36080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/"] [unique_id "amshc5BxEX7_yYrf7psUrQAAADk"]
[Thu Jul 30 11:03:31.302650 2026] [security2:error] [pid 2817493:tid 2817493] [client 43.135.186.135:54962] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "marcwhiffen.co.uk"] [uri "/"] [unique_id "amshcwyOZFwjLUFFL-AcngAAAD0"]
[Thu Jul 30 11:03:31.303453 2026] [authz_core:error] [pid 2817493:tid 2817493] [client 43.135.186.135:54962] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 11:03:31.894205 2026] [ssl:error] [pid 2807173:tid 2807173] (70014)End of file found: [client 216.73.216.199:16480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:32.017355 2026] [security2:error] [pid 2812976:tid 2812976] [client 170.106.187.106:46662] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amshdIn1fNdQIEPvAltoxgAAABc"]
[Thu Jul 30 11:03:32.851117 2026] [security2:error] [pid 2817394:tid 2817394] [client 43.130.39.254:37828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amshdJ2ofWVP4oLml5ndUgAAABg"], referer: http://all4s.co.uk
[Thu Jul 30 11:03:32.930474 2026] [ssl:error] [pid 2819712:tid 2819712] (EAI 2)Name or service not known: [client 144.76.19.72:49652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:32.930505 2026] [ssl:error] [pid 2819712:tid 2819712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:32.983937 2026] [ssl:error] [pid 2819030:tid 2819030] (EAI 2)Name or service not known: [client 144.76.19.72:49658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:32.983970 2026] [ssl:error] [pid 2819030:tid 2819030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:34.224460 2026] [security2:error] [pid 2819784:tid 2819784] [client 43.157.148.38:34330] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spurr.org.uk"] [uri "/"] [unique_id "amshdt4LI1NOUbdDJwIalAAAAEI"]
[Thu Jul 30 11:03:34.791051 2026] [security2:error] [pid 2813008:tid 2813008] [client 85.208.98.18:43072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amshdl4CAnOXJq2w7I5d_QAAACQ"]
[Thu Jul 30 11:03:35.143703 2026] [security2:error] [pid 2813008:tid 2813008] [client 150.109.10.41:34096] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amshd14CAnOXJq2w7I5d_gAAACQ"]
[Thu Jul 30 11:03:35.638010 2026] [ssl:error] [pid 2801350:tid 2801350] (70014)End of file found: [client 216.73.216.199:34357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:36.037939 2026] [ssl:error] [pid 2819853:tid 2819853] (EAI 2)Name or service not known: [client 144.76.19.72:49672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:36.037973 2026] [ssl:error] [pid 2819853:tid 2819853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:36.096621 2026] [ssl:error] [pid 2819411:tid 2819411] (EAI 2)Name or service not known: [client 144.76.19.72:49686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:36.096661 2026] [ssl:error] [pid 2819411:tid 2819411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:36.444635 2026] [ssl:error] [pid 2818972:tid 2818972] (70014)End of file found: [client 216.73.216.199:46906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:37.706339 2026] [authz_core:error] [pid 2805965:tid 2805965] [client 169.58.39.193:57652] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 11:03:38.654648 2026] [ssl:error] [pid 2819784:tid 2819784] (70014)End of file found: [client 216.73.216.199:39782] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:39.153658 2026] [ssl:error] [pid 2815912:tid 2815912] (EAI 2)Name or service not known: [client 144.76.19.72:49694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:39.153693 2026] [ssl:error] [pid 2815912:tid 2815912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:39.207692 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:49704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:39.207727 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:39.451060 2026] [security2:error] [pid 2819912:tid 2819912] [client 43.156.37.91:60356] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "leaccess.co.uk"] [uri "/"] [unique_id "amshexKut1qT_wTLOozrZwAAAE4"]
[Thu Jul 30 11:03:40.340422 2026] [security2:error] [pid 2805999:tid 2805999] [client 43.134.15.174:35106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amshfCe1SdbzYMmqO-oxQAAAADE"]
[Thu Jul 30 11:03:41.067280 2026] [ssl:error] [pid 2819906:tid 2819906] (70014)End of file found: [client 216.73.216.199:57173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:41.500393 2026] [security2:error] [pid 2807173:tid 2807173] [client 43.134.15.174:37260] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amshfY0hlShS0GzZAQPh9gAAAAE"], referer: http://rogersbarbershopltd.co.uk
[Thu Jul 30 11:03:41.868636 2026] [lsapi:warn] [pid 2813975:tid 2813975] [client 216.73.216.199:17120] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:03:41.868669 2026] [lsapi:error] [pid 2813975:tid 2813975] [client 216.73.216.199:17120] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-services-weather/examples/ejse-basic.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:03:41.919797 2026] [lsapi:warn] [pid 2815133:tid 2815133] [client 103.182.63.251:56262] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:03:41.919846 2026] [lsapi:warn] [pid 2815133:tid 2815133] [client 103.182.63.251:56262] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:03:42.083927 2026] [lsapi:warn] [pid 2815856:tid 2815856] [client 169.224.117.66:38890] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:03:42.083971 2026] [lsapi:warn] [pid 2815856:tid 2815856] [client 169.224.117.66:38890] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:03:42.226229 2026] [security2:error] [pid 2819907:tid 2819907] [client 170.106.147.63:42434] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amshfjobzmR4aXIf_6ww2AAAAEk"]
[Thu Jul 30 11:03:42.265944 2026] [ssl:error] [pid 2799623:tid 2799623] (EAI 2)Name or service not known: [client 144.76.19.72:55090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:42.265972 2026] [ssl:error] [pid 2799623:tid 2799623] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:42.322483 2026] [ssl:error] [pid 2819911:tid 2819911] (EAI 2)Name or service not known: [client 144.76.19.72:55102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:42.322514 2026] [ssl:error] [pid 2819911:tid 2819911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:42.524362 2026] [security2:error] [pid 2812976:tid 2812976] [client 20.171.55.167:9289] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.blow-hairstudio.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amshfon1fNdQIEPvAltoywAAABc"]
[Thu Jul 30 11:03:42.524585 2026] [security2:error] [pid 2812976:tid 2812976] [client 20.171.55.167:9289] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.blow-hairstudio.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amshfon1fNdQIEPvAltoywAAABc"]
[Thu Jul 30 11:03:42.557133 2026] [security2:error] [pid 2812976:tid 2812976] [client 20.171.55.167:9289] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.blow-hairstudio.co.uk"] [uri "/403.shtml"] [unique_id "amshfon1fNdQIEPvAltoywAAABc"]
[Thu Jul 30 11:03:42.996158 2026] [security2:error] [pid 2819909:tid 2819909] [client 43.130.174.37:35800] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amshfsbHQbZZKi6Ewfv39QAAAEs"]
[Thu Jul 30 11:03:43.970175 2026] [security2:error] [pid 2819910:tid 2819910] [client 170.106.147.63:43886] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bes-systems.co.uk"] [uri "/"] [unique_id "amshf5wZdvDRRNztCi6knwAAAEw"]
[Thu Jul 30 11:03:44.057459 2026] [core:crit] [pid 2819909:tid 2819909] (13)Permission denied: [client 24.50.57.215:50354] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 11:03:44.057505 2026] [authz_core:error] [pid 2819909:tid 2819909] [client 24.50.57.215:50354] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 11:03:44.057858 2026] [core:crit] [pid 2819909:tid 2819909] (13)Permission denied: [client 24.50.57.215:50354] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 11:03:44.057876 2026] [core:crit] [pid 2819909:tid 2819909] (13)Permission denied: [client 24.50.57.215:50354] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 11:03:44.057901 2026] [core:crit] [pid 2819909:tid 2819909] (13)Permission denied: [client 24.50.57.215:50354] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 11:03:44.507523 2026] [security2:error] [pid 2815810:tid 2815810] [client 43.160.225.169:45976] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "amshgLFM1XDWMXrM6q5euQAAABs"]
[Thu Jul 30 11:03:44.538008 2026] [security2:error] [pid 2819850:tid 2819850] [client 170.106.147.63:35720] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amshgJshYTqLOy_Kupuv9wAAAEQ"], referer: http://unclaimedassets.co.uk
[Thu Jul 30 11:03:44.601442 2026] [lsapi:warn] [pid 2807231:tid 2807231] [client 117.235.9.37:52036] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:03:44.601485 2026] [lsapi:warn] [pid 2807231:tid 2807231] [client 117.235.9.37:52036] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:03:44.693376 2026] [security2:error] [pid 2819785:tid 2819785] [client 170.106.35.187:44836] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/"] [unique_id "amshgP1KsRxD5fDGyyV-0AAAAEM"]
[Thu Jul 30 11:03:44.726797 2026] [core:crit] [pid 2815979:tid 2815979] (13)Permission denied: [client 24.50.57.215:39410] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 11:03:44.726845 2026] [authz_core:error] [pid 2815979:tid 2815979] [client 24.50.57.215:39410] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 11:03:44.727264 2026] [core:crit] [pid 2815979:tid 2815979] (13)Permission denied: [client 24.50.57.215:39410] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 11:03:44.727282 2026] [core:crit] [pid 2815979:tid 2815979] (13)Permission denied: [client 24.50.57.215:39410] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 11:03:44.727309 2026] [core:crit] [pid 2815979:tid 2815979] (13)Permission denied: [client 24.50.57.215:39410] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 11:03:44.885883 2026] [lsapi:warn] [pid 2807173:tid 2807173] [client 175.100.59.158:6198] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:03:44.885926 2026] [lsapi:warn] [pid 2807173:tid 2807173] [client 175.100.59.158:6198] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:03:45.376320 2026] [ssl:error] [pid 2820513:tid 2820513] (EAI 2)Name or service not known: [client 144.76.19.72:55104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:45.376358 2026] [ssl:error] [pid 2820513:tid 2820513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:45.433077 2026] [ssl:error] [pid 2819907:tid 2819907] (EAI 2)Name or service not known: [client 144.76.19.72:55112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:45.433109 2026] [ssl:error] [pid 2819907:tid 2819907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:45.667945 2026] [security2:error] [pid 2810296:tid 2810296] [client 170.106.147.63:37276] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amshgZBxEX7_yYrf7psUtwAAADk"], referer: http://bes-systems.co.uk
[Thu Jul 30 11:03:46.228020 2026] [ssl:error] [pid 2817924:tid 2817924] (70014)End of file found: [client 216.73.216.199:8763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:46.960651 2026] [security2:error] [pid 2805965:tid 2805965] [client 170.106.35.187:46590] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amshgqUW7b_LEBPxTa22lQAAACY"], referer: http://clarepillinger.co.uk
[Thu Jul 30 11:03:47.435023 2026] [ssl:error] [pid 2810296:tid 2810296] (70014)End of file found: [client 216.73.216.199:31373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:48.490392 2026] [ssl:error] [pid 2815856:tid 2815856] (EAI 2)Name or service not known: [client 144.76.19.72:55128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:48.490422 2026] [ssl:error] [pid 2815856:tid 2815856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:48.541782 2026] [ssl:error] [pid 2819909:tid 2819909] (EAI 2)Name or service not known: [client 144.76.19.72:55132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:48.541825 2026] [ssl:error] [pid 2819909:tid 2819909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:48.945511 2026] [ssl:error] [pid 2819030:tid 2819030] (70014)End of file found: [client 216.73.216.199:62083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:49.991245 2026] [security2:error] [pid 2819853:tid 2819853] [client 114.119.157.183:64069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/simply-church-life-group/"] [unique_id "amshhcbTN5Z3RnSr4teHVQAAAEc"], referer: http://www.erskinenazarene.co.uk/event/simply-church-life-group/?instance_id=33901
[Thu Jul 30 11:03:50.416222 2026] [core:error] [pid 2817394:tid 2817394] [client 66.249.64.170:62119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:50.416249 2026] [core:error] [pid 2817394:tid 2817394] [client 66.249.64.170:62119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:51.084655 2026] [core:error] [pid 2815133:tid 2815133] [client 66.249.64.171:40826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:51.084691 2026] [core:error] [pid 2815133:tid 2815133] [client 66.249.64.171:40826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:03:51.535883 2026] [security2:error] [pid 2814756:tid 2814756] [client 114.119.157.183:61139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/simply-church-life-group/"] [unique_id "amshh8UVwYg3KenWYOe9YgAAACE"], referer: http://www.erskinenazarene.co.uk/event/simply-church-life-group/?instance_id=33901
[Thu Jul 30 11:03:51.597519 2026] [ssl:error] [pid 2819906:tid 2819906] (EAI 2)Name or service not known: [client 144.76.19.72:38152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:51.597551 2026] [ssl:error] [pid 2819906:tid 2819906] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:51.614758 2026] [security2:error] [pid 2819411:tid 2819411] [client 43.164.131.148:44914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.co.uk"] [uri "/"] [unique_id "amshh4Z4W9T_k8UD64NIeAAAAD8"]
[Thu Jul 30 11:03:51.654561 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:38158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:51.654586 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:52.259509 2026] [ssl:error] [pid 2817491:tid 2817491] (70014)End of file found: [client 216.73.216.199:23325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:52.858166 2026] [ssl:error] [pid 2819031:tid 2819031] (70014)End of file found: [client 216.73.216.199:5792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:03:52.939549 2026] [access_compat:error] [pid 2817440:tid 2817440] [client 4.184.185.91:17050] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 11:03:53.328411 2026] [security2:error] [pid 2819148:tid 2819148] [client 175.27.163.171:57950] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "islay.me"] [uri "/"] [unique_id "amshiXwKvHUoGis77UtYgAAAAD4"]
[Thu Jul 30 11:03:53.609732 2026] [security2:error] [pid 2819908:tid 2819908] [client 43.164.131.148:44066] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amshicsM8YXwTduSAiX4zAAAAEo"], referer: http://saturnsports.co.uk
[Thu Jul 30 11:03:53.778764 2026] [cgi:error] [pid 2819712:tid 2819712] [client 20.104.22.47:21395] AH02812: stderr from /home/eznoyveg/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:03:54.391404 2026] [security2:error] [pid 2819908:tid 2819908] [client 43.159.144.16:35966] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tyredandmotional.co.uk"] [uri "/"] [unique_id "amshissM8YXwTduSAiX4zQAAAEo"]
[Thu Jul 30 11:03:54.592873 2026] [authz_core:error] [pid 2819851:tid 2819851] [client 66.249.66.34:42655] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:03:54.595559 2026] [authz_core:error] [pid 2819851:tid 2819851] [client 66.249.66.34:42655] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:03:54.733586 2026] [ssl:error] [pid 2810296:tid 2810296] (EAI 2)Name or service not known: [client 144.76.19.72:38168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:54.733629 2026] [ssl:error] [pid 2810296:tid 2810296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:54.792736 2026] [ssl:error] [pid 2815347:tid 2815347] (EAI 2)Name or service not known: [client 144.76.19.72:38174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:54.792773 2026] [ssl:error] [pid 2815347:tid 2815347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:55.070954 2026] [lsapi:warn] [pid 2819148:tid 2819148] [client 78.185.44.224:33880] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:03:55.071010 2026] [lsapi:warn] [pid 2819148:tid 2819148] [client 78.185.44.224:33880] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:03:55.250987 2026] [security2:error] [pid 2819030:tid 2819030] [client 43.164.190.28:43570] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amshi1tdLEn4myBv_8ZMZAAAACM"]
[Thu Jul 30 11:03:55.595654 2026] [security2:error] [pid 2819784:tid 2819784] [client 43.133.91.48:60442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amshi94LI1NOUbdDJwIaowAAAEI"]
[Thu Jul 30 11:03:56.732597 2026] [security2:error] [pid 2818566:tid 2818566] [client 198.11.177.243:45840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amshjBez0NYY-aKhvJoudgAAAAI"]
[Thu Jul 30 11:03:56.937572 2026] [security2:error] [pid 2813974:tid 2813974] [client 43.164.190.28:41504] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amshjAlyMcfndfZjrg7Y6wAAABo"], referer: http://spampmusic.co.uk
[Thu Jul 30 11:03:57.039831 2026] [security2:error] [pid 2820513:tid 2820513] [client 43.159.144.16:38158] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amshjRXRXcJjlbaMQY5YIwAAAAA"], referer: http://tyredandmotional.co.uk
[Thu Jul 30 11:03:57.848671 2026] [ssl:error] [pid 2815347:tid 2815347] (EAI 2)Name or service not known: [client 144.76.19.72:38190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:57.848705 2026] [ssl:error] [pid 2815347:tid 2815347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:57.905976 2026] [ssl:error] [pid 2818566:tid 2818566] (EAI 2)Name or service not known: [client 144.76.19.72:38198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:03:57.906014 2026] [ssl:error] [pid 2818566:tid 2818566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:03:58.161509 2026] [security2:error] [pid 2819907:tid 2819907] [client 101.33.81.73:57102] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wurlitzer.co.uk"] [uri "/"] [unique_id "amshjjobzmR4aXIf_6ww4wAAAEk"]
[Thu Jul 30 11:03:59.189049 2026] [core:error] [pid 2819489:tid 2819489] (13)Permission denied: [client 216.73.216.199:5649] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/objects_partial
[Thu Jul 30 11:03:59.511968 2026] [security2:error] [pid 2819909:tid 2819909] [client 43.133.91.48:60568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amshj8bHQbZZKi6Ewfv3_wAAAEs"], referer: http://tompalmer.co.uk
[Thu Jul 30 11:04:00.195249 2026] [security2:error] [pid 2818972:tid 2818972] [client 110.249.201.104:52162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/robots.txt"] [unique_id "amshkFAm_BJTCDZkdrajNwAAABk"]
[Thu Jul 30 11:04:00.529682 2026] [security2:error] [pid 2819912:tid 2819912] [client 101.33.81.73:46274] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amshkBKut1qT_wTLOozrdQAAAE4"], referer: http://wurlitzer.co.uk
[Thu Jul 30 11:04:00.936239 2026] [security2:error] [pid 2815133:tid 2815133] [client 198.11.177.243:37690] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amshkIyfsHUrl6PZ8n6VMQAAAAw"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 11:04:00.964097 2026] [ssl:error] [pid 2805965:tid 2805965] (EAI 2)Name or service not known: [client 144.76.19.72:60448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:00.964148 2026] [ssl:error] [pid 2805965:tid 2805965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:01.020738 2026] [ssl:error] [pid 2809559:tid 2809559] (EAI 2)Name or service not known: [client 144.76.19.72:60464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:01.020771 2026] [ssl:error] [pid 2809559:tid 2809559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:01.067008 2026] [lsapi:warn] [pid 2815133:tid 2815133] [client 198.11.177.243:37690] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 11:04:01.067114 2026] [lsapi:warn] [pid 2815133:tid 2815133] [client 198.11.177.243:37690] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 11:04:02.691674 2026] [security2:error] [pid 2813974:tid 2813974] [client 43.165.170.119:54124] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amshkglyMcfndfZjrg7Y8QAAABo"]
[Thu Jul 30 11:04:03.062138 2026] [security2:error] [pid 2819910:tid 2819910] [client 43.165.170.119:54552] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amshk5wZdvDRRNztCi6kqwAAAEw"]
[Thu Jul 30 11:04:03.063875 2026] [authz_core:error] [pid 2819910:tid 2819910] [client 43.165.170.119:54552] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:04:03.065808 2026] [authz_core:error] [pid 2819910:tid 2819910] [client 43.165.170.119:54552] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:04:03.224083 2026] [core:error] [pid 2819853:tid 2819853] [client 66.249.64.170:60089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:04:03.224113 2026] [core:error] [pid 2819853:tid 2819853] [client 66.249.64.170:60089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:04:04.077036 2026] [ssl:error] [pid 2813445:tid 2813445] (EAI 2)Name or service not known: [client 144.76.19.72:60480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:04.077094 2026] [ssl:error] [pid 2813445:tid 2813445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:04.137466 2026] [ssl:error] [pid 2813974:tid 2813974] (EAI 2)Name or service not known: [client 144.76.19.72:60496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:04.137500 2026] [ssl:error] [pid 2813974:tid 2813974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:05.241357 2026] [security2:error] [pid 2819853:tid 2819853] [client 43.165.170.119:33362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amshlcbTN5Z3RnSr4teHWwAAAEc"], referer: http://blow-hairstudio.co.uk
[Thu Jul 30 11:04:05.359398 2026] [ssl:error] [pid 2819489:tid 2819489] (70014)End of file found: [client 216.73.216.199:5649] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:05.605604 2026] [core:error] [pid 2815973:tid 2815973] [client 66.249.66.167:64224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:04:05.605634 2026] [core:error] [pid 2815973:tid 2815973] [client 66.249.66.167:64224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:04:05.867677 2026] [core:error] [pid 2815912:tid 2815912] (13)Permission denied: [client 216.73.216.199:52823] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/align
[Thu Jul 30 11:04:06.569742 2026] [ssl:error] [pid 2814756:tid 2814756] (70014)End of file found: [client 216.73.216.199:45217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:06.804672 2026] [security2:error] [pid 2815857:tid 2815857] [client 43.165.170.119:59092] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.be"] [uri "/"] [unique_id "amshlrwXx2CERl4kDMTkawAAAC0"]
[Thu Jul 30 11:04:07.209813 2026] [ssl:error] [pid 2817014:tid 2817014] (EAI 2)Name or service not known: [client 144.76.19.72:60512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:07.209854 2026] [ssl:error] [pid 2817014:tid 2817014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:07.270603 2026] [ssl:error] [pid 2812765:tid 2812765] (EAI 2)Name or service not known: [client 144.76.19.72:60516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:07.270637 2026] [ssl:error] [pid 2812765:tid 2812765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:07.778083 2026] [ssl:error] [pid 2815912:tid 2815912] (70014)End of file found: [client 216.73.216.199:52823] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:07.826239 2026] [security2:error] [pid 2817490:tid 2817490] [client 43.135.145.77:53710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amshl2feTdbMg2oQcisHUQAAACk"]
[Thu Jul 30 11:04:09.205180 2026] [authz_core:error] [pid 2822297:tid 2822297] [client 141.98.11.42:58936] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:04:09.207864 2026] [authz_core:error] [pid 2822297:tid 2822297] [client 141.98.11.42:58936] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:04:09.395494 2026] [security2:error] [pid 2817490:tid 2817490] [client 170.106.15.3:38150] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amshmWfeTdbMg2oQcisHUgAAACk"]
[Thu Jul 30 11:04:09.680252 2026] [security2:error] [pid 2818972:tid 2818972] [client 43.165.170.119:38108] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amshmVAm_BJTCDZkdrajPAAAABk"], referer: http://orgent.be
[Thu Jul 30 11:04:10.354898 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:27708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:10.354927 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:10.415486 2026] [ssl:error] [pid 2817490:tid 2817490] (EAI 2)Name or service not known: [client 144.76.19.72:27710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:10.415511 2026] [ssl:error] [pid 2817490:tid 2817490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:10.688367 2026] [ssl:error] [pid 2817490:tid 2817490] (70014)End of file found: [client 216.73.216.199:5466] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:11.474702 2026] [security2:error] [pid 2819489:tid 2819489] [client 110.249.201.188:56156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/robots.txt"] [unique_id "amshm26XNK4HhkDWggkzKQAAAEE"]
[Thu Jul 30 11:04:11.491816 2026] [security2:error] [pid 2809559:tid 2809559] [client 170.106.15.3:37310] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amshm2JkZM6o8NFqRdY2QQAAAB0"], referer: http://hazardous-materials.co.uk
[Thu Jul 30 11:04:12.301868 2026] [core:error] [pid 2810296:tid 2810296] (13)Permission denied: [client 216.73.216.199:3283] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/align
[Thu Jul 30 11:04:12.595202 2026] [security2:error] [pid 2817493:tid 2817493] [client 43.166.237.57:35784] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amshnAyOZFwjLUFFL-AdHAAAAD0"]
[Thu Jul 30 11:04:12.840907 2026] [security2:error] [pid 2819853:tid 2819853] [client 43.167.241.46:55534] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.fr"] [uri "/"] [unique_id "amshnMbTN5Z3RnSr4teHXgAAAEc"]
[Thu Jul 30 11:04:12.905097 2026] [ssl:error] [pid 2810296:tid 2810296] (70014)End of file found: [client 216.73.216.199:3283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:13.068097 2026] [security2:error] [pid 2809559:tid 2809559] [client 43.167.241.46:55924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amshnWJkZM6o8NFqRdY2RAAAAB0"]
[Thu Jul 30 11:04:13.177858 2026] [security2:error] [pid 2818972:tid 2818972] [client 85.208.96.207:37370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/colorado-springs-to-denver-bus"] [unique_id "amshnVAm_BJTCDZkdrajPgAAABk"]
[Thu Jul 30 11:04:13.269443 2026] [security2:error] [pid 2814756:tid 2814756] [client 43.134.23.177:46176] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amshncUVwYg3KenWYOe9bwAAACE"]
[Thu Jul 30 11:04:13.270580 2026] [authz_core:error] [pid 2814756:tid 2814756] [client 43.134.23.177:46176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:04:13.271148 2026] [authz_core:error] [pid 2814756:tid 2814756] [client 43.134.23.177:46176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:04:13.413221 2026] [ssl:error] [pid 2819910:tid 2819910] (70014)End of file found: [client 216.73.216.199:52541] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:13.564631 2026] [ssl:error] [pid 2818972:tid 2818972] (EAI 2)Name or service not known: [client 144.76.19.72:27722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:13.564664 2026] [ssl:error] [pid 2818972:tid 2818972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:13.701840 2026] [ssl:error] [pid 2814756:tid 2814756] (EAI 2)Name or service not known: [client 144.76.19.72:27726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:13.701891 2026] [ssl:error] [pid 2814756:tid 2814756] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:13.968909 2026] [security2:error] [pid 2815975:tid 2815975] [client 43.130.116.87:48952] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "p2studio.co.uk"] [uri "/"] [unique_id "amshncNInlkS41YZeqibmQAAADY"]
[Thu Jul 30 11:04:14.157143 2026] [security2:error] [pid 2818972:tid 2818972] [client 110.249.201.155:37676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/403.shtml"] [unique_id "amshnlAm_BJTCDZkdrajQAAAABk"]
[Thu Jul 30 11:04:14.559040 2026] [security2:error] [pid 2822880:tid 2822880] [client 114.119.133.126:31037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "glottalstop.co.uk"] [uri "/id.section/pages/images/imageidc534c957524.jpg"] [unique_id "amshntEX7l8rGT5NyPOfcQAAAAc"], referer: https://glottalstop.co.uk/identity.html
[Thu Jul 30 11:04:14.613893 2026] [security2:error] [pid 2822878:tid 2822878] [client 124.156.226.179:60998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highcleresyndicates.co.uk"] [uri "/"] [unique_id "amshnpP__nRbs2ARGOpBNwAAAAU"]
[Thu Jul 30 11:04:14.829456 2026] [security2:error] [pid 2814757:tid 2814757] [client 43.166.237.57:55482] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amshnngkkNIxirlq5YCg1AAAACU"], referer: http://beechhouseselfcatering.co.uk
[Thu Jul 30 11:04:15.744021 2026] [security2:error] [pid 2818972:tid 2818972] [client 43.167.241.46:58240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amshn1Am_BJTCDZkdrajQgAAABk"], referer: http://orgent.fr
[Thu Jul 30 11:04:16.094611 2026] [security2:error] [pid 2799623:tid 2799623] [client 43.163.80.48:39052] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "amshoJUXaitVWn6p5ftGKwAAAAY"]
[Thu Jul 30 11:04:16.369736 2026] [security2:error] [pid 2818566:tid 2818566] [client 101.32.15.141:49620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amshoBez0NYY-aKhvJouiAAAAAI"]
[Thu Jul 30 11:04:16.386444 2026] [security2:error] [pid 2815857:tid 2815857] [client 43.167.241.46:59128] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amshoLwXx2CERl4kDMTk1wAAAC0"], referer: http://orgent.eu
[Thu Jul 30 11:04:16.527143 2026] [ssl:error] [pid 2814757:tid 2814757] (70014)End of file found: [client 216.73.216.199:6871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:16.756044 2026] [ssl:error] [pid 2813008:tid 2813008] (EAI 2)Name or service not known: [client 144.76.19.72:27738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:16.756090 2026] [ssl:error] [pid 2813008:tid 2813008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:16.808217 2026] [ssl:error] [pid 2822974:tid 2822974] (EAI 2)Name or service not known: [client 144.76.19.72:27754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:16.808248 2026] [ssl:error] [pid 2822974:tid 2822974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:17.254486 2026] [security2:error] [pid 2822974:tid 2822974] [client 43.159.145.153:35718] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amshoX2FI7NmNOzyOUQDDgAAABA"]
[Thu Jul 30 11:04:17.538017 2026] [security2:error] [pid 2817492:tid 2817492] [client 43.162.109.249:45490] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amshoXJiypSGjlpWLwYUugAAADg"]
[Thu Jul 30 11:04:17.579337 2026] [security2:error] [pid 2823070:tid 2823070] [client 43.162.109.249:45056] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amshoY6KHntvUJtnv-M7rAAAABg"]
[Thu Jul 30 11:04:17.908974 2026] [security2:error] [pid 2807343:tid 2807343] [client 43.163.80.48:40912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amshoRBdkdRpZ6mRhYKunAAAACs"], referer: http://spamp.co.uk
[Thu Jul 30 11:04:17.974782 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.156.232.154:51174] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amshofQip3flDj78JW4wHgAAABY"]
[Thu Jul 30 11:04:18.331800 2026] [ssl:error] [pid 2813008:tid 2813008] (70014)End of file found: [client 216.73.216.199:60123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:18.971766 2026] [security2:error] [pid 2817490:tid 2817490] [client 78.163.149.54:60010] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,128.0.html"] [unique_id "amshomfeTdbMg2oQcisHWAAAACk"]
[Thu Jul 30 11:04:18.971849 2026] [security2:error] [pid 2817490:tid 2817490] [client 78.163.149.54:60010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,128.0.html"] [unique_id "amshomfeTdbMg2oQcisHWAAAACk"]
[Thu Jul 30 11:04:18.972190 2026] [security2:error] [pid 2817490:tid 2817490] [client 78.163.149.54:60010] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshomfeTdbMg2oQcisHWAAAACk"]
[Thu Jul 30 11:04:19.293768 2026] [security2:error] [pid 2823069:tid 2823069] [client 43.159.143.187:34042] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "craft-buddies.co.uk"] [uri "/"] [unique_id "amsho7KW4gqUKQC3JvlvlgAAABc"]
[Thu Jul 30 11:04:19.317919 2026] [security2:error] [pid 2823077:tid 2823077] [client 43.134.54.246:57226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.co.uk"] [uri "/"] [unique_id "amsho3wql56GUVSJcrfWcgAAAE0"]
[Thu Jul 30 11:04:19.618181 2026] [security2:error] [pid 2815912:tid 2815912] [client 43.156.228.27:38006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsho_tLbP2Ns8itW1TOjgAAAC4"], referer: http://banskoexpresstransfers.co.uk
[Thu Jul 30 11:04:19.863985 2026] [ssl:error] [pid 2823070:tid 2823070] (EAI 2)Name or service not known: [client 144.76.19.72:25802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:19.864054 2026] [ssl:error] [pid 2823070:tid 2823070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:19.919151 2026] [ssl:error] [pid 2819909:tid 2819909] (EAI 2)Name or service not known: [client 144.76.19.72:25804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:19.919184 2026] [ssl:error] [pid 2819909:tid 2819909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:20.118041 2026] [security2:error] [pid 2822789:tid 2822789] [client 43.166.224.244:43446] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amshpJzu71UV1pDk40FECgAAAAQ"]
[Thu Jul 30 11:04:20.151033 2026] [ssl:error] [pid 2810296:tid 2810296] (70014)End of file found: [client 216.73.216.199:8685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:20.246234 2026] [security2:error] [pid 2822974:tid 2822974] [client 43.162.109.249:55924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amshpH2FI7NmNOzyOUQDEAAAABA"], referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 11:04:20.248325 2026] [authz_core:error] [pid 2822974:tid 2822974] [client 43.162.109.249:55924] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 11:04:20.251159 2026] [authz_core:error] [pid 2822974:tid 2822974] [client 43.162.109.249:55924] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 11:04:20.253060 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.162.109.249:55972] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amshpPQip3flDj78JW4wHwAAABY"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 11:04:20.254920 2026] [authz_core:error] [pid 2823068:tid 2823068] [client 43.162.109.249:55972] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 11:04:20.257672 2026] [authz_core:error] [pid 2823068:tid 2823068] [client 43.162.109.249:55972] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 11:04:20.326149 2026] [security2:error] [pid 2813975:tid 2813975] [client 43.163.80.48:45524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amshpAOiKWJ_7hNYxKhonAAAAB4"], referer: http://spamp.com/
[Thu Jul 30 11:04:20.786495 2026] [security2:error] [pid 2815810:tid 2815810] [client 43.159.145.153:41496] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amshpLFM1XDWMXrM6q5e1AAAABs"], referer: http://raidersofthegamecupboard.co.uk
[Thu Jul 30 11:04:21.300228 2026] [security2:error] [pid 2815973:tid 2815973] [client 49.43.93.33:40902] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,128.0.html"] [unique_id "amshpdRiMTxhO6JQmQCbDAAAADU"]
[Thu Jul 30 11:04:21.300272 2026] [security2:error] [pid 2815973:tid 2815973] [client 49.43.93.33:40902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,128.0.html"] [unique_id "amshpdRiMTxhO6JQmQCbDAAAADU"]
[Thu Jul 30 11:04:21.300513 2026] [security2:error] [pid 2815973:tid 2815973] [client 49.43.93.33:40902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshpdRiMTxhO6JQmQCbDAAAADU"]
[Thu Jul 30 11:04:21.405524 2026] [rewrite:error] [pid 2817493:tid 2817493] [client 185.177.72.10:64416] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:21.406980 2026] [security2:error] [pid 2822976:tid 2822976] [client 43.156.228.27:40362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amshpf6mqpCNNRu-vp17lQAAABU"], referer: http://www.banskoexpress.com
[Thu Jul 30 11:04:21.981386 2026] [security2:error] [pid 2815912:tid 2815912] [client 43.155.140.157:40934] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "amshpftLbP2Ns8itW1TOkAAAAC4"]
[Thu Jul 30 11:04:22.417509 2026] [rewrite:error] [pid 2819411:tid 2819411] [client 185.177.72.10:64426] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:22.970939 2026] [ssl:error] [pid 2813518:tid 2813518] (EAI 2)Name or service not known: [client 144.76.19.72:25810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:22.970965 2026] [ssl:error] [pid 2813518:tid 2813518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:23.026939 2026] [ssl:error] [pid 2822976:tid 2822976] (EAI 2)Name or service not known: [client 144.76.19.72:25816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:23.026971 2026] [ssl:error] [pid 2822976:tid 2822976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:23.666685 2026] [rewrite:error] [pid 2819411:tid 2819411] [client 185.177.72.10:64426] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:23.848702 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.159.145.153:40214] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amshp_Qip3flDj78JW4wIQAAABY"]
[Thu Jul 30 11:04:23.860039 2026] [security2:error] [pid 2819907:tid 2819907] [client 43.130.39.254:53964] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mcgarvey.co.uk"] [uri "/"] [unique_id "amshpzobzmR4aXIf_6ww7AAAAEk"]
[Thu Jul 30 11:04:24.064014 2026] [ssl:error] [pid 2823073:tid 2823073] (70014)End of file found: [client 216.73.216.199:56076] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:24.274531 2026] [security2:error] [pid 2818972:tid 2818972] [client 95.58.142.14:39521] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,128.0.html"] [unique_id "amshqFAm_BJTCDZkdrajRwAAABk"]
[Thu Jul 30 11:04:24.274607 2026] [security2:error] [pid 2818972:tid 2818972] [client 95.58.142.14:39521] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,128.0.html"] [unique_id "amshqFAm_BJTCDZkdrajRwAAABk"]
[Thu Jul 30 11:04:24.274860 2026] [security2:error] [pid 2818972:tid 2818972] [client 95.58.142.14:39521] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amshqFAm_BJTCDZkdrajRwAAABk"]
[Thu Jul 30 11:04:24.533761 2026] [security2:error] [pid 2815912:tid 2815912] [client 51.178.27.107:37032] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "apotheekcandidejacobs.be"] [uri "/xmlrpc.php"] [unique_id "amshqPtLbP2Ns8itW1TOkgAAAC4"]
[Thu Jul 30 11:04:24.580452 2026] [ssl:error] [pid 2819908:tid 2819908] (70014)End of file found: [client 216.73.216.199:39985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:24.734911 2026] [security2:error] [pid 2817490:tid 2817490] [client 43.153.107.22:45592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "amshqGfeTdbMg2oQcisHWQAAACk"]
[Thu Jul 30 11:04:24.887329 2026] [security2:error] [pid 2805236:tid 2805236] [client 85.208.96.205:53142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amshqICrgRxfle1P4jvwXgAAABw"]
[Thu Jul 30 11:04:25.576038 2026] [ssl:error] [pid 2819853:tid 2819853] (70014)End of file found: [client 216.73.216.199:61246] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:25.718223 2026] [security2:error] [pid 2817490:tid 2817490] [client 43.159.145.153:41588] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amshqWfeTdbMg2oQcisHWgAAACk"]
[Thu Jul 30 11:04:25.918624 2026] [rewrite:error] [pid 2813008:tid 2813008] [client 185.177.72.10:60246] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:25.980890 2026] [security2:error] [pid 2819411:tid 2819411] [client 43.153.107.22:47288] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amshqYZ4W9T_k8UD64NJUAAAAD8"], referer: http://thesilkshed.co.uk
[Thu Jul 30 11:04:26.144114 2026] [ssl:error] [pid 2818972:tid 2818972] (EAI 2)Name or service not known: [client 144.76.19.72:25824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:26.144160 2026] [ssl:error] [pid 2818972:tid 2818972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:26.197615 2026] [ssl:error] [pid 2817491:tid 2817491] (EAI 2)Name or service not known: [client 144.76.19.72:25832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:26.197667 2026] [ssl:error] [pid 2817491:tid 2817491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:26.403041 2026] [authz_core:error] [pid 2805999:tid 2805999] [client 66.249.66.33:45142] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:04:26.405834 2026] [authz_core:error] [pid 2805999:tid 2805999] [client 66.249.66.33:45142] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:04:26.756805 2026] [security2:error] [pid 2822976:tid 2822976] [client 43.128.156.124:46338] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sharonduggal.co.uk"] [uri "/"] [unique_id "amshqv6mqpCNNRu-vp17mQAAABU"]
[Thu Jul 30 11:04:27.384137 2026] [rewrite:error] [pid 2813008:tid 2813008] [client 185.177.72.10:60246] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:27.604371 2026] [security2:error] [pid 2819031:tid 2819031] [client 43.153.119.119:41362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "fast-hosting.co.uk"] [uri "/"] [unique_id "amshq-cZJlJKP7QMJZCJMQAAACw"]
[Thu Jul 30 11:04:28.332686 2026] [security2:error] [pid 2815912:tid 2815912] [client 43.134.100.175:39132] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "inrc.org.uk"] [uri "/"] [unique_id "amshrPtLbP2Ns8itW1TOlgAAAC4"]
[Thu Jul 30 11:04:28.951644 2026] [rewrite:error] [pid 2819031:tid 2819031] [client 185.177.72.10:60250] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:29.256525 2026] [ssl:error] [pid 2815912:tid 2815912] (EAI 2)Name or service not known: [client 144.76.19.72:25844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:29.256562 2026] [ssl:error] [pid 2815912:tid 2815912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:29.309148 2026] [ssl:error] [pid 2817490:tid 2817490] (EAI 2)Name or service not known: [client 144.76.19.72:25848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:29.309173 2026] [ssl:error] [pid 2817490:tid 2817490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:29.381412 2026] [ssl:error] [pid 2817441:tid 2817441] (70014)End of file found: [client 216.73.216.199:54682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:29.452844 2026] [security2:error] [pid 2822297:tid 2822297] [client 101.32.208.70:49726] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "asian-kitchen.co.uk"] [uri "/"] [unique_id "amshrY2lOFGySJjmEA5uegAAAAM"]
[Thu Jul 30 11:04:29.882046 2026] [security2:error] [pid 2817490:tid 2817490] [client 43.134.38.171:57734] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "loca.co.uk"] [uri "/"] [unique_id "amshrWfeTdbMg2oQcisHXQAAACk"]
[Thu Jul 30 11:04:29.982738 2026] [ssl:error] [pid 2822976:tid 2822976] (70014)End of file found: [client 216.73.216.199:37710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:30.205417 2026] [rewrite:error] [pid 2819031:tid 2819031] [client 185.177.72.10:60250] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:31.351748 2026] [security2:error] [pid 2819850:tid 2819850] [client 49.51.233.46:47428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "amshr5shYTqLOy_KupuwCwAAAEQ"]
[Thu Jul 30 11:04:31.506973 2026] [security2:error] [pid 2805999:tid 2805999] [client 43.130.16.212:48168] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amshrye1SdbzYMmqO-oxWgAAADE"]
[Thu Jul 30 11:04:31.564962 2026] [rewrite:error] [pid 2819031:tid 2819031] [client 185.177.72.10:60250] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:31.681334 2026] [security2:error] [pid 2814757:tid 2814757] [client 43.130.91.95:36692] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "greenduckgallery.co.uk"] [uri "/"] [unique_id "amshr3gkkNIxirlq5YCg3AAAACU"]
[Thu Jul 30 11:04:32.208726 2026] [ssl:error] [pid 2819851:tid 2819851] (70014)End of file found: [client 216.73.216.199:4681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:32.361364 2026] [ssl:error] [pid 2813974:tid 2813974] (EAI 2)Name or service not known: [client 144.76.19.72:42604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:32.361391 2026] [ssl:error] [pid 2813974:tid 2813974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:32.415513 2026] [ssl:error] [pid 2819907:tid 2819907] (EAI 2)Name or service not known: [client 144.76.19.72:42608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:32.415543 2026] [ssl:error] [pid 2819907:tid 2819907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:33.004576 2026] [rewrite:error] [pid 2823072:tid 2823072] [client 185.177.72.10:60260] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Jul 30 11:04:35.051396 2026] [security2:error] [pid 2819784:tid 2819784] [client 49.51.245.241:38908] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/"] [unique_id "amshs94LI1NOUbdDJwIaqgAAAEI"]
[Thu Jul 30 11:04:35.120822 2026] [security2:error] [pid 2819907:tid 2819907] [client 43.165.198.5:43288] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "epmsonline.co.uk"] [uri "/"] [unique_id "amshszobzmR4aXIf_6ww9QAAAEk"]
[Thu Jul 30 11:04:35.471480 2026] [ssl:error] [pid 2817490:tid 2817490] (EAI 2)Name or service not known: [client 144.76.19.72:42622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:35.471505 2026] [ssl:error] [pid 2817490:tid 2817490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:35.528951 2026] [ssl:error] [pid 2815912:tid 2815912] (EAI 2)Name or service not known: [client 144.76.19.72:42632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:35.528989 2026] [ssl:error] [pid 2815912:tid 2815912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:35.760490 2026] [lsapi:warn] [pid 2819907:tid 2819907] [client 43.165.198.5:43288] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 11:04:35.760620 2026] [security2:error] [pid 2823071:tid 2823071] [client 43.135.145.77:48434] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "junglejacks.co.uk"] [uri "/"] [unique_id "amshs9fl1TTLyMLJyo8i6wAAADI"]
[Thu Jul 30 11:04:35.863082 2026] [ssl:error] [pid 2815973:tid 2815973] (70014)End of file found: [client 216.73.216.199:14710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:36.428418 2026] [security2:error] [pid 2814757:tid 2814757] [client 49.51.245.241:40122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amshtHgkkNIxirlq5YCg4wAAACU"], referer: http://theislipgarage.co.uk
[Thu Jul 30 11:04:36.468507 2026] [ssl:error] [pid 2817490:tid 2817490] (70014)End of file found: [client 216.73.216.199:64688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:36.771361 2026] [security2:error] [pid 2819908:tid 2819908] [client 170.106.152.218:41862] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "techsuccess.uk"] [uri "/"] [unique_id "amshtMsM8YXwTduSAiX42wAAAEo"]
[Thu Jul 30 11:04:36.966714 2026] [security2:error] [pid 2819910:tid 2819910] [client 43.159.144.16:34592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "innerspacer.co.uk"] [uri "/"] [unique_id "amshtJwZdvDRRNztCi6kuwAAAEw"]
[Thu Jul 30 11:04:37.356828 2026] [security2:error] [pid 2814757:tid 2814757] [client 43.153.96.79:47404] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.co.uk"] [uri "/"] [unique_id "amshtXgkkNIxirlq5YCg5AAAACU"]
[Thu Jul 30 11:04:37.577364 2026] [ssl:error] [pid 2815912:tid 2815912] (70014)End of file found: [client 216.73.216.199:33732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:38.558137 2026] [security2:error] [pid 2815979:tid 2815979] [client 43.135.145.77:50548] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amshtqPwsOjRt4V9atic5AAAADo"], referer: http://junglejacks.co.uk
[Thu Jul 30 11:04:38.585494 2026] [ssl:error] [pid 2813975:tid 2813975] (EAI 2)Name or service not known: [client 144.76.19.72:42644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:38.585528 2026] [ssl:error] [pid 2813975:tid 2813975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:38.642830 2026] [ssl:error] [pid 2819411:tid 2819411] (EAI 2)Name or service not known: [client 144.76.19.72:42646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:38.642864 2026] [ssl:error] [pid 2819411:tid 2819411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:39.226185 2026] [security2:error] [pid 2819411:tid 2819411] [client 43.153.96.79:48986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsht4Z4W9T_k8UD64NJXAAAAD8"], referer: http://jasperandtroy.co.uk
[Thu Jul 30 11:04:40.582863 2026] [security2:error] [pid 2817492:tid 2817492] [client 43.153.54.14:40484] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "amshuHJiypSGjlpWLwYUxQAAADg"]
[Thu Jul 30 11:04:41.113704 2026] [access_compat:error] [pid 2813445:tid 2813445] [client 45.158.164.139:47038] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:04:41.565651 2026] [security2:error] [pid 2814756:tid 2814756] [client 49.51.183.84:42532] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amshucUVwYg3KenWYOe9fgAAACE"]
[Thu Jul 30 11:04:41.696116 2026] [ssl:error] [pid 2817490:tid 2817490] (EAI 2)Name or service not known: [client 144.76.19.72:22464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:41.696143 2026] [ssl:error] [pid 2817490:tid 2817490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:41.751745 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:22472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:41.751773 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:42.079963 2026] [security2:error] [pid 2813445:tid 2813445] [client 43.134.94.96:35868] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amshuspHUhnka2Fq9WoTAAAAACc"]
[Thu Jul 30 11:04:43.259819 2026] [security2:error] [pid 2825451:tid 2825451] [client 43.130.91.95:45738] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amshu3Qbmw0wedTDwmnXRwAAAAI"]
[Thu Jul 30 11:04:43.723405 2026] [security2:error] [pid 2819853:tid 2819853] [client 216.73.216.199:52082] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/hpc-compute/tuned.conf"] [unique_id "amshu8bTN5Z3RnSr4teHcgAAAEc"]
[Thu Jul 30 11:04:43.723778 2026] [security2:error] [pid 2819853:tid 2819853] [client 216.73.216.199:52082] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/hpc-compute/tuned.conf"] [unique_id "amshu8bTN5Z3RnSr4teHcgAAAEc"]
[Thu Jul 30 11:04:43.724113 2026] [security2:error] [pid 2819853:tid 2819853] [client 216.73.216.199:52082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/hpc-compute/tuned.conf"] [unique_id "amshu8bTN5Z3RnSr4teHcgAAAEc"]
[Thu Jul 30 11:04:44.094312 2026] [security2:error] [pid 2819909:tid 2819909] [client 43.153.54.14:46510] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amshvMbHQbZZKi6Ewfv4egAAAEs"], referer: http://the-pryors.co.uk
[Thu Jul 30 11:04:44.812138 2026] [ssl:error] [pid 2823068:tid 2823068] (EAI 2)Name or service not known: [client 144.76.19.72:22480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:44.812177 2026] [ssl:error] [pid 2823068:tid 2823068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:44.875175 2026] [ssl:error] [pid 2815975:tid 2815975] (EAI 2)Name or service not known: [client 144.76.19.72:22494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:44.875213 2026] [ssl:error] [pid 2815975:tid 2815975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:45.412258 2026] [security2:error] [pid 2825451:tid 2825451] [client 49.51.183.84:43146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amshvXQbmw0wedTDwmnXSAAAAAI"], referer: http://maisongerlyn.be
[Thu Jul 30 11:04:45.529229 2026] [core:error] [pid 2819853:tid 2819853] (13)Permission denied: [client 216.73.216.199:52082] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_dquot/shrink
[Thu Jul 30 11:04:45.865597 2026] [security2:error] [pid 2822976:tid 2822976] [client 43.130.91.95:35928] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amshvf6mqpCNNRu-vp17owAAABU"], referer: http://baketastic.co.uk
[Thu Jul 30 11:04:45.947187 2026] [security2:error] [pid 2805999:tid 2805999] [client 129.226.174.80:38524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amshvSe1SdbzYMmqO-oxZQAAADE"]
[Thu Jul 30 11:04:46.738912 2026] [core:error] [pid 2819853:tid 2819853] (13)Permission denied: [client 216.73.216.199:52082] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/irqbypass/sections/__kcrctab_gpl
[Thu Jul 30 11:04:46.986780 2026] [security2:error] [pid 2805999:tid 2805999] [client 43.159.144.16:45548] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanhill.co.uk"] [uri "/"] [unique_id "amshvie1SdbzYMmqO-oxZgAAADE"]
[Thu Jul 30 11:04:47.033457 2026] [security2:error] [pid 2822297:tid 2822297] [client 43.130.74.193:50782] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "cssystems.co.uk"] [uri "/"] [unique_id "amshv42lOFGySJjmEA5uiwAAAAM"], referer: http://cssystems.co.uk
[Thu Jul 30 11:04:47.039921 2026] [ssl:error] [pid 2819853:tid 2819853] (70014)End of file found: [client 216.73.216.199:52082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:47.341672 2026] [core:error] [pid 2819910:tid 2819910] (13)Permission denied: [client 216.73.216.199:58484] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/alt-php-internal-common/ZEND_LICENSE
[Thu Jul 30 11:04:47.706829 2026] [security2:error] [pid 2825451:tid 2825451] [client 49.51.47.100:48870] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.co.uk"] [uri "/"] [unique_id "amshv3Qbmw0wedTDwmnXSQAAAAI"]
[Thu Jul 30 11:04:47.710003 2026] [authz_core:error] [pid 2825451:tid 2825451] [client 49.51.47.100:48870] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 11:04:47.716079 2026] [authz_core:error] [pid 2825451:tid 2825451] [client 49.51.47.100:48870] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 11:04:47.932731 2026] [ssl:error] [pid 2815973:tid 2815973] (EAI 2)Name or service not known: [client 144.76.19.72:22502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:47.932777 2026] [ssl:error] [pid 2815973:tid 2815973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:47.992668 2026] [ssl:error] [pid 2822880:tid 2822880] (EAI 2)Name or service not known: [client 144.76.19.72:22512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:47.992704 2026] [ssl:error] [pid 2822880:tid 2822880] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:48.045962 2026] [security2:error] [pid 2823068:tid 2823068] [client 49.51.47.100:49272] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amshwPQip3flDj78JW4wLQAAABY"]
[Thu Jul 30 11:04:48.190514 2026] [cgi:error] [pid 2799623:tid 2799623] [client 199.45.154.122:41530] AH02812: stderr from /home/jgqawffu/public_html/greenduckgallery.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://www.greenduckgallery.secretbluestone.co.uk:80/cgi-bin
[Thu Jul 30 11:04:48.244771 2026] [ssl:error] [pid 2819910:tid 2819910] (70014)End of file found: [client 216.73.216.199:58484] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:48.447663 2026] [security2:error] [pid 2814756:tid 2814756] [client 49.51.203.164:48372] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "refraction.co.uk"] [uri "/"] [unique_id "amshwMUVwYg3KenWYOe9ggAAACE"]
[Thu Jul 30 11:04:48.727683 2026] [security2:error] [pid 2813974:tid 2813974] [client 129.226.174.80:39012] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amshwAlyMcfndfZjrg7ZCAAAABo"], referer: http://glottalstop.co.uk
[Thu Jul 30 11:04:49.036967 2026] [cgi:error] [pid 2822297:tid 2822297] [client 37.59.21.100:60942] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:04:49.058813 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.159.144.16:47326] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amshwfQip3flDj78JW4wLgAAABY"], referer: http://jonathanhill.co.uk
[Thu Jul 30 11:04:50.057435 2026] [ssl:error] [pid 2825451:tid 2825451] (70014)End of file found: [client 216.73.216.199:21271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:51.044818 2026] [ssl:error] [pid 2823071:tid 2823071] (EAI 2)Name or service not known: [client 144.76.19.72:53312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:51.044858 2026] [ssl:error] [pid 2823071:tid 2823071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:51.102712 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:53320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:51.102757 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:51.393599 2026] [security2:error] [pid 2823073:tid 2823073] [client 43.159.128.247:48732] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amshw0jKz5k19FvKAdrXZAAAAEM"]
[Thu Jul 30 11:04:52.938867 2026] [security2:error] [pid 2817491:tid 2817491] [client 43.159.128.247:57370] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amshxEAilZO4tS3udAvFGAAAADA"], referer: http://staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 11:04:53.245770 2026] [security2:error] [pid 2819853:tid 2819853] [client 43.166.246.180:53554] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchellphotography.co.uk"] [uri "/"] [unique_id "amshxcbTN5Z3RnSr4teHfwAAAEc"]
[Thu Jul 30 11:04:54.157190 2026] [ssl:error] [pid 2819910:tid 2819910] (EAI 2)Name or service not known: [client 144.76.19.72:53334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:54.157222 2026] [ssl:error] [pid 2819910:tid 2819910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:54.215319 2026] [ssl:error] [pid 2820513:tid 2820513] (EAI 2)Name or service not known: [client 144.76.19.72:53350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:54.215354 2026] [ssl:error] [pid 2820513:tid 2820513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:54.387136 2026] [security2:error] [pid 2814757:tid 2814757] [client 43.153.71.12:43382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tripodhome.co.uk"] [uri "/"] [unique_id "amshxngkkNIxirlq5YCg7QAAACU"]
[Thu Jul 30 11:04:55.054480 2026] [security2:error] [pid 2815912:tid 2815912] [client 49.51.183.75:45550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amshx_tLbP2Ns8itW1TOqwAAAC4"], referer: http://banskoexpress.co.uk
[Thu Jul 30 11:04:55.304055 2026] [security2:error] [pid 2799623:tid 2799623] [client 110.249.201.233:53794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spamp.com"] [uri "/robots.txt"] [unique_id "amshx5UXaitVWn6p5ftGQwAAAAY"]
[Thu Jul 30 11:04:55.505215 2026] [ssl:error] [pid 2813518:tid 2813518] (70014)End of file found: [client 216.73.216.199:53097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:55.813901 2026] [ssl:error] [pid 2823073:tid 2823073] (70014)End of file found: [client 216.73.216.199:52349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:56.357426 2026] [authz_core:error] [pid 2814756:tid 2814756] [client 66.249.66.33:41200] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:04:56.360119 2026] [authz_core:error] [pid 2814756:tid 2814756] [client 66.249.66.33:41200] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:04:56.419441 2026] [security2:error] [pid 2799771:tid 2799771] [client 74.7.242.27:54450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.carpediempropertycouk.carpediemproperty.com"] [uri "/"] [unique_id "amshyO21busEGMTvfl6uDwAAACA"]
[Thu Jul 30 11:04:57.290307 2026] [ssl:error] [pid 2819784:tid 2819784] (EAI 2)Name or service not known: [client 144.76.19.72:53354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:57.290359 2026] [ssl:error] [pid 2819784:tid 2819784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:57.344984 2026] [ssl:error] [pid 2815912:tid 2815912] (EAI 2)Name or service not known: [client 144.76.19.72:53364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:04:57.345010 2026] [ssl:error] [pid 2815912:tid 2815912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:04:57.618354 2026] [ssl:error] [pid 2819910:tid 2819910] (70014)End of file found: [client 216.73.216.199:36874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:04:57.626852 2026] [security2:error] [pid 2815912:tid 2815912] [client 129.226.195.146:40574] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "localhero.org.uk"] [uri "/"] [unique_id "amshyftLbP2Ns8itW1TOrQAAAC4"]
[Thu Jul 30 11:04:57.989236 2026] [security2:error] [pid 2817491:tid 2817491] [client 49.51.183.75:35760] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amshyUAilZO4tS3udAvFGgAAADA"], referer: http://www.banskoexpress.com
[Thu Jul 30 11:04:58.596101 2026] [security2:error] [pid 2819030:tid 2819030] [client 43.153.7.191:44038] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amshyltdLEn4myBv_8ZMrQAAACM"]
[Thu Jul 30 11:04:59.506019 2026] [security2:error] [pid 2817491:tid 2817491] [client 43.153.54.14:55664] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "amshy0AilZO4tS3udAvFHAAAADA"]
[Thu Jul 30 11:05:00.402617 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:27084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:00.402651 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:00.462131 2026] [ssl:error] [pid 2817490:tid 2817490] (EAI 2)Name or service not known: [client 144.76.19.72:27088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:00.462163 2026] [ssl:error] [pid 2817490:tid 2817490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:01.544303 2026] [security2:error] [pid 2814684:tid 2814684] [client 43.163.112.239:52244] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "amshzWh7dKBXXF5Xfzx5VQAAAAg"]
[Thu Jul 30 11:05:03.122172 2026] [security2:error] [pid 2815857:tid 2815857] [client 43.153.54.14:34564] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amshz7wXx2CERl4kDMTk7AAAAC0"], referer: http://purple-childcare.co.uk
[Thu Jul 30 11:05:03.518939 2026] [ssl:error] [pid 2814757:tid 2814757] (EAI 2)Name or service not known: [client 144.76.19.72:27104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:03.518970 2026] [ssl:error] [pid 2814757:tid 2814757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:03.571989 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:27116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:03.572017 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:04.172748 2026] [security2:error] [pid 2817491:tid 2817491] [client 43.133.60.94:37684] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "islay.me"] [uri "/"] [unique_id "amsh0EAilZO4tS3udAvFHgAAADA"]
[Thu Jul 30 11:05:04.301888 2026] [security2:error] [pid 2810224:tid 2810224] [client 170.106.152.218:37634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsh0Ba78o2mXSJS4cpjvQAAAA8"]
[Thu Jul 30 11:05:04.839346 2026] [ssl:error] [pid 2819908:tid 2819908] (70014)End of file found: [client 216.73.216.199:60945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:05.140275 2026] [ssl:error] [pid 2817490:tid 2817490] (70014)End of file found: [client 216.73.216.199:54742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:05.372919 2026] [access_compat:error] [pid 2799623:tid 2799623] [client 74.248.20.32:57246] AH01797: client denied by server configuration: /home/thepryor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 11:05:05.523304 2026] [security2:error] [pid 2826424:tid 2826424] [client 43.153.54.14:34532] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sewyork.co.uk"] [uri "/"] [unique_id "amsh0V9pxCqGbfbmTHjhIAAAAAI"]
[Thu Jul 30 11:05:05.582240 2026] [authz_core:error] [pid 2805965:tid 2805965] [client 52.238.199.152:37499] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:05:05.882343 2026] [access_compat:error] [pid 2814757:tid 2814757] [client 74.248.20.32:58521] AH01797: client denied by server configuration: /home/thepryor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 11:05:06.049242 2026] [security2:error] [pid 2820513:tid 2820513] [client 43.153.54.14:34780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsh0hXRXcJjlbaMQY5YdgAAAAA"]
[Thu Jul 30 11:05:06.067527 2026] [security2:error] [pid 2817491:tid 2817491] [client 43.166.244.251:40410] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amsh0kAilZO4tS3udAvFHwAAADA"], referer: http://peterboroughdiocesanregistry.co.uk
[Thu Jul 30 11:05:06.628617 2026] [ssl:error] [pid 2819411:tid 2819411] (EAI 2)Name or service not known: [client 144.76.19.72:27118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:06.628650 2026] [ssl:error] [pid 2819411:tid 2819411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:06.684656 2026] [ssl:error] [pid 2826577:tid 2826577] (EAI 2)Name or service not known: [client 144.76.19.72:27134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:06.684705 2026] [ssl:error] [pid 2826577:tid 2826577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:07.306802 2026] [core:error] [pid 2823073:tid 2823073] [client 66.249.64.172:60821] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:07.306833 2026] [core:error] [pid 2823073:tid 2823073] [client 66.249.64.172:60821] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:07.324243 2026] [core:error] [pid 2819411:tid 2819411] [client 66.249.64.172:62027] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:07.324266 2026] [core:error] [pid 2819411:tid 2819411] [client 66.249.64.172:62027] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:08.263417 2026] [security2:error] [pid 2823073:tid 2823073] [client 170.106.193.108:34844] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "render-farm.co.uk"] [uri "/"] [unique_id "amsh1EjKz5k19FvKAdrXdAAAAEM"]
[Thu Jul 30 11:05:08.304284 2026] [security2:error] [pid 2819411:tid 2819411] [client 8.216.46.213:17001] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,177.0.html"] [unique_id "amsh1IZ4W9T_k8UD64NJbQAAAD8"]
[Thu Jul 30 11:05:08.304335 2026] [security2:error] [pid 2819411:tid 2819411] [client 8.216.46.213:17001] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,177.0.html"] [unique_id "amsh1IZ4W9T_k8UD64NJbQAAAD8"]
[Thu Jul 30 11:05:08.304597 2026] [security2:error] [pid 2819411:tid 2819411] [client 8.216.46.213:17001] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsh1IZ4W9T_k8UD64NJbQAAAD8"]
[Thu Jul 30 11:05:09.174813 2026] [authz_core:error] [pid 2805965:tid 2805965] [client 52.238.199.152:37499] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/ID3/error_log
[Thu Jul 30 11:05:09.677335 2026] [core:error] [pid 2819912:tid 2819912] (13)Permission denied: [client 216.73.216.199:22053] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/free_calls
[Thu Jul 30 11:05:09.741449 2026] [ssl:error] [pid 2807343:tid 2807343] (EAI 2)Name or service not known: [client 144.76.19.72:48410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:09.741487 2026] [ssl:error] [pid 2807343:tid 2807343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:09.792850 2026] [ssl:error] [pid 2826577:tid 2826577] (EAI 2)Name or service not known: [client 144.76.19.72:48424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:09.792880 2026] [ssl:error] [pid 2826577:tid 2826577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:09.813699 2026] [security2:error] [pid 2826424:tid 2826424] [client 43.153.54.14:41684] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsh1V9pxCqGbfbmTHjhIwAAAAI"], referer: http://prosperon.co.uk
[Thu Jul 30 11:05:10.415339 2026] [core:error] [pid 2805236:tid 2805236] (13)Permission denied: [client 216.73.216.199:6883] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:05:10.916095 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.106.6.65:60415] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,177.0.html"] [unique_id "amsh1vQip3flDj78JW4wOgAAABY"]
[Thu Jul 30 11:05:10.916148 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.106.6.65:60415] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,177.0.html"] [unique_id "amsh1vQip3flDj78JW4wOgAAABY"]
[Thu Jul 30 11:05:10.916398 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.106.6.65:60415] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsh1vQip3flDj78JW4wOgAAABY"]
[Thu Jul 30 11:05:12.454918 2026] [security2:error] [pid 2801550:tid 2801550] [client 43.153.48.240:47152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amsh2NhAx77JCtw8kSElVQAAAAk"]
[Thu Jul 30 11:05:12.514986 2026] [core:error] [pid 2813445:tid 2813445] (13)Permission denied: [client 216.73.216.199:46601] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/fs/proc_can_see_other_uid
[Thu Jul 30 11:05:12.892698 2026] [ssl:error] [pid 2819908:tid 2819908] (EAI 2)Name or service not known: [client 144.76.19.72:48438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:12.892734 2026] [ssl:error] [pid 2819908:tid 2819908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:12.947389 2026] [ssl:error] [pid 2810224:tid 2810224] (EAI 2)Name or service not known: [client 144.76.19.72:48452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:12.947415 2026] [ssl:error] [pid 2810224:tid 2810224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:13.228750 2026] [security2:error] [pid 2822297:tid 2822297] [client 114.119.155.144:34289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/kids-club/"] [unique_id "amsh2Y2lOFGySJjmEA5ulgAAAAM"], referer: http://www.erskinenazarene.co.uk/event/kids-club/?instance_id=38030
[Thu Jul 30 11:05:13.418294 2026] [core:error] [pid 2813445:tid 2813445] (13)Permission denied: [client 216.73.216.199:46601] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bud_item/shrink
[Thu Jul 30 11:05:13.930274 2026] [security2:error] [pid 2814684:tid 2814684] [client 85.208.96.209:20948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/wheaton-warrenville-south-bell-schedule"] [unique_id "amsh2Wh7dKBXXF5Xfzx5XAAAAAg"]
[Thu Jul 30 11:05:14.021017 2026] [ssl:error] [pid 2813445:tid 2813445] (70014)End of file found: [client 216.73.216.199:46601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:14.036837 2026] [security2:error] [pid 2810224:tid 2810224] [client 170.106.35.153:51326] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsh2ha78o2mXSJS4cpjwgAAAA8"], referer: http://rock-ola.co.uk
[Thu Jul 30 11:05:14.328718 2026] [security2:error] [pid 2801550:tid 2801550] [client 114.119.155.144:34303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/kids-club/"] [unique_id "amsh2thAx77JCtw8kSElVgAAAAk"], referer: http://www.erskinenazarene.co.uk/event/kids-club/?instance_id=38030
[Thu Jul 30 11:05:14.602684 2026] [security2:error] [pid 2822975:tid 2822975] [client 43.106.6.65:13815] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,177.0.html"] [unique_id "amsh2kcyKlWxqn5qmfdjGgAAABQ"]
[Thu Jul 30 11:05:14.602747 2026] [security2:error] [pid 2822975:tid 2822975] [client 43.106.6.65:13815] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,177.0.html"] [unique_id "amsh2kcyKlWxqn5qmfdjGgAAABQ"]
[Thu Jul 30 11:05:14.603059 2026] [security2:error] [pid 2822975:tid 2822975] [client 43.106.6.65:13815] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsh2kcyKlWxqn5qmfdjGgAAABQ"]
[Thu Jul 30 11:05:16.048352 2026] [ssl:error] [pid 2822975:tid 2822975] (EAI 2)Name or service not known: [client 144.76.19.72:48462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:16.048411 2026] [ssl:error] [pid 2822975:tid 2822975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:16.105039 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:48474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:16.105082 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:16.136224 2026] [core:error] [pid 2805236:tid 2805236] (13)Permission denied: [client 216.73.216.199:6883] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:05:16.215664 2026] [security2:error] [pid 2810224:tid 2810224] [client 170.106.35.153:51318] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsh3Ba78o2mXSJS4cpjwwAAAA8"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 11:05:16.822989 2026] [security2:error] [pid 2817491:tid 2817491] [client 47.128.23.227:58560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsh3EAilZO4tS3udAvFIgAAADA"]
[Thu Jul 30 11:05:18.250023 2026] [core:error] [pid 2805236:tid 2805236] (13)Permission denied: [client 216.73.216.199:6883] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/wmsfirearmstraining.co.uk.db
[Thu Jul 30 11:05:18.852204 2026] [ssl:error] [pid 2805236:tid 2805236] (70014)End of file found: [client 216.73.216.199:6883] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:19.143175 2026] [core:error] [pid 2822880:tid 2822880] [client 66.249.66.4:56697] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:19.143183 2026] [security2:error] [pid 2823069:tid 2823069] [client 43.135.145.77:58788] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "amsh37KW4gqUKQC3JvlwIAAAABc"]
[Thu Jul 30 11:05:19.143210 2026] [core:error] [pid 2822880:tid 2822880] [client 66.249.66.4:56697] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:19.157941 2026] [core:error] [pid 2826424:tid 2826424] [client 66.249.66.169:44207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:19.157966 2026] [core:error] [pid 2826424:tid 2826424] [client 66.249.66.169:44207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:19.161055 2026] [ssl:error] [pid 2819910:tid 2819910] (EAI 2)Name or service not known: [client 144.76.19.72:48488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:19.161101 2026] [ssl:error] [pid 2819910:tid 2819910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:19.217175 2026] [ssl:error] [pid 2822975:tid 2822975] (EAI 2)Name or service not known: [client 144.76.19.72:48504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:19.217203 2026] [ssl:error] [pid 2822975:tid 2822975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:19.754697 2026] [ssl:error] [pid 2813974:tid 2813974] (70014)End of file found: [client 216.73.216.199:25233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:20.973028 2026] [ssl:error] [pid 2822975:tid 2822975] (70014)End of file found: [client 216.73.216.199:62047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:21.063624 2026] [security2:error] [pid 2813445:tid 2813445] [client 115.164.94.80:40780] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsh4cpHUhnka2Fq9WoTGwAAACc"]
[Thu Jul 30 11:05:21.063678 2026] [security2:error] [pid 2813445:tid 2813445] [client 115.164.94.80:40780] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsh4cpHUhnka2Fq9WoTGwAAACc"]
[Thu Jul 30 11:05:21.063914 2026] [security2:error] [pid 2813445:tid 2813445] [client 115.164.94.80:40780] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsh4cpHUhnka2Fq9WoTGwAAACc"]
[Thu Jul 30 11:05:21.528001 2026] [authz_core:error] [pid 2805965:tid 2805965] [client 52.238.199.152:37499] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/includes/error_log
[Thu Jul 30 11:05:22.281182 2026] [ssl:error] [pid 2819910:tid 2819910] (EAI 2)Name or service not known: [client 144.76.19.72:42616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:22.281214 2026] [ssl:error] [pid 2819910:tid 2819910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:22.341981 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:42624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:22.342009 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:23.799615 2026] [security2:error] [pid 2817491:tid 2817491] [client 176.97.134.177:11831] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsh40AilZO4tS3udAvFJAAAADA"]
[Thu Jul 30 11:05:23.799674 2026] [security2:error] [pid 2817491:tid 2817491] [client 176.97.134.177:11831] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsh40AilZO4tS3udAvFJAAAADA"]
[Thu Jul 30 11:05:23.799923 2026] [security2:error] [pid 2817491:tid 2817491] [client 176.97.134.177:11831] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsh40AilZO4tS3udAvFJAAAADA"]
[Thu Jul 30 11:05:24.141698 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/red.php
[Thu Jul 30 11:05:24.295686 2026] [autoindex:error] [pid 2805999:tid 2805999] (13)Permission denied: [client 216.73.216.199:40363] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/workwis/
[Thu Jul 30 11:05:24.601935 2026] [authz_core:error] [pid 2805965:tid 2805965] [client 52.238.199.152:37499] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/error_log
[Thu Jul 30 11:05:25.422694 2026] [ssl:error] [pid 2813974:tid 2813974] (EAI 2)Name or service not known: [client 144.76.19.72:42630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:25.422735 2026] [ssl:error] [pid 2813974:tid 2813974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:25.474545 2026] [ssl:error] [pid 2817492:tid 2817492] (EAI 2)Name or service not known: [client 144.76.19.72:42648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:25.474594 2026] [ssl:error] [pid 2817492:tid 2817492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:25.540463 2026] [security2:error] [pid 2813445:tid 2813445] [client 43.153.86.78:55362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amsh5cpHUhnka2Fq9WoTHwAAACc"]
[Thu Jul 30 11:05:25.799949 2026] [ssl:error] [pid 2805999:tid 2805999] (70014)End of file found: [client 216.73.216.199:40363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:26.714398 2026] [core:error] [pid 2817014:tid 2817014] (13)Permission denied: [client 216.73.216.199:33323] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_piix/drivers/pci:ata_piix/remove_id
[Thu Jul 30 11:05:26.917533 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/red.php
[Thu Jul 30 11:05:27.319388 2026] [security2:error] [pid 2819784:tid 2819784] [client 129.226.195.146:58566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsh594LI1NOUbdDJwIbHQAAAEI"]
[Thu Jul 30 11:05:27.321387 2026] [authz_core:error] [pid 2819784:tid 2819784] [client 129.226.195.146:58566] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:05:27.324045 2026] [authz_core:error] [pid 2819784:tid 2819784] [client 129.226.195.146:58566] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:05:27.417557 2026] [core:error] [pid 2815670:tid 2815670] [client 66.249.64.170:55625] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:27.417588 2026] [core:error] [pid 2815670:tid 2815670] [client 66.249.64.170:55625] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:27.513533 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/cc.php
[Thu Jul 30 11:05:27.613186 2026] [core:error] [pid 2817440:tid 2817440] (13)Permission denied: [client 216.73.216.199:59577] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/virtio/drivers/virtio_rng/bind
[Thu Jul 30 11:05:28.017935 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/cc.php
[Thu Jul 30 11:05:28.215203 2026] [core:error] [pid 2817440:tid 2817440] (13)Permission denied: [client 216.73.216.199:59577] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cud_item/shrink
[Thu Jul 30 11:05:28.528632 2026] [ssl:error] [pid 2827783:tid 2827783] (EAI 2)Name or service not known: [client 144.76.19.72:42656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:28.528667 2026] [ssl:error] [pid 2827783:tid 2827783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:28.582237 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:42670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:28.582272 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:28.656175 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/log.php
[Thu Jul 30 11:05:29.498498 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/log.php
[Thu Jul 30 11:05:30.626569 2026] [core:error] [pid 2817440:tid 2817440] (13)Permission denied: [client 216.73.216.199:59577] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/uhci_urb_priv/store_user
[Thu Jul 30 11:05:30.646007 2026] [authz_core:error] [pid 2805965:tid 2805965] [client 52.238.199.152:37499] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 11:05:30.867926 2026] [lsapi:warn] [pid 2813445:tid 2813445] [client 99.72.197.102:59088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:05:30.867969 2026] [lsapi:warn] [pid 2813445:tid 2813445] [client 99.72.197.102:59088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:05:31.175912 2026] [lsapi:warn] [pid 2813445:tid 2813445] [client 99.72.197.102:59088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:05:31.175944 2026] [lsapi:warn] [pid 2813445:tid 2813445] [client 99.72.197.102:59088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:05:31.537869 2026] [ssl:error] [pid 2817440:tid 2817440] (70014)End of file found: [client 216.73.216.199:59577] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:31.638830 2026] [ssl:error] [pid 2819910:tid 2819910] (EAI 2)Name or service not known: [client 144.76.19.72:30152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:31.638859 2026] [ssl:error] [pid 2819910:tid 2819910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:31.696359 2026] [ssl:error] [pid 2813974:tid 2813974] (EAI 2)Name or service not known: [client 144.76.19.72:30162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:31.696397 2026] [ssl:error] [pid 2813974:tid 2813974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:32.031970 2026] [security2:error] [pid 2828090:tid 2828090] [client 152.57.132.42:57534] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsh7CWZTEvvEs0S9y4mhgAAAAg"]
[Thu Jul 30 11:05:32.032024 2026] [security2:error] [pid 2828090:tid 2828090] [client 152.57.132.42:57534] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsh7CWZTEvvEs0S9y4mhgAAAAg"]
[Thu Jul 30 11:05:32.032327 2026] [security2:error] [pid 2828090:tid 2828090] [client 152.57.132.42:57534] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsh7CWZTEvvEs0S9y4mhgAAAAg"]
[Thu Jul 30 11:05:32.321988 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/style.php
[Thu Jul 30 11:05:32.445790 2026] [security2:error] [pid 2817014:tid 2817014] [client 216.73.216.199:33323] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_ethp_big_z8e.dat"] [unique_id "amsh7BQt6qmeL5_2s7bzjgAAAA0"]
[Thu Jul 30 11:05:32.446099 2026] [security2:error] [pid 2817014:tid 2817014] [client 216.73.216.199:33323] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_ethp_big_z8e.dat"] [unique_id "amsh7BQt6qmeL5_2s7bzjgAAAA0"]
[Thu Jul 30 11:05:32.446317 2026] [security2:error] [pid 2817014:tid 2817014] [client 216.73.216.199:33323] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_ethp_big_z8e.dat"] [unique_id "amsh7BQt6qmeL5_2s7bzjgAAAA0"]
[Thu Jul 30 11:05:32.796531 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/style.php
[Thu Jul 30 11:05:33.049907 2026] [core:crit] [pid 2817014:tid 2817014] (13)Permission denied: [client 216.73.216.199:33323] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/eula/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/eula/' is executable
[Thu Jul 30 11:05:33.049958 2026] [core:crit] [pid 2817014:tid 2817014] (13)Permission denied: [client 216.73.216.199:33323] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/geo/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/geo/' is executable
[Thu Jul 30 11:05:33.050002 2026] [core:crit] [pid 2817014:tid 2817014] (13)Permission denied: [client 216.73.216.199:33323] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/realtime-av-conf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/realtime-av-conf/' is executable
[Thu Jul 30 11:05:33.050038 2026] [core:crit] [pid 2817014:tid 2817014] (13)Permission denied: [client 216.73.216.199:33323] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/wp-rules/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/imunify360/files/wp-rules/' is executable
[Thu Jul 30 11:05:34.516622 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 11:05:34.751263 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:30166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:34.751306 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:34.804246 2026] [ssl:error] [pid 2822975:tid 2822975] (EAI 2)Name or service not known: [client 144.76.19.72:30170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:34.804280 2026] [ssl:error] [pid 2822975:tid 2822975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:34.882406 2026] [ssl:error] [pid 2823072:tid 2823072] (70014)End of file found: [client 216.73.216.199:64894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:34.986242 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 11:05:35.193125 2026] [autoindex:error] [pid 2817014:tid 2817014] (13)Permission denied: [client 216.73.216.199:33323] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/kingston/
[Thu Jul 30 11:05:35.491859 2026] [ssl:error] [pid 2817014:tid 2817014] (70014)End of file found: [client 216.73.216.199:33323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:35.609020 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/uninstall.php
[Thu Jul 30 11:05:36.128572 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/uninstall.php
[Thu Jul 30 11:05:36.829239 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/la.php
[Thu Jul 30 11:05:37.323633 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/la.php
[Thu Jul 30 11:05:37.533890 2026] [security2:error] [pid 2817492:tid 2817492] [client 185.191.171.16:59468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsh8XJiypSGjlpWLwYU3gAAADg"]
[Thu Jul 30 11:05:37.811638 2026] [security2:error] [pid 2813445:tid 2813445] [client 85.208.96.196:25438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1116.0/prev_next,next.html"] [unique_id "amsh8cpHUhnka2Fq9WoTIwAAACc"]
[Thu Jul 30 11:05:37.860731 2026] [ssl:error] [pid 2827872:tid 2827872] (EAI 2)Name or service not known: [client 144.76.19.72:30182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:37.860765 2026] [ssl:error] [pid 2827872:tid 2827872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:37.913784 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:30192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:37.913815 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:37.941203 2026] [access_compat:error] [pid 2815979:tid 2815979] [client 74.248.20.32:57034] AH01797: client denied by server configuration: /home/thepryor/public_html/css.php
[Thu Jul 30 11:05:38.197397 2026] [security2:error] [pid 2817491:tid 2817491] [client 43.159.36.180:43262] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsh8kAilZO4tS3udAvFKwAAADA"]
[Thu Jul 30 11:05:38.450317 2026] [access_compat:error] [pid 2819908:tid 2819908] [client 74.248.20.32:64897] AH01797: client denied by server configuration: /home/thepryor/public_html/css.php
[Thu Jul 30 11:05:38.524482 2026] [ssl:error] [pid 2815972:tid 2815972] (70014)End of file found: [client 216.73.216.199:63405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:40.966849 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:53158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:40.966882 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:41.023213 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:53168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:41.023242 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:41.032871 2026] [ssl:error] [pid 2801550:tid 2801550] (70014)End of file found: [client 216.73.216.199:44250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:41.325875 2026] [security2:error] [pid 2819910:tid 2819910] [client 43.159.36.180:43002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsh9ZwZdvDRRNztCi6k3gAAAEw"], referer: http://berehap.be
[Thu Jul 30 11:05:42.840548 2026] [core:error] [pid 2805999:tid 2805999] (13)Permission denied: [client 216.73.216.199:37324] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_efi_item/shrink
[Thu Jul 30 11:05:43.744347 2026] [ssl:error] [pid 2805999:tid 2805999] (70014)End of file found: [client 216.73.216.199:37324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:44.076963 2026] [ssl:error] [pid 2818972:tid 2818972] (EAI 2)Name or service not known: [client 144.76.19.72:53180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:44.076998 2026] [ssl:error] [pid 2818972:tid 2818972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:44.130320 2026] [ssl:error] [pid 2817492:tid 2817492] (EAI 2)Name or service not known: [client 144.76.19.72:53190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:44.130354 2026] [ssl:error] [pid 2817492:tid 2817492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:45.171932 2026] [security2:error] [pid 2823071:tid 2823071] [client 43.159.36.180:46506] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsh-dfl1TTLyMLJyo8jcwAAADI"], referer: https://www.berehap.be/
[Thu Jul 30 11:05:45.252735 2026] [autoindex:error] [pid 2817490:tid 2817490] (13)Permission denied: [client 216.73.216.199:15946] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/qse/
[Thu Jul 30 11:05:45.254831 2026] [cgi:error] [pid 2799623:tid 2799623] [client 20.151.254.105:39486] AH02812: stderr from /home/plastics/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:05:46.452819 2026] [ssl:error] [pid 2817490:tid 2817490] (70014)End of file found: [client 216.73.216.199:15946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:47.186927 2026] [ssl:error] [pid 2805236:tid 2805236] (EAI 2)Name or service not known: [client 144.76.19.72:53204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:47.186959 2026] [ssl:error] [pid 2805236:tid 2805236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:47.240565 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:53208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:47.240593 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:49.787734 2026] [ssl:error] [pid 2819908:tid 2819908] (70014)End of file found: [client 216.73.216.199:61692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:50.296776 2026] [ssl:error] [pid 2828962:tid 2828962] (EAI 2)Name or service not known: [client 144.76.19.72:25122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:50.296805 2026] [ssl:error] [pid 2828962:tid 2828962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:50.351908 2026] [ssl:error] [pid 2817491:tid 2817491] (EAI 2)Name or service not known: [client 144.76.19.72:25124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:50.351936 2026] [ssl:error] [pid 2817491:tid 2817491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:50.963602 2026] [security2:error] [pid 2801550:tid 2801550] [client 74.7.227.134:48356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "itsupportinayrshire.com"] [uri "/"] [unique_id "amsh_thAx77JCtw8kSElawAAAAk"]
[Thu Jul 30 11:05:50.996435 2026] [ssl:error] [pid 2827872:tid 2827872] (70014)End of file found: [client 216.73.216.199:57266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:51.895295 2026] [core:error] [pid 2817440:tid 2817440] (13)Permission denied: [client 216.73.216.199:54198] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS3/irq
[Thu Jul 30 11:05:53.100083 2026] [ssl:error] [pid 2817440:tid 2817440] (70014)End of file found: [client 216.73.216.199:54198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:53.405690 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:25134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:53.405723 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:53.457318 2026] [ssl:error] [pid 2826424:tid 2826424] (EAI 2)Name or service not known: [client 144.76.19.72:25136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:53.457346 2026] [ssl:error] [pid 2826424:tid 2826424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:55.098511 2026] [ssl:error] [pid 2818972:tid 2818972] (70014)End of file found: [client 216.73.216.199:39998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:56.313167 2026] [core:error] [pid 2817014:tid 2817014] (13)Permission denied: [client 216.73.216.199:43890] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cui_item/aliases
[Thu Jul 30 11:05:56.420811 2026] [ssl:error] [pid 2817014:tid 2817014] (70014)End of file found: [client 216.73.216.199:43890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:56.527024 2026] [ssl:error] [pid 2805236:tid 2805236] (EAI 2)Name or service not known: [client 144.76.19.72:25138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:56.527078 2026] [ssl:error] [pid 2805236:tid 2805236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:56.580197 2026] [ssl:error] [pid 2817491:tid 2817491] (EAI 2)Name or service not known: [client 144.76.19.72:25146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:56.580228 2026] [ssl:error] [pid 2817491:tid 2817491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:57.140936 2026] [authz_core:error] [pid 2826424:tid 2826424] [client 52.238.199.152:54913] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/IXR/error_log
[Thu Jul 30 11:05:58.138084 2026] [core:error] [pid 2815912:tid 2815912] [client 66.249.66.5:48877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:58.138116 2026] [core:error] [pid 2815912:tid 2815912] [client 66.249.66.5:48877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:05:58.841228 2026] [ssl:error] [pid 2805999:tid 2805999] (70014)End of file found: [client 216.73.216.199:3080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:05:59.266600 2026] [security2:error] [pid 2828090:tid 2828090] [client 43.135.148.92:39602] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spurr.org.uk"] [uri "/"] [unique_id "amsiByWZTEvvEs0S9y4mjAAAAAg"]
[Thu Jul 30 11:05:59.633369 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:43572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:59.633401 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:05:59.686241 2026] [ssl:error] [pid 2815979:tid 2815979] (EAI 2)Name or service not known: [client 144.76.19.72:43580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:05:59.686272 2026] [ssl:error] [pid 2815979:tid 2815979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:00.555612 2026] [security2:error] [pid 2801550:tid 2801550] [client 216.73.216.199:38423] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/imunify360/custom_billing.config"] [unique_id "amsiCNhAx77JCtw8kSElbgAAAAk"]
[Thu Jul 30 11:06:00.555910 2026] [security2:error] [pid 2801550:tid 2801550] [client 216.73.216.199:38423] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/imunify360/custom_billing.config"] [unique_id "amsiCNhAx77JCtw8kSElbgAAAAk"]
[Thu Jul 30 11:06:00.556140 2026] [security2:error] [pid 2801550:tid 2801550] [client 216.73.216.199:38423] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/imunify360/custom_billing.config"] [unique_id "amsiCNhAx77JCtw8kSElbgAAAAk"]
[Thu Jul 30 11:06:00.598486 2026] [core:error] [pid 2828090:tid 2828090] [client 66.249.66.169:53785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:00.598515 2026] [core:error] [pid 2828090:tid 2828090] [client 66.249.66.169:53785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:02.159524 2026] [ssl:error] [pid 2801550:tid 2801550] (70014)End of file found: [client 216.73.216.199:38423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:02.741749 2026] [ssl:error] [pid 2805965:tid 2805965] (EAI 2)Name or service not known: [client 144.76.19.72:43604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:02.741780 2026] [ssl:error] [pid 2805965:tid 2805965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:02.798894 2026] [ssl:error] [pid 2817014:tid 2817014] (EAI 2)Name or service not known: [client 144.76.19.72:43606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:02.798926 2026] [ssl:error] [pid 2817014:tid 2817014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:03.061727 2026] [ssl:error] [pid 2815979:tid 2815979] (70014)End of file found: [client 216.73.216.199:15775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:05.852581 2026] [ssl:error] [pid 2815670:tid 2815670] (EAI 2)Name or service not known: [client 144.76.19.72:43632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:05.852629 2026] [ssl:error] [pid 2815670:tid 2815670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:05.909461 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:43644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:05.909508 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:06.072793 2026] [ssl:error] [pid 2819912:tid 2819912] (70014)End of file found: [client 216.73.216.199:47300] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:08.108270 2026] [ssl:error] [pid 2799771:tid 2799771] (70014)End of file found: [client 216.73.216.199:21979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:08.965976 2026] [ssl:error] [pid 2828090:tid 2828090] (EAI 2)Name or service not known: [client 144.76.19.72:43650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:08.966024 2026] [ssl:error] [pid 2828090:tid 2828090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:09.017582 2026] [ssl:error] [pid 2810224:tid 2810224] (EAI 2)Name or service not known: [client 144.76.19.72:43654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:09.017607 2026] [ssl:error] [pid 2810224:tid 2810224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:10.381721 2026] [security2:error] [pid 2819910:tid 2819910] [client 192.144.148.122:44010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "leaccess.co.uk"] [uri "/"] [unique_id "amsiEpwZdvDRRNztCi6lRQAAAEw"]
[Thu Jul 30 11:06:11.391833 2026] [core:error] [pid 2826577:tid 2826577] [client 66.249.64.171:62918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:11.391867 2026] [core:error] [pid 2826577:tid 2826577] [client 66.249.64.171:62918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:11.393248 2026] [core:error] [pid 2817492:tid 2817492] [client 66.249.64.172:43058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:11.393280 2026] [core:error] [pid 2817492:tid 2817492] [client 66.249.64.172:43058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:12.028447 2026] [ssl:error] [pid 2815979:tid 2815979] (70014)End of file found: [client 216.73.216.199:6183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:12.070739 2026] [ssl:error] [pid 2819910:tid 2819910] (EAI 2)Name or service not known: [client 144.76.19.72:57206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:12.070767 2026] [ssl:error] [pid 2819910:tid 2819910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:12.123380 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:57212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:12.123409 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:13.236835 2026] [ssl:error] [pid 2827923:tid 2827923] (70014)End of file found: [client 216.73.216.199:51467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:14.742885 2026] [ssl:error] [pid 2819912:tid 2819912] (70014)End of file found: [client 216.73.216.199:56330] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:14.934192 2026] [security2:error] [pid 2823072:tid 2823072] [client 185.191.171.7:50276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/simmental-beef-cattle-for-sale-near-paris"] [unique_id "amsiFht_UQDEcOLgX9oVYgAAAD4"]
[Thu Jul 30 11:06:15.180009 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:57224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:15.180036 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:15.232697 2026] [ssl:error] [pid 2817492:tid 2817492] (EAI 2)Name or service not known: [client 144.76.19.72:57240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:15.232723 2026] [ssl:error] [pid 2817492:tid 2817492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:15.323127 2026] [security2:error] [pid 2829969:tid 2829969] [client 43.157.31.106:60855] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiFwKNS0hZtADG66vGvwAAAAY"]
[Thu Jul 30 11:06:15.323184 2026] [security2:error] [pid 2829969:tid 2829969] [client 43.157.31.106:60855] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiFwKNS0hZtADG66vGvwAAAAY"]
[Thu Jul 30 11:06:15.323499 2026] [security2:error] [pid 2829969:tid 2829969] [client 43.157.31.106:60855] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsiFwKNS0hZtADG66vGvwAAAAY"]
[Thu Jul 30 11:06:16.200870 2026] [authz_core:error] [pid 2819910:tid 2819910] [client 66.249.66.33:50598] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:06:16.203608 2026] [authz_core:error] [pid 2819910:tid 2819910] [client 66.249.66.33:50598] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:06:16.463016 2026] [core:error] [pid 2827872:tid 2827872] [client 66.249.64.171:42849] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:16.463038 2026] [core:error] [pid 2827872:tid 2827872] [client 66.249.64.171:42849] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:06:17.450714 2026] [core:error] [pid 2829969:tid 2829969] (13)Permission denied: [client 216.73.216.199:18271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/demousers
[Thu Jul 30 11:06:18.286126 2026] [ssl:error] [pid 2830121:tid 2830121] (EAI 2)Name or service not known: [client 144.76.19.72:57250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:18.286170 2026] [ssl:error] [pid 2830121:tid 2830121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:18.341354 2026] [ssl:error] [pid 2827923:tid 2827923] (EAI 2)Name or service not known: [client 144.76.19.72:57252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:18.341387 2026] [ssl:error] [pid 2827923:tid 2827923] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:18.379520 2026] [authz_core:error] [pid 2823069:tid 2823069] [client 216.73.216.199:25120] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 11:06:19.038382 2026] [autoindex:error] [pid 2801550:tid 2801550] [client 172.213.10.64:27811] AH01276: Cannot serve directory /home/baketast/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:06:19.467687 2026] [autoindex:error] [pid 2801550:tid 2801550] [client 172.213.10.64:27811] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:06:19.807121 2026] [security2:error] [pid 2828833:tid 2828833] [client 43.157.188.74:33924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sarahwiseman.co.uk"] [uri "/"] [unique_id "amsiGwytS1x4vcAoCY7MdAAAABA"]
[Thu Jul 30 11:06:20.530987 2026] [authz_core:error] [pid 2830224:tid 2830224] [client 20.206.204.219:59312] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:06:20.589766 2026] [security2:error] [pid 2830225:tid 2830225] [client 103.150.254.114:59870] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiHBMgL8bnoMUtpNeRywAAAB4"]
[Thu Jul 30 11:06:20.589829 2026] [security2:error] [pid 2830225:tid 2830225] [client 103.150.254.114:59870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiHBMgL8bnoMUtpNeRywAAAB4"]
[Thu Jul 30 11:06:20.590174 2026] [security2:error] [pid 2830225:tid 2830225] [client 103.150.254.114:59870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsiHBMgL8bnoMUtpNeRywAAAB4"]
[Thu Jul 30 11:06:21.397743 2026] [ssl:error] [pid 2828833:tid 2828833] (EAI 2)Name or service not known: [client 144.76.19.72:43706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:21.397775 2026] [ssl:error] [pid 2828833:tid 2828833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:21.456451 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:43722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:21.456477 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:21.869360 2026] [authz_core:error] [pid 2815973:tid 2815973] [client 66.249.66.33:61065] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:06:21.872062 2026] [authz_core:error] [pid 2815973:tid 2815973] [client 66.249.66.33:61065] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:06:21.955821 2026] [security2:error] [pid 2815972:tid 2815972] [client 43.157.188.74:36676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amsiHTUnqVvzbgN83fHqKwAAADQ"], referer: http://www.sarahwiseman.co.uk
[Thu Jul 30 11:06:24.510913 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:43734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:24.510942 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:24.563620 2026] [ssl:error] [pid 2805236:tid 2805236] (EAI 2)Name or service not known: [client 144.76.19.72:43742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:24.563651 2026] [ssl:error] [pid 2805236:tid 2805236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:25.284778 2026] [autoindex:error] [pid 2801550:tid 2801550] [client 172.213.10.64:27811] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:06:25.292752 2026] [security2:error] [pid 2830121:tid 2830121] [client 14.167.119.240:36979] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiIaqRyksYYMz4rVlN9AAAABQ"]
[Thu Jul 30 11:06:25.292796 2026] [security2:error] [pid 2830121:tid 2830121] [client 14.167.119.240:36979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiIaqRyksYYMz4rVlN9AAAABQ"]
[Thu Jul 30 11:06:25.293089 2026] [security2:error] [pid 2830121:tid 2830121] [client 14.167.119.240:36979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsiIaqRyksYYMz4rVlN9AAAABQ"]
[Thu Jul 30 11:06:26.574159 2026] [security2:error] [pid 2830121:tid 2830121] [client 43.157.156.190:36526] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsiIqqRyksYYMz4rVlN9QAAABQ"]
[Thu Jul 30 11:06:27.633625 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:43748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:27.633664 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:27.689288 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:43756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:27.689321 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:28.114516 2026] [ssl:error] [pid 2823069:tid 2823069] (70014)End of file found: [client 216.73.216.199:36727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:28.415704 2026] [ssl:error] [pid 2815670:tid 2815670] (70014)End of file found: [client 216.73.216.199:42424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:28.918820 2026] [ssl:error] [pid 2805236:tid 2805236] (70014)End of file found: [client 216.73.216.199:47126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:28.952217 2026] [authz_core:error] [pid 2830358:tid 2830358] [client 20.206.204.219:61131] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:06:30.380253 2026] [security2:error] [pid 2830358:tid 2830358] [client 43.157.156.190:41002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsiJpARce5PlvIqLeNXrwAAACE"], referer: http://www.retrodisco.co.uk
[Thu Jul 30 11:06:30.439495 2026] [autoindex:error] [pid 2801550:tid 2801550] [client 172.213.10.64:27811] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:06:30.741280 2026] [ssl:error] [pid 2830223:tid 2830223] (EAI 2)Name or service not known: [client 144.76.19.72:35784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:30.741319 2026] [ssl:error] [pid 2830223:tid 2830223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:30.796212 2026] [ssl:error] [pid 2826577:tid 2826577] (EAI 2)Name or service not known: [client 144.76.19.72:35798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:30.796247 2026] [ssl:error] [pid 2826577:tid 2826577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:30.812045 2026] [autoindex:error] [pid 2801550:tid 2801550] [client 172.213.10.64:27811] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:06:31.527177 2026] [security2:error] [pid 2828770:tid 2828770] [client 183.87.97.73:37127] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amsiJ9FrDuefOXDNMUgsFgAAAAU"], referer: https://ziltdesign.be/
[Thu Jul 30 11:06:31.854668 2026] [access_compat:error] [pid 2826577:tid 2826577] [client 2.189.5.142:58772] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:06:33.851886 2026] [ssl:error] [pid 2819912:tid 2819912] (EAI 2)Name or service not known: [client 144.76.19.72:35808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:33.851930 2026] [ssl:error] [pid 2819912:tid 2819912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:33.854131 2026] [core:error] [pid 2830358:tid 2830358] (13)Permission denied: [client 216.73.216.199:1146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty44/subsystem/ttyS1/custom_divisor
[Thu Jul 30 11:06:33.906732 2026] [ssl:error] [pid 2823069:tid 2823069] (EAI 2)Name or service not known: [client 144.76.19.72:35814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:33.906774 2026] [ssl:error] [pid 2823069:tid 2823069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:34.079790 2026] [security2:error] [pid 2828770:tid 2828770] [client 101.33.81.73:46382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.islay.me"] [uri "/"] [unique_id "amsiKtFrDuefOXDNMUgsGAAAAAU"]
[Thu Jul 30 11:06:35.661187 2026] [core:error] [pid 2830358:tid 2830358] (13)Permission denied: [client 216.73.216.199:1146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:06:36.961241 2026] [ssl:error] [pid 2827783:tid 2827783] (EAI 2)Name or service not known: [client 144.76.19.72:35826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:36.961279 2026] [ssl:error] [pid 2827783:tid 2827783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:37.014733 2026] [ssl:error] [pid 2815670:tid 2815670] (EAI 2)Name or service not known: [client 144.76.19.72:35838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:37.014762 2026] [ssl:error] [pid 2815670:tid 2815670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:37.167486 2026] [core:error] [pid 2830358:tid 2830358] (13)Permission denied: [client 216.73.216.199:1146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/subsystem/wakeup9/device/eject
[Thu Jul 30 11:06:37.557250 2026] [authz_core:error] [pid 2826424:tid 2826424] [client 66.249.66.33:41866] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:06:37.560938 2026] [authz_core:error] [pid 2826424:tid 2826424] [client 66.249.66.33:41866] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:06:37.757195 2026] [security2:error] [pid 2815972:tid 2815972] [client 114.119.155.144:42493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565478000/cat_ids~17,18/request_format~html"] [unique_id "amsiLTUnqVvzbgN83fHqMgAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1565478000/cat_ids%7E17,18,104/request_format%7Ehtml
[Thu Jul 30 11:06:37.948910 2026] [authz_core:error] [pid 2819912:tid 2819912] [client 20.206.204.219:62654] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:06:38.843633 2026] [security2:error] [pid 2823069:tid 2823069] [client 114.119.155.144:27703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565478000/cat_ids~17,18/request_format~html"] [unique_id "amsiLrKW4gqUKQC3JvlwjwAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1565478000/cat_ids%7E17,18,104/request_format%7Ehtml
[Thu Jul 30 11:06:40.178254 2026] [ssl:error] [pid 2830358:tid 2830358] (70014)End of file found: [client 216.73.216.199:1146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:40.316024 2026] [ssl:error] [pid 2830226:tid 2830226] (EAI 2)Name or service not known: [client 144.76.19.72:25720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:40.316056 2026] [ssl:error] [pid 2830226:tid 2830226] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:40.398537 2026] [ssl:error] [pid 2823069:tid 2823069] (EAI 2)Name or service not known: [client 144.76.19.72:25724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:40.398579 2026] [ssl:error] [pid 2823069:tid 2823069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:41.087604 2026] [ssl:error] [pid 2823069:tid 2823069] (70014)End of file found: [client 216.73.216.199:26916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:42.156115 2026] [security2:error] [pid 2830177:tid 2830177] [client 18.199.86.73:36952] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "akoptimize.gatkabfs.com"] [uri "/.git/config"] [unique_id "amsiMkfVJ9G39QHeucpg3QAAABU"]
[Thu Jul 30 11:06:42.156313 2026] [security2:error] [pid 2830177:tid 2830177] [client 18.199.86.73:36952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "akoptimize.gatkabfs.com"] [uri "/.git/config"] [unique_id "amsiMkfVJ9G39QHeucpg3QAAABU"]
[Thu Jul 30 11:06:42.156547 2026] [security2:error] [pid 2830177:tid 2830177] [client 18.199.86.73:36952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "akoptimize.gatkabfs.com"] [uri "/.git/config"] [unique_id "amsiMkfVJ9G39QHeucpg3QAAABU"]
[Thu Jul 30 11:06:42.189773 2026] [security2:error] [pid 2831166:tid 2831166] [client 114.119.146.36:38071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiology-training-courses/"] [unique_id "amsiMia6cGVD56d0UhjyDwAAACg"], referer: https://kinesiologylondon.co.uk/wp-sitemap-posts-page-1.xml
[Thu Jul 30 11:06:42.370608 2026] [authz_core:error] [pid 2830224:tid 2830224] [client 66.249.66.33:37569] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:06:42.373253 2026] [authz_core:error] [pid 2830224:tid 2830224] [client 66.249.66.33:37569] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:06:43.193934 2026] [autoindex:error] [pid 2805236:tid 2805236] (13)Permission denied: [client 216.73.216.199:14809] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/epmsonli/
[Thu Jul 30 11:06:43.451835 2026] [ssl:error] [pid 2831057:tid 2831057] (EAI 2)Name or service not known: [client 144.76.19.72:25726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:43.451878 2026] [ssl:error] [pid 2831057:tid 2831057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:43.515503 2026] [ssl:error] [pid 2830121:tid 2830121] (EAI 2)Name or service not known: [client 144.76.19.72:25740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:43.515539 2026] [ssl:error] [pid 2830121:tid 2830121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:43.725251 2026] [security2:error] [pid 2830019:tid 2830019] [client 150.109.46.88:42386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.co.uk"] [uri "/"] [unique_id "amsiMxuN3vPcGBKgIVA-WAAAAA0"]
[Thu Jul 30 11:06:44.285053 2026] [authz_core:error] [pid 2830224:tid 2830224] [client 66.249.66.33:37569] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:06:44.287719 2026] [authz_core:error] [pid 2830224:tid 2830224] [client 66.249.66.33:37569] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:06:44.695806 2026] [core:error] [pid 2805236:tid 2805236] (13)Permission denied: [client 216.73.216.199:14809] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/eventpoll_pwq/aliases
[Thu Jul 30 11:06:44.997220 2026] [ssl:error] [pid 2805236:tid 2805236] (5)Input/output error: [client 216.73.216.199:14809] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:45.424343 2026] [security2:error] [pid 2819912:tid 2819912] [client 150.109.46.88:44102] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsiNRKut1qT_wTLOozr-QAAAE4"], referer: http://www.spamp.co.uk
[Thu Jul 30 11:06:45.904473 2026] [ssl:error] [pid 2810224:tid 2810224] (70014)End of file found: [client 216.73.216.199:50553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:46.572218 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:25754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:46.572269 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:46.628513 2026] [ssl:error] [pid 2830121:tid 2830121] (EAI 2)Name or service not known: [client 144.76.19.72:25762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:46.628538 2026] [ssl:error] [pid 2830121:tid 2830121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:47.418404 2026] [core:error] [pid 2830358:tid 2830358] (13)Permission denied: [client 216.73.216.199:4831] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/RAWv6/sanity_checks
[Thu Jul 30 11:06:47.612714 2026] [security2:error] [pid 2831113:tid 2831113] [client 150.109.46.88:45160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsiN0q5qq13mHqulCG8xgAAACM"], referer: http://spamp.com/
[Thu Jul 30 11:06:47.887215 2026] [security2:error] [pid 2799771:tid 2799771] [client 43.165.198.144:35954] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.craft-buddies.co.uk"] [uri "/"] [unique_id "amsiN-21busEGMTvfl6unwAAACA"]
[Thu Jul 30 11:06:49.230286 2026] [ssl:error] [pid 2830358:tid 2830358] (70014)End of file found: [client 216.73.216.199:4831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:49.680542 2026] [ssl:error] [pid 2828962:tid 2828962] (EAI 2)Name or service not known: [client 144.76.19.72:28828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:49.680598 2026] [ssl:error] [pid 2828962:tid 2828962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:49.733493 2026] [ssl:error] [pid 2810296:tid 2810296] (EAI 2)Name or service not known: [client 144.76.19.72:28834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:49.733525 2026] [ssl:error] [pid 2810296:tid 2810296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:50.415344 2026] [authz_core:error] [pid 2827923:tid 2827923] [client 20.206.204.219:64010] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:06:50.735627 2026] [ssl:error] [pid 2827872:tid 2827872] (70014)End of file found: [client 216.73.216.199:3229] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:51.231976 2026] [ssl:error] [pid 2828962:tid 2828962] (70014)End of file found: [client 216.73.216.199:14233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:52.168318 2026] [security2:error] [pid 2805999:tid 2805999] [client 43.157.188.74:51022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.co.uk"] [uri "/"] [unique_id "amsiPCe1SdbzYMmqO-oxxgAAADE"]
[Thu Jul 30 11:06:52.450955 2026] [security2:error] [pid 2828770:tid 2828770] [client 43.164.133.138:54622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.p2studio.co.uk"] [uri "/"] [unique_id "amsiPNFrDuefOXDNMUgsHQAAAAU"]
[Thu Jul 30 11:06:52.790045 2026] [ssl:error] [pid 2819784:tid 2819784] (EAI 2)Name or service not known: [client 144.76.19.72:28848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:52.790123 2026] [ssl:error] [pid 2819784:tid 2819784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:52.841593 2026] [ssl:error] [pid 2830225:tid 2830225] (EAI 2)Name or service not known: [client 144.76.19.72:28852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:52.841630 2026] [ssl:error] [pid 2830225:tid 2830225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:55.565029 2026] [core:error] [pid 2817491:tid 2817491] (13)Permission denied: [client 216.73.216.199:3202] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty32/subsystem/ttyS1/custom_divisor
[Thu Jul 30 11:06:55.866432 2026] [ssl:error] [pid 2817491:tid 2817491] (70014)End of file found: [client 216.73.216.199:3202] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:55.898980 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:28860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:55.899015 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:55.953639 2026] [ssl:error] [pid 2828833:tid 2828833] (EAI 2)Name or service not known: [client 144.76.19.72:28876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:55.953671 2026] [ssl:error] [pid 2828833:tid 2828833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:56.468971 2026] [ssl:error] [pid 2831164:tid 2831164] (70014)End of file found: [client 216.73.216.199:19866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:06:57.678061 2026] [core:error] [pid 2829969:tid 2829969] (13)Permission denied: [client 216.73.216.199:26671] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty40/subsystem/ttyS1/custom_divisor
[Thu Jul 30 11:06:58.007221 2026] [cgi:error] [pid 2829969:tid 2829969] [client 216.73.216.199:26671] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/perl5/unicore/UCD.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:06:58.007286 2026] [cgi:error] [pid 2829969:tid 2829969] [client 216.73.216.199:26671] End of script output before headers: UCD.pl
[Thu Jul 30 11:06:59.027532 2026] [ssl:error] [pid 2831057:tid 2831057] (EAI 2)Name or service not known: [client 144.76.19.72:28882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:59.027583 2026] [ssl:error] [pid 2831057:tid 2831057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:06:59.027957 2026] [security2:error] [pid 2826424:tid 2826424] [client 43.165.7.132:57930] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.cssystems.co.uk"] [uri "/"] [unique_id "amsiQ19pxCqGbfbmTHjhVgAAAAI"], referer: http://www.cssystems.co.uk
[Thu Jul 30 11:06:59.088199 2026] [ssl:error] [pid 2829969:tid 2829969] (EAI 2)Name or service not known: [client 144.76.19.72:28894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:06:59.088236 2026] [ssl:error] [pid 2829969:tid 2829969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:01.604207 2026] [ssl:error] [pid 2830224:tid 2830224] (70014)End of file found: [client 216.73.216.199:55373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:02.142589 2026] [ssl:error] [pid 2831761:tid 2831761] (EAI 2)Name or service not known: [client 144.76.19.72:55302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:02.142628 2026] [ssl:error] [pid 2831761:tid 2831761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:02.198539 2026] [ssl:error] [pid 2827923:tid 2827923] (EAI 2)Name or service not known: [client 144.76.19.72:55310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:02.198580 2026] [ssl:error] [pid 2827923:tid 2827923] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:02.247893 2026] [security2:error] [pid 2817440:tid 2817440] [client 43.135.186.135:37042] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amsiRkIn1TgRB4cjIl136AAAABI"]
[Thu Jul 30 11:07:02.291449 2026] [ssl:error] [pid 2831163:tid 2831163] (70014)End of file found: [client 216.73.216.199:10469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:02.649058 2026] [security2:error] [pid 2819912:tid 2819912] [client 100.27.153.9:39060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/tshelter-8designs/details.html"] [unique_id "amsiRhKut1qT_wTLOozr_gAAAE4"]
[Thu Jul 30 11:07:03.271436 2026] [core:error] [pid 2831164:tid 2831164] (13)Permission denied: [client 216.73.216.199:51858] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/subsystem/ttyS1/custom_divisor
[Thu Jul 30 11:07:03.773819 2026] [cgi:error] [pid 2831165:tid 2831165] [client 167.103.3.80:57496] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:03 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:03.773973 2026] [cgi:error] [pid 2831165:tid 2831165] [client 167.103.3.80:57496] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:03 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:03.774082 2026] [cgi:error] [pid 2831165:tid 2831165] [client 167.103.3.80:57496] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:03 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:03.774182 2026] [cgi:error] [pid 2831165:tid 2831165] [client 167.103.3.80:57496] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:03 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:03.774281 2026] [cgi:error] [pid 2831165:tid 2831165] [client 167.103.3.80:57496] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:03 2026] iplist-cgi.pl: Use of uninitialized value $mask in pattern match (m//) at iplist-cgi.pl line 31.
[Thu Jul 30 11:07:03.799211 2026] [security2:error] [pid 2832237:tid 2832237] [client 52.4.229.9:35712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/B.24-Sri-Lanka-2004-Tsunami.pdf"] [unique_id "amsiR1HrBmOyPS0ZF98kagAAABU"]
[Thu Jul 30 11:07:03.829271 2026] [security2:error] [pid 2815972:tid 2815972] [client 47.128.24.59:34744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsiRzUnqVvzbgN83fHqPQAAADQ"]
[Thu Jul 30 11:07:04.776432 2026] [ssl:error] [pid 2831164:tid 2831164] (70014)End of file found: [client 216.73.216.199:51858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:05.297527 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:55326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:05.297572 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:05.356117 2026] [ssl:error] [pid 2832272:tid 2832272] (EAI 2)Name or service not known: [client 144.76.19.72:55340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:05.356149 2026] [ssl:error] [pid 2832272:tid 2832272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:07.099097 2026] [security2:error] [pid 2827923:tid 2827923] [client 54.84.169.196:22580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2010/A03-Grenada-2004.pdf"] [unique_id "amsiS0jH5sgioaFMSJuFEwAAAAM"]
[Thu Jul 30 11:07:07.325787 2026] [security2:error] [pid 2828090:tid 2828090] [client 54.235.158.162:13146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/CCCM/vol1/Pakistan-2-2012-Flood.pdf"] [unique_id "amsiSyWZTEvvEs0S9y4mmAAAAAg"]
[Thu Jul 30 11:07:07.947477 2026] [cgi:error] [pid 2830224:tid 2830224] [client 45.38.206.131:35446] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: https://refraction.co.uk/blog/tag/5ghz/
[Thu Jul 30 11:07:08.414754 2026] [ssl:error] [pid 2801550:tid 2801550] (EAI 2)Name or service not known: [client 144.76.19.72:55344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:08.414786 2026] [ssl:error] [pid 2801550:tid 2801550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:08.470404 2026] [ssl:error] [pid 2827923:tid 2827923] (EAI 2)Name or service not known: [client 144.76.19.72:55356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:08.470445 2026] [ssl:error] [pid 2827923:tid 2827923] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:08.802385 2026] [authz_core:error] [pid 2828090:tid 2828090] [client 172.202.44.182:45625] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/pomo/error_log
[Thu Jul 30 11:07:09.908923 2026] [ssl:error] [pid 2815972:tid 2815972] (5)Input/output error: [client 216.73.216.199:40855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:10.004525 2026] [security2:error] [pid 2819912:tid 2819912] [client 43.165.67.31:45636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.org.uk"] [uri "/"] [unique_id "amsiThKut1qT_wTLOozsBgAAAE4"]
[Thu Jul 30 11:07:10.085970 2026] [security2:error] [pid 2831761:tid 2831761] [client 43.157.174.69:33428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.3dworkstation.co.uk"] [uri "/"] [unique_id "amsiTubli5SbOvLyZSrAlQAAABQ"]
[Thu Jul 30 11:07:10.976480 2026] [security2:error] [pid 2831164:tid 2831164] [client 43.165.67.31:46756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amsiTp4rJ7DYXKfs7Zyw6wAAACY"], referer: http://www.shelterforum.org.uk
[Thu Jul 30 11:07:11.298651 2026] [access_compat:error] [pid 2831761:tid 2831761] [client 45.158.164.234:33940] AH01797: client denied by server configuration: /home/nspandor/public_html/404.shtml
[Thu Jul 30 11:07:11.401575 2026] [security2:error] [pid 2831761:tid 2831761] [client 100.27.153.9:60041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2009/ref/C.18-Tonga-1982-Cyclone.pdf"] [unique_id "amsiT-bli5SbOvLyZSrAlwAAABQ"]
[Thu Jul 30 11:07:11.526976 2026] [ssl:error] [pid 2832526:tid 2832526] (EAI 2)Name or service not known: [client 144.76.19.72:40738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:11.527015 2026] [ssl:error] [pid 2832526:tid 2832526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:11.580321 2026] [ssl:error] [pid 2805999:tid 2805999] (EAI 2)Name or service not known: [client 144.76.19.72:40754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:11.580344 2026] [ssl:error] [pid 2805999:tid 2805999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:11.973198 2026] [cgi:error] [pid 2832526:tid 2832526] [client 37.59.21.100:37228] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:07:12.246811 2026] [security2:error] [pid 2818972:tid 2818972] [client 44.215.210.112:49620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/C.11-India-1971-Conflict-refugees.pdf"] [unique_id "amsiUFAm_BJTCDZkdrajegAAABk"]
[Thu Jul 30 11:07:12.919740 2026] [ssl:error] [pid 2799771:tid 2799771] (70014)End of file found: [client 216.73.216.199:29410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:12.958802 2026] [security2:error] [pid 2815670:tid 2815670] [client 150.5.133.25:15983] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiUGjKSCy2vz5JUiNi5AAAAAo"]
[Thu Jul 30 11:07:12.958846 2026] [security2:error] [pid 2815670:tid 2815670] [client 150.5.133.25:15983] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiUGjKSCy2vz5JUiNi5AAAAAo"]
[Thu Jul 30 11:07:12.959116 2026] [security2:error] [pid 2815670:tid 2815670] [client 150.5.133.25:15983] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsiUGjKSCy2vz5JUiNi5AAAAAo"]
[Thu Jul 30 11:07:13.093695 2026] [security2:error] [pid 2817492:tid 2817492] [client 43.155.162.41:34364] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.akoptimize.co.uk"] [uri "/"] [unique_id "amsiUXJiypSGjlpWLwYVSwAAADg"]
[Thu Jul 30 11:07:13.822043 2026] [ssl:error] [pid 2828833:tid 2828833] (70014)End of file found: [client 216.73.216.199:41469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:14.639545 2026] [ssl:error] [pid 2831761:tid 2831761] (EAI 2)Name or service not known: [client 144.76.19.72:40760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:14.639583 2026] [ssl:error] [pid 2831761:tid 2831761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:14.692659 2026] [ssl:error] [pid 2832237:tid 2832237] (EAI 2)Name or service not known: [client 144.76.19.72:40774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:14.692700 2026] [ssl:error] [pid 2832237:tid 2832237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:15.227475 2026] [ssl:error] [pid 2818972:tid 2818972] (70014)End of file found: [client 216.73.216.199:46094] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:15.461282 2026] [core:error] [pid 2832683:tid 2832683] [client 66.249.64.171:39746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:07:15.461345 2026] [core:error] [pid 2832683:tid 2832683] [client 66.249.64.171:39746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:07:15.646748 2026] [core:error] [pid 2832683:tid 2832683] [client 66.249.64.172:51467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:07:15.646782 2026] [core:error] [pid 2832683:tid 2832683] [client 66.249.64.172:51467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:07:15.727684 2026] [security2:error] [pid 2810296:tid 2810296] [client 157.10.7.4:55798] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiU5BxEX7_yYrf7psVggAAADk"]
[Thu Jul 30 11:07:15.727730 2026] [security2:error] [pid 2810296:tid 2810296] [client 157.10.7.4:55798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiU5BxEX7_yYrf7psVggAAADk"]
[Thu Jul 30 11:07:15.727989 2026] [security2:error] [pid 2810296:tid 2810296] [client 157.10.7.4:55798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsiU5BxEX7_yYrf7psVggAAADk"]
[Thu Jul 30 11:07:16.301864 2026] [security2:error] [pid 2831057:tid 2831057] [client 85.208.96.210:57224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/concorso-vigili-urbani-sicilia-2021"] [unique_id "amsiVC8ptyydLwGYivwP1AAAAA4"]
[Thu Jul 30 11:07:16.494485 2026] [security2:error] [pid 2823073:tid 2823073] [client 43.157.156.190:33904] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.apotheekcandidejacobs.be"] [uri "/"] [unique_id "amsiVEjKz5k19FvKAdrYIgAAAEM"]
[Thu Jul 30 11:07:16.495497 2026] [authz_core:error] [pid 2823073:tid 2823073] [client 43.157.156.190:33904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:07:16.496051 2026] [authz_core:error] [pid 2823073:tid 2823073] [client 43.157.156.190:33904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:07:17.748645 2026] [ssl:error] [pid 2832683:tid 2832683] (EAI 2)Name or service not known: [client 144.76.19.72:40790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:17.748690 2026] [ssl:error] [pid 2832683:tid 2832683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:17.805006 2026] [ssl:error] [pid 2826424:tid 2826424] (EAI 2)Name or service not known: [client 144.76.19.72:40794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:17.805038 2026] [ssl:error] [pid 2826424:tid 2826424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:17.962041 2026] [security2:error] [pid 2815670:tid 2815670] [client 43.157.142.101:51854] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsiVWjKSCy2vz5JUiNi6AAAAAo"], referer: http://www.banskoexpresstransfers.co.uk
[Thu Jul 30 11:07:18.266827 2026] [security2:error] [pid 2830019:tid 2830019] [client 43.165.67.31:53992] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/"] [unique_id "amsiVhuN3vPcGBKgIVA-mwAAAA0"]
[Thu Jul 30 11:07:18.602816 2026] [security2:error] [pid 2827783:tid 2827783] [client 43.165.167.69:36504] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.greenduckgallery.co.uk"] [uri "/"] [unique_id "amsiVkeUkDpp1VtJSx6wHAAAAAA"]
[Thu Jul 30 11:07:19.089752 2026] [security2:error] [pid 2830223:tid 2830223] [client 43.157.142.101:43896] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsiV7ATenIHmIjBQIqamgAAABo"], referer: http://www.banskoexpress.com
[Thu Jul 30 11:07:19.539300 2026] [ssl:error] [pid 2831166:tid 2831166] (70014)End of file found: [client 216.73.216.199:26822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:19.570403 2026] [security2:error] [pid 2815670:tid 2815670] [client 103.24.215.91:33396] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiV2jKSCy2vz5JUiNi6QAAAAo"]
[Thu Jul 30 11:07:19.570451 2026] [security2:error] [pid 2815670:tid 2815670] [client 103.24.215.91:33396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsiV2jKSCy2vz5JUiNi6QAAAAo"]
[Thu Jul 30 11:07:19.570702 2026] [security2:error] [pid 2815670:tid 2815670] [client 103.24.215.91:33396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsiV2jKSCy2vz5JUiNi6QAAAAo"]
[Thu Jul 30 11:07:19.966872 2026] [security2:error] [pid 2827783:tid 2827783] [client 43.165.67.31:55538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsiV0eUkDpp1VtJSx6wHQAAAAA"], referer: http://www.theislipgarage.co.uk
[Thu Jul 30 11:07:20.034537 2026] [ssl:error] [pid 2828833:tid 2828833] (70014)End of file found: [client 216.73.216.199:3085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:20.513412 2026] [authz_core:error] [pid 2818972:tid 2818972] [client 66.249.66.34:58680] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:07:20.516056 2026] [authz_core:error] [pid 2818972:tid 2818972] [client 66.249.66.34:58680] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:07:20.858577 2026] [ssl:error] [pid 2827923:tid 2827923] (EAI 2)Name or service not known: [client 144.76.19.72:35586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:20.858614 2026] [ssl:error] [pid 2827923:tid 2827923] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:20.914298 2026] [ssl:error] [pid 2832683:tid 2832683] (EAI 2)Name or service not known: [client 144.76.19.72:35594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:20.914329 2026] [ssl:error] [pid 2832683:tid 2832683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:21.608230 2026] [security2:error] [pid 2827923:tid 2827923] [client 185.191.171.11:26502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3329.0/prev_next,prev.html"] [unique_id "amsiWUjH5sgioaFMSJuFFgAAAAM"]
[Thu Jul 30 11:07:21.645765 2026] [ssl:error] [pid 2832870:tid 2832870] (70014)End of file found: [client 216.73.216.199:44147] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:22.675088 2026] [core:error] [pid 2826424:tid 2826424] (13)Permission denied: [client 216.73.216.199:48365] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/bin/sudoedit
[Thu Jul 30 11:07:23.635944 2026] [security2:error] [pid 2831164:tid 2831164] [client 170.106.35.153:48948] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ziltdesign.be"] [uri "/"] [unique_id "amsiW54rJ7DYXKfs7Zyw7gAAACY"]
[Thu Jul 30 11:07:23.722735 2026] [security2:error] [pid 2832715:tid 2832715] [client 43.157.38.228:44304] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amsiWz41ukvqXwYQYouLGgAAAAk"]
[Thu Jul 30 11:07:23.800457 2026] [security2:error] [pid 2830226:tid 2830226] [client 110.249.202.56:21310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amsiW-adKlMj6ZAu2mJDhAAAAB8"]
[Thu Jul 30 11:07:24.012854 2026] [ssl:error] [pid 2832715:tid 2832715] (EAI 2)Name or service not known: [client 144.76.19.72:35598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:24.012887 2026] [ssl:error] [pid 2832715:tid 2832715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:24.067607 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:35600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:24.067633 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:27.150192 2026] [ssl:error] [pid 2833144:tid 2833144] (EAI 2)Name or service not known: [client 144.76.19.72:35616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:27.150257 2026] [ssl:error] [pid 2833144:tid 2833144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:27.207374 2026] [ssl:error] [pid 2833145:tid 2833145] (EAI 2)Name or service not known: [client 144.76.19.72:35624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:27.207417 2026] [ssl:error] [pid 2833145:tid 2833145] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:27.237451 2026] [core:error] [pid 2833146:tid 2833146] [client 91.192.241.64:16481] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/
[Thu Jul 30 11:07:27.237494 2026] [core:error] [pid 2833146:tid 2833146] [client 91.192.241.64:16481] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/
[Thu Jul 30 11:07:27.483186 2026] [core:error] [pid 2826424:tid 2826424] (13)Permission denied: [client 216.73.216.199:48365] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/cache_dma
[Thu Jul 30 11:07:28.077365 2026] [security2:error] [pid 2819912:tid 2819912] [client 94.154.43.187:54764] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "asian-kitchen.co.uk"] [uri "/.env"] [unique_id "amsiYBKut1qT_wTLOozsCwAAAE4"]
[Thu Jul 30 11:07:28.077583 2026] [security2:error] [pid 2819912:tid 2819912] [client 94.154.43.187:54764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "asian-kitchen.co.uk"] [uri "/.env"] [unique_id "amsiYBKut1qT_wTLOozsCwAAAE4"]
[Thu Jul 30 11:07:28.077783 2026] [security2:error] [pid 2819912:tid 2819912] [client 94.154.43.187:54764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "asian-kitchen.co.uk"] [uri "/.env"] [unique_id "amsiYBKut1qT_wTLOozsCwAAAE4"]
[Thu Jul 30 11:07:28.084614 2026] [ssl:error] [pid 2826424:tid 2826424] (70014)End of file found: [client 216.73.216.199:48365] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:28.292227 2026] [security2:error] [pid 2832271:tid 2832271] [client 49.51.204.74:45712] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amsiYC6Wmwsppxva68oNVgAAABc"]
[Thu Jul 30 11:07:29.289506 2026] [ssl:error] [pid 2815670:tid 2815670] (70014)End of file found: [client 216.73.216.199:44366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:29.737190 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.165.65.117:50258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amsiYfQip3flDj78JW4wQQAAABY"]
[Thu Jul 30 11:07:29.861449 2026] [security2:error] [pid 2828090:tid 2828090] [client 49.51.204.74:47500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsiYSWZTEvvEs0S9y4mnwAAAAg"]
[Thu Jul 30 11:07:29.948273 2026] [authz_core:error] [pid 2832271:tid 2832271] [client 172.202.44.182:25086] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 11:07:30.207272 2026] [security2:error] [pid 2823072:tid 2823072] [client 49.51.204.74:56714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amsiYht_UQDEcOLgX9oVdQAAAD4"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 11:07:30.261353 2026] [ssl:error] [pid 2815917:tid 2815917] (EAI 2)Name or service not known: [client 144.76.19.72:59918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:30.261380 2026] [ssl:error] [pid 2815917:tid 2815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:30.317498 2026] [ssl:error] [pid 2815979:tid 2815979] (EAI 2)Name or service not known: [client 144.76.19.72:59928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:30.317526 2026] [ssl:error] [pid 2815979:tid 2815979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:31.623207 2026] [core:error] [pid 2833145:tid 2833145] [client 66.249.64.171:57928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:07:31.623237 2026] [core:error] [pid 2833145:tid 2833145] [client 66.249.64.171:57928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:07:31.776050 2026] [security2:error] [pid 2799771:tid 2799771] [client 49.51.204.74:50228] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "amsiY-21busEGMTvfl6utQAAACA"]
[Thu Jul 30 11:07:31.840203 2026] [security2:error] [pid 2823072:tid 2823072] [client 49.51.204.74:59066] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amsiYxt_UQDEcOLgX9oVdgAAAD4"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 11:07:31.897177 2026] [security2:error] [pid 2832271:tid 2832271] [client 49.51.204.74:59190] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsiYy6Wmwsppxva68oNWgAAABc"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 11:07:32.897421 2026] [core:error] [pid 2832683:tid 2832683] (13)Permission denied: [client 216.73.216.199:35525] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/alloc_calls
[Thu Jul 30 11:07:32.930050 2026] [security2:error] [pid 2828090:tid 2828090] [client 49.51.204.74:51288] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amsiZCWZTEvvEs0S9y4moQAAAAg"]
[Thu Jul 30 11:07:33.373660 2026] [ssl:error] [pid 2828770:tid 2828770] (EAI 2)Name or service not known: [client 144.76.19.72:59938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:33.373698 2026] [ssl:error] [pid 2828770:tid 2828770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:33.427027 2026] [ssl:error] [pid 2832272:tid 2832272] (EAI 2)Name or service not known: [client 144.76.19.72:59944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:33.427056 2026] [ssl:error] [pid 2832272:tid 2832272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:33.498991 2026] [ssl:error] [pid 2832683:tid 2832683] (70014)End of file found: [client 216.73.216.199:35525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:33.648900 2026] [security2:error] [pid 2832271:tid 2832271] [client 49.51.204.74:52206] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amsiZS6Wmwsppxva68oNWwAAABc"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 11:07:33.990190 2026] [ssl:error] [pid 2823072:tid 2823072] (70014)End of file found: [client 216.73.216.199:14253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:35.008965 2026] [ssl:error] [pid 2828090:tid 2828090] (70014)End of file found: [client 216.73.216.199:29215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:35.200695 2026] [cgi:error] [pid 2828770:tid 2828770] [client 20.9.4.9:30901] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:07:35.382423 2026] [security2:error] [pid 2815670:tid 2815670] [client 43.160.219.206:35110] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.baketastic.co.uk"] [uri "/"] [unique_id "amsiZ2jKSCy2vz5JUiNi_gAAAAo"]
[Thu Jul 30 11:07:35.765817 2026] [security2:error] [pid 2810296:tid 2810296] [client 49.51.204.74:54194] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "amsiZ5BxEX7_yYrf7psVigAAADk"]
[Thu Jul 30 11:07:36.484699 2026] [ssl:error] [pid 2831163:tid 2831163] (EAI 2)Name or service not known: [client 144.76.19.72:59954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:36.484734 2026] [ssl:error] [pid 2831163:tid 2831163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:36.539599 2026] [ssl:error] [pid 2833143:tid 2833143] (EAI 2)Name or service not known: [client 144.76.19.72:59970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:36.539631 2026] [ssl:error] [pid 2833143:tid 2833143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:36.706740 2026] [authz_core:error] [pid 2828770:tid 2828770] [client 20.9.4.9:30901] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 11:07:37.253606 2026] [security2:error] [pid 2815917:tid 2815917] [client 124.156.225.181:40062] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.firstclassbkltd.co.uk"] [uri "/"] [unique_id "amsiaaaaevkErbrabVwk8gAAADM"]
[Thu Jul 30 11:07:38.028282 2026] [security2:error] [pid 2815857:tid 2815857] [client 43.160.219.206:54390] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amsiarwXx2CERl4kDMTlRAAAAC0"], referer: http://www.baketastic.co.uk
[Thu Jul 30 11:07:38.405244 2026] [security2:error] [pid 2827923:tid 2827923] [client 49.51.204.74:56522] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsiakjH5sgioaFMSJuFGwAAAAM"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 11:07:38.455154 2026] [cgi:error] [pid 2827923:tid 2827923] [client 49.51.204.74:56522] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 11:07:38.691604 2026] [security2:error] [pid 2829969:tid 2829969] [client 49.51.204.74:56778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "amsiagKNS0hZtADG66vG3AAAAAY"]
[Thu Jul 30 11:07:39.396023 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:56506] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsiay6Wmwsppxva68oNYwAAABc"]
[Thu Jul 30 11:07:39.396184 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:56506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsiay6Wmwsppxva68oNYwAAABc"]
[Thu Jul 30 11:07:39.396400 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:56506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsiay6Wmwsppxva68oNYwAAABc"]
[Thu Jul 30 11:07:39.594562 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:26336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:39.594589 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:39.650531 2026] [ssl:error] [pid 2814709:tid 2814709] (EAI 2)Name or service not known: [client 144.76.19.72:26348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:39.650575 2026] [ssl:error] [pid 2814709:tid 2814709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:40.127009 2026] [ssl:error] [pid 2815917:tid 2815917] (70014)End of file found: [client 216.73.216.199:20339] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:40.286617 2026] [security2:error] [pid 2832237:tid 2832237] [client 49.51.204.74:58608] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsibFHrBmOyPS0ZF98kpwAAABU"], referer: http://www.all4s.co.uk
[Thu Jul 30 11:07:40.439876 2026] [security2:error] [pid 2814709:tid 2814709] [client 34.125.84.50:56596] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "crm.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amsibB7Cb72v1lFPIRnD3QAAAAs"]
[Thu Jul 30 11:07:40.440091 2026] [security2:error] [pid 2814709:tid 2814709] [client 34.125.84.50:56596] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amsibB7Cb72v1lFPIRnD3QAAAAs"]
[Thu Jul 30 11:07:40.440294 2026] [security2:error] [pid 2814709:tid 2814709] [client 34.125.84.50:56596] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibB7Cb72v1lFPIRnD3QAAAAs"]
[Thu Jul 30 11:07:40.488900 2026] [security2:error] [pid 2831164:tid 2831164] [client 34.125.84.50:56632] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amsibJ4rJ7DYXKfs7Zyw9QAAACY"]
[Thu Jul 30 11:07:40.489080 2026] [security2:error] [pid 2831164:tid 2831164] [client 34.125.84.50:56632] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amsibJ4rJ7DYXKfs7Zyw9QAAACY"]
[Thu Jul 30 11:07:40.489265 2026] [security2:error] [pid 2831164:tid 2831164] [client 34.125.84.50:56632] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibJ4rJ7DYXKfs7Zyw9QAAACY"]
[Thu Jul 30 11:07:40.489474 2026] [security2:error] [pid 2833145:tid 2833145] [client 34.125.84.50:56638] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amsibLONpGZrO_cc3TEeYAAAACs"]
[Thu Jul 30 11:07:40.489624 2026] [security2:error] [pid 2833145:tid 2833145] [client 34.125.84.50:56638] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amsibLONpGZrO_cc3TEeYAAAACs"]
[Thu Jul 30 11:07:40.489811 2026] [security2:error] [pid 2833145:tid 2833145] [client 34.125.84.50:56638] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibLONpGZrO_cc3TEeYAAAACs"]
[Thu Jul 30 11:07:40.787946 2026] [security2:error] [pid 2830178:tid 2830178] [client 124.156.204.51:52024] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsibPF5Bnx74NZJF1wdiAAAABg"]
[Thu Jul 30 11:07:40.819783 2026] [security2:error] [pid 2831164:tid 2831164] [client 43.166.244.192:56766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsibJ4rJ7DYXKfs7Zyw9gAAACY"]
[Thu Jul 30 11:07:40.882008 2026] [security2:error] [pid 2832237:tid 2832237] [client 49.51.233.46:60322] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.michael-boffey.co.uk"] [uri "/"] [unique_id "amsibFHrBmOyPS0ZF98kqAAAABU"]
[Thu Jul 30 11:07:40.928033 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:56656] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amsibGQ4pG01zmDu-1G-AgAAABM"]
[Thu Jul 30 11:07:40.928216 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:56656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amsibGQ4pG01zmDu-1G-AgAAABM"]
[Thu Jul 30 11:07:40.928426 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:56656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibGQ4pG01zmDu-1G-AgAAABM"]
[Thu Jul 30 11:07:40.958417 2026] [security2:error] [pid 2830358:tid 2830358] [client 34.125.84.50:56682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amsibJARce5PlvIqLeNX4AAAACE"]
[Thu Jul 30 11:07:40.958607 2026] [security2:error] [pid 2830358:tid 2830358] [client 34.125.84.50:56682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amsibJARce5PlvIqLeNX4AAAACE"]
[Thu Jul 30 11:07:40.958794 2026] [security2:error] [pid 2830358:tid 2830358] [client 34.125.84.50:56682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibJARce5PlvIqLeNX4AAAACE"]
[Thu Jul 30 11:07:41.012670 2026] [security2:error] [pid 2833145:tid 2833145] [client 34.125.84.50:56696] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amsibbONpGZrO_cc3TEeYQAAACs"]
[Thu Jul 30 11:07:41.012797 2026] [security2:error] [pid 2833145:tid 2833145] [client 34.125.84.50:56696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amsibbONpGZrO_cc3TEeYQAAACs"]
[Thu Jul 30 11:07:41.012989 2026] [security2:error] [pid 2833145:tid 2833145] [client 34.125.84.50:56696] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibbONpGZrO_cc3TEeYQAAACs"]
[Thu Jul 30 11:07:41.024229 2026] [security2:error] [pid 2814709:tid 2814709] [client 34.125.84.50:56670] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amsibR7Cb72v1lFPIRnD3gAAAAs"]
[Thu Jul 30 11:07:41.024365 2026] [security2:error] [pid 2814709:tid 2814709] [client 34.125.84.50:56670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amsibR7Cb72v1lFPIRnD3gAAAAs"]
[Thu Jul 30 11:07:41.024567 2026] [security2:error] [pid 2814709:tid 2814709] [client 34.125.84.50:56670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibR7Cb72v1lFPIRnD3gAAAAs"]
[Thu Jul 30 11:07:41.193159 2026] [security2:error] [pid 2832271:tid 2832271] [client 43.165.67.31:49140] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amsibS6Wmwsppxva68oNaAAAABc"]
[Thu Jul 30 11:07:41.201687 2026] [security2:error] [pid 2830358:tid 2830358] [client 49.51.204.74:59422] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.marcwhiffen.co.uk"] [uri "/"] [unique_id "amsibZARce5PlvIqLeNX4QAAACE"]
[Thu Jul 30 11:07:41.202475 2026] [authz_core:error] [pid 2830358:tid 2830358] [client 49.51.204.74:59422] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 11:07:41.917692 2026] [authz_core:error] [pid 2833145:tid 2833145] [client 66.249.66.33:57719] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:07:41.920369 2026] [authz_core:error] [pid 2833145:tid 2833145] [client 66.249.66.33:57719] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:07:42.006919 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:56710] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsibmQ4pG01zmDu-1G-AwAAABM"]
[Thu Jul 30 11:07:42.007104 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:56710] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsibmQ4pG01zmDu-1G-AwAAABM"]
[Thu Jul 30 11:07:42.007299 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:56710] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibmQ4pG01zmDu-1G-AwAAABM"]
[Thu Jul 30 11:07:42.077239 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:56726] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsibvQip3flDj78JW4wRgAAABY"]
[Thu Jul 30 11:07:42.077420 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:56726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsibvQip3flDj78JW4wRgAAABY"]
[Thu Jul 30 11:07:42.077641 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:56726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibvQip3flDj78JW4wRgAAABY"]
[Thu Jul 30 11:07:42.278233 2026] [security2:error] [pid 2830178:tid 2830178] [client 34.125.84.50:56732] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsibvF5Bnx74NZJF1wdiQAAABg"]
[Thu Jul 30 11:07:42.278385 2026] [security2:error] [pid 2830178:tid 2830178] [client 34.125.84.50:56732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsibvF5Bnx74NZJF1wdiQAAABg"]
[Thu Jul 30 11:07:42.278600 2026] [security2:error] [pid 2830178:tid 2830178] [client 34.125.84.50:56732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibvF5Bnx74NZJF1wdiQAAABg"]
[Thu Jul 30 11:07:42.280277 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:56728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsibi6Wmwsppxva68oNaQAAABc"]
[Thu Jul 30 11:07:42.280477 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:56728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsibi6Wmwsppxva68oNaQAAABc"]
[Thu Jul 30 11:07:42.280734 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:56728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsibi6Wmwsppxva68oNaQAAABc"]
[Thu Jul 30 11:07:42.707249 2026] [ssl:error] [pid 2830178:tid 2830178] (EAI 2)Name or service not known: [client 144.76.19.72:26364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:42.707284 2026] [ssl:error] [pid 2830178:tid 2830178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:42.746334 2026] [security2:error] [pid 2832237:tid 2832237] [client 124.156.204.51:35440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amsiblHrBmOyPS0ZF98kqwAAABU"], referer: http://www.beechhouseselfcatering.co.uk
[Thu Jul 30 11:07:42.759448 2026] [ssl:error] [pid 2830224:tid 2830224] (EAI 2)Name or service not known: [client 144.76.19.72:26374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:42.759481 2026] [ssl:error] [pid 2830224:tid 2830224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:42.898671 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.165.67.31:44790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amsibvQip3flDj78JW4wRwAAABY"], referer: http://www.hazardous-materials.co.uk
[Thu Jul 30 11:07:43.150939 2026] [core:error] [pid 2832715:tid 2832715] (13)Permission denied: [client 216.73.216.199:25593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/trace
[Thu Jul 30 11:07:43.533576 2026] [security2:error] [pid 2833871:tid 2833871] [client 43.166.244.192:56236] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsib4VS3msl6rj-gxSAegAAAAI"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 11:07:43.664850 2026] [security2:error] [pid 2832271:tid 2832271] [client 43.165.7.135:49718] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.parallel-coordinates.co.uk"] [uri "/"] [unique_id "amsiby6Wmwsppxva68oNawAAABc"]
[Thu Jul 30 11:07:44.386333 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:60660] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "crm.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsicGQ4pG01zmDu-1G-BwAAABM"]
[Thu Jul 30 11:07:44.386461 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:60660] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsicGQ4pG01zmDu-1G-BwAAABM"]
[Thu Jul 30 11:07:44.386591 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:60660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsicGQ4pG01zmDu-1G-BwAAABM"]
[Thu Jul 30 11:07:44.386788 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:60660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicGQ4pG01zmDu-1G-BwAAABM"]
[Thu Jul 30 11:07:45.070318 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60670] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "crm.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsicUh7xEIb6i12riMQxwAAABw"]
[Thu Jul 30 11:07:45.070522 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsicUh7xEIb6i12riMQxwAAABw"]
[Thu Jul 30 11:07:45.070745 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicUh7xEIb6i12riMQxwAAABw"]
[Thu Jul 30 11:07:45.667296 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsicfQip3flDj78JW4wSwAAABY"]
[Thu Jul 30 11:07:45.667428 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsicfQip3flDj78JW4wSwAAABY"]
[Thu Jul 30 11:07:45.667635 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicfQip3flDj78JW4wSwAAABY"]
[Thu Jul 30 11:07:45.798820 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60756] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsicUh7xEIb6i12riMQyAAAABw"]
[Thu Jul 30 11:07:45.798999 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60756] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsicUh7xEIb6i12riMQyAAAABw"]
[Thu Jul 30 11:07:45.799209 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60756] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicUh7xEIb6i12riMQyAAAABw"]
[Thu Jul 30 11:07:45.816840 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:26386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:45.816859 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:45.874219 2026] [ssl:error] [pid 2817491:tid 2817491] (EAI 2)Name or service not known: [client 144.76.19.72:26402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:45.874247 2026] [ssl:error] [pid 2817491:tid 2817491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:45.888029 2026] [security2:error] [pid 2828833:tid 2828833] [client 34.125.84.50:60758] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsicQytS1x4vcAoCY7MjgAAABA"]
[Thu Jul 30 11:07:45.888220 2026] [security2:error] [pid 2828833:tid 2828833] [client 34.125.84.50:60758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsicQytS1x4vcAoCY7MjgAAABA"]
[Thu Jul 30 11:07:45.888411 2026] [security2:error] [pid 2828833:tid 2828833] [client 34.125.84.50:60758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicQytS1x4vcAoCY7MjgAAABA"]
[Thu Jul 30 11:07:46.157347 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:60788] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amsici6Wmwsppxva68oNbwAAABc"]
[Thu Jul 30 11:07:46.157485 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:60788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amsici6Wmwsppxva68oNbwAAABc"]
[Thu Jul 30 11:07:46.157701 2026] [security2:error] [pid 2832271:tid 2832271] [client 34.125.84.50:60788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsici6Wmwsppxva68oNbwAAABc"]
[Thu Jul 30 11:07:46.215977 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60802] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amsicvQip3flDj78JW4wTAAAABY"]
[Thu Jul 30 11:07:46.216177 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amsicvQip3flDj78JW4wTAAAABY"]
[Thu Jul 30 11:07:46.216388 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicvQip3flDj78JW4wTAAAABY"]
[Thu Jul 30 11:07:46.319437 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:60804] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amsicmQ4pG01zmDu-1G-CgAAABM"]
[Thu Jul 30 11:07:46.319637 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:60804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amsicmQ4pG01zmDu-1G-CgAAABM"]
[Thu Jul 30 11:07:46.319862 2026] [security2:error] [pid 2830020:tid 2830020] [client 34.125.84.50:60804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicmQ4pG01zmDu-1G-CgAAABM"]
[Thu Jul 30 11:07:46.367501 2026] [security2:error] [pid 2830019:tid 2830019] [client 34.125.84.50:60814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amsichuN3vPcGBKgIVA-qAAAAA0"]
[Thu Jul 30 11:07:46.367696 2026] [security2:error] [pid 2830019:tid 2830019] [client 34.125.84.50:60814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amsichuN3vPcGBKgIVA-qAAAAA0"]
[Thu Jul 30 11:07:46.367890 2026] [security2:error] [pid 2830019:tid 2830019] [client 34.125.84.50:60814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsichuN3vPcGBKgIVA-qAAAAA0"]
[Thu Jul 30 11:07:46.404889 2026] [security2:error] [pid 2815917:tid 2815917] [client 34.125.84.50:60830] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amsicqaaevkErbrabVwk_AAAADM"]
[Thu Jul 30 11:07:46.405040 2026] [security2:error] [pid 2815917:tid 2815917] [client 34.125.84.50:60830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amsicqaaevkErbrabVwk_AAAADM"]
[Thu Jul 30 11:07:46.405267 2026] [security2:error] [pid 2815917:tid 2815917] [client 34.125.84.50:60830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicqaaevkErbrabVwk_AAAADM"]
[Thu Jul 30 11:07:46.477875 2026] [core:error] [pid 2832715:tid 2832715] (13)Permission denied: [client 216.73.216.199:25593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/total_objects
[Thu Jul 30 11:07:46.659425 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60856] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amsicvQip3flDj78JW4wTQAAABY"]
[Thu Jul 30 11:07:46.659621 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amsicvQip3flDj78JW4wTQAAABY"]
[Thu Jul 30 11:07:46.659815 2026] [security2:error] [pid 2823068:tid 2823068] [client 34.125.84.50:60856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicvQip3flDj78JW4wTQAAABY"]
[Thu Jul 30 11:07:46.663849 2026] [security2:error] [pid 2834038:tid 2834038] [client 34.125.84.50:60846] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amsicjm83RwbReZiz_2dRgAAAA4"]
[Thu Jul 30 11:07:46.664132 2026] [security2:error] [pid 2834038:tid 2834038] [client 34.125.84.50:60846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amsicjm83RwbReZiz_2dRgAAAA4"]
[Thu Jul 30 11:07:46.664440 2026] [security2:error] [pid 2834038:tid 2834038] [client 34.125.84.50:60846] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicjm83RwbReZiz_2dRgAAAA4"]
[Thu Jul 30 11:07:46.788650 2026] [security2:error] [pid 2831164:tid 2831164] [client 34.125.84.50:60858] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amsicp4rJ7DYXKfs7Zyw_QAAACY"]
[Thu Jul 30 11:07:46.788813 2026] [security2:error] [pid 2831164:tid 2831164] [client 34.125.84.50:60858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amsicp4rJ7DYXKfs7Zyw_QAAACY"]
[Thu Jul 30 11:07:46.789007 2026] [security2:error] [pid 2831164:tid 2831164] [client 34.125.84.50:60858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicp4rJ7DYXKfs7Zyw_QAAACY"]
[Thu Jul 30 11:07:46.793171 2026] [security2:error] [pid 2828833:tid 2828833] [client 34.125.84.50:60870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amsicgytS1x4vcAoCY7MkAAAABA"]
[Thu Jul 30 11:07:46.793304 2026] [security2:error] [pid 2828833:tid 2828833] [client 34.125.84.50:60870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amsicgytS1x4vcAoCY7MkAAAABA"]
[Thu Jul 30 11:07:46.793494 2026] [security2:error] [pid 2828833:tid 2828833] [client 34.125.84.50:60870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsicgytS1x4vcAoCY7MkAAAABA"]
[Thu Jul 30 11:07:46.826931 2026] [security2:error] [pid 2830019:tid 2830019] [client 34.125.84.50:60876] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amsichuN3vPcGBKgIVA-qQAAAA0"]
[Thu Jul 30 11:07:46.827124 2026] [security2:error] [pid 2830019:tid 2830019] [client 34.125.84.50:60876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amsichuN3vPcGBKgIVA-qQAAAA0"]
[Thu Jul 30 11:07:46.827318 2026] [security2:error] [pid 2830019:tid 2830019] [client 34.125.84.50:60876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsichuN3vPcGBKgIVA-qQAAAA0"]
[Thu Jul 30 11:07:46.959669 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60890] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amsickh7xEIb6i12riMQzAAAABw"]
[Thu Jul 30 11:07:46.960021 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60890] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amsickh7xEIb6i12riMQzAAAABw"]
[Thu Jul 30 11:07:46.960247 2026] [security2:error] [pid 2832272:tid 2832272] [client 34.125.84.50:60890] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsickh7xEIb6i12riMQzAAAABw"]
[Thu Jul 30 11:07:47.228435 2026] [security2:error] [pid 2830178:tid 2830178] [client 34.125.84.50:60904] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amsic_F5Bnx74NZJF1wdjgAAABg"]
[Thu Jul 30 11:07:47.228785 2026] [security2:error] [pid 2830178:tid 2830178] [client 34.125.84.50:60904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amsic_F5Bnx74NZJF1wdjgAAABg"]
[Thu Jul 30 11:07:47.228990 2026] [security2:error] [pid 2830178:tid 2830178] [client 34.125.84.50:60904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsic_F5Bnx74NZJF1wdjgAAABg"]
[Thu Jul 30 11:07:47.387669 2026] [ssl:error] [pid 2832715:tid 2832715] (70014)End of file found: [client 216.73.216.199:25593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:47.413214 2026] [cgi:error] [pid 2815917:tid 2815917] [client 167.103.3.80:39487] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:47 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:47.413350 2026] [cgi:error] [pid 2815917:tid 2815917] [client 167.103.3.80:39487] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:47 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:47.413452 2026] [cgi:error] [pid 2815917:tid 2815917] [client 167.103.3.80:39487] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:47 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:47.413558 2026] [cgi:error] [pid 2815917:tid 2815917] [client 167.103.3.80:39487] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:47 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 11:07:47.413657 2026] [cgi:error] [pid 2815917:tid 2815917] [client 167.103.3.80:39487] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 11:07:47 2026] iplist-cgi.pl: Use of uninitialized value $mask in pattern match (m//) at iplist-cgi.pl line 31.
[Thu Jul 30 11:07:48.001085 2026] [ssl:error] [pid 2828090:tid 2828090] (70014)End of file found: [client 216.73.216.199:64129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:48.498235 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:7169] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm/sections/__bug_table
[Thu Jul 30 11:07:48.928164 2026] [ssl:error] [pid 2831164:tid 2831164] (EAI 2)Name or service not known: [client 144.76.19.72:26408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:48.928203 2026] [ssl:error] [pid 2831164:tid 2831164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:48.983262 2026] [ssl:error] [pid 2827783:tid 2827783] (EAI 2)Name or service not known: [client 144.76.19.72:26422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:48.983296 2026] [ssl:error] [pid 2827783:tid 2827783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:49.431306 2026] [security2:error] [pid 2823068:tid 2823068] [client 49.51.132.100:43200] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amsidfQip3flDj78JW4wVAAAABY"]
[Thu Jul 30 11:07:49.462655 2026] [security2:error] [pid 2834093:tid 2834093] [client 34.125.84.50:32910] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "crm.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsidZTbfOxw_bnpQNeqpgAAACg"]
[Thu Jul 30 11:07:49.463004 2026] [security2:error] [pid 2834093:tid 2834093] [client 34.125.84.50:32910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amsidZTbfOxw_bnpQNeqpgAAACg"]
[Thu Jul 30 11:07:49.463346 2026] [security2:error] [pid 2834093:tid 2834093] [client 34.125.84.50:32910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "crm.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsidZTbfOxw_bnpQNeqpgAAACg"]
[Thu Jul 30 11:07:50.172707 2026] [security2:error] [pid 2831761:tid 2831761] [client 49.51.180.2:50782] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amsidubli5SbOvLyZSrAowAAABQ"]
[Thu Jul 30 11:07:51.047656 2026] [ssl:error] [pid 2834092:tid 2834092] (70014)End of file found: [client 216.73.216.199:7169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:51.768616 2026] [security2:error] [pid 2831165:tid 2831165] [client 49.51.132.100:50480] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsid4XtxhHbgFj37N4QgQAAACc"], referer: http://www.prosperon.co.uk
[Thu Jul 30 11:07:51.953803 2026] [security2:error] [pid 2828770:tid 2828770] [client 49.51.180.2:50846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amsid9FrDuefOXDNMUgsvAAAAAU"], referer: http://www.mwdesign.me.uk
[Thu Jul 30 11:07:52.212888 2026] [ssl:error] [pid 2831165:tid 2831165] (EAI 2)Name or service not known: [client 144.76.19.72:45738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:52.212918 2026] [ssl:error] [pid 2831165:tid 2831165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:52.271546 2026] [ssl:error] [pid 2831164:tid 2831164] (EAI 2)Name or service not known: [client 144.76.19.72:45742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:52.271582 2026] [ssl:error] [pid 2831164:tid 2831164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:52.997335 2026] [authz_core:error] [pid 2818972:tid 2818972] [client 216.73.216.199:55504] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/theme-compat/error_log
[Thu Jul 30 11:07:53.929306 2026] [security2:error] [pid 2830224:tid 2830224] [client 124.156.226.179:38886] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theovertones.co.uk"] [uri "/"] [unique_id "amsiecjEgPJhWfocrSyhKgAAABs"]
[Thu Jul 30 11:07:54.579710 2026] [security2:error] [pid 2808147:tid 2808147] [client 43.155.195.141:59546] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.fast-hosting.co.uk"] [uri "/"] [unique_id "amsierm9OwEMjYlj9VVEeAAAAC8"]
[Thu Jul 30 11:07:55.327596 2026] [ssl:error] [pid 2823073:tid 2823073] (EAI 2)Name or service not known: [client 144.76.19.72:45748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:55.327635 2026] [ssl:error] [pid 2823073:tid 2823073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:55.342316 2026] [ssl:error] [pid 2832271:tid 2832271] (70014)End of file found: [client 216.73.216.199:63078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:55.383970 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:45754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:55.384030 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:56.447906 2026] [ssl:error] [pid 2832715:tid 2832715] (70014)End of file found: [client 216.73.216.199:48908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:56.948250 2026] [core:error] [pid 2819912:tid 2819912] (13)Permission denied: [client 216.73.216.199:33822] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/objects_partial
[Thu Jul 30 11:07:57.111806 2026] [security2:error] [pid 2808147:tid 2808147] [client 43.160.219.206:58992] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amsifbm9OwEMjYlj9VVEfAAAAC8"]
[Thu Jul 30 11:07:57.216862 2026] [security2:error] [pid 2815857:tid 2815857] [client 101.33.66.34:38770] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amsifbwXx2CERl4kDMTlSQAAAC0"]
[Thu Jul 30 11:07:57.325504 2026] [security2:error] [pid 2810296:tid 2810296] [client 43.166.132.142:32928] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsifZBxEX7_yYrf7psVkgAAADk"]
[Thu Jul 30 11:07:57.350899 2026] [core:error] [pid 2819912:tid 2819912] (13)Permission denied: [client 216.73.216.199:33822] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/objects_partial
[Thu Jul 30 11:07:57.652565 2026] [ssl:error] [pid 2819912:tid 2819912] (70014)End of file found: [client 216.73.216.199:33822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:07:58.173656 2026] [authz_core:error] [pid 2830223:tid 2830223] [client 51.120.83.160:30112] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/SimplePie/error_log
[Thu Jul 30 11:07:58.264980 2026] [security2:error] [pid 2830178:tid 2830178] [client 43.167.241.46:48018] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchellphotography.co.uk"] [uri "/"] [unique_id "amsifvF5Bnx74NZJF1wdmQAAABg"]
[Thu Jul 30 11:07:58.451252 2026] [ssl:error] [pid 2831163:tid 2831163] (EAI 2)Name or service not known: [client 144.76.19.72:45758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:58.451287 2026] [ssl:error] [pid 2831163:tid 2831163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:07:58.509429 2026] [ssl:error] [pid 2823073:tid 2823073] (EAI 2)Name or service not known: [client 144.76.19.72:45766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:07:58.509454 2026] [ssl:error] [pid 2823073:tid 2823073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:00.451634 2026] [security2:error] [pid 2830358:tid 2830358] [client 114.119.132.171:31737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~17,14,103,102/request_format~html"] [unique_id "amsigJARce5PlvIqLeNX7gAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~17,14,103/request_format~html
[Thu Jul 30 11:08:00.567186 2026] [security2:error] [pid 2834092:tid 2834092] [client 43.166.132.142:44022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amsigDDEiE9F2XBEiUyGbwAAAB4"], referer: http://www.purple-childcare.co.uk
[Thu Jul 30 11:08:01.569531 2026] [ssl:error] [pid 2834627:tid 2834627] (EAI 2)Name or service not known: [client 144.76.19.72:18426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:01.569581 2026] [ssl:error] [pid 2834627:tid 2834627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:01.623510 2026] [ssl:error] [pid 2830178:tid 2830178] (EAI 2)Name or service not known: [client 144.76.19.72:18442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:01.623543 2026] [ssl:error] [pid 2830178:tid 2830178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:01.917300 2026] [ssl:error] [pid 2833145:tid 2833145] (70014)End of file found: [client 216.73.216.199:49425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:02.022010 2026] [security2:error] [pid 2832715:tid 2832715] [client 114.119.132.171:31743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~17,14,103,102/request_format~html"] [unique_id "amsigj41ukvqXwYQYouLPAAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~17,14,103/request_format~html
[Thu Jul 30 11:08:02.456733 2026] [security2:error] [pid 2832272:tid 2832272] [client 43.157.22.57:58000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spurr.org.uk"] [uri "/"] [unique_id "amsigkh7xEIb6i12riMQ1AAAABw"]
[Thu Jul 30 11:08:02.831964 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:28349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory239/node0/compact
[Thu Jul 30 11:08:03.134026 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:28349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/cpu_partial
[Thu Jul 30 11:08:03.217089 2026] [security2:error] [pid 2805999:tid 2805999] [client 43.130.110.130:44774] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.render-farm.co.uk"] [uri "/"] [unique_id "amsigye1SdbzYMmqO-ox2gAAADE"]
[Thu Jul 30 11:08:04.671685 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:28349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-16/objects_partial
[Thu Jul 30 11:08:04.675668 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:18452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:04.675696 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:04.763743 2026] [ssl:error] [pid 2810296:tid 2810296] (EAI 2)Name or service not known: [client 144.76.19.72:18460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:04.763778 2026] [ssl:error] [pid 2810296:tid 2810296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:04.981923 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:28349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory32/node0/compact
[Thu Jul 30 11:08:05.891635 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:28349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/security/integrity/ima/binary_runtime_measurements
[Thu Jul 30 11:08:07.413948 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:28349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/objects_partial
[Thu Jul 30 11:08:07.443300 2026] [security2:error] [pid 2833033:tid 2833033] [client 43.164.3.23:33194] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amsih4fns5Xg09Krw754lAAAABE"]
[Thu Jul 30 11:08:07.822181 2026] [ssl:error] [pid 2833143:tid 2833143] (EAI 2)Name or service not known: [client 144.76.19.72:18462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:07.822206 2026] [ssl:error] [pid 2833143:tid 2833143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:07.877794 2026] [ssl:error] [pid 2830178:tid 2830178] (EAI 2)Name or service not known: [client 144.76.19.72:18466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:07.877817 2026] [ssl:error] [pid 2830178:tid 2830178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:08.961936 2026] [core:error] [pid 2834092:tid 2834092] (13)Permission denied: [client 216.73.216.199:28349] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/slabs_cpu_partial
[Thu Jul 30 11:08:09.280893 2026] [ssl:error] [pid 2834092:tid 2834092] (70014)End of file found: [client 216.73.216.199:28349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:09.892182 2026] [core:error] [pid 2831165:tid 2831165] (13)Permission denied: [client 216.73.216.199:28200] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory9/node0/compact
[Thu Jul 30 11:08:10.183225 2026] [ssl:error] [pid 2834627:tid 2834627] (70014)End of file found: [client 216.73.216.199:39845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:10.931088 2026] [ssl:error] [pid 2832237:tid 2832237] (EAI 2)Name or service not known: [client 144.76.19.72:48992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:10.931117 2026] [ssl:error] [pid 2832237:tid 2832237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:10.984276 2026] [ssl:error] [pid 2832272:tid 2832272] (EAI 2)Name or service not known: [client 144.76.19.72:49008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:10.984304 2026] [ssl:error] [pid 2832272:tid 2832272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:11.090365 2026] [core:error] [pid 2831165:tid 2831165] (13)Permission denied: [client 216.73.216.199:28200] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/hwcache_align
[Thu Jul 30 11:08:11.123856 2026] [security2:error] [pid 2819910:tid 2819910] [client 43.130.139.177:45144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/"] [unique_id "amsii5wZdvDRRNztCi6mEwAAAEw"]
[Thu Jul 30 11:08:11.127147 2026] [security2:error] [pid 2831761:tid 2831761] [client 170.106.143.6:47336] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsii-bli5SbOvLyZSrA6AAAABQ"], referer: http://www.rock-ola.co.uk
[Thu Jul 30 11:08:12.296676 2026] [ssl:error] [pid 2831165:tid 2831165] (70014)End of file found: [client 216.73.216.199:28200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:12.866450 2026] [security2:error] [pid 2831761:tid 2831761] [client 43.130.139.177:46650] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsijObli5SbOvLyZSrA6gAAABQ"], referer: http://www.clarepillinger.co.uk
[Thu Jul 30 11:08:13.674059 2026] [security2:error] [pid 2814709:tid 2814709] [client 170.106.143.6:46476] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsijR7Cb72v1lFPIRnENwAAAAs"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 11:08:14.039419 2026] [ssl:error] [pid 2831761:tid 2831761] (EAI 2)Name or service not known: [client 144.76.19.72:49014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:14.039472 2026] [ssl:error] [pid 2831761:tid 2831761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:14.094157 2026] [ssl:error] [pid 2818972:tid 2818972] (EAI 2)Name or service not known: [client 144.76.19.72:49024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:14.094216 2026] [ssl:error] [pid 2818972:tid 2818972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:14.623974 2026] [core:error] [pid 2831164:tid 2831164] (13)Permission denied: [client 216.73.216.199:39339] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory5/node0/compact
[Thu Jul 30 11:08:14.685192 2026] [lsapi:warn] [pid 2833871:tid 2833871] [client 34.155.143.57:47056] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:08:14.685254 2026] [lsapi:warn] [pid 2833871:tid 2833871] [client 34.155.143.57:47056] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:08:14.691604 2026] [security2:error] [pid 2818972:tid 2818972] [client 43.153.102.138:37942] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highcleresyndicates.co.uk"] [uri "/"] [unique_id "amsijlAm_BJTCDZkdraj8wAAABk"]
[Thu Jul 30 11:08:15.016270 2026] [ssl:error] [pid 2831164:tid 2831164] (70014)End of file found: [client 216.73.216.199:39339] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:16.606995 2026] [security2:error] [pid 2830358:tid 2830358] [client 43.164.3.23:44506] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.inrc.org.uk"] [uri "/"] [unique_id "amsikJARce5PlvIqLeNX8wAAACE"]
[Thu Jul 30 11:08:16.804934 2026] [security2:error] [pid 2834627:tid 2834627] [client 85.208.96.196:30648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/gg-valentine-horse-death"] [unique_id "amsikIN47-tRSb2uFqf8oAAAAAU"]
[Thu Jul 30 11:08:16.828742 2026] [core:error] [pid 2831163:tid 2831163] (13)Permission denied: [client 216.73.216.199:10670] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/agent360.sh
[Thu Jul 30 11:08:16.912271 2026] [security2:error] [pid 2814709:tid 2814709] [client 43.166.226.186:59996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.leaccess.co.uk"] [uri "/"] [unique_id "amsikB7Cb72v1lFPIRnEOgAAAAs"]
[Thu Jul 30 11:08:17.135445 2026] [core:crit] [pid 2831163:tid 2831163] (13)Permission denied: [client 216.73.216.199:10670] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/cloudlinux/alt-php-internal/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/opt/cloudlinux/alt-php-internal/root/' is executable
[Thu Jul 30 11:08:17.149948 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:49030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:17.149985 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:17.206240 2026] [ssl:error] [pid 2827872:tid 2827872] (EAI 2)Name or service not known: [client 144.76.19.72:49042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:17.206275 2026] [ssl:error] [pid 2827872:tid 2827872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:17.474713 2026] [security2:error] [pid 2832272:tid 2832272] [client 43.133.139.6:36694] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amsikUh7xEIb6i12riMQ2gAAABw"]
[Thu Jul 30 11:08:17.564239 2026] [cgi:error] [pid 2815670:tid 2815670] [client 172.213.232.128:22872] AH02811: stderr from /home/ditchfes/public_html/hoohah15/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:08:17.858529 2026] [cgi:error] [pid 2830020:tid 2830020] [client 143.198.230.132:48848] AH01228: exec used but not allowed in /home/alismcom/public_html/themez.co.uk/index.htm
[Thu Jul 30 11:08:18.083311 2026] [cgi:error] [pid 2815670:tid 2815670] [client 172.213.232.128:22872] AH02811: stderr from /home/ditchfes/public_html/hoohah15/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:08:18.337460 2026] [core:error] [pid 2831163:tid 2831163] (13)Permission denied: [client 216.73.216.199:10670] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory6/node0/compact
[Thu Jul 30 11:08:18.726080 2026] [cgi:error] [pid 2815976:tid 2815976] [client 143.198.230.132:48666] AH01228: exec used but not allowed in /home/alismcom/public_html/themez.co.uk/index.htm
[Thu Jul 30 11:08:19.141500 2026] [security2:error] [pid 2834627:tid 2834627] [client 18.214.186.220:26292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/posters/spitfire/"] [unique_id "amsik4N47-tRSb2uFqf8owAAAAU"]
[Thu Jul 30 11:08:20.177262 2026] [ssl:error] [pid 2831163:tid 2831163] (70014)End of file found: [client 216.73.216.199:10670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:20.263297 2026] [ssl:error] [pid 2834038:tid 2834038] (EAI 2)Name or service not known: [client 144.76.19.72:20032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:20.263337 2026] [ssl:error] [pid 2834038:tid 2834038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:20.319486 2026] [ssl:error] [pid 2831164:tid 2831164] (EAI 2)Name or service not known: [client 144.76.19.72:20046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:20.319528 2026] [ssl:error] [pid 2831164:tid 2831164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:20.414480 2026] [security2:error] [pid 2834038:tid 2834038] [client 163.7.15.32:40887] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsilDm83RwbReZiz_2dtAAAAA4"]
[Thu Jul 30 11:08:20.414525 2026] [security2:error] [pid 2834038:tid 2834038] [client 163.7.15.32:40887] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsilDm83RwbReZiz_2dtAAAAA4"]
[Thu Jul 30 11:08:20.414792 2026] [security2:error] [pid 2834038:tid 2834038] [client 163.7.15.32:40887] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsilDm83RwbReZiz_2dtAAAAA4"]
[Thu Jul 30 11:08:20.484348 2026] [ssl:error] [pid 2818972:tid 2818972] (70014)End of file found: [client 216.73.216.199:47667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:20.975924 2026] [ssl:error] [pid 2807341:tid 2807341] (70014)End of file found: [client 216.73.216.199:32798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:22.507675 2026] [authz_core:error] [pid 2815981:tid 2815981] [client 66.249.66.33:55189] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:08:22.510330 2026] [authz_core:error] [pid 2815981:tid 2815981] [client 66.249.66.33:55189] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:08:23.167900 2026] [security2:error] [pid 2817491:tid 2817491] [client 3.212.205.90:29482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/suggested-reading-ages/multi-rugby-soa/"] [unique_id "amsil0AilZO4tS3udAvFhAAAADA"]
[Thu Jul 30 11:08:23.382444 2026] [ssl:error] [pid 2833086:tid 2833086] (EAI 2)Name or service not known: [client 144.76.19.72:20050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:23.382477 2026] [ssl:error] [pid 2833086:tid 2833086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:23.427136 2026] [security2:error] [pid 2832271:tid 2832271] [client 124.156.225.181:54386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.co.uk"] [uri "/"] [unique_id "amsily6Wmwsppxva68oNhQAAABc"]
[Thu Jul 30 11:08:23.430568 2026] [authz_core:error] [pid 2832271:tid 2832271] [client 124.156.225.181:54386] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 11:08:23.436213 2026] [ssl:error] [pid 2814709:tid 2814709] (EAI 2)Name or service not known: [client 144.76.19.72:20060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:23.436232 2026] [ssl:error] [pid 2814709:tid 2814709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:23.437229 2026] [authz_core:error] [pid 2832271:tid 2832271] [client 124.156.225.181:54386] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 11:08:23.445177 2026] [security2:error] [pid 2810296:tid 2810296] [client 43.131.39.179:60982] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sharonduggal.co.uk"] [uri "/"] [unique_id "amsil5BxEX7_yYrf7psVywAAADk"]
[Thu Jul 30 11:08:23.574675 2026] [security2:error] [pid 2817492:tid 2817492] [client 124.156.225.181:54528] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amsil3JiypSGjlpWLwYVbQAAADg"]
[Thu Jul 30 11:08:25.507093 2026] [security2:error] [pid 2833145:tid 2833145] [client 49.51.243.95:60362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sewyork.co.uk"] [uri "/"] [unique_id "amsimbONpGZrO_cc3TEeeAAAACs"]
[Thu Jul 30 11:08:25.671346 2026] [security2:error] [pid 2832716:tid 2832716] [client 43.156.228.27:42404] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wildduckdesigns.co.uk"] [uri "/"] [unique_id "amsimYdIBBaMNwO1iPhTrwAAAA8"]
[Thu Jul 30 11:08:26.076951 2026] [security2:error] [pid 2807341:tid 2807341] [client 150.5.132.46:14261] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsimmTFYQld72XeAz2ZvAAAACI"]
[Thu Jul 30 11:08:26.076999 2026] [security2:error] [pid 2807341:tid 2807341] [client 150.5.132.46:14261] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsimmTFYQld72XeAz2ZvAAAACI"]
[Thu Jul 30 11:08:26.077250 2026] [security2:error] [pid 2807341:tid 2807341] [client 150.5.132.46:14261] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsimmTFYQld72XeAz2ZvAAAACI"]
[Thu Jul 30 11:08:26.188296 2026] [security2:error] [pid 2823068:tid 2823068] [client 43.156.228.27:43368] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.co.uk"] [uri "/"] [unique_id "amsimvQip3flDj78JW4wZAAAABY"]
[Thu Jul 30 11:08:26.885815 2026] [core:error] [pid 2836186:tid 2836186] (13)Permission denied: [client 216.73.216.199:19448] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/remote_node_defrag_ratio
[Thu Jul 30 11:08:27.429933 2026] [ssl:error] [pid 2836186:tid 2836186] (70014)End of file found: [client 216.73.216.199:19448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:27.533371 2026] [ssl:error] [pid 2815981:tid 2815981] (EAI 2)Name or service not known: [client 144.76.19.72:20074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:27.533409 2026] [ssl:error] [pid 2815981:tid 2815981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:27.560370 2026] [security2:error] [pid 2815981:tid 2815981] [client 43.156.228.27:45118] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsim4BTTHyycykT_X2J4gAAADw"], referer: http://www.jasperandtroy.co.uk
[Thu Jul 30 11:08:28.286536 2026] [security2:error] [pid 2836037:tid 2836037] [client 3.215.59.93:22483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/greenbank-school-blackout-poem-6/"] [unique_id "amsinPcfeDBPYEYW4DnKZAAAAAQ"]
[Thu Jul 30 11:08:28.295125 2026] [ssl:error] [pid 2836237:tid 2836237] (EAI 2)Name or service not known: [client 144.76.19.72:20080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:28.295165 2026] [ssl:error] [pid 2836237:tid 2836237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:28.931764 2026] [ssl:error] [pid 2810296:tid 2810296] (70014)End of file found: [client 216.73.216.199:61253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:30.136765 2026] [core:error] [pid 2830019:tid 2830019] (13)Permission denied: [client 216.73.216.199:52202] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/object_size
[Thu Jul 30 11:08:30.203924 2026] [security2:error] [pid 2830224:tid 2830224] [client 43.130.3.122:36530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.loca.co.uk"] [uri "/"] [unique_id "amsinsjEgPJhWfocrSyhcgAAABs"]
[Thu Jul 30 11:08:30.355801 2026] [security2:error] [pid 2815917:tid 2815917] [client 43.130.12.43:43128] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "amsinqaaevkErbrabVwlDAAAADM"]
[Thu Jul 30 11:08:30.747130 2026] [ssl:error] [pid 2830019:tid 2830019] (70014)End of file found: [client 216.73.216.199:52202] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:30.926147 2026] [lsapi:warn] [pid 2815917:tid 2815917] [client 43.130.12.43:43128] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 11:08:31.349123 2026] [ssl:error] [pid 2836239:tid 2836239] (EAI 2)Name or service not known: [client 144.76.19.72:51678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:31.349158 2026] [ssl:error] [pid 2836239:tid 2836239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:31.405319 2026] [ssl:error] [pid 2833143:tid 2833143] (EAI 2)Name or service not known: [client 144.76.19.72:51686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:31.405368 2026] [ssl:error] [pid 2833143:tid 2833143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:32.563735 2026] [core:error] [pid 2799771:tid 2799771] (13)Permission denied: [client 216.73.216.199:61739] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory33/node0/compact
[Thu Jul 30 11:08:32.763335 2026] [security2:error] [pid 2827783:tid 2827783] [client 3.210.114.189:9251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/3d-book-covers/screenshot-160-2/"] [unique_id "amsioEeUkDpp1VtJSx6wLwAAAAA"]
[Thu Jul 30 11:08:33.466135 2026] [ssl:error] [pid 2799771:tid 2799771] (70014)End of file found: [client 216.73.216.199:61739] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:33.727348 2026] [security2:error] [pid 2817491:tid 2817491] [client 150.5.132.46:49733] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsioUAilZO4tS3udAvFiAAAADA"]
[Thu Jul 30 11:08:33.727399 2026] [security2:error] [pid 2817491:tid 2817491] [client 150.5.132.46:49733] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsioUAilZO4tS3udAvFiAAAADA"]
[Thu Jul 30 11:08:33.727668 2026] [security2:error] [pid 2817491:tid 2817491] [client 150.5.132.46:49733] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsioUAilZO4tS3udAvFiAAAADA"]
[Thu Jul 30 11:08:34.020496 2026] [authz_core:error] [pid 2836236:tid 2836236] [client 172.202.44.182:24640] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 11:08:34.094260 2026] [security2:error] [pid 2819910:tid 2819910] [client 101.33.66.34:44022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/"] [unique_id "amsiopwZdvDRRNztCi6mGgAAAEw"]
[Thu Jul 30 11:08:34.460280 2026] [ssl:error] [pid 2819488:tid 2819488] (EAI 2)Name or service not known: [client 144.76.19.72:51696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:34.460316 2026] [ssl:error] [pid 2819488:tid 2819488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:34.515037 2026] [ssl:error] [pid 2817491:tid 2817491] (EAI 2)Name or service not known: [client 144.76.19.72:51700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:34.515090 2026] [ssl:error] [pid 2817491:tid 2817491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:34.644018 2026] [security2:error] [pid 2815917:tid 2815917] [client 43.130.12.43:47678] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.techsuccess.uk"] [uri "/"] [unique_id "amsioqaaevkErbrabVwlEAAAADM"]
[Thu Jul 30 11:08:35.254467 2026] [security2:error] [pid 2832716:tid 2832716] [client 34.197.28.78:12392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/home/tom-with-over-the-line-at-madeleine-lindley/"] [unique_id "amsio4dIBBaMNwO1iPhTtQAAAA8"]
[Thu Jul 30 11:08:35.289931 2026] [security2:error] [pid 2834092:tid 2834092] [client 49.51.39.209:54980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsiozDEiE9F2XBEiUyGlAAAAB4"]
[Thu Jul 30 11:08:35.724938 2026] [security2:error] [pid 2819488:tid 2819488] [client 43.130.3.120:35902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amsio3GGqK3lnaMFJjiqmwAAAEA"]
[Thu Jul 30 11:08:36.243651 2026] [security2:error] [pid 2836237:tid 2836237] [client 170.106.180.139:57594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amsipAX3RflU1fewwQB3bgAAADo"]
[Thu Jul 30 11:08:36.420710 2026] [security2:error] [pid 2815857:tid 2815857] [client 101.33.66.34:45524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amsipLwXx2CERl4kDMTlWAAAAC0"], referer: http://www.thesilkshed.co.uk
[Thu Jul 30 11:08:37.566700 2026] [ssl:error] [pid 2818972:tid 2818972] (EAI 2)Name or service not known: [client 144.76.19.72:51702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:37.566731 2026] [ssl:error] [pid 2818972:tid 2818972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:37.622546 2026] [ssl:error] [pid 2819910:tid 2819910] (EAI 2)Name or service not known: [client 144.76.19.72:51704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:37.622590 2026] [ssl:error] [pid 2819910:tid 2819910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:37.841258 2026] [security2:error] [pid 2814709:tid 2814709] [client 49.51.39.209:45198] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsipR7Cb72v1lFPIRnEQwAAAAs"], referer: http://www.hornsey-town-hall.org.uk
[Thu Jul 30 11:08:37.995205 2026] [security2:error] [pid 2831165:tid 2831165] [client 43.159.128.155:41480] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amsipYXtxhHbgFj37N4QkgAAACc"]
[Thu Jul 30 11:08:37.995520 2026] [ssl:error] [pid 2823072:tid 2823072] (70014)End of file found: [client 216.73.216.199:23051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:38.592422 2026] [ssl:error] [pid 2834092:tid 2834092] (70014)End of file found: [client 216.73.216.199:46572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:39.274764 2026] [security2:error] [pid 2830178:tid 2830178] [client 3.209.174.110:34397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/dark-arena-2/"] [unique_id "amsip_F5Bnx74NZJF1wdsgAAABg"]
[Thu Jul 30 11:08:39.500126 2026] [ssl:error] [pid 2830020:tid 2830020] (70014)End of file found: [client 216.73.216.199:32467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:39.946433 2026] [security2:error] [pid 2818972:tid 2818972] [client 43.135.144.81:33940] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ericashmore.org"] [uri "/"] [unique_id "amsip1Am_BJTCDZkdrakAAAAABk"]
[Thu Jul 30 11:08:40.680509 2026] [ssl:error] [pid 2827923:tid 2827923] (EAI 2)Name or service not known: [client 144.76.19.72:21750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:40.680544 2026] [ssl:error] [pid 2827923:tid 2827923] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:40.736702 2026] [ssl:error] [pid 2799771:tid 2799771] (EAI 2)Name or service not known: [client 144.76.19.72:21756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:40.736730 2026] [ssl:error] [pid 2799771:tid 2799771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:40.854050 2026] [security2:error] [pid 2831164:tid 2831164] [client 43.153.54.14:55910] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amsiqJ4rJ7DYXKfs7ZyxGgAAACY"]
[Thu Jul 30 11:08:41.079451 2026] [security2:error] [pid 2817491:tid 2817491] [client 49.51.39.209:47510] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amsiqUAilZO4tS3udAvFjAAAADA"], referer: https://www.hornsey-town-hall.org.uk/
[Thu Jul 30 11:08:43.192885 2026] [security2:error] [pid 2828090:tid 2828090] [client 3.211.181.86:11537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/buy-books/whats-a-bear-to-wear-4/"] [unique_id "amsiqyWZTEvvEs0S9y4mtgAAAAg"]
[Thu Jul 30 11:08:43.316330 2026] [authz_core:error] [pid 2830019:tid 2830019] [client 172.202.44.182:26021] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/rest-api/error_log
[Thu Jul 30 11:08:43.330966 2026] [ssl:error] [pid 2832272:tid 2832272] (70014)End of file found: [client 216.73.216.199:35963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:43.752460 2026] [security2:error] [pid 2823073:tid 2823073] [client 43.130.174.37:48398] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tripodhome.co.uk"] [uri "/"] [unique_id "amsiq0jKz5k19FvKAdrYQAAAAEM"]
[Thu Jul 30 11:08:43.821845 2026] [ssl:error] [pid 2836150:tid 2836150] (EAI 2)Name or service not known: [client 144.76.19.72:21768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:43.821883 2026] [ssl:error] [pid 2836150:tid 2836150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:43.877630 2026] [ssl:error] [pid 2830178:tid 2830178] (EAI 2)Name or service not known: [client 144.76.19.72:21774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:43.877660 2026] [ssl:error] [pid 2830178:tid 2830178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:44.327403 2026] [ssl:error] [pid 2836184:tid 2836184] (70014)End of file found: [client 216.73.216.199:46183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:44.815113 2026] [authz_core:error] [pid 2829969:tid 2829969] [client 66.249.66.33:49881] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:08:44.817779 2026] [authz_core:error] [pid 2829969:tid 2829969] [client 66.249.66.33:49881] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:08:44.992485 2026] [authz_core:error] [pid 2829969:tid 2829969] [client 66.249.66.33:49881] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:08:44.995163 2026] [authz_core:error] [pid 2829969:tid 2829969] [client 66.249.66.33:49881] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:08:45.173134 2026] [core:error] [pid 2810296:tid 2810296] [client 66.249.64.172:60716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:08:45.173166 2026] [core:error] [pid 2810296:tid 2810296] [client 66.249.64.172:60716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:08:45.226976 2026] [ssl:error] [pid 2817491:tid 2817491] (70014)End of file found: [client 216.73.216.199:40756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:45.515408 2026] [security2:error] [pid 2831163:tid 2831163] [client 110.249.201.105:15058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "elhassanartist.com"] [uri "/cgi-sys/defaultwebpage.cgi"] [unique_id "amsirWEL6IU06KDyJh1CDQAAACU"]
[Thu Jul 30 11:08:45.813390 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:45.813508 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:46.298679 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:46.298803 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:46.547672 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:46.547793 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:46.774278 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:46.774394 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:46.935989 2026] [ssl:error] [pid 2830020:tid 2830020] (EAI 2)Name or service not known: [client 144.76.19.72:21776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:46.936038 2026] [ssl:error] [pid 2830020:tid 2830020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:46.993756 2026] [ssl:error] [pid 2823073:tid 2823073] (EAI 2)Name or service not known: [client 144.76.19.72:21778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:46.993783 2026] [ssl:error] [pid 2823073:tid 2823073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:46.999270 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:46.999379 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:47.139624 2026] [security2:error] [pid 2836183:tid 2836183] [client 43.134.62.67:43724] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsir_SL6Y-ztW10piyImAAAACw"]
[Thu Jul 30 11:08:47.208661 2026] [security2:error] [pid 2810296:tid 2810296] [client 35.171.141.42:59699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/defenders/pitch-invasion"] [unique_id "amsir5BxEX7_yYrf7psV1QAAADk"]
[Thu Jul 30 11:08:47.213722 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:47.213841 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:47.302159 2026] [security2:error] [pid 2833033:tid 2833033] [client 170.106.113.159:59042] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.refraction.co.uk"] [uri "/"] [unique_id "amsir4fns5Xg09Krw754oQAAABE"]
[Thu Jul 30 11:08:47.493517 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:47.493640 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:47.731899 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:47.732012 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:47.953373 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:47.953485 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:48.072878 2026] [security2:error] [pid 2808147:tid 2808147] [client 3.218.35.239:36038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/defenders/pitch-invasion/"] [unique_id "amsisLm9OwEMjYlj9VVEjAAAAC8"]
[Thu Jul 30 11:08:48.195405 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:48.195517 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:48.413166 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:48.413289 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:48.532979 2026] [core:error] [pid 2831761:tid 2831761] [client 66.249.64.170:39904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:08:48.533014 2026] [core:error] [pid 2831761:tid 2831761] [client 66.249.64.170:39904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:08:48.623485 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:48.623616 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:49.174718 2026] [ssl:error] [pid 2836241:tid 2836241] (70014)End of file found: [client 216.73.216.199:64179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:49.308961 2026] [security2:error] [pid 2833871:tid 2833871] [client 43.130.139.136:41180] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "amsisYVS3msl6rj-gxSAnAAAAAI"]
[Thu Jul 30 11:08:49.391016 2026] [security2:error] [pid 2810296:tid 2810296] [client 43.134.78.217:44788] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amsisZBxEX7_yYrf7psV1gAAADk"]
[Thu Jul 30 11:08:49.690393 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:49.690505 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:49.911946 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:49.912140 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:50.048742 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:22042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:50.048772 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:50.074408 2026] [ssl:error] [pid 2831164:tid 2831164] (70014)End of file found: [client 216.73.216.199:46603] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:50.102246 2026] [ssl:error] [pid 2832272:tid 2832272] (EAI 2)Name or service not known: [client 144.76.19.72:22048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:50.102277 2026] [ssl:error] [pid 2832272:tid 2832272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:50.161215 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:50.161364 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:50.401976 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:50.402146 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:50.561126 2026] [core:error] [pid 2836236:tid 2836236] (13)Permission denied: [client 216.73.216.199:64893] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/min_partial
[Thu Jul 30 11:08:51.558137 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:51.558268 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:51.792322 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:51.792458 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:51.881901 2026] [core:error] [pid 2836236:tid 2836236] (13)Permission denied: [client 216.73.216.199:64893] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/alloc_calls
[Thu Jul 30 11:08:52.006174 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:52.006319 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:52.104696 2026] [security2:error] [pid 2831113:tid 2831113] [client 35.168.238.50:30060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/schools-librarians/articles/article-1/"] [unique_id "amsitEq5qq13mHqulCG8ygAAACM"]
[Thu Jul 30 11:08:52.220808 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:52.220941 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:52.259255 2026] [security2:error] [pid 2815917:tid 2815917] [client 114.119.155.58:29475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/pages/36/Work/Collage/Stay_These_Couriers_4/page:69"] [unique_id "amsitKaaevkErbrabVwlFAAAADM"], referer: http://jonathanmeyerart.co.uk/section/36/Work/Collage
[Thu Jul 30 11:08:52.408661 2026] [security2:error] [pid 2818972:tid 2818972] [client 49.51.180.2:56078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.quantum.com.mt"] [uri "/"] [unique_id "amsitFAm_BJTCDZkdrakAwAAABk"]
[Thu Jul 30 11:08:52.488837 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:52.488979 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:52.490178 2026] [ssl:error] [pid 2836236:tid 2836236] (70014)End of file found: [client 216.73.216.199:64893] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:52.712331 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:52.712504 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:52.944259 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:52.944447 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:53.083489 2026] [security2:error] [pid 2836239:tid 2836239] [client 43.162.114.69:38264] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsitfIvdlDRnbXMXP9-SgAAAD8"]
[Thu Jul 30 11:08:53.155699 2026] [ssl:error] [pid 2836184:tid 2836184] (EAI 2)Name or service not known: [client 144.76.19.72:22052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:53.155740 2026] [ssl:error] [pid 2836184:tid 2836184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:53.212729 2026] [ssl:error] [pid 2819912:tid 2819912] (EAI 2)Name or service not known: [client 144.76.19.72:22062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:53.212767 2026] [ssl:error] [pid 2819912:tid 2819912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:53.898264 2026] [security2:error] [pid 2829969:tid 2829969] [client 43.159.135.203:47466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.innerspacer.co.uk"] [uri "/"] [unique_id "amsitQKNS0hZtADG66vG9wAAAAY"]
[Thu Jul 30 11:08:54.575630 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:54.575755 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:54.779779 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:38500] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:08:54.782442 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:38500] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:08:54.833222 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:54.833335 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:54.908850 2026] [core:error] [pid 2836239:tid 2836239] (13)Permission denied: [client 216.73.216.199:7132] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory230/node0/compact
[Thu Jul 30 11:08:55.070152 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:55.070282 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:55.142802 2026] [security2:error] [pid 2815857:tid 2815857] [client 54.164.106.236:9203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/arctic-star/as-pic-2/"] [unique_id "amsit7wXx2CERl4kDMTlYAAAAC0"]
[Thu Jul 30 11:08:55.320577 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:55.320707 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:55.547564 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:55.547696 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:55.763760 2026] [security2:error] [pid 2836241:tid 2836241] [client 43.162.114.69:51374] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsit9iwxhPyq7kKQJnyvQAAAEI"], referer: http://www.glottalstop.co.uk
[Thu Jul 30 11:08:55.830648 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:55.830826 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:56.269172 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:22072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:56.269208 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:56.323625 2026] [ssl:error] [pid 2831164:tid 2831164] (EAI 2)Name or service not known: [client 144.76.19.72:22088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:56.323660 2026] [ssl:error] [pid 2831164:tid 2831164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:56.783762 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:56.783893 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:56.861955 2026] [ssl:error] [pid 2829969:tid 2829969] (70014)End of file found: [client 216.73.216.199:25454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:57.020531 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:57.020677 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:57.236629 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:57.236796 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:57.461950 2026] [ssl:error] [pid 2808147:tid 2808147] (70014)End of file found: [client 216.73.216.199:45716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:57.462626 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:57.462783 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:57.705814 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:57.705975 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:57.943216 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:57.943364 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:58.170012 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:58.170141 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:58.190380 2026] [security2:error] [pid 2830224:tid 2830224] [client 43.165.197.116:47664] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amsiusjEgPJhWfocrSyhfQAAABs"]
[Thu Jul 30 11:08:58.392369 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:58.392485 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:58.424199 2026] [security2:error] [pid 2823072:tid 2823072] [client 111.225.148.22:26644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsiuht_UQDEcOLgX9oVnQAAAD4"]
[Thu Jul 30 11:08:58.620808 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:58.620926 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:58.842829 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:58.842943 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:59.092614 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:59.092748 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:59.317795 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:59.317915 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:59.395109 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:22096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:59.395152 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:59.448050 2026] [ssl:error] [pid 2836150:tid 2836150] (EAI 2)Name or service not known: [client 144.76.19.72:22108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:08:59.448092 2026] [ssl:error] [pid 2836150:tid 2836150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:08:59.569306 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:59.569441 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:59.616737 2026] [ssl:error] [pid 2831164:tid 2831164] (70014)End of file found: [client 216.73.216.199:39505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:08:59.805025 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:08:59.805150 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:08:59.961615 2026] [security2:error] [pid 2834627:tid 2834627] [client 23.23.103.31:11362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/virtual-visits/"] [unique_id "amsiu4N47-tRSb2uFqf82gAAAAU"]
[Thu Jul 30 11:09:00.046346 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:00.046471 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:00.318361 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:00.318481 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:00.578236 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:00.578373 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:00.585810 2026] [security2:error] [pid 2810296:tid 2810296] [client 43.167.157.80:55860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "amsivJBxEX7_yYrf7psV2gAAADk"]
[Thu Jul 30 11:09:00.811203 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:00.811318 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:01.943666 2026] [security2:error] [pid 2833086:tid 2833086] [client 43.135.145.77:54298] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amsivUeeTJYnHZKihRUNmwAAACQ"]
[Thu Jul 30 11:09:02.105689 2026] [security2:error] [pid 2836037:tid 2836037] [client 43.159.135.203:56634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amsivvcfeDBPYEYW4DnKbQAAAAQ"]
[Thu Jul 30 11:09:02.172044 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:02.172194 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:02.255079 2026] [ssl:error] [pid 2836239:tid 2836239] (70014)End of file found: [client 216.73.216.199:28457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:02.388591 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:02.388711 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:02.504026 2026] [ssl:error] [pid 2836185:tid 2836185] (EAI 2)Name or service not known: [client 144.76.19.72:63062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:02.504063 2026] [ssl:error] [pid 2836185:tid 2836185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:02.557312 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:63068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:02.557340 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:03.065121 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:03.065245 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33565] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:03.489923 2026] [security2:error] [pid 2815980:tid 2815980] [client 43.135.138.128:56142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsiv-gmgC9mtOqG4J-JJAAAADs"]
[Thu Jul 30 11:09:03.896139 2026] [security2:error] [pid 2836243:tid 2836243] [client 43.159.135.203:58686] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsivzfgAlgiBwwQwdr_OQAAAEU"], referer: http://www.rogersbarbershopltd.co.uk
[Thu Jul 30 11:09:04.311511 2026] [security2:error] [pid 2837962:tid 2837962] [client 49.51.180.2:42688] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.co.uk"] [uri "/"] [unique_id "amsiwPlOqw5XLZi_ja2FtgAAAAI"]
[Thu Jul 30 11:09:04.403201 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:04.403327 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:04.471945 2026] [ssl:error] [pid 2831163:tid 2831163] (70014)End of file found: [client 216.73.216.199:61863] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:04.616698 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:04.616824 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:04.637453 2026] [security2:error] [pid 2817440:tid 2817440] [client 44.218.170.184:36389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/secret-fc/secret-fc-image/"] [unique_id "amsiwEIn1TgRB4cjIl14SAAAABI"]
[Thu Jul 30 11:09:04.819639 2026] [security2:error] [pid 2830223:tid 2830223] [client 43.135.138.128:47062] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amsiwLATenIHmIjBQIqavQAAABo"], referer: http://www.saturnsports.co.uk
[Thu Jul 30 11:09:04.844418 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:04.844536 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:04.928573 2026] [security2:error] [pid 2834038:tid 2834038] [client 43.135.145.77:43474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amsiwDm83RwbReZiz_2dwwAAAA4"], referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 11:09:05.080892 2026] [security2:error] [pid 2829969:tid 2829969] [client 43.153.123.4:43170] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsiwQKNS0hZtADG66vG_wAAAAY"]
[Thu Jul 30 11:09:05.125934 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:05.126085 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:05.365697 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:05.365814 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:05.544028 2026] [lsapi:warn] [pid 2836243:tid 2836243] [client 173.209.48.90:0] [host mail.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:09:05.613145 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:63080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:05.613173 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:05.615937 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:05.616053 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:05.620977 2026] [security2:error] [pid 2830223:tid 2830223] [client 49.51.180.2:42842] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsiwbATenIHmIjBQIqavgAAABo"], referer: http://www.spampmusic.co.uk
[Thu Jul 30 11:09:05.667685 2026] [ssl:error] [pid 2836186:tid 2836186] (EAI 2)Name or service not known: [client 144.76.19.72:63086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:05.667727 2026] [ssl:error] [pid 2836186:tid 2836186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:05.841322 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:05.841446 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:06.061323 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:06.061442 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:06.284051 2026] [ssl:error] [pid 2838193:tid 2838193] (70014)End of file found: [client 216.73.216.199:54485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:06.808049 2026] [security2:error] [pid 2819910:tid 2819910] [client 3.93.98.99:5847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/resist/fqyxkg4xoaig7bo/"] [unique_id "amsiwpwZdvDRRNztCi6mJQAAAEw"]
[Thu Jul 30 11:09:07.010582 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:07.010709 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:07.189648 2026] [security2:error] [pid 2836243:tid 2836243] [client 43.153.123.4:34994] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsiwzfgAlgiBwwQwdr_OwAAAEU"], referer: http://www.staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 11:09:07.242941 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:07.243053 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:07.620311 2026] [security2:error] [pid 2828833:tid 2828833] [client 101.32.52.164:37426] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "amsiwwytS1x4vcAoCY7MsAAAABA"]
[Thu Jul 30 11:09:07.678608 2026] [ssl:error] [pid 2830223:tid 2830223] (70014)End of file found: [client 216.73.216.199:45096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:07.983748 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:07.983872 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:08.213706 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:08.213830 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:08.429576 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:08.429686 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:08.678684 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:08.678800 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:08.751821 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:63088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:08.751851 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:08.808122 2026] [ssl:error] [pid 2819910:tid 2819910] (EAI 2)Name or service not known: [client 144.76.19.72:63102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:08.808159 2026] [ssl:error] [pid 2819910:tid 2819910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:09.296985 2026] [security2:error] [pid 2815917:tid 2815917] [client 170.106.37.134:37096] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsixaaaevkErbrabVwlHAAAADM"]
[Thu Jul 30 11:09:10.003572 2026] [security2:error] [pid 2836239:tid 2836239] [client 43.153.123.4:37462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amsixvIvdlDRnbXMXP9-UgAAAD8"], referer: https://www.staffordshirephoenixrifleandpistolclub.co.uk/
[Thu Jul 30 11:09:10.150017 2026] [access_compat:error] [pid 2836243:tid 2836243] [client 172.202.44.182:32180] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 11:09:10.156411 2026] [access_compat:error] [pid 2836243:tid 2836243] [client 172.202.44.182:32180] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/wc-logs/
[Thu Jul 30 11:09:10.184579 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:10.184704 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:10.399914 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:10.400026 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:10.609349 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:10.609461 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:10.706574 2026] [lsapi:warn] [pid 2819910:tid 2819910] [client 216.73.216.199:47830] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:09:10.706611 2026] [lsapi:error] [pid 2819910:tid 2819910] [client 216.73.216.199:47830] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/unserializeRDF.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:09:10.827111 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:10.827223 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:11.037783 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:11.037902 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:11.263200 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:11.263314 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:11.475230 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:11.475349 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:11.598178 2026] [security2:error] [pid 2836243:tid 2836243] [client 43.155.26.193:49466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "amsixzfgAlgiBwwQwdr_PwAAAEU"]
[Thu Jul 30 11:09:11.662657 2026] [security2:error] [pid 2815917:tid 2815917] [client 43.153.96.233:41330] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsix6aaevkErbrabVwlHQAAADM"]
[Thu Jul 30 11:09:11.746125 2026] [authz_core:error] [pid 2831164:tid 2831164] [client 82.102.18.190:57800] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/error_log
[Thu Jul 30 11:09:11.761418 2026] [security2:error] [pid 2819910:tid 2819910] [client 170.106.37.134:39018] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsix5wZdvDRRNztCi6mKAAAAEw"], referer: http://www.1stcolsterworthscouts.org.uk
[Thu Jul 30 11:09:11.861793 2026] [ssl:error] [pid 2836237:tid 2836237] (EAI 2)Name or service not known: [client 144.76.19.72:25496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:11.861828 2026] [ssl:error] [pid 2836237:tid 2836237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:11.915756 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:25500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:11.915788 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:12.004968 2026] [ssl:error] [pid 2836236:tid 2836236] (70014)End of file found: [client 216.73.216.199:8858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:12.054480 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:12.054604 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:12.285303 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:12.285419 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:12.525667 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:12.525778 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:12.743674 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:12.743797 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:12.830852 2026] [core:error] [pid 2808147:tid 2808147] [client 66.249.64.170:45480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:12.830882 2026] [core:error] [pid 2808147:tid 2808147] [client 66.249.64.170:45480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:12.875799 2026] [security2:error] [pid 2831163:tid 2831163] [client 101.32.52.164:34016] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsiyGEL6IU06KDyJh1CGAAAACU"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 11:09:12.877640 2026] [authz_core:error] [pid 2831163:tid 2831163] [client 101.32.52.164:34016] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 11:09:12.880306 2026] [authz_core:error] [pid 2831163:tid 2831163] [client 101.32.52.164:34016] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 11:09:12.958897 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:12.959023 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:13.184038 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:13.184164 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:13.417632 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:13.417744 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:13.639234 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:13.639349 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:13.687191 2026] [security2:error] [pid 2833033:tid 2833033] [client 43.153.96.233:39326] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amsiyYfns5Xg09Krw754qQAAABE"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 11:09:13.811103 2026] [ssl:error] [pid 2819912:tid 2819912] (70014)End of file found: [client 216.73.216.199:56619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:14.262747 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:14.262865 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:14.294473 2026] [ssl:error] [pid 2815976:tid 2815976] (70014)End of file found: [client 216.73.216.199:7137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:14.523787 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:14.523904 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:14.972321 2026] [ssl:error] [pid 2831163:tid 2831163] (EAI 2)Name or service not known: [client 144.76.19.72:25508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:14.972350 2026] [ssl:error] [pid 2831163:tid 2831163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:15.025414 2026] [ssl:error] [pid 2833086:tid 2833086] (EAI 2)Name or service not known: [client 144.76.19.72:25524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:15.025439 2026] [ssl:error] [pid 2833086:tid 2833086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:15.760967 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:15.761100 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:15.883943 2026] [security2:error] [pid 2834038:tid 2834038] [client 43.130.26.3:37426] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.eu"] [uri "/"] [unique_id "amsiyzm83RwbReZiz_2dyAAAAA4"]
[Thu Jul 30 11:09:15.975620 2026] [security2:error] [pid 2815857:tid 2815857] [client 43.130.26.3:37482] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.fr"] [uri "/"] [unique_id "amsiy7wXx2CERl4kDMTlZQAAAC0"]
[Thu Jul 30 11:09:16.007422 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:16.007562 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:16.244150 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:16.244264 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:16.452807 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:16.452921 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:16.687669 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:16.687784 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:16.898833 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:16.898949 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:17.111376 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:17.111492 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:17.326851 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:17.326965 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:17.442828 2026] [security2:error] [pid 2808147:tid 2808147] [client 101.32.52.164:43828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "amsizbm9OwEMjYlj9VVEmQAAAC8"]
[Thu Jul 30 11:09:17.554443 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:17.554573 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:17.575582 2026] [security2:error] [pid 2829969:tid 2829969] [client 185.191.171.1:48856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/creighton-uniform-company"] [unique_id "amsizQKNS0hZtADG66vHAwAAAAY"]
[Thu Jul 30 11:09:17.789491 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:17.789611 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:18.083267 2026] [ssl:error] [pid 2834038:tid 2834038] (EAI 2)Name or service not known: [client 144.76.19.72:25532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:18.083297 2026] [ssl:error] [pid 2834038:tid 2834038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:18.137320 2026] [ssl:error] [pid 2836236:tid 2836236] (EAI 2)Name or service not known: [client 144.76.19.72:25542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:18.137363 2026] [ssl:error] [pid 2836236:tid 2836236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:18.247087 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:18.247205 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:18.328090 2026] [ssl:error] [pid 2833033:tid 2833033] (70014)End of file found: [client 216.73.216.199:54142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:18.504486 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:18.504614 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:18.574866 2026] [security2:error] [pid 2838851:tid 2838851] [client 43.130.26.3:40080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsizjOmEbkKhb2QfxCUGAAAAAw"], referer: http://www.orgent.eu
[Thu Jul 30 11:09:18.693659 2026] [security2:error] [pid 2819488:tid 2819488] [client 43.130.26.3:40108] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsiznGGqK3lnaMFJjiq0wAAAEA"], referer: http://www.orgent.fr
[Thu Jul 30 11:09:18.729419 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:18.729543 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:18.968032 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:18.968150 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:19.132293 2026] [ssl:error] [pid 2817491:tid 2817491] (70014)End of file found: [client 216.73.216.199:5312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:19.178146 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:19.178268 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:19.390898 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:19.391013 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:19.463801 2026] [security2:error] [pid 2815917:tid 2815917] [client 43.157.95.131:45290] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsiz6aaevkErbrabVwlHwAAADM"]
[Thu Jul 30 11:09:19.599457 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:19.599576 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:19.758488 2026] [core:error] [pid 2818972:tid 2818972] [client 66.249.64.171:64937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:19.758517 2026] [core:error] [pid 2818972:tid 2818972] [client 66.249.64.171:64937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:19.823955 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:19.824088 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:19.832017 2026] [core:error] [pid 2819912:tid 2819912] (13)Permission denied: [client 216.73.216.199:22024] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory42/node0/compact
[Thu Jul 30 11:09:20.048275 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:20.048400 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:20.305214 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:20.305337 2026] [cgi:error] [pid 2815670:tid 2815670] [client 20.220.15.170:33642] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:20.412427 2026] [authz_core:error] [pid 2830223:tid 2830223] [client 169.58.39.193:65494] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:09:20.741312 2026] [authz_core:error] [pid 2830020:tid 2830020] [client 66.249.66.33:45702] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:20.743977 2026] [authz_core:error] [pid 2830020:tid 2830020] [client 66.249.66.33:45702] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:20.984890 2026] [cgi:error] [pid 2831164:tid 2831164] [client 20.220.15.170:33618] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:09:20.985000 2026] [cgi:error] [pid 2831164:tid 2831164] [client 20.220.15.170:33618] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:09:21.091614 2026] [security2:error] [pid 2829969:tid 2829969] [client 43.157.95.131:54464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amsi0QKNS0hZtADG66vHBQAAAAY"], referer: http://www.berehap.be
[Thu Jul 30 11:09:21.192704 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:29852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:21.192738 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:21.245648 2026] [ssl:error] [pid 2819912:tid 2819912] (EAI 2)Name or service not known: [client 144.76.19.72:29858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:21.245684 2026] [ssl:error] [pid 2819912:tid 2819912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:23.239801 2026] [security2:error] [pid 2827783:tid 2827783] [client 27.3.233.235:45950] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsi00eUkDpp1VtJSx6wOwAAAAA"]
[Thu Jul 30 11:09:23.239852 2026] [security2:error] [pid 2827783:tid 2827783] [client 27.3.233.235:45950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsi00eUkDpp1VtJSx6wOwAAAAA"]
[Thu Jul 30 11:09:23.240107 2026] [security2:error] [pid 2827783:tid 2827783] [client 27.3.233.235:45950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsi00eUkDpp1VtJSx6wOwAAAAA"]
[Thu Jul 30 11:09:23.579017 2026] [security2:error] [pid 2819912:tid 2819912] [client 43.157.95.131:56914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsi0xKut1qT_wTLOozszwAAAE4"], referer: https://www.berehap.be/
[Thu Jul 30 11:09:24.168412 2026] [ssl:error] [pid 2831163:tid 2831163] (70014)End of file found: [client 216.73.216.199:42932] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:24.179746 2026] [core:error] [pid 2833086:tid 2833086] [client 66.249.64.170:35238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:24.179770 2026] [core:error] [pid 2833086:tid 2833086] [client 66.249.64.170:35238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:24.298934 2026] [ssl:error] [pid 2830223:tid 2830223] (EAI 2)Name or service not known: [client 144.76.19.72:29870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:24.298963 2026] [ssl:error] [pid 2830223:tid 2830223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:24.351682 2026] [ssl:error] [pid 2819488:tid 2819488] (EAI 2)Name or service not known: [client 144.76.19.72:29882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:24.351710 2026] [ssl:error] [pid 2819488:tid 2819488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:24.884313 2026] [ssl:error] [pid 2827783:tid 2827783] (70014)End of file found: [client 216.73.216.199:44037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:25.092386 2026] [security2:error] [pid 2834092:tid 2834092] [client 114.119.144.31:43681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~102,17/request_format~html"] [unique_id "amsi1TDEiE9F2XBEiUyGowAAAB4"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/cat_ids~102,17/request_format~html
[Thu Jul 30 11:09:26.072081 2026] [security2:error] [pid 2830223:tid 2830223] [client 114.119.144.31:43683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~102,17/request_format~html"] [unique_id "amsi1rATenIHmIjBQIqawwAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/cat_ids~102,17/request_format~html
[Thu Jul 30 11:09:26.692544 2026] [ssl:error] [pid 2815857:tid 2815857] (70014)End of file found: [client 216.73.216.199:54276] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:26.923219 2026] [security2:error] [pid 2834092:tid 2834092] [client 14.191.176.16:19605] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsi1jDEiE9F2XBEiUyGpAAAAB4"]
[Thu Jul 30 11:09:26.923283 2026] [security2:error] [pid 2834092:tid 2834092] [client 14.191.176.16:19605] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsi1jDEiE9F2XBEiUyGpAAAAB4"]
[Thu Jul 30 11:09:26.923556 2026] [security2:error] [pid 2834092:tid 2834092] [client 14.191.176.16:19605] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsi1jDEiE9F2XBEiUyGpAAAAB4"]
[Thu Jul 30 11:09:27.403671 2026] [ssl:error] [pid 2834038:tid 2834038] (EAI 2)Name or service not known: [client 144.76.19.72:29886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:27.403707 2026] [ssl:error] [pid 2834038:tid 2834038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:27.458325 2026] [ssl:error] [pid 2834092:tid 2834092] (EAI 2)Name or service not known: [client 144.76.19.72:29898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:27.458363 2026] [ssl:error] [pid 2834092:tid 2834092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:27.824802 2026] [authz_core:error] [pid 2839294:tid 2839294] [client 169.58.39.193:50061] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:09:29.610444 2026] [ssl:error] [pid 2836237:tid 2836237] (70014)End of file found: [client 216.73.216.199:64627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:30.530704 2026] [ssl:error] [pid 2827872:tid 2827872] (EAI 2)Name or service not known: [client 144.76.19.72:20608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:30.530741 2026] [ssl:error] [pid 2827872:tid 2827872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:30.549907 2026] [security2:error] [pid 2837962:tid 2837962] [client 43.159.36.180:58980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.co.uk"] [uri "/"] [unique_id "amsi2vlOqw5XLZi_ja2FugAAAAI"]
[Thu Jul 30 11:09:30.584012 2026] [ssl:error] [pid 2827783:tid 2827783] (EAI 2)Name or service not known: [client 144.76.19.72:20616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:30.584047 2026] [ssl:error] [pid 2827783:tid 2827783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:30.615652 2026] [ssl:error] [pid 2831163:tid 2831163] (70014)End of file found: [client 216.73.216.199:23863] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:32.023177 2026] [ssl:error] [pid 2833086:tid 2833086] (70014)End of file found: [client 216.73.216.199:34176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:33.471125 2026] [security2:error] [pid 2834038:tid 2834038] [client 43.165.197.116:49756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.maisongerlyn.be"] [uri "/"] [unique_id "amsi3Tm83RwbReZiz_2dzAAAAA4"]
[Thu Jul 30 11:09:33.536386 2026] [security2:error] [pid 2819488:tid 2819488] [client 185.191.171.8:12408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7118.0.html"] [unique_id "amsi3XGGqK3lnaMFJjiq1gAAAEA"]
[Thu Jul 30 11:09:33.571751 2026] [security2:error] [pid 2830223:tid 2830223] [client 84.75.148.17:36592] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amsi3bATenIHmIjBQIqaxQAAABo"]
[Thu Jul 30 11:09:33.571801 2026] [security2:error] [pid 2830223:tid 2830223] [client 84.75.148.17:36592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amsi3bATenIHmIjBQIqaxQAAABo"]
[Thu Jul 30 11:09:33.572057 2026] [security2:error] [pid 2830223:tid 2830223] [client 84.75.148.17:36592] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsi3bATenIHmIjBQIqaxQAAABo"]
[Thu Jul 30 11:09:33.642016 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:20630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:33.642041 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:33.696590 2026] [ssl:error] [pid 2815670:tid 2815670] (EAI 2)Name or service not known: [client 144.76.19.72:20642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:33.696629 2026] [ssl:error] [pid 2815670:tid 2815670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:33.908454 2026] [core:error] [pid 2809559:tid 2809559] [client 66.249.66.67:62372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:33.908488 2026] [core:error] [pid 2809559:tid 2809559] [client 66.249.66.67:62372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:35.113824 2026] [core:error] [pid 2830020:tid 2830020] [client 66.249.66.3:35808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:35.113864 2026] [core:error] [pid 2830020:tid 2830020] [client 66.249.66.3:35808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:09:35.126976 2026] [core:error] [pid 2819912:tid 2819912] (13)Permission denied: [client 216.73.216.199:36803] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/alloc_calls
[Thu Jul 30 11:09:35.428958 2026] [ssl:error] [pid 2819912:tid 2819912] (70014)End of file found: [client 216.73.216.199:36803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:35.923514 2026] [ssl:error] [pid 2830224:tid 2830224] (70014)End of file found: [client 216.73.216.199:14350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:36.406626 2026] [cgi:error] [pid 2830020:tid 2830020] [client 135.119.63.61:37552] AH02812: stderr from /home/shirleya/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:09:36.752773 2026] [ssl:error] [pid 2836239:tid 2836239] (EAI 2)Name or service not known: [client 144.76.19.72:20652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:36.752800 2026] [ssl:error] [pid 2836239:tid 2836239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:36.805228 2026] [ssl:error] [pid 2831163:tid 2831163] (EAI 2)Name or service not known: [client 144.76.19.72:20654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:36.805256 2026] [ssl:error] [pid 2831163:tid 2831163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:37.013044 2026] [security2:error] [pid 2836237:tid 2836237] [client 43.159.128.237:47912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsi4QX3RflU1fewwQB3ewAAADo"]
[Thu Jul 30 11:09:37.399798 2026] [security2:error] [pid 2830019:tid 2830019] [client 43.165.197.116:42980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amsi4RuN3vPcGBKgIVA-zQAAAA0"], referer: http://www.maisongerlyn.be
[Thu Jul 30 11:09:38.442915 2026] [core:error] [pid 2815976:tid 2815976] (13)Permission denied: [client 216.73.216.199:38788] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory122/node0/compact
[Thu Jul 30 11:09:39.081815 2026] [security2:error] [pid 2834627:tid 2834627] [client 49.51.245.241:37240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amsi44N47-tRSb2uFqf86QAAAAU"]
[Thu Jul 30 11:09:39.230812 2026] [authz_core:error] [pid 2831164:tid 2831164] [client 169.58.39.193:51176] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:09:39.483812 2026] [ssl:error] [pid 2830020:tid 2830020] (70014)End of file found: [client 216.73.216.199:55275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:39.798973 2026] [security2:error] [pid 2839443:tid 2839443] [client 49.51.245.241:37858] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amsi47eqoZR37QDZfP8MKgAAABc"]
[Thu Jul 30 11:09:39.861351 2026] [ssl:error] [pid 2839410:tid 2839410] (EAI 2)Name or service not known: [client 144.76.19.72:30014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:39.861384 2026] [ssl:error] [pid 2839410:tid 2839410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:39.916706 2026] [ssl:error] [pid 2834627:tid 2834627] (EAI 2)Name or service not known: [client 144.76.19.72:30026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:39.916731 2026] [ssl:error] [pid 2834627:tid 2834627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:39.977961 2026] [ssl:error] [pid 2837962:tid 2837962] (70014)End of file found: [client 216.73.216.199:6767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:40.260892 2026] [security2:error] [pid 2837962:tid 2837962] [client 43.159.128.237:50630] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.blow-hairstudio.co.uk"] [uri "/"] [unique_id "amsi5PlOqw5XLZi_ja2FvwAAAAI"]
[Thu Jul 30 11:09:40.625487 2026] [security2:error] [pid 2839444:tid 2839444] [client 43.159.128.237:50960] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsi5HGihyH05rRueSYuNAAAABg"]
[Thu Jul 30 11:09:40.627139 2026] [authz_core:error] [pid 2839444:tid 2839444] [client 43.159.128.237:50960] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:40.628864 2026] [authz_core:error] [pid 2839444:tid 2839444] [client 43.159.128.237:50960] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:41.554278 2026] [core:error] [pid 2830224:tid 2830224] (13)Permission denied: [client 216.73.216.199:27556] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory134/node0/compact
[Thu Jul 30 11:09:41.656486 2026] [core:error] [pid 2830224:tid 2830224] (13)Permission denied: [client 216.73.216.199:27556] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_generic/sections/__param
[Thu Jul 30 11:09:42.114621 2026] [security2:error] [pid 2815980:tid 2815980] [client 49.51.245.241:43346] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsi5ugmgC9mtOqG4J-JMAAAADs"], referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 11:09:42.116453 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 49.51.245.241:43346] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 11:09:42.119098 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 49.51.245.241:43346] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 11:09:42.262248 2026] [ssl:error] [pid 2830224:tid 2830224] (70014)End of file found: [client 216.73.216.199:27556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:42.296143 2026] [security2:error] [pid 2837962:tid 2837962] [client 49.51.245.241:43438] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsi5vlOqw5XLZi_ja2FwAAAAAI"], referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 11:09:42.298047 2026] [authz_core:error] [pid 2837962:tid 2837962] [client 49.51.245.241:43438] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 11:09:42.300702 2026] [authz_core:error] [pid 2837962:tid 2837962] [client 49.51.245.241:43438] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 11:09:42.973846 2026] [ssl:error] [pid 2839444:tid 2839444] (EAI 2)Name or service not known: [client 144.76.19.72:30040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:42.973884 2026] [ssl:error] [pid 2839444:tid 2839444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:43.029031 2026] [ssl:error] [pid 2818972:tid 2818972] (EAI 2)Name or service not known: [client 144.76.19.72:30046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:43.029064 2026] [ssl:error] [pid 2818972:tid 2818972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:43.318240 2026] [security2:error] [pid 2833086:tid 2833086] [client 43.159.128.237:44836] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amsi50eeTJYnHZKihRUNqAAAACQ"], referer: http://www.blow-hairstudio.co.uk
[Thu Jul 30 11:09:43.774665 2026] [core:error] [pid 2831163:tid 2831163] (13)Permission denied: [client 216.73.216.199:56813] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/shmem_inode_cache/hwcache_align
[Thu Jul 30 11:09:44.334958 2026] [security2:error] [pid 2836236:tid 2836236] [client 170.106.165.76:48840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsi6AHSQSn9OTWvyFwwKAAAADY"], referer: http://www.banskoexpress.co.uk
[Thu Jul 30 11:09:44.382329 2026] [security2:error] [pid 2831163:tid 2831163] [client 216.73.216.199:56813] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/json.ini"] [unique_id "amsi6GEL6IU06KDyJh1CJgAAACU"]
[Thu Jul 30 11:09:44.382644 2026] [security2:error] [pid 2831163:tid 2831163] [client 216.73.216.199:56813] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/json.ini"] [unique_id "amsi6GEL6IU06KDyJh1CJgAAACU"]
[Thu Jul 30 11:09:44.382867 2026] [security2:error] [pid 2831163:tid 2831163] [client 216.73.216.199:56813] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/json.ini"] [unique_id "amsi6GEL6IU06KDyJh1CJgAAACU"]
[Thu Jul 30 11:09:44.582268 2026] [authz_core:error] [pid 2830020:tid 2830020] [client 169.58.39.193:52101] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:09:44.733819 2026] [security2:error] [pid 2839844:tid 2839844] [client 43.159.128.237:54422] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.be"] [uri "/"] [unique_id "amsi6DaRannQYkcZg4mlaQAAACE"]
[Thu Jul 30 11:09:44.991565 2026] [ssl:error] [pid 2831163:tid 2831163] (70014)End of file found: [client 216.73.216.199:56813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:46.116218 2026] [ssl:error] [pid 2830019:tid 2830019] (EAI 2)Name or service not known: [client 144.76.19.72:30062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:46.116260 2026] [ssl:error] [pid 2830019:tid 2830019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:46.167786 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:30064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:46.167827 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:46.196201 2026] [core:error] [pid 2836150:tid 2836150] (13)Permission denied: [client 216.73.216.199:1727] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory128/node0/compact
[Thu Jul 30 11:09:46.823335 2026] [security2:error] [pid 2839294:tid 2839294] [client 170.106.165.76:42348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsi6m6pHLZMbHcvjXQzXAAAAA8"], referer: http://www.banskoexpress.com
[Thu Jul 30 11:09:47.560720 2026] [security2:error] [pid 2817440:tid 2817440] [client 43.159.128.237:49346] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsi60In1TgRB4cjIl14VQAAABI"], referer: http://www.orgent.be
[Thu Jul 30 11:09:47.888241 2026] [authz_core:error] [pid 2839295:tid 2839295] [client 66.249.66.33:52895] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:47.890906 2026] [authz_core:error] [pid 2839295:tid 2839295] [client 66.249.66.33:52895] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:48.010561 2026] [ssl:error] [pid 2836150:tid 2836150] (70014)End of file found: [client 216.73.216.199:1727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:48.512567 2026] [ssl:error] [pid 2838851:tid 2838851] (70014)End of file found: [client 216.73.216.199:34462] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:49.272791 2026] [ssl:error] [pid 2839748:tid 2839748] (EAI 2)Name or service not known: [client 144.76.19.72:30084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:49.272823 2026] [ssl:error] [pid 2839748:tid 2839748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:49.327812 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:30098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:49.327844 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:50.328134 2026] [ssl:error] [pid 2815917:tid 2815917] (70014)End of file found: [client 216.73.216.199:41119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:52.016466 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:52.019119 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:52.119736 2026] [authz_core:error] [pid 2833144:tid 2833144] [client 82.102.18.190:53754] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/ID3/error_log
[Thu Jul 30 11:09:52.381267 2026] [ssl:error] [pid 2831163:tid 2831163] (EAI 2)Name or service not known: [client 144.76.19.72:38368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:52.381304 2026] [ssl:error] [pid 2831163:tid 2831163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:52.437459 2026] [ssl:error] [pid 2837962:tid 2837962] (EAI 2)Name or service not known: [client 144.76.19.72:38378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:52.437497 2026] [ssl:error] [pid 2837962:tid 2837962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:52.975194 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:52.977923 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:53.354968 2026] [ssl:error] [pid 2830020:tid 2830020] (70014)End of file found: [client 216.73.216.199:39300] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:54.650482 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:54.653143 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:54.864827 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:54.867468 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:55.493083 2026] [ssl:error] [pid 2830019:tid 2830019] (EAI 2)Name or service not known: [client 144.76.19.72:38388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:55.493121 2026] [ssl:error] [pid 2830019:tid 2830019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:55.550532 2026] [ssl:error] [pid 2819912:tid 2819912] (EAI 2)Name or service not known: [client 144.76.19.72:38390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:55.550579 2026] [ssl:error] [pid 2819912:tid 2819912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:57.277123 2026] [access_compat:error] [pid 2828833:tid 2828833] [client 45.158.164.139:45454] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:09:57.535222 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:57.537863 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:58.367117 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:09:58.369834 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.33:43868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:09:58.603146 2026] [ssl:error] [pid 2831163:tid 2831163] (70014)End of file found: [client 216.73.216.199:20253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:09:58.607238 2026] [ssl:error] [pid 2831164:tid 2831164] (EAI 2)Name or service not known: [client 144.76.19.72:38394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:58.607281 2026] [ssl:error] [pid 2831164:tid 2831164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:58.659156 2026] [ssl:error] [pid 2827872:tid 2827872] (EAI 2)Name or service not known: [client 144.76.19.72:38398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:09:58.659198 2026] [ssl:error] [pid 2827872:tid 2827872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:09:58.908574 2026] [ssl:error] [pid 2815857:tid 2815857] (70014)End of file found: [client 216.73.216.199:18109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:00.429164 2026] [ssl:error] [pid 2815917:tid 2815917] (70014)End of file found: [client 216.73.216.199:29925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:01.725133 2026] [ssl:error] [pid 2833144:tid 2833144] (EAI 2)Name or service not known: [client 144.76.19.72:64710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:01.725202 2026] [ssl:error] [pid 2833144:tid 2833144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:01.778036 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:64722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:01.778096 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:01.872339 2026] [lsapi:warn] [pid 2839811:tid 2839811] [client 190.6.176.90:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:10:02.680330 2026] [security2:error] [pid 2815972:tid 2815972] [client 94.154.43.178:38308] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env"] [unique_id "amsi-jUnqVvzbgN83fHqVwAAADQ"]
[Thu Jul 30 11:10:02.680591 2026] [security2:error] [pid 2815972:tid 2815972] [client 94.154.43.178:38308] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env"] [unique_id "amsi-jUnqVvzbgN83fHqVwAAADQ"]
[Thu Jul 30 11:10:02.680857 2026] [security2:error] [pid 2815972:tid 2815972] [client 94.154.43.178:38308] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env"] [unique_id "amsi-jUnqVvzbgN83fHqVwAAADQ"]
[Thu Jul 30 11:10:02.777141 2026] [security2:error] [pid 2834627:tid 2834627] [client 94.154.43.229:62248] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "abcpress.com.mt"] [uri "/.env"] [unique_id "amsi-oN47-tRSb2uFqf88wAAAAU"]
[Thu Jul 30 11:10:02.777343 2026] [security2:error] [pid 2834627:tid 2834627] [client 94.154.43.229:62248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "abcpress.com.mt"] [uri "/.env"] [unique_id "amsi-oN47-tRSb2uFqf88wAAAAU"]
[Thu Jul 30 11:10:02.777577 2026] [security2:error] [pid 2834627:tid 2834627] [client 94.154.43.229:62248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "abcpress.com.mt"] [uri "/.env"] [unique_id "amsi-oN47-tRSb2uFqf88wAAAAU"]
[Thu Jul 30 11:10:03.039706 2026] [security2:error] [pid 2815972:tid 2815972] [client 170.106.11.141:48396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tompalmer.co.uk"] [uri "/"] [unique_id "amsi-zUnqVvzbgN83fHqWAAAADQ"]
[Thu Jul 30 11:10:03.319104 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.34:50493] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:03.321866 2026] [authz_core:error] [pid 2819488:tid 2819488] [client 66.249.66.34:50493] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:03.687214 2026] [security2:error] [pid 2827783:tid 2827783] [client 129.226.195.146:44580] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsi-0eUkDpp1VtJSx6wQAAAAAA"]
[Thu Jul 30 11:10:04.367283 2026] [ssl:error] [pid 2839811:tid 2839811] (70014)End of file found: [client 216.73.216.199:27598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:04.834945 2026] [ssl:error] [pid 2840556:tid 2840556] (EAI 2)Name or service not known: [client 144.76.19.72:64732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:04.834991 2026] [ssl:error] [pid 2840556:tid 2840556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:04.888144 2026] [ssl:error] [pid 2840556:tid 2840556] (EAI 2)Name or service not known: [client 144.76.19.72:64736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:04.888172 2026] [ssl:error] [pid 2840556:tid 2840556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:05.030853 2026] [ssl:error] [pid 2819912:tid 2819912] (70014)End of file found: [client 216.73.216.199:31150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:05.137776 2026] [authz_core:error] [pid 2815972:tid 2815972] [client 66.249.66.35:51211] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:05.140521 2026] [authz_core:error] [pid 2815972:tid 2815972] [client 66.249.66.35:51211] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:05.188970 2026] [security2:error] [pid 2827783:tid 2827783] [client 114.119.132.227:48481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "butteredcat.com"] [uri "/wp/"] [unique_id "amsi_UeUkDpp1VtJSx6wQQAAAAA"], referer: https://butteredcat.com/
[Thu Jul 30 11:10:05.258830 2026] [core:error] [pid 2840557:tid 2840557] [client 66.249.66.195:44027] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:05.258864 2026] [core:error] [pid 2840557:tid 2840557] [client 66.249.66.195:44027] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:05.847658 2026] [ssl:error] [pid 2838781:tid 2838781] (70014)End of file found: [client 216.73.216.199:40141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:07.260431 2026] [security2:error] [pid 2815857:tid 2815857] [client 170.106.11.141:49144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsi_7wXx2CERl4kDMTlgQAAAC0"], referer: http://www.tompalmer.co.uk
[Thu Jul 30 11:10:07.942841 2026] [ssl:error] [pid 2840557:tid 2840557] (EAI 2)Name or service not known: [client 144.76.19.72:64742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:07.942881 2026] [ssl:error] [pid 2840557:tid 2840557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:07.996440 2026] [ssl:error] [pid 2836239:tid 2836239] (EAI 2)Name or service not known: [client 144.76.19.72:64750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:07.996484 2026] [ssl:error] [pid 2836239:tid 2836239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:08.365721 2026] [authz_core:error] [pid 2834092:tid 2834092] [client 66.249.66.33:60170] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:08.368442 2026] [authz_core:error] [pid 2834092:tid 2834092] [client 66.249.66.33:60170] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:10.129993 2026] [authz_core:error] [pid 2814709:tid 2814709] [client 66.249.66.34:61910] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:10.132668 2026] [authz_core:error] [pid 2814709:tid 2814709] [client 66.249.66.34:61910] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:10.486981 2026] [core:error] [pid 2839843:tid 2839843] (13)Permission denied: [client 216.73.216.199:24009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory137/node0/compact
[Thu Jul 30 11:10:10.787629 2026] [ssl:error] [pid 2839843:tid 2839843] (70014)End of file found: [client 216.73.216.199:24009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:11.050024 2026] [ssl:error] [pid 2836150:tid 2836150] (EAI 2)Name or service not known: [client 144.76.19.72:32404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:11.050086 2026] [ssl:error] [pid 2836150:tid 2836150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:11.104600 2026] [ssl:error] [pid 2836237:tid 2836237] (EAI 2)Name or service not known: [client 144.76.19.72:32416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:11.104654 2026] [ssl:error] [pid 2836237:tid 2836237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:11.401471 2026] [core:error] [pid 2836037:tid 2836037] (13)Permission denied: [client 216.73.216.199:34165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory157/node0/compact
[Thu Jul 30 11:10:13.474845 2026] [authz_core:error] [pid 2836237:tid 2836237] [client 66.249.66.33:56745] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:13.477535 2026] [authz_core:error] [pid 2836237:tid 2836237] [client 66.249.66.33:56745] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:13.522922 2026] [core:error] [pid 2838781:tid 2838781] (13)Permission denied: [client 216.73.216.199:6161] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory185/node0/compact
[Thu Jul 30 11:10:13.823895 2026] [core:error] [pid 2838781:tid 2838781] (13)Permission denied: [client 216.73.216.199:6161] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory170/node0/compact
[Thu Jul 30 11:10:14.327536 2026] [ssl:error] [pid 2839844:tid 2839844] (EAI 2)Name or service not known: [client 144.76.19.72:32428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:14.327586 2026] [ssl:error] [pid 2839844:tid 2839844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:14.379715 2026] [ssl:error] [pid 2839844:tid 2839844] (EAI 2)Name or service not known: [client 144.76.19.72:32436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:14.379740 2026] [ssl:error] [pid 2839844:tid 2839844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:15.332438 2026] [ssl:error] [pid 2838781:tid 2838781] (70014)End of file found: [client 216.73.216.199:6161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:15.632477 2026] [core:error] [pid 2836037:tid 2836037] (13)Permission denied: [client 216.73.216.199:34165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory248/node0/compact
[Thu Jul 30 11:10:15.937427 2026] [ssl:error] [pid 2836037:tid 2836037] (70014)End of file found: [client 216.73.216.199:34165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:16.211326 2026] [authz_core:error] [pid 2836237:tid 2836237] [client 66.249.66.33:56745] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:16.213989 2026] [authz_core:error] [pid 2836237:tid 2836237] [client 66.249.66.33:56745] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:16.429310 2026] [core:error] [pid 2827783:tid 2827783] (13)Permission denied: [client 216.73.216.199:39219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory172/node0/compact
[Thu Jul 30 11:10:17.432454 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:32452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:17.432482 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:17.488343 2026] [ssl:error] [pid 2829969:tid 2829969] (EAI 2)Name or service not known: [client 144.76.19.72:32468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:17.488372 2026] [ssl:error] [pid 2829969:tid 2829969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:17.598265 2026] [security2:error] [pid 2833086:tid 2833086] [client 74.7.227.58:53828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amsjCUeeTJYnHZKihRUNvQAAACQ"]
[Thu Jul 30 11:10:17.792893 2026] [cgi:error] [pid 2815976:tid 2815976] [client 74.7.230.36:48218] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/robots.txt
[Thu Jul 30 11:10:18.304793 2026] [security2:error] [pid 2827872:tid 2827872] [client 185.191.171.8:40756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/100th-meridian-kansas-map"] [unique_id "amsjCoeSV7E_u8_fJEyqCQAAAAE"]
[Thu Jul 30 11:10:18.536621 2026] [access_compat:error] [pid 2817440:tid 2817440] [client 51.120.83.160:25691] AH01797: client denied by server configuration: /home/clientseodata/public_html/.well-known/gecko-litespeed.php
[Thu Jul 30 11:10:19.138985 2026] [security2:error] [pid 2833086:tid 2833086] [client 43.166.240.231:33422] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amsjC0eeTJYnHZKihRUNvgAAACQ"], referer: http://www.peterboroughdiocesanregistry.co.uk
[Thu Jul 30 11:10:19.326021 2026] [authz_core:error] [pid 2836237:tid 2836237] [client 66.249.66.33:56745] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:19.328701 2026] [authz_core:error] [pid 2836237:tid 2836237] [client 66.249.66.33:56745] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:19.562468 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:19.565365 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:20.462591 2026] [ssl:error] [pid 2815980:tid 2815980] (70014)End of file found: [client 216.73.216.199:1633] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:20.548891 2026] [ssl:error] [pid 2819912:tid 2819912] (EAI 2)Name or service not known: [client 144.76.19.72:23438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:20.548917 2026] [ssl:error] [pid 2819912:tid 2819912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:20.604543 2026] [ssl:error] [pid 2834627:tid 2834627] (EAI 2)Name or service not known: [client 144.76.19.72:23454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:20.604587 2026] [ssl:error] [pid 2834627:tid 2834627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:21.145288 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:21.148237 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:21.287485 2026] [ssl:error] [pid 2830224:tid 2830224] (70014)End of file found: [client 216.73.216.199:50386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:22.726926 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:22.729950 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:23.111747 2026] [access_compat:error] [pid 2817440:tid 2817440] [client 51.120.83.160:25691] AH01797: client denied by server configuration: /home/clientseodata/public_html/.well-known/admin.php
[Thu Jul 30 11:10:23.557396 2026] [ssl:error] [pid 2839844:tid 2839844] (70014)End of file found: [client 216.73.216.199:56338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:23.663271 2026] [ssl:error] [pid 2830223:tid 2830223] (EAI 2)Name or service not known: [client 144.76.19.72:23470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:23.663303 2026] [ssl:error] [pid 2830223:tid 2830223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:23.717599 2026] [ssl:error] [pid 2839811:tid 2839811] (EAI 2)Name or service not known: [client 144.76.19.72:23476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:23.717641 2026] [ssl:error] [pid 2839811:tid 2839811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:24.311712 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:24.314628 2026] [authz_core:error] [pid 2836150:tid 2836150] [client 66.249.66.33:37779] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:24.934182 2026] [security2:error] [pid 2814709:tid 2814709] [client 47.243.200.124:19271] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjEB7Cb72v1lFPIRnEZwAAAAs"]
[Thu Jul 30 11:10:24.934233 2026] [security2:error] [pid 2814709:tid 2814709] [client 47.243.200.124:19271] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjEB7Cb72v1lFPIRnEZwAAAAs"]
[Thu Jul 30 11:10:24.934482 2026] [security2:error] [pid 2814709:tid 2814709] [client 47.243.200.124:19271] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjEB7Cb72v1lFPIRnEZwAAAAs"]
[Thu Jul 30 11:10:26.116396 2026] [security2:error] [pid 2834627:tid 2834627] [client 150.5.132.241:12447] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjEoN47-tRSb2uFqf8_AAAAAU"]
[Thu Jul 30 11:10:26.116445 2026] [security2:error] [pid 2834627:tid 2834627] [client 150.5.132.241:12447] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjEoN47-tRSb2uFqf8_AAAAAU"]
[Thu Jul 30 11:10:26.116681 2026] [security2:error] [pid 2834627:tid 2834627] [client 150.5.132.241:12447] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjEoN47-tRSb2uFqf8_AAAAAU"]
[Thu Jul 30 11:10:26.575088 2026] [ssl:error] [pid 2815857:tid 2815857] (70014)End of file found: [client 216.73.216.199:27995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:26.769863 2026] [ssl:error] [pid 2833086:tid 2833086] (EAI 2)Name or service not known: [client 144.76.19.72:23488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:26.769907 2026] [ssl:error] [pid 2833086:tid 2833086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:26.825728 2026] [ssl:error] [pid 2836237:tid 2836237] (EAI 2)Name or service not known: [client 144.76.19.72:23498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:26.825762 2026] [ssl:error] [pid 2836237:tid 2836237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:27.176200 2026] [ssl:error] [pid 2839295:tid 2839295] (70014)End of file found: [client 216.73.216.199:14000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:28.018420 2026] [core:error] [pid 2838781:tid 2838781] [client 66.249.66.168:54601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:28.018452 2026] [core:error] [pid 2838781:tid 2838781] [client 66.249.66.168:54601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:28.546987 2026] [security2:error] [pid 2836037:tid 2836037] [client 150.5.132.241:14945] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjFPcfeDBPYEYW4DnKhQAAAAQ"]
[Thu Jul 30 11:10:28.547045 2026] [security2:error] [pid 2836037:tid 2836037] [client 150.5.132.241:14945] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjFPcfeDBPYEYW4DnKhQAAAAQ"]
[Thu Jul 30 11:10:28.547319 2026] [security2:error] [pid 2836037:tid 2836037] [client 150.5.132.241:14945] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjFPcfeDBPYEYW4DnKhQAAAAQ"]
[Thu Jul 30 11:10:28.874629 2026] [core:error] [pid 2830224:tid 2830224] (13)Permission denied: [client 216.73.216.199:43621] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/objects
[Thu Jul 30 11:10:29.153757 2026] [authz_core:error] [pid 2833086:tid 2833086] [client 66.249.66.33:57982] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:29.156719 2026] [authz_core:error] [pid 2833086:tid 2833086] [client 66.249.66.33:57982] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:29.583376 2026] [security2:error] [pid 2839844:tid 2839844] [client 170.106.161.78:43764] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "amsjFTaRannQYkcZg4mleQAAACE"]
[Thu Jul 30 11:10:29.880810 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:20932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:29.880845 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:29.936170 2026] [ssl:error] [pid 2836037:tid 2836037] (EAI 2)Name or service not known: [client 144.76.19.72:20934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:29.936212 2026] [ssl:error] [pid 2836037:tid 2836037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:30.761028 2026] [authz_core:error] [pid 2833086:tid 2833086] [client 66.249.66.33:57982] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:30.763955 2026] [authz_core:error] [pid 2833086:tid 2833086] [client 66.249.66.33:57982] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:30.799797 2026] [ssl:error] [pid 2830224:tid 2830224] (70014)End of file found: [client 216.73.216.199:43621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:32.305657 2026] [core:error] [pid 2830020:tid 2830020] (13)Permission denied: [client 216.73.216.199:25640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/usersize
[Thu Jul 30 11:10:32.350057 2026] [authz_core:error] [pid 2833086:tid 2833086] [client 66.249.66.33:57982] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:32.352968 2026] [authz_core:error] [pid 2833086:tid 2833086] [client 66.249.66.33:57982] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:32.917294 2026] [core:error] [pid 2830020:tid 2830020] (13)Permission denied: [client 216.73.216.199:25640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/syscopyarea/sections/__ksymtab_strings
[Thu Jul 30 11:10:33.008099 2026] [ssl:error] [pid 2830223:tid 2830223] (EAI 2)Name or service not known: [client 144.76.19.72:20950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:33.008137 2026] [ssl:error] [pid 2830223:tid 2830223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:33.060693 2026] [ssl:error] [pid 2840781:tid 2840781] (EAI 2)Name or service not known: [client 144.76.19.72:20952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:33.060726 2026] [ssl:error] [pid 2840781:tid 2840781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:34.737602 2026] [ssl:error] [pid 2830020:tid 2830020] (70014)End of file found: [client 216.73.216.199:25640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:35.042863 2026] [core:error] [pid 2834627:tid 2834627] (13)Permission denied: [client 216.73.216.199:20948] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/btree_node/remote_node_defrag_ratio
[Thu Jul 30 11:10:35.645402 2026] [core:error] [pid 2834627:tid 2834627] (13)Permission denied: [client 216.73.216.199:20948] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dentry/hwcache_align
[Thu Jul 30 11:10:36.274913 2026] [cgi:error] [pid 2834627:tid 2834627] [client 216.73.216.199:20948] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/scripts/dovecot_set_defaults.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:10:36.274970 2026] [cgi:error] [pid 2834627:tid 2834627] [client 216.73.216.199:20948] End of script output before headers: dovecot_set_defaults.pl
[Thu Jul 30 11:10:36.468135 2026] [ssl:error] [pid 2833144:tid 2833144] (EAI 2)Name or service not known: [client 144.76.19.72:20954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:36.468168 2026] [ssl:error] [pid 2833144:tid 2833144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:36.707151 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:20968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:36.707178 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:36.797860 2026] [authz_core:error] [pid 2841383:tid 2841383] [client 66.249.66.34:50050] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:36.800586 2026] [authz_core:error] [pid 2841383:tid 2841383] [client 66.249.66.34:50050] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:37.123769 2026] [core:error] [pid 2841429:tid 2841429] (13)Permission denied: [client 216.73.216.199:38909] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_state/objects_partial
[Thu Jul 30 11:10:38.671983 2026] [core:error] [pid 2838781:tid 2838781] [client 66.249.66.194:39025] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:38.672013 2026] [core:error] [pid 2838781:tid 2838781] [client 66.249.66.194:39025] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:38.677800 2026] [core:error] [pid 2839843:tid 2839843] [client 66.249.66.169:57444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:38.677821 2026] [core:error] [pid 2839843:tid 2839843] [client 66.249.66.169:57444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:38.972638 2026] [ssl:error] [pid 2833086:tid 2833086] (70014)End of file found: [client 216.73.216.199:24274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:39.765328 2026] [ssl:error] [pid 2840781:tid 2840781] (EAI 2)Name or service not known: [client 144.76.19.72:24632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:39.765371 2026] [ssl:error] [pid 2840781:tid 2840781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:39.823401 2026] [ssl:error] [pid 2841462:tid 2841462] (EAI 2)Name or service not known: [client 144.76.19.72:24638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:39.823454 2026] [ssl:error] [pid 2841462:tid 2841462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:40.069526 2026] [authz_core:error] [pid 2838781:tid 2838781] [client 66.249.66.35:41906] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:40.072181 2026] [authz_core:error] [pid 2838781:tid 2838781] [client 66.249.66.35:41906] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:41.084962 2026] [core:error] [pid 2841429:tid 2841429] (13)Permission denied: [client 216.73.216.199:38909] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/cache_dma
[Thu Jul 30 11:10:41.687871 2026] [ssl:error] [pid 2841429:tid 2841429] (70014)End of file found: [client 216.73.216.199:38909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:41.840096 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 66.249.66.33:51131] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:41.842742 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 66.249.66.33:51131] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:42.591205 2026] [core:error] [pid 2836037:tid 2836037] (13)Permission denied: [client 216.73.216.199:51429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/radix_tree_node/order
[Thu Jul 30 11:10:42.881483 2026] [ssl:error] [pid 2827872:tid 2827872] (EAI 2)Name or service not known: [client 144.76.19.72:24650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:42.881516 2026] [ssl:error] [pid 2827872:tid 2827872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:42.892053 2026] [ssl:error] [pid 2836037:tid 2836037] (70014)End of file found: [client 216.73.216.199:51429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:42.938682 2026] [ssl:error] [pid 2834627:tid 2834627] (EAI 2)Name or service not known: [client 144.76.19.72:24662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:42.938705 2026] [ssl:error] [pid 2834627:tid 2834627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:44.529715 2026] [core:error] [pid 2841682:tid 2841682] [client 66.249.66.167:37845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:44.529744 2026] [core:error] [pid 2841682:tid 2841682] [client 66.249.66.167:37845] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:44.787058 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 66.249.66.33:51131] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:44.789750 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 66.249.66.33:51131] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:45.030442 2026] [core:error] [pid 2841683:tid 2841683] (13)Permission denied: [client 216.73.216.199:2396] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory139/node0/compact
[Thu Jul 30 11:10:45.996883 2026] [ssl:error] [pid 2841470:tid 2841470] (EAI 2)Name or service not known: [client 144.76.19.72:24672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:45.996913 2026] [ssl:error] [pid 2841470:tid 2841470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:46.052933 2026] [ssl:error] [pid 2841430:tid 2841430] (EAI 2)Name or service not known: [client 144.76.19.72:24680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:46.052973 2026] [ssl:error] [pid 2841430:tid 2841430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:46.090053 2026] [core:error] [pid 2841682:tid 2841682] [client 66.249.66.167:41020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:46.090087 2026] [core:error] [pid 2841682:tid 2841682] [client 66.249.66.167:41020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:10:46.742771 2026] [security2:error] [pid 2817440:tid 2817440] [client 114.119.157.183:56723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "amsjJkIn1TgRB4cjIl14tAAAABI"], referer: http://erskinenazarene.co.uk/robots.txt
[Thu Jul 30 11:10:47.312058 2026] [security2:error] [pid 2841430:tid 2841430] [client 114.119.157.183:56735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~19,102,30/request_format~html"] [unique_id "amsjJ_HkMjxLhPQ8KGyG2QAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563750000/cat_ids%7E19,102/request_format%7Ehtml
[Thu Jul 30 11:10:48.024004 2026] [authz_core:error] [pid 2841461:tid 2841461] [client 66.249.66.163:57061] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:48.026702 2026] [authz_core:error] [pid 2841461:tid 2841461] [client 66.249.66.163:57061] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:48.657423 2026] [security2:error] [pid 2841474:tid 2841474] [client 114.119.157.183:56747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~19,102,30/request_format~html"] [unique_id "amsjKDam228Ita22vyemlwAAACY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563750000/cat_ids%7E19,102/request_format%7Ehtml
[Thu Jul 30 11:10:48.966184 2026] [authz_core:error] [pid 2829969:tid 2829969] [client 66.249.66.205:61658] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:48.968824 2026] [authz_core:error] [pid 2829969:tid 2829969] [client 66.249.66.205:61658] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:48.973290 2026] [ssl:error] [pid 2841683:tid 2841683] (70014)End of file found: [client 216.73.216.199:2396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:49.105043 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:24690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:49.105097 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:49.159617 2026] [ssl:error] [pid 2841462:tid 2841462] (EAI 2)Name or service not known: [client 144.76.19.72:24694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:49.159645 2026] [ssl:error] [pid 2841462:tid 2841462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:49.275149 2026] [ssl:error] [pid 2841470:tid 2841470] (70014)End of file found: [client 216.73.216.199:3706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:50.820699 2026] [authz_core:error] [pid 2841471:tid 2841471] [client 66.249.66.205:40283] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:50.823397 2026] [authz_core:error] [pid 2841471:tid 2841471] [client 66.249.66.205:40283] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:51.900907 2026] [lsapi:warn] [pid 2840781:tid 2840781] [client 216.73.216.199:23146] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:10:51.900938 2026] [lsapi:error] [pid 2840781:tid 2840781] [client 216.73.216.199:23146] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-services-weather/examples/globalweather-basic.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:10:52.011775 2026] [authz_core:error] [pid 2841461:tid 2841461] [client 66.249.66.163:57061] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:52.014414 2026] [authz_core:error] [pid 2841461:tid 2841461] [client 66.249.66.163:57061] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:52.212361 2026] [ssl:error] [pid 2839843:tid 2839843] (EAI 2)Name or service not known: [client 144.76.19.72:28868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:52.212394 2026] [ssl:error] [pid 2839843:tid 2839843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:52.267301 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:28870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:52.267338 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:52.480985 2026] [core:error] [pid 2819488:tid 2819488] (13)Permission denied: [client 216.73.216.199:48965] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_io_end/objects
[Thu Jul 30 11:10:53.616208 2026] [security2:error] [pid 2841430:tid 2841430] [client 43.135.144.81:50870] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "m.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsjLfHkMjxLhPQ8KGyG2wAAABA"]
[Thu Jul 30 11:10:54.173056 2026] [authz_core:error] [pid 2841471:tid 2841471] [client 66.249.66.205:40283] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:54.175734 2026] [authz_core:error] [pid 2841471:tid 2841471] [client 66.249.66.205:40283] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:54.406799 2026] [ssl:error] [pid 2819488:tid 2819488] (70014)End of file found: [client 216.73.216.199:48965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:54.875145 2026] [security2:error] [pid 2834627:tid 2834627] [client 74.7.227.56:53718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thewillow1994.co.uk"] [uri "/"] [unique_id "amsjLoN47-tRSb2uFqf9CQAAAAU"]
[Thu Jul 30 11:10:55.314890 2026] [ssl:error] [pid 2839748:tid 2839748] (70014)End of file found: [client 216.73.216.199:10535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:55.323848 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:28882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:55.323880 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:55.379505 2026] [ssl:error] [pid 2840557:tid 2840557] (EAI 2)Name or service not known: [client 144.76.19.72:28892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:55.379534 2026] [ssl:error] [pid 2840557:tid 2840557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:55.803391 2026] [ssl:error] [pid 2841430:tid 2841430] (70014)End of file found: [client 216.73.216.199:34532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:10:56.517620 2026] [security2:error] [pid 2815976:tid 2815976] [client 110.249.202.30:17132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spamp.com"] [uri "/robots.txt"] [unique_id "amsjMH2wfRsr1NZgeQ2w9QAAADc"]
[Thu Jul 30 11:10:58.433655 2026] [ssl:error] [pid 2840557:tid 2840557] (EAI 2)Name or service not known: [client 144.76.19.72:28902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:58.433687 2026] [ssl:error] [pid 2840557:tid 2840557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:58.489987 2026] [ssl:error] [pid 2842230:tid 2842230] (EAI 2)Name or service not known: [client 144.76.19.72:28914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:10:58.490034 2026] [ssl:error] [pid 2842230:tid 2842230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:10:58.791848 2026] [authz_core:error] [pid 2840929:tid 2840929] [client 66.249.66.33:59053] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:58.794489 2026] [authz_core:error] [pid 2840929:tid 2840929] [client 66.249.66.33:59053] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:10:59.572718 2026] [authz_core:error] [pid 2840929:tid 2840929] [client 66.249.66.33:59053] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:10:59.575387 2026] [authz_core:error] [pid 2840929:tid 2840929] [client 66.249.66.33:59053] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:11:00.438060 2026] [ssl:error] [pid 2841465:tid 2841465] (70014)End of file found: [client 216.73.216.199:34831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:01.039181 2026] [ssl:error] [pid 2839811:tid 2839811] (70014)End of file found: [client 216.73.216.199:25597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:01.220006 2026] [authz_core:error] [pid 2840929:tid 2840929] [client 66.249.66.33:59053] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:11:01.222668 2026] [authz_core:error] [pid 2840929:tid 2840929] [client 66.249.66.33:59053] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:11:01.559017 2026] [ssl:error] [pid 2839843:tid 2839843] (EAI 2)Name or service not known: [client 144.76.19.72:49978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:01.559047 2026] [ssl:error] [pid 2839843:tid 2839843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:01.614478 2026] [ssl:error] [pid 2839748:tid 2839748] (EAI 2)Name or service not known: [client 144.76.19.72:49990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:01.614506 2026] [ssl:error] [pid 2839748:tid 2839748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:01.910180 2026] [security2:error] [pid 2808147:tid 2808147] [client 85.208.96.207:64216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5260.0/prev_next,next.html"] [unique_id "amsjNbm9OwEMjYlj9VVEtAAAAC8"]
[Thu Jul 30 11:11:02.249474 2026] [core:error] [pid 2819488:tid 2819488] (13)Permission denied: [client 216.73.216.199:46802] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dentry/alloc_calls
[Thu Jul 30 11:11:04.340584 2026] [security2:error] [pid 2840781:tid 2840781] [client 114.119.148.154:42769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "theovertones.co.uk"] [uri "/images/igallery/resized/1-100/overtones210603-3-1000-1000-80.jpg"] [unique_id "amsjOJWYoRJ2_e67ULETQQAAAA0"], referer: https://theovertones.co.uk/?i=overtones210603
[Thu Jul 30 11:11:04.667837 2026] [ssl:error] [pid 2841430:tid 2841430] (EAI 2)Name or service not known: [client 144.76.19.72:50004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:04.667866 2026] [ssl:error] [pid 2841430:tid 2841430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:04.720728 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:50012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:04.720765 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:05.454662 2026] [ssl:error] [pid 2829969:tid 2829969] (70014)End of file found: [client 216.73.216.199:28431] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:05.547994 2026] [authz_core:error] [pid 2840781:tid 2840781] [client 66.249.66.33:59911] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:11:05.550656 2026] [authz_core:error] [pid 2840781:tid 2840781] [client 66.249.66.33:59911] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:11:06.660231 2026] [ssl:error] [pid 2841462:tid 2841462] (70014)End of file found: [client 216.73.216.199:42894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:07.777795 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:50018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:07.777832 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:07.831566 2026] [ssl:error] [pid 2841683:tid 2841683] (EAI 2)Name or service not known: [client 144.76.19.72:50022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:07.831600 2026] [ssl:error] [pid 2841683:tid 2841683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:08.575631 2026] [authz_core:error] [pid 2840781:tid 2840781] [client 66.249.66.33:59911] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:11:08.578329 2026] [authz_core:error] [pid 2840781:tid 2840781] [client 66.249.66.33:59911] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:11:09.978320 2026] [core:error] [pid 2839811:tid 2839811] (13)Permission denied: [client 216.73.216.199:50738] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm_intel/sections/__ex_table
[Thu Jul 30 11:11:10.887132 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:27098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:10.887160 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:10.942612 2026] [ssl:error] [pid 2842231:tid 2842231] (EAI 2)Name or service not known: [client 144.76.19.72:27110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:10.942639 2026] [ssl:error] [pid 2842231:tid 2842231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:13.997537 2026] [ssl:error] [pid 2841465:tid 2841465] (EAI 2)Name or service not known: [client 144.76.19.72:27116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:13.997584 2026] [ssl:error] [pid 2841465:tid 2841465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:14.054052 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:27138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:14.054096 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:14.193281 2026] [ssl:error] [pid 2814709:tid 2814709] (70014)End of file found: [client 216.73.216.199:62642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:14.594779 2026] [security2:error] [pid 2842910:tid 2842910] [client 50.17.193.48:25281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thelambproductions.com"] [uri "/robots.txt"] [unique_id "amsjQgFkrMSS_9S-IQ1Q1AAAACM"]
[Thu Jul 30 11:11:15.049221 2026] [security2:error] [pid 2815976:tid 2815976] [client 27.123.253.80:42804] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjQ32wfRsr1NZgeQ2w-QAAADc"]
[Thu Jul 30 11:11:15.049266 2026] [security2:error] [pid 2815976:tid 2815976] [client 27.123.253.80:42804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjQ32wfRsr1NZgeQ2w-QAAADc"]
[Thu Jul 30 11:11:15.049517 2026] [security2:error] [pid 2815976:tid 2815976] [client 27.123.253.80:42804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjQ32wfRsr1NZgeQ2w-QAAADc"]
[Thu Jul 30 11:11:15.206392 2026] [security2:error] [pid 2840556:tid 2840556] [client 114.119.159.37:54397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsjQwrSBQDGS4Zciaz0wwAAAAk"], referer: https://www.jonathanhill.co.uk/?page_id=511
[Thu Jul 30 11:11:15.402337 2026] [ssl:error] [pid 2839811:tid 2839811] (70014)End of file found: [client 216.73.216.199:50738] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:16.584355 2026] [cgi:error] [pid 2830223:tid 2830223] [client 130.12.182.254:4470] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:11:16.584693 2026] [core:error] [pid 2830223:tid 2830223] [client 130.12.182.254:4470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:11:16.612434 2026] [ssl:error] [pid 2839844:tid 2839844] (70014)End of file found: [client 216.73.216.199:60594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:17.107464 2026] [ssl:error] [pid 2830223:tid 2830223] (EAI 2)Name or service not known: [client 144.76.19.72:27150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:17.107498 2026] [ssl:error] [pid 2830223:tid 2830223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:17.161950 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:27158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:17.161986 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:17.547761 2026] [security2:error] [pid 2815976:tid 2815976] [client 52.73.142.41:17073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thelambproductions.com"] [uri "/"] [unique_id "amsjRX2wfRsr1NZgeQ2w-gAAADc"]
[Thu Jul 30 11:11:17.732665 2026] [security2:error] [pid 2815917:tid 2815917] [client 47.128.27.168:56318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/robots.txt"] [unique_id "amsjRaaaevkErbrabVwlPwAAADM"]
[Thu Jul 30 11:11:19.122273 2026] [security2:error] [pid 2842910:tid 2842910] [client 185.191.171.7:49876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/does-saputo-hire-felons"] [unique_id "amsjRwFkrMSS_9S-IQ1Q1wAAACM"]
[Thu Jul 30 11:11:19.519686 2026] [ssl:error] [pid 2815972:tid 2815972] (70014)End of file found: [client 216.73.216.199:60875] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:19.939459 2026] [authz_core:error] [pid 2842173:tid 2842173] [client 191.232.199.39:16582] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/pomo/error_log
[Thu Jul 30 11:11:20.213714 2026] [ssl:error] [pid 2842910:tid 2842910] (EAI 2)Name or service not known: [client 144.76.19.72:54764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:20.213743 2026] [ssl:error] [pid 2842910:tid 2842910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:20.268395 2026] [ssl:error] [pid 2839295:tid 2839295] (EAI 2)Name or service not known: [client 144.76.19.72:54766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:20.268431 2026] [ssl:error] [pid 2839295:tid 2839295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:20.723937 2026] [ssl:error] [pid 2830223:tid 2830223] (70014)End of file found: [client 216.73.216.199:44397] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:22.946966 2026] [core:error] [pid 2841682:tid 2841682] (13)Permission denied: [client 216.73.216.199:63262] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/ctor
[Thu Jul 30 11:11:23.054677 2026] [security2:error] [pid 2842231:tid 2842231] [client 92.222.104.219:53518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/sitemap_a.html"] [unique_id "amsjSz3W4sdL9IQ05emVyAAAAAM"]
[Thu Jul 30 11:11:23.322410 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:54780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:23.322436 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:23.377271 2026] [ssl:error] [pid 2839811:tid 2839811] (EAI 2)Name or service not known: [client 144.76.19.72:54786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:23.377296 2026] [ssl:error] [pid 2839811:tid 2839811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:24.153663 2026] [core:crit] [pid 2841682:tid 2841682] (13)Permission denied: [client 216.73.216.199:63262] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/lib64/mysql/plugin/auth_pam_tool_dir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/lib64/mysql/plugin/auth_pam_tool_dir/' is executable
[Thu Jul 30 11:11:25.355605 2026] [ssl:error] [pid 2841682:tid 2841682] (70014)End of file found: [client 216.73.216.199:63262] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:26.430344 2026] [ssl:error] [pid 2841474:tid 2841474] (EAI 2)Name or service not known: [client 144.76.19.72:54800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:26.430390 2026] [ssl:error] [pid 2841474:tid 2841474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:26.485421 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:54806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:26.485459 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:26.677727 2026] [security2:error] [pid 2830223:tid 2830223] [client 197.147.2.105:50726] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjTrATenIHmIjBQIqbGgAAABo"]
[Thu Jul 30 11:11:26.677777 2026] [security2:error] [pid 2830223:tid 2830223] [client 197.147.2.105:50726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjTrATenIHmIjBQIqbGgAAABo"]
[Thu Jul 30 11:11:26.678008 2026] [security2:error] [pid 2830223:tid 2830223] [client 197.147.2.105:50726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjTrATenIHmIjBQIqbGgAAABo"]
[Thu Jul 30 11:11:27.168901 2026] [core:error] [pid 2842781:tid 2842781] [client 216.73.216.199:16219] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/python3.6/%s)
[Thu Jul 30 11:11:28.154407 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:28.154451 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:28.371202 2026] [core:crit] [pid 2834627:tid 2834627] (13)Permission denied: [client 216.73.216.199:63764] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/boot/loader/entries/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/boot/loader/entries/' is executable
[Thu Jul 30 11:11:28.631663 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 66.249.66.33:50903] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:11:28.634498 2026] [authz_core:error] [pid 2815980:tid 2815980] [client 66.249.66.33:50903] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:11:29.287979 2026] [ssl:error] [pid 2834627:tid 2834627] (70014)End of file found: [client 216.73.216.199:63764] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:29.537458 2026] [ssl:error] [pid 2839844:tid 2839844] (EAI 2)Name or service not known: [client 144.76.19.72:54820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:29.537495 2026] [ssl:error] [pid 2839844:tid 2839844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:29.593244 2026] [ssl:error] [pid 2839295:tid 2839295] (EAI 2)Name or service not known: [client 144.76.19.72:55536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:29.593270 2026] [ssl:error] [pid 2839295:tid 2839295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:29.883605 2026] [security2:error] [pid 2841431:tid 2841431] [client 14.191.190.45:7717] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjUTaWtzZhunbsIG_ZegAAABE"]
[Thu Jul 30 11:11:29.883650 2026] [security2:error] [pid 2841431:tid 2841431] [client 14.191.190.45:7717] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjUTaWtzZhunbsIG_ZegAAABE"]
[Thu Jul 30 11:11:29.883883 2026] [security2:error] [pid 2841431:tid 2841431] [client 14.191.190.45:7717] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjUTaWtzZhunbsIG_ZegAAABE"]
[Thu Jul 30 11:11:30.190934 2026] [ssl:error] [pid 2842781:tid 2842781] (70014)End of file found: [client 216.73.216.199:21547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:30.679941 2026] [ssl:error] [pid 2839844:tid 2839844] (70014)End of file found: [client 216.73.216.199:57822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:30.817272 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:30.817312 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.067590 2026] [lsapi:warn] [pid 2840556:tid 2840556] [client 45.158.164.139:37356] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.067632 2026] [lsapi:warn] [pid 2840556:tid 2840556] [client 45.158.164.139:37356] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.069970 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.069997 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.289286 2026] [lsapi:warn] [pid 2841682:tid 2841682] [client 45.158.164.139:37366] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.289333 2026] [lsapi:warn] [pid 2841682:tid 2841682] [client 45.158.164.139:37366] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.291401 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.291424 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.558702 2026] [lsapi:warn] [pid 2843654:tid 2843654] [client 45.158.164.139:37376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.558741 2026] [lsapi:warn] [pid 2843654:tid 2843654] [client 45.158.164.139:37376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.561003 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.561025 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.819389 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37392] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.819439 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37392] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:31.821438 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:31.821459 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:32.072668 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:32.072698 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:32.333690 2026] [lsapi:warn] [pid 2836037:tid 2836037] [client 45.158.164.139:37408] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:32.333733 2026] [lsapi:warn] [pid 2836037:tid 2836037] [client 45.158.164.139:37408] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:32.335682 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:32.335704 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:32.575247 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:32.575274 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:32.666136 2026] [ssl:error] [pid 2819488:tid 2819488] (EAI 2)Name or service not known: [client 144.76.19.72:55548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:32.666169 2026] [ssl:error] [pid 2819488:tid 2819488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:32.719599 2026] [ssl:error] [pid 2841682:tid 2841682] (EAI 2)Name or service not known: [client 144.76.19.72:55562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:32.719632 2026] [ssl:error] [pid 2841682:tid 2841682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:32.825109 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:32.825137 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:33.366143 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37428] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:33.366182 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37428] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:33.367900 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:33.367923 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:33.619185 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:37440] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:33.619276 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:37440] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:33.621161 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:33.621185 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:33.838396 2026] [lsapi:warn] [pid 2822880:tid 2822880] [client 45.158.164.139:37448] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:33.838438 2026] [lsapi:warn] [pid 2822880:tid 2822880] [client 45.158.164.139:37448] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:33.842793 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:33.842823 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.062625 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37464] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:34.062653 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37464] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.064743 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:34.064770 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.323026 2026] [lsapi:warn] [pid 2815972:tid 2815972] [client 45.158.164.139:37480] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:34.323101 2026] [lsapi:warn] [pid 2815972:tid 2815972] [client 45.158.164.139:37480] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.325245 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:34.325273 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.542681 2026] [lsapi:warn] [pid 2819912:tid 2819912] [client 45.158.164.139:37492] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:34.542724 2026] [lsapi:warn] [pid 2819912:tid 2819912] [client 45.158.164.139:37492] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.544802 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:34.544829 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.794224 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:34.794253 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:34.836924 2026] [access_compat:error] [pid 2840929:tid 2840929] [client 167.253.34.3:64284] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/robots.txt
[Thu Jul 30 11:11:34.837015 2026] [access_compat:error] [pid 2840929:tid 2840929] [client 167.253.34.3:64284] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:11:35.016198 2026] [lsapi:warn] [pid 2841461:tid 2841461] [client 45.158.164.139:37500] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:35.016241 2026] [lsapi:warn] [pid 2841461:tid 2841461] [client 45.158.164.139:37500] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:35.018534 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:35.018565 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:35.128482 2026] [authz_core:error] [pid 2843910:tid 2843910] [client 191.232.199.39:39892] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 11:11:35.240858 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:35.240884 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:35.685686 2026] [lsapi:warn] [pid 2839811:tid 2839811] [client 45.158.164.139:37506] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:35.685729 2026] [lsapi:warn] [pid 2839811:tid 2839811] [client 45.158.164.139:37506] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:35.688034 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:35.688056 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:35.778499 2026] [ssl:error] [pid 2822880:tid 2822880] (EAI 2)Name or service not known: [client 144.76.19.72:55574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:35.778525 2026] [ssl:error] [pid 2822880:tid 2822880] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:35.837104 2026] [ssl:error] [pid 2842231:tid 2842231] (EAI 2)Name or service not known: [client 144.76.19.72:55590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:35.837128 2026] [ssl:error] [pid 2842231:tid 2842231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:35.921658 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:35.921693 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.162243 2026] [lsapi:warn] [pid 2841430:tid 2841430] [client 45.158.164.139:37526] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.162287 2026] [lsapi:warn] [pid 2841430:tid 2841430] [client 45.158.164.139:37526] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.164699 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.164727 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.400883 2026] [lsapi:warn] [pid 2842231:tid 2842231] [client 45.158.164.139:37540] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.400926 2026] [lsapi:warn] [pid 2842231:tid 2842231] [client 45.158.164.139:37540] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.403277 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.403298 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.564263 2026] [core:error] [pid 2841682:tid 2841682] (13)Permission denied: [client 216.73.216.199:22895] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/ctor
[Thu Jul 30 11:11:36.686138 2026] [lsapi:warn] [pid 2841430:tid 2841430] [client 45.158.164.139:37548] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.686166 2026] [lsapi:warn] [pid 2841430:tid 2841430] [client 45.158.164.139:37548] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.692894 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.692927 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.930329 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37554] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.930359 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37554] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.932576 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:36.932618 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:36.955268 2026] [security2:error] [pid 2840781:tid 2840781] [client 145.223.134.74:48202] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjWJWYoRJ2_e67ULETSQAAAA0"]
[Thu Jul 30 11:11:36.955327 2026] [security2:error] [pid 2840781:tid 2840781] [client 145.223.134.74:48202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjWJWYoRJ2_e67ULETSQAAAA0"]
[Thu Jul 30 11:11:36.955595 2026] [security2:error] [pid 2840781:tid 2840781] [client 145.223.134.74:48202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjWJWYoRJ2_e67ULETSQAAAA0"]
[Thu Jul 30 11:11:37.162297 2026] [lsapi:warn] [pid 2814709:tid 2814709] [client 45.158.164.139:37560] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:37.162343 2026] [lsapi:warn] [pid 2814709:tid 2814709] [client 45.158.164.139:37560] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:37.164494 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:37.164543 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:37.237742 2026] [authz_core:error] [pid 2841430:tid 2841430] [client 169.58.39.193:51730] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:11:37.472668 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:22895] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/zip.ini"] [unique_id "amsjWWZ7fqzP06wFE9wuWQAAACU"]
[Thu Jul 30 11:11:37.472961 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:22895] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/zip.ini"] [unique_id "amsjWWZ7fqzP06wFE9wuWQAAACU"]
[Thu Jul 30 11:11:37.473185 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:22895] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/zip.ini"] [unique_id "amsjWWZ7fqzP06wFE9wuWQAAACU"]
[Thu Jul 30 11:11:37.647619 2026] [cgi:error] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:11:37.811889 2026] [lsapi:warn] [pid 2841471:tid 2841471] [client 45.158.164.139:37574] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:37.811933 2026] [lsapi:warn] [pid 2841471:tid 2841471] [client 45.158.164.139:37574] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:37.814138 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:37.814178 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.108138 2026] [lsapi:warn] [pid 2840781:tid 2840781] [client 45.158.164.139:37582] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.108180 2026] [lsapi:warn] [pid 2840781:tid 2840781] [client 45.158.164.139:37582] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.110193 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.110251 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.368226 2026] [lsapi:warn] [pid 2843910:tid 2843910] [client 45.158.164.139:37586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.368283 2026] [lsapi:warn] [pid 2843910:tid 2843910] [client 45.158.164.139:37586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.370577 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.370619 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.648971 2026] [lsapi:warn] [pid 2841471:tid 2841471] [client 45.158.164.139:37592] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.648999 2026] [lsapi:warn] [pid 2841471:tid 2841471] [client 45.158.164.139:37592] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.651221 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.651259 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.676386 2026] [ssl:error] [pid 2838781:tid 2838781] (70014)End of file found: [client 216.73.216.199:50338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:38.890484 2026] [ssl:error] [pid 2843910:tid 2843910] (EAI 2)Name or service not known: [client 144.76.19.72:55602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:38.890518 2026] [ssl:error] [pid 2843910:tid 2843910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:38.907369 2026] [lsapi:warn] [pid 2815972:tid 2815972] [client 45.158.164.139:37598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.907399 2026] [lsapi:warn] [pid 2815972:tid 2815972] [client 45.158.164.139:37598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.909633 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:38.909666 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:38.941962 2026] [ssl:error] [pid 2841430:tid 2841430] (EAI 2)Name or service not known: [client 144.76.19.72:55606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:38.941992 2026] [ssl:error] [pid 2841430:tid 2841430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:38.981660 2026] [ssl:error] [pid 2841682:tid 2841682] (70014)End of file found: [client 216.73.216.199:22895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:39.149890 2026] [lsapi:warn] [pid 2843654:tid 2843654] [client 45.158.164.139:37610] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:39.149937 2026] [lsapi:warn] [pid 2843654:tid 2843654] [client 45.158.164.139:37610] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:39.157989 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:39.158028 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:39.375320 2026] [lsapi:warn] [pid 2841470:tid 2841470] [client 45.158.164.139:37618] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:39.375361 2026] [lsapi:warn] [pid 2841470:tid 2841470] [client 45.158.164.139:37618] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:39.377402 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:39.377439 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:39.474974 2026] [cgi:error] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:11:39.641092 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37634] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:39.641120 2026] [lsapi:warn] [pid 2819488:tid 2819488] [client 45.158.164.139:37634] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:39.643324 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:39.643364 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:39.876475 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:39.876513 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:40.434856 2026] [lsapi:warn] [pid 2808147:tid 2808147] [client 45.158.164.139:37652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:40.434903 2026] [lsapi:warn] [pid 2808147:tid 2808147] [client 45.158.164.139:37652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:40.436877 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:40.436919 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:40.738094 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:56542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:40.738135 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:56542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:40.740237 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:40.740259 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:40.790104 2026] [ssl:error] [pid 2815972:tid 2815972] (70014)End of file found: [client 216.73.216.199:17838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:11:41.014537 2026] [lsapi:warn] [pid 2839843:tid 2839843] [client 45.158.164.139:56554] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:41.014591 2026] [lsapi:warn] [pid 2839843:tid 2839843] [client 45.158.164.139:56554] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:41.016986 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:41.017010 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:41.267155 2026] [lsapi:warn] [pid 2815980:tid 2815980] [client 45.158.164.139:56556] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:41.267203 2026] [lsapi:warn] [pid 2815980:tid 2815980] [client 45.158.164.139:56556] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:41.269638 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:41.269662 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:41.287733 2026] [authz_core:error] [pid 2841683:tid 2841683] [client 169.58.39.193:52511] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:11:41.621366 2026] [lsapi:warn] [pid 2830224:tid 2830224] [client 45.158.164.139:56566] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:41.621412 2026] [lsapi:warn] [pid 2830224:tid 2830224] [client 45.158.164.139:56566] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:41.623526 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:41.623555 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:41.995965 2026] [ssl:error] [pid 2841471:tid 2841471] (EAI 2)Name or service not known: [client 144.76.19.72:31648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:41.996002 2026] [ssl:error] [pid 2841471:tid 2841471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:42.093913 2026] [ssl:error] [pid 2830224:tid 2830224] (EAI 2)Name or service not known: [client 144.76.19.72:31660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:42.093937 2026] [ssl:error] [pid 2830224:tid 2830224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:42.542146 2026] [security2:error] [pid 2841471:tid 2841471] [client 185.191.171.12:45052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5550.0/prev_next,next.html"] [unique_id "amsjXklK7ThnStRxqDXJtAAAACI"]
[Thu Jul 30 11:11:44.116937 2026] [security2:error] [pid 2844825:tid 2844825] [client 51.195.244.65:52600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/robots.txt"] [unique_id "amsjYKpr5dPR-QAI74039AAAAAQ"]
[Thu Jul 30 11:11:44.117562 2026] [core:error] [pid 2844825:tid 2844825] [client 51.195.244.65:52600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:11:44.591464 2026] [proxy_http:error] [pid 2844825:tid 2844825] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:55970] AH01110: error reading response
[Thu Jul 30 11:11:44.680753 2026] [proxy_http:error] [pid 2838781:tid 2838781] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:45921] AH01110: error reading response
[Thu Jul 30 11:11:44.954725 2026] [security2:error] [pid 2838781:tid 2838781] [client 185.191.171.13:31728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8230.0.html"] [unique_id "amsjYFyrNXUFcWs8pRdcowAAAAg"]
[Thu Jul 30 11:11:45.000425 2026] [lsapi:warn] [pid 2844825:tid 2844825] [client 45.158.164.139:56568] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:45.000465 2026] [lsapi:warn] [pid 2844825:tid 2844825] [client 45.158.164.139:56568] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:45.003765 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:45.003789 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:45.149493 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:31666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:45.149518 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:45.176687 2026] [security2:error] [pid 2838781:tid 2838781] [client 51.195.244.138:27750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/a-picture-for-each-month/"] [unique_id "amsjYVyrNXUFcWs8pRdcpAAAAAg"]
[Thu Jul 30 11:11:45.177100 2026] [core:error] [pid 2838781:tid 2838781] [client 51.195.244.138:27750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:11:45.202157 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:31678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:45.202179 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:45.619423 2026] [lsapi:warn] [pid 2839843:tid 2839843] [client 45.158.164.139:56586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:45.619449 2026] [lsapi:warn] [pid 2839843:tid 2839843] [client 45.158.164.139:56586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:45.621245 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:45.621269 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:46.782634 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:56594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:46.782680 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:56594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:46.789601 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:46.789630 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:47.218727 2026] [lsapi:warn] [pid 2845082:tid 2845082] [client 45.158.164.139:56604] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:47.218767 2026] [lsapi:warn] [pid 2845082:tid 2845082] [client 45.158.164.139:56604] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:47.221172 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:47.221197 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:47.457496 2026] [authz_core:error] [pid 2842910:tid 2842910] [client 169.58.39.193:53485] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:11:47.523797 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56606] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:47.523832 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56606] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:47.526018 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:47.526040 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:47.819527 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56610] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:47.819582 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56610] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:47.821478 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:47.821508 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:48.088497 2026] [lsapi:warn] [pid 2842173:tid 2842173] [client 45.158.164.139:56626] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:48.088538 2026] [lsapi:warn] [pid 2842173:tid 2842173] [client 45.158.164.139:56626] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:48.090380 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:48.090405 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:48.266161 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:31692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:48.266207 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:48.401583 2026] [lsapi:warn] [pid 2839811:tid 2839811] [client 45.158.164.139:56636] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:48.401611 2026] [lsapi:warn] [pid 2839811:tid 2839811] [client 45.158.164.139:56636] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:48.402801 2026] [core:error] [pid 2841471:tid 2841471] (13)Permission denied: [client 216.73.216.199:44679] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/objects
[Thu Jul 30 11:11:48.405623 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:48.405646 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:48.426164 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:31708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:48.426185 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:48.698259 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:48.698286 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:48.944662 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:48.944694 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:49.186300 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:56668] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:49.186327 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:56668] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:49.187898 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:49.187923 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:49.460736 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:49.460764 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:49.730229 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:49.730255 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:49.836056 2026] [security2:error] [pid 2841465:tid 2841465] [client 162.14.109.170:56962] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amsjZe9rrQTqKCLE2vOrrAAAABg"]
[Thu Jul 30 11:11:50.007517 2026] [lsapi:warn] [pid 2814709:tid 2814709] [client 45.158.164.139:56704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:50.007562 2026] [lsapi:warn] [pid 2814709:tid 2814709] [client 45.158.164.139:56704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:50.008967 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:50.008991 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:50.266423 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:50.266452 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:50.503161 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:56738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:50.503191 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:56738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:50.506199 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:50.506222 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:50.751131 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:46174] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:50.751156 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:46174] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:50.753483 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:50.753506 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:51.025158 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:46176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:51.025187 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:46176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:51.029533 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:51.029567 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:51.276498 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:46180] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:51.276540 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:46180] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:51.278634 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:51.278657 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:51.317002 2026] [rewrite:error] [pid 2845591:tid 2845591] [client 158.51.126.91:55318] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/
[Thu Jul 30 11:11:51.317127 2026] [rewrite:error] [pid 2845591:tid 2845591] [client 158.51.126.91:55318] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:11:51.486477 2026] [ssl:error] [pid 2839843:tid 2839843] (EAI 2)Name or service not known: [client 144.76.19.72:18348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:51.486504 2026] [ssl:error] [pid 2839843:tid 2839843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:51.535312 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:46182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:51.535337 2026] [lsapi:warn] [pid 2843789:tid 2843789] [client 45.158.164.139:46182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:51.539390 2026] [ssl:error] [pid 2845590:tid 2845590] (EAI 2)Name or service not known: [client 144.76.19.72:18354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:51.539418 2026] [ssl:error] [pid 2845590:tid 2845590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:51.546389 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:51.546412 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:51.577084 2026] [authz_core:error] [pid 2840781:tid 2840781] [client 169.58.39.193:54323] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:11:51.794518 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:51.794544 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.029594 2026] [lsapi:warn] [pid 2841683:tid 2841683] [client 45.158.164.139:46206] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.029637 2026] [lsapi:warn] [pid 2841683:tid 2841683] [client 45.158.164.139:46206] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.033487 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.033523 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.081143 2026] [security2:error] [pid 2815976:tid 2815976] [client 162.14.109.170:53720] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amsjaH2wfRsr1NZgeQ2xagAAADc"], referer: http://banskoexpress.com
[Thu Jul 30 11:11:52.279782 2026] [lsapi:warn] [pid 2842781:tid 2842781] [client 45.158.164.139:46222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.279827 2026] [lsapi:warn] [pid 2842781:tid 2842781] [client 45.158.164.139:46222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.284306 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.284343 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.508930 2026] [lsapi:warn] [pid 2841683:tid 2841683] [client 45.158.164.139:46234] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.508960 2026] [lsapi:warn] [pid 2841683:tid 2841683] [client 45.158.164.139:46234] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.511046 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.511079 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.734279 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.734305 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.972891 2026] [lsapi:warn] [pid 2845703:tid 2845703] [client 45.158.164.139:46252] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.972930 2026] [lsapi:warn] [pid 2845703:tid 2845703] [client 45.158.164.139:46252] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:52.974880 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:52.974903 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:53.212626 2026] [lsapi:warn] [pid 2840781:tid 2840781] [client 45.158.164.139:46254] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:53.212654 2026] [lsapi:warn] [pid 2840781:tid 2840781] [client 45.158.164.139:46254] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:53.215844 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:53.215868 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:53.479664 2026] [lsapi:warn] [pid 2815972:tid 2815972] [client 45.158.164.139:46262] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:53.479692 2026] [lsapi:warn] [pid 2815972:tid 2815972] [client 45.158.164.139:46262] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:53.483247 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:53.483272 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:53.743022 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:53.743059 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:53.993239 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:53.993282 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.234925 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:46284] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.234963 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:46284] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.237159 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.237185 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.298781 2026] [cgi:error] [pid 2845082:tid 2845082] [client 20.151.254.105:24760] AH02812: stderr from /home/quantumc/paulino.mt/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:11:54.479818 2026] [lsapi:warn] [pid 2844825:tid 2844825] [client 45.158.164.139:46298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.479843 2026] [lsapi:warn] [pid 2844825:tid 2844825] [client 45.158.164.139:46298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.481855 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.481878 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.593941 2026] [ssl:error] [pid 2841430:tid 2841430] (EAI 2)Name or service not known: [client 144.76.19.72:18360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:54.593970 2026] [ssl:error] [pid 2841430:tid 2841430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:54.647575 2026] [ssl:error] [pid 2845704:tid 2845704] (EAI 2)Name or service not known: [client 144.76.19.72:18368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:54.647604 2026] [ssl:error] [pid 2845704:tid 2845704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:54.711584 2026] [lsapi:warn] [pid 2842173:tid 2842173] [client 45.158.164.139:46304] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.711621 2026] [lsapi:warn] [pid 2842173:tid 2842173] [client 45.158.164.139:46304] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.713878 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.713902 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.979338 2026] [lsapi:warn] [pid 2830224:tid 2830224] [client 45.158.164.139:46320] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.979367 2026] [lsapi:warn] [pid 2830224:tid 2830224] [client 45.158.164.139:46320] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:54.980930 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:54.980955 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:55.241590 2026] [lsapi:warn] [pid 2840556:tid 2840556] [client 45.158.164.139:46334] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:55.241618 2026] [lsapi:warn] [pid 2840556:tid 2840556] [client 45.158.164.139:46334] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:55.248413 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:55.248441 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:55.470493 2026] [security2:error] [pid 2815857:tid 2815857] [client 162.14.109.170:57052] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsja7wXx2CERl4kDMTlowAAAC0"], referer: https://banskoexpress.com/
[Thu Jul 30 11:11:55.483738 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:55.483773 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:55.701574 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:55.701599 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:56.474994 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:46368] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:56.475024 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:46368] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:56.478204 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:56.478231 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:56.743268 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:56.743297 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:57.032308 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:57.032339 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:57.276686 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:57.276713 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:57.554849 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:57.554876 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:57.702577 2026] [ssl:error] [pid 2841431:tid 2841431] (EAI 2)Name or service not known: [client 144.76.19.72:18372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:57.702607 2026] [ssl:error] [pid 2841431:tid 2841431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:57.754697 2026] [ssl:error] [pid 2843910:tid 2843910] (EAI 2)Name or service not known: [client 144.76.19.72:18374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:11:57.754723 2026] [ssl:error] [pid 2843910:tid 2843910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:11:57.791273 2026] [lsapi:warn] [pid 2842173:tid 2842173] [client 45.158.164.139:46406] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:57.791302 2026] [lsapi:warn] [pid 2842173:tid 2842173] [client 45.158.164.139:46406] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:57.793461 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:57.793485 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:57.803667 2026] [core:error] [pid 2840557:tid 2840557] [client 66.249.66.169:38477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:11:57.803698 2026] [core:error] [pid 2840557:tid 2840557] [client 66.249.66.169:38477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:11:57.812689 2026] [core:error] [pid 2830224:tid 2830224] [client 66.249.66.40:63597] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:11:57.812713 2026] [core:error] [pid 2830224:tid 2830224] [client 66.249.66.40:63597] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:11:58.074959 2026] [lsapi:warn] [pid 2841465:tid 2841465] [client 45.158.164.139:46408] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.075003 2026] [lsapi:warn] [pid 2841465:tid 2841465] [client 45.158.164.139:46408] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:58.077052 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.077087 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:58.308569 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.308598 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:58.538982 2026] [lsapi:warn] [pid 2839843:tid 2839843] [client 45.158.164.139:46430] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.539008 2026] [lsapi:warn] [pid 2839843:tid 2839843] [client 45.158.164.139:46430] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:58.541293 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.541317 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:58.772865 2026] [lsapi:warn] [pid 2840557:tid 2840557] [client 45.158.164.139:46436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.772907 2026] [lsapi:warn] [pid 2840557:tid 2840557] [client 45.158.164.139:46436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:58.774895 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.774926 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:58.955531 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:58.955570 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:59.109754 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:59.109782 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:59.374985 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:59.375013 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:59.606901 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:46456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:59.606928 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:46456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:59.609221 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:11:59.609244 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:11:59.870334 2026] [lsapi:warn] [pid 2838781:tid 2838781] [client 2a02:c207:2314:4501::1:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:12:00.306042 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:46466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:00.306094 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:46466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:00.308239 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:00.308266 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:00.610760 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:46490] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:00.610787 2026] [lsapi:warn] [pid 2842230:tid 2842230] [client 45.158.164.139:46490] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:00.613316 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:00.613340 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:00.806383 2026] [ssl:error] [pid 2815917:tid 2815917] (EAI 2)Name or service not known: [client 144.76.19.72:52150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:00.806425 2026] [ssl:error] [pid 2815917:tid 2815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:00.860628 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:52156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:00.860656 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:00.879347 2026] [lsapi:warn] [pid 2841430:tid 2841430] [client 45.158.164.139:44404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:00.879378 2026] [lsapi:warn] [pid 2841430:tid 2841430] [client 45.158.164.139:44404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:00.882666 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:00.882691 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:01.134386 2026] [lsapi:warn] [pid 2843910:tid 2843910] [client 45.158.164.139:44414] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:01.134416 2026] [lsapi:warn] [pid 2843910:tid 2843910] [client 45.158.164.139:44414] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:01.142654 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:01.142684 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:01.364925 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:44422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:01.364954 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:44422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:01.367074 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:01.367096 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:01.606526 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:01.606568 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:01.851347 2026] [lsapi:warn] [pid 2845704:tid 2845704] [client 45.158.164.139:44436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:01.851386 2026] [lsapi:warn] [pid 2845704:tid 2845704] [client 45.158.164.139:44436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:01.853539 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:01.853567 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:02.101305 2026] [lsapi:warn] [pid 2815917:tid 2815917] [client 45.158.164.139:44446] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:02.101352 2026] [lsapi:warn] [pid 2815917:tid 2815917] [client 45.158.164.139:44446] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:02.104292 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:02.104317 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:02.298795 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:02.298830 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:02.451585 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:02.451613 2026] [lsapi:warn] [pid 2841383:tid 2841383] [client 20.203.133.142:18696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:03.254471 2026] [security2:error] [pid 2842230:tid 2842230] [client 104.244.227.52:48327] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjc_fE1YW0NCjLQLuDTQAAAAE"]
[Thu Jul 30 11:12:03.254536 2026] [security2:error] [pid 2842230:tid 2842230] [client 104.244.227.52:48327] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjc_fE1YW0NCjLQLuDTQAAAAE"]
[Thu Jul 30 11:12:03.254847 2026] [security2:error] [pid 2842230:tid 2842230] [client 104.244.227.52:48327] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjc_fE1YW0NCjLQLuDTQAAAAE"]
[Thu Jul 30 11:12:03.931388 2026] [ssl:error] [pid 2815980:tid 2815980] (EAI 2)Name or service not known: [client 144.76.19.72:52164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:03.931427 2026] [ssl:error] [pid 2815980:tid 2815980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:03.987110 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:52178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:03.987137 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:04.708088 2026] [authz_core:error] [pid 2841431:tid 2841431] [client 82.102.18.190:45306] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/IXR/error_log
[Thu Jul 30 11:12:05.770551 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:05.770586 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:05.904035 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:05.904087 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:06.181231 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:06.181261 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:06.419792 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:06.419830 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:07.044598 2026] [ssl:error] [pid 2845176:tid 2845176] (EAI 2)Name or service not known: [client 144.76.19.72:52186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:07.044630 2026] [ssl:error] [pid 2845176:tid 2845176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:07.096773 2026] [ssl:error] [pid 2845492:tid 2845492] (EAI 2)Name or service not known: [client 144.76.19.72:52202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:07.096800 2026] [ssl:error] [pid 2845492:tid 2845492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:07.363645 2026] [lsapi:warn] [pid 2843910:tid 2843910] [client 45.158.164.139:44508] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:07.363675 2026] [lsapi:warn] [pid 2843910:tid 2843910] [client 45.158.164.139:44508] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:07.365743 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:07.365768 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:07.582371 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:07.582400 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:07.815290 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:12:07.815319 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 20.203.133.142:52687] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:12:08.881044 2026] [security2:error] [pid 2834627:tid 2834627] [client 37.114.150.120:1227] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjeIN47-tRSb2uFqf9cwAAAAU"]
[Thu Jul 30 11:12:08.881109 2026] [security2:error] [pid 2834627:tid 2834627] [client 37.114.150.120:1227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjeIN47-tRSb2uFqf9cwAAAAU"]
[Thu Jul 30 11:12:08.881381 2026] [security2:error] [pid 2834627:tid 2834627] [client 37.114.150.120:1227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjeIN47-tRSb2uFqf9cwAAAAU"]
[Thu Jul 30 11:12:10.155204 2026] [ssl:error] [pid 2847083:tid 2847083] (EAI 2)Name or service not known: [client 144.76.19.72:46668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:10.155245 2026] [ssl:error] [pid 2847083:tid 2847083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:10.211104 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:46674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:10.211133 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:11.043448 2026] [core:error] [pid 2841429:tid 2841429] [client 66.249.66.195:53909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:11.043476 2026] [core:error] [pid 2841429:tid 2841429] [client 66.249.66.195:53909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:11.299528 2026] [security2:error] [pid 2841470:tid 2841470] [client 43.157.181.189:58114] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.londonkinesiology.com"] [uri "/"] [unique_id "amsje4mgZcReH3VUVClXKwAAAB4"]
[Thu Jul 30 11:12:11.672230 2026] [security2:error] [pid 2814709:tid 2814709] [client 114.119.146.111:24233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~19,102,104,15/request_format~html"] [unique_id "amsjex7Cb72v1lFPIRnEiwAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~30,19,102,104,15/request_format~html
[Thu Jul 30 11:12:12.013325 2026] [authz_core:error] [pid 2839844:tid 2839844] [client 191.232.199.39:39895] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 11:12:12.726727 2026] [security2:error] [pid 2817440:tid 2817440] [client 158.51.126.91:45868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "saturnstopwatchescom.saturnsports.com"] [uri "/"] [unique_id "amsjfEIn1TgRB4cjIl14xwAAABI"]
[Thu Jul 30 11:12:12.730821 2026] [security2:error] [pid 2841470:tid 2841470] [client 158.51.126.91:45874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "saturnstopwatchescouk.saturnsports.com"] [uri "/"] [unique_id "amsjfImgZcReH3VUVClXLQAAAB4"]
[Thu Jul 30 11:12:12.733125 2026] [rewrite:error] [pid 2841470:tid 2841470] [client 158.51.126.91:45874] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:12:13.183017 2026] [security2:error] [pid 2839844:tid 2839844] [client 43.157.181.189:52806] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsjfTaRannQYkcZg4ml3QAAACE"], referer: http://www.londonkinesiology.com
[Thu Jul 30 11:12:13.184965 2026] [authz_core:error] [pid 2839844:tid 2839844] [client 43.157.181.189:52806] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.londonkinesiology.com
[Thu Jul 30 11:12:13.187807 2026] [authz_core:error] [pid 2839844:tid 2839844] [client 43.157.181.189:52806] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.londonkinesiology.com
[Thu Jul 30 11:12:13.238646 2026] [security2:error] [pid 2814709:tid 2814709] [client 114.119.146.111:24237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~19,102,104,15/request_format~html"] [unique_id "amsjfR7Cb72v1lFPIRnEjAAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~30,19,102,104,15/request_format~html
[Thu Jul 30 11:12:13.267566 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:46680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:13.267591 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:13.320581 2026] [ssl:error] [pid 2839811:tid 2839811] (EAI 2)Name or service not known: [client 144.76.19.72:46690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:13.320608 2026] [ssl:error] [pid 2839811:tid 2839811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:14.114840 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:5320] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/pdo_sqlite.ini"] [unique_id "amsjfmZ7fqzP06wFE9wurQAAACU"]
[Thu Jul 30 11:12:14.115168 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:5320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/pdo_sqlite.ini"] [unique_id "amsjfmZ7fqzP06wFE9wurQAAACU"]
[Thu Jul 30 11:12:14.115386 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:5320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/pdo_sqlite.ini"] [unique_id "amsjfmZ7fqzP06wFE9wurQAAACU"]
[Thu Jul 30 11:12:15.019181 2026] [ssl:error] [pid 2841682:tid 2841682] (70014)End of file found: [client 216.73.216.199:5320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:16.373736 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:46702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:16.373765 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:16.426446 2026] [ssl:error] [pid 2843910:tid 2843910] (EAI 2)Name or service not known: [client 144.76.19.72:46712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:16.426472 2026] [ssl:error] [pid 2843910:tid 2843910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:16.847606 2026] [security2:error] [pid 2842781:tid 2842781] [client 43.156.79.172:47556] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thatwall.com"] [uri "/"] [unique_id "amsjgEsd-IZGnXpGPRNk5gAAABM"]
[Thu Jul 30 11:12:17.136112 2026] [security2:error] [pid 2815976:tid 2815976] [client 205.164.151.96:14035] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjgX2wfRsr1NZgeQ2xeQAAADc"]
[Thu Jul 30 11:12:17.136168 2026] [security2:error] [pid 2815976:tid 2815976] [client 205.164.151.96:14035] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjgX2wfRsr1NZgeQ2xeQAAADc"]
[Thu Jul 30 11:12:17.136397 2026] [security2:error] [pid 2815976:tid 2815976] [client 205.164.151.96:14035] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjgX2wfRsr1NZgeQ2xeQAAADc"]
[Thu Jul 30 11:12:19.481078 2026] [ssl:error] [pid 2842230:tid 2842230] (EAI 2)Name or service not known: [client 144.76.19.72:46718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:19.481114 2026] [ssl:error] [pid 2842230:tid 2842230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:19.533854 2026] [ssl:error] [pid 2815917:tid 2815917] (EAI 2)Name or service not known: [client 144.76.19.72:46724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:19.533884 2026] [ssl:error] [pid 2815917:tid 2815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:19.913824 2026] [security2:error] [pid 2842781:tid 2842781] [client 185.191.171.18:28614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/birmingham-midshires-redemption-statement"] [unique_id "amsjg0sd-IZGnXpGPRNk6AAAABM"]
[Thu Jul 30 11:12:21.111786 2026] [ssl:error] [pid 2842781:tid 2842781] (70014)End of file found: [client 216.73.216.199:24418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:22.591042 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:43500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:22.591092 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:22.647830 2026] [ssl:error] [pid 2841465:tid 2841465] (EAI 2)Name or service not known: [client 144.76.19.72:43516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:22.647856 2026] [ssl:error] [pid 2841465:tid 2841465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:22.799832 2026] [security2:error] [pid 2841474:tid 2841474] [client 20.171.55.167:5036] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ftp.securitiesfinance.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsjhjam228Ita22vyensQAAACY"]
[Thu Jul 30 11:12:22.800056 2026] [security2:error] [pid 2841474:tid 2841474] [client 20.171.55.167:5036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ftp.securitiesfinance.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsjhjam228Ita22vyensQAAACY"]
[Thu Jul 30 11:12:22.800289 2026] [security2:error] [pid 2841474:tid 2841474] [client 20.171.55.167:5036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ftp.securitiesfinance.co.uk"] [uri "/403.shtml"] [unique_id "amsjhjam228Ita22vyensQAAACY"]
[Thu Jul 30 11:12:23.107379 2026] [authz_core:error] [pid 2841429:tid 2841429] [client 191.232.199.39:40056] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/rest-api/error_log
[Thu Jul 30 11:12:25.593255 2026] [core:error] [pid 2843654:tid 2843654] (13)Permission denied: [client 216.73.216.199:41312] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/binfmt_misc/uevent
[Thu Jul 30 11:12:25.706692 2026] [ssl:error] [pid 2841471:tid 2841471] (EAI 2)Name or service not known: [client 144.76.19.72:43528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:25.706721 2026] [ssl:error] [pid 2841471:tid 2841471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:25.763965 2026] [ssl:error] [pid 2841461:tid 2841461] (EAI 2)Name or service not known: [client 144.76.19.72:43542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:25.763999 2026] [ssl:error] [pid 2841461:tid 2841461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:25.904116 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:41312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:26.203192 2026] [core:error] [pid 2841682:tid 2841682] (13)Permission denied: [client 216.73.216.199:44179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/shrink
[Thu Jul 30 11:12:27.449593 2026] [ssl:error] [pid 2841682:tid 2841682] (70014)End of file found: [client 216.73.216.199:44179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:28.819255 2026] [ssl:error] [pid 2841471:tid 2841471] (EAI 2)Name or service not known: [client 144.76.19.72:43546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:28.819283 2026] [ssl:error] [pid 2841471:tid 2841471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:28.873639 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:43562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:28.873664 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:29.400362 2026] [core:error] [pid 2845705:tid 2845705] [client 66.249.66.66:54524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:29.400399 2026] [core:error] [pid 2845705:tid 2845705] [client 66.249.66.66:54524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:31.926878 2026] [ssl:error] [pid 2841431:tid 2841431] (EAI 2)Name or service not known: [client 144.76.19.72:28590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:31.926904 2026] [ssl:error] [pid 2841431:tid 2841431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:31.979707 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:28602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:31.979733 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:35.064720 2026] [ssl:error] [pid 2848692:tid 2848692] (EAI 2)Name or service not known: [client 144.76.19.72:28616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:35.064781 2026] [ssl:error] [pid 2848692:tid 2848692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:35.117610 2026] [ssl:error] [pid 2839811:tid 2839811] (EAI 2)Name or service not known: [client 144.76.19.72:28628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:35.117635 2026] [ssl:error] [pid 2839811:tid 2839811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:38.952931 2026] [cgi:error] [pid 2848910:tid 2848910] [client 104.165.199.225:45196] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: https://refraction.co.uk/blog/tag/microsoft/page/3/
[Thu Jul 30 11:12:39.106438 2026] [security2:error] [pid 2848910:tid 2848910] [client 46.105.76.214:4612] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsjl9FHmDwQ-Hm-IdVc0wAAACk"]
[Thu Jul 30 11:12:39.122737 2026] [ssl:error] [pid 2848910:tid 2848910] (EAI 2)Name or service not known: [client 144.76.19.72:28632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:39.122762 2026] [ssl:error] [pid 2848910:tid 2848910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:39.746648 2026] [ssl:error] [pid 2845176:tid 2845176] (70014)End of file found: [client 216.73.216.199:3243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:40.048475 2026] [security2:error] [pid 2815857:tid 2815857] [client 216.73.216.199:47989] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mbstring.ini"] [unique_id "amsjmLwXx2CERl4kDMTlvQAAAC0"]
[Thu Jul 30 11:12:40.048785 2026] [security2:error] [pid 2815857:tid 2815857] [client 216.73.216.199:47989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mbstring.ini"] [unique_id "amsjmLwXx2CERl4kDMTlvQAAAC0"]
[Thu Jul 30 11:12:40.049053 2026] [security2:error] [pid 2815857:tid 2815857] [client 216.73.216.199:47989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mbstring.ini"] [unique_id "amsjmLwXx2CERl4kDMTlvQAAAC0"]
[Thu Jul 30 11:12:40.687722 2026] [ssl:error] [pid 2819912:tid 2819912] (EAI 2)Name or service not known: [client 144.76.19.72:28644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:40.687752 2026] [ssl:error] [pid 2819912:tid 2819912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:41.267366 2026] [ssl:error] [pid 2815857:tid 2815857] (70014)End of file found: [client 216.73.216.199:47989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:42.406977 2026] [authz_core:error] [pid 2848977:tid 2848977] [client 66.249.66.33:53906] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:12:42.409702 2026] [authz_core:error] [pid 2848977:tid 2848977] [client 66.249.66.33:53906] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:12:43.432966 2026] [security2:error] [pid 2848981:tid 2848981] [client 216.73.216.199:15396] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/pdo_sqlite.ini"] [unique_id "amsjmzc0AxmolnlG3y1SXQAAAEI"]
[Thu Jul 30 11:12:43.433269 2026] [security2:error] [pid 2848981:tid 2848981] [client 216.73.216.199:15396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/pdo_sqlite.ini"] [unique_id "amsjmzc0AxmolnlG3y1SXQAAAEI"]
[Thu Jul 30 11:12:43.433497 2026] [security2:error] [pid 2848981:tid 2848981] [client 216.73.216.199:15396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/pdo_sqlite.ini"] [unique_id "amsjmzc0AxmolnlG3y1SXQAAAEI"]
[Thu Jul 30 11:12:43.742181 2026] [ssl:error] [pid 2848979:tid 2848979] (EAI 2)Name or service not known: [client 144.76.19.72:43376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:43.742212 2026] [ssl:error] [pid 2848979:tid 2848979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:43.836874 2026] [ssl:error] [pid 2848982:tid 2848982] (EAI 2)Name or service not known: [client 144.76.19.72:43388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:43.836900 2026] [ssl:error] [pid 2848982:tid 2848982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:44.630598 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:44.649486 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/this_is_a_new_hello_world.php
[Thu Jul 30 11:12:44.649526 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.686914 2026] [core:error] [pid 2848981:tid 2848981] (13)Permission denied: [client 216.73.216.199:15396] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/key_jar/total_objects
[Thu Jul 30 11:12:44.689701 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 11:12:44.689738 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.707114 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/by.php
[Thu Jul 30 11:12:44.707152 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.738122 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cxs.php
[Thu Jul 30 11:12:44.738160 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.801885 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/coffexium.php
[Thu Jul 30 11:12:44.801926 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.818966 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/asdf.php
[Thu Jul 30 11:12:44.819004 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.836151 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/red.php
[Thu Jul 30 11:12:44.836187 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.885860 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:44.943572 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:44.960760 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:44.977897 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/footer.php
[Thu Jul 30 11:12:44.977941 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:44.994929 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:45.011922 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:45.049312 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/
[Thu Jul 30 11:12:45.076698 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zoro.php
[Thu Jul 30 11:12:45.076742 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.096684 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wm.php
[Thu Jul 30 11:12:45.096732 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.113887 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bajah.php
[Thu Jul 30 11:12:45.113930 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.131025 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cream1.php
[Thu Jul 30 11:12:45.131081 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.148102 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lim.php
[Thu Jul 30 11:12:45.148145 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.182490 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/heat3.php
[Thu Jul 30 11:12:45.182534 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.203333 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/greap.php
[Thu Jul 30 11:12:45.203374 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.220503 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/177.php
[Thu Jul 30 11:12:45.220543 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.263082 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/199.php
[Thu Jul 30 11:12:45.263128 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.287578 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file52.php
[Thu Jul 30 11:12:45.287624 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.309347 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/122.php
[Thu Jul 30 11:12:45.309389 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.326230 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/green1.php
[Thu Jul 30 11:12:45.326266 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.343183 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sukce.php
[Thu Jul 30 11:12:45.343234 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.360148 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xb.php
[Thu Jul 30 11:12:45.360188 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.379859 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/biufile.php
[Thu Jul 30 11:12:45.379900 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.397297 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wpconf.php
[Thu Jul 30 11:12:45.397342 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.462909 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ultradybbuks.php
[Thu Jul 30 11:12:45.462969 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.489354 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/novax.php
[Thu Jul 30 11:12:45.489402 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.506504 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mosty.php
[Thu Jul 30 11:12:45.506562 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.523658 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dejavu.php
[Thu Jul 30 11:12:45.523703 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.540894 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaf.php
[Thu Jul 30 11:12:45.540965 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.558058 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/b00869ae6e.php
[Thu Jul 30 11:12:45.558145 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.599475 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/term.php
[Thu Jul 30 11:12:45.599520 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.630795 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wander.php
[Thu Jul 30 11:12:45.630844 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.652185 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ha.php
[Thu Jul 30 11:12:45.652232 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.690062 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hur.php
[Thu Jul 30 11:12:45.690115 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.721981 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2222.php
[Thu Jul 30 11:12:45.722026 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.739345 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/h02ugyh.php
[Thu Jul 30 11:12:45.739383 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.756280 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/seiso.php
[Thu Jul 30 11:12:45.756316 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.773494 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/155.php
[Thu Jul 30 11:12:45.773530 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.793802 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ppp.php
[Thu Jul 30 11:12:45.793839 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.811005 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/201.php
[Thu Jul 30 11:12:45.811042 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.852802 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ops.php
[Thu Jul 30 11:12:45.852843 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.870022 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/samll.php
[Thu Jul 30 11:12:45.870077 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.962724 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ingfo.php
[Thu Jul 30 11:12:45.962769 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:45.982842 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/error_log.php
[Thu Jul 30 11:12:45.982882 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.026204 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xenon1337.php
[Thu Jul 30 11:12:46.026252 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.102798 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/test11.php
[Thu Jul 30 11:12:46.102842 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.130848 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/koala.php
[Thu Jul 30 11:12:46.130890 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.168866 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mac.php
[Thu Jul 30 11:12:46.168909 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.195449 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/25d653587fdfd1.php
[Thu Jul 30 11:12:46.195510 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.275703 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wefile.php
[Thu Jul 30 11:12:46.275747 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.300901 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/modules/mod_simplefileuploadv1.3
[Thu Jul 30 11:12:46.318093 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:46.351342 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:46.377085 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:46.419608 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2P.php
[Thu Jul 30 11:12:46.419654 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.438327 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tires.php
[Thu Jul 30 11:12:46.438369 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.455369 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wordpress
[Thu Jul 30 11:12:46.475053 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/about.php
[Thu Jul 30 11:12:46.475112 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.518250 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:46.555096 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bob.php
[Thu Jul 30 11:12:46.555139 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.572363 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/t3s.php
[Thu Jul 30 11:12:46.572415 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.589605 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:46.606867 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:46.624500 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/uwu.php
[Thu Jul 30 11:12:46.624554 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.642463 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/uwa.php
[Thu Jul 30 11:12:46.642505 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.659651 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/crgio.php
[Thu Jul 30 11:12:46.659693 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.676673 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/geforce.php
[Thu Jul 30 11:12:46.676715 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.693800 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pucci.php
[Thu Jul 30 11:12:46.693843 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.735448 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:46.769965 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:46.787197 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-temp.php
[Thu Jul 30 11:12:46.787241 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.810313 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:46.832284 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mode.php
[Thu Jul 30 11:12:46.832326 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.857201 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:46.897302 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dx.php
[Thu Jul 30 11:12:46.897347 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.898391 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:43400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:46.898413 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:46.918844 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/puc.php
[Thu Jul 30 11:12:46.918892 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.946504 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/themes.php
[Thu Jul 30 11:12:46.946557 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:46.951107 2026] [ssl:error] [pid 2848980:tid 2848980] (EAI 2)Name or service not known: [client 144.76.19.72:43416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:46.951133 2026] [ssl:error] [pid 2848980:tid 2848980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:46.964135 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dx.php
[Thu Jul 30 11:12:46.964183 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.007986 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/11.php
[Thu Jul 30 11:12:47.008031 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.031404 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/p.php
[Thu Jul 30 11:12:47.031446 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.093415 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:47.111470 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bthil.php
[Thu Jul 30 11:12:47.111513 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.129516 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/7.php
[Thu Jul 30 11:12:47.129574 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.139131 2026] [ssl:error] [pid 2848981:tid 2848981] (70014)End of file found: [client 216.73.216.199:15396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:47.147427 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/8.php
[Thu Jul 30 11:12:47.147470 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.165539 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php
[Thu Jul 30 11:12:47.165604 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.184337 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/100.php
[Thu Jul 30 11:12:47.184379 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.212160 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 11:12:47.212203 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.229297 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 11:12:47.229342 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.254442 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/edit.php
[Thu Jul 30 11:12:47.254483 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.271690 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:47.299008 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f6.php
[Thu Jul 30 11:12:47.299059 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.338248 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inputs.php
[Thu Jul 30 11:12:47.338291 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.355387 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/av.php
[Thu Jul 30 11:12:47.355432 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.372652 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 11:12:47.372694 2026] [access_compat:error] [pid 2819912:tid 2819912] [client 20.79.29.209:16204] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:47.432842 2026] [security2:error] [pid 2848977:tid 2848977] [client 83.147.29.150:36332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.akoptimize.online"] [uri "/backend/.env"] [unique_id "amsjnzqXS-RU8uQ_V0a94gAAADw"]
[Thu Jul 30 11:12:47.434405 2026] [security2:error] [pid 2848909:tid 2848909] [client 83.147.29.150:36266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.akoptimize.online"] [uri "/.env.prod"] [unique_id "amsjn8Y7TzulJS1RJUucKgAAACc"]
[Thu Jul 30 11:12:50.499802 2026] [ssl:error] [pid 2848847:tid 2848847] (70014)End of file found: [client 216.73.216.199:24485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:51.221372 2026] [core:error] [pid 2845590:tid 2845590] (13)Permission denied: [client 216.73.216.199:22079] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/cache_dma
[Thu Jul 30 11:12:51.522594 2026] [ssl:error] [pid 2845590:tid 2845590] (70014)End of file found: [client 216.73.216.199:22079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:12:52.180098 2026] [ssl:error] [pid 2849867:tid 2849867] (EAI 2)Name or service not known: [client 144.76.19.72:31730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:52.180137 2026] [ssl:error] [pid 2849867:tid 2849867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:52.264358 2026] [core:error] [pid 2849865:tid 2849865] [client 66.249.66.194:41092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:52.264403 2026] [core:error] [pid 2849865:tid 2849865] [client 66.249.66.194:41092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:52.532203 2026] [security2:error] [pid 2848910:tid 2848910] [client 127.0.0.1:43308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "amsjpNFHmDwQ-Hm-IdVc1wAAACk"]
[Thu Jul 30 11:12:53.039444 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 191.232.199.39:40521] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 11:12:53.042501 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 191.232.199.39:40521] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/wc-logs/
[Thu Jul 30 11:12:53.423190 2026] [security2:error] [pid 2845704:tid 2845704] [client 83.147.29.150:36368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.akoptimize.online"] [uri "/api/.env"] [unique_id "amsjpRyjfJXCz57RhQ92PQAAACw"]
[Thu Jul 30 11:12:53.757462 2026] [ssl:error] [pid 2848979:tid 2848979] (EAI 2)Name or service not known: [client 144.76.19.72:31742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:53.757498 2026] [ssl:error] [pid 2848979:tid 2848979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:54.213940 2026] [security2:error] [pid 2848912:tid 2848912] [client 127.0.0.1:43330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "amsjppp7pbKHkb6E6t18FwAAADA"]
[Thu Jul 30 11:12:54.337810 2026] [core:error] [pid 2848980:tid 2848980] [client 66.249.64.170:51064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:54.337837 2026] [core:error] [pid 2848980:tid 2848980] [client 66.249.64.170:51064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:12:55.543612 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:55.572622 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blog.php
[Thu Jul 30 11:12:55.572674 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:55.609477 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:55.634504 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:55.658964 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminfuns.php
[Thu Jul 30 11:12:55.659008 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:55.683557 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/goods.php
[Thu Jul 30 11:12:55.683609 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:55.709443 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ms-edit.php
[Thu Jul 30 11:12:55.709490 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:55.734167 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/222.php
[Thu Jul 30 11:12:55.734215 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:55.764463 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi-bin/index.php
[Thu Jul 30 11:12:55.764516 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:55.791343 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:55.815861 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/BDKR28WP.php
[Thu Jul 30 11:12:55.815906 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:55.840459 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:55.957858 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:55.982138 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp.php
[Thu Jul 30 11:12:55.982182 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.018373 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/abcd.php
[Thu Jul 30 11:12:56.018424 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.064419 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a1.php
[Thu Jul 30 11:12:56.064480 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.088598 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:56.114654 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bal.php
[Thu Jul 30 11:12:56.114700 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.139807 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi-bin/admin.php
[Thu Jul 30 11:12:56.139858 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.164154 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gettest.php
[Thu Jul 30 11:12:56.164203 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.233988 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:56.258485 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:56.336886 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/simple.php
[Thu Jul 30 11:12:56.336933 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.401044 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kj.php
[Thu Jul 30 11:12:56.401108 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.446450 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xxx.php
[Thu Jul 30 11:12:56.446498 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.593994 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hypo.php
[Thu Jul 30 11:12:56.594041 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.618195 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:56.665485 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/chosen.php
[Thu Jul 30 11:12:56.665530 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.690166 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:56.715224 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gg.php
[Thu Jul 30 11:12:56.715272 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.772301 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/als.php
[Thu Jul 30 11:12:56.772352 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.803976 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pol.php
[Thu Jul 30 11:12:56.804025 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.828214 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/006.php
[Thu Jul 30 11:12:56.828257 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.852358 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file5.php
[Thu Jul 30 11:12:56.852396 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.876566 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/4PJcpMFsD8B.php
[Thu Jul 30 11:12:56.876608 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.913532 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file.php
[Thu Jul 30 11:12:56.913589 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.937693 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cfile.php
[Thu Jul 30 11:12:56.937746 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.947323 2026] [core:error] [pid 2848912:tid 2848912] (13)Permission denied: [client 216.73.216.199:15955] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_ili/objects_partial
[Thu Jul 30 11:12:56.962282 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class-wp.php
[Thu Jul 30 11:12:56.962326 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:56.986647 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 11:12:56.986692 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.010920 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aa2.php
[Thu Jul 30 11:12:57.010968 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.045620 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ccou.php
[Thu Jul 30 11:12:57.045665 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.069916 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dr.php
[Thu Jul 30 11:12:57.069961 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.121868 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xamp.php
[Thu Jul 30 11:12:57.121913 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.154364 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bless.php
[Thu Jul 30 11:12:57.154411 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.178807 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file46.php
[Thu Jul 30 11:12:57.178853 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.181165 2026] [security2:error] [pid 2850148:tid 2850148] [client 43.160.225.169:52420] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsjqfZfwKvftcPxQin7_AAAAFo"]
[Thu Jul 30 11:12:57.203094 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/eee.php
[Thu Jul 30 11:12:57.203139 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.244005 2026] [ssl:error] [pid 2815972:tid 2815972] (EAI 2)Name or service not known: [client 144.76.19.72:31750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:57.244032 2026] [ssl:error] [pid 2815972:tid 2815972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:57.269457 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file25.php
[Thu Jul 30 11:12:57.269503 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.300305 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:31764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:12:57.300343 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:12:57.310494 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hg.php
[Thu Jul 30 11:12:57.310542 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.370476 2026] [security2:error] [pid 2850090:tid 2850090] [client 127.0.0.1:60294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "amsjqZhGMTMnagSdd3okiQAAAFk"]
[Thu Jul 30 11:12:57.376901 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file48.php
[Thu Jul 30 11:12:57.376944 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.419492 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ff.php
[Thu Jul 30 11:12:57.419541 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.497186 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file31.php
[Thu Jul 30 11:12:57.497248 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.526524 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file6.php
[Thu Jul 30 11:12:57.526578 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.558510 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a2.php
[Thu Jul 30 11:12:57.558563 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.582806 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file15.php
[Thu Jul 30 11:12:57.582852 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.607533 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/no1.php
[Thu Jul 30 11:12:57.607592 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.640862 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jp.php
[Thu Jul 30 11:12:57.640910 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.676598 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 11:12:57.676647 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.705496 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-load.php
[Thu Jul 30 11:12:57.705542 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.740628 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xwpg.php
[Thu Jul 30 11:12:57.740675 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.771033 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:57.883522 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ddd.php
[Thu Jul 30 11:12:57.883583 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.924451 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:57.963117 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/waf.php
[Thu Jul 30 11:12:57.963163 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:57.988518 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xstelth.php
[Thu Jul 30 11:12:57.988574 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.012783 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:58.045229 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-links.php
[Thu Jul 30 11:12:58.045273 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.069683 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:58.106032 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class-t.api.php
[Thu Jul 30 11:12:58.106088 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.130666 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zwso.php
[Thu Jul 30 11:12:58.130711 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.154829 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:58.211828 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class19.php
[Thu Jul 30 11:12:58.211881 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.238950 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class20.php
[Thu Jul 30 11:12:58.239006 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.308050 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 11:12:58.308104 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.346826 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/randkeyword.php
[Thu Jul 30 11:12:58.346869 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.371100 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fwe.php
[Thu Jul 30 11:12:58.371142 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.417994 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/m.php
[Thu Jul 30 11:12:58.418041 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.443235 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/g.php
[Thu Jul 30 11:12:58.443279 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.471956 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tx1.php
[Thu Jul 30 11:12:58.471999 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.506846 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xv.php
[Thu Jul 30 11:12:58.506887 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.534394 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x56.php
[Thu Jul 30 11:12:58.534437 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.585883 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/htaccess.php
[Thu Jul 30 11:12:58.585942 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.614018 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/readme.php
[Thu Jul 30 11:12:58.614062 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.641201 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x50.php
[Thu Jul 30 11:12:58.641244 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.668673 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fv.php
[Thu Jul 30 11:12:58.668716 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.693253 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file.php
[Thu Jul 30 11:12:58.693294 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.717841 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lsd.php
[Thu Jul 30 11:12:58.717881 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.795892 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/as.php
[Thu Jul 30 11:12:58.795935 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.814585 2026] [security2:error] [pid 2848974:tid 2848974] [client 43.160.225.169:56080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amsjqk9EEbzekskKTIAMXgAAADg"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 11:12:58.820343 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wsd.php
[Thu Jul 30 11:12:58.820384 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.847553 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gtc.php
[Thu Jul 30 11:12:58.847597 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.876572 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/atx.php
[Thu Jul 30 11:12:58.876622 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.965396 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/z60.php
[Thu Jul 30 11:12:58.965440 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:58.989850 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.php
[Thu Jul 30 11:12:58.989898 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.014532 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/m.php
[Thu Jul 30 11:12:59.014589 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.071657 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/themes.php
[Thu Jul 30 11:12:59.071705 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.095957 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:59.121586 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:59.186000 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/click.php
[Thu Jul 30 11:12:59.186049 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.210284 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/install.php
[Thu Jul 30 11:12:59.210325 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.235520 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lv.php
[Thu Jul 30 11:12:59.235586 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.264139 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/simple.php
[Thu Jul 30 11:12:59.264180 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.295178 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css.php
[Thu Jul 30 11:12:59.295222 2026] [access_compat:error] [pid 2848980:tid 2848980] [client 20.79.29.209:16194] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.574723 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cong.php
[Thu Jul 30 11:12:59.574785 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.596212 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:12:59.615104 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cong.php
[Thu Jul 30 11:12:59.615145 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.648581 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w.php
[Thu Jul 30 11:12:59.648624 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.672442 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 11:12:59.672484 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.691042 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ioxi-o.php
[Thu Jul 30 11:12:59.691097 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.711177 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0x.php
[Thu Jul 30 11:12:59.711219 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.729758 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css.php
[Thu Jul 30 11:12:59.729799 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.749092 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/222.php
[Thu Jul 30 11:12:59.749133 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.769266 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:12:59.818877 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 11:12:59.818988 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.840098 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:12:59.858710 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 11:12:59.858750 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.960395 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/abcd.php
[Thu Jul 30 11:12:59.960440 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.979330 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/autoload_classmap.php
[Thu Jul 30 11:12:59.979374 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:12:59.998007 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inputs.php
[Thu Jul 30 11:12:59.998050 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.016721 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 11:13:00.016776 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.035427 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa.php
[Thu Jul 30 11:13:00.035479 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.057410 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/themes
[Thu Jul 30 11:13:00.139651 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:00.162159 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:00.181588 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:00.200470 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/manager.php
[Thu Jul 30 11:13:00.200512 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.220580 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/item.php
[Thu Jul 30 11:13:00.220631 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.239588 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/plugins/Cache
[Thu Jul 30 11:13:00.258434 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 11:13:00.258476 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.277024 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mail.php
[Thu Jul 30 11:13:00.277093 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.318388 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:00.374842 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sx.php
[Thu Jul 30 11:13:00.374904 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.409111 2026] [ssl:error] [pid 2848981:tid 2848981] (EAI 2)Name or service not known: [client 144.76.19.72:50330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:00.409138 2026] [ssl:error] [pid 2848981:tid 2848981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:00.422091 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:00.460540 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa.php
[Thu Jul 30 11:13:00.460599 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.462470 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:50336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:00.462499 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:00.486639 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php
[Thu Jul 30 11:13:00.486684 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.510110 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/byp.php
[Thu Jul 30 11:13:00.510157 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.546509 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-trackback.php
[Thu Jul 30 11:13:00.546565 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.565613 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/index.php
[Thu Jul 30 11:13:00.565661 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.616379 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:00.650847 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:00.670683 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gmo.php
[Thu Jul 30 11:13:00.670736 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:00.734987 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:00.813091 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css
[Thu Jul 30 11:13:00.840530 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:00.903489 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:00.942656 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/filemanager
[Thu Jul 30 11:13:00.961442 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:00.980149 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:00.998871 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index
[Thu Jul 30 11:13:01.068518 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/uploads
[Thu Jul 30 11:13:01.103624 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:01.134223 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ww1.php
[Thu Jul 30 11:13:01.134265 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.199405 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about
[Thu Jul 30 11:13:01.218596 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin
[Thu Jul 30 11:13:01.237527 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/index.php
[Thu Jul 30 11:13:01.237587 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.256261 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css
[Thu Jul 30 11:13:01.275046 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/security.php
[Thu Jul 30 11:13:01.275108 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.371857 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:01.425989 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:01.444804 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:01.463342 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:01.490610 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:01.509254 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:01.540534 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/admin.php
[Thu Jul 30 11:13:01.540594 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.559308 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:01.603634 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:01.622109 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:01.641112 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/log.php
[Thu Jul 30 11:13:01.641161 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.673516 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class.php
[Thu Jul 30 11:13:01.673586 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.703528 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bless5.php
[Thu Jul 30 11:13:01.703587 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.738275 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:01.756921 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:01.775618 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lock360.php
[Thu Jul 30 11:13:01.775676 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.804112 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 11:13:01.804162 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.829659 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ioxi-o1.php
[Thu Jul 30 11:13:01.829710 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.860992 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/juuuu.php
[Thu Jul 30 11:13:01.861036 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.916327 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ha.php
[Thu Jul 30 11:13:01.916377 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.971370 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gg.php
[Thu Jul 30 11:13:01.971418 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:01.990206 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/we2.php
[Thu Jul 30 11:13:01.990253 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.010755 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/04.php
[Thu Jul 30 11:13:02.010803 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.035564 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/333.php
[Thu Jul 30 11:13:02.035612 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.055027 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/520.php
[Thu Jul 30 11:13:02.055084 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.075960 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ar.php
[Thu Jul 30 11:13:02.076010 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.154281 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 11:13:02.154330 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.172918 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xx.php
[Thu Jul 30 11:13:02.172962 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.191479 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gifclass4.php
[Thu Jul 30 11:13:02.191520 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.210101 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2clas.php
[Thu Jul 30 11:13:02.210143 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.228518 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ave.php
[Thu Jul 30 11:13:02.228567 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.246955 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wrt.php
[Thu Jul 30 11:13:02.246994 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.265314 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bibil.php
[Thu Jul 30 11:13:02.265352 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.312022 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/radio.php
[Thu Jul 30 11:13:02.312081 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.330521 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/files.php
[Thu Jul 30 11:13:02.330568 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.350651 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file7.php
[Thu Jul 30 11:13:02.350689 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.369408 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gifclass.php
[Thu Jul 30 11:13:02.369445 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.387836 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:02.406365 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/nox.php
[Thu Jul 30 11:13:02.406400 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.443011 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file48.php
[Thu Jul 30 11:13:02.443051 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.498933 2026] [security2:error] [pid 2849683:tid 2849683] [client 216.73.216.199:34331] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amsjrqb_0rslFf6k7iXaXwAAAAU"]
[Thu Jul 30 11:13:02.499198 2026] [security2:error] [pid 2849683:tid 2849683] [client 216.73.216.199:34331] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amsjrqb_0rslFf6k7iXaXwAAAAU"]
[Thu Jul 30 11:13:02.499426 2026] [security2:error] [pid 2849683:tid 2849683] [client 216.73.216.199:34331] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amsjrqb_0rslFf6k7iXaXwAAAAU"]
[Thu Jul 30 11:13:02.514013 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/info.php
[Thu Jul 30 11:13:02.514055 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.566639 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class9.php
[Thu Jul 30 11:13:02.566683 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.585273 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/la.php
[Thu Jul 30 11:13:02.585315 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.619535 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bless11.php
[Thu Jul 30 11:13:02.619590 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.685852 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ccou.php
[Thu Jul 30 11:13:02.685898 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.743391 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ton.php
[Thu Jul 30 11:13:02.743434 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.762103 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.php
[Thu Jul 30 11:13:02.762148 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 20.79.29.209:16151] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.870313 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file9.php
[Thu Jul 30 11:13:02.870369 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:02.951743 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ac.php
[Thu Jul 30 11:13:02.951789 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.030802 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/new4.php
[Thu Jul 30 11:13:03.030851 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.138320 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pop.php
[Thu Jul 30 11:13:03.138365 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.158202 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/az.php
[Thu Jul 30 11:13:03.158244 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.181891 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xaz.php
[Thu Jul 30 11:13:03.181932 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.201842 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/up4.php
[Thu Jul 30 11:13:03.201882 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.221830 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1aa.php
[Thu Jul 30 11:13:03.221874 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.241792 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/elp.php
[Thu Jul 30 11:13:03.241833 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.261507 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wtz.php
[Thu Jul 30 11:13:03.261556 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.282495 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/galex.php
[Thu Jul 30 11:13:03.282535 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.302278 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xb.php
[Thu Jul 30 11:13:03.302322 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.333040 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ova.php
[Thu Jul 30 11:13:03.333098 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.363665 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vx.php
[Thu Jul 30 11:13:03.363708 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.401857 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/rh.php
[Thu Jul 30 11:13:03.401902 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.423645 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/,init.php
[Thu Jul 30 11:13:03.423692 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.497790 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/env.php
[Thu Jul 30 11:13:03.497838 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.529657 2026] [ssl:error] [pid 2849868:tid 2849868] (EAI 2)Name or service not known: [client 144.76.19.72:50342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:03.529706 2026] [ssl:error] [pid 2849868:tid 2849868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:03.557979 2026] [security2:error] [pid 2850148:tid 2850148] [client 111.225.148.121:23358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsjr_ZfwKvftcPxQin7_wAAAFo"]
[Thu Jul 30 11:13:03.562898 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/elf.php
[Thu Jul 30 11:13:03.562952 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.583101 2026] [ssl:error] [pid 2818972:tid 2818972] (EAI 2)Name or service not known: [client 144.76.19.72:50354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:03.583126 2026] [ssl:error] [pid 2818972:tid 2818972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:03.601022 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cyr6l.php
[Thu Jul 30 11:13:03.601076 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.621042 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/51whn.php
[Thu Jul 30 11:13:03.621101 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.641127 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa-rex.php7
[Thu Jul 30 11:13:03.641172 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.661194 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfanew.php7
[Thu Jul 30 11:13:03.661239 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.691218 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tanliste.php
[Thu Jul 30 11:13:03.691262 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.714019 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/atomlib.php.suspected
[Thu Jul 30 11:13:03.735295 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ehszwsab.php
[Thu Jul 30 11:13:03.735336 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.755542 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/meta.php
[Thu Jul 30 11:13:03.755590 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.775461 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/colleen986.php
[Thu Jul 30 11:13:03.775515 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.795322 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/szezaxab.php
[Thu Jul 30 11:13:03.795363 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.817140 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/function.php
[Thu Jul 30 11:13:03.817183 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.837077 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cierra632.php
[Thu Jul 30 11:13:03.837120 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.904968 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ciera702.php
[Thu Jul 30 11:13:03.905010 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:03.987530 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/chaya986.php
[Thu Jul 30 11:13:03.987586 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.008348 2026] [core:error] [pid 2848984:tid 2848984] [client 66.249.66.9:57131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:13:04.008370 2026] [core:error] [pid 2848984:tid 2848984] [client 66.249.66.9:57131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:13:04.009058 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/charmaine744.php
[Thu Jul 30 11:13:04.009112 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.047837 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/charity744.php
[Thu Jul 30 11:13:04.047884 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.075729 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/camryn118.php
[Thu Jul 30 11:13:04.075782 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.154658 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/byrdie906.php
[Thu Jul 30 11:13:04.154703 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.192749 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/async-upload.php
[Thu Jul 30 11:13:04.192793 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.212540 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/br5is.php
[Thu Jul 30 11:13:04.212593 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.234646 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bonita76.php
[Thu Jul 30 11:13:04.234690 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.254576 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/angie712.php
[Thu Jul 30 11:13:04.254621 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.274670 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gecko.php
[Thu Jul 30 11:13:04.274715 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.294717 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/andria828.php
[Thu Jul 30 11:13:04.294760 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.314623 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/botol.php
[Thu Jul 30 11:13:04.314688 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.334439 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/amya985.php
[Thu Jul 30 11:13:04.334488 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.354692 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ui.php
[Thu Jul 30 11:13:04.354730 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.374485 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zz.php
[Thu Jul 30 11:13:04.374527 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.394380 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/allyson162.php
[Thu Jul 30 11:13:04.394421 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.414232 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/digiwoll.php
[Thu Jul 30 11:13:04.414275 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.435036 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tinyfilemanager.php
[Thu Jul 30 11:13:04.435095 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.477517 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/70.php
[Thu Jul 30 11:13:04.477571 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.511722 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/content.php
[Thu Jul 30 11:13:04.511766 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.575749 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lord.php
[Thu Jul 30 11:13:04.575802 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.659376 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cyl.php
[Thu Jul 30 11:13:04.659432 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.679274 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfav4.1-tesla.php
[Thu Jul 30 11:13:04.679320 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.683942 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/.env"] [unique_id "amsjsGyrfKOkRxTHPPClmgAAADo"]
[Thu Jul 30 11:13:04.684152 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/.env"] [unique_id "amsjsGyrfKOkRxTHPPClmgAAADo"]
[Thu Jul 30 11:13:04.699373 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/-.php
[Thu Jul 30 11:13:04.699415 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.734356 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fx.php
[Thu Jul 30 11:13:04.734399 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.754629 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/p0wny.php
[Thu Jul 30 11:13:04.754677 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.774762 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/69.php
[Thu Jul 30 11:13:04.774808 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.794765 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/67.php
[Thu Jul 30 11:13:04.794807 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.814716 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/68.php
[Thu Jul 30 11:13:04.814754 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.824338 2026] [security2:error] [pid 2848981:tid 2848981] [client 111.225.148.140:23924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "elhassanartist.com"] [uri "/robots.txt"] [unique_id "amsjsDc0AxmolnlG3y1SbAAAAEI"]
[Thu Jul 30 11:13:04.834588 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/66.php
[Thu Jul 30 11:13:04.834626 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.886851 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/65.php
[Thu Jul 30 11:13:04.886895 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.910473 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/64.php
[Thu Jul 30 11:13:04.910517 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.930886 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/63.php
[Thu Jul 30 11:13:04.930990 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.954956 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/62.php
[Thu Jul 30 11:13:04.954996 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:04.996485 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/61.php
[Thu Jul 30 11:13:04.996526 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.032463 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/60.php
[Thu Jul 30 11:13:05.032513 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.052261 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/59.php
[Thu Jul 30 11:13:05.052305 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.073003 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/58.php
[Thu Jul 30 11:13:05.073044 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.092836 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/57.php
[Thu Jul 30 11:13:05.092878 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.112804 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/56.php
[Thu Jul 30 11:13:05.112846 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.137161 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/55.php
[Thu Jul 30 11:13:05.137204 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.160480 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/51.php
[Thu Jul 30 11:13:05.160522 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.185288 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/54.php
[Thu Jul 30 11:13:05.185332 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.205367 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/53.php
[Thu Jul 30 11:13:05.205412 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.228410 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/52.php
[Thu Jul 30 11:13:05.228457 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.274936 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsGyrfKOkRxTHPPClmgAAADo"]
[Thu Jul 30 11:13:05.275478 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/50.php
[Thu Jul 30 11:13:05.275520 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.295405 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/49.php
[Thu Jul 30 11:13:05.295453 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.295483 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/api/.env"] [unique_id "amsjsWyrfKOkRxTHPPClmwAAADo"]
[Thu Jul 30 11:13:05.295711 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/api/.env"] [unique_id "amsjsWyrfKOkRxTHPPClmwAAADo"]
[Thu Jul 30 11:13:05.362499 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/48.php
[Thu Jul 30 11:13:05.362541 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.385866 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsWyrfKOkRxTHPPClmwAAADo"]
[Thu Jul 30 11:13:05.397920 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/47.php
[Thu Jul 30 11:13:05.397971 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.406170 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/backend/.env"] [unique_id "amsjsWyrfKOkRxTHPPClnAAAADo"]
[Thu Jul 30 11:13:05.406371 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/backend/.env"] [unique_id "amsjsWyrfKOkRxTHPPClnAAAADo"]
[Thu Jul 30 11:13:05.418102 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/46.php
[Thu Jul 30 11:13:05.418144 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.452491 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/44.php
[Thu Jul 30 11:13:05.452534 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.478488 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/43.php
[Thu Jul 30 11:13:05.478530 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.495422 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsWyrfKOkRxTHPPClnAAAADo"]
[Thu Jul 30 11:13:05.555685 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/37.php
[Thu Jul 30 11:13:05.555728 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.623635 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/admin/.env"] [unique_id "amsjsWyrfKOkRxTHPPClngAAADo"]
[Thu Jul 30 11:13:05.623854 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/admin/.env"] [unique_id "amsjsWyrfKOkRxTHPPClngAAADo"]
[Thu Jul 30 11:13:05.642613 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/42.php
[Thu Jul 30 11:13:05.642661 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.688739 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/41.php
[Thu Jul 30 11:13:05.688784 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.714421 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsWyrfKOkRxTHPPClngAAADo"]
[Thu Jul 30 11:13:05.718232 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/40.php
[Thu Jul 30 11:13:05.718274 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.736264 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/.env"] [unique_id "amsjsRIp20JLis4T3gjMrQAAACA"]
[Thu Jul 30 11:13:05.736407 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/.env"] [unique_id "amsjsRIp20JLis4T3gjMrQAAACA"]
[Thu Jul 30 11:13:05.748484 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/39.php
[Thu Jul 30 11:13:05.748527 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.821492 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/38.php
[Thu Jul 30 11:13:05.821541 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.844462 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/36.php
[Thu Jul 30 11:13:05.844507 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.864217 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/35.php
[Thu Jul 30 11:13:05.864256 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.881167 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsRIp20JLis4T3gjMrQAAACA"]
[Thu Jul 30 11:13:05.885950 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/34.php
[Thu Jul 30 11:13:05.885990 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.898254 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/api/.env"] [unique_id "amsjsRIp20JLis4T3gjMrgAAACA"]
[Thu Jul 30 11:13:05.898450 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/api/.env"] [unique_id "amsjsRIp20JLis4T3gjMrgAAACA"]
[Thu Jul 30 11:13:05.900540 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/laravel/.env"] [unique_id "amsjsWyrfKOkRxTHPPCloAAAADo"]
[Thu Jul 30 11:13:05.900695 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/laravel/.env"] [unique_id "amsjsWyrfKOkRxTHPPCloAAAADo"]
[Thu Jul 30 11:13:05.905642 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/123456.php
[Thu Jul 30 11:13:05.905678 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.925389 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/33.php
[Thu Jul 30 11:13:05.925430 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.968520 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/25.php
[Thu Jul 30 11:13:05.968576 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:05.988477 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/24.php
[Thu Jul 30 11:13:05.988524 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.020709 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsWyrfKOkRxTHPPCloAAAADo"]
[Thu Jul 30 11:13:06.026849 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsRIp20JLis4T3gjMrgAAACA"]
[Thu Jul 30 11:13:06.041018 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/core/.env"] [unique_id "amsjsmyrfKOkRxTHPPCloQAAADo"]
[Thu Jul 30 11:13:06.041237 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/core/.env"] [unique_id "amsjsmyrfKOkRxTHPPCloQAAADo"]
[Thu Jul 30 11:13:06.043816 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/backend/.env"] [unique_id "amsjshIp20JLis4T3gjMrwAAACA"]
[Thu Jul 30 11:13:06.043952 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/backend/.env"] [unique_id "amsjshIp20JLis4T3gjMrwAAACA"]
[Thu Jul 30 11:13:06.064936 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/12345.php
[Thu Jul 30 11:13:06.064976 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.085864 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/1234.php
[Thu Jul 30 11:13:06.085911 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.105692 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/10.php
[Thu Jul 30 11:13:06.105736 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.125613 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/9.php
[Thu Jul 30 11:13:06.125658 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.145520 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/8.php
[Thu Jul 30 11:13:06.145573 2026] [access_compat:error] [pid 2848846:tid 2848846] [client 20.79.29.209:16199] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.152320 2026] [ssl:error] [pid 2848913:tid 2848913] (70014)End of file found: [client 216.73.216.199:22995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:06.208260 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjshIp20JLis4T3gjMrwAAACA"]
[Thu Jul 30 11:13:06.210694 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsmyrfKOkRxTHPPCloQAAADo"]
[Thu Jul 30 11:13:06.242366 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/7.php
[Thu Jul 30 11:13:06.242421 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.264759 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/6.php
[Thu Jul 30 11:13:06.264810 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.320712 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/5.php
[Thu Jul 30 11:13:06.320773 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.398994 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/4.php
[Thu Jul 30 11:13:06.399044 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.412403 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/admin/.env"] [unique_id "amsjshIp20JLis4T3gjMsQAAACA"]
[Thu Jul 30 11:13:06.412607 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/admin/.env"] [unique_id "amsjshIp20JLis4T3gjMsQAAACA"]
[Thu Jul 30 11:13:06.422749 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/.env.example"] [unique_id "amsjsmyrfKOkRxTHPPClowAAADo"]
[Thu Jul 30 11:13:06.422895 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/.env.example"] [unique_id "amsjsmyrfKOkRxTHPPClowAAADo"]
[Thu Jul 30 11:13:06.461030 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/3.php
[Thu Jul 30 11:13:06.461099 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.483322 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/2.php
[Thu Jul 30 11:13:06.483368 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.506485 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/1.php
[Thu Jul 30 11:13:06.506565 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.528926 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/0.php
[Thu Jul 30 11:13:06.528971 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.532309 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjshIp20JLis4T3gjMsQAAACA"]
[Thu Jul 30 11:13:06.550963 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/z.php
[Thu Jul 30 11:13:06.551004 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.573800 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/new
[Thu Jul 30 11:13:06.595234 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsmyrfKOkRxTHPPClowAAADo"]
[Thu Jul 30 11:13:06.610916 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/y.php
[Thu Jul 30 11:13:06.610960 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.615419 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/app/.env"] [unique_id "amsjsmyrfKOkRxTHPPClpAAAADo"]
[Thu Jul 30 11:13:06.615647 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/app/.env"] [unique_id "amsjsmyrfKOkRxTHPPClpAAAADo"]
[Thu Jul 30 11:13:06.639712 2026] [ssl:error] [pid 2850155:tid 2850155] (EAI 2)Name or service not known: [client 144.76.19.72:50356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:06.639756 2026] [ssl:error] [pid 2850155:tid 2850155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:06.641519 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/x.php
[Thu Jul 30 11:13:06.641572 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.697483 2026] [ssl:error] [pid 2841471:tid 2841471] (EAI 2)Name or service not known: [client 144.76.19.72:50358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:06.697511 2026] [ssl:error] [pid 2841471:tid 2841471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:06.710538 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/w.php
[Thu Jul 30 11:13:06.710594 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.730429 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/laravel/.env"] [unique_id "amsjshIp20JLis4T3gjMswAAACA"]
[Thu Jul 30 11:13:06.730632 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/laravel/.env"] [unique_id "amsjshIp20JLis4T3gjMswAAACA"]
[Thu Jul 30 11:13:06.736996 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/v.php
[Thu Jul 30 11:13:06.737038 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.766260 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/u.php
[Thu Jul 30 11:13:06.766307 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.783371 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsmyrfKOkRxTHPPClpAAAADo"]
[Thu Jul 30 11:13:06.793717 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/t.php
[Thu Jul 30 11:13:06.793762 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.803642 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/dev/.env"] [unique_id "amsjsmyrfKOkRxTHPPClpQAAADo"]
[Thu Jul 30 11:13:06.803817 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/dev/.env"] [unique_id "amsjsmyrfKOkRxTHPPClpQAAADo"]
[Thu Jul 30 11:13:06.823422 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/s.php
[Thu Jul 30 11:13:06.823467 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.846702 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/r.php
[Thu Jul 30 11:13:06.846746 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.883090 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/q.php
[Thu Jul 30 11:13:06.883152 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.900399 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjshIp20JLis4T3gjMswAAACA"]
[Thu Jul 30 11:13:06.905874 2026] [security2:error] [pid 2849869:tid 2849869] [client 94.154.43.229:20568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "yorkguitarworkshop.co.uk"] [uri "/.env"] [unique_id "amsjsgN5ziqETK-1qEgdHgAAAFE"]
[Thu Jul 30 11:13:06.906056 2026] [security2:error] [pid 2849869:tid 2849869] [client 94.154.43.229:20568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "yorkguitarworkshop.co.uk"] [uri "/.env"] [unique_id "amsjsgN5ziqETK-1qEgdHgAAAFE"]
[Thu Jul 30 11:13:06.906301 2026] [security2:error] [pid 2849869:tid 2849869] [client 94.154.43.229:20568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "yorkguitarworkshop.co.uk"] [uri "/.env"] [unique_id "amsjsgN5ziqETK-1qEgdHgAAAFE"]
[Thu Jul 30 11:13:06.917523 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/core/.env"] [unique_id "amsjshIp20JLis4T3gjMtAAAACA"]
[Thu Jul 30 11:13:06.917715 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/core/.env"] [unique_id "amsjshIp20JLis4T3gjMtAAAACA"]
[Thu Jul 30 11:13:06.919688 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/p.php
[Thu Jul 30 11:13:06.919730 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:06.932241 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsmyrfKOkRxTHPPClpQAAADo"]
[Thu Jul 30 11:13:07.006313 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/o.php
[Thu Jul 30 11:13:07.006362 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.035353 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/n.php
[Thu Jul 30 11:13:07.035401 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.057531 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/m.php
[Thu Jul 30 11:13:07.057592 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.079654 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/l.php
[Thu Jul 30 11:13:07.079697 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.096152 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjshIp20JLis4T3gjMtAAAACA"]
[Thu Jul 30 11:13:07.112278 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/k.php
[Thu Jul 30 11:13:07.112325 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.143148 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/i.php
[Thu Jul 30 11:13:07.143204 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.165301 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/j.php
[Thu Jul 30 11:13:07.165344 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.166339 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/server/.env"] [unique_id "amsjs2yrfKOkRxTHPPClpwAAADo"]
[Thu Jul 30 11:13:07.166537 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/server/.env"] [unique_id "amsjs2yrfKOkRxTHPPClpwAAADo"]
[Thu Jul 30 11:13:07.187917 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/backup
[Thu Jul 30 11:13:07.210183 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/h.php
[Thu Jul 30 11:13:07.210230 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.266093 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/old
[Thu Jul 30 11:13:07.297744 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/.env.example"] [unique_id "amsjsxIp20JLis4T3gjMtgAAACA"]
[Thu Jul 30 11:13:07.297939 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/.env.example"] [unique_id "amsjsxIp20JLis4T3gjMtgAAACA"]
[Thu Jul 30 11:13:07.300723 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/g.php
[Thu Jul 30 11:13:07.300764 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.313675 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjs2yrfKOkRxTHPPClpwAAADo"]
[Thu Jul 30 11:13:07.333838 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/.env.save"] [unique_id "amsjs2yrfKOkRxTHPPClqAAAADo"]
[Thu Jul 30 11:13:07.334004 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/.env.save"] [unique_id "amsjs2yrfKOkRxTHPPClqAAAADo"]
[Thu Jul 30 11:13:07.342093 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/test
[Thu Jul 30 11:13:07.389764 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/f.php
[Thu Jul 30 11:13:07.389811 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.425483 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsxIp20JLis4T3gjMtgAAACA"]
[Thu Jul 30 11:13:07.439756 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/blog
[Thu Jul 30 11:13:07.447147 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/app/.env"] [unique_id "amsjsxIp20JLis4T3gjMtwAAACA"]
[Thu Jul 30 11:13:07.447338 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/app/.env"] [unique_id "amsjsxIp20JLis4T3gjMtwAAACA"]
[Thu Jul 30 11:13:07.466162 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/e.php
[Thu Jul 30 11:13:07.466208 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.490243 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wordpress
[Thu Jul 30 11:13:07.496178 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjs2yrfKOkRxTHPPClqAAAADo"]
[Thu Jul 30 11:13:07.512454 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/d.php
[Thu Jul 30 11:13:07.512497 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.571084 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/c.php
[Thu Jul 30 11:13:07.571133 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.606214 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsxIp20JLis4T3gjMtwAAACA"]
[Thu Jul 30 11:13:07.611525 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/b.php
[Thu Jul 30 11:13:07.611579 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.623298 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/dev/.env"] [unique_id "amsjsxIp20JLis4T3gjMuAAAACA"]
[Thu Jul 30 11:13:07.623488 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/dev/.env"] [unique_id "amsjsxIp20JLis4T3gjMuAAAACA"]
[Thu Jul 30 11:13:07.645984 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/a.php
[Thu Jul 30 11:13:07.646030 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.668154 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/js.php
[Thu Jul 30 11:13:07.668196 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.690310 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:07.710116 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/staging/.env"] [unique_id "amsjs2yrfKOkRxTHPPClqgAAADo"]
[Thu Jul 30 11:13:07.710323 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/staging/.env"] [unique_id "amsjs2yrfKOkRxTHPPClqgAAADo"]
[Thu Jul 30 11:13:07.712452 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jembut.php
[Thu Jul 30 11:13:07.712490 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.734643 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class.php
[Thu Jul 30 11:13:07.734686 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.757386 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/seo.php
[Thu Jul 30 11:13:07.757427 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.784764 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsxIp20JLis4T3gjMuAAAACA"]
[Thu Jul 30 11:13:07.785615 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cannonical.php
[Thu Jul 30 11:13:07.785656 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.825577 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/format.php
[Thu Jul 30 11:13:07.825623 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.883871 2026] [security2:error] [pid 2849776:tid 2849776] [client 185.93.89.167:13145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjs2yrfKOkRxTHPPClqgAAADo"]
[Thu Jul 30 11:13:07.907477 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/loader.php
[Thu Jul 30 11:13:07.907522 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.929646 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/log.php
[Thu Jul 30 11:13:07.929690 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.951843 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/functions.php
[Thu Jul 30 11:13:07.951884 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:07.985794 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/server/.env"] [unique_id "amsjsxIp20JLis4T3gjMugAAACA"]
[Thu Jul 30 11:13:07.985980 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/server/.env"] [unique_id "amsjsxIp20JLis4T3gjMugAAACA"]
[Thu Jul 30 11:13:07.989787 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/taxonomy.php
[Thu Jul 30 11:13:07.989828 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.056585 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/footer.php
[Thu Jul 30 11:13:08.056635 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.078183 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjsxIp20JLis4T3gjMugAAACA"]
[Thu Jul 30 11:13:08.078741 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mouse.php
[Thu Jul 30 11:13:08.078780 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.095408 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/.env.save"] [unique_id "amsjtBIp20JLis4T3gjMuwAAACA"]
[Thu Jul 30 11:13:08.095610 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/.env.save"] [unique_id "amsjtBIp20JLis4T3gjMuwAAACA"]
[Thu Jul 30 11:13:08.100979 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hp.php
[Thu Jul 30 11:13:08.101022 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.123108 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/asu.php
[Thu Jul 30 11:13:08.123153 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.145351 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sql.php
[Thu Jul 30 11:13:08.145394 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.171808 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tol.php
[Thu Jul 30 11:13:08.171854 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.185619 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjtBIp20JLis4T3gjMuwAAACA"]
[Thu Jul 30 11:13:08.202801 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lol.php
[Thu Jul 30 11:13:08.202845 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.243660 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dor.php
[Thu Jul 30 11:13:08.243711 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.287722 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/coy.php
[Thu Jul 30 11:13:08.287769 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.309815 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhassanartist.com"] [uri "/staging/.env"] [unique_id "amsjtBIp20JLis4T3gjMvQAAACA"]
[Thu Jul 30 11:13:08.310009 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elhassanartist.com"] [uri "/staging/.env"] [unique_id "amsjtBIp20JLis4T3gjMvQAAACA"]
[Thu Jul 30 11:13:08.310166 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hehe.php
[Thu Jul 30 11:13:08.310206 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.337606 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/php.php
[Thu Jul 30 11:13:08.337647 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.364821 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/for.php
[Thu Jul 30 11:13:08.364865 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.386950 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/perl.php
[Thu Jul 30 11:13:08.386994 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.396009 2026] [security2:error] [pid 2839843:tid 2839843] [client 185.93.89.167:6975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elhassanartist.com"] [uri "/index.php"] [unique_id "amsjtBIp20JLis4T3gjMvQAAACA"]
[Thu Jul 30 11:13:08.409090 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi.php
[Thu Jul 30 11:13:08.409131 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.431252 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tmp.php
[Thu Jul 30 11:13:08.431295 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.453414 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/login.php
[Thu Jul 30 11:13:08.453458 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.510472 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/logout.php
[Thu Jul 30 11:13:08.510516 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.532487 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fuck.php
[Thu Jul 30 11:13:08.532523 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.554601 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/outside.php
[Thu Jul 30 11:13:08.554643 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.576704 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/exists.php
[Thu Jul 30 11:13:08.576743 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.598965 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/exit.php
[Thu Jul 30 11:13:08.599006 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.621034 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/b374k.php
[Thu Jul 30 11:13:08.621086 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.642999 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/assets.php
[Thu Jul 30 11:13:08.643039 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.682862 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/system.php
[Thu Jul 30 11:13:08.682907 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.765844 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/git.php
[Thu Jul 30 11:13:08.765887 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.813140 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/got.php
[Thu Jul 30 11:13:08.813186 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.838260 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/app.php
[Thu Jul 30 11:13:08.838299 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.900543 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/application.php
[Thu Jul 30 11:13:08.900596 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:08.958035 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/clown.php
[Thu Jul 30 11:13:08.958091 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.001679 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/byp403.php
[Thu Jul 30 11:13:09.001722 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.040764 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/green.php
[Thu Jul 30 11:13:09.040807 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.079234 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fm.php
[Thu Jul 30 11:13:09.079276 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.138282 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/uploads.php
[Thu Jul 30 11:13:09.138321 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.181842 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/uploader.php
[Thu Jul 30 11:13:09.181884 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.204563 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/remote.php
[Thu Jul 30 11:13:09.204604 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.292416 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shellbypass.php
[Thu Jul 30 11:13:09.292458 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.366839 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/backup.php
[Thu Jul 30 11:13:09.366881 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.388873 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pwnd.php
[Thu Jul 30 11:13:09.388911 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.412915 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/root.php
[Thu Jul 30 11:13:09.412956 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.421753 2026] [security2:error] [pid 2850088:tid 2850088] [client 43.135.145.117:59164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amsjtUkvRJ6_umUaIENApgAAAFc"]
[Thu Jul 30 11:13:09.435039 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/rootshell.php
[Thu Jul 30 11:13:09.435092 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.457716 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/yuuki.php
[Thu Jul 30 11:13:09.457753 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.479695 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/register.php
[Thu Jul 30 11:13:09.479735 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.501901 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/developer.php
[Thu Jul 30 11:13:09.501939 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.549974 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dev.php
[Thu Jul 30 11:13:09.550015 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.572175 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/devil.php
[Thu Jul 30 11:13:09.572218 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.595971 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zero.php
[Thu Jul 30 11:13:09.596013 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.618085 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/byte.php
[Thu Jul 30 11:13:09.618128 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.641914 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/+.php
[Thu Jul 30 11:13:09.641957 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.708301 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ucenhaxor.php
[Thu Jul 30 11:13:09.708346 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.736897 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/radio.php
[Thu Jul 30 11:13:09.736939 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16206] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.752883 2026] [ssl:error] [pid 2848986:tid 2848986] (EAI 2)Name or service not known: [client 144.76.19.72:31732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:09.752915 2026] [ssl:error] [pid 2848986:tid 2848986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:09.766946 2026] [security2:error] [pid 2841474:tid 2841474] [client 216.73.216.199:13960] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/serbian/errmsg.sys"] [unique_id "amsjtTam228Ita22vyenwQAAACY"]
[Thu Jul 30 11:13:09.767254 2026] [security2:error] [pid 2841474:tid 2841474] [client 216.73.216.199:13960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/serbian/errmsg.sys"] [unique_id "amsjtTam228Ita22vyenwQAAACY"]
[Thu Jul 30 11:13:09.767463 2026] [security2:error] [pid 2841474:tid 2841474] [client 216.73.216.199:13960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/serbian/errmsg.sys"] [unique_id "amsjtTam228Ita22vyenwQAAACY"]
[Thu Jul 30 11:13:09.814163 2026] [ssl:error] [pid 2850047:tid 2850047] (EAI 2)Name or service not known: [client 144.76.19.72:31734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:09.814199 2026] [ssl:error] [pid 2850047:tid 2850047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:09.825075 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/coba.php
[Thu Jul 30 11:13:09.825125 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.847738 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/replace.php
[Thu Jul 30 11:13:09.847781 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.873331 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/echo.php
[Thu Jul 30 11:13:09.873375 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:09.932766 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/haxor.php
[Thu Jul 30 11:13:09.932814 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.017494 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sym.php
[Thu Jul 30 11:13:10.017542 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.036599 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/symlink.php
[Thu Jul 30 11:13:10.036645 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.056475 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sym403.php
[Thu Jul 30 11:13:10.056515 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.075059 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fw.php
[Thu Jul 30 11:13:10.075114 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.105424 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xyz.php
[Thu Jul 30 11:13:10.105478 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.125921 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tolol.php
[Thu Jul 30 11:13:10.125959 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.165369 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anjing.php
[Thu Jul 30 11:13:10.165415 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.200029 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/memek.php
[Thu Jul 30 11:13:10.200087 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.218508 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jancok.php
[Thu Jul 30 11:13:10.218559 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.236898 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/goblok.php
[Thu Jul 30 11:13:10.236934 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.275761 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso1.php
[Thu Jul 30 11:13:10.275803 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.306142 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 11:13:10.306184 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.324704 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso.php
[Thu Jul 30 11:13:10.324743 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.343193 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fox.php
[Thu Jul 30 11:13:10.343239 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.361781 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/CNsAwv8e6ui.php
[Thu Jul 30 11:13:10.361818 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.380220 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mass.php
[Thu Jul 30 11:13:10.380259 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.398891 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/digi.php
[Thu Jul 30 11:13:10.398931 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.427529 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indoxploit.php
[Thu Jul 30 11:13:10.427583 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.453498 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tesla.php
[Thu Jul 30 11:13:10.453540 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.482956 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfates.php
[Thu Jul 30 11:13:10.482998 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.501723 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/themes.php
[Thu Jul 30 11:13:10.501766 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.554853 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/update.php
[Thu Jul 30 11:13:10.554897 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.573408 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/upgrade.php
[Thu Jul 30 11:13:10.573451 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.592234 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ajax.php
[Thu Jul 30 11:13:10.592281 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.610735 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-mail.php
[Thu Jul 30 11:13:10.610780 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.648714 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dashboard.php
[Thu Jul 30 11:13:10.648760 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.692970 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/misc.php
[Thu Jul 30 11:13:10.693012 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.762057 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class-IXR.php
[Thu Jul 30 11:13:10.762120 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.784938 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/plugin.php
[Thu Jul 30 11:13:10.784981 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.862602 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/revision.php
[Thu Jul 30 11:13:10.862651 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.881330 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/screen.php
[Thu Jul 30 11:13:10.881372 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.899977 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/atomlib.php
[Thu Jul 30 11:13:10.900017 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.918560 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class-wp.php
[Thu Jul 30 11:13:10.918604 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.958659 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/date.php
[Thu Jul 30 11:13:10.958705 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.979635 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/deprecated.php
[Thu Jul 30 11:13:10.979677 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:10.998241 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/feed-atom.php
[Thu Jul 30 11:13:10.998284 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.016883 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/feed.php
[Thu Jul 30 11:13:11.016926 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.035486 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/defense.php
[Thu Jul 30 11:13:11.035529 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.059591 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/defend.php
[Thu Jul 30 11:13:11.059635 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.107669 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/load.php
[Thu Jul 30 11:13:11.107715 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.142297 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/options.php
[Thu Jul 30 11:13:11.142347 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.204561 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/option.php
[Thu Jul 30 11:13:11.204619 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.267511 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/query.php
[Thu Jul 30 11:13:11.267568 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.319938 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/post.php
[Thu Jul 30 11:13:11.319985 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.339076 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sessions.php
[Thu Jul 30 11:13:11.339120 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.358327 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/rss.php
[Thu Jul 30 11:13:11.358372 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.382835 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sitemaps.php
[Thu Jul 30 11:13:11.382875 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.401424 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/template.php
[Thu Jul 30 11:13:11.401467 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.422212 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vars.php
[Thu Jul 30 11:13:11.422256 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.441541 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/version.php
[Thu Jul 30 11:13:11.441595 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.460308 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/user.php
[Thu Jul 30 11:13:11.460362 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.482290 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/widgets.php
[Thu Jul 30 11:13:11.482333 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.500944 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/theme.php
[Thu Jul 30 11:13:11.500983 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.550813 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/category.php
[Thu Jul 30 11:13:11.550856 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.569410 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/block.php
[Thu Jul 30 11:13:11.569450 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.600024 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin-bar.php
[Thu Jul 30 11:13:11.600077 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.618727 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mar.php
[Thu Jul 30 11:13:11.618770 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.679578 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/revisi.php
[Thu Jul 30 11:13:11.679622 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.700923 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-activate.php
[Thu Jul 30 11:13:11.700968 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.719745 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xmrlpc.php
[Thu Jul 30 11:13:11.719790 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.738408 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-settings.php
[Thu Jul 30 11:13:11.738454 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.774486 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kon.php
[Thu Jul 30 11:13:11.774531 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.793803 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kontol.php
[Thu Jul 30 11:13:11.793844 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.833391 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp.php
[Thu Jul 30 11:13:11.833438 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.897627 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/readme.php
[Thu Jul 30 11:13:11.897673 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.918477 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/error_log.php
[Thu Jul 30 11:13:11.918522 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.937848 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin.php
[Thu Jul 30 11:13:11.937891 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.956353 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-login.php
[Thu Jul 30 11:13:11.956397 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.974937 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/administrator.php
[Thu Jul 30 11:13:11.974980 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:11.993590 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-load.php
[Thu Jul 30 11:13:11.993634 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.012126 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes.php
[Thu Jul 30 11:13:12.012168 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.076022 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content.php
[Thu Jul 30 11:13:12.076066 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.096129 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index.php
[Thu Jul 30 11:13:12.096178 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.114774 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bypp.php
[Thu Jul 30 11:13:12.114815 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.158997 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/byp7.php
[Thu Jul 30 11:13:12.159041 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.177526 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anonsec.php
[Thu Jul 30 11:13:12.177576 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.225595 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anon.php
[Thu Jul 30 11:13:12.225639 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.244188 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bypas.php
[Thu Jul 30 11:13:12.244233 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.303781 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ucen.php
[Thu Jul 30 11:13:12.303840 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.339481 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/miya.php
[Thu Jul 30 11:13:12.339524 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.340679 2026] [authz_core:error] [pid 2815976:tid 2815976] [client 66.249.66.35:40570] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:13:12.343395 2026] [authz_core:error] [pid 2815976:tid 2815976] [client 66.249.66.35:40570] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:13:12.362401 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/error.php
[Thu Jul 30 11:13:12.362443 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.381951 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfav.php
[Thu Jul 30 11:13:12.381996 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.400472 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alpas.php
[Thu Jul 30 11:13:12.400517 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.419060 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa.php
[Thu Jul 30 11:13:12.419119 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.486448 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0byte.php
[Thu Jul 30 11:13:12.486492 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.505222 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index3.php
[Thu Jul 30 11:13:12.505267 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.537791 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index2.php
[Thu Jul 30 11:13:12.537846 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.566099 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index1.php
[Thu Jul 30 11:13:12.566141 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.584609 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/303.php
[Thu Jul 30 11:13:12.584649 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.636528 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/505.php
[Thu Jul 30 11:13:12.636584 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.671002 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/500.php
[Thu Jul 30 11:13:12.671049 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.702863 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/77.php
[Thu Jul 30 11:13:12.702914 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.724120 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/76.php
[Thu Jul 30 11:13:12.724166 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.747362 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/74.php
[Thu Jul 30 11:13:12.747408 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.773668 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-config.php
[Thu Jul 30 11:13:12.773715 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.792338 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/75.php
[Thu Jul 30 11:13:12.792380 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.814734 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/71.php
[Thu Jul 30 11:13:12.814779 2026] [access_compat:error] [pid 2848988:tid 2848988] [client 20.79.29.209:16226] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.870060 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:31738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:12.870104 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:12.881879 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/72.php
[Thu Jul 30 11:13:12.881927 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.910979 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/70.php
[Thu Jul 30 11:13:12.911025 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.924760 2026] [ssl:error] [pid 2841465:tid 2841465] (EAI 2)Name or service not known: [client 144.76.19.72:31752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:12.924783 2026] [ssl:error] [pid 2841465:tid 2841465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:12.932501 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/69.php
[Thu Jul 30 11:13:12.932558 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:12.990663 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/68.php
[Thu Jul 30 11:13:12.990708 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.011500 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/66.php
[Thu Jul 30 11:13:13.011558 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.032162 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/67.php
[Thu Jul 30 11:13:13.032209 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.052524 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/65.php
[Thu Jul 30 11:13:13.052578 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.079862 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/64.php
[Thu Jul 30 11:13:13.079905 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.103271 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/63.php
[Thu Jul 30 11:13:13.103315 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.123770 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/62.php
[Thu Jul 30 11:13:13.123814 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.144215 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/61.php
[Thu Jul 30 11:13:13.144257 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.164653 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/60.php
[Thu Jul 30 11:13:13.164696 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.190142 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/58.php
[Thu Jul 30 11:13:13.190186 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.236788 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/59.php
[Thu Jul 30 11:13:13.236833 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.257375 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/57.php
[Thu Jul 30 11:13:13.257419 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.289519 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/55.php
[Thu Jul 30 11:13:13.289579 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.341092 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/54.php
[Thu Jul 30 11:13:13.341143 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.404761 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/53.php
[Thu Jul 30 11:13:13.404807 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.461927 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/52.php
[Thu Jul 30 11:13:13.461975 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.482876 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/51.php
[Thu Jul 30 11:13:13.482922 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.503902 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/50.php
[Thu Jul 30 11:13:13.503948 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.526009 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/49.php
[Thu Jul 30 11:13:13.526054 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.546701 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/48.php
[Thu Jul 30 11:13:13.546747 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.567305 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/47.php
[Thu Jul 30 11:13:13.567347 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.587971 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/46.php
[Thu Jul 30 11:13:13.588015 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.608434 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/44.php
[Thu Jul 30 11:13:13.608486 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.629012 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/43.php
[Thu Jul 30 11:13:13.629055 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.670149 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/42.php
[Thu Jul 30 11:13:13.670195 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.698270 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/41.php
[Thu Jul 30 11:13:13.698315 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.719281 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/40.php
[Thu Jul 30 11:13:13.719324 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.740818 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/39.php
[Thu Jul 30 11:13:13.740863 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.761297 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/38.php
[Thu Jul 30 11:13:13.761340 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.782009 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/37.php
[Thu Jul 30 11:13:13.782109 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.802756 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/36.php
[Thu Jul 30 11:13:13.802798 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.846077 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/35.php
[Thu Jul 30 11:13:13.846126 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.876626 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/34.php
[Thu Jul 30 11:13:13.876671 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.897613 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/33.php
[Thu Jul 30 11:13:13.897659 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.918195 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/25.php
[Thu Jul 30 11:13:13.918241 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.938927 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/24.php
[Thu Jul 30 11:13:13.938975 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.964160 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/15.php
[Thu Jul 30 11:13:13.964208 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:13.984617 2026] [ssl:error] [pid 2849683:tid 2849683] (70014)End of file found: [client 216.73.216.199:34331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:13.984740 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/123456.php
[Thu Jul 30 11:13:13.984788 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.031518 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/12345.php
[Thu Jul 30 11:13:14.031580 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.126365 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1234.php
[Thu Jul 30 11:13:14.126410 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.196847 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/10.php
[Thu Jul 30 11:13:14.196896 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.259408 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/9.php
[Thu Jul 30 11:13:14.259450 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.341105 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/8.php
[Thu Jul 30 11:13:14.341155 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.509936 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/7.php
[Thu Jul 30 11:13:14.509983 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.562538 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/6.php
[Thu Jul 30 11:13:14.562590 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.583124 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/5.php
[Thu Jul 30 11:13:14.583168 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.603531 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/4.php
[Thu Jul 30 11:13:14.603587 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.623885 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/3.php
[Thu Jul 30 11:13:14.623929 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.655462 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2.php
[Thu Jul 30 11:13:14.655505 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.676580 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php
[Thu Jul 30 11:13:14.676626 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.697162 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0.php
[Thu Jul 30 11:13:14.697208 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.774532 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/z.php
[Thu Jul 30 11:13:14.774597 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.796314 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/y.php
[Thu Jul 30 11:13:14.796359 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.843154 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 11:13:14.843200 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:14.928747 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w.php
[Thu Jul 30 11:13:14.928794 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.026040 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/v.php
[Thu Jul 30 11:13:15.026095 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.046440 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/u.php
[Thu Jul 30 11:13:15.046483 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.066901 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/s.php
[Thu Jul 30 11:13:15.066945 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.087417 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/t.php
[Thu Jul 30 11:13:15.087458 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.107987 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/r.php
[Thu Jul 30 11:13:15.108044 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.128653 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/q.php
[Thu Jul 30 11:13:15.128703 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.149920 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/p.php
[Thu Jul 30 11:13:15.149965 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.171192 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/n.php
[Thu Jul 30 11:13:15.171237 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.194881 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/o.php
[Thu Jul 30 11:13:15.194925 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.215223 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/m.php
[Thu Jul 30 11:13:15.215264 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.236535 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/l.php
[Thu Jul 30 11:13:15.236595 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.257051 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/k.php
[Thu Jul 30 11:13:15.257110 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.278503 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/j.php
[Thu Jul 30 11:13:15.278559 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.323727 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/i.php
[Thu Jul 30 11:13:15.323771 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.388383 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/h.php
[Thu Jul 30 11:13:15.388427 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.409035 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/g.php
[Thu Jul 30 11:13:15.409101 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.484740 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f.php
[Thu Jul 30 11:13:15.484785 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.505131 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/e.php
[Thu Jul 30 11:13:15.505171 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.565153 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/d.php
[Thu Jul 30 11:13:15.565198 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.585570 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/c.php
[Thu Jul 30 11:13:15.585613 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.625114 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/b.php
[Thu Jul 30 11:13:15.625164 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.652005 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indexc.php
[Thu Jul 30 11:13:15.652049 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.672894 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/147w3sdtB9D.php
[Thu Jul 30 11:13:15.672933 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.694607 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/12htKbyVOUv.php
[Thu Jul 30 11:13:15.694645 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.714968 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0PeeTQW2sZ.php
[Thu Jul 30 11:13:15.715005 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.736713 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.561988674612251.php
[Thu Jul 30 11:13:15.736750 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.803724 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indexw.php
[Thu Jul 30 11:13:15.803766 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.846356 2026] [security2:error] [pid 2836239:tid 2836239] [client 114.119.151.82:31991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thestringman.co.uk"] [uri "/wp-content/uploads/2017/11/1-300x224.jpg"] [unique_id "amsju_IvdlDRnbXMXP9-YwAAAD8"], referer: http://thestringman.co.uk/photos-of-malt-and-barley/
[Thu Jul 30 11:13:15.878082 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.284214373991941.php
[Thu Jul 30 11:13:15.878127 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.962372 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.109753674214724.php
[Thu Jul 30 11:13:15.962416 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:15.979392 2026] [ssl:error] [pid 2849865:tid 2849865] (EAI 2)Name or service not known: [client 144.76.19.72:31756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:15.979420 2026] [ssl:error] [pid 2849865:tid 2849865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:15.982852 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kjihe.php
[Thu Jul 30 11:13:15.982894 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.005865 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Uploading.php
[Thu Jul 30 11:13:16.005922 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.026340 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ip.php
[Thu Jul 30 11:13:16.026377 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.035403 2026] [ssl:error] [pid 2839811:tid 2839811] (EAI 2)Name or service not known: [client 144.76.19.72:31770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:16.035427 2026] [ssl:error] [pid 2839811:tid 2839811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:16.051492 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/__1975.php
[Thu Jul 30 11:13:16.051529 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.071938 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gaya.php
[Thu Jul 30 11:13:16.071980 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.092372 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jal.php
[Thu Jul 30 11:13:16.092414 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.112677 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pfa.php
[Thu Jul 30 11:13:16.112716 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.133135 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/advanced-cf7-db.php
[Thu Jul 30 11:13:16.133176 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.153448 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Astagaaaaa.php
[Thu Jul 30 11:13:16.153487 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.174643 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-user.php
[Thu Jul 30 11:13:16.174682 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.194980 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/theme-insnhpf.php
[Thu Jul 30 11:13:16.195020 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.231106 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/process_login.php
[Thu Jul 30 11:13:16.231146 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.251432 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/liverpool-health.php
[Thu Jul 30 11:13:16.251472 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.271883 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.012263646060568.php
[Thu Jul 30 11:13:16.271922 2026] [access_compat:error] [pid 2849999:tid 2849999] [client 20.79.29.209:16224] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.464521 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jmbt.php
[Thu Jul 30 11:13:16.464579 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.496145 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/maho.php
[Thu Jul 30 11:13:16.496187 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.545947 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mia.php
[Thu Jul 30 11:13:16.545989 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.567505 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/qwe.php
[Thu Jul 30 11:13:16.567559 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.588593 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shell_finder.php
[Thu Jul 30 11:13:16.588634 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.609721 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cfinder.php
[Thu Jul 30 11:13:16.609759 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.630793 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pasired.php
[Thu Jul 30 11:13:16.630832 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.701505 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adm.php
[Thu Jul 30 11:13:16.701564 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.722624 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/noob.php
[Thu Jul 30 11:13:16.722668 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.743707 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/..php
[Thu Jul 30 11:13:16.743749 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.764802 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Lol.php
[Thu Jul 30 11:13:16.764846 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.858848 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/b2.php
[Thu Jul 30 11:13:16.858894 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.894452 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ex.php
[Thu Jul 30 11:13:16.894498 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:16.916290 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dhanush.php
[Thu Jul 30 11:13:16.916333 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.007953 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/asw.php
[Thu Jul 30 11:13:17.008015 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.045879 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mini.php5
[Thu Jul 30 11:13:17.045921 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.079614 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ler.php
[Thu Jul 30 11:13:17.079663 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.169979 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/def.php
[Thu Jul 30 11:13:17.170028 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.191237 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/extremecrw.php
[Thu Jul 30 11:13:17.191281 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.212607 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indx.php
[Thu Jul 30 11:13:17.212652 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.233829 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bv7binary.php
[Thu Jul 30 11:13:17.233870 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.277309 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/webroot.php
[Thu Jul 30 11:13:17.277354 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.299732 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/h4cker.php
[Thu Jul 30 11:13:17.299770 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.320777 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gazashell.php
[Thu Jul 30 11:13:17.320830 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.346448 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/syrianshell.php
[Thu Jul 30 11:13:17.346487 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.367518 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/locus7shell.php
[Thu Jul 30 11:13:17.367573 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.381248 2026] [core:crit] [pid 2823072:tid 2823072] (13)Permission denied: [client 52.167.144.184:58604] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 11:13:17.388704 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cyberwarrior.php
[Thu Jul 30 11:13:17.388747 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.409790 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ernebypass.php
[Thu Jul 30 11:13:17.409835 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.430983 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/g6shell.php
[Thu Jul 30 11:13:17.431031 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.460853 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pouyaserver.php
[Thu Jul 30 11:13:17.460902 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.481996 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/saudishell.php
[Thu Jul 30 11:13:17.482045 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.503495 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sosyeteshell.php
[Thu Jul 30 11:13:17.503542 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.576689 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tryagshell.php
[Thu Jul 30 11:13:17.576736 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.609433 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/uploadshell.php
[Thu Jul 30 11:13:17.609478 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.619705 2026] [core:crit] [pid 2823072:tid 2823072] (13)Permission denied: [client 52.167.144.184:58604] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 11:13:17.633396 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zehir4shell.php
[Thu Jul 30 11:13:17.633435 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.666524 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lostdcshell.php
[Thu Jul 30 11:13:17.666575 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.729974 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/commandshell.php
[Thu Jul 30 11:13:17.730020 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.751109 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mailershell.php
[Thu Jul 30 11:13:17.751153 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.772308 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cwshell.php
[Thu Jul 30 11:13:17.772350 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.864562 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/iranshell.php
[Thu Jul 30 11:13:17.864606 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.922518 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indishell.php
[Thu Jul 30 11:13:17.922587 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.943843 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zehirshell.php
[Thu Jul 30 11:13:17.943883 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:17.965281 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/g6sshell.php
[Thu Jul 30 11:13:17.965323 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.066987 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sqlshell.php
[Thu Jul 30 11:13:18.067032 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.127486 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/simshell.php
[Thu Jul 30 11:13:18.127531 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.151555 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/k2ll33d.php
[Thu Jul 30 11:13:18.151600 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.175956 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/b1n4ry.php
[Thu Jul 30 11:13:18.176000 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.198675 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/default.php
[Thu Jul 30 11:13:18.198715 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.243019 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/blank.php
[Thu Jul 30 11:13:18.243082 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.285157 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin-demo
[Thu Jul 30 11:13:18.306466 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/var
[Thu Jul 30 11:13:18.343202 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-login.php
[Thu Jul 30 11:13:18.343246 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.364433 2026] [security2:error] [pid 2848980:tid 2848980] [client 43.130.154.56:48990] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.com"] [uri "/"] [unique_id "amsjvrrTzJWJu1_oIWfWegAAAEE"]
[Thu Jul 30 11:13:18.364567 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/01.php
[Thu Jul 30 11:13:18.364603 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.392713 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xs.php
[Thu Jul 30 11:13:18.392755 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.439487 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/data.php
[Thu Jul 30 11:13:18.439537 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.480871 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dph.php
[Thu Jul 30 11:13:18.480917 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.567669 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/todo.php
[Thu Jul 30 11:13:18.567714 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.588869 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shoop.php
[Thu Jul 30 11:13:18.588914 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.609900 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wsa.php
[Thu Jul 30 11:13:18.609959 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.643884 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/22625814acb09634e45d67c98c55a6a2f6e2532c_0.file.painel.html.php
[Thu Jul 30 11:13:18.643932 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.665149 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/m4m4nkmud4.php
[Thu Jul 30 11:13:18.665194 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.686440 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-go.php
[Thu Jul 30 11:13:18.686483 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.718626 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/red404.php
[Thu Jul 30 11:13:18.718672 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.798095 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kdoor.php
[Thu Jul 30 11:13:18.798141 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.837054 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/years.php
[Thu Jul 30 11:13:18.837105 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.858323 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/galekjaya.php
[Thu Jul 30 11:13:18.858362 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.879410 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:18.902400 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:18.922015 2026] [authz_core:error] [pid 2848906:tid 2848906] [client 66.249.66.33:41276] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:13:18.924683 2026] [authz_core:error] [pid 2848906:tid 2848906] [client 66.249.66.33:41276] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:13:18.970314 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/turkiye.php
[Thu Jul 30 11:13:18.970354 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:18.997226 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/max.php
[Thu Jul 30 11:13:18.997266 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.019537 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/you.php
[Thu Jul 30 11:13:19.019585 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.040563 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a.php
[Thu Jul 30 11:13:19.040601 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.062220 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ap.php
[Thu Jul 30 11:13:19.062257 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.083246 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/000000.php
[Thu Jul 30 11:13:19.083287 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.091764 2026] [ssl:error] [pid 2850148:tid 2850148] (EAI 2)Name or service not known: [client 144.76.19.72:31776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:19.091788 2026] [ssl:error] [pid 2850148:tid 2850148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:19.112658 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mosok.php
[Thu Jul 30 11:13:19.112698 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.143052 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kamu.php
[Thu Jul 30 11:13:19.143105 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.145269 2026] [ssl:error] [pid 2845704:tid 2845704] (EAI 2)Name or service not known: [client 144.76.19.72:31786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:19.145290 2026] [ssl:error] [pid 2845704:tid 2845704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:19.164172 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inject.php
[Thu Jul 30 11:13:19.164212 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.185353 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shell.asp
[Thu Jul 30 11:13:19.206412 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/iya.php
[Thu Jul 30 11:13:19.206453 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.227610 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sj.php
[Thu Jul 30 11:13:19.227653 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.257302 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gca.php
[Thu Jul 30 11:13:19.257345 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.292436 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/koe.php
[Thu Jul 30 11:13:19.292478 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.443179 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/konten.php
[Thu Jul 30 11:13:19.443224 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.468844 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bekdur.php
[Thu Jul 30 11:13:19.468885 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.489935 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/webadmin.php
[Thu Jul 30 11:13:19.489978 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.515130 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/r57.php
[Thu Jul 30 11:13:19.515174 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.556803 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/c99.php
[Thu Jul 30 11:13:19.556849 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.617664 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xxx.php
[Thu Jul 30 11:13:19.617710 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.638979 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/arab.php
[Thu Jul 30 11:13:19.639022 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.660113 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bd.php
[Thu Jul 30 11:13:19.660156 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.689711 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/komet.php
[Thu Jul 30 11:13:19.689758 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.736206 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1337.php
[Thu Jul 30 11:13:19.736252 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.769703 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/backd00r.php
[Thu Jul 30 11:13:19.769746 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.790983 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/backdoor.php
[Thu Jul 30 11:13:19.791027 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.833278 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/andela.php
[Thu Jul 30 11:13:19.833335 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.854596 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jkt48.php
[Thu Jul 30 11:13:19.854640 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.875874 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gaza.php
[Thu Jul 30 11:13:19.875917 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.939907 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/injection.php
[Thu Jul 30 11:13:19.939953 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:19.982053 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bejak.php
[Thu Jul 30 11:13:19.982118 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.014094 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/idca_shell.php
[Thu Jul 30 11:13:20.014144 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.050656 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/idca.php
[Thu Jul 30 11:13:20.050706 2026] [access_compat:error] [pid 2815857:tid 2815857] [client 20.79.29.209:16136] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.199162 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indoxploit_shell.php
[Thu Jul 30 11:13:20.199209 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.247381 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sbh.php
[Thu Jul 30 11:13:20.247423 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.281662 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bh.php
[Thu Jul 30 11:13:20.281712 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.296592 2026] [security2:error] [pid 2848974:tid 2848974] [client 1.14.110.85:41348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amsjwE9EEbzekskKTIAMxQAAADg"]
[Thu Jul 30 11:13:20.300791 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sh3ll.php
[Thu Jul 30 11:13:20.300831 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.334571 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shell.php
[Thu Jul 30 11:13:20.334612 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.355573 2026] [security2:error] [pid 2841467:tid 2841467] [client 85.208.96.197:54628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/actors-who-are-jerks-in-real-life"] [unique_id "amsjwMvf2UiTJ-8pUt58MQAAAB0"]
[Thu Jul 30 11:13:20.404875 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indonesia.php
[Thu Jul 30 11:13:20.404918 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.424698 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1n73ction.php
[Thu Jul 30 11:13:20.424739 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.443774 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/374k.php
[Thu Jul 30 11:13:20.443814 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.466175 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cmd.php
[Thu Jul 30 11:13:20.466214 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.529520 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jkt48_1.php
[Thu Jul 30 11:13:20.529577 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.698426 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminer.php
[Thu Jul 30 11:13:20.698471 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.737995 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/rootx.php
[Thu Jul 30 11:13:20.738039 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.757254 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ls.php
[Thu Jul 30 11:13:20.757295 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.797386 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sym2019.php
[Thu Jul 30 11:13:20.797429 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.816445 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cc.php
[Thu Jul 30 11:13:20.816485 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.835666 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/45.php
[Thu Jul 30 11:13:20.835707 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.854886 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1945.php
[Thu Jul 30 11:13:20.854927 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.873965 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wos.php
[Thu Jul 30 11:13:20.874004 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.915005 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ty.php
[Thu Jul 30 11:13:20.915058 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.941606 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1945.php
[Thu Jul 30 11:13:20.941652 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.971727 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wos.php
[Thu Jul 30 11:13:20.971770 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:20.991810 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso-2.5.php
[Thu Jul 30 11:13:20.991851 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.011257 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ngacir88.php
[Thu Jul 30 11:13:21.011303 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.030600 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/&heker!.php
[Thu Jul 30 11:13:21.030645 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.050297 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shellv3.php
[Thu Jul 30 11:13:21.050341 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.069460 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/UnknownSec.php
[Thu Jul 30 11:13:21.069503 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.088617 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cilik.php
[Thu Jul 30 11:13:21.088657 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.107729 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zxcok.php
[Thu Jul 30 11:13:21.107769 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.127000 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-supports.php
[Thu Jul 30 11:13:21.127037 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.146136 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bkv74.php
[Thu Jul 30 11:13:21.146172 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.165171 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css
[Thu Jul 30 11:13:21.185164 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/edit-video.php
[Thu Jul 30 11:13:21.185202 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.246731 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/up.php
[Thu Jul 30 11:13:21.246776 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.266000 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/shell.php
[Thu Jul 30 11:13:21.266043 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.285171 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/.dha.php
[Thu Jul 30 11:13:21.285211 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.345799 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/403.php
[Thu Jul 30 11:13:21.345844 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.365199 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/fox.php
[Thu Jul 30 11:13:21.365240 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.384930 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/alfa.php
[Thu Jul 30 11:13:21.384980 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.404160 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/wso.php
[Thu Jul 30 11:13:21.404200 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.423415 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/java.php
[Thu Jul 30 11:13:21.423459 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.470557 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known
[Thu Jul 30 11:13:21.494140 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/java.php
[Thu Jul 30 11:13:21.494191 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.513958 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/js
[Thu Jul 30 11:13:21.569512 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:21.613595 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:21.679839 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:21.750628 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f0x.php
[Thu Jul 30 11:13:21.750675 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:21.770075 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:21.789329 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:21.808691 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:21.834638 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:21.855190 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:21.874509 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:21.893819 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wordpress
[Thu Jul 30 11:13:21.913170 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:21.943187 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:22.058452 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bypass.php
[Thu Jul 30 11:13:22.058502 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.107531 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w50.php
[Thu Jul 30 11:13:22.107591 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.170665 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xccc.php
[Thu Jul 30 11:13:22.170711 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.196791 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:53998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:22.196816 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:22.235889 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/moon.php
[Thu Jul 30 11:13:22.235939 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.251283 2026] [ssl:error] [pid 2849683:tid 2849683] (EAI 2)Name or service not known: [client 144.76.19.72:54006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:22.251315 2026] [ssl:error] [pid 2849683:tid 2849683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:22.255129 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wkwk.php
[Thu Jul 30 11:13:22.255173 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.274438 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wpvitamins.php
[Thu Jul 30 11:13:22.274487 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.293609 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:22.312817 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/meiwei.php
[Thu Jul 30 11:13:22.312857 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.356228 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fonts
[Thu Jul 30 11:13:22.375532 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vendor
[Thu Jul 30 11:13:22.394684 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css
[Thu Jul 30 11:13:22.418727 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/assets
[Thu Jul 30 11:13:22.437823 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/js
[Thu Jul 30 11:13:22.457034 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/priv8.php
[Thu Jul 30 11:13:22.457089 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.476429 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Xploit.php
[Thu Jul 30 11:13:22.476473 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.529828 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso2.5.1.php
[Thu Jul 30 11:13:22.529873 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.563188 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wibu.php
[Thu Jul 30 11:13:22.563234 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.632083 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Wop.php
[Thu Jul 30 11:13:22.632138 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.651636 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pah.php
[Thu Jul 30 11:13:22.651682 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.700272 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/webshell.php
[Thu Jul 30 11:13:22.700320 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.719615 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso25.php
[Thu Jul 30 11:13:22.719664 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.738833 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso2022_shell.php
[Thu Jul 30 11:13:22.738879 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.758241 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wpxadmin.php
[Thu Jul 30 11:13:22.758287 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.758581 2026] [ssl:error] [pid 2847255:tid 2847255] (70014)End of file found: [client 216.73.216.199:41259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:22.778226 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso2.5.php
[Thu Jul 30 11:13:22.778276 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.797442 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-mode.php
[Thu Jul 30 11:13:22.797483 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.801441 2026] [security2:error] [pid 2845590:tid 2845590] [client 129.226.122.114:11535] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjwho5PqJG9PTGDSBCKwAAACg"]
[Thu Jul 30 11:13:22.801496 2026] [security2:error] [pid 2845590:tid 2845590] [client 129.226.122.114:11535] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjwho5PqJG9PTGDSBCKwAAACg"]
[Thu Jul 30 11:13:22.801746 2026] [security2:error] [pid 2845590:tid 2845590] [client 129.226.122.114:11535] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjwho5PqJG9PTGDSBCKwAAACg"]
[Thu Jul 30 11:13:22.816671 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-mailcek.php
[Thu Jul 30 11:13:22.816713 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.835859 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-config-blog.php
[Thu Jul 30 11:13:22.835900 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.855081 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-thumbs.php
[Thu Jul 30 11:13:22.855125 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.874327 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-mobfi.php
[Thu Jul 30 11:13:22.874366 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.893457 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-comments-post.php
[Thu Jul 30 11:13:22.893498 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.913513 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-config-style.php
[Thu Jul 30 11:13:22.913568 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.972912 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-logo.php
[Thu Jul 30 11:13:22.972961 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:22.992077 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-config-sample.php
[Thu Jul 30 11:13:22.992121 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.011305 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/blog
[Thu Jul 30 11:13:23.087204 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-optionss.php
[Thu Jul 30 11:13:23.087252 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.106459 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/work.php
[Thu Jul 30 11:13:23.106502 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.125682 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-config-pantheon.php
[Thu Jul 30 11:13:23.125723 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.144812 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-xmlx.php
[Thu Jul 30 11:13:23.144852 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.163995 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-room.ph
[Thu Jul 30 11:13:23.183283 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pwp-.myluv.php
[Thu Jul 30 11:13:23.183322 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.206118 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blogs
[Thu Jul 30 11:13:23.225195 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wihp1.php
[Thu Jul 30 11:13:23.225245 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.244316 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blog.php
[Thu Jul 30 11:13:23.244355 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.263443 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-utchershill.php
[Thu Jul 30 11:13:23.263481 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.342488 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-log.php
[Thu Jul 30 11:13:23.342531 2026] [access_compat:error] [pid 2842910:tid 2842910] [client 20.79.29.209:16208] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.400185 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-god.Php
[Thu Jul 30 11:13:23.400232 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.423748 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/web-setting.php
[Thu Jul 30 11:13:23.423791 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.472636 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-ettoyag.php
[Thu Jul 30 11:13:23.472682 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.508747 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/venom.php
[Thu Jul 30 11:13:23.508790 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.534929 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/veno.ph
[Thu Jul 30 11:13:23.554567 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vuln.php
[Thu Jul 30 11:13:23.554609 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.574420 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/V5.php
[Thu Jul 30 11:13:23.574477 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.617854 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/v5.php
[Thu Jul 30 11:13:23.617898 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.638524 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Unknown45.php
[Thu Jul 30 11:13:23.638580 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.658316 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vinus.php
[Thu Jul 30 11:13:23.658359 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.699759 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/store.php
[Thu Jul 30 11:13:23.699804 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.719594 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/unzip.php
[Thu Jul 30 11:13:23.719637 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.739358 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/think.php
[Thu Jul 30 11:13:23.739400 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.759234 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tod.php
[Thu Jul 30 11:13:23.759280 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.787152 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/setor.php
[Thu Jul 30 11:13:23.787195 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.833910 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/thr.php
[Thu Jul 30 11:13:23.833963 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.857186 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tmv.php
[Thu Jul 30 11:13:23.857228 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.876818 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/terminal.php
[Thu Jul 30 11:13:23.876866 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.903554 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/titid.php
[Thu Jul 30 11:13:23.903596 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.937632 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sllolx.php
[Thu Jul 30 11:13:23.937678 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.957331 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/small.php
[Thu Jul 30 11:13:23.957372 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.977091 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/style-js.php
[Thu Jul 30 11:13:23.977134 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:23.996822 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/style.php
[Thu Jul 30 11:13:23.996866 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.016505 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Success.php
[Thu Jul 30 11:13:24.016561 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.036325 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/syad.php
[Thu Jul 30 11:13:24.036370 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.076491 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/success.php
[Thu Jul 30 11:13:24.076537 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.096480 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/swm@asd365.php
[Thu Jul 30 11:13:24.096524 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.167455 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/smtphec.php
[Thu Jul 30 11:13:24.167503 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.172349 2026] [security2:error] [pid 2848913:tid 2848913] [client 103.253.247.228:39216] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjxDgPq6rmEgmDnOvJSAAAADE"]
[Thu Jul 30 11:13:24.172391 2026] [security2:error] [pid 2848913:tid 2848913] [client 103.253.247.228:39216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjxDgPq6rmEgmDnOvJSAAAADE"]
[Thu Jul 30 11:13:24.172630 2026] [security2:error] [pid 2848913:tid 2848913] [client 103.253.247.228:39216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjxDgPq6rmEgmDnOvJSAAAADE"]
[Thu Jul 30 11:13:24.225369 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/s_on.php
[Thu Jul 30 11:13:24.225414 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.245203 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/selaras.php
[Thu Jul 30 11:13:24.245258 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.279104 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ssh.php
[Thu Jul 30 11:13:24.279148 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.325926 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/s4d.php
[Thu Jul 30 11:13:24.325971 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.389392 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/slot.php
[Thu Jul 30 11:13:24.389440 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.409427 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sad.php
[Thu Jul 30 11:13:24.409476 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.467995 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sec.php
[Thu Jul 30 11:13:24.468042 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.490112 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shapes.php
[Thu Jul 30 11:13:24.490157 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.509835 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sos.php
[Thu Jul 30 11:13:24.509877 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.529491 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/print.php
[Thu Jul 30 11:13:24.529532 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.549499 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pdi.php
[Thu Jul 30 11:13:24.549540 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.577417 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/rayzky.php
[Thu Jul 30 11:13:24.577461 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.603758 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/repair.php
[Thu Jul 30 11:13:24.603803 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.623936 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/raw.php
[Thu Jul 30 11:13:24.623978 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.662102 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/py.php
[Thu Jul 30 11:13:24.662146 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.689398 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ray.php
[Thu Jul 30 11:13:24.689441 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.709131 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Q2-.php
[Thu Jul 30 11:13:24.709172 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.728814 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/python.php
[Thu Jul 30 11:13:24.728858 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.748493 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-pop.php
[Thu Jul 30 11:13:24.748535 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.768256 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/marjan.php
[Thu Jul 30 11:13:24.768295 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.787819 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/on.php
[Thu Jul 30 11:13:24.787862 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.807653 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mari.php
[Thu Jul 30 11:13:24.807697 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.832849 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/old-index.php
[Thu Jul 30 11:13:24.832893 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.861779 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ocgi.php
[Thu Jul 30 11:13:24.861823 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.888806 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ngocokpeli.php
[Thu Jul 30 11:13:24.888854 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.921896 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/new_license.php
[Thu Jul 30 11:13:24.921943 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.965732 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/miyabajingankoe.php
[Thu Jul 30 11:13:24.965780 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:24.985581 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/done.php
[Thu Jul 30 11:13:24.985625 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.005407 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/eviltwin.php
[Thu Jul 30 11:13:25.005447 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.031749 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/manage.php
[Thu Jul 30 11:13:25.031804 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.051696 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mforh.php
[Thu Jul 30 11:13:25.051738 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.093084 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mek.ph
[Thu Jul 30 11:13:25.157013 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mygagal.php
[Thu Jul 30 11:13:25.157076 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.245480 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/manda.php
[Thu Jul 30 11:13:25.245524 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.276182 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pmemek.php
[Thu Jul 30 11:13:25.276234 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.295886 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mmk.php
[Thu Jul 30 11:13:25.295929 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.308060 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:54012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:25.308103 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:25.316484 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/EvilTwin.php
[Thu Jul 30 11:13:25.316529 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.346461 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/da111.php
[Thu Jul 30 11:13:25.346507 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.364186 2026] [ssl:error] [pid 2849683:tid 2849683] (EAI 2)Name or service not known: [client 144.76.19.72:54026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:25.364223 2026] [ssl:error] [pid 2849683:tid 2849683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:25.366147 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/duck php
[Thu Jul 30 11:13:25.429683 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/DA.php
[Thu Jul 30 11:13:25.429728 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.473345 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bismilah.php
[Thu Jul 30 11:13:25.473391 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.493244 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.dha.php
[Thu Jul 30 11:13:25.493289 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.562524 2026] [security2:error] [pid 2839843:tid 2839843] [client 85.208.96.207:40190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9210.0/prev_next,next.html"] [unique_id "amsjxRIp20JLis4T3gjMwAAAACA"]
[Thu Jul 30 11:13:25.570878 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cpanel.php
[Thu Jul 30 11:13:25.570918 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.642665 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/devill.php
[Thu Jul 30 11:13:25.642711 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.666008 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dikne.php
[Thu Jul 30 11:13:25.666051 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.685835 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cPanel.php
[Thu Jul 30 11:13:25.685874 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.705722 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cargo.php
[Thu Jul 30 11:13:25.705781 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.730401 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/col1.php
[Thu Jul 30 11:13:25.730452 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.801089 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/coli.php
[Thu Jul 30 11:13:25.801136 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.841453 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cylul.php
[Thu Jul 30 11:13:25.841501 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.891314 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Cylul007.php
[Thu Jul 30 11:13:25.891360 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.913920 2026] [security2:error] [pid 2848773:tid 2848773] [client 43.164.133.138:54140] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsjxfFSVhOHYedgsRLCXgAAAAQ"]
[Thu Jul 30 11:13:25.915970 2026] [authz_core:error] [pid 2848773:tid 2848773] [client 43.164.133.138:54140] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:13:25.918624 2026] [authz_core:error] [pid 2848773:tid 2848773] [client 43.164.133.138:54140] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:13:25.925298 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi-alfa.php
[Thu Jul 30 11:13:25.925339 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.945039 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cok.php
[Thu Jul 30 11:13:25.945098 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:25.964785 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgipro.php
[Thu Jul 30 11:13:25.964827 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.182055 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css.php
[Thu Jul 30 11:13:26.182113 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.218152 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cp.php
[Thu Jul 30 11:13:26.218197 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.237975 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cyto.php
[Thu Jul 30 11:13:26.238023 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.257944 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/con7.php
[Thu Jul 30 11:13:26.257986 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.277816 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/locale.php
[Thu Jul 30 11:13:26.277862 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.350823 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/enter.php
[Thu Jul 30 11:13:26.350869 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.370656 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-enter.php
[Thu Jul 30 11:13:26.370701 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.390377 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cakt.php
[Thu Jul 30 11:13:26.390421 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.411924 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/CytoXploit.php
[Thu Jul 30 11:13:26.411970 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.431662 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ccc.php
[Thu Jul 30 11:13:26.431703 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.451446 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cxc.php
[Thu Jul 30 11:13:26.451490 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.600319 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/constant.php
[Thu Jul 30 11:13:26.600364 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.625045 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/celeng.php
[Thu Jul 30 11:13:26.625104 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.652209 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bypassing.php
[Thu Jul 30 11:13:26.652261 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.691033 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bypshell.php
[Thu Jul 30 11:13:26.691095 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.710769 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bingo.php
[Thu Jul 30 11:13:26.710811 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.730509 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/backd00rshit.php
[Thu Jul 30 11:13:26.730562 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.750321 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ichi.php
[Thu Jul 30 11:13:26.750373 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.770217 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/~.php
[Thu Jul 30 11:13:26.770263 2026] [access_compat:error] [pid 2849863:tid 2849863] [client 20.79.29.209:16212] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.812775 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lock360.php
[Thu Jul 30 11:13:26.812828 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.840612 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/licensi.php
[Thu Jul 30 11:13:26.840660 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.859151 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Marvins.php
[Thu Jul 30 11:13:26.859193 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.877474 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lolz.php
[Thu Jul 30 11:13:26.877516 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.900344 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/libs-func.php
[Thu Jul 30 11:13:26.900386 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:26.952407 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lloh.phtml
[Thu Jul 30 11:13:26.952456 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.036517 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anu.phtml
[Thu Jul 30 11:13:27.036579 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.055012 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anu.php
[Thu Jul 30 11:13:27.055080 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.073559 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/loip2.php
[Thu Jul 30 11:13:27.073603 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.101032 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/json.php
[Thu Jul 30 11:13:27.101095 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.135587 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/java.php
[Thu Jul 30 11:13:27.135632 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.154806 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kntl.php
[Thu Jul 30 11:13:27.154846 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.203717 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/klee.php
[Thu Jul 30 11:13:27.203761 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.222247 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kalokataitusayagatauya.php
[Thu Jul 30 11:13:27.222288 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.240589 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jpg.php
[Thu Jul 30 11:13:27.240635 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.258905 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jak.php
[Thu Jul 30 11:13:27.258951 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.277269 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/image.php
[Thu Jul 30 11:13:27.277310 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.301015 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images.php
[Thu Jul 30 11:13:27.301056 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.329471 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/htdocs.php
[Thu Jul 30 11:13:27.329516 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.386953 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hello.php
[Thu Jul 30 11:13:27.387000 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.434158 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/info.php
[Thu Jul 30 11:13:27.434205 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.452454 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ini.php
[Thu Jul 30 11:13:27.452497 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.499468 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/help.php
[Thu Jul 30 11:13:27.499518 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.525419 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/highda php
[Thu Jul 30 11:13:27.554459 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/high.php
[Thu Jul 30 11:13:27.554503 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.573364 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hehee.php
[Thu Jul 30 11:13:27.573403 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.591712 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/human.php
[Thu Jul 30 11:13:27.591765 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.609971 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/him.php
[Thu Jul 30 11:13:27.610012 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.695469 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hh.php
[Thu Jul 30 11:13:27.695517 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.713993 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hz.php
[Thu Jul 30 11:13:27.714039 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.732906 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/here.php
[Thu Jul 30 11:13:27.732972 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.751533 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hxh.php
[Thu Jul 30 11:13:27.751591 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.770275 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/FX.php
[Thu Jul 30 11:13:27.770319 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.788988 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ga.php
[Thu Jul 30 11:13:27.789037 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.808346 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ganz.php
[Thu Jul 30 11:13:27.808397 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.856336 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gas.php
[Thu Jul 30 11:13:27.856385 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.876659 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gg.php
[Thu Jul 30 11:13:27.876708 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.896864 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gelis.php
[Thu Jul 30 11:13:27.896911 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:27.902879 2026] [security2:error] [pid 2850090:tid 2850090] [client 143.255.86.70:60768] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjx5hGMTMnagSdd3okkgAAAFk"]
[Thu Jul 30 11:13:27.902924 2026] [security2:error] [pid 2850090:tid 2850090] [client 143.255.86.70:60768] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsjx5hGMTMnagSdd3okkgAAAFk"]
[Thu Jul 30 11:13:27.903169 2026] [security2:error] [pid 2850090:tid 2850090] [client 143.255.86.70:60768] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsjx5hGMTMnagSdd3okkgAAAFk"]
[Thu Jul 30 11:13:27.983494 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/FierzaXploit.php
[Thu Jul 30 11:13:27.983541 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.040667 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fxshell.php
[Thu Jul 30 11:13:28.040715 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.059288 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fk.php7
[Thu Jul 30 11:13:28.059344 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.077726 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/eagle.php
[Thu Jul 30 11:13:28.077767 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.096039 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Eagle.php
[Thu Jul 30 11:13:28.096098 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.114597 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.error_log.php
[Thu Jul 30 11:13:28.114643 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.151944 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/666.php
[Thu Jul 30 11:13:28.151989 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.170817 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Xzd.php
[Thu Jul 30 11:13:28.170861 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.200186 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ms-sitess.php
[Thu Jul 30 11:13:28.200230 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.218569 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aku.php
[Thu Jul 30 11:13:28.218617 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.239083 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/syg.php
[Thu Jul 30 11:13:28.239126 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.260135 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/contactz.php
[Thu Jul 30 11:13:28.260175 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.278435 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/orange.php
[Thu Jul 30 11:13:28.278478 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.306953 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hcd01.php
[Thu Jul 30 11:13:28.306995 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.325368 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/prof.php
[Thu Jul 30 11:13:28.325412 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.344135 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/AkuSayangKamu45.php
[Thu Jul 30 11:13:28.344181 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.362535 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/googlebots.php
[Thu Jul 30 11:13:28.362584 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.382228 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ben.php
[Thu Jul 30 11:13:28.382267 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.400692 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/9191.php
[Thu Jul 30 11:13:28.400732 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.419048 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:54034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:28.419085 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:28.423354 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kjtpoad.php
[Thu Jul 30 11:13:28.423392 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.441859 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/blackcat.php
[Thu Jul 30 11:13:28.441914 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.479482 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:54046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:28.479509 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:28.494552 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sure.php
[Thu Jul 30 11:13:28.494596 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.546975 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dl.php
[Thu Jul 30 11:13:28.547020 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.565253 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/donate.php
[Thu Jul 30 11:13:28.565297 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.583721 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tntmar.php
[Thu Jul 30 11:13:28.583772 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.603640 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dd.php
[Thu Jul 30 11:13:28.603684 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.657008 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/rr.PHP56
[Thu Jul 30 11:13:28.703442 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lf.php
[Thu Jul 30 11:13:28.703488 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.721747 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/saya.php
[Thu Jul 30 11:13:28.721790 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.740168 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/do.php
[Thu Jul 30 11:13:28.740219 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.758594 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/funtion.php
[Thu Jul 30 11:13:28.758639 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.777193 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xixi.php
[Thu Jul 30 11:13:28.777237 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.795811 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-cli.php
[Thu Jul 30 11:13:28.795856 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.815051 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/IP.php
[Thu Jul 30 11:13:28.815107 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.833440 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/XiXi.php
[Thu Jul 30 11:13:28.833483 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.851900 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.piongroup.php
[Thu Jul 30 11:13:28.851942 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.870937 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/oke.php
[Thu Jul 30 11:13:28.870982 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.907220 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/MKY.php
[Thu Jul 30 11:13:28.907269 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.928111 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xl33t.php
[Thu Jul 30 11:13:28.928169 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:28.963423 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1n73ct10n.php
[Thu Jul 30 11:13:28.963468 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.056423 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/not_acceptable.php
[Thu Jul 30 11:13:29.056474 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.074953 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dada.php
[Thu Jul 30 11:13:29.074996 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.083615 2026] [security2:error] [pid 2842781:tid 2842781] [client 43.130.57.76:33930] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "p2studio.co.uk"] [uri "/"] [unique_id "amsjyUsd-IZGnXpGPRNk-AAAABM"]
[Thu Jul 30 11:13:29.107044 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0x1337.php
[Thu Jul 30 11:13:29.107098 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.125531 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xltavrat.php
[Thu Jul 30 11:13:29.125582 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.143771 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/12j.php
[Thu Jul 30 11:13:29.143808 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.206861 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/danon.php
[Thu Jul 30 11:13:29.206903 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.225350 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xd.php
[Thu Jul 30 11:13:29.225392 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.243913 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dada.php
[Thu Jul 30 11:13:29.243955 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.262351 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xml.php
[Thu Jul 30 11:13:29.262392 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.280760 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xm.php
[Thu Jul 30 11:13:29.280804 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.332995 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xamp.php
[Thu Jul 30 11:13:29.333044 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.386508 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ya.php
[Thu Jul 30 11:13:29.386567 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.407569 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zer0.php
[Thu Jul 30 11:13:29.407611 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.467415 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/63dor.php
[Thu Jul 30 11:13:29.467462 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.486134 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dh.php
[Thu Jul 30 11:13:29.486181 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.506823 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/\xe5\xb9\xb3\xe4\xbb\xae\xe5\x90\x8ds.php
[Thu Jul 30 11:13:29.506873 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.554534 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:29.573184 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anbu.php
[Thu Jul 30 11:13:29.573226 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.591663 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:29.634329 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:29.685636 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/plugins.php
[Thu Jul 30 11:13:29.685681 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.725202 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:29.789498 2026] [access_compat:error] [pid 2850155:tid 2850155] [client 20.79.29.209:16211] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:29.880530 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.php
[Thu Jul 30 11:13:29.880595 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.906203 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:29.928129 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/00.php
[Thu Jul 30 11:13:29.928174 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:29.992508 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/000.php
[Thu Jul 30 11:13:29.992570 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.014457 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/okkk.php
[Thu Jul 30 11:13:30.014518 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.036371 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/yamate.php
[Thu Jul 30 11:13:30.036412 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.058406 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/upppp.php
[Thu Jul 30 11:13:30.058449 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.081429 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/up.php
[Thu Jul 30 11:13:30.081472 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.105309 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/l3.php
[Thu Jul 30 11:13:30.105352 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.130263 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fellganteng.php
[Thu Jul 30 11:13:30.130304 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.152310 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fell.php
[Thu Jul 30 11:13:30.152353 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.179796 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ok.php
[Thu Jul 30 11:13:30.179840 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.290606 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/herp.php
[Thu Jul 30 11:13:30.290653 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.364893 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/nptice.php
[Thu Jul 30 11:13:30.364937 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.386858 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tuyul.php
[Thu Jul 30 11:13:30.386905 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.424351 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/nikung.php
[Thu Jul 30 11:13:30.424394 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.458529 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tertykung.php
[Thu Jul 30 11:13:30.458586 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.495766 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/goods.php
[Thu Jul 30 11:13:30.495813 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.517651 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/codrs.php
[Thu Jul 30 11:13:30.517695 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.539469 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jingan.php
[Thu Jul 30 11:13:30.539511 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.561429 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/chan.php
[Thu Jul 30 11:13:30.561473 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.583973 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/losX.php
[Thu Jul 30 11:13:30.584014 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.605960 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mom.php
[Thu Jul 30 11:13:30.606006 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.627774 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/killer.php
[Thu Jul 30 11:13:30.627830 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.649715 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Sh3ll.php
[Thu Jul 30 11:13:30.649757 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.672110 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/new.php
[Thu Jul 30 11:13:30.672153 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.693960 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Sym.php
[Thu Jul 30 11:13:30.694005 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.736638 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dom.php
[Thu Jul 30 11:13:30.736686 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.758681 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/v4ga.php
[Thu Jul 30 11:13:30.758725 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.788238 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/s3c.php
[Thu Jul 30 11:13:30.788286 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.812957 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/madspotshell.php
[Thu Jul 30 11:13:30.812999 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.853908 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sa.php
[Thu Jul 30 11:13:30.853957 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.876731 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/noname.php
[Thu Jul 30 11:13:30.876796 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.922442 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kntol.php
[Thu Jul 30 11:13:30.922487 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.944516 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/WSO.php
[Thu Jul 30 11:13:30.944572 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:30.992504 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/IndoXploit.php
[Thu Jul 30 11:13:30.992558 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.019514 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bajingan.php
[Thu Jul 30 11:13:31.019576 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.061536 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Good.php
[Thu Jul 30 11:13:31.061592 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.144970 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pas.phtml
[Thu Jul 30 11:13:31.145017 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.166906 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pas.php
[Thu Jul 30 11:13:31.166947 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.219278 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/abc.php
[Thu Jul 30 11:13:31.219326 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.241122 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indexx.php
[Thu Jul 30 11:13:31.241167 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.263623 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/browse.php
[Thu Jul 30 11:13:31.263668 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.289234 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/up1.php
[Thu Jul 30 11:13:31.289278 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.311223 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/haha.php
[Thu Jul 30 11:13:31.311271 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.333080 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sc.php
[Thu Jul 30 11:13:31.333125 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.397843 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fvck.php
[Thu Jul 30 11:13:31.397891 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.419799 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0x.php
[Thu Jul 30 11:13:31.419843 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.442086 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/up.php5
[Thu Jul 30 11:13:31.442132 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.474117 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shell.php5
[Thu Jul 30 11:13:31.474161 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.498497 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inc
[Thu Jul 30 11:13:31.522260 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ix.php
[Thu Jul 30 11:13:31.522313 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.537091 2026] [ssl:error] [pid 2848979:tid 2848979] (EAI 2)Name or service not known: [client 144.76.19.72:30902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:31.537114 2026] [ssl:error] [pid 2848979:tid 2848979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:31.544629 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/r0x.php
[Thu Jul 30 11:13:31.544688 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.566429 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bn.php
[Thu Jul 30 11:13:31.566471 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.590149 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:30906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:31.590175 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:31.590312 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dm.php
[Thu Jul 30 11:13:31.590352 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.612168 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gator.php
[Thu Jul 30 11:13:31.612210 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.618126 2026] [cgi:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:13:31.634646 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/perlcgi.pl
[Thu Jul 30 11:13:31.728263 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mail.php
[Thu Jul 30 11:13:31.728311 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.750519 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mailer.php
[Thu Jul 30 11:13:31.750586 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.772561 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/php.ini
[Thu Jul 30 11:13:31.772620 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.812767 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/modul.php
[Thu Jul 30 11:13:31.812812 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.835794 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/configuration.php
[Thu Jul 30 11:13:31.835841 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.857735 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tai.php
[Thu Jul 30 11:13:31.857783 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.879653 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/www.php
[Thu Jul 30 11:13:31.879699 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.901406 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x13.php
[Thu Jul 30 11:13:31.901454 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.932927 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ntaps.php
[Thu Jul 30 11:13:31.932986 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:31.954827 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zip.php
[Thu Jul 30 11:13:31.954873 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.059143 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/@.php
[Thu Jul 30 11:13:32.059196 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.084891 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ea.php
[Thu Jul 30 11:13:32.084955 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.106955 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaaa.php
[Thu Jul 30 11:13:32.107004 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.129017 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cinfo.php
[Thu Jul 30 11:13:32.129061 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.152235 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/newfile.php
[Thu Jul 30 11:13:32.152281 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.174092 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pro.php
[Thu Jul 30 11:13:32.174137 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.195926 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/edit.php
[Thu Jul 30 11:13:32.195970 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.218146 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/11.php
[Thu Jul 30 11:13:32.218195 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.240452 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/title.php
[Thu Jul 30 11:13:32.240498 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.265916 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xmlrpc.php
[Thu Jul 30 11:13:32.265974 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.334608 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pass.php
[Thu Jul 30 11:13:32.334656 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.356478 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Cpanel.php
[Thu Jul 30 11:13:32.356524 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.401490 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/unknown.php
[Thu Jul 30 11:13:32.401534 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.426626 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sel.php
[Thu Jul 30 11:13:32.426674 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.448488 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/14.php
[Thu Jul 30 11:13:32.448531 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.523526 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 11:13:32.523585 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.545498 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/angel.php
[Thu Jul 30 11:13:32.545555 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.567534 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/c100.php
[Thu Jul 30 11:13:32.567593 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.610363 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/simattacker.php
[Thu Jul 30 11:13:32.610409 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.632169 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wsoshell.php
[Thu Jul 30 11:13:32.632214 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.690294 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/autoload_classmap.php
[Thu Jul 30 11:13:32.690352 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.712153 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/12.php
[Thu Jul 30 11:13:32.712197 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.769882 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wikiindex.php
[Thu Jul 30 11:13:32.769928 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.791891 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alex.php
[Thu Jul 30 11:13:32.791934 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.813873 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-0.php
[Thu Jul 30 11:13:32.813920 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.839419 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-1.php
[Thu Jul 30 11:13:32.839466 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.865878 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xindex.php
[Thu Jul 30 11:13:32.865922 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.887757 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wiki-index.php
[Thu Jul 30 11:13:32.887799 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.909642 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Bulle.php
[Thu Jul 30 11:13:32.909688 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:32.982575 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/srx.php
[Thu Jul 30 11:13:32.982632 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.004708 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:33.032001 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tersembunyi.php
[Thu Jul 30 11:13:33.032048 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.053894 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lab.php
[Thu Jul 30 11:13:33.053938 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.096343 2026] [access_compat:error] [pid 2845082:tid 2845082] [client 20.79.29.209:16152] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.aspx
[Thu Jul 30 11:13:33.135520 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shell.aspx
[Thu Jul 30 11:13:33.168890 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a.aspx
[Thu Jul 30 11:13:33.196749 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-raze.php
[Thu Jul 30 11:13:33.196796 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.215313 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-init.php
[Thu Jul 30 11:13:33.215358 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.241775 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lyda.php
[Thu Jul 30 11:13:33.241819 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.260565 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfashell.php
[Thu Jul 30 11:13:33.260619 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.279696 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/av.php
[Thu Jul 30 11:13:33.279741 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.298652 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/upl.php
[Thu Jul 30 11:13:33.298699 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.364120 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/login.phtml
[Thu Jul 30 11:13:33.364168 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.382883 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gelay.php
[Thu Jul 30 11:13:33.382925 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.432578 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/darkshell.php
[Thu Jul 30 11:13:33.432623 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.451458 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gel4y.php
[Thu Jul 30 11:13:33.451501 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.470741 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/contacts.php
[Thu Jul 30 11:13:33.470783 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.489253 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/yo.php
[Thu Jul 30 11:13:33.489303 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.507777 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:33.526484 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:33.547355 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/sym.php
[Thu Jul 30 11:13:33.547399 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.595993 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/shell.php
[Thu Jul 30 11:13:33.596038 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.614664 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/mini.php
[Thu Jul 30 11:13:33.614709 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.649500 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/mar.php
[Thu Jul 30 11:13:33.649557 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.668174 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/1.php
[Thu Jul 30 11:13:33.668216 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.687804 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/imageswp-init.php
[Thu Jul 30 11:13:33.687844 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.706717 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/upload.php
[Thu Jul 30 11:13:33.706768 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.773680 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/fox.php
[Thu Jul 30 11:13:33.773725 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.792679 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/fw.php
[Thu Jul 30 11:13:33.792724 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.814043 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/alfa.php
[Thu Jul 30 11:13:33.814101 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.844480 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/alfashell.php
[Thu Jul 30 11:13:33.844563 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.869797 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/gelay.php
[Thu Jul 30 11:13:33.869840 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.889386 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/byps.php
[Thu Jul 30 11:13:33.889428 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.907931 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/bypass.php
[Thu Jul 30 11:13:33.907974 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.945490 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/x.php
[Thu Jul 30 11:13:33.945566 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.964371 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/leaf.php
[Thu Jul 30 11:13:33.964414 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:33.982960 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/wso.php
[Thu Jul 30 11:13:33.983000 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.001838 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/sym403.php
[Thu Jul 30 11:13:34.001880 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.020606 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/leafmailer2.8.php
[Thu Jul 30 11:13:34.020649 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.044836 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/lux.php
[Thu Jul 30 11:13:34.044896 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.076050 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w3llstore.php
[Thu Jul 30 11:13:34.076110 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.094874 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfi.php
[Thu Jul 30 11:13:34.094918 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.113432 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/DC.php
[Thu Jul 30 11:13:34.113474 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.134579 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:34.153320 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:34.172029 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:34.238460 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:34.295703 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:34.314426 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Ninja.php
[Thu Jul 30 11:13:34.314469 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.371242 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-incleude.php
[Thu Jul 30 11:13:34.371287 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.390630 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fpebr.php
[Thu Jul 30 11:13:34.390675 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.409258 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/snd21.php
[Thu Jul 30 11:13:34.409299 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.427999 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/olu.php
[Thu Jul 30 11:13:34.428041 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.446819 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tuco.php
[Thu Jul 30 11:13:34.446867 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.465419 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ice.php
[Thu Jul 30 11:13:34.465462 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.484028 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/codeboy1877x.php
[Thu Jul 30 11:13:34.484088 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.504832 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wsanon.php
[Thu Jul 30 11:13:34.504873 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.524060 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Alfa.php
[Thu Jul 30 11:13:34.524117 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.542566 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:34.563601 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:34.582339 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:34.639525 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:34.658376 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:34.676899 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:13:34.695969 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:13:34.710930 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:30914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:34.710968 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:34.715971 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ym.php
[Thu Jul 30 11:13:34.716015 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.718489 2026] [security2:error] [pid 2838781:tid 2838781] [client 114.119.142.20:62395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~29-7-2018"] [unique_id "amsjzlyrNXUFcWs8pRddIgAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1530399600/cat_ids%7E19/request_format%7Ehtml
[Thu Jul 30 11:13:34.734679 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa1.php
[Thu Jul 30 11:13:34.734723 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.753313 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/159.php
[Thu Jul 30 11:13:34.753358 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.763954 2026] [ssl:error] [pid 2848987:tid 2848987] (EAI 2)Name or service not known: [client 144.76.19.72:30920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:34.763989 2026] [ssl:error] [pid 2848987:tid 2848987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:34.771924 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tesla1.php
[Thu Jul 30 11:13:34.771966 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.790467 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shadowx.php
[Thu Jul 30 11:13:34.790507 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.811453 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hexor.php
[Thu Jul 30 11:13:34.811515 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.830795 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/leaf.php
[Thu Jul 30 11:13:34.830841 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.863355 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/FoxWSOv1.php
[Thu Jul 30 11:13:34.863398 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.866227 2026] [authz_core:error] [pid 2848846:tid 2848846] [client 206.184.108.138:41241] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:13:34.923484 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/foxwsov1.php
[Thu Jul 30 11:13:34.923530 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:34.942182 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/FoxWSOv2.php
[Thu Jul 30 11:13:34.942226 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.046530 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/foxwsov2.php
[Thu Jul 30 11:13:35.046590 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.066131 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shellx.php
[Thu Jul 30 11:13:35.066176 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.089161 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1index.php
[Thu Jul 30 11:13:35.089209 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.109747 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2index.php
[Thu Jul 30 11:13:35.109792 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.128435 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/3index.php
[Thu Jul 30 11:13:35.128479 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.147475 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/4index.php
[Thu Jul 30 11:13:35.147519 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.166170 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/5index.php
[Thu Jul 30 11:13:35.166215 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.186824 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/6index.php
[Thu Jul 30 11:13:35.186869 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.232584 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/7index.php
[Thu Jul 30 11:13:35.232633 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.295435 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/8index.php
[Thu Jul 30 11:13:35.295482 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.318497 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/9index.php
[Thu Jul 30 11:13:35.318541 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.349258 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index4.php
[Thu Jul 30 11:13:35.349300 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.404061 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index5.php
[Thu Jul 30 11:13:35.404118 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.422752 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index6.php
[Thu Jul 30 11:13:35.422814 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.491245 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index7.php
[Thu Jul 30 11:13:35.491295 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.510092 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index8.php
[Thu Jul 30 11:13:35.510139 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.528927 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index9.php
[Thu Jul 30 11:13:35.528975 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.548076 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indeex.php
[Thu Jul 30 11:13:35.548121 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.566788 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/jindex.php
[Thu Jul 30 11:13:35.566833 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.585280 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/p0wny-shell.php
[Thu Jul 30 11:13:35.585330 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.650914 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ex0shell.php
[Thu Jul 30 11:13:35.650959 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.712772 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/exp.php
[Thu Jul 30 11:13:35.712819 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.731699 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pHpINJ.php
[Thu Jul 30 11:13:35.731756 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.750424 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/robot.php
[Thu Jul 30 11:13:35.750470 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.769176 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sys32.php
[Thu Jul 30 11:13:35.769218 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.787688 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/simple_cmd.php
[Thu Jul 30 11:13:35.787733 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.806883 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alpa.php
[Thu Jul 30 11:13:35.806929 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.827702 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/themes
[Thu Jul 30 11:13:35.871598 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/su.php
[Thu Jul 30 11:13:35.871649 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:35.934633 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xx.php
[Thu Jul 30 11:13:35.934679 2026] [access_compat:error] [pid 2845704:tid 2845704] [client 20.79.29.209:16174] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.025245 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/byps.php
[Thu Jul 30 11:13:36.025299 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.047336 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/themes
[Thu Jul 30 11:13:36.074149 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/and.php
[Thu Jul 30 11:13:36.074194 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.115043 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/skizoo.php
[Thu Jul 30 11:13:36.115104 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.137599 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wsmini.php
[Thu Jul 30 11:13:36.137642 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.161205 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/86.php
[Thu Jul 30 11:13:36.161250 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.193193 2026] [security2:error] [pid 2848912:tid 2848912] [client 114.119.142.20:62401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~29-7-2018"] [unique_id "amsj0Jp7pbKHkb6E6t18LgAAADA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1530399600/cat_ids%7E19/request_format%7Ehtml
[Thu Jul 30 11:13:36.232711 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/min.php
[Thu Jul 30 11:13:36.232756 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.255710 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-backup-sql-302.php
[Thu Jul 30 11:13:36.255761 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.277959 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/json-php.php
[Thu Jul 30 11:13:36.278005 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.320494 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0x0.php
[Thu Jul 30 11:13:36.320553 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.342585 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0z.php
[Thu Jul 30 11:13:36.342629 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.364630 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/13.php
[Thu Jul 30 11:13:36.364671 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.386640 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1index.php
[Thu Jul 30 11:13:36.386679 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.408762 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/22xc.php
[Thu Jul 30 11:13:36.408803 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.430861 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/26.php
[Thu Jul 30 11:13:36.430904 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.468687 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2index.php
[Thu Jul 30 11:13:36.468734 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.491998 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:13960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:36.492471 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/32.php
[Thu Jul 30 11:13:36.492509 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.514624 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 11:13:36.514671 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.601428 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/4x4.php
[Thu Jul 30 11:13:36.601476 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.658846 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/73.php
[Thu Jul 30 11:13:36.658906 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.713986 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/al.php
[Thu Jul 30 11:13:36.714032 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.738867 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alf.php
[Thu Jul 30 11:13:36.738911 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.760990 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alf4.php
[Thu Jul 30 11:13:36.761032 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.783097 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa-shell-v4.php
[Thu Jul 30 11:13:36.783144 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.788210 2026] [ssl:error] [pid 2836236:tid 2836236] (70014)End of file found: [client 216.73.216.199:44051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:36.805340 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfakun.php
[Thu Jul 30 11:13:36.805383 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.827345 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfatesla.php
[Thu Jul 30 11:13:36.827386 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.849582 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfateslav4.php
[Thu Jul 30 11:13:36.849626 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.897771 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alwso.php
[Thu Jul 30 11:13:36.897816 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:36.980835 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anjay.php
[Thu Jul 30 11:13:36.980900 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.021249 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/anons79.php
[Thu Jul 30 11:13:37.021302 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.043587 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/base.php
[Thu Jul 30 11:13:37.043633 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.067091 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/batm.php
[Thu Jul 30 11:13:37.067138 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.107767 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bj.php
[Thu Jul 30 11:13:37.107847 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.145556 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/black.php
[Thu Jul 30 11:13:37.145639 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.209311 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/by.php
[Thu Jul 30 11:13:37.209391 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.259730 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/byp.php
[Thu Jul 30 11:13:37.259793 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.281896 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/con.php
[Thu Jul 30 11:13:37.281964 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.296085 2026] [core:error] [pid 2848913:tid 2848913] (13)Permission denied: [client 216.73.216.199:19047] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/cpu_partial
[Thu Jul 30 11:13:37.306722 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/con7ext.php
[Thu Jul 30 11:13:37.306792 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.340478 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/loader
[Thu Jul 30 11:13:37.374224 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dbx.php
[Thu Jul 30 11:13:37.374269 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.466197 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/degeselih.php
[Thu Jul 30 11:13:37.466242 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.510473 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/doc.php
[Thu Jul 30 11:13:37.510518 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.533328 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/docindex.php
[Thu Jul 30 11:13:37.533376 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.558360 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dosya.php
[Thu Jul 30 11:13:37.558403 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.600918 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/error.php
[Thu Jul 30 11:13:37.600967 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.733150 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/evil.php
[Thu Jul 30 11:13:37.733195 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.755540 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file.php
[Thu Jul 30 11:13:37.755598 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.777927 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/FoxWSO-full.php
[Thu Jul 30 11:13:37.777973 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.816689 2026] [ssl:error] [pid 2849776:tid 2849776] (EAI 2)Name or service not known: [client 144.76.19.72:30932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:37.816729 2026] [ssl:error] [pid 2849776:tid 2849776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:37.842839 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/FoxWSO.php
[Thu Jul 30 11:13:37.842883 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.864872 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/foxwso.php
[Thu Jul 30 11:13:37.864915 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.873040 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:30940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:37.873060 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:37.887326 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gank.php
[Thu Jul 30 11:13:37.887369 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.909367 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gank.php.PhP
[Thu Jul 30 11:13:37.909414 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:37.978477 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gh.php
[Thu Jul 30 11:13:37.978522 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.002233 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/id.php
[Thu Jul 30 11:13:38.002280 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.024393 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ids.php
[Thu Jul 30 11:13:38.024448 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.046454 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/idx.php
[Thu Jul 30 11:13:38.046500 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.086572 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/init.php
[Thu Jul 30 11:13:38.086622 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.089272 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 194.249.231.23:41366] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 11:13:38.089309 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 194.249.231.23:41366] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 11:13:38.120665 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kepo.php
[Thu Jul 30 11:13:38.120712 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.142669 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kk.php
[Thu Jul 30 11:13:38.142714 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.150836 2026] [lsapi:warn] [pid 2848909:tid 2848909] [client 45.158.164.139:48144] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:38.150875 2026] [lsapi:warn] [pid 2848909:tid 2848909] [client 45.158.164.139:48144] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:38.166626 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/kndw1.php
[Thu Jul 30 11:13:38.166669 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.188627 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/la.php
[Thu Jul 30 11:13:38.188673 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.210871 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lnedx.php
[Thu Jul 30 11:13:38.210928 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.233108 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/local.php
[Thu Jul 30 11:13:38.233155 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.316628 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lolzk.php
[Thu Jul 30 11:13:38.316676 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.338674 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/marijuana.php
[Thu Jul 30 11:13:38.338717 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.360802 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mas.php
[Thu Jul 30 11:13:38.360850 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.418032 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mini.php
[Thu Jul 30 11:13:38.418091 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.441863 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/minik.php
[Thu Jul 30 11:13:38.441907 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.464446 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/minishell.php
[Thu Jul 30 11:13:38.464488 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.486580 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mrjn.php
[Thu Jul 30 11:13:38.486625 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.556529 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ninja.php
[Thu Jul 30 11:13:38.556604 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.616320 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ohayo.php
[Thu Jul 30 11:13:38.616365 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.660617 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/olux.php
[Thu Jul 30 11:13:38.660662 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.682648 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/phpinfo.php
[Thu Jul 30 11:13:38.682694 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.777593 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/postfs.php
[Thu Jul 30 11:13:38.777642 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.808449 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pref.php
[Thu Jul 30 11:13:38.808496 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.824568 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:48158] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:38.824598 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:48158] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:38.847532 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/priv.php
[Thu Jul 30 11:13:38.847590 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.869961 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/priv8.php
[Thu Jul 30 11:13:38.870013 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.892023 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/qindex.php
[Thu Jul 30 11:13:38.892092 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.923757 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/radio.php
[Thu Jul 30 11:13:38.923809 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.952599 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shell20211028.php
[Thu Jul 30 11:13:38.952645 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:38.986254 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shells.php
[Thu Jul 30 11:13:38.986299 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.154653 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/stupid.php
[Thu Jul 30 11:13:39.154708 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.183912 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 45.158.164.139:48172] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:39.183936 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 45.158.164.139:48172] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:39.186605 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:39.186645 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:39.219221 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sys.php
[Thu Jul 30 11:13:39.219265 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.241268 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tes.php
[Thu Jul 30 11:13:39.241312 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.313826 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/teslav.php
[Thu Jul 30 11:13:39.313892 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.340385 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tshop.php
[Thu Jul 30 11:13:39.340431 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.362405 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/twin.php
[Thu Jul 30 11:13:39.362456 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.398100 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/upload.php
[Thu Jul 30 11:13:39.398151 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.439441 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ups.php
[Thu Jul 30 11:13:39.439488 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.462784 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/usb.php
[Thu Jul 30 11:13:39.462830 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.496628 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/usr.php
[Thu Jul 30 11:13:39.496675 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.518715 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/utchiha.phP
[Thu Jul 30 11:13:39.518762 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.540900 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/v3.php
[Thu Jul 30 11:13:39.540943 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.545141 2026] [lsapi:warn] [pid 2830223:tid 2830223] [client 45.158.164.139:48186] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:39.545186 2026] [lsapi:warn] [pid 2830223:tid 2830223] [client 45.158.164.139:48186] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:39.548051 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:39.548084 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:39.628374 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/v4.php
[Thu Jul 30 11:13:39.628419 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.650524 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wikindex.php
[Thu Jul 30 11:13:39.650580 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.672794 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-2019.php
[Thu Jul 30 11:13:39.672841 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.695014 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-atom.php
[Thu Jul 30 11:13:39.695058 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.717745 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-bita.php
[Thu Jul 30 11:13:39.717792 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.783557 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-conflg.php
[Thu Jul 30 11:13:39.783604 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.805830 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-ctac.php
[Thu Jul 30 11:13:39.805876 2026] [access_compat:error] [pid 2849603:tid 2849603] [client 20.79.29.209:16219] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.861471 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-defaul.php
[Thu Jul 30 11:13:39.861530 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.880018 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:48202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:39.880060 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:48202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:39.881077 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-hmdra.php
[Thu Jul 30 11:13:39.881118 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.882743 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:39.882765 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:39.907411 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-iav.php
[Thu Jul 30 11:13:39.907460 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.926768 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-info.php
[Thu Jul 30 11:13:39.926816 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.946259 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-inlcudes.php
[Thu Jul 30 11:13:39.946307 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.965685 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-installer.php
[Thu Jul 30 11:13:39.965730 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:39.985197 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-js.php
[Thu Jul 30 11:13:39.985243 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.005328 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-mails.php
[Thu Jul 30 11:13:40.005384 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.042235 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-one.php
[Thu Jul 30 11:13:40.042283 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.063452 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-pluging.php
[Thu Jul 30 11:13:40.063496 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.083046 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-plugins.php
[Thu Jul 30 11:13:40.083102 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.151382 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-rss.php
[Thu Jul 30 11:13:40.151428 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.171003 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-singupp.php
[Thu Jul 30 11:13:40.171050 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.191101 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-site.php
[Thu Jul 30 11:13:40.191149 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.214909 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-system.php
[Thu Jul 30 11:13:40.214960 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.245994 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-title.php
[Thu Jul 30 11:13:40.246044 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.251081 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 45.158.164.139:48214] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:40.251120 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 45.158.164.139:48214] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:40.253330 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:40.253355 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:40.265649 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-we.php
[Thu Jul 30 11:13:40.265693 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.285121 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wpindex.php
[Thu Jul 30 11:13:40.285169 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.309576 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp_wrong_datlib.php
[Thu Jul 30 11:13:40.309626 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.338579 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ws.php
[Thu Jul 30 11:13:40.338626 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.360708 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/notfound.php
[Thu Jul 30 11:13:40.360754 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.439190 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso1337.php
[Thu Jul 30 11:13:40.439236 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.447264 2026] [ssl:error] [pid 2848913:tid 2848913] (70014)End of file found: [client 216.73.216.199:19047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:40.518660 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso2.php
[Thu Jul 30 11:13:40.518706 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.556611 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xcv.php
[Thu Jul 30 11:13:40.556660 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.580015 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xl.php
[Thu Jul 30 11:13:40.580060 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.582413 2026] [lsapi:warn] [pid 2808147:tid 2808147] [client 45.158.164.139:48222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:40.582438 2026] [lsapi:warn] [pid 2808147:tid 2808147] [client 45.158.164.139:48222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:40.584491 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:40.584513 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:40.643004 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xleet.php
[Thu Jul 30 11:13:40.643055 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.692563 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/XxX.php
[Thu Jul 30 11:13:40.692611 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.712095 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zk.php
[Thu Jul 30 11:13:40.712143 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.733720 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zone.php
[Thu Jul 30 11:13:40.733768 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.753275 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zx.php
[Thu Jul 30 11:13:40.753324 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.778360 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.conf.php
[Thu Jul 30 11:13:40.778405 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.797861 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/decer.php
[Thu Jul 30 11:13:40.797908 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.817258 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/auto_seo.php
[Thu Jul 30 11:13:40.817303 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.836590 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alone.php
[Thu Jul 30 11:13:40.836635 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.856008 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/error.php
[Thu Jul 30 11:13:40.856055 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.875476 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 11:13:40.875520 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.903232 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xx.php
[Thu Jul 30 11:13:40.903279 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.929313 2026] [ssl:error] [pid 2849776:tid 2849776] (EAI 2)Name or service not known: [client 144.76.19.72:48578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:40.929339 2026] [ssl:error] [pid 2849776:tid 2849776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:40.961802 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/222.php
[Thu Jul 30 11:13:40.961850 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:40.982293 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:48584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:40.982332 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:41.016006 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/444.php
[Thu Jul 30 11:13:41.016052 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.043259 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file9.php
[Thu Jul 30 11:13:41.043303 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.062739 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/filesss.php
[Thu Jul 30 11:13:41.062778 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.082160 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file88.php
[Thu Jul 30 11:13:41.082202 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.101560 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gifclass4.php
[Thu Jul 30 11:13:41.101604 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.172443 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class19.php
[Thu Jul 30 11:13:41.172488 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.192925 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2clas.php
[Thu Jul 30 11:13:41.192966 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.215790 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bless5.php
[Thu Jul 30 11:13:41.215833 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.237082 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file15.php
[Thu Jul 30 11:13:41.237130 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.256344 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/333.php
[Thu Jul 30 11:13:41.256405 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.276047 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alpa.php
[Thu Jul 30 11:13:41.276101 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.295412 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file21.php
[Thu Jul 30 11:13:41.295453 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.317570 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ut.php
[Thu Jul 30 11:13:41.317612 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.380481 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inde.php
[Thu Jul 30 11:13:41.380531 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.400179 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classgoto24.php
[Thu Jul 30 11:13:41.400225 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.419521 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/thh.php
[Thu Jul 30 11:13:41.419573 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.459961 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fffff.php
[Thu Jul 30 11:13:41.460006 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.505772 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/indo.php
[Thu Jul 30 11:13:41.505819 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.525105 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fileas.php
[Thu Jul 30 11:13:41.525152 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.575527 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/yellow.php
[Thu Jul 30 11:13:41.575587 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.595445 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wfile.php
[Thu Jul 30 11:13:41.595490 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.624477 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class20.php
[Thu Jul 30 11:13:41.624522 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.644439 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/build.php
[Thu Jul 30 11:13:41.644483 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.664450 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php
[Thu Jul 30 11:13:41.664497 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.684461 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/usep.php
[Thu Jul 30 11:13:41.684512 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.703829 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wa.php
[Thu Jul 30 11:13:41.703872 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.725315 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wb.php
[Thu Jul 30 11:13:41.725365 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.745366 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file1.php
[Thu Jul 30 11:13:41.745425 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.836280 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gmo.php
[Thu Jul 30 11:13:41.836329 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.856514 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/info.php
[Thu Jul 30 11:13:41.856579 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.857603 2026] [core:error] [pid 2849683:tid 2849683] (13)Permission denied: [client 216.73.216.199:58408] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/codeworksltd.com.db
[Thu Jul 30 11:13:41.909130 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file2.php
[Thu Jul 30 11:13:41.909178 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:41.980336 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:45238] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:41.980366 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:45238] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:41.989583 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lv.php
[Thu Jul 30 11:13:41.989627 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.018584 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 11:13:42.018628 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.263626 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/abcd.php
[Thu Jul 30 11:13:42.263671 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.283980 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lock360.php
[Thu Jul 30 11:13:42.284020 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.303245 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pp.php
[Thu Jul 30 11:13:42.303291 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.322627 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/geck.php
[Thu Jul 30 11:13:42.322675 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.342508 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gm.php
[Thu Jul 30 11:13:42.342565 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.363001 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file4.php
[Thu Jul 30 11:13:42.363046 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.382474 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/520.php
[Thu Jul 30 11:13:42.382519 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.401862 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file18.php
[Thu Jul 30 11:13:42.401907 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.429313 2026] [lsapi:warn] [pid 2849863:tid 2849863] [client 45.158.164.139:45250] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:42.429360 2026] [lsapi:warn] [pid 2849863:tid 2849863] [client 45.158.164.139:45250] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:42.431399 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:42.431425 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:42.465999 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ffile.php
[Thu Jul 30 11:13:42.466058 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.520401 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file7.php
[Thu Jul 30 11:13:42.520444 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.625303 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaa.php
[Thu Jul 30 11:13:42.625353 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.644798 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vee.php
[Thu Jul 30 11:13:42.644851 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.669396 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/efile.php
[Thu Jul 30 11:13:42.669443 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.729474 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/afile.php
[Thu Jul 30 11:13:42.729522 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.755581 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 11:13:42.755625 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.770924 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:42.770953 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:42.802973 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/goods.php
[Thu Jul 30 11:13:42.803017 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.852399 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/enclas.php
[Thu Jul 30 11:13:42.852462 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.871904 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ioxi-o.php
[Thu Jul 30 11:13:42.871946 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.892437 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:42.916575 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 11:13:42.916641 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.957728 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/image.php
[Thu Jul 30 11:13:42.957771 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:42.984591 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:13:43.003958 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-freya.php
[Thu Jul 30 11:13:43.004006 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.034514 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/X7x.php
[Thu Jul 30 11:13:43.034572 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.053895 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admir.php
[Thu Jul 30 11:13:43.053941 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.073515 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file52.php
[Thu Jul 30 11:13:43.073571 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.092769 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zde.php
[Thu Jul 30 11:13:43.092831 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.112602 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wpo.php
[Thu Jul 30 11:13:43.112646 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.132041 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aj.php
[Thu Jul 30 11:13:43.132100 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.163307 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:45268] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:43.163333 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:45268] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:43.164942 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:43.164969 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:43.198524 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/opts.php
[Thu Jul 30 11:13:43.198578 2026] [access_compat:error] [pid 2848975:tid 2848975] [client 20.79.29.209:16144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.312679 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/filer.php
[Thu Jul 30 11:13:43.312728 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.333877 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lites.php
[Thu Jul 30 11:13:43.333922 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.354245 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/0x.php
[Thu Jul 30 11:13:43.354292 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.374299 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bless3.php
[Thu Jul 30 11:13:43.374359 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.394396 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wsd.php
[Thu Jul 30 11:13:43.394439 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.411759 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:43.411792 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:43.414897 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f6.php
[Thu Jul 30 11:13:43.414939 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.440333 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/he.php
[Thu Jul 30 11:13:43.440380 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.488237 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aves.php
[Thu Jul 30 11:13:43.488283 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.529058 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/about.php
[Thu Jul 30 11:13:43.529120 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.549186 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gorila.php
[Thu Jul 30 11:13:43.549231 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.569444 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vanta.php
[Thu Jul 30 11:13:43.569491 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.593259 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sh3ll.php
[Thu Jul 30 11:13:43.593307 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.613881 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cabs.php
[Thu Jul 30 11:13:43.613922 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.633913 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/filesss.php
[Thu Jul 30 11:13:43.633957 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.654007 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-aaa.php
[Thu Jul 30 11:13:43.654052 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.675013 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css.php
[Thu Jul 30 11:13:43.675060 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.695268 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ioxi-o.php
[Thu Jul 30 11:13:43.695313 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.743460 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 11:13:43.743506 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.766046 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/modules/mod_simplefileuploadv1.3
[Thu Jul 30 11:13:43.773959 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:45272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:43.773984 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:45272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:43.776214 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:43.776235 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:43.789838 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fm.php
[Thu Jul 30 11:13:43.789881 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.813226 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.php
[Thu Jul 30 11:13:43.813268 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.841406 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 11:13:43.841453 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:43.861486 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lv.php
[Thu Jul 30 11:13:43.861533 2026] [access_compat:error] [pid 2841474:tid 2841474] [client 20.79.29.209:16243] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:13:44.041429 2026] [ssl:error] [pid 2850152:tid 2850152] (EAI 2)Name or service not known: [client 144.76.19.72:48588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:44.041468 2026] [ssl:error] [pid 2850152:tid 2850152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:44.094962 2026] [ssl:error] [pid 2849603:tid 2849603] (EAI 2)Name or service not known: [client 144.76.19.72:48604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:44.094999 2026] [ssl:error] [pid 2849603:tid 2849603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:44.138883 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:45298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:44.138927 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:45298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:44.141038 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:44.141080 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:44.477371 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:44.477397 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:44.660822 2026] [core:error] [pid 2845175:tid 2845175] (13)Permission denied: [client 216.73.216.199:63983] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/bashforthbell.com.db
[Thu Jul 30 11:13:44.809351 2026] [lsapi:warn] [pid 2839811:tid 2839811] [client 45.158.164.139:45302] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:44.809382 2026] [lsapi:warn] [pid 2839811:tid 2839811] [client 45.158.164.139:45302] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:44.811592 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:44.811615 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:45.136512 2026] [lsapi:warn] [pid 2841431:tid 2841431] [client 45.158.164.139:45306] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:45.136573 2026] [lsapi:warn] [pid 2841431:tid 2841431] [client 45.158.164.139:45306] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:45.432495 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:45308] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:45.432535 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:45308] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:45.738950 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:45336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:45.738996 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:45336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:45.740989 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:45.741014 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:46.039862 2026] [lsapi:warn] [pid 2848913:tid 2848913] [client 45.158.164.139:45340] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:46.039904 2026] [lsapi:warn] [pid 2848913:tid 2848913] [client 45.158.164.139:45340] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:46.041956 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:46.041978 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:46.351557 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:45350] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:46.351590 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:45350] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:46.657002 2026] [lsapi:warn] [pid 2848981:tid 2848981] [client 45.158.164.139:45360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:46.657048 2026] [lsapi:warn] [pid 2848981:tid 2848981] [client 45.158.164.139:45360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:46.659256 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:46.659281 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:47.150729 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:48616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:47.150756 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:47.220518 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:48628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:47.220563 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:47.374644 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:45368] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:47.374686 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:45368] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:47.376154 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:47.376180 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:47.376225 2026] [ssl:error] [pid 2849683:tid 2849683] (70014)End of file found: [client 216.73.216.199:58408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:47.743871 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:47.743901 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:48.093392 2026] [lsapi:warn] [pid 2848913:tid 2848913] [client 45.158.164.139:45404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:48.093421 2026] [lsapi:warn] [pid 2848913:tid 2848913] [client 45.158.164.139:45404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:48.095590 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:48.095618 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:48.429765 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:45410] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:48.429795 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:45410] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:48.767334 2026] [lsapi:warn] [pid 2848846:tid 2848846] [client 45.158.164.139:45422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:48.767381 2026] [lsapi:warn] [pid 2848846:tid 2848846] [client 45.158.164.139:45422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:48.769394 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:48.769420 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:49.079679 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:45438] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:49.079705 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:45438] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:49.081749 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:49.081774 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:49.385670 2026] [lsapi:warn] [pid 2848975:tid 2848975] [client 45.158.164.139:45442] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:49.385716 2026] [lsapi:warn] [pid 2848975:tid 2848975] [client 45.158.164.139:45442] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:49.690931 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:49.690961 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:50.033419 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:50.033448 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:50.231268 2026] [cgi:error] [pid 2850090:tid 2850090] [client 121.229.156.61:50064] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:13:50.275184 2026] [ssl:error] [pid 2848912:tid 2848912] (EAI 2)Name or service not known: [client 144.76.19.72:33612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:50.275217 2026] [ssl:error] [pid 2848912:tid 2848912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:50.330499 2026] [ssl:error] [pid 2848988:tid 2848988] (EAI 2)Name or service not known: [client 144.76.19.72:33620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:50.330530 2026] [ssl:error] [pid 2848988:tid 2848988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:50.418210 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:45466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:50.418249 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:45466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:50.446029 2026] [security2:error] [pid 2845175:tid 2845175] [client 216.73.216.199:63983] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/NetworkManager/examples/server.conf"] [unique_id "amsj3mgRTXOS_Zws4P1cXwAAAA8"]
[Thu Jul 30 11:13:50.446345 2026] [security2:error] [pid 2845175:tid 2845175] [client 216.73.216.199:63983] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/NetworkManager/examples/server.conf"] [unique_id "amsj3mgRTXOS_Zws4P1cXwAAAA8"]
[Thu Jul 30 11:13:50.446585 2026] [security2:error] [pid 2845175:tid 2845175] [client 216.73.216.199:63983] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/NetworkManager/examples/server.conf"] [unique_id "amsj3mgRTXOS_Zws4P1cXwAAAA8"]
[Thu Jul 30 11:13:50.724918 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:50.724949 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:51.014101 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:51.014132 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:51.455963 2026] [cgi:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:13:51.490254 2026] [security2:error] [pid 2823072:tid 2823072] [client 18.199.86.73:54974] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsj3xt_UQDEcOLgX9oV5wAAAD4"]
[Thu Jul 30 11:13:51.490428 2026] [security2:error] [pid 2823072:tid 2823072] [client 18.199.86.73:54974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsj3xt_UQDEcOLgX9oV5wAAAD4"]
[Thu Jul 30 11:13:51.491375 2026] [security2:error] [pid 2823072:tid 2823072] [client 18.199.86.73:54974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "amsj3xt_UQDEcOLgX9oV5wAAAD4"]
[Thu Jul 30 11:13:51.608196 2026] [lsapi:warn] [pid 2848975:tid 2848975] [client 45.158.164.139:47986] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:51.608226 2026] [lsapi:warn] [pid 2848975:tid 2848975] [client 45.158.164.139:47986] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:51.611255 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:51.611278 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:51.763503 2026] [authz_core:error] [pid 2850152:tid 2850152] [client 66.249.66.205:39104] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:13:51.766170 2026] [authz_core:error] [pid 2850152:tid 2850152] [client 66.249.66.205:39104] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:13:52.259983 2026] [lsapi:warn] [pid 2830223:tid 2830223] [client 45.158.164.139:48012] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:52.260013 2026] [lsapi:warn] [pid 2830223:tid 2830223] [client 45.158.164.139:48012] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:52.262039 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:52.262061 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:52.563079 2026] [lsapi:warn] [pid 2836236:tid 2836236] [client 45.158.164.139:48016] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:52.563123 2026] [lsapi:warn] [pid 2836236:tid 2836236] [client 45.158.164.139:48016] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:52.565572 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:52.565605 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:52.708097 2026] [cgi:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:13:52.861474 2026] [lsapi:warn] [pid 2838781:tid 2838781] [client 45.158.164.139:48024] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:52.861520 2026] [lsapi:warn] [pid 2838781:tid 2838781] [client 45.158.164.139:48024] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:52.863665 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:52.863688 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:53.387304 2026] [ssl:error] [pid 2849869:tid 2849869] (EAI 2)Name or service not known: [client 144.76.19.72:33630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:53.387336 2026] [ssl:error] [pid 2849869:tid 2849869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:53.438930 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:33642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:53.438960 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:53.592658 2026] [lsapi:warn] [pid 2849863:tid 2849863] [client 45.158.164.139:48028] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:53.592687 2026] [lsapi:warn] [pid 2849863:tid 2849863] [client 45.158.164.139:48028] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:53.594878 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:53.594902 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:54.026742 2026] [lsapi:warn] [pid 2841682:tid 2841682] [client 45.158.164.139:48038] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:54.026770 2026] [lsapi:warn] [pid 2841682:tid 2841682] [client 45.158.164.139:48038] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:54.028815 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:54.028851 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:54.685486 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:54.685516 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:55.066418 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:48072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:55.066448 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:48072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:55.068607 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:55.068635 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:55.272206 2026] [ssl:error] [pid 2808147:tid 2808147] (70014)End of file found: [client 216.73.216.199:26037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:55.458713 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:55.458758 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:55.764197 2026] [lsapi:warn] [pid 2849869:tid 2849869] [client 45.158.164.139:48094] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:55.764233 2026] [lsapi:warn] [pid 2849869:tid 2849869] [client 45.158.164.139:48094] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:56.106902 2026] [lsapi:warn] [pid 2849683:tid 2849683] [client 45.158.164.139:48102] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:56.106946 2026] [lsapi:warn] [pid 2849683:tid 2849683] [client 45.158.164.139:48102] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:56.108714 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:56.108742 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:56.249799 2026] [cgi:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:13:56.461363 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 45.158.164.139:48128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:56.461406 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 45.158.164.139:48128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:56.570006 2026] [ssl:error] [pid 2850089:tid 2850089] (EAI 2)Name or service not known: [client 144.76.19.72:33650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:56.570036 2026] [ssl:error] [pid 2850089:tid 2850089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:56.622674 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:33666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:56.622708 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:57.135254 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:48154] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:57.135300 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:48154] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:57.137772 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:57.137802 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:57.403370 2026] [ssl:error] [pid 2845175:tid 2845175] (70014)End of file found: [client 216.73.216.199:63983] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:13:57.472483 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:48176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:57.472528 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:48176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:57.475361 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:57.475386 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:57.833001 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:48184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:57.833040 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:48184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:58.136033 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:48198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:58.136093 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:48198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:58.137705 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:58.137732 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:58.479484 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:48208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:58.479513 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:48208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:58.481637 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:58.481659 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:58.792676 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:58.792709 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:59.087490 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:48226] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:59.087517 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:48226] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:59.089556 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:59.089580 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:59.436973 2026] [lsapi:warn] [pid 2849870:tid 2849870] [client 45.158.164.139:48232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:59.437015 2026] [lsapi:warn] [pid 2849870:tid 2849870] [client 45.158.164.139:48232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:59.680020 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:38548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:59.680045 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:13:59.759902 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:48236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:13:59.759933 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:48236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:13:59.786529 2026] [ssl:error] [pid 2850153:tid 2850153] (EAI 2)Name or service not known: [client 144.76.19.72:38554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:13:59.786570 2026] [ssl:error] [pid 2850153:tid 2850153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:00.101328 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:48240] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:00.101358 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:48240] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:00.401892 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:48254] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:00.401921 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:48254] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:00.408666 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:00.408693 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:00.707083 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:00.707112 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:00.739161 2026] [security2:error] [pid 2850153:tid 2850153] [client 47.254.92.190:56040] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.firstclassbkltd.co.uk"] [uri "/"] [unique_id "amsj6J8Yq7WlbIzsp9ZCIwAAAF8"]
[Thu Jul 30 11:14:01.059957 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:01.059986 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:01.415427 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:56632] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:01.415458 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:56632] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:01.418034 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:01.418060 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:02.086500 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:56646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:02.086530 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:56646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:02.088573 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:02.088600 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:02.393312 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:02.393338 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:02.532148 2026] [cgi:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:14:02.670264 2026] [core:error] [pid 2842781:tid 2842781] [client 66.249.66.39:56304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:02.670286 2026] [core:error] [pid 2842781:tid 2842781] [client 66.249.66.39:56304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:02.680872 2026] [lsapi:warn] [pid 2836236:tid 2836236] [client 45.158.164.139:56664] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:02.680898 2026] [lsapi:warn] [pid 2836236:tid 2836236] [client 45.158.164.139:56664] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:02.683367 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:02.683405 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:02.842277 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:38566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:02.842302 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:02.864867 2026] [core:error] [pid 2850153:tid 2850153] [client 66.249.66.167:64514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:02.864891 2026] [core:error] [pid 2850153:tid 2850153] [client 66.249.66.167:64514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:02.894992 2026] [ssl:error] [pid 2836236:tid 2836236] (EAI 2)Name or service not known: [client 144.76.19.72:38570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:02.895015 2026] [ssl:error] [pid 2836236:tid 2836236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:02.980967 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:02.981018 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:03.292247 2026] [lsapi:warn] [pid 2848847:tid 2848847] [client 45.158.164.139:56694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:03.292293 2026] [lsapi:warn] [pid 2848847:tid 2848847] [client 45.158.164.139:56694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:03.294482 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:03.294524 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:03.665325 2026] [lsapi:warn] [pid 2845175:tid 2845175] [client 45.158.164.139:56696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:03.665372 2026] [lsapi:warn] [pid 2845175:tid 2845175] [client 45.158.164.139:56696] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:03.672034 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:03.672060 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:04.061329 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56708] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:04.061359 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56708] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:04.064051 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:04.064086 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:04.439811 2026] [lsapi:warn] [pid 2849776:tid 2849776] [client 45.158.164.139:56724] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:04.439852 2026] [lsapi:warn] [pid 2849776:tid 2849776] [client 45.158.164.139:56724] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:04.442613 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:04.442636 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:04.721871 2026] [core:error] [pid 2848980:tid 2848980] [client 66.249.64.170:53670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:04.721938 2026] [core:error] [pid 2848980:tid 2848980] [client 66.249.64.170:53670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:04.757774 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:04.757799 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:56738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:05.054312 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:56748] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:05.054342 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:56748] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:05.057384 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:05.057411 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:05.355975 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:05.356007 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:05.677642 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56760] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:05.677682 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56760] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:05.967077 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:38586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:05.967112 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:06.021405 2026] [ssl:error] [pid 2848980:tid 2848980] (EAI 2)Name or service not known: [client 144.76.19.72:38600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:06.021430 2026] [ssl:error] [pid 2848980:tid 2848980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:06.022720 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:06.022747 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:06.337693 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:06.337722 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:06.344504 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:06.344531 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:06.486288 2026] [cgi:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:14:06.650028 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:06.650056 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:06.962373 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:56794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:06.962405 2026] [lsapi:warn] [pid 2823072:tid 2823072] [client 45.158.164.139:56794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:06.963782 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:06.963807 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:07.341165 2026] [security2:error] [pid 2850090:tid 2850090] [client 216.73.216.199:45298] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/modprobe.d/systemd.conf"] [unique_id "amsj75hGMTMnagSdd3olHgAAAFk"]
[Thu Jul 30 11:14:07.341471 2026] [security2:error] [pid 2850090:tid 2850090] [client 216.73.216.199:45298] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/modprobe.d/systemd.conf"] [unique_id "amsj75hGMTMnagSdd3olHgAAAFk"]
[Thu Jul 30 11:14:07.341704 2026] [security2:error] [pid 2850090:tid 2850090] [client 216.73.216.199:45298] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/modprobe.d/systemd.conf"] [unique_id "amsj75hGMTMnagSdd3olHgAAAFk"]
[Thu Jul 30 11:14:07.620160 2026] [lsapi:warn] [pid 2855112:tid 2855112] [client 45.158.164.139:56818] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:07.620203 2026] [lsapi:warn] [pid 2855112:tid 2855112] [client 45.158.164.139:56818] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:07.623259 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:07.623286 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:07.969549 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 45.158.164.139:56828] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:07.969576 2026] [lsapi:warn] [pid 2850148:tid 2850148] [client 45.158.164.139:56828] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:08.331990 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56844] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:08.332020 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56844] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:08.556526 2026] [cgi:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:14:08.715854 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:56852] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:08.715886 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:56852] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:08.718012 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:08.718036 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:09.076454 2026] [ssl:error] [pid 2849603:tid 2849603] (EAI 2)Name or service not known: [client 144.76.19.72:38602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:09.076480 2026] [ssl:error] [pid 2849603:tid 2849603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:09.130986 2026] [ssl:error] [pid 2848988:tid 2848988] (EAI 2)Name or service not known: [client 144.76.19.72:38610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:09.131009 2026] [ssl:error] [pid 2848988:tid 2848988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:09.463778 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:56870] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:09.463808 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:56870] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:09.468323 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:09.468355 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:09.784672 2026] [security2:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brodie-engineering.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsj8WVwRLwlSwWPMwXc-QAAAA0"]
[Thu Jul 30 11:14:09.784873 2026] [security2:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "brodie-engineering.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsj8WVwRLwlSwWPMwXc-QAAAA0"]
[Thu Jul 30 11:14:09.785156 2026] [security2:error] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "brodie-engineering.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsj8WVwRLwlSwWPMwXc-QAAAA0"]
[Thu Jul 30 11:14:10.127056 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:10.127096 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:10.477604 2026] [security2:error] [pid 2853737:tid 2853737] [client 110.249.202.150:41124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.auroravation.co.uk"] [uri "/robots.txt"] [unique_id "amsj8pur3pbqSLyzv5BkpQAAAAE"]
[Thu Jul 30 11:14:10.838665 2026] [lsapi:warn] [pid 2848847:tid 2848847] [client 45.158.164.139:56874] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:10.838695 2026] [lsapi:warn] [pid 2848847:tid 2848847] [client 45.158.164.139:56874] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:10.840210 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:10.840234 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:11.154406 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:11.154438 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:11.519322 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:56902] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:11.519352 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:56902] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:11.521615 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:11.521642 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:11.868912 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:56918] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:11.868942 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:56918] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:11.873255 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:11.873282 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:12.183994 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:23540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:12.184022 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:12.221795 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:12.221822 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:12.236777 2026] [ssl:error] [pid 2855111:tid 2855111] (EAI 2)Name or service not known: [client 144.76.19.72:23548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:12.236812 2026] [ssl:error] [pid 2855111:tid 2855111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:12.541854 2026] [lsapi:warn] [pid 2850047:tid 2850047] [client 45.158.164.139:56940] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:12.541893 2026] [lsapi:warn] [pid 2850047:tid 2850047] [client 45.158.164.139:56940] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:12.544226 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:12.544251 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:12.907886 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:56950] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:12.907917 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:56950] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:12.916789 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:12.916832 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:13.228844 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:56958] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:13.228874 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:56958] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:13.230921 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:13.230946 2026] [lsapi:warn] [pid 2847255:tid 2847255] [client 20.171.55.167:2501] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:14.187459 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56962] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:14.187490 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:56962] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:14.565117 2026] [ssl:error] [pid 2850090:tid 2850090] (70014)End of file found: [client 216.73.216.199:45298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:14.656913 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:56982] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:14.656944 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:56982] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:14.870483 2026] [ssl:error] [pid 2845175:tid 2845175] (70014)End of file found: [client 216.73.216.199:12271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:14.989358 2026] [lsapi:warn] [pid 2848971:tid 2848971] [client 45.158.164.139:56996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:14.989397 2026] [lsapi:warn] [pid 2848971:tid 2848971] [client 45.158.164.139:56996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:14.990792 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:14.990813 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:15.291770 2026] [ssl:error] [pid 2850153:tid 2850153] (EAI 2)Name or service not known: [client 144.76.19.72:23554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:15.291806 2026] [ssl:error] [pid 2850153:tid 2850153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:15.310585 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:57008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:15.310609 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:57008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:15.313765 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:15.313793 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:15.347878 2026] [ssl:error] [pid 2855227:tid 2855227] (EAI 2)Name or service not known: [client 144.76.19.72:23562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:15.347911 2026] [ssl:error] [pid 2855227:tid 2855227] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:15.682717 2026] [lsapi:warn] [pid 2843654:tid 2843654] [client 45.158.164.139:57020] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:15.682747 2026] [lsapi:warn] [pid 2843654:tid 2843654] [client 45.158.164.139:57020] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:16.004189 2026] [lsapi:warn] [pid 2848908:tid 2848908] [client 45.158.164.139:57036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:16.004229 2026] [lsapi:warn] [pid 2848908:tid 2848908] [client 45.158.164.139:57036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:16.142312 2026] [ssl:error] [pid 2848773:tid 2848773] (70014)End of file found: [client 216.73.216.199:33815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:16.400315 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:57052] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:16.400344 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:57052] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:16.402354 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:16.402379 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:16.698577 2026] [security2:error] [pid 2850089:tid 2850089] [client 43.165.126.130:35768] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saliency.co.uk"] [uri "/"] [unique_id "amsj-FEy4Y3VxVtXT0eTowAAAFg"]
[Thu Jul 30 11:14:16.746984 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:57082] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:16.747015 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:57082] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:16.753765 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:16.753791 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:17.316980 2026] [lsapi:warn] [pid 2855896:tid 2855896] [client 45.158.164.139:57084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:17.317017 2026] [lsapi:warn] [pid 2855896:tid 2855896] [client 45.158.164.139:57084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:17.319995 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:17.320020 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:17.449009 2026] [core:error] [pid 2843654:tid 2843654] (13)Permission denied: [client 216.73.216.199:13308] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/drm/uevent
[Thu Jul 30 11:14:18.009617 2026] [lsapi:warn] [pid 2855112:tid 2855112] [client 45.158.164.139:57090] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:18.009650 2026] [lsapi:warn] [pid 2855112:tid 2855112] [client 45.158.164.139:57090] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:18.011872 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:18.011899 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:18.666772 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:23568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:18.666796 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:18.721175 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:23570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:18.721202 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:18.953084 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:57118] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:18.953113 2026] [lsapi:warn] [pid 2815857:tid 2815857] [client 45.158.164.139:57118] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:18.955214 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:18.955235 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:19.286732 2026] [lsapi:warn] [pid 2849870:tid 2849870] [client 45.158.164.139:57124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:19.286764 2026] [lsapi:warn] [pid 2849870:tid 2849870] [client 45.158.164.139:57124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:19.622868 2026] [lsapi:warn] [pid 2849870:tid 2849870] [client 45.158.164.139:57136] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:19.622895 2026] [lsapi:warn] [pid 2849870:tid 2849870] [client 45.158.164.139:57136] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:19.972335 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:57144] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:19.972375 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:57144] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:20.168210 2026] [core:error] [pid 2849869:tid 2849869] (13)Permission denied: [client 216.73.216.199:52161] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP/object_size
[Thu Jul 30 11:14:20.363711 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:20.363740 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:20.720353 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:55422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:20.720385 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:55422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:20.722509 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:20.722535 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:20.756372 2026] [security2:error] [pid 2815857:tid 2815857] [client 85.208.96.203:59954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/michael-jennings-obituary"] [unique_id "amsj_LwXx2CERl4kDMTmRQAAAC0"]
[Thu Jul 30 11:14:21.090767 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:21.090798 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:21.778625 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:61278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:21.778651 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:21.833183 2026] [ssl:error] [pid 2848984:tid 2848984] (EAI 2)Name or service not known: [client 144.76.19.72:61288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:21.833222 2026] [ssl:error] [pid 2848984:tid 2848984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:22.007364 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55454] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:22.007393 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55454] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:22.271195 2026] [core:error] [pid 2843654:tid 2843654] (13)Permission denied: [client 216.73.216.199:13308] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/cpu_slabs
[Thu Jul 30 11:14:22.387423 2026] [authz_core:error] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] AH01630: client denied by server configuration: /home/beng/public_html/wp-includes.bak
[Thu Jul 30 11:14:22.710535 2026] [lsapi:warn] [pid 2841465:tid 2841465] [client 45.158.164.139:55456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:22.710585 2026] [lsapi:warn] [pid 2841465:tid 2841465] [client 45.158.164.139:55456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:22.717371 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:22.717397 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:23.320990 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:55466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:23.321029 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:55466] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:23.691948 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:23.691992 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:24.082339 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:24.082371 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:24.425282 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:55500] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:24.425314 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:55500] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:24.854970 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 45.158.164.139:55506] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:24.854999 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 45.158.164.139:55506] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:24.856361 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:24.856386 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:24.888569 2026] [ssl:error] [pid 2841474:tid 2841474] (EAI 2)Name or service not known: [client 144.76.19.72:61314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:24.888592 2026] [ssl:error] [pid 2841474:tid 2841474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:24.942936 2026] [ssl:error] [pid 2850148:tid 2850148] (EAI 2)Name or service not known: [client 144.76.19.72:61318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:24.942966 2026] [ssl:error] [pid 2850148:tid 2850148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:25.176385 2026] [lsapi:warn] [pid 2856068:tid 2856068] [client 45.158.164.139:55522] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:25.176421 2026] [lsapi:warn] [pid 2856068:tid 2856068] [client 45.158.164.139:55522] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:25.178027 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:25.178052 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:25.545585 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:55534] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:25.545613 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:55534] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:25.547767 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:25.547791 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:25.903364 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55546] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:25.903394 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55546] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:25.910368 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:25.910396 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:26.609939 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:55590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:26.609978 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:55590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:26.611951 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:26.611977 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:26.990692 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 45.158.164.139:55610] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:26.990719 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 45.158.164.139:55610] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:27.321364 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55620] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:27.321396 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55620] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:27.324212 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:27.324236 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:27.463699 2026] [cgi:error] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:14:27.730434 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:27.730463 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:28.006618 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:61336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:28.006648 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:28.062567 2026] [ssl:error] [pid 2815857:tid 2815857] (EAI 2)Name or service not known: [client 144.76.19.72:61344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:28.062594 2026] [ssl:error] [pid 2815857:tid 2815857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:28.102394 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55636] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:28.102439 2026] [lsapi:warn] [pid 2848773:tid 2848773] [client 45.158.164.139:55636] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:28.108313 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:28.108359 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:28.452279 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:55644] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:28.452308 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:55644] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:28.593242 2026] [core:error] [pid 2843654:tid 2843654] (13)Permission denied: [client 216.73.216.199:13308] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/cpu_partial
[Thu Jul 30 11:14:28.856788 2026] [lsapi:warn] [pid 2850090:tid 2850090] [client 45.158.164.139:55658] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:28.856831 2026] [lsapi:warn] [pid 2850090:tid 2850090] [client 45.158.164.139:55658] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:28.861345 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:28.861369 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:28.894082 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:13308] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:29.200336 2026] [ssl:error] [pid 2849869:tid 2849869] (70014)End of file found: [client 216.73.216.199:52161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:29.241626 2026] [lsapi:warn] [pid 2856070:tid 2856070] [client 45.158.164.139:55662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:29.241666 2026] [lsapi:warn] [pid 2856070:tid 2856070] [client 45.158.164.139:55662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:29.245431 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:29.245458 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:29.633564 2026] [lsapi:warn] [pid 2855976:tid 2855976] [client 45.158.164.139:55680] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:29.633606 2026] [lsapi:warn] [pid 2855976:tid 2855976] [client 45.158.164.139:55680] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:29.636353 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:29.636380 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:29.976394 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:29.976426 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:30.285165 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:55700] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:30.285196 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:55700] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:30.613426 2026] [lsapi:warn] [pid 2855058:tid 2855058] [client 45.158.164.139:55730] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:30.613466 2026] [lsapi:warn] [pid 2855058:tid 2855058] [client 45.158.164.139:55730] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:30.616904 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:30.616927 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:30.755968 2026] [cgi:error] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:14:30.948501 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:30.948530 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:31.115992 2026] [ssl:error] [pid 2848981:tid 2848981] (EAI 2)Name or service not known: [client 144.76.19.72:30980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:31.116020 2026] [ssl:error] [pid 2848981:tid 2848981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:31.171617 2026] [ssl:error] [pid 2842910:tid 2842910] (EAI 2)Name or service not known: [client 144.76.19.72:30990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:31.171957 2026] [ssl:error] [pid 2842910:tid 2842910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:31.269323 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:45474] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:31.269357 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:45474] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:31.600411 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:31.600442 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:31.975830 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:45506] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:31.975862 2026] [lsapi:warn] [pid 2850153:tid 2850153] [client 45.158.164.139:45506] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:31.977940 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:31.977963 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:32.356281 2026] [lsapi:warn] [pid 2849683:tid 2849683] [client 45.158.164.139:45522] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:32.356312 2026] [lsapi:warn] [pid 2849683:tid 2849683] [client 45.158.164.139:45522] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:32.359440 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:32.359489 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:32.698685 2026] [lsapi:warn] [pid 2855976:tid 2855976] [client 45.158.164.139:45554] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:32.698728 2026] [lsapi:warn] [pid 2855976:tid 2855976] [client 45.158.164.139:45554] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:32.701462 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:32.701485 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:32.958822 2026] [core:error] [pid 2842910:tid 2842910] [client 66.249.66.167:40756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:32.958849 2026] [core:error] [pid 2842910:tid 2842910] [client 66.249.66.167:40756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:14:33.104608 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:45564] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:33.104637 2026] [lsapi:warn] [pid 2817440:tid 2817440] [client 45.158.164.139:45564] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:33.106739 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:33.106764 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:33.416087 2026] [lsapi:warn] [pid 2849683:tid 2849683] [client 45.158.164.139:45590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:33.416120 2026] [lsapi:warn] [pid 2849683:tid 2849683] [client 45.158.164.139:45590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:33.418319 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:33.418366 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:33.766553 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:45594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:33.766583 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:45594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:33.768001 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:33.768026 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:34.167474 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:45596] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:34.167506 2026] [lsapi:warn] [pid 2842910:tid 2842910] [client 45.158.164.139:45596] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:34.171497 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:34.171523 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:34.251880 2026] [ssl:error] [pid 2855058:tid 2855058] (EAI 2)Name or service not known: [client 144.76.19.72:31004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:34.251933 2026] [ssl:error] [pid 2855058:tid 2855058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:34.304461 2026] [ssl:error] [pid 2845176:tid 2845176] (EAI 2)Name or service not known: [client 144.76.19.72:31018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:34.304486 2026] [ssl:error] [pid 2845176:tid 2845176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:34.531396 2026] [security2:error] [pid 2842910:tid 2842910] [client 120.28.115.28:52012] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskCgFkrMSS_9S-IQ1SMwAAACM"]
[Thu Jul 30 11:14:34.531445 2026] [security2:error] [pid 2842910:tid 2842910] [client 120.28.115.28:52012] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskCgFkrMSS_9S-IQ1SMwAAACM"]
[Thu Jul 30 11:14:34.531715 2026] [security2:error] [pid 2842910:tid 2842910] [client 120.28.115.28:52012] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskCgFkrMSS_9S-IQ1SMwAAACM"]
[Thu Jul 30 11:14:34.588964 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:45614] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:34.588993 2026] [lsapi:warn] [pid 2848984:tid 2848984] [client 45.158.164.139:45614] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:34.592247 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:34.592271 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:34.769380 2026] [security2:error] [pid 2845176:tid 2845176] [client 44.212.232.231:28177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amskChkSVXZvTjBj4EY_lgAAABc"]
[Thu Jul 30 11:14:35.247689 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:35.247721 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:35.572232 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:45694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:35.572263 2026] [lsapi:warn] [pid 2848980:tid 2848980] [client 45.158.164.139:45694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:35.574420 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:35.574444 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:36.319125 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 45.158.164.139:45698] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:36.319164 2026] [lsapi:warn] [pid 2815976:tid 2815976] [client 45.158.164.139:45698] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:36.321367 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:36.321392 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:36.767477 2026] [lsapi:warn] [pid 2849869:tid 2849869] [client 45.158.164.139:45712] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:36.767506 2026] [lsapi:warn] [pid 2849869:tid 2849869] [client 45.158.164.139:45712] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:36.846903 2026] [security2:error] [pid 2815976:tid 2815976] [client 185.103.20.244:62326] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskDH2wfRsr1NZgeQ2yCQAAADc"]
[Thu Jul 30 11:14:36.846951 2026] [security2:error] [pid 2815976:tid 2815976] [client 185.103.20.244:62326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskDH2wfRsr1NZgeQ2yCQAAADc"]
[Thu Jul 30 11:14:36.847200 2026] [security2:error] [pid 2815976:tid 2815976] [client 185.103.20.244:62326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskDH2wfRsr1NZgeQ2yCQAAADc"]
[Thu Jul 30 11:14:37.096317 2026] [lsapi:warn] [pid 2850090:tid 2850090] [client 45.158.164.139:45728] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:37.096345 2026] [lsapi:warn] [pid 2850090:tid 2850090] [client 45.158.164.139:45728] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:37.098425 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:37.098451 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:37.356240 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:31030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:37.356268 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:37.412523 2026] [ssl:error] [pid 2857773:tid 2857773] (EAI 2)Name or service not known: [client 144.76.19.72:31038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:37.412576 2026] [ssl:error] [pid 2857773:tid 2857773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:37.475267 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:37.475294 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:37.813224 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:37.813252 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:38.175670 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:38.175709 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:38.516303 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:45766] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:38.516335 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:45766] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:38.844799 2026] [ssl:error] [pid 2849863:tid 2849863] (70014)End of file found: [client 216.73.216.199:18291] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:38.891280 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:38.891309 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:39.194563 2026] [lsapi:warn] [pid 2855976:tid 2855976] [client 45.158.164.139:45820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:39.194594 2026] [lsapi:warn] [pid 2855976:tid 2855976] [client 45.158.164.139:45820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:39.196885 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:39.196914 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:39.441724 2026] [core:error] [pid 2857869:tid 2857869] (13)Permission denied: [client 216.73.216.199:14651] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/bus/workqueue/drivers_probe
[Thu Jul 30 11:14:39.455241 2026] [security2:error] [pid 2848980:tid 2848980] [client 100.24.167.60:30816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amskD7rTzJWJu1_oIWfXWwAAAEE"]
[Thu Jul 30 11:14:39.469745 2026] [security2:error] [pid 2850150:tid 2850150] [client 176.88.121.90:51471] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskD4QdD8pS_eJWvDX2TwAAAFw"]
[Thu Jul 30 11:14:39.469794 2026] [security2:error] [pid 2850150:tid 2850150] [client 176.88.121.90:51471] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskD4QdD8pS_eJWvDX2TwAAAFw"]
[Thu Jul 30 11:14:39.470095 2026] [security2:error] [pid 2850150:tid 2850150] [client 176.88.121.90:51471] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskD4QdD8pS_eJWvDX2TwAAAFw"]
[Thu Jul 30 11:14:39.535391 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:45828] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:39.535421 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:45828] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:39.538247 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:39.538286 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:39.686127 2026] [security2:error] [pid 2848908:tid 2848908] [client 169.224.94.249:38540] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskD9JR-m32GKMz-PVaxAAAACQ"]
[Thu Jul 30 11:14:39.686175 2026] [security2:error] [pid 2848908:tid 2848908] [client 169.224.94.249:38540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskD9JR-m32GKMz-PVaxAAAACQ"]
[Thu Jul 30 11:14:39.686439 2026] [security2:error] [pid 2848908:tid 2848908] [client 169.224.94.249:38540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskD9JR-m32GKMz-PVaxAAAACQ"]
[Thu Jul 30 11:14:39.875136 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:45842] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:39.875168 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:45842] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:40.177039 2026] [lsapi:warn] [pid 2857965:tid 2857965] [client 45.158.164.139:45850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:40.177103 2026] [lsapi:warn] [pid 2857965:tid 2857965] [client 45.158.164.139:45850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:40.470566 2026] [ssl:error] [pid 2842781:tid 2842781] (EAI 2)Name or service not known: [client 144.76.19.72:23344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:40.470609 2026] [ssl:error] [pid 2842781:tid 2842781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:40.523854 2026] [ssl:error] [pid 2857867:tid 2857867] (EAI 2)Name or service not known: [client 144.76.19.72:23358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:40.523888 2026] [ssl:error] [pid 2857867:tid 2857867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:40.550967 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:45856] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:40.550995 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:45856] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:40.648296 2026] [ssl:error] [pid 2857869:tid 2857869] (70014)End of file found: [client 216.73.216.199:14651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:40.854482 2026] [lsapi:warn] [pid 2857965:tid 2857965] [client 45.158.164.139:48642] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:40.854508 2026] [lsapi:warn] [pid 2857965:tid 2857965] [client 45.158.164.139:48642] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:41.551147 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:48652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:41.551175 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:48652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:41.554268 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:41.554292 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:41.901306 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:48664] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:41.901334 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:48664] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:41.904221 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:41.904245 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:41.956812 2026] [security2:error] [pid 2845702:tid 2845702] [client 101.47.19.205:42725] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskEcMR3rSK2r35_d0rAAAAACo"]
[Thu Jul 30 11:14:41.956870 2026] [security2:error] [pid 2845702:tid 2845702] [client 101.47.19.205:42725] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskEcMR3rSK2r35_d0rAAAAACo"]
[Thu Jul 30 11:14:41.957146 2026] [security2:error] [pid 2845702:tid 2845702] [client 101.47.19.205:42725] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskEcMR3rSK2r35_d0rAAAAACo"]
[Thu Jul 30 11:14:42.254224 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:42.254256 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:42.604517 2026] [lsapi:warn] [pid 2842781:tid 2842781] [client 45.158.164.139:48688] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:42.604557 2026] [lsapi:warn] [pid 2842781:tid 2842781] [client 45.158.164.139:48688] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:42.607619 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:42.607674 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:42.986437 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:42.986466 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:43.343605 2026] [lsapi:warn] [pid 2848981:tid 2848981] [client 45.158.164.139:48710] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:43.343640 2026] [lsapi:warn] [pid 2848981:tid 2848981] [client 45.158.164.139:48710] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:43.345649 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:43.345673 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:43.580214 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:23372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:43.580239 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:43.633087 2026] [ssl:error] [pid 2848988:tid 2848988] (EAI 2)Name or service not known: [client 144.76.19.72:23384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:43.633116 2026] [ssl:error] [pid 2848988:tid 2848988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:43.707192 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:48722] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:43.707225 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:48722] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:43.742345 2026] [authz_core:error] [pid 2850089:tid 2850089] [client 66.249.66.33:45850] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:14:43.745286 2026] [authz_core:error] [pid 2850089:tid 2850089] [client 66.249.66.33:45850] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:14:44.050949 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:48738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:44.050992 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:48738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:44.052932 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:44.052957 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:44.269106 2026] [ssl:error] [pid 2849870:tid 2849870] (70014)End of file found: [client 216.73.216.199:42163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:44.406859 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:48752] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:44.406890 2026] [lsapi:warn] [pid 2845590:tid 2845590] [client 45.158.164.139:48752] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:44.409004 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:44.409039 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:44.764317 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:48756] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:44.764345 2026] [lsapi:warn] [pid 2848988:tid 2848988] [client 45.158.164.139:48756] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:44.767571 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:44.767597 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:45.101346 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:48768] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:45.101373 2026] [lsapi:warn] [pid 2855111:tid 2855111] [client 45.158.164.139:48768] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:45.202873 2026] [security2:error] [pid 2845702:tid 2845702] [client 101.47.19.205:32047] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskFcMR3rSK2r35_d0rAwAAACo"]
[Thu Jul 30 11:14:45.202921 2026] [security2:error] [pid 2845702:tid 2845702] [client 101.47.19.205:32047] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskFcMR3rSK2r35_d0rAwAAACo"]
[Thu Jul 30 11:14:45.203178 2026] [security2:error] [pid 2845702:tid 2845702] [client 101.47.19.205:32047] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskFcMR3rSK2r35_d0rAwAAACo"]
[Thu Jul 30 11:14:45.407903 2026] [lsapi:warn] [pid 2848981:tid 2848981] [client 45.158.164.139:48784] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:45.407934 2026] [lsapi:warn] [pid 2848981:tid 2848981] [client 45.158.164.139:48784] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:45.412237 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:45.412268 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:45.661853 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:45.661887 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:45.956460 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:48794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:45.956490 2026] [lsapi:warn] [pid 2848914:tid 2848914] [client 45.158.164.139:48794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:45.958474 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:45.958499 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:46.257157 2026] [lsapi:warn] [pid 2845176:tid 2845176] [client 45.158.164.139:48808] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:46.257198 2026] [lsapi:warn] [pid 2845176:tid 2845176] [client 45.158.164.139:48808] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:46.620123 2026] [lsapi:warn] [pid 2849869:tid 2849869] [client 45.158.164.139:48820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:46.620151 2026] [lsapi:warn] [pid 2849869:tid 2849869] [client 45.158.164.139:48820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:46.621574 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:46.621611 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:46.685223 2026] [ssl:error] [pid 2848914:tid 2848914] (EAI 2)Name or service not known: [client 144.76.19.72:23388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:46.685259 2026] [ssl:error] [pid 2848914:tid 2848914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:46.738427 2026] [ssl:error] [pid 2849863:tid 2849863] (EAI 2)Name or service not known: [client 144.76.19.72:23392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:46.738452 2026] [ssl:error] [pid 2849863:tid 2849863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:47.348867 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:48834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:47.348897 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:48834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:47.351074 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:47.351098 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:47.667954 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:48850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:47.667982 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:48850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:47.674923 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:47.674950 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:48.083533 2026] [ssl:error] [pid 2842781:tid 2842781] (70014)End of file found: [client 216.73.216.199:21796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:48.294358 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:48.294397 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:48.576782 2026] [ssl:error] [pid 2855227:tid 2855227] (70014)End of file found: [client 216.73.216.199:3776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:48.640401 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:48.640443 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:48.953053 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:48908] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:48.953127 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:48908] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:48.955725 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:48.955750 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:49.586452 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:48928] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:49.586481 2026] [lsapi:warn] [pid 2856069:tid 2856069] [client 45.158.164.139:48928] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:49.590971 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:49.590997 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:49.792398 2026] [ssl:error] [pid 2857869:tid 2857869] (EAI 2)Name or service not known: [client 144.76.19.72:49658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:49.792432 2026] [ssl:error] [pid 2857869:tid 2857869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:49.847358 2026] [ssl:error] [pid 2842910:tid 2842910] (EAI 2)Name or service not known: [client 144.76.19.72:49668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:49.847384 2026] [ssl:error] [pid 2842910:tid 2842910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:49.891270 2026] [security2:error] [pid 2857963:tid 2857963] [client 216.73.216.199:5599] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mcrypt.ini"] [unique_id "amskGXrr89ImbMD5ABU0cgAAABk"]
[Thu Jul 30 11:14:49.891586 2026] [security2:error] [pid 2857963:tid 2857963] [client 216.73.216.199:5599] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mcrypt.ini"] [unique_id "amskGXrr89ImbMD5ABU0cgAAABk"]
[Thu Jul 30 11:14:49.891806 2026] [security2:error] [pid 2857963:tid 2857963] [client 216.73.216.199:5599] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mcrypt.ini"] [unique_id "amskGXrr89ImbMD5ABU0cgAAABk"]
[Thu Jul 30 11:14:49.903345 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:48936] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:49.903372 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:48936] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:49.914246 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:49.914275 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:50.197439 2026] [ssl:error] [pid 2857963:tid 2857963] (70014)End of file found: [client 216.73.216.199:5599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:14:50.648193 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:48968] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:50.648222 2026] [lsapi:warn] [pid 2849603:tid 2849603] [client 45.158.164.139:48968] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:50.651322 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:50.651346 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:51.412832 2026] [cgi:error] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:14:51.623372 2026] [lsapi:warn] [pid 2849866:tid 2849866] [client 45.158.164.139:38218] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:51.623410 2026] [lsapi:warn] [pid 2849866:tid 2849866] [client 45.158.164.139:38218] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:51.624891 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:51.624915 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:52.928949 2026] [ssl:error] [pid 2855058:tid 2855058] (EAI 2)Name or service not known: [client 144.76.19.72:49678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:52.928974 2026] [ssl:error] [pid 2855058:tid 2855058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:52.981478 2026] [ssl:error] [pid 2849869:tid 2849869] (EAI 2)Name or service not known: [client 144.76.19.72:49688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:52.981502 2026] [ssl:error] [pid 2849869:tid 2849869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:53.220942 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:38232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:53.220972 2026] [lsapi:warn] [pid 2850089:tid 2850089] [client 45.158.164.139:38232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:53.223742 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:53.223766 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:53.658591 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:38236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:53.658622 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:38236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:53.668036 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:53.668085 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:53.992822 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:38248] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:53.992862 2026] [lsapi:warn] [pid 2856066:tid 2856066] [client 45.158.164.139:38248] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:53.994941 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:53.994963 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:54.296279 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:38264] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:54.296309 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:38264] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:54.652129 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:54.652160 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:54.948708 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:38292] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:54.948734 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:38292] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:54.950746 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:54.950769 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:55.254721 2026] [lsapi:warn] [pid 2859395:tid 2859395] [client 45.158.164.139:38298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:55.254758 2026] [lsapi:warn] [pid 2859395:tid 2859395] [client 45.158.164.139:38298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:55.261626 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:55.261655 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:55.623838 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:38308] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:55.623873 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:38308] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:55.626050 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:55.626102 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:55.934128 2026] [core:error] [pid 2855058:tid 2855058] (13)Permission denied: [client 216.73.216.199:5640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/ip_tables/uevent
[Thu Jul 30 11:14:55.952427 2026] [lsapi:warn] [pid 2859493:tid 2859493] [client 45.158.164.139:38324] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:55.952464 2026] [lsapi:warn] [pid 2859493:tid 2859493] [client 45.158.164.139:38324] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:55.954148 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:55.954172 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:56.035276 2026] [ssl:error] [pid 2815976:tid 2815976] (EAI 2)Name or service not known: [client 144.76.19.72:49704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:56.035305 2026] [ssl:error] [pid 2815976:tid 2815976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:56.087325 2026] [ssl:error] [pid 2856069:tid 2856069] (EAI 2)Name or service not known: [client 144.76.19.72:49712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:56.087371 2026] [ssl:error] [pid 2856069:tid 2856069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:56.256415 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:38326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:56.256446 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:38326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:56.263296 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:56.263324 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:56.597477 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:56.597508 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:56.902237 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:56.902265 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:57.199528 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:38356] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:57.199564 2026] [lsapi:warn] [pid 2845702:tid 2845702] [client 45.158.164.139:38356] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:57.202706 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:57.202734 2026] [lsapi:warn] [pid 2854524:tid 2854524] [client 20.171.55.167:2542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:57.547047 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:38360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:14:57.547084 2026] [lsapi:warn] [pid 2857964:tid 2857964] [client 45.158.164.139:38360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:14:58.592327 2026] [security2:error] [pid 2857964:tid 2857964] [client 114.119.155.144:26729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14,15/request_format~html"] [unique_id "amskIpV0UTW0dD88y7mHUwAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14/request_format~html
[Thu Jul 30 11:14:59.144049 2026] [ssl:error] [pid 2842781:tid 2842781] (EAI 2)Name or service not known: [client 144.76.19.72:49720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:59.144089 2026] [ssl:error] [pid 2842781:tid 2842781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:14:59.196970 2026] [ssl:error] [pid 2857773:tid 2857773] (EAI 2)Name or service not known: [client 144.76.19.72:49734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:14:59.197008 2026] [ssl:error] [pid 2857773:tid 2857773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:00.637577 2026] [security2:error] [pid 2855111:tid 2855111] [client 114.119.155.144:26741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14,15/request_format~html"] [unique_id "amskJGgNtQBY-ypHIY0n9gAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~103,14/request_format~html
[Thu Jul 30 11:15:00.758281 2026] [core:error] [pid 2855058:tid 2855058] (13)Permission denied: [client 216.73.216.199:5640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/iptable_nat/uevent
[Thu Jul 30 11:15:01.962041 2026] [ssl:error] [pid 2855058:tid 2855058] (70014)End of file found: [client 216.73.216.199:5640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:02.249505 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:27124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:02.249536 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:02.307569 2026] [ssl:error] [pid 2849683:tid 2849683] (EAI 2)Name or service not known: [client 144.76.19.72:27136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:02.307595 2026] [ssl:error] [pid 2849683:tid 2849683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:04.148597 2026] [security2:error] [pid 2855111:tid 2855111] [client 185.191.171.1:61414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "elhassanartist.com"] [uri "/robots.txt"] [unique_id "amskKGgNtQBY-ypHIY0n9wAAAAc"]
[Thu Jul 30 11:15:04.981224 2026] [security2:error] [pid 2845175:tid 2845175] [client 185.191.171.2:37732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "elhassanartist.com"] [uri "/gallery/attachment/img_2317/"] [unique_id "amskKGgRTXOS_Zws4P1cjAAAAA8"]
[Thu Jul 30 11:15:05.286054 2026] [ssl:error] [pid 2817440:tid 2817440] (70014)End of file found: [client 216.73.216.199:1289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:05.381706 2026] [ssl:error] [pid 2841474:tid 2841474] (EAI 2)Name or service not known: [client 144.76.19.72:27140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:05.381741 2026] [ssl:error] [pid 2841474:tid 2841474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:05.434570 2026] [ssl:error] [pid 2856069:tid 2856069] (EAI 2)Name or service not known: [client 144.76.19.72:27148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:05.434598 2026] [ssl:error] [pid 2856069:tid 2856069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:05.747718 2026] [cgi:error] [pid 2842910:tid 2842910] [client 20.151.254.105:39646] AH02812: stderr from /home/bessys/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:15:05.912439 2026] [core:error] [pid 2850153:tid 2850153] [client 66.249.66.168:57133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:15:05.912466 2026] [core:error] [pid 2850153:tid 2850153] [client 66.249.66.168:57133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:15:05.914679 2026] [core:error] [pid 2859173:tid 2859173] [client 66.249.66.169:48312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:15:05.914699 2026] [core:error] [pid 2859173:tid 2859173] [client 66.249.66.169:48312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:15:08.486095 2026] [ssl:error] [pid 2848914:tid 2848914] (EAI 2)Name or service not known: [client 144.76.19.72:27156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:08.486130 2026] [ssl:error] [pid 2848914:tid 2848914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:08.543651 2026] [ssl:error] [pid 2849870:tid 2849870] (EAI 2)Name or service not known: [client 144.76.19.72:27170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:08.543690 2026] [ssl:error] [pid 2849870:tid 2849870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:08.897456 2026] [ssl:error] [pid 2842781:tid 2842781] (70014)End of file found: [client 216.73.216.199:49382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:09.644889 2026] [core:error] [pid 2857964:tid 2857964] [client 66.249.64.170:58854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:15:09.644915 2026] [core:error] [pid 2857964:tid 2857964] [client 66.249.64.170:58854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:15:10.116374 2026] [core:error] [pid 2848914:tid 2848914] (13)Permission denied: [client 216.73.216.199:12942] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/cache_dma
[Thu Jul 30 11:15:11.596041 2026] [ssl:error] [pid 2859174:tid 2859174] (EAI 2)Name or service not known: [client 144.76.19.72:64670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:11.596101 2026] [ssl:error] [pid 2859174:tid 2859174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:11.649210 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:64672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:11.649234 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:14.042000 2026] [security2:error] [pid 2848914:tid 2848914] [client 216.73.216.199:12942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/french/errmsg.sys"] [unique_id "amskMjf70npadxA0UOmhAAAAADI"]
[Thu Jul 30 11:15:14.042331 2026] [security2:error] [pid 2848914:tid 2848914] [client 216.73.216.199:12942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/french/errmsg.sys"] [unique_id "amskMjf70npadxA0UOmhAAAAADI"]
[Thu Jul 30 11:15:14.042593 2026] [security2:error] [pid 2848914:tid 2848914] [client 216.73.216.199:12942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/french/errmsg.sys"] [unique_id "amskMjf70npadxA0UOmhAAAAADI"]
[Thu Jul 30 11:15:14.209388 2026] [authz_core:error] [pid 2856069:tid 2856069] [client 66.249.66.33:39547] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:15:14.212137 2026] [authz_core:error] [pid 2856069:tid 2856069] [client 66.249.66.33:39547] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:15:14.644702 2026] [ssl:error] [pid 2848914:tid 2848914] (70014)End of file found: [client 216.73.216.199:12942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:14.726419 2026] [ssl:error] [pid 2855976:tid 2855976] (EAI 2)Name or service not known: [client 144.76.19.72:64674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:14.726453 2026] [ssl:error] [pid 2855976:tid 2855976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:14.779715 2026] [ssl:error] [pid 2838781:tid 2838781] (EAI 2)Name or service not known: [client 144.76.19.72:64682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:14.779743 2026] [ssl:error] [pid 2838781:tid 2838781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:14.946326 2026] [ssl:error] [pid 2848984:tid 2848984] (70014)End of file found: [client 216.73.216.199:28504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:17.496458 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:46805] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:17.868812 2026] [ssl:error] [pid 2860866:tid 2860866] (EAI 2)Name or service not known: [client 144.76.19.72:64688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:17.868856 2026] [ssl:error] [pid 2860866:tid 2860866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:17.922019 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:64700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:17.922041 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:18.392728 2026] [authz_core:error] [pid 2841465:tid 2841465] [client 172.232.212.237:53478] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 11:15:18.395422 2026] [authz_core:error] [pid 2841465:tid 2841465] [client 172.232.212.237:53478] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 11:15:19.684550 2026] [authz_core:error] [pid 2860910:tid 2860910] [client 66.249.66.33:65246] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:15:19.687202 2026] [authz_core:error] [pid 2860910:tid 2860910] [client 66.249.66.33:65246] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:15:20.977010 2026] [ssl:error] [pid 2848984:tid 2848984] (EAI 2)Name or service not known: [client 144.76.19.72:51716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:20.977039 2026] [ssl:error] [pid 2848984:tid 2848984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:21.033464 2026] [ssl:error] [pid 2855111:tid 2855111] (EAI 2)Name or service not known: [client 144.76.19.72:51722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:21.033490 2026] [ssl:error] [pid 2855111:tid 2855111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:21.243197 2026] [security2:error] [pid 2860911:tid 2860911] [client 85.208.96.196:38276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/lifetime-elite-basketball-hoop-assembly-instructions"] [unique_id "amskOR4rGqFw_g7YybFMvAAAABQ"]
[Thu Jul 30 11:15:23.882395 2026] [ssl:error] [pid 2859174:tid 2859174] (70014)End of file found: [client 216.73.216.199:50748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:24.086224 2026] [ssl:error] [pid 2859068:tid 2859068] (EAI 2)Name or service not known: [client 144.76.19.72:51728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:24.086255 2026] [ssl:error] [pid 2859068:tid 2859068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:24.140048 2026] [ssl:error] [pid 2856066:tid 2856066] (EAI 2)Name or service not known: [client 144.76.19.72:51742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:24.140094 2026] [ssl:error] [pid 2856066:tid 2856066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:24.583032 2026] [ssl:error] [pid 2841470:tid 2841470] (70014)End of file found: [client 216.73.216.199:19097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:25.091097 2026] [ssl:error] [pid 2849870:tid 2849870] (70014)End of file found: [client 216.73.216.199:27863] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:25.162806 2026] [security2:error] [pid 2860910:tid 2860910] [client 23.23.214.190:59879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskPXnX8LLkcMtIuBcK6AAAAAs"]
[Thu Jul 30 11:15:27.198186 2026] [ssl:error] [pid 2842781:tid 2842781] (EAI 2)Name or service not known: [client 144.76.19.72:51752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:27.198221 2026] [ssl:error] [pid 2842781:tid 2842781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:27.252426 2026] [ssl:error] [pid 2850153:tid 2850153] (EAI 2)Name or service not known: [client 144.76.19.72:51762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:27.252454 2026] [ssl:error] [pid 2850153:tid 2850153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:27.998228 2026] [security2:error] [pid 2842781:tid 2842781] [client 110.249.202.196:49796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amskP0sd-IZGnXpGPRNlogAAABM"]
[Thu Jul 30 11:15:28.912391 2026] [security2:error] [pid 2848847:tid 2848847] [client 54.85.126.86:4539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskQDE8F1mwS9lSdW97VQAAABs"]
[Thu Jul 30 11:15:29.902282 2026] [ssl:error] [pid 2848773:tid 2848773] (70014)End of file found: [client 216.73.216.199:48374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:30.005223 2026] [ssl:error] [pid 2861351:tid 2861351] (70014)End of file found: [client 216.73.216.199:53298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:30.309514 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:22004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:30.309553 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:30.366616 2026] [ssl:error] [pid 2856070:tid 2856070] (EAI 2)Name or service not known: [client 144.76.19.72:22016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:30.366648 2026] [ssl:error] [pid 2856070:tid 2856070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:30.917248 2026] [ssl:error] [pid 2848908:tid 2848908] (70014)End of file found: [client 216.73.216.199:52489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:31.004836 2026] [security2:error] [pid 2854524:tid 2854524] [client 124.222.230.178:40914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mjs-services.com"] [uri "/"] [unique_id "amskQ5HfA6EmMuTjccnRJAAAAAI"]
[Thu Jul 30 11:15:32.960748 2026] [security2:error] [pid 2808147:tid 2808147] [client 52.2.83.227:18760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskRLm9OwEMjYlj9VVFzAAAAC8"]
[Thu Jul 30 11:15:33.432835 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:22026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:33.432862 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:33.487761 2026] [ssl:error] [pid 2857869:tid 2857869] (EAI 2)Name or service not known: [client 144.76.19.72:22030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:33.487794 2026] [ssl:error] [pid 2857869:tid 2857869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:34.216957 2026] [authz_core:error] [pid 2854524:tid 2854524] [client 66.249.66.33:45331] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:15:34.220517 2026] [authz_core:error] [pid 2854524:tid 2854524] [client 66.249.66.33:45331] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:15:35.502349 2026] [ssl:error] [pid 2849869:tid 2849869] (70014)End of file found: [client 216.73.216.199:65459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:35.730434 2026] [ssl:error] [pid 2841470:tid 2841470] (70014)End of file found: [client 216.73.216.199:45149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:35.734876 2026] [authz_core:error] [pid 2848773:tid 2848773] [client 66.249.66.33:46274] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:15:35.737606 2026] [authz_core:error] [pid 2848773:tid 2848773] [client 66.249.66.33:46274] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:15:36.222022 2026] [ssl:error] [pid 2817440:tid 2817440] (70014)End of file found: [client 216.73.216.199:53896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:36.557531 2026] [ssl:error] [pid 2859068:tid 2859068] (EAI 2)Name or service not known: [client 144.76.19.72:22032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:36.557576 2026] [ssl:error] [pid 2859068:tid 2859068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:36.613390 2026] [ssl:error] [pid 2848908:tid 2848908] (EAI 2)Name or service not known: [client 144.76.19.72:22046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:36.613430 2026] [ssl:error] [pid 2848908:tid 2848908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:36.990021 2026] [security2:error] [pid 2859068:tid 2859068] [client 54.166.126.132:30379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskSAZ-eF4fXfFF7nWQLQAAAAE"]
[Thu Jul 30 11:15:39.669177 2026] [ssl:error] [pid 2860866:tid 2860866] (EAI 2)Name or service not known: [client 144.76.19.72:29876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:39.669209 2026] [ssl:error] [pid 2860866:tid 2860866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:39.723703 2026] [ssl:error] [pid 2848975:tid 2848975] (EAI 2)Name or service not known: [client 144.76.19.72:29890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:39.723741 2026] [ssl:error] [pid 2848975:tid 2848975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:40.833664 2026] [security2:error] [pid 2848773:tid 2848773] [client 18.213.102.186:35698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskTPFSVhOHYedgsRLCyAAAAAQ"]
[Thu Jul 30 11:15:41.038220 2026] [ssl:error] [pid 2845590:tid 2845590] (70014)End of file found: [client 216.73.216.199:21393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:41.329575 2026] [ssl:error] [pid 2849683:tid 2849683] (70014)End of file found: [client 216.73.216.199:6787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:41.598265 2026] [security2:error] [pid 2848773:tid 2848773] [client 82.156.88.97:54310] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.co.uk"] [uri "/"] [unique_id "amskTfFSVhOHYedgsRLCyQAAAAQ"]
[Thu Jul 30 11:15:42.349239 2026] [security2:error] [pid 2808147:tid 2808147] [client 216.73.216.199:15850] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/lvemanager.log"] [unique_id "amskTrm9OwEMjYlj9VVF0AAAAC8"]
[Thu Jul 30 11:15:42.349528 2026] [security2:error] [pid 2808147:tid 2808147] [client 216.73.216.199:15850] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/lvemanager.log"] [unique_id "amskTrm9OwEMjYlj9VVF0AAAAC8"]
[Thu Jul 30 11:15:42.349765 2026] [security2:error] [pid 2808147:tid 2808147] [client 216.73.216.199:15850] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/lvemanager.log"] [unique_id "amskTrm9OwEMjYlj9VVF0AAAAC8"]
[Thu Jul 30 11:15:42.353118 2026] [security2:error] [pid 2838781:tid 2838781] [client 47.86.2.155:63579] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskTlyrNXUFcWs8pRddYQAAAAg"]
[Thu Jul 30 11:15:42.353157 2026] [security2:error] [pid 2838781:tid 2838781] [client 47.86.2.155:63579] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskTlyrNXUFcWs8pRddYQAAAAg"]
[Thu Jul 30 11:15:42.353378 2026] [security2:error] [pid 2838781:tid 2838781] [client 47.86.2.155:63579] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskTlyrNXUFcWs8pRddYQAAAAg"]
[Thu Jul 30 11:15:42.650263 2026] [ssl:error] [pid 2808147:tid 2808147] (70014)End of file found: [client 216.73.216.199:15850] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:42.695986 2026] [security2:error] [pid 2856070:tid 2856070] [client 82.156.88.97:55496] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amskTsGR7VZRfVXV7_dgfQAAABE"], referer: http://www.spamp.co.uk
[Thu Jul 30 11:15:42.780567 2026] [ssl:error] [pid 2859068:tid 2859068] (EAI 2)Name or service not known: [client 144.76.19.72:29898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:42.780600 2026] [ssl:error] [pid 2859068:tid 2859068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:42.835417 2026] [ssl:error] [pid 2841470:tid 2841470] (EAI 2)Name or service not known: [client 144.76.19.72:29908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:42.835470 2026] [ssl:error] [pid 2841470:tid 2841470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:44.859024 2026] [security2:error] [pid 2850150:tid 2850150] [client 98.83.94.113:26965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskUIQdD8pS_eJWvDX2wAAAAFw"]
[Thu Jul 30 11:15:45.255957 2026] [security2:error] [pid 2848908:tid 2848908] [client 109.175.102.55:60375] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskUdJR-m32GKMz-PVbPQAAACQ"]
[Thu Jul 30 11:15:45.256010 2026] [security2:error] [pid 2848908:tid 2848908] [client 109.175.102.55:60375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskUdJR-m32GKMz-PVbPQAAACQ"]
[Thu Jul 30 11:15:45.256272 2026] [security2:error] [pid 2848908:tid 2848908] [client 109.175.102.55:60375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskUdJR-m32GKMz-PVbPQAAACQ"]
[Thu Jul 30 11:15:45.910673 2026] [ssl:error] [pid 2862208:tid 2862208] (EAI 2)Name or service not known: [client 144.76.19.72:29910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:45.910712 2026] [ssl:error] [pid 2862208:tid 2862208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:45.967130 2026] [ssl:error] [pid 2859174:tid 2859174] (EAI 2)Name or service not known: [client 144.76.19.72:29918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:45.967150 2026] [ssl:error] [pid 2859174:tid 2859174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:46.871895 2026] [ssl:error] [pid 2841470:tid 2841470] (70014)End of file found: [client 216.73.216.199:33331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:47.968195 2026] [ssl:error] [pid 2859174:tid 2859174] (70014)End of file found: [client 216.73.216.199:40733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:48.684635 2026] [ssl:error] [pid 2848847:tid 2848847] (70014)End of file found: [client 216.73.216.199:40068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:49.050423 2026] [ssl:error] [pid 2859395:tid 2859395] (EAI 2)Name or service not known: [client 144.76.19.72:29922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:49.050453 2026] [ssl:error] [pid 2859395:tid 2859395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:49.104145 2026] [ssl:error] [pid 2848975:tid 2848975] (EAI 2)Name or service not known: [client 144.76.19.72:29930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:49.104173 2026] [ssl:error] [pid 2848975:tid 2848975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:51.032986 2026] [security2:error] [pid 2849866:tid 2849866] [client 171.252.154.133:22479] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskVw4FA4EHGVF-f0jr9gAAAE0"]
[Thu Jul 30 11:15:51.033034 2026] [security2:error] [pid 2849866:tid 2849866] [client 171.252.154.133:22479] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskVw4FA4EHGVF-f0jr9gAAAE0"]
[Thu Jul 30 11:15:51.033292 2026] [security2:error] [pid 2849866:tid 2849866] [client 171.252.154.133:22479] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskVw4FA4EHGVF-f0jr9gAAAE0"]
[Thu Jul 30 11:15:52.162709 2026] [ssl:error] [pid 2845175:tid 2845175] (EAI 2)Name or service not known: [client 144.76.19.72:37446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:52.162750 2026] [ssl:error] [pid 2845175:tid 2845175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:52.180805 2026] [security2:error] [pid 2850089:tid 2850089] [client 216.73.216.199:58314] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/tokenizer.ini"] [unique_id "amskWFEy4Y3VxVtXT0eUMQAAAFg"]
[Thu Jul 30 11:15:52.181120 2026] [security2:error] [pid 2850089:tid 2850089] [client 216.73.216.199:58314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/tokenizer.ini"] [unique_id "amskWFEy4Y3VxVtXT0eUMQAAAFg"]
[Thu Jul 30 11:15:52.181342 2026] [security2:error] [pid 2850089:tid 2850089] [client 216.73.216.199:58314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/tokenizer.ini"] [unique_id "amskWFEy4Y3VxVtXT0eUMQAAAFg"]
[Thu Jul 30 11:15:52.219167 2026] [ssl:error] [pid 2841470:tid 2841470] (EAI 2)Name or service not known: [client 144.76.19.72:37452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:52.219203 2026] [ssl:error] [pid 2841470:tid 2841470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:52.899418 2026] [ssl:error] [pid 2850089:tid 2850089] (70014)End of file found: [client 216.73.216.199:58314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:53.809937 2026] [ssl:error] [pid 2855111:tid 2855111] (70014)End of file found: [client 216.73.216.199:38956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:55.275644 2026] [ssl:error] [pid 2861351:tid 2861351] (EAI 2)Name or service not known: [client 144.76.19.72:37476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:55.275687 2026] [ssl:error] [pid 2861351:tid 2861351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:55.328817 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:37492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:55.328844 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:55.350370 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.191.171.5:33394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2434.0/prev_next,next.html"] [unique_id "amskW9JR-m32GKMz-PVbQQAAACQ"]
[Thu Jul 30 11:15:55.924187 2026] [ssl:error] [pid 2849866:tid 2849866] (70014)End of file found: [client 216.73.216.199:18708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:15:58.386625 2026] [ssl:error] [pid 2861350:tid 2861350] (EAI 2)Name or service not known: [client 144.76.19.72:37508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:58.386662 2026] [ssl:error] [pid 2861350:tid 2861350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:58.446566 2026] [ssl:error] [pid 2856070:tid 2856070] (EAI 2)Name or service not known: [client 144.76.19.72:37510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:15:58.446595 2026] [ssl:error] [pid 2856070:tid 2856070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:15:59.176669 2026] [cgi:error] [pid 2848908:tid 2848908] [client 52.165.196.84:21596] AH02812: stderr from /home/hatchw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:16:00.145625 2026] [core:error] [pid 2848773:tid 2848773] (13)Permission denied: [client 216.73.216.199:23587] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/bin/sudoedit
[Thu Jul 30 11:16:01.251639 2026] [cgi:error] [pid 2861302:tid 2861302] [client 66.132.172.200:52778] AH02812: stderr from /home/innersp/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://innerspacer.co.uk:80/cgi-bin
[Thu Jul 30 11:16:01.503154 2026] [ssl:error] [pid 2850153:tid 2850153] (EAI 2)Name or service not known: [client 144.76.19.72:61686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:01.503183 2026] [ssl:error] [pid 2850153:tid 2850153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:01.559254 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:61692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:01.559285 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:01.844001 2026] [ssl:error] [pid 2841470:tid 2841470] (70014)End of file found: [client 216.73.216.199:3127] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:02.376347 2026] [core:error] [pid 2842781:tid 2842781] [client 66.249.66.168:52648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:02.376372 2026] [core:error] [pid 2842781:tid 2842781] [client 66.249.66.168:52648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:02.558623 2026] [core:error] [pid 2845702:tid 2845702] (13)Permission denied: [client 216.73.216.199:35879] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/kernel/usermodehelper/inheritable
[Thu Jul 30 11:16:04.068365 2026] [ssl:error] [pid 2845702:tid 2845702] (70014)End of file found: [client 216.73.216.199:35879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:04.614042 2026] [ssl:error] [pid 2841682:tid 2841682] (EAI 2)Name or service not known: [client 144.76.19.72:61702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:04.614086 2026] [ssl:error] [pid 2841682:tid 2841682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:04.666734 2026] [ssl:error] [pid 2863020:tid 2863020] (EAI 2)Name or service not known: [client 144.76.19.72:61708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:04.666773 2026] [ssl:error] [pid 2863020:tid 2863020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:04.965278 2026] [ssl:error] [pid 2848773:tid 2848773] (70014)End of file found: [client 216.73.216.199:23587] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:05.069249 2026] [security2:error] [pid 2861351:tid 2861351] [client 85.208.96.210:39912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4451.0/prev_next,prev.html"] [unique_id "amskZbJpU0M4rII8h0IJUgAAAB8"]
[Thu Jul 30 11:16:05.192772 2026] [security2:error] [pid 2861926:tid 2861926] [client 186.227.114.68:16776] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskZaajMclv42FzASZywwAAAAo"]
[Thu Jul 30 11:16:05.192819 2026] [security2:error] [pid 2861926:tid 2861926] [client 186.227.114.68:16776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskZaajMclv42FzASZywwAAAAo"]
[Thu Jul 30 11:16:05.193108 2026] [security2:error] [pid 2861926:tid 2861926] [client 186.227.114.68:16776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskZaajMclv42FzASZywwAAAAo"]
[Thu Jul 30 11:16:07.460304 2026] [security2:error] [pid 2861350:tid 2861350] [client 45.33.33.130:54658] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "303"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/"] [unique_id "amskZ38jrXz1TXq8BlPJXQAAABk"]
[Thu Jul 30 11:16:07.739168 2026] [ssl:error] [pid 2850089:tid 2850089] (EAI 2)Name or service not known: [client 144.76.19.72:61722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:07.739213 2026] [ssl:error] [pid 2850089:tid 2850089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:07.791813 2026] [ssl:error] [pid 2855111:tid 2855111] (EAI 2)Name or service not known: [client 144.76.19.72:61732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:07.791841 2026] [ssl:error] [pid 2855111:tid 2855111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:09.073722 2026] [core:crit] [pid 2862946:tid 2862946] (13)Permission denied: [client 104.219.215.141:49854] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/?yt1
[Thu Jul 30 11:16:09.184494 2026] [ssl:error] [pid 2861351:tid 2861351] (70014)End of file found: [client 216.73.216.199:21275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:09.220722 2026] [autoindex:error] [pid 2860910:tid 2860910] [client 93.177.94.139:16717] AH01276: Cannot serve directory /home/erskinen/public_html/wp-content/themes/blocksy/static/bundle/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive, referer: http://erskinenazarene.co.uk/
[Thu Jul 30 11:16:09.677370 2026] [security2:error] [pid 2841470:tid 2841470] [client 51.39.66.142:1599] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskaYmgZcReH3VUVClX0QAAAB4"]
[Thu Jul 30 11:16:09.677418 2026] [security2:error] [pid 2841470:tid 2841470] [client 51.39.66.142:1599] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskaYmgZcReH3VUVClX0QAAAB4"]
[Thu Jul 30 11:16:09.677669 2026] [security2:error] [pid 2841470:tid 2841470] [client 51.39.66.142:1599] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskaYmgZcReH3VUVClX0QAAAB4"]
[Thu Jul 30 11:16:10.084385 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:48511] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:10.685761 2026] [ssl:error] [pid 2849870:tid 2849870] (70014)End of file found: [client 216.73.216.199:15234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:10.843919 2026] [ssl:error] [pid 2843654:tid 2843654] (EAI 2)Name or service not known: [client 144.76.19.72:28132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:10.843953 2026] [ssl:error] [pid 2843654:tid 2843654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:10.906633 2026] [ssl:error] [pid 2863022:tid 2863022] (EAI 2)Name or service not known: [client 144.76.19.72:28138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:10.906664 2026] [ssl:error] [pid 2863022:tid 2863022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:11.818087 2026] [authz_core:error] [pid 2841470:tid 2841470] [client 20.206.204.219:50374] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 11:16:13.989151 2026] [ssl:error] [pid 2848981:tid 2848981] (EAI 2)Name or service not known: [client 144.76.19.72:28152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:13.989186 2026] [ssl:error] [pid 2848981:tid 2848981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:14.042291 2026] [ssl:error] [pid 2848914:tid 2848914] (EAI 2)Name or service not known: [client 144.76.19.72:28168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:14.042330 2026] [ssl:error] [pid 2848914:tid 2848914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:14.261247 2026] [security2:error] [pid 2848773:tid 2848773] [client 169.224.100.43:36317] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskbvFSVhOHYedgsRLC3QAAAAQ"]
[Thu Jul 30 11:16:14.261302 2026] [security2:error] [pid 2848773:tid 2848773] [client 169.224.100.43:36317] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskbvFSVhOHYedgsRLC3QAAAAQ"]
[Thu Jul 30 11:16:14.261537 2026] [security2:error] [pid 2848773:tid 2848773] [client 169.224.100.43:36317] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskbvFSVhOHYedgsRLC3QAAAAQ"]
[Thu Jul 30 11:16:14.489458 2026] [ssl:error] [pid 2862946:tid 2862946] (70014)End of file found: [client 216.73.216.199:14278] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:15.806377 2026] [ssl:error] [pid 2850089:tid 2850089] (70014)End of file found: [client 216.73.216.199:57768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:16.239195 2026] [security2:error] [pid 2848773:tid 2848773] [client 85.208.96.196:40268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10986.new.html"] [unique_id "amskcPFSVhOHYedgsRLC3gAAAAQ"]
[Thu Jul 30 11:16:16.406495 2026] [ssl:error] [pid 2861351:tid 2861351] (70014)End of file found: [client 216.73.216.199:36358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:17.097299 2026] [ssl:error] [pid 2850153:tid 2850153] (EAI 2)Name or service not known: [client 144.76.19.72:28172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:17.097330 2026] [ssl:error] [pid 2850153:tid 2850153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:17.153671 2026] [ssl:error] [pid 2848773:tid 2848773] (EAI 2)Name or service not known: [client 144.76.19.72:28180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:17.153708 2026] [ssl:error] [pid 2848773:tid 2848773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:18.844209 2026] [cgi:error] [pid 2848981:tid 2848981] [client 20.9.4.9:48547] AH02812: stderr from /home/healthki/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:16:20.211693 2026] [ssl:error] [pid 2857964:tid 2857964] (EAI 2)Name or service not known: [client 144.76.19.72:56744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:20.211732 2026] [ssl:error] [pid 2857964:tid 2857964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:20.266562 2026] [ssl:error] [pid 2843654:tid 2843654] (EAI 2)Name or service not known: [client 144.76.19.72:56748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:20.266596 2026] [ssl:error] [pid 2843654:tid 2843654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:20.334966 2026] [ssl:error] [pid 2849870:tid 2849870] (70014)End of file found: [client 216.73.216.199:10201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:21.740987 2026] [security2:error] [pid 2862208:tid 2862208] [client 185.191.171.17:17792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/is-melissa-l-williams-related-to-vanessa-williams"] [unique_id "amskdbixm5lT-NWIDgXAWgAAAAw"]
[Thu Jul 30 11:16:22.550538 2026] [authz_core:error] [pid 2854524:tid 2854524] [client 20.9.4.9:48453] AH01630: client denied by server configuration: /home/healthki/kinesiology-in-london.co.uk/php.ini
[Thu Jul 30 11:16:22.643229 2026] [security2:error] [pid 2863019:tid 2863019] [client 114.119.157.183:37405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~15,14,102/request_format~html"] [unique_id "amskdqk_HMCZzR5e6vwIGQAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,14,102/request_format~html
[Thu Jul 30 11:16:23.051673 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:60041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:23.322486 2026] [ssl:error] [pid 2862980:tid 2862980] (EAI 2)Name or service not known: [client 144.76.19.72:56754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:23.322522 2026] [ssl:error] [pid 2862980:tid 2862980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:23.379042 2026] [ssl:error] [pid 2861926:tid 2861926] (EAI 2)Name or service not known: [client 144.76.19.72:56764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:23.379092 2026] [ssl:error] [pid 2861926:tid 2861926] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:23.890218 2026] [security2:error] [pid 2848984:tid 2848984] [client 114.119.157.183:37415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~15,14,102/request_format~html"] [unique_id "amskdwcTV-vfk1tlTbI6ZgAAAEU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,14,102/request_format~html
[Thu Jul 30 11:16:24.559216 2026] [ssl:error] [pid 2849683:tid 2849683] (70014)End of file found: [client 216.73.216.199:1519] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:24.883963 2026] [authz_core:error] [pid 2850089:tid 2850089] [client 66.249.66.33:52764] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:16:24.886690 2026] [authz_core:error] [pid 2850089:tid 2850089] [client 66.249.66.33:52764] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:16:25.547333 2026] [core:error] [pid 2841682:tid 2841682] [client 66.249.66.195:52441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:25.547359 2026] [core:error] [pid 2841682:tid 2841682] [client 66.249.66.195:52441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:25.555021 2026] [core:error] [pid 2863026:tid 2863026] [client 66.249.66.39:46872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:25.555052 2026] [core:error] [pid 2863026:tid 2863026] [client 66.249.66.39:46872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:25.670512 2026] [ssl:error] [pid 2861351:tid 2861351] (70014)End of file found: [client 216.73.216.199:22593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:26.434308 2026] [ssl:error] [pid 2848984:tid 2848984] (EAI 2)Name or service not known: [client 144.76.19.72:56766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:26.434337 2026] [ssl:error] [pid 2848984:tid 2848984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:26.487619 2026] [ssl:error] [pid 2863022:tid 2863022] (EAI 2)Name or service not known: [client 144.76.19.72:56770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:26.487643 2026] [ssl:error] [pid 2863022:tid 2863022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:29.560244 2026] [ssl:error] [pid 2862981:tid 2862981] (EAI 2)Name or service not known: [client 144.76.19.72:56778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:29.560274 2026] [ssl:error] [pid 2862981:tid 2862981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:29.615941 2026] [ssl:error] [pid 2841474:tid 2841474] (EAI 2)Name or service not known: [client 144.76.19.72:53520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:29.615981 2026] [ssl:error] [pid 2841474:tid 2841474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:29.681438 2026] [ssl:error] [pid 2863022:tid 2863022] (70014)End of file found: [client 216.73.216.199:58095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:29.777469 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:16:31.793272 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:25327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:32.669511 2026] [ssl:error] [pid 2861351:tid 2861351] (EAI 2)Name or service not known: [client 144.76.19.72:53524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:32.669590 2026] [ssl:error] [pid 2861351:tid 2861351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:32.726835 2026] [ssl:error] [pid 2862618:tid 2862618] (EAI 2)Name or service not known: [client 144.76.19.72:53534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:32.726868 2026] [ssl:error] [pid 2862618:tid 2862618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:32.861567 2026] [core:error] [pid 2862979:tid 2862979] [client 66.249.66.167:44736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:32.861595 2026] [core:error] [pid 2862979:tid 2862979] [client 66.249.66.167:44736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:33.000300 2026] [ssl:error] [pid 2857964:tid 2857964] (70014)End of file found: [client 216.73.216.199:43073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:33.577357 2026] [authz_core:error] [pid 2849870:tid 2849870] [client 20.63.98.115:17536] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/Text/Diff/error_log
[Thu Jul 30 11:16:35.711932 2026] [ssl:error] [pid 2861350:tid 2861350] (70014)End of file found: [client 216.73.216.199:41848] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:35.785536 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:53550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:35.785576 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:35.840061 2026] [ssl:error] [pid 2862618:tid 2862618] (EAI 2)Name or service not known: [client 144.76.19.72:53558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:35.840099 2026] [ssl:error] [pid 2862618:tid 2862618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:36.306682 2026] [authz_core:error] [pid 2854524:tid 2854524] [client 20.206.204.219:54754] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 11:16:37.518240 2026] [ssl:error] [pid 2863022:tid 2863022] (70014)End of file found: [client 216.73.216.199:46425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:38.912147 2026] [ssl:error] [pid 2862982:tid 2862982] (EAI 2)Name or service not known: [client 144.76.19.72:53570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:38.912204 2026] [ssl:error] [pid 2862982:tid 2862982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:38.968513 2026] [ssl:error] [pid 2862980:tid 2862980] (EAI 2)Name or service not known: [client 144.76.19.72:53586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:38.968551 2026] [ssl:error] [pid 2862980:tid 2862980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:39.324458 2026] [ssl:error] [pid 2863019:tid 2863019] (70014)End of file found: [client 216.73.216.199:40243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:41.054061 2026] [authz_core:error] [pid 2849683:tid 2849683] [client 82.102.18.190:58908] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/Requests/error_log
[Thu Jul 30 11:16:42.025162 2026] [ssl:error] [pid 2850089:tid 2850089] (EAI 2)Name or service not known: [client 144.76.19.72:35464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:42.025193 2026] [ssl:error] [pid 2850089:tid 2850089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:42.079086 2026] [ssl:error] [pid 2859395:tid 2859395] (EAI 2)Name or service not known: [client 144.76.19.72:35472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:42.079114 2026] [ssl:error] [pid 2859395:tid 2859395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:42.632632 2026] [ssl:error] [pid 2863025:tid 2863025] (70014)End of file found: [client 216.73.216.199:32449] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:43.842908 2026] [ssl:error] [pid 2856070:tid 2856070] (70014)End of file found: [client 216.73.216.199:1025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:45.135434 2026] [ssl:error] [pid 2863024:tid 2863024] (EAI 2)Name or service not known: [client 144.76.19.72:35486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:45.135467 2026] [ssl:error] [pid 2863024:tid 2863024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:45.195084 2026] [ssl:error] [pid 2859395:tid 2859395] (EAI 2)Name or service not known: [client 144.76.19.72:35488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:45.195106 2026] [ssl:error] [pid 2859395:tid 2859395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:46.171197 2026] [cgi:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH02812: stderr from /home/baketast/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:16:48.252696 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:35504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:48.252735 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:48.306493 2026] [ssl:error] [pid 2855111:tid 2855111] (EAI 2)Name or service not known: [client 144.76.19.72:35518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:48.306523 2026] [ssl:error] [pid 2855111:tid 2855111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:48.358716 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:10230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:48.961435 2026] [ssl:error] [pid 2860910:tid 2860910] (70014)End of file found: [client 216.73.216.199:10157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:49.448755 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:32417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:51.362637 2026] [ssl:error] [pid 2863025:tid 2863025] (EAI 2)Name or service not known: [client 144.76.19.72:31370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:51.362693 2026] [ssl:error] [pid 2863025:tid 2863025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:51.416510 2026] [ssl:error] [pid 2863024:tid 2863024] (EAI 2)Name or service not known: [client 144.76.19.72:31384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:51.416539 2026] [ssl:error] [pid 2863024:tid 2863024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:52.191241 2026] [core:error] [pid 2865035:tid 2865035] [client 66.249.64.170:52104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:52.191269 2026] [core:error] [pid 2865035:tid 2865035] [client 66.249.64.170:52104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:16:54.283421 2026] [ssl:error] [pid 2865084:tid 2865084] (70014)End of file found: [client 216.73.216.199:5564] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:54.471661 2026] [ssl:error] [pid 2843654:tid 2843654] (EAI 2)Name or service not known: [client 144.76.19.72:31394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:54.471695 2026] [ssl:error] [pid 2843654:tid 2843654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:54.527502 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:31400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:54.527528 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:56.092446 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:43156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:57.120397 2026] [authz_core:error] [pid 2848981:tid 2848981] [client 66.249.66.33:62186] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:16:57.123102 2026] [authz_core:error] [pid 2848981:tid 2848981] [client 66.249.66.33:62186] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:16:57.304013 2026] [security2:error] [pid 2865085:tid 2865085] [client 216.73.216.199:5464] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/chroot.conf"] [unique_id "amskmcjXEbrz_c8HZHVe8wAAABY"]
[Thu Jul 30 11:16:57.304327 2026] [security2:error] [pid 2865085:tid 2865085] [client 216.73.216.199:5464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/chroot.conf"] [unique_id "amskmcjXEbrz_c8HZHVe8wAAABY"]
[Thu Jul 30 11:16:57.304598 2026] [security2:error] [pid 2865085:tid 2865085] [client 216.73.216.199:5464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/chroot.conf"] [unique_id "amskmcjXEbrz_c8HZHVe8wAAABY"]
[Thu Jul 30 11:16:57.585513 2026] [ssl:error] [pid 2862981:tid 2862981] (EAI 2)Name or service not known: [client 144.76.19.72:31412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:57.585553 2026] [ssl:error] [pid 2862981:tid 2862981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:57.611557 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:5464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:16:57.641306 2026] [ssl:error] [pid 2850089:tid 2850089] (EAI 2)Name or service not known: [client 144.76.19.72:31420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:16:57.641333 2026] [ssl:error] [pid 2850089:tid 2850089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:16:57.878941 2026] [security2:error] [pid 2849603:tid 2849603] [client 170.106.167.214:42262] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amskmQBXC04t-bcDdwxCMwAAAAA"]
[Thu Jul 30 11:17:00.627401 2026] [ssl:error] [pid 2859395:tid 2859395] (70014)End of file found: [client 216.73.216.199:48876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:00.698000 2026] [ssl:error] [pid 2860910:tid 2860910] (EAI 2)Name or service not known: [client 144.76.19.72:48218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:00.698038 2026] [ssl:error] [pid 2860910:tid 2860910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:00.756021 2026] [ssl:error] [pid 2862980:tid 2862980] (EAI 2)Name or service not known: [client 144.76.19.72:48228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:00.756049 2026] [ssl:error] [pid 2862980:tid 2862980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:01.180301 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:02.120106 2026] [security2:error] [pid 2865082:tid 2865082] [client 139.177.196.187:33606] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "303"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/"] [unique_id "amsknv2zUVA6Vm93XG6KHgAAAA8"]
[Thu Jul 30 11:17:02.336212 2026] [security2:error] [pid 2863022:tid 2863022] [client 185.93.89.167:64477] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env"] [unique_id "amsknr7HXwokx1gQ6CTAZQAAAC0"]
[Thu Jul 30 11:17:02.336405 2026] [security2:error] [pid 2863022:tid 2863022] [client 185.93.89.167:64477] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env"] [unique_id "amsknr7HXwokx1gQ6CTAZQAAAC0"]
[Thu Jul 30 11:17:02.855896 2026] [security2:error] [pid 2863022:tid 2863022] [client 185.93.89.167:64477] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amsknr7HXwokx1gQ6CTAZQAAAC0"]
[Thu Jul 30 11:17:02.917047 2026] [security2:error] [pid 2850089:tid 2850089] [client 185.93.89.167:35739] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/api/.env"] [unique_id "amsknlEy4Y3VxVtXT0eUSQAAAFg"]
[Thu Jul 30 11:17:02.917254 2026] [security2:error] [pid 2850089:tid 2850089] [client 185.93.89.167:35739] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/api/.env"] [unique_id "amsknlEy4Y3VxVtXT0eUSQAAAFg"]
[Thu Jul 30 11:17:02.923818 2026] [security2:error] [pid 2850089:tid 2850089] [client 185.93.89.167:35739] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amsknlEy4Y3VxVtXT0eUSQAAAFg"]
[Thu Jul 30 11:17:02.927669 2026] [ssl:error] [pid 2862981:tid 2862981] (70014)End of file found: [client 216.73.216.199:47915] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:02.976008 2026] [security2:error] [pid 2865084:tid 2865084] [client 185.93.89.167:13785] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/backend/.env"] [unique_id "amskntbsjRfHxlkMJ2fqtgAAABQ"]
[Thu Jul 30 11:17:02.976207 2026] [security2:error] [pid 2865084:tid 2865084] [client 185.93.89.167:13785] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/backend/.env"] [unique_id "amskntbsjRfHxlkMJ2fqtgAAABQ"]
[Thu Jul 30 11:17:02.984480 2026] [security2:error] [pid 2865084:tid 2865084] [client 185.93.89.167:13785] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskntbsjRfHxlkMJ2fqtgAAABQ"]
[Thu Jul 30 11:17:03.104115 2026] [security2:error] [pid 2865082:tid 2865082] [client 185.93.89.167:8533] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/admin/.env"] [unique_id "amskn_2zUVA6Vm93XG6KHwAAAA8"]
[Thu Jul 30 11:17:03.104307 2026] [security2:error] [pid 2865082:tid 2865082] [client 185.93.89.167:8533] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/admin/.env"] [unique_id "amskn_2zUVA6Vm93XG6KHwAAAA8"]
[Thu Jul 30 11:17:03.117630 2026] [security2:error] [pid 2865082:tid 2865082] [client 185.93.89.167:8533] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskn_2zUVA6Vm93XG6KHwAAAA8"]
[Thu Jul 30 11:17:03.226812 2026] [security2:error] [pid 2861350:tid 2861350] [client 185.93.89.167:28609] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/laravel/.env"] [unique_id "amskn38jrXz1TXq8BlPJmAAAABk"]
[Thu Jul 30 11:17:03.227003 2026] [security2:error] [pid 2861350:tid 2861350] [client 185.93.89.167:28609] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/laravel/.env"] [unique_id "amskn38jrXz1TXq8BlPJmAAAABk"]
[Thu Jul 30 11:17:03.233678 2026] [security2:error] [pid 2861350:tid 2861350] [client 185.93.89.167:28609] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskn38jrXz1TXq8BlPJmAAAABk"]
[Thu Jul 30 11:17:03.284282 2026] [security2:error] [pid 2848981:tid 2848981] [client 185.93.89.167:15175] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/core/.env"] [unique_id "amsknzc0AxmolnlG3y1TWwAAAEI"]
[Thu Jul 30 11:17:03.284479 2026] [security2:error] [pid 2848981:tid 2848981] [client 185.93.89.167:15175] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/core/.env"] [unique_id "amsknzc0AxmolnlG3y1TWwAAAEI"]
[Thu Jul 30 11:17:03.291102 2026] [security2:error] [pid 2848981:tid 2848981] [client 185.93.89.167:15175] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amsknzc0AxmolnlG3y1TWwAAAEI"]
[Thu Jul 30 11:17:03.411902 2026] [security2:error] [pid 2854524:tid 2854524] [client 185.93.89.167:52505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.example"] [unique_id "amskn5HfA6EmMuTjccnRXwAAAAI"]
[Thu Jul 30 11:17:03.412113 2026] [security2:error] [pid 2854524:tid 2854524] [client 185.93.89.167:52505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.example"] [unique_id "amskn5HfA6EmMuTjccnRXwAAAAI"]
[Thu Jul 30 11:17:03.419158 2026] [security2:error] [pid 2854524:tid 2854524] [client 185.93.89.167:52505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskn5HfA6EmMuTjccnRXwAAAAI"]
[Thu Jul 30 11:17:03.479469 2026] [security2:error] [pid 2865562:tid 2865562] [client 185.93.89.167:58941] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/app/.env"] [unique_id "amskn59Fg2UeAFv801lhrgAAAB0"]
[Thu Jul 30 11:17:03.479682 2026] [security2:error] [pid 2865562:tid 2865562] [client 185.93.89.167:58941] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/app/.env"] [unique_id "amskn59Fg2UeAFv801lhrgAAAB0"]
[Thu Jul 30 11:17:03.485966 2026] [security2:error] [pid 2865562:tid 2865562] [client 185.93.89.167:58941] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskn59Fg2UeAFv801lhrgAAAB0"]
[Thu Jul 30 11:17:03.534760 2026] [security2:error] [pid 2865084:tid 2865084] [client 185.93.89.167:19601] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/dev/.env"] [unique_id "amskn9bsjRfHxlkMJ2fqtwAAABQ"]
[Thu Jul 30 11:17:03.534929 2026] [security2:error] [pid 2865084:tid 2865084] [client 185.93.89.167:19601] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/dev/.env"] [unique_id "amskn9bsjRfHxlkMJ2fqtwAAABQ"]
[Thu Jul 30 11:17:03.541332 2026] [security2:error] [pid 2865084:tid 2865084] [client 185.93.89.167:19601] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskn9bsjRfHxlkMJ2fqtwAAABQ"]
[Thu Jul 30 11:17:03.861299 2026] [ssl:error] [pid 2865085:tid 2865085] (EAI 2)Name or service not known: [client 144.76.19.72:48236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:03.861329 2026] [ssl:error] [pid 2865085:tid 2865085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:03.919165 2026] [ssl:error] [pid 2861350:tid 2861350] (EAI 2)Name or service not known: [client 144.76.19.72:48238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:03.919194 2026] [ssl:error] [pid 2861350:tid 2861350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:04.063034 2026] [security2:error] [pid 2865562:tid 2865562] [client 185.93.89.167:58889] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env"] [unique_id "amskoJ9Fg2UeAFv801lhrwAAAB0"]
[Thu Jul 30 11:17:04.063206 2026] [security2:error] [pid 2865562:tid 2865562] [client 185.93.89.167:58889] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env"] [unique_id "amskoJ9Fg2UeAFv801lhrwAAAB0"]
[Thu Jul 30 11:17:04.069482 2026] [security2:error] [pid 2865562:tid 2865562] [client 185.93.89.167:58889] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoJ9Fg2UeAFv801lhrwAAAB0"]
[Thu Jul 30 11:17:04.104858 2026] [security2:error] [pid 2865083:tid 2865083] [client 185.93.89.167:50953] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/api/.env"] [unique_id "amskoOMOq7k0LW1S6mnUQgAAABA"]
[Thu Jul 30 11:17:04.105055 2026] [security2:error] [pid 2865083:tid 2865083] [client 185.93.89.167:50953] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/api/.env"] [unique_id "amskoOMOq7k0LW1S6mnUQgAAABA"]
[Thu Jul 30 11:17:04.111501 2026] [security2:error] [pid 2865083:tid 2865083] [client 185.93.89.167:50953] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoOMOq7k0LW1S6mnUQgAAABA"]
[Thu Jul 30 11:17:04.143666 2026] [security2:error] [pid 2865085:tid 2865085] [client 185.93.89.167:56297] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/backend/.env"] [unique_id "amskoMjXEbrz_c8HZHVe9gAAABY"]
[Thu Jul 30 11:17:04.143815 2026] [security2:error] [pid 2865085:tid 2865085] [client 185.93.89.167:56297] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/backend/.env"] [unique_id "amskoMjXEbrz_c8HZHVe9gAAABY"]
[Thu Jul 30 11:17:04.153146 2026] [security2:error] [pid 2865085:tid 2865085] [client 185.93.89.167:56297] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoMjXEbrz_c8HZHVe9gAAABY"]
[Thu Jul 30 11:17:04.229400 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:8529] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/admin/.env"] [unique_id "amskoNJR-m32GKMz-PVbnAAAACQ"]
[Thu Jul 30 11:17:04.229612 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:8529] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/admin/.env"] [unique_id "amskoNJR-m32GKMz-PVbnAAAACQ"]
[Thu Jul 30 11:17:04.236079 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:8529] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoNJR-m32GKMz-PVbnAAAACQ"]
[Thu Jul 30 11:17:04.316293 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:7863] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/laravel/.env"] [unique_id "amskoKiaf6dMzFfhGZsrEgAAAAE"]
[Thu Jul 30 11:17:04.316492 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:7863] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/laravel/.env"] [unique_id "amskoKiaf6dMzFfhGZsrEgAAAAE"]
[Thu Jul 30 11:17:04.322836 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:7863] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoKiaf6dMzFfhGZsrEgAAAAE"]
[Thu Jul 30 11:17:04.356367 2026] [security2:error] [pid 2865083:tid 2865083] [client 185.93.89.167:49419] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/core/.env"] [unique_id "amskoOMOq7k0LW1S6mnUQwAAABA"]
[Thu Jul 30 11:17:04.356571 2026] [security2:error] [pid 2865083:tid 2865083] [client 185.93.89.167:49419] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/core/.env"] [unique_id "amskoOMOq7k0LW1S6mnUQwAAABA"]
[Thu Jul 30 11:17:04.363121 2026] [security2:error] [pid 2865083:tid 2865083] [client 185.93.89.167:49419] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoOMOq7k0LW1S6mnUQwAAABA"]
[Thu Jul 30 11:17:04.443949 2026] [security2:error] [pid 2861350:tid 2861350] [client 185.93.89.167:54529] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.example"] [unique_id "amskoH8jrXz1TXq8BlPJmgAAABk"]
[Thu Jul 30 11:17:04.444164 2026] [security2:error] [pid 2861350:tid 2861350] [client 185.93.89.167:54529] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.example"] [unique_id "amskoH8jrXz1TXq8BlPJmgAAABk"]
[Thu Jul 30 11:17:04.450561 2026] [security2:error] [pid 2861350:tid 2861350] [client 185.93.89.167:54529] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoH8jrXz1TXq8BlPJmgAAABk"]
[Thu Jul 30 11:17:04.483806 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:62561] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/app/.env"] [unique_id "amskoNJR-m32GKMz-PVbnQAAACQ"]
[Thu Jul 30 11:17:04.484116 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:62561] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/app/.env"] [unique_id "amskoNJR-m32GKMz-PVbnQAAACQ"]
[Thu Jul 30 11:17:04.490783 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:62561] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoNJR-m32GKMz-PVbnQAAACQ"]
[Thu Jul 30 11:17:04.526849 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:19729] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/dev/.env"] [unique_id "amskoKiaf6dMzFfhGZsrEwAAAAE"]
[Thu Jul 30 11:17:04.527043 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:19729] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/dev/.env"] [unique_id "amskoKiaf6dMzFfhGZsrEwAAAAE"]
[Thu Jul 30 11:17:04.533657 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:19729] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoKiaf6dMzFfhGZsrEwAAAAE"]
[Thu Jul 30 11:17:04.612841 2026] [security2:error] [pid 2865036:tid 2865036] [client 185.93.89.167:11617] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/server/.env"] [unique_id "amskoAfaxhYw7C5XTqaWCgAAAA4"]
[Thu Jul 30 11:17:04.612981 2026] [security2:error] [pid 2865036:tid 2865036] [client 185.93.89.167:11617] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/server/.env"] [unique_id "amskoAfaxhYw7C5XTqaWCgAAAA4"]
[Thu Jul 30 11:17:04.620942 2026] [security2:error] [pid 2865036:tid 2865036] [client 185.93.89.167:11617] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoAfaxhYw7C5XTqaWCgAAAA4"]
[Thu Jul 30 11:17:04.654485 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:63801] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.save"] [unique_id "amskoNJR-m32GKMz-PVbngAAACQ"]
[Thu Jul 30 11:17:04.654654 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:63801] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.save"] [unique_id "amskoNJR-m32GKMz-PVbngAAACQ"]
[Thu Jul 30 11:17:04.663794 2026] [security2:error] [pid 2848908:tid 2848908] [client 185.93.89.167:63801] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoNJR-m32GKMz-PVbngAAACQ"]
[Thu Jul 30 11:17:04.749323 2026] [security2:error] [pid 2865036:tid 2865036] [client 185.93.89.167:30505] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/staging/.env"] [unique_id "amskoAfaxhYw7C5XTqaWCwAAAA4"]
[Thu Jul 30 11:17:04.749523 2026] [security2:error] [pid 2865036:tid 2865036] [client 185.93.89.167:30505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/staging/.env"] [unique_id "amskoAfaxhYw7C5XTqaWCwAAAA4"]
[Thu Jul 30 11:17:04.757550 2026] [security2:error] [pid 2865036:tid 2865036] [client 185.93.89.167:30505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoAfaxhYw7C5XTqaWCwAAAA4"]
[Thu Jul 30 11:17:05.608463 2026] [security2:error] [pid 2861302:tid 2861302] [client 185.93.89.167:10621] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/server/.env"] [unique_id "amskocV-IsUIBigHYeyKiAAAABc"]
[Thu Jul 30 11:17:05.608668 2026] [security2:error] [pid 2861302:tid 2861302] [client 185.93.89.167:10621] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/server/.env"] [unique_id "amskocV-IsUIBigHYeyKiAAAABc"]
[Thu Jul 30 11:17:05.680391 2026] [security2:error] [pid 2861302:tid 2861302] [client 185.93.89.167:10621] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskocV-IsUIBigHYeyKiAAAABc"]
[Thu Jul 30 11:17:05.736592 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:2963] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.save"] [unique_id "amskoaiaf6dMzFfhGZsrFgAAAAE"]
[Thu Jul 30 11:17:05.736764 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:2963] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.save"] [unique_id "amskoaiaf6dMzFfhGZsrFgAAAAE"]
[Thu Jul 30 11:17:05.736769 2026] [security2:error] [pid 2865562:tid 2865562] [client 8.222.253.32:44133] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskoZ9Fg2UeAFv801lhsgAAAB0"]
[Thu Jul 30 11:17:05.736814 2026] [security2:error] [pid 2865562:tid 2865562] [client 8.222.253.32:44133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskoZ9Fg2UeAFv801lhsgAAAB0"]
[Thu Jul 30 11:17:05.737105 2026] [security2:error] [pid 2865562:tid 2865562] [client 8.222.253.32:44133] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskoZ9Fg2UeAFv801lhsgAAAB0"]
[Thu Jul 30 11:17:05.743265 2026] [security2:error] [pid 2864996:tid 2864996] [client 185.93.89.167:2963] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoaiaf6dMzFfhGZsrFgAAAAE"]
[Thu Jul 30 11:17:05.856334 2026] [security2:error] [pid 2854524:tid 2854524] [client 185.93.89.167:37945] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/staging/.env"] [unique_id "amskoZHfA6EmMuTjccnRYAAAAAI"]
[Thu Jul 30 11:17:05.856552 2026] [security2:error] [pid 2854524:tid 2854524] [client 185.93.89.167:37945] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/staging/.env"] [unique_id "amskoZHfA6EmMuTjccnRYAAAAAI"]
[Thu Jul 30 11:17:05.863243 2026] [security2:error] [pid 2854524:tid 2854524] [client 185.93.89.167:37945] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amskoZHfA6EmMuTjccnRYAAAAAI"]
[Thu Jul 30 11:17:07.043589 2026] [ssl:error] [pid 2808147:tid 2808147] (EAI 2)Name or service not known: [client 144.76.19.72:48244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:07.043628 2026] [ssl:error] [pid 2808147:tid 2808147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:07.104001 2026] [ssl:error] [pid 2866144:tid 2866144] (EAI 2)Name or service not known: [client 144.76.19.72:48252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:07.104041 2026] [ssl:error] [pid 2866144:tid 2866144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:07.738361 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:07.970341 2026] [security2:error] [pid 2865083:tid 2865083] [client 49.51.248.189:62769] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsko-MOq7k0LW1S6mnUSQAAABA"]
[Thu Jul 30 11:17:07.970393 2026] [security2:error] [pid 2865083:tid 2865083] [client 49.51.248.189:62769] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsko-MOq7k0LW1S6mnUSQAAABA"]
[Thu Jul 30 11:17:07.970677 2026] [security2:error] [pid 2865083:tid 2865083] [client 49.51.248.189:62769] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsko-MOq7k0LW1S6mnUSQAAABA"]
[Thu Jul 30 11:17:08.155262 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:22372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:08.962196 2026] [ssl:error] [pid 2841470:tid 2841470] (70014)End of file found: [client 216.73.216.199:6489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:09.360124 2026] [ssl:error] [pid 2857964:tid 2857964] (70014)End of file found: [client 216.73.216.199:40774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:09.461560 2026] [security2:error] [pid 2866144:tid 2866144] [client 175.178.110.121:37302] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chrisdyble.com"] [uri "/"] [unique_id "amskpTR2ld2bL_fWqKlTbgAAAAw"]
[Thu Jul 30 11:17:10.157637 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:61402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:10.157668 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:10.212169 2026] [ssl:error] [pid 2866144:tid 2866144] (EAI 2)Name or service not known: [client 144.76.19.72:61404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:10.212196 2026] [ssl:error] [pid 2866144:tid 2866144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:10.789191 2026] [security2:error] [pid 2866144:tid 2866144] [client 114.119.154.252:35271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/products/iprint/"] [unique_id "amskpjR2ld2bL_fWqKlTbwAAAAw"], referer: https://www.codeworks.co.uk/products
[Thu Jul 30 11:17:11.073280 2026] [security2:error] [pid 2862618:tid 2862618] [client 43.165.174.53:53870] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-earth.com"] [uri "/"] [unique_id "amskp6v1A-Iu1DivCOAqVAAAAAg"]
[Thu Jul 30 11:17:12.203738 2026] [security2:error] [pid 2841474:tid 2841474] [client 49.51.248.189:11055] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskqDam228Ita22vyeoxAAAACY"]
[Thu Jul 30 11:17:12.203794 2026] [security2:error] [pid 2841474:tid 2841474] [client 49.51.248.189:11055] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amskqDam228Ita22vyeoxAAAACY"]
[Thu Jul 30 11:17:12.204056 2026] [security2:error] [pid 2841474:tid 2841474] [client 49.51.248.189:11055] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amskqDam228Ita22vyeoxAAAACY"]
[Thu Jul 30 11:17:12.894055 2026] [authz_core:error] [pid 2849870:tid 2849870] [client 20.63.98.115:17536] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-admin/maint/error_log
[Thu Jul 30 11:17:13.270019 2026] [ssl:error] [pid 2865035:tid 2865035] (EAI 2)Name or service not known: [client 144.76.19.72:61418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:13.270051 2026] [ssl:error] [pid 2865035:tid 2865035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:13.328192 2026] [ssl:error] [pid 2863022:tid 2863022] (EAI 2)Name or service not known: [client 144.76.19.72:61422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:13.328223 2026] [ssl:error] [pid 2863022:tid 2863022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:13.474284 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:59113] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:13.535288 2026] [autoindex:error] [pid 2848984:tid 2848984] [client 51.103.154.47:44933] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:14.436185 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:14.779455 2026] [ssl:error] [pid 2854524:tid 2854524] (70014)End of file found: [client 216.73.216.199:1110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:15.031575 2026] [autoindex:error] [pid 2848984:tid 2848984] [client 51.103.154.47:44933] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:15.059189 2026] [security2:error] [pid 2866373:tid 2866373] [client 170.187.147.240:60950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amskq0DOmFo33Xb5p3KTLgAAADI"]
[Thu Jul 30 11:17:15.059426 2026] [security2:error] [pid 2866373:tid 2866373] [client 170.187.147.240:60950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amskq0DOmFo33Xb5p3KTLgAAADI"]
[Thu Jul 30 11:17:15.060079 2026] [security2:error] [pid 2866373:tid 2866373] [client 170.187.147.240:60950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amskq0DOmFo33Xb5p3KTLgAAADI"]
[Thu Jul 30 11:17:15.644884 2026] [autoindex:error] [pid 2848984:tid 2848984] [client 51.103.154.47:44933] AH01276: Cannot serve directory /home/baketast/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:16.391599 2026] [ssl:error] [pid 2866195:tid 2866195] (EAI 2)Name or service not known: [client 144.76.19.72:61426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:16.391633 2026] [ssl:error] [pid 2866195:tid 2866195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:16.447909 2026] [ssl:error] [pid 2841470:tid 2841470] (EAI 2)Name or service not known: [client 144.76.19.72:61438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:16.447939 2026] [ssl:error] [pid 2841470:tid 2841470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:16.882029 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:22827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:18.460338 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:19.501691 2026] [ssl:error] [pid 2866198:tid 2866198] (EAI 2)Name or service not known: [client 144.76.19.72:61446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:19.501730 2026] [ssl:error] [pid 2866198:tid 2866198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:19.553568 2026] [ssl:error] [pid 2866197:tid 2866197] (EAI 2)Name or service not known: [client 144.76.19.72:42444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:19.553597 2026] [ssl:error] [pid 2866197:tid 2866197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:20.838695 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:21.578644 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:9892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:22.069739 2026] [ssl:error] [pid 2866197:tid 2866197] (70014)End of file found: [client 216.73.216.199:39085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:22.481604 2026] [ssl:error] [pid 2863022:tid 2863022] (70014)End of file found: [client 216.73.216.199:29941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:22.609310 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:42446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:22.609341 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:22.665149 2026] [ssl:error] [pid 2862982:tid 2862982] (EAI 2)Name or service not known: [client 144.76.19.72:42460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:22.665176 2026] [ssl:error] [pid 2862982:tid 2862982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:24.521126 2026] [security2:error] [pid 2862982:tid 2862982] [client 185.191.171.9:51972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/kc-montero-and-geneva-cruz-daughter"] [unique_id "amsktM3x1ZS7HQ_E3c8djgAAACc"]
[Thu Jul 30 11:17:25.303110 2026] [security2:error] [pid 2854524:tid 2854524] [client 170.187.147.240:40974] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amsktZHfA6EmMuTjccnRZQAAAAI"]
[Thu Jul 30 11:17:25.303259 2026] [security2:error] [pid 2854524:tid 2854524] [client 170.187.147.240:40974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amsktZHfA6EmMuTjccnRZQAAAAI"]
[Thu Jul 30 11:17:25.303754 2026] [security2:error] [pid 2854524:tid 2854524] [client 170.187.147.240:40974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsktZHfA6EmMuTjccnRZQAAAAI"]
[Thu Jul 30 11:17:25.722890 2026] [ssl:error] [pid 2866330:tid 2866330] (EAI 2)Name or service not known: [client 144.76.19.72:42476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:25.722922 2026] [ssl:error] [pid 2866330:tid 2866330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:25.779501 2026] [ssl:error] [pid 2865562:tid 2865562] (EAI 2)Name or service not known: [client 144.76.19.72:42490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:25.779536 2026] [ssl:error] [pid 2865562:tid 2865562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:26.313338 2026] [security2:error] [pid 2843654:tid 2843654] [client 43.159.62.129:38744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "amsktuJSVTsc7XJwnnjfJAAAABU"]
[Thu Jul 30 11:17:26.901260 2026] [ssl:error] [pid 2866144:tid 2866144] (70014)End of file found: [client 216.73.216.199:27413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:27.490397 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:51500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:27.552906 2026] [security2:error] [pid 2841470:tid 2841470] [client 43.159.62.129:39248] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amskt4mgZcReH3VUVClX5QAAAB4"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 11:17:27.554740 2026] [authz_core:error] [pid 2841470:tid 2841470] [client 43.159.62.129:39248] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 11:17:27.557390 2026] [authz_core:error] [pid 2841470:tid 2841470] [client 43.159.62.129:39248] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 11:17:27.813837 2026] [ssl:error] [pid 2841474:tid 2841474] (70014)End of file found: [client 216.73.216.199:14083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:28.834323 2026] [ssl:error] [pid 2866330:tid 2866330] (EAI 2)Name or service not known: [client 144.76.19.72:42496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:28.834367 2026] [ssl:error] [pid 2866330:tid 2866330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:28.887177 2026] [ssl:error] [pid 2866197:tid 2866197] (EAI 2)Name or service not known: [client 144.76.19.72:42504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:28.887207 2026] [ssl:error] [pid 2866197:tid 2866197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:29.646188 2026] [autoindex:error] [pid 2848984:tid 2848984] [client 51.103.154.47:44933] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:31.114633 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:31.942224 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:44368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:31.942258 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:31.995274 2026] [ssl:error] [pid 2861302:tid 2861302] (EAI 2)Name or service not known: [client 144.76.19.72:44380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:31.995311 2026] [ssl:error] [pid 2861302:tid 2861302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:32.323018 2026] [ssl:error] [pid 2866195:tid 2866195] (70014)End of file found: [client 216.73.216.199:32902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:32.920495 2026] [ssl:error] [pid 2857964:tid 2857964] (70014)End of file found: [client 216.73.216.199:49203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:32.936348 2026] [authz_core:error] [pid 2849870:tid 2849870] [client 20.63.98.115:17536] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/Text/Diff/Engine/error_log
[Thu Jul 30 11:17:33.222009 2026] [ssl:error] [pid 2808147:tid 2808147] (70014)End of file found: [client 216.73.216.199:16323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:34.132828 2026] [autoindex:error] [pid 2848984:tid 2848984] [client 51.103.154.47:44933] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:35.017996 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:35.052021 2026] [ssl:error] [pid 2863024:tid 2863024] (EAI 2)Name or service not known: [client 144.76.19.72:44388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:35.052051 2026] [ssl:error] [pid 2863024:tid 2863024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:35.108169 2026] [ssl:error] [pid 2865083:tid 2865083] (EAI 2)Name or service not known: [client 144.76.19.72:44392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:35.108211 2026] [ssl:error] [pid 2865083:tid 2865083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:37.511880 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:37.725243 2026] [ssl:error] [pid 2866196:tid 2866196] (70014)End of file found: [client 216.73.216.199:44105] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:38.192261 2026] [ssl:error] [pid 2848908:tid 2848908] (EAI 2)Name or service not known: [client 144.76.19.72:44394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:38.192305 2026] [ssl:error] [pid 2848908:tid 2848908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:38.244670 2026] [ssl:error] [pid 2866088:tid 2866088] (EAI 2)Name or service not known: [client 144.76.19.72:44398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:38.244707 2026] [ssl:error] [pid 2866088:tid 2866088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:38.332557 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:45598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:38.626698 2026] [ssl:error] [pid 2866197:tid 2866197] (70014)End of file found: [client 216.73.216.199:18938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:38.781778 2026] [autoindex:error] [pid 2850150:tid 2850150] [client 20.9.4.9:26605] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:39.129510 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:40.875490 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:41.236265 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:41.304555 2026] [ssl:error] [pid 2865035:tid 2865035] (EAI 2)Name or service not known: [client 144.76.19.72:61024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:41.304601 2026] [ssl:error] [pid 2865035:tid 2865035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:41.405742 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:61030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:41.405774 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:42.163662 2026] [authz_core:error] [pid 2862979:tid 2862979] [client 52.238.199.152:46926] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:17:42.468750 2026] [authz_core:error] [pid 2849870:tid 2849870] [client 20.63.98.115:17536] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 11:17:43.174580 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:54853] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:43.776510 2026] [ssl:error] [pid 2856070:tid 2856070] (70014)End of file found: [client 216.73.216.199:63929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:44.078970 2026] [ssl:error] [pid 2865562:tid 2865562] (70014)End of file found: [client 216.73.216.199:31490] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:44.459002 2026] [ssl:error] [pid 2865083:tid 2865083] (EAI 2)Name or service not known: [client 144.76.19.72:61032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:44.459032 2026] [ssl:error] [pid 2865083:tid 2865083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:44.511612 2026] [ssl:error] [pid 2866197:tid 2866197] (EAI 2)Name or service not known: [client 144.76.19.72:61034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:44.511647 2026] [ssl:error] [pid 2866197:tid 2866197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:45.373257 2026] [security2:error] [pid 2823072:tid 2823072] [client 114.119.144.31:50629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,30,104/request_format~html"] [unique_id "amskyRt_UQDEcOLgX9oWrQAAAD4"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,30/request_format%7Ehtml
[Thu Jul 30 11:17:46.929248 2026] [security2:error] [pid 2865083:tid 2865083] [client 114.119.144.31:50639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,30,104/request_format~html"] [unique_id "amskyuMOq7k0LW1S6mnUcAAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,30/request_format%7Ehtml
[Thu Jul 30 11:17:47.564636 2026] [ssl:error] [pid 2866088:tid 2866088] (EAI 2)Name or service not known: [client 144.76.19.72:61048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:47.564671 2026] [ssl:error] [pid 2866088:tid 2866088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:47.617312 2026] [ssl:error] [pid 2866088:tid 2866088] (EAI 2)Name or service not known: [client 144.76.19.72:61056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:47.617340 2026] [ssl:error] [pid 2866088:tid 2866088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:48.592779 2026] [ssl:error] [pid 2862618:tid 2862618] (70014)End of file found: [client 216.73.216.199:9920] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:49.197673 2026] [ssl:error] [pid 2865083:tid 2865083] (70014)End of file found: [client 216.73.216.199:64955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:49.496490 2026] [ssl:error] [pid 2867746:tid 2867746] (70014)End of file found: [client 216.73.216.199:54901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:49.815031 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:50.155696 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:50.673488 2026] [ssl:error] [pid 2865562:tid 2865562] (EAI 2)Name or service not known: [client 144.76.19.72:47022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:50.673521 2026] [ssl:error] [pid 2865562:tid 2865562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:50.729177 2026] [ssl:error] [pid 2861302:tid 2861302] (EAI 2)Name or service not known: [client 144.76.19.72:47036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:50.729209 2026] [ssl:error] [pid 2861302:tid 2861302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:51.270765 2026] [core:error] [pid 2861926:tid 2861926] [client 66.249.66.8:57690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:17:51.270801 2026] [core:error] [pid 2861926:tid 2861926] [client 66.249.66.8:57690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:17:52.432797 2026] [ssl:error] [pid 2843910:tid 2843910] (70014)End of file found: [client 216.73.216.199:61337] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:52.529589 2026] [ssl:error] [pid 2861302:tid 2861302] (70014)End of file found: [client 216.73.216.199:50697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:52.659535 2026] [security2:error] [pid 2857964:tid 2857964] [client 85.208.96.207:17448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9649.0/prev_next,prev.html"] [unique_id "amsk0JV0UTW0dD88y7mIKQAAABo"]
[Thu Jul 30 11:17:53.131179 2026] [ssl:error] [pid 2841470:tid 2841470] (70014)End of file found: [client 216.73.216.199:46333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:53.789345 2026] [ssl:error] [pid 2857964:tid 2857964] (EAI 2)Name or service not known: [client 144.76.19.72:47044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:53.789375 2026] [ssl:error] [pid 2857964:tid 2857964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:53.845472 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:47054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:53.845511 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:54.667960 2026] [cgi:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH02812: stderr from /home/baketast/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:17:55.092259 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:55.434986 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:56.663235 2026] [security2:error] [pid 2823072:tid 2823072] [client 185.191.171.4:52492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,970.0.html"] [unique_id "amsk1Bt_UQDEcOLgX9oWsQAAAD4"]
[Thu Jul 30 11:17:56.900724 2026] [ssl:error] [pid 2841682:tid 2841682] (EAI 2)Name or service not known: [client 144.76.19.72:47062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:56.900758 2026] [ssl:error] [pid 2841682:tid 2841682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:56.952166 2026] [ssl:error] [pid 2865084:tid 2865084] (EAI 2)Name or service not known: [client 144.76.19.72:47074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:17:56.952214 2026] [ssl:error] [pid 2865084:tid 2865084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:17:57.137507 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:17:57.846266 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:10701] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xmlwriter.ini"] [unique_id "amsk1WZ7fqzP06wFE9wvxQAAACU"]
[Thu Jul 30 11:17:57.846566 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:10701] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xmlwriter.ini"] [unique_id "amsk1WZ7fqzP06wFE9wvxQAAACU"]
[Thu Jul 30 11:17:57.846812 2026] [security2:error] [pid 2841682:tid 2841682] [client 216.73.216.199:10701] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xmlwriter.ini"] [unique_id "amsk1WZ7fqzP06wFE9wvxQAAACU"]
[Thu Jul 30 11:17:58.256026 2026] [ssl:error] [pid 2841682:tid 2841682] (70014)End of file found: [client 216.73.216.199:10701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:17:59.047165 2026] [authz_core:error] [pid 2845702:tid 2845702] [client 66.249.66.33:37070] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:17:59.049830 2026] [authz_core:error] [pid 2845702:tid 2845702] [client 66.249.66.33:37070] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:17:59.131320 2026] [security2:error] [pid 2849603:tid 2849603] [client 170.106.163.84:54480] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amsk1wBXC04t-bcDdwxCRQAAAAA"], referer: http://www.peterboroughdiocesanregistry.co.uk
[Thu Jul 30 11:18:00.005882 2026] [ssl:error] [pid 2843910:tid 2843910] (EAI 2)Name or service not known: [client 144.76.19.72:49508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:00.005915 2026] [ssl:error] [pid 2843910:tid 2843910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:00.059652 2026] [ssl:error] [pid 2865036:tid 2865036] (70014)End of file found: [client 216.73.216.199:28660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:00.062058 2026] [ssl:error] [pid 2843910:tid 2843910] (EAI 2)Name or service not known: [client 144.76.19.72:49520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:00.062096 2026] [ssl:error] [pid 2843910:tid 2843910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:01.264433 2026] [ssl:error] [pid 2849863:tid 2849863] (70014)End of file found: [client 216.73.216.199:49785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:01.994680 2026] [security2:error] [pid 2862618:tid 2862618] [client 1.12.70.96:51662] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amsk2av1A-Iu1DivCOAqXwAAAAg"], referer: http://somethingweb.co.uk
[Thu Jul 30 11:18:02.399413 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:18:03.119622 2026] [ssl:error] [pid 2865562:tid 2865562] (EAI 2)Name or service not known: [client 144.76.19.72:49526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:03.119655 2026] [ssl:error] [pid 2865562:tid 2865562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:03.214762 2026] [ssl:error] [pid 2856066:tid 2856066] (EAI 2)Name or service not known: [client 144.76.19.72:49540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:03.214791 2026] [ssl:error] [pid 2856066:tid 2856066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:04.876442 2026] [ssl:error] [pid 2843910:tid 2843910] (70014)End of file found: [client 216.73.216.199:34280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:06.269764 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:49542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:06.269797 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:06.327675 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:49554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:06.327705 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:06.572282 2026] [ssl:error] [pid 2868166:tid 2868166] (70014)End of file found: [client 216.73.216.199:47128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:07.868229 2026] [security2:error] [pid 2845702:tid 2845702] [client 14.255.87.54:44470] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsk38MR3rSK2r35_d0rsAAAACo"]
[Thu Jul 30 11:18:07.868281 2026] [security2:error] [pid 2845702:tid 2845702] [client 14.255.87.54:44470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsk38MR3rSK2r35_d0rsAAAACo"]
[Thu Jul 30 11:18:07.868530 2026] [security2:error] [pid 2845702:tid 2845702] [client 14.255.87.54:44470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsk38MR3rSK2r35_d0rsAAAACo"]
[Thu Jul 30 11:18:08.725624 2026] [authz_core:error] [pid 2862979:tid 2862979] [client 52.238.199.152:46926] AH01630: client denied by server configuration: /home/orgent/public_html/wp-admin/includes/error_log
[Thu Jul 30 11:18:08.785387 2026] [ssl:error] [pid 2865035:tid 2865035] (70014)End of file found: [client 216.73.216.199:14053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:08.801781 2026] [cgi:error] [pid 2866372:tid 2866372] [client 47.128.117.53:17362] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:18:09.400427 2026] [ssl:error] [pid 2841682:tid 2841682] (EAI 2)Name or service not known: [client 144.76.19.72:49562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:09.400463 2026] [ssl:error] [pid 2841682:tid 2841682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:09.455008 2026] [ssl:error] [pid 2868727:tid 2868727] (EAI 2)Name or service not known: [client 144.76.19.72:49578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:09.455038 2026] [ssl:error] [pid 2868727:tid 2868727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:09.768759 2026] [security2:error] [pid 2868217:tid 2868217] [client 85.208.96.209:19650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.735.html"] [unique_id "amsk4XPjLg3pfT2VSnE1PgAAABk"]
[Thu Jul 30 11:18:10.016263 2026] [security2:error] [pid 2862618:tid 2862618] [client 43.156.171.185:46689] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsk4qv1A-Iu1DivCOAqYgAAAAg"]
[Thu Jul 30 11:18:10.016315 2026] [security2:error] [pid 2862618:tid 2862618] [client 43.156.171.185:46689] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsk4qv1A-Iu1DivCOAqYgAAAAg"]
[Thu Jul 30 11:18:10.016581 2026] [security2:error] [pid 2862618:tid 2862618] [client 43.156.171.185:46689] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsk4qv1A-Iu1DivCOAqYgAAAAg"]
[Thu Jul 30 11:18:10.294163 2026] [ssl:error] [pid 2856070:tid 2856070] (70014)End of file found: [client 216.73.216.199:33393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:10.600348 2026] [cgi:error] [pid 2849863:tid 2849863] [client 66.249.66.195:63156] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:18:11.617864 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:18:11.967404 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:18:12.006808 2026] [ssl:error] [pid 2868849:tid 2868849] (70014)End of file found: [client 216.73.216.199:63481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:12.365659 2026] [autoindex:error] [pid 2865082:tid 2865082] [client 51.103.154.47:55469] AH01276: Cannot serve directory /home/baketast/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:18:12.510534 2026] [ssl:error] [pid 2848773:tid 2848773] (EAI 2)Name or service not known: [client 144.76.19.72:31120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:12.510576 2026] [ssl:error] [pid 2848773:tid 2848773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:12.553440 2026] [security2:error] [pid 2850152:tid 2850152] [client 43.156.171.185:29253] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsk5BU1SxxjHZ6g8G-9PAAAAF4"]
[Thu Jul 30 11:18:12.553488 2026] [security2:error] [pid 2850152:tid 2850152] [client 43.156.171.185:29253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsk5BU1SxxjHZ6g8G-9PAAAAF4"]
[Thu Jul 30 11:18:12.553766 2026] [security2:error] [pid 2850152:tid 2850152] [client 43.156.171.185:29253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsk5BU1SxxjHZ6g8G-9PAAAAF4"]
[Thu Jul 30 11:18:12.567139 2026] [ssl:error] [pid 2841470:tid 2841470] (EAI 2)Name or service not known: [client 144.76.19.72:31128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:12.567169 2026] [ssl:error] [pid 2841470:tid 2841470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:13.638380 2026] [authz_core:error] [pid 2862979:tid 2862979] [client 52.238.199.152:46926] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/error_log
[Thu Jul 30 11:18:15.409859 2026] [ssl:error] [pid 2868216:tid 2868216] (70014)End of file found: [client 216.73.216.199:20615] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:15.669842 2026] [ssl:error] [pid 2843654:tid 2843654] (EAI 2)Name or service not known: [client 144.76.19.72:31142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:15.669867 2026] [ssl:error] [pid 2843654:tid 2843654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:15.725896 2026] [ssl:error] [pid 2823072:tid 2823072] (EAI 2)Name or service not known: [client 144.76.19.72:31150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:15.725925 2026] [ssl:error] [pid 2823072:tid 2823072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:15.917603 2026] [ssl:error] [pid 2867748:tid 2867748] (70014)End of file found: [client 216.73.216.199:19877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:17.424907 2026] [ssl:error] [pid 2868984:tid 2868984] (70014)End of file found: [client 216.73.216.199:7197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:18.854614 2026] [ssl:error] [pid 2865562:tid 2865562] (EAI 2)Name or service not known: [client 144.76.19.72:31166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:18.854645 2026] [ssl:error] [pid 2865562:tid 2865562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:18.912409 2026] [ssl:error] [pid 2856066:tid 2856066] (EAI 2)Name or service not known: [client 144.76.19.72:31178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:18.912446 2026] [ssl:error] [pid 2856066:tid 2856066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:20.727719 2026] [ssl:error] [pid 2850089:tid 2850089] (70014)End of file found: [client 216.73.216.199:36711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:21.484157 2026] [core:error] [pid 2869325:tid 2869325] [client 66.249.66.168:54991] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:18:21.484199 2026] [core:error] [pid 2869325:tid 2869325] [client 66.249.66.168:54991] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:18:21.484637 2026] [core:error] [pid 2867748:tid 2867748] [client 66.249.66.68:50433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:18:21.484656 2026] [core:error] [pid 2867748:tid 2867748] [client 66.249.66.68:50433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:18:21.513816 2026] [security2:error] [pid 2856066:tid 2856066] [client 89.233.104.139:36230] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amsk7W651E8Pg5Swp9M6AQAAAA0"]
[Thu Jul 30 11:18:21.647952 2026] [core:error] [pid 2848984:tid 2848984] (13)Permission denied: [client 216.73.216.199:59818] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory21/subsystem/uevent
[Thu Jul 30 11:18:21.948747 2026] [ssl:error] [pid 2848984:tid 2848984] (70014)End of file found: [client 216.73.216.199:59818] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:21.968154 2026] [ssl:error] [pid 2867748:tid 2867748] (EAI 2)Name or service not known: [client 144.76.19.72:29546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:21.968182 2026] [ssl:error] [pid 2867748:tid 2867748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:22.022820 2026] [ssl:error] [pid 2857964:tid 2857964] (EAI 2)Name or service not known: [client 144.76.19.72:29548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:22.022847 2026] [ssl:error] [pid 2857964:tid 2857964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:22.764519 2026] [ssl:error] [pid 2857964:tid 2857964] (70014)End of file found: [client 216.73.216.199:48886] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:22.870688 2026] [authz_core:error] [pid 2862979:tid 2862979] [client 52.238.199.152:46926] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 11:18:25.077945 2026] [ssl:error] [pid 2869615:tid 2869615] (EAI 2)Name or service not known: [client 144.76.19.72:29564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:25.077981 2026] [ssl:error] [pid 2869615:tid 2869615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:25.133951 2026] [security2:error] [pid 2849683:tid 2849683] [client 185.191.171.19:49318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/can-you-haggle-with-hillarys-blinds"] [unique_id "amsk8ab_0rslFf6k7iXcWAAAAAU"]
[Thu Jul 30 11:18:25.134876 2026] [ssl:error] [pid 2867746:tid 2867746] (EAI 2)Name or service not known: [client 144.76.19.72:29572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:25.134902 2026] [ssl:error] [pid 2867746:tid 2867746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:26.048797 2026] [ssl:error] [pid 2867746:tid 2867746] (70014)End of file found: [client 216.73.216.199:18258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:26.380841 2026] [security2:error] [pid 2865562:tid 2865562] [client 74.7.241.15:53402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.d2.dbstart.co.uk"] [uri "/"] [unique_id "amsk8p9Fg2UeAFv801lh2gAAAB0"]
[Thu Jul 30 11:18:27.266537 2026] [ssl:error] [pid 2866196:tid 2866196] (70014)End of file found: [client 216.73.216.199:27233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:28.191524 2026] [ssl:error] [pid 2865084:tid 2865084] (EAI 2)Name or service not known: [client 144.76.19.72:29584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:28.191576 2026] [ssl:error] [pid 2865084:tid 2865084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:28.245515 2026] [ssl:error] [pid 2866195:tid 2866195] (EAI 2)Name or service not known: [client 144.76.19.72:29588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:28.245552 2026] [ssl:error] [pid 2866195:tid 2866195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:28.275268 2026] [core:error] [pid 2850090:tid 2850090] (13)Permission denied: [client 216.73.216.199:29818] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/kmodlve/uevent
[Thu Jul 30 11:18:28.877974 2026] [ssl:error] [pid 2850090:tid 2850090] (70014)End of file found: [client 216.73.216.199:29818] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:29.881461 2026] [authz_core:error] [pid 2868849:tid 2868849] [client 66.249.66.33:43631] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:18:29.884132 2026] [authz_core:error] [pid 2868849:tid 2868849] [client 66.249.66.33:43631] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:18:30.430233 2026] [core:error] [pid 2869615:tid 2869615] [client 66.249.66.168:47925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:18:30.430266 2026] [core:error] [pid 2869615:tid 2869615] [client 66.249.66.168:47925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:18:31.299050 2026] [ssl:error] [pid 2867746:tid 2867746] (EAI 2)Name or service not known: [client 144.76.19.72:44126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:31.299096 2026] [ssl:error] [pid 2867746:tid 2867746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:31.355463 2026] [ssl:error] [pid 2868217:tid 2868217] (EAI 2)Name or service not known: [client 144.76.19.72:44128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:31.355502 2026] [ssl:error] [pid 2868217:tid 2868217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:31.464025 2026] [ssl:error] [pid 2869325:tid 2869325] (70014)End of file found: [client 216.73.216.199:22913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:34.408276 2026] [ssl:error] [pid 2869615:tid 2869615] (EAI 2)Name or service not known: [client 144.76.19.72:44132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:34.408306 2026] [ssl:error] [pid 2869615:tid 2869615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:34.465076 2026] [ssl:error] [pid 2868984:tid 2868984] (EAI 2)Name or service not known: [client 144.76.19.72:44148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:34.465104 2026] [ssl:error] [pid 2868984:tid 2868984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:35.196090 2026] [ssl:error] [pid 2848908:tid 2848908] (70014)End of file found: [client 216.73.216.199:38892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:35.691363 2026] [ssl:error] [pid 2850090:tid 2850090] (70014)End of file found: [client 216.73.216.199:23837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:35.910468 2026] [authz_core:error] [pid 2870267:tid 2870267] [client 82.102.18.190:36502] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 11:18:37.547833 2026] [ssl:error] [pid 2849870:tid 2849870] (EAI 2)Name or service not known: [client 144.76.19.72:44150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:37.547864 2026] [ssl:error] [pid 2849870:tid 2849870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:37.608391 2026] [ssl:error] [pid 2867746:tid 2867746] (EAI 2)Name or service not known: [client 144.76.19.72:44160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:37.608423 2026] [ssl:error] [pid 2867746:tid 2867746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:38.519376 2026] [ssl:error] [pid 2869325:tid 2869325] (70014)End of file found: [client 216.73.216.199:45381] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:39.586585 2026] [security2:error] [pid 2850089:tid 2850089] [client 185.191.171.14:31060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,224.0/prev_next,prev.html"] [unique_id "amsk_1Ey4Y3VxVtXT0eUYQAAAFg"]
[Thu Jul 30 11:18:40.700504 2026] [ssl:error] [pid 2865082:tid 2865082] (EAI 2)Name or service not known: [client 144.76.19.72:37420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:40.700572 2026] [ssl:error] [pid 2865082:tid 2865082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:40.755838 2026] [ssl:error] [pid 2841682:tid 2841682] (EAI 2)Name or service not known: [client 144.76.19.72:37424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:40.755868 2026] [ssl:error] [pid 2841682:tid 2841682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:41.532361 2026] [ssl:error] [pid 2823072:tid 2823072] (70014)End of file found: [client 216.73.216.199:54936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:41.827870 2026] [security2:error] [pid 2865562:tid 2865562] [client 43.159.143.187:56298] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.butteredcat.com"] [uri "/"] [unique_id "amslAZ9Fg2UeAFv801lh4AAAAB0"]
[Thu Jul 30 11:18:41.828715 2026] [authz_core:error] [pid 2865562:tid 2865562] [client 43.159.143.187:56298] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 11:18:43.338787 2026] [ssl:error] [pid 2865082:tid 2865082] (70014)End of file found: [client 216.73.216.199:3598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:43.814252 2026] [ssl:error] [pid 2868849:tid 2868849] (EAI 2)Name or service not known: [client 144.76.19.72:37428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:43.814311 2026] [ssl:error] [pid 2868849:tid 2868849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:43.867522 2026] [ssl:error] [pid 2870584:tid 2870584] (EAI 2)Name or service not known: [client 144.76.19.72:37432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:43.867564 2026] [ssl:error] [pid 2870584:tid 2870584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:44.542662 2026] [ssl:error] [pid 2870583:tid 2870583] (70014)End of file found: [client 216.73.216.199:28226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:46.489807 2026] [security2:error] [pid 2865083:tid 2865083] [client 43.153.104.196:49676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "amslBuMOq7k0LW1S6mnUjQAAABA"]
[Thu Jul 30 11:18:46.922157 2026] [ssl:error] [pid 2865085:tid 2865085] (EAI 2)Name or service not known: [client 144.76.19.72:37440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:46.922192 2026] [ssl:error] [pid 2865085:tid 2865085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:46.978170 2026] [ssl:error] [pid 2848984:tid 2848984] (EAI 2)Name or service not known: [client 144.76.19.72:37452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:46.978207 2026] [ssl:error] [pid 2848984:tid 2848984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:47.433835 2026] [security2:error] [pid 2849863:tid 2849863] [client 43.157.43.147:47436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highcleresyndicates.co.uk"] [uri "/"] [unique_id "amslB7XIzRlE0qNFZcE0HwAAAEo"]
[Thu Jul 30 11:18:49.665125 2026] [ssl:error] [pid 2850090:tid 2850090] (70014)End of file found: [client 216.73.216.199:18563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:50.035404 2026] [ssl:error] [pid 2845702:tid 2845702] (EAI 2)Name or service not known: [client 144.76.19.72:23170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:50.035438 2026] [ssl:error] [pid 2845702:tid 2845702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:50.091785 2026] [ssl:error] [pid 2865082:tid 2865082] (EAI 2)Name or service not known: [client 144.76.19.72:23184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:50.091835 2026] [ssl:error] [pid 2865082:tid 2865082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:53.148622 2026] [ssl:error] [pid 2841682:tid 2841682] (EAI 2)Name or service not known: [client 144.76.19.72:23194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:53.148682 2026] [ssl:error] [pid 2841682:tid 2841682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:53.203261 2026] [ssl:error] [pid 2870440:tid 2870440] (EAI 2)Name or service not known: [client 144.76.19.72:23208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:53.203292 2026] [ssl:error] [pid 2870440:tid 2870440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:53.475140 2026] [core:error] [pid 2869615:tid 2869615] (13)Permission denied: [client 216.73.216.199:1843] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/printk/uevent
[Thu Jul 30 11:18:54.679047 2026] [ssl:error] [pid 2848981:tid 2848981] (70014)End of file found: [client 216.73.216.199:25580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:55.582120 2026] [ssl:error] [pid 2869615:tid 2869615] (70014)End of file found: [client 216.73.216.199:1843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:56.073633 2026] [core:error] [pid 2857964:tid 2857964] (13)Permission denied: [client 216.73.216.199:20968] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/objs_per_slab
[Thu Jul 30 11:18:56.184386 2026] [ssl:error] [pid 2857964:tid 2857964] (70014)End of file found: [client 216.73.216.199:20968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:18:56.261302 2026] [ssl:error] [pid 2850090:tid 2850090] (EAI 2)Name or service not known: [client 144.76.19.72:23224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:56.261336 2026] [ssl:error] [pid 2850090:tid 2850090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:56.315670 2026] [ssl:error] [pid 2850152:tid 2850152] (EAI 2)Name or service not known: [client 144.76.19.72:23240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:56.315700 2026] [ssl:error] [pid 2850152:tid 2850152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:58.809119 2026] [core:crit] [pid 2848908:tid 2848908] (13)Permission denied: [client 52.167.144.146:33133] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 11:18:58.947171 2026] [authz_core:error] [pid 2850090:tid 2850090] [client 52.238.199.152:48916] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/IXR/error_log
[Thu Jul 30 11:18:59.367743 2026] [ssl:error] [pid 2865084:tid 2865084] (EAI 2)Name or service not known: [client 144.76.19.72:23242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:59.367798 2026] [ssl:error] [pid 2865084:tid 2865084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:18:59.422680 2026] [ssl:error] [pid 2870583:tid 2870583] (EAI 2)Name or service not known: [client 144.76.19.72:23252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:18:59.422721 2026] [ssl:error] [pid 2870583:tid 2870583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:00.407337 2026] [core:error] [pid 2843654:tid 2843654] (13)Permission denied: [client 216.73.216.199:50504] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/pstore/uevent
[Thu Jul 30 11:19:00.462764 2026] [core:error] [pid 2870583:tid 2870583] [client 66.249.64.170:59905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:19:00.462794 2026] [core:error] [pid 2870583:tid 2870583] [client 66.249.64.170:59905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:19:01.010691 2026] [core:error] [pid 2843654:tid 2843654] (13)Permission denied: [client 216.73.216.199:50504] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/nft_ct/uevent
[Thu Jul 30 11:19:02.476583 2026] [ssl:error] [pid 2870583:tid 2870583] (EAI 2)Name or service not known: [client 144.76.19.72:32052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:02.476619 2026] [ssl:error] [pid 2870583:tid 2870583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:02.529379 2026] [ssl:error] [pid 2862618:tid 2862618] (EAI 2)Name or service not known: [client 144.76.19.72:32060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:02.529428 2026] [ssl:error] [pid 2862618:tid 2862618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:02.821111 2026] [ssl:error] [pid 2868727:tid 2868727] (70014)End of file found: [client 216.73.216.199:45799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:03.263430 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:50504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:03.425854 2026] [ssl:error] [pid 2865083:tid 2865083] (70014)End of file found: [client 216.73.216.199:40754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:05.584177 2026] [ssl:error] [pid 2849870:tid 2849870] (EAI 2)Name or service not known: [client 144.76.19.72:32084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:05.584211 2026] [ssl:error] [pid 2849870:tid 2849870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:05.636014 2026] [ssl:error] [pid 2861302:tid 2861302] (EAI 2)Name or service not known: [client 144.76.19.72:32098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:05.636057 2026] [ssl:error] [pid 2861302:tid 2861302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:08.691743 2026] [ssl:error] [pid 2868984:tid 2868984] (EAI 2)Name or service not known: [client 144.76.19.72:32120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:08.691781 2026] [ssl:error] [pid 2868984:tid 2868984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:08.743064 2026] [ssl:error] [pid 2850150:tid 2850150] (70014)End of file found: [client 216.73.216.199:21835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:08.745794 2026] [ssl:error] [pid 2865082:tid 2865082] (EAI 2)Name or service not known: [client 144.76.19.72:32122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:08.745819 2026] [ssl:error] [pid 2865082:tid 2865082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:08.866050 2026] [ssl:error] [pid 2856066:tid 2856066] (70014)End of file found: [client 216.73.216.199:48256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:09.684315 2026] [security2:error] [pid 2870440:tid 2870440] [client 114.119.132.171:65023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,18/request_format~html"] [unique_id "amslHQ_9o3FA3b4pRLZi5gAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,15/request_format%7Ehtml
[Thu Jul 30 11:19:10.066670 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:3624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:11.476351 2026] [security2:error] [pid 2841682:tid 2841682] [client 114.119.132.171:65031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,18/request_format~html"] [unique_id "amslH2Z7fqzP06wFE9wv3gAAACU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,15/request_format%7Ehtml
[Thu Jul 30 11:19:11.818530 2026] [ssl:error] [pid 2843910:tid 2843910] (EAI 2)Name or service not known: [client 144.76.19.72:45040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:11.818580 2026] [ssl:error] [pid 2843910:tid 2843910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:11.874852 2026] [ssl:error] [pid 2869615:tid 2869615] (EAI 2)Name or service not known: [client 144.76.19.72:45054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:11.874899 2026] [ssl:error] [pid 2869615:tid 2869615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:13.156799 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 20.104.16.169:43707] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 11:19:13.159185 2026] [access_compat:error] [pid 2872133:tid 2872133] [client 20.104.16.169:43707] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 11:19:13.159258 2026] [access_compat:error] [pid 2872133:tid 2872133] [client 20.104.16.169:43707] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 11:19:13.163779 2026] [access_compat:error] [pid 2872133:tid 2872133] [client 20.104.16.169:43707] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 11:19:14.930753 2026] [ssl:error] [pid 2850090:tid 2850090] (EAI 2)Name or service not known: [client 144.76.19.72:45058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:14.930790 2026] [ssl:error] [pid 2850090:tid 2850090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:14.984330 2026] [ssl:error] [pid 2872090:tid 2872090] (EAI 2)Name or service not known: [client 144.76.19.72:45072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:14.984385 2026] [ssl:error] [pid 2872090:tid 2872090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:15.187637 2026] [security2:error] [pid 2867748:tid 2867748] [client 216.73.216.199:33355] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysctl.d/50-default.conf"] [unique_id "amslIwgBF68OTPGuBvIL3wAAAAs"]
[Thu Jul 30 11:19:15.187986 2026] [security2:error] [pid 2867748:tid 2867748] [client 216.73.216.199:33355] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysctl.d/50-default.conf"] [unique_id "amslIwgBF68OTPGuBvIL3wAAAAs"]
[Thu Jul 30 11:19:15.188281 2026] [security2:error] [pid 2867748:tid 2867748] [client 216.73.216.199:33355] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysctl.d/50-default.conf"] [unique_id "amslIwgBF68OTPGuBvIL3wAAAAs"]
[Thu Jul 30 11:19:15.800815 2026] [ssl:error] [pid 2867748:tid 2867748] (70014)End of file found: [client 216.73.216.199:33355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:16.294318 2026] [ssl:error] [pid 2850150:tid 2850150] (70014)End of file found: [client 216.73.216.199:62535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:17.308178 2026] [ssl:error] [pid 2869325:tid 2869325] (70014)End of file found: [client 216.73.216.199:41864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:17.313062 2026] [authz_core:error] [pid 2857964:tid 2857964] [client 66.249.66.33:62689] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:19:17.315900 2026] [authz_core:error] [pid 2857964:tid 2857964] [client 66.249.66.33:62689] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:19:18.103655 2026] [ssl:error] [pid 2865083:tid 2865083] (EAI 2)Name or service not known: [client 144.76.19.72:45086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:18.103686 2026] [ssl:error] [pid 2865083:tid 2865083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:18.383409 2026] [ssl:error] [pid 2849870:tid 2849870] (EAI 2)Name or service not known: [client 144.76.19.72:45100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:18.383436 2026] [ssl:error] [pid 2849870:tid 2849870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:19.408527 2026] [access_compat:error] [pid 2854524:tid 2854524] [client 45.158.164.139:58774] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:19:21.439378 2026] [ssl:error] [pid 2867748:tid 2867748] (EAI 2)Name or service not known: [client 144.76.19.72:36068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:21.439405 2026] [ssl:error] [pid 2867748:tid 2867748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:21.495567 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:36070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:21.495595 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:21.695115 2026] [ssl:error] [pid 2848908:tid 2848908] (70014)End of file found: [client 216.73.216.199:26730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:22.593761 2026] [ssl:error] [pid 2868984:tid 2868984] (70014)End of file found: [client 216.73.216.199:20873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:22.961459 2026] [security2:error] [pid 2849863:tid 2849863] [client 196.216.84.208:38294] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslKrXIzRlE0qNFZcE0KQAAAEo"]
[Thu Jul 30 11:19:22.961503 2026] [security2:error] [pid 2849863:tid 2849863] [client 196.216.84.208:38294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslKrXIzRlE0qNFZcE0KQAAAEo"]
[Thu Jul 30 11:19:22.961757 2026] [security2:error] [pid 2849863:tid 2849863] [client 196.216.84.208:38294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amslKrXIzRlE0qNFZcE0KQAAAEo"]
[Thu Jul 30 11:19:23.095162 2026] [ssl:error] [pid 2870585:tid 2870585] (70014)End of file found: [client 216.73.216.199:60007] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:24.550003 2026] [ssl:error] [pid 2868166:tid 2868166] (EAI 2)Name or service not known: [client 144.76.19.72:36074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:24.550045 2026] [ssl:error] [pid 2868166:tid 2868166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:24.605153 2026] [ssl:error] [pid 2857964:tid 2857964] (EAI 2)Name or service not known: [client 144.76.19.72:36076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:24.605198 2026] [ssl:error] [pid 2857964:tid 2857964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:25.213137 2026] [security2:error] [pid 2872624:tid 2872624] [client 92.25.42.16:42554] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslLREc6M-AjPIodaBB7QAAAAc"]
[Thu Jul 30 11:19:25.213189 2026] [security2:error] [pid 2872624:tid 2872624] [client 92.25.42.16:42554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslLREc6M-AjPIodaBB7QAAAAc"]
[Thu Jul 30 11:19:25.213452 2026] [security2:error] [pid 2872624:tid 2872624] [client 92.25.42.16:42554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amslLREc6M-AjPIodaBB7QAAAAc"]
[Thu Jul 30 11:19:25.685032 2026] [security2:error] [pid 2850152:tid 2850152] [client 185.191.171.1:44128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/is-arthrofibrosis-a-disability"] [unique_id "amslLRU1SxxjHZ6g8G-9UQAAAF4"]
[Thu Jul 30 11:19:27.121777 2026] [ssl:error] [pid 2850090:tid 2850090] (70014)End of file found: [client 216.73.216.199:2445] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:27.660053 2026] [ssl:error] [pid 2848908:tid 2848908] (EAI 2)Name or service not known: [client 144.76.19.72:36080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:27.660094 2026] [ssl:error] [pid 2848908:tid 2848908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:27.712978 2026] [ssl:error] [pid 2865085:tid 2865085] (EAI 2)Name or service not known: [client 144.76.19.72:36088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:27.713015 2026] [ssl:error] [pid 2865085:tid 2865085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:28.510948 2026] [security2:error] [pid 2865085:tid 2865085] [client 216.73.216.199:36918] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/zip.ini"] [unique_id "amslMMjXEbrz_c8HZHVfWgAAABY"]
[Thu Jul 30 11:19:28.511260 2026] [security2:error] [pid 2865085:tid 2865085] [client 216.73.216.199:36918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/zip.ini"] [unique_id "amslMMjXEbrz_c8HZHVfWgAAABY"]
[Thu Jul 30 11:19:28.511506 2026] [security2:error] [pid 2865085:tid 2865085] [client 216.73.216.199:36918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/zip.ini"] [unique_id "amslMMjXEbrz_c8HZHVfWgAAABY"]
[Thu Jul 30 11:19:28.927438 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:36918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:29.148815 2026] [security2:error] [pid 2854524:tid 2854524] [client 82.151.163.31:42452] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslMZHfA6EmMuTjccnSVAAAAAI"]
[Thu Jul 30 11:19:29.148881 2026] [security2:error] [pid 2854524:tid 2854524] [client 82.151.163.31:42452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslMZHfA6EmMuTjccnSVAAAAAI"]
[Thu Jul 30 11:19:29.149157 2026] [security2:error] [pid 2854524:tid 2854524] [client 82.151.163.31:42452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amslMZHfA6EmMuTjccnSVAAAAAI"]
[Thu Jul 30 11:19:29.233079 2026] [ssl:error] [pid 2872891:tid 2872891] (70014)End of file found: [client 216.73.216.199:22164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:30.083171 2026] [security2:error] [pid 2866195:tid 2866195] [client 156.59.198.135:55502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/wp-content/uploads/2023/02/20220403_120147-scaled.jpg"] [unique_id "amslMqt0QlrOSY36LlX5ywAAACg"], referer: https://www.acthoroughbreds.com/projects/
[Thu Jul 30 11:19:30.775872 2026] [ssl:error] [pid 2868727:tid 2868727] (EAI 2)Name or service not known: [client 144.76.19.72:64860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:30.775924 2026] [ssl:error] [pid 2868727:tid 2868727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:30.833728 2026] [ssl:error] [pid 2870267:tid 2870267] (EAI 2)Name or service not known: [client 144.76.19.72:64872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:30.833770 2026] [ssl:error] [pid 2870267:tid 2870267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:32.544644 2026] [ssl:error] [pid 2868984:tid 2868984] (70014)End of file found: [client 216.73.216.199:52513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:33.891281 2026] [ssl:error] [pid 2848773:tid 2848773] (EAI 2)Name or service not known: [client 144.76.19.72:64876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:33.891330 2026] [ssl:error] [pid 2848773:tid 2848773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:33.949116 2026] [ssl:error] [pid 2857964:tid 2857964] (EAI 2)Name or service not known: [client 144.76.19.72:64884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:33.949169 2026] [ssl:error] [pid 2857964:tid 2857964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:34.548163 2026] [core:error] [pid 2848773:tid 2848773] (13)Permission denied: [client 216.73.216.199:1733] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/ip6t_REJECT/uevent
[Thu Jul 30 11:19:34.651124 2026] [ssl:error] [pid 2848773:tid 2848773] (70014)End of file found: [client 216.73.216.199:1733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:34.948621 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:29266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:37.003128 2026] [ssl:error] [pid 2848908:tid 2848908] (EAI 2)Name or service not known: [client 144.76.19.72:64906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:37.003156 2026] [ssl:error] [pid 2848908:tid 2848908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:37.057412 2026] [ssl:error] [pid 2872891:tid 2872891] (EAI 2)Name or service not known: [client 144.76.19.72:64908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:37.057447 2026] [ssl:error] [pid 2872891:tid 2872891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:37.863927 2026] [ssl:error] [pid 2872132:tid 2872132] (70014)End of file found: [client 216.73.216.199:65264] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:40.359020 2026] [authz_core:error] [pid 2848773:tid 2848773] [client 82.102.18.190:51630] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 11:19:40.367639 2026] [core:error] [pid 2872819:tid 2872819] (13)Permission denied: [client 216.73.216.199:1236] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/iptable_mangle/uevent
[Thu Jul 30 11:19:40.644417 2026] [ssl:error] [pid 2843654:tid 2843654] (EAI 2)Name or service not known: [client 144.76.19.72:58016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:40.644455 2026] [ssl:error] [pid 2843654:tid 2843654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:40.669632 2026] [ssl:error] [pid 2872819:tid 2872819] (70014)End of file found: [client 216.73.216.199:1236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:40.703443 2026] [ssl:error] [pid 2868727:tid 2868727] (EAI 2)Name or service not known: [client 144.76.19.72:58030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:40.703473 2026] [ssl:error] [pid 2868727:tid 2868727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:41.573173 2026] [ssl:error] [pid 2868849:tid 2868849] (70014)End of file found: [client 216.73.216.199:18712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:42.856231 2026] [authz_core:error] [pid 2865083:tid 2865083] [client 66.249.66.33:35511] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:19:42.858943 2026] [authz_core:error] [pid 2865083:tid 2865083] [client 66.249.66.33:35511] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:19:43.288179 2026] [ssl:error] [pid 2872132:tid 2872132] (70014)End of file found: [client 216.73.216.199:19275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:43.786206 2026] [ssl:error] [pid 2850090:tid 2850090] (EAI 2)Name or service not known: [client 144.76.19.72:58044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:43.786236 2026] [ssl:error] [pid 2850090:tid 2850090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:43.842163 2026] [ssl:error] [pid 2865085:tid 2865085] (EAI 2)Name or service not known: [client 144.76.19.72:58052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:43.842193 2026] [ssl:error] [pid 2865085:tid 2865085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:45.290551 2026] [lsapi:warn] [pid 2867748:tid 2867748] [client 43.172.195.64:45336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:19:45.290605 2026] [lsapi:warn] [pid 2867748:tid 2867748] [client 43.172.195.64:45336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:19:45.478510 2026] [authz_core:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 11:19:45.480588 2026] [access_compat:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 11:19:45.480636 2026] [access_compat:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 11:19:45.485248 2026] [access_compat:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 11:19:45.941802 2026] [security2:error] [pid 2873211:tid 2873211] [client 185.191.171.5:53920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1019.0/prev_next,next.html"] [unique_id "amslQU8NTtnMKYfe6yjvlwAAAC8"]
[Thu Jul 30 11:19:46.898555 2026] [ssl:error] [pid 2849870:tid 2849870] (EAI 2)Name or service not known: [client 144.76.19.72:58054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:46.898580 2026] [ssl:error] [pid 2849870:tid 2849870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:46.954746 2026] [ssl:error] [pid 2862979:tid 2862979] (EAI 2)Name or service not known: [client 144.76.19.72:58064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:46.954781 2026] [ssl:error] [pid 2862979:tid 2862979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:46.991753 2026] [ssl:error] [pid 2850150:tid 2850150] (70014)End of file found: [client 216.73.216.199:25333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:47.594099 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:30286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:48.245710 2026] [security2:error] [pid 2867748:tid 2867748] [client 43.160.219.206:48396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-narvi.com"] [uri "/"] [unique_id "amslRAgBF68OTPGuBvIL7QAAAAs"]
[Thu Jul 30 11:19:48.493429 2026] [security2:error] [pid 2849870:tid 2849870] [client 74.7.242.15:48072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.webstersltd.com"] [uri "/sitemap.xml"] [unique_id "amslRPsbd-6I-D99IH0PPwAAAFI"]
[Thu Jul 30 11:19:48.684691 2026] [ssl:error] [pid 2868217:tid 2868217] (70014)End of file found: [client 216.73.216.199:11763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:48.782935 2026] [security2:error] [pid 2843910:tid 2843910] [client 74.7.242.15:33952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.webstersltd.com"] [uri "/403.shtml"] [unique_id "amslROQk1BRqQP2OVrvfyAAAAAY"], referer: http://www.webstersltd.com
[Thu Jul 30 11:19:50.013113 2026] [ssl:error] [pid 2870530:tid 2870530] (EAI 2)Name or service not known: [client 144.76.19.72:22130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:50.013153 2026] [ssl:error] [pid 2870530:tid 2870530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:50.033061 2026] [authz_core:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 11:19:50.069609 2026] [ssl:error] [pid 2850090:tid 2850090] (EAI 2)Name or service not known: [client 144.76.19.72:22142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:50.069635 2026] [ssl:error] [pid 2850090:tid 2850090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:50.517118 2026] [lsapi:warn] [pid 2867748:tid 2867748] [client 43.172.198.70:41752] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 11:19:50.517154 2026] [lsapi:warn] [pid 2867748:tid 2867748] [client 43.172.198.70:41752] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 11:19:51.164433 2026] [ssl:error] [pid 2870530:tid 2870530] (70014)End of file found: [client 216.73.216.199:16862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:51.449704 2026] [authz_core:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/jquery/error_log
[Thu Jul 30 11:19:51.466032 2026] [ssl:error] [pid 2868849:tid 2868849] (70014)End of file found: [client 216.73.216.199:29368] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:51.974967 2026] [core:error] [pid 2873873:tid 2873873] (13)Permission denied: [client 216.73.216.199:35281] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/objs_per_slab
[Thu Jul 30 11:19:52.239196 2026] [security2:error] [pid 2867748:tid 2867748] [client 47.128.56.124:32788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/robots.txt"] [unique_id "amslSAgBF68OTPGuBvIL8wAAAAs"]
[Thu Jul 30 11:19:53.123962 2026] [ssl:error] [pid 2872132:tid 2872132] (EAI 2)Name or service not known: [client 144.76.19.72:22154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:53.123994 2026] [ssl:error] [pid 2872132:tid 2872132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:53.179191 2026] [ssl:error] [pid 2872784:tid 2872784] (EAI 2)Name or service not known: [client 144.76.19.72:22160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:53.179224 2026] [ssl:error] [pid 2872784:tid 2872784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:53.532987 2026] [security2:error] [pid 2867746:tid 2867746] [client 5.39.1.241:56402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mjs-services.com"] [uri "/robots.txt"] [unique_id "amslSXgPrP3MqToFMbcR5gAAAAM"]
[Thu Jul 30 11:19:53.722190 2026] [authz_core:error] [pid 2848981:tid 2848981] [client 66.249.66.33:46624] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:19:53.724899 2026] [authz_core:error] [pid 2848981:tid 2848981] [client 66.249.66.33:46624] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:19:54.782456 2026] [ssl:error] [pid 2873873:tid 2873873] (70014)End of file found: [client 216.73.216.199:35281] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:19:54.931852 2026] [security2:error] [pid 2848984:tid 2848984] [client 51.89.129.216:44624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mjs-services.com"] [uri "/air-conditioning/"] [unique_id "amslSgcTV-vfk1tlTbI77AAAAEU"]
[Thu Jul 30 11:19:56.234566 2026] [ssl:error] [pid 2848984:tid 2848984] (EAI 2)Name or service not known: [client 144.76.19.72:22162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:56.234591 2026] [ssl:error] [pid 2848984:tid 2848984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:56.287577 2026] [ssl:error] [pid 2873211:tid 2873211] (EAI 2)Name or service not known: [client 144.76.19.72:22172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:56.287618 2026] [ssl:error] [pid 2873211:tid 2873211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:58.894664 2026] [authz_core:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/l10n/error_log
[Thu Jul 30 11:19:58.963772 2026] [authz_core:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 11:19:58.965669 2026] [access_compat:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 11:19:58.965709 2026] [access_compat:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 11:19:58.969901 2026] [access_compat:error] [pid 2870583:tid 2870583] [client 20.100.203.84:29463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 11:19:59.346553 2026] [ssl:error] [pid 2870267:tid 2870267] (EAI 2)Name or service not known: [client 144.76.19.72:22188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:59.346579 2026] [ssl:error] [pid 2870267:tid 2870267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:59.404199 2026] [ssl:error] [pid 2848981:tid 2848981] (EAI 2)Name or service not known: [client 144.76.19.72:22192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:19:59.404222 2026] [ssl:error] [pid 2848981:tid 2848981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:19:59.841476 2026] [authz_core:error] [pid 2848773:tid 2848773] [client 20.100.203.84:24877] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:20:00.498518 2026] [ssl:error] [pid 2872818:tid 2872818] (70014)End of file found: [client 216.73.216.199:45978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:00.804119 2026] [core:error] [pid 2850150:tid 2850150] (13)Permission denied: [client 216.73.216.199:57621] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/bumpyburp.com.db
[Thu Jul 30 11:20:01.105521 2026] [ssl:error] [pid 2850150:tid 2850150] (70014)End of file found: [client 216.73.216.199:57621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:02.305535 2026] [ssl:error] [pid 2848981:tid 2848981] (70014)End of file found: [client 216.73.216.199:53277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:02.489297 2026] [ssl:error] [pid 2862981:tid 2862981] (EAI 2)Name or service not known: [client 144.76.19.72:49676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:02.489328 2026] [ssl:error] [pid 2862981:tid 2862981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:02.543490 2026] [ssl:error] [pid 2872784:tid 2872784] (EAI 2)Name or service not known: [client 144.76.19.72:49686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:02.543518 2026] [ssl:error] [pid 2872784:tid 2872784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:03.880148 2026] [security2:error] [pid 2848984:tid 2848984] [client 74.7.243.202:47818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.actsa.co.uk.acthoroughbreds.com"] [uri "/"] [unique_id "amslUwcTV-vfk1tlTbI78wAAAEU"]
[Thu Jul 30 11:20:04.411245 2026] [core:error] [pid 2869615:tid 2869615] [client 66.249.64.170:51256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:20:04.411270 2026] [core:error] [pid 2869615:tid 2869615] [client 66.249.64.170:51256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:20:04.544588 2026] [security2:error] [pid 2873293:tid 2873293] [client 103.145.209.20:38086] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslVME85oNxV7qActnxUgAAADE"]
[Thu Jul 30 11:20:04.544632 2026] [security2:error] [pid 2873293:tid 2873293] [client 103.145.209.20:38086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslVME85oNxV7qActnxUgAAADE"]
[Thu Jul 30 11:20:04.544869 2026] [security2:error] [pid 2873293:tid 2873293] [client 103.145.209.20:38086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amslVME85oNxV7qActnxUgAAADE"]
[Thu Jul 30 11:20:05.627046 2026] [ssl:error] [pid 2872090:tid 2872090] (EAI 2)Name or service not known: [client 144.76.19.72:49698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:05.627087 2026] [ssl:error] [pid 2872090:tid 2872090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:05.679752 2026] [ssl:error] [pid 2870267:tid 2870267] (EAI 2)Name or service not known: [client 144.76.19.72:49706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:05.679779 2026] [ssl:error] [pid 2870267:tid 2870267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:06.141047 2026] [security2:error] [pid 2849863:tid 2849863] [client 101.33.81.73:38444] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amslVrXIzRlE0qNFZcE0MAAAAEo"]
[Thu Jul 30 11:20:06.408891 2026] [ssl:error] [pid 2872654:tid 2872654] (70014)End of file found: [client 216.73.216.199:28918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:06.839933 2026] [security2:error] [pid 2850150:tid 2850150] [client 111.225.148.82:28290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/robots.txt"] [unique_id "amslVoQdD8pS_eJWvDX3VgAAAFw"]
[Thu Jul 30 11:20:07.643690 2026] [security2:error] [pid 2874936:tid 2874936] [client 101.33.81.73:54176] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amslV3aZW4d13aJTjCHA7QAAABc"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 11:20:08.064734 2026] [security2:error] [pid 2848981:tid 2848981] [client 101.47.25.7:63193] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslWDc0AxmolnlG3y1T9QAAAEI"]
[Thu Jul 30 11:20:08.064782 2026] [security2:error] [pid 2848981:tid 2848981] [client 101.47.25.7:63193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslWDc0AxmolnlG3y1T9QAAAEI"]
[Thu Jul 30 11:20:08.065035 2026] [security2:error] [pid 2848981:tid 2848981] [client 101.47.25.7:63193] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amslWDc0AxmolnlG3y1T9QAAAEI"]
[Thu Jul 30 11:20:08.735883 2026] [ssl:error] [pid 2868984:tid 2868984] (EAI 2)Name or service not known: [client 144.76.19.72:49718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:08.735907 2026] [ssl:error] [pid 2868984:tid 2868984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:08.789105 2026] [ssl:error] [pid 2872784:tid 2872784] (EAI 2)Name or service not known: [client 144.76.19.72:49722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:08.789147 2026] [ssl:error] [pid 2872784:tid 2872784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:09.366203 2026] [core:error] [pid 2862981:tid 2862981] [client 66.249.66.67:52071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:20:09.366236 2026] [core:error] [pid 2862981:tid 2862981] [client 66.249.66.67:52071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:20:09.368471 2026] [core:error] [pid 2868984:tid 2868984] [client 66.249.66.5:50015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:20:09.368493 2026] [core:error] [pid 2868984:tid 2868984] [client 66.249.66.5:50015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:20:09.531573 2026] [ssl:error] [pid 2872818:tid 2872818] (70014)End of file found: [client 216.73.216.199:49114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:10.103380 2026] [ssl:error] [pid 2875035:tid 2875035] (70014)End of file found: [client 216.73.216.199:30600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:11.862097 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:48860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:11.862156 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:11.916577 2026] [ssl:error] [pid 2867746:tid 2867746] (EAI 2)Name or service not known: [client 144.76.19.72:48876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:11.916615 2026] [ssl:error] [pid 2867746:tid 2867746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:13.485276 2026] [security2:error] [pid 2872133:tid 2872133] [client 101.47.25.7:30123] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslXQ-6U1-7B4N2wXWz-AAAAAw"]
[Thu Jul 30 11:20:13.485338 2026] [security2:error] [pid 2872133:tid 2872133] [client 101.47.25.7:30123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslXQ-6U1-7B4N2wXWz-AAAAAw"]
[Thu Jul 30 11:20:13.485607 2026] [security2:error] [pid 2872133:tid 2872133] [client 101.47.25.7:30123] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amslXQ-6U1-7B4N2wXWz-AAAAAw"]
[Thu Jul 30 11:20:14.974361 2026] [ssl:error] [pid 2848984:tid 2848984] (EAI 2)Name or service not known: [client 144.76.19.72:48882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:14.974397 2026] [ssl:error] [pid 2848984:tid 2848984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:15.029951 2026] [ssl:error] [pid 2843910:tid 2843910] (EAI 2)Name or service not known: [client 144.76.19.72:48894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:15.029981 2026] [ssl:error] [pid 2843910:tid 2843910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:15.512016 2026] [security2:error] [pid 2872819:tid 2872819] [client 114.119.150.101:36043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/sitemap-pt-post-2003-07.xml"] [unique_id "amslX09eRJiDDynuq3fnBAAAACU"], referer: http://www.localhero.org.uk/sitemap-pt-post-2003-07.xml
[Thu Jul 30 11:20:15.858122 2026] [ssl:error] [pid 2868849:tid 2868849] (70014)End of file found: [client 216.73.216.199:47853] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:16.126519 2026] [security2:error] [pid 2873919:tid 2873919] [client 185.191.171.9:52412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8817.480.html"] [unique_id "amslYMAcoWZKDZRRJ4sWXgAAADQ"]
[Thu Jul 30 11:20:16.460437 2026] [ssl:error] [pid 2868984:tid 2868984] (70014)End of file found: [client 216.73.216.199:51856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:17.442241 2026] [security2:error] [pid 2867746:tid 2867746] [client 185.191.171.13:13360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.255.html"] [unique_id "amslYXgPrP3MqToFMbcR9AAAAAM"]
[Thu Jul 30 11:20:17.961948 2026] [ssl:error] [pid 2872969:tid 2872969] (70014)End of file found: [client 216.73.216.199:36110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:18.081649 2026] [ssl:error] [pid 2866196:tid 2866196] (EAI 2)Name or service not known: [client 144.76.19.72:48896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:18.081707 2026] [ssl:error] [pid 2866196:tid 2866196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:18.134944 2026] [ssl:error] [pid 2856070:tid 2856070] (EAI 2)Name or service not known: [client 144.76.19.72:48902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:18.134971 2026] [ssl:error] [pid 2856070:tid 2856070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:20.737319 2026] [security2:error] [pid 2868166:tid 2868166] [client 114.119.134.146:45613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/B.2-Bangladesh-2007-Cyclone-Sidr.pdf"] [unique_id "amslZIAd1lub0_cs-SrtbAAAAAo"]
[Thu Jul 30 11:20:21.188805 2026] [ssl:error] [pid 2841465:tid 2841465] (EAI 2)Name or service not known: [client 144.76.19.72:36186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:21.188840 2026] [ssl:error] [pid 2841465:tid 2841465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:21.190953 2026] [security2:error] [pid 2872133:tid 2872133] [client 216.73.216.199:14936] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/spanish/errmsg.sys"] [unique_id "amslZQ-6U1-7B4N2wXWz_QAAAAw"]
[Thu Jul 30 11:20:21.191188 2026] [security2:error] [pid 2872133:tid 2872133] [client 216.73.216.199:14936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/spanish/errmsg.sys"] [unique_id "amslZQ-6U1-7B4N2wXWz_QAAAAw"]
[Thu Jul 30 11:20:21.191400 2026] [security2:error] [pid 2872133:tid 2872133] [client 216.73.216.199:14936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/spanish/errmsg.sys"] [unique_id "amslZQ-6U1-7B4N2wXWz_QAAAAw"]
[Thu Jul 30 11:20:21.241537 2026] [ssl:error] [pid 2874937:tid 2874937] (EAI 2)Name or service not known: [client 144.76.19.72:36190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:21.241590 2026] [ssl:error] [pid 2874937:tid 2874937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:21.281507 2026] [access_compat:error] [pid 2850152:tid 2850152] [client 45.158.164.139:58484] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:20:23.705466 2026] [ssl:error] [pid 2841465:tid 2841465] (70014)End of file found: [client 216.73.216.199:34459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:24.299513 2026] [ssl:error] [pid 2874936:tid 2874936] (EAI 2)Name or service not known: [client 144.76.19.72:36194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:24.299566 2026] [ssl:error] [pid 2874936:tid 2874936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:24.356127 2026] [ssl:error] [pid 2872969:tid 2872969] (EAI 2)Name or service not known: [client 144.76.19.72:36200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:24.356165 2026] [ssl:error] [pid 2872969:tid 2872969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:24.612841 2026] [ssl:error] [pid 2872133:tid 2872133] (70014)End of file found: [client 216.73.216.199:14936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:24.910564 2026] [cgi:error] [pid 2873558:tid 2873558] [client 199.45.155.77:46320] AH02812: stderr from /home/wmsfirea/public_html/wmsfirearmstraining.org/cgi-bin/: attempt to invoke directory as script, referer: https://www.wmsfirearmstrainingorg.wmsfirearmstraining.com:443/cgi-bin
[Thu Jul 30 11:20:26.136800 2026] [security2:error] [pid 2868727:tid 2868727] [client 85.208.96.208:31940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/who-is-hemi-in-whale-rider"] [unique_id "amslahDL688pwuIxInYMGAAAABw"]
[Thu Jul 30 11:20:27.410606 2026] [ssl:error] [pid 2873920:tid 2873920] (EAI 2)Name or service not known: [client 144.76.19.72:36214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:27.410663 2026] [ssl:error] [pid 2873920:tid 2873920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:27.463860 2026] [ssl:error] [pid 2872132:tid 2872132] (EAI 2)Name or service not known: [client 144.76.19.72:36220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:27.463890 2026] [ssl:error] [pid 2872132:tid 2872132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:27.785569 2026] [authz_core:error] [pid 2850150:tid 2850150] [client 66.132.172.201:21862] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 11:20:29.919310 2026] [ssl:error] [pid 2868217:tid 2868217] (70014)End of file found: [client 216.73.216.199:39976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:30.519789 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:57302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:30.519821 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:30.571175 2026] [ssl:error] [pid 2868849:tid 2868849] (EAI 2)Name or service not known: [client 144.76.19.72:57314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:30.571208 2026] [ssl:error] [pid 2868849:tid 2868849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:30.938364 2026] [security2:error] [pid 2874936:tid 2874936] [client 216.73.216.199:8328] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_system_tables.sql"] [unique_id "amslbnaZW4d13aJTjCHBBAAAABc"]
[Thu Jul 30 11:20:30.938672 2026] [security2:error] [pid 2874936:tid 2874936] [client 216.73.216.199:8328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_system_tables.sql"] [unique_id "amslbnaZW4d13aJTjCHBBAAAABc"]
[Thu Jul 30 11:20:30.938890 2026] [security2:error] [pid 2874936:tid 2874936] [client 216.73.216.199:8328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_system_tables.sql"] [unique_id "amslbnaZW4d13aJTjCHBBAAAABc"]
[Thu Jul 30 11:20:32.748483 2026] [ssl:error] [pid 2874936:tid 2874936] (70014)End of file found: [client 216.73.216.199:8328] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:33.627284 2026] [ssl:error] [pid 2848981:tid 2848981] (EAI 2)Name or service not known: [client 144.76.19.72:57316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:33.627319 2026] [ssl:error] [pid 2848981:tid 2848981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:33.679872 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:57324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:33.679906 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:33.946503 2026] [security2:error] [pid 2848984:tid 2848984] [client 216.73.216.199:50698] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/dom.ini"] [unique_id "amslcQcTV-vfk1tlTbI8AAAAAEU"]
[Thu Jul 30 11:20:33.946823 2026] [security2:error] [pid 2848984:tid 2848984] [client 216.73.216.199:50698] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/dom.ini"] [unique_id "amslcQcTV-vfk1tlTbI8AAAAAEU"]
[Thu Jul 30 11:20:33.947043 2026] [security2:error] [pid 2848984:tid 2848984] [client 216.73.216.199:50698] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/dom.ini"] [unique_id "amslcQcTV-vfk1tlTbI8AAAAAEU"]
[Thu Jul 30 11:20:34.248291 2026] [ssl:error] [pid 2848984:tid 2848984] (70014)End of file found: [client 216.73.216.199:50698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:34.599213 2026] [authz_core:error] [pid 2872090:tid 2872090] [client 66.249.66.35:36988] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:20:34.601890 2026] [authz_core:error] [pid 2872090:tid 2872090] [client 66.249.66.35:36988] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:20:36.356631 2026] [security2:error] [pid 2850150:tid 2850150] [client 216.73.216.199:4123] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/romanian/errmsg.sys"] [unique_id "amsldIQdD8pS_eJWvDX3ZwAAAFw"]
[Thu Jul 30 11:20:36.356877 2026] [security2:error] [pid 2850150:tid 2850150] [client 216.73.216.199:4123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/romanian/errmsg.sys"] [unique_id "amsldIQdD8pS_eJWvDX3ZwAAAFw"]
[Thu Jul 30 11:20:36.357085 2026] [security2:error] [pid 2850150:tid 2850150] [client 216.73.216.199:4123] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/romanian/errmsg.sys"] [unique_id "amsldIQdD8pS_eJWvDX3ZwAAAFw"]
[Thu Jul 30 11:20:36.735798 2026] [ssl:error] [pid 2848980:tid 2848980] (EAI 2)Name or service not known: [client 144.76.19.72:57340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:36.735834 2026] [ssl:error] [pid 2848980:tid 2848980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:36.790405 2026] [ssl:error] [pid 2875721:tid 2875721] (EAI 2)Name or service not known: [client 144.76.19.72:57350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:36.790441 2026] [ssl:error] [pid 2875721:tid 2875721] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:39.594644 2026] [security2:error] [pid 2848980:tid 2848980] [client 49.51.183.75:48780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highbrightness.com"] [uri "/"] [unique_id "amsld7rTzJWJu1_oIWfXfAAAAEE"]
[Thu Jul 30 11:20:39.844225 2026] [ssl:error] [pid 2849863:tid 2849863] (EAI 2)Name or service not known: [client 144.76.19.72:65280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:39.844255 2026] [ssl:error] [pid 2849863:tid 2849863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:39.900855 2026] [ssl:error] [pid 2875765:tid 2875765] (EAI 2)Name or service not known: [client 144.76.19.72:65296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:39.900900 2026] [ssl:error] [pid 2875765:tid 2875765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:41.411328 2026] [security2:error] [pid 2869325:tid 2869325] [client 114.119.133.192:23213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-715.xml"] [unique_id "amslea2vDKa9olE1oCmbKQAAAAk"]
[Thu Jul 30 11:20:41.478663 2026] [ssl:error] [pid 2873558:tid 2873558] (70014)End of file found: [client 216.73.216.199:22178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:42.973653 2026] [ssl:error] [pid 2868166:tid 2868166] (EAI 2)Name or service not known: [client 144.76.19.72:65308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:42.973700 2026] [ssl:error] [pid 2868166:tid 2868166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:43.031382 2026] [ssl:error] [pid 2874936:tid 2874936] (EAI 2)Name or service not known: [client 144.76.19.72:65320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:43.031416 2026] [ssl:error] [pid 2874936:tid 2874936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:43.585298 2026] [ssl:error] [pid 2850150:tid 2850150] (70014)End of file found: [client 216.73.216.199:4123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:44.087251 2026] [ssl:error] [pid 2874936:tid 2874936] (70014)End of file found: [client 216.73.216.199:20532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:46.088467 2026] [ssl:error] [pid 2872819:tid 2872819] (EAI 2)Name or service not known: [client 144.76.19.72:65328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:46.088512 2026] [ssl:error] [pid 2872819:tid 2872819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:46.144655 2026] [ssl:error] [pid 2870583:tid 2870583] (EAI 2)Name or service not known: [client 144.76.19.72:65340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:46.144686 2026] [ssl:error] [pid 2870583:tid 2870583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:47.839196 2026] [security2:error] [pid 2873558:tid 2873558] [client 51.68.111.217:13447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.apotheekcandidejacobs.be"] [uri "/robots.txt"] [unique_id "amslf9gFa_K7BRHw5_n8VQAAAAc"]
[Thu Jul 30 11:20:47.839691 2026] [core:error] [pid 2873558:tid 2873558] [client 51.68.111.217:13447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:20:49.201296 2026] [ssl:error] [pid 2873920:tid 2873920] (EAI 2)Name or service not known: [client 144.76.19.72:65344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:49.201336 2026] [ssl:error] [pid 2873920:tid 2873920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:49.257334 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:65356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:49.257361 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:49.352743 2026] [security2:error] [pid 2872891:tid 2872891] [client 20.171.55.167:11116] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.junglejacks.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amslgcBJX3DzJ4GT_gtXLQAAACk"]
[Thu Jul 30 11:20:49.352997 2026] [security2:error] [pid 2872891:tid 2872891] [client 20.171.55.167:11116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.junglejacks.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amslgcBJX3DzJ4GT_gtXLQAAACk"]
[Thu Jul 30 11:20:49.381456 2026] [security2:error] [pid 2872891:tid 2872891] [client 20.171.55.167:11116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.junglejacks.co.uk"] [uri "/403.shtml"] [unique_id "amslgcBJX3DzJ4GT_gtXLQAAACk"]
[Thu Jul 30 11:20:51.053909 2026] [security2:error] [pid 2875722:tid 2875722] [client 114.119.156.17:39893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "amslg1Yb8g8CW5nGHMGxegAAAA4"], referer: http://www.localhero.org.uk
[Thu Jul 30 11:20:51.278921 2026] [lsapi:warn] [pid 2856070:tid 2856070] [client 207.175.133.233:54040] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:20:51.278960 2026] [lsapi:warn] [pid 2856070:tid 2856070] [client 207.175.133.233:54040] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:20:52.105251 2026] [ssl:error] [pid 2872133:tid 2872133] (70014)End of file found: [client 216.73.216.199:56176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:52.284235 2026] [ssl:error] [pid 2872819:tid 2872819] (70014)End of file found: [client 216.73.216.199:32820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:52.308988 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:64304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:52.309026 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:52.367644 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:64310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:52.367678 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:53.816805 2026] [security2:error] [pid 2875766:tid 2875766] [client 114.119.157.189:50933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amslhQowDC-RzBAKTRO-PgAAACM"], referer: http://hbsanorth.co.uk/
[Thu Jul 30 11:20:54.324086 2026] [security2:error] [pid 2874840:tid 2874840] [client 114.119.153.38:63343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/rustic-planter-with-bird-house/"] [unique_id "amslhgPGxyiG1cJi-l9vzwAAAAg"], referer: http://tripodhome.co.uk/product-category/landscaping
[Thu Jul 30 11:20:55.420272 2026] [ssl:error] [pid 2875766:tid 2875766] (EAI 2)Name or service not known: [client 144.76.19.72:64320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:55.420310 2026] [ssl:error] [pid 2875766:tid 2875766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:55.472211 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:64324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:55.472246 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:55.834567 2026] [ssl:error] [pid 2875722:tid 2875722] (70014)End of file found: [client 216.73.216.199:10485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:20:58.525886 2026] [ssl:error] [pid 2867746:tid 2867746] (EAI 2)Name or service not known: [client 144.76.19.72:64330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:58.525941 2026] [ssl:error] [pid 2867746:tid 2867746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:58.583662 2026] [ssl:error] [pid 2868984:tid 2868984] (EAI 2)Name or service not known: [client 144.76.19.72:64338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:20:58.583692 2026] [ssl:error] [pid 2868984:tid 2868984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:20:59.747901 2026] [ssl:error] [pid 2856070:tid 2856070] (70014)End of file found: [client 216.73.216.199:12156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:01.067242 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 11:21:01.554350 2026] [ssl:error] [pid 2875766:tid 2875766] (70014)End of file found: [client 216.73.216.199:37206] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:01.639650 2026] [ssl:error] [pid 2875763:tid 2875763] (EAI 2)Name or service not known: [client 144.76.19.72:33662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:01.639684 2026] [ssl:error] [pid 2875763:tid 2875763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:01.697082 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:33676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:01.697116 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:03.116206 2026] [security2:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.kirmond.com"] [uri "/spamp.com"] [unique_id "amslj9l67kgWQMVF6hjTMAAAACQ"]
[Thu Jul 30 11:21:03.116558 2026] [security2:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.kirmond.com"] [uri "/spamp.com"] [unique_id "amslj9l67kgWQMVF6hjTMAAAACQ"]
[Thu Jul 30 11:21:03.116908 2026] [security2:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.kirmond.com"] [uri "/spamp.com"] [unique_id "amslj9l67kgWQMVF6hjTMAAAACQ"]
[Thu Jul 30 11:21:04.751535 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:33684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:04.751570 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:04.788811 2026] [security2:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.kirmond.com"] [uri "/eraten.com"] [unique_id "amslkNl67kgWQMVF6hjTNQAAACQ"]
[Thu Jul 30 11:21:04.789059 2026] [security2:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.kirmond.com"] [uri "/eraten.com"] [unique_id "amslkNl67kgWQMVF6hjTNQAAACQ"]
[Thu Jul 30 11:21:04.789298 2026] [security2:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.kirmond.com"] [uri "/eraten.com"] [unique_id "amslkNl67kgWQMVF6hjTNQAAACQ"]
[Thu Jul 30 11:21:04.809559 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:33696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:04.809589 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:05.165621 2026] [ssl:error] [pid 2876401:tid 2876401] (70014)End of file found: [client 216.73.216.199:49144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:05.230778 2026] [cgi:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://www.kirmond.com:443/cgi-bin
[Thu Jul 30 11:21:05.377756 2026] [security2:error] [pid 2873558:tid 2873558] [client 110.249.202.231:20282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amslkdgFa_K7BRHw5_n8YAAAAAc"]
[Thu Jul 30 11:21:05.426925 2026] [security2:error] [pid 2868217:tid 2868217] [client 20.203.200.218:21521] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "nativespace.com.ns-pandora.com"] [uri "/wp-config.php"] [unique_id "amslkXPjLg3pfT2VSnE2GwAAABk"]
[Thu Jul 30 11:21:05.427035 2026] [security2:error] [pid 2868217:tid 2868217] [client 20.203.200.218:21521] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace.com.ns-pandora.com"] [uri "/wp-config.php"] [unique_id "amslkXPjLg3pfT2VSnE2GwAAABk"]
[Thu Jul 30 11:21:05.427198 2026] [security2:error] [pid 2868217:tid 2868217] [client 20.203.200.218:21521] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "nativespace.com.ns-pandora.com"] [uri "/wp-config.php"] [unique_id "amslkXPjLg3pfT2VSnE2GwAAABk"]
[Thu Jul 30 11:21:06.201368 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log, referer: https://www.kirmond.com:443/thestringman.co.uk
[Thu Jul 30 11:21:07.425779 2026] [authz_core:error] [pid 2872132:tid 2872132] [client 66.249.66.35:50153] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:21:07.428423 2026] [authz_core:error] [pid 2872132:tid 2872132] [client 66.249.66.35:50153] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:21:07.837178 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log, referer: https://www.kirmond.com:443/lisichka.co.uk
[Thu Jul 30 11:21:07.841927 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 66.132.172.201:44456] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini, referer: https://www.kirmond.com:443/lisichka.co.uk
[Thu Jul 30 11:21:07.866511 2026] [ssl:error] [pid 2841465:tid 2841465] (EAI 2)Name or service not known: [client 144.76.19.72:33706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:07.866546 2026] [ssl:error] [pid 2841465:tid 2841465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:07.920962 2026] [ssl:error] [pid 2817440:tid 2817440] (EAI 2)Name or service not known: [client 144.76.19.72:33712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:07.920990 2026] [ssl:error] [pid 2817440:tid 2817440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:09.417679 2026] [authz_core:error] [pid 2873558:tid 2873558] [client 66.132.172.41:49624] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 11:21:09.426086 2026] [authz_core:error] [pid 2873558:tid 2873558] [client 66.132.172.41:49624] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 11:21:10.487165 2026] [security2:error] [pid 2868984:tid 2868984] [client 145.223.131.215:37952] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.msg36433/topicseen.html"] [unique_id "amsllnF6EQQThgTDlXKCdQAAACA"]
[Thu Jul 30 11:21:10.487233 2026] [security2:error] [pid 2868984:tid 2868984] [client 145.223.131.215:37952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.msg36433/topicseen.html"] [unique_id "amsllnF6EQQThgTDlXKCdQAAACA"]
[Thu Jul 30 11:21:10.487510 2026] [security2:error] [pid 2868984:tid 2868984] [client 145.223.131.215:37952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsllnF6EQQThgTDlXKCdQAAACA"]
[Thu Jul 30 11:21:11.010356 2026] [ssl:error] [pid 2850152:tid 2850152] (EAI 2)Name or service not known: [client 144.76.19.72:25362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:11.010387 2026] [ssl:error] [pid 2850152:tid 2850152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:11.063725 2026] [ssl:error] [pid 2850152:tid 2850152] (EAI 2)Name or service not known: [client 144.76.19.72:25370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:11.063748 2026] [ssl:error] [pid 2850152:tid 2850152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:11.312178 2026] [security2:error] [pid 2875721:tid 2875721] [client 85.208.96.210:22298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9270.0.html"] [unique_id "amsll_vJ-5xk9Qsdj_OI8wAAAAY"]
[Thu Jul 30 11:21:11.490514 2026] [core:error] [pid 2841465:tid 2841465] (13)Permission denied: [client 216.73.216.199:34134] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/cssystems.net.db
[Thu Jul 30 11:21:11.618491 2026] [security2:error] [pid 2842781:tid 2842781] [client 107.172.62.122:52410] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsll0sd-IZGnXpGPRNlsAAAABM"]
[Thu Jul 30 11:21:12.088225 2026] [core:error] [pid 2843654:tid 2843654] (13)Permission denied: [client 216.73.216.199:16773] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/aliases
[Thu Jul 30 11:21:12.268566 2026] [security2:error] [pid 2842781:tid 2842781] [client 43.166.253.94:51208] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amslmEsd-IZGnXpGPRNlsQAAABM"]
[Thu Jul 30 11:21:14.148142 2026] [ssl:error] [pid 2849863:tid 2849863] (EAI 2)Name or service not known: [client 144.76.19.72:25386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:14.148184 2026] [ssl:error] [pid 2849863:tid 2849863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:14.196691 2026] [ssl:error] [pid 2843654:tid 2843654] (70014)End of file found: [client 216.73.216.199:16773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:14.207186 2026] [ssl:error] [pid 2878630:tid 2878630] (EAI 2)Name or service not known: [client 144.76.19.72:25402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:14.207207 2026] [ssl:error] [pid 2878630:tid 2878630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:15.593333 2026] [ssl:error] [pid 2841465:tid 2841465] (70014)End of file found: [client 216.73.216.199:34134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:15.710083 2026] [autoindex:error] [pid 2878692:tid 2878692] (13)Permission denied: [client 216.73.216.199:51915] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/opt/cloudlinux/flags/available-flags.d/
[Thu Jul 30 11:21:16.009476 2026] [ssl:error] [pid 2878692:tid 2878692] (70014)End of file found: [client 216.73.216.199:51915] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:17.263039 2026] [ssl:error] [pid 2876493:tid 2876493] (EAI 2)Name or service not known: [client 144.76.19.72:25404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:17.263092 2026] [ssl:error] [pid 2876493:tid 2876493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:17.318056 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:25418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:17.318099 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:17.678235 2026] [security2:error] [pid 2866196:tid 2866196] [client 185.191.171.18:55616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9448.0/prev_next,next.html"] [unique_id "amslnR6742etpTcTNXMpgwAAACs"]
[Thu Jul 30 11:21:20.371520 2026] [ssl:error] [pid 2856070:tid 2856070] (EAI 2)Name or service not known: [client 144.76.19.72:21444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:20.371562 2026] [ssl:error] [pid 2856070:tid 2856070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:20.424892 2026] [ssl:error] [pid 2876786:tid 2876786] (EAI 2)Name or service not known: [client 144.76.19.72:21450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:20.424922 2026] [ssl:error] [pid 2876786:tid 2876786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:20.700828 2026] [access_compat:error] [pid 2868984:tid 2868984] [client 183.87.32.213:33940] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/ip
[Thu Jul 30 11:21:20.700941 2026] [access_compat:error] [pid 2868984:tid 2868984] [client 183.87.32.213:33940] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:21:20.859618 2026] [access_compat:error] [pid 2875035:tid 2875035] [client 49.0.204.134:35440] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/ip
[Thu Jul 30 11:21:20.859727 2026] [access_compat:error] [pid 2875035:tid 2875035] [client 49.0.204.134:35440] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:21:20.879261 2026] [access_compat:error] [pid 2850150:tid 2850150] [client 149.232.129.117:48394] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/ip
[Thu Jul 30 11:21:20.879364 2026] [access_compat:error] [pid 2850150:tid 2850150] [client 149.232.129.117:48394] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:21:21.002342 2026] [access_compat:error] [pid 2843654:tid 2843654] [client 190.92.237.81:58804] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/ip
[Thu Jul 30 11:21:21.002447 2026] [access_compat:error] [pid 2843654:tid 2843654] [client 190.92.237.81:58804] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:21:21.376738 2026] [access_compat:error] [pid 2877508:tid 2877508] [client 119.13.109.55:42836] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/ip
[Thu Jul 30 11:21:21.376836 2026] [access_compat:error] [pid 2877508:tid 2877508] [client 119.13.109.55:42836] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:21:21.571050 2026] [access_compat:error] [pid 2869615:tid 2869615] [client 46.250.168.158:58016] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/ip
[Thu Jul 30 11:21:21.571202 2026] [access_compat:error] [pid 2869615:tid 2869615] [client 46.250.168.158:58016] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:21:21.586948 2026] [security2:error] [pid 2849870:tid 2849870] [client 114.119.146.98:38315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/section/26/33"] [unique_id "amslofsbd-6I-D99IH0PYQAAAFI"], referer: http://www.jonathanmeyerart.com/section/26/62
[Thu Jul 30 11:21:21.659985 2026] [cgi:error] [pid 2878686:tid 2878686] [client 216.73.216.199:9774] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/custom_backup_destination.pl.skeleton: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:21:21.660029 2026] [cgi:error] [pid 2878686:tid 2878686] [client 216.73.216.199:9774] End of script output before headers: custom_backup_destination.pl.skeleton
[Thu Jul 30 11:21:21.927983 2026] [security2:error] [pid 2878634:tid 2878634] [client 20.203.200.218:3155] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace.com.ns-pandora.com"] [uri "/var/log/error.log"] [unique_id "amsloZDhnezQUSX-nnHb7AAAACw"]
[Thu Jul 30 11:21:21.928261 2026] [security2:error] [pid 2878634:tid 2878634] [client 20.203.200.218:3155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace.com.ns-pandora.com"] [uri "/var/log/error.log"] [unique_id "amsloZDhnezQUSX-nnHb7AAAACw"]
[Thu Jul 30 11:21:21.928514 2026] [security2:error] [pid 2878634:tid 2878634] [client 20.203.200.218:3155] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "nativespace.com.ns-pandora.com"] [uri "/var/log/error.log"] [unique_id "amsloZDhnezQUSX-nnHb7AAAACw"]
[Thu Jul 30 11:21:22.032735 2026] [authz_core:error] [pid 2875035:tid 2875035] [client 66.249.66.33:38094] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:21:22.035411 2026] [authz_core:error] [pid 2875035:tid 2875035] [client 66.249.66.33:38094] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:21:22.321686 2026] [core:error] [pid 2854524:tid 2854524] [client 66.249.64.170:55927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:21:22.321724 2026] [core:error] [pid 2854524:tid 2854524] [client 66.249.64.170:55927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:21:23.211899 2026] [authz_core:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 11:21:23.213846 2026] [access_compat:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 11:21:23.213889 2026] [access_compat:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 11:21:23.218062 2026] [access_compat:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 11:21:23.477201 2026] [ssl:error] [pid 2872133:tid 2872133] (EAI 2)Name or service not known: [client 144.76.19.72:21458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:23.477242 2026] [ssl:error] [pid 2872133:tid 2872133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:23.576992 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:21460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:23.577017 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:24.345787 2026] [security2:error] [pid 2876401:tid 2876401] [client 216.73.216.199:29235] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xml_wddx.ini"] [unique_id "amslpA_tZs3ZRANBC-SaQwAAAA8"]
[Thu Jul 30 11:21:24.346127 2026] [security2:error] [pid 2876401:tid 2876401] [client 216.73.216.199:29235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xml_wddx.ini"] [unique_id "amslpA_tZs3ZRANBC-SaQwAAAA8"]
[Thu Jul 30 11:21:24.346360 2026] [security2:error] [pid 2876401:tid 2876401] [client 216.73.216.199:29235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xml_wddx.ini"] [unique_id "amslpA_tZs3ZRANBC-SaQwAAAA8"]
[Thu Jul 30 11:21:24.647129 2026] [core:error] [pid 2876401:tid 2876401] (13)Permission denied: [client 216.73.216.199:29235] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/suspend/uevent
[Thu Jul 30 11:21:25.851378 2026] [ssl:error] [pid 2876401:tid 2876401] (70014)End of file found: [client 216.73.216.199:29235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:26.058765 2026] [authz_core:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 11:21:26.453051 2026] [ssl:error] [pid 2878692:tid 2878692] (70014)End of file found: [client 216.73.216.199:1473] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:26.584532 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.191.171.9:51362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/pixelmon-legendary-spawn-rate-command"] [unique_id "amslpgowDC-RzBAKTRO-sQAAACM"]
[Thu Jul 30 11:21:26.633936 2026] [ssl:error] [pid 2869615:tid 2869615] (EAI 2)Name or service not known: [client 144.76.19.72:21470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:26.633973 2026] [ssl:error] [pid 2869615:tid 2869615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:26.686889 2026] [ssl:error] [pid 2868217:tid 2868217] (EAI 2)Name or service not known: [client 144.76.19.72:21474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:26.686914 2026] [ssl:error] [pid 2868217:tid 2868217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:26.862741 2026] [authz_core:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/jquery/error_log
[Thu Jul 30 11:21:28.168219 2026] [authz_core:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/l10n/error_log
[Thu Jul 30 11:21:28.235450 2026] [authz_core:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 11:21:28.237326 2026] [access_compat:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 11:21:28.237365 2026] [access_compat:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 11:21:28.241523 2026] [access_compat:error] [pid 2876786:tid 2876786] [client 20.100.203.84:24890] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 11:21:28.867424 2026] [ssl:error] [pid 2878690:tid 2878690] (70014)End of file found: [client 216.73.216.199:19029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:29.065834 2026] [authz_core:error] [pid 2857964:tid 2857964] [client 20.100.203.84:29473] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:21:29.743607 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:64610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:29.743654 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:29.797136 2026] [ssl:error] [pid 2865562:tid 2865562] (EAI 2)Name or service not known: [client 144.76.19.72:64618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:29.797167 2026] [ssl:error] [pid 2865562:tid 2865562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:31.868232 2026] [security2:error] [pid 2878689:tid 2878689] [client 51.68.236.59:21439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.iapib.com"] [uri "/robots.txt"] [unique_id "amslq0NBjtBpKbqGz8b-egAAAC8"]
[Thu Jul 30 11:21:31.968314 2026] [security2:error] [pid 2872819:tid 2872819] [client 51.68.236.59:29061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.iapib.com"] [uri "/"] [unique_id "amslq09eRJiDDynuq3fnLAAAACU"]
[Thu Jul 30 11:21:32.096225 2026] [security2:error] [pid 2873920:tid 2873920] [client 51.68.236.59:12097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "iapib.com"] [uri "/robots.txt"] [unique_id "amslrCXPRdyjv0xkX-dGsAAAADU"]
[Thu Jul 30 11:21:32.855175 2026] [ssl:error] [pid 2875764:tid 2875764] (EAI 2)Name or service not known: [client 144.76.19.72:64632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:32.855210 2026] [ssl:error] [pid 2875764:tid 2875764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:32.912080 2026] [ssl:error] [pid 2873920:tid 2873920] (EAI 2)Name or service not known: [client 144.76.19.72:64646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:32.912121 2026] [ssl:error] [pid 2873920:tid 2873920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:32.967390 2026] [ssl:error] [pid 2876995:tid 2876995] (70014)End of file found: [client 216.73.216.199:39914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:34.175136 2026] [security2:error] [pid 2878692:tid 2878692] [client 216.73.216.199:51171] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/curl.ini"] [unique_id "amslrkFTeiEIQTrHZMABaQAAADY"]
[Thu Jul 30 11:21:34.175439 2026] [security2:error] [pid 2878692:tid 2878692] [client 216.73.216.199:51171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/curl.ini"] [unique_id "amslrkFTeiEIQTrHZMABaQAAADY"]
[Thu Jul 30 11:21:34.175687 2026] [security2:error] [pid 2878692:tid 2878692] [client 216.73.216.199:51171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/curl.ini"] [unique_id "amslrkFTeiEIQTrHZMABaQAAADY"]
[Thu Jul 30 11:21:34.282970 2026] [core:error] [pid 2878692:tid 2878692] (13)Permission denied: [client 216.73.216.199:51171] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/stadiumdatabase.com.db
[Thu Jul 30 11:21:35.966780 2026] [ssl:error] [pid 2875675:tid 2875675] (EAI 2)Name or service not known: [client 144.76.19.72:64648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:35.966831 2026] [ssl:error] [pid 2875675:tid 2875675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:36.024554 2026] [ssl:error] [pid 2850152:tid 2850152] (EAI 2)Name or service not known: [client 144.76.19.72:64650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:36.024587 2026] [ssl:error] [pid 2850152:tid 2850152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:36.389749 2026] [ssl:error] [pid 2878692:tid 2878692] (70014)End of file found: [client 216.73.216.199:51171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:37.598249 2026] [ssl:error] [pid 2876401:tid 2876401] (70014)End of file found: [client 216.73.216.199:23665] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:39.082335 2026] [ssl:error] [pid 2878690:tid 2878690] (EAI 2)Name or service not known: [client 144.76.19.72:64652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:39.082374 2026] [ssl:error] [pid 2878690:tid 2878690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:39.135869 2026] [ssl:error] [pid 2872132:tid 2872132] (EAI 2)Name or service not known: [client 144.76.19.72:64664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:39.135897 2026] [ssl:error] [pid 2872132:tid 2872132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:39.283485 2026] [security2:error] [pid 2849870:tid 2849870] [client 123.20.237.208:52792] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsls_sbd-6I-D99IH0PaAAAAFI"]
[Thu Jul 30 11:21:39.283558 2026] [security2:error] [pid 2849870:tid 2849870] [client 123.20.237.208:52792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsls_sbd-6I-D99IH0PaAAAAFI"]
[Thu Jul 30 11:21:39.283877 2026] [security2:error] [pid 2849870:tid 2849870] [client 123.20.237.208:52792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsls_sbd-6I-D99IH0PaAAAAFI"]
[Thu Jul 30 11:21:41.551889 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 216.73.216.199:44259] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/php.ini
[Thu Jul 30 11:21:42.192426 2026] [ssl:error] [pid 2876493:tid 2876493] (EAI 2)Name or service not known: [client 144.76.19.72:44678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:42.192463 2026] [ssl:error] [pid 2876493:tid 2876493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:42.245462 2026] [ssl:error] [pid 2875675:tid 2875675] (EAI 2)Name or service not known: [client 144.76.19.72:44688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:42.245499 2026] [ssl:error] [pid 2875675:tid 2875675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:42.664599 2026] [ssl:error] [pid 2877508:tid 2877508] (70014)End of file found: [client 216.73.216.199:44905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:42.797049 2026] [security2:error] [pid 2876401:tid 2876401] [client 191.44.127.50:40046] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsltg_tZs3ZRANBC-SaVwAAAA8"]
[Thu Jul 30 11:21:42.797133 2026] [security2:error] [pid 2876401:tid 2876401] [client 191.44.127.50:40046] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsltg_tZs3ZRANBC-SaVwAAAA8"]
[Thu Jul 30 11:21:42.797388 2026] [security2:error] [pid 2876401:tid 2876401] [client 191.44.127.50:40046] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsltg_tZs3ZRANBC-SaVwAAAA8"]
[Thu Jul 30 11:21:42.908899 2026] [ssl:error] [pid 2879538:tid 2879538] (70014)End of file found: [client 216.73.216.199:41752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:43.815634 2026] [ssl:error] [pid 2876401:tid 2876401] (70014)End of file found: [client 216.73.216.199:15511] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:44.394846 2026] [cgi:error] [pid 2878690:tid 2878690] [client 194.9.110.170:20474] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:21:45.319411 2026] [ssl:error] [pid 2849870:tid 2849870] (EAI 2)Name or service not known: [client 144.76.19.72:44698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:45.319475 2026] [ssl:error] [pid 2849870:tid 2849870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:45.375391 2026] [ssl:error] [pid 2856066:tid 2856066] (EAI 2)Name or service not known: [client 144.76.19.72:44706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:45.375424 2026] [ssl:error] [pid 2856066:tid 2856066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:45.419122 2026] [authz_core:error] [pid 2879953:tid 2879953] [client 66.249.66.14:53587] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:21:45.421782 2026] [authz_core:error] [pid 2879953:tid 2879953] [client 66.249.66.14:53587] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:21:45.798189 2026] [cgi:error] [pid 2854524:tid 2854524] [client 199.45.154.137:58258] AH02812: stderr from /home/wmsfirea/public_html/wms-firearmstraining.org/cgi-bin/: attempt to invoke directory as script, referer: https://wms-firearmstrainingorg.wmsfirearmstraining.com:443/cgi-bin
[Thu Jul 30 11:21:46.092863 2026] [authz_core:error] [pid 2878688:tid 2878688] [client 66.249.66.14:65429] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:21:46.095531 2026] [authz_core:error] [pid 2878688:tid 2878688] [client 66.249.66.14:65429] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:21:47.444108 2026] [security2:error] [pid 2875766:tid 2875766] [client 43.166.1.243:49522] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.butteredcat.com"] [uri "/wp/"] [unique_id "amsluwowDC-RzBAKTRO-uAAAACM"]
[Thu Jul 30 11:21:48.429096 2026] [ssl:error] [pid 2868849:tid 2868849] (EAI 2)Name or service not known: [client 144.76.19.72:44716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:48.429129 2026] [ssl:error] [pid 2868849:tid 2868849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:48.481839 2026] [ssl:error] [pid 2849863:tid 2849863] (EAI 2)Name or service not known: [client 144.76.19.72:44730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:48.481868 2026] [ssl:error] [pid 2849863:tid 2849863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:48.623872 2026] [security2:error] [pid 2849870:tid 2849870] [client 5.45.133.204:9824] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslvPsbd-6I-D99IH0PbAAAAFI"]
[Thu Jul 30 11:21:48.623923 2026] [security2:error] [pid 2849870:tid 2849870] [client 5.45.133.204:9824] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amslvPsbd-6I-D99IH0PbAAAAFI"]
[Thu Jul 30 11:21:48.624177 2026] [security2:error] [pid 2849870:tid 2849870] [client 5.45.133.204:9824] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amslvPsbd-6I-D99IH0PbAAAAFI"]
[Thu Jul 30 11:21:48.819046 2026] [access_compat:error] [pid 2878632:tid 2878632] [client 45.158.164.139:59934] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:21:49.243514 2026] [ssl:error] [pid 2878694:tid 2878694] (70014)End of file found: [client 216.73.216.199:20065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:50.013519 2026] [cgi:error] [pid 2872133:tid 2872133] [client 20.203.200.218:36701] AH02811: stderr from /home/nspandor/nativespace.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 11:21:50.025375 2026] [autoindex:error] [pid 2873873:tid 2873873] [client 51.103.154.47:56993] AH01276: Cannot serve directory /home/nkxfsjcw/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:21:50.191803 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 20.203.200.218:36701] AH01630: client denied by server configuration: /home/nspandor/nativespace.com/php.ini
[Thu Jul 30 11:21:51.092731 2026] [security2:error] [pid 2856066:tid 2856066] [client 43.130.105.21:59490] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "martingriese.com"] [uri "/"] [unique_id "amslv2651E8Pg5Swp9M6oAAAAA0"]
[Thu Jul 30 11:21:51.353420 2026] [ssl:error] [pid 2868217:tid 2868217] (70014)End of file found: [client 216.73.216.199:53052] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:51.535252 2026] [ssl:error] [pid 2876647:tid 2876647] (EAI 2)Name or service not known: [client 144.76.19.72:38700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:51.535292 2026] [ssl:error] [pid 2876647:tid 2876647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:51.588591 2026] [ssl:error] [pid 2875675:tid 2875675] (EAI 2)Name or service not known: [client 144.76.19.72:38716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:51.588617 2026] [ssl:error] [pid 2875675:tid 2875675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:53.156585 2026] [ssl:error] [pid 2878632:tid 2878632] (70014)End of file found: [client 216.73.216.199:17933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:53.861227 2026] [authz_core:error] [pid 2878521:tid 2878521] [client 66.132.172.41:48456] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 11:21:53.869120 2026] [authz_core:error] [pid 2878521:tid 2878521] [client 66.132.172.41:48456] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 11:21:54.542737 2026] [security2:error] [pid 2874936:tid 2874936] [client 216.73.216.199:60191] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mysqlnd.ini"] [unique_id "amslwnaZW4d13aJTjCHBJwAAABc"]
[Thu Jul 30 11:21:54.542977 2026] [security2:error] [pid 2874936:tid 2874936] [client 216.73.216.199:60191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mysqlnd.ini"] [unique_id "amslwnaZW4d13aJTjCHBJwAAABc"]
[Thu Jul 30 11:21:54.543195 2026] [security2:error] [pid 2874936:tid 2874936] [client 216.73.216.199:60191] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mysqlnd.ini"] [unique_id "amslwnaZW4d13aJTjCHBJwAAABc"]
[Thu Jul 30 11:21:54.643313 2026] [ssl:error] [pid 2872132:tid 2872132] (EAI 2)Name or service not known: [client 144.76.19.72:38718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:54.643344 2026] [ssl:error] [pid 2872132:tid 2872132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:54.661313 2026] [ssl:error] [pid 2874936:tid 2874936] (70014)End of file found: [client 216.73.216.199:60191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:54.699495 2026] [ssl:error] [pid 2873920:tid 2873920] (EAI 2)Name or service not known: [client 144.76.19.72:38722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:54.699517 2026] [ssl:error] [pid 2873920:tid 2873920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:55.475648 2026] [authz_core:error] [pid 2878521:tid 2878521] [client 66.132.172.41:48456] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/error_log, referer: https://www.dbstart.co.uk:443/suitecrm
[Thu Jul 30 11:21:57.408423 2026] [security2:error] [pid 2878688:tid 2878688] [client 1.15.52.154:36860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "liberator-no-email.com"] [uri "/"] [unique_id "amslxZGFIvp9mqrO8BGm4gAAAC4"]
[Thu Jul 30 11:21:57.676003 2026] [ssl:error] [pid 2848980:tid 2848980] (70014)End of file found: [client 216.73.216.199:15044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:21:57.795890 2026] [ssl:error] [pid 2876401:tid 2876401] (EAI 2)Name or service not known: [client 144.76.19.72:38728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:57.795936 2026] [ssl:error] [pid 2876401:tid 2876401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:57.848325 2026] [ssl:error] [pid 2868217:tid 2868217] (EAI 2)Name or service not known: [client 144.76.19.72:38742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:21:57.848364 2026] [ssl:error] [pid 2868217:tid 2868217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:21:58.479233 2026] [ssl:error] [pid 2876786:tid 2876786] (70014)End of file found: [client 216.73.216.199:21251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:00.086182 2026] [ssl:error] [pid 2850150:tid 2850150] (70014)End of file found: [client 216.73.216.199:52619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:00.905057 2026] [ssl:error] [pid 2868217:tid 2868217] (EAI 2)Name or service not known: [client 144.76.19.72:22022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:00.905129 2026] [ssl:error] [pid 2868217:tid 2868217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:00.961437 2026] [ssl:error] [pid 2873920:tid 2873920] (EAI 2)Name or service not known: [client 144.76.19.72:22026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:00.961466 2026] [ssl:error] [pid 2873920:tid 2873920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:00.994014 2026] [authz_core:error] [pid 2880405:tid 2880405] [client 52.167.144.217:34308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:22:00.994681 2026] [authz_core:error] [pid 2880405:tid 2880405] [client 52.167.144.217:34308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:22:01.192419 2026] [security2:error] [pid 2875675:tid 2875675] [client 114.119.132.171:62655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/parents-and-toddlers/"] [unique_id "amslyWfxGaXrBPYhpA2AtQAAAAQ"], referer: http://www.erskinenazarene.co.uk/event/parents-and-toddlers/?instance_id=35445
[Thu Jul 30 11:22:02.994799 2026] [ssl:error] [pid 2848980:tid 2848980] (70014)End of file found: [client 216.73.216.199:22624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:03.311576 2026] [security2:error] [pid 2857964:tid 2857964] [client 101.47.24.98:37685] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsly5V0UTW0dD88y7mI7wAAABo"]
[Thu Jul 30 11:22:03.311627 2026] [security2:error] [pid 2857964:tid 2857964] [client 101.47.24.98:37685] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsly5V0UTW0dD88y7mI7wAAABo"]
[Thu Jul 30 11:22:03.311881 2026] [security2:error] [pid 2857964:tid 2857964] [client 101.47.24.98:37685] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsly5V0UTW0dD88y7mI7wAAABo"]
[Thu Jul 30 11:22:04.013284 2026] [ssl:error] [pid 2876786:tid 2876786] (EAI 2)Name or service not known: [client 144.76.19.72:22034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:04.013316 2026] [ssl:error] [pid 2876786:tid 2876786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:04.067476 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:22050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:04.067505 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:05.562840 2026] [security2:error] [pid 2868849:tid 2868849] [client 114.119.132.171:62661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/parents-and-toddlers/"] [unique_id "amslzVIG2CcB3wx-rTWlUQAAAB8"], referer: http://www.erskinenazarene.co.uk/event/parents-and-toddlers/?instance_id=35445
[Thu Jul 30 11:22:06.108898 2026] [ssl:error] [pid 2878521:tid 2878521] (70014)End of file found: [client 216.73.216.199:5939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:06.598033 2026] [ssl:error] [pid 2876786:tid 2876786] (70014)End of file found: [client 216.73.216.199:3032] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:07.097422 2026] [core:error] [pid 2878690:tid 2878690] [client 66.249.66.167:61080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:22:07.097463 2026] [core:error] [pid 2878690:tid 2878690] [client 66.249.66.167:61080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:22:07.121714 2026] [ssl:error] [pid 2877508:tid 2877508] (EAI 2)Name or service not known: [client 144.76.19.72:22056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:07.121754 2026] [ssl:error] [pid 2877508:tid 2877508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:07.179700 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:22068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:07.179729 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:07.562517 2026] [cgi:error] [pid 2865085:tid 2865085] [client 66.132.195.63:19022] AH02812: stderr from /home/innersp/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://innerspacer.co.uk:80/cgi-bin
[Thu Jul 30 11:22:08.415337 2026] [ssl:error] [pid 2880405:tid 2880405] (70014)End of file found: [client 216.73.216.199:61966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:09.975584 2026] [security2:error] [pid 2878690:tid 2878690] [client 82.102.194.194:40414] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsl0VKsbViwzbc_UJ_qYQAAADE"]
[Thu Jul 30 11:22:09.975700 2026] [security2:error] [pid 2878690:tid 2878690] [client 82.102.194.194:40414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsl0VKsbViwzbc_UJ_qYQAAADE"]
[Thu Jul 30 11:22:09.975987 2026] [security2:error] [pid 2878690:tid 2878690] [client 82.102.194.194:40414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsl0VKsbViwzbc_UJ_qYQAAADE"]
[Thu Jul 30 11:22:10.237535 2026] [ssl:error] [pid 2868217:tid 2868217] (EAI 2)Name or service not known: [client 144.76.19.72:51818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:10.237592 2026] [ssl:error] [pid 2868217:tid 2868217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:10.290586 2026] [ssl:error] [pid 2878690:tid 2878690] (EAI 2)Name or service not known: [client 144.76.19.72:51832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:10.290617 2026] [ssl:error] [pid 2878690:tid 2878690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:10.515502 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 51.103.154.47:56993] AH01630: client denied by server configuration: /home/nkxfsjcw/public_html/wp-includes/Requests/error_log
[Thu Jul 30 11:22:10.881233 2026] [ssl:error] [pid 2868984:tid 2868984] (70014)End of file found: [client 216.73.216.199:33909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:11.181789 2026] [ssl:error] [pid 2868217:tid 2868217] (70014)End of file found: [client 216.73.216.199:23084] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:11.583275 2026] [ssl:error] [pid 2878521:tid 2878521] (70014)End of file found: [client 216.73.216.199:44955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:13.343399 2026] [ssl:error] [pid 2878633:tid 2878633] (EAI 2)Name or service not known: [client 144.76.19.72:51848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:13.343453 2026] [ssl:error] [pid 2878633:tid 2878633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:13.396235 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:51862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:13.396273 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:16.171435 2026] [security2:error] [pid 2880698:tid 2880698] [client 106.78.17.0:38982] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsl2A9McUc-P5Ffc557jQAAAAg"]
[Thu Jul 30 11:22:16.171487 2026] [security2:error] [pid 2880698:tid 2880698] [client 106.78.17.0:38982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsl2A9McUc-P5Ffc557jQAAAAg"]
[Thu Jul 30 11:22:16.171763 2026] [security2:error] [pid 2880698:tid 2880698] [client 106.78.17.0:38982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsl2A9McUc-P5Ffc557jQAAAAg"]
[Thu Jul 30 11:22:16.462353 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:51874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:16.462391 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:16.513900 2026] [ssl:error] [pid 2874936:tid 2874936] (EAI 2)Name or service not known: [client 144.76.19.72:51878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:16.513933 2026] [ssl:error] [pid 2874936:tid 2874936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:16.721081 2026] [ssl:error] [pid 2868984:tid 2868984] (70014)End of file found: [client 216.73.216.199:12883] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:17.126127 2026] [ssl:error] [pid 2876401:tid 2876401] (70014)End of file found: [client 216.73.216.199:2682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:18.109206 2026] [security2:error] [pid 2872132:tid 2872132] [client 47.128.36.154:20008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amsl2pPYLfFehAxlfzyoiQAAAAU"]
[Thu Jul 30 11:22:19.134077 2026] [ssl:error] [pid 2850150:tid 2850150] (70014)End of file found: [client 216.73.216.199:1872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:19.569691 2026] [ssl:error] [pid 2880624:tid 2880624] (EAI 2)Name or service not known: [client 144.76.19.72:54356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:19.569733 2026] [ssl:error] [pid 2880624:tid 2880624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:19.625135 2026] [ssl:error] [pid 2878694:tid 2878694] (EAI 2)Name or service not known: [client 144.76.19.72:54368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:19.625196 2026] [ssl:error] [pid 2878694:tid 2878694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:19.924795 2026] [security2:error] [pid 2873919:tid 2873919] [client 74.7.242.45:56162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "halmanninvestments.com"] [uri "/"] [unique_id "amsl28AcoWZKDZRRJ4sWnwAAADQ"]
[Thu Jul 30 11:22:22.061916 2026] [ssl:error] [pid 2878693:tid 2878693] (70014)End of file found: [client 216.73.216.199:52410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:22.554515 2026] [security2:error] [pid 2866196:tid 2866196] [client 175.27.171.245:43142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.co.uk"] [uri "/"] [unique_id "amsl3h6742etpTcTNXMpygAAACs"]
[Thu Jul 30 11:22:22.557681 2026] [authz_core:error] [pid 2866196:tid 2866196] [client 175.27.171.245:43142] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 11:22:22.563727 2026] [authz_core:error] [pid 2866196:tid 2866196] [client 175.27.171.245:43142] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 11:22:22.649013 2026] [ssl:error] [pid 2873920:tid 2873920] (70014)End of file found: [client 216.73.216.199:55256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:22.679881 2026] [ssl:error] [pid 2868849:tid 2868849] (EAI 2)Name or service not known: [client 144.76.19.72:54380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:22.679912 2026] [ssl:error] [pid 2868849:tid 2868849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:22.737284 2026] [ssl:error] [pid 2876401:tid 2876401] (EAI 2)Name or service not known: [client 144.76.19.72:54382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:22.737318 2026] [ssl:error] [pid 2876401:tid 2876401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:24.978374 2026] [security2:error] [pid 2868984:tid 2868984] [client 170.187.147.240:51810] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "45.158.164.139"] [uri "/remote/fgt_lang"] [unique_id "amsl4HF6EQQThgTDlXKC9gAAACA"]
[Thu Jul 30 11:22:24.978436 2026] [security2:error] [pid 2868984:tid 2868984] [client 170.187.147.240:51810] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "45.158.164.139"] [uri "/remote/fgt_lang"] [unique_id "amsl4HF6EQQThgTDlXKC9gAAACA"]
[Thu Jul 30 11:22:24.978463 2026] [security2:error] [pid 2868984:tid 2868984] [client 170.187.147.240:51810] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "45.158.164.139"] [uri "/remote/fgt_lang"] [unique_id "amsl4HF6EQQThgTDlXKC9gAAACA"]
[Thu Jul 30 11:22:24.978927 2026] [security2:error] [pid 2868984:tid 2868984] [client 170.187.147.240:51810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/remote/fgt_lang"] [unique_id "amsl4HF6EQQThgTDlXKC9gAAACA"]
[Thu Jul 30 11:22:24.979497 2026] [security2:error] [pid 2868984:tid 2868984] [client 170.187.147.240:51810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amsl4HF6EQQThgTDlXKC9gAAACA"]
[Thu Jul 30 11:22:25.775175 2026] [ssl:error] [pid 2848980:tid 2848980] (70014)End of file found: [client 216.73.216.199:45283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:25.795524 2026] [ssl:error] [pid 2872132:tid 2872132] (EAI 2)Name or service not known: [client 144.76.19.72:54386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:25.795561 2026] [ssl:error] [pid 2872132:tid 2872132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:25.849568 2026] [ssl:error] [pid 2872132:tid 2872132] (EAI 2)Name or service not known: [client 144.76.19.72:54388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:25.849589 2026] [ssl:error] [pid 2872132:tid 2872132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:27.026129 2026] [security2:error] [pid 2877508:tid 2877508] [client 85.208.96.210:63442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/houses-for-rent-63136-cozens-dr"] [unique_id "amsl49l67kgWQMVF6hjTYQAAACQ"]
[Thu Jul 30 11:22:27.471196 2026] [ssl:error] [pid 2872132:tid 2872132] (70014)End of file found: [client 216.73.216.199:3478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:28.785193 2026] [ssl:error] [pid 2878521:tid 2878521] (70014)End of file found: [client 216.73.216.199:43320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:28.905874 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:54392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:28.905903 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:28.962702 2026] [ssl:error] [pid 2881104:tid 2881104] (EAI 2)Name or service not known: [client 144.76.19.72:54406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:28.962738 2026] [ssl:error] [pid 2881104:tid 2881104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:29.405778 2026] [authz_core:error] [pid 2881104:tid 2881104] [client 66.249.66.34:49469] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:22:29.408440 2026] [authz_core:error] [pid 2881104:tid 2881104] [client 66.249.66.34:49469] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:22:29.523931 2026] [security2:error] [pid 2881678:tid 2881678] [client 185.191.171.5:19134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amsl5ekX8OCsDsZuMzjNEAAAABA"]
[Thu Jul 30 11:22:29.914599 2026] [security2:error] [pid 2881766:tid 2881766] [client 85.208.96.212:24070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsl5WGdUIvgvj6qMey8iAAAABI"]
[Thu Jul 30 11:22:30.625232 2026] [core:error] [pid 2868849:tid 2868849] [client 66.249.66.194:41208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:22:30.625263 2026] [core:error] [pid 2868849:tid 2868849] [client 66.249.66.194:41208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:22:32.019721 2026] [ssl:error] [pid 2848980:tid 2848980] (EAI 2)Name or service not known: [client 144.76.19.72:29588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:32.019748 2026] [ssl:error] [pid 2848980:tid 2848980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:32.076148 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:29598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:32.076176 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:32.110997 2026] [ssl:error] [pid 2881766:tid 2881766] (70014)End of file found: [client 216.73.216.199:24994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:34.398138 2026] [ssl:error] [pid 2878690:tid 2878690] (70014)End of file found: [client 216.73.216.199:2271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:34.818332 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:34879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:35.130686 2026] [ssl:error] [pid 2881470:tid 2881470] (EAI 2)Name or service not known: [client 144.76.19.72:29610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:35.130725 2026] [ssl:error] [pid 2881470:tid 2881470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:35.188930 2026] [ssl:error] [pid 2876401:tid 2876401] (EAI 2)Name or service not known: [client 144.76.19.72:29614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:35.188957 2026] [ssl:error] [pid 2876401:tid 2876401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:37.833531 2026] [ssl:error] [pid 2868849:tid 2868849] (70014)End of file found: [client 216.73.216.199:26158] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:38.204386 2026] [core:error] [pid 2872891:tid 2872891] [client 66.249.64.170:51582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:22:38.204415 2026] [core:error] [pid 2872891:tid 2872891] [client 66.249.64.170:51582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:22:38.245029 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:29628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:38.245082 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:38.297748 2026] [ssl:error] [pid 2878694:tid 2878694] (EAI 2)Name or service not known: [client 144.76.19.72:29636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:38.297779 2026] [ssl:error] [pid 2878694:tid 2878694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:39.878967 2026] [authz_core:error] [pid 2868984:tid 2868984] [client 66.249.66.34:63473] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:22:39.881648 2026] [authz_core:error] [pid 2868984:tid 2868984] [client 66.249.66.34:63473] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:22:41.355423 2026] [ssl:error] [pid 2878690:tid 2878690] (EAI 2)Name or service not known: [client 144.76.19.72:23628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:41.355455 2026] [ssl:error] [pid 2878690:tid 2878690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:41.412986 2026] [ssl:error] [pid 2874936:tid 2874936] (EAI 2)Name or service not known: [client 144.76.19.72:23634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:41.413013 2026] [ssl:error] [pid 2874936:tid 2874936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:42.201476 2026] [ssl:error] [pid 2878633:tid 2878633] (70014)End of file found: [client 216.73.216.199:42979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:42.503086 2026] [ssl:error] [pid 2841465:tid 2841465] (70014)End of file found: [client 216.73.216.199:44843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:44.468824 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:23650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:44.468864 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:44.522546 2026] [ssl:error] [pid 2857964:tid 2857964] (EAI 2)Name or service not known: [client 144.76.19.72:23664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:44.522582 2026] [ssl:error] [pid 2857964:tid 2857964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:45.827873 2026] [ssl:error] [pid 2866196:tid 2866196] (70014)End of file found: [client 216.73.216.199:16281] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:47.517427 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:50183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:47.545753 2026] [security2:error] [pid 2874936:tid 2874936] [client 85.208.96.202:49160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2430.0/prev_next,next.html"] [unique_id "amsl93aZW4d13aJTjCHBmwAAABc"]
[Thu Jul 30 11:22:47.592109 2026] [ssl:error] [pid 2880624:tid 2880624] (EAI 2)Name or service not known: [client 144.76.19.72:23666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:47.592151 2026] [ssl:error] [pid 2880624:tid 2880624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:47.644286 2026] [ssl:error] [pid 2849863:tid 2849863] (EAI 2)Name or service not known: [client 144.76.19.72:23668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:47.644314 2026] [ssl:error] [pid 2849863:tid 2849863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:48.531234 2026] [ssl:error] [pid 2873920:tid 2873920] (70014)End of file found: [client 216.73.216.199:39957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:50.187908 2026] [security2:error] [pid 2876493:tid 2876493] [client 170.106.180.153:37466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "secretbluestone.co.uk"] [uri "/"] [unique_id "amsl-k3W0uyHMxzWFegyNAAAAB4"]
[Thu Jul 30 11:22:50.697351 2026] [ssl:error] [pid 2880624:tid 2880624] (EAI 2)Name or service not known: [client 144.76.19.72:53420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:50.697384 2026] [ssl:error] [pid 2880624:tid 2880624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:50.751649 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:53424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:50.751680 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:51.130586 2026] [core:error] [pid 2868984:tid 2868984] (13)Permission denied: [client 216.73.216.199:10588] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/destroy_by_rcu
[Thu Jul 30 11:22:51.543777 2026] [ssl:error] [pid 2868984:tid 2868984] (70014)End of file found: [client 216.73.216.199:10588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:53.803598 2026] [ssl:error] [pid 2876786:tid 2876786] (EAI 2)Name or service not known: [client 144.76.19.72:53428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:53.803632 2026] [ssl:error] [pid 2876786:tid 2876786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:53.856759 2026] [ssl:error] [pid 2881470:tid 2881470] (EAI 2)Name or service not known: [client 144.76.19.72:53436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:53.856791 2026] [ssl:error] [pid 2881470:tid 2881470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:54.260264 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:63841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:54.863718 2026] [ssl:error] [pid 2877508:tid 2877508] (70014)End of file found: [client 216.73.216.199:43041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:55.525174 2026] [security2:error] [pid 2873919:tid 2873919] [client 170.106.35.153:60876] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "josephashmore.org"] [uri "/"] [unique_id "amsl_8AcoWZKDZRRJ4sXBgAAADQ"]
[Thu Jul 30 11:22:56.465393 2026] [security2:error] [pid 2881104:tid 2881104] [client 37.59.204.138:28538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/directions-to-kinesiology-centres/"] [unique_id "amsmALDYjde-Q5FpeCtgbQAAAAo"]
[Thu Jul 30 11:22:56.911342 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:53452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:56.911370 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:56.969111 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:53454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:22:56.969138 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:22:58.176705 2026] [ssl:error] [pid 2878690:tid 2878690] (70014)End of file found: [client 216.73.216.199:29718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:58.692278 2026] [security2:error] [pid 2883735:tid 2883735] [client 43.165.7.74:50550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsmAgta68nKmksOu9mfiAAAAA8"]
[Thu Jul 30 11:22:58.947251 2026] [authz_core:error] [pid 2875675:tid 2875675] [client 66.249.66.33:60081] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:22:58.949908 2026] [authz_core:error] [pid 2875675:tid 2875675] [client 66.249.66.33:60081] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:22:59.510388 2026] [security2:error] [pid 2883735:tid 2883735] [client 43.165.7.74:56134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsmAwta68nKmksOu9mfigAAAA8"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 11:22:59.557396 2026] [ssl:error] [pid 2866196:tid 2866196] (70014)End of file found: [client 216.73.216.199:20856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:22:59.932201 2026] [security2:error] [pid 2881104:tid 2881104] [client 114.119.142.135:58625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tompalmer.co.uk"] [uri "/wpcontent/uploads/2020/02/2017_07_04_free_SAL_resource_-_The_character_strikes_back_Part_1.pdf"] [unique_id "amsmA7DYjde-Q5FpeCtgbwAAAAo"], referer: https://ingleton-pri.n-yorks.sch.uk/classes/remote-learning-mat/
[Thu Jul 30 11:23:00.027506 2026] [ssl:error] [pid 2868849:tid 2868849] (EAI 2)Name or service not known: [client 144.76.19.72:32180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:00.027531 2026] [ssl:error] [pid 2868849:tid 2868849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:00.082394 2026] [ssl:error] [pid 2876647:tid 2876647] (EAI 2)Name or service not known: [client 144.76.19.72:32182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:00.082420 2026] [ssl:error] [pid 2876647:tid 2876647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:00.173278 2026] [ssl:error] [pid 2883735:tid 2883735] (70014)End of file found: [client 216.73.216.199:36956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:00.671957 2026] [authz_core:error] [pid 2878632:tid 2878632] [client 82.102.18.190:54618] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 11:23:03.141467 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:32192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:03.141497 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:03.199052 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:32194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:03.199116 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:03.504893 2026] [ssl:error] [pid 2878521:tid 2878521] (70014)End of file found: [client 216.73.216.199:17911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:05.002448 2026] [ssl:error] [pid 2867712:tid 2867712] (70014)End of file found: [client 216.73.216.199:9457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:05.606344 2026] [ssl:error] [pid 2873919:tid 2873919] (70014)End of file found: [client 216.73.216.199:24438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:06.255626 2026] [ssl:error] [pid 2878694:tid 2878694] (EAI 2)Name or service not known: [client 144.76.19.72:32202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:06.255658 2026] [ssl:error] [pid 2878694:tid 2878694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:06.307545 2026] [ssl:error] [pid 2856066:tid 2856066] (EAI 2)Name or service not known: [client 144.76.19.72:32208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:06.307572 2026] [ssl:error] [pid 2856066:tid 2856066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:07.681318 2026] [cgi:error] [pid 2881470:tid 2881470] [client 20.220.15.170:40779] AH02812: stderr from /home/eznoyveg/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:23:08.129889 2026] [security2:error] [pid 2848847:tid 2848847] [client 149.86.159.18:51130] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmDDE8F1mwS9lSdW977gAAABs"]
[Thu Jul 30 11:23:08.129935 2026] [security2:error] [pid 2848847:tid 2848847] [client 149.86.159.18:51130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmDDE8F1mwS9lSdW977gAAABs"]
[Thu Jul 30 11:23:08.130211 2026] [security2:error] [pid 2848847:tid 2848847] [client 149.86.159.18:51130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmDDE8F1mwS9lSdW977gAAABs"]
[Thu Jul 30 11:23:08.912025 2026] [ssl:error] [pid 2884602:tid 2884602] (70014)End of file found: [client 216.73.216.199:24235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:09.406139 2026] [ssl:error] [pid 2865085:tid 2865085] (EAI 2)Name or service not known: [client 144.76.19.72:32220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:09.406180 2026] [ssl:error] [pid 2865085:tid 2865085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:09.459140 2026] [ssl:error] [pid 2872891:tid 2872891] (EAI 2)Name or service not known: [client 144.76.19.72:32230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:09.459166 2026] [ssl:error] [pid 2872891:tid 2872891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:09.796587 2026] [security2:error] [pid 2880697:tid 2880697] [client 114.119.142.135:58217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wpcontent/uploads/2020/02/2017_07_04_free_SAL_resource_-_The_character_strikes_back_Part_1.pdf"] [unique_id "amsmDUfKsF_rbvGPcZbQWQAAAAc"], referer: https://ingleton-pri.n-yorks.sch.uk/classes/remote-learning-mat/
[Thu Jul 30 11:23:10.722624 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:51347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:11.248096 2026] [security2:error] [pid 2878521:tid 2878521] [client 41.56.195.240:49425] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmD7GPVrMtYFiFh_cMXAAAAAk"]
[Thu Jul 30 11:23:11.248152 2026] [security2:error] [pid 2878521:tid 2878521] [client 41.56.195.240:49425] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmD7GPVrMtYFiFh_cMXAAAAAk"]
[Thu Jul 30 11:23:11.248420 2026] [security2:error] [pid 2878521:tid 2878521] [client 41.56.195.240:49425] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmD7GPVrMtYFiFh_cMXAAAAAk"]
[Thu Jul 30 11:23:11.620416 2026] [ssl:error] [pid 2884533:tid 2884533] (70014)End of file found: [client 216.73.216.199:2478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:12.566819 2026] [ssl:error] [pid 2883999:tid 2883999] (EAI 2)Name or service not known: [client 144.76.19.72:36118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:12.566848 2026] [ssl:error] [pid 2883999:tid 2883999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:12.660322 2026] [ssl:error] [pid 2868984:tid 2868984] (EAI 2)Name or service not known: [client 144.76.19.72:36134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:12.660345 2026] [ssl:error] [pid 2868984:tid 2868984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:14.236853 2026] [security2:error] [pid 2875766:tid 2875766] [client 14.184.2.80:43813] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmEgowDC-RzBAKTRO-wgAAACM"]
[Thu Jul 30 11:23:14.236915 2026] [security2:error] [pid 2875766:tid 2875766] [client 14.184.2.80:43813] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmEgowDC-RzBAKTRO-wgAAACM"]
[Thu Jul 30 11:23:14.237252 2026] [security2:error] [pid 2875766:tid 2875766] [client 14.184.2.80:43813] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmEgowDC-RzBAKTRO-wgAAACM"]
[Thu Jul 30 11:23:15.233422 2026] [ssl:error] [pid 2880697:tid 2880697] (70014)End of file found: [client 216.73.216.199:7478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:15.745933 2026] [ssl:error] [pid 2878521:tid 2878521] (EAI 2)Name or service not known: [client 144.76.19.72:36138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:15.745989 2026] [ssl:error] [pid 2878521:tid 2878521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:15.800962 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:36140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:15.800997 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:16.040496 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:8284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:16.949165 2026] [security2:error] [pid 2881766:tid 2881766] [client 216.73.216.199:59562] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-dummy/tuned.conf"] [unique_id "amsmFGGdUIvgvj6qMey8nQAAABI"]
[Thu Jul 30 11:23:16.949480 2026] [security2:error] [pid 2881766:tid 2881766] [client 216.73.216.199:59562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-dummy/tuned.conf"] [unique_id "amsmFGGdUIvgvj6qMey8nQAAABI"]
[Thu Jul 30 11:23:16.949714 2026] [security2:error] [pid 2881766:tid 2881766] [client 216.73.216.199:59562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-dummy/tuned.conf"] [unique_id "amsmFGGdUIvgvj6qMey8nQAAABI"]
[Thu Jul 30 11:23:17.646648 2026] [ssl:error] [pid 2881766:tid 2881766] (70014)End of file found: [client 216.73.216.199:59562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:18.720644 2026] [lsapi:warn] [pid 2841465:tid 2841465] [client 35.197.232.17:55704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:23:18.720690 2026] [lsapi:warn] [pid 2841465:tid 2841465] [client 35.197.232.17:55704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:23:18.856360 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:36150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:18.856393 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:18.911306 2026] [ssl:error] [pid 2884601:tid 2884601] (EAI 2)Name or service not known: [client 144.76.19.72:36160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:18.911354 2026] [ssl:error] [pid 2884601:tid 2884601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:18.926319 2026] [security2:error] [pid 2881678:tid 2881678] [client 43.130.139.177:48682] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.nigelmassey.com"] [uri "/"] [unique_id "amsmFukX8OCsDsZuMzjNHQAAABA"]
[Thu Jul 30 11:23:21.566117 2026] [ssl:error] [pid 2881678:tid 2881678] (70014)End of file found: [client 216.73.216.199:36873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:21.965164 2026] [ssl:error] [pid 2883903:tid 2883903] (EAI 2)Name or service not known: [client 144.76.19.72:35274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:21.965200 2026] [ssl:error] [pid 2883903:tid 2883903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:22.019720 2026] [ssl:error] [pid 2876786:tid 2876786] (EAI 2)Name or service not known: [client 144.76.19.72:35284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:22.019749 2026] [ssl:error] [pid 2876786:tid 2876786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:22.059240 2026] [ssl:error] [pid 2884533:tid 2884533] (70014)End of file found: [client 216.73.216.199:46043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:22.509820 2026] [security2:error] [pid 2876786:tid 2876786] [client 114.119.142.20:48409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/district-assembly-2016"] [unique_id "amsmGuL-r7WTzn6BPdmcuQAAACc"], referer: https://www.erskinenazarene.co.uk/spring-baptisms
[Thu Jul 30 11:23:23.972345 2026] [security2:error] [pid 2881766:tid 2881766] [client 114.119.142.20:48411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/district-assembly-2016"] [unique_id "amsmG2GdUIvgvj6qMey8oAAAABI"], referer: https://www.erskinenazarene.co.uk/spring-baptisms
[Thu Jul 30 11:23:25.449619 2026] [ssl:error] [pid 2880405:tid 2880405] (EAI 2)Name or service not known: [client 144.76.19.72:35292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:25.449673 2026] [ssl:error] [pid 2880405:tid 2880405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:25.467155 2026] [ssl:error] [pid 2865085:tid 2865085] (70014)End of file found: [client 216.73.216.199:8562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:25.508882 2026] [ssl:error] [pid 2883999:tid 2883999] (EAI 2)Name or service not known: [client 144.76.19.72:35306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:25.508913 2026] [ssl:error] [pid 2883999:tid 2883999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:25.963324 2026] [security2:error] [pid 2880405:tid 2880405] [client 43.130.78.203:48478] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amsmHdpiPR3wTpXBPMzh6gAAAAM"]
[Thu Jul 30 11:23:26.869980 2026] [ssl:error] [pid 2876995:tid 2876995] (70014)End of file found: [client 216.73.216.199:36499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:27.509925 2026] [security2:error] [pid 2880697:tid 2880697] [client 85.208.96.211:36354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/boyfriend-pushes-girlfriend-off-cliff-and-dies"] [unique_id "amsmH0fKsF_rbvGPcZbQXgAAAAc"]
[Thu Jul 30 11:23:28.181247 2026] [ssl:error] [pid 2881766:tid 2881766] (70014)End of file found: [client 216.73.216.199:9021] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:28.568020 2026] [ssl:error] [pid 2848847:tid 2848847] (EAI 2)Name or service not known: [client 144.76.19.72:35320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:28.568047 2026] [ssl:error] [pid 2848847:tid 2848847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:28.622282 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:35328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:28.622308 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:30.774658 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:38305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:31.679696 2026] [ssl:error] [pid 2877508:tid 2877508] (EAI 2)Name or service not known: [client 144.76.19.72:18986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:31.679749 2026] [ssl:error] [pid 2877508:tid 2877508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:31.737458 2026] [ssl:error] [pid 2883292:tid 2883292] (EAI 2)Name or service not known: [client 144.76.19.72:18996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:31.737498 2026] [ssl:error] [pid 2883292:tid 2883292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:32.283981 2026] [ssl:error] [pid 2881104:tid 2881104] (70014)End of file found: [client 216.73.216.199:30039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:32.388035 2026] [core:error] [pid 2878692:tid 2878692] [client 66.249.66.169:36994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:32.388079 2026] [core:error] [pid 2878692:tid 2878692] [client 66.249.66.169:36994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:32.388546 2026] [core:error] [pid 2872819:tid 2872819] [client 66.249.66.169:56802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:32.388566 2026] [core:error] [pid 2872819:tid 2872819] [client 66.249.66.169:56802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:34.199375 2026] [ssl:error] [pid 2876995:tid 2876995] (70014)End of file found: [client 216.73.216.199:60670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:34.792516 2026] [ssl:error] [pid 2876786:tid 2876786] (EAI 2)Name or service not known: [client 144.76.19.72:19008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:34.792554 2026] [ssl:error] [pid 2876786:tid 2876786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:34.845626 2026] [ssl:error] [pid 2884533:tid 2884533] (EAI 2)Name or service not known: [client 144.76.19.72:19018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:34.845665 2026] [ssl:error] [pid 2884533:tid 2884533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:35.883323 2026] [cgi:error] [pid 2873919:tid 2873919] [client 20.104.22.47:24683] AH02812: stderr from /home/chemgalproj/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:23:37.388511 2026] [core:error] [pid 2865085:tid 2865085] [client 173.252.87.42:57088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:37.388554 2026] [core:error] [pid 2865085:tid 2865085] [client 173.252.87.42:57088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:37.898045 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:19028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:37.898093 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:37.954298 2026] [ssl:error] [pid 2880698:tid 2880698] (EAI 2)Name or service not known: [client 144.76.19.72:19034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:37.954337 2026] [ssl:error] [pid 2880698:tid 2880698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:38.413219 2026] [ssl:error] [pid 2883292:tid 2883292] (70014)End of file found: [client 216.73.216.199:29444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:39.325274 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 52.167.144.172:11624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:23:39.326347 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 52.167.144.172:11624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:23:40.220169 2026] [ssl:error] [pid 2873920:tid 2873920] (70014)End of file found: [client 216.73.216.199:55016] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:41.231636 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:54014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:41.231669 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:41.378792 2026] [ssl:error] [pid 2886410:tid 2886410] (EAI 2)Name or service not known: [client 144.76.19.72:54018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:41.378835 2026] [ssl:error] [pid 2886410:tid 2886410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:42.851241 2026] [security2:error] [pid 2841465:tid 2841465] [client 216.73.216.199:56448] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/swedish/errmsg.sys"] [unique_id "amsmLu9rrQTqKCLE2vOtSgAAABg"]
[Thu Jul 30 11:23:42.851562 2026] [security2:error] [pid 2841465:tid 2841465] [client 216.73.216.199:56448] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/swedish/errmsg.sys"] [unique_id "amsmLu9rrQTqKCLE2vOtSgAAABg"]
[Thu Jul 30 11:23:42.851812 2026] [security2:error] [pid 2841465:tid 2841465] [client 216.73.216.199:56448] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/swedish/errmsg.sys"] [unique_id "amsmLu9rrQTqKCLE2vOtSgAAABg"]
[Thu Jul 30 11:23:43.754828 2026] [ssl:error] [pid 2841465:tid 2841465] (70014)End of file found: [client 216.73.216.199:56448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:44.283594 2026] [security2:error] [pid 2886476:tid 2886476] [client 43.156.228.27:60714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsmMETyP8rtOxuo7E2xsgAAABQ"]
[Thu Jul 30 11:23:44.285695 2026] [authz_core:error] [pid 2886476:tid 2886476] [client 43.156.228.27:60714] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:23:44.288401 2026] [authz_core:error] [pid 2886476:tid 2886476] [client 43.156.228.27:60714] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:23:44.436567 2026] [ssl:error] [pid 2854524:tid 2854524] (EAI 2)Name or service not known: [client 144.76.19.72:54034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:44.436605 2026] [ssl:error] [pid 2854524:tid 2854524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:44.487903 2026] [ssl:error] [pid 2849863:tid 2849863] (EAI 2)Name or service not known: [client 144.76.19.72:54050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:44.487930 2026] [ssl:error] [pid 2849863:tid 2849863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:44.734487 2026] [security2:error] [pid 2881104:tid 2881104] [client 185.191.171.4:44680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8258.45.html"] [unique_id "amsmMLDYjde-Q5FpeCtgegAAAAo"]
[Thu Jul 30 11:23:46.764143 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:24521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:47.269081 2026] [core:error] [pid 2880698:tid 2880698] (13)Permission denied: [client 216.73.216.199:14055] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/devwebsitehub.com.db
[Thu Jul 30 11:23:47.562781 2026] [ssl:error] [pid 2886516:tid 2886516] (EAI 2)Name or service not known: [client 144.76.19.72:54064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:47.562830 2026] [ssl:error] [pid 2886516:tid 2886516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:47.620104 2026] [ssl:error] [pid 2886517:tid 2886517] (EAI 2)Name or service not known: [client 144.76.19.72:54078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:47.620147 2026] [ssl:error] [pid 2886517:tid 2886517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:48.037140 2026] [security2:error] [pid 2848847:tid 2848847] [client 43.162.114.69:53312] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.com"] [uri "/"] [unique_id "amsmNDE8F1mwS9lSdW97-gAAABs"]
[Thu Jul 30 11:23:48.967259 2026] [core:error] [pid 2886410:tid 2886410] [client 66.249.66.168:51384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:48.967294 2026] [core:error] [pid 2886410:tid 2886410] [client 66.249.66.168:51384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:23:49.111380 2026] [security2:error] [pid 2872819:tid 2872819] [client 43.162.114.69:36950] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsmNU9eRJiDDynuq3fnWgAAACU"], referer: http://spampmusic.com
[Thu Jul 30 11:23:49.803736 2026] [ssl:error] [pid 2886443:tid 2886443] (70014)End of file found: [client 216.73.216.199:6898] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:50.457922 2026] [authz_core:error] [pid 2841465:tid 2841465] [client 66.249.66.34:64332] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:23:50.460606 2026] [authz_core:error] [pid 2841465:tid 2841465] [client 66.249.66.34:64332] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:23:50.676551 2026] [ssl:error] [pid 2886410:tid 2886410] (EAI 2)Name or service not known: [client 144.76.19.72:20064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:50.676582 2026] [ssl:error] [pid 2886410:tid 2886410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:50.731271 2026] [ssl:error] [pid 2873919:tid 2873919] (EAI 2)Name or service not known: [client 144.76.19.72:20068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:50.731322 2026] [ssl:error] [pid 2873919:tid 2873919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:53.787493 2026] [ssl:error] [pid 2886512:tid 2886512] (EAI 2)Name or service not known: [client 144.76.19.72:20070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:53.787553 2026] [ssl:error] [pid 2886512:tid 2886512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:53.841990 2026] [ssl:error] [pid 2878692:tid 2878692] (EAI 2)Name or service not known: [client 144.76.19.72:20076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:53.842035 2026] [ssl:error] [pid 2878692:tid 2878692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:54.438922 2026] [core:error] [pid 2886517:tid 2886517] (13)Permission denied: [client 216.73.216.199:64973] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty16/subsystem/ttyS2/uartclk
[Thu Jul 30 11:23:55.643090 2026] [ssl:error] [pid 2886517:tid 2886517] (70014)End of file found: [client 216.73.216.199:64973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:23:56.240461 2026] [core:error] [pid 2886515:tid 2886515] (13)Permission denied: [client 216.73.216.199:8714] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty40/subsystem/ttyS1/close_delay
[Thu Jul 30 11:23:56.894764 2026] [ssl:error] [pid 2884601:tid 2884601] (EAI 2)Name or service not known: [client 144.76.19.72:20086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:56.894794 2026] [ssl:error] [pid 2884601:tid 2884601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:56.949382 2026] [ssl:error] [pid 2886914:tid 2886914] (EAI 2)Name or service not known: [client 144.76.19.72:20098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:23:56.949426 2026] [ssl:error] [pid 2886914:tid 2886914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:23:59.253816 2026] [core:error] [pid 2878632:tid 2878632] (13)Permission denied: [client 216.73.216.199:51448] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty32/subsystem/ttyS1/close_delay
[Thu Jul 30 11:24:00.008709 2026] [ssl:error] [pid 2884602:tid 2884602] (EAI 2)Name or service not known: [client 144.76.19.72:63864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:00.008753 2026] [ssl:error] [pid 2884602:tid 2884602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:00.062195 2026] [ssl:error] [pid 2886479:tid 2886479] (EAI 2)Name or service not known: [client 144.76.19.72:63874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:00.062232 2026] [ssl:error] [pid 2886479:tid 2886479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:01.068850 2026] [core:error] [pid 2878632:tid 2878632] (13)Permission denied: [client 216.73.216.199:51448] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS2/uartclk
[Thu Jul 30 11:24:02.162826 2026] [security2:error] [pid 2878521:tid 2878521] [client 110.249.202.83:48426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/robots.txt"] [unique_id "amsmQrGPVrMtYFiFh_cMeAAAAAk"]
[Thu Jul 30 11:24:03.119175 2026] [ssl:error] [pid 2886914:tid 2886914] (EAI 2)Name or service not known: [client 144.76.19.72:63884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:03.119221 2026] [ssl:error] [pid 2886914:tid 2886914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:03.177318 2026] [ssl:error] [pid 2884601:tid 2884601] (EAI 2)Name or service not known: [client 144.76.19.72:63892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:03.177361 2026] [ssl:error] [pid 2884601:tid 2884601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:03.778712 2026] [core:error] [pid 2886515:tid 2886515] (13)Permission denied: [client 216.73.216.199:8714] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty43/subsystem/ttyS2/uartclk
[Thu Jul 30 11:24:04.079347 2026] [ssl:error] [pid 2886515:tid 2886515] (70014)End of file found: [client 216.73.216.199:8714] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:04.380312 2026] [ssl:error] [pid 2878632:tid 2878632] (70014)End of file found: [client 216.73.216.199:51448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:04.881158 2026] [ssl:error] [pid 2883999:tid 2883999] (70014)End of file found: [client 216.73.216.199:53027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:06.231481 2026] [ssl:error] [pid 2886512:tid 2886512] (EAI 2)Name or service not known: [client 144.76.19.72:63902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:06.231530 2026] [ssl:error] [pid 2886512:tid 2886512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:06.283303 2026] [ssl:error] [pid 2887038:tid 2887038] (EAI 2)Name or service not known: [client 144.76.19.72:63916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:06.283344 2026] [ssl:error] [pid 2887038:tid 2887038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:08.051982 2026] [security2:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clientseodata.com"] [uri "/"] [unique_id "amsmSNGIGQJzY8li5yCy9AAAABk"]
[Thu Jul 30 11:24:08.053811 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 11:24:08.053930 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 11:24:08.054116 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 11:24:08.054310 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 11:24:08.054382 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 11:24:08.054560 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 11:24:08.054742 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 11:24:08.054826 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 11:24:08.055001 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 11:24:08.055145 2026] [authz_core:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 11:24:08.055216 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 11:24:08.055284 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 11:24:08.055457 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 11:24:08.055633 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 11:24:08.055702 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 11:24:08.055876 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 11:24:08.056048 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 11:24:08.056132 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 11:24:08.056300 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 11:24:08.057209 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 11:24:08.057280 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 11:24:08.057446 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 11:24:08.057645 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 11:24:08.057716 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 11:24:08.057886 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 11:24:08.058441 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 11:24:08.058514 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 11:24:08.058702 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 11:24:08.058877 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 11:24:08.058946 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 11:24:08.059128 2026] [access_compat:error] [pid 2884533:tid 2884533] [client 43.130.3.122:43806] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 11:24:09.364365 2026] [ssl:error] [pid 2886479:tid 2886479] (EAI 2)Name or service not known: [client 144.76.19.72:63932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:09.364410 2026] [ssl:error] [pid 2886479:tid 2886479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:09.423599 2026] [ssl:error] [pid 2865085:tid 2865085] (EAI 2)Name or service not known: [client 144.76.19.72:63940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:09.423629 2026] [ssl:error] [pid 2865085:tid 2865085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:09.560019 2026] [authz_core:error] [pid 2884602:tid 2884602] [client 66.249.66.35:64410] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:24:09.562687 2026] [authz_core:error] [pid 2884602:tid 2884602] [client 66.249.66.35:64410] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:24:09.604095 2026] [ssl:error] [pid 2884533:tid 2884533] (70014)End of file found: [client 216.73.216.199:19724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:09.803474 2026] [ssl:error] [pid 2876995:tid 2876995] (70014)End of file found: [client 216.73.216.199:53942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:09.894029 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 20.206.204.219:55866] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 11:24:11.007525 2026] [ssl:error] [pid 2886479:tid 2886479] (70014)End of file found: [client 216.73.216.199:12742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:11.114662 2026] [access_compat:error] [pid 2876786:tid 2876786] [client 191.232.199.39:52533] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.php
[Thu Jul 30 11:24:12.515864 2026] [ssl:error] [pid 2880405:tid 2880405] (EAI 2)Name or service not known: [client 144.76.19.72:59282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:12.515919 2026] [ssl:error] [pid 2880405:tid 2880405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:12.573307 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:59298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:12.573349 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:14.838015 2026] [security2:error] [pid 2850150:tid 2850150] [client 94.154.43.179:44744] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.impactscotland.erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmToQdD8pS_eJWvDX4SwAAAFw"]
[Thu Jul 30 11:24:14.838180 2026] [security2:error] [pid 2850150:tid 2850150] [client 94.154.43.179:44744] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.impactscotland.erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmToQdD8pS_eJWvDX4SwAAAFw"]
[Thu Jul 30 11:24:14.838744 2026] [core:error] [pid 2850150:tid 2850150] [client 94.154.43.179:44744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:24:14.838863 2026] [security2:error] [pid 2850150:tid 2850150] [client 94.154.43.179:44744] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.impactscotland.erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amsmToQdD8pS_eJWvDX4SwAAAFw"]
[Thu Jul 30 11:24:15.333580 2026] [ssl:error] [pid 2881470:tid 2881470] (70014)End of file found: [client 216.73.216.199:5943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:15.543815 2026] [security2:error] [pid 2878693:tid 2878693] [client 94.154.43.178:23418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmTzK0p2ewuDqyA_jRuwAAADc"]
[Thu Jul 30 11:24:15.543962 2026] [security2:error] [pid 2878693:tid 2878693] [client 94.154.43.178:23418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmTzK0p2ewuDqyA_jRuwAAADc"]
[Thu Jul 30 11:24:15.631349 2026] [ssl:error] [pid 2873920:tid 2873920] (EAI 2)Name or service not known: [client 144.76.19.72:59320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:15.631409 2026] [ssl:error] [pid 2873920:tid 2873920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:15.682822 2026] [security2:error] [pid 2856066:tid 2856066] [client 51.68.107.157:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.papier.com.mt"] [uri "/robots.txt"] [unique_id "amsmT2651E8Pg5Swp9M7RQAAAA0"]
[Thu Jul 30 11:24:15.687441 2026] [ssl:error] [pid 2881104:tid 2881104] (EAI 2)Name or service not known: [client 144.76.19.72:59334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:15.687479 2026] [ssl:error] [pid 2881104:tid 2881104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:15.892988 2026] [security2:error] [pid 2884602:tid 2884602] [client 94.154.43.187:23694] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.erskinefusion.erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmT93UIySvtiGG2vFbXgAAACI"]
[Thu Jul 30 11:24:15.893187 2026] [security2:error] [pid 2884602:tid 2884602] [client 94.154.43.187:23694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.erskinefusion.erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmT93UIySvtiGG2vFbXgAAACI"]
[Thu Jul 30 11:24:15.893705 2026] [core:error] [pid 2884602:tid 2884602] [client 94.154.43.187:23694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:24:15.893838 2026] [security2:error] [pid 2884602:tid 2884602] [client 94.154.43.187:23694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.erskinefusion.erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amsmT93UIySvtiGG2vFbXgAAACI"]
[Thu Jul 30 11:24:15.921564 2026] [security2:error] [pid 2878693:tid 2878693] [client 94.154.43.178:23418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amsmTzK0p2ewuDqyA_jRuwAAADc"]
[Thu Jul 30 11:24:17.339450 2026] [core:error] [pid 2886477:tid 2886477] (13)Permission denied: [client 216.73.216.199:37961] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS3/line
[Thu Jul 30 11:24:18.588004 2026] [security2:error] [pid 2883999:tid 2883999] [client 109.236.40.29:54282] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmUlXf6sbc4i97EWPpFAAAABU"]
[Thu Jul 30 11:24:18.588072 2026] [security2:error] [pid 2883999:tid 2883999] [client 109.236.40.29:54282] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmUlXf6sbc4i97EWPpFAAAABU"]
[Thu Jul 30 11:24:18.588342 2026] [security2:error] [pid 2883999:tid 2883999] [client 109.236.40.29:54282] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmUlXf6sbc4i97EWPpFAAAABU"]
[Thu Jul 30 11:24:18.769626 2026] [ssl:error] [pid 2880698:tid 2880698] (EAI 2)Name or service not known: [client 144.76.19.72:59338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:18.769700 2026] [ssl:error] [pid 2880698:tid 2880698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:18.824383 2026] [ssl:error] [pid 2876995:tid 2876995] (EAI 2)Name or service not known: [client 144.76.19.72:59342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:18.824438 2026] [ssl:error] [pid 2876995:tid 2876995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:18.857642 2026] [ssl:error] [pid 2886477:tid 2886477] (70014)End of file found: [client 216.73.216.199:37961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:20.687712 2026] [ssl:error] [pid 2884602:tid 2884602] (70014)End of file found: [client 216.73.216.199:42174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:20.989735 2026] [ssl:error] [pid 2856066:tid 2856066] (70014)End of file found: [client 216.73.216.199:46142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:21.038718 2026] [security2:error] [pid 2878632:tid 2878632] [client 186.6.136.223:40090] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmVc8wxQtzbacztZxwmQAAABw"]
[Thu Jul 30 11:24:21.038767 2026] [security2:error] [pid 2878632:tid 2878632] [client 186.6.136.223:40090] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmVc8wxQtzbacztZxwmQAAABw"]
[Thu Jul 30 11:24:21.039021 2026] [security2:error] [pid 2878632:tid 2878632] [client 186.6.136.223:40090] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmVc8wxQtzbacztZxwmQAAABw"]
[Thu Jul 30 11:24:21.473804 2026] [ssl:error] [pid 2878632:tid 2878632] (70014)End of file found: [client 216.73.216.199:3810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:21.884974 2026] [ssl:error] [pid 2887783:tid 2887783] (EAI 2)Name or service not known: [client 144.76.19.72:57556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:21.885013 2026] [ssl:error] [pid 2887783:tid 2887783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:21.940984 2026] [ssl:error] [pid 2881470:tid 2881470] (EAI 2)Name or service not known: [client 144.76.19.72:57562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:21.941019 2026] [ssl:error] [pid 2881470:tid 2881470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:23.861100 2026] [security2:error] [pid 2883292:tid 2883292] [client 189.203.29.147:12559] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmV46r8Zvrl9hfp7nLbgAAAAU"]
[Thu Jul 30 11:24:23.861156 2026] [security2:error] [pid 2883292:tid 2883292] [client 189.203.29.147:12559] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmV46r8Zvrl9hfp7nLbgAAAAU"]
[Thu Jul 30 11:24:23.861401 2026] [security2:error] [pid 2883292:tid 2883292] [client 189.203.29.147:12559] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmV46r8Zvrl9hfp7nLbgAAAAU"]
[Thu Jul 30 11:24:24.993443 2026] [ssl:error] [pid 2874909:tid 2874909] (EAI 2)Name or service not known: [client 144.76.19.72:57566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:24.993492 2026] [ssl:error] [pid 2874909:tid 2874909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:25.045464 2026] [ssl:error] [pid 2883999:tid 2883999] (EAI 2)Name or service not known: [client 144.76.19.72:57582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:25.045513 2026] [ssl:error] [pid 2883999:tid 2883999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:26.114676 2026] [ssl:error] [pid 2884533:tid 2884533] (70014)End of file found: [client 216.73.216.199:51904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:27.318792 2026] [ssl:error] [pid 2883999:tid 2883999] (70014)End of file found: [client 216.73.216.199:22964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:27.435005 2026] [security2:error] [pid 2886478:tid 2886478] [client 198.244.183.25:15824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11480.0.html"] [unique_id "amsmW9kqGelbLDMa3CcbhAAAAB4"]
[Thu Jul 30 11:24:27.924913 2026] [security2:error] [pid 2886514:tid 2886514] [client 85.208.96.202:29196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/who-was-jack-benny's-daughter"] [unique_id "amsmW6fWkd_0GJk8mCcDIAAAACs"]
[Thu Jul 30 11:24:27.925868 2026] [ssl:error] [pid 2875766:tid 2875766] (70014)End of file found: [client 216.73.216.199:47393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:28.107011 2026] [ssl:error] [pid 2886443:tid 2886443] (EAI 2)Name or service not known: [client 144.76.19.72:57592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:28.107051 2026] [ssl:error] [pid 2886443:tid 2886443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:28.165796 2026] [ssl:error] [pid 2886478:tid 2886478] (EAI 2)Name or service not known: [client 144.76.19.72:57606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:28.165854 2026] [ssl:error] [pid 2886478:tid 2886478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:30.979375 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:30.979489 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:31.203037 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:31.203156 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:31.224830 2026] [ssl:error] [pid 2886476:tid 2886476] (EAI 2)Name or service not known: [client 144.76.19.72:31048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:31.224870 2026] [ssl:error] [pid 2886476:tid 2886476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:31.282675 2026] [ssl:error] [pid 2886478:tid 2886478] (EAI 2)Name or service not known: [client 144.76.19.72:31060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:31.282727 2026] [ssl:error] [pid 2886478:tid 2886478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:31.434939 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:31.435052 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:31.652191 2026] [security2:error] [pid 2886443:tid 2886443] [client 94.154.43.229:16848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.jubileehousescotland.erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmXzcc5mYwvgvChQs3DAAAAAQ"]
[Thu Jul 30 11:24:31.652387 2026] [security2:error] [pid 2886443:tid 2886443] [client 94.154.43.229:16848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jubileehousescotland.erskinenazarene.co.uk"] [uri "/.env"] [unique_id "amsmXzcc5mYwvgvChQs3DAAAAAQ"]
[Thu Jul 30 11:24:31.666138 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:31.666252 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:31.899144 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:31.899264 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:32.318316 2026] [security2:error] [pid 2886443:tid 2886443] [client 94.154.43.229:16848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.jubileehousescotland.erskinenazarene.co.uk"] [uri "/index.php"] [unique_id "amsmXzcc5mYwvgvChQs3DAAAAAQ"]
[Thu Jul 30 11:24:34.245996 2026] [ssl:error] [pid 2887864:tid 2887864] (70014)End of file found: [client 216.73.216.199:31614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:34.338593 2026] [ssl:error] [pid 2880624:tid 2880624] (EAI 2)Name or service not known: [client 144.76.19.72:31074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:34.338628 2026] [ssl:error] [pid 2880624:tid 2880624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:34.394517 2026] [ssl:error] [pid 2881470:tid 2881470] (EAI 2)Name or service not known: [client 144.76.19.72:31088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:34.394577 2026] [ssl:error] [pid 2881470:tid 2881470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:34.821429 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:34.821563 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:35.243406 2026] [authz_core:error] [pid 2876995:tid 2876995] [client 20.206.204.219:60327] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 11:24:35.750780 2026] [ssl:error] [pid 2874909:tid 2874909] (70014)End of file found: [client 216.73.216.199:54754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:36.353284 2026] [ssl:error] [pid 2883999:tid 2883999] (70014)End of file found: [client 216.73.216.199:8956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:37.452199 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:31098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:37.452232 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:37.510408 2026] [ssl:error] [pid 2886478:tid 2886478] (EAI 2)Name or service not known: [client 144.76.19.72:31112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:37.510455 2026] [ssl:error] [pid 2886478:tid 2886478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:37.516370 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:37.516504 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:37.767168 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:37.767280 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:37.983142 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:37.983255 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:38.204141 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:38.204252 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:38.457290 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:38.457414 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:38.688083 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:38.688234 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:38.923416 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:38.923544 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:39.243996 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:39.244127 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:39.969192 2026] [ssl:error] [pid 2878692:tid 2878692] (70014)End of file found: [client 216.73.216.199:8098] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:40.567555 2026] [ssl:error] [pid 2886478:tid 2886478] (EAI 2)Name or service not known: [client 144.76.19.72:35070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:40.567615 2026] [ssl:error] [pid 2886478:tid 2886478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:40.622923 2026] [ssl:error] [pid 2876647:tid 2876647] (EAI 2)Name or service not known: [client 144.76.19.72:35074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:40.622955 2026] [ssl:error] [pid 2876647:tid 2876647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:41.166730 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:41.166855 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:41.385655 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:41.385772 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:41.621295 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:41.621418 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:41.863147 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:41.863266 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:42.100652 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:42.100789 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:42.317467 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:42.317610 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:42.552426 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:42.552566 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:42.772033 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:42.772170 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:43.550231 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:43.550363 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:43.677772 2026] [ssl:error] [pid 2874909:tid 2874909] (EAI 2)Name or service not known: [client 144.76.19.72:35182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:43.677802 2026] [ssl:error] [pid 2874909:tid 2874909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:43.734181 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:35194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:43.734216 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:43.764550 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:43.764678 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:44.146429 2026] [security2:error] [pid 2886914:tid 2886914] [client 110.249.201.237:52570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spamp.com"] [uri "/"] [unique_id "amsmbP3VGwrrmCPHZbVt6gAAAA8"]
[Thu Jul 30 11:24:44.997124 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:44.997254 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:45.106983 2026] [ssl:error] [pid 2878693:tid 2878693] (70014)End of file found: [client 216.73.216.199:52146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:45.223086 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:45.223202 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:45.409320 2026] [ssl:error] [pid 2883999:tid 2883999] (70014)End of file found: [client 216.73.216.199:36717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:45.441120 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:45.441233 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:45.671213 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:45.671324 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:45.900467 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:45.900588 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:45.911493 2026] [ssl:error] [pid 2875766:tid 2875766] (70014)End of file found: [client 216.73.216.199:22616] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:46.088774 2026] [security2:error] [pid 2876786:tid 2876786] [client 114.119.144.31:24609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565478000/cat_ids~14,19/request_format~html"] [unique_id "amsmbuL-r7WTzn6BPdmdLwAAACc"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1565478000/cat_ids~14,19/request_format~html
[Thu Jul 30 11:24:46.162765 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:46.162881 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:46.248500 2026] [authz_core:error] [pid 2886914:tid 2886914] [client 66.249.66.33:61836] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:24:46.251166 2026] [authz_core:error] [pid 2886914:tid 2886914] [client 66.249.66.33:61836] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:24:46.770434 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:46.770556 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:46.791488 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:35304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:46.791514 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:46.848019 2026] [ssl:error] [pid 2881470:tid 2881470] (EAI 2)Name or service not known: [client 144.76.19.72:35326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:46.848057 2026] [ssl:error] [pid 2881470:tid 2881470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:47.033639 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:47.033766 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:47.264721 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:47.264833 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:47.416614 2026] [security2:error] [pid 2881470:tid 2881470] [client 114.119.144.31:24623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565478000/cat_ids~14,19/request_format~html"] [unique_id "amsmb1FjnXSOb9uV3N4Z6AAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1565478000/cat_ids~14,19/request_format~html
[Thu Jul 30 11:24:47.886813 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:47.886924 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:49.020682 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:49.020810 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:49.243793 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:49.243915 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:49.734827 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:49.734938 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:49.930292 2026] [ssl:error] [pid 2881470:tid 2881470] (EAI 2)Name or service not known: [client 144.76.19.72:27230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:49.930330 2026] [ssl:error] [pid 2881470:tid 2881470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:49.985566 2026] [ssl:error] [pid 2886444:tid 2886444] (EAI 2)Name or service not known: [client 144.76.19.72:27242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:49.985618 2026] [ssl:error] [pid 2886444:tid 2886444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:50.252254 2026] [security2:error] [pid 2878692:tid 2878692] [client 216.73.216.199:11761] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/exim.conf"] [unique_id "amsmckFTeiEIQTrHZMABqwAAADY"]
[Thu Jul 30 11:24:50.252505 2026] [security2:error] [pid 2878692:tid 2878692] [client 216.73.216.199:11761] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/exim.conf"] [unique_id "amsmckFTeiEIQTrHZMABqwAAADY"]
[Thu Jul 30 11:24:50.252733 2026] [security2:error] [pid 2878692:tid 2878692] [client 216.73.216.199:11761] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/exim.conf"] [unique_id "amsmckFTeiEIQTrHZMABqwAAADY"]
[Thu Jul 30 11:24:50.280970 2026] [security2:error] [pid 2886479:tid 2886479] [client 20.171.55.167:9558] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "akoptimize.gatkabfs.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsmcqCEbdY5jWBiEj9r8QAAAB8"]
[Thu Jul 30 11:24:50.281240 2026] [security2:error] [pid 2886479:tid 2886479] [client 20.171.55.167:9558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "akoptimize.gatkabfs.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsmcqCEbdY5jWBiEj9r8QAAAB8"]
[Thu Jul 30 11:24:50.281553 2026] [security2:error] [pid 2886479:tid 2886479] [client 20.171.55.167:9558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "akoptimize.gatkabfs.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsmcqCEbdY5jWBiEj9r8QAAAB8"]
[Thu Jul 30 11:24:50.654021 2026] [ssl:error] [pid 2878692:tid 2878692] (70014)End of file found: [client 216.73.216.199:11761] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:51.093954 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:51.094089 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:51.332216 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:51.332334 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:51.352282 2026] [core:error] [pid 2876995:tid 2876995] (13)Permission denied: [client 216.73.216.199:10746] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/irq
[Thu Jul 30 11:24:51.570002 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:51.570131 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:51.767851 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 66.249.66.33:54722] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:24:51.770586 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 66.249.66.33:54722] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:24:51.837647 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:51.837768 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:51.858314 2026] [ssl:error] [pid 2876995:tid 2876995] (70014)End of file found: [client 216.73.216.199:10746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:52.090429 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:52.090570 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:52.934591 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:52.934710 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:53.040925 2026] [ssl:error] [pid 2884533:tid 2884533] (EAI 2)Name or service not known: [client 144.76.19.72:27244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:53.040969 2026] [ssl:error] [pid 2884533:tid 2884533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:53.057890 2026] [ssl:error] [pid 2877508:tid 2877508] (70014)End of file found: [client 216.73.216.199:50107] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:53.095313 2026] [ssl:error] [pid 2878693:tid 2878693] (EAI 2)Name or service not known: [client 144.76.19.72:27252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:53.095354 2026] [ssl:error] [pid 2878693:tid 2878693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:53.153252 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:53.153364 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:53.383210 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:53.383325 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:53.668554 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:53.668670 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:53.945000 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:53.945126 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:54.183718 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:54.183844 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:54.429153 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:54.429271 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:54.707950 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:54.708076 2026] [cgi:error] [pid 2856066:tid 2856066] [client 20.220.15.170:33606] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:55.620678 2026] [security2:error] [pid 2886914:tid 2886914] [client 185.191.171.9:48726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1746.0/prev_next,next.html"] [unique_id "amsmd_3VGwrrmCPHZbVt7QAAAA8"]
[Thu Jul 30 11:24:55.974655 2026] [ssl:error] [pid 2888284:tid 2888284] (70014)End of file found: [client 216.73.216.199:61643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:56.159487 2026] [ssl:error] [pid 2886443:tid 2886443] (EAI 2)Name or service not known: [client 144.76.19.72:27268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:56.159519 2026] [ssl:error] [pid 2886443:tid 2886443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:56.529790 2026] [ssl:error] [pid 2889341:tid 2889341] (EAI 2)Name or service not known: [client 144.76.19.72:27270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:24:56.529835 2026] [ssl:error] [pid 2889341:tid 2889341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:24:56.872411 2026] [lsapi:warn] [pid 2878692:tid 2878692] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:24:58.031507 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:58.031652 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:58.249589 2026] [core:error] [pid 2877508:tid 2877508] (13)Permission denied: [client 216.73.216.199:47268] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory222/subsystem/uevent
[Thu Jul 30 11:24:58.265613 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:58.265726 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:24:58.493234 2026] [ssl:error] [pid 2877508:tid 2877508] (70014)End of file found: [client 216.73.216.199:47268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:24:58.496021 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:24:58.496139 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:00.395631 2026] [ssl:error] [pid 2889468:tid 2889468] (EAI 2)Name or service not known: [client 144.76.19.72:18912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:00.395677 2026] [ssl:error] [pid 2889468:tid 2889468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:00.450940 2026] [ssl:error] [pid 2884602:tid 2884602] (EAI 2)Name or service not known: [client 144.76.19.72:18918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:00.450979 2026] [ssl:error] [pid 2884602:tid 2884602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:00.982648 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:00.982764 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:01.206751 2026] [ssl:error] [pid 2875766:tid 2875766] (70014)End of file found: [client 216.73.216.199:8019] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:01.225421 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:01.225550 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:01.479173 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:01.479306 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:01.825165 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:01.825291 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:02.154653 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:02.154791 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:02.399836 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:02.399962 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:02.668682 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:02.668801 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:03.434852 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:03.434988 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:03.507967 2026] [ssl:error] [pid 2889500:tid 2889500] (EAI 2)Name or service not known: [client 144.76.19.72:18934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:03.508009 2026] [ssl:error] [pid 2889500:tid 2889500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:03.561447 2026] [ssl:error] [pid 2889503:tid 2889503] (EAI 2)Name or service not known: [client 144.76.19.72:18940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:03.561486 2026] [ssl:error] [pid 2889503:tid 2889503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:03.651930 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:03.652042 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:03.882757 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:03.882884 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:04.107840 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:04.107957 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:04.329967 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:04.330095 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:04.586465 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:04.586592 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:04.828437 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:04.828556 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:04.992613 2026] [ssl:error] [pid 2886478:tid 2886478] (70014)End of file found: [client 216.73.216.199:44786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:05.062981 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:05.063106 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:05.294571 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:05.294682 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:05.479842 2026] [core:error] [pid 2889422:tid 2889422] (13)Permission denied: [client 216.73.216.199:4630] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:25:05.540401 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:05.540515 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:06.187358 2026] [security2:error] [pid 2886444:tid 2886444] [client 18.215.24.66:18946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/38332DE97FF2F6F3AE21E039311CF58E.txt"] [unique_id "amsmgpL2Q74K2CCBamsngQAAABA"]
[Thu Jul 30 11:25:06.447630 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:06.447739 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:06.615909 2026] [ssl:error] [pid 2889471:tid 2889471] (EAI 2)Name or service not known: [client 144.76.19.72:18952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:06.615938 2026] [ssl:error] [pid 2889471:tid 2889471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:06.668178 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:18956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:06.668215 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:06.673105 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:06.673212 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:06.884447 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:06.884566 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:07.118809 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:07.118936 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:07.197382 2026] [lsapi:warn] [pid 2880405:tid 2880405] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:25:07.350954 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:07.351089 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:07.399652 2026] [core:error] [pid 2889422:tid 2889422] (13)Permission denied: [client 216.73.216.199:4630] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS1/close_delay
[Thu Jul 30 11:25:08.004153 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:08.004290 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:08.237530 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:08.237651 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:08.540466 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:08.540589 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:08.605044 2026] [ssl:error] [pid 2889422:tid 2889422] (70014)End of file found: [client 216.73.216.199:4630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:08.883894 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:08.884012 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:08.905483 2026] [core:error] [pid 2889511:tid 2889511] (13)Permission denied: [client 216.73.216.199:29635] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci_express/drivers/dpc/bind
[Thu Jul 30 11:25:09.301268 2026] [security2:error] [pid 2880405:tid 2880405] [client 79.117.246.196:53350] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmhdpiPR3wTpXBPMziAwAAAAM"]
[Thu Jul 30 11:25:09.301319 2026] [security2:error] [pid 2880405:tid 2880405] [client 79.117.246.196:53350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmhdpiPR3wTpXBPMziAwAAAAM"]
[Thu Jul 30 11:25:09.301593 2026] [security2:error] [pid 2880405:tid 2880405] [client 79.117.246.196:53350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmhdpiPR3wTpXBPMziAwAAAAM"]
[Thu Jul 30 11:25:09.327547 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:09.327697 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:09.574489 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:09.574610 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:09.721167 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:50262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:09.721211 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:09.776567 2026] [ssl:error] [pid 2889505:tid 2889505] (EAI 2)Name or service not known: [client 144.76.19.72:50274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:09.776597 2026] [ssl:error] [pid 2889505:tid 2889505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:09.794019 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:09.794169 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:09.809101 2026] [core:error] [pid 2889511:tid 2889511] (13)Permission denied: [client 216.73.216.199:29635] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/wmsfirearmstraining.com.db
[Thu Jul 30 11:25:10.110792 2026] [core:error] [pid 2889511:tid 2889511] (13)Permission denied: [client 216.73.216.199:29635] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS1/close_delay
[Thu Jul 30 11:25:10.188160 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:10.188274 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:10.405527 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:10.405653 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:10.411662 2026] [ssl:error] [pid 2889511:tid 2889511] (70014)End of file found: [client 216.73.216.199:29635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:10.852229 2026] [security2:error] [pid 2889506:tid 2889506] [client 201.152.10.87:36198] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmhoA-9fmiXql17sbfJQAAADw"]
[Thu Jul 30 11:25:10.852281 2026] [security2:error] [pid 2889506:tid 2889506] [client 201.152.10.87:36198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmhoA-9fmiXql17sbfJQAAADw"]
[Thu Jul 30 11:25:10.852579 2026] [security2:error] [pid 2889506:tid 2889506] [client 201.152.10.87:36198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmhoA-9fmiXql17sbfJQAAADw"]
[Thu Jul 30 11:25:10.925489 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:10.925608 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:11.291682 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:11.291797 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:11.545267 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:11.545381 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:11.766368 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:11.766483 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:12.009207 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:12.009330 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:12.230787 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:12.230916 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:12.445198 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:12.445322 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:12.676106 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:12.676246 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:12.735167 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 66.249.66.35:63147] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:25:12.737995 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 66.249.66.35:63147] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:25:12.834299 2026] [ssl:error] [pid 2889521:tid 2889521] (EAI 2)Name or service not known: [client 144.76.19.72:50282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:12.834331 2026] [ssl:error] [pid 2889521:tid 2889521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:12.888886 2026] [ssl:error] [pid 2889510:tid 2889510] (EAI 2)Name or service not known: [client 144.76.19.72:50294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:12.888916 2026] [ssl:error] [pid 2889510:tid 2889510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:12.895324 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:12.895446 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:14.026352 2026] [core:error] [pid 2881470:tid 2881470] (13)Permission denied: [client 216.73.216.199:12118] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/highclereracing.com.db
[Thu Jul 30 11:25:14.319162 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:14.319295 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:14.561633 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:14.561743 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:14.784482 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:14.784607 2026] [cgi:error] [pid 2878632:tid 2878632] [client 20.220.15.170:33656] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:15.231156 2026] [ssl:error] [pid 2881470:tid 2881470] (70014)End of file found: [client 216.73.216.199:12118] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:15.942692 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:50302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:15.942725 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:15.996495 2026] [ssl:error] [pid 2888284:tid 2888284] (EAI 2)Name or service not known: [client 144.76.19.72:50304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:15.996530 2026] [ssl:error] [pid 2888284:tid 2888284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:16.146403 2026] [security2:error] [pid 2886477:tid 2886477] [client 43.161.224.78:33632] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "amsmjCD1KzKFLkSfyeKJOwAAABc"]
[Thu Jul 30 11:25:16.575111 2026] [security2:error] [pid 2889520:tid 2889520] [client 36.83.210.168:48184] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmjOCUW6PXEUJL-b4-jQAAAEU"]
[Thu Jul 30 11:25:16.575163 2026] [security2:error] [pid 2889520:tid 2889520] [client 36.83.210.168:48184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmjOCUW6PXEUJL-b4-jQAAAEU"]
[Thu Jul 30 11:25:16.575415 2026] [security2:error] [pid 2889520:tid 2889520] [client 36.83.210.168:48184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmjOCUW6PXEUJL-b4-jQAAAEU"]
[Thu Jul 30 11:25:17.325007 2026] [security2:error] [pid 2889508:tid 2889508] [client 43.161.224.78:34218] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsmjf6raKwDcBBt8sUofwAAAD4"], referer: http://www.all4s.co.uk
[Thu Jul 30 11:25:17.804890 2026] [lsapi:warn] [pid 2889341:tid 2889341] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:25:18.515221 2026] [security2:error] [pid 2850150:tid 2850150] [client 43.130.100.35:50520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclereracing.com"] [uri "/"] [unique_id "amsmjoQdD8pS_eJWvDX4WwAAAFw"]
[Thu Jul 30 11:25:18.543044 2026] [core:error] [pid 2889515:tid 2889515] (13)Permission denied: [client 216.73.216.199:31203] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup12/device/subsystem/drivers_probe
[Thu Jul 30 11:25:19.066666 2026] [ssl:error] [pid 2889467:tid 2889467] (EAI 2)Name or service not known: [client 144.76.19.72:50314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:19.066711 2026] [ssl:error] [pid 2889467:tid 2889467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:19.122957 2026] [ssl:error] [pid 2889500:tid 2889500] (EAI 2)Name or service not known: [client 144.76.19.72:50322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:19.123005 2026] [ssl:error] [pid 2889500:tid 2889500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:20.594947 2026] [security2:error] [pid 2889467:tid 2889467] [client 43.166.142.76:40072] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "curvmed.com"] [uri "/"] [unique_id "amsmkEV6J6VQzKQdofY8QwAAACw"]
[Thu Jul 30 11:25:21.861115 2026] [core:error] [pid 2889511:tid 2889511] (13)Permission denied: [client 216.73.216.199:43998] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/adamdix.com.db
[Thu Jul 30 11:25:22.177909 2026] [ssl:error] [pid 2889520:tid 2889520] (EAI 2)Name or service not known: [client 144.76.19.72:61484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:22.177947 2026] [ssl:error] [pid 2889520:tid 2889520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:22.234474 2026] [ssl:error] [pid 2888285:tid 2888285] (EAI 2)Name or service not known: [client 144.76.19.72:61496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:22.234512 2026] [ssl:error] [pid 2888285:tid 2888285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:25.172818 2026] [ssl:error] [pid 2889511:tid 2889511] (70014)End of file found: [client 216.73.216.199:43998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:25.327520 2026] [ssl:error] [pid 2886516:tid 2886516] (EAI 2)Name or service not known: [client 144.76.19.72:61500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:25.327563 2026] [ssl:error] [pid 2886516:tid 2886516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:25.382248 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:61516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:25.382282 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:28.382686 2026] [security2:error] [pid 2889471:tid 2889471] [client 85.208.96.201:37140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/david-muir-head-injury"] [unique_id "amsmmEzs-r-AuW1hPnx4GAAAADI"]
[Thu Jul 30 11:25:28.446017 2026] [lsapi:warn] [pid 2876647:tid 2876647] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:25:28.474241 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:61520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:28.474271 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:28.560465 2026] [ssl:error] [pid 2889505:tid 2889505] (EAI 2)Name or service not known: [client 144.76.19.72:61528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:28.560498 2026] [ssl:error] [pid 2889505:tid 2889505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:30.891640 2026] [core:error] [pid 2889515:tid 2889515] (13)Permission denied: [client 216.73.216.199:31203] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty28/subsystem/ttyS1/close_delay
[Thu Jul 30 11:25:31.211828 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.191.171.4:46228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5401.0.html"] [unique_id "amsmmwowDC-RzBAKTRO-4gAAACM"]
[Thu Jul 30 11:25:31.619531 2026] [ssl:error] [pid 2889425:tid 2889425] (EAI 2)Name or service not known: [client 144.76.19.72:28098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:31.619587 2026] [ssl:error] [pid 2889425:tid 2889425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:31.675746 2026] [ssl:error] [pid 2889504:tid 2889504] (EAI 2)Name or service not known: [client 144.76.19.72:28106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:31.675776 2026] [ssl:error] [pid 2889504:tid 2889504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:32.122348 2026] [core:error] [pid 2878692:tid 2878692] [client 66.249.66.169:50055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:32.122372 2026] [core:error] [pid 2878692:tid 2878692] [client 66.249.66.169:50055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:32.132308 2026] [core:error] [pid 2889471:tid 2889471] [client 66.249.66.168:56955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:32.132354 2026] [core:error] [pid 2889471:tid 2889471] [client 66.249.66.168:56955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:32.604412 2026] [ssl:error] [pid 2889515:tid 2889515] (70014)End of file found: [client 216.73.216.199:31203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:34.728462 2026] [ssl:error] [pid 2878692:tid 2878692] (EAI 2)Name or service not known: [client 144.76.19.72:28116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:34.728497 2026] [ssl:error] [pid 2878692:tid 2878692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:34.783581 2026] [ssl:error] [pid 2889471:tid 2889471] (EAI 2)Name or service not known: [client 144.76.19.72:28130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:34.783607 2026] [ssl:error] [pid 2889471:tid 2889471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:37.482996 2026] [authz_core:error] [pid 2889471:tid 2889471] [client 66.249.66.33:42481] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:25:37.485661 2026] [authz_core:error] [pid 2889471:tid 2889471] [client 66.249.66.33:42481] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:25:37.731190 2026] [ssl:error] [pid 2881470:tid 2881470] (70014)End of file found: [client 216.73.216.199:46656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:37.841188 2026] [ssl:error] [pid 2889422:tid 2889422] (EAI 2)Name or service not known: [client 144.76.19.72:28136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:37.841222 2026] [ssl:error] [pid 2889422:tid 2889422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:37.898647 2026] [ssl:error] [pid 2886914:tid 2886914] (EAI 2)Name or service not known: [client 144.76.19.72:28146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:37.898677 2026] [ssl:error] [pid 2886914:tid 2886914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:38.031965 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:35871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:38.511005 2026] [core:error] [pid 2889465:tid 2889465] (13)Permission denied: [client 216.73.216.199:42957] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/subsystem/ttyS1/flags
[Thu Jul 30 11:25:38.931059 2026] [ssl:error] [pid 2889465:tid 2889465] (70014)End of file found: [client 216.73.216.199:42957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:39.667580 2026] [security2:error] [pid 2886914:tid 2886914] [client 43.153.62.161:42382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.akoptimize.co.uk"] [uri "/"] [unique_id "amsmo_3VGwrrmCPHZbVuQwAAAA8"]
[Thu Jul 30 11:25:39.748522 2026] [lsapi:warn] [pid 2889370:tid 2889370] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:25:40.442939 2026] [core:error] [pid 2878632:tid 2878632] [client 66.249.64.170:40651] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:40.442971 2026] [core:error] [pid 2878632:tid 2878632] [client 66.249.64.170:40651] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:40.795485 2026] [core:error] [pid 2886914:tid 2886914] [client 45.227.253.15:39600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:40.795518 2026] [core:error] [pid 2886914:tid 2886914] [client 45.227.253.15:39600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:40.952773 2026] [ssl:error] [pid 2889509:tid 2889509] (EAI 2)Name or service not known: [client 144.76.19.72:51732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:40.952812 2026] [ssl:error] [pid 2889509:tid 2889509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:41.008094 2026] [ssl:error] [pid 2889511:tid 2889511] (EAI 2)Name or service not known: [client 144.76.19.72:51734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:41.008156 2026] [ssl:error] [pid 2889511:tid 2889511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:43.037799 2026] [ssl:error] [pid 2886914:tid 2886914] (70014)End of file found: [client 216.73.216.199:17153] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:44.063019 2026] [ssl:error] [pid 2880624:tid 2880624] (EAI 2)Name or service not known: [client 144.76.19.72:51746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:44.063054 2026] [ssl:error] [pid 2880624:tid 2880624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:44.117362 2026] [ssl:error] [pid 2889341:tid 2889341] (EAI 2)Name or service not known: [client 144.76.19.72:51758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:44.117427 2026] [ssl:error] [pid 2889341:tid 2889341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:44.412362 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.bak"] [unique_id "amsmqAowDC-RzBAKTRO-7AAAACM"]
[Thu Jul 30 11:25:44.412923 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.bak"] [unique_id "amsmqAowDC-RzBAKTRO-7AAAACM"]
[Thu Jul 30 11:25:44.413256 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.bak"] [unique_id "amsmqAowDC-RzBAKTRO-7AAAACM"]
[Thu Jul 30 11:25:44.431166 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.old"] [unique_id "amsmqAowDC-RzBAKTRO-7QAAACM"]
[Thu Jul 30 11:25:44.431522 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.old"] [unique_id "amsmqAowDC-RzBAKTRO-7QAAACM"]
[Thu Jul 30 11:25:44.431732 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.old"] [unique_id "amsmqAowDC-RzBAKTRO-7QAAACM"]
[Thu Jul 30 11:25:44.522381 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.ini"] [unique_id "amsmqAowDC-RzBAKTRO-8gAAACM"]
[Thu Jul 30 11:25:44.522709 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.ini"] [unique_id "amsmqAowDC-RzBAKTRO-8gAAACM"]
[Thu Jul 30 11:25:44.522874 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.ini"] [unique_id "amsmqAowDC-RzBAKTRO-8gAAACM"]
[Thu Jul 30 11:25:44.631508 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.backup"] [unique_id "amsmqAowDC-RzBAKTRO--AAAACM"]
[Thu Jul 30 11:25:44.631889 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.backup"] [unique_id "amsmqAowDC-RzBAKTRO--AAAACM"]
[Thu Jul 30 11:25:44.632109 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.aws/credentials.backup"] [unique_id "amsmqAowDC-RzBAKTRO--AAAACM"]
[Thu Jul 30 11:25:44.723502 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.aws/config.bak"] [unique_id "amsmqAowDC-RzBAKTRO-_QAAACM"]
[Thu Jul 30 11:25:44.723885 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.aws/config.bak"] [unique_id "amsmqAowDC-RzBAKTRO-_QAAACM"]
[Thu Jul 30 11:25:44.724087 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.aws/config.bak"] [unique_id "amsmqAowDC-RzBAKTRO-_QAAACM"]
[Thu Jul 30 11:25:44.741750 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.aws/config.old"] [unique_id "amsmqAowDC-RzBAKTRO-_gAAACM"]
[Thu Jul 30 11:25:44.742115 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.aws/config.old"] [unique_id "amsmqAowDC-RzBAKTRO-_gAAACM"]
[Thu Jul 30 11:25:44.742296 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.aws/config.old"] [unique_id "amsmqAowDC-RzBAKTRO-_gAAACM"]
[Thu Jul 30 11:25:44.778697 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.aws/config.ini"] [unique_id "amsmqAowDC-RzBAKTRO_AAAAACM"]
[Thu Jul 30 11:25:44.779054 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.aws/config.ini"] [unique_id "amsmqAowDC-RzBAKTRO_AAAAACM"]
[Thu Jul 30 11:25:44.779261 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.aws/config.ini"] [unique_id "amsmqAowDC-RzBAKTRO_AAAAACM"]
[Thu Jul 30 11:25:44.952996 2026] [core:error] [pid 2886518:tid 2886518] (13)Permission denied: [client 216.73.216.199:25832] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/drivers/ac/bind
[Thu Jul 30 11:25:44.997915 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/boto.cfg"] [unique_id "amsmqAowDC-RzBAKTRO_DAAAACM"]
[Thu Jul 30 11:25:44.998291 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/boto.cfg"] [unique_id "amsmqAowDC-RzBAKTRO_DAAAACM"]
[Thu Jul 30 11:25:44.998503 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/boto.cfg"] [unique_id "amsmqAowDC-RzBAKTRO_DAAAACM"]
[Thu Jul 30 11:25:45.090322 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.bak"] [unique_id "amsmqQowDC-RzBAKTRO_EQAAACM"]
[Thu Jul 30 11:25:45.090507 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.bak"] [unique_id "amsmqQowDC-RzBAKTRO_EQAAACM"]
[Thu Jul 30 11:25:45.090705 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.bak"] [unique_id "amsmqQowDC-RzBAKTRO_EQAAACM"]
[Thu Jul 30 11:25:45.108638 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.old"] [unique_id "amsmqQowDC-RzBAKTRO_EgAAACM"]
[Thu Jul 30 11:25:45.108794 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.old"] [unique_id "amsmqQowDC-RzBAKTRO_EgAAACM"]
[Thu Jul 30 11:25:45.108976 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.old"] [unique_id "amsmqQowDC-RzBAKTRO_EgAAACM"]
[Thu Jul 30 11:25:45.126838 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.txt"] [unique_id "amsmqQowDC-RzBAKTRO_EwAAACM"]
[Thu Jul 30 11:25:45.126993 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.txt"] [unique_id "amsmqQowDC-RzBAKTRO_EwAAACM"]
[Thu Jul 30 11:25:45.127181 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.txt"] [unique_id "amsmqQowDC-RzBAKTRO_EwAAACM"]
[Thu Jul 30 11:25:45.145024 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.production"] [unique_id "amsmqQowDC-RzBAKTRO_FAAAACM"]
[Thu Jul 30 11:25:45.145198 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.production"] [unique_id "amsmqQowDC-RzBAKTRO_FAAAACM"]
[Thu Jul 30 11:25:45.145377 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.production"] [unique_id "amsmqQowDC-RzBAKTRO_FAAAACM"]
[Thu Jul 30 11:25:45.163285 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.local"] [unique_id "amsmqQowDC-RzBAKTRO_FQAAACM"]
[Thu Jul 30 11:25:45.163460 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.local"] [unique_id "amsmqQowDC-RzBAKTRO_FQAAACM"]
[Thu Jul 30 11:25:45.163654 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.local"] [unique_id "amsmqQowDC-RzBAKTRO_FQAAACM"]
[Thu Jul 30 11:25:45.364565 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/aws.key"] [unique_id "amsmqQowDC-RzBAKTRO_IAAAACM"]
[Thu Jul 30 11:25:45.364902 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws.key"] [unique_id "amsmqQowDC-RzBAKTRO_IAAAACM"]
[Thu Jul 30 11:25:45.365103 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws.key"] [unique_id "amsmqQowDC-RzBAKTRO_IAAAACM"]
[Thu Jul 30 11:25:45.603529 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.aws"] [unique_id "amsmqQowDC-RzBAKTRO_LQAAACM"]
[Thu Jul 30 11:25:45.603729 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.aws"] [unique_id "amsmqQowDC-RzBAKTRO_LQAAACM"]
[Thu Jul 30 11:25:45.603930 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.aws"] [unique_id "amsmqQowDC-RzBAKTRO_LQAAACM"]
[Thu Jul 30 11:25:45.621820 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.s3"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.s3"] [unique_id "amsmqQowDC-RzBAKTRO_LgAAACM"]
[Thu Jul 30 11:25:45.621980 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.s3"] [unique_id "amsmqQowDC-RzBAKTRO_LgAAACM"]
[Thu Jul 30 11:25:45.622171 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.s3"] [unique_id "amsmqQowDC-RzBAKTRO_LgAAACM"]
[Thu Jul 30 11:25:45.639901 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ses"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.ses"] [unique_id "amsmqQowDC-RzBAKTRO_LwAAACM"]
[Thu Jul 30 11:25:45.640053 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.ses"] [unique_id "amsmqQowDC-RzBAKTRO_LwAAACM"]
[Thu Jul 30 11:25:45.640236 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.ses"] [unique_id "amsmqQowDC-RzBAKTRO_LwAAACM"]
[Thu Jul 30 11:25:45.657819 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.lambda"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.lambda"] [unique_id "amsmqQowDC-RzBAKTRO_MAAAACM"]
[Thu Jul 30 11:25:45.657959 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.lambda"] [unique_id "amsmqQowDC-RzBAKTRO_MAAAACM"]
[Thu Jul 30 11:25:45.658127 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.lambda"] [unique_id "amsmqQowDC-RzBAKTRO_MAAAACM"]
[Thu Jul 30 11:25:45.749525 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NQAAACM"]
[Thu Jul 30 11:25:45.749727 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NQAAACM"]
[Thu Jul 30 11:25:45.749942 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NQAAACM"]
[Thu Jul 30 11:25:45.767965 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NgAAACM"]
[Thu Jul 30 11:25:45.768170 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NgAAACM"]
[Thu Jul 30 11:25:45.768383 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NgAAACM"]
[Thu Jul 30 11:25:45.786923 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/lambda/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NwAAACM"]
[Thu Jul 30 11:25:45.787221 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/lambda/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NwAAACM"]
[Thu Jul 30 11:25:45.787503 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/lambda/.env"] [unique_id "amsmqQowDC-RzBAKTRO_NwAAACM"]
[Thu Jul 30 11:25:45.805429 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ec2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ec2/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OAAAACM"]
[Thu Jul 30 11:25:45.805636 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ec2/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OAAAACM"]
[Thu Jul 30 11:25:45.805844 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ec2/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OAAAACM"]
[Thu Jul 30 11:25:45.823691 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /iam/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/iam/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OQAAACM"]
[Thu Jul 30 11:25:45.823886 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/iam/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OQAAACM"]
[Thu Jul 30 11:25:45.824103 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/iam/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OQAAACM"]
[Thu Jul 30 11:25:45.841935 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rds/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/rds/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OgAAACM"]
[Thu Jul 30 11:25:45.842130 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/rds/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OgAAACM"]
[Thu Jul 30 11:25:45.842339 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/rds/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OgAAACM"]
[Thu Jul 30 11:25:45.856730 2026] [ssl:error] [pid 2886518:tid 2886518] (70014)End of file found: [client 216.73.216.199:25832] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:45.860150 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /eks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/eks/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OwAAACM"]
[Thu Jul 30 11:25:45.860334 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/eks/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OwAAACM"]
[Thu Jul 30 11:25:45.860527 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/eks/.env"] [unique_id "amsmqQowDC-RzBAKTRO_OwAAACM"]
[Thu Jul 30 11:25:45.878596 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ecs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ecs/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PAAAACM"]
[Thu Jul 30 11:25:45.878847 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ecs/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PAAAACM"]
[Thu Jul 30 11:25:45.879141 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ecs/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PAAAACM"]
[Thu Jul 30 11:25:45.896961 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ecr/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ecr/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PQAAACM"]
[Thu Jul 30 11:25:45.897172 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ecr/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PQAAACM"]
[Thu Jul 30 11:25:45.897394 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ecr/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PQAAACM"]
[Thu Jul 30 11:25:45.915316 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cognito/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/cognito/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PgAAACM"]
[Thu Jul 30 11:25:45.915497 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/cognito/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PgAAACM"]
[Thu Jul 30 11:25:45.915702 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/cognito/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PgAAACM"]
[Thu Jul 30 11:25:45.933737 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloudfront/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/cloudfront/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PwAAACM"]
[Thu Jul 30 11:25:45.933931 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/cloudfront/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PwAAACM"]
[Thu Jul 30 11:25:45.934147 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/cloudfront/.env"] [unique_id "amsmqQowDC-RzBAKTRO_PwAAACM"]
[Thu Jul 30 11:25:45.952060 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dynamodb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/dynamodb/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QAAAACM"]
[Thu Jul 30 11:25:45.952266 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/dynamodb/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QAAAACM"]
[Thu Jul 30 11:25:45.952470 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/dynamodb/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QAAAACM"]
[Thu Jul 30 11:25:45.970162 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sqs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sqs/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QQAAACM"]
[Thu Jul 30 11:25:45.970323 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sqs/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QQAAACM"]
[Thu Jul 30 11:25:45.970527 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sqs/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QQAAACM"]
[Thu Jul 30 11:25:45.988349 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sns/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sns/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QgAAACM"]
[Thu Jul 30 11:25:45.988519 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sns/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QgAAACM"]
[Thu Jul 30 11:25:45.988721 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sns/.env"] [unique_id "amsmqQowDC-RzBAKTRO_QgAAACM"]
[Thu Jul 30 11:25:46.006616 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /amplify/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/amplify/.env"] [unique_id "amsmqgowDC-RzBAKTRO_QwAAACM"]
[Thu Jul 30 11:25:46.006801 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/amplify/.env"] [unique_id "amsmqgowDC-RzBAKTRO_QwAAACM"]
[Thu Jul 30 11:25:46.007010 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/amplify/.env"] [unique_id "amsmqgowDC-RzBAKTRO_QwAAACM"]
[Thu Jul 30 11:25:46.024777 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /route53/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/route53/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RAAAACM"]
[Thu Jul 30 11:25:46.024958 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/route53/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RAAAACM"]
[Thu Jul 30 11:25:46.025180 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/route53/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RAAAACM"]
[Thu Jul 30 11:25:46.042947 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /elasticbeanstalk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/elasticbeanstalk/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RQAAACM"]
[Thu Jul 30 11:25:46.043143 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/elasticbeanstalk/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RQAAACM"]
[Thu Jul 30 11:25:46.043345 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/elasticbeanstalk/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RQAAACM"]
[Thu Jul 30 11:25:46.061031 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /amazonses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/amazonses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RgAAACM"]
[Thu Jul 30 11:25:46.061215 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/amazonses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RgAAACM"]
[Thu Jul 30 11:25:46.061385 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/amazonses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RgAAACM"]
[Thu Jul 30 11:25:46.079043 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /amazon-ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/amazon-ses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RwAAACM"]
[Thu Jul 30 11:25:46.079213 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/amazon-ses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RwAAACM"]
[Thu Jul 30 11:25:46.079400 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/amazon-ses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_RwAAACM"]
[Thu Jul 30 11:25:46.097266 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws-ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws-ses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SAAAACM"]
[Thu Jul 30 11:25:46.097443 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws-ses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SAAAACM"]
[Thu Jul 30 11:25:46.097639 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws-ses/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SAAAACM"]
[Thu Jul 30 11:25:46.115549 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws-lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws-lambda/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SQAAACM"]
[Thu Jul 30 11:25:46.115725 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws-lambda/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SQAAACM"]
[Thu Jul 30 11:25:46.115915 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws-lambda/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SQAAACM"]
[Thu Jul 30 11:25:46.133763 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws-api/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SgAAACM"]
[Thu Jul 30 11:25:46.133937 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws-api/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SgAAACM"]
[Thu Jul 30 11:25:46.134140 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws-api/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SgAAACM"]
[Thu Jul 30 11:25:46.151930 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/cloud/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SwAAACM"]
[Thu Jul 30 11:25:46.152113 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/cloud/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SwAAACM"]
[Thu Jul 30 11:25:46.152292 2026] [security2:error] [pid 2875766:tid 2875766] [client 185.177.72.29:40798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/cloud/.env"] [unique_id "amsmqgowDC-RzBAKTRO_SwAAACM"]
[Thu Jul 30 11:25:46.186103 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloudformation/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/cloudformation/.env"] [unique_id "amsmquW0nIxYI833CaoWjwAAABY"]
[Thu Jul 30 11:25:46.186290 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/cloudformation/.env"] [unique_id "amsmquW0nIxYI833CaoWjwAAABY"]
[Thu Jul 30 11:25:46.186504 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/cloudformation/.env"] [unique_id "amsmquW0nIxYI833CaoWjwAAABY"]
[Thu Jul 30 11:25:46.287003 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/s3cfg.ini"] [unique_id "amsmquW0nIxYI833CaoWlQAAABY"]
[Thu Jul 30 11:25:46.287309 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3cfg.ini"] [unique_id "amsmquW0nIxYI833CaoWlQAAABY"]
[Thu Jul 30 11:25:46.287473 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3cfg.ini"] [unique_id "amsmquW0nIxYI833CaoWlQAAABY"]
[Thu Jul 30 11:25:46.387763 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/rclone.conf"] [unique_id "amsmquW0nIxYI833CaoWmwAAABY"]
[Thu Jul 30 11:25:46.388103 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/rclone.conf"] [unique_id "amsmquW0nIxYI833CaoWmwAAABY"]
[Thu Jul 30 11:25:46.388279 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/rclone.conf"] [unique_id "amsmquW0nIxYI833CaoWmwAAABY"]
[Thu Jul 30 11:25:46.405433 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.config/rclone/rclone.conf"] [unique_id "amsmquW0nIxYI833CaoWnAAAABY"]
[Thu Jul 30 11:25:46.405754 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.config/rclone/rclone.conf"] [unique_id "amsmquW0nIxYI833CaoWnAAAABY"]
[Thu Jul 30 11:25:46.405928 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.config/rclone/rclone.conf"] [unique_id "amsmquW0nIxYI833CaoWnAAAABY"]
[Thu Jul 30 11:25:46.673691 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/config/s3.ini"] [unique_id "amsmquW0nIxYI833CaoWrAAAABY"]
[Thu Jul 30 11:25:46.674006 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/config/s3.ini"] [unique_id "amsmquW0nIxYI833CaoWrAAAABY"]
[Thu Jul 30 11:25:46.674190 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/config/s3.ini"] [unique_id "amsmquW0nIxYI833CaoWrAAAABY"]
[Thu Jul 30 11:25:46.844006 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/config/aws.ini"] [unique_id "amsmquW0nIxYI833CaoWtgAAABY"]
[Thu Jul 30 11:25:46.844455 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/config/aws.ini"] [unique_id "amsmquW0nIxYI833CaoWtgAAABY"]
[Thu Jul 30 11:25:46.844672 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/config/aws.ini"] [unique_id "amsmquW0nIxYI833CaoWtgAAABY"]
[Thu Jul 30 11:25:47.170803 2026] [ssl:error] [pid 2877508:tid 2877508] (EAI 2)Name or service not known: [client 144.76.19.72:51770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:47.170844 2026] [ssl:error] [pid 2877508:tid 2877508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:47.253640 2026] [ssl:error] [pid 2883999:tid 2883999] (EAI 2)Name or service not known: [client 144.76.19.72:51774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:47.253683 2026] [ssl:error] [pid 2883999:tid 2883999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:47.793142 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.ebextensions/env.config"] [unique_id "amsmq-W0nIxYI833CaoW7QAAABY"]
[Thu Jul 30 11:25:47.793585 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.ebextensions/env.config"] [unique_id "amsmq-W0nIxYI833CaoW7QAAABY"]
[Thu Jul 30 11:25:47.793811 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.ebextensions/env.config"] [unique_id "amsmq-W0nIxYI833CaoW7QAAABY"]
[Thu Jul 30 11:25:47.810390 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.ebextensions/00env.config"] [unique_id "amsmq-W0nIxYI833CaoW7gAAABY"]
[Thu Jul 30 11:25:47.810753 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.ebextensions/00env.config"] [unique_id "amsmq-W0nIxYI833CaoW7gAAABY"]
[Thu Jul 30 11:25:47.810949 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.ebextensions/00env.config"] [unique_id "amsmq-W0nIxYI833CaoW7gAAABY"]
[Thu Jul 30 11:25:47.827545 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/.ebextensions/options.config"] [unique_id "amsmq-W0nIxYI833CaoW7wAAABY"]
[Thu Jul 30 11:25:47.827925 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.ebextensions/options.config"] [unique_id "amsmq-W0nIxYI833CaoW7wAAABY"]
[Thu Jul 30 11:25:47.828161 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.ebextensions/options.config"] [unique_id "amsmq-W0nIxYI833CaoW7wAAABY"]
[Thu Jul 30 11:25:47.896178 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/ecs.config"] [unique_id "amsmq-W0nIxYI833CaoW8wAAABY"]
[Thu Jul 30 11:25:47.896595 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ecs.config"] [unique_id "amsmq-W0nIxYI833CaoW8wAAABY"]
[Thu Jul 30 11:25:47.896813 2026] [security2:error] [pid 2889341:tid 2889341] [client 185.177.72.29:40800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ecs.config"] [unique_id "amsmq-W0nIxYI833CaoW8wAAABY"]
[Thu Jul 30 11:25:47.929101 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/ecs/ecs.config"] [unique_id "amsmq4HrLpE0r1XnECS3oQAAAC0"]
[Thu Jul 30 11:25:47.929461 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ecs/ecs.config"] [unique_id "amsmq4HrLpE0r1XnECS3oQAAAC0"]
[Thu Jul 30 11:25:47.929705 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ecs/ecs.config"] [unique_id "amsmq4HrLpE0r1XnECS3oQAAAC0"]
[Thu Jul 30 11:25:48.211801 2026] [security2:error] [pid 2889515:tid 2889515] [client 47.128.99.115:38448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsmrAOKeV2W5rzcUjBkdgAAAEM"]
[Thu Jul 30 11:25:48.265372 2026] [ssl:error] [pid 2880697:tid 2880697] (70014)End of file found: [client 216.73.216.199:55574] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:48.574274 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.jpg"] [unique_id "amsmrIHrLpE0r1XnECS3xwAAAC0"]
[Thu Jul 30 11:25:48.574460 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.jpg"] [unique_id "amsmrIHrLpE0r1XnECS3xwAAAC0"]
[Thu Jul 30 11:25:48.574664 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.jpg"] [unique_id "amsmrIHrLpE0r1XnECS3xwAAAC0"]
[Thu Jul 30 11:25:48.742948 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.bak"] [unique_id "amsmrIHrLpE0r1XnECS30QAAAC0"]
[Thu Jul 30 11:25:48.743159 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.bak"] [unique_id "amsmrIHrLpE0r1XnECS30QAAAC0"]
[Thu Jul 30 11:25:48.743348 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.bak"] [unique_id "amsmrIHrLpE0r1XnECS30QAAAC0"]
[Thu Jul 30 11:25:48.759811 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.old"] [unique_id "amsmrIHrLpE0r1XnECS30gAAAC0"]
[Thu Jul 30 11:25:48.760001 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.old"] [unique_id "amsmrIHrLpE0r1XnECS30gAAAC0"]
[Thu Jul 30 11:25:48.760216 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.old"] [unique_id "amsmrIHrLpE0r1XnECS30gAAAC0"]
[Thu Jul 30 11:25:48.776764 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.save"] [unique_id "amsmrIHrLpE0r1XnECS30wAAAC0"]
[Thu Jul 30 11:25:48.776959 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.save"] [unique_id "amsmrIHrLpE0r1XnECS30wAAAC0"]
[Thu Jul 30 11:25:48.777175 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.save"] [unique_id "amsmrIHrLpE0r1XnECS30wAAAC0"]
[Thu Jul 30 11:25:48.793664 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.local"] [unique_id "amsmrIHrLpE0r1XnECS31AAAAC0"]
[Thu Jul 30 11:25:48.793840 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.local"] [unique_id "amsmrIHrLpE0r1XnECS31AAAAC0"]
[Thu Jul 30 11:25:48.794036 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.local"] [unique_id "amsmrIHrLpE0r1XnECS31AAAAC0"]
[Thu Jul 30 11:25:48.810627 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.production"] [unique_id "amsmrIHrLpE0r1XnECS31QAAAC0"]
[Thu Jul 30 11:25:48.810821 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.production"] [unique_id "amsmrIHrLpE0r1XnECS31QAAAC0"]
[Thu Jul 30 11:25:48.811011 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.production"] [unique_id "amsmrIHrLpE0r1XnECS31QAAAC0"]
[Thu Jul 30 11:25:48.827605 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.prod"] [unique_id "amsmrIHrLpE0r1XnECS31gAAAC0"]
[Thu Jul 30 11:25:48.827794 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.prod"] [unique_id "amsmrIHrLpE0r1XnECS31gAAAC0"]
[Thu Jul 30 11:25:48.827998 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.prod"] [unique_id "amsmrIHrLpE0r1XnECS31gAAAC0"]
[Thu Jul 30 11:25:48.844633 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.dev"] [unique_id "amsmrIHrLpE0r1XnECS31wAAAC0"]
[Thu Jul 30 11:25:48.844821 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.dev"] [unique_id "amsmrIHrLpE0r1XnECS31wAAAC0"]
[Thu Jul 30 11:25:48.845035 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.dev"] [unique_id "amsmrIHrLpE0r1XnECS31wAAAC0"]
[Thu Jul 30 11:25:48.861460 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.development"] [unique_id "amsmrIHrLpE0r1XnECS32AAAAC0"]
[Thu Jul 30 11:25:48.861647 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.development"] [unique_id "amsmrIHrLpE0r1XnECS32AAAAC0"]
[Thu Jul 30 11:25:48.861830 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.development"] [unique_id "amsmrIHrLpE0r1XnECS32AAAAC0"]
[Thu Jul 30 11:25:48.878217 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.staging"] [unique_id "amsmrIHrLpE0r1XnECS32QAAAC0"]
[Thu Jul 30 11:25:48.878393 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.staging"] [unique_id "amsmrIHrLpE0r1XnECS32QAAAC0"]
[Thu Jul 30 11:25:48.878601 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.staging"] [unique_id "amsmrIHrLpE0r1XnECS32QAAAC0"]
[Thu Jul 30 11:25:48.895020 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.test"] [unique_id "amsmrIHrLpE0r1XnECS32gAAAC0"]
[Thu Jul 30 11:25:48.895209 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.test"] [unique_id "amsmrIHrLpE0r1XnECS32gAAAC0"]
[Thu Jul 30 11:25:48.895395 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.test"] [unique_id "amsmrIHrLpE0r1XnECS32gAAAC0"]
[Thu Jul 30 11:25:48.911860 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.txt"] [unique_id "amsmrIHrLpE0r1XnECS32wAAAC0"]
[Thu Jul 30 11:25:48.912039 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.txt"] [unique_id "amsmrIHrLpE0r1XnECS32wAAAC0"]
[Thu Jul 30 11:25:48.912267 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.txt"] [unique_id "amsmrIHrLpE0r1XnECS32wAAAC0"]
[Thu Jul 30 11:25:48.928866 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.php"] [unique_id "amsmrIHrLpE0r1XnECS33AAAAC0"]
[Thu Jul 30 11:25:48.929053 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.php"] [unique_id "amsmrIHrLpE0r1XnECS33AAAAC0"]
[Thu Jul 30 11:25:48.929271 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.php"] [unique_id "amsmrIHrLpE0r1XnECS33AAAAC0"]
[Thu Jul 30 11:25:48.945876 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.json"] [unique_id "amsmrIHrLpE0r1XnECS33QAAAC0"]
[Thu Jul 30 11:25:48.946057 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.json"] [unique_id "amsmrIHrLpE0r1XnECS33QAAAC0"]
[Thu Jul 30 11:25:48.946274 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.json"] [unique_id "amsmrIHrLpE0r1XnECS33QAAAC0"]
[Thu Jul 30 11:25:48.962865 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid_email/.env"] [unique_id "amsmrIHrLpE0r1XnECS33gAAAC0"]
[Thu Jul 30 11:25:48.963044 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid_email/.env"] [unique_id "amsmrIHrLpE0r1XnECS33gAAAC0"]
[Thu Jul 30 11:25:48.963257 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid_email/.env"] [unique_id "amsmrIHrLpE0r1XnECS33gAAAC0"]
[Thu Jul 30 11:25:48.979767 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid_email/.env.bak"] [unique_id "amsmrIHrLpE0r1XnECS33wAAAC0"]
[Thu Jul 30 11:25:48.979940 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid_email/.env.bak"] [unique_id "amsmrIHrLpE0r1XnECS33wAAAC0"]
[Thu Jul 30 11:25:48.980154 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid_email/.env.bak"] [unique_id "amsmrIHrLpE0r1XnECS33wAAAC0"]
[Thu Jul 30 11:25:48.996607 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid-email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid-email/.env"] [unique_id "amsmrIHrLpE0r1XnECS34AAAAC0"]
[Thu Jul 30 11:25:48.996776 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid-email/.env"] [unique_id "amsmrIHrLpE0r1XnECS34AAAAC0"]
[Thu Jul 30 11:25:48.996963 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid-email/.env"] [unique_id "amsmrIHrLpE0r1XnECS34AAAAC0"]
[Thu Jul 30 11:25:49.013425 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid_mail/.env"] [unique_id "amsmrYHrLpE0r1XnECS34QAAAC0"]
[Thu Jul 30 11:25:49.013580 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid_mail/.env"] [unique_id "amsmrYHrLpE0r1XnECS34QAAAC0"]
[Thu Jul 30 11:25:49.013750 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid_mail/.env"] [unique_id "amsmrYHrLpE0r1XnECS34QAAAC0"]
[Thu Jul 30 11:25:49.030101 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgridmail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgridmail/.env"] [unique_id "amsmrYHrLpE0r1XnECS34gAAAC0"]
[Thu Jul 30 11:25:49.030276 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgridmail/.env"] [unique_id "amsmrYHrLpE0r1XnECS34gAAAC0"]
[Thu Jul 30 11:25:49.030451 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgridmail/.env"] [unique_id "amsmrYHrLpE0r1XnECS34gAAAC0"]
[Thu Jul 30 11:25:49.046948 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sg/.env"] [unique_id "amsmrYHrLpE0r1XnECS34wAAAC0"]
[Thu Jul 30 11:25:49.047148 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sg/.env"] [unique_id "amsmrYHrLpE0r1XnECS34wAAAC0"]
[Thu Jul 30 11:25:49.047341 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sg/.env"] [unique_id "amsmrYHrLpE0r1XnECS34wAAAC0"]
[Thu Jul 30 11:25:49.165782 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/sendgrid.ini"] [unique_id "amsmrYHrLpE0r1XnECS36gAAAC0"]
[Thu Jul 30 11:25:49.166155 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid.ini"] [unique_id "amsmrYHrLpE0r1XnECS36gAAAC0"]
[Thu Jul 30 11:25:49.166338 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid.ini"] [unique_id "amsmrYHrLpE0r1XnECS36gAAAC0"]
[Thu Jul 30 11:25:49.170702 2026] [ssl:error] [pid 2880698:tid 2880698] (70014)End of file found: [client 216.73.216.199:41566] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:49.182843 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/sendgrid.conf"] [unique_id "amsmrYHrLpE0r1XnECS36wAAAC0"]
[Thu Jul 30 11:25:49.183220 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid.conf"] [unique_id "amsmrYHrLpE0r1XnECS36wAAAC0"]
[Thu Jul 30 11:25:49.183451 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid.conf"] [unique_id "amsmrYHrLpE0r1XnECS36wAAAC0"]
[Thu Jul 30 11:25:49.301223 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/config/sendgrid.ini"] [unique_id "amsmrYHrLpE0r1XnECS38gAAAC0"]
[Thu Jul 30 11:25:49.301553 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/config/sendgrid.ini"] [unique_id "amsmrYHrLpE0r1XnECS38gAAAC0"]
[Thu Jul 30 11:25:49.301716 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/config/sendgrid.ini"] [unique_id "amsmrYHrLpE0r1XnECS38gAAAC0"]
[Thu Jul 30 11:25:49.367968 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/sendgrid.key"] [unique_id "amsmrYHrLpE0r1XnECS39gAAAC0"]
[Thu Jul 30 11:25:49.368334 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid.key"] [unique_id "amsmrYHrLpE0r1XnECS39gAAAC0"]
[Thu Jul 30 11:25:49.368505 2026] [security2:error] [pid 2886516:tid 2886516] [client 185.177.72.29:64402] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid.key"] [unique_id "amsmrYHrLpE0r1XnECS39gAAAC0"]
[Thu Jul 30 11:25:50.016269 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnZwAAAAk"]
[Thu Jul 30 11:25:50.016638 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnZwAAAAk"]
[Thu Jul 30 11:25:50.016832 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnZwAAAAk"]
[Thu Jul 30 11:25:50.034122 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/logs/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnaAAAAAk"]
[Thu Jul 30 11:25:50.034521 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/logs/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnaAAAAAk"]
[Thu Jul 30 11:25:50.034729 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/logs/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnaAAAAAk"]
[Thu Jul 30 11:25:50.052059 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/log/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnaQAAAAk"]
[Thu Jul 30 11:25:50.052455 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/log/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnaQAAAAk"]
[Thu Jul 30 11:25:50.052688 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/log/sendgrid.log"] [unique_id "amsmrmMoWIuOmfAt3NCnaQAAAAk"]
[Thu Jul 30 11:25:50.070429 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnagAAAAk"]
[Thu Jul 30 11:25:50.070668 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnagAAAAk"]
[Thu Jul 30 11:25:50.070902 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnagAAAAk"]
[Thu Jul 30 11:25:50.088541 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/SendGrid/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnawAAAAk"]
[Thu Jul 30 11:25:50.088761 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/SendGrid/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnawAAAAk"]
[Thu Jul 30 11:25:50.089000 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/SendGrid/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnawAAAAk"]
[Thu Jul 30 11:25:50.106644 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/SENDGRID/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnbAAAAAk"]
[Thu Jul 30 11:25:50.106854 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/SENDGRID/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnbAAAAAk"]
[Thu Jul 30 11:25:50.107077 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/SENDGRID/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnbAAAAAk"]
[Thu Jul 30 11:25:50.124839 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.ENV"] [unique_id "amsmrmMoWIuOmfAt3NCnbQAAAAk"]
[Thu Jul 30 11:25:50.125058 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.ENV"] [unique_id "amsmrmMoWIuOmfAt3NCnbQAAAAk"]
[Thu Jul 30 11:25:50.125287 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.ENV"] [unique_id "amsmrmMoWIuOmfAt3NCnbQAAAAk"]
[Thu Jul 30 11:25:50.142936 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.jpg"] [unique_id "amsmrmMoWIuOmfAt3NCnbgAAAAk"]
[Thu Jul 30 11:25:50.143186 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.jpg"] [unique_id "amsmrmMoWIuOmfAt3NCnbgAAAAk"]
[Thu Jul 30 11:25:50.143409 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.jpg"] [unique_id "amsmrmMoWIuOmfAt3NCnbgAAAAk"]
[Thu Jul 30 11:25:50.325395 2026] [ssl:error] [pid 2886477:tid 2886477] (EAI 2)Name or service not known: [client 144.76.19.72:21750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:50.325438 2026] [ssl:error] [pid 2886477:tid 2886477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:50.378764 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:21754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:50.378794 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:50.381545 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/config/smtp.ini"] [unique_id "amsmrmMoWIuOmfAt3NCnewAAAAk"]
[Thu Jul 30 11:25:50.381892 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/config/smtp.ini"] [unique_id "amsmrmMoWIuOmfAt3NCnewAAAAk"]
[Thu Jul 30 11:25:50.382096 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/config/smtp.ini"] [unique_id "amsmrmMoWIuOmfAt3NCnewAAAAk"]
[Thu Jul 30 11:25:50.418036 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/config/services.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/services.yml found within REQUEST_FILENAME: /config/services.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/config/services.yml"] [unique_id "amsmrmMoWIuOmfAt3NCnfQAAAAk"]
[Thu Jul 30 11:25:50.418284 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/config/services.yml"] [unique_id "amsmrmMoWIuOmfAt3NCnfQAAAAk"]
[Thu Jul 30 11:25:50.418521 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/config/services.yml"] [unique_id "amsmrmMoWIuOmfAt3NCnfQAAAAk"]
[Thu Jul 30 11:25:50.435949 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/smtp.ini"] [unique_id "amsmrmMoWIuOmfAt3NCnfgAAAAk"]
[Thu Jul 30 11:25:50.436383 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/smtp.ini"] [unique_id "amsmrmMoWIuOmfAt3NCnfgAAAAk"]
[Thu Jul 30 11:25:50.436636 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/smtp.ini"] [unique_id "amsmrmMoWIuOmfAt3NCnfgAAAAk"]
[Thu Jul 30 11:25:50.454046 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/smtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCnfwAAAAk"]
[Thu Jul 30 11:25:50.454467 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/smtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCnfwAAAAk"]
[Thu Jul 30 11:25:50.454710 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/smtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCnfwAAAAk"]
[Thu Jul 30 11:25:50.490419 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/ssmtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCngQAAAAk"]
[Thu Jul 30 11:25:50.490825 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ssmtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCngQAAAAk"]
[Thu Jul 30 11:25:50.491078 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ssmtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCngQAAAAk"]
[Thu Jul 30 11:25:50.508451 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/ssmtp/ssmtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCnggAAAAk"]
[Thu Jul 30 11:25:50.508871 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ssmtp/ssmtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCnggAAAAk"]
[Thu Jul 30 11:25:50.509106 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ssmtp/ssmtp.conf"] [unique_id "amsmrmMoWIuOmfAt3NCnggAAAAk"]
[Thu Jul 30 11:25:50.526610 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "freakorgeek.com"] [uri "/mail.ini"] [unique_id "amsmrmMoWIuOmfAt3NCngwAAAAk"]
[Thu Jul 30 11:25:50.527046 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/mail.ini"] [unique_id "amsmrmMoWIuOmfAt3NCngwAAAAk"]
[Thu Jul 30 11:25:50.527293 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/mail.ini"] [unique_id "amsmrmMoWIuOmfAt3NCngwAAAAk"]
[Thu Jul 30 11:25:50.599454 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailgun/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/mailgun/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnhwAAAAk"]
[Thu Jul 30 11:25:50.599681 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/mailgun/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnhwAAAAk"]
[Thu Jul 30 11:25:50.599923 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/mailgun/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnhwAAAAk"]
[Thu Jul 30 11:25:50.617561 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.mailgun"] [unique_id "amsmrmMoWIuOmfAt3NCniAAAAAk"]
[Thu Jul 30 11:25:50.617805 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.mailgun"] [unique_id "amsmrmMoWIuOmfAt3NCniAAAAAk"]
[Thu Jul 30 11:25:50.618044 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.mailgun"] [unique_id "amsmrmMoWIuOmfAt3NCniAAAAAk"]
[Thu Jul 30 11:25:50.726456 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postmark/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/postmark/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnjgAAAAk"]
[Thu Jul 30 11:25:50.726693 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/postmark/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnjgAAAAk"]
[Thu Jul 30 11:25:50.726908 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/postmark/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnjgAAAAk"]
[Thu Jul 30 11:25:50.744445 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.postmark"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.postmark"] [unique_id "amsmrmMoWIuOmfAt3NCnjwAAAAk"]
[Thu Jul 30 11:25:50.744649 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.postmark"] [unique_id "amsmrmMoWIuOmfAt3NCnjwAAAAk"]
[Thu Jul 30 11:25:50.744895 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.postmark"] [unique_id "amsmrmMoWIuOmfAt3NCnjwAAAAk"]
[Thu Jul 30 11:25:50.754856 2026] [lsapi:warn] [pid 2877508:tid 2877508] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:25:50.782606 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:50.782718 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:50.816260 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sparkpost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sparkpost/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnkwAAAAk"]
[Thu Jul 30 11:25:50.816480 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sparkpost/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnkwAAAAk"]
[Thu Jul 30 11:25:50.816685 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sparkpost/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnkwAAAAk"]
[Thu Jul 30 11:25:50.870515 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mandrill/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/mandrill/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnlgAAAAk"]
[Thu Jul 30 11:25:50.870763 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/mandrill/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnlgAAAAk"]
[Thu Jul 30 11:25:50.870979 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/mandrill/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnlgAAAAk"]
[Thu Jul 30 11:25:50.943222 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailjet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/mailjet/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnmgAAAAk"]
[Thu Jul 30 11:25:50.943442 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/mailjet/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnmgAAAAk"]
[Thu Jul 30 11:25:50.943666 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/mailjet/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnmgAAAAk"]
[Thu Jul 30 11:25:50.979782 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailjet"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.mailjet"] [unique_id "amsmrmMoWIuOmfAt3NCnnAAAAAk"]
[Thu Jul 30 11:25:50.980029 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.mailjet"] [unique_id "amsmrmMoWIuOmfAt3NCnnAAAAAk"]
[Thu Jul 30 11:25:50.980265 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.mailjet"] [unique_id "amsmrmMoWIuOmfAt3NCnnAAAAAk"]
[Thu Jul 30 11:25:50.998244 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendinblue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendinblue/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnnQAAAAk"]
[Thu Jul 30 11:25:50.998479 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendinblue/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnnQAAAAk"]
[Thu Jul 30 11:25:50.998744 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendinblue/.env"] [unique_id "amsmrmMoWIuOmfAt3NCnnQAAAAk"]
[Thu Jul 30 11:25:51.034235 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /brevo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/brevo/.env"] [unique_id "amsmr2MoWIuOmfAt3NCnnwAAAAk"]
[Thu Jul 30 11:25:51.034472 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/brevo/.env"] [unique_id "amsmr2MoWIuOmfAt3NCnnwAAAAk"]
[Thu Jul 30 11:25:51.034698 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/brevo/.env"] [unique_id "amsmr2MoWIuOmfAt3NCnnwAAAAk"]
[Thu Jul 30 11:25:51.047407 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:51.047554 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:51.052138 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /twilio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/twilio/.env"] [unique_id "amsmr2MoWIuOmfAt3NCnoAAAAAk"]
[Thu Jul 30 11:25:51.052355 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/twilio/.env"] [unique_id "amsmr2MoWIuOmfAt3NCnoAAAAAk"]
[Thu Jul 30 11:25:51.052575 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/twilio/.env"] [unique_id "amsmr2MoWIuOmfAt3NCnoAAAAAk"]
[Thu Jul 30 11:25:51.088506 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.twilio"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.twilio"] [unique_id "amsmr2MoWIuOmfAt3NCnogAAAAk"]
[Thu Jul 30 11:25:51.088763 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.twilio"] [unique_id "amsmr2MoWIuOmfAt3NCnogAAAAk"]
[Thu Jul 30 11:25:51.088975 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.twilio"] [unique_id "amsmr2MoWIuOmfAt3NCnogAAAAk"]
[Thu Jul 30 11:25:51.169164 2026] [ssl:error] [pid 2886477:tid 2886477] (70014)End of file found: [client 216.73.216.199:30186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:51.216272 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqQAAAAk"]
[Thu Jul 30 11:25:51.216501 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqQAAAAk"]
[Thu Jul 30 11:25:51.216737 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqQAAAAk"]
[Thu Jul 30 11:25:51.234586 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/%2faws%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqgAAAAk"]
[Thu Jul 30 11:25:51.234842 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/%2faws%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqgAAAAk"]
[Thu Jul 30 11:25:51.235060 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/%2faws%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqgAAAAk"]
[Thu Jul 30 11:25:51.252591 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/%2fs3%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqwAAAAk"]
[Thu Jul 30 11:25:51.252802 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/%2fs3%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqwAAAAk"]
[Thu Jul 30 11:25:51.253032 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/%2fs3%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnqwAAAAk"]
[Thu Jul 30 11:25:51.270842 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/%2fsendgrid%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnrAAAAAk"]
[Thu Jul 30 11:25:51.271103 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/%2fsendgrid%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnrAAAAAk"]
[Thu Jul 30 11:25:51.271356 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/%2fsendgrid%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnrAAAAAk"]
[Thu Jul 30 11:25:51.291304 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:51.291429 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:51.307238 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/%2fses%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnrgAAAAk"]
[Thu Jul 30 11:25:51.307464 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/%2fses%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnrgAAAAk"]
[Thu Jul 30 11:25:51.307714 2026] [security2:error] [pid 2887864:tid 2887864] [client 185.177.72.29:64418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/%2fses%2f.env"] [unique_id "amsmr2MoWIuOmfAt3NCnrgAAAAk"]
[Thu Jul 30 11:25:51.523620 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:51.523744 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:51.626109 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmryNZErGtdC-aIC7ZbAAAACE"]
[Thu Jul 30 11:25:51.626263 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmryNZErGtdC-aIC7ZbAAAACE"]
[Thu Jul 30 11:25:51.626435 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmryNZErGtdC-aIC7ZbAAAACE"]
[Thu Jul 30 11:25:51.680317 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmryNZErGtdC-aIC7ZbwAAACE"]
[Thu Jul 30 11:25:51.680486 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmryNZErGtdC-aIC7ZbwAAACE"]
[Thu Jul 30 11:25:51.680677 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmryNZErGtdC-aIC7ZbwAAACE"]
[Thu Jul 30 11:25:51.748360 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:25:51.749137 2026] [cgi:error] [pid 2886516:tid 2886516] [client 20.220.15.170:33607] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:25:51.772188 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdAAAACE"]
[Thu Jul 30 11:25:51.772373 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdAAAACE"]
[Thu Jul 30 11:25:51.772566 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdAAAACE"]
[Thu Jul 30 11:25:51.790244 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/\\\\aws\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdQAAACE"]
[Thu Jul 30 11:25:51.790368 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/\\\\aws\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdQAAACE"]
[Thu Jul 30 11:25:51.790546 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/\\\\aws\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdQAAACE"]
[Thu Jul 30 11:25:51.808240 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/\\\\s3\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdgAAACE"]
[Thu Jul 30 11:25:51.808386 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/\\\\s3\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdgAAACE"]
[Thu Jul 30 11:25:51.808565 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/\\\\s3\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdgAAACE"]
[Thu Jul 30 11:25:51.826410 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/\\\\sendgrid\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdwAAACE"]
[Thu Jul 30 11:25:51.826588 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/\\\\sendgrid\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdwAAACE"]
[Thu Jul 30 11:25:51.826765 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/\\\\sendgrid\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZdwAAACE"]
[Thu Jul 30 11:25:51.862777 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/\\\\ses\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZeQAAACE"]
[Thu Jul 30 11:25:51.862918 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/\\\\ses\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZeQAAACE"]
[Thu Jul 30 11:25:51.863100 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/\\\\ses\\\\.env"] [unique_id "amsmryNZErGtdC-aIC7ZeQAAACE"]
[Thu Jul 30 11:25:51.899063 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmryNZErGtdC-aIC7ZewAAACE"]
[Thu Jul 30 11:25:51.899241 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmryNZErGtdC-aIC7ZewAAACE"]
[Thu Jul 30 11:25:51.899411 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmryNZErGtdC-aIC7ZewAAACE"]
[Thu Jul 30 11:25:51.990597 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/%2eenv"] [unique_id "amsmryNZErGtdC-aIC7ZgAAAACE"]
[Thu Jul 30 11:25:51.990768 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/%2eenv"] [unique_id "amsmryNZErGtdC-aIC7ZgAAAACE"]
[Thu Jul 30 11:25:51.990938 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/%2eenv"] [unique_id "amsmryNZErGtdC-aIC7ZgAAAACE"]
[Thu Jul 30 11:25:52.081951 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmsCNZErGtdC-aIC7ZhQAAACE"]
[Thu Jul 30 11:25:52.082143 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmsCNZErGtdC-aIC7ZhQAAACE"]
[Thu Jul 30 11:25:52.082318 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmsCNZErGtdC-aIC7ZhQAAACE"]
[Thu Jul 30 11:25:52.100180 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /../.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/..;/.aws/credentials"] [unique_id "amsmsCNZErGtdC-aIC7ZhgAAACE"]
[Thu Jul 30 11:25:52.100382 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/..;/.aws/credentials"] [unique_id "amsmsCNZErGtdC-aIC7ZhgAAACE"]
[Thu Jul 30 11:25:52.100571 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/..;/.aws/credentials"] [unique_id "amsmsCNZErGtdC-aIC7ZhgAAACE"]
[Thu Jul 30 11:25:52.173413 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmsCNZErGtdC-aIC7ZigAAACE"]
[Thu Jul 30 11:25:52.173601 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmsCNZErGtdC-aIC7ZigAAACE"]
[Thu Jul 30 11:25:52.173787 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmsCNZErGtdC-aIC7ZigAAACE"]
[Thu Jul 30 11:25:52.409311 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.ENV"] [unique_id "amsmsCNZErGtdC-aIC7ZlwAAACE"]
[Thu Jul 30 11:25:52.409511 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.ENV"] [unique_id "amsmsCNZErGtdC-aIC7ZlwAAACE"]
[Thu Jul 30 11:25:52.409708 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.ENV"] [unique_id "amsmsCNZErGtdC-aIC7ZlwAAACE"]
[Thu Jul 30 11:25:52.427695 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.EnV"] [unique_id "amsmsCNZErGtdC-aIC7ZmAAAACE"]
[Thu Jul 30 11:25:52.427865 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.EnV"] [unique_id "amsmsCNZErGtdC-aIC7ZmAAAACE"]
[Thu Jul 30 11:25:52.428053 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.EnV"] [unique_id "amsmsCNZErGtdC-aIC7ZmAAAACE"]
[Thu Jul 30 11:25:52.445944 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.Env"] [unique_id "amsmsCNZErGtdC-aIC7ZmQAAACE"]
[Thu Jul 30 11:25:52.446144 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.Env"] [unique_id "amsmsCNZErGtdC-aIC7ZmQAAACE"]
[Thu Jul 30 11:25:52.446335 2026] [security2:error] [pid 2876647:tid 2876647] [client 185.177.72.29:64432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.Env"] [unique_id "amsmsCNZErGtdC-aIC7ZmQAAACE"]
[Thu Jul 30 11:25:52.525358 2026] [core:error] [pid 2889511:tid 2889511] [client 66.249.66.3:63607] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:52.525392 2026] [core:error] [pid 2889511:tid 2889511] [client 66.249.66.3:63607] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:25:53.434749 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:21770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:53.434783 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:53.490666 2026] [ssl:error] [pid 2881470:tid 2881470] (EAI 2)Name or service not known: [client 144.76.19.72:21784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:53.490704 2026] [ssl:error] [pid 2881470:tid 2881470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:53.495516 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "freakorgeek.com"] [uri "/.aws/credentials%00"] [unique_id "amsmsVXf6sbc4i97EWPpNQAAABU"]
[Thu Jul 30 11:25:53.587380 2026] [ssl:error] [pid 2889511:tid 2889511] (70014)End of file found: [client 216.73.216.199:6591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:25:53.914257 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.eNv"] [unique_id "amsmsVXf6sbc4i97EWPpTgAAABU"]
[Thu Jul 30 11:25:53.914408 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.eNv"] [unique_id "amsmsVXf6sbc4i97EWPpTgAAABU"]
[Thu Jul 30 11:25:53.914571 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.eNv"] [unique_id "amsmsVXf6sbc4i97EWPpTgAAABU"]
[Thu Jul 30 11:25:54.012249 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env\\x09"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env\\t"] [unique_id "amsmslXf6sbc4i97EWPpVAAAABU"]
[Thu Jul 30 11:25:54.012430 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env\\t"] [unique_id "amsmslXf6sbc4i97EWPpVAAAABU"]
[Thu Jul 30 11:25:54.012616 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env\\t"] [unique_id "amsmslXf6sbc4i97EWPpVAAAABU"]
[Thu Jul 30 11:25:54.029054 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env\\n"] [unique_id "amsmslXf6sbc4i97EWPpVQAAABU"]
[Thu Jul 30 11:25:54.029247 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env\\n"] [unique_id "amsmslXf6sbc4i97EWPpVQAAABU"]
[Thu Jul 30 11:25:54.029435 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env\\n"] [unique_id "amsmslXf6sbc4i97EWPpVQAAABU"]
[Thu Jul 30 11:25:54.045787 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env\\x0d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env\\r"] [unique_id "amsmslXf6sbc4i97EWPpVgAAABU"]
[Thu Jul 30 11:25:54.045948 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env\\r"] [unique_id "amsmslXf6sbc4i97EWPpVgAAABU"]
[Thu Jul 30 11:25:54.046130 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env\\r"] [unique_id "amsmslXf6sbc4i97EWPpVgAAABU"]
[Thu Jul 30 11:25:54.062762 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env "] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env "] [unique_id "amsmslXf6sbc4i97EWPpVwAAABU"]
[Thu Jul 30 11:25:54.062941 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env "] [unique_id "amsmslXf6sbc4i97EWPpVwAAABU"]
[Thu Jul 30 11:25:54.063156 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env "] [unique_id "amsmslXf6sbc4i97EWPpVwAAABU"]
[Thu Jul 30 11:25:54.079729 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env .jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env .jpg"] [unique_id "amsmslXf6sbc4i97EWPpWAAAABU"]
[Thu Jul 30 11:25:54.079907 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env .jpg"] [unique_id "amsmslXf6sbc4i97EWPpWAAAABU"]
[Thu Jul 30 11:25:54.080109 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env .jpg"] [unique_id "amsmslXf6sbc4i97EWPpWAAAABU"]
[Thu Jul 30 11:25:54.096573 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env#.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env#.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWQAAABU"]
[Thu Jul 30 11:25:54.096754 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env#.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWQAAABU"]
[Thu Jul 30 11:25:54.096963 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env#.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWQAAABU"]
[Thu Jul 30 11:25:54.113116 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "freakorgeek.com"] [uri "/.env%00.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWgAAABU"]
[Thu Jul 30 11:25:54.113378 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env\\x00.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env%00.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWgAAABU"]
[Thu Jul 30 11:25:54.113542 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 9)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env%00.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWgAAABU"]
[Thu Jul 30 11:25:54.113716 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 9 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env%00.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWgAAABU"]
[Thu Jul 30 11:25:54.130118 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env .jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env%20.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWwAAABU"]
[Thu Jul 30 11:25:54.130275 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env%20.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWwAAABU"]
[Thu Jul 30 11:25:54.130459 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env%20.jpg"] [unique_id "amsmslXf6sbc4i97EWPpWwAAABU"]
[Thu Jul 30 11:25:54.146897 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env."] [unique_id "amsmslXf6sbc4i97EWPpXAAAABU"]
[Thu Jul 30 11:25:54.147081 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env."] [unique_id "amsmslXf6sbc4i97EWPpXAAAABU"]
[Thu Jul 30 11:25:54.147260 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env."] [unique_id "amsmslXf6sbc4i97EWPpXAAAABU"]
[Thu Jul 30 11:25:54.180014 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env;"] [unique_id "amsmslXf6sbc4i97EWPpXgAAABU"]
[Thu Jul 30 11:25:54.180223 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env;"] [unique_id "amsmslXf6sbc4i97EWPpXgAAABU"]
[Thu Jul 30 11:25:54.180421 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env;"] [unique_id "amsmslXf6sbc4i97EWPpXgAAABU"]
[Thu Jul 30 11:25:54.196912 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env;.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env;.jpg"] [unique_id "amsmslXf6sbc4i97EWPpXwAAABU"]
[Thu Jul 30 11:25:54.197103 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env;.jpg"] [unique_id "amsmslXf6sbc4i97EWPpXwAAABU"]
[Thu Jul 30 11:25:54.197284 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env;.jpg"] [unique_id "amsmslXf6sbc4i97EWPpXwAAABU"]
[Thu Jul 30 11:25:54.213639 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env?.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env?.jpg"] [unique_id "amsmslXf6sbc4i97EWPpYAAAABU"]
[Thu Jul 30 11:25:54.213763 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env?.jpg"] [unique_id "amsmslXf6sbc4i97EWPpYAAAABU"]
[Thu Jul 30 11:25:54.213938 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env?.jpg"] [unique_id "amsmslXf6sbc4i97EWPpYAAAABU"]
[Thu Jul 30 11:25:54.230311 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env\\x02jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env\\xe3\\x80\\x82jpg"] [unique_id "amsmslXf6sbc4i97EWPpYQAAABU"]
[Thu Jul 30 11:25:54.230458 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env\\xe3\\x80\\x82jpg"] [unique_id "amsmslXf6sbc4i97EWPpYQAAABU"]
[Thu Jul 30 11:25:54.230633 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env\\xe3\\x80\\x82jpg"] [unique_id "amsmslXf6sbc4i97EWPpYQAAABU"]
[Thu Jul 30 11:25:54.247381 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env\\x02txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env\\xe3\\x80\\x82txt"] [unique_id "amsmslXf6sbc4i97EWPpYgAAABU"]
[Thu Jul 30 11:25:54.247637 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env\\xe3\\x80\\x82txt"] [unique_id "amsmslXf6sbc4i97EWPpYgAAABU"]
[Thu Jul 30 11:25:54.247888 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env\\xe3\\x80\\x82txt"] [unique_id "amsmslXf6sbc4i97EWPpYgAAABU"]
[Thu Jul 30 11:25:54.264728 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env."] [unique_id "amsmslXf6sbc4i97EWPpYwAAABU"]
[Thu Jul 30 11:25:54.264992 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env."] [unique_id "amsmslXf6sbc4i97EWPpYwAAABU"]
[Thu Jul 30 11:25:54.265284 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env."] [unique_id "amsmslXf6sbc4i97EWPpYwAAABU"]
[Thu Jul 30 11:25:54.282027 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /.env../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/.env..;/"] [unique_id "amsmslXf6sbc4i97EWPpZAAAABU"]
[Thu Jul 30 11:25:54.282139 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env..;/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env..;/"] [unique_id "amsmslXf6sbc4i97EWPpZAAAABU"]
[Thu Jul 30 11:25:54.282370 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env..;/"] [unique_id "amsmslXf6sbc4i97EWPpZAAAABU"]
[Thu Jul 30 11:25:54.282666 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env..;/"] [unique_id "amsmslXf6sbc4i97EWPpZAAAABU"]
[Thu Jul 30 11:25:54.299315 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env./"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env./"] [unique_id "amsmslXf6sbc4i97EWPpZQAAABU"]
[Thu Jul 30 11:25:54.299576 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env./"] [unique_id "amsmslXf6sbc4i97EWPpZQAAABU"]
[Thu Jul 30 11:25:54.299824 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env./"] [unique_id "amsmslXf6sbc4i97EWPpZQAAABU"]
[Thu Jul 30 11:25:54.316490 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.;"] [unique_id "amsmslXf6sbc4i97EWPpZgAAABU"]
[Thu Jul 30 11:25:54.316734 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.;"] [unique_id "amsmslXf6sbc4i97EWPpZgAAABU"]
[Thu Jul 30 11:25:54.316993 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.;"] [unique_id "amsmslXf6sbc4i97EWPpZgAAABU"]
[Thu Jul 30 11:25:54.333785 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.avif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.avif"] [unique_id "amsmslXf6sbc4i97EWPpZwAAABU"]
[Thu Jul 30 11:25:54.334029 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.avif"] [unique_id "amsmslXf6sbc4i97EWPpZwAAABU"]
[Thu Jul 30 11:25:54.334295 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.avif"] [unique_id "amsmslXf6sbc4i97EWPpZwAAABU"]
[Thu Jul 30 11:25:54.351138 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.aws.jpg"] [unique_id "amsmslXf6sbc4i97EWPpaAAAABU"]
[Thu Jul 30 11:25:54.351384 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.aws.jpg"] [unique_id "amsmslXf6sbc4i97EWPpaAAAABU"]
[Thu Jul 30 11:25:54.351664 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.aws.jpg"] [unique_id "amsmslXf6sbc4i97EWPpaAAAABU"]
[Thu Jul 30 11:25:54.368161 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.css"] [unique_id "amsmslXf6sbc4i97EWPpaQAAABU"]
[Thu Jul 30 11:25:54.368290 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.css"] [unique_id "amsmslXf6sbc4i97EWPpaQAAABU"]
[Thu Jul 30 11:25:54.368449 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.css"] [unique_id "amsmslXf6sbc4i97EWPpaQAAABU"]
[Thu Jul 30 11:25:54.384718 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.gif"] [unique_id "amsmslXf6sbc4i97EWPpagAAABU"]
[Thu Jul 30 11:25:54.384857 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.gif"] [unique_id "amsmslXf6sbc4i97EWPpagAAABU"]
[Thu Jul 30 11:25:54.385016 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.gif"] [unique_id "amsmslXf6sbc4i97EWPpagAAABU"]
[Thu Jul 30 11:25:54.401895 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.html"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.html"] [unique_id "amsmslXf6sbc4i97EWPpawAAABU"]
[Thu Jul 30 11:25:54.402191 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.html"] [unique_id "amsmslXf6sbc4i97EWPpawAAABU"]
[Thu Jul 30 11:25:54.402465 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.html"] [unique_id "amsmslXf6sbc4i97EWPpawAAABU"]
[Thu Jul 30 11:25:54.418676 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ico"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.ico"] [unique_id "amsmslXf6sbc4i97EWPpbAAAABU"]
[Thu Jul 30 11:25:54.418827 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.ico"] [unique_id "amsmslXf6sbc4i97EWPpbAAAABU"]
[Thu Jul 30 11:25:54.419001 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.ico"] [unique_id "amsmslXf6sbc4i97EWPpbAAAABU"]
[Thu Jul 30 11:25:54.435240 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.jpeg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.jpeg"] [unique_id "amsmslXf6sbc4i97EWPpbQAAABU"]
[Thu Jul 30 11:25:54.435411 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.jpeg"] [unique_id "amsmslXf6sbc4i97EWPpbQAAABU"]
[Thu Jul 30 11:25:54.435592 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.jpeg"] [unique_id "amsmslXf6sbc4i97EWPpbQAAABU"]
[Thu Jul 30 11:25:54.451914 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.js"] [unique_id "amsmslXf6sbc4i97EWPpbgAAABU"]
[Thu Jul 30 11:25:54.452044 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.js"] [unique_id "amsmslXf6sbc4i97EWPpbgAAABU"]
[Thu Jul 30 11:25:54.452216 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.js"] [unique_id "amsmslXf6sbc4i97EWPpbgAAABU"]
[Thu Jul 30 11:25:54.468322 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.map"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.map"] [unique_id "amsmslXf6sbc4i97EWPpbwAAABU"]
[Thu Jul 30 11:25:54.468460 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.map"] [unique_id "amsmslXf6sbc4i97EWPpbwAAABU"]
[Thu Jul 30 11:25:54.468623 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.map"] [unique_id "amsmslXf6sbc4i97EWPpbwAAABU"]
[Thu Jul 30 11:25:54.484751 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.png"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.png"] [unique_id "amsmslXf6sbc4i97EWPpcAAAABU"]
[Thu Jul 30 11:25:54.484871 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.png"] [unique_id "amsmslXf6sbc4i97EWPpcAAAABU"]
[Thu Jul 30 11:25:54.485024 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.png"] [unique_id "amsmslXf6sbc4i97EWPpcAAAABU"]
[Thu Jul 30 11:25:54.501156 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.svg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.svg"] [unique_id "amsmslXf6sbc4i97EWPpcQAAABU"]
[Thu Jul 30 11:25:54.501288 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.svg"] [unique_id "amsmslXf6sbc4i97EWPpcQAAABU"]
[Thu Jul 30 11:25:54.501441 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.svg"] [unique_id "amsmslXf6sbc4i97EWPpcQAAABU"]
[Thu Jul 30 11:25:54.517695 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.txt"] [unique_id "amsmslXf6sbc4i97EWPpcgAAABU"]
[Thu Jul 30 11:25:54.517829 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.txt"] [unique_id "amsmslXf6sbc4i97EWPpcgAAABU"]
[Thu Jul 30 11:25:54.517991 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.txt"] [unique_id "amsmslXf6sbc4i97EWPpcgAAABU"]
[Thu Jul 30 11:25:54.534178 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.webp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.webp"] [unique_id "amsmslXf6sbc4i97EWPpcwAAABU"]
[Thu Jul 30 11:25:54.534319 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.webp"] [unique_id "amsmslXf6sbc4i97EWPpcwAAABU"]
[Thu Jul 30 11:25:54.534472 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.webp"] [unique_id "amsmslXf6sbc4i97EWPpcwAAABU"]
[Thu Jul 30 11:25:54.550719 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.woff"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.woff"] [unique_id "amsmslXf6sbc4i97EWPpdAAAABU"]
[Thu Jul 30 11:25:54.550881 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.woff"] [unique_id "amsmslXf6sbc4i97EWPpdAAAABU"]
[Thu Jul 30 11:25:54.551049 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.woff"] [unique_id "amsmslXf6sbc4i97EWPpdAAAABU"]
[Thu Jul 30 11:25:54.567321 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env/"] [unique_id "amsmslXf6sbc4i97EWPpdQAAABU"]
[Thu Jul 30 11:25:54.567493 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env/"] [unique_id "amsmslXf6sbc4i97EWPpdQAAABU"]
[Thu Jul 30 11:25:54.567679 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env/"] [unique_id "amsmslXf6sbc4i97EWPpdQAAABU"]
[Thu Jul 30 11:25:54.584110 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env;"] [unique_id "amsmslXf6sbc4i97EWPpdgAAABU"]
[Thu Jul 30 11:25:54.584357 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env;"] [unique_id "amsmslXf6sbc4i97EWPpdgAAABU"]
[Thu Jul 30 11:25:54.584610 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env;"] [unique_id "amsmslXf6sbc4i97EWPpdgAAABU"]
[Thu Jul 30 11:25:54.600903 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env;.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env;.css"] [unique_id "amsmslXf6sbc4i97EWPpdwAAABU"]
[Thu Jul 30 11:25:54.601083 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env;.css"] [unique_id "amsmslXf6sbc4i97EWPpdwAAABU"]
[Thu Jul 30 11:25:54.601266 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env;.css"] [unique_id "amsmslXf6sbc4i97EWPpdwAAABU"]
[Thu Jul 30 11:25:54.617736 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env;.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env;.jpg"] [unique_id "amsmslXf6sbc4i97EWPpeAAAABU"]
[Thu Jul 30 11:25:54.617905 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env;.jpg"] [unique_id "amsmslXf6sbc4i97EWPpeAAAABU"]
[Thu Jul 30 11:25:54.618100 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env;.jpg"] [unique_id "amsmslXf6sbc4i97EWPpeAAAABU"]
[Thu Jul 30 11:25:54.668095 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmslXf6sbc4i97EWPpewAAABU"]
[Thu Jul 30 11:25:54.668251 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmslXf6sbc4i97EWPpewAAABU"]
[Thu Jul 30 11:25:54.668432 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amsmslXf6sbc4i97EWPpewAAABU"]
[Thu Jul 30 11:25:54.684672 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsmslXf6sbc4i97EWPpfAAAABU"]
[Thu Jul 30 11:25:54.684826 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsmslXf6sbc4i97EWPpfAAAABU"]
[Thu Jul 30 11:25:54.684992 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsmslXf6sbc4i97EWPpfAAAABU"]
[Thu Jul 30 11:25:54.701185 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmslXf6sbc4i97EWPpfQAAABU"]
[Thu Jul 30 11:25:54.701321 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmslXf6sbc4i97EWPpfQAAABU"]
[Thu Jul 30 11:25:54.701488 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmslXf6sbc4i97EWPpfQAAABU"]
[Thu Jul 30 11:25:54.734487 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmslXf6sbc4i97EWPpfwAAABU"]
[Thu Jul 30 11:25:54.734646 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmslXf6sbc4i97EWPpfwAAABU"]
[Thu Jul 30 11:25:54.734808 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmslXf6sbc4i97EWPpfwAAABU"]
[Thu Jul 30 11:25:54.751109 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmslXf6sbc4i97EWPpgAAAABU"]
[Thu Jul 30 11:25:54.751232 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmslXf6sbc4i97EWPpgAAAABU"]
[Thu Jul 30 11:25:54.751383 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmslXf6sbc4i97EWPpgAAAABU"]
[Thu Jul 30 11:25:54.784051 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/AWS/.ENV"] [unique_id "amsmslXf6sbc4i97EWPpggAAABU"]
[Thu Jul 30 11:25:54.784193 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/AWS/.ENV"] [unique_id "amsmslXf6sbc4i97EWPpggAAABU"]
[Thu Jul 30 11:25:54.784342 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/AWS/.ENV"] [unique_id "amsmslXf6sbc4i97EWPpggAAABU"]
[Thu Jul 30 11:25:54.800521 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/AwS/.eNv"] [unique_id "amsmslXf6sbc4i97EWPpgwAAABU"]
[Thu Jul 30 11:25:54.800654 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/AwS/.eNv"] [unique_id "amsmslXf6sbc4i97EWPpgwAAABU"]
[Thu Jul 30 11:25:54.800803 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/AwS/.eNv"] [unique_id "amsmslXf6sbc4i97EWPpgwAAABU"]
[Thu Jul 30 11:25:54.817197 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/S3/.ENV"] [unique_id "amsmslXf6sbc4i97EWPphAAAABU"]
[Thu Jul 30 11:25:54.817343 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/S3/.ENV"] [unique_id "amsmslXf6sbc4i97EWPphAAAABU"]
[Thu Jul 30 11:25:54.817516 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/S3/.ENV"] [unique_id "amsmslXf6sbc4i97EWPphAAAABU"]
[Thu Jul 30 11:25:54.833877 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/S3/.eNv"] [unique_id "amsmslXf6sbc4i97EWPphQAAABU"]
[Thu Jul 30 11:25:54.834031 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/S3/.eNv"] [unique_id "amsmslXf6sbc4i97EWPphQAAABU"]
[Thu Jul 30 11:25:54.834220 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/S3/.eNv"] [unique_id "amsmslXf6sbc4i97EWPphQAAABU"]
[Thu Jul 30 11:25:54.867443 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/SENDGRID/.ENV"] [unique_id "amsmslXf6sbc4i97EWPphwAAABU"]
[Thu Jul 30 11:25:54.867646 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/SENDGRID/.ENV"] [unique_id "amsmslXf6sbc4i97EWPphwAAABU"]
[Thu Jul 30 11:25:54.867838 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/SENDGRID/.ENV"] [unique_id "amsmslXf6sbc4i97EWPphwAAABU"]
[Thu Jul 30 11:25:54.884219 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/SES/.ENV"] [unique_id "amsmslXf6sbc4i97EWPpiAAAABU"]
[Thu Jul 30 11:25:54.884406 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/SES/.ENV"] [unique_id "amsmslXf6sbc4i97EWPpiAAAABU"]
[Thu Jul 30 11:25:54.884607 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/SES/.ENV"] [unique_id "amsmslXf6sbc4i97EWPpiAAAABU"]
[Thu Jul 30 11:25:54.917890 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%252f found within REQUEST_URI_RAW: /a/..%252f.aws%252fcredentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/a/..%2f.aws%2fcredentials"] [unique_id "amsmslXf6sbc4i97EWPpigAAABU"]
[Thu Jul 30 11:25:54.918018 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /a/../.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/a/..%2f.aws%2fcredentials"] [unique_id "amsmslXf6sbc4i97EWPpigAAABU"]
[Thu Jul 30 11:25:54.918083 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /a/../.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/a/..%2f.aws%2fcredentials"] [unique_id "amsmslXf6sbc4i97EWPpigAAABU"]
[Thu Jul 30 11:25:54.918332 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/a/..%2f.aws%2fcredentials"] [unique_id "amsmslXf6sbc4i97EWPpigAAABU"]
[Thu Jul 30 11:25:54.918576 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/a/..%2f.aws%2fcredentials"] [unique_id "amsmslXf6sbc4i97EWPpigAAABU"]
[Thu Jul 30 11:25:54.934943 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aWs/.EnV"] [unique_id "amsmslXf6sbc4i97EWPpiwAAABU"]
[Thu Jul 30 11:25:54.935134 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aWs/.EnV"] [unique_id "amsmslXf6sbc4i97EWPpiwAAABU"]
[Thu Jul 30 11:25:54.935316 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aWs/.EnV"] [unique_id "amsmslXf6sbc4i97EWPpiwAAABU"]
[Thu Jul 30 11:25:54.952039 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /api/../sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/api/..;/sendgrid/.env"] [unique_id "amsmslXf6sbc4i97EWPpjAAAABU"]
[Thu Jul 30 11:25:54.952142 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/..;/sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/api/..;/sendgrid/.env"] [unique_id "amsmslXf6sbc4i97EWPpjAAAABU"]
[Thu Jul 30 11:25:54.952371 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/api/..;/sendgrid/.env"] [unique_id "amsmslXf6sbc4i97EWPpjAAAABU"]
[Thu Jul 30 11:25:54.952651 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/api/..;/sendgrid/.env"] [unique_id "amsmslXf6sbc4i97EWPpjAAAABU"]
[Thu Jul 30 11:25:54.985207 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /assets/../.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/assets/..;/.aws/credentials"] [unique_id "amsmslXf6sbc4i97EWPpjgAAABU"]
[Thu Jul 30 11:25:54.985389 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/assets/..;/.aws/credentials"] [unique_id "amsmslXf6sbc4i97EWPpjgAAABU"]
[Thu Jul 30 11:25:54.985559 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/assets/..;/.aws/credentials"] [unique_id "amsmslXf6sbc4i97EWPpjgAAABU"]
[Thu Jul 30 11:25:55.017935 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms1Xf6sbc4i97EWPpkAAAABU"]
[Thu Jul 30 11:25:55.018104 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms1Xf6sbc4i97EWPpkAAAABU"]
[Thu Jul 30 11:25:55.018265 2026] [security2:error] [pid 2883999:tid 2883999] [client 185.177.72.29:64442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms1Xf6sbc4i97EWPpkAAAABU"]
[Thu Jul 30 11:25:55.050901 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms5M8sfhbdUvakawJZwAAAAE"]
[Thu Jul 30 11:25:55.051143 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms5M8sfhbdUvakawJZwAAAAE"]
[Thu Jul 30 11:25:55.051405 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms5M8sfhbdUvakawJZwAAAAE"]
[Thu Jul 30 11:25:55.067703 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws./.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws./.env"] [unique_id "amsms5M8sfhbdUvakawJaAAAAAE"]
[Thu Jul 30 11:25:55.067863 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws./.env"] [unique_id "amsms5M8sfhbdUvakawJaAAAAAE"]
[Thu Jul 30 11:25:55.068035 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws./.env"] [unique_id "amsms5M8sfhbdUvakawJaAAAAAE"]
[Thu Jul 30 11:25:55.084358 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/%2eenv"] [unique_id "amsms5M8sfhbdUvakawJaQAAAAE"]
[Thu Jul 30 11:25:55.084542 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/%2eenv"] [unique_id "amsms5M8sfhbdUvakawJaQAAAAE"]
[Thu Jul 30 11:25:55.084718 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/%2eenv"] [unique_id "amsms5M8sfhbdUvakawJaQAAAAE"]
[Thu Jul 30 11:25:55.101162 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJagAAAAE"]
[Thu Jul 30 11:25:55.101317 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJagAAAAE"]
[Thu Jul 30 11:25:55.101494 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJagAAAAE"]
[Thu Jul 30 11:25:55.117891 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJawAAAAE"]
[Thu Jul 30 11:25:55.118058 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJawAAAAE"]
[Thu Jul 30 11:25:55.118247 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJawAAAAE"]
[Thu Jul 30 11:25:55.168364 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.ENV"] [unique_id "amsms5M8sfhbdUvakawJbgAAAAE"]
[Thu Jul 30 11:25:55.168545 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.ENV"] [unique_id "amsms5M8sfhbdUvakawJbgAAAAE"]
[Thu Jul 30 11:25:55.168720 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.ENV"] [unique_id "amsms5M8sfhbdUvakawJbgAAAAE"]
[Thu Jul 30 11:25:55.171037 2026] [security2:error] [pid 2876647:tid 2876647] [client 49.51.243.156:40310] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchellphotography.co.uk"] [uri "/"] [unique_id "amsmsyNZErGtdC-aIC7ZywAAACE"]
[Thu Jul 30 11:25:55.265894 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env\\x09"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env\\t"] [unique_id "amsms5M8sfhbdUvakawJdAAAAAE"]
[Thu Jul 30 11:25:55.266105 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env\\t"] [unique_id "amsms5M8sfhbdUvakawJdAAAAAE"]
[Thu Jul 30 11:25:55.266281 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env\\t"] [unique_id "amsms5M8sfhbdUvakawJdAAAAAE"]
[Thu Jul 30 11:25:55.282680 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env\\n"] [unique_id "amsms5M8sfhbdUvakawJdQAAAAE"]
[Thu Jul 30 11:25:55.282849 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env\\n"] [unique_id "amsms5M8sfhbdUvakawJdQAAAAE"]
[Thu Jul 30 11:25:55.283015 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env\\n"] [unique_id "amsms5M8sfhbdUvakawJdQAAAAE"]
[Thu Jul 30 11:25:55.299381 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env\\x0d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env\\r"] [unique_id "amsms5M8sfhbdUvakawJdgAAAAE"]
[Thu Jul 30 11:25:55.299584 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env\\r"] [unique_id "amsms5M8sfhbdUvakawJdgAAAAE"]
[Thu Jul 30 11:25:55.299763 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env\\r"] [unique_id "amsms5M8sfhbdUvakawJdgAAAAE"]
[Thu Jul 30 11:25:55.316295 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env "] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env "] [unique_id "amsms5M8sfhbdUvakawJdwAAAAE"]
[Thu Jul 30 11:25:55.316468 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env "] [unique_id "amsms5M8sfhbdUvakawJdwAAAAE"]
[Thu Jul 30 11:25:55.316687 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env "] [unique_id "amsms5M8sfhbdUvakawJdwAAAAE"]
[Thu Jul 30 11:25:55.333088 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env .jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env .jpg"] [unique_id "amsms5M8sfhbdUvakawJeAAAAAE"]
[Thu Jul 30 11:25:55.333271 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env .jpg"] [unique_id "amsms5M8sfhbdUvakawJeAAAAAE"]
[Thu Jul 30 11:25:55.333447 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env .jpg"] [unique_id "amsms5M8sfhbdUvakawJeAAAAAE"]
[Thu Jul 30 11:25:55.349923 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env#.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env#.jpg"] [unique_id "amsms5M8sfhbdUvakawJeQAAAAE"]
[Thu Jul 30 11:25:55.350110 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env#.jpg"] [unique_id "amsms5M8sfhbdUvakawJeQAAAAE"]
[Thu Jul 30 11:25:55.350291 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env#.jpg"] [unique_id "amsms5M8sfhbdUvakawJeQAAAAE"]
[Thu Jul 30 11:25:55.366712 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env;"] [unique_id "amsms5M8sfhbdUvakawJegAAAAE"]
[Thu Jul 30 11:25:55.366874 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env;"] [unique_id "amsms5M8sfhbdUvakawJegAAAAE"]
[Thu Jul 30 11:25:55.367038 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env;"] [unique_id "amsms5M8sfhbdUvakawJegAAAAE"]
[Thu Jul 30 11:25:55.383582 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env?.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env?.jpg"] [unique_id "amsms5M8sfhbdUvakawJewAAAAE"]
[Thu Jul 30 11:25:55.383701 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env?.jpg"] [unique_id "amsms5M8sfhbdUvakawJewAAAAE"]
[Thu Jul 30 11:25:55.383847 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env?.jpg"] [unique_id "amsms5M8sfhbdUvakawJewAAAAE"]
[Thu Jul 30 11:25:55.399991 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env."] [unique_id "amsms5M8sfhbdUvakawJfAAAAAE"]
[Thu Jul 30 11:25:55.400122 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env."] [unique_id "amsms5M8sfhbdUvakawJfAAAAAE"]
[Thu Jul 30 11:25:55.400279 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env."] [unique_id "amsms5M8sfhbdUvakawJfAAAAAE"]
[Thu Jul 30 11:25:55.416573 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.avif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.avif"] [unique_id "amsms5M8sfhbdUvakawJfQAAAAE"]
[Thu Jul 30 11:25:55.416691 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.avif"] [unique_id "amsms5M8sfhbdUvakawJfQAAAAE"]
[Thu Jul 30 11:25:55.416838 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.avif"] [unique_id "amsms5M8sfhbdUvakawJfQAAAAE"]
[Thu Jul 30 11:25:55.433160 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.css"] [unique_id "amsms5M8sfhbdUvakawJfgAAAAE"]
[Thu Jul 30 11:25:55.433282 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.css"] [unique_id "amsms5M8sfhbdUvakawJfgAAAAE"]
[Thu Jul 30 11:25:55.433441 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.css"] [unique_id "amsms5M8sfhbdUvakawJfgAAAAE"]
[Thu Jul 30 11:25:55.449826 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.gif"] [unique_id "amsms5M8sfhbdUvakawJfwAAAAE"]
[Thu Jul 30 11:25:55.449962 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.gif"] [unique_id "amsms5M8sfhbdUvakawJfwAAAAE"]
[Thu Jul 30 11:25:55.450135 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.gif"] [unique_id "amsms5M8sfhbdUvakawJfwAAAAE"]
[Thu Jul 30 11:25:55.466371 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.html"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.html"] [unique_id "amsms5M8sfhbdUvakawJgAAAAAE"]
[Thu Jul 30 11:25:55.466492 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.html"] [unique_id "amsms5M8sfhbdUvakawJgAAAAAE"]
[Thu Jul 30 11:25:55.466663 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.html"] [unique_id "amsms5M8sfhbdUvakawJgAAAAAE"]
[Thu Jul 30 11:25:55.482940 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.ico"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.ico"] [unique_id "amsms5M8sfhbdUvakawJgQAAAAE"]
[Thu Jul 30 11:25:55.483057 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.ico"] [unique_id "amsms5M8sfhbdUvakawJgQAAAAE"]
[Thu Jul 30 11:25:55.483218 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.ico"] [unique_id "amsms5M8sfhbdUvakawJgQAAAAE"]
[Thu Jul 30 11:25:55.499699 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.jpeg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.jpeg"] [unique_id "amsms5M8sfhbdUvakawJggAAAAE"]
[Thu Jul 30 11:25:55.499827 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.jpeg"] [unique_id "amsms5M8sfhbdUvakawJggAAAAE"]
[Thu Jul 30 11:25:55.499986 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.jpeg"] [unique_id "amsms5M8sfhbdUvakawJggAAAAE"]
[Thu Jul 30 11:25:55.516249 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.js"] [unique_id "amsms5M8sfhbdUvakawJgwAAAAE"]
[Thu Jul 30 11:25:55.516374 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.js"] [unique_id "amsms5M8sfhbdUvakawJgwAAAAE"]
[Thu Jul 30 11:25:55.516528 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.js"] [unique_id "amsms5M8sfhbdUvakawJgwAAAAE"]
[Thu Jul 30 11:25:55.532654 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.map"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.map"] [unique_id "amsms5M8sfhbdUvakawJhAAAAAE"]
[Thu Jul 30 11:25:55.532766 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.map"] [unique_id "amsms5M8sfhbdUvakawJhAAAAAE"]
[Thu Jul 30 11:25:55.532905 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.map"] [unique_id "amsms5M8sfhbdUvakawJhAAAAAE"]
[Thu Jul 30 11:25:55.549096 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.png"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.png"] [unique_id "amsms5M8sfhbdUvakawJhQAAAAE"]
[Thu Jul 30 11:25:55.549209 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.png"] [unique_id "amsms5M8sfhbdUvakawJhQAAAAE"]
[Thu Jul 30 11:25:55.549351 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.png"] [unique_id "amsms5M8sfhbdUvakawJhQAAAAE"]
[Thu Jul 30 11:25:55.565546 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.svg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.svg"] [unique_id "amsms5M8sfhbdUvakawJhgAAAAE"]
[Thu Jul 30 11:25:55.565657 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.svg"] [unique_id "amsms5M8sfhbdUvakawJhgAAAAE"]
[Thu Jul 30 11:25:55.565801 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.svg"] [unique_id "amsms5M8sfhbdUvakawJhgAAAAE"]
[Thu Jul 30 11:25:55.581990 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.webp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.webp"] [unique_id "amsms5M8sfhbdUvakawJhwAAAAE"]
[Thu Jul 30 11:25:55.582122 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.webp"] [unique_id "amsms5M8sfhbdUvakawJhwAAAAE"]
[Thu Jul 30 11:25:55.582275 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.webp"] [unique_id "amsms5M8sfhbdUvakawJhwAAAAE"]
[Thu Jul 30 11:25:55.598628 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env.woff"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env.woff"] [unique_id "amsms5M8sfhbdUvakawJiAAAAAE"]
[Thu Jul 30 11:25:55.598767 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env.woff"] [unique_id "amsms5M8sfhbdUvakawJiAAAAAE"]
[Thu Jul 30 11:25:55.598925 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env.woff"] [unique_id "amsms5M8sfhbdUvakawJiAAAAAE"]
[Thu Jul 30 11:25:55.615427 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env/"] [unique_id "amsms5M8sfhbdUvakawJiQAAAAE"]
[Thu Jul 30 11:25:55.615576 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env/"] [unique_id "amsms5M8sfhbdUvakawJiQAAAAE"]
[Thu Jul 30 11:25:55.615736 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env/"] [unique_id "amsms5M8sfhbdUvakawJiQAAAAE"]
[Thu Jul 30 11:25:55.631952 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env;"] [unique_id "amsms5M8sfhbdUvakawJigAAAAE"]
[Thu Jul 30 11:25:55.632114 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env;"] [unique_id "amsms5M8sfhbdUvakawJigAAAAE"]
[Thu Jul 30 11:25:55.632273 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env;"] [unique_id "amsms5M8sfhbdUvakawJigAAAAE"]
[Thu Jul 30 11:25:55.648639 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env;.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env;.css"] [unique_id "amsms5M8sfhbdUvakawJiwAAAAE"]
[Thu Jul 30 11:25:55.648810 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env;.css"] [unique_id "amsms5M8sfhbdUvakawJiwAAAAE"]
[Thu Jul 30 11:25:55.648981 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env;.css"] [unique_id "amsms5M8sfhbdUvakawJiwAAAAE"]
[Thu Jul 30 11:25:55.665319 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJjAAAAAE"]
[Thu Jul 30 11:25:55.665466 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJjAAAAAE"]
[Thu Jul 30 11:25:55.665640 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws/.env"] [unique_id "amsms5M8sfhbdUvakawJjAAAAAE"]
[Thu Jul 30 11:25:55.681871 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms5M8sfhbdUvakawJjQAAAAE"]
[Thu Jul 30 11:25:55.682022 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms5M8sfhbdUvakawJjQAAAAE"]
[Thu Jul 30 11:25:55.682198 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/aws;/.env"] [unique_id "amsms5M8sfhbdUvakawJjQAAAAE"]
[Thu Jul 30 11:25:55.698639 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.html/../.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/index.html/..;/.env"] [unique_id "amsms5M8sfhbdUvakawJjgAAAAE"]
[Thu Jul 30 11:25:55.698702 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /index.html/..;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/index.html/..;/.env"] [unique_id "amsms5M8sfhbdUvakawJjgAAAAE"]
[Thu Jul 30 11:25:55.698837 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/index.html/..;/.env"] [unique_id "amsms5M8sfhbdUvakawJjgAAAAE"]
[Thu Jul 30 11:25:55.699003 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/index.html/..;/.env"] [unique_id "amsms5M8sfhbdUvakawJjgAAAAE"]
[Thu Jul 30 11:25:55.731579 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /robots.txt/../.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/robots.txt/..;/.aws/credentials"] [unique_id "amsms5M8sfhbdUvakawJkAAAAAE"]
[Thu Jul 30 11:25:55.731774 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/robots.txt/..;/.aws/credentials"] [unique_id "amsms5M8sfhbdUvakawJkAAAAAE"]
[Thu Jul 30 11:25:55.731937 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/robots.txt/..;/.aws/credentials"] [unique_id "amsms5M8sfhbdUvakawJkAAAAAE"]
[Thu Jul 30 11:25:55.748476 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /robots.txt/../sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/robots.txt/..;/sendgrid/.env"] [unique_id "amsms5M8sfhbdUvakawJkQAAAAE"]
[Thu Jul 30 11:25:55.748554 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /robots.txt/..;/sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/robots.txt/..;/sendgrid/.env"] [unique_id "amsms5M8sfhbdUvakawJkQAAAAE"]
[Thu Jul 30 11:25:55.748713 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/robots.txt/..;/sendgrid/.env"] [unique_id "amsms5M8sfhbdUvakawJkQAAAAE"]
[Thu Jul 30 11:25:55.748892 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/robots.txt/..;/sendgrid/.env"] [unique_id "amsms5M8sfhbdUvakawJkQAAAAE"]
[Thu Jul 30 11:25:55.798100 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsms5M8sfhbdUvakawJlAAAAAE"]
[Thu Jul 30 11:25:55.798276 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsms5M8sfhbdUvakawJlAAAAAE"]
[Thu Jul 30 11:25:55.798443 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsms5M8sfhbdUvakawJlAAAAAE"]
[Thu Jul 30 11:25:55.814764 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsms5M8sfhbdUvakawJlQAAAAE"]
[Thu Jul 30 11:25:55.814888 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsms5M8sfhbdUvakawJlQAAAAE"]
[Thu Jul 30 11:25:55.815052 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsms5M8sfhbdUvakawJlQAAAAE"]
[Thu Jul 30 11:25:55.831306 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3./.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3./.env"] [unique_id "amsms5M8sfhbdUvakawJlgAAAAE"]
[Thu Jul 30 11:25:55.831440 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3./.env"] [unique_id "amsms5M8sfhbdUvakawJlgAAAAE"]
[Thu Jul 30 11:25:55.831608 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3./.env"] [unique_id "amsms5M8sfhbdUvakawJlgAAAAE"]
[Thu Jul 30 11:25:55.847953 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/%2eenv"] [unique_id "amsms5M8sfhbdUvakawJlwAAAAE"]
[Thu Jul 30 11:25:55.848117 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/%2eenv"] [unique_id "amsms5M8sfhbdUvakawJlwAAAAE"]
[Thu Jul 30 11:25:55.848286 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/%2eenv"] [unique_id "amsms5M8sfhbdUvakawJlwAAAAE"]
[Thu Jul 30 11:25:55.864438 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsms5M8sfhbdUvakawJmAAAAAE"]
[Thu Jul 30 11:25:55.864575 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsms5M8sfhbdUvakawJmAAAAAE"]
[Thu Jul 30 11:25:55.864729 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsms5M8sfhbdUvakawJmAAAAAE"]
[Thu Jul 30 11:25:55.881054 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsms5M8sfhbdUvakawJmQAAAAE"]
[Thu Jul 30 11:25:55.881204 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsms5M8sfhbdUvakawJmQAAAAE"]
[Thu Jul 30 11:25:55.881360 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsms5M8sfhbdUvakawJmQAAAAE"]
[Thu Jul 30 11:25:55.930713 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.ENV"] [unique_id "amsms5M8sfhbdUvakawJnAAAAAE"]
[Thu Jul 30 11:25:55.930832 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.ENV"] [unique_id "amsms5M8sfhbdUvakawJnAAAAAE"]
[Thu Jul 30 11:25:55.930977 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.ENV"] [unique_id "amsms5M8sfhbdUvakawJnAAAAAE"]
[Thu Jul 30 11:25:55.947169 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.eNv"] [unique_id "amsms5M8sfhbdUvakawJnQAAAAE"]
[Thu Jul 30 11:25:55.947287 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.eNv"] [unique_id "amsms5M8sfhbdUvakawJnQAAAAE"]
[Thu Jul 30 11:25:55.947428 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.eNv"] [unique_id "amsms5M8sfhbdUvakawJnQAAAAE"]
[Thu Jul 30 11:25:56.044521 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env\\x09"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env\\t"] [unique_id "amsmtJM8sfhbdUvakawJowAAAAE"]
[Thu Jul 30 11:25:56.044717 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env\\t"] [unique_id "amsmtJM8sfhbdUvakawJowAAAAE"]
[Thu Jul 30 11:25:56.044871 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env\\t"] [unique_id "amsmtJM8sfhbdUvakawJowAAAAE"]
[Thu Jul 30 11:25:56.061408 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env\\n"] [unique_id "amsmtJM8sfhbdUvakawJpAAAAAE"]
[Thu Jul 30 11:25:56.061594 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env\\n"] [unique_id "amsmtJM8sfhbdUvakawJpAAAAAE"]
[Thu Jul 30 11:25:56.061759 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env\\n"] [unique_id "amsmtJM8sfhbdUvakawJpAAAAAE"]
[Thu Jul 30 11:25:56.078183 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env\\x0d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env\\r"] [unique_id "amsmtJM8sfhbdUvakawJpQAAAAE"]
[Thu Jul 30 11:25:56.078342 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env\\r"] [unique_id "amsmtJM8sfhbdUvakawJpQAAAAE"]
[Thu Jul 30 11:25:56.078494 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env\\r"] [unique_id "amsmtJM8sfhbdUvakawJpQAAAAE"]
[Thu Jul 30 11:25:56.094832 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env "] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env "] [unique_id "amsmtJM8sfhbdUvakawJpgAAAAE"]
[Thu Jul 30 11:25:56.094963 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env "] [unique_id "amsmtJM8sfhbdUvakawJpgAAAAE"]
[Thu Jul 30 11:25:56.095126 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env "] [unique_id "amsmtJM8sfhbdUvakawJpgAAAAE"]
[Thu Jul 30 11:25:56.111805 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env .jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env .jpg"] [unique_id "amsmtJM8sfhbdUvakawJpwAAAAE"]
[Thu Jul 30 11:25:56.111936 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env .jpg"] [unique_id "amsmtJM8sfhbdUvakawJpwAAAAE"]
[Thu Jul 30 11:25:56.112108 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env .jpg"] [unique_id "amsmtJM8sfhbdUvakawJpwAAAAE"]
[Thu Jul 30 11:25:56.128550 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env#.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env#.jpg"] [unique_id "amsmtJM8sfhbdUvakawJqAAAAAE"]
[Thu Jul 30 11:25:56.128719 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env#.jpg"] [unique_id "amsmtJM8sfhbdUvakawJqAAAAAE"]
[Thu Jul 30 11:25:56.128871 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env#.jpg"] [unique_id "amsmtJM8sfhbdUvakawJqAAAAAE"]
[Thu Jul 30 11:25:56.145746 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env;"] [unique_id "amsmtJM8sfhbdUvakawJqQAAAAE"]
[Thu Jul 30 11:25:56.145908 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env;"] [unique_id "amsmtJM8sfhbdUvakawJqQAAAAE"]
[Thu Jul 30 11:25:56.146092 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env;"] [unique_id "amsmtJM8sfhbdUvakawJqQAAAAE"]
[Thu Jul 30 11:25:56.162362 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env?.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env?.jpg"] [unique_id "amsmtJM8sfhbdUvakawJqgAAAAE"]
[Thu Jul 30 11:25:56.162504 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env?.jpg"] [unique_id "amsmtJM8sfhbdUvakawJqgAAAAE"]
[Thu Jul 30 11:25:56.162675 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env?.jpg"] [unique_id "amsmtJM8sfhbdUvakawJqgAAAAE"]
[Thu Jul 30 11:25:56.178961 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env."] [unique_id "amsmtJM8sfhbdUvakawJqwAAAAE"]
[Thu Jul 30 11:25:56.179145 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env."] [unique_id "amsmtJM8sfhbdUvakawJqwAAAAE"]
[Thu Jul 30 11:25:56.179319 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env."] [unique_id "amsmtJM8sfhbdUvakawJqwAAAAE"]
[Thu Jul 30 11:25:56.195551 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.avif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.avif"] [unique_id "amsmtJM8sfhbdUvakawJrAAAAAE"]
[Thu Jul 30 11:25:56.195687 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.avif"] [unique_id "amsmtJM8sfhbdUvakawJrAAAAAE"]
[Thu Jul 30 11:25:56.195844 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.avif"] [unique_id "amsmtJM8sfhbdUvakawJrAAAAAE"]
[Thu Jul 30 11:25:56.212191 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.bak"] [unique_id "amsmtJM8sfhbdUvakawJrQAAAAE"]
[Thu Jul 30 11:25:56.212306 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.bak"] [unique_id "amsmtJM8sfhbdUvakawJrQAAAAE"]
[Thu Jul 30 11:25:56.212467 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.bak"] [unique_id "amsmtJM8sfhbdUvakawJrQAAAAE"]
[Thu Jul 30 11:25:56.228591 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.css"] [unique_id "amsmtJM8sfhbdUvakawJrgAAAAE"]
[Thu Jul 30 11:25:56.228704 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.css"] [unique_id "amsmtJM8sfhbdUvakawJrgAAAAE"]
[Thu Jul 30 11:25:56.228848 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.css"] [unique_id "amsmtJM8sfhbdUvakawJrgAAAAE"]
[Thu Jul 30 11:25:56.245196 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.gif"] [unique_id "amsmtJM8sfhbdUvakawJrwAAAAE"]
[Thu Jul 30 11:25:56.245312 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.gif"] [unique_id "amsmtJM8sfhbdUvakawJrwAAAAE"]
[Thu Jul 30 11:25:56.245473 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.gif"] [unique_id "amsmtJM8sfhbdUvakawJrwAAAAE"]
[Thu Jul 30 11:25:56.261834 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.html"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.html"] [unique_id "amsmtJM8sfhbdUvakawJsAAAAAE"]
[Thu Jul 30 11:25:56.261952 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.html"] [unique_id "amsmtJM8sfhbdUvakawJsAAAAAE"]
[Thu Jul 30 11:25:56.262117 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.html"] [unique_id "amsmtJM8sfhbdUvakawJsAAAAAE"]
[Thu Jul 30 11:25:56.278423 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.ico"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.ico"] [unique_id "amsmtJM8sfhbdUvakawJsQAAAAE"]
[Thu Jul 30 11:25:56.278575 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.ico"] [unique_id "amsmtJM8sfhbdUvakawJsQAAAAE"]
[Thu Jul 30 11:25:56.278751 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.ico"] [unique_id "amsmtJM8sfhbdUvakawJsQAAAAE"]
[Thu Jul 30 11:25:56.294961 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.jpeg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.jpeg"] [unique_id "amsmtJM8sfhbdUvakawJsgAAAAE"]
[Thu Jul 30 11:25:56.295103 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.jpeg"] [unique_id "amsmtJM8sfhbdUvakawJsgAAAAE"]
[Thu Jul 30 11:25:56.295250 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.jpeg"] [unique_id "amsmtJM8sfhbdUvakawJsgAAAAE"]
[Thu Jul 30 11:25:56.311688 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.jpg"] [unique_id "amsmtJM8sfhbdUvakawJswAAAAE"]
[Thu Jul 30 11:25:56.311817 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.jpg"] [unique_id "amsmtJM8sfhbdUvakawJswAAAAE"]
[Thu Jul 30 11:25:56.311968 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.jpg"] [unique_id "amsmtJM8sfhbdUvakawJswAAAAE"]
[Thu Jul 30 11:25:56.328516 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.js"] [unique_id "amsmtJM8sfhbdUvakawJtAAAAAE"]
[Thu Jul 30 11:25:56.328720 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.js"] [unique_id "amsmtJM8sfhbdUvakawJtAAAAAE"]
[Thu Jul 30 11:25:56.328933 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.js"] [unique_id "amsmtJM8sfhbdUvakawJtAAAAAE"]
[Thu Jul 30 11:25:56.345253 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.map"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.map"] [unique_id "amsmtJM8sfhbdUvakawJtQAAAAE"]
[Thu Jul 30 11:25:56.345413 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.map"] [unique_id "amsmtJM8sfhbdUvakawJtQAAAAE"]
[Thu Jul 30 11:25:56.345587 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.map"] [unique_id "amsmtJM8sfhbdUvakawJtQAAAAE"]
[Thu Jul 30 11:25:56.361842 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.png"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.png"] [unique_id "amsmtJM8sfhbdUvakawJtgAAAAE"]
[Thu Jul 30 11:25:56.361973 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.png"] [unique_id "amsmtJM8sfhbdUvakawJtgAAAAE"]
[Thu Jul 30 11:25:56.362141 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.png"] [unique_id "amsmtJM8sfhbdUvakawJtgAAAAE"]
[Thu Jul 30 11:25:56.378420 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.svg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.svg"] [unique_id "amsmtJM8sfhbdUvakawJtwAAAAE"]
[Thu Jul 30 11:25:56.378583 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.svg"] [unique_id "amsmtJM8sfhbdUvakawJtwAAAAE"]
[Thu Jul 30 11:25:56.378748 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.svg"] [unique_id "amsmtJM8sfhbdUvakawJtwAAAAE"]
[Thu Jul 30 11:25:56.394933 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.txt"] [unique_id "amsmtJM8sfhbdUvakawJuAAAAAE"]
[Thu Jul 30 11:25:56.395159 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.txt"] [unique_id "amsmtJM8sfhbdUvakawJuAAAAAE"]
[Thu Jul 30 11:25:56.395321 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.txt"] [unique_id "amsmtJM8sfhbdUvakawJuAAAAAE"]
[Thu Jul 30 11:25:56.411600 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.webp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.webp"] [unique_id "amsmtJM8sfhbdUvakawJuQAAAAE"]
[Thu Jul 30 11:25:56.411758 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.webp"] [unique_id "amsmtJM8sfhbdUvakawJuQAAAAE"]
[Thu Jul 30 11:25:56.411920 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.webp"] [unique_id "amsmtJM8sfhbdUvakawJuQAAAAE"]
[Thu Jul 30 11:25:56.428048 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.woff"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env.woff"] [unique_id "amsmtJM8sfhbdUvakawJugAAAAE"]
[Thu Jul 30 11:25:56.428193 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env.woff"] [unique_id "amsmtJM8sfhbdUvakawJugAAAAE"]
[Thu Jul 30 11:25:56.428338 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env.woff"] [unique_id "amsmtJM8sfhbdUvakawJugAAAAE"]
[Thu Jul 30 11:25:56.444635 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env/"] [unique_id "amsmtJM8sfhbdUvakawJuwAAAAE"]
[Thu Jul 30 11:25:56.444759 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env/"] [unique_id "amsmtJM8sfhbdUvakawJuwAAAAE"]
[Thu Jul 30 11:25:56.444908 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env/"] [unique_id "amsmtJM8sfhbdUvakawJuwAAAAE"]
[Thu Jul 30 11:25:56.461177 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env;"] [unique_id "amsmtJM8sfhbdUvakawJvAAAAAE"]
[Thu Jul 30 11:25:56.461317 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env;"] [unique_id "amsmtJM8sfhbdUvakawJvAAAAAE"]
[Thu Jul 30 11:25:56.461471 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env;"] [unique_id "amsmtJM8sfhbdUvakawJvAAAAAE"]
[Thu Jul 30 11:25:56.477756 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env;.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env;.css"] [unique_id "amsmtJM8sfhbdUvakawJvQAAAAE"]
[Thu Jul 30 11:25:56.477886 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env;.css"] [unique_id "amsmtJM8sfhbdUvakawJvQAAAAE"]
[Thu Jul 30 11:25:56.478042 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env;.css"] [unique_id "amsmtJM8sfhbdUvakawJvQAAAAE"]
[Thu Jul 30 11:25:56.494361 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmtJM8sfhbdUvakawJvgAAAAE"]
[Thu Jul 30 11:25:56.494510 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmtJM8sfhbdUvakawJvgAAAAE"]
[Thu Jul 30 11:25:56.494679 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3/.env"] [unique_id "amsmtJM8sfhbdUvakawJvgAAAAE"]
[Thu Jul 30 11:25:56.511044 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsmtJM8sfhbdUvakawJvwAAAAE"]
[Thu Jul 30 11:25:56.511214 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsmtJM8sfhbdUvakawJvwAAAAE"]
[Thu Jul 30 11:25:56.511424 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/s3;/.env"] [unique_id "amsmtJM8sfhbdUvakawJvwAAAAE"]
[Thu Jul 30 11:25:56.542346 2026] [ssl:error] [pid 2889505:tid 2889505] (EAI 2)Name or service not known: [client 144.76.19.72:21800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:56.542383 2026] [ssl:error] [pid 2889505:tid 2889505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:56.545140 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sEnDgRiD/.eNv"] [unique_id "amsmtJM8sfhbdUvakawJwQAAAAE"]
[Thu Jul 30 11:25:56.545307 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sEnDgRiD/.eNv"] [unique_id "amsmtJM8sfhbdUvakawJwQAAAAE"]
[Thu Jul 30 11:25:56.545482 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sEnDgRiD/.eNv"] [unique_id "amsmtJM8sfhbdUvakawJwQAAAAE"]
[Thu Jul 30 11:25:56.561962 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sEnDgRiD_EmAiL/.eNv"] [unique_id "amsmtJM8sfhbdUvakawJwgAAAAE"]
[Thu Jul 30 11:25:56.562146 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sEnDgRiD_EmAiL/.eNv"] [unique_id "amsmtJM8sfhbdUvakawJwgAAAAE"]
[Thu Jul 30 11:25:56.562321 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sEnDgRiD_EmAiL/.eNv"] [unique_id "amsmtJM8sfhbdUvakawJwgAAAAE"]
[Thu Jul 30 11:25:56.578986 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sEs/.EnV"] [unique_id "amsmtJM8sfhbdUvakawJwwAAAAE"]
[Thu Jul 30 11:25:56.579222 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sEs/.EnV"] [unique_id "amsmtJM8sfhbdUvakawJwwAAAAE"]
[Thu Jul 30 11:25:56.579416 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sEs/.EnV"] [unique_id "amsmtJM8sfhbdUvakawJwwAAAAE"]
[Thu Jul 30 11:25:56.597011 2026] [ssl:error] [pid 2886477:tid 2886477] (EAI 2)Name or service not known: [client 144.76.19.72:21814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:56.597038 2026] [ssl:error] [pid 2886477:tid 2886477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:56.664161 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtJM8sfhbdUvakawJyAAAAAE"]
[Thu Jul 30 11:25:56.664383 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtJM8sfhbdUvakawJyAAAAAE"]
[Thu Jul 30 11:25:56.664617 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtJM8sfhbdUvakawJyAAAAAE"]
[Thu Jul 30 11:25:56.681028 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtJM8sfhbdUvakawJyQAAAAE"]
[Thu Jul 30 11:25:56.681244 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtJM8sfhbdUvakawJyQAAAAE"]
[Thu Jul 30 11:25:56.681438 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtJM8sfhbdUvakawJyQAAAAE"]
[Thu Jul 30 11:25:56.714873 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid./.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid./.env"] [unique_id "amsmtJM8sfhbdUvakawJywAAAAE"]
[Thu Jul 30 11:25:56.715081 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid./.env"] [unique_id "amsmtJM8sfhbdUvakawJywAAAAE"]
[Thu Jul 30 11:25:56.715302 2026] [security2:error] [pid 2891969:tid 2891969] [client 185.177.72.29:64458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid./.env"] [unique_id "amsmtJM8sfhbdUvakawJywAAAAE"]
[Thu Jul 30 11:25:57.027878 2026] [authz_core:error] [pid 2880624:tid 2880624] [client 82.102.18.190:60074] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/SimplePie/src/error_log
[Thu Jul 30 11:25:57.348470 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/%2eenv"] [unique_id "amsmtZF-9bw6u2hL5Y-uCAAAAAA"]
[Thu Jul 30 11:25:57.348644 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/%2eenv"] [unique_id "amsmtZF-9bw6u2hL5Y-uCAAAAAA"]
[Thu Jul 30 11:25:57.348852 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/%2eenv"] [unique_id "amsmtZF-9bw6u2hL5Y-uCAAAAAA"]
[Thu Jul 30 11:25:57.366094 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uCQAAAAA"]
[Thu Jul 30 11:25:57.366247 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uCQAAAAA"]
[Thu Jul 30 11:25:57.366419 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uCQAAAAA"]
[Thu Jul 30 11:25:57.383625 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uCgAAAAA"]
[Thu Jul 30 11:25:57.383761 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uCgAAAAA"]
[Thu Jul 30 11:25:57.383915 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uCgAAAAA"]
[Thu Jul 30 11:25:57.436558 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%252f found within REQUEST_URI_RAW: /sendgrid/..%252fsendgrid%252f.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/sendgrid/..%2fsendgrid%2f.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDQAAAAA"]
[Thu Jul 30 11:25:57.436620 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /sendgrid/../sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/sendgrid/..%2fsendgrid%2f.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDQAAAAA"]
[Thu Jul 30 11:25:57.436646 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /sendgrid/../sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/sendgrid/..%2fsendgrid%2f.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDQAAAAA"]
[Thu Jul 30 11:25:57.436690 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/..%2fsendgrid%2f.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDQAAAAA"]
[Thu Jul 30 11:25:57.436828 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/..%2fsendgrid%2f.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDQAAAAA"]
[Thu Jul 30 11:25:57.437013 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 20 - SQLI=0,XSS=0,RFI=0,LFI=20,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/..%2fsendgrid%2f.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDQAAAAA"]
[Thu Jul 30 11:25:57.454634 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /sendgrid/../sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/sendgrid/..;/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDgAAAAA"]
[Thu Jul 30 11:25:57.454698 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/..;/sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/..;/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDgAAAAA"]
[Thu Jul 30 11:25:57.454857 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/..;/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDgAAAAA"]
[Thu Jul 30 11:25:57.455025 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/..;/sendgrid/.env"] [unique_id "amsmtZF-9bw6u2hL5Y-uDgAAAAA"]
[Thu Jul 30 11:25:57.558575 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env\\x09"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\t"] [unique_id "amsmtZF-9bw6u2hL5Y-uFAAAAAA"]
[Thu Jul 30 11:25:57.558750 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\t"] [unique_id "amsmtZF-9bw6u2hL5Y-uFAAAAAA"]
[Thu Jul 30 11:25:57.558950 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\t"] [unique_id "amsmtZF-9bw6u2hL5Y-uFAAAAAA"]
[Thu Jul 30 11:25:57.576375 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\n"] [unique_id "amsmtZF-9bw6u2hL5Y-uFQAAAAA"]
[Thu Jul 30 11:25:57.576561 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\n"] [unique_id "amsmtZF-9bw6u2hL5Y-uFQAAAAA"]
[Thu Jul 30 11:25:57.576735 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\n"] [unique_id "amsmtZF-9bw6u2hL5Y-uFQAAAAA"]
[Thu Jul 30 11:25:57.594187 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env\\x0d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\r"] [unique_id "amsmtZF-9bw6u2hL5Y-uFgAAAAA"]
[Thu Jul 30 11:25:57.594368 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\r"] [unique_id "amsmtZF-9bw6u2hL5Y-uFgAAAAA"]
[Thu Jul 30 11:25:57.594565 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\r"] [unique_id "amsmtZF-9bw6u2hL5Y-uFgAAAAA"]
[Thu Jul 30 11:25:57.611964 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env "] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env "] [unique_id "amsmtZF-9bw6u2hL5Y-uFwAAAAA"]
[Thu Jul 30 11:25:57.612156 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env "] [unique_id "amsmtZF-9bw6u2hL5Y-uFwAAAAA"]
[Thu Jul 30 11:25:57.612346 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env "] [unique_id "amsmtZF-9bw6u2hL5Y-uFwAAAAA"]
[Thu Jul 30 11:25:57.631417 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env .jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env .jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uGAAAAAA"]
[Thu Jul 30 11:25:57.631603 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env .jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uGAAAAAA"]
[Thu Jul 30 11:25:57.631823 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env .jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uGAAAAAA"]
[Thu Jul 30 11:25:57.649200 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env#.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env#.jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uGQAAAAA"]
[Thu Jul 30 11:25:57.649365 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env#.jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uGQAAAAA"]
[Thu Jul 30 11:25:57.649556 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env#.jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uGQAAAAA"]
[Thu Jul 30 11:25:57.666774 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env."] [unique_id "amsmtZF-9bw6u2hL5Y-uGgAAAAA"]
[Thu Jul 30 11:25:57.666939 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env."] [unique_id "amsmtZF-9bw6u2hL5Y-uGgAAAAA"]
[Thu Jul 30 11:25:57.667126 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env."] [unique_id "amsmtZF-9bw6u2hL5Y-uGgAAAAA"]
[Thu Jul 30 11:25:57.684748 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;"] [unique_id "amsmtZF-9bw6u2hL5Y-uGwAAAAA"]
[Thu Jul 30 11:25:57.684976 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;"] [unique_id "amsmtZF-9bw6u2hL5Y-uGwAAAAA"]
[Thu Jul 30 11:25:57.685250 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;"] [unique_id "amsmtZF-9bw6u2hL5Y-uGwAAAAA"]
[Thu Jul 30 11:25:57.702915 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env?.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env?.jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uHAAAAAA"]
[Thu Jul 30 11:25:57.703175 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env?.jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uHAAAAAA"]
[Thu Jul 30 11:25:57.703441 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env?.jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uHAAAAAA"]
[Thu Jul 30 11:25:57.720779 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env\\x02jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\xe3\\x80\\x82jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uHQAAAAA"]
[Thu Jul 30 11:25:57.720957 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\xe3\\x80\\x82jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uHQAAAAA"]
[Thu Jul 30 11:25:57.721150 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env\\xe3\\x80\\x82jpg"] [unique_id "amsmtZF-9bw6u2hL5Y-uHQAAAAA"]
[Thu Jul 30 11:25:57.738832 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env."] [unique_id "amsmtZF-9bw6u2hL5Y-uHgAAAAA"]
[Thu Jul 30 11:25:57.739105 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env."] [unique_id "amsmtZF-9bw6u2hL5Y-uHgAAAAA"]
[Thu Jul 30 11:25:57.739372 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env."] [unique_id "amsmtZF-9bw6u2hL5Y-uHgAAAAA"]
[Thu Jul 30 11:25:57.756831 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env./"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env./"] [unique_id "amsmtZF-9bw6u2hL5Y-uHwAAAAA"]
[Thu Jul 30 11:25:57.757001 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env./"] [unique_id "amsmtZF-9bw6u2hL5Y-uHwAAAAA"]
[Thu Jul 30 11:25:57.757198 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env./"] [unique_id "amsmtZF-9bw6u2hL5Y-uHwAAAAA"]
[Thu Jul 30 11:25:57.774690 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.avif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.avif"] [unique_id "amsmtZF-9bw6u2hL5Y-uIAAAAAA"]
[Thu Jul 30 11:25:57.774894 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.avif"] [unique_id "amsmtZF-9bw6u2hL5Y-uIAAAAAA"]
[Thu Jul 30 11:25:57.775095 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.avif"] [unique_id "amsmtZF-9bw6u2hL5Y-uIAAAAAA"]
[Thu Jul 30 11:25:57.792421 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.css"] [unique_id "amsmtZF-9bw6u2hL5Y-uIQAAAAA"]
[Thu Jul 30 11:25:57.792599 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.css"] [unique_id "amsmtZF-9bw6u2hL5Y-uIQAAAAA"]
[Thu Jul 30 11:25:57.792818 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.css"] [unique_id "amsmtZF-9bw6u2hL5Y-uIQAAAAA"]
[Thu Jul 30 11:25:57.810230 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.gif"] [unique_id "amsmtZF-9bw6u2hL5Y-uIgAAAAA"]
[Thu Jul 30 11:25:57.810391 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.gif"] [unique_id "amsmtZF-9bw6u2hL5Y-uIgAAAAA"]
[Thu Jul 30 11:25:57.810573 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.gif"] [unique_id "amsmtZF-9bw6u2hL5Y-uIgAAAAA"]
[Thu Jul 30 11:25:57.828181 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.html"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.html"] [unique_id "amsmtZF-9bw6u2hL5Y-uIwAAAAA"]
[Thu Jul 30 11:25:57.828344 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.html"] [unique_id "amsmtZF-9bw6u2hL5Y-uIwAAAAA"]
[Thu Jul 30 11:25:57.828599 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.html"] [unique_id "amsmtZF-9bw6u2hL5Y-uIwAAAAA"]
[Thu Jul 30 11:25:57.846494 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.ico"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.ico"] [unique_id "amsmtZF-9bw6u2hL5Y-uJAAAAAA"]
[Thu Jul 30 11:25:57.846778 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.ico"] [unique_id "amsmtZF-9bw6u2hL5Y-uJAAAAAA"]
[Thu Jul 30 11:25:57.847138 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.ico"] [unique_id "amsmtZF-9bw6u2hL5Y-uJAAAAAA"]
[Thu Jul 30 11:25:57.864809 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.jpeg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.jpeg"] [unique_id "amsmtZF-9bw6u2hL5Y-uJQAAAAA"]
[Thu Jul 30 11:25:57.865091 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.jpeg"] [unique_id "amsmtZF-9bw6u2hL5Y-uJQAAAAA"]
[Thu Jul 30 11:25:57.865369 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.jpeg"] [unique_id "amsmtZF-9bw6u2hL5Y-uJQAAAAA"]
[Thu Jul 30 11:25:57.882721 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.js"] [unique_id "amsmtZF-9bw6u2hL5Y-uJgAAAAA"]
[Thu Jul 30 11:25:57.882903 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.js"] [unique_id "amsmtZF-9bw6u2hL5Y-uJgAAAAA"]
[Thu Jul 30 11:25:57.883104 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.js"] [unique_id "amsmtZF-9bw6u2hL5Y-uJgAAAAA"]
[Thu Jul 30 11:25:57.900510 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.map"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.map"] [unique_id "amsmtZF-9bw6u2hL5Y-uJwAAAAA"]
[Thu Jul 30 11:25:57.900706 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.map"] [unique_id "amsmtZF-9bw6u2hL5Y-uJwAAAAA"]
[Thu Jul 30 11:25:57.900910 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.map"] [unique_id "amsmtZF-9bw6u2hL5Y-uJwAAAAA"]
[Thu Jul 30 11:25:57.918270 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.png"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.png"] [unique_id "amsmtZF-9bw6u2hL5Y-uKAAAAAA"]
[Thu Jul 30 11:25:57.918404 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.png"] [unique_id "amsmtZF-9bw6u2hL5Y-uKAAAAAA"]
[Thu Jul 30 11:25:57.918607 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.png"] [unique_id "amsmtZF-9bw6u2hL5Y-uKAAAAAA"]
[Thu Jul 30 11:25:57.935780 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.svg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.svg"] [unique_id "amsmtZF-9bw6u2hL5Y-uKQAAAAA"]
[Thu Jul 30 11:25:57.935911 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.svg"] [unique_id "amsmtZF-9bw6u2hL5Y-uKQAAAAA"]
[Thu Jul 30 11:25:57.936088 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.svg"] [unique_id "amsmtZF-9bw6u2hL5Y-uKQAAAAA"]
[Thu Jul 30 11:25:57.959710 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.webp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.webp"] [unique_id "amsmtZF-9bw6u2hL5Y-uKgAAAAA"]
[Thu Jul 30 11:25:57.959900 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.webp"] [unique_id "amsmtZF-9bw6u2hL5Y-uKgAAAAA"]
[Thu Jul 30 11:25:57.960114 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.webp"] [unique_id "amsmtZF-9bw6u2hL5Y-uKgAAAAA"]
[Thu Jul 30 11:25:57.977511 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env.woff"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.woff"] [unique_id "amsmtZF-9bw6u2hL5Y-uKwAAAAA"]
[Thu Jul 30 11:25:57.977692 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.woff"] [unique_id "amsmtZF-9bw6u2hL5Y-uKwAAAAA"]
[Thu Jul 30 11:25:57.977880 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env.woff"] [unique_id "amsmtZF-9bw6u2hL5Y-uKwAAAAA"]
[Thu Jul 30 11:25:57.995330 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env/"] [unique_id "amsmtZF-9bw6u2hL5Y-uLAAAAAA"]
[Thu Jul 30 11:25:57.995499 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env/"] [unique_id "amsmtZF-9bw6u2hL5Y-uLAAAAAA"]
[Thu Jul 30 11:25:57.995708 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env/"] [unique_id "amsmtZF-9bw6u2hL5Y-uLAAAAAA"]
[Thu Jul 30 11:25:58.013206 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;"] [unique_id "amsmtpF-9bw6u2hL5Y-uLQAAAAA"]
[Thu Jul 30 11:25:58.013386 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;"] [unique_id "amsmtpF-9bw6u2hL5Y-uLQAAAAA"]
[Thu Jul 30 11:25:58.013589 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;"] [unique_id "amsmtpF-9bw6u2hL5Y-uLQAAAAA"]
[Thu Jul 30 11:25:58.031427 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env;.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;.css"] [unique_id "amsmtpF-9bw6u2hL5Y-uLgAAAAA"]
[Thu Jul 30 11:25:58.031719 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;.css"] [unique_id "amsmtpF-9bw6u2hL5Y-uLgAAAAA"]
[Thu Jul 30 11:25:58.031992 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env;.css"] [unique_id "amsmtpF-9bw6u2hL5Y-uLgAAAAA"]
[Thu Jul 30 11:25:58.049412 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uLwAAAAA"]
[Thu Jul 30 11:25:58.049590 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uLwAAAAA"]
[Thu Jul 30 11:25:58.049788 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uLwAAAAA"]
[Thu Jul 30 11:25:58.068275 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMAAAAAA"]
[Thu Jul 30 11:25:58.068462 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMAAAAAA"]
[Thu Jul 30 11:25:58.068661 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/sendgrid;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMAAAAAA"]
[Thu Jul 30 11:25:58.086152 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMQAAAAA"]
[Thu Jul 30 11:25:58.086385 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMQAAAAA"]
[Thu Jul 30 11:25:58.086639 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMQAAAAA"]
[Thu Jul 30 11:25:58.103977 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMgAAAAA"]
[Thu Jul 30 11:25:58.104158 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMgAAAAA"]
[Thu Jul 30 11:25:58.104329 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMgAAAAA"]
[Thu Jul 30 11:25:58.121997 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses./.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses./.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMwAAAAA"]
[Thu Jul 30 11:25:58.122197 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses./.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMwAAAAA"]
[Thu Jul 30 11:25:58.122391 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses./.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uMwAAAAA"]
[Thu Jul 30 11:25:58.139809 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/%2eenv"] [unique_id "amsmtpF-9bw6u2hL5Y-uNAAAAAA"]
[Thu Jul 30 11:25:58.139982 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/%2eenv"] [unique_id "amsmtpF-9bw6u2hL5Y-uNAAAAAA"]
[Thu Jul 30 11:25:58.140187 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/%2eenv"] [unique_id "amsmtpF-9bw6u2hL5Y-uNAAAAAA"]
[Thu Jul 30 11:25:58.157768 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uNQAAAAA"]
[Thu Jul 30 11:25:58.158021 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uNQAAAAA"]
[Thu Jul 30 11:25:58.158330 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uNQAAAAA"]
[Thu Jul 30 11:25:58.176288 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uNgAAAAA"]
[Thu Jul 30 11:25:58.176552 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uNgAAAAA"]
[Thu Jul 30 11:25:58.176819 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmtpF-9bw6u2hL5Y-uNgAAAAA"]
[Thu Jul 30 11:25:58.230012 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.ENV"] [unique_id "amsmtpF-9bw6u2hL5Y-uOQAAAAA"]
[Thu Jul 30 11:25:58.230189 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.ENV"] [unique_id "amsmtpF-9bw6u2hL5Y-uOQAAAAA"]
[Thu Jul 30 11:25:58.230363 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.ENV"] [unique_id "amsmtpF-9bw6u2hL5Y-uOQAAAAA"]
[Thu Jul 30 11:25:58.338644 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env\\x09"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env\\t"] [unique_id "amsmtpF-9bw6u2hL5Y-uPwAAAAA"]
[Thu Jul 30 11:25:58.338908 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env\\t"] [unique_id "amsmtpF-9bw6u2hL5Y-uPwAAAAA"]
[Thu Jul 30 11:25:58.339197 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env\\t"] [unique_id "amsmtpF-9bw6u2hL5Y-uPwAAAAA"]
[Thu Jul 30 11:25:58.357195 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env\\n"] [unique_id "amsmtpF-9bw6u2hL5Y-uQAAAAAA"]
[Thu Jul 30 11:25:58.357501 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env\\n"] [unique_id "amsmtpF-9bw6u2hL5Y-uQAAAAAA"]
[Thu Jul 30 11:25:58.357836 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env\\n"] [unique_id "amsmtpF-9bw6u2hL5Y-uQAAAAAA"]
[Thu Jul 30 11:25:58.375642 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env\\x0d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env\\r"] [unique_id "amsmtpF-9bw6u2hL5Y-uQQAAAAA"]
[Thu Jul 30 11:25:58.375909 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env\\r"] [unique_id "amsmtpF-9bw6u2hL5Y-uQQAAAAA"]
[Thu Jul 30 11:25:58.376213 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env\\r"] [unique_id "amsmtpF-9bw6u2hL5Y-uQQAAAAA"]
[Thu Jul 30 11:25:58.393621 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env "] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env "] [unique_id "amsmtpF-9bw6u2hL5Y-uQgAAAAA"]
[Thu Jul 30 11:25:58.393835 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env "] [unique_id "amsmtpF-9bw6u2hL5Y-uQgAAAAA"]
[Thu Jul 30 11:25:58.394037 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env "] [unique_id "amsmtpF-9bw6u2hL5Y-uQgAAAAA"]
[Thu Jul 30 11:25:58.411794 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env .jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env .jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uQwAAAAA"]
[Thu Jul 30 11:25:58.411942 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env .jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uQwAAAAA"]
[Thu Jul 30 11:25:58.412127 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env .jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uQwAAAAA"]
[Thu Jul 30 11:25:58.429334 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env#.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env#.jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uRAAAAAA"]
[Thu Jul 30 11:25:58.429487 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env#.jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uRAAAAAA"]
[Thu Jul 30 11:25:58.429663 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env#.jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uRAAAAAA"]
[Thu Jul 30 11:25:58.446796 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env;"] [unique_id "amsmtpF-9bw6u2hL5Y-uRQAAAAA"]
[Thu Jul 30 11:25:58.446932 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env;"] [unique_id "amsmtpF-9bw6u2hL5Y-uRQAAAAA"]
[Thu Jul 30 11:25:58.447112 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env;"] [unique_id "amsmtpF-9bw6u2hL5Y-uRQAAAAA"]
[Thu Jul 30 11:25:58.464260 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env?.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env?.jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uRgAAAAA"]
[Thu Jul 30 11:25:58.464401 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env?.jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uRgAAAAA"]
[Thu Jul 30 11:25:58.464572 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env?.jpg"] [unique_id "amsmtpF-9bw6u2hL5Y-uRgAAAAA"]
[Thu Jul 30 11:25:58.481747 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env."] [unique_id "amsmtpF-9bw6u2hL5Y-uRwAAAAA"]
[Thu Jul 30 11:25:58.481885 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env."] [unique_id "amsmtpF-9bw6u2hL5Y-uRwAAAAA"]
[Thu Jul 30 11:25:58.482043 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env."] [unique_id "amsmtpF-9bw6u2hL5Y-uRwAAAAA"]
[Thu Jul 30 11:25:58.499317 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.avif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.avif"] [unique_id "amsmtpF-9bw6u2hL5Y-uSAAAAAA"]
[Thu Jul 30 11:25:58.499475 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.avif"] [unique_id "amsmtpF-9bw6u2hL5Y-uSAAAAAA"]
[Thu Jul 30 11:25:58.499669 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.avif"] [unique_id "amsmtpF-9bw6u2hL5Y-uSAAAAAA"]
[Thu Jul 30 11:25:58.516815 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.bak"] [unique_id "amsmtpF-9bw6u2hL5Y-uSQAAAAA"]
[Thu Jul 30 11:25:58.516967 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.bak"] [unique_id "amsmtpF-9bw6u2hL5Y-uSQAAAAA"]
[Thu Jul 30 11:25:58.517163 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.bak"] [unique_id "amsmtpF-9bw6u2hL5Y-uSQAAAAA"]
[Thu Jul 30 11:25:58.534391 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.css"] [unique_id "amsmtpF-9bw6u2hL5Y-uSgAAAAA"]
[Thu Jul 30 11:25:58.534527 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.css"] [unique_id "amsmtpF-9bw6u2hL5Y-uSgAAAAA"]
[Thu Jul 30 11:25:58.534704 2026] [security2:error] [pid 2872090:tid 2872090] [client 185.177.72.29:37132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.css"] [unique_id "amsmtpF-9bw6u2hL5Y-uSgAAAAA"]
[Thu Jul 30 11:25:58.569101 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.gif"] [unique_id "amsmttl67kgWQMVF6hjToAAAACQ"]
[Thu Jul 30 11:25:58.569286 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.gif"] [unique_id "amsmttl67kgWQMVF6hjToAAAACQ"]
[Thu Jul 30 11:25:58.569491 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.gif"] [unique_id "amsmttl67kgWQMVF6hjToAAAACQ"]
[Thu Jul 30 11:25:58.586904 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.html"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.html"] [unique_id "amsmttl67kgWQMVF6hjToQAAACQ"]
[Thu Jul 30 11:25:58.587079 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.html"] [unique_id "amsmttl67kgWQMVF6hjToQAAACQ"]
[Thu Jul 30 11:25:58.587289 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.html"] [unique_id "amsmttl67kgWQMVF6hjToQAAACQ"]
[Thu Jul 30 11:25:58.604747 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.ico"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.ico"] [unique_id "amsmttl67kgWQMVF6hjTogAAACQ"]
[Thu Jul 30 11:25:58.604939 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.ico"] [unique_id "amsmttl67kgWQMVF6hjTogAAACQ"]
[Thu Jul 30 11:25:58.605138 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.ico"] [unique_id "amsmttl67kgWQMVF6hjTogAAACQ"]
[Thu Jul 30 11:25:58.623240 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.jpeg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.jpeg"] [unique_id "amsmttl67kgWQMVF6hjTowAAACQ"]
[Thu Jul 30 11:25:58.623475 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.jpeg"] [unique_id "amsmttl67kgWQMVF6hjTowAAACQ"]
[Thu Jul 30 11:25:58.623722 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.jpeg"] [unique_id "amsmttl67kgWQMVF6hjTowAAACQ"]
[Thu Jul 30 11:25:58.641141 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.jpg"] [unique_id "amsmttl67kgWQMVF6hjTpAAAACQ"]
[Thu Jul 30 11:25:58.641308 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.jpg"] [unique_id "amsmttl67kgWQMVF6hjTpAAAACQ"]
[Thu Jul 30 11:25:58.641514 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.jpg"] [unique_id "amsmttl67kgWQMVF6hjTpAAAACQ"]
[Thu Jul 30 11:25:58.658975 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.js"] [unique_id "amsmttl67kgWQMVF6hjTpQAAACQ"]
[Thu Jul 30 11:25:58.659193 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.js"] [unique_id "amsmttl67kgWQMVF6hjTpQAAACQ"]
[Thu Jul 30 11:25:58.659408 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.js"] [unique_id "amsmttl67kgWQMVF6hjTpQAAACQ"]
[Thu Jul 30 11:25:58.678562 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.map"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.map"] [unique_id "amsmttl67kgWQMVF6hjTpgAAACQ"]
[Thu Jul 30 11:25:58.678779 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.map"] [unique_id "amsmttl67kgWQMVF6hjTpgAAACQ"]
[Thu Jul 30 11:25:58.678994 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.map"] [unique_id "amsmttl67kgWQMVF6hjTpgAAACQ"]
[Thu Jul 30 11:25:58.700897 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.png"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.png"] [unique_id "amsmttl67kgWQMVF6hjTpwAAACQ"]
[Thu Jul 30 11:25:58.701134 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.png"] [unique_id "amsmttl67kgWQMVF6hjTpwAAACQ"]
[Thu Jul 30 11:25:58.701352 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.png"] [unique_id "amsmttl67kgWQMVF6hjTpwAAACQ"]
[Thu Jul 30 11:25:58.718797 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.svg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.svg"] [unique_id "amsmttl67kgWQMVF6hjTqAAAACQ"]
[Thu Jul 30 11:25:58.718988 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.svg"] [unique_id "amsmttl67kgWQMVF6hjTqAAAACQ"]
[Thu Jul 30 11:25:58.719200 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.svg"] [unique_id "amsmttl67kgWQMVF6hjTqAAAACQ"]
[Thu Jul 30 11:25:58.736808 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.txt"] [unique_id "amsmttl67kgWQMVF6hjTqQAAACQ"]
[Thu Jul 30 11:25:58.737003 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.txt"] [unique_id "amsmttl67kgWQMVF6hjTqQAAACQ"]
[Thu Jul 30 11:25:58.737218 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.txt"] [unique_id "amsmttl67kgWQMVF6hjTqQAAACQ"]
[Thu Jul 30 11:25:58.754806 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.webp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.webp"] [unique_id "amsmttl67kgWQMVF6hjTqgAAACQ"]
[Thu Jul 30 11:25:58.755029 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.webp"] [unique_id "amsmttl67kgWQMVF6hjTqgAAACQ"]
[Thu Jul 30 11:25:58.755271 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.webp"] [unique_id "amsmttl67kgWQMVF6hjTqgAAACQ"]
[Thu Jul 30 11:25:58.772710 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env.woff"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env.woff"] [unique_id "amsmttl67kgWQMVF6hjTqwAAACQ"]
[Thu Jul 30 11:25:58.772902 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env.woff"] [unique_id "amsmttl67kgWQMVF6hjTqwAAACQ"]
[Thu Jul 30 11:25:58.773115 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env.woff"] [unique_id "amsmttl67kgWQMVF6hjTqwAAACQ"]
[Thu Jul 30 11:25:58.790757 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env/"] [unique_id "amsmttl67kgWQMVF6hjTrAAAACQ"]
[Thu Jul 30 11:25:58.790954 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env/"] [unique_id "amsmttl67kgWQMVF6hjTrAAAACQ"]
[Thu Jul 30 11:25:58.791161 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env/"] [unique_id "amsmttl67kgWQMVF6hjTrAAAACQ"]
[Thu Jul 30 11:25:58.808710 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env;"] [unique_id "amsmttl67kgWQMVF6hjTrQAAACQ"]
[Thu Jul 30 11:25:58.808917 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env;"] [unique_id "amsmttl67kgWQMVF6hjTrQAAACQ"]
[Thu Jul 30 11:25:58.809140 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env;"] [unique_id "amsmttl67kgWQMVF6hjTrQAAACQ"]
[Thu Jul 30 11:25:58.826512 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env;.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env;.css"] [unique_id "amsmttl67kgWQMVF6hjTrgAAACQ"]
[Thu Jul 30 11:25:58.826714 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env;.css"] [unique_id "amsmttl67kgWQMVF6hjTrgAAACQ"]
[Thu Jul 30 11:25:58.826909 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env;.css"] [unique_id "amsmttl67kgWQMVF6hjTrgAAACQ"]
[Thu Jul 30 11:25:58.844360 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmttl67kgWQMVF6hjTrwAAACQ"]
[Thu Jul 30 11:25:58.844563 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmttl67kgWQMVF6hjTrwAAACQ"]
[Thu Jul 30 11:25:58.844756 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses/.env"] [unique_id "amsmttl67kgWQMVF6hjTrwAAACQ"]
[Thu Jul 30 11:25:58.862375 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmttl67kgWQMVF6hjTsAAAACQ"]
[Thu Jul 30 11:25:58.862622 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmttl67kgWQMVF6hjTsAAAACQ"]
[Thu Jul 30 11:25:58.862843 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/ses;/.env"] [unique_id "amsmttl67kgWQMVF6hjTsAAAACQ"]
[Thu Jul 30 11:25:58.898007 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%5c found within REQUEST_URI_RAW: /static/..%5c.aws%5ccredentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..\\\\.aws\\\\credentials"] [unique_id "amsmttl67kgWQMVF6hjTsgAAACQ"]
[Thu Jul 30 11:25:58.898103 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "..\\\\" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ..\\x5c found within REQUEST_URI: /static/..\\x5c.aws\\x5ccredentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..\\\\.aws\\\\credentials"] [unique_id "amsmttl67kgWQMVF6hjTsgAAACQ"]
[Thu Jul 30 11:25:58.898348 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/static/..\\\\.aws\\\\credentials"] [unique_id "amsmttl67kgWQMVF6hjTsgAAACQ"]
[Thu Jul 30 11:25:58.898580 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/static/..\\\\.aws\\\\credentials"] [unique_id "amsmttl67kgWQMVF6hjTsgAAACQ"]
[Thu Jul 30 11:25:58.916167 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%5c found within REQUEST_URI_RAW: /static/..%5csendgrid%5c.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..\\\\sendgrid\\\\.env"] [unique_id "amsmttl67kgWQMVF6hjTswAAACQ"]
[Thu Jul 30 11:25:58.916237 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "..\\\\" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ..\\x5c found within REQUEST_URI: /static/..\\x5csendgrid\\x5c.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..\\\\sendgrid\\\\.env"] [unique_id "amsmttl67kgWQMVF6hjTswAAACQ"]
[Thu Jul 30 11:25:58.916292 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/static/..\\\\sendgrid\\\\.env"] [unique_id "amsmttl67kgWQMVF6hjTswAAACQ"]
[Thu Jul 30 11:25:58.916500 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/static/..\\\\sendgrid\\\\.env"] [unique_id "amsmttl67kgWQMVF6hjTswAAACQ"]
[Thu Jul 30 11:25:58.916729 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/static/..\\\\sendgrid\\\\.env"] [unique_id "amsmttl67kgWQMVF6hjTswAAACQ"]
[Thu Jul 30 11:25:58.934237 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /static/../.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..;/.aws/credentials"] [unique_id "amsmttl67kgWQMVF6hjTtAAAACQ"]
[Thu Jul 30 11:25:58.934512 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/static/..;/.aws/credentials"] [unique_id "amsmttl67kgWQMVF6hjTtAAAACQ"]
[Thu Jul 30 11:25:58.934743 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/static/..;/.aws/credentials"] [unique_id "amsmttl67kgWQMVF6hjTtAAAACQ"]
[Thu Jul 30 11:25:58.952236 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /static/../.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..;/.env"] [unique_id "amsmttl67kgWQMVF6hjTtQAAACQ"]
[Thu Jul 30 11:25:58.952312 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/..;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/static/..;/.env"] [unique_id "amsmttl67kgWQMVF6hjTtQAAACQ"]
[Thu Jul 30 11:25:58.952506 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/static/..;/.env"] [unique_id "amsmttl67kgWQMVF6hjTtQAAACQ"]
[Thu Jul 30 11:25:58.952741 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/static/..;/.env"] [unique_id "amsmttl67kgWQMVF6hjTtQAAACQ"]
[Thu Jul 30 11:25:58.970319 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /static/../aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..;/aws/.env"] [unique_id "amsmttl67kgWQMVF6hjTtgAAACQ"]
[Thu Jul 30 11:25:58.970394 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/..;/aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/static/..;/aws/.env"] [unique_id "amsmttl67kgWQMVF6hjTtgAAACQ"]
[Thu Jul 30 11:25:58.970618 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/static/..;/aws/.env"] [unique_id "amsmttl67kgWQMVF6hjTtgAAACQ"]
[Thu Jul 30 11:25:58.970882 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/static/..;/aws/.env"] [unique_id "amsmttl67kgWQMVF6hjTtgAAACQ"]
[Thu Jul 30 11:25:58.988372 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /static/../sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "freakorgeek.com"] [uri "/static/..;/sendgrid/.env"] [unique_id "amsmttl67kgWQMVF6hjTtwAAACQ"]
[Thu Jul 30 11:25:58.988447 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/..;/sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/static/..;/sendgrid/.env"] [unique_id "amsmttl67kgWQMVF6hjTtwAAACQ"]
[Thu Jul 30 11:25:58.988673 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/static/..;/sendgrid/.env"] [unique_id "amsmttl67kgWQMVF6hjTtwAAACQ"]
[Thu Jul 30 11:25:58.988893 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/static/..;/sendgrid/.env"] [unique_id "amsmttl67kgWQMVF6hjTtwAAACQ"]
[Thu Jul 30 11:25:59.540954 2026] [security2:error] [pid 2886477:tid 2886477] [client 35.245.138.186:33280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsmtyD1KzKFLkSfyeKJRQAAABc"]
[Thu Jul 30 11:25:59.647872 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /;/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmt9l67kgWQMVF6hjT3AAAACQ"]
[Thu Jul 30 11:25:59.648058 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmt9l67kgWQMVF6hjT3AAAACQ"]
[Thu Jul 30 11:25:59.648270 2026] [security2:error] [pid 2877508:tid 2877508] [client 185.177.72.29:37176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/;/.env"] [unique_id "amsmt9l67kgWQMVF6hjT3AAAACQ"]
[Thu Jul 30 11:25:59.649334 2026] [ssl:error] [pid 2886914:tid 2886914] (EAI 2)Name or service not known: [client 144.76.19.72:45402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:59.649365 2026] [ssl:error] [pid 2886914:tid 2886914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:59.705164 2026] [ssl:error] [pid 2889341:tid 2889341] (EAI 2)Name or service not known: [client 144.76.19.72:45412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:25:59.705203 2026] [ssl:error] [pid 2889341:tid 2889341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:25:59.914408 2026] [ssl:error] [pid 2892133:tid 2892133] (70014)End of file found: [client 216.73.216.199:15792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:00.332028 2026] [core:error] [pid 2889511:tid 2889511] (13)Permission denied: [client 216.73.216.199:10763] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS1/flags
[Thu Jul 30 11:26:00.946000 2026] [security2:error] [pid 2886477:tid 2886477] [client 110.249.202.29:40690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsmuCD1KzKFLkSfyeKJSAAAABc"]
[Thu Jul 30 11:26:00.956744 2026] [cgi:error] [pid 2889511:tid 2889511] [client 216.73.216.199:10763] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/bulk.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:26:00.956804 2026] [cgi:error] [pid 2889511:tid 2889511] [client 216.73.216.199:10763] End of script output before headers: bulk.pl
[Thu Jul 30 11:26:00.963457 2026] [security2:error] [pid 2892127:tid 2892127] [client 47.128.24.34:15242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2015-2016/SP15-16_A28-Gaza-2014-2016.pdf"] [unique_id "amsmuNhtpTijSUjN9Xr8WQAAAAU"]
[Thu Jul 30 11:26:01.397233 2026] [lsapi:warn] [pid 2886914:tid 2886914] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:26:01.832327 2026] [ssl:error] [pid 2881470:tid 2881470] (70014)End of file found: [client 216.73.216.199:47070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:02.204409 2026] [cgi:error] [pid 2875766:tid 2875766] [client 135.119.63.61:29521] AH02812: stderr from /home/josieand/public_html/www.freerangemumblings.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:26:02.763944 2026] [ssl:error] [pid 2886914:tid 2886914] (EAI 2)Name or service not known: [client 144.76.19.72:45422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:02.763980 2026] [ssl:error] [pid 2886914:tid 2886914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:02.817251 2026] [ssl:error] [pid 2886518:tid 2886518] (EAI 2)Name or service not known: [client 144.76.19.72:45430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:02.817302 2026] [ssl:error] [pid 2886518:tid 2886518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:03.860269 2026] [security2:error] [pid 2889370:tid 2889370] [client 144.124.196.93:5991] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmu8ljHoJf7L128QBF2wAAABo"]
[Thu Jul 30 11:26:03.860330 2026] [security2:error] [pid 2889370:tid 2889370] [client 144.124.196.93:5991] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmu8ljHoJf7L128QBF2wAAABo"]
[Thu Jul 30 11:26:03.860637 2026] [security2:error] [pid 2889370:tid 2889370] [client 144.124.196.93:5991] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmu8ljHoJf7L128QBF2wAAABo"]
[Thu Jul 30 11:26:05.870835 2026] [ssl:error] [pid 2872090:tid 2872090] (EAI 2)Name or service not known: [client 144.76.19.72:45436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:05.870868 2026] [ssl:error] [pid 2872090:tid 2872090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:05.923874 2026] [ssl:error] [pid 2886518:tid 2886518] (EAI 2)Name or service not known: [client 144.76.19.72:45440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:05.923912 2026] [ssl:error] [pid 2886518:tid 2886518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:06.255125 2026] [ssl:error] [pid 2889511:tid 2889511] (70014)End of file found: [client 216.73.216.199:22972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:06.858015 2026] [core:error] [pid 2886477:tid 2886477] (13)Permission denied: [client 216.73.216.199:10711] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty24/subsystem/ttyS3/flags
[Thu Jul 30 11:26:07.271948 2026] [security2:error] [pid 2892019:tid 2892019] [client 181.178.238.214:60096] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmv9NUQIdJOMwiP0nCvwAAAAI"]
[Thu Jul 30 11:26:07.271997 2026] [security2:error] [pid 2892019:tid 2892019] [client 181.178.238.214:60096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmv9NUQIdJOMwiP0nCvwAAAAI"]
[Thu Jul 30 11:26:07.272296 2026] [security2:error] [pid 2892019:tid 2892019] [client 181.178.238.214:60096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmv9NUQIdJOMwiP0nCvwAAAAI"]
[Thu Jul 30 11:26:08.966599 2026] [ssl:error] [pid 2886477:tid 2886477] (70014)End of file found: [client 216.73.216.199:10711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:08.980502 2026] [ssl:error] [pid 2892133:tid 2892133] (EAI 2)Name or service not known: [client 144.76.19.72:45452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:08.980553 2026] [ssl:error] [pid 2892133:tid 2892133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:09.036656 2026] [ssl:error] [pid 2880624:tid 2880624] (EAI 2)Name or service not known: [client 144.76.19.72:45454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:09.036706 2026] [ssl:error] [pid 2880624:tid 2880624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:09.671339 2026] [security2:error] [pid 2878692:tid 2878692] [client 114.119.158.38:53533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564268400/cat_ids~18,30/request_format~html"] [unique_id "amsmwUFTeiEIQTrHZMABvQAAADY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1564268400/cat_ids%7E18/request_format%7Ehtml
[Thu Jul 30 11:26:09.868662 2026] [core:error] [pid 2889515:tid 2889515] (13)Permission denied: [client 216.73.216.199:1772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/howetrinity.org.uk.db
[Thu Jul 30 11:26:11.350444 2026] [security2:error] [pid 2889471:tid 2889471] [client 114.119.158.38:53543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564268400/cat_ids~18,30/request_format~html"] [unique_id "amsmw0zs-r-AuW1hPnx4IgAAADI"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1564268400/cat_ids%7E18/request_format%7Ehtml
[Thu Jul 30 11:26:12.515023 2026] [ssl:error] [pid 2877508:tid 2877508] (EAI 2)Name or service not known: [client 144.76.19.72:37622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:12.515078 2026] [ssl:error] [pid 2877508:tid 2877508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:12.690493 2026] [lsapi:warn] [pid 2850150:tid 2850150] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:26:12.709223 2026] [ssl:error] [pid 2889511:tid 2889511] (EAI 2)Name or service not known: [client 144.76.19.72:37638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:12.709261 2026] [ssl:error] [pid 2889511:tid 2889511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:12.879731 2026] [core:error] [pid 2889515:tid 2889515] (13)Permission denied: [client 216.73.216.199:1772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/userbwlimits
[Thu Jul 30 11:26:12.955051 2026] [security2:error] [pid 2892661:tid 2892661] [client 186.122.108.60:47569] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmxBPPd6-dL6G1bagx7gAAAAk"]
[Thu Jul 30 11:26:12.955126 2026] [security2:error] [pid 2892661:tid 2892661] [client 186.122.108.60:47569] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsmxBPPd6-dL6G1bagx7gAAAAk"]
[Thu Jul 30 11:26:12.955477 2026] [security2:error] [pid 2892661:tid 2892661] [client 186.122.108.60:47569] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsmxBPPd6-dL6G1bagx7gAAAAk"]
[Thu Jul 30 11:26:13.203300 2026] [security2:error] [pid 2889471:tid 2889471] [client 185.191.171.3:22036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3068.0.html"] [unique_id "amsmxUzs-r-AuW1hPnx4IwAAADI"]
[Thu Jul 30 11:26:14.083393 2026] [core:error] [pid 2889515:tid 2889515] (13)Permission denied: [client 216.73.216.199:1772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty39/subsystem/ttyS0/uartclk
[Thu Jul 30 11:26:15.179896 2026] [authz_core:error] [pid 2892702:tid 2892702] [client 66.249.66.35:41750] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:26:15.182638 2026] [authz_core:error] [pid 2892702:tid 2892702] [client 66.249.66.35:41750] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:26:15.288206 2026] [ssl:error] [pid 2889515:tid 2889515] (70014)End of file found: [client 216.73.216.199:1772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:15.770974 2026] [ssl:error] [pid 2886518:tid 2886518] (EAI 2)Name or service not known: [client 144.76.19.72:37652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:15.771024 2026] [ssl:error] [pid 2886518:tid 2886518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:15.824471 2026] [ssl:error] [pid 2872133:tid 2872133] (EAI 2)Name or service not known: [client 144.76.19.72:37656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:15.824514 2026] [ssl:error] [pid 2872133:tid 2872133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:15.963252 2026] [ssl:error] [pid 2892072:tid 2892072] (70014)End of file found: [client 216.73.216.199:35783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:16.018543 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 66.249.66.34:64444] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:26:16.021257 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 66.249.66.34:64444] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:26:16.189871 2026] [core:error] [pid 2877508:tid 2877508] (13)Permission denied: [client 216.73.216.199:13870] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty27/subsystem/ttyS3/flags
[Thu Jul 30 11:26:17.996378 2026] [ssl:error] [pid 2877508:tid 2877508] (70014)End of file found: [client 216.73.216.199:13870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:18.906873 2026] [ssl:error] [pid 2892129:tid 2892129] (EAI 2)Name or service not known: [client 144.76.19.72:37670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:18.906922 2026] [ssl:error] [pid 2892129:tid 2892129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:18.960698 2026] [ssl:error] [pid 2878692:tid 2878692] (EAI 2)Name or service not known: [client 144.76.19.72:37686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:18.960733 2026] [ssl:error] [pid 2878692:tid 2878692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:21.076798 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 66.249.66.33:47688] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:26:21.079441 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 66.249.66.33:47688] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:26:22.017004 2026] [ssl:error] [pid 2883999:tid 2883999] (EAI 2)Name or service not known: [client 144.76.19.72:40272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:22.017052 2026] [ssl:error] [pid 2883999:tid 2883999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:22.074476 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:40288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:22.074510 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:22.989012 2026] [lsapi:warn] [pid 2888285:tid 2888285] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:26:23.117972 2026] [ssl:error] [pid 2892133:tid 2892133] (70014)End of file found: [client 216.73.216.199:6945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:23.625325 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:3552] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:23.922175 2026] [ssl:error] [pid 2889515:tid 2889515] (70014)End of file found: [client 216.73.216.199:40715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:25.129543 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:40298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:25.129600 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:25.184416 2026] [ssl:error] [pid 2892702:tid 2892702] (EAI 2)Name or service not known: [client 144.76.19.72:40302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:25.184465 2026] [ssl:error] [pid 2892702:tid 2892702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:28.239120 2026] [ssl:error] [pid 2878692:tid 2878692] (EAI 2)Name or service not known: [client 144.76.19.72:40312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:28.239169 2026] [ssl:error] [pid 2878692:tid 2878692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:28.292120 2026] [ssl:error] [pid 2889471:tid 2889471] (EAI 2)Name or service not known: [client 144.76.19.72:40322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:28.292157 2026] [ssl:error] [pid 2889471:tid 2889471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:28.768383 2026] [security2:error] [pid 2892133:tid 2892133] [client 185.191.171.1:35890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/waxahachie-funeral-home-obituaries"] [unique_id "amsm1PVIM0qsTJMAqGuqbAAAABA"]
[Thu Jul 30 11:26:28.841690 2026] [security2:error] [pid 2873873:tid 2873873] [client 216.73.216.199:64478] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/dracut.conf.d/99-microcode-override.conf"] [unique_id "amsm1I0zz3aRnxRCk7bhOgAAADM"]
[Thu Jul 30 11:26:28.841985 2026] [security2:error] [pid 2873873:tid 2873873] [client 216.73.216.199:64478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/dracut.conf.d/99-microcode-override.conf"] [unique_id "amsm1I0zz3aRnxRCk7bhOgAAADM"]
[Thu Jul 30 11:26:28.842240 2026] [security2:error] [pid 2873873:tid 2873873] [client 216.73.216.199:64478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/dracut.conf.d/99-microcode-override.conf"] [unique_id "amsm1I0zz3aRnxRCk7bhOgAAADM"]
[Thu Jul 30 11:26:30.648600 2026] [ssl:error] [pid 2873873:tid 2873873] (70014)End of file found: [client 216.73.216.199:64478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:30.841614 2026] [cgi:error] [pid 2892129:tid 2892129] [client 20.91.199.21:1569] AH02811: stderr from /home/elass/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:26:30.955054 2026] [core:error] [pid 2893302:tid 2893302] (13)Permission denied: [client 216.73.216.199:23722] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty52/subsystem/ttyS1/flags
[Thu Jul 30 11:26:30.992742 2026] [security2:error] [pid 2892133:tid 2892133] [client 110.249.202.216:64674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amsm1vVIM0qsTJMAqGuqbQAAABA"]
[Thu Jul 30 11:26:31.343285 2026] [cgi:error] [pid 2892129:tid 2892129] [client 20.91.199.21:1569] AH02811: stderr from /home/elass/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:26:31.344337 2026] [ssl:error] [pid 2889515:tid 2889515] (EAI 2)Name or service not known: [client 144.76.19.72:62352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:31.344361 2026] [ssl:error] [pid 2889515:tid 2889515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:31.397593 2026] [ssl:error] [pid 2889468:tid 2889468] (EAI 2)Name or service not known: [client 144.76.19.72:62366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:31.397639 2026] [ssl:error] [pid 2889468:tid 2889468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:31.861809 2026] [authz_core:error] [pid 2889511:tid 2889511] [client 57.141.0.5:33060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:31.862440 2026] [authz_core:error] [pid 2889511:tid 2889511] [client 57.141.0.5:33060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:31.997053 2026] [security2:error] [pid 2892133:tid 2892133] [client 85.208.96.205:40056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2487.0.html"] [unique_id "amsm1_VIM0qsTJMAqGuqbgAAABA"]
[Thu Jul 30 11:26:32.158904 2026] [ssl:error] [pid 2893302:tid 2893302] (70014)End of file found: [client 216.73.216.199:23722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:32.245274 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.38:36762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:32.245904 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.38:36762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:32.561349 2026] [authz_core:error] [pid 2889468:tid 2889468] [client 57.141.0.41:20198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:32.562007 2026] [authz_core:error] [pid 2889468:tid 2889468] [client 57.141.0.41:20198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:33.611675 2026] [lsapi:warn] [pid 2877508:tid 2877508] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:26:34.452703 2026] [ssl:error] [pid 2850150:tid 2850150] (EAI 2)Name or service not known: [client 144.76.19.72:62376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:34.452746 2026] [ssl:error] [pid 2850150:tid 2850150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:34.510151 2026] [ssl:error] [pid 2892073:tid 2892073] (EAI 2)Name or service not known: [client 144.76.19.72:62384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:34.510185 2026] [ssl:error] [pid 2892073:tid 2892073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:35.197283 2026] [ssl:error] [pid 2892661:tid 2892661] (70014)End of file found: [client 216.73.216.199:4539] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:35.968558 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.43:31890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:35.969216 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.43:31890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:36.703250 2026] [core:error] [pid 2892701:tid 2892701] (13)Permission denied: [client 216.73.216.199:23949] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty32/subsystem/ttyS1/flags
[Thu Jul 30 11:26:37.004513 2026] [ssl:error] [pid 2892701:tid 2892701] (70014)End of file found: [client 216.73.216.199:23949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:37.569549 2026] [ssl:error] [pid 2892019:tid 2892019] (EAI 2)Name or service not known: [client 144.76.19.72:62390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:37.569594 2026] [ssl:error] [pid 2892019:tid 2892019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:37.624953 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:62404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:37.624999 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:38.566343 2026] [authz_core:error] [pid 2889471:tid 2889471] [client 57.141.0.50:37712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:38.566976 2026] [authz_core:error] [pid 2889471:tid 2889471] [client 57.141.0.50:37712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:38.617423 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.19:46278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:38.618081 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.19:46278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:39.100025 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.19:46292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:39.100690 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.19:46292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:39.536124 2026] [authz_core:error] [pid 2876647:tid 2876647] [client 57.141.0.70:53334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:39.536759 2026] [authz_core:error] [pid 2876647:tid 2876647] [client 57.141.0.70:53334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:39.714941 2026] [ssl:error] [pid 2891969:tid 2891969] (70014)End of file found: [client 216.73.216.199:16183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:40.140121 2026] [authz_core:error] [pid 2889471:tid 2889471] [client 57.141.0.3:46360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:40.140744 2026] [authz_core:error] [pid 2889471:tid 2889471] [client 57.141.0.3:46360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:40.680156 2026] [ssl:error] [pid 2876647:tid 2876647] (EAI 2)Name or service not known: [client 144.76.19.72:53770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:40.680181 2026] [ssl:error] [pid 2876647:tid 2876647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:40.737771 2026] [ssl:error] [pid 2892129:tid 2892129] (EAI 2)Name or service not known: [client 144.76.19.72:53772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:40.737802 2026] [ssl:error] [pid 2892129:tid 2892129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:40.927607 2026] [authz_core:error] [pid 2889468:tid 2889468] [client 57.141.0.67:30012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:40.928250 2026] [authz_core:error] [pid 2889468:tid 2889468] [client 57.141.0.67:30012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:41.826555 2026] [ssl:error] [pid 2873873:tid 2873873] (70014)End of file found: [client 216.73.216.199:5429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:42.350712 2026] [autoindex:error] [pid 2892661:tid 2892661] [client 20.63.98.115:40286] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:26:43.792776 2026] [ssl:error] [pid 2886479:tid 2886479] (EAI 2)Name or service not known: [client 144.76.19.72:53774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:43.792808 2026] [ssl:error] [pid 2886479:tid 2886479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:43.849762 2026] [ssl:error] [pid 2892133:tid 2892133] (EAI 2)Name or service not known: [client 144.76.19.72:53790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:43.849814 2026] [ssl:error] [pid 2892133:tid 2892133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:43.962832 2026] [security2:error] [pid 2886914:tid 2886914] [client 74.7.227.43:52268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amsm4_3VGwrrmCPHZbVuVgAAAA8"]
[Thu Jul 30 11:26:44.234242 2026] [lsapi:warn] [pid 2889425:tid 2889425] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:26:44.531735 2026] [core:error] [pid 2876647:tid 2876647] (13)Permission denied: [client 216.73.216.199:48756] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty44/subsystem/ttyS1/flags
[Thu Jul 30 11:26:45.011362 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.56:40260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:45.011989 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.56:40260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:45.736368 2026] [ssl:error] [pid 2876647:tid 2876647] (70014)End of file found: [client 216.73.216.199:48756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:46.244888 2026] [autoindex:error] [pid 2892661:tid 2892661] [client 20.63.98.115:40286] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:26:46.639386 2026] [ssl:error] [pid 2889341:tid 2889341] (70014)End of file found: [client 216.73.216.199:32695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:46.664041 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.10:24244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:46.664670 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.10:24244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:46.901969 2026] [ssl:error] [pid 2892133:tid 2892133] (EAI 2)Name or service not known: [client 144.76.19.72:53804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:46.902003 2026] [ssl:error] [pid 2892133:tid 2892133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:46.956986 2026] [ssl:error] [pid 2886477:tid 2886477] (EAI 2)Name or service not known: [client 144.76.19.72:53808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:46.957020 2026] [ssl:error] [pid 2886477:tid 2886477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:47.046967 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.14:42514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:47.047616 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.14:42514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:47.059107 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.23:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:47.059738 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.23:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:47.132634 2026] [core:error] [pid 2892702:tid 2892702] (13)Permission denied: [client 216.73.216.199:58946] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS0/flags
[Thu Jul 30 11:26:47.541807 2026] [ssl:error] [pid 2892702:tid 2892702] (70014)End of file found: [client 216.73.216.199:58946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:49.936520 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 66.249.66.33:53727] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:26:49.939184 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 66.249.66.33:53727] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:26:50.033264 2026] [ssl:error] [pid 2892127:tid 2892127] (EAI 2)Name or service not known: [client 144.76.19.72:38920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:50.033313 2026] [ssl:error] [pid 2892127:tid 2892127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:50.087142 2026] [ssl:error] [pid 2892072:tid 2892072] (EAI 2)Name or service not known: [client 144.76.19.72:38936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:50.087191 2026] [ssl:error] [pid 2892072:tid 2892072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:51.049456 2026] [core:error] [pid 2893485:tid 2893485] [client 66.249.64.170:50351] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:26:51.049491 2026] [core:error] [pid 2893485:tid 2893485] [client 66.249.64.170:50351] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:26:51.460133 2026] [core:error] [pid 2894202:tid 2894202] (13)Permission denied: [client 216.73.216.199:54619] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty40/subsystem/ttyS1/flags
[Thu Jul 30 11:26:51.761310 2026] [ssl:error] [pid 2894202:tid 2894202] (70014)End of file found: [client 216.73.216.199:54619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:53.144397 2026] [ssl:error] [pid 2892073:tid 2892073] (EAI 2)Name or service not known: [client 144.76.19.72:38948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:53.144430 2026] [ssl:error] [pid 2892073:tid 2892073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:53.198243 2026] [ssl:error] [pid 2886477:tid 2886477] (EAI 2)Name or service not known: [client 144.76.19.72:38956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:53.198271 2026] [ssl:error] [pid 2886477:tid 2886477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:54.886555 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.36:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:54.887187 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.36:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:54.923860 2026] [lsapi:warn] [pid 2893926:tid 2893926] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:26:55.038376 2026] [authz_core:error] [pid 2886914:tid 2886914] [client 57.141.0.59:53390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:55.039007 2026] [authz_core:error] [pid 2886914:tid 2886914] [client 57.141.0.59:53390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:55.069573 2026] [ssl:error] [pid 2893485:tid 2893485] (70014)End of file found: [client 216.73.216.199:51146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:55.722689 2026] [security2:error] [pid 2889515:tid 2889515] [client 43.136.167.197:41370] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanhill.co.uk"] [uri "/"] [unique_id "amsm7wOKeV2W5rzcUjBkmAAAAEM"]
[Thu Jul 30 11:26:55.843048 2026] [security2:error] [pid 2889468:tid 2889468] [client 151.242.127.198:38004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpanel.akoptimize.online"] [uri "/vercel.json"] [unique_id "amsm7-X_zng0I8um5LknIwAAAC4"]
[Thu Jul 30 11:26:55.977840 2026] [security2:error] [pid 2894448:tid 2894448] [client 151.242.127.198:38050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpanel.akoptimize.online"] [uri "/awsconfiguration.json"] [unique_id "amsm79jCFWZ-qcA0yP027wAAABY"]
[Thu Jul 30 11:26:57.179319 2026] [ssl:error] [pid 2888285:tid 2888285] (70014)End of file found: [client 216.73.216.199:23243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:26:59.050672 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.53:59978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:59.051297 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.53:59978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:59.138254 2026] [ssl:error] [pid 2889505:tid 2889505] (EAI 2)Name or service not known: [client 144.76.19.72:38964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:26:59.138277 2026] [ssl:error] [pid 2889505:tid 2889505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:26:59.155222 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.48:50642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:59.155839 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.48:50642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:59.631658 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.40:35178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:59.632282 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.40:35178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:59.802076 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.37:26110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:59.802698 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.37:26110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:59.975713 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.66:34452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:59.976342 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.66:34452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:26:59.977316 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.45:62870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:26:59.977975 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.45:62870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:00.303336 2026] [authz_core:error] [pid 2850150:tid 2850150] [client 57.141.0.47:64714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:00.303961 2026] [authz_core:error] [pid 2850150:tid 2850150] [client 57.141.0.47:64714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:00.307159 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.5:58522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:00.307784 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.5:58522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:00.357719 2026] [ssl:error] [pid 2894616:tid 2894616] (EAI 2)Name or service not known: [client 144.76.19.72:38968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:00.357767 2026] [ssl:error] [pid 2894616:tid 2894616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:00.783123 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.19:53248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:00.783751 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.19:53248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:01.113374 2026] [authz_core:error] [pid 2886914:tid 2886914] [client 57.141.0.54:65478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:01.114024 2026] [authz_core:error] [pid 2886914:tid 2886914] [client 57.141.0.54:65478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:01.665510 2026] [authz_core:error] [pid 2889425:tid 2889425] [client 57.141.0.46:39614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:01.666147 2026] [authz_core:error] [pid 2889425:tid 2889425] [client 57.141.0.46:39614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:01.799743 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.14:62342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:01.800615 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.14:62342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:01.850702 2026] [security2:error] [pid 2894616:tid 2894616] [client 43.136.167.197:46748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsm9VBMZ0ytD4z0SNHvRwAAADE"], referer: http://jonathanhill.co.uk
[Thu Jul 30 11:27:02.276600 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.14:62356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:02.277222 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.14:62356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:03.448595 2026] [ssl:error] [pid 2886914:tid 2886914] (EAI 2)Name or service not known: [client 144.76.19.72:50164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:03.448627 2026] [ssl:error] [pid 2886914:tid 2886914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:03.505092 2026] [ssl:error] [pid 2889424:tid 2889424] (EAI 2)Name or service not known: [client 144.76.19.72:50170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:03.505122 2026] [ssl:error] [pid 2889424:tid 2889424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:04.021001 2026] [ssl:error] [pid 2894613:tid 2894613] (70014)End of file found: [client 216.73.216.199:40748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:04.909140 2026] [autoindex:error] [pid 2892661:tid 2892661] [client 20.63.98.115:40286] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:27:05.224124 2026] [ssl:error] [pid 2886479:tid 2886479] (70014)End of file found: [client 216.73.216.199:26678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:05.589997 2026] [lsapi:warn] [pid 2894255:tid 2894255] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:06.557104 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:50184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:06.557147 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:06.611885 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:50196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:06.611908 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:06.728175 2026] [ssl:error] [pid 2894617:tid 2894617] (70014)End of file found: [client 216.73.216.199:55308] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:07.098295 2026] [authz_core:error] [pid 2894738:tid 2894738] [client 57.141.0.54:65492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:07.098918 2026] [authz_core:error] [pid 2894738:tid 2894738] [client 57.141.0.54:65492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:07.585804 2026] [autoindex:error] [pid 2892661:tid 2892661] [client 20.63.98.115:40286] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:27:07.815661 2026] [security2:error] [pid 2895042:tid 2895042] [client 34.125.84.50:56396] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsm-_aW8TY1wYj5-nZ7mgAAADw"]
[Thu Jul 30 11:27:07.815908 2026] [security2:error] [pid 2895042:tid 2895042] [client 34.125.84.50:56396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsm-_aW8TY1wYj5-nZ7mgAAADw"]
[Thu Jul 30 11:27:07.816201 2026] [security2:error] [pid 2895042:tid 2895042] [client 34.125.84.50:56396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm-_aW8TY1wYj5-nZ7mgAAADw"]
[Thu Jul 30 11:27:07.819809 2026] [security2:error] [pid 2895044:tid 2895044] [client 34.125.84.50:56408] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsm-6lPwqeEviHDTHvV1wAAAD0"]
[Thu Jul 30 11:27:07.819974 2026] [security2:error] [pid 2895044:tid 2895044] [client 34.125.84.50:56408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amsm-6lPwqeEviHDTHvV1wAAAD0"]
[Thu Jul 30 11:27:07.820207 2026] [security2:error] [pid 2895044:tid 2895044] [client 34.125.84.50:56408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm-6lPwqeEviHDTHvV1wAAAD0"]
[Thu Jul 30 11:27:08.169828 2026] [authz_core:error] [pid 2895000:tid 2895000] [client 24.54.88.134:47376] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiologylondon.co.uk
[Thu Jul 30 11:27:08.171586 2026] [authz_core:error] [pid 2895000:tid 2895000] [client 24.54.88.134:47376] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiologylondon.co.uk
[Thu Jul 30 11:27:08.501855 2026] [security2:error] [pid 2895042:tid 2895042] [client 34.125.84.50:56480] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsm_PaW8TY1wYj5-nZ7mwAAADw"]
[Thu Jul 30 11:27:08.501980 2026] [security2:error] [pid 2895042:tid 2895042] [client 34.125.84.50:56480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amsm_PaW8TY1wYj5-nZ7mwAAADw"]
[Thu Jul 30 11:27:08.502211 2026] [security2:error] [pid 2895042:tid 2895042] [client 34.125.84.50:56480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_PaW8TY1wYj5-nZ7mwAAADw"]
[Thu Jul 30 11:27:08.686686 2026] [security2:error] [pid 2894255:tid 2894255] [client 34.125.84.50:56510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsm_CXCOEOE70_2GmxAjgAAAB0"]
[Thu Jul 30 11:27:08.686952 2026] [security2:error] [pid 2894255:tid 2894255] [client 34.125.84.50:56510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amsm_CXCOEOE70_2GmxAjgAAAB0"]
[Thu Jul 30 11:27:08.687279 2026] [security2:error] [pid 2894255:tid 2894255] [client 34.125.84.50:56510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_CXCOEOE70_2GmxAjgAAAB0"]
[Thu Jul 30 11:27:09.159501 2026] [security2:error] [pid 2895044:tid 2895044] [client 34.125.84.50:56516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsm_alPwqeEviHDTHvV2QAAAD0"]
[Thu Jul 30 11:27:09.159691 2026] [security2:error] [pid 2895044:tid 2895044] [client 34.125.84.50:56516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amsm_alPwqeEviHDTHvV2QAAAD0"]
[Thu Jul 30 11:27:09.159919 2026] [security2:error] [pid 2895044:tid 2895044] [client 34.125.84.50:56516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_alPwqeEviHDTHvV2QAAAD0"]
[Thu Jul 30 11:27:09.199327 2026] [security2:error] [pid 2893485:tid 2893485] [client 34.125.84.50:56514] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsm_aia19i9lbkjYsRsRwAAABQ"]
[Thu Jul 30 11:27:09.199526 2026] [security2:error] [pid 2893485:tid 2893485] [client 34.125.84.50:56514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amsm_aia19i9lbkjYsRsRwAAABQ"]
[Thu Jul 30 11:27:09.199818 2026] [security2:error] [pid 2893485:tid 2893485] [client 34.125.84.50:56514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_aia19i9lbkjYsRsRwAAABQ"]
[Thu Jul 30 11:27:09.200588 2026] [security2:error] [pid 2895040:tid 2895040] [client 34.125.84.50:56512] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsm_VHJxTSEb_8hvYPlsQAAADo"]
[Thu Jul 30 11:27:09.200733 2026] [security2:error] [pid 2895040:tid 2895040] [client 34.125.84.50:56512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amsm_VHJxTSEb_8hvYPlsQAAADo"]
[Thu Jul 30 11:27:09.200982 2026] [security2:error] [pid 2895040:tid 2895040] [client 34.125.84.50:56512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_VHJxTSEb_8hvYPlsQAAADo"]
[Thu Jul 30 11:27:09.260361 2026] [security2:error] [pid 2894738:tid 2894738] [client 34.125.84.50:56546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsm_TA0tns-TCtvKtZa9AAAADc"]
[Thu Jul 30 11:27:09.260380 2026] [security2:error] [pid 2895045:tid 2895045] [client 34.125.84.50:56562] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsm_aD2_6gtwLJiziO7-gAAAD4"]
[Thu Jul 30 11:27:09.260564 2026] [security2:error] [pid 2894738:tid 2894738] [client 34.125.84.50:56546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amsm_TA0tns-TCtvKtZa9AAAADc"]
[Thu Jul 30 11:27:09.260565 2026] [security2:error] [pid 2895045:tid 2895045] [client 34.125.84.50:56562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amsm_aD2_6gtwLJiziO7-gAAAD4"]
[Thu Jul 30 11:27:09.260769 2026] [security2:error] [pid 2894738:tid 2894738] [client 34.125.84.50:56546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_TA0tns-TCtvKtZa9AAAADc"]
[Thu Jul 30 11:27:09.260781 2026] [security2:error] [pid 2895045:tid 2895045] [client 34.125.84.50:56562] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_aD2_6gtwLJiziO7-gAAAD4"]
[Thu Jul 30 11:27:09.522949 2026] [security2:error] [pid 2895074:tid 2895074] [client 34.125.84.50:56574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsm_bLt01WFu5rwy8-NgwAAAD8"]
[Thu Jul 30 11:27:09.523201 2026] [security2:error] [pid 2895074:tid 2895074] [client 34.125.84.50:56574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amsm_bLt01WFu5rwy8-NgwAAAD8"]
[Thu Jul 30 11:27:09.523453 2026] [security2:error] [pid 2895074:tid 2895074] [client 34.125.84.50:56574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_bLt01WFu5rwy8-NgwAAAD8"]
[Thu Jul 30 11:27:09.669284 2026] [ssl:error] [pid 2895078:tid 2895078] (EAI 2)Name or service not known: [client 144.76.19.72:24212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:09.669333 2026] [ssl:error] [pid 2895078:tid 2895078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:09.727194 2026] [ssl:error] [pid 2883999:tid 2883999] (EAI 2)Name or service not known: [client 144.76.19.72:24226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:09.727225 2026] [ssl:error] [pid 2883999:tid 2883999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:09.930488 2026] [security2:error] [pid 2895080:tid 2895080] [client 34.125.84.50:56578] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsm_QIW4bfXoPXjsDCBuwAAAEc"]
[Thu Jul 30 11:27:09.930829 2026] [security2:error] [pid 2895080:tid 2895080] [client 34.125.84.50:56578] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amsm_QIW4bfXoPXjsDCBuwAAAEc"]
[Thu Jul 30 11:27:09.931184 2026] [security2:error] [pid 2895080:tid 2895080] [client 34.125.84.50:56578] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_QIW4bfXoPXjsDCBuwAAAEc"]
[Thu Jul 30 11:27:09.942907 2026] [security2:error] [pid 2894613:tid 2894613] [client 34.125.84.50:56598] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsm_Rz-SPWQII0MO14UuAAAACw"]
[Thu Jul 30 11:27:09.943037 2026] [security2:error] [pid 2894613:tid 2894613] [client 34.125.84.50:56598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amsm_Rz-SPWQII0MO14UuAAAACw"]
[Thu Jul 30 11:27:09.943238 2026] [security2:error] [pid 2894613:tid 2894613] [client 34.125.84.50:56598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_Rz-SPWQII0MO14UuAAAACw"]
[Thu Jul 30 11:27:09.943725 2026] [security2:error] [pid 2850150:tid 2850150] [client 34.125.84.50:56582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsm_YQdD8pS_eJWvDX4ewAAAFw"]
[Thu Jul 30 11:27:09.943856 2026] [security2:error] [pid 2850150:tid 2850150] [client 34.125.84.50:56582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amsm_YQdD8pS_eJWvDX4ewAAAFw"]
[Thu Jul 30 11:27:09.944031 2026] [security2:error] [pid 2850150:tid 2850150] [client 34.125.84.50:56582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_YQdD8pS_eJWvDX4ewAAAFw"]
[Thu Jul 30 11:27:10.380839 2026] [authz_core:error] [pid 2895076:tid 2895076] [client 57.141.0.53:64344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:10.381850 2026] [authz_core:error] [pid 2895076:tid 2895076] [client 57.141.0.53:64344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:10.582288 2026] [authz_core:error] [pid 2895079:tid 2895079] [client 57.141.0.64:28282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:10.583353 2026] [authz_core:error] [pid 2895079:tid 2895079] [client 57.141.0.64:28282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:10.639240 2026] [ssl:error] [pid 2894255:tid 2894255] (70014)End of file found: [client 216.73.216.199:26732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:11.483709 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 34.125.84.50:56700] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 11:27:11.492003 2026] [security2:error] [pid 2894615:tid 2894615] [client 34.125.84.50:56684] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsm_7b16YzJ6yP5sYMdmwAAADA"]
[Thu Jul 30 11:27:11.492189 2026] [security2:error] [pid 2894615:tid 2894615] [client 34.125.84.50:56684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amsm_7b16YzJ6yP5sYMdmwAAADA"]
[Thu Jul 30 11:27:11.492394 2026] [security2:error] [pid 2894615:tid 2894615] [client 34.125.84.50:56684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsm_7b16YzJ6yP5sYMdmwAAADA"]
[Thu Jul 30 11:27:12.655645 2026] [security2:error] [pid 2872133:tid 2872133] [client 43.157.170.13:34820] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "plastic-sheeting.org"] [uri "/"] [unique_id "amsnAA-6U1-7B4N2wXW1JgAAAAw"]
[Thu Jul 30 11:27:12.780404 2026] [ssl:error] [pid 2886518:tid 2886518] (EAI 2)Name or service not known: [client 144.76.19.72:24240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:12.780434 2026] [ssl:error] [pid 2886518:tid 2886518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:12.834862 2026] [ssl:error] [pid 2886477:tid 2886477] (EAI 2)Name or service not known: [client 144.76.19.72:24246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:12.834889 2026] [ssl:error] [pid 2886477:tid 2886477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:13.181337 2026] [security2:error] [pid 2894617:tid 2894617] [client 34.125.84.50:56840] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amsnAYN_00oRqEQlYvlnZgAAADI"]
[Thu Jul 30 11:27:13.181682 2026] [security2:error] [pid 2894617:tid 2894617] [client 34.125.84.50:56840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amsnAYN_00oRqEQlYvlnZgAAADI"]
[Thu Jul 30 11:27:13.181900 2026] [security2:error] [pid 2894617:tid 2894617] [client 34.125.84.50:56840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAYN_00oRqEQlYvlnZgAAADI"]
[Thu Jul 30 11:27:13.219502 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:56862] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amsnAVjOyJtFeRNnAGVzzQAAACE"]
[Thu Jul 30 11:27:13.219834 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:56862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amsnAVjOyJtFeRNnAGVzzQAAACE"]
[Thu Jul 30 11:27:13.220085 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:56862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAVjOyJtFeRNnAGVzzQAAACE"]
[Thu Jul 30 11:27:13.318476 2026] [security2:error] [pid 2873873:tid 2873873] [client 34.125.84.50:56872] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amsnAY0zz3aRnxRCk7bhSQAAADM"]
[Thu Jul 30 11:27:13.318915 2026] [security2:error] [pid 2873873:tid 2873873] [client 34.125.84.50:56872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amsnAY0zz3aRnxRCk7bhSQAAADM"]
[Thu Jul 30 11:27:13.319268 2026] [security2:error] [pid 2873873:tid 2873873] [client 34.125.84.50:56872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAY0zz3aRnxRCk7bhSQAAADM"]
[Thu Jul 30 11:27:13.552687 2026] [security2:error] [pid 2892127:tid 2892127] [client 34.125.84.50:56876] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amsnAdhtpTijSUjN9Xr8aQAAAAU"]
[Thu Jul 30 11:27:13.552931 2026] [security2:error] [pid 2892127:tid 2892127] [client 34.125.84.50:56876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amsnAdhtpTijSUjN9Xr8aQAAAAU"]
[Thu Jul 30 11:27:13.553151 2026] [security2:error] [pid 2892127:tid 2892127] [client 34.125.84.50:56876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAdhtpTijSUjN9Xr8aQAAAAU"]
[Thu Jul 30 11:27:13.823107 2026] [security2:error] [pid 2894570:tid 2894570] [client 34.125.84.50:56894] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsnAaERoOgkz9Za44A1pgAAACI"]
[Thu Jul 30 11:27:13.823381 2026] [security2:error] [pid 2894570:tid 2894570] [client 34.125.84.50:56894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amsnAaERoOgkz9Za44A1pgAAACI"]
[Thu Jul 30 11:27:13.823754 2026] [security2:error] [pid 2894570:tid 2894570] [client 34.125.84.50:56894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAaERoOgkz9Za44A1pgAAACI"]
[Thu Jul 30 11:27:13.824086 2026] [security2:error] [pid 2894571:tid 2894571] [client 34.125.84.50:56892] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amsnAQzgMsuihQ5WD25JoAAAACU"]
[Thu Jul 30 11:27:13.824343 2026] [security2:error] [pid 2894571:tid 2894571] [client 34.125.84.50:56892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amsnAQzgMsuihQ5WD25JoAAAACU"]
[Thu Jul 30 11:27:13.824580 2026] [security2:error] [pid 2894571:tid 2894571] [client 34.125.84.50:56892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAQzgMsuihQ5WD25JoAAAACU"]
[Thu Jul 30 11:27:13.827891 2026] [security2:error] [pid 2894572:tid 2894572] [client 34.125.84.50:56910] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsnAZGXA1NrGKaT9Xhw5AAAACc"]
[Thu Jul 30 11:27:13.828175 2026] [security2:error] [pid 2894572:tid 2894572] [client 34.125.84.50:56910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amsnAZGXA1NrGKaT9Xhw5AAAACc"]
[Thu Jul 30 11:27:13.830035 2026] [security2:error] [pid 2894572:tid 2894572] [client 34.125.84.50:56910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAZGXA1NrGKaT9Xhw5AAAACc"]
[Thu Jul 30 11:27:13.991952 2026] [security2:error] [pid 2892702:tid 2892702] [client 43.155.4.6:64105] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnAYKkL7TGv4rWA_iXgwAAABE"]
[Thu Jul 30 11:27:13.991998 2026] [security2:error] [pid 2892702:tid 2892702] [client 43.155.4.6:64105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnAYKkL7TGv4rWA_iXgwAAABE"]
[Thu Jul 30 11:27:13.992234 2026] [security2:error] [pid 2892702:tid 2892702] [client 43.155.4.6:64105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnAYKkL7TGv4rWA_iXgwAAABE"]
[Thu Jul 30 11:27:14.382501 2026] [security2:error] [pid 2895076:tid 2895076] [client 34.125.84.50:40306] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsnApsZ3l5g0SB0EaCR-gAAAEE"]
[Thu Jul 30 11:27:14.382763 2026] [security2:error] [pid 2895076:tid 2895076] [client 34.125.84.50:40306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amsnApsZ3l5g0SB0EaCR-gAAAEE"]
[Thu Jul 30 11:27:14.383097 2026] [security2:error] [pid 2895076:tid 2895076] [client 34.125.84.50:40306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnApsZ3l5g0SB0EaCR-gAAAEE"]
[Thu Jul 30 11:27:14.744725 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 66.249.66.35:41517] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:27:14.747391 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 66.249.66.35:41517] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:27:14.948979 2026] [core:error] [pid 2894617:tid 2894617] [client 66.249.66.169:60852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:27:14.949012 2026] [core:error] [pid 2894617:tid 2894617] [client 66.249.66.169:60852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:27:14.960526 2026] [core:error] [pid 2880698:tid 2880698] [client 66.249.66.194:61600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:27:14.960572 2026] [core:error] [pid 2880698:tid 2880698] [client 66.249.66.194:61600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:27:15.222487 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.18:64914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:15.223186 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.18:64914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:15.422216 2026] [security2:error] [pid 2894570:tid 2894570] [client 189.216.141.141:6997] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnA6ERoOgkz9Za44A1pwAAACI"]
[Thu Jul 30 11:27:15.422264 2026] [security2:error] [pid 2894570:tid 2894570] [client 189.216.141.141:6997] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnA6ERoOgkz9Za44A1pwAAACI"]
[Thu Jul 30 11:27:15.422568 2026] [security2:error] [pid 2894570:tid 2894570] [client 189.216.141.141:6997] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnA6ERoOgkz9Za44A1pwAAACI"]
[Thu Jul 30 11:27:15.446093 2026] [security2:error] [pid 2892127:tid 2892127] [client 34.125.84.50:40432] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amsnA9htpTijSUjN9Xr8agAAAAU"]
[Thu Jul 30 11:27:15.446253 2026] [security2:error] [pid 2894999:tid 2894999] [client 34.125.84.50:40416] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amsnA2cZvjZ8VTUvsbv-lgAAADg"]
[Thu Jul 30 11:27:15.446274 2026] [security2:error] [pid 2892127:tid 2892127] [client 34.125.84.50:40432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amsnA9htpTijSUjN9Xr8agAAAAU"]
[Thu Jul 30 11:27:15.446401 2026] [security2:error] [pid 2894999:tid 2894999] [client 34.125.84.50:40416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amsnA2cZvjZ8VTUvsbv-lgAAADg"]
[Thu Jul 30 11:27:15.446503 2026] [security2:error] [pid 2892127:tid 2892127] [client 34.125.84.50:40432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnA9htpTijSUjN9Xr8agAAAAU"]
[Thu Jul 30 11:27:15.446635 2026] [security2:error] [pid 2894999:tid 2894999] [client 34.125.84.50:40416] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnA2cZvjZ8VTUvsbv-lgAAADg"]
[Thu Jul 30 11:27:15.488983 2026] [security2:error] [pid 2894571:tid 2894571] [client 34.125.84.50:40434] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amsnAwzgMsuihQ5WD25JoQAAACU"]
[Thu Jul 30 11:27:15.489450 2026] [security2:error] [pid 2894571:tid 2894571] [client 34.125.84.50:40434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amsnAwzgMsuihQ5WD25JoQAAACU"]
[Thu Jul 30 11:27:15.489811 2026] [security2:error] [pid 2894571:tid 2894571] [client 34.125.84.50:40434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnAwzgMsuihQ5WD25JoQAAACU"]
[Thu Jul 30 11:27:15.606112 2026] [security2:error] [pid 2894573:tid 2894573] [client 34.125.84.50:40446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amsnA7ID4KYf38RizHCShgAAACk"]
[Thu Jul 30 11:27:15.606332 2026] [security2:error] [pid 2894573:tid 2894573] [client 34.125.84.50:40446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amsnA7ID4KYf38RizHCShgAAACk"]
[Thu Jul 30 11:27:15.606569 2026] [security2:error] [pid 2894573:tid 2894573] [client 34.125.84.50:40446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnA7ID4KYf38RizHCShgAAACk"]
[Thu Jul 30 11:27:15.653453 2026] [security2:error] [pid 2895078:tid 2895078] [client 34.125.84.50:40458] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amsnA2wkrHeMb3sCytB80AAAAEU"]
[Thu Jul 30 11:27:15.653666 2026] [security2:error] [pid 2895078:tid 2895078] [client 34.125.84.50:40458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amsnA2wkrHeMb3sCytB80AAAAEU"]
[Thu Jul 30 11:27:15.653884 2026] [security2:error] [pid 2895078:tid 2895078] [client 34.125.84.50:40458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnA2wkrHeMb3sCytB80AAAAEU"]
[Thu Jul 30 11:27:15.836516 2026] [security2:error] [pid 2892702:tid 2892702] [client 34.125.84.50:40472] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amsnA4KkL7TGv4rWA_iXhAAAABE"]
[Thu Jul 30 11:27:15.836726 2026] [security2:error] [pid 2892702:tid 2892702] [client 34.125.84.50:40472] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amsnA4KkL7TGv4rWA_iXhAAAABE"]
[Thu Jul 30 11:27:15.836922 2026] [security2:error] [pid 2892702:tid 2892702] [client 34.125.84.50:40472] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnA4KkL7TGv4rWA_iXhAAAABE"]
[Thu Jul 30 11:27:15.871160 2026] [core:error] [pid 2880697:tid 2880697] (13)Permission denied: [client 216.73.216.199:22060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty24/subsystem/ttyS0/close_delay
[Thu Jul 30 11:27:15.886501 2026] [authz_core:error] [pid 2872090:tid 2872090] [client 57.141.0.17:27278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:15.887144 2026] [authz_core:error] [pid 2872090:tid 2872090] [client 57.141.0.17:27278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:15.903688 2026] [ssl:error] [pid 2895076:tid 2895076] (EAI 2)Name or service not known: [client 144.76.19.72:24262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:15.903722 2026] [ssl:error] [pid 2895076:tid 2895076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:15.912192 2026] [security2:error] [pid 2892701:tid 2892701] [client 34.125.84.50:40484] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amsnA8hg2MmHUZJfUdH4awAAAA0"]
[Thu Jul 30 11:27:15.912405 2026] [security2:error] [pid 2892701:tid 2892701] [client 34.125.84.50:40484] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amsnA8hg2MmHUZJfUdH4awAAAA0"]
[Thu Jul 30 11:27:15.912636 2026] [security2:error] [pid 2892701:tid 2892701] [client 34.125.84.50:40484] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnA8hg2MmHUZJfUdH4awAAAA0"]
[Thu Jul 30 11:27:15.960057 2026] [ssl:error] [pid 2894617:tid 2894617] (EAI 2)Name or service not known: [client 144.76.19.72:24272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:15.960104 2026] [ssl:error] [pid 2894617:tid 2894617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:16.115917 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40532] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsnBA9McUc-P5Ffc558XwAAAAg"]
[Thu Jul 30 11:27:16.116289 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amsnBA9McUc-P5Ffc558XwAAAAg"]
[Thu Jul 30 11:27:16.116629 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBA9McUc-P5Ffc558XwAAAAg"]
[Thu Jul 30 11:27:16.192360 2026] [lsapi:warn] [pid 2886518:tid 2886518] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:16.275756 2026] [security2:error] [pid 2886479:tid 2886479] [client 34.125.84.50:40538] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsnBKCEbdY5jWBiEj9sXAAAAB8"]
[Thu Jul 30 11:27:16.275944 2026] [security2:error] [pid 2886479:tid 2886479] [client 34.125.84.50:40538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amsnBKCEbdY5jWBiEj9sXAAAAB8"]
[Thu Jul 30 11:27:16.276164 2026] [security2:error] [pid 2886479:tid 2886479] [client 34.125.84.50:40538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBKCEbdY5jWBiEj9sXAAAAB8"]
[Thu Jul 30 11:27:16.379409 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:40548] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsnBFjOyJtFeRNnAGVzzwAAACE"]
[Thu Jul 30 11:27:16.379551 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:40548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amsnBFjOyJtFeRNnAGVzzwAAACE"]
[Thu Jul 30 11:27:16.379733 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:40548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBFjOyJtFeRNnAGVzzwAAACE"]
[Thu Jul 30 11:27:16.401453 2026] [security2:error] [pid 2889514:tid 2889514] [client 34.125.84.50:40550] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsnBJIhnUfn5heUWP2UjAAAAEI"]
[Thu Jul 30 11:27:16.401640 2026] [security2:error] [pid 2889514:tid 2889514] [client 34.125.84.50:40550] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amsnBJIhnUfn5heUWP2UjAAAAEI"]
[Thu Jul 30 11:27:16.401857 2026] [security2:error] [pid 2889514:tid 2889514] [client 34.125.84.50:40550] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBJIhnUfn5heUWP2UjAAAAEI"]
[Thu Jul 30 11:27:16.459081 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.38:22656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:16.459700 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.38:22656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:16.636215 2026] [authz_core:error] [pid 2894999:tid 2894999] [client 57.141.0.19:37926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:16.636216 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.16:40490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:16.636839 2026] [authz_core:error] [pid 2894999:tid 2894999] [client 57.141.0.19:37926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:16.636842 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.16:40490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:16.718979 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.19:37940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:16.719606 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.19:37940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:16.826644 2026] [autoindex:error] [pid 2892661:tid 2892661] [client 20.63.98.115:40286] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:27:17.077057 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 57.141.0.63:21630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:17.077683 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 57.141.0.63:21630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:17.313561 2026] [security2:error] [pid 2886477:tid 2886477] [client 34.125.84.50:40648] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsnBSD1KzKFLkSfyeKJwQAAABc"]
[Thu Jul 30 11:27:17.313687 2026] [security2:error] [pid 2886477:tid 2886477] [client 34.125.84.50:40648] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsnBSD1KzKFLkSfyeKJwQAAABc"]
[Thu Jul 30 11:27:17.313806 2026] [security2:error] [pid 2886477:tid 2886477] [client 34.125.84.50:40648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amsnBSD1KzKFLkSfyeKJwQAAABc"]
[Thu Jul 30 11:27:17.314005 2026] [security2:error] [pid 2886477:tid 2886477] [client 34.125.84.50:40648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBSD1KzKFLkSfyeKJwQAAABc"]
[Thu Jul 30 11:27:17.521190 2026] [authz_core:error] [pid 2895000:tid 2895000] [client 57.141.0.19:37956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:17.521811 2026] [authz_core:error] [pid 2895000:tid 2895000] [client 57.141.0.19:37956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:17.671474 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40684] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "customer.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsnBQ9McUc-P5Ffc558YAAAAAg"]
[Thu Jul 30 11:27:17.671755 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amsnBQ9McUc-P5Ffc558YAAAAAg"]
[Thu Jul 30 11:27:17.671963 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBQ9McUc-P5Ffc558YAAAAAg"]
[Thu Jul 30 11:27:17.898404 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.3:60916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:17.899109 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.3:60916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:17.924149 2026] [authz_core:error] [pid 2894570:tid 2894570] [client 57.141.0.27:41354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:17.924782 2026] [authz_core:error] [pid 2894570:tid 2894570] [client 57.141.0.27:41354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:17.976194 2026] [core:error] [pid 2880697:tid 2880697] (13)Permission denied: [client 216.73.216.199:22060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty17/subsystem/ttyS2/flags
[Thu Jul 30 11:27:18.437954 2026] [security2:error] [pid 2886518:tid 2886518] [client 34.125.84.50:40734] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsnBj9pARvr30Z1kqHzzwAAAC8"]
[Thu Jul 30 11:27:18.438133 2026] [security2:error] [pid 2886518:tid 2886518] [client 34.125.84.50:40734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amsnBj9pARvr30Z1kqHzzwAAAC8"]
[Thu Jul 30 11:27:18.438344 2026] [security2:error] [pid 2886518:tid 2886518] [client 34.125.84.50:40734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBj9pARvr30Z1kqHzzwAAAC8"]
[Thu Jul 30 11:27:18.566269 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 57.141.0.45:64442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:18.566910 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 57.141.0.45:64442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:18.738191 2026] [security2:error] [pid 2892702:tid 2892702] [client 34.125.84.50:40736] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsnBoKkL7TGv4rWA_iXhgAAABE"]
[Thu Jul 30 11:27:18.738373 2026] [security2:error] [pid 2892702:tid 2892702] [client 34.125.84.50:40736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amsnBoKkL7TGv4rWA_iXhgAAABE"]
[Thu Jul 30 11:27:18.738642 2026] [security2:error] [pid 2892702:tid 2892702] [client 34.125.84.50:40736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBoKkL7TGv4rWA_iXhgAAABE"]
[Thu Jul 30 11:27:18.891444 2026] [security2:error] [pid 2895074:tid 2895074] [client 34.125.84.50:40790] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amsnBrLt01WFu5rwy8-NiQAAAD8"]
[Thu Jul 30 11:27:18.891586 2026] [security2:error] [pid 2895074:tid 2895074] [client 34.125.84.50:40790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amsnBrLt01WFu5rwy8-NiQAAAD8"]
[Thu Jul 30 11:27:18.891770 2026] [security2:error] [pid 2895074:tid 2895074] [client 34.125.84.50:40790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBrLt01WFu5rwy8-NiQAAAD8"]
[Thu Jul 30 11:27:18.893992 2026] [security2:error] [pid 2894619:tid 2894619] [client 34.125.84.50:40758] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsnBv5KResGGVuwse9l9AAAADU"]
[Thu Jul 30 11:27:18.894274 2026] [security2:error] [pid 2894619:tid 2894619] [client 34.125.84.50:40758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amsnBv5KResGGVuwse9l9AAAADU"]
[Thu Jul 30 11:27:18.894459 2026] [security2:error] [pid 2894619:tid 2894619] [client 34.125.84.50:40758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBv5KResGGVuwse9l9AAAADU"]
[Thu Jul 30 11:27:19.013894 2026] [ssl:error] [pid 2892073:tid 2892073] (EAI 2)Name or service not known: [client 144.76.19.72:24280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:19.013934 2026] [ssl:error] [pid 2892073:tid 2892073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:19.069472 2026] [ssl:error] [pid 2894570:tid 2894570] (EAI 2)Name or service not known: [client 144.76.19.72:24290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:19.069499 2026] [ssl:error] [pid 2894570:tid 2894570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:19.164409 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.58:47368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:19.165026 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.58:47368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:19.172148 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.15:56840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:19.172763 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.15:56840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:19.178283 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40804] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amsnBw9McUc-P5Ffc558YQAAAAg"]
[Thu Jul 30 11:27:19.178453 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amsnBw9McUc-P5Ffc558YQAAAAg"]
[Thu Jul 30 11:27:19.178665 2026] [security2:error] [pid 2880698:tid 2880698] [client 34.125.84.50:40804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnBw9McUc-P5Ffc558YQAAAAg"]
[Thu Jul 30 11:27:19.181097 2026] [ssl:error] [pid 2880697:tid 2880697] (70014)End of file found: [client 216.73.216.199:22060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:19.285356 2026] [security2:error] [pid 2894255:tid 2894255] [client 34.125.84.50:40812] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amsnByXCOEOE70_2GmxAlQAAAB0"]
[Thu Jul 30 11:27:19.285556 2026] [security2:error] [pid 2894255:tid 2894255] [client 34.125.84.50:40812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amsnByXCOEOE70_2GmxAlQAAAB0"]
[Thu Jul 30 11:27:19.285742 2026] [security2:error] [pid 2894255:tid 2894255] [client 34.125.84.50:40812] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnByXCOEOE70_2GmxAlQAAAB0"]
[Thu Jul 30 11:27:19.332562 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:40816] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "customer.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amsnB1jOyJtFeRNnAGVz0QAAACE"]
[Thu Jul 30 11:27:19.332730 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:40816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "customer.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amsnB1jOyJtFeRNnAGVz0QAAACE"]
[Thu Jul 30 11:27:19.332914 2026] [security2:error] [pid 2894547:tid 2894547] [client 34.125.84.50:40816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "customer.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnB1jOyJtFeRNnAGVz0QAAACE"]
[Thu Jul 30 11:27:19.529692 2026] [security2:error] [pid 2894999:tid 2894999] [client 155.117.189.47:9351] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnB2cZvjZ8VTUvsbv-mQAAADg"]
[Thu Jul 30 11:27:19.529755 2026] [security2:error] [pid 2894999:tid 2894999] [client 155.117.189.47:9351] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnB2cZvjZ8VTUvsbv-mQAAADg"]
[Thu Jul 30 11:27:19.530028 2026] [security2:error] [pid 2894999:tid 2894999] [client 155.117.189.47:9351] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnB2cZvjZ8VTUvsbv-mQAAADg"]
[Thu Jul 30 11:27:19.757645 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.26:24496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:19.758335 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.26:24496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:20.062909 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 57.141.0.24:42928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:20.063559 2026] [authz_core:error] [pid 2892701:tid 2892701] [client 57.141.0.24:42928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:20.087690 2026] [core:error] [pid 2892127:tid 2892127] (13)Permission denied: [client 216.73.216.199:38057] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS2/port
[Thu Jul 30 11:27:20.309320 2026] [authz_core:error] [pid 2886518:tid 2886518] [client 57.141.0.15:56854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:20.310014 2026] [authz_core:error] [pid 2886518:tid 2886518] [client 57.141.0.15:56854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:20.330603 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.32:62354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:20.331263 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.32:62354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:20.515782 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.27:41362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:20.516471 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.27:41362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:20.991395 2026] [ssl:error] [pid 2892127:tid 2892127] (5)Input/output error: [client 216.73.216.199:38057] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:21.003987 2026] [cgi:error] [pid 2877508:tid 2877508] [client 20.48.234.177:34448] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:27:21.378893 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.68:43234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:21.379547 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.68:43234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:21.591994 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.50:29832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:21.592652 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.50:29832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:21.603285 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.13:59714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:21.603901 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.13:59714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:21.606670 2026] [autoindex:error] [pid 2892661:tid 2892661] [client 20.63.98.115:40286] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:27:22.142341 2026] [ssl:error] [pid 2886518:tid 2886518] (EAI 2)Name or service not known: [client 144.76.19.72:32792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:22.142380 2026] [ssl:error] [pid 2886518:tid 2886518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:22.169643 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.44:47296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:22.170258 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.44:47296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:22.195088 2026] [ssl:error] [pid 2895079:tid 2895079] (EAI 2)Name or service not known: [client 144.76.19.72:32800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:22.195123 2026] [ssl:error] [pid 2895079:tid 2895079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:22.489596 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.12:59752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:22.490213 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.12:59752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:23.328216 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.33:37464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:23.328856 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.33:37464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:23.400180 2026] [ssl:error] [pid 2894547:tid 2894547] (5)Input/output error: [client 216.73.216.199:16766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:23.574366 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.56:61812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:23.575011 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.56:61812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:23.630890 2026] [autoindex:error] [pid 2892661:tid 2892661] [client 20.63.98.115:40286] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:27:23.813697 2026] [security2:error] [pid 2895079:tid 2895079] [client 54.37.252.131:33508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.sijames.com"] [uri "/robots.txt"] [unique_id "amsnC-MQ1DcXdQcRVMT_QQAAAEY"]
[Thu Jul 30 11:27:24.098469 2026] [authz_core:error] [pid 2895042:tid 2895042] [client 57.141.0.58:57732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:24.099601 2026] [authz_core:error] [pid 2895042:tid 2895042] [client 57.141.0.58:57732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:24.435962 2026] [authz_core:error] [pid 2881470:tid 2881470] [client 57.141.0.24:42934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:24.436612 2026] [authz_core:error] [pid 2881470:tid 2881470] [client 57.141.0.24:42934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:24.462915 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.13:39240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:24.463550 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.13:39240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:24.891100 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.43:42180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:24.891722 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.43:42180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:25.203040 2026] [core:error] [pid 2894999:tid 2894999] (13)Permission denied: [client 216.73.216.199:55409] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/clearalignment.co.uk.db
[Thu Jul 30 11:27:25.250521 2026] [ssl:error] [pid 2895077:tid 2895077] (EAI 2)Name or service not known: [client 144.76.19.72:32808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:25.250569 2026] [ssl:error] [pid 2895077:tid 2895077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:25.305600 2026] [ssl:error] [pid 2895042:tid 2895042] (EAI 2)Name or service not known: [client 144.76.19.72:32816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:25.305637 2026] [ssl:error] [pid 2895042:tid 2895042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:25.485516 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.20:53228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:25.486158 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.20:53228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:25.857760 2026] [ssl:error] [pid 2894999:tid 2894999] (70014)End of file found: [client 216.73.216.199:55409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:26.048788 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.14:45272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:26.049473 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.14:45272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:26.104303 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.71:41628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:26.105009 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.71:41628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:26.415245 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.19:45586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:26.415870 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.19:45586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:26.616690 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.44:47318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:26.617318 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.44:47318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:26.721396 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.8:30782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:26.722020 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.8:30782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:26.737830 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.26:51308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:26.738438 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.26:51308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:26.885409 2026] [lsapi:warn] [pid 2895042:tid 2895042] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:27.015172 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.11:55328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:27.015797 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.11:55328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:27.068618 2026] [core:error] [pid 2894546:tid 2894546] (13)Permission denied: [client 216.73.216.199:5302] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS2/port
[Thu Jul 30 11:27:27.369385 2026] [ssl:error] [pid 2894546:tid 2894546] (5)Input/output error: [client 216.73.216.199:5302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:27.438594 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.6:63266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:27.439216 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.6:63266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:27.611243 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.35:48074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:27.611864 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.35:48074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:28.234958 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.59:49254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:28.235662 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.59:49254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:28.265441 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.12:59762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:28.266062 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.12:59762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:28.367661 2026] [ssl:error] [pid 2892701:tid 2892701] (EAI 2)Name or service not known: [client 144.76.19.72:32826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:28.367701 2026] [ssl:error] [pid 2892701:tid 2892701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:28.424199 2026] [ssl:error] [pid 2895078:tid 2895078] (EAI 2)Name or service not known: [client 144.76.19.72:32832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:28.424224 2026] [ssl:error] [pid 2895078:tid 2895078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:28.459607 2026] [security2:error] [pid 2894612:tid 2894612] [client 18.199.86.73:51534] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.annasmithagent.com"] [uri "/.git/config"] [unique_id "amsnEDwhyAIUO2Gw1TnQTgAAACo"]
[Thu Jul 30 11:27:28.459821 2026] [security2:error] [pid 2894612:tid 2894612] [client 18.199.86.73:51534] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.annasmithagent.com"] [uri "/.git/config"] [unique_id "amsnEDwhyAIUO2Gw1TnQTgAAACo"]
[Thu Jul 30 11:27:28.486379 2026] [security2:error] [pid 2894612:tid 2894612] [client 18.199.86.73:51534] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.annasmithagent.com"] [uri "/403.shtml"] [unique_id "amsnEDwhyAIUO2Gw1TnQTgAAACo"]
[Thu Jul 30 11:27:28.775302 2026] [authz_core:error] [pid 2895079:tid 2895079] [client 57.141.0.3:47332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:28.775923 2026] [authz_core:error] [pid 2895079:tid 2895079] [client 57.141.0.3:47332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:28.995434 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.22:62326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:28.996107 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.22:62326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:29.379593 2026] [security2:error] [pid 2894614:tid 2894614] [client 85.208.96.206:65110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/utah-license-verification-to-another-state"] [unique_id "amsnEe4SC_T7ljpY8Ie94wAAAC0"]
[Thu Jul 30 11:27:29.771601 2026] [ssl:error] [pid 2894616:tid 2894616] (70014)End of file found: [client 216.73.216.199:57444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:30.076450 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.37:33296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:30.077095 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.37:33296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:30.188975 2026] [authz_core:error] [pid 2895079:tid 2895079] [client 57.141.0.14:45276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:30.189604 2026] [authz_core:error] [pid 2895079:tid 2895079] [client 57.141.0.14:45276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:30.350028 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.32:55754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:30.350684 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.32:55754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:30.677706 2026] [authz_core:error] [pid 2895042:tid 2895042] [client 57.141.0.71:41634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:30.678344 2026] [authz_core:error] [pid 2895042:tid 2895042] [client 57.141.0.71:41634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:30.737105 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.28:31102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:30.737723 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.28:31102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:31.409733 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.27:38496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:31.410364 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.27:38496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:31.480817 2026] [ssl:error] [pid 2894618:tid 2894618] (EAI 2)Name or service not known: [client 144.76.19.72:51390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:31.480866 2026] [ssl:error] [pid 2894618:tid 2894618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:31.533024 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:51402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:31.533061 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:31.643587 2026] [security2:error] [pid 2895042:tid 2895042] [client 106.52.216.13:42092] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amsnE_aW8TY1wYj5-nZ7qQAAADw"]
[Thu Jul 30 11:27:32.084615 2026] [authz_core:error] [pid 2895076:tid 2895076] [client 57.141.0.15:62142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:32.085239 2026] [authz_core:error] [pid 2895076:tid 2895076] [client 57.141.0.15:62142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:32.177874 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.70:50118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:32.178499 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.70:50118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:32.235250 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.29:52440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:32.235887 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.29:52440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:32.453462 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.30:45724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:32.454155 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.30:45724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:32.951050 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.51:27500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:32.951681 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.51:27500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:33.116023 2026] [security2:error] [pid 2892073:tid 2892073] [client 114.119.144.31:22383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~19,102,30,14/request_format~html"] [unique_id "amsnFTFmp63qYeSPbG-bUQAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~19,102,30,14/request_format~html
[Thu Jul 30 11:27:33.354130 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.67:25018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:33.354759 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.67:25018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:33.387954 2026] [ssl:error] [pid 2889465:tid 2889465] (70014)End of file found: [client 216.73.216.199:38975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:33.570957 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.19:33470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:33.571650 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.19:33470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:34.093859 2026] [security2:error] [pid 2889424:tid 2889424] [client 114.119.144.31:22393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~19,102,30,14/request_format~html"] [unique_id "amsnFme7rn44tqRVmOaWAQAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~19,102,30,14/request_format~html
[Thu Jul 30 11:27:34.283502 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.51:27504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:34.284138 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.51:27504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:34.494705 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.8:30786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:34.495326 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.8:30786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:34.634579 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:51406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:34.634614 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:34.693499 2026] [ssl:error] [pid 2892019:tid 2892019] (EAI 2)Name or service not known: [client 144.76.19.72:51420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:34.693520 2026] [ssl:error] [pid 2892019:tid 2892019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:34.924212 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.5:56898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:34.924837 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.5:56898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:35.177630 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.62:44568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:35.178258 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.62:44568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:35.203783 2026] [authz_core:error] [pid 2894615:tid 2894615] [client 57.141.0.3:47338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:35.204405 2026] [authz_core:error] [pid 2894615:tid 2894615] [client 57.141.0.3:47338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:35.540909 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 66.249.66.34:54647] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:27:35.543580 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 66.249.66.34:54647] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:27:35.711774 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.14:37356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:35.712537 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.14:37356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:35.782042 2026] [authz_core:error] [pid 2894615:tid 2894615] [client 57.141.0.15:34408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:35.782677 2026] [authz_core:error] [pid 2894615:tid 2894615] [client 57.141.0.15:34408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:36.268092 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.13:35988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:36.268717 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.13:35988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:36.397305 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.7:25620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:36.397935 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.7:25620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:36.474003 2026] [core:error] [pid 2895079:tid 2895079] (13)Permission denied: [client 216.73.216.199:19804] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/run/dovecot/dovecot.conf.binary
[Thu Jul 30 11:27:37.150488 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.40:45370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:37.151125 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.40:45370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:37.247764 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.34:40856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:37.248386 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.34:40856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:37.390000 2026] [security2:error] [pid 2894615:tid 2894615] [client 47.128.56.137:28544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/robots.txt"] [unique_id "amsnGbb16YzJ6yP5sYMdpAAAADA"]
[Thu Jul 30 11:27:37.520200 2026] [lsapi:warn] [pid 2894612:tid 2894612] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:37.749935 2026] [ssl:error] [pid 2875766:tid 2875766] (EAI 2)Name or service not known: [client 144.76.19.72:51442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:37.749961 2026] [ssl:error] [pid 2875766:tid 2875766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:37.806235 2026] [ssl:error] [pid 2889424:tid 2889424] (EAI 2)Name or service not known: [client 144.76.19.72:51450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:37.806265 2026] [ssl:error] [pid 2889424:tid 2889424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:37.959219 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.12:24748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:37.959843 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.12:24748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:37.965607 2026] [authz_core:error] [pid 2892702:tid 2892702] [client 57.141.0.9:34098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:37.966221 2026] [authz_core:error] [pid 2892702:tid 2892702] [client 57.141.0.9:34098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:38.319194 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.7:25626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:38.319824 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.7:25626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:38.547545 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.29:52450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:38.548164 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.29:52450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:38.616977 2026] [security2:error] [pid 2892701:tid 2892701] [client 43.155.26.193:44108] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.co.uk"] [uri "/"] [unique_id "amsnGshg2MmHUZJfUdH4cgAAAA0"]
[Thu Jul 30 11:27:38.808453 2026] [ssl:error] [pid 2895075:tid 2895075] (70014)End of file found: [client 216.73.216.199:32106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:39.074389 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.22:43802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:39.075104 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.22:43802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:39.099250 2026] [security2:error] [pid 2892019:tid 2892019] [client 18.213.27.222:13987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/products/"] [unique_id "amsnG9NUQIdJOMwiP0nC5QAAAAI"]
[Thu Jul 30 11:27:39.104267 2026] [ssl:error] [pid 2895079:tid 2895079] (5)Input/output error: [client 216.73.216.199:19804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:39.450015 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.12:24760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:39.450645 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.12:24760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:39.471274 2026] [lsapi:warn] [pid 2895045:tid 2895045] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:39.508825 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.3:42750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:39.509440 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.3:42750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:39.703908 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.62:44582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:39.704537 2026] [authz_core:error] [pid 2892073:tid 2892073] [client 57.141.0.62:44582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:40.465004 2026] [security2:error] [pid 2894571:tid 2894571] [client 43.155.26.193:44956] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsnHAzgMsuihQ5WD25KDgAAACU"], referer: http://www.jasperandtroy.co.uk
[Thu Jul 30 11:27:40.861062 2026] [ssl:error] [pid 2895045:tid 2895045] (EAI 2)Name or service not known: [client 144.76.19.72:44520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:40.861120 2026] [ssl:error] [pid 2895045:tid 2895045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:40.870965 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.36:61982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:40.871666 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.36:61982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:40.916553 2026] [ssl:error] [pid 2889465:tid 2889465] (EAI 2)Name or service not known: [client 144.76.19.72:44522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:40.916615 2026] [ssl:error] [pid 2889465:tid 2889465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:41.141784 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.56:59466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:41.142405 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.56:59466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:41.492994 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.46:37972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:41.493637 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.46:37972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:41.510946 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.4:63298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:41.511633 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.4:63298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:41.518642 2026] [ssl:error] [pid 2894572:tid 2894572] (70014)End of file found: [client 216.73.216.199:21889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:41.904375 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.56:59476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:41.904991 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.56:59476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:42.567228 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.1:40064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:42.568235 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.1:40064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:42.734230 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.15:34420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:42.734847 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.15:34420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:42.959555 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.56:59488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:42.960179 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.56:59488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:43.440739 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.61:49922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:43.441423 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.61:49922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:43.580290 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.46:37974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:43.580952 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.46:37974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:43.886311 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.38:49466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:43.886930 2026] [authz_core:error] [pid 2895045:tid 2895045] [client 57.141.0.38:49466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:43.945987 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.60:36596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:43.946616 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.60:36596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:43.972518 2026] [ssl:error] [pid 2894254:tid 2894254] (EAI 2)Name or service not known: [client 144.76.19.72:44528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:43.972563 2026] [ssl:error] [pid 2894254:tid 2894254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:44.030393 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:44540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:44.030420 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:44.537992 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.64:40190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:44.539126 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.64:40190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:44.716791 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.12:31760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:44.717409 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.12:31760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:44.821819 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.2:44172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:44.822443 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.2:44172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:45.568195 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.30:27704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:45.568826 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.30:27704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:46.137452 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.40:42530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:46.138090 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.40:42530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:46.187248 2026] [core:error] [pid 2894613:tid 2894613] (13)Permission denied: [client 216.73.216.199:28162] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/physical_node/0000:00:01.1/remove
[Thu Jul 30 11:27:46.334465 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.62:20826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:46.335098 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.62:20826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:46.640794 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.52:25760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:46.641422 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.52:25760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:46.690715 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.58:59504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:46.691334 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.58:59504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:46.733396 2026] [security2:error] [pid 2894573:tid 2894573] [client 47.128.32.117:52400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/robots.txt"] [unique_id "amsnIrID4KYf38RizHCSkwAAACk"]
[Thu Jul 30 11:27:46.891195 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.16:43636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:46.891819 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.16:43636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:47.084978 2026] [ssl:error] [pid 2894613:tid 2894613] (70014)End of file found: [client 216.73.216.199:28162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:47.088937 2026] [ssl:error] [pid 2894571:tid 2894571] (EAI 2)Name or service not known: [client 144.76.19.72:44550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:47.088971 2026] [ssl:error] [pid 2894571:tid 2894571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:47.145225 2026] [ssl:error] [pid 2894547:tid 2894547] (EAI 2)Name or service not known: [client 144.76.19.72:44562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:47.145270 2026] [ssl:error] [pid 2894547:tid 2894547] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:47.227551 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.49:30288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:47.228362 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.49:30288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:47.691806 2026] [core:error] [pid 2889424:tid 2889424] (13)Permission denied: [client 216.73.216.199:34335] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS2/port
[Thu Jul 30 11:27:47.827693 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.26:36458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:47.828313 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.26:36458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:48.559942 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.14:33350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:48.560578 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.14:33350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:48.721062 2026] [security2:error] [pid 2895077:tid 2895077] [client 47.128.32.117:20060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/403.shtml"] [unique_id "amsnJHurUx5uYeZmIzwixAAAAEQ"]
[Thu Jul 30 11:27:48.873743 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.30:27716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:48.874391 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.30:27716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:48.944627 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.21:49824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:48.945254 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.21:49824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:48.997106 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.8:31316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:48.997738 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.8:31316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:49.076058 2026] [lsapi:warn] [pid 2886479:tid 2886479] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:49.141385 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.43:39684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:49.142048 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.43:39684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:49.759374 2026] [security2:error] [pid 2892701:tid 2892701] [client 85.208.96.194:32100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2988.0/prev_next,prev.html"] [unique_id "amsnJchg2MmHUZJfUdH4iAAAAA0"]
[Thu Jul 30 11:27:49.815426 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.5:40272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:49.816053 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.5:40272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:49.869056 2026] [lsapi:warn] [pid 2895081:tid 2895081] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:50.200758 2026] [ssl:error] [pid 2889465:tid 2889465] (EAI 2)Name or service not known: [client 144.76.19.72:21604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:50.200798 2026] [ssl:error] [pid 2889465:tid 2889465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:50.255565 2026] [ssl:error] [pid 2894618:tid 2894618] (EAI 2)Name or service not known: [client 144.76.19.72:21610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:50.255618 2026] [ssl:error] [pid 2894618:tid 2894618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:50.585880 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.71:25236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:50.586501 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.71:25236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:51.075189 2026] [authz_core:error] [pid 2895075:tid 2895075] [client 57.141.0.39:64908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:51.075812 2026] [authz_core:error] [pid 2895075:tid 2895075] [client 57.141.0.39:64908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:51.312906 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.47:56640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:51.313564 2026] [authz_core:error] [pid 2894618:tid 2894618] [client 57.141.0.47:56640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:51.315509 2026] [ssl:error] [pid 2875766:tid 2875766] (70014)End of file found: [client 216.73.216.199:51690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:51.420202 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.61:57174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:51.420828 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.61:57174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:51.856704 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.25:48396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:51.857329 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.25:48396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:51.932901 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.52:26420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:51.933612 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.52:26420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:52.376499 2026] [authz_core:error] [pid 2895075:tid 2895075] [client 57.141.0.36:29702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:52.377130 2026] [authz_core:error] [pid 2895075:tid 2895075] [client 57.141.0.36:29702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:52.427163 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.38:41068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:52.427781 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.38:41068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:52.838491 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.47:30210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:52.839127 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.47:30210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:53.329341 2026] [ssl:error] [pid 2894612:tid 2894612] (EAI 2)Name or service not known: [client 144.76.19.72:21624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:53.329391 2026] [ssl:error] [pid 2894612:tid 2894612] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:53.387412 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:21638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:53.387440 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:53.471281 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.51:41336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:53.471912 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.51:41336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:53.694838 2026] [authz_core:error] [pid 2895040:tid 2895040] [client 57.141.0.1:50250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:53.695457 2026] [authz_core:error] [pid 2895040:tid 2895040] [client 57.141.0.1:50250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:53.832282 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.31:42568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:53.832916 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.31:42568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:54.596293 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.21:41162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:54.596917 2026] [authz_core:error] [pid 2892129:tid 2892129] [client 57.141.0.21:41162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:54.774384 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.70:55136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:54.775033 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.70:55136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:54.780270 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.62:55280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:54.780876 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.62:55280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:55.313964 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.66:45848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:55.314612 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.66:45848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:55.432243 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.41:64174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:55.432868 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.41:64174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:56.377655 2026] [authz_core:error] [pid 2895040:tid 2895040] [client 57.141.0.24:40966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:56.378283 2026] [authz_core:error] [pid 2895040:tid 2895040] [client 57.141.0.24:40966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:56.378281 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.56:52350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:56.378894 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.56:52350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:56.444369 2026] [ssl:error] [pid 2889465:tid 2889465] (EAI 2)Name or service not known: [client 144.76.19.72:21644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:56.444415 2026] [ssl:error] [pid 2889465:tid 2889465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:56.486098 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.9:27876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:56.486722 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.9:27876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:56.501030 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:21658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:56.501057 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:57.078974 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.12:36826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:57.079606 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.12:36826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:57.505999 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.39:23400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:57.506639 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.39:23400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:57.514559 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.64:38084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:57.515175 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.64:38084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:57.820370 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.29:44926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:57.820998 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.29:44926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:58.032209 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.19:31614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:58.032857 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.19:31614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:58.323772 2026] [ssl:error] [pid 2889424:tid 2889424] (70014)End of file found: [client 216.73.216.199:34335] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:27:58.452285 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.25:20398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:58.452907 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.25:20398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:58.589063 2026] [core:error] [pid 2880697:tid 2880697] [client 66.249.64.170:53485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:27:58.589105 2026] [core:error] [pid 2880697:tid 2880697] [client 66.249.64.170:53485] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:27:58.625645 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.56:63702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:58.626287 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.56:63702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:58.814618 2026] [lsapi:warn] [pid 2895080:tid 2895080] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:27:58.930756 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.70:51914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:58.931748 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.70:51914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:27:59.555756 2026] [ssl:error] [pid 2894571:tid 2894571] (EAI 2)Name or service not known: [client 144.76.19.72:47066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:59.555796 2026] [ssl:error] [pid 2894571:tid 2894571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:59.613625 2026] [ssl:error] [pid 2889505:tid 2889505] (EAI 2)Name or service not known: [client 144.76.19.72:47070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:27:59.613658 2026] [ssl:error] [pid 2889505:tid 2889505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:27:59.918094 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.14:46442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:27:59.918734 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.14:46442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:00.039932 2026] [core:error] [pid 2894612:tid 2894612] (13)Permission denied: [client 216.73.216.199:17377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/scsi_host/host1/scan
[Thu Jul 30 11:28:00.262627 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.21:41176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:00.263249 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.21:41176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:00.345850 2026] [lsapi:warn] [pid 2875766:tid 2875766] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:00.435028 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.26:34346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:00.435658 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.26:34346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:00.628558 2026] [security2:error] [pid 2894571:tid 2894571] [client 74.7.227.11:53388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "stampys.eu"] [uri "/"] [unique_id "amsnMAzgMsuihQ5WD25KFgAAACU"]
[Thu Jul 30 11:28:00.780290 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.9:27890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:00.780963 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.9:27890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:00.836579 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.48:42840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:00.837206 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.48:42840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:01.249058 2026] [core:error] [pid 2892019:tid 2892019] (13)Permission denied: [client 216.73.216.199:24452] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/signal_cache/sanity_checks
[Thu Jul 30 11:28:01.406883 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.30:40364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:01.407577 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.30:40364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:01.554669 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.52:30954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:01.555589 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.52:30954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:01.824270 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.31:57698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:01.824893 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.31:57698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:02.430493 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.65:50090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:02.431576 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.65:50090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:02.660478 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 216.73.216.199:10834] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 11:28:02.668453 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:47076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:02.668494 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:02.722094 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:47090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:02.722151 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:03.006097 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.25:20410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:03.006727 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.25:20410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:03.306177 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.43:43622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:03.306802 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.43:43622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:03.614973 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.63:34286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:03.615633 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.63:34286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:03.914018 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.63:34288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:03.914650 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.63:34288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:03.976436 2026] [core:error] [pid 2894572:tid 2894572] (13)Permission denied: [client 216.73.216.199:54804] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/poison
[Thu Jul 30 11:28:04.021007 2026] [security2:error] [pid 2886479:tid 2886479] [client 18.199.86.73:52204] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.auroravation.com"] [uri "/.git/config"] [unique_id "amsnNKCEbdY5jWBiEj9srQAAAB8"]
[Thu Jul 30 11:28:04.021201 2026] [security2:error] [pid 2886479:tid 2886479] [client 18.199.86.73:52204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.auroravation.com"] [uri "/.git/config"] [unique_id "amsnNKCEbdY5jWBiEj9srQAAAB8"]
[Thu Jul 30 11:28:04.049692 2026] [security2:error] [pid 2886479:tid 2886479] [client 18.199.86.73:52204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.auroravation.com"] [uri "/403.shtml"] [unique_id "amsnNKCEbdY5jWBiEj9srQAAAB8"]
[Thu Jul 30 11:28:04.246508 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.48:42846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:04.247174 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.48:42846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:04.845897 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.67:55782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:04.846574 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.67:55782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:05.181326 2026] [core:error] [pid 2894572:tid 2894572] (13)Permission denied: [client 216.73.216.199:54804] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_io_end/poison
[Thu Jul 30 11:28:05.209526 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.12:21070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:05.210174 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.12:21070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:05.803223 2026] [ssl:error] [pid 2897726:tid 2897726] (EAI 2)Name or service not known: [client 144.76.19.72:47102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:05.803269 2026] [ssl:error] [pid 2897726:tid 2897726] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:05.859030 2026] [ssl:error] [pid 2894254:tid 2894254] (EAI 2)Name or service not known: [client 144.76.19.72:47110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:05.859087 2026] [ssl:error] [pid 2894254:tid 2894254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:05.874295 2026] [authz_core:error] [pid 2897725:tid 2897725] [client 57.141.0.7:64868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:05.874949 2026] [authz_core:error] [pid 2897725:tid 2897725] [client 57.141.0.7:64868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:06.119993 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.18:39990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:06.121110 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.18:39990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:06.386497 2026] [ssl:error] [pid 2894572:tid 2894572] (70014)End of file found: [client 216.73.216.199:54804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:06.431324 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.26:31134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:06.431970 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.26:31134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:06.589213 2026] [authz_core:error] [pid 2897726:tid 2897726] [client 57.141.0.64:53388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:06.589847 2026] [authz_core:error] [pid 2897726:tid 2897726] [client 57.141.0.64:53388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:06.965282 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.9:45264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:06.965909 2026] [authz_core:error] [pid 2894612:tid 2894612] [client 57.141.0.9:45264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:07.448042 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.55:59584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:07.448676 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.55:59584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:07.887270 2026] [core:error] [pid 2880698:tid 2880698] (13)Permission denied: [client 216.73.216.199:20773] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rud_item/hwcache_align
[Thu Jul 30 11:28:08.085203 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.12:21074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:08.085827 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.12:21074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:08.321519 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.7:64872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:08.322506 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.7:64872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:08.831148 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.45:20706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:08.831775 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.45:20706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:08.934754 2026] [ssl:error] [pid 2894254:tid 2894254] (EAI 2)Name or service not known: [client 144.76.19.72:47126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:08.934788 2026] [ssl:error] [pid 2894254:tid 2894254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:08.990608 2026] [ssl:error] [pid 2893302:tid 2893302] (EAI 2)Name or service not known: [client 144.76.19.72:47140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:08.990643 2026] [ssl:error] [pid 2893302:tid 2893302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:09.106452 2026] [security2:error] [pid 2894614:tid 2894614] [client 43.161.251.162:45148] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.com"] [uri "/"] [unique_id "amsnOe4SC_T7ljpY8Ie99QAAAC0"]
[Thu Jul 30 11:28:09.147985 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.20:31704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:09.148621 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.20:31704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:09.501352 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.71:43126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:09.501982 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.71:43126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:09.535029 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.65:50092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:09.535692 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.65:50092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:09.693057 2026] [core:error] [pid 2880698:tid 2880698] (13)Permission denied: [client 216.73.216.199:20773] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty37/subsystem/ttyS0/uartclk
[Thu Jul 30 11:28:09.803677 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.48:27808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:09.804301 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.48:27808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:09.997985 2026] [ssl:error] [pid 2880698:tid 2880698] (70014)End of file found: [client 216.73.216.199:20773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:10.040204 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.3:31068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:10.040823 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.3:31068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:10.056439 2026] [security2:error] [pid 2877508:tid 2877508] [client 154.72.122.13:14938] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnOtl67kgWQMVF6hjVAQAAACQ"]
[Thu Jul 30 11:28:10.056486 2026] [security2:error] [pid 2877508:tid 2877508] [client 154.72.122.13:14938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnOtl67kgWQMVF6hjVAQAAACQ"]
[Thu Jul 30 11:28:10.056734 2026] [security2:error] [pid 2877508:tid 2877508] [client 154.72.122.13:14938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnOtl67kgWQMVF6hjVAQAAACQ"]
[Thu Jul 30 11:28:10.110809 2026] [lsapi:warn] [pid 2888285:tid 2888285] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:10.289465 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.35:44330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:10.290100 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.35:44330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:10.303661 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.42:36696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:10.304290 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.42:36696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:10.658648 2026] [access_compat:error] [pid 2894573:tid 2894573] [client 136.158.37.124:64174] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:28:10.803655 2026] [lsapi:warn] [pid 2897111:tid 2897111] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:11.163705 2026] [access_compat:error] [pid 2889465:tid 2889465] [client 45.158.164.139:49222] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:28:11.175390 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.27:65306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:11.176013 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.27:65306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:11.198055 2026] [ssl:error] [pid 2895078:tid 2895078] (70014)End of file found: [client 216.73.216.199:64162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:11.404449 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:43486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:11.405077 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:43486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:11.868949 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.38:38294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:11.869583 2026] [authz_core:error] [pid 2886479:tid 2886479] [client 57.141.0.38:38294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:12.029190 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.27:65320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:12.029833 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.27:65320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:12.047859 2026] [ssl:error] [pid 2897990:tid 2897990] (EAI 2)Name or service not known: [client 144.76.19.72:28518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:12.047900 2026] [ssl:error] [pid 2897990:tid 2897990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:12.114999 2026] [ssl:error] [pid 2889465:tid 2889465] (EAI 2)Name or service not known: [client 144.76.19.72:28524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:12.115034 2026] [ssl:error] [pid 2889465:tid 2889465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:12.170383 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.34:39406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:12.171024 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.34:39406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:12.247953 2026] [security2:error] [pid 2894572:tid 2894572] [client 114.119.136.164:50871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.first-grade.co.uk"] [uri "/index.html"] [unique_id "amsnPJGXA1NrGKaT9Xhw_wAAACc"], referer: https://www.gogreennow.co.uk/green-directory/first-grade-recycling-systems/
[Thu Jul 30 11:28:12.391326 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.69:59882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:12.391948 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.69:59882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:13.041981 2026] [security2:error] [pid 2889465:tid 2889465] [client 14.173.142.213:34668] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnPRZrrfIRso3C5mRnbgAAACg"]
[Thu Jul 30 11:28:13.042043 2026] [security2:error] [pid 2889465:tid 2889465] [client 14.173.142.213:34668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnPRZrrfIRso3C5mRnbgAAACg"]
[Thu Jul 30 11:28:13.042303 2026] [security2:error] [pid 2889465:tid 2889465] [client 14.173.142.213:34668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnPRZrrfIRso3C5mRnbgAAACg"]
[Thu Jul 30 11:28:13.204721 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.21:33606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:13.205347 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.21:33606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:13.636618 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.2:26354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:13.637243 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.2:26354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:13.907378 2026] [ssl:error] [pid 2889370:tid 2889370] (70014)End of file found: [client 216.73.216.199:22950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:13.993255 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.41:63078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:13.994379 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.41:63078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:14.272773 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.6:29388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:14.273396 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.6:29388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:15.203083 2026] [security2:error] [pid 2894255:tid 2894255] [client 18.235.158.19:13928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amsnPyXCOEOE70_2GmxArgAAAB0"]
[Thu Jul 30 11:28:15.240855 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.48:27810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:15.241483 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.48:27810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:15.411938 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.56:53266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:15.412571 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.56:53266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:15.496612 2026] [security2:error] [pid 2889505:tid 2889505] [client 43.165.67.31:50440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.innerspacer.co.uk"] [uri "/"] [unique_id "amsnP8mSgdc8QcZd2PtA0wAAADs"]
[Thu Jul 30 11:28:15.746481 2026] [ssl:error] [pid 2877508:tid 2877508] (EAI 2)Name or service not known: [client 144.76.19.72:28526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:15.746514 2026] [ssl:error] [pid 2877508:tid 2877508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:15.757349 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.19:40476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:15.757963 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.19:40476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:15.863897 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.31:48452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:15.864512 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.31:48452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:15.930469 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.24:39590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:15.931101 2026] [authz_core:error] [pid 2889505:tid 2889505] [client 57.141.0.24:39590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:16.015647 2026] [ssl:error] [pid 2889505:tid 2889505] (EAI 2)Name or service not known: [client 144.76.19.72:28538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:16.015675 2026] [ssl:error] [pid 2889505:tid 2889505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:16.017379 2026] [core:error] [pid 2880698:tid 2880698] (13)Permission denied: [client 216.73.216.199:7151] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/names_cache/reclaim_account
[Thu Jul 30 11:28:16.697513 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.41:63094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:16.698177 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.41:63094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:16.723955 2026] [authz_core:error] [pid 2898155:tid 2898155] [client 57.141.0.20:55580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:16.724614 2026] [authz_core:error] [pid 2898155:tid 2898155] [client 57.141.0.20:55580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:16.920224 2026] [core:error] [pid 2880698:tid 2880698] (13)Permission denied: [client 216.73.216.199:7151] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:1a/subsystem/drivers_probe
[Thu Jul 30 11:28:16.973308 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.54:27934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:16.973954 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.54:27934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:17.290238 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.8:50216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:17.290924 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.8:50216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:17.903075 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.27:65334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:17.903726 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.27:65334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:18.006874 2026] [security2:error] [pid 2895080:tid 2895080] [client 190.196.254.40:58814] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnQgIW4bfXoPXjsDCCAQAAAEc"]
[Thu Jul 30 11:28:18.006920 2026] [security2:error] [pid 2895080:tid 2895080] [client 190.196.254.40:58814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnQgIW4bfXoPXjsDCCAQAAAEc"]
[Thu Jul 30 11:28:18.007189 2026] [security2:error] [pid 2895080:tid 2895080] [client 190.196.254.40:58814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnQgIW4bfXoPXjsDCCAQAAAEc"]
[Thu Jul 30 11:28:18.153541 2026] [core:error] [pid 2880698:tid 2880698] (13)Permission denied: [client 216.73.216.199:7151] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory234/subsystem/uevent
[Thu Jul 30 11:28:18.283823 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.55:27278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:18.284455 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.55:27278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:18.593901 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.14:63566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:18.594534 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.14:63566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:18.725937 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.31:56100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:18.726569 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.31:56100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:18.758009 2026] [ssl:error] [pid 2880698:tid 2880698] (70014)End of file found: [client 216.73.216.199:7151] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:18.816479 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.50:35564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:18.817132 2026] [authz_core:error] [pid 2895078:tid 2895078] [client 57.141.0.50:35564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:18.900402 2026] [security2:error] [pid 2897111:tid 2897111] [client 50.16.248.61:48564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amsnQgqBItcQ8K2vu9L8UgAAAAA"]
[Thu Jul 30 11:28:19.067592 2026] [ssl:error] [pid 2889505:tid 2889505] (EAI 2)Name or service not known: [client 144.76.19.72:28540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:19.067622 2026] [ssl:error] [pid 2889505:tid 2889505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:19.122485 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 66.249.66.33:55644] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:28:19.123490 2026] [ssl:error] [pid 2898208:tid 2898208] (EAI 2)Name or service not known: [client 144.76.19.72:28550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:19.123541 2026] [ssl:error] [pid 2898208:tid 2898208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:19.125178 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 66.249.66.33:55644] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:28:19.161887 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.23:64936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:19.162510 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.23:64936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:19.564340 2026] [core:error] [pid 2889505:tid 2889505] [client 66.249.66.8:43836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:28:19.564369 2026] [core:error] [pid 2889505:tid 2889505] [client 66.249.66.8:43836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:28:19.662825 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.34:22046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:19.663444 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.34:22046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:20.018268 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.61:62614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:20.018955 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.61:62614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:20.033895 2026] [lsapi:warn] [pid 2895080:tid 2895080] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:20.383437 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.13:24138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:20.384054 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.13:24138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:20.625767 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.65:20468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:20.626448 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.65:20468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:20.786804 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.4:45858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:20.787426 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.4:45858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:20.865726 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.5:35924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:20.866510 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.5:35924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:21.268224 2026] [lsapi:warn] [pid 2898449:tid 2898449] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:21.269560 2026] [access_compat:error] [pid 2880697:tid 2880697] [client 136.158.37.124:2235] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:28:21.460407 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.39:40492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:21.461051 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.39:40492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:21.488812 2026] [core:error] [pid 2892129:tid 2892129] (13)Permission denied: [client 216.73.216.199:62712] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rud_item/slabs_cpu_partial
[Thu Jul 30 11:28:22.207271 2026] [ssl:error] [pid 2889465:tid 2889465] (EAI 2)Name or service not known: [client 144.76.19.72:38582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:22.207311 2026] [ssl:error] [pid 2889465:tid 2889465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:22.224684 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.71:27428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:22.225303 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.71:27428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:22.260239 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:38586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:22.260262 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:22.391760 2026] [core:error] [pid 2892129:tid 2892129] (13)Permission denied: [client 216.73.216.199:62712] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/uartclk
[Thu Jul 30 11:28:22.507927 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.12:34822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:22.508560 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.12:34822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:22.692853 2026] [ssl:error] [pid 2892129:tid 2892129] (70014)End of file found: [client 216.73.216.199:62712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:22.994080 2026] [ssl:error] [pid 2898209:tid 2898209] (70014)End of file found: [client 216.73.216.199:60800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:23.037140 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.21:57378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:23.037754 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.21:57378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:23.323290 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.2:41718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:23.323940 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.2:41718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:23.482933 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.15:46018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:23.483624 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.15:46018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:23.609351 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.67:28112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:23.610039 2026] [authz_core:error] [pid 2873873:tid 2873873] [client 57.141.0.67:28112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:24.088080 2026] [core:error] [pid 2893485:tid 2893485] (13)Permission denied: [client 216.73.216.199:1772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bud_item/min_partial
[Thu Jul 30 11:28:24.197658 2026] [core:error] [pid 2893485:tid 2893485] (13)Permission denied: [client 216.73.216.199:1772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/virtio/drivers/virtio_rproc_serial/bind
[Thu Jul 30 11:28:24.207429 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.67:28126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:24.208142 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.67:28126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:24.566985 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.15:46022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:24.567616 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.15:46022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:24.799784 2026] [ssl:error] [pid 2893485:tid 2893485] (70014)End of file found: [client 216.73.216.199:1772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:24.970883 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.30:24178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:24.971501 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.30:24178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:25.043229 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.37:47324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:25.043872 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.37:47324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:25.104966 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.12:34824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:25.105604 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.12:34824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:25.313643 2026] [ssl:error] [pid 2898449:tid 2898449] (EAI 2)Name or service not known: [client 144.76.19.72:38596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:25.313683 2026] [ssl:error] [pid 2898449:tid 2898449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:25.324479 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.63:44054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:25.325139 2026] [authz_core:error] [pid 2894571:tid 2894571] [client 57.141.0.63:44054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:25.427760 2026] [ssl:error] [pid 2898640:tid 2898640] (EAI 2)Name or service not known: [client 144.76.19.72:38608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:25.427820 2026] [ssl:error] [pid 2898640:tid 2898640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:25.958044 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.20:59824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:25.958680 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.20:59824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:26.041959 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.48:36176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:26.042617 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.48:36176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:26.470330 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.45:43344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:26.470956 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.45:43344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:26.927981 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.45:43358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:26.930602 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.45:43358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:26.972325 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.19:64050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:26.972949 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.19:64050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:27.742558 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.64:58624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:27.743192 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.64:58624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:27.831431 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.59:57892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:27.832056 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.59:57892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:28.366375 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.36:38172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:28.366995 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.36:38172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:28.502701 2026] [ssl:error] [pid 2895078:tid 2895078] (EAI 2)Name or service not known: [client 144.76.19.72:38622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:28.502728 2026] [ssl:error] [pid 2895078:tid 2895078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:28.560858 2026] [ssl:error] [pid 2892129:tid 2892129] (EAI 2)Name or service not known: [client 144.76.19.72:38626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:28.560881 2026] [ssl:error] [pid 2892129:tid 2892129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:28.942709 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.32:29954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:28.943332 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.32:29954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:29.300449 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.71:55142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:29.301113 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.71:55142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:29.538305 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.29:36514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:29.538958 2026] [authz_core:error] [pid 2894546:tid 2894546] [client 57.141.0.29:36514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:29.725570 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.42:27190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:29.726197 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.42:27190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:29.945477 2026] [security2:error] [pid 2895078:tid 2895078] [client 185.191.171.17:58526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/petit-larceny-oklahoma"] [unique_id "amsnTWwkrHeMb3sCytB86gAAAEU"]
[Thu Jul 30 11:28:30.218321 2026] [core:error] [pid 2894547:tid 2894547] (13)Permission denied: [client 216.73.216.199:49905] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/demodomains
[Thu Jul 30 11:28:30.372997 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.4:45860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:30.373628 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.4:45860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:30.436119 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.47:31660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:30.436765 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.47:31660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:30.672483 2026] [lsapi:warn] [pid 2894613:tid 2894613] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:30.701927 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.70:24108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:30.702561 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.70:24108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:30.819829 2026] [ssl:error] [pid 2894547:tid 2894547] (70014)End of file found: [client 216.73.216.199:49905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:31.428571 2026] [core:error] [pid 2897111:tid 2897111] (13)Permission denied: [client 216.73.216.199:52614] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty61/subsystem/ttyS2/closing_wait
[Thu Jul 30 11:28:31.616260 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:25168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:31.616303 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:31.674371 2026] [ssl:error] [pid 2895080:tid 2895080] (EAI 2)Name or service not known: [client 144.76.19.72:25170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:31.674407 2026] [ssl:error] [pid 2895080:tid 2895080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:31.680046 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.34:59506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:31.680701 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.34:59506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:31.721148 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.8:59244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:31.721797 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.8:59244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:31.727127 2026] [lsapi:warn] [pid 2897990:tid 2897990] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:31.825843 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.47:26622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:31.826466 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.47:26622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:31.846420 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.39:36528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:31.847087 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.39:36528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:32.027960 2026] [core:error] [pid 2897111:tid 2897111] (13)Permission denied: [client 216.73.216.199:52614] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS0/uartclk
[Thu Jul 30 11:28:32.065807 2026] [access_compat:error] [pid 2889370:tid 2889370] [client 136.158.37.124:117] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:28:32.402169 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.51:27478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:32.402786 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.51:27478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:32.552306 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.50:42346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:32.552930 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.50:42346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:33.303287 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.45:43370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:33.303936 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.45:43370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:33.702666 2026] [ssl:error] [pid 2897111:tid 2897111] (70014)End of file found: [client 216.73.216.199:52614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:33.794992 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.7:63708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:33.795684 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.7:63708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:33.913967 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.58:34828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:33.914622 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.58:34828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:34.033834 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.3:45150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:34.034455 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.3:45150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:34.612668 2026] [ssl:error] [pid 2898045:tid 2898045] (70014)End of file found: [client 216.73.216.199:6203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:34.731354 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:25182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:34.731381 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:34.817994 2026] [ssl:error] [pid 2897990:tid 2897990] (EAI 2)Name or service not known: [client 144.76.19.72:25194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:34.818020 2026] [ssl:error] [pid 2897990:tid 2897990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:34.943662 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.50:42356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:34.944308 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.50:42356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:35.184094 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.29:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:35.184734 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.29:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:35.534040 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.55:58860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:35.534701 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.55:58860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:35.780352 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.24:44694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:35.780977 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.24:44694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:35.975030 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.51:29506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:35.975663 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.51:29506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:36.079123 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.15:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:36.079751 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.15:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:36.307228 2026] [ssl:error] [pid 2889505:tid 2889505] (70014)End of file found: [client 216.73.216.199:8311] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:36.791725 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.19:57546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:36.792394 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.19:57546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:37.140926 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.38:58940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:37.141561 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.38:58940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:37.192036 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.30:25764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:37.192686 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.30:25764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:37.364344 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.16:49772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:37.364993 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.16:49772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:37.873764 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:25200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:37.873789 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:37.929666 2026] [ssl:error] [pid 2880698:tid 2880698] (EAI 2)Name or service not known: [client 144.76.19.72:25210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:37.929693 2026] [ssl:error] [pid 2880698:tid 2880698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:38.423657 2026] [authz_core:error] [pid 2898641:tid 2898641] [client 57.141.0.27:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:38.424278 2026] [authz_core:error] [pid 2898641:tid 2898641] [client 57.141.0.27:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:38.622397 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.59:24610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:38.623017 2026] [authz_core:error] [pid 2880698:tid 2880698] [client 57.141.0.59:24610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:38.624976 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.13:33536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:38.625624 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.13:33536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:39.161683 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.1:38050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:39.162309 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.1:38050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:39.216210 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.27:63554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:39.216832 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.27:63554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:39.282423 2026] [core:error] [pid 2897111:tid 2897111] [client 66.249.66.168:45515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:28:39.282478 2026] [core:error] [pid 2897111:tid 2897111] [client 66.249.66.168:45515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:28:39.286518 2026] [core:error] [pid 2893302:tid 2893302] [client 66.249.66.40:52775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:28:39.286550 2026] [core:error] [pid 2893302:tid 2893302] [client 66.249.66.40:52775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:28:39.809284 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.42:21982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:39.809906 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.42:21982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:39.835265 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.8:64634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:39.835894 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.8:64634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:40.581479 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.69:52378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:40.582113 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.69:52378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:40.943201 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.49:60136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:40.943826 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.49:60136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:40.984036 2026] [ssl:error] [pid 2898045:tid 2898045] (EAI 2)Name or service not known: [client 144.76.19.72:42390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:40.984092 2026] [ssl:error] [pid 2898045:tid 2898045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:41.039389 2026] [ssl:error] [pid 2898046:tid 2898046] (EAI 2)Name or service not known: [client 144.76.19.72:42400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:41.039424 2026] [ssl:error] [pid 2898046:tid 2898046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:41.314151 2026] [lsapi:warn] [pid 2889370:tid 2889370] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:41.475433 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.31:42564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:41.476095 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.31:42564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:41.604656 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.61:35438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:41.605286 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.61:35438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:41.871826 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.32:45108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:41.872446 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.32:45108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:42.023257 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.20:23596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:42.023886 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.20:23596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:42.173631 2026] [ssl:error] [pid 2894613:tid 2894613] (70014)End of file found: [client 216.73.216.199:3302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:42.233359 2026] [lsapi:warn] [pid 2877508:tid 2877508] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:42.474311 2026] [core:error] [pid 2893302:tid 2893302] (13)Permission denied: [client 216.73.216.199:31914] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/usbmon/usbmon1/device/driver/unbind
[Thu Jul 30 11:28:42.499290 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.8:64636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:42.499910 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.8:64636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:42.774789 2026] [ssl:error] [pid 2893302:tid 2893302] (70014)End of file found: [client 216.73.216.199:31914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:42.879819 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.5:51720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:42.880440 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.5:51720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:42.992938 2026] [access_compat:error] [pid 2889370:tid 2889370] [client 136.158.37.124:858] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:28:43.056961 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.56:41528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:43.057586 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.56:41528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:43.268539 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.55:58862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:43.269207 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.55:58862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:43.379371 2026] [ssl:error] [pid 2894547:tid 2894547] (70014)End of file found: [client 216.73.216.199:61493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:43.774216 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.23:29860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:43.774844 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.23:29860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:43.997683 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.9:33934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:43.998305 2026] [authz_core:error] [pid 2889514:tid 2889514] [client 57.141.0.9:33934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:44.091880 2026] [ssl:error] [pid 2873873:tid 2873873] (EAI 2)Name or service not known: [client 144.76.19.72:42406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:44.091904 2026] [ssl:error] [pid 2873873:tid 2873873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:44.184112 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:42418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:44.184157 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:44.827731 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.22:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:44.828360 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.22:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:44.875661 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.11:55936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:44.876312 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.11:55936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:45.096134 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.18:32572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:45.096761 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.18:32572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:45.450124 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.30:44178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:45.450744 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.30:44178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:45.632016 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.31:42574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:45.633233 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.31:42574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:45.919283 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.27:22832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:45.919910 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.27:22832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:46.264956 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.49:60148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:46.265596 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.49:60148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:46.914402 2026] [authz_core:error] [pid 2898600:tid 2898600] [client 57.141.0.47:56310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:46.915023 2026] [authz_core:error] [pid 2898600:tid 2898600] [client 57.141.0.47:56310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:47.215609 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.23:32114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:47.216232 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.23:32114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:47.239344 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:42424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:47.239373 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:47.295096 2026] [ssl:error] [pid 2872133:tid 2872133] (EAI 2)Name or service not known: [client 144.76.19.72:42438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:47.295131 2026] [ssl:error] [pid 2872133:tid 2872133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:47.558399 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.50:47768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:47.559021 2026] [authz_core:error] [pid 2898208:tid 2898208] [client 57.141.0.50:47768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:48.114633 2026] [core:error] [pid 2892661:tid 2892661] (13)Permission denied: [client 216.73.216.199:64701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty57/subsystem/ttyS2/close_delay
[Thu Jul 30 11:28:48.219615 2026] [core:error] [pid 2892661:tid 2892661] (13)Permission denied: [client 216.73.216.199:64701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-256/slab_size
[Thu Jul 30 11:28:48.345297 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.38:56126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:48.345947 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.38:56126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:48.521101 2026] [ssl:error] [pid 2892661:tid 2892661] (70014)End of file found: [client 216.73.216.199:64701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:48.656399 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.59:20270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:48.657042 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.59:20270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:48.802883 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.47:56312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:48.803510 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.47:56312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:49.022375 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.1:40568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:49.023247 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.1:40568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:49.025952 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.51:40406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:49.026942 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.51:40406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:49.122169 2026] [core:error] [pid 2889424:tid 2889424] (13)Permission denied: [client 216.73.216.199:1721] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP/destroy_by_rcu
[Thu Jul 30 11:28:49.160134 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.18:32586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:49.160783 2026] [authz_core:error] [pid 2872133:tid 2872133] [client 57.141.0.18:32586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:49.232329 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.55:55628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:49.232953 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.55:55628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:50.350015 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:42474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:50.350042 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:50.406188 2026] [ssl:error] [pid 2889515:tid 2889515] (EAI 2)Name or service not known: [client 144.76.19.72:42488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:50.406226 2026] [ssl:error] [pid 2889515:tid 2889515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:50.426195 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.34:35268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:50.426818 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.34:35268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:50.545502 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.62:64406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:50.546176 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.62:64406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:50.692332 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.19:64990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:50.692955 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.19:64990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:50.964495 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.50:24046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:50.965142 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.50:24046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:51.512028 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.10:42144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:51.512678 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.10:42144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:51.844138 2026] [ssl:error] [pid 2898209:tid 2898209] (70014)End of file found: [client 216.73.216.199:58669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:51.863242 2026] [security2:error] [pid 2894614:tid 2894614] [client 46.105.39.49:26029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsnY-4SC_T7ljpY8Ie-BQAAAC0"]
[Thu Jul 30 11:28:51.872638 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.59:20284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:51.873276 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.59:20284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:51.947407 2026] [security2:error] [pid 2894614:tid 2894614] [client 46.105.39.49:23319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amsnY-4SC_T7ljpY8Ie-BgAAAC0"]
[Thu Jul 30 11:28:52.064498 2026] [security2:error] [pid 2889515:tid 2889515] [client 46.105.39.49:12001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsnZAOKeV2W5rzcUjBkugAAAEM"]
[Thu Jul 30 11:28:52.147277 2026] [ssl:error] [pid 2889424:tid 2889424] (70014)End of file found: [client 216.73.216.199:1721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:52.268677 2026] [lsapi:warn] [pid 2897111:tid 2897111] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:52.303895 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.36:22294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:52.304534 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.36:22294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:52.477647 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.27:34426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:52.478264 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.27:34426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:52.943559 2026] [lsapi:warn] [pid 2889515:tid 2889515] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:28:53.122830 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.13:43516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:53.123457 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.13:43516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:53.170117 2026] [security2:error] [pid 2872133:tid 2872133] [client 46.105.39.49:23739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsnZQ-6U1-7B4N2wXW1VgAAAAw"]
[Thu Jul 30 11:28:53.338735 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.62:21678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:53.339371 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.62:21678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:53.502998 2026] [ssl:error] [pid 2892019:tid 2892019] (EAI 2)Name or service not known: [client 144.76.19.72:42494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:53.503050 2026] [ssl:error] [pid 2892019:tid 2892019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:53.642272 2026] [ssl:error] [pid 2889515:tid 2889515] (EAI 2)Name or service not known: [client 144.76.19.72:42508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:53.642301 2026] [ssl:error] [pid 2889515:tid 2889515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:53.730995 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.5:54596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:53.731619 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.5:54596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:53.816648 2026] [access_compat:error] [pid 2880697:tid 2880697] [client 136.158.37.124:1755] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:28:53.829268 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.64:21978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:53.829900 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.64:21978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:54.573980 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.54:64920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:54.574666 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.54:64920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:54.836843 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.51:40410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:54.837471 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.51:40410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:54.896232 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.21:60436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:54.896855 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.21:60436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:55.291461 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.21:60442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:55.292144 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.21:60442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:55.554808 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.71:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:55.555781 2026] [authz_core:error] [pid 2889515:tid 2889515] [client 57.141.0.71:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:55.575802 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.69:34444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:55.576444 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.69:34444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:56.001293 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.50:24062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:56.001911 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.50:24062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:56.464371 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.40:38464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:56.464997 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.40:38464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:56.697219 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:42514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:56.697266 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:56.730732 2026] [ssl:error] [pid 2897111:tid 2897111] (70014)End of file found: [client 216.73.216.199:20222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:56.745230 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.6:57230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:56.745845 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.6:57230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:56.750290 2026] [ssl:error] [pid 2899960:tid 2899960] (EAI 2)Name or service not known: [client 144.76.19.72:42520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:56.750319 2026] [ssl:error] [pid 2899960:tid 2899960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:56.847922 2026] [security2:error] [pid 2898641:tid 2898641] [client 114.119.142.20:30827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~17,19/request_format~html"] [unique_id "amsnaM8cXaWBoBV7FSOnngAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563750000/cat_ids%7E17/request_format%7Ehtml
[Thu Jul 30 11:28:57.041922 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.49:27696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:57.042564 2026] [authz_core:error] [pid 2898045:tid 2898045] [client 57.141.0.49:27696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:57.475208 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.70:33560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:57.475833 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.70:33560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:57.791447 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.9:64696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:57.792125 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.9:64696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:58.251729 2026] [core:error] [pid 2898045:tid 2898045] (13)Permission denied: [client 216.73.216.199:53106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/vmap_area/sanity_checks
[Thu Jul 30 11:28:58.352323 2026] [security2:error] [pid 2899163:tid 2899163] [client 114.119.142.20:30831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~17,19/request_format~html"] [unique_id "amsnauLSErYok6dHnI6ZeQAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563750000/cat_ids%7E17/request_format%7Ehtml
[Thu Jul 30 11:28:58.368945 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.32:58244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:58.369587 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.32:58244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:58.390855 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.61:23982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:58.391511 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.61:23982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:58.479010 2026] [authz_core:error] [pid 2898641:tid 2898641] [client 57.141.0.33:44630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:58.479724 2026] [authz_core:error] [pid 2898641:tid 2898641] [client 57.141.0.33:44630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:58.552368 2026] [ssl:error] [pid 2898045:tid 2898045] (70014)End of file found: [client 216.73.216.199:53106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:58.565810 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 66.249.66.33:55512] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:28:58.568504 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 66.249.66.33:55512] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:28:58.848835 2026] [ssl:error] [pid 2899960:tid 2899960] (70014)End of file found: [client 216.73.216.199:34697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:28:59.291765 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.44:31920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:28:59.292398 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.44:31920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:28:59.496846 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 169.58.39.191:58088] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 11:28:59.807418 2026] [ssl:error] [pid 2889514:tid 2889514] (EAI 2)Name or service not known: [client 144.76.19.72:53552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:59.807464 2026] [ssl:error] [pid 2889514:tid 2889514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:28:59.862243 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:53568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:28:59.862283 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:00.171916 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.67:22494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:00.172567 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.67:22494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:00.338201 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.20:42862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:00.338832 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.20:42862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:00.715913 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.10:29064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:00.716545 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.10:29064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:01.023707 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.3:43540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:01.024328 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.3:43540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:01.072980 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.53:23132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:01.073613 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.53:23132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:01.181017 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.6:57244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:01.181682 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.6:57244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:01.325746 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.35:35894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:01.326370 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.35:35894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:01.769218 2026] [core:error] [pid 2898999:tid 2898999] [client 66.249.64.170:55644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:29:01.769246 2026] [core:error] [pid 2898999:tid 2898999] [client 66.249.64.170:55644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:29:02.202370 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.7:24122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:02.203115 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.7:24122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:02.340944 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 169.58.39.191:59421] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 11:29:02.354033 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.56:61182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:02.354664 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.56:61182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:02.524868 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.23:40136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:02.525493 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.23:40136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:02.644493 2026] [lsapi:warn] [pid 2894572:tid 2894572] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:02.862818 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.13:38626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:02.863449 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.13:38626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:02.884920 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.14:32872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:02.885544 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.14:32872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:02.920105 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:53592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:02.920133 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:02.976397 2026] [ssl:error] [pid 2894547:tid 2894547] (EAI 2)Name or service not known: [client 144.76.19.72:53604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:02.976422 2026] [ssl:error] [pid 2894547:tid 2894547] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:03.106927 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.30:38052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:03.107553 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.30:38052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:03.222346 2026] [lsapi:warn] [pid 2895077:tid 2895077] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:03.909328 2026] [ssl:error] [pid 2893485:tid 2893485] (70014)End of file found: [client 216.73.216.199:11588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:03.967457 2026] [security2:error] [pid 2889424:tid 2889424] [client 163.7.5.50:21595] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnb2e7rn44tqRVmOaWjQAAACA"]
[Thu Jul 30 11:29:03.967520 2026] [security2:error] [pid 2889424:tid 2889424] [client 163.7.5.50:21595] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnb2e7rn44tqRVmOaWjQAAACA"]
[Thu Jul 30 11:29:03.967761 2026] [security2:error] [pid 2889424:tid 2889424] [client 163.7.5.50:21595] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnb2e7rn44tqRVmOaWjQAAACA"]
[Thu Jul 30 11:29:04.178006 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.58:33218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:04.178646 2026] [authz_core:error] [pid 2894547:tid 2894547] [client 57.141.0.58:33218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:04.231841 2026] [ssl:error] [pid 2898045:tid 2898045] (70014)End of file found: [client 216.73.216.199:2748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:04.309150 2026] [security2:error] [pid 2895077:tid 2895077] [client 49.51.245.241:45938] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsncHurUx5uYeZmIzwi5wAAAEQ"]
[Thu Jul 30 11:29:04.330762 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.71:27604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:04.331384 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.71:27604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:04.576913 2026] [access_compat:error] [pid 2897990:tid 2897990] [client 136.158.37.124:2500] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:29:04.676196 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.28:34160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:04.676821 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.28:34160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:05.223539 2026] [ssl:error] [pid 2897697:tid 2897697] (70014)End of file found: [client 216.73.216.199:9731] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:05.453408 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.37:63726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:05.454029 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.37:63726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:05.611912 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.64:48168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:05.612550 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.64:48168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:05.985217 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.20:42886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:05.985852 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.20:42886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:06.029986 2026] [ssl:error] [pid 2894547:tid 2894547] (EAI 2)Name or service not known: [client 144.76.19.72:53636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:06.030020 2026] [ssl:error] [pid 2894547:tid 2894547] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:06.086046 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:53646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:06.086106 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:06.364523 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.61:51156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:06.365191 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.61:51156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:06.419086 2026] [authz_core:error] [pid 2898641:tid 2898641] [client 57.141.0.69:59508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:06.419707 2026] [authz_core:error] [pid 2898641:tid 2898641] [client 57.141.0.69:59508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:06.720862 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.11:51116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:06.721511 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.11:51116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:06.772627 2026] [security2:error] [pid 2899960:tid 2899960] [client 49.51.245.241:50776] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsncoO_IzseRrSNx-HFiAAAABU"], referer: http://prosperon.co.uk
[Thu Jul 30 11:29:07.166497 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.71:27620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:07.167140 2026] [authz_core:error] [pid 2894572:tid 2894572] [client 57.141.0.71:27620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:07.280408 2026] [security2:error] [pid 2895081:tid 2895081] [client 102.213.179.57:48926] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnc0rF51xB7JGnYhJuVAAAAEg"]
[Thu Jul 30 11:29:07.280456 2026] [security2:error] [pid 2895081:tid 2895081] [client 102.213.179.57:48926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnc0rF51xB7JGnYhJuVAAAAEg"]
[Thu Jul 30 11:29:07.280699 2026] [security2:error] [pid 2895081:tid 2895081] [client 102.213.179.57:48926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnc0rF51xB7JGnYhJuVAAAAEg"]
[Thu Jul 30 11:29:07.325191 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.18:36930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:07.325809 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.18:36930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:07.649091 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.1:52786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:07.649718 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.1:52786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:08.117512 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.13:38640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:08.118153 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.13:38640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:08.509984 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.30:38056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:08.510618 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.30:38056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:08.874256 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.7:37370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:08.874879 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.7:37370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:09.042364 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.9:40934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:09.043014 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.9:40934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:09.138098 2026] [ssl:error] [pid 2899960:tid 2899960] (EAI 2)Name or service not known: [client 144.76.19.72:53650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:09.138130 2026] [ssl:error] [pid 2899960:tid 2899960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:09.192289 2026] [ssl:error] [pid 2898641:tid 2898641] (EAI 2)Name or service not known: [client 144.76.19.72:53654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:09.192340 2026] [ssl:error] [pid 2898641:tid 2898641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:09.499783 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.1:52792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:09.500406 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.1:52792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:09.733324 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.58:33226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:09.733952 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.58:33226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:10.513980 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.58:33228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:10.514639 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.58:33228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:10.678093 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.14:38054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:10.678722 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.14:38054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:10.768398 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.22:25018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:10.769027 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.22:25018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:11.337709 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.24:22638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:11.338359 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.24:22638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:11.353154 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.16:52838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:11.354135 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.16:52838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:11.710441 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.56:43876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:11.711102 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.56:43876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:11.738469 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.62:64734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:11.739123 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.62:64734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:12.244616 2026] [ssl:error] [pid 2899960:tid 2899960] (EAI 2)Name or service not known: [client 144.76.19.72:29136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:12.244644 2026] [ssl:error] [pid 2899960:tid 2899960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:12.269807 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.67:47874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:12.270478 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.67:47874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:12.295662 2026] [ssl:error] [pid 2898046:tid 2898046] (EAI 2)Name or service not known: [client 144.76.19.72:29142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:12.295687 2026] [ssl:error] [pid 2898046:tid 2898046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:12.746091 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.70:44288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:12.746721 2026] [authz_core:error] [pid 2895080:tid 2895080] [client 57.141.0.70:44288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:13.437329 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.62:64742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:13.437953 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.62:64742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:13.484296 2026] [lsapi:warn] [pid 2900705:tid 2900705] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:13.674922 2026] [security2:error] [pid 2895081:tid 2895081] [client 216.73.216.199:60126] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/pure-ftpd.conf"] [unique_id "amsneUrF51xB7JGnYhJuZQAAAEg"]
[Thu Jul 30 11:29:13.675223 2026] [security2:error] [pid 2895081:tid 2895081] [client 216.73.216.199:60126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/pure-ftpd.conf"] [unique_id "amsneUrF51xB7JGnYhJuZQAAAEg"]
[Thu Jul 30 11:29:13.675472 2026] [security2:error] [pid 2895081:tid 2895081] [client 216.73.216.199:60126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/pure-ftpd.conf"] [unique_id "amsneUrF51xB7JGnYhJuZQAAAEg"]
[Thu Jul 30 11:29:13.720185 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.15:58382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:13.720807 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.15:58382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:13.781603 2026] [lsapi:warn] [pid 2897990:tid 2897990] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:13.969448 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.47:50978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:13.970083 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.47:50978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:14.576045 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.22:25030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:14.576732 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.22:25030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:14.826094 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.55:44410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:14.827319 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.55:44410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:14.883513 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.39:39046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:14.884150 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.39:39046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:15.219338 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.65:22196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:15.219982 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.65:22196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:15.269787 2026] [ssl:error] [pid 2895081:tid 2895081] (70014)End of file found: [client 216.73.216.199:60126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:15.323635 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.33:47360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:15.324286 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.33:47360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:15.348908 2026] [ssl:error] [pid 2894613:tid 2894613] (EAI 2)Name or service not known: [client 144.76.19.72:29148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:15.348962 2026] [ssl:error] [pid 2894613:tid 2894613] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:15.404609 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:29162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:15.404640 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:15.434944 2026] [access_compat:error] [pid 2900744:tid 2900744] [client 136.158.37.124:3205] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:29:15.952368 2026] [access_compat:error] [pid 2897990:tid 2897990] [client 45.158.164.139:54870] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:29:16.035721 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.45:38338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:16.036359 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.45:38338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:16.084975 2026] [ssl:error] [pid 2898999:tid 2898999] (70014)End of file found: [client 216.73.216.199:11368] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:16.255845 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.71:53826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:16.257114 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.71:53826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:17.243956 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.71:53840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:17.244685 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.71:53840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:17.257490 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.65:22202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:17.258160 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.65:22202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:17.484560 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.20:33768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:17.485186 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.20:33768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:17.634285 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.70:30692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:17.634914 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.70:30692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:17.899161 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.18:52524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:17.899781 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.18:52524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:18.328741 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.45:62178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:18.329401 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.45:62178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:18.459269 2026] [ssl:error] [pid 2877508:tid 2877508] (EAI 2)Name or service not known: [client 144.76.19.72:29174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:18.459307 2026] [ssl:error] [pid 2877508:tid 2877508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:18.510978 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.31:21966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:18.511615 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.31:21966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:18.515256 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:29178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:18.515281 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:18.872554 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.66:29600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:18.873219 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.66:29600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:19.370683 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.46:39028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:19.371325 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.46:39028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:19.526324 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.63:60616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:19.526947 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.63:60616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:20.001643 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.24:51588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:20.002271 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.24:51588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:20.476701 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.13:57968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:20.477322 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.13:57968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:20.555574 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.13:57970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:20.556202 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.13:57970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:20.920879 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.18:54164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:20.921566 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.18:54164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:21.168610 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.35:43602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:21.169232 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.35:43602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:21.566697 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:36802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:21.566735 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:21.622748 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:36818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:21.622782 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:21.655474 2026] [ssl:error] [pid 2899960:tid 2899960] (70014)End of file found: [client 216.73.216.199:56912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:21.810503 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.20:28988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:21.811133 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.20:28988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:22.258093 2026] [core:error] [pid 2894573:tid 2894573] (13)Permission denied: [client 216.73.216.199:51750] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:11/subsystem/drivers_probe
[Thu Jul 30 11:29:22.332590 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.26:25348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:22.333332 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.26:25348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:22.596222 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.23:61792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:22.596838 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.23:61792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:23.075094 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.39:39054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:23.075717 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.39:39054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:23.228251 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.19:31532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:23.229256 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.19:31532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:23.340908 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.40:63748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:23.341571 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.40:63748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:24.211607 2026] [lsapi:warn] [pid 2894614:tid 2894614] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:24.286182 2026] [lsapi:warn] [pid 2898999:tid 2898999] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:24.317803 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.46:25534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:24.318423 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.46:25534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:24.395888 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.53:50082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:24.396593 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.53:50082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:24.628302 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.30:31228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:24.629416 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.30:31228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:24.694177 2026] [ssl:error] [pid 2893302:tid 2893302] (EAI 2)Name or service not known: [client 144.76.19.72:36822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:24.694243 2026] [ssl:error] [pid 2893302:tid 2893302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:24.748812 2026] [ssl:error] [pid 2894613:tid 2894613] (EAI 2)Name or service not known: [client 144.76.19.72:36834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:24.748848 2026] [ssl:error] [pid 2894613:tid 2894613] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:24.757347 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.61:62164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:24.758011 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.61:62164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:24.961216 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.69:54264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:24.961839 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.69:54264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:24.966368 2026] [ssl:error] [pid 2894573:tid 2894573] (70014)End of file found: [client 216.73.216.199:51750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:25.130452 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.41:36202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:25.131841 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.41:36202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:25.953883 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.2:53846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:25.954893 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.2:53846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:26.006322 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.27:46178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:26.006944 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.27:46178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:26.287390 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.19:31540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:26.288013 2026] [authz_core:error] [pid 2875766:tid 2875766] [client 57.141.0.19:31540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:26.288890 2026] [access_compat:error] [pid 2898999:tid 2898999] [client 136.158.37.124:3928] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:29:26.316604 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.8:38944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:26.317225 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.8:38944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:26.938999 2026] [security2:error] [pid 2901100:tid 2901100] [client 185.191.171.12:10844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.2490.html"] [unique_id "amsnhoMpWCKc7XtXvAmR1wAAABs"]
[Thu Jul 30 11:29:27.093101 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.33:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:27.093727 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.33:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:27.229253 2026] [authz_core:error] [pid 2901101:tid 2901101] [client 57.141.0.62:21520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:27.229893 2026] [authz_core:error] [pid 2901101:tid 2901101] [client 57.141.0.62:21520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:27.401328 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.51:23240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:27.402326 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.51:23240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:27.806006 2026] [ssl:error] [pid 2900744:tid 2900744] (EAI 2)Name or service not known: [client 144.76.19.72:36836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:27.806046 2026] [ssl:error] [pid 2900744:tid 2900744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:27.860415 2026] [ssl:error] [pid 2901123:tid 2901123] (EAI 2)Name or service not known: [client 144.76.19.72:36848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:27.860452 2026] [ssl:error] [pid 2901123:tid 2901123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:27.962799 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.21:50378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:27.963450 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.21:50378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:28.145510 2026] [security2:error] [pid 2880697:tid 2880697] [client 85.208.96.199:58082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.1395.html"] [unique_id "amsniEfKsF_rbvGPcZbRRAAAAAc"]
[Thu Jul 30 11:29:28.505907 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.33:31864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:28.506558 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.33:31864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:29.031155 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.11:27396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:29.031774 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.11:27396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:29.177995 2026] [core:error] [pid 2893485:tid 2893485] (13)Permission denied: [client 216.73.216.199:10804] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty62/subsystem/ttyS0/uartclk
[Thu Jul 30 11:29:29.514399 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.69:43560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:29.515014 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.69:43560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:29.538203 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:61512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:29.539492 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:61512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:29.544411 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.16:20906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:29.545038 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.16:20906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:30.076083 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.36:25838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:30.076704 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.36:25838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:30.554947 2026] [security2:error] [pid 2900744:tid 2900744] [client 85.208.96.193:12584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/how-tall-is-a-million-dollars-in-$100-bills"] [unique_id "amsnihySp3o-QUpJicOkqAAAABY"]
[Thu Jul 30 11:29:30.671196 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.35:53126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:30.671822 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.35:53126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:30.696273 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.32:52334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:30.696905 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.32:52334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:30.915522 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:23200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:30.915554 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:30.968404 2026] [ssl:error] [pid 2899961:tid 2899961] (EAI 2)Name or service not known: [client 144.76.19.72:23214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:30.968441 2026] [ssl:error] [pid 2899961:tid 2899961] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:31.096814 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.9:21378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:31.097447 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.9:21378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:31.463429 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.2:53856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:31.464053 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.2:53856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:31.969420 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.5:41190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:31.970146 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.5:41190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:32.519364 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.29:53928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:32.519980 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.29:53928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:32.553193 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.10:60698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:32.553870 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.10:60698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:32.595002 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.67:41700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:32.595640 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.67:41700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:33.392360 2026] [ssl:error] [pid 2893485:tid 2893485] (70014)End of file found: [client 216.73.216.199:10804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:33.453839 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.12:40510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:33.454490 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.12:40510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:33.851926 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.20:29464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:33.852603 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.20:29464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:33.854595 2026] [authz_core:error] [pid 2901125:tid 2901125] [client 57.141.0.71:31016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:33.855206 2026] [authz_core:error] [pid 2901125:tid 2901125] [client 57.141.0.71:31016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:34.023670 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:23220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:34.023701 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:34.081269 2026] [ssl:error] [pid 2894616:tid 2894616] (EAI 2)Name or service not known: [client 144.76.19.72:23236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:34.081304 2026] [ssl:error] [pid 2894616:tid 2894616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:34.202160 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.27:32824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:34.202790 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.27:32824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:34.315285 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.9:53898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:34.315906 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.9:53898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:34.758017 2026] [lsapi:warn] [pid 2894616:tid 2894616] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:34.827993 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.40:39296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:34.828631 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.40:39296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:34.876232 2026] [lsapi:warn] [pid 2900744:tid 2900744] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:35.355318 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.59:20936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:35.356010 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.59:20936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:35.805117 2026] [core:error] [pid 2901101:tid 2901101] (13)Permission denied: [client 216.73.216.199:47906] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/ip6tables-config
[Thu Jul 30 11:29:35.842289 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.23:35130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:35.842978 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.23:35130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:36.113815 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.2:61462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:36.114460 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.2:61462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:36.252577 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.5:41204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:36.253602 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.5:41204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:36.633260 2026] [security2:error] [pid 2889465:tid 2889465] [client 18.199.86.73:55912] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.alism.com"] [uri "/.git/config"] [unique_id "amsnkBZrrfIRso3C5mRn5gAAACg"]
[Thu Jul 30 11:29:36.633459 2026] [security2:error] [pid 2889465:tid 2889465] [client 18.199.86.73:55912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.alism.com"] [uri "/.git/config"] [unique_id "amsnkBZrrfIRso3C5mRn5gAAACg"]
[Thu Jul 30 11:29:36.650400 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.43:44596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:36.651097 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.43:44596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:36.666449 2026] [security2:error] [pid 2889465:tid 2889465] [client 18.199.86.73:55912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.alism.com"] [uri "/403.shtml"] [unique_id "amsnkBZrrfIRso3C5mRn5gAAACg"]
[Thu Jul 30 11:29:36.924857 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.69:43572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:36.925473 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.69:43572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:37.098385 2026] [access_compat:error] [pid 2901123:tid 2901123] [client 136.158.37.124:4692] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:29:37.143578 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:23242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:37.143618 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:37.248162 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:23256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:37.248198 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:37.342662 2026] [authz_core:error] [pid 2901485:tid 2901485] [client 57.141.0.31:46878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:37.343696 2026] [authz_core:error] [pid 2901485:tid 2901485] [client 57.141.0.31:46878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:37.502229 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.31:46890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:37.502850 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.31:46890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:38.133941 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.25:42736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:38.134574 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.25:42736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:38.175757 2026] [cgi:error] [pid 2899163:tid 2899163] [client 136.226.166.187:36636] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:29:38.360355 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.47:36260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:38.360978 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.47:36260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:38.526646 2026] [authz_core:error] [pid 2901125:tid 2901125] [client 57.141.0.48:54988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:38.527338 2026] [authz_core:error] [pid 2901125:tid 2901125] [client 57.141.0.48:54988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:38.533178 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.10:25304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:38.533927 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.10:25304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:39.045952 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.46:43340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:39.046617 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.46:43340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:39.574870 2026] [access_compat:error] [pid 2894573:tid 2894573] [client 139.162.177.81:54696] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:29:40.184789 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.10:25306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:40.185442 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.10:25306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:40.261082 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.41:62404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:40.261738 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.41:62404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:40.304948 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:50218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:40.304985 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:40.305171 2026] [authz_core:error] [pid 2901485:tid 2901485] [client 57.141.0.27:32840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:40.305790 2026] [authz_core:error] [pid 2901485:tid 2901485] [client 57.141.0.27:32840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:40.362944 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:50228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:40.362999 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:40.518896 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.61:33640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:40.519544 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.61:33640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:40.526551 2026] [security2:error] [pid 2880697:tid 2880697] [client 47.128.24.25:23368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsnlEfKsF_rbvGPcZbRSAAAAAc"]
[Thu Jul 30 11:29:40.642300 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.39:64710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:40.642985 2026] [authz_core:error] [pid 2898209:tid 2898209] [client 57.141.0.39:64710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:41.196951 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.35:31528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:41.197994 2026] [authz_core:error] [pid 2881766:tid 2881766] [client 57.141.0.35:31528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:41.845416 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.22:53458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:41.846046 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.22:53458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:42.057060 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.52:50006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:42.057720 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.52:50006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:42.499864 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.51:57230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:42.500491 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.51:57230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:42.516274 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.58:22196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:42.516920 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.58:22196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:43.085533 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.60:35112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:43.086232 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.60:35112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:43.418817 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:50244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:43.418864 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:43.472240 2026] [ssl:error] [pid 2889465:tid 2889465] (EAI 2)Name or service not known: [client 144.76.19.72:50260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:43.472276 2026] [ssl:error] [pid 2889465:tid 2889465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:43.763204 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.32:22346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:43.763838 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.32:22346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:43.810521 2026] [core:error] [pid 2895081:tid 2895081] [client 66.249.66.66:64739] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:29:43.810563 2026] [core:error] [pid 2895081:tid 2895081] [client 66.249.66.66:64739] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:29:43.883729 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.11:50742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:43.884378 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.11:50742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:43.953192 2026] [core:error] [pid 2901123:tid 2901123] [client 66.249.66.68:60130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:29:43.953231 2026] [core:error] [pid 2901123:tid 2901123] [client 66.249.66.68:60130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:29:44.165446 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.42:24268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:44.166091 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.42:24268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:44.180702 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.11:50752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:44.181363 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.11:50752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:44.203723 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.51:57236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:44.204766 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.51:57236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:44.233809 2026] [core:error] [pid 2900705:tid 2900705] (13)Permission denied: [client 216.73.216.199:53372] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty31/subsystem/ttyS0/uartclk
[Thu Jul 30 11:29:44.836558 2026] [ssl:error] [pid 2900705:tid 2900705] (70014)End of file found: [client 216.73.216.199:53372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:45.067690 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.58:22206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:45.068414 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.58:22206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:45.179716 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.38:39746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:45.180334 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.38:39746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:45.242689 2026] [lsapi:warn] [pid 2898208:tid 2898208] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:45.445814 2026] [ssl:error] [pid 2894616:tid 2894616] (70014)End of file found: [client 216.73.216.199:40249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:29:45.555471 2026] [lsapi:warn] [pid 2888285:tid 2888285] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:46.523934 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:50262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:46.523965 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:46.577086 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:50270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:46.577117 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:47.154555 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.61:33652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:47.155199 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.61:33652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:47.321158 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.65:44754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:47.322227 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.65:44754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:47.452765 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.19:54798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:47.454161 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.19:54798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:47.885866 2026] [access_compat:error] [pid 2901123:tid 2901123] [client 136.158.37.124:5435] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:29:47.949384 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.18:51014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:47.950370 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.18:51014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:48.622059 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.16:44966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:48.622702 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.16:44966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:48.947392 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.17:29974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:48.948426 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.17:29974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:49.253359 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.65:44768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:49.254007 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.65:44768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:49.435321 2026] [security2:error] [pid 2895081:tid 2895081] [client 185.191.171.14:63000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11552.new.html"] [unique_id "amsnnUrF51xB7JGnYhJudQAAAEg"]
[Thu Jul 30 11:29:49.631281 2026] [ssl:error] [pid 2895077:tid 2895077] (EAI 2)Name or service not known: [client 144.76.19.72:21526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:49.631317 2026] [ssl:error] [pid 2895077:tid 2895077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:49.682961 2026] [ssl:error] [pid 2894613:tid 2894613] (EAI 2)Name or service not known: [client 144.76.19.72:21536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:49.682998 2026] [ssl:error] [pid 2894613:tid 2894613] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:49.707390 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.58:22216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:49.708012 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.58:22216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:49.801358 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.43:46148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:49.801978 2026] [authz_core:error] [pid 2901126:tid 2901126] [client 57.141.0.43:46148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:49.831027 2026] [security2:error] [pid 2901124:tid 2901124] [client 119.93.173.232:33540] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnnb_s7aEYVV1RiZDeeAAAACE"]
[Thu Jul 30 11:29:49.831127 2026] [security2:error] [pid 2901124:tid 2901124] [client 119.93.173.232:33540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsnnb_s7aEYVV1RiZDeeAAAACE"]
[Thu Jul 30 11:29:49.831399 2026] [security2:error] [pid 2901124:tid 2901124] [client 119.93.173.232:33540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsnnb_s7aEYVV1RiZDeeAAAACE"]
[Thu Jul 30 11:29:49.842605 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.51:23140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:49.843228 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.51:23140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:49.852737 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.68:29900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:49.853796 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.68:29900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:51.102155 2026] [security2:error] [pid 2888285:tid 2888285] [client 18.199.86.73:59816] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.andrewvenables.com"] [uri "/.git/config"] [unique_id "amsnn-eleQEdVN98YnyGpQAAABM"]
[Thu Jul 30 11:29:51.102363 2026] [security2:error] [pid 2888285:tid 2888285] [client 18.199.86.73:59816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.andrewvenables.com"] [uri "/.git/config"] [unique_id "amsnn-eleQEdVN98YnyGpQAAABM"]
[Thu Jul 30 11:29:51.131468 2026] [security2:error] [pid 2888285:tid 2888285] [client 18.199.86.73:59816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.andrewvenables.com"] [uri "/403.shtml"] [unique_id "amsnn-eleQEdVN98YnyGpQAAABM"]
[Thu Jul 30 11:29:51.190751 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.63:64150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:51.191400 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.63:64150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:51.404293 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.59:57292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:51.404911 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.59:57292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:51.658161 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.42:65494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:51.658804 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.42:65494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:52.202188 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.64:25250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:52.202204 2026] [cgi:error] [pid 2894616:tid 2894616] [client 143.244.57.92:48646] AH02812: stderr from /home/winterb/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:29:52.202914 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.64:25250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:52.351520 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.38:46796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:52.352181 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.38:46796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:52.486515 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.63:64164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:52.487160 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.63:64164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:52.753285 2026] [ssl:error] [pid 2898999:tid 2898999] (EAI 2)Name or service not known: [client 144.76.19.72:21538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:52.753360 2026] [ssl:error] [pid 2898999:tid 2898999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:52.806605 2026] [ssl:error] [pid 2894254:tid 2894254] (EAI 2)Name or service not known: [client 144.76.19.72:21554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:52.806640 2026] [ssl:error] [pid 2894254:tid 2894254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:53.348431 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.46:42392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:53.349089 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.46:42392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:53.548410 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.37:43098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:53.549100 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.37:43098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:53.652838 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.30:32538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:53.653466 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.30:32538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:53.923199 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.62:33234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:53.923824 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.62:33234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:53.929734 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.69:37030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:53.930373 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.69:37030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:54.114445 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.31:39084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:54.115109 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.31:39084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:54.990114 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.8:25450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:54.990739 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.8:25450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:55.539560 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.29:22918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:55.540213 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.29:22918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:55.717410 2026] [lsapi:warn] [pid 2877508:tid 2877508] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:55.787146 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.68:46850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:55.787778 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.68:46850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:55.863297 2026] [ssl:error] [pid 2901100:tid 2901100] (EAI 2)Name or service not known: [client 144.76.19.72:21568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:55.863328 2026] [ssl:error] [pid 2901100:tid 2901100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:55.897375 2026] [core:error] [pid 2901068:tid 2901068] (13)Permission denied: [client 216.73.216.199:23560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/objs_per_slab
[Thu Jul 30 11:29:55.918149 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:21570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:55.918176 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:55.932602 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.55:32046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:55.933223 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.55:32046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:56.198086 2026] [core:error] [pid 2901068:tid 2901068] (13)Permission denied: [client 216.73.216.199:23560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/3dgrading.co.uk.db
[Thu Jul 30 11:29:56.472248 2026] [lsapi:warn] [pid 2901123:tid 2901123] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:29:56.908659 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.61:49968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:56.909361 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.61:49968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:56.910141 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.33:55796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:56.910774 2026] [authz_core:error] [pid 2877508:tid 2877508] [client 57.141.0.33:55796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:56.981272 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.32:55466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:56.981897 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.32:55466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:57.127589 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.35:39088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:57.128215 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.35:39088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:57.401809 2026] [core:error] [pid 2901068:tid 2901068] (13)Permission denied: [client 216.73.216.199:23560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/broadcast-support.com.db
[Thu Jul 30 11:29:57.945591 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.24:28110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:57.946243 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.24:28110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:58.022167 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.26:46100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:58.023283 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.26:46100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:58.097639 2026] [core:error] [pid 2901068:tid 2901068] (13)Permission denied: [client 216.73.216.199:23560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/sysrq/uevent
[Thu Jul 30 11:29:58.305890 2026] [core:error] [pid 2897111:tid 2897111] (13)Permission denied: [client 216.73.216.199:7498] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/devices/cpu/subsystem/drivers_probe
[Thu Jul 30 11:29:58.652274 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.28:41076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:58.652949 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.28:41076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:58.661247 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.70:38338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:58.661853 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.70:38338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:58.739649 2026] [access_compat:error] [pid 2899163:tid 2899163] [client 136.158.37.124:6242] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:29:58.971484 2026] [ssl:error] [pid 2894616:tid 2894616] (EAI 2)Name or service not known: [client 144.76.19.72:21580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:58.971516 2026] [ssl:error] [pid 2894616:tid 2894616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:59.026576 2026] [ssl:error] [pid 2892661:tid 2892661] (EAI 2)Name or service not known: [client 144.76.19.72:21584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:29:59.026607 2026] [ssl:error] [pid 2892661:tid 2892661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:29:59.591062 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.15:31700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:59.591701 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.15:31700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:59.867275 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.62:33240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:59.867895 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.62:33240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:59.886310 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.17:51804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:59.886955 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.17:51804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:29:59.986685 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.49:39750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:29:59.987382 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.49:39750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:00.113002 2026] [ssl:error] [pid 2897111:tid 2897111] (70014)End of file found: [client 216.73.216.199:7498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:00.509934 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.66:46486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:00.510643 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.66:46486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:01.083451 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.21:58092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:01.084077 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.21:58092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:01.316613 2026] [core:error] [pid 2901068:tid 2901068] (13)Permission denied: [client 216.73.216.199:23560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS0/custom_divisor
[Thu Jul 30 11:30:01.445933 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.27:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:01.446575 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.27:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:01.459891 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.13:65002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:01.460505 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.13:65002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:01.607239 2026] [authz_core:error] [pid 2902214:tid 2902214] [client 57.141.0.4:21702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:01.607888 2026] [authz_core:error] [pid 2902214:tid 2902214] [client 57.141.0.4:21702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:02.095953 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:62618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:02.095998 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:02.151837 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:62632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:02.151882 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:02.197322 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.55:32062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:02.197950 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.55:32062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:02.412687 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.22:56920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:02.413331 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.22:56920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:02.864051 2026] [core:error] [pid 2898640:tid 2898640] [client 66.249.66.40:61565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:02.864095 2026] [core:error] [pid 2898640:tid 2898640] [client 66.249.66.40:61565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:03.122864 2026] [ssl:error] [pid 2902214:tid 2902214] (70014)End of file found: [client 216.73.216.199:51063] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:03.322570 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.52:63434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:03.323204 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.52:63434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:03.379941 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.25:33872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:03.380598 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.25:33872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:03.907930 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.27:35180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:03.908569 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.27:35180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:03.937318 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.18:25124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:03.937948 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.18:25124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:04.038814 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.5:38886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:04.039449 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.5:38886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:04.581809 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.23:45864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:04.582437 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.23:45864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:05.039996 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.61:54000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:05.040634 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.61:54000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:05.055808 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.28:46914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:05.056459 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.28:46914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:05.206751 2026] [ssl:error] [pid 2899163:tid 2899163] (EAI 2)Name or service not known: [client 144.76.19.72:62634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:05.206787 2026] [ssl:error] [pid 2899163:tid 2899163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:05.263566 2026] [ssl:error] [pid 2894573:tid 2894573] (EAI 2)Name or service not known: [client 144.76.19.72:62650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:05.263615 2026] [ssl:error] [pid 2894573:tid 2894573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:05.440960 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.4:21712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:05.441646 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.4:21712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:06.138860 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.2:23548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:06.139490 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.2:23548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:06.620124 2026] [lsapi:warn] [pid 2894573:tid 2894573] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:06.740964 2026] [ssl:error] [pid 2901068:tid 2901068] (70014)End of file found: [client 216.73.216.199:23560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:06.792660 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.71:28726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:06.793282 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.71:28726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:06.882867 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.13:42536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:06.883520 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.13:42536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:07.042815 2026] [ssl:error] [pid 2894254:tid 2894254] (70014)End of file found: [client 216.73.216.199:36862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:07.088309 2026] [lsapi:warn] [pid 2902460:tid 2902460] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:07.232485 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.55:37892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:07.233120 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.55:37892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:07.680650 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.4:21718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:07.681276 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.4:21718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:07.717315 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.5:63450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:07.717957 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.5:63450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:07.728843 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.21:31768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:07.729486 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.21:31768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:08.317958 2026] [ssl:error] [pid 2899960:tid 2899960] (EAI 2)Name or service not known: [client 144.76.19.72:62660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:08.318002 2026] [ssl:error] [pid 2899960:tid 2899960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:08.374594 2026] [ssl:error] [pid 2888285:tid 2888285] (EAI 2)Name or service not known: [client 144.76.19.72:62674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:08.374622 2026] [ssl:error] [pid 2888285:tid 2888285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:08.514459 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.41:28854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:08.515127 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.41:28854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:08.672888 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.50:60978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:08.673519 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.50:60978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:08.849772 2026] [core:error] [pid 2895081:tid 2895081] (13)Permission denied: [client 216.73.216.199:41114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS0/iomem_base
[Thu Jul 30 11:30:09.248153 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.35:41770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:09.248820 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.35:41770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:09.457120 2026] [access_compat:error] [pid 2889370:tid 2889370] [client 136.158.37.124:7032] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:30:09.584656 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.24:62674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:09.585283 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.24:62674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:09.752778 2026] [ssl:error] [pid 2895081:tid 2895081] (70014)End of file found: [client 216.73.216.199:41114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:10.047407 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.36:52856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:10.048048 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.36:52856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:10.050271 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.40:20022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:10.050879 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.40:20022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:10.107341 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.29:21516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:10.108029 2026] [authz_core:error] [pid 2892127:tid 2892127] [client 57.141.0.29:21516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:10.981142 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.9:24430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:10.981781 2026] [authz_core:error] [pid 2892661:tid 2892661] [client 57.141.0.9:24430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:11.133664 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 66.249.66.33:43048] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:30:11.136329 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 66.249.66.33:43048] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:30:11.165889 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.5:63454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:11.166516 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.5:63454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:11.240651 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.46:20422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:11.241282 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.46:20422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:11.339372 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.63:22736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:11.339996 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.63:22736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:11.429734 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:34726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:11.429767 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:11.485335 2026] [ssl:error] [pid 2898640:tid 2898640] (EAI 2)Name or service not known: [client 144.76.19.72:34742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:11.485366 2026] [ssl:error] [pid 2898640:tid 2898640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:12.058837 2026] [core:error] [pid 2888285:tid 2888285] (13)Permission denied: [client 216.73.216.199:51483] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/objs_per_slab
[Thu Jul 30 11:30:12.131607 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.71:28728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:12.132233 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.71:28728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:12.286030 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.55:37908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:12.286668 2026] [authz_core:error] [pid 2892019:tid 2892019] [client 57.141.0.55:37908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:12.680929 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.39:60498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:12.681602 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.39:60498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:12.696700 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.69:37382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:12.697338 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.69:37382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:13.381302 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.46:20428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:13.381947 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.46:20428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:13.549956 2026] [ssl:error] [pid 2886514:tid 2886514] (70014)End of file found: [client 216.73.216.199:25003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:13.940223 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.36:40300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:13.940846 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.36:40300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:14.136244 2026] [security2:error] [pid 2897111:tid 2897111] [client 167.71.32.67:38584] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsntgqBItcQ8K2vu9L8kwAAAAA"]
[Thu Jul 30 11:30:14.217918 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.60:47246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:14.218554 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.60:47246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:14.770517 2026] [authz_core:error] [pid 2899961:tid 2899961] [client 57.141.0.58:53626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:14.771262 2026] [authz_core:error] [pid 2899961:tid 2899961] [client 57.141.0.58:53626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:14.856140 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:34748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:14.856183 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:14.960182 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:34754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:14.960211 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:15.119873 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.62:44720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:15.120499 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.62:44720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:15.294602 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.55:33172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:15.295253 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.55:33172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:15.580967 2026] [security2:error] [pid 2900705:tid 2900705] [client 82.102.18.190:35736] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/src/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "mjs-services.com"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amsnt4GaJiq8PpDg6_AZRwAAAAQ"]
[Thu Jul 30 11:30:15.581136 2026] [security2:error] [pid 2900705:tid 2900705] [client 82.102.18.190:35736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mjs-services.com"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amsnt4GaJiq8PpDg6_AZRwAAAAQ"]
[Thu Jul 30 11:30:16.028251 2026] [security2:error] [pid 2900705:tid 2900705] [client 82.102.18.190:35736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "mjs-services.com"] [uri "/index.php"] [unique_id "amsnt4GaJiq8PpDg6_AZRwAAAAQ"]
[Thu Jul 30 11:30:16.435170 2026] [authz_core:error] [pid 2903545:tid 2903545] [client 57.141.0.67:44020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:16.435846 2026] [authz_core:error] [pid 2903545:tid 2903545] [client 57.141.0.67:44020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:16.609717 2026] [authz_core:error] [pid 2903545:tid 2903545] [client 57.141.0.33:33992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:16.610362 2026] [authz_core:error] [pid 2903545:tid 2903545] [client 57.141.0.33:33992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:16.739356 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.28:41004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:16.739998 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.28:41004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:17.396280 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.50:42526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:17.396961 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.50:42526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:17.656721 2026] [lsapi:warn] [pid 2901068:tid 2901068] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:17.669548 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.68:40586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:17.670236 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.68:40586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:17.676509 2026] [core:error] [pid 2903613:tid 2903613] [client 66.249.64.170:38110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:17.676570 2026] [core:error] [pid 2903613:tid 2903613] [client 66.249.64.170:38110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:17.844614 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.39:39924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:17.845299 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.39:39924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:17.910535 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.35:41780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:17.911194 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.35:41780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:18.115490 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.66:43946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:18.116264 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.66:43946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:18.169383 2026] [lsapi:warn] [pid 2903615:tid 2903615] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:18.180305 2026] [ssl:error] [pid 2903545:tid 2903545] (70014)End of file found: [client 216.73.216.199:65272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:18.341282 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.17:54856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:18.341915 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.17:54856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:18.536491 2026] [ssl:error] [pid 2895077:tid 2895077] (EAI 2)Name or service not known: [client 144.76.19.72:34766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:18.536519 2026] [ssl:error] [pid 2895077:tid 2895077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:18.652566 2026] [ssl:error] [pid 2886514:tid 2886514] (EAI 2)Name or service not known: [client 144.76.19.72:34778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:18.652600 2026] [ssl:error] [pid 2886514:tid 2886514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:18.720845 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.62:44726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:18.721487 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.62:44726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:18.759782 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.59:40534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:18.760423 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.59:40534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:18.809124 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.55:33182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:18.809773 2026] [authz_core:error] [pid 2895077:tid 2895077] [client 57.141.0.55:33182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:19.793977 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.18:61408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:19.794649 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.18:61408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:19.913204 2026] [authz_core:error] [pid 2903678:tid 2903678] [client 57.141.0.52:64716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:19.913873 2026] [authz_core:error] [pid 2903678:tid 2903678] [client 57.141.0.52:64716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:20.018192 2026] [security2:error] [pid 2889424:tid 2889424] [client 114.119.158.38:26817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563663600/cat_ids~18,14/request_format~html"] [unique_id "amsnvGe7rn44tqRVmOaWrgAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563663600/cat_ids~18,14/request_format~html
[Thu Jul 30 11:30:20.088024 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.4:60224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:20.088686 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.4:60224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:20.126773 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.61:30776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:20.127418 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.61:30776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:20.253987 2026] [access_compat:error] [pid 2903681:tid 2903681] [client 136.158.37.124:7776] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:30:20.271931 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.10:43152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:20.272584 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.10:43152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:20.727273 2026] [access_compat:error] [pid 2900744:tid 2900744] [client 45.158.164.139:48054] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:30:20.826054 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.20:53508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:20.826705 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.20:53508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:21.236850 2026] [core:error] [pid 2903678:tid 2903678] [client 66.249.66.3:56229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:21.236882 2026] [core:error] [pid 2903678:tid 2903678] [client 66.249.66.3:56229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:21.570756 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.61:30792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:21.571406 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.61:30792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:21.590477 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.33:34004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:21.591115 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.33:34004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:21.604927 2026] [security2:error] [pid 2903477:tid 2903477] [client 114.119.158.38:26821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563663600/cat_ids~18,14/request_format~html"] [unique_id "amsnvf-ymkEjBADCaEKw2QAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563663600/cat_ids~18,14/request_format~html
[Thu Jul 30 11:30:21.707238 2026] [ssl:error] [pid 2900744:tid 2900744] (EAI 2)Name or service not known: [client 144.76.19.72:34060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:21.707278 2026] [ssl:error] [pid 2900744:tid 2900744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:21.758513 2026] [ssl:error] [pid 2903678:tid 2903678] (EAI 2)Name or service not known: [client 144.76.19.72:34062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:21.758555 2026] [ssl:error] [pid 2903678:tid 2903678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:22.015604 2026] [authz_core:error] [pid 2903829:tid 2903829] [client 57.141.0.19:20354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:22.016275 2026] [authz_core:error] [pid 2903829:tid 2903829] [client 57.141.0.19:20354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:22.311588 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.28:63478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:22.312239 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.28:63478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:22.412614 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.43:54722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:22.413241 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.43:54722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:22.915924 2026] [ssl:error] [pid 2888285:tid 2888285] (70014)End of file found: [client 216.73.216.199:51483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:22.969686 2026] [authz_core:error] [pid 2903678:tid 2903678] [client 57.141.0.42:33338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:22.970337 2026] [authz_core:error] [pid 2903678:tid 2903678] [client 57.141.0.42:33338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:23.617446 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.64:32726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:23.618101 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.64:32726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:23.749970 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.43:54728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:23.750609 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.43:54728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:24.166759 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.32:61326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:24.167385 2026] [authz_core:error] [pid 2893485:tid 2893485] [client 57.141.0.32:61326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:24.711223 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.46:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:24.711862 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.46:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:24.836091 2026] [ssl:error] [pid 2892661:tid 2892661] (EAI 2)Name or service not known: [client 144.76.19.72:34078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:24.836131 2026] [ssl:error] [pid 2892661:tid 2892661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:24.890465 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:34088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:24.890507 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:24.976760 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.11:23834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:24.977411 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.11:23834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:25.193791 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.18:61414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:25.194438 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.18:61414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:25.320887 2026] [cgi:error] [pid 2889370:tid 2889370] [client 20.220.15.170:26782] AH02811: stderr from /home/ditchfes/public_html/hoohah15/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:30:25.619910 2026] [core:error] [pid 2903782:tid 2903782] (13)Permission denied: [client 216.73.216.199:22288] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/custom_divisor
[Thu Jul 30 11:30:25.655038 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.71:37652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:25.655672 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.71:37652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:25.922422 2026] [ssl:error] [pid 2903782:tid 2903782] (70014)End of file found: [client 216.73.216.199:22288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:26.427045 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.60:48464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:26.427695 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.60:48464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:26.929852 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.16:56314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:26.930478 2026] [authz_core:error] [pid 2894573:tid 2894573] [client 57.141.0.16:56314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:26.987232 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 20.48.234.177:34451] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:30:27.039173 2026] [cgi:error] [pid 2903613:tid 2903613] [client 66.132.186.180:35538] AH02812: stderr from /home/islay/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://www.islay.me:443/cgi-bin
[Thu Jul 30 11:30:27.058227 2026] [security2:error] [pid 2893302:tid 2893302] [client 54.37.118.82:24940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "glottalstop.co.uk"] [uri "/robots.txt"] [unique_id "amsnw-3nQzL0WuS1AZMmcAAAAAY"]
[Thu Jul 30 11:30:27.205425 2026] [lsapi:warn] [pid 2903477:tid 2903477] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:27.620521 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.65:27292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:27.621162 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.65:27292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:27.813621 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 66.132.195.104:13252] AH01630: client denied by server configuration: /home/erskinen/public_html/erskinefusion.com/error_log
[Thu Jul 30 11:30:27.930407 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.36:55602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:27.931021 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.36:55602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:27.937736 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.15:37412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:27.938349 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.15:37412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:27.945788 2026] [ssl:error] [pid 2903614:tid 2903614] (EAI 2)Name or service not known: [client 144.76.19.72:34098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:27.945841 2026] [ssl:error] [pid 2903614:tid 2903614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:27.999310 2026] [ssl:error] [pid 2901100:tid 2901100] (EAI 2)Name or service not known: [client 144.76.19.72:34106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:27.999359 2026] [ssl:error] [pid 2901100:tid 2901100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:28.182909 2026] [security2:error] [pid 2889424:tid 2889424] [client 51.195.215.126:43498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amsnxGe7rn44tqRVmOaWsAAAACA"]
[Thu Jul 30 11:30:28.327261 2026] [cgi:error] [pid 2895081:tid 2895081] [client 66.132.195.104:13252] AH02812: stderr from /home/erskinen/public_html/erskinefusion.com/cgi-bin/: attempt to invoke directory as script, referer: https://www.erskinefusion.erskinenazarene.co.uk:443/cgi-bin
[Thu Jul 30 11:30:28.328035 2026] [core:error] [pid 2895081:tid 2895081] [client 66.132.195.104:13252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.erskinefusion.erskinenazarene.co.uk:443/cgi-bin
[Thu Jul 30 11:30:28.412717 2026] [lsapi:warn] [pid 2894573:tid 2894573] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:28.518377 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.24:41104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:28.519058 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.24:41104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:28.654712 2026] [ssl:error] [pid 2901124:tid 2901124] (70014)End of file found: [client 216.73.216.199:1852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:28.665511 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.62:23392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:28.666152 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.62:23392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:28.677430 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.18:61428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:28.678044 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.18:61428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:29.001173 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.8:33420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:29.001848 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.8:33420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:29.250499 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.40:53168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:29.251148 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.40:53168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:29.382013 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.56:48332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:29.382743 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.56:48332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:29.588004 2026] [core:error] [pid 2903614:tid 2903614] [client 66.249.66.167:53426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:29.588034 2026] [core:error] [pid 2903614:tid 2903614] [client 66.249.66.167:53426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:29.608617 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.35:58288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:29.609266 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.35:58288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:30.014803 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.29:56734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:30.015436 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.29:56734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:30.559969 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.53:54332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:30.560608 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.53:54332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:30.739816 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.56:48336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:30.740439 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.56:48336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:31.006994 2026] [security2:error] [pid 2903614:tid 2903614] [client 85.208.96.211:45276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/hells-angels-nz"] [unique_id "amsnx1Tc1AZ3btIwtJbBpAAAACQ"]
[Thu Jul 30 11:30:31.048872 2026] [authz_core:error] [pid 2888867:tid 2888867] [client 169.58.39.191:49565] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 11:30:31.053407 2026] [ssl:error] [pid 2903544:tid 2903544] (EAI 2)Name or service not known: [client 144.76.19.72:36528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:31.053448 2026] [ssl:error] [pid 2903544:tid 2903544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:31.110986 2026] [ssl:error] [pid 2901100:tid 2901100] (EAI 2)Name or service not known: [client 144.76.19.72:36534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:31.111018 2026] [ssl:error] [pid 2901100:tid 2901100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:31.253693 2026] [access_compat:error] [pid 2889424:tid 2889424] [client 136.158.37.124:8768] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:30:31.314740 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.66:24284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:31.315366 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.66:24284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:31.366030 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.24:41116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:31.366690 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.24:41116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:31.471098 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.16:49650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:31.471716 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.16:49650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:31.575468 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.54:61362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:31.576128 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.54:61362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:31.734736 2026] [core:error] [pid 2898046:tid 2898046] [client 57.141.0.54:61378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:31.734757 2026] [core:error] [pid 2898046:tid 2898046] [client 57.141.0.54:61378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:31.993239 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.71:37678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:31.993857 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.71:37678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:32.570488 2026] [ssl:error] [pid 2894614:tid 2894614] (70014)End of file found: [client 216.73.216.199:49126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:32.697976 2026] [security2:error] [pid 2903676:tid 2903676] [client 43.165.198.5:55706] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amsnyMMdZK5Mh5SfgBFjXQAAACo"]
[Thu Jul 30 11:30:32.799534 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.48:20554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:32.800201 2026] [authz_core:error] [pid 2898046:tid 2898046] [client 57.141.0.48:20554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:33.047619 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.23:25640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:33.048243 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.23:25640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:33.233862 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.18:25422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:33.234506 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.18:25422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:33.484263 2026] [core:error] [pid 2902460:tid 2902460] (13)Permission denied: [client 216.73.216.199:49049] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/graphics/fb0/device/resource0_wc
[Thu Jul 30 11:30:33.806220 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 169.58.39.191:50893] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 11:30:33.946018 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.14:60422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:33.946661 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.14:60422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:34.165478 2026] [ssl:error] [pid 2897990:tid 2897990] (EAI 2)Name or service not known: [client 144.76.19.72:36540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:34.165537 2026] [ssl:error] [pid 2897990:tid 2897990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:34.218547 2026] [ssl:error] [pid 2898046:tid 2898046] (EAI 2)Name or service not known: [client 144.76.19.72:36550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:34.218578 2026] [ssl:error] [pid 2898046:tid 2898046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:34.393158 2026] [core:error] [pid 2902460:tid 2902460] (13)Permission denied: [client 216.73.216.199:49049] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/3dgrading.co.uk.db
[Thu Jul 30 11:30:34.442753 2026] [authz_core:error] [pid 2903681:tid 2903681] [client 57.141.0.48:20566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:34.443399 2026] [authz_core:error] [pid 2903681:tid 2903681] [client 57.141.0.48:20566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:34.546645 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.59:22354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:34.547293 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.59:22354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:34.821062 2026] [authz_core:error] [pid 2899961:tid 2899961] [client 57.141.0.69:63406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:34.821700 2026] [authz_core:error] [pid 2899961:tid 2899961] [client 57.141.0.69:63406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:34.842706 2026] [security2:error] [pid 2903614:tid 2903614] [client 43.165.198.5:35440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amsnylTc1AZ3btIwtJbBpgAAACQ"], referer: http://hazardous-materials.co.uk
[Thu Jul 30 11:30:34.988636 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.23:43682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:34.989350 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.23:43682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:35.593404 2026] [core:error] [pid 2901100:tid 2901100] (13)Permission denied: [client 216.73.216.199:10011] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS1/uartclk
[Thu Jul 30 11:30:35.610261 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.19:22600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:35.610881 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.19:22600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:35.671487 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.58:33050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:35.672119 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.58:33050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:36.797560 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.34:56876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:36.797992 2026] [ssl:error] [pid 2901100:tid 2901100] (70014)End of file found: [client 216.73.216.199:10011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:36.798192 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.34:56876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:36.984422 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.41:52238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:36.985052 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.41:52238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:37.132902 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.20:64878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:37.133536 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.20:64878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:37.272038 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:36566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:37.272103 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:37.328277 2026] [ssl:error] [pid 2897990:tid 2897990] (EAI 2)Name or service not known: [client 144.76.19.72:36572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:37.328312 2026] [ssl:error] [pid 2897990:tid 2897990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:37.343794 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.17:62608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:37.344444 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.17:62608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:37.644714 2026] [security2:error] [pid 2903545:tid 2903545] [client 18.199.86.73:34724] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsnzUSZuQeQbf6AymXajQAAAB4"]
[Thu Jul 30 11:30:37.644919 2026] [security2:error] [pid 2903545:tid 2903545] [client 18.199.86.73:34724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsnzUSZuQeQbf6AymXajQAAAB4"]
[Thu Jul 30 11:30:37.678988 2026] [security2:error] [pid 2903545:tid 2903545] [client 18.199.86.73:34724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amsnzUSZuQeQbf6AymXajQAAAB4"]
[Thu Jul 30 11:30:37.684620 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.4:51316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:37.685242 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.4:51316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:37.736177 2026] [lsapi:warn] [pid 2901123:tid 2901123] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:38.211317 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.6:32218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:38.211977 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.6:32218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:38.307809 2026] [ssl:error] [pid 2902460:tid 2902460] (70014)End of file found: [client 216.73.216.199:49049] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:39.043958 2026] [lsapi:warn] [pid 2897990:tid 2897990] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:39.088673 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.4:51328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:39.089319 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.4:51328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:39.219585 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.60:27820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:39.220215 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.60:27820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:39.512104 2026] [core:error] [pid 2903544:tid 2903544] (13)Permission denied: [client 216.73.216.199:26914] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/iomem_base
[Thu Jul 30 11:30:39.812856 2026] [core:error] [pid 2903544:tid 2903544] (13)Permission denied: [client 216.73.216.199:26914] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/sijames.com.db
[Thu Jul 30 11:30:39.974964 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.48:23500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:39.975604 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.48:23500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:39.999368 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.13:46438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:39.999990 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.13:46438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:40.044476 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.34:48202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:40.045132 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.34:48202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:40.282686 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.33:41766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:40.283313 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.33:41766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:40.382014 2026] [ssl:error] [pid 2901123:tid 2901123] (EAI 2)Name or service not known: [client 144.76.19.72:48438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:40.382051 2026] [ssl:error] [pid 2901123:tid 2901123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:40.438149 2026] [ssl:error] [pid 2903682:tid 2903682] (EAI 2)Name or service not known: [client 144.76.19.72:48444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:40.438199 2026] [ssl:error] [pid 2903682:tid 2903682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:40.778686 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.17:61274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:40.779317 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.17:61274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:41.018673 2026] [ssl:error] [pid 2903544:tid 2903544] (70014)End of file found: [client 216.73.216.199:26914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:41.218660 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.8:27470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:41.219288 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.8:27470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:41.481995 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.10:60652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:41.482634 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.10:60652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:41.737589 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.43:45512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:41.738237 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.43:45512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:42.271145 2026] [access_compat:error] [pid 2888285:tid 2888285] [client 136.158.37.124:9751] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:30:42.372187 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.46:29662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:42.372830 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.46:29662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:42.796094 2026] [core:error] [pid 2886514:tid 2886514] [client 66.249.66.40:63914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:42.796123 2026] [core:error] [pid 2886514:tid 2886514] [client 66.249.66.40:63914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:42.801176 2026] [core:error] [pid 2901123:tid 2901123] [client 66.249.66.167:48538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:42.801199 2026] [core:error] [pid 2901123:tid 2901123] [client 66.249.66.167:48538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:30:42.870930 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.61:37348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:42.871602 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.61:37348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:43.199214 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.46:29666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:43.199834 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.46:29666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:43.336712 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.52:23000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:43.337373 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.52:23000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:43.434607 2026] [ssl:error] [pid 2899163:tid 2899163] (70014)End of file found: [client 216.73.216.199:64769] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:43.493494 2026] [ssl:error] [pid 2886514:tid 2886514] (EAI 2)Name or service not known: [client 144.76.19.72:48446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:43.493521 2026] [ssl:error] [pid 2886514:tid 2886514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:43.541974 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.6:31138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:43.542647 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.6:31138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:43.550980 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:48460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:43.551018 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:43.958822 2026] [security2:error] [pid 2901123:tid 2901123] [client 3.215.59.93:54055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2020/01/Professional-Services-Blog-Header-Image-Prosperon-Networks.png"] [unique_id "amsn063fTMlandlHdoGP4wAAAB8"]
[Thu Jul 30 11:30:44.216042 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.32:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:44.216673 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.32:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:44.270611 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 20.48.234.177:34451] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/l10n/error_log
[Thu Jul 30 11:30:44.438587 2026] [authz_core:error] [pid 2903477:tid 2903477] [client 57.141.0.55:49562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:44.439225 2026] [authz_core:error] [pid 2903477:tid 2903477] [client 57.141.0.55:49562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:45.543322 2026] [ssl:error] [pid 2903613:tid 2903613] (70014)End of file found: [client 216.73.216.199:23327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:45.675953 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.6:31142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:45.676592 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.6:31142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:45.848785 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.31:36298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:45.849419 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.31:36298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:45.951029 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.63:65362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:45.951729 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.63:65362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:46.020701 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.68:63220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:46.021339 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.68:63220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:46.134911 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.11:35464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:46.135551 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.11:35464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:46.221694 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.38:23786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:46.222379 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.38:23786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:46.462286 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 66.249.66.34:37522] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:30:46.464957 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 66.249.66.34:37522] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:30:46.605676 2026] [ssl:error] [pid 2893302:tid 2893302] (EAI 2)Name or service not known: [client 144.76.19.72:48470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:46.605703 2026] [ssl:error] [pid 2893302:tid 2893302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:46.644057 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.34:48208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:46.644747 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.34:48208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:46.658857 2026] [ssl:error] [pid 2903674:tid 2903674] (EAI 2)Name or service not known: [client 144.76.19.72:48472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:46.658906 2026] [ssl:error] [pid 2903674:tid 2903674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:46.721569 2026] [security2:error] [pid 2904780:tid 2904780] [client 43.166.253.78:55605] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn1pVCPX_9h35gKU_0ywAAAAU"]
[Thu Jul 30 11:30:46.721622 2026] [security2:error] [pid 2904780:tid 2904780] [client 43.166.253.78:55605] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn1pVCPX_9h35gKU_0ywAAAAU"]
[Thu Jul 30 11:30:46.721876 2026] [security2:error] [pid 2904780:tid 2904780] [client 43.166.253.78:55605] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsn1pVCPX_9h35gKU_0ywAAAAU"]
[Thu Jul 30 11:30:47.043690 2026] [core:error] [pid 2901123:tid 2901123] (13)Permission denied: [client 216.73.216.199:25059] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS1/uartclk
[Thu Jul 30 11:30:47.385655 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.28:64922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:47.386277 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.28:64922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:47.595015 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.55:49576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:47.595664 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.55:49576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:47.735260 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.15:45740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:47.735897 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.15:45740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:48.016024 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.49:59076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:48.016685 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.49:59076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:48.250874 2026] [lsapi:warn] [pid 2903674:tid 2903674] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:48.315513 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.61:37362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:48.316180 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.61:37362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:48.319098 2026] [cgi:error] [pid 2898999:tid 2898999] [client 20.48.234.177:34472] AH02812: stderr from /home/stcols/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:30:48.662211 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.26:57262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:48.662840 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.26:57262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:48.815677 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.29:50252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:48.816315 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.29:50252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:49.631787 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.1:37022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:49.632440 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.1:37022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:49.719332 2026] [ssl:error] [pid 2900744:tid 2900744] (EAI 2)Name or service not known: [client 144.76.19.72:19440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:49.719370 2026] [ssl:error] [pid 2900744:tid 2900744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:49.749499 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:49.989753 2026] [ssl:error] [pid 2897990:tid 2897990] (EAI 2)Name or service not known: [client 144.76.19.72:19446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:49.989796 2026] [ssl:error] [pid 2897990:tid 2897990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:50.021199 2026] [security2:error] [pid 2897990:tid 2897990] [client 163.7.14.136:15929] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn2qpq2wKAAIG42VH0wwAAAAM"]
[Thu Jul 30 11:30:50.021265 2026] [security2:error] [pid 2897990:tid 2897990] [client 163.7.14.136:15929] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn2qpq2wKAAIG42VH0wwAAAAM"]
[Thu Jul 30 11:30:50.021655 2026] [security2:error] [pid 2897990:tid 2897990] [client 163.7.14.136:15929] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsn2qpq2wKAAIG42VH0wwAAAAM"]
[Thu Jul 30 11:30:50.071222 2026] [lsapi:warn] [pid 2889370:tid 2889370] [client 173.252.69.16:56976] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:30:50.071273 2026] [lsapi:warn] [pid 2889370:tid 2889370] [client 173.252.69.16:56976] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:30:50.355265 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.50:61216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:50.355892 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.50:61216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:50.522485 2026] [ssl:error] [pid 2901123:tid 2901123] (70014)End of file found: [client 216.73.216.199:25059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:50.674704 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.64:59532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:50.675341 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.64:59532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:50.696670 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.48:50186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:50.697290 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.48:50186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:50.768082 2026] [authz_core:error] [pid 2903477:tid 2903477] [client 57.141.0.43:45094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:50.768703 2026] [authz_core:error] [pid 2903477:tid 2903477] [client 57.141.0.43:45094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:51.275548 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.40:48412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:51.276184 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.40:48412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:51.360935 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.23:48006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:51.361572 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.23:48006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:51.424980 2026] [ssl:error] [pid 2903682:tid 2903682] (70014)End of file found: [client 216.73.216.199:57267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:51.576020 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.25:41392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:51.576652 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.25:41392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:51.831648 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.12:29246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:51.832296 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.12:29246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:51.916958 2026] [ssl:error] [pid 2897111:tid 2897111] (70014)End of file found: [client 216.73.216.199:56346] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:30:52.191835 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.30:63986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:52.192461 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.30:63986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:52.345958 2026] [security2:error] [pid 2903828:tid 2903828] [client 49.51.72.236:39410] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.broadbentandsmith.com"] [uri "/"] [unique_id "amsn3NKQ7cfnEiGiig3aaAAAADU"]
[Thu Jul 30 11:30:52.790158 2026] [security2:error] [pid 2899960:tid 2899960] [client 163.7.14.136:15099] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn3IO_IzseRrSNx-HGGAAAABU"]
[Thu Jul 30 11:30:52.790210 2026] [security2:error] [pid 2899960:tid 2899960] [client 163.7.14.136:15099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn3IO_IzseRrSNx-HGGAAAABU"]
[Thu Jul 30 11:30:52.790457 2026] [security2:error] [pid 2899960:tid 2899960] [client 163.7.14.136:15099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsn3IO_IzseRrSNx-HGGAAAABU"]
[Thu Jul 30 11:30:52.792798 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.38:57382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:52.793444 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.38:57382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:52.882429 2026] [access_compat:error] [pid 2889424:tid 2889424] [client 136.158.37.124:10642] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:30:53.020676 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.66:45740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:53.021311 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.66:45740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:53.046522 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:19452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:53.046565 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:53.103809 2026] [ssl:error] [pid 2897990:tid 2897990] (EAI 2)Name or service not known: [client 144.76.19.72:19466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:53.103840 2026] [ssl:error] [pid 2897990:tid 2897990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:53.396265 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.62:58674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:53.397680 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.62:58674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:53.979043 2026] [security2:error] [pid 2898449:tid 2898449] [client 49.51.72.236:36016] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.broadbentandsmith.com"] [uri "/"] [unique_id "amsn3aK298UTGRtSlNemlAAAABE"], referer: http://www.broadbentandsmith.com
[Thu Jul 30 11:30:54.159040 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.13:28710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:54.159675 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.13:28710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:54.344214 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.30:63988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:54.344836 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.30:63988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:55.095913 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.1:27856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:55.096560 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.1:27856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:55.243840 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.13:28716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:55.244508 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.13:28716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:55.343175 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.71:44568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:55.343802 2026] [authz_core:error] [pid 2894616:tid 2894616] [client 57.141.0.71:44568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:55.361146 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.5:36050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:55.361760 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.5:36050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:55.915344 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.52:33274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:55.916006 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.52:33274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:56.222247 2026] [ssl:error] [pid 2904922:tid 2904922] (EAI 2)Name or service not known: [client 144.76.19.72:19480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:56.222301 2026] [ssl:error] [pid 2904922:tid 2904922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:56.277721 2026] [ssl:error] [pid 2898449:tid 2898449] (EAI 2)Name or service not known: [client 144.76.19.72:19482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:56.277782 2026] [ssl:error] [pid 2898449:tid 2898449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:56.607806 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.8:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:56.608433 2026] [authz_core:error] [pid 2903782:tid 2903782] [client 57.141.0.8:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:56.910633 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 66.249.66.33:58019] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:30:56.911968 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.10:64410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:56.912626 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.10:64410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:56.913307 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 66.249.66.33:58019] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:30:57.272114 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.66:45742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:57.272752 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.66:45742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:57.289700 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.61:30920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:57.290320 2026] [authz_core:error] [pid 2903682:tid 2903682] [client 57.141.0.61:30920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:57.731487 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.39:31124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:57.732197 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.39:31124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:58.010930 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.30:63994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:58.011565 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.30:63994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:58.166518 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.21:39166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:58.167162 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.21:39166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:58.367430 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.64:33500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:58.368051 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.64:33500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:58.695919 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.44:23682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:30:58.696553 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.44:23682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:30:58.711926 2026] [lsapi:warn] [pid 2903613:tid 2903613] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:30:59.365103 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:19486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:59.365171 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:59.421322 2026] [ssl:error] [pid 2903615:tid 2903615] (EAI 2)Name or service not known: [client 144.76.19.72:19502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:30:59.421383 2026] [ssl:error] [pid 2903615:tid 2903615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:30:59.560261 2026] [ssl:error] [pid 2903676:tid 2903676] (70014)End of file found: [client 216.73.216.199:49483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:00.046723 2026] [core:error] [pid 2899930:tid 2899930] (13)Permission denied: [client 216.73.216.199:16827] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/sijames.com.db
[Thu Jul 30 11:31:00.070591 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.16:23466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:00.071272 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.16:23466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:00.118128 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.14:28310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:00.118753 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.14:28310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:00.307848 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.14:28320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:00.308599 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.14:28320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:00.314305 2026] [lsapi:warn] [pid 2904780:tid 2904780] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:00.338224 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.16:23474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:00.338848 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.16:23474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:00.622944 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.38:43426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:00.623599 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.38:43426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:00.969862 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.67:60392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:00.970968 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.67:60392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:01.421644 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.66:45754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:01.422285 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.66:45754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:01.563211 2026] [core:error] [pid 2901068:tid 2901068] [client 66.249.66.168:43036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:31:01.563250 2026] [core:error] [pid 2901068:tid 2901068] [client 66.249.66.168:43036] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:31:01.816533 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.5:52500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:01.817193 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.5:52500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:02.205662 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.8:20110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:02.206289 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.8:20110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:02.406034 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.32:35414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:02.406668 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.32:35414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:02.480708 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:27836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:02.480741 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:02.536800 2026] [ssl:error] [pid 2901123:tid 2901123] (EAI 2)Name or service not known: [client 144.76.19.72:27846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:02.536846 2026] [ssl:error] [pid 2901123:tid 2901123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:03.089248 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.53:29970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:03.089865 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.53:29970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:03.376443 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.51:49194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:03.377636 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.51:49194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:03.492684 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.69:38340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:03.493381 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.69:38340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:03.674890 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.43:39128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:03.675574 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.43:39128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:03.737541 2026] [access_compat:error] [pid 2904922:tid 2904922] [client 136.158.37.124:11599] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:31:04.438926 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.12:52432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:04.439655 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.12:52432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:04.469745 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.17:62680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:04.470369 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.17:62680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:04.640061 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 109.139.156.166:29137] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:04.640697 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 109.139.156.166:29137] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:04.806199 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.12:52440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:04.806816 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.12:52440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:04.840122 2026] [core:error] [pid 2899163:tid 2899163] [client 109.139.156.166:29137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apotheekcandidejacobs.be/?ved=2ahUKEwjKrdH4mPqVAxVz9gIHHdi9Dr0QgU96BAgSEAw
[Thu Jul 30 11:31:04.840146 2026] [core:error] [pid 2899163:tid 2899163] [client 109.139.156.166:29137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apotheekcandidejacobs.be/?ved=2ahUKEwjKrdH4mPqVAxVz9gIHHdi9Dr0QgU96BAgSEAw
[Thu Jul 30 11:31:04.976234 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.41:40732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:04.976866 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.41:40732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:05.057576 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.70:45120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:05.058229 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.70:45120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:05.352885 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.17:62684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:05.353511 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.17:62684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:05.590143 2026] [ssl:error] [pid 2899163:tid 2899163] (EAI 2)Name or service not known: [client 144.76.19.72:27854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:05.590192 2026] [ssl:error] [pid 2899163:tid 2899163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:05.647311 2026] [ssl:error] [pid 2901100:tid 2901100] (EAI 2)Name or service not known: [client 144.76.19.72:27856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:05.647334 2026] [ssl:error] [pid 2901100:tid 2901100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:05.804936 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.45:22898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:05.805660 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.45:22898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:05.903234 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.69:38348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:05.903853 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.69:38348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:06.609903 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.9:64426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:06.610610 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.9:64426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:07.451287 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.28:41470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:07.451940 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.28:41470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:07.555111 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.21:28324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:07.555801 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.21:28324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:07.640216 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.41:40740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:07.640903 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.41:40740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:08.087198 2026] [ssl:error] [pid 2902460:tid 2902460] (70014)End of file found: [client 216.73.216.199:42675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:08.168668 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.49:51288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:08.169297 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.49:51288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:08.689763 2026] [core:error] [pid 2894254:tid 2894254] (13)Permission denied: [client 216.73.216.199:1933] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu5/subsystem/uevent
[Thu Jul 30 11:31:08.704539 2026] [ssl:error] [pid 2894616:tid 2894616] (EAI 2)Name or service not known: [client 144.76.19.72:27864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:08.704570 2026] [ssl:error] [pid 2894616:tid 2894616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:08.756374 2026] [ssl:error] [pid 2903614:tid 2903614] (EAI 2)Name or service not known: [client 144.76.19.72:27870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:08.756406 2026] [ssl:error] [pid 2903614:tid 2903614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:08.909979 2026] [security2:error] [pid 2903828:tid 2903828] [client 43.164.196.244:57880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.inrc.org.uk"] [uri "/"] [unique_id "amsn7NKQ7cfnEiGiig3acgAAADU"]
[Thu Jul 30 11:31:09.030453 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.18:23320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:09.031153 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.18:23320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:09.053205 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.69:40168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:09.053831 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.69:40168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:09.182188 2026] [lsapi:warn] [pid 2903675:tid 2903675] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:09.468181 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.25:26810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:09.468804 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.25:26810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:09.854737 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.9:64432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:09.855436 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.9:64432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:10.016703 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.60:53982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:10.017330 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.60:53982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:10.357968 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.11:50390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:10.358673 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.11:50390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:10.599458 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.24:46000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:10.600215 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.24:46000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:10.705671 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.68:58474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:10.706295 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.68:58474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:10.959426 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.41:40750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:10.960125 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.41:40750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:11.021606 2026] [lsapi:warn] [pid 2895081:tid 2895081] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:11.113699 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.32:57180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:11.114317 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.32:57180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:11.529983 2026] [security2:error] [pid 2904922:tid 2904922] [client 124.156.157.91:50914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amsn7-gUs6QffHItqcrRiwAAAA0"]
[Thu Jul 30 11:31:11.810097 2026] [ssl:error] [pid 2901068:tid 2901068] (EAI 2)Name or service not known: [client 144.76.19.72:34322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:11.810146 2026] [ssl:error] [pid 2901068:tid 2901068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:11.868264 2026] [ssl:error] [pid 2899960:tid 2899960] (EAI 2)Name or service not known: [client 144.76.19.72:34326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:11.868289 2026] [ssl:error] [pid 2899960:tid 2899960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:12.052332 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.61:32470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:12.053540 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.61:32470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:12.341476 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.3:52832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:12.342599 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.3:52832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:12.374907 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.30:56068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:12.375554 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.30:56068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:12.424917 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.7:23768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:12.425555 2026] [authz_core:error] [pid 2901068:tid 2901068] [client 57.141.0.7:23768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:12.510693 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.62:41510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:12.511388 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.62:41510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:13.224098 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.56:31356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:13.224720 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.56:31356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:13.582171 2026] [authz_core:error] [pid 2904713:tid 2904713] [client 57.141.0.53:62668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:13.582789 2026] [authz_core:error] [pid 2904713:tid 2904713] [client 57.141.0.53:62668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:14.292486 2026] [security2:error] [pid 2902460:tid 2902460] [client 14.237.119.215:57052] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn8ialkgzvKjpImtHTjgAAABI"]
[Thu Jul 30 11:31:14.292545 2026] [security2:error] [pid 2902460:tid 2902460] [client 14.237.119.215:57052] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn8ialkgzvKjpImtHTjgAAABI"]
[Thu Jul 30 11:31:14.292788 2026] [security2:error] [pid 2902460:tid 2902460] [client 14.237.119.215:57052] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsn8ialkgzvKjpImtHTjgAAABI"]
[Thu Jul 30 11:31:14.571598 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.36:62882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:14.572767 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.36:62882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:14.576642 2026] [access_compat:error] [pid 2897697:tid 2897697] [client 136.158.37.124:12486] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:31:14.926911 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:34342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:14.926936 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:14.983609 2026] [ssl:error] [pid 2901123:tid 2901123] (EAI 2)Name or service not known: [client 144.76.19.72:34350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:14.983633 2026] [ssl:error] [pid 2901123:tid 2901123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:15.013060 2026] [ssl:error] [pid 2894254:tid 2894254] (70014)End of file found: [client 216.73.216.199:1933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:15.301802 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.63:26398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:15.302424 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.63:26398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:15.438429 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.63:26404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:15.439074 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.63:26404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:15.472661 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.11:50396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:15.473293 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.11:50396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:15.548596 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.59:64102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:15.549217 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.59:64102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:15.837214 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.7:30370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:15.837832 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.7:30370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:16.061935 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.47:44914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:16.062565 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.47:44914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:16.220001 2026] [core:error] [pid 2897111:tid 2897111] (13)Permission denied: [client 216.73.216.199:19877] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS3/closing_wait
[Thu Jul 30 11:31:16.817126 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.5:58830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:16.817744 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.5:58830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:17.182690 2026] [authz_core:error] [pid 2905891:tid 2905891] [client 57.141.0.26:20036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:17.183364 2026] [authz_core:error] [pid 2905891:tid 2905891] [client 57.141.0.26:20036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:17.424547 2026] [core:error] [pid 2897111:tid 2897111] (13)Permission denied: [client 216.73.216.199:19877] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS3/closing_wait
[Thu Jul 30 11:31:17.706767 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.56:33636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:17.707477 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.56:33636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:17.726191 2026] [ssl:error] [pid 2897111:tid 2897111] (70014)End of file found: [client 216.73.216.199:19877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:17.728377 2026] [security2:error] [pid 2905891:tid 2905891] [client 201.62.92.85:38724] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn9d0uzLWm1HuPcHyXSAAAAA8"]
[Thu Jul 30 11:31:17.728422 2026] [security2:error] [pid 2905891:tid 2905891] [client 201.62.92.85:38724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn9d0uzLWm1HuPcHyXSAAAAA8"]
[Thu Jul 30 11:31:17.728665 2026] [security2:error] [pid 2905891:tid 2905891] [client 201.62.92.85:38724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsn9d0uzLWm1HuPcHyXSAAAAA8"]
[Thu Jul 30 11:31:17.850331 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.1:30152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:17.851023 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.1:30152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:18.039928 2026] [ssl:error] [pid 2903675:tid 2903675] (EAI 2)Name or service not known: [client 144.76.19.72:34358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:18.039965 2026] [ssl:error] [pid 2903675:tid 2903675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:18.092199 2026] [ssl:error] [pid 2903614:tid 2903614] (EAI 2)Name or service not known: [client 144.76.19.72:34372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:18.092239 2026] [ssl:error] [pid 2903614:tid 2903614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:18.464500 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.56:33642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:18.465198 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.56:33642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:18.608607 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.6:21354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:18.609228 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.6:21354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:18.738659 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.6:21360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:18.739279 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.6:21360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:18.930985 2026] [core:error] [pid 2905891:tid 2905891] (13)Permission denied: [client 216.73.216.199:41625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/reclaim_account
[Thu Jul 30 11:31:19.014812 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.62:41512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:19.015432 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.62:41512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:19.615130 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.63:40818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:19.615754 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.63:40818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:19.667236 2026] [lsapi:warn] [pid 2901123:tid 2901123] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:19.834372 2026] [ssl:error] [pid 2905891:tid 2905891] (70014)End of file found: [client 216.73.216.199:41625] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:20.085159 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.37:40126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:20.085807 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.37:40126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:20.329057 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.35:20970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:20.329744 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.35:20970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:20.435511 2026] [ssl:error] [pid 2903614:tid 2903614] (70014)End of file found: [client 216.73.216.199:56236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:20.492838 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.13:31920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:20.493498 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.13:31920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:20.747341 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.62:41526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:20.747958 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.62:41526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:20.857581 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.7:30386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:20.858212 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.7:30386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:21.144214 2026] [ssl:error] [pid 2903676:tid 2903676] (EAI 2)Name or service not known: [client 144.76.19.72:50258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:21.144245 2026] [ssl:error] [pid 2903676:tid 2903676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:21.199273 2026] [ssl:error] [pid 2899930:tid 2899930] (EAI 2)Name or service not known: [client 144.76.19.72:50274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:21.199315 2026] [ssl:error] [pid 2899930:tid 2899930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:21.332715 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.27:61648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:21.333335 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.27:61648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:21.487686 2026] [security2:error] [pid 2901124:tid 2901124] [client 85.208.96.198:43130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9328.0/prev_next,prev.html"] [unique_id "amsn-b_s7aEYVV1RiZDerQAAACE"]
[Thu Jul 30 11:31:21.660324 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.38:48968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:21.660969 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.38:48968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:22.181056 2026] [core:error] [pid 2901124:tid 2901124] [client 66.249.64.170:38589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:31:22.181100 2026] [core:error] [pid 2901124:tid 2901124] [client 66.249.64.170:38589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:31:22.538495 2026] [security2:error] [pid 2903615:tid 2903615] [client 188.66.134.144:63531] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn-m7PR2b46Vxjx58sQwAAACU"]
[Thu Jul 30 11:31:22.538561 2026] [security2:error] [pid 2903615:tid 2903615] [client 188.66.134.144:63531] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsn-m7PR2b46Vxjx58sQwAAACU"]
[Thu Jul 30 11:31:22.538818 2026] [security2:error] [pid 2903615:tid 2903615] [client 188.66.134.144:63531] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsn-m7PR2b46Vxjx58sQwAAACU"]
[Thu Jul 30 11:31:22.611349 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.64:26002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:22.611999 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.64:26002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:22.743490 2026] [lsapi:warn] [pid 2901123:tid 2901123] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:23.032948 2026] [ssl:error] [pid 2888285:tid 2888285] (70014)End of file found: [client 216.73.216.199:51084] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:23.066999 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.55:30402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:23.068233 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.55:30402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:23.151312 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.21:25340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:23.151934 2026] [authz_core:error] [pid 2903613:tid 2903613] [client 57.141.0.21:25340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:23.309012 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.54:36232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:23.309678 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.54:36232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:23.642554 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.47:22574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:23.643244 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.47:22574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:23.875771 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.25:43494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:23.876392 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.25:43494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:23.896922 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.40:53008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:23.897552 2026] [authz_core:error] [pid 2903675:tid 2903675] [client 57.141.0.40:53008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:24.254266 2026] [ssl:error] [pid 2903544:tid 2903544] (EAI 2)Name or service not known: [client 144.76.19.72:50280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:24.254299 2026] [ssl:error] [pid 2903544:tid 2903544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:24.308779 2026] [ssl:error] [pid 2903615:tid 2903615] (EAI 2)Name or service not known: [client 144.76.19.72:50294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:24.308809 2026] [ssl:error] [pid 2903615:tid 2903615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:24.924017 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.6:34536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:24.925159 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.6:34536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:25.183114 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.50:31404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:25.183735 2026] [authz_core:error] [pid 2903615:tid 2903615] [client 57.141.0.50:31404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:25.240645 2026] [core:error] [pid 2903613:tid 2903613] [client 66.249.66.39:49015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:31:25.240673 2026] [core:error] [pid 2903613:tid 2903613] [client 66.249.66.39:49015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:31:25.373388 2026] [access_compat:error] [pid 2903544:tid 2903544] [client 136.158.37.124:13432] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:31:25.584462 2026] [authz_core:error] [pid 2905891:tid 2905891] [client 57.141.0.61:52658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:25.585094 2026] [authz_core:error] [pid 2905891:tid 2905891] [client 57.141.0.61:52658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:25.714329 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.66:60038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:25.715058 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.66:60038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:25.716261 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.71:36648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:25.716886 2026] [authz_core:error] [pid 2898999:tid 2898999] [client 57.141.0.71:36648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:25.871513 2026] [access_compat:error] [pid 2901123:tid 2901123] [client 45.158.164.139:54736] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:31:26.409823 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.9:63098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:26.410450 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.9:63098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:26.533860 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.4:25710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:26.534481 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.4:25710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:27.382534 2026] [ssl:error] [pid 2894614:tid 2894614] (EAI 2)Name or service not known: [client 144.76.19.72:50308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:27.382596 2026] [ssl:error] [pid 2894614:tid 2894614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:27.436142 2026] [ssl:error] [pid 2894254:tid 2894254] (EAI 2)Name or service not known: [client 144.76.19.72:50314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:27.436175 2026] [ssl:error] [pid 2894254:tid 2894254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:27.451400 2026] [ssl:error] [pid 2901100:tid 2901100] (70014)End of file found: [client 216.73.216.199:12628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:27.656938 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.47:22578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:27.657572 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.47:22578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:27.790202 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.14:33770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:27.790822 2026] [authz_core:error] [pid 2894613:tid 2894613] [client 57.141.0.14:33770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:27.991701 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.62:42976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:27.992342 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.62:42976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:28.291341 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.60:51996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:28.291994 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.60:51996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:28.383241 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.38:48984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:28.383870 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.38:48984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:28.560251 2026] [ssl:error] [pid 2898999:tid 2898999] (70014)End of file found: [client 216.73.216.199:7708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:29.016476 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.61:52674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:29.017150 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.61:52674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:29.160848 2026] [ssl:error] [pid 2901123:tid 2901123] (70014)End of file found: [client 216.73.216.199:53948] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:29.537794 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.48:20456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:29.538419 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.48:20456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:29.990390 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.10:31044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:29.991019 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.10:31044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:29.992874 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.66:60040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:29.993485 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.66:60040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:30.112507 2026] [lsapi:warn] [pid 2880697:tid 2880697] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:30.144124 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:33774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:30.144764 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:33774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:30.500213 2026] [ssl:error] [pid 2899930:tid 2899930] (EAI 2)Name or service not known: [client 144.76.19.72:63076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:30.500240 2026] [ssl:error] [pid 2899930:tid 2899930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:30.553577 2026] [ssl:error] [pid 2886514:tid 2886514] (EAI 2)Name or service not known: [client 144.76.19.72:63080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:30.553605 2026] [ssl:error] [pid 2886514:tid 2886514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:31.115184 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.30:57454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:31.115807 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.30:57454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:31.126984 2026] [cgi:error] [pid 2897697:tid 2897697] [client 4.184.185.91:16610] AH02811: stderr from /home/andrewmarvell/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:31:31.200107 2026] [security2:error] [pid 2880697:tid 2880697] [client 85.208.96.196:10370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3901.0.html"] [unique_id "amsoA0fKsF_rbvGPcZbRWgAAAAc"]
[Thu Jul 30 11:31:31.344329 2026] [cgi:error] [pid 2897697:tid 2897697] [client 4.184.185.91:16610] AH02811: stderr from /home/andrewmarvell/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 11:31:31.378967 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.21:54498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:31.379594 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.21:54498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:31.535208 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.23:37648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:31.535847 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.23:37648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:31.551332 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.14:33780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:31.551957 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.14:33780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:31.647186 2026] [security2:error] [pid 2886514:tid 2886514] [client 85.208.96.196:34128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/types-of-rigid-constitution"] [unique_id "amsoA6fWkd_0GJk8mCcDUgAAACs"]
[Thu Jul 30 11:31:32.113982 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.28:34752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:32.114632 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.28:34752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:32.389254 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:32.400092 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.58:50898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:32.400787 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.58:50898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:32.648536 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.47:23728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:32.649230 2026] [authz_core:error] [pid 2888285:tid 2888285] [client 57.141.0.47:23728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:32.670191 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.46:45992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:32.670813 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.46:45992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:32.968146 2026] [ssl:error] [pid 2899163:tid 2899163] (70014)End of file found: [client 216.73.216.199:3047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:33.608503 2026] [ssl:error] [pid 2906604:tid 2906604] (EAI 2)Name or service not known: [client 144.76.19.72:63096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:33.608572 2026] [ssl:error] [pid 2906604:tid 2906604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:33.697884 2026] [ssl:error] [pid 2898640:tid 2898640] (EAI 2)Name or service not known: [client 144.76.19.72:63108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:33.697915 2026] [ssl:error] [pid 2898640:tid 2898640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:33.767425 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.39:32482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:33.768048 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.39:32482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:33.852655 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.45:61118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:33.853273 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.45:61118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:33.960086 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.36:49672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:33.960708 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.36:49672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:34.336588 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.68:30062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:34.337252 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.68:30062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:34.808583 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.42:63954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:34.809208 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.42:63954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:35.483674 2026] [ssl:error] [pid 2903613:tid 2903613] (70014)End of file found: [client 216.73.216.199:56260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:35.518958 2026] [authz_core:error] [pid 2906602:tid 2906602] [client 57.141.0.63:22164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:35.519622 2026] [authz_core:error] [pid 2906602:tid 2906602] [client 57.141.0.63:22164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:35.690056 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.13:47654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:35.690692 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.13:47654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:35.747643 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.13:47658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:35.748264 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.13:47658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:36.132064 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.36:49688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:36.133518 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.36:49688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:36.133760 2026] [access_compat:error] [pid 2898640:tid 2898640] [client 136.158.37.124:14279] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:31:36.743627 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.32:28170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:36.744254 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.32:28170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:36.751011 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:63114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:36.751038 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:36.802536 2026] [ssl:error] [pid 2897111:tid 2897111] (EAI 2)Name or service not known: [client 144.76.19.72:63120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:36.802567 2026] [ssl:error] [pid 2897111:tid 2897111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:36.812906 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.56:58628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:36.813538 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.56:58628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:37.150664 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.5:48376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:37.151287 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.5:48376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:37.681741 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.36:49700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:37.682376 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.36:49700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:37.809911 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.4:30122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:37.810551 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.4:30122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:37.918312 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.11:29188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:37.918935 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.11:29188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:38.634821 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.41:60298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:38.635498 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.41:60298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:38.889320 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.31:63308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:38.889942 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.31:63308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:39.041647 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.22:54350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:39.042266 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.22:54350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:39.711366 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.47:23732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:39.712013 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.47:23732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:39.860872 2026] [ssl:error] [pid 2906568:tid 2906568] (EAI 2)Name or service not known: [client 144.76.19.72:63218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:39.860932 2026] [ssl:error] [pid 2906568:tid 2906568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:39.915537 2026] [ssl:error] [pid 2903676:tid 2903676] (EAI 2)Name or service not known: [client 144.76.19.72:63226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:39.915572 2026] [ssl:error] [pid 2903676:tid 2903676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:39.954250 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.53:39214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:39.954878 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.53:39214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:40.030363 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.23:46088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:40.031028 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.23:46088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:40.423582 2026] [core:error] [pid 2906568:tid 2906568] (13)Permission denied: [client 216.73.216.199:31453] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_balloon/drivers/virtio:virtio_balloon/uevent
[Thu Jul 30 11:31:40.599721 2026] [lsapi:warn] [pid 2903676:tid 2903676] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:40.654289 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.54:60656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:40.654934 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.54:60656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:40.979966 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.60:55884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:40.980611 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.60:55884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:41.247587 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.7:20876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:41.248212 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.7:20876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:41.425617 2026] [ssl:error] [pid 2888285:tid 2888285] (70014)End of file found: [client 216.73.216.199:21023] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:41.735203 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.61:64046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:41.735831 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.61:64046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:41.940268 2026] [cgi:error] [pid 2906536:tid 2906536] [client 194.249.231.23:54966] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:31:41.970286 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.65:56982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:41.970933 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.65:56982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:42.154863 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.7:20884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:42.155564 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.7:20884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:42.231059 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.15:25894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:42.231695 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.15:25894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:42.969954 2026] [ssl:error] [pid 2894614:tid 2894614] (EAI 2)Name or service not known: [client 144.76.19.72:63236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:42.969981 2026] [ssl:error] [pid 2894614:tid 2894614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:43.022932 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:63240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:43.022962 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:43.035268 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.42:38134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:43.035885 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.42:38134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:43.384252 2026] [lsapi:warn] [pid 2903676:tid 2903676] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:43.835089 2026] [ssl:error] [pid 2906568:tid 2906568] (70014)End of file found: [client 216.73.216.199:31453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:43.904331 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.65:56990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:43.904945 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.65:56990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:44.195189 2026] [security2:error] [pid 2907081:tid 2907081] [client 77.95.47.101:59066] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsoEG_2YFuf0DLpb-PmZgAAADM"]
[Thu Jul 30 11:31:44.264056 2026] [security2:error] [pid 2894614:tid 2894614] [client 114.119.146.111:34593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563058800/cat_ids~18,30/request_format~html"] [unique_id "amsoEO4SC_T7ljpY8Ie-sQAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563663600/cat_ids%7E18,30/request_format%7Ehtml
[Thu Jul 30 11:31:44.327310 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.28:30272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:44.327963 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.28:30272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:44.362826 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.13:24432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:44.363474 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.13:24432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:44.518308 2026] [security2:error] [pid 2903676:tid 2903676] [client 18.199.86.73:37604] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "asclarkproperty.acthoroughbreds.com"] [uri "/.git/config"] [unique_id "amsoEMMdZK5Mh5SfgBFjggAAACo"]
[Thu Jul 30 11:31:44.518503 2026] [security2:error] [pid 2903676:tid 2903676] [client 18.199.86.73:37604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "asclarkproperty.acthoroughbreds.com"] [uri "/.git/config"] [unique_id "amsoEMMdZK5Mh5SfgBFjggAAACo"]
[Thu Jul 30 11:31:44.518722 2026] [security2:error] [pid 2903676:tid 2903676] [client 18.199.86.73:37604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "asclarkproperty.acthoroughbreds.com"] [uri "/.git/config"] [unique_id "amsoEMMdZK5Mh5SfgBFjggAAACo"]
[Thu Jul 30 11:31:44.543720 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.36:41238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:44.544350 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.36:41238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:44.550049 2026] [authz_core:error] [pid 2907081:tid 2907081] [client 57.141.0.56:59746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:44.550657 2026] [authz_core:error] [pid 2907081:tid 2907081] [client 57.141.0.56:59746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:44.897449 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.14:46154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:44.898085 2026] [authz_core:error] [pid 2901123:tid 2901123] [client 57.141.0.14:46154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:45.367430 2026] [security2:error] [pid 2906536:tid 2906536] [client 185.191.171.10:24760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1479.0.html"] [unique_id "amsoEZVEYUquCmEhO8tQNwAAABg"]
[Thu Jul 30 11:31:45.444320 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.14:46168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:45.444948 2026] [authz_core:error] [pid 2889465:tid 2889465] [client 57.141.0.14:46168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:45.463832 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.55:55976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:45.464455 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.55:55976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:45.612157 2026] [security2:error] [pid 2894614:tid 2894614] [client 114.119.146.111:34609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563058800/cat_ids~18,30/request_format~html"] [unique_id "amsoEe4SC_T7ljpY8Ie-sgAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563663600/cat_ids%7E18,30/request_format%7Ehtml
[Thu Jul 30 11:31:45.944680 2026] [core:error] [pid 2907083:tid 2907083] (13)Permission denied: [client 216.73.216.199:47271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/shadow.nouids.cache
[Thu Jul 30 11:31:46.080749 2026] [ssl:error] [pid 2907140:tid 2907140] (EAI 2)Name or service not known: [client 144.76.19.72:63256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:46.080813 2026] [ssl:error] [pid 2907140:tid 2907140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:46.139989 2026] [ssl:error] [pid 2907141:tid 2907141] (EAI 2)Name or service not known: [client 144.76.19.72:63266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:46.140042 2026] [ssl:error] [pid 2907141:tid 2907141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:46.335565 2026] [authz_core:error] [pid 2907144:tid 2907144] [client 57.141.0.4:53626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:46.336223 2026] [authz_core:error] [pid 2907144:tid 2907144] [client 57.141.0.4:53626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:46.351100 2026] [authz_core:error] [pid 2907147:tid 2907147] [client 57.141.0.30:38306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:46.351754 2026] [authz_core:error] [pid 2907147:tid 2907147] [client 57.141.0.30:38306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:46.650246 2026] [security2:error] [pid 2889465:tid 2889465] [client 162.14.66.219:41790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amsoEhZrrfIRso3C5mRoMgAAACg"]
[Thu Jul 30 11:31:46.832144 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.70:31784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:46.832799 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.70:31784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:46.915231 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.71:51932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:46.915855 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.71:51932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:46.952769 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.52:29616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:46.953394 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.52:29616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:47.781283 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.38:48930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:47.781914 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.38:48930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:48.407876 2026] [lsapi:warn] [pid 2907083:tid 2907083] [client 216.73.216.199:47271] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Undefined array key "pass" in /var/softaculous/moodle27/add_admin.php on line 6\n
[Thu Jul 30 11:31:48.451793 2026] [access_compat:error] [pid 2906536:tid 2906536] [client 136.158.37.124:15148] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:31:48.549230 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.21:27808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:48.549852 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.21:27808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:48.789107 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.52:29618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:48.789733 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.52:29618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:48.914446 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.66:20720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:48.915163 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.66:20720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:48.922162 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.68:51114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:48.922804 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.68:51114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:49.190075 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.35:63876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:49.190768 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.35:63876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:49.194475 2026] [ssl:error] [pid 2898640:tid 2898640] (EAI 2)Name or service not known: [client 144.76.19.72:63274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:49.194512 2026] [ssl:error] [pid 2898640:tid 2898640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:49.246132 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:63276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:49.246177 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:49.455006 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.6:38868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:49.455637 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.6:38868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:49.573134 2026] [ssl:error] [pid 2906988:tid 2906988] (70014)End of file found: [client 216.73.216.199:16373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:49.870043 2026] [ssl:error] [pid 2903615:tid 2903615] (70014)End of file found: [client 216.73.216.199:42781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:50.009517 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.52:62996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:50.010173 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.52:62996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:50.773184 2026] [core:error] [pid 2907083:tid 2907083] (13)Permission denied: [client 216.73.216.199:47271] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory139/subsystem/uevent
[Thu Jul 30 11:31:50.785167 2026] [security2:error] [pid 2904922:tid 2904922] [client 162.14.66.219:59934] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amsoFugUs6QffHItqcrRmAAAAA0"], referer: http://retrodisco.co.uk
[Thu Jul 30 11:31:50.957512 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.35:63886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:50.958187 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.35:63886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:51.081966 2026] [lsapi:warn] [pid 2894254:tid 2894254] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:51.091150 2026] [ssl:error] [pid 2907083:tid 2907083] (70014)End of file found: [client 216.73.216.199:47271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:51.117767 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.69:46100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:51.118873 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.69:46100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:51.143108 2026] [security2:error] [pid 2906568:tid 2906568] [client 47.128.32.116:17216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/robots.txt"] [unique_id "amsoF0cpFcns_7KOIF72EgAAAB4"]
[Thu Jul 30 11:31:51.234672 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.13:24444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:51.235322 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.13:24444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:51.528621 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 74.248.16.8:25503] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 11:31:51.705606 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.54:51398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:51.706227 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.54:51398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:51.707799 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.32:43424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:51.708420 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.32:43424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:51.884747 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.32:43438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:51.885368 2026] [authz_core:error] [pid 2903614:tid 2903614] [client 57.141.0.32:43438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:52.300843 2026] [ssl:error] [pid 2906568:tid 2906568] (EAI 2)Name or service not known: [client 144.76.19.72:28742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:52.300877 2026] [ssl:error] [pid 2906568:tid 2906568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:52.305048 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.35:63906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:52.305713 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.35:63906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:52.353899 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:28754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:52.353963 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:52.649946 2026] [security2:error] [pid 2889424:tid 2889424] [client 47.128.32.116:23888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/403.shtml"] [unique_id "amsoGGe7rn44tqRVmOaWzQAAACA"]
[Thu Jul 30 11:31:52.748975 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.51:50566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:52.749609 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.51:50566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:52.801232 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.29:57086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:52.801873 2026] [authz_core:error] [pid 2897111:tid 2897111] [client 57.141.0.29:57086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:53.204359 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.13:31146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:53.205050 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.13:31146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:53.733365 2026] [lsapi:warn] [pid 2907139:tid 2907139] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:31:53.959033 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.29:57096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:53.959667 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.29:57096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:54.359942 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.50:56142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:54.361015 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.50:56142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:54.451673 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.58:64058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:54.452300 2026] [authz_core:error] [pid 2903676:tid 2903676] [client 57.141.0.58:64058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:54.703878 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.38:54426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:54.704923 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.38:54426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:54.901346 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.66:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:54.901973 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.66:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:54.990444 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.46:44520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:54.991082 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.46:44520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:55.438681 2026] [ssl:error] [pid 2900744:tid 2900744] (EAI 2)Name or service not known: [client 144.76.19.72:28770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:55.438729 2026] [ssl:error] [pid 2900744:tid 2900744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:55.494718 2026] [ssl:error] [pid 2901100:tid 2901100] (EAI 2)Name or service not known: [client 144.76.19.72:28786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:55.494759 2026] [ssl:error] [pid 2901100:tid 2901100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:55.571360 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.40:36854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:55.572051 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.40:36854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:55.640804 2026] [ssl:error] [pid 2903676:tid 2903676] (70014)End of file found: [client 216.73.216.199:38205] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:55.774186 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.70:31798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:55.774877 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.70:31798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:56.483748 2026] [security2:error] [pid 2898640:tid 2898640] [client 43.135.142.37:51684] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "iapib.com"] [uri "/"] [unique_id "amsoHMkF6SZr_0xj3Y3jNAAAAA4"]
[Thu Jul 30 11:31:56.529582 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/twelvecommsco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/twelvecommsco/' is executable
[Thu Jul 30 11:31:56.529661 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/candidejacobs/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/candidejacobs/' is executable
[Thu Jul 30 11:31:56.529696 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/davidebell/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/davidebell/' is executable
[Thu Jul 30 11:31:56.529741 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hillingd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hillingd/' is executable
[Thu Jul 30 11:31:56.529774 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/markmitc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/markmitc/' is executable
[Thu Jul 30 11:31:56.529805 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ppclcom/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ppclcom/' is executable
[Thu Jul 30 11:31:56.529837 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nsearth/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nsearth/' is executable
[Thu Jul 30 11:31:56.529869 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/horusw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/horusw/' is executable
[Thu Jul 30 11:31:56.529901 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/iapibcom/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/iapibcom/' is executable
[Thu Jul 30 11:31:56.529932 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hilferty/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hilferty/' is executable
[Thu Jul 30 11:31:56.529964 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/zltnmdfn/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/zltnmdfn/' is executable
[Thu Jul 30 11:31:56.529997 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/mjsser/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/mjsser/' is executable
[Thu Jul 30 11:31:56.530033 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ilttlwaz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ilttlwaz/' is executable
[Thu Jul 30 11:31:56.530076 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/abcdysle/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/abcdysle/' is executable
[Thu Jul 30 11:31:56.530108 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/seedhubdev/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/seedhubdev/' is executable
[Thu Jul 30 11:31:56.530141 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/annawagent9523/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/annawagent9523/' is executable
[Thu Jul 30 11:31:56.530173 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/humanita/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/humanita/' is executable
[Thu Jul 30 11:31:56.530205 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/freep/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/freep/' is executable
[Thu Jul 30 11:31:56.530236 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hatchw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hatchw/' is executable
[Thu Jul 30 11:31:56.530267 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/familyja/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/familyja/' is executable
[Thu Jul 30 11:31:56.530297 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/acthorou/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/acthorou/' is executable
[Thu Jul 30 11:31:56.530333 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/gkfcxzov/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/gkfcxzov/' is executable
[Thu Jul 30 11:31:56.530364 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/salienc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/salienc/' is executable
[Thu Jul 30 11:31:56.530395 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/alexhend/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/alexhend/' is executable
[Thu Jul 30 11:31:56.530426 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/harryme/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/harryme/' is executable
[Thu Jul 30 11:31:56.530458 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kikikend/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kikikend/' is executable
[Thu Jul 30 11:31:56.530489 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/spampcou/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/spampcou/' is executable
[Thu Jul 30 11:31:56.530520 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/downton/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/downton/' is executable
[Thu Jul 30 11:31:56.530559 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hugoashmore/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hugoashmore/' is executable
[Thu Jul 30 11:31:56.530590 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/blowha/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/blowha/' is executable
[Thu Jul 30 11:31:56.530624 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kidspres/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kidspres/' is executable
[Thu Jul 30 11:31:56.530657 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/seedhubcitations/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/seedhubcitations/' is executable
[Thu Jul 30 11:31:56.530690 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/redsocks/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/redsocks/' is executable
[Thu Jul 30 11:31:56.530721 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/onestop/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/onestop/' is executable
[Thu Jul 30 11:31:56.530761 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/elass/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/elass/' is executable
[Thu Jul 30 11:31:56.530793 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nsnarvi/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nsnarvi/' is executable
[Thu Jul 30 11:31:56.530824 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ogsoilco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ogsoilco/' is executable
[Thu Jul 30 11:31:56.530856 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/grpgrati/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/grpgrati/' is executable
[Thu Jul 30 11:31:56.530890 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/beechho1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/beechho1/' is executable
[Thu Jul 30 11:31:56.530923 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/rediscov/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/rediscov/' is executable
[Thu Jul 30 11:31:56.530955 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/snafudesignco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/snafudesignco/' is executable
[Thu Jul 30 11:31:56.530987 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sheltfuk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sheltfuk/' is executable
[Thu Jul 30 11:31:56.531017 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/firstcl1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/firstcl1/' is executable
[Thu Jul 30 11:31:56.531048 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/irlhsjnm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/irlhsjnm/' is executable
[Thu Jul 30 11:31:56.531088 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/karrira/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/karrira/' is executable
[Thu Jul 30 11:31:56.531121 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hetherse/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hetherse/' is executable
[Thu Jul 30 11:31:56.531153 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/grafix/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/grafix/' is executable
[Thu Jul 30 11:31:56.531187 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/stcols/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/stcols/' is executable
[Thu Jul 30 11:31:56.531218 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/edmundw1ld/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/edmundw1ld/' is executable
[Thu Jul 30 11:31:56.531253 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/wwwhighc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/wwwhighc/' is executable
[Thu Jul 30 11:31:56.531284 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/buttere/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/buttere/' is executable
[Thu Jul 30 11:31:56.531316 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/broadcas/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/broadcas/' is executable
[Thu Jul 30 11:31:56.531347 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelterc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelterc/' is executable
[Thu Jul 30 11:31:56.531382 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/racingco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/racingco/' is executable
[Thu Jul 30 11:31:56.531437 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/epmsonli/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/epmsonli/' is executable
[Thu Jul 30 11:31:56.531471 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/adamdixc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/adamdixc/' is executable
[Thu Jul 30 11:31:56.531507 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/highcle4/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/highcle4/' is executable
[Thu Jul 30 11:31:56.531545 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/retrodis/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/retrodis/' is executable
[Thu Jul 30 11:31:56.531579 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tcrs/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tcrs/' is executable
[Thu Jul 30 11:31:56.531610 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/elhassan/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/elhassan/' is executable
[Thu Jul 30 11:31:56.531641 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/uukkeqwo/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/uukkeqwo/' is executable
[Thu Jul 30 11:31:56.531671 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/baketast/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/baketast/' is executable
[Thu Jul 30 11:31:56.531703 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sijamesc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sijamesc/' is executable
[Thu Jul 30 11:31:56.531735 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/cliftona/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/cliftona/' is executable
[Thu Jul 30 11:31:56.531767 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/berehapbe/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/berehapbe/' is executable
[Thu Jul 30 11:31:56.531803 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/havlucomau/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/havlucomau/' is executable
[Thu Jul 30 11:31:56.531836 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bewustbe/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bewustbe/' is executable
[Thu Jul 30 11:31:56.531868 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ccarver/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ccarver/' is executable
[Thu Jul 30 11:31:56.531900 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/water/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/water/' is executable
[Thu Jul 30 11:31:56.531934 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tompalm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tompalm/' is executable
[Thu Jul 30 11:31:56.531967 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/jdmedi/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/jdmedi/' is executable
[Thu Jul 30 11:31:56.531998 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/rogersb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/rogersb/' is executable
[Thu Jul 30 11:31:56.532031 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/orgent/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/orgent/' is executable
[Thu Jul 30 11:31:56.532075 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/chateaus/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/chateaus/' is executable
[Thu Jul 30 11:31:56.532116 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/minervamhaco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/minervamhaco/' is executable
[Thu Jul 30 11:31:56.532149 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/all4sco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/all4sco/' is executable
[Thu Jul 30 11:31:56.532181 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/crystal/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/crystal/' is executable
[Thu Jul 30 11:31:56.532212 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/elliot/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/elliot/' is executable
[Thu Jul 30 11:31:56.532256 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nativese/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nativese/' is executable
[Thu Jul 30 11:31:56.532290 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/inrcorgu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/inrcorgu/' is executable
[Thu Jul 30 11:31:56.532321 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/leacces1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/leacces1/' is executable
[Thu Jul 30 11:31:56.532353 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/robincou/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/robincou/' is executable
[Thu Jul 30 11:31:56.532389 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/dqvlbwjd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/dqvlbwjd/' is executable
[Thu Jul 30 11:31:56.532421 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/spurrorg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/spurrorg/' is executable
[Thu Jul 30 11:31:56.532454 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ecmh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ecmh/' is executable
[Thu Jul 30 11:31:56.532486 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/credit/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/credit/' is executable
[Thu Jul 30 11:31:56.532536 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/dennoreu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/dennoreu/' is executable
[Thu Jul 30 11:31:56.532569 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clientseodata/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clientseodata/' is executable
[Thu Jul 30 11:31:56.532602 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/islay/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/islay/' is executable
[Thu Jul 30 11:31:56.532634 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/luntmxm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/luntmxm/' is executable
[Thu Jul 30 11:31:56.532668 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/quantumc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/quantumc/' is executable
[Thu Jul 30 11:31:56.532704 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hebdenph/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hebdenph/' is executable
[Thu Jul 30 11:31:56.532738 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nsganymede/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nsganymede/' is executable
[Thu Jul 30 11:31:56.532770 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/edbear/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/edbear/' is executable
[Thu Jul 30 11:31:56.532803 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/petetest1234/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/petetest1234/' is executable
[Thu Jul 30 11:31:56.532835 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/boidesig/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/boidesig/' is executable
[Thu Jul 30 11:31:56.532866 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/unclaim/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/unclaim/' is executable
[Thu Jul 30 11:31:56.532897 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/highcler/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/highcler/' is executable
[Thu Jul 30 11:31:56.532929 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kingston/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kingston/' is executable
[Thu Jul 30 11:31:56.532961 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/firstgra/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/firstgra/' is executable
[Thu Jul 30 11:31:56.532997 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/aurorav/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/aurorav/' is executable
[Thu Jul 30 11:31:56.533028 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clarepillinger/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clarepillinger/' is executable
[Thu Jul 30 11:31:56.533060 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/eznoyveg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/eznoyveg/' is executable
[Thu Jul 30 11:31:56.533100 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thezeit1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thezeit1/' is executable
[Thu Jul 30 11:31:56.533133 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/blxghro/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/blxghro/' is executable
[Thu Jul 30 11:31:56.533164 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/josephas/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/josephas/' is executable
[Thu Jul 30 11:31:56.533199 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/plastics/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/plastics/' is executable
[Thu Jul 30 11:31:56.533232 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/jgqawffu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/jgqawffu/' is executable
[Thu Jul 30 11:31:56.533262 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/junglej/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/junglej/' is executable
[Thu Jul 30 11:31:56.533297 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/printmyc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/printmyc/' is executable
[Thu Jul 30 11:31:56.533332 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bowersmillhotel/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bowersmillhotel/' is executable
[Thu Jul 30 11:31:56.533364 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pjjiss/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pjjiss/' is executable
[Thu Jul 30 11:31:56.533396 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/epccompa/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/epccompa/' is executable
[Thu Jul 30 11:31:56.533427 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/workwis/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/workwis/' is executable
[Thu Jul 30 11:31:56.533458 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/websters/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/websters/' is executable
[Thu Jul 30 11:31:56.533490 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pstudioc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pstudioc/' is executable
[Thu Jul 30 11:31:56.533528 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/godinaboxco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/godinaboxco/' is executable
[Thu Jul 30 11:31:56.533564 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/anvilsem/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/anvilsem/' is executable
[Thu Jul 30 11:31:56.533596 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kentscho/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/kentscho/' is executable
[Thu Jul 30 11:31:56.533627 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clucas/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clucas/' is executable
[Thu Jul 30 11:31:56.533660 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bestthor/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bestthor/' is executable
[Thu Jul 30 11:31:56.533693 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clss/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/clss/' is executable
[Thu Jul 30 11:31:56.533724 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/washcluster/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/washcluster/' is executable
[Thu Jul 30 11:31:56.533756 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/richaccord/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/richaccord/' is executable
[Thu Jul 30 11:31:56.533788 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/carpedie/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/carpedie/' is executable
[Thu Jul 30 11:31:56.533819 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/magiccoo/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/magiccoo/' is executable
[Thu Jul 30 11:31:56.533858 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thelamb1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thelamb1/' is executable
[Thu Jul 30 11:31:56.533889 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/purple/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/purple/' is executable
[Thu Jul 30 11:31:56.533920 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/klinkbuilding/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/klinkbuilding/' is executable
[Thu Jul 30 11:31:56.533951 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/erskinen/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/erskinen/' is executable
[Thu Jul 30 11:31:56.533985 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/jonatha/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/jonatha/' is executable
[Thu Jul 30 11:31:56.534016 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/wurlitze/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/wurlitze/' is executable
[Thu Jul 30 11:31:56.534048 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/gangway/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/gangway/' is executable
[Thu Jul 30 11:31:56.534089 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/josieand/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/josieand/' is executable
[Thu Jul 30 11:31:56.534122 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/richmyco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/richmyco/' is executable
[Thu Jul 30 11:31:56.534159 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/maisongerlyn/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/maisongerlyn/' is executable
[Thu Jul 30 11:31:56.534193 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sfi/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sfi/' is executable
[Thu Jul 30 11:31:56.534226 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/liberat/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/liberat/' is executable
[Thu Jul 30 11:31:56.534260 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tradepri/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tradepri/' is executable
[Thu Jul 30 11:31:56.534291 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/brodiers/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/brodiers/' is executable
[Thu Jul 30 11:31:56.534322 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/georgeho/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/georgeho/' is executable
[Thu Jul 30 11:31:56.534354 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/swingadd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/swingadd/' is executable
[Thu Jul 30 11:31:56.534385 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/outsourc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/outsourc/' is executable
[Thu Jul 30 11:31:56.534416 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/davidact/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/davidact/' is executable
[Thu Jul 30 11:31:56.534453 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sharonduggal/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sharonduggal/' is executable
[Thu Jul 30 11:31:56.534484 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/richfab/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/richfab/' is executable
[Thu Jul 30 11:31:56.534527 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hornseyt/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hornseyt/' is executable
[Thu Jul 30 11:31:56.534561 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sirahdig/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sirahdig/' is executable
[Thu Jul 30 11:31:56.534593 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thewill/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thewill/' is executable
[Thu Jul 30 11:31:56.534625 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/theactiv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/theactiv/' is executable
[Thu Jul 30 11:31:56.534660 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/newmedi1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/newmedi1/' is executable
[Thu Jul 30 11:31:56.534692 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nbhavers/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nbhavers/' is executable
[Thu Jul 30 11:31:56.534722 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sfwcpgdn/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sfwcpgdn/' is executable
[Thu Jul 30 11:31:56.534756 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/monitors/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/monitors/' is executable
[Thu Jul 30 11:31:56.534789 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/baldeagleltdco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/baldeagleltdco/' is executable
[Thu Jul 30 11:31:56.534820 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/revoraci/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/revoraci/' is executable
[Thu Jul 30 11:31:56.534853 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tanyabuc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tanyabuc/' is executable
[Thu Jul 30 11:31:56.534884 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/firework/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/firework/' is executable
[Thu Jul 30 11:31:56.534916 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nssun/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nssun/' is executable
[Thu Jul 30 11:31:56.534948 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/khpjyod/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/khpjyod/' is executable
[Thu Jul 30 11:31:56.534980 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/peterbor/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/peterbor/' is executable
[Thu Jul 30 11:31:56.535022 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/davidat5/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/davidat5/' is executable
[Thu Jul 30 11:31:56.535053 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/henderso/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/henderso/' is executable
[Thu Jul 30 11:31:56.535093 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sandramo/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sandramo/' is executable
[Thu Jul 30 11:31:56.535126 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/emeraldf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/emeraldf/' is executable
[Thu Jul 30 11:31:56.535159 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pbyawsga/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pbyawsga/' is executable
[Thu Jul 30 11:31:56.535191 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/daggerlaneenterp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/daggerlaneenterp/' is executable
[Thu Jul 30 11:31:56.535224 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/singainsemp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/singainsemp/' is executable
[Thu Jul 30 11:31:56.535255 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bespokem/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bespokem/' is executable
[Thu Jul 30 11:31:56.535286 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nkxfsjcw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nkxfsjcw/' is executable
[Thu Jul 30 11:31:56.535321 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tomhackn/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/tomhackn/' is executable
[Thu Jul 30 11:31:56.535351 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shirleya/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shirleya/' is executable
[Thu Jul 30 11:31:56.535383 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/stadiumd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/stadiumd/' is executable
[Thu Jul 30 11:31:56.535413 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/cssystem/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/cssystem/' is executable
[Thu Jul 30 11:31:56.535445 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/umbzrzyh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/umbzrzyh/' is executable
[Thu Jul 30 11:31:56.535476 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pccouk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/pccouk/' is executable
[Thu Jul 30 11:31:56.535507 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sporg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sporg/' is executable
[Thu Jul 30 11:31:56.535545 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/brodieleasing/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/brodieleasing/' is executable
[Thu Jul 30 11:31:56.535578 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/freakorg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/freakorg/' is executable
[Thu Jul 30 11:31:56.535614 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/yydzxkll/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/yydzxkll/' is executable
[Thu Jul 30 11:31:56.535645 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/banskoex/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/banskoex/' is executable
[Thu Jul 30 11:31:56.535680 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thepryor/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/thepryor/' is executable
[Thu Jul 30 11:31:56.535712 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sudokulo/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sudokulo/' is executable
[Thu Jul 30 11:31:56.535743 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bigbangb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bigbangb/' is executable
[Thu Jul 30 11:31:56.535774 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/garytayl/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/garytayl/' is executable
[Thu Jul 30 11:31:56.535808 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bessys/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/bessys/' is executable
[Thu Jul 30 11:31:56.535840 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/iiiuk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/iiiuk/' is executable
[Thu Jul 30 11:31:56.535871 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelterf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelterf/' is executable
[Thu Jul 30 11:31:56.535907 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/annasmithagent/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/annasmithagent/' is executable
[Thu Jul 30 11:31:56.535940 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hswoodf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hswoodf/' is executable
[Thu Jul 30 11:31:56.535971 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelterp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelterp/' is executable
[Thu Jul 30 11:31:56.536001 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/winterb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/winterb/' is executable
[Thu Jul 30 11:31:56.536033 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/healthki/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/healthki/' is executable
[Thu Jul 30 11:31:56.536073 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/heritag1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/heritag1/' is executable
[Thu Jul 30 11:31:56.536106 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelters/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/shelters/' is executable
[Thu Jul 30 11:31:56.536149 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/equinoxk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/equinoxk/' is executable
[Thu Jul 30 11:31:56.536186 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/saturnsp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/saturnsp/' is executable
[Thu Jul 30 11:31:56.536217 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ericashm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ericashm/' is executable
[Thu Jul 30 11:31:56.536250 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hxsrumdr/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hxsrumdr/' is executable
[Thu Jul 30 11:31:56.536281 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/centaurm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/centaurm/' is executable
[Thu Jul 30 11:31:56.536312 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/theislip/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/theislip/' is executable
[Thu Jul 30 11:31:56.536346 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sheflugo/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/sheflugo/' is executable
[Thu Jul 30 11:31:56.536378 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/asia/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/asia/' is executable
[Thu Jul 30 11:31:56.536409 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/beng/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/beng/' is executable
[Thu Jul 30 11:31:56.536442 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/qse/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/qse/' is executable
[Thu Jul 30 11:31:56.536480 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/strateni/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/strateni/' is executable
[Thu Jul 30 11:31:56.536511 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ajowfeua/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ajowfeua/' is executable
[Thu Jul 30 11:31:56.536549 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/gplorg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/gplorg/' is executable
[Thu Jul 30 11:31:56.536580 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/whoami/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/whoami/' is executable
[Thu Jul 30 11:31:56.536611 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/fidosfie/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/fidosfie/' is executable
[Thu Jul 30 11:31:56.536642 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/egancons/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/egancons/' is executable
[Thu Jul 30 11:31:56.536673 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/stylewi1/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/stylewi1/' is executable
[Thu Jul 30 11:31:56.536704 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/prenicou/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/prenicou/' is executable
[Thu Jul 30 11:31:56.536736 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/onestopregaliaco/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/onestopregaliaco/' is executable
[Thu Jul 30 11:31:56.536772 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/freeprin/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/freeprin/' is executable
[Thu Jul 30 11:31:56.536802 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/highcle3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/highcle3/' is executable
[Thu Jul 30 11:31:56.536834 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/enigmasu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/enigmasu/' is executable
[Thu Jul 30 11:31:56.536866 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/peterclarketrans/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/peterclarketrans/' is executable
[Thu Jul 30 11:31:56.536898 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/dawnrobi/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/dawnrobi/' is executable
[Thu Jul 30 11:31:56.536929 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ziltdesign/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ziltdesign/' is executable
[Thu Jul 30 11:31:56.536960 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/railspares/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/railspares/' is executable
[Thu Jul 30 11:31:56.536996 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/howetri/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/howetri/' is executable
[Thu Jul 30 11:31:56.537028 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/andrewmarvell/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/andrewmarvell/' is executable
[Thu Jul 30 11:31:56.537076 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/uxuqafkr/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/uxuqafkr/' is executable
[Thu Jul 30 11:31:56.537109 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/innersp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/innersp/' is executable
[Thu Jul 30 11:31:56.537143 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/chemgalproj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/chemgalproj/' is executable
[Thu Jul 30 11:31:56.537176 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/alphabui/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/alphabui/' is executable
[Thu Jul 30 11:31:56.537208 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/lukess/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/lukess/' is executable
[Thu Jul 30 11:31:56.537239 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ditchfes/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ditchfes/' is executable
[Thu Jul 30 11:31:56.537271 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/alismcom/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/alismcom/' is executable
[Thu Jul 30 11:31:56.537304 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/uniquepr/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/uniquepr/' is executable
[Thu Jul 30 11:31:56.537336 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/street/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/street/' is executable
[Thu Jul 30 11:31:56.537372 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/juliaash/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/juliaash/' is executable
[Thu Jul 30 11:31:56.537404 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ielcouk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/ielcouk/' is executable
[Thu Jul 30 11:31:56.537435 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/makeupby/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/makeupby/' is executable
[Thu Jul 30 11:31:56.537467 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hannahh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/hannahh/' is executable
[Thu Jul 30 11:31:56.537499 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nspandor/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/nspandor/' is executable
[Thu Jul 30 11:31:56.537535 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/wmsfirea/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/wmsfirea/' is executable
[Thu Jul 30 11:31:56.537567 2026] [core:crit] [pid 2899163:tid 2899163] (13)Permission denied: [client 216.73.216.199:24520] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/switchic/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/imunify360/user_config/switchic/' is executable
[Thu Jul 30 11:31:56.831097 2026] [authz_core:error] [pid 2907031:tid 2907031] [client 57.141.0.9:22450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:56.831720 2026] [authz_core:error] [pid 2907031:tid 2907031] [client 57.141.0.9:22450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:56.977904 2026] [authz_core:error] [pid 2906602:tid 2906602] [client 57.141.0.18:51252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:56.978552 2026] [authz_core:error] [pid 2906602:tid 2906602] [client 57.141.0.18:51252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:56.994677 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.64:36134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:56.995294 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.64:36134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:57.032114 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.58:64068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:57.032742 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.58:64068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:57.678303 2026] [authz_core:error] [pid 2907145:tid 2907145] [client 57.141.0.10:24308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:57.678923 2026] [authz_core:error] [pid 2907145:tid 2907145] [client 57.141.0.10:24308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:58.334011 2026] [ssl:error] [pid 2899163:tid 2899163] (70014)End of file found: [client 216.73.216.199:24520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:31:58.498357 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.39:43738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:58.498982 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.39:43738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:58.546735 2026] [ssl:error] [pid 2907082:tid 2907082] (EAI 2)Name or service not known: [client 144.76.19.72:28790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:58.546771 2026] [ssl:error] [pid 2907082:tid 2907082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:58.576484 2026] [authz_core:error] [pid 2907144:tid 2907144] [client 57.141.0.17:31904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:58.577708 2026] [authz_core:error] [pid 2907144:tid 2907144] [client 57.141.0.17:31904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:58.600597 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:28796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:31:58.600627 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:31:58.623978 2026] [access_compat:error] [pid 2907031:tid 2907031] [client 136.158.37.124:16025] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:31:58.755720 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.55:54238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:58.756345 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.55:54238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:58.961433 2026] [authz_core:error] [pid 2907142:tid 2907142] [client 57.141.0.24:64582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:58.962159 2026] [authz_core:error] [pid 2907142:tid 2907142] [client 57.141.0.24:64582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:59.437032 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.21:30518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:59.437680 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.21:30518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:59.700434 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.45:22026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:59.701056 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.45:22026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:31:59.765233 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.19:57740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:31:59.765854 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.19:57740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:00.710859 2026] [authz_core:error] [pid 2907140:tid 2907140] [client 57.141.0.19:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:00.711485 2026] [authz_core:error] [pid 2907140:tid 2907140] [client 57.141.0.19:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:00.907053 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.51:58556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:00.907686 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.51:58556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:01.213195 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.54:34046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:01.213821 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.54:34046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:01.353601 2026] [ssl:error] [pid 2907139:tid 2907139] (70014)End of file found: [client 216.73.216.199:5557] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:01.569868 2026] [lsapi:warn] [pid 2897111:tid 2897111] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:01.657041 2026] [ssl:error] [pid 2903544:tid 2903544] (EAI 2)Name or service not known: [client 144.76.19.72:60290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:01.657090 2026] [ssl:error] [pid 2903544:tid 2903544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:01.710003 2026] [ssl:error] [pid 2903676:tid 2903676] (EAI 2)Name or service not known: [client 144.76.19.72:60296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:01.710032 2026] [ssl:error] [pid 2903676:tid 2903676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:01.823518 2026] [authz_core:error] [pid 2907140:tid 2907140] [client 57.141.0.9:54232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:01.824161 2026] [authz_core:error] [pid 2907140:tid 2907140] [client 57.141.0.9:54232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:01.842889 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.17:49318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:01.843532 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.17:49318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:02.262152 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.37:49892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:02.262770 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.37:49892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:02.403355 2026] [core:error] [pid 2903544:tid 2903544] (13)Permission denied: [client 216.73.216.199:4565] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/webstersltd.com.db
[Thu Jul 30 11:32:02.666381 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.42:38076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:02.667046 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.42:38076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:03.100867 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.52:42746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:03.101965 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.52:42746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:03.452173 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.15:39504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:03.452880 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.15:39504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:03.540120 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.30:63462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:03.540745 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.30:63462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:03.765607 2026] [ssl:error] [pid 2903544:tid 2903544] (70014)End of file found: [client 216.73.216.199:4565] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:04.170287 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.8:22864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:04.170939 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.8:22864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:04.377811 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:04.518204 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.10:24314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:04.518822 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.10:24314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:04.684987 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.35:51713] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:32:04.687914 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.35:51713] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:32:04.765497 2026] [ssl:error] [pid 2899163:tid 2899163] (EAI 2)Name or service not known: [client 144.76.19.72:60306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:04.765539 2026] [ssl:error] [pid 2899163:tid 2899163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:04.820021 2026] [ssl:error] [pid 2906604:tid 2906604] (EAI 2)Name or service not known: [client 144.76.19.72:60310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:04.820055 2026] [ssl:error] [pid 2906604:tid 2906604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:04.929419 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.46:53180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:04.930054 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.46:53180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:05.039191 2026] [security2:error] [pid 2894254:tid 2894254] [client 14.166.176.57:46891] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoJfm-PCm9-7wJB_4ZQAAAABw"]
[Thu Jul 30 11:32:05.039261 2026] [security2:error] [pid 2894254:tid 2894254] [client 14.166.176.57:46891] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoJfm-PCm9-7wJB_4ZQAAAABw"]
[Thu Jul 30 11:32:05.039514 2026] [security2:error] [pid 2894254:tid 2894254] [client 14.166.176.57:46891] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsoJfm-PCm9-7wJB_4ZQAAAABw"]
[Thu Jul 30 11:32:05.063606 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.10:24322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:05.064226 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.10:24322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:05.103130 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.35:26884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:05.103754 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.35:26884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:05.207766 2026] [security2:error] [pid 2906567:tid 2906567] [client 101.33.80.42:60880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hugoashmore.org"] [uri "/"] [unique_id "amsoJUMHVWqpHZopO5XA1wAAABk"]
[Thu Jul 30 11:32:05.738162 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.49:54884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:05.738816 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.49:54884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:05.947200 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.52:42754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:05.947545 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.45:22036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:05.947827 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.52:42754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:05.948228 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.45:22036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:06.098321 2026] [cgi:error] [pid 2907031:tid 2907031] [client 47.128.117.218:27822] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:32:06.185770 2026] [core:error] [pid 2907080:tid 2907080] (13)Permission denied: [client 216.73.216.199:31894] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/mail/rpc
[Thu Jul 30 11:32:06.773717 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.18:47504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:06.774345 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.18:47504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:06.787658 2026] [ssl:error] [pid 2907080:tid 2907080] (70014)End of file found: [client 216.73.216.199:31894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:07.076441 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.54:34054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:07.077135 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.54:34054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:07.221815 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wk
[Thu Jul 30 11:32:07.242762 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.6:53578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:07.243433 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.6:53578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:07.334588 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/av.php
[Thu Jul 30 11:32:07.334674 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:07.484847 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mini.php
[Thu Jul 30 11:32:07.484902 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:07.633760 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aa.php
[Thu Jul 30 11:32:07.633817 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:07.768543 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.15:22348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:07.769218 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.15:22348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:07.822884 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w.php
[Thu Jul 30 11:32:07.822936 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:07.879581 2026] [ssl:error] [pid 2906604:tid 2906604] (EAI 2)Name or service not known: [client 144.76.19.72:60318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:07.879611 2026] [ssl:error] [pid 2906604:tid 2906604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:07.931662 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.3:30036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:07.932329 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.3:30036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:07.932413 2026] [ssl:error] [pid 2903674:tid 2903674] (EAI 2)Name or service not known: [client 144.76.19.72:60320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:07.932436 2026] [ssl:error] [pid 2903674:tid 2903674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:07.934408 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 11:32:07.934455 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:08.046117 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:08.231426 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/m.php
[Thu Jul 30 11:32:08.231506 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:08.344582 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:08.424797 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.22:52996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:08.425421 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.22:52996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:08.432651 2026] [core:error] [pid 2906604:tid 2906604] (13)Permission denied: [client 216.73.216.199:6298] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/wmsfirearmstraining.org.db
[Thu Jul 30 11:32:08.529728 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:08.545423 2026] [ssl:error] [pid 2906604:tid 2906604] (70014)End of file found: [client 216.73.216.199:6298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:08.692599 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 11:32:08.692657 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:08.805875 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gmo.php
[Thu Jul 30 11:32:08.805932 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:09.010448 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:09.043423 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.16:63314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:09.044047 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.16:63314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:09.169840 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-the.php
[Thu Jul 30 11:32:09.169898 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:09.281697 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 11:32:09.281768 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:09.426815 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/init.php
[Thu Jul 30 11:32:09.426872 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:09.521296 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.15:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:09.521922 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.15:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:09.522831 2026] [access_compat:error] [pid 2899960:tid 2899960] [client 136.158.37.124:16800] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:32:09.631836 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file5.php
[Thu Jul 30 11:32:09.631894 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:09.642818 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.63:36270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:09.643446 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.63:36270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:09.750632 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:09.890225 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/shell.php
[Thu Jul 30 11:32:09.890281 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:10.090626 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 11:32:10.090683 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:10.181875 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.31:49604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:10.182499 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.31:49604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:10.219296 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.68:34702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:10.219919 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.68:34702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:10.257985 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/new.php
[Thu Jul 30 11:32:10.258039 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:10.352335 2026] [ssl:error] [pid 2903674:tid 2903674] (70014)End of file found: [client 216.73.216.199:53629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:10.369676 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminfuns.php
[Thu Jul 30 11:32:10.369735 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:10.481593 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:10.578126 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 185.192.20.168:64662] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 11:32:10.580784 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 185.192.20.168:64662] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 11:32:10.593331 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:10.705277 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fm.php
[Thu Jul 30 11:32:10.705330 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:10.777021 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.67:62462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:10.777653 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.67:62462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:10.878783 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin
[Thu Jul 30 11:32:10.988922 2026] [ssl:error] [pid 2897990:tid 2897990] (EAI 2)Name or service not known: [client 144.76.19.72:19266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:10.988956 2026] [ssl:error] [pid 2897990:tid 2897990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:11.005260 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file.php
[Thu Jul 30 11:32:11.005317 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:11.041871 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:19272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:11.041902 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:11.188681 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:11.234552 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.5:47196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:11.235174 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.5:47196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:11.349195 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bolt.php
[Thu Jul 30 11:32:11.349262 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:11.460859 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/3.php
[Thu Jul 30 11:32:11.460913 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:11.493596 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.13:47540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:11.494218 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.13:47540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:11.538343 2026] [security2:error] [pid 2894254:tid 2894254] [client 43.131.39.238:16093] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoK_m-PCm9-7wJB_4ZQgAAABw"]
[Thu Jul 30 11:32:11.538390 2026] [security2:error] [pid 2894254:tid 2894254] [client 43.131.39.238:16093] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoK_m-PCm9-7wJB_4ZQgAAABw"]
[Thu Jul 30 11:32:11.538627 2026] [security2:error] [pid 2894254:tid 2894254] [client 43.131.39.238:16093] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsoK_m-PCm9-7wJB_4ZQgAAABw"]
[Thu Jul 30 11:32:11.572948 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/222.php
[Thu Jul 30 11:32:11.573005 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:11.685495 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:11.799808 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:11.942477 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:11.945094 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.39:40636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:11.945705 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.39:40636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:12.056381 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:12.080940 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.58:61934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:12.081574 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.58:61934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:12.103402 2026] [lsapi:warn] [pid 2907083:tid 2907083] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:12.159277 2026] [ssl:error] [pid 2889424:tid 2889424] (70014)End of file found: [client 216.73.216.199:30978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:12.205818 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-configs.php
[Thu Jul 30 11:32:12.205874 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:12.224338 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.55:25760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:12.224958 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.55:25760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:12.318556 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.69:28594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:12.319180 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.69:28594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:12.319871 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/php.php
[Thu Jul 30 11:32:12.319917 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:12.472151 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:12.584060 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:12.695638 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:12.850721 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:12.967194 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:13.042345 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.49:26648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:13.042965 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.49:26648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:13.149784 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.22:52998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:13.150406 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.22:52998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:13.177600 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin.php
[Thu Jul 30 11:32:13.177649 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:13.377588 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/size.php
[Thu Jul 30 11:32:13.377642 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:13.490057 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:13.651389 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.php
[Thu Jul 30 11:32:13.651447 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:13.763342 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:13.875358 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/as.php
[Thu Jul 30 11:32:13.875408 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:13.920253 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.6:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:13.920874 2026] [authz_core:error] [pid 2903677:tid 2903677] [client 57.141.0.6:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:13.988271 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:14.099993 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:14.106352 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:19284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:14.106377 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:14.162126 2026] [ssl:error] [pid 2907141:tid 2907141] (EAI 2)Name or service not known: [client 144.76.19.72:19300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:14.162157 2026] [ssl:error] [pid 2907141:tid 2907141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:14.212198 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/plugins.php
[Thu Jul 30 11:32:14.212259 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:14.284332 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.5:47212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:14.284956 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.5:47212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:14.324139 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:14.436755 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/go.php
[Thu Jul 30 11:32:14.436808 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:14.607875 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/test1.php
[Thu Jul 30 11:32:14.607929 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:14.785930 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:14.899895 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/index.php
[Thu Jul 30 11:32:14.899953 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:14.932563 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.20:26146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:14.933254 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.20:26146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:15.047853 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:15.145943 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.34:50310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:15.146578 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.34:50310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:15.159699 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/asd.php
[Thu Jul 30 11:32:15.159742 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:15.175294 2026] [security2:error] [pid 2907142:tid 2907142] [client 216.73.216.199:64525] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cracklib/cracklib-small.pwd"] [unique_id "amsoL9ONtSSBqSUZk1GUzwAAADo"]
[Thu Jul 30 11:32:15.175502 2026] [security2:error] [pid 2907142:tid 2907142] [client 216.73.216.199:64525] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cracklib/cracklib-small.pwd"] [unique_id "amsoL9ONtSSBqSUZk1GUzwAAADo"]
[Thu Jul 30 11:32:15.175709 2026] [security2:error] [pid 2907142:tid 2907142] [client 216.73.216.199:64525] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cracklib/cracklib-small.pwd"] [unique_id "amsoL9ONtSSBqSUZk1GUzwAAADo"]
[Thu Jul 30 11:32:15.277927 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:15.329790 2026] [lsapi:warn] [pid 2897990:tid 2897990] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:15.378987 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.71:45228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:15.379630 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.71:45228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:15.390149 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:15.514198 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.19:47216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:15.514824 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.19:47216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:15.519057 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.43:21126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:15.519746 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.43:21126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:15.566341 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/atomlib.php
[Thu Jul 30 11:32:15.566399 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:15.678014 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:15.763094 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.59:21128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:15.763719 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.59:21128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:15.832931 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:15.839254 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.44:33868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:15.839871 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.44:33868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:15.944828 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:16.056510 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:16.223773 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:16.240293 2026] [security2:error] [pid 2903674:tid 2903674] [client 43.131.39.238:58913] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoMKh1kZSFIKQnoj--ugAAACY"]
[Thu Jul 30 11:32:16.240354 2026] [security2:error] [pid 2903674:tid 2903674] [client 43.131.39.238:58913] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoMKh1kZSFIKQnoj--ugAAACY"]
[Thu Jul 30 11:32:16.240604 2026] [security2:error] [pid 2903674:tid 2903674] [client 43.131.39.238:58913] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsoMKh1kZSFIKQnoj--ugAAACY"]
[Thu Jul 30 11:32:16.312597 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.12:56352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:16.313221 2026] [authz_core:error] [pid 2894254:tid 2894254] [client 57.141.0.12:56352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:16.336093 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:16.448053 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inputs.php
[Thu Jul 30 11:32:16.448119 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:16.538572 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.47:20702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:16.539193 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.47:20702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:16.563780 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:16.682227 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:16.873667 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:17.050223 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/plugin.php
[Thu Jul 30 11:32:17.050282 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:17.165907 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php
[Thu Jul 30 11:32:17.165963 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:17.218496 2026] [ssl:error] [pid 2907082:tid 2907082] (EAI 2)Name or service not known: [client 144.76.19.72:19304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:17.218532 2026] [ssl:error] [pid 2907082:tid 2907082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:17.270364 2026] [ssl:error] [pid 2905891:tid 2905891] (EAI 2)Name or service not known: [client 144.76.19.72:19306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:17.270401 2026] [ssl:error] [pid 2905891:tid 2905891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:17.423915 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.38:46964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:17.424552 2026] [authz_core:error] [pid 2903674:tid 2903674] [client 57.141.0.38:46964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:17.453054 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gg.php
[Thu Jul 30 11:32:17.453129 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:17.502848 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.20:26160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:17.503472 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.20:26160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:17.611113 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:17.723861 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp.php
[Thu Jul 30 11:32:17.723914 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:17.835680 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:17.888017 2026] [ssl:error] [pid 2907142:tid 2907142] (70014)End of file found: [client 216.73.216.199:64525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:17.952719 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:18.175814 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:18.331331 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.61:50302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:18.331956 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.61:50302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:18.381223 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.7:54526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:18.381857 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.7:54526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:18.389819 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:18.501618 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:18.538826 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.47:20704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:18.539455 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.47:20704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:18.566369 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.4:30366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:18.567002 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.4:30366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:18.621828 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index
[Thu Jul 30 11:32:18.734502 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:18.880349 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:18.993192 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaa.php
[Thu Jul 30 11:32:18.993242 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:19.118775 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/getid3-core.php
[Thu Jul 30 11:32:19.118828 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:19.230368 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminer.php
[Thu Jul 30 11:32:19.230424 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:19.293714 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.26:51090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:19.294336 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.26:51090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:19.393637 2026] [ssl:error] [pid 2906604:tid 2906604] (70014)End of file found: [client 216.73.216.199:31029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:19.418980 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:19.622785 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa.php
[Thu Jul 30 11:32:19.622840 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:19.688326 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.13:47738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:19.688949 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.13:47738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:19.744001 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:19.858327 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:19.882763 2026] [core:error] [pid 2894614:tid 2894614] (13)Permission denied: [client 216.73.216.199:36971] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfnetlink/holders/nft_compat/uevent
[Thu Jul 30 11:32:19.957084 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.50:26678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:19.957706 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.50:26678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:20.167133 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:20.321481 2026] [access_compat:error] [pid 2900742:tid 2900742] [client 136.158.37.124:17601] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:32:20.351489 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.48:32742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:20.352113 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.48:32742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:20.373253 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:20.455693 2026] [ssl:error] [pid 2898640:tid 2898640] (EAI 2)Name or service not known: [client 144.76.19.72:40520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:20.455719 2026] [ssl:error] [pid 2898640:tid 2898640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:20.507301 2026] [ssl:error] [pid 2906536:tid 2906536] (EAI 2)Name or service not known: [client 144.76.19.72:40532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:20.507333 2026] [ssl:error] [pid 2906536:tid 2906536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:20.527189 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/edit.php
[Thu Jul 30 11:32:20.527246 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:20.650996 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.9:25128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:20.651628 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.9:25128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:20.702117 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:20.880726 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:21.022184 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sf.php
[Thu Jul 30 11:32:21.022245 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:21.134637 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:21.178216 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.3:61084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:21.178836 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.3:61084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:21.295407 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wso.php
[Thu Jul 30 11:32:21.295462 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:21.395644 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.53:49750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:21.396271 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.53:49750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:21.407534 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ioxi-o.php
[Thu Jul 30 11:32:21.407583 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:21.527498 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file56.php
[Thu Jul 30 11:32:21.527571 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 172.202.44.182:61095] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:22.097611 2026] [ssl:error] [pid 2894614:tid 2894614] (70014)End of file found: [client 216.73.216.199:36971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:22.538852 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.38:27102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:22.539475 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.38:27102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:22.877360 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.31:62082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:22.878005 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.31:62082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:23.050851 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.2:23840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:23.051500 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.2:23840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:23.171373 2026] [lsapi:warn] [pid 2907142:tid 2907142] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:23.225987 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.60:48566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:23.226619 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.60:48566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:23.522214 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.26:22608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:23.522840 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.26:22608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:23.541220 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.12:54898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:23.541848 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.12:54898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:23.694226 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.11:40798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:23.694852 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.11:40798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:23.707098 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:23.799489 2026] [ssl:error] [pid 2907142:tid 2907142] (EAI 2)Name or service not known: [client 144.76.19.72:40542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:23.799550 2026] [ssl:error] [pid 2907142:tid 2907142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:23.823876 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 11:32:23.870237 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.66:56390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:23.870867 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.66:56390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:23.939993 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:24.056747 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2.php
[Thu Jul 30 11:32:24.056803 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:24.283459 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:24.400977 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mah.php
[Thu Jul 30 11:32:24.401036 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:24.416744 2026] [ssl:error] [pid 2908934:tid 2908934] (EAI 2)Name or service not known: [client 144.76.19.72:40552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:24.416790 2026] [ssl:error] [pid 2908934:tid 2908934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:24.514149 2026] [core:error] [pid 2908935:tid 2908935] [client 66.249.66.39:48645] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:24.514197 2026] [core:error] [pid 2908935:tid 2908935] [client 66.249.66.39:48645] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:24.516804 2026] [core:error] [pid 2908936:tid 2908936] [client 66.249.66.66:42927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:24.516840 2026] [core:error] [pid 2908936:tid 2908936] [client 66.249.66.66:42927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:24.518672 2026] [authz_core:error] [pid 2908939:tid 2908939] [client 57.141.0.44:32738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:24.519318 2026] [authz_core:error] [pid 2908939:tid 2908939] [client 57.141.0.44:32738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:24.600979 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/send.php
[Thu Jul 30 11:32:24.601039 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:24.628310 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.20:58340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:24.628976 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.20:58340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:24.783570 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:24.841848 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.16:25914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:24.842546 2026] [authz_core:error] [pid 2906604:tid 2906604] [client 57.141.0.16:25914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:24.899331 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 11:32:24.900378 2026] [core:error] [pid 2908935:tid 2908935] [client 66.249.64.170:43692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:24.900395 2026] [core:error] [pid 2908935:tid 2908935] [client 66.249.64.170:43692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:25.056882 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 11:32:25.056939 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:25.111110 2026] [ssl:error] [pid 2908934:tid 2908934] (70014)End of file found: [client 216.73.216.199:45044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:25.135253 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.64:57408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:25.135870 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.64:57408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:25.172516 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/options.php
[Thu Jul 30 11:32:25.172578 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:25.470812 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 11:32:25.698004 2026] [lsapi:warn] [pid 2886514:tid 2886514] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:25.702343 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-file.php
[Thu Jul 30 11:32:25.702425 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:25.876061 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sid3.php
[Thu Jul 30 11:32:25.876136 2026] [access_compat:error] [pid 2908860:tid 2908860] [client 172.202.44.182:21148] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 11:32:26.142271 2026] [authz_core:error] [pid 2908935:tid 2908935] [client 57.141.0.47:32254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:26.142890 2026] [authz_core:error] [pid 2908935:tid 2908935] [client 57.141.0.47:32254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:26.179390 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.46:46432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:26.180681 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.46:46432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:26.527742 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.65:24432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:26.528358 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.65:24432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:27.064755 2026] [authz_core:error] [pid 2905891:tid 2905891] [client 57.141.0.47:32256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:27.065436 2026] [authz_core:error] [pid 2905891:tid 2905891] [client 57.141.0.47:32256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:27.322562 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.59:63512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:27.323255 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.59:63512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:27.496015 2026] [ssl:error] [pid 2909081:tid 2909081] (EAI 2)Name or service not known: [client 144.76.19.72:40556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:27.496084 2026] [ssl:error] [pid 2909081:tid 2909081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:27.530300 2026] [authz_core:error] [pid 2909080:tid 2909080] [client 57.141.0.32:28338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:27.530947 2026] [authz_core:error] [pid 2909080:tid 2909080] [client 57.141.0.32:28338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:27.554079 2026] [ssl:error] [pid 2909083:tid 2909083] (EAI 2)Name or service not known: [client 144.76.19.72:40564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:27.554115 2026] [ssl:error] [pid 2909083:tid 2909083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:27.637410 2026] [authz_core:error] [pid 2909082:tid 2909082] [client 57.141.0.3:61090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:27.638057 2026] [authz_core:error] [pid 2909082:tid 2909082] [client 57.141.0.3:61090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:28.258033 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.65:24442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:28.258707 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.65:24442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:28.754783 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.20:58352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:28.755430 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.20:58352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:28.959667 2026] [security2:error] [pid 2909091:tid 2909091] [client 43.154.127.188:57804] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/wowmetahelper/"] [unique_id "amsoPGlbT0oRz_MzceEHLAAAAEk"]
[Thu Jul 30 11:32:28.989842 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.59:63524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:28.990496 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.59:63524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:29.216228 2026] [cgi:error] [pid 2906988:tid 2906988] [client 20.104.22.47:63938] AH02812: stderr from /home/ppclcom/parallelcoordinates.net/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:32:29.268224 2026] [authz_core:error] [pid 2909094:tid 2909094] [client 57.141.0.35:41630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:29.268874 2026] [authz_core:error] [pid 2909094:tid 2909094] [client 57.141.0.35:41630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:29.389188 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.1:57756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:29.389810 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.1:57756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:29.461082 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.65:24458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:29.461767 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.65:24458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:29.494572 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.42:55996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:29.495193 2026] [authz_core:error] [pid 2899960:tid 2899960] [client 57.141.0.42:55996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:29.813578 2026] [core:error] [pid 2906603:tid 2906603] (13)Permission denied: [client 216.73.216.199:41754] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/davidebell.com.db
[Thu Jul 30 11:32:30.610319 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:46694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:30.610355 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:30.663211 2026] [ssl:error] [pid 2894614:tid 2894614] (EAI 2)Name or service not known: [client 144.76.19.72:46702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:30.663241 2026] [ssl:error] [pid 2894614:tid 2894614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:31.045828 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.11:25022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:31.046474 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.11:25022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:31.134866 2026] [core:error] [pid 2906603:tid 2906603] (13)Permission denied: [client 216.73.216.199:41754] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty40/subsystem/ttyS1/closing_wait
[Thu Jul 30 11:32:31.164612 2026] [authz_core:error] [pid 2909080:tid 2909080] [client 57.141.0.9:35428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:31.165303 2026] [authz_core:error] [pid 2909080:tid 2909080] [client 57.141.0.9:35428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:31.199893 2026] [access_compat:error] [pid 2909081:tid 2909081] [client 136.158.37.124:18493] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:32:31.239896 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.56:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:31.241060 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.56:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:31.575753 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.45:20126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:31.576374 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.45:20126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:31.657885 2026] [access_compat:error] [pid 2909088:tid 2909088] [client 45.158.164.139:46158] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:32:31.899387 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.30:20732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:31.900007 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.30:20732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:32.065267 2026] [security2:error] [pid 2909094:tid 2909094] [client 185.191.171.15:51970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/market-development-strategy-advantages-and-disadvantages"] [unique_id "amsoQIBKy0_DMWF-VQV5nQAAAEw"]
[Thu Jul 30 11:32:32.223728 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.16:54044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:32.224348 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.16:54044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:32.639235 2026] [authz_core:error] [pid 2908934:tid 2908934] [client 57.141.0.71:42252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:32.639870 2026] [authz_core:error] [pid 2908934:tid 2908934] [client 57.141.0.71:42252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:32.943224 2026] [core:error] [pid 2906603:tid 2906603] (13)Permission denied: [client 216.73.216.199:41754] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty32/subsystem/ttyS1/closing_wait
[Thu Jul 30 11:32:33.099453 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.35:41648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:33.100091 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.35:41648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:33.122399 2026] [lsapi:warn] [pid 2899930:tid 2899930] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:33.305294 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.21:45986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:33.305952 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.21:45986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:33.716482 2026] [ssl:error] [pid 2901100:tid 2901100] (EAI 2)Name or service not known: [client 144.76.19.72:46718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:33.716509 2026] [ssl:error] [pid 2901100:tid 2901100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:33.769396 2026] [ssl:error] [pid 2909085:tid 2909085] (EAI 2)Name or service not known: [client 144.76.19.72:46726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:33.769439 2026] [ssl:error] [pid 2909085:tid 2909085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:33.846209 2026] [core:error] [pid 2906603:tid 2906603] (13)Permission denied: [client 216.73.216.199:41754] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/berehap.be.db
[Thu Jul 30 11:32:33.909305 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.4:43262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:33.909924 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.4:43262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:33.934707 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.62:27276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:33.935324 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.62:27276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:34.067644 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.1:46932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:34.068281 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.1:46932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:34.751223 2026] [ssl:error] [pid 2906603:tid 2906603] (70014)End of file found: [client 216.73.216.199:41754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:35.022349 2026] [core:error] [pid 2904780:tid 2904780] [client 57.141.0.12:36580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:35.022392 2026] [core:error] [pid 2904780:tid 2904780] [client 57.141.0.12:36580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:35.135847 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.6:56662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:35.136788 2026] [authz_core:error] [pid 2906536:tid 2906536] [client 57.141.0.6:56662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:35.162758 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.32:51252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:35.163380 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.32:51252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:35.166450 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.41:43924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:35.167129 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.41:43924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:35.941446 2026] [authz_core:error] [pid 2909087:tid 2909087] [client 57.141.0.31:35588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:35.942060 2026] [authz_core:error] [pid 2909087:tid 2909087] [client 57.141.0.31:35588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:36.006937 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.65:45288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:36.007574 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.65:45288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:36.297747 2026] [lsapi:warn] [pid 2880697:tid 2880697] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:36.609834 2026] [security2:error] [pid 2906604:tid 2906604] [client 43.134.15.174:43082] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/"] [unique_id "amsoROg1SudGx4a9nat1PQAAAC8"]
[Thu Jul 30 11:32:36.663224 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.30:20748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:36.663935 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.30:20748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:36.855866 2026] [ssl:error] [pid 2904780:tid 2904780] (EAI 2)Name or service not known: [client 144.76.19.72:46742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:36.855914 2026] [ssl:error] [pid 2904780:tid 2904780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:36.943303 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:46744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:36.943334 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:37.207001 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.25:50042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:37.207630 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.25:50042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:37.231576 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.48:52146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:37.232261 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.48:52146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:37.248077 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.7:24554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:37.248712 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.7:24554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:37.548089 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.13:38440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:37.548707 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.13:38440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:37.750954 2026] [authz_core:error] [pid 2909084:tid 2909084] [client 57.141.0.60:26438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:37.751665 2026] [authz_core:error] [pid 2909084:tid 2909084] [client 57.141.0.60:26438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:37.758643 2026] [security2:error] [pid 2909081:tid 2909081] [client 43.134.15.174:44154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020"] [unique_id "amsoRZwlTvw5oJx50WCaSwAAAD4"], referer: http://www.glasgowball.com
[Thu Jul 30 11:32:38.874369 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.13:38444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:38.874991 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.13:38444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:38.891374 2026] [core:error] [pid 2907141:tid 2907141] (13)Permission denied: [client 216.73.216.199:57198] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/wmsfirearmstraining.org.db
[Thu Jul 30 11:32:38.928910 2026] [security2:error] [pid 2903544:tid 2903544] [client 43.134.15.174:45308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020/"] [unique_id "amsoRuDEFBRymbocUWIYXwAAABA"], referer: http://www.glasgowball.com/glaball/2020
[Thu Jul 30 11:32:39.177356 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.33:58218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:39.177982 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.33:58218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:39.203947 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.16:36888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:39.204625 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.16:36888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:39.417778 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.44:44650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:39.418399 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.44:44650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:39.894093 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.22:58276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:39.894766 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.22:58276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:40.037131 2026] [ssl:error] [pid 2909081:tid 2909081] (EAI 2)Name or service not known: [client 144.76.19.72:28026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:40.037165 2026] [ssl:error] [pid 2909081:tid 2909081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:40.088485 2026] [ssl:error] [pid 2904879:tid 2904879] (EAI 2)Name or service not known: [client 144.76.19.72:28040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:40.088515 2026] [ssl:error] [pid 2904879:tid 2904879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:40.579852 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.9:55490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:40.580494 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.9:55490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:41.016119 2026] [core:error] [pid 2907141:tid 2907141] (13)Permission denied: [client 216.73.216.199:57198] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Parse/shrink
[Thu Jul 30 11:32:41.068975 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.5:58826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:41.069601 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.5:58826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:41.087946 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.23:37934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:41.088613 2026] [authz_core:error] [pid 2909083:tid 2909083] [client 57.141.0.23:37934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:41.502131 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.30:20764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:41.502753 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.30:20764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:41.983320 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.22:58288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:41.983938 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.22:58288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:42.021023 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.1:62338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:42.021652 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.1:62338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:42.033613 2026] [access_compat:error] [pid 2908792:tid 2908792] [client 136.158.37.124:19319] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:32:42.060020 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.2:34908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:42.060650 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.2:34908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:42.601232 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.44:55184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:42.601852 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.44:55184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:43.144271 2026] [ssl:error] [pid 2900705:tid 2900705] (EAI 2)Name or service not known: [client 144.76.19.72:28042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:43.144304 2026] [ssl:error] [pid 2900705:tid 2900705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:43.201498 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:28058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:43.201541 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:43.592788 2026] [lsapi:warn] [pid 2907144:tid 2907144] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:43.687792 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.28:37524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:43.688420 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.28:37524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:43.694348 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.64:35940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:43.694996 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.64:35940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:43.713363 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.50:25604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:43.713977 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.50:25604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:43.730033 2026] [ssl:error] [pid 2899930:tid 2899930] (5)Input/output error: [client 216.73.216.199:1335] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:43.754972 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.20:28726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:43.755603 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.20:28726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:43.990491 2026] [authz_core:error] [pid 2908935:tid 2908935] [client 57.141.0.8:21996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:43.991123 2026] [authz_core:error] [pid 2908935:tid 2908935] [client 57.141.0.8:21996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:44.892887 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.19:38342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:44.893511 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.19:38342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:44.919881 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.69:28344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:44.920507 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.69:28344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:45.500686 2026] [security2:error] [pid 2908936:tid 2908936] [client 18.199.86.73:34290] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.clientseodata.com"] [uri "/.git/config"] [unique_id "amsoTSk4hqPsq4MuS-06CAAAACw"]
[Thu Jul 30 11:32:45.500848 2026] [security2:error] [pid 2908936:tid 2908936] [client 18.199.86.73:34290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.clientseodata.com"] [uri "/.git/config"] [unique_id "amsoTSk4hqPsq4MuS-06CAAAACw"]
[Thu Jul 30 11:32:45.532691 2026] [security2:error] [pid 2908936:tid 2908936] [client 18.199.86.73:34290] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.clientseodata.com"] [uri "/403.shtml"] [unique_id "amsoTSk4hqPsq4MuS-06CAAAACw"]
[Thu Jul 30 11:32:45.840506 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.29:41412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:45.841141 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.29:41412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:46.090718 2026] [core:error] [pid 2898640:tid 2898640] [client 57.141.0.4:35826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:46.090744 2026] [core:error] [pid 2898640:tid 2898640] [client 57.141.0.4:35826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:46.223976 2026] [authz_core:error] [pid 2908828:tid 2908828] [client 57.141.0.53:36100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:46.224834 2026] [authz_core:error] [pid 2908828:tid 2908828] [client 57.141.0.53:36100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:46.257743 2026] [ssl:error] [pid 2907080:tid 2907080] (EAI 2)Name or service not known: [client 144.76.19.72:28062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:46.257778 2026] [ssl:error] [pid 2907080:tid 2907080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:46.312822 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:28076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:46.312848 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:46.375987 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.48:59676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:46.376647 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.48:59676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:46.600440 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.30:35864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:46.601077 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.30:35864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:46.761339 2026] [core:error] [pid 2907141:tid 2907141] (13)Permission denied: [client 216.73.216.199:57198] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kernfs_iattrs_cache/poison
[Thu Jul 30 11:32:46.769708 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.38:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:46.770335 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.38:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:47.069342 2026] [ssl:error] [pid 2907141:tid 2907141] (70014)End of file found: [client 216.73.216.199:57198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:47.336029 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.54:53838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:47.336663 2026] [authz_core:error] [pid 2898640:tid 2898640] [client 57.141.0.54:53838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:47.689058 2026] [lsapi:warn] [pid 2900705:tid 2900705] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:47.722692 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.26:31084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:47.723309 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.26:31084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:48.207304 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.30:35878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:48.207930 2026] [authz_core:error] [pid 2906603:tid 2906603] [client 57.141.0.30:35878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:48.650849 2026] [authz_core:error] [pid 2908792:tid 2908792] [client 57.141.0.63:35554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:48.651475 2026] [authz_core:error] [pid 2908792:tid 2908792] [client 57.141.0.63:35554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:49.027181 2026] [core:error] [pid 2904780:tid 2904780] [client 66.249.66.194:59266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:49.027216 2026] [core:error] [pid 2904780:tid 2904780] [client 66.249.66.194:59266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:49.174025 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.15:37376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:49.174660 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.15:37376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:49.367339 2026] [ssl:error] [pid 2909083:tid 2909083] (EAI 2)Name or service not known: [client 144.76.19.72:28078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:49.367377 2026] [ssl:error] [pid 2909083:tid 2909083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:49.423619 2026] [ssl:error] [pid 2906567:tid 2906567] (EAI 2)Name or service not known: [client 144.76.19.72:28090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:49.423677 2026] [ssl:error] [pid 2906567:tid 2906567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:49.682011 2026] [ssl:error] [pid 2900705:tid 2900705] (70014)End of file found: [client 216.73.216.199:25577] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:49.922282 2026] [authz_core:error] [pid 2908792:tid 2908792] [client 57.141.0.47:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:49.922923 2026] [authz_core:error] [pid 2908792:tid 2908792] [client 57.141.0.47:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:50.200234 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.39:22464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:50.200909 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.39:22464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:50.774478 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.33:28534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:50.775120 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.33:28534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:50.792167 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.34:51708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:50.792788 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.34:51708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:50.981683 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.33:28544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:50.982334 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.33:28544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:51.286783 2026] [security2:error] [pid 2908860:tid 2908860] [client 216.73.216.199:24537] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cagefs.log"] [unique_id "amsoUxZUmmVKTme_B6fsAAAAAB4"]
[Thu Jul 30 11:32:51.287131 2026] [security2:error] [pid 2908860:tid 2908860] [client 216.73.216.199:24537] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cagefs.log"] [unique_id "amsoUxZUmmVKTme_B6fsAAAAAB4"]
[Thu Jul 30 11:32:51.287364 2026] [security2:error] [pid 2908860:tid 2908860] [client 216.73.216.199:24537] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cagefs.log"] [unique_id "amsoUxZUmmVKTme_B6fsAAAAAB4"]
[Thu Jul 30 11:32:51.564740 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.52:20496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:51.565385 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.52:20496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:51.740888 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.55:44304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:51.741551 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.55:44304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:51.994409 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.70:33088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:51.995038 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.70:33088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:52.210248 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.14:37428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:52.210913 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.14:37428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:52.238958 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.8:23274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:52.239632 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.8:23274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:52.574586 2026] [ssl:error] [pid 2907082:tid 2907082] (EAI 2)Name or service not known: [client 144.76.19.72:18386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:52.574621 2026] [ssl:error] [pid 2907082:tid 2907082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:52.637597 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:18388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:52.637631 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:52.800368 2026] [access_compat:error] [pid 2909088:tid 2909088] [client 136.158.37.124:20081] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:32:53.260775 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.21:24344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:53.261441 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.21:24344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:53.380242 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.47:23102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:53.380884 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.47:23102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:53.418251 2026] [security2:error] [pid 2908935:tid 2908935] [client 43.159.35.188:44706] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "stopfordsackville.com"] [uri "/"] [unique_id "amsoVQTzpC3ZUwbO5sAW9gAAACo"]
[Thu Jul 30 11:32:53.419170 2026] [authz_core:error] [pid 2908935:tid 2908935] [client 43.159.35.188:44706] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 11:32:53.716376 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.50:20696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:53.717018 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.50:20696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:53.946330 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.34:51720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:53.946976 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.34:51720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:54.024976 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.38:42948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:54.025636 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.38:42948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:54.081359 2026] [lsapi:warn] [pid 2908935:tid 2908935] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:54.523114 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.61:22276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:54.523761 2026] [authz_core:error] [pid 2899930:tid 2899930] [client 57.141.0.61:22276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:54.774745 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.63:35562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:54.775425 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.63:35562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:54.790996 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.45:39884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:54.791643 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.45:39884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:55.521332 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 216.73.216.199:24537] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 11:32:55.696320 2026] [ssl:error] [pid 2907080:tid 2907080] (EAI 2)Name or service not known: [client 144.76.19.72:18390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:55.696351 2026] [ssl:error] [pid 2907080:tid 2907080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:55.743902 2026] [authz_core:error] [pid 2910328:tid 2910328] [client 57.141.0.38:42964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:55.744535 2026] [authz_core:error] [pid 2910328:tid 2910328] [client 57.141.0.38:42964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:55.749768 2026] [ssl:error] [pid 2907144:tid 2907144] (EAI 2)Name or service not known: [client 144.76.19.72:18396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:55.749793 2026] [ssl:error] [pid 2907144:tid 2907144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:56.073353 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.30:40776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:56.073976 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.30:40776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:56.168140 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.33:38200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:56.168784 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.33:38200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:56.829279 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.70:51696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:56.829923 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.70:51696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:57.019192 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.62:31006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:57.019820 2026] [authz_core:error] [pid 2897990:tid 2897990] [client 57.141.0.62:31006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:57.358563 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.43:52302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:57.359241 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.43:52302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:57.640617 2026] [ssl:error] [pid 2908860:tid 2908860] (70014)End of file found: [client 216.73.216.199:24537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:32:57.710579 2026] [lsapi:warn] [pid 2886514:tid 2886514] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:32:57.811168 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.34:51728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:57.811824 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.34:51728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:57.953534 2026] [core:error] [pid 2897697:tid 2897697] (13)Permission denied: [client 216.73.216.199:63934] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/wfs.com.mt.db
[Thu Jul 30 11:32:58.203725 2026] [security2:error] [pid 2908792:tid 2908792] [client 43.153.86.78:55092] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsoWuRPnqR3cmopVAMhFAAAAA0"]
[Thu Jul 30 11:32:58.265458 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.37:33892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:58.266141 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.37:33892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:58.312669 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.58:48952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:58.313301 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.58:48952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:58.813294 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.61:22286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:58.813975 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.61:22286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:58.823405 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:18410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:58.823447 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:58.874854 2026] [ssl:error] [pid 2908792:tid 2908792] (EAI 2)Name or service not known: [client 144.76.19.72:18422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:32:58.874892 2026] [ssl:error] [pid 2908792:tid 2908792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:32:58.898638 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.65:49770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:58.899271 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.65:49770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:32:59.559985 2026] [security2:error] [pid 2907082:tid 2907082] [client 43.153.86.78:55576] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/index.html"] [unique_id "amsoW3wNZVIU5VhiA0Q0ggAAADQ"], referer: http://shelterprojects.org
[Thu Jul 30 11:32:59.793309 2026] [core:error] [pid 2907144:tid 2907144] [client 57.141.0.48:49580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:59.793350 2026] [core:error] [pid 2907144:tid 2907144] [client 57.141.0.48:49580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:32:59.823594 2026] [security2:error] [pid 2904780:tid 2904780] [client 110.249.201.78:40718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amsoW5VCPX_9h35gKU_1AAAAAAU"]
[Thu Jul 30 11:32:59.859460 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.49:33808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:32:59.860114 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.49:33808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:00.107229 2026] [security2:error] [pid 2901124:tid 2901124] [client 47.128.24.87:20528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amsoXL_s7aEYVV1RiZDe1wAAACE"]
[Thu Jul 30 11:33:00.187816 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.39:22378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:00.188454 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.39:22378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:00.842709 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.21:37398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:00.843361 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.21:37398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:00.948734 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.68:35834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:00.949361 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.68:35834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:01.417863 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.53:33860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:01.418529 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.53:33860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:01.490101 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.20:36564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:01.490725 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.20:36564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:01.902053 2026] [ssl:error] [pid 2897697:tid 2897697] (70014)End of file found: [client 216.73.216.199:63934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:01.914040 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.62:30250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:01.914694 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.62:30250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:01.927930 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:51052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:01.927951 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:01.957088 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.31:22418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:01.957705 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.31:22418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:01.982882 2026] [ssl:error] [pid 2910637:tid 2910637] (EAI 2)Name or service not known: [client 144.76.19.72:51056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:01.982933 2026] [ssl:error] [pid 2910637:tid 2910637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:02.179290 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.28:51410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:02.179953 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.28:51410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:02.181191 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.36:52844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:02.181830 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.36:52844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:02.744227 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.49:33834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:02.744859 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.49:33834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:02.897311 2026] [security2:error] [pid 2910637:tid 2910637] [client 186.104.174.171:34278] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoXnIrXNSgYIxRDaN1fAAAAAg"]
[Thu Jul 30 11:33:02.897372 2026] [security2:error] [pid 2910637:tid 2910637] [client 186.104.174.171:34278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoXnIrXNSgYIxRDaN1fAAAAAg"]
[Thu Jul 30 11:33:02.897701 2026] [security2:error] [pid 2910637:tid 2910637] [client 186.104.174.171:34278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsoXnIrXNSgYIxRDaN1fAAAAAg"]
[Thu Jul 30 11:33:03.109414 2026] [core:error] [pid 2886514:tid 2886514] (1)Operation not permitted: [client 216.73.216.199:56812] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/net/snmp6
[Thu Jul 30 11:33:03.237296 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.38:59034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:03.237923 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.38:59034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:03.556017 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.20:36566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:03.556699 2026] [authz_core:error] [pid 2908940:tid 2908940] [client 57.141.0.20:36566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:03.627216 2026] [access_compat:error] [pid 2895081:tid 2895081] [client 136.158.37.124:20819] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:33:03.733741 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.67:58728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:03.734360 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.67:58728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:04.027233 2026] [ssl:error] [pid 2886514:tid 2886514] (70014)End of file found: [client 216.73.216.199:56812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:04.062339 2026] [authz_core:error] [pid 2908938:tid 2908938] [client 57.141.0.37:62792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:04.062960 2026] [authz_core:error] [pid 2908938:tid 2908938] [client 57.141.0.37:62792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:04.412777 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 74.248.20.32:43600] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 11:33:04.575621 2026] [ssl:error] [pid 2909088:tid 2909088] (70014)End of file found: [client 216.73.216.199:12316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:04.644669 2026] [lsapi:warn] [pid 2903615:tid 2903615] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:04.754684 2026] [security2:error] [pid 2908938:tid 2908938] [client 47.243.38.55:53651] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoYCnhiRISo5XYGNcJHgAAADM"]
[Thu Jul 30 11:33:04.754732 2026] [security2:error] [pid 2908938:tid 2908938] [client 47.243.38.55:53651] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoYCnhiRISo5XYGNcJHgAAADM"]
[Thu Jul 30 11:33:04.754989 2026] [security2:error] [pid 2908938:tid 2908938] [client 47.243.38.55:53651] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsoYCnhiRISo5XYGNcJHgAAADM"]
[Thu Jul 30 11:33:04.849353 2026] [authz_core:error] [pid 2910366:tid 2910366] [client 57.141.0.33:57022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:04.849968 2026] [authz_core:error] [pid 2910366:tid 2910366] [client 57.141.0.33:57022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:05.048327 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.46:53680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:05.048997 2026] [authz_core:error] [pid 2909085:tid 2909085] [client 57.141.0.46:53680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:05.724025 2026] [ssl:error] [pid 2910870:tid 2910870] (EAI 2)Name or service not known: [client 144.76.19.72:51068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:05.724065 2026] [ssl:error] [pid 2910870:tid 2910870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:05.811659 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.62:30252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:05.812315 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.62:30252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:05.843555 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.42:62872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:05.844179 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.42:62872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:05.931147 2026] [ssl:error] [pid 2910870:tid 2910870] (EAI 2)Name or service not known: [client 144.76.19.72:51072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:05.931170 2026] [ssl:error] [pid 2910870:tid 2910870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:06.047875 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.48:49586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:06.048613 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.48:49586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:06.223829 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.35:46742] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:06.226488 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.35:46742] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:06.302480 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.23:32058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:06.303233 2026] [authz_core:error] [pid 2906113:tid 2906113] [client 57.141.0.23:32058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:06.957058 2026] [security2:error] [pid 2910928:tid 2910928] [client 114.119.158.38:65031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~27-8-2019"] [unique_id "amsoYtpFwVvmROG8oSKehwAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1564873200/cat_ids%7E18,104,102/request_format%7Ehtml
[Thu Jul 30 11:33:07.039596 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.38:59044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:07.040248 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.38:59044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:07.610457 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.35:41230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:07.611098 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.35:41230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:07.758131 2026] [authz_core:error] [pid 2907144:tid 2907144] [client 57.141.0.49:56812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:07.758763 2026] [authz_core:error] [pid 2907144:tid 2907144] [client 57.141.0.49:56812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:07.844012 2026] [security2:error] [pid 2907144:tid 2907144] [client 47.243.38.55:43253] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoY3czciTtsBDPWq3-fQAAADs"]
[Thu Jul 30 11:33:07.844056 2026] [security2:error] [pid 2907144:tid 2907144] [client 47.243.38.55:43253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoY3czciTtsBDPWq3-fQAAADs"]
[Thu Jul 30 11:33:07.844302 2026] [security2:error] [pid 2907144:tid 2907144] [client 47.243.38.55:43253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsoY3czciTtsBDPWq3-fQAAADs"]
[Thu Jul 30 11:33:08.212310 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.38:59060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:08.212933 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.38:59060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:08.390631 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.56:55650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:08.391272 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.56:55650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:08.448426 2026] [security2:error] [pid 2880697:tid 2880697] [client 114.119.158.38:36833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~27-8-2019"] [unique_id "amsoZEfKsF_rbvGPcZbRfAAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1564873200/cat_ids%7E18,104,102/request_format%7Ehtml
[Thu Jul 30 11:33:08.452882 2026] [lsapi:warn] [pid 2909092:tid 2909092] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:08.599307 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.63:28384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:08.599946 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.63:28384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:08.989193 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.26:29062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:08.989812 2026] [authz_core:error] [pid 2910637:tid 2910637] [client 57.141.0.26:29062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:09.027806 2026] [ssl:error] [pid 2910982:tid 2910982] (EAI 2)Name or service not known: [client 144.76.19.72:51076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:09.027849 2026] [ssl:error] [pid 2910982:tid 2910982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:09.085776 2026] [ssl:error] [pid 2910983:tid 2910983] (EAI 2)Name or service not known: [client 144.76.19.72:51080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:09.085818 2026] [ssl:error] [pid 2910983:tid 2910983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:09.213572 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.32:39264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:09.214237 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.32:39264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:09.513133 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.71:51822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:09.513783 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.71:51822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:09.988299 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.44:25862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:09.988918 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.44:25862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:10.058821 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.27:23758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:10.059445 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.27:23758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:10.128948 2026] [ssl:error] [pid 2910930:tid 2910930] (70014)End of file found: [client 216.73.216.199:40254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:11.018919 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.47:36840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:11.019556 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.47:36840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:11.091984 2026] [authz_core:error] [pid 2909082:tid 2909082] [client 57.141.0.71:51826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:11.092619 2026] [authz_core:error] [pid 2909082:tid 2909082] [client 57.141.0.71:51826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:11.330721 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.15:44550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:11.331346 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.15:44550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:11.332032 2026] [core:error] [pid 2895081:tid 2895081] (13)Permission denied: [client 216.73.216.199:45792] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_ili/order
[Thu Jul 30 11:33:11.429955 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.30:47604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:11.430582 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.30:47604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:11.814717 2026] [authz_core:error] [pid 2910366:tid 2910366] [client 57.141.0.46:24106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:11.815340 2026] [authz_core:error] [pid 2910366:tid 2910366] [client 57.141.0.46:24106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:12.136445 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.39:45524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:12.137060 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.39:45524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:12.144249 2026] [ssl:error] [pid 2904780:tid 2904780] (EAI 2)Name or service not known: [client 144.76.19.72:53346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:12.144273 2026] [ssl:error] [pid 2904780:tid 2904780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:12.201687 2026] [ssl:error] [pid 2910870:tid 2910870] (EAI 2)Name or service not known: [client 144.76.19.72:53348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:12.201726 2026] [ssl:error] [pid 2910870:tid 2910870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:12.526139 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.27:21880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:12.526763 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.27:21880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:13.135047 2026] [ssl:error] [pid 2895081:tid 2895081] (70014)End of file found: [client 216.73.216.199:45792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:13.357506 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.41:50766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:13.358499 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.41:50766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:13.433364 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.54:27680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:13.433990 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.54:27680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:13.577729 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.55:33622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:13.578356 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.55:33622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:14.357856 2026] [access_compat:error] [pid 2908792:tid 2908792] [client 136.158.37.124:21583] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:33:14.368309 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.42:62662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:14.368931 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.42:62662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:14.513642 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.31:46844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:14.514929 2026] [authz_core:error] [pid 2899163:tid 2899163] [client 57.141.0.31:46844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:15.116541 2026] [lsapi:warn] [pid 2908936:tid 2908936] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:15.195398 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.66:26812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:15.196027 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.66:26812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:15.249305 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.22:26428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:15.249949 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.22:26428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:15.257932 2026] [ssl:error] [pid 2910638:tid 2910638] (EAI 2)Name or service not known: [client 144.76.19.72:53360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:15.257960 2026] [ssl:error] [pid 2910638:tid 2910638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:15.348027 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:53366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:15.348083 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:15.478504 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.11:23894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:15.479141 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.11:23894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:15.495295 2026] [authz_core:error] [pid 2908863:tid 2908863] [client 57.141.0.35:31350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:15.495936 2026] [authz_core:error] [pid 2908863:tid 2908863] [client 57.141.0.35:31350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:15.542733 2026] [authz_core:error] [pid 2904713:tid 2904713] [client 57.141.0.71:57294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:15.543497 2026] [authz_core:error] [pid 2904713:tid 2904713] [client 57.141.0.71:57294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:15.950955 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:15.953617 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:16.496865 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.21:57074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:16.497486 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.21:57074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:16.743343 2026] [security2:error] [pid 2906567:tid 2906567] [client 47.128.55.26:56806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.junglejacks.co.uk"] [uri "/robots.txt"] [unique_id "amsobEMHVWqpHZopO5XBTgAAABk"]
[Thu Jul 30 11:33:16.854135 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.27:21896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:16.855458 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.27:21896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:16.904317 2026] [authz_core:error] [pid 2910638:tid 2910638] [client 57.141.0.13:52890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:16.904939 2026] [authz_core:error] [pid 2910638:tid 2910638] [client 57.141.0.13:52890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:17.052762 2026] [core:error] [pid 2906988:tid 2906988] (13)Permission denied: [client 216.73.216.199:31647] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/firmware/acpi/tables/APIC
[Thu Jul 30 11:33:17.633489 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.28:46258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:17.634157 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.28:46258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:17.658008 2026] [core:error] [pid 2906988:tid 2906988] (13)Permission denied: [client 216.73.216.199:31647] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/zswap_entry/slabs
[Thu Jul 30 11:33:17.772672 2026] [security2:error] [pid 2910982:tid 2910982] [client 18.199.86.73:37546] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.chateausaintjeannet.com"] [uri "/.git/config"] [unique_id "amsobQT03f8nrSUmF-aOkgAAACg"]
[Thu Jul 30 11:33:17.772810 2026] [security2:error] [pid 2910982:tid 2910982] [client 18.199.86.73:37546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.chateausaintjeannet.com"] [uri "/.git/config"] [unique_id "amsobQT03f8nrSUmF-aOkgAAACg"]
[Thu Jul 30 11:33:17.801555 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:17.804266 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:17.805287 2026] [security2:error] [pid 2910982:tid 2910982] [client 18.199.86.73:37546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.chateausaintjeannet.com"] [uri "/403.shtml"] [unique_id "amsobQT03f8nrSUmF-aOkgAAACg"]
[Thu Jul 30 11:33:18.129931 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.13:52898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:18.130594 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.13:52898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:18.404583 2026] [ssl:error] [pid 2910638:tid 2910638] (EAI 2)Name or service not known: [client 144.76.19.72:53370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:18.404618 2026] [ssl:error] [pid 2910638:tid 2910638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:18.462309 2026] [ssl:error] [pid 2906567:tid 2906567] (EAI 2)Name or service not known: [client 144.76.19.72:53372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:18.462339 2026] [ssl:error] [pid 2906567:tid 2906567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:18.711038 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.6:40064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:18.711671 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.6:40064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:18.883025 2026] [security2:error] [pid 2910638:tid 2910638] [client 43.160.219.206:48586] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/"] [unique_id "amsobin9VcpqgNqporr_oQAAABM"]
[Thu Jul 30 11:33:19.051328 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.35:41008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:19.051961 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.35:41008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:19.258739 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.66:26814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:19.259367 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.66:26814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:19.501857 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.18:43638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:19.502484 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.18:43638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:19.805373 2026] [lsapi:warn] [pid 2910984:tid 2910984] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:19.835174 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.12:57102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:19.835791 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.12:57102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:19.936812 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.52:38794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:19.937439 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.52:38794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:20.372770 2026] [core:error] [pid 2906988:tid 2906988] (13)Permission denied: [client 216.73.216.199:31647] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cui_item/store_user
[Thu Jul 30 11:33:20.453310 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:32216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:20.453926 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.14:32216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:20.558549 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.7:43168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:20.559199 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.7:43168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:20.896885 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.34:48826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:20.897508 2026] [authz_core:error] [pid 2886514:tid 2886514] [client 57.141.0.34:48826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:20.998756 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.15:32112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:20.999399 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.15:32112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:21.389542 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.58:35698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:21.390171 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.58:35698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:21.474874 2026] [security2:error] [pid 2910813:tid 2910813] [client 43.159.152.4:49474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.davidebell.com"] [uri "/"] [unique_id "amsocb_rCxe41z4kj0m5_AAAABU"]
[Thu Jul 30 11:33:21.515637 2026] [ssl:error] [pid 2910638:tid 2910638] (EAI 2)Name or service not known: [client 144.76.19.72:63810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:21.515665 2026] [ssl:error] [pid 2910638:tid 2910638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:21.571672 2026] [ssl:error] [pid 2910984:tid 2910984] (EAI 2)Name or service not known: [client 144.76.19.72:63824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:21.571702 2026] [ssl:error] [pid 2910984:tid 2910984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:22.185995 2026] [ssl:error] [pid 2906988:tid 2906988] (70014)End of file found: [client 216.73.216.199:31647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:22.250479 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.47:34862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:22.251119 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.47:34862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:22.276566 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.34:48830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:22.277180 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.34:48830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:22.306942 2026] [authz_core:error] [pid 2910638:tid 2910638] [client 57.141.0.22:38618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:22.307570 2026] [authz_core:error] [pid 2910638:tid 2910638] [client 57.141.0.22:38618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:22.720511 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.65:44738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:22.721534 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.65:44738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:22.728113 2026] [core:error] [pid 2910983:tid 2910983] (13)Permission denied: [client 216.73.216.199:8089] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/dannoweb.com.db
[Thu Jul 30 11:33:22.828140 2026] [ssl:error] [pid 2910983:tid 2910983] (70014)End of file found: [client 216.73.216.199:8089] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:23.106289 2026] [authz_core:error] [pid 2908792:tid 2908792] [client 57.141.0.7:43176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:23.106913 2026] [authz_core:error] [pid 2908792:tid 2908792] [client 57.141.0.7:43176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:23.237255 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.48:63374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:23.237874 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.48:63374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:23.398234 2026] [ssl:error] [pid 2908940:tid 2908940] (70014)End of file found: [client 216.73.216.199:41655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:23.760870 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.17:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:23.761489 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.17:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:24.204987 2026] [security2:error] [pid 2910927:tid 2910927] [client 185.191.171.8:23450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6383.0/prev_next,prev.html"] [unique_id "amsodLcxIFg0yXQ4oSu9LAAAACI"]
[Thu Jul 30 11:33:24.522683 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:24.527241 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:24.572703 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.60:33330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:24.573324 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.60:33330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:24.629812 2026] [ssl:error] [pid 2909095:tid 2909095] (EAI 2)Name or service not known: [client 144.76.19.72:63834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:24.629849 2026] [ssl:error] [pid 2909095:tid 2909095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:24.681602 2026] [ssl:error] [pid 2908860:tid 2908860] (EAI 2)Name or service not known: [client 144.76.19.72:63838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:24.681641 2026] [ssl:error] [pid 2908860:tid 2908860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:24.698299 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.68:33286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:24.698923 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.68:33286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:25.124438 2026] [access_compat:error] [pid 2907141:tid 2907141] [client 136.158.37.124:22451] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:33:25.179405 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.24:31774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:25.180036 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.24:31774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:25.352118 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.55:20898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:25.352734 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.55:20898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:25.454948 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.35:41022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:25.456012 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.35:41022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:25.553795 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.53:55974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:25.554418 2026] [authz_core:error] [pid 2902460:tid 2902460] [client 57.141.0.53:55974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:25.584281 2026] [core:error] [pid 2908860:tid 2908860] [client 66.249.66.67:55870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:25.584303 2026] [core:error] [pid 2908860:tid 2908860] [client 66.249.66.67:55870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:25.588615 2026] [core:error] [pid 2900744:tid 2900744] [client 66.249.66.169:39024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:25.588634 2026] [core:error] [pid 2900744:tid 2900744] [client 66.249.66.169:39024] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:25.607541 2026] [lsapi:warn] [pid 2909095:tid 2909095] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:25.609296 2026] [core:error] [pid 2910987:tid 2910987] [client 66.249.64.170:60153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:25.609315 2026] [core:error] [pid 2910987:tid 2910987] [client 66.249.64.170:60153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:26.324400 2026] [authz_core:error] [pid 2910982:tid 2910982] [client 57.141.0.26:25966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:26.325026 2026] [authz_core:error] [pid 2910982:tid 2910982] [client 57.141.0.26:25966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:26.948982 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:26.951667 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:27.012951 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.21:51156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:27.013580 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.21:51156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:27.605854 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.46:46164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:27.606493 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.46:46164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:27.771301 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.29:20798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:27.771917 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.29:20798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:27.774879 2026] [ssl:error] [pid 2909095:tid 2909095] (EAI 2)Name or service not known: [client 144.76.19.72:63842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:27.774910 2026] [ssl:error] [pid 2909095:tid 2909095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:27.827858 2026] [ssl:error] [pid 2910982:tid 2910982] (EAI 2)Name or service not known: [client 144.76.19.72:63858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:27.827890 2026] [ssl:error] [pid 2910982:tid 2910982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:28.028707 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.34:48840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:28.029327 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.34:48840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:28.239650 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:28.242298 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:28.325133 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.25:65314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:28.325780 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.25:65314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:28.464379 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.28:56932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:28.465006 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.28:56932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:28.466907 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.21:51170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:28.467517 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.21:51170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:28.636484 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.16:47312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:28.637133 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.16:47312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:29.112775 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.27:56266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:29.113398 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.27:56266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:29.249918 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.14:21324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:29.250557 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.14:21324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:29.985348 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.29:39594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:29.985974 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.29:39594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:30.326929 2026] [core:error] [pid 2910873:tid 2910873] (13)Permission denied: [client 216.73.216.199:51957] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bfq_io_cq/red_zone
[Thu Jul 30 11:33:30.407122 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.19:58944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:30.407744 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.19:58944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:30.628319 2026] [ssl:error] [pid 2910873:tid 2910873] (70014)End of file found: [client 216.73.216.199:51957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:30.760123 2026] [lsapi:warn] [pid 2904780:tid 2904780] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:30.883385 2026] [ssl:error] [pid 2909095:tid 2909095] (EAI 2)Name or service not known: [client 144.76.19.72:64576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:30.883406 2026] [ssl:error] [pid 2909095:tid 2909095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:30.934781 2026] [ssl:error] [pid 2909088:tid 2909088] (EAI 2)Name or service not known: [client 144.76.19.72:64578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:30.934812 2026] [ssl:error] [pid 2909088:tid 2909088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:31.280242 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.25:65316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:31.280863 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.25:65316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:31.323297 2026] [ssl:error] [pid 2907141:tid 2907141] (70014)End of file found: [client 216.73.216.199:55285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:31.520701 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.32:48706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:31.521337 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.32:48706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:31.531129 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.65:44752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:31.532396 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.65:44752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:31.610888 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.55:20910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:31.611574 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.55:20910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:32.028385 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:32.031031 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:32.040441 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.45:41436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:32.041056 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.45:41436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:32.378031 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.28:34446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:32.378664 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.28:34446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:32.507798 2026] [security2:error] [pid 2909095:tid 2909095] [client 85.208.96.207:21686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/kb-of-hco3"] [unique_id "amsofBCrD8RVAM0DND_PeQAAAE0"]
[Thu Jul 30 11:33:32.909950 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.58:35778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:32.910578 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.58:35778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:33.268732 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.47:41782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:33.269354 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.47:41782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:33.823129 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.20:43774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:33.823744 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.20:43774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:33.987253 2026] [ssl:error] [pid 2903544:tid 2903544] (EAI 2)Name or service not known: [client 144.76.19.72:64582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:33.987283 2026] [ssl:error] [pid 2903544:tid 2903544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:34.043660 2026] [ssl:error] [pid 2908940:tid 2908940] (EAI 2)Name or service not known: [client 144.76.19.72:64584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:34.043695 2026] [ssl:error] [pid 2908940:tid 2908940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:34.137450 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 169.58.39.191:52862] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:33:34.241034 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.60:34264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:34.241671 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.60:34264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:34.303564 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.45:41440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:34.304184 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.45:41440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:34.563560 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.46:44398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:34.564187 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.46:44398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:34.839841 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.2:64952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:34.840459 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.2:64952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:34.933757 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.5:29770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:34.934379 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.5:29770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:35.116972 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:35.119649 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 66.249.66.33:63325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:35.440459 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.19:31778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:35.441123 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.19:31778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:36.064500 2026] [ssl:error] [pid 2908936:tid 2908936] (70014)End of file found: [client 216.73.216.199:14783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:36.066951 2026] [lsapi:warn] [pid 2897697:tid 2897697] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:36.098608 2026] [access_compat:error] [pid 2910984:tid 2910984] [client 136.158.37.124:23253] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:33:36.229445 2026] [security2:error] [pid 2910873:tid 2910873] [client 46.248.201.12:31035] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsogMaFUWqsdbTZAJrf1AAAABw"]
[Thu Jul 30 11:33:36.229504 2026] [security2:error] [pid 2910873:tid 2910873] [client 46.248.201.12:31035] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsogMaFUWqsdbTZAJrf1AAAABw"]
[Thu Jul 30 11:33:36.229760 2026] [security2:error] [pid 2910873:tid 2910873] [client 46.248.201.12:31035] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsogMaFUWqsdbTZAJrf1AAAABw"]
[Thu Jul 30 11:33:36.255289 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.22:38904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:36.255906 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.22:38904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:36.275889 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.51:21694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:36.276510 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.51:21694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:36.558009 2026] [access_compat:error] [pid 2880697:tid 2880697] [client 45.158.164.139:41766] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:33:36.592905 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.66:56506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:36.593535 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.66:56506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:36.733877 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.26:62222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:36.734587 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.26:62222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:36.797385 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.67:25742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:36.798004 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.67:25742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:36.846299 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 169.58.39.191:54182] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:33:37.098719 2026] [ssl:error] [pid 2894614:tid 2894614] (EAI 2)Name or service not known: [client 144.76.19.72:64590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:37.098747 2026] [ssl:error] [pid 2894614:tid 2894614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:37.106606 2026] [core:error] [pid 2909081:tid 2909081] [client 66.249.66.8:52131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:37.106626 2026] [core:error] [pid 2909081:tid 2909081] [client 66.249.66.8:52131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:37.129707 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.7:55106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:37.130329 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.7:55106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:37.153327 2026] [ssl:error] [pid 2895081:tid 2895081] (EAI 2)Name or service not known: [client 144.76.19.72:64598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:37.153350 2026] [ssl:error] [pid 2895081:tid 2895081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:37.278354 2026] [core:error] [pid 2904879:tid 2904879] (13)Permission denied: [client 216.73.216.199:21044] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bui_item/store_user
[Thu Jul 30 11:33:38.049696 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.71:53702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:38.050316 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.71:53702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:38.116230 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.63:46386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:38.116849 2026] [authz_core:error] [pid 2895081:tid 2895081] [client 57.141.0.63:46386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:38.422151 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.3:29314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:38.422768 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.3:29314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:38.882573 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.16:46666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:38.883190 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.16:46666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:38.960541 2026] [ssl:error] [pid 2904879:tid 2904879] (70014)End of file found: [client 216.73.216.199:21044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:39.708145 2026] [security2:error] [pid 2909081:tid 2909081] [client 192.141.106.221:47122] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsog5wlTvw5oJx50WCaXgAAAD4"]
[Thu Jul 30 11:33:39.708204 2026] [security2:error] [pid 2909081:tid 2909081] [client 192.141.106.221:47122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsog5wlTvw5oJx50WCaXgAAAD4"]
[Thu Jul 30 11:33:39.708459 2026] [security2:error] [pid 2909081:tid 2909081] [client 192.141.106.221:47122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsog5wlTvw5oJx50WCaXgAAAD4"]
[Thu Jul 30 11:33:39.841362 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.33:63246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:39.841979 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.33:63246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:39.906771 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.23:58416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:39.907401 2026] [authz_core:error] [pid 2889370:tid 2889370] [client 57.141.0.23:58416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:40.209443 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.65:39116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:40.210059 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.65:39116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:40.210625 2026] [ssl:error] [pid 2894614:tid 2894614] (EAI 2)Name or service not known: [client 144.76.19.72:40590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:40.210648 2026] [ssl:error] [pid 2894614:tid 2894614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:40.263507 2026] [ssl:error] [pid 2909081:tid 2909081] (EAI 2)Name or service not known: [client 144.76.19.72:40602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:40.263570 2026] [ssl:error] [pid 2909081:tid 2909081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:40.311531 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.3:65450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:40.312138 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.3:65450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:40.417244 2026] [lsapi:warn] [pid 2909095:tid 2909095] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:40.893002 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.59:26416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:40.893632 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.59:26416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:41.003368 2026] [security2:error] [pid 2889370:tid 2889370] [client 47.128.55.95:60956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tyredandmotional.co.uk"] [uri "/robots.txt"] [unique_id "amsohcljHoJf7L128QBGuwAAABo"]
[Thu Jul 30 11:33:41.096625 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 169.58.39.191:56131] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:33:41.898094 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.41:20370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:41.898718 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.41:20370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:42.001317 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.36:39798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:42.001936 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.36:39798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:42.203865 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.24:25770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:42.204489 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.24:25770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:42.273410 2026] [core:error] [pid 2908940:tid 2908940] (13)Permission denied: [client 216.73.216.199:54460] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/harrymeadows.com.db
[Thu Jul 30 11:33:42.340012 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.60:52936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:42.340645 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.60:52936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:42.757976 2026] [authz_core:error] [pid 2910982:tid 2910982] [client 57.141.0.15:60306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:42.758608 2026] [authz_core:error] [pid 2910982:tid 2910982] [client 57.141.0.15:60306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:42.833642 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.51:21698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:42.834257 2026] [authz_core:error] [pid 2912264:tid 2912264] [client 57.141.0.51:21698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:43.054753 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.2:64962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:43.055373 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.2:64962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:43.125706 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.50:50612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:43.126331 2026] [authz_core:error] [pid 2909081:tid 2909081] [client 57.141.0.50:50612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:43.317162 2026] [ssl:error] [pid 2909095:tid 2909095] (EAI 2)Name or service not known: [client 144.76.19.72:40608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:43.317191 2026] [ssl:error] [pid 2909095:tid 2909095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:43.370561 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:40622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:43.370591 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:43.481972 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 169.58.39.191:57204] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:33:43.576002 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.42:42176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:43.576632 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.42:42176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:44.069479 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.23:58432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:44.070120 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.23:58432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:44.185171 2026] [security2:error] [pid 2912264:tid 2912264] [client 167.249.241.252:10169] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoiAO3PXzcQWwAabOyjAAAAAg"]
[Thu Jul 30 11:33:44.185224 2026] [security2:error] [pid 2912264:tid 2912264] [client 167.249.241.252:10169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsoiAO3PXzcQWwAabOyjAAAAAg"]
[Thu Jul 30 11:33:44.185493 2026] [security2:error] [pid 2912264:tid 2912264] [client 167.249.241.252:10169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsoiAO3PXzcQWwAabOyjAAAAAg"]
[Thu Jul 30 11:33:44.762377 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 57.141.0.27:60802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:44.763024 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 57.141.0.27:60802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:44.894603 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.36:39812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:44.895227 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.36:39812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:45.691081 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.18:56736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:45.691703 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.18:56736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:45.767210 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.67:60308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:45.767833 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.67:60308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:46.026700 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.32:31624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:46.027320 2026] [authz_core:error] [pid 2910984:tid 2910984] [client 57.141.0.32:31624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:46.168174 2026] [core:error] [pid 2897697:tid 2897697] [client 66.249.66.39:47522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:46.168202 2026] [core:error] [pid 2897697:tid 2897697] [client 66.249.66.39:47522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:46.428617 2026] [ssl:error] [pid 2907082:tid 2907082] (EAI 2)Name or service not known: [client 144.76.19.72:40628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:46.428643 2026] [ssl:error] [pid 2907082:tid 2907082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:46.444431 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.1:50142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:46.445044 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.1:50142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:46.484475 2026] [ssl:error] [pid 2906567:tid 2906567] (EAI 2)Name or service not known: [client 144.76.19.72:40634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:46.484496 2026] [ssl:error] [pid 2906567:tid 2906567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:46.501734 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.32:31636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:46.502370 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.32:31636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:46.566117 2026] [lsapi:warn] [pid 2906988:tid 2906988] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:47.037891 2026] [cgi:error] [pid 2910930:tid 2910930] [client 20.151.254.105:15748] AH02812: stderr from /home/bessys/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:33:47.056944 2026] [access_compat:error] [pid 2909088:tid 2909088] [client 136.158.37.124:24072] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:33:47.060873 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.35:35250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:47.061492 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.35:35250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:47.332692 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.11:64962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:47.333314 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.11:64962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:47.542044 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.68:55588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:47.542675 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.68:55588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:47.822005 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.52:55312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:47.822641 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.52:55312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:48.405606 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.19:53446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:48.406235 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.19:53446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:48.595197 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.41:59746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:48.595819 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.41:59746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:48.609812 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.45:48354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:48.610432 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.45:48354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:48.917574 2026] [ssl:error] [pid 2909090:tid 2909090] (70014)End of file found: [client 216.73.216.199:2046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:49.124952 2026] [ssl:error] [pid 2911549:tid 2911549] (70014)End of file found: [client 216.73.216.199:28331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:49.188090 2026] [security2:error] [pid 2903544:tid 2903544] [client 18.199.86.73:35050] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.devwebsitehub.com"] [uri "/.git/config"] [unique_id "amsojeDEFBRymbocUWIYdAAAABA"]
[Thu Jul 30 11:33:49.188279 2026] [security2:error] [pid 2903544:tid 2903544] [client 18.199.86.73:35050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.devwebsitehub.com"] [uri "/.git/config"] [unique_id "amsojeDEFBRymbocUWIYdAAAABA"]
[Thu Jul 30 11:33:49.220017 2026] [security2:error] [pid 2903544:tid 2903544] [client 18.199.86.73:35050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.devwebsitehub.com"] [uri "/403.shtml"] [unique_id "amsojeDEFBRymbocUWIYdAAAABA"]
[Thu Jul 30 11:33:49.232654 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:49.235367 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:49.405053 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.53:26956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:49.405689 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.53:26956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:49.536202 2026] [ssl:error] [pid 2889370:tid 2889370] (EAI 2)Name or service not known: [client 144.76.19.72:40636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:49.536240 2026] [ssl:error] [pid 2889370:tid 2889370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:49.592017 2026] [ssl:error] [pid 2910870:tid 2910870] (EAI 2)Name or service not known: [client 144.76.19.72:24990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:49.592059 2026] [ssl:error] [pid 2910870:tid 2910870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:49.725463 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.40:53480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:49.726095 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.40:53480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:49.875433 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.5:39838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:49.876085 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.5:39838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:49.906352 2026] [security2:error] [pid 2908860:tid 2908860] [client 47.128.99.100:28876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsojRZUmmVKTme_B6fsKAAAAB4"]
[Thu Jul 30 11:33:50.226779 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.54:28240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:50.227533 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.54:28240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:50.733004 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.55:54002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:50.733636 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.55:54002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:50.746149 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.32:31638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:50.746760 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.32:31638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:50.887722 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.6:55240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:50.888344 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.6:55240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:50.902198 2026] [core:error] [pid 2910813:tid 2910813] [client 66.249.66.66:39269] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:50.902224 2026] [core:error] [pid 2910813:tid 2910813] [client 66.249.66.66:39269] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:33:51.028729 2026] [ssl:error] [pid 2910983:tid 2910983] (70014)End of file found: [client 216.73.216.199:26764] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:51.113638 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.35:26634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:51.114260 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.35:26634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:51.130129 2026] [lsapi:warn] [pid 2912360:tid 2912360] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:51.587061 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.34:28104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:51.587693 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.34:28104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:52.018268 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.55:54012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:52.018891 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.55:54012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:52.217059 2026] [cgi:error] [pid 2908936:tid 2908936] [client 37.59.21.100:59414] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:33:52.540596 2026] [authz_core:error] [pid 2910982:tid 2910982] [client 57.141.0.69:20266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:52.541236 2026] [authz_core:error] [pid 2910982:tid 2910982] [client 57.141.0.69:20266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:52.645550 2026] [ssl:error] [pid 2910870:tid 2910870] (EAI 2)Name or service not known: [client 144.76.19.72:24996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:52.645577 2026] [ssl:error] [pid 2910870:tid 2910870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:52.698721 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:25000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:52.698745 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:52.979319 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.43:34160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:52.980046 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.43:34160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:53.247553 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.35:26646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:53.248182 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.35:26646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:53.294915 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.17:35526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:53.295544 2026] [authz_core:error] [pid 2909088:tid 2909088] [client 57.141.0.17:35526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:53.697830 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.63:47128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:53.698450 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.63:47128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:53.965971 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:53.968640 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:54.057771 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.39:41676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:54.058397 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.39:41676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:54.258064 2026] [ssl:error] [pid 2906567:tid 2906567] (70014)End of file found: [client 216.73.216.199:39392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:54.664007 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.51:50528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:54.664634 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.51:50528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:54.974595 2026] [ssl:error] [pid 2910984:tid 2910984] (70014)End of file found: [client 216.73.216.199:1389] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:55.038812 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.4:42546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:55.039440 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.4:42546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:55.456118 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.38:23104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:55.456782 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.38:23104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:55.756777 2026] [ssl:error] [pid 2911549:tid 2911549] (EAI 2)Name or service not known: [client 144.76.19.72:25004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:55.756815 2026] [ssl:error] [pid 2911549:tid 2911549] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:55.812759 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:25016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:55.812789 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:55.909535 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.41:24510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:55.910166 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.41:24510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:55.973252 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:33:55.975925 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:33:56.144867 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.36:51926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:56.145492 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.36:51926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:56.271513 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.60:47834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:56.272146 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.60:47834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:56.384057 2026] [ssl:error] [pid 2908860:tid 2908860] (70014)End of file found: [client 216.73.216.199:43681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:56.750122 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.4:42560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:56.750737 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.4:42560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:57.111019 2026] [lsapi:warn] [pid 2889424:tid 2889424] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:33:57.127414 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.40:53484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:57.128034 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.40:53484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:57.544148 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.19:39064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:57.544773 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.19:39064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:57.953077 2026] [access_compat:error] [pid 2906988:tid 2906988] [client 136.158.37.124:24977] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:33:57.999552 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.50:27644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:58.000177 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.50:27644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:58.174314 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.13:51832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:58.174932 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.13:51832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:58.415671 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.8:36044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:58.416290 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.8:36044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:58.611182 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.39:26530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:58.611854 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.39:26530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:58.893676 2026] [ssl:error] [pid 2910365:tid 2910365] (EAI 2)Name or service not known: [client 144.76.19.72:25020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:58.893724 2026] [ssl:error] [pid 2910365:tid 2910365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:58.945481 2026] [ssl:error] [pid 2910813:tid 2910813] (EAI 2)Name or service not known: [client 144.76.19.72:25032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:33:58.945530 2026] [ssl:error] [pid 2910813:tid 2910813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:33:59.054509 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.64:37226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:59.055144 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.64:37226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:59.174932 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.21:65072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:59.175589 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.21:65072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:33:59.679235 2026] [ssl:error] [pid 2910365:tid 2910365] (70014)End of file found: [client 216.73.216.199:45824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:33:59.772919 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.40:24350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:33:59.773567 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.40:24350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:00.282581 2026] [ssl:error] [pid 2897697:tid 2897697] (70014)End of file found: [client 216.73.216.199:19561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:00.300548 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.66:48784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:00.301166 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.66:48784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:00.414715 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.26:48948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:00.415461 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.26:48948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:00.514355 2026] [authz_core:error] [pid 2910988:tid 2910988] [client 57.141.0.45:56760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:00.514976 2026] [authz_core:error] [pid 2910988:tid 2910988] [client 57.141.0.45:56760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:00.769197 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.11:31154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:00.769817 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.11:31154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:01.739467 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.5:49942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:01.740096 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.5:49942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:01.848669 2026] [ssl:error] [pid 2894614:tid 2894614] (70014)End of file found: [client 216.73.216.199:13037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:01.874202 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.28:65336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:01.874825 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.28:65336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:02.009227 2026] [ssl:error] [pid 2913294:tid 2913294] (EAI 2)Name or service not known: [client 144.76.19.72:58350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:02.009278 2026] [ssl:error] [pid 2913294:tid 2913294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:02.065966 2026] [ssl:error] [pid 2900705:tid 2900705] (EAI 2)Name or service not known: [client 144.76.19.72:58362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:02.066005 2026] [ssl:error] [pid 2900705:tid 2900705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:02.078831 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.64:37228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:02.079456 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.64:37228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:02.111287 2026] [lsapi:warn] [pid 2907083:tid 2907083] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:02.237887 2026] [authz_core:error] [pid 2913294:tid 2913294] [client 57.141.0.50:42002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:02.238544 2026] [authz_core:error] [pid 2913294:tid 2913294] [client 57.141.0.50:42002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:02.625753 2026] [security2:error] [pid 2910988:tid 2910988] [client 43.128.250.33:17395] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsomheHaSJrgbczL_QH0AAAADE"]
[Thu Jul 30 11:34:02.625803 2026] [security2:error] [pid 2910988:tid 2910988] [client 43.128.250.33:17395] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsomheHaSJrgbczL_QH0AAAADE"]
[Thu Jul 30 11:34:02.626060 2026] [security2:error] [pid 2910988:tid 2910988] [client 43.128.250.33:17395] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsomheHaSJrgbczL_QH0AAAADE"]
[Thu Jul 30 11:34:02.796323 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.64:37240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:02.796950 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.64:37240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:02.990993 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.50:42008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:02.991627 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.50:42008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:03.209133 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.20:56694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:03.209773 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.20:56694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:03.704731 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 66.249.66.33:36979] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:03.707378 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 66.249.66.33:36979] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:03.855169 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.70:40092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:03.855792 2026] [authz_core:error] [pid 2906988:tid 2906988] [client 57.141.0.70:40092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:04.089359 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.25:31478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:04.089984 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.25:31478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:04.719547 2026] [authz_core:error] [pid 2913411:tid 2913411] [client 57.141.0.63:31284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:04.720188 2026] [authz_core:error] [pid 2913411:tid 2913411] [client 57.141.0.63:31284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:04.872954 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.11:31156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:04.873603 2026] [authz_core:error] [pid 2910987:tid 2910987] [client 57.141.0.11:31156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:05.119129 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:58370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:05.119174 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:05.131784 2026] [ssl:error] [pid 2910365:tid 2910365] (70014)End of file found: [client 216.73.216.199:44630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:05.172693 2026] [ssl:error] [pid 2910987:tid 2910987] (EAI 2)Name or service not known: [client 144.76.19.72:58380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:05.172748 2026] [ssl:error] [pid 2910987:tid 2910987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:05.392248 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.15:50762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:05.392867 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.15:50762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:05.399494 2026] [authz_core:error] [pid 2910638:tid 2910638] [client 57.141.0.62:52466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:05.400128 2026] [authz_core:error] [pid 2910638:tid 2910638] [client 57.141.0.62:52466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:05.939609 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.44:24812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:05.940341 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.44:24812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:05.941937 2026] [security2:error] [pid 2889424:tid 2889424] [client 45.71.175.26:65490] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsonWe7rn44tqRVmOaXXwAAACA"]
[Thu Jul 30 11:34:05.941978 2026] [security2:error] [pid 2889424:tid 2889424] [client 45.71.175.26:65490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsonWe7rn44tqRVmOaXXwAAACA"]
[Thu Jul 30 11:34:05.942196 2026] [security2:error] [pid 2889424:tid 2889424] [client 45.71.175.26:65490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsonWe7rn44tqRVmOaXXwAAACA"]
[Thu Jul 30 11:34:06.013817 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.31:31374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:06.014483 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.31:31374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:06.764202 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.53:60176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:06.764856 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.53:60176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:06.877562 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.46:38518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:06.878219 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.46:38518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:07.157198 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.62:52476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:07.157846 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.62:52476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:07.586986 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.17:32094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:07.587629 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.17:32094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:07.644524 2026] [lsapi:warn] [pid 2894614:tid 2894614] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:07.955328 2026] [core:error] [pid 2913449:tid 2913449] [client 66.249.66.169:48789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:34:07.955349 2026] [core:error] [pid 2913449:tid 2913449] [client 66.249.66.169:48789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:34:08.197163 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.56:31566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:08.197789 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.56:31566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:08.227928 2026] [ssl:error] [pid 2907082:tid 2907082] (EAI 2)Name or service not known: [client 144.76.19.72:58386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:08.227957 2026] [ssl:error] [pid 2907082:tid 2907082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:08.238817 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:46964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:08.283857 2026] [ssl:error] [pid 2910930:tid 2910930] (EAI 2)Name or service not known: [client 144.76.19.72:58392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:08.283889 2026] [ssl:error] [pid 2910930:tid 2910930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:08.416242 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.25:41460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:08.416862 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.25:41460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:08.542873 2026] [security2:error] [pid 2913449:tid 2913449] [client 170.106.148.137:51048] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "magic-cookie.co.uk"] [uri "/"] [unique_id "amsooN49rIygRSOgF9E50AAAADo"]
[Thu Jul 30 11:34:08.776054 2026] [access_compat:error] [pid 2913407:tid 2913407] [client 136.158.37.124:25826] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:34:09.065482 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.69:56224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:09.066118 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.69:56224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:09.101027 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.26:40374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:09.101668 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.26:40374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:09.134458 2026] [ssl:error] [pid 2910987:tid 2910987] (70014)End of file found: [client 216.73.216.199:40614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:09.249412 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.20:56708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:09.250033 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.20:56708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:09.580468 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.9:44736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:09.581097 2026] [authz_core:error] [pid 2908861:tid 2908861] [client 57.141.0.9:44736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:09.661803 2026] [security2:error] [pid 2908936:tid 2908936] [client 37.19.73.170:50115] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsooSk4hqPsq4MuS-06YwAAACw"]
[Thu Jul 30 11:34:09.661852 2026] [security2:error] [pid 2908936:tid 2908936] [client 37.19.73.170:50115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsooSk4hqPsq4MuS-06YwAAACw"]
[Thu Jul 30 11:34:09.662110 2026] [security2:error] [pid 2908936:tid 2908936] [client 37.19.73.170:50115] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsooSk4hqPsq4MuS-06YwAAACw"]
[Thu Jul 30 11:34:09.821237 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.17:46534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:09.821859 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.17:46534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:10.509199 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.69:56228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:10.509886 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.69:56228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:10.537864 2026] [ssl:error] [pid 2910930:tid 2910930] (70014)End of file found: [client 216.73.216.199:40627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:10.575004 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.40:38988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:10.575631 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.40:38988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:10.882576 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.25:41462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:10.883193 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.25:41462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:11.105725 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:11.108386 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:11.194951 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.58:24052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:11.195585 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.58:24052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:11.337835 2026] [ssl:error] [pid 2904921:tid 2904921] (EAI 2)Name or service not known: [client 144.76.19.72:47498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:11.337870 2026] [ssl:error] [pid 2904921:tid 2904921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:11.392729 2026] [ssl:error] [pid 2910365:tid 2910365] (EAI 2)Name or service not known: [client 144.76.19.72:47504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:11.392762 2026] [ssl:error] [pid 2910365:tid 2910365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:11.517327 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.59:21502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:11.517976 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.59:21502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:11.610749 2026] [authz_core:error] [pid 2910988:tid 2910988] [client 57.141.0.49:55550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:11.611375 2026] [authz_core:error] [pid 2910988:tid 2910988] [client 57.141.0.49:55550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:11.804429 2026] [security2:error] [pid 2906567:tid 2906567] [client 114.119.128.77:20711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2014/03/SQ-FA-FP-Reading-Comprehension.pdf"] [unique_id "amsoo0MHVWqpHZopO5XBsAAAABk"], referer: https://tompalmer.co.uk/reading-for-pleasure-comprehension-challenge-pack/
[Thu Jul 30 11:34:12.064317 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.23:33542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:12.064955 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.23:33542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:12.525339 2026] [lsapi:warn] [pid 2904921:tid 2904921] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:12.712799 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.61:45322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:12.713423 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.61:45322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:12.718767 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.71:20622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:12.719444 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.71:20622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:13.368531 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.45:22456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:13.369153 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.45:22456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:13.578629 2026] [ssl:error] [pid 2910590:tid 2910590] (70014)End of file found: [client 216.73.216.199:60523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:13.952174 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.15:50772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:13.952797 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.15:50772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:14.219299 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.42:49098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:14.219962 2026] [authz_core:error] [pid 2903544:tid 2903544] [client 57.141.0.42:49098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:14.311133 2026] [security2:error] [pid 2913449:tid 2913449] [client 124.220.42.101:59122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.gangway-media.com"] [uri "/"] [unique_id "amsopt49rIygRSOgF9E51AAAADo"]
[Thu Jul 30 11:34:14.377039 2026] [authz_core:error] [pid 2913407:tid 2913407] [client 57.141.0.62:60168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:14.377679 2026] [authz_core:error] [pid 2913407:tid 2913407] [client 57.141.0.62:60168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:14.450986 2026] [ssl:error] [pid 2906567:tid 2906567] (EAI 2)Name or service not known: [client 144.76.19.72:47534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:14.451021 2026] [ssl:error] [pid 2906567:tid 2906567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:14.487613 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:6899] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:14.538313 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.64:55526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:14.538934 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.64:55526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:14.557908 2026] [ssl:error] [pid 2900705:tid 2900705] (EAI 2)Name or service not known: [client 144.76.19.72:47544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:14.557935 2026] [ssl:error] [pid 2900705:tid 2900705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:14.755833 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:14.758825 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:15.501987 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.7:63808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:15.502649 2026] [authz_core:error] [pid 2904879:tid 2904879] [client 57.141.0.7:63808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:15.580987 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.26:20092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:15.581990 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.26:20092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:15.725007 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.1:52612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:15.726306 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.1:52612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:15.964612 2026] [security2:error] [pid 2913407:tid 2913407] [client 119.45.7.86:60180] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.vain.band"] [uri "/"] [unique_id "amsop9iq9dxkamCghPyiWwAAABI"]
[Thu Jul 30 11:34:15.987184 2026] [ssl:error] [pid 2913449:tid 2913449] (70014)End of file found: [client 216.73.216.199:58171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:16.226509 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.67:32786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:16.227152 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.67:32786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:16.263568 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:16.266232 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:16.374658 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.4:47940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:16.375314 2026] [authz_core:error] [pid 2907141:tid 2907141] [client 57.141.0.4:47940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:16.515655 2026] [security2:error] [pid 2906988:tid 2906988] [client 18.199.86.73:50966] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ditchfest.com"] [uri "/.git/config"] [unique_id "amsoqFK4o6kHs2N6LC1HUAAAAAs"]
[Thu Jul 30 11:34:16.515912 2026] [security2:error] [pid 2906988:tid 2906988] [client 18.199.86.73:50966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ditchfest.com"] [uri "/.git/config"] [unique_id "amsoqFK4o6kHs2N6LC1HUAAAAAs"]
[Thu Jul 30 11:34:16.544778 2026] [security2:error] [pid 2906988:tid 2906988] [client 18.199.86.73:50966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ditchfest.com"] [uri "/403.shtml"] [unique_id "amsoqFK4o6kHs2N6LC1HUAAAAAs"]
[Thu Jul 30 11:34:17.048502 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.26:20100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:17.049211 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.26:20100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:17.153248 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.25:63086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:17.153957 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.25:63086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:17.454756 2026] [authz_core:error] [pid 2913294:tid 2913294] [client 57.141.0.40:39000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:17.455391 2026] [authz_core:error] [pid 2913294:tid 2913294] [client 57.141.0.40:39000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:17.609718 2026] [ssl:error] [pid 2908860:tid 2908860] (EAI 2)Name or service not known: [client 144.76.19.72:47574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:17.609749 2026] [ssl:error] [pid 2908860:tid 2908860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:17.639319 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.15:37308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:17.639957 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.15:37308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:17.664507 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:47580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:17.664544 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:18.101452 2026] [lsapi:warn] [pid 2907141:tid 2907141] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:18.126960 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:18.129713 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:18.361044 2026] [authz_core:error] [pid 2913409:tid 2913409] [client 57.141.0.7:63820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:18.361707 2026] [authz_core:error] [pid 2913409:tid 2913409] [client 57.141.0.7:63820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:18.677482 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.39:40708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:18.678191 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.39:40708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:18.753442 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.58:30192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:18.754142 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.58:30192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:18.757167 2026] [access_compat:error] [pid 2913294:tid 2913294] [client 69.91.136.202:19866] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2009/10/carl-fredricksen.jpg
[Thu Jul 30 11:34:18.757279 2026] [access_compat:error] [pid 2913294:tid 2913294] [client 69.91.136.202:19866] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:34:18.900996 2026] [ssl:error] [pid 2908860:tid 2908860] (70014)End of file found: [client 216.73.216.199:58757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:19.093302 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.19:45744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:19.093927 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.19:45744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:19.574822 2026] [access_compat:error] [pid 2910365:tid 2910365] [client 136.158.37.124:26641] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:34:19.669967 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.10:61910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:19.670603 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.10:61910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:19.918038 2026] [ssl:error] [pid 2913409:tid 2913409] (70014)End of file found: [client 216.73.216.199:63597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:20.104379 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:20.107074 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:20.240858 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.27:25078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:20.241507 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.27:25078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:20.311505 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.38:54368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:20.312563 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.38:54368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:20.615672 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.13:27366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:20.616297 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.13:27366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:20.751919 2026] [ssl:error] [pid 2880697:tid 2880697] (EAI 2)Name or service not known: [client 144.76.19.72:32564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:20.751949 2026] [ssl:error] [pid 2880697:tid 2880697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:20.807099 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:32572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:20.807124 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:20.825089 2026] [core:error] [pid 2910927:tid 2910927] (13)Permission denied: [client 216.73.216.199:25652] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/cache_dma
[Thu Jul 30 11:34:21.250259 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.37:21136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:21.250884 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.37:21136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:21.591130 2026] [security2:error] [pid 2880697:tid 2880697] [client 185.191.171.12:27576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7041.0.html"] [unique_id "amsorUfKsF_rbvGPcZbRyAAAAAc"]
[Thu Jul 30 11:34:21.664731 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.10:61928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:21.665476 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.10:61928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:21.799661 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:21.800149 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.2:49390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:21.800769 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.2:49390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:21.802334 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:22.134442 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.22:58584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:22.135077 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.22:58584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:22.171024 2026] [core:error] [pid 2909092:tid 2909092] (13)Permission denied: [client 216.73.216.199:30837] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/bin/sudo
[Thu Jul 30 11:34:22.446171 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.18:25332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:22.446894 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.18:25332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:22.488256 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.17:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:22.488883 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.17:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:22.498713 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:30837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:22.583218 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.56:54724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:22.583865 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.56:54724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:22.713222 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.7:63826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:22.713844 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.7:63826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:22.772705 2026] [ssl:error] [pid 2900705:tid 2900705] (70014)End of file found: [client 216.73.216.199:19077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:23.234841 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.48:27788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:23.235782 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.48:27788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:23.263601 2026] [lsapi:warn] [pid 2913449:tid 2913449] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:23.284958 2026] [ssl:error] [pid 2904921:tid 2904921] (70014)End of file found: [client 216.73.216.199:24215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:23.469293 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.60:28374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:23.469992 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.60:28374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:23.903703 2026] [ssl:error] [pid 2912360:tid 2912360] (EAI 2)Name or service not known: [client 144.76.19.72:32580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:23.903740 2026] [ssl:error] [pid 2912360:tid 2912360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:23.959835 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:32596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:23.959868 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:24.023760 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.52:46550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:24.024384 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.52:46550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:24.238261 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.36:21420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:24.238890 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.36:21420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:24.299812 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:24.302513 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:24.324683 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.8:49826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:24.325332 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.8:49826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:24.725226 2026] [lsapi:warn] [pid 2913410:tid 2913410] [client 216.73.216.90:42633] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:34:24.725268 2026] [lsapi:warn] [pid 2913410:tid 2913410] [client 216.73.216.90:42633] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:34:24.853183 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.62:21760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:24.853804 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.62:21760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:25.809797 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.48:27798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:25.810420 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.48:27798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:25.961811 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.59:34554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:25.962449 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.59:34554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:26.315244 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.41:40448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:26.315869 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.41:40448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:26.677466 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:26.680158 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:26.703958 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.61:48272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:26.704582 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.61:48272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:27.004952 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.71:41728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:27.005688 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.71:41728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:27.015833 2026] [ssl:error] [pid 2908860:tid 2908860] (EAI 2)Name or service not known: [client 144.76.19.72:32604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:27.015864 2026] [ssl:error] [pid 2908860:tid 2908860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:27.026298 2026] [security2:error] [pid 2913294:tid 2913294] [client 18.199.86.73:44816] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.brightredsocks.com"] [uri "/.git/config"] [unique_id "amsos_qxXflrzX93rhzrBQAAAAA"]
[Thu Jul 30 11:34:27.026487 2026] [security2:error] [pid 2913294:tid 2913294] [client 18.199.86.73:44816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.brightredsocks.com"] [uri "/.git/config"] [unique_id "amsos_qxXflrzX93rhzrBQAAAAA"]
[Thu Jul 30 11:34:27.052017 2026] [security2:error] [pid 2913294:tid 2913294] [client 18.199.86.73:44816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.brightredsocks.com"] [uri "/403.shtml"] [unique_id "amsos_qxXflrzX93rhzrBQAAAAA"]
[Thu Jul 30 11:34:27.073264 2026] [ssl:error] [pid 2906567:tid 2906567] (EAI 2)Name or service not known: [client 144.76.19.72:32620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:27.073295 2026] [ssl:error] [pid 2906567:tid 2906567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:27.195489 2026] [security2:error] [pid 2910927:tid 2910927] [client 85.208.96.195:53492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2656.0/prev_next,prev.html"] [unique_id "amsos7cxIFg0yXQ4oSu9RgAAACI"]
[Thu Jul 30 11:34:27.343031 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:27.345693 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:27.435154 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.42:59546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:27.435778 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.42:59546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:27.755468 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.47:44264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:27.756100 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.47:44264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:27.955904 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.26:57130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:27.956547 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.26:57130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:28.139152 2026] [ssl:error] [pid 2913294:tid 2913294] (70014)End of file found: [client 216.73.216.199:58095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:28.563047 2026] [lsapi:warn] [pid 2906567:tid 2906567] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:28.589246 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.43:59874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:28.589873 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.43:59874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:28.624942 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.68:61248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:28.625588 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.68:61248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:29.150578 2026] [ssl:error] [pid 2910870:tid 2910870] (70014)End of file found: [client 216.73.216.199:2047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:29.327187 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.71:41738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:29.327825 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.71:41738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:29.370196 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:29.372856 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:29.485591 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.20:49696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:29.486213 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.20:49696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:29.664143 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.33:57432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:29.664792 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.33:57432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:29.758298 2026] [ssl:error] [pid 2889424:tid 2889424] (70014)End of file found: [client 216.73.216.199:65382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:29.866516 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.34:49168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:29.867166 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.34:49168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:30.153392 2026] [ssl:error] [pid 2900744:tid 2900744] (EAI 2)Name or service not known: [client 144.76.19.72:59200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:30.153436 2026] [ssl:error] [pid 2900744:tid 2900744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:30.207788 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:59202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:30.207819 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:30.491600 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.32:63578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:30.492221 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.32:63578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:30.493038 2026] [access_compat:error] [pid 2913442:tid 2913442] [client 136.158.37.124:27450] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:34:30.578475 2026] [security2:error] [pid 2904780:tid 2904780] [client 114.119.142.20:45389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~19-7-2018"] [unique_id "amsotpVCPX_9h35gKU_1IAAAAAU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1530399600/cat_ids%7E19/request_format%7Ehtml
[Thu Jul 30 11:34:30.751941 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.47:44270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:30.752578 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.47:44270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:30.821290 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.6:46822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:30.821930 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.6:46822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:31.064757 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:31.067449 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:31.741146 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.60:57300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:31.741775 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.60:57300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:32.025057 2026] [security2:error] [pid 2913443:tid 2913443] [client 114.119.142.20:45399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~19-7-2018"] [unique_id "amsouHvqa0dtEs96CW3ZdgAAACU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1530399600/cat_ids%7E19/request_format%7Ehtml
[Thu Jul 30 11:34:32.312945 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.10:65362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:32.313583 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.10:65362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:32.605977 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.16:63328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:32.606620 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.16:63328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:32.643460 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.41:40474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:32.644092 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.41:40474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:32.762736 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.43:47320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:32.763359 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.43:47320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:32.835194 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.53:43886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:32.835810 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.53:43886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:32.976186 2026] [security2:error] [pid 2897697:tid 2897697] [client 85.208.96.203:26222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/chopped-cheese-recipe-kenji"] [unique_id "amsouLad_Mf7L1swxrzYzQAAAAE"]
[Thu Jul 30 11:34:33.261304 2026] [ssl:error] [pid 2913445:tid 2913445] (EAI 2)Name or service not known: [client 144.76.19.72:59212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:33.261343 2026] [ssl:error] [pid 2913445:tid 2913445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:33.307798 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:33.310468 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:33.319004 2026] [ssl:error] [pid 2913407:tid 2913407] (EAI 2)Name or service not known: [client 144.76.19.72:59216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:33.319038 2026] [ssl:error] [pid 2913407:tid 2913407] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:33.507400 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.18:23180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:33.508027 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.18:23180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:33.548792 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.4:32092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:33.549450 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.4:32092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:33.642031 2026] [ssl:error] [pid 2913294:tid 2913294] (70014)End of file found: [client 216.73.216.199:53946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:33.906582 2026] [lsapi:warn] [pid 2913445:tid 2913445] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:34.346696 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.41:24204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:34.347324 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.41:24204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:34.591957 2026] [ssl:error] [pid 2904780:tid 2904780] (70014)End of file found: [client 216.73.216.199:37215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:34.621790 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.58:56614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:34.622415 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.58:56614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:34.630134 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.58:56630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:34.630751 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.58:56630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:34.645794 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.46:36934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:34.646414 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.46:36934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:34.731135 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:34.733812 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 66.249.66.33:38787] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:35.081921 2026] [security2:error] [pid 2910365:tid 2910365] [client 110.249.201.136:25904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amsouzROSlNKP7EUPT4LoQAAAA4"]
[Thu Jul 30 11:34:35.157608 2026] [ssl:error] [pid 2913443:tid 2913443] (70014)End of file found: [client 216.73.216.199:48263] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:35.250139 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.33:21048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:35.250784 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.33:21048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:35.560566 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.22:48414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:35.561192 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.22:48414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:36.127696 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.4:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:36.128326 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.4:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:36.328000 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.44:57572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:36.328640 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.44:57572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:36.447164 2026] [ssl:error] [pid 2910365:tid 2910365] (EAI 2)Name or service not known: [client 144.76.19.72:59228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:36.447197 2026] [ssl:error] [pid 2910365:tid 2910365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:36.503442 2026] [ssl:error] [pid 2909095:tid 2909095] (EAI 2)Name or service not known: [client 144.76.19.72:59242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:36.503468 2026] [ssl:error] [pid 2909095:tid 2909095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:36.552919 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.9:32632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:36.553578 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.9:32632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:36.580249 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.61:54130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:36.580875 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.61:54130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:37.731700 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.6:25286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:37.732347 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.6:25286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:37.759241 2026] [core:error] [pid 2910813:tid 2910813] [client 66.249.64.170:43883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:34:37.759274 2026] [core:error] [pid 2910813:tid 2910813] [client 66.249.64.170:43883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:34:38.248923 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.59:44528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:38.249566 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.59:44528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:38.393932 2026] [lsapi:error] [pid 2907139:tid 2907139] [client 216.73.216.223:59026] [host www.bigbangburgerbar.co.uk] Connect to backend failed with CONNECTION_RESET on sending request(GET /Forum/index.php/board,137.320/sort,last_post/desc.html HTTP/1.1); uri(/Forum/index.php/board,137.320/sort,last_post/desc.html): ReceiveAckHdr: backend reset connection: errno 104 (possibly memlimit for LVE ID 1015 with UID 1015 too small), check http://docs.cloudlinux.com/mod_lsapi_troubleshooting.html
[Thu Jul 30 11:34:38.433253 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.31:46780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:38.433900 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.31:46780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:38.456796 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.22:58116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:38.457413 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.22:58116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:38.844051 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.45:24406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:38.844686 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.45:24406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:38.902302 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.7:35042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:38.902921 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.7:35042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:39.065391 2026] [lsapi:warn] [pid 2910813:tid 2910813] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:39.520815 2026] [ssl:error] [pid 2893302:tid 2893302] (70014)End of file found: [client 216.73.216.199:46071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:39.560924 2026] [ssl:error] [pid 2913410:tid 2913410] (EAI 2)Name or service not known: [client 144.76.19.72:49556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:39.560983 2026] [ssl:error] [pid 2913410:tid 2913410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:39.602157 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 169.58.39.191:49967] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:34:39.612948 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.39:49700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:39.613610 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.39:49700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:39.619395 2026] [ssl:error] [pid 2910590:tid 2910590] (EAI 2)Name or service not known: [client 144.76.19.72:49562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:39.619429 2026] [ssl:error] [pid 2910590:tid 2910590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:39.693476 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.58:56632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:39.694144 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.58:56632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:40.028092 2026] [ssl:error] [pid 2913449:tid 2913449] (70014)End of file found: [client 216.73.216.199:1952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:34:40.263720 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.42:63256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:40.264340 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.42:63256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:40.802649 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.48:50162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:40.803271 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.48:50162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:41.301936 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.45:24408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:41.302569 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.45:24408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:41.325474 2026] [access_compat:error] [pid 2904921:tid 2904921] [client 136.158.37.124:28399] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:34:41.441652 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.67:27402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:41.442313 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.67:27402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:41.581391 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.22:58126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:41.582021 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.22:58126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:41.832716 2026] [access_compat:error] [pid 2908936:tid 2908936] [client 45.158.164.139:55298] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:34:42.047481 2026] [authz_core:error] [pid 2913407:tid 2913407] [client 57.141.0.27:36310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:42.048122 2026] [authz_core:error] [pid 2913407:tid 2913407] [client 57.141.0.27:36310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:42.306763 2026] [authz_core:error] [pid 2913443:tid 2913443] [client 57.141.0.67:27404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:42.307383 2026] [authz_core:error] [pid 2913443:tid 2913443] [client 57.141.0.67:27404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:42.548753 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.47:49528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:42.549383 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.47:49528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:42.674457 2026] [ssl:error] [pid 2910873:tid 2910873] (EAI 2)Name or service not known: [client 144.76.19.72:49578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:42.674491 2026] [ssl:error] [pid 2910873:tid 2910873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:42.729568 2026] [ssl:error] [pid 2913446:tid 2913446] (EAI 2)Name or service not known: [client 144.76.19.72:49586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:42.729607 2026] [ssl:error] [pid 2913446:tid 2913446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:42.965494 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.11:51652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:42.966137 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.11:51652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:43.041640 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.39:49706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:43.042263 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.39:49706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:43.178852 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 169.58.39.191:51512] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:34:43.993492 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.61:61800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:43.994128 2026] [authz_core:error] [pid 2913446:tid 2913446] [client 57.141.0.61:61800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:44.218029 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.28:50328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:44.218662 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.28:50328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:44.611220 2026] [lsapi:warn] [pid 2880697:tid 2880697] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:44.631420 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.8:29384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:44.632058 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.8:29384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:45.044288 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.28:50338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:45.044913 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.28:50338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:45.109459 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.54:58160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:45.110095 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.54:58160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:45.481298 2026] [core:error] [pid 2914481:tid 2914481] [client 57.141.0.68:28708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:34:45.481324 2026] [core:error] [pid 2914481:tid 2914481] [client 57.141.0.68:28708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:34:45.784812 2026] [ssl:error] [pid 2910930:tid 2910930] (EAI 2)Name or service not known: [client 144.76.19.72:49588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:45.784840 2026] [ssl:error] [pid 2910930:tid 2910930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:45.834972 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.9:26060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:45.835600 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.9:26060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:45.838045 2026] [ssl:error] [pid 2907082:tid 2907082] (EAI 2)Name or service not known: [client 144.76.19.72:49598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:45.838064 2026] [ssl:error] [pid 2907082:tid 2907082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:45.990770 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.38:20778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:45.991391 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.38:20778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:46.097401 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 51.120.83.160:9721] AH01630: client denied by server configuration: /home/wurlitze/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 11:34:46.101560 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.17:40712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:46.102176 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.17:40712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:46.173165 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 169.58.39.191:52906] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:34:46.360228 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.17:40722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:46.360868 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.17:40722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:46.613779 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.2:32050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:46.614400 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.2:32050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:46.650669 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:46.653329 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:47.354157 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 57.141.0.4:45280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:47.354778 2026] [authz_core:error] [pid 2910985:tid 2910985] [client 57.141.0.4:45280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:47.643386 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.67:27416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:47.644003 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.67:27416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:47.663583 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.48:50178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:47.664208 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.48:50178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:47.692725 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:47.695386 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:47.947380 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 66.249.66.33:54229] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:47.950041 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 66.249.66.33:54229] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:48.006051 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.37:21774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:48.007135 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.37:21774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:48.086999 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.27:36326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:48.087671 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.27:36326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:48.773684 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.63:45050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:48.774336 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.63:45050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:48.892779 2026] [ssl:error] [pid 2913447:tid 2913447] (EAI 2)Name or service not known: [client 144.76.19.72:49608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:48.892824 2026] [ssl:error] [pid 2913447:tid 2913447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:48.969811 2026] [ssl:error] [pid 2915009:tid 2915009] (EAI 2)Name or service not known: [client 144.76.19.72:49614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:48.969840 2026] [ssl:error] [pid 2915009:tid 2915009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:48.971467 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.68:62576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:48.972094 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.68:62576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:48.980950 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.1:37356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:48.981584 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.1:37356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:49.306287 2026] [security2:error] [pid 2913447:tid 2913447] [client 43.228.157.102:51114] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/.git/config"] [unique_id "amsoycAXzYxON6TFElLXYwAAADM"]
[Thu Jul 30 11:34:49.306528 2026] [security2:error] [pid 2913447:tid 2913447] [client 43.228.157.102:51114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/.git/config"] [unique_id "amsoycAXzYxON6TFElLXYwAAADM"]
[Thu Jul 30 11:34:49.343039 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 169.58.39.191:54286] AH01630: client denied by server configuration: /home/luntmxm/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:34:49.441718 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.53:63442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:49.442338 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.53:63442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:49.538337 2026] [lsapi:warn] [pid 2908860:tid 2908860] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:49.551713 2026] [security2:error] [pid 2913447:tid 2913447] [client 43.228.157.102:51114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/index.php"] [unique_id "amsoycAXzYxON6TFElLXYwAAADM"]
[Thu Jul 30 11:34:49.687944 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.56:34410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:49.688571 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.56:34410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:49.805657 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:49.808436 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:50.495789 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.32:51218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:50.496413 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.32:51218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:50.848410 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.56:34420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:50.849036 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.56:34420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:51.410389 2026] [authz_core:error] [pid 2915009:tid 2915009] [client 57.141.0.7:63458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:51.411176 2026] [authz_core:error] [pid 2915009:tid 2915009] [client 57.141.0.7:63458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:51.591303 2026] [security2:error] [pid 2910873:tid 2910873] [client 18.199.86.73:57368] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsoy8aFUWqsdbTZAJrgQwAAABw"]
[Thu Jul 30 11:34:51.591502 2026] [security2:error] [pid 2910873:tid 2910873] [client 18.199.86.73:57368] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsoy8aFUWqsdbTZAJrgQwAAABw"]
[Thu Jul 30 11:34:51.617166 2026] [security2:error] [pid 2910873:tid 2910873] [client 18.199.86.73:57368] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.freakorgeek.com"] [uri "/403.shtml"] [unique_id "amsoy8aFUWqsdbTZAJrgQwAAABw"]
[Thu Jul 30 11:34:51.688551 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.9:30326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:51.689188 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.9:30326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:51.939864 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.32:51220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:51.940489 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.32:51220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:52.022208 2026] [ssl:error] [pid 2914057:tid 2914057] (EAI 2)Name or service not known: [client 144.76.19.72:53494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:52.022245 2026] [ssl:error] [pid 2914057:tid 2914057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:52.078267 2026] [ssl:error] [pid 2909095:tid 2909095] (EAI 2)Name or service not known: [client 144.76.19.72:53500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:52.078296 2026] [ssl:error] [pid 2909095:tid 2909095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:52.181712 2026] [access_compat:error] [pid 2914802:tid 2914802] [client 136.158.37.124:29230] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:34:52.460721 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:52.463444 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:52.464930 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.69:60438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:52.465560 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.69:60438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:52.675240 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.7:63460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:52.676211 2026] [authz_core:error] [pid 2908860:tid 2908860] [client 57.141.0.7:63460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:52.761602 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.47:48444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:52.762233 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.47:48444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:52.940808 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.52:36854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:52.941438 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.52:36854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:52.996352 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.24:55108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:52.996976 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.24:55108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:54.211333 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.63:45066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:54.211957 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.63:45066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:54.291424 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:54.294378 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:54.364141 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.34:26814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:54.365194 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.34:26814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:54.751447 2026] [core:error] [pid 2913449:tid 2913449] (13)Permission denied: [client 216.73.216.199:21444] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/mailips
[Thu Jul 30 11:34:55.133183 2026] [ssl:error] [pid 2910590:tid 2910590] (EAI 2)Name or service not known: [client 144.76.19.72:53510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:55.133210 2026] [ssl:error] [pid 2910590:tid 2910590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:55.185727 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:53516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:55.185770 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:55.235308 2026] [lsapi:warn] [pid 2913442:tid 2913442] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:34:55.269094 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:55.271750 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:55.351651 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.48:52284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:55.352281 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.48:52284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:55.571295 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.27:36060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:55.571928 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.27:36060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:55.866193 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.28:25358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:55.866808 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.28:25358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:55.972128 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.51:63836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:55.972747 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.51:63836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:56.041634 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.33:41806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:56.042337 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.33:41806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:56.483265 2026] [security2:error] [pid 2915445:tid 2915445] [client 18.199.86.73:58378] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.borovetsexpress.com"] [uri "/.git/config"] [unique_id "amso0JkPj5P0Y3TOtUm1QgAAABM"]
[Thu Jul 30 11:34:56.483504 2026] [security2:error] [pid 2915445:tid 2915445] [client 18.199.86.73:58378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.borovetsexpress.com"] [uri "/.git/config"] [unique_id "amso0JkPj5P0Y3TOtUm1QgAAABM"]
[Thu Jul 30 11:34:56.510172 2026] [security2:error] [pid 2915445:tid 2915445] [client 18.199.86.73:58378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.borovetsexpress.com"] [uri "/403.shtml"] [unique_id "amso0JkPj5P0Y3TOtUm1QgAAABM"]
[Thu Jul 30 11:34:56.551193 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.33:41816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:56.551875 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.33:41816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:56.791152 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.7:36402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:56.791823 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.7:36402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:56.914151 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:56.916807 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:57.059439 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.35:35350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:57.060099 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.35:35350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:57.306180 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.10:54444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:57.306804 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.10:54444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:57.564326 2026] [security2:error] [pid 2880697:tid 2880697] [client 18.199.86.73:58392] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.broadbentandsmith.com"] [uri "/.git/config"] [unique_id "amso0UfKsF_rbvGPcZbR2AAAAAc"]
[Thu Jul 30 11:34:57.564533 2026] [security2:error] [pid 2880697:tid 2880697] [client 18.199.86.73:58392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.broadbentandsmith.com"] [uri "/.git/config"] [unique_id "amso0UfKsF_rbvGPcZbR2AAAAAc"]
[Thu Jul 30 11:34:57.590498 2026] [security2:error] [pid 2880697:tid 2880697] [client 18.199.86.73:58392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.broadbentandsmith.com"] [uri "/403.shtml"] [unique_id "amso0UfKsF_rbvGPcZbR2AAAAAc"]
[Thu Jul 30 11:34:57.591901 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.54:45478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:57.592532 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.54:45478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:57.801451 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.54:45486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:57.802084 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.54:45486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:57.892993 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.61:39826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:57.893654 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.61:39826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:58.239039 2026] [ssl:error] [pid 2908936:tid 2908936] (EAI 2)Name or service not known: [client 144.76.19.72:53526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:58.239090 2026] [ssl:error] [pid 2908936:tid 2908936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:58.281554 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.31:24762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:58.282187 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.31:24762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:58.290898 2026] [ssl:error] [pid 2908936:tid 2908936] (EAI 2)Name or service not known: [client 144.76.19.72:53536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:34:58.290923 2026] [ssl:error] [pid 2908936:tid 2908936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:34:58.738270 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:34:58.740933 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 66.249.66.33:45502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:34:59.065103 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.39:60624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:59.065752 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.39:60624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:59.396108 2026] [security2:error] [pid 2910365:tid 2910365] [client 74.7.227.159:40918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "eganconsulting.co.uk"] [uri "/"] [unique_id "amso0zROSlNKP7EUPT4LqgAAAA4"]
[Thu Jul 30 11:34:59.452925 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.43:45408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:59.453564 2026] [authz_core:error] [pid 2908936:tid 2908936] [client 57.141.0.43:45408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:59.637080 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.3:47872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:59.637708 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.3:47872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:34:59.770925 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.66:48840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:34:59.771563 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.66:48840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:00.001380 2026] [security2:error] [pid 2908936:tid 2908936] [client 43.135.186.135:40142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amso1Ck4hqPsq4MuS-06dgAAACw"]
[Thu Jul 30 11:35:00.066546 2026] [lsapi:warn] [pid 2910365:tid 2910365] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:00.123768 2026] [security2:error] [pid 2909092:tid 2909092] [client 18.199.86.73:58404] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.davidebell.com"] [uri "/.git/config"] [unique_id "amso1Bd20lWHU4VqEQpd8wAAAEo"]
[Thu Jul 30 11:35:00.123961 2026] [security2:error] [pid 2909092:tid 2909092] [client 18.199.86.73:58404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.davidebell.com"] [uri "/.git/config"] [unique_id "amso1Bd20lWHU4VqEQpd8wAAAEo"]
[Thu Jul 30 11:35:00.151549 2026] [security2:error] [pid 2909092:tid 2909092] [client 18.199.86.73:58404] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.davidebell.com"] [uri "/403.shtml"] [unique_id "amso1Bd20lWHU4VqEQpd8wAAAEo"]
[Thu Jul 30 11:35:00.155668 2026] [core:error] [pid 2900744:tid 2900744] [client 57.141.0.61:27566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:00.155692 2026] [core:error] [pid 2900744:tid 2900744] [client 57.141.0.61:27566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:01.110427 2026] [ssl:error] [pid 2913449:tid 2913449] (70014)End of file found: [client 216.73.216.199:21444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:01.214411 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.35:53438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:01.215054 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.35:53438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:01.376151 2026] [ssl:error] [pid 2913443:tid 2913443] (EAI 2)Name or service not known: [client 144.76.19.72:64908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:01.376199 2026] [ssl:error] [pid 2913443:tid 2913443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:01.409288 2026] [security2:error] [pid 2894614:tid 2894614] [client 43.135.186.135:41128] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amso1e4SC_T7ljpY8Ie_fAAAAC0"], referer: http://rogersbarbershopltd.co.uk
[Thu Jul 30 11:35:01.417466 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.65:63494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:01.418101 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.65:63494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:01.432714 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:64918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:01.432737 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:01.496962 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.60:56842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:01.497688 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.60:56842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:01.552390 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.10:54454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:01.553008 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.10:54454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:01.669619 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 66.249.66.35:50538] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:01.672300 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 66.249.66.35:50538] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:01.721276 2026] [core:error] [pid 2908860:tid 2908860] (13)Permission denied: [client 216.73.216.199:64913] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/hwcache_align
[Thu Jul 30 11:35:01.932372 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.59:45900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:01.933002 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.59:45900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:02.155788 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.67:33742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:02.156459 2026] [authz_core:error] [pid 2913363:tid 2913363] [client 57.141.0.67:33742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:02.312297 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.36:28258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:02.312918 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.36:28258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:02.615982 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 66.249.66.34:44442] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:02.618788 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 66.249.66.34:44442] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:02.674121 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.67:33744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:02.674739 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.67:33744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:02.776474 2026] [security2:error] [pid 2910929:tid 2910929] [client 85.208.96.206:60454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4282.0/prev_next,next.html"] [unique_id "amso1sZW-msSwM_NmOUMVwAAACY"]
[Thu Jul 30 11:35:02.925138 2026] [ssl:error] [pid 2908860:tid 2908860] (70014)End of file found: [client 216.73.216.199:64913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:02.987524 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.38:49374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:02.988145 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.38:49374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:03.053044 2026] [access_compat:error] [pid 2907082:tid 2907082] [client 136.158.37.124:30093] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:35:03.597934 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.30:37912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:03.598570 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.30:37912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:04.320458 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 66.249.66.34:44442] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:04.324280 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 66.249.66.34:44442] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:04.355650 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.64:62800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:04.356279 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.64:62800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:04.356968 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.12:26010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:04.357581 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.12:26010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:04.434003 2026] [core:error] [pid 2913363:tid 2913363] (13)Permission denied: [client 216.73.216.199:24660] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/software/subsystem/drivers_probe
[Thu Jul 30 11:35:04.484318 2026] [ssl:error] [pid 2910870:tid 2910870] (EAI 2)Name or service not known: [client 144.76.19.72:64934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:04.484350 2026] [ssl:error] [pid 2910870:tid 2910870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:04.540226 2026] [ssl:error] [pid 2912360:tid 2912360] (EAI 2)Name or service not known: [client 144.76.19.72:64950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:04.540259 2026] [ssl:error] [pid 2912360:tid 2912360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:04.735616 2026] [ssl:error] [pid 2913363:tid 2913363] (70014)End of file found: [client 216.73.216.199:24660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:04.898551 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.68:59142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:04.899173 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.68:59142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:04.975279 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.40:55598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:04.975900 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.40:55598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:05.119735 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.61:27568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:05.120371 2026] [authz_core:error] [pid 2910870:tid 2910870] [client 57.141.0.61:27568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:05.604648 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.26:43268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:05.605271 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.26:43268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:05.705645 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.40:55602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:05.706273 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.40:55602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:05.920449 2026] [lsapi:warn] [pid 2900705:tid 2900705] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:06.273318 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.60:43184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:06.273967 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.60:43184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:06.758199 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.42:60748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:06.758819 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.42:60748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:07.569615 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.27:55656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:07.570260 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.27:55656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:07.597785 2026] [ssl:error] [pid 2913447:tid 2913447] (EAI 2)Name or service not known: [client 144.76.19.72:64962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:07.597814 2026] [ssl:error] [pid 2913447:tid 2913447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:07.655113 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:64966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:07.655158 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:07.778341 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.38:49382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:07.778967 2026] [authz_core:error] [pid 2913449:tid 2913449] [client 57.141.0.38:49382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:07.797862 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.30:37918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:07.798482 2026] [authz_core:error] [pid 2913447:tid 2913447] [client 57.141.0.30:37918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:08.044615 2026] [authz_core:error] [pid 2913407:tid 2913407] [client 57.141.0.28:62090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:08.045231 2026] [authz_core:error] [pid 2913407:tid 2913407] [client 57.141.0.28:62090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:08.645704 2026] [ssl:error] [pid 2915577:tid 2915577] (70014)End of file found: [client 216.73.216.199:49544] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:08.891405 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.13:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:08.892022 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.13:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:08.937038 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.1:50622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:08.937674 2026] [authz_core:error] [pid 2880697:tid 2880697] [client 57.141.0.1:50622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:08.958233 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.61:27572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:08.958853 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.61:27572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:09.251921 2026] [ssl:error] [pid 2910590:tid 2910590] (70014)End of file found: [client 216.73.216.199:58561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:09.360439 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.20:45906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:09.361074 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.20:45906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:10.235862 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 66.249.66.34:62565] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:10.238543 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 66.249.66.34:62565] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:10.548962 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.10:57434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:10.549596 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.10:57434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:10.560940 2026] [lsapi:warn] [pid 2911549:tid 2911549] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:10.709417 2026] [ssl:error] [pid 2915532:tid 2915532] (EAI 2)Name or service not known: [client 144.76.19.72:25326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:10.709456 2026] [ssl:error] [pid 2915532:tid 2915532] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:10.762644 2026] [ssl:error] [pid 2915009:tid 2915009] (EAI 2)Name or service not known: [client 144.76.19.72:25342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:10.762670 2026] [ssl:error] [pid 2915009:tid 2915009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:10.825039 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.49:45738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:10.825674 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.49:45738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:10.868240 2026] [access_compat:error] [pid 2910983:tid 2910983] [client 66.132.195.49:39644] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/
[Thu Jul 30 11:35:10.868387 2026] [access_compat:error] [pid 2910983:tid 2910983] [client 66.132.195.49:39644] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:35:10.884364 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.26:43284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:10.884982 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.26:43284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:11.215199 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 66.249.66.33:37989] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:11.217865 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 66.249.66.33:37989] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:11.399637 2026] [core:error] [pid 2910985:tid 2910985] [client 57.141.0.66:64064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:11.399660 2026] [core:error] [pid 2910985:tid 2910985] [client 57.141.0.66:64064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:11.665315 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:11.668024 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:11.709141 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.44:63984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:11.709772 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.44:63984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:12.562035 2026] [security2:error] [pid 2904780:tid 2904780] [client 94.154.43.184:42382] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jasperandtroy.co.uk"] [uri "/.env"] [unique_id "amso4JVCPX_9h35gKU_1LwAAAAU"]
[Thu Jul 30 11:35:12.562256 2026] [security2:error] [pid 2904780:tid 2904780] [client 94.154.43.184:42382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jasperandtroy.co.uk"] [uri "/.env"] [unique_id "amso4JVCPX_9h35gKU_1LwAAAAU"]
[Thu Jul 30 11:35:12.562465 2026] [security2:error] [pid 2904780:tid 2904780] [client 94.154.43.184:42382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jasperandtroy.co.uk"] [uri "/.env"] [unique_id "amso4JVCPX_9h35gKU_1LwAAAAU"]
[Thu Jul 30 11:35:12.577054 2026] [security2:error] [pid 2910873:tid 2910873] [client 94.154.43.185:39292] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "robin64.co.uk"] [uri "/.env"] [unique_id "amso4MaFUWqsdbTZAJrgfAAAABw"]
[Thu Jul 30 11:35:12.577254 2026] [security2:error] [pid 2910873:tid 2910873] [client 94.154.43.185:39292] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "robin64.co.uk"] [uri "/.env"] [unique_id "amso4MaFUWqsdbTZAJrgfAAAABw"]
[Thu Jul 30 11:35:12.577445 2026] [security2:error] [pid 2910873:tid 2910873] [client 94.154.43.185:39292] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "robin64.co.uk"] [uri "/.env"] [unique_id "amso4MaFUWqsdbTZAJrgfAAAABw"]
[Thu Jul 30 11:35:13.817556 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:25350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:13.817586 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:13.870795 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:25356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:13.870824 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:13.946388 2026] [access_compat:error] [pid 2913410:tid 2913410] [client 136.158.37.124:30907] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:35:14.174203 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.23:30838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:14.174832 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.23:30838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:14.370371 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.4:36476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:14.370999 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.4:36476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:14.733859 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:14.736528 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:15.021766 2026] [ssl:error] [pid 2900744:tid 2900744] (70014)End of file found: [client 216.73.216.199:49313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:15.387412 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.62:60230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:15.388037 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.62:60230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:15.778343 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.71:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:15.778961 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.71:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:15.924744 2026] [ssl:error] [pid 2910813:tid 2910813] (70014)End of file found: [client 216.73.216.199:42548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:16.248599 2026] [security2:error] [pid 2910930:tid 2910930] [client 102.93.11.40:37757] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amso5EzpbXMEv6GDMwXe2wAAACc"]
[Thu Jul 30 11:35:16.248645 2026] [security2:error] [pid 2910930:tid 2910930] [client 102.93.11.40:37757] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amso5EzpbXMEv6GDMwXe2wAAACc"]
[Thu Jul 30 11:35:16.248903 2026] [security2:error] [pid 2910930:tid 2910930] [client 102.93.11.40:37757] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amso5EzpbXMEv6GDMwXe2wAAACc"]
[Thu Jul 30 11:35:16.310319 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.10:45062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:16.310933 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.10:45062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:16.315934 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:16.318594 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:16.530134 2026] [lsapi:warn] [pid 2904921:tid 2904921] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:16.923988 2026] [ssl:error] [pid 2900705:tid 2900705] (EAI 2)Name or service not known: [client 144.76.19.72:25368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:16.924015 2026] [ssl:error] [pid 2900705:tid 2900705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:16.929783 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.43:30026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:16.930411 2026] [authz_core:error] [pid 2910873:tid 2910873] [client 57.141.0.43:30026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:16.977116 2026] [ssl:error] [pid 2913446:tid 2913446] (EAI 2)Name or service not known: [client 144.76.19.72:25380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:16.977145 2026] [ssl:error] [pid 2913446:tid 2913446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:16.994374 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.32:54362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:16.994994 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.32:54362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:17.135359 2026] [ssl:error] [pid 2907139:tid 2907139] (70014)End of file found: [client 216.73.216.199:10237] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:17.245653 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.24:23122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:17.246280 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.24:23122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:17.288351 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.67:41934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:17.289049 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.67:41934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:17.598661 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.10:45070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:17.599286 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.10:45070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:17.860553 2026] [core:error] [pid 2904921:tid 2904921] [client 66.249.66.196:57467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:17.860579 2026] [core:error] [pid 2904921:tid 2904921] [client 66.249.66.196:57467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:18.643204 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.6:53378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:18.643710 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.31:48928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:18.643830 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.6:53378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:18.644317 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.31:48928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:18.847803 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.54:63842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:18.848422 2026] [authz_core:error] [pid 2909090:tid 2909090] [client 57.141.0.54:63842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:19.383970 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.10:45074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:19.384596 2026] [authz_core:error] [pid 2894614:tid 2894614] [client 57.141.0.10:45074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:19.471940 2026] [authz_core:error] [pid 2915009:tid 2915009] [client 57.141.0.49:32126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:19.472572 2026] [authz_core:error] [pid 2915009:tid 2915009] [client 57.141.0.49:32126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:19.841181 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:19.843863 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:20.029993 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:51008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:20.030020 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:20.084745 2026] [ssl:error] [pid 2904780:tid 2904780] (EAI 2)Name or service not known: [client 144.76.19.72:51010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:20.084782 2026] [ssl:error] [pid 2904780:tid 2904780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:20.231099 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.67:27554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:20.231721 2026] [authz_core:error] [pid 2909095:tid 2909095] [client 57.141.0.67:27554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:20.336324 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.68:57036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:20.336945 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.68:57036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:20.827286 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.29:36132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:20.827904 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.29:36132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:21.101910 2026] [lsapi:warn] [pid 2915009:tid 2915009] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:21.301671 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.42:33254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:21.302299 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.42:33254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:21.327634 2026] [security2:error] [pid 2904780:tid 2904780] [client 178.73.74.136:62072] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amso6ZVCPX_9h35gKU_1NgAAAAU"]
[Thu Jul 30 11:35:21.327675 2026] [security2:error] [pid 2904780:tid 2904780] [client 178.73.74.136:62072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amso6ZVCPX_9h35gKU_1NgAAAAU"]
[Thu Jul 30 11:35:21.327893 2026] [security2:error] [pid 2904780:tid 2904780] [client 178.73.74.136:62072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amso6ZVCPX_9h35gKU_1NgAAAAU"]
[Thu Jul 30 11:35:21.650672 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.19:36616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:21.651306 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.19:36616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:22.052967 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:22.055720 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:22.201162 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.9:32586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:22.201784 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.9:32586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:22.259755 2026] [ssl:error] [pid 2916060:tid 2916060] (70014)End of file found: [client 216.73.216.199:38931] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:22.277394 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.65:62868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:22.278018 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.65:62868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:22.348962 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.71:51048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:22.349615 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.71:51048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:22.914905 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.30:29384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:22.915539 2026] [authz_core:error] [pid 2904780:tid 2904780] [client 57.141.0.30:29384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:23.043226 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:23.045899 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:23.060881 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.39:62978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:23.061507 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.39:62978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:23.140487 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:51022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:23.140530 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:23.193633 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:51036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:23.193666 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:23.651539 2026] [security2:error] [pid 2900705:tid 2900705] [client 216.73.216.199:50706] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libaudit.conf"] [unique_id "amso64GaJiq8PpDg6_AZwQAAAAQ"]
[Thu Jul 30 11:35:23.651838 2026] [security2:error] [pid 2900705:tid 2900705] [client 216.73.216.199:50706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libaudit.conf"] [unique_id "amso64GaJiq8PpDg6_AZwQAAAAQ"]
[Thu Jul 30 11:35:23.652046 2026] [security2:error] [pid 2900705:tid 2900705] [client 216.73.216.199:50706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libaudit.conf"] [unique_id "amso64GaJiq8PpDg6_AZwQAAAAQ"]
[Thu Jul 30 11:35:23.791239 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.58:61964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:23.791861 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.58:61964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:23.928983 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.68:57050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:23.929622 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.68:57050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:24.229254 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.31:48940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:24.229649 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.10:45094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:24.229883 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.31:48940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:24.230263 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.10:45094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:24.239941 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.15:64818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:24.240579 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.15:64818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:24.825660 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.51:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:24.826284 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.51:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:24.848603 2026] [ssl:error] [pid 2915532:tid 2915532] (70014)End of file found: [client 216.73.216.199:48591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:25.149833 2026] [core:error] [pid 2900705:tid 2900705] (13)Permission denied: [client 216.73.216.199:50706] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/alloc_calls
[Thu Jul 30 11:35:25.172082 2026] [access_compat:error] [pid 2910590:tid 2910590] [client 136.158.37.124:31705] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:35:25.301914 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.6:44142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:25.302541 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.6:44142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:25.757605 2026] [ssl:error] [pid 2900705:tid 2900705] (70014)End of file found: [client 216.73.216.199:50706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:25.874157 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.60:64528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:25.874777 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.60:64528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:26.249191 2026] [ssl:error] [pid 2916866:tid 2916866] (EAI 2)Name or service not known: [client 144.76.19.72:51048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:26.249231 2026] [ssl:error] [pid 2916866:tid 2916866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:26.301360 2026] [ssl:error] [pid 2916525:tid 2916525] (EAI 2)Name or service not known: [client 144.76.19.72:51052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:26.301388 2026] [ssl:error] [pid 2916525:tid 2916525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:26.540682 2026] [security2:error] [pid 2916525:tid 2916525] [client 37.236.73.8:30604] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amso7k4v1uGwh1--PitZuQAAAAc"]
[Thu Jul 30 11:35:26.540727 2026] [security2:error] [pid 2916525:tid 2916525] [client 37.236.73.8:30604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amso7k4v1uGwh1--PitZuQAAAAc"]
[Thu Jul 30 11:35:26.540978 2026] [security2:error] [pid 2916525:tid 2916525] [client 37.236.73.8:30604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amso7k4v1uGwh1--PitZuQAAAAc"]
[Thu Jul 30 11:35:26.709120 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:26.711801 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:26.896218 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.54:63846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:26.896840 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.54:63846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:27.013512 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.63:25738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:27.014149 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.63:25738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:27.058938 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.11:32698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:27.059577 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.11:32698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:27.109062 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.30:29414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:27.109695 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.30:29414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:27.209767 2026] [lsapi:warn] [pid 2911549:tid 2911549] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:27.224143 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.31:45474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:27.224758 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.31:45474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:27.653857 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.38:30026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:27.654514 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.38:30026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:28.189951 2026] [ssl:error] [pid 2914057:tid 2914057] (70014)End of file found: [client 216.73.216.199:21913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:28.286702 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:28.289365 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:28.295160 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.54:31490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:28.295775 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.54:31490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:28.403034 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.45:23222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:28.403676 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.45:23222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:29.067036 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.39:57238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:29.067658 2026] [authz_core:error] [pid 2911549:tid 2911549] [client 57.141.0.39:57238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:29.365420 2026] [ssl:error] [pid 2893302:tid 2893302] (EAI 2)Name or service not known: [client 144.76.19.72:51062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:29.365448 2026] [ssl:error] [pid 2893302:tid 2893302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:29.415218 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.50:20092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:29.415842 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.50:20092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:29.419723 2026] [ssl:error] [pid 2893302:tid 2893302] (EAI 2)Name or service not known: [client 144.76.19.72:51072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:29.419744 2026] [ssl:error] [pid 2893302:tid 2893302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:29.725038 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.24:62184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:29.725671 2026] [authz_core:error] [pid 2893302:tid 2893302] [client 57.141.0.24:62184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:29.817163 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.12:25676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:29.817778 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.12:25676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:30.024740 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.18:58662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:30.025368 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.18:58662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:30.131817 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:30.134495 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:30.173256 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.60:64534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:30.173881 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.60:64534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:31.127293 2026] [authz_core:error] [pid 2916060:tid 2916060] [client 57.141.0.25:35320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:31.127915 2026] [authz_core:error] [pid 2916060:tid 2916060] [client 57.141.0.25:35320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:31.457501 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.13:61102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:31.458139 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.13:61102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:31.545309 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.45:23236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:31.545930 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.45:23236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:31.641237 2026] [lsapi:warn] [pid 2915156:tid 2915156] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:32.286646 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.18:58668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:32.287283 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.18:58668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:32.431429 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:32.434100 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:32.489659 2026] [ssl:error] [pid 2906567:tid 2906567] (EAI 2)Name or service not known: [client 144.76.19.72:28838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:32.489694 2026] [ssl:error] [pid 2906567:tid 2906567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:32.541365 2026] [security2:error] [pid 2909092:tid 2909092] [client 185.191.171.14:40906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amso9Bd20lWHU4VqEQpeAgAAAEo"]
[Thu Jul 30 11:35:32.546345 2026] [ssl:error] [pid 2915576:tid 2915576] (EAI 2)Name or service not known: [client 144.76.19.72:28842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:32.546380 2026] [ssl:error] [pid 2915576:tid 2915576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:32.586273 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.53:63168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:32.586895 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.53:63168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:32.641559 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.16:39900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:32.642180 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.16:39900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:32.727878 2026] [ssl:error] [pid 2914802:tid 2914802] (70014)End of file found: [client 216.73.216.199:63638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:33.042467 2026] [ssl:error] [pid 2904780:tid 2904780] (70014)End of file found: [client 216.73.216.199:38502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:33.409736 2026] [security2:error] [pid 2910930:tid 2910930] [client 185.191.171.13:35800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/josh-downie-post-mortem"] [unique_id "amso9UzpbXMEv6GDMwXe8QAAACc"]
[Thu Jul 30 11:35:33.751847 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.71:65308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:33.752471 2026] [authz_core:error] [pid 2910590:tid 2910590] [client 57.141.0.71:65308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:33.817958 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:33.820636 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:33.855678 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.20:32492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:33.856307 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.20:32492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:33.901109 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.15:38418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:33.901725 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.15:38418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:34.134446 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.45:23240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:34.135064 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.45:23240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:35.224061 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.71:65318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:35.224710 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.71:65318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:35.273137 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.55:43208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:35.273763 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.55:43208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:35.345845 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.20:32504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:35.346482 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.20:32504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:35.468987 2026] [security2:error] [pid 2910927:tid 2910927] [client 216.73.216.199:43047] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/screen.conf"] [unique_id "amso97cxIFg0yXQ4oSu9qAAAACI"]
[Thu Jul 30 11:35:35.469287 2026] [security2:error] [pid 2910927:tid 2910927] [client 216.73.216.199:43047] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/screen.conf"] [unique_id "amso97cxIFg0yXQ4oSu9qAAAACI"]
[Thu Jul 30 11:35:35.469500 2026] [security2:error] [pid 2910927:tid 2910927] [client 216.73.216.199:43047] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/screen.conf"] [unique_id "amso97cxIFg0yXQ4oSu9qAAAACI"]
[Thu Jul 30 11:35:35.601479 2026] [ssl:error] [pid 2916908:tid 2916908] (EAI 2)Name or service not known: [client 144.76.19.72:28844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:35.601536 2026] [ssl:error] [pid 2916908:tid 2916908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:35.656443 2026] [ssl:error] [pid 2913442:tid 2913442] (EAI 2)Name or service not known: [client 144.76.19.72:28848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:35.656481 2026] [ssl:error] [pid 2913442:tid 2913442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:35.663246 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.71:65324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:35.663858 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.71:65324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:35.754876 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.43:51994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:35.755503 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.43:51994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:35.998333 2026] [access_compat:error] [pid 2914057:tid 2914057] [client 136.158.37.124:32498] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:35:36.519255 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.3:20082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:36.519880 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.3:20082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:36.739844 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.41:41576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:36.740468 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.41:41576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:36.821357 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:36.824024 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:37.188140 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.11:45510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:37.188765 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.11:45510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:37.312398 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.68:42810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:37.313020 2026] [authz_core:error] [pid 2900705:tid 2900705] [client 57.141.0.68:42810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:37.447740 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.5:36726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:37.448358 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.5:36726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:37.882381 2026] [ssl:error] [pid 2910927:tid 2910927] (70014)End of file found: [client 216.73.216.199:43047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:37.959062 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.3:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:37.959693 2026] [authz_core:error] [pid 2901100:tid 2901100] [client 57.141.0.3:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:38.059924 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.18:58680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:38.060557 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.18:58680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:38.299651 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.5:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:38.300278 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.5:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:38.402427 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:38.405098 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:38.505378 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.5:33398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:38.506000 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.5:33398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:38.708984 2026] [ssl:error] [pid 2907080:tid 2907080] (EAI 2)Name or service not known: [client 144.76.19.72:28854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:38.709013 2026] [ssl:error] [pid 2907080:tid 2907080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:38.760273 2026] [ssl:error] [pid 2913410:tid 2913410] (EAI 2)Name or service not known: [client 144.76.19.72:28868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:38.760299 2026] [ssl:error] [pid 2913410:tid 2913410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:38.784864 2026] [ssl:error] [pid 2916866:tid 2916866] (70014)End of file found: [client 216.73.216.199:53884] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:38.858383 2026] [lsapi:warn] [pid 2916909:tid 2916909] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:39.193692 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.44:27540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:39.194319 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.44:27540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:39.382823 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.40:34844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:39.383451 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.40:34844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:40.044221 2026] [security2:error] [pid 2913447:tid 2913447] [client 185.191.171.7:44490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9862.0/prev_next,prev.html"] [unique_id "amso_MAXzYxON6TFElLXeQAAADM"]
[Thu Jul 30 11:35:40.178416 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.59:23860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:40.179142 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.59:23860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:40.195486 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:40.198150 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:40.267983 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.33:41258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:40.268631 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.33:41258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:40.296641 2026] [ssl:error] [pid 2914802:tid 2914802] (70014)End of file found: [client 216.73.216.199:7909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:40.804907 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.52:24482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:40.805645 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.52:24482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:40.893783 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.55:43230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:40.894409 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.55:43230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:40.948778 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.16:45888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:40.949400 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.16:45888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:40.968706 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.64:41134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:40.969322 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.64:41134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:41.572565 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.16:45904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:41.573193 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.16:45904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:41.815583 2026] [ssl:error] [pid 2916525:tid 2916525] (EAI 2)Name or service not known: [client 144.76.19.72:50140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:41.815610 2026] [ssl:error] [pid 2916525:tid 2916525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:41.872764 2026] [ssl:error] [pid 2909093:tid 2909093] (EAI 2)Name or service not known: [client 144.76.19.72:50156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:41.872804 2026] [ssl:error] [pid 2909093:tid 2909093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:41.921735 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:41.924393 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:41.980663 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.6:59670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:41.981292 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.6:59670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:42.121775 2026] [lsapi:warn] [pid 2904921:tid 2904921] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:42.407783 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.61:35324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:42.408405 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.61:35324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:43.202678 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.8:59480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:43.203302 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.8:59480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:43.300578 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:43.303270 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:43.535528 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.71:65326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:43.536155 2026] [authz_core:error] [pid 2910983:tid 2910983] [client 57.141.0.71:65326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:43.552379 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.69:64120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:43.552997 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.69:64120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:43.853083 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.56:48474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:43.853716 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.56:48474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:43.911185 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.50:37530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:43.911812 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.50:37530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:44.294129 2026] [authz_core:error] [pid 2916866:tid 2916866] [client 57.141.0.23:23036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:44.294756 2026] [authz_core:error] [pid 2916866:tid 2916866] [client 57.141.0.23:23036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:44.297370 2026] [ssl:error] [pid 2913445:tid 2913445] (70014)End of file found: [client 216.73.216.199:30327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:44.746669 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.35:63114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:44.747292 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.35:63114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:44.931498 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:50162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:44.931542 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:44.989248 2026] [ssl:error] [pid 2915532:tid 2915532] (EAI 2)Name or service not known: [client 144.76.19.72:50176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:44.989286 2026] [ssl:error] [pid 2915532:tid 2915532] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:45.304794 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.30:37862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:45.305413 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.30:37862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:45.331488 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.50:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:45.332182 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.50:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:45.854897 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.52:24490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:45.855531 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.52:24490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:45.894770 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:45.898022 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:45.918941 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.68:21212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:45.919592 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.68:21212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:46.248114 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.13:26386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:46.248737 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.13:26386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:47.114727 2026] [access_compat:error] [pid 2897697:tid 2897697] [client 136.158.37.124:33388] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:35:47.555498 2026] [ssl:error] [pid 2910927:tid 2910927] (70014)End of file found: [client 216.73.216.199:35497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:47.576945 2026] [access_compat:error] [pid 2915532:tid 2915532] [client 45.158.164.139:60322] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:35:47.599496 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.64:57442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:47.600131 2026] [authz_core:error] [pid 2914057:tid 2914057] [client 57.141.0.64:57442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:47.600966 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.7:51706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:47.601580 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.7:51706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:47.734386 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.18:51552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:47.735023 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.18:51552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:47.740900 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:47.743685 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:47.948315 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.53:37364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:47.948944 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.53:37364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:48.070034 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:50182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:48.070059 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:48.122612 2026] [ssl:error] [pid 2913442:tid 2913442] (EAI 2)Name or service not known: [client 144.76.19.72:50186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:48.122643 2026] [ssl:error] [pid 2913442:tid 2913442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:48.560414 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.58:32564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:48.561037 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.58:32564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:48.719840 2026] [core:error] [pid 2915576:tid 2915576] [client 66.249.64.170:41561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:48.719865 2026] [core:error] [pid 2915576:tid 2915576] [client 66.249.64.170:41561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:48.745626 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.31:38830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:48.746247 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.31:38830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:48.839195 2026] [core:error] [pid 2909089:tid 2909089] [client 57.141.0.70:58654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:48.839219 2026] [core:error] [pid 2909089:tid 2909089] [client 57.141.0.70:58654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:49.308972 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.68:21218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:49.309601 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.68:21218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:49.457375 2026] [lsapi:warn] [pid 2907139:tid 2907139] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:49.503346 2026] [authz_core:error] [pid 2909089:tid 2909089] [client 57.141.0.16:31028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:49.503968 2026] [authz_core:error] [pid 2909089:tid 2909089] [client 57.141.0.16:31028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:49.659842 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:49.662658 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:49.697232 2026] [ssl:error] [pid 2912360:tid 2912360] (70014)End of file found: [client 216.73.216.199:24558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:49.885758 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.53:37384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:49.886383 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.53:37384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:50.120729 2026] [core:error] [pid 2913445:tid 2913445] [client 66.249.66.3:52400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:50.120753 2026] [core:error] [pid 2913445:tid 2913445] [client 66.249.66.3:52400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:50.713172 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.58:32572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:50.713797 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.58:32572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:50.742185 2026] [security2:error] [pid 2900742:tid 2900742] [client 159.89.12.166:33774] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.com"] [uri "/.env"] [unique_id "amspBjtCYi6S670DnO8WAQAAAAw"]
[Thu Jul 30 11:35:50.742317 2026] [security2:error] [pid 2900742:tid 2900742] [client 159.89.12.166:33774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/.env"] [unique_id "amspBjtCYi6S670DnO8WAQAAAAw"]
[Thu Jul 30 11:35:50.769904 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.6:59678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:50.770535 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.6:59678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:50.893442 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.63:20120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:50.894081 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.63:20120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:50.936382 2026] [security2:error] [pid 2900742:tid 2900742] [client 159.89.12.166:33774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amspBjtCYi6S670DnO8WAQAAAAw"]
[Thu Jul 30 11:35:51.176174 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:26282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:51.176203 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:51.223062 2026] [core:error] [pid 2910929:tid 2910929] [client 57.141.0.58:32584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:51.223106 2026] [core:error] [pid 2910929:tid 2910929] [client 57.141.0.58:32584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:35:51.271014 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:26294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:51.271037 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:51.439596 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.68:21222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:51.440217 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.68:21222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:51.718461 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.41:53590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:51.719100 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.41:53590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:51.798910 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:51.801632 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:51.932917 2026] [access_compat:error] [pid 2916908:tid 2916908] [client 2.189.5.162:33302] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:35:52.343743 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.69:49540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:52.344387 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.69:49540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:52.589804 2026] [lsapi:warn] [pid 2915576:tid 2915576] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:52.637000 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.31:38836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:52.637637 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.31:38836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:52.719027 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.45:27246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:52.719669 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.45:27246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:52.857584 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:52.860267 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:53.130329 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.67:34588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:53.130945 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.67:34588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:53.331155 2026] [ssl:error] [pid 2916866:tid 2916866] (70014)End of file found: [client 216.73.216.199:27708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:53.916273 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.39:61482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:53.916902 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.39:61482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:54.029404 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.51:33578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:54.030022 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.51:33578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:54.116545 2026] [security2:error] [pid 2916908:tid 2916908] [client 85.208.96.195:38586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,751.0.html"] [unique_id "amspCqcVov-d69gBlrCljQAAAA8"]
[Thu Jul 30 11:35:54.191545 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.22:27890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:54.192179 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.22:27890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:54.374429 2026] [ssl:error] [pid 2907082:tid 2907082] (EAI 2)Name or service not known: [client 144.76.19.72:26310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:54.374479 2026] [ssl:error] [pid 2907082:tid 2907082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:54.427697 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:26316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:54.427725 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:54.452660 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:54.455338 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:54.597093 2026] [security2:error] [pid 2913445:tid 2913445] [client 159.89.12.166:51154] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.com"] [uri "/.git/config"] [unique_id "amspCiycnOeRXtXPl4cLAwAAACs"]
[Thu Jul 30 11:35:54.597237 2026] [security2:error] [pid 2913445:tid 2913445] [client 159.89.12.166:51154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/.git/config"] [unique_id "amspCiycnOeRXtXPl4cLAwAAACs"]
[Thu Jul 30 11:35:54.789786 2026] [security2:error] [pid 2913445:tid 2913445] [client 159.89.12.166:51154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amspCiycnOeRXtXPl4cLAwAAACs"]
[Thu Jul 30 11:35:54.984900 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.3:62068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:54.985562 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.3:62068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:54.993647 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.34:49068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:54.994252 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.34:49068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:55.096131 2026] [security2:error] [pid 2907082:tid 2907082] [client 114.119.132.171:28723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~18-3-2020"] [unique_id "amspC3wNZVIU5VhiA0Q07QAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~18-3-2020
[Thu Jul 30 11:35:55.142355 2026] [ssl:error] [pid 2900742:tid 2900742] (70014)End of file found: [client 216.73.216.199:63169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:55.542401 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.12:31374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:55.543016 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.12:31374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:55.613193 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.35:26404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:55.613807 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.35:26404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:55.744232 2026] [ssl:error] [pid 2916908:tid 2916908] (70014)End of file found: [client 216.73.216.199:37453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:35:55.960061 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.50:49990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:55.960689 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.50:49990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:56.075055 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:56.077724 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:56.199006 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.46:64330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:56.200095 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.46:64330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:56.559844 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.56:38822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:56.560471 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.56:38822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:57.321758 2026] [security2:error] [pid 2915576:tid 2915576] [client 114.119.132.171:28727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~18-3-2020"] [unique_id "amspDR3kB-kK0wkFdEdlIgAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~18-3-2020
[Thu Jul 30 11:35:57.445214 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.48:20482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:57.445840 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.48:20482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:57.506862 2026] [ssl:error] [pid 2889424:tid 2889424] (EAI 2)Name or service not known: [client 144.76.19.72:26324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:57.506888 2026] [ssl:error] [pid 2889424:tid 2889424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:57.560322 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:26330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:35:57.560370 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:35:57.802417 2026] [access_compat:error] [pid 2909092:tid 2909092] [client 136.158.37.124:34177] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:35:57.868644 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.8:56270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:57.869352 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.8:56270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:58.439162 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.40:30758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:58.439785 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.40:30758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:58.497078 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.32:27418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:58.497718 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.32:27418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:59.009945 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:59.012599 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:59.034044 2026] [authz_core:error] [pid 2917174:tid 2917174] [client 57.141.0.46:64340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:59.034668 2026] [authz_core:error] [pid 2917174:tid 2917174] [client 57.141.0.46:64340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:59.246148 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:35:59.249398 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:35:59.257719 2026] [lsapi:warn] [pid 2915576:tid 2915576] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:35:59.462633 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.32:27422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:59.463260 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.32:27422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:59.938607 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.52:49580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:59.939241 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.52:49580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:35:59.970372 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.36:60654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:35:59.971000 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.36:60654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:00.616804 2026] [ssl:error] [pid 2913442:tid 2913442] (EAI 2)Name or service not known: [client 144.76.19.72:60054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:00.616835 2026] [ssl:error] [pid 2913442:tid 2913442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:00.626681 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.7:34720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:00.627297 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.7:34720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:00.669292 2026] [ssl:error] [pid 2897697:tid 2897697] (EAI 2)Name or service not known: [client 144.76.19.72:60058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:00.669317 2026] [ssl:error] [pid 2897697:tid 2897697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:00.716792 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.53:52232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:00.717415 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.53:52232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:00.869320 2026] [ssl:error] [pid 2916866:tid 2916866] (70014)End of file found: [client 216.73.216.199:3259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:01.153000 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.45:40528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:01.153636 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.45:40528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:01.260179 2026] [access_compat:error] [pid 2906567:tid 2906567] [client 2.189.5.162:53448] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:36:01.466020 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:01.470954 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.33:63799] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:01.686474 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.17:35762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:01.687107 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.17:35762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:01.944182 2026] [autoindex:error] [pid 2915577:tid 2915577] [client 195.178.110.155:56718] AH01276: Cannot serve directory /home/banskoex/public_html/test/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://banskoexpress.com/test/
[Thu Jul 30 11:36:01.946871 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 66.249.66.35:39805] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:01.949533 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 66.249.66.35:39805] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:02.080945 2026] [ssl:error] [pid 2915576:tid 2915576] (70014)End of file found: [client 216.73.216.199:9789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:02.281400 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.15:36852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:02.282093 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.15:36852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:02.324910 2026] [authz_core:error] [pid 2918104:tid 2918104] [client 57.141.0.3:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:02.325533 2026] [authz_core:error] [pid 2918104:tid 2918104] [client 57.141.0.3:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:02.407344 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.29:41838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:02.407967 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.29:41838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:03.045083 2026] [lsapi:warn] [pid 2910365:tid 2910365] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:03.563057 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 66.249.66.34:36098] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:03.565726 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 66.249.66.34:36098] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:03.686767 2026] [authz_core:error] [pid 2918104:tid 2918104] [client 57.141.0.53:52270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:03.687388 2026] [authz_core:error] [pid 2918104:tid 2918104] [client 57.141.0.53:52270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:03.826272 2026] [security2:error] [pid 2910365:tid 2910365] [client 18.199.86.73:38698] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.chrisdyble.com"] [uri "/.git/config"] [unique_id "amspEzROSlNKP7EUPT4LxQAAAA4"]
[Thu Jul 30 11:36:03.826467 2026] [security2:error] [pid 2910365:tid 2910365] [client 18.199.86.73:38698] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.chrisdyble.com"] [uri "/.git/config"] [unique_id "amspEzROSlNKP7EUPT4LxQAAAA4"]
[Thu Jul 30 11:36:03.836331 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:60072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:03.836361 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:03.893269 2026] [security2:error] [pid 2910365:tid 2910365] [client 18.199.86.73:38698] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.chrisdyble.com"] [uri "/403.shtml"] [unique_id "amspEzROSlNKP7EUPT4LxQAAAA4"]
[Thu Jul 30 11:36:03.925982 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:60074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:03.926004 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:04.094707 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.44:55116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:04.095339 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.44:55116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:04.197611 2026] [ssl:error] [pid 2900744:tid 2900744] (70014)End of file found: [client 216.73.216.199:21710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:04.316301 2026] [security2:error] [pid 2910365:tid 2910365] [client 43.131.60.206:31717] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspFDROSlNKP7EUPT4LyAAAAA4"]
[Thu Jul 30 11:36:04.316345 2026] [security2:error] [pid 2910365:tid 2910365] [client 43.131.60.206:31717] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspFDROSlNKP7EUPT4LyAAAAA4"]
[Thu Jul 30 11:36:04.316577 2026] [security2:error] [pid 2910365:tid 2910365] [client 43.131.60.206:31717] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspFDROSlNKP7EUPT4LyAAAAA4"]
[Thu Jul 30 11:36:04.391090 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.53:52276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:04.391734 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.53:52276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:04.442917 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.56:27206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:04.443551 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.56:27206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:05.229440 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 66.249.66.35:39805] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:05.232104 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 66.249.66.35:39805] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:05.234208 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.32:42978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:05.234834 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.32:42978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:05.399569 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.39:43716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:05.400200 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.39:43716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:05.402804 2026] [security2:error] [pid 2916908:tid 2916908] [client 159.89.12.166:42042] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "spamp.com"] [uri "/trace.axd"] [unique_id "amspFacVov-d69gBlrClmgAAAA8"]
[Thu Jul 30 11:36:05.403026 2026] [security2:error] [pid 2916908:tid 2916908] [client 159.89.12.166:42042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/trace.axd"] [unique_id "amspFacVov-d69gBlrClmgAAAA8"]
[Thu Jul 30 11:36:05.436532 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.32:42986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:05.437156 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.32:42986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:05.596486 2026] [security2:error] [pid 2916908:tid 2916908] [client 159.89.12.166:42042] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amspFacVov-d69gBlrClmgAAAA8"]
[Thu Jul 30 11:36:06.045298 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.35:58802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:06.045932 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.35:58802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:06.261563 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.69:57120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:06.262189 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.69:57120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:06.564938 2026] [authz_core:error] [pid 2918378:tid 2918378] [client 57.141.0.69:57124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:06.565580 2026] [authz_core:error] [pid 2918378:tid 2918378] [client 57.141.0.69:57124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:06.668700 2026] [security2:error] [pid 2900742:tid 2900742] [client 101.47.18.89:27963] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspFjtCYi6S670DnO8WCwAAAAw"]
[Thu Jul 30 11:36:06.668746 2026] [security2:error] [pid 2900742:tid 2900742] [client 101.47.18.89:27963] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspFjtCYi6S670DnO8WCwAAAAw"]
[Thu Jul 30 11:36:06.668975 2026] [security2:error] [pid 2900742:tid 2900742] [client 101.47.18.89:27963] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspFjtCYi6S670DnO8WCwAAAAw"]
[Thu Jul 30 11:36:06.982258 2026] [ssl:error] [pid 2916866:tid 2916866] (EAI 2)Name or service not known: [client 144.76.19.72:60096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:06.982290 2026] [ssl:error] [pid 2916866:tid 2916866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:07.035779 2026] [ssl:error] [pid 2918378:tid 2918378] (EAI 2)Name or service not known: [client 144.76.19.72:60110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:07.035807 2026] [ssl:error] [pid 2918378:tid 2918378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:07.322143 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.42:49604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:07.322774 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.42:49604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:07.401248 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.17:35768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:07.401867 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.17:35768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:07.568528 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 66.249.66.35:39805] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:07.571175 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 66.249.66.35:39805] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:07.816739 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.42:49614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:07.817367 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.42:49614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:07.990489 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.35:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:07.991116 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.35:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:08.071100 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.41:57492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:08.071720 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.41:57492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:08.082884 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.35:58832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:08.083502 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.35:58832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:08.794552 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.5:50450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:08.795178 2026] [authz_core:error] [pid 2910930:tid 2910930] [client 57.141.0.5:50450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:08.879678 2026] [access_compat:error] [pid 2913442:tid 2913442] [client 136.158.37.124:34949] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:36:08.994281 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.71:20274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:08.994904 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.71:20274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:09.099295 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:09.101932 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:09.371858 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:22244] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:09.704197 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.12:49764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:09.704828 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.12:49764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:09.725622 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.38:57072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:09.726235 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.38:57072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:09.926756 2026] [lsapi:warn] [pid 2918289:tid 2918289] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:10.095648 2026] [ssl:error] [pid 2916016:tid 2916016] (EAI 2)Name or service not known: [client 144.76.19.72:33448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:10.095688 2026] [ssl:error] [pid 2916016:tid 2916016] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:10.151025 2026] [ssl:error] [pid 2913410:tid 2913410] (EAI 2)Name or service not known: [client 144.76.19.72:33462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:10.151050 2026] [ssl:error] [pid 2913410:tid 2913410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:10.598191 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.13:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:10.598814 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.13:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:10.884987 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.24:34518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:10.885620 2026] [authz_core:error] [pid 2906567:tid 2906567] [client 57.141.0.24:34518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:10.901307 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 216.73.216.199:47298] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.ini
[Thu Jul 30 11:36:10.985581 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 66.249.66.34:56007] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:10.988230 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 66.249.66.34:56007] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:11.146315 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.35:65376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:11.146936 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.35:65376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:11.182498 2026] [ssl:error] [pid 2915532:tid 2915532] (70014)End of file found: [client 216.73.216.199:47298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:11.359261 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.29:60850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:11.359884 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.29:60850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:11.483112 2026] [ssl:error] [pid 2907080:tid 2907080] (70014)End of file found: [client 216.73.216.199:32001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:11.822741 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.60:31658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:11.823417 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.60:31658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:12.490252 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.3:38712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:12.490875 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.3:38712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:12.871345 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:12.874015 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:12.895893 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.71:20290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:12.896508 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.71:20290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:13.073263 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.50:24302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:13.073890 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.50:24302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:13.094990 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.63:32046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:13.095618 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.63:32046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:13.209549 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:33474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:13.209580 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:13.264165 2026] [ssl:error] [pid 2916908:tid 2916908] (EAI 2)Name or service not known: [client 144.76.19.72:33478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:13.264198 2026] [ssl:error] [pid 2916908:tid 2916908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:13.302649 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.30:47890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:13.303278 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.30:47890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:13.525460 2026] [lsapi:warn] [pid 2918339:tid 2918339] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:13.530667 2026] [core:error] [pid 2917673:tid 2917673] [client 66.249.66.168:49499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:13.530699 2026] [core:error] [pid 2917673:tid 2917673] [client 66.249.66.168:49499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:13.550750 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.12:65398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:13.551377 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.12:65398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:14.010293 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.49:60978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:14.010921 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.49:60978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:14.037686 2026] [security2:error] [pid 2918379:tid 2918379] [client 119.45.7.86:39866] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brightredsocks.com"] [uri "/"] [unique_id "amspHnhUMJX3g18MMOocuwAAACg"]
[Thu Jul 30 11:36:14.038509 2026] [core:crit] [pid 2918379:tid 2918379] (13)Permission denied: [client 119.45.7.86:39866] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 11:36:14.038558 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 119.45.7.86:39866] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 11:36:14.038897 2026] [core:crit] [pid 2918379:tid 2918379] (13)Permission denied: [client 119.45.7.86:39866] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 11:36:14.038914 2026] [core:crit] [pid 2918379:tid 2918379] (13)Permission denied: [client 119.45.7.86:39866] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 11:36:14.038947 2026] [core:crit] [pid 2918379:tid 2918379] (13)Permission denied: [client 119.45.7.86:39866] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 11:36:14.438739 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.50:24312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:14.439416 2026] [authz_core:error] [pid 2916908:tid 2916908] [client 57.141.0.50:24312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:14.662226 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.71:52732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:14.662844 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.71:52732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:14.719657 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:14.722324 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:15.209172 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.71:52734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:15.209800 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.71:52734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:15.450511 2026] [ssl:error] [pid 2916061:tid 2916061] (70014)End of file found: [client 216.73.216.199:50026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:15.478538 2026] [security2:error] [pid 2900744:tid 2900744] [client 101.47.18.89:14287] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspHxySp3o-QUpJicOlwwAAABY"]
[Thu Jul 30 11:36:15.478581 2026] [security2:error] [pid 2900744:tid 2900744] [client 101.47.18.89:14287] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspHxySp3o-QUpJicOlwwAAABY"]
[Thu Jul 30 11:36:15.478825 2026] [security2:error] [pid 2900744:tid 2900744] [client 101.47.18.89:14287] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspHxySp3o-QUpJicOlwwAAABY"]
[Thu Jul 30 11:36:15.494510 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.10:45532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:15.495138 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.10:45532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:16.321058 2026] [ssl:error] [pid 2918339:tid 2918339] (EAI 2)Name or service not known: [client 144.76.19.72:33484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:16.321121 2026] [ssl:error] [pid 2918339:tid 2918339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:16.376039 2026] [ssl:error] [pid 2915577:tid 2915577] (EAI 2)Name or service not known: [client 144.76.19.72:33492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:16.376103 2026] [ssl:error] [pid 2915577:tid 2915577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:16.510996 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.61:53396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:16.511629 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.61:53396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:16.558782 2026] [ssl:error] [pid 2916525:tid 2916525] (70014)End of file found: [client 216.73.216.199:31184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:16.724387 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.34:49092] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:16.727028 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 66.249.66.34:49092] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:16.789256 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.18:25052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:16.789878 2026] [authz_core:error] [pid 2900744:tid 2900744] [client 57.141.0.18:25052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:16.935084 2026] [authz_core:error] [pid 2918378:tid 2918378] [client 57.141.0.46:49134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:16.935709 2026] [authz_core:error] [pid 2918378:tid 2918378] [client 57.141.0.46:49134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:17.217928 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.3:38714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:17.218554 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.3:38714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:17.339897 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.60:31662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:17.340528 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.60:31662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:18.102896 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.35:65382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:18.103524 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.35:65382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:18.151927 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:18.153182 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.28:49954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:18.153796 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.28:49954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:18.154596 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:18.311552 2026] [authz_core:error] [pid 2918377:tid 2918377] [client 57.141.0.21:48280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:18.312177 2026] [authz_core:error] [pid 2918377:tid 2918377] [client 57.141.0.21:48280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:18.454620 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.47:58436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:18.455247 2026] [authz_core:error] [pid 2910813:tid 2910813] [client 57.141.0.47:58436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:18.721446 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.70:55680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:18.722084 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.70:55680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:18.898046 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:18.900715 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:19.304015 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.56:51988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:19.304649 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.56:51988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:19.432488 2026] [ssl:error] [pid 2915577:tid 2915577] (EAI 2)Name or service not known: [client 144.76.19.72:33518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:19.432531 2026] [ssl:error] [pid 2915577:tid 2915577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:19.443617 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.53:46584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:19.444236 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.53:46584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:19.486854 2026] [ssl:error] [pid 2914481:tid 2914481] (EAI 2)Name or service not known: [client 144.76.19.72:33526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:19.486893 2026] [ssl:error] [pid 2914481:tid 2914481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:19.992545 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:19.995201 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:20.179602 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.65:23352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:20.180227 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.65:23352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:20.188324 2026] [access_compat:error] [pid 2918339:tid 2918339] [client 136.158.37.124:35742] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:36:20.437612 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.9:52500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:20.438235 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.9:52500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:20.766716 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.4:22020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:20.767345 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.4:22020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:20.901243 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.53:46598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:20.901864 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.53:46598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:20.925653 2026] [lsapi:warn] [pid 2918380:tid 2918380] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:21.136109 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.54:41784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:21.136731 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.54:41784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:21.672105 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.9:52510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:21.672734 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.9:52510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:22.199881 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.53:46604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:22.200506 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.53:46604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:22.343657 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:22.346314 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:22.544906 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:43264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:22.544930 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:22.597550 2026] [ssl:error] [pid 2918289:tid 2918289] (EAI 2)Name or service not known: [client 144.76.19.72:43278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:22.597579 2026] [ssl:error] [pid 2918289:tid 2918289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:22.698357 2026] [ssl:error] [pid 2907139:tid 2907139] (70014)End of file found: [client 216.73.216.199:62053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:22.731027 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.20:47520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:22.731668 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.20:47520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:22.745800 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.11:50440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:22.746418 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.11:50440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:23.060026 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.31:30454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:23.060657 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.31:30454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:23.084052 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.21:48282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:23.084686 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.21:48282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:23.690098 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:23.692764 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:23.787543 2026] [security2:error] [pid 2916866:tid 2916866] [client 18.199.86.73:35380] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.gangway-media.com"] [uri "/.git/config"] [unique_id "amspJ9sQBnCFVW3C1sqmxwAAAAg"]
[Thu Jul 30 11:36:23.787739 2026] [security2:error] [pid 2916866:tid 2916866] [client 18.199.86.73:35380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.gangway-media.com"] [uri "/.git/config"] [unique_id "amspJ9sQBnCFVW3C1sqmxwAAAAg"]
[Thu Jul 30 11:36:23.814008 2026] [security2:error] [pid 2916866:tid 2916866] [client 18.199.86.73:35380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.gangway-media.com"] [uri "/403.shtml"] [unique_id "amspJ9sQBnCFVW3C1sqmxwAAAAg"]
[Thu Jul 30 11:36:23.847470 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.42:47530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:23.848104 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.42:47530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:24.009267 2026] [lsapi:warn] [pid 2900742:tid 2900742] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:24.059565 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.2:63078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:24.060202 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.2:63078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:24.244507 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.54:41794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:24.245145 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.54:41794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:24.527536 2026] [ssl:error] [pid 2918340:tid 2918340] (70014)End of file found: [client 216.73.216.199:19245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:24.710880 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.18:44168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:24.711509 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.18:44168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:24.828846 2026] [ssl:error] [pid 2913442:tid 2913442] (70014)End of file found: [client 216.73.216.199:13744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:24.880994 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.68:37094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:24.881620 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.68:37094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:25.216003 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.15:64806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:25.216640 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.15:64806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:25.575922 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.43:41434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:25.576554 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.43:41434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:25.651332 2026] [ssl:error] [pid 2914481:tid 2914481] (EAI 2)Name or service not known: [client 144.76.19.72:43290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:25.651359 2026] [ssl:error] [pid 2914481:tid 2914481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:25.708666 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:43304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:25.708689 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:26.193696 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.27:62774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:26.194319 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.27:62774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:26.219820 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.67:29246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:26.220461 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.67:29246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:26.483048 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.61:25438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:26.483674 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.61:25438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:26.489451 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:26.492107 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:26.784524 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.8:49642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:26.785154 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.8:49642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:27.307083 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.52:25218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:27.307698 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.52:25218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:27.477045 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.47:39004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:27.477680 2026] [authz_core:error] [pid 2907082:tid 2907082] [client 57.141.0.47:39004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:27.584340 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.2:41580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:27.584976 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.2:41580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:28.024936 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.40:51010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:28.025575 2026] [authz_core:error] [pid 2915156:tid 2915156] [client 57.141.0.40:51010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:28.183279 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.24:34374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:28.183907 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.24:34374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:28.412949 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:28.415675 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:28.763100 2026] [ssl:error] [pid 2898449:tid 2898449] (EAI 2)Name or service not known: [client 144.76.19.72:43306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:28.763129 2026] [ssl:error] [pid 2898449:tid 2898449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:28.791150 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:28.793797 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:28.817481 2026] [ssl:error] [pid 2910365:tid 2910365] (EAI 2)Name or service not known: [client 144.76.19.72:43314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:28.817500 2026] [ssl:error] [pid 2910365:tid 2910365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:28.954492 2026] [ssl:error] [pid 2913445:tid 2913445] (70014)End of file found: [client 216.73.216.199:55165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:29.382090 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.26:32856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:29.382713 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.26:32856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:29.524786 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.39:44182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:29.525413 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.39:44182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:29.699131 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.58:32864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:29.699750 2026] [authz_core:error] [pid 2910365:tid 2910365] [client 57.141.0.58:32864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:29.995906 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:29.998582 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:30.001192 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.11:48588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:30.001801 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.11:48588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:30.005247 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.46:33840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:30.005853 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.46:33840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:30.271188 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.42:47544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:30.271819 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.42:47544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:30.320218 2026] [core:error] [pid 2913442:tid 2913442] [client 66.249.66.8:43191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:30.320247 2026] [core:error] [pid 2913442:tid 2913442] [client 66.249.66.8:43191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:30.499769 2026] [core:error] [pid 2914802:tid 2914802] (13)Permission denied: [client 216.73.216.199:24320] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_mmu_page_header/total_objects
[Thu Jul 30 11:36:30.853951 2026] [access_compat:error] [pid 2916061:tid 2916061] [client 136.158.37.124:36624] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:36:31.165557 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.18:57930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:31.166195 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.18:57930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:31.184787 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.59:61906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:31.185413 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.59:61906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:31.237779 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.54:64580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:31.238404 2026] [authz_core:error] [pid 2904921:tid 2904921] [client 57.141.0.54:64580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:31.534720 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:31.537395 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:31.850970 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.29:55294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:31.852005 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.29:55294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:31.872364 2026] [ssl:error] [pid 2913410:tid 2913410] (EAI 2)Name or service not known: [client 144.76.19.72:63776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:31.872385 2026] [ssl:error] [pid 2913410:tid 2913410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:31.938557 2026] [ssl:error] [pid 2918340:tid 2918340] (EAI 2)Name or service not known: [client 144.76.19.72:63782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:31.938590 2026] [ssl:error] [pid 2918340:tid 2918340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:32.304546 2026] [lsapi:warn] [pid 2916525:tid 2916525] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:32.613842 2026] [core:error] [pid 2914802:tid 2914802] (13)Permission denied: [client 216.73.216.199:24320] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-1k/partial
[Thu Jul 30 11:36:32.924277 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:32.927084 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:33.120108 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.50:45268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:33.120739 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.50:45268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:33.150220 2026] [authz_core:error] [pid 2919826:tid 2919826] [client 57.141.0.9:54874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:33.150850 2026] [authz_core:error] [pid 2919826:tid 2919826] [client 57.141.0.9:54874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:33.221193 2026] [authz_core:error] [pid 2919890:tid 2919890] [client 57.141.0.2:41596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:33.221841 2026] [authz_core:error] [pid 2919890:tid 2919890] [client 57.141.0.2:41596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:33.598715 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.34:56660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:33.599335 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.34:56660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:33.636768 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.30:41756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:33.637389 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.30:41756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:33.920713 2026] [security2:error] [pid 2919890:tid 2919890] [client 85.208.96.204:12678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/home-assistant-nginx-docker"] [unique_id "amspMSUZ1VVRzRKPVQM4ZgAAAAM"]
[Thu Jul 30 11:36:34.018784 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.41:20182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:34.019455 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.41:20182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:34.462315 2026] [lsapi:warn] [pid 2913445:tid 2913445] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:34.464109 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 66.249.66.33:50325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:34.466757 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 66.249.66.33:50325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:34.768860 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:34.771543 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:34.890505 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.19:36872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:34.891147 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.19:36872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:34.984319 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.13:40212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:34.984944 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.13:40212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:35.023162 2026] [ssl:error] [pid 2919943:tid 2919943] (EAI 2)Name or service not known: [client 144.76.19.72:63796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:35.023204 2026] [ssl:error] [pid 2919943:tid 2919943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:35.076593 2026] [ssl:error] [pid 2918339:tid 2918339] (EAI 2)Name or service not known: [client 144.76.19.72:63806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:35.076620 2026] [ssl:error] [pid 2918339:tid 2918339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:35.102403 2026] [security2:error] [pid 2919891:tid 2919891] [client 172.86.122.106:33228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "banskoexpress.com"] [uri "/.env.example"] [unique_id "amspMz4nfqtfigIGNShvYAAAAAU"]
[Thu Jul 30 11:36:35.102604 2026] [security2:error] [pid 2919891:tid 2919891] [client 172.86.122.106:33228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "banskoexpress.com"] [uri "/.env.example"] [unique_id "amspMz4nfqtfigIGNShvYAAAAAU"]
[Thu Jul 30 11:36:35.102803 2026] [security2:error] [pid 2919891:tid 2919891] [client 172.86.122.106:33228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "banskoexpress.com"] [uri "/403.shtml"] [unique_id "amspMz4nfqtfigIGNShvYAAAAAU"]
[Thu Jul 30 11:36:35.146276 2026] [security2:error] [pid 2919946:tid 2919946] [client 172.86.122.106:33230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/.env.example"] [unique_id "amspM3B70B3iTM_RQ0prkAAAACc"]
[Thu Jul 30 11:36:35.146475 2026] [security2:error] [pid 2919946:tid 2919946] [client 172.86.122.106:33230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/.env.example"] [unique_id "amspM3B70B3iTM_RQ0prkAAAACc"]
[Thu Jul 30 11:36:35.408616 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.40:51018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:35.409231 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.40:51018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:35.661626 2026] [security2:error] [pid 2919946:tid 2919946] [client 172.86.122.106:33230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/index.php"] [unique_id "amspM3B70B3iTM_RQ0prkAAAACc"]
[Thu Jul 30 11:36:36.021244 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.26:60130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:36.021901 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.26:60130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:36.542750 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.65:32412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:36.543374 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.65:32412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:36.618430 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:36.621116 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:36.654840 2026] [authz_core:error] [pid 2919946:tid 2919946] [client 57.141.0.6:56262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:36.655465 2026] [authz_core:error] [pid 2919946:tid 2919946] [client 57.141.0.6:56262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:36.842139 2026] [ssl:error] [pid 2904921:tid 2904921] (70014)End of file found: [client 216.73.216.199:9233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:37.153933 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.67:64096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:37.154960 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.67:64096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:37.215373 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.17:64298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:37.216000 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.17:64298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:37.380426 2026] [authz_core:error] [pid 2919946:tid 2919946] [client 57.141.0.59:24658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:37.381084 2026] [authz_core:error] [pid 2919946:tid 2919946] [client 57.141.0.59:24658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:37.495149 2026] [security2:error] [pid 2916061:tid 2916061] [client 43.157.98.187:60838] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amspNRScjY_ebAA7zXNfcQAAACo"]
[Thu Jul 30 11:36:37.612877 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.56:32920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:37.613520 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.56:32920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:37.748401 2026] [ssl:error] [pid 2914802:tid 2914802] (70014)End of file found: [client 216.73.216.199:24320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:37.879787 2026] [core:error] [pid 2913448:tid 2913448] [client 57.141.0.20:25674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:37.879815 2026] [core:error] [pid 2913448:tid 2913448] [client 57.141.0.20:25674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:38.025558 2026] [security2:error] [pid 2915577:tid 2915577] [client 43.157.98.187:57142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amspNrydQcrpAXr80S520wAAAB8"], referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 11:36:38.027390 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 43.157.98.187:57142] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 11:36:38.030048 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 43.157.98.187:57142] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 11:36:38.133384 2026] [ssl:error] [pid 2919891:tid 2919891] (EAI 2)Name or service not known: [client 144.76.19.72:63812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:38.133421 2026] [ssl:error] [pid 2919891:tid 2919891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:38.159564 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.8:50858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:38.160192 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.8:50858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:38.189718 2026] [ssl:error] [pid 2910365:tid 2910365] (EAI 2)Name or service not known: [client 144.76.19.72:63826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:38.189746 2026] [ssl:error] [pid 2910365:tid 2910365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:38.249164 2026] [core:error] [pid 2919943:tid 2919943] (13)Permission denied: [client 216.73.216.199:2933] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-16/alloc_calls
[Thu Jul 30 11:36:38.381429 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.48:25352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:38.382057 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.48:25352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:38.652119 2026] [core:error] [pid 2919943:tid 2919943] (13)Permission denied: [client 216.73.216.199:2933] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-512/slabs
[Thu Jul 30 11:36:38.917223 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.27:42716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:38.917853 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.27:42716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:39.072315 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:39.074973 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:39.186267 2026] [core:error] [pid 2898449:tid 2898449] [client 57.141.0.29:55304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:39.186295 2026] [core:error] [pid 2898449:tid 2898449] [client 57.141.0.29:55304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:39.391648 2026] [authz_core:error] [pid 2918377:tid 2918377] [client 57.141.0.37:55248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:39.392268 2026] [authz_core:error] [pid 2918377:tid 2918377] [client 57.141.0.37:55248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:39.675283 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.15:55898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:39.675904 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.15:55898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:39.772453 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.14:54578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:39.773081 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.14:54578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:40.023114 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.29:33070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:40.023735 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.29:33070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:40.312292 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:40.314968 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:40.834796 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.45:52554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:40.835426 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.45:52554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:40.842738 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.16:47084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:40.843351 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.16:47084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:40.886701 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.50:22898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:40.887333 2026] [authz_core:error] [pid 2914481:tid 2914481] [client 57.141.0.50:22898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:40.908303 2026] [access_compat:error] [pid 2916016:tid 2916016] [client 89.45.53.3:44240] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:36:41.079577 2026] [core:error] [pid 2919943:tid 2919943] (13)Permission denied: [client 216.73.216.199:2933] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/proc_dir_entry/poison
[Thu Jul 30 11:36:41.244257 2026] [ssl:error] [pid 2889424:tid 2889424] (EAI 2)Name or service not known: [client 144.76.19.72:64332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:41.244286 2026] [ssl:error] [pid 2889424:tid 2889424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:41.285911 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.62:24614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:41.286568 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.62:24614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:41.299873 2026] [ssl:error] [pid 2915576:tid 2915576] (EAI 2)Name or service not known: [client 144.76.19.72:64346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:41.299901 2026] [ssl:error] [pid 2915576:tid 2915576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:41.575591 2026] [access_compat:error] [pid 2900742:tid 2900742] [client 2.189.5.218:50240] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:36:41.591061 2026] [access_compat:error] [pid 2914481:tid 2914481] [client 2.189.5.142:60334] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:36:41.655586 2026] [access_compat:error] [pid 2916016:tid 2916016] [client 89.45.53.30:37602] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:36:41.681600 2026] [ssl:error] [pid 2919943:tid 2919943] (70014)End of file found: [client 216.73.216.199:2933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:41.785217 2026] [access_compat:error] [pid 2898449:tid 2898449] [client 136.158.37.124:37445] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:36:42.201039 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:42.203717 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:42.308834 2026] [core:error] [pid 2915445:tid 2915445] [client 57.141.0.44:43886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:42.308865 2026] [core:error] [pid 2915445:tid 2915445] [client 57.141.0.44:43886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:42.588653 2026] [core:error] [pid 2915576:tid 2915576] (13)Permission denied: [client 216.73.216.199:30108] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/device/driver/bind
[Thu Jul 30 11:36:42.686626 2026] [lsapi:warn] [pid 2916016:tid 2916016] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:42.790793 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.31:37858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:42.791419 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.31:37858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:43.178666 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.32:54766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:43.179325 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.32:54766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:43.191118 2026] [ssl:error] [pid 2915576:tid 2915576] (70014)End of file found: [client 216.73.216.199:30108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:43.223098 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.17:47244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:43.223714 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.17:47244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:43.354016 2026] [security2:error] [pid 2889424:tid 2889424] [client 172.86.122.106:40536] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "banskoexpress.com"] [uri "/.env.example"] [unique_id "amspO2e7rn44tqRVmOaYSgAAACA"]
[Thu Jul 30 11:36:43.354168 2026] [security2:error] [pid 2889424:tid 2889424] [client 172.86.122.106:40536] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "banskoexpress.com"] [uri "/.env.example"] [unique_id "amspO2e7rn44tqRVmOaYSgAAACA"]
[Thu Jul 30 11:36:43.354357 2026] [security2:error] [pid 2889424:tid 2889424] [client 172.86.122.106:40536] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "banskoexpress.com"] [uri "/403.shtml"] [unique_id "amspO2e7rn44tqRVmOaYSgAAACA"]
[Thu Jul 30 11:36:43.388574 2026] [security2:error] [pid 2914481:tid 2914481] [client 172.86.122.106:40542] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/.env.example"] [unique_id "amspO9iomXAe660FkY9rBgAAAAs"]
[Thu Jul 30 11:36:43.388761 2026] [security2:error] [pid 2914481:tid 2914481] [client 172.86.122.106:40542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/.env.example"] [unique_id "amspO9iomXAe660FkY9rBgAAAAs"]
[Thu Jul 30 11:36:43.405615 2026] [security2:error] [pid 2914481:tid 2914481] [client 172.86.122.106:40542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/index.php"] [unique_id "amspO9iomXAe660FkY9rBgAAAAs"]
[Thu Jul 30 11:36:43.441543 2026] [authz_core:error] [pid 2918378:tid 2918378] [client 57.141.0.48:50602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:43.442174 2026] [authz_core:error] [pid 2918378:tid 2918378] [client 57.141.0.48:50602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:44.264762 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.14:54584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:44.265392 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.14:54584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:44.344268 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.58:37300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:44.344900 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.58:37300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:44.356958 2026] [ssl:error] [pid 2918340:tid 2918340] (EAI 2)Name or service not known: [client 144.76.19.72:64350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:44.356989 2026] [ssl:error] [pid 2918340:tid 2918340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:44.369041 2026] [authz_core:error] [pid 2920354:tid 2920354] [client 57.141.0.51:62114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:44.369710 2026] [authz_core:error] [pid 2920354:tid 2920354] [client 57.141.0.51:62114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:44.418225 2026] [ssl:error] [pid 2918378:tid 2918378] (EAI 2)Name or service not known: [client 144.76.19.72:64356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:44.418262 2026] [ssl:error] [pid 2918378:tid 2918378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:44.684322 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.32:65522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:44.684941 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.32:65522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:44.693393 2026] [ssl:error] [pid 2916016:tid 2916016] (70014)End of file found: [client 216.73.216.199:1968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:44.937612 2026] [lsapi:warn] [pid 2919947:tid 2919947] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:44.998470 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.51:62122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:44.999107 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.51:62122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:45.112963 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:45.115630 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:45.974030 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.69:35006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:45.974701 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.69:35006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:46.205212 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.1:40302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:46.205834 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.1:40302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:46.613862 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.59:54876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:46.614484 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.59:54876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:46.620483 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:46.623165 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:46.933103 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.67:52722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:46.933724 2026] [authz_core:error] [pid 2907080:tid 2907080] [client 57.141.0.67:52722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:47.435699 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.26:64542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:47.436319 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.26:64542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:47.507049 2026] [ssl:error] [pid 2914481:tid 2914481] (EAI 2)Name or service not known: [client 144.76.19.72:64372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:47.507110 2026] [ssl:error] [pid 2914481:tid 2914481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:47.561572 2026] [ssl:error] [pid 2917673:tid 2917673] (EAI 2)Name or service not known: [client 144.76.19.72:64384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:47.561612 2026] [ssl:error] [pid 2917673:tid 2917673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:47.667683 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.62:24622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:47.668312 2026] [authz_core:error] [pid 2897697:tid 2897697] [client 57.141.0.62:24622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:47.703124 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:47.705780 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:48.305531 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.9:25104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:48.306159 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.9:25104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:48.618327 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.16:40268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:48.618943 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.16:40268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:48.907475 2026] [ssl:error] [pid 2907139:tid 2907139] (70014)End of file found: [client 216.73.216.199:38557] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:49.230968 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.43:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:49.231662 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.43:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:49.508921 2026] [core:error] [pid 2917673:tid 2917673] (13)Permission denied: [client 216.73.216.199:39201] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip4-frags/alloc_calls
[Thu Jul 30 11:36:49.636228 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:49.638929 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:49.803783 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.66:48252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:49.804407 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.66:48252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:49.810136 2026] [core:error] [pid 2917673:tid 2917673] (13)Permission denied: [client 216.73.216.199:39201] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/aliases
[Thu Jul 30 11:36:49.843860 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.43:39648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:49.844488 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.43:39648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:49.938446 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.61:56416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:49.939155 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.61:56416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:50.618531 2026] [ssl:error] [pid 2919826:tid 2919826] (EAI 2)Name or service not known: [client 144.76.19.72:57180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:50.618570 2026] [ssl:error] [pid 2919826:tid 2919826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:50.625432 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.48:38196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:50.626052 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.48:38196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:50.674737 2026] [ssl:error] [pid 2900742:tid 2900742] (EAI 2)Name or service not known: [client 144.76.19.72:57184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:50.674784 2026] [ssl:error] [pid 2900742:tid 2900742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:50.724536 2026] [core:error] [pid 2918340:tid 2918340] [client 57.141.0.41:37232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:50.724564 2026] [core:error] [pid 2918340:tid 2918340] [client 57.141.0.41:37232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:51.020503 2026] [ssl:error] [pid 2917673:tid 2917673] (70014)End of file found: [client 216.73.216.199:39201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:51.399660 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:51.402344 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:51.676256 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.58:37324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:51.676892 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.58:37324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:51.966285 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.64:52818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:51.966923 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.64:52818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:52.435164 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.45:39334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:52.435785 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.45:39334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:52.575093 2026] [core:error] [pid 2915445:tid 2915445] [client 57.141.0.69:27888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:52.575117 2026] [core:error] [pid 2915445:tid 2915445] [client 57.141.0.69:27888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:36:52.608256 2026] [lsapi:warn] [pid 2915532:tid 2915532] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:52.941865 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.56:52638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:52.942485 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.56:52638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:53.144042 2026] [ssl:error] [pid 2919891:tid 2919891] (70014)End of file found: [client 216.73.216.199:3660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:53.150730 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.9:38656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:53.151351 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.9:38656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:53.388529 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.13:47886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:53.389151 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.13:47886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:53.679741 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.50:54308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:53.680367 2026] [authz_core:error] [pid 2914802:tid 2914802] [client 57.141.0.50:54308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:53.731464 2026] [ssl:error] [pid 2889424:tid 2889424] (EAI 2)Name or service not known: [client 144.76.19.72:57192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:53.731494 2026] [ssl:error] [pid 2889424:tid 2889424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:53.772754 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.14:62226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:53.773381 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.14:62226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:53.795510 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:57202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:53.795551 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:53.988972 2026] [access_compat:error] [pid 2900742:tid 2900742] [client 136.158.37.124:38228] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:36:54.238681 2026] [ssl:error] [pid 2918380:tid 2918380] (70014)End of file found: [client 216.73.216.199:63364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:54.403555 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:54.406293 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:54.447694 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.24:53572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:54.448316 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.24:53572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:54.454539 2026] [access_compat:error] [pid 2889424:tid 2889424] [client 45.158.164.139:58472] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:36:54.492810 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.2:25570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:54.493426 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.2:25570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:55.429579 2026] [lsapi:warn] [pid 2913410:tid 2913410] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:36:55.725683 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:55.728351 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 66.249.66.33:60034] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:55.850531 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.4:24044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:55.851186 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.4:24044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:55.950192 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.34:27294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:55.950816 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.34:27294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:55.986526 2026] [security2:error] [pid 2919945:tid 2919945] [client 185.191.171.8:46212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,716.0.html"] [unique_id "amspR2HxqBwLXfXQVY320AAAABk"]
[Thu Jul 30 11:36:56.077739 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.34:27296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:56.078367 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.34:27296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:56.462337 2026] [lsapi:warn] [pid 2918379:tid 2918379] [client 216.73.216.199:32760] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:36:56.462372 2026] [lsapi:error] [pid 2918379:tid 2918379] [client 216.73.216.199:32760] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/l.v.e-manager/utils/clinfo.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:36:56.850566 2026] [ssl:error] [pid 2921063:tid 2921063] (EAI 2)Name or service not known: [client 144.76.19.72:57212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:56.850606 2026] [ssl:error] [pid 2921063:tid 2921063] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:56.907391 2026] [ssl:error] [pid 2900744:tid 2900744] (EAI 2)Name or service not known: [client 144.76.19.72:57222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:56.907427 2026] [ssl:error] [pid 2900744:tid 2900744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:36:57.005845 2026] [core:error] [pid 2919945:tid 2919945] (13)Permission denied: [client 216.73.216.199:15094] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_head_cache/objs_per_slab
[Thu Jul 30 11:36:57.013371 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.33:51624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:57.013985 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.33:51624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:57.062684 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.7:52828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:57.063308 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.7:52828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:57.597526 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.2:61728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:57.598163 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.2:61728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:57.762528 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:57.765184 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:58.317245 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.32:52304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:58.317871 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.32:52304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:58.378419 2026] [ssl:error] [pid 2919945:tid 2919945] (70014)End of file found: [client 216.73.216.199:15094] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:58.638097 2026] [ssl:error] [pid 2921063:tid 2921063] (70014)End of file found: [client 216.73.216.199:3624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:36:58.789634 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:36:58.789825 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.40:33074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:58.790442 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.40:33074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:58.792286 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:36:59.568154 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.53:56104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:59.568780 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.53:56104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:59.760880 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.2:61740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:59.761503 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.2:61740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:59.787180 2026] [core:error] [pid 2910813:tid 2910813] (13)Permission denied: [client 216.73.216.199:29854] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/shrink
[Thu Jul 30 11:36:59.810696 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.27:31958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:36:59.811317 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.27:31958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:36:59.987759 2026] [ssl:error] [pid 2913442:tid 2913442] (EAI 2)Name or service not known: [client 144.76.19.72:63162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:36:59.987794 2026] [ssl:error] [pid 2913442:tid 2913442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:00.043543 2026] [ssl:error] [pid 2915532:tid 2915532] (EAI 2)Name or service not known: [client 144.76.19.72:63168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:00.043568 2026] [ssl:error] [pid 2915532:tid 2915532] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:00.981639 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:00.984445 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:01.024629 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.6:22928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:01.025245 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.6:22928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:01.129442 2026] [core:error] [pid 2920394:tid 2920394] [client 66.249.66.40:37326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:37:01.129473 2026] [core:error] [pid 2920394:tid 2920394] [client 66.249.66.40:37326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:37:01.205745 2026] [core:error] [pid 2907083:tid 2907083] [client 66.249.66.167:40878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:37:01.205769 2026] [core:error] [pid 2907083:tid 2907083] [client 66.249.66.167:40878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:37:01.279574 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.47:32038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:01.280203 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.47:32038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:01.302272 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.35:25598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:01.302890 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.35:25598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:01.394334 2026] [ssl:error] [pid 2910813:tid 2910813] (70014)End of file found: [client 216.73.216.199:29854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:01.739255 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.14:52324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:01.739874 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.14:52324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:02.042806 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.49:51654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:02.043448 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.49:51654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:02.477792 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:02.480525 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 66.249.66.33:46419] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:02.549882 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.6:33738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:02.550506 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.6:33738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:03.177584 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:63180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:03.177617 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:03.230214 2026] [ssl:error] [pid 2913442:tid 2913442] (EAI 2)Name or service not known: [client 144.76.19.72:63192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:03.230244 2026] [ssl:error] [pid 2913442:tid 2913442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:03.237722 2026] [lsapi:warn] [pid 2915532:tid 2915532] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:03.651528 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.14:52334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:03.652212 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.14:52334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:03.781916 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.21:31158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:03.782548 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.21:31158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:03.966198 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.67:58396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:03.966813 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.67:58396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:04.403648 2026] [access_compat:error] [pid 2914802:tid 2914802] [client 136.158.37.124:39058] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:37:04.498594 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 66.249.66.35:63611] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:04.501275 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 66.249.66.35:63611] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:05.317039 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.44:53542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:05.317678 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.44:53542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:05.325185 2026] [ssl:error] [pid 2907083:tid 2907083] (70014)End of file found: [client 216.73.216.199:36916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:05.682205 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.17:38402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:05.682858 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.17:38402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:05.892751 2026] [lsapi:warn] [pid 2889424:tid 2889424] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:05.941061 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.19:33646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:05.941692 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.19:33646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:06.229594 2026] [ssl:error] [pid 2919945:tid 2919945] (70014)End of file found: [client 216.73.216.199:44071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:07.264912 2026] [ssl:error] [pid 2921705:tid 2921705] (EAI 2)Name or service not known: [client 144.76.19.72:63206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:07.264949 2026] [ssl:error] [pid 2921705:tid 2921705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:07.378921 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.52:62020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:07.379559 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.52:62020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:07.577962 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.71:23654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:07.578592 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.71:23654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:07.844438 2026] [ssl:error] [pid 2919891:tid 2919891] (EAI 2)Name or service not known: [client 144.76.19.72:63210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:07.844473 2026] [ssl:error] [pid 2919891:tid 2919891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:07.963907 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 66.249.66.33:57264] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:07.966552 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 66.249.66.33:57264] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:08.553467 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.12:63982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:08.554130 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.12:63982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:08.557100 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.58:20880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:08.557730 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.58:20880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:08.642869 2026] [ssl:error] [pid 2916061:tid 2916061] (70014)End of file found: [client 216.73.216.199:41134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:08.821222 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.56:43664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:08.821844 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.56:43664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:08.997154 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.22:58906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:08.997776 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.22:58906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:09.249692 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 66.249.66.34:42120] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:09.252404 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 66.249.66.34:42120] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:10.225187 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.68:48054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:10.225844 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.68:48054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:10.249352 2026] [authz_core:error] [pid 2921809:tid 2921809] [client 57.141.0.20:63954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:10.250009 2026] [authz_core:error] [pid 2921809:tid 2921809] [client 57.141.0.20:63954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:10.254896 2026] [authz_core:error] [pid 2921810:tid 2921810] [client 57.141.0.22:58914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:10.255557 2026] [authz_core:error] [pid 2921810:tid 2921810] [client 57.141.0.22:58914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:10.437677 2026] [authz_core:error] [pid 2921810:tid 2921810] [client 57.141.0.45:28524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:10.438336 2026] [authz_core:error] [pid 2921810:tid 2921810] [client 57.141.0.45:28524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:11.054428 2026] [core:error] [pid 2921810:tid 2921810] (13)Permission denied: [client 216.73.216.199:29480] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-1k/store_user
[Thu Jul 30 11:37:11.223991 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.38:23554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:11.224646 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.38:23554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:11.307486 2026] [security2:error] [pid 2921966:tid 2921966] [client 43.152.72.244:33074] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.blow-hairstudio.co.uk"] [uri "/"] [unique_id "amspV5GfjvE-4oqlaLgEggAAADw"]
[Thu Jul 30 11:37:11.329620 2026] [ssl:error] [pid 2919945:tid 2919945] (EAI 2)Name or service not known: [client 144.76.19.72:53012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:11.329653 2026] [ssl:error] [pid 2919945:tid 2919945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:11.423630 2026] [ssl:error] [pid 2915576:tid 2915576] (EAI 2)Name or service not known: [client 144.76.19.72:53022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:11.423659 2026] [ssl:error] [pid 2915576:tid 2915576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:11.450062 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.32:45060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:11.450914 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.32:45060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:11.585980 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.4:28844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:11.586609 2026] [authz_core:error] [pid 2915576:tid 2915576] [client 57.141.0.4:28844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:11.820053 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.33:23118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:11.820683 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.33:23118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:12.259660 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.5:47632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:12.260286 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.5:47632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:12.566557 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:12.569237 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:12.605457 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.32:45076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:12.606089 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.32:45076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:13.119918 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 66.249.66.33:49319] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:13.122677 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 66.249.66.33:49319] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:13.165581 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.62:41982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:13.166202 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.62:41982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:13.327376 2026] [security2:error] [pid 2910813:tid 2910813] [client 43.152.72.244:56864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amspWb_rCxe41z4kj0m6mwAAABU"], referer: http://www.blow-hairstudio.co.uk
[Thu Jul 30 11:37:13.611861 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.42:35496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:13.612485 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.42:35496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:13.862147 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.56:43674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:13.862787 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.56:43674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:13.897012 2026] [lsapi:warn] [pid 2916016:tid 2916016] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:13.904340 2026] [security2:error] [pid 2915577:tid 2915577] [client 187.18.255.153:54292] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspWbydQcrpAXr80S523gAAAB8"]
[Thu Jul 30 11:37:13.904384 2026] [security2:error] [pid 2915577:tid 2915577] [client 187.18.255.153:54292] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspWbydQcrpAXr80S523gAAAB8"]
[Thu Jul 30 11:37:13.904669 2026] [security2:error] [pid 2915577:tid 2915577] [client 187.18.255.153:54292] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspWbydQcrpAXr80S523gAAAB8"]
[Thu Jul 30 11:37:14.195737 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:14.198464 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:14.314782 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.52:43966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:14.315407 2026] [authz_core:error] [pid 2915532:tid 2915532] [client 57.141.0.52:43966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:14.437609 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.60:36502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:14.438233 2026] [authz_core:error] [pid 2916909:tid 2916909] [client 57.141.0.60:36502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:14.482079 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:53026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:14.482117 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:14.539284 2026] [ssl:error] [pid 2918289:tid 2918289] (EAI 2)Name or service not known: [client 144.76.19.72:53034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:14.539317 2026] [ssl:error] [pid 2918289:tid 2918289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:14.672356 2026] [ssl:error] [pid 2921810:tid 2921810] (70014)End of file found: [client 216.73.216.199:29480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:14.983001 2026] [ssl:error] [pid 2915576:tid 2915576] (70014)End of file found: [client 216.73.216.199:57824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:15.020748 2026] [access_compat:error] [pid 2919891:tid 2919891] [client 136.158.37.124:39865] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:37:15.110042 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.49:54128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:15.110678 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.49:54128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:15.789584 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:15.792254 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:15.847210 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.70:40410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:15.847837 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.70:40410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:15.935647 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.32:31348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:15.936295 2026] [authz_core:error] [pid 2916016:tid 2916016] [client 57.141.0.32:31348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:15.943922 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.16:20166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:15.944560 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.16:20166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:16.146940 2026] [authz_core:error] [pid 2921812:tid 2921812] [client 57.141.0.23:31614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:16.147599 2026] [authz_core:error] [pid 2921812:tid 2921812] [client 57.141.0.23:31614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:16.379950 2026] [lsapi:warn] [pid 2921811:tid 2921811] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:16.729199 2026] [authz_core:error] [pid 2921063:tid 2921063] [client 57.141.0.10:59442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:16.729810 2026] [authz_core:error] [pid 2921063:tid 2921063] [client 57.141.0.10:59442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:16.901862 2026] [security2:error] [pid 2921525:tid 2921525] [client 43.167.177.94:25659] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspXNTlL13k8rOu79c0lwAAAAI"]
[Thu Jul 30 11:37:16.901912 2026] [security2:error] [pid 2921525:tid 2921525] [client 43.167.177.94:25659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspXNTlL13k8rOu79c0lwAAAAI"]
[Thu Jul 30 11:37:16.902204 2026] [security2:error] [pid 2921525:tid 2921525] [client 43.167.177.94:25659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspXNTlL13k8rOu79c0lwAAAAI"]
[Thu Jul 30 11:37:17.392664 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:17.395360 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:17.471991 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.27:50220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:17.472636 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.27:50220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:17.572059 2026] [authz_core:error] [pid 2921812:tid 2921812] [client 57.141.0.29:60940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:17.572693 2026] [authz_core:error] [pid 2921812:tid 2921812] [client 57.141.0.29:60940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:17.599210 2026] [ssl:error] [pid 2921809:tid 2921809] (EAI 2)Name or service not known: [client 144.76.19.72:53040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:17.599238 2026] [ssl:error] [pid 2921809:tid 2921809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:17.656615 2026] [ssl:error] [pid 2914802:tid 2914802] (EAI 2)Name or service not known: [client 144.76.19.72:53054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:17.656651 2026] [ssl:error] [pid 2914802:tid 2914802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:17.694782 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 158.158.76.106:24174] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 11:37:17.980316 2026] [security2:error] [pid 2915577:tid 2915577] [client 114.119.142.20:28789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1597359600/cat_ids~102,14/request_format~html"] [unique_id "amspXbydQcrpAXr80S523wAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1597359600/request_format~html/cat_ids~102
[Thu Jul 30 11:37:18.265786 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.10:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:18.266409 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.10:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:18.518292 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.23:31630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:18.518921 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.23:31630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:18.944168 2026] [security2:error] [pid 2909092:tid 2909092] [client 114.119.142.20:28799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1597359600/cat_ids~102,14/request_format~html"] [unique_id "amspXhd20lWHU4VqEQpenQAAAEo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1597359600/request_format~html/cat_ids~102
[Thu Jul 30 11:37:19.007088 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.10:59456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:19.007718 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.10:59456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:19.211989 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.8:60090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:19.212626 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.8:60090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:19.885093 2026] [security2:error] [pid 2921807:tid 2921807] [client 85.208.96.208:18492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7281.0/prev_next,next.html"] [unique_id "amspX53uL819D8WlBqfM3AAAADA"]
[Thu Jul 30 11:37:20.072208 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.21:37302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:20.072828 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.21:37302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:20.107330 2026] [ssl:error] [pid 2898449:tid 2898449] (70014)End of file found: [client 216.73.216.199:10952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:20.424630 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:20.427291 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:20.533494 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.23:31636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:20.534125 2026] [authz_core:error] [pid 2913445:tid 2913445] [client 57.141.0.23:31636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:20.622134 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.47:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:20.622758 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.47:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:20.710288 2026] [security2:error] [pid 2921807:tid 2921807] [client 49.51.132.100:58282] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amspYJ3uL819D8WlBqfM3QAAADA"]
[Thu Jul 30 11:37:20.711728 2026] [ssl:error] [pid 2915577:tid 2915577] (EAI 2)Name or service not known: [client 144.76.19.72:40194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:20.711750 2026] [ssl:error] [pid 2915577:tid 2915577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:20.764711 2026] [ssl:error] [pid 2913442:tid 2913442] (EAI 2)Name or service not known: [client 144.76.19.72:40204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:20.764743 2026] [ssl:error] [pid 2913442:tid 2913442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:21.006538 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.67:36932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:21.007166 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.67:36932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:21.209361 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.47:49268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:21.209985 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.47:49268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:21.372419 2026] [security2:error] [pid 2894255:tid 2894255] [client 43.167.177.94:14521] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspYSXCOEOE70_2GmxBkAAAAB0"]
[Thu Jul 30 11:37:21.372482 2026] [security2:error] [pid 2894255:tid 2894255] [client 43.167.177.94:14521] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspYSXCOEOE70_2GmxBkAAAAB0"]
[Thu Jul 30 11:37:21.372832 2026] [security2:error] [pid 2894255:tid 2894255] [client 43.167.177.94:14521] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspYSXCOEOE70_2GmxBkAAAAB0"]
[Thu Jul 30 11:37:21.412997 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.34:40122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:21.413629 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.34:40122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:21.510663 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.24:22864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:21.511282 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.24:22864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:21.620230 2026] [ssl:error] [pid 2914802:tid 2914802] (70014)End of file found: [client 216.73.216.199:49074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:21.836166 2026] [security2:error] [pid 2913442:tid 2913442] [client 85.208.96.208:54112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5512.0.html"] [unique_id "amspYWT6yYEpjD_2cHlm3AAAACQ"]
[Thu Jul 30 11:37:22.094970 2026] [ssl:error] [pid 2921807:tid 2921807] (70014)End of file found: [client 216.73.216.199:13996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:22.409199 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:22.411996 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:22.569258 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.20:64642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:22.569885 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.20:64642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:22.713016 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.15:25026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:22.713747 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.15:25026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:22.947681 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:22.950492 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:23.175504 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:23.178224 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:23.190867 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.55:26680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:23.191482 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.55:26680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:23.325599 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.21:37304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:23.326228 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.21:37304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:23.822496 2026] [ssl:error] [pid 2913442:tid 2913442] (EAI 2)Name or service not known: [client 144.76.19.72:40216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:23.822539 2026] [ssl:error] [pid 2913442:tid 2913442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:23.873616 2026] [ssl:error] [pid 2918379:tid 2918379] (EAI 2)Name or service not known: [client 144.76.19.72:40222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:23.873652 2026] [ssl:error] [pid 2918379:tid 2918379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:23.991279 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.61:29406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:23.991924 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.61:29406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:24.391091 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.48:36796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:24.391750 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.48:36796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:24.575434 2026] [lsapi:warn] [pid 2921966:tid 2921966] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:24.947320 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.39:61486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:24.947941 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.39:61486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:25.044788 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.50:48934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:25.045412 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.50:48934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:25.107320 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:25.109987 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:25.404729 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.56:26772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:25.405355 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.56:26772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:25.646678 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.10:59472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:25.647300 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.10:59472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:25.695246 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.51:35914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:25.695867 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.51:35914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:26.010175 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.34:40132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:26.010793 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.34:40132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:26.069478 2026] [access_compat:error] [pid 2921660:tid 2921660] [client 136.158.37.124:40714] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:37:26.226244 2026] [ssl:error] [pid 2898449:tid 2898449] (70014)End of file found: [client 216.73.216.199:33757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:26.489166 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:26.491847 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:26.834014 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.51:35926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:26.834646 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.51:35926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:26.903044 2026] [lsapi:warn] [pid 2921811:tid 2921811] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:26.931478 2026] [ssl:error] [pid 2914802:tid 2914802] (EAI 2)Name or service not known: [client 144.76.19.72:40228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:26.931506 2026] [ssl:error] [pid 2914802:tid 2914802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:26.987579 2026] [ssl:error] [pid 2920394:tid 2920394] (EAI 2)Name or service not known: [client 144.76.19.72:40242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:26.987610 2026] [ssl:error] [pid 2920394:tid 2920394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:27.001909 2026] [authz_core:error] [pid 2921746:tid 2921746] [client 57.141.0.8:27316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:27.002556 2026] [authz_core:error] [pid 2921746:tid 2921746] [client 57.141.0.8:27316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:27.243188 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.12:58532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:27.243808 2026] [authz_core:error] [pid 2920395:tid 2920395] [client 57.141.0.12:58532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:27.950182 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.30:35156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:27.950802 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.30:35156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:28.253657 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.51:35934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:28.254289 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.51:35934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:28.356544 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:28.359198 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:28.830549 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.52:41880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:28.831193 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.52:41880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:28.909650 2026] [authz_core:error] [pid 2921746:tid 2921746] [client 57.141.0.37:54242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:28.910272 2026] [authz_core:error] [pid 2921746:tid 2921746] [client 57.141.0.37:54242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:29.187823 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.39:61488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:29.188447 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.39:61488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:29.221063 2026] [ssl:error] [pid 2921966:tid 2921966] (70014)End of file found: [client 216.73.216.199:9433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:29.389943 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.50:48944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:29.390581 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.50:48944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:29.858502 2026] [security2:error] [pid 2910927:tid 2910927] [client 51.68.111.216:35969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "healthkinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amspabcxIFg0yXQ4oSu-SQAAACI"]
[Thu Jul 30 11:37:30.052891 2026] [ssl:error] [pid 2921746:tid 2921746] (EAI 2)Name or service not known: [client 144.76.19.72:29000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:30.052932 2026] [ssl:error] [pid 2921746:tid 2921746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:30.083398 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.33:35052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:30.084045 2026] [authz_core:error] [pid 2920394:tid 2920394] [client 57.141.0.33:35052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:30.107858 2026] [ssl:error] [pid 2921810:tid 2921810] (EAI 2)Name or service not known: [client 144.76.19.72:29006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:30.107899 2026] [ssl:error] [pid 2921810:tid 2921810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:30.220270 2026] [lsapi:warn] [pid 2915577:tid 2915577] [client 216.73.216.199:49453] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:37:30.220307 2026] [lsapi:error] [pid 2915577:tid 2915577] [client 216.73.216.199:49453] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/null.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:37:30.232531 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:30.235263 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:30.265472 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.37:54252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:30.266102 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.37:54252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:30.516317 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.3:48758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:30.516935 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.3:48758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:30.909912 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.16:46854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:30.910544 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.16:46854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:30.956722 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.52:43380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:30.957345 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.52:43380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:31.030751 2026] [ssl:error] [pid 2921746:tid 2921746] (70014)End of file found: [client 216.73.216.199:4483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:31.478753 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.8:27320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:31.479403 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.8:27320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:31.937166 2026] [core:error] [pid 2923503:tid 2923503] (13)Permission denied: [client 216.73.216.199:39274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/signal_cache/objects_partial
[Thu Jul 30 11:37:32.032012 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.47:27350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:32.032639 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.47:27350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:32.108229 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.1:32622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:32.108869 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.1:32622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:32.538697 2026] [ssl:error] [pid 2923503:tid 2923503] (70014)End of file found: [client 216.73.216.199:39274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:32.697654 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 66.249.66.33:36504] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:32.700391 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 66.249.66.33:36504] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:32.933325 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.41:31616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:32.933947 2026] [authz_core:error] [pid 2921747:tid 2921747] [client 57.141.0.41:31616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:33.192940 2026] [ssl:error] [pid 2923573:tid 2923573] (EAI 2)Name or service not known: [client 144.76.19.72:29016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:33.192992 2026] [ssl:error] [pid 2923573:tid 2923573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:33.223524 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.46:47226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:33.224169 2026] [authz_core:error] [pid 2921660:tid 2921660] [client 57.141.0.46:47226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:33.253821 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.12:60966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:33.254469 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.12:60966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:33.285797 2026] [ssl:error] [pid 2923574:tid 2923574] (EAI 2)Name or service not known: [client 144.76.19.72:29032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:33.285839 2026] [ssl:error] [pid 2923574:tid 2923574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:33.439538 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:33.442210 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:33.499946 2026] [authz_core:error] [pid 2923575:tid 2923575] [client 57.141.0.19:39264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:33.500620 2026] [authz_core:error] [pid 2923575:tid 2923575] [client 57.141.0.19:39264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:34.136923 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.11:26978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:34.137554 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.11:26978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:34.409333 2026] [security2:error] [pid 2921525:tid 2921525] [client 185.191.171.12:42068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/travel-agency-in-kingston,-jamaica"] [unique_id "amspbtTlL13k8rOu79c0mwAAAAI"]
[Thu Jul 30 11:37:34.685085 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.3:48770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:34.685728 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.3:48770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:35.025664 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:35.028397 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:35.051634 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.21:59310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:35.052257 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.21:59310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:35.188957 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.19:39270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:35.189589 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.19:39270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:35.254961 2026] [core:error] [pid 2921808:tid 2921808] (13)Permission denied: [client 216.73.216.199:1089] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/cpu_partial
[Thu Jul 30 11:37:35.273660 2026] [lsapi:warn] [pid 2923573:tid 2923573] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:35.311822 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.30:60516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:35.312466 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.30:60516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:35.557121 2026] [core:error] [pid 2921808:tid 2921808] (13)Permission denied: [client 216.73.216.199:1089] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-64/objects
[Thu Jul 30 11:37:35.800304 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.46:47228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:35.801368 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.46:47228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:36.166929 2026] [authz_core:error] [pid 2923439:tid 2923439] [client 57.141.0.53:59586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:36.167593 2026] [authz_core:error] [pid 2923439:tid 2923439] [client 57.141.0.53:59586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:36.346141 2026] [ssl:error] [pid 2915577:tid 2915577] (EAI 2)Name or service not known: [client 144.76.19.72:29044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:36.346169 2026] [ssl:error] [pid 2915577:tid 2915577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:36.400914 2026] [ssl:error] [pid 2921814:tid 2921814] (EAI 2)Name or service not known: [client 144.76.19.72:29056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:36.400957 2026] [ssl:error] [pid 2921814:tid 2921814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:36.464332 2026] [ssl:error] [pid 2921808:tid 2921808] (70014)End of file found: [client 216.73.216.199:1089] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:36.483499 2026] [security2:error] [pid 2921813:tid 2921813] [client 85.208.96.193:26176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9433.0/prev_next,next.html"] [unique_id "amspcLpLlq6tXW8yDvSW-QAAADo"]
[Thu Jul 30 11:37:36.613129 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:36.615784 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:36.709914 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.69:61872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:36.710538 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.69:61872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:36.897805 2026] [access_compat:error] [pid 2918380:tid 2918380] [client 136.158.37.124:41629] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:37:36.947014 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.18:43752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:36.947642 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.18:43752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:36.950254 2026] [ssl:error] [pid 2921807:tid 2921807] (70014)End of file found: [client 216.73.216.199:54704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:37.080640 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.10:39106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:37.081268 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.10:39106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:37.254484 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.37:42056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:37.255119 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.37:42056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:37.398982 2026] [lsapi:warn] [pid 2921746:tid 2921746] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:37.810218 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.7:64022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:37.810837 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.7:64022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:37.875369 2026] [core:error] [pid 2913448:tid 2913448] (13)Permission denied: [client 216.73.216.199:4524] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/btree_node/total_objects
[Thu Jul 30 11:37:37.912008 2026] [security2:error] [pid 2909093:tid 2909093] [client 74.7.243.194:41508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amspcTY7DjsLGvL-FIwhJQAAAEs"]
[Thu Jul 30 11:37:38.143789 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.3:48778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:38.144436 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.3:48778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:38.191150 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:38.193914 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:38.211712 2026] [security2:error] [pid 2921811:tid 2921811] [client 18.199.86.73:58678] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.gatkabfs.com"] [uri "/.git/config"] [unique_id "amspclDYxkXBIz3YAdiiYgAAADQ"]
[Thu Jul 30 11:37:38.211866 2026] [security2:error] [pid 2921811:tid 2921811] [client 18.199.86.73:58678] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.gatkabfs.com"] [uri "/.git/config"] [unique_id "amspclDYxkXBIz3YAdiiYgAAADQ"]
[Thu Jul 30 11:37:38.238876 2026] [security2:error] [pid 2921811:tid 2921811] [client 18.199.86.73:58678] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.gatkabfs.com"] [uri "/403.shtml"] [unique_id "amspclDYxkXBIz3YAdiiYgAAADQ"]
[Thu Jul 30 11:37:38.285270 2026] [core:error] [pid 2913448:tid 2913448] (13)Permission denied: [client 216.73.216.199:4524] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/partial
[Thu Jul 30 11:37:38.389529 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 20.203.142.71:45638] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/Requests/error_log
[Thu Jul 30 11:37:38.888083 2026] [core:error] [pid 2913448:tid 2913448] (13)Permission denied: [client 216.73.216.199:4524] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/netconsole/sections/__bug_table
[Thu Jul 30 11:37:39.230653 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.49:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:39.231283 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.49:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:39.457908 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:29068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:39.457940 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:39.480762 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.68:44964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:39.481382 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.68:44964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:39.512447 2026] [ssl:error] [pid 2921746:tid 2921746] (EAI 2)Name or service not known: [client 144.76.19.72:29076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:39.512473 2026] [ssl:error] [pid 2921746:tid 2921746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:39.600498 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.26:46660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:39.601149 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.26:46660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:39.738904 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.55:31526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:39.739555 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.55:31526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:39.795825 2026] [lsapi:warn] [pid 2913448:tid 2913448] [client 216.73.216.199:4524] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:37:39.795853 2026] [lsapi:error] [pid 2913448:tid 2913448] [client 216.73.216.199:4524] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-net-url2/docs/example.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:37:40.000063 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:40.002875 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:40.107945 2026] [authz_core:error] [pid 2921746:tid 2921746] [client 57.141.0.43:41528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:40.108602 2026] [authz_core:error] [pid 2921746:tid 2921746] [client 57.141.0.43:41528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:40.115577 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.66:35782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:40.116187 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.66:35782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:40.439955 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.54:23880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:40.440586 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.54:23880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:41.239257 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.5:27876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:41.239882 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.5:27876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:41.551137 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.71:26746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:41.551765 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.71:26746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:41.770265 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:41.772942 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:41.915459 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.40:46260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:41.916093 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.40:46260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:42.229547 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.13:32096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:42.230177 2026] [authz_core:error] [pid 2918289:tid 2918289] [client 57.141.0.13:32096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:42.420836 2026] [authz_core:error] [pid 2921809:tid 2921809] [client 57.141.0.40:46272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:42.421496 2026] [authz_core:error] [pid 2921809:tid 2921809] [client 57.141.0.40:46272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:42.523199 2026] [cgi:error] [pid 2918340:tid 2918340] [client 216.73.216.199:55831] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Algorithm-Diff/htmldiff.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:37:42.523275 2026] [cgi:error] [pid 2918340:tid 2918340] [client 216.73.216.199:55831] End of script output before headers: htmldiff.pl
[Thu Jul 30 11:37:42.570094 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:58166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:42.570139 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:42.624766 2026] [ssl:error] [pid 2913410:tid 2913410] (EAI 2)Name or service not known: [client 144.76.19.72:58182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:42.624801 2026] [ssl:error] [pid 2913410:tid 2913410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:42.919774 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.56:60406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:42.920398 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.56:60406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:43.325123 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.1:20498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:43.325753 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.1:20498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:43.359490 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:43.362197 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:43.705996 2026] [core:error] [pid 2921745:tid 2921745] (13)Permission denied: [client 216.73.216.199:59629] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/user_namespace/objects_partial
[Thu Jul 30 11:37:43.991851 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.13:22326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:43.992477 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.13:22326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:44.007397 2026] [core:error] [pid 2921745:tid 2921745] (13)Permission denied: [client 216.73.216.199:59629] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/objects
[Thu Jul 30 11:37:44.147030 2026] [authz_core:error] [pid 2921809:tid 2921809] [client 57.141.0.59:36594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:44.147663 2026] [authz_core:error] [pid 2921809:tid 2921809] [client 57.141.0.59:36594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:44.312619 2026] [core:error] [pid 2921745:tid 2921745] (13)Permission denied: [client 216.73.216.199:59629] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/objects
[Thu Jul 30 11:37:44.612269 2026] [authz_core:error] [pid 2923575:tid 2923575] [client 57.141.0.69:20374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:44.612631 2026] [core:error] [pid 2921745:tid 2921745] (13)Permission denied: [client 216.73.216.199:59629] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/radix_tree_node/total_objects
[Thu Jul 30 11:37:44.612895 2026] [authz_core:error] [pid 2923575:tid 2923575] [client 57.141.0.69:20374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:44.860920 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.18:25020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:44.861554 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.18:25020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:45.114681 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.67:47506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:45.115342 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.67:47506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:45.134353 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.34:55538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:45.134969 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.34:55538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:45.682748 2026] [ssl:error] [pid 2923574:tid 2923574] (EAI 2)Name or service not known: [client 144.76.19.72:58184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:45.682782 2026] [ssl:error] [pid 2923574:tid 2923574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:45.687444 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.37:61130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:45.688076 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.37:61130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:45.737252 2026] [ssl:error] [pid 2921746:tid 2921746] (EAI 2)Name or service not known: [client 144.76.19.72:58198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:45.737282 2026] [ssl:error] [pid 2921746:tid 2921746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:45.794913 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:45.797588 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:46.137259 2026] [ssl:error] [pid 2921745:tid 2921745] (70014)End of file found: [client 216.73.216.199:59629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:46.212202 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.12:52170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:46.212824 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.12:52170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:46.384080 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.52:31644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:46.384704 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.52:31644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:46.624123 2026] [lsapi:warn] [pid 2912360:tid 2912360] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:46.648469 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.18:25036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:46.649126 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.18:25036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:46.928698 2026] [core:error] [pid 2918379:tid 2918379] (13)Permission denied: [client 216.73.216.199:3493] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip6_dst_cache/total_objects
[Thu Jul 30 11:37:46.981621 2026] [authz_core:error] [pid 2923574:tid 2923574] [client 57.141.0.10:22672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:46.982252 2026] [authz_core:error] [pid 2923574:tid 2923574] [client 57.141.0.10:22672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:47.390056 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.48:52134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:47.390682 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.48:52134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:47.667764 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:47.670424 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:47.784746 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.45:26894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:47.785396 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.45:26894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:47.848730 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.53:63332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:47.849352 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.53:63332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:47.859973 2026] [lsapi:warn] [pid 2921744:tid 2921744] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:47.915027 2026] [access_compat:error] [pid 2913448:tid 2913448] [client 136.158.37.124:42520] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:37:48.057507 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.2:29932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:48.058146 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.2:29932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:48.467337 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.18:25042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:48.467957 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.18:25042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:48.790960 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:58206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:48.791005 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:48.848179 2026] [ssl:error] [pid 2921747:tid 2921747] (EAI 2)Name or service not known: [client 144.76.19.72:58220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:48.848213 2026] [ssl:error] [pid 2921747:tid 2921747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:49.221843 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.36:23732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:49.222467 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.36:23732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:49.417379 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.50:47444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:49.418001 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.50:47444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:49.427480 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:49.430127 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:49.432062 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.63:63336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:49.432688 2026] [authz_core:error] [pid 2900742:tid 2900742] [client 57.141.0.63:63336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:49.445019 2026] [core:error] [pid 2918379:tid 2918379] (13)Permission denied: [client 216.73.216.199:3493] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/names_cache/total_objects
[Thu Jul 30 11:37:49.843676 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.52:27186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:49.844300 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.52:27186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:49.873608 2026] [authz_core:error] [pid 2921744:tid 2921744] [client 57.141.0.1:20506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:49.874232 2026] [authz_core:error] [pid 2921744:tid 2921744] [client 57.141.0.1:20506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:50.042387 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.16:33134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:50.043010 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.16:33134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:50.090038 2026] [authz_core:error] [pid 2924055:tid 2924055] [client 57.141.0.56:62810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:50.090667 2026] [authz_core:error] [pid 2924055:tid 2924055] [client 57.141.0.56:62810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:50.284396 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.44:49600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:50.285016 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.44:49600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:50.950044 2026] [ssl:error] [pid 2918379:tid 2918379] (70014)End of file found: [client 216.73.216.199:3493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:51.026719 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:51.029476 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:51.291872 2026] [security2:error] [pid 2923503:tid 2923503] [client 172.86.122.106:60598] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.example"] [unique_id "amspf5FPm0BJRtWza7RulAAAAAM"]
[Thu Jul 30 11:37:51.292080 2026] [security2:error] [pid 2923503:tid 2923503] [client 172.86.122.106:60598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.example"] [unique_id "amspf5FPm0BJRtWza7RulAAAAAM"]
[Thu Jul 30 11:37:51.292307 2026] [security2:error] [pid 2923503:tid 2923503] [client 172.86.122.106:60598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.example"] [unique_id "amspf5FPm0BJRtWza7RulAAAAAM"]
[Thu Jul 30 11:37:51.322913 2026] [authz_core:error] [pid 2921810:tid 2921810] [client 57.141.0.63:63352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:51.323568 2026] [authz_core:error] [pid 2921810:tid 2921810] [client 57.141.0.63:63352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:51.446822 2026] [authz_core:error] [pid 2924055:tid 2924055] [client 57.141.0.42:54468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:51.447452 2026] [authz_core:error] [pid 2924055:tid 2924055] [client 57.141.0.42:54468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:51.449663 2026] [security2:error] [pid 2912360:tid 2912360] [client 172.86.122.106:60614] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env.example"] [unique_id "amspf6N0lmL278xfT_AmkAAAAA0"]
[Thu Jul 30 11:37:51.449814 2026] [security2:error] [pid 2912360:tid 2912360] [client 172.86.122.106:60614] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env.example"] [unique_id "amspf6N0lmL278xfT_AmkAAAAA0"]
[Thu Jul 30 11:37:51.450021 2026] [security2:error] [pid 2912360:tid 2912360] [client 172.86.122.106:60614] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env.example"] [unique_id "amspf6N0lmL278xfT_AmkAAAAA0"]
[Thu Jul 30 11:37:51.574164 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.40:34076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:51.574785 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.40:34076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:51.857832 2026] [ssl:error] [pid 2923573:tid 2923573] (70014)End of file found: [client 216.73.216.199:37675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:51.907407 2026] [ssl:error] [pid 2921745:tid 2921745] (EAI 2)Name or service not known: [client 144.76.19.72:38546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:51.907440 2026] [ssl:error] [pid 2921745:tid 2921745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:51.926315 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.46:21924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:51.926939 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.46:21924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:51.963640 2026] [ssl:error] [pid 2916061:tid 2916061] (EAI 2)Name or service not known: [client 144.76.19.72:38558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:51.963683 2026] [ssl:error] [pid 2916061:tid 2916061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:52.691598 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.33:61936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:52.692214 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.33:61936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:52.722346 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:52.725158 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:53.117812 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.3:38552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:53.118435 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.3:38552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:53.291095 2026] [core:error] [pid 2921745:tid 2921745] [client 66.249.66.39:62673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:37:53.291124 2026] [core:error] [pid 2921745:tid 2921745] [client 66.249.66.39:62673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:37:53.329084 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 43.173.178.126:47268] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 11:37:53.329131 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 43.173.178.126:47268] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 11:37:53.517947 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.36:35232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:53.518580 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.36:35232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:53.667142 2026] [lsapi:warn] [pid 2924055:tid 2924055] [client 216.73.216.199:59911] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:37:53.667172 2026] [lsapi:error] [pid 2924055:tid 2924055] [client 216.73.216.199:59911] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-http-request/docs/download-progress.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:37:53.799061 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.54:54140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:53.799703 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.54:54140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:54.348523 2026] [authz_core:error] [pid 2923439:tid 2923439] [client 57.141.0.56:62816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:54.349153 2026] [authz_core:error] [pid 2923439:tid 2923439] [client 57.141.0.56:62816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:54.392742 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:54.395498 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:54.487458 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.68:40216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:54.488091 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.68:40216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:54.658806 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.20:43356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:54.659429 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.20:43356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:54.808188 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.61:40538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:54.808804 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.61:40538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:55.018986 2026] [ssl:error] [pid 2924055:tid 2924055] (EAI 2)Name or service not known: [client 144.76.19.72:38566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:55.019030 2026] [ssl:error] [pid 2924055:tid 2924055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:55.072317 2026] [ssl:error] [pid 2916061:tid 2916061] (EAI 2)Name or service not known: [client 144.76.19.72:38582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:55.072346 2026] [ssl:error] [pid 2916061:tid 2916061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:55.358754 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.66:54180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:55.359381 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.66:54180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:55.418720 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.7:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:55.419344 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.7:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:55.475200 2026] [security2:error] [pid 2907083:tid 2907083] [client 216.73.216.199:38107] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/xmlreader.ini"] [unique_id "amspg8HmoaIMRP2UwRP30gAAADY"]
[Thu Jul 30 11:37:55.475490 2026] [security2:error] [pid 2907083:tid 2907083] [client 216.73.216.199:38107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/xmlreader.ini"] [unique_id "amspg8HmoaIMRP2UwRP30gAAADY"]
[Thu Jul 30 11:37:55.475709 2026] [security2:error] [pid 2907083:tid 2907083] [client 216.73.216.199:38107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all.def/xmlreader.ini"] [unique_id "amspg8HmoaIMRP2UwRP30gAAADY"]
[Thu Jul 30 11:37:55.940445 2026] [security2:error] [pid 2924055:tid 2924055] [client 43.157.43.147:41140] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.lucynaden.com"] [uri "/"] [unique_id "amspg3rl-zm6Ixl7I6RCpAAAAAo"]
[Thu Jul 30 11:37:55.983481 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.70:61780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:55.984145 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.70:61780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:56.507962 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.60:22286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:56.508592 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.60:22286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:56.568889 2026] [lsapi:warn] [pid 2921811:tid 2921811] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:56.666904 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.50:62886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:56.667526 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.50:62886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:57.271232 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:57.273984 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:57.320396 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.63:26868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:57.321030 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.63:26868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:57.519092 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.13:26246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:57.519711 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.13:26246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:57.529427 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.42:54544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:57.530027 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.42:54544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:57.617355 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.66:54184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:57.617977 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.66:54184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:57.752210 2026] [ssl:error] [pid 2907083:tid 2907083] (70014)End of file found: [client 216.73.216.199:38107] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:58.127475 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:38590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:58.127507 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:58.183388 2026] [ssl:error] [pid 2923573:tid 2923573] (EAI 2)Name or service not known: [client 144.76.19.72:38592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:37:58.183421 2026] [ssl:error] [pid 2923573:tid 2923573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:37:58.354474 2026] [ssl:error] [pid 2921745:tid 2921745] (70014)End of file found: [client 216.73.216.199:44331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:37:58.355821 2026] [lsapi:warn] [pid 2919947:tid 2919947] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:37:58.387186 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.45:61962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:58.388122 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.45:61962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:58.547883 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.59:33872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:58.548497 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.59:33872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:58.598293 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.44:49614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:58.598912 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.44:49614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:58.645856 2026] [access_compat:error] [pid 2916061:tid 2916061] [client 136.158.37.124:43348] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:37:58.780818 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.56:60856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:58.781441 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.56:60856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:58.925691 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:37:58.928416 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:37:59.117234 2026] [access_compat:error] [pid 2894255:tid 2894255] [client 45.158.164.139:57652] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:37:59.893044 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.52:44150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:59.893684 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.52:44150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:37:59.971097 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.7:41782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:37:59.971730 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.7:41782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:00.399446 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.56:60872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:00.400079 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.56:60872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:00.440645 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.1:64144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:00.441274 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.1:64144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:01.239950 2026] [ssl:error] [pid 2915577:tid 2915577] (EAI 2)Name or service not known: [client 144.76.19.72:53372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:01.239991 2026] [ssl:error] [pid 2915577:tid 2915577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:01.292801 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:53378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:01.292831 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:01.454559 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.67:20494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:01.455180 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.67:20494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:01.706094 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.37:56274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:01.706723 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.37:56274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:02.014062 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.52:44174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:02.014701 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.52:44174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:02.257230 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.58:24834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:02.257881 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.58:24834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:02.374941 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 66.249.66.35:44015] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:02.377652 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 66.249.66.35:44015] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:02.427265 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.65:25482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:02.427890 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.65:25482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:02.779328 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.33:54162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:02.779947 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.33:54162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:02.868382 2026] [authz_core:error] [pid 2923439:tid 2923439] [client 66.249.66.34:63645] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:02.871064 2026] [authz_core:error] [pid 2923439:tid 2923439] [client 66.249.66.34:63645] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:03.251045 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.44:52472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:03.251680 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.44:52472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:03.318088 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.12:34730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:03.318709 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.12:34730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:03.506133 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:03.511271 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:03.715477 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.60:46738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:03.716108 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.60:46738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:04.107644 2026] [core:error] [pid 2919891:tid 2919891] (13)Permission denied: [client 216.73.216.199:9133] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mnt_cache/total_objects
[Thu Jul 30 11:38:04.364793 2026] [ssl:error] [pid 2921745:tid 2921745] (EAI 2)Name or service not known: [client 144.76.19.72:53390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:04.364825 2026] [ssl:error] [pid 2921745:tid 2921745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:04.390864 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.4:65150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:04.391482 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.4:65150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:04.420839 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:53406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:04.420862 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:04.554167 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.51:21426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:04.554823 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.51:21426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:04.697118 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.15:51430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:04.697757 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.15:51430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:05.009289 2026] [core:error] [pid 2919891:tid 2919891] (13)Permission denied: [client 216.73.216.199:9133] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/removeacct
[Thu Jul 30 11:38:05.280724 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:05.285020 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:05.703603 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.1:21280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:05.704223 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.1:21280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:05.856452 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.38:48158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:05.857087 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.38:48158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:05.978991 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.46:53128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:05.979621 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.46:53128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:06.277754 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.47:64720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:06.278380 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.47:64720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:06.323184 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.28:60674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:06.323802 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.28:60674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:06.520822 2026] [lsapi:warn] [pid 2919891:tid 2919891] [client 216.73.216.199:9133] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 11:38:06.520850 2026] [lsapi:error] [pid 2919891:tid 2919891] [client 216.73.216.199:9133] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-net-url/docs/example.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 11:38:06.772237 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.53:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:06.772857 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.53:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:07.080742 2026] [security2:error] [pid 2910929:tid 2910929] [client 154.208.55.13:18529] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspj8ZW-msSwM_NmOUM6AAAACY"]
[Thu Jul 30 11:38:07.080796 2026] [security2:error] [pid 2910929:tid 2910929] [client 154.208.55.13:18529] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspj8ZW-msSwM_NmOUM6AAAACY"]
[Thu Jul 30 11:38:07.081038 2026] [security2:error] [pid 2910929:tid 2910929] [client 154.208.55.13:18529] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspj8ZW-msSwM_NmOUM6AAAACY"]
[Thu Jul 30 11:38:07.223256 2026] [lsapi:warn] [pid 2921814:tid 2921814] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:07.386402 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.1:21282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:07.387024 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.1:21282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:07.475903 2026] [ssl:error] [pid 2921807:tid 2921807] (EAI 2)Name or service not known: [client 144.76.19.72:53422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:07.475941 2026] [ssl:error] [pid 2921807:tid 2921807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:07.528490 2026] [ssl:error] [pid 2919891:tid 2919891] (EAI 2)Name or service not known: [client 144.76.19.72:53426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:07.528525 2026] [ssl:error] [pid 2919891:tid 2919891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:07.544449 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.1:21292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:07.545087 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.1:21292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:07.722386 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.48:40292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:07.723003 2026] [authz_core:error] [pid 2918380:tid 2918380] [client 57.141.0.48:40292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:08.154529 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:08.157230 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:08.235892 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.53:23588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:08.236524 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.53:23588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:08.242967 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.51:46324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:08.243593 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.51:46324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:08.831434 2026] [lsapi:warn] [pid 2923576:tid 2923576] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:09.314263 2026] [security2:error] [pid 2923503:tid 2923503] [client 197.205.128.162:36812] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspkZFPm0BJRtWza7Ru_gAAAAM"]
[Thu Jul 30 11:38:09.314312 2026] [security2:error] [pid 2923503:tid 2923503] [client 197.205.128.162:36812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspkZFPm0BJRtWza7Ru_gAAAAM"]
[Thu Jul 30 11:38:09.314554 2026] [security2:error] [pid 2923503:tid 2923503] [client 197.205.128.162:36812] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspkZFPm0BJRtWza7Ru_gAAAAM"]
[Thu Jul 30 11:38:09.510429 2026] [security2:error] [pid 2923503:tid 2923503] [client 172.86.122.106:55314] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspkZFPm0BJRtWza7Ru_wAAAAM"]
[Thu Jul 30 11:38:09.510643 2026] [security2:error] [pid 2923503:tid 2923503] [client 172.86.122.106:55314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspkZFPm0BJRtWza7Ru_wAAAAM"]
[Thu Jul 30 11:38:09.511023 2026] [security2:error] [pid 2923503:tid 2923503] [client 172.86.122.106:55314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspkZFPm0BJRtWza7Ru_wAAAAM"]
[Thu Jul 30 11:38:09.660550 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:09.663209 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:09.698583 2026] [security2:error] [pid 2921811:tid 2921811] [client 172.86.122.106:55316] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspkVDYxkXBIz3YAdiicgAAADQ"]
[Thu Jul 30 11:38:09.698778 2026] [security2:error] [pid 2921811:tid 2921811] [client 172.86.122.106:55316] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspkVDYxkXBIz3YAdiicgAAADQ"]
[Thu Jul 30 11:38:09.699159 2026] [security2:error] [pid 2921811:tid 2921811] [client 172.86.122.106:55316] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspkVDYxkXBIz3YAdiicgAAADQ"]
[Thu Jul 30 11:38:09.718047 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.27:46272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:09.718687 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.27:46272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:09.827248 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.38:44072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:09.827868 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.38:44072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:09.899366 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.14:49714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:09.899984 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.14:49714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:10.033831 2026] [security2:error] [pid 2921705:tid 2921705] [client 172.86.122.106:55332] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspktZmet_T5wgq7um9sAAAAAs"]
[Thu Jul 30 11:38:10.034019 2026] [security2:error] [pid 2921705:tid 2921705] [client 172.86.122.106:55332] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspktZmet_T5wgq7um9sAAAAAs"]
[Thu Jul 30 11:38:10.034413 2026] [security2:error] [pid 2921705:tid 2921705] [client 172.86.122.106:55332] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspktZmet_T5wgq7um9sAAAAAs"]
[Thu Jul 30 11:38:10.098378 2026] [security2:error] [pid 2921811:tid 2921811] [client 172.86.122.106:55342] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspklDYxkXBIz3YAdiidAAAADQ"]
[Thu Jul 30 11:38:10.098576 2026] [security2:error] [pid 2921811:tid 2921811] [client 172.86.122.106:55342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspklDYxkXBIz3YAdiidAAAADQ"]
[Thu Jul 30 11:38:10.098950 2026] [security2:error] [pid 2921811:tid 2921811] [client 172.86.122.106:55342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspklDYxkXBIz3YAdiidAAAADQ"]
[Thu Jul 30 11:38:10.135118 2026] [core:error] [pid 2924055:tid 2924055] (13)Permission denied: [client 216.73.216.199:36323] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/md_mod/parameters/new_array
[Thu Jul 30 11:38:10.219642 2026] [access_compat:error] [pid 2923503:tid 2923503] [client 136.158.37.124:44372] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:38:10.300756 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.20:58582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:10.301381 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.20:58582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:10.410057 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.60:46742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:10.410718 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.60:46742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:10.473480 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.40:29972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:10.474111 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.40:29972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:10.583371 2026] [ssl:error] [pid 2925583:tid 2925583] (EAI 2)Name or service not known: [client 144.76.19.72:41908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:10.583401 2026] [ssl:error] [pid 2925583:tid 2925583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:10.636667 2026] [ssl:error] [pid 2921811:tid 2921811] (EAI 2)Name or service not known: [client 144.76.19.72:41918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:10.636693 2026] [ssl:error] [pid 2921811:tid 2921811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:10.930060 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.37:48012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:10.930689 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.37:48012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:11.015892 2026] [core:error] [pid 2916061:tid 2916061] [client 57.141.0.67:37896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:11.015918 2026] [core:error] [pid 2916061:tid 2916061] [client 57.141.0.67:37896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:11.258890 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:11.261587 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:11.447974 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.5:37728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:11.448604 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.5:37728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:11.903793 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.47:59280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:11.904416 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.47:59280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:12.248130 2026] [core:error] [pid 2924912:tid 2924912] (13)Permission denied: [client 216.73.216.199:60642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/total_objects
[Thu Jul 30 11:38:12.259769 2026] [security2:error] [pid 2921966:tid 2921966] [client 110.249.202.142:15260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amsplJGfjvE-4oqlaLgEqAAAADw"]
[Thu Jul 30 11:38:12.280281 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.62:45054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:12.280905 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.62:45054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:12.337488 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.69:41288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:12.338121 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.69:41288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:12.345633 2026] [authz_core:error] [pid 2925583:tid 2925583] [client 57.141.0.64:34460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:12.346248 2026] [authz_core:error] [pid 2925583:tid 2925583] [client 57.141.0.64:34460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:12.441112 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.7:25696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:12.441739 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.7:25696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:12.661628 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:12.664287 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:12.833397 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.38:44078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:12.834014 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.38:44078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:12.953553 2026] [security2:error] [pid 2921811:tid 2921811] [client 18.199.86.73:42512] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.mjs-services.com"] [uri "/.git/config"] [unique_id "amsplFDYxkXBIz3YAdiieQAAADQ"]
[Thu Jul 30 11:38:12.953739 2026] [security2:error] [pid 2921811:tid 2921811] [client 18.199.86.73:42512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.mjs-services.com"] [uri "/.git/config"] [unique_id "amsplFDYxkXBIz3YAdiieQAAADQ"]
[Thu Jul 30 11:38:12.980194 2026] [security2:error] [pid 2921811:tid 2921811] [client 18.199.86.73:42512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.mjs-services.com"] [uri "/403.shtml"] [unique_id "amsplFDYxkXBIz3YAdiieQAAADQ"]
[Thu Jul 30 11:38:13.163475 2026] [security2:error] [pid 2915577:tid 2915577] [client 172.86.122.106:43564] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "barbaramatarrese.com"] [uri "/.env.example"] [unique_id "amsplbydQcrpAXr80S527QAAAB8"]
[Thu Jul 30 11:38:13.163627 2026] [security2:error] [pid 2915577:tid 2915577] [client 172.86.122.106:43564] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "barbaramatarrese.com"] [uri "/.env.example"] [unique_id "amsplbydQcrpAXr80S527QAAAB8"]
[Thu Jul 30 11:38:13.163811 2026] [security2:error] [pid 2915577:tid 2915577] [client 172.86.122.106:43564] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "barbaramatarrese.com"] [uri "/.env.example"] [unique_id "amsplbydQcrpAXr80S527QAAAB8"]
[Thu Jul 30 11:38:13.171983 2026] [security2:error] [pid 2894255:tid 2894255] [client 172.86.122.106:43568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thelambproductions.com"] [uri "/.env.example"] [unique_id "amsplSXCOEOE70_2GmxB2AAAAB0"]
[Thu Jul 30 11:38:13.172135 2026] [security2:error] [pid 2894255:tid 2894255] [client 172.86.122.106:43568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thelambproductions.com"] [uri "/.env.example"] [unique_id "amsplSXCOEOE70_2GmxB2AAAAB0"]
[Thu Jul 30 11:38:13.172471 2026] [security2:error] [pid 2894255:tid 2894255] [client 172.86.122.106:43568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thelambproductions.com"] [uri "/.env.example"] [unique_id "amsplSXCOEOE70_2GmxB2AAAAB0"]
[Thu Jul 30 11:38:13.235838 2026] [security2:error] [pid 2925583:tid 2925583] [client 172.86.122.106:43572] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thelambproductions.com"] [uri "/.env.example"] [unique_id "amsplVHqPoLtZbL8R0U7yQAAAAA"]
[Thu Jul 30 11:38:13.236031 2026] [security2:error] [pid 2925583:tid 2925583] [client 172.86.122.106:43572] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thelambproductions.com"] [uri "/.env.example"] [unique_id "amsplVHqPoLtZbL8R0U7yQAAAAA"]
[Thu Jul 30 11:38:13.236258 2026] [security2:error] [pid 2925583:tid 2925583] [client 172.86.122.106:43572] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thelambproductions.com"] [uri "/.env.example"] [unique_id "amsplVHqPoLtZbL8R0U7yQAAAAA"]
[Thu Jul 30 11:38:13.355119 2026] [security2:error] [pid 2921813:tid 2921813] [client 172.86.122.106:43582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "barbaramatarrese.com"] [uri "/.env.example"] [unique_id "amsplbpLlq6tXW8yDvSXBQAAADo"]
[Thu Jul 30 11:38:13.355330 2026] [security2:error] [pid 2921813:tid 2921813] [client 172.86.122.106:43582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "barbaramatarrese.com"] [uri "/.env.example"] [unique_id "amsplbpLlq6tXW8yDvSXBQAAADo"]
[Thu Jul 30 11:38:13.355545 2026] [security2:error] [pid 2921813:tid 2921813] [client 172.86.122.106:43582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "barbaramatarrese.com"] [uri "/.env.example"] [unique_id "amsplbpLlq6tXW8yDvSXBQAAADo"]
[Thu Jul 30 11:38:13.695476 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:41932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:13.695504 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:13.710892 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.44:38314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:13.711518 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.44:38314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:13.748626 2026] [ssl:error] [pid 2912360:tid 2912360] (EAI 2)Name or service not known: [client 144.76.19.72:41944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:13.748657 2026] [ssl:error] [pid 2912360:tid 2912360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:13.760652 2026] [core:error] [pid 2924912:tid 2924912] (13)Permission denied: [client 216.73.216.199:60642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_mark/objects_partial
[Thu Jul 30 11:38:13.880261 2026] [security2:error] [pid 2925583:tid 2925583] [client 177.7.178.205:51910] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsplVHqPoLtZbL8R0U7ygAAAAA"]
[Thu Jul 30 11:38:13.880313 2026] [security2:error] [pid 2925583:tid 2925583] [client 177.7.178.205:51910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsplVHqPoLtZbL8R0U7ygAAAAA"]
[Thu Jul 30 11:38:13.880600 2026] [security2:error] [pid 2925583:tid 2925583] [client 177.7.178.205:51910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsplVHqPoLtZbL8R0U7ygAAAAA"]
[Thu Jul 30 11:38:13.957587 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.59:61092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:13.958246 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.59:61092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:13.988689 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.24:38948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:13.989330 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.24:38948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:14.206162 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 66.249.66.33:53408] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:14.208798 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 66.249.66.33:53408] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:14.379573 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 66.249.66.65:44633] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 11:38:14.680856 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:14.683504 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:14.809435 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.71:34548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:14.810050 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.71:34548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:15.118620 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.24:29416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:15.119239 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.24:29416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:15.272385 2026] [core:error] [pid 2924912:tid 2924912] (13)Permission denied: [client 216.73.216.199:60642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_system_zone/objects_partial
[Thu Jul 30 11:38:15.641813 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.67:37904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:15.642446 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.67:37904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:15.865520 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.65:34620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:15.866141 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.65:34620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:16.086763 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.24:29426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:16.087387 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.24:29426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:16.227001 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.42:59388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:16.227638 2026] [authz_core:error] [pid 2918379:tid 2918379] [client 57.141.0.42:59388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:16.478893 2026] [core:error] [pid 2924912:tid 2924912] (13)Permission denied: [client 216.73.216.199:60642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_delay_info/objects
[Thu Jul 30 11:38:16.509276 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:16.511929 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:16.617420 2026] [lsapi:warn] [pid 2921706:tid 2921706] [client 45.158.164.139:58858] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:38:16.617463 2026] [lsapi:warn] [pid 2921706:tid 2921706] [client 45.158.164.139:58858] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:38:16.619639 2026] [lsapi:warn] [pid 2915445:tid 2915445] [client 89.197.16.98:55806] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:38:16.619678 2026] [lsapi:warn] [pid 2915445:tid 2915445] [client 89.197.16.98:55806] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:38:16.804499 2026] [ssl:error] [pid 2913410:tid 2913410] (EAI 2)Name or service not known: [client 144.76.19.72:41960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:16.804536 2026] [ssl:error] [pid 2913410:tid 2913410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:16.856280 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:41968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:16.856311 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:16.929341 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.5:37736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:16.929962 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.5:37736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:16.967752 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.54:64526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:16.968379 2026] [authz_core:error] [pid 2921814:tid 2921814] [client 57.141.0.54:64526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:17.874847 2026] [lsapi:warn] [pid 2921706:tid 2921706] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:18.046658 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.62:45056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:18.047279 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.62:45056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:18.081122 2026] [authz_core:error] [pid 2910928:tid 2910928] [client 57.141.0.45:63750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:18.081745 2026] [authz_core:error] [pid 2910928:tid 2910928] [client 57.141.0.45:63750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:18.203013 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:18.205694 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:18.431589 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.3:26618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:18.432215 2026] [authz_core:error] [pid 2913410:tid 2913410] [client 57.141.0.3:26618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:19.051078 2026] [security2:error] [pid 2921744:tid 2921744] [client 172.86.122.106:43616] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspm6Aj4pW-BaTJSJPqZQAAACc"]
[Thu Jul 30 11:38:19.051276 2026] [security2:error] [pid 2921744:tid 2921744] [client 172.86.122.106:43616] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspm6Aj4pW-BaTJSJPqZQAAACc"]
[Thu Jul 30 11:38:19.051658 2026] [security2:error] [pid 2921744:tid 2921744] [client 172.86.122.106:43616] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspm6Aj4pW-BaTJSJPqZQAAACc"]
[Thu Jul 30 11:38:19.133061 2026] [security2:error] [pid 2915445:tid 2915445] [client 172.86.122.106:43622] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspm5kPj5P0Y3TOtUm2fAAAABM"]
[Thu Jul 30 11:38:19.133270 2026] [security2:error] [pid 2915445:tid 2915445] [client 172.86.122.106:43622] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspm5kPj5P0Y3TOtUm2fAAAABM"]
[Thu Jul 30 11:38:19.133646 2026] [security2:error] [pid 2915445:tid 2915445] [client 172.86.122.106:43622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspm5kPj5P0Y3TOtUm2fAAAABM"]
[Thu Jul 30 11:38:19.190213 2026] [security2:error] [pid 2923576:tid 2923576] [client 172.86.122.106:43638] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspm-8sUuw2a910fLo0YwAAABQ"]
[Thu Jul 30 11:38:19.190409 2026] [security2:error] [pid 2923576:tid 2923576] [client 172.86.122.106:43638] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspm-8sUuw2a910fLo0YwAAABQ"]
[Thu Jul 30 11:38:19.190796 2026] [security2:error] [pid 2923576:tid 2923576] [client 172.86.122.106:43638] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thesilkshed.co.uk"] [uri "/.env.example"] [unique_id "amspm-8sUuw2a910fLo0YwAAABQ"]
[Thu Jul 30 11:38:19.239326 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.56:58144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:19.239949 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.56:58144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:19.299915 2026] [security2:error] [pid 2923502:tid 2923502] [client 172.86.122.106:43648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspmx-ucsiIwhhiJGyArAAAAAE"]
[Thu Jul 30 11:38:19.300125 2026] [security2:error] [pid 2923502:tid 2923502] [client 172.86.122.106:43648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspmx-ucsiIwhhiJGyArAAAAAE"]
[Thu Jul 30 11:38:19.300535 2026] [security2:error] [pid 2923502:tid 2923502] [client 172.86.122.106:43648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.thesilkshed.dbstart.co.uk"] [uri "/.env.example"] [unique_id "amspmx-ucsiIwhhiJGyArAAAAAE"]
[Thu Jul 30 11:38:19.349360 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.24:29428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:19.349987 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.24:29428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:19.372360 2026] [lsapi:warn] [pid 2913410:tid 2913410] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:19.416368 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.69:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:19.416991 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.69:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:19.511636 2026] [core:error] [pid 2924055:tid 2924055] (13)Permission denied: [client 216.73.216.199:36323] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/cpu_partial
[Thu Jul 30 11:38:19.595135 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.54:51170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:19.595768 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.54:51170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:19.712380 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.15:23260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:19.712996 2026] [authz_core:error] [pid 2923576:tid 2923576] [client 57.141.0.15:23260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:19.910838 2026] [ssl:error] [pid 2917673:tid 2917673] (EAI 2)Name or service not known: [client 144.76.19.72:55276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:19.910860 2026] [ssl:error] [pid 2917673:tid 2917673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:19.962027 2026] [ssl:error] [pid 2918339:tid 2918339] (EAI 2)Name or service not known: [client 144.76.19.72:55284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:19.962049 2026] [ssl:error] [pid 2918339:tid 2918339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:20.047961 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:20.050627 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:20.113210 2026] [core:error] [pid 2924055:tid 2924055] (13)Permission denied: [client 216.73.216.199:36323] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/restorepkg
[Thu Jul 30 11:38:20.414157 2026] [ssl:error] [pid 2924055:tid 2924055] (70014)End of file found: [client 216.73.216.199:36323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:20.548592 2026] [access_compat:error] [pid 2921706:tid 2921706] [client 136.158.37.124:45223] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:38:20.649979 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.14:33596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:20.650615 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.14:33596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:20.714685 2026] [core:error] [pid 2924912:tid 2924912] (13)Permission denied: [client 216.73.216.199:60642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/cpu_partial
[Thu Jul 30 11:38:20.938059 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.4:36296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:20.938692 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.4:36296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:21.338738 2026] [authz_core:error] [pid 2921744:tid 2921744] [client 57.141.0.51:52634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:21.339360 2026] [authz_core:error] [pid 2921744:tid 2921744] [client 57.141.0.51:52634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:21.647272 2026] [ssl:error] [pid 2924912:tid 2924912] (70014)End of file found: [client 216.73.216.199:60642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:21.694758 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.51:52650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:21.695381 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.51:52650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:21.947177 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.16:57792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:21.947788 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.16:57792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:22.092438 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.3:20246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:22.093074 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.3:20246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:22.555391 2026] [core:error] [pid 2907083:tid 2907083] (13)Permission denied: [client 216.73.216.199:27605] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/createacct
[Thu Jul 30 11:38:22.753107 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.68:58644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:22.753726 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.68:58644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:22.802298 2026] [authz_core:error] [pid 2921744:tid 2921744] [client 57.141.0.29:20020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:22.802913 2026] [authz_core:error] [pid 2921744:tid 2921744] [client 57.141.0.29:20020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:22.937324 2026] [lsapi:warn] [pid 2917673:tid 2917673] [client 45.76.130.43:48898] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:38:22.937369 2026] [lsapi:warn] [pid 2917673:tid 2917673] [client 45.76.130.43:48898] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:38:23.015249 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:55298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:23.015275 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:23.071130 2026] [ssl:error] [pid 2889424:tid 2889424] (EAI 2)Name or service not known: [client 144.76.19.72:55312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:23.071160 2026] [ssl:error] [pid 2889424:tid 2889424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:23.414502 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.27:55224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:23.415140 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.27:55224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:23.746545 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:23.749196 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:24.006502 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.26:34920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:24.007131 2026] [authz_core:error] [pid 2917673:tid 2917673] [client 57.141.0.26:34920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:24.029040 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.22:61440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:24.029666 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.22:61440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:24.043025 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.27:55236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:24.043659 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.27:55236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:24.233468 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.56:58162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:24.234101 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.56:58162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:24.667320 2026] [ssl:error] [pid 2907083:tid 2907083] (70014)End of file found: [client 216.73.216.199:27605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:25.122527 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.29:20032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:25.123159 2026] [authz_core:error] [pid 2921811:tid 2921811] [client 57.141.0.29:20032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:25.324776 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.3:20258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:25.325392 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.3:20258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:25.548537 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.51:52662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:25.549153 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.51:52662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:25.726439 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:25.729118 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:25.772461 2026] [core:error] [pid 2921525:tid 2921525] (13)Permission denied: [client 216.73.216.199:11840] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/python-cllib/detector.py
[Thu Jul 30 11:38:25.866134 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.27:55242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:25.866756 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.27:55242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:26.126662 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:55322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:26.126705 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:26.218637 2026] [ssl:error] [pid 2919945:tid 2919945] (EAI 2)Name or service not known: [client 144.76.19.72:55324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:26.218663 2026] [ssl:error] [pid 2919945:tid 2919945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:26.430191 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.25:35580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:26.430804 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.25:35580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:26.908645 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.64:39818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:26.909334 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.64:39818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:27.030594 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.18:22256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:27.031222 2026] [authz_core:error] [pid 2909093:tid 2909093] [client 57.141.0.18:22256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:27.346129 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.43:32172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:27.346753 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.43:32172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:27.428605 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:27.431248 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:27.505533 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.12:54910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:27.506160 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.12:54910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:27.538590 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.48:45368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:27.539205 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.48:45368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:27.840613 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.46:55224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:27.841236 2026] [authz_core:error] [pid 2923503:tid 2923503] [client 57.141.0.46:55224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:28.164555 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.1:26902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:28.165176 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.1:26902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:28.547109 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:29.276901 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:55326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:29.276933 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:29.281552 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:29.284566 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:29.308274 2026] [core:error] [pid 2921525:tid 2921525] (13)Permission denied: [client 216.73.216.199:11840] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UNIX/objects_partial
[Thu Jul 30 11:38:29.355625 2026] [ssl:error] [pid 2898449:tid 2898449] (EAI 2)Name or service not known: [client 144.76.19.72:55330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:29.355652 2026] [ssl:error] [pid 2898449:tid 2898449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:29.483601 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.39:22970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:29.484259 2026] [authz_core:error] [pid 2913442:tid 2913442] [client 57.141.0.39:22970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:29.542450 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.6:22290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:29.543084 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.6:22290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:29.573882 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.49:36124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:29.574524 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.49:36124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:29.610710 2026] [ssl:error] [pid 2921525:tid 2921525] (70014)End of file found: [client 216.73.216.199:11840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:29.651241 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.20:51980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:29.651856 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.20:51980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:29.846209 2026] [lsapi:warn] [pid 2918339:tid 2918339] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:30.198860 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.18:24498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:30.199486 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.18:24498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:30.345315 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.48:39408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:30.345939 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.48:39408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:31.157311 2026] [ssl:error] [pid 2919945:tid 2919945] (70014)End of file found: [client 216.73.216.199:11510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:31.467126 2026] [access_compat:error] [pid 2915445:tid 2915445] [client 136.158.37.124:46166] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:38:31.515534 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.44:20602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:31.516156 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.44:20602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:31.551743 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.20:51984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:31.552365 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.20:51984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:31.645776 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.71:38450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:31.646401 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.71:38450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:31.875668 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:31.878728 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:31.981680 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.38:37560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:31.982315 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.38:37560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:32.058829 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.68:42752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:32.059459 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.68:42752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:32.285382 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.55:51044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:32.286015 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.55:51044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:32.409474 2026] [ssl:error] [pid 2916525:tid 2916525] (EAI 2)Name or service not known: [client 144.76.19.72:64080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:32.409503 2026] [ssl:error] [pid 2916525:tid 2916525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:32.463096 2026] [ssl:error] [pid 2907083:tid 2907083] (EAI 2)Name or service not known: [client 144.76.19.72:64090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:32.463130 2026] [ssl:error] [pid 2907083:tid 2907083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:32.519262 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.45:36450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:32.519891 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.45:36450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:32.677466 2026] [core:error] [pid 2921745:tid 2921745] (13)Permission denied: [client 216.73.216.199:39098] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/modify_featurelist
[Thu Jul 30 11:38:33.032704 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.35:55066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:33.033330 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.35:55066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:33.534935 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:33.537841 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:33.920632 2026] [authz_core:error] [pid 2926807:tid 2926807] [client 57.141.0.19:41746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:33.921282 2026] [authz_core:error] [pid 2926807:tid 2926807] [client 57.141.0.19:41746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:33.952162 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.34:38320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:33.952782 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.34:38320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:34.472448 2026] [core:error] [pid 2919891:tid 2919891] [client 66.249.66.168:40429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:34.472484 2026] [core:error] [pid 2919891:tid 2919891] [client 66.249.66.168:40429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:34.476495 2026] [core:error] [pid 2925584:tid 2925584] [client 66.249.66.4:55421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:34.476526 2026] [core:error] [pid 2925584:tid 2925584] [client 66.249.66.4:55421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:34.697145 2026] [authz_core:error] [pid 2926807:tid 2926807] [client 57.141.0.53:57326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:34.697763 2026] [authz_core:error] [pid 2926807:tid 2926807] [client 57.141.0.53:57326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:34.870728 2026] [core:error] [pid 2921745:tid 2921745] (13)Permission denied: [client 216.73.216.199:39098] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/cpu_partial
[Thu Jul 30 11:38:34.929374 2026] [security2:error] [pid 2916525:tid 2916525] [client 85.208.96.208:48544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/subway-surfers-hack-ios-no-jailbreak"] [unique_id "amspqk4v1uGwh1--PitbIwAAAAc"]
[Thu Jul 30 11:38:35.013748 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.46:59570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:35.014372 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.46:59570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:35.281020 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:35.283981 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:35.548645 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.70:39976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:35.549285 2026] [authz_core:error] [pid 2918339:tid 2918339] [client 57.141.0.70:39976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:35.564879 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:64092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:35.564935 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:35.620284 2026] [ssl:error] [pid 2919891:tid 2919891] (EAI 2)Name or service not known: [client 144.76.19.72:64104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:35.620318 2026] [ssl:error] [pid 2919891:tid 2919891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:35.798143 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.20:51998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:35.798764 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.20:51998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:35.875179 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.29:28126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:35.875859 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.29:28126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:36.175355 2026] [authz_core:error] [pid 2926807:tid 2926807] [client 57.141.0.64:60784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:36.175974 2026] [authz_core:error] [pid 2926807:tid 2926807] [client 57.141.0.64:60784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:36.297295 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.62:28576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:36.297923 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.62:28576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:36.377940 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.55:30146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:36.378577 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.55:30146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:36.534034 2026] [security2:error] [pid 2918339:tid 2918339] [client 43.130.57.46:40524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amsprI-xhVeLcISdKwiwGAAAABg"]
[Thu Jul 30 11:38:36.860316 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:36.866007 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:36.891754 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.46:59584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:36.892369 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.46:59584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:37.015088 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:37.018205 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:37.155484 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.49:36140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:37.156308 2026] [authz_core:error] [pid 2898449:tid 2898449] [client 57.141.0.49:36140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:37.260384 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.21:48296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:37.261000 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.21:48296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:37.952914 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.23:36390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:37.954102 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.23:36390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:38.245497 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.35:55080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:38.246273 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.35:55080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:38.370772 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.32:36410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:38.371402 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.32:36410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:38.676391 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:64120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:38.676433 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:38.714278 2026] [core:error] [pid 2921745:tid 2921745] (13)Permission denied: [client 216.73.216.199:39098] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/objects
[Thu Jul 30 11:38:38.729019 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:64128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:38.729041 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:39.192904 2026] [lsapi:warn] [pid 2912360:tid 2912360] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:39.200018 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.60:42802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:39.200646 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.60:42802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:39.317032 2026] [ssl:error] [pid 2921745:tid 2921745] (70014)End of file found: [client 216.73.216.199:39098] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:39.440148 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.60:42804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:39.440771 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.60:42804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:39.759362 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.28:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:39.760082 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.28:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:39.882591 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.51:51110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:39.883212 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.51:51110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:39.906664 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:39.910053 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:40.400665 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.59:46118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:40.401288 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.59:46118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:40.433999 2026] [lsapi:warn] [pid 2913448:tid 2913448] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:41.124339 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.18:39876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:41.125051 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.18:39876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:41.262911 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.16:23900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:41.263546 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.16:23900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:41.370324 2026] [security2:error] [pid 2919947:tid 2919947] [client 114.119.142.20:64521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/request_format~html/cat_ids~102"] [unique_id "amspsf_o0-7a-DFwSeOEpgAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/request_format%7Ehtml
[Thu Jul 30 11:38:41.500831 2026] [security2:error] [pid 2912360:tid 2912360] [client 185.191.171.14:45990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2031.0/prev_next,next.html"] [unique_id "amspsaN0lmL278xfT_AmngAAAA0"]
[Thu Jul 30 11:38:41.701175 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:41.703993 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:41.785302 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:52974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:41.785328 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:41.841457 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:52984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:41.841500 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:42.079466 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.31:20010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:42.080309 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.31:20010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:42.175062 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.20:63708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:42.175698 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.20:63708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:42.266227 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.39:31046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:42.266853 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.39:31046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:42.301486 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.7:58178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:42.302116 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.7:58178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:42.385361 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.10:47026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:42.386039 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.10:47026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:42.427260 2026] [access_compat:error] [pid 2915577:tid 2915577] [client 136.158.37.124:47055] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:38:42.932338 2026] [core:error] [pid 2921811:tid 2921811] (13)Permission denied: [client 216.73.216.199:8346] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/total_objects
[Thu Jul 30 11:38:43.076872 2026] [security2:error] [pid 2916061:tid 2916061] [client 114.119.142.20:64527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/request_format~html/cat_ids~102"] [unique_id "amspsxScjY_ebAA7zXNfmQAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/request_format%7Ehtml
[Thu Jul 30 11:38:43.298497 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:43.301435 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:43.354047 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.17:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:43.354696 2026] [authz_core:error] [pid 2921706:tid 2921706] [client 57.141.0.17:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:43.405299 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.38:37168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:43.406525 2026] [authz_core:error] [pid 2907083:tid 2907083] [client 57.141.0.38:37168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:43.693948 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.46:35936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:43.694572 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.46:35936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:44.499010 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.6:29190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:44.499649 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.6:29190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:44.571164 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.25:36166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:44.571787 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.25:36166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:44.899002 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:52988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:44.899028 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:44.953319 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:52992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:44.953340 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:45.072140 2026] [ssl:error] [pid 2916061:tid 2916061] (70014)End of file found: [client 216.73.216.199:31036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:45.472258 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.69:53216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:45.473553 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.69:53216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:45.514432 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.29:41556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:45.515044 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.29:41556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:46.097582 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.1:37530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:46.098210 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.1:37530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:46.375649 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:46.380640 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:46.489292 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.43:59816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:46.489910 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.43:59816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:46.659977 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.51:30360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:46.661357 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.51:30360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:46.928173 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.16:23914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:46.928821 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.16:23914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:47.111593 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.17:42532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:47.112243 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.17:42532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:47.284889 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.20:63720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:47.285634 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.20:63720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:47.482178 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.52:61406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:47.482794 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.52:61406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:47.787852 2026] [ssl:error] [pid 2921745:tid 2921745] (70014)End of file found: [client 216.73.216.199:6601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:47.882044 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.31:47580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:47.882741 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.31:47580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:47.966932 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:47.969866 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:48.009686 2026] [ssl:error] [pid 2927386:tid 2927386] (EAI 2)Name or service not known: [client 144.76.19.72:53008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:48.009724 2026] [ssl:error] [pid 2927386:tid 2927386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:48.064546 2026] [ssl:error] [pid 2927388:tid 2927388] (EAI 2)Name or service not known: [client 144.76.19.72:53012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:48.064587 2026] [ssl:error] [pid 2927388:tid 2927388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:48.375265 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.17:42540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:48.375913 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.17:42540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:48.384323 2026] [core:error] [pid 2910929:tid 2910929] (13)Permission denied: [client 216.73.216.199:11558] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/ctor
[Thu Jul 30 11:38:48.395898 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.22:45658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:48.396521 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.22:45658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:48.987217 2026] [ssl:error] [pid 2910929:tid 2910929] (70014)End of file found: [client 216.73.216.199:11558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:49.509110 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.52:61410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:49.510124 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.52:61410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:49.517007 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.50:33142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:49.517647 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.50:33142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:49.841818 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.29:33544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:49.842438 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.29:33544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:49.859769 2026] [lsapi:warn] [pid 2927388:tid 2927388] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:49.880673 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.54:62202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:49.881290 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.54:62202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:50.000551 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:50.005681 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:50.358659 2026] [security2:error] [pid 2907139:tid 2907139] [client 18.199.86.73:47940] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.jonathanmeyerart.com"] [uri "/.git/config"] [unique_id "amspuuHuWM9QLenH8Fh0FQAAADc"]
[Thu Jul 30 11:38:50.358847 2026] [security2:error] [pid 2907139:tid 2907139] [client 18.199.86.73:47940] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.jonathanmeyerart.com"] [uri "/.git/config"] [unique_id "amspuuHuWM9QLenH8Fh0FQAAADc"]
[Thu Jul 30 11:38:50.385158 2026] [security2:error] [pid 2907139:tid 2907139] [client 18.199.86.73:47940] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.jonathanmeyerart.com"] [uri "/403.shtml"] [unique_id "amspuuHuWM9QLenH8Fh0FQAAADc"]
[Thu Jul 30 11:38:50.571689 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.53:21072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:50.572314 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.53:21072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:50.607985 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.10:45926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:50.608984 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.10:45926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:50.762379 2026] [security2:error] [pid 2921705:tid 2921705] [client 185.191.171.12:36792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsputZmet_T5wgq7um9vQAAAAs"]
[Thu Jul 30 11:38:50.855152 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.27:35826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:50.856234 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.27:35826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:50.917212 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:50.920484 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:50.930144 2026] [lsapi:warn] [pid 2912360:tid 2912360] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:38:51.118896 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:56274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:51.118924 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:51.176316 2026] [ssl:error] [pid 2927386:tid 2927386] (EAI 2)Name or service not known: [client 144.76.19.72:56278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:51.176346 2026] [ssl:error] [pid 2927386:tid 2927386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:51.395771 2026] [ssl:error] [pid 2927305:tid 2927305] (70014)End of file found: [client 216.73.216.199:59678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:51.443377 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.66:26762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:51.444010 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.66:26762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:51.863948 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:51.867021 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:52.077161 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.7:55498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:52.077773 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.7:55498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:52.208200 2026] [core:error] [pid 2918340:tid 2918340] [client 66.249.64.170:65121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:52.208235 2026] [core:error] [pid 2918340:tid 2918340] [client 66.249.64.170:65121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:38:52.218409 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.33:58978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:52.219148 2026] [authz_core:error] [pid 2919891:tid 2919891] [client 57.141.0.33:58978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:52.874022 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.12:60498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:52.874646 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.12:60498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:52.895815 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.43:41220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:52.896447 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.43:41220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:52.968684 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.15:48578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:52.969306 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.15:48578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:53.164586 2026] [access_compat:error] [pid 2927386:tid 2927386] [client 136.158.37.124:48130] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:38:53.290905 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:53.293800 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:53.449627 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.54:62208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:53.450247 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.54:62208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:53.474780 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.5:30412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:53.475389 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.5:30412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:54.022926 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.47:26238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:54.023581 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.47:26238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:54.230024 2026] [ssl:error] [pid 2921966:tid 2921966] (EAI 2)Name or service not known: [client 144.76.19.72:56286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:54.230121 2026] [ssl:error] [pid 2921966:tid 2921966] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:54.283210 2026] [ssl:error] [pid 2927387:tid 2927387] (EAI 2)Name or service not known: [client 144.76.19.72:56288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:54.283239 2026] [ssl:error] [pid 2927387:tid 2927387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:54.410357 2026] [ssl:error] [pid 2919943:tid 2919943] (70014)End of file found: [client 216.73.216.199:40880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:54.592790 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.11:22022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:54.593410 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.11:22022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:54.763279 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.37:25112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:54.764470 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.37:25112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:55.134146 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.63:56852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:55.134763 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.63:56852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:55.274050 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.40:24164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:55.274711 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.40:24164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:55.361706 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.12:60514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:55.362328 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.12:60514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:55.759907 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:55.762806 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:55.917032 2026] [core:error] [pid 2921808:tid 2921808] (13)Permission denied: [client 216.73.216.199:61705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS3/close_delay
[Thu Jul 30 11:38:55.953704 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.34:55514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:55.954320 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.34:55514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:56.222973 2026] [ssl:error] [pid 2921808:tid 2921808] (70014)End of file found: [client 216.73.216.199:61705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:56.309940 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.24:62472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:56.310639 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.24:62472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:56.724254 2026] [ssl:error] [pid 2921525:tid 2921525] (70014)End of file found: [client 216.73.216.199:2630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:56.986508 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:56.990434 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:57.141456 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.37:25124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:57.142114 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.37:25124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:57.313587 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.63:39620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:57.314285 2026] [authz_core:error] [pid 2919945:tid 2919945] [client 57.141.0.63:39620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:57.317468 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.55:43860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:57.318090 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.55:43860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:57.340775 2026] [ssl:error] [pid 2923502:tid 2923502] (EAI 2)Name or service not known: [client 144.76.19.72:56302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:57.340802 2026] [ssl:error] [pid 2923502:tid 2923502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:57.396573 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:56308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:38:57.396595 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:38:57.402695 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:57.405384 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:57.544601 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.58:51542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:57.545336 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.58:51542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:57.897091 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.35:43530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:57.897709 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.35:43530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:58.463481 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.16:26220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:58.464119 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.16:26220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:58.819592 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.54:55328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:58.820299 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.54:55328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:58.958054 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:38:58.960807 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:38:58.983215 2026] [security2:error] [pid 2919945:tid 2919945] [client 47.128.28.85:33452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/robots.txt"] [unique_id "amspwmHxqBwLXfXQVY32_wAAABk"]
[Thu Jul 30 11:38:58.983481 2026] [access_compat:error] [pid 2919945:tid 2919945] [client 47.128.28.85:33452] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:38:59.377753 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.70:43148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:59.378376 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.70:43148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:59.451935 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.26:52266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:59.452575 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.26:52266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:59.592486 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.29:33554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:59.593226 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.29:33554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:38:59.719780 2026] [ssl:error] [pid 2910927:tid 2910927] (70014)End of file found: [client 216.73.216.199:41628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:38:59.838143 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.23:33426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:38:59.838764 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.23:33426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:00.034873 2026] [security2:error] [pid 2924912:tid 2924912] [client 18.199.86.73:45946] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.hatch-works.com"] [uri "/.git/config"] [unique_id "amspxHaGXpT672XVZNmpowAAAAg"]
[Thu Jul 30 11:39:00.035167 2026] [security2:error] [pid 2924912:tid 2924912] [client 18.199.86.73:45946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.hatch-works.com"] [uri "/.git/config"] [unique_id "amspxHaGXpT672XVZNmpowAAAAg"]
[Thu Jul 30 11:39:00.064693 2026] [security2:error] [pid 2924912:tid 2924912] [client 18.199.86.73:45946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.hatch-works.com"] [uri "/403.shtml"] [unique_id "amspxHaGXpT672XVZNmpowAAAAg"]
[Thu Jul 30 11:39:00.450856 2026] [ssl:error] [pid 2919943:tid 2919943] (EAI 2)Name or service not known: [client 144.76.19.72:36626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:00.450884 2026] [ssl:error] [pid 2919943:tid 2919943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:00.503586 2026] [ssl:error] [pid 2927305:tid 2927305] (EAI 2)Name or service not known: [client 144.76.19.72:36636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:00.503620 2026] [ssl:error] [pid 2927305:tid 2927305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:00.544831 2026] [lsapi:warn] [pid 2915577:tid 2915577] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:00.827178 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.69:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:00.827800 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.69:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:01.058827 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.22:26684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:01.059441 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.22:26684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:01.091105 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.51:52660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:01.091752 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.51:52660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:01.388868 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.3:53274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:01.389487 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.3:53274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:01.445116 2026] [lsapi:warn] [pid 2923573:tid 2923573] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:01.460850 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 66.249.66.34:57186] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:01.463522 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 66.249.66.34:57186] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:01.947895 2026] [ssl:error] [pid 2921966:tid 2921966] (70014)End of file found: [client 216.73.216.199:5936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:02.226568 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.1:64732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:02.227671 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.1:64732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:02.252495 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.28:57140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:02.253610 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.28:57140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:02.592565 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.21:45762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:02.593193 2026] [authz_core:error] [pid 2915577:tid 2915577] [client 57.141.0.21:45762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:02.655884 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:02.658557 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:02.789332 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.46:64834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:02.789951 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.46:64834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:02.987849 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.21:45766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:02.989108 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.21:45766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:02.991696 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.38:64050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:02.992309 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.38:64050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:03.258446 2026] [security2:error] [pid 2927346:tid 2927346] [client 43.166.137.245:46343] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspx0QpVDjYO6sOcCls8wAAAAk"]
[Thu Jul 30 11:39:03.258530 2026] [security2:error] [pid 2927346:tid 2927346] [client 43.166.137.245:46343] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspx0QpVDjYO6sOcCls8wAAAAk"]
[Thu Jul 30 11:39:03.258955 2026] [security2:error] [pid 2927346:tid 2927346] [client 43.166.137.245:46343] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspx0QpVDjYO6sOcCls8wAAAAk"]
[Thu Jul 30 11:39:03.348106 2026] [ssl:error] [pid 2921525:tid 2921525] (70014)End of file found: [client 216.73.216.199:44817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:03.465460 2026] [ssl:error] [pid 2927389:tid 2927389] (70014)End of file found: [client 216.73.216.199:47803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:03.578562 2026] [ssl:error] [pid 2915577:tid 2915577] (EAI 2)Name or service not known: [client 144.76.19.72:36648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:03.578597 2026] [ssl:error] [pid 2915577:tid 2915577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:03.629956 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:36650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:03.629982 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:03.949439 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.47:51380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:03.950063 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.47:51380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:03.968321 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.51:52676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:03.968939 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.51:52676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:04.131760 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.48:48888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:04.132705 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.48:48888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:04.178316 2026] [access_compat:error] [pid 2889424:tid 2889424] [client 136.158.37.124:49008] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:39:04.375985 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:04.378669 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:04.569712 2026] [security2:error] [pid 2916525:tid 2916525] [client 43.164.196.244:41838] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.refraction.co.uk"] [uri "/"] [unique_id "amspyE4v1uGwh1--PitbLQAAAAc"]
[Thu Jul 30 11:39:04.666137 2026] [ssl:error] [pid 2912360:tid 2912360] (70014)End of file found: [client 216.73.216.199:39629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:04.735361 2026] [access_compat:error] [pid 2925584:tid 2925584] [client 45.158.164.139:37380] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:39:04.961417 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.39:42176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:04.962398 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.39:42176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:04.965060 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.56:33188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:04.965680 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.56:33188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:05.360182 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.38:64066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:05.360811 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.38:64066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:05.657549 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.33:29692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:05.658220 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.33:29692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:05.849114 2026] [security2:error] [pid 2925584:tid 2925584] [client 8.216.34.32:36809] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspyTfNn8aoM8nJufgcbwAAAAw"]
[Thu Jul 30 11:39:05.849159 2026] [security2:error] [pid 2925584:tid 2925584] [client 8.216.34.32:36809] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspyTfNn8aoM8nJufgcbwAAAAw"]
[Thu Jul 30 11:39:05.849388 2026] [security2:error] [pid 2925584:tid 2925584] [client 8.216.34.32:36809] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspyTfNn8aoM8nJufgcbwAAAAw"]
[Thu Jul 30 11:39:05.859148 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.59:37104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:05.859762 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.59:37104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:06.246105 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:06.248765 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:06.251377 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.45:55282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:06.252017 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.45:55282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:06.281263 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.3:53282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:06.281882 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.3:53282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:06.685815 2026] [ssl:error] [pid 2927167:tid 2927167] (EAI 2)Name or service not known: [client 144.76.19.72:36660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:06.685847 2026] [ssl:error] [pid 2927167:tid 2927167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:06.740651 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:36676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:06.740679 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:07.601306 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.1:64750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:07.601954 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.1:64750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:07.681583 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.33:29694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:07.682207 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.33:29694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:08.028793 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.47:51386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:08.029421 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.47:51386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:08.434453 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:08.437140 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:08.511270 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.14:49274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:08.511887 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.14:49274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:08.577815 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.60:26530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:08.578438 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.60:26530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:08.880642 2026] [ssl:error] [pid 2921966:tid 2921966] (70014)End of file found: [client 216.73.216.199:4534] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:09.060809 2026] [security2:error] [pid 2913448:tid 2913448] [client 8.216.34.32:20783] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspzb8M3ZhKvbVLC1XMIAAAADg"]
[Thu Jul 30 11:39:09.060859 2026] [security2:error] [pid 2913448:tid 2913448] [client 8.216.34.32:20783] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amspzb8M3ZhKvbVLC1XMIAAAADg"]
[Thu Jul 30 11:39:09.061123 2026] [security2:error] [pid 2913448:tid 2913448] [client 8.216.34.32:20783] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amspzb8M3ZhKvbVLC1XMIAAAADg"]
[Thu Jul 30 11:39:09.456594 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.62:28472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:09.457230 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.62:28472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:09.463637 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.16:46026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:09.464243 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.16:46026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:09.571649 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.59:37118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:09.572297 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.59:37118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:09.793777 2026] [ssl:error] [pid 2927387:tid 2927387] (EAI 2)Name or service not known: [client 144.76.19.72:60144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:09.793802 2026] [ssl:error] [pid 2927387:tid 2927387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:09.849490 2026] [ssl:error] [pid 2894255:tid 2894255] (EAI 2)Name or service not known: [client 144.76.19.72:60160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:09.849533 2026] [ssl:error] [pid 2894255:tid 2894255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:10.077015 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.27:20768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:10.077658 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.27:20768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:10.180990 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.48:46626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:10.181680 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.48:46626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:10.266738 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 66.249.66.34:62653] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:10.269714 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 66.249.66.34:62653] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:10.586880 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.39:42182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:10.587500 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.39:42182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:10.691164 2026] [ssl:error] [pid 2921525:tid 2921525] (70014)End of file found: [client 216.73.216.199:32878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:10.878091 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.67:50028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:10.878717 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.67:50028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:10.913162 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.38:44792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:10.913785 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.38:44792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:10.964292 2026] [security2:error] [pid 2894255:tid 2894255] [client 18.199.86.73:47530] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.kirstybashforth.com"] [uri "/.git/config"] [unique_id "amspziXCOEOE70_2GmxB7QAAAB0"]
[Thu Jul 30 11:39:10.964505 2026] [security2:error] [pid 2894255:tid 2894255] [client 18.199.86.73:47530] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.kirstybashforth.com"] [uri "/.git/config"] [unique_id "amspziXCOEOE70_2GmxB7QAAAB0"]
[Thu Jul 30 11:39:10.991009 2026] [security2:error] [pid 2894255:tid 2894255] [client 18.199.86.73:47530] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.kirstybashforth.com"] [uri "/403.shtml"] [unique_id "amspziXCOEOE70_2GmxB7QAAAB0"]
[Thu Jul 30 11:39:11.280771 2026] [lsapi:warn] [pid 2913448:tid 2913448] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:11.368782 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.31:28220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:11.369500 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.31:28220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:11.416660 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.38:44798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:11.417300 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.38:44798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:11.728565 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.4:43792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:11.729257 2026] [authz_core:error] [pid 2894255:tid 2894255] [client 57.141.0.4:43792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:11.757865 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:11.760529 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:11.960715 2026] [lsapi:warn] [pid 2927346:tid 2927346] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:12.906472 2026] [ssl:error] [pid 2913448:tid 2913448] (EAI 2)Name or service not known: [client 144.76.19.72:60168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:12.906504 2026] [ssl:error] [pid 2913448:tid 2913448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:12.960896 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:60180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:12.960931 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:13.098341 2026] [security2:error] [pid 2907139:tid 2907139] [client 216.73.216.199:25014] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/italian/errmsg.sys"] [unique_id "amsp0eHuWM9QLenH8Fh0IQAAADc"]
[Thu Jul 30 11:39:13.098640 2026] [security2:error] [pid 2907139:tid 2907139] [client 216.73.216.199:25014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/italian/errmsg.sys"] [unique_id "amsp0eHuWM9QLenH8Fh0IQAAADc"]
[Thu Jul 30 11:39:13.098848 2026] [security2:error] [pid 2907139:tid 2907139] [client 216.73.216.199:25014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/italian/errmsg.sys"] [unique_id "amsp0eHuWM9QLenH8Fh0IQAAADc"]
[Thu Jul 30 11:39:13.233033 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.42:29956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:13.233733 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.42:29956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:13.406081 2026] [ssl:error] [pid 2907139:tid 2907139] (70014)End of file found: [client 216.73.216.199:25014] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:13.465544 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.17:54794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:13.466186 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.17:54794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:13.604147 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:13.606151 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.9:62116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:13.606763 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.9:62116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:13.606834 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:13.644352 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.35:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:13.644992 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.35:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:14.062670 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.25:40870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:14.063412 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.25:40870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:14.600232 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:5368] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:14.758626 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.3:41846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:14.759249 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.3:41846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:14.821820 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.32:30922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:14.822522 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.32:30922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:14.865807 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.11:47184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:14.866506 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.11:47184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:15.158784 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.53:60714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:15.159407 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.53:60714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:15.238650 2026] [access_compat:error] [pid 2925584:tid 2925584] [client 136.158.37.124:49894] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:39:15.450500 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.59:37132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:15.451128 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.59:37132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:15.480685 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:15.483332 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:16.016881 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:60186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:16.016908 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:16.070315 2026] [ssl:error] [pid 2921813:tid 2921813] (EAI 2)Name or service not known: [client 144.76.19.72:60192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:16.070386 2026] [ssl:error] [pid 2921813:tid 2921813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:16.105293 2026] [ssl:error] [pid 2921807:tid 2921807] (70014)End of file found: [client 216.73.216.199:53403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:16.213623 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.3:41850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:16.214310 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.3:41850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:16.442910 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.45:56194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:16.443564 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.45:56194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:16.460833 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.50:41954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:16.461536 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.50:41954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:16.590789 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.7:51648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:16.591474 2026] [authz_core:error] [pid 2918340:tid 2918340] [client 57.141.0.7:51648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:16.656308 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.66:46424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:16.657028 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.66:46424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:17.233349 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 66.249.66.33:41484] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:17.236090 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 66.249.66.33:41484] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:17.293796 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:17.296497 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:17.660822 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.13:29054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:17.661473 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.13:29054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:18.675234 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.45:23310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:18.675852 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.45:23310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:18.700522 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.44:55852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:18.701167 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.44:55852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:18.747209 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.49:44306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:18.747859 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.49:44306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:18.921945 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.35:46382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:18.922581 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.35:46382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:19.119019 2026] [ssl:error] [pid 2929199:tid 2929199] (70014)End of file found: [client 216.73.216.199:11771] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:19.129147 2026] [ssl:error] [pid 2927387:tid 2927387] (EAI 2)Name or service not known: [client 144.76.19.72:60194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:19.129178 2026] [ssl:error] [pid 2927387:tid 2927387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:19.182012 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:60206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:19.182036 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:19.257226 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.16:31728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:19.257852 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.16:31728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:19.421922 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:19.424617 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:19.452211 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.62:25790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:19.452860 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.62:25790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:19.914116 2026] [ssl:error] [pid 2927387:tid 2927387] (70014)End of file found: [client 216.73.216.199:9218] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:20.269524 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.9:62126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:20.270167 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.9:62126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:20.317494 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.70:40010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:20.318195 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.70:40010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:20.793603 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 66.249.66.33:41484] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:20.796364 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 66.249.66.33:41484] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:20.870658 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.71:31986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:20.871345 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.71:31986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:21.007730 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:21.010429 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:21.054177 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:47036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:21.054812 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:47036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:21.061791 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.62:47038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:21.062429 2026] [authz_core:error] [pid 2910929:tid 2910929] [client 57.141.0.62:47038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:21.575870 2026] [security2:error] [pid 2901124:tid 2901124] [client 185.191.171.11:63788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2545.0/prev_next,next.html"] [unique_id "amsp2b_s7aEYVV1RiZDe9gAAACE"]
[Thu Jul 30 11:39:21.872463 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.35:46398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:21.873110 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.35:46398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:21.915353 2026] [lsapi:warn] [pid 2910929:tid 2910929] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:22.143498 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:1332] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:22.234710 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:64644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:22.234734 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:22.290246 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:64658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:22.290277 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:22.375139 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.60:28310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:22.375786 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.60:28310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:22.438880 2026] [lsapi:warn] [pid 2919943:tid 2919943] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:22.904000 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.4:27328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:22.904631 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.4:27328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:22.998204 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.3:65470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:22.998823 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.3:65470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:23.289109 2026] [authz_core:error] [pid 2929402:tid 2929402] [client 57.141.0.1:48908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:23.289790 2026] [authz_core:error] [pid 2929402:tid 2929402] [client 57.141.0.1:48908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:23.360670 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.17:64398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:23.361303 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 57.141.0.17:64398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:23.793252 2026] [authz_core:error] [pid 2929402:tid 2929402] [client 57.141.0.55:40544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:23.793934 2026] [authz_core:error] [pid 2929402:tid 2929402] [client 57.141.0.55:40544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:23.933400 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.59:54734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:23.934055 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.59:54734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:24.336005 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.64:24196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:24.336704 2026] [authz_core:error] [pid 2921807:tid 2921807] [client 57.141.0.64:24196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:24.607404 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.18:30040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:24.608027 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.18:30040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:24.882721 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:24.885370 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:25.144235 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.12:25552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:25.144859 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.12:25552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:25.157195 2026] [ssl:error] [pid 2919943:tid 2919943] (70014)End of file found: [client 216.73.216.199:28298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:25.230280 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.15:63744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:25.230907 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.15:63744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:25.346702 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:64684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:25.346743 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:25.400998 2026] [ssl:error] [pid 2927386:tid 2927386] (EAI 2)Name or service not known: [client 144.76.19.72:64690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:25.401031 2026] [ssl:error] [pid 2927386:tid 2927386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:25.640019 2026] [ssl:error] [pid 2927387:tid 2927387] (70014)End of file found: [client 216.73.216.199:60025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:25.992952 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.19:49560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:25.993583 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.19:49560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:25.996999 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.7:32468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:25.997609 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.7:32468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:26.245592 2026] [access_compat:error] [pid 2921705:tid 2921705] [client 136.158.37.124:50935] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:39:26.459369 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 172.213.225.181:18345] AH01630: client denied by server configuration: /home/heritag1/public_html/wp-includes/Requests/error_log
[Thu Jul 30 11:39:26.572344 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:26.574998 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:26.776991 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.20:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:26.777629 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.20:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:27.144871 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.53:36648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:27.145491 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.53:36648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:27.821305 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.44:60504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:27.821922 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.44:60504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:28.197795 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.43:54054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:28.198416 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.43:54054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:28.319029 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:59240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:28.319668 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:59240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:28.457094 2026] [ssl:error] [pid 2927386:tid 2927386] (EAI 2)Name or service not known: [client 144.76.19.72:64714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:28.457130 2026] [ssl:error] [pid 2927386:tid 2927386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:28.511273 2026] [ssl:error] [pid 2929201:tid 2929201] (EAI 2)Name or service not known: [client 144.76.19.72:64720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:28.511304 2026] [ssl:error] [pid 2929201:tid 2929201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:28.587536 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:28.590213 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:28.620800 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.53:36656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:28.621441 2026] [authz_core:error] [pid 2928366:tid 2928366] [client 57.141.0.53:36656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:28.782085 2026] [ssl:error] [pid 2910929:tid 2910929] (70014)End of file found: [client 216.73.216.199:22314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:28.812782 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.54:48296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:28.813404 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.54:48296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:29.146261 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.43:54056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:29.146890 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.43:54056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:29.613565 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.53:36660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:29.614187 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.53:36660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:29.769319 2026] [security2:error] [pid 2929201:tid 2929201] [client 47.128.35.37:23624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "leaccess.co.uk"] [uri "/robots.txt"] [unique_id "amsp4ZaLAiKjn_KVc8jzQwAAABY"]
[Thu Jul 30 11:39:30.198355 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.20:63704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:30.198970 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.20:63704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:30.200965 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.70:22604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:30.201650 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.70:22604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:30.229332 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:30.232044 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 66.249.66.33:49654] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:30.509193 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.62:47046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:30.509806 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.62:47046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:30.527500 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.32:59598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:30.528127 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.32:59598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:30.593115 2026] [ssl:error] [pid 2928482:tid 2928482] (70014)End of file found: [client 216.73.216.199:42907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:31.332667 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.53:36668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:31.333309 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.53:36668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:31.569013 2026] [ssl:error] [pid 2929450:tid 2929450] (EAI 2)Name or service not known: [client 144.76.19.72:43032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:31.569046 2026] [ssl:error] [pid 2929450:tid 2929450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:31.608978 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.23:62726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:31.609607 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.23:62726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:31.622589 2026] [ssl:error] [pid 2921525:tid 2921525] (EAI 2)Name or service not known: [client 144.76.19.72:43042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:31.622616 2026] [ssl:error] [pid 2921525:tid 2921525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:31.655113 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.66:31486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:31.655725 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.66:31486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:31.691191 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.35:61294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:31.691806 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.35:61294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:32.112199 2026] [ssl:error] [pid 2916525:tid 2916525] (70014)End of file found: [client 216.73.216.199:48508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:32.297698 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:32.300348 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:32.366182 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.22:30852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:32.366797 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.22:30852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:32.637452 2026] [lsapi:warn] [pid 2927345:tid 2927345] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:32.898048 2026] [lsapi:warn] [pid 2929450:tid 2929450] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:33.383361 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.47:24814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:33.384049 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.47:24814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:33.564220 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.55:27542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:33.564853 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.55:27542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:33.742022 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.59:46006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:33.742652 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.59:46006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:33.847249 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.13:29290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:33.847875 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.13:29290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:33.917028 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:33.919671 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:34.221005 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.58:63196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:34.221634 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.58:63196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:34.223621 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.20:63712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:34.224316 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.20:63712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:34.278947 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.24:54568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:34.279585 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.24:54568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:34.693529 2026] [ssl:error] [pid 2929450:tid 2929450] (EAI 2)Name or service not known: [client 144.76.19.72:43058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:34.693562 2026] [ssl:error] [pid 2929450:tid 2929450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:34.747568 2026] [ssl:error] [pid 2910927:tid 2910927] (EAI 2)Name or service not known: [client 144.76.19.72:43066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:34.747592 2026] [ssl:error] [pid 2910927:tid 2910927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:34.851723 2026] [ssl:error] [pid 2923573:tid 2923573] (70014)End of file found: [client 216.73.216.199:3986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:35.173126 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.4:44950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:35.173741 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.4:44950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:35.392356 2026] [security2:error] [pid 2921705:tid 2921705] [client 85.208.96.209:38664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/belvidere,-il-recent-arrests"] [unique_id "amsp59Zmet_T5wgq7um-MAAAAAs"]
[Thu Jul 30 11:39:35.483239 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.67:52858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:35.483855 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.67:52858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:35.549865 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.15:54066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:35.550494 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.15:54066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:35.957311 2026] [core:error] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/close_delay
[Thu Jul 30 11:39:36.042486 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.6:48124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:36.043137 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.6:48124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:36.103256 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.20:63718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:36.103869 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.20:63718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:36.253830 2026] [core:error] [pid 2929974:tid 2929974] [client 66.249.66.5:50921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:36.253854 2026] [core:error] [pid 2929974:tid 2929974] [client 66.249.66.5:50921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:36.255464 2026] [core:error] [pid 2912360:tid 2912360] [client 66.249.66.39:60635] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:36.255481 2026] [core:error] [pid 2912360:tid 2912360] [client 66.249.66.39:60635] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:36.553187 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:36.555842 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:36.669678 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/imunify360/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/imunify360/' is executable
[Thu Jul 30 11:39:36.670035 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/chrony/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/chrony/' is executable
[Thu Jul 30 11:39:36.670476 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/clos_ssa/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/clos_ssa/' is executable
[Thu Jul 30 11:39:36.678775 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cpanel-server-traffic/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cpanel-server-traffic/' is executable
[Thu Jul 30 11:39:36.686520 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/sw-cp-server/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/sw-cp-server/' is executable
[Thu Jul 30 11:39:36.686571 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/private/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/private/' is executable
[Thu Jul 30 11:39:36.694601 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/audit/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/audit/' is executable
[Thu Jul 30 11:39:36.694672 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/dcpumon/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/dcpumon/' is executable
[Thu Jul 30 11:39:36.694713 2026] [core:crit] [pid 2919947:tid 2919947] (13)Permission denied: [client 216.73.216.199:2221] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/sssd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/sssd/' is executable
[Thu Jul 30 11:39:36.849479 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.15:54080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:36.850111 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.15:54080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:36.977062 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.29:35438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:36.977691 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.29:35438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:37.190635 2026] [access_compat:error] [pid 2912360:tid 2912360] [client 136.158.37.124:51811] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:39:37.245817 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.20:63722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:37.246438 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.20:63722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:37.458836 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:35836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:37.459461 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:35836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:37.547182 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.43:36166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:37.547803 2026] [authz_core:error] [pid 2903828:tid 2903828] [client 57.141.0.43:36166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:37.803602 2026] [ssl:error] [pid 2927388:tid 2927388] (EAI 2)Name or service not known: [client 144.76.19.72:43070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:37.803625 2026] [ssl:error] [pid 2927388:tid 2927388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:37.856830 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:43076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:37.856859 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:38.143027 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:38.145721 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:38.184351 2026] [ssl:error] [pid 2919947:tid 2919947] (70014)End of file found: [client 216.73.216.199:2221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:38.358369 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.3:29012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:38.358998 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.3:29012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:38.676738 2026] [ssl:error] [pid 2916525:tid 2916525] (70014)End of file found: [client 216.73.216.199:31004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:38.746364 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.5:55518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:38.746987 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.5:55518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:39.124138 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.54:61220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:39.124756 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.54:61220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:39.168314 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.8:65530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:39.168934 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.8:65530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:39.765034 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.6:48126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:39.765692 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.6:48126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:39.979444 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.71:54572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:39.980057 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.71:54572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:40.014933 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.54:61236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:40.015579 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.54:61236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:40.105822 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.30:53232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:40.106440 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.30:53232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:40.207507 2026] [ssl:error] [pid 2927167:tid 2927167] (70014)End of file found: [client 216.73.216.199:18897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:40.977259 2026] [ssl:error] [pid 2921705:tid 2921705] (EAI 2)Name or service not known: [client 144.76.19.72:51964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:40.977304 2026] [ssl:error] [pid 2921705:tid 2921705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:41.032242 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:51970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:41.032278 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:41.431032 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.29:27088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:41.431667 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.29:27088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:41.496316 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.30:53236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:41.496943 2026] [authz_core:error] [pid 2929201:tid 2929201] [client 57.141.0.30:53236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:41.523556 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.32:23840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:41.524179 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.32:23840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:41.812660 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:41.815399 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:42.369062 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.66:24120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:42.369119 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.2:40280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:42.369721 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.66:24120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:42.369798 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.2:40280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:42.496367 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.28:43300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:42.496991 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.28:43300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:43.180944 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.24:56440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:43.181592 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.24:56440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:43.290833 2026] [lsapi:warn] [pid 2929974:tid 2929974] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:43.389440 2026] [lsapi:warn] [pid 2923573:tid 2923573] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:43.796422 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.17:45618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:43.797042 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.17:45618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:43.801816 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.66:24122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:43.802437 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.66:24122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:43.980715 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.21:28766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:43.981337 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.21:28766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:44.084467 2026] [ssl:error] [pid 2910929:tid 2910929] (EAI 2)Name or service not known: [client 144.76.19.72:51974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:44.084492 2026] [ssl:error] [pid 2910929:tid 2910929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:44.117700 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:44.120378 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:44.140436 2026] [ssl:error] [pid 2916525:tid 2916525] (EAI 2)Name or service not known: [client 144.76.19.72:51986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:44.140461 2026] [ssl:error] [pid 2916525:tid 2916525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:44.298253 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.7:52448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:44.298880 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.7:52448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:44.362816 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.31:61212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:44.363434 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.31:61212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:44.820902 2026] [ssl:error] [pid 2901124:tid 2901124] (70014)End of file found: [client 216.73.216.199:55532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:44.887128 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.10:30830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:44.887744 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.10:30830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:45.411759 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.61:47646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:45.412380 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.61:47646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:45.633525 2026] [ssl:error] [pid 2916525:tid 2916525] (70014)End of file found: [client 216.73.216.199:23396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:45.840000 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:45.842654 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:46.051191 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.35:38132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:46.051815 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.35:38132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:46.142464 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.67:20164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:46.143091 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.67:20164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:46.170113 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.27:56016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:46.170722 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.27:56016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:46.412039 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.5:55532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:46.412666 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.5:55532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:46.944695 2026] [ssl:error] [pid 2923573:tid 2923573] (70014)End of file found: [client 216.73.216.199:41836] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:47.093228 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.50:45678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:47.093847 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.50:45678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:47.195406 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:51990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:47.195430 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:47.251009 2026] [ssl:error] [pid 2930165:tid 2930165] (EAI 2)Name or service not known: [client 144.76.19.72:51992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:47.251049 2026] [ssl:error] [pid 2930165:tid 2930165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:47.462371 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:47.465055 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:47.493213 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.26:48342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:47.493826 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.26:48342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:47.585425 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.53:61210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:47.586063 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.53:61210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:47.747156 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.1:55920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:47.747774 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.1:55920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:48.153561 2026] [access_compat:error] [pid 2921813:tid 2921813] [client 136.158.37.124:52737] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:39:48.263583 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.64:60042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:48.264205 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.64:60042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:48.728813 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.11:28518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:48.729441 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.11:28518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:48.785766 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.8:51930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:48.786384 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.8:51930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:49.307671 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:49.310498 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:49.417633 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.27:56028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:49.418254 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.27:56028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:49.842531 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.53:61226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:49.843168 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.53:61226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:50.077351 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.27:56044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:50.077975 2026] [authz_core:error] [pid 2913448:tid 2913448] [client 57.141.0.27:56044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:50.477175 2026] [ssl:error] [pid 2921525:tid 2921525] (EAI 2)Name or service not known: [client 144.76.19.72:63782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:50.477212 2026] [ssl:error] [pid 2921525:tid 2921525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:50.533304 2026] [ssl:error] [pid 2915445:tid 2915445] (EAI 2)Name or service not known: [client 144.76.19.72:63786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:50.533331 2026] [ssl:error] [pid 2915445:tid 2915445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:50.550913 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.30:51646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:50.551547 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.30:51646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:50.578839 2026] [ssl:error] [pid 2907139:tid 2907139] (70014)End of file found: [client 216.73.216.199:33766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:50.578903 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:50.581587 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:50.760453 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.24:44438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:50.761089 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.24:44438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:50.979309 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.52:37564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:50.979936 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.52:37564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:51.606185 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.47:28046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:51.606840 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.53:61242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:51.606868 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.47:28046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:51.607458 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.53:61242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:52.079193 2026] [ssl:error] [pid 2927389:tid 2927389] (70014)End of file found: [client 216.73.216.199:58072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:52.140706 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.12:31866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:52.141339 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.12:31866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:52.296088 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.56:25630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:52.296782 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.56:25630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:52.363486 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.32:61746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:52.364120 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.32:61746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:52.671355 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.71:44056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:52.672040 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.71:44056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:52.992302 2026] [security2:error] [pid 2929199:tid 2929199] [client 216.73.216.199:15768] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/agent360.ini"] [unique_id "amsp-DTWw4wC_Zpsp_sJiwAAABU"]
[Thu Jul 30 11:39:52.992606 2026] [security2:error] [pid 2929199:tid 2929199] [client 216.73.216.199:15768] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/agent360.ini"] [unique_id "amsp-DTWw4wC_Zpsp_sJiwAAABU"]
[Thu Jul 30 11:39:52.992844 2026] [security2:error] [pid 2929199:tid 2929199] [client 216.73.216.199:15768] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/agent360.ini"] [unique_id "amsp-DTWw4wC_Zpsp_sJiwAAABU"]
[Thu Jul 30 11:39:53.562178 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.11:28540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:53.562796 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.11:28540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:53.588241 2026] [ssl:error] [pid 2921813:tid 2921813] (EAI 2)Name or service not known: [client 144.76.19.72:63812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:53.588272 2026] [ssl:error] [pid 2921813:tid 2921813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:53.640479 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.68:50872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:53.641109 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.68:50872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:53.643976 2026] [ssl:error] [pid 2923502:tid 2923502] (EAI 2)Name or service not known: [client 144.76.19.72:63816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:53.644000 2026] [ssl:error] [pid 2923502:tid 2923502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:53.684037 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:53.686835 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:53.951109 2026] [lsapi:warn] [pid 2921813:tid 2921813] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:53.956633 2026] [lsapi:warn] [pid 2912360:tid 2912360] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:39:54.196438 2026] [core:error] [pid 2929199:tid 2929199] (13)Permission denied: [client 216.73.216.199:15768] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/flags
[Thu Jul 30 11:39:54.333679 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.12:31876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:54.334300 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.12:31876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:54.497667 2026] [ssl:error] [pid 2929199:tid 2929199] (70014)End of file found: [client 216.73.216.199:15768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:54.514741 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.46:57984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:54.515364 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.46:57984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:54.964982 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:54.967675 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:55.278702 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.48:32856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:55.279339 2026] [authz_core:error] [pid 2910927:tid 2910927] [client 57.141.0.48:32856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:55.347387 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.23:57460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:55.348044 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.23:57460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:55.371022 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.21:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:55.371646 2026] [authz_core:error] [pid 2889424:tid 2889424] [client 57.141.0.21:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:55.450624 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:55.453275 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:55.587276 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.44:36834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:55.587906 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.44:36834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:55.872133 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.39:40684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:55.872756 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.39:40684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:56.026112 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.44:36844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:56.026730 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.44:36844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:56.605642 2026] [ssl:error] [pid 2912360:tid 2912360] (70014)End of file found: [client 216.73.216.199:49048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:56.698403 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:63828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:56.698434 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:56.754085 2026] [ssl:error] [pid 2921813:tid 2921813] (EAI 2)Name or service not known: [client 144.76.19.72:63834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:56.754117 2026] [ssl:error] [pid 2921813:tid 2921813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:56.817596 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.53:45966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:56.818225 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.53:45966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:56.848649 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.64:48214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:56.849278 2026] [authz_core:error] [pid 2923502:tid 2923502] [client 57.141.0.64:48214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:57.040976 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:57.043630 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:57.323848 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.64:48226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:57.324469 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.64:48226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:57.428630 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.19:42830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:57.429253 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.19:42830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:57.809254 2026] [ssl:error] [pid 2913448:tid 2913448] (70014)End of file found: [client 216.73.216.199:28920] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:39:57.916932 2026] [core:error] [pid 2927167:tid 2927167] [client 66.249.66.66:50760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:57.916959 2026] [core:error] [pid 2927167:tid 2927167] [client 66.249.66.66:50760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:58.337596 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.49:60240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:58.338215 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.49:60240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:58.557889 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.35:51344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:58.558515 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.35:51344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:58.636837 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:58.639522 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:58.714904 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.6:61058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:58.715542 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.6:61058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:58.758305 2026] [core:error] [pid 2927387:tid 2927387] [client 66.249.66.167:53370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:58.758329 2026] [core:error] [pid 2927387:tid 2927387] [client 66.249.66.167:53370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:39:59.096655 2026] [access_compat:error] [pid 2927386:tid 2927386] [client 136.158.37.124:53723] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:39:59.314364 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:59.317023 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:59.356224 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.12:31892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:59.356846 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.12:31892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:59.414270 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.58:26108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:59.414913 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.58:26108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:59.587340 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.13:26388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:59.587994 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.13:26388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:59.784366 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:39:59.787026 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:39:59.805830 2026] [ssl:error] [pid 2923573:tid 2923573] (EAI 2)Name or service not known: [client 144.76.19.72:61508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:59.805853 2026] [ssl:error] [pid 2923573:tid 2923573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:39:59.855299 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.30:54450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:39:59.855921 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.30:54450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:39:59.858521 2026] [ssl:error] [pid 2927387:tid 2927387] (EAI 2)Name or service not known: [client 144.76.19.72:61520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:39:59.858544 2026] [ssl:error] [pid 2927387:tid 2927387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:00.217983 2026] [ssl:error] [pid 2916525:tid 2916525] (70014)End of file found: [client 216.73.216.199:14918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:00.609302 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.56:26868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:00.609927 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.56:26868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:00.682591 2026] [security2:error] [pid 2931272:tid 2931272] [client 94.154.43.186:52514] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sharonduggal.co.uk"] [uri "/.env"] [unique_id "amsqANLng1sl0-hDufA9aQAAABs"]
[Thu Jul 30 11:40:00.682802 2026] [security2:error] [pid 2931272:tid 2931272] [client 94.154.43.186:52514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sharonduggal.co.uk"] [uri "/.env"] [unique_id "amsqANLng1sl0-hDufA9aQAAABs"]
[Thu Jul 30 11:40:00.682989 2026] [security2:error] [pid 2931272:tid 2931272] [client 94.154.43.186:52514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sharonduggal.co.uk"] [uri "/403.shtml"] [unique_id "amsqANLng1sl0-hDufA9aQAAABs"]
[Thu Jul 30 11:40:00.793372 2026] [security2:error] [pid 2927305:tid 2927305] [client 94.154.43.185:38222] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.mail.sharonduggal.co.uk"] [uri "/.env"] [unique_id "amsqAEqCOb_eUkKaQ1-hfwAAAAM"]
[Thu Jul 30 11:40:00.793577 2026] [security2:error] [pid 2927305:tid 2927305] [client 94.154.43.185:38222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.mail.sharonduggal.co.uk"] [uri "/.env"] [unique_id "amsqAEqCOb_eUkKaQ1-hfwAAAAM"]
[Thu Jul 30 11:40:00.793800 2026] [security2:error] [pid 2927305:tid 2927305] [client 94.154.43.185:38222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.mail.sharonduggal.co.uk"] [uri "/.env"] [unique_id "amsqAEqCOb_eUkKaQ1-hfwAAAAM"]
[Thu Jul 30 11:40:00.813062 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.56:26878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:00.813737 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.56:26878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:01.004474 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.48:28322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:01.005160 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.48:28322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:01.343213 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.9:50996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:01.343832 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.9:50996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:01.486114 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.21:33782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:01.486732 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.21:33782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:01.730970 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.35:38134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:01.731643 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.35:38134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:01.877108 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:01.879779 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:01.927789 2026] [ssl:error] [pid 2928482:tid 2928482] (70014)End of file found: [client 216.73.216.199:32909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:02.442741 2026] [core:error] [pid 2927389:tid 2927389] [client 57.141.0.11:51656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:02.442776 2026] [core:error] [pid 2927389:tid 2927389] [client 57.141.0.11:51656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:02.917221 2026] [ssl:error] [pid 2923573:tid 2923573] (EAI 2)Name or service not known: [client 144.76.19.72:61522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:02.917248 2026] [ssl:error] [pid 2923573:tid 2923573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:02.973532 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:61534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:02.973564 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:03.077749 2026] [core:error] [pid 2927389:tid 2927389] [client 57.141.0.40:26134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:03.077778 2026] [core:error] [pid 2927389:tid 2927389] [client 57.141.0.40:26134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:03.138178 2026] [ssl:error] [pid 2913448:tid 2913448] (70014)End of file found: [client 216.73.216.199:16029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:03.159628 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.68:33776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:03.160297 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.68:33776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:03.350686 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.22:49774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:03.351317 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.22:49774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:03.477958 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:03.480625 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:04.148543 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.17:57060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:04.149201 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.17:57060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:04.456273 2026] [ssl:error] [pid 2921813:tid 2921813] (70014)End of file found: [client 216.73.216.199:20904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:04.482006 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:04.492608 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:49266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:04.493225 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:49266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:04.612309 2026] [lsapi:warn] [pid 2921808:tid 2921808] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:04.692294 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.68:33784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:04.692917 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.68:33784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:04.761959 2026] [core:error] [pid 2923573:tid 2923573] [client 57.141.0.1:32336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:04.761983 2026] [core:error] [pid 2923573:tid 2923573] [client 57.141.0.1:32336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:04.899150 2026] [security2:error] [pid 2930921:tid 2930921] [client 114.119.146.111:53457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,17,103/request_format~html"] [unique_id "amsqBG7RDy_tHPTMAtLBGAAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,17/request_format~html
[Thu Jul 30 11:40:05.054636 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.10:40986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:05.055262 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.10:40986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:05.118897 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.10:41000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:05.119533 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.10:41000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:05.197870 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.63:36378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:05.198497 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.63:36378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:05.341289 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:05.343936 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:05.911421 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.23:54130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:05.912039 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.23:54130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:06.044431 2026] [ssl:error] [pid 2931703:tid 2931703] (EAI 2)Name or service not known: [client 144.76.19.72:61542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:06.044483 2026] [ssl:error] [pid 2931703:tid 2931703] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:06.100448 2026] [ssl:error] [pid 2923502:tid 2923502] (EAI 2)Name or service not known: [client 144.76.19.72:61546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:06.100478 2026] [ssl:error] [pid 2923502:tid 2923502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:06.351452 2026] [security2:error] [pid 2929450:tid 2929450] [client 114.119.146.111:53473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,17,103/request_format~html"] [unique_id "amsqBoZ3DjiMjjk_73wtmwAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~30,19,17/request_format~html
[Thu Jul 30 11:40:06.588996 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.47:32806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:06.589638 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.47:32806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:06.641015 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.13:33270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:06.641668 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.13:33270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:06.928328 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.65:44184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:06.929354 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.65:44184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:07.211402 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:07.214063 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:07.401526 2026] [security2:error] [pid 2930273:tid 2930273] [client 47.76.104.169:17777] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqB_64ZI4HVFKueOfdJAAAABw"]
[Thu Jul 30 11:40:07.401572 2026] [security2:error] [pid 2930273:tid 2930273] [client 47.76.104.169:17777] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqB_64ZI4HVFKueOfdJAAAABw"]
[Thu Jul 30 11:40:07.401811 2026] [security2:error] [pid 2930273:tid 2930273] [client 47.76.104.169:17777] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqB_64ZI4HVFKueOfdJAAAABw"]
[Thu Jul 30 11:40:07.402196 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.51:60932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:07.402824 2026] [authz_core:error] [pid 2929137:tid 2929137] [client 57.141.0.51:60932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:07.813076 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.7:60896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:07.813701 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.7:60896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:08.238792 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.68:25442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:08.239426 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.68:25442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:08.358188 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.41:24544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:08.358806 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.41:24544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:08.466613 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:27686] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:08.750410 2026] [security2:error] [pid 2910929:tid 2910929] [client 150.5.132.113:26969] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqCMZW-msSwM_NmOUNEgAAACY"]
[Thu Jul 30 11:40:08.750455 2026] [security2:error] [pid 2910929:tid 2910929] [client 150.5.132.113:26969] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqCMZW-msSwM_NmOUNEgAAACY"]
[Thu Jul 30 11:40:08.750701 2026] [security2:error] [pid 2910929:tid 2910929] [client 150.5.132.113:26969] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqCMZW-msSwM_NmOUNEgAAACY"]
[Thu Jul 30 11:40:09.094184 2026] [core:error] [pid 2931703:tid 2931703] [client 66.249.64.170:53291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:09.094208 2026] [core:error] [pid 2931703:tid 2931703] [client 66.249.64.170:53291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:09.148482 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:09.151125 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:09.155791 2026] [ssl:error] [pid 2925584:tid 2925584] (EAI 2)Name or service not known: [client 144.76.19.72:61560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:09.155819 2026] [ssl:error] [pid 2925584:tid 2925584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:09.208950 2026] [ssl:error] [pid 2929450:tid 2929450] (EAI 2)Name or service not known: [client 144.76.19.72:61572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:09.209001 2026] [ssl:error] [pid 2929450:tid 2929450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:09.338732 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.13:33280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:09.339350 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.13:33280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:09.370202 2026] [ssl:error] [pid 2927386:tid 2927386] (70014)End of file found: [client 216.73.216.199:43249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:09.590724 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.26:23476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:09.591344 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.26:23476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:09.673580 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.19:60764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:09.674208 2026] [authz_core:error] [pid 2923573:tid 2923573] [client 57.141.0.19:60764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:10.878495 2026] [core:error] [pid 2921705:tid 2921705] (13)Permission denied: [client 216.73.216.199:51289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/i2c_piix4/sections/__jump_table
[Thu Jul 30 11:40:10.913120 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:10.915763 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:10.940901 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.16:58038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:10.941527 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.16:58038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:10.957118 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.62:42678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:10.957730 2026] [authz_core:error] [pid 2929451:tid 2929451] [client 57.141.0.62:42678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:11.020302 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.63:50206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:11.020932 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.63:50206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:11.166857 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.33:49856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:11.167485 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.33:49856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:11.180402 2026] [core:error] [pid 2921705:tid 2921705] (13)Permission denied: [client 216.73.216.199:51289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS0/close_delay
[Thu Jul 30 11:40:11.641143 2026] [security2:error] [pid 2932024:tid 2932024] [client 150.5.132.113:62909] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqC62Kjv3wgGvL0asjMgAAAAE"]
[Thu Jul 30 11:40:11.641204 2026] [security2:error] [pid 2932024:tid 2932024] [client 150.5.132.113:62909] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqC62Kjv3wgGvL0asjMgAAAAE"]
[Thu Jul 30 11:40:11.641526 2026] [security2:error] [pid 2932024:tid 2932024] [client 150.5.132.113:62909] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqC62Kjv3wgGvL0asjMgAAAAE"]
[Thu Jul 30 11:40:12.082698 2026] [core:error] [pid 2921705:tid 2921705] (13)Permission denied: [client 216.73.216.199:51289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS1/close_delay
[Thu Jul 30 11:40:12.130977 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.7:60906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:12.131609 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.7:60906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:12.500825 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:55240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:12.500856 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:12.570373 2026] [ssl:error] [pid 2919947:tid 2919947] (EAI 2)Name or service not known: [client 144.76.19.72:55250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:12.570397 2026] [ssl:error] [pid 2919947:tid 2919947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:12.635579 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.1:57184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:12.636249 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.1:57184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:12.801827 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:12.804515 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:12.986373 2026] [ssl:error] [pid 2921705:tid 2921705] (70014)End of file found: [client 216.73.216.199:51289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:13.079732 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.65:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:13.080409 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.65:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:13.466506 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.15:38294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:13.467151 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.15:38294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:13.776299 2026] [core:error] [pid 2930165:tid 2930165] (13)Permission denied: [client 216.73.216.199:34240] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 11:40:14.091032 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.24:21384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:14.091666 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.24:21384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:14.288937 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.4:25126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:14.289574 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.4:25126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:14.571539 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:14.574191 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:14.728686 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.55:36648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:14.729302 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.55:36648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:14.787581 2026] [ssl:error] [pid 2930165:tid 2930165] (70014)End of file found: [client 216.73.216.199:34240] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:14.933095 2026] [authz_core:error] [pid 2931536:tid 2931536] [client 57.141.0.22:48774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:14.933716 2026] [authz_core:error] [pid 2931536:tid 2931536] [client 57.141.0.22:48774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:14.957866 2026] [lsapi:warn] [pid 2927346:tid 2927346] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:15.256137 2026] [lsapi:warn] [pid 2932024:tid 2932024] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:15.350839 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.71:38990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:15.351465 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.71:38990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:15.377190 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.9:23746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:15.377814 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.9:23746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:15.655588 2026] [ssl:error] [pid 2927386:tid 2927386] (EAI 2)Name or service not known: [client 144.76.19.72:55260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:15.655622 2026] [ssl:error] [pid 2927386:tid 2927386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:15.710320 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:55274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:15.710348 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:15.992102 2026] [ssl:error] [pid 2927345:tid 2927345] (70014)End of file found: [client 216.73.216.199:43149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:16.349579 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.70:56866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:16.350197 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.70:56866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:16.371732 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.8:29772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:16.372358 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.8:29772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:16.619345 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.35:47904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:16.619969 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.35:47904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:16.684017 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:16.686681 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:16.946443 2026] [core:error] [pid 2927389:tid 2927389] [client 74.7.241.150:57226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:16.946471 2026] [core:error] [pid 2927389:tid 2927389] [client 74.7.241.150:57226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:17.459726 2026] [core:error] [pid 2927346:tid 2927346] [client 66.249.66.67:54309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:17.459770 2026] [core:error] [pid 2927346:tid 2927346] [client 66.249.66.67:54309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:17.634783 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.64:35866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:17.635404 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.64:35866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:18.259726 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.70:30116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:18.260351 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.70:30116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:18.295596 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:18.298254 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:18.616364 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.42:46228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:18.616976 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.42:46228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:18.708741 2026] [security2:error] [pid 2927389:tid 2927389] [client 216.73.216.199:2383] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/var.conf"] [unique_id "amsqErzFTVFTVSKdijw9egAAABI"]
[Thu Jul 30 11:40:18.709035 2026] [security2:error] [pid 2927389:tid 2927389] [client 216.73.216.199:2383] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/var.conf"] [unique_id "amsqErzFTVFTVSKdijw9egAAABI"]
[Thu Jul 30 11:40:18.709266 2026] [security2:error] [pid 2927389:tid 2927389] [client 216.73.216.199:2383] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/var.conf"] [unique_id "amsqErzFTVFTVSKdijw9egAAABI"]
[Thu Jul 30 11:40:18.763304 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:55290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:18.763343 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:18.798448 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.8:29786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:18.799078 2026] [authz_core:error] [pid 2907139:tid 2907139] [client 57.141.0.8:29786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:18.819585 2026] [ssl:error] [pid 2932024:tid 2932024] (EAI 2)Name or service not known: [client 144.76.19.72:55304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:18.819617 2026] [ssl:error] [pid 2932024:tid 2932024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:18.849427 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.67:39324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:18.850048 2026] [authz_core:error] [pid 2916061:tid 2916061] [client 57.141.0.67:39324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:18.951260 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.68:62186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:18.951881 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.68:62186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:19.377393 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.44:43192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:19.378015 2026] [authz_core:error] [pid 2921745:tid 2921745] [client 57.141.0.44:43192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:19.612240 2026] [ssl:error] [pid 2927389:tid 2927389] (70014)End of file found: [client 216.73.216.199:2383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:19.956736 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.68:62200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:19.957360 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.68:62200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:20.101905 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:20.104563 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:20.934902 2026] [access_compat:error] [pid 2927305:tid 2927305] [client 136.158.37.124:55619] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:40:20.943259 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.24:40714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:20.943879 2026] [authz_core:error] [pid 2930273:tid 2930273] [client 57.141.0.24:40714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:20.971626 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.60:26620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:20.972254 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.60:26620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:21.056405 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.53:44550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:21.057022 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.53:44550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:21.395545 2026] [access_compat:error] [pid 2930273:tid 2930273] [client 45.158.164.139:57184] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:40:21.418217 2026] [ssl:error] [pid 2932024:tid 2932024] (70014)End of file found: [client 216.73.216.199:6847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:21.877257 2026] [ssl:error] [pid 2927388:tid 2927388] (EAI 2)Name or service not known: [client 144.76.19.72:63908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:21.877282 2026] [ssl:error] [pid 2927388:tid 2927388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:21.930217 2026] [ssl:error] [pid 2932555:tid 2932555] (EAI 2)Name or service not known: [client 144.76.19.72:63912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:21.930253 2026] [ssl:error] [pid 2932555:tid 2932555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:22.173000 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.59:22856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:22.173674 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.59:22856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:22.329177 2026] [ssl:error] [pid 2927345:tid 2927345] (70014)End of file found: [client 216.73.216.199:12223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:22.469906 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.44:49016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:22.470541 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.44:49016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:22.547770 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.21:22866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:22.548389 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.21:22866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:22.863013 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.8:29796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:22.863646 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.8:29796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:23.145702 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:23.148355 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:23.621765 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.11:61288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:23.622431 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.11:61288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:23.647188 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.67:39332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:23.647812 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.67:39332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:23.657179 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.41:32046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:23.657802 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.41:32046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:23.670358 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.6:38856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:23.670978 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.6:38856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:24.573948 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.54:64338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:24.574585 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.54:64338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:24.928335 2026] [ssl:error] [pid 2925584:tid 2925584] (70014)End of file found: [client 216.73.216.199:12102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:24.988126 2026] [ssl:error] [pid 2931536:tid 2931536] (EAI 2)Name or service not known: [client 144.76.19.72:63924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:24.988163 2026] [ssl:error] [pid 2931536:tid 2931536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:25.040426 2026] [ssl:error] [pid 2932610:tid 2932610] (EAI 2)Name or service not known: [client 144.76.19.72:63926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:25.040455 2026] [ssl:error] [pid 2932610:tid 2932610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:25.109983 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:25.112658 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:25.470848 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.42:30210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:25.471470 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.42:30210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:25.471901 2026] [lsapi:warn] [pid 2910927:tid 2910927] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:25.580638 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.63:20910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:25.581267 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.63:20910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:25.650647 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:25.653308 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:25.834482 2026] [core:error] [pid 2932610:tid 2932610] [client 57.141.0.21:28388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:25.834523 2026] [core:error] [pid 2932610:tid 2932610] [client 57.141.0.21:28388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:25.856150 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.52:22480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:25.856762 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.52:22480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:26.199596 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.44:49030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:26.200221 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.44:49030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:26.219286 2026] [lsapi:warn] [pid 2931536:tid 2931536] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:27.216090 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.40:50270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:27.216710 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.40:50270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:27.509481 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:27.512145 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:27.526460 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.6:38870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:27.527105 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.6:38870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:27.622213 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.23:41760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:27.622839 2026] [authz_core:error] [pid 2921705:tid 2921705] [client 57.141.0.23:41760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:27.730879 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.60:25314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:27.731520 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.60:25314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:27.747505 2026] [ssl:error] [pid 2931536:tid 2931536] (70014)End of file found: [client 216.73.216.199:6332] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:27.753787 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.47:49712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:27.754402 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.47:49712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:28.118829 2026] [ssl:error] [pid 2927345:tid 2927345] (EAI 2)Name or service not known: [client 144.76.19.72:63928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:28.118862 2026] [ssl:error] [pid 2927345:tid 2927345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:28.173799 2026] [ssl:error] [pid 2927167:tid 2927167] (EAI 2)Name or service not known: [client 144.76.19.72:63932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:28.173826 2026] [ssl:error] [pid 2927167:tid 2927167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:28.774824 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.50:40596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:28.775489 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.50:40596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:28.956911 2026] [core:error] [pid 2927389:tid 2927389] (13)Permission denied: [client 216.73.216.199:56752] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_generic/sections/__mcount_loc
[Thu Jul 30 11:40:29.162734 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.58:61858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:29.163361 2026] [authz_core:error] [pid 2928482:tid 2928482] [client 57.141.0.58:61858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:29.356226 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:29.358873 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:29.891878 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.2:48572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:29.892516 2026] [authz_core:error] [pid 2915445:tid 2915445] [client 57.141.0.2:48572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:30.156367 2026] [ssl:error] [pid 2927389:tid 2927389] (70014)End of file found: [client 216.73.216.199:56752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:30.255588 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.37:45682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:30.256210 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.37:45682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:30.326241 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.42:30212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:30.326858 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.42:30212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:30.899438 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.45:60718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:30.900058 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.45:60718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:30.973694 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.50:60794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:30.974317 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.50:60794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:31.047349 2026] [security2:error] [pid 2912360:tid 2912360] [client 18.199.86.73:52156] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.jasperandtroy.com"] [uri "/.git/config"] [unique_id "amsqH6N0lmL278xfT_AnhAAAAA0"]
[Thu Jul 30 11:40:31.047552 2026] [security2:error] [pid 2912360:tid 2912360] [client 18.199.86.73:52156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.jasperandtroy.com"] [uri "/.git/config"] [unique_id "amsqH6N0lmL278xfT_AnhAAAAA0"]
[Thu Jul 30 11:40:31.059264 2026] [ssl:error] [pid 2930273:tid 2930273] (70014)End of file found: [client 216.73.216.199:64097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:31.074142 2026] [security2:error] [pid 2912360:tid 2912360] [client 18.199.86.73:52156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.jasperandtroy.com"] [uri "/403.shtml"] [unique_id "amsqH6N0lmL278xfT_AnhAAAAA0"]
[Thu Jul 30 11:40:31.190627 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:31.193287 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:31.274558 2026] [ssl:error] [pid 2927167:tid 2927167] (EAI 2)Name or service not known: [client 144.76.19.72:26080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:31.274583 2026] [ssl:error] [pid 2927167:tid 2927167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:31.327157 2026] [ssl:error] [pid 2912360:tid 2912360] (EAI 2)Name or service not known: [client 144.76.19.72:26094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:31.327183 2026] [ssl:error] [pid 2912360:tid 2912360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:31.464719 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.55:43536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:31.465356 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.55:43536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:31.624743 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.68:53512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:31.625751 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.68:53512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:31.882474 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.44:58498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:31.883104 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.44:58498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:31.902605 2026] [access_compat:error] [pid 2928482:tid 2928482] [client 136.158.37.124:56602] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:40:32.892728 2026] [security2:error] [pid 2929199:tid 2929199] [client 1.14.110.85:38328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-london.com"] [uri "/"] [unique_id "amsqIDTWw4wC_Zpsp_sJnAAAABU"]
[Thu Jul 30 11:40:32.910117 2026] [security2:error] [pid 2930921:tid 2930921] [client 18.199.86.73:52162] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.halmanninvestments.com"] [uri "/.git/config"] [unique_id "amsqIG7RDy_tHPTMAtLBIAAAABY"]
[Thu Jul 30 11:40:32.910294 2026] [security2:error] [pid 2930921:tid 2930921] [client 18.199.86.73:52162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.halmanninvestments.com"] [uri "/.git/config"] [unique_id "amsqIG7RDy_tHPTMAtLBIAAAABY"]
[Thu Jul 30 11:40:32.936267 2026] [security2:error] [pid 2930921:tid 2930921] [client 18.199.86.73:52162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.halmanninvestments.com"] [uri "/403.shtml"] [unique_id "amsqIG7RDy_tHPTMAtLBIAAAABY"]
[Thu Jul 30 11:40:33.035846 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:33.038683 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:33.070688 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.67:28410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:33.071316 2026] [authz_core:error] [pid 2912360:tid 2912360] [client 57.141.0.67:28410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:33.090184 2026] [core:error] [pid 2933125:tid 2933125] (13)Permission denied: [client 216.73.216.199:23015] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS0/flags
[Thu Jul 30 11:40:33.229973 2026] [authz_core:error] [pid 2931536:tid 2931536] [client 57.141.0.31:21888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:33.230641 2026] [authz_core:error] [pid 2931536:tid 2931536] [client 57.141.0.31:21888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:33.474026 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.39:21196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:33.474658 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.39:21196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:33.982163 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.17:45518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:33.982782 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.17:45518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:34.383396 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:26106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:34.383423 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:34.435635 2026] [authz_core:error] [pid 2933176:tid 2933176] [client 57.141.0.9:50352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:34.436282 2026] [authz_core:error] [pid 2933176:tid 2933176] [client 57.141.0.9:50352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:34.437946 2026] [ssl:error] [pid 2927387:tid 2927387] (EAI 2)Name or service not known: [client 144.76.19.72:26114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:34.437969 2026] [ssl:error] [pid 2927387:tid 2927387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:34.497763 2026] [ssl:error] [pid 2933172:tid 2933172] (70014)End of file found: [client 216.73.216.199:8333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:34.791960 2026] [ssl:error] [pid 2929199:tid 2929199] (70014)End of file found: [client 216.73.216.199:40587] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:34.880945 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:34.883612 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:35.103420 2026] [ssl:error] [pid 2933174:tid 2933174] (70014)End of file found: [client 216.73.216.199:50623] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:35.137107 2026] [authz_core:error] [pid 2933176:tid 2933176] [client 57.141.0.55:43994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:35.137729 2026] [authz_core:error] [pid 2933176:tid 2933176] [client 57.141.0.55:43994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:35.158787 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.59:25148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:35.159404 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.59:25148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:35.699205 2026] [authz_core:error] [pid 2933231:tid 2933231] [client 57.141.0.50:60800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:35.699854 2026] [authz_core:error] [pid 2933231:tid 2933231] [client 57.141.0.50:60800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:35.867261 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:59044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:35.867901 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:59044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:35.878679 2026] [security2:error] [pid 2933233:tid 2933233] [client 85.208.96.199:63882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/wilmington,-nc-obituaries"] [unique_id "amsqI85aFcGkVnh67y4ZSwAAADA"]
[Thu Jul 30 11:40:36.006367 2026] [lsapi:warn] [pid 2933235:tid 2933235] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:36.234630 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.63:47352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:36.235248 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.63:47352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:36.473179 2026] [authz_core:error] [pid 2933231:tid 2933231] [client 57.141.0.11:52340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:36.473799 2026] [authz_core:error] [pid 2933231:tid 2933231] [client 57.141.0.11:52340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:36.547196 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.69:58078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:36.547812 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.69:58078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:36.593182 2026] [lsapi:warn] [pid 2932611:tid 2932611] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:36.785015 2026] [ssl:error] [pid 2933125:tid 2933125] (70014)End of file found: [client 216.73.216.199:23015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:36.786590 2026] [security2:error] [pid 2932024:tid 2932024] [client 1.14.110.85:55088] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsqJK2Kjv3wgGvL0asjQAAAAAE"], referer: http://kinesiology-london.com
[Thu Jul 30 11:40:36.788313 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 1.14.110.85:55088] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-london.com
[Thu Jul 30 11:40:36.790951 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 1.14.110.85:55088] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-london.com
[Thu Jul 30 11:40:37.197271 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:37.199923 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:37.267149 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.24:56704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:37.267768 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.24:56704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:37.364972 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.51:49598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:37.365601 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.51:49598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:37.511395 2026] [ssl:error] [pid 2927167:tid 2927167] (EAI 2)Name or service not known: [client 144.76.19.72:26130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:37.511423 2026] [ssl:error] [pid 2927167:tid 2927167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:37.568231 2026] [ssl:error] [pid 2932611:tid 2932611] (EAI 2)Name or service not known: [client 144.76.19.72:26140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:37.568267 2026] [ssl:error] [pid 2932611:tid 2932611] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:37.683006 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.38:31354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:37.683123 2026] [ssl:error] [pid 2933076:tid 2933076] (70014)End of file found: [client 216.73.216.199:61959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:37.683641 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.38:31354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:38.526221 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.21:47742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:38.526833 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.21:47742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:38.577594 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:38.580246 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:38.585933 2026] [ssl:error] [pid 2930273:tid 2930273] (70014)End of file found: [client 216.73.216.199:61621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:38.871784 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.44:58506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:38.872407 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.44:58506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:39.282961 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.14:25186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:39.283598 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.14:25186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:39.407473 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.32:45666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:39.408108 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.32:45666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:40.157622 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.10:57350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:40.158245 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.10:57350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:40.414415 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:40.417111 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:40.492035 2026] [authz_core:error] [pid 2933172:tid 2933172] [client 57.141.0.53:33050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:40.492665 2026] [authz_core:error] [pid 2933172:tid 2933172] [client 57.141.0.53:33050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:40.594406 2026] [authz_core:error] [pid 2933174:tid 2933174] [client 57.141.0.18:38196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:40.595031 2026] [authz_core:error] [pid 2933174:tid 2933174] [client 57.141.0.18:38196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:40.622693 2026] [ssl:error] [pid 2932069:tid 2932069] (EAI 2)Name or service not known: [client 144.76.19.72:36920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:40.622732 2026] [ssl:error] [pid 2932069:tid 2932069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:40.674636 2026] [ssl:error] [pid 2931272:tid 2931272] (EAI 2)Name or service not known: [client 144.76.19.72:36922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:40.674671 2026] [ssl:error] [pid 2931272:tid 2931272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:40.864007 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.22:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:40.864699 2026] [authz_core:error] [pid 2927345:tid 2927345] [client 57.141.0.22:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:41.049774 2026] [security2:error] [pid 2924912:tid 2924912] [client 20.171.55.167:8088] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.stampys.eu"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsqKXaGXpT672XVZNmqewAAAAg"]
[Thu Jul 30 11:40:41.049980 2026] [security2:error] [pid 2924912:tid 2924912] [client 20.171.55.167:8088] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.stampys.eu"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsqKXaGXpT672XVZNmqewAAAAg"]
[Thu Jul 30 11:40:41.050230 2026] [security2:error] [pid 2924912:tid 2924912] [client 20.171.55.167:8088] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.stampys.eu"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsqKXaGXpT672XVZNmqewAAAAg"]
[Thu Jul 30 11:40:41.256728 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.36:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:41.257349 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.36:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:41.346285 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.10:57364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:41.346902 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.10:57364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:41.693863 2026] [authz_core:error] [pid 2933174:tid 2933174] [client 57.141.0.51:49604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:41.694483 2026] [authz_core:error] [pid 2933174:tid 2933174] [client 57.141.0.51:49604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:42.081139 2026] [ssl:error] [pid 2930165:tid 2930165] (70014)End of file found: [client 216.73.216.199:13879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:42.268203 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:42.270874 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:42.613416 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.26:27096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:42.614037 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.26:27096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:42.625988 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.67:61322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:42.626608 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.67:61322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:42.766936 2026] [access_compat:error] [pid 2910927:tid 2910927] [client 136.158.37.124:57388] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:40:42.903745 2026] [authz_core:error] [pid 2933174:tid 2933174] [client 57.141.0.51:49612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:42.904368 2026] [authz_core:error] [pid 2933174:tid 2933174] [client 57.141.0.51:49612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:43.012147 2026] [ssl:error] [pid 2933173:tid 2933173] (70014)End of file found: [client 216.73.216.199:43068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:43.118111 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.65:49444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:43.118732 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.65:49444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:43.256272 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.22:29732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:43.256900 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.22:29732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:43.650826 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.42:55264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:43.651492 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.42:55264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:43.730009 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:36926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:43.730038 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:43.781627 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:36940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:43.781668 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:43.840571 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.68:59064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:43.841184 2026] [authz_core:error] [pid 2930921:tid 2930921] [client 57.141.0.68:59064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:44.620294 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.53:33052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:44.620912 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.53:33052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:44.788578 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.56:59238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:44.789203 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.56:59238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:45.518722 2026] [ssl:error] [pid 2933076:tid 2933076] (70014)End of file found: [client 216.73.216.199:35915] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:45.769111 2026] [authz_core:error] [pid 2931536:tid 2931536] [client 57.141.0.13:47640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:45.769756 2026] [authz_core:error] [pid 2931536:tid 2931536] [client 57.141.0.13:47640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:45.865548 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:45.868195 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:45.966272 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.47:24024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:45.966898 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.47:24024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:46.121776 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.70:28728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:46.122412 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.70:28728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:46.303297 2026] [authz_core:error] [pid 2933429:tid 2933429] [client 57.141.0.2:42186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:46.303913 2026] [authz_core:error] [pid 2933429:tid 2933429] [client 57.141.0.2:42186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:46.436006 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:46.438655 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:46.474062 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.16:49846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:46.474688 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.16:49846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:46.544418 2026] [lsapi:warn] [pid 2932555:tid 2932555] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:46.779744 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.34:33822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:46.780370 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.34:33822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:46.837913 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:36952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:46.837937 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:46.895132 2026] [ssl:error] [pid 2930921:tid 2930921] (EAI 2)Name or service not known: [client 144.76.19.72:36958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:46.895174 2026] [ssl:error] [pid 2930921:tid 2930921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:47.214149 2026] [lsapi:warn] [pid 2927386:tid 2927386] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:47.253090 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.51:63286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:47.253713 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.51:63286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:47.538232 2026] [core:error] [pid 2927305:tid 2927305] [client 57.141.0.36:60278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:47.538257 2026] [core:error] [pid 2927305:tid 2927305] [client 57.141.0.36:60278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:48.035901 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.34:33830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:48.036536 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.34:33830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:48.126770 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.44:57188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:48.127391 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.44:57188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:48.169634 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:48.172297 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:49.007242 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.24:47610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:49.007841 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.1:22060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:49.007865 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.24:47610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:49.008449 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.1:22060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:49.130753 2026] [ssl:error] [pid 2933124:tid 2933124] (70014)End of file found: [client 216.73.216.199:16211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:49.393600 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.14:36820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:49.394221 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.14:36820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:49.654714 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:49.657357 2026] [authz_core:error] [pid 2919943:tid 2919943] [client 66.249.66.33:44308] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:49.883085 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.47:24038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:49.883704 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.47:24038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:49.906168 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.66:58996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:49.906789 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.66:58996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:49.950369 2026] [ssl:error] [pid 2933230:tid 2933230] (EAI 2)Name or service not known: [client 144.76.19.72:43444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:49.950395 2026] [ssl:error] [pid 2933230:tid 2933230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:50.004109 2026] [ssl:error] [pid 2927305:tid 2927305] (EAI 2)Name or service not known: [client 144.76.19.72:43452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:50.004131 2026] [ssl:error] [pid 2927305:tid 2927305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:50.347116 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.22:44892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:50.347731 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.22:44892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:50.386749 2026] [authz_core:error] [pid 2933232:tid 2933232] [client 57.141.0.21:44092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:50.387380 2026] [authz_core:error] [pid 2933232:tid 2933232] [client 57.141.0.21:44092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:51.015231 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.69:31012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:51.015853 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.69:31012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:51.511895 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.1:54420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:51.512525 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.1:54420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:51.630485 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.20:21748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:51.631143 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.20:21748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:51.841177 2026] [ssl:error] [pid 2912360:tid 2912360] (70014)End of file found: [client 216.73.216.199:11408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:52.179946 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.28:43196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:52.180577 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.28:43196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:52.246251 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.39:23094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:52.246871 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.39:23094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:52.442237 2026] [ssl:error] [pid 2924912:tid 2924912] (70014)End of file found: [client 216.73.216.199:1918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:52.712270 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.38:50752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:52.712886 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.38:50752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:53.057305 2026] [ssl:error] [pid 2921745:tid 2921745] (EAI 2)Name or service not known: [client 144.76.19.72:43456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:53.057331 2026] [ssl:error] [pid 2921745:tid 2921745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:53.110573 2026] [ssl:error] [pid 2933076:tid 2933076] (EAI 2)Name or service not known: [client 144.76.19.72:43464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:53.110608 2026] [ssl:error] [pid 2933076:tid 2933076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:53.329815 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.44:23312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:53.330431 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.44:23312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:53.580689 2026] [access_compat:error] [pid 2933173:tid 2933173] [client 136.158.37.124:58462] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:40:53.594036 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.52:55982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:53.594663 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.52:55982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:53.703925 2026] [lsapi:warn] [pid 2930368:tid 2930368] [client 41.238.33.73:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:53.825623 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.28:43202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:53.826246 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.28:43202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:54.096315 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.5:60166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:54.096949 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.5:60166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:54.663106 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:54.665777 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:54.751294 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.22:44900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:54.751953 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.22:44900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:55.248968 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.40:21920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:55.249600 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.40:21920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:55.314198 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.62:33770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:55.314805 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.62:33770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:55.402736 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:55.405399 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:55.461643 2026] [ssl:error] [pid 2932610:tid 2932610] (70014)End of file found: [client 216.73.216.199:28861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:55.484626 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.26:51350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:55.485244 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.26:51350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:56.163023 2026] [ssl:error] [pid 2907139:tid 2907139] (EAI 2)Name or service not known: [client 144.76.19.72:43476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:56.163096 2026] [ssl:error] [pid 2907139:tid 2907139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:56.215756 2026] [ssl:error] [pid 2929974:tid 2929974] (EAI 2)Name or service not known: [client 144.76.19.72:43484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:56.215784 2026] [ssl:error] [pid 2929974:tid 2929974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:56.282441 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.8:43100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:56.283058 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.8:43100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:56.405911 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.63:64526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:56.406551 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.63:64526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:56.571852 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.34:51298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:56.572476 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.34:51298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:56.629401 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:56.632059 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:56.951227 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.34:51304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:56.951839 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.34:51304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:57.127272 2026] [lsapi:warn] [pid 2907139:tid 2907139] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:57.352650 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.63:64530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:57.353266 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.63:64530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:57.737643 2026] [cgi:error] [pid 2927305:tid 2927305] [client 216.73.216.163:42429] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/robots.txt
[Thu Jul 30 11:40:57.752633 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:57.755282 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:57.846534 2026] [lsapi:warn] [pid 2932069:tid 2932069] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:40:57.952830 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.36:30558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:57.953450 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.36:30558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:57.993099 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.17:52172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:57.993717 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.17:52172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:58.077164 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.35:38984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:58.077803 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.35:38984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:58.147363 2026] [core:error] [pid 2933238:tid 2933238] [client 4.232.188.49:64964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:58.147392 2026] [core:error] [pid 2933238:tid 2933238] [client 4.232.188.49:64964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:40:58.330903 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.37:56712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:58.331530 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.37:56712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:58.470886 2026] [ssl:error] [pid 2929199:tid 2929199] (70014)End of file found: [client 216.73.216.199:47003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:58.905483 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:40:58.908156 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:40:58.944009 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.13:39812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:58.944729 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.13:39812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:58.999630 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.66:24200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:59.000242 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.66:24200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:59.274270 2026] [ssl:error] [pid 2933230:tid 2933230] (EAI 2)Name or service not known: [client 144.76.19.72:43486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:59.274294 2026] [ssl:error] [pid 2933230:tid 2933230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:59.327619 2026] [ssl:error] [pid 2933238:tid 2933238] (EAI 2)Name or service not known: [client 144.76.19.72:43488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:40:59.327660 2026] [ssl:error] [pid 2933238:tid 2933238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:40:59.864767 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.55:48360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:59.865414 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.55:48360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:40:59.976386 2026] [ssl:error] [pid 2907139:tid 2907139] (70014)End of file found: [client 216.73.216.199:53529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:40:59.994728 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.61:29146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:40:59.995356 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.61:29146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:00.073401 2026] [access_compat:error] [pid 2921808:tid 2921808] [client 4.232.188.49:60869] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/this_is_a_new_hello_world.php
[Thu Jul 30 11:41:00.073748 2026] [core:error] [pid 2921808:tid 2921808] [client 4.232.188.49:60869] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:00.214043 2026] [security2:error] [pid 2932069:tid 2932069] [client 185.191.171.2:50014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8549.0.html"] [unique_id "amsqPCoLFTPc0sVOLa1V2gAAAB8"]
[Thu Jul 30 11:41:00.524440 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.8:43114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:00.525077 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.8:43114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:00.601234 2026] [cgi:error] [pid 2927305:tid 2927305] [client 216.73.216.163:42429] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/sitemap.xml
[Thu Jul 30 11:41:00.746981 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:00.749641 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:00.794079 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.13:39814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:00.794692 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.13:39814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:01.596256 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.48:62566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:01.596878 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.48:62566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:01.702108 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.69:31070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:01.702725 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.69:31070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:02.105864 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.37:25246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:02.106486 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.37:25246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:02.350687 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.17:62958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:02.351309 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.17:62958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:02.383305 2026] [ssl:error] [pid 2932070:tid 2932070] (EAI 2)Name or service not known: [client 144.76.19.72:37864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:02.383338 2026] [ssl:error] [pid 2932070:tid 2932070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:02.386839 2026] [ssl:error] [pid 2933235:tid 2933235] (70014)End of file found: [client 216.73.216.199:23100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:02.438248 2026] [ssl:error] [pid 2931272:tid 2931272] (EAI 2)Name or service not known: [client 144.76.19.72:37876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:02.438268 2026] [ssl:error] [pid 2931272:tid 2931272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:02.442615 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.44:51342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:02.443236 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.44:51342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:02.586003 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:02.588684 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:02.804761 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.28:21352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:02.805383 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.28:21352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:02.859266 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.43:20164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:02.859882 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.43:20164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:03.360096 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.21:65416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:03.360714 2026] [authz_core:error] [pid 2932024:tid 2932024] [client 57.141.0.21:65416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:03.594454 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.52:40586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:03.595082 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.52:40586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:03.780080 2026] [ssl:error] [pid 2933124:tid 2933124] (70014)End of file found: [client 216.73.216.199:40185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:03.825791 2026] [access_compat:error] [pid 2932024:tid 2932024] [client 4.232.188.49:65503] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aa.php
[Thu Jul 30 11:41:03.826142 2026] [core:error] [pid 2932024:tid 2932024] [client 4.232.188.49:65503] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:03.862367 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.59:26292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:03.862978 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.59:26292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:04.004254 2026] [security2:error] [pid 2932610:tid 2932610] [client 47.254.155.177:28585] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqQAIaTfjY8lrCCKKUKAAAACM"]
[Thu Jul 30 11:41:04.004299 2026] [security2:error] [pid 2932610:tid 2932610] [client 47.254.155.177:28585] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqQAIaTfjY8lrCCKKUKAAAACM"]
[Thu Jul 30 11:41:04.004554 2026] [security2:error] [pid 2932610:tid 2932610] [client 47.254.155.177:28585] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqQAIaTfjY8lrCCKKUKAAAACM"]
[Thu Jul 30 11:41:04.462365 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:04.465008 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:04.508502 2026] [access_compat:error] [pid 2932611:tid 2932611] [client 136.158.37.124:59346] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:41:04.624872 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.42:21886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:04.625495 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.42:21886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:04.760891 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.25:51760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:04.761585 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.25:51760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:05.013392 2026] [access_compat:error] [pid 2933173:tid 2933173] [client 4.232.188.49:64989] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/av.php
[Thu Jul 30 11:41:05.013750 2026] [core:error] [pid 2933173:tid 2933173] [client 4.232.188.49:64989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:05.111249 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.63:64534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:05.111871 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.63:64534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:05.426530 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.19:50400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:05.427143 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.19:50400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:05.516822 2026] [ssl:error] [pid 2934649:tid 2934649] (EAI 2)Name or service not known: [client 144.76.19.72:37878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:05.516867 2026] [ssl:error] [pid 2934649:tid 2934649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:05.585040 2026] [ssl:error] [pid 2933230:tid 2933230] (EAI 2)Name or service not known: [client 144.76.19.72:37886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:05.585082 2026] [ssl:error] [pid 2933230:tid 2933230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:06.044982 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.49:56634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:06.045612 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.49:56634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:06.145847 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.21:32972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:06.146471 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.21:32972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:06.284421 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:06.287093 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:06.335716 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.45:64230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:06.336348 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.45:64230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:06.767134 2026] [access_compat:error] [pid 2927346:tid 2927346] [client 4.232.188.49:64971] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xa.php
[Thu Jul 30 11:41:06.767485 2026] [core:error] [pid 2927346:tid 2927346] [client 4.232.188.49:64971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:07.032781 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.35:53478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:07.033394 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.35:53478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:07.338970 2026] [security2:error] [pid 2929450:tid 2929450] [client 8.216.41.95:37389] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqQ4Z3DjiMjjk_73wt_wAAABk"]
[Thu Jul 30 11:41:07.339025 2026] [security2:error] [pid 2929450:tid 2929450] [client 8.216.41.95:37389] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqQ4Z3DjiMjjk_73wt_wAAABk"]
[Thu Jul 30 11:41:07.339275 2026] [security2:error] [pid 2929450:tid 2929450] [client 8.216.41.95:37389] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqQ4Z3DjiMjjk_73wt_wAAABk"]
[Thu Jul 30 11:41:07.451096 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.43:20172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:07.451720 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.43:20172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:07.465199 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.3:54558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:07.465813 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.3:54558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:07.663138 2026] [lsapi:warn] [pid 2916525:tid 2916525] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:07.736502 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.19:50404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:07.737141 2026] [authz_core:error] [pid 2930368:tid 2930368] [client 57.141.0.19:50404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:07.886279 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.63:22120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:07.886903 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.63:22120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:08.130269 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:08.132948 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:08.460431 2026] [lsapi:warn] [pid 2929974:tid 2929974] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:08.610217 2026] [ssl:error] [pid 2927387:tid 2927387] (70014)End of file found: [client 216.73.216.199:57759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:08.638714 2026] [ssl:error] [pid 2925584:tid 2925584] (EAI 2)Name or service not known: [client 144.76.19.72:37892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:08.638736 2026] [ssl:error] [pid 2925584:tid 2925584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:08.691945 2026] [ssl:error] [pid 2933230:tid 2933230] (EAI 2)Name or service not known: [client 144.76.19.72:37896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:08.691975 2026] [ssl:error] [pid 2933230:tid 2933230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:08.830765 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.45:41418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:08.831478 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.45:41418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:08.906025 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.29:27420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:08.906655 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.29:27420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:09.003247 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.27:56300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:09.003869 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.27:56300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:09.032266 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.47:59500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:09.032883 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.47:59500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:09.468214 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.49:42594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:09.468843 2026] [authz_core:error] [pid 2925584:tid 2925584] [client 57.141.0.49:42594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:09.716931 2026] [access_compat:error] [pid 2921813:tid 2921813] [client 4.232.188.49:65007] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/media.php
[Thu Jul 30 11:41:09.717312 2026] [core:error] [pid 2921813:tid 2921813] [client 4.232.188.49:65007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:09.813815 2026] [ssl:error] [pid 2934532:tid 2934532] (70014)End of file found: [client 216.73.216.199:22634] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:10.134937 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:10.137635 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 66.249.66.33:65127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:10.363325 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.64:30344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:10.363953 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.64:30344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:10.637492 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.21:32986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:10.638131 2026] [authz_core:error] [pid 2921813:tid 2921813] [client 57.141.0.21:32986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:10.721255 2026] [ssl:error] [pid 2919947:tid 2919947] (70014)End of file found: [client 216.73.216.199:2492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:10.785581 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.30:50452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:10.786218 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.30:50452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:11.165018 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.33:32504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:11.165639 2026] [authz_core:error] [pid 2929974:tid 2929974] [client 57.141.0.33:32504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:11.618557 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.67:43208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:11.619174 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.67:43208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:11.624887 2026] [security2:error] [pid 2933238:tid 2933238] [client 8.216.41.95:59013] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqRz52QJyryPquKjjshwAAADY"]
[Thu Jul 30 11:41:11.624928 2026] [security2:error] [pid 2933238:tid 2933238] [client 8.216.41.95:59013] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqRz52QJyryPquKjjshwAAADY"]
[Thu Jul 30 11:41:11.625160 2026] [security2:error] [pid 2933238:tid 2933238] [client 8.216.41.95:59013] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqRz52QJyryPquKjjshwAAADY"]
[Thu Jul 30 11:41:11.686251 2026] [access_compat:error] [pid 2934693:tid 2934693] [client 4.232.188.49:65489] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/images.php
[Thu Jul 30 11:41:11.686618 2026] [core:error] [pid 2934693:tid 2934693] [client 4.232.188.49:65489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:11.746210 2026] [ssl:error] [pid 2925584:tid 2925584] (EAI 2)Name or service not known: [client 144.76.19.72:49860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:11.746237 2026] [ssl:error] [pid 2925584:tid 2925584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:11.799722 2026] [ssl:error] [pid 2921813:tid 2921813] (EAI 2)Name or service not known: [client 144.76.19.72:49868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:11.799752 2026] [ssl:error] [pid 2921813:tid 2921813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:11.828519 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:11.831672 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:12.176798 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.41:32990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:12.177421 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.41:32990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:12.576200 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.48:56486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:12.576827 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.48:56486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:12.887407 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.15:28866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:12.888099 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.15:28866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:13.103553 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.12:46602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:13.104176 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.12:46602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:13.291683 2026] [access_compat:error] [pid 2929315:tid 2929315] [client 4.232.188.49:65474] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/gecko.php
[Thu Jul 30 11:41:13.292021 2026] [core:error] [pid 2929315:tid 2929315] [client 4.232.188.49:65474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:13.669350 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:13.672021 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:13.852911 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.69:58108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:13.853540 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.69:58108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:13.944823 2026] [ssl:error] [pid 2934693:tid 2934693] (70014)End of file found: [client 216.73.216.199:36743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:13.953786 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.48:56488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:13.954410 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.48:56488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:14.068302 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.50:61128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:14.068923 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.50:61128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:14.308617 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.46:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:14.309285 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.46:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:14.810901 2026] [access_compat:error] [pid 2929315:tid 2929315] [client 4.232.188.49:65508] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/82.php
[Thu Jul 30 11:41:14.811281 2026] [core:error] [pid 2929315:tid 2929315] [client 4.232.188.49:65508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:14.857674 2026] [ssl:error] [pid 2934692:tid 2934692] (EAI 2)Name or service not known: [client 144.76.19.72:49872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:14.857715 2026] [ssl:error] [pid 2934692:tid 2934692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:14.915304 2026] [ssl:error] [pid 2933238:tid 2933238] (EAI 2)Name or service not known: [client 144.76.19.72:49874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:14.915335 2026] [ssl:error] [pid 2933238:tid 2933238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:15.048027 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.46:62352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:15.048661 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.46:62352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:15.152434 2026] [ssl:error] [pid 2933173:tid 2933173] (70014)End of file found: [client 216.73.216.199:8191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:15.298834 2026] [access_compat:error] [pid 2927387:tid 2927387] [client 136.158.37.124:60164] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:41:15.514266 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.13:20372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:15.514901 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.13:20372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:15.822473 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.19:64702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:15.823100 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.19:64702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:16.293973 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.56:25818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:16.294605 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.56:25818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:16.537265 2026] [access_compat:error] [pid 2933238:tid 2933238] [client 4.232.188.49:64987] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xstelth.php
[Thu Jul 30 11:41:16.537668 2026] [core:error] [pid 2933238:tid 2933238] [client 4.232.188.49:64987] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:16.648605 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.66:57352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:16.649225 2026] [authz_core:error] [pid 2927389:tid 2927389] [client 57.141.0.66:57352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:16.687770 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.52:54512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:16.688395 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.52:54512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:16.755523 2026] [core:error] [pid 2932070:tid 2932070] (13)Permission denied: [client 216.73.216.199:28399] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/red_zone
[Thu Jul 30 11:41:17.056378 2026] [core:error] [pid 2932070:tid 2932070] (13)Permission denied: [client 216.73.216.199:28399] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/store_user
[Thu Jul 30 11:41:17.125253 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.59:42334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:17.125878 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.59:42334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:17.277227 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.51:30464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:17.277847 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.51:30464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:17.360203 2026] [ssl:error] [pid 2932070:tid 2932070] (70014)End of file found: [client 216.73.216.199:28399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:17.431639 2026] [access_compat:error] [pid 2929315:tid 2929315] [client 4.232.188.49:60882] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xp.php
[Thu Jul 30 11:41:17.431998 2026] [core:error] [pid 2929315:tid 2929315] [client 4.232.188.49:60882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:17.460652 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.9:65522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:17.461326 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.9:65522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:17.505753 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:17.508474 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:17.971849 2026] [ssl:error] [pid 2921525:tid 2921525] (EAI 2)Name or service not known: [client 144.76.19.72:49882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:17.971873 2026] [ssl:error] [pid 2921525:tid 2921525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:18.026599 2026] [ssl:error] [pid 2927388:tid 2927388] (EAI 2)Name or service not known: [client 144.76.19.72:49896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:18.026628 2026] [ssl:error] [pid 2927388:tid 2927388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:18.217861 2026] [lsapi:warn] [pid 2932555:tid 2932555] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:18.260362 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.11:22302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:18.260979 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.11:22302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:18.441373 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:18.444415 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:18.489157 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.32:39294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:18.489777 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.32:39294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:18.616574 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.29:31518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:18.617199 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.29:31518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:18.868446 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.34:58816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:18.869127 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.34:58816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:18.969826 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.54:61984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:18.970484 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.54:61984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:19.149673 2026] [lsapi:warn] [pid 2929315:tid 2929315] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:19.316772 2026] [core:error] [pid 2933234:tid 2933234] [client 4.232.188.49:65510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:19.316801 2026] [core:error] [pid 2933234:tid 2933234] [client 4.232.188.49:65510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:19.614144 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.15:59004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:19.614777 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.15:59004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:19.638395 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.50:61144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:19.639061 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.50:61144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:20.390096 2026] [ssl:error] [pid 2929974:tid 2929974] (70014)End of file found: [client 216.73.216.199:30252] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:20.413768 2026] [security2:error] [pid 2921966:tid 2921966] [client 43.130.14.245:49612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchell.org"] [uri "/"] [unique_id "amsqUJGfjvE-4oqlaLgFLQAAADw"]
[Thu Jul 30 11:41:20.459712 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.1:36526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:20.460329 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.1:36526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:20.513683 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.7:53590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:20.514323 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.7:53590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:20.579444 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.40:58864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:20.580076 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.40:58864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:20.883397 2026] [ssl:error] [pid 2921525:tid 2921525] (70014)End of file found: [client 216.73.216.199:56978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:21.051850 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:21.054519 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:21.078414 2026] [ssl:error] [pid 2933230:tid 2933230] (EAI 2)Name or service not known: [client 144.76.19.72:63238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:21.078438 2026] [ssl:error] [pid 2933230:tid 2933230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:21.134556 2026] [ssl:error] [pid 2927388:tid 2927388] (EAI 2)Name or service not known: [client 144.76.19.72:63248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:21.134580 2026] [ssl:error] [pid 2927388:tid 2927388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:21.186173 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.56:54584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:21.186795 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.56:54584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:21.304861 2026] [access_compat:error] [pid 2924912:tid 2924912] [client 4.232.188.49:64984] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/adminner.php
[Thu Jul 30 11:41:21.305209 2026] [core:error] [pid 2924912:tid 2924912] [client 4.232.188.49:64984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:21.383369 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.28:31390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:21.383985 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.28:31390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:21.986763 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:21.989437 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:22.120461 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.56:54590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:22.121094 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.56:54590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:22.249404 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.35:28478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:22.250022 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.35:28478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:22.351774 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.69:63312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:22.352415 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.69:63312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:23.080139 2026] [access_compat:error] [pid 2933173:tid 2933173] [client 4.232.188.49:60874] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a.php
[Thu Jul 30 11:41:23.080474 2026] [core:error] [pid 2933173:tid 2933173] [client 4.232.188.49:60874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:23.180935 2026] [authz_core:error] [pid 2933235:tid 2933235] [client 57.141.0.36:36148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:23.181561 2026] [authz_core:error] [pid 2933235:tid 2933235] [client 57.141.0.36:36148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:23.311055 2026] [cgi:error] [pid 2930165:tid 2930165] [client 68.67.112.134:54157] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:41:23.496707 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.69:63314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:23.497327 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.69:63314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:23.518554 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.68:39846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:23.519217 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.68:39846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:24.158023 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.29:64640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:24.158661 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.29:64640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:24.162246 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.59:42354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:24.162851 2026] [authz_core:error] [pid 2919947:tid 2919947] [client 57.141.0.59:42354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:24.190676 2026] [ssl:error] [pid 2932070:tid 2932070] (EAI 2)Name or service not known: [client 144.76.19.72:63258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:24.190699 2026] [ssl:error] [pid 2932070:tid 2932070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:24.241792 2026] [ssl:error] [pid 2934692:tid 2934692] (EAI 2)Name or service not known: [client 144.76.19.72:63274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:24.241818 2026] [ssl:error] [pid 2934692:tid 2934692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:24.320185 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:24.322964 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:24.456988 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.12:52450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:24.457618 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.12:52450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:25.163950 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.60:52648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:25.164713 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.60:52648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:25.703579 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.49:49118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:25.704199 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.49:49118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:25.713552 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.21:33784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:25.714215 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.21:33784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:25.776119 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:25.778761 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:25.809817 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.55:34866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:25.810458 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.55:34866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:26.229613 2026] [access_compat:error] [pid 2933235:tid 2933235] [client 136.158.37.124:61101] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:41:26.436968 2026] [ssl:error] [pid 2932611:tid 2932611] (70014)End of file found: [client 216.73.216.199:30405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:26.701242 2026] [access_compat:error] [pid 2933230:tid 2933230] [client 45.158.164.139:49548] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:41:27.019425 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.6:43122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:27.020110 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.6:43122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:27.114145 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.61:60080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:27.114771 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.61:60080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:27.117691 2026] [ssl:error] [pid 2935492:tid 2935492] (70014)End of file found: [client 216.73.216.199:7962] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:27.183960 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.1:21220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:27.184590 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.1:21220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:27.298865 2026] [ssl:error] [pid 2934692:tid 2934692] (EAI 2)Name or service not known: [client 144.76.19.72:63288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:27.298894 2026] [ssl:error] [pid 2934692:tid 2934692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:27.344682 2026] [core:error] [pid 2932555:tid 2932555] (13)Permission denied: [client 216.73.216.199:51290] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/trace
[Thu Jul 30 11:41:27.353557 2026] [ssl:error] [pid 2933230:tid 2933230] (EAI 2)Name or service not known: [client 144.76.19.72:63292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:27.353578 2026] [ssl:error] [pid 2933230:tid 2933230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:27.358591 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:27.361368 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:27.470367 2026] [lsapi:warn] [pid 2927305:tid 2927305] [client 45.158.164.139:49552] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:41:27.470408 2026] [lsapi:warn] [pid 2927305:tid 2927305] [client 45.158.164.139:49552] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:41:27.472234 2026] [lsapi:warn] [pid 2921525:tid 2921525] [client 89.197.16.98:36000] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:41:27.472270 2026] [lsapi:warn] [pid 2921525:tid 2921525] [client 89.197.16.98:36000] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:41:27.795344 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.51:46764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:27.796012 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.51:46764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:27.823735 2026] [access_compat:error] [pid 2921525:tid 2921525] [client 4.232.188.49:65493] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/k.php
[Thu Jul 30 11:41:27.824060 2026] [core:error] [pid 2921525:tid 2921525] [client 4.232.188.49:65493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:28.234269 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.31:35418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:28.234911 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.31:35418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:28.247681 2026] [ssl:error] [pid 2932555:tid 2932555] (70014)End of file found: [client 216.73.216.199:51290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:28.389782 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.19:36228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:28.390429 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.19:36228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:28.484127 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.4:62848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:28.484769 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.4:62848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:28.644649 2026] [security2:error] [pid 2933230:tid 2933230] [client 114.119.158.38:62021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,17/request_format~html"] [unique_id "amsqWNMkq7jZs__UVrWctgAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,15/request_format%7Ehtml
[Thu Jul 30 11:41:28.778610 2026] [authz_core:error] [pid 2934693:tid 2934693] [client 57.141.0.65:65108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:28.779227 2026] [authz_core:error] [pid 2934693:tid 2934693] [client 57.141.0.65:65108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:28.854237 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.38:30682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:28.854928 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.38:30682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:28.964123 2026] [lsapi:warn] [pid 2935539:tid 2935539] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:29.904928 2026] [access_compat:error] [pid 2935574:tid 2935574] [client 4.232.188.49:65011] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/222.php
[Thu Jul 30 11:41:29.905392 2026] [core:error] [pid 2935574:tid 2935574] [client 4.232.188.49:65011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:29.974603 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.41:58676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:29.975328 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.41:58676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:30.092771 2026] [authz_core:error] [pid 2935577:tid 2935577] [client 57.141.0.69:28950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:30.093422 2026] [authz_core:error] [pid 2935577:tid 2935577] [client 57.141.0.69:28950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:30.262976 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.48:46586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:30.263635 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.48:46586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:30.271179 2026] [security2:error] [pid 2935580:tid 2935580] [client 114.119.158.38:62037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,17/request_format~html"] [unique_id "amsqWo_hcK_KzdHVIKNungAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,15/request_format%7Ehtml
[Thu Jul 30 11:41:30.411521 2026] [ssl:error] [pid 2933230:tid 2933230] (EAI 2)Name or service not known: [client 144.76.19.72:34798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:30.411559 2026] [ssl:error] [pid 2933230:tid 2933230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:30.467220 2026] [ssl:error] [pid 2930165:tid 2930165] (EAI 2)Name or service not known: [client 144.76.19.72:34810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:30.467244 2026] [ssl:error] [pid 2930165:tid 2930165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:30.596352 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.20:53040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:30.596969 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.20:53040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:30.670549 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.17:28298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:30.671176 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.17:28298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:30.778267 2026] [lsapi:warn] [pid 2916525:tid 2916525] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:30.812276 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:30.814990 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:31.309933 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.71:35174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:31.310577 2026] [authz_core:error] [pid 2933230:tid 2933230] [client 57.141.0.71:35174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:31.588999 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.65:65116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:31.589638 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.65:65116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:31.595189 2026] [access_compat:error] [pid 2927346:tid 2927346] [client 4.232.188.49:65486] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mac.php
[Thu Jul 30 11:41:31.595553 2026] [core:error] [pid 2927346:tid 2927346] [client 4.232.188.49:65486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:31.864776 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.58:52064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:31.865394 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.58:52064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:32.011346 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.29:41172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:32.011967 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.29:41172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:32.393432 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:32.396110 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:32.754156 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.19:57246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:32.755294 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.19:57246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:32.771167 2026] [core:error] [pid 2916525:tid 2916525] [client 4.232.188.49:65488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:32.771186 2026] [core:error] [pid 2916525:tid 2916525] [client 4.232.188.49:65488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:33.058828 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.13:46920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:33.059453 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.13:46920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:33.067838 2026] [ssl:error] [pid 2935573:tid 2935573] (70014)End of file found: [client 216.73.216.199:12361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:33.313000 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.51:46778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:33.313633 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.51:46778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:33.318751 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:33.321504 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:33.335948 2026] [core:error] [pid 2903828:tid 2903828] [client 4.232.188.49:64990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:33.335970 2026] [core:error] [pid 2903828:tid 2903828] [client 4.232.188.49:64990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:33.522086 2026] [ssl:error] [pid 2921966:tid 2921966] (EAI 2)Name or service not known: [client 144.76.19.72:34822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:33.522114 2026] [ssl:error] [pid 2921966:tid 2921966] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:33.575311 2026] [ssl:error] [pid 2935579:tid 2935579] (EAI 2)Name or service not known: [client 144.76.19.72:34826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:33.575372 2026] [ssl:error] [pid 2935579:tid 2935579] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:33.834183 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.68:40674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:33.834815 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.68:40674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:33.974574 2026] [ssl:error] [pid 2935539:tid 2935539] (70014)End of file found: [client 216.73.216.199:24174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:34.155616 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.12:26298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:34.156244 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.12:26298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:34.245574 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:34.248303 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:34.506631 2026] [access_compat:error] [pid 2929450:tid 2929450] [client 4.232.188.49:64963] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ops.php
[Thu Jul 30 11:41:34.506983 2026] [core:error] [pid 2929450:tid 2929450] [client 4.232.188.49:64963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:34.569984 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.39:28622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:34.570621 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.39:28622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:34.613976 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.13:46930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:34.614604 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.13:46930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:34.957258 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.20:53052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:34.957880 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.20:53052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:35.189751 2026] [core:error] [pid 2935491:tid 2935491] (13)Permission denied: [client 216.73.216.199:46451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/store_user
[Thu Jul 30 11:41:35.402437 2026] [access_compat:error] [pid 2927388:tid 2927388] [client 4.232.188.49:65512] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/8.php
[Thu Jul 30 11:41:35.402803 2026] [core:error] [pid 2927388:tid 2927388] [client 4.232.188.49:65512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:35.444767 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.63:30278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:35.445403 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.63:30278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:35.615223 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.3:54776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:35.615849 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.3:54776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:35.951241 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:35.953819 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:36.347297 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.48:46610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:36.347919 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.48:46610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:36.397576 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.41:47466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:36.398657 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.41:47466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:36.408974 2026] [security2:error] [pid 2921966:tid 2921966] [client 85.208.96.199:25738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/wastewater-grade-4-practice-test"] [unique_id "amsqYJGfjvE-4oqlaLgFTwAAADw"]
[Thu Jul 30 11:41:36.646297 2026] [ssl:error] [pid 2933238:tid 2933238] (EAI 2)Name or service not known: [client 144.76.19.72:34836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:36.646334 2026] [ssl:error] [pid 2933238:tid 2933238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:36.698734 2026] [ssl:error] [pid 2927305:tid 2927305] (EAI 2)Name or service not known: [client 144.76.19.72:34844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:36.698757 2026] [ssl:error] [pid 2927305:tid 2927305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:36.710357 2026] [ssl:error] [pid 2932069:tid 2932069] (70014)End of file found: [client 216.73.216.199:13591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:36.980043 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.51:28928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:36.980684 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.51:28928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:36.991530 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.61:56402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:36.992146 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.61:56402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:37.070212 2026] [access_compat:error] [pid 2935538:tid 2935538] [client 136.158.37.124:61982] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:41:37.288600 2026] [authz_core:error] [pid 2935540:tid 2935540] [client 57.141.0.14:23904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:37.289224 2026] [authz_core:error] [pid 2935540:tid 2935540] [client 57.141.0.14:23904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:37.370503 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.23:53348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:37.371141 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.23:53348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:37.507940 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.69:28958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:37.508569 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.69:28958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:37.616317 2026] [core:error] [pid 2933238:tid 2933238] (13)Permission denied: [client 216.73.216.199:11511] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/shrink
[Thu Jul 30 11:41:37.715666 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:37.718384 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:37.919645 2026] [core:error] [pid 2933238:tid 2933238] (13)Permission denied: [client 216.73.216.199:11511] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS0/uartclk
[Thu Jul 30 11:41:38.150815 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.65:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:38.151437 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.65:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:38.820698 2026] [ssl:error] [pid 2933238:tid 2933238] (70014)End of file found: [client 216.73.216.199:11511] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:38.866237 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.4:35950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:38.866855 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.4:35950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:39.035541 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.6:50376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:39.036174 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.6:50376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:39.345132 2026] [access_compat:error] [pid 2924912:tid 2924912] [client 4.232.188.49:65008] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/FWAZ.php
[Thu Jul 30 11:41:39.345478 2026] [core:error] [pid 2924912:tid 2924912] [client 4.232.188.49:65008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:39.404162 2026] [lsapi:warn] [pid 2933076:tid 2933076] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:39.416809 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.17:28330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:39.417432 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.17:28330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:39.508517 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.48:63474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:39.509137 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.48:63474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:39.709529 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.53:42208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:39.710223 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.53:42208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:39.755223 2026] [ssl:error] [pid 2927388:tid 2927388] (EAI 2)Name or service not known: [client 144.76.19.72:24490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:39.755251 2026] [ssl:error] [pid 2927388:tid 2927388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:39.807611 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 66.249.66.33:58180] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:39.810276 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 66.249.66.33:58180] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:39.811182 2026] [ssl:error] [pid 2935539:tid 2935539] (EAI 2)Name or service not known: [client 144.76.19.72:24506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:39.811210 2026] [ssl:error] [pid 2935539:tid 2935539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:39.845553 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:39.848202 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:40.035816 2026] [ssl:error] [pid 2933233:tid 2933233] (70014)End of file found: [client 216.73.216.199:26086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:40.323395 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.41:47474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:40.324016 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.41:47474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:40.525987 2026] [lsapi:warn] [pid 2935576:tid 2935576] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:40.776920 2026] [authz_core:error] [pid 2935540:tid 2935540] [client 57.141.0.51:28934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:40.777556 2026] [authz_core:error] [pid 2935540:tid 2935540] [client 57.141.0.51:28934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:40.871963 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.62:23666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:40.872595 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.62:23666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:41.396838 2026] [authz_core:error] [pid 2935491:tid 2935491] [client 57.141.0.27:22882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:41.397462 2026] [authz_core:error] [pid 2935491:tid 2935491] [client 57.141.0.27:22882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:41.499204 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.37:51200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:41.499829 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.37:51200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:41.659035 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:41.661694 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:41.856624 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.49:52008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:41.857241 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.49:52008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:42.141545 2026] [core:error] [pid 2933076:tid 2933076] (13)Permission denied: [client 216.73.216.199:40939] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS0/uartclk
[Thu Jul 30 11:41:42.384734 2026] [security2:error] [pid 2927305:tid 2927305] [client 51.68.111.242:17051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "stopfordsackville.com"] [uri "/robots.txt"] [unique_id "amsqZkqCOb_eUkKaQ1-hswAAAAM"]
[Thu Jul 30 11:41:42.385310 2026] [core:error] [pid 2927305:tid 2927305] [client 51.68.111.242:17051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:42.489691 2026] [access_compat:error] [pid 2935491:tid 2935491] [client 4.232.188.49:64997] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/biufile.php
[Thu Jul 30 11:41:42.490038 2026] [core:error] [pid 2935491:tid 2935491] [client 4.232.188.49:64997] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:42.744604 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.20:44620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:42.745226 2026] [authz_core:error] [pid 2927388:tid 2927388] [client 57.141.0.20:44620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:42.868584 2026] [ssl:error] [pid 2935538:tid 2935538] (EAI 2)Name or service not known: [client 144.76.19.72:24516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:42.868626 2026] [ssl:error] [pid 2935538:tid 2935538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:42.924888 2026] [ssl:error] [pid 2935491:tid 2935491] (EAI 2)Name or service not known: [client 144.76.19.72:24524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:42.924919 2026] [ssl:error] [pid 2935491:tid 2935491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:43.009413 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.52:55420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:43.010037 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.52:55420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:43.029097 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.71:28548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:43.029720 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.71:28548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:43.264299 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:43.267023 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:43.345163 2026] [ssl:error] [pid 2933076:tid 2933076] (70014)End of file found: [client 216.73.216.199:40939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:43.532458 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.25:53712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:43.533124 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.25:53712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:43.565470 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:43.568210 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:43.884140 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.48:63494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:43.884754 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.48:63494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:44.050083 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.2:57628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:44.050703 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.2:57628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:44.119586 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.51:28948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:44.120213 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.51:28948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:44.837352 2026] [access_compat:error] [pid 2929199:tid 2929199] [client 4.232.188.49:60867] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/coffexium.php
[Thu Jul 30 11:41:44.837728 2026] [core:error] [pid 2929199:tid 2929199] [client 4.232.188.49:60867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:44.975945 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.1:36792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:44.976581 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.1:36792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:45.345080 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.18:52806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:45.345704 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.18:52806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:45.659796 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:45.662718 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:45.728348 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.69:27250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:45.728967 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.69:27250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:45.894407 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.58:45714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:45.895019 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.58:45714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:45.923937 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.65:35686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:45.924567 2026] [authz_core:error] [pid 2924912:tid 2924912] [client 57.141.0.65:35686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:45.976882 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:24530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:45.976930 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:46.029694 2026] [ssl:error] [pid 2927167:tid 2927167] (EAI 2)Name or service not known: [client 144.76.19.72:24538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:46.029724 2026] [ssl:error] [pid 2927167:tid 2927167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:46.172234 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.60:43808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:46.172856 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.60:43808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:46.620526 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.28:58962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:46.621157 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.28:58962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:47.216822 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.67:23230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:47.217497 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.67:23230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:47.447272 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:47.449940 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:47.543710 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.53:48198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:47.544382 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.53:48198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:47.833401 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.25:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:47.834064 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.25:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:47.934866 2026] [access_compat:error] [pid 2929974:tid 2929974] [client 4.232.188.49:64967] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/simple.php
[Thu Jul 30 11:41:47.935243 2026] [core:error] [pid 2929974:tid 2929974] [client 4.232.188.49:64967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:48.022045 2026] [access_compat:error] [pid 2935538:tid 2935538] [client 136.158.37.124:62991] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:41:48.169033 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.15:47936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:48.169671 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.15:47936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:48.535936 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.16:26646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:48.536578 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.16:26646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:48.601521 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.62:23678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:48.602153 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.62:23678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:48.799979 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.60:43810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:48.800605 2026] [authz_core:error] [pid 2935580:tid 2935580] [client 57.141.0.60:43810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:48.880265 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.18:52818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:48.880883 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.18:52818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:49.045839 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:49.048755 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:49.084199 2026] [ssl:error] [pid 2929974:tid 2929974] (EAI 2)Name or service not known: [client 144.76.19.72:24542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:49.084226 2026] [ssl:error] [pid 2929974:tid 2929974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:49.137578 2026] [ssl:error] [pid 2933076:tid 2933076] (EAI 2)Name or service not known: [client 144.76.19.72:24546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:49.137606 2026] [ssl:error] [pid 2933076:tid 2933076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:49.467747 2026] [access_compat:error] [pid 2927167:tid 2927167] [client 4.232.188.49:65475] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fpwch.php
[Thu Jul 30 11:41:49.468110 2026] [core:error] [pid 2927167:tid 2927167] [client 4.232.188.49:65475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:49.468813 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.37:51204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:49.469475 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.37:51204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:49.684351 2026] [core:error] [pid 2916525:tid 2916525] (13)Permission denied: [client 216.73.216.199:9161] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/kvm_intel/uevent
[Thu Jul 30 11:41:49.701828 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.55:26912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:49.702451 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.55:26912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:50.105172 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.69:32088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:50.105787 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.69:32088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:50.337619 2026] [lsapi:warn] [pid 2934532:tid 2934532] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:50.568817 2026] [access_compat:error] [pid 2932069:tid 2932069] [client 4.232.188.49:65005] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/dex.php
[Thu Jul 30 11:41:50.569179 2026] [core:error] [pid 2932069:tid 2932069] [client 4.232.188.49:65005] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:50.638221 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:50.640891 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:50.978719 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.46:49456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:50.979349 2026] [authz_core:error] [pid 2933173:tid 2933173] [client 57.141.0.46:49456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:51.171370 2026] [lsapi:warn] [pid 2933237:tid 2933237] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:41:51.532375 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.8:61466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:51.532999 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.8:61466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:51.681328 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.10:21414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:51.682016 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.10:21414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:52.019820 2026] [access_compat:error] [pid 2935540:tid 2935540] [client 4.232.188.49:65483] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/1.php
[Thu Jul 30 11:41:52.020185 2026] [core:error] [pid 2935540:tid 2935540] [client 4.232.188.49:65483] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:52.195437 2026] [ssl:error] [pid 2933173:tid 2933173] (EAI 2)Name or service not known: [client 144.76.19.72:45898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:52.195469 2026] [ssl:error] [pid 2933173:tid 2933173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:52.250583 2026] [ssl:error] [pid 2927167:tid 2927167] (EAI 2)Name or service not known: [client 144.76.19.72:45908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:52.250617 2026] [ssl:error] [pid 2927167:tid 2927167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:52.366541 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.67:22942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:52.367212 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.67:22942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:52.393553 2026] [ssl:error] [pid 2916525:tid 2916525] (70014)End of file found: [client 216.73.216.199:9161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:52.463201 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.16:26654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:52.463826 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.16:26654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:52.486118 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:52.488779 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:52.910817 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.23:55990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:52.911480 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.23:55990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:53.181403 2026] [ssl:error] [pid 2921966:tid 2921966] (70014)End of file found: [client 216.73.216.199:18224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:53.230493 2026] [core:error] [pid 2932610:tid 2932610] [client 4.232.188.49:64986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:53.230526 2026] [core:error] [pid 2932610:tid 2932610] [client 4.232.188.49:64986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:53.443633 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.61:30430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:53.444240 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.61:30430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:53.569341 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.4:53792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:53.569995 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.4:53792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:53.589553 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.32:26322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:53.590181 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.32:26322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:53.911051 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.19:21054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:53.911736 2026] [authz_core:error] [pid 2927167:tid 2927167] [client 57.141.0.19:21054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:54.137753 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.2:54466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:54.138375 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.2:54466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:54.382767 2026] [access_compat:error] [pid 2935572:tid 2935572] [client 4.232.188.49:64978] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/config.json.php
[Thu Jul 30 11:41:54.383121 2026] [core:error] [pid 2935572:tid 2935572] [client 4.232.188.49:64978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:54.571828 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.12:22636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:54.572456 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.12:22636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:54.646302 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.23:55996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:54.646926 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.23:55996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:55.141479 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.67:22956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:55.142111 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.67:22956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:55.246749 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.20:51988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:55.247365 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.20:51988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:55.309489 2026] [ssl:error] [pid 2932069:tid 2932069] (EAI 2)Name or service not known: [client 144.76.19.72:45924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:55.309527 2026] [ssl:error] [pid 2932069:tid 2932069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:55.362752 2026] [ssl:error] [pid 2932070:tid 2932070] (EAI 2)Name or service not known: [client 144.76.19.72:45928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:55.362799 2026] [ssl:error] [pid 2932070:tid 2932070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:55.448859 2026] [access_compat:error] [pid 2932611:tid 2932611] [client 4.232.188.49:60864] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/k2.php
[Thu Jul 30 11:41:55.449217 2026] [core:error] [pid 2932611:tid 2932611] [client 4.232.188.49:60864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:55.455319 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.7:28586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:55.455933 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.7:28586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:55.626214 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:55.628870 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:55.971250 2026] [ssl:error] [pid 2930165:tid 2930165] (70014)End of file found: [client 216.73.216.199:3885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:56.320391 2026] [cgi:error] [pid 2929450:tid 2929450] [client 66.249.70.5:40373] AH02812: stderr from /home/pstudioc/public_html/yorkguitarworkshop.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:41:56.367427 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.38:49806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:56.368051 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.38:49806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:56.445858 2026] [access_compat:error] [pid 2932611:tid 2932611] [client 4.232.188.49:65495] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/raw.php
[Thu Jul 30 11:41:56.446237 2026] [core:error] [pid 2932611:tid 2932611] [client 4.232.188.49:65495] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:56.457853 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.63:23000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:56.458525 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.63:23000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:56.786694 2026] [security2:error] [pid 2932555:tid 2932555] [client 43.164.196.47:49746] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amsqdJmlbL0qMRjVn8afUQAAAA8"]
[Thu Jul 30 11:41:56.933120 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.67:22972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:56.933735 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.67:22972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:57.102715 2026] [access_compat:error] [pid 2933233:tid 2933233] [client 4.232.188.49:65000] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp.php
[Thu Jul 30 11:41:57.103060 2026] [core:error] [pid 2933233:tid 2933233] [client 4.232.188.49:65000] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:57.224132 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.22:57308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:57.224758 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.22:57308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:57.283767 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:57.286437 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:57.476676 2026] [ssl:error] [pid 2921808:tid 2921808] (70014)End of file found: [client 216.73.216.199:34707] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:57.526857 2026] [access_compat:error] [pid 2933234:tid 2933234] [client 4.232.188.49:64961] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fffm.php
[Thu Jul 30 11:41:57.527238 2026] [core:error] [pid 2933234:tid 2933234] [client 4.232.188.49:64961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:57.617267 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.14:21256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:57.617891 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.14:21256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:57.964648 2026] [ssl:error] [pid 2932611:tid 2932611] (70014)End of file found: [client 216.73.216.199:37373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:41:58.006170 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.35:60862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:58.006787 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.35:60862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:58.042034 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.51:52284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:58.042670 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.51:52284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:58.044538 2026] [access_compat:error] [pid 2935574:tid 2935574] [client 4.232.188.49:65472] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/111.php
[Thu Jul 30 11:41:58.044860 2026] [core:error] [pid 2935574:tid 2935574] [client 4.232.188.49:65472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:58.369086 2026] [core:error] [pid 2936546:tid 2936546] [client 4.232.188.49:64966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:58.369134 2026] [core:error] [pid 2936546:tid 2936546] [client 4.232.188.49:64966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:58.450131 2026] [ssl:error] [pid 2935574:tid 2935574] (EAI 2)Name or service not known: [client 144.76.19.72:45932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:58.450164 2026] [ssl:error] [pid 2935574:tid 2935574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:58.503639 2026] [ssl:error] [pid 2927387:tid 2927387] (EAI 2)Name or service not known: [client 144.76.19.72:45948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:41:58.503666 2026] [ssl:error] [pid 2927387:tid 2927387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:41:58.841240 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.17:28142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:58.841866 2026] [authz_core:error] [pid 2932555:tid 2932555] [client 57.141.0.17:28142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:58.921158 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:58.923825 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:59.012728 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.54:48040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:59.013349 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.54:48040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:59.072590 2026] [access_compat:error] [pid 2927386:tid 2927386] [client 4.232.188.49:60875] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws.php
[Thu Jul 30 11:41:59.072962 2026] [core:error] [pid 2927386:tid 2927386] [client 4.232.188.49:60875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:59.074211 2026] [access_compat:error] [pid 2933076:tid 2933076] [client 136.158.37.124:64026] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:41:59.432696 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.10:21878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:59.433327 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.10:21878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:59.721562 2026] [access_compat:error] [pid 2927386:tid 2927386] [client 4.232.188.49:60880] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/coffee.php
[Thu Jul 30 11:41:59.721900 2026] [core:error] [pid 2927386:tid 2927386] [client 4.232.188.49:60880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:41:59.756566 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.7:28602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:59.757185 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.7:28602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:41:59.860606 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:41:59.863301 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:41:59.938215 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.70:43470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:41:59.938871 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.70:43470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:00.481044 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.40:61190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:00.481687 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.40:61190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:00.506004 2026] [core:error] [pid 2929199:tid 2929199] [client 4.232.188.49:64982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:00.506028 2026] [core:error] [pid 2929199:tid 2929199] [client 4.232.188.49:64982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:00.589581 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.5:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:00.590211 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.5:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:00.667738 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.27:36560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:00.668385 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.27:36560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:00.946390 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.66:29470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:00.947014 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.66:29470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:01.001095 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.11:31240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:01.001717 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.11:31240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:01.057259 2026] [lsapi:warn] [pid 2933238:tid 2933238] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:01.130261 2026] [core:error] [pid 2936627:tid 2936627] [client 4.232.188.49:65476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:01.130309 2026] [core:error] [pid 2936627:tid 2936627] [client 4.232.188.49:65476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:01.214279 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.40:61196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:01.214898 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.40:61196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:01.560910 2026] [ssl:error] [pid 2927386:tid 2927386] (EAI 2)Name or service not known: [client 144.76.19.72:19398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:01.560945 2026] [ssl:error] [pid 2927386:tid 2927386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:01.614018 2026] [ssl:error] [pid 2935539:tid 2935539] (EAI 2)Name or service not known: [client 144.76.19.72:19406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:01.614050 2026] [ssl:error] [pid 2935539:tid 2935539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:01.686716 2026] [ssl:error] [pid 2934692:tid 2934692] (70014)End of file found: [client 216.73.216.199:19329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:01.705440 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:01.708094 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:01.848285 2026] [lsapi:warn] [pid 2932070:tid 2932070] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:02.033016 2026] [core:error] [pid 2929450:tid 2929450] [client 4.232.188.49:64973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:02.033045 2026] [core:error] [pid 2929450:tid 2929450] [client 4.232.188.49:64973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:02.106820 2026] [security2:error] [pid 2921966:tid 2921966] [client 43.133.220.37:54418] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amsqepGfjvE-4oqlaLgFXAAAADw"]
[Thu Jul 30 11:42:02.418670 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.30:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:02.419297 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.30:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:02.705753 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.50:59354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:02.706578 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.50:59354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:02.826360 2026] [core:error] [pid 2921966:tid 2921966] [client 4.232.188.49:65009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:02.826388 2026] [core:error] [pid 2921966:tid 2921966] [client 4.232.188.49:65009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:03.339874 2026] [core:error] [pid 2921808:tid 2921808] [client 57.141.0.10:21882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:03.339902 2026] [core:error] [pid 2921808:tid 2921808] [client 57.141.0.10:21882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:03.418828 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.50:59360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:03.419452 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.50:59360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:03.498814 2026] [ssl:error] [pid 2929450:tid 2929450] (70014)End of file found: [client 216.73.216.199:4360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:03.546629 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:03.549462 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:03.678658 2026] [access_compat:error] [pid 2932070:tid 2932070] [client 4.232.188.49:65004] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/inputs.php
[Thu Jul 30 11:42:03.679006 2026] [core:error] [pid 2932070:tid 2932070] [client 4.232.188.49:65004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:03.707505 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.68:56698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:03.708140 2026] [authz_core:error] [pid 2921966:tid 2921966] [client 57.141.0.68:56698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:03.910423 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.15:22618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:03.911049 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.15:22618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:04.000440 2026] [ssl:error] [pid 2932069:tid 2932069] (70014)End of file found: [client 216.73.216.199:41914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:04.377779 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.24:43350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:04.378401 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.24:43350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:04.643006 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.62:28462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:04.643647 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.62:28462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:04.649040 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.7:28606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:04.649673 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.7:28606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:04.657916 2026] [access_compat:error] [pid 2921966:tid 2921966] [client 4.232.188.49:65006] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/inputs.php
[Thu Jul 30 11:42:04.658279 2026] [core:error] [pid 2921966:tid 2921966] [client 4.232.188.49:65006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:04.672728 2026] [ssl:error] [pid 2935572:tid 2935572] (EAI 2)Name or service not known: [client 144.76.19.72:19422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:04.672758 2026] [ssl:error] [pid 2935572:tid 2935572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:04.731371 2026] [ssl:error] [pid 2932611:tid 2932611] (EAI 2)Name or service not known: [client 144.76.19.72:19424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:04.731401 2026] [ssl:error] [pid 2932611:tid 2932611] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:05.141188 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.66:50708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:05.141833 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.66:50708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:05.366229 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.44:49850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:05.366853 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.44:49850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:05.390740 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:05.393542 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:05.472629 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.26:58982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:05.473250 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.26:58982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:06.005384 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.14:43406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:06.006011 2026] [authz_core:error] [pid 2935538:tid 2935538] [client 57.141.0.14:43406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:06.657975 2026] [access_compat:error] [pid 2927387:tid 2927387] [client 4.232.188.49:65015] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/adminfuns.php
[Thu Jul 30 11:42:06.658358 2026] [core:error] [pid 2927387:tid 2927387] [client 4.232.188.49:65015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:06.660556 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.33:64932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:06.661185 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.33:64932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:07.214359 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.29:54346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:07.214982 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.29:54346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:07.244425 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:07.247096 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:07.338358 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:28546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:07.338979 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:28546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:07.594029 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.35:21734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:07.594690 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.35:21734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:07.681727 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.24:54614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:07.682356 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.24:54614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:07.801575 2026] [ssl:error] [pid 2935538:tid 2935538] (EAI 2)Name or service not known: [client 144.76.19.72:19440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:07.801614 2026] [ssl:error] [pid 2935538:tid 2935538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:07.854705 2026] [ssl:error] [pid 2933235:tid 2933235] (EAI 2)Name or service not known: [client 144.76.19.72:19450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:07.854743 2026] [ssl:error] [pid 2933235:tid 2933235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:08.338029 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:08.340691 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:08.619499 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.39:43722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:08.620155 2026] [authz_core:error] [pid 2933125:tid 2933125] [client 57.141.0.39:43722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:09.080683 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:09.083349 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:09.130498 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.17:36156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:09.131184 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.17:36156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:09.260524 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.63:47452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:09.261175 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.63:47452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:09.339073 2026] [security2:error] [pid 2936546:tid 2936546] [client 74.7.227.133:36232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.junglejacks.co.uk"] [uri "/sitemap_index.xml"] [unique_id "amsqgQ9fXMRkI1QD_XxowQAAAAA"]
[Thu Jul 30 11:42:09.385460 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.18:45460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:09.386145 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.18:45460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:09.549431 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.35:21256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:09.550083 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.35:21256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:09.819276 2026] [core:error] [pid 2935537:tid 2935537] (13)Permission denied: [client 216.73.216.199:48507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/uartclk
[Thu Jul 30 11:42:09.823373 2026] [access_compat:error] [pid 2927386:tid 2927386] [client 136.158.37.124:64855] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:42:09.915453 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.36:49748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:09.916097 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.36:49748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:10.066336 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.47:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:10.066966 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.47:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:10.120246 2026] [ssl:error] [pid 2935537:tid 2935537] (70014)End of file found: [client 216.73.216.199:48507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:10.825347 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.50:44960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:10.825965 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.50:44960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:10.930469 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:10.930734 2026] [ssl:error] [pid 2933233:tid 2933233] (EAI 2)Name or service not known: [client 144.76.19.72:18404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:10.930773 2026] [ssl:error] [pid 2933233:tid 2933233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:10.933175 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:10.984371 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:18408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:10.984406 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:11.039820 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.31:28522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:11.040448 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.31:28522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:11.090771 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.58:56964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:11.091444 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.58:56964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:11.816039 2026] [lsapi:warn] [pid 2927387:tid 2927387] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:12.046765 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.16:53030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:12.047393 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.16:53030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:12.324488 2026] [access_compat:error] [pid 2929315:tid 2929315] [client 4.232.188.49:65001] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/404.php
[Thu Jul 30 11:42:12.324872 2026] [core:error] [pid 2929315:tid 2929315] [client 4.232.188.49:65001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:12.488485 2026] [lsapi:warn] [pid 2933233:tid 2933233] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:12.572990 2026] [security2:error] [pid 2932069:tid 2932069] [client 114.119.155.210:48493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/pages/36/Work/Collage/Slow/page:50"] [unique_id "amsqhCoLFTPc0sVOLa1V_wAAAB8"], referer: http://jonathanmeyerart.co.uk/section/36/Work/Collage
[Thu Jul 30 11:42:12.704263 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.59:45762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:12.704886 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.59:45762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:12.722033 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.46:41780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:12.722718 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.46:41780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:12.777543 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:12.780370 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:13.101340 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.58:41978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:13.101957 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.58:41978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:13.170740 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.66:21178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:13.171371 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.66:21178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:13.174850 2026] [ssl:error] [pid 2933237:tid 2933237] (70014)End of file found: [client 216.73.216.199:47958] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:13.607893 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.11:34224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:13.608574 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.11:34224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:13.714193 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.52:27344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:13.714837 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.52:27344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:14.036244 2026] [ssl:error] [pid 2932610:tid 2932610] (EAI 2)Name or service not known: [client 144.76.19.72:18422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:14.036278 2026] [ssl:error] [pid 2932610:tid 2932610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:14.048897 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.61:21830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:14.049525 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.61:21830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:14.096458 2026] [ssl:error] [pid 2929315:tid 2929315] (70014)End of file found: [client 216.73.216.199:56801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:14.118255 2026] [ssl:error] [pid 2932069:tid 2932069] (EAI 2)Name or service not known: [client 144.76.19.72:18430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:14.118277 2026] [ssl:error] [pid 2932069:tid 2932069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:14.650869 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:14.652687 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.3:29770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:14.653304 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.3:29770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:14.653701 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:14.823264 2026] [authz_core:error] [pid 2936627:tid 2936627] [client 57.141.0.38:57332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:14.823989 2026] [authz_core:error] [pid 2936627:tid 2936627] [client 57.141.0.38:57332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:15.314497 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.33:22884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:15.315134 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.33:22884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:16.074184 2026] [access_compat:error] [pid 2935492:tid 2935492] [client 2.189.5.142:38284] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:42:16.090752 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.9:62846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:16.091394 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.9:62846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:16.199913 2026] [ssl:error] [pid 2933233:tid 2933233] (70014)End of file found: [client 216.73.216.199:55275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:16.253120 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.66:21192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:16.253741 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.66:21192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:16.324184 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.59:41498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:16.324807 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.59:41498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:16.412393 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.53:63870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:16.413015 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.53:63870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:16.466404 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:16.469240 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:16.956808 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.30:61224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:16.957432 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.30:61224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:17.171449 2026] [ssl:error] [pid 2935492:tid 2935492] (EAI 2)Name or service not known: [client 144.76.19.72:18444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:17.171493 2026] [ssl:error] [pid 2935492:tid 2935492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:17.227666 2026] [ssl:error] [pid 2932610:tid 2932610] (EAI 2)Name or service not known: [client 144.76.19.72:18460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:17.227693 2026] [ssl:error] [pid 2932610:tid 2932610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:17.257310 2026] [core:error] [pid 2936627:tid 2936627] [client 66.249.64.170:36580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:17.257335 2026] [core:error] [pid 2936627:tid 2936627] [client 66.249.64.170:36580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:17.290019 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.9:62862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:17.290655 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.9:62862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:17.404243 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.59:41512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:17.404861 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.59:41512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:17.453803 2026] [core:error] [pid 2933124:tid 2933124] [client 66.249.66.8:37844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:17.453834 2026] [core:error] [pid 2933124:tid 2933124] [client 66.249.66.8:37844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:17.903698 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:17.906498 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 66.249.66.33:53475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:18.095063 2026] [authz_core:error] [pid 2936546:tid 2936546] [client 57.141.0.26:51838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:18.095696 2026] [authz_core:error] [pid 2936546:tid 2936546] [client 57.141.0.26:51838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:18.792044 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.21:28640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:18.792676 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.21:28640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:18.906055 2026] [authz_core:error] [pid 2936546:tid 2936546] [client 57.141.0.43:32934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:18.906680 2026] [authz_core:error] [pid 2936546:tid 2936546] [client 57.141.0.43:32934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:18.982286 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.39:42726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:18.982897 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.39:42726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:19.274905 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.39:42730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:19.275561 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.39:42730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:19.653026 2026] [security2:error] [pid 2929450:tid 2929450] [client 43.159.128.237:50302] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "amsqi4Z3DjiMjjk_73wuFgAAABk"]
[Thu Jul 30 11:42:19.783049 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.16:42930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:19.783675 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.16:42930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:19.837882 2026] [core:error] [pid 2935574:tid 2935574] (13)Permission denied: [client 216.73.216.199:65378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS2/device/subsystem/drivers_probe
[Thu Jul 30 11:42:19.930537 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.61:32206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:19.931158 2026] [authz_core:error] [pid 2933237:tid 2933237] [client 57.141.0.61:32206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:19.943519 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.46:41796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:19.944128 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.46:41796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:20.282700 2026] [ssl:error] [pid 2932610:tid 2932610] (EAI 2)Name or service not known: [client 144.76.19.72:34118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:20.282727 2026] [ssl:error] [pid 2932610:tid 2932610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:20.292968 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.29:29062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:20.293590 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.29:29062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:20.335498 2026] [ssl:error] [pid 2933237:tid 2933237] (EAI 2)Name or service not known: [client 144.76.19.72:34122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:20.335537 2026] [ssl:error] [pid 2933237:tid 2933237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:20.441414 2026] [ssl:error] [pid 2935574:tid 2935574] (70014)End of file found: [client 216.73.216.199:65378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:20.587923 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.29:29072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:20.588558 2026] [authz_core:error] [pid 2929450:tid 2929450] [client 57.141.0.29:29072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:20.809631 2026] [access_compat:error] [pid 2935492:tid 2935492] [client 136.158.37.124:77] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:42:20.936466 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.29:29076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:20.937097 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.29:29076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:21.343829 2026] [ssl:error] [pid 2935539:tid 2935539] (70014)End of file found: [client 216.73.216.199:10427] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:21.745282 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.49:64850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:21.745915 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.49:64850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:22.018541 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.70:44342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:22.019180 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.70:44342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:22.210764 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.11:38304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:22.211385 2026] [authz_core:error] [pid 2927386:tid 2927386] [client 57.141.0.11:38304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:22.482406 2026] [lsapi:warn] [pid 2937320:tid 2937320] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:22.499145 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.39:42732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:22.499752 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.39:42732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:22.682275 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.15:30158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:22.682899 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.15:30158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:22.854292 2026] [ssl:error] [pid 2930165:tid 2930165] (70014)End of file found: [client 216.73.216.199:14152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:23.164782 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.69:27134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:23.165417 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.69:27134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:23.389088 2026] [ssl:error] [pid 2932069:tid 2932069] (EAI 2)Name or service not known: [client 144.76.19.72:34136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:23.389118 2026] [ssl:error] [pid 2932069:tid 2932069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:23.413753 2026] [lsapi:warn] [pid 2935537:tid 2935537] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:23.442110 2026] [ssl:error] [pid 2937320:tid 2937320] (EAI 2)Name or service not known: [client 144.76.19.72:34150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:23.442140 2026] [ssl:error] [pid 2937320:tid 2937320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:23.533241 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.58:35452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:23.533864 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.58:35452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:24.356098 2026] [security2:error] [pid 2937320:tid 2937320] [client 47.77.238.128:13243] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqkIaK5XZkM9FF0Jti6gAAAAY"]
[Thu Jul 30 11:42:24.356161 2026] [security2:error] [pid 2937320:tid 2937320] [client 47.77.238.128:13243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqkIaK5XZkM9FF0Jti6gAAAAY"]
[Thu Jul 30 11:42:24.356439 2026] [security2:error] [pid 2937320:tid 2937320] [client 47.77.238.128:13243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqkIaK5XZkM9FF0Jti6gAAAAY"]
[Thu Jul 30 11:42:24.411703 2026] [core:error] [pid 2937408:tid 2937408] [client 66.249.66.167:59234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:24.411750 2026] [core:error] [pid 2937408:tid 2937408] [client 66.249.66.167:59234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:24.416331 2026] [core:error] [pid 2937409:tid 2937409] [client 66.249.66.169:50975] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:24.416365 2026] [core:error] [pid 2937409:tid 2937409] [client 66.249.66.169:50975] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:24.450919 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.60:28796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:24.451551 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.60:28796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:24.496873 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.21:57732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:24.497527 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.21:57732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:24.658365 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.30:31422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:24.658996 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.30:31422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:24.676862 2026] [ssl:error] [pid 2931272:tid 2931272] (70014)End of file found: [client 216.73.216.199:34963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:24.891766 2026] [security2:error] [pid 2927305:tid 2927305] [client 216.73.216.199:2743] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/mysqlnd.ini"] [unique_id "amsqkEqCOb_eUkKaQ1-hwAAAAAM"]
[Thu Jul 30 11:42:24.892054 2026] [security2:error] [pid 2927305:tid 2927305] [client 216.73.216.199:2743] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/mysqlnd.ini"] [unique_id "amsqkEqCOb_eUkKaQ1-hwAAAAAM"]
[Thu Jul 30 11:42:24.892286 2026] [security2:error] [pid 2927305:tid 2927305] [client 216.73.216.199:2743] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/mysqlnd.ini"] [unique_id "amsqkEqCOb_eUkKaQ1-hwAAAAAM"]
[Thu Jul 30 11:42:25.317490 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.31:40742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:25.318123 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.31:40742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:25.495113 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.70:44348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:25.495728 2026] [authz_core:error] [pid 2921525:tid 2921525] [client 57.141.0.70:44348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:25.587254 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.70:44358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:25.587879 2026] [authz_core:error] [pid 2935537:tid 2935537] [client 57.141.0.70:44358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:26.169861 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.26:32186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:26.170525 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.26:32186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:26.344792 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.11:38312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:26.345452 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.11:38312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:26.499048 2026] [ssl:error] [pid 2933237:tid 2933237] (EAI 2)Name or service not known: [client 144.76.19.72:34152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:26.499091 2026] [ssl:error] [pid 2933237:tid 2933237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:26.557187 2026] [ssl:error] [pid 2935539:tid 2935539] (EAI 2)Name or service not known: [client 144.76.19.72:34162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:26.557214 2026] [ssl:error] [pid 2935539:tid 2935539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:26.584949 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.67:21054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:26.585612 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.67:21054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:26.800053 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.14:48642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:26.800699 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.14:48642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:27.034533 2026] [security2:error] [pid 2934692:tid 2934692] [client 173.68.109.53:52678] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqk9GcNlKZlfbe4Jt5WwAAAAs"]
[Thu Jul 30 11:42:27.034589 2026] [security2:error] [pid 2934692:tid 2934692] [client 173.68.109.53:52678] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqk9GcNlKZlfbe4Jt5WwAAAAs"]
[Thu Jul 30 11:42:27.034842 2026] [security2:error] [pid 2934692:tid 2934692] [client 173.68.109.53:52678] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqk9GcNlKZlfbe4Jt5WwAAAAs"]
[Thu Jul 30 11:42:27.139616 2026] [authz_core:error] [pid 2937508:tid 2937508] [client 57.141.0.18:43758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:27.140255 2026] [authz_core:error] [pid 2937508:tid 2937508] [client 57.141.0.18:43758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:27.261186 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.61:32228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:27.261804 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.61:32228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:27.889330 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.41:37820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:27.889949 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.41:37820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:28.460734 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.35:59652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:28.461361 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.35:59652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:28.801046 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.4:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:28.801686 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.4:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:28.812587 2026] [core:error] [pid 2927305:tid 2927305] (13)Permission denied: [client 216.73.216.199:2743] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/domain_remote_mx_ips.cdb
[Thu Jul 30 11:42:28.898463 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.42:36964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:28.899157 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.42:36964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:29.431097 2026] [authz_core:error] [pid 2936627:tid 2936627] [client 57.141.0.14:48650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:29.431721 2026] [authz_core:error] [pid 2936627:tid 2936627] [client 57.141.0.14:48650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:29.610771 2026] [ssl:error] [pid 2930165:tid 2930165] (EAI 2)Name or service not known: [client 144.76.19.72:63298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:29.610798 2026] [ssl:error] [pid 2930165:tid 2930165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:29.665232 2026] [ssl:error] [pid 2935578:tid 2935578] (EAI 2)Name or service not known: [client 144.76.19.72:63302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:29.665264 2026] [ssl:error] [pid 2935578:tid 2935578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:29.670768 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.5:35010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:29.671385 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.5:35010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:29.716566 2026] [ssl:error] [pid 2927305:tid 2927305] (70014)End of file found: [client 216.73.216.199:2743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:30.150968 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.20:62806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:30.151622 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.20:62806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:30.735345 2026] [authz_core:error] [pid 2936627:tid 2936627] [client 57.141.0.4:31680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:30.736008 2026] [authz_core:error] [pid 2936627:tid 2936627] [client 57.141.0.4:31680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:30.747441 2026] [security2:error] [pid 2930165:tid 2930165] [client 151.242.127.198:35872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/.env.local"] [unique_id "amsqlv7fl_nzFk3ZS1Xz_wAAABg"]
[Thu Jul 30 11:42:30.756651 2026] [security2:error] [pid 2916525:tid 2916525] [client 151.242.127.198:35988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/firebase-adminsdk.json"] [unique_id "amsqlk4v1uGwh1--PitcRQAAAAc"]
[Thu Jul 30 11:42:30.895584 2026] [security2:error] [pid 2930165:tid 2930165] [client 151.242.127.198:36124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/aws-exports.js"] [unique_id "amsqlv7fl_nzFk3ZS1X0AQAAABg"]
[Thu Jul 30 11:42:30.920674 2026] [core:error] [pid 2937408:tid 2937408] (13)Permission denied: [client 216.73.216.199:7466] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/ctor
[Thu Jul 30 11:42:31.222052 2026] [ssl:error] [pid 2937408:tid 2937408] (70014)End of file found: [client 216.73.216.199:7466] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:31.243198 2026] [security2:error] [pid 2927346:tid 2927346] [client 151.242.127.198:36098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/env.json"] [unique_id "amsql0QpVDjYO6sOcCltPAAAAAk"]
[Thu Jul 30 11:42:31.609793 2026] [security2:error] [pid 2927346:tid 2927346] [client 151.242.127.198:35900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/.github/workflows/deploy.yml"] [unique_id "amsql0QpVDjYO6sOcCltPgAAAAk"]
[Thu Jul 30 11:42:31.713866 2026] [security2:error] [pid 2935492:tid 2935492] [client 151.242.127.198:36150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/openapi.json"] [unique_id "amsqlwezD3CxGQNWDG_C0wAAABE"]
[Thu Jul 30 11:42:31.727170 2026] [security2:error] [pid 2930165:tid 2930165] [client 151.242.127.198:36026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/actuator/heapdump"] [unique_id "amsql_7fl_nzFk3ZS1X0BAAAABg"]
[Thu Jul 30 11:42:31.834820 2026] [security2:error] [pid 2935492:tid 2935492] [client 151.242.127.198:36288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcalendars.akoptimize.online"] [uri "/graphql"] [unique_id "amsqlwezD3CxGQNWDG_C1AAAABE"]
[Thu Jul 30 11:42:34.137908 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.52:51128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:34.138571 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.52:51128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:34.170444 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.25:43718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:34.171098 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.25:43718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:34.318288 2026] [ssl:error] [pid 2937813:tid 2937813] (70014)End of file found: [client 216.73.216.199:1670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:34.488542 2026] [access_compat:error] [pid 2937812:tid 2937812] [client 136.158.37.124:841] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:42:34.521054 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.40:44302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:34.521680 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.40:44302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:34.691779 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.67:43348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:34.692398 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.67:43348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.418033 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.45:22046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.418424 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.29:28206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.418674 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.45:22046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.419034 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.29:28206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.502804 2026] [ssl:error] [pid 2937851:tid 2937851] (EAI 2)Name or service not known: [client 144.76.19.72:63308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:35.502845 2026] [ssl:error] [pid 2937851:tid 2937851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:35.592046 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.30:54362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.592687 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.30:54362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.602453 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.43:49900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.603107 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.43:49900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.608710 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.45:22068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.608787 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.18:61172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.609342 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.45:22068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.609422 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.18:61172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.615648 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.59:32554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.616248 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.59:32554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.626540 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.7:59294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.627145 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.7:59294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.666483 2026] [security2:error] [pid 2932610:tid 2932610] [client 172.56.66.88:31631] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqmwIaTfjY8lrCCKKUTAAAACM"]
[Thu Jul 30 11:42:35.666534 2026] [security2:error] [pid 2932610:tid 2932610] [client 172.56.66.88:31631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqmwIaTfjY8lrCCKKUTAAAACM"]
[Thu Jul 30 11:42:35.666791 2026] [security2:error] [pid 2932610:tid 2932610] [client 172.56.66.88:31631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqmwIaTfjY8lrCCKKUTAAAACM"]
[Thu Jul 30 11:42:35.682809 2026] [lsapi:warn] [pid 2933076:tid 2933076] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:35.705463 2026] [access_compat:error] [pid 2935572:tid 2935572] [client 45.158.164.139:52812] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:42:35.778923 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.2:20684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.779586 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.2:20684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:35.935369 2026] [lsapi:warn] [pid 2937857:tid 2937857] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:35.947991 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.22:62802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:35.948715 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.22:62802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:36.210945 2026] [ssl:error] [pid 2935572:tid 2935572] (EAI 2)Name or service not known: [client 144.76.19.72:63310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:36.210967 2026] [ssl:error] [pid 2935572:tid 2935572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:36.408708 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.25:63042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:36.409326 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.25:63042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:36.654360 2026] [core:error] [pid 2937851:tid 2937851] (13)Permission denied: [client 216.73.216.199:22737] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/store_user
[Thu Jul 30 11:42:36.682406 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.18:61184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:36.683029 2026] [authz_core:error] [pid 2932069:tid 2932069] [client 57.141.0.18:61184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:36.848746 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.6:52764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:36.849401 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.6:52764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:36.852439 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.35:33812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:36.853040 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.35:33812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:36.857748 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.31:60334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:36.858347 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.31:60334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:36.933624 2026] [security2:error] [pid 2932069:tid 2932069] [client 185.191.171.1:16402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/forecaster-police-beat"] [unique_id "amsqnCoLFTPc0sVOLa1WBgAAAB8"]
[Thu Jul 30 11:42:37.266198 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.18:61196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:37.266877 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.18:61196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:37.803169 2026] [security2:error] [pid 2935574:tid 2935574] [client 18.199.86.73:44662] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.pamporovoexpress.com"] [uri "/.git/config"] [unique_id "amsqnYnZtax1bB4N3pYiPQAAACY"]
[Thu Jul 30 11:42:37.803352 2026] [security2:error] [pid 2935574:tid 2935574] [client 18.199.86.73:44662] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.pamporovoexpress.com"] [uri "/.git/config"] [unique_id "amsqnYnZtax1bB4N3pYiPQAAACY"]
[Thu Jul 30 11:42:37.828281 2026] [security2:error] [pid 2935574:tid 2935574] [client 18.199.86.73:44662] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.pamporovoexpress.com"] [uri "/403.shtml"] [unique_id "amsqnYnZtax1bB4N3pYiPQAAACY"]
[Thu Jul 30 11:42:38.142900 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.54:44804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:38.143574 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.54:44804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:38.167988 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.68:40482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:38.168896 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.68:40482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:38.248767 2026] [core:error] [pid 2937857:tid 2937857] (13)Permission denied: [client 216.73.216.199:28476] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/machinecheck/machinecheck6/subsystem/drivers_probe
[Thu Jul 30 11:42:38.326947 2026] [authz_core:error] [pid 2937894:tid 2937894] [client 57.141.0.7:40606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:38.327619 2026] [authz_core:error] [pid 2937894:tid 2937894] [client 57.141.0.7:40606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:38.658780 2026] [core:error] [pid 2937896:tid 2937896] [client 66.249.66.168:49940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:38.658826 2026] [core:error] [pid 2937896:tid 2937896] [client 66.249.66.168:49940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:38.747428 2026] [security2:error] [pid 2937899:tid 2937899] [client 3.221.222.168:44940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2022/05/may-2022-multi-768x106.png"] [unique_id "amsqnsXF6udkmIgXwD9M5AAAAEQ"]
[Thu Jul 30 11:42:38.786748 2026] [authz_core:error] [pid 2937898:tid 2937898] [client 57.141.0.41:20946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:38.787439 2026] [authz_core:error] [pid 2937898:tid 2937898] [client 57.141.0.41:20946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:39.153338 2026] [ssl:error] [pid 2937857:tid 2937857] (70014)End of file found: [client 216.73.216.199:28476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:39.198993 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.1:31498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:39.199657 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.1:31498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:39.218120 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.28:45732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:39.218735 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.28:45732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:39.293455 2026] [ssl:error] [pid 2937886:tid 2937886] (EAI 2)Name or service not known: [client 144.76.19.72:63320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:39.293496 2026] [ssl:error] [pid 2937886:tid 2937886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:39.349899 2026] [ssl:error] [pid 2935574:tid 2935574] (EAI 2)Name or service not known: [client 144.76.19.72:63330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:39.349930 2026] [ssl:error] [pid 2935574:tid 2935574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:39.801485 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.20:48070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:39.802543 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.20:48070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:40.145669 2026] [authz_core:error] [pid 2937896:tid 2937896] [client 57.141.0.53:24502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:40.146288 2026] [authz_core:error] [pid 2937896:tid 2937896] [client 57.141.0.53:24502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:40.356561 2026] [ssl:error] [pid 2937408:tid 2937408] (70014)End of file found: [client 216.73.216.199:51767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:40.421791 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.40:59822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:40.422410 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.40:59822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:40.625322 2026] [authz_core:error] [pid 2937886:tid 2937886] [client 57.141.0.14:63180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:40.625948 2026] [authz_core:error] [pid 2937886:tid 2937886] [client 57.141.0.14:63180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:40.795303 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.27:24440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:40.795926 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.27:24440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:40.866800 2026] [ssl:error] [pid 2937890:tid 2937890] (70014)End of file found: [client 216.73.216.199:29693] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:41.731623 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.62:42102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:41.732254 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.62:42102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:42.143834 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.53:24526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:42.144457 2026] [authz_core:error] [pid 2933233:tid 2933233] [client 57.141.0.53:24526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:42.157862 2026] [authz_core:error] [pid 2937886:tid 2937886] [client 57.141.0.69:42672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:42.158483 2026] [authz_core:error] [pid 2937886:tid 2937886] [client 57.141.0.69:42672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:42.404279 2026] [ssl:error] [pid 2933076:tid 2933076] (EAI 2)Name or service not known: [client 144.76.19.72:54708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:42.404312 2026] [ssl:error] [pid 2933076:tid 2933076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:42.496252 2026] [ssl:error] [pid 2927387:tid 2927387] (EAI 2)Name or service not known: [client 144.76.19.72:54712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:42.496282 2026] [ssl:error] [pid 2927387:tid 2927387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:42.546077 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.14:63196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:42.546694 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.14:63196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:42.721495 2026] [access_compat:error] [pid 2937813:tid 2937813] [client 136.158.37.124:1638] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:42:42.762418 2026] [security2:error] [pid 2937853:tid 2937853] [client 34.224.9.144:52040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2022/06/signatures-multi-long-329.png"] [unique_id "amsqothj96t9-IdFCbr_nQAAAC4"]
[Thu Jul 30 11:42:42.815278 2026] [authz_core:error] [pid 2937854:tid 2937854] [client 57.141.0.44:51324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:42.815895 2026] [authz_core:error] [pid 2937854:tid 2937854] [client 57.141.0.44:51324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:42.947272 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.31:60336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:42.947895 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.31:60336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:42.953603 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.29:60496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:42.954207 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.29:60496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:43.256897 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.30:24498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:43.257534 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.30:24498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:43.991908 2026] [lsapi:warn] [pid 2932610:tid 2932610] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:44.026162 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.37:31226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:44.026782 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.37:31226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:44.547023 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.23:42062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:44.547659 2026] [authz_core:error] [pid 2934532:tid 2934532] [client 57.141.0.23:42062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:44.731106 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.61:29700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:44.731725 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.61:29700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:45.178433 2026] [core:error] [pid 2935572:tid 2935572] (13)Permission denied: [client 216.73.216.199:8814] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/machinecheck/machinecheck5/subsystem/drivers_probe
[Thu Jul 30 11:42:45.283905 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.20:48076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:45.284533 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.20:48076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:45.554014 2026] [ssl:error] [pid 2937853:tid 2937853] (EAI 2)Name or service not known: [client 144.76.19.72:54716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:45.554044 2026] [ssl:error] [pid 2937853:tid 2937853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:45.556756 2026] [security2:error] [pid 2933076:tid 2933076] [client 43.131.39.179:50160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "amsqpYhTkWeacfW2WFDf8QAAABQ"]
[Thu Jul 30 11:42:45.611293 2026] [ssl:error] [pid 2937857:tid 2937857] (EAI 2)Name or service not known: [client 144.76.19.72:54718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:45.611321 2026] [ssl:error] [pid 2937857:tid 2937857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:45.638842 2026] [security2:error] [pid 2929199:tid 2929199] [client 202.125.67.152:60182] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqpTTWw4wC_Zpsp_sJ8AAAABU"]
[Thu Jul 30 11:42:45.638883 2026] [security2:error] [pid 2929199:tid 2929199] [client 202.125.67.152:60182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqpTTWw4wC_Zpsp_sJ8AAAABU"]
[Thu Jul 30 11:42:45.639142 2026] [security2:error] [pid 2929199:tid 2929199] [client 202.125.67.152:60182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqpTTWw4wC_Zpsp_sJ8AAAABU"]
[Thu Jul 30 11:42:45.690009 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.43:62608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:45.690637 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.43:62608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:45.772602 2026] [core:error] [pid 2937893:tid 2937893] [client 66.249.66.66:45216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:45.772634 2026] [core:error] [pid 2937893:tid 2937893] [client 66.249.66.66:45216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:45.793956 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.33:42286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:45.794611 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.33:42286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:45.796532 2026] [lsapi:warn] [pid 2937508:tid 2937508] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:45.819550 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.49:33082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:45.820163 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.49:33082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:47.184036 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.27:24448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:47.184689 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.27:24448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:47.438439 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.44:51328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:47.439062 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.44:51328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:47.605077 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.41:30092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:47.605704 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.41:30092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:47.737122 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.60:47936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:47.737746 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.60:47936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:48.505058 2026] [core:error] [pid 2935572:tid 2935572] (13)Permission denied: [client 216.73.216.199:8814] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/bin/chsh
[Thu Jul 30 11:42:48.667783 2026] [ssl:error] [pid 2937898:tid 2937898] (EAI 2)Name or service not known: [client 144.76.19.72:54726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:48.667812 2026] [ssl:error] [pid 2937898:tid 2937898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:48.712709 2026] [authz_core:error] [pid 2937508:tid 2937508] [client 57.141.0.55:59244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:48.713325 2026] [authz_core:error] [pid 2937508:tid 2937508] [client 57.141.0.55:59244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:48.721569 2026] [ssl:error] [pid 2934692:tid 2934692] (EAI 2)Name or service not known: [client 144.76.19.72:54738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:48.721592 2026] [ssl:error] [pid 2934692:tid 2934692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:48.821660 2026] [ssl:error] [pid 2935572:tid 2935572] (70014)End of file found: [client 216.73.216.199:8814] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:48.908590 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.56:33260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:48.909209 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.56:33260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:49.261682 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.28:63456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:49.262310 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.28:63456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:49.314034 2026] [ssl:error] [pid 2937851:tid 2937851] (70014)End of file found: [client 216.73.216.199:28720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:49.559260 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.67:61290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:49.559882 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.67:61290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:49.745351 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.28:63458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:49.745971 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.28:63458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:50.009738 2026] [security2:error] [pid 2935492:tid 2935492] [client 101.47.26.131:50647] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqqgezD3CxGQNWDG_C1QAAABE"]
[Thu Jul 30 11:42:50.009790 2026] [security2:error] [pid 2935492:tid 2935492] [client 101.47.26.131:50647] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqqgezD3CxGQNWDG_C1QAAABE"]
[Thu Jul 30 11:42:50.010079 2026] [security2:error] [pid 2935492:tid 2935492] [client 101.47.26.131:50647] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqqgezD3CxGQNWDG_C1QAAABE"]
[Thu Jul 30 11:42:50.250170 2026] [authz_core:error] [pid 2937898:tid 2937898] [client 57.141.0.18:34756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:50.250792 2026] [authz_core:error] [pid 2937898:tid 2937898] [client 57.141.0.18:34756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:50.450581 2026] [authz_core:error] [pid 2937886:tid 2937886] [client 57.141.0.18:34770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:50.451197 2026] [authz_core:error] [pid 2937886:tid 2937886] [client 57.141.0.18:34770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:50.538681 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.30:24504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:50.539335 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.30:24504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:50.817654 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.51:26736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:50.818277 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.51:26736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:51.196971 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.20:43910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:51.197604 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.20:43910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:51.492218 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.35:63030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:51.492840 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.35:63030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:51.547624 2026] [ssl:error] [pid 2933124:tid 2933124] (70014)End of file found: [client 216.73.216.199:3493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:51.779414 2026] [ssl:error] [pid 2937886:tid 2937886] (EAI 2)Name or service not known: [client 144.76.19.72:64338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:51.779443 2026] [ssl:error] [pid 2937886:tid 2937886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:51.834971 2026] [ssl:error] [pid 2927305:tid 2927305] (EAI 2)Name or service not known: [client 144.76.19.72:64348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:51.834995 2026] [ssl:error] [pid 2927305:tid 2927305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:52.214721 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.19:61148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:52.215342 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.19:61148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:52.313853 2026] [security2:error] [pid 2929199:tid 2929199] [client 114.119.158.38:28827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/im-new/prayer-request"] [unique_id "amsqrDTWw4wC_Zpsp_sJ8QAAABU"], referer: https://www.erskinenazarene.co.uk/erskine-community-festival
[Thu Jul 30 11:42:52.573215 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.40:40974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:52.573819 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.40:40974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:52.583469 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.10:21872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:52.584106 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.10:21872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:52.922775 2026] [core:error] [pid 2927305:tid 2927305] [client 66.249.66.194:38181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:52.922798 2026] [core:error] [pid 2927305:tid 2927305] [client 66.249.66.194:38181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:53.029465 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.56:33272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:53.030122 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.56:33272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:53.314960 2026] [security2:error] [pid 2937891:tid 2937891] [client 101.47.26.131:15027] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqrYhcLwALTDUR1ACnYwAAAD0"]
[Thu Jul 30 11:42:53.315008 2026] [security2:error] [pid 2937891:tid 2937891] [client 101.47.26.131:15027] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqrYhcLwALTDUR1ACnYwAAAD0"]
[Thu Jul 30 11:42:53.315267 2026] [security2:error] [pid 2937891:tid 2937891] [client 101.47.26.131:15027] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqrYhcLwALTDUR1ACnYwAAAD0"]
[Thu Jul 30 11:42:53.576295 2026] [access_compat:error] [pid 2927346:tid 2927346] [client 136.158.37.124:2564] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:42:53.663362 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.44:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:53.663987 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.44:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:53.725991 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.69:61220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:53.726632 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.69:61220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:54.209397 2026] [security2:error] [pid 2937892:tid 2937892] [client 114.119.158.38:28837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/im-new/prayer-request"] [unique_id "amsqrjI2fGiLz8iZ2GnO-QAAAD4"], referer: https://www.erskinenazarene.co.uk/erskine-community-festival
[Thu Jul 30 11:42:54.476525 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.39:29650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:54.477186 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.39:29650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:54.629589 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.7:27324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:54.630216 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.7:27324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:54.727267 2026] [lsapi:warn] [pid 2933076:tid 2933076] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:54.889045 2026] [ssl:error] [pid 2937851:tid 2937851] (EAI 2)Name or service not known: [client 144.76.19.72:64358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:54.889085 2026] [ssl:error] [pid 2937851:tid 2937851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:54.890576 2026] [security2:error] [pid 2935572:tid 2935572] [client 185.191.171.11:45794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9772.0/prev_next,next.html"] [unique_id "amsqrmQcajq6pLz-i51RCgAAACI"]
[Thu Jul 30 11:42:54.947110 2026] [ssl:error] [pid 2937893:tid 2937893] (EAI 2)Name or service not known: [client 144.76.19.72:64360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:54.947141 2026] [ssl:error] [pid 2937893:tid 2937893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:54.948909 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.5:20436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:54.949535 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.5:20436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:55.004056 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.37:51148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:55.004685 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.37:51148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:55.181517 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.10:21878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:55.182142 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.10:21878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:55.991179 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.8:23182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:55.991797 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.8:23182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:56.023686 2026] [security2:error] [pid 2935574:tid 2935574] [client 85.208.98.23:53790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsqsInZtax1bB4N3pYiQwAAACY"]
[Thu Jul 30 11:42:56.296745 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.8:23184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:56.297391 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.8:23184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:56.863422 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.32:38186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:56.864049 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.32:38186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:56.972537 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.17:55806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:56.973157 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.17:55806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:57.015903 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.48:34000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:57.016531 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.48:34000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:57.173727 2026] [security2:error] [pid 2937892:tid 2937892] [client 18.199.86.73:59766] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.saturnstopwatches.com"] [uri "/.git/config"] [unique_id "amsqsTI2fGiLz8iZ2GnO-gAAAD4"]
[Thu Jul 30 11:42:57.173932 2026] [security2:error] [pid 2937892:tid 2937892] [client 18.199.86.73:59766] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.saturnstopwatches.com"] [uri "/.git/config"] [unique_id "amsqsTI2fGiLz8iZ2GnO-gAAAD4"]
[Thu Jul 30 11:42:57.199402 2026] [security2:error] [pid 2937892:tid 2937892] [client 18.199.86.73:59766] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.saturnstopwatches.com"] [uri "/403.shtml"] [unique_id "amsqsTI2fGiLz8iZ2GnO-gAAAD4"]
[Thu Jul 30 11:42:57.291384 2026] [security2:error] [pid 2937811:tid 2937811] [client 185.191.171.13:33402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6625.0.html"] [unique_id "amsqsTsF2XmEzVr1A1xmRwAAABw"]
[Thu Jul 30 11:42:57.319832 2026] [access_compat:error] [pid 2930165:tid 2930165] [client 4.232.188.49:65479] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/234ff.php
[Thu Jul 30 11:42:57.320188 2026] [core:error] [pid 2930165:tid 2930165] [client 4.232.188.49:65479] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:42:57.427090 2026] [lsapi:warn] [pid 2937782:tid 2937782] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:42:57.496436 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.36:59112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:57.497062 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.36:59112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:57.728167 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.27:65134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:57.728789 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.27:65134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:57.757167 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.55:48668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:57.757782 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.55:48668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:57.958113 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 66.249.66.33:65278] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:42:57.960767 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 66.249.66.33:65278] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:42:57.999447 2026] [ssl:error] [pid 2933124:tid 2933124] (EAI 2)Name or service not known: [client 144.76.19.72:64372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:57.999491 2026] [ssl:error] [pid 2933124:tid 2933124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:58.055863 2026] [ssl:error] [pid 2936546:tid 2936546] (EAI 2)Name or service not known: [client 144.76.19.72:64378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:42:58.055900 2026] [ssl:error] [pid 2936546:tid 2936546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:42:58.253268 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.55:48670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:58.253893 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.55:48670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:58.390979 2026] [core:error] [pid 2935576:tid 2935576] (13)Permission denied: [client 216.73.216.199:64108] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_io_end/order
[Thu Jul 30 11:42:58.720155 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.14:27678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:58.720779 2026] [authz_core:error] [pid 2930165:tid 2930165] [client 57.141.0.14:27678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:59.308650 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.32:38200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:59.309274 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.32:38200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:59.531461 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.21:56802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:59.532087 2026] [authz_core:error] [pid 2937851:tid 2937851] [client 57.141.0.21:56802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:42:59.709370 2026] [ssl:error] [pid 2937853:tid 2937853] (70014)End of file found: [client 216.73.216.199:30240] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:42:59.793009 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.24:39878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:42:59.793669 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.24:39878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:00.110555 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.66:41826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:00.111185 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.66:41826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:00.397617 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.44:23582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:00.398242 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.44:23582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:00.547624 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 66.249.66.33:65278] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:43:00.550273 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 66.249.66.33:65278] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:43:00.637520 2026] [ssl:error] [pid 2935576:tid 2935576] (70014)End of file found: [client 216.73.216.199:64108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:00.776536 2026] [security2:error] [pid 2937812:tid 2937812] [client 43.164.1.211:37814] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "acthoroughbreds.com"] [uri "/"] [unique_id "amsqtAEQ-mEa64sbBhuWdgAAAB4"]
[Thu Jul 30 11:43:00.777043 2026] [authz_core:error] [pid 2937812:tid 2937812] [client 43.164.1.211:37814] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 11:43:00.777093 2026] [authz_core:error] [pid 2937812:tid 2937812] [client 43.164.1.211:37814] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 11:43:00.827749 2026] [access_compat:error] [pid 2933238:tid 2933238] [client 4.232.188.49:65516] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/133.php
[Thu Jul 30 11:43:00.828135 2026] [core:error] [pid 2933238:tid 2933238] [client 4.232.188.49:65516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:01.058860 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.59:26734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:01.059483 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.59:26734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:01.113238 2026] [ssl:error] [pid 2937851:tid 2937851] (EAI 2)Name or service not known: [client 144.76.19.72:23322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:01.113260 2026] [ssl:error] [pid 2937851:tid 2937851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:01.169948 2026] [ssl:error] [pid 2935574:tid 2935574] (EAI 2)Name or service not known: [client 144.76.19.72:23332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:01.169988 2026] [ssl:error] [pid 2935574:tid 2935574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:01.345934 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.17:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:01.346570 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.17:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:01.367053 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.59:26740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:01.367684 2026] [authz_core:error] [pid 2927387:tid 2927387] [client 57.141.0.59:26740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:01.384957 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.65:27354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:01.385584 2026] [authz_core:error] [pid 2932610:tid 2932610] [client 57.141.0.65:27354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:01.470477 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.9:53584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:01.471149 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.9:53584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:01.947097 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.1:64182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:01.947735 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.1:64182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:02.622871 2026] [authz_core:error] [pid 2937812:tid 2937812] [client 57.141.0.12:32592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:02.623491 2026] [authz_core:error] [pid 2937812:tid 2937812] [client 57.141.0.12:32592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:03.014088 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.34:20672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:03.014708 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.34:20672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:03.344122 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.52:47598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:03.345184 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.52:47598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:03.369367 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.8:23190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:03.369987 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.8:23190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:03.856658 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 82.102.18.190:56090] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:43:04.228993 2026] [ssl:error] [pid 2937781:tid 2937781] (EAI 2)Name or service not known: [client 144.76.19.72:23346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:04.229030 2026] [ssl:error] [pid 2937781:tid 2937781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:04.254291 2026] [authz_core:error] [pid 2937812:tid 2937812] [client 57.141.0.22:42300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:04.254913 2026] [authz_core:error] [pid 2937812:tid 2937812] [client 57.141.0.22:42300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:04.280596 2026] [ssl:error] [pid 2935539:tid 2935539] (EAI 2)Name or service not known: [client 144.76.19.72:23360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:04.280624 2026] [ssl:error] [pid 2935539:tid 2935539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:04.339865 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.15:63408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:04.340489 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.15:63408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:04.441654 2026] [access_compat:error] [pid 2937900:tid 2937900] [client 4.232.188.49:64995] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-ws68.php
[Thu Jul 30 11:43:04.442021 2026] [core:error] [pid 2937900:tid 2937900] [client 4.232.188.49:64995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:04.465706 2026] [access_compat:error] [pid 2937409:tid 2937409] [client 136.158.37.124:3596] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:43:04.974381 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.4:36706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:04.974999 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.4:36706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:05.185081 2026] [ssl:error] [pid 2927305:tid 2927305] (70014)End of file found: [client 216.73.216.199:22417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:05.354272 2026] [lsapi:warn] [pid 2932611:tid 2932611] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:05.355516 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.36:44568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:05.356132 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.36:44568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:05.434693 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.56:55050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:05.435316 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.56:55050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:05.791149 2026] [ssl:error] [pid 2937320:tid 2937320] (70014)End of file found: [client 216.73.216.199:2318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:05.986078 2026] [authz_core:error] [pid 2937900:tid 2937900] [client 57.141.0.33:23018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:05.987029 2026] [authz_core:error] [pid 2937900:tid 2937900] [client 57.141.0.33:23018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:06.046395 2026] [access_compat:error] [pid 2937857:tid 2937857] [client 4.232.188.49:65480] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mgrr.php
[Thu Jul 30 11:43:06.046736 2026] [core:error] [pid 2937857:tid 2937857] [client 4.232.188.49:65480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:06.313398 2026] [security2:error] [pid 2927346:tid 2927346] [client 163.7.14.186:32815] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqukQpVDjYO6sOcCltSgAAAAk"]
[Thu Jul 30 11:43:06.313451 2026] [security2:error] [pid 2927346:tid 2927346] [client 163.7.14.186:32815] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqukQpVDjYO6sOcCltSgAAAAk"]
[Thu Jul 30 11:43:06.313679 2026] [security2:error] [pid 2927346:tid 2927346] [client 163.7.14.186:32815] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqukQpVDjYO6sOcCltSgAAAAk"]
[Thu Jul 30 11:43:06.390084 2026] [core:error] [pid 2909092:tid 2909092] (13)Permission denied: [client 216.73.216.199:31704] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-1k/order
[Thu Jul 30 11:43:06.442451 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.41:47796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:06.443086 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.41:47796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:06.705309 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.12:32596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:06.705933 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.12:32596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:06.790418 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.62:38602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:06.791037 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.62:38602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:06.958729 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.30:52828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:06.959360 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.30:52828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:06.973846 2026] [core:error] [pid 2937857:tid 2937857] [client 66.249.66.167:59657] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:06.973866 2026] [core:error] [pid 2937857:tid 2937857] [client 66.249.66.167:59657] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:07.350960 2026] [ssl:error] [pid 2937380:tid 2937380] (EAI 2)Name or service not known: [client 144.76.19.72:23372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:07.351001 2026] [ssl:error] [pid 2937380:tid 2937380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:07.408563 2026] [ssl:error] [pid 2937890:tid 2937890] (EAI 2)Name or service not known: [client 144.76.19.72:23376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:07.408597 2026] [ssl:error] [pid 2937890:tid 2937890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:07.501039 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.14:51554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:07.501704 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.14:51554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:07.550960 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.35:56772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:07.551590 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.35:56772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:07.842410 2026] [lsapi:warn] [pid 2937852:tid 2937852] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:07.970362 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:31704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:08.373892 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.55:60506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:08.374536 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.55:60506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:08.516105 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.49:45550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:08.516734 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.49:45550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:09.237016 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.42:41592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:09.237651 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.42:41592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:09.347237 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.3:43174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:09.347857 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.3:43174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:09.421863 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.9:64490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:09.422492 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.9:64490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:09.696659 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.55:60510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:09.697273 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.55:60510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:10.128473 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.46:21076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:10.129120 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.46:21076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:10.485941 2026] [ssl:error] [pid 2939658:tid 2939658] (EAI 2)Name or service not known: [client 144.76.19.72:52806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:10.485983 2026] [ssl:error] [pid 2939658:tid 2939658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:10.539637 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:52812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:10.539676 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:10.555338 2026] [security2:error] [pid 2937409:tid 2937409] [client 101.47.18.228:62153] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqvgaWvBqXIda_1WKltwAAAA0"]
[Thu Jul 30 11:43:10.555390 2026] [security2:error] [pid 2937409:tid 2937409] [client 101.47.18.228:62153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqvgaWvBqXIda_1WKltwAAAA0"]
[Thu Jul 30 11:43:10.555665 2026] [security2:error] [pid 2937409:tid 2937409] [client 101.47.18.228:62153] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqvgaWvBqXIda_1WKltwAAAA0"]
[Thu Jul 30 11:43:10.676627 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.31:43264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:10.677332 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.31:43264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:10.762367 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.66:43372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:10.762988 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.66:43372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:11.151819 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.48:27324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:11.152450 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.48:27324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:11.251591 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.31:43268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:11.252221 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.31:43268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:11.908140 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.42:50100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:11.908763 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.42:50100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:11.983445 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.21:61142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:11.984078 2026] [authz_core:error] [pid 2935574:tid 2935574] [client 57.141.0.21:61142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:12.829640 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.62:43916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:12.830287 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.62:43916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:13.092645 2026] [core:error] [pid 2935539:tid 2935539] (13)Permission denied: [client 216.73.216.199:48723] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/order
[Thu Jul 30 11:43:13.219914 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.49:45558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:13.220546 2026] [authz_core:error] [pid 2927305:tid 2927305] [client 57.141.0.49:45558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:13.560958 2026] [security2:error] [pid 2921808:tid 2921808] [client 49.51.180.2:44076] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/"] [unique_id "amsqwdCLv3mVp9ri8k5T3AAAADE"]
[Thu Jul 30 11:43:13.594830 2026] [ssl:error] [pid 2935579:tid 2935579] (EAI 2)Name or service not known: [client 144.76.19.72:52814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:13.594859 2026] [ssl:error] [pid 2935579:tid 2935579] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:13.719440 2026] [ssl:error] [pid 2935574:tid 2935574] (EAI 2)Name or service not known: [client 144.76.19.72:52822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:13.719465 2026] [ssl:error] [pid 2935574:tid 2935574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:13.731620 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.27:32494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:13.732239 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.27:32494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:13.803256 2026] [security2:error] [pid 2939727:tid 2939727] [client 51.68.107.157:15365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ziltdesign.be"] [uri "/robots.txt"] [unique_id "amsqwdtasZ9nLvIlpVzrYAAAAAE"]
[Thu Jul 30 11:43:13.835857 2026] [security2:error] [pid 2939658:tid 2939658] [client 101.47.18.228:51251] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqwV1LSuncxFpXkcBYMQAAAAA"]
[Thu Jul 30 11:43:13.835906 2026] [security2:error] [pid 2939658:tid 2939658] [client 101.47.18.228:51251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsqwV1LSuncxFpXkcBYMQAAAAA"]
[Thu Jul 30 11:43:13.836189 2026] [security2:error] [pid 2939658:tid 2939658] [client 101.47.18.228:51251] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsqwV1LSuncxFpXkcBYMQAAAAA"]
[Thu Jul 30 11:43:14.717578 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.10:61056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:14.718208 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.10:61056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:14.941017 2026] [security2:error] [pid 2927387:tid 2927387] [client 185.191.171.19:27670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7679.0/prev_next,next.html"] [unique_id "amsqwsfIPh9HsINTC85_lgAAAA4"]
[Thu Jul 30 11:43:14.968623 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.45:58602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:14.969245 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.45:58602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:15.049671 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.33:37322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:15.050297 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.33:37322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:15.119768 2026] [security2:error] [pid 2937380:tid 2937380] [client 43.161.251.162:44068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "epmsonline.co.uk"] [uri "/"] [unique_id "amsqwwArIpEcaahcQidBxAAAAAg"]
[Thu Jul 30 11:43:15.177739 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.41:20004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:15.178366 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.41:20004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:15.318812 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.14:26380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:15.319439 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.14:26380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:15.465890 2026] [core:error] [pid 2927346:tid 2927346] [client 66.249.66.66:47616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:15.465923 2026] [core:error] [pid 2927346:tid 2927346] [client 66.249.66.66:47616] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:15.503652 2026] [core:error] [pid 2935539:tid 2935539] (13)Permission denied: [client 216.73.216.199:48723] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/passwd.nouids.cache
[Thu Jul 30 11:43:15.692015 2026] [lsapi:warn] [pid 2937380:tid 2937380] [client 43.161.251.162:44068] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 11:43:15.707265 2026] [access_compat:error] [pid 2935572:tid 2935572] [client 136.158.37.124:4495] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:43:15.755627 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.34:46582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:15.756251 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.34:46582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:16.014083 2026] [lsapi:warn] [pid 2937890:tid 2937890] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:16.067850 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.44:47512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:16.068471 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.44:47512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:16.406339 2026] [ssl:error] [pid 2935539:tid 2935539] (70014)End of file found: [client 216.73.216.199:48723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:16.615584 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.26:40506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:16.616202 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.26:40506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:16.711926 2026] [core:error] [pid 2933076:tid 2933076] (13)Permission denied: [client 216.73.216.199:21496] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/cpu_slabs
[Thu Jul 30 11:43:16.775588 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:52832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:16.775615 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:16.816373 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.53:31284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:16.816990 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.53:31284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:16.831488 2026] [ssl:error] [pid 2937380:tid 2937380] (EAI 2)Name or service not known: [client 144.76.19.72:52840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:16.831529 2026] [ssl:error] [pid 2937380:tid 2937380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:17.012814 2026] [ssl:error] [pid 2933076:tid 2933076] (70014)End of file found: [client 216.73.216.199:21496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:17.151818 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.35:59802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:17.152445 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.35:59802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:17.425230 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.7:42626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:17.425854 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.7:42626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:17.490243 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.45:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:17.490868 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.45:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:18.178722 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.42:50114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:18.179367 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.42:50114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:18.687041 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.32:31898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:18.687671 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.32:31898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:18.816015 2026] [ssl:error] [pid 2934692:tid 2934692] (70014)End of file found: [client 216.73.216.199:6502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:18.862167 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.44:47524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:18.862785 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.44:47524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:19.496154 2026] [security2:error] [pid 2937900:tid 2937900] [client 43.166.226.57:48390] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsqx6etD29k9p0b2gc6HwAAAEU"]
[Thu Jul 30 11:43:19.738646 2026] [security2:error] [pid 2931272:tid 2931272] [client 85.208.98.19:39200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/under-armour-khakis-k.html"] [unique_id "amsqx9Lng1sl0-hDufA-cQAAABs"]
[Thu Jul 30 11:43:19.776173 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.26:40522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:19.776857 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.26:40522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:19.790579 2026] [authz_core:error] [pid 2937782:tid 2937782] [client 57.141.0.33:37332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:19.791199 2026] [authz_core:error] [pid 2937782:tid 2937782] [client 57.141.0.33:37332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:19.838905 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.18:55900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:19.839536 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.18:55900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:19.871113 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:33576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:19.871743 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:33576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:19.872986 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.44:49268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:19.873625 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.44:49268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:19.886832 2026] [ssl:error] [pid 2931272:tid 2931272] (EAI 2)Name or service not known: [client 144.76.19.72:39800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:19.886857 2026] [ssl:error] [pid 2931272:tid 2931272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:19.938240 2026] [ssl:error] [pid 2937853:tid 2937853] (EAI 2)Name or service not known: [client 144.76.19.72:39802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:19.938287 2026] [ssl:error] [pid 2937853:tid 2937853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:20.555223 2026] [lsapi:warn] [pid 2935573:tid 2935573] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:20.720685 2026] [security2:error] [pid 2939658:tid 2939658] [client 85.208.96.209:22168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9447.0/prev_next,next.html"] [unique_id "amsqyF1LSuncxFpXkcBYNAAAAAA"]
[Thu Jul 30 11:43:21.202867 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.64:49510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:21.203565 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.64:49510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:21.320127 2026] [security2:error] [pid 2935578:tid 2935578] [client 43.166.226.57:49512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amsqySTmj5ZRF-yFesO2_wAAACo"], referer: http://www.1stcolsterworthscouts.org.uk
[Thu Jul 30 11:43:21.809820 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.47:43500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:21.810439 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.47:43500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:21.948435 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.7:42652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:21.949061 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.7:42652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:22.459225 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.39:30050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:22.459850 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.39:30050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:22.528376 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.47:43504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:22.529004 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.47:43504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:22.530751 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.51:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:22.531424 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.51:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:22.725381 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 40.77.167.43:14855] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:22.726002 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 40.77.167.43:14855] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:22.797856 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.52:59334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:22.798519 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.52:59334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:22.996556 2026] [ssl:error] [pid 2937900:tid 2937900] (EAI 2)Name or service not known: [client 144.76.19.72:39814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:22.996597 2026] [ssl:error] [pid 2937900:tid 2937900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:23.049745 2026] [ssl:error] [pid 2937895:tid 2937895] (EAI 2)Name or service not known: [client 144.76.19.72:39822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:23.049778 2026] [ssl:error] [pid 2937895:tid 2937895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:23.063300 2026] [ssl:error] [pid 2937045:tid 2937045] (70014)End of file found: [client 216.73.216.199:64821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:23.066478 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.61:28796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:23.067101 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.61:28796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:23.263557 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.71:44676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:23.264178 2026] [authz_core:error] [pid 2935576:tid 2935576] [client 57.141.0.71:44676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:23.665567 2026] [ssl:error] [pid 2935572:tid 2935572] (70014)End of file found: [client 216.73.216.199:15651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:23.778949 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.44:49284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:23.779586 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.44:49284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:24.113242 2026] [authz_core:error] [pid 2937900:tid 2937900] [client 57.141.0.49:21784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:24.113863 2026] [authz_core:error] [pid 2937900:tid 2937900] [client 57.141.0.49:21784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:24.796492 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.70:35330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:24.797124 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.70:35330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:25.169365 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.12:26954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:25.169992 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.12:26954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:25.251463 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.41:39198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:25.252096 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.41:39198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:25.773716 2026] [ssl:error] [pid 2937895:tid 2937895] (70014)End of file found: [client 216.73.216.199:26668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:25.948894 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.3:65358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:25.949528 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.3:65358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:26.074701 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.42:29086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:26.075325 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.42:29086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:26.104603 2026] [ssl:error] [pid 2931272:tid 2931272] (EAI 2)Name or service not known: [client 144.76.19.72:39830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:26.104635 2026] [ssl:error] [pid 2931272:tid 2931272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:26.108708 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.61:28804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:26.109320 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.61:28804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:26.225494 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:39846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:26.225533 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:26.372491 2026] [access_compat:error] [pid 2937782:tid 2937782] [client 136.158.37.124:5377] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:43:26.506268 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.71:55240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:26.506893 2026] [authz_core:error] [pid 2933124:tid 2933124] [client 57.141.0.71:55240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:26.736337 2026] [lsapi:warn] [pid 2937781:tid 2937781] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:27.125763 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.7:24748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:27.126388 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.7:24748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:27.197838 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.12:26966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:27.198482 2026] [authz_core:error] [pid 2937813:tid 2937813] [client 57.141.0.12:26966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:27.361994 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.50:43332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:27.362627 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.50:43332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:27.723173 2026] [autoindex:error] [pid 2933124:tid 2933124] [client 46.4.28.29:39538] AH01276: Cannot serve directory /home/winterb/public_html/drupal1/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 11:43:27.750008 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.2:55980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:27.750638 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.2:55980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:28.344020 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.37:58680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:28.344658 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.37:58680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:28.349568 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.69:59960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:28.350182 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.69:59960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:28.477325 2026] [core:error] [pid 2937045:tid 2937045] [client 66.249.66.3:48158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:28.477352 2026] [core:error] [pid 2937045:tid 2937045] [client 66.249.66.3:48158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:28.480332 2026] [core:error] [pid 2935579:tid 2935579] [client 66.249.66.167:42632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:28.480352 2026] [core:error] [pid 2935579:tid 2935579] [client 66.249.66.167:42632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:28.867738 2026] [security2:error] [pid 2937320:tid 2937320] [client 159.89.91.236:39684] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsq0IaK5XZkM9FF0JtjBgAAAAY"]
[Thu Jul 30 11:43:29.089147 2026] [ssl:error] [pid 2933124:tid 2933124] (70014)End of file found: [client 216.73.216.199:58048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:29.160866 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.44:49304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:29.161485 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.44:49304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:29.279682 2026] [ssl:error] [pid 2937781:tid 2937781] (EAI 2)Name or service not known: [client 144.76.19.72:39850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:29.279711 2026] [ssl:error] [pid 2937781:tid 2937781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:29.336741 2026] [ssl:error] [pid 2937408:tid 2937408] (EAI 2)Name or service not known: [client 144.76.19.72:39852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:29.336782 2026] [ssl:error] [pid 2937408:tid 2937408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:29.367846 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.20:41106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:29.368467 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.20:41106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:29.570290 2026] [core:error] [pid 2937045:tid 2937045] (13)Permission denied: [client 216.73.216.199:54837] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfnetlink/sections/__ksymtab_gpl
[Thu Jul 30 11:43:29.634140 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.69:47830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:29.634767 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.69:47830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:29.679099 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.58:33668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:29.679712 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.58:33668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:29.718435 2026] [lsapi:warn] [pid 2937380:tid 2937380] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:30.959368 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.55:29262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:30.959980 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.30:44294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:30.959993 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.55:29262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:30.960614 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.30:44294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:31.129654 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.40:64312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:31.130279 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.40:64312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:31.932816 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.2:55990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:31.933441 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.2:55990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:32.202081 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.37:37934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:32.202705 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.37:37934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:32.299661 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.51:27910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:32.300310 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.51:27910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:32.390961 2026] [ssl:error] [pid 2935539:tid 2935539] (EAI 2)Name or service not known: [client 144.76.19.72:19016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:32.390986 2026] [ssl:error] [pid 2935539:tid 2935539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:32.446279 2026] [ssl:error] [pid 2932070:tid 2932070] (EAI 2)Name or service not known: [client 144.76.19.72:19026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:32.446312 2026] [ssl:error] [pid 2932070:tid 2932070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:32.610484 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.31:44774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:32.611114 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.31:44774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:32.673179 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.58:55446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:32.673796 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.58:55446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:32.700307 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.36:44112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:32.700926 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.36:44112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:33.463306 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.46:55632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:33.463973 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.46:55632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:33.745794 2026] [core:error] [pid 2932070:tid 2932070] [client 66.249.66.167:42976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:33.745822 2026] [core:error] [pid 2932070:tid 2932070] [client 66.249.66.167:42976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:33.763472 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.30:52344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:33.764107 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.30:52344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:33.951493 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.18:30476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:33.952152 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.18:30476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:34.109714 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.54:55630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:34.110345 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.54:55630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:34.477696 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.43:24446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:34.478761 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.43:24446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:34.631355 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.17:58380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:34.631984 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.17:58380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:35.110238 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:32508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:35.503741 2026] [ssl:error] [pid 2937745:tid 2937745] (EAI 2)Name or service not known: [client 144.76.19.72:19034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:35.503779 2026] [ssl:error] [pid 2937745:tid 2937745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:35.562551 2026] [ssl:error] [pid 2940881:tid 2940881] (EAI 2)Name or service not known: [client 144.76.19.72:19050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:35.562595 2026] [ssl:error] [pid 2940881:tid 2940881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:35.707783 2026] [core:error] [pid 2937045:tid 2937045] (13)Permission denied: [client 216.73.216.199:54837] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/store_user
[Thu Jul 30 11:43:35.711431 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.52:47176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:35.712052 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.52:47176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:35.980156 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.14:37240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:35.980774 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.14:37240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:35.983344 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.46:55642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:35.983950 2026] [authz_core:error] [pid 2940819:tid 2940819] [client 57.141.0.46:55642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:35.989528 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.42:39050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:35.990132 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.42:39050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:36.309838 2026] [ssl:error] [pid 2937045:tid 2937045] (70014)End of file found: [client 216.73.216.199:54837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:36.481393 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.36:44126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:36.482015 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.36:44126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:36.801547 2026] [core:error] [pid 2940879:tid 2940879] (13)Permission denied: [client 216.73.216.199:18543] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/graphics/fb0/device/rom
[Thu Jul 30 11:43:37.300926 2026] [access_compat:error] [pid 2935578:tid 2935578] [client 136.158.37.124:6370] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:43:37.317579 2026] [security2:error] [pid 2935572:tid 2935572] [client 185.191.171.8:45510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/ruth-lake-country-club-initiation-fee"] [unique_id "amsq2WQcajq6pLz-i51RGwAAACI"]
[Thu Jul 30 11:43:37.331081 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.70:26800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:37.331703 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.70:26800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:37.512888 2026] [lsapi:warn] [pid 2932070:tid 2932070] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:37.514979 2026] [core:error] [pid 2940879:tid 2940879] (13)Permission denied: [client 216.73.216.199:18543] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/local/bin/wp-toolkit
[Thu Jul 30 11:43:37.532121 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.62:50414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:37.532738 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.62:50414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:37.578400 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.69:47858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:37.579019 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.69:47858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:37.762659 2026] [access_compat:error] [pid 2937408:tid 2937408] [client 45.158.164.139:55796] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:43:38.145706 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.2:22110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:38.146350 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.2:22110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:38.638028 2026] [ssl:error] [pid 2940151:tid 2940151] (EAI 2)Name or service not known: [client 144.76.19.72:19060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:38.638085 2026] [ssl:error] [pid 2940151:tid 2940151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:38.695010 2026] [ssl:error] [pid 2937320:tid 2937320] (EAI 2)Name or service not known: [client 144.76.19.72:19066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:38.695035 2026] [ssl:error] [pid 2937320:tid 2937320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:38.784369 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.32:46250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:38.785002 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.32:46250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:38.953080 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.31:30430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:38.953699 2026] [authz_core:error] [pid 2937890:tid 2937890] [client 57.141.0.31:30430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:38.996572 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.64:41388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:38.997200 2026] [authz_core:error] [pid 2937408:tid 2937408] [client 57.141.0.64:41388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:39.019395 2026] [ssl:error] [pid 2940879:tid 2940879] (70014)End of file found: [client 216.73.216.199:18543] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:39.531846 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.23:24916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:39.532472 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.23:24916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:39.556155 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.13:46594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:39.556772 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.13:46594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:40.111684 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.42:39056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:40.112307 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.42:39056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:40.287818 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.60:43736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:40.288448 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.60:43736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:40.301754 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.46:55648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:40.302373 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.46:55648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:40.525322 2026] [ssl:error] [pid 2937320:tid 2937320] (70014)End of file found: [client 216.73.216.199:54824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:40.998059 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.7:57718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:40.998692 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.7:57718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:41.072344 2026] [lsapi:warn] [pid 2940880:tid 2940880] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:41.362426 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.10:39076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:41.363048 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.10:39076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:41.749418 2026] [ssl:error] [pid 2937045:tid 2937045] (EAI 2)Name or service not known: [client 144.76.19.72:21444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:41.749461 2026] [ssl:error] [pid 2937045:tid 2937045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:41.793835 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.3:49648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:41.794457 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.3:49648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:41.802899 2026] [ssl:error] [pid 2935573:tid 2935573] (EAI 2)Name or service not known: [client 144.76.19.72:21450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:41.802925 2026] [ssl:error] [pid 2935573:tid 2935573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:41.960297 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.64:41394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:41.960918 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.64:41394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:42.402425 2026] [authz_core:error] [pid 2941310:tid 2941310] [client 57.141.0.2:22132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:42.403093 2026] [authz_core:error] [pid 2941310:tid 2941310] [client 57.141.0.2:22132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:42.475015 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 20.206.204.219:53242] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 11:43:42.839051 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.23:24924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:42.839688 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.23:24924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:42.953417 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.20:28346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:42.954034 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.20:28346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:43.434436 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.37:55018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:43.435074 2026] [authz_core:error] [pid 2935578:tid 2935578] [client 57.141.0.37:55018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:44.025140 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.20:28356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:44.025768 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.20:28356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:44.460836 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.58:53766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:44.461468 2026] [authz_core:error] [pid 2932611:tid 2932611] [client 57.141.0.58:53766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:44.677427 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.68:60742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:44.678052 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.68:60742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:44.745261 2026] [ssl:error] [pid 2937857:tid 2937857] (70014)End of file found: [client 216.73.216.199:18303] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:44.779355 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.48:34974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:44.780006 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.48:34974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:44.903140 2026] [ssl:error] [pid 2941399:tid 2941399] (EAI 2)Name or service not known: [client 144.76.19.72:21464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:44.903188 2026] [ssl:error] [pid 2941399:tid 2941399] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:44.961825 2026] [ssl:error] [pid 2941400:tid 2941400] (EAI 2)Name or service not known: [client 144.76.19.72:21468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:44.961864 2026] [ssl:error] [pid 2941400:tid 2941400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:45.142936 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.31:30432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:45.143577 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.31:30432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:45.174274 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.6:28262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:45.174891 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.6:28262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:45.346538 2026] [core:error] [pid 2940881:tid 2940881] (13)Permission denied: [client 216.73.216.199:63596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/xt_limit/uevent
[Thu Jul 30 11:43:45.858197 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.37:55022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:45.858830 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.37:55022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:45.948692 2026] [ssl:error] [pid 2940881:tid 2940881] (70014)End of file found: [client 216.73.216.199:63596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:46.240041 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.29:48230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:46.240679 2026] [authz_core:error] [pid 2935579:tid 2935579] [client 57.141.0.29:48230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:46.432031 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.32:39414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:46.432672 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.32:39414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:46.947422 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.20:28362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:46.948129 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.20:28362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:47.081949 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.16:47992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:47.082585 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.16:47992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:47.410159 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.71:47570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:47.410777 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.71:47570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:47.449694 2026] [core:error] [pid 2937745:tid 2937745] (13)Permission denied: [client 216.73.216.199:3548] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS2/line
[Thu Jul 30 11:43:48.021496 2026] [ssl:error] [pid 2937904:tid 2937904] (EAI 2)Name or service not known: [client 144.76.19.72:21484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:48.021570 2026] [ssl:error] [pid 2937904:tid 2937904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:48.051838 2026] [core:error] [pid 2937745:tid 2937745] (13)Permission denied: [client 216.73.216.199:3548] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libnvdimm/sections/__ksymtab_gpl
[Thu Jul 30 11:43:48.075474 2026] [ssl:error] [pid 2935537:tid 2935537] (EAI 2)Name or service not known: [client 144.76.19.72:21496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:48.075525 2026] [ssl:error] [pid 2935537:tid 2935537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:48.217324 2026] [access_compat:error] [pid 2941397:tid 2941397] [client 136.158.37.124:7303] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:43:48.233997 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.44:45528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:48.234626 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.44:45528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:48.242003 2026] [lsapi:warn] [pid 2927346:tid 2927346] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:48.355658 2026] [ssl:error] [pid 2937745:tid 2937745] (70014)End of file found: [client 216.73.216.199:3548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:48.428467 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.11:53202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:48.429099 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.11:53202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:48.840320 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.65:51366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:48.840946 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.65:51366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:48.881818 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.3:63910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:48.882447 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.3:63910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:49.273492 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.20:28372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:49.274130 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.20:28372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:49.650656 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.52:29052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:49.651288 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.52:29052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:49.807257 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.65:51370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:49.807882 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.65:51370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:49.867138 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.21:35142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:49.867756 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.21:35142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:50.254032 2026] [ssl:error] [pid 2941310:tid 2941310] (70014)End of file found: [client 216.73.216.199:24598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:50.549632 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:1542] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:51.016457 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.64:30294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:51.017098 2026] [authz_core:error] [pid 2937857:tid 2937857] [client 57.141.0.64:30294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:51.042432 2026] [core:error] [pid 2931272:tid 2931272] (13)Permission denied: [client 216.73.216.199:39438] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:09/physical_node/resource0
[Thu Jul 30 11:43:51.135045 2026] [ssl:error] [pid 2940879:tid 2940879] (EAI 2)Name or service not known: [client 144.76.19.72:63352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:51.135094 2026] [ssl:error] [pid 2940879:tid 2940879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:51.158542 2026] [ssl:error] [pid 2931272:tid 2931272] (70014)End of file found: [client 216.73.216.199:39438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:51.190196 2026] [ssl:error] [pid 2933076:tid 2933076] (EAI 2)Name or service not known: [client 144.76.19.72:63356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:51.190229 2026] [ssl:error] [pid 2933076:tid 2933076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:51.331032 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.34:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:51.331664 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.34:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:51.359041 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.29:41230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:51.359675 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.29:41230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:51.695754 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.3:63924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:51.696378 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.3:63924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:51.705802 2026] [core:error] [pid 2940881:tid 2940881] [client 57.141.0.48:23450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:51.705827 2026] [core:error] [pid 2940881:tid 2940881] [client 57.141.0.48:23450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:51.982170 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.26:36174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:51.982788 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.26:36174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:52.510719 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.29:41232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:52.511339 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.29:41232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:52.655224 2026] [core:error] [pid 2929315:tid 2929315] [client 66.249.66.39:52089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:52.655254 2026] [core:error] [pid 2929315:tid 2929315] [client 66.249.66.39:52089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:53.007229 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.9:50276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:53.007863 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.9:50276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:53.120532 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.27:47492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:53.121157 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.27:47492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:53.169400 2026] [lsapi:warn] [pid 2937888:tid 2937888] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:53.893894 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.30:30430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:53.894526 2026] [authz_core:error] [pid 2937380:tid 2937380] [client 57.141.0.30:30430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:54.180752 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.28:38334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:54.181385 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.28:38334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:54.248666 2026] [ssl:error] [pid 2940881:tid 2940881] (EAI 2)Name or service not known: [client 144.76.19.72:63360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:54.248696 2026] [ssl:error] [pid 2940881:tid 2940881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:54.300212 2026] [ssl:error] [pid 2941397:tid 2941397] (EAI 2)Name or service not known: [client 144.76.19.72:63362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:54.300243 2026] [ssl:error] [pid 2941397:tid 2941397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:54.586944 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.50:25088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:54.587579 2026] [authz_core:error] [pid 2937745:tid 2937745] [client 57.141.0.50:25088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:54.703416 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.58:30566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:54.704034 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.58:30566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:54.710079 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:26640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:54.710694 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.62:26640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:55.048168 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.1:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:55.048806 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.1:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:55.217550 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.55:49210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:55.218169 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.55:49210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:55.600599 2026] [security2:error] [pid 2939658:tid 2939658] [client 18.199.86.73:58722] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.outsource-it-now.com"] [uri "/.git/config"] [unique_id "amsq611LSuncxFpXkcBYPwAAAAA"]
[Thu Jul 30 11:43:55.600783 2026] [security2:error] [pid 2939658:tid 2939658] [client 18.199.86.73:58722] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.outsource-it-now.com"] [uri "/.git/config"] [unique_id "amsq611LSuncxFpXkcBYPwAAAAA"]
[Thu Jul 30 11:43:55.628014 2026] [security2:error] [pid 2939658:tid 2939658] [client 18.199.86.73:58722] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.outsource-it-now.com"] [uri "/403.shtml"] [unique_id "amsq611LSuncxFpXkcBYPwAAAAA"]
[Thu Jul 30 11:43:55.644373 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.4:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:55.645063 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.4:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:56.151252 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.62:26646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:56.151873 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.62:26646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:56.282094 2026] [ssl:error] [pid 2937891:tid 2937891] (70014)End of file found: [client 216.73.216.199:52906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:56.779412 2026] [ssl:error] [pid 2916525:tid 2916525] (70014)End of file found: [client 216.73.216.199:40109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:56.947735 2026] [core:error] [pid 2927346:tid 2927346] [client 66.249.66.167:58928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:56.947771 2026] [core:error] [pid 2927346:tid 2927346] [client 66.249.66.167:58928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:43:57.362121 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.5:45968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:57.362768 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.5:45968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:57.369177 2026] [ssl:error] [pid 2940880:tid 2940880] (EAI 2)Name or service not known: [client 144.76.19.72:63364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:57.369214 2026] [ssl:error] [pid 2940880:tid 2940880] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:57.409675 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.59:57200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:57.410300 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.59:57200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:57.425438 2026] [ssl:error] [pid 2937888:tid 2937888] (EAI 2)Name or service not known: [client 144.76.19.72:63372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:43:57.425466 2026] [ssl:error] [pid 2937888:tid 2937888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:43:57.556912 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.64:33536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:57.557542 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.64:33536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:57.654278 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.34:24818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:57.654898 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.34:24818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:57.794864 2026] [core:error] [pid 2939658:tid 2939658] (13)Permission denied: [client 216.73.216.199:50078] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/pagemap
[Thu Jul 30 11:43:58.199348 2026] [security2:error] [pid 2931272:tid 2931272] [client 47.128.47.159:49418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsq7tLng1sl0-hDufA-ewAAABs"]
[Thu Jul 30 11:43:58.396004 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.34:24820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:58.396656 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.34:24820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:58.398148 2026] [ssl:error] [pid 2939658:tid 2939658] (70014)End of file found: [client 216.73.216.199:50078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:43:58.561936 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.61:43664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:58.562571 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.61:43664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:58.923598 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.40:40342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:58.924243 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.40:40342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:59.010793 2026] [lsapi:warn] [pid 2929199:tid 2929199] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:43:59.043458 2026] [access_compat:error] [pid 2934692:tid 2934692] [client 136.158.37.124:8305] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:43:59.420905 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.39:61924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:59.421544 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.39:61924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:59.534553 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.64:33538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:59.535178 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.64:33538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:43:59.894800 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.40:40348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:43:59.895439 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.40:40348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:00.248154 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.4:38214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:00.248784 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.4:38214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:00.289101 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.6:25152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:00.289754 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.6:25152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:00.482546 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:19338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:00.482577 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:00.535279 2026] [ssl:error] [pid 2937888:tid 2937888] (EAI 2)Name or service not known: [client 144.76.19.72:19354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:00.535312 2026] [ssl:error] [pid 2937888:tid 2937888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:00.612022 2026] [security2:error] [pid 2941399:tid 2941399] [client 18.199.86.73:58728] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.nigelmassey.com"] [uri "/.git/config"] [unique_id "amsq8AihuOt2BF319x75HQAAACg"]
[Thu Jul 30 11:44:00.612302 2026] [security2:error] [pid 2941399:tid 2941399] [client 18.199.86.73:58728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.nigelmassey.com"] [uri "/.git/config"] [unique_id "amsq8AihuOt2BF319x75HQAAACg"]
[Thu Jul 30 11:44:00.639094 2026] [security2:error] [pid 2941399:tid 2941399] [client 18.199.86.73:58728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.nigelmassey.com"] [uri "/403.shtml"] [unique_id "amsq8AihuOt2BF319x75HQAAACg"]
[Thu Jul 30 11:44:00.964463 2026] [lsapi:warn] [pid 2935579:tid 2935579] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:01.053665 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.21:22142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:01.054289 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.21:22142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:01.283896 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.54:61392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:01.284528 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.54:61392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:01.408165 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.71:55132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:01.408815 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.71:55132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:02.024471 2026] [core:error] [pid 2937852:tid 2937852] (13)Permission denied: [client 216.73.216.199:8956] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cui_item/cache_dma
[Thu Jul 30 11:44:02.059707 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.19:50252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:02.060351 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.19:50252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:02.226821 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.3:58728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:02.227453 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.3:58728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:02.235860 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.24:36276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:02.236518 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.24:36276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:02.709047 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.59:57216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:02.709688 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.59:57216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:02.938024 2026] [ssl:error] [pid 2937852:tid 2937852] (70014)End of file found: [client 216.73.216.199:8956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:03.029316 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.4:21368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:03.030049 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.4:21368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:03.217648 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.13:47880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:03.218299 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.13:47880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:03.386179 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.12:65210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:03.386820 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.12:65210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:03.438921 2026] [ssl:error] [pid 2941400:tid 2941400] (70014)End of file found: [client 216.73.216.199:9684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:03.589792 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:19366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:03.589822 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:03.646655 2026] [ssl:error] [pid 2937891:tid 2937891] (EAI 2)Name or service not known: [client 144.76.19.72:19378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:03.646700 2026] [ssl:error] [pid 2937891:tid 2937891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:03.786333 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.52:63532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:03.786975 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.52:63532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:03.883233 2026] [authz_core:error] [pid 2941354:tid 2941354] [client 20.206.204.219:57328] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 11:44:03.897533 2026] [security2:error] [pid 2935579:tid 2935579] [client 18.199.86.73:44248] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.stopfordsackville.com"] [uri "/.git/config"] [unique_id "amsq8xYNB4ecfAtOALMzeAAAAC0"]
[Thu Jul 30 11:44:03.897792 2026] [security2:error] [pid 2935579:tid 2935579] [client 18.199.86.73:44248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.stopfordsackville.com"] [uri "/.git/config"] [unique_id "amsq8xYNB4ecfAtOALMzeAAAAC0"]
[Thu Jul 30 11:44:03.926917 2026] [security2:error] [pid 2935579:tid 2935579] [client 18.199.86.73:44248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.stopfordsackville.com"] [uri "/403.shtml"] [unique_id "amsq8xYNB4ecfAtOALMzeAAAAC0"]
[Thu Jul 30 11:44:04.533241 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.8:59336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:04.533917 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.8:59336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:04.838031 2026] [authz_core:error] [pid 2941354:tid 2941354] [client 57.141.0.33:41152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:04.839211 2026] [authz_core:error] [pid 2941354:tid 2941354] [client 57.141.0.33:41152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:05.048571 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.60:49038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:05.049216 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.60:49038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:05.266665 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.66:40018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:05.267306 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.66:40018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:05.519977 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.29:57566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:05.520650 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.29:57566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:05.949302 2026] [core:error] [pid 2940880:tid 2940880] (13)Permission denied: [client 216.73.216.199:62093] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/pcspkr/uevent
[Thu Jul 30 11:44:05.980614 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.63:51756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:05.981286 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.63:51756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:06.248773 2026] [ssl:error] [pid 2940880:tid 2940880] (70014)End of file found: [client 216.73.216.199:62093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:06.252561 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.64:49762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:06.253209 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.64:49762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:06.487051 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.44:65504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:06.487698 2026] [authz_core:error] [pid 2937891:tid 2937891] [client 57.141.0.44:65504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:06.700279 2026] [ssl:error] [pid 2942685:tid 2942685] (EAI 2)Name or service not known: [client 144.76.19.72:19380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:06.700318 2026] [ssl:error] [pid 2942685:tid 2942685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:06.752174 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:19382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:06.752205 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:07.053475 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.62:25226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:07.054128 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.62:25226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:07.541547 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.24:42900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:07.542192 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.24:42900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:07.604234 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.28:33482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:07.604849 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.28:33482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:07.808654 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.19:21486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:07.809304 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.19:21486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:08.193107 2026] [security2:error] [pid 2929199:tid 2929199] [client 43.167.190.151:42633] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsq-DTWw4wC_Zpsp_sKDgAAABU"]
[Thu Jul 30 11:44:08.193174 2026] [security2:error] [pid 2929199:tid 2929199] [client 43.167.190.151:42633] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsq-DTWw4wC_Zpsp_sKDgAAABU"]
[Thu Jul 30 11:44:08.193505 2026] [security2:error] [pid 2929199:tid 2929199] [client 43.167.190.151:42633] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsq-DTWw4wC_Zpsp_sKDgAAABU"]
[Thu Jul 30 11:44:08.255721 2026] [ssl:error] [pid 2931272:tid 2931272] (70014)End of file found: [client 216.73.216.199:53736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:08.316661 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.56:48434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:08.317306 2026] [authz_core:error] [pid 2935492:tid 2935492] [client 57.141.0.56:48434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:08.855039 2026] [ssl:error] [pid 2937781:tid 2937781] (70014)End of file found: [client 216.73.216.199:1685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:08.880737 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.64:49782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:08.881372 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.64:49782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:08.892253 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.13:47882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:08.892898 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.13:47882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:08.970914 2026] [authz_core:error] [pid 2941310:tid 2941310] [client 57.141.0.45:56032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:08.971551 2026] [authz_core:error] [pid 2941310:tid 2941310] [client 57.141.0.45:56032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:09.185978 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.62:25242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:09.186648 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.62:25242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:09.753897 2026] [lsapi:warn] [pid 2932070:tid 2932070] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:09.860726 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:40746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:09.860790 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:09.901772 2026] [core:error] [pid 2937852:tid 2937852] [client 66.249.66.196:45293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:09.901806 2026] [core:error] [pid 2937852:tid 2937852] [client 66.249.66.196:45293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:09.921699 2026] [ssl:error] [pid 2941397:tid 2941397] (EAI 2)Name or service not known: [client 144.76.19.72:40756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:09.921740 2026] [ssl:error] [pid 2941397:tid 2941397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:09.972488 2026] [access_compat:error] [pid 2940199:tid 2940199] [client 136.158.37.124:9191] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:44:10.200688 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.29:53696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:10.201331 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.29:53696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:10.323445 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.37:33554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:10.324100 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.37:33554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:10.558593 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.67:40446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:10.559234 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.67:40446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:10.762667 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.42:25904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:10.763311 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.42:25904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:11.244136 2026] [core:error] [pid 2932070:tid 2932070] [client 66.249.66.169:64426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:11.244173 2026] [core:error] [pid 2932070:tid 2932070] [client 66.249.66.169:64426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:11.517479 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.6:26356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:11.518135 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.6:26356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:11.555833 2026] [core:error] [pid 2941397:tid 2941397] (13)Permission denied: [client 216.73.216.199:43289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/free_calls
[Thu Jul 30 11:44:11.603865 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.30:38388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:11.604518 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.30:38388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:11.969281 2026] [ssl:error] [pid 2941397:tid 2941397] (70014)End of file found: [client 216.73.216.199:43289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:12.054881 2026] [lsapi:warn] [pid 2935579:tid 2935579] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:12.167782 2026] [security2:error] [pid 2940880:tid 2940880] [client 101.47.17.4:20305] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsq_Iy1gdxMyx_6NNZcIgAAABo"]
[Thu Jul 30 11:44:12.167830 2026] [security2:error] [pid 2940880:tid 2940880] [client 101.47.17.4:20305] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsq_Iy1gdxMyx_6NNZcIgAAABo"]
[Thu Jul 30 11:44:12.168077 2026] [security2:error] [pid 2940880:tid 2940880] [client 101.47.17.4:20305] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsq_Iy1gdxMyx_6NNZcIgAAABo"]
[Thu Jul 30 11:44:12.345190 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.64:49786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:12.345830 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.64:49786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:12.606758 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.53:49966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:12.607796 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.53:49966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:12.975542 2026] [ssl:error] [pid 2937904:tid 2937904] (EAI 2)Name or service not known: [client 144.76.19.72:40762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:12.975580 2026] [ssl:error] [pid 2937904:tid 2937904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:12.977734 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.29:53720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:12.978357 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.29:53720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:13.030337 2026] [ssl:error] [pid 2940151:tid 2940151] (EAI 2)Name or service not known: [client 144.76.19.72:40766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:13.030367 2026] [ssl:error] [pid 2940151:tid 2940151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:13.062432 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.36:54646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:13.063048 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.36:54646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:13.392670 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.39:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:13.393310 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.39:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:13.749133 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.47:58972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:13.749767 2026] [authz_core:error] [pid 2931272:tid 2931272] [client 57.141.0.47:58972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:14.610503 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.39:56918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:14.611166 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.39:56918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:14.681997 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:54507] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/systemd/logind.conf"] [unique_id "amsq_oy1gdxMyx_6NNZcJwAAABo"]
[Thu Jul 30 11:44:14.682254 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:54507] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/systemd/logind.conf"] [unique_id "amsq_oy1gdxMyx_6NNZcJwAAABo"]
[Thu Jul 30 11:44:14.682465 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:54507] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/systemd/logind.conf"] [unique_id "amsq_oy1gdxMyx_6NNZcJwAAABo"]
[Thu Jul 30 11:44:15.037667 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.13:31648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:15.038287 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.13:31648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:15.093574 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.34:58450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:15.094399 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.34:58450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:15.283900 2026] [core:error] [pid 2940880:tid 2940880] (13)Permission denied: [client 216.73.216.199:54507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/rhn/jwt.token.save
[Thu Jul 30 11:44:15.541704 2026] [security2:error] [pid 2943362:tid 2943362] [client 101.47.17.4:48143] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsq_wXCds0v-UE3Ai177QAAACo"]
[Thu Jul 30 11:44:15.541759 2026] [security2:error] [pid 2943362:tid 2943362] [client 101.47.17.4:48143] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsq_wXCds0v-UE3Ai177QAAACo"]
[Thu Jul 30 11:44:15.542082 2026] [security2:error] [pid 2943362:tid 2943362] [client 101.47.17.4:48143] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsq_wXCds0v-UE3Ai177QAAACo"]
[Thu Jul 30 11:44:15.699173 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.17:27290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:15.699794 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.17:27290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:15.745269 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.24:32706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:15.745911 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.24:32706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:15.805648 2026] [security2:error] [pid 2935572:tid 2935572] [client 114.119.132.171:39895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/mothers-day"] [unique_id "amsq_2Qcajq6pLz-i51RKQAAACI"], referer: http://www.erskinenazarene.co.uk/sermons/god-wants-his-church-to-grow
[Thu Jul 30 11:44:16.070362 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.11:24942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:16.071004 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.11:24942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:16.089553 2026] [ssl:error] [pid 2940882:tid 2940882] (EAI 2)Name or service not known: [client 144.76.19.72:40776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:16.089602 2026] [ssl:error] [pid 2940882:tid 2940882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:16.144552 2026] [ssl:error] [pid 2909092:tid 2909092] (EAI 2)Name or service not known: [client 144.76.19.72:40784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:16.144585 2026] [ssl:error] [pid 2909092:tid 2909092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:16.191058 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.44:64106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:16.191707 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.44:64106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:16.498135 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.43:40780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:16.498758 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.43:40780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:16.775043 2026] [core:error] [pid 2937852:tid 2937852] [client 66.249.66.194:41156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:16.775089 2026] [core:error] [pid 2937852:tid 2937852] [client 66.249.66.194:41156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:16.891063 2026] [core:error] [pid 2940880:tid 2940880] (13)Permission denied: [client 216.73.216.199:54507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/physical_node/rescan
[Thu Jul 30 11:44:16.966107 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.40:32198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:16.966751 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.40:32198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:17.090029 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:54507] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/udev/udev.conf"] [unique_id "amsrAYy1gdxMyx_6NNZcLwAAABo"]
[Thu Jul 30 11:44:17.090358 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:54507] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/udev/udev.conf"] [unique_id "amsrAYy1gdxMyx_6NNZcLwAAABo"]
[Thu Jul 30 11:44:17.090583 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:54507] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/udev/udev.conf"] [unique_id "amsrAYy1gdxMyx_6NNZcLwAAABo"]
[Thu Jul 30 11:44:17.337651 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.46:64510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:17.338299 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.46:64510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:17.438168 2026] [security2:error] [pid 2940199:tid 2940199] [client 114.119.132.171:39899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/sermons/mothers-day"] [unique_id "amsrARZ0fnkevG_4Vt_eawAAAAM"], referer: http://www.erskinenazarene.co.uk/sermons/god-wants-his-church-to-grow
[Thu Jul 30 11:44:17.999751 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.59:34242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:18.000380 2026] [authz_core:error] [pid 2940879:tid 2940879] [client 57.141.0.59:34242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:18.074860 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.45:53506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:18.075517 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.45:53506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:18.086202 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.18:56696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:18.086832 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.18:56696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:18.130576 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.29:53732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:18.131226 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.29:53732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:18.848321 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.60:20788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:18.848953 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.60:20788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:18.944010 2026] [authz_core:error] [pid 2941354:tid 2941354] [client 66.249.66.35:37722] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:44:18.946667 2026] [authz_core:error] [pid 2941354:tid 2941354] [client 66.249.66.35:37722] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:44:19.203774 2026] [ssl:error] [pid 2940879:tid 2940879] (EAI 2)Name or service not known: [client 144.76.19.72:40800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:19.203799 2026] [ssl:error] [pid 2940879:tid 2940879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:19.260579 2026] [ssl:error] [pid 2937852:tid 2937852] (EAI 2)Name or service not known: [client 144.76.19.72:40812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:19.260618 2026] [ssl:error] [pid 2937852:tid 2937852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:19.458305 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.27:64778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:19.458933 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.27:64778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:19.740635 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.26:54870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:19.741263 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.26:54870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:19.962861 2026] [security2:error] [pid 2921808:tid 2921808] [client 216.73.216.199:14697] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cpanel-install.log"] [unique_id "amsrA9CLv3mVp9ri8k5T8AAAADE"]
[Thu Jul 30 11:44:19.963180 2026] [security2:error] [pid 2921808:tid 2921808] [client 216.73.216.199:14697] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cpanel-install.log"] [unique_id "amsrA9CLv3mVp9ri8k5T8AAAADE"]
[Thu Jul 30 11:44:19.963416 2026] [security2:error] [pid 2921808:tid 2921808] [client 216.73.216.199:14697] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cpanel-install.log"] [unique_id "amsrA9CLv3mVp9ri8k5T8AAAADE"]
[Thu Jul 30 11:44:20.209622 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.49:20094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:20.210262 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.49:20094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:20.448250 2026] [lsapi:warn] [pid 2937813:tid 2937813] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:20.507739 2026] [security2:error] [pid 2940199:tid 2940199] [client 94.154.43.178:64524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amsrBBZ0fnkevG_4Vt_ebAAAAAM"]
[Thu Jul 30 11:44:20.507937 2026] [security2:error] [pid 2940199:tid 2940199] [client 94.154.43.178:64524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amsrBBZ0fnkevG_4Vt_ebAAAAAM"]
[Thu Jul 30 11:44:20.508171 2026] [security2:error] [pid 2940199:tid 2940199] [client 94.154.43.178:64524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amsrBBZ0fnkevG_4Vt_ebAAAAAM"]
[Thu Jul 30 11:44:20.720287 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.34:39246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:20.720931 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.34:39246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:20.882618 2026] [access_compat:error] [pid 2940882:tid 2940882] [client 136.158.37.124:9995] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:44:21.211051 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.65:52894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:21.211680 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.65:52894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:21.256629 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.37:45276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:21.257258 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.37:45276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:21.419235 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.63:49066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:21.419859 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.63:49066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:21.464879 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.43:31842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:21.465499 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.43:31842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:21.768464 2026] [core:error] [pid 2921808:tid 2921808] (13)Permission denied: [client 216.73.216.199:14697] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:64/uartclk
[Thu Jul 30 11:44:22.317944 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.16:32876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:22.318573 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.16:32876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:22.344822 2026] [ssl:error] [pid 2937813:tid 2937813] (EAI 2)Name or service not known: [client 144.76.19.72:28970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:22.344853 2026] [ssl:error] [pid 2937813:tid 2937813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:22.402845 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:28972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:22.402868 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:22.764997 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.9:45040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:22.765627 2026] [authz_core:error] [pid 2937904:tid 2937904] [client 57.141.0.9:45040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:22.847601 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.24:32720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:22.848245 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.24:32720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:22.906442 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.48:61998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:22.907093 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.48:61998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:23.629060 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.56:42880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:23.629697 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.56:42880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:24.287211 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.23:24296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:24.287827 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.23:24296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:24.458153 2026] [security2:error] [pid 2937904:tid 2937904] [client 85.208.96.206:18394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6648.0/prev_next,next.html"] [unique_id "amsrCN94vH_eTa0q9RWr2wAAAEg"]
[Thu Jul 30 11:44:24.483773 2026] [ssl:error] [pid 2921808:tid 2921808] (70014)End of file found: [client 216.73.216.199:14697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:24.588600 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.59:34252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:24.589224 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.59:34252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:24.637908 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.51:43124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:24.638569 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.51:43124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:24.850684 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.49:20106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:24.851335 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.49:20106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:24.928424 2026] [security2:error] [pid 2916525:tid 2916525] [client 1.13.158.23:52796] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.eu"] [uri "/"] [unique_id "amsrCE4v1uGwh1--PitcxgAAAAc"]
[Thu Jul 30 11:44:25.347175 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.68:28856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:25.347795 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.68:28856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:25.370139 2026] [lsapi:warn] [pid 2934692:tid 2934692] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:25.382015 2026] [ssl:error] [pid 2941678:tid 2941678] (70014)End of file found: [client 216.73.216.199:42344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:25.455873 2026] [ssl:error] [pid 2937904:tid 2937904] (EAI 2)Name or service not known: [client 144.76.19.72:28988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:25.455905 2026] [ssl:error] [pid 2937904:tid 2937904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:25.509062 2026] [ssl:error] [pid 2932070:tid 2932070] (EAI 2)Name or service not known: [client 144.76.19.72:28996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:25.509132 2026] [ssl:error] [pid 2932070:tid 2932070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:25.533100 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.19:57242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:25.533886 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.19:57242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:26.104180 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.67:53704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:26.104806 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.67:53704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:26.557649 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.59:44350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:26.558275 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.59:44350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:26.703985 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.67:53720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:26.704609 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.67:53720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:27.301917 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.55:59696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:27.302545 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.55:59696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:27.712841 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.45:34850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:27.713461 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.45:34850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:27.825680 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.40:25094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:27.826296 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.40:25094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:28.013060 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.58:39426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:28.013691 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.58:39426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:28.452322 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.45:34856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:28.452951 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.45:34856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:28.562474 2026] [ssl:error] [pid 2934692:tid 2934692] (EAI 2)Name or service not known: [client 144.76.19.72:29002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:28.562502 2026] [ssl:error] [pid 2934692:tid 2934692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:28.617183 2026] [ssl:error] [pid 2940151:tid 2940151] (EAI 2)Name or service not known: [client 144.76.19.72:29008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:28.617207 2026] [ssl:error] [pid 2940151:tid 2940151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:28.633095 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.38:34798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:28.633713 2026] [authz_core:error] [pid 2909092:tid 2909092] [client 57.141.0.38:34798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:29.127484 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.38:40950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:29.128116 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.38:40950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:29.357105 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.12:36878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:29.357722 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.12:36878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:29.870676 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.33:47070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:29.871307 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.33:47070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:30.310706 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.25:23164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:30.311328 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.25:23164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:30.391427 2026] [security2:error] [pid 2940151:tid 2940151] [client 18.199.86.73:37544] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.spamp.com"] [uri "/.git/config"] [unique_id "amsrDsh3hotVGu0qf5stuQAAAAI"]
[Thu Jul 30 11:44:30.391643 2026] [security2:error] [pid 2940151:tid 2940151] [client 18.199.86.73:37544] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.spamp.com"] [uri "/.git/config"] [unique_id "amsrDsh3hotVGu0qf5stuQAAAAI"]
[Thu Jul 30 11:44:30.419674 2026] [security2:error] [pid 2940151:tid 2940151] [client 18.199.86.73:37544] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.spamp.com"] [uri "/403.shtml"] [unique_id "amsrDsh3hotVGu0qf5stuQAAAAI"]
[Thu Jul 30 11:44:30.593411 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.31:39942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:30.594039 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.31:39942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:30.980607 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.16:42018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:30.981235 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.16:42018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:31.110270 2026] [core:error] [pid 2940880:tid 2940880] (13)Permission denied: [client 216.73.216.199:45919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:09/physical_node/resource1
[Thu Jul 30 11:44:31.155617 2026] [lsapi:warn] [pid 2934692:tid 2934692] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:31.597296 2026] [access_compat:error] [pid 2939658:tid 2939658] [client 136.158.37.124:10841] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:44:31.609522 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.21:24924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:31.610153 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.21:24924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:31.673653 2026] [ssl:error] [pid 2935572:tid 2935572] (EAI 2)Name or service not known: [client 144.76.19.72:58152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:31.673680 2026] [ssl:error] [pid 2935572:tid 2935572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:31.675516 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.20:28470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:31.676129 2026] [authz_core:error] [pid 2940151:tid 2940151] [client 57.141.0.20:28470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:31.731201 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:58166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:31.731244 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:31.734151 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.47:57290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:31.734769 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.47:57290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:32.092817 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.23:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:32.093440 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.23:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:32.616274 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:45919] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/imav-deploy.log"] [unique_id "amsrEIy1gdxMyx_6NNZcTAAAABo"]
[Thu Jul 30 11:44:32.616580 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:45919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/imav-deploy.log"] [unique_id "amsrEIy1gdxMyx_6NNZcTAAAABo"]
[Thu Jul 30 11:44:32.616802 2026] [security2:error] [pid 2940880:tid 2940880] [client 216.73.216.199:45919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/imav-deploy.log"] [unique_id "amsrEIy1gdxMyx_6NNZcTAAAABo"]
[Thu Jul 30 11:44:32.722255 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.21:24930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:32.722907 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.21:24930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:32.803290 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.13:54216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:32.803964 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.13:54216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:33.082350 2026] [security2:error] [pid 2937888:tid 2937888] [client 114.119.135.96:42635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsrEalHQpLMIVP8tYj0WAAAADs"], referer: http://www.jonathanhill.co.uk/
[Thu Jul 30 11:44:33.162045 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.51:56896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:33.162690 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.51:56896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:33.213730 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.48:63866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:33.214350 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.48:63866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:33.462737 2026] [security2:error] [pid 2941678:tid 2941678] [client 18.199.86.73:37554] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-narvi.com"] [uri "/.git/config"] [unique_id "amsrEXSViXzIVXWi2BZ7XAAAAAw"]
[Thu Jul 30 11:44:33.462930 2026] [security2:error] [pid 2941678:tid 2941678] [client 18.199.86.73:37554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-narvi.com"] [uri "/.git/config"] [unique_id "amsrEXSViXzIVXWi2BZ7XAAAAAw"]
[Thu Jul 30 11:44:33.489299 2026] [security2:error] [pid 2941678:tid 2941678] [client 18.199.86.73:37554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-narvi.com"] [uri "/403.shtml"] [unique_id "amsrEXSViXzIVXWi2BZ7XAAAAAw"]
[Thu Jul 30 11:44:33.529724 2026] [security2:error] [pid 2937852:tid 2937852] [client 18.199.86.73:36308] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-pandora.com"] [uri "/.git/config"] [unique_id "amsrES4vrRtOnBqQP4rq-AAAACw"]
[Thu Jul 30 11:44:33.529909 2026] [security2:error] [pid 2937852:tid 2937852] [client 18.199.86.73:36308] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-pandora.com"] [uri "/.git/config"] [unique_id "amsrES4vrRtOnBqQP4rq-AAAACw"]
[Thu Jul 30 11:44:33.556269 2026] [security2:error] [pid 2937852:tid 2937852] [client 18.199.86.73:36308] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amsrES4vrRtOnBqQP4rq-AAAACw"]
[Thu Jul 30 11:44:34.032664 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.66:37506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:34.033293 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.66:37506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:34.578220 2026] [security2:error] [pid 2937781:tid 2937781] [client 185.191.171.4:51120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1796.0.html"] [unique_id "amsrElRHUEvb2eA2ecy5wwAAABI"]
[Thu Jul 30 11:44:34.727919 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.36:26962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:34.728553 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.36:26962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:34.733812 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.61:27882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:34.734427 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.61:27882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:34.743155 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.69:48720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:34.743767 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.69:48720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:34.791133 2026] [ssl:error] [pid 2942762:tid 2942762] (EAI 2)Name or service not known: [client 144.76.19.72:58174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:34.791165 2026] [ssl:error] [pid 2942762:tid 2942762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:34.800231 2026] [ssl:error] [pid 2940880:tid 2940880] (70014)End of file found: [client 216.73.216.199:45919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:34.885744 2026] [ssl:error] [pid 2941397:tid 2941397] (EAI 2)Name or service not known: [client 144.76.19.72:58186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:34.885770 2026] [ssl:error] [pid 2941397:tid 2941397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:35.028778 2026] [ssl:error] [pid 2937852:tid 2937852] (70014)End of file found: [client 216.73.216.199:14231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:35.072520 2026] [lsapi:warn] [pid 2934692:tid 2934692] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:35.309736 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.48:63872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:35.310420 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.48:63872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:35.331537 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.44:58384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:35.332165 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.44:58384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:35.637369 2026] [core:error] [pid 2939727:tid 2939727] (13)Permission denied: [client 216.73.216.199:20882] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/vt/uevent
[Thu Jul 30 11:44:35.704619 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.35:64736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:35.705246 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.35:64736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:35.938328 2026] [core:error] [pid 2939727:tid 2939727] (13)Permission denied: [client 216.73.216.199:20882] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS3/custom_divisor
[Thu Jul 30 11:44:36.149624 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.69:48730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:36.150247 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.69:48730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:36.231869 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.62:29348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:36.232492 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.62:29348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:36.238709 2026] [ssl:error] [pid 2939727:tid 2939727] (70014)End of file found: [client 216.73.216.199:20882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:36.382739 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.45:34874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:36.383358 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.45:34874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:36.607199 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.11:50908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:36.607818 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.11:50908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:36.762366 2026] [security2:error] [pid 2941678:tid 2941678] [client 43.157.179.227:35188] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "45.158.164.139"] [uri "/"] [unique_id "amsrFHSViXzIVXWi2BZ7XwAAAAw"]
[Thu Jul 30 11:44:37.423241 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.23:53666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:37.423862 2026] [authz_core:error] [pid 2935572:tid 2935572] [client 57.141.0.23:53666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:37.693005 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 20.206.204.219:63789] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:44:37.695810 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.48:63882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:37.696433 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.48:63882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:37.798189 2026] [security2:error] [pid 2937892:tid 2937892] [client 185.191.171.19:18010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/city-of-los-angeles-local-emergency-period"] [unique_id "amsrFTI2fGiLz8iZ2GnPHQAAAD4"]
[Thu Jul 30 11:44:37.960713 2026] [ssl:error] [pid 2939658:tid 2939658] (EAI 2)Name or service not known: [client 144.76.19.72:58188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:37.960746 2026] [ssl:error] [pid 2939658:tid 2939658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:38.004687 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.47:57306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:38.005334 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.47:57306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:38.012647 2026] [ssl:error] [pid 2935572:tid 2935572] (EAI 2)Name or service not known: [client 144.76.19.72:58190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:38.012671 2026] [ssl:error] [pid 2935572:tid 2935572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:38.308796 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.54:21050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:38.309417 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.54:21050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:38.820422 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.23:53674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:38.821076 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.23:53674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:39.058087 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.7:62858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:39.058730 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.7:62858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:39.440723 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.22:36880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:39.441361 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.22:36880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:39.807865 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.37:26958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:39.808496 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.37:26958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:39.880117 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.11:56438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:39.880736 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.11:56438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:40.244364 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.35:23612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:40.244990 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.35:23612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:40.268445 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.56:24512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:40.269077 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.56:24512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:40.753873 2026] [ssl:error] [pid 2941355:tid 2941355] (70014)End of file found: [client 216.73.216.199:2528] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:41.045377 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.48:20772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:41.046024 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.48:20772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:41.085135 2026] [ssl:error] [pid 2940880:tid 2940880] (EAI 2)Name or service not known: [client 144.76.19.72:34554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:41.085169 2026] [ssl:error] [pid 2940880:tid 2940880] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:41.151502 2026] [ssl:error] [pid 2937852:tid 2937852] (EAI 2)Name or service not known: [client 144.76.19.72:34560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:41.151536 2026] [ssl:error] [pid 2937852:tid 2937852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:41.195848 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.71:52752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:41.196464 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.71:52752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:41.257754 2026] [ssl:error] [pid 2939658:tid 2939658] (70014)End of file found: [client 216.73.216.199:35090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:41.504690 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.52:49166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:41.505324 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.52:49166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:41.823086 2026] [lsapi:warn] [pid 2940881:tid 2940881] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:41.854455 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.18:27178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:41.855086 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.18:27178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:42.012417 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.8:46124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:42.013037 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.8:46124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:42.259089 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:15393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:42.422456 2026] [access_compat:error] [pid 2934692:tid 2934692] [client 136.158.37.124:11708] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:44:42.870341 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.41:37040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:42.870963 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.41:37040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:42.905124 2026] [access_compat:error] [pid 2941399:tid 2941399] [client 45.158.164.139:35474] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:44:43.014218 2026] [lsapi:warn] [pid 2939727:tid 2939727] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:43.244807 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.12:35958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:43.245444 2026] [authz_core:error] [pid 2935573:tid 2935573] [client 57.141.0.12:35958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:43.490406 2026] [core:error] [pid 2942761:tid 2942761] [client 66.249.66.167:42259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:43.490435 2026] [core:error] [pid 2942761:tid 2942761] [client 66.249.66.167:42259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:43.494842 2026] [core:error] [pid 2940880:tid 2940880] [client 66.249.66.194:41569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:43.494875 2026] [core:error] [pid 2940880:tid 2940880] [client 66.249.66.194:41569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:43.497993 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.59:27244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:43.498625 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.59:27244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:43.525636 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.48:20784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:43.526258 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.48:20784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:43.641771 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.40:47850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:43.642393 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.40:47850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:44.165733 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.56:24524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:44.166432 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.56:24524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:44.190622 2026] [access_compat:error] [pid 2940880:tid 2940880] [client 113.188.236.93:35716] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/01/tesco-dvd.jpg, referer: https://google.com
[Thu Jul 30 11:44:44.190722 2026] [access_compat:error] [pid 2940880:tid 2940880] [client 113.188.236.93:35716] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://google.com
[Thu Jul 30 11:44:44.207257 2026] [ssl:error] [pid 2940881:tid 2940881] (EAI 2)Name or service not known: [client 144.76.19.72:34562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:44.207280 2026] [ssl:error] [pid 2940881:tid 2940881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:44.261434 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:34566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:44.261460 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:44.706646 2026] [authz_core:error] [pid 2940821:tid 2940821] [client 57.141.0.33:51678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:44.707480 2026] [authz_core:error] [pid 2940821:tid 2940821] [client 57.141.0.33:51678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:44.918334 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.1:20640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:44.918948 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.1:20640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:45.408607 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.17:64180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:45.409259 2026] [authz_core:error] [pid 2942761:tid 2942761] [client 57.141.0.17:64180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:45.624896 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.6:53068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:45.625534 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.6:53068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:46.251890 2026] [access_compat:error] [pid 2942761:tid 2942761] [client 103.153.199.157:43920] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/01/tesco-dvd.jpg, referer: https://www.neogaf.com/threads/best-tesco-store-on-earth.713963/
[Thu Jul 30 11:44:46.252005 2026] [access_compat:error] [pid 2942761:tid 2942761] [client 103.153.199.157:43920] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.neogaf.com/threads/best-tesco-store-on-earth.713963/
[Thu Jul 30 11:44:46.407605 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.12:35964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:46.408235 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.12:35964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:46.465954 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.15:30564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:46.466585 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.15:30564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:46.597882 2026] [core:error] [pid 2933234:tid 2933234] [client 66.249.64.170:35623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:46.597907 2026] [core:error] [pid 2933234:tid 2933234] [client 66.249.64.170:35623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:46.767714 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.41:37050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:46.768364 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.41:37050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:46.957466 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.16:57046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:46.958099 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.16:57046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:47.083659 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:50116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:47.314817 2026] [ssl:error] [pid 2941355:tid 2941355] (EAI 2)Name or service not known: [client 144.76.19.72:34574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:47.314854 2026] [ssl:error] [pid 2941355:tid 2941355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:47.323260 2026] [cgi:error] [pid 2937891:tid 2937891] [client 20.63.10.215:43691] AH02812: stderr from /home/nsnarvi/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:44:47.369490 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.66:33576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:47.370142 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.66:33576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:47.370912 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:34578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:47.370930 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:47.375440 2026] [core:error] [pid 2941397:tid 2941397] [client 66.249.66.8:59070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:47.375461 2026] [core:error] [pid 2941397:tid 2941397] [client 66.249.66.8:59070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:47.986224 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.7:44632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:47.986589 2026] [ssl:error] [pid 2937895:tid 2937895] (70014)End of file found: [client 216.73.216.199:49250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:47.986849 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.7:44632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:48.071632 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.23:62590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:48.072275 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.23:62590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:48.379681 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.44:26514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:48.380325 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.44:26514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:48.534714 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.6:53080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:48.535331 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.6:53080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:49.033527 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.69:49126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:49.034176 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.69:49126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:49.087522 2026] [ssl:error] [pid 2937888:tid 2937888] (70014)End of file found: [client 216.73.216.199:1974] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:49.289692 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.66:33586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:49.290318 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.66:33586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:49.795581 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.37:25858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:49.796263 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.37:25858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:50.424335 2026] [ssl:error] [pid 2916525:tid 2916525] (EAI 2)Name or service not known: [client 144.76.19.72:41708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:50.424369 2026] [ssl:error] [pid 2916525:tid 2916525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:50.479251 2026] [ssl:error] [pid 2942762:tid 2942762] (EAI 2)Name or service not known: [client 144.76.19.72:41712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:50.479294 2026] [ssl:error] [pid 2942762:tid 2942762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:50.617081 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.56:53240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:50.617704 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.56:53240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:50.950930 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.35:45190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:50.951567 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.35:45190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:51.213577 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.44:39908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:51.214204 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.44:39908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:51.403054 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.22:43916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:51.403716 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.22:43916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:51.692285 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.60:52654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:51.692922 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.60:52654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:51.941188 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.8:28436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:51.941823 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.8:28436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:51.969630 2026] [security2:error] [pid 2940201:tid 2940201] [client 185.191.171.10:52150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5069.0/prev_next,next.html"] [unique_id "amsrI6jRrQ6S_5IwRIjAiQAAAAQ"]
[Thu Jul 30 11:44:52.061564 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.22:43922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:52.062193 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.22:43922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:52.524570 2026] [lsapi:warn] [pid 2939658:tid 2939658] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:52.815176 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.55:42462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:52.815824 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.55:42462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:53.000863 2026] [ssl:error] [pid 2941355:tid 2941355] (70014)End of file found: [client 216.73.216.199:18950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:53.252946 2026] [access_compat:error] [pid 2940201:tid 2940201] [client 136.158.37.124:12528] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:44:53.372424 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.55:42470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:53.373077 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.55:42470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:53.494314 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.22:43928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:53.494936 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.22:43928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:53.534602 2026] [ssl:error] [pid 2942762:tid 2942762] (EAI 2)Name or service not known: [client 144.76.19.72:41720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:53.534646 2026] [ssl:error] [pid 2942762:tid 2942762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:53.588559 2026] [ssl:error] [pid 2939658:tid 2939658] (EAI 2)Name or service not known: [client 144.76.19.72:41722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:53.588587 2026] [ssl:error] [pid 2939658:tid 2939658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:53.652455 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.65:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:53.653108 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.65:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:53.705737 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.28:59900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:53.706362 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.28:59900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:53.891597 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.67:45972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:53.892225 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.67:45972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:53.898823 2026] [core:error] [pid 2942762:tid 2942762] [client 66.249.66.39:44903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:53.898855 2026] [core:error] [pid 2942762:tid 2942762] [client 66.249.66.39:44903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:44:53.906902 2026] [lsapi:warn] [pid 2945013:tid 2945013] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:44:54.205439 2026] [ssl:error] [pid 2937895:tid 2937895] (70014)End of file found: [client 216.73.216.199:57112] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:54.705912 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:49494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:54.706543 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:49494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:54.802534 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.71:42424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:54.803181 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.71:42424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:55.104108 2026] [ssl:error] [pid 2939658:tid 2939658] (70014)End of file found: [client 216.73.216.199:27543] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:55.225779 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.49:57880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:55.226429 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.49:57880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:55.263717 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.39:27442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:55.264341 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.39:27442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:55.607651 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:49512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:55.608274 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:49512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:55.852153 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.56:53254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:55.852798 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.56:53254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:56.643495 2026] [ssl:error] [pid 2937852:tid 2937852] (EAI 2)Name or service not known: [client 144.76.19.72:41726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:56.643543 2026] [ssl:error] [pid 2937852:tid 2937852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:56.698047 2026] [ssl:error] [pid 2937891:tid 2937891] (EAI 2)Name or service not known: [client 144.76.19.72:41734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:56.698089 2026] [ssl:error] [pid 2937891:tid 2937891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:56.822219 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.39:27458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:56.822885 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.39:27458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:56.988026 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 51.103.154.47:41092] AH01630: client denied by server configuration: /home/nkxfsjcw/public_html/wp-includes/Requests/error_log
[Thu Jul 30 11:44:57.008985 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 20.206.204.219:50922] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 11:44:57.027135 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.47:45992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:57.027771 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.47:45992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:57.401816 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.21:46706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:57.402469 2026] [authz_core:error] [pid 2937852:tid 2937852] [client 57.141.0.21:46706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:57.685302 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.11:49526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:57.685943 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.11:49526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:58.226297 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.62:31580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:58.226940 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.62:31580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:58.276871 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.2:54776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:58.277567 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.2:54776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:58.461797 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.65:37984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:58.462453 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.65:37984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:58.600396 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.19:33928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:58.601047 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.19:33928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:58.724714 2026] [ssl:error] [pid 2934692:tid 2934692] (70014)End of file found: [client 216.73.216.199:22632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:44:58.898459 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.50:37638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:44:58.899109 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.50:37638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:44:59.753518 2026] [ssl:error] [pid 2940201:tid 2940201] (EAI 2)Name or service not known: [client 144.76.19.72:33378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:59.753591 2026] [ssl:error] [pid 2940201:tid 2940201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:44:59.810034 2026] [ssl:error] [pid 2940881:tid 2940881] (EAI 2)Name or service not known: [client 144.76.19.72:33392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:44:59.810085 2026] [ssl:error] [pid 2940881:tid 2940881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:00.240450 2026] [ssl:error] [pid 2941355:tid 2941355] (70014)End of file found: [client 216.73.216.199:28553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:00.363729 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.24:45752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:00.364359 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.24:45752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:00.391087 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.69:34684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:00.391733 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.69:34684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:00.399847 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.66:24826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:00.400483 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.66:24826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:00.580849 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.20:42124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:00.581497 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.20:42124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:01.053472 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.28:59916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:01.054099 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.28:59916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:01.374326 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.14:57038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:01.374953 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.14:57038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:01.680974 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 66.249.66.34:55278] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:45:01.683704 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 66.249.66.34:55278] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:45:02.048868 2026] [ssl:error] [pid 2940199:tid 2940199] (70014)End of file found: [client 216.73.216.199:60323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:02.056967 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.30:46118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:02.057603 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.30:46118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:02.332084 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.33:25066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:02.332719 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.33:25066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:02.457095 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.10:40050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:02.457710 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.10:40050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:02.863374 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:33400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:02.863399 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:02.878845 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.1:59660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:02.879460 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.1:59660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:02.917955 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:33406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:02.917982 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:02.989261 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.32:55144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:02.989897 2026] [authz_core:error] [pid 2940201:tid 2940201] [client 57.141.0.32:55144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:03.200379 2026] [lsapi:warn] [pid 2941399:tid 2941399] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:03.405487 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.1:59674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:03.406123 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.1:59674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:03.859966 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.44:64286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:03.860597 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.44:64286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:04.048356 2026] [access_compat:error] [pid 2929315:tid 2929315] [client 136.158.37.124:13539] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:45:04.156818 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.65:47822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:04.157440 2026] [authz_core:error] [pid 2937888:tid 2937888] [client 57.141.0.65:47822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:04.635051 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.7:44604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:04.635691 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 57.141.0.7:44604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:04.933374 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.34:37432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:04.934006 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.34:37432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:05.101342 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.50:55590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:05.101965 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.50:55590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:05.336606 2026] [lsapi:warn] [pid 2937781:tid 2937781] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:05.364207 2026] [ssl:error] [pid 2940201:tid 2940201] (70014)End of file found: [client 216.73.216.199:14162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:05.397929 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.56:54004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:05.398561 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.56:54004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:05.642332 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.3:59690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:05.642955 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.3:59690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:05.845449 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.7:51890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:05.846079 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.7:51890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:05.864586 2026] [core:error] [pid 2916525:tid 2916525] [client 57.141.0.11:57612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:05.864613 2026] [core:error] [pid 2916525:tid 2916525] [client 57.141.0.11:57612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:05.974519 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:33414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:05.974548 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:06.027265 2026] [ssl:error] [pid 2943362:tid 2943362] (EAI 2)Name or service not known: [client 144.76.19.72:33424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:06.027300 2026] [ssl:error] [pid 2943362:tid 2943362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:06.192268 2026] [cgi:error] [pid 2932070:tid 2932070] [client 51.103.154.47:41092] AH02812: stderr from /home/nkxfsjcw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:45:06.257233 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.15:28878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:06.257856 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.15:28878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:06.909281 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.53:42200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:06.909891 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.53:42200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:07.240772 2026] [cgi:error] [pid 2937781:tid 2937781] [client 145.223.130.144:53332] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 11:45:07.343315 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.14:60264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:07.343977 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.14:60264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:07.467842 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.41:28418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:07.468474 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.41:28418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:07.913183 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.5:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:07.913806 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.5:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:07.970700 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.23:48656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:07.971314 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.23:48656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:08.373347 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:13071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:08.411775 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.32:39150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:08.412398 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.32:39150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:08.564226 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.25:25306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:08.564845 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.25:25306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:09.098213 2026] [ssl:error] [pid 2945597:tid 2945597] (EAI 2)Name or service not known: [client 144.76.19.72:33426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:09.098266 2026] [ssl:error] [pid 2945597:tid 2945597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:09.114317 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.71:23324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:09.114944 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.71:23324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:09.154860 2026] [ssl:error] [pid 2945599:tid 2945599] (EAI 2)Name or service not known: [client 144.76.19.72:33436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:09.154897 2026] [ssl:error] [pid 2945599:tid 2945599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:09.900246 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.62:46456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:09.900871 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.62:46456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:10.086173 2026] [core:error] [pid 2945597:tid 2945597] [client 66.249.66.167:52691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:10.086204 2026] [core:error] [pid 2945597:tid 2945597] [client 66.249.66.167:52691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:10.577781 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.27:58958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:10.578403 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.27:58958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:10.687150 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.6:52656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:10.687771 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.6:52656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:10.844645 2026] [authz_core:error] [pid 2945548:tid 2945548] [client 57.141.0.51:45006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:10.845275 2026] [authz_core:error] [pid 2945548:tid 2945548] [client 57.141.0.51:45006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:10.886677 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.13:59858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:10.887302 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.13:59858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:11.114189 2026] [ssl:error] [pid 2901124:tid 2901124] (70014)End of file found: [client 216.73.216.199:39859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:11.323131 2026] [security2:error] [pid 2934692:tid 2934692] [client 119.91.20.139:33024] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "render-farm.co.uk"] [uri "/"] [unique_id "amsrN9GcNlKZlfbe4Jt5nQAAAAs"]
[Thu Jul 30 11:45:11.602389 2026] [ssl:error] [pid 2945597:tid 2945597] (70014)End of file found: [client 216.73.216.199:11041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:11.967230 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.33:45958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:11.967851 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.33:45958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:12.022744 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.54:44116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:12.023366 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.54:44116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:12.052766 2026] [authz_core:error] [pid 2945548:tid 2945548] [client 57.141.0.37:25116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:12.053387 2026] [authz_core:error] [pid 2945548:tid 2945548] [client 57.141.0.37:25116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:12.212833 2026] [ssl:error] [pid 2940882:tid 2940882] (EAI 2)Name or service not known: [client 144.76.19.72:24692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:12.212860 2026] [ssl:error] [pid 2940882:tid 2940882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:12.268642 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:24694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:12.268671 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:12.548288 2026] [authz_core:error] [pid 2945518:tid 2945518] [client 57.141.0.54:44120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:12.548951 2026] [authz_core:error] [pid 2945518:tid 2945518] [client 57.141.0.54:44120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:12.926985 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.40:21938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:12.927616 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.40:21938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:13.381487 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.1:44636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:13.382123 2026] [authz_core:error] [pid 2937853:tid 2937853] [client 57.141.0.1:44636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:13.728891 2026] [authz_core:error] [pid 2945548:tid 2945548] [client 57.141.0.65:53376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:13.729529 2026] [authz_core:error] [pid 2945548:tid 2945548] [client 57.141.0.65:53376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:13.886617 2026] [lsapi:warn] [pid 2940882:tid 2940882] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:14.080348 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.1:44644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:14.080979 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.1:44644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:14.105747 2026] [security2:error] [pid 2937888:tid 2937888] [client 47.84.87.243:12477] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrOqlHQpLMIVP8tYj0aQAAADs"]
[Thu Jul 30 11:45:14.105793 2026] [security2:error] [pid 2937888:tid 2937888] [client 47.84.87.243:12477] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrOqlHQpLMIVP8tYj0aQAAADs"]
[Thu Jul 30 11:45:14.106052 2026] [security2:error] [pid 2937888:tid 2937888] [client 47.84.87.243:12477] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrOqlHQpLMIVP8tYj0aQAAADs"]
[Thu Jul 30 11:45:14.125325 2026] [core:error] [pid 2933076:tid 2933076] (13)Permission denied: [client 216.73.216.199:4607] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/slabs
[Thu Jul 30 11:45:14.207127 2026] [authz_core:error] [pid 2941399:tid 2941399] [client 20.206.204.219:54348] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:45:14.733990 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.44:39966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:14.734684 2026] [authz_core:error] [pid 2937320:tid 2937320] [client 57.141.0.44:39966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:14.843356 2026] [access_compat:error] [pid 2934692:tid 2934692] [client 136.158.37.124:14569] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:45:14.972009 2026] [lsapi:warn] [pid 2941355:tid 2941355] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:15.097124 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.44:39974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:15.097747 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.44:39974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:15.155021 2026] [core:error] [pid 2945548:tid 2945548] [client 57.141.0.21:28796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:15.155055 2026] [core:error] [pid 2945548:tid 2945548] [client 57.141.0.21:28796] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:15.324721 2026] [ssl:error] [pid 2937895:tid 2937895] (EAI 2)Name or service not known: [client 144.76.19.72:24698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:15.324759 2026] [ssl:error] [pid 2937895:tid 2937895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:15.382386 2026] [ssl:error] [pid 2929199:tid 2929199] (EAI 2)Name or service not known: [client 144.76.19.72:24714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:15.382419 2026] [ssl:error] [pid 2929199:tid 2929199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:15.578675 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.68:25152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:15.579329 2026] [authz_core:error] [pid 2937781:tid 2937781] [client 57.141.0.68:25152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:16.101208 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.55:51254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:16.101823 2026] [authz_core:error] [pid 2940882:tid 2940882] [client 57.141.0.55:51254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:16.131597 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.33:45970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:16.132214 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.33:45970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:16.192654 2026] [security2:error] [pid 2939727:tid 2939727] [client 116.102.73.180:41628] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrPNtasZ9nLvIlpVzr3gAAAAE"]
[Thu Jul 30 11:45:16.192699 2026] [security2:error] [pid 2939727:tid 2939727] [client 116.102.73.180:41628] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrPNtasZ9nLvIlpVzr3gAAAAE"]
[Thu Jul 30 11:45:16.192940 2026] [security2:error] [pid 2939727:tid 2939727] [client 116.102.73.180:41628] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrPNtasZ9nLvIlpVzr3gAAAAE"]
[Thu Jul 30 11:45:16.539228 2026] [ssl:error] [pid 2933076:tid 2933076] (70014)End of file found: [client 216.73.216.199:4607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:16.637360 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.42:57438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:16.637985 2026] [authz_core:error] [pid 2929199:tid 2929199] [client 57.141.0.42:57438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:16.643028 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.66:54392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:16.643649 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.66:54392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:16.918739 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.31:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:16.919358 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.31:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:17.115559 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.18:60650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:17.116190 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.18:60650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:17.243646 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.6:42216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:17.244273 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.6:42216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:17.897589 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.20:56330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:17.898215 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.20:56330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:18.345987 2026] [core:error] [pid 2939727:tid 2939727] (13)Permission denied: [client 216.73.216.199:1983] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS1/uartclk
[Thu Jul 30 11:45:18.435990 2026] [ssl:error] [pid 2940199:tid 2940199] (EAI 2)Name or service not known: [client 144.76.19.72:24730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:18.436023 2026] [ssl:error] [pid 2940199:tid 2940199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:18.487617 2026] [ssl:error] [pid 2937888:tid 2937888] (EAI 2)Name or service not known: [client 144.76.19.72:24746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:18.487646 2026] [ssl:error] [pid 2937888:tid 2937888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:18.757852 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.36:30010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:18.758491 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.36:30010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:18.796517 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.39:49676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:18.797137 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.39:49676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:19.408811 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.25:39862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:19.409433 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.25:39862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:19.471326 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.8:25300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:19.472016 2026] [authz_core:error] [pid 2933238:tid 2933238] [client 57.141.0.8:25300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:19.667024 2026] [authz_core:error] [pid 2945598:tid 2945598] [client 57.141.0.28:56594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:19.667716 2026] [authz_core:error] [pid 2945598:tid 2945598] [client 57.141.0.28:56594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:19.713803 2026] [ssl:error] [pid 2939727:tid 2939727] (70014)End of file found: [client 216.73.216.199:1983] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:19.848425 2026] [security2:error] [pid 2901124:tid 2901124] [client 94.234.66.192:1413] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrP7_s7aEYVV1RiZDffAAAACE"]
[Thu Jul 30 11:45:19.848474 2026] [security2:error] [pid 2901124:tid 2901124] [client 94.234.66.192:1413] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrP7_s7aEYVV1RiZDffAAAACE"]
[Thu Jul 30 11:45:19.848748 2026] [security2:error] [pid 2901124:tid 2901124] [client 94.234.66.192:1413] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrP7_s7aEYVV1RiZDffAAAACE"]
[Thu Jul 30 11:45:20.123483 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:57770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:20.124140 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.11:57770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:20.166645 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.58:53792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:20.167259 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.58:53792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:21.203694 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.35:55034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:21.204456 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.35:55034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:21.223532 2026] [ssl:error] [pid 2937892:tid 2937892] (70014)End of file found: [client 216.73.216.199:1604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:21.360746 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.30:28836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:21.361370 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.30:28836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:21.395065 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.21:28806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:21.395698 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.21:28806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:21.543965 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:48392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:21.543988 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:21.548292 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.52:33498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:21.548912 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.52:33498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:21.600959 2026] [ssl:error] [pid 2945050:tid 2945050] (EAI 2)Name or service not known: [client 144.76.19.72:48396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:21.600989 2026] [ssl:error] [pid 2945050:tid 2945050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:21.960305 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.50:54444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:21.960921 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.50:54444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:22.432553 2026] [ssl:error] [pid 2934692:tid 2934692] (70014)End of file found: [client 216.73.216.199:6159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:22.472157 2026] [core:error] [pid 2901124:tid 2901124] [client 66.249.66.167:45727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:22.472184 2026] [core:error] [pid 2901124:tid 2901124] [client 66.249.66.167:45727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:22.663948 2026] [security2:error] [pid 2940880:tid 2940880] [client 167.172.227.247:40144] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsrQoy1gdxMyx_6NNZcxAAAABo"]
[Thu Jul 30 11:45:23.027855 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.42:51746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:23.028484 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.42:51746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:23.054783 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.63:29876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:23.055465 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.63:29876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:24.066871 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.7:41968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:24.067488 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.7:41968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:24.545745 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:24.566797 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.24:27182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:24.567483 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.24:27182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:24.655760 2026] [ssl:error] [pid 2945050:tid 2945050] (EAI 2)Name or service not known: [client 144.76.19.72:48406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:24.655787 2026] [ssl:error] [pid 2945050:tid 2945050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:24.708380 2026] [ssl:error] [pid 2945049:tid 2945049] (EAI 2)Name or service not known: [client 144.76.19.72:48412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:24.708414 2026] [ssl:error] [pid 2945049:tid 2945049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:24.740839 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.54:46056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:24.741465 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.54:46056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:24.831319 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.11:57774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:24.831938 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.11:57774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:25.254960 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.63:29886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:25.255585 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.63:29886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:25.285933 2026] [security2:error] [pid 2940880:tid 2940880] [client 175.27.136.83:44688] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tripodhome.co.uk"] [uri "/"] [unique_id "amsrRYy1gdxMyx_6NNZcxgAAABo"]
[Thu Jul 30 11:45:25.579802 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.58:45872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:25.580423 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.58:45872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:25.671815 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.56:29278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:25.672439 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.56:29278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:25.691899 2026] [lsapi:warn] [pid 2945049:tid 2945049] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:25.694793 2026] [access_compat:error] [pid 2945050:tid 2945050] [client 136.158.37.124:15524] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:45:26.380816 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.29:48392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:26.381559 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.29:48392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:26.470303 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.7:23090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:26.470924 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.7:23090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:26.639867 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.47:52654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:26.640496 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.47:52654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:27.132144 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.14:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:27.132760 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.14:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:27.136234 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.69:28882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:27.136897 2026] [authz_core:error] [pid 2916525:tid 2916525] [client 57.141.0.69:28882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:27.759662 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.64:48058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:27.760299 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.64:48058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:27.760533 2026] [ssl:error] [pid 2945013:tid 2945013] (EAI 2)Name or service not known: [client 144.76.19.72:48424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:27.760565 2026] [ssl:error] [pid 2945013:tid 2945013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:27.812621 2026] [ssl:error] [pid 2940880:tid 2940880] (EAI 2)Name or service not known: [client 144.76.19.72:48438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:27.812652 2026] [ssl:error] [pid 2940880:tid 2940880] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:28.306193 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.39:48042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:28.306812 2026] [authz_core:error] [pid 2940199:tid 2940199] [client 57.141.0.39:48042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:28.589785 2026] [authz_core:error] [pid 2945599:tid 2945599] [client 57.141.0.32:20070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:28.590412 2026] [authz_core:error] [pid 2945599:tid 2945599] [client 57.141.0.32:20070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:28.686787 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.32:20080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:28.687405 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.32:20080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:29.053698 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.55:22242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:29.054320 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.55:22242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:29.306952 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.37:53186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:29.307583 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.37:53186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:29.674329 2026] [core:error] [pid 2940881:tid 2940881] (13)Permission denied: [client 216.73.216.199:45990] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:1d/eject
[Thu Jul 30 11:45:29.708833 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.22:44078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:29.709452 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.22:44078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:29.847733 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 66.249.66.33:49588] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:45:29.850444 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 66.249.66.33:49588] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:45:29.976035 2026] [ssl:error] [pid 2940881:tid 2940881] (70014)End of file found: [client 216.73.216.199:45990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:30.332280 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.60:63598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:30.332918 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.60:63598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:30.869631 2026] [ssl:error] [pid 2937409:tid 2937409] (EAI 2)Name or service not known: [client 144.76.19.72:63722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:30.869679 2026] [ssl:error] [pid 2937409:tid 2937409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:30.924757 2026] [ssl:error] [pid 2943309:tid 2943309] (EAI 2)Name or service not known: [client 144.76.19.72:63732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:30.924799 2026] [ssl:error] [pid 2943309:tid 2943309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:31.195218 2026] [authz_core:error] [pid 2946183:tid 2946183] [client 57.141.0.42:42500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:31.195869 2026] [authz_core:error] [pid 2946183:tid 2946183] [client 57.141.0.42:42500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:31.480374 2026] [core:error] [pid 2934692:tid 2934692] (13)Permission denied: [client 216.73.216.199:38817] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS3/line
[Thu Jul 30 11:45:31.780978 2026] [core:error] [pid 2934692:tid 2934692] (13)Permission denied: [client 216.73.216.199:38817] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty0/subsystem/ttyS2/close_delay
[Thu Jul 30 11:45:32.333093 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.29:36258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:32.333745 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.29:36258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:32.338901 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.66:26358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:32.339583 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.66:26358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:32.503851 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.37:31638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:32.504472 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.37:31638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:32.758691 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.38:23056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:32.759365 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.38:23056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:33.010881 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.30:52348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:33.011567 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.30:52348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:33.186768 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.51:64826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:33.187425 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.51:64826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:33.524540 2026] [authz_core:error] [pid 2946238:tid 2946238] [client 57.141.0.38:23070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:33.525261 2026] [authz_core:error] [pid 2946238:tid 2946238] [client 57.141.0.38:23070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:33.541934 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.19:35946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:33.542593 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.19:35946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:33.572395 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.5:64360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:33.573038 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.5:64360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:33.698984 2026] [authz_core:error] [pid 2946238:tid 2946238] [client 57.141.0.31:41712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:33.699680 2026] [authz_core:error] [pid 2946238:tid 2946238] [client 57.141.0.31:41712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:33.916543 2026] [authz_core:error] [pid 2946238:tid 2946238] [client 57.141.0.58:53212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:33.917226 2026] [authz_core:error] [pid 2946238:tid 2946238] [client 57.141.0.58:53212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:34.002402 2026] [ssl:error] [pid 2946238:tid 2946238] (EAI 2)Name or service not known: [client 144.76.19.72:63748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:34.002445 2026] [ssl:error] [pid 2946238:tid 2946238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:34.156739 2026] [ssl:error] [pid 2942762:tid 2942762] (EAI 2)Name or service not known: [client 144.76.19.72:63762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:34.156764 2026] [ssl:error] [pid 2942762:tid 2942762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:34.532594 2026] [ssl:error] [pid 2946240:tid 2946240] (70014)End of file found: [client 216.73.216.199:60344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:34.647103 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.63:42904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:34.647728 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.63:42904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:34.749742 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.43:28870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:34.750414 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.43:28870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:35.302533 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.55:45392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:35.303190 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.55:45392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:35.310812 2026] [lsapi:warn] [pid 2946281:tid 2946281] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:35.390977 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.66:55562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:35.391631 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.66:55562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:35.732294 2026] [ssl:error] [pid 2946239:tid 2946239] (70014)End of file found: [client 216.73.216.199:1855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:36.262242 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.62:58156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:36.262905 2026] [authz_core:error] [pid 2921808:tid 2921808] [client 57.141.0.62:58156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:36.263224 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.18:42312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:36.263844 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.18:42312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:36.331480 2026] [lsapi:warn] [pid 2941397:tid 2941397] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:36.447399 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.1:20552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:36.448026 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.1:20552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:36.478351 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.34:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:36.478980 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.34:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:36.581754 2026] [access_compat:error] [pid 2929315:tid 2929315] [client 136.158.37.124:16301] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:45:36.935930 2026] [ssl:error] [pid 2941355:tid 2941355] (70014)End of file found: [client 216.73.216.199:39034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:36.953324 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.1:20560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:36.954001 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.1:20560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:37.214610 2026] [ssl:error] [pid 2921808:tid 2921808] (EAI 2)Name or service not known: [client 144.76.19.72:63768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:37.214662 2026] [ssl:error] [pid 2921808:tid 2921808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:37.267551 2026] [ssl:error] [pid 2946281:tid 2946281] (EAI 2)Name or service not known: [client 144.76.19.72:63782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:37.267591 2026] [ssl:error] [pid 2946281:tid 2946281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:37.554916 2026] [authz_core:error] [pid 2946183:tid 2946183] [client 57.141.0.68:51700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:37.555551 2026] [authz_core:error] [pid 2946183:tid 2946183] [client 57.141.0.68:51700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:37.892909 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.28:63790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:37.893543 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.28:63790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:38.111037 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.46:61834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:38.111668 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.46:61834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:38.243632 2026] [security2:error] [pid 2921808:tid 2921808] [client 185.191.171.15:52410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/what-is-repatriation-hospital"] [unique_id "amsrUtCLv3mVp9ri8k5UfAAAADE"]
[Thu Jul 30 11:45:38.275349 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.7:46418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:38.275965 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.7:46418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:39.340816 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.18:42314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:39.341529 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.18:42314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:39.526390 2026] [security2:error] [pid 2943361:tid 2943361] [client 114.119.158.38:58499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/beverley-fitzjohn/"] [unique_id "amsrU5quDgom4s8_fCJFjgAAACY"], referer: http://www.erskinenazarene.co.uk/preacher/beverley-fitzjohn/
[Thu Jul 30 11:45:39.577378 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.39:51786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:39.578005 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.39:51786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:40.114718 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.55:45404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:40.115344 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.55:45404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:40.245608 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.12:38470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:40.246237 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.12:38470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:40.254030 2026] [ssl:error] [pid 2937409:tid 2937409] (70014)End of file found: [client 216.73.216.199:62516] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:40.320017 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.26:25400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:40.320679 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.26:25400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:40.337524 2026] [ssl:error] [pid 2946284:tid 2946284] (EAI 2)Name or service not known: [client 144.76.19.72:31362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:40.337567 2026] [ssl:error] [pid 2946284:tid 2946284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:40.391219 2026] [ssl:error] [pid 2937895:tid 2937895] (EAI 2)Name or service not known: [client 144.76.19.72:31376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:40.391243 2026] [ssl:error] [pid 2937895:tid 2937895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:40.497571 2026] [security2:error] [pid 2943361:tid 2943361] [client 114.119.158.38:58501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/preacher/beverley-fitzjohn/"] [unique_id "amsrVJquDgom4s8_fCJFjwAAACY"], referer: http://www.erskinenazarene.co.uk/preacher/beverley-fitzjohn/
[Thu Jul 30 11:45:40.520672 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.20:39092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:40.521286 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.20:39092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:41.062351 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.65:64008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:41.062975 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.65:64008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:41.382913 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.58:53226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:41.383607 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.58:53226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:41.695759 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.31:49088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:41.696431 2026] [authz_core:error] [pid 2946284:tid 2946284] [client 57.141.0.31:49088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:41.774569 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.6:61030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:41.775190 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.6:61030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:42.362271 2026] [core:error] [pid 2941397:tid 2941397] (13)Permission denied: [client 216.73.216.199:34800] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/run/sm-notify.pid
[Thu Jul 30 11:45:42.712095 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.11:52254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:42.712729 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.11:52254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:42.799946 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.64:24806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:42.800579 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.64:24806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:42.915876 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.16:56282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:42.916531 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.16:56282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:42.943173 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.67:29592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:42.943787 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.67:29592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:43.209014 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.45:55128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:43.209653 2026] [authz_core:error] [pid 2943361:tid 2943361] [client 57.141.0.45:55128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:43.266315 2026] [ssl:error] [pid 2941397:tid 2941397] (70014)End of file found: [client 216.73.216.199:34800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:43.423522 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.31:49096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:43.424150 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.31:49096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:43.446155 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:31382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:43.446211 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:43.482079 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.43:43902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:43.482702 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.43:43902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:43.567141 2026] [ssl:error] [pid 2941355:tid 2941355] (EAI 2)Name or service not known: [client 144.76.19.72:31392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:43.567179 2026] [ssl:error] [pid 2941355:tid 2941355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:44.975341 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.33:63882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:44.975963 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.33:63882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:45.077082 2026] [core:crit] [pid 2946558:tid 2946558] (13)Permission denied: [client 216.73.216.199:23721] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/imunify360/imunify360.config.d/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/imunify360/imunify360.config.d/' is executable
[Thu Jul 30 11:45:45.382494 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.62:24484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:45.383177 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.62:24484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:45.477599 2026] [authz_core:error] [pid 2946283:tid 2946283] [client 57.141.0.27:49466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:45.478242 2026] [authz_core:error] [pid 2946283:tid 2946283] [client 57.141.0.27:49466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:45.524926 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 20.206.204.219:60022] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 11:45:45.951895 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.23:28694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:45.952577 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.23:28694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:45.996769 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.4:36364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:45.997860 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.4:36364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:46.071596 2026] [lsapi:warn] [pid 2927346:tid 2927346] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:46.303802 2026] [core:error] [pid 2946558:tid 2946558] (13)Permission denied: [client 216.73.216.199:23721] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/subsystem/ttyS2/close_delay
[Thu Jul 30 11:45:46.621801 2026] [ssl:error] [pid 2946241:tid 2946241] (EAI 2)Name or service not known: [client 144.76.19.72:31406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:46.621840 2026] [ssl:error] [pid 2946241:tid 2946241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:46.675532 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:31416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:46.675565 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:46.714779 2026] [authz_core:error] [pid 2946183:tid 2946183] [client 57.141.0.29:29696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:46.715432 2026] [authz_core:error] [pid 2946183:tid 2946183] [client 57.141.0.29:29696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:46.749892 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.10:62598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:46.750524 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.10:62598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:46.990092 2026] [lsapi:warn] [pid 2939658:tid 2939658] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:47.316169 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.29:29708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:47.316791 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.29:29708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:47.363594 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.47:28668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:47.364218 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.47:28668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:47.515444 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.1:62578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:47.516060 2026] [authz_core:error] [pid 2934692:tid 2934692] [client 57.141.0.1:62578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:47.709120 2026] [access_compat:error] [pid 2946241:tid 2946241] [client 136.158.37.124:17191] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:45:48.086412 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.24:21082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:48.087051 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.24:21082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:48.115557 2026] [ssl:error] [pid 2940880:tid 2940880] (70014)End of file found: [client 216.73.216.199:63880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:48.181947 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.33:63884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:48.182601 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.33:63884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:48.262336 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 45.158.164.139:52424] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:45:48.929252 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.50:23648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:48.929682 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.33:63900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:48.929880 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.50:23648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:48.930361 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.33:63900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:49.320667 2026] [core:error] [pid 2946558:tid 2946558] (13)Permission denied: [client 216.73.216.199:23721] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/libata/sections/__kcrctab
[Thu Jul 30 11:45:49.508461 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.53:36142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:49.509195 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.53:36142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:49.627917 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.23:28710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:49.628618 2026] [authz_core:error] [pid 2941397:tid 2941397] [client 57.141.0.23:28710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:49.719639 2026] [security2:error] [pid 2901124:tid 2901124] [client 43.157.172.39:60814] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/"] [unique_id "amsrXb_s7aEYVV1RiZDfhwAAACE"]
[Thu Jul 30 11:45:49.734062 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:29120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:49.734104 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:49.788743 2026] [ssl:error] [pid 2946240:tid 2946240] (EAI 2)Name or service not known: [client 144.76.19.72:29126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:49.788798 2026] [ssl:error] [pid 2946240:tid 2946240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:49.812103 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.66:37030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:49.812793 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.66:37030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:49.874909 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.26:42676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:49.875543 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.26:42676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:49.927325 2026] [ssl:error] [pid 2946558:tid 2946558] (70014)End of file found: [client 216.73.216.199:23721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:50.684299 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.62:24488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:50.685000 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.62:24488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:50.827995 2026] [security2:error] [pid 2946280:tid 2946280] [client 43.157.172.39:34368] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "amsrXhVmqRHdhmp7qjYUogAAACU"], referer: http://taylorshouse.com
[Thu Jul 30 11:45:50.830835 2026] [core:error] [pid 2939658:tid 2939658] [client 66.249.66.194:44825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:50.830854 2026] [core:error] [pid 2939658:tid 2939658] [client 66.249.66.194:44825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:50.831836 2026] [core:error] [pid 2945050:tid 2945050] [client 66.249.66.167:40499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:50.831869 2026] [core:error] [pid 2945050:tid 2945050] [client 66.249.66.167:40499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:51.240591 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.31:23078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:51.241218 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.31:23078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:51.252392 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.30:64344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:51.253001 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.30:64344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:51.341999 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.33:63916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:51.342687 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.33:63916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:51.795084 2026] [security2:error] [pid 2934692:tid 2934692] [client 43.157.172.39:35792] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "amsrX9GcNlKZlfbe4Jt5tQAAAAs"], referer: http://www.taylorshouse.com/home
[Thu Jul 30 11:45:51.818762 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.21:53242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:51.819434 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.21:53242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:52.384012 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.28:33806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:52.384659 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.28:33806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:52.497271 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.13:52670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:52.497941 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.13:52670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:52.845407 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:29132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:52.845435 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:52.897151 2026] [ssl:error] [pid 2941355:tid 2941355] (EAI 2)Name or service not known: [client 144.76.19.72:29138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:52.897179 2026] [ssl:error] [pid 2941355:tid 2941355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:53.112037 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.7:30070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:53.112670 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.7:30070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:53.238871 2026] [ssl:error] [pid 2933234:tid 2933234] (70014)End of file found: [client 216.73.216.199:40868] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:53.475433 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.13:40114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:53.476200 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.13:40114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:53.522227 2026] [authz_core:error] [pid 2946283:tid 2946283] [client 57.141.0.46:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:53.522873 2026] [authz_core:error] [pid 2946283:tid 2946283] [client 57.141.0.46:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:53.573704 2026] [security2:error] [pid 2937895:tid 2937895] [client 43.157.172.39:38438] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "amsrYakU3yIAC4beO1-VoAAAAEE"], referer: http://www.taylorshouse.com/home/
[Thu Jul 30 11:45:53.675025 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.8:39164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:53.675734 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.8:39164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:53.741236 2026] [security2:error] [pid 2941355:tid 2941355] [client 216.73.216.199:15230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/link/conf/default.ini"] [unique_id "amsrYWV1qwM8-C2UNvShKwAAAB8"]
[Thu Jul 30 11:45:53.741572 2026] [security2:error] [pid 2941355:tid 2941355] [client 216.73.216.199:15230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/link/conf/default.ini"] [unique_id "amsrYWV1qwM8-C2UNvShKwAAAB8"]
[Thu Jul 30 11:45:53.741791 2026] [security2:error] [pid 2941355:tid 2941355] [client 216.73.216.199:15230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/link/conf/default.ini"] [unique_id "amsrYWV1qwM8-C2UNvShKwAAAB8"]
[Thu Jul 30 11:45:54.775667 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.64:20984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:54.776295 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.64:20984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:54.913469 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.36:57920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:54.914106 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.36:57920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:54.994959 2026] [security2:error] [pid 2941678:tid 2941678] [client 20.91.140.156:53950] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saturnsportscouk.saturnsports.com"] [uri "/wp-config.php"] [unique_id "amsrYnSViXzIVXWi2BZ71gAAAAw"]
[Thu Jul 30 11:45:54.995127 2026] [security2:error] [pid 2941678:tid 2941678] [client 20.91.140.156:53950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saturnsportscouk.saturnsports.com"] [uri "/wp-config.php"] [unique_id "amsrYnSViXzIVXWi2BZ71gAAAAw"]
[Thu Jul 30 11:45:54.995288 2026] [security2:error] [pid 2941678:tid 2941678] [client 20.91.140.156:53950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saturnsportscouk.saturnsports.com"] [uri "/403.shtml"] [unique_id "amsrYnSViXzIVXWi2BZ71gAAAAw"]
[Thu Jul 30 11:45:55.134962 2026] [core:error] [pid 2946277:tid 2946277] [client 66.249.64.170:37367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:55.134991 2026] [core:error] [pid 2946277:tid 2946277] [client 66.249.64.170:37367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:45:55.217202 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.16:24210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:55.217841 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.16:24210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:55.252681 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.26:63930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:55.253323 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.26:63930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:55.830655 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.29:40016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:55.831312 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.29:40016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:55.952738 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:29146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:55.952770 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:56.007235 2026] [ssl:error] [pid 2940881:tid 2940881] (EAI 2)Name or service not known: [client 144.76.19.72:29156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:56.007257 2026] [ssl:error] [pid 2940881:tid 2940881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:56.283133 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.23:51092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:56.283758 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.23:51092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:56.484669 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.50:44612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:56.487442 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.50:44612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:56.491205 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.11:51010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:56.491805 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.11:51010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:56.555206 2026] [ssl:error] [pid 2941355:tid 2941355] (70014)End of file found: [client 216.73.216.199:15230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:56.743326 2026] [lsapi:warn] [pid 2941678:tid 2941678] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:56.842193 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.23:51096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:56.842814 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.23:51096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:57.516098 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.8:60458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:57.516731 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.8:60458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:57.674260 2026] [lsapi:warn] [pid 2939658:tid 2939658] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:45:57.733141 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.56:35574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:57.733812 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.56:35574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:57.766374 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.16:60248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:57.766994 2026] [authz_core:error] [pid 2933076:tid 2933076] [client 57.141.0.16:60248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:58.280490 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.30:41060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:58.281129 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.30:41060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:58.393864 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.30:41062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:58.394487 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.30:41062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:58.519396 2026] [access_compat:error] [pid 2942762:tid 2942762] [client 136.158.37.124:18025] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:45:58.663271 2026] [ssl:error] [pid 2940881:tid 2940881] (70014)End of file found: [client 216.73.216.199:43585] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:45:59.063599 2026] [ssl:error] [pid 2946277:tid 2946277] (EAI 2)Name or service not known: [client 144.76.19.72:29158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:59.063640 2026] [ssl:error] [pid 2946277:tid 2946277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:59.083405 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.32:33714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:59.084026 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.32:33714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:59.119740 2026] [ssl:error] [pid 2943362:tid 2943362] (EAI 2)Name or service not known: [client 144.76.19.72:29166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:45:59.119768 2026] [ssl:error] [pid 2943362:tid 2943362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:45:59.292597 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.60:57638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:59.293228 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.60:57638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:45:59.424281 2026] [authz_core:error] [pid 2947111:tid 2947111] [client 57.141.0.6:20396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:45:59.424929 2026] [authz_core:error] [pid 2947111:tid 2947111] [client 57.141.0.6:20396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:00.052097 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.10:38320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:00.052724 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.10:38320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:00.103206 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.65:29208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:00.103836 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.65:29208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:00.354445 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.56:35578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:00.355058 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.56:35578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:00.781023 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 40.77.167.241:60310] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:46:00.783682 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 40.77.167.241:60310] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:46:01.083894 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.22:30324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:01.084540 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.22:30324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:01.215236 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.46:53472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:01.215854 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.46:53472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:01.930199 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.44:20118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:01.930813 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.44:20118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:01.951110 2026] [security2:error] [pid 2937892:tid 2937892] [client 110.42.208.131:58328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "elhassanartist.com"] [uri "/"] [unique_id "amsraTI2fGiLz8iZ2GnPnwAAAD4"]
[Thu Jul 30 11:46:01.954019 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.18:63474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:01.954649 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.18:63474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:02.174911 2026] [ssl:error] [pid 2946211:tid 2946211] (EAI 2)Name or service not known: [client 144.76.19.72:64332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:02.174946 2026] [ssl:error] [pid 2946211:tid 2946211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:02.231636 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:64348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:02.231681 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:02.276684 2026] [ssl:error] [pid 2939658:tid 2939658] (70014)End of file found: [client 216.73.216.199:44361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:02.568565 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.55:45980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:02.569233 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.55:45980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:02.948390 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.20:62826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:02.949034 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.20:62826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:03.407391 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.22:30336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:03.408011 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.22:30336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:03.459405 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.6:45362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:03.460033 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.6:45362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:04.153762 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.58:24612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:04.154389 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.58:24612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:04.269030 2026] [ssl:error] [pid 2946240:tid 2946240] (70014)End of file found: [client 216.73.216.199:59109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:04.380927 2026] [security2:error] [pid 2932070:tid 2932070] [client 110.249.202.19:48714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amsrbDi_I6dPPHEB6cyS7wAAACA"]
[Thu Jul 30 11:46:04.407564 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.13:42648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:04.408193 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.13:42648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:04.834321 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.62:34880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:04.834944 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.62:34880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:05.029870 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.12:29498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:05.030490 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.12:29498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:05.071898 2026] [core:error] [pid 2937892:tid 2937892] [client 66.249.66.39:61688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:05.071923 2026] [core:error] [pid 2937892:tid 2937892] [client 66.249.66.39:61688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:05.132642 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.37:48178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:05.133270 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.37:48178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:05.242814 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.53:54968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:05.243496 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.53:54968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:05.286421 2026] [ssl:error] [pid 2940880:tid 2940880] (EAI 2)Name or service not known: [client 144.76.19.72:64364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:05.286464 2026] [ssl:error] [pid 2940880:tid 2940880] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:05.339517 2026] [ssl:error] [pid 2943362:tid 2943362] (EAI 2)Name or service not known: [client 144.76.19.72:64380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:05.339547 2026] [ssl:error] [pid 2943362:tid 2943362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:06.068625 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.45:32864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:06.069253 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.45:32864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:06.183240 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.27:59832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:06.183883 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.27:59832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:06.883936 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 20.236.24.71:53433] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 11:46:06.883997 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 20.236.24.71:53433] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 11:46:06.988852 2026] [core:error] [pid 2946239:tid 2946239] (13)Permission denied: [client 216.73.216.199:47990] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/thunderbolt/drivers/pci:thunderbolt/unbind
[Thu Jul 30 11:46:07.005473 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.64:36166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:07.006124 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.64:36166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:07.052498 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.8:45770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:07.053128 2026] [authz_core:error] [pid 2946277:tid 2946277] [client 57.141.0.8:45770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:07.313280 2026] [authz_core:error] [pid 2946283:tid 2946283] [client 57.141.0.34:30826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:07.313930 2026] [authz_core:error] [pid 2946283:tid 2946283] [client 57.141.0.34:30826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:07.438378 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.24:43946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:07.439605 2026] [authz_core:error] [pid 2946211:tid 2946211] [client 57.141.0.24:43946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:07.475099 2026] [lsapi:warn] [pid 2941678:tid 2941678] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:07.703686 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.13:42664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:07.704336 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.13:42664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:07.904466 2026] [ssl:error] [pid 2946239:tid 2946239] (70014)End of file found: [client 216.73.216.199:47990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:08.178204 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.52:45506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:08.178835 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.52:45506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:08.240543 2026] [security2:error] [pid 2901124:tid 2901124] [client 2.134.55.120:40554] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrcL_s7aEYVV1RiZDfkwAAACE"]
[Thu Jul 30 11:46:08.240594 2026] [security2:error] [pid 2901124:tid 2901124] [client 2.134.55.120:40554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrcL_s7aEYVV1RiZDfkwAAACE"]
[Thu Jul 30 11:46:08.240842 2026] [security2:error] [pid 2901124:tid 2901124] [client 2.134.55.120:40554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrcL_s7aEYVV1RiZDfkwAAACE"]
[Thu Jul 30 11:46:08.284629 2026] [lsapi:warn] [pid 2947080:tid 2947080] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:08.389777 2026] [core:error] [pid 2946280:tid 2946280] (13)Permission denied: [client 216.73.216.199:20080] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/poison
[Thu Jul 30 11:46:08.393583 2026] [ssl:error] [pid 2946211:tid 2946211] (EAI 2)Name or service not known: [client 144.76.19.72:64388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:08.393609 2026] [ssl:error] [pid 2946211:tid 2946211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:08.446737 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:64394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:08.446781 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:08.937138 2026] [core:error] [pid 2946558:tid 2946558] [client 57.141.0.62:34882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:08.937158 2026] [core:error] [pid 2946558:tid 2946558] [client 57.141.0.62:34882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:09.088133 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.24:43952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:09.088779 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.24:43952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:09.198230 2026] [security2:error] [pid 2939727:tid 2939727] [client 110.249.202.206:53456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/403.shtml"] [unique_id "amsrcdtasZ9nLvIlpVzr-AAAAAE"]
[Thu Jul 30 11:46:09.391782 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 136.158.37.124:18883] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:46:09.429122 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.20:62852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:09.429751 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.20:62852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:09.659725 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.67:46424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:09.660369 2026] [authz_core:error] [pid 2929315:tid 2929315] [client 57.141.0.67:46424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:09.718474 2026] [ssl:error] [pid 2946280:tid 2946280] (70014)End of file found: [client 216.73.216.199:20080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:09.811351 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.52:52934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:09.811978 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.52:52934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:10.071173 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.49:54492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:10.071797 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.49:54492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:10.393781 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.38:43032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:10.394395 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.38:43032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:10.458416 2026] [core:error] [pid 2947080:tid 2947080] [client 66.249.66.8:44357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:10.458454 2026] [core:error] [pid 2947080:tid 2947080] [client 66.249.66.8:44357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:10.715141 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.21:61280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:10.715754 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.21:61280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:10.767968 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.26:51434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:10.768600 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.26:51434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:11.529912 2026] [ssl:error] [pid 2945050:tid 2945050] (EAI 2)Name or service not known: [client 144.76.19.72:55482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:11.529954 2026] [ssl:error] [pid 2945050:tid 2945050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:11.581645 2026] [ssl:error] [pid 2943309:tid 2943309] (EAI 2)Name or service not known: [client 144.76.19.72:55496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:11.581682 2026] [ssl:error] [pid 2943309:tid 2943309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:11.591923 2026] [security2:error] [pid 2942762:tid 2942762] [client 20.91.140.156:43622] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "saturnsportscouk.saturnsports.com"] [uri "/var/log/error.log"] [unique_id "amsrc_yCj3T6cuvTZ8dHPgAAABY"]
[Thu Jul 30 11:46:11.592129 2026] [security2:error] [pid 2942762:tid 2942762] [client 20.91.140.156:43622] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saturnsportscouk.saturnsports.com"] [uri "/var/log/error.log"] [unique_id "amsrc_yCj3T6cuvTZ8dHPgAAABY"]
[Thu Jul 30 11:46:11.592299 2026] [security2:error] [pid 2942762:tid 2942762] [client 20.91.140.156:43622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "saturnsportscouk.saturnsports.com"] [uri "/403.shtml"] [unique_id "amsrc_yCj3T6cuvTZ8dHPgAAABY"]
[Thu Jul 30 11:46:11.618620 2026] [security2:error] [pid 2933234:tid 2933234] [client 101.47.19.27:10517] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrc8OX0hMRHOt6dNSjxgAAADI"]
[Thu Jul 30 11:46:11.618667 2026] [security2:error] [pid 2933234:tid 2933234] [client 101.47.19.27:10517] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrc8OX0hMRHOt6dNSjxgAAADI"]
[Thu Jul 30 11:46:11.618925 2026] [security2:error] [pid 2933234:tid 2933234] [client 101.47.19.27:10517] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrc8OX0hMRHOt6dNSjxgAAADI"]
[Thu Jul 30 11:46:11.743807 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.13:42672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:11.744435 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.13:42672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:11.793303 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.20:21114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:11.793927 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.20:21114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:11.992583 2026] [security2:error] [pid 2943309:tid 2943309] [client 101.42.46.71:38098] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "freakorgeek.com"] [uri "/"] [unique_id "amsrc-4DtQ-zM0_p38SkJgAAACQ"]
[Thu Jul 30 11:46:12.134238 2026] [ssl:error] [pid 2929315:tid 2929315] (70014)End of file found: [client 216.73.216.199:9865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:12.513445 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.17:52352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:12.514076 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.17:52352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:12.904288 2026] [authz_core:error] [pid 2947674:tid 2947674] [client 57.141.0.51:43818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:12.904967 2026] [authz_core:error] [pid 2947674:tid 2947674] [client 57.141.0.51:43818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:12.981899 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.42:32296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:12.982582 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.42:32296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:13.583864 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.14:28176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:13.584495 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.14:28176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:13.691149 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.46:62718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:13.691770 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.46:62718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:13.854259 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.41:41426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:13.854883 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.41:41426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:13.941057 2026] [ssl:error] [pid 2937892:tid 2937892] (70014)End of file found: [client 216.73.216.199:60458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:14.286716 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.71:23020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:14.287341 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.71:23020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:14.288921 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.19:24036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:14.289536 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.19:24036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:14.450091 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.14:28182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:14.450744 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.14:28182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:14.636617 2026] [ssl:error] [pid 2946240:tid 2946240] (EAI 2)Name or service not known: [client 144.76.19.72:55502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:14.636645 2026] [ssl:error] [pid 2946240:tid 2946240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:14.690029 2026] [ssl:error] [pid 2939658:tid 2939658] (EAI 2)Name or service not known: [client 144.76.19.72:55512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:14.690084 2026] [ssl:error] [pid 2939658:tid 2939658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:14.808370 2026] [security2:error] [pid 2946558:tid 2946558] [client 101.47.19.27:53265] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrdkSMTf_HwmFgaHN_8wAAAAM"]
[Thu Jul 30 11:46:14.808431 2026] [security2:error] [pid 2946558:tid 2946558] [client 101.47.19.27:53265] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrdkSMTf_HwmFgaHN_8wAAAAM"]
[Thu Jul 30 11:46:14.808698 2026] [security2:error] [pid 2946558:tid 2946558] [client 101.47.19.27:53265] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrdkSMTf_HwmFgaHN_8wAAAAM"]
[Thu Jul 30 11:46:15.037176 2026] [ssl:error] [pid 2939658:tid 2939658] (70014)End of file found: [client 216.73.216.199:41425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:15.485490 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.37:53062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:15.486127 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.37:53062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:15.555723 2026] [core:error] [pid 2945013:tid 2945013] [client 57.141.0.13:61028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:15.555760 2026] [core:error] [pid 2945013:tid 2945013] [client 57.141.0.13:61028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:15.975721 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.69:23644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:15.976344 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.69:23644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:16.402135 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.68:52454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:16.402756 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.68:52454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:16.492041 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.51:30820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:16.492690 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.51:30820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:17.280784 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.8:22130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:17.281405 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.8:22130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:17.455255 2026] [ssl:error] [pid 2909092:tid 2909092] (70014)End of file found: [client 216.73.216.199:28144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:17.527473 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.56:20326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:17.528097 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.56:20326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:17.743709 2026] [ssl:error] [pid 2946276:tid 2946276] (EAI 2)Name or service not known: [client 144.76.19.72:55522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:17.743743 2026] [ssl:error] [pid 2946276:tid 2946276] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:17.797101 2026] [ssl:error] [pid 2946280:tid 2946280] (EAI 2)Name or service not known: [client 144.76.19.72:55528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:17.797140 2026] [ssl:error] [pid 2946280:tid 2946280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:17.929050 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.35:25690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:17.929693 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.35:25690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:17.985503 2026] [authz_core:error] [pid 2947674:tid 2947674] [client 57.141.0.59:63296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:17.986135 2026] [authz_core:error] [pid 2947674:tid 2947674] [client 57.141.0.59:63296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:18.180309 2026] [lsapi:warn] [pid 2946276:tid 2946276] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:18.275557 2026] [security2:error] [pid 2945549:tid 2945549] [client 159.89.127.165:37742] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amsregC6cwG8AOF8FId12wAAABE"]
[Thu Jul 30 11:46:18.275743 2026] [security2:error] [pid 2945549:tid 2945549] [client 159.89.127.165:37742] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amsregC6cwG8AOF8FId12wAAABE"]
[Thu Jul 30 11:46:18.275954 2026] [security2:error] [pid 2945549:tid 2945549] [client 159.89.127.165:37742] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amsregC6cwG8AOF8FId12wAAABE"]
[Thu Jul 30 11:46:18.369195 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.24:60350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:18.369834 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.24:60350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:18.697957 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.42:32310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:18.699137 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.42:32310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:18.710770 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.12:45972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:18.711407 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.12:45972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:18.752249 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.36:34738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:18.752872 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.36:34738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:18.916256 2026] [lsapi:warn] [pid 2940880:tid 2940880] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:19.563534 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.1:37300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:19.564176 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.1:37300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:19.973818 2026] [ssl:error] [pid 2947851:tid 2947851] (70014)End of file found: [client 216.73.216.199:30946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:20.111734 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.41:41434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:20.112385 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.41:41434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:20.177785 2026] [core:error] [pid 2941355:tid 2941355] [client 66.249.66.168:44164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:20.177814 2026] [core:error] [pid 2941355:tid 2941355] [client 66.249.66.168:44164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:20.462747 2026] [ssl:error] [pid 2937892:tid 2937892] (70014)End of file found: [client 216.73.216.199:4371] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:20.577358 2026] [access_compat:error] [pid 2945050:tid 2945050] [client 136.158.37.124:19696] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:46:20.642248 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.22:49186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:20.642888 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.22:49186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:20.788619 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.8:22158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:20.789275 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.8:22158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:20.853121 2026] [ssl:error] [pid 2945549:tid 2945549] (EAI 2)Name or service not known: [client 144.76.19.72:42552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:20.853170 2026] [ssl:error] [pid 2945549:tid 2945549] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:20.909527 2026] [ssl:error] [pid 2932070:tid 2932070] (EAI 2)Name or service not known: [client 144.76.19.72:42562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:20.909561 2026] [ssl:error] [pid 2932070:tid 2932070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:20.942124 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.1:39948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:20.942744 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.1:39948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:21.703346 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.29:36898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:21.703990 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.29:36898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:21.960260 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.4:60154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:21.960894 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.4:60154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:22.035534 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.66:59758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:22.036157 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.66:59758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:22.376618 2026] [security2:error] [pid 2940881:tid 2940881] [client 159.89.127.165:37762] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "inrc.org.uk"] [uri "/.git/config"] [unique_id "amsrfgqQIOCXouLfh5LPfwAAABw"]
[Thu Jul 30 11:46:22.376855 2026] [security2:error] [pid 2940881:tid 2940881] [client 159.89.127.165:37762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "inrc.org.uk"] [uri "/.git/config"] [unique_id "amsrfgqQIOCXouLfh5LPfwAAABw"]
[Thu Jul 30 11:46:22.377098 2026] [security2:error] [pid 2940881:tid 2940881] [client 159.89.127.165:37762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "inrc.org.uk"] [uri "/.git/config"] [unique_id "amsrfgqQIOCXouLfh5LPfwAAABw"]
[Thu Jul 30 11:46:22.455005 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.46:35170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:22.455668 2026] [authz_core:error] [pid 2943309:tid 2943309] [client 57.141.0.46:35170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:22.689928 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.38:54752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:22.690563 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.38:54752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:22.878833 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.29:36910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:22.879482 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.29:36910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:23.855000 2026] [authz_core:error] [pid 2947730:tid 2947730] [client 57.141.0.70:25818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:23.855666 2026] [authz_core:error] [pid 2947730:tid 2947730] [client 57.141.0.70:25818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:23.931743 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.17:37568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:23.932391 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.17:37568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:23.963126 2026] [ssl:error] [pid 2943309:tid 2943309] (EAI 2)Name or service not known: [client 144.76.19.72:42578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:23.963161 2026] [ssl:error] [pid 2943309:tid 2943309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:24.020474 2026] [ssl:error] [pid 2946239:tid 2946239] (EAI 2)Name or service not known: [client 144.76.19.72:42582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:24.020530 2026] [ssl:error] [pid 2946239:tid 2946239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:24.483322 2026] [authz_core:error] [pid 2947730:tid 2947730] [client 57.141.0.43:45206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:24.483976 2026] [authz_core:error] [pid 2947730:tid 2947730] [client 57.141.0.43:45206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:25.091591 2026] [ssl:error] [pid 2946210:tid 2946210] (70014)End of file found: [client 216.73.216.199:29053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:25.461659 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.45:38602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:25.462311 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.45:38602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:25.546815 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.32:21592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:25.547450 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.32:21592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:25.593420 2026] [ssl:error] [pid 2947112:tid 2947112] (70014)End of file found: [client 216.73.216.199:22802] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:25.823682 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.60:52620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:25.824304 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.60:52620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:25.868079 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.42:45044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:25.868701 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.42:45044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:25.874689 2026] [ssl:error] [pid 2945549:tid 2945549] (70014)End of file found: [client 216.73.216.199:14026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:26.525613 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.51:29606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:26.526241 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.51:29606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:26.683843 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.51:29622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:26.684498 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.51:29622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:27.079432 2026] [ssl:error] [pid 2947595:tid 2947595] (EAI 2)Name or service not known: [client 144.76.19.72:42598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:27.079465 2026] [ssl:error] [pid 2947595:tid 2947595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:27.140566 2026] [ssl:error] [pid 2947080:tid 2947080] (EAI 2)Name or service not known: [client 144.76.19.72:42610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:27.140601 2026] [ssl:error] [pid 2947080:tid 2947080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:27.254555 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.65:33086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:27.255196 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.65:33086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:27.457210 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.66:59770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:27.457828 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.66:59770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:27.686936 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.45:43736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:27.687595 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.45:43736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:28.052130 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.4:60162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:28.052783 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.4:60162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:28.111728 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.53:52226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:28.112371 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.53:52226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:28.221419 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 52.238.199.152:58170] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:46:28.645415 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.35:62124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:28.646060 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.35:62124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:28.772220 2026] [security2:error] [pid 2946281:tid 2946281] [client 207.154.197.113:46438] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amsrhF2-hTwtWH7yRiEAygAAACc"]
[Thu Jul 30 11:46:28.772479 2026] [security2:error] [pid 2946281:tid 2946281] [client 207.154.197.113:46438] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amsrhF2-hTwtWH7yRiEAygAAACc"]
[Thu Jul 30 11:46:28.772800 2026] [security2:error] [pid 2946281:tid 2946281] [client 207.154.197.113:46438] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amsrhF2-hTwtWH7yRiEAygAAACc"]
[Thu Jul 30 11:46:28.931296 2026] [lsapi:warn] [pid 2948207:tid 2948207] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:29.084461 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.66:59774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:29.085451 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.66:59774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:29.589146 2026] [lsapi:warn] [pid 2909092:tid 2909092] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:29.663136 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.13:37664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:29.663758 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.13:37664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:30.066608 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.45:43750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:30.067772 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.45:43750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:30.194424 2026] [ssl:error] [pid 2942685:tid 2942685] (EAI 2)Name or service not known: [client 144.76.19.72:45572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:30.194468 2026] [ssl:error] [pid 2942685:tid 2942685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:30.250519 2026] [ssl:error] [pid 2948279:tid 2948279] (EAI 2)Name or service not known: [client 144.76.19.72:45588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:30.250553 2026] [ssl:error] [pid 2948279:tid 2948279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:30.345304 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.62:35858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:30.345924 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.62:35858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:30.389343 2026] [core:error] [pid 2947080:tid 2947080] (13)Permission denied: [client 216.73.216.199:30087] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/alt-php72-error.log-20260729
[Thu Jul 30 11:46:30.423684 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.60:52634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:30.424309 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.60:52634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:30.507166 2026] [ssl:error] [pid 2947080:tid 2947080] (70014)End of file found: [client 216.73.216.199:30087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:30.854873 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.58:39628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:30.855522 2026] [authz_core:error] [pid 2942685:tid 2942685] [client 57.141.0.58:39628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:30.862189 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.43:50276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:30.862792 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.43:50276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:31.269009 2026] [access_compat:error] [pid 2946278:tid 2946278] [client 136.158.37.124:20439] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:46:31.337165 2026] [security2:error] [pid 2946241:tid 2946241] [client 159.89.127.165:57210] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "inrc.org.uk"] [uri "/trace.axd"] [unique_id "amsrhyruNnrTUIGJ6Q6AhAAAABg"]
[Thu Jul 30 11:46:31.337611 2026] [security2:error] [pid 2946241:tid 2946241] [client 159.89.127.165:57210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "inrc.org.uk"] [uri "/trace.axd"] [unique_id "amsrhyruNnrTUIGJ6Q6AhAAAABg"]
[Thu Jul 30 11:46:31.337948 2026] [security2:error] [pid 2946241:tid 2946241] [client 159.89.127.165:57210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "inrc.org.uk"] [uri "/trace.axd"] [unique_id "amsrhyruNnrTUIGJ6Q6AhAAAABg"]
[Thu Jul 30 11:46:31.529347 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.22:61016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:31.529970 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.22:61016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:32.175826 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.15:33660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:32.176500 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.15:33660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:32.228278 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.63:56662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:32.228953 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.63:56662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:32.551004 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.26:49168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:32.551649 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.26:49168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:32.590464 2026] [lsapi:warn] [pid 2948387:tid 2948387] [client 162.120.188.20:35571] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 11:46:32.590554 2026] [lsapi:warn] [pid 2948387:tid 2948387] [client 162.120.188.20:35571] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 11:46:32.616112 2026] [security2:error] [pid 2932070:tid 2932070] [client 207.154.197.113:46452] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "inrc.org.uk"] [uri "/.git/config"] [unique_id "amsriDi_I6dPPHEB6cyS-QAAACA"]
[Thu Jul 30 11:46:32.616370 2026] [security2:error] [pid 2932070:tid 2932070] [client 207.154.197.113:46452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "inrc.org.uk"] [uri "/.git/config"] [unique_id "amsriDi_I6dPPHEB6cyS-QAAACA"]
[Thu Jul 30 11:46:32.616674 2026] [security2:error] [pid 2932070:tid 2932070] [client 207.154.197.113:46452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "inrc.org.uk"] [uri "/.git/config"] [unique_id "amsriDi_I6dPPHEB6cyS-QAAACA"]
[Thu Jul 30 11:46:32.619848 2026] [ssl:error] [pid 2942685:tid 2942685] (70014)End of file found: [client 216.73.216.199:45196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:32.920318 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.47:49566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:32.920982 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.47:49566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:33.307360 2026] [ssl:error] [pid 2948387:tid 2948387] (EAI 2)Name or service not known: [client 144.76.19.72:45598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:33.307406 2026] [ssl:error] [pid 2948387:tid 2948387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:33.361128 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:45602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:33.361153 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:33.525439 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.13:27774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:33.526089 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.13:27774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:33.660146 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.45:43760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:33.660774 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.45:43760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:33.699497 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.3:25996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:33.700154 2026] [authz_core:error] [pid 2940880:tid 2940880] [client 57.141.0.3:25996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:33.961869 2026] [core:error] [pid 2947112:tid 2947112] (13)Permission denied: [client 216.73.216.199:58214] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/poison
[Thu Jul 30 11:46:34.532662 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.49:62074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:34.533307 2026] [authz_core:error] [pid 2943362:tid 2943362] [client 57.141.0.49:62074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:34.680325 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.50:35948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:34.680950 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.50:35948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:34.691323 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.70:48444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:34.691947 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.70:48444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:34.865097 2026] [ssl:error] [pid 2947112:tid 2947112] (70014)End of file found: [client 216.73.216.199:58214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:34.899375 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.38:49128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:34.900000 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.38:49128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:35.246574 2026] [security2:error] [pid 2946276:tid 2946276] [client 98.84.200.43:37065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2022/07/class-sets-300x169.jpg"] [unique_id "amsriwaZJhAwoF_HPjCRTgAAABs"]
[Thu Jul 30 11:46:35.913758 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.20:61568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:35.914400 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.20:61568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:36.234026 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.13:27776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:36.234660 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.13:27776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:36.297087 2026] [authz_core:error] [pid 2947730:tid 2947730] [client 57.141.0.31:53576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:36.297713 2026] [authz_core:error] [pid 2947730:tid 2947730] [client 57.141.0.31:53576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:36.406824 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.33:54202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:36.407446 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.33:54202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:36.430216 2026] [ssl:error] [pid 2948524:tid 2948524] (EAI 2)Name or service not known: [client 144.76.19.72:45608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:36.430273 2026] [ssl:error] [pid 2948524:tid 2948524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:36.492995 2026] [ssl:error] [pid 2937892:tid 2937892] (EAI 2)Name or service not known: [client 144.76.19.72:45610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:36.493036 2026] [ssl:error] [pid 2937892:tid 2937892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:37.109679 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.43:50278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:37.110310 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.43:50278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:37.163321 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.15:20652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:37.163946 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.15:20652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:37.672475 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.65:58486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:37.673605 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.65:58486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:37.723282 2026] [lsapi:warn] [pid 2909092:tid 2909092] [client 84.92.43.149:59197] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 11:46:37.723335 2026] [lsapi:warn] [pid 2909092:tid 2909092] [client 84.92.43.149:59197] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 11:46:38.209188 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.21:39670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:38.209820 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.21:39670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:38.410201 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.34:23472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:38.410848 2026] [authz_core:error] [pid 2939658:tid 2939658] [client 57.141.0.34:23472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:38.733338 2026] [security2:error] [pid 2948523:tid 2948523] [client 85.208.96.205:13624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/what-are-structural-elements-in-writing"] [unique_id "amsrjjsC1EH509bjiFuI6gAAACw"]
[Thu Jul 30 11:46:38.758862 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.17:36798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:38.759490 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.17:36798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:38.776712 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.6:21470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:38.777347 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.6:21470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:38.964329 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.48:59630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:38.964962 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.48:59630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:39.082056 2026] [ssl:error] [pid 2946240:tid 2946240] (70014)End of file found: [client 216.73.216.199:51959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:39.608202 2026] [lsapi:warn] [pid 2948524:tid 2948524] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:39.631595 2026] [ssl:error] [pid 2941678:tid 2941678] (EAI 2)Name or service not known: [client 144.76.19.72:25480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:39.631643 2026] [ssl:error] [pid 2941678:tid 2941678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:39.687686 2026] [ssl:error] [pid 2948387:tid 2948387] (EAI 2)Name or service not known: [client 144.76.19.72:25486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:39.687724 2026] [ssl:error] [pid 2948387:tid 2948387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:39.721351 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.11:65070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:39.721998 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.11:65070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:40.024662 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.59:41872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:40.025289 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.59:41872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:40.235626 2026] [lsapi:warn] [pid 2941678:tid 2941678] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:40.818182 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.54:34496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:40.818805 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.54:34496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:40.970231 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.54:34512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:40.970855 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.54:34512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:41.321249 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.68:56940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:41.321902 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.68:56940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:41.338385 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.47:49576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:41.339009 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.47:49576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:41.348271 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.51:48426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:41.348881 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.51:48426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:42.008500 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.12:36674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:42.009133 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.12:36674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:42.063671 2026] [access_compat:error] [pid 2947851:tid 2947851] [client 136.158.37.124:21198] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:46:42.100886 2026] [ssl:error] [pid 2947934:tid 2947934] (70014)End of file found: [client 216.73.216.199:62044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:42.198177 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.62:21454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:42.198804 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.62:21454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:42.287895 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.7:39472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:42.288534 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.7:39472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:42.758164 2026] [ssl:error] [pid 2948207:tid 2948207] (EAI 2)Name or service not known: [client 144.76.19.72:25492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:42.758211 2026] [ssl:error] [pid 2948207:tid 2948207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:42.810439 2026] [ssl:error] [pid 2948387:tid 2948387] (EAI 2)Name or service not known: [client 144.76.19.72:25504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:42.810471 2026] [ssl:error] [pid 2948387:tid 2948387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:43.114151 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.42:46368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:43.114774 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.42:46368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:43.370975 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.16:26196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:43.371642 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.16:26196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:43.728484 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.71:49576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:43.729113 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.71:49576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:43.908286 2026] [security2:error] [pid 2947730:tid 2947730] [client 207.154.197.113:59348] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "inrc.org.uk"] [uri "/trace.axd"] [unique_id "amsrk1HelcN8tKzJUwh-NQAAAA8"]
[Thu Jul 30 11:46:43.908483 2026] [security2:error] [pid 2947730:tid 2947730] [client 207.154.197.113:59348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "inrc.org.uk"] [uri "/trace.axd"] [unique_id "amsrk1HelcN8tKzJUwh-NQAAAA8"]
[Thu Jul 30 11:46:43.908683 2026] [security2:error] [pid 2947730:tid 2947730] [client 207.154.197.113:59348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "inrc.org.uk"] [uri "/trace.axd"] [unique_id "amsrk1HelcN8tKzJUwh-NQAAAA8"]
[Thu Jul 30 11:46:44.272027 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.56:48640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:44.272700 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.56:48640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:44.597650 2026] [ssl:error] [pid 2948829:tid 2948829] (70014)End of file found: [client 216.73.216.199:52592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:44.944354 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.8:32316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:44.945005 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.8:32316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:45.084605 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.55:33468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:45.085254 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.55:33468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:45.194015 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.70:51100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:45.194697 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.70:51100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:45.363798 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.23:48336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:45.364422 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.23:48336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:45.490219 2026] [ssl:error] [pid 2941678:tid 2941678] (70014)End of file found: [client 216.73.216.199:8647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:45.858478 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.58:64408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:45.859144 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.58:64408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:45.863710 2026] [ssl:error] [pid 2948801:tid 2948801] (EAI 2)Name or service not known: [client 144.76.19.72:25516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:45.863735 2026] [ssl:error] [pid 2948801:tid 2948801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:45.918399 2026] [ssl:error] [pid 2948523:tid 2948523] (EAI 2)Name or service not known: [client 144.76.19.72:25520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:45.918437 2026] [ssl:error] [pid 2948523:tid 2948523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:46.008870 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.3:47112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:46.009524 2026] [authz_core:error] [pid 2945597:tid 2945597] [client 57.141.0.3:47112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:46.133903 2026] [ssl:error] [pid 2946240:tid 2946240] [client 54.86.115.253:33298] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname cpcalendars.albertobartolo.com.stampys.eu provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 11:46:46.420082 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.39:42140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:46.420709 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.39:42140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:46.870298 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.56:48646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:46.870916 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.56:48646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:47.316156 2026] [ssl:error] [pid 2948524:tid 2948524] (70014)End of file found: [client 216.73.216.199:1464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:47.503604 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.70:62328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:47.504235 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.70:62328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:47.655221 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.42:46378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:47.655841 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.42:46378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:47.972407 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.8:32338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:47.973030 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.8:32338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:48.665874 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.55:33478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:48.666498 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.55:33478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:48.687162 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.34:49050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:48.687800 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.34:49050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:48.973528 2026] [ssl:error] [pid 2942762:tid 2942762] (EAI 2)Name or service not known: [client 144.76.19.72:25524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:48.973560 2026] [ssl:error] [pid 2942762:tid 2942762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:49.030016 2026] [ssl:error] [pid 2948523:tid 2948523] (EAI 2)Name or service not known: [client 144.76.19.72:25532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:49.030045 2026] [ssl:error] [pid 2948523:tid 2948523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:49.048263 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.52:57170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:49.048904 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.52:57170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:49.175368 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.15:21260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:49.175998 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.15:21260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:49.514752 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.26:35378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:49.515386 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.26:35378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:49.553340 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.61:28290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:49.553990 2026] [authz_core:error] [pid 2946281:tid 2946281] [client 57.141.0.61:28290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:49.918792 2026] [ssl:error] [pid 2947595:tid 2947595] (70014)End of file found: [client 216.73.216.199:31533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:50.374308 2026] [lsapi:warn] [pid 2948801:tid 2948801] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:50.435728 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 52.238.199.152:58170] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-admin/includes/error_log
[Thu Jul 30 11:46:50.502284 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.40:58906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:50.502964 2026] [authz_core:error] [pid 2942762:tid 2942762] [client 57.141.0.40:58906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:50.797734 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.62:39480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:50.798358 2026] [authz_core:error] [pid 2948207:tid 2948207] [client 57.141.0.62:39480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:50.951700 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.40:58920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:50.952347 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.40:58920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:51.238790 2026] [ssl:error] [pid 2947080:tid 2947080] (70014)End of file found: [client 216.73.216.199:23662] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:51.311592 2026] [lsapi:warn] [pid 2947730:tid 2947730] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:46:51.386542 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.12:42890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:51.387189 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.12:42890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:51.537961 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.54:43460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:51.538598 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.54:43460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:52.083637 2026] [ssl:error] [pid 2948829:tid 2948829] (EAI 2)Name or service not known: [client 144.76.19.72:31180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:52.083689 2026] [ssl:error] [pid 2948829:tid 2948829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:52.141718 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:31188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:52.141757 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:52.287419 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.46:25146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:52.288062 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.46:25146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:52.369188 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.44:51154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:52.369812 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.44:51154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:52.465788 2026] [security2:error] [pid 2946558:tid 2946558] [client 84.75.150.225:35858] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,163.0.html"] [unique_id "amsrnESMTf_HwmFgaHOAKAAAAAM"]
[Thu Jul 30 11:46:52.465837 2026] [security2:error] [pid 2946558:tid 2946558] [client 84.75.150.225:35858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,163.0.html"] [unique_id "amsrnESMTf_HwmFgaHOAKAAAAAM"]
[Thu Jul 30 11:46:52.466113 2026] [security2:error] [pid 2946558:tid 2946558] [client 84.75.150.225:35858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrnESMTf_HwmFgaHOAKAAAAAM"]
[Thu Jul 30 11:46:52.572254 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.11:59050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:52.572903 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.11:59050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:52.719234 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.12:42904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:52.719871 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.12:42904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:52.759344 2026] [cgi:error] [pid 2946278:tid 2946278] [client 20.91.140.156:32838] AH02811: stderr from /home/saturnsp/public_html/saturnsports.co.uk/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 11:46:52.764799 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.22:38594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:52.765417 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.22:38594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:52.940303 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 20.91.140.156:43620] AH01630: client denied by server configuration: /home/saturnsp/public_html/saturnsports.co.uk/php.ini
[Thu Jul 30 11:46:53.065225 2026] [access_compat:error] [pid 2948325:tid 2948325] [client 136.158.37.124:21990] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:46:53.520427 2026] [access_compat:error] [pid 2948524:tid 2948524] [client 45.158.164.139:49100] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:46:53.951788 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 52.238.199.152:58170] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/error_log
[Thu Jul 30 11:46:54.084866 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.67:33476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:54.085498 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.67:33476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:54.180874 2026] [ssl:error] [pid 2947934:tid 2947934] (70014)End of file found: [client 216.73.216.199:20526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:54.342879 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.35:55690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:54.343519 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.35:55690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:54.486225 2026] [ssl:error] [pid 2946241:tid 2946241] (70014)End of file found: [client 216.73.216.199:28150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:54.838342 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.5:42442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:54.838972 2026] [authz_core:error] [pid 2940881:tid 2940881] [client 57.141.0.5:42442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:54.952354 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.58:50958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:54.952974 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.58:50958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:55.201057 2026] [ssl:error] [pid 2945049:tid 2945049] (EAI 2)Name or service not known: [client 144.76.19.72:31204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:55.201095 2026] [ssl:error] [pid 2945049:tid 2945049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:55.203940 2026] [ssl:error] [pid 2948326:tid 2948326] (70014)End of file found: [client 216.73.216.199:1554] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:55.257935 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.25:38868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:55.258500 2026] [ssl:error] [pid 2948829:tid 2948829] (EAI 2)Name or service not known: [client 144.76.19.72:31208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:55.258542 2026] [ssl:error] [pid 2948829:tid 2948829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:55.258639 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.25:38868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:55.845624 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.48:45346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:55.846252 2026] [authz_core:error] [pid 2945049:tid 2945049] [client 57.141.0.48:45346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:55.973862 2026] [core:error] [pid 2948829:tid 2948829] [client 66.249.66.39:56305] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:55.973889 2026] [core:error] [pid 2948829:tid 2948829] [client 66.249.66.39:56305] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:55.979016 2026] [core:error] [pid 2948863:tid 2948863] [client 66.249.66.194:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:55.979049 2026] [core:error] [pid 2948863:tid 2948863] [client 66.249.66.194:34856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:56.568687 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.18:62964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:56.569334 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.18:62964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:56.592989 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.32:47532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:56.593621 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.32:47532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:57.029534 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.37:38048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:57.030162 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.37:38048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:57.143464 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.66:56106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:57.144114 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.66:56106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:58.047948 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.35:55720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:58.048620 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.35:55720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:58.118097 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.23:23842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:58.118720 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.23:23842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:58.121412 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.23:23854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:58.122025 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.23:23854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:58.144178 2026] [security2:error] [pid 2947112:tid 2947112] [client 185.191.171.3:41266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/robots.txt"] [unique_id "amsrovTWK1BqtRXWRK7OZgAAABA"]
[Thu Jul 30 11:46:58.144667 2026] [core:error] [pid 2947112:tid 2947112] [client 185.191.171.3:41266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:58.159116 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.27:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:58.160330 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.27:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:58.311929 2026] [ssl:error] [pid 2945549:tid 2945549] (EAI 2)Name or service not known: [client 144.76.19.72:31224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:58.311954 2026] [ssl:error] [pid 2945549:tid 2945549] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:58.368502 2026] [ssl:error] [pid 2948829:tid 2948829] (EAI 2)Name or service not known: [client 144.76.19.72:31240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:46:58.368540 2026] [ssl:error] [pid 2948829:tid 2948829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:46:58.810266 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.71:29570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:58.810912 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.71:29570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:58.889882 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.19:27762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:58.890535 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.19:27762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:59.087735 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.45:56936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:59.088446 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.45:56936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:59.578365 2026] [security2:error] [pid 2948801:tid 2948801] [client 185.191.171.16:15442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/page/7/"] [unique_id "amsro8f8BdYC6MlHX28zugAAAAA"]
[Thu Jul 30 11:46:59.578929 2026] [core:error] [pid 2948801:tid 2948801] [client 185.191.171.16:15442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:46:59.606063 2026] [ssl:error] [pid 2939727:tid 2939727] (70014)End of file found: [client 216.73.216.199:56735] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:46:59.777960 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.50:33640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:46:59.778597 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.50:33640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:46:59.918362 2026] [ssl:error] [pid 2945549:tid 2945549] (70014)End of file found: [client 216.73.216.199:51562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:00.072726 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.59:26202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:00.073381 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.59:26202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:00.311715 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.44:32090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:00.312355 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.44:32090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:00.493927 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.25:38870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:00.494554 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.25:38870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:00.507672 2026] [ssl:error] [pid 2946241:tid 2946241] (70014)End of file found: [client 216.73.216.199:2741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:00.965250 2026] [lsapi:warn] [pid 2945050:tid 2945050] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:01.422827 2026] [ssl:error] [pid 2929315:tid 2929315] (EAI 2)Name or service not known: [client 144.76.19.72:21120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:01.422851 2026] [ssl:error] [pid 2929315:tid 2929315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:01.451930 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.65:59746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:01.452614 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.65:59746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:01.475566 2026] [ssl:error] [pid 2949779:tid 2949779] (EAI 2)Name or service not known: [client 144.76.19.72:21136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:01.475598 2026] [ssl:error] [pid 2949779:tid 2949779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:01.547996 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.1:20454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:01.548710 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.1:20454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:01.779804 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.45:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:01.780429 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.45:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:02.015551 2026] [core:error] [pid 2945050:tid 2945050] [client 66.249.66.67:59986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:02.015588 2026] [core:error] [pid 2945050:tid 2945050] [client 66.249.66.67:59986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:02.241604 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 52.238.199.152:58170] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 11:47:02.519287 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.8:28300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:02.519911 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.8:28300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:02.639291 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.10:61320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:02.639916 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.10:61320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:02.668837 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.52:46798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:02.669483 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.52:46798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:02.897801 2026] [lsapi:warn] [pid 2946280:tid 2946280] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:02.921241 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.61:52562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:02.921861 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.61:52562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:03.507942 2026] [security2:error] [pid 2947595:tid 2947595] [client 114.119.146.111:41429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/may-newsletter-2023/"] [unique_id "amsrpw3IMKJr82WrpEmoKwAAAAQ"], referer: https://www.erskinenazarene.co.uk/sitemap/
[Thu Jul 30 11:47:03.686161 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.31:42644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:03.686803 2026] [authz_core:error] [pid 2941678:tid 2941678] [client 57.141.0.31:42644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:04.165011 2026] [access_compat:error] [pid 2941355:tid 2941355] [client 136.158.37.124:22866] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:47:04.321346 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.36:44332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:04.321975 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.36:44332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:04.567263 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:21142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:04.567309 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:04.621837 2026] [ssl:error] [pid 2941678:tid 2941678] (EAI 2)Name or service not known: [client 144.76.19.72:21156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:04.621864 2026] [ssl:error] [pid 2941678:tid 2941678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:04.781210 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.64:41152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:04.781826 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.64:41152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:04.860241 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.55:20450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:04.860859 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.55:20450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:04.904831 2026] [core:error] [pid 2946278:tid 2946278] [client 66.249.66.41:64972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:04.904854 2026] [core:error] [pid 2946278:tid 2946278] [client 66.249.66.41:64972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:05.019970 2026] [ssl:error] [pid 2939727:tid 2939727] (70014)End of file found: [client 216.73.216.199:1889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:05.033283 2026] [security2:error] [pid 2941678:tid 2941678] [client 114.119.146.111:41431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/may-newsletter-2023/"] [unique_id "amsrqXSViXzIVXWi2BZ8AgAAAAw"], referer: https://www.erskinenazarene.co.uk/sitemap/
[Thu Jul 30 11:47:05.381127 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.44:32100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:05.381753 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.44:32100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:05.561564 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.10:61330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:05.562204 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.10:61330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:05.638344 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.34:45804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:05.638988 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.34:45804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:05.730014 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.54:51962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:05.730653 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.54:51962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:06.122146 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.8:22826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:06.122767 2026] [authz_core:error] [pid 2945549:tid 2945549] [client 57.141.0.8:22826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:06.152250 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 84.92.43.149:63830] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/graduate-placement.html
[Thu Jul 30 11:47:06.152294 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 84.92.43.149:63830] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/graduate-placement.html
[Thu Jul 30 11:47:06.239092 2026] [core:error] [pid 2948523:tid 2948523] (13)Permission denied: [client 216.73.216.199:56980] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory183/subsystem/uevent
[Thu Jul 30 11:47:06.277737 2026] [security2:error] [pid 2946558:tid 2946558] [client 196.115.185.8:47778] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrqkSMTf_HwmFgaHOALgAAAAM"]
[Thu Jul 30 11:47:06.277790 2026] [security2:error] [pid 2946558:tid 2946558] [client 196.115.185.8:47778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrqkSMTf_HwmFgaHOALgAAAAM"]
[Thu Jul 30 11:47:06.278029 2026] [security2:error] [pid 2946558:tid 2946558] [client 196.115.185.8:47778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrqkSMTf_HwmFgaHOALgAAAAM"]
[Thu Jul 30 11:47:06.346401 2026] [ssl:error] [pid 2948523:tid 2948523] (70014)End of file found: [client 216.73.216.199:56980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:06.768645 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.25:21148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:06.769277 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.25:21148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:06.855089 2026] [ssl:error] [pid 2937892:tid 2937892] (70014)End of file found: [client 216.73.216.199:10471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:06.934667 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.1:20466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:06.935317 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.1:20466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:07.249723 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.21:30922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:07.250369 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.21:30922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:07.714063 2026] [ssl:error] [pid 2948524:tid 2948524] (EAI 2)Name or service not known: [client 144.76.19.72:21160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:07.714110 2026] [ssl:error] [pid 2948524:tid 2948524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:07.768484 2026] [ssl:error] [pid 2948860:tid 2948860] (EAI 2)Name or service not known: [client 144.76.19.72:21170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:07.768540 2026] [ssl:error] [pid 2948860:tid 2948860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:07.858472 2026] [ssl:error] [pid 2947851:tid 2947851] (70014)End of file found: [client 216.73.216.199:40664] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:08.605327 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.38:57260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:08.606683 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.38:57260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:08.780978 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 66.249.66.33:47593] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:47:08.784294 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 66.249.66.33:47593] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:47:08.786397 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.60:39420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:08.787044 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.60:39420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:09.057013 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.16:20398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:09.057674 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.16:20398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:09.080894 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.36:44336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:09.081550 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.36:44336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:09.123596 2026] [security2:error] [pid 2948325:tid 2948325] [client 150.5.132.90:59621] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrrYIfjk732Cy6rWZUggAAACM"]
[Thu Jul 30 11:47:09.123652 2026] [security2:error] [pid 2948325:tid 2948325] [client 150.5.132.90:59621] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrrYIfjk732Cy6rWZUggAAACM"]
[Thu Jul 30 11:47:09.123878 2026] [security2:error] [pid 2948325:tid 2948325] [client 150.5.132.90:59621] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrrYIfjk732Cy6rWZUggAAACM"]
[Thu Jul 30 11:47:09.776028 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.12:39930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:09.776699 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.12:39930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:09.925399 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.25:21160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:09.926035 2026] [authz_core:error] [pid 2941355:tid 2941355] [client 57.141.0.25:21160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:10.216119 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.47:54594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:10.216744 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.47:54594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:10.672033 2026] [authz_core:error] [pid 2950490:tid 2950490] [client 57.141.0.40:63858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:10.672697 2026] [authz_core:error] [pid 2950490:tid 2950490] [client 57.141.0.40:63858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:10.792578 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.32:32244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:10.793212 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.32:32244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:10.806395 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.35:43050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:10.807046 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.35:43050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:10.844626 2026] [ssl:error] [pid 2950495:tid 2950495] (EAI 2)Name or service not known: [client 144.76.19.72:25080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:10.844681 2026] [ssl:error] [pid 2950495:tid 2950495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:10.896835 2026] [ssl:error] [pid 2950498:tid 2950498] (EAI 2)Name or service not known: [client 144.76.19.72:25084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:10.896874 2026] [ssl:error] [pid 2950498:tid 2950498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:10.923211 2026] [authz_core:error] [pid 2950497:tid 2950497] [client 57.141.0.3:52538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:10.923873 2026] [authz_core:error] [pid 2950497:tid 2950497] [client 57.141.0.3:52538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:11.057233 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.54:47516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:11.057854 2026] [authz_core:error] [pid 2948828:tid 2948828] [client 57.141.0.54:47516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:11.435571 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.4:35824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:11.436200 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.4:35824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:11.663272 2026] [ssl:error] [pid 2947595:tid 2947595] (70014)End of file found: [client 216.73.216.199:46514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:11.736371 2026] [lsapi:warn] [pid 2950497:tid 2950497] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:11.941455 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.18:32706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:11.942121 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.18:32706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:12.265252 2026] [ssl:error] [pid 2946210:tid 2946210] (70014)End of file found: [client 216.73.216.199:26491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:12.367297 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.18:32718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:12.367927 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.18:32718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:12.669384 2026] [lsapi:warn] [pid 2950491:tid 2950491] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:12.796193 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.45:43196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:12.796826 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.45:43196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:12.868079 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.44:47612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:12.868712 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.44:47612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:13.182532 2026] [ssl:error] [pid 2937892:tid 2937892] (70014)End of file found: [client 216.73.216.199:7754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:13.348845 2026] [security2:error] [pid 2946280:tid 2946280] [client 150.5.132.90:22011] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrsRVmqRHdhmp7qjYU1AAAACU"]
[Thu Jul 30 11:47:13.348896 2026] [security2:error] [pid 2946280:tid 2946280] [client 150.5.132.90:22011] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsrsRVmqRHdhmp7qjYU1AAAACU"]
[Thu Jul 30 11:47:13.349142 2026] [security2:error] [pid 2946280:tid 2946280] [client 150.5.132.90:22011] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsrsRVmqRHdhmp7qjYU1AAAACU"]
[Thu Jul 30 11:47:13.483799 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.28:37996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:13.484430 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.28:37996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:13.572935 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.55:30318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:13.573566 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.55:30318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:13.949301 2026] [ssl:error] [pid 2950493:tid 2950493] (EAI 2)Name or service not known: [client 144.76.19.72:25088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:13.949340 2026] [ssl:error] [pid 2950493:tid 2950493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:14.002470 2026] [ssl:error] [pid 2950491:tid 2950491] (EAI 2)Name or service not known: [client 144.76.19.72:25102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:14.002515 2026] [ssl:error] [pid 2950491:tid 2950491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:14.136363 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.44:47622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:14.136997 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.44:47622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:14.197204 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.62:41506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:14.197836 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.62:41506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:15.017189 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.51:24662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:15.017818 2026] [authz_core:error] [pid 2946239:tid 2946239] [client 57.141.0.51:24662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:15.224338 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:61150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:15.224970 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:61150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:15.343344 2026] [access_compat:error] [pid 2946276:tid 2946276] [client 136.158.37.124:23765] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:47:15.717103 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.32:65344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:15.717732 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.32:65344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:15.793557 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.54:47520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:15.794187 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.54:47520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:15.963359 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.20:50792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:15.963984 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.20:50792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:16.488022 2026] [core:error] [pid 2948828:tid 2948828] [client 66.249.66.168:53542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:16.488062 2026] [core:error] [pid 2948828:tid 2948828] [client 66.249.66.168:53542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:16.779353 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.1:20854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:16.779973 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.1:20854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:16.981214 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.59:36426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:16.981835 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.59:36426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:17.058672 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:25114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:17.058706 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:17.087133 2026] [ssl:error] [pid 2950052:tid 2950052] (70014)End of file found: [client 216.73.216.199:54241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:17.112857 2026] [ssl:error] [pid 2948325:tid 2948325] (EAI 2)Name or service not known: [client 144.76.19.72:25116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:17.112892 2026] [ssl:error] [pid 2948325:tid 2948325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:17.133933 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.42:22438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:17.134566 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.42:22438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:17.554566 2026] [core:crit] [pid 2948325:tid 2948325] (13)Permission denied: [client 40.77.167.61:23190] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 11:47:17.682667 2026] [ssl:error] [pid 2948828:tid 2948828] (70014)End of file found: [client 216.73.216.199:1487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:17.933685 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.13:56954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:17.934336 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.13:56954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:18.126220 2026] [authz_core:error] [pid 2950497:tid 2950497] [client 57.141.0.55:30320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:18.126909 2026] [authz_core:error] [pid 2950497:tid 2950497] [client 57.141.0.55:30320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:18.295647 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.21:60936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:18.296275 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.21:60936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:18.604336 2026] [ssl:error] [pid 2950989:tid 2950989] (70014)End of file found: [client 216.73.216.199:27997] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:18.836004 2026] [authz_core:error] [pid 2950497:tid 2950497] [client 57.141.0.67:51092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:18.836645 2026] [authz_core:error] [pid 2950497:tid 2950497] [client 57.141.0.67:51092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:18.841116 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.71:49180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:18.841723 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.71:49180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:18.931700 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.40:54708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:18.932387 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.40:54708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:19.463393 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.52:55838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:19.464026 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.52:55838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:19.712249 2026] [authz_core:error] [pid 2950383:tid 2950383] [client 57.141.0.56:64314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:19.712874 2026] [authz_core:error] [pid 2950383:tid 2950383] [client 57.141.0.56:64314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:20.169695 2026] [ssl:error] [pid 2947851:tid 2947851] (EAI 2)Name or service not known: [client 144.76.19.72:50558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:20.169739 2026] [ssl:error] [pid 2947851:tid 2947851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:20.224973 2026] [ssl:error] [pid 2947595:tid 2947595] (EAI 2)Name or service not known: [client 144.76.19.72:50574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:20.225008 2026] [ssl:error] [pid 2947595:tid 2947595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:20.347234 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.3:49698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:20.347852 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.3:49698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:20.891488 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.2:40592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:20.892124 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.2:40592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:21.125761 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.29:42270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:21.126393 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.29:42270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:21.152660 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.1:24264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:21.153289 2026] [authz_core:error] [pid 2945013:tid 2945013] [client 57.141.0.1:24264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:21.735833 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.29:42280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:21.736534 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.29:42280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:21.961296 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.33:50698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:21.961929 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.33:50698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:22.341724 2026] [lsapi:warn] [pid 2948863:tid 2948863] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:22.514935 2026] [ssl:error] [pid 2947851:tid 2947851] (70014)End of file found: [client 216.73.216.199:3498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:22.643472 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.20:59066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:22.644108 2026] [authz_core:error] [pid 2947112:tid 2947112] [client 57.141.0.20:59066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:22.683206 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.24:58376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:22.683827 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.24:58376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:22.802592 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.14:44160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:22.803211 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.14:44160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:22.915116 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.18:38734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:22.915736 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.18:38734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:23.280929 2026] [ssl:error] [pid 2939727:tid 2939727] (EAI 2)Name or service not known: [client 144.76.19.72:50588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:23.280966 2026] [ssl:error] [pid 2939727:tid 2939727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:23.335633 2026] [ssl:error] [pid 2947595:tid 2947595] (EAI 2)Name or service not known: [client 144.76.19.72:50590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:23.335664 2026] [ssl:error] [pid 2947595:tid 2947595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:23.396407 2026] [lsapi:warn] [pid 2947934:tid 2947934] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:23.484474 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.25:61444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:23.485123 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.25:61444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:23.664671 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.35:22650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:23.665359 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.35:22650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:24.096745 2026] [ssl:error] [pid 2948863:tid 2948863] (70014)End of file found: [client 216.73.216.199:61600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:24.274401 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.30:36224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:24.275025 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.30:36224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:24.399117 2026] [ssl:error] [pid 2948279:tid 2948279] (70014)End of file found: [client 216.73.216.199:10378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:24.487239 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.31:50694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:24.487855 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.31:50694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:24.698897 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.67:51102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:24.699527 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.67:51102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:25.517126 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.46:32944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:25.517867 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.46:32944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:26.114831 2026] [access_compat:error] [pid 2950989:tid 2950989] [client 136.158.37.124:24699] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:47:26.201655 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.44:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:26.202280 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.44:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:26.339530 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.48:64154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:26.340159 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.48:64154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:26.391875 2026] [ssl:error] [pid 2948829:tid 2948829] (EAI 2)Name or service not known: [client 144.76.19.72:50592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:26.391904 2026] [ssl:error] [pid 2948829:tid 2948829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:26.446825 2026] [ssl:error] [pid 2948829:tid 2948829] (EAI 2)Name or service not known: [client 144.76.19.72:50598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:26.446855 2026] [ssl:error] [pid 2948829:tid 2948829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:26.501353 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.40:54722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:26.501974 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.40:54722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:26.939190 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.43:29766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:26.939808 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.43:29766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:27.004142 2026] [authz_core:error] [pid 2951473:tid 2951473] [client 57.141.0.30:36230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:27.004765 2026] [authz_core:error] [pid 2951473:tid 2951473] [client 57.141.0.30:36230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:27.178873 2026] [authz_core:error] [pid 2951473:tid 2951473] [client 57.141.0.65:39256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:27.179494 2026] [authz_core:error] [pid 2951473:tid 2951473] [client 57.141.0.65:39256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:27.453079 2026] [ssl:error] [pid 2950498:tid 2950498] (70014)End of file found: [client 216.73.216.199:47471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:27.663940 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.51:62714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:27.664646 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.51:62714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:27.965435 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.1:24266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:27.966058 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.1:24266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:28.349125 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.39:24730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:28.349750 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.39:24730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:28.914809 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.65:39272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:28.915426 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.65:39272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:29.167011 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.23:64430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:29.167686 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.23:64430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:29.502976 2026] [ssl:error] [pid 2948801:tid 2948801] (EAI 2)Name or service not known: [client 144.76.19.72:50612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:29.503001 2026] [ssl:error] [pid 2948801:tid 2948801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:29.558677 2026] [ssl:error] [pid 2946276:tid 2946276] (EAI 2)Name or service not known: [client 144.76.19.72:18712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:29.558704 2026] [ssl:error] [pid 2946276:tid 2946276] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:29.631603 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.38:62130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:29.632222 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.38:62130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:29.735870 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.29:61852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:29.736494 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.29:61852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:29.792475 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.70:45228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:29.793095 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.70:45228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:30.190156 2026] [ssl:error] [pid 2947934:tid 2947934] (70014)End of file found: [client 216.73.216.199:53511] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:30.502437 2026] [lsapi:warn] [pid 2951600:tid 2951600] [client 216.73.216.199:21086] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Undefined array key "pass" in /var/softaculous/moodle39/add_admin.php on line 6\n
[Thu Jul 30 11:47:30.647385 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.46:32958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:30.648007 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.46:32958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:30.755212 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.49:35514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:30.755830 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.49:35514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:30.846089 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.41:49630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:30.846705 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.41:49630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:31.032564 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.39:24744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:31.033184 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.39:24744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:31.051808 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.28:53324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:31.052427 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.28:53324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:31.241340 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.10:49448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:31.242002 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.10:49448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:31.256714 2026] [access_compat:error] [pid 2950497:tid 2950497] [client 43.159.62.129:40224] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 11:47:31.256812 2026] [access_compat:error] [pid 2950497:tid 2950497] [client 43.159.62.129:40224] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 11:47:31.839050 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.54:59220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:31.839702 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.54:59220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:32.035906 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.47:51682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:32.036900 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.47:51682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:32.478412 2026] [security2:error] [pid 2950989:tid 2950989] [client 74.7.243.219:41504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.blackseaexpress.banskoexpress.com"] [uri "/"] [unique_id "amsrxHy4Ok-AkgivQ1bt2wAAAAw"]
[Thu Jul 30 11:47:32.614084 2026] [ssl:error] [pid 2949670:tid 2949670] (EAI 2)Name or service not known: [client 144.76.19.72:18716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:32.614121 2026] [ssl:error] [pid 2949670:tid 2949670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:32.668990 2026] [ssl:error] [pid 2948828:tid 2948828] (EAI 2)Name or service not known: [client 144.76.19.72:18730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:32.669025 2026] [ssl:error] [pid 2948828:tid 2948828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:32.790132 2026] [authz_core:error] [pid 2951597:tid 2951597] [client 52.238.199.152:26782] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/IXR/error_log
[Thu Jul 30 11:47:32.886551 2026] [lsapi:warn] [pid 2948864:tid 2948864] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:33.190397 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.50:40610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:33.191047 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.50:40610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:33.282972 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.66:29330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:33.283635 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.66:29330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:33.567097 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.55:23348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:33.567732 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.55:23348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:33.873811 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.67:46952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:33.874524 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.67:46952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:34.030916 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.23:64454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:34.031571 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.23:64454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:34.148486 2026] [lsapi:warn] [pid 2949779:tid 2949779] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:34.733575 2026] [ssl:error] [pid 2951600:tid 2951600] (70014)End of file found: [client 216.73.216.199:21086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:35.450192 2026] [ssl:error] [pid 2948523:tid 2948523] (70014)End of file found: [client 216.73.216.199:6896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:35.725562 2026] [ssl:error] [pid 2951535:tid 2951535] (EAI 2)Name or service not known: [client 144.76.19.72:18746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:35.725620 2026] [ssl:error] [pid 2951535:tid 2951535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:35.778780 2026] [ssl:error] [pid 2950451:tid 2950451] (EAI 2)Name or service not known: [client 144.76.19.72:18756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:35.778814 2026] [ssl:error] [pid 2950451:tid 2950451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:35.995200 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.50:40618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:35.995834 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.50:40618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:36.030190 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.61:43368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:36.030821 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.61:43368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:36.084444 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.37:58070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:36.085077 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.37:58070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:36.550555 2026] [ssl:error] [pid 2949670:tid 2949670] (70014)End of file found: [client 216.73.216.199:12428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:36.719779 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.34:37080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:36.720434 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.34:37080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:37.028648 2026] [access_compat:error] [pid 2937892:tid 2937892] [client 136.158.37.124:25732] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:47:37.548026 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.4:33530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:37.548680 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.4:33530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:37.761862 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.63:28848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:37.762535 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.63:28848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:38.145197 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.21:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:38.145824 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.21:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:38.586223 2026] [core:error] [pid 2948828:tid 2948828] [client 66.249.66.167:40114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:38.586265 2026] [core:error] [pid 2948828:tid 2948828] [client 66.249.66.167:40114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:38.631572 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.71:55334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:38.632208 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.71:55334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:38.837010 2026] [ssl:error] [pid 2948325:tid 2948325] (EAI 2)Name or service not known: [client 144.76.19.72:18762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:38.837035 2026] [ssl:error] [pid 2948325:tid 2948325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:38.866019 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.51:30954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:38.866671 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.51:30954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:38.891444 2026] [ssl:error] [pid 2951473:tid 2951473] (EAI 2)Name or service not known: [client 144.76.19.72:18764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:38.891475 2026] [ssl:error] [pid 2951473:tid 2951473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:39.258837 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.7:63508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:39.259462 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.7:63508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:39.353590 2026] [security2:error] [pid 2937895:tid 2937895] [client 185.191.171.14:61932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/requirements-for-getting-married-in-gambia"] [unique_id "amsry6kU3yIAC4beO1-WDQAAAEE"]
[Thu Jul 30 11:47:39.380290 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.51:30960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:39.380935 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.51:30960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:39.847794 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.3:57150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:39.848419 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.3:57150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:40.353205 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.19:36016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:40.353862 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.19:36016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:40.456670 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.52:24136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:40.457320 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.52:24136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:40.474424 2026] [ssl:error] [pid 2948828:tid 2948828] (70014)End of file found: [client 216.73.216.199:8828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:40.686813 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.55:23374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:40.687460 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.55:23374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:40.724497 2026] [authz_core:error] [pid 2950490:tid 2950490] [client 57.141.0.26:52452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:40.725160 2026] [authz_core:error] [pid 2950490:tid 2950490] [client 57.141.0.26:52452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:41.666175 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 66.249.66.65:40558] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 11:47:41.966552 2026] [ssl:error] [pid 2948523:tid 2948523] (EAI 2)Name or service not known: [client 144.76.19.72:45684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:41.966585 2026] [ssl:error] [pid 2948523:tid 2948523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:41.987460 2026] [ssl:error] [pid 2948860:tid 2948860] (70014)End of file found: [client 216.73.216.199:15705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:42.015693 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.71:55340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:42.016312 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.71:55340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:42.020908 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:45700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:42.020931 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:42.183839 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.44:43330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:42.184483 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.44:43330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:42.864882 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.68:31068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:42.865502 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.68:31068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:42.988257 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.48:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:42.989428 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.48:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:43.223522 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.61:29066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:43.224163 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.61:29066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:43.388083 2026] [lsapi:warn] [pid 2951536:tid 2951536] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:43.506103 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.51:30972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:43.506766 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.51:30972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:43.710471 2026] [authz_core:error] [pid 2950989:tid 2950989] [client 57.141.0.14:27928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:43.711173 2026] [authz_core:error] [pid 2950989:tid 2950989] [client 57.141.0.14:27928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:44.059789 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.46:44078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:44.060418 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.46:44078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:44.085661 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.59:23060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:44.086306 2026] [authz_core:error] [pid 2946276:tid 2946276] [client 57.141.0.59:23060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:44.272147 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.51:30978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:44.272778 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.51:30978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:44.427391 2026] [core:error] [pid 2927346:tid 2927346] (13)Permission denied: [client 216.73.216.199:45865] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty53/subsystem/ttyS3/close_delay
[Thu Jul 30 11:47:44.798864 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.33:56614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:44.799530 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.33:56614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:45.050867 2026] [lsapi:warn] [pid 2951598:tid 2951598] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:45.079931 2026] [ssl:error] [pid 2952708:tid 2952708] (EAI 2)Name or service not known: [client 144.76.19.72:45710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:45.079973 2026] [ssl:error] [pid 2952708:tid 2952708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:45.133606 2026] [ssl:error] [pid 2950450:tid 2950450] (EAI 2)Name or service not known: [client 144.76.19.72:45712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:45.133678 2026] [ssl:error] [pid 2950450:tid 2950450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:45.345474 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.33:56626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:45.346167 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.33:56626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:45.555644 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.63:28850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:45.556327 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.63:28850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:45.861849 2026] [core:crit] [pid 2952799:tid 2952799] (13)Permission denied: [client 85.215.116.2:52885] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 11:47:45.861940 2026] [authz_core:error] [pid 2952799:tid 2952799] [client 85.215.116.2:52885] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 11:47:45.862376 2026] [core:crit] [pid 2952799:tid 2952799] (13)Permission denied: [client 85.215.116.2:52885] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 11:47:45.862396 2026] [core:crit] [pid 2952799:tid 2952799] (13)Permission denied: [client 85.215.116.2:52885] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 11:47:45.862424 2026] [core:crit] [pid 2952799:tid 2952799] (13)Permission denied: [client 85.215.116.2:52885] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 11:47:45.885764 2026] [security2:error] [pid 2948828:tid 2948828] [client 74.7.241.22:39328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amsr0f1ayHod7yHi5AdbgQAAAC4"], referer: https://marketingdirectoy.com
[Thu Jul 30 11:47:46.157020 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.29:22564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:46.157663 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.29:22564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:46.748196 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.25:31504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:46.748811 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.25:31504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:46.931389 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.21:56130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:46.932489 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.21:56130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:47.325913 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.15:62560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:47.327424 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.15:62560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:47.897554 2026] [access_compat:error] [pid 2950490:tid 2950490] [client 136.158.37.124:26588] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:47:47.937798 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.24:40410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:47.938424 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.24:40410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:47.999929 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.13:53368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:48.000566 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.13:53368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:48.186976 2026] [ssl:error] [pid 2950450:tid 2950450] (EAI 2)Name or service not known: [client 144.76.19.72:45728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:48.187000 2026] [ssl:error] [pid 2950450:tid 2950450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:48.201714 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.67:37906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:48.202338 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.67:37906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:48.233145 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.70:23244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:48.233757 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.70:23244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:48.238667 2026] [ssl:error] [pid 2950449:tid 2950449] (EAI 2)Name or service not known: [client 144.76.19.72:45730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:48.238721 2026] [ssl:error] [pid 2950449:tid 2950449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:48.942577 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:45865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:48.965910 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.54:22706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:48.966586 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.54:22706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:48.970935 2026] [lsapi:warn] [pid 2947851:tid 2947851] [client 94.130.207.27:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:49.141897 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.53:35008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:49.142529 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.53:35008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:49.174752 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.55:59454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:49.175374 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.55:59454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:49.244572 2026] [ssl:error] [pid 2948860:tid 2948860] (70014)End of file found: [client 216.73.216.199:40995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:50.001111 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.28:32692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:50.001737 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.28:32692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:50.023575 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.62:33780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:50.024210 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.62:33780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:50.384052 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.5:57720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:50.384685 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.5:57720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:50.452914 2026] [ssl:error] [pid 2946210:tid 2946210] (70014)End of file found: [client 216.73.216.199:2632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:50.676208 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.4:42480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:50.676848 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.4:42480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:51.135538 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.16:21618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:51.136178 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.16:21618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:51.257463 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.48:38614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:51.258109 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.48:38614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:51.294559 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:37122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:51.294595 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:51.346483 2026] [ssl:error] [pid 2948326:tid 2948326] (EAI 2)Name or service not known: [client 144.76.19.72:37126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:51.346547 2026] [ssl:error] [pid 2948326:tid 2948326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:51.859222 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.10:25878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:51.859836 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.10:25878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:52.019381 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.2:58532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:52.020082 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.2:58532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:52.741040 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.31:58624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:52.741710 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.31:58624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:53.155307 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.10:25906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:53.155933 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.10:25906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:53.431580 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.35:60062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:53.432232 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.35:60062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:53.651530 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.58:42212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:53.652155 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.58:42212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:53.926744 2026] [lsapi:warn] [pid 2950493:tid 2950493] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:53.950112 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.15:62592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:53.950734 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.15:62592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:54.304840 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.29:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:54.305466 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.29:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:54.379454 2026] [authz_core:error] [pid 2951597:tid 2951597] [client 57.141.0.64:42528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:54.380106 2026] [authz_core:error] [pid 2951597:tid 2951597] [client 57.141.0.64:42528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:54.387193 2026] [ssl:error] [pid 2927346:tid 2927346] (70014)End of file found: [client 216.73.216.199:63718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:54.419246 2026] [ssl:error] [pid 2937855:tid 2937855] (EAI 2)Name or service not known: [client 144.76.19.72:37132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:54.419277 2026] [ssl:error] [pid 2937855:tid 2937855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:54.473315 2026] [ssl:error] [pid 2951597:tid 2951597] (EAI 2)Name or service not known: [client 144.76.19.72:37144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:54.473350 2026] [ssl:error] [pid 2951597:tid 2951597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:54.474611 2026] [core:error] [pid 2950052:tid 2950052] [client 66.249.66.3:63053] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:54.474639 2026] [core:error] [pid 2950052:tid 2950052] [client 66.249.66.3:63053] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:47:55.000319 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.47:23320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:55.000951 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.47:23320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:55.097120 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.19:21924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:55.097745 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.19:21924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:55.179662 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.23:55002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:55.180303 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.23:55002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:55.195258 2026] [ssl:error] [pid 2946240:tid 2946240] (70014)End of file found: [client 216.73.216.199:28278] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:47:55.706594 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.7:27962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:55.707312 2026] [authz_core:error] [pid 2946282:tid 2946282] [client 57.141.0.7:27962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:55.849240 2026] [lsapi:warn] [pid 2952800:tid 2952800] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:47:55.970871 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.56:20058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:55.971496 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.56:20058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:57.327006 2026] [authz_core:error] [pid 2950384:tid 2950384] [client 57.141.0.8:25068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:57.327654 2026] [authz_core:error] [pid 2950384:tid 2950384] [client 57.141.0.8:25068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:57.399741 2026] [core:error] [pid 2948860:tid 2948860] (13)Permission denied: [client 216.73.216.199:3422] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory102/subsystem/uevent
[Thu Jul 30 11:47:57.695496 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.63:32806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:57.696155 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.63:32806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:57.696646 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.55:26052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:57.697275 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.55:26052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:57.865948 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.61:31394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:57.866579 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.61:31394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:57.872309 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.44:30978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:57.872912 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.44:30978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:57.952148 2026] [ssl:error] [pid 2953723:tid 2953723] (EAI 2)Name or service not known: [client 144.76.19.72:37154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:57.952185 2026] [ssl:error] [pid 2953723:tid 2953723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:58.005737 2026] [ssl:error] [pid 2950449:tid 2950449] (EAI 2)Name or service not known: [client 144.76.19.72:37162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:47:58.005764 2026] [ssl:error] [pid 2950449:tid 2950449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:47:58.071721 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.40:46586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:58.072344 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.40:46586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:58.081992 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.4:42492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:58.082626 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.4:42492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:58.497880 2026] [authz_core:error] [pid 2952800:tid 2952800] [client 57.141.0.23:55004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:58.498579 2026] [authz_core:error] [pid 2952800:tid 2952800] [client 57.141.0.23:55004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:58.887381 2026] [access_compat:error] [pid 2929315:tid 2929315] [client 136.158.37.124:27553] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:47:59.115583 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.35:22262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:59.116265 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.35:22262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:59.183745 2026] [authz_core:error] [pid 2953804:tid 2953804] [client 57.141.0.42:60834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:59.184394 2026] [authz_core:error] [pid 2953804:tid 2953804] [client 57.141.0.42:60834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:59.370228 2026] [access_compat:error] [pid 2953803:tid 2953803] [client 45.158.164.139:43658] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:47:59.473325 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.36:30588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:59.473948 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.36:30588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:59.702968 2026] [authz_core:error] [pid 2953804:tid 2953804] [client 57.141.0.42:60840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:47:59.703600 2026] [authz_core:error] [pid 2953804:tid 2953804] [client 57.141.0.42:60840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:47:59.806436 2026] [ssl:error] [pid 2948860:tid 2948860] (70014)End of file found: [client 216.73.216.199:3422] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:00.304204 2026] [ssl:error] [pid 2952708:tid 2952708] (70014)End of file found: [client 216.73.216.199:37327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:00.368153 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.16:40632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:00.368780 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.16:40632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:00.592851 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.70:42326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:00.593480 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.70:42326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:01.085182 2026] [ssl:error] [pid 2953723:tid 2953723] (EAI 2)Name or service not known: [client 144.76.19.72:64062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:01.085207 2026] [ssl:error] [pid 2953723:tid 2953723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:01.113365 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.31:21672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:01.114002 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.31:21672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:01.136686 2026] [ssl:error] [pid 2950450:tid 2950450] (EAI 2)Name or service not known: [client 144.76.19.72:64074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:01.136718 2026] [ssl:error] [pid 2950450:tid 2950450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:01.313457 2026] [ssl:error] [pid 2953802:tid 2953802] (70014)End of file found: [client 216.73.216.199:38597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:01.389233 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.19:21934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:01.389859 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.19:21934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:01.558907 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.36:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:01.559613 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.36:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:01.765302 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.29:32634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:01.765926 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.29:32634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:02.053131 2026] [core:error] [pid 2950384:tid 2950384] [client 66.249.64.170:60967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:02.053167 2026] [core:error] [pid 2950384:tid 2950384] [client 66.249.64.170:60967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:02.422117 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.59:41902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:02.422749 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.59:41902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:02.806479 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.69:33996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:02.807126 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.69:33996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:02.835826 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.22:59750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:02.836479 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.22:59750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:02.837817 2026] [security2:error] [pid 2950450:tid 2950450] [client 49.235.136.28:50006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "amsr4ht01mXt_8TtSArGLQAAADY"]
[Thu Jul 30 11:48:03.490615 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.70:42332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:03.491275 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.70:42332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:03.610806 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.3:58426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:03.611457 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.3:58426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:04.065739 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.26:27812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:04.066428 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.26:27812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:04.191097 2026] [ssl:error] [pid 2953722:tid 2953722] (EAI 2)Name or service not known: [client 144.76.19.72:64076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:04.191126 2026] [ssl:error] [pid 2953722:tid 2953722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:04.242942 2026] [ssl:error] [pid 2950448:tid 2950448] (EAI 2)Name or service not known: [client 144.76.19.72:64086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:04.242973 2026] [ssl:error] [pid 2950448:tid 2950448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:04.394082 2026] [lsapi:warn] [pid 2946241:tid 2946241] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:04.734219 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.39:37510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:04.734872 2026] [authz_core:error] [pid 2950450:tid 2950450] [client 57.141.0.39:37510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:04.850874 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.34:34302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:04.851554 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.34:34302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:05.025888 2026] [core:error] [pid 2951536:tid 2951536] [client 66.249.66.67:37447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:05.025917 2026] [core:error] [pid 2951536:tid 2951536] [client 66.249.66.67:37447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:05.522273 2026] [core:error] [pid 2950052:tid 2950052] (13)Permission denied: [client 216.73.216.199:3305] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS0/closing_wait
[Thu Jul 30 11:48:05.647279 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.39:37518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:05.647968 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.39:37518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:05.823823 2026] [core:error] [pid 2950052:tid 2950052] (13)Permission denied: [client 216.73.216.199:3305] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/device/driver/uevent
[Thu Jul 30 11:48:05.951772 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.58:53074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:05.952420 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.58:53074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:06.121209 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.44:41584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:06.121848 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.44:41584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:06.124883 2026] [ssl:error] [pid 2950052:tid 2950052] (70014)End of file found: [client 216.73.216.199:3305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:06.153352 2026] [lsapi:warn] [pid 2953803:tid 2953803] [client 52.17.160.9:33314] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:06.153410 2026] [lsapi:warn] [pid 2953803:tid 2953803] [client 52.17.160.9:33314] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:06.294458 2026] [security2:error] [pid 2937855:tid 2937855] [client 18.199.86.73:51976] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.thelambproductions.com"] [uri "/.git/config"] [unique_id "amsr5miRLhCIgTgu6BOJAAAAADU"]
[Thu Jul 30 11:48:06.294726 2026] [security2:error] [pid 2937855:tid 2937855] [client 18.199.86.73:51976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.thelambproductions.com"] [uri "/.git/config"] [unique_id "amsr5miRLhCIgTgu6BOJAAAAADU"]
[Thu Jul 30 11:48:06.320750 2026] [security2:error] [pid 2937855:tid 2937855] [client 18.199.86.73:51976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.thelambproductions.com"] [uri "/403.shtml"] [unique_id "amsr5miRLhCIgTgu6BOJAAAAADU"]
[Thu Jul 30 11:48:06.330359 2026] [security2:error] [pid 2951597:tid 2951597] [client 54.92.171.106:53423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/p.php"] [unique_id "amsr5sAF85TqO_xZqY4WogAAABM"]
[Thu Jul 30 11:48:06.542027 2026] [lsapi:warn] [pid 2953519:tid 2953519] [client 34.249.87.65:33248] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:06.542096 2026] [lsapi:warn] [pid 2953519:tid 2953519] [client 34.249.87.65:33248] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:06.545883 2026] [lsapi:warn] [pid 2950384:tid 2950384] [client 34.249.87.65:46290] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:06.545926 2026] [lsapi:warn] [pid 2950384:tid 2950384] [client 34.249.87.65:46290] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:06.669405 2026] [lsapi:warn] [pid 2948864:tid 2948864] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:06.814891 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.30:33120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:06.815528 2026] [authz_core:error] [pid 2947934:tid 2947934] [client 57.141.0.30:33120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:06.928764 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.38:23980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:06.929386 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.38:23980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:06.994617 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.31:31240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:06.995234 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.31:31240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:07.336015 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.63:56180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:07.336729 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.63:56180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:07.481660 2026] [ssl:error] [pid 2952708:tid 2952708] (EAI 2)Name or service not known: [client 144.76.19.72:64090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:07.481689 2026] [ssl:error] [pid 2952708:tid 2952708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:07.542939 2026] [ssl:error] [pid 2947934:tid 2947934] (EAI 2)Name or service not known: [client 144.76.19.72:64106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:07.542980 2026] [ssl:error] [pid 2947934:tid 2947934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:07.654947 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.29:32664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:07.655585 2026] [authz_core:error] [pid 2948860:tid 2948860] [client 57.141.0.29:32664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:07.935844 2026] [ssl:error] [pid 2953722:tid 2953722] (70014)End of file found: [client 216.73.216.199:45700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:08.191408 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.23:58924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:08.192036 2026] [authz_core:error] [pid 2932070:tid 2932070] [client 57.141.0.23:58924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:08.273582 2026] [security2:error] [pid 2948864:tid 2948864] [client 49.51.72.76:35312] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.3dworkstation.co.uk"] [uri "/"] [unique_id "amsr6BAIv927ktfz6LILTQAAADQ"]
[Thu Jul 30 11:48:09.013948 2026] [lsapi:warn] [pid 2932070:tid 2932070] [client 20.90.138.244:23856] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:09.013991 2026] [lsapi:warn] [pid 2932070:tid 2932070] [client 20.90.138.244:23856] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:09.094365 2026] [authz_core:error] [pid 2951597:tid 2951597] [client 57.141.0.37:44356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:09.095054 2026] [authz_core:error] [pid 2951597:tid 2951597] [client 57.141.0.37:44356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:09.190021 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.68:34938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:09.190661 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.68:34938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:09.377109 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.28:40016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:09.377725 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.28:40016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:09.749590 2026] [security2:error] [pid 2948860:tid 2948860] [client 185.191.171.5:19786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3288.0/prev_next,next.html"] [unique_id "amsr6e59qeoJxo-WgFHvhwAAADA"]
[Thu Jul 30 11:48:10.037580 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.68:34952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:10.038204 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.68:34952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:10.340100 2026] [ssl:error] [pid 2950448:tid 2950448] (70014)End of file found: [client 216.73.216.199:57029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:10.343766 2026] [lsapi:warn] [pid 2948524:tid 2948524] [client 34.249.87.65:42912] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:10.343802 2026] [lsapi:warn] [pid 2948524:tid 2948524] [client 34.249.87.65:42912] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:10.440204 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.3:63718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:10.440828 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.3:63718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:10.615250 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:26652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:10.615277 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:10.627165 2026] [authz_core:error] [pid 2953804:tid 2953804] [client 57.141.0.44:50782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:10.627776 2026] [authz_core:error] [pid 2953804:tid 2953804] [client 57.141.0.44:50782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:10.671663 2026] [ssl:error] [pid 2954417:tid 2954417] (EAI 2)Name or service not known: [client 144.76.19.72:26656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:10.671696 2026] [ssl:error] [pid 2954417:tid 2954417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:10.770385 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.63:56186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:10.771009 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.63:56186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:10.864889 2026] [lsapi:warn] [pid 2951535:tid 2951535] [client 20.90.138.244:18399] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:10.864930 2026] [lsapi:warn] [pid 2951535:tid 2951535] [client 20.90.138.244:18399] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:11.302809 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.32:61410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:11.303438 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.32:61410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:11.329543 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.50:36214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:11.330184 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.50:36214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:11.562997 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.28:40024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:11.563630 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.28:40024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:11.642948 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.66:21738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:11.643578 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.66:21738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:11.739425 2026] [lsapi:warn] [pid 2948524:tid 2948524] [client 34.249.87.65:39716] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:11.739456 2026] [lsapi:warn] [pid 2948524:tid 2948524] [client 34.249.87.65:39716] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:12.299282 2026] [lsapi:warn] [pid 2948387:tid 2948387] [client 20.90.138.244:24513] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:48:12.299314 2026] [lsapi:warn] [pid 2948387:tid 2948387] [client 20.90.138.244:24513] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:48:12.432661 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.30:57942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:12.433432 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.30:57942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:12.648940 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.8:21338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:12.650131 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.8:21338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:12.722243 2026] [access_compat:error] [pid 2950312:tid 2950312] [client 136.158.37.124:28501] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:48:13.539350 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.50:36230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:13.539999 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.50:36230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:13.590392 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.20:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:13.591134 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.20:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:13.728909 2026] [ssl:error] [pid 2950493:tid 2950493] (EAI 2)Name or service not known: [client 144.76.19.72:26672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:13.728954 2026] [ssl:error] [pid 2950493:tid 2950493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:13.786168 2026] [ssl:error] [pid 2951535:tid 2951535] (EAI 2)Name or service not known: [client 144.76.19.72:26688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:13.786199 2026] [ssl:error] [pid 2951535:tid 2951535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:13.951990 2026] [ssl:error] [pid 2948279:tid 2948279] (70014)End of file found: [client 216.73.216.199:3441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:14.039878 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.32:28536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:14.040610 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.32:28536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:14.081568 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.33:64438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:14.082311 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.33:64438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:14.347221 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.17:56598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:14.347877 2026] [authz_core:error] [pid 2951535:tid 2951535] [client 57.141.0.17:56598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:14.531158 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.30:57958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:14.531905 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.30:57958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:14.892152 2026] [lsapi:warn] [pid 2951535:tid 2951535] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:14.898007 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.5:44030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:14.898633 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.5:44030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:15.258248 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.13:63324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:15.258879 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.13:63324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:15.604023 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.55:22460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:15.604746 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.55:22460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:15.767551 2026] [core:crit] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/web-monitoring-tool/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/web-monitoring-tool/' is executable
[Thu Jul 30 11:48:15.773903 2026] [core:crit] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/pure-ftpd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/pure-ftpd/' is executable
[Thu Jul 30 11:48:15.778050 2026] [core:crit] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/chkservd.services_suspend/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/chkservd.services_suspend/' is executable
[Thu Jul 30 11:48:15.778154 2026] [core:crit] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/restartsrv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/restartsrv/' is executable
[Thu Jul 30 11:48:15.778186 2026] [core:crit] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/chrony/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/chrony/' is executable
[Thu Jul 30 11:48:15.792117 2026] [core:crit] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/rpcbind/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/rpcbind/' is executable
[Thu Jul 30 11:48:15.808325 2026] [core:crit] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/cryptsetup/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/cryptsetup/' is executable
[Thu Jul 30 11:48:16.064964 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.40:41280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:16.065720 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.40:41280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:16.473191 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.48:24336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:16.473816 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.48:24336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:16.837757 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.2:42456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:16.838381 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.2:42456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:16.845083 2026] [ssl:error] [pid 2951598:tid 2951598] (EAI 2)Name or service not known: [client 144.76.19.72:26690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:16.845118 2026] [ssl:error] [pid 2951598:tid 2951598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:16.901769 2026] [ssl:error] [pid 2953519:tid 2953519] (EAI 2)Name or service not known: [client 144.76.19.72:26696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:16.901814 2026] [ssl:error] [pid 2953519:tid 2953519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:17.135986 2026] [authz_core:error] [pid 2950989:tid 2950989] [client 57.141.0.58:48128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:17.136654 2026] [authz_core:error] [pid 2950989:tid 2950989] [client 57.141.0.58:48128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:17.255308 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.36:62722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:17.255930 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.36:62722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:17.360084 2026] [lsapi:warn] [pid 2948860:tid 2948860] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:17.705673 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.53:24484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:17.706413 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.53:24484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:17.790886 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.51:43482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:17.791515 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.51:43482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:18.249626 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.27:62312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:18.250247 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.27:62312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:18.472795 2026] [core:error] [pid 2950493:tid 2950493] (13)Permission denied: [client 216.73.216.199:1830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 11:48:18.697061 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.17:56610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:18.697691 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.17:56610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:18.782054 2026] [ssl:error] [pid 2950493:tid 2950493] (70014)End of file found: [client 216.73.216.199:1830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:18.927133 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.65:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:18.927756 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.65:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:19.193841 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.24:34296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:19.194478 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.24:34296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:19.255920 2026] [ssl:error] [pid 2950491:tid 2950491] (70014)End of file found: [client 216.73.216.199:52177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:19.283206 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.18:25478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:19.283829 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.18:25478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:19.315340 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.13:63340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:19.316088 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.13:63340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:19.593390 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.54:48256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:19.594008 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.54:48256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:19.955035 2026] [ssl:error] [pid 2948279:tid 2948279] (EAI 2)Name or service not known: [client 144.76.19.72:24852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:19.955063 2026] [ssl:error] [pid 2948279:tid 2948279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:20.010166 2026] [ssl:error] [pid 2951536:tid 2951536] (EAI 2)Name or service not known: [client 144.76.19.72:24854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:20.010200 2026] [ssl:error] [pid 2951536:tid 2951536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:20.275469 2026] [core:error] [pid 2946241:tid 2946241] (13)Permission denied: [client 216.73.216.199:8596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/machinecheck/machinecheck4/subsystem/uevent
[Thu Jul 30 11:48:20.451382 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.28:53286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:20.452002 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.28:53286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:20.456941 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.47:64226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:20.457663 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.47:64226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:20.576024 2026] [ssl:error] [pid 2946241:tid 2946241] (70014)End of file found: [client 216.73.216.199:8596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:20.778150 2026] [access_compat:error] [pid 2954417:tid 2954417] [client 136.158.37.124:29461] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:48:21.245312 2026] [authz_core:error] [pid 2952800:tid 2952800] [client 57.141.0.69:26590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:21.245934 2026] [authz_core:error] [pid 2952800:tid 2952800] [client 57.141.0.69:26590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:21.598398 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.28:53294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:21.599033 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.28:53294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:21.629455 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.14:28548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:21.630155 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.14:28548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:22.206267 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.9:33376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:22.206962 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.9:33376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:22.534901 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.6:64810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:22.535640 2026] [authz_core:error] [pid 2953803:tid 2953803] [client 57.141.0.6:64810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:22.672928 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.68:59610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:22.673559 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.68:59610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:22.730160 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.19:56336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:22.730788 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.19:56336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:22.786268 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 66.249.66.34:64694] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:48:22.788931 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 66.249.66.34:64694] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:48:23.063672 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:24856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:23.063702 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:23.116899 2026] [ssl:error] [pid 2950052:tid 2950052] (EAI 2)Name or service not known: [client 144.76.19.72:24864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:23.116942 2026] [ssl:error] [pid 2950052:tid 2950052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:23.706516 2026] [core:error] [pid 2951598:tid 2951598] [client 66.249.66.168:40414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:23.706546 2026] [core:error] [pid 2951598:tid 2951598] [client 66.249.66.168:40414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:23.812827 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.59:24806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:23.813471 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.59:24806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:24.136154 2026] [authz_core:error] [pid 2952800:tid 2952800] [client 57.141.0.25:21380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:24.136783 2026] [authz_core:error] [pid 2952800:tid 2952800] [client 57.141.0.25:21380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:24.234390 2026] [ssl:error] [pid 2950052:tid 2950052] (70014)End of file found: [client 216.73.216.199:61006] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:24.289056 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.26:29040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:24.289782 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.26:29040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:24.770229 2026] [ssl:error] [pid 2948523:tid 2948523] (70014)End of file found: [client 216.73.216.199:53277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:24.801370 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.60:50042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:24.802002 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.60:50042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:25.131458 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.71:25964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:25.132088 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.71:25964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:25.356382 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.43:38388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:25.357000 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.43:38388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:25.374155 2026] [security2:error] [pid 2948829:tid 2948829] [client 51.186.192.228:35138] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsr-WAliFdk359yAQ7x1gAAAC8"]
[Thu Jul 30 11:48:25.374198 2026] [security2:error] [pid 2948829:tid 2948829] [client 51.186.192.228:35138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsr-WAliFdk359yAQ7x1gAAAC8"]
[Thu Jul 30 11:48:25.374434 2026] [security2:error] [pid 2948829:tid 2948829] [client 51.186.192.228:35138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsr-WAliFdk359yAQ7x1gAAAC8"]
[Thu Jul 30 11:48:25.381999 2026] [lsapi:warn] [pid 2948279:tid 2948279] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:25.632080 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.17:26164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:25.632836 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.17:26164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:25.694610 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.31:37076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:25.695350 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.31:37076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:25.978720 2026] [ssl:error] [pid 2953802:tid 2953802] (70014)End of file found: [client 216.73.216.199:8392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:26.170221 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:24870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:26.170248 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:26.227563 2026] [ssl:error] [pid 2952800:tid 2952800] (EAI 2)Name or service not known: [client 144.76.19.72:24882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:26.227611 2026] [ssl:error] [pid 2952800:tid 2952800] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:26.387778 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.8:38408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:26.388395 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.8:38408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:26.442919 2026] [security2:error] [pid 2950493:tid 2950493] [client 114.119.146.111:36299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/test/"] [unique_id "amsr-sl4TAeHOhb5eW3kbgAAADs"], referer: http://www.erskinenazarene.co.uk/event/test/?instance_id=37541
[Thu Jul 30 11:48:26.951319 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.3:62444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:26.951938 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.3:62444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:27.080206 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.7:44744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:27.080860 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.7:44744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:27.263208 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.36:29162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:27.263826 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.36:29162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:27.422765 2026] [security2:error] [pid 2946240:tid 2946240] [client 171.250.162.117:33278] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsr-2oL2wuF77VyYlKSBgAAABU"]
[Thu Jul 30 11:48:27.422816 2026] [security2:error] [pid 2946240:tid 2946240] [client 171.250.162.117:33278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsr-2oL2wuF77VyYlKSBgAAABU"]
[Thu Jul 30 11:48:27.423039 2026] [security2:error] [pid 2946240:tid 2946240] [client 171.250.162.117:33278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsr-2oL2wuF77VyYlKSBgAAABU"]
[Thu Jul 30 11:48:27.987538 2026] [security2:error] [pid 2955217:tid 2955217] [client 114.119.146.111:36307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/test/"] [unique_id "amsr-9BXppZPX9rgSNUcNAAAAAw"], referer: http://www.erskinenazarene.co.uk/event/test/?instance_id=37541
[Thu Jul 30 11:48:28.005294 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.54:38114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:28.005919 2026] [authz_core:error] [pid 2951600:tid 2951600] [client 57.141.0.54:38114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:28.020953 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.38:49100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:28.021687 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.38:49100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:28.304087 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.70:60410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:28.304710 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.70:60410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:28.441270 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.13:27224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:28.441894 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.13:27224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:28.643870 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 66.249.66.33:64377] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:48:28.646951 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 66.249.66.33:64377] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:48:29.008093 2026] [lsapi:warn] [pid 2948861:tid 2948861] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:29.297898 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.51:57228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:29.298543 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.51:57228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:29.299650 2026] [ssl:error] [pid 2948801:tid 2948801] (EAI 2)Name or service not known: [client 144.76.19.72:24898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:29.299674 2026] [ssl:error] [pid 2948801:tid 2948801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:29.300731 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.61:26836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:29.301335 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.61:26836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:29.355605 2026] [ssl:error] [pid 2946240:tid 2946240] (EAI 2)Name or service not known: [client 144.76.19.72:24914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:29.355637 2026] [ssl:error] [pid 2946240:tid 2946240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:29.732601 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.49:34150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:29.733224 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.49:34150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:29.789606 2026] [ssl:error] [pid 2950052:tid 2950052] (70014)End of file found: [client 216.73.216.199:63733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:29.809548 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.34:40662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:29.810165 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.34:40662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:29.811802 2026] [security2:error] [pid 2946240:tid 2946240] [client 27.76.25.124:44876] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsr_WoL2wuF77VyYlKSCQAAABU"]
[Thu Jul 30 11:48:29.811854 2026] [security2:error] [pid 2946240:tid 2946240] [client 27.76.25.124:44876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsr_WoL2wuF77VyYlKSCQAAABU"]
[Thu Jul 30 11:48:29.812080 2026] [security2:error] [pid 2946240:tid 2946240] [client 27.76.25.124:44876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsr_WoL2wuF77VyYlKSCQAAABU"]
[Thu Jul 30 11:48:30.405303 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.23:62294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:30.406428 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.23:62294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:30.863131 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.9:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:30.863751 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.9:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:31.098015 2026] [ssl:error] [pid 2947080:tid 2947080] (70014)End of file found: [client 216.73.216.199:33650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:31.376298 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.19:56364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:31.376922 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.19:56364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:31.579859 2026] [access_compat:error] [pid 2948326:tid 2948326] [client 136.158.37.124:30428] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:48:31.820461 2026] [security2:error] [pid 2953802:tid 2953802] [client 18.199.86.73:53792] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.wartypig.com"] [uri "/.git/config"] [unique_id "amsr_yvFyZjFLMVi0jc-GwAAAC4"]
[Thu Jul 30 11:48:31.820667 2026] [security2:error] [pid 2953802:tid 2953802] [client 18.199.86.73:53792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.wartypig.com"] [uri "/.git/config"] [unique_id "amsr_yvFyZjFLMVi0jc-GwAAAC4"]
[Thu Jul 30 11:48:31.846729 2026] [security2:error] [pid 2953802:tid 2953802] [client 18.199.86.73:53792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.wartypig.com"] [uri "/403.shtml"] [unique_id "amsr_yvFyZjFLMVi0jc-GwAAAC4"]
[Thu Jul 30 11:48:32.015153 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.36:38174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:32.015855 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.36:38174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:32.106177 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.11:28968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:32.106799 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.11:28968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:32.413371 2026] [ssl:error] [pid 2949670:tid 2949670] (EAI 2)Name or service not known: [client 144.76.19.72:40478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:32.413399 2026] [ssl:error] [pid 2949670:tid 2949670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:32.469130 2026] [ssl:error] [pid 2953802:tid 2953802] (EAI 2)Name or service not known: [client 144.76.19.72:40486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:32.469165 2026] [ssl:error] [pid 2953802:tid 2953802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:32.475442 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.20:43730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:32.476063 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.20:43730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:33.158297 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.8:38424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:33.158920 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.8:38424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:33.204348 2026] [core:error] [pid 2948861:tid 2948861] (13)Permission denied: [client 216.73.216.199:58973] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/usbmon/usbmon1/device/driver/remove_id
[Thu Jul 30 11:48:33.264009 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.25:28432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:33.264644 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.25:28432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:33.403309 2026] [core:error] [pid 2954417:tid 2954417] [client 66.249.66.167:54753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:33.403347 2026] [core:error] [pid 2954417:tid 2954417] [client 66.249.66.167:54753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:33.436346 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.62:36184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:33.436965 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.62:36184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:33.505341 2026] [ssl:error] [pid 2948861:tid 2948861] (70014)End of file found: [client 216.73.216.199:58973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:33.607112 2026] [core:error] [pid 2945050:tid 2945050] [client 57.141.0.45:56376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:33.607138 2026] [core:error] [pid 2945050:tid 2945050] [client 57.141.0.45:56376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:33.897352 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.60:43744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:33.897977 2026] [authz_core:error] [pid 2945050:tid 2945050] [client 57.141.0.60:43744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:34.086312 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.41:62016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:34.086942 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.41:62016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:34.692008 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.55:55122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:34.692643 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.55:55122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:34.864118 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.6:21596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:34.864739 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.6:21596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:35.051251 2026] [security2:error] [pid 2950052:tid 2950052] [client 85.208.96.206:46154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7007.0.html"] [unique_id "amssA4CL4SqLfgTtVvIg-AAAAAs"]
[Thu Jul 30 11:48:35.201643 2026] [ssl:error] [pid 2955518:tid 2955518] (70014)End of file found: [client 216.73.216.199:62656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:35.229220 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.59:48580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:35.229834 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.59:48580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:35.281550 2026] [authz_core:error] [pid 2955516:tid 2955516] [client 57.141.0.68:60236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:35.282213 2026] [authz_core:error] [pid 2955516:tid 2955516] [client 57.141.0.68:60236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:35.525053 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.11:28974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:35.525703 2026] [ssl:error] [pid 2950052:tid 2950052] (EAI 2)Name or service not known: [client 144.76.19.72:40492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:35.525724 2026] [ssl:error] [pid 2950052:tid 2950052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:35.525795 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.11:28974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:35.583189 2026] [ssl:error] [pid 2952708:tid 2952708] (EAI 2)Name or service not known: [client 144.76.19.72:40498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:35.583215 2026] [ssl:error] [pid 2952708:tid 2952708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:35.742884 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.58:20430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:35.743513 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.58:20430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:35.859511 2026] [lsapi:warn] [pid 2953519:tid 2953519] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:35.877093 2026] [authz_core:error] [pid 2955516:tid 2955516] [client 57.141.0.69:40028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:35.877711 2026] [authz_core:error] [pid 2955516:tid 2955516] [client 57.141.0.69:40028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:36.454479 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amssBKv85z7IeUTpLJVV1gAAABk"]
[Thu Jul 30 11:48:36.454672 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amssBKv85z7IeUTpLJVV1gAAABk"]
[Thu Jul 30 11:48:36.454887 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amssBKv85z7IeUTpLJVV1gAAABk"]
[Thu Jul 30 11:48:36.816464 2026] [ssl:error] [pid 2946241:tid 2946241] (70014)End of file found: [client 216.73.216.199:39873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:36.951748 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/backend/.env"] [unique_id "amssBKv85z7IeUTpLJVV1wAAABk"]
[Thu Jul 30 11:48:36.951934 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/backend/.env"] [unique_id "amssBKv85z7IeUTpLJVV1wAAABk"]
[Thu Jul 30 11:48:36.952151 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/backend/.env"] [unique_id "amssBKv85z7IeUTpLJVV1wAAABk"]
[Thu Jul 30 11:48:37.372334 2026] [security2:error] [pid 2946240:tid 2946240] [client 201.78.128.89:47050] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/api/.env"] [unique_id "amssBWoL2wuF77VyYlKSDAAAABU"]
[Thu Jul 30 11:48:37.372481 2026] [security2:error] [pid 2946240:tid 2946240] [client 201.78.128.89:47050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/api/.env"] [unique_id "amssBWoL2wuF77VyYlKSDAAAABU"]
[Thu Jul 30 11:48:37.372677 2026] [security2:error] [pid 2946240:tid 2946240] [client 201.78.128.89:47050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/api/.env"] [unique_id "amssBWoL2wuF77VyYlKSDAAAABU"]
[Thu Jul 30 11:48:37.560239 2026] [cgi:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] AH02812: stderr from /home/freakorg/public_html/perish/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:48:37.606533 2026] [security2:error] [pid 2948863:tid 2948863] [client 201.78.128.89:47074] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.env.production"] [unique_id "amssBYvHY6yIYrSvOSeYSgAAADM"]
[Thu Jul 30 11:48:37.606717 2026] [security2:error] [pid 2948863:tid 2948863] [client 201.78.128.89:47074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.env.production"] [unique_id "amssBYvHY6yIYrSvOSeYSgAAADM"]
[Thu Jul 30 11:48:37.606888 2026] [security2:error] [pid 2948863:tid 2948863] [client 201.78.128.89:47074] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.env.production"] [unique_id "amssBYvHY6yIYrSvOSeYSgAAADM"]
[Thu Jul 30 11:48:37.617237 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "amssBav85z7IeUTpLJVV2wAAABk"]
[Thu Jul 30 11:48:37.617370 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "amssBav85z7IeUTpLJVV2wAAABk"]
[Thu Jul 30 11:48:37.617564 2026] [security2:error] [pid 2955476:tid 2955476] [client 201.78.128.89:47040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "amssBav85z7IeUTpLJVV2wAAABk"]
[Thu Jul 30 11:48:37.818016 2026] [security2:error] [pid 2955517:tid 2955517] [client 201.78.128.89:47068] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amssBe3scFHk7ui0oA7YlAAAACg"]
[Thu Jul 30 11:48:37.818227 2026] [security2:error] [pid 2955517:tid 2955517] [client 201.78.128.89:47068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amssBe3scFHk7ui0oA7YlAAAACg"]
[Thu Jul 30 11:48:37.818476 2026] [security2:error] [pid 2955517:tid 2955517] [client 201.78.128.89:47068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amssBe3scFHk7ui0oA7YlAAAACg"]
[Thu Jul 30 11:48:37.826997 2026] [security2:error] [pid 2947080:tid 2947080] [client 201.78.128.89:47072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.env.local"] [unique_id "amssBV_oDatr4dP7taFsTgAAAA4"]
[Thu Jul 30 11:48:37.827139 2026] [security2:error] [pid 2947080:tid 2947080] [client 201.78.128.89:47072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.env.local"] [unique_id "amssBV_oDatr4dP7taFsTgAAAA4"]
[Thu Jul 30 11:48:37.827309 2026] [security2:error] [pid 2947080:tid 2947080] [client 201.78.128.89:47072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.env.local"] [unique_id "amssBV_oDatr4dP7taFsTgAAAA4"]
[Thu Jul 30 11:48:37.903124 2026] [security2:error] [pid 2949670:tid 2949670] [client 201.78.128.89:47114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.env.development"] [unique_id "amssBUE2Txa1FrILbK-wMwAAAAc"]
[Thu Jul 30 11:48:37.903273 2026] [security2:error] [pid 2949670:tid 2949670] [client 201.78.128.89:47114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.env.development"] [unique_id "amssBUE2Txa1FrILbK-wMwAAAAc"]
[Thu Jul 30 11:48:37.903449 2026] [security2:error] [pid 2949670:tid 2949670] [client 201.78.128.89:47114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.env.development"] [unique_id "amssBUE2Txa1FrILbK-wMwAAAAc"]
[Thu Jul 30 11:48:38.293246 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.70:37800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:38.293886 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.70:37800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:38.466943 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.19:34144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:38.467629 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.19:34144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:38.639632 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.1:47384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:38.640255 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.1:47384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:38.687343 2026] [ssl:error] [pid 2955684:tid 2955684] (EAI 2)Name or service not known: [client 144.76.19.72:40504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:38.687393 2026] [ssl:error] [pid 2955684:tid 2955684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:38.777696 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.50:28754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:38.778359 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.50:28754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:38.838716 2026] [ssl:error] [pid 2953806:tid 2953806] (EAI 2)Name or service not known: [client 144.76.19.72:40506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:38.838749 2026] [ssl:error] [pid 2953806:tid 2953806] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:38.842150 2026] [core:error] [pid 2955684:tid 2955684] (13)Permission denied: [client 216.73.216.199:34705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 11:48:38.954438 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.16:29060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:38.955059 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.16:29060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:38.963032 2026] [lsapi:warn] [pid 2955436:tid 2955436] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:38.984195 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.29:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:38.984809 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.29:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:39.112005 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.64:42748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:39.112783 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.64:42748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:39.185026 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.41:62022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:39.185651 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.41:62022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:39.229317 2026] [core:error] [pid 2955684:tid 2955684] (13)Permission denied: [client 216.73.216.199:34705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory221/subsystem/uevent
[Thu Jul 30 11:48:39.463107 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.34:50510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:39.463726 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.34:50510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:39.648400 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.70:37814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:39.649019 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.70:37814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:39.824638 2026] [security2:error] [pid 2948523:tid 2948523] [client 85.208.96.196:31906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/prattville-obituaries"] [unique_id "amssBzsC1EH509bjiFuJ1gAAACw"]
[Thu Jul 30 11:48:40.250634 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.48:30036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:40.251347 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.48:30036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:41.099167 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.16:29074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:41.099788 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.16:29074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:41.147366 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.44:22210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:41.147986 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.44:22210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:41.271159 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.64:42750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:41.271777 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.64:42750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:41.632119 2026] [ssl:error] [pid 2948801:tid 2948801] (70014)End of file found: [client 216.73.216.199:8559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:41.744826 2026] [authz_core:error] [pid 2955717:tid 2955717] [client 66.249.66.33:38840] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:48:41.747495 2026] [authz_core:error] [pid 2955717:tid 2955717] [client 66.249.66.33:38840] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:48:41.910265 2026] [ssl:error] [pid 2955788:tid 2955788] (EAI 2)Name or service not known: [client 144.76.19.72:64948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:41.910315 2026] [ssl:error] [pid 2955788:tid 2955788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:41.964196 2026] [ssl:error] [pid 2955786:tid 2955786] (EAI 2)Name or service not known: [client 144.76.19.72:64956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:41.964230 2026] [ssl:error] [pid 2955786:tid 2955786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:41.993047 2026] [authz_core:error] [pid 2955790:tid 2955790] [client 57.141.0.13:34480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:41.993767 2026] [authz_core:error] [pid 2955790:tid 2955790] [client 57.141.0.13:34480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:42.244054 2026] [security2:error] [pid 2948387:tid 2948387] [client 183.87.97.38:52534] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclereracing.com"] [uri "/"] [unique_id "amssCseZF14LG9enyruOdQAAACY"], referer: https://highclereracing.com/
[Thu Jul 30 11:48:42.577083 2026] [access_compat:error] [pid 2955786:tid 2955786] [client 136.158.37.124:31296] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:48:42.706191 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.58:22984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:42.706814 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.58:22984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:42.906000 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.1:23694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:42.906634 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.1:23694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:43.013591 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.65:23610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:43.014282 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.65:23610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:43.443641 2026] [ssl:error] [pid 2955684:tid 2955684] (70014)End of file found: [client 216.73.216.199:34705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:43.494343 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.66:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:43.494975 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.66:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:43.583950 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.69:58958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:43.584735 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.69:58958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:43.825309 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.30:23452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:43.826023 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.30:23452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:44.499749 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.41:43790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:44.500368 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.41:43790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:44.642981 2026] [core:error] [pid 2952708:tid 2952708] (13)Permission denied: [client 216.73.216.199:34722] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/physical_node/resource0_wc
[Thu Jul 30 11:48:44.911787 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.22:51550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:44.912480 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.22:51550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:44.943946 2026] [ssl:error] [pid 2952708:tid 2952708] (70014)End of file found: [client 216.73.216.199:34722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:45.026806 2026] [ssl:error] [pid 2950493:tid 2950493] (EAI 2)Name or service not known: [client 144.76.19.72:64966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:45.026866 2026] [ssl:error] [pid 2950493:tid 2950493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:45.093418 2026] [ssl:error] [pid 2937895:tid 2937895] (EAI 2)Name or service not known: [client 144.76.19.72:64980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:45.093445 2026] [ssl:error] [pid 2937895:tid 2937895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:45.239630 2026] [authz_core:error] [pid 2955717:tid 2955717] [client 66.249.66.33:38840] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:48:45.242311 2026] [authz_core:error] [pid 2955717:tid 2955717] [client 66.249.66.33:38840] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:48:45.406934 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.33:30934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:45.407693 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.33:30934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:45.694863 2026] [core:error] [pid 2955515:tid 2955515] [client 66.249.66.167:64715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:45.694890 2026] [core:error] [pid 2955515:tid 2955515] [client 66.249.66.167:64715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:45.707403 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.19:29282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:45.708024 2026] [authz_core:error] [pid 2949670:tid 2949670] [client 57.141.0.19:29282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:45.743467 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.39:54938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:45.744093 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.39:54938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:46.299108 2026] [lsapi:warn] [pid 2937855:tid 2937855] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:46.309153 2026] [authz_core:error] [pid 2955783:tid 2955783] [client 57.141.0.16:29088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:46.310028 2026] [authz_core:error] [pid 2955783:tid 2955783] [client 57.141.0.16:29088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:46.367686 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.18:25366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:46.368326 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.18:25366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:47.373454 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.15:33024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:47.374118 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.15:33024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:47.653800 2026] [security2:error] [pid 2954417:tid 2954417] [client 216.73.216.199:24844] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/container/ve.cfg"] [unique_id "amssDwmQvRcOvZvIEk0TzgAAABc"]
[Thu Jul 30 11:48:47.654098 2026] [security2:error] [pid 2954417:tid 2954417] [client 216.73.216.199:24844] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/container/ve.cfg"] [unique_id "amssDwmQvRcOvZvIEk0TzgAAABc"]
[Thu Jul 30 11:48:47.654304 2026] [security2:error] [pid 2954417:tid 2954417] [client 216.73.216.199:24844] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/container/ve.cfg"] [unique_id "amssDwmQvRcOvZvIEk0TzgAAABc"]
[Thu Jul 30 11:48:47.798993 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.27:34636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:47.799669 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.27:34636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:48.101466 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.16:46150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:48.102108 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.16:46150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:48.102450 2026] [authz_core:error] [pid 2955515:tid 2955515] [client 57.141.0.31:28742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:48.103057 2026] [authz_core:error] [pid 2955515:tid 2955515] [client 57.141.0.31:28742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:48.150168 2026] [ssl:error] [pid 2937895:tid 2937895] (EAI 2)Name or service not known: [client 144.76.19.72:64988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:48.150195 2026] [ssl:error] [pid 2937895:tid 2937895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:48.206162 2026] [ssl:error] [pid 2949670:tid 2949670] (EAI 2)Name or service not known: [client 144.76.19.72:64998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:48.206222 2026] [ssl:error] [pid 2949670:tid 2949670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:48.305779 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.15:33026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:48.306407 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.15:33026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:48.560432 2026] [ssl:error] [pid 2954417:tid 2954417] (70014)End of file found: [client 216.73.216.199:24844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:49.055806 2026] [ssl:error] [pid 2950312:tid 2950312] (70014)End of file found: [client 216.73.216.199:33065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:49.283881 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.31:28744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:49.284515 2026] [authz_core:error] [pid 2947851:tid 2947851] [client 57.141.0.31:28744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:49.304384 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.15:33028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:49.305030 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.15:33028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:49.695117 2026] [lsapi:warn] [pid 2947851:tid 2947851] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:49.710865 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.49:26418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:49.711576 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.49:26418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:50.052971 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.46:24790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:50.053614 2026] [authz_core:error] [pid 2937409:tid 2937409] [client 57.141.0.46:24790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:50.129578 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.27:34644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:50.130207 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.27:34644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:50.552177 2026] [access_compat:error] [pid 2937409:tid 2937409] [client 2.189.5.222:37258] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:48:50.676805 2026] [ssl:error] [pid 2955717:tid 2955717] (70014)End of file found: [client 216.73.216.199:40237] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:50.719928 2026] [core:error] [pid 2955684:tid 2955684] [client 66.249.66.167:51323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:50.719975 2026] [core:error] [pid 2955684:tid 2955684] [client 66.249.66.167:51323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:50.770267 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.11:52006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:50.770925 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.11:52006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:50.951150 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.27:29056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:50.951772 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.27:29056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:51.148556 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.58:23000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:51.149192 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.58:23000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:51.237945 2026] [security2:error] [pid 2955790:tid 2955790] [client 43.135.36.201:50892] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tartanbag.com"] [uri "/"] [unique_id "amssE9MSwhD0KoAdCVf22wAAAE0"]
[Thu Jul 30 11:48:51.260776 2026] [ssl:error] [pid 2947080:tid 2947080] (EAI 2)Name or service not known: [client 144.76.19.72:27216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:51.260813 2026] [ssl:error] [pid 2947080:tid 2947080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:51.316200 2026] [ssl:error] [pid 2952708:tid 2952708] (EAI 2)Name or service not known: [client 144.76.19.72:27220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:51.316237 2026] [ssl:error] [pid 2952708:tid 2952708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:51.556372 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.7:20744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:51.556999 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.7:20744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:51.818287 2026] [security2:error] [pid 2950052:tid 2950052] [client 101.32.208.70:33160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "marcwhiffen.co.uk"] [uri "/"] [unique_id "amssE4CL4SqLfgTtVvIg_gAAAAs"]
[Thu Jul 30 11:48:51.819127 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 101.32.208.70:33160] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 11:48:52.193462 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.16:46188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:52.194103 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.16:46188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:52.719587 2026] [security2:error] [pid 2947851:tid 2947851] [client 185.191.171.3:39742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6184.0.html"] [unique_id "amssFJszEzZWdEmAaRTqowAAABQ"]
[Thu Jul 30 11:48:53.027903 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.47:51500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:53.028539 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.47:51500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:53.052867 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.2:30352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:53.053539 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.2:30352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:53.073183 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.27:29068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:53.073825 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.27:29068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:53.211791 2026] [core:error] [pid 2955217:tid 2955217] [client 57.141.0.42:53006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:53.211820 2026] [core:error] [pid 2955217:tid 2955217] [client 57.141.0.42:53006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:48:53.264781 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.4:53464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:53.265432 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.4:53464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:53.299368 2026] [access_compat:error] [pid 2948863:tid 2948863] [client 136.158.37.124:32106] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:48:54.152444 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.51:25556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:54.153078 2026] [authz_core:error] [pid 2950493:tid 2950493] [client 57.141.0.51:25556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:54.373216 2026] [ssl:error] [pid 2950384:tid 2950384] (EAI 2)Name or service not known: [client 144.76.19.72:27224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:54.373252 2026] [ssl:error] [pid 2950384:tid 2950384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:54.430928 2026] [ssl:error] [pid 2955784:tid 2955784] (EAI 2)Name or service not known: [client 144.76.19.72:27230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:54.430966 2026] [ssl:error] [pid 2955784:tid 2955784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:54.501491 2026] [ssl:error] [pid 2950449:tid 2950449] (70014)End of file found: [client 216.73.216.199:59409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:54.700727 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.32:32664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:54.701439 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.32:32664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:54.789915 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.44:39054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:54.790557 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.44:39054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:54.888682 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 57.141.0.30:29154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:54.889307 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 57.141.0.30:29154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:55.007518 2026] [ssl:error] [pid 2937892:tid 2937892] (70014)End of file found: [client 216.73.216.199:60033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:55.271756 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.25:55912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:55.272786 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.25:55912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:55.293325 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.16:46240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:55.293945 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.16:46240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:55.513132 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 57.141.0.11:52010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:55.513749 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 57.141.0.11:52010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:55.520863 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.42:53022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:55.521476 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.42:53022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:55.552882 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.62:27466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:55.553512 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.62:27466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:56.210129 2026] [ssl:error] [pid 2955719:tid 2955719] (70014)End of file found: [client 216.73.216.199:35607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:48:56.562638 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.4:53480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:56.563322 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.4:53480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:56.701042 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.58:39952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:56.701681 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.58:39952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:56.808741 2026] [lsapi:warn] [pid 2955717:tid 2955717] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:48:56.985774 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.9:50596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:56.986396 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.9:50596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:57.233830 2026] [authz_core:error] [pid 2955475:tid 2955475] [client 57.141.0.52:40980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:57.234480 2026] [authz_core:error] [pid 2955475:tid 2955475] [client 57.141.0.52:40980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:57.484739 2026] [ssl:error] [pid 2935539:tid 2935539] (EAI 2)Name or service not known: [client 144.76.19.72:27236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:57.484766 2026] [ssl:error] [pid 2935539:tid 2935539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:57.495869 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.67:56630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:57.496490 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.67:56630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:57.537382 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:27246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:48:57.537408 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:48:58.144974 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.17:29966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:58.145607 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.17:29966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:58.523478 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.51:22196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:58.524113 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.51:22196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:58.804823 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.41:28710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:58.805445 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.41:28710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:58.945785 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.53:40676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:58.946407 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.53:40676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:59.300668 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.45:22498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:59.301299 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.45:22498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:59.588089 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.4:53490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:59.588800 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.4:53490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:59.826302 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.27:29100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:48:59.826930 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.27:29100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:48:59.906226 2026] [ssl:error] [pid 2955717:tid 2955717] (70014)End of file found: [client 216.73.216.199:22544] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:00.305402 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.27:29104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:00.306048 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.27:29104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:00.523753 2026] [lsapi:warn] [pid 2948524:tid 2948524] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:00.591532 2026] [ssl:error] [pid 2947080:tid 2947080] (EAI 2)Name or service not known: [client 144.76.19.72:43490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:00.591568 2026] [ssl:error] [pid 2947080:tid 2947080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:00.629024 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.43:28796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:00.629695 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.43:28796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:00.647592 2026] [ssl:error] [pid 2947080:tid 2947080] (EAI 2)Name or service not known: [client 144.76.19.72:43504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:00.647617 2026] [ssl:error] [pid 2947080:tid 2947080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:01.404610 2026] [ssl:error] [pid 2955475:tid 2955475] (70014)End of file found: [client 216.73.216.199:62413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:01.486291 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.25:55920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:01.487289 2026] [authz_core:error] [pid 2948387:tid 2948387] [client 57.141.0.25:55920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:01.865849 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.19:34834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:01.866474 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.19:34834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:01.955256 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.41:28716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:01.955873 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.41:28716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:02.396679 2026] [core:error] [pid 2957059:tid 2957059] [client 66.249.66.8:37893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:02.396710 2026] [core:error] [pid 2957059:tid 2957059] [client 66.249.66.8:37893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:02.786629 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.1:24026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:02.787253 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.1:24026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:02.924158 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.6:24344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:02.924775 2026] [authz_core:error] [pid 2948801:tid 2948801] [client 57.141.0.6:24344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:03.315060 2026] [authz_core:error] [pid 2955719:tid 2955719] [client 57.141.0.11:62290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:03.315691 2026] [authz_core:error] [pid 2955719:tid 2955719] [client 57.141.0.11:62290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:03.460055 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.28:49244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:03.460710 2026] [authz_core:error] [pid 2946240:tid 2946240] [client 57.141.0.28:49244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:03.510940 2026] [ssl:error] [pid 2955785:tid 2955785] (70014)End of file found: [client 216.73.216.199:9995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:03.599719 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.20:33908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:03.600435 2026] [authz_core:error] [pid 2951536:tid 2951536] [client 57.141.0.20:33908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:03.701949 2026] [ssl:error] [pid 2948801:tid 2948801] (EAI 2)Name or service not known: [client 144.76.19.72:43512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:03.701980 2026] [ssl:error] [pid 2948801:tid 2948801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:03.758341 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:43528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:03.758372 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:04.239411 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.68:27818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:04.240033 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.68:27818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:04.730707 2026] [access_compat:error] [pid 2948861:tid 2948861] [client 136.158.37.124:32978] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:49:04.745132 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.5:25456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:04.745751 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.5:25456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:05.032875 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.60:43488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:05.033513 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.60:43488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:05.107489 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.20:33912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:05.108124 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.20:33912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:05.205985 2026] [access_compat:error] [pid 2955783:tid 2955783] [client 45.158.164.139:56356] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:49:05.377263 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.62:49224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:05.377879 2026] [authz_core:error] [pid 2948829:tid 2948829] [client 57.141.0.62:49224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:06.039879 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.53:40692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:06.040516 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.53:40692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:06.060274 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.30:52792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:06.060915 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.30:52792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:06.553096 2026] [authz_core:error] [pid 2955783:tid 2955783] [client 57.141.0.24:32780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:06.553717 2026] [authz_core:error] [pid 2955783:tid 2955783] [client 57.141.0.24:32780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:06.603213 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.27:34700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:06.603832 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.27:34700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:06.813881 2026] [ssl:error] [pid 2955515:tid 2955515] (EAI 2)Name or service not known: [client 144.76.19.72:43538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:06.813934 2026] [ssl:error] [pid 2955515:tid 2955515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:06.828395 2026] [ssl:error] [pid 2948864:tid 2948864] (70014)End of file found: [client 216.73.216.199:30671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:06.871794 2026] [ssl:error] [pid 2950449:tid 2950449] (EAI 2)Name or service not known: [client 144.76.19.72:43542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:06.871821 2026] [ssl:error] [pid 2950449:tid 2950449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:07.004443 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.29:47494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:07.005149 2026] [authz_core:error] [pid 2951598:tid 2951598] [client 57.141.0.29:47494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:07.244659 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.11:62302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:07.245663 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.11:62302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:07.310407 2026] [lsapi:warn] [pid 2950491:tid 2950491] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:07.328923 2026] [ssl:error] [pid 2955683:tid 2955683] (70014)End of file found: [client 216.73.216.199:60456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:07.723459 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.10:38462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:07.724090 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.10:38462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:08.350476 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.7:42768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:08.351101 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.7:42768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:08.639651 2026] [security2:error] [pid 2955217:tid 2955217] [client 18.199.86.73:48498] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.yourpartyyourway.com"] [uri "/.git/config"] [unique_id "amssJNBXppZPX9rgSNUcRQAAAAw"]
[Thu Jul 30 11:49:08.639853 2026] [security2:error] [pid 2955217:tid 2955217] [client 18.199.86.73:48498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.yourpartyyourway.com"] [uri "/.git/config"] [unique_id "amssJNBXppZPX9rgSNUcRQAAAAw"]
[Thu Jul 30 11:49:08.666183 2026] [security2:error] [pid 2955217:tid 2955217] [client 18.199.86.73:48498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.yourpartyyourway.com"] [uri "/403.shtml"] [unique_id "amssJNBXppZPX9rgSNUcRQAAAAw"]
[Thu Jul 30 11:49:08.832935 2026] [core:error] [pid 2948524:tid 2948524] (13)Permission denied: [client 216.73.216.199:8791] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/slab_size
[Thu Jul 30 11:49:08.934325 2026] [authz_core:error] [pid 2953654:tid 2953654] [client 57.141.0.14:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:08.934948 2026] [authz_core:error] [pid 2953654:tid 2953654] [client 57.141.0.14:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:08.999299 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.47:39030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:08.999924 2026] [authz_core:error] [pid 2950052:tid 2950052] [client 57.141.0.47:39030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:09.205691 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.30:52804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:09.206314 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.30:52804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:09.245539 2026] [ssl:error] [pid 2948524:tid 2948524] (70014)End of file found: [client 216.73.216.199:8791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:09.932297 2026] [ssl:error] [pid 2953654:tid 2953654] (EAI 2)Name or service not known: [client 144.76.19.72:34340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:09.932329 2026] [ssl:error] [pid 2953654:tid 2953654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:09.962964 2026] [authz_core:error] [pid 2956351:tid 2956351] [client 57.141.0.6:24360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:09.963586 2026] [authz_core:error] [pid 2956351:tid 2956351] [client 57.141.0.6:24360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:09.988559 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:34356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:09.988590 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:10.078997 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.19:34948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:10.079625 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.19:34948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:10.177039 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.49:62824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:10.177665 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.49:62824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:10.179611 2026] [core:error] [pid 2955785:tid 2955785] [client 66.249.66.195:36377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:10.179631 2026] [core:error] [pid 2955785:tid 2955785] [client 66.249.66.195:36377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:10.546136 2026] [authz_core:error] [pid 2956351:tid 2956351] [client 57.141.0.69:44652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:10.546768 2026] [authz_core:error] [pid 2956351:tid 2956351] [client 57.141.0.69:44652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:10.596834 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.1:24028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:10.597550 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.1:24028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:11.062454 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.49:62832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:11.063086 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.49:62832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:11.211331 2026] [lsapi:warn] [pid 2950052:tid 2950052] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:11.579233 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.66:49244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:11.579857 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.66:49244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:12.155836 2026] [ssl:error] [pid 2956351:tid 2956351] (70014)End of file found: [client 216.73.216.199:52102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:12.225806 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.21:26564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:12.226423 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.21:26564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:12.251975 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.44:50902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:12.252605 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.44:50902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:12.434323 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.2:50546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:12.434981 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.2:50546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:12.949392 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:29864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:12.950035 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.68:29864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:13.096929 2026] [ssl:error] [pid 2948523:tid 2948523] (EAI 2)Name or service not known: [client 144.76.19.72:34376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:13.096966 2026] [ssl:error] [pid 2948523:tid 2948523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:13.151384 2026] [ssl:error] [pid 2953722:tid 2953722] (EAI 2)Name or service not known: [client 144.76.19.72:34384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:13.151417 2026] [ssl:error] [pid 2953722:tid 2953722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:13.272415 2026] [lsapi:warn] [pid 2955790:tid 2955790] [client 194.249.231.23:49864] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 11:49:13.272456 2026] [lsapi:warn] [pid 2955790:tid 2955790] [client 194.249.231.23:49864] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 11:49:13.460008 2026] [ssl:error] [pid 2948864:tid 2948864] (70014)End of file found: [client 216.73.216.199:16323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:13.473457 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 66.249.66.34:34975] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:49:13.476132 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 66.249.66.34:34975] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:49:13.743630 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.39:26572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:13.744253 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.39:26572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:14.009039 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.12:48744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:14.009675 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.12:48744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:14.114081 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:28736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:14.114718 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:28736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:14.429582 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.42:45366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:14.430202 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.42:45366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:14.743742 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.51:23356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:14.744370 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.51:23356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:14.760649 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.70:54234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:14.761278 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.70:54234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:14.969291 2026] [ssl:error] [pid 2933234:tid 2933234] (70014)End of file found: [client 216.73.216.199:5935] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:15.250795 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.24:58114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:15.251421 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.24:58114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:15.773908 2026] [access_compat:error] [pid 2946558:tid 2946558] [client 136.158.37.124:33948] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:49:15.896203 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.3:43828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:15.896823 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.3:43828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:16.104895 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.21:54054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:16.105529 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.21:54054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:16.265048 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.60:54474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:16.265677 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.60:54474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:16.295093 2026] [ssl:error] [pid 2950491:tid 2950491] (EAI 2)Name or service not known: [client 144.76.19.72:34398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:16.295116 2026] [ssl:error] [pid 2950491:tid 2950491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:16.349598 2026] [ssl:error] [pid 2953722:tid 2953722] (EAI 2)Name or service not known: [client 144.76.19.72:34408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:16.349623 2026] [ssl:error] [pid 2953722:tid 2953722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:16.974387 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.30:23200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:16.975021 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.30:23200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:17.145409 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.2:53388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:17.146031 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.2:53388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:17.366646 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.9:39696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:17.367275 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.9:39696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:17.547159 2026] [authz_core:error] [pid 2950384:tid 2950384] [client 57.141.0.52:34368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:17.547871 2026] [authz_core:error] [pid 2950384:tid 2950384] [client 57.141.0.52:34368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:17.555186 2026] [security2:error] [pid 2948523:tid 2948523] [client 47.84.83.224:30575] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssLTsC1EH509bjiFuJ4QAAACw"]
[Thu Jul 30 11:49:17.555228 2026] [security2:error] [pid 2948523:tid 2948523] [client 47.84.83.224:30575] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssLTsC1EH509bjiFuJ4QAAACw"]
[Thu Jul 30 11:49:17.555478 2026] [security2:error] [pid 2948523:tid 2948523] [client 47.84.83.224:30575] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssLTsC1EH509bjiFuJ4QAAACw"]
[Thu Jul 30 11:49:17.845014 2026] [lsapi:warn] [pid 2948524:tid 2948524] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:18.275009 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.41:47164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:18.275668 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.41:47164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:18.405469 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.2:53392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:18.406105 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.2:53392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:18.610764 2026] [core:error] [pid 2955718:tid 2955718] (13)Permission denied: [client 216.73.216.199:28751] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/alarmtimer/unbind
[Thu Jul 30 11:49:18.634907 2026] [authz_core:error] [pid 2950384:tid 2950384] [client 57.141.0.9:39712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:18.635561 2026] [authz_core:error] [pid 2950384:tid 2950384] [client 57.141.0.9:39712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:19.216384 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.14:42842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:19.217003 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.14:42842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:19.297717 2026] [security2:error] [pid 2948861:tid 2948861] [client 43.128.54.76:48259] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssL9cOCXXCVWdQEdqTtwAAADE"]
[Thu Jul 30 11:49:19.297763 2026] [security2:error] [pid 2948861:tid 2948861] [client 43.128.54.76:48259] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssL9cOCXXCVWdQEdqTtwAAADE"]
[Thu Jul 30 11:49:19.298004 2026] [security2:error] [pid 2948861:tid 2948861] [client 43.128.54.76:48259] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssL9cOCXXCVWdQEdqTtwAAADE"]
[Thu Jul 30 11:49:19.401960 2026] [ssl:error] [pid 2948864:tid 2948864] (EAI 2)Name or service not known: [client 144.76.19.72:34410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:19.402007 2026] [ssl:error] [pid 2948864:tid 2948864] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:19.457852 2026] [ssl:error] [pid 2949670:tid 2949670] (EAI 2)Name or service not known: [client 144.76.19.72:34414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:19.457886 2026] [ssl:error] [pid 2949670:tid 2949670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:19.461080 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.5:51320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:19.461695 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.5:51320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:19.742263 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.61:41716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:19.742897 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.61:41716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:19.924929 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.65:53740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:19.925566 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.65:53740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:20.417666 2026] [core:error] [pid 2955718:tid 2955718] (13)Permission denied: [client 216.73.216.199:28751] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:53/subsystem/ttyS3/custom_divisor
[Thu Jul 30 11:49:20.514165 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.8:24480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:20.514784 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.8:24480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:20.514827 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.19:39334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:20.515437 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.19:39334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:21.020293 2026] [ssl:error] [pid 2955718:tid 2955718] (70014)End of file found: [client 216.73.216.199:28751] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:21.316631 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.23:37954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:21.317251 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.23:37954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:21.321533 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.47:54572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:21.322142 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.47:54572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:21.868825 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.39:49538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:21.869453 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.39:49538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:22.060497 2026] [lsapi:warn] [pid 2946558:tid 2946558] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:22.128640 2026] [ssl:error] [pid 2937855:tid 2937855] (70014)End of file found: [client 216.73.216.199:11500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:22.225206 2026] [ssl:error] [pid 2955784:tid 2955784] (70014)End of file found: [client 216.73.216.199:8423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:22.259969 2026] [security2:error] [pid 2955517:tid 2955517] [client 43.128.54.76:17969] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssMu3scFHk7ui0oA7YpgAAACg"]
[Thu Jul 30 11:49:22.260029 2026] [security2:error] [pid 2955517:tid 2955517] [client 43.128.54.76:17969] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssMu3scFHk7ui0oA7YpgAAACg"]
[Thu Jul 30 11:49:22.260252 2026] [security2:error] [pid 2955517:tid 2955517] [client 43.128.54.76:17969] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssMu3scFHk7ui0oA7YpgAAACg"]
[Thu Jul 30 11:49:22.268768 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.27:53516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:22.269446 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.27:53516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:22.509772 2026] [ssl:error] [pid 2946241:tid 2946241] (EAI 2)Name or service not known: [client 144.76.19.72:23414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:22.509807 2026] [ssl:error] [pid 2946241:tid 2946241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:22.565998 2026] [ssl:error] [pid 2937892:tid 2937892] (EAI 2)Name or service not known: [client 144.76.19.72:23420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:22.566022 2026] [ssl:error] [pid 2937892:tid 2937892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:22.985589 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.48:61786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:22.986210 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.48:61786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:23.087879 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.12:57196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:23.088514 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.12:57196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:23.128785 2026] [core:error] [pid 2946241:tid 2946241] [client 66.249.64.170:65153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:23.128814 2026] [core:error] [pid 2946241:tid 2946241] [client 66.249.64.170:65153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:23.669322 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.71:47594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:23.670029 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.71:47594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:23.714367 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.61:29778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:23.715001 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.61:29778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:23.764082 2026] [core:crit] [pid 2955518:tid 2955518] (13)Permission denied: [client 85.215.116.2:55321] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 11:49:23.764136 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 85.215.116.2:55321] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 11:49:23.764489 2026] [core:crit] [pid 2955518:tid 2955518] (13)Permission denied: [client 85.215.116.2:55321] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 11:49:23.764517 2026] [core:crit] [pid 2955518:tid 2955518] (13)Permission denied: [client 85.215.116.2:55321] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 11:49:23.764544 2026] [core:crit] [pid 2955518:tid 2955518] (13)Permission denied: [client 85.215.116.2:55321] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 11:49:23.926415 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.69:60162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:23.927036 2026] [authz_core:error] [pid 2937895:tid 2937895] [client 57.141.0.69:60162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:23.952168 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.30:44640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:23.952785 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.30:44640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:24.831593 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.6:62936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:24.832215 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.6:62936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:24.915925 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.51:46980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:24.916560 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.51:46980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:25.065989 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.52:51898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:25.066622 2026] [authz_core:error] [pid 2948279:tid 2948279] [client 57.141.0.52:51898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:25.282450 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.45:28680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:25.283372 2026] [authz_core:error] [pid 2937892:tid 2937892] [client 57.141.0.45:28680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:25.620775 2026] [ssl:error] [pid 2937895:tid 2937895] (EAI 2)Name or service not known: [client 144.76.19.72:23436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:25.620808 2026] [ssl:error] [pid 2937895:tid 2937895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:25.675437 2026] [ssl:error] [pid 2948279:tid 2948279] (EAI 2)Name or service not known: [client 144.76.19.72:23440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:25.675464 2026] [ssl:error] [pid 2948279:tid 2948279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:25.952598 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.61:29784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:25.953219 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.61:29784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:26.292730 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.29:59806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:26.293359 2026] [authz_core:error] [pid 2950492:tid 2950492] [client 57.141.0.29:59806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:26.376475 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.53:37120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:26.377104 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.53:37120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:26.711169 2026] [access_compat:error] [pid 2955517:tid 2955517] [client 136.158.37.124:34916] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:49:27.191398 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.70:30630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:27.192026 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.70:30630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:27.223317 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.2:24370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:27.223974 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.2:24370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:27.486279 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.32:60430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:27.486894 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.32:60430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:27.642734 2026] [authz_core:error] [pid 2955475:tid 2955475] [client 57.141.0.25:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:27.643359 2026] [authz_core:error] [pid 2955475:tid 2955475] [client 57.141.0.25:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:28.199911 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.14:36844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:28.200565 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.14:36844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:28.267111 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.63:39608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:28.267732 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.63:39608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:28.347475 2026] [lsapi:warn] [pid 2933234:tid 2933234] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:28.403937 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.59:31826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:28.404570 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.59:31826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:28.734793 2026] [ssl:error] [pid 2955718:tid 2955718] (EAI 2)Name or service not known: [client 144.76.19.72:23444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:28.734833 2026] [ssl:error] [pid 2955718:tid 2955718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:28.792860 2026] [ssl:error] [pid 2955914:tid 2955914] (EAI 2)Name or service not known: [client 144.76.19.72:23458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:28.792893 2026] [ssl:error] [pid 2955914:tid 2955914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:29.139270 2026] [security2:error] [pid 2948861:tid 2948861] [client 162.14.66.219:60836] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnstopwatches.com"] [uri "/"] [unique_id "amssOdcOCXXCVWdQEdqTugAAADE"]
[Thu Jul 30 11:49:29.150978 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.11:63070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:29.151609 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.11:63070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:29.452316 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.46:59810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:29.452940 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.46:59810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:29.689430 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.13:47586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:29.690049 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.13:47586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:30.255947 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.67:48768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:30.256625 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.67:48768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:30.358763 2026] [ssl:error] [pid 2937892:tid 2937892] (70014)End of file found: [client 216.73.216.199:17438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:30.450424 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.40:64218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:30.451063 2026] [authz_core:error] [pid 2946558:tid 2946558] [client 57.141.0.40:64218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:30.845863 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.19:20688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:30.846492 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.19:20688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:31.149017 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.8:47596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:31.149653 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.8:47596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:31.332657 2026] [security2:error] [pid 2949779:tid 2949779] [client 216.73.216.199:54435] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-pid-max.conf"] [unique_id "amssO_g2DEeOy-zFWnpv9gAAAAg"]
[Thu Jul 30 11:49:31.332904 2026] [security2:error] [pid 2949779:tid 2949779] [client 216.73.216.199:54435] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-pid-max.conf"] [unique_id "amssO_g2DEeOy-zFWnpv9gAAAAg"]
[Thu Jul 30 11:49:31.333112 2026] [security2:error] [pid 2949779:tid 2949779] [client 216.73.216.199:54435] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-pid-max.conf"] [unique_id "amssO_g2DEeOy-zFWnpv9gAAAAg"]
[Thu Jul 30 11:49:31.415000 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.66:30888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:31.415664 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.66:30888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:31.877425 2026] [ssl:error] [pid 2946558:tid 2946558] (EAI 2)Name or service not known: [client 144.76.19.72:26420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:31.877465 2026] [ssl:error] [pid 2946558:tid 2946558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:31.935713 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:26426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:31.935748 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:32.252958 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.56:53706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:32.253593 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.56:53706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:32.738406 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.4:34184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:32.739030 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.4:34184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:32.861345 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.44:44582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:32.861968 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.44:44582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:32.919767 2026] [lsapi:warn] [pid 2948864:tid 2948864] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:33.101598 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.23:56262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:33.102222 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.23:56262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:33.528192 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.47:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:33.528816 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.47:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:33.595923 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.43:24952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:33.596898 2026] [authz_core:error] [pid 2955914:tid 2955914] [client 57.141.0.43:24952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:33.781376 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.71:58762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:33.782074 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.71:58762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:33.907047 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.39:55696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:33.907696 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.39:55696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:34.117457 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.23:56274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:34.118094 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.23:56274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:34.754057 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.50:54272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:34.754712 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.50:54272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:34.991132 2026] [ssl:error] [pid 2948864:tid 2948864] (EAI 2)Name or service not known: [client 144.76.19.72:26428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:34.991164 2026] [ssl:error] [pid 2948864:tid 2948864] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:35.043903 2026] [ssl:error] [pid 2950448:tid 2950448] (EAI 2)Name or service not known: [client 144.76.19.72:26438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:35.043935 2026] [ssl:error] [pid 2950448:tid 2950448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:35.559390 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.61:31800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:35.560010 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.61:31800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:35.601347 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.41:34814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:35.601977 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.41:34814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:35.805325 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.20:33716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:35.805948 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.20:33716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:36.092748 2026] [authz_core:error] [pid 2956351:tid 2956351] [client 57.141.0.68:54566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:36.093373 2026] [authz_core:error] [pid 2956351:tid 2956351] [client 57.141.0.68:54566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:36.417367 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.62:35496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:36.418000 2026] [authz_core:error] [pid 2948864:tid 2948864] [client 57.141.0.62:35496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:36.683292 2026] [ssl:error] [pid 2949779:tid 2949779] (70014)End of file found: [client 216.73.216.199:54435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:37.064942 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.65:43972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:37.065587 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.65:43972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:37.297181 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.16:55764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:37.297801 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.16:55764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:37.380429 2026] [core:error] [pid 2956351:tid 2956351] [client 66.249.66.167:54176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:37.380457 2026] [core:error] [pid 2956351:tid 2956351] [client 66.249.66.167:54176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:37.587527 2026] [core:error] [pid 2955718:tid 2955718] (13)Permission denied: [client 216.73.216.199:19845] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory90/subsystem/uevent
[Thu Jul 30 11:49:37.592410 2026] [access_compat:error] [pid 2948325:tid 2948325] [client 136.158.37.124:35754] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:49:37.888279 2026] [ssl:error] [pid 2955718:tid 2955718] (5)Input/output error: [client 216.73.216.199:19845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:37.889327 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.12:23358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:37.889946 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.12:23358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:38.045142 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.45:21572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:38.045770 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.45:21572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:38.100562 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:26442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:38.100596 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:38.155558 2026] [ssl:error] [pid 2956813:tid 2956813] (EAI 2)Name or service not known: [client 144.76.19.72:26452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:38.155597 2026] [ssl:error] [pid 2956813:tid 2956813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:38.381750 2026] [ssl:error] [pid 2952708:tid 2952708] (70014)End of file found: [client 216.73.216.199:27369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:38.416962 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.10:29132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:38.417595 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.10:29132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:38.502183 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.68:54580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:38.502817 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.68:54580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:38.686947 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.14:43222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:38.687604 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.14:43222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:38.830616 2026] [lsapi:warn] [pid 2955784:tid 2955784] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:38.860886 2026] [security2:error] [pid 2948326:tid 2948326] [client 43.157.149.188:60594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sijames.com"] [uri "/"] [unique_id "amssQtZTDi3K5-apei7smQAAACQ"]
[Thu Jul 30 11:49:39.097172 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.22:30940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:39.097800 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.22:30940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:39.326169 2026] [core:error] [pid 2956813:tid 2956813] [client 57.141.0.10:29160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:39.326201 2026] [core:error] [pid 2956813:tid 2956813] [client 57.141.0.10:29160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:49:40.104638 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.41:34828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:40.105327 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.41:34828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:40.296577 2026] [security2:error] [pid 2927346:tid 2927346] [client 185.191.171.11:38286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/montgomery-gator-x-glamrock-freddy"] [unique_id "amssREQpVDjYO6sOcCluDwAAAAk"]
[Thu Jul 30 11:49:40.760908 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.4:63784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:40.761544 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.4:63784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:40.813247 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.42:48038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:40.813874 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.42:48038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:41.127106 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.50:27812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:41.127737 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.50:27812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:41.212687 2026] [ssl:error] [pid 2946280:tid 2946280] (EAI 2)Name or service not known: [client 144.76.19.72:53802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:41.212718 2026] [ssl:error] [pid 2946280:tid 2946280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:41.265641 2026] [ssl:error] [pid 2955914:tid 2955914] (EAI 2)Name or service not known: [client 144.76.19.72:53816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:41.265675 2026] [ssl:error] [pid 2955914:tid 2955914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:41.273894 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.66:54388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:41.274542 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.66:54388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:41.564579 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.71:58770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:41.565269 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.71:58770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:41.575312 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.71:58780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:41.575923 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.71:58780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:42.020751 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.69:45504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:42.021376 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.69:45504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:42.705352 2026] [ssl:error] [pid 2956813:tid 2956813] (70014)End of file found: [client 216.73.216.199:54236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:42.843615 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.25:36226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:42.844242 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.25:36226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:43.191033 2026] [ssl:error] [pid 2946241:tid 2946241] (70014)End of file found: [client 216.73.216.199:12543] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:43.253278 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.65:45602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:43.253895 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.65:45602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:43.658227 2026] [lsapi:warn] [pid 2947595:tid 2947595] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:43.746648 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.43:40358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:43.747265 2026] [authz_core:error] [pid 2955718:tid 2955718] [client 57.141.0.43:40358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:43.814306 2026] [lsapi:warn] [pid 2901124:tid 2901124] [client 216.73.216.199:4370] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Constant PASSWORD_DEFAULT already defined in /var/softaculous/wikka/update_pass.php on line 9\n
[Thu Jul 30 11:49:44.183190 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.44:44486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:44.183820 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.44:44486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:44.338362 2026] [ssl:error] [pid 2955716:tid 2955716] (EAI 2)Name or service not known: [client 144.76.19.72:53828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:44.338403 2026] [ssl:error] [pid 2955716:tid 2955716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:44.394769 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:53832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:44.394799 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:44.431608 2026] [authz_core:error] [pid 2952708:tid 2952708] [client 57.141.0.55:24024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:44.432228 2026] [authz_core:error] [pid 2952708:tid 2952708] [client 57.141.0.55:24024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:44.630262 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.45:21596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:44.630881 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.45:21596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:44.800695 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.19:45058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:44.801313 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.19:45058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:44.830179 2026] [core:error] [pid 2901124:tid 2901124] (13)Permission denied: [client 216.73.216.199:4370] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS3/custom_divisor
[Thu Jul 30 11:49:45.431481 2026] [ssl:error] [pid 2901124:tid 2901124] (70014)End of file found: [client 216.73.216.199:4370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:45.562942 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.30:36982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:45.563575 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.30:36982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:45.827459 2026] [authz_core:error] [pid 2952708:tid 2952708] [client 57.141.0.5:59234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:45.828108 2026] [authz_core:error] [pid 2952708:tid 2952708] [client 57.141.0.5:59234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:46.037162 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.59:35494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:46.037786 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.59:35494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:46.103734 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.68:33144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:46.104355 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.68:33144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:46.814365 2026] [authz_core:error] [pid 2952708:tid 2952708] [client 57.141.0.30:36988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:46.814988 2026] [authz_core:error] [pid 2952708:tid 2952708] [client 57.141.0.30:36988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:46.823340 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.27:44704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:46.823943 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.27:44704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:46.992905 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 66.249.66.33:41698] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:49:46.995568 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 66.249.66.33:41698] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:49:47.194405 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.21:46588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:47.195082 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.21:46588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:47.450705 2026] [ssl:error] [pid 2955716:tid 2955716] (EAI 2)Name or service not known: [client 144.76.19.72:53834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:47.450732 2026] [ssl:error] [pid 2955716:tid 2955716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:47.505343 2026] [ssl:error] [pid 2946280:tid 2946280] (EAI 2)Name or service not known: [client 144.76.19.72:53844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:47.505368 2026] [ssl:error] [pid 2946280:tid 2946280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:47.857960 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.26:39202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:47.858591 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.26:39202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:48.475950 2026] [access_compat:error] [pid 2955683:tid 2955683] [client 136.158.37.124:36528] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:49:48.506387 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.9:34170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:48.507031 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.9:34170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:48.716394 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.40:54590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:48.717013 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.40:54590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:49.043174 2026] [core:error] [pid 2937895:tid 2937895] (13)Permission denied: [client 216.73.216.199:39495] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/subsystem/ttyS3/custom_divisor
[Thu Jul 30 11:49:49.267297 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.40:54598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:49.267919 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.40:54598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:49.292919 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.36:49568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:49.293559 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.36:49568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:49.301818 2026] [lsapi:warn] [pid 2955789:tid 2955789] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:49.645667 2026] [ssl:error] [pid 2937895:tid 2937895] (70014)End of file found: [client 216.73.216.199:39495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:49.654882 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.55:24038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:49.655498 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.55:24038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:50.005702 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.13:20064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:50.006325 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.13:20064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:50.268296 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.31:65452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:50.268921 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.31:65452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:50.295358 2026] [security2:error] [pid 2950312:tid 2950312] [client 114.119.155.144:27797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/discover-more-together/why-nazarene"] [unique_id "amssTksnlgQsAB3ydadRRAAAABY"], referer: http://www.erskinenazarene.co.uk/join-us-sunday-morning
[Thu Jul 30 11:49:50.506459 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.61:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:50.507114 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.61:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:50.544197 2026] [ssl:error] [pid 2955436:tid 2955436] (70014)End of file found: [client 216.73.216.199:43003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:50.562356 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:52732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:50.562387 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:50.618254 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:52746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:50.618276 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:50.715191 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.18:44256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:50.715810 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.18:44256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:51.039819 2026] [core:error] [pid 2948524:tid 2948524] (13)Permission denied: [client 216.73.216.199:53396] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/i2c/drivers/dummy/bind
[Thu Jul 30 11:49:51.292563 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.21:46592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:51.293211 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.21:46592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:51.447373 2026] [ssl:error] [pid 2948524:tid 2948524] (70014)End of file found: [client 216.73.216.199:53396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:51.550406 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.15:33406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:51.551030 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.15:33406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:51.682387 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.62:28052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:51.683008 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.62:28052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:51.746248 2026] [security2:error] [pid 2959029:tid 2959029] [client 114.119.155.144:27811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/discover-more-together/why-nazarene"] [unique_id "amssT7ZJbfKLdPan_IVmdwAAAAI"], referer: http://www.erskinenazarene.co.uk/join-us-sunday-morning
[Thu Jul 30 11:49:52.131657 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.18:44268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:52.132289 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.18:44268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:52.231178 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.4:42618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:52.231821 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.4:42618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:52.474434 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.71:55944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:52.475051 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.71:55944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:53.149015 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.36:47156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:53.149646 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.36:47156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:53.669045 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.45:52742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:53.669681 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.45:52742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:53.675541 2026] [ssl:error] [pid 2959030:tid 2959030] (EAI 2)Name or service not known: [client 144.76.19.72:52750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:53.675572 2026] [ssl:error] [pid 2959030:tid 2959030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:53.729284 2026] [ssl:error] [pid 2959029:tid 2959029] (EAI 2)Name or service not known: [client 144.76.19.72:52764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:53.729321 2026] [ssl:error] [pid 2959029:tid 2959029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:54.077768 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.35:31512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:54.078386 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.35:31512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:54.360934 2026] [lsapi:warn] [pid 2959030:tid 2959030] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:54.951302 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.18:44272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:54.951916 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.18:44272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:54.952337 2026] [ssl:error] [pid 2955648:tid 2955648] (70014)End of file found: [client 216.73.216.199:53284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:55.081902 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.22:29326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:55.082540 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.22:29326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:55.798010 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.34:47362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:55.798644 2026] [authz_core:error] [pid 2955683:tid 2955683] [client 57.141.0.34:47362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:55.865004 2026] [security2:error] [pid 2937895:tid 2937895] [client 216.73.216.199:35411] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/systemd-udev-trigger.service.d/systemd-udev-trigger-no-reload.conf"] [unique_id "amssU6kU3yIAC4beO1-WbAAAAEE"]
[Thu Jul 30 11:49:55.865291 2026] [security2:error] [pid 2937895:tid 2937895] [client 216.73.216.199:35411] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/systemd-udev-trigger.service.d/systemd-udev-trigger-no-reload.conf"] [unique_id "amssU6kU3yIAC4beO1-WbAAAAEE"]
[Thu Jul 30 11:49:55.865498 2026] [security2:error] [pid 2937895:tid 2937895] [client 216.73.216.199:35411] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/systemd-udev-trigger.service.d/systemd-udev-trigger-no-reload.conf"] [unique_id "amssU6kU3yIAC4beO1-WbAAAAEE"]
[Thu Jul 30 11:49:55.867287 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.56:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:55.867898 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.56:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:56.179895 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.35:31516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:56.180533 2026] [authz_core:error] [pid 2954417:tid 2954417] [client 57.141.0.35:31516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:56.271649 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.11:35116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:56.272271 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.11:35116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:56.570460 2026] [ssl:error] [pid 2937895:tid 2937895] (70014)End of file found: [client 216.73.216.199:35411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:56.791499 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:52772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:56.791552 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:56.819621 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.37:32930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:56.820240 2026] [authz_core:error] [pid 2953806:tid 2953806] [client 57.141.0.37:32930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:56.846721 2026] [ssl:error] [pid 2953722:tid 2953722] (EAI 2)Name or service not known: [client 144.76.19.72:52774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:56.846755 2026] [ssl:error] [pid 2953722:tid 2953722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:57.167821 2026] [ssl:error] [pid 2950449:tid 2950449] (70014)End of file found: [client 216.73.216.199:56583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:49:57.298686 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.30:38340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:57.299372 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.30:38340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:57.302733 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.49:45252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:57.303340 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.49:45252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:57.704633 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.14:31680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:57.705257 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.14:31680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:57.865845 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.70:43212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:57.866548 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.70:43212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:57.937589 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.54:47046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:57.938209 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.54:47046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:58.146201 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.37:32936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:58.146898 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.37:32936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:58.211965 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.63:41276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:58.212664 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.63:41276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:58.497265 2026] [authz_core:error] [pid 2958981:tid 2958981] [client 57.141.0.50:64032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:58.497897 2026] [authz_core:error] [pid 2958981:tid 2958981] [client 57.141.0.50:64032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:59.014171 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.67:45666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:59.014790 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.67:45666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:59.393348 2026] [access_compat:error] [pid 2953722:tid 2953722] [client 136.158.37.124:37365] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:49:59.833377 2026] [lsapi:warn] [pid 2958981:tid 2958981] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:49:59.905805 2026] [ssl:error] [pid 2947080:tid 2947080] (EAI 2)Name or service not known: [client 144.76.19.72:61478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:59.905827 2026] [ssl:error] [pid 2947080:tid 2947080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:59.972235 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 57.141.0.59:25930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:59.972858 2026] [authz_core:error] [pid 2955785:tid 2955785] [client 57.141.0.59:25930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:49:59.980462 2026] [ssl:error] [pid 2955518:tid 2955518] (EAI 2)Name or service not known: [client 144.76.19.72:61492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:49:59.980486 2026] [ssl:error] [pid 2955518:tid 2955518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:49:59.982804 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.70:43216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:49:59.983419 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.70:43216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:00.026733 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.12:61598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:00.027367 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.12:61598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:00.286897 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.14:31698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:00.287998 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.14:31698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:00.404316 2026] [security2:error] [pid 2947080:tid 2947080] [client 94.154.43.184:47440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.theovertones.ditchfest.com"] [uri "/.env"] [unique_id "amssWF_oDatr4dP7taFsZQAAAA4"]
[Thu Jul 30 11:50:00.404527 2026] [security2:error] [pid 2947080:tid 2947080] [client 94.154.43.184:47440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.theovertones.ditchfest.com"] [uri "/.env"] [unique_id "amssWF_oDatr4dP7taFsZQAAAA4"]
[Thu Jul 30 11:50:00.404742 2026] [security2:error] [pid 2947080:tid 2947080] [client 94.154.43.184:47440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.theovertones.ditchfest.com"] [uri "/.env"] [unique_id "amssWF_oDatr4dP7taFsZQAAAA4"]
[Thu Jul 30 11:50:00.681744 2026] [ssl:error] [pid 2937855:tid 2937855] (70014)End of file found: [client 216.73.216.199:55574] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:00.856964 2026] [core:error] [pid 2955518:tid 2955518] [client 66.249.66.168:51191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:00.856989 2026] [core:error] [pid 2955518:tid 2955518] [client 66.249.66.168:51191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:00.903225 2026] [core:error] [pid 2948326:tid 2948326] [client 66.249.66.168:64572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:00.903250 2026] [core:error] [pid 2948326:tid 2948326] [client 66.249.66.168:64572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:00.948113 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.31:61274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:00.948728 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.31:61274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:01.426588 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.41:25020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:01.427212 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.41:25020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:01.520457 2026] [security2:error] [pid 2955518:tid 2955518] [client 114.119.144.143:20433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amssWdPStOXJaMMHutKfmgAAADA"], referer: https://cornlan.co.uk/forum/viewtopic.php?f=22&t=894844&p=1526101
[Thu Jul 30 11:50:01.545433 2026] [security2:error] [pid 2948326:tid 2948326] [client 94.154.43.179:24030] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "theovertones.co.uk"] [uri "/.env"] [unique_id "amssWdZTDi3K5-apei7spQAAACQ"]
[Thu Jul 30 11:50:01.545770 2026] [security2:error] [pid 2948326:tid 2948326] [client 94.154.43.179:24030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "theovertones.co.uk"] [uri "/.env"] [unique_id "amssWdZTDi3K5-apei7spQAAACQ"]
[Thu Jul 30 11:50:01.546140 2026] [security2:error] [pid 2948326:tid 2948326] [client 94.154.43.179:24030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "theovertones.co.uk"] [uri "/.env"] [unique_id "amssWdZTDi3K5-apei7spQAAACQ"]
[Thu Jul 30 11:50:01.607370 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.45:41722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:01.608000 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.45:41722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:01.706588 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.16:41998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:01.707220 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.16:41998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:02.180195 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.12:40224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:02.180826 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.12:40224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:02.386680 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.52:39330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:02.387301 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.52:39330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:02.627881 2026] [security2:error] [pid 2937895:tid 2937895] [client 114.119.144.143:30223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hornsey-town-hall.org.uk"] [uri "/403.shtml"] [unique_id "amssWqkU3yIAC4beO1-WcAAAAEE"], referer: https://cornlan.co.uk/forum/viewtopic.php?f=22&t=894844&p=1526101
[Thu Jul 30 11:50:03.034678 2026] [ssl:error] [pid 2956813:tid 2956813] (EAI 2)Name or service not known: [client 144.76.19.72:61500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:03.034705 2026] [ssl:error] [pid 2956813:tid 2956813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:03.089224 2026] [ssl:error] [pid 2946280:tid 2946280] (EAI 2)Name or service not known: [client 144.76.19.72:61514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:03.089249 2026] [ssl:error] [pid 2946280:tid 2946280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:03.189224 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.14:31722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:03.189845 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.14:31722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:03.363142 2026] [security2:error] [pid 2947080:tid 2947080] [client 162.14.114.97:39568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amssW1_oDatr4dP7taFsagAAAA4"]
[Thu Jul 30 11:50:03.424156 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.69:51766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:03.424778 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.69:51766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:03.766429 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.15:20746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:03.767047 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.15:20746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:04.044004 2026] [security2:error] [pid 2947080:tid 2947080] [client 74.7.227.172:38498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.banskoexpress.com"] [uri "/"] [unique_id "amssXF_oDatr4dP7taFsawAAAA4"]
[Thu Jul 30 11:50:04.482855 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 66.249.66.33:50243] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:50:04.485517 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 66.249.66.33:50243] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:50:04.653772 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.3:39980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:04.654397 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.3:39980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:04.809685 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.49:39392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:04.810304 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.49:39392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:04.896178 2026] [ssl:error] [pid 2950449:tid 2950449] (70014)End of file found: [client 216.73.216.199:59962] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:04.956163 2026] [lsapi:warn] [pid 2939727:tid 2939727] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:05.084695 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.2:46010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:05.085318 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.2:46010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:05.266541 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.1:60550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:05.267164 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.1:60550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:05.664946 2026] [security2:error] [pid 2953722:tid 2953722] [client 74.7.242.21:51950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/"] [unique_id "amssXYYERA4zpEG9Lw8xzAAAACk"]
[Thu Jul 30 11:50:05.773311 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.63:51120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:05.773924 2026] [authz_core:error] [pid 2948523:tid 2948523] [client 57.141.0.63:51120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:05.800242 2026] [ssl:error] [pid 2955648:tid 2955648] (70014)End of file found: [client 216.73.216.199:35755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:05.916564 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.39:37486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:05.917178 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.39:37486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:06.147419 2026] [ssl:error] [pid 2948325:tid 2948325] (EAI 2)Name or service not known: [client 144.76.19.72:61522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:06.147448 2026] [ssl:error] [pid 2948325:tid 2948325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:06.204561 2026] [ssl:error] [pid 2939727:tid 2939727] (EAI 2)Name or service not known: [client 144.76.19.72:61538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:06.204591 2026] [ssl:error] [pid 2939727:tid 2939727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:06.253237 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.66:45902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:06.253893 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.66:45902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:06.304457 2026] [ssl:error] [pid 2947080:tid 2947080] (70014)End of file found: [client 216.73.216.199:12781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:06.541843 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.11:50936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:06.542465 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.11:50936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:06.981015 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.50:31022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:06.981648 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.50:31022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:07.128658 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.50:31034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:07.129275 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.50:31034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:07.423302 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.62:27442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:07.423928 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.62:27442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:07.444549 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.67:45682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:07.445235 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.67:45682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:07.676422 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.24:40532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:07.677113 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.24:40532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:07.754164 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 2.26.23.219:52223] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 11:50:07.756808 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 2.26.23.219:52223] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 11:50:07.863015 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.20:36024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:07.863639 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.20:36024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:08.130488 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.42:35330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:08.131124 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.42:35330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:08.558561 2026] [security2:error] [pid 2955716:tid 2955716] [client 162.14.114.97:39564] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amssYCvre4hZurcpgSggfgAAAD0"], referer: http://mwdesign.me.uk
[Thu Jul 30 11:50:09.118229 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.27:50466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:09.118890 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.27:50466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:09.261055 2026] [ssl:error] [pid 2955788:tid 2955788] (EAI 2)Name or service not known: [client 144.76.19.72:61554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:09.261080 2026] [ssl:error] [pid 2955788:tid 2955788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:09.284806 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 66.249.66.33:44941] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:50:09.287447 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 66.249.66.33:44941] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:50:09.312664 2026] [ssl:error] [pid 2950448:tid 2950448] (EAI 2)Name or service not known: [client 144.76.19.72:61556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:09.312689 2026] [ssl:error] [pid 2950448:tid 2950448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:09.490121 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.17:59464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:09.490744 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.17:59464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:09.514385 2026] [cgi:error] [pid 2955786:tid 2955786] [client 106.127.136.190:17038] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:50:09.521062 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.33:54448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:09.521680 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.33:54448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:09.564881 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.56:24746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:09.565495 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.56:24746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:10.209316 2026] [ssl:error] [pid 2948326:tid 2948326] (70014)End of file found: [client 216.73.216.199:48457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:10.294119 2026] [lsapi:warn] [pid 2959996:tid 2959996] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:10.406608 2026] [access_compat:error] [pid 2950448:tid 2950448] [client 136.158.37.124:38247] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:50:10.874612 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.25:55476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:10.875261 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.25:55476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:10.902037 2026] [access_compat:error] [pid 2955648:tid 2955648] [client 45.158.164.139:56362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:50:11.057678 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.42:38760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:11.058334 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.42:38760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:11.061235 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.4:47014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:11.061841 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.4:47014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:11.420479 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.68:38084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:11.421119 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.68:38084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:11.505019 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.13:34580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:11.505648 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.13:34580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:11.656171 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.41:53028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:11.656793 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.41:53028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:11.942453 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.45:45280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:11.943083 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.45:45280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:12.391117 2026] [ssl:error] [pid 2933234:tid 2933234] (EAI 2)Name or service not known: [client 144.76.19.72:61962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:12.391152 2026] [ssl:error] [pid 2933234:tid 2933234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:12.444050 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:61976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:12.444092 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:13.032326 2026] [ssl:error] [pid 2947080:tid 2947080] (70014)End of file found: [client 216.73.216.199:40682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:13.220234 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.14:35666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:13.220857 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.14:35666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:13.425667 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.62:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:13.426284 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.62:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:13.450164 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.44:56050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:13.450833 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.44:56050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:13.632043 2026] [core:error] [pid 2959996:tid 2959996] (13)Permission denied: [client 216.73.216.199:63450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory209/subsystem/uevent
[Thu Jul 30 11:50:13.775404 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.39:37510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:13.776024 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.39:37510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:14.289986 2026] [authz_core:error] [pid 2960176:tid 2960176] [client 57.141.0.71:24502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:14.290649 2026] [authz_core:error] [pid 2960176:tid 2960176] [client 57.141.0.71:24502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:14.346467 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.6:22810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:14.347098 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.6:22810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:14.681646 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.30:30282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:14.682278 2026] [authz_core:error] [pid 2955716:tid 2955716] [client 57.141.0.30:30282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:14.761001 2026] [core:error] [pid 2947595:tid 2947595] [client 68.183.5.181:61727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:14.761024 2026] [core:error] [pid 2947595:tid 2947595] [client 68.183.5.181:61727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:14.951332 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.28:34900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:14.951953 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.28:34900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:15.125519 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.5:36440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:15.126636 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.5:36440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:15.299878 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.66:43226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:15.300498 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.66:43226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:15.437640 2026] [ssl:error] [pid 2959996:tid 2959996] (70014)End of file found: [client 216.73.216.199:63450] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:15.500910 2026] [ssl:error] [pid 2953802:tid 2953802] (EAI 2)Name or service not known: [client 144.76.19.72:61988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:15.500941 2026] [ssl:error] [pid 2953802:tid 2953802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:15.539870 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.1:64186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:15.540490 2026] [authz_core:error] [pid 2947595:tid 2947595] [client 57.141.0.1:64186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:15.555238 2026] [ssl:error] [pid 2955518:tid 2955518] (EAI 2)Name or service not known: [client 144.76.19.72:61990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:15.555261 2026] [ssl:error] [pid 2955518:tid 2955518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:15.656936 2026] [lsapi:warn] [pid 2955716:tid 2955716] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:16.093932 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.62:49406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:16.094632 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.62:49406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:16.138035 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.20:56036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:16.138668 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.20:56036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:17.163118 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.61:34408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:17.163804 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.61:34408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:17.240809 2026] [security2:error] [pid 2948325:tid 2948325] [client 216.73.216.199:17009] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/run/tmpfiles.d/kmod.conf"] [unique_id "amssaYIfjk732Cy6rWZU5AAAACM"]
[Thu Jul 30 11:50:17.241106 2026] [security2:error] [pid 2948325:tid 2948325] [client 216.73.216.199:17009] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/run/tmpfiles.d/kmod.conf"] [unique_id "amssaYIfjk732Cy6rWZU5AAAACM"]
[Thu Jul 30 11:50:17.241315 2026] [security2:error] [pid 2948325:tid 2948325] [client 216.73.216.199:17009] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/run/tmpfiles.d/kmod.conf"] [unique_id "amssaYIfjk732Cy6rWZU5AAAACM"]
[Thu Jul 30 11:50:17.385605 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.31:40592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:17.386225 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.31:40592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:17.841958 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.46:22238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:17.842584 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.46:22238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:18.608310 2026] [ssl:error] [pid 2953722:tid 2953722] (EAI 2)Name or service not known: [client 144.76.19.72:61996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:18.608337 2026] [ssl:error] [pid 2953722:tid 2953722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:18.661354 2026] [ssl:error] [pid 2948326:tid 2948326] (EAI 2)Name or service not known: [client 144.76.19.72:62008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:18.661386 2026] [ssl:error] [pid 2948326:tid 2948326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:18.685093 2026] [authz_core:error] [pid 2960176:tid 2960176] [client 57.141.0.54:49510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:18.685742 2026] [authz_core:error] [pid 2960176:tid 2960176] [client 57.141.0.54:49510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:18.846284 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.51:44020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:18.846902 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.51:44020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:18.855612 2026] [core:error] [pid 2948325:tid 2948325] (13)Permission denied: [client 216.73.216.199:17009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory240/subsystem/uevent
[Thu Jul 30 11:50:19.237496 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.70:21438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:19.238124 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.70:21438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:19.284773 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.63:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:19.285391 2026] [authz_core:error] [pid 2955518:tid 2955518] [client 57.141.0.63:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:19.365962 2026] [security2:error] [pid 2960176:tid 2960176] [client 43.133.253.253:41326] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "carpediemproperty.co.uk"] [uri "/"] [unique_id "amssa7VMujAAJCk2XfQcvQAAABQ"]
[Thu Jul 30 11:50:19.604700 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.28:34906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:19.605321 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.28:34906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:20.387625 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.51:44022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:20.388312 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.51:44022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:20.674296 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.28:34912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:20.674917 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.28:34912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:20.717578 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.26:32884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:20.718228 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.26:32884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:20.800964 2026] [lsapi:warn] [pid 2953723:tid 2953723] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:20.848856 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.68:34866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:20.849470 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.68:34866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:20.966033 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.4:51376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:20.966671 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.4:51376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:21.523172 2026] [access_compat:error] [pid 2937855:tid 2937855] [client 136.158.37.124:39191] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:50:21.529703 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 66.249.66.33:38534] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:50:21.532347 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 66.249.66.33:38534] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:50:21.865578 2026] [core:error] [pid 2955518:tid 2955518] (13)Permission denied: [client 216.73.216.199:24701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory214/subsystem/uevent
[Thu Jul 30 11:50:22.156120 2026] [ssl:error] [pid 2955436:tid 2955436] (EAI 2)Name or service not known: [client 144.76.19.72:48418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:22.156153 2026] [ssl:error] [pid 2955436:tid 2955436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:22.230324 2026] [ssl:error] [pid 2961039:tid 2961039] (EAI 2)Name or service not known: [client 144.76.19.72:48422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:22.230361 2026] [ssl:error] [pid 2961039:tid 2961039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:22.280250 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.42:45114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:22.281242 2026] [authz_core:error] [pid 2955436:tid 2955436] [client 57.141.0.42:45114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:22.314810 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.51:44028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:22.315471 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.51:44028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:22.317294 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 66.249.66.33:50892] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:50:22.319948 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 66.249.66.33:50892] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:50:22.537286 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.28:39970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:22.537902 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.28:39970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:22.664443 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.29:30400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:22.665076 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.29:30400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:22.807421 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.19:29080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:22.808041 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.19:29080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:23.050696 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.13:51758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:23.051330 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.13:51758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:23.074602 2026] [security2:error] [pid 2953723:tid 2953723] [client 43.159.145.153:43880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "itsupportinayrshire.com"] [uri "/"] [unique_id "amssb8xSZ-POeutqWbVU_gAAACo"]
[Thu Jul 30 11:50:23.793262 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.68:34882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:23.793889 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.68:34882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:24.277767 2026] [core:error] [pid 2955518:tid 2955518] (13)Permission denied: [client 216.73.216.199:24701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/poison
[Thu Jul 30 11:50:24.378410 2026] [security2:error] [pid 2961091:tid 2961091] [client 43.159.145.153:48308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "itsupportinayrshire.com"] [uri "/"] [unique_id "amsscPh2jS-eOf2MI_L0KQAAAC8"], referer: http://itsupportinayrshire.com
[Thu Jul 30 11:50:24.428771 2026] [authz_core:error] [pid 2961096:tid 2961096] [client 57.141.0.10:26284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:24.429420 2026] [authz_core:error] [pid 2961096:tid 2961096] [client 57.141.0.10:26284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:24.618796 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.26:33696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:24.619418 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.26:33696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:25.009162 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.39:27804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:25.009785 2026] [authz_core:error] [pid 2955784:tid 2955784] [client 57.141.0.39:27804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:25.286434 2026] [ssl:error] [pid 2961097:tid 2961097] (EAI 2)Name or service not known: [client 144.76.19.72:48424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:25.286484 2026] [ssl:error] [pid 2961097:tid 2961097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:25.341900 2026] [ssl:error] [pid 2961096:tid 2961096] (EAI 2)Name or service not known: [client 144.76.19.72:48426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:25.341935 2026] [ssl:error] [pid 2961096:tid 2961096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:25.481882 2026] [ssl:error] [pid 2955518:tid 2955518] (70014)End of file found: [client 216.73.216.199:24701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:25.583792 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.56:53034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:25.584413 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.56:53034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:25.610320 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.45:21972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:25.610931 2026] [authz_core:error] [pid 2948325:tid 2948325] [client 57.141.0.45:21972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:25.820168 2026] [authz_core:error] [pid 2961091:tid 2961091] [client 57.141.0.64:26146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:25.820790 2026] [authz_core:error] [pid 2961091:tid 2961091] [client 57.141.0.64:26146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:25.991743 2026] [core:error] [pid 2959154:tid 2959154] (13)Permission denied: [client 216.73.216.199:61796] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS2/irq
[Thu Jul 30 11:50:26.119556 2026] [authz_core:error] [pid 2961096:tid 2961096] [client 57.141.0.13:51772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:26.120179 2026] [authz_core:error] [pid 2961096:tid 2961096] [client 57.141.0.13:51772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:26.125575 2026] [core:error] [pid 2955785:tid 2955785] [client 66.249.66.167:51052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:26.125601 2026] [core:error] [pid 2955785:tid 2955785] [client 66.249.66.167:51052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:26.534866 2026] [authz_core:error] [pid 2959934:tid 2959934] [client 52.238.199.152:52993] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 11:50:27.244061 2026] [authz_core:error] [pid 2961091:tid 2961091] [client 57.141.0.10:31344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:27.244701 2026] [authz_core:error] [pid 2961091:tid 2961091] [client 57.141.0.10:31344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:27.286640 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.49:45398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:27.287278 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.49:45398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:27.304700 2026] [core:error] [pid 2958981:tid 2958981] (13)Permission denied: [client 216.73.216.199:54083] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory194/subsystem/uevent
[Thu Jul 30 11:50:27.373939 2026] [lsapi:warn] [pid 2960948:tid 2960948] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:27.442805 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.27:56540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:27.443430 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.27:56540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:27.598386 2026] [core:error] [pid 2959154:tid 2959154] (13)Permission denied: [client 216.73.216.199:61796] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory107/subsystem/uevent
[Thu Jul 30 11:50:27.898434 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.29:30402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:27.899095 2026] [authz_core:error] [pid 2950449:tid 2950449] [client 57.141.0.29:30402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:28.394208 2026] [ssl:error] [pid 2961093:tid 2961093] (EAI 2)Name or service not known: [client 144.76.19.72:48438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:28.394239 2026] [ssl:error] [pid 2961093:tid 2961093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:28.450668 2026] [ssl:error] [pid 2961038:tid 2961038] (EAI 2)Name or service not known: [client 144.76.19.72:48452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:28.450734 2026] [ssl:error] [pid 2961038:tid 2961038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:28.501313 2026] [ssl:error] [pid 2959154:tid 2959154] (70014)End of file found: [client 216.73.216.199:61796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:28.603064 2026] [authz_core:error] [pid 2959934:tid 2959934] [client 52.238.199.152:52993] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/ID3/error_log
[Thu Jul 30 11:50:28.618332 2026] [security2:error] [pid 2948863:tid 2948863] [client 188.244.16.63:36734] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssdIvHY6yIYrSvOSeYVAAAADM"]
[Thu Jul 30 11:50:28.618377 2026] [security2:error] [pid 2948863:tid 2948863] [client 188.244.16.63:36734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssdIvHY6yIYrSvOSeYVAAAADM"]
[Thu Jul 30 11:50:28.618624 2026] [security2:error] [pid 2948863:tid 2948863] [client 188.244.16.63:36734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssdIvHY6yIYrSvOSeYVAAAADM"]
[Thu Jul 30 11:50:28.650122 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.55:58828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:28.650752 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.55:58828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:28.652832 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.9:20938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:28.653439 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.9:20938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:28.654101 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.29:30406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:28.654702 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.29:30406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:29.103961 2026] [ssl:error] [pid 2958981:tid 2958981] (70014)End of file found: [client 216.73.216.199:54083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:29.230599 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.24:65182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:29.231247 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.24:65182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:29.383299 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.65:48768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:29.383921 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.65:48768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:30.028268 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.23:33158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:30.028893 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.23:33158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:30.082631 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.65:48780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:30.083254 2026] [authz_core:error] [pid 2961038:tid 2961038] [client 57.141.0.65:48780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:30.196296 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.26:33716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:30.196939 2026] [authz_core:error] [pid 2955517:tid 2955517] [client 57.141.0.26:33716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:30.290476 2026] [core:error] [pid 2947595:tid 2947595] [client 66.249.66.8:44493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:30.290524 2026] [core:error] [pid 2947595:tid 2947595] [client 66.249.66.8:44493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:30.330983 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.56:57320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:30.331635 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.56:57320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:30.565355 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.55:58832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:30.565979 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.55:58832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:30.914287 2026] [authz_core:error] [pid 2961092:tid 2961092] [client 57.141.0.1:26206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:30.914907 2026] [authz_core:error] [pid 2961092:tid 2961092] [client 57.141.0.1:26206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:31.037253 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.49:25698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:31.037909 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.49:25698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:31.043258 2026] [security2:error] [pid 2955788:tid 2955788] [client 114.119.157.218:59673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/legal"] [unique_id "amssd88xBhJyuBq4-f5dxAAAAEs"], referer: http://codeworks.co.uk/
[Thu Jul 30 11:50:31.249188 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.60:34548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:31.249824 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.60:34548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:31.353133 2026] [lsapi:warn] [pid 2959997:tid 2959997] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:31.502701 2026] [ssl:error] [pid 2961093:tid 2961093] (EAI 2)Name or service not known: [client 144.76.19.72:42254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:31.502732 2026] [ssl:error] [pid 2961093:tid 2961093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:31.558743 2026] [ssl:error] [pid 2955517:tid 2955517] (EAI 2)Name or service not known: [client 144.76.19.72:42266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:31.558777 2026] [ssl:error] [pid 2955517:tid 2955517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:32.296347 2026] [authz_core:error] [pid 2961039:tid 2961039] [client 57.141.0.36:31572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:32.296975 2026] [authz_core:error] [pid 2961039:tid 2961039] [client 57.141.0.36:31572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:32.580901 2026] [access_compat:error] [pid 2961092:tid 2961092] [client 136.158.37.124:40158] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:50:32.665977 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.23:33168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:32.666639 2026] [authz_core:error] [pid 2953802:tid 2953802] [client 57.141.0.23:33168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:32.670285 2026] [authz_core:error] [pid 2961093:tid 2961093] [client 57.141.0.27:64522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:32.670927 2026] [authz_core:error] [pid 2961093:tid 2961093] [client 57.141.0.27:64522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:32.720380 2026] [security2:error] [pid 2946280:tid 2946280] [client 216.73.216.199:59996] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/throughput-performance/tuned.conf"] [unique_id "amsseBVmqRHdhmp7qjYVmQAAACU"]
[Thu Jul 30 11:50:32.720676 2026] [security2:error] [pid 2946280:tid 2946280] [client 216.73.216.199:59996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/throughput-performance/tuned.conf"] [unique_id "amsseBVmqRHdhmp7qjYVmQAAACU"]
[Thu Jul 30 11:50:32.720893 2026] [security2:error] [pid 2946280:tid 2946280] [client 216.73.216.199:59996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/throughput-performance/tuned.conf"] [unique_id "amsseBVmqRHdhmp7qjYVmQAAACU"]
[Thu Jul 30 11:50:32.961346 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.69:36974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:32.961975 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.69:36974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:33.225091 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.4:47506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:33.225731 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.4:47506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:33.289785 2026] [security2:error] [pid 2960799:tid 2960799] [client 181.28.16.216:51866] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsseTVkWOm3fWfngImCUgAAABc"]
[Thu Jul 30 11:50:33.289841 2026] [security2:error] [pid 2960799:tid 2960799] [client 181.28.16.216:51866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsseTVkWOm3fWfngImCUgAAABc"]
[Thu Jul 30 11:50:33.290146 2026] [security2:error] [pid 2960799:tid 2960799] [client 181.28.16.216:51866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsseTVkWOm3fWfngImCUgAAABc"]
[Thu Jul 30 11:50:33.318327 2026] [core:error] [pid 2946280:tid 2946280] (13)Permission denied: [client 216.73.216.199:59996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 11:50:34.114233 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.6:49466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:34.114855 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.6:49466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:34.241669 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.39:27814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:34.242287 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.39:27814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:34.333917 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.68:39504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:34.334546 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.68:39504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:34.427000 2026] [authz_core:error] [pid 2961096:tid 2961096] [client 57.141.0.14:40204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:34.427638 2026] [authz_core:error] [pid 2961096:tid 2961096] [client 57.141.0.14:40204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:34.613829 2026] [ssl:error] [pid 2949779:tid 2949779] (EAI 2)Name or service not known: [client 144.76.19.72:42274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:34.613869 2026] [ssl:error] [pid 2949779:tid 2949779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:34.666487 2026] [ssl:error] [pid 2961097:tid 2961097] (EAI 2)Name or service not known: [client 144.76.19.72:42290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:34.666529 2026] [ssl:error] [pid 2961097:tid 2961097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:35.077477 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.58:42504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:35.078123 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.58:42504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:35.728018 2026] [authz_core:error] [pid 2961039:tid 2961039] [client 66.249.66.33:55374] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:50:35.730752 2026] [authz_core:error] [pid 2961039:tid 2961039] [client 66.249.66.33:55374] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:50:35.773576 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.63:52954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:35.774217 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.63:52954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:35.992897 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.7:32056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:35.993558 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.7:32056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:36.319039 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.60:61418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:36.319669 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.60:61418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:36.504338 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.56:57324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:36.504965 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.56:57324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:36.595725 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.35:62190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:36.596374 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.35:62190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:37.075845 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.36:31576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:37.076463 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.36:31576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:37.187099 2026] [lsapi:warn] [pid 2948523:tid 2948523] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:37.474288 2026] [authz_core:error] [pid 2959934:tid 2959934] [client 52.238.199.152:52993] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-admin/includes/error_log
[Thu Jul 30 11:50:37.723830 2026] [ssl:error] [pid 2960799:tid 2960799] (EAI 2)Name or service not known: [client 144.76.19.72:42300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:37.723885 2026] [ssl:error] [pid 2960799:tid 2960799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:37.725977 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.29:51730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:37.726622 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.29:51730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:37.780207 2026] [ssl:error] [pid 2961091:tid 2961091] (EAI 2)Name or service not known: [client 144.76.19.72:42306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:37.780233 2026] [ssl:error] [pid 2961091:tid 2961091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:37.891196 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.27:64532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:37.891797 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.27:64532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:38.357120 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.31:48512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:38.357770 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.31:48512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:38.738150 2026] [security2:error] [pid 2961094:tid 2961094] [client 154.251.195.117:47880] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssfr0WOQtRbV9CrCOe3AAAADo"]
[Thu Jul 30 11:50:38.738226 2026] [security2:error] [pid 2961094:tid 2961094] [client 154.251.195.117:47880] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssfr0WOQtRbV9CrCOe3AAAADo"]
[Thu Jul 30 11:50:38.738534 2026] [security2:error] [pid 2961094:tid 2961094] [client 154.251.195.117:47880] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssfr0WOQtRbV9CrCOe3AAAADo"]
[Thu Jul 30 11:50:38.914522 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.34:34830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:38.915152 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.34:34830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:39.047515 2026] [authz_core:error] [pid 2959934:tid 2959934] [client 52.238.199.152:52993] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/error_log
[Thu Jul 30 11:50:39.245291 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.21:26728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:39.245908 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.21:26728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:39.351108 2026] [core:error] [pid 2946280:tid 2946280] (13)Permission denied: [client 216.73.216.199:59996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty27/subsystem/ttyS1/close_delay
[Thu Jul 30 11:50:39.993302 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.26:59328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:39.993929 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.26:59328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:40.302690 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.58:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:40.303341 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.58:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:40.556160 2026] [core:error] [pid 2946280:tid 2946280] (13)Permission denied: [client 216.73.216.199:59996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS2/irq
[Thu Jul 30 11:50:40.849161 2026] [ssl:error] [pid 2935539:tid 2935539] (EAI 2)Name or service not known: [client 144.76.19.72:21504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:40.849185 2026] [ssl:error] [pid 2935539:tid 2935539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:40.866490 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.7:32066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:40.867153 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.7:32066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:40.903638 2026] [ssl:error] [pid 2961040:tid 2961040] (EAI 2)Name or service not known: [client 144.76.19.72:21508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:40.903677 2026] [ssl:error] [pid 2961040:tid 2961040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:40.947496 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.21:26742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:40.948131 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.21:26742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:41.082305 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.50:45716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:41.082927 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.50:45716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:41.296124 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.37:21934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:41.296775 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.37:21934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:41.676374 2026] [authz_core:error] [pid 2961039:tid 2961039] [client 57.141.0.27:46314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:41.677013 2026] [authz_core:error] [pid 2961039:tid 2961039] [client 57.141.0.27:46314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:41.793169 2026] [lsapi:warn] [pid 2950491:tid 2950491] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:41.931181 2026] [security2:error] [pid 2949779:tid 2949779] [client 185.191.171.12:45358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/pleasant-view-greenhouse-gallatin,-mo"] [unique_id "amssgfg2DEeOy-zFWnpwCwAAAAg"]
[Thu Jul 30 11:50:42.368187 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.2:48096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:42.368810 2026] [authz_core:error] [pid 2946278:tid 2946278] [client 57.141.0.2:48096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:42.568862 2026] [authz_core:error] [pid 2959934:tid 2959934] [client 52.238.199.152:52993] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 11:50:42.844788 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 66.249.66.33:64724] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:50:42.847449 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 66.249.66.33:64724] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:50:42.968197 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.24:45248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:42.968816 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.24:45248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:43.034993 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.3:51306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:43.035630 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.3:51306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:43.042051 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.26:61704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:43.042710 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.26:61704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:43.374764 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.39:43778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:43.375386 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.39:43778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:43.429233 2026] [access_compat:error] [pid 2950491:tid 2950491] [client 136.158.37.124:40976] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:50:43.972774 2026] [ssl:error] [pid 2955788:tid 2955788] (EAI 2)Name or service not known: [client 144.76.19.72:21518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:43.972808 2026] [ssl:error] [pid 2955788:tid 2955788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:43.974693 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.21:27316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:43.975305 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.21:27316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:44.024103 2026] [ssl:error] [pid 2961097:tid 2961097] (EAI 2)Name or service not known: [client 144.76.19.72:21524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:44.024129 2026] [ssl:error] [pid 2961097:tid 2961097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:44.079298 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.40:37684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:44.079916 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.40:37684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:44.237600 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.67:37854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:44.238220 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.67:37854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:44.470629 2026] [ssl:error] [pid 2959997:tid 2959997] (70014)End of file found: [client 216.73.216.199:37549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:44.542221 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.20:61336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:44.542845 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.20:61336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:44.810689 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.1:35952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:44.811312 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.1:35952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:45.145220 2026] [core:error] [pid 2961097:tid 2961097] [client 66.249.66.167:49225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:45.145264 2026] [core:error] [pid 2961097:tid 2961097] [client 66.249.66.167:49225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:50:45.835576 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.11:46016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:45.836198 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.11:46016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:45.894558 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.2:53382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:45.895594 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.2:53382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:46.023050 2026] [security2:error] [pid 2962190:tid 2962190] [client 185.191.171.12:36474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1395.0.html"] [unique_id "amsshgdPZu7c_e_XVcYBgwAAAAA"]
[Thu Jul 30 11:50:46.389221 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.27:46324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:46.390050 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.27:46324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:46.914170 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.46:23412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:46.914794 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.46:23412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:47.019188 2026] [security2:error] [pid 2948863:tid 2948863] [client 45.148.10.120:60750] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hatch-works.com"] [uri "/.env"] [unique_id "amssh4vHY6yIYrSvOSeYWQAAADM"]
[Thu Jul 30 11:50:47.019379 2026] [security2:error] [pid 2948863:tid 2948863] [client 45.148.10.120:60750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hatch-works.com"] [uri "/.env"] [unique_id "amssh4vHY6yIYrSvOSeYWQAAADM"]
[Thu Jul 30 11:50:47.076544 2026] [ssl:error] [pid 2960799:tid 2960799] (EAI 2)Name or service not known: [client 144.76.19.72:21538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:47.076575 2026] [ssl:error] [pid 2960799:tid 2960799] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:47.130857 2026] [ssl:error] [pid 2955217:tid 2955217] (EAI 2)Name or service not known: [client 144.76.19.72:21542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:47.130900 2026] [ssl:error] [pid 2955217:tid 2955217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:47.224389 2026] [security2:error] [pid 2948863:tid 2948863] [client 45.148.10.120:60750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hatch-works.com"] [uri "/index.php"] [unique_id "amssh4vHY6yIYrSvOSeYWQAAADM"]
[Thu Jul 30 11:50:47.386226 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.43:53206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:47.386848 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.43:53206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:47.418342 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 57.141.0.53:35648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:47.418974 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 57.141.0.53:35648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:47.437088 2026] [authz_core:error] [pid 2960799:tid 2960799] [client 57.141.0.43:53218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:47.437701 2026] [authz_core:error] [pid 2960799:tid 2960799] [client 57.141.0.43:53218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:47.905980 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.34:34856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:47.906627 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.34:34856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:48.093892 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.63:43356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:48.094568 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.63:43356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:48.310718 2026] [lsapi:warn] [pid 2955786:tid 2955786] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:48.757317 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.58:52972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:48.757954 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.58:52972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:48.985848 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.58:52976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:48.986898 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.58:52976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:49.177744 2026] [security2:error] [pid 2947080:tid 2947080] [client 170.106.180.153:53074] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "soul-connections.net"] [uri "/"] [unique_id "amssiV_oDatr4dP7taFsfwAAAA4"]
[Thu Jul 30 11:50:49.253194 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.46:23436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:49.253819 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.46:23436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:49.469659 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 57.141.0.42:58638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:49.470293 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 57.141.0.42:58638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:49.508084 2026] [ssl:error] [pid 2946280:tid 2946280] (70014)End of file found: [client 216.73.216.199:59996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:49.635993 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.15:54488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:49.636624 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.15:54488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:49.963028 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.54:40484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:49.963663 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.54:40484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:50.023848 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.41:27026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:50.024485 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.41:27026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:50.186529 2026] [ssl:error] [pid 2959996:tid 2959996] (EAI 2)Name or service not known: [client 144.76.19.72:53712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:50.186568 2026] [ssl:error] [pid 2959996:tid 2959996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:50.241872 2026] [ssl:error] [pid 2959997:tid 2959997] (EAI 2)Name or service not known: [client 144.76.19.72:53716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:50.241907 2026] [ssl:error] [pid 2959997:tid 2959997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:50.706932 2026] [core:error] [pid 2955786:tid 2955786] (13)Permission denied: [client 216.73.216.199:13105] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory123/subsystem/uevent
[Thu Jul 30 11:50:51.261663 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.20:30576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:51.262673 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.20:30576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:51.435774 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.23:25470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:51.436394 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.23:25470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:51.564940 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.47:33830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:51.565580 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.47:33830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:51.584019 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.33:38360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:51.584663 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.33:38360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:51.619087 2026] [core:error] [pid 2955786:tid 2955786] (13)Permission denied: [client 216.73.216.199:13105] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/thermal/cooling_device4/device/eject
[Thu Jul 30 11:50:52.272997 2026] [lsapi:warn] [pid 2961096:tid 2961096] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:52.530118 2026] [ssl:error] [pid 2955786:tid 2955786] (70014)End of file found: [client 216.73.216.199:13105] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:52.552315 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.20:30594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:52.552945 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.20:30594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:52.718088 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.5:26298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:52.718710 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.5:26298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:52.953247 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.46:50734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:52.953868 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.46:50734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:53.294610 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:53728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:53.294640 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:53.350253 2026] [ssl:error] [pid 2959996:tid 2959996] (EAI 2)Name or service not known: [client 144.76.19.72:53742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:53.350282 2026] [ssl:error] [pid 2959996:tid 2959996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:53.588699 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.60:61658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:53.589319 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.60:61658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:54.335001 2026] [core:error] [pid 2948524:tid 2948524] (13)Permission denied: [client 216.73.216.199:52811] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS2/irq
[Thu Jul 30 11:50:54.428884 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.69:22034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:54.429517 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.69:22034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:54.435014 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.26:27370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:54.435638 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.26:27370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:54.445791 2026] [access_compat:error] [pid 2937855:tid 2937855] [client 136.158.37.124:41755] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:50:54.563572 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.45:20428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:54.564201 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.45:20428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:54.621609 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.9:24080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:54.622296 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.9:24080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:54.793884 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.43:20798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:54.794519 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.43:20798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:55.793422 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.62:53696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:55.794042 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 57.141.0.62:53696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:56.090227 2026] [authz_core:error] [pid 2961095:tid 2961095] [client 57.141.0.38:33660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:56.091178 2026] [authz_core:error] [pid 2961095:tid 2961095] [client 57.141.0.38:33660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:56.404615 2026] [ssl:error] [pid 2956813:tid 2956813] (EAI 2)Name or service not known: [client 144.76.19.72:53758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:56.404644 2026] [ssl:error] [pid 2956813:tid 2956813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:56.459023 2026] [ssl:error] [pid 2955217:tid 2955217] (EAI 2)Name or service not known: [client 144.76.19.72:53760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:56.459050 2026] [ssl:error] [pid 2955217:tid 2955217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:56.484249 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.37:30124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:56.484873 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.37:30124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:56.679382 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.70:63456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:56.680002 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.70:63456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:57.055636 2026] [ssl:error] [pid 2955217:tid 2955217] (70014)End of file found: [client 216.73.216.199:59871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:57.250222 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.27:61260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:57.250842 2026] [authz_core:error] [pid 2933234:tid 2933234] [client 57.141.0.27:61260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:57.345615 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.62:53710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:57.346246 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.62:53710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:57.380862 2026] [authz_core:error] [pid 2959030:tid 2959030] [client 52.238.199.152:51565] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/IXR/error_log
[Thu Jul 30 11:50:57.494753 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.27:61272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:57.495377 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.27:61272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:57.721480 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.69:22040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:57.722126 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.69:22040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:57.958470 2026] [ssl:error] [pid 2948524:tid 2948524] (70014)End of file found: [client 216.73.216.199:52811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:50:57.980155 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.16:34610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:57.980772 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.16:34610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:58.268383 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.11:50446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:58.269062 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.11:50446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:58.590098 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.13:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:58.590722 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.13:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:58.752131 2026] [access_compat:error] [pid 2961094:tid 2961094] [client 80.109.152.162:10627] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:50:58.820556 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.64:38172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:58.821208 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.64:38172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:58.877470 2026] [access_compat:error] [pid 2955648:tid 2955648] [client 80.109.152.162:29215] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:50:59.073414 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.34:40450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:59.074036 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.34:40450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:59.149554 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.38:50356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:59.150209 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.38:50356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:50:59.187950 2026] [lsapi:warn] [pid 2946241:tid 2946241] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:50:59.513372 2026] [ssl:error] [pid 2959997:tid 2959997] (EAI 2)Name or service not known: [client 144.76.19.72:53770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:59.513403 2026] [ssl:error] [pid 2959997:tid 2959997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:59.571620 2026] [ssl:error] [pid 2962602:tid 2962602] (EAI 2)Name or service not known: [client 144.76.19.72:18600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:50:59.571664 2026] [ssl:error] [pid 2962602:tid 2962602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:50:59.991944 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.56:45290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:50:59.992610 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.56:45290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:00.070655 2026] [core:error] [pid 2946278:tid 2946278] (13)Permission denied: [client 216.73.216.199:25858] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/efivars/uevent
[Thu Jul 30 11:51:00.205263 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.35:63382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:00.205906 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.35:63382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:00.736166 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.21:59582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:00.736829 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.21:59582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:01.204251 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.56:45302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:01.204879 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.56:45302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:01.773366 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.31:39644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:01.773994 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.31:39644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:02.112655 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 66.249.66.34:37448] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:51:02.115305 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 66.249.66.34:37448] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:51:02.180138 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.10:60254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:02.180758 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.10:60254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:02.435684 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.29:24870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:02.436363 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.29:24870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:02.613320 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.61:39806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:02.613940 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.61:39806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:02.628625 2026] [ssl:error] [pid 2961037:tid 2961037] (EAI 2)Name or service not known: [client 144.76.19.72:18606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:02.628654 2026] [ssl:error] [pid 2961037:tid 2961037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:02.686775 2026] [ssl:error] [pid 2955217:tid 2955217] (EAI 2)Name or service not known: [client 144.76.19.72:18616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:02.686800 2026] [ssl:error] [pid 2955217:tid 2955217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:02.739895 2026] [lsapi:warn] [pid 2959996:tid 2959996] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:02.925469 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.59:33542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:02.926094 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.59:33542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:03.209818 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.35:63400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:03.210892 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.35:63400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:03.677133 2026] [ssl:error] [pid 2948326:tid 2948326] (70014)End of file found: [client 216.73.216.199:37323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:03.720158 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.35:63404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:03.720776 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.35:63404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:04.004469 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.38:50372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:04.005108 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.38:50372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:04.116251 2026] [core:error] [pid 2948524:tid 2948524] [client 66.249.66.5:38831] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:04.116278 2026] [core:error] [pid 2948524:tid 2948524] [client 66.249.66.5:38831] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:04.117802 2026] [core:error] [pid 2948863:tid 2948863] [client 66.249.66.169:56583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:04.117821 2026] [core:error] [pid 2948863:tid 2948863] [client 66.249.66.169:56583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:04.196887 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.39:46258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:04.197543 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.39:46258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:04.252496 2026] [authz_core:error] [pid 2962847:tid 2962847] [client 57.141.0.23:57802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:04.253181 2026] [authz_core:error] [pid 2962847:tid 2962847] [client 57.141.0.23:57802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:04.440548 2026] [security2:error] [pid 2959996:tid 2959996] [client 47.128.123.73:28126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bookings.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amssmOcGBxZRV2qAbJ8s0QAAABA"]
[Thu Jul 30 11:51:04.552885 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.29:24892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:04.553519 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.29:24892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:04.704500 2026] [authz_core:error] [pid 2962847:tid 2962847] [client 57.141.0.30:52596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:04.705134 2026] [authz_core:error] [pid 2962847:tid 2962847] [client 57.141.0.30:52596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:05.219737 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.17:48098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:05.220363 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.17:48098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:05.455732 2026] [access_compat:error] [pid 2961095:tid 2961095] [client 136.158.37.124:42625] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:51:05.740452 2026] [ssl:error] [pid 2948524:tid 2948524] (EAI 2)Name or service not known: [client 144.76.19.72:18630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:05.740484 2026] [ssl:error] [pid 2948524:tid 2948524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:05.796821 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:18638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:05.796851 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:06.044288 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.26:63602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:06.044932 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.26:63602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:06.192165 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.5:36174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:06.192786 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.5:36174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:06.292802 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.1:38518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:06.293434 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.1:38518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:06.672061 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.59:54302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:06.672688 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.59:54302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:07.222324 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.45:25784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:07.223009 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.45:25784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:07.974165 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.48:32400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:07.974794 2026] [authz_core:error] [pid 2953723:tid 2953723] [client 57.141.0.48:32400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:08.047345 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.35:63416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:08.047976 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.35:63416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:08.055251 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.52:35294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:08.056391 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.52:35294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:08.677461 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.10:23186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:08.678092 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.10:23186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:08.854601 2026] [ssl:error] [pid 2959997:tid 2959997] (EAI 2)Name or service not known: [client 144.76.19.72:18654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:08.854637 2026] [ssl:error] [pid 2959997:tid 2959997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:08.912430 2026] [ssl:error] [pid 2961040:tid 2961040] (EAI 2)Name or service not known: [client 144.76.19.72:18668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:08.912469 2026] [ssl:error] [pid 2961040:tid 2961040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:08.948335 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.14:36808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:08.948966 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.14:36808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:09.084961 2026] [security2:error] [pid 2962646:tid 2962646] [client 14.224.106.168:50437] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssnZMZJbAk_4mQGqhszAAAABQ"]
[Thu Jul 30 11:51:09.085008 2026] [security2:error] [pid 2962646:tid 2962646] [client 14.224.106.168:50437] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssnZMZJbAk_4mQGqhszAAAABQ"]
[Thu Jul 30 11:51:09.085274 2026] [security2:error] [pid 2962646:tid 2962646] [client 14.224.106.168:50437] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssnZMZJbAk_4mQGqhszAAAABQ"]
[Thu Jul 30 11:51:09.466895 2026] [core:error] [pid 2957059:tid 2957059] [client 66.249.66.3:43171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:09.466923 2026] [core:error] [pid 2957059:tid 2957059] [client 66.249.66.3:43171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:09.602177 2026] [lsapi:warn] [pid 2960949:tid 2960949] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:09.645357 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.6:33934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:09.645973 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.6:33934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:09.974654 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.6:33942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:09.975284 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.6:33942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:10.323714 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.51:44436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:10.324338 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.51:44436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:10.455814 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.45:25794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:10.456446 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.45:25794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:10.602727 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.40:46894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:10.603348 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.40:46894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:10.885727 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.26:63608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:10.888584 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.26:63608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:10.892217 2026] [security2:error] [pid 2959722:tid 2959722] [client 170.106.105.222:11615] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssnkiPiiRqzTC5HWqWHwAAAAs"]
[Thu Jul 30 11:51:10.892263 2026] [security2:error] [pid 2959722:tid 2959722] [client 170.106.105.222:11615] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssnkiPiiRqzTC5HWqWHwAAAAs"]
[Thu Jul 30 11:51:10.892545 2026] [security2:error] [pid 2959722:tid 2959722] [client 170.106.105.222:11615] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssnkiPiiRqzTC5HWqWHwAAAAs"]
[Thu Jul 30 11:51:11.752966 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.45:25802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:11.753598 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.45:25802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:11.775222 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.47:43318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:11.775848 2026] [authz_core:error] [pid 2962190:tid 2962190] [client 57.141.0.47:43318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:11.986094 2026] [ssl:error] [pid 2947080:tid 2947080] (EAI 2)Name or service not known: [client 144.76.19.72:35536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:11.986137 2026] [ssl:error] [pid 2947080:tid 2947080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:12.046912 2026] [ssl:error] [pid 2946280:tid 2946280] (EAI 2)Name or service not known: [client 144.76.19.72:35546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:12.046937 2026] [ssl:error] [pid 2946280:tid 2946280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:12.106316 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.61:25888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:12.106940 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.61:25888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:12.191835 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.47:43328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:12.192460 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.47:43328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:12.731491 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.60:46980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:12.732129 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.60:46980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:12.857020 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.62:64214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:12.857670 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.62:64214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:13.212633 2026] [lsapi:warn] [pid 2961095:tid 2961095] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:13.571685 2026] [security2:error] [pid 2953519:tid 2953519] [client 170.106.105.222:29823] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssoegZaDOAiDj7nImm2QAAABE"]
[Thu Jul 30 11:51:13.571735 2026] [security2:error] [pid 2953519:tid 2953519] [client 170.106.105.222:29823] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amssoegZaDOAiDj7nImm2QAAABE"]
[Thu Jul 30 11:51:13.571992 2026] [security2:error] [pid 2953519:tid 2953519] [client 170.106.105.222:29823] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amssoegZaDOAiDj7nImm2QAAABE"]
[Thu Jul 30 11:51:13.586453 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.4:41134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:13.587084 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.4:41134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:13.719241 2026] [security2:error] [pid 2959996:tid 2959996] [client 114.119.157.183:36603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~104,30/request_format~html"] [unique_id "amssoecGBxZRV2qAbJ8s1gAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~104,103,30/request_format~html
[Thu Jul 30 11:51:13.886234 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.60:46994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:13.886852 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.60:46994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:13.924693 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 40.77.167.43:19401] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:13.925320 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 40.77.167.43:19401] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:14.028156 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.59:54312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:14.028784 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.59:54312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:14.460408 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.7:60258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:14.461124 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.7:60258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:14.950206 2026] [security2:error] [pid 2927346:tid 2927346] [client 20.171.55.167:6897] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.enigmasupplies.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amssokQpVDjYO6sOcCluqwAAAAk"]
[Thu Jul 30 11:51:14.950431 2026] [security2:error] [pid 2927346:tid 2927346] [client 20.171.55.167:6897] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.enigmasupplies.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amssokQpVDjYO6sOcCluqwAAAAk"]
[Thu Jul 30 11:51:14.950693 2026] [security2:error] [pid 2927346:tid 2927346] [client 20.171.55.167:6897] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.enigmasupplies.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amssokQpVDjYO6sOcCluqwAAAAk"]
[Thu Jul 30 11:51:14.969541 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.69:62218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:14.970164 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.69:62218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:15.130718 2026] [ssl:error] [pid 2959996:tid 2959996] (EAI 2)Name or service not known: [client 144.76.19.72:35550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:15.130740 2026] [ssl:error] [pid 2959996:tid 2959996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:15.183950 2026] [ssl:error] [pid 2956813:tid 2956813] (EAI 2)Name or service not known: [client 144.76.19.72:35556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:15.183976 2026] [ssl:error] [pid 2956813:tid 2956813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:15.214860 2026] [security2:error] [pid 2961095:tid 2961095] [client 114.119.157.183:36611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564873200/cat_ids~104,30/request_format~html"] [unique_id "amsso6IgTS6kGqGH9ZTIywAAADs"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564873200/cat_ids~104,103,30/request_format~html
[Thu Jul 30 11:51:15.511355 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.4:41136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:15.511973 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.4:41136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:15.563369 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.4:41144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:15.563989 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.4:41144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:15.712624 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.23:60388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:15.713258 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.23:60388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:15.964190 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.13:40888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:15.964809 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.13:40888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:16.046179 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.67:32166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:16.046809 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.67:32166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:16.438567 2026] [access_compat:error] [pid 2956813:tid 2956813] [client 136.158.37.124:43442] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:51:16.491642 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.17:43656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:16.492264 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.17:43656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:16.627064 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.43:36804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:16.627698 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.43:36804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:16.781426 2026] [lsapi:error] [pid 2959996:tid 2959996] [client 152.59.146.117:59598] [host hornsey-town-hall.org.uk] Connect to backend failed with CONNECTION_RESET on sending request(POST /xmlrpc.php HTTP/1.1); uri(/xmlrpc.php): ReceiveAckHdr: backend reset connection: errno 104 (possibly memlimit for LVE ID 1184 with UID 1184 too small), check http://docs.cloudlinux.com/mod_lsapi_troubleshooting.html
[Thu Jul 30 11:51:16.922986 2026] [access_compat:error] [pid 2960949:tid 2960949] [client 45.158.164.139:56982] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:51:17.007454 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.22:35828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:17.008156 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.22:35828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:17.574500 2026] [security2:error] [pid 2946241:tid 2946241] [client 47.128.56.115:53362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/robots.txt"] [unique_id "amsspSruNnrTUIGJ6Q6BFAAAABg"]
[Thu Jul 30 11:51:17.819099 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.4:41156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:17.819717 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.4:41156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:17.899257 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.22:30546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:17.899881 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.22:30546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:17.914752 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.12:51206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:17.915368 2026] [authz_core:error] [pid 2947080:tid 2947080] [client 57.141.0.12:51206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:18.004963 2026] [ssl:error] [pid 2953519:tid 2953519] (70014)End of file found: [client 216.73.216.199:35926] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:18.062637 2026] [security2:error] [pid 2957059:tid 2957059] [client 43.164.0.96:57160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amssprJ0z-wYfrIVDkWHtAAAAAo"]
[Thu Jul 30 11:51:18.275370 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:35570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:18.275406 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:18.310168 2026] [core:error] [pid 2946278:tid 2946278] (13)Permission denied: [client 216.73.216.199:25858] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/machinecheck/machinecheck1/subsystem/uevent
[Thu Jul 30 11:51:18.328595 2026] [ssl:error] [pid 2963363:tid 2963363] (EAI 2)Name or service not known: [client 144.76.19.72:35580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:18.328638 2026] [ssl:error] [pid 2963363:tid 2963363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:18.911212 2026] [core:error] [pid 2946278:tid 2946278] (13)Permission denied: [client 216.73.216.199:25858] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS2/irq
[Thu Jul 30 11:51:19.209426 2026] [core:error] [pid 2946278:tid 2946278] (13)Permission denied: [client 216.73.216.199:25858] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS2/port
[Thu Jul 30 11:51:19.219077 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.64:55674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:19.219701 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.64:55674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:19.320598 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.19:24712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:19.321219 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.19:24712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:19.729139 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.54:60778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:19.729758 2026] [authz_core:error] [pid 2957059:tid 2957059] [client 57.141.0.54:60778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:19.811545 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.65:22384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:19.812188 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.65:22384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:19.816977 2026] [core:error] [pid 2946278:tid 2946278] (13)Permission denied: [client 216.73.216.199:25858] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS1/line
[Thu Jul 30 11:51:19.911584 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.35:42448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:19.912271 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.35:42448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:20.334043 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.53:60032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:20.334679 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.53:60032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:20.412110 2026] [lsapi:warn] [pid 2962813:tid 2962813] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:20.580652 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.56:32996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:20.581273 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.56:32996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:20.624530 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.58:20606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:20.625164 2026] [authz_core:error] [pid 2946241:tid 2946241] [client 57.141.0.58:20606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:20.626186 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.23:60402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:20.626790 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.23:60402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:20.713636 2026] [core:error] [pid 2946278:tid 2946278] (13)Permission denied: [client 216.73.216.199:25858] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 11:51:20.847422 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.27:23212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:20.848122 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.27:23212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:21.310002 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.56:33002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:21.310642 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.56:33002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:21.387320 2026] [ssl:error] [pid 2927346:tid 2927346] (EAI 2)Name or service not known: [client 144.76.19.72:61290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:21.387358 2026] [ssl:error] [pid 2927346:tid 2927346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:21.444875 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:61302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:21.444908 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:21.524530 2026] [security2:error] [pid 2946280:tid 2946280] [client 193.37.32.166:48421] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/.git/HEAD"] [unique_id "amssqRVmqRHdhmp7qjYV2AAAACU"]
[Thu Jul 30 11:51:21.524685 2026] [security2:error] [pid 2946280:tid 2946280] [client 193.37.32.166:48421] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/.git/HEAD"] [unique_id "amssqRVmqRHdhmp7qjYV2AAAACU"]
[Thu Jul 30 11:51:21.689708 2026] [security2:error] [pid 2955786:tid 2955786] [client 193.37.32.149:62947] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/.git/HEAD"] [unique_id "amssqWKGj8yjZ2pG1p5EvgAAAEk"]
[Thu Jul 30 11:51:21.689816 2026] [security2:error] [pid 2955786:tid 2955786] [client 193.37.32.149:62947] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/.git/HEAD"] [unique_id "amssqWKGj8yjZ2pG1p5EvgAAAEk"]
[Thu Jul 30 11:51:21.839714 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.68:29698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:21.840399 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.68:29698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:21.842407 2026] [security2:error] [pid 2955786:tid 2955786] [client 193.37.32.149:62947] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/index.php"] [unique_id "amssqWKGj8yjZ2pG1p5EvgAAAEk"]
[Thu Jul 30 11:51:22.179245 2026] [security2:error] [pid 2946280:tid 2946280] [client 193.37.32.166:48421] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/index.php"] [unique_id "amssqRVmqRHdhmp7qjYV2AAAACU"]
[Thu Jul 30 11:51:22.460393 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.51:62090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:22.461012 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.51:62090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:22.527819 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.21:31316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:22.528443 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.21:31316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:22.895260 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.21:31322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:22.895875 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.21:31322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:23.424480 2026] [ssl:error] [pid 2946278:tid 2946278] (70014)End of file found: [client 216.73.216.199:25858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:23.690654 2026] [lsapi:warn] [pid 2950448:tid 2950448] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:23.696465 2026] [security2:error] [pid 2959154:tid 2959154] [client 52.123.137.90:64450] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amssqyMIBy93HDeMjLZP3QAAAAc"]
[Thu Jul 30 11:51:23.696810 2026] [security2:error] [pid 2959154:tid 2959154] [client 52.123.137.90:64450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amssqyMIBy93HDeMjLZP3QAAAAc"]
[Thu Jul 30 11:51:23.722256 2026] [security2:error] [pid 2959154:tid 2959154] [client 52.123.137.90:64450] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/403.shtml"] [unique_id "amssqyMIBy93HDeMjLZP3QAAAAc"]
[Thu Jul 30 11:51:23.774309 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:20034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:23.774929 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:20034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:23.896760 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.61:63402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:23.897377 2026] [authz_core:error] [pid 2962645:tid 2962645] [client 57.141.0.61:63402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:24.013919 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.31:40350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:24.014948 2026] [authz_core:error] [pid 2953519:tid 2953519] [client 57.141.0.31:40350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:24.066356 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.66:63830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:24.066980 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 57.141.0.66:63830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:24.291528 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.15:27200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:24.292166 2026] [authz_core:error] [pid 2955786:tid 2955786] [client 57.141.0.15:27200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:24.502551 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:61314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:24.502584 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:24.557565 2026] [ssl:error] [pid 2939727:tid 2939727] (EAI 2)Name or service not known: [client 144.76.19.72:61318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:24.557595 2026] [ssl:error] [pid 2939727:tid 2939727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:25.077149 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.9:63860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:25.077772 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.9:63860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:25.784315 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.43:60132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:25.784948 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.43:60132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:25.816439 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.3:45206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:25.817056 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.3:45206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:26.173587 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.10:31860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:26.174217 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.10:31860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:26.357086 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.16:52268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:26.357713 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.16:52268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:26.538980 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.16:52276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:26.539630 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.16:52276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:26.843210 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.5:52000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:26.843856 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.5:52000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:27.489697 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.33:51308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:27.490319 2026] [authz_core:error] [pid 2927346:tid 2927346] [client 57.141.0.33:51308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:27.614469 2026] [ssl:error] [pid 2962602:tid 2962602] (EAI 2)Name or service not known: [client 144.76.19.72:61328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:27.614497 2026] [ssl:error] [pid 2962602:tid 2962602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:27.667085 2026] [ssl:error] [pid 2959030:tid 2959030] (EAI 2)Name or service not known: [client 144.76.19.72:61330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:27.667117 2026] [ssl:error] [pid 2959030:tid 2959030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:27.775078 2026] [ssl:error] [pid 2963363:tid 2963363] (70014)End of file found: [client 216.73.216.199:33384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:28.019218 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.65:41742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:28.019847 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.65:41742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:28.161819 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.19:57998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:28.162444 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.19:57998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:28.376443 2026] [ssl:error] [pid 2950448:tid 2950448] (70014)End of file found: [client 216.73.216.199:45968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:28.402014 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.43:60140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:28.402647 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.43:60140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:28.884363 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.28:42856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:28.884987 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.28:42856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:29.556272 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.33:51310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:29.556902 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.33:51310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:29.741954 2026] [authz_core:error] [pid 2961092:tid 2961092] [client 57.141.0.33:51320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:29.742593 2026] [authz_core:error] [pid 2961092:tid 2961092] [client 57.141.0.33:51320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:29.835803 2026] [security2:error] [pid 2927346:tid 2927346] [client 45.148.10.120:41492] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amsssUQpVDjYO6sOcCluwwAAAAk"]
[Thu Jul 30 11:51:29.835942 2026] [security2:error] [pid 2927346:tid 2927346] [client 45.148.10.120:41492] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amsssUQpVDjYO6sOcCluwwAAAAk"]
[Thu Jul 30 11:51:30.300293 2026] [security2:error] [pid 2927346:tid 2927346] [client 45.148.10.120:41492] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sarahwiseman.co.uk"] [uri "/index.php"] [unique_id "amsssUQpVDjYO6sOcCluwwAAAAk"]
[Thu Jul 30 11:51:30.418517 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.6:29312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:30.419149 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.6:29312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:30.589000 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.22:61012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:30.589641 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.22:61012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:30.634425 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.16:52626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:30.635040 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.16:52626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:30.725262 2026] [ssl:error] [pid 2961037:tid 2961037] (EAI 2)Name or service not known: [client 144.76.19.72:26040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:30.725289 2026] [ssl:error] [pid 2961037:tid 2961037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:30.775678 2026] [security2:error] [pid 2927346:tid 2927346] [client 18.199.86.73:51808] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bengltd.webstersltd.com"] [uri "/.git/config"] [unique_id "amssskQpVDjYO6sOcCluxAAAAAk"]
[Thu Jul 30 11:51:30.775862 2026] [security2:error] [pid 2927346:tid 2927346] [client 18.199.86.73:51808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bengltd.webstersltd.com"] [uri "/.git/config"] [unique_id "amssskQpVDjYO6sOcCluxAAAAAk"]
[Thu Jul 30 11:51:30.776035 2026] [security2:error] [pid 2927346:tid 2927346] [client 18.199.86.73:51808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bengltd.webstersltd.com"] [uri "/.git/config"] [unique_id "amssskQpVDjYO6sOcCluxAAAAAk"]
[Thu Jul 30 11:51:30.779930 2026] [ssl:error] [pid 2949779:tid 2949779] (EAI 2)Name or service not known: [client 144.76.19.72:26042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:30.779955 2026] [ssl:error] [pid 2949779:tid 2949779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:30.958423 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.68:40834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:30.959045 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.68:40834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:31.395176 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.32:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:31.395802 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.32:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:31.885165 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.50:57644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:31.885787 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.50:57644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:31.909194 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.22:61024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:31.909808 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.22:61024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:32.083791 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.10:31868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:32.084412 2026] [authz_core:error] [pid 2935539:tid 2935539] [client 57.141.0.10:31868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:32.463690 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.15:42298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:32.464315 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.15:42298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:32.499329 2026] [lsapi:warn] [pid 2946280:tid 2946280] [client 180.191.233.196:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:32.950296 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.69:59470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:32.950910 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.69:59470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:32.980669 2026] [authz_core:error] [pid 2961040:tid 2961040] [client 20.206.204.219:61341] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:51:33.343444 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.68:40844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:33.344104 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.68:40844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:33.408420 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.21:34344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:33.409035 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.21:34344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:33.656482 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.49:31904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:33.657124 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.49:31904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:33.833615 2026] [ssl:error] [pid 2956813:tid 2956813] (EAI 2)Name or service not known: [client 144.76.19.72:26052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:33.833653 2026] [ssl:error] [pid 2956813:tid 2956813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:33.889634 2026] [ssl:error] [pid 2960113:tid 2960113] (EAI 2)Name or service not known: [client 144.76.19.72:26058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:33.889671 2026] [ssl:error] [pid 2960113:tid 2960113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:34.152372 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.4:41560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:34.152994 2026] [authz_core:error] [pid 2956813:tid 2956813] [client 57.141.0.4:41560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:34.176337 2026] [lsapi:warn] [pid 2961097:tid 2961097] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:34.631299 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.52:43424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:34.631940 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.52:43424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:35.085441 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.3:36754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:35.086078 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.3:36754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:35.163557 2026] [security2:error] [pid 2937855:tid 2937855] [client 85.208.96.194:60218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3038.0/prev_next,prev.html"] [unique_id "amsst2iRLhCIgTgu6BOJTQAAADU"]
[Thu Jul 30 11:51:35.201886 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.27:48478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:35.202548 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.27:48478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:35.802749 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.67:27536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:35.803375 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.67:27536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:35.861239 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.66:31624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:35.861859 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.66:31624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:36.063819 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.41:22642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:36.064440 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.41:22642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:36.204358 2026] [ssl:error] [pid 2962190:tid 2962190] (70014)End of file found: [client 216.73.216.199:10363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:36.305336 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.64:35490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:36.305953 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.64:35490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:36.401941 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.71:45914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:36.402576 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.71:45914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:36.863191 2026] [authz_core:error] [pid 2963985:tid 2963985] [client 57.141.0.53:24374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:36.863840 2026] [authz_core:error] [pid 2963985:tid 2963985] [client 57.141.0.53:24374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:36.946651 2026] [ssl:error] [pid 2949779:tid 2949779] (EAI 2)Name or service not known: [client 144.76.19.72:26072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:36.946678 2026] [ssl:error] [pid 2949779:tid 2949779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:37.002245 2026] [ssl:error] [pid 2960113:tid 2960113] (EAI 2)Name or service not known: [client 144.76.19.72:26084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:37.002276 2026] [ssl:error] [pid 2960113:tid 2960113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:37.413609 2026] [ssl:error] [pid 2939727:tid 2939727] (70014)End of file found: [client 216.73.216.199:7141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:37.498409 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.3:36766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:37.499028 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.3:36766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:37.712205 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.2:63152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:37.712823 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.2:63152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:37.868661 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.50:57646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:37.869334 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.50:57646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:37.907722 2026] [authz_core:error] [pid 2964035:tid 2964035] [client 57.141.0.8:63886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:37.908360 2026] [authz_core:error] [pid 2964035:tid 2964035] [client 57.141.0.8:63886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:38.254722 2026] [access_compat:error] [pid 2949779:tid 2949779] [client 136.158.37.124:45176] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:51:38.613971 2026] [ssl:error] [pid 2964034:tid 2964034] (70014)End of file found: [client 216.73.216.199:9803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:38.840370 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.27:48500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:38.841004 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.27:48500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:39.239153 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.7:51954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:39.239787 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.7:51954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:39.324987 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.21:52108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:39.325637 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.21:52108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:39.694588 2026] [authz_core:error] [pid 2964067:tid 2964067] [client 57.141.0.6:59854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:39.695240 2026] [authz_core:error] [pid 2964067:tid 2964067] [client 57.141.0.6:59854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:39.730305 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.34:38004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:39.730942 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.34:38004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:40.060142 2026] [ssl:error] [pid 2959029:tid 2959029] (EAI 2)Name or service not known: [client 144.76.19.72:61068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:40.060170 2026] [ssl:error] [pid 2959029:tid 2959029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:40.112435 2026] [authz_core:error] [pid 2964074:tid 2964074] [client 57.141.0.19:54798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:40.113091 2026] [authz_core:error] [pid 2964074:tid 2964074] [client 57.141.0.19:54798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:40.119984 2026] [ssl:error] [pid 2955217:tid 2955217] (EAI 2)Name or service not known: [client 144.76.19.72:61076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:40.120012 2026] [ssl:error] [pid 2955217:tid 2955217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:40.284379 2026] [core:error] [pid 2959934:tid 2959934] [client 66.249.66.8:58913] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:40.284408 2026] [core:error] [pid 2959934:tid 2959934] [client 66.249.66.8:58913] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:40.731135 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.18:41808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:40.731755 2026] [authz_core:error] [pid 2948524:tid 2948524] [client 57.141.0.18:41808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:40.955065 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.45:35082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:40.955692 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.45:35082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:41.097042 2026] [security2:error] [pid 2964070:tid 2964070] [client 45.148.10.120:59640] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amssvRLRGKE2PNfhzz9K8wAAADA"]
[Thu Jul 30 11:51:41.097194 2026] [security2:error] [pid 2964070:tid 2964070] [client 45.148.10.120:59640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amssvRLRGKE2PNfhzz9K8wAAADA"]
[Thu Jul 30 11:51:41.625212 2026] [ssl:error] [pid 2964074:tid 2964074] (70014)End of file found: [client 216.73.216.199:37828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:41.695722 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.8:63894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:41.696351 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.8:63894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:41.881387 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.63:31070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:41.882005 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.63:31070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:42.100012 2026] [core:error] [pid 2937855:tid 2937855] [client 66.249.66.66:60840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:42.100044 2026] [core:error] [pid 2937855:tid 2937855] [client 66.249.66.66:60840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:42.252803 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:28044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:42.253426 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:28044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:42.598641 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.63:31086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:42.599267 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.63:31086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:42.645154 2026] [security2:error] [pid 2953722:tid 2953722] [client 185.191.171.7:49582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/arizona-parade-of-homes-2021"] [unique_id "amssvoYERA4zpEG9Lw8yKQAAACk"]
[Thu Jul 30 11:51:42.783898 2026] [security2:error] [pid 2964070:tid 2964070] [client 45.148.10.120:59640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amssvRLRGKE2PNfhzz9K8wAAADA"]
[Thu Jul 30 11:51:43.049576 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.47:28472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:43.050202 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.47:28472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:43.065806 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 57.141.0.71:45930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:43.066418 2026] [authz_core:error] [pid 2961037:tid 2961037] [client 57.141.0.71:45930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:43.075161 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.30:37732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:43.075767 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.30:37732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:43.193640 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:61086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:43.193673 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:43.249410 2026] [ssl:error] [pid 2948326:tid 2948326] (EAI 2)Name or service not known: [client 144.76.19.72:61090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:43.249437 2026] [ssl:error] [pid 2948326:tid 2948326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:43.744172 2026] [core:error] [pid 2964067:tid 2964067] (13)Permission denied: [client 216.73.216.199:48738] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty49/subsystem/ttyS2/line
[Thu Jul 30 11:51:44.110356 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:31328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:44.110976 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.13:31328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:44.564491 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.13:31330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:44.565118 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.13:31330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:45.202417 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.63:31100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:45.203034 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.63:31100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:45.355305 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.26:29146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:45.355925 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.26:29146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:45.555590 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.61:32242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:45.556214 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.61:32242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:45.895080 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.65:34212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:45.895705 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.65:34212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:46.079490 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.64:49334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:46.080142 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.64:49334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:46.302901 2026] [ssl:error] [pid 2963986:tid 2963986] (EAI 2)Name or service not known: [client 144.76.19.72:61104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:46.302936 2026] [ssl:error] [pid 2963986:tid 2963986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:46.356549 2026] [ssl:error] [pid 2963083:tid 2963083] (EAI 2)Name or service not known: [client 144.76.19.72:61116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:46.356581 2026] [ssl:error] [pid 2963083:tid 2963083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:46.488500 2026] [cgi:error] [pid 2964069:tid 2964069] [client 194.9.110.170:30527] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:51:46.489548 2026] [lsapi:warn] [pid 2962846:tid 2962846] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:46.773615 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.9:42640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:46.774236 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.9:42640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:46.830751 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.13:31340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:46.831372 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.13:31340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:47.022722 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.48:32378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:47.023345 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.48:32378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:47.129270 2026] [authz_core:error] [pid 2963986:tid 2963986] [client 57.141.0.8:55378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:47.129899 2026] [authz_core:error] [pid 2963986:tid 2963986] [client 57.141.0.8:55378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:47.755668 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.49:33232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:47.756296 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.49:33232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:47.819123 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.17:26450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:47.819740 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.17:26450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:48.451949 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.14:50000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:48.452581 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.14:50000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:48.577818 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.9:42656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:48.578437 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.9:42656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:48.762336 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.51:56202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:48.762961 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.51:56202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:48.827240 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.10:59148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:48.827858 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.10:59148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:49.024468 2026] [access_compat:error] [pid 2959996:tid 2959996] [client 136.158.37.124:46317] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:51:49.156256 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.40:48524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:49.156885 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.40:48524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:49.411025 2026] [ssl:error] [pid 2963083:tid 2963083] (EAI 2)Name or service not known: [client 144.76.19.72:61124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:49.411059 2026] [ssl:error] [pid 2963083:tid 2963083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:49.450701 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.32:23542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:49.451338 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.32:23542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:49.464128 2026] [ssl:error] [pid 2959722:tid 2959722] (EAI 2)Name or service not known: [client 144.76.19.72:61132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:49.464175 2026] [ssl:error] [pid 2959722:tid 2959722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:49.471206 2026] [security2:error] [pid 2948326:tid 2948326] [client 216.73.216.199:23602] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cpspamd.conf"] [unique_id "amssxdZTDi3K5-apei7s1AAAACQ"]
[Thu Jul 30 11:51:49.471486 2026] [security2:error] [pid 2948326:tid 2948326] [client 216.73.216.199:23602] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cpspamd.conf"] [unique_id "amssxdZTDi3K5-apei7s1AAAACQ"]
[Thu Jul 30 11:51:49.471705 2026] [security2:error] [pid 2948326:tid 2948326] [client 216.73.216.199:23602] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cpspamd.conf"] [unique_id "amssxdZTDi3K5-apei7s1AAAACQ"]
[Thu Jul 30 11:51:49.779701 2026] [ssl:error] [pid 2948326:tid 2948326] (70014)End of file found: [client 216.73.216.199:23602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:49.909332 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.19:63342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:49.909954 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.19:63342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:50.077013 2026] [ssl:error] [pid 2964067:tid 2964067] (70014)End of file found: [client 216.73.216.199:48738] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:50.367927 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.2:27170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:50.368568 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.2:27170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:50.560460 2026] [ssl:error] [pid 2963363:tid 2963363] (70014)End of file found: [client 216.73.216.199:9031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:51.344998 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.37:52170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:51.345625 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.37:52170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:51.507402 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.36:21286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:51.508036 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.36:21286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:51.558810 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.60:60442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:51.559436 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.60:60442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:51.584200 2026] [security2:error] [pid 2964071:tid 2964071] [client 163.61.60.30:52182] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amssx-e2orj0rcijLyhSJwAAADI"]
[Thu Jul 30 11:51:51.941990 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.42:23950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:51.942621 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.42:23950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:52.147238 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.3:28660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:52.147861 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.3:28660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:52.275092 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.33:43400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:52.275493 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.25:63286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:52.275745 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.33:43400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:52.276116 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.25:63286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:52.517686 2026] [ssl:error] [pid 2955788:tid 2955788] (EAI 2)Name or service not known: [client 144.76.19.72:53916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:52.517710 2026] [ssl:error] [pid 2955788:tid 2955788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:52.568999 2026] [ssl:error] [pid 2963083:tid 2963083] (EAI 2)Name or service not known: [client 144.76.19.72:53918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:52.569027 2026] [ssl:error] [pid 2963083:tid 2963083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:52.965195 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.22:60678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:52.965818 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.22:60678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:53.355467 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 20.206.204.219:64055] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 11:51:53.715171 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.2:27186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:53.715806 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.2:27186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:53.880077 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.39:59854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:53.880106 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.39:59854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:51:54.039300 2026] [authz_core:error] [pid 2964613:tid 2964613] [client 57.141.0.10:59154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:54.039941 2026] [authz_core:error] [pid 2964613:tid 2964613] [client 57.141.0.10:59154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:54.341352 2026] [authz_core:error] [pid 2959934:tid 2959934] [client 57.141.0.9:43404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:54.341976 2026] [authz_core:error] [pid 2959934:tid 2959934] [client 57.141.0.9:43404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:54.486003 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.70:60016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:54.486630 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.70:60016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:54.544620 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.9:43410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:54.545242 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.9:43410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:54.904082 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.63:55558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:54.904699 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.63:55558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:55.047167 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.63:55564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:55.047789 2026] [authz_core:error] [pid 2961094:tid 2961094] [client 57.141.0.63:55564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:55.118150 2026] [ssl:error] [pid 2959996:tid 2959996] (70014)End of file found: [client 216.73.216.199:18575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:55.182920 2026] [lsapi:warn] [pid 2964069:tid 2964069] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:51:55.624141 2026] [ssl:error] [pid 2963946:tid 2963946] (EAI 2)Name or service not known: [client 144.76.19.72:53932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:55.624179 2026] [ssl:error] [pid 2963946:tid 2963946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:55.680903 2026] [ssl:error] [pid 2964073:tid 2964073] (EAI 2)Name or service not known: [client 144.76.19.72:53948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:55.680942 2026] [ssl:error] [pid 2964073:tid 2964073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:55.754537 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.60:40306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:55.755165 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.60:40306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:56.805930 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.25:58664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:56.806563 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.25:58664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:57.067669 2026] [authz_core:error] [pid 2962847:tid 2962847] [client 57.141.0.6:47194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:57.068284 2026] [authz_core:error] [pid 2962847:tid 2962847] [client 57.141.0.6:47194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:57.585041 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.11:60070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:57.585672 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.11:60070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:57.628819 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.2:64882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:57.629445 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.2:64882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:57.638303 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.66:58008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:57.638922 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.66:58008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:58.068600 2026] [security2:error] [pid 2948861:tid 2948861] [client 47.128.50.2:37020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "orgent.eu"] [uri "/robots.txt"] [unique_id "amssztcOCXXCVWdQEdqT4AAAADE"]
[Thu Jul 30 11:51:58.094674 2026] [ssl:error] [pid 2955788:tid 2955788] (70014)End of file found: [client 216.73.216.199:11533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:51:58.125099 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.54:43994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:58.125717 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.54:43994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:58.243235 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.9:43432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:58.243857 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.9:43432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:58.301925 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.41:38462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:58.302561 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.41:38462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:58.737667 2026] [ssl:error] [pid 2964071:tid 2964071] (EAI 2)Name or service not known: [client 144.76.19.72:53958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:58.737710 2026] [ssl:error] [pid 2964071:tid 2964071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:58.795284 2026] [ssl:error] [pid 2937855:tid 2937855] (EAI 2)Name or service not known: [client 144.76.19.72:53960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:51:58.795317 2026] [ssl:error] [pid 2937855:tid 2937855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:51:58.954920 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.19:45080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:58.955596 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.19:45080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:59.558986 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.50:33684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:59.559620 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.50:33684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:59.573078 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.35:24010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:59.573695 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.35:24010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:59.778523 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.39:36330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:51:59.779244 2026] [authz_core:error] [pid 2962813:tid 2962813] [client 57.141.0.39:36330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:51:59.955764 2026] [access_compat:error] [pid 2937855:tid 2937855] [client 136.158.37.124:47132] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:52:00.314160 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.54:44010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:00.314788 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.54:44010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:00.710481 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.70:52580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:00.711117 2026] [authz_core:error] [pid 2948326:tid 2948326] [client 57.141.0.70:52580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:00.811733 2026] [ssl:error] [pid 2956813:tid 2956813] (70014)End of file found: [client 216.73.216.199:46767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:00.911024 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.60:40322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:00.911657 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.60:40322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:01.399670 2026] [core:error] [pid 2964034:tid 2964034] [client 57.141.0.39:36342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:01.399693 2026] [core:error] [pid 2964034:tid 2964034] [client 57.141.0.39:36342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:01.406557 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.49:61140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:01.407171 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.49:61140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:01.805761 2026] [authz_core:error] [pid 2964612:tid 2964612] [client 57.141.0.33:32304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:01.806389 2026] [authz_core:error] [pid 2964612:tid 2964612] [client 57.141.0.33:32304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:01.851688 2026] [ssl:error] [pid 2955217:tid 2955217] (EAI 2)Name or service not known: [client 144.76.19.72:29018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:01.851719 2026] [ssl:error] [pid 2955217:tid 2955217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:01.905876 2026] [ssl:error] [pid 2953722:tid 2953722] (EAI 2)Name or service not known: [client 144.76.19.72:29022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:01.905908 2026] [ssl:error] [pid 2953722:tid 2953722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:02.020845 2026] [ssl:error] [pid 2959996:tid 2959996] (70014)End of file found: [client 216.73.216.199:27521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:02.178772 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.42:50386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:02.179404 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.42:50386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:02.197052 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.60:25566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:02.197683 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.60:25566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:02.731603 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.45:24872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:02.732222 2026] [authz_core:error] [pid 2939727:tid 2939727] [client 57.141.0.45:24872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:03.129855 2026] [authz_core:error] [pid 2964995:tid 2964995] [client 57.141.0.46:48654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:03.130530 2026] [authz_core:error] [pid 2964995:tid 2964995] [client 57.141.0.46:48654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:05.439310 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.49:61144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:05.439954 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.49:61144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:06.793812 2026] [ssl:error] [pid 2965057:tid 2965057] (70014)End of file found: [client 216.73.216.199:64130] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:06.854315 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.48:39258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:06.854960 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.48:39258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:08.023702 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.43:20252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:08.024332 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.43:20252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:08.220690 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.7:39878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:08.221380 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.7:39878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:09.068825 2026] [ssl:error] [pid 2965132:tid 2965132] (EAI 2)Name or service not known: [client 144.76.19.72:29026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:09.068869 2026] [ssl:error] [pid 2965132:tid 2965132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:09.232455 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.18:35110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:09.232931 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.33:32306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:09.232935 2026] [access_compat:error] [pid 2965136:tid 2965136] [client 74.7.228.47:59564] AH01797: client denied by server configuration: /home/nspandor/public_html/robots.txt
[Thu Jul 30 11:52:09.233114 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.18:35110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:09.233628 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.33:32306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:09.233806 2026] [security2:error] [pid 2965138:tid 2965138] [client 74.7.227.173:51158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns-pandora.com"] [uri "/"] [unique_id "amss2TPsrOrIFQL4o9i2jgAAAE0"]
[Thu Jul 30 11:52:09.233983 2026] [access_compat:error] [pid 2965138:tid 2965138] [client 74.7.227.173:51158] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:09.318309 2026] [lsapi:warn] [pid 2965140:tid 2965140] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:52:09.864398 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.17:53698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:09.865031 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.17:53698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:10.719245 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.41:23080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:10.720346 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.41:23080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:10.808183 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.38:60488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:10.808866 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.38:60488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:10.813327 2026] [ssl:error] [pid 2964034:tid 2964034] (70014)End of file found: [client 216.73.216.199:60745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:10.827207 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.6:57490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:10.827823 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.6:57490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:10.829163 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.30:47534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:10.829787 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.30:47534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:10.831147 2026] [core:error] [pid 2964612:tid 2964612] (13)Permission denied: [client 216.73.216.199:13041] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty35/subsystem/ttyS1/closing_wait
[Thu Jul 30 11:52:10.870247 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.68:57866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:10.870869 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.68:57866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:10.893196 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.6:57506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:10.893820 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.6:57506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:11.013991 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.33:32316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:11.014620 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.33:32316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:11.041756 2026] [authz_core:error] [pid 2965090:tid 2965090] [client 57.141.0.13:23598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:11.042963 2026] [authz_core:error] [pid 2965090:tid 2965090] [client 57.141.0.13:23598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:11.068947 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.49:35462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:11.069593 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.49:35462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:11.157255 2026] [ssl:error] [pid 2965093:tid 2965093] (EAI 2)Name or service not known: [client 144.76.19.72:29042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:11.157292 2026] [ssl:error] [pid 2965093:tid 2965093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:11.231861 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.56:53568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:11.232514 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.56:53568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:11.873378 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.56:53576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:11.874027 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.56:53576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:12.182515 2026] [core:error] [pid 2963363:tid 2963363] [client 66.249.66.169:65398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:12.182547 2026] [core:error] [pid 2963363:tid 2963363] [client 66.249.66.169:65398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:12.270272 2026] [security2:error] [pid 2963363:tid 2963363] [client 47.245.83.206:57827] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amss3MTx_5KjYTWrw_32fAAAACg"]
[Thu Jul 30 11:52:12.270322 2026] [security2:error] [pid 2963363:tid 2963363] [client 47.245.83.206:57827] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amss3MTx_5KjYTWrw_32fAAAACg"]
[Thu Jul 30 11:52:12.270590 2026] [security2:error] [pid 2963363:tid 2963363] [client 47.245.83.206:57827] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amss3MTx_5KjYTWrw_32fAAAACg"]
[Thu Jul 30 11:52:12.399250 2026] [core:error] [pid 2959722:tid 2959722] [client 66.249.66.194:36474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:12.399280 2026] [core:error] [pid 2959722:tid 2959722] [client 66.249.66.194:36474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:12.428668 2026] [authz_core:error] [pid 2965097:tid 2965097] [client 57.141.0.63:39390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:12.429302 2026] [authz_core:error] [pid 2965097:tid 2965097] [client 57.141.0.63:39390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:13.480975 2026] [ssl:error] [pid 2964612:tid 2964612] (70014)End of file found: [client 216.73.216.199:13041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:13.569914 2026] [access_compat:error] [pid 2965135:tid 2965135] [client 136.158.37.124:48064] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:52:13.726679 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.55:32670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:13.727303 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.55:32670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:13.831458 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.7:39886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:13.832124 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.7:39886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:13.902343 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.7:39898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:13.902966 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.7:39898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:14.246571 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.14:54770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:14.247204 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.14:54770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:14.260240 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.37:36396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:14.260865 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.37:36396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:14.432285 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.30:61548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:14.432901 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.30:61548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:14.607237 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.18:60678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:14.607859 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.18:60678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:14.780080 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.2:30992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:14.780699 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.2:30992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:14.876479 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.60:27380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:14.877124 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.60:27380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:15.016296 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.54:47972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:15.016924 2026] [authz_core:error] [pid 2965140:tid 2965140] [client 57.141.0.54:47972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:15.289172 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.39:24180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:15.290245 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.39:24180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:15.322150 2026] [ssl:error] [pid 2937855:tid 2937855] (EAI 2)Name or service not known: [client 144.76.19.72:42360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:15.322194 2026] [ssl:error] [pid 2937855:tid 2937855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:15.358728 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.46:24060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:15.359360 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.46:24060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:15.377568 2026] [access_compat:error] [pid 2948326:tid 2948326] [client 172.226.0.93:11411] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/passkey-endpoints
[Thu Jul 30 11:52:15.695592 2026] [authz_core:error] [pid 2964069:tid 2964069] [client 57.141.0.44:37444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:15.696230 2026] [authz_core:error] [pid 2964069:tid 2964069] [client 57.141.0.44:37444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:15.887154 2026] [ssl:error] [pid 2964070:tid 2964070] (70014)End of file found: [client 216.73.216.199:7267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:16.251604 2026] [ssl:error] [pid 2962602:tid 2962602] (EAI 2)Name or service not known: [client 144.76.19.72:42364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:16.251642 2026] [ssl:error] [pid 2962602:tid 2962602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:16.365178 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.1:36988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:16.365822 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.1:36988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:16.399380 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.40:48738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:16.400029 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.40:48738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:16.458157 2026] [security2:error] [pid 2962602:tid 2962602] [client 176.64.17.44:28084] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amss4Kod4ZRAdGs3QCqz3QAAAAQ"]
[Thu Jul 30 11:52:16.458216 2026] [security2:error] [pid 2962602:tid 2962602] [client 176.64.17.44:28084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amss4Kod4ZRAdGs3QCqz3QAAAAQ"]
[Thu Jul 30 11:52:16.458524 2026] [security2:error] [pid 2962602:tid 2962602] [client 176.64.17.44:28084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amss4Kod4ZRAdGs3QCqz3QAAAAQ"]
[Thu Jul 30 11:52:16.689402 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.17:42748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:16.690039 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.17:42748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:16.814250 2026] [lsapi:warn] [pid 2965093:tid 2965093] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:52:17.005088 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.37:36400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:17.005718 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.37:36400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:17.024285 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.70:25312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:17.024909 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.70:25312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:17.095917 2026] [core:error] [pid 2965091:tid 2965091] (13)Permission denied: [client 216.73.216.199:7919] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/shadow
[Thu Jul 30 11:52:17.132746 2026] [core:error] [pid 2965022:tid 2965022] [client 66.249.66.167:40345] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:17.132789 2026] [core:error] [pid 2965022:tid 2965022] [client 66.249.66.167:40345] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:17.177758 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.37:36406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:17.178382 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.37:36406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:17.252025 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.25:51298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:17.252676 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.25:51298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:17.284292 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.2:21518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:17.284914 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.2:21518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:17.396810 2026] [ssl:error] [pid 2965091:tid 2965091] (70014)End of file found: [client 216.73.216.199:7919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:17.524832 2026] [security2:error] [pid 2965022:tid 2965022] [client 216.194.174.116:9917] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "unclaimedassets.co.uk"] [uri "/xmlrpc.php"] [unique_id "amss4f3nFR99ohBoaRaDjwAAABw"]
[Thu Jul 30 11:52:17.657888 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.7:64256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:17.658516 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.7:64256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:17.987891 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:18.040564 2026] [lsapi:warn] [pid 2965022:tid 2965022] [client 216.194.174.116:9917] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:52:18.059637 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 11:52:18.059688 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.116023 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 11:52:18.116083 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.181756 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.48:38382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:18.182408 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.48:38382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:18.194825 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/mgrr.php
[Thu Jul 30 11:52:18.194869 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.223063 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/domvf.php
[Thu Jul 30 11:52:18.223120 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.249738 2026] [core:crit] [pid 2949779:tid 2949779] (13)Permission denied: [client 40.77.167.30:21160] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 11:52:18.250853 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/yup.php
[Thu Jul 30 11:52:18.250893 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.279566 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/X.php
[Thu Jul 30 11:52:18.279615 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.307555 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/dyt8mjxc3yofbkoriukvgjaCdefault.php
[Thu Jul 30 11:52:18.307605 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.335500 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/gec.php
[Thu Jul 30 11:52:18.335556 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.400157 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/sky.php
[Thu Jul 30 11:52:18.400207 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.408444 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.60:27392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:18.409061 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.60:27392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:18.456030 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/fffm.php
[Thu Jul 30 11:52:18.456108 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.499111 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/sixxis.php
[Thu Jul 30 11:52:18.499157 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.624487 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/yj09.php
[Thu Jul 30 11:52:18.624543 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.652428 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 11:52:18.652472 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.681015 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/k2.php
[Thu Jul 30 11:52:18.681059 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.716524 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 11:52:18.716574 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.746175 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 11:52:18.746256 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.780597 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/w2025.php
[Thu Jul 30 11:52:18.780662 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.809084 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/FWAZ.php
[Thu Jul 30 11:52:18.809163 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.831138 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.47:33198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:18.831760 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.47:33198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:18.854102 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/qterm.php
[Thu Jul 30 11:52:18.854146 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.887333 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/blurbs.php
[Thu Jul 30 11:52:18.887377 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.916963 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-ws68.php
[Thu Jul 30 11:52:18.917007 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.972226 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/xyn.php
[Thu Jul 30 11:52:18.972270 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:18.980657 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.39:32376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:18.981301 2026] [authz_core:error] [pid 2955788:tid 2955788] [client 57.141.0.39:32376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:19.003622 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/ccc.php
[Thu Jul 30 11:52:19.003674 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.048683 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/get.php
[Thu Jul 30 11:52:19.048726 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.112091 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 11:52:19.112139 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.148452 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/alls.php
[Thu Jul 30 11:52:19.148494 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.176646 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/coffexium.php
[Thu Jul 30 11:52:19.176690 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.228257 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/red.php
[Thu Jul 30 11:52:19.228304 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.263797 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:19.304736 2026] [ssl:error] [pid 2965022:tid 2965022] (EAI 2)Name or service not known: [client 144.76.19.72:42368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:19.304768 2026] [ssl:error] [pid 2965022:tid 2965022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:19.311131 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:19.338965 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:19.358453 2026] [ssl:error] [pid 2965056:tid 2965056] (EAI 2)Name or service not known: [client 144.76.19.72:42376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:19.358514 2026] [ssl:error] [pid 2965056:tid 2965056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:19.368142 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:19.425941 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:19.447582 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.63:53968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:19.448213 2026] [authz_core:error] [pid 2953722:tid 2953722] [client 57.141.0.63:53968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:19.453757 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 11:52:19.453795 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.526552 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/177.php
[Thu Jul 30 11:52:19.526595 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.555058 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/199.php
[Thu Jul 30 11:52:19.555111 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.611135 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/file52.php
[Thu Jul 30 11:52:19.611173 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.644519 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/geck.php
[Thu Jul 30 11:52:19.644559 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.672699 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/biufile.php
[Thu Jul 30 11:52:19.672747 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.700791 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/dejavu.php
[Thu Jul 30 11:52:19.700828 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.728670 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/aaf.php
[Thu Jul 30 11:52:19.728706 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.756389 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/ha.php
[Thu Jul 30 11:52:19.756425 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.784643 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/hur.php
[Thu Jul 30 11:52:19.784682 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.816544 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/h02ugyh.php
[Thu Jul 30 11:52:19.816583 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.847563 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 11:52:19.847601 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.875546 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 11:52:19.875583 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.923176 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/ingfo.php
[Thu Jul 30 11:52:19.923216 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.967337 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/error_log.php
[Thu Jul 30 11:52:19.967377 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:19.995311 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/koala.php
[Thu Jul 30 11:52:19.995353 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.023311 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 11:52:20.023360 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.054203 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wefile.php
[Thu Jul 30 11:52:20.054249 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.082656 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:20.114301 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:20.157862 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/makeasmtp.php
[Thu Jul 30 11:52:20.157905 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.232548 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/2P.php
[Thu Jul 30 11:52:20.232589 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.260551 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/about.php
[Thu Jul 30 11:52:20.260594 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.289161 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:20.317105 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 11:52:20.317146 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.344946 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:20.372565 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:20.400178 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/crgio.php
[Thu Jul 30 11:52:20.400217 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.406181 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.3:50684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:20.406799 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.3:50684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:20.410382 2026] [core:error] [pid 2965132:tid 2965132] (13)Permission denied: [client 216.73.216.199:22766] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/cpanel_mail_netblocks
[Thu Jul 30 11:52:20.417499 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.33:61194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:20.418128 2026] [authz_core:error] [pid 2959997:tid 2959997] [client 57.141.0.33:61194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:20.455108 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/pucci.php
[Thu Jul 30 11:52:20.455155 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.488813 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:20.505959 2026] [core:error] [pid 2959030:tid 2959030] [client 66.249.66.167:41336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:20.505981 2026] [core:error] [pid 2959030:tid 2959030] [client 66.249.66.167:41336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:20.549223 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:20.586543 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-temp.php
[Thu Jul 30 11:52:20.586586 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.619514 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:20.648590 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/puc.php
[Thu Jul 30 11:52:20.648627 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.676860 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/dx.php
[Thu Jul 30 11:52:20.676899 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.687620 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.68:47166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:20.688235 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.68:47166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:20.813970 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:20.838211 2026] [authz_core:error] [pid 2965353:tid 2965353] [client 57.141.0.48:61064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:20.838849 2026] [authz_core:error] [pid 2965353:tid 2965353] [client 57.141.0.48:61064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:20.842003 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 11:52:20.842041 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.869852 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 11:52:20.869889 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.904477 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 11:52:20.904536 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.932388 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 11:52:20.932430 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.963261 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 11:52:20.963301 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:20.990961 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 11:52:20.991000 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.018821 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:21.066309 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 11:52:21.066343 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.096373 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 11:52:21.096407 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.171642 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.66:25584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:21.172330 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.66:25584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:21.174977 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 11:52:21.175013 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.217152 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:21.245117 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 11:52:21.245152 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.272907 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:21.310530 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:21.325694 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.17:29004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:21.326313 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.17:29004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:21.338228 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 11:52:21.338261 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.371320 2026] [authz_core:error] [pid 2961095:tid 2961095] [client 57.141.0.33:61200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:21.371938 2026] [authz_core:error] [pid 2961095:tid 2961095] [client 57.141.0.33:61200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:21.399972 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 11:52:21.400017 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.471914 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-edit.php
[Thu Jul 30 11:52:21.471963 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.499622 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 11:52:21.499663 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.527882 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/index.php
[Thu Jul 30 11:52:21.527927 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.594043 2026] [access_compat:error] [pid 2959029:tid 2959029] [client 136.158.37.124:48948] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:52:21.610060 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:21.639302 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/BDKR28WP.php
[Thu Jul 30 11:52:21.639344 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.667473 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:21.718380 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:21.744247 2026] [core:error] [pid 2965132:tid 2965132] (13)Permission denied: [client 216.73.216.199:22766] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty62/subsystem/ttyS0/closing_wait
[Thu Jul 30 11:52:21.746306 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 11:52:21.746347 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.760905 2026] [core:error] [pid 2965095:tid 2965095] [client 66.249.66.167:40588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:21.760928 2026] [core:error] [pid 2965095:tid 2965095] [client 66.249.66.167:40588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:21.774011 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 11:52:21.774051 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.787292 2026] [security2:error] [pid 2964612:tid 2964612] [client 179.107.251.22:11905] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amss5caGaMjknXzmVCH47QAAAAk"]
[Thu Jul 30 11:52:21.787333 2026] [security2:error] [pid 2964612:tid 2964612] [client 179.107.251.22:11905] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amss5caGaMjknXzmVCH47QAAAAk"]
[Thu Jul 30 11:52:21.787593 2026] [security2:error] [pid 2964612:tid 2964612] [client 179.107.251.22:11905] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amss5caGaMjknXzmVCH47QAAAAk"]
[Thu Jul 30 11:52:21.803673 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/a1.php
[Thu Jul 30 11:52:21.803713 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.831616 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:21.859434 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/admin.php
[Thu Jul 30 11:52:21.859480 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.887358 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 11:52:21.941186 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 11:52:21.941236 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:21.977560 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 11:52:21.977612 2026] [access_compat:error] [pid 2955217:tid 2955217] [client 20.100.169.152:50051] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.031048 2026] [access_compat:error] [pid 2961097:tid 2961097] [client 45.158.164.139:33324] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:52:22.058862 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/hypo.php
[Thu Jul 30 11:52:22.058908 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.110144 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:22.125132 2026] [core:error] [pid 2962646:tid 2962646] [client 57.141.0.5:57500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:22.125168 2026] [core:error] [pid 2962646:tid 2962646] [client 57.141.0.5:57500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:22.178787 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 11:52:22.178830 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.211751 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:22.216946 2026] [authz_core:error] [pid 2964074:tid 2964074] [client 57.141.0.34:37356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:22.217566 2026] [authz_core:error] [pid 2964074:tid 2964074] [client 57.141.0.34:37356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:22.264046 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/als.php
[Thu Jul 30 11:52:22.264104 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.297575 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/pol.php
[Thu Jul 30 11:52:22.297616 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.373385 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 11:52:22.373425 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.411977 2026] [ssl:error] [pid 2960949:tid 2960949] (EAI 2)Name or service not known: [client 144.76.19.72:29310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:22.412012 2026] [ssl:error] [pid 2960949:tid 2960949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:22.415728 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.38:51554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:22.416350 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.38:51554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:22.469391 2026] [ssl:error] [pid 2961095:tid 2961095] (EAI 2)Name or service not known: [client 144.76.19.72:29326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:22.469425 2026] [ssl:error] [pid 2961095:tid 2961095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:22.520994 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.23:59030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:22.521629 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.23:59030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:22.536528 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 11:52:22.536576 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.565170 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 11:52:22.565211 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.593053 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/aa2.php
[Thu Jul 30 11:52:22.593112 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.620798 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/ccou.php
[Thu Jul 30 11:52:22.620833 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.651004 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/dr.php
[Thu Jul 30 11:52:22.651040 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.682635 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/xamp.php
[Thu Jul 30 11:52:22.682670 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.710373 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/bless.php
[Thu Jul 30 11:52:22.710409 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.780123 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/file25.php
[Thu Jul 30 11:52:22.780166 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.825799 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/file6.php
[Thu Jul 30 11:52:22.825846 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.853682 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/a2.php
[Thu Jul 30 11:52:22.853725 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.882559 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/file15.php
[Thu Jul 30 11:52:22.882602 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.902077 2026] [authz_core:error] [pid 2965097:tid 2965097] [client 57.141.0.71:22748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:22.902696 2026] [authz_core:error] [pid 2965097:tid 2965097] [client 57.141.0.71:22748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:22.912116 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 11:52:22.912153 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.939793 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 11:52:22.939829 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.967676 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/xwpg.php
[Thu Jul 30 11:52:22.967714 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:22.995516 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 11:52:23.025753 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:23.060524 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/xstelth.php
[Thu Jul 30 11:52:23.060564 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.088338 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 11:52:23.124962 2026] [core:error] [pid 2965132:tid 2965132] (13)Permission denied: [client 216.73.216.199:22766] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/pcspkr/unbind
[Thu Jul 30 11:52:23.127473 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 11:52:23.127523 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.156362 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko.php
[Thu Jul 30 11:52:23.156401 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.184005 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/pbck.php
[Thu Jul 30 11:52:23.184046 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.213443 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/xiugai.php
[Thu Jul 30 11:52:23.213495 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.249138 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/e.php
[Thu Jul 30 11:52:23.249184 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.338781 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/adminner.php
[Thu Jul 30 11:52:23.338825 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.366893 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/file1221.php
[Thu Jul 30 11:52:23.366938 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.484544 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/inx.php
[Thu Jul 30 11:52:23.484592 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.513475 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/qqqa.php
[Thu Jul 30 11:52:23.513527 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.542312 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/reviall.php
[Thu Jul 30 11:52:23.542358 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.562665 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.2:21534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:23.563283 2026] [authz_core:error] [pid 2955217:tid 2955217] [client 57.141.0.2:21534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:23.580157 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 11:52:23.580202 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.643496 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/bolt.php
[Thu Jul 30 11:52:23.643547 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.671439 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/File.php
[Thu Jul 30 11:52:23.671481 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.699238 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/fi22.php
[Thu Jul 30 11:52:23.699280 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.727003 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/zero.php
[Thu Jul 30 11:52:23.727047 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.754790 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/1xmomo.php
[Thu Jul 30 11:52:23.754833 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.791989 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/fmws.php
[Thu Jul 30 11:52:23.792029 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.845127 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/3PJcpMFsD8B.php
[Thu Jul 30 11:52:23.845169 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.885410 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/hp2.php
[Thu Jul 30 11:52:23.885447 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.888176 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.50:23016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:23.888792 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.50:23016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:23.940046 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/aabb.php
[Thu Jul 30 11:52:23.940100 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.967954 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/1254xx.php
[Thu Jul 30 11:52:23.967993 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:23.995688 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/a3ampzmbipnkpxeqhqpsanCdefault.php
[Thu Jul 30 11:52:23.995725 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.023400 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/pms297.php
[Thu Jul 30 11:52:24.023442 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.062314 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/1PJcpMFsD8B.php
[Thu Jul 30 11:52:24.062356 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.090186 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/4PJcpMFsD8B.php
[Thu Jul 30 11:52:24.090227 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.092808 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.10:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:24.093422 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.10:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:24.118847 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/i99z7zzbwtpteujvv6s8hiCdefault.php
[Thu Jul 30 11:52:24.118888 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.146531 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/gwaih1gfzp5vuwr04Cdefault.php
[Thu Jul 30 11:52:24.146575 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.151419 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.56:34650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:24.152029 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.56:34650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:24.174324 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/dyui.php
[Thu Jul 30 11:52:24.174365 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.213833 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/ho.php
[Thu Jul 30 11:52:24.213874 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.241657 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/66b867516c8f01.php
[Thu Jul 30 11:52:24.241709 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.270126 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/ext.php
[Thu Jul 30 11:52:24.270177 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.297988 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/1wvekeybd9it2di2vyipgr6Cdefault.php
[Thu Jul 30 11:52:24.298029 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.326796 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/diidi.php
[Thu Jul 30 11:52:24.326833 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.354552 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/clarebypas.php
[Thu Jul 30 11:52:24.354593 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.382403 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.30:27582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:24.383025 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.30:27582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:24.457209 2026] [authz_core:error] [pid 2961095:tid 2961095] [client 57.141.0.54:42776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:24.457831 2026] [authz_core:error] [pid 2961095:tid 2961095] [client 57.141.0.54:42776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:24.473157 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/x402.php
[Thu Jul 30 11:52:24.473202 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 20.100.169.152:50168] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 11:52:24.989468 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.10:49410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:24.990099 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.10:49410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:25.244433 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 20.206.204.219:51433] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:52:25.446558 2026] [security2:error] [pid 2965144:tid 2965144] [client 43.161.251.162:56044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amss6ejIxh8UwGBDt--05wAAAFI"]
[Thu Jul 30 11:52:25.528995 2026] [ssl:error] [pid 2965138:tid 2965138] (EAI 2)Name or service not known: [client 144.76.19.72:29334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:25.529064 2026] [ssl:error] [pid 2965138:tid 2965138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:25.529601 2026] [core:error] [pid 2963083:tid 2963083] (13)Permission denied: [client 216.73.216.199:53322] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS1/iomem_reg_shift
[Thu Jul 30 11:52:25.584019 2026] [ssl:error] [pid 2965094:tid 2965094] (EAI 2)Name or service not known: [client 144.76.19.72:29350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:25.584067 2026] [ssl:error] [pid 2965094:tid 2965094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:25.724146 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.60:65468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:25.724767 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.60:65468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:26.012825 2026] [ssl:error] [pid 2963083:tid 2963083] (70014)End of file found: [client 216.73.216.199:53322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:26.026864 2026] [authz_core:error] [pid 2965136:tid 2965136] [client 57.141.0.64:23266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:26.027553 2026] [authz_core:error] [pid 2965136:tid 2965136] [client 57.141.0.64:23266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:26.524524 2026] [authz_core:error] [pid 2964074:tid 2964074] [client 57.141.0.15:33734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:26.525144 2026] [authz_core:error] [pid 2964074:tid 2964074] [client 57.141.0.15:33734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:26.713124 2026] [lsapi:warn] [pid 2964068:tid 2964068] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:52:26.860532 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.60:65484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:26.861150 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.60:65484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:26.916477 2026] [ssl:error] [pid 2965132:tid 2965132] (70014)End of file found: [client 216.73.216.199:22766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:27.091835 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.65:50336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:27.092459 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.65:50336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:27.139254 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.1:59560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:27.139879 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.1:59560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:27.384794 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.30:27586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:27.385429 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.30:27586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:28.064348 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.31:36102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:28.064967 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.31:36102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:28.431727 2026] [ssl:error] [pid 2963363:tid 2963363] (70014)End of file found: [client 216.73.216.199:64791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:28.638139 2026] [ssl:error] [pid 2964033:tid 2964033] (EAI 2)Name or service not known: [client 144.76.19.72:29354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:28.638175 2026] [ssl:error] [pid 2964033:tid 2964033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:28.693347 2026] [ssl:error] [pid 2965136:tid 2965136] (EAI 2)Name or service not known: [client 144.76.19.72:29364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:28.693384 2026] [ssl:error] [pid 2965136:tid 2965136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:29.297431 2026] [authz_core:error] [pid 2965246:tid 2965246] [client 57.141.0.13:36298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:29.298052 2026] [authz_core:error] [pid 2965246:tid 2965246] [client 57.141.0.13:36298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:29.568486 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.28:37182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:29.569122 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.28:37182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:29.587113 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.54:63982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:29.587733 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.54:63982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:29.770475 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.15:33738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:29.771117 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.15:33738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:30.072491 2026] [access_compat:error] [pid 2959154:tid 2959154] [client 5.127.0.46:47956] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:52:30.087672 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.12:20492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:30.088291 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.12:20492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:30.618457 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.15:33742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:30.619185 2026] [authz_core:error] [pid 2962646:tid 2962646] [client 57.141.0.15:33742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:30.780794 2026] [security2:error] [pid 2960177:tid 2960177] [client 74.7.227.52:47632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hoo-hah.ditchfest.com"] [uri "/"] [unique_id "amss7m_BB5FMrn5nEK_H-gAAABU"]
[Thu Jul 30 11:52:30.792653 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.14:31552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:30.793273 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.14:31552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:30.845227 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.71:35720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:30.845849 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.71:35720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:31.577902 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.23:27652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:31.578531 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.23:27652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:31.747530 2026] [ssl:error] [pid 2965145:tid 2965145] (EAI 2)Name or service not known: [client 144.76.19.72:59526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:31.747564 2026] [ssl:error] [pid 2965145:tid 2965145] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:31.767443 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.12:23390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:31.768061 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.12:23390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:31.809993 2026] [ssl:error] [pid 2965146:tid 2965146] (EAI 2)Name or service not known: [client 144.76.19.72:59528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:31.810026 2026] [ssl:error] [pid 2965146:tid 2965146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:31.855130 2026] [authz_core:error] [pid 2964612:tid 2964612] [client 57.141.0.10:54270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:31.855825 2026] [authz_core:error] [pid 2964612:tid 2964612] [client 57.141.0.10:54270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:32.430552 2026] [access_compat:error] [pid 2965143:tid 2965143] [client 136.158.37.124:49870] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:52:32.645660 2026] [ssl:error] [pid 2962602:tid 2962602] (70014)End of file found: [client 216.73.216.199:37377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:32.747158 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.14:31562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:32.747840 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.14:31562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:33.029715 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.63:39974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:33.030340 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.63:39974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:33.100764 2026] [authz_core:error] [pid 2965054:tid 2965054] [client 57.141.0.39:33264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:33.101390 2026] [authz_core:error] [pid 2965054:tid 2965054] [client 57.141.0.39:33264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:33.253756 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.21:22676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:33.254382 2026] [authz_core:error] [pid 2965092:tid 2965092] [client 57.141.0.21:22676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:33.809256 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.12:23400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:33.809947 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.12:23400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:33.853365 2026] [ssl:error] [pid 2964070:tid 2964070] (70014)End of file found: [client 216.73.216.199:12334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:33.982022 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.40:27066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:33.982720 2026] [authz_core:error] [pid 2959029:tid 2959029] [client 57.141.0.40:27066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:34.406196 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.11:42110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:34.406818 2026] [authz_core:error] [pid 2960949:tid 2960949] [client 57.141.0.11:42110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:34.451317 2026] [core:error] [pid 2964032:tid 2964032] (13)Permission denied: [client 216.73.216.199:52347] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS2/line
[Thu Jul 30 11:52:34.865518 2026] [ssl:error] [pid 2965135:tid 2965135] (EAI 2)Name or service not known: [client 144.76.19.72:59540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:34.865558 2026] [ssl:error] [pid 2965135:tid 2965135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:34.922402 2026] [ssl:error] [pid 2965096:tid 2965096] (EAI 2)Name or service not known: [client 144.76.19.72:59550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:34.922434 2026] [ssl:error] [pid 2965096:tid 2965096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:34.933347 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.2:21738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:34.933990 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.2:21738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:35.094438 2026] [authz_core:error] [pid 2965091:tid 2965091] [client 57.141.0.35:31672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:35.095059 2026] [authz_core:error] [pid 2965091:tid 2965091] [client 57.141.0.35:31672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:35.211060 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.32:53080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:35.211695 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.32:53080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:35.367520 2026] [ssl:error] [pid 2964032:tid 2964032] (70014)End of file found: [client 216.73.216.199:52347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:35.717694 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.2:21740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:35.718313 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.2:21740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:35.813766 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.56:28598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:35.814743 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.56:28598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:36.360554 2026] [authz_core:error] [pid 2965022:tid 2965022] [client 57.141.0.3:38648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:36.361180 2026] [authz_core:error] [pid 2965022:tid 2965022] [client 57.141.0.3:38648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:36.747356 2026] [authz_core:error] [pid 2964612:tid 2964612] [client 57.141.0.69:35934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:36.747972 2026] [authz_core:error] [pid 2964612:tid 2964612] [client 57.141.0.69:35934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:36.833371 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.56:28604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:36.833995 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.56:28604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:37.065183 2026] [security2:error] [pid 2948863:tid 2948863] [client 185.191.171.14:57028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/robots.txt"] [unique_id "amss9YvHY6yIYrSvOSeYbAAAADM"]
[Thu Jul 30 11:52:37.207356 2026] [lsapi:warn] [pid 2949779:tid 2949779] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:52:37.341991 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.37:37444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:37.342623 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.37:37444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:37.575584 2026] [security2:error] [pid 2963985:tid 2963985] [client 185.191.171.5:57786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/blog/category/hands-on/"] [unique_id "amss9dUioJHH6jBdFc7XQwAAAA4"]
[Thu Jul 30 11:52:37.673696 2026] [security2:error] [pid 2965142:tid 2965142] [client 114.119.157.183:43325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~18,104/request_format~html"] [unique_id "amss9SgRNBvKQyT_h2h5kgAAAFA"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/request_format~html/cat_ids~18
[Thu Jul 30 11:52:37.701987 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.60:61266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:37.702618 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.60:61266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:37.784881 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.13:35290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:37.785518 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.13:35290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:37.980958 2026] [ssl:error] [pid 2960113:tid 2960113] (EAI 2)Name or service not known: [client 144.76.19.72:59566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:37.980986 2026] [ssl:error] [pid 2960113:tid 2960113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:38.036664 2026] [ssl:error] [pid 2965141:tid 2965141] (EAI 2)Name or service not known: [client 144.76.19.72:59582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:38.036705 2026] [ssl:error] [pid 2965141:tid 2965141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:38.065397 2026] [cgi:error] [pid 2948861:tid 2948861] [client 47.128.117.222:28114] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:52:38.684898 2026] [ssl:error] [pid 2963083:tid 2963083] (70014)End of file found: [client 216.73.216.199:7540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:38.701466 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.29:25470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:38.702103 2026] [authz_core:error] [pid 2962846:tid 2962846] [client 57.141.0.29:25470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:38.831341 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.70:54996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:38.831954 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.70:54996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:38.913379 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.40:49032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:38.914012 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.40:49032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:38.998224 2026] [authz_core:error] [pid 2965091:tid 2965091] [client 57.141.0.7:23792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:38.998845 2026] [authz_core:error] [pid 2965091:tid 2965091] [client 57.141.0.7:23792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:39.143535 2026] [security2:error] [pid 2965133:tid 2965133] [client 114.119.157.183:43341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~18,104/request_format~html"] [unique_id "amss93Hvu6m5OpS3YMtsBwAAAEY"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1564354800/request_format~html/cat_ids~18
[Thu Jul 30 11:52:39.177336 2026] [core:error] [pid 2965304:tid 2965304] (13)Permission denied: [client 216.73.216.199:1058] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 11:52:39.716730 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.8:42886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:39.717358 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.8:42886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:39.972314 2026] [security2:error] [pid 2960113:tid 2960113] [client 185.191.171.18:45760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8770.0/prev_next,next.html"] [unique_id "amss9xW_U-PG7wPyWo0EiwAAABM"]
[Thu Jul 30 11:52:40.186256 2026] [core:error] [pid 2965304:tid 2965304] (13)Permission denied: [client 216.73.216.199:1058] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8k/poison
[Thu Jul 30 11:52:40.292452 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.64:62272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:40.293081 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.64:62272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:40.518879 2026] [core:error] [pid 2965143:tid 2965143] [client 66.249.64.170:49175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:40.518909 2026] [core:error] [pid 2965143:tid 2965143] [client 66.249.64.170:49175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:40.557769 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.1:26178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:40.558389 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.1:26178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:40.789141 2026] [ssl:error] [pid 2965304:tid 2965304] (70014)End of file found: [client 216.73.216.199:1058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:40.989312 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.51:22828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:40.989932 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.51:22828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:41.015984 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.10:33510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:41.016601 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.10:33510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:41.043982 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.21:64228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:41.044620 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.21:64228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:41.093945 2026] [ssl:error] [pid 2960113:tid 2960113] (EAI 2)Name or service not known: [client 144.76.19.72:29170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:41.093978 2026] [ssl:error] [pid 2960113:tid 2960113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:41.147145 2026] [ssl:error] [pid 2964074:tid 2964074] (EAI 2)Name or service not known: [client 144.76.19.72:29176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:41.147180 2026] [ssl:error] [pid 2964074:tid 2964074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:41.283173 2026] [core:error] [pid 2965023:tid 2965023] (13)Permission denied: [client 216.73.216.199:24038] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip4-frags/objs_per_slab
[Thu Jul 30 11:52:41.394359 2026] [core:error] [pid 2965023:tid 2965023] (13)Permission denied: [client 216.73.216.199:24038] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty31/subsystem/ttyS0/closing_wait
[Thu Jul 30 11:52:41.595955 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.4:34644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:41.596583 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.4:34644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:41.768337 2026] [authz_core:error] [pid 2965091:tid 2965091] [client 57.141.0.67:41422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:41.768963 2026] [authz_core:error] [pid 2965091:tid 2965091] [client 57.141.0.67:41422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:41.995814 2026] [core:error] [pid 2965023:tid 2965023] (13)Permission denied: [client 216.73.216.199:24038] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/red_zone
[Thu Jul 30 11:52:42.052300 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 20.206.204.219:53703] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 11:52:42.832927 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.43:60320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:42.833571 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.43:60320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:43.075300 2026] [security2:error] [pid 2964069:tid 2964069] [client 185.191.171.4:41930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/opulence-matte-glazes"] [unique_id "amss-7I31hUXJ16OjvcfaAAAAC8"]
[Thu Jul 30 11:52:43.159986 2026] [authz_core:error] [pid 2965096:tid 2965096] [client 57.141.0.59:48970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:43.160618 2026] [authz_core:error] [pid 2965096:tid 2965096] [client 57.141.0.59:48970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:43.222141 2026] [access_compat:error] [pid 2965057:tid 2965057] [client 136.158.37.124:50784] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:52:43.523034 2026] [cgi:error] [pid 2965023:tid 2965023] [client 216.73.216.199:24038] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/perl5/dumpvar.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:52:43.523099 2026] [cgi:error] [pid 2965023:tid 2965023] [client 216.73.216.199:24038] End of script output before headers: dumpvar.pl
[Thu Jul 30 11:52:43.750800 2026] [authz_core:error] [pid 2965148:tid 2965148] [client 57.141.0.39:45878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:43.751423 2026] [authz_core:error] [pid 2965148:tid 2965148] [client 57.141.0.39:45878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:44.020947 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.30:57978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:44.021585 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.30:57978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:44.220170 2026] [ssl:error] [pid 2960177:tid 2960177] (EAI 2)Name or service not known: [client 144.76.19.72:29180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:44.220212 2026] [ssl:error] [pid 2960177:tid 2960177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:44.248398 2026] [authz_core:error] [pid 2965136:tid 2965136] [client 57.141.0.53:55400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:44.249015 2026] [authz_core:error] [pid 2965136:tid 2965136] [client 57.141.0.53:55400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:44.276740 2026] [ssl:error] [pid 2965146:tid 2965146] (EAI 2)Name or service not known: [client 144.76.19.72:29194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:44.276764 2026] [ssl:error] [pid 2965146:tid 2965146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:44.690670 2026] [authz_core:error] [pid 2965148:tid 2965148] [client 57.141.0.15:35138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:44.691284 2026] [authz_core:error] [pid 2965148:tid 2965148] [client 57.141.0.15:35138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:44.767415 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.2:24768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:44.768038 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.2:24768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:45.003897 2026] [core:error] [pid 2964033:tid 2964033] (13)Permission denied: [client 216.73.216.199:50137] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/x86_lbr/order
[Thu Jul 30 11:52:45.048201 2026] [authz_core:error] [pid 2965022:tid 2965022] [client 57.141.0.71:23824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:45.048819 2026] [authz_core:error] [pid 2965022:tid 2965022] [client 57.141.0.71:23824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:45.173206 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.64:65336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:45.173822 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.64:65336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:45.180728 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.26:47050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:45.181344 2026] [authz_core:error] [pid 2960113:tid 2960113] [client 57.141.0.26:47050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:45.374425 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.62:27722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:45.375044 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.62:27722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:45.850475 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.6:54406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:45.851111 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.6:54406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:46.208517 2026] [ssl:error] [pid 2964033:tid 2964033] (70014)End of file found: [client 216.73.216.199:50137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:46.280992 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.39:41414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:46.281654 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.39:41414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:46.347341 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.45:54634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:46.347956 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.45:54634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:47.334556 2026] [ssl:error] [pid 2950448:tid 2950448] (EAI 2)Name or service not known: [client 144.76.19.72:29202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:47.334588 2026] [ssl:error] [pid 2950448:tid 2950448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:47.371098 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.56:45358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:47.371713 2026] [authz_core:error] [pid 2962602:tid 2962602] [client 57.141.0.56:45358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:47.391629 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:29206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:47.391657 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:47.416789 2026] [ssl:error] [pid 2964071:tid 2964071] (70014)End of file found: [client 216.73.216.199:61453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:47.446649 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.1:33038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:47.447276 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.1:33038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:47.720561 2026] [lsapi:warn] [pid 2965137:tid 2965137] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:52:47.922762 2026] [authz_core:error] [pid 2965136:tid 2965136] [client 216.73.216.199:19289] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 11:52:47.955108 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.9:51848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:47.955727 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.9:51848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:47.997191 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.64:65350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:47.997814 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.64:65350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:48.179726 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.61:44106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:48.180357 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.61:44106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:48.922654 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.51:40812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:48.923276 2026] [authz_core:error] [pid 2959722:tid 2959722] [client 57.141.0.51:40812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:49.202578 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.7:25002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:49.203199 2026] [authz_core:error] [pid 2965056:tid 2965056] [client 57.141.0.7:25002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:49.559201 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.5:32988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:49.559887 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.5:32988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:50.131783 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.62:27738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:50.132406 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.62:27738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:50.445033 2026] [ssl:error] [pid 2965141:tid 2965141] (EAI 2)Name or service not known: [client 144.76.19.72:20962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:50.445061 2026] [ssl:error] [pid 2965141:tid 2965141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:50.457238 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.40:49700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:50.457865 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.40:49700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:50.502461 2026] [ssl:error] [pid 2965056:tid 2965056] (EAI 2)Name or service not known: [client 144.76.19.72:20964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:50.502490 2026] [ssl:error] [pid 2965056:tid 2965056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:50.909903 2026] [authz_core:error] [pid 2965148:tid 2965148] [client 57.141.0.44:64130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:50.910623 2026] [authz_core:error] [pid 2965148:tid 2965148] [client 57.141.0.44:64130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:51.028816 2026] [core:error] [pid 2965136:tid 2965136] (13)Permission denied: [client 216.73.216.199:19289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS2/line
[Thu Jul 30 11:52:51.329702 2026] [core:error] [pid 2965136:tid 2965136] (13)Permission denied: [client 216.73.216.199:19289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCPv6/destroy_by_rcu
[Thu Jul 30 11:52:51.378384 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.18:31534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:51.379002 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.18:31534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:51.462273 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.71:23838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:51.462944 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.71:23838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:51.517051 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.25:50074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:51.517681 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.25:50074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:51.555711 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.11:65292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:51.556334 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.11:65292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:51.685850 2026] [core:error] [pid 2965133:tid 2965133] [client 66.249.66.8:52558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:51.685873 2026] [core:error] [pid 2965133:tid 2965133] [client 66.249.66.8:52558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:51.901459 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.34:48656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:51.902084 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.34:48656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:52.314845 2026] [core:error] [pid 2965136:tid 2965136] (13)Permission denied: [client 216.73.216.199:19289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS3/custom_divisor
[Thu Jul 30 11:52:52.598882 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.19:59440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:52.599536 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.19:59440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:52.953763 2026] [authz_core:error] [pid 2965054:tid 2965054] [client 57.141.0.12:46490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:52.954446 2026] [authz_core:error] [pid 2965054:tid 2965054] [client 57.141.0.12:46490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:53.258418 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.38:53044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:53.259038 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.38:53044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:53.339826 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.51:40816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:53.340446 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.51:40816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:53.438313 2026] [ssl:error] [pid 2959722:tid 2959722] (70014)End of file found: [client 216.73.216.199:7230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:53.556414 2026] [ssl:error] [pid 2960113:tid 2960113] (EAI 2)Name or service not known: [client 144.76.19.72:20970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:53.556440 2026] [ssl:error] [pid 2960113:tid 2960113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:53.609399 2026] [ssl:error] [pid 2950448:tid 2950448] (EAI 2)Name or service not known: [client 144.76.19.72:20986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:53.609427 2026] [ssl:error] [pid 2950448:tid 2950448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:54.085686 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.51:40818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:54.086312 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.51:40818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:54.130541 2026] [access_compat:error] [pid 2964033:tid 2964033] [client 136.158.37.124:51670] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:52:54.767559 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.5:32992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:54.768177 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.5:32992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:54.869438 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.4:33602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:54.870061 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.4:33602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:55.133438 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.46:25574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:55.134055 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.46:25574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:55.366549 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.39:59642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:55.367171 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.39:59642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:55.434335 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.17:32828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:55.434952 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.17:32828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:55.455008 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.31:47600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:55.455626 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.31:47600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:55.809789 2026] [core:error] [pid 2950494:tid 2950494] [client 66.249.66.167:48801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:55.809817 2026] [core:error] [pid 2950494:tid 2950494] [client 66.249.66.167:48801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:55.858978 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.14:62962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:55.859609 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.14:62962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:56.316509 2026] [security2:error] [pid 2946280:tid 2946280] [client 85.208.96.211:21744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2305.0/prev_next,prev.html"] [unique_id "amstCBVmqRHdhmp7qjYWlwAAACU"]
[Thu Jul 30 11:52:56.661269 2026] [ssl:error] [pid 2950494:tid 2950494] (EAI 2)Name or service not known: [client 144.76.19.72:20994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:56.661300 2026] [ssl:error] [pid 2950494:tid 2950494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:56.714313 2026] [ssl:error] [pid 2965141:tid 2965141] (EAI 2)Name or service not known: [client 144.76.19.72:21008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:56.714336 2026] [ssl:error] [pid 2965141:tid 2965141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:56.799972 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.58:32546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:56.800605 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.58:32546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:56.942904 2026] [ssl:error] [pid 2965136:tid 2965136] (70014)End of file found: [client 216.73.216.199:19289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:56.992413 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.60:52816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:56.993031 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.60:52816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:57.228364 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.16:50240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:57.228997 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.16:50240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:57.515650 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.63:22190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:57.516271 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.63:22190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:57.841113 2026] [ssl:error] [pid 2946280:tid 2946280] (70014)End of file found: [client 216.73.216.199:26682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:57.865933 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.67:38502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:57.866624 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.67:38502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:58.054396 2026] [core:error] [pid 2948863:tid 2948863] [client 66.249.66.39:60058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:58.054422 2026] [core:error] [pid 2948863:tid 2948863] [client 66.249.66.39:60058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:52:58.214703 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.49:24490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:58.215325 2026] [authz_core:error] [pid 2965145:tid 2965145] [client 57.141.0.49:24490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:58.256679 2026] [lsapi:warn] [pid 2965304:tid 2965304] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:52:58.778668 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.36:31800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:58.779290 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.36:31800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:58.944169 2026] [ssl:error] [pid 2948863:tid 2948863] (70014)End of file found: [client 216.73.216.199:55598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:52:59.061754 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.65:54778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:59.062373 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.65:54778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:59.299332 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.16:59306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:59.299954 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.16:59306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:59.695132 2026] [authz_core:error] [pid 2965054:tid 2965054] [client 57.141.0.4:33618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:52:59.695771 2026] [authz_core:error] [pid 2965054:tid 2965054] [client 57.141.0.4:33618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:52:59.771884 2026] [ssl:error] [pid 2965057:tid 2965057] (EAI 2)Name or service not known: [client 144.76.19.72:35816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:59.771922 2026] [ssl:error] [pid 2965057:tid 2965057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:52:59.829449 2026] [ssl:error] [pid 2960177:tid 2960177] (EAI 2)Name or service not known: [client 144.76.19.72:35830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:52:59.829472 2026] [ssl:error] [pid 2960177:tid 2960177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:00.083472 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.62:24268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:00.084101 2026] [authz_core:error] [pid 2965141:tid 2965141] [client 57.141.0.62:24268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:00.384727 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.59:64948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:00.385353 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.59:64948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:00.587697 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.56:32338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:00.588317 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.56:32338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:01.033182 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.11:29530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:01.034214 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.11:29530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:01.606168 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.4:30814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:01.606786 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.4:30814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:01.816510 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.64:61932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:01.817135 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.64:61932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:02.151961 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.66:21048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:02.152603 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.66:21048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:02.242400 2026] [ssl:error] [pid 2965132:tid 2965132] (70014)End of file found: [client 216.73.216.199:24394] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:02.256922 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.17:49804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:02.257621 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.17:49804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:02.515414 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.47:65534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:02.516029 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.47:65534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:02.884061 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:35842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:02.884110 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:02.937370 2026] [ssl:error] [pid 2965144:tid 2965144] (EAI 2)Name or service not known: [client 144.76.19.72:35852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:02.937399 2026] [ssl:error] [pid 2965144:tid 2965144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:03.070240 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.20:53022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:03.070857 2026] [authz_core:error] [pid 2950491:tid 2950491] [client 57.141.0.20:53022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:03.182482 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.64:61944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:03.183113 2026] [authz_core:error] [pid 2963946:tid 2963946] [client 57.141.0.64:61944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:03.485624 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.70:37686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:03.486243 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.70:37686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:03.543368 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.50:60320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:03.543984 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.50:60320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:04.326268 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.60:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:04.326884 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.60:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:04.366010 2026] [ssl:error] [pid 2950494:tid 2950494] (70014)End of file found: [client 216.73.216.199:25132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:04.430880 2026] [core:error] [pid 2963185:tid 2963185] [client 66.249.66.167:64532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:04.430906 2026] [core:error] [pid 2963185:tid 2963185] [client 66.249.66.167:64532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:04.856588 2026] [authz_core:error] [pid 2965142:tid 2965142] [client 57.141.0.12:23916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:04.857215 2026] [authz_core:error] [pid 2965142:tid 2965142] [client 57.141.0.12:23916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:04.948707 2026] [access_compat:error] [pid 2946280:tid 2946280] [client 136.158.37.124:52634] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:53:05.149179 2026] [authz_core:error] [pid 2965096:tid 2965096] [client 57.141.0.38:25282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:05.149800 2026] [authz_core:error] [pid 2965096:tid 2965096] [client 57.141.0.38:25282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:05.518575 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.52:31468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:05.519190 2026] [authz_core:error] [pid 2964068:tid 2964068] [client 57.141.0.52:31468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:05.614149 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.49:24494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:05.614769 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.49:24494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:05.937528 2026] [authz_core:error] [pid 2965144:tid 2965144] [client 57.141.0.19:24584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:05.938150 2026] [authz_core:error] [pid 2965144:tid 2965144] [client 57.141.0.19:24584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:05.974342 2026] [core:error] [pid 2965136:tid 2965136] (13)Permission denied: [client 216.73.216.199:15523] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/pde_opener/aliases
[Thu Jul 30 11:53:06.039762 2026] [ssl:error] [pid 2965096:tid 2965096] (EAI 2)Name or service not known: [client 144.76.19.72:35860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:06.039788 2026] [ssl:error] [pid 2965096:tid 2965096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:06.092683 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:35864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:06.092718 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:06.121357 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.67:38518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:06.121981 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.67:38518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:06.599170 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.49:24498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:06.599850 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.49:24498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:06.877992 2026] [ssl:error] [pid 2965136:tid 2965136] (70014)End of file found: [client 216.73.216.199:15523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:07.177765 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.49:24508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:07.178392 2026] [authz_core:error] [pid 2965094:tid 2965094] [client 57.141.0.49:24508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:07.353655 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.53:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:07.354293 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.53:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:07.670511 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.62:39940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:07.671144 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.62:39940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:07.723914 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.17:49810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:07.724553 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.17:49810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:08.389007 2026] [ssl:error] [pid 2965094:tid 2965094] (70014)End of file found: [client 216.73.216.199:29799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:08.477633 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.53:43510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:08.478255 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.53:43510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:08.569446 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.50:60332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:08.570121 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.50:60332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:08.815823 2026] [lsapi:warn] [pid 2967907:tid 2967907] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:53:09.185789 2026] [ssl:error] [pid 2965132:tid 2965132] (EAI 2)Name or service not known: [client 144.76.19.72:35876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:09.185814 2026] [ssl:error] [pid 2965132:tid 2965132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:09.242284 2026] [ssl:error] [pid 2965093:tid 2965093] (EAI 2)Name or service not known: [client 144.76.19.72:35890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:09.242311 2026] [ssl:error] [pid 2965093:tid 2965093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:09.301422 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.29:22398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:09.302042 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.29:22398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:09.670667 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.6:39322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:09.671281 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.6:39322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:09.693681 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.18:42286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:09.694301 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.18:42286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:09.899524 2026] [autoindex:error] [pid 2950312:tid 2950312] (13)Permission denied: [client 216.73.216.199:25884] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/hatchw/
[Thu Jul 30 11:53:10.451033 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.67:25396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:10.451663 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.67:25396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:10.510548 2026] [core:crit] [pid 2950312:tid 2950312] (13)Permission denied: [client 216.73.216.199:25884] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/tracing/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/tracing/' is executable
[Thu Jul 30 11:53:10.522179 2026] [core:crit] [pid 2950312:tid 2950312] (13)Permission denied: [client 216.73.216.199:25884] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/debug/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/debug/' is executable
[Thu Jul 30 11:53:10.615014 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.3:56712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:10.615653 2026] [authz_core:error] [pid 2964073:tid 2964073] [client 57.141.0.3:56712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:10.826407 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.36:20024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:10.827024 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.36:20024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:10.933603 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.60:58852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:10.934220 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.60:58852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:11.286757 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.1:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:11.287378 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.1:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:11.976195 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.14:30646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:11.976818 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.14:30646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:12.186310 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.47:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:12.187142 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.47:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:12.294408 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.19:24596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:12.295031 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.19:24596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:12.297225 2026] [ssl:error] [pid 2960949:tid 2960949] (EAI 2)Name or service not known: [client 144.76.19.72:44660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:12.297243 2026] [ssl:error] [pid 2960949:tid 2960949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:12.350160 2026] [ssl:error] [pid 2946210:tid 2946210] (EAI 2)Name or service not known: [client 144.76.19.72:44668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:12.350198 2026] [ssl:error] [pid 2946210:tid 2946210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:12.569617 2026] [security2:error] [pid 2965136:tid 2965136] [client 170.84.58.88:43758] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstGMCgB47TQedxI5VLagAAAEk"]
[Thu Jul 30 11:53:12.569686 2026] [security2:error] [pid 2965136:tid 2965136] [client 170.84.58.88:43758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstGMCgB47TQedxI5VLagAAAEk"]
[Thu Jul 30 11:53:12.570010 2026] [security2:error] [pid 2965136:tid 2965136] [client 170.84.58.88:43758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstGMCgB47TQedxI5VLagAAAEk"]
[Thu Jul 30 11:53:12.735072 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.45:63006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:12.735704 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.45:63006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:13.209127 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.46:53442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:13.209762 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.46:53442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:13.286014 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.52:53614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:13.286651 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.52:53614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:13.410327 2026] [authz_core:error] [pid 2965096:tid 2965096] [client 57.141.0.35:34964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:13.410946 2026] [authz_core:error] [pid 2965096:tid 2965096] [client 57.141.0.35:34964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:13.566347 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.11:59242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:13.566958 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.11:59242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:13.869571 2026] [ssl:error] [pid 2950312:tid 2950312] (70014)End of file found: [client 216.73.216.199:25884] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:14.115382 2026] [ssl:error] [pid 2963185:tid 2963185] (70014)End of file found: [client 216.73.216.199:53596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:14.458859 2026] [security2:error] [pid 2964071:tid 2964071] [client 103.234.203.1:49880] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstGue2orj0rcijLyhSdgAAADI"]
[Thu Jul 30 11:53:14.458903 2026] [security2:error] [pid 2964071:tid 2964071] [client 103.234.203.1:49880] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstGue2orj0rcijLyhSdgAAADI"]
[Thu Jul 30 11:53:14.459139 2026] [security2:error] [pid 2964071:tid 2964071] [client 103.234.203.1:49880] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstGue2orj0rcijLyhSdgAAADI"]
[Thu Jul 30 11:53:14.618594 2026] [ssl:error] [pid 2965057:tid 2965057] (70014)End of file found: [client 216.73.216.199:29689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:14.732427 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.17:44466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:14.733056 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.17:44466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:14.902375 2026] [authz_core:error] [pid 2967907:tid 2967907] [client 57.141.0.12:54806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:14.903006 2026] [authz_core:error] [pid 2967907:tid 2967907] [client 57.141.0.12:54806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:15.013868 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.35:34976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:15.014533 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.35:34976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:15.150323 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.66:57212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:15.150949 2026] [authz_core:error] [pid 2964070:tid 2964070] [client 57.141.0.66:57212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:15.429274 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:44674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:15.429334 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:15.485092 2026] [ssl:error] [pid 2937855:tid 2937855] (EAI 2)Name or service not known: [client 144.76.19.72:44680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:15.485123 2026] [ssl:error] [pid 2937855:tid 2937855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:15.652386 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.19:30622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:15.653010 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.19:30622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:15.692372 2026] [access_compat:error] [pid 2959722:tid 2959722] [client 136.158.37.124:53489] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:53:15.920622 2026] [authz_core:error] [pid 2967907:tid 2967907] [client 57.141.0.11:59248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:15.921236 2026] [authz_core:error] [pid 2967907:tid 2967907] [client 57.141.0.11:59248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:16.818289 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.45:48024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:16.818932 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.45:48024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:16.911112 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.49:52596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:16.911738 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.49:52596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:17.197447 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.5:25646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:17.198169 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.5:25646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:17.463707 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:41516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:17.464334 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:41516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:17.920473 2026] [security2:error] [pid 2965146:tid 2965146] [client 31.223.129.120:13178] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstHRYWFSaQfvuFOxq4FgAAAFQ"]
[Thu Jul 30 11:53:17.920530 2026] [security2:error] [pid 2965146:tid 2965146] [client 31.223.129.120:13178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstHRYWFSaQfvuFOxq4FgAAAFQ"]
[Thu Jul 30 11:53:17.920788 2026] [security2:error] [pid 2965146:tid 2965146] [client 31.223.129.120:13178] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstHRYWFSaQfvuFOxq4FgAAAFQ"]
[Thu Jul 30 11:53:18.014895 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.29:52042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:18.015526 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.29:52042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:18.284048 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.19:30636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:18.284675 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.19:30636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:18.537012 2026] [ssl:error] [pid 2965023:tid 2965023] (EAI 2)Name or service not known: [client 144.76.19.72:44688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:18.537048 2026] [ssl:error] [pid 2965023:tid 2965023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:18.540819 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.41:25866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:18.541433 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.41:25866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:18.594698 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:44702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:18.594723 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:18.946490 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.2:49822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:18.947141 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.2:49822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:18.996882 2026] [lsapi:warn] [pid 2965096:tid 2965096] [client 89.197.16.98:34753] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 11:53:18.996926 2026] [lsapi:warn] [pid 2965096:tid 2965096] [client 89.197.16.98:34753] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 11:53:19.076496 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.43:50544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:19.077128 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.43:50544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:19.242869 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.70:49984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:19.243499 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.70:49984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:19.346130 2026] [lsapi:warn] [pid 2948861:tid 2948861] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:53:19.424963 2026] [authz_core:error] [pid 2965136:tid 2965136] [client 57.141.0.21:48964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:19.425602 2026] [authz_core:error] [pid 2965136:tid 2965136] [client 57.141.0.21:48964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:20.323953 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.39:40770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:20.324582 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.39:40770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:21.094832 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.46:39444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:21.095457 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.46:39444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:21.199692 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.6:60382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:21.200311 2026] [authz_core:error] [pid 2965023:tid 2965023] [client 57.141.0.6:60382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:21.442412 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.41:25870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:21.443032 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.41:25870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:21.497440 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.62:48584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:21.498083 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.62:48584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:21.650095 2026] [ssl:error] [pid 2968632:tid 2968632] (EAI 2)Name or service not known: [client 144.76.19.72:24320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:21.650137 2026] [ssl:error] [pid 2968632:tid 2968632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:21.707717 2026] [ssl:error] [pid 2968633:tid 2968633] (EAI 2)Name or service not known: [client 144.76.19.72:24328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:21.707769 2026] [ssl:error] [pid 2968633:tid 2968633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:21.819466 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.26:59380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:21.820094 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.26:59380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:22.149929 2026] [authz_core:error] [pid 2968574:tid 2968574] [client 57.141.0.70:49988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:22.150559 2026] [authz_core:error] [pid 2968574:tid 2968574] [client 57.141.0.70:49988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:22.807465 2026] [authz_core:error] [pid 2968678:tid 2968678] [client 57.141.0.69:48304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:22.808124 2026] [authz_core:error] [pid 2968678:tid 2968678] [client 57.141.0.69:48304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:23.149139 2026] [core:error] [pid 2964562:tid 2964562] (13)Permission denied: [client 216.73.216.199:14856] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/object_size
[Thu Jul 30 11:53:23.204494 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.4:44024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:23.205130 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.4:44024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:23.264497 2026] [authz_core:error] [pid 2968678:tid 2968678] [client 57.141.0.25:44520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:23.265165 2026] [authz_core:error] [pid 2968678:tid 2968678] [client 57.141.0.25:44520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:23.374201 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.71:51792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:23.374823 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.71:51792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:23.547010 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.8:51472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:23.547710 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.8:51472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:23.678759 2026] [security2:error] [pid 2968678:tid 2968678] [client 198.244.168.19:31400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amstI9l0qa4nFoLOqInWEQAAAAo"]
[Thu Jul 30 11:53:23.755916 2026] [core:error] [pid 2965146:tid 2965146] (13)Permission denied: [client 216.73.216.199:2416] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/zswap_entry/shrink
[Thu Jul 30 11:53:24.051651 2026] [core:error] [pid 2964562:tid 2964562] (13)Permission denied: [client 216.73.216.199:14856] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty57/subsystem/ttyS2/uartclk
[Thu Jul 30 11:53:24.158345 2026] [authz_core:error] [pid 2968678:tid 2968678] [client 57.141.0.50:48364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:24.158965 2026] [authz_core:error] [pid 2968678:tid 2968678] [client 57.141.0.50:48364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:24.414165 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.26:38760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:24.414874 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.26:38760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:24.735720 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.50:48366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:24.736374 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.50:48366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:24.742275 2026] [security2:error] [pid 2963083:tid 2963083] [client 94.23.188.208:54096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/vtigercrm/class_http/"] [unique_id "amstJP15ObA72BbRiq9STwAAAB8"]
[Thu Jul 30 11:53:24.763014 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:24344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:24.763036 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:24.815960 2026] [ssl:error] [pid 2968740:tid 2968740] (EAI 2)Name or service not known: [client 144.76.19.72:24358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:24.815983 2026] [ssl:error] [pid 2968740:tid 2968740] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:25.192739 2026] [authz_core:error] [pid 2968742:tid 2968742] [client 57.141.0.42:36628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:25.193365 2026] [authz_core:error] [pid 2968742:tid 2968742] [client 57.141.0.42:36628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:25.511434 2026] [authz_core:error] [pid 2968737:tid 2968737] [client 57.141.0.63:38966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:25.512076 2026] [authz_core:error] [pid 2968737:tid 2968737] [client 57.141.0.63:38966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:25.667326 2026] [core:error] [pid 2963083:tid 2963083] [client 66.132.186.189:63028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:25.667359 2026] [core:error] [pid 2963083:tid 2963083] [client 66.132.186.189:63028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:25.825573 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.54:24636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:25.826189 2026] [authz_core:error] [pid 2955476:tid 2955476] [client 57.141.0.54:24636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:26.380903 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.5:49664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:26.381538 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.5:49664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:26.526743 2026] [access_compat:error] [pid 2968743:tid 2968743] [client 136.158.37.124:54399] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:53:26.899055 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.4:44048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:26.900627 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.4:44048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:26.995461 2026] [access_compat:error] [pid 2965055:tid 2965055] [client 45.158.164.139:41372] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:53:26.999040 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.40:52480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:26.999664 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.40:52480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:27.047511 2026] [authz_core:error] [pid 2968740:tid 2968740] [client 57.141.0.17:36806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:27.048138 2026] [authz_core:error] [pid 2968740:tid 2968740] [client 57.141.0.17:36806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:27.326925 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.54:24648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:27.327974 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.54:24648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:27.671745 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.54:21988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:27.672370 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.54:21988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:27.869784 2026] [ssl:error] [pid 2961097:tid 2961097] (EAI 2)Name or service not known: [client 144.76.19.72:24374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:27.869810 2026] [ssl:error] [pid 2961097:tid 2961097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:27.924327 2026] [ssl:error] [pid 2946210:tid 2946210] (EAI 2)Name or service not known: [client 144.76.19.72:24388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:27.924356 2026] [ssl:error] [pid 2946210:tid 2946210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:27.930474 2026] [lsapi:warn] [pid 2937855:tid 2937855] [client 192.241.243.72:55726] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:53:27.930529 2026] [lsapi:warn] [pid 2937855:tid 2937855] [client 192.241.243.72:55726] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 11:53:28.364451 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.14:55362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:28.365086 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.14:55362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:28.491645 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.41:30880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:28.492274 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.41:30880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:28.616609 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.64:43134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:28.617694 2026] [authz_core:error] [pid 2946210:tid 2946210] [client 57.141.0.64:43134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:28.831318 2026] [authz_core:error] [pid 2968679:tid 2968679] [client 57.141.0.42:36640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:28.832006 2026] [authz_core:error] [pid 2968679:tid 2968679] [client 57.141.0.42:36640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:29.079270 2026] [ssl:error] [pid 2965146:tid 2965146] (70014)End of file found: [client 216.73.216.199:2416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:29.657067 2026] [authz_core:error] [pid 2968740:tid 2968740] [client 57.141.0.32:30084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:29.657684 2026] [authz_core:error] [pid 2968740:tid 2968740] [client 57.141.0.32:30084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:29.814236 2026] [lsapi:warn] [pid 2937855:tid 2937855] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:53:30.445585 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 82.102.18.190:45782] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 11:53:30.493935 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.27:32208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:30.494573 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.27:32208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:30.582693 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.54:22000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:30.583324 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.54:22000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:30.605677 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 66.249.66.35:36753] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:53:30.608483 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 66.249.66.35:36753] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:53:30.715457 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.56:26930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:30.716088 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.56:26930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:30.982427 2026] [ssl:error] [pid 2968632:tid 2968632] (EAI 2)Name or service not known: [client 144.76.19.72:44212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:30.982462 2026] [ssl:error] [pid 2968632:tid 2968632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:31.039573 2026] [ssl:error] [pid 2964032:tid 2964032] (EAI 2)Name or service not known: [client 144.76.19.72:44214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:31.039614 2026] [ssl:error] [pid 2964032:tid 2964032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:31.304238 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.33:57328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:31.304883 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.33:57328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:31.320284 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.46:46126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:31.320960 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.46:46126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:32.218828 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.41:30894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:32.219455 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.41:30894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:32.276721 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.63:43074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:32.277340 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.63:43074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:32.343093 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:30906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:32.343714 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:30906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:32.344622 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.7:41664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:32.345296 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.7:41664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:32.386137 2026] [ssl:error] [pid 2964562:tid 2964562] (70014)End of file found: [client 216.73.216.199:14856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:32.513201 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.65:45106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:32.513841 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.65:45106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:33.570254 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.69:21476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:33.570881 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.69:21476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:33.882966 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.40:25248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:33.883668 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.40:25248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:33.972803 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.37:36268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:33.973430 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.37:36268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:34.096468 2026] [ssl:error] [pid 2965132:tid 2965132] (EAI 2)Name or service not known: [client 144.76.19.72:44218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:34.096499 2026] [ssl:error] [pid 2965132:tid 2965132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:34.149566 2026] [ssl:error] [pid 2964073:tid 2964073] (EAI 2)Name or service not known: [client 144.76.19.72:44226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:34.149599 2026] [ssl:error] [pid 2964073:tid 2964073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:34.261746 2026] [security2:error] [pid 2964034:tid 2964034] [client 114.119.136.76:45425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/sitemap-pt-post-2003-05.html"] [unique_id "amstLlTpArPWRvmwn2wOXQAAACo"], referer: http://www.localhero.org.uk/sitemap.html
[Thu Jul 30 11:53:34.308551 2026] [lsapi:error] [pid 2968680:tid 2968680] [client 72.167.132.114:35296] [host www.shelterforum.info] Request retrieving failed. Reason: unknown, On: request body, Source: client, Where: unknown, referer: http://www.shelterforum.info/wp-login.php
[Thu Jul 30 11:53:34.308611 2026] [lsapi:error] [pid 2968680:tid 2968680] [client 72.167.132.114:35296] [host www.shelterforum.info] In order to get more info about fail reason try to change LogLevel to Info in httpd.conf and restart Apache, referer: http://www.shelterforum.info/wp-login.php
[Thu Jul 30 11:53:34.308624 2026] [lsapi:error] [pid 2968680:tid 2968680] [client 72.167.132.114:35296] [host www.shelterforum.info] Client error on sending request(POST /wp-login.php HTTP/1.1); uri(/wp-login.php) content-length(118): user_get_body(tmpstackbuf, 16384): read from client failed, referer: http://www.shelterforum.info/wp-login.php
[Thu Jul 30 11:53:34.409819 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.50:34954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:34.410444 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.50:34954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:34.737154 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.54:22006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:34.737795 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.54:22006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:35.117687 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/inputs.php
[Thu Jul 30 11:53:35.117750 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:35.170782 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.50:34974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:35.171407 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.50:34974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:35.249923 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ioxi-o.php
[Thu Jul 30 11:53:35.249978 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:35.372183 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/function
[Thu Jul 30 11:53:35.372298 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:35.486812 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/rip.php
[Thu Jul 30 11:53:35.486867 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:35.521401 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.37:36278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:35.522093 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.37:36278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:35.526310 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.28:47574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:35.526914 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.28:47574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:35.649419 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/admin.php
[Thu Jul 30 11:53:35.649473 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:35.757305 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:35.757412 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:35.933687 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/cache.php
[Thu Jul 30 11:53:35.933753 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:36.025014 2026] [core:error] [pid 2965146:tid 2965146] [client 66.249.66.167:48772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:36.025043 2026] [core:error] [pid 2965146:tid 2965146] [client 66.249.66.167:48772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:36.028131 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.66:51723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:36.028151 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.66:51723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:36.041245 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/themes.php
[Thu Jul 30 11:53:36.041292 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:36.148928 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/an.php
[Thu Jul 30 11:53:36.148982 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:36.258985 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index
[Thu Jul 30 11:53:36.259121 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:36.351347 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.1:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:36.352102 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.1:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:36.366648 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/randkeyword.PhP7
[Thu Jul 30 11:53:36.366697 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:36.475108 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ws.php
[Thu Jul 30 11:53:36.475167 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:36.542137 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.16:53152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:36.542754 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.16:53152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:36.583149 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/404.php
[Thu Jul 30 11:53:36.583204 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:36.669955 2026] [security2:error] [pid 2968738:tid 2968738] [client 85.208.96.211:13468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amstMADYOeU3z5DoubiHOgAAAA8"]
[Thu Jul 30 11:53:36.691105 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 11:53:36.691225 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:36.829901 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-conf.php
[Thu Jul 30 11:53:36.829954 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:36.847458 2026] [core:error] [pid 2964034:tid 2964034] [client 57.141.0.35:51110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:36.847476 2026] [core:error] [pid 2964034:tid 2964034] [client 57.141.0.35:51110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:36.903184 2026] [ssl:error] [pid 2968740:tid 2968740] (70014)End of file found: [client 216.73.216.199:57678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:36.967370 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:36.967495 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:36.997808 2026] [security2:error] [pid 2950494:tid 2950494] [client 85.208.96.210:32146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/01/09/what-does-ss-mean-to-the-customer/"] [unique_id "amstMGxcHkw7A2WvvJPE2wAAADw"]
[Thu Jul 30 11:53:37.074991 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-login.php
[Thu Jul 30 11:53:37.075050 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.126530 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.41:39398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:37.127157 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.41:39398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:37.185034 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/abc.php
[Thu Jul 30 11:53:37.185100 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.202739 2026] [ssl:error] [pid 2968737:tid 2968737] (EAI 2)Name or service not known: [client 144.76.19.72:44234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:37.202765 2026] [ssl:error] [pid 2968737:tid 2968737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:37.249116 2026] [security2:error] [pid 2937855:tid 2937855] [client 185.191.171.3:33014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amstMWiRLhCIgTgu6BOJfgAAADU"]
[Thu Jul 30 11:53:37.257971 2026] [ssl:error] [pid 2968738:tid 2968738] (EAI 2)Name or service not known: [client 144.76.19.72:44242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:37.258005 2026] [ssl:error] [pid 2968738:tid 2968738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:37.342355 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/abcd.php
[Thu Jul 30 11:53:37.342414 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.363401 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.17:29600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:37.364026 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.17:29600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:37.450836 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/as.php
[Thu Jul 30 11:53:37.450895 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.470012 2026] [access_compat:error] [pid 2948863:tid 2948863] [client 136.158.37.124:55307] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:53:37.508686 2026] [ssl:error] [pid 2950494:tid 2950494] (70014)End of file found: [client 216.73.216.199:17617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:37.558789 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-trackback.php
[Thu Jul 30 11:53:37.558846 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.666464 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/about.php
[Thu Jul 30 11:53:37.666553 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.753713 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.70:65104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:37.754337 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.70:65104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:37.762272 2026] [security2:error] [pid 2968737:tid 2968737] [client 85.208.96.193:62044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/pages/welcome/latest-news.php"] [unique_id "amstMWT2saV_ySC2816jEwAAAA4"]
[Thu Jul 30 11:53:37.801001 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/file.php
[Thu Jul 30 11:53:37.801053 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.948190 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/adminfuns.php
[Thu Jul 30 11:53:37.948244 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:37.985419 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.22:25196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:37.986036 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.22:25196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:38.056023 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-good.php
[Thu Jul 30 11:53:38.056097 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:38.190484 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.44:41910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:38.191116 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.44:41910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:38.209159 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xmlrpc.php
[Thu Jul 30 11:53:38.209210 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:38.365880 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/goods.php
[Thu Jul 30 11:53:38.365935 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:38.408253 2026] [security2:error] [pid 2960177:tid 2960177] [client 216.73.216.199:30907] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dracut.conf"] [unique_id "amstMm_BB5FMrn5nEK_IRwAAABU"]
[Thu Jul 30 11:53:38.408495 2026] [security2:error] [pid 2960177:tid 2960177] [client 216.73.216.199:30907] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dracut.conf"] [unique_id "amstMm_BB5FMrn5nEK_IRwAAABU"]
[Thu Jul 30 11:53:38.408732 2026] [security2:error] [pid 2960177:tid 2960177] [client 216.73.216.199:30907] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dracut.conf"] [unique_id "amstMm_BB5FMrn5nEK_IRwAAABU"]
[Thu Jul 30 11:53:38.517758 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/class-t.api.php
[Thu Jul 30 11:53:38.517819 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:38.660951 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/sf.php
[Thu Jul 30 11:53:38.661009 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:38.778036 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.67:47314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:38.778668 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.67:47314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:38.785077 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/kbfr.php
[Thu Jul 30 11:53:38.785129 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:38.887381 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.21:57100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:38.888004 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.21:57100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:38.961797 2026] [security2:error] [pid 2968407:tid 2968407] [client 114.119.138.235:30411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/B.1-Bangladesh-2009-Cyclone-Aila.pdf"] [unique_id "amstMkeDrEmGPOU_NZzTggAAAAI"]
[Thu Jul 30 11:53:38.984966 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/autoload_classmap.php
[Thu Jul 30 11:53:38.985019 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:39.152048 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/chosen.php
[Thu Jul 30 11:53:39.152124 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:39.220953 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 66.249.66.33:64623] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:53:39.223633 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 66.249.66.33:64623] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:53:39.241329 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.3:30856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:39.241958 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.3:30856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:39.264546 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/classwithtostring.php
[Thu Jul 30 11:53:39.264599 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:39.317744 2026] [core:error] [pid 2960177:tid 2960177] (13)Permission denied: [client 216.73.216.199:30907] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/filp/aliases
[Thu Jul 30 11:53:39.542638 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/defaults.php
[Thu Jul 30 11:53:39.542691 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:39.653499 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/.well-known/
[Thu Jul 30 11:53:39.653618 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:39.736578 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.14:53342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:39.737220 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.14:53342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:39.761095 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/info.php
[Thu Jul 30 11:53:39.761150 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:40.043136 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/cgi-bin/
[Thu Jul 30 11:53:40.043219 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 11:53:40.081608 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.55:20436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:40.082229 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.55:20436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:40.150968 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 11:53:40.151107 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:40.222522 2026] [ssl:error] [pid 2960177:tid 2960177] (70014)End of file found: [client 216.73.216.199:30907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:40.269890 2026] [lsapi:warn] [pid 2965304:tid 2965304] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:53:40.274188 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 11:53:40.274295 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:40.314692 2026] [ssl:error] [pid 2964032:tid 2964032] (EAI 2)Name or service not known: [client 144.76.19.72:48752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:40.314728 2026] [ssl:error] [pid 2964032:tid 2964032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:40.358276 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.33:31182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:40.358899 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.33:31182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:40.368485 2026] [ssl:error] [pid 2964071:tid 2964071] (EAI 2)Name or service not known: [client 144.76.19.72:48760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:40.368531 2026] [ssl:error] [pid 2964071:tid 2964071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:40.382609 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:40.382725 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:40.490547 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 11:53:40.490670 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:40.598543 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:40.598668 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:40.707536 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.3:30872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:40.708155 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.3:30872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:40.710986 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:40.711106 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:40.818893 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:40.819018 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:40.861932 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.34:65206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:40.862565 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.34:65206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:40.926608 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:40.926725 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:41.066605 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 11:53:41.066724 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:41.207563 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 11:53:41.207693 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:41.347887 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 11:53:41.348004 2026] [access_compat:error] [pid 2901124:tid 2901124] [client 135.119.63.61:36677] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 11:53:41.682242 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.8:36632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:41.682864 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.8:36632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:41.907991 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.12:56114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:41.908623 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.12:56114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:41.946300 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.3:30878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:41.946918 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.3:30878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:42.054303 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.44:37114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:42.054974 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.44:37114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:42.310278 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.28:46236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:42.310903 2026] [authz_core:error] [pid 2950448:tid 2950448] [client 57.141.0.28:46236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:42.941344 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.55:20438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:42.941992 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.55:20438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:43.050837 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.55:20452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:43.051497 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.55:20452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:43.077469 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.71:31750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:43.078100 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.71:31750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:43.246440 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.39:24612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:43.247062 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.39:24612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:43.425358 2026] [ssl:error] [pid 2965144:tid 2965144] (EAI 2)Name or service not known: [client 144.76.19.72:48774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:43.425389 2026] [ssl:error] [pid 2965144:tid 2965144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:43.480990 2026] [ssl:error] [pid 2965093:tid 2965093] (EAI 2)Name or service not known: [client 144.76.19.72:48776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:43.481026 2026] [ssl:error] [pid 2965093:tid 2965093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:43.576170 2026] [security2:error] [pid 2964033:tid 2964033] [client 185.191.171.6:12966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/nba-on-espn-announcers-schedule"] [unique_id "amstNxeOit5I2MA6G8sPxQAAACY"]
[Thu Jul 30 11:53:43.585493 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.4:45778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:43.586128 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.4:45778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:43.842934 2026] [core:error] [pid 2968633:tid 2968633] [client 66.249.64.170:65388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:43.842964 2026] [core:error] [pid 2968633:tid 2968633] [client 66.249.64.170:65388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:43.845161 2026] [ssl:error] [pid 2964032:tid 2964032] (70014)End of file found: [client 216.73.216.199:38206] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:44.334991 2026] [ssl:error] [pid 2965144:tid 2965144] (70014)End of file found: [client 216.73.216.199:1762] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:44.556159 2026] [cgi:error] [pid 2968744:tid 2968744] [client 66.132.186.189:27606] AH02812: stderr from /home/hswoodf/public_html/newlogo/cgi-bin/: attempt to invoke directory as script, referer: http://newlogo.hswoodflooring.co.uk:80/cgi-bin
[Thu Jul 30 11:53:44.556621 2026] [core:error] [pid 2968744:tid 2968744] [client 66.132.186.189:27606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://newlogo.hswoodflooring.co.uk:80/cgi-bin
[Thu Jul 30 11:53:45.070414 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.10:55418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:45.071040 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.10:55418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:45.198628 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.65:65168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:45.199522 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.65:65168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:45.211013 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 66.249.66.33:49100] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:53:45.213699 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 66.249.66.33:49100] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:53:45.334232 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.37:51540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:45.335183 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.37:51540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:45.519946 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.27:26852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:45.520593 2026] [authz_core:error] [pid 2968738:tid 2968738] [client 57.141.0.27:26852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:45.629050 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.58:58990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:45.629690 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.58:58990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:45.645040 2026] [ssl:error] [pid 2968743:tid 2968743] (70014)End of file found: [client 216.73.216.199:1786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:46.385898 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.36:42552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:46.386532 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.36:42552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:46.536930 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:26860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:46.537564 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:26860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:46.551539 2026] [ssl:error] [pid 2960177:tid 2960177] (EAI 2)Name or service not known: [client 144.76.19.72:48792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:46.551568 2026] [ssl:error] [pid 2960177:tid 2960177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:46.606054 2026] [ssl:error] [pid 2937855:tid 2937855] (EAI 2)Name or service not known: [client 144.76.19.72:48798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:46.606104 2026] [ssl:error] [pid 2937855:tid 2937855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:47.455091 2026] [authz_core:error] [pid 2967907:tid 2967907] [client 57.141.0.71:30670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:47.455714 2026] [authz_core:error] [pid 2967907:tid 2967907] [client 57.141.0.71:30670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:47.545528 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.41:28746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:47.546174 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.41:28746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:48.010027 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.17:59260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:48.010730 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.17:59260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:48.253322 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.41:28758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:48.253952 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.41:28758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:48.258984 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.36:42562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:48.259609 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.36:42562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:48.377814 2026] [access_compat:error] [pid 2948861:tid 2948861] [client 136.158.37.124:56282] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:53:49.032043 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.64:58388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:49.032678 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.64:58388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:49.128403 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.2:39372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:49.129020 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.2:39372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:49.151808 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.32:56904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:49.152416 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.32:56904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:49.661864 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:53612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:49.661892 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:49.695825 2026] [core:error] [pid 2964562:tid 2964562] [client 66.249.66.194:38826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:49.695846 2026] [core:error] [pid 2964562:tid 2964562] [client 66.249.66.194:38826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:53:49.719276 2026] [ssl:error] [pid 2968737:tid 2968737] (EAI 2)Name or service not known: [client 144.76.19.72:53616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:49.719300 2026] [ssl:error] [pid 2968737:tid 2968737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:49.723726 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.44:45788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:49.724342 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.44:45788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:49.815938 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.58:58992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:49.816579 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.58:58992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:49.926268 2026] [lsapi:warn] [pid 2968744:tid 2968744] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:53:50.171825 2026] [core:error] [pid 2965304:tid 2965304] (13)Permission denied: [client 216.73.216.199:38723] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-32/objs_per_slab
[Thu Jul 30 11:53:50.218579 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.52:57560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:50.219608 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.52:57560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:50.771669 2026] [lsapi:warn] [pid 2965023:tid 2965023] [client 27.147.218.169:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:53:51.093314 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.42:45814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:51.093936 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 57.141.0.42:45814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:51.152246 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.20:60016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:51.152879 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.20:60016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:51.376166 2026] [core:error] [pid 2965304:tid 2965304] (13)Permission denied: [client 216.73.216.199:38723] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/music-software.com.db
[Thu Jul 30 11:53:51.585775 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.60:22342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:51.586398 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.60:22342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:51.605873 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.43:63314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:51.606499 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.43:63314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:51.677294 2026] [ssl:error] [pid 2965304:tid 2965304] (70014)End of file found: [client 216.73.216.199:38723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:52.193102 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.17:55348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:52.193721 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.17:55348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:52.629194 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.43:63326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:52.629820 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.43:63326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:52.778306 2026] [ssl:error] [pid 2965144:tid 2965144] (EAI 2)Name or service not known: [client 144.76.19.72:53622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:52.778334 2026] [ssl:error] [pid 2965144:tid 2965144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:52.835430 2026] [ssl:error] [pid 2968680:tid 2968680] (EAI 2)Name or service not known: [client 144.76.19.72:53632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:52.835457 2026] [ssl:error] [pid 2968680:tid 2968680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:52.989658 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.8:27600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:52.990276 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.8:27600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:53.010433 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.6:24166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:53.011052 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.6:24166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:53.059126 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.48:64810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:53.059741 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.48:64810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:53.423124 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.7:37958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:53.423751 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.7:37958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:53.783902 2026] [core:error] [pid 2946280:tid 2946280] (13)Permission denied: [client 216.73.216.199:49189] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty17/subsystem/ttyS2/uartclk
[Thu Jul 30 11:53:53.785981 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.47:56832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:53.786610 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.47:56832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:53.921976 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.61:35114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:53.922606 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.61:35114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:54.687771 2026] [ssl:error] [pid 2946280:tid 2946280] (70014)End of file found: [client 216.73.216.199:49189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:54.867552 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.43:63354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:54.868179 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.43:63354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:54.873679 2026] [security2:error] [pid 2948861:tid 2948861] [client 74.7.227.60:41858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "maisongerlyn.be"] [uri "/sitemap_index.xml"] [unique_id "amstQtcOCXXCVWdQEdqUDQAAADE"]
[Thu Jul 30 11:53:54.878944 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.61:35116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:54.879568 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.61:35116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:54.988726 2026] [core:error] [pid 2964034:tid 2964034] (13)Permission denied: [client 216.73.216.199:56359] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty25/subsystem/ttyS2/uartclk
[Thu Jul 30 11:53:55.153529 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.60:24018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:55.154149 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.60:24018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:55.290213 2026] [core:error] [pid 2964034:tid 2964034] (13)Permission denied: [client 216.73.216.199:56359] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty28/subsystem/ttyS2/line
[Thu Jul 30 11:53:55.361092 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.37:27492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:55.361717 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.37:27492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:55.892971 2026] [ssl:error] [pid 2964562:tid 2964562] (EAI 2)Name or service not known: [client 144.76.19.72:53646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:55.893013 2026] [ssl:error] [pid 2964562:tid 2964562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:55.949055 2026] [ssl:error] [pid 2960177:tid 2960177] (EAI 2)Name or service not known: [client 144.76.19.72:53656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:55.949097 2026] [ssl:error] [pid 2960177:tid 2960177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:56.054630 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.53:32532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:56.055253 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.53:32532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:56.774410 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.19:21042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:56.775046 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.19:21042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:56.786915 2026] [authz_core:error] [pid 2968679:tid 2968679] [client 57.141.0.60:24026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:56.787541 2026] [authz_core:error] [pid 2968679:tid 2968679] [client 57.141.0.60:24026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:57.167650 2026] [core:error] [pid 2965134:tid 2965134] (13)Permission denied: [client 216.73.216.199:25807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS1/line
[Thu Jul 30 11:53:57.516399 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.49:21640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:57.517024 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.49:21640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:57.831217 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.46:56646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:57.831845 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.46:56646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:57.873198 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.34:56292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:57.873814 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.34:56292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:57.881808 2026] [core:error] [pid 2965134:tid 2965134] (13)Permission denied: [client 216.73.216.199:25807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS1/closing_wait
[Thu Jul 30 11:53:58.325902 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.12:36574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:58.326538 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.12:36574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:58.690455 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.32:42618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:58.691084 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.32:42618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:58.986720 2026] [security2:error] [pid 2959154:tid 2959154] [client 47.128.35.137:26334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "berehap.be"] [uri "/robots.txt"] [unique_id "amstRiMIBy93HDeMjLZQFgAAAAc"]
[Thu Jul 30 11:53:59.005919 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:53670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:59.005944 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:59.058804 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:53682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:53:59.058827 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:53:59.070335 2026] [lsapi:warn] [pid 2964032:tid 2964032] [client 112.207.212.53:7291] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.brodie-engineering.co.uk/case-studies
[Thu Jul 30 11:53:59.070378 2026] [lsapi:warn] [pid 2964032:tid 2964032] [client 112.207.212.53:7291] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.brodie-engineering.co.uk/case-studies
[Thu Jul 30 11:53:59.084641 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.15:24512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:59.085268 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.15:24512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:59.228138 2026] [access_compat:error] [pid 2965146:tid 2965146] [client 136.158.37.124:57154] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:53:59.237966 2026] [security2:error] [pid 2959154:tid 2959154] [client 114.119.130.240:36975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-645.xml"] [unique_id "amstRyMIBy93HDeMjLZQFwAAAAc"]
[Thu Jul 30 11:53:59.621956 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.1:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:59.622636 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.1:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:59.624799 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.62:32874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:59.625400 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.62:32874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:59.689187 2026] [ssl:error] [pid 2965134:tid 2965134] (70014)End of file found: [client 216.73.216.199:25807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:53:59.793574 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.70:53140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:59.794206 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.70:53140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:59.932615 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.23:31420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:53:59.933240 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.23:31420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:53:59.989235 2026] [ssl:error] [pid 2964034:tid 2964034] (70014)End of file found: [client 216.73.216.199:56359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:00.485824 2026] [lsapi:warn] [pid 2964032:tid 2964032] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:54:00.933582 2026] [security2:error] [pid 2946280:tid 2946280] [client 47.128.35.137:23760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "berehap.be"] [uri "/403.shtml"] [unique_id "amstSBVmqRHdhmp7qjYWvQAAACU"], referer: http://berehap.be/robots.txt
[Thu Jul 30 11:54:01.204127 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.48:57690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:01.204753 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.48:57690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:01.374823 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.54:25012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:01.375449 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.54:25012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:01.546737 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.69:46588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:01.547362 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.69:46588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:01.720407 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.14:53794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:01.721021 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.14:53794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:02.107534 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.32:42626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:02.108154 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.32:42626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:02.325621 2026] [ssl:error] [pid 2964562:tid 2964562] (EAI 2)Name or service not known: [client 144.76.19.72:28854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:02.325651 2026] [ssl:error] [pid 2964562:tid 2964562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:02.441334 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.25:49446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:02.441952 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.25:49446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:02.518337 2026] [authz_core:error] [pid 2970315:tid 2970315] [client 57.141.0.49:42616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:02.519064 2026] [authz_core:error] [pid 2970315:tid 2970315] [client 57.141.0.49:42616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:02.563089 2026] [ssl:error] [pid 2964562:tid 2964562] (EAI 2)Name or service not known: [client 144.76.19.72:28868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:02.563113 2026] [ssl:error] [pid 2964562:tid 2964562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:02.676856 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.15:24516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:02.677477 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.15:24516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:03.006386 2026] [cgi:error] [pid 2949779:tid 2949779] [client 20.104.22.47:27181] AH02812: stderr from /home/juliaash/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:54:03.134299 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.32:42628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:03.134922 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.32:42628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:03.330324 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 66.249.66.33:42909] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:54:03.332985 2026] [authz_core:error] [pid 2946280:tid 2946280] [client 66.249.66.33:42909] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:54:03.851727 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.54:25028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:03.852356 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.54:25028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:04.040762 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.34:59526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:04.041482 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.34:59526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:04.436224 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.6:44466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:04.436929 2026] [authz_core:error] [pid 2968407:tid 2968407] [client 57.141.0.6:44466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:04.477114 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.47:64846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:04.477899 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.47:64846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:04.633663 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.65:50964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:04.634307 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.65:50964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:04.745642 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.68:35052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:04.746269 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.68:35052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:04.801913 2026] [security2:error] [pid 2964562:tid 2964562] [client 110.249.201.133:44450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/robots.txt"] [unique_id "amstTD9d2QhL8Lq9-5whOQAAAAA"]
[Thu Jul 30 11:54:05.499660 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.69:46612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:05.500560 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.69:46612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:05.519979 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.41:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:05.520616 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.41:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:05.619561 2026] [ssl:error] [pid 2965134:tid 2965134] (EAI 2)Name or service not known: [client 144.76.19.72:28874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:05.619607 2026] [ssl:error] [pid 2965134:tid 2965134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:05.676015 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:28880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:05.676037 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:06.015781 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:56665] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_defrag_ipv6/sections/__verbose
[Thu Jul 30 11:54:06.416338 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.58:64780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:06.417656 2026] [authz_core:error] [pid 2965146:tid 2965146] [client 57.141.0.58:64780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:06.617232 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:56665] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS1/closing_wait
[Thu Jul 30 11:54:06.619978 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.22:56798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:06.620612 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.22:56798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:06.741770 2026] [core:error] [pid 2965147:tid 2965147] [client 66.249.66.10:57478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:06.741797 2026] [core:error] [pid 2965147:tid 2965147] [client 66.249.66.10:57478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:06.880156 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.67:48842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:06.880791 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.67:48842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:07.220443 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.29:23972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:07.221155 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.29:23972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:07.242842 2026] [security2:error] [pid 2963185:tid 2963185] [client 47.128.24.80:60136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amstT142aRNjO9a7K-v2ngAAACM"]
[Thu Jul 30 11:54:07.593022 2026] [authz_core:error] [pid 2970139:tid 2970139] [client 57.141.0.29:23976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:07.593652 2026] [authz_core:error] [pid 2970139:tid 2970139] [client 57.141.0.29:23976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:07.699100 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.4:34198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:07.699742 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.4:34198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:08.590107 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.29:23992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:08.590728 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.29:23992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:08.612096 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.60:22758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:08.612725 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.60:22758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:08.625922 2026] [authz_core:error] [pid 2970139:tid 2970139] [client 57.141.0.65:50980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:08.626546 2026] [authz_core:error] [pid 2970139:tid 2970139] [client 57.141.0.65:50980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:08.731380 2026] [ssl:error] [pid 2946280:tid 2946280] (EAI 2)Name or service not known: [client 144.76.19.72:28896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:08.731404 2026] [ssl:error] [pid 2946280:tid 2946280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:08.783955 2026] [ssl:error] [pid 2965023:tid 2965023] (EAI 2)Name or service not known: [client 144.76.19.72:28912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:08.783982 2026] [ssl:error] [pid 2965023:tid 2965023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:08.989344 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.9:45284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:08.989966 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.9:45284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:09.121030 2026] [authz_core:error] [pid 2970315:tid 2970315] [client 57.141.0.7:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:09.121660 2026] [authz_core:error] [pid 2970315:tid 2970315] [client 57.141.0.7:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:09.500262 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.21:38674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:09.500882 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.21:38674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:10.078309 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.64:50472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:10.079398 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.64:50472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:10.187241 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.4:34202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:10.187864 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.4:34202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:10.231648 2026] [access_compat:error] [pid 2970315:tid 2970315] [client 136.158.37.124:58067] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:54:10.430862 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.12:23868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:10.431485 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.12:23868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:11.002154 2026] [lsapi:warn] [pid 2965134:tid 2965134] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:54:11.202766 2026] [security2:error] [pid 2964034:tid 2964034] [client 69.5.20.178:24109] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstU1TpArPWRvmwn2wOeAAAACo"]
[Thu Jul 30 11:54:11.202816 2026] [security2:error] [pid 2964034:tid 2964034] [client 69.5.20.178:24109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstU1TpArPWRvmwn2wOeAAAACo"]
[Thu Jul 30 11:54:11.203110 2026] [security2:error] [pid 2964034:tid 2964034] [client 69.5.20.178:24109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstU1TpArPWRvmwn2wOeAAAACo"]
[Thu Jul 30 11:54:11.258871 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.50:61150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:11.259544 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.50:61150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:11.413792 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.34:40716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:11.414410 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.34:40716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:11.446059 2026] [cgi:error] [pid 2950312:tid 2950312] [client 20.9.4.9:24636] AH02812: stderr from /home/stadiumd/craft-buddies.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 11:54:11.570334 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.46:41268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:11.570966 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.46:41268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:11.839262 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:23880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:11.839287 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:11.892390 2026] [ssl:error] [pid 2970314:tid 2970314] (EAI 2)Name or service not known: [client 144.76.19.72:23896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:11.892437 2026] [ssl:error] [pid 2970314:tid 2970314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:12.420355 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.58:27900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:12.420973 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.58:27900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:12.642704 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.37:26040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:12.643389 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.37:26040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:12.730802 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.12:35214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:12.731420 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.12:35214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:12.737229 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.8:46626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:12.737826 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.8:46626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:12.966903 2026] [ssl:error] [pid 2964032:tid 2964032] (70014)End of file found: [client 216.73.216.199:9515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:12.983195 2026] [security2:error] [pid 2968632:tid 2968632] [client 114.119.159.19:50851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/rustic-planter-watering-can"] [unique_id "amstVKEZ1z3faIpGdimy4gAAAAQ"], referer: https://tripodhome.co.uk/products/rustic-planter-watering-can/
[Thu Jul 30 11:54:13.040897 2026] [authz_core:error] [pid 2968679:tid 2968679] [client 66.249.66.34:43416] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:54:13.043553 2026] [authz_core:error] [pid 2968679:tid 2968679] [client 66.249.66.34:43416] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:54:13.458580 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.31:57568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:13.459213 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.31:57568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:13.737014 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.58:27908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:13.737666 2026] [authz_core:error] [pid 2965147:tid 2965147] [client 57.141.0.58:27908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:13.767728 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.45:62160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:13.768345 2026] [authz_core:error] [pid 2960177:tid 2960177] [client 57.141.0.45:62160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:13.975298 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.22:59528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:13.975974 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.22:59528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:14.355916 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.7:48176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:14.356546 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.7:48176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:14.468719 2026] [ssl:error] [pid 2965304:tid 2965304] (70014)End of file found: [client 216.73.216.199:37912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:14.770725 2026] [ssl:error] [pid 2959154:tid 2959154] (70014)End of file found: [client 216.73.216.199:35285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:14.952540 2026] [ssl:error] [pid 2965055:tid 2965055] (EAI 2)Name or service not known: [client 144.76.19.72:23912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:14.952580 2026] [ssl:error] [pid 2965055:tid 2965055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:15.010358 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:23926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:15.010401 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:15.286917 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.24:28708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:15.287614 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.24:28708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:15.488663 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.45:62162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:15.489286 2026] [authz_core:error] [pid 2965055:tid 2965055] [client 57.141.0.45:62162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:15.804905 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.12:35220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:15.805536 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.12:35220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:16.581963 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.19:53098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:16.582594 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.19:53098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:16.846306 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.6:56216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:16.846952 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.6:56216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:16.861688 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.3:36538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:16.862308 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.3:36538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:17.256945 2026] [authz_core:error] [pid 2970776:tid 2970776] [client 57.141.0.51:52052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:17.257582 2026] [authz_core:error] [pid 2970776:tid 2970776] [client 57.141.0.51:52052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:17.539849 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.51:52054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:17.540654 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.51:52054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:17.722576 2026] [security2:error] [pid 2963185:tid 2963185] [client 194.127.110.237:22415] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstWV42aRNjO9a7K-v2oAAAACM"]
[Thu Jul 30 11:54:17.722625 2026] [security2:error] [pid 2963185:tid 2963185] [client 194.127.110.237:22415] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstWV42aRNjO9a7K-v2oAAAACM"]
[Thu Jul 30 11:54:17.722887 2026] [security2:error] [pid 2963185:tid 2963185] [client 194.127.110.237:22415] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstWV42aRNjO9a7K-v2oAAAACM"]
[Thu Jul 30 11:54:18.096246 2026] [ssl:error] [pid 2968633:tid 2968633] (EAI 2)Name or service not known: [client 144.76.19.72:23928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:18.096288 2026] [ssl:error] [pid 2968633:tid 2968633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:18.139388 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.35:63698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:18.140013 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.35:63698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:18.150745 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:23934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:18.150772 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:18.169584 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.40:54224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:18.170220 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.40:54224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:18.268529 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.48:47150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:18.269153 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.48:47150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:18.278052 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.55:60408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:18.278679 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.55:60408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:18.289976 2026] [ssl:error] [pid 2968679:tid 2968679] (70014)End of file found: [client 216.73.216.199:64588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:18.584603 2026] [security2:error] [pid 2968743:tid 2968743] [client 170.106.113.159:60166] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "amstWvehpzXrRiiJpZ5ziwAAABc"]
[Thu Jul 30 11:54:19.211441 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.45:28754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:19.212063 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.45:28754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:19.505276 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.70:31640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:19.505901 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.70:31640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:19.832117 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.6:56238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:19.832748 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.6:56238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:20.060426 2026] [ssl:error] [pid 2965057:tid 2965057] (70014)End of file found: [client 216.73.216.199:19622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:20.198919 2026] [ssl:error] [pid 2968677:tid 2968677] (70014)End of file found: [client 216.73.216.199:11119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:20.675210 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.19:53104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:20.675837 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.19:53104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:20.921850 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.24:28718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:20.922474 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.24:28718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:21.143057 2026] [access_compat:error] [pid 2963185:tid 2963185] [client 136.158.37.124:58942] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:54:21.205518 2026] [ssl:error] [pid 2946280:tid 2946280] (EAI 2)Name or service not known: [client 144.76.19.72:52138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:21.205552 2026] [ssl:error] [pid 2946280:tid 2946280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:21.252188 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.25:21704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:21.252819 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.25:21704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:21.259975 2026] [ssl:error] [pid 2965134:tid 2965134] (EAI 2)Name or service not known: [client 144.76.19.72:52146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:21.260000 2026] [ssl:error] [pid 2965134:tid 2965134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:21.436548 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.8:46762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:21.437172 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.8:46762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:21.535796 2026] [lsapi:warn] [pid 2970777:tid 2970777] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:54:21.540031 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.21:23888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:21.540652 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.21:23888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:21.894652 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.48:23846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:21.895307 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.48:23846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:22.051555 2026] [security2:error] [pid 2970357:tid 2970357] [client 143.44.184.213:5114] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstXndvqzZ19FD9vepr1AAAABI"]
[Thu Jul 30 11:54:22.051612 2026] [security2:error] [pid 2970357:tid 2970357] [client 143.44.184.213:5114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstXndvqzZ19FD9vepr1AAAABI"]
[Thu Jul 30 11:54:22.051875 2026] [security2:error] [pid 2970357:tid 2970357] [client 143.44.184.213:5114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstXndvqzZ19FD9vepr1AAAABI"]
[Thu Jul 30 11:54:22.110261 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.20:25264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:22.110877 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.20:25264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:22.523117 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.60:60466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:22.523746 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.60:60466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:22.637798 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.60:60482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:22.638418 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.60:60482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:23.053093 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.6:39388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:23.053717 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.6:39388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:23.635651 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.39:46866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:23.636280 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.39:46866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:23.845045 2026] [authz_core:error] [pid 2970777:tid 2970777] [client 57.141.0.37:56658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:23.845685 2026] [authz_core:error] [pid 2970777:tid 2970777] [client 57.141.0.37:56658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:24.037858 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.35:50214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:24.038496 2026] [authz_core:error] [pid 2968680:tid 2968680] [client 57.141.0.35:50214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:24.108822 2026] [ssl:error] [pid 2964032:tid 2964032] (70014)End of file found: [client 216.73.216.199:17571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:24.314722 2026] [ssl:error] [pid 2959996:tid 2959996] (EAI 2)Name or service not known: [client 144.76.19.72:52160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:24.314754 2026] [ssl:error] [pid 2959996:tid 2959996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:24.349577 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.1:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:24.350193 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.1:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:24.370525 2026] [ssl:error] [pid 2948861:tid 2948861] (EAI 2)Name or service not known: [client 144.76.19.72:52174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:24.370546 2026] [ssl:error] [pid 2948861:tid 2948861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:24.753433 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.2:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:24.754164 2026] [authz_core:error] [pid 2970357:tid 2970357] [client 57.141.0.2:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:24.846678 2026] [authz_core:error] [pid 2970777:tid 2970777] [client 57.141.0.19:61144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:24.847278 2026] [authz_core:error] [pid 2970777:tid 2970777] [client 57.141.0.19:61144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:25.016554 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.52:58998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:25.017178 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.52:58998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:26.051896 2026] [security2:error] [pid 2970776:tid 2970776] [client 185.191.171.13:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/robots.txt"] [unique_id "amstYgL6GlHAjX3BHP_4TgAAAAI"]
[Thu Jul 30 11:54:26.119025 2026] [authz_core:error] [pid 2965144:tid 2965144] [client 57.141.0.36:55312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:26.119656 2026] [authz_core:error] [pid 2965144:tid 2965144] [client 57.141.0.36:55312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:26.369221 2026] [security2:error] [pid 2965143:tid 2965143] [client 114.119.144.31:31827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563663600/cat_ids~19,14/request_format~html"] [unique_id "amstYqGe5_gUMapIl261_AAAAFE"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563663600/cat_ids~19,14/request_format~html
[Thu Jul 30 11:54:26.712127 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.16:62920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:26.712764 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.16:62920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:26.795466 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.8:33140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:26.796105 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.8:33140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:26.823579 2026] [ssl:error] [pid 2959996:tid 2959996] (70014)End of file found: [client 216.73.216.199:20868] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:26.973048 2026] [security2:error] [pid 2937855:tid 2937855] [client 85.208.96.205:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2016/09/04/glory-at-south-west-10-mile-tt-champs/"] [unique_id "amstYmiRLhCIgTgu6BOJwgAAADU"]
[Thu Jul 30 11:54:26.979585 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.26:32278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:26.980198 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.26:32278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:27.124437 2026] [ssl:error] [pid 2970777:tid 2970777] (70014)End of file found: [client 216.73.216.199:50247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:27.168908 2026] [authz_core:error] [pid 2970139:tid 2970139] [client 57.141.0.67:62598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:27.169539 2026] [authz_core:error] [pid 2970139:tid 2970139] [client 57.141.0.67:62598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:27.425615 2026] [ssl:error] [pid 2949779:tid 2949779] (EAI 2)Name or service not known: [client 144.76.19.72:52176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:27.425653 2026] [ssl:error] [pid 2949779:tid 2949779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:27.565121 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.42:59782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:27.565745 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.42:59782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:27.567946 2026] [ssl:error] [pid 2963083:tid 2963083] (EAI 2)Name or service not known: [client 144.76.19.72:52188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:27.567970 2026] [ssl:error] [pid 2963083:tid 2963083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:28.104844 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.43:51646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:28.105542 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.43:51646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:28.142806 2026] [security2:error] [pid 2965137:tid 2965137] [client 43.166.128.187:40278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "oliviamarjorie.com"] [uri "/"] [unique_id "amstZNzmkxGWhaIDLc5dbwAAAEo"]
[Thu Jul 30 11:54:28.358230 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.9:29222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:28.358854 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.9:29222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:28.413572 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.64:38646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:28.414250 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.64:38646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:28.499868 2026] [authz_core:error] [pid 2970358:tid 2970358] [client 57.141.0.55:61750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:28.500536 2026] [authz_core:error] [pid 2970358:tid 2970358] [client 57.141.0.55:61750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:28.955107 2026] [core:error] [pid 2968744:tid 2968744] [client 66.249.66.167:41152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:28.955134 2026] [core:error] [pid 2968744:tid 2968744] [client 66.249.66.167:41152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:28.962423 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.46:58922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:28.963121 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.46:58922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:29.812078 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.67:55098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:29.812707 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.67:55098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:30.040888 2026] [security2:error] [pid 2968633:tid 2968633] [client 114.119.144.31:31837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563663600/cat_ids~19,14/request_format~html"] [unique_id "amstZl1RFURbVR79An_ciwAAAAU"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563663600/cat_ids~19,14/request_format~html
[Thu Jul 30 11:54:30.237244 2026] [security2:error] [pid 2968743:tid 2968743] [client 43.166.128.86:42570] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amstZvehpzXrRiiJpZ5zjgAAABc"], referer: http://banskoexpress.net
[Thu Jul 30 11:54:30.247589 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.33:51234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:30.248216 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.33:51234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:30.357455 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.68:20160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:30.358087 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.68:20160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:30.499851 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.45:50150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:30.500472 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.45:50150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:30.619574 2026] [ssl:error] [pid 2968632:tid 2968632] (EAI 2)Name or service not known: [client 144.76.19.72:50002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:30.619601 2026] [ssl:error] [pid 2968632:tid 2968632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:30.675439 2026] [ssl:error] [pid 2969366:tid 2969366] (EAI 2)Name or service not known: [client 144.76.19.72:50014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:30.675467 2026] [ssl:error] [pid 2969366:tid 2969366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:31.119885 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.61:43568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:31.120536 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.61:43568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:31.311445 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.26:32284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:31.312061 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.26:32284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:31.362360 2026] [ssl:error] [pid 2959154:tid 2959154] (70014)End of file found: [client 216.73.216.199:23159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:31.643722 2026] [security2:error] [pid 2971529:tid 2971529] [client 43.166.128.86:36964] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amstZ-efadsGfoYRoAAXHQAAABw"], referer: http://www.banskoexpress.com
[Thu Jul 30 11:54:31.874907 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.43:35172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:31.875568 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.43:35172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:32.010202 2026] [lsapi:warn] [pid 2968680:tid 2968680] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:54:32.156342 2026] [ssl:error] [pid 2968679:tid 2968679] (70014)End of file found: [client 216.73.216.199:47631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:32.289433 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.22:33208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:32.290052 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.22:33208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:32.346702 2026] [access_compat:error] [pid 2971562:tid 2971562] [client 136.158.37.124:59806] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:54:32.544401 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.34:63760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:32.545019 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.34:63760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:32.569402 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.47:21510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:32.570017 2026] [authz_core:error] [pid 2948861:tid 2948861] [client 57.141.0.47:21510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:32.818035 2026] [access_compat:error] [pid 2948863:tid 2948863] [client 45.158.164.139:55118] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:54:32.952181 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.23:62456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:32.952802 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.23:62456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:33.577738 2026] [authz_core:error] [pid 2970776:tid 2970776] [client 57.141.0.10:56722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:33.578362 2026] [authz_core:error] [pid 2970776:tid 2970776] [client 57.141.0.10:56722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:33.730897 2026] [ssl:error] [pid 2971599:tid 2971599] (EAI 2)Name or service not known: [client 144.76.19.72:50030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:33.730938 2026] [ssl:error] [pid 2971599:tid 2971599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:33.784520 2026] [ssl:error] [pid 2971529:tid 2971529] (EAI 2)Name or service not known: [client 144.76.19.72:50046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:33.784551 2026] [ssl:error] [pid 2971529:tid 2971529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:33.828532 2026] [authz_core:error] [pid 2971600:tid 2971600] [client 57.141.0.34:63774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:33.829193 2026] [authz_core:error] [pid 2971600:tid 2971600] [client 57.141.0.34:63774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:34.017545 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.8:33142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:34.018171 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.8:33142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:34.575684 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.21:30264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:34.576314 2026] [authz_core:error] [pid 2969366:tid 2969366] [client 57.141.0.21:30264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:34.630906 2026] [authz_core:error] [pid 2970776:tid 2970776] [client 57.141.0.35:63572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:34.631535 2026] [authz_core:error] [pid 2970776:tid 2970776] [client 57.141.0.35:63572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:34.669943 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.69:41012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:34.670577 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.69:41012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:34.692028 2026] [core:error] [pid 2965304:tid 2965304] (13)Permission denied: [client 216.73.216.199:59326] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory69/subsystem/uevent
[Thu Jul 30 11:54:34.983663 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.9:44240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:34.984350 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.9:44240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:35.197718 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.14:50854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:35.198342 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.14:50854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:35.275645 2026] [core:error] [pid 2969366:tid 2969366] [client 66.249.66.167:57150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:35.275670 2026] [core:error] [pid 2969366:tid 2969366] [client 66.249.66.167:57150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:35.340101 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 66.249.66.34:44585] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:54:35.342748 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 66.249.66.34:44585] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:54:36.299967 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.12:23100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:36.300595 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.12:23100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:36.324508 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.38:61878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:36.325142 2026] [authz_core:error] [pid 2965093:tid 2965093] [client 57.141.0.38:61878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:36.529771 2026] [authz_core:error] [pid 2970315:tid 2970315] [client 57.141.0.42:29438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:36.530737 2026] [authz_core:error] [pid 2970315:tid 2970315] [client 57.141.0.42:29438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:36.837489 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:50062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:36.837527 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:36.861217 2026] [security2:error] [pid 2950494:tid 2950494] [client 114.119.130.60:28673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/pages/35/Studio/st_3587/2"] [unique_id "amstbGxcHkw7A2WvvJPE9gAAADw"], referer: https://www.jonathanmeyerart.com/pages/35/Studio/st_3587/28
[Thu Jul 30 11:54:36.893223 2026] [ssl:error] [pid 2949779:tid 2949779] (EAI 2)Name or service not known: [client 144.76.19.72:50076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:36.893247 2026] [ssl:error] [pid 2949779:tid 2949779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:37.466028 2026] [authz_core:error] [pid 2970777:tid 2970777] [client 57.141.0.5:65118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:37.466660 2026] [authz_core:error] [pid 2970777:tid 2970777] [client 57.141.0.5:65118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:37.619227 2026] [security2:error] [pid 2965057:tid 2965057] [client 85.208.96.196:63388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9475.0.html"] [unique_id "amstbTJZjQYZIbPDFkL4GwAAAC0"]
[Thu Jul 30 11:54:37.846839 2026] [core:error] [pid 2965304:tid 2965304] (13)Permission denied: [client 216.73.216.199:59326] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory86/subsystem/uevent
[Thu Jul 30 11:54:37.943366 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.5:23804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:37.943981 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.5:23804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:38.097094 2026] [authz_core:error] [pid 2970358:tid 2970358] [client 57.141.0.27:59606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:38.097715 2026] [authz_core:error] [pid 2970358:tid 2970358] [client 57.141.0.27:59606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:38.098425 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.51:37220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:38.099112 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.51:37220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:38.105803 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.22:61374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:38.106487 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.22:61374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:38.825365 2026] [ssl:error] [pid 2965304:tid 2965304] (70014)End of file found: [client 216.73.216.199:59326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:39.040948 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.4:46860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:39.041583 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.4:46860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:39.056472 2026] [ssl:error] [pid 2964032:tid 2964032] (70014)End of file found: [client 216.73.216.199:19597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:39.266976 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.8:58302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:39.267614 2026] [authz_core:error] [pid 2965134:tid 2965134] [client 57.141.0.8:58302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:39.305056 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.56:36628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:39.305686 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.56:36628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:39.740715 2026] [security2:error] [pid 2950312:tid 2950312] [client 103.110.84.178:45366] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amstb0snlgQsAB3ydadSEAAAABY"]
[Thu Jul 30 11:54:39.950747 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:50620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:39.950777 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:40.007903 2026] [ssl:error] [pid 2961097:tid 2961097] (EAI 2)Name or service not known: [client 144.76.19.72:50630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:40.007927 2026] [ssl:error] [pid 2961097:tid 2961097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:40.281747 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.3:52268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:40.282392 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.3:52268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:40.537441 2026] [core:error] [pid 2971085:tid 2971085] [client 57.141.0.56:36642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:40.537468 2026] [core:error] [pid 2971085:tid 2971085] [client 57.141.0.56:36642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:40.600195 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.59:62632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:40.600814 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.59:62632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:40.762972 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.69:63200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:40.763597 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.69:63200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:41.127678 2026] [authz_core:error] [pid 2971529:tid 2971529] [client 57.141.0.11:42890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:41.128322 2026] [authz_core:error] [pid 2971529:tid 2971529] [client 57.141.0.11:42890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:41.176452 2026] [ssl:error] [pid 2963185:tid 2963185] (70014)End of file found: [client 216.73.216.199:7916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:41.875156 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.53:53834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:41.875773 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.53:53834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:41.933834 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.45:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:41.934524 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.45:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:42.010880 2026] [authz_core:error] [pid 2965144:tid 2965144] [client 57.141.0.56:36656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:42.011897 2026] [authz_core:error] [pid 2965144:tid 2965144] [client 57.141.0.56:36656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:42.076173 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.20:60084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:42.076797 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.20:60084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:42.538881 2026] [lsapi:warn] [pid 2971085:tid 2971085] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:54:42.670316 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.7:37514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:42.671001 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.7:37514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:42.699892 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.43:33164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:42.700525 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.43:33164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:43.061906 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:50646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:43.061942 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:43.118112 2026] [ssl:error] [pid 2965143:tid 2965143] (EAI 2)Name or service not known: [client 144.76.19.72:50656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:43.118145 2026] [ssl:error] [pid 2965143:tid 2965143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:43.196058 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.2:43916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:43.196687 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.2:43916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:43.674635 2026] [access_compat:error] [pid 2971562:tid 2971562] [client 136.158.37.124:60605] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:54:43.878611 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.62:56922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:43.879228 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.62:56922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:43.885240 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.67:49110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:43.885846 2026] [authz_core:error] [pid 2971085:tid 2971085] [client 57.141.0.67:49110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:43.962282 2026] [security2:error] [pid 2965143:tid 2965143] [client 85.208.96.205:49666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/wappner-funeral-home-mansfield,-ohio-obituaries"] [unique_id "amstc6Ge5_gUMapIl262BQAAAFE"]
[Thu Jul 30 11:54:44.109142 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.32:24624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:44.109758 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.32:24624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:44.394829 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.70:24948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:44.395460 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.70:24948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:44.503749 2026] [ssl:error] [pid 2959154:tid 2959154] (70014)End of file found: [client 216.73.216.199:10371] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:44.631329 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.17:40230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:44.631952 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.17:40230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:45.001444 2026] [ssl:error] [pid 2971085:tid 2971085] (70014)End of file found: [client 216.73.216.199:4311] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:45.695629 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.13:63964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:45.696263 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.13:63964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:45.930324 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.15:36728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:45.930939 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.15:36728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:46.115652 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.3:52274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:46.116278 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.3:52274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:46.185828 2026] [ssl:error] [pid 2964032:tid 2964032] (EAI 2)Name or service not known: [client 144.76.19.72:50670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:46.185860 2026] [ssl:error] [pid 2964032:tid 2964032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:46.238902 2026] [ssl:error] [pid 2970359:tid 2970359] (EAI 2)Name or service not known: [client 144.76.19.72:50682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:46.238936 2026] [ssl:error] [pid 2970359:tid 2970359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:46.823772 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.46:58166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:46.824391 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.46:58166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:47.037985 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.61:20354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:47.038618 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.61:20354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:47.104495 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.71:53416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:47.105103 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.71:53416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:47.208801 2026] [core:error] [pid 2965093:tid 2965093] (13)Permission denied: [client 216.73.216.199:55790] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup1/device/subsystem/uevent
[Thu Jul 30 11:54:47.725951 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.30:56710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:47.726590 2026] [authz_core:error] [pid 2965143:tid 2965143] [client 57.141.0.30:56710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:47.860385 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.36:35210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:47.861006 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.36:35210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:48.619593 2026] [authz_core:error] [pid 2972413:tid 2972413] [client 57.141.0.11:42898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:48.620265 2026] [authz_core:error] [pid 2972413:tid 2972413] [client 57.141.0.11:42898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:48.796535 2026] [authz_core:error] [pid 2972413:tid 2972413] [client 57.141.0.36:35226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:48.797159 2026] [authz_core:error] [pid 2972413:tid 2972413] [client 57.141.0.36:35226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:48.967109 2026] [authz_core:error] [pid 2972413:tid 2972413] [client 57.141.0.28:29840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:48.967734 2026] [authz_core:error] [pid 2972413:tid 2972413] [client 57.141.0.28:29840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:49.297465 2026] [ssl:error] [pid 2968632:tid 2968632] (EAI 2)Name or service not known: [client 144.76.19.72:50684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:49.297490 2026] [ssl:error] [pid 2968632:tid 2968632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:49.318898 2026] [ssl:error] [pid 2965093:tid 2965093] (70014)End of file found: [client 216.73.216.199:55790] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:49.342204 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.60:41270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:49.342826 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.60:41270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:49.351768 2026] [ssl:error] [pid 2972413:tid 2972413] (EAI 2)Name or service not known: [client 144.76.19.72:50692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:49.351795 2026] [ssl:error] [pid 2972413:tid 2972413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:49.683402 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.33:59648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:49.684019 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.33:59648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:49.906812 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.46:58176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:49.907431 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.46:58176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:50.361201 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.19:30258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:50.361841 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.19:30258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:50.577010 2026] [authz_core:error] [pid 2972479:tid 2972479] [client 57.141.0.19:30268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:50.577671 2026] [authz_core:error] [pid 2972479:tid 2972479] [client 57.141.0.19:30268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:50.586763 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.7:30870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:50.587410 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.7:30870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:51.459983 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.43:35622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:51.460618 2026] [authz_core:error] [pid 2971562:tid 2971562] [client 57.141.0.43:35622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:51.580183 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.65:23532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:51.580804 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.65:23532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:51.738589 2026] [core:error] [pid 2948863:tid 2948863] (13)Permission denied: [client 216.73.216.199:25438] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/virtio_balloon/uevent
[Thu Jul 30 11:54:51.988836 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.44:60076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:51.989464 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.44:60076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:51.992714 2026] [core:error] [pid 2965137:tid 2965137] [client 66.249.66.68:44421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:51.992736 2026] [core:error] [pid 2965137:tid 2965137] [client 66.249.66.68:44421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:51.995019 2026] [core:error] [pid 2970777:tid 2970777] [client 66.249.66.167:42532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:51.995039 2026] [core:error] [pid 2970777:tid 2970777] [client 66.249.66.167:42532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:52.337136 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.23:52772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:52.337758 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.23:52772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:52.411496 2026] [ssl:error] [pid 2968632:tid 2968632] (EAI 2)Name or service not known: [client 144.76.19.72:36534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:52.411538 2026] [ssl:error] [pid 2968632:tid 2968632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:52.465664 2026] [ssl:error] [pid 2964071:tid 2964071] (EAI 2)Name or service not known: [client 144.76.19.72:36546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:52.465696 2026] [ssl:error] [pid 2964071:tid 2964071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:52.504844 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.59:44546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:52.505467 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.59:44546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:52.642413 2026] [ssl:error] [pid 2948863:tid 2948863] (70014)End of file found: [client 216.73.216.199:25438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:52.940451 2026] [core:error] [pid 2971085:tid 2971085] [client 66.249.64.170:60385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:52.940485 2026] [core:error] [pid 2971085:tid 2971085] [client 66.249.64.170:60385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:54:52.946400 2026] [ssl:error] [pid 2965304:tid 2965304] (70014)End of file found: [client 216.73.216.199:29101] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:54:52.985918 2026] [lsapi:warn] [pid 2970727:tid 2970727] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:54:53.275232 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.70:28954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:53.275850 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.70:28954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:53.513199 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.23:52786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:53.513821 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.23:52786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:53.750168 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.49:62190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:53.750819 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.49:62190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:53.966239 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.58:53760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:53.966881 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.58:53760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:54.056645 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.48:33528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:54.057266 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.48:33528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:54.427363 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.10:54314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:54.427988 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.10:54314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:54.855481 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.22:46648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:54.856142 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.22:46648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:55.093736 2026] [access_compat:error] [pid 2971597:tid 2971597] [client 136.158.37.124:61546] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:54:55.403291 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.23:20926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:55.403910 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.23:20926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:55.487163 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.25:33604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:55.487783 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.25:33604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:55.521522 2026] [ssl:error] [pid 2937855:tid 2937855] (EAI 2)Name or service not known: [client 144.76.19.72:36562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:55.521553 2026] [ssl:error] [pid 2937855:tid 2937855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:55.574140 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:36566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:55.574171 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:55.644887 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.10:54316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:55.645519 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.10:54316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:56.681583 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.1:34448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:56.682205 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.1:34448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:57.066672 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.50:58690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:57.067302 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.50:58690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:57.361985 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.12:47594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:57.362618 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.12:47594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:57.636026 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.37:39132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:57.636654 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.37:39132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:57.720279 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.51:49164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:57.720899 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.51:49164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:57.789613 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.20:25304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:57.790230 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.20:25304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:58.054715 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.50:58706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:58.055344 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.50:58706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:58.628835 2026] [ssl:error] [pid 2965304:tid 2965304] (EAI 2)Name or service not known: [client 144.76.19.72:36570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:58.628874 2026] [ssl:error] [pid 2965304:tid 2965304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:58.680593 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.63:59546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:58.681208 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.63:59546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:59.123818 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:36574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:54:59.123846 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:54:59.620297 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.12:47606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:59.620923 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.12:47606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:59.801399 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.46:61496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:59.802107 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.46:61496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:54:59.973695 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.66:32404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:54:59.974317 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.66:32404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:00.468405 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.9:49230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:00.469101 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.9:49230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:00.543343 2026] [security2:error] [pid 2971597:tid 2971597] [client 85.208.96.193:17670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7615.0/prev_next,prev.html"] [unique_id "amsthMt2L2FCnsuL0RMnOAAAACA"]
[Thu Jul 30 11:55:00.720367 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.25:33618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:00.720990 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.25:33618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:01.387201 2026] [ssl:error] [pid 2964034:tid 2964034] (70014)End of file found: [client 216.73.216.199:34721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:01.396234 2026] [core:error] [pid 2971562:tid 2971562] [client 57.141.0.2:34590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:55:01.396259 2026] [core:error] [pid 2971562:tid 2971562] [client 57.141.0.2:34590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:55:01.573335 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.23:20940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:01.573960 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.23:20940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:01.894005 2026] [ssl:error] [pid 2971599:tid 2971599] (70014)End of file found: [client 216.73.216.199:45165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:01.957675 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.27:55310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:01.958332 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.27:55310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:02.006397 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.19:53132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:02.007408 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.19:53132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:02.154426 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.41:32722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:02.155166 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.41:32722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:02.207861 2026] [ssl:error] [pid 2972412:tid 2972412] (EAI 2)Name or service not known: [client 144.76.19.72:45118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:02.207896 2026] [ssl:error] [pid 2972412:tid 2972412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:02.261542 2026] [ssl:error] [pid 2964071:tid 2964071] (EAI 2)Name or service not known: [client 144.76.19.72:45134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:02.261569 2026] [ssl:error] [pid 2964071:tid 2964071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:02.621620 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.43:64858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:02.622243 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.43:64858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:02.891118 2026] [ssl:error] [pid 2973061:tid 2973061] (70014)End of file found: [client 216.73.216.199:59816] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:02.934407 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.46:43190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:02.935110 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.46:43190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:03.307080 2026] [authz_core:error] [pid 2973063:tid 2973063] [client 57.141.0.44:49458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:03.307780 2026] [authz_core:error] [pid 2973063:tid 2973063] [client 57.141.0.44:49458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:03.542518 2026] [lsapi:warn] [pid 2971005:tid 2971005] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:55:03.546920 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.14:41946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:03.547558 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.14:41946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:03.717813 2026] [security2:error] [pid 2964071:tid 2964071] [client 110.249.201.118:38884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amsth-e2orj0rcijLyhTAgAAADI"]
[Thu Jul 30 11:55:04.439975 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.13:60392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:04.440632 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.13:60392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:04.482547 2026] [authz_core:error] [pid 2972367:tid 2972367] [client 57.141.0.13:60398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:04.483170 2026] [authz_core:error] [pid 2972367:tid 2972367] [client 57.141.0.13:60398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:05.029035 2026] [security2:error] [pid 2970314:tid 2970314] [client 43.160.241.129:32902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "randomlearner.org.uk"] [uri "/"] [unique_id "amstib5Dm6W7v3u3LdfySQAAAA4"]
[Thu Jul 30 11:55:05.040879 2026] [authz_core:error] [pid 2972479:tid 2972479] [client 57.141.0.70:23522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:05.041509 2026] [authz_core:error] [pid 2972479:tid 2972479] [client 57.141.0.70:23522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:05.260105 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.61:21494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:05.260725 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.61:21494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:05.320556 2026] [ssl:error] [pid 2973359:tid 2973359] (EAI 2)Name or service not known: [client 144.76.19.72:45148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:05.320614 2026] [ssl:error] [pid 2973359:tid 2973359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:05.378137 2026] [ssl:error] [pid 2973360:tid 2973360] (EAI 2)Name or service not known: [client 144.76.19.72:45152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:05.378179 2026] [ssl:error] [pid 2973360:tid 2973360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:05.662985 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.7:64032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:05.663678 2026] [authz_core:error] [pid 2964071:tid 2964071] [client 57.141.0.7:64032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:05.775730 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.68:63584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:05.776361 2026] [authz_core:error] [pid 2965057:tid 2965057] [client 57.141.0.68:63584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:06.338253 2026] [authz_core:error] [pid 2973360:tid 2973360] [client 57.141.0.21:57868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:06.338875 2026] [authz_core:error] [pid 2973360:tid 2973360] [client 57.141.0.21:57868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:06.418368 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.13:60406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:06.418993 2026] [authz_core:error] [pid 2964032:tid 2964032] [client 57.141.0.13:60406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:06.976571 2026] [access_compat:error] [pid 2965137:tid 2965137] [client 136.158.37.124:62334] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:55:06.997019 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.23:42394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:06.997707 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.23:42394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:07.446016 2026] [security2:error] [pid 2965057:tid 2965057] [client 43.157.181.189:57678] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.com"] [uri "/"] [unique_id "amstizJZjQYZIbPDFkL4JQAAAC0"]
[Thu Jul 30 11:55:07.487151 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.12:56048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:07.487772 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.12:56048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:07.532635 2026] [authz_core:error] [pid 2972367:tid 2972367] [client 57.141.0.13:60408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:07.533269 2026] [authz_core:error] [pid 2972367:tid 2972367] [client 57.141.0.13:60408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:07.540516 2026] [security2:error] [pid 2970315:tid 2970315] [client 124.156.179.141:58824] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "amsti2dTxyNC3MHtamOhjQAAAA8"]
[Thu Jul 30 11:55:07.561360 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.29:20796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:07.561974 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.29:20796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:07.872101 2026] [ssl:error] [pid 2964071:tid 2964071] (70014)End of file found: [client 216.73.216.199:59107] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:08.343423 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.65:23944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:08.344048 2026] [authz_core:error] [pid 2959996:tid 2959996] [client 57.141.0.65:23944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:08.355369 2026] [ssl:error] [pid 2971562:tid 2971562] (70014)End of file found: [client 216.73.216.199:49323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:08.433334 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:45154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:08.433364 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:08.489520 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:45168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:08.489550 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:08.662811 2026] [ssl:error] [pid 2965057:tid 2965057] (70014)End of file found: [client 216.73.216.199:3317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:08.948807 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.25:56806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:08.949432 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.25:56806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:08.974254 2026] [authz_core:error] [pid 2973063:tid 2973063] [client 57.141.0.29:20810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:08.974884 2026] [authz_core:error] [pid 2973063:tid 2973063] [client 57.141.0.29:20810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:09.317600 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.8:33392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:09.318215 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.8:33392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:09.941137 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.5:64590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:09.941757 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.5:64590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:10.242034 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.15:23708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:10.242669 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.15:23708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:10.382914 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.26:62440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:10.383581 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.26:62440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:10.596866 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 66.249.66.35:63791] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:55:10.599541 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 66.249.66.35:63791] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:55:10.888039 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.24:56900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:10.888673 2026] [authz_core:error] [pid 2963083:tid 2963083] [client 57.141.0.24:56900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:11.453434 2026] [security2:error] [pid 2971563:tid 2971563] [client 102.209.76.146:52650] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstj34m6Yspu21aCigtAQAAAB4"]
[Thu Jul 30 11:55:11.453481 2026] [security2:error] [pid 2971563:tid 2971563] [client 102.209.76.146:52650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstj34m6Yspu21aCigtAQAAAB4"]
[Thu Jul 30 11:55:11.453804 2026] [security2:error] [pid 2971563:tid 2971563] [client 102.209.76.146:52650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstj34m6Yspu21aCigtAQAAAB4"]
[Thu Jul 30 11:55:11.501153 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.14:61062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:11.501801 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.14:61062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:11.518446 2026] [authz_core:error] [pid 2970358:tid 2970358] [client 57.141.0.50:22120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:11.519021 2026] [authz_core:error] [pid 2970358:tid 2970358] [client 57.141.0.50:22120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:11.526521 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.66:39558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:11.527134 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.66:39558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:11.548474 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:41576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:11.548509 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:11.559529 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.24:56914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:11.560182 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.24:56914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:11.602849 2026] [ssl:error] [pid 2973001:tid 2973001] (EAI 2)Name or service not known: [client 144.76.19.72:41584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:11.602871 2026] [ssl:error] [pid 2973001:tid 2973001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:11.612483 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.30:38326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:11.613097 2026] [authz_core:error] [pid 2971599:tid 2971599] [client 57.141.0.30:38326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:11.767816 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.14:61072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:11.768438 2026] [authz_core:error] [pid 2949779:tid 2949779] [client 57.141.0.14:61072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:12.369766 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.40:22262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:12.370427 2026] [authz_core:error] [pid 2968633:tid 2968633] [client 57.141.0.40:22262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:12.990863 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.64:51110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:12.991484 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.64:51110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:13.691405 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.13:54386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:13.692025 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.13:54386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:13.893710 2026] [ssl:error] [pid 2970356:tid 2970356] (70014)End of file found: [client 216.73.216.199:50258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:13.988383 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.38:38414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:13.989006 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.38:38414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:14.017317 2026] [lsapi:warn] [pid 2965143:tid 2965143] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:55:14.227147 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.51:35234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:14.227831 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.51:35234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:14.533284 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.38:38422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:14.533911 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.38:38422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:14.659552 2026] [ssl:error] [pid 2965057:tid 2965057] (EAI 2)Name or service not known: [client 144.76.19.72:41596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:14.659587 2026] [ssl:error] [pid 2965057:tid 2965057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:14.687654 2026] [authz_core:error] [pid 2973360:tid 2973360] [client 57.141.0.11:34326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:14.688274 2026] [authz_core:error] [pid 2973360:tid 2973360] [client 57.141.0.11:34326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:14.708095 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.2:54118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:14.708713 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.2:54118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:14.712488 2026] [ssl:error] [pid 2950312:tid 2950312] (EAI 2)Name or service not known: [client 144.76.19.72:41606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:14.712520 2026] [ssl:error] [pid 2950312:tid 2950312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:14.916720 2026] [security2:error] [pid 2950494:tid 2950494] [client 5.178.15.9:4819] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstkmxcHkw7A2WvvJPFFQAAADw"]
[Thu Jul 30 11:55:14.916770 2026] [security2:error] [pid 2950494:tid 2950494] [client 5.178.15.9:4819] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstkmxcHkw7A2WvvJPFFQAAADw"]
[Thu Jul 30 11:55:14.917101 2026] [security2:error] [pid 2950494:tid 2950494] [client 5.178.15.9:4819] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstkmxcHkw7A2WvvJPFFQAAADw"]
[Thu Jul 30 11:55:15.230324 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.44:52538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:15.231011 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.44:52538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:15.612582 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.70:42778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:15.613213 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.70:42778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:15.814651 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.28:60558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:15.815276 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.28:60558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:16.413973 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.62:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:16.414612 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.62:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:16.595788 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.62:56944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:16.596409 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.62:56944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:16.884020 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:64606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:16.884645 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:64606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:16.907260 2026] [core:error] [pid 2963185:tid 2963185] [client 66.249.66.167:47203] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:55:16.907282 2026] [core:error] [pid 2963185:tid 2963185] [client 66.249.66.167:47203] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:55:17.438008 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.69:50374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:17.438643 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.69:50374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:17.719391 2026] [authz_core:error] [pid 2972934:tid 2972934] [client 57.141.0.62:56946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:17.720364 2026] [authz_core:error] [pid 2972934:tid 2972934] [client 57.141.0.62:56946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:17.780489 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:41612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:17.780536 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:17.835018 2026] [ssl:error] [pid 2971005:tid 2971005] (EAI 2)Name or service not known: [client 144.76.19.72:41618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:17.835050 2026] [ssl:error] [pid 2971005:tid 2971005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:18.035951 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.16:20372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:18.036588 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.16:20372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:18.116227 2026] [access_compat:error] [pid 2968677:tid 2968677] [client 136.158.37.124:63148] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 11:55:18.122280 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.70:34932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:18.122897 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.70:34932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:18.406917 2026] [ssl:error] [pid 2973001:tid 2973001] (70014)End of file found: [client 216.73.216.199:54330] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:18.707846 2026] [core:error] [pid 2950312:tid 2950312] (13)Permission denied: [client 216.73.216.199:39256] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/license_old.json
[Thu Jul 30 11:55:18.855733 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.42:54048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:18.856452 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.42:54048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:18.946699 2026] [security2:error] [pid 2968744:tid 2968744] [client 187.180.190.10:7074] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstltbWBmDHil59MDHCnQAAABo"]
[Thu Jul 30 11:55:18.946764 2026] [security2:error] [pid 2968744:tid 2968744] [client 187.180.190.10:7074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amstltbWBmDHil59MDHCnQAAABo"]
[Thu Jul 30 11:55:18.947030 2026] [security2:error] [pid 2968744:tid 2968744] [client 187.180.190.10:7074] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amstltbWBmDHil59MDHCnQAAABo"]
[Thu Jul 30 11:55:19.008304 2026] [ssl:error] [pid 2950312:tid 2950312] (70014)End of file found: [client 216.73.216.199:39256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:19.093954 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 66.249.66.34:48756] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:55:19.096870 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 66.249.66.34:48756] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:55:19.143126 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.25:39578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:19.143746 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.25:39578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:19.485157 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.67:64766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:19.485773 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.67:64766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:19.492928 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.18:49350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:19.493540 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.18:49350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:19.962592 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.12:51824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:19.963241 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.12:51824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:20.009403 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.15:53700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:20.010047 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.15:53700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:20.015604 2026] [security2:error] [pid 2972477:tid 2972477] [client 45.148.10.120:44500] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchell.org"] [uri "/.env"] [unique_id "amstmEiILMWgTSC_GLC_AQAAABI"]
[Thu Jul 30 11:55:20.015781 2026] [security2:error] [pid 2972477:tid 2972477] [client 45.148.10.120:44500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchell.org"] [uri "/.env"] [unique_id "amstmEiILMWgTSC_GLC_AQAAABI"]
[Thu Jul 30 11:55:20.058198 2026] [security2:error] [pid 2972477:tid 2972477] [client 45.148.10.120:44500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchell.org"] [uri "/index.php"] [unique_id "amstmEiILMWgTSC_GLC_AQAAABI"]
[Thu Jul 30 11:55:20.157479 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.16:20386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:20.158118 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.16:20386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:20.456092 2026] [security2:error] [pid 2973286:tid 2973286] [client 74.7.227.31:39320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staging.highclereracing.co.uk"] [uri "/"] [unique_id "amstmMWWEzLHcRPUzT8t4wAAACw"]
[Thu Jul 30 11:55:20.888634 2026] [ssl:error] [pid 2973901:tid 2973901] (EAI 2)Name or service not known: [client 144.76.19.72:21244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:20.888670 2026] [ssl:error] [pid 2973901:tid 2973901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:20.952799 2026] [ssl:error] [pid 2973286:tid 2973286] (EAI 2)Name or service not known: [client 144.76.19.72:21248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:20.952824 2026] [ssl:error] [pid 2973286:tid 2973286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:21.107165 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.48:55118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:21.107786 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.48:55118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:21.337042 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.23:61046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:21.337673 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.23:61046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:21.839262 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.54:30972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:21.839894 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.54:30972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:21.867820 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.49:62102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:21.868472 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.49:62102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:22.185017 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.17:48214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:22.185720 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.17:48214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:22.624456 2026] [ssl:error] [pid 2973061:tid 2973061] (70014)End of file found: [client 216.73.216.199:38692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:22.683995 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.43:37628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:22.684646 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.43:37628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:23.221261 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.27:59834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:23.221943 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.27:59834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:23.471085 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.30:26942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:23.471710 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.30:26942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:23.689944 2026] [authz_core:error] [pid 2974077:tid 2974077] [client 57.141.0.60:49814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:23.690609 2026] [authz_core:error] [pid 2974077:tid 2974077] [client 57.141.0.60:49814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:23.733565 2026] [core:error] [pid 2974078:tid 2974078] (13)Permission denied: [client 216.73.216.199:45362] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory82/subsystem/uevent
[Thu Jul 30 11:55:23.845589 2026] [authz_core:error] [pid 2974079:tid 2974079] [client 57.141.0.2:48634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:23.846249 2026] [authz_core:error] [pid 2974079:tid 2974079] [client 57.141.0.2:48634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:24.011198 2026] [ssl:error] [pid 2974080:tid 2974080] (EAI 2)Name or service not known: [client 144.76.19.72:21254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:24.011240 2026] [ssl:error] [pid 2974080:tid 2974080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:24.068082 2026] [ssl:error] [pid 2974082:tid 2974082] (EAI 2)Name or service not known: [client 144.76.19.72:21270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:24.068117 2026] [ssl:error] [pid 2974082:tid 2974082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:24.356548 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.40:56884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:24.357203 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.40:56884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:24.513681 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.60:49830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:24.514307 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.60:49830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:24.564047 2026] [lsapi:warn] [pid 2973062:tid 2973062] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:55:25.041542 2026] [ssl:error] [pid 2974078:tid 2974078] (70014)End of file found: [client 216.73.216.199:45362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:25.475979 2026] [authz_core:error] [pid 2974077:tid 2974077] [client 57.141.0.9:54304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:25.476613 2026] [authz_core:error] [pid 2974077:tid 2974077] [client 57.141.0.9:54304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:25.546694 2026] [ssl:error] [pid 2974079:tid 2974079] (70014)End of file found: [client 216.73.216.199:35165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:25.605064 2026] [authz_core:error] [pid 2974081:tid 2974081] [client 57.141.0.19:31792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:25.605712 2026] [authz_core:error] [pid 2974081:tid 2974081] [client 57.141.0.19:31792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:25.699916 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.27:59848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:25.700567 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.27:59848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:25.874228 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.1:24652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:25.874850 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.1:24652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:26.311392 2026] [security2:error] [pid 2972477:tid 2972477] [client 43.165.67.31:57626] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.p2studio.co.uk"] [uri "/"] [unique_id "amstnkiILMWgTSC_GLC_BwAAABI"]
[Thu Jul 30 11:55:26.688221 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.26:22318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:26.688849 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.26:22318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:26.758653 2026] [authz_core:error] [pid 2974076:tid 2974076] [client 57.141.0.34:51804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:26.759332 2026] [authz_core:error] [pid 2974076:tid 2974076] [client 57.141.0.34:51804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:26.973429 2026] [security2:error] [pid 2965137:tid 2965137] [client 114.119.135.136:45097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~6-11-2019"] [unique_id "amstntzmkxGWhaIDLc5dhQAAAEo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~6-11-2019
[Thu Jul 30 11:55:27.076463 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.1:24660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:27.077170 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.1:24660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:27.121317 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:21280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:27.121345 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:27.174391 2026] [ssl:error] [pid 2974014:tid 2974014] (EAI 2)Name or service not known: [client 144.76.19.72:21290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:27.174426 2026] [ssl:error] [pid 2974014:tid 2974014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:27.189966 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.33:51834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:27.190637 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.33:51834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:27.640303 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.71:64670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:27.641014 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.71:64670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:28.090275 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.67:45062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:28.090904 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.67:45062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:28.353135 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.28:29650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:28.353758 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.28:29650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:28.690200 2026] [security2:error] [pid 2959154:tid 2959154] [client 114.119.135.136:45103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~6-11-2019"] [unique_id "amstoCMIBy93HDeMjLZQPwAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~6-11-2019
[Thu Jul 30 11:55:28.891081 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.41:57284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:28.891789 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.41:57284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:29.336857 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 66.249.66.33:62866] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:55:29.339571 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 66.249.66.33:62866] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:55:29.460971 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.26:22322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:29.461599 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.26:22322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:29.836150 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.3:20360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:29.836814 2026] [authz_core:error] [pid 2968632:tid 2968632] [client 57.141.0.3:20360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:30.211244 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.27:59858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:30.211872 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.27:59858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:30.229545 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:44458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:30.229593 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:30.263650 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.35:25952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:30.264276 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.35:25952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:30.284496 2026] [ssl:error] [pid 2901124:tid 2901124] (EAI 2)Name or service not known: [client 144.76.19.72:44470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:30.284535 2026] [ssl:error] [pid 2901124:tid 2901124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:31.019942 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.36:37754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:31.020575 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.36:37754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:31.059927 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.55:59016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:31.060555 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.55:59016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:31.095924 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.5:21494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:31.096552 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.5:21494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:31.122759 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.58:50660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:31.123370 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.58:50660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:31.161902 2026] [cgi:error] [pid 2955789:tid 2955789] [client 216.73.216.199:44154] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/gnupg/help.pl.txt: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:55:31.161973 2026] [cgi:error] [pid 2955789:tid 2955789] [client 216.73.216.199:44154] End of script output before headers: help.pl.txt
[Thu Jul 30 11:55:31.999722 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.35:25956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:32.000431 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.35:25956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:32.223435 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.19:31820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:32.224056 2026] [authz_core:error] [pid 2965137:tid 2965137] [client 57.141.0.19:31820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:32.231795 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.2:20360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:32.232408 2026] [authz_core:error] [pid 2961097:tid 2961097] [client 57.141.0.2:20360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:32.247941 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.42:44592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:32.248571 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.42:44592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:32.994205 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.18:54822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:32.994890 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.18:54822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:33.267422 2026] [ssl:error] [pid 2973061:tid 2973061] (70014)End of file found: [client 216.73.216.199:63117] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:33.342032 2026] [ssl:error] [pid 2961097:tid 2961097] (EAI 2)Name or service not known: [client 144.76.19.72:44472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:33.342065 2026] [ssl:error] [pid 2961097:tid 2961097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:33.392313 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.15:58332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:33.392990 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.15:58332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:33.398749 2026] [ssl:error] [pid 2968677:tid 2968677] (EAI 2)Name or service not known: [client 144.76.19.72:44482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:33.398805 2026] [ssl:error] [pid 2968677:tid 2968677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:33.889753 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.42:44622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:33.890402 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.42:44622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:34.098752 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.37:48294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:34.099376 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.37:48294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:34.601865 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.71:45932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:34.602522 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.71:45932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:34.893656 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.35:25964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:34.894281 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.35:25964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:35.186113 2026] [lsapi:warn] [pid 2937855:tid 2937855] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:55:36.732187 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.54:44070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:36.732839 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.54:44070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:36.769891 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.71:45934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:36.770521 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.71:45934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:36.910516 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.71:45938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:36.911196 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.71:45938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:36.938541 2026] [ssl:error] [pid 2973948:tid 2973948] (EAI 2)Name or service not known: [client 144.76.19.72:44492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:36.938567 2026] [ssl:error] [pid 2973948:tid 2973948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:36.941033 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.27:60368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:36.941656 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.27:60368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:36.958964 2026] [authz_core:error] [pid 2973001:tid 2973001] [client 57.141.0.67:45080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:36.959583 2026] [authz_core:error] [pid 2973001:tid 2973001] [client 57.141.0.67:45080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:37.115462 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.39:46882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:37.116113 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.39:46882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:37.202940 2026] [ssl:error] [pid 2970356:tid 2970356] (EAI 2)Name or service not known: [client 144.76.19.72:44498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:37.202975 2026] [ssl:error] [pid 2970356:tid 2970356] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:37.245594 2026] [authz_core:error] [pid 2971529:tid 2971529] [client 57.141.0.14:42940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:37.246220 2026] [authz_core:error] [pid 2971529:tid 2971529] [client 57.141.0.14:42940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:37.555874 2026] [ssl:error] [pid 2961097:tid 2961097] (70014)End of file found: [client 216.73.216.199:62200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:37.634161 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.30:60612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:37.634790 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.30:60612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:37.750186 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.38:34268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:37.750807 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.38:34268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:38.461509 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.49:30756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:38.462130 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.49:30756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:38.902892 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.55:63416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:38.903529 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.55:63416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:39.287083 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.52:33714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:39.287706 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.52:33714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:39.556922 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.19:44122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:39.557633 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.19:44122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:39.627285 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.30:60618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:39.627900 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.30:60618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:40.036131 2026] [ssl:error] [pid 2974079:tid 2974079] (70014)End of file found: [client 216.73.216.199:34141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:40.133470 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.44:25408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:40.134107 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.44:25408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:40.258497 2026] [ssl:error] [pid 2974017:tid 2974017] (EAI 2)Name or service not known: [client 144.76.19.72:65052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:40.258577 2026] [ssl:error] [pid 2974017:tid 2974017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:40.315080 2026] [ssl:error] [pid 2971005:tid 2971005] (EAI 2)Name or service not known: [client 144.76.19.72:65056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:40.315107 2026] [ssl:error] [pid 2971005:tid 2971005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:40.950427 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.12:45428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:40.951050 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.12:45428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:41.052320 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.61:31140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:41.052938 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.61:31140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:41.092977 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.59:21518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:41.093607 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.59:21518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:41.340298 2026] [security2:error] [pid 2974081:tid 2974081] [client 43.161.234.148:56780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spurr.org.uk"] [uri "/"] [unique_id "amstrV8f_c5NUiH_LyXhNAAAADI"]
[Thu Jul 30 11:55:41.383385 2026] [authz_core:error] [pid 2973001:tid 2973001] [client 57.141.0.15:50742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:41.384624 2026] [authz_core:error] [pid 2973001:tid 2973001] [client 57.141.0.15:50742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:41.741081 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.13:37080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:41.741710 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.13:37080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:41.950013 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.50:50624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:41.950660 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.50:50624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:42.184963 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.46:41486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:42.185600 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.46:41486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:42.477396 2026] [ssl:error] [pid 2968743:tid 2968743] (70014)End of file found: [client 216.73.216.199:39828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:42.651593 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:28912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:42.652219 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:28912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:43.030761 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.168:44068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:55:43.030791 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.168:44068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:55:43.369488 2026] [ssl:error] [pid 2973948:tid 2973948] (EAI 2)Name or service not known: [client 144.76.19.72:65064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:43.369520 2026] [ssl:error] [pid 2973948:tid 2973948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:43.421093 2026] [ssl:error] [pid 2975020:tid 2975020] (EAI 2)Name or service not known: [client 144.76.19.72:65078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:43.421122 2026] [ssl:error] [pid 2975020:tid 2975020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:43.482743 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.35:59190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:43.483385 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.35:59190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:43.529383 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.12:45446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:43.530084 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.12:45446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:43.773080 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.48:53616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:43.773706 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.48:53616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:43.977783 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.10:36900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:43.978409 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.10:36900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:44.369477 2026] [security2:error] [pid 2973064:tid 2973064] [client 85.208.96.210:50064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/santa-clarita-police-report"] [unique_id "amstsLLeE20khp1OkE4uuwAAACs"]
[Thu Jul 30 11:55:44.384333 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.6:63950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:44.384949 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.6:63950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:44.439854 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.19:20608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:44.440481 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.19:20608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:44.896955 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.17:52462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:44.897587 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.17:52462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:44.967621 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 66.249.66.34:51295] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:55:44.970295 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 66.249.66.34:51295] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:55:45.446602 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.67:42248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:45.447229 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.67:42248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:45.608127 2026] [lsapi:warn] [pid 2971563:tid 2971563] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:55:45.634002 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.36:53372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:45.634639 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.36:53372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:45.994999 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.20:36064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:45.995712 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.20:36064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:46.455133 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.15:53672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:46.455757 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.15:53672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:46.515421 2026] [ssl:error] [pid 2975020:tid 2975020] (EAI 2)Name or service not known: [client 144.76.19.72:65086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:46.515464 2026] [ssl:error] [pid 2975020:tid 2975020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:46.539878 2026] [authz_core:error] [pid 2974815:tid 2974815] [client 57.141.0.9:52162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:46.540510 2026] [authz_core:error] [pid 2974815:tid 2974815] [client 57.141.0.9:52162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:46.573087 2026] [ssl:error] [pid 2974083:tid 2974083] (EAI 2)Name or service not known: [client 144.76.19.72:65102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:46.573123 2026] [ssl:error] [pid 2974083:tid 2974083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:46.759628 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.53:25172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:46.760296 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.53:25172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:47.610620 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.19:20626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:47.611240 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.19:20626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:47.743552 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.43:35798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:47.744178 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.43:35798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:47.869992 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.63:27444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:47.870623 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.63:27444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:48.826042 2026] [ssl:error] [pid 2971005:tid 2971005] (70014)End of file found: [client 216.73.216.199:9474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:48.979130 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.5:60108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:48.979757 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.5:60108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:49.058202 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.34:40838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:49.058844 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.34:40838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:49.138426 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.48:55558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:49.139049 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.48:55558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:49.519551 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.18:29916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:49.520174 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.18:29916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:49.628272 2026] [ssl:error] [pid 2974014:tid 2974014] (EAI 2)Name or service not known: [client 144.76.19.72:40400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:49.628316 2026] [ssl:error] [pid 2974014:tid 2974014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:49.681313 2026] [ssl:error] [pid 2974017:tid 2974017] (EAI 2)Name or service not known: [client 144.76.19.72:40414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:49.681341 2026] [ssl:error] [pid 2974017:tid 2974017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:49.819776 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.17:64856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:49.820389 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.17:64856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:50.234621 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.63:27452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:50.235900 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.63:27452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:50.337215 2026] [authz_core:error] [pid 2974815:tid 2974815] [client 57.141.0.18:23702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:50.337835 2026] [authz_core:error] [pid 2974815:tid 2974815] [client 57.141.0.18:23702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:50.600238 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.69:23472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:50.600887 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.69:23472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:51.458820 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.9:52178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:51.459445 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.9:52178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:51.481140 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.23:26556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:51.481826 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.23:26556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:51.804590 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.58:29040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:51.805213 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.58:29040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:52.147585 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.66:31808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:52.148211 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.66:31808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:52.229051 2026] [security2:error] [pid 2970356:tid 2970356] [client 74.7.242.57:57552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.clucasdesign.com"] [uri "/"] [unique_id "amstuARVpiju2UGLp37ongAAABE"]
[Thu Jul 30 11:55:52.229590 2026] [security2:error] [pid 2973061:tid 2973061] [client 127.0.0.1:49694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "amstuL5JFsz3KmbbBgPcEgAAAA0"]
[Thu Jul 30 11:55:52.737493 2026] [ssl:error] [pid 2974017:tid 2974017] (EAI 2)Name or service not known: [client 144.76.19.72:40420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:52.737536 2026] [ssl:error] [pid 2974017:tid 2974017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:52.751447 2026] [core:error] [pid 2970359:tid 2970359] (13)Permission denied: [client 216.73.216.199:60985] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory80/subsystem/uevent
[Thu Jul 30 11:55:52.791164 2026] [ssl:error] [pid 2970356:tid 2970356] (EAI 2)Name or service not known: [client 144.76.19.72:40436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:52.791190 2026] [ssl:error] [pid 2970356:tid 2970356] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:53.054223 2026] [ssl:error] [pid 2970359:tid 2970359] (70014)End of file found: [client 216.73.216.199:60985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:53.111767 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.41:35394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:53.112390 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.41:35394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:53.189576 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.65:46926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:53.190599 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.65:46926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:53.287009 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.5:60112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:53.287729 2026] [authz_core:error] [pid 2970356:tid 2970356] [client 57.141.0.5:60112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:53.809074 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.56:57882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:53.809698 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.56:57882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:53.882635 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.12:29266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:53.883252 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.12:29266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:54.355165 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.11:61634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:54.355858 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.11:61634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:54.456771 2026] [ssl:error] [pid 2973901:tid 2973901] (70014)End of file found: [client 216.73.216.199:40838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:55.077048 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.52:30068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:55.077754 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.52:30068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:55.160534 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.22:33206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:55.161161 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.22:33206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:55.369524 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.28:24704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:55.370221 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.28:24704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:55.768530 2026] [ssl:error] [pid 2968744:tid 2968744] (70014)End of file found: [client 216.73.216.199:10319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:55:55.844405 2026] [ssl:error] [pid 2968743:tid 2968743] (EAI 2)Name or service not known: [client 144.76.19.72:40438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:55.844441 2026] [ssl:error] [pid 2968743:tid 2968743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:55.897997 2026] [ssl:error] [pid 2974768:tid 2974768] (EAI 2)Name or service not known: [client 144.76.19.72:40452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:55.898029 2026] [ssl:error] [pid 2974768:tid 2974768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:56.132180 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.70:32322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:56.132895 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.70:32322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:56.288088 2026] [lsapi:warn] [pid 2971563:tid 2971563] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:55:56.348110 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.65:46938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:56.349138 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.65:46938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:56.553198 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.67:39180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:56.553905 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.67:39180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:56.604609 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.21:57446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:56.605279 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.21:57446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:56.686789 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.68:29518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:56.687428 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.68:29518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:57.391861 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.54:44700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:57.392594 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.54:44700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:57.394229 2026] [security2:error] [pid 2973286:tid 2973286] [client 110.249.201.118:63472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amstvcWWEzLHcRPUzT8t8QAAACw"]
[Thu Jul 30 11:55:57.471251 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.26:21780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:57.471906 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.26:21780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:57.474975 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.11:61648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:57.475616 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.11:61648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:57.698604 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.2:63570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:57.699230 2026] [authz_core:error] [pid 2973002:tid 2973002] [client 57.141.0.2:63570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:57.861670 2026] [access_compat:error] [pid 2973948:tid 2973948] [client 45.158.164.139:46686] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 11:55:58.698726 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.29:64184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:58.699362 2026] [authz_core:error] [pid 2970727:tid 2970727] [client 57.141.0.29:64184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:58.715297 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.23:51760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:58.715928 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.23:51760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:58.953536 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:40466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:58.953563 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:59.009265 2026] [ssl:error] [pid 2970727:tid 2970727] (EAI 2)Name or service not known: [client 144.76.19.72:40476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:55:59.009300 2026] [ssl:error] [pid 2970727:tid 2970727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:55:59.092414 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.61:23928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:59.093046 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.61:23928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:59.139144 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.13:24788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:59.139807 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.13:24788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:59.721806 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.18:56778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:59.722447 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.18:56778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:55:59.747151 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.10:29306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:55:59.747836 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.10:29306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:00.418679 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.31:58360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:00.419324 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.31:58360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:00.828162 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.18:56788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:00.828782 2026] [authz_core:error] [pid 2972477:tid 2972477] [client 57.141.0.18:56788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:00.834044 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.50:20552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:00.834746 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.50:20552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:00.980053 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.66:31816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:00.980753 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.66:31816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:01.570339 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.8:60988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:01.571083 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.8:60988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:02.065671 2026] [ssl:error] [pid 2974767:tid 2974767] (EAI 2)Name or service not known: [client 144.76.19.72:37618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:02.065714 2026] [ssl:error] [pid 2974767:tid 2974767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:02.115482 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.33:60782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:02.116137 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.33:60782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:02.118905 2026] [ssl:error] [pid 2974767:tid 2974767] (EAI 2)Name or service not known: [client 144.76.19.72:37630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:02.118948 2026] [ssl:error] [pid 2974767:tid 2974767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:02.415717 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.69:60044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:02.416370 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.69:60044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:02.773920 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:61264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:02.774576 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:61264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:02.916526 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 34.207.103.13:57080] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 11:56:02.918640 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.51:46718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:02.919276 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.51:46718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:02.923329 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 34.207.103.13:57080] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 11:56:03.692797 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.60:29868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:03.693493 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.60:29868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:04.271218 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:38090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:04.272017 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:38090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:04.367928 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.28:38676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:04.368558 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.28:38676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:04.675916 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.38:54760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:04.676550 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.38:54760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:05.175362 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:37640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:05.175406 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:05.211520 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.53:56404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:05.212163 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.53:56404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:05.228726 2026] [ssl:error] [pid 2973061:tid 2973061] (EAI 2)Name or service not known: [client 144.76.19.72:37656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:05.228779 2026] [ssl:error] [pid 2973061:tid 2973061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:05.612930 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.24:48410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:05.613564 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.24:48410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:05.971579 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.36:43766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:05.972209 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.36:43766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:06.091359 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.13:48994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:06.092001 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.13:48994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:06.147480 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.61:44846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:06.148113 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.61:44846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:06.328358 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.36:43778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:06.329046 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.36:43778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:06.786780 2026] [lsapi:warn] [pid 2973001:tid 2973001] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:56:07.227332 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.41:53874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:07.227950 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.41:53874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:07.346511 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.34:38056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:07.347164 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.34:38056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:07.390678 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.55:46310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:07.391402 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.55:46310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:07.572278 2026] [ssl:error] [pid 2970359:tid 2970359] (70014)End of file found: [client 216.73.216.199:49950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:07.754418 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.13:49010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:07.755475 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.13:49010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:08.206944 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.50:20564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:08.207664 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.50:20564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:08.283900 2026] [ssl:error] [pid 2937855:tid 2937855] (EAI 2)Name or service not known: [client 144.76.19.72:37666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:08.283945 2026] [ssl:error] [pid 2937855:tid 2937855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:08.341540 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:37668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:08.341578 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:08.387932 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.15:40672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:08.388644 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.15:40672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:08.819052 2026] [ssl:error] [pid 2974723:tid 2974723] (70014)End of file found: [client 216.73.216.199:51157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:08.835643 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.38:40426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:08.836275 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.38:40426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:08.928905 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.18:56804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:08.929577 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.18:56804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:09.282143 2026] [core:error] [pid 2973948:tid 2973948] [client 66.249.64.170:63754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:09.282181 2026] [core:error] [pid 2973948:tid 2973948] [client 66.249.64.170:63754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:09.915016 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.30:30326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:09.915719 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.30:30326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:10.030601 2026] [core:error] [pid 2972412:tid 2972412] [client 66.249.66.168:47514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:10.030632 2026] [core:error] [pid 2972412:tid 2972412] [client 66.249.66.168:47514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:10.030754 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.26:27140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:10.031398 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.26:27140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:10.073799 2026] [core:error] [pid 2974017:tid 2974017] [client 66.249.66.167:53962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:10.073826 2026] [core:error] [pid 2974017:tid 2974017] [client 66.249.66.167:53962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:10.330936 2026] [ssl:error] [pid 2968677:tid 2968677] (70014)End of file found: [client 216.73.216.199:13054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:10.369744 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 66.249.66.34:38660] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:56:10.372712 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 66.249.66.34:38660] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:56:10.381587 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.20:49164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:10.382664 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.20:49164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:10.531745 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.1:28652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:10.532398 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.1:28652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:10.559475 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.9:63318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:10.560178 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.9:63318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:10.857205 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.65:48598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:10.857822 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.65:48598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:11.260198 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.32:30272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:11.260892 2026] [authz_core:error] [pid 2964562:tid 2964562] [client 57.141.0.32:30272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:11.399484 2026] [ssl:error] [pid 2974017:tid 2974017] (EAI 2)Name or service not known: [client 144.76.19.72:22570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:11.399529 2026] [ssl:error] [pid 2974017:tid 2974017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:11.456534 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:22580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:11.456582 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:11.656537 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.47:20152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:11.657305 2026] [authz_core:error] [pid 2975698:tid 2975698] [client 57.141.0.47:20152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:12.008055 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.18:62294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:12.008802 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.18:62294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:12.234477 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.62:35104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:12.235105 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.62:35104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:12.571573 2026] [access_compat:error] [pid 2974816:tid 2974816] [client 185.242.177.4:58698] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 11:56:12.909979 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.3:38000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:12.910615 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.3:38000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:12.965099 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.70:30110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:12.965716 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.70:30110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:13.338676 2026] [core:error] [pid 2948863:tid 2948863] (13)Permission denied: [client 216.73.216.199:9681] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS1/irq
[Thu Jul 30 11:56:13.517172 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.58:58128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:13.517791 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.58:58128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:13.579856 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.31:20022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:13.580482 2026] [authz_core:error] [pid 2901124:tid 2901124] [client 57.141.0.31:20022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:14.523115 2026] [ssl:error] [pid 2974723:tid 2974723] (EAI 2)Name or service not known: [client 144.76.19.72:22592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:14.523154 2026] [ssl:error] [pid 2974723:tid 2974723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:14.595858 2026] [ssl:error] [pid 2973947:tid 2973947] (EAI 2)Name or service not known: [client 144.76.19.72:22602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:14.595900 2026] [ssl:error] [pid 2973947:tid 2973947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:14.629649 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.26:63892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:14.630285 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.26:63892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:14.986473 2026] [authz_core:error] [pid 2971529:tid 2971529] [client 57.141.0.69:25400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:14.987105 2026] [authz_core:error] [pid 2971529:tid 2971529] [client 57.141.0.69:25400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:15.071893 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.21:55352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:15.072573 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.21:55352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:15.307227 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.46:22890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:15.307863 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.46:22890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:15.447867 2026] [core:error] [pid 2948863:tid 2948863] (13)Permission denied: [client 216.73.216.199:9681] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/named.ca
[Thu Jul 30 11:56:15.691792 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.17:32976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:15.692402 2026] [authz_core:error] [pid 2973901:tid 2973901] [client 57.141.0.17:32976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:16.259056 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.37:32630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:16.259701 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.37:32630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:16.260720 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.22:50640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:16.261359 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.22:50640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:16.351904 2026] [ssl:error] [pid 2948863:tid 2948863] (70014)End of file found: [client 216.73.216.199:9681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:16.551992 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.19:25160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:16.552739 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.19:25160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:16.781689 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.8:51590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:16.782309 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.8:51590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:17.270303 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.5:48632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:17.270945 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.5:48632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:17.723005 2026] [lsapi:warn] [pid 2964033:tid 2964033] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:56:17.816266 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.65:53148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:17.816884 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.65:53148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:17.973150 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.38:40440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:17.973801 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.38:40440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:18.228607 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.63:57986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:18.229250 2026] [authz_core:error] [pid 2950312:tid 2950312] [client 57.141.0.63:57986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:18.392126 2026] [ssl:error] [pid 2974767:tid 2974767] (EAI 2)Name or service not known: [client 144.76.19.72:22612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:18.392175 2026] [ssl:error] [pid 2974767:tid 2974767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:18.453724 2026] [ssl:error] [pid 2973062:tid 2973062] (EAI 2)Name or service not known: [client 144.76.19.72:22614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:18.453760 2026] [ssl:error] [pid 2973062:tid 2973062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:18.767450 2026] [ssl:error] [pid 2964034:tid 2964034] (70014)End of file found: [client 216.73.216.199:2890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:19.215110 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.30:45684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:19.215733 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.30:45684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:19.670976 2026] [ssl:error] [pid 2974082:tid 2974082] (70014)End of file found: [client 216.73.216.199:55120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:20.143044 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.45:38788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:20.143682 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.45:38788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:20.256846 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.39:28882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:20.257516 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.39:28882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:20.394735 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.10:48356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:20.395368 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.10:48356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:20.790852 2026] [core:error] [pid 2971563:tid 2971563] [client 57.141.0.44:20958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:20.790873 2026] [core:error] [pid 2971563:tid 2971563] [client 57.141.0.44:20958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:20.918231 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.17:53928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:20.918852 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.17:53928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:21.155644 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.36:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:21.156273 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.36:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:21.512857 2026] [ssl:error] [pid 2971563:tid 2971563] (EAI 2)Name or service not known: [client 144.76.19.72:26492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:21.512895 2026] [ssl:error] [pid 2971563:tid 2971563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:21.566856 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.24:27222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:21.567482 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.24:27222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:21.568199 2026] [ssl:error] [pid 2973286:tid 2973286] (EAI 2)Name or service not known: [client 144.76.19.72:26508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:21.568217 2026] [ssl:error] [pid 2973286:tid 2973286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:21.707529 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.39:28904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:21.708151 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.39:28904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:22.378111 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.18:49594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:22.378726 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.18:49594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:22.575982 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.55:49764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:22.576613 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.55:49764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:22.649058 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.14:25610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:22.649687 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.14:25610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:22.772832 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.56:38210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:22.773452 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.56:38210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:22.987161 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.56:38226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:22.987777 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.56:38226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:23.302583 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.35:41552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:23.303207 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.35:41552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:23.425311 2026] [authz_core:error] [pid 2976708:tid 2976708] [client 57.141.0.41:50898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:23.425953 2026] [authz_core:error] [pid 2976708:tid 2976708] [client 57.141.0.41:50898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:23.531754 2026] [ssl:error] [pid 2971563:tid 2971563] (70014)End of file found: [client 216.73.216.199:27750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:23.578162 2026] [security2:error] [pid 2937855:tid 2937855] [client 47.245.87.180:55007] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amst12iRLhCIgTgu6BOJ8gAAADU"]
[Thu Jul 30 11:56:23.578213 2026] [security2:error] [pid 2937855:tid 2937855] [client 47.245.87.180:55007] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amst12iRLhCIgTgu6BOJ8gAAADU"]
[Thu Jul 30 11:56:23.578458 2026] [security2:error] [pid 2937855:tid 2937855] [client 47.245.87.180:55007] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amst12iRLhCIgTgu6BOJ8gAAADU"]
[Thu Jul 30 11:56:24.233341 2026] [ssl:error] [pid 2937855:tid 2937855] (70014)End of file found: [client 216.73.216.199:52481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:24.397062 2026] [security2:error] [pid 2974016:tid 2974016] [client 43.163.80.48:47922] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unique-pr.co.uk"] [uri "/"] [unique_id "amst2Cc0-VzjpdiVpIt4cAAAAB8"]
[Thu Jul 30 11:56:24.621295 2026] [ssl:error] [pid 2974078:tid 2974078] (EAI 2)Name or service not known: [client 144.76.19.72:26520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:24.621333 2026] [ssl:error] [pid 2974078:tid 2974078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:24.669179 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.26:27958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:24.669819 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.26:27958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:24.696561 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:26524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:24.696587 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:24.738994 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.24:27766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:24.739618 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.24:27766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:24.741841 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.11:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:24.742479 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.11:33114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:25.052607 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.6:65442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:25.053237 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.6:65442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:25.332462 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.35:41556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:25.333100 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.35:41556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:25.576739 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.40:37098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:25.577360 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.40:37098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:25.941938 2026] [security2:error] [pid 2972412:tid 2972412] [client 150.5.132.94:20995] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amst2V_dyke6J2tmYXitKwAAAAM"]
[Thu Jul 30 11:56:25.941992 2026] [security2:error] [pid 2972412:tid 2972412] [client 150.5.132.94:20995] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amst2V_dyke6J2tmYXitKwAAAAM"]
[Thu Jul 30 11:56:25.942243 2026] [security2:error] [pid 2972412:tid 2972412] [client 150.5.132.94:20995] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amst2V_dyke6J2tmYXitKwAAAAM"]
[Thu Jul 30 11:56:26.048966 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.7:39408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:26.049591 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.7:39408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:26.192851 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.65:21986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:26.193470 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.65:21986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:26.552300 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.34:63158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:26.552927 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.34:63158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:27.748551 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:26546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:27.748578 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:27.803277 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:26560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:27.803303 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:28.004484 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.4:54118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:28.005288 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.4:54118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:28.138629 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.56:31240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:28.139280 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.56:31240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:28.548848 2026] [lsapi:warn] [pid 2959154:tid 2959154] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:56:28.608817 2026] [security2:error] [pid 2964033:tid 2964033] [client 150.5.132.94:14393] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amst3BeOit5I2MA6G8sP5wAAACY"]
[Thu Jul 30 11:56:28.608874 2026] [security2:error] [pid 2964033:tid 2964033] [client 150.5.132.94:14393] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amst3BeOit5I2MA6G8sP5wAAACY"]
[Thu Jul 30 11:56:28.609191 2026] [security2:error] [pid 2964033:tid 2964033] [client 150.5.132.94:14393] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amst3BeOit5I2MA6G8sP5wAAACY"]
[Thu Jul 30 11:56:28.703218 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.60:45256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:28.703833 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.60:45256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:28.736032 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.53:62286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:28.736677 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.53:62286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:28.747218 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.70:50620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:28.747843 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.70:50620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:28.961525 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.54:30392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:28.962155 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.54:30392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:29.228661 2026] [ssl:error] [pid 2973064:tid 2973064] (70014)End of file found: [client 216.73.216.199:5008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:29.234992 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.61:51774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:29.235621 2026] [authz_core:error] [pid 2974767:tid 2974767] [client 57.141.0.61:51774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:29.477432 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.33:26002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:29.478052 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.33:26002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:29.726867 2026] [ssl:error] [pid 2968677:tid 2968677] (70014)End of file found: [client 216.73.216.199:1354] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:29.728851 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.8:46358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:29.729472 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.8:46358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:30.170984 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.60:45258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:30.171617 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.60:45258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:30.525412 2026] [security2:error] [pid 2973948:tid 2973948] [client 46.225.123.58:42194] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amst3ki4zFWhmbyaWHkjiQAAAA8"]
[Thu Jul 30 11:56:30.769917 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.17:36188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:30.770543 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.17:36188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:30.858015 2026] [ssl:error] [pid 2976708:tid 2976708] (EAI 2)Name or service not known: [client 144.76.19.72:36646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:30.858048 2026] [ssl:error] [pid 2976708:tid 2976708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:30.914725 2026] [ssl:error] [pid 2968743:tid 2968743] (EAI 2)Name or service not known: [client 144.76.19.72:36652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:30.914752 2026] [ssl:error] [pid 2968743:tid 2968743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:31.355100 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.38:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:31.355722 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.38:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:31.580643 2026] [authz_core:error] [pid 2976708:tid 2976708] [client 57.141.0.45:26374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:31.581276 2026] [authz_core:error] [pid 2976708:tid 2976708] [client 57.141.0.45:26374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:31.797010 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.9:65042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:31.797640 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.9:65042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:31.807312 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.70:50628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:31.807916 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.70:50628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:31.835342 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.2:27336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:31.835949 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.2:27336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:31.956834 2026] [core:error] [pid 2959154:tid 2959154] (13)Permission denied: [client 216.73.216.199:54000] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/wms-firearmstraining.org.db
[Thu Jul 30 11:56:32.262274 2026] [ssl:error] [pid 2959154:tid 2959154] (70014)End of file found: [client 216.73.216.199:54000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:32.759855 2026] [ssl:error] [pid 2976711:tid 2976711] (70014)End of file found: [client 216.73.216.199:17797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:32.831351 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.65:48754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:32.831968 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.65:48754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:32.880140 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.43:46930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:32.880757 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.43:46930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:33.603316 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.18:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:33.603937 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.18:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:33.631142 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.35:54128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:33.631757 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.35:54128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:33.774019 2026] [ssl:error] [pid 2968743:tid 2968743] (70014)End of file found: [client 216.73.216.199:45144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:33.840024 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.15:41822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:33.840662 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.15:41822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:33.872493 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.15:41834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:33.873123 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.15:41834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:33.969744 2026] [ssl:error] [pid 2976710:tid 2976710] (EAI 2)Name or service not known: [client 144.76.19.72:36660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:33.969775 2026] [ssl:error] [pid 2976710:tid 2976710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:34.004170 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.56:31272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:34.004791 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.56:31272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:34.024401 2026] [ssl:error] [pid 2972412:tid 2972412] (EAI 2)Name or service not known: [client 144.76.19.72:36672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:34.024422 2026] [ssl:error] [pid 2972412:tid 2972412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:34.201359 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.37:54964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:34.201979 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.37:54964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:34.489492 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.47:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:34.490125 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.47:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:34.807657 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.22:34984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:34.808298 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.22:34984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:35.743675 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.16:27666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:35.744323 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.16:27666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:35.753436 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.4:25888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:35.754062 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.4:25888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:36.510990 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.48:49578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:36.511621 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.48:49578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:36.723263 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.31:34224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:36.723905 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.31:34224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:37.076397 2026] [ssl:error] [pid 2977320:tid 2977320] (EAI 2)Name or service not known: [client 144.76.19.72:36674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:37.076440 2026] [ssl:error] [pid 2977320:tid 2977320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:37.129606 2026] [ssl:error] [pid 2968677:tid 2968677] (EAI 2)Name or service not known: [client 144.76.19.72:36690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:37.129639 2026] [ssl:error] [pid 2968677:tid 2968677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:37.295686 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:52892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:37.296311 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:52892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:37.311400 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.27:29642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:37.312320 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.27:29642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:37.405545 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.36:58806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:37.406168 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.36:58806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:37.865831 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.13:39950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:37.866478 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.13:39950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:38.012668 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.63:47596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:38.013291 2026] [authz_core:error] [pid 2973948:tid 2973948] [client 57.141.0.63:47596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:38.415212 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.25:24190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:38.415831 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.25:24190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:38.700695 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.36:58822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:38.701319 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.36:58822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:38.793404 2026] [ssl:error] [pid 2974017:tid 2974017] (70014)End of file found: [client 216.73.216.199:12872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:38.896212 2026] [ssl:error] [pid 2973286:tid 2973286] (70014)End of file found: [client 216.73.216.199:9471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:39.382088 2026] [ssl:error] [pid 2974768:tid 2974768] (70014)End of file found: [client 216.73.216.199:56863] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:39.507573 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.67:43890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:39.508198 2026] [authz_core:error] [pid 2937855:tid 2937855] [client 57.141.0.67:43890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:39.838113 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.20:41316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:39.838735 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.20:41316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:40.160167 2026] [lsapi:warn] [pid 2976663:tid 2976663] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:56:40.188590 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:49290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:40.188649 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:40.199118 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.27:29646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:40.199746 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.27:29646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:40.242655 2026] [ssl:error] [pid 2968677:tid 2968677] (EAI 2)Name or service not known: [client 144.76.19.72:49304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:40.242682 2026] [ssl:error] [pid 2968677:tid 2968677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:40.726043 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.11:37752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:40.726691 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.11:37752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:40.927023 2026] [core:error] [pid 2968743:tid 2968743] [client 57.141.0.12:33438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:40.927047 2026] [core:error] [pid 2968743:tid 2968743] [client 57.141.0.12:33438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:41.074479 2026] [authz_core:error] [pid 2977357:tid 2977357] [client 57.141.0.29:56142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:41.075721 2026] [authz_core:error] [pid 2977357:tid 2977357] [client 57.141.0.29:56142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:41.234568 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.48:53426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:41.235184 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.48:53426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:41.664738 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.22:50620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:41.665363 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.22:50620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:41.875818 2026] [authz_core:error] [pid 2977357:tid 2977357] [client 57.141.0.2:58096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:41.876437 2026] [authz_core:error] [pid 2977357:tid 2977357] [client 57.141.0.2:58096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:41.964913 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.20:41326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:41.965543 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.20:41326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:42.586636 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.70:43598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:42.587268 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.70:43598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:42.716030 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.4:59646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:42.716681 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.4:59646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:42.767749 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.58:29530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:42.768369 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.58:29530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:43.296730 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:49318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:43.296756 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:43.349619 2026] [ssl:error] [pid 2976822:tid 2976822] (EAI 2)Name or service not known: [client 144.76.19.72:49330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:43.349657 2026] [ssl:error] [pid 2976822:tid 2976822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:43.484827 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.17:29562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:43.485452 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.17:29562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:43.570837 2026] [core:error] [pid 2971005:tid 2971005] [client 66.249.66.194:43867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:43.570864 2026] [core:error] [pid 2971005:tid 2971005] [client 66.249.66.194:43867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:43.651993 2026] [authz_core:error] [pid 2977320:tid 2977320] [client 57.141.0.15:60842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:43.652653 2026] [authz_core:error] [pid 2977320:tid 2977320] [client 57.141.0.15:60842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:44.076214 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.47:58330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:44.076834 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.47:58330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:44.656169 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.27:34216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:44.656794 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.27:34216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:44.697351 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.51:49322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:44.697967 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.51:49322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:44.733410 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.66:41580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:44.734033 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.66:41580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:45.112818 2026] [security2:error] [pid 2974768:tid 2974768] [client 185.191.171.9:40718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/ese-argumentuese-teknologjia"] [unique_id "amst7S9Vmk35Yxyo1E2uiAAAABA"]
[Thu Jul 30 11:56:45.328690 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.54:38560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:45.329340 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.54:38560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:45.931918 2026] [core:error] [pid 2955789:tid 2955789] [client 66.249.66.3:47125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:45.931947 2026] [core:error] [pid 2955789:tid 2955789] [client 66.249.66.3:47125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:46.260583 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.23:29884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:46.261227 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.23:29884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:46.406601 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:49336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:46.406632 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:46.463632 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:49352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:46.463674 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:46.578441 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.43:38156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:46.579060 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.43:38156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:46.762533 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.61:58862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:46.763152 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.61:58862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:47.151572 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.9:47062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:47.152199 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.9:47062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:47.184474 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.54:38566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:47.185110 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.54:38566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:47.441896 2026] [authz_core:error] [pid 2976708:tid 2976708] [client 57.141.0.43:38158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:47.442535 2026] [authz_core:error] [pid 2976708:tid 2976708] [client 57.141.0.43:38158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:47.571247 2026] [core:error] [pid 2971005:tid 2971005] (13)Permission denied: [client 216.73.216.199:48687] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty37/subsystem/ttyS0/line
[Thu Jul 30 11:56:48.312246 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.51:37868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:48.312870 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.51:37868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:48.474153 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.53:61336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:48.474158 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.17:29578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:48.474782 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.53:61336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:48.474783 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.17:29578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:48.522511 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.68:60088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:48.523140 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.68:60088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:49.086420 2026] [ssl:error] [pid 2971005:tid 2971005] (70014)End of file found: [client 216.73.216.199:48687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:49.537473 2026] [ssl:error] [pid 2973947:tid 2973947] (EAI 2)Name or service not known: [client 144.76.19.72:49356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:49.537514 2026] [ssl:error] [pid 2973947:tid 2973947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:49.594750 2026] [ssl:error] [pid 2973062:tid 2973062] (EAI 2)Name or service not known: [client 144.76.19.72:57488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:49.594778 2026] [ssl:error] [pid 2973062:tid 2973062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:49.604185 2026] [security2:error] [pid 2968677:tid 2968677] [client 114.119.155.144:51355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,102/request_format~html"] [unique_id "amst8f1Qf2i4QWuJtLuVBwAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,15/request_format%7Ehtml
[Thu Jul 30 11:56:49.721248 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.42:41680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:49.721868 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.42:41680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:50.025106 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.15:35780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:50.025721 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.15:35780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:50.108173 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.59:44696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:50.108793 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.59:44696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:50.283235 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.55:44262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:50.283850 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.55:44262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:50.287478 2026] [core:error] [pid 2977320:tid 2977320] (13)Permission denied: [client 216.73.216.199:23125] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS0/line
[Thu Jul 30 11:56:50.715928 2026] [lsapi:warn] [pid 2948863:tid 2948863] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:56:50.987525 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.40:24344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:50.988155 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.40:24344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:51.470382 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.11:49618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:51.471025 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.11:49618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:51.781369 2026] [core:error] [pid 2974816:tid 2974816] [client 66.249.66.66:35541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:51.781398 2026] [core:error] [pid 2974816:tid 2974816] [client 66.249.66.66:35541] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:56:51.955076 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.9:23562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:51.955720 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.9:23562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:52.102026 2026] [security2:error] [pid 2977827:tid 2977827] [client 114.119.155.144:51357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,102/request_format~html"] [unique_id "amst9OK4lb5YkZx7DdC2yAAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578268800/cat_ids%7E14,15/request_format%7Ehtml
[Thu Jul 30 11:56:52.149370 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.54:52296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:52.149991 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.54:52296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:52.328416 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.23:29888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:52.329033 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.23:29888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:52.408385 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.18:63814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:52.409008 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.18:63814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:52.654536 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:57492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:52.654570 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:52.700189 2026] [ssl:error] [pid 2973064:tid 2973064] (70014)End of file found: [client 216.73.216.199:16541] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:52.711844 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:57508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:52.711866 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:52.828739 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.56:39274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:52.829379 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.56:39274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:52.929617 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.37:50592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:52.930278 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.37:50592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:53.408256 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.65:30184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:53.408882 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.65:30184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:54.003581 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.31:61314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:54.004211 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.31:61314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:54.417657 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.1:42912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:54.418283 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.1:42912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:54.494313 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.54:52308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:54.494935 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.54:52308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:54.803774 2026] [ssl:error] [pid 2977320:tid 2977320] (70014)End of file found: [client 216.73.216.199:23125] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:56:54.914796 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.1:42924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:54.915420 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.1:42924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:55.525467 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.22:39978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:55.526103 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.22:39978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:55.786642 2026] [ssl:error] [pid 2976664:tid 2976664] (EAI 2)Name or service not known: [client 144.76.19.72:57516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:55.786688 2026] [ssl:error] [pid 2976664:tid 2976664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:55.838790 2026] [ssl:error] [pid 2977358:tid 2977358] (EAI 2)Name or service not known: [client 144.76.19.72:57524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:55.838831 2026] [ssl:error] [pid 2977358:tid 2977358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:55.962888 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.15:34002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:55.963538 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.15:34002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:56.059095 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.41:37796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:56.059721 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.41:37796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:56.570907 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.59:31136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:56.571535 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.59:31136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:56.628847 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.12:46684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:56.629493 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.12:46684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:56.687957 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.67:64002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:56.688613 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.67:64002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:57.333320 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.24:49494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:57.333946 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.24:49494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:57.445089 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.63:54780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:57.445770 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.63:54780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:57.716639 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.71:59938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:57.717270 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.71:59938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:57.900295 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.65:30194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:57.900914 2026] [authz_core:error] [pid 2976822:tid 2976822] [client 57.141.0.65:30194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:58.447933 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.28:54578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:58.448599 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.28:54578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:58.663060 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.17:52994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:58.663700 2026] [authz_core:error] [pid 2972412:tid 2972412] [client 57.141.0.17:52994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:58.849404 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.54:39052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:58.850137 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.54:39052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:58.894707 2026] [ssl:error] [pid 2978127:tid 2978127] (EAI 2)Name or service not known: [client 144.76.19.72:57538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:58.894743 2026] [ssl:error] [pid 2978127:tid 2978127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:58.903409 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.12:46696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:58.904020 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.12:46696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:56:58.951348 2026] [ssl:error] [pid 2978085:tid 2978085] (EAI 2)Name or service not known: [client 144.76.19.72:57550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:56:58.951373 2026] [ssl:error] [pid 2978085:tid 2978085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:56:59.871122 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.32:21188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:56:59.871752 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.32:21188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:00.522676 2026] [ssl:error] [pid 2968744:tid 2968744] (70014)End of file found: [client 216.73.216.199:17275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:00.648623 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.50:46540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:00.649250 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.50:46540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:00.859188 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.10:58994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:00.859825 2026] [authz_core:error] [pid 2972478:tid 2972478] [client 57.141.0.10:58994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:00.928594 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.38:46646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:00.929214 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.38:46646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:01.124638 2026] [core:error] [pid 2972412:tid 2972412] (13)Permission denied: [client 216.73.216.199:13587] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory62/subsystem/uevent
[Thu Jul 30 11:57:01.318779 2026] [lsapi:warn] [pid 2978085:tid 2978085] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:57:01.614413 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.7:62126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:01.615099 2026] [authz_core:error] [pid 2973286:tid 2973286] [client 57.141.0.7:62126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:01.704839 2026] [authz_core:error] [pid 2977320:tid 2977320] [client 57.141.0.14:43080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:01.705526 2026] [authz_core:error] [pid 2977320:tid 2977320] [client 57.141.0.14:43080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:02.011132 2026] [ssl:error] [pid 2976664:tid 2976664] (EAI 2)Name or service not known: [client 144.76.19.72:62038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:02.011160 2026] [ssl:error] [pid 2976664:tid 2976664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:02.063900 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.70:22082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:02.064531 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.70:22082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:02.067006 2026] [ssl:error] [pid 2976626:tid 2976626] (EAI 2)Name or service not known: [client 144.76.19.72:62046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:02.067035 2026] [ssl:error] [pid 2976626:tid 2976626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:02.309472 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.56:40780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:02.310103 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.56:40780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:02.770785 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.19:65082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:02.771411 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.19:65082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:02.826317 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.38:46650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:02.826928 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.38:46650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:03.494113 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.67:65524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:03.494737 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.67:65524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:03.545570 2026] [security2:error] [pid 2972412:tid 2972412] [client 216.73.216.199:13587] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/idmapd.conf"] [unique_id "amst_1_dyke6J2tmYXitQgAAAAM"]
[Thu Jul 30 11:57:03.545874 2026] [security2:error] [pid 2972412:tid 2972412] [client 216.73.216.199:13587] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/idmapd.conf"] [unique_id "amst_1_dyke6J2tmYXitQgAAAAM"]
[Thu Jul 30 11:57:03.546106 2026] [security2:error] [pid 2972412:tid 2972412] [client 216.73.216.199:13587] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/idmapd.conf"] [unique_id "amst_1_dyke6J2tmYXitQgAAAAM"]
[Thu Jul 30 11:57:03.682461 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.69:62420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:03.683100 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.69:62420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:03.829213 2026] [security2:error] [pid 2973947:tid 2973947] [client 74.7.227.14:34808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amst_5q29--D3KulQItixgAAAAg"]
[Thu Jul 30 11:57:03.902608 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.55:23116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:03.903237 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.55:23116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:04.525178 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.39:55196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:04.525802 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.39:55196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:04.831167 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.42:63152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:04.831784 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.42:63152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:04.921545 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.10:59008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:04.922163 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.10:59008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:05.105604 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.49:55414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:05.106234 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.49:55414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:05.122807 2026] [ssl:error] [pid 2973948:tid 2973948] (EAI 2)Name or service not known: [client 144.76.19.72:62058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:05.122845 2026] [ssl:error] [pid 2973948:tid 2973948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:05.177110 2026] [ssl:error] [pid 2973061:tid 2973061] (EAI 2)Name or service not known: [client 144.76.19.72:62060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:05.177148 2026] [ssl:error] [pid 2973061:tid 2973061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:05.183866 2026] [authz_core:error] [pid 2977246:tid 2977246] [client 57.141.0.67:65528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:05.184483 2026] [authz_core:error] [pid 2977246:tid 2977246] [client 57.141.0.67:65528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:05.397622 2026] [security2:error] [pid 2973064:tid 2973064] [client 74.7.227.58:40982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amsuAbLeE20khp1OkE4u5wAAACs"], referer: https://www.prosperon.co.uk
[Thu Jul 30 11:57:05.643684 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.8:24178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:05.644307 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.8:24178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:06.083912 2026] [cgi:error] [pid 2974017:tid 2974017] [client 216.73.216.199:7675] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/tcpcat.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 11:57:06.083963 2026] [cgi:error] [pid 2974017:tid 2974017] [client 216.73.216.199:7675] End of script output before headers: tcpcat.pl
[Thu Jul 30 11:57:06.660737 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.28:49368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:06.661365 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.28:49368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:06.664154 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.15:22594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:06.664756 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.15:22594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:07.262935 2026] [ssl:error] [pid 2978127:tid 2978127] (70014)End of file found: [client 216.73.216.199:39768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:07.554100 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.23:23022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:07.554731 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.23:23022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:07.918763 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.46:29810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:07.919388 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.46:29810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:08.004668 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.71:36642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:08.005364 2026] [authz_core:error] [pid 2974017:tid 2974017] [client 57.141.0.71:36642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:08.069340 2026] [security2:error] [pid 2968744:tid 2968744] [client 216.73.216.199:54202] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/libaudit.conf"] [unique_id "amsuBNbWBmDHil59MDHC3gAAABo"]
[Thu Jul 30 11:57:08.069647 2026] [security2:error] [pid 2968744:tid 2968744] [client 216.73.216.199:54202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/libaudit.conf"] [unique_id "amsuBNbWBmDHil59MDHC3gAAABo"]
[Thu Jul 30 11:57:08.069877 2026] [security2:error] [pid 2968744:tid 2968744] [client 216.73.216.199:54202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/libaudit.conf"] [unique_id "amsuBNbWBmDHil59MDHC3gAAABo"]
[Thu Jul 30 11:57:08.087621 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.48:23482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:08.088247 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.48:23482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:08.092745 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.28:49372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:08.093383 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.28:49372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:08.230562 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:62070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:08.230591 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:08.277493 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.32:21508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:08.278131 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.32:21508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:08.283218 2026] [ssl:error] [pid 2976664:tid 2976664] (EAI 2)Name or service not known: [client 144.76.19.72:62076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:08.283243 2026] [ssl:error] [pid 2976664:tid 2976664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:08.913547 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.43:25436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:08.914170 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.43:25436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:09.648745 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.58:38460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:09.649372 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.58:38460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:10.060152 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.67:32738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:10.060773 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.67:32738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:10.159981 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.33:57392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:10.160608 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.33:57392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:10.771605 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.68:45826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:10.772217 2026] [authz_core:error] [pid 2974083:tid 2974083] [client 57.141.0.68:45826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:10.912768 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.34:49502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:10.913391 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.34:49502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:11.023290 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.9:55736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:11.023914 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.9:55736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:11.338312 2026] [ssl:error] [pid 2974016:tid 2974016] (EAI 2)Name or service not known: [client 144.76.19.72:50140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:11.338354 2026] [ssl:error] [pid 2974016:tid 2974016] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:11.393424 2026] [ssl:error] [pid 2970314:tid 2970314] (EAI 2)Name or service not known: [client 144.76.19.72:50152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:11.393475 2026] [ssl:error] [pid 2970314:tid 2970314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:11.461891 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.16:49436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:11.462548 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.16:49436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:11.477115 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.29:64966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:11.477742 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.29:64966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:11.613698 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.45:29370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:11.614372 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.45:29370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:11.874906 2026] [lsapi:warn] [pid 2974016:tid 2974016] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:57:11.913676 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.23:23026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:11.914299 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.23:23026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:12.724310 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.71:36654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:12.724931 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.71:36654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:13.024972 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.45:29380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:13.025607 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.45:29380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:13.079431 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.44:32054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:13.080060 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.44:32054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:13.382957 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.30:60922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:13.383602 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.30:60922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:13.952530 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.52:36938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:13.953190 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.52:36938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:14.298031 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.22:23664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:14.298665 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.22:23664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:14.448487 2026] [ssl:error] [pid 2974768:tid 2974768] (EAI 2)Name or service not known: [client 144.76.19.72:50166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:14.448538 2026] [ssl:error] [pid 2974768:tid 2974768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:14.504427 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:50172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:14.504455 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:14.541380 2026] [ssl:error] [pid 2963185:tid 2963185] (70014)End of file found: [client 216.73.216.199:38326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:14.873690 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.51:23272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:14.874316 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.51:23272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:15.110140 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.4:33564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:15.110765 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.4:33564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:15.146058 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.66:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:15.146693 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.66:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:15.337567 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.30:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:15.338238 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.30:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:15.440634 2026] [ssl:error] [pid 2978085:tid 2978085] (70014)End of file found: [client 216.73.216.199:7360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:15.505029 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.5:27366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:15.505662 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.5:27366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:15.957566 2026] [ssl:error] [pid 2974768:tid 2974768] (70014)End of file found: [client 216.73.216.199:30964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:16.258050 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.52:36944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:16.258747 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.52:36944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:16.323878 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.50:31122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:16.324530 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.50:31122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:16.654464 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.71:37202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:16.655102 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.71:37202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:17.595985 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:50178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:17.596022 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:17.651831 2026] [ssl:error] [pid 2968677:tid 2968677] (EAI 2)Name or service not known: [client 144.76.19.72:50194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:17.651856 2026] [ssl:error] [pid 2968677:tid 2968677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:17.804865 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.18:38872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:17.805486 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.18:38872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:17.808814 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.21:49474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:17.809421 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.21:49474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:17.818650 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.33:53156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:17.819250 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.33:53156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:17.834307 2026] [security2:error] [pid 2968677:tid 2968677] [client 103.153.110.44:46550] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuDf1Qf2i4QWuJtLuVFgAAAAk"]
[Thu Jul 30 11:57:17.834347 2026] [security2:error] [pid 2968677:tid 2968677] [client 103.153.110.44:46550] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuDf1Qf2i4QWuJtLuVFgAAAAk"]
[Thu Jul 30 11:57:17.834581 2026] [security2:error] [pid 2968677:tid 2968677] [client 103.153.110.44:46550] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuDf1Qf2i4QWuJtLuVFgAAAAk"]
[Thu Jul 30 11:57:18.674338 2026] [security2:error] [pid 2970314:tid 2970314] [client 185.191.171.14:45296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2656.0/prev_next,next.html"] [unique_id "amsuDr5Dm6W7v3u3LdfywAAAAA4"]
[Thu Jul 30 11:57:19.002169 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.38:63776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:19.002797 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.38:63776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:19.415050 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.47:23758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:19.415685 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.47:23758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:19.430609 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.32:24024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:19.431246 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.32:24024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:19.486081 2026] [access_compat:error] [pid 2968677:tid 2968677] [client 173.252.95.16:38412] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 11:57:19.722637 2026] [core:error] [pid 2976708:tid 2976708] [client 57.141.0.20:23734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:19.722667 2026] [core:error] [pid 2976708:tid 2976708] [client 57.141.0.20:23734] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:19.788288 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.71:37226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:19.788905 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.71:37226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:20.033777 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.63:58942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:20.034409 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.63:58942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:20.318280 2026] [ssl:error] [pid 2978126:tid 2978126] (70014)End of file found: [client 216.73.216.199:4249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:20.462492 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.50:31128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:20.463122 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.50:31128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:20.513555 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.64:52030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:20.514177 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.64:52030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:20.556374 2026] [security2:error] [pid 2974816:tid 2974816] [client 103.189.158.160:44544] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuEG4mOPVnAb8MCSe-bwAAACk"]
[Thu Jul 30 11:57:20.556419 2026] [security2:error] [pid 2974816:tid 2974816] [client 103.189.158.160:44544] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuEG4mOPVnAb8MCSe-bwAAACk"]
[Thu Jul 30 11:57:20.556665 2026] [security2:error] [pid 2974816:tid 2974816] [client 103.189.158.160:44544] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuEG4mOPVnAb8MCSe-bwAAACk"]
[Thu Jul 30 11:57:20.726042 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:43420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:20.726095 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:20.765914 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.11:30274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:20.766556 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.11:30274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:20.786850 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:43432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:20.786872 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:20.812411 2026] [ssl:error] [pid 2955789:tid 2955789] (70014)End of file found: [client 216.73.216.199:8857] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:20.828599 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.64:52036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:20.829211 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.64:52036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:20.921702 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.13:62100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:20.922322 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.13:62100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:20.926272 2026] [security2:error] [pid 2974816:tid 2974816] [client 85.208.96.209:19078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4524.0.html"] [unique_id "amsuEG4mOPVnAb8MCSe-cAAAACk"]
[Thu Jul 30 11:57:21.489477 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.38:63790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:21.490107 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.38:63790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:21.654189 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.31:21644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:21.654809 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.31:21644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:21.834588 2026] [ssl:error] [pid 2974816:tid 2974816] (70014)End of file found: [client 216.73.216.199:18512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:22.257038 2026] [access_compat:error] [pid 2974817:tid 2974817] [client 69.63.184.25:34310] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 11:57:22.325700 2026] [access_compat:error] [pid 2971597:tid 2971597] [client 69.63.184.25:34322] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 11:57:22.416703 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.51:30154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:22.417327 2026] [authz_core:error] [pid 2974082:tid 2974082] [client 57.141.0.51:30154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:22.545426 2026] [lsapi:warn] [pid 2977869:tid 2977869] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:57:22.584676 2026] [authz_core:error] [pid 2979119:tid 2979119] [client 57.141.0.67:59658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:22.585304 2026] [authz_core:error] [pid 2979119:tid 2979119] [client 57.141.0.67:59658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:23.471648 2026] [access_compat:error] [pid 2974768:tid 2974768] [client 57.141.0.10:44428] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gatka.html
[Thu Jul 30 11:57:23.551434 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.22:49508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:23.552127 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.22:49508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:23.553737 2026] [lsapi:warn] [pid 2974083:tid 2974083] [client 154.26.129.62:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:57:23.865060 2026] [ssl:error] [pid 2973947:tid 2973947] (EAI 2)Name or service not known: [client 144.76.19.72:43448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:23.865112 2026] [ssl:error] [pid 2973947:tid 2973947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:23.896218 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.2:25140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:23.896839 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.2:25140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:23.928631 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:43456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:23.928661 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:24.026132 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.22:49510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:24.026833 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.22:49510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:24.069525 2026] [core:error] [pid 2950494:tid 2950494] [client 66.249.66.4:41210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:24.069549 2026] [core:error] [pid 2950494:tid 2950494] [client 66.249.66.4:41210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:24.349649 2026] [security2:error] [pid 2959154:tid 2959154] [client 103.29.239.59:58680] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuFCMIBy93HDeMjLZQdQAAAAc"]
[Thu Jul 30 11:57:24.349700 2026] [security2:error] [pid 2959154:tid 2959154] [client 103.29.239.59:58680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuFCMIBy93HDeMjLZQdQAAAAc"]
[Thu Jul 30 11:57:24.349943 2026] [security2:error] [pid 2959154:tid 2959154] [client 103.29.239.59:58680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuFCMIBy93HDeMjLZQdQAAAAc"]
[Thu Jul 30 11:57:24.448990 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.8:28634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:24.449645 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.8:28634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:24.464176 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.49:60742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:24.464805 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.49:60742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:24.735589 2026] [core:error] [pid 2974768:tid 2974768] [client 66.249.66.39:58364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:24.735616 2026] [core:error] [pid 2974768:tid 2974768] [client 66.249.66.39:58364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:25.075494 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.67:59678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:25.076124 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.67:59678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:25.422142 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.54:55816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:25.422766 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.54:55816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:25.548104 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.35:20306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:25.548729 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.35:20306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:26.099334 2026] [ssl:error] [pid 2976711:tid 2976711] (70014)End of file found: [client 216.73.216.199:19395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:26.107774 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.14:27788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:26.108394 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.14:27788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:26.122387 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.55:27502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:26.123011 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.55:27502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:26.600233 2026] [ssl:error] [pid 2973064:tid 2973064] (70014)End of file found: [client 216.73.216.199:58518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:27.031768 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:43468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:27.031801 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:27.085975 2026] [ssl:error] [pid 2973061:tid 2973061] (EAI 2)Name or service not known: [client 144.76.19.72:43478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:27.086004 2026] [ssl:error] [pid 2973061:tid 2973061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:27.093422 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.26:38142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:27.094042 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.26:38142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:27.463383 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.1:41054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:27.464002 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.1:41054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:27.513907 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.68:64472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:27.514540 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.68:64472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:27.920234 2026] [core:error] [pid 2968744:tid 2968744] [client 66.249.64.170:46191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:27.920262 2026] [core:error] [pid 2968744:tid 2968744] [client 66.249.64.170:46191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:27.936050 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.1:41070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:27.936701 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.1:41070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:27.969335 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.52:22650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:27.969939 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.52:22650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:28.513062 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.10:20124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:28.513701 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.10:20124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:28.563146 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.28:25670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:28.563760 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.28:25670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:28.840230 2026] [ssl:error] [pid 2950494:tid 2950494] (70014)End of file found: [client 216.73.216.199:52020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:28.876478 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.41:60944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:28.877102 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.41:60944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:28.902109 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.31:32322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:28.902737 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.31:32322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:29.876102 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.5:31704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:29.876726 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.5:31704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:30.140879 2026] [ssl:error] [pid 2978127:tid 2978127] (EAI 2)Name or service not known: [client 144.76.19.72:37168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:30.140918 2026] [ssl:error] [pid 2978127:tid 2978127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:30.196675 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:37180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:30.196704 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:30.710614 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.66:26018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:30.711237 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.66:26018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:30.936612 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.64:31330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:30.937231 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.64:31330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:31.357388 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 66.249.66.33:38948] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:57:31.360088 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 66.249.66.33:38948] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:57:31.375154 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.47:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:31.375777 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.47:43990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:31.453573 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.71:28162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:31.454207 2026] [authz_core:error] [pid 2974016:tid 2974016] [client 57.141.0.71:28162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:31.803930 2026] [authz_core:error] [pid 2977653:tid 2977653] [client 57.141.0.24:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:31.804560 2026] [authz_core:error] [pid 2977653:tid 2977653] [client 57.141.0.24:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:31.998116 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.28:29410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:31.998750 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.28:29410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:32.119613 2026] [authz_core:error] [pid 2979433:tid 2979433] [client 57.141.0.29:47486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:32.120254 2026] [authz_core:error] [pid 2979433:tid 2979433] [client 57.141.0.29:47486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:32.911825 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.47:20914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:32.912452 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.47:20914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:32.927366 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.14:27794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:32.927985 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.14:27794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:33.065847 2026] [ssl:error] [pid 2978085:tid 2978085] (70014)End of file found: [client 216.73.216.199:43109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:33.198745 2026] [lsapi:warn] [pid 2974083:tid 2974083] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:57:33.253595 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:37188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:33.253626 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:33.309406 2026] [ssl:error] [pid 2968743:tid 2968743] (EAI 2)Name or service not known: [client 144.76.19.72:37202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:33.309439 2026] [ssl:error] [pid 2968743:tid 2968743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:33.471679 2026] [core:error] [pid 2977653:tid 2977653] [client 57.141.0.28:29432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:33.471706 2026] [core:error] [pid 2977653:tid 2977653] [client 57.141.0.28:29432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:33.474924 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.47:20916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:33.475545 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.47:20916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:33.577489 2026] [ssl:error] [pid 2965304:tid 2965304] (70014)End of file found: [client 216.73.216.199:56549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:33.697909 2026] [core:error] [pid 2971597:tid 2971597] [client 57.141.0.48:33718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:33.697937 2026] [core:error] [pid 2971597:tid 2971597] [client 57.141.0.48:33718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:34.002660 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.39:56104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:34.003332 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.39:56104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:34.071139 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.45:24982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:34.071763 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.45:24982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:34.272597 2026] [ssl:error] [pid 2965132:tid 2965132] (70014)End of file found: [client 216.73.216.199:29665] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:34.659015 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.25:36156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:34.659642 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.25:36156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:35.082889 2026] [security2:error] [pid 2971005:tid 2971005] [client 170.106.179.68:54528] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "newtronicmedia.com"] [uri "/"] [unique_id "amsuHyiP2XYvlO9lHbE6_AAAABk"]
[Thu Jul 30 11:57:35.182929 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.59:23302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:35.183560 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.59:23302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:35.619636 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.18:20356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:35.620273 2026] [authz_core:error] [pid 2968743:tid 2968743] [client 57.141.0.18:20356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:35.893490 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.70:46088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:35.894115 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.70:46088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:36.151223 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.70:46104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:36.151842 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.70:46104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:36.365474 2026] [ssl:error] [pid 2968743:tid 2968743] (EAI 2)Name or service not known: [client 144.76.19.72:37210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:36.365516 2026] [ssl:error] [pid 2968743:tid 2968743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:36.422714 2026] [ssl:error] [pid 2963185:tid 2963185] (EAI 2)Name or service not known: [client 144.76.19.72:37214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:36.422750 2026] [ssl:error] [pid 2963185:tid 2963185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:36.433992 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.40:46168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:36.434625 2026] [authz_core:error] [pid 2976664:tid 2976664] [client 57.141.0.40:46168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:36.567096 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.35:48616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:36.567714 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.35:48616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:36.643508 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.8:61590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:36.644127 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.8:61590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:37.096888 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.1:64000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:37.097515 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.1:64000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:37.730607 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.11:62100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:37.731257 2026] [authz_core:error] [pid 2974078:tid 2974078] [client 57.141.0.11:62100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:37.872777 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.11:62110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:37.873397 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.11:62110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:39.221596 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.47:20922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:39.222217 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.47:20922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:39.477517 2026] [ssl:error] [pid 2965132:tid 2965132] (EAI 2)Name or service not known: [client 144.76.19.72:37230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:39.477542 2026] [ssl:error] [pid 2965132:tid 2965132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:39.530533 2026] [ssl:error] [pid 2965132:tid 2965132] (EAI 2)Name or service not known: [client 144.76.19.72:37246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:39.530556 2026] [ssl:error] [pid 2965132:tid 2965132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:39.708406 2026] [ssl:error] [pid 2970359:tid 2970359] (70014)End of file found: [client 216.73.216.199:31424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:39.792148 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.32:46910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:39.792772 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.32:46910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:39.859884 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.64:23958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:39.860548 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.64:23958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:40.359179 2026] [ssl:error] [pid 2977869:tid 2977869] (70014)End of file found: [client 216.73.216.199:44605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:40.445577 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.38:42788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:40.446195 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.38:42788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:40.605567 2026] [core:error] [pid 2980009:tid 2980009] [client 66.249.66.194:44339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:40.605594 2026] [core:error] [pid 2980009:tid 2980009] [client 66.249.66.194:44339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:57:40.653619 2026] [ssl:error] [pid 2978126:tid 2978126] (70014)End of file found: [client 216.73.216.199:59713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:40.879591 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.7:35456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:40.880218 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.7:35456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:41.244615 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.39:30462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:41.245241 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.39:30462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:41.331301 2026] [authz_core:error] [pid 2971598:tid 2971598] [client 57.141.0.42:55634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:41.331941 2026] [authz_core:error] [pid 2971598:tid 2971598] [client 57.141.0.42:55634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:41.541992 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.68:30932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:41.542622 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.68:30932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:42.332432 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.42:55650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:42.333055 2026] [authz_core:error] [pid 2973947:tid 2973947] [client 57.141.0.42:55650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:42.585508 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:33074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:42.585535 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:42.640972 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:33082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:42.640991 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:42.741174 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.67:58096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:42.741792 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.67:58096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:42.863641 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.68:30942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:42.864288 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.68:30942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:43.297026 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.46:21856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:43.297659 2026] [authz_core:error] [pid 2978085:tid 2978085] [client 57.141.0.46:21856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:44.104620 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.62:27506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:44.105240 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.62:27506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:44.157773 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.11:38576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:44.158390 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.11:38576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:44.186952 2026] [lsapi:warn] [pid 2973061:tid 2973061] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:57:44.321020 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.71:61176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:44.321653 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.71:61176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:44.585835 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.65:54216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:44.586488 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.65:54216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:45.373721 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.11:38592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:45.374344 2026] [authz_core:error] [pid 2976710:tid 2976710] [client 57.141.0.11:38592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:45.560272 2026] [authz_core:error] [pid 2978584:tid 2978584] [client 57.141.0.40:22070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:45.560893 2026] [authz_core:error] [pid 2978584:tid 2978584] [client 57.141.0.40:22070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:45.652156 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.40:22074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:45.652777 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.40:22074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:45.695918 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:33086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:45.695952 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:45.711407 2026] [security2:error] [pid 2965132:tid 2965132] [client 185.191.171.11:65170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/january-23-zodiac-sign:-aquarius"] [unique_id "amsuKXEhHe6BZUZRmQ7EvwAAAEU"]
[Thu Jul 30 11:57:45.748840 2026] [ssl:error] [pid 2973061:tid 2973061] (EAI 2)Name or service not known: [client 144.76.19.72:33090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:45.748864 2026] [ssl:error] [pid 2973061:tid 2973061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:46.154150 2026] [authz_core:error] [pid 2979119:tid 2979119] [client 57.141.0.25:47414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:46.154777 2026] [authz_core:error] [pid 2979119:tid 2979119] [client 57.141.0.25:47414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:47.001377 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.24:60476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:47.001999 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.24:60476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:47.197020 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.66:30946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:47.197651 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.66:30946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:47.480823 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.40:22084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:47.481446 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.40:22084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:48.463441 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.19:46536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:48.464062 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.19:46536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:48.464832 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.50:62466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:48.465440 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.50:62466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:48.822042 2026] [ssl:error] [pid 2950494:tid 2950494] (EAI 2)Name or service not known: [client 144.76.19.72:33096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:48.822112 2026] [ssl:error] [pid 2950494:tid 2950494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:48.875828 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.56:28400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:48.876448 2026] [authz_core:error] [pid 2965132:tid 2965132] [client 57.141.0.56:28400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:48.876465 2026] [ssl:error] [pid 2973286:tid 2973286] (EAI 2)Name or service not known: [client 144.76.19.72:33106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:48.876490 2026] [ssl:error] [pid 2973286:tid 2973286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:49.286252 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.20:22050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:49.286870 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.20:22050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:49.554162 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.39:29674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:49.554783 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.39:29674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:50.079495 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.2:24642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:50.080132 2026] [authz_core:error] [pid 2971005:tid 2971005] [client 57.141.0.2:24642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:50.579803 2026] [core:error] [pid 2977358:tid 2977358] (13)Permission denied: [client 216.73.216.199:49018] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/fidosfelds.com.db
[Thu Jul 30 11:57:50.653661 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.5:30834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:50.654284 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.5:30834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:51.406837 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.1:47590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:51.407472 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.1:47590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:51.806885 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.10:35296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:51.807523 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.10:35296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:51.932906 2026] [ssl:error] [pid 2974816:tid 2974816] (EAI 2)Name or service not known: [client 144.76.19.72:18224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:51.932965 2026] [ssl:error] [pid 2974816:tid 2974816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:51.988711 2026] [ssl:error] [pid 2973061:tid 2973061] (EAI 2)Name or service not known: [client 144.76.19.72:18228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:51.988740 2026] [ssl:error] [pid 2973061:tid 2973061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:52.299013 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.45:63654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:52.299645 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.45:63654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:52.325152 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.21:29260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:52.325850 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.21:29260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:52.398197 2026] [ssl:error] [pid 2977358:tid 2977358] (70014)End of file found: [client 216.73.216.199:49018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:52.596679 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.61:53986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:52.597293 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.61:53986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:52.990448 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.60:29890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:52.991107 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.60:29890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:53.140369 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.16:34746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:53.140987 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.16:34746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:53.611171 2026] [ssl:error] [pid 2970314:tid 2970314] (70014)End of file found: [client 216.73.216.199:64422] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:53.712485 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.56:28422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:53.713126 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.56:28422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:53.741780 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.5:30840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:53.742395 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.5:30840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:53.911950 2026] [ssl:error] [pid 2980140:tid 2980140] (70014)End of file found: [client 216.73.216.199:61795] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:54.174588 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.45:63656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:54.175215 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.45:63656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:54.417983 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.64:54910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:54.418641 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.64:54910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:54.929893 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.32:39222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:54.930527 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.32:39222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:54.939128 2026] [lsapi:warn] [pid 2974816:tid 2974816] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:57:55.044416 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:18230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:55.044443 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:55.095777 2026] [ssl:error] [pid 2973062:tid 2973062] (EAI 2)Name or service not known: [client 144.76.19.72:18246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:55.095805 2026] [ssl:error] [pid 2973062:tid 2973062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:55.164567 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.21:53780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:55.165184 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.21:53780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:55.436593 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.1:47606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:55.437225 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.1:47606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:56.099533 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.55:46274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:56.100154 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.55:46274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:56.171269 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.28:35306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:56.171887 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.28:35306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:56.909163 2026] [ssl:error] [pid 2964034:tid 2964034] (70014)End of file found: [client 216.73.216.199:3870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:57.279890 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.10:53362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:57.280519 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.10:53362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:57.453705 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.38:32618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:57.454327 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.38:32618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:57.674623 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.37:50026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:57.675253 2026] [authz_core:error] [pid 2977358:tid 2977358] [client 57.141.0.37:50026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:57.912889 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.5:27832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:57.913521 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.5:27832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:57.917148 2026] [ssl:error] [pid 2979433:tid 2979433] (70014)End of file found: [client 216.73.216.199:18075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:58.149173 2026] [ssl:error] [pid 2977358:tid 2977358] (EAI 2)Name or service not known: [client 144.76.19.72:18258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:58.149197 2026] [ssl:error] [pid 2977358:tid 2977358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:58.202059 2026] [ssl:error] [pid 2974817:tid 2974817] (EAI 2)Name or service not known: [client 144.76.19.72:18270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:57:58.202116 2026] [ssl:error] [pid 2974817:tid 2974817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:57:58.288745 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.10:53370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:58.289370 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.10:53370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:58.608455 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.9:61678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:58.609088 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.9:61678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:58.820739 2026] [ssl:error] [pid 2965132:tid 2965132] (70014)End of file found: [client 216.73.216.199:19661] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:57:59.146978 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.19:58402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:59.147608 2026] [authz_core:error] [pid 2977869:tid 2977869] [client 57.141.0.19:58402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:57:59.856690 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.41:53126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:57:59.857339 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.41:53126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:00.315406 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.48:43828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:00.316038 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.48:43828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:00.439172 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.46:64776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:00.439794 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.46:64776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:00.561877 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.52:64854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:00.562592 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.52:64854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:00.969201 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.36:37442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:00.969811 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.36:37442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:01.256184 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:34088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:01.256221 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:01.315567 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:34102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:01.315591 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:01.405613 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.67:23174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:01.406301 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.67:23174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:01.920688 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 66.249.66.35:54045] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:58:01.923379 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 66.249.66.35:54045] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:58:02.040816 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.9:22870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:02.041451 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.9:22870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:02.194037 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.196:60892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:02.194062 2026] [core:error] [pid 2964034:tid 2964034] [client 66.249.66.196:60892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:02.213108 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.5:27834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:02.213725 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.5:27834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:02.336818 2026] [ssl:error] [pid 2980009:tid 2980009] (70014)End of file found: [client 216.73.216.199:51317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:02.465433 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.41:53180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:02.466060 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.41:53180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:02.640337 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.17:32826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:02.640971 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.17:32826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:02.998754 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.69:38498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:02.999374 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.69:38498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:03.332417 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.12:52882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:03.333038 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.12:52882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:03.434358 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.25:52516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:03.434982 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.25:52516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:04.271710 2026] [core:error] [pid 2978085:tid 2978085] (13)Permission denied: [client 216.73.216.199:15970] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/kirmond.com.db
[Thu Jul 30 11:58:04.547871 2026] [ssl:error] [pid 2948863:tid 2948863] (70014)End of file found: [client 216.73.216.199:54940] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:04.689321 2026] [security2:error] [pid 2976711:tid 2976711] [client 74.7.243.196:60346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/"] [unique_id "amsuPEeHnYqoWqc2E4DI9wAAABI"]
[Thu Jul 30 11:58:04.838691 2026] [ssl:error] [pid 2974814:tid 2974814] (70014)End of file found: [client 216.73.216.199:58299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:04.925729 2026] [ssl:error] [pid 2981127:tid 2981127] (EAI 2)Name or service not known: [client 144.76.19.72:34112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:04.925773 2026] [ssl:error] [pid 2981127:tid 2981127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:05.015909 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.30:47592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:05.016570 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.30:47592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:05.043277 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.9:22884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:05.043902 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.9:22884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:05.217783 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.7:41500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:05.218409 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.7:41500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:05.234766 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.64:44330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:05.235401 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.64:44330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:05.408326 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.30:47604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:05.408937 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.30:47604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:05.457740 2026] [ssl:error] [pid 2980821:tid 2980821] (EAI 2)Name or service not known: [client 144.76.19.72:34122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:05.457768 2026] [ssl:error] [pid 2980821:tid 2980821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:05.635132 2026] [core:error] [pid 2976711:tid 2976711] [client 57.141.0.59:31256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:05.635153 2026] [core:error] [pid 2976711:tid 2976711] [client 57.141.0.59:31256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:05.683115 2026] [lsapi:warn] [pid 2980821:tid 2980821] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:58:05.742609 2026] [ssl:error] [pid 2978085:tid 2978085] (70014)End of file found: [client 216.73.216.199:15970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:06.131557 2026] [security2:error] [pid 2981169:tid 2981169] [client 45.148.10.120:39350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amsuPjcQcDu_57gRn6OtmAAAACU"]
[Thu Jul 30 11:58:06.131785 2026] [security2:error] [pid 2981169:tid 2981169] [client 45.148.10.120:39350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amsuPjcQcDu_57gRn6OtmAAAACU"]
[Thu Jul 30 11:58:06.132084 2026] [security2:error] [pid 2981169:tid 2981169] [client 45.148.10.120:39350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amsuPjcQcDu_57gRn6OtmAAAACU"]
[Thu Jul 30 11:58:06.428129 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.49:56112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:06.428748 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.49:56112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:06.638995 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.44:35268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:06.639653 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.44:35268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:06.815582 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.66:52826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:06.816199 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.66:52826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:07.136483 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.70:33654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:07.137152 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.70:33654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:07.254794 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.44:35284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:07.255417 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.44:35284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:08.237157 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.3:35432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:08.237774 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.3:35432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:08.325905 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.1:29842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:08.326540 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.1:29842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:08.512565 2026] [ssl:error] [pid 2980009:tid 2980009] (EAI 2)Name or service not known: [client 144.76.19.72:34138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:08.512598 2026] [ssl:error] [pid 2980009:tid 2980009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:08.570348 2026] [ssl:error] [pid 2975020:tid 2975020] (EAI 2)Name or service not known: [client 144.76.19.72:34152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:08.570371 2026] [ssl:error] [pid 2975020:tid 2975020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:08.607250 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:22338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:08.607872 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:22338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:08.872550 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.13:38376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:08.873175 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.13:38376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:08.892429 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.15:35616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:08.893038 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.15:35616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:08.921345 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 103.59.160.131:52758] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/error_log
[Thu Jul 30 11:58:09.505181 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.24:62030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:09.505807 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.24:62030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:09.826946 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.40:40912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:09.827578 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.40:40912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:09.847441 2026] [core:crit] [pid 2979215:tid 2979215] (13)Permission denied: [client 40.77.167.8:24276] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 11:58:10.273081 2026] [ssl:error] [pid 2973061:tid 2973061] (70014)End of file found: [client 216.73.216.199:18320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:10.440633 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.29:25642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:10.441266 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.29:25642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:10.608236 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.63:57314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:10.608856 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.63:57314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:10.752496 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.29:25658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:10.753125 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.29:25658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:10.877953 2026] [ssl:error] [pid 2974814:tid 2974814] (70014)End of file found: [client 216.73.216.199:58854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:11.369695 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.10:35942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:11.370319 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.10:35942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:11.536442 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.61:26800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:11.537064 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.61:26800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:11.626560 2026] [ssl:error] [pid 2981128:tid 2981128] (EAI 2)Name or service not known: [client 144.76.19.72:62774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:11.626598 2026] [ssl:error] [pid 2981128:tid 2981128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:11.679888 2026] [ssl:error] [pid 2965132:tid 2965132] (EAI 2)Name or service not known: [client 144.76.19.72:62776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:11.679915 2026] [ssl:error] [pid 2965132:tid 2965132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:11.744475 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.15:35620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:11.745110 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.15:35620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:11.945479 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:20664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:11.946112 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:20664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:12.312061 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.56:50382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:12.312702 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.56:50382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:12.605145 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.5:31684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:12.605768 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.5:31684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:12.644923 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.59:50116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:12.645549 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.59:50116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:13.127706 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.63:57318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:13.128329 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.63:57318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:13.194948 2026] [security2:error] [pid 2981127:tid 2981127] [client 114.119.144.31:32845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,104/request_format~html"] [unique_id "amsuRc2jmmajyIhwb-amgAAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14/request_format~html
[Thu Jul 30 11:58:14.252798 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.36:58104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:14.253421 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.36:58104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:14.452195 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.10:35958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:14.452851 2026] [authz_core:error] [pid 2964033:tid 2964033] [client 57.141.0.10:35958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:14.621087 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.49:41412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:14.621711 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.49:41412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:14.733492 2026] [ssl:error] [pid 2978085:tid 2978085] (EAI 2)Name or service not known: [client 144.76.19.72:62790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:14.733528 2026] [ssl:error] [pid 2978085:tid 2978085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:14.786381 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:62796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:14.786405 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:14.824373 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.9:23670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:14.824990 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.9:23670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:15.004431 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.4:21868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:15.005105 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.4:21868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:15.027669 2026] [security2:error] [pid 2980009:tid 2980009] [client 114.119.144.31:32861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,104/request_format~html"] [unique_id "amsuR_EDJEkO8prP8oYjhAAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14/request_format~html
[Thu Jul 30 11:58:15.101005 2026] [ssl:error] [pid 2963185:tid 2963185] (70014)End of file found: [client 216.73.216.199:18151] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:15.271989 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.41:52180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:15.272615 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.41:52180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:15.830018 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.5:31694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:15.830665 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.5:31694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:16.057079 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.26:28604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:16.057703 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.26:28604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:16.092718 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.35:22350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:16.093338 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.35:22350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:16.256116 2026] [lsapi:warn] [pid 2973947:tid 2973947] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:58:16.891605 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.2:40446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:16.892232 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.2:40446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:17.043192 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.64:54866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:17.043807 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.64:54866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:17.136746 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.51:36862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:17.137367 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.51:36862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:17.789378 2026] [security2:error] [pid 2980140:tid 2980140] [client 114.119.132.202:21275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "orgent.eu"] [uri "/robots.txt"] [unique_id "amsuSeWzshAw5oUcSXAJRQAAAAs"], referer: https://orgent.eu/robots.txt
[Thu Jul 30 11:58:17.839734 2026] [ssl:error] [pid 2974723:tid 2974723] (EAI 2)Name or service not known: [client 144.76.19.72:62808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:17.839765 2026] [ssl:error] [pid 2974723:tid 2974723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:17.891117 2026] [ssl:error] [pid 2973062:tid 2973062] (EAI 2)Name or service not known: [client 144.76.19.72:62824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:17.891145 2026] [ssl:error] [pid 2973062:tid 2973062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:18.061344 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.8:50226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:18.061964 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.8:50226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:18.107397 2026] [ssl:error] [pid 2981127:tid 2981127] (70014)End of file found: [client 216.73.216.199:3361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:18.127667 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.49:51172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:18.128287 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.49:51172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:18.412044 2026] [ssl:error] [pid 2979398:tid 2979398] (70014)End of file found: [client 216.73.216.199:49368] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:18.427985 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.12:35726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:18.428614 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.12:35726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:18.557375 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.42:33208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:18.557998 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.42:33208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:18.701778 2026] [security2:error] [pid 2980770:tid 2980770] [client 43.228.157.102:57976] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsuSgXE_scJTgu7wrSLAwAAAAM"]
[Thu Jul 30 11:58:18.701979 2026] [security2:error] [pid 2980770:tid 2980770] [client 43.228.157.102:57976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsuSgXE_scJTgu7wrSLAwAAAAM"]
[Thu Jul 30 11:58:18.702208 2026] [security2:error] [pid 2980770:tid 2980770] [client 43.228.157.102:57976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.perish.freakorgeek.com"] [uri "/.git/config"] [unique_id "amsuSgXE_scJTgu7wrSLAwAAAAM"]
[Thu Jul 30 11:58:19.294565 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.63:42584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:19.295191 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.63:42584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:19.387886 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.30:51294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:19.388521 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.30:51294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:20.125807 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.70:56962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:20.126426 2026] [authz_core:error] [pid 2974817:tid 2974817] [client 57.141.0.70:56962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:20.483106 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.69:25166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:20.483793 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.69:25166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:20.600614 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.64:54882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:20.601301 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.64:54882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:20.829265 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.2:40456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:20.829887 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.2:40456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:20.964694 2026] [ssl:error] [pid 2973061:tid 2973061] (EAI 2)Name or service not known: [client 144.76.19.72:31384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:20.964730 2026] [ssl:error] [pid 2973061:tid 2973061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:21.017531 2026] [ssl:error] [pid 2974816:tid 2974816] (EAI 2)Name or service not known: [client 144.76.19.72:31396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:21.017563 2026] [ssl:error] [pid 2974816:tid 2974816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:21.187875 2026] [security2:error] [pid 2977827:tid 2977827] [client 150.5.133.83:32347] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuTeK4lb5YkZx7DdC3QwAAAAI"]
[Thu Jul 30 11:58:21.187927 2026] [security2:error] [pid 2977827:tid 2977827] [client 150.5.133.83:32347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuTeK4lb5YkZx7DdC3QwAAAAI"]
[Thu Jul 30 11:58:21.188198 2026] [security2:error] [pid 2977827:tid 2977827] [client 150.5.133.83:32347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuTeK4lb5YkZx7DdC3QwAAAAI"]
[Thu Jul 30 11:58:21.826732 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.61:57820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:21.827356 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.61:57820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:21.939984 2026] [security2:error] [pid 2974814:tid 2974814] [client 43.159.152.4:60236] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "evtech.ltd"] [uri "/"] [unique_id "amsuTSDp9L2yVoZynqg3ngAAAB0"]
[Thu Jul 30 11:58:22.104310 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.24:60802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:22.105012 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.24:60802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:22.226337 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.33:38458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:22.226957 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.33:38458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:22.241478 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.16:34790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:22.242105 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.16:34790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:22.937259 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.18:42680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:22.937883 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.18:42680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:23.035378 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.59:27250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:23.036001 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.59:27250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:23.550704 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.18:42690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:23.551351 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.18:42690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:23.573757 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.60:61104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:23.574381 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.60:61104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:23.644969 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.35:28520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:23.645622 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.35:28520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:23.664325 2026] [security2:error] [pid 2973064:tid 2973064] [client 118.69.13.46:7505] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuT7LeE20khp1OkE4vOgAAACs"]
[Thu Jul 30 11:58:23.664380 2026] [security2:error] [pid 2973064:tid 2973064] [client 118.69.13.46:7505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuT7LeE20khp1OkE4vOgAAACs"]
[Thu Jul 30 11:58:23.664623 2026] [security2:error] [pid 2973064:tid 2973064] [client 118.69.13.46:7505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuT7LeE20khp1OkE4vOgAAACs"]
[Thu Jul 30 11:58:24.057339 2026] [ssl:error] [pid 2974816:tid 2974816] (70014)End of file found: [client 216.73.216.199:24755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:24.074859 2026] [ssl:error] [pid 2963363:tid 2963363] (EAI 2)Name or service not known: [client 144.76.19.72:31402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:24.074885 2026] [ssl:error] [pid 2963363:tid 2963363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:24.086540 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.1:38958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:24.087156 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.1:38958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:24.132534 2026] [ssl:error] [pid 2963363:tid 2963363] (EAI 2)Name or service not known: [client 144.76.19.72:31414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:24.132560 2026] [ssl:error] [pid 2963363:tid 2963363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:24.146119 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.16:34798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:24.146841 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.16:34798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:24.795892 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.2:43358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:24.796527 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.2:43358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:25.136890 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.53:41740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:25.137541 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.53:41740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:25.264675 2026] [ssl:error] [pid 2965304:tid 2965304] (70014)End of file found: [client 216.73.216.199:27146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:25.565867 2026] [ssl:error] [pid 2979398:tid 2979398] (70014)End of file found: [client 216.73.216.199:32843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:26.010011 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.63:41900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:26.010640 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.63:41900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:26.469866 2026] [security2:error] [pid 2974768:tid 2974768] [client 186.158.220.246:15949] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuUi9Vmk35Yxyo1E2utAAAABA"]
[Thu Jul 30 11:58:26.469914 2026] [security2:error] [pid 2974768:tid 2974768] [client 186.158.220.246:15949] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuUi9Vmk35Yxyo1E2utAAAABA"]
[Thu Jul 30 11:58:26.470192 2026] [security2:error] [pid 2974768:tid 2974768] [client 186.158.220.246:15949] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuUi9Vmk35Yxyo1E2utAAAABA"]
[Thu Jul 30 11:58:26.535268 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.24:29428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:26.535940 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.24:29428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:26.725626 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.10:57364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:26.726247 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.10:57364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:26.853631 2026] [lsapi:warn] [pid 2950494:tid 2950494] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:58:26.910960 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.49:51174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:26.911594 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.49:51174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:27.026414 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.64:43674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:27.027034 2026] [authz_core:error] [pid 2974814:tid 2974814] [client 57.141.0.64:43674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:27.184162 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.15:35182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:27.184782 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.15:35182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:27.186154 2026] [ssl:error] [pid 2974768:tid 2974768] (EAI 2)Name or service not known: [client 144.76.19.72:31416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:27.186177 2026] [ssl:error] [pid 2974768:tid 2974768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:27.192497 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.2:43372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:27.193118 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.2:43372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:27.240352 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:31418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:27.240383 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:27.897726 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.31:43032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:27.898346 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.31:43032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:28.086570 2026] [core:crit] [pid 2950494:tid 2950494] (13)Permission denied: [client 40.77.167.30:23382] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 11:58:28.503704 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.5:59198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:28.504331 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.5:59198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:28.815214 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.34:22972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:28.815834 2026] [authz_core:error] [pid 2976626:tid 2976626] [client 57.141.0.34:22972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:29.230512 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.17:47050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:29.231140 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.17:47050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:29.237198 2026] [authz_core:error] [pid 2980822:tid 2980822] [client 57.141.0.69:37310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:29.237800 2026] [authz_core:error] [pid 2980822:tid 2980822] [client 57.141.0.69:37310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:29.400262 2026] [ssl:error] [pid 2980140:tid 2980140] (70014)End of file found: [client 216.73.216.199:15002] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:29.694823 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.30:52554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:29.695444 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.30:52554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:29.899733 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.61:65486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:29.900371 2026] [authz_core:error] [pid 2963363:tid 2963363] [client 57.141.0.61:65486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:30.276361 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.12:60304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:30.277014 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.12:60304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:30.297772 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:53772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:30.297808 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:30.352399 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:53774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:30.352429 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:30.415698 2026] [security2:error] [pid 2980822:tid 2980822] [client 110.249.201.108:32708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amsuVl5GUMxKKMnLPxv59gAAAA8"]
[Thu Jul 30 11:58:30.812295 2026] [ssl:error] [pid 2978127:tid 2978127] (70014)End of file found: [client 216.73.216.199:43154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:31.210135 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.15:35184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:31.210763 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.15:35184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:31.592730 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.31:43052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:31.593420 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.31:43052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:31.681659 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.13:29894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:31.682302 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.13:29894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:31.976686 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.23:22962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:31.977307 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.23:22962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:32.336952 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.4:35658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:32.337585 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.4:35658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:32.934637 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.54:37442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:32.935258 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.54:37442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:32.948762 2026] [authz_core:error] [pid 2980822:tid 2980822] [client 57.141.0.15:35188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:32.949383 2026] [authz_core:error] [pid 2980822:tid 2980822] [client 57.141.0.15:35188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:33.135064 2026] [ssl:error] [pid 2970314:tid 2970314] (70014)End of file found: [client 216.73.216.199:41537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:33.281962 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.56:50976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:33.282593 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.56:50976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:33.310048 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.60:22004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:33.310690 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.60:22004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:33.415600 2026] [ssl:error] [pid 2981127:tid 2981127] (EAI 2)Name or service not known: [client 144.76.19.72:53780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:33.415630 2026] [ssl:error] [pid 2981127:tid 2981127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:33.481188 2026] [ssl:error] [pid 2975020:tid 2975020] (EAI 2)Name or service not known: [client 144.76.19.72:53796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:33.481216 2026] [ssl:error] [pid 2975020:tid 2975020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:33.791478 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.16:60098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:33.792109 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.16:60098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:33.818686 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.37:50640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:33.819303 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.37:50640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:34.046857 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.49:27248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:34.047479 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.49:27248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:34.674414 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.55:54726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:34.675039 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.55:54726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:34.787928 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.4:35668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:34.788597 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.4:35668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:34.858777 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.2:58872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:34.859397 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.2:58872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:35.566342 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.31:43074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:35.566955 2026] [authz_core:error] [pid 2978126:tid 2978126] [client 57.141.0.31:43074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:35.949759 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.25:34614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:35.950381 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.25:34614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:36.133743 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.29:54100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:36.134371 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.29:54100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:36.539709 2026] [ssl:error] [pid 2981171:tid 2981171] (EAI 2)Name or service not known: [client 144.76.19.72:53810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:36.539751 2026] [ssl:error] [pid 2981171:tid 2981171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:36.594162 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:53816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:36.594184 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:36.638276 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.60:22012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:36.638893 2026] [authz_core:error] [pid 2974768:tid 2974768] [client 57.141.0.60:22012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:37.021562 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.61:65488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:37.022267 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.61:65488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:37.119255 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.30:26800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:37.119873 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.30:26800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:37.761303 2026] [lsapi:warn] [pid 2948863:tid 2948863] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:58:38.113177 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.4:35680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:38.113805 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.4:35680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:38.304485 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.11:24132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:38.305128 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.11:24132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:38.662767 2026] [security2:error] [pid 2970314:tid 2970314] [client 49.51.38.193:58826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.michael-boffey.co.uk"] [uri "/"] [unique_id "amsuXr5Dm6W7v3u3Ldfy4gAAAA4"]
[Thu Jul 30 11:58:38.876389 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.27:59208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:38.877054 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.27:59208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:39.138727 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.53:28400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:39.139351 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.53:28400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:39.227359 2026] [ssl:error] [pid 2981171:tid 2981171] (70014)End of file found: [client 216.73.216.199:41902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:39.328860 2026] [security2:error] [pid 2981128:tid 2981128] [client 74.7.241.10:50412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autoconfig.eganconsulting.co.uk"] [uri "/"] [unique_id "amsuXzgGzUKH8ocGp9fLzQAAACI"]
[Thu Jul 30 11:58:39.431304 2026] [security2:error] [pid 2979398:tid 2979398] [client 127.0.0.1:44282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autoconfig.cgi"] [unique_id "amsuX_GycQIzXs5-HxnTcgAAABU"]
[Thu Jul 30 11:58:39.514566 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.51:20418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:39.515192 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.51:20418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:39.521731 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.49:64100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:39.522348 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.49:64100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:39.532687 2026] [ssl:error] [pid 2981908:tid 2981908] (70014)End of file found: [client 216.73.216.199:52607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:39.623426 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.40:44318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:39.624090 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.40:44318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:39.650119 2026] [ssl:error] [pid 2981128:tid 2981128] (EAI 2)Name or service not known: [client 144.76.19.72:52804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:39.650156 2026] [ssl:error] [pid 2981128:tid 2981128] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:39.703606 2026] [ssl:error] [pid 2948863:tid 2948863] (EAI 2)Name or service not known: [client 144.76.19.72:52818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:39.703636 2026] [ssl:error] [pid 2948863:tid 2948863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:40.228367 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.56:20040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:40.228993 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.56:20040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:40.584036 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.13:29230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:40.584674 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.13:29230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:40.677249 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.36:45042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:40.677872 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.36:45042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:41.327458 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.30:26804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:41.328087 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.30:26804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:41.388308 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.66.167:47960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:41.388352 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.66.167:47960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:41.481106 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.68:49852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:41.481827 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.68:49852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:41.831111 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.26:44906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:41.831727 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.26:44906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:41.937160 2026] [ssl:error] [pid 2948863:tid 2948863] (70014)End of file found: [client 216.73.216.199:31142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:41.944311 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.66.39:58006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:41.944334 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.66.39:58006] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:42.121539 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.33:45968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:42.122170 2026] [authz_core:error] [pid 2963185:tid 2963185] [client 57.141.0.33:45968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:42.760134 2026] [ssl:error] [pid 2978126:tid 2978126] (EAI 2)Name or service not known: [client 144.76.19.72:52824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:42.760183 2026] [ssl:error] [pid 2978126:tid 2978126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:42.813961 2026] [ssl:error] [pid 2980009:tid 2980009] (EAI 2)Name or service not known: [client 144.76.19.72:52832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:42.813993 2026] [ssl:error] [pid 2980009:tid 2980009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:43.038194 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.21:52320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:43.038843 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.21:52320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:43.053973 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.68:49858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:43.054626 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.68:49858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:43.066450 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.56:20054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:43.067149 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.56:20054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:43.794777 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.5:49732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:43.795416 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.5:49732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:43.896201 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.47:23594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:43.896822 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.47:23594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:44.280896 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.16:34580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:44.281534 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.16:34580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:44.547385 2026] [ssl:error] [pid 2980821:tid 2980821] (70014)End of file found: [client 216.73.216.199:43077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:44.817927 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.53:28414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:44.818563 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.53:28414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:45.101393 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.2:35776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:45.102017 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.2:35776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:45.140773 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.18:43084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:45.141407 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.18:43084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:45.230401 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.8:21766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:45.231022 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.8:21766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:45.853349 2026] [ssl:error] [pid 2959154:tid 2959154] (70014)End of file found: [client 216.73.216.199:22167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:45.870935 2026] [ssl:error] [pid 2982540:tid 2982540] (EAI 2)Name or service not known: [client 144.76.19.72:52844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:45.870965 2026] [ssl:error] [pid 2982540:tid 2982540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:45.976556 2026] [ssl:error] [pid 2982568:tid 2982568] (EAI 2)Name or service not known: [client 144.76.19.72:52860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:45.976599 2026] [ssl:error] [pid 2982568:tid 2982568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:46.074909 2026] [security2:error] [pid 2968744:tid 2968744] [client 85.208.96.193:35250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/ekpe-society-cameroon"] [unique_id "amsuZtbWBmDHil59MDHDEQAAABo"]
[Thu Jul 30 11:58:46.204049 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.24:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:46.204698 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.24:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:46.357257 2026] [core:error] [pid 2970359:tid 2970359] [client 66.249.66.39:36133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:46.357285 2026] [core:error] [pid 2970359:tid 2970359] [client 66.249.66.39:36133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:46.395309 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.45:27416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:46.395923 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.45:27416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:46.581090 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.64.170:56173] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:46.581121 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.64.170:56173] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:58:46.731920 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.7:40648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:46.732560 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.7:40648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:46.792696 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.43:40260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:46.793321 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.43:40260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:46.812745 2026] [security2:error] [pid 2968744:tid 2968744] [client 212.92.58.67:28767] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsuZtbWBmDHil59MDHDEgAAABo"]
[Thu Jul 30 11:58:47.137861 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.41:39600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:47.138486 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.41:39600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:47.274624 2026] [ssl:error] [pid 2981127:tid 2981127] (70014)End of file found: [client 216.73.216.199:27251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:47.343350 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.62:34088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:47.343985 2026] [authz_core:error] [pid 2965304:tid 2965304] [client 57.141.0.62:34088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:47.973055 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.36:49016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:47.973685 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.36:49016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:48.092427 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.26:51396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:48.093049 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.26:51396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:48.530455 2026] [lsapi:warn] [pid 2980770:tid 2980770] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:58:48.790360 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.14:55282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:48.790978 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.14:55282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:49.044963 2026] [ssl:error] [pid 2971563:tid 2971563] (EAI 2)Name or service not known: [client 144.76.19.72:52864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:49.045005 2026] [ssl:error] [pid 2971563:tid 2971563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:49.066914 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.43:40276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:49.067549 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.43:40276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:49.099491 2026] [ssl:error] [pid 2979215:tid 2979215] (EAI 2)Name or service not known: [client 144.76.19.72:52868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:49.099531 2026] [ssl:error] [pid 2979215:tid 2979215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:49.279906 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.35:52878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:49.280539 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.35:52878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:49.336011 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 103.59.160.131:56959] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/html-api/error_log
[Thu Jul 30 11:58:49.497702 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.16:50284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:49.498328 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.16:50284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:49.552873 2026] [security2:error] [pid 2973062:tid 2973062] [client 185.191.171.12:20858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1399.0.html"] [unique_id "amsuaWY6fJ24D3YvN_S5RAAAABs"]
[Thu Jul 30 11:58:49.846115 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.2:35800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:49.846817 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.2:35800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:50.050212 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.9:35140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:50.050834 2026] [authz_core:error] [pid 2980770:tid 2980770] [client 57.141.0.9:35140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:50.074351 2026] [security2:error] [pid 2979215:tid 2979215] [client 51.68.111.218:13863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "saturnsports.com"] [uri "/robots.txt"] [unique_id "amsuasv2Pjw6X8YmlPP_4gAAABM"]
[Thu Jul 30 11:58:50.241688 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.15:37616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:50.242306 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.15:37616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:50.574576 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.50:35392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:50.575250 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.50:35392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:50.648035 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.2:35814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:50.648668 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.2:35814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:50.662688 2026] [security2:error] [pid 2978127:tid 2978127] [client 43.134.23.177:41900] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-narvi.com"] [uri "/"] [unique_id "amsuaic2MsgpCUAhsmytfQAAABw"]
[Thu Jul 30 11:58:50.696761 2026] [ssl:error] [pid 2968677:tid 2968677] (70014)End of file found: [client 216.73.216.199:36608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:51.674217 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.64:64414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:51.674839 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.64:64414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:51.795130 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.56:56990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:51.795840 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.56:56990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:52.000880 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.58:41188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:52.001506 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.58:41188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:52.190827 2026] [ssl:error] [pid 2971563:tid 2971563] (EAI 2)Name or service not known: [client 144.76.19.72:32394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:52.190860 2026] [ssl:error] [pid 2971563:tid 2971563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:52.245217 2026] [ssl:error] [pid 2979215:tid 2979215] (EAI 2)Name or service not known: [client 144.76.19.72:32416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:52.245248 2026] [ssl:error] [pid 2979215:tid 2979215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:52.591110 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.68:46562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:52.591726 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.68:46562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:52.601852 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.53:39170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:52.602470 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.53:39170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:53.411660 2026] [ssl:error] [pid 2981094:tid 2981094] (70014)End of file found: [client 216.73.216.199:17076] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:53.515645 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.60:40854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:53.516277 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.60:40854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:53.644537 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.3:41932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:53.645158 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.3:41932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:53.689749 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.24:51060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:53.690372 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.24:51060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:54.585771 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.30:52558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:54.586411 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.30:52558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:54.762649 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.43:32518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:54.763274 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.43:32518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:54.898837 2026] [security2:error] [pid 2976711:tid 2976711] [client 185.191.171.8:32320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1132.0/prev_next,prev.html"] [unique_id "amsubkeHnYqoWqc2E4DJEgAAABI"]
[Thu Jul 30 11:58:55.174800 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.63:55196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:55.175432 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.63:55196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:55.217134 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.14:61250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:55.217784 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.14:61250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:55.303198 2026] [ssl:error] [pid 2981172:tid 2981172] (EAI 2)Name or service not known: [client 144.76.19.72:32430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:55.303238 2026] [ssl:error] [pid 2981172:tid 2981172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:55.348337 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.54:56752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:55.348958 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.54:56752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:55.354903 2026] [ssl:error] [pid 2973062:tid 2973062] (EAI 2)Name or service not known: [client 144.76.19.72:32436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:55.354930 2026] [ssl:error] [pid 2973062:tid 2973062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:55.524212 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.43:32522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:55.524834 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.43:32522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:56.221651 2026] [ssl:error] [pid 2982540:tid 2982540] (70014)End of file found: [client 216.73.216.199:42251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:56.351229 2026] [security2:error] [pid 2982953:tid 2982953] [client 85.208.96.210:30608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1564.0.html"] [unique_id "amsucCN1S9S2hgr1u3x6_wAAAAM"]
[Thu Jul 30 11:58:56.358196 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.9:63520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:56.358818 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.9:63520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:56.451332 2026] [security2:error] [pid 2977827:tid 2977827] [client 20.171.55.167:1788] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ericashmore.org"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsucOK4lb5YkZx7DdC3qgAAAAI"]
[Thu Jul 30 11:58:56.451567 2026] [security2:error] [pid 2977827:tid 2977827] [client 20.171.55.167:1788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ericashmore.org"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsucOK4lb5YkZx7DdC3qgAAAAI"]
[Thu Jul 30 11:58:56.451805 2026] [security2:error] [pid 2977827:tid 2977827] [client 20.171.55.167:1788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ericashmore.org"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsucOK4lb5YkZx7DdC3qgAAAAI"]
[Thu Jul 30 11:58:56.581613 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:64480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:56.582253 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:64480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:56.825348 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.37:24416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:56.826018 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.37:24416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:57.003511 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.23:45596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:57.004145 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.23:45596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:57.163948 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.22:62160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:57.164581 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.22:62160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:57.423427 2026] [ssl:error] [pid 2982571:tid 2982571] (70014)End of file found: [client 216.73.216.199:7347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:57.599147 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.68:36552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:57.599764 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.68:36552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:57.941669 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.30:52576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:57.942365 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.30:52576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:58.408339 2026] [ssl:error] [pid 2977827:tid 2977827] (EAI 2)Name or service not known: [client 144.76.19.72:32444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:58.408373 2026] [ssl:error] [pid 2977827:tid 2977827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:58.457620 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.29:36778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:58.458238 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.29:36778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:58.464927 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:32448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:58:58.464951 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:58:58.710474 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.48:39004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:58.711102 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.48:39004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:58.884554 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.29:36786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:58.885172 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.29:36786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:58:59.176896 2026] [lsapi:warn] [pid 2983196:tid 2983196] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:58:59.238092 2026] [ssl:error] [pid 2978127:tid 2978127] (70014)End of file found: [client 216.73.216.199:28045] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:58:59.642197 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.23:45610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:58:59.642819 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.23:45610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:00.059210 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.25:55964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:00.059845 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.25:55964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:00.134399 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.37:24418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:00.135049 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.37:24418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:00.193436 2026] [authz_core:error] [pid 2983232:tid 2983232] [client 57.141.0.19:56342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:00.194100 2026] [authz_core:error] [pid 2983232:tid 2983232] [client 57.141.0.19:56342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:00.680667 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.43:37222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:00.681296 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.43:37222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:01.188558 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.70:21890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:01.189186 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.70:21890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:01.520615 2026] [ssl:error] [pid 2968677:tid 2968677] (EAI 2)Name or service not known: [client 144.76.19.72:47122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:01.520640 2026] [ssl:error] [pid 2968677:tid 2968677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:01.573645 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:47130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:01.573675 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:01.606812 2026] [ssl:error] [pid 2979398:tid 2979398] (70014)End of file found: [client 216.73.216.199:38305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:01.690593 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.17:26202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:01.691213 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.17:26202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:01.785962 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.26:46746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:01.786593 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.26:46746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:02.000299 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.11:40892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:02.000916 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.11:40892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:02.132121 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.66.8:50187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:02.132148 2026] [core:error] [pid 2982539:tid 2982539] [client 66.249.66.8:50187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:02.453033 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.28:36536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:02.453663 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.28:36536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:02.863412 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.60:23302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:02.864038 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.60:23302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:03.129207 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.18:33452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:03.129875 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.18:33452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:03.197723 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.9:50706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:03.198341 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.9:50706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:03.712617 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.1:26150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:03.713239 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.1:26150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:03.909595 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.50:49906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:03.910223 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.50:49906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:03.948219 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.40:63558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:03.948837 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.40:63558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:04.435131 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 103.59.160.131:55807] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/l10n/error_log
[Thu Jul 30 11:59:04.627800 2026] [ssl:error] [pid 2980995:tid 2980995] (EAI 2)Name or service not known: [client 144.76.19.72:47142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:04.627830 2026] [ssl:error] [pid 2980995:tid 2980995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:04.681589 2026] [ssl:error] [pid 2983385:tid 2983385] (EAI 2)Name or service not known: [client 144.76.19.72:47148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:04.681625 2026] [ssl:error] [pid 2983385:tid 2983385] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:04.757552 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.42:31248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:04.758177 2026] [authz_core:error] [pid 2980140:tid 2980140] [client 57.141.0.42:31248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:04.766581 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:37367] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory218/node0/compact
[Thu Jul 30 11:59:04.865250 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.53:63738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:04.865898 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.53:63738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:05.067381 2026] [ssl:error] [pid 2968744:tid 2968744] (70014)End of file found: [client 216.73.216.199:37367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:05.492178 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.65:61434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:05.492822 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.65:61434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:05.571907 2026] [core:error] [pid 2977827:tid 2977827] (13)Permission denied: [client 216.73.216.199:50289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory146/node0/compact
[Thu Jul 30 11:59:05.847332 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.63:55318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:05.847952 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.63:55318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:06.037971 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.17:26210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:06.038604 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.17:26210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:06.180234 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.11:40908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:06.180901 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.11:40908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:06.281718 2026] [core:error] [pid 2977827:tid 2977827] (13)Permission denied: [client 216.73.216.199:50289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory193/node0/compact
[Thu Jul 30 11:59:06.299054 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.39:56374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:06.299682 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.39:56374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:06.622917 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:06.623029 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:06.722157 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:06.722272 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:06.825858 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:06.825973 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:06.892233 2026] [core:error] [pid 2977827:tid 2977827] (13)Permission denied: [client 216.73.216.199:50289] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory190/node0/compact
[Thu Jul 30 11:59:06.930627 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:06.930743 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.051329 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.051442 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.158635 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.158748 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.236400 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.23:43224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:07.237025 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.23:43224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:07.272188 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.272305 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.338101 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.67:20602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:07.338721 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.67:20602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:07.380165 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.380271 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.482478 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.482596 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.587658 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.587767 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.691118 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.691229 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.737391 2026] [ssl:error] [pid 2980995:tid 2980995] (EAI 2)Name or service not known: [client 144.76.19.72:47156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:07.737418 2026] [ssl:error] [pid 2980995:tid 2980995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:07.792372 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.792482 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:07.793171 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:47166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:07.793197 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:07.892516 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:07.892625 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.001134 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.001252 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.097090 2026] [core:error] [pid 2971563:tid 2971563] (13)Permission denied: [client 216.73.216.199:20285] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory251/node0/compact
[Thu Jul 30 11:59:08.104764 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.68:52986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:08.105381 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.68:52986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:08.112273 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.112377 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.224580 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.224693 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.348487 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.348601 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.453564 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.453671 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.465727 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.52:37602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:08.466342 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.52:37602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:08.554713 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.554823 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.655607 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.5:28324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:08.656270 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.5:28324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:08.656800 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.656904 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.702634 2026] [ssl:error] [pid 2971563:tid 2971563] (70014)End of file found: [client 216.73.216.199:20285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:08.759151 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.759259 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.860288 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.860396 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:08.960798 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:08.960918 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.040814 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.27:60364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:09.041431 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.27:60364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:09.063608 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.063718 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.164423 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.164548 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.266577 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.266692 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.301799 2026] [core:error] [pid 2976711:tid 2976711] [client 66.249.66.167:50577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:09.301822 2026] [core:error] [pid 2976711:tid 2976711] [client 66.249.66.167:50577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:09.405345 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.405452 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.508405 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.508524 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.611059 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.47:31838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:09.611731 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.47:31838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:09.620508 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.620616 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.634253 2026] [ssl:error] [pid 2977827:tid 2977827] (70014)End of file found: [client 216.73.216.199:50289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:09.720828 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.720936 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.751233 2026] [lsapi:warn] [pid 2982569:tid 2982569] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:59:09.792379 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.56:60398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:09.793039 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.56:60398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:09.838783 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.66:40064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:09.839401 2026] [authz_core:error] [pid 2983387:tid 2983387] [client 57.141.0.66:40064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:09.839966 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.840084 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:09.892051 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.42:31262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:09.892677 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.42:31262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:09.947261 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:09.947372 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.058376 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.058488 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.198385 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.198497 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.239465 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.13:49454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:10.240097 2026] [authz_core:error] [pid 2970359:tid 2970359] [client 57.141.0.13:49454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:10.302961 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.303090 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.443914 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.444080 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.554165 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.554324 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.661917 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.662080 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.776859 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.777012 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.852776 2026] [ssl:error] [pid 2973061:tid 2973061] (EAI 2)Name or service not known: [client 144.76.19.72:31450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:10.852806 2026] [ssl:error] [pid 2973061:tid 2973061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:10.861729 2026] [core:error] [pid 2981908:tid 2981908] (13)Permission denied: [client 216.73.216.199:65009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/kmodlve/sections/__param
[Thu Jul 30 11:59:10.892188 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.892344 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:10.907715 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:31452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:10.907736 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:10.996939 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:10.997079 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.097901 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.098010 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.110369 2026] [security2:error] [pid 2982569:tid 2982569] [client 43.154.237.10:40973] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuf4U6CajuBBFjQxASKQAAACU"]
[Thu Jul 30 11:59:11.110411 2026] [security2:error] [pid 2982569:tid 2982569] [client 43.154.237.10:40973] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuf4U6CajuBBFjQxASKQAAACU"]
[Thu Jul 30 11:59:11.110664 2026] [security2:error] [pid 2982569:tid 2982569] [client 43.154.237.10:40973] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuf4U6CajuBBFjQxASKQAAACU"]
[Thu Jul 30 11:59:11.205710 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.205817 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.215414 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.46:53666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:11.216032 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.46:53666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:11.225980 2026] [authz_core:error] [pid 2983388:tid 2983388] [client 57.141.0.44:28882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:11.226598 2026] [authz_core:error] [pid 2983388:tid 2983388] [client 57.141.0.44:28882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:11.315207 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.315314 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.443098 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.443207 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.542798 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.542912 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.649016 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.649139 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.672563 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.11:59474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:11.673184 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.11:59474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:11.752382 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.752493 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.756080 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.10:35464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:11.756697 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.10:35464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:11.859613 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.859724 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:11.962128 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:11.962240 2026] [cgi:error] [pid 2983385:tid 2983385] [client 172.213.225.181:28721] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.132286 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.132400 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.293168 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.293280 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.372145 2026] [ssl:error] [pid 2981908:tid 2981908] (70014)End of file found: [client 216.73.216.199:65009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:12.397841 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.397953 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.523296 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.523410 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.531541 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.70:38208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:12.532171 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.70:38208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:12.627216 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.627328 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.697802 2026] [security2:error] [pid 2983386:tid 2983386] [client 43.161.251.162:53588] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highbrightness.com"] [uri "/"] [unique_id "amsugIJQy0H7ktxi7CcVmgAAADE"]
[Thu Jul 30 11:59:12.736035 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.736152 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.838036 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.838154 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:12.899983 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.34:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:12.900610 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.34:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:12.951271 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:12.951399 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.055361 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.055494 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.092469 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.9:24642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:13.093105 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.9:24642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:13.164615 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.164729 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.219408 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.9:24646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:13.220029 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.9:24646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:13.255222 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.58:32780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:13.255834 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.58:32780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:13.279114 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.279242 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.398533 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.398660 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.508537 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.508662 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.618687 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.618807 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.621084 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.69:28696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:13.621707 2026] [authz_core:error] [pid 2981171:tid 2981171] [client 57.141.0.69:28696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:13.734757 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.734884 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.841210 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.841338 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:13.952890 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:13.953016 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.043466 2026] [ssl:error] [pid 2981171:tid 2981171] (EAI 2)Name or service not known: [client 144.76.19.72:31466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:14.043496 2026] [ssl:error] [pid 2981171:tid 2981171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:14.046666 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.16:33684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:14.047285 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.16:33684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:14.073688 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.073816 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.096090 2026] [ssl:error] [pid 2974723:tid 2974723] (EAI 2)Name or service not known: [client 144.76.19.72:31482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:14.096121 2026] [ssl:error] [pid 2974723:tid 2974723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:14.181521 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.181645 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.305557 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.305675 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.407243 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.407353 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.534582 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.534711 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.648354 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.648483 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.762528 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.762674 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:14.866180 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:14.866305 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.005414 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.005565 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.110757 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.110881 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.155334 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.51:60348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:15.155953 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.51:60348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:15.159674 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.71:57684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:15.160285 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.71:57684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:15.222084 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.222214 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.347598 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.347712 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.470265 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.470389 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.533843 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.34:32370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:15.534479 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.34:32370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:15.559417 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.71:57690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:15.560039 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.71:57690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:15.615082 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.615209 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.720144 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.720273 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.825703 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.825824 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:15.932851 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:15.932981 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.036079 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.036212 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.098355 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.50:25614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:16.098972 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.50:25614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:16.152378 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.152491 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.208474 2026] [security2:error] [pid 2971563:tid 2971563] [client 189.27.89.170:38022] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuhH4m6Yspu21aCigtrQAAAB4"]
[Thu Jul 30 11:59:16.208560 2026] [security2:error] [pid 2971563:tid 2971563] [client 189.27.89.170:38022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuhH4m6Yspu21aCigtrQAAAB4"]
[Thu Jul 30 11:59:16.208850 2026] [security2:error] [pid 2971563:tid 2971563] [client 189.27.89.170:38022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuhH4m6Yspu21aCigtrQAAAB4"]
[Thu Jul 30 11:59:16.226352 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.40:62426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:16.226969 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.40:62426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:16.256089 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.256202 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.366539 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.366659 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.478222 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.478340 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.595844 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.595955 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.700392 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.700510 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.809927 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.810048 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:16.933443 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:16.933561 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.035888 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.036016 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.092987 2026] [ssl:error] [pid 2970314:tid 2970314] (70014)End of file found: [client 216.73.216.199:37705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:17.138320 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.138430 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.149563 2026] [ssl:error] [pid 2978127:tid 2978127] (EAI 2)Name or service not known: [client 144.76.19.72:31498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:17.149601 2026] [ssl:error] [pid 2978127:tid 2978127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:17.204210 2026] [ssl:error] [pid 2984394:tid 2984394] (EAI 2)Name or service not known: [client 144.76.19.72:31502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:17.204242 2026] [ssl:error] [pid 2984394:tid 2984394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:17.218478 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.35:60728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:17.219101 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.35:60728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:17.243144 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.243253 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.347946 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.348056 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.362762 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.51:54320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:17.363431 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.51:54320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:17.393464 2026] [security2:error] [pid 2948863:tid 2948863] [client 216.73.216.199:64631] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/sudo.conf"] [unique_id "amsuhYvHY6yIYrSvOSeZkQAAADM"]
[Thu Jul 30 11:59:17.393764 2026] [security2:error] [pid 2948863:tid 2948863] [client 216.73.216.199:64631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/sudo.conf"] [unique_id "amsuhYvHY6yIYrSvOSeZkQAAADM"]
[Thu Jul 30 11:59:17.393971 2026] [security2:error] [pid 2948863:tid 2948863] [client 216.73.216.199:64631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/sudo.conf"] [unique_id "amsuhYvHY6yIYrSvOSeZkQAAADM"]
[Thu Jul 30 11:59:17.476880 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.476993 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.594291 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.594413 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.696025 2026] [ssl:error] [pid 2948863:tid 2948863] (70014)End of file found: [client 216.73.216.199:64631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:17.720350 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.720461 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.726302 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.4:31284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:17.726983 2026] [authz_core:error] [pid 2982539:tid 2982539] [client 57.141.0.4:31284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:17.823203 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.823313 2026] [cgi:error] [pid 2981094:tid 2981094] [client 172.213.225.181:40767] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:17.848612 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.66.194:57960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:17.848634 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.66.194:57960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:17.939713 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.36:24684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:17.940337 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.36:24684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:17.960424 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:17.960542 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.067249 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.067362 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.114685 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.14:51912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:18.115319 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.14:51912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:18.171840 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.172152 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.277449 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.277570 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.378944 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.379051 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.477548 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.477654 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.605310 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.605421 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.619928 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.18:60822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:18.620558 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.18:60822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:18.719795 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.719910 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.834187 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.834296 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:18.934473 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:18.934604 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.038894 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.039006 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.065100 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.13:63396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:19.065717 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.13:63396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:19.141098 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.141207 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.247577 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.247687 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.254856 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.70:26288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:19.255471 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.70:26288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:19.353586 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.353695 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.461277 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.461389 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.512444 2026] [ssl:error] [pid 2981094:tid 2981094] (70014)End of file found: [client 216.73.216.199:20774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:19.573988 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.574127 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.648357 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.43:45910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:19.648990 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.43:45910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:19.683329 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.683441 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.727286 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.15:40954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:19.727905 2026] [authz_core:error] [pid 2983385:tid 2983385] [client 57.141.0.15:40954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:19.787245 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.787356 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.908736 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:19.908851 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:19.995720 2026] [security2:error] [pid 2981128:tid 2981128] [client 91.234.62.229:56852] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuhzgGzUKH8ocGp9fL2wAAACI"]
[Thu Jul 30 11:59:19.995762 2026] [security2:error] [pid 2981128:tid 2981128] [client 91.234.62.229:56852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuhzgGzUKH8ocGp9fL2wAAACI"]
[Thu Jul 30 11:59:19.996021 2026] [security2:error] [pid 2981128:tid 2981128] [client 91.234.62.229:56852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuhzgGzUKH8ocGp9fL2wAAACI"]
[Thu Jul 30 11:59:20.009711 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.009823 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.116152 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.116262 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.217472 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.217609 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.277756 2026] [ssl:error] [pid 2984798:tid 2984798] (EAI 2)Name or service not known: [client 144.76.19.72:23400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:20.277800 2026] [ssl:error] [pid 2984798:tid 2984798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:20.328218 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.328327 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.332537 2026] [ssl:error] [pid 2979398:tid 2979398] (EAI 2)Name or service not known: [client 144.76.19.72:23404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:20.332567 2026] [ssl:error] [pid 2979398:tid 2979398] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:20.336563 2026] [lsapi:warn] [pid 2984797:tid 2984797] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:59:20.434246 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.434358 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.457341 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.37:36758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:20.457960 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.37:36758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:20.554227 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.554349 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.659250 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.659363 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.741846 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.26:20588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:20.742471 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.26:20588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:20.771714 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.771825 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:20.896200 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:20.896324 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.003402 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.003535 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.040883 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.25:29368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:21.041534 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.25:29368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:21.119081 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.119188 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.225885 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.225994 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.325338 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.325446 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.375826 2026] [authz_core:error] [pid 2984796:tid 2984796] [client 57.141.0.68:36038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:21.376451 2026] [authz_core:error] [pid 2984796:tid 2984796] [client 57.141.0.68:36038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:21.426628 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.426738 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.553817 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.553924 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.663448 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.663563 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.763808 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.763916 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.863277 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.863387 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:21.882862 2026] [cgi:error] [pid 2980995:tid 2980995] [client 136.226.166.187:21117] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 11:59:21.917683 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.34:33130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:21.918313 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.34:33130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:21.965089 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:21.965198 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.057208 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.11:44712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:22.057836 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.11:44712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:22.065630 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.065738 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.173895 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.174006 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.275521 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.275630 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.296462 2026] [authz_core:error] [pid 2982416:tid 2982416] [client 57.141.0.51:54324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:22.297102 2026] [authz_core:error] [pid 2982416:tid 2982416] [client 57.141.0.51:54324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:22.375521 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.375628 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.467199 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.66:49052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:22.467825 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.66:49052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:22.480310 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.480417 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.599276 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.41:44382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:22.599359 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.599473 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.599907 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.41:44382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:22.703310 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.703416 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.823089 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.823200 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:22.924747 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:22.924860 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.024571 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.024688 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.066857 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.1:31104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:23.067481 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.1:31104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:23.124370 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.124487 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.225851 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.225959 2026] [cgi:error] [pid 2982953:tid 2982953] [client 172.213.225.181:28689] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.374744 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.374866 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.388570 2026] [ssl:error] [pid 2973062:tid 2973062] (EAI 2)Name or service not known: [client 144.76.19.72:23406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:23.388592 2026] [ssl:error] [pid 2973062:tid 2973062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:23.398636 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.35:29562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:23.399252 2026] [authz_core:error] [pid 2970314:tid 2970314] [client 57.141.0.35:29562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:23.442907 2026] [ssl:error] [pid 2984798:tid 2984798] (EAI 2)Name or service not known: [client 144.76.19.72:23410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:23.442933 2026] [ssl:error] [pid 2984798:tid 2984798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:23.486151 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.486267 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.589128 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.589242 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.632649 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.47:36914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:23.633269 2026] [authz_core:error] [pid 2948863:tid 2948863] [client 57.141.0.47:36914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:23.695096 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.695207 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.754778 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.15:40986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:23.755403 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.15:40986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:23.800470 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.800590 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:23.933106 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:23.933231 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:24.039134 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:24.039246 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:24.147385 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:24.147497 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:24.251822 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:24.251981 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:24.363126 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 11:59:24.363237 2026] [cgi:error] [pid 2974723:tid 2974723] [client 172.213.225.181:40764] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 11:59:24.639111 2026] [core:error] [pid 2982540:tid 2982540] (13)Permission denied: [client 216.73.216.199:32924] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/createacct
[Thu Jul 30 11:59:24.642695 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.68:36048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:24.643338 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.68:36048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:24.826124 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.7:55126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:24.826751 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.7:55126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:24.894156 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.59:56046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:24.894772 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.59:56046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:24.940422 2026] [ssl:error] [pid 2982540:tid 2982540] (70014)End of file found: [client 216.73.216.199:32924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:25.020760 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.9:45332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:25.021383 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.9:45332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:25.241935 2026] [ssl:error] [pid 2968677:tid 2968677] (70014)End of file found: [client 216.73.216.199:10813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:26.007129 2026] [authz_core:error] [pid 2982416:tid 2982416] [client 57.141.0.70:26300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:26.007744 2026] [authz_core:error] [pid 2982416:tid 2982416] [client 57.141.0.70:26300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:26.112992 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.12:48116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:26.113663 2026] [authz_core:error] [pid 2950494:tid 2950494] [client 57.141.0.12:48116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:26.162192 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.62:59374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:26.162809 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.62:59374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:26.502613 2026] [ssl:error] [pid 2983196:tid 2983196] (EAI 2)Name or service not known: [client 144.76.19.72:23418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:26.502651 2026] [ssl:error] [pid 2983196:tid 2983196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:26.600083 2026] [ssl:error] [pid 2978127:tid 2978127] (EAI 2)Name or service not known: [client 144.76.19.72:23420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:26.600113 2026] [ssl:error] [pid 2978127:tid 2978127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:26.967894 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.44:54714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:26.968534 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.44:54714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:27.250487 2026] [authz_core:error] [pid 2982416:tid 2982416] [client 57.141.0.45:23278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:27.251150 2026] [authz_core:error] [pid 2982416:tid 2982416] [client 57.141.0.45:23278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:27.252711 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 103.59.160.131:55493] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/interactivity-api/error_log, referer: https://www.google.com/
[Thu Jul 30 11:59:27.497194 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.63:46474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:27.497813 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.63:46474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:27.915323 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.41:55796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:27.916003 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.41:55796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:27.938117 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.10:30186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:27.938804 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.10:30186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:28.096160 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.3:57104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:28.096841 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.3:57104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:28.599279 2026] [ssl:error] [pid 2983386:tid 2983386] (70014)End of file found: [client 216.73.216.199:27812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:28.747146 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.43:40834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:28.747829 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.43:40834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:28.833253 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.40:43686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:28.833860 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.40:43686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:28.923445 2026] [ssl:error] [pid 2981172:tid 2981172] (70014)End of file found: [client 216.73.216.199:35686] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:29.002202 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.35:48732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:29.002821 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.35:48732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:29.534023 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:63779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/alloc_calls
[Thu Jul 30 11:59:29.654370 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.21:23388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:29.654994 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.21:23388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:29.657728 2026] [ssl:error] [pid 2984696:tid 2984696] (EAI 2)Name or service not known: [client 144.76.19.72:22186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:29.657750 2026] [ssl:error] [pid 2984696:tid 2984696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:29.716301 2026] [ssl:error] [pid 2985734:tid 2985734] (EAI 2)Name or service not known: [client 144.76.19.72:22190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:29.716337 2026] [ssl:error] [pid 2985734:tid 2985734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:29.910271 2026] [core:error] [pid 2983305:tid 2983305] [client 66.249.66.194:54545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:29.910295 2026] [core:error] [pid 2983305:tid 2983305] [client 66.249.66.194:54545] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:30.213542 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.30:21754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:30.214161 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.30:21754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:30.293561 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.19:27156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:30.294235 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.19:27156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:30.593055 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.66:49068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:30.593696 2026] [authz_core:error] [pid 2979398:tid 2979398] [client 57.141.0.66:49068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:30.744190 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:63779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/cache_dma
[Thu Jul 30 11:59:30.950914 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.30:21770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:30.951539 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.30:21770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:30.963625 2026] [lsapi:warn] [pid 2982571:tid 2982571] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:59:31.322614 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.23:41202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:31.323242 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.23:41202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:31.678039 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.39:24942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:31.678692 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.39:24942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:31.774593 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.48:29564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:31.775219 2026] [authz_core:error] [pid 2973062:tid 2973062] [client 57.141.0.48:29564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:31.962475 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:63779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory227/node0/compact
[Thu Jul 30 11:59:32.075844 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.7:55142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:32.076509 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.7:55142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:32.263382 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:63779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/slabs_cpu_partial
[Thu Jul 30 11:59:32.775257 2026] [ssl:error] [pid 2983305:tid 2983305] (EAI 2)Name or service not known: [client 144.76.19.72:22196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:32.775289 2026] [ssl:error] [pid 2983305:tid 2983305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:32.833339 2026] [ssl:error] [pid 2974723:tid 2974723] (EAI 2)Name or service not known: [client 144.76.19.72:22212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:32.833368 2026] [ssl:error] [pid 2974723:tid 2974723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:33.036972 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.8:41434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:33.038286 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.8:41434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:33.362194 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.24:55092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:33.362824 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.24:55092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:33.488837 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.27:34448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:33.489472 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.27:34448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:33.769227 2026] [core:error] [pid 2968744:tid 2968744] (13)Permission denied: [client 216.73.216.199:63779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/RAWv6/objects
[Thu Jul 30 11:59:34.032887 2026] [security2:error] [pid 2984798:tid 2984798] [client 43.140.247.223:58982] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "broadbentandsmith.com"] [uri "/"] [unique_id "amsulvippxhy9iW4z21B4QAAADo"]
[Thu Jul 30 11:59:34.189790 2026] [authz_core:error] [pid 2984696:tid 2984696] [client 57.141.0.2:36168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:34.190394 2026] [authz_core:error] [pid 2984696:tid 2984696] [client 57.141.0.2:36168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:34.226319 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.66.167:36895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:34.226337 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.66.167:36895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:34.257541 2026] [core:error] [pid 2983305:tid 2983305] [client 57.141.0.18:53972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:34.257577 2026] [core:error] [pid 2983305:tid 2983305] [client 57.141.0.18:53972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:34.434267 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.13:28230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:34.434895 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.13:28230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:34.964795 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.52:31124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:34.965421 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.52:31124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:35.576389 2026] [ssl:error] [pid 2968744:tid 2968744] (70014)End of file found: [client 216.73.216.199:63779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:35.628841 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.55:33724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:35.629471 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.55:33724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:35.784535 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.5:26338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:35.785153 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.5:26338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:35.862904 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.33:41072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:35.863539 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.33:41072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:35.890670 2026] [ssl:error] [pid 2983386:tid 2983386] (EAI 2)Name or service not known: [client 144.76.19.72:22220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:35.890701 2026] [ssl:error] [pid 2983386:tid 2983386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:35.947530 2026] [ssl:error] [pid 2982953:tid 2982953] (EAI 2)Name or service not known: [client 144.76.19.72:22236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:35.947564 2026] [ssl:error] [pid 2982953:tid 2982953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:36.029676 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.8:31394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:36.030301 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.8:31394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:36.064404 2026] [core:error] [pid 2983473:tid 2983473] (13)Permission denied: [client 216.73.216.199:33867] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/object_size
[Thu Jul 30 11:59:36.409119 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.15:32404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:36.409755 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.15:32404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:36.630799 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.71:47848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:36.631425 2026] [authz_core:error] [pid 2973061:tid 2973061] [client 57.141.0.71:47848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:36.890187 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.15:32420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:36.890812 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.15:32420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:36.950931 2026] [security2:error] [pid 2978127:tid 2978127] [client 114.119.146.111:46497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,103,30,17/request_format~html"] [unique_id "amsumCc2MsgpCUAhsmytigAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,103,30,17/request_format~html
[Thu Jul 30 11:59:37.240189 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.54:45516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:37.240811 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.54:45516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:37.684251 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.71:47860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:37.684878 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.71:47860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:38.031317 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.1:46514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:38.031937 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.1:46514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:38.295927 2026] [core:error] [pid 2983355:tid 2983355] (13)Permission denied: [client 216.73.216.199:28273] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/red_zone
[Thu Jul 30 11:59:38.349900 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.24:59542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:38.350534 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.24:59542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:38.921059 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.12:42384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:38.921710 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.12:42384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:38.978964 2026] [security2:error] [pid 2985734:tid 2985734] [client 114.119.146.111:46501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,103,30,17/request_format~html"] [unique_id "amsumu8NSUcqWBWN1C20XwAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,15,103,30,17/request_format~html
[Thu Jul 30 11:59:39.004229 2026] [ssl:error] [pid 2980821:tid 2980821] (EAI 2)Name or service not known: [client 144.76.19.72:22240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:39.004257 2026] [ssl:error] [pid 2980821:tid 2980821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:39.055618 2026] [ssl:error] [pid 2981127:tid 2981127] (EAI 2)Name or service not known: [client 144.76.19.72:22244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:39.055645 2026] [ssl:error] [pid 2981127:tid 2981127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:39.199538 2026] [core:error] [pid 2983355:tid 2983355] (13)Permission denied: [client 216.73.216.199:28273] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark_connector/objects_partial
[Thu Jul 30 11:59:39.439580 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.51:59492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:39.440201 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.51:59492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:39.789803 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:39.789895 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:39.833194 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.23:24254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:39.833814 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.23:24254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:39.839416 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.32:65298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:39.840019 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.32:65298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:39.909286 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.68:44994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:39.909905 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.68:44994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:39.940835 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/this_is_a_new_hello_world.php
[Thu Jul 30 11:59:39.940904 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:40.245745 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.45:61992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:40.246376 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.45:61992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:40.399557 2026] [core:error] [pid 2983473:tid 2983473] (13)Permission denied: [client 216.73.216.199:33867] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/usersize
[Thu Jul 30 11:59:40.443539 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.47:25082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:40.444159 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.47:25082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:41.322487 2026] [ssl:error] [pid 2983355:tid 2983355] (70014)End of file found: [client 216.73.216.199:28273] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:41.478375 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.7:33066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:41.479006 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.7:33066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:41.492757 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.34:54006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:41.493375 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.34:54006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:41.560164 2026] [lsapi:warn] [pid 2983386:tid 2983386] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:59:41.861493 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.33:40790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:41.862131 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.33:40790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:42.112869 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:25954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:42.112897 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:42.166242 2026] [ssl:error] [pid 2983305:tid 2983305] (EAI 2)Name or service not known: [client 144.76.19.72:25968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:42.166274 2026] [ssl:error] [pid 2983305:tid 2983305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:42.227742 2026] [core:error] [pid 2983473:tid 2983473] (13)Permission denied: [client 216.73.216.199:33867] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/usersize
[Thu Jul 30 11:59:42.343102 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 88.230.148.140:42775] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:59:42.787201 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 88.230.148.140:44204] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:59:42.934950 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.71:47870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:42.935675 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.71:47870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:43.030998 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.14:36176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:43.031641 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.14:36176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:43.384689 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.28:62188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:43.385313 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.28:62188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:43.428103 2026] [authz_core:error] [pid 2984696:tid 2984696] [client 88.230.148.140:45313] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:59:43.657773 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 88.230.148.140:43295] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 11:59:43.848683 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.52:54514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:43.849305 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.52:54514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:43.950312 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.15:32426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:43.950938 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.15:32426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:44.029341 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.18:43964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:44.029961 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.18:43964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:44.372414 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.28:62194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:44.373043 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.28:62194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:44.447497 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/x.php
[Thu Jul 30 11:59:44.447587 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.484143 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/mgrr.php
[Thu Jul 30 11:59:44.484212 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.520591 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/domvf.php
[Thu Jul 30 11:59:44.520666 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.556685 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/yup.php
[Thu Jul 30 11:59:44.556754 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.592838 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/X.php
[Thu Jul 30 11:59:44.592904 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.629054 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/dyt8mjxc3yofbkoriukvgjaCdefault.php
[Thu Jul 30 11:59:44.629138 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.708980 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/gec.php
[Thu Jul 30 11:59:44.709052 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.745317 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/sky.php
[Thu Jul 30 11:59:44.745389 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.781300 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/fffm.php
[Thu Jul 30 11:59:44.781359 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.817454 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/sixxis.php
[Thu Jul 30 11:59:44.817524 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.829397 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.56:24932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:44.830013 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.56:24932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:44.854050 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/yj09.php
[Thu Jul 30 11:59:44.854137 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.889868 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/k.php
[Thu Jul 30 11:59:44.889926 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.930306 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/k2.php
[Thu Jul 30 11:59:44.930377 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:44.977083 2026] [core:error] [pid 2983473:tid 2983473] (13)Permission denied: [client 216.73.216.199:33867] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/align
[Thu Jul 30 11:59:45.006605 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/w.php
[Thu Jul 30 11:59:45.006675 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.048133 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/fpwch.php
[Thu Jul 30 11:59:45.048201 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.086185 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/w2025.php
[Thu Jul 30 11:59:45.086248 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.123090 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/FWAZ.php
[Thu Jul 30 11:59:45.123152 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.185137 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/qterm.php
[Thu Jul 30 11:59:45.185210 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.190560 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.6:50968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:45.191173 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.6:50968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:45.221134 2026] [ssl:error] [pid 2974816:tid 2974816] (EAI 2)Name or service not known: [client 144.76.19.72:25974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:45.221161 2026] [ssl:error] [pid 2974816:tid 2974816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:45.221647 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/blurbs.php
[Thu Jul 30 11:59:45.221713 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.257983 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-ws68.php
[Thu Jul 30 11:59:45.258051 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.277241 2026] [ssl:error] [pid 2984082:tid 2984082] (EAI 2)Name or service not known: [client 144.76.19.72:25982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:45.277278 2026] [ssl:error] [pid 2984082:tid 2984082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:45.296428 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xyn.php
[Thu Jul 30 11:59:45.296497 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.332599 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ccc.php
[Thu Jul 30 11:59:45.332665 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.368566 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/get.php
[Thu Jul 30 11:59:45.368627 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.423190 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/images.php
[Thu Jul 30 11:59:45.423254 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.459255 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/alls.php
[Thu Jul 30 11:59:45.459327 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.495831 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/coffexium.php
[Thu Jul 30 11:59:45.495911 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.533923 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/red.php
[Thu Jul 30 11:59:45.534031 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:45.572345 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:45.572460 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.101341 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.28:62204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:46.101975 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.28:62204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:46.171460 2026] [core:error] [pid 2974816:tid 2974816] [client 52.167.144.217:16900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:46.171485 2026] [core:error] [pid 2974816:tid 2974816] [client 52.167.144.217:16900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:46.257101 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.34:54012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:46.257733 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.34:54012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:46.260155 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:46.260256 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.423851 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.17:31708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:46.424553 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.17:31708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:46.510655 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:46.510742 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.548625 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:46.548710 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.585717 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:46.585815 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.596495 2026] [security2:error] [pid 2981128:tid 2981128] [client 85.208.96.200:58458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/concordia-parish-coroners-office"] [unique_id "amsuojgGzUKH8ocGp9fL5QAAACI"]
[Thu Jul 30 11:59:46.654861 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin.php
[Thu Jul 30 11:59:46.654944 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.691416 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/177.php
[Thu Jul 30 11:59:46.691511 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.727809 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/199.php
[Thu Jul 30 11:59:46.727891 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.764155 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file52.php
[Thu Jul 30 11:59:46.764231 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.769579 2026] [security2:error] [pid 2975020:tid 2975020] [client 43.157.67.70:34158] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thelambproductions.com"] [uri "/"] [unique_id "amsuovtcyb5j9sZtq6LJjQAAAC8"]
[Thu Jul 30 11:59:46.802028 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/geck.php
[Thu Jul 30 11:59:46.802151 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.839230 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/biufile.php
[Thu Jul 30 11:59:46.839314 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.875724 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/dejavu.php
[Thu Jul 30 11:59:46.875804 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.912009 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aaf.php
[Thu Jul 30 11:59:46.912099 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.949362 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ha.php
[Thu Jul 30 11:59:46.949445 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:46.996203 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.46:63506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:46.996836 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.46:63506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:47.256759 2026] [security2:error] [pid 2983386:tid 2983386] [client 46.229.253.2:23242] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "dbstart.com"] [uri "/"] [unique_id "amsuo4JQy0H7ktxi7CcVsQAAADE"]
[Thu Jul 30 11:59:47.257607 2026] [security2:error] [pid 2983386:tid 2983386] [client 46.229.253.2:23242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.com"] [uri "/"] [unique_id "amsuo4JQy0H7ktxi7CcVsQAAADE"]
[Thu Jul 30 11:59:47.257970 2026] [security2:error] [pid 2983386:tid 2983386] [client 46.229.253.2:23242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "dbstart.com"] [uri "/"] [unique_id "amsuo4JQy0H7ktxi7CcVsQAAADE"]
[Thu Jul 30 11:59:47.412122 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.15:35984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:47.412742 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.15:35984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:47.479289 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.27:59430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:47.479910 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.27:59430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:47.701813 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.71:60032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:47.702436 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.71:60032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:47.707206 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/hur.php
[Thu Jul 30 11:59:47.707316 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:47.917868 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/h02ugyh.php
[Thu Jul 30 11:59:47.917950 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:47.954596 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/155.php
[Thu Jul 30 11:59:47.954680 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:47.991225 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ops.php
[Thu Jul 30 11:59:47.991309 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.027976 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ingfo.php
[Thu Jul 30 11:59:48.028061 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.064725 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/error_log.php
[Thu Jul 30 11:59:48.064812 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.100874 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/koala.php
[Thu Jul 30 11:59:48.100952 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.143327 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/mac.php
[Thu Jul 30 11:59:48.143409 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.182426 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wefile.php
[Thu Jul 30 11:59:48.182526 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.219275 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:48.219361 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.255406 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.19:63948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:48.255719 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:48.255805 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.256055 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.19:63948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:48.307295 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/makeasmtp.php
[Thu Jul 30 11:59:48.307382 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.335168 2026] [ssl:error] [pid 2978127:tid 2978127] (EAI 2)Name or service not known: [client 144.76.19.72:25986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:48.335198 2026] [ssl:error] [pid 2978127:tid 2978127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:48.348564 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/2P.php
[Thu Jul 30 11:59:48.348642 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.400836 2026] [ssl:error] [pid 2984394:tid 2984394] (EAI 2)Name or service not known: [client 144.76.19.72:26000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:48.400865 2026] [ssl:error] [pid 2984394:tid 2984394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:48.429344 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/.well-known/about.php
[Thu Jul 30 11:59:48.429420 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.461564 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.28:62214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:48.462200 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.28:62214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:48.479287 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:48.479364 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.515679 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/system_log.php
[Thu Jul 30 11:59:48.515750 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.559840 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:48.559943 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.596574 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:48.596658 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:48.626480 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.29:64682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:48.627165 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.29:64682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:48.716752 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.16:60552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:48.717375 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.16:60552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:48.951537 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.4:57212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:48.952163 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.4:57212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:49.011588 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.27:59450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:49.012216 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.27:59450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:49.415036 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/crgio.php
[Thu Jul 30 11:59:49.415133 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:49.460635 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/pucci.php
[Thu Jul 30 11:59:49.460708 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:49.497717 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:49.497782 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:49.533850 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:49.533913 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:49.614401 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.16:60560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:49.615172 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.16:60560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:49.677668 2026] [core:error] [pid 2981128:tid 2981128] (13)Permission denied: [client 216.73.216.199:46631] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/removeacct
[Thu Jul 30 11:59:49.917633 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.52:52152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:49.918252 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.52:52152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:49.976271 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.69:58446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:49.976920 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.69:58446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:50.066134 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-temp.php
[Thu Jul 30 11:59:50.066214 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:50.127006 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:50.127095 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:50.159109 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.49:60636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:50.159729 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.49:60636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:50.166668 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/puc.php
[Thu Jul 30 11:59:50.166733 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:50.217999 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/dx.php
[Thu Jul 30 11:59:50.218083 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:50.773730 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:50.773810 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:50.810357 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/7.php
[Thu Jul 30 11:59:50.810430 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:51.060632 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.21:20762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:51.061258 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.21:20762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:51.217489 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.2:57192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:51.218117 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.2:57192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:51.266837 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.28:62228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:51.267457 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.28:62228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:51.347236 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.31:38326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:51.347858 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.31:38326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:51.471329 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:50410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:51.471387 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:51.529111 2026] [ssl:error] [pid 2983473:tid 2983473] (EAI 2)Name or service not known: [client 144.76.19.72:50416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:51.529140 2026] [ssl:error] [pid 2983473:tid 2983473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:51.847531 2026] [core:error] [pid 2971563:tid 2971563] [client 66.249.64.170:65195] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:51.847555 2026] [core:error] [pid 2971563:tid 2971563] [client 66.249.64.170:65195] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:51.944565 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/8.php
[Thu Jul 30 11:59:51.944637 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:51.983340 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1.php
[Thu Jul 30 11:59:51.983400 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:52.024185 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/about.php
[Thu Jul 30 11:59:52.024243 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:52.061984 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin.php
[Thu Jul 30 11:59:52.062042 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:52.096556 2026] [ssl:error] [pid 2984082:tid 2984082] (70014)End of file found: [client 216.73.216.199:36408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:52.104523 2026] [lsapi:warn] [pid 2983473:tid 2983473] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 11:59:52.199506 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.35:59770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:52.200126 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.35:59770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:52.698885 2026] [ssl:error] [pid 2981128:tid 2981128] (70014)End of file found: [client 216.73.216.199:46631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:52.699225 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/edit.php
[Thu Jul 30 11:59:52.699315 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:52.737009 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:52.737121 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:52.896736 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.11:53708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:52.897357 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.11:53708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:53.122993 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.28:63492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:53.123612 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.28:63492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:53.153267 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.18:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:53.153893 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.18:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:53.191965 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.65:48780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:53.192679 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.65:48780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:53.301062 2026] [ssl:error] [pid 2985734:tid 2985734] (70014)End of file found: [client 216.73.216.199:37188] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:53.725585 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.55:54526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:53.726324 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.55:54526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:53.822406 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/inputs.php
[Thu Jul 30 11:59:53.822554 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:53.882481 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/av.php
[Thu Jul 30 11:59:53.882576 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:53.920795 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/classwithtostring.php
[Thu Jul 30 11:59:53.920900 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:53.957632 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:53.957727 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:53.996576 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-blog.php
[Thu Jul 30 11:59:53.996715 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.035199 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:54.035341 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.073386 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:54.073481 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.112570 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/adminfuns.php
[Thu Jul 30 11:59:54.112710 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.140952 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.41:52486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:54.141637 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.41:52486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:54.151348 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/goods.php
[Thu Jul 30 11:59:54.151469 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.191220 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ms-edit.php
[Thu Jul 30 11:59:54.191351 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.259857 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/222.php
[Thu Jul 30 11:59:54.259966 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.299043 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/cgi-bin/index.php
[Thu Jul 30 11:59:54.299153 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.336150 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:54.336248 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.375023 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/BDKR28WP.php
[Thu Jul 30 11:59:54.375154 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.449853 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:54.449941 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.489086 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:54.489174 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.525559 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp.php
[Thu Jul 30 11:59:54.525637 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.585781 2026] [ssl:error] [pid 2971563:tid 2971563] (EAI 2)Name or service not known: [client 144.76.19.72:50424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:54.585809 2026] [ssl:error] [pid 2971563:tid 2971563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:54.587622 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/abcd.php
[Thu Jul 30 11:59:54.587695 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.623865 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/a1.php
[Thu Jul 30 11:59:54.623947 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.640296 2026] [ssl:error] [pid 2977827:tid 2977827] (EAI 2)Name or service not known: [client 144.76.19.72:50430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:54.640325 2026] [ssl:error] [pid 2977827:tid 2977827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:54.688462 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:54.688557 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.724929 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/cgi-bin/admin.php
[Thu Jul 30 11:59:54.725008 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.761145 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 11:59:54.761225 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:54.800148 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/simple.php
[Thu Jul 30 11:59:54.800229 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:55.006348 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 66.249.66.34:43666] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:59:55.008995 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 66.249.66.34:43666] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:59:55.029368 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.63:52120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:55.029984 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.63:52120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:55.097703 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 66.249.66.34:56335] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 11:59:55.100918 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 66.249.66.34:56335] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 11:59:55.122824 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.4:62894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:55.123437 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.4:62894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:55.155627 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.64:45898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:55.156258 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.64:45898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:55.301056 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.4:62896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:55.301702 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.4:62896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:55.333142 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xxx.php
[Thu Jul 30 11:59:55.333225 2026] [rewrite:error] [pid 2981127:tid 2981127] [client 4.225.166.222:30425] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:55.344984 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.70:32204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:55.345610 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.70:32204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:55.738370 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.9:47362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:55.738987 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.9:47362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:55.819361 2026] [core:error] [pid 2981127:tid 2981127] [client 66.249.66.167:53530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:55.819390 2026] [core:error] [pid 2981127:tid 2981127] [client 66.249.66.167:53530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:55.826844 2026] [core:error] [pid 2971563:tid 2971563] [client 66.249.66.194:38283] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:55.826863 2026] [core:error] [pid 2971563:tid 2971563] [client 66.249.66.194:38283] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 11:59:56.493241 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.52:52172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:56.493877 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.52:52172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:56.939455 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.52:52202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:56.940150 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.52:52202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:56.954702 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.26:48954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:56.955318 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.26:48954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:57.077357 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/hypo.php
[Thu Jul 30 11:59:57.077436 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.120855 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:57.120929 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.203053 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.59:26458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:57.203693 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.59:26458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:57.211408 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/chosen.php
[Thu Jul 30 11:59:57.211480 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.248472 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:57.248554 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.286958 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/als.php
[Thu Jul 30 11:59:57.287030 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.323368 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/pol.php
[Thu Jul 30 11:59:57.323459 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.359870 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file5.php
[Thu Jul 30 11:59:57.359948 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.396583 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file.php
[Thu Jul 30 11:59:57.396660 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.432886 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin.php
[Thu Jul 30 11:59:57.432956 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.522917 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aa2.php
[Thu Jul 30 11:59:57.522984 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.560780 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ccou.php
[Thu Jul 30 11:59:57.560848 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.596906 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/dr.php
[Thu Jul 30 11:59:57.596967 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.633220 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xamp.php
[Thu Jul 30 11:59:57.633289 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.688759 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/bless.php
[Thu Jul 30 11:59:57.688829 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.692218 2026] [ssl:error] [pid 2983230:tid 2983230] (EAI 2)Name or service not known: [client 144.76.19.72:50434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:57.692253 2026] [ssl:error] [pid 2983230:tid 2983230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:57.745778 2026] [ssl:error] [pid 2986805:tid 2986805] (EAI 2)Name or service not known: [client 144.76.19.72:50446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 11:59:57.745815 2026] [ssl:error] [pid 2986805:tid 2986805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 11:59:57.853665 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file25.php
[Thu Jul 30 11:59:57.853737 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.889941 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file6.php
[Thu Jul 30 11:59:57.890012 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.926231 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/a2.php
[Thu Jul 30 11:59:57.926297 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:57.962548 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file15.php
[Thu Jul 30 11:59:57.962625 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.026934 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.61:35950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:58.027560 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.61:35950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:58.048515 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/f35.php
[Thu Jul 30 11:59:58.048586 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.084569 2026] [security2:error] [pid 2981128:tid 2981128] [client 18.199.86.73:42782] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "blackseaexpress.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsurjgGzUKH8ocGp9fL7QAAACI"]
[Thu Jul 30 11:59:58.084719 2026] [security2:error] [pid 2981128:tid 2981128] [client 18.199.86.73:42782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "blackseaexpress.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsurjgGzUKH8ocGp9fL7QAAACI"]
[Thu Jul 30 11:59:58.194454 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-load.php
[Thu Jul 30 11:59:58.194546 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.201663 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.56:64006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:58.202286 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.56:64006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:58.313517 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xwpg.php
[Thu Jul 30 11:59:58.313592 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.400919 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 11:59:58.400989 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.437250 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:58.437322 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.474011 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xstelth.php
[Thu Jul 30 11:59:58.474102 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.527951 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 11:59:58.528036 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.564117 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aaa.php
[Thu Jul 30 11:59:58.564185 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.601049 2026] [security2:error] [pid 2981128:tid 2981128] [client 18.199.86.73:42782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "blackseaexpress.banskoexpress.com"] [uri "/index.php"] [unique_id "amsurjgGzUKH8ocGp9fL7QAAACI"]
[Thu Jul 30 11:59:58.637622 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/gecko.php
[Thu Jul 30 11:59:58.637696 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.673712 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/pbck.php
[Thu Jul 30 11:59:58.673784 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:58.809738 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xiugai.php
[Thu Jul 30 11:59:58.809809 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.017187 2026] [security2:error] [pid 2959154:tid 2959154] [client 18.199.86.73:42798] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "blackseaexpresscouk.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsuryMIBy93HDeMjLZQsAAAAAc"]
[Thu Jul 30 11:59:59.017366 2026] [security2:error] [pid 2959154:tid 2959154] [client 18.199.86.73:42798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "blackseaexpresscouk.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsuryMIBy93HDeMjLZQsAAAAAc"]
[Thu Jul 30 11:59:59.083324 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.1:29266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:59.083964 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.1:29266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:59.092358 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/e.php
[Thu Jul 30 11:59:59.092433 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.133231 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.48:49228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:59.133853 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.48:49228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:59.152202 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/adminner.php
[Thu Jul 30 11:59:59.152274 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.198390 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.36:22416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 11:59:59.199010 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.36:22416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 11:59:59.340084 2026] [ssl:error] [pid 2978127:tid 2978127] (70014)End of file found: [client 216.73.216.199:60174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 11:59:59.425221 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file1221.php
[Thu Jul 30 11:59:59.425309 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.461445 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/inx.php
[Thu Jul 30 11:59:59.461533 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.497781 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/qqqa.php
[Thu Jul 30 11:59:59.497855 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.533020 2026] [security2:error] [pid 2959154:tid 2959154] [client 18.199.86.73:42798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "blackseaexpresscouk.banskoexpress.com"] [uri "/index.php"] [unique_id "amsuryMIBy93HDeMjLZQsAAAAAc"]
[Thu Jul 30 11:59:59.535945 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/reviall.php
[Thu Jul 30 11:59:59.536040 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.598290 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/404.php
[Thu Jul 30 11:59:59.598370 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.635238 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/bolt.php
[Thu Jul 30 11:59:59.635334 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.672611 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/File.php
[Thu Jul 30 11:59:59.672707 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.708809 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/fi22.php
[Thu Jul 30 11:59:59.708882 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.745178 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/zero.php
[Thu Jul 30 11:59:59.745259 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.781721 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1xmomo.php
[Thu Jul 30 11:59:59.781790 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.836279 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/fmws.php
[Thu Jul 30 11:59:59.836351 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.879704 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/3PJcpMFsD8B.php
[Thu Jul 30 11:59:59.879784 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.917121 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/hp2.php
[Thu Jul 30 11:59:59.917192 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 11:59:59.957256 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aabb.php
[Thu Jul 30 11:59:59.957327 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.104057 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.59:26474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:00.104709 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.59:26474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:00.163593 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 103.59.160.131:57691] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/block-supports/error_log
[Thu Jul 30 12:00:00.185566 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1254xx.php
[Thu Jul 30 12:00:00.185636 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.221617 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/a3ampzmbipnkpxeqhqpsanCdefault.php
[Thu Jul 30 12:00:00.221687 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.252403 2026] [ssl:error] [pid 2974723:tid 2974723] (70014)End of file found: [client 216.73.216.199:6366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:00.259551 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/pms297.php
[Thu Jul 30 12:00:00.259638 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.406368 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1PJcpMFsD8B.php
[Thu Jul 30 12:00:00.406438 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.407682 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.37:20966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:00.408364 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.37:20966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:00.464248 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/4PJcpMFsD8B.php
[Thu Jul 30 12:00:00.464353 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.691930 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.14:55650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:00.692565 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.14:55650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:00.730287 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/i99z7zzbwtpteujvv6s8hiCdefault.php
[Thu Jul 30 12:00:00.730375 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.768245 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/gwaih1gfzp5vuwr04Cdefault.php
[Thu Jul 30 12:00:00.768321 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.855366 2026] [ssl:error] [pid 2984394:tid 2984394] (70014)End of file found: [client 216.73.216.199:44302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:00.862850 2026] [ssl:error] [pid 2980009:tid 2980009] (EAI 2)Name or service not known: [client 144.76.19.72:34428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:00.862873 2026] [ssl:error] [pid 2980009:tid 2980009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:00.872560 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/dyui.php
[Thu Jul 30 12:00:00.872626 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:00.921223 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:34430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:00.921249 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:00.972995 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.61:20440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:00.973625 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.61:20440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:01.047300 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ho.php
[Thu Jul 30 12:00:01.047386 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.085688 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/zildan.php
[Thu Jul 30 12:00:01.085810 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.089640 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.21:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:01.090700 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.21:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:01.124009 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/66b867516c8f01.php
[Thu Jul 30 12:00:01.124171 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.162217 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ext.php
[Thu Jul 30 12:00:01.162360 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.198534 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1wvekeybd9it2di2vyipgr6Cdefault.php
[Thu Jul 30 12:00:01.198609 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.237004 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/diidi.php
[Thu Jul 30 12:00:01.237133 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.272394 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.33:62844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:01.273017 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.33:62844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:01.297869 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/clarebypas.php
[Thu Jul 30 12:00:01.297972 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.337577 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/x402.php
[Thu Jul 30 12:00:01.337736 2026] [rewrite:error] [pid 2977827:tid 2977827] [client 4.225.166.222:44639] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:00:01.923163 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.50:27722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:01.923784 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.50:27722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:01.925862 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.53:29292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:01.926535 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.53:29292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:02.293837 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.5:44354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:02.294456 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.5:44354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:02.430435 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.37:47844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:02.431056 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.37:47844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:02.757238 2026] [lsapi:warn] [pid 2984800:tid 2984800] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:00:03.107458 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.14:55658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:03.108090 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.14:55658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:03.115847 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.10:21668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:03.116468 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.10:21668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:03.612159 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.55:25538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:03.612786 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.55:25538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:03.962320 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.35:57446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:03.963005 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.35:57446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:04.013740 2026] [ssl:error] [pid 2982569:tid 2982569] (EAI 2)Name or service not known: [client 144.76.19.72:34434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:04.013804 2026] [ssl:error] [pid 2982569:tid 2982569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:04.070343 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:34448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:04.070375 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:04.570599 2026] [authz_core:error] [pid 2987254:tid 2987254] [client 57.141.0.50:27736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:04.571244 2026] [authz_core:error] [pid 2987254:tid 2987254] [client 57.141.0.50:27736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:04.783314 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.71:53250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:04.783964 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.71:53250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:05.109019 2026] [core:error] [pid 2983230:tid 2983230] (13)Permission denied: [client 216.73.216.199:7036] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/scripts/run_plugin_lifecycle
[Thu Jul 30 12:00:05.177576 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.47:38654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:05.178197 2026] [authz_core:error] [pid 2984798:tid 2984798] [client 57.141.0.47:38654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:05.369454 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.60:54266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:05.370082 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.60:54266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:05.410544 2026] [core:error] [pid 2983230:tid 2983230] (13)Permission denied: [client 216.73.216.199:7036] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/zswap_entry/objects_partial
[Thu Jul 30 12:00:06.133894 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.38:30334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:06.134527 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.38:30334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:06.171077 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.47:38668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:06.171700 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.47:38668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:06.321833 2026] [ssl:error] [pid 2983230:tid 2983230] (70014)End of file found: [client 216.73.216.199:7036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:06.578557 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.39:47106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:06.579211 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.39:47106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:06.667877 2026] [authz_core:error] [pid 2987254:tid 2987254] [client 57.141.0.47:38670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:06.668547 2026] [authz_core:error] [pid 2987254:tid 2987254] [client 57.141.0.47:38670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:06.936303 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.48:49234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:06.936923 2026] [authz_core:error] [pid 2984394:tid 2984394] [client 57.141.0.48:49234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:07.285210 2026] [core:error] [pid 2984394:tid 2984394] (13)Permission denied: [client 216.73.216.199:2296] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory50/subsystem/uevent
[Thu Jul 30 12:00:07.376831 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.21:38566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:07.377449 2026] [authz_core:error] [pid 2978127:tid 2978127] [client 57.141.0.21:38566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:07.961625 2026] [ssl:error] [pid 2980821:tid 2980821] (EAI 2)Name or service not known: [client 144.76.19.72:34454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:07.961657 2026] [ssl:error] [pid 2980821:tid 2980821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:08.016118 2026] [ssl:error] [pid 2981908:tid 2981908] (EAI 2)Name or service not known: [client 144.76.19.72:34466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:08.016158 2026] [ssl:error] [pid 2981908:tid 2981908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:08.178914 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.10:28526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:08.179543 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.10:28526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:08.257449 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.69:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:08.258258 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.69:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:08.510133 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.48:49246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:08.510764 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.48:49246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:08.775369 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.56:50022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:08.775984 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.56:50022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:08.890009 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.13:40484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:08.890642 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.13:40484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:09.092220 2026] [ssl:error] [pid 2981128:tid 2981128] (70014)End of file found: [client 216.73.216.199:52084] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:09.388115 2026] [ssl:error] [pid 2984394:tid 2984394] (70014)End of file found: [client 216.73.216.199:2296] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:09.693039 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.42:23466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:09.693678 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.42:23466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:09.815553 2026] [security2:error] [pid 2987477:tid 2987477] [client 123.207.65.62:40206] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kirstybashforth.com"] [uri "/"] [unique_id "amsuuX33gkkRmZlL4IwvXwAAACw"]
[Thu Jul 30 12:00:09.878488 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.61:53982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:09.879592 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.61:53982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:09.997645 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.2:27710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:09.998267 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.2:27710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:10.152002 2026] [authz_core:error] [pid 2987474:tid 2987474] [client 57.141.0.47:38678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:10.152664 2026] [authz_core:error] [pid 2987474:tid 2987474] [client 57.141.0.47:38678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:10.386622 2026] [authz_core:error] [pid 2987477:tid 2987477] [client 57.141.0.43:34086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:10.387268 2026] [authz_core:error] [pid 2987477:tid 2987477] [client 57.141.0.43:34086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:10.516156 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.32:64642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:10.516792 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.32:64642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:10.670276 2026] [authz_core:error] [pid 2987477:tid 2987477] [client 57.141.0.38:37866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:10.670914 2026] [authz_core:error] [pid 2987477:tid 2987477] [client 57.141.0.38:37866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:10.800908 2026] [security2:error] [pid 2987419:tid 2987419] [client 212.55.193.47:35596] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amsuunSVdZ-3z94kQTDMXQAAABA"]
[Thu Jul 30 12:00:11.103346 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.12:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:11.103969 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.12:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:11.121153 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:52750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:11.121179 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:11.178365 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:52752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:11.178393 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:12.085437 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.60:34972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:12.086059 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.60:34972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:12.407345 2026] [ssl:error] [pid 2968744:tid 2968744] (70014)End of file found: [client 216.73.216.199:45416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:12.559160 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.26:20098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:12.559802 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.26:20098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:12.841518 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.44:23020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:12.842224 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.44:23020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:13.113984 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.21:38590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:13.114610 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.21:38590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:13.291775 2026] [lsapi:warn] [pid 2980995:tid 2980995] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:00:13.312120 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.34:65242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:13.312814 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.34:65242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:13.604025 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.16:24872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:13.604661 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.16:24872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:14.165897 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.24:65246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:14.166532 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.24:65246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:14.263528 2026] [ssl:error] [pid 2987417:tid 2987417] (EAI 2)Name or service not known: [client 144.76.19.72:52764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:14.263565 2026] [ssl:error] [pid 2987417:tid 2987417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:14.329798 2026] [ssl:error] [pid 2982568:tid 2982568] (EAI 2)Name or service not known: [client 144.76.19.72:52768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:14.329828 2026] [ssl:error] [pid 2982568:tid 2982568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:14.406449 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.20:50700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:14.407084 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.20:50700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:14.484586 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.32:48358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:14.485255 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.32:48358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:15.037837 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.33:34026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:15.038458 2026] [authz_core:error] [pid 2982568:tid 2982568] [client 57.141.0.33:34026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:15.073299 2026] [authz_core:error] [pid 2987555:tid 2987555] [client 57.141.0.45:45294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:15.073919 2026] [authz_core:error] [pid 2987555:tid 2987555] [client 57.141.0.45:45294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:15.118492 2026] [core:error] [pid 2981128:tid 2981128] (13)Permission denied: [client 216.73.216.199:21414] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory262/subsystem/uevent
[Thu Jul 30 12:00:15.629592 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.4:38342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:15.630216 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.4:38342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:15.637210 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.19:48338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:15.637830 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.19:48338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:15.724816 2026] [core:error] [pid 2987558:tid 2987558] (13)Permission denied: [client 216.73.216.199:31320] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory142/subsystem/uevent
[Thu Jul 30 12:00:16.239759 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.44:23032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:16.240401 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.44:23032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:16.324609 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.49:54554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:16.325227 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.49:54554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:16.917909 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.40:21032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:16.918551 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.40:21032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:17.054163 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.37:28364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:17.054840 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.37:28364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:17.298250 2026] [core:error] [pid 2981128:tid 2981128] (13)Permission denied: [client 216.73.216.199:21414] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory253/subsystem/uevent
[Thu Jul 30 12:00:17.383359 2026] [ssl:error] [pid 2974723:tid 2974723] (EAI 2)Name or service not known: [client 144.76.19.72:52782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:17.383387 2026] [ssl:error] [pid 2974723:tid 2974723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:17.385612 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.37:28368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:17.386229 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.37:28368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:17.405101 2026] [security2:error] [pid 2986650:tid 2986650] [client 74.7.227.130:48266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "orgent.be"] [uri "/"] [unique_id "amsuwWrEuV8svTAErFVa3gAAAAY"]
[Thu Jul 30 12:00:17.442160 2026] [ssl:error] [pid 2987553:tid 2987553] (EAI 2)Name or service not known: [client 144.76.19.72:52790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:17.442197 2026] [ssl:error] [pid 2987553:tid 2987553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:17.895512 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.46:60770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:17.896147 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.46:60770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:18.003781 2026] [core:error] [pid 2984697:tid 2984697] [client 66.249.66.194:51007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:18.003811 2026] [core:error] [pid 2984697:tid 2984697] [client 66.249.66.194:51007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:18.205772 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.71:25862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:18.206402 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.71:25862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:18.819080 2026] [core:error] [pid 2981128:tid 2981128] (13)Permission denied: [client 216.73.216.199:21414] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_tables/sections/__bug_table
[Thu Jul 30 12:00:18.976291 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.10:51224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:18.976915 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.10:51224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:19.157422 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.35:49544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:19.158048 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.35:49544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:19.432401 2026] [ssl:error] [pid 2987558:tid 2987558] (70014)End of file found: [client 216.73.216.199:31320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:19.630682 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.69:46904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:19.631302 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.69:46904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:19.768431 2026] [ssl:error] [pid 2981128:tid 2981128] (70014)End of file found: [client 216.73.216.199:21414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:19.793591 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.67:34908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:19.794219 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.67:34908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:19.925977 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.8:59940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:19.926606 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.8:59940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:20.109334 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.64:62384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:20.110389 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.64:62384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:20.257443 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.59:29846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:20.258063 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.59:29846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:20.522693 2026] [ssl:error] [pid 2988064:tid 2988064] (EAI 2)Name or service not known: [client 144.76.19.72:38056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:20.522728 2026] [ssl:error] [pid 2988064:tid 2988064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:20.574855 2026] [ssl:error] [pid 2986650:tid 2986650] (EAI 2)Name or service not known: [client 144.76.19.72:38070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:20.574892 2026] [ssl:error] [pid 2986650:tid 2986650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:20.976375 2026] [ssl:error] [pid 2987551:tid 2987551] (70014)End of file found: [client 216.73.216.199:51798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:21.063144 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.69:46920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:21.063767 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.69:46920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:21.532127 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:58794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:21.532747 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.27:58794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:21.689187 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.2:56054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:21.689817 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.2:56054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:21.858282 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.3:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:21.858895 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.3:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:21.937951 2026] [security2:error] [pid 2987254:tid 2987254] [client 163.7.14.154:19451] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuxfAjYh8uhVHDGsLDQAAAAAs"]
[Thu Jul 30 12:00:21.938003 2026] [security2:error] [pid 2987254:tid 2987254] [client 163.7.14.154:19451] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuxfAjYh8uhVHDGsLDQAAAAAs"]
[Thu Jul 30 12:00:21.938289 2026] [security2:error] [pid 2987254:tid 2987254] [client 163.7.14.154:19451] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuxfAjYh8uhVHDGsLDQAAAAAs"]
[Thu Jul 30 12:00:22.512939 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.39:49866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:22.513571 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.39:49866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:22.522469 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.52:22876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:22.523088 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.52:22876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:22.932038 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.55:32844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:22.932685 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.55:32844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:23.102409 2026] [authz_core:error] [pid 2987254:tid 2987254] [client 57.141.0.7:59056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:23.103033 2026] [authz_core:error] [pid 2987254:tid 2987254] [client 57.141.0.7:59056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:23.205438 2026] [security2:error] [pid 2987555:tid 2987555] [client 74.7.227.40:60284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.static2.alism.com"] [uri "/"] [unique_id "amsux-_PfEq_KaDDthe5jgAAADQ"]
[Thu Jul 30 12:00:23.402212 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.24:63864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:23.402898 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.24:63864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:23.603137 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.6:61864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:23.603754 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.6:61864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:23.630308 2026] [ssl:error] [pid 2987254:tid 2987254] (EAI 2)Name or service not known: [client 144.76.19.72:38078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:23.630336 2026] [ssl:error] [pid 2987254:tid 2987254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:23.684993 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:38092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:23.685015 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:23.841525 2026] [lsapi:warn] [pid 2987555:tid 2987555] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:00:24.044061 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 157.55.39.56:11163] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 12:00:24.118326 2026] [security2:error] [pid 2977827:tid 2977827] [client 163.7.14.154:16433] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuyOK4lb5YkZx7DdC4TQAAAAI"]
[Thu Jul 30 12:00:24.118379 2026] [security2:error] [pid 2977827:tid 2977827] [client 163.7.14.154:16433] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsuyOK4lb5YkZx7DdC4TQAAAAI"]
[Thu Jul 30 12:00:24.118620 2026] [security2:error] [pid 2977827:tid 2977827] [client 163.7.14.154:16433] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsuyOK4lb5YkZx7DdC4TQAAAAI"]
[Thu Jul 30 12:00:24.587507 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.27:58810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:24.588126 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.27:58810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:24.597042 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.16:49992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:24.597670 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.16:49992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:25.609496 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.69:46922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:25.610138 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.69:46922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:25.937886 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.38:47630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:25.938556 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.38:47630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:26.001035 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.30:46740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:26.001668 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.30:46740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:26.222005 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.71:64318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:26.222658 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.71:64318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:26.685228 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.2:29198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:26.685847 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.2:29198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:26.743923 2026] [ssl:error] [pid 2988064:tid 2988064] (EAI 2)Name or service not known: [client 144.76.19.72:38094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:26.743945 2026] [ssl:error] [pid 2988064:tid 2988064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:26.799835 2026] [ssl:error] [pid 2982569:tid 2982569] (EAI 2)Name or service not known: [client 144.76.19.72:38106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:26.799866 2026] [ssl:error] [pid 2982569:tid 2982569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:26.805819 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.45:35896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:26.805871 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.43:22902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:26.806433 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.45:35896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:26.806545 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.43:22902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:27.231634 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.71:64330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:27.232304 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.71:64330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:27.602042 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.15:50232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:27.602678 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.15:50232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:27.632137 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.11:32208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:27.632760 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.11:32208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:28.423630 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.33:22594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:28.424247 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.33:22594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:28.545655 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.3:55194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:28.546329 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.3:55194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:28.668996 2026] [access_compat:error] [pid 2982569:tid 2982569] [client 176.241.66.87:25629] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:00:28.756528 2026] [authz_core:error] [pid 2987417:tid 2987417] [client 57.141.0.60:25668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:28.757157 2026] [authz_core:error] [pid 2987417:tid 2987417] [client 57.141.0.60:25668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:29.099659 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.8:20074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:29.100273 2026] [authz_core:error] [pid 2983196:tid 2983196] [client 57.141.0.8:20074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:29.145713 2026] [access_compat:error] [pid 2987417:tid 2987417] [client 45.158.164.139:53150] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:00:29.485684 2026] [ssl:error] [pid 2981128:tid 2981128] (70014)End of file found: [client 216.73.216.199:36143] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:29.726279 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.23:44860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:29.726908 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.23:44860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:29.782169 2026] [ssl:error] [pid 2987558:tid 2987558] (70014)End of file found: [client 216.73.216.199:47970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:29.838114 2026] [lsapi:warn] [pid 2968744:tid 2968744] [client 65.181.116.253:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:00:29.856370 2026] [ssl:error] [pid 2984082:tid 2984082] (EAI 2)Name or service not known: [client 144.76.19.72:53382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:29.856394 2026] [ssl:error] [pid 2984082:tid 2984082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:29.909218 2026] [ssl:error] [pid 2981127:tid 2981127] (EAI 2)Name or service not known: [client 144.76.19.72:53394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:29.909241 2026] [ssl:error] [pid 2981127:tid 2981127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:30.169381 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.24:45250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:30.170006 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.24:45250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:30.487844 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.65:29772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:30.488472 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.65:29772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:30.740435 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.11:37806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:30.741055 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.11:37806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:31.070434 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.44:44494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:31.071054 2026] [authz_core:error] [pid 2984082:tid 2984082] [client 57.141.0.44:44494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:31.193259 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.67:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:31.193878 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.67:37546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:31.295084 2026] [ssl:error] [pid 2987551:tid 2987551] (70014)End of file found: [client 216.73.216.199:59096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:31.321174 2026] [security2:error] [pid 2955789:tid 2955789] [client 20.197.226.217:60686] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amsuz6HuDVbYLfd-273hpQAAAEw"]
[Thu Jul 30 12:00:31.391431 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:46032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:31.392062 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:46032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:31.820736 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.35:26614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:31.821355 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.35:26614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:32.355633 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.51:48702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:32.356253 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.51:48702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:32.620366 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.34:65380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:32.620988 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.34:65380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:32.973927 2026] [ssl:error] [pid 2983230:tid 2983230] (EAI 2)Name or service not known: [client 144.76.19.72:53400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:32.973955 2026] [ssl:error] [pid 2983230:tid 2983230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:33.027277 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:53412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:33.027304 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:33.066999 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.47:35702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:33.067634 2026] [authz_core:error] [pid 2977827:tid 2977827] [client 57.141.0.47:35702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:33.239453 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.58:29442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:33.240082 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.58:29442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:33.407920 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.24:45256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:33.408562 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.24:45256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:33.606731 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.30:35340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:33.607423 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.30:35340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:33.807990 2026] [core:error] [pid 2974816:tid 2974816] [client 66.249.66.167:51187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:33.808016 2026] [core:error] [pid 2974816:tid 2974816] [client 66.249.66.167:51187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:34.284933 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.26:62654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:34.285568 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.26:62654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:34.469891 2026] [lsapi:warn] [pid 2974816:tid 2974816] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:00:34.616284 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.46:37688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:34.616912 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.46:37688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:34.917863 2026] [ssl:error] [pid 2987376:tid 2987376] (70014)End of file found: [client 216.73.216.199:26537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:34.970161 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.40:49194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:34.970801 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.40:49194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:35.031526 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.58:29448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:35.032147 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.58:29448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:35.061607 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.6:25862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:35.062241 2026] [authz_core:error] [pid 2981127:tid 2981127] [client 57.141.0.6:25862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:35.417300 2026] [ssl:error] [pid 2974723:tid 2974723] (70014)End of file found: [client 216.73.216.199:29307] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:35.473466 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.32:47820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:35.474092 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.32:47820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:36.081488 2026] [ssl:error] [pid 2983230:tid 2983230] (EAI 2)Name or service not known: [client 144.76.19.72:53416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:36.081525 2026] [ssl:error] [pid 2983230:tid 2983230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:36.135686 2026] [ssl:error] [pid 2984800:tid 2984800] (EAI 2)Name or service not known: [client 144.76.19.72:53424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:36.135723 2026] [ssl:error] [pid 2984800:tid 2984800] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:36.340117 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.27:57200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:36.340753 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.27:57200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:36.627993 2026] [ssl:error] [pid 2987475:tid 2987475] (70014)End of file found: [client 216.73.216.199:12412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:37.021815 2026] [security2:error] [pid 2987552:tid 2987552] [client 43.165.198.224:44880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amsu1Rz50EbVdr_x-gutuwAAADA"]
[Thu Jul 30 12:00:37.057901 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.21:56418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:37.058525 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.21:56418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:37.149009 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.21:56424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:37.149637 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 57.141.0.21:56424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:37.386409 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.68:31116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:37.387030 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.68:31116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:37.427664 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.29:24662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:37.428297 2026] [authz_core:error] [pid 2984800:tid 2984800] [client 57.141.0.29:24662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:37.617400 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 103.59.160.131:57691] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/rest-api/error_log
[Thu Jul 30 12:00:37.746107 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.14:30248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:37.746732 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.14:30248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:38.593422 2026] [security2:error] [pid 2974816:tid 2974816] [client 1.12.70.96:39726] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amsu1m4mOPVnAb8MCSe-4AAAACk"]
[Thu Jul 30 12:00:38.595019 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 1.12.70.96:39726] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:00:38.596770 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 1.12.70.96:39726] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:00:38.608257 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.34:65406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:38.608872 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.34:65406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:38.706009 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.65:65500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:38.706647 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.65:65500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:38.757220 2026] [security2:error] [pid 2981172:tid 2981172] [client 43.165.198.224:45772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsu1gYijwOPrcd2Oy2dKAAAAC4"], referer: http://spampmusic.co.uk
[Thu Jul 30 12:00:38.857570 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 103.59.160.131:53892] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 12:00:38.898347 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.60:50740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:38.898985 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.60:50740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:39.190709 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:53434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:39.190737 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:39.207497 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.35:54138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:39.208129 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.35:54138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:39.248220 2026] [ssl:error] [pid 2968677:tid 2968677] (EAI 2)Name or service not known: [client 144.76.19.72:53450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:39.248245 2026] [ssl:error] [pid 2968677:tid 2968677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:39.630198 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.55:28038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:39.630817 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.55:28038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:39.719797 2026] [access_compat:error] [pid 2974816:tid 2974816] [client 176.241.66.87:26303] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:00:39.870022 2026] [authz_core:error] [pid 2987554:tid 2987554] [client 57.141.0.14:30256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:39.870655 2026] [authz_core:error] [pid 2987554:tid 2987554] [client 57.141.0.14:30256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:39.989907 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.63:58824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:39.990537 2026] [authz_core:error] [pid 2984697:tid 2984697] [client 57.141.0.63:58824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:40.353599 2026] [ssl:error] [pid 2984082:tid 2984082] (70014)End of file found: [client 216.73.216.199:8038] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:40.606366 2026] [security2:error] [pid 2987554:tid 2987554] [client 45.148.10.120:59650] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amsu2AMdaw-fXnI4k6c5lwAAADM"]
[Thu Jul 30 12:00:40.606523 2026] [security2:error] [pid 2987554:tid 2987554] [client 45.148.10.120:59650] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amsu2AMdaw-fXnI4k6c5lwAAADM"]
[Thu Jul 30 12:00:40.606672 2026] [security2:error] [pid 2987554:tid 2987554] [client 45.148.10.120:59650] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amsu2AMdaw-fXnI4k6c5lwAAADM"]
[Thu Jul 30 12:00:40.943093 2026] [core:error] [pid 2968677:tid 2968677] [client 66.249.66.168:37817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:40.943121 2026] [core:error] [pid 2968677:tid 2968677] [client 66.249.66.168:37817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:41.045214 2026] [ssl:error] [pid 2987554:tid 2987554] (70014)End of file found: [client 216.73.216.199:52444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:41.067585 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.14:30258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:41.068208 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.14:30258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:41.073030 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.49:20868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:41.073660 2026] [authz_core:error] [pid 2981172:tid 2981172] [client 57.141.0.49:20868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:41.273533 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.4:36502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:41.274167 2026] [authz_core:error] [pid 2968677:tid 2968677] [client 57.141.0.4:36502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:41.296097 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.36:38348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:41.296714 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.36:38348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:42.112289 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.48:59798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:42.112910 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.48:59798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:42.301533 2026] [ssl:error] [pid 2987557:tid 2987557] (EAI 2)Name or service not known: [client 144.76.19.72:19132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:42.301567 2026] [ssl:error] [pid 2987557:tid 2987557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:42.353628 2026] [ssl:error] [pid 2974723:tid 2974723] (EAI 2)Name or service not known: [client 144.76.19.72:19146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:42.353658 2026] [ssl:error] [pid 2974723:tid 2974723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:42.385356 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.11:24882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:42.385993 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.11:24882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:42.421021 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.39:36114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:42.421662 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.39:36114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:43.013138 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.69:27982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:43.013757 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.69:27982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:43.354352 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.33:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:43.354981 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.33:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:43.371155 2026] [access_compat:error] [pid 2980821:tid 2980821] [client 18.199.86.73:36444] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/.git
[Thu Jul 30 12:00:43.371263 2026] [access_compat:error] [pid 2980821:tid 2980821] [client 18.199.86.73:36444] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:00:43.385428 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.71:30762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:43.386190 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.71:30762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:43.754121 2026] [core:error] [pid 2983386:tid 2983386] (13)Permission denied: [client 216.73.216.199:13701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory149/subsystem/uevent
[Thu Jul 30 12:00:44.243472 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.23:50462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:44.244107 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.23:50462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:44.278810 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.11:24888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:44.279435 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.11:24888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:44.658224 2026] [ssl:error] [pid 2983386:tid 2983386] (70014)End of file found: [client 216.73.216.199:13701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:44.697249 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.26:32290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:44.697877 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.26:32290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:44.781299 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.2:56070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:44.781943 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.2:56070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:44.939247 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.14:32058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:44.939864 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.14:32058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:45.405643 2026] [ssl:error] [pid 2980821:tid 2980821] (EAI 2)Name or service not known: [client 144.76.19.72:19158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:45.405675 2026] [ssl:error] [pid 2980821:tid 2980821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:45.439864 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.63:58848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:45.440491 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.63:58848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:45.442343 2026] [lsapi:warn] [pid 2987552:tid 2987552] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:00:45.457856 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.54:43422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:45.458457 2026] [ssl:error] [pid 2971563:tid 2971563] (EAI 2)Name or service not known: [client 144.76.19.72:19164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:45.458485 2026] [ssl:error] [pid 2971563:tid 2971563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:45.458484 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.54:43422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:45.564366 2026] [access_compat:error] [pid 2987475:tid 2987475] [client 176.241.66.87:26683] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:00:45.816853 2026] [authz_core:error] [pid 2974816:tid 2974816] [client 103.59.160.131:58182] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/rest-api/search/error_log
[Thu Jul 30 12:00:45.897807 2026] [access_compat:error] [pid 2979215:tid 2979215] [client 103.72.86.239:38864] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:00:46.239355 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.61:51390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:46.239975 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.61:51390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:46.639344 2026] [authz_core:error] [pid 2987554:tid 2987554] [client 57.141.0.35:54166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:46.639961 2026] [authz_core:error] [pid 2987554:tid 2987554] [client 57.141.0.35:54166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:46.975259 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.63:30316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:46.975879 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.63:30316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:47.027129 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.22:24458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:47.027752 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.22:24458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:47.211556 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.43:52344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:47.212184 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.43:52344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:47.921184 2026] [security2:error] [pid 2981172:tid 2981172] [client 85.208.96.210:47366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/natural-cafe-menu-calories"] [unique_id "amsu3wYijwOPrcd2Oy2dLgAAAC4"]
[Thu Jul 30 12:00:47.984467 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.53:61594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:47.985104 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.53:61594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:47.998338 2026] [ssl:error] [pid 2955789:tid 2955789] (70014)End of file found: [client 216.73.216.199:1927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:48.002209 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.70:50434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:48.002826 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.70:50434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:48.495401 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.58:62018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:48.496027 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.58:62018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:48.516383 2026] [ssl:error] [pid 2984602:tid 2984602] (EAI 2)Name or service not known: [client 144.76.19.72:19180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:48.516417 2026] [ssl:error] [pid 2984602:tid 2984602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:48.572509 2026] [ssl:error] [pid 2986650:tid 2986650] (EAI 2)Name or service not known: [client 144.76.19.72:19192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:48.572534 2026] [ssl:error] [pid 2986650:tid 2986650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:49.020871 2026] [authz_core:error] [pid 2989490:tid 2989490] [client 57.141.0.68:33412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:49.021506 2026] [authz_core:error] [pid 2989490:tid 2989490] [client 57.141.0.68:33412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:49.098412 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.43:52354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:49.099034 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.43:52354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:49.140671 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.54:51140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:49.141290 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.54:51140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:49.356546 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.30:25732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:49.357169 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.30:25732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:49.999734 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.46:47246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:50.000361 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.46:47246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:50.403891 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.33:24814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:50.404514 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.33:24814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:50.606155 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.70:50444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:50.606779 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.70:50444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:50.613348 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 20.206.204.219:58456] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:00:50.899374 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.38:44622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:50.899991 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.38:44622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:51.073296 2026] [access_compat:error] [pid 2983386:tid 2983386] [client 176.241.66.87:27025] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:00:51.347722 2026] [ssl:error] [pid 2980821:tid 2980821] (70014)End of file found: [client 216.73.216.199:42686] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:51.359898 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.52:25198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:51.360579 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.52:25198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:51.640852 2026] [ssl:error] [pid 2974816:tid 2974816] (EAI 2)Name or service not known: [client 144.76.19.72:53516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:51.640888 2026] [ssl:error] [pid 2974816:tid 2974816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:51.695359 2026] [ssl:error] [pid 2987553:tid 2987553] (EAI 2)Name or service not known: [client 144.76.19.72:53520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:51.695391 2026] [ssl:error] [pid 2987553:tid 2987553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:51.950441 2026] [ssl:error] [pid 2985734:tid 2985734] (70014)End of file found: [client 216.73.216.199:58733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:52.215353 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 103.59.160.131:60381] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 12:00:52.231165 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.70:50454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:52.231810 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.70:50454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:52.274933 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.1:56768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:52.275601 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.1:56768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:52.284977 2026] [security2:error] [pid 2986805:tid 2986805] [client 110.249.201.174:26266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amsu5NC2no2__zwUftKumwAAAAo"]
[Thu Jul 30 12:00:52.498016 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.5:46230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:52.498647 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.5:46230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:52.980589 2026] [core:error] [pid 2986805:tid 2986805] [client 66.249.64.170:59337] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:52.980611 2026] [core:error] [pid 2986805:tid 2986805] [client 66.249.64.170:59337] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:00:53.293599 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.14:32070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:53.294612 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.14:32070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:53.538649 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.33:63088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:53.539325 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.33:63088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:54.098608 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.20:30832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:54.099235 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.20:30832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:54.218116 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.68:33432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:54.218741 2026] [authz_core:error] [pid 2981094:tid 2981094] [client 57.141.0.68:33432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:54.223916 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.68:33422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:54.224539 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.68:33422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:54.515877 2026] [security2:error] [pid 2979215:tid 2979215] [client 85.208.96.205:59516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2230.0/prev_next,next.html"] [unique_id "amsu5sv2Pjw6X8YmlPMABAAAABM"]
[Thu Jul 30 12:00:54.753183 2026] [ssl:error] [pid 2989187:tid 2989187] (EAI 2)Name or service not known: [client 144.76.19.72:53528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:54.753221 2026] [ssl:error] [pid 2989187:tid 2989187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:54.764563 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.45:33674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:54.765184 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.45:33674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:54.811025 2026] [ssl:error] [pid 2980009:tid 2980009] (EAI 2)Name or service not known: [client 144.76.19.72:53534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:54.811079 2026] [ssl:error] [pid 2980009:tid 2980009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:54.917716 2026] [access_compat:error] [pid 2982569:tid 2982569] [client 103.72.86.239:39308] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:00:55.599522 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.10:47236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:55.600151 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.10:47236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:55.800285 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.31:28528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:55.800909 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.31:28528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:55.825279 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.54:51164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:55.825901 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.54:51164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:55.873877 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.50:51742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:55.874511 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.50:51742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:55.997748 2026] [lsapi:warn] [pid 2980009:tid 2980009] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:00:55.997827 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.55:45186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:55.998494 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.55:45186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:56.127903 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 52.167.144.232:60532] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 12:00:56.301760 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 20.206.204.219:59447] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:00:56.398686 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.44:30842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:56.399314 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.44:30842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:56.760834 2026] [core:error] [pid 2987419:tid 2987419] (13)Permission denied: [client 216.73.216.199:23479] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCP/slabs_cpu_partial
[Thu Jul 30 12:00:56.858570 2026] [access_compat:error] [pid 2980821:tid 2980821] [client 176.241.66.87:27289] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:00:56.932176 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.25:26998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:56.932805 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.25:26998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:57.315378 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.18:50730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:57.316011 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.18:50730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:57.363130 2026] [ssl:error] [pid 2987419:tid 2987419] (70014)End of file found: [client 216.73.216.199:23479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:00:57.595593 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.58:35506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:57.596251 2026] [authz_core:error] [pid 2980009:tid 2980009] [client 57.141.0.58:35506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:57.808210 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.66:56708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:57.808833 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.66:56708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:57.870576 2026] [ssl:error] [pid 2987476:tid 2987476] (EAI 2)Name or service not known: [client 144.76.19.72:53550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:57.870633 2026] [ssl:error] [pid 2987476:tid 2987476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:57.926482 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:53562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:00:57.926518 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:00:58.506461 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.3:44398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:58.507171 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.3:44398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:58.606124 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.48:58182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:58.606753 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.48:58182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:58.680641 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.8:49432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:58.681262 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.8:49432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:58.838578 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.9:20044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:58.839212 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.9:20044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:59.124028 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.71:35440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:00:59.124656 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.71:35440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:00:59.172677 2026] [lsapi:warn] [pid 2989240:tid 2989240] [client 216.73.216.199:3616] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 12:00:59.172708 2026] [lsapi:error] [pid 2989240:tid 2989240] [client 216.73.216.199:3616] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-net-url2/docs/6470.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 12:00:59.847537 2026] [security2:error] [pid 2981128:tid 2981128] [client 18.235.81.246:50308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/robots.txt"] [unique_id "amsu6zgGzUKH8ocGp9fMIQAAACI"]
[Thu Jul 30 12:01:00.238883 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.11:31272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:00.239530 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.11:31272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:00.292805 2026] [security2:error] [pid 2987558:tid 2987558] [client 114.119.157.183:44279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,103,15,18/request_format~html"] [unique_id "amsu7IZ4LmLcQuHQNDMb-AAAADk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,103,15/request_format~html
[Thu Jul 30 12:01:00.536257 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.43:54302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:00.536966 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.43:54302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:00.555128 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.67:39930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:00.555766 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.67:39930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:00.635326 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.48:20206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:00.635957 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.48:20206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:00.980574 2026] [core:error] [pid 2985734:tid 2985734] (13)Permission denied: [client 216.73.216.199:53759] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_alias/hwcache_align
[Thu Jul 30 12:01:01.002696 2026] [ssl:error] [pid 2980821:tid 2980821] (EAI 2)Name or service not known: [client 144.76.19.72:48584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:01.002725 2026] [ssl:error] [pid 2980821:tid 2980821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:01.057342 2026] [ssl:error] [pid 2987475:tid 2987475] (EAI 2)Name or service not known: [client 144.76.19.72:48598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:01.057408 2026] [ssl:error] [pid 2987475:tid 2987475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:01.186708 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.59:52492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:01.187360 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.59:52492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:01.554385 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.56:25796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:01.555106 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.56:25796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:01.752488 2026] [security2:error] [pid 2986650:tid 2986650] [client 114.119.157.183:44289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,103,15,18/request_format~html"] [unique_id "amsu7WrEuV8svTAErFVbBgAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,103,15/request_format~html
[Thu Jul 30 12:01:01.858209 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 20.206.204.219:60455] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:01:02.006645 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.36:24434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:02.007286 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.36:24434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:02.187108 2026] [ssl:error] [pid 2985734:tid 2985734] (70014)End of file found: [client 216.73.216.199:53759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:02.325190 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.50:39036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:02.325813 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.50:39036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:02.655362 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.8:49440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:02.655985 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.8:49440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:02.781471 2026] [access_compat:error] [pid 2988064:tid 2988064] [client 176.241.66.87:27584] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:03.092712 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.64:44088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:03.093349 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.64:44088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:03.268982 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.3:61686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:03.269653 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.3:61686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:03.450787 2026] [security2:error] [pid 2987419:tid 2987419] [client 8.216.48.150:33955] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu73SVdZ-3z94kQTDMewAAABA"]
[Thu Jul 30 12:01:03.450846 2026] [security2:error] [pid 2987419:tid 2987419] [client 8.216.48.150:33955] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu73SVdZ-3z94kQTDMewAAABA"]
[Thu Jul 30 12:01:03.451171 2026] [security2:error] [pid 2987419:tid 2987419] [client 8.216.48.150:33955] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsu73SVdZ-3z94kQTDMewAAABA"]
[Thu Jul 30 12:01:03.641380 2026] [security2:error] [pid 2987554:tid 2987554] [client 3.210.29.96:44444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/pipelineleaderboards/starfox64/"] [unique_id "amsu7wMdaw-fXnI4k6c5owAAADM"]
[Thu Jul 30 12:01:03.693730 2026] [ssl:error] [pid 2980821:tid 2980821] (70014)End of file found: [client 216.73.216.199:38568] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:03.772818 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.39:65296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:03.773445 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.39:65296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:03.994971 2026] [core:error] [pid 2989240:tid 2989240] (13)Permission denied: [client 216.73.216.199:27585] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/store_user
[Thu Jul 30 12:01:03.996113 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.68:23850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:03.996774 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.68:23850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:04.112770 2026] [ssl:error] [pid 2980995:tid 2980995] (EAI 2)Name or service not known: [client 144.76.19.72:48610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:04.112797 2026] [ssl:error] [pid 2980995:tid 2980995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:04.165461 2026] [ssl:error] [pid 2987419:tid 2987419] (EAI 2)Name or service not known: [client 144.76.19.72:48624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:04.165517 2026] [ssl:error] [pid 2987419:tid 2987419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:04.295831 2026] [security2:error] [pid 2989240:tid 2989240] [client 216.73.216.199:27585] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/clcustomizer.log"] [unique_id "amsu8D6D0jrD5olzJxCI0gAAAAs"]
[Thu Jul 30 12:01:04.296056 2026] [security2:error] [pid 2989240:tid 2989240] [client 216.73.216.199:27585] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/clcustomizer.log"] [unique_id "amsu8D6D0jrD5olzJxCI0gAAAAs"]
[Thu Jul 30 12:01:04.296262 2026] [security2:error] [pid 2989240:tid 2989240] [client 216.73.216.199:27585] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/clcustomizer.log"] [unique_id "amsu8D6D0jrD5olzJxCI0gAAAAs"]
[Thu Jul 30 12:01:04.375959 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.29:48850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:04.376588 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.29:48850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:04.840915 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.63:23832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:04.841549 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.63:23832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:04.842716 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.33:21590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:04.843322 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.33:21590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:05.567272 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.1:27744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:05.567900 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.1:27744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:05.615493 2026] [access_compat:error] [pid 2987551:tid 2987551] [client 103.72.86.239:40022] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:05.912713 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.18:31178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:05.913405 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.18:31178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:06.021645 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.47:35298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:06.022269 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.47:35298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:06.495463 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.40:52134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:06.496093 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.40:52134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:06.709362 2026] [lsapi:warn] [pid 2987558:tid 2987558] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:01:06.917298 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.67:39958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:06.917929 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.67:39958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:06.951366 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.8:60956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:06.952009 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.8:60956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:07.226251 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:48634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:07.226277 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:07.245008 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 66.249.66.34:64677] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:01:07.247694 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 66.249.66.34:64677] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:01:07.281856 2026] [ssl:error] [pid 2987476:tid 2987476] (EAI 2)Name or service not known: [client 144.76.19.72:48650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:07.281877 2026] [ssl:error] [pid 2987476:tid 2987476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:07.345822 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 20.206.204.219:61553] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:01:07.582048 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.65:38010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:07.582705 2026] [authz_core:error] [pid 2975020:tid 2975020] [client 57.141.0.65:38010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:07.827261 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.24:30444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:07.827890 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.24:30444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:07.987322 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.38:61738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:07.987948 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.38:61738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:08.272270 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.45:43762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:08.272901 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.45:43762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:08.537650 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.2:34708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:08.538295 2026] [authz_core:error] [pid 2982953:tid 2982953] [client 57.141.0.2:34708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:08.543564 2026] [access_compat:error] [pid 2985734:tid 2985734] [client 176.241.66.87:27887] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:09.262302 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.14:54832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:09.263002 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.14:54832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:09.366178 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.65:38012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:09.367248 2026] [authz_core:error] [pid 2987557:tid 2987557] [client 57.141.0.65:38012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:09.444449 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.13:54360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:09.445104 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.13:54360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:09.860954 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.46:62080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:09.861581 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.46:62080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:09.867949 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.33:21606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:09.868609 2026] [authz_core:error] [pid 2980821:tid 2980821] [client 57.141.0.33:21606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:10.335806 2026] [ssl:error] [pid 2990570:tid 2990570] (EAI 2)Name or service not known: [client 144.76.19.72:43598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:10.335840 2026] [ssl:error] [pid 2990570:tid 2990570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:10.391880 2026] [ssl:error] [pid 2971597:tid 2971597] (EAI 2)Name or service not known: [client 144.76.19.72:43614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:10.391907 2026] [ssl:error] [pid 2971597:tid 2971597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:10.724986 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.27:40364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:10.725643 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.27:40364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:10.936265 2026] [core:error] [pid 2989240:tid 2989240] (13)Permission denied: [client 216.73.216.199:27585] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/min_partial
[Thu Jul 30 12:01:11.311379 2026] [security2:error] [pid 2987551:tid 2987551] [client 185.139.138.182:34659] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu93ku0yGpavLL_P3hcQAAAC0"]
[Thu Jul 30 12:01:11.311442 2026] [security2:error] [pid 2987551:tid 2987551] [client 185.139.138.182:34659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu93ku0yGpavLL_P3hcQAAAC0"]
[Thu Jul 30 12:01:11.311801 2026] [security2:error] [pid 2987551:tid 2987551] [client 185.139.138.182:34659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsu93ku0yGpavLL_P3hcQAAAC0"]
[Thu Jul 30 12:01:11.395719 2026] [authz_core:error] [pid 2990619:tid 2990619] [client 57.141.0.39:50006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:11.396378 2026] [authz_core:error] [pid 2990619:tid 2990619] [client 57.141.0.39:50006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:11.719398 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.5:60456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:11.720076 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.5:60456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:11.810905 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.39:50014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:11.811538 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.39:50014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:12.154523 2026] [security2:error] [pid 2980995:tid 2980995] [client 8.218.0.187:33837] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu-MRsD2vmyNGbhhooDgAAABE"]
[Thu Jul 30 12:01:12.154567 2026] [security2:error] [pid 2980995:tid 2980995] [client 8.218.0.187:33837] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu-MRsD2vmyNGbhhooDgAAABE"]
[Thu Jul 30 12:01:12.154793 2026] [security2:error] [pid 2980995:tid 2980995] [client 8.218.0.187:33837] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsu-MRsD2vmyNGbhhooDgAAABE"]
[Thu Jul 30 12:01:12.204581 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.6:30326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:12.205228 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.6:30326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:12.377931 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.3:53892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:12.378563 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.3:53892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:12.472339 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.17:53158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:12.472972 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.17:53158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:12.631390 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.55:51834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:12.632014 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.55:51834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:13.270163 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.49:64050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:13.270805 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.49:64050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:13.447024 2026] [ssl:error] [pid 2990665:tid 2990665] (EAI 2)Name or service not known: [client 144.76.19.72:43630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:13.447050 2026] [ssl:error] [pid 2990665:tid 2990665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:13.503487 2026] [ssl:error] [pid 2988064:tid 2988064] (EAI 2)Name or service not known: [client 144.76.19.72:43646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:13.503526 2026] [ssl:error] [pid 2988064:tid 2988064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:13.764415 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:53162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:13.765046 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:53162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:13.828656 2026] [core:error] [pid 2982571:tid 2982571] [client 66.249.66.169:48446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:13.828678 2026] [core:error] [pid 2982571:tid 2982571] [client 66.249.66.169:48446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:13.943149 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.21:40730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:13.944094 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.21:40730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:14.026888 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.15:40600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:14.027535 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.15:40600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:14.045341 2026] [access_compat:error] [pid 2988064:tid 2988064] [client 176.241.66.87:28175] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:14.476970 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.68:41416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:14.477645 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.68:41416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:14.955751 2026] [cgi:error] [pid 2975020:tid 2975020] [client 20.104.22.47:4762] AH02812: stderr from /home/chateaus/chateausaintjeannet.org/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:01:15.266865 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.23:38982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:15.267512 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.23:38982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:15.363463 2026] [security2:error] [pid 2973064:tid 2973064] [client 59.153.16.193:58460] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu-7LeE20khp1OkE4vkQAAACs"]
[Thu Jul 30 12:01:15.363525 2026] [security2:error] [pid 2973064:tid 2973064] [client 59.153.16.193:58460] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu-7LeE20khp1OkE4vkQAAACs"]
[Thu Jul 30 12:01:15.363813 2026] [security2:error] [pid 2973064:tid 2973064] [client 59.153.16.193:58460] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsu-7LeE20khp1OkE4vkQAAACs"]
[Thu Jul 30 12:01:15.440196 2026] [security2:error] [pid 2983230:tid 2983230] [client 20.171.55.167:6605] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mwdesign.me.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsu-zPRAHoOBgrKkbi2fgAAABY"]
[Thu Jul 30 12:01:15.440435 2026] [security2:error] [pid 2983230:tid 2983230] [client 20.171.55.167:6605] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mwdesign.me.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsu-zPRAHoOBgrKkbi2fgAAABY"]
[Thu Jul 30 12:01:15.440839 2026] [security2:error] [pid 2983230:tid 2983230] [client 20.171.55.167:6605] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mwdesign.me.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsu-zPRAHoOBgrKkbi2fgAAABY"]
[Thu Jul 30 12:01:15.515227 2026] [core:error] [pid 2989240:tid 2989240] (13)Permission denied: [client 216.73.216.199:27585] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/validate
[Thu Jul 30 12:01:15.516148 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.28:44518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:15.517537 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.28:44518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:15.797756 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.20:49694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:15.798380 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.20:49694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:16.043602 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.20:49706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:16.044228 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.20:49706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:16.127712 2026] [access_compat:error] [pid 2987376:tid 2987376] [client 103.72.86.239:40526] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:16.310919 2026] [security2:error] [pid 2981908:tid 2981908] [client 170.239.70.163:38860] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu_MK_FL9n4BSto6bn2AAAAAU"]
[Thu Jul 30 12:01:16.310973 2026] [security2:error] [pid 2981908:tid 2981908] [client 170.239.70.163:38860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu_MK_FL9n4BSto6bn2AAAAAU"]
[Thu Jul 30 12:01:16.311227 2026] [security2:error] [pid 2981908:tid 2981908] [client 170.239.70.163:38860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsu_MK_FL9n4BSto6bn2AAAAAU"]
[Thu Jul 30 12:01:16.543215 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.44:60352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:16.543875 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.44:60352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:16.560435 2026] [ssl:error] [pid 2990886:tid 2990886] (EAI 2)Name or service not known: [client 144.76.19.72:43662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:16.560474 2026] [ssl:error] [pid 2990886:tid 2990886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:16.613619 2026] [ssl:error] [pid 2984602:tid 2984602] (EAI 2)Name or service not known: [client 144.76.19.72:43672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:16.614345 2026] [ssl:error] [pid 2984602:tid 2984602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:16.658483 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.23:38996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:16.659173 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.23:38996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:16.811557 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.32:45544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:16.812205 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.32:45544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:17.369826 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.56:35292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:17.370454 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.56:35292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:17.444048 2026] [autoindex:error] [pid 2987553:tid 2987553] (13)Permission denied: [client 216.73.216.199:40332] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/opt/alt/php72/var/lib/php/session/
[Thu Jul 30 12:01:17.481447 2026] [lsapi:warn] [pid 2984602:tid 2984602] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:01:17.710728 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.10:43548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:17.711354 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.10:43548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:17.739832 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.70:45000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:17.740457 2026] [authz_core:error] [pid 2982540:tid 2982540] [client 57.141.0.70:45000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:17.819390 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.44:60374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:17.820006 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.44:60374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:18.046199 2026] [security2:error] [pid 2987553:tid 2987553] [client 216.73.216.199:40332] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-sqlite3.ini"] [unique_id "amsu_tSZGkLA_jIAz0brDwAAADI"]
[Thu Jul 30 12:01:18.046546 2026] [security2:error] [pid 2987553:tid 2987553] [client 216.73.216.199:40332] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-sqlite3.ini"] [unique_id "amsu_tSZGkLA_jIAz0brDwAAADI"]
[Thu Jul 30 12:01:18.046864 2026] [security2:error] [pid 2987553:tid 2987553] [client 216.73.216.199:40332] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-sqlite3.ini"] [unique_id "amsu_tSZGkLA_jIAz0brDwAAADI"]
[Thu Jul 30 12:01:18.290463 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.24:41276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:18.291095 2026] [authz_core:error] [pid 2971563:tid 2971563] [client 57.141.0.24:41276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:19.306382 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.58:46442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:19.307081 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.58:46442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:19.416839 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.24:41286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:19.417468 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.24:41286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:19.638699 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.27:40368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:19.639326 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.27:40368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:19.672617 2026] [ssl:error] [pid 2990971:tid 2990971] (EAI 2)Name or service not known: [client 144.76.19.72:43938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:19.672649 2026] [ssl:error] [pid 2990971:tid 2990971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:19.673311 2026] [security2:error] [pid 2982540:tid 2982540] [client 103.119.23.82:48464] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu_-jhmQdDez9ONtUQLAAAAB8"]
[Thu Jul 30 12:01:19.673350 2026] [security2:error] [pid 2982540:tid 2982540] [client 103.119.23.82:48464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsu_-jhmQdDez9ONtUQLAAAAB8"]
[Thu Jul 30 12:01:19.673597 2026] [security2:error] [pid 2982540:tid 2982540] [client 103.119.23.82:48464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsu_-jhmQdDez9ONtUQLAAAAB8"]
[Thu Jul 30 12:01:19.726554 2026] [ssl:error] [pid 2988064:tid 2988064] (EAI 2)Name or service not known: [client 144.76.19.72:43940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:19.726577 2026] [ssl:error] [pid 2988064:tid 2988064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:19.811762 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.36:27864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:19.812413 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.36:27864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:20.182697 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.40:55820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:20.183321 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.40:55820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:20.194874 2026] [security2:error] [pid 2982540:tid 2982540] [client 124.221.163.189:41400] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchlingfair.com"] [uri "/"] [unique_id "amsvAOjhmQdDez9ONtUQLQAAAB8"]
[Thu Jul 30 12:01:20.554524 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.67:34466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:20.555703 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.67:34466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:20.739412 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.58:46446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:20.740064 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.58:46446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:21.277669 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.62:55776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:21.278324 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.62:55776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:21.415053 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.9:47192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:21.415719 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.9:47192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:21.857789 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.9:27366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:21.858440 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.9:27366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:22.062625 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.36:40710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:22.063251 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.36:40710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:22.810805 2026] [ssl:error] [pid 2990666:tid 2990666] (EAI 2)Name or service not known: [client 144.76.19.72:43946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:22.810852 2026] [ssl:error] [pid 2990666:tid 2990666] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:22.869678 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:43952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:22.869747 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:23.038623 2026] [authz_core:error] [pid 2990663:tid 2990663] [client 57.141.0.6:22554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:23.039255 2026] [authz_core:error] [pid 2990663:tid 2990663] [client 57.141.0.6:22554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:23.203761 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.50:51378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:23.204402 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.50:51378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:23.529921 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.52:57278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:23.530556 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.52:57278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:23.656541 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.5:23322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:23.657168 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.5:23322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:23.950670 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.9:27380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:23.951295 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.9:27380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:24.309688 2026] [authz_core:error] [pid 2990663:tid 2990663] [client 57.141.0.63:53156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:24.310314 2026] [authz_core:error] [pid 2990663:tid 2990663] [client 57.141.0.63:53156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:24.398954 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.61:65480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:24.399592 2026] [authz_core:error] [pid 2985734:tid 2985734] [client 57.141.0.61:65480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:24.586233 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.32:53124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:24.586857 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.32:53124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:25.451401 2026] [access_compat:error] [pid 2988064:tid 2988064] [client 176.241.66.87:28749] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:25.570482 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.47:60864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:25.571116 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.47:60864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:25.925657 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.69:64512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:25.926299 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.69:64512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:25.927228 2026] [ssl:error] [pid 2990664:tid 2990664] (EAI 2)Name or service not known: [client 144.76.19.72:43960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:25.927257 2026] [ssl:error] [pid 2990664:tid 2990664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:25.980765 2026] [ssl:error] [pid 2983355:tid 2983355] (EAI 2)Name or service not known: [client 144.76.19.72:43972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:25.980826 2026] [ssl:error] [pid 2983355:tid 2983355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:26.153437 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.34:43858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:26.154102 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.34:43858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:26.349672 2026] [access_compat:error] [pid 2982569:tid 2982569] [client 103.72.86.239:38001] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:26.720222 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.30:26774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:26.720879 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.30:26774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:26.756656 2026] [core:error] [pid 2984602:tid 2984602] [client 66.249.66.168:57201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:26.756692 2026] [core:error] [pid 2984602:tid 2984602] [client 66.249.66.168:57201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:26.786230 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.69:64514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:26.786848 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.69:64514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:26.814299 2026] [core:error] [pid 2987553:tid 2987553] (13)Permission denied: [client 216.73.216.199:40332] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/dev/fd/5
[Thu Jul 30 12:01:26.860146 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.29:55926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:26.860768 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.29:55926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:27.231168 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.51:43190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:27.231792 2026] [authz_core:error] [pid 2979215:tid 2979215] [client 57.141.0.51:43190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:27.413991 2026] [ssl:error] [pid 2959154:tid 2959154] (70014)End of file found: [client 216.73.216.199:60293] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:27.474804 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.45:61758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:27.475448 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.45:61758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:27.992478 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 66.249.66.33:49867] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:01:27.995136 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 66.249.66.33:49867] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:01:28.202990 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.24:39498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:28.203624 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.24:39498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:28.207271 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.38:50576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:28.207886 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.38:50576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:28.464115 2026] [security2:error] [pid 2979215:tid 2979215] [client 100.29.128.75:15087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/reading-certificates/"] [unique_id "amsvCMv2Pjw6X8YmlPMAGQAAABM"]
[Thu Jul 30 12:01:28.555188 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.33:46582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:28.555809 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.33:46582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:28.667585 2026] [lsapi:warn] [pid 2983355:tid 2983355] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:01:28.775209 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.41:25286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:28.775824 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.41:25286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:29.069420 2026] [ssl:error] [pid 2983305:tid 2983305] (EAI 2)Name or service not known: [client 144.76.19.72:43986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:29.069465 2026] [ssl:error] [pid 2983305:tid 2983305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:29.128291 2026] [ssl:error] [pid 2984602:tid 2984602] (EAI 2)Name or service not known: [client 144.76.19.72:43988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:29.128319 2026] [ssl:error] [pid 2984602:tid 2984602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:29.374283 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.8:59088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:29.374907 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.8:59088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:29.729460 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.67:60234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:29.730110 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.67:60234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:30.193657 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.32:53128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:30.194274 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.32:53128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:30.232026 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.7:54810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:30.232665 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.7:54810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:30.436728 2026] [access_compat:error] [pid 2990886:tid 2990886] [client 31.76.138.63:38956] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2009/01/yes-man.jpg
[Thu Jul 30 12:01:30.436839 2026] [access_compat:error] [pid 2990886:tid 2990886] [client 31.76.138.63:38956] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:01:30.682560 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.14:24600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:30.683202 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.14:24600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:30.766943 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.50:51734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:30.767572 2026] [authz_core:error] [pid 2983355:tid 2983355] [client 57.141.0.50:51734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:30.990435 2026] [security2:error] [pid 2990665:tid 2990665] [client 100.29.164.178:8983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/glenlee-2/"] [unique_id "amsvChyWEZu-YqVSeHdr7gAAABc"]
[Thu Jul 30 12:01:31.246024 2026] [access_compat:error] [pid 2987552:tid 2987552] [client 176.241.66.87:29009] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:31.304246 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.55:23032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:31.304871 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.55:23032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:31.422228 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.7:54818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:31.422853 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.7:54818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:31.843112 2026] [access_compat:error] [pid 2990664:tid 2990664] [client 45.158.164.139:38260] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:01:31.882373 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.45:61764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:31.883008 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.45:61764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:31.971882 2026] [access_compat:error] [pid 2990570:tid 2990570] [client 103.72.86.239:40349] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:32.223140 2026] [ssl:error] [pid 2990971:tid 2990971] (EAI 2)Name or service not known: [client 144.76.19.72:50518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:32.223170 2026] [ssl:error] [pid 2990971:tid 2990971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:32.276777 2026] [ssl:error] [pid 2988064:tid 2988064] (EAI 2)Name or service not known: [client 144.76.19.72:50522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:32.276826 2026] [ssl:error] [pid 2988064:tid 2988064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:32.712792 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.65:36292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:32.713483 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.65:36292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:33.046326 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.14:24602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:33.046971 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.14:24602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:33.120802 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.55:23038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:33.121426 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.55:23038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:33.436304 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.25:64452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:33.436923 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.25:64452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:33.495027 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.27:39608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:33.495685 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.27:39608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:33.569207 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.68:39326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:33.569829 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.68:39326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:34.017361 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.13:20792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:34.017984 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.13:20792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:34.468226 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.55:62964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:34.468911 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.55:62964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:34.622629 2026] [security2:error] [pid 2971597:tid 2971597] [client 18.235.158.19:35730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2009/ref/B.7-India-Gujarat-2001-Earthquake.pdf"] [unique_id "amsvDst2L2FCnsuL0RMoKwAAACA"]
[Thu Jul 30 12:01:34.924279 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.31:43160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:34.924909 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.31:43160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:35.036890 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.15:26822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:35.037529 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.15:26822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:35.331840 2026] [ssl:error] [pid 2989187:tid 2989187] (EAI 2)Name or service not known: [client 144.76.19.72:50526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:35.331874 2026] [ssl:error] [pid 2989187:tid 2989187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:35.386442 2026] [ssl:error] [pid 2989240:tid 2989240] (EAI 2)Name or service not known: [client 144.76.19.72:50538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:35.386482 2026] [ssl:error] [pid 2989240:tid 2989240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:35.634312 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.52:62240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:35.634937 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.52:62240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:35.772474 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.63:23684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:35.773104 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.63:23684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:35.920672 2026] [security2:error] [pid 2955789:tid 2955789] [client 34.193.2.57:6708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2011-2012.html"] [unique_id "amsvD6HuDVbYLfd-273hxgAAAEw"]
[Thu Jul 30 12:01:36.448789 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.19:48284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:36.449429 2026] [authz_core:error] [pid 2987476:tid 2987476] [client 57.141.0.19:48284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:36.663553 2026] [access_compat:error] [pid 2955789:tid 2955789] [client 176.241.66.87:29317] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:36.920104 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.49:48438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:36.920739 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.49:48438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:36.953612 2026] [access_compat:error] [pid 2990886:tid 2990886] [client 103.72.86.239:38472] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:36.999876 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.20:53960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:37.000519 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.20:53960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:37.451986 2026] [security2:error] [pid 2990666:tid 2990666] [client 151.80.133.130:33940] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvEY766DITGGCMCWi3KAAAABk"]
[Thu Jul 30 12:01:37.452032 2026] [security2:error] [pid 2990666:tid 2990666] [client 151.80.133.130:33940] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvEY766DITGGCMCWi3KAAAABk"]
[Thu Jul 30 12:01:37.452303 2026] [security2:error] [pid 2990666:tid 2990666] [client 151.80.133.130:33940] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvEY766DITGGCMCWi3KAAAABk"]
[Thu Jul 30 12:01:37.521132 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.9:22012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:37.521744 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.9:22012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:37.552051 2026] [security2:error] [pid 2981908:tid 2981908] [client 213.32.68.81:42380] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvEcK_FL9n4BSto6bn4AAAAAU"]
[Thu Jul 30 12:01:37.552108 2026] [security2:error] [pid 2981908:tid 2981908] [client 213.32.68.81:42380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvEcK_FL9n4BSto6bn4AAAAAU"]
[Thu Jul 30 12:01:37.552343 2026] [security2:error] [pid 2981908:tid 2981908] [client 213.32.68.81:42380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvEcK_FL9n4BSto6bn4AAAAAU"]
[Thu Jul 30 12:01:37.597095 2026] [security2:error] [pid 2959154:tid 2959154] [client 3.94.199.128:50533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/posters/love-football-love-books-puffin-poster-1/"] [unique_id "amsvESMIBy93HDeMjLZRNwAAAAc"]
[Thu Jul 30 12:01:37.803565 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.4:24066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:37.804200 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.4:24066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:38.038870 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.62:46112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:38.039563 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.62:46112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:38.114413 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.62:46122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:38.115039 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.62:46122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:38.370780 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.52:62250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:38.371399 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.52:62250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:38.443182 2026] [ssl:error] [pid 2983386:tid 2983386] (EAI 2)Name or service not known: [client 144.76.19.72:50552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:38.443208 2026] [ssl:error] [pid 2983386:tid 2983386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:38.497724 2026] [ssl:error] [pid 2990665:tid 2990665] (EAI 2)Name or service not known: [client 144.76.19.72:50554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:38.497749 2026] [ssl:error] [pid 2990665:tid 2990665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:38.551127 2026] [core:error] [pid 2982569:tid 2982569] (13)Permission denied: [client 216.73.216.199:55056] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/shrink
[Thu Jul 30 12:01:38.735490 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.67:46812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:38.736195 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.67:46812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:38.899706 2026] [security2:error] [pid 2990971:tid 2990971] [client 52.4.76.156:60211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/CCCM/vol3/ch1/A.1-Iraq-2014-Conflict.pdf"] [unique_id "amsvEkXEejxmw3EUj44RIwAAACE"]
[Thu Jul 30 12:01:38.973225 2026] [security2:error] [pid 2990665:tid 2990665] [client 52.202.233.37:12932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/reading-for-pleasure-comprehension-challenge-pack/reading-quiz-fp-1/"] [unique_id "amsvEhyWEZu-YqVSeHdr8wAAABc"]
[Thu Jul 30 12:01:39.076964 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.34:42046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:39.077594 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.34:42046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:39.462884 2026] [lsapi:warn] [pid 2983386:tid 2983386] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:01:39.619629 2026] [security2:error] [pid 2974723:tid 2974723] [client 3.232.102.111:26035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2011-2012/B01-3point5.pdf"] [unique_id "amsvE4S62LMjxlA8iVz23wAAAAQ"]
[Thu Jul 30 12:01:39.753146 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.12:37138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:39.753765 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.12:37138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:39.792742 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.9:22018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:39.793373 2026] [authz_core:error] [pid 2974723:tid 2974723] [client 57.141.0.9:22018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:39.844158 2026] [security2:error] [pid 2959154:tid 2959154] [client 213.32.68.86:39490] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg9058.html"] [unique_id "amsvEyMIBy93HDeMjLZROgAAAAc"]
[Thu Jul 30 12:01:39.844214 2026] [security2:error] [pid 2959154:tid 2959154] [client 213.32.68.86:39490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg9058.html"] [unique_id "amsvEyMIBy93HDeMjLZROgAAAAc"]
[Thu Jul 30 12:01:39.844450 2026] [security2:error] [pid 2959154:tid 2959154] [client 213.32.68.86:39490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvEyMIBy93HDeMjLZROgAAAAc"]
[Thu Jul 30 12:01:40.202354 2026] [security2:error] [pid 2990663:tid 2990663] [client 151.80.133.238:44208] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg9058.html"] [unique_id "amsvFFr2NJeDsvQwigoogQAAAA4"]
[Thu Jul 30 12:01:40.202403 2026] [security2:error] [pid 2990663:tid 2990663] [client 151.80.133.238:44208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg9058.html"] [unique_id "amsvFFr2NJeDsvQwigoogQAAAA4"]
[Thu Jul 30 12:01:40.202680 2026] [security2:error] [pid 2990663:tid 2990663] [client 151.80.133.238:44208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvFFr2NJeDsvQwigoogQAAAA4"]
[Thu Jul 30 12:01:40.214885 2026] [security2:error] [pid 2983386:tid 2983386] [client 51.38.187.112:52024] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amsvFIJQy0H7ktxi7CcWKAAAADE"]
[Thu Jul 30 12:01:40.214946 2026] [security2:error] [pid 2983386:tid 2983386] [client 51.38.187.112:52024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amsvFIJQy0H7ktxi7CcWKAAAADE"]
[Thu Jul 30 12:01:40.215231 2026] [security2:error] [pid 2983386:tid 2983386] [client 51.38.187.112:52024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvFIJQy0H7ktxi7CcWKAAAADE"]
[Thu Jul 30 12:01:40.333508 2026] [security2:error] [pid 2986650:tid 2986650] [client 141.94.78.40:54382] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amsvFGrEuV8svTAErFVbQwAAAAY"]
[Thu Jul 30 12:01:40.333557 2026] [security2:error] [pid 2986650:tid 2986650] [client 141.94.78.40:54382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amsvFGrEuV8svTAErFVbQwAAAAY"]
[Thu Jul 30 12:01:40.333817 2026] [security2:error] [pid 2986650:tid 2986650] [client 141.94.78.40:54382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvFGrEuV8svTAErFVbQwAAAAY"]
[Thu Jul 30 12:01:40.754211 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.64:59230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:40.754870 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.64:59230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:40.933104 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.33:38740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:40.933745 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.33:38740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:40.961335 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.9:22022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:40.961973 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.9:22022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:41.108439 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.40:61552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:41.109076 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.40:61552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:41.462513 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.5:48178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:41.463182 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.5:48178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:41.553445 2026] [ssl:error] [pid 2992127:tid 2992127] (EAI 2)Name or service not known: [client 144.76.19.72:28744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:41.553486 2026] [ssl:error] [pid 2992127:tid 2992127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:41.607941 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:28746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:41.607970 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:42.171990 2026] [ssl:error] [pid 2982569:tid 2982569] (70014)End of file found: [client 216.73.216.199:55056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:42.242134 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.71:24220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:42.242845 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.71:24220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:42.369122 2026] [authz_core:error] [pid 2992182:tid 2992182] [client 57.141.0.50:56686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:42.370116 2026] [authz_core:error] [pid 2992182:tid 2992182] [client 57.141.0.50:56686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:42.519628 2026] [access_compat:error] [pid 2992183:tid 2992183] [client 176.241.66.87:64418] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:42.527619 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.32:50162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:42.528232 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.32:50162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:42.936695 2026] [security2:error] [pid 2992179:tid 2992179] [client 18.232.12.157:48461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/3d-book-covers/fa-3-3d-book-jpg/"] [unique_id "amsvFhpBcEIF5D6rJBO8agAAACk"]
[Thu Jul 30 12:01:43.164591 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.11:63690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:43.165228 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.11:63690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:43.200938 2026] [access_compat:error] [pid 2992184:tid 2992184] [client 103.72.86.239:38744] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:43.230002 2026] [authz_core:error] [pid 2991667:tid 2991667] [client 57.141.0.59:51102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:43.230633 2026] [authz_core:error] [pid 2991667:tid 2991667] [client 57.141.0.59:51102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:43.313573 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.30:35572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:43.314190 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.30:35572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:43.407396 2026] [security2:error] [pid 2955789:tid 2955789] [client 18.211.39.188:24001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2010/A04-A11-Haiti2010.pdf"] [unique_id "amsvF6HuDVbYLfd-273hyQAAAEw"]
[Thu Jul 30 12:01:44.028641 2026] [authz_core:error] [pid 2992018:tid 2992018] [client 57.141.0.6:28696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:44.029281 2026] [authz_core:error] [pid 2992018:tid 2992018] [client 57.141.0.6:28696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:44.306440 2026] [core:error] [pid 2979215:tid 2979215] (13)Permission denied: [client 216.73.216.199:15152] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/usersize
[Thu Jul 30 12:01:44.394101 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.49:65396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:44.394739 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.49:65396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:44.519291 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.18:22304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:44.519937 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.18:22304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:44.664210 2026] [ssl:error] [pid 2990570:tid 2990570] (EAI 2)Name or service not known: [client 144.76.19.72:28762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:44.664249 2026] [ssl:error] [pid 2990570:tid 2990570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:44.718757 2026] [ssl:error] [pid 2992181:tid 2992181] (EAI 2)Name or service not known: [client 144.76.19.72:28766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:44.718791 2026] [ssl:error] [pid 2992181:tid 2992181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:45.048448 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.38:64642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:45.049082 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.38:64642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:45.529592 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.20:44272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:45.530280 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.20:44272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:45.943613 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.12:56450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:45.944247 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.12:56450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:46.020455 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.41:24068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:46.021085 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.41:24068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:46.217776 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 52.167.144.232:53726] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 12:01:46.450558 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.16:65004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:46.451178 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.16:65004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:46.547226 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.66:59124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:46.547875 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.66:59124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:46.732625 2026] [core:error] [pid 2979215:tid 2979215] [client 216.73.216.199:15152] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib64/python3.12/file:%s)
[Thu Jul 30 12:01:47.068463 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.12:56452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:47.069101 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.12:56452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:47.392391 2026] [security2:error] [pid 2992018:tid 2992018] [client 54.88.84.219:6413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects9/A.8-Nigeria-SP9.pdf"] [unique_id "amsvG3rbpZTA6dqj1Z4raQAAAAg"]
[Thu Jul 30 12:01:47.667057 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.23:58894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:47.667698 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.23:58894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:47.689910 2026] [access_compat:error] [pid 2983230:tid 2983230] [client 103.72.86.239:39188] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:47.740129 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.62:22338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:47.740765 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.62:22338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:47.775528 2026] [ssl:error] [pid 2990570:tid 2990570] (EAI 2)Name or service not known: [client 144.76.19.72:28780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:47.775559 2026] [ssl:error] [pid 2990570:tid 2990570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:47.806755 2026] [access_compat:error] [pid 2992182:tid 2992182] [client 176.241.66.87:64684] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:47.807930 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.58:65226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:47.808557 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.58:65226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:47.828558 2026] [ssl:error] [pid 2959154:tid 2959154] (EAI 2)Name or service not known: [client 144.76.19.72:28796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:47.828584 2026] [ssl:error] [pid 2959154:tid 2959154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:47.937044 2026] [security2:error] [pid 2990664:tid 2990664] [client 216.73.216.199:60885] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/NetworkManager/NetworkManager.conf"] [unique_id "amsvG-d6-vTgk8lHc1q0oQAAAA8"]
[Thu Jul 30 12:01:47.937434 2026] [security2:error] [pid 2990664:tid 2990664] [client 216.73.216.199:60885] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/NetworkManager/NetworkManager.conf"] [unique_id "amsvG-d6-vTgk8lHc1q0oQAAAA8"]
[Thu Jul 30 12:01:47.937674 2026] [security2:error] [pid 2990664:tid 2990664] [client 216.73.216.199:60885] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/NetworkManager/NetworkManager.conf"] [unique_id "amsvG-d6-vTgk8lHc1q0oQAAAA8"]
[Thu Jul 30 12:01:47.986985 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.60:31614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:47.987668 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.60:31614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:48.077203 2026] [security2:error] [pid 2983386:tid 2983386] [client 34.235.239.240:46890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/foul-play-2-2/"] [unique_id "amsvHIJQy0H7ktxi7CcWKQAAADE"]
[Thu Jul 30 12:01:48.239434 2026] [ssl:error] [pid 2990664:tid 2990664] (70014)End of file found: [client 216.73.216.199:60885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:48.785763 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.60:31620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:48.786454 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.60:31620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:48.844619 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.59:60694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:48.845250 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.59:60694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:49.522863 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.35:26626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:49.523489 2026] [authz_core:error] [pid 2959154:tid 2959154] [client 57.141.0.35:26626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:49.664257 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 66.249.66.33:47372] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:01:49.667249 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 66.249.66.33:47372] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:01:49.767697 2026] [core:error] [pid 2982569:tid 2982569] [client 66.249.66.167:56460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:49.767721 2026] [core:error] [pid 2982569:tid 2982569] [client 66.249.66.167:56460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:49.962381 2026] [security2:error] [pid 2992184:tid 2992184] [client 85.208.96.206:42572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/no-credit-check-apartments-phoenix,-az"] [unique_id "amsvHTcrfDopQbTL2giNjAAAADQ"]
[Thu Jul 30 12:01:50.023939 2026] [lsapi:warn] [pid 2987556:tid 2987556] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:01:50.096079 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.8:60722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:50.096702 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.8:60722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:50.134380 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.35:26630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:50.135076 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.35:26630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:50.558483 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.45:22256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:50.559116 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.45:22256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:50.597864 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.3:54770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:50.598482 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.3:54770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:50.908102 2026] [ssl:error] [pid 2987376:tid 2987376] (EAI 2)Name or service not known: [client 144.76.19.72:50236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:50.908193 2026] [ssl:error] [pid 2987376:tid 2987376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:50.920722 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.58:65234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:50.921373 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.58:65234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:50.961861 2026] [ssl:error] [pid 2992124:tid 2992124] (EAI 2)Name or service not known: [client 144.76.19.72:50242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:50.961894 2026] [ssl:error] [pid 2992124:tid 2992124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:51.145510 2026] [security2:error] [pid 2992181:tid 2992181] [client 44.213.202.136:42063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amsvH9cyrm3pilM_alxN_gAAAC4"]
[Thu Jul 30 12:01:51.217165 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.68:37646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:51.217791 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.68:37646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:51.328332 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.50:27434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:51.328961 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.50:27434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:51.746593 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.56:31266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:51.747223 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.56:31266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:52.215854 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.7:54340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:52.216490 2026] [authz_core:error] [pid 2986650:tid 2986650] [client 57.141.0.7:54340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:52.439836 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.15:52320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:52.440458 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.15:52320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:52.845328 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.7:54352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:52.846022 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.7:54352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:53.375233 2026] [ssl:error] [pid 2968744:tid 2968744] (70014)End of file found: [client 216.73.216.199:51645] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:53.378165 2026] [security2:error] [pid 2992179:tid 2992179] [client 110.249.201.13:34660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "astleydogpark.co.uk"] [uri "/robots.txt"] [unique_id "amsvIRpBcEIF5D6rJBO8bwAAACk"]
[Thu Jul 30 12:01:53.677416 2026] [ssl:error] [pid 2992124:tid 2992124] (70014)End of file found: [client 216.73.216.199:41615] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:53.800199 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.59:60700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:53.800880 2026] [authz_core:error] [pid 2981128:tid 2981128] [client 57.141.0.59:60700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:53.879696 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.49:31460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:53.880317 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.49:31460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:53.882873 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.17:21764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:53.883546 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.17:21764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:54.015851 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:50250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:54.015874 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:54.070035 2026] [ssl:error] [pid 2983305:tid 2983305] (EAI 2)Name or service not known: [client 144.76.19.72:50254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:54.070061 2026] [ssl:error] [pid 2983305:tid 2983305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:54.175558 2026] [ssl:error] [pid 2992179:tid 2992179] (70014)End of file found: [client 216.73.216.199:47036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:54.256404 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.36:45870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:54.257018 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.36:45870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:54.527236 2026] [core:error] [pid 2983230:tid 2983230] [client 66.249.64.170:45563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:54.527275 2026] [core:error] [pid 2983230:tid 2983230] [client 66.249.64.170:45563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:01:54.678221 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.45:22270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:54.678849 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.45:22270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:54.807206 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.34:36660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:54.807823 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.34:36660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:54.824371 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.64:64538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:54.825006 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.64:64538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:55.039990 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.39:44884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:55.040622 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.39:44884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:55.835439 2026] [security2:error] [pid 2990665:tid 2990665] [client 100.24.167.60:37956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/other-books/ghost-stadium/img_4936/"] [unique_id "amsvIxyWEZu-YqVSeHdr-AAAABc"]
[Thu Jul 30 12:01:56.222177 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.58:54402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:56.222797 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.58:54402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:56.511851 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.4:61010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:56.512475 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.4:61010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:56.644457 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.32:64204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:56.645157 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.32:64204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:56.732218 2026] [security2:error] [pid 2987552:tid 2987552] [client 18.215.49.176:36285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvJBz50EbVdr_x-guuDwAAADA"]
[Thu Jul 30 12:01:57.049817 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.52:38836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:57.050438 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.52:38836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:57.075377 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.22:26776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:57.076053 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.22:26776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:57.121907 2026] [ssl:error] [pid 2981908:tid 2981908] (EAI 2)Name or service not known: [client 144.76.19.72:50260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:57.121933 2026] [ssl:error] [pid 2981908:tid 2981908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:57.177556 2026] [ssl:error] [pid 2987552:tid 2987552] (EAI 2)Name or service not known: [client 144.76.19.72:50268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:01:57.177592 2026] [ssl:error] [pid 2987552:tid 2987552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:01:57.390485 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.11:36354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:57.391181 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.11:36354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:57.470394 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.4:61024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:57.471020 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.4:61024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:58.033308 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.67:45402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:58.033930 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.67:45402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:58.194327 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.48:27954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:58.195015 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.48:27954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:58.322703 2026] [access_compat:error] [pid 2987552:tid 2987552] [client 103.72.86.239:40189] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:58.391160 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 172.213.208.20:54644] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/pomo/error_log
[Thu Jul 30 12:01:58.990096 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.35:39672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:58.990709 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.35:39672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:59.008646 2026] [access_compat:error] [pid 2989240:tid 2989240] [client 176.241.66.87:30429] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:01:59.035878 2026] [security2:error] [pid 2990666:tid 2990666] [client 107.22.208.39:26823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/rugby/rugby-academy/"] [unique_id "amsvJ4766DITGGCMCWi3LwAAABk"]
[Thu Jul 30 12:01:59.145423 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.69:32050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:01:59.146121 2026] [authz_core:error] [pid 2987558:tid 2987558] [client 57.141.0.69:32050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:01:59.487950 2026] [ssl:error] [pid 2984602:tid 2984602] (70014)End of file found: [client 216.73.216.199:20295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:01:59.995803 2026] [security2:error] [pid 2990666:tid 2990666] [client 107.22.208.39:45516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/rugby-academy/"] [unique_id "amsvJ4766DITGGCMCWi3MAAAABk"]
[Thu Jul 30 12:02:00.318607 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.26:58042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:00.319261 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.26:58042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:00.338886 2026] [ssl:error] [pid 2993151:tid 2993151] (EAI 2)Name or service not known: [client 144.76.19.72:52162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:00.338929 2026] [ssl:error] [pid 2993151:tid 2993151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:00.612079 2026] [lsapi:warn] [pid 2976711:tid 2976711] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:02:00.911127 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.55:48366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:00.911749 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.55:48366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:00.947244 2026] [security2:error] [pid 2992185:tid 2992185] [client 34.195.60.66:7926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvKDlWNekbfMEevupe_gAAADg"]
[Thu Jul 30 12:02:00.995374 2026] [ssl:error] [pid 2982569:tid 2982569] (EAI 2)Name or service not known: [client 144.76.19.72:52176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:00.995398 2026] [ssl:error] [pid 2982569:tid 2982569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:01.119541 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.52:58904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:01.120169 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.52:58904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:01.307346 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.52:58912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:01.307981 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.52:58912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:01.576312 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.22:48470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:01.577046 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.22:48470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:01.609819 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.32:64216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:01.610444 2026] [authz_core:error] [pid 2990666:tid 2990666] [client 57.141.0.32:64216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:01.708930 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.64:64544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:01.709569 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.64:64544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:02.017299 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.22:48484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:02.017922 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.22:48484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:02.096091 2026] [security2:error] [pid 2993321:tid 2993321] [client 156.197.215.187:50278] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvKm-0vDXjEXwpuP-HLAAAAAQ"]
[Thu Jul 30 12:02:02.096173 2026] [security2:error] [pid 2993321:tid 2993321] [client 156.197.215.187:50278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvKm-0vDXjEXwpuP-HLAAAAAQ"]
[Thu Jul 30 12:02:02.096511 2026] [security2:error] [pid 2993321:tid 2993321] [client 156.197.215.187:50278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvKm-0vDXjEXwpuP-HLAAAAAQ"]
[Thu Jul 30 12:02:02.559484 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.38:32378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:02.560128 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.38:32378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:03.085108 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.56:31234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:03.085731 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.56:31234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:03.145039 2026] [security2:error] [pid 2992125:tid 2992125] [client 54.84.147.79:6629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/home/first-readers-pack/"] [unique_id "amsvK1Ui3qaYKH3hvL8O6wAAAB0"]
[Thu Jul 30 12:02:03.472108 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.23:30444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:03.472764 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.23:30444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:03.562085 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.44:57546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:03.562794 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.44:57546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:03.649204 2026] [security2:error] [pid 2993509:tid 2993509] [client 47.128.98.40:47070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.unique-pr.co.uk"] [uri "/robots.txt"] [unique_id "amsvKzSIPa09olyY3_l1RgAAABM"]
[Thu Jul 30 12:02:03.788469 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.21:45490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:03.789932 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.21:45490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:04.035848 2026] [security2:error] [pid 2992180:tid 2992180] [client 41.193.213.223:6043] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvLOuDJNaAmQbuIy9vPgAAACw"]
[Thu Jul 30 12:02:04.035910 2026] [security2:error] [pid 2992180:tid 2992180] [client 41.193.213.223:6043] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvLOuDJNaAmQbuIy9vPgAAACw"]
[Thu Jul 30 12:02:04.036268 2026] [security2:error] [pid 2992180:tid 2992180] [client 41.193.213.223:6043] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvLOuDJNaAmQbuIy9vPgAAACw"]
[Thu Jul 30 12:02:04.051555 2026] [ssl:error] [pid 2990666:tid 2990666] (EAI 2)Name or service not known: [client 144.76.19.72:52184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:04.051582 2026] [ssl:error] [pid 2990666:tid 2990666] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:04.104708 2026] [ssl:error] [pid 2993513:tid 2993513] (EAI 2)Name or service not known: [client 144.76.19.72:52194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:04.104743 2026] [ssl:error] [pid 2993513:tid 2993513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:04.193831 2026] [authz_core:error] [pid 2993509:tid 2993509] [client 57.141.0.30:33012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:04.194465 2026] [authz_core:error] [pid 2993509:tid 2993509] [client 57.141.0.30:33012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:04.539766 2026] [core:error] [pid 2983355:tid 2983355] (13)Permission denied: [client 216.73.216.199:43165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/slabs_cpu_partial
[Thu Jul 30 12:02:04.576737 2026] [access_compat:error] [pid 2990664:tid 2990664] [client 176.241.66.87:64968] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:04.646151 2026] [access_compat:error] [pid 2987552:tid 2987552] [client 103.72.86.239:40589] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:04.675540 2026] [security2:error] [pid 2992180:tid 2992180] [client 18.210.58.238:55528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvLOuDJNaAmQbuIy9vPwAAACw"]
[Thu Jul 30 12:02:04.790582 2026] [authz_core:error] [pid 2993509:tid 2993509] [client 57.141.0.54:23666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:04.791207 2026] [authz_core:error] [pid 2993509:tid 2993509] [client 57.141.0.54:23666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:04.841311 2026] [ssl:error] [pid 2983355:tid 2983355] (70014)End of file found: [client 216.73.216.199:43165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:04.856763 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.41:45536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:04.857379 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.41:45536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:05.462730 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.58:29838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:05.463354 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.58:29838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:05.757281 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.34:47588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:05.757925 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.34:47588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:06.040291 2026] [ssl:error] [pid 2990665:tid 2990665] (70014)End of file found: [client 216.73.216.199:40890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:06.249338 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.17:55216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:06.250093 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.17:55216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:06.495556 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.18:21228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:06.496173 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.18:21228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:06.896237 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.17:55222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:06.896862 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.17:55222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:07.047534 2026] [security2:error] [pid 2990664:tid 2990664] [client 35.168.238.50:56400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/home/hmd-2024-ha-blue/"] [unique_id "amsvL-d6-vTgk8lHc1q0pAAAAA8"]
[Thu Jul 30 12:02:07.208390 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:52210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:07.208418 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:07.251149 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.34:47592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:07.251776 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.34:47592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:07.268862 2026] [ssl:error] [pid 2993508:tid 2993508] (EAI 2)Name or service not known: [client 144.76.19.72:52220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:07.268910 2026] [ssl:error] [pid 2993508:tid 2993508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:07.360308 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.21:45498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:07.361003 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.21:45498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:07.512316 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.34:47602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:07.512945 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.34:47602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:08.021043 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.7:35336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:08.021675 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.7:35336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:08.358707 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.6:43364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:08.359324 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.6:43364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:08.664694 2026] [security2:error] [pid 2983305:tid 2983305] [client 100.28.49.152:25085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvMG9-OmwX7KPRlD4XlAAAACM"]
[Thu Jul 30 12:02:08.969280 2026] [access_compat:error] [pid 2993513:tid 2993513] [client 103.72.86.239:40888] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:09.052606 2026] [cgi:error] [pid 2986805:tid 2986805] [client 216.73.216.199:8243] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Math-BigInt/examples/bigprimes.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:02:09.052668 2026] [cgi:error] [pid 2986805:tid 2986805] [client 216.73.216.199:8243] End of script output before headers: bigprimes.pl
[Thu Jul 30 12:02:09.057903 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.55:20704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:09.058600 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.55:20704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:09.185452 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.6:43368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:09.186174 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.6:43368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:09.549663 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.68:50260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:09.550296 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.68:50260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:09.828542 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.15:30586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:09.829161 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.15:30586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:10.323307 2026] [ssl:error] [pid 2992126:tid 2992126] (EAI 2)Name or service not known: [client 144.76.19.72:56260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:10.323357 2026] [ssl:error] [pid 2992126:tid 2992126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:10.379902 2026] [ssl:error] [pid 2993511:tid 2993511] (EAI 2)Name or service not known: [client 144.76.19.72:56270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:10.379933 2026] [ssl:error] [pid 2993511:tid 2993511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:10.387204 2026] [security2:error] [pid 2983473:tid 2983473] [client 170.106.37.134:60346] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amsvMoVKdj_ppOHe_aPXpQAAADU"]
[Thu Jul 30 12:02:10.534190 2026] [access_compat:error] [pid 2990664:tid 2990664] [client 176.241.66.87:31013] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:10.635878 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.30:33016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:10.636569 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.30:33016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:10.819232 2026] [security2:error] [pid 2983355:tid 2983355] [client 52.44.174.136:55687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/spitfire/tom-spitfire/"] [unique_id "amsvMlLMlIrIzwokUhng1gAAACg"]
[Thu Jul 30 12:02:11.080645 2026] [lsapi:warn] [pid 2983473:tid 2983473] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:02:11.150355 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.27:24064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:11.150979 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.27:24064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:11.164307 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.61:36756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:11.164926 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.61:36756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:11.254340 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.66:57762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:11.254967 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.66:57762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:11.903139 2026] [ssl:error] [pid 2989240:tid 2989240] (70014)End of file found: [client 216.73.216.199:11365] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:11.961001 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.68:50266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:11.961739 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.68:50266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:11.967591 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.11:51232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:11.968221 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.11:51232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:12.035526 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.20:52632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:12.036152 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.20:52632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:12.554057 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.69:61626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:12.554689 2026] [authz_core:error] [pid 2988064:tid 2988064] [client 57.141.0.69:61626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:12.597761 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.4:55750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:12.598450 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.4:55750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:12.905976 2026] [security2:error] [pid 2992018:tid 2992018] [client 54.225.98.148:14843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvNHrbpZTA6dqj1Z4rcgAAAAg"]
[Thu Jul 30 12:02:13.443561 2026] [ssl:error] [pid 2992078:tid 2992078] (EAI 2)Name or service not known: [client 144.76.19.72:56286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:13.443598 2026] [ssl:error] [pid 2992078:tid 2992078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:13.499844 2026] [ssl:error] [pid 2993508:tid 2993508] (EAI 2)Name or service not known: [client 144.76.19.72:56290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:13.499879 2026] [ssl:error] [pid 2993508:tid 2993508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:13.621626 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.42:25712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:13.622255 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.42:25712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:13.773732 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.43:52340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:13.774351 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.43:52340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:14.091247 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.9:50788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:14.091871 2026] [authz_core:error] [pid 2990665:tid 2990665] [client 57.141.0.9:50788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:14.170823 2026] [lsapi:warn] [pid 2992186:tid 2992186] [client 145.14.10.40:35580] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:02:14.170866 2026] [lsapi:warn] [pid 2992186:tid 2992186] [client 145.14.10.40:35580] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:02:14.278812 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.68:50272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:14.279461 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.68:50272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:14.322627 2026] [ssl:error] [pid 2992179:tid 2992179] (70014)End of file found: [client 216.73.216.199:40705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:14.623286 2026] [ssl:error] [pid 2971597:tid 2971597] (70014)End of file found: [client 216.73.216.199:62162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:14.743284 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.25:40600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:14.744039 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.25:40600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:14.813466 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.46:36900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:14.814097 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.46:36900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:14.977647 2026] [security2:error] [pid 2987552:tid 2987552] [client 44.194.139.149:49261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/banner-2017/"] [unique_id "amsvNhz50EbVdr_x-guuFQAAADA"]
[Thu Jul 30 12:02:15.042878 2026] [access_compat:error] [pid 2983230:tid 2983230] [client 103.72.86.239:38275] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:15.222327 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.2:20432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:15.223040 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.2:20432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:15.917220 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.29:27424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:15.917886 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.29:27424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:16.013060 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.34:59126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:16.013700 2026] [authz_core:error] [pid 2990664:tid 2990664] [client 57.141.0.34:59126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:16.088705 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.30:47302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:16.089357 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.30:47302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:16.557835 2026] [ssl:error] [pid 2988064:tid 2988064] (EAI 2)Name or service not known: [client 144.76.19.72:56294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:16.557870 2026] [ssl:error] [pid 2988064:tid 2988064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:16.577781 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.32:33938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:16.578453 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.32:33938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:16.613269 2026] [ssl:error] [pid 2993513:tid 2993513] (EAI 2)Name or service not known: [client 144.76.19.72:56308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:16.613295 2026] [ssl:error] [pid 2993513:tid 2993513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:17.139309 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:64456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:17.139938 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:64456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:17.277092 2026] [security2:error] [pid 2983386:tid 2983386] [client 216.73.216.199:39230] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libuser.conf"] [unique_id "amsvOYJQy0H7ktxi7CcWMwAAADE"]
[Thu Jul 30 12:02:17.277377 2026] [security2:error] [pid 2983386:tid 2983386] [client 216.73.216.199:39230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libuser.conf"] [unique_id "amsvOYJQy0H7ktxi7CcWMwAAADE"]
[Thu Jul 30 12:02:17.277592 2026] [security2:error] [pid 2983386:tid 2983386] [client 216.73.216.199:39230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libuser.conf"] [unique_id "amsvOYJQy0H7ktxi7CcWMwAAADE"]
[Thu Jul 30 12:02:17.282873 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.40:52568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:17.283489 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.40:52568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:17.561080 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.43:52354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:17.561793 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.43:52354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:17.747147 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.71:37192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:17.747769 2026] [authz_core:error] [pid 2993513:tid 2993513] [client 57.141.0.71:37192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:17.808225 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.9:50818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:17.808952 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.9:50818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:18.310277 2026] [ssl:error] [pid 2983386:tid 2983386] (70014)End of file found: [client 216.73.216.199:39230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:18.601886 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.34:59144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:18.602874 2026] [authz_core:error] [pid 2987556:tid 2987556] [client 57.141.0.34:59144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:18.868661 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.18:39244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:18.869280 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.18:39244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:19.143879 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.33:42788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:19.144510 2026] [authz_core:error] [pid 2989240:tid 2989240] [client 57.141.0.33:42788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:19.235696 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.30:47308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:19.236332 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.30:47308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:19.537263 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.18:39252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:19.537941 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.18:39252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:19.653465 2026] [access_compat:error] [pid 2981908:tid 2981908] [client 103.72.86.239:38588] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:19.665833 2026] [ssl:error] [pid 2984602:tid 2984602] (EAI 2)Name or service not known: [client 144.76.19.72:19628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:19.665860 2026] [ssl:error] [pid 2984602:tid 2984602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:19.720150 2026] [ssl:error] [pid 2992184:tid 2992184] (EAI 2)Name or service not known: [client 144.76.19.72:19632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:19.720188 2026] [ssl:error] [pid 2992184:tid 2992184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:19.822581 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.9:50834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:19.823229 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.9:50834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:20.670764 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.3:60334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:20.671418 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.3:60334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:20.687387 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.37:57564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:20.688008 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.37:57564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:21.023888 2026] [authz_core:error] [pid 2993509:tid 2993509] [client 57.141.0.46:27018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:21.024525 2026] [authz_core:error] [pid 2993509:tid 2993509] [client 57.141.0.46:27018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:21.047012 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.19:62594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:21.047714 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.19:62594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:21.606776 2026] [lsapi:warn] [pid 2984602:tid 2984602] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:02:21.678788 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.52:53568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:21.679413 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.52:53568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:21.774879 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.3:60336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:21.775519 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.3:60336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:22.170418 2026] [access_compat:error] [pid 2983305:tid 2983305] [client 176.241.66.87:31635] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:22.231742 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.68:47210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:22.232376 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.68:47210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:22.529014 2026] [ssl:error] [pid 2992185:tid 2992185] (70014)End of file found: [client 216.73.216.199:30011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:22.791688 2026] [ssl:error] [pid 2987553:tid 2987553] (EAI 2)Name or service not known: [client 144.76.19.72:19636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:22.791727 2026] [ssl:error] [pid 2987553:tid 2987553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:22.847378 2026] [ssl:error] [pid 2993509:tid 2993509] (EAI 2)Name or service not known: [client 144.76.19.72:19640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:22.847422 2026] [ssl:error] [pid 2993509:tid 2993509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:23.177571 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.25:40616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:23.178198 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.25:40616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:23.442018 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.52:53572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:23.442643 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.52:53572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:23.715250 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.34:39598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:23.715949 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.34:39598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:23.734452 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.36:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:23.735089 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.36:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:23.752855 2026] [ssl:error] [pid 2989240:tid 2989240] (70014)End of file found: [client 216.73.216.199:53627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:23.864160 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.71:24868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:23.864778 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.71:24868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:23.975561 2026] [authz_core:error] [pid 2992078:tid 2992078] [client 57.141.0.65:40906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:23.976178 2026] [authz_core:error] [pid 2992078:tid 2992078] [client 57.141.0.65:40906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:24.094291 2026] [security2:error] [pid 2993508:tid 2993508] [client 185.191.171.16:47406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1259.15.html"] [unique_id "amsvQMwcoPq0vMNSn1vbLgAAAAc"]
[Thu Jul 30 12:02:24.243803 2026] [core:error] [pid 2993321:tid 2993321] (13)Permission denied: [client 216.73.216.199:52324] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libnvdimm/sections/__ksymtab_strings
[Thu Jul 30 12:02:24.585200 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.24:37500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:24.585824 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.24:37500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:24.993281 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 172.213.208.20:51249] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 12:02:25.205254 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.40:60474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:25.205948 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.40:60474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:25.239051 2026] [security2:error] [pid 2993694:tid 2993694] [client 18.199.86.73:39352] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bids.outsource-it-now.com"] [uri "/.git/config"] [unique_id "amsvQWwvYSZah1aAnxo3PgAAACI"]
[Thu Jul 30 12:02:25.239252 2026] [security2:error] [pid 2993694:tid 2993694] [client 18.199.86.73:39352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bids.outsource-it-now.com"] [uri "/.git/config"] [unique_id "amsvQWwvYSZah1aAnxo3PgAAACI"]
[Thu Jul 30 12:02:25.239431 2026] [security2:error] [pid 2993694:tid 2993694] [client 18.199.86.73:39352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bids.outsource-it-now.com"] [uri "/403.shtml"] [unique_id "amsvQWwvYSZah1aAnxo3PgAAACI"]
[Thu Jul 30 12:02:25.249654 2026] [core:error] [pid 2993321:tid 2993321] (13)Permission denied: [client 216.73.216.199:52324] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/rx_trig_bytes
[Thu Jul 30 12:02:25.739817 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.63:26198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:25.740442 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.63:26198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:25.938900 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.59:35398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:25.939537 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.59:35398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:25.956819 2026] [ssl:error] [pid 2987419:tid 2987419] (EAI 2)Name or service not known: [client 144.76.19.72:19652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:25.956857 2026] [ssl:error] [pid 2987419:tid 2987419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:26.013757 2026] [ssl:error] [pid 2992180:tid 2992180] (EAI 2)Name or service not known: [client 144.76.19.72:19666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:26.013798 2026] [ssl:error] [pid 2992180:tid 2992180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:26.224837 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.4:56268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:26.225466 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.4:56268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:26.733369 2026] [security2:error] [pid 2987419:tid 2987419] [client 114.119.142.20:21779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,102/request_format~html"] [unique_id "amsvQnSVdZ-3z94kQTDMmwAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578182400/cat_ids~14,102/request_format~html
[Thu Jul 30 12:02:27.260870 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.9:58724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:27.261493 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.9:58724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:27.304082 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.36:35286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:27.304702 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.36:35286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:27.466295 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.71:24884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:27.466963 2026] [authz_core:error] [pid 2987553:tid 2987553] [client 57.141.0.71:24884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:27.566915 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.46:27036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:27.567644 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.46:27036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:27.731341 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.44:20560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:27.731963 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.44:20560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:27.789794 2026] [core:error] [pid 2992184:tid 2992184] [client 66.249.66.194:36300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:02:27.789814 2026] [core:error] [pid 2992184:tid 2992184] [client 66.249.66.194:36300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:02:28.257195 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.18:22968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:28.257861 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.18:22968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:28.448740 2026] [authz_core:error] [pid 2993694:tid 2993694] [client 57.141.0.4:56286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:28.449450 2026] [authz_core:error] [pid 2993694:tid 2993694] [client 57.141.0.4:56286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:28.583855 2026] [security2:error] [pid 2987419:tid 2987419] [client 114.119.142.20:21795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,102/request_format~html"] [unique_id "amsvRHSVdZ-3z94kQTDMnAAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578182400/cat_ids~14,102/request_format~html
[Thu Jul 30 12:02:28.870269 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.24:24034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:28.870894 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.24:24034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:29.049539 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.69:35644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:29.050164 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.69:35644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:29.052280 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.27:33076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:29.052885 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.27:33076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:29.070637 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:19674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:29.070663 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:29.123637 2026] [ssl:error] [pid 2982569:tid 2982569] (EAI 2)Name or service not known: [client 144.76.19.72:19680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:29.123681 2026] [ssl:error] [pid 2982569:tid 2982569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:30.205397 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.70:50378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:30.206023 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.70:50378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:30.345664 2026] [access_compat:error] [pid 2986805:tid 2986805] [client 103.72.86.239:40107] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:31.096914 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.16:63006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:31.097540 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.16:63006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:31.234780 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.14:41268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:31.235406 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.14:41268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:31.290237 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.19:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:31.290868 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.19:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:31.474849 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.52:23532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:31.475491 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.52:23532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:32.084119 2026] [lsapi:warn] [pid 2971597:tid 2971597] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:02:32.133177 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.68:57038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:32.133798 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.68:57038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:32.181278 2026] [ssl:error] [pid 2984602:tid 2984602] (EAI 2)Name or service not known: [client 144.76.19.72:24384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:32.181318 2026] [ssl:error] [pid 2984602:tid 2984602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:32.229982 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.31:32496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:32.230611 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.31:32496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:32.241757 2026] [ssl:error] [pid 2981908:tid 2981908] (EAI 2)Name or service not known: [client 144.76.19.72:24398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:32.241794 2026] [ssl:error] [pid 2981908:tid 2981908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:33.130129 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.17:54514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:33.130749 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.17:54514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:33.219597 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.4:55448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:33.220212 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.4:55448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:33.380402 2026] [access_compat:error] [pid 2987419:tid 2987419] [client 176.241.66.87:32229] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:33.637229 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.7:64868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:33.637945 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.7:64868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:33.653402 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.4:55450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:33.654033 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.4:55450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:33.709662 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.68:57048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:33.710283 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.68:57048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:33.731368 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.6:25614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:33.732114 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.6:25614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:33.785061 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:29520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:33.785702 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.41:29520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:33.806968 2026] [access_compat:error] [pid 2976711:tid 2976711] [client 45.158.164.139:44134] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:02:33.934584 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 66.249.66.33:51753] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:02:33.937268 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 66.249.66.33:51753] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:02:34.427307 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.3:25122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:34.428029 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.3:25122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:34.593057 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.15:49808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:34.593699 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.15:49808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:35.189850 2026] [authz_core:error] [pid 2993694:tid 2993694] [client 57.141.0.28:33940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:35.190505 2026] [authz_core:error] [pid 2993694:tid 2993694] [client 57.141.0.28:33940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:35.297665 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:24408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:35.297691 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:35.313041 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.17:54520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:35.313669 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.17:54520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:35.353578 2026] [ssl:error] [pid 2993694:tid 2993694] (EAI 2)Name or service not known: [client 144.76.19.72:24420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:35.353629 2026] [ssl:error] [pid 2993694:tid 2993694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:35.370345 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.10:60468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:35.370966 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.10:60468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:35.492996 2026] [core:error] [pid 2994139:tid 2994139] [client 66.249.66.40:39484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:02:35.493023 2026] [core:error] [pid 2994139:tid 2994139] [client 66.249.66.40:39484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:02:35.928988 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.56:45454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:35.929618 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.56:45454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:36.121530 2026] [authz_core:error] [pid 2992078:tid 2992078] [client 57.141.0.11:54796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:36.122162 2026] [authz_core:error] [pid 2992078:tid 2992078] [client 57.141.0.11:54796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:36.129792 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.71:45512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:36.130409 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.71:45512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:36.164358 2026] [security2:error] [pid 2987556:tid 2987556] [client 111.225.148.167:33568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amsvTHXZ54GGIg3BdSKDEwAAADY"]
[Thu Jul 30 12:02:36.507274 2026] [access_compat:error] [pid 2992185:tid 2992185] [client 103.72.86.239:40614] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:37.704557 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.62:51950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:37.705177 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.62:51950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:38.009136 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.21:31930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:38.009753 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.21:31930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:38.122316 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.16:26700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:38.122934 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.16:26700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:38.406426 2026] [ssl:error] [pid 2992179:tid 2992179] (EAI 2)Name or service not known: [client 144.76.19.72:24422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:38.406473 2026] [ssl:error] [pid 2992179:tid 2992179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:38.440265 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.15:49824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:38.440877 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.15:49824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:38.459769 2026] [ssl:error] [pid 2987475:tid 2987475] (EAI 2)Name or service not known: [client 144.76.19.72:24430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:38.459793 2026] [ssl:error] [pid 2987475:tid 2987475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:38.639054 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.9:33880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:38.639685 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.9:33880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:38.797477 2026] [ssl:error] [pid 2955789:tid 2955789] (70014)End of file found: [client 216.73.216.199:59929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:38.800623 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.39:64184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:38.801243 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.39:64184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:39.103249 2026] [ssl:error] [pid 2976711:tid 2976711] (70014)End of file found: [client 216.73.216.199:18773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:39.359836 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.67:53828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:39.360465 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.67:53828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:39.537695 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.11:60044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:39.538335 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.11:60044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:39.666131 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.38:50560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:39.666749 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.38:50560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:40.100247 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.24:29450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:40.100871 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.24:29450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:40.225257 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.52:58476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:40.225882 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.52:58476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:40.620213 2026] [core:error] [pid 2987419:tid 2987419] (13)Permission denied: [client 216.73.216.199:51444] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/rtc_cmos/uevent
[Thu Jul 30 12:02:40.693843 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.45:62582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:40.694492 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.45:62582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:40.739147 2026] [security2:error] [pid 2980995:tid 2980995] [client 74.7.227.0:57854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "wurlitzer.co.uk"] [uri "/"] [unique_id "amsvUMRsD2vmyNGbhhooowAAABE"], referer: https://marketingdirectoy.com
[Thu Jul 30 12:02:41.074356 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.11:60058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:41.074995 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.11:60058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:41.222022 2026] [ssl:error] [pid 2987419:tid 2987419] (70014)End of file found: [client 216.73.216.199:51444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:41.457963 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.15:49846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:41.458596 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.15:49846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:41.518891 2026] [ssl:error] [pid 2964034:tid 2964034] (EAI 2)Name or service not known: [client 144.76.19.72:26982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:41.518923 2026] [ssl:error] [pid 2964034:tid 2964034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:41.571813 2026] [ssl:error] [pid 2983230:tid 2983230] (EAI 2)Name or service not known: [client 144.76.19.72:26998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:41.571843 2026] [ssl:error] [pid 2983230:tid 2983230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:41.997988 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.56:52322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:41.998653 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.56:52322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:42.044747 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.49:54450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:42.045357 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.49:54450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:42.600817 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.37:58932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:42.601434 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.37:58932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:42.629594 2026] [lsapi:warn] [pid 2987475:tid 2987475] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:02:43.013478 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.13:62648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:43.014124 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.13:62648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:43.083506 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.43:45174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:43.084150 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.43:45174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:43.528730 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.60:48728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:43.529390 2026] [authz_core:error] [pid 2990971:tid 2990971] [client 57.141.0.60:48728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:43.824643 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 103.59.160.131:57662] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/PHPMailer/error_log
[Thu Jul 30 12:02:44.036101 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.3:49356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:44.036718 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.3:49356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:44.132230 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.59:35898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:44.132924 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.59:35898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:44.580125 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.8:24496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:44.580744 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.8:24496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:44.624461 2026] [ssl:error] [pid 2968744:tid 2968744] (EAI 2)Name or service not known: [client 144.76.19.72:27010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:44.624486 2026] [ssl:error] [pid 2968744:tid 2968744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:44.677769 2026] [ssl:error] [pid 2993321:tid 2993321] (EAI 2)Name or service not known: [client 144.76.19.72:27024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:44.677826 2026] [ssl:error] [pid 2993321:tid 2993321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:44.738360 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.65:49318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:44.738974 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.65:49318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:45.090351 2026] [access_compat:error] [pid 2976711:tid 2976711] [client 176.241.66.87:50996] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:45.356871 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.31:42284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:45.357520 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.31:42284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:45.411884 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.58:31274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:45.412519 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.58:31274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:45.984112 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.19:40002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:45.984749 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.19:40002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:46.054375 2026] [ssl:error] [pid 2973064:tid 2973064] (70014)End of file found: [client 216.73.216.199:61731] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:46.358309 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.32:27444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:46.358924 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.32:27444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:46.836886 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.21:47428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:46.837558 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.21:47428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:47.110865 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.70:23422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:47.111873 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.70:23422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:47.449153 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.38:50586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:47.449763 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.38:50586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:47.740588 2026] [ssl:error] [pid 2995445:tid 2995445] (EAI 2)Name or service not known: [client 144.76.19.72:27038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:47.740639 2026] [ssl:error] [pid 2995445:tid 2995445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:47.795336 2026] [ssl:error] [pid 2992184:tid 2992184] (EAI 2)Name or service not known: [client 144.76.19.72:27050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:47.795362 2026] [ssl:error] [pid 2992184:tid 2992184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:47.859122 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.26:60066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:47.859765 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.26:60066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:47.966347 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.34:62632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:47.966963 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.34:62632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:48.128065 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.13:62656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:48.128693 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.13:62656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:48.248706 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.32:27456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:48.249327 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.32:27456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:48.677887 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.29:44596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:48.678563 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.29:44596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:48.781479 2026] [ssl:error] [pid 2995445:tid 2995445] (70014)End of file found: [client 216.73.216.199:46521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:48.975675 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.48:33896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:48.976304 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.48:33896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:49.382935 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.3:49360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:49.383592 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.3:49360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:49.604956 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.67:55882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:49.605594 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.67:55882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:50.289812 2026] [ssl:error] [pid 2987475:tid 2987475] (70014)End of file found: [client 216.73.216.199:60814] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:50.514606 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.24:42976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:50.515747 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.24:42976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:50.754252 2026] [security2:error] [pid 2992126:tid 2992126] [client 85.208.96.209:56646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/rock-singers-who-can't-sing"] [unique_id "amsvWoJmgRTpgLyI8_c62AAAAB8"]
[Thu Jul 30 12:02:50.774228 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.39:27912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:50.774881 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.39:27912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:51.199608 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.39:27924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:51.200277 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.39:27924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:51.304535 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:20972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:51.304576 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:51.414728 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.54:59996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:51.415399 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.54:59996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:51.643530 2026] [ssl:error] [pid 2992185:tid 2992185] (EAI 2)Name or service not known: [client 144.76.19.72:20980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:51.643569 2026] [ssl:error] [pid 2992185:tid 2992185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:51.751037 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:59052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:51.751669 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:59052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:52.151149 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.20:39684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:52.151771 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.20:39684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:52.217986 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 103.59.160.131:57056] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 12:02:52.287807 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.9:40098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:52.288459 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.9:40098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:52.697156 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.15:41366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:52.697826 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.15:41366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:52.918132 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.33:48720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:52.918775 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.33:48720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:53.191120 2026] [lsapi:warn] [pid 2992125:tid 2992125] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:02:53.258562 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.19:61900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:53.259198 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.19:61900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:54.141573 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.8:26504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:54.142196 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.8:26504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:54.213322 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.56:27602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:54.213947 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.56:27602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:54.302747 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.5:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:54.303433 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.5:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:54.564936 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.28:28310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:54.565636 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.28:28310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:54.714542 2026] [ssl:error] [pid 2980995:tid 2980995] (EAI 2)Name or service not known: [client 144.76.19.72:20990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:54.714572 2026] [ssl:error] [pid 2980995:tid 2980995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:54.767280 2026] [ssl:error] [pid 2992186:tid 2992186] (EAI 2)Name or service not known: [client 144.76.19.72:21002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:54.767313 2026] [ssl:error] [pid 2992186:tid 2992186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:54.808688 2026] [ssl:error] [pid 2992124:tid 2992124] (70014)End of file found: [client 216.73.216.199:20351] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:55.008058 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.9:40114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:55.008694 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.9:40114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:55.217096 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.69:35336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:55.217728 2026] [authz_core:error] [pid 2964034:tid 2964034] [client 57.141.0.69:35336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:56.009480 2026] [core:error] [pid 2980995:tid 2980995] (13)Permission denied: [client 216.73.216.199:17957] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/poison
[Thu Jul 30 12:02:56.123218 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.41:60134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:56.123842 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.41:60134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:56.594768 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.39:32216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:56.595406 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.39:32216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:56.608216 2026] [access_compat:error] [pid 2987475:tid 2987475] [client 176.241.66.87:15665] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:02:56.707325 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.64:42606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:56.707949 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.64:42606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:57.069928 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.68:49986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:57.070570 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.68:49986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:57.214643 2026] [ssl:error] [pid 2980995:tid 2980995] (70014)End of file found: [client 216.73.216.199:17957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:02:57.244382 2026] [authz_core:error] [pid 2995868:tid 2995868] [client 57.141.0.23:27762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:57.245018 2026] [authz_core:error] [pid 2995868:tid 2995868] [client 57.141.0.23:27762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:57.384259 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.30:21176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:57.384883 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.30:21176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:57.653999 2026] [cgi:error] [pid 2994996:tid 2994996] [client 20.9.4.9:54101] AH02812: stderr from /home/spampcou/public_html/spamp.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:02:57.673596 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.14:21498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:57.674278 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.14:21498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:57.718980 2026] [authz_core:error] [pid 2995868:tid 2995868] [client 57.141.0.13:21918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:57.719616 2026] [authz_core:error] [pid 2995868:tid 2995868] [client 57.141.0.13:21918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:57.826545 2026] [ssl:error] [pid 2993321:tid 2993321] (EAI 2)Name or service not known: [client 144.76.19.72:21004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:57.826570 2026] [ssl:error] [pid 2993321:tid 2993321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:57.879135 2026] [ssl:error] [pid 2989187:tid 2989187] (EAI 2)Name or service not known: [client 144.76.19.72:21020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:02:57.879161 2026] [ssl:error] [pid 2989187:tid 2989187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:02:57.895662 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.29:23760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:57.896274 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.29:23760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:58.534264 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.44:49200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:58.534880 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.44:49200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:58.735311 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 66.249.66.33:36416] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:02:58.737979 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 66.249.66.33:36416] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:02:59.172418 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.43:51868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:59.173043 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.43:51868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:59.307678 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.48:30548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:59.308302 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.48:30548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:02:59.617319 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 66.249.66.33:58146] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:02:59.620213 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 66.249.66.33:58146] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:02:59.626056 2026] [core:error] [pid 2992125:tid 2992125] (13)Permission denied: [client 216.73.216.199:56372] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/scripts/removeacct
[Thu Jul 30 12:02:59.841759 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.50:51710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:02:59.842378 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.50:51710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:00.081002 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.20:24484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:00.081700 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.20:24484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:00.149137 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.9:40140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:00.149760 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.9:40140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:00.166674 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.49:51532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:00.167340 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.49:51532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:00.227961 2026] [ssl:error] [pid 2992125:tid 2992125] (70014)End of file found: [client 216.73.216.199:56372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:00.416472 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.59:42444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:00.417104 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.59:42444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:00.935950 2026] [ssl:error] [pid 2996704:tid 2996704] (EAI 2)Name or service not known: [client 144.76.19.72:41186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:00.935993 2026] [ssl:error] [pid 2996704:tid 2996704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:00.989510 2026] [ssl:error] [pid 2992181:tid 2992181] (EAI 2)Name or service not known: [client 144.76.19.72:41198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:00.989589 2026] [ssl:error] [pid 2992181:tid 2992181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:01.127431 2026] [core:error] [pid 2992124:tid 2992124] (13)Permission denied: [client 216.73.216.199:57175] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/scsi_sense_cache/cache_dma
[Thu Jul 30 12:03:01.172188 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.41:60146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:01.172831 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.41:60146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:01.294772 2026] [security2:error] [pid 2992181:tid 2992181] [client 43.164.0.96:38516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-content/"] [unique_id "amsvZdcyrm3pilM_alxOHAAAAC4"]
[Thu Jul 30 12:03:01.720641 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.10:26056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:01.721274 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.10:26056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:02.149481 2026] [access_compat:error] [pid 2992179:tid 2992179] [client 176.241.66.87:33235] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:02.347798 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:40408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:02.348419 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.5:40408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:02.362106 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.46:29602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:02.362717 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.46:29602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:02.451909 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.29:60578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:02.452624 2026] [authz_core:error] [pid 2987419:tid 2987419] [client 57.141.0.29:60578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:02.526627 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.65:31474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:02.527247 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.65:31474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:02.543109 2026] [access_compat:error] [pid 2992126:tid 2992126] [client 103.72.86.239:40271] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:02.641238 2026] [security2:error] [pid 2987475:tid 2987475] [client 43.159.132.207:37642] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amsvZuDc7JIVvFAgX5McdgAAABg"]
[Thu Jul 30 12:03:03.135975 2026] [security2:error] [pid 2980995:tid 2980995] [client 43.133.212.220:12331] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvZ8RsD2vmyNGbhhoosgAAABE"]
[Thu Jul 30 12:03:03.136045 2026] [security2:error] [pid 2980995:tid 2980995] [client 43.133.212.220:12331] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvZ8RsD2vmyNGbhhoosgAAABE"]
[Thu Jul 30 12:03:03.136385 2026] [security2:error] [pid 2980995:tid 2980995] [client 43.133.212.220:12331] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvZ8RsD2vmyNGbhhoosgAAABE"]
[Thu Jul 30 12:03:03.215800 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.65:31476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:03.216486 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.65:31476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:03.460982 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.58:60666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:03.461616 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.58:60666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:03.642977 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.33:56208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:03.643621 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.33:56208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:03.976807 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.60:45658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:03.977486 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.60:45658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:04.047957 2026] [ssl:error] [pid 2996754:tid 2996754] (EAI 2)Name or service not known: [client 144.76.19.72:41202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:04.047991 2026] [ssl:error] [pid 2996754:tid 2996754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:04.103926 2026] [ssl:error] [pid 2996704:tid 2996704] (EAI 2)Name or service not known: [client 144.76.19.72:41212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:04.103955 2026] [ssl:error] [pid 2996704:tid 2996704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:04.303725 2026] [core:error] [pid 2993511:tid 2993511] [client 66.249.64.170:44506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:04.303753 2026] [core:error] [pid 2993511:tid 2993511] [client 66.249.64.170:44506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:04.653225 2026] [lsapi:warn] [pid 2996755:tid 2996755] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:03:04.748205 2026] [security2:error] [pid 2996517:tid 2996517] [client 216.73.216.199:52011] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/pdo_dblib.ini"] [unique_id "amsvaERM4yo_JaLVT10xmwAAABc"]
[Thu Jul 30 12:03:04.748473 2026] [security2:error] [pid 2996517:tid 2996517] [client 216.73.216.199:52011] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/pdo_dblib.ini"] [unique_id "amsvaERM4yo_JaLVT10xmwAAABc"]
[Thu Jul 30 12:03:04.748699 2026] [security2:error] [pid 2996517:tid 2996517] [client 216.73.216.199:52011] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/pdo_dblib.ini"] [unique_id "amsvaERM4yo_JaLVT10xmwAAABc"]
[Thu Jul 30 12:03:05.031920 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.71:39796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:05.032554 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.71:39796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:05.049687 2026] [core:error] [pid 2996517:tid 2996517] (13)Permission denied: [client 216.73.216.199:52011] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-64/hwcache_align
[Thu Jul 30 12:03:05.455736 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.32:30398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:05.456365 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.32:30398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:05.600948 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.68:50008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:05.601581 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.68:50008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:05.707864 2026] [core:error] [pid 2995868:tid 2995868] [client 66.249.66.167:44471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:05.707891 2026] [core:error] [pid 2995868:tid 2995868] [client 66.249.66.167:44471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:05.952843 2026] [ssl:error] [pid 2996517:tid 2996517] (70014)End of file found: [client 216.73.216.199:52011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:06.260138 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.6:35758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:06.260759 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.6:35758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:06.331250 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.23:52458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:06.331869 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.23:52458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:06.382905 2026] [core:error] [pid 2996704:tid 2996704] [client 66.249.66.167:35683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:06.382944 2026] [core:error] [pid 2996704:tid 2996704] [client 66.249.66.167:35683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:06.505615 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.67:23560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:06.506247 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.67:23560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:06.859929 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.52:52756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:06.860557 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.52:52756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:06.953278 2026] [security2:error] [pid 2992185:tid 2992185] [client 110.249.201.163:29954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "astleydogpark.co.uk"] [uri "/robots.txt"] [unique_id "amsvajlWNekbfMEevupfKQAAADg"]
[Thu Jul 30 12:03:06.957813 2026] [security2:error] [pid 2996704:tid 2996704] [client 202.51.69.8:17575] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvatkala5JRzeKdC-h7QAAACE"]
[Thu Jul 30 12:03:06.957854 2026] [security2:error] [pid 2996704:tid 2996704] [client 202.51.69.8:17575] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvatkala5JRzeKdC-h7QAAACE"]
[Thu Jul 30 12:03:06.958107 2026] [security2:error] [pid 2996704:tid 2996704] [client 202.51.69.8:17575] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvatkala5JRzeKdC-h7QAAACE"]
[Thu Jul 30 12:03:07.155646 2026] [ssl:error] [pid 2982569:tid 2982569] (EAI 2)Name or service not known: [client 144.76.19.72:41214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:07.155679 2026] [ssl:error] [pid 2982569:tid 2982569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:07.211352 2026] [ssl:error] [pid 2983230:tid 2983230] (EAI 2)Name or service not known: [client 144.76.19.72:41226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:07.211383 2026] [ssl:error] [pid 2983230:tid 2983230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:07.418429 2026] [authz_core:error] [pid 2996601:tid 2996601] [client 57.141.0.4:22704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:07.419061 2026] [authz_core:error] [pid 2996601:tid 2996601] [client 57.141.0.4:22704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:07.477611 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.65:31492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:07.478226 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.65:31492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:07.557364 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.27:44954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:07.557982 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.27:44954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:07.847048 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.44:52100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:07.847682 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.44:52100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:08.202106 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.34:54064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:08.202724 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.34:54064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:08.236914 2026] [access_compat:error] [pid 2987552:tid 2987552] [client 176.241.66.87:52094] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:08.598958 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.42:63600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:08.599586 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.42:63600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:08.693186 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.17:22024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:08.693846 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.17:22024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:08.751745 2026] [access_compat:error] [pid 2994139:tid 2994139] [client 103.72.86.239:39982] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:09.119257 2026] [ssl:error] [pid 2992124:tid 2992124] (70014)End of file found: [client 216.73.216.199:57175] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:09.537163 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.53:58086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:09.537822 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.53:58086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:09.928770 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.51:23074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:09.929409 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.51:23074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:10.269703 2026] [ssl:error] [pid 2992077:tid 2992077] (EAI 2)Name or service not known: [client 144.76.19.72:56392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:10.269745 2026] [ssl:error] [pid 2992077:tid 2992077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:10.291582 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.15:51794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:10.292198 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.15:51794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:10.327539 2026] [ssl:error] [pid 2996704:tid 2996704] (EAI 2)Name or service not known: [client 144.76.19.72:56402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:10.327568 2026] [ssl:error] [pid 2996704:tid 2996704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:10.638580 2026] [security2:error] [pid 2983386:tid 2983386] [client 216.73.216.199:12959] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sudo.conf"] [unique_id "amsvboJQy0H7ktxi7CcWSAAAADE"]
[Thu Jul 30 12:03:10.638878 2026] [security2:error] [pid 2983386:tid 2983386] [client 216.73.216.199:12959] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sudo.conf"] [unique_id "amsvboJQy0H7ktxi7CcWSAAAADE"]
[Thu Jul 30 12:03:10.639113 2026] [security2:error] [pid 2983386:tid 2983386] [client 216.73.216.199:12959] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sudo.conf"] [unique_id "amsvboJQy0H7ktxi7CcWSAAAADE"]
[Thu Jul 30 12:03:10.765373 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.59:61728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:10.765997 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.59:61728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:10.801517 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.25:26128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:10.802169 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.25:26128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:11.028587 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.67:50432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:11.029211 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.67:50432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:11.629514 2026] [ssl:error] [pid 2983386:tid 2983386] (70014)End of file found: [client 216.73.216.199:12959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:11.808185 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.39:25180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:11.808812 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.39:25180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:12.085926 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.62:63462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:12.086560 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.62:63462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:12.265454 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.28:29816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:12.266126 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.28:29816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:12.369234 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.24:58608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:12.369853 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.24:58608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:12.458854 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.51:23080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:12.459468 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.51:23080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:13.074678 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.3:25906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:13.075295 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.3:25906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:13.127079 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.63:54190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:13.127701 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.63:54190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:13.249767 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.51:23084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:13.250397 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.51:23084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:13.292611 2026] [access_compat:error] [pid 2992077:tid 2992077] [client 103.72.86.239:40228] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:13.381764 2026] [ssl:error] [pid 2992186:tid 2992186] (EAI 2)Name or service not known: [client 144.76.19.72:56410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:13.381792 2026] [ssl:error] [pid 2992186:tid 2992186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:13.438572 2026] [ssl:error] [pid 2992181:tid 2992181] (EAI 2)Name or service not known: [client 144.76.19.72:56422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:13.438600 2026] [ssl:error] [pid 2992181:tid 2992181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:13.622519 2026] [security2:error] [pid 2996704:tid 2996704] [client 106.219.205.58:56887] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvcdkala5JRzeKdC-h9gAAACE"]
[Thu Jul 30 12:03:13.622567 2026] [security2:error] [pid 2996704:tid 2996704] [client 106.219.205.58:56887] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvcdkala5JRzeKdC-h9gAAACE"]
[Thu Jul 30 12:03:13.622799 2026] [security2:error] [pid 2996704:tid 2996704] [client 106.219.205.58:56887] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvcdkala5JRzeKdC-h9gAAACE"]
[Thu Jul 30 12:03:13.801672 2026] [security2:error] [pid 2992181:tid 2992181] [client 74.7.227.137:47746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amsvcdcyrm3pilM_alxOIwAAAC4"], referer: https://marketingdirectoy.com
[Thu Jul 30 12:03:14.029219 2026] [access_compat:error] [pid 2992126:tid 2992126] [client 176.241.66.87:34571] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:14.116546 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.2:52848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:14.117166 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.2:52848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:14.328360 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.15:51810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:14.329001 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.15:51810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:14.355614 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.7:51882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:14.356272 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.7:51882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:14.371358 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.4:33756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:14.372167 2026] [authz_core:error] [pid 2992181:tid 2992181] [client 57.141.0.4:33756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:15.188136 2026] [lsapi:warn] [pid 2987551:tid 2987551] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:03:15.271940 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.10:55286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:15.272600 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.10:55286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:15.992798 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.55:41642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:15.993422 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.55:41642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:16.135261 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.52:54680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:16.135880 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.52:54680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:16.357600 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.11:32054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:16.358220 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.11:32054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:16.387347 2026] [ssl:error] [pid 2983305:tid 2983305] (70014)End of file found: [client 216.73.216.199:46193] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:16.495940 2026] [ssl:error] [pid 2987376:tid 2987376] (EAI 2)Name or service not known: [client 144.76.19.72:56432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:16.495973 2026] [ssl:error] [pid 2987376:tid 2987376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:16.555222 2026] [ssl:error] [pid 2995868:tid 2995868] (EAI 2)Name or service not known: [client 144.76.19.72:56442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:16.555259 2026] [ssl:error] [pid 2995868:tid 2995868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:16.756724 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 103.59.160.131:65057] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/widgets/error_log
[Thu Jul 30 12:03:16.923296 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.49:51074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:16.923917 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.49:51074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:17.249612 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.9:37560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:17.250241 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.9:37560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:17.314033 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.37:56300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:17.314670 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.37:56300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:17.453135 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.41:64258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:17.453778 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.41:64258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:17.826249 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.41:64262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:17.826968 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.41:64262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:17.896535 2026] [core:error] [pid 2992180:tid 2992180] (13)Permission denied: [client 216.73.216.199:63219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/poison
[Thu Jul 30 12:03:18.189259 2026] [core:error] [pid 2992180:tid 2992180] (13)Permission denied: [client 216.73.216.199:63219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-32/cpu_slabs
[Thu Jul 30 12:03:18.946960 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.58:44836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:18.947598 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.58:44836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:19.427023 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.56:57820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:19.427659 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.56:57820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:19.464448 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 66.249.66.33:64552] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:03:19.467103 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 66.249.66.33:64552] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:03:19.509565 2026] [authz_core:error] [pid 2997241:tid 2997241] [client 57.141.0.33:57898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:19.510188 2026] [authz_core:error] [pid 2997241:tid 2997241] [client 57.141.0.33:57898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:19.658099 2026] [ssl:error] [pid 2992077:tid 2992077] (EAI 2)Name or service not known: [client 144.76.19.72:33192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:19.658142 2026] [ssl:error] [pid 2992077:tid 2992077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:19.709728 2026] [ssl:error] [pid 2995868:tid 2995868] (EAI 2)Name or service not known: [client 144.76.19.72:33204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:19.709770 2026] [ssl:error] [pid 2995868:tid 2995868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:19.756883 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.11:56762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:19.757514 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.11:56762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:19.996418 2026] [security2:error] [pid 2992180:tid 2992180] [client 216.73.216.199:63219] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/pdo_sqlite.ini"] [unique_id "amsvd-uDJNaAmQbuIy9vaAAAACw"]
[Thu Jul 30 12:03:19.996762 2026] [security2:error] [pid 2992180:tid 2992180] [client 216.73.216.199:63219] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/pdo_sqlite.ini"] [unique_id "amsvd-uDJNaAmQbuIy9vaAAAACw"]
[Thu Jul 30 12:03:19.997015 2026] [security2:error] [pid 2992180:tid 2992180] [client 216.73.216.199:63219] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/pdo_sqlite.ini"] [unique_id "amsvd-uDJNaAmQbuIy9vaAAAACw"]
[Thu Jul 30 12:03:20.112608 2026] [access_compat:error] [pid 2976711:tid 2976711] [client 176.241.66.87:52662] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:20.183276 2026] [authz_core:error] [pid 2997241:tid 2997241] [client 57.141.0.23:58394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:20.183938 2026] [authz_core:error] [pid 2997241:tid 2997241] [client 57.141.0.23:58394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:20.278742 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.45:51256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:20.279406 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.45:51256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:20.302569 2026] [core:error] [pid 2992180:tid 2992180] (13)Permission denied: [client 216.73.216.199:63219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCPv6/cache_dma
[Thu Jul 30 12:03:20.953577 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 51.38.187.132:33394] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js0a28c1/error_log
[Thu Jul 30 12:03:21.198794 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.58:44844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:21.199449 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.58:44844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:21.212480 2026] [ssl:error] [pid 2992180:tid 2992180] (70014)End of file found: [client 216.73.216.199:63219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:21.476388 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.62:59628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:21.477010 2026] [authz_core:error] [pid 2983386:tid 2983386] [client 57.141.0.62:59628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:21.619695 2026] [authz_core:error] [pid 2996754:tid 2996754] [client 57.141.0.33:54802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:21.620317 2026] [authz_core:error] [pid 2996754:tid 2996754] [client 57.141.0.33:54802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:21.959629 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.9:65316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:21.960251 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.9:65316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:22.207277 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.17:48992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:22.207729 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.67:43198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:22.207927 2026] [authz_core:error] [pid 2983305:tid 2983305] [client 57.141.0.17:48992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:22.208382 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.67:43198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:22.723845 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.33:54812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:22.724484 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.33:54812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:22.769531 2026] [ssl:error] [pid 2983386:tid 2983386] (EAI 2)Name or service not known: [client 144.76.19.72:33210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:22.769562 2026] [ssl:error] [pid 2983386:tid 2983386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:22.798262 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.29:36790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:22.798902 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.29:36790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:22.825728 2026] [ssl:error] [pid 2993511:tid 2993511] (EAI 2)Name or service not known: [client 144.76.19.72:33222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:22.825761 2026] [ssl:error] [pid 2993511:tid 2993511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:22.994769 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.32:33504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:22.995394 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.32:33504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:23.151638 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 172.213.208.20:49860] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 12:03:23.317511 2026] [ssl:error] [pid 2955789:tid 2955789] (70014)End of file found: [client 216.73.216.199:15071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:23.420795 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.25:21228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:23.421430 2026] [authz_core:error] [pid 2992179:tid 2992179] [client 57.141.0.25:21228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:23.908132 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.68:57936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:23.908755 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.68:57936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:24.185142 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.64:60262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:24.185761 2026] [authz_core:error] [pid 2987475:tid 2987475] [client 57.141.0.64:60262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:24.472764 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.38:62038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:24.473392 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.38:62038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:24.941696 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.49:44560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:24.942359 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.49:44560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:24.983583 2026] [access_compat:error] [pid 2983305:tid 2983305] [client 103.72.86.239:40817] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:25.124576 2026] [ssl:error] [pid 2993511:tid 2993511] (70014)End of file found: [client 216.73.216.199:39803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:25.137173 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.31:25620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:25.137786 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.31:25620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:25.630643 2026] [lsapi:warn] [pid 2983473:tid 2983473] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:03:25.862918 2026] [access_compat:error] [pid 2973064:tid 2973064] [client 176.241.66.87:35229] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:25.886021 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.63:31556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:25.886658 2026] [authz_core:error] [pid 2992125:tid 2992125] [client 57.141.0.63:31556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:25.912912 2026] [ssl:error] [pid 2992179:tid 2992179] (EAI 2)Name or service not known: [client 144.76.19.72:33228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:25.912945 2026] [ssl:error] [pid 2992179:tid 2992179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:25.972200 2026] [ssl:error] [pid 2992185:tid 2992185] (EAI 2)Name or service not known: [client 144.76.19.72:33238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:25.972231 2026] [ssl:error] [pid 2992185:tid 2992185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:26.010130 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.26:36106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:26.010753 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.26:36106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:26.667610 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.39:28662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:26.668236 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.39:28662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:26.996150 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:49002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:26.996772 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:49002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:27.566723 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.56:57828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:27.567341 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.56:57828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:27.827879 2026] [core:error] [pid 2984602:tid 2984602] (13)Permission denied: [client 216.73.216.199:10487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-64/alloc_calls
[Thu Jul 30 12:03:28.054159 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.11:56778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:28.054804 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.11:56778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:28.178299 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.50:35944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:28.178937 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.50:35944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:28.745975 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.31:62328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:28.746606 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.31:62328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:28.935580 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.31:62338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:28.936203 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.31:62338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:28.974986 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.1:23102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:28.975616 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.1:23102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:29.029001 2026] [ssl:error] [pid 2955789:tid 2955789] (EAI 2)Name or service not known: [client 144.76.19.72:33242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:29.029028 2026] [ssl:error] [pid 2955789:tid 2955789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:29.084735 2026] [ssl:error] [pid 2992185:tid 2992185] (EAI 2)Name or service not known: [client 144.76.19.72:33254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:29.084766 2026] [ssl:error] [pid 2992185:tid 2992185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:29.633688 2026] [core:error] [pid 2984602:tid 2984602] (13)Permission denied: [client 216.73.216.199:10487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/syscopyarea/sections/__ksymtab
[Thu Jul 30 12:03:29.695867 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.66:33576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:29.696489 2026] [authz_core:error] [pid 2987551:tid 2987551] [client 57.141.0.66:33576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:29.778369 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.55:61514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:29.779010 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.55:61514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:29.906105 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.30:30626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:29.906731 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.30:30626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:29.940246 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.63:31598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:29.940856 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.63:31598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:30.741259 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.47:47308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:30.741897 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.47:47308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:30.822467 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.60:55278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:30.823177 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.60:55278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:31.033118 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.50:25810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:31.033812 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.50:25810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:31.058899 2026] [lsapi:warn] [pid 2995868:tid 2995868] [client 112.86.225.106:34322] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:03:31.058951 2026] [lsapi:warn] [pid 2995868:tid 2995868] [client 112.86.225.106:34322] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:03:31.628762 2026] [access_compat:error] [pid 2983305:tid 2983305] [client 176.241.66.87:53202] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:31.647986 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.49:51884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:31.648616 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.49:51884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:31.745206 2026] [core:error] [pid 2984602:tid 2984602] (13)Permission denied: [client 216.73.216.199:10487] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-96/cpu_slabs
[Thu Jul 30 12:03:31.911229 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.4:46556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:31.911847 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.4:46556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:31.931359 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.59:27806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:31.931982 2026] [authz_core:error] [pid 2968744:tid 2968744] [client 57.141.0.59:27806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:32.170165 2026] [ssl:error] [pid 2982571:tid 2982571] (EAI 2)Name or service not known: [client 144.76.19.72:49120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:32.170210 2026] [ssl:error] [pid 2982571:tid 2982571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:32.226378 2026] [ssl:error] [pid 2997321:tid 2997321] (EAI 2)Name or service not known: [client 144.76.19.72:49130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:32.226408 2026] [ssl:error] [pid 2997321:tid 2997321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:32.327259 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.5:39434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:32.327876 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.5:39434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:33.187267 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.24:32640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:33.187893 2026] [authz_core:error] [pid 2992184:tid 2992184] [client 57.141.0.24:32640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:33.285954 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.27:45596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:33.286591 2026] [authz_core:error] [pid 2996704:tid 2996704] [client 57.141.0.27:45596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:33.364054 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.48:64820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:33.364693 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.48:64820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:34.124736 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.5:39448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:34.125365 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.5:39448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:34.231643 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.62:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:34.232266 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.62:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:34.619291 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 52.238.199.152:3466] AH01630: client denied by server configuration: /home/gangway/public_html/wp-admin/includes/error_log
[Thu Jul 30 12:03:35.050378 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.14:21634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:35.051005 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.14:21634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:35.314294 2026] [ssl:error] [pid 2998281:tid 2998281] (EAI 2)Name or service not known: [client 144.76.19.72:49132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:35.314334 2026] [ssl:error] [pid 2998281:tid 2998281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:35.361453 2026] [ssl:error] [pid 2997241:tid 2997241] (70014)End of file found: [client 216.73.216.199:38675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:35.369423 2026] [ssl:error] [pid 2993511:tid 2993511] (EAI 2)Name or service not known: [client 144.76.19.72:49140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:35.369449 2026] [ssl:error] [pid 2993511:tid 2993511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:35.386117 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.30:29720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:35.386797 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.30:29720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:35.424332 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.22:25302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:35.424960 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.22:25302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:35.638336 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.11:22518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:35.638999 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.11:22518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:35.663970 2026] [ssl:error] [pid 2984602:tid 2984602] (70014)End of file found: [client 216.73.216.199:10487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:35.668495 2026] [access_compat:error] [pid 2982569:tid 2982569] [client 103.72.86.239:38339] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:35.760955 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.39:40812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:35.761611 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.39:40812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:35.912954 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.44:56340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:35.913588 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.44:56340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:36.128997 2026] [access_compat:error] [pid 2998334:tid 2998334] [client 45.158.164.139:40634] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:03:36.243128 2026] [lsapi:warn] [pid 2998331:tid 2998331] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:03:36.742537 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.21:57064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:36.743181 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.21:57064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:36.990246 2026] [authz_core:error] [pid 2998334:tid 2998334] [client 57.141.0.41:24044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:36.990871 2026] [authz_core:error] [pid 2998334:tid 2998334] [client 57.141.0.41:24044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:37.108249 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.61:41590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:37.108872 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.61:41590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:37.191102 2026] [authz_core:error] [pid 2998334:tid 2998334] [client 57.141.0.59:24744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:37.191721 2026] [authz_core:error] [pid 2998334:tid 2998334] [client 57.141.0.59:24744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:37.380024 2026] [access_compat:error] [pid 2992125:tid 2992125] [client 176.241.66.87:35915] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:37.392581 2026] [cgi:error] [pid 2980995:tid 2980995] [client 66.132.172.197:22204] AH02812: stderr from /home/islay/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://www.islay.me:80/cgi-bin
[Thu Jul 30 12:03:37.635950 2026] [ssl:error] [pid 2983230:tid 2983230] (70014)End of file found: [client 216.73.216.199:40373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:37.904059 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.55:21856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:37.904694 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.55:21856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:38.042660 2026] [authz_core:error] [pid 2998391:tid 2998391] [client 57.141.0.33:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:38.043347 2026] [authz_core:error] [pid 2998391:tid 2998391] [client 57.141.0.33:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:38.335514 2026] [access_compat:error] [pid 2998395:tid 2998395] [client 146.75.185.46:15365] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:03:38.406364 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.68:21754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:38.407011 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.68:21754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:38.429769 2026] [ssl:error] [pid 2993320:tid 2993320] (EAI 2)Name or service not known: [client 144.76.19.72:49144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:38.429822 2026] [ssl:error] [pid 2993320:tid 2993320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:38.487304 2026] [authz_core:error] [pid 2998390:tid 2998390] [client 52.238.199.152:4040] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/error_log
[Thu Jul 30 12:03:38.492689 2026] [ssl:error] [pid 2992125:tid 2992125] (EAI 2)Name or service not known: [client 144.76.19.72:49146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:38.492737 2026] [ssl:error] [pid 2992125:tid 2992125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:38.892419 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.16:52942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:38.893044 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.16:52942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:39.128321 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.37:36010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:39.128961 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.37:36010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:39.373803 2026] [authz_core:error] [pid 2998393:tid 2998393] [client 57.141.0.19:61416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:39.374492 2026] [authz_core:error] [pid 2998393:tid 2998393] [client 57.141.0.19:61416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:39.709189 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.51:25176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:39.709817 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.51:25176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:39.738442 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.22:27794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:39.739134 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.22:27794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:39.844118 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 172.213.208.20:24007] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/rest-api/error_log
[Thu Jul 30 12:03:40.410092 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.41:24058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:40.410720 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.41:24058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:40.814483 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.6:42354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:40.815113 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.6:42354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:40.835345 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.18:59172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:40.835956 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.18:59172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:41.077299 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.1:39602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:41.077919 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.1:39602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:41.461444 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.44:65252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:41.462097 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.44:65252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:41.529905 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.40:63698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:41.530553 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.40:63698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:41.546490 2026] [ssl:error] [pid 2993320:tid 2993320] (EAI 2)Name or service not known: [client 144.76.19.72:38858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:41.546528 2026] [ssl:error] [pid 2993320:tid 2993320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:41.602778 2026] [ssl:error] [pid 2981908:tid 2981908] (EAI 2)Name or service not known: [client 144.76.19.72:38874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:41.602809 2026] [ssl:error] [pid 2981908:tid 2981908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:42.034914 2026] [access_compat:error] [pid 2998395:tid 2998395] [client 157.20.138.62:58027] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:42.152397 2026] [core:error] [pid 2992184:tid 2992184] (13)Permission denied: [client 216.73.216.199:5800] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/store_user
[Thu Jul 30 12:03:42.300745 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.59:24746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:42.301400 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.59:24746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:42.349098 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.42:48652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:42.349743 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.42:48652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:42.459149 2026] [core:error] [pid 2982569:tid 2982569] (13)Permission denied: [client 216.73.216.199:24442] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_groupinfo_4k/objects
[Thu Jul 30 12:03:42.854578 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.58:29824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:42.855230 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.58:29824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:42.968538 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.18:59174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:42.969163 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.18:59174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:43.151208 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.26:41638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:43.151847 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.26:41638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:43.187708 2026] [access_compat:error] [pid 2982571:tid 2982571] [client 176.241.66.87:53754] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:43.279702 2026] [authz_core:error] [pid 2998397:tid 2998397] [client 57.141.0.12:57836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:43.280355 2026] [authz_core:error] [pid 2998397:tid 2998397] [client 57.141.0.12:57836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:43.361939 2026] [ssl:error] [pid 2982569:tid 2982569] (70014)End of file found: [client 216.73.216.199:24442] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:43.467321 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.38:28418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:43.467946 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.38:28418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:43.698555 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.66.168:57061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:43.698591 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.66.168:57061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:44.120141 2026] [ssl:error] [pid 2992184:tid 2992184] (70014)End of file found: [client 216.73.216.199:5800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:44.341007 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.34:29122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:44.341661 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.34:29122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:44.352323 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.12:57848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:44.352949 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.12:57848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:44.670575 2026] [ssl:error] [pid 2984602:tid 2984602] (EAI 2)Name or service not known: [client 144.76.19.72:38894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:44.670612 2026] [ssl:error] [pid 2984602:tid 2984602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:44.723268 2026] [ssl:error] [pid 2993320:tid 2993320] (EAI 2)Name or service not known: [client 144.76.19.72:38906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:44.723299 2026] [ssl:error] [pid 2993320:tid 2993320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:44.864202 2026] [core:error] [pid 2994996:tid 2994996] (13)Permission denied: [client 216.73.216.199:63509] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCPv6/hwcache_align
[Thu Jul 30 12:03:44.947889 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.15:50510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:44.948537 2026] [authz_core:error] [pid 2993508:tid 2993508] [client 57.141.0.15:50510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:45.035417 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.18:59182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:45.036119 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.18:59182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:45.163360 2026] [ssl:error] [pid 2994996:tid 2994996] (70014)End of file found: [client 216.73.216.199:63509] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:45.362351 2026] [security2:error] [pid 2987552:tid 2987552] [client 185.251.199.203:33390] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsvkRz50EbVdr_x-guuNAAAADA"]
[Thu Jul 30 12:03:45.901934 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.26:41652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:45.902639 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.26:41652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:46.120752 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.50:34604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:46.121494 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.50:34604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:46.354061 2026] [access_compat:error] [pid 2984602:tid 2984602] [client 103.72.86.239:40261] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:46.681701 2026] [lsapi:warn] [pid 2998395:tid 2998395] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:03:46.873526 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.23:50960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:46.874150 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.23:50960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:47.049463 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.10:35142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:47.050102 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.10:35142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:47.097530 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.30:49798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:47.098162 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.30:49798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:47.379116 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.33:38932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:47.379806 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.33:38932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:47.647288 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.23:50962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:47.647903 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.23:50962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:47.778104 2026] [ssl:error] [pid 2993321:tid 2993321] (EAI 2)Name or service not known: [client 144.76.19.72:38914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:47.778151 2026] [ssl:error] [pid 2993321:tid 2993321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:47.834219 2026] [ssl:error] [pid 2981908:tid 2981908] (EAI 2)Name or service not known: [client 144.76.19.72:38926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:47.834249 2026] [ssl:error] [pid 2981908:tid 2981908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:48.104304 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.3:48150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:48.104924 2026] [authz_core:error] [pid 2998396:tid 2998396] [client 57.141.0.3:48150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:48.191761 2026] [security2:error] [pid 2993321:tid 2993321] [client 114.119.132.171:50991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,102,17,104/request_format~html"] [unique_id "amsvlG-0vDXjEXwpuP-HpgAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,102,17/request_format~html
[Thu Jul 30 12:03:48.534179 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.46:38190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:48.534804 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.46:38190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:49.007553 2026] [access_compat:error] [pid 2982571:tid 2982571] [client 176.241.66.87:54028] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:49.039825 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.61:39556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:49.040536 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.61:39556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:49.261264 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.36:24060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:49.261944 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.36:24060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:49.379467 2026] [core:error] [pid 2983473:tid 2983473] (13)Permission denied: [client 216.73.216.199:60543] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/partial
[Thu Jul 30 12:03:49.588302 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.43:26418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:49.588981 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.43:26418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:49.680930 2026] [ssl:error] [pid 2983473:tid 2983473] (70014)End of file found: [client 216.73.216.199:60543] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:49.798912 2026] [core:error] [pid 2998894:tid 2998894] [client 57.141.0.44:46660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:49.798946 2026] [core:error] [pid 2998894:tid 2998894] [client 57.141.0.44:46660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:03:49.822882 2026] [security2:error] [pid 2998939:tid 2998939] [client 114.119.132.171:51001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~14,102,17,104/request_format~html"] [unique_id "amsvlTA-95Z6kr5Q73R_QQAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~14,102,17/request_format~html
[Thu Jul 30 12:03:50.419334 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.51:49514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:50.420032 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.51:49514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:50.508126 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.69:54072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:50.508791 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.69:54072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:50.888826 2026] [ssl:error] [pid 2993508:tid 2993508] (EAI 2)Name or service not known: [client 144.76.19.72:23246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:50.888867 2026] [ssl:error] [pid 2993508:tid 2993508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:50.943149 2026] [ssl:error] [pid 2994996:tid 2994996] (EAI 2)Name or service not known: [client 144.76.19.72:23252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:50.943184 2026] [ssl:error] [pid 2994996:tid 2994996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:51.159949 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.23:50982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:51.160654 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.23:50982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:51.257552 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.46:41810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:51.258173 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.46:41810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:51.430938 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.27:40704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:51.431608 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.27:40704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:51.509641 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.70:48652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:51.510295 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.70:48652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:51.621240 2026] [security2:error] [pid 2993508:tid 2993508] [client 185.191.171.11:21312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/does-rubbing-alcohol-kill-pubic-lice"] [unique_id "amsvl8wcoPq0vMNSn1vbSQAAAAc"]
[Thu Jul 30 12:03:51.664821 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.11:57942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:51.665450 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.11:57942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:51.684201 2026] [access_compat:error] [pid 2996601:tid 2996601] [client 157.20.138.62:58587] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:51.786921 2026] [core:error] [pid 2998938:tid 2998938] (13)Permission denied: [client 216.73.216.199:11386] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCPv6/alloc_calls
[Thu Jul 30 12:03:52.025907 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.47:44364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:52.026576 2026] [authz_core:error] [pid 2983230:tid 2983230] [client 57.141.0.47:44364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:52.088217 2026] [core:error] [pid 2998938:tid 2998938] (13)Permission denied: [client 216.73.216.199:11386] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iint_cache/ctor
[Thu Jul 30 12:03:52.391368 2026] [ssl:error] [pid 2998938:tid 2998938] (70014)End of file found: [client 216.73.216.199:11386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:52.405321 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.12:37906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:52.405935 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.12:37906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:52.451399 2026] [access_compat:error] [pid 2998335:tid 2998335] [client 103.72.86.239:38250] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:52.851434 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.24:47770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:52.852076 2026] [authz_core:error] [pid 2955789:tid 2955789] [client 57.141.0.24:47770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:53.082412 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.28:34912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:53.083058 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.28:34912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:53.089938 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.16:55810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:53.090566 2026] [authz_core:error] [pid 2998331:tid 2998331] [client 57.141.0.16:55810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:53.274314 2026] [security2:error] [pid 2998823:tid 2998823] [client 74.7.227.14:40856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amsvmXrxURvDjYBc8zVycQAAAAA"], referer: https://marketingdirectoy.com
[Thu Jul 30 12:03:53.557445 2026] [authz_core:error] [pid 2998988:tid 2998988] [client 57.141.0.19:62680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:53.558086 2026] [authz_core:error] [pid 2998988:tid 2998988] [client 57.141.0.19:62680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:53.992391 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.52:47444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:53.993090 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.52:47444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:53.999716 2026] [ssl:error] [pid 2998988:tid 2998988] (EAI 2)Name or service not known: [client 144.76.19.72:23278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:53.999752 2026] [ssl:error] [pid 2998988:tid 2998988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:54.008151 2026] [authz_core:error] [pid 2998390:tid 2998390] [client 57.141.0.3:38680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:54.008797 2026] [authz_core:error] [pid 2998390:tid 2998390] [client 57.141.0.3:38680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:54.056157 2026] [ssl:error] [pid 2998823:tid 2998823] (EAI 2)Name or service not known: [client 144.76.19.72:23290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:54.056195 2026] [ssl:error] [pid 2998823:tid 2998823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:54.487719 2026] [access_compat:error] [pid 2998395:tid 2998395] [client 176.241.66.87:54298] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:54.534769 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 20.206.204.219:54765] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:03:54.800624 2026] [ssl:error] [pid 2994139:tid 2994139] (70014)End of file found: [client 216.73.216.199:24096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:55.047087 2026] [authz_core:error] [pid 2998990:tid 2998990] [client 57.141.0.21:63240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:55.047715 2026] [authz_core:error] [pid 2998990:tid 2998990] [client 57.141.0.21:63240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:55.477998 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.70:48654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:55.478641 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.70:48654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:55.645621 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.31:25208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:55.646245 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.31:25208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:56.299383 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.61:20112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:56.300033 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.61:20112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:56.379742 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.38:25406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:56.380399 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.38:25406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:56.944871 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.44:46676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:56.945168 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.20:38018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:56.945593 2026] [authz_core:error] [pid 2982569:tid 2982569] [client 57.141.0.44:46676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:56.945821 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.20:38018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:57.132419 2026] [ssl:error] [pid 2998823:tid 2998823] (EAI 2)Name or service not known: [client 144.76.19.72:23292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:57.132466 2026] [ssl:error] [pid 2998823:tid 2998823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:57.184688 2026] [ssl:error] [pid 2996755:tid 2996755] (EAI 2)Name or service not known: [client 144.76.19.72:23294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:03:57.184746 2026] [ssl:error] [pid 2996755:tid 2996755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:03:57.192963 2026] [lsapi:warn] [pid 2998894:tid 2998894] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:03:57.261617 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.58:65296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:57.262259 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.58:65296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:57.515850 2026] [ssl:error] [pid 2998390:tid 2998390] (70014)End of file found: [client 216.73.216.199:22047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:03:57.794343 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.24:55010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:57.794999 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.24:55010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:58.039113 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.40:47386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:58.039754 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.40:47386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:58.066871 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.52:47458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:58.067535 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.52:47458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:58.071939 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.18:39738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:58.072577 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.18:39738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:58.659239 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.16:31164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:58.659875 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.16:31164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:58.715970 2026] [core:error] [pid 2993321:tid 2993321] (13)Permission denied: [client 216.73.216.199:39038] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8/hwcache_align
[Thu Jul 30 12:03:59.142775 2026] [access_compat:error] [pid 2996704:tid 2996704] [client 103.72.86.239:38783] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:03:59.391061 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.23:26750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:59.391725 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.23:26750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:03:59.852969 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.17:52832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:03:59.853603 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.17:52832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:00.236782 2026] [ssl:error] [pid 2982571:tid 2982571] (EAI 2)Name or service not known: [client 144.76.19.72:47170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:00.236812 2026] [ssl:error] [pid 2982571:tid 2982571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:00.293680 2026] [ssl:error] [pid 2996755:tid 2996755] (EAI 2)Name or service not known: [client 144.76.19.72:47186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:00.293735 2026] [ssl:error] [pid 2996755:tid 2996755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:00.359645 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.9:58436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:00.360289 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.9:58436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:00.513297 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.71:20622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:00.513987 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.71:20622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:00.520856 2026] [core:error] [pid 2993321:tid 2993321] (13)Permission denied: [client 216.73.216.199:39038] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/validate
[Thu Jul 30 12:04:00.624433 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.9:58440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:00.625054 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.9:58440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:00.766513 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.47:44368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:00.767154 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.47:44368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:01.347843 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.15:21062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:01.348494 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.15:21062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:01.624612 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.67:39852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:01.625251 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.67:39852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:02.032952 2026] [ssl:error] [pid 2993321:tid 2993321] (70014)End of file found: [client 216.73.216.199:39038] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:02.108403 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 20.206.204.219:56065] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:04:02.200403 2026] [access_compat:error] [pid 2998938:tid 2998938] [client 157.20.138.62:59160] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:02.597893 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.45:23022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:02.598529 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.45:23022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:02.627696 2026] [core:error] [pid 2992185:tid 2992185] (13)Permission denied: [client 216.73.216.199:47325] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCPv6/usersize
[Thu Jul 30 12:04:02.763176 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.26:61008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:02.763859 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.26:61008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:03.223405 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.16:31190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:03.224028 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.16:31190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:03.299986 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.18:60026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:03.300637 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 57.141.0.18:60026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:03.351615 2026] [ssl:error] [pid 2997241:tid 2997241] (EAI 2)Name or service not known: [client 144.76.19.72:47190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:03.351655 2026] [ssl:error] [pid 2997241:tid 2997241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:03.409690 2026] [ssl:error] [pid 2998991:tid 2998991] (EAI 2)Name or service not known: [client 144.76.19.72:47202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:03.409727 2026] [ssl:error] [pid 2998991:tid 2998991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:03.541108 2026] [core:error] [pid 2992185:tid 2992185] (13)Permission denied: [client 216.73.216.199:47325] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/pid_namespace/slabs_cpu_partial
[Thu Jul 30 12:04:03.786684 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.46:35096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:03.787323 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.46:35096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:04.137106 2026] [ssl:error] [pid 2992185:tid 2992185] (70014)End of file found: [client 216.73.216.199:47325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:04.292923 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.28:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:04.293590 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.28:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:04.339542 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.1:35580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:04.340171 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.1:35580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:04.431183 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 103.59.160.131:55980] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 12:04:04.559905 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:26472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:04.560539 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:26472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:04.560928 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.21:23098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:04.561545 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.21:23098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:04.635841 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.30:61272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:04.636478 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.30:61272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:04.648891 2026] [ssl:error] [pid 2994139:tid 2994139] (70014)End of file found: [client 216.73.216.199:24092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:05.524399 2026] [authz_core:error] [pid 2998990:tid 2998990] [client 57.141.0.12:49178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:05.525019 2026] [authz_core:error] [pid 2998990:tid 2998990] [client 57.141.0.12:49178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:05.591521 2026] [access_compat:error] [pid 2996755:tid 2996755] [client 176.241.66.87:54822] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:05.954605 2026] [authz_core:error] [pid 2998397:tid 2998397] [client 57.141.0.18:60040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:05.955239 2026] [authz_core:error] [pid 2998397:tid 2998397] [client 57.141.0.18:60040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:06.465997 2026] [ssl:error] [pid 2998395:tid 2998395] (EAI 2)Name or service not known: [client 144.76.19.72:47204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:06.466030 2026] [ssl:error] [pid 2998395:tid 2998395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:06.519129 2026] [ssl:error] [pid 2992180:tid 2992180] (EAI 2)Name or service not known: [client 144.76.19.72:47216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:06.519168 2026] [ssl:error] [pid 2992180:tid 2992180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:06.709654 2026] [access_compat:error] [pid 2992077:tid 2992077] [client 103.72.86.239:39111] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:06.746651 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.54:20550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:06.747346 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.54:20550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:06.789760 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.7:30022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:06.790458 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.7:30022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:06.879620 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.12:49192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:06.880243 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.12:49192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:07.130778 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.28:39546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:07.131465 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.28:39546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:07.299701 2026] [core:error] [pid 2998333:tid 2998333] [client 66.249.66.5:59126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:07.299742 2026] [core:error] [pid 2998333:tid 2998333] [client 66.249.66.5:59126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:07.302594 2026] [core:error] [pid 2971597:tid 2971597] [client 66.249.66.194:63813] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:07.302623 2026] [core:error] [pid 2971597:tid 2971597] [client 66.249.66.194:63813] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:07.542951 2026] [security2:error] [pid 2983473:tid 2983473] [client 216.73.216.199:62340] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/python311/etc/locked_extensions.ini"] [unique_id "amsvp4VKdj_ppOHe_aPX3gAAADU"]
[Thu Jul 30 12:04:07.543250 2026] [security2:error] [pid 2983473:tid 2983473] [client 216.73.216.199:62340] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/python311/etc/locked_extensions.ini"] [unique_id "amsvp4VKdj_ppOHe_aPX3gAAADU"]
[Thu Jul 30 12:04:07.543468 2026] [security2:error] [pid 2983473:tid 2983473] [client 216.73.216.199:62340] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/python311/etc/locked_extensions.ini"] [unique_id "amsvp4VKdj_ppOHe_aPX3gAAADU"]
[Thu Jul 30 12:04:07.721273 2026] [lsapi:warn] [pid 2998938:tid 2998938] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:04:07.746271 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.17:52844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:07.746945 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.17:52844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:07.963527 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.1:35594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:07.964215 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.1:35594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:08.140330 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.10:41188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:08.141018 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.10:41188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:08.482689 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.27:60766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:08.483377 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.27:60766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:08.518315 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.34:55052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:08.519004 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.34:55052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:09.045294 2026] [authz_core:error] [pid 2998938:tid 2998938] [client 57.141.0.31:54026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:09.045984 2026] [authz_core:error] [pid 2998938:tid 2998938] [client 57.141.0.31:54026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:09.055600 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.32:64994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:09.056235 2026] [authz_core:error] [pid 2996600:tid 2996600] [client 57.141.0.32:64994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:09.469898 2026] [core:error] [pid 2983473:tid 2983473] (13)Permission denied: [client 216.73.216.199:62340] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-4k/partial
[Thu Jul 30 12:04:09.576642 2026] [ssl:error] [pid 2992180:tid 2992180] (EAI 2)Name or service not known: [client 144.76.19.72:47478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:09.576691 2026] [ssl:error] [pid 2992180:tid 2992180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:09.629776 2026] [ssl:error] [pid 2996600:tid 2996600] (EAI 2)Name or service not known: [client 144.76.19.72:47486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:09.629816 2026] [ssl:error] [pid 2996600:tid 2996600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:09.893398 2026] [authz_core:error] [pid 2997241:tid 2997241] [client 57.141.0.34:63156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:09.894096 2026] [authz_core:error] [pid 2997241:tid 2997241] [client 57.141.0.34:63156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:10.136364 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.33:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:10.136988 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.33:22374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:10.522634 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.48:28950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:10.523327 2026] [authz_core:error] [pid 2994139:tid 2994139] [client 57.141.0.48:28950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:10.581795 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.60:22392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:10.582441 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.60:22392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:10.859053 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.32:65008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:10.859697 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.32:65008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:11.352241 2026] [authz_core:error] [pid 2998334:tid 2998334] [client 57.141.0.4:42338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:11.352931 2026] [authz_core:error] [pid 2998334:tid 2998334] [client 57.141.0.4:42338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:11.579115 2026] [ssl:error] [pid 2983473:tid 2983473] (70014)End of file found: [client 216.73.216.199:62340] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:12.014366 2026] [authz_core:error] [pid 2998990:tid 2998990] [client 57.141.0.7:30034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:12.014991 2026] [authz_core:error] [pid 2998990:tid 2998990] [client 57.141.0.7:30034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:12.175691 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.50:48300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:12.176370 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.50:48300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:12.258369 2026] [security2:error] [pid 2980995:tid 2980995] [client 51.68.111.238:34449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amsvrMRsD2vmyNGbhhoo1wAAABE"]
[Thu Jul 30 12:04:12.519456 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.68:54678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:12.520150 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.68:54678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:12.720355 2026] [ssl:error] [pid 2997321:tid 2997321] (EAI 2)Name or service not known: [client 144.76.19.72:47496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:12.720387 2026] [ssl:error] [pid 2997321:tid 2997321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:12.722950 2026] [access_compat:error] [pid 2998989:tid 2998989] [client 157.20.138.62:59729] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:12.772197 2026] [ssl:error] [pid 2995869:tid 2995869] (EAI 2)Name or service not known: [client 144.76.19.72:47502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:12.772250 2026] [ssl:error] [pid 2995869:tid 2995869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:12.827350 2026] [security2:error] [pid 2998334:tid 2998334] [client 51.68.111.238:34433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amsvrCNHjkDZ1U7-8Da4HwAAAC8"]
[Thu Jul 30 12:04:12.871234 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.51:41566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:12.871924 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.51:41566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:13.099812 2026] [core:error] [pid 2992185:tid 2992185] (13)Permission denied: [client 216.73.216.199:17754] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/fb/parameters/lockless_register_fb
[Thu Jul 30 12:04:13.221307 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.59:30734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:13.222292 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.59:30734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:13.371818 2026] [security2:error] [pid 2971597:tid 2971597] [client 175.27.171.245:58316] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.com"] [uri "/"] [unique_id "amsvrct2L2FCnsuL0RMoygAAACA"]
[Thu Jul 30 12:04:13.475252 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.31:54036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:13.475892 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.31:54036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:13.691855 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.52:22258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:13.692516 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.52:22258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:13.701626 2026] [ssl:error] [pid 2992185:tid 2992185] (70014)End of file found: [client 216.73.216.199:17754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:13.770396 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.63:63630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:13.771014 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.63:63630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:14.478997 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.21:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:14.479702 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.21:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:14.522767 2026] [authz_core:error] [pid 3000152:tid 3000152] [client 57.141.0.54:48998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:14.523394 2026] [authz_core:error] [pid 3000152:tid 3000152] [client 57.141.0.54:48998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:15.100102 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.68:54682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:15.100817 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.68:54682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:15.272186 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.10:41198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:15.272822 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.10:41198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:15.816251 2026] [ssl:error] [pid 2996755:tid 2996755] (70014)End of file found: [client 216.73.216.199:1205] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:15.825284 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.32:48458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:15.825961 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.32:48458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:15.826940 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:47510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:15.826973 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:15.880088 2026] [ssl:error] [pid 2994139:tid 2994139] (EAI 2)Name or service not known: [client 144.76.19.72:47516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:15.880134 2026] [ssl:error] [pid 2994139:tid 2994139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:15.905813 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 103.59.160.131:62942] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sodium_compat/src/error_log
[Thu Jul 30 12:04:16.011720 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.70:26098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:16.012369 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.70:26098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:16.077140 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.11:62160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:16.077841 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.11:62160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:16.245770 2026] [security2:error] [pid 2996704:tid 2996704] [client 74.7.227.28:34126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcontacts.sewyork.co.uk"] [uri "/"] [unique_id "amsvsNkala5JRzeKdC-iDwAAACE"]
[Thu Jul 30 12:04:16.706885 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.59:65460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:16.707537 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.59:65460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:16.869997 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 103.59.160.131:62179] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 12:04:17.287419 2026] [security2:error] [pid 3000152:tid 3000152] [client 175.27.171.245:46376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amsvsQ6mT8rGbRZPWibv4gAAAAc"], referer: http://www.spamp.com
[Thu Jul 30 12:04:17.340043 2026] [access_compat:error] [pid 2983473:tid 2983473] [client 103.72.86.239:38690] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:17.459008 2026] [access_compat:error] [pid 2984602:tid 2984602] [client 176.241.66.87:55366] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:17.800392 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.31:34598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:17.801091 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.31:34598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:17.870629 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.28:55326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:17.871327 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.28:55326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:18.204358 2026] [lsapi:warn] [pid 2993511:tid 2993511] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:04:18.359041 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.40:44758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:18.359692 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.40:44758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:18.411120 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.19:30380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:18.411812 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.19:30380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:18.500015 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.21:44988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:18.500649 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.21:44988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:18.849251 2026] [authz_core:error] [pid 2998938:tid 2998938] [client 57.141.0.22:30196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:18.849892 2026] [authz_core:error] [pid 2998938:tid 2998938] [client 57.141.0.22:30196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:18.897105 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.52:22262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:18.897740 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.52:22262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:18.937636 2026] [ssl:error] [pid 2996704:tid 2996704] (EAI 2)Name or service not known: [client 144.76.19.72:47524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:18.937672 2026] [ssl:error] [pid 2996704:tid 2996704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:18.990759 2026] [ssl:error] [pid 2993511:tid 2993511] (EAI 2)Name or service not known: [client 144.76.19.72:47540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:18.990790 2026] [ssl:error] [pid 2993511:tid 2993511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:19.126326 2026] [core:error] [pid 2998335:tid 2998335] (13)Permission denied: [client 216.73.216.199:47577] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/shadow.nouids.cache
[Thu Jul 30 12:04:19.415946 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.37:31148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:19.416576 2026] [authz_core:error] [pid 2993511:tid 2993511] [client 57.141.0.37:31148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:19.926619 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.12:62902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:19.927269 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.12:62902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:20.177603 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.47:64438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:20.178245 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.47:64438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:20.286144 2026] [authz_core:error] [pid 3000354:tid 3000354] [client 57.141.0.6:54242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:20.286787 2026] [authz_core:error] [pid 3000354:tid 3000354] [client 57.141.0.6:54242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:20.473083 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.14:26642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:20.473720 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.14:26642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:20.909248 2026] [core:error] [pid 2997321:tid 2997321] (13)Permission denied: [client 216.73.216.199:65048] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCPv6/min_partial
[Thu Jul 30 12:04:21.211457 2026] [ssl:error] [pid 2997321:tid 2997321] (70014)End of file found: [client 216.73.216.199:65048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:21.363793 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.59:65476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:21.364489 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.59:65476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:21.512598 2026] [ssl:error] [pid 2971597:tid 2971597] (70014)End of file found: [client 216.73.216.199:47508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:21.583994 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.60:35470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:21.584632 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.60:35470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:21.866860 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.52:28574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:21.867515 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.52:28574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:21.978851 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.59:65482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:21.979509 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.59:65482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:22.046645 2026] [ssl:error] [pid 2995869:tid 2995869] (EAI 2)Name or service not known: [client 144.76.19.72:61580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:22.046682 2026] [ssl:error] [pid 2995869:tid 2995869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:22.099709 2026] [ssl:error] [pid 2996755:tid 2996755] (EAI 2)Name or service not known: [client 144.76.19.72:61592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:22.099737 2026] [ssl:error] [pid 2996755:tid 2996755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:22.557627 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.55:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:22.558318 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.55:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:22.826825 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.62:59206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:22.827567 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.62:59206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:23.147674 2026] [core:error] [pid 3000191:tid 3000191] [client 66.249.66.66:52557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:23.147716 2026] [core:error] [pid 3000191:tid 3000191] [client 66.249.66.66:52557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:23.208112 2026] [access_compat:error] [pid 3000354:tid 3000354] [client 157.20.138.62:60296] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:23.370725 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.24:58136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:23.371411 2026] [authz_core:error] [pid 2995445:tid 2995445] [client 57.141.0.24:58136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:23.729640 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.29:31060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:23.730267 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.29:31060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:23.920818 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.56:25874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:23.921462 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.56:25874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:24.136392 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.2:46084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:24.137106 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.2:46084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:24.264266 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.28:33686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:24.264886 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.28:33686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:25.170317 2026] [ssl:error] [pid 2992077:tid 2992077] (EAI 2)Name or service not known: [client 144.76.19.72:61608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:25.170358 2026] [ssl:error] [pid 2992077:tid 2992077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:25.175415 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.45:31134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:25.176029 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.45:31134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:25.224810 2026] [ssl:error] [pid 2993320:tid 2993320] (EAI 2)Name or service not known: [client 144.76.19.72:61624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:25.224844 2026] [ssl:error] [pid 2993320:tid 2993320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:25.530357 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.30:30106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:25.531057 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.30:30106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:25.867441 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.32:32388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:25.868135 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.32:32388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:26.329413 2026] [ssl:error] [pid 2998989:tid 2998989] (70014)End of file found: [client 216.73.216.199:62973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:26.565733 2026] [security2:error] [pid 2998938:tid 2998938] [client 43.156.201.18:55357] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvurprYCk9QXx0gFVI3gAAABo"]
[Thu Jul 30 12:04:26.565797 2026] [security2:error] [pid 2998938:tid 2998938] [client 43.156.201.18:55357] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvurprYCk9QXx0gFVI3gAAABo"]
[Thu Jul 30 12:04:26.566127 2026] [security2:error] [pid 2998938:tid 2998938] [client 43.156.201.18:55357] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvurprYCk9QXx0gFVI3gAAABo"]
[Thu Jul 30 12:04:26.751276 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.32:32398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:26.751905 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.32:32398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:26.789339 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.49:65376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:26.789991 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.49:65376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:26.793973 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.2:26948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:26.794639 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.2:26948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:26.815994 2026] [ssl:error] [pid 2995772:tid 2995772] (70014)End of file found: [client 216.73.216.199:42618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:27.002561 2026] [security2:error] [pid 2996755:tid 2996755] [client 76.13.78.252:49166] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsvu1U3qJnrwyZYo5huywAAACQ"]
[Thu Jul 30 12:04:27.232450 2026] [authz_core:error] [pid 2998938:tid 2998938] [client 57.141.0.52:28586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:27.233093 2026] [authz_core:error] [pid 2998938:tid 2998938] [client 57.141.0.52:28586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:27.351670 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.45:43074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:27.352316 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.45:43074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:27.512921 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 20.206.204.219:60575] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:04:27.892889 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.1:42442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:27.893553 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.1:42442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:27.969287 2026] [access_compat:error] [pid 2998990:tid 2998990] [client 103.72.86.239:38976] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:28.138961 2026] [ssl:error] [pid 2989187:tid 2989187] (70014)End of file found: [client 216.73.216.199:26727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:28.144334 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.38:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:28.144969 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.38:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:28.168426 2026] [security2:error] [pid 2996755:tid 2996755] [client 98.82.38.120:57535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amsvvFU3qJnrwyZYo5huzAAAACQ"]
[Thu Jul 30 12:04:28.282998 2026] [ssl:error] [pid 2987552:tid 2987552] (EAI 2)Name or service not known: [client 144.76.19.72:61634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:28.283034 2026] [ssl:error] [pid 2987552:tid 2987552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:28.321079 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.41:54502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:28.321720 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.41:54502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:28.334888 2026] [ssl:error] [pid 2993151:tid 2993151] (EAI 2)Name or service not known: [client 144.76.19.72:61638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:28.334923 2026] [ssl:error] [pid 2993151:tid 2993151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:28.368249 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.36:43610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:28.368890 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.36:43610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:28.694288 2026] [lsapi:warn] [pid 2992185:tid 2992185] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:04:29.027817 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.41:54516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:29.028471 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.41:54516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:29.095945 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 52.238.199.152:3390] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/IXR/error_log
[Thu Jul 30 12:04:29.129229 2026] [access_compat:error] [pid 2992077:tid 2992077] [client 176.241.66.87:39063] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:29.740419 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.65:47896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:29.741042 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.65:47896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:29.746728 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.28:33692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:29.747339 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.28:33692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:29.993208 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.37:21698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:29.993821 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.37:21698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:30.030888 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.30:30120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:30.031517 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.30:30120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:30.427708 2026] [authz_core:error] [pid 3000755:tid 3000755] [client 57.141.0.65:47902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:30.428355 2026] [authz_core:error] [pid 3000755:tid 3000755] [client 57.141.0.65:47902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:30.681869 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.36:43616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:30.682525 2026] [authz_core:error] [pid 2971597:tid 2971597] [client 57.141.0.36:43616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:31.067705 2026] [core:error] [pid 2996517:tid 2996517] [client 66.249.66.66:59877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:31.067734 2026] [core:error] [pid 2996517:tid 2996517] [client 66.249.66.66:59877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:31.388151 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.49:50482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:31.388803 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.49:50482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:31.392730 2026] [ssl:error] [pid 2996517:tid 2996517] (EAI 2)Name or service not known: [client 144.76.19.72:19276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:31.392778 2026] [ssl:error] [pid 2996517:tid 2996517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:31.451157 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:19282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:31.451199 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:31.456150 2026] [authz_core:error] [pid 3000152:tid 3000152] [client 57.141.0.42:64028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:31.456772 2026] [authz_core:error] [pid 3000152:tid 3000152] [client 57.141.0.42:64028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:31.628656 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.7:64268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:31.629291 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.7:64268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:33.242492 2026] [security2:error] [pid 2989187:tid 2989187] [client 105.245.167.167:34179] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvwbfDxHl6s2Q2J-SLdgAAAAI"]
[Thu Jul 30 12:04:33.242568 2026] [security2:error] [pid 2989187:tid 2989187] [client 105.245.167.167:34179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvwbfDxHl6s2Q2J-SLdgAAAAI"]
[Thu Jul 30 12:04:33.242882 2026] [security2:error] [pid 2989187:tid 2989187] [client 105.245.167.167:34179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvwbfDxHl6s2Q2J-SLdgAAAAI"]
[Thu Jul 30 12:04:34.174513 2026] [ssl:error] [pid 2996517:tid 2996517] (70014)End of file found: [client 216.73.216.199:35889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:35.112245 2026] [authz_core:error] [pid 2982571:tid 2982571] [client 20.206.204.219:61612] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:04:36.404751 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 103.59.160.131:59942] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 12:04:37.319724 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.8:40656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:37.320405 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.8:40656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:37.462263 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.43:37436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:37.462902 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.43:37436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:37.489388 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.69:43642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:37.490008 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.69:43642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:37.592384 2026] [security2:error] [pid 2998990:tid 2998990] [client 45.239.120.243:38300] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvxd_Tcs9pvqylgaerOwAAADk"]
[Thu Jul 30 12:04:37.592432 2026] [security2:error] [pid 2998990:tid 2998990] [client 45.239.120.243:38300] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsvxd_Tcs9pvqylgaerOwAAADk"]
[Thu Jul 30 12:04:37.592686 2026] [security2:error] [pid 2998990:tid 2998990] [client 45.239.120.243:38300] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsvxd_Tcs9pvqylgaerOwAAADk"]
[Thu Jul 30 12:04:37.631677 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.42:64042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:37.632309 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.42:64042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:37.665611 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.49:50484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:37.666233 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.49:50484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:37.821845 2026] [authz_core:error] [pid 3001104:tid 3001104] [client 57.141.0.19:27302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:37.822556 2026] [authz_core:error] [pid 3001104:tid 3001104] [client 57.141.0.19:27302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:37.838232 2026] [ssl:error] [pid 3000191:tid 3000191] (70014)End of file found: [client 216.73.216.199:9152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:38.055346 2026] [ssl:error] [pid 3000715:tid 3000715] (70014)End of file found: [client 216.73.216.199:22353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:38.135799 2026] [access_compat:error] [pid 2998392:tid 2998392] [client 157.20.138.62:60871] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:38.459773 2026] [ssl:error] [pid 2989187:tid 2989187] (EAI 2)Name or service not known: [client 144.76.19.72:19290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:38.459807 2026] [ssl:error] [pid 2989187:tid 2989187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:38.481146 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.41:51770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.481795 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.41:51770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:38.490626 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.30:22908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.491254 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.30:22908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:38.578121 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.62:44618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.578763 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.62:44618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:38.664040 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.47:36254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.664672 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.47:36254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:38.754453 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.23:38956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.755105 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.23:38956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:38.843524 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.69:43652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.844161 2026] [authz_core:error] [pid 2994996:tid 2994996] [client 57.141.0.69:43652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:38.929210 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.41:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.929847 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.41:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:38.995777 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.4:58952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:38.996454 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.4:58952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:39.000139 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.17:61276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:39.000798 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.17:61276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:39.147449 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.44:39766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:39.148091 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.44:39766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:39.361080 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.51:62648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:39.361723 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.51:62648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:39.750565 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.7:55726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:39.751262 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.7:55726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:39.755592 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.10:59382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:39.756220 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.10:59382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:39.758003 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.23:38970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:39.758626 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.23:38970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:39.844670 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:19316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:39.844715 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:39.881434 2026] [ssl:error] [pid 2989187:tid 2989187] (70014)End of file found: [client 216.73.216.199:14811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:39.929970 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.51:62652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:39.930610 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.51:62652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:40.159526 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.26:40306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:40.160170 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.26:40306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:40.202700 2026] [authz_core:error] [pid 3000978:tid 3000978] [client 57.141.0.32:24490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:40.203347 2026] [authz_core:error] [pid 3000978:tid 3000978] [client 57.141.0.32:24490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:40.247768 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.39:61432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:40.248389 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.39:61432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:40.249222 2026] [lsapi:warn] [pid 3001138:tid 3001138] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:04:40.321337 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.28:38256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:40.321971 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.28:38256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:40.437192 2026] [access_compat:error] [pid 3000980:tid 3000980] [client 103.72.86.239:40683] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:40.755262 2026] [access_compat:error] [pid 3001175:tid 3001175] [client 176.241.66.87:56478] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:40.802604 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.20:51030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:40.803258 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.20:51030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:41.273368 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.28:38264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:41.273990 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.28:38264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:41.816116 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.45:39248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:41.816769 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.45:39248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:42.338682 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.33:48474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:42.339330 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.33:48474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:42.528167 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.18:39834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:42.528812 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.18:39834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:42.642368 2026] [authz_core:error] [pid 3001023:tid 3001023] [client 57.141.0.15:40744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:42.643020 2026] [authz_core:error] [pid 3001023:tid 3001023] [client 57.141.0.15:40744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:42.821509 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.6:48384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:42.822159 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.6:48384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:42.900180 2026] [ssl:error] [pid 3001026:tid 3001026] (EAI 2)Name or service not known: [client 144.76.19.72:36842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:42.900215 2026] [ssl:error] [pid 3001026:tid 3001026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:42.956598 2026] [ssl:error] [pid 3000754:tid 3000754] (EAI 2)Name or service not known: [client 144.76.19.72:36858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:42.956628 2026] [ssl:error] [pid 3000754:tid 3000754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:43.605319 2026] [security2:error] [pid 2987376:tid 2987376] [client 194.56.216.2:64210] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amsvy0i3XXbxH8pwbtIuIgAAAA0"]
[Thu Jul 30 12:04:43.962856 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.8:55396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:43.963494 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.8:55396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:44.025098 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.41:59194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:44.025723 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.41:59194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:44.033663 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.19:52214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:44.034302 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.19:52214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:44.270386 2026] [access_compat:error] [pid 3000192:tid 3000192] [client 157.20.138.62:61448] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:44.334208 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.25:37644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:44.334827 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.25:37644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:44.562863 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.37:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:44.563489 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.37:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:44.589222 2026] [authz_core:error] [pid 3001026:tid 3001026] [client 57.141.0.60:35056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:44.589862 2026] [authz_core:error] [pid 3001026:tid 3001026] [client 57.141.0.60:35056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:45.470268 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.54:32454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:45.470908 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.54:32454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:45.509800 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.7:43716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:45.510439 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.7:43716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:45.557175 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.22:57350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:45.557864 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.22:57350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:45.902326 2026] [ssl:error] [pid 2984602:tid 2984602] (70014)End of file found: [client 216.73.216.199:10676] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:46.015844 2026] [ssl:error] [pid 2993321:tid 2993321] (EAI 2)Name or service not known: [client 144.76.19.72:36860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:46.015877 2026] [ssl:error] [pid 2993321:tid 2993321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:46.078613 2026] [ssl:error] [pid 2994996:tid 2994996] (EAI 2)Name or service not known: [client 144.76.19.72:36864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:46.078648 2026] [ssl:error] [pid 2994996:tid 2994996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:46.237884 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.52:35182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:46.238545 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.52:35182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:46.240025 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.12:65130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:46.240664 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.12:65130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:46.505902 2026] [ssl:error] [pid 2995772:tid 2995772] (70014)End of file found: [client 216.73.216.199:62510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:46.932038 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.52:35198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:46.932690 2026] [authz_core:error] [pid 2992124:tid 2992124] [client 57.141.0.52:35198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:47.102633 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.40:31728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:47.103256 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.40:31728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:47.391414 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.69:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:47.392037 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.69:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:47.630981 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.61:26570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:47.631613 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.61:26570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:47.871328 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.12:65132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:47.871976 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.12:65132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:48.443150 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.35:51732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:48.443812 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.35:51732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:48.776008 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.44:56288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:48.776647 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.44:56288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:49.097670 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.10:58612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:49.098315 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.10:58612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:49.132383 2026] [ssl:error] [pid 2993151:tid 2993151] (EAI 2)Name or service not known: [client 144.76.19.72:36876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:49.132431 2026] [ssl:error] [pid 2993151:tid 2993151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:49.185392 2026] [ssl:error] [pid 3001032:tid 3001032] (EAI 2)Name or service not known: [client 144.76.19.72:36892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:49.185436 2026] [ssl:error] [pid 3001032:tid 3001032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:49.538914 2026] [authz_core:error] [pid 3000755:tid 3000755] [client 57.141.0.36:57630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:49.539575 2026] [authz_core:error] [pid 3000755:tid 3000755] [client 57.141.0.36:57630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:49.620385 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.68:38732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:49.621003 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.68:38732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:49.673455 2026] [lsapi:warn] [pid 2998894:tid 2998894] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:04:49.966571 2026] [security2:error] [pid 2983473:tid 2983473] [client 43.165.4.2:57246] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-earth.com"] [uri "/"] [unique_id "amsv0YVKdj_ppOHe_aPX9AAAADU"]
[Thu Jul 30 12:04:50.034727 2026] [core:error] [pid 2971597:tid 2971597] (13)Permission denied: [client 216.73.216.199:62606] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iint_cache/red_zone
[Thu Jul 30 12:04:50.038376 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.65:37340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:50.039003 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.65:37340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:50.148901 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.56:43704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:50.149786 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.56:43704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:50.336450 2026] [core:error] [pid 2971597:tid 2971597] (13)Permission denied: [client 216.73.216.199:62606] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/security/integrity/ima/policy
[Thu Jul 30 12:04:50.506761 2026] [authz_core:error] [pid 3001031:tid 3001031] [client 57.141.0.16:57974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:50.507432 2026] [authz_core:error] [pid 3001031:tid 3001031] [client 57.141.0.16:57974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:50.636824 2026] [ssl:error] [pid 2971597:tid 2971597] (70014)End of file found: [client 216.73.216.199:62606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:50.637465 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.1:62674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:50.638097 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.1:62674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:51.007941 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.42:50724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:51.008619 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.42:50724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:51.040547 2026] [security2:error] [pid 3000192:tid 3000192] [client 114.119.149.150:57729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amsv04PYfb2TXJm2U99uoAAAABY"], referer: http://hoo-hah.co.uk?i=hh___12
[Thu Jul 30 12:04:51.278274 2026] [authz_core:error] [pid 3001173:tid 3001173] [client 57.141.0.12:45174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:51.278898 2026] [authz_core:error] [pid 3001173:tid 3001173] [client 57.141.0.12:45174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:51.672244 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.33:47610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:51.672874 2026] [authz_core:error] [pid 2996517:tid 2996517] [client 57.141.0.33:47610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:51.968041 2026] [access_compat:error] [pid 3000191:tid 3000191] [client 176.241.66.87:40459] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:52.039557 2026] [ssl:error] [pid 2982570:tid 2982570] (70014)End of file found: [client 216.73.216.199:33930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:52.171890 2026] [security2:error] [pid 2998333:tid 2998333] [client 85.208.96.212:53518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/qualifications-of-a-pastor-according-to-the-bible"] [unique_id "amsv1F425EWx0IBVuyMXRQAAAC0"]
[Thu Jul 30 12:04:52.176438 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.58:34770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:52.177085 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.58:34770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:52.241340 2026] [ssl:error] [pid 2984602:tid 2984602] (EAI 2)Name or service not known: [client 144.76.19.72:44124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:52.241368 2026] [ssl:error] [pid 2984602:tid 2984602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:52.298190 2026] [ssl:error] [pid 2995869:tid 2995869] (EAI 2)Name or service not known: [client 144.76.19.72:44128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:52.298217 2026] [ssl:error] [pid 2995869:tid 2995869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:52.521682 2026] [access_compat:error] [pid 2980995:tid 2980995] [client 103.72.86.239:40133] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:52.822637 2026] [core:error] [pid 3001032:tid 3001032] [client 57.141.0.66:23986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:52.822682 2026] [core:error] [pid 3001032:tid 3001032] [client 57.141.0.66:23986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:52.897174 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.45:43922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:52.897824 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.45:43922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:52.981390 2026] [core:error] [pid 2993321:tid 2993321] [client 66.249.66.194:35604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:52.981419 2026] [core:error] [pid 2993321:tid 2993321] [client 66.249.66.194:35604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:53.041729 2026] [core:error] [pid 2992180:tid 2992180] (13)Permission denied: [client 216.73.216.199:62488] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iint_cache/store_user
[Thu Jul 30 12:04:53.059125 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.44:35622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:53.059741 2026] [authz_core:error] [pid 2984602:tid 2984602] [client 57.141.0.44:35622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:53.537032 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.12:45186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:53.537672 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.12:45186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:53.625203 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.54:43482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:53.625826 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.54:43482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:54.135333 2026] [security2:error] [pid 3001024:tid 3001024] [client 74.7.227.154:52270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hazardous-materials.co.uk.ditchfest.com"] [uri "/"] [unique_id "amsv1hqlWy5zZu98gbXJmgAAAD4"]
[Thu Jul 30 12:04:54.205764 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.47:55664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:54.206404 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.47:55664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:54.499428 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.21:21766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:54.500049 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.21:21766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:54.547862 2026] [ssl:error] [pid 2992180:tid 2992180] (70014)End of file found: [client 216.73.216.199:62488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:54.834946 2026] [access_compat:error] [pid 2983473:tid 2983473] [client 157.20.138.62:62026] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:55.074561 2026] [authz_core:error] [pid 3000979:tid 3000979] [client 57.141.0.28:28820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:55.075222 2026] [authz_core:error] [pid 3000979:tid 3000979] [client 57.141.0.28:28820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:55.091809 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.30:52216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:55.092543 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.30:52216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:55.378298 2026] [ssl:error] [pid 2987552:tid 2987552] (EAI 2)Name or service not known: [client 144.76.19.72:44132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:55.378349 2026] [ssl:error] [pid 2987552:tid 2987552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:55.434625 2026] [ssl:error] [pid 2993320:tid 2993320] (EAI 2)Name or service not known: [client 144.76.19.72:44140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:55.434675 2026] [ssl:error] [pid 2993320:tid 2993320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:55.440523 2026] [authz_core:error] [pid 3000755:tid 3000755] [client 57.141.0.21:21772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:55.441154 2026] [authz_core:error] [pid 3000755:tid 3000755] [client 57.141.0.21:21772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:55.683420 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.26:62992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:55.684861 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.26:62992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:55.750432 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.1:62688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:55.751105 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.1:62688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:55.867109 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.30:52222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:55.867728 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.30:52222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:56.359306 2026] [ssl:error] [pid 3000980:tid 3000980] (70014)End of file found: [client 216.73.216.199:32513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:04:56.534340 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.23:61556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:56.534976 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.23:61556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:56.841941 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.63:22102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:56.842604 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.63:22102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:56.974365 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.33:47622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:56.974983 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.33:47622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:57.512330 2026] [authz_core:error] [pid 3001024:tid 3001024] [client 57.141.0.41:28958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:57.512984 2026] [authz_core:error] [pid 3001024:tid 3001024] [client 57.141.0.41:28958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:57.580660 2026] [access_compat:error] [pid 3000940:tid 3000940] [client 176.241.66.87:56740] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:04:57.985744 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.45:24620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:57.986395 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.45:24620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:58.490834 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.29:57330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:58.491458 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.29:57330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:58.492707 2026] [ssl:error] [pid 3001024:tid 3001024] (EAI 2)Name or service not known: [client 144.76.19.72:44144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:58.492748 2026] [ssl:error] [pid 3001024:tid 3001024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:58.547747 2026] [ssl:error] [pid 2992077:tid 2992077] (EAI 2)Name or service not known: [client 144.76.19.72:44146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:04:58.547795 2026] [ssl:error] [pid 2992077:tid 2992077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:04:59.436913 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.10:62818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:59.437575 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.10:62818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:59.482199 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.36:61342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:59.482834 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.36:61342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:59.653494 2026] [core:error] [pid 2989187:tid 2989187] [client 66.249.66.66:50149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:59.653545 2026] [core:error] [pid 2989187:tid 2989187] [client 66.249.66.66:50149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:04:59.787120 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.8:49446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:04:59.787749 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.8:49446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:04:59.977249 2026] [ssl:error] [pid 3001174:tid 3001174] (70014)End of file found: [client 216.73.216.199:13843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:00.197133 2026] [lsapi:warn] [pid 2983473:tid 2983473] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:05:00.283279 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.46:24036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:00.283906 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.46:24036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:00.929202 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.11:48180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:00.929827 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.11:48180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:01.004860 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.56:65482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:01.005510 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.56:65482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:01.208599 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.63:22126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:01.209239 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.63:22126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:01.557712 2026] [security2:error] [pid 2993151:tid 2993151] [client 146.255.75.37:40110] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsv3X8lFHxmuNjfvo5sRAAAAAE"]
[Thu Jul 30 12:05:01.557765 2026] [security2:error] [pid 2993151:tid 2993151] [client 146.255.75.37:40110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsv3X8lFHxmuNjfvo5sRAAAAAE"]
[Thu Jul 30 12:05:01.558084 2026] [security2:error] [pid 2993151:tid 2993151] [client 146.255.75.37:40110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsv3X8lFHxmuNjfvo5sRAAAAAE"]
[Thu Jul 30 12:05:01.603531 2026] [ssl:error] [pid 2982570:tid 2982570] (EAI 2)Name or service not known: [client 144.76.19.72:64806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:01.603593 2026] [ssl:error] [pid 2982570:tid 2982570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:01.657156 2026] [ssl:error] [pid 2987552:tid 2987552] (EAI 2)Name or service not known: [client 144.76.19.72:64812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:01.657198 2026] [ssl:error] [pid 2987552:tid 2987552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:01.790249 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.48:43656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:01.791203 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.48:43656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:01.962660 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.60:38304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:01.963310 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.60:38304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:01.970808 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.71:58646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:01.971433 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.71:58646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:02.464728 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.28:48802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:02.465380 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.28:48802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:02.800004 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.44:24568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:02.800654 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.44:24568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:03.173809 2026] [access_compat:error] [pid 2995772:tid 2995772] [client 103.72.86.239:39360] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:03.464329 2026] [access_compat:error] [pid 3000980:tid 3000980] [client 176.241.66.87:41137] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:03.855717 2026] [authz_core:error] [pid 3002247:tid 3002247] [client 57.141.0.59:32906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:03.856372 2026] [authz_core:error] [pid 3002247:tid 3002247] [client 57.141.0.59:32906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:04.232827 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.19:58894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:04.233463 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.19:58894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:04.658861 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.69:39384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:04.659519 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.69:39384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:04.714721 2026] [ssl:error] [pid 3001027:tid 3001027] (EAI 2)Name or service not known: [client 144.76.19.72:64824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:04.714754 2026] [ssl:error] [pid 3001027:tid 3001027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:04.766733 2026] [ssl:error] [pid 3002247:tid 3002247] (EAI 2)Name or service not known: [client 144.76.19.72:64840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:04.766769 2026] [ssl:error] [pid 3002247:tid 3002247] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:04.941622 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.70:40050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:04.942259 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.70:40050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:05.072315 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.2:59206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:05.072937 2026] [authz_core:error] [pid 2993321:tid 2993321] [client 57.141.0.2:59206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:05.108779 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.66:44852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:05.109510 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.66:44852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:05.320972 2026] [access_compat:error] [pid 2989187:tid 2989187] [client 157.20.138.62:62601] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:05.566432 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.4:38476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:05.567089 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.4:38476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:06.299461 2026] [ssl:error] [pid 2992180:tid 2992180] (70014)End of file found: [client 216.73.216.199:54567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:06.322956 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.28:48818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:06.323609 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.28:48818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:06.340231 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.36:62450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:06.340854 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.36:62450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:06.577760 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.21:63596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:06.578383 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.21:63596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:06.611599 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.17:30320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:06.612219 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.17:30320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:07.094740 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.37:23482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:07.095445 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.37:23482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:07.203319 2026] [ssl:error] [pid 2998990:tid 2998990] (70014)End of file found: [client 216.73.216.199:22360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:07.208573 2026] [authz_core:error] [pid 3002247:tid 3002247] [client 57.141.0.11:48198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:07.209194 2026] [authz_core:error] [pid 3002247:tid 3002247] [client 57.141.0.11:48198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:07.248190 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.13:61754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:07.248815 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.13:61754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:07.258468 2026] [security2:error] [pid 3002313:tid 3002313] [client 102.89.41.45:5396] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsv4zmtYY6x9kEXZXLVXAAAAAc"]
[Thu Jul 30 12:05:07.258523 2026] [security2:error] [pid 3002313:tid 3002313] [client 102.89.41.45:5396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsv4zmtYY6x9kEXZXLVXAAAAAc"]
[Thu Jul 30 12:05:07.258791 2026] [security2:error] [pid 3002313:tid 3002313] [client 102.89.41.45:5396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsv4zmtYY6x9kEXZXLVXAAAAAc"]
[Thu Jul 30 12:05:07.524151 2026] [authz_core:error] [pid 3001031:tid 3001031] [client 57.141.0.67:46172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:07.524779 2026] [authz_core:error] [pid 3001031:tid 3001031] [client 57.141.0.67:46172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:07.668726 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.13:61768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:07.669350 2026] [authz_core:error] [pid 3000191:tid 3000191] [client 57.141.0.13:61768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:07.678007 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.36:62456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:07.678656 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.36:62456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:07.694052 2026] [ssl:error] [pid 3001025:tid 3001025] (70014)End of file found: [client 216.73.216.199:6406] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:07.723348 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 103.59.160.131:52966] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sodium_compat/namespaced/error_log
[Thu Jul 30 12:05:07.825673 2026] [ssl:error] [pid 3002314:tid 3002314] (EAI 2)Name or service not known: [client 144.76.19.72:64842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:07.825724 2026] [ssl:error] [pid 3002314:tid 3002314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:07.900785 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:64856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:07.900811 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:08.037412 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.48:43672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:08.038036 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.48:43672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:08.638682 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.8:64922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:08.639338 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.8:64922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:08.646076 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.60:38310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:08.646760 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.60:38310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:09.116139 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 103.59.160.131:50142] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sodium_compat/namespaced/Core/error_log
[Thu Jul 30 12:05:09.901331 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.9:20746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:09.901951 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.9:20746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:10.045269 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.49:55794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:10.045891 2026] [authz_core:error] [pid 2993151:tid 2993151] [client 57.141.0.49:55794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:10.057261 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.61:30666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:10.057894 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.61:30666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:10.726688 2026] [lsapi:warn] [pid 2998281:tid 2998281] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:05:10.958475 2026] [ssl:error] [pid 3001104:tid 3001104] (EAI 2)Name or service not known: [client 144.76.19.72:38114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:10.958521 2026] [ssl:error] [pid 3001104:tid 3001104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:10.969244 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.71:22876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:10.969890 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.71:22876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:11.014530 2026] [ssl:error] [pid 2973064:tid 2973064] (EAI 2)Name or service not known: [client 144.76.19.72:38128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:11.014562 2026] [ssl:error] [pid 2973064:tid 2973064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:11.268205 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.45:25142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:11.268827 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.45:25142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:11.317410 2026] [security2:error] [pid 2997321:tid 2997321] [client 114.119.146.111:29629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/alpha-course-starting-this-sunday"] [unique_id "amsv521JCe1oU6LU0FSIMgAAACg"], referer: http://www.erskinenazarene.co.uk/join-us-sunday-morning
[Thu Jul 30 12:05:11.460862 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.66:44862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:11.461513 2026] [authz_core:error] [pid 2989187:tid 2989187] [client 57.141.0.66:44862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:11.506438 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.20:41370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:11.507056 2026] [authz_core:error] [pid 2998989:tid 2998989] [client 57.141.0.20:41370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:11.976111 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.59:44110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:11.976744 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.59:44110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:12.321355 2026] [core:error] [pid 2998333:tid 2998333] (13)Permission denied: [client 216.73.216.199:45044] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/libexec/audit-functions
[Thu Jul 30 12:05:12.484934 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.24:63888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:12.486058 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.24:63888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:12.928731 2026] [ssl:error] [pid 2998333:tid 2998333] (70014)End of file found: [client 216.73.216.199:45044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:13.245964 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.19:65392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:13.246630 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.19:65392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:13.334662 2026] [authz_core:error] [pid 3001024:tid 3001024] [client 57.141.0.38:31628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:13.335286 2026] [authz_core:error] [pid 3001024:tid 3001024] [client 57.141.0.38:31628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:13.607942 2026] [ssl:error] [pid 2987552:tid 2987552] (70014)End of file found: [client 216.73.216.199:18033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:13.612272 2026] [security2:error] [pid 3001027:tid 3001027] [client 114.119.146.111:29635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/alpha-course-starting-this-sunday"] [unique_id "amsv6e5YHr3yduvJZ5aTpgAAAEE"], referer: http://www.erskinenazarene.co.uk/join-us-sunday-morning
[Thu Jul 30 12:05:13.818909 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.36:31460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:13.819547 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.36:31460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:13.827050 2026] [ssl:error] [pid 3001032:tid 3001032] (70014)End of file found: [client 216.73.216.199:54522] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:13.976217 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.56:46396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:13.976839 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.56:46396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:14.068603 2026] [ssl:error] [pid 2998989:tid 2998989] (EAI 2)Name or service not known: [client 144.76.19.72:38140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:14.068643 2026] [ssl:error] [pid 2998989:tid 2998989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:14.126473 2026] [ssl:error] [pid 2998392:tid 2998392] (EAI 2)Name or service not known: [client 144.76.19.72:38148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:14.126525 2026] [ssl:error] [pid 2998392:tid 2998392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:14.168833 2026] [core:error] [pid 3002610:tid 3002610] [client 57.141.0.51:33926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:05:14.168870 2026] [core:error] [pid 3002610:tid 3002610] [client 57.141.0.51:33926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:05:14.404643 2026] [security2:error] [pid 3002247:tid 3002247] [client 47.128.19.91:51346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.inrc.org.uk"] [uri "/robots.txt"] [unique_id "amsv6tOuBS5WxF6xqXH41gAAAAY"]
[Thu Jul 30 12:05:14.539115 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.47:49746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:14.539744 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.47:49746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:14.569381 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.58:36406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:14.570012 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.58:36406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:14.781033 2026] [access_compat:error] [pid 3000942:tid 3000942] [client 176.241.66.87:58102] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:14.826830 2026] [security2:error] [pid 3001025:tid 3001025] [client 103.189.68.236:38503] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsv6sssw3Z_0tZCjUwVKAAAAD8"]
[Thu Jul 30 12:05:14.826875 2026] [security2:error] [pid 3001025:tid 3001025] [client 103.189.68.236:38503] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsv6sssw3Z_0tZCjUwVKAAAAD8"]
[Thu Jul 30 12:05:14.827130 2026] [security2:error] [pid 3001025:tid 3001025] [client 103.189.68.236:38503] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsv6sssw3Z_0tZCjUwVKAAAAD8"]
[Thu Jul 30 12:05:15.628190 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.62:48202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:15.628817 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.62:48202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:15.751725 2026] [authz_core:error] [pid 3001172:tid 3001172] [client 57.141.0.13:36190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:15.752348 2026] [authz_core:error] [pid 3001172:tid 3001172] [client 57.141.0.13:36190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:15.849360 2026] [authz_core:error] [pid 3002247:tid 3002247] [client 57.141.0.10:36396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:15.849977 2026] [authz_core:error] [pid 3002247:tid 3002247] [client 57.141.0.10:36396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:15.899604 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.2:37110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:15.900229 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.2:37110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:15.911495 2026] [access_compat:error] [pid 2996755:tid 2996755] [client 157.20.138.62:63181] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:16.316694 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.21:26826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:16.317323 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.21:26826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:16.915995 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.46:27778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:16.916631 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.46:27778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:16.955872 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.18:23478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:16.956491 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.18:23478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:17.179709 2026] [ssl:error] [pid 3001174:tid 3001174] (EAI 2)Name or service not known: [client 144.76.19.72:38154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:17.179748 2026] [ssl:error] [pid 3001174:tid 3001174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:17.232093 2026] [ssl:error] [pid 2998823:tid 2998823] (EAI 2)Name or service not known: [client 144.76.19.72:38156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:17.232121 2026] [ssl:error] [pid 2998823:tid 2998823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:17.237624 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.71:49992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:17.238243 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.71:49992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:17.278547 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.47:49756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:17.279164 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.47:49756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:17.892878 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.50:31678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:17.893516 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.50:31678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:18.247851 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.52:26578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:18.248550 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.52:26578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:18.347804 2026] [ssl:error] [pid 2995772:tid 2995772] (70014)End of file found: [client 216.73.216.199:16648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:18.646696 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.71:50002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:18.647325 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.71:50002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:18.748584 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.59:41004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:18.749475 2026] [authz_core:error] [pid 2998823:tid 2998823] [client 57.141.0.59:41004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:18.924878 2026] [authz_core:error] [pid 3001104:tid 3001104] [client 66.249.66.35:64031] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:05:18.927574 2026] [authz_core:error] [pid 3001104:tid 3001104] [client 66.249.66.35:64031] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:05:18.985846 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.32:40916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:18.986469 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.32:40916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:19.449757 2026] [ssl:error] [pid 2998333:tid 2998333] (70014)End of file found: [client 216.73.216.199:10416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:19.639918 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.9:51798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:19.640551 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.9:51798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:19.949869 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.23:22214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:19.950496 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.23:22214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:20.288478 2026] [ssl:error] [pid 3001024:tid 3001024] (EAI 2)Name or service not known: [client 144.76.19.72:48912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:20.288518 2026] [ssl:error] [pid 3001024:tid 3001024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:20.342927 2026] [ssl:error] [pid 3001025:tid 3001025] (EAI 2)Name or service not known: [client 144.76.19.72:48914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:20.342965 2026] [ssl:error] [pid 3001025:tid 3001025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:20.431611 2026] [access_compat:error] [pid 3000940:tid 3000940] [client 176.241.66.87:57808] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:20.584393 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.28:23628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:20.585017 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.28:23628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:20.896842 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.34:60220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:20.897475 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.34:60220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:21.185419 2026] [lsapi:warn] [pid 2987552:tid 2987552] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:05:21.195600 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.2:37114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:21.196287 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.2:37114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:21.426078 2026] [authz_core:error] [pid 3001024:tid 3001024] [client 57.141.0.17:51436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:21.426721 2026] [authz_core:error] [pid 3001024:tid 3001024] [client 57.141.0.17:51436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:21.667669 2026] [security2:error] [pid 2996755:tid 2996755] [client 85.208.96.212:13906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3906.0.html"] [unique_id "amsv8VU3qJnrwyZYo5hvDwAAACQ"]
[Thu Jul 30 12:05:21.981947 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.52:28868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:21.982584 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.52:28868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:21.997283 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.40:27870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:21.997899 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.40:27870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:22.159311 2026] [ssl:error] [pid 2998335:tid 2998335] (70014)End of file found: [client 216.73.216.199:53869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:22.844916 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.31:34436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:22.845570 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.31:34436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:23.125893 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.36:23552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:23.126523 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.36:23552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:23.399324 2026] [ssl:error] [pid 3000980:tid 3000980] (EAI 2)Name or service not known: [client 144.76.19.72:48926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:23.399374 2026] [ssl:error] [pid 3000980:tid 3000980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:23.455540 2026] [ssl:error] [pid 2996755:tid 2996755] (EAI 2)Name or service not known: [client 144.76.19.72:48928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:23.455567 2026] [ssl:error] [pid 2996755:tid 2996755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:23.461224 2026] [authz_core:error] [pid 3001172:tid 3001172] [client 57.141.0.2:37116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:23.461841 2026] [authz_core:error] [pid 3001172:tid 3001172] [client 57.141.0.2:37116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:23.844984 2026] [ssl:error] [pid 2983473:tid 2983473] (70014)End of file found: [client 216.73.216.199:55358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:23.872925 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.14:27104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:23.873552 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.14:27104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:24.064968 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.1:34400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:24.065605 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.1:34400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:24.183046 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.71:62426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:24.183681 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.71:62426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:24.700954 2026] [authz_core:error] [pid 3001104:tid 3001104] [client 57.141.0.27:45538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:24.701596 2026] [authz_core:error] [pid 3001104:tid 3001104] [client 57.141.0.27:45538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:25.475791 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.9:39422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:25.476450 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.9:39422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:25.656116 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:28878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:25.656739 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:28878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:25.665299 2026] [access_compat:error] [pid 3002610:tid 3002610] [client 176.241.66.87:42445] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:25.771776 2026] [ssl:error] [pid 2995772:tid 2995772] (70014)End of file found: [client 216.73.216.199:63684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:25.977640 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.26:58706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:25.978309 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.26:58706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:26.329407 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:51444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:26.330113 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.17:51444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:26.438250 2026] [access_compat:error] [pid 2998395:tid 2998395] [client 157.20.138.62:63767] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:26.493264 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.47:33224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:26.493883 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.47:33224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:26.535657 2026] [ssl:error] [pid 2997321:tid 2997321] (EAI 2)Name or service not known: [client 144.76.19.72:48930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:26.535694 2026] [ssl:error] [pid 2997321:tid 2997321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:26.644312 2026] [ssl:error] [pid 2998333:tid 2998333] (EAI 2)Name or service not known: [client 144.76.19.72:48932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:26.644343 2026] [ssl:error] [pid 2998333:tid 2998333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:26.898318 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.19:63796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:26.899029 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.19:63796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:27.101241 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.71:62438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:27.101869 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.71:62438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:27.457770 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.49:23022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:27.458440 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.49:23022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:27.463794 2026] [ssl:error] [pid 2987552:tid 2987552] (70014)End of file found: [client 216.73.216.199:22195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:27.883532 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.4:40382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:27.884165 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.4:40382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:28.216840 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.46:52614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:28.217472 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.46:52614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:28.445539 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.11:27302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:28.446185 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.11:27302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:28.716251 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.30:32772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:28.716886 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.30:32772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:28.942736 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.1:34404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:28.943388 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.1:34404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:29.270926 2026] [ssl:error] [pid 2982570:tid 2982570] (70014)End of file found: [client 216.73.216.199:2558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:29.691646 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.37:22082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:29.692274 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.37:22082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:29.727810 2026] [ssl:error] [pid 2983473:tid 2983473] (EAI 2)Name or service not known: [client 144.76.19.72:31326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:29.727847 2026] [ssl:error] [pid 2983473:tid 2983473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:29.782409 2026] [ssl:error] [pid 2987376:tid 2987376] (EAI 2)Name or service not known: [client 144.76.19.72:31342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:29.782443 2026] [ssl:error] [pid 2987376:tid 2987376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:30.195943 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.12:64592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:30.196581 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.12:64592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:30.305475 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.10:61468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:30.306115 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.10:61468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:30.365698 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.39:28768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:30.366331 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.39:28768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:31.208021 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.45:21126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:31.208669 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.45:21126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:31.580015 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.68:56360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:31.580645 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.68:56360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:31.654324 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.47:33496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:31.654952 2026] [authz_core:error] [pid 2995772:tid 2995772] [client 57.141.0.47:33496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:31.828363 2026] [lsapi:warn] [pid 2980995:tid 2980995] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:05:32.065095 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.61:32476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:32.065720 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.61:32476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:32.141745 2026] [access_compat:error] [pid 3002610:tid 3002610] [client 103.72.86.239:40764] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:32.398415 2026] [ssl:error] [pid 2981908:tid 2981908] (70014)End of file found: [client 216.73.216.199:48453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:32.608771 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.36:35952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:32.609423 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.36:35952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:32.790417 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.28:39528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:32.791037 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.28:39528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:32.874724 2026] [ssl:error] [pid 3002313:tid 3002313] (EAI 2)Name or service not known: [client 144.76.19.72:31350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:32.874761 2026] [ssl:error] [pid 3002313:tid 3002313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:32.889196 2026] [ssl:error] [pid 2973064:tid 2973064] (70014)End of file found: [client 216.73.216.199:13705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:32.927985 2026] [ssl:error] [pid 3001172:tid 3001172] (EAI 2)Name or service not known: [client 144.76.19.72:31356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:32.928023 2026] [ssl:error] [pid 3001172:tid 3001172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:32.983257 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.39:28770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:32.983874 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.39:28770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:33.076357 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.20:46258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:33.076981 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.20:46258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:33.530596 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.32:31512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:33.531221 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.32:31512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:33.897913 2026] [security2:error] [pid 3001025:tid 3001025] [client 85.208.96.208:51700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6360.0/prev_next,prev.html"] [unique_id "amsv_cssw3Z_0tZCjUwVMQAAAD8"]
[Thu Jul 30 12:05:34.132257 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.18:39398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:34.132888 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.18:39398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:34.684676 2026] [security2:error] [pid 3000942:tid 3000942] [client 216.73.216.199:30995] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/systemd.conf"] [unique_id "amsv_uxwg19y0_eCEz_yrAAAACU"]
[Thu Jul 30 12:05:34.684966 2026] [security2:error] [pid 3000942:tid 3000942] [client 216.73.216.199:30995] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/systemd.conf"] [unique_id "amsv_uxwg19y0_eCEz_yrAAAACU"]
[Thu Jul 30 12:05:34.685191 2026] [security2:error] [pid 3000942:tid 3000942] [client 216.73.216.199:30995] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/systemd.conf"] [unique_id "amsv_uxwg19y0_eCEz_yrAAAACU"]
[Thu Jul 30 12:05:34.723252 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.28:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:34.723874 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.28:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:35.051153 2026] [security2:error] [pid 2980995:tid 2980995] [client 20.104.137.252:64786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsv_8RsD2vmyNGbhhopXAAAABE"]
[Thu Jul 30 12:05:35.051319 2026] [security2:error] [pid 2980995:tid 2980995] [client 20.104.137.252:64786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsv_8RsD2vmyNGbhhopXAAAABE"]
[Thu Jul 30 12:05:35.051677 2026] [security2:error] [pid 2980995:tid 2980995] [client 20.104.137.252:64786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dbstart.co.uk"] [uri "/.env"] [unique_id "amsv_8RsD2vmyNGbhhopXAAAABE"]
[Thu Jul 30 12:05:35.085921 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.21:30948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:35.086553 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.21:30948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:35.102309 2026] [ssl:error] [pid 3000942:tid 3000942] (70014)End of file found: [client 216.73.216.199:30995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:35.225804 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.67:34242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:35.226436 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.67:34242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:35.452874 2026] [authz_core:error] [pid 3003638:tid 3003638] [client 57.141.0.13:39988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:35.453543 2026] [authz_core:error] [pid 3003638:tid 3003638] [client 57.141.0.13:39988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:35.573281 2026] [access_compat:error] [pid 3003765:tid 3003765] [client 103.25.250.251:4187] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:35.602231 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.10:61470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:35.602851 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.10:61470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:35.982546 2026] [ssl:error] [pid 2993320:tid 2993320] (EAI 2)Name or service not known: [client 144.76.19.72:31364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:35.982582 2026] [ssl:error] [pid 2993320:tid 2993320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:36.039718 2026] [ssl:error] [pid 3001025:tid 3001025] (EAI 2)Name or service not known: [client 144.76.19.72:31366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:36.039765 2026] [ssl:error] [pid 3001025:tid 3001025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:36.545478 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.25:48492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:36.546118 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.25:48492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:36.778250 2026] [access_compat:error] [pid 3001139:tid 3001139] [client 176.241.66.87:43123] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:36.967403 2026] [access_compat:error] [pid 3000192:tid 3000192] [client 157.20.138.62:64351] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:37.096200 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.10:21980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:37.096885 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.10:21980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:37.113061 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.10:21984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:37.113692 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.10:21984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:37.343665 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.30:43812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:37.344293 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.30:43812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:37.842275 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.10:22000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:37.842901 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.10:22000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:37.955083 2026] [core:error] [pid 2983473:tid 2983473] [client 66.249.66.4:60759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:05:37.955110 2026] [core:error] [pid 2983473:tid 2983473] [client 66.249.66.4:60759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:05:37.976452 2026] [core:error] [pid 3000940:tid 3000940] [client 66.249.66.167:51268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:05:37.976473 2026] [core:error] [pid 3000940:tid 3000940] [client 66.249.66.167:51268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:05:38.113907 2026] [ssl:error] [pid 3003847:tid 3003847] (70014)End of file found: [client 216.73.216.199:40384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:38.141238 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.62:57994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:38.141928 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.62:57994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:38.458137 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.43:56828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:38.458759 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.43:56828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:38.622442 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.66:29930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:38.623060 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.66:29930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:38.834598 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.15:41612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:38.835220 2026] [authz_core:error] [pid 2983473:tid 2983473] [client 57.141.0.15:41612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:39.096534 2026] [ssl:error] [pid 3003929:tid 3003929] (EAI 2)Name or service not known: [client 144.76.19.72:31372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:39.096578 2026] [ssl:error] [pid 3003929:tid 3003929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:39.151161 2026] [ssl:error] [pid 3000940:tid 3000940] (EAI 2)Name or service not known: [client 144.76.19.72:31382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:39.151204 2026] [ssl:error] [pid 3000940:tid 3000940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:39.491191 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.49:58076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:39.491807 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.49:58076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:39.542966 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.15:41626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:39.543596 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.15:41626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:39.619392 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.70:62762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:39.620047 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.70:62762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:39.622653 2026] [core:error] [pid 2995373:tid 2995373] (13)Permission denied: [client 216.73.216.199:9977] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libnvdimm/sections/__jump_table
[Thu Jul 30 12:05:40.387136 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.35:44116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:40.387757 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.35:44116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:40.640486 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.69:37154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:40.641127 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.69:37154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:40.959568 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.34:32436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:40.960187 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.34:32436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:41.079835 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.50:21032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:41.080462 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.50:21032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:41.127602 2026] [security2:error] [pid 2995373:tid 2995373] [client 216.73.216.199:9977] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/json.ini"] [unique_id "amswBRT73ixQ_qVcZ8xGaQAAAAg"]
[Thu Jul 30 12:05:41.127884 2026] [security2:error] [pid 2995373:tid 2995373] [client 216.73.216.199:9977] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/json.ini"] [unique_id "amswBRT73ixQ_qVcZ8xGaQAAAAg"]
[Thu Jul 30 12:05:41.128109 2026] [security2:error] [pid 2995373:tid 2995373] [client 216.73.216.199:9977] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/json.ini"] [unique_id "amswBRT73ixQ_qVcZ8xGaQAAAAg"]
[Thu Jul 30 12:05:41.189226 2026] [authz_core:error] [pid 3001031:tid 3001031] [client 57.141.0.46:22732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:41.189853 2026] [authz_core:error] [pid 3001031:tid 3001031] [client 57.141.0.46:22732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:41.990630 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.59:27294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:41.991263 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.59:27294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:42.205085 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:20068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:42.205112 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:42.258026 2026] [ssl:error] [pid 2998281:tid 2998281] (EAI 2)Name or service not known: [client 144.76.19.72:20074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:42.258057 2026] [ssl:error] [pid 2998281:tid 2998281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:42.332559 2026] [ssl:error] [pid 2995373:tid 2995373] (70014)End of file found: [client 216.73.216.199:9977] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:42.406618 2026] [lsapi:warn] [pid 3001031:tid 3001031] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:05:42.465186 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.34:32446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:42.465809 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.34:32446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:42.485336 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.22:33780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:42.485955 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.22:33780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:42.488038 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.15:41630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:42.488651 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.15:41630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:42.729018 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.56:64252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:42.729648 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.56:64252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:42.794465 2026] [access_compat:error] [pid 2998335:tid 2998335] [client 176.241.66.87:43439] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:43.183627 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.19:33616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:43.184245 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.19:33616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:43.294221 2026] [access_compat:error] [pid 3001027:tid 3001027] [client 45.158.164.139:39218] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:05:43.532313 2026] [ssl:error] [pid 2987376:tid 2987376] (70014)End of file found: [client 216.73.216.199:34730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:43.748621 2026] [access_compat:error] [pid 3001025:tid 3001025] [client 103.72.86.239:38641] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:43.934487 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.10:22016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:43.935185 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.10:22016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:44.439160 2026] [ssl:error] [pid 2992180:tid 2992180] (70014)End of file found: [client 216.73.216.199:8820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:44.514188 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.64:64662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:44.514819 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.64:64662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:44.673469 2026] [access_compat:error] [pid 3001139:tid 3001139] [client 103.25.250.251:59708] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:44.741527 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.19:33620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:44.742148 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.19:33620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:44.800220 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.16:33400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:44.800833 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.16:33400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:45.309558 2026] [ssl:error] [pid 2998991:tid 2998991] (EAI 2)Name or service not known: [client 144.76.19.72:20086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:45.309585 2026] [ssl:error] [pid 2998991:tid 2998991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:45.363977 2026] [ssl:error] [pid 3000940:tid 3000940] (EAI 2)Name or service not known: [client 144.76.19.72:20098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:45.364006 2026] [ssl:error] [pid 3000940:tid 3000940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:45.490115 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.32:30572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:45.490739 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.32:30572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:45.637300 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.66:48436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:45.637920 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.66:48436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:45.832794 2026] [security2:error] [pid 2998991:tid 2998991] [client 43.153.79.218:39784] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amswCR44_fNCZ6X5fnohiAAAADs"]
[Thu Jul 30 12:05:45.848425 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.68:30586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:45.849058 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.68:30586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:45.912735 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.71:39484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:45.913350 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.71:39484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:46.105483 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.64:64672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:46.106117 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.64:64672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:46.444596 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.20:49214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:46.445221 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.20:49214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:47.229688 2026] [security2:error] [pid 2998280:tid 2998280] [client 43.153.79.218:44562] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amswC844-HqgXIL6SydYuwAAACI"], referer: http://unclaimedassets.co.uk
[Thu Jul 30 12:05:47.232189 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.17:56782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:47.232846 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.17:56782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:47.309247 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.39:54288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:47.309867 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.39:54288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:47.503837 2026] [access_compat:error] [pid 2998335:tid 2998335] [client 157.20.138.62:64939] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:47.715372 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.70:64562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:47.715989 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.70:64562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:47.931930 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.54:37650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:47.932565 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.54:37650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:48.047133 2026] [ssl:error] [pid 3002610:tid 3002610] (70014)End of file found: [client 216.73.216.199:52200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:48.302132 2026] [access_compat:error] [pid 3002313:tid 3002313] [client 176.241.66.87:59696] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:48.337079 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.20:49222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:48.337698 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.20:49222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:48.418153 2026] [ssl:error] [pid 3000940:tid 3000940] (EAI 2)Name or service not known: [client 144.76.19.72:20106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:48.418182 2026] [ssl:error] [pid 3000940:tid 3000940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:48.475563 2026] [ssl:error] [pid 3000942:tid 3000942] (EAI 2)Name or service not known: [client 144.76.19.72:20108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:48.475600 2026] [ssl:error] [pid 3000942:tid 3000942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:48.764886 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.48:21496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:48.765560 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.48:21496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:48.948620 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.71:39500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:48.949238 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.71:39500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:49.215795 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.1:58582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:49.216413 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.1:58582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:49.471799 2026] [ssl:error] [pid 3000980:tid 3000980] (70014)End of file found: [client 216.73.216.199:63417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:50.152649 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.59:56458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:50.153273 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.59:56458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:50.440714 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.12:55566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:50.441390 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.12:55566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:50.587317 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.39:54290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:50.587937 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.39:54290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:50.643143 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.3:55970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:50.643785 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.3:55970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:51.282144 2026] [ssl:error] [pid 2987376:tid 2987376] (70014)End of file found: [client 216.73.216.199:27079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:51.409012 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.14:34448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:51.409650 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.14:34448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:51.531223 2026] [ssl:error] [pid 2992126:tid 2992126] (EAI 2)Name or service not known: [client 144.76.19.72:27314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:51.531278 2026] [ssl:error] [pid 2992126:tid 2992126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:51.575225 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.68:30614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:51.575852 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.68:30614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:51.598526 2026] [ssl:error] [pid 3003847:tid 3003847] (EAI 2)Name or service not known: [client 144.76.19.72:27318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:51.598561 2026] [ssl:error] [pid 3003847:tid 3003847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:51.858137 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.38:61318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:51.858761 2026] [authz_core:error] [pid 2982570:tid 2982570] [client 57.141.0.38:61318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:52.080430 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.4:24694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:52.081088 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.4:24694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:52.592729 2026] [security2:error] [pid 2998392:tid 2998392] [client 185.191.171.18:42356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/kucoin-staking-redemption-period"] [unique_id "amswEPugfeh6d5r3AvUbugAAADc"]
[Thu Jul 30 12:05:52.844787 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.37:55230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:52.845441 2026] [authz_core:error] [pid 3001025:tid 3001025] [client 57.141.0.37:55230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:52.908515 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.18:39960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:52.909133 2026] [authz_core:error] [pid 3002314:tid 3002314] [client 57.141.0.18:39960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:52.945151 2026] [lsapi:warn] [pid 3003847:tid 3003847] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:05:53.133299 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.36:54180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:53.133921 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.36:54180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:53.160661 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.55:56082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:53.161276 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.55:56082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:53.359565 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:42426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:53.360218 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.35:42426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:53.646194 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.68:30620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:53.646818 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.68:30620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:54.035028 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.48:21520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:54.035684 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.48:21520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:54.037829 2026] [access_compat:error] [pid 3002314:tid 3002314] [client 176.241.66.87:44109] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:54.477794 2026] [access_compat:error] [pid 2976711:tid 2976711] [client 103.72.86.239:38158] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:54.655027 2026] [ssl:error] [pid 3003847:tid 3003847] (EAI 2)Name or service not known: [client 144.76.19.72:27334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:54.655087 2026] [ssl:error] [pid 3003847:tid 3003847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:54.707883 2026] [ssl:error] [pid 3002313:tid 3002313] (EAI 2)Name or service not known: [client 144.76.19.72:27346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:54.707913 2026] [ssl:error] [pid 3002313:tid 3002313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:54.975123 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.46:56642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:54.975742 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.46:56642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:55.054860 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.59:56484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:55.055505 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.59:56484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:55.399443 2026] [access_compat:error] [pid 3003638:tid 3003638] [client 103.25.250.251:4188] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:55.494364 2026] [core:error] [pid 2986805:tid 2986805] (13)Permission denied: [client 216.73.216.199:12145] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/serio_raw/sections/__ex_table
[Thu Jul 30 12:05:55.603516 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.41:21284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:55.604162 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.41:21284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:56.129853 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.30:31248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:56.130471 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.30:31248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:56.398563 2026] [ssl:error] [pid 2986805:tid 2986805] (70014)End of file found: [client 216.73.216.199:12145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:56.521931 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.65:31406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:56.522589 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.65:31406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:56.565823 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.70:64568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:56.566459 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.70:64568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:56.698606 2026] [ssl:error] [pid 2981908:tid 2981908] (70014)End of file found: [client 216.73.216.199:59013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:56.745419 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.60:56402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:56.746044 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.60:56402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:56.829416 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.71:59040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:56.830061 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.71:59040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:56.875181 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.44:63644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:56.875895 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.44:63644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:57.778503 2026] [ssl:error] [pid 3000980:tid 3000980] (EAI 2)Name or service not known: [client 144.76.19.72:27360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:57.778542 2026] [ssl:error] [pid 3000980:tid 3000980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:57.834881 2026] [ssl:error] [pid 2998333:tid 2998333] (EAI 2)Name or service not known: [client 144.76.19.72:27374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:05:57.834927 2026] [ssl:error] [pid 2998333:tid 2998333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:05:58.050923 2026] [access_compat:error] [pid 2993320:tid 2993320] [client 157.20.138.62:65526] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:05:58.086832 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.23:22892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:58.087488 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.23:22892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:58.101122 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.3:55984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:58.101797 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.3:55984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:58.164225 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.47:43362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:58.164882 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.47:43362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:58.180535 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.42:34412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:58.181178 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.42:34412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:58.208696 2026] [ssl:error] [pid 2998281:tid 2998281] (70014)End of file found: [client 216.73.216.199:63866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:05:59.207099 2026] [security2:error] [pid 2992126:tid 2992126] [client 85.208.96.212:14602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amswF4JmgRTpgLyI8_c7JAAAAB8"]
[Thu Jul 30 12:05:59.228989 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.63:56848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:59.229623 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.63:56848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:59.330594 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.55:51016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:59.331234 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.55:51016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:05:59.645184 2026] [security2:error] [pid 2992126:tid 2992126] [client 85.208.96.204:58354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7105.0/prev_next,prev.html"] [unique_id "amswF4JmgRTpgLyI8_c7JQAAAB8"]
[Thu Jul 30 12:05:59.793158 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.17:55008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:05:59.793781 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.17:55008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:00.065233 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.45:44156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:00.066667 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.45:44156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:00.245413 2026] [access_compat:error] [pid 3001027:tid 3001027] [client 176.241.66.87:51855] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:00.472679 2026] [authz_core:error] [pid 3004741:tid 3004741] [client 57.141.0.31:36830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:00.474177 2026] [authz_core:error] [pid 3004741:tid 3004741] [client 57.141.0.31:36830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:00.518842 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.71:59046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:00.520298 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.71:59046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:00.892550 2026] [ssl:error] [pid 3003638:tid 3003638] (EAI 2)Name or service not known: [client 144.76.19.72:62320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:00.892590 2026] [ssl:error] [pid 3003638:tid 3003638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:00.919113 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.54:60136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:00.919751 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.54:60136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:00.998372 2026] [ssl:error] [pid 2987552:tid 2987552] (EAI 2)Name or service not known: [client 144.76.19.72:62326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:00.998401 2026] [ssl:error] [pid 2987552:tid 2987552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:01.226661 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.12:40692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:01.227292 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.12:40692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:01.623786 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.25:32592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:01.624443 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.25:32592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:01.713139 2026] [ssl:error] [pid 3004769:tid 3004769] (70014)End of file found: [client 216.73.216.199:14864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:02.013026 2026] [ssl:error] [pid 2987376:tid 2987376] (70014)End of file found: [client 216.73.216.199:5040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:02.246951 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.19:55518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:02.247589 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.19:55518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:02.388200 2026] [core:error] [pid 3004768:tid 3004768] [client 66.249.66.167:62641] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:02.388226 2026] [core:error] [pid 3004768:tid 3004768] [client 66.249.66.167:62641] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:02.418205 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.67:44944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:02.418847 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.67:44944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:02.761510 2026] [authz_core:error] [pid 3004767:tid 3004767] [client 57.141.0.40:64874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:02.762134 2026] [authz_core:error] [pid 3004767:tid 3004767] [client 57.141.0.40:64874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:02.965140 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.47:37976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:02.965760 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.47:37976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:03.545619 2026] [lsapi:warn] [pid 2998391:tid 2998391] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:06:03.610936 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.8:56272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:03.611571 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.8:56272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:03.745001 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.50:47630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:03.745635 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.50:47630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:04.054514 2026] [ssl:error] [pid 3000942:tid 3000942] (EAI 2)Name or service not known: [client 144.76.19.72:62332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:04.054535 2026] [ssl:error] [pid 3000942:tid 3000942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:04.107788 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:62338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:04.107833 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:04.225448 2026] [ssl:error] [pid 3001138:tid 3001138] (70014)End of file found: [client 216.73.216.199:29631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:04.225798 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.5:23650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:04.226424 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.5:23650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:04.952080 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.42:64610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:04.952704 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.42:64610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:04.974920 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.12:40704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:04.975573 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.12:40704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:05.121623 2026] [authz_core:error] [pid 2998391:tid 2998391] [client 57.141.0.29:55024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:05.122258 2026] [authz_core:error] [pid 2998391:tid 2998391] [client 57.141.0.29:55024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:05.250061 2026] [access_compat:error] [pid 2995446:tid 2995446] [client 103.72.86.239:39400] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:05.891567 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.63:23940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:05.892210 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.63:23940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:06.022336 2026] [access_compat:error] [pid 3000942:tid 3000942] [client 176.241.66.87:43303] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:06.086902 2026] [access_compat:error] [pid 2992180:tid 2992180] [client 103.25.250.251:59709] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:06.230838 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.43:22376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:06.231467 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.43:22376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:06.281632 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.9:44208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:06.282271 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.9:44208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:06.540888 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.47:37990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:06.541521 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.47:37990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:06.731213 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.1:34994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:06.731838 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.1:34994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:06.762166 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.20:33914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:06.762794 2026] [authz_core:error] [pid 2995869:tid 2995869] [client 57.141.0.20:33914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:07.162994 2026] [ssl:error] [pid 3000940:tid 3000940] (EAI 2)Name or service not known: [client 144.76.19.72:62354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:07.163021 2026] [ssl:error] [pid 3000940:tid 3000940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:07.217466 2026] [ssl:error] [pid 3004741:tid 3004741] (EAI 2)Name or service not known: [client 144.76.19.72:62356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:07.217494 2026] [ssl:error] [pid 3004741:tid 3004741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:07.258303 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.59:53384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:07.258946 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.59:53384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:08.143321 2026] [ssl:error] [pid 2998894:tid 2998894] (70014)End of file found: [client 216.73.216.199:4332] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:08.186202 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.59:53392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:08.186853 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.59:53392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:08.421570 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.13:33146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:08.422616 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.13:33146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:08.534337 2026] [access_compat:error] [pid 2987376:tid 2987376] [client 157.20.138.62:49735] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:08.734322 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.48:60064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:08.734978 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.48:60064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:09.081786 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.15:54060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:09.082412 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.15:54060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:09.344770 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.31:59366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:09.345397 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.31:59366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:09.357414 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.2:32262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:09.358441 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.2:32262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:09.946092 2026] [ssl:error] [pid 3004769:tid 3004769] (70014)End of file found: [client 216.73.216.199:61492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:10.031167 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.24:37222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:10.031792 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.24:37222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:10.047111 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.37:52184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:10.047843 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.37:52184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:10.271726 2026] [ssl:error] [pid 3000715:tid 3000715] (EAI 2)Name or service not known: [client 144.76.19.72:23000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:10.271765 2026] [ssl:error] [pid 3000715:tid 3000715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:10.364858 2026] [ssl:error] [pid 2998395:tid 2998395] (EAI 2)Name or service not known: [client 144.76.19.72:23008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:10.364888 2026] [ssl:error] [pid 2998395:tid 2998395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:10.386816 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.50:47638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:10.387466 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.50:47638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:10.453637 2026] [ssl:error] [pid 3004766:tid 3004766] (70014)End of file found: [client 216.73.216.199:17310] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:11.175290 2026] [access_compat:error] [pid 2998333:tid 2998333] [client 152.228.220.143:60430] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/children-of-men
[Thu Jul 30 12:06:11.175394 2026] [access_compat:error] [pid 2998333:tid 2998333] [client 152.228.220.143:60430] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:06:11.215754 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.11:56522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:11.216371 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.11:56522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:11.236913 2026] [security2:error] [pid 2986805:tid 2986805] [client 43.135.172.89:34336] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ilkagriese.com"] [uri "/"] [unique_id "amswI9C2no2__zwUftKvLgAAAAo"]
[Thu Jul 30 12:06:11.267284 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.38:46256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:11.267906 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.38:46256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:11.628172 2026] [access_compat:error] [pid 3002610:tid 3002610] [client 176.241.66.87:60966] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:11.690004 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.27:24652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:11.690641 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.27:24652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:11.717476 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.34:43174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:11.718108 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.34:43174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:12.500727 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.2:32270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:12.501365 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.2:32270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:12.886002 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.60:64012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:12.886652 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.60:64012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:13.142490 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.3:61986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:13.143167 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.3:61986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:13.200161 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.35:46852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:13.200777 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.35:46852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:13.403130 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.47:59376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:13.403755 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.47:59376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:13.422038 2026] [ssl:error] [pid 3000942:tid 3000942] (EAI 2)Name or service not known: [client 144.76.19.72:23022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:13.422077 2026] [ssl:error] [pid 3000942:tid 3000942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:13.473624 2026] [ssl:error] [pid 3000980:tid 3000980] (EAI 2)Name or service not known: [client 144.76.19.72:23024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:13.473649 2026] [ssl:error] [pid 3000980:tid 3000980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:13.946725 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.69:49926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:13.947352 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.69:49926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:14.068288 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.9:27778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:14.068913 2026] [authz_core:error] [pid 3000942:tid 3000942] [client 57.141.0.9:27778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:14.344035 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.31:59376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:14.344663 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.31:59376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:14.499455 2026] [lsapi:warn] [pid 2992180:tid 2992180] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:06:14.518372 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.34:43186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:14.519014 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.34:43186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:14.640685 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.48:60088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:14.641304 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.48:60088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:14.967047 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.66:21902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:14.967673 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.66:21902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:15.666276 2026] [ssl:error] [pid 2986805:tid 2986805] (70014)End of file found: [client 216.73.216.199:28505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:16.037752 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.5:53928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:16.038371 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.5:53928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:16.103332 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.32:47684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:16.103977 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.32:47684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:16.230966 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.24:43020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:16.231606 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.24:43020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:16.773624 2026] [access_compat:error] [pid 2992185:tid 2992185] [client 103.25.250.251:59710] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:16.788972 2026] [ssl:error] [pid 3000942:tid 3000942] (EAI 2)Name or service not known: [client 144.76.19.72:23036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:16.789000 2026] [ssl:error] [pid 3000942:tid 3000942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:17.089160 2026] [ssl:error] [pid 3005606:tid 3005606] (EAI 2)Name or service not known: [client 144.76.19.72:23052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:17.089196 2026] [ssl:error] [pid 3005606:tid 3005606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:17.204657 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.37:28794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:17.205277 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.37:28794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:17.413285 2026] [access_compat:error] [pid 2973064:tid 2973064] [client 176.241.66.87:45443] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:17.477661 2026] [ssl:error] [pid 2998392:tid 2998392] (70014)End of file found: [client 216.73.216.199:35518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:17.501602 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.66:21914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:17.502228 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.66:21914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:17.775391 2026] [ssl:error] [pid 2992180:tid 2992180] (70014)End of file found: [client 216.73.216.199:59092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:17.911660 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.52:60032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:17.912282 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.52:60032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:18.059363 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.46:44498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:18.059988 2026] [authz_core:error] [pid 2973064:tid 2973064] [client 57.141.0.46:44498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:18.092197 2026] [access_compat:error] [pid 3002610:tid 3002610] [client 103.72.86.239:40165] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:18.159617 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.22:27580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:18.160266 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.22:27580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:18.294196 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.26:51298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:18.294819 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.26:51298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:19.113586 2026] [access_compat:error] [pid 3003847:tid 3003847] [client 157.20.138.62:50321] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:19.114249 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.25:55922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:19.114861 2026] [authz_core:error] [pid 3000980:tid 3000980] [client 57.141.0.25:55922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:19.225823 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.22:27588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:19.226482 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.22:27588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:19.637345 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.30:42780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:19.637968 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.30:42780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:19.701383 2026] [security2:error] [pid 3004704:tid 3004704] [client 137.74.93.36:49758] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amswKyuWFlOYWC3FbzjGAAAAAAQ"]
[Thu Jul 30 12:06:19.893680 2026] [authz_core:error] [pid 3005697:tid 3005697] [client 57.141.0.63:27038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:19.894362 2026] [authz_core:error] [pid 3005697:tid 3005697] [client 57.141.0.63:27038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:20.126227 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.24:43044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:20.126847 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.24:43044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:20.212536 2026] [ssl:error] [pid 2996755:tid 2996755] (EAI 2)Name or service not known: [client 144.76.19.72:52684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:20.212561 2026] [ssl:error] [pid 2996755:tid 2996755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:20.266803 2026] [ssl:error] [pid 3004740:tid 3004740] (EAI 2)Name or service not known: [client 144.76.19.72:52690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:20.266836 2026] [ssl:error] [pid 3004740:tid 3004740] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:20.494964 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.6:28840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:20.495594 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.6:28840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:20.724681 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 66.249.66.35:58746] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:06:20.727463 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 66.249.66.35:58746] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:06:20.729206 2026] [core:error] [pid 3001138:tid 3001138] (13)Permission denied: [client 216.73.216.199:61193] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/align
[Thu Jul 30 12:06:21.426718 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.32:47702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:21.427370 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.32:47702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:21.506146 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.42:28160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:21.506796 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.42:28160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:21.625759 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.12:65464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:21.626418 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.12:65464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:21.925549 2026] [ssl:error] [pid 3004704:tid 3004704] (70014)End of file found: [client 216.73.216.199:35899] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:21.967624 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.27:43392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:21.968272 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.27:43392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:22.063751 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.49:34616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:22.064400 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.49:34616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:22.322655 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.19:38726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:22.323280 2026] [authz_core:error] [pid 3000940:tid 3000940] [client 57.141.0.19:38726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:22.441114 2026] [authz_core:error] [pid 3005697:tid 3005697] [client 57.141.0.46:47690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:22.441736 2026] [authz_core:error] [pid 3005697:tid 3005697] [client 57.141.0.46:47690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:22.534778 2026] [ssl:error] [pid 3001138:tid 3001138] (70014)End of file found: [client 216.73.216.199:61193] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:23.118547 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.11:40304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:23.119201 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.11:40304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:23.271607 2026] [access_compat:error] [pid 3004766:tid 3004766] [client 176.241.66.87:45783] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:23.323134 2026] [ssl:error] [pid 3005750:tid 3005750] (EAI 2)Name or service not known: [client 144.76.19.72:52692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:23.323183 2026] [ssl:error] [pid 3005750:tid 3005750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:23.379196 2026] [ssl:error] [pid 3005697:tid 3005697] (EAI 2)Name or service not known: [client 144.76.19.72:52700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:23.379235 2026] [ssl:error] [pid 3005697:tid 3005697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:23.736927 2026] [ssl:error] [pid 2986805:tid 2986805] (70014)End of file found: [client 216.73.216.199:3605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:23.747648 2026] [authz_core:error] [pid 3005649:tid 3005649] [client 57.141.0.21:40262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:23.748276 2026] [authz_core:error] [pid 3005649:tid 3005649] [client 57.141.0.21:40262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:23.773463 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.39:23020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:23.774111 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.39:23020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:24.697772 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.40:33092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:24.698394 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.40:33092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:25.022543 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.15:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:25.023185 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.15:55168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:25.037606 2026] [lsapi:warn] [pid 2973064:tid 2973064] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:06:25.134899 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.26:61470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:25.135535 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.26:61470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:25.184485 2026] [authz_core:error] [pid 2998391:tid 2998391] [client 57.141.0.11:40310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:25.185116 2026] [authz_core:error] [pid 2998391:tid 2998391] [client 57.141.0.11:40310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:25.220211 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.46:47698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:25.220830 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.46:47698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:25.312222 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.42:28170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:25.312851 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.42:28170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:25.967439 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.3:63560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:25.968077 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.3:63560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:26.190738 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.56:62886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:26.191382 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.56:62886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:26.436380 2026] [ssl:error] [pid 2998894:tid 2998894] (EAI 2)Name or service not known: [client 144.76.19.72:52706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:26.436423 2026] [ssl:error] [pid 2998894:tid 2998894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:26.489886 2026] [ssl:error] [pid 3004741:tid 3004741] (EAI 2)Name or service not known: [client 144.76.19.72:52712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:26.489914 2026] [ssl:error] [pid 3004741:tid 3004741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:26.649801 2026] [core:error] [pid 3004740:tid 3004740] [client 66.249.66.167:63100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:26.649834 2026] [core:error] [pid 3004740:tid 3004740] [client 66.249.66.167:63100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:26.913526 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.22:27596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:26.914157 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.22:27596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:27.039177 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.9:51376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:27.039795 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.9:51376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:27.075828 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.66:63478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:27.076478 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.66:63478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:27.387055 2026] [access_compat:error] [pid 3002610:tid 3002610] [client 103.25.250.251:59711] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:27.850817 2026] [lsapi:error] [pid 2998335:tid 2998335] [client 216.73.216.199:65117] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Trait "Plesk\\Wappspector\\Matchers\\UpLevelMatcherTrait" not found in /opt/cpanel/ea-wappspector/src/Matchers/Ruby.php on line 11\n
[Thu Jul 30 12:06:28.092524 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.59:64908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:28.093156 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.59:64908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:28.367282 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.56:57026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:28.367929 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.56:57026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:28.554324 2026] [ssl:error] [pid 3004704:tid 3004704] (70014)End of file found: [client 216.73.216.199:50481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:28.649866 2026] [access_compat:error] [pid 3005696:tid 3005696] [client 103.72.86.239:40882] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:28.770016 2026] [security2:error] [pid 3005749:tid 3005749] [client 47.128.43.44:17526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "devwebsitehub.com"] [uri "/robots.txt"] [unique_id "amswNEY_RYNsTOG3GPO9oAAAACA"]
[Thu Jul 30 12:06:28.778686 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.46:47710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:28.779335 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.46:47710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:28.845515 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.45:37114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:28.846204 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.45:37114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:28.874442 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.40:27582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:28.875117 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.40:27582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:29.057570 2026] [access_compat:error] [pid 3003765:tid 3003765] [client 176.241.66.87:46084] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:29.151590 2026] [ssl:error] [pid 2996755:tid 2996755] (70014)End of file found: [client 216.73.216.199:7896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:29.524249 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.18:35688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:29.524872 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.18:35688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:29.561737 2026] [ssl:error] [pid 2992185:tid 2992185] (EAI 2)Name or service not known: [client 144.76.19.72:52722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:29.561780 2026] [ssl:error] [pid 2992185:tid 2992185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:29.564837 2026] [access_compat:error] [pid 2987552:tid 2987552] [client 157.20.138.62:50896] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:29.619779 2026] [ssl:error] [pid 3005752:tid 3005752] (EAI 2)Name or service not known: [client 144.76.19.72:64158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:29.619831 2026] [ssl:error] [pid 3005752:tid 3005752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:29.754406 2026] [ssl:error] [pid 3001174:tid 3001174] (70014)End of file found: [client 216.73.216.199:63270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:29.901195 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.5:52492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:29.901823 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.5:52492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:30.562024 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.66:63500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:30.562664 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.66:63500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:30.729492 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 103.59.160.131:65421] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/ai-client/adapters/error_log
[Thu Jul 30 12:06:31.240739 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.33:34596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:31.241381 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.33:34596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:31.250817 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.54:50044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:31.251452 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.54:50044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:31.280170 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.39:58340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:31.280826 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.39:58340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:31.625236 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.65:58450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:31.625855 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.65:58450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:31.865533 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.65:55756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:31.866152 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.65:55756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:32.078636 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.67:34476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:32.079262 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.67:34476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:32.318957 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.28:41576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:32.319596 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.28:41576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:32.678318 2026] [ssl:error] [pid 3005751:tid 3005751] (EAI 2)Name or service not known: [client 144.76.19.72:64174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:32.678356 2026] [ssl:error] [pid 3005751:tid 3005751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:32.733150 2026] [ssl:error] [pid 2992180:tid 2992180] (EAI 2)Name or service not known: [client 144.76.19.72:64178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:32.733179 2026] [ssl:error] [pid 2992180:tid 2992180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:33.479708 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.54:50058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:33.480360 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.54:50058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:33.721161 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.60:40684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:33.721784 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.60:40684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:33.990852 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.59:64934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:33.991487 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.59:64934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:34.145137 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.66:41572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:34.145767 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.66:41572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:34.198540 2026] [access_compat:error] [pid 2992180:tid 2992180] [client 176.241.66.87:46431] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:34.323541 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.30:39856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:34.324167 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.30:39856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:34.465335 2026] [security2:error] [pid 3001139:tid 3001139] [client 114.119.142.20:57427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/series/christmas-undone"] [unique_id "amswOrXOyyLIwLO4ZuHv2wAAAEc"], referer: http://www.erskinenazarene.co.uk/sermons/its-about-the-king
[Thu Jul 30 12:06:34.574131 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.13:45052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:34.574754 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.13:45052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:34.956482 2026] [core:error] [pid 3005696:tid 3005696] (13)Permission denied: [client 216.73.216.199:58082] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ftrace_event_field/objects_partial
[Thu Jul 30 12:06:35.234606 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.8:41812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:35.235258 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.8:41812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:35.274459 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.44:54774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:35.275091 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.44:54774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:35.316571 2026] [security2:error] [pid 2998333:tid 2998333] [client 114.119.150.101:21521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/robots.txt"] [unique_id "amswO1425EWx0IBVuyMXcgAAAC0"], referer: http://www.localhero.org.uk/robots.txt
[Thu Jul 30 12:06:35.440061 2026] [security2:error] [pid 3004766:tid 3004766] [client 114.119.142.20:57443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/series/christmas-undone"] [unique_id "amswO-rA_3FRZOv1b57HwwAAAA8"], referer: http://www.erskinenazarene.co.uk/sermons/its-about-the-king
[Thu Jul 30 12:06:35.515393 2026] [lsapi:warn] [pid 3001138:tid 3001138] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:06:35.664578 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.2:49514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:35.665276 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.2:49514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:35.787654 2026] [ssl:error] [pid 3003847:tid 3003847] (EAI 2)Name or service not known: [client 144.76.19.72:64190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:35.787687 2026] [ssl:error] [pid 3003847:tid 3003847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:35.843833 2026] [ssl:error] [pid 3001027:tid 3001027] (EAI 2)Name or service not known: [client 144.76.19.72:64194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:35.843871 2026] [ssl:error] [pid 3001027:tid 3001027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:35.956957 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.65:55770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:35.957606 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.65:55770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:36.222835 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.22:20148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:36.223468 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.22:20148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:36.324825 2026] [security2:error] [pid 3001027:tid 3001027] [client 18.199.86.73:42962] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bumpyburpuk.hatch-works.com"] [uri "/.git/config"] [unique_id "amswPO5YHr3yduvJZ5aTxgAAAEE"]
[Thu Jul 30 12:06:36.324979 2026] [security2:error] [pid 3001027:tid 3001027] [client 18.199.86.73:42962] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bumpyburpuk.hatch-works.com"] [uri "/.git/config"] [unique_id "amswPO5YHr3yduvJZ5aTxgAAAEE"]
[Thu Jul 30 12:06:36.332159 2026] [access_compat:error] [pid 3001139:tid 3001139] [client 103.72.86.239:38434] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:36.390168 2026] [ssl:error] [pid 3005696:tid 3005696] (70014)End of file found: [client 216.73.216.199:58082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:36.407080 2026] [security2:error] [pid 2998392:tid 2998392] [client 18.199.86.73:42974] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bumpyburp.hatch-works.com"] [uri "/.git/config"] [unique_id "amswPPugfeh6d5r3AvUbzgAAADc"]
[Thu Jul 30 12:06:36.407275 2026] [security2:error] [pid 2998392:tid 2998392] [client 18.199.86.73:42974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bumpyburp.hatch-works.com"] [uri "/.git/config"] [unique_id "amswPPugfeh6d5r3AvUbzgAAADc"]
[Thu Jul 30 12:06:36.608557 2026] [security2:error] [pid 3001027:tid 3001027] [client 18.199.86.73:42962] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bumpyburpuk.hatch-works.com"] [uri "/index.php"] [unique_id "amswPO5YHr3yduvJZ5aTxgAAAEE"]
[Thu Jul 30 12:06:36.727632 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.54:50062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:36.728260 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.54:50062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:36.988471 2026] [ssl:error] [pid 2976711:tid 2976711] (70014)End of file found: [client 216.73.216.199:8747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:37.115663 2026] [security2:error] [pid 2998392:tid 2998392] [client 18.199.86.73:42974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bumpyburp.hatch-works.com"] [uri "/index.php"] [unique_id "amswPPugfeh6d5r3AvUbzgAAADc"]
[Thu Jul 30 12:06:37.285705 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.47:43484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:37.286405 2026] [authz_core:error] [pid 3001032:tid 3001032] [client 57.141.0.47:43484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:37.292608 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:22883] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:37.324185 2026] [security2:error] [pid 3005749:tid 3005749] [client 47.128.42.124:53980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/robots.txt"] [unique_id "amswPUY_RYNsTOG3GPO9owAAACA"]
[Thu Jul 30 12:06:37.352062 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.3:60688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:37.352716 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.3:60688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:37.428133 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.13:45064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:37.428761 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.13:45064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:37.866448 2026] [security2:error] [pid 3001032:tid 3001032] [client 34.224.132.215:22872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/bedrooms/doubles-twins"] [unique_id "amswPW7zh-QmvsnGPKTB5wAAAEQ"]
[Thu Jul 30 12:06:37.886565 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.58:30160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:37.887188 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.58:30160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:38.056750 2026] [access_compat:error] [pid 2998392:tid 2998392] [client 103.25.250.251:59712] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:38.181214 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.38:31058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:38.181848 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.38:31058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:38.898428 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:64198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:38.898459 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:38.922446 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.63:52352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:38.923079 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.63:52352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:38.951186 2026] [ssl:error] [pid 3001027:tid 3001027] (EAI 2)Name or service not known: [client 144.76.19.72:64206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:38.951211 2026] [ssl:error] [pid 3001027:tid 3001027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:38.989114 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.56:34978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:38.989729 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.56:34978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:39.085950 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.54:22954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:39.086606 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.54:22954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:39.191993 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.9:54048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:39.192628 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.9:54048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:39.255158 2026] [lsapi:warn] [pid 3004766:tid 3004766] [client 31.94.22.107:48834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 12:06:39.255214 2026] [lsapi:warn] [pid 3004766:tid 3004766] [client 31.94.22.107:48834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 12:06:39.987794 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.51:21196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:39.988473 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.51:21196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:40.016719 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.69:38042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:40.017341 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.69:38042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:40.101610 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.48:46736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:40.102260 2026] [authz_core:error] [pid 2992180:tid 2992180] [client 57.141.0.48:46736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:40.137838 2026] [access_compat:error] [pid 3005650:tid 3005650] [client 157.20.138.62:51476] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:40.547633 2026] [core:error] [pid 2987376:tid 2987376] [client 66.249.64.170:57828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:40.547662 2026] [core:error] [pid 2987376:tid 2987376] [client 66.249.64.170:57828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:40.638110 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 103.59.160.131:49592] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/Requests/library/error_log
[Thu Jul 30 12:06:41.031813 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.13:45072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:41.032434 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.13:45072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:41.239246 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.67:64080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:41.239864 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.67:64080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:41.305196 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.3:55954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:41.305850 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.3:55954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:41.438271 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.30:39862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:41.438896 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 57.141.0.30:39862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:41.441135 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.37:59280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:41.441750 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.37:59280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:41.546751 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 103.59.160.131:49869] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/Requests/src/error_log
[Thu Jul 30 12:06:41.694800 2026] [ssl:error] [pid 3001174:tid 3001174] (70014)End of file found: [client 216.73.216.199:18504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:41.968331 2026] [access_compat:error] [pid 2997321:tid 2997321] [client 103.72.86.239:38927] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:42.007013 2026] [ssl:error] [pid 3005749:tid 3005749] (EAI 2)Name or service not known: [client 144.76.19.72:56786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:42.007059 2026] [ssl:error] [pid 3005749:tid 3005749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:42.059116 2026] [ssl:error] [pid 2998333:tid 2998333] (EAI 2)Name or service not known: [client 144.76.19.72:56800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:42.059145 2026] [ssl:error] [pid 2998333:tid 2998333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:42.188744 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.14:40974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:42.189382 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.14:40974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:42.290460 2026] [ssl:error] [pid 3004704:tid 3004704] (70014)End of file found: [client 216.73.216.199:64384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:42.451365 2026] [authz_core:error] [pid 3005754:tid 3005754] [client 103.59.160.131:57298] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/Requests/src/Response/error_log
[Thu Jul 30 12:06:42.889103 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.30:27370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:42.889729 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.30:27370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:43.056456 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.61:52228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:43.057093 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.61:52228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:43.105055 2026] [authz_core:error] [pid 3005754:tid 3005754] [client 57.141.0.54:22956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:43.105706 2026] [authz_core:error] [pid 3005754:tid 3005754] [client 57.141.0.54:22956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:43.278119 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 20.206.204.219:52591] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/pomo/error_log, referer: binance.com
[Thu Jul 30 12:06:43.778008 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.70:48068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:43.778637 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.70:48068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:43.833608 2026] [authz_core:error] [pid 2998333:tid 2998333] [client 103.59.160.131:64400] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/Requests/src/Exception/error_log
[Thu Jul 30 12:06:44.291895 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.17:59772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:44.292532 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.17:59772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:44.471355 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.66:32794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:44.472002 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.66:32794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:44.678260 2026] [lsapi:warn] [pid 3005606:tid 3005606] [client 31.94.22.107:51208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 12:06:44.678310 2026] [lsapi:warn] [pid 3005606:tid 3005606] [client 31.94.22.107:51208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 12:06:44.708124 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.49:64178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:44.708764 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.49:64178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:45.113705 2026] [ssl:error] [pid 2998392:tid 2998392] (EAI 2)Name or service not known: [client 144.76.19.72:56816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:45.113741 2026] [ssl:error] [pid 2998392:tid 2998392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:45.152266 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.13:42192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:45.152885 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.13:42192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:45.169616 2026] [ssl:error] [pid 2998333:tid 2998333] (EAI 2)Name or service not known: [client 144.76.19.72:56832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:45.169645 2026] [ssl:error] [pid 2998333:tid 2998333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:45.312193 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 103.59.160.131:57853] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/Requests/src/Proxy/error_log
[Thu Jul 30 12:06:45.399547 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.47:23110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:45.400181 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.47:23110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:45.911046 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.20:33844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:45.911705 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.20:33844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:46.033194 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.24:42058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:46.033803 2026] [authz_core:error] [pid 2998395:tid 2998395] [client 57.141.0.24:42058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:46.055453 2026] [lsapi:warn] [pid 3005695:tid 3005695] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:06:46.059751 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 103.59.160.131:54291] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/Requests/src/Auth/error_log
[Thu Jul 30 12:06:46.182572 2026] [security2:error] [pid 3005752:tid 3005752] [client 185.191.171.8:14300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6747.0.html"] [unique_id "amswRgFO5X9l3bhH34udFQAAACc"]
[Thu Jul 30 12:06:46.466560 2026] [access_compat:error] [pid 3005698:tid 3005698] [client 176.241.66.87:47117] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:46.787443 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.22:38544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:46.788105 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.22:38544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:46.912630 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.34:41830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:46.913293 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.34:41830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:46.917612 2026] [access_compat:error] [pid 3005649:tid 3005649] [client 45.158.164.139:47970] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:06:46.926922 2026] [access_compat:error] [pid 3000940:tid 3000940] [client 103.72.86.239:40254] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:47.079576 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.4:35714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:47.080219 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.4:35714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:47.227031 2026] [ssl:error] [pid 3004740:tid 3004740] (70014)End of file found: [client 216.73.216.199:44204] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:47.300748 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.42:63898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:47.301376 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.42:63898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:47.563381 2026] [core:error] [pid 2998392:tid 2998392] [client 66.249.66.39:57593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:47.563422 2026] [core:error] [pid 2998392:tid 2998392] [client 66.249.66.39:57593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:47.564142 2026] [core:error] [pid 3001032:tid 3001032] [client 66.249.66.194:58368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:47.564172 2026] [core:error] [pid 3001032:tid 3001032] [client 66.249.66.194:58368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:47.566888 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.40:30840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:47.567532 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.40:30840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:47.629245 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.45:57862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:47.629873 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.45:57862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:47.723594 2026] [ssl:error] [pid 2987376:tid 2987376] (70014)End of file found: [client 216.73.216.199:1837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:47.906578 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.8:63666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:47.907206 2026] [authz_core:error] [pid 3004704:tid 3004704] [client 57.141.0.8:63666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:48.227209 2026] [ssl:error] [pid 3005748:tid 3005748] (EAI 2)Name or service not known: [client 144.76.19.72:56840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:48.227246 2026] [ssl:error] [pid 3005748:tid 3005748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:48.286515 2026] [ssl:error] [pid 3002313:tid 3002313] (EAI 2)Name or service not known: [client 144.76.19.72:56842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:48.286541 2026] [ssl:error] [pid 3002313:tid 3002313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:48.773551 2026] [access_compat:error] [pid 2976711:tid 2976711] [client 103.25.250.251:4189] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:49.152246 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.4:35720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:49.152921 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.4:35720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:49.154900 2026] [security2:error] [pid 2992077:tid 2992077] [client 46.2.154.220:44559] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswScyL67h36wNZfGfiOwAAAAk"]
[Thu Jul 30 12:06:49.154944 2026] [security2:error] [pid 2992077:tid 2992077] [client 46.2.154.220:44559] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswScyL67h36wNZfGfiOwAAAAk"]
[Thu Jul 30 12:06:49.155255 2026] [security2:error] [pid 2992077:tid 2992077] [client 46.2.154.220:44559] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswScyL67h36wNZfGfiOwAAAAk"]
[Thu Jul 30 12:06:49.339055 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.39:58170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:49.339689 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.39:58170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:49.366783 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.21:35914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:49.367403 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.21:35914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:49.442609 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.15:27030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:49.443255 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.15:27030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:49.744253 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.38:46976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:49.744877 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.38:46976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:50.315212 2026] [security2:error] [pid 3005752:tid 3005752] [client 170.106.187.106:59428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "freakorgeek.com"] [uri "/"] [unique_id "amswSgFO5X9l3bhH34udGwAAACc"]
[Thu Jul 30 12:06:50.418468 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 20.206.204.219:53777] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/pomo/error_log, referer: binance.com
[Thu Jul 30 12:06:50.519602 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 103.59.160.131:61129] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/Requests/src/Transport/error_log
[Thu Jul 30 12:06:50.573428 2026] [ssl:error] [pid 3005748:tid 3005748] (70014)End of file found: [client 216.73.216.199:5019] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:50.661394 2026] [access_compat:error] [pid 3001027:tid 3001027] [client 157.20.138.62:52064] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:51.014378 2026] [authz_core:error] [pid 3005649:tid 3005649] [client 57.141.0.15:27038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:51.015002 2026] [authz_core:error] [pid 3005649:tid 3005649] [client 57.141.0.15:27038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:51.290942 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.31:35302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:51.291581 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.31:35302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:51.341975 2026] [ssl:error] [pid 3005751:tid 3005751] (EAI 2)Name or service not known: [client 144.76.19.72:45126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:51.342003 2026] [ssl:error] [pid 3005751:tid 3005751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:51.395377 2026] [ssl:error] [pid 2992126:tid 2992126] (EAI 2)Name or service not known: [client 144.76.19.72:45132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:51.395402 2026] [ssl:error] [pid 2992126:tid 2992126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:51.659221 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.60:31378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:51.659838 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.60:31378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:51.777992 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.52:53784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:51.778622 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.52:53784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:51.814831 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.29:48014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:51.815451 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.29:48014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:51.857462 2026] [security2:error] [pid 3005751:tid 3005751] [client 170.106.35.137:55276] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-sun.com"] [uri "/"] [unique_id "amswS1h0iVZ019uN6aGk9QAAACY"]
[Thu Jul 30 12:06:52.142887 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.2:35202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:52.143598 2026] [authz_core:error] [pid 3000192:tid 3000192] [client 57.141.0.2:35202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:52.428218 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.39:58176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:52.428845 2026] [authz_core:error] [pid 2992126:tid 2992126] [client 57.141.0.39:58176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:52.614427 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.34:35198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:52.615102 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.34:35198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:52.767657 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.52:53794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:52.768309 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.52:53794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:52.773661 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.26:45716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:52.774284 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.26:45716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:53.087208 2026] [security2:error] [pid 3005606:tid 3005606] [client 85.208.96.200:40630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/ryannotbrian-hide-or-hunt-server-ip"] [unique_id "amswTcRc5mUdEJjFo3wFpwAAABA"]
[Thu Jul 30 12:06:53.134184 2026] [lsapi:warn] [pid 3004740:tid 3004740] [client 31.94.22.107:55834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 12:06:53.134254 2026] [lsapi:warn] [pid 3004740:tid 3004740] [client 31.94.22.107:55834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 12:06:53.496990 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 89.152.105.18:37844] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:06:53.499774 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 89.152.105.18:37844] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:06:53.583747 2026] [core:error] [pid 2995446:tid 2995446] [client 66.249.66.167:50442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:53.583808 2026] [core:error] [pid 2995446:tid 2995446] [client 66.249.66.167:50442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:06:53.718344 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.30:41654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:53.718965 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.30:41654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:54.205419 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.20:25420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:54.206493 2026] [authz_core:error] [pid 2997321:tid 2997321] [client 57.141.0.20:25420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:54.260448 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.42:41624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:54.261081 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.42:41624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:54.452164 2026] [ssl:error] [pid 2995373:tid 2995373] (EAI 2)Name or service not known: [client 144.76.19.72:45146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:54.452208 2026] [ssl:error] [pid 2995373:tid 2995373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:54.487988 2026] [ssl:error] [pid 3006968:tid 3006968] (70014)End of file found: [client 216.73.216.199:3055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:54.509823 2026] [ssl:error] [pid 3005751:tid 3005751] (EAI 2)Name or service not known: [client 144.76.19.72:45160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:54.509850 2026] [ssl:error] [pid 3005751:tid 3005751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:54.794166 2026] [core:error] [pid 3004704:tid 3004704] (13)Permission denied: [client 216.73.216.199:56439] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/cpu_slabs
[Thu Jul 30 12:06:55.100475 2026] [security2:error] [pid 3002313:tid 3002313] [client 89.147.138.32:60656] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswTzmtYY6x9kEXZXLVtQAAAAc"]
[Thu Jul 30 12:06:55.100525 2026] [security2:error] [pid 3002313:tid 3002313] [client 89.147.138.32:60656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswTzmtYY6x9kEXZXLVtQAAAAc"]
[Thu Jul 30 12:06:55.100775 2026] [security2:error] [pid 3002313:tid 3002313] [client 89.147.138.32:60656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswTzmtYY6x9kEXZXLVtQAAAAc"]
[Thu Jul 30 12:06:55.170916 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.27:37908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:55.171543 2026] [authz_core:error] [pid 3005751:tid 3005751] [client 57.141.0.27:37908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:55.395695 2026] [ssl:error] [pid 3004704:tid 3004704] (70014)End of file found: [client 216.73.216.199:56439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:55.994477 2026] [ssl:error] [pid 2987552:tid 2987552] (70014)End of file found: [client 216.73.216.199:11408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:06:56.036417 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.55:46454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:56.037038 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.55:46454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:56.292731 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.69:60374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:56.293381 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.69:60374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:56.328818 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.63:34374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:56.329466 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.63:34374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:56.612404 2026] [lsapi:warn] [pid 2995373:tid 2995373] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:06:56.673006 2026] [security2:error] [pid 3005753:tid 3005753] [client 43.130.37.243:53182] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "annasmithagent.com"] [uri "/"] [unique_id "amswUCCxZUshl01Bq80YUQAAACo"]
[Thu Jul 30 12:06:56.734996 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.29:48054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:56.735646 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.29:48054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:56.960741 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.28:36342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:56.961359 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.28:36342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:57.212804 2026] [authz_core:error] [pid 3005649:tid 3005649] [client 57.141.0.5:53980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:57.213433 2026] [authz_core:error] [pid 3005649:tid 3005649] [client 57.141.0.5:53980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:57.283765 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.70:41620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:57.284390 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.70:41620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:57.531805 2026] [access_compat:error] [pid 2998281:tid 2998281] [client 176.241.66.87:63368] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:57.582046 2026] [ssl:error] [pid 3001174:tid 3001174] (EAI 2)Name or service not known: [client 144.76.19.72:45178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:57.582092 2026] [ssl:error] [pid 3001174:tid 3001174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:57.635428 2026] [ssl:error] [pid 3005649:tid 3005649] (EAI 2)Name or service not known: [client 144.76.19.72:45184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:06:57.635472 2026] [ssl:error] [pid 3005649:tid 3005649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:06:58.014049 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.67:59078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:58.014707 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.67:59078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:58.228505 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.37:62896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:58.229134 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.37:62896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:58.291205 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.10:43440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:58.291834 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.10:43440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:58.534182 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.51:32074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:58.534801 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.51:32074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:58.682332 2026] [access_compat:error] [pid 3005749:tid 3005749] [client 103.72.86.239:40239] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:58.858459 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.2:58686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:58.859108 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.2:58686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:59.271053 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.48:24436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:59.271686 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.48:24436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:06:59.503257 2026] [access_compat:error] [pid 2995373:tid 2995373] [client 103.25.250.251:4190] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:06:59.756901 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.19:30004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:06:59.757536 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.19:30004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:00.015011 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 103.59.160.131:58968] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/build/error_log
[Thu Jul 30 12:07:00.186329 2026] [authz_core:error] [pid 3005754:tid 3005754] [client 57.141.0.49:46744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:00.186954 2026] [authz_core:error] [pid 3005754:tid 3005754] [client 57.141.0.49:46744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:00.212413 2026] [ssl:error] [pid 2986805:tid 2986805] (70014)End of file found: [client 216.73.216.199:20425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:00.256940 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.19:30010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:00.257564 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.19:30010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:00.388722 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.8:41086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:00.389347 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.8:41086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:00.693661 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:54736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:00.693693 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:00.704202 2026] [ssl:error] [pid 2995446:tid 2995446] (70014)End of file found: [client 216.73.216.199:58196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:00.751278 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:54752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:00.751301 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:01.148233 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.32:21730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:01.148881 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.32:21730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:01.181621 2026] [access_compat:error] [pid 2987376:tid 2987376] [client 157.20.138.62:52640] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:01.727444 2026] [ssl:error] [pid 3001138:tid 3001138] (70014)End of file found: [client 216.73.216.199:2082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:01.770886 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.71:27564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:01.771515 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.71:27564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:01.916887 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.53:54638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:01.917538 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.53:54638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:02.145051 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.9:37442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:02.145696 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.9:37442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:02.282207 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.25:30924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:02.282858 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.25:30924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:02.467940 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.1:59854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:02.468591 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.1:59854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:02.970280 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.53:54640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:02.970902 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.53:54640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:03.048454 2026] [authz_core:error] [pid 3005754:tid 3005754] [client 57.141.0.28:27392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:03.049105 2026] [authz_core:error] [pid 3005754:tid 3005754] [client 57.141.0.28:27392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:03.315295 2026] [access_compat:error] [pid 3005650:tid 3005650] [client 47.128.120.241:57776] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/the-sort-of-name
[Thu Jul 30 12:07:03.315437 2026] [access_compat:error] [pid 3005650:tid 3005650] [client 47.128.120.241:57776] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:07:03.315626 2026] [access_compat:error] [pid 2998991:tid 2998991] [client 176.241.66.87:63634] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:03.407416 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 103.59.160.131:60092] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/build/pages/options-connectors/error_log
[Thu Jul 30 12:07:03.522560 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.45:39284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:03.523216 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.45:39284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:03.806117 2026] [ssl:error] [pid 2998392:tid 2998392] (EAI 2)Name or service not known: [client 144.76.19.72:54758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:03.806158 2026] [ssl:error] [pid 2998392:tid 2998392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:03.858964 2026] [ssl:error] [pid 2976711:tid 2976711] (EAI 2)Name or service not known: [client 144.76.19.72:54764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:03.858994 2026] [ssl:error] [pid 2976711:tid 2976711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:04.173989 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.5:55988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:04.174622 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.5:55988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:04.225821 2026] [authz_core:error] [pid 3007351:tid 3007351] [client 57.141.0.71:38846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:04.226479 2026] [authz_core:error] [pid 3007351:tid 3007351] [client 57.141.0.71:38846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:05.187161 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 57.141.0.44:35264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:05.187785 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 57.141.0.44:35264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:05.225957 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.32:26506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:05.226616 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.32:26506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:05.933638 2026] [ssl:error] [pid 2998991:tid 2998991] (70014)End of file found: [client 216.73.216.199:59763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:06.221557 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.24:49174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:06.222177 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.24:49174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:06.276266 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.23:39196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:06.276885 2026] [authz_core:error] [pid 3005752:tid 3005752] [client 57.141.0.23:39196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:06.287142 2026] [security2:error] [pid 3001032:tid 3001032] [client 46.153.96.61:53426] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswWm7zh-QmvsnGPKTB9AAAAEQ"]
[Thu Jul 30 12:07:06.287205 2026] [security2:error] [pid 3001032:tid 3001032] [client 46.153.96.61:53426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswWm7zh-QmvsnGPKTB9AAAAEQ"]
[Thu Jul 30 12:07:06.287476 2026] [security2:error] [pid 3001032:tid 3001032] [client 46.153.96.61:53426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswWm7zh-QmvsnGPKTB9AAAAEQ"]
[Thu Jul 30 12:07:06.421188 2026] [ssl:error] [pid 2992185:tid 2992185] (70014)End of file found: [client 216.73.216.199:8789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:06.525254 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.13:35858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:06.525876 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.13:35858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:06.552678 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.68:51836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:06.553302 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.68:51836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:06.639970 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 103.59.160.131:60990] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/build/pages/font-library/error_log
[Thu Jul 30 12:07:06.917694 2026] [ssl:error] [pid 2987376:tid 2987376] (EAI 2)Name or service not known: [client 144.76.19.72:54770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:06.917723 2026] [ssl:error] [pid 2987376:tid 2987376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:06.926649 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.26:58892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:06.927275 2026] [authz_core:error] [pid 2980995:tid 2980995] [client 57.141.0.26:58892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:06.970802 2026] [ssl:error] [pid 3007509:tid 3007509] (EAI 2)Name or service not known: [client 144.76.19.72:54776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:06.970837 2026] [ssl:error] [pid 3007509:tid 3007509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:07.138443 2026] [lsapi:warn] [pid 3003847:tid 3003847] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:07:07.418481 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.46:36670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:07.419119 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.46:36670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:07.446262 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.39:63228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:07.446878 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.39:63228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:07.454020 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.18:33550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:07.454641 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.18:33550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:08.040108 2026] [ssl:error] [pid 3007275:tid 3007275] (70014)End of file found: [client 216.73.216.199:51607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:08.079481 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.42:55330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:08.080111 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.42:55330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:08.377217 2026] [security2:error] [pid 3001174:tid 3001174] [client 149.86.142.206:36470] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswXC3mOSFR2pFQnKCs9wAAAEo"]
[Thu Jul 30 12:07:08.377267 2026] [security2:error] [pid 3001174:tid 3001174] [client 149.86.142.206:36470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswXC3mOSFR2pFQnKCs9wAAAEo"]
[Thu Jul 30 12:07:08.377538 2026] [security2:error] [pid 3001174:tid 3001174] [client 149.86.142.206:36470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswXC3mOSFR2pFQnKCs9wAAAEo"]
[Thu Jul 30 12:07:08.666981 2026] [access_compat:error] [pid 3005696:tid 3005696] [client 176.241.66.87:48389] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:08.671097 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.30:31278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:08.671722 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.30:31278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:08.974457 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.67:24686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:08.975086 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.67:24686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:09.246648 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.55:63760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:09.247274 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.55:63760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:09.451674 2026] [access_compat:error] [pid 3001138:tid 3001138] [client 103.72.86.239:39812] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:10.025850 2026] [ssl:error] [pid 2981908:tid 2981908] (EAI 2)Name or service not known: [client 144.76.19.72:64196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:10.025881 2026] [ssl:error] [pid 2981908:tid 2981908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:10.078868 2026] [ssl:error] [pid 3001027:tid 3001027] (EAI 2)Name or service not known: [client 144.76.19.72:64202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:10.078891 2026] [ssl:error] [pid 3001027:tid 3001027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:10.081242 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.40:28496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:10.081884 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.40:28496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:10.156816 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.51:43640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:10.157444 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.51:43640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:10.167197 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.40:28500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:10.167826 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.40:28500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:10.351733 2026] [access_compat:error] [pid 2998392:tid 2998392] [client 103.25.250.251:4191] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:10.608296 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.35:26088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:10.608911 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.35:26088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:10.840223 2026] [security2:error] [pid 3005698:tid 3005698] [client 47.128.46.47:58890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "taylorshouse.com"] [uri "/robots.txt"] [unique_id "amswXiaxOasDpo61Lk8LjAAAAB0"]
[Thu Jul 30 12:07:10.975598 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.45:32940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:10.976241 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.45:32940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:11.238616 2026] [ssl:error] [pid 2996755:tid 2996755] (70014)End of file found: [client 216.73.216.199:42620] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:11.290344 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.23:39212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:11.290992 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.23:39212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:11.668860 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.28:31666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:11.669483 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.28:31666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:11.715550 2026] [access_compat:error] [pid 2998281:tid 2998281] [client 157.20.138.62:53224] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:11.821477 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.49:58486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:11.822117 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.49:58486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:12.127091 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.62:50912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:12.127743 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.62:50912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:12.571155 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.37:20310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:12.571780 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.37:20310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:12.653257 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.14:55226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:12.653886 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.14:55226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:12.853863 2026] [ssl:error] [pid 3002610:tid 3002610] (70014)End of file found: [client 216.73.216.199:17639] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:12.854652 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 57.141.0.34:57816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:12.855275 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 57.141.0.34:57816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:13.134142 2026] [ssl:error] [pid 3001027:tid 3001027] (EAI 2)Name or service not known: [client 144.76.19.72:64204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:13.134191 2026] [ssl:error] [pid 3001027:tid 3001027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:13.185881 2026] [ssl:error] [pid 2998991:tid 2998991] (EAI 2)Name or service not known: [client 144.76.19.72:64208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:13.185910 2026] [ssl:error] [pid 2998991:tid 2998991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:13.261778 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 198.98.55.27:51018] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:13.264453 2026] [authz_core:error] [pid 3004740:tid 3004740] [client 198.98.55.27:51018] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:13.266182 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 198.98.55.27:51014] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:13.268822 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 198.98.55.27:51014] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:13.276654 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.71:38864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:13.277293 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.71:38864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:13.357009 2026] [ssl:error] [pid 3001139:tid 3001139] (70014)End of file found: [client 216.73.216.199:39872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:13.379772 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.16:37316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:13.380390 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 57.141.0.16:37316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:13.497440 2026] [security2:error] [pid 3004740:tid 3004740] [client 111.92.158.235:53934] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswYSvnY0e7vm3eo3asZAAAAAY"]
[Thu Jul 30 12:07:13.497488 2026] [security2:error] [pid 3004740:tid 3004740] [client 111.92.158.235:53934] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswYSvnY0e7vm3eo3asZAAAAAY"]
[Thu Jul 30 12:07:13.497737 2026] [security2:error] [pid 3004740:tid 3004740] [client 111.92.158.235:53934] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswYSvnY0e7vm3eo3asZAAAAAY"]
[Thu Jul 30 12:07:13.702235 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 198.98.55.27:51130] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:13.704894 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 198.98.55.27:51130] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:13.779655 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 198.98.55.27:51151] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:13.782320 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 198.98.55.27:51151] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:13.940620 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.41:31254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:13.941244 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.41:31254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:14.115793 2026] [security2:error] [pid 2998991:tid 2998991] [client 94.154.43.186:46630] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.acthoroughbreds.com"] [uri "/.env"] [unique_id "amswYh44_fNCZ6X5fnohmgAAADs"]
[Thu Jul 30 12:07:14.115982 2026] [security2:error] [pid 2998991:tid 2998991] [client 94.154.43.186:46630] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.acthoroughbreds.com"] [uri "/.env"] [unique_id "amswYh44_fNCZ6X5fnohmgAAADs"]
[Thu Jul 30 12:07:14.116124 2026] [security2:error] [pid 2998991:tid 2998991] [client 94.154.43.186:46630] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.acthoroughbreds.com"] [uri "/.env"] [unique_id "amswYh44_fNCZ6X5fnohmgAAADs"]
[Thu Jul 30 12:07:14.341819 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 198.98.55.27:51254] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:14.344550 2026] [authz_core:error] [pid 2998991:tid 2998991] [client 198.98.55.27:51254] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:14.437853 2026] [authz_core:error] [pid 3007897:tid 3007897] [client 57.141.0.36:20924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:14.438510 2026] [authz_core:error] [pid 3007897:tid 3007897] [client 57.141.0.36:20924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:14.445946 2026] [access_compat:error] [pid 2992185:tid 2992185] [client 176.241.66.87:48697] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:14.488632 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 198.98.55.27:51302] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:14.491371 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 198.98.55.27:51302] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:14.819262 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.47:47538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:14.819888 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.47:47538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:14.915849 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.47:47542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:14.916471 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.47:47542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:15.298987 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.7:64578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:15.299635 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.7:64578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:15.374926 2026] [core:error] [pid 3001174:tid 3001174] [client 66.249.66.195:58669] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:15.374956 2026] [core:error] [pid 3001174:tid 3001174] [client 66.249.66.195:58669] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:15.404062 2026] [lsapi:warn] [pid 2986805:tid 2986805] [client 145.14.10.39:60138] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:07:15.404111 2026] [lsapi:warn] [pid 2986805:tid 2986805] [client 145.14.10.39:60138] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:07:15.852986 2026] [authz_core:error] [pid 3007933:tid 3007933] [client 57.141.0.39:63844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:15.853647 2026] [authz_core:error] [pid 3007933:tid 3007933] [client 57.141.0.39:63844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:15.944332 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.39:63860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:15.945050 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.39:63860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:16.079126 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.68:31584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:16.079773 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.68:31584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:16.113159 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.27:30856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:16.113807 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.27:30856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:16.242043 2026] [ssl:error] [pid 3001027:tid 3001027] (EAI 2)Name or service not known: [client 144.76.19.72:64220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:16.242098 2026] [ssl:error] [pid 3001027:tid 3001027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:16.266718 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.50:31500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:16.267343 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.50:31500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:16.298365 2026] [ssl:error] [pid 3007933:tid 3007933] (EAI 2)Name or service not known: [client 144.76.19.72:64228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:16.298401 2026] [ssl:error] [pid 3007933:tid 3007933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:16.679053 2026] [ssl:error] [pid 3000715:tid 3000715] (70014)End of file found: [client 216.73.216.199:40678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:17.010208 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.52:23750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:17.010834 2026] [authz_core:error] [pid 3001027:tid 3001027] [client 57.141.0.52:23750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:17.364262 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.7:64582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:17.364883 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.7:64582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:17.572296 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.52:23756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:17.572919 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.52:23756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:17.593084 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 20.206.204.219:58896] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:07:17.674152 2026] [lsapi:warn] [pid 3007897:tid 3007897] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:07:18.172303 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.37:20312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:18.172930 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.37:20312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:18.220352 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.52:23760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:18.220978 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.52:23760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:18.307022 2026] [security2:error] [pid 3005650:tid 3005650] [client 43.135.142.37:52396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/"] [unique_id "amswZhHebwJQQ0VclnfyUQAAABU"]
[Thu Jul 30 12:07:18.493468 2026] [authz_core:error] [pid 3003638:tid 3003638] [client 57.141.0.33:39208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:18.494109 2026] [authz_core:error] [pid 3003638:tid 3003638] [client 57.141.0.33:39208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:18.874508 2026] [ssl:error] [pid 2987552:tid 2987552] (70014)End of file found: [client 216.73.216.199:38137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:19.340941 2026] [security2:error] [pid 3003638:tid 3003638] [client 43.135.142.37:53246] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amswZ9tYhtbICWcfs9GAigAAAAA"], referer: http://clarepillinger.co.uk
[Thu Jul 30 12:07:19.353794 2026] [ssl:error] [pid 3002610:tid 3002610] (EAI 2)Name or service not known: [client 144.76.19.72:64244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:19.353831 2026] [ssl:error] [pid 3002610:tid 3002610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:19.407026 2026] [ssl:error] [pid 3001027:tid 3001027] (EAI 2)Name or service not known: [client 144.76.19.72:64248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:19.407054 2026] [ssl:error] [pid 3001027:tid 3001027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:19.538615 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.44:37492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:19.539280 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.44:37492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:19.542916 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.70:51236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:19.543543 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.70:51236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:19.848165 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.53:23670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:19.848793 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.53:23670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:19.990142 2026] [ssl:error] [pid 3005650:tid 3005650] (70014)End of file found: [client 216.73.216.199:20096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:20.117144 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.48:31680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:20.117775 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.48:31680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:20.425553 2026] [access_compat:error] [pid 2995373:tid 2995373] [client 176.241.66.87:11403] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:20.519299 2026] [authz_core:error] [pid 3007897:tid 3007897] [client 57.141.0.63:47954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:20.519933 2026] [authz_core:error] [pid 3007897:tid 3007897] [client 57.141.0.63:47954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:20.602254 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.12:37684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:20.602876 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.12:37684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:21.105313 2026] [access_compat:error] [pid 3007509:tid 3007509] [client 103.25.250.251:4192] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:21.344352 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.13:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:21.344978 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.13:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:21.635158 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.71:51078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:21.635781 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.71:51078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:21.840753 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.45:56934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:21.841375 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.45:56934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:21.911552 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.50:46654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:21.912202 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.50:46654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:21.933327 2026] [security2:error] [pid 3001032:tid 3001032] [client 94.154.43.184:37998] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.acthoroughbreds.com"] [uri "/.env"] [unique_id "amswaW7zh-QmvsnGPKTB-AAAAEQ"]
[Thu Jul 30 12:07:21.933533 2026] [security2:error] [pid 3001032:tid 3001032] [client 94.154.43.184:37998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.acthoroughbreds.com"] [uri "/.env"] [unique_id "amswaW7zh-QmvsnGPKTB-AAAAEQ"]
[Thu Jul 30 12:07:21.959726 2026] [security2:error] [pid 3001032:tid 3001032] [client 94.154.43.184:37998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.acthoroughbreds.com"] [uri "/403.shtml"] [unique_id "amswaW7zh-QmvsnGPKTB-AAAAEQ"]
[Thu Jul 30 12:07:22.009115 2026] [ssl:error] [pid 3007936:tid 3007936] (70014)End of file found: [client 216.73.216.199:46656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:22.053104 2026] [access_compat:error] [pid 3005753:tid 3005753] [client 103.72.86.239:38230] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:22.247785 2026] [access_compat:error] [pid 3005698:tid 3005698] [client 157.20.138.62:53811] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:22.463220 2026] [ssl:error] [pid 3005606:tid 3005606] (EAI 2)Name or service not known: [client 144.76.19.72:61088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:22.463252 2026] [ssl:error] [pid 3005606:tid 3005606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:22.519444 2026] [ssl:error] [pid 2986805:tid 2986805] (EAI 2)Name or service not known: [client 144.76.19.72:61102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:22.519489 2026] [ssl:error] [pid 2986805:tid 2986805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:22.831808 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 103.59.160.131:52333] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/block-patterns/error_log
[Thu Jul 30 12:07:22.954897 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.61:61578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:22.955564 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.61:61578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:23.005038 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.7:64588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:23.005668 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.7:64588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:23.138479 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.13:52138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:23.139119 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.13:52138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:23.585593 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.69:50200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:23.586326 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.69:50200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:24.086915 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.19:62870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:24.087574 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.19:62870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:24.096742 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.9:31940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:24.097368 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.9:31940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:24.486147 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.71:52976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:24.486798 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.71:52976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:24.639176 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.15:20244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:24.640151 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.15:20244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:25.573108 2026] [ssl:error] [pid 2998392:tid 2998392] (EAI 2)Name or service not known: [client 144.76.19.72:61114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:25.573144 2026] [ssl:error] [pid 2998392:tid 2998392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:25.627671 2026] [ssl:error] [pid 2992185:tid 2992185] (EAI 2)Name or service not known: [client 144.76.19.72:61116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:25.627709 2026] [ssl:error] [pid 2992185:tid 2992185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:25.704447 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.22:22140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:25.705097 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.22:22140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:25.751388 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.26:42570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:25.752029 2026] [authz_core:error] [pid 3007934:tid 3007934] [client 57.141.0.26:42570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:25.897753 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.53:23676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:25.898392 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.53:23676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:26.012750 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.56:28300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:26.013397 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.56:28300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:26.190006 2026] [access_compat:error] [pid 2998392:tid 2998392] [client 176.241.66.87:64738] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:26.224253 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.2:34906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:26.224877 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.2:34906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:26.546625 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.23:57690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:26.547295 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.23:57690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:26.628834 2026] [ssl:error] [pid 2981908:tid 2981908] (70014)End of file found: [client 216.73.216.199:44086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:26.678421 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.36:55220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:26.679076 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.36:55220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:26.823797 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 66.249.66.34:55516] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:26.826475 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 66.249.66.34:55516] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:27.123056 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:59722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:27.535560 2026] [authz_core:error] [pid 3003638:tid 3003638] [client 57.141.0.13:52142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:27.536217 2026] [authz_core:error] [pid 3003638:tid 3003638] [client 57.141.0.13:52142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:27.915665 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.40:42094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:27.916307 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.40:42094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:28.056527 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.13:52154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:28.057153 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.13:52154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:28.082027 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.51:44848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:28.082680 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.51:44848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:28.096355 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 20.206.204.219:60632] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:07:28.255966 2026] [lsapi:warn] [pid 2995373:tid 2995373] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:07:28.430839 2026] [ssl:error] [pid 3007509:tid 3007509] (70014)End of file found: [client 216.73.216.199:53817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:28.707797 2026] [ssl:error] [pid 3005695:tid 3005695] (EAI 2)Name or service not known: [client 144.76.19.72:61118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:28.707854 2026] [ssl:error] [pid 3005695:tid 3005695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:28.761775 2026] [ssl:error] [pid 3005753:tid 3005753] (EAI 2)Name or service not known: [client 144.76.19.72:61124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:28.761828 2026] [ssl:error] [pid 3005753:tid 3005753] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:29.067781 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.39:30390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:29.068406 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.39:30390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:29.297942 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.31:25884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:29.298601 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.31:25884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:29.412126 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.35:24652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:29.412744 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.35:24652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:29.722437 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.41:28062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:29.723141 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.41:28062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:29.986795 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.27:24542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:29.987413 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.27:24542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:30.537643 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.31:25892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:30.538267 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.31:25892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:30.837907 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.40:42102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:30.838530 2026] [authz_core:error] [pid 3005696:tid 3005696] [client 57.141.0.40:42102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:31.213772 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.25:20066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:31.214458 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.25:20066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:31.557731 2026] [core:error] [pid 3005696:tid 3005696] [client 66.249.66.194:60758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:31.557758 2026] [core:error] [pid 3005696:tid 3005696] [client 66.249.66.194:60758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:31.815757 2026] [ssl:error] [pid 2996755:tid 2996755] (EAI 2)Name or service not known: [client 144.76.19.72:49410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:31.842566 2026] [ssl:error] [pid 2996755:tid 2996755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:31.831019 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.25:20076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:31.836013 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.59:50754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:31.844336 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.25:20076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:31.844380 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.59:50754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:31.898477 2026] [ssl:error] [pid 3001174:tid 3001174] (EAI 2)Name or service not known: [client 144.76.19.72:49418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:31.898521 2026] [ssl:error] [pid 3001174:tid 3001174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:31.913723 2026] [access_compat:error] [pid 3001139:tid 3001139] [client 103.25.250.251:59713] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:31.936456 2026] [ssl:error] [pid 3001032:tid 3001032] (70014)End of file found: [client 216.73.216.199:9921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:32.277349 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.1:25970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:32.277969 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.1:25970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:32.427335 2026] [access_compat:error] [pid 2998392:tid 2998392] [client 176.241.66.87:49703] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:32.540846 2026] [lsapi:warn] [pid 2993320:tid 2993320] [client 216.73.216.199:1765] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Constant PASSWORD_DEFAULT already defined in /var/softaculous/paste/update_pass.php on line 17\n
[Thu Jul 30 12:07:32.631741 2026] [access_compat:error] [pid 3007934:tid 3007934] [client 103.72.86.239:38135] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:32.812374 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.52:28160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:32.813058 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.52:28160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:32.830715 2026] [access_compat:error] [pid 2992077:tid 2992077] [client 157.20.138.62:54397] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:32.848038 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.49:57076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:32.848661 2026] [authz_core:error] [pid 3005695:tid 3005695] [client 57.141.0.49:57076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:32.850404 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.30:59528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:32.851005 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.30:59528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:32.933516 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.51:44862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:32.934261 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.51:44862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:33.547972 2026] [ssl:error] [pid 2993320:tid 2993320] (70014)End of file found: [client 216.73.216.199:1765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:34.031649 2026] [ssl:error] [pid 3007509:tid 3007509] (70014)End of file found: [client 216.73.216.199:7189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:34.388957 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.56:20146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:34.389620 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.56:20146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:34.567086 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.44:45310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:34.567730 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.44:45310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:34.779891 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.6:40544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:34.780525 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.6:40544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:35.501059 2026] [ssl:error] [pid 3005753:tid 3005753] (EAI 2)Name or service not known: [client 144.76.19.72:49426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:35.501112 2026] [ssl:error] [pid 3005753:tid 3005753] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:35.728904 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.36:44698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:35.729556 2026] [authz_core:error] [pid 3006968:tid 3006968] [client 57.141.0.36:44698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:35.865711 2026] [ssl:error] [pid 3005748:tid 3005748] (EAI 2)Name or service not known: [client 144.76.19.72:49432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:35.865741 2026] [ssl:error] [pid 3005748:tid 3005748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:35.979761 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.48:61906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:35.980394 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.48:61906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:36.086686 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.43:37078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:36.087332 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.43:37078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:36.245371 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.71:22430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:36.246017 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.71:22430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:36.308723 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.64:27082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:36.309359 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.64:27082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:36.651846 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.26:33908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:36.652549 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.26:33908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:36.757794 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.18:42352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:36.758483 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.18:42352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:36.825037 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 20.206.204.219:62441] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:07:37.340527 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.65:50174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:37.341152 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.65:50174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:38.067876 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.48:61914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:38.068586 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.48:61914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:38.466596 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.20:45766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:38.467225 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.20:45766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:38.521218 2026] [access_compat:error] [pid 3002313:tid 3002313] [client 176.241.66.87:65314] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:38.808357 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.35:43164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:38.808980 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.35:43164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:38.813639 2026] [lsapi:warn] [pid 3001032:tid 3001032] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:07:38.921606 2026] [ssl:error] [pid 2992077:tid 2992077] (EAI 2)Name or service not known: [client 144.76.19.72:49434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:38.921630 2026] [ssl:error] [pid 2992077:tid 2992077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:38.979661 2026] [ssl:error] [pid 3008694:tid 3008694] (EAI 2)Name or service not known: [client 144.76.19.72:49436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:38.979709 2026] [ssl:error] [pid 3008694:tid 3008694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:39.359844 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.11:37334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:39.360472 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.11:37334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:39.424939 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.41:31066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:39.425572 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.41:31066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:39.936949 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 103.59.160.131:59934] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/theme-compat/error_log
[Thu Jul 30 12:07:39.966571 2026] [ssl:error] [pid 3007934:tid 3007934] (70014)End of file found: [client 216.73.216.199:55756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:40.053115 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.38:61326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:40.053737 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.38:61326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:40.088658 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.13:40888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:40.089277 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.13:40888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:40.117359 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.62:53412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:40.117975 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.62:53412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:40.176112 2026] [core:error] [pid 3005650:tid 3005650] (13)Permission denied: [client 216.73.216.199:57471] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/ctor
[Thu Jul 30 12:07:40.777491 2026] [ssl:error] [pid 3005650:tid 3005650] (70014)End of file found: [client 216.73.216.199:57471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:41.150625 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.69:65174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:41.151268 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.69:65174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:41.242989 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.3:23464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:41.243642 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.3:23464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:41.260398 2026] [ssl:error] [pid 3008692:tid 3008692] (70014)End of file found: [client 216.73.216.199:26517] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:41.305388 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.36:52620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:41.306053 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.36:52620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:41.651886 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.11:37336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:41.652590 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.11:37336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:41.784075 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.68:37638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:41.784764 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.68:37638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:42.039089 2026] [ssl:error] [pid 3004769:tid 3004769] (EAI 2)Name or service not known: [client 144.76.19.72:45344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:42.039136 2026] [ssl:error] [pid 3004769:tid 3004769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:42.095582 2026] [ssl:error] [pid 3008641:tid 3008641] (EAI 2)Name or service not known: [client 144.76.19.72:45354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:42.095622 2026] [ssl:error] [pid 3008641:tid 3008641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:42.249881 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.30:28614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:42.250589 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.30:28614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:42.469613 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.61:65418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:42.470241 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.61:65418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:42.616800 2026] [access_compat:error] [pid 2993320:tid 2993320] [client 103.25.250.251:4193] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:42.952962 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.4:43448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:42.953601 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.4:43448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:43.195540 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.12:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:43.196172 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.12:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:43.321715 2026] [access_compat:error] [pid 3000715:tid 3000715] [client 157.20.138.62:54975] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:43.871341 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.1:22894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:43.871959 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.1:22894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:43.875458 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.1:22902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:43.876133 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.1:22902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:44.041029 2026] [access_compat:error] [pid 3006968:tid 3006968] [client 176.241.66.87:50398] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:44.334682 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.64:58748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:44.335312 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.64:58748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:44.366625 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.52:58676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:44.367256 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.52:58676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:44.389173 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.61:65432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:44.389797 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.61:65432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:45.012101 2026] [core:error] [pid 3001139:tid 3001139] [client 66.249.64.170:50380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:45.012142 2026] [core:error] [pid 3001139:tid 3001139] [client 66.249.64.170:50380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:45.219095 2026] [ssl:error] [pid 2998392:tid 2998392] (EAI 2)Name or service not known: [client 144.76.19.72:45360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:45.219130 2026] [ssl:error] [pid 2998392:tid 2998392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:45.258056 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.59:49530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:45.258778 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.59:49530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:45.273625 2026] [ssl:error] [pid 2998392:tid 2998392] (EAI 2)Name or service not known: [client 144.76.19.72:45366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:45.273649 2026] [ssl:error] [pid 2998392:tid 2998392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:45.950030 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.54:45804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:45.950668 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.54:45804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:45.951956 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.33:60788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:45.952570 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.33:60788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:46.058343 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.29:57650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:46.058991 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.29:57650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:46.356582 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.55:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:46.357204 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.55:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:47.096368 2026] [ssl:error] [pid 3007934:tid 3007934] (70014)End of file found: [client 216.73.216.199:17894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:47.360057 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.37:62900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:47.360690 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.37:62900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:47.556928 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.36:52628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:47.557557 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.36:52628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:47.649526 2026] [authz_core:error] [pid 3008584:tid 3008584] [client 57.141.0.69:65190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:47.650165 2026] [authz_core:error] [pid 3008584:tid 3008584] [client 57.141.0.69:65190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:47.707110 2026] [security2:error] [pid 3003847:tid 3003847] [client 85.208.96.203:18500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amswg8yn1U9WAKvm48_9FgAAAAI"]
[Thu Jul 30 12:07:47.990496 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.14:61638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:47.991138 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.14:61638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:48.326058 2026] [ssl:error] [pid 3008584:tid 3008584] (EAI 2)Name or service not known: [client 144.76.19.72:45378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:48.326123 2026] [ssl:error] [pid 3008584:tid 3008584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:48.373765 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.59:25044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:48.374420 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.59:25044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:48.393752 2026] [ssl:error] [pid 3001174:tid 3001174] (EAI 2)Name or service not known: [client 144.76.19.72:45392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:48.393786 2026] [ssl:error] [pid 3001174:tid 3001174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:49.125443 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.52:58680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:49.126087 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.52:58680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:49.199699 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.50:58742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:49.200346 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.50:58742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:49.208802 2026] [ssl:error] [pid 3008692:tid 3008692] (70014)End of file found: [client 216.73.216.199:17928] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:49.240081 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.41:28596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:49.240708 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.41:28596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:49.418234 2026] [lsapi:warn] [pid 3001174:tid 3001174] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:07:49.506531 2026] [ssl:error] [pid 3008642:tid 3008642] (70014)End of file found: [client 216.73.216.199:23034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:49.717228 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.18:64260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:49.717862 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.18:64260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:49.900315 2026] [access_compat:error] [pid 2986805:tid 2986805] [client 176.241.66.87:51033] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:49.901376 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.47:37312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:49.901998 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.47:37312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:50.400766 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.69:34266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:50.401392 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.69:34266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:50.465768 2026] [access_compat:error] [pid 2998894:tid 2998894] [client 45.158.164.139:36246] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:07:50.639964 2026] [core:error] [pid 3007275:tid 3007275] (13)Permission denied: [client 216.73.216.199:58572] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/nft_compat/uevent
[Thu Jul 30 12:07:50.645869 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.34:49550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:50.646492 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.34:49550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:50.805081 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.13:37636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:50.805709 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.13:37636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:50.917801 2026] [access_compat:error] [pid 3001174:tid 3001174] [client 103.72.86.239:40500] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:51.157111 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 66.249.66.33:60795] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:07:51.159781 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 66.249.66.33:60795] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:07:51.161684 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:34327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:51.542000 2026] [ssl:error] [pid 2998281:tid 2998281] (EAI 2)Name or service not known: [client 144.76.19.72:22380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:51.542036 2026] [ssl:error] [pid 2998281:tid 2998281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:51.593573 2026] [ssl:error] [pid 2986805:tid 2986805] (EAI 2)Name or service not known: [client 144.76.19.72:22386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:51.593604 2026] [ssl:error] [pid 2986805:tid 2986805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:51.630336 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.17:52556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:51.630981 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.17:52556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:52.003203 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.25:48368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:52.003824 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.25:48368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:52.267707 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.42:32416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:52.268336 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.42:32416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:52.406681 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.29:35414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:52.407325 2026] [authz_core:error] [pid 2993320:tid 2993320] [client 57.141.0.29:35414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:52.666946 2026] [core:error] [pid 3005606:tid 3005606] (13)Permission denied: [client 216.73.216.199:35865] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmem_cache/slab_size
[Thu Jul 30 12:07:52.740135 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.63:49176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:52.740752 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.63:49176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:52.968841 2026] [ssl:error] [pid 3005606:tid 3005606] (70014)End of file found: [client 216.73.216.199:35865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:53.190755 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.39:42180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:53.191420 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.39:42180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:53.211577 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 20.206.204.219:65532] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:07:53.261282 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.47:20350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:53.261934 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.47:20350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:53.537042 2026] [access_compat:error] [pid 2992077:tid 2992077] [client 103.25.250.251:59714] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:53.566349 2026] [ssl:error] [pid 3007275:tid 3007275] (70014)End of file found: [client 216.73.216.199:58572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:53.864558 2026] [access_compat:error] [pid 3005749:tid 3005749] [client 157.20.138.62:55561] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:53.872035 2026] [security2:error] [pid 2992185:tid 2992185] [client 185.191.171.1:23276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/how-to-install-mods-on-wreckfest-xbox-one"] [unique_id "amswiTlWNekbfMEevupfxgAAADg"]
[Thu Jul 30 12:07:54.020688 2026] [security2:error] [pid 2998281:tid 2998281] [client 43.159.152.187:45918] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.com"] [uri "/"] [unique_id "amswijklaeJ2t5_m2z-xWQAAACk"]
[Thu Jul 30 12:07:54.561399 2026] [core:error] [pid 3005748:tid 3005748] [client 57.141.0.49:33826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:54.561426 2026] [core:error] [pid 3005748:tid 3005748] [client 57.141.0.49:33826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:54.689998 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.66:40978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:54.690646 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.66:40978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:55.317351 2026] [ssl:error] [pid 3009577:tid 3009577] (EAI 2)Name or service not known: [client 144.76.19.72:22398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:55.317395 2026] [ssl:error] [pid 3009577:tid 3009577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:55.350315 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.4:48946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:55.350941 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.4:48946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:55.433155 2026] [authz_core:error] [pid 3009577:tid 3009577] [client 57.141.0.6:37320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:55.433775 2026] [authz_core:error] [pid 3009577:tid 3009577] [client 57.141.0.6:37320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:55.778587 2026] [security2:error] [pid 3008689:tid 3008689] [client 85.208.96.200:60912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,241.0/prev_next,next.html"] [unique_id "amswi84E-Qjj3rQVWVh21wAAAB8"]
[Thu Jul 30 12:07:55.849048 2026] [security2:error] [pid 3003847:tid 3003847] [client 43.159.152.187:37676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amswi8yn1U9WAKvm48_9HgAAAAI"], referer: http://www.spampmusic.com
[Thu Jul 30 12:07:56.044422 2026] [ssl:error] [pid 3008691:tid 3008691] (EAI 2)Name or service not known: [client 144.76.19.72:22414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:56.044476 2026] [ssl:error] [pid 3008691:tid 3008691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:56.121954 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.39:21806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:56.122599 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.39:21806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:56.161455 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.68:58878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:56.162089 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.68:58878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:56.169117 2026] [access_compat:error] [pid 2987376:tid 2987376] [client 176.241.66.87:49758] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:07:56.275269 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.29:35430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:56.275887 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.29:35430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:56.344650 2026] [core:error] [pid 3008691:tid 3008691] [client 66.249.66.66:36308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:56.344673 2026] [core:error] [pid 3008691:tid 3008691] [client 66.249.66.66:36308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:56.350872 2026] [core:error] [pid 3004768:tid 3004768] [client 66.249.66.39:56331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:56.350895 2026] [core:error] [pid 3004768:tid 3004768] [client 66.249.66.39:56331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:07:56.521234 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.42:32426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:56.521869 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.42:32426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:56.556909 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.14:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:56.557534 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.14:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:56.888903 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.27:34302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:56.889532 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.27:34302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:57.181102 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.25:38478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:57.181732 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.25:38478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:57.438447 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.10:43804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:57.439087 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.10:43804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:57.514204 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 103.59.160.131:51675] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/SimplePie/library/error_log
[Thu Jul 30 12:07:57.537006 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.27:34306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:57.537667 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.27:34306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:58.004704 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.65:38554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:58.005333 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.65:38554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:58.298615 2026] [authz_core:error] [pid 3008584:tid 3008584] [client 57.141.0.6:37326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:58.299243 2026] [authz_core:error] [pid 3008584:tid 3008584] [client 57.141.0.6:37326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:58.608451 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 103.59.160.131:55278] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/SimplePie/src/error_log
[Thu Jul 30 12:07:58.706843 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.32:20990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:58.707475 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.32:20990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:58.833248 2026] [security2:error] [pid 3009519:tid 3009519] [client 114.119.144.31:43847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/stewart-macphail"] [unique_id "amswjojFWQuqQSuTAdjlXgAAAAA"], referer: http://www.erskinenazarene.co.uk/preacher/stewart-macphail
[Thu Jul 30 12:07:58.942190 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.62:58088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:58.942813 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.62:58088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:58.955403 2026] [authz_core:error] [pid 3008584:tid 3008584] [client 57.141.0.19:61156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:07:58.956016 2026] [authz_core:error] [pid 3008584:tid 3008584] [client 57.141.0.19:61156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:07:58.985473 2026] [ssl:error] [pid 3001174:tid 3001174] (70014)End of file found: [client 216.73.216.199:26277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:07:59.134133 2026] [ssl:error] [pid 2995373:tid 2995373] (EAI 2)Name or service not known: [client 144.76.19.72:22430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:59.134179 2026] [ssl:error] [pid 2995373:tid 2995373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:59.191492 2026] [ssl:error] [pid 3008584:tid 3008584] (EAI 2)Name or service not known: [client 144.76.19.72:22444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:07:59.191526 2026] [ssl:error] [pid 3008584:tid 3008584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:07:59.324966 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 103.59.160.131:51798] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/SimplePie/src/Cache/error_log, referer: https://www.google.com/
[Thu Jul 30 12:07:59.898699 2026] [lsapi:warn] [pid 2995373:tid 2995373] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:08:00.137988 2026] [security2:error] [pid 2986805:tid 2986805] [client 114.119.144.31:43853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/preacher/stewart-macphail"] [unique_id "amswkNC2no2__zwUftKvXgAAAAo"], referer: http://www.erskinenazarene.co.uk/preacher/stewart-macphail
[Thu Jul 30 12:08:00.165214 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.20:49594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:00.165849 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.20:49594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:00.308646 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.43:26610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:00.309292 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.43:26610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:00.328702 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.26:41092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:00.329330 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.26:41092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:00.427788 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.12:28262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:00.428410 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.12:28262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:00.488408 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.6:37342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:00.489034 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.6:37342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:00.502848 2026] [access_compat:error] [pid 3007275:tid 3007275] [client 103.25.250.251:59715] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:00.746984 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.38:23360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:00.747617 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.38:23360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:01.091284 2026] [core:error] [pid 3008584:tid 3008584] (13)Permission denied: [client 216.73.216.199:3013] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/seq_file/store_user
[Thu Jul 30 12:08:01.370877 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.29:60714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:01.371513 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.29:60714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:01.393410 2026] [core:error] [pid 3008584:tid 3008584] (13)Permission denied: [client 216.73.216.199:3013] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3233265.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.d76fe2be.tmp
[Thu Jul 30 12:08:01.549644 2026] [access_compat:error] [pid 3005753:tid 3005753] [client 103.72.86.239:38669] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:01.693372 2026] [ssl:error] [pid 3008584:tid 3008584] (70014)End of file found: [client 216.73.216.199:3013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:01.779151 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.27:21148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:01.779792 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.27:21148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:02.199043 2026] [ssl:error] [pid 3002313:tid 3002313] (70014)End of file found: [client 216.73.216.199:11388] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:02.211465 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 103.59.160.131:50896] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/SimplePie/src/HTTP/error_log
[Thu Jul 30 12:08:02.247784 2026] [ssl:error] [pid 3009578:tid 3009578] (EAI 2)Name or service not known: [client 144.76.19.72:25886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:02.247834 2026] [ssl:error] [pid 3009578:tid 3009578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:02.300768 2026] [ssl:error] [pid 2986805:tid 2986805] (EAI 2)Name or service not known: [client 144.76.19.72:25900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:02.300804 2026] [ssl:error] [pid 2986805:tid 2986805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:02.350478 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.43:26624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:02.351150 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.43:26624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:02.996240 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.21:29310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:02.996942 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.21:29310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:03.564865 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.21:29320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:03.565495 2026] [authz_core:error] [pid 2998894:tid 2998894] [client 57.141.0.21:29320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:03.693344 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.4:60680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:03.693970 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.4:60680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:03.730080 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.41:63496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:03.730701 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.41:63496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:03.819237 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.8:32792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:03.819852 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.8:32792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:04.022536 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.30:22312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:04.023181 2026] [authz_core:error] [pid 2986805:tid 2986805] [client 57.141.0.30:22312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:04.250134 2026] [access_compat:error] [pid 3005698:tid 3005698] [client 103.25.250.251:4194] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:04.437364 2026] [access_compat:error] [pid 2992185:tid 2992185] [client 157.20.138.62:56156] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:04.530386 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.20:49596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:04.531017 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.20:49596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:04.707684 2026] [core:error] [pid 3010047:tid 3010047] (13)Permission denied: [client 216.73.216.199:9320] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS3/flags
[Thu Jul 30 12:08:05.018283 2026] [authz_core:error] [pid 3009048:tid 3009048] [client 57.141.0.42:20422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:05.018903 2026] [authz_core:error] [pid 3009048:tid 3009048] [client 57.141.0.42:20422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:05.123766 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.15:46546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:05.124397 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.15:46546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:05.352522 2026] [ssl:error] [pid 2986805:tid 2986805] (EAI 2)Name or service not known: [client 144.76.19.72:25906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:05.352551 2026] [ssl:error] [pid 2986805:tid 2986805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:05.406713 2026] [ssl:error] [pid 3008692:tid 3008692] (EAI 2)Name or service not known: [client 144.76.19.72:25910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:05.406745 2026] [ssl:error] [pid 3008692:tid 3008692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:05.438874 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.36:31410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:05.439515 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.36:31410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:05.911606 2026] [ssl:error] [pid 3010047:tid 3010047] (70014)End of file found: [client 216.73.216.199:9320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:06.183838 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.39:23926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:06.184484 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.39:23926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:06.213260 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.46:38356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:06.213893 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.46:38356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:06.778676 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.43:26628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:06.779323 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.43:26628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:06.787819 2026] [access_compat:error] [pid 3010157:tid 3010157] [client 176.241.66.87:52731] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:06.983156 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.17:29416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:06.983862 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.17:29416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:07.023744 2026] [ssl:error] [pid 3007868:tid 3007868] (70014)End of file found: [client 216.73.216.199:14257] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:07.208774 2026] [security2:error] [pid 3009519:tid 3009519] [client 163.7.14.14:11229] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswl4jFWQuqQSuTAdjlYwAAAAA"]
[Thu Jul 30 12:08:07.208825 2026] [security2:error] [pid 3009519:tid 3009519] [client 163.7.14.14:11229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswl4jFWQuqQSuTAdjlYwAAAAA"]
[Thu Jul 30 12:08:07.209127 2026] [security2:error] [pid 3009519:tid 3009519] [client 163.7.14.14:11229] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswl4jFWQuqQSuTAdjlYwAAAAA"]
[Thu Jul 30 12:08:07.284352 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.26:58804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:07.285003 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.26:58804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:07.791248 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.63:35294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:07.791868 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.63:35294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:07.914523 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.13:43408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:07.915162 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.13:43408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:08.213157 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.67:48460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:08.213799 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.67:48460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:08.263511 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.46:38358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:08.264167 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.46:38358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:08.324249 2026] [ssl:error] [pid 2987376:tid 2987376] (70014)End of file found: [client 216.73.216.199:45142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:08.326537 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.30:22332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:08.327165 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.30:22332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:08.464630 2026] [ssl:error] [pid 3008584:tid 3008584] (EAI 2)Name or service not known: [client 144.76.19.72:25914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:08.464656 2026] [ssl:error] [pid 3008584:tid 3008584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:08.521687 2026] [ssl:error] [pid 3009519:tid 3009519] (EAI 2)Name or service not known: [client 144.76.19.72:25920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:08.521734 2026] [ssl:error] [pid 3009519:tid 3009519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:09.467246 2026] [security2:error] [pid 2992077:tid 2992077] [client 43.130.234.38:24649] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswmcyL67h36wNZfGfiXwAAAAk"]
[Thu Jul 30 12:08:09.467295 2026] [security2:error] [pid 2992077:tid 2992077] [client 43.130.234.38:24649] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswmcyL67h36wNZfGfiXwAAAAk"]
[Thu Jul 30 12:08:09.467541 2026] [security2:error] [pid 2992077:tid 2992077] [client 43.130.234.38:24649] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswmcyL67h36wNZfGfiXwAAAAk"]
[Thu Jul 30 12:08:09.524759 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.22:60664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:09.525388 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.22:60664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:09.527545 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.20:49618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:09.528147 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.20:49618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:09.542542 2026] [core:error] [pid 3009519:tid 3009519] [client 66.249.66.40:59408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:09.542561 2026] [core:error] [pid 3009519:tid 3009519] [client 66.249.66.40:59408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:10.345425 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.10:48946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:10.346088 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.10:48946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:10.457131 2026] [lsapi:warn] [pid 3008691:tid 3008691] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:08:10.476950 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.23:55378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:10.477611 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.23:55378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:10.501505 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.26:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:10.502153 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.26:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:10.710273 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.68:22870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:10.710906 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.68:22870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:10.858123 2026] [access_compat:error] [pid 3008689:tid 3008689] [client 103.25.250.251:59716] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:11.044199 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:37460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:11.044857 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:37460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:11.064251 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.8:33432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:11.064888 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.8:33432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:11.284129 2026] [authz_core:error] [pid 3009048:tid 3009048] [client 57.141.0.31:20322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:11.284830 2026] [authz_core:error] [pid 3009048:tid 3009048] [client 57.141.0.31:20322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:11.330293 2026] [core:error] [pid 2998392:tid 2998392] (13)Permission denied: [client 216.73.216.199:14053] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/57267.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.2f1ff1fa.tmp
[Thu Jul 30 12:08:11.579519 2026] [ssl:error] [pid 3001138:tid 3001138] (EAI 2)Name or service not known: [client 144.76.19.72:49914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:11.579555 2026] [ssl:error] [pid 3001138:tid 3001138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:11.633606 2026] [ssl:error] [pid 2995373:tid 2995373] (EAI 2)Name or service not known: [client 144.76.19.72:49928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:11.633645 2026] [ssl:error] [pid 2995373:tid 2995373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:11.750513 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.36:63776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:11.751138 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.36:63776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:11.931955 2026] [ssl:error] [pid 2998392:tid 2998392] (70014)End of file found: [client 216.73.216.199:14053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:12.069476 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:37472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:12.070115 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.52:37472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:12.115931 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.17:23320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:12.116567 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.17:23320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:12.201481 2026] [access_compat:error] [pid 3009048:tid 3009048] [client 103.72.86.239:39614] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:12.434351 2026] [ssl:error] [pid 3009519:tid 3009519] (70014)End of file found: [client 216.73.216.199:2840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:12.571964 2026] [access_compat:error] [pid 3010714:tid 3010714] [client 176.241.66.87:53234] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:12.612392 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.47:26228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:12.613015 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.47:26228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:12.790462 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.68:22878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:12.791107 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.68:22878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:13.434333 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.69:46084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:13.434979 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.69:46084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:13.503223 2026] [ssl:error] [pid 2995373:tid 2995373] (70014)End of file found: [client 216.73.216.199:37736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:13.711127 2026] [security2:error] [pid 3007509:tid 3007509] [client 43.130.234.38:29247] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswnUgJ_XfWzzzJnuFXXAAAABw"]
[Thu Jul 30 12:08:13.711178 2026] [security2:error] [pid 3007509:tid 3007509] [client 43.130.234.38:29247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amswnUgJ_XfWzzzJnuFXXAAAABw"]
[Thu Jul 30 12:08:13.711441 2026] [security2:error] [pid 3007509:tid 3007509] [client 43.130.234.38:29247] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amswnUgJ_XfWzzzJnuFXXAAAABw"]
[Thu Jul 30 12:08:13.809282 2026] [ssl:error] [pid 3001138:tid 3001138] (70014)End of file found: [client 216.73.216.199:31030] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:13.925109 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.24:25748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:13.925753 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.24:25748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:14.148536 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.10:48948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:14.149170 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.10:48948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:14.400982 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.35:49192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:14.401700 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.35:49192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:14.798745 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.34:32652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:14.799370 2026] [authz_core:error] [pid 3003847:tid 3003847] [client 57.141.0.34:32652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:14.824848 2026] [ssl:error] [pid 2987376:tid 2987376] (EAI 2)Name or service not known: [client 144.76.19.72:49932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:14.824869 2026] [ssl:error] [pid 2987376:tid 2987376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:14.878481 2026] [ssl:error] [pid 3008692:tid 3008692] (EAI 2)Name or service not known: [client 144.76.19.72:49946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:14.878516 2026] [ssl:error] [pid 3008692:tid 3008692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:14.966604 2026] [access_compat:error] [pid 3010823:tid 3010823] [client 157.20.138.62:56741] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:15.107725 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 103.59.160.131:51900] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 12:08:15.121486 2026] [access_compat:error] [pid 3010714:tid 3010714] [client 103.25.250.251:59717] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:15.425317 2026] [security2:error] [pid 2996755:tid 2996755] [client 216.73.216.199:57128] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/var.conf"] [unique_id "amswn1U3qJnrwyZYo5hvWAAAACQ"]
[Thu Jul 30 12:08:15.425680 2026] [security2:error] [pid 2996755:tid 2996755] [client 216.73.216.199:57128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/var.conf"] [unique_id "amswn1U3qJnrwyZYo5hvWAAAACQ"]
[Thu Jul 30 12:08:15.425944 2026] [security2:error] [pid 2996755:tid 2996755] [client 216.73.216.199:57128] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/var.conf"] [unique_id "amswn1U3qJnrwyZYo5hvWAAAACQ"]
[Thu Jul 30 12:08:15.709654 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.40:51050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:15.710334 2026] [authz_core:error] [pid 3005748:tid 3005748] [client 57.141.0.40:51050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:15.779132 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.7:38174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:15.779769 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.7:38174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:15.913463 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.7:38180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:15.914096 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.7:38180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:16.453394 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.42:32490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:16.454028 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.42:32490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:16.952259 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.22:60680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:16.952881 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.22:60680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:17.013082 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 74.248.33.8:50149] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/rest-api/fields/error_log
[Thu Jul 30 12:08:17.458924 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.3:26150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:17.459557 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.3:26150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:17.524993 2026] [security2:error] [pid 2996755:tid 2996755] [client 216.73.216.199:57128] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/norwegian/errmsg.sys"] [unique_id "amswoVU3qJnrwyZYo5hvXAAAACQ"]
[Thu Jul 30 12:08:17.525329 2026] [security2:error] [pid 2996755:tid 2996755] [client 216.73.216.199:57128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/norwegian/errmsg.sys"] [unique_id "amswoVU3qJnrwyZYo5hvXAAAACQ"]
[Thu Jul 30 12:08:17.525594 2026] [security2:error] [pid 2996755:tid 2996755] [client 216.73.216.199:57128] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/norwegian/errmsg.sys"] [unique_id "amswoVU3qJnrwyZYo5hvXAAAACQ"]
[Thu Jul 30 12:08:17.624406 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.34:32654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:17.625029 2026] [authz_core:error] [pid 3008642:tid 3008642] [client 57.141.0.34:32654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:17.707908 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.62:21114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:17.708572 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.62:21114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:17.826811 2026] [ssl:error] [pid 2996755:tid 2996755] (70014)End of file found: [client 216.73.216.199:57128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:17.891980 2026] [access_compat:error] [pid 3009640:tid 3009640] [client 176.241.66.87:53836] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:17.938855 2026] [ssl:error] [pid 3011000:tid 3011000] (EAI 2)Name or service not known: [client 144.76.19.72:49962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:17.938906 2026] [ssl:error] [pid 3011000:tid 3011000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:17.993716 2026] [ssl:error] [pid 2987376:tid 2987376] (EAI 2)Name or service not known: [client 144.76.19.72:49972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:17.993755 2026] [ssl:error] [pid 2987376:tid 2987376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:18.165455 2026] [authz_core:error] [pid 3011000:tid 3011000] [client 57.141.0.21:57920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:18.166119 2026] [authz_core:error] [pid 3011000:tid 3011000] [client 57.141.0.21:57920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:18.417585 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.43:22778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:18.418231 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.43:22778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:18.513598 2026] [access_compat:error] [pid 2987376:tid 2987376] [client 103.72.86.239:40159] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:18.933392 2026] [ssl:error] [pid 3009048:tid 3009048] (70014)End of file found: [client 216.73.216.199:42732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:18.953938 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.38:34898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:18.954576 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.38:34898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:19.001764 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.28:23474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:19.002414 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.28:23474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:19.015935 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.17:23326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:19.016573 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.17:23326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:19.216389 2026] [ssl:error] [pid 3011048:tid 3011048] (70014)End of file found: [client 216.73.216.199:63284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:19.726631 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.12:57276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:19.727257 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.12:57276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:19.948942 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 103.59.160.131:61099] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/php-ai-client/src/Providers/error_log
[Thu Jul 30 12:08:20.191008 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.60:33142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:20.191676 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.60:33142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:20.526890 2026] [authz_core:error] [pid 3011000:tid 3011000] [client 57.141.0.27:55810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:20.527547 2026] [authz_core:error] [pid 3011000:tid 3011000] [client 57.141.0.27:55810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:20.920555 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.15:24514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:20.921179 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.15:24514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:20.990136 2026] [lsapi:warn] [pid 2987552:tid 2987552] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:08:20.997446 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.46:60634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:20.998137 2026] [authz_core:error] [pid 2987376:tid 2987376] [client 57.141.0.46:60634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:21.051144 2026] [ssl:error] [pid 3011001:tid 3011001] (EAI 2)Name or service not known: [client 144.76.19.72:41086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:21.051192 2026] [ssl:error] [pid 3011001:tid 3011001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:21.102871 2026] [ssl:error] [pid 3001174:tid 3001174] (EAI 2)Name or service not known: [client 144.76.19.72:41102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:21.102917 2026] [ssl:error] [pid 3001174:tid 3001174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:21.364178 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.11:39374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:21.364832 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.11:39374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:21.686531 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.52:55078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:21.687164 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.52:55078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:21.736796 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.34:23718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:21.737439 2026] [authz_core:error] [pid 3003765:tid 3003765] [client 57.141.0.34:23718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:22.077427 2026] [authz_core:error] [pid 3009578:tid 3009578] [client 57.141.0.8:22604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:22.078127 2026] [authz_core:error] [pid 3009578:tid 3009578] [client 57.141.0.8:22604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:22.202534 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.10:25486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:22.203156 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.10:25486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:23.059734 2026] [authz_core:error] [pid 3010928:tid 3010928] [client 57.141.0.29:49440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:23.060376 2026] [authz_core:error] [pid 3010928:tid 3010928] [client 57.141.0.29:49440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:23.362928 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.50:39060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:23.363579 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.50:39060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:23.963779 2026] [access_compat:error] [pid 3009578:tid 3009578] [client 103.72.86.239:39249] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:24.035519 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.71:51068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:24.036159 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.71:51068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:24.157577 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:41112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:24.157609 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:24.217540 2026] [ssl:error] [pid 3007509:tid 3007509] (EAI 2)Name or service not known: [client 144.76.19.72:41120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:24.217584 2026] [ssl:error] [pid 3007509:tid 3007509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:24.237303 2026] [cgi:error] [pid 3001174:tid 3001174] [client 121.244.109.8:5233] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 12:08:24 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 12:08:24.237445 2026] [cgi:error] [pid 3001174:tid 3001174] [client 121.244.109.8:5233] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 12:08:24 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 12:08:24.237555 2026] [cgi:error] [pid 3001174:tid 3001174] [client 121.244.109.8:5233] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 12:08:24 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 12:08:24.237655 2026] [cgi:error] [pid 3001174:tid 3001174] [client 121.244.109.8:5233] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 12:08:24 2026] iplist-cgi.pl: Use of uninitialized value $octet in pattern match (m//) at iplist-cgi.pl line 26.
[Thu Jul 30 12:08:24.237755 2026] [cgi:error] [pid 3001174:tid 3001174] [client 121.244.109.8:5233] AH01215: stderr from /home/magiccoo/public_html/cgi-bin/iplist-cgi.pl: [Thu Jul 30 12:08:24 2026] iplist-cgi.pl: Use of uninitialized value $mask in pattern match (m//) at iplist-cgi.pl line 31.
[Thu Jul 30 12:08:24.262199 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.32:22696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:24.262835 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.32:22696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:24.380609 2026] [authz_core:error] [pid 3010928:tid 3010928] [client 57.141.0.51:39190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:24.381253 2026] [authz_core:error] [pid 3010928:tid 3010928] [client 57.141.0.51:39190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:24.398754 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.40:60632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:24.399383 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.40:60632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:24.527518 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.41:27596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:24.528163 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.41:27596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:25.325727 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.27:43076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:25.326360 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.27:43076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:25.528023 2026] [access_compat:error] [pid 3001138:tid 3001138] [client 157.20.138.62:57594] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:26.024841 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.14:58462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:26.025467 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.14:58462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:26.088936 2026] [ssl:error] [pid 2998335:tid 2998335] (70014)End of file found: [client 216.73.216.199:16356] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:26.294867 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.26:64560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:26.295561 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.26:64560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:26.386270 2026] [ssl:error] [pid 3010714:tid 3010714] (70014)End of file found: [client 216.73.216.199:16142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:26.495733 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.27:43080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:26.496372 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.27:43080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:26.903384 2026] [authz_core:error] [pid 3010823:tid 3010823] [client 57.141.0.45:41860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:26.904082 2026] [authz_core:error] [pid 3010823:tid 3010823] [client 57.141.0.45:41860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:26.974971 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.71:51070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:26.975605 2026] [authz_core:error] [pid 3002313:tid 3002313] [client 57.141.0.71:51070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:27.270824 2026] [ssl:error] [pid 3008692:tid 3008692] (EAI 2)Name or service not known: [client 144.76.19.72:41136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:27.270858 2026] [ssl:error] [pid 3008692:tid 3008692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:27.325839 2026] [ssl:error] [pid 3009642:tid 3009642] (EAI 2)Name or service not known: [client 144.76.19.72:41140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:27.325913 2026] [ssl:error] [pid 3009642:tid 3009642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:27.353331 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.16:32462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:27.353957 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.16:32462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:27.360728 2026] [authz_core:error] [pid 3011046:tid 3011046] [client 57.141.0.32:22708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:27.361353 2026] [authz_core:error] [pid 3011046:tid 3011046] [client 57.141.0.32:22708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:27.944779 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.37:30244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:27.945421 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.37:30244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:28.196414 2026] [ssl:error] [pid 3005748:tid 3005748] (70014)End of file found: [client 216.73.216.199:8483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:28.205750 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.67:20916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:28.206405 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.67:20916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:29.087892 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.67:20926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:29.088733 2026] [authz_core:error] [pid 3005753:tid 3005753] [client 57.141.0.67:20926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:29.116928 2026] [authz_core:error] [pid 3011046:tid 3011046] [client 57.141.0.26:64574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:29.117562 2026] [authz_core:error] [pid 3011046:tid 3011046] [client 57.141.0.26:64574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:29.450111 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.62:64144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:29.450729 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.62:64144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:29.843006 2026] [access_compat:error] [pid 3010157:tid 3010157] [client 176.241.66.87:54935] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:29.982174 2026] [access_compat:error] [pid 2976711:tid 2976711] [client 103.25.250.251:59718] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:30.058807 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.13:51212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:30.059823 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.13:51212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:30.151872 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.10:27764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:30.152535 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.10:27764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:30.413494 2026] [ssl:error] [pid 3011001:tid 3011001] (EAI 2)Name or service not known: [client 144.76.19.72:65030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:30.413554 2026] [ssl:error] [pid 3011001:tid 3011001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:30.427258 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.44:32200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:30.427883 2026] [authz_core:error] [pid 3001139:tid 3001139] [client 57.141.0.44:32200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:30.467366 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:65032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:30.467410 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:30.938342 2026] [authz_core:error] [pid 3009577:tid 3009577] [client 57.141.0.70:58128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:30.938968 2026] [authz_core:error] [pid 3009577:tid 3009577] [client 57.141.0.70:58128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:31.005782 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.40:34396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:31.006439 2026] [authz_core:error] [pid 2992077:tid 2992077] [client 57.141.0.40:34396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:31.087254 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.36:42690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:31.087874 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.36:42690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:31.666490 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.40:34412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:31.667148 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.40:34412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:31.808850 2026] [ssl:error] [pid 3000715:tid 3000715] (70014)End of file found: [client 216.73.216.199:30269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:32.167614 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.71:51080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:32.168238 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.71:51080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:32.557977 2026] [lsapi:warn] [pid 2992077:tid 2992077] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:08:32.605037 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.33:28412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:32.605668 2026] [authz_core:error] [pid 3009640:tid 3009640] [client 57.141.0.33:28412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:32.697317 2026] [authz_core:error] [pid 3011046:tid 3011046] [client 57.141.0.64:61900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:32.697936 2026] [authz_core:error] [pid 3011046:tid 3011046] [client 57.141.0.64:61900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:33.139177 2026] [core:error] [pid 3001139:tid 3001139] [client 57.141.0.48:46630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:33.139235 2026] [core:error] [pid 3001139:tid 3001139] [client 57.141.0.48:46630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:33.298489 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.65:41692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:33.299130 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.65:41692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:33.398090 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.51:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:33.398713 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.51:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:33.462137 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 74.248.33.8:50878] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/pomo/error_log
[Thu Jul 30 12:08:33.499133 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 74.248.33.8:50878] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/rest-api/error_log
[Thu Jul 30 12:08:33.523679 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:65048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:33.523704 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:33.578309 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:65050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:33.578338 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:33.913541 2026] [ssl:error] [pid 3008694:tid 3008694] (70014)End of file found: [client 216.73.216.199:23865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:34.010603 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.27:56060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:34.011245 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.27:56060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:34.015160 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.50:49704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:34.015769 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.50:49704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:34.510736 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.23:38042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:34.511355 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.23:38042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:34.704999 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.70:58130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:34.705633 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.70:58130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:34.789637 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.49:45592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:34.790263 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.49:45592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:34.818059 2026] [ssl:error] [pid 3005698:tid 3005698] (70014)End of file found: [client 216.73.216.199:20042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:34.936627 2026] [lsapi:warn] [pid 3007934:tid 3007934] [client 45.63.104.11:43768] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 12:08:34.936677 2026] [lsapi:warn] [pid 3007934:tid 3007934] [client 45.63.104.11:43768] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 12:08:35.696489 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.65:41706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:35.697151 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.65:41706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:36.139250 2026] [access_compat:error] [pid 2995446:tid 2995446] [client 157.20.138.62:58284] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:36.334188 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.49:45594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:36.334807 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.49:45594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:36.347264 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.16:38736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:36.347902 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.16:38736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:36.469261 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.63:47196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:36.469884 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.63:47196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:36.681526 2026] [ssl:error] [pid 2995373:tid 2995373] (EAI 2)Name or service not known: [client 144.76.19.72:65062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:36.681552 2026] [ssl:error] [pid 2995373:tid 2995373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:36.737646 2026] [ssl:error] [pid 3010714:tid 3010714] (EAI 2)Name or service not known: [client 144.76.19.72:65066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:36.737694 2026] [ssl:error] [pid 3010714:tid 3010714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:36.809506 2026] [access_compat:error] [pid 3007934:tid 3007934] [client 103.25.250.251:59719] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:36.995364 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.64:38984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:36.996011 2026] [authz_core:error] [pid 3008692:tid 3008692] [client 57.141.0.64:38984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:37.317792 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.37:32040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:37.318411 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.37:32040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:37.493315 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.55:48238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:37.493964 2026] [authz_core:error] [pid 2992185:tid 2992185] [client 57.141.0.55:48238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:37.825654 2026] [access_compat:error] [pid 2981908:tid 2981908] [client 172.202.95.21:31999] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:08:37.934466 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.47:44988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:37.935121 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.47:44988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:37.948593 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.44:32214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:37.949209 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.44:32214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:37.961292 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.30:21982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:37.961912 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.30:21982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:39.152906 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.69:25658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:39.153556 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.69:25658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:39.200236 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.46:24736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:39.200861 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.46:24736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:39.397793 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.58:40796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:39.398434 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.58:40796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:39.643509 2026] [ssl:error] [pid 3009641:tid 3009641] (70014)End of file found: [client 216.73.216.199:51428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:39.809295 2026] [security2:error] [pid 3010047:tid 3010047] [client 124.156.206.145:47602] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.josephashmore.org"] [uri "/"] [unique_id "amswt8UPzERPKsK-I-N62gAAAAM"]
[Thu Jul 30 12:08:39.842819 2026] [ssl:error] [pid 3010714:tid 3010714] (EAI 2)Name or service not known: [client 144.76.19.72:21028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:39.842853 2026] [ssl:error] [pid 3010714:tid 3010714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:39.845483 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.33:28424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:39.846165 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.33:28424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:39.896653 2026] [ssl:error] [pid 3008694:tid 3008694] (EAI 2)Name or service not known: [client 144.76.19.72:21042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:39.896689 2026] [ssl:error] [pid 3008694:tid 3008694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:40.246917 2026] [core:error] [pid 2987552:tid 2987552] (13)Permission denied: [client 216.73.216.199:32655] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-32/validate
[Thu Jul 30 12:08:40.531980 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.38:64630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:40.532621 2026] [authz_core:error] [pid 3005749:tid 3005749] [client 57.141.0.38:64630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:40.547636 2026] [security2:error] [pid 2987552:tid 2987552] [client 216.73.216.199:32655] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amswuBz50EbVdr_x-guuqQAAADA"]
[Thu Jul 30 12:08:40.547975 2026] [security2:error] [pid 2987552:tid 2987552] [client 216.73.216.199:32655] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amswuBz50EbVdr_x-guuqQAAADA"]
[Thu Jul 30 12:08:40.548273 2026] [security2:error] [pid 2987552:tid 2987552] [client 216.73.216.199:32655] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amswuBz50EbVdr_x-guuqQAAADA"]
[Thu Jul 30 12:08:40.857100 2026] [core:error] [pid 2987552:tid 2987552] (13)Permission denied: [client 216.73.216.199:32655] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_delay_info/aliases
[Thu Jul 30 12:08:40.892362 2026] [access_compat:error] [pid 3007868:tid 3007868] [client 176.241.66.87:55988] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:41.158189 2026] [ssl:error] [pid 2987552:tid 2987552] (70014)End of file found: [client 216.73.216.199:32655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:41.272175 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.67:52554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:41.272838 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.67:52554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:41.389810 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.13:63920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:41.390439 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.13:63920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:41.442742 2026] [security2:error] [pid 3008694:tid 3008694] [client 77.68.114.186:49990] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.shelterforum.info"] [uri "/xmlrpc.php"] [unique_id "amswuY9_1bwz1bNYV4YGyQAAACg"]
[Thu Jul 30 12:08:41.546099 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.62:28714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:41.546720 2026] [authz_core:error] [pid 2996755:tid 2996755] [client 57.141.0.62:28714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:41.657056 2026] [ssl:error] [pid 3000715:tid 3000715] (70014)End of file found: [client 216.73.216.199:20158] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:41.991278 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.11:60486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:41.991903 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.11:60486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:42.246695 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.31:60146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:42.247353 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.31:60146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:42.950316 2026] [ssl:error] [pid 3005650:tid 3005650] (EAI 2)Name or service not known: [client 144.76.19.72:21048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:42.950358 2026] [ssl:error] [pid 3005650:tid 3005650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:43.004588 2026] [ssl:error] [pid 3011845:tid 3011845] (EAI 2)Name or service not known: [client 144.76.19.72:21060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:43.004632 2026] [ssl:error] [pid 3011845:tid 3011845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:43.036417 2026] [lsapi:warn] [pid 3005749:tid 3005749] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:08:43.141840 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.69:25664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:43.142458 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.69:25664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:43.293741 2026] [access_compat:error] [pid 3007936:tid 3007936] [client 103.25.250.251:4195] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:43.516135 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.4:21316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:43.516758 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.4:21316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:43.581709 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.3:59826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:43.582331 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.3:59826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:44.136125 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.35:28644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:44.136769 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.35:28644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:44.268862 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.46:63704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:44.269485 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.46:63704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:44.369014 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.68:45182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:44.369650 2026] [authz_core:error] [pid 3008691:tid 3008691] [client 57.141.0.68:45182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:44.476398 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.21:21148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:44.477036 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.21:21148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:45.200859 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.32:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:45.201523 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.32:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:45.423038 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 103.59.160.131:50583] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/php-ai-client/src/Common/error_log, referer: https://www.google.com/
[Thu Jul 30 12:08:45.570696 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.45:37084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:45.571359 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.45:37084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:45.596766 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.15:29990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:45.597417 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.15:29990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:45.951256 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.64.170:35592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:45.951291 2026] [core:error] [pid 2981908:tid 2981908] [client 66.249.64.170:35592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:46.059461 2026] [ssl:error] [pid 3007275:tid 3007275] (EAI 2)Name or service not known: [client 144.76.19.72:21068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:46.059509 2026] [ssl:error] [pid 3007275:tid 3007275] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:46.116441 2026] [ssl:error] [pid 3011845:tid 3011845] (EAI 2)Name or service not known: [client 144.76.19.72:21080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:46.116479 2026] [ssl:error] [pid 3011845:tid 3011845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:46.155182 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.15:29994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:46.155824 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.15:29994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:46.431908 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.26:27034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:46.432571 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.26:27034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:46.643854 2026] [access_compat:error] [pid 3002610:tid 3002610] [client 157.20.138.62:58868] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:46.666658 2026] [access_compat:error] [pid 3009641:tid 3009641] [client 176.241.66.87:56443] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:46.833837 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.31:58198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:46.834487 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.31:58198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:47.309236 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.51:47832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:47.309881 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.51:47832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:47.361310 2026] [access_compat:error] [pid 3007509:tid 3007509] [client 103.72.86.239:40245] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:47.377742 2026] [security2:error] [pid 2987552:tid 2987552] [client 106.54.62.156:47544] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amswvxz50EbVdr_x-guurQAAADA"], referer: http://banskotransfer.com
[Thu Jul 30 12:08:47.512980 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.37:39254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:47.513631 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.37:39254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:47.573357 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.43:26774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:47.574008 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.43:26774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:47.767264 2026] [access_compat:error] [pid 3007868:tid 3007868] [client 103.25.250.251:4196] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:48.104554 2026] [ssl:error] [pid 3005749:tid 3005749] (70014)End of file found: [client 216.73.216.199:33996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:48.244461 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.30:33304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:48.245202 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.4:21328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:48.245227 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.30:33304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:48.245843 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.4:21328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:48.718666 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.67:50096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:48.719293 2026] [authz_core:error] [pid 2995373:tid 2995373] [client 57.141.0.67:50096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:49.007047 2026] [ssl:error] [pid 3007275:tid 3007275] (70014)End of file found: [client 216.73.216.199:50312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:49.217679 2026] [ssl:error] [pid 3012077:tid 3012077] (EAI 2)Name or service not known: [client 144.76.19.72:21094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:49.217709 2026] [ssl:error] [pid 3012077:tid 3012077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:49.273531 2026] [ssl:error] [pid 3012077:tid 3012077] (EAI 2)Name or service not known: [client 144.76.19.72:21102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:49.273556 2026] [ssl:error] [pid 3012077:tid 3012077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:49.410018 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.14:39538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:49.410652 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.14:39538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:49.582037 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.55:29878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:49.582667 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.55:29878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:49.716483 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.69:64816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:49.717138 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.69:64816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:50.017220 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.65:20312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:50.017879 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.65:20312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:50.223291 2026] [ssl:error] [pid 3012077:tid 3012077] (70014)End of file found: [client 216.73.216.199:28562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:51.016321 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.18:55472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:51.016963 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.18:55472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:51.020431 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.16:27020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:51.021042 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.16:27020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:51.224018 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.44:29958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:51.224940 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.44:29958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:51.598007 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.31:58208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:51.598642 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.31:58208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:51.844636 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.37:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:51.845316 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.37:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:51.912092 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.64:23420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:51.912738 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.64:23420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:52.006717 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.17:55364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:52.007376 2026] [authz_core:error] [pid 3007509:tid 3007509] [client 57.141.0.17:55364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:52.328216 2026] [ssl:error] [pid 3002610:tid 3002610] (EAI 2)Name or service not known: [client 144.76.19.72:54354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:52.328245 2026] [ssl:error] [pid 3002610:tid 3002610] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:52.384324 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:54364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:52.384383 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:52.564507 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.30:65234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:52.565169 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.30:65234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:52.920446 2026] [access_compat:error] [pid 3008641:tid 3008641] [client 176.241.66.87:57137] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:52.953639 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.62:46872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:52.954851 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.62:46872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:53.385962 2026] [access_compat:error] [pid 2996755:tid 2996755] [client 45.158.164.139:55554] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:08:53.420470 2026] [ssl:error] [pid 3009519:tid 3009519] (70014)End of file found: [client 216.73.216.199:36930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:53.507794 2026] [lsapi:warn] [pid 3000715:tid 3000715] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:08:53.628556 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.45:32904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:53.629643 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.45:32904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:53.751260 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.19:25004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:53.751916 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.19:25004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:53.827742 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.61:41754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:53.829174 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.61:41754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:54.349326 2026] [ssl:error] [pid 2987552:tid 2987552] (70014)End of file found: [client 216.73.216.199:4441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:54.352040 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.6:25706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:54.352671 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.6:25706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:54.562937 2026] [security2:error] [pid 3007898:tid 3007898] [client 185.191.171.1:11266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/central-warwickshire-youth-football-league-referees"] [unique_id "amswxi7MWnjx3NCyryJ_6QAAABY"]
[Thu Jul 30 12:08:54.778226 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.32:39106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:54.778920 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.32:39106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:54.883720 2026] [security2:error] [pid 3012106:tid 3012106] [client 162.14.114.97:53554] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amswxtVabxPiucjSGTBGIwAAAAc"]
[Thu Jul 30 12:08:54.901706 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.37:38206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:54.902363 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.37:38206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:55.025686 2026] [core:error] [pid 2998335:tid 2998335] [client 57.141.0.19:25020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:55.025727 2026] [core:error] [pid 2998335:tid 2998335] [client 57.141.0.19:25020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:08:55.382457 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.7:37956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:55.383111 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.7:37956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:55.441719 2026] [ssl:error] [pid 3007936:tid 3007936] (EAI 2)Name or service not known: [client 144.76.19.72:54374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:55.441758 2026] [ssl:error] [pid 3007936:tid 3007936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:55.495319 2026] [ssl:error] [pid 3005606:tid 3005606] (EAI 2)Name or service not known: [client 144.76.19.72:54390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:55.495354 2026] [ssl:error] [pid 3005606:tid 3005606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:55.695353 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.62:46878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:55.695995 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.62:46878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:56.323131 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.60:63742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:56.323773 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.60:63742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:56.569468 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.30:65244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:56.570102 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.30:65244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:56.762851 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.60:63744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:56.763495 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.60:63744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:56.859206 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.21:48158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:56.859834 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.21:48158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:56.937586 2026] [ssl:error] [pid 3002610:tid 3002610] (70014)End of file found: [client 216.73.216.199:18188] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:57.030185 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.21:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:57.030804 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.21:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:57.197288 2026] [access_compat:error] [pid 3012106:tid 3012106] [client 157.20.138.62:59454] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:57.501870 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.2:50042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:57.502524 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.2:50042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:57.626425 2026] [security2:error] [pid 2998280:tid 2998280] [client 43.166.255.102:48480] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.com"] [uri "/"] [unique_id "amswyc44-HqgXIL6SydZiQAAACI"]
[Thu Jul 30 12:08:57.856133 2026] [security2:error] [pid 3012077:tid 3012077] [client 162.14.114.97:51690] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amswyZRqnmK4mSVLoU9WMAAAAAI"], referer: http://berehap.be
[Thu Jul 30 12:08:58.059652 2026] [access_compat:error] [pid 3007936:tid 3007936] [client 103.72.86.239:38540] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:58.252984 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.58:51432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:58.253612 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.58:51432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:58.512636 2026] [ssl:error] [pid 2992186:tid 2992186] (70014)End of file found: [client 216.73.216.199:7366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:58.571341 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:54398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:58.571378 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:58.608866 2026] [access_compat:error] [pid 3008689:tid 3008689] [client 103.25.250.251:59720] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:08:58.626012 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:54414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:08:58.626042 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:08:58.702332 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.28:59972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:58.702968 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.28:59972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:58.740396 2026] [ssl:error] [pid 3012105:tid 3012105] (70014)End of file found: [client 216.73.216.199:20013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:08:59.170773 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.70:61292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:59.171429 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.70:61292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:59.363205 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.13:54862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:59.363832 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.13:54862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:59.376701 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.51:32466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:59.377325 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.51:32466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:59.442953 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.38:61372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:59.443600 2026] [authz_core:error] [pid 3008694:tid 3008694] [client 57.141.0.38:61372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:59.588993 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.17:55386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:08:59.589657 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.17:55386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:08:59.628232 2026] [access_compat:error] [pid 3009519:tid 3009519] [client 3.84.151.251:34250] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/12/harry-potter-and-the-deathly-hallows-part-1.jpg
[Thu Jul 30 12:08:59.628351 2026] [access_compat:error] [pid 3009519:tid 3009519] [client 3.84.151.251:34250] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:09:00.697117 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.46:32844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:00.697783 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.46:32844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:00.811676 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.67:32632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:00.812328 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.67:32632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:00.963092 2026] [security2:error] [pid 3012138:tid 3012138] [client 43.130.106.18:40704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amswzOi7m8MPgIUMTK0lZwAAAAo"]
[Thu Jul 30 12:09:01.542829 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.24:43770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:01.543484 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.24:43770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:01.680771 2026] [ssl:error] [pid 3012077:tid 3012077] (EAI 2)Name or service not known: [client 144.76.19.72:65274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:01.680812 2026] [ssl:error] [pid 3012077:tid 3012077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:01.737873 2026] [ssl:error] [pid 3010714:tid 3010714] (EAI 2)Name or service not known: [client 144.76.19.72:65282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:01.737900 2026] [ssl:error] [pid 3010714:tid 3010714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:02.109569 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.49:34438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:02.110195 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.49:34438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:02.181907 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.19:25026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:02.182569 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.19:25026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:02.233653 2026] [ssl:error] [pid 3012138:tid 3012138] (70014)End of file found: [client 216.73.216.199:12210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:02.274641 2026] [authz_core:error] [pid 3012675:tid 3012675] [client 57.141.0.32:39110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:02.275329 2026] [authz_core:error] [pid 3012675:tid 3012675] [client 57.141.0.32:39110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:02.918568 2026] [security2:error] [pid 3007936:tid 3007936] [client 43.130.106.18:60046] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amswzlYVlFHvIkNoZVOergAAACc"], referer: http://www.prosperon.co.uk
[Thu Jul 30 12:09:03.064893 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.37:32606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:03.065535 2026] [authz_core:error] [pid 3008641:tid 3008641] [client 57.141.0.37:32606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:03.216141 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.1:36454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:03.216768 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.1:36454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:03.718386 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.40:33484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:03.719047 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.40:33484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:03.860001 2026] [access_compat:error] [pid 3012203:tid 3012203] [client 125.176.202.122:51166] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:03.974964 2026] [lsapi:warn] [pid 3001138:tid 3001138] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:09:03.988969 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.19:24906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:03.989628 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.19:24906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:04.069685 2026] [core:error] [pid 3007936:tid 3007936] (13)Permission denied: [client 216.73.216.199:30236] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS2/flags
[Thu Jul 30 12:09:04.122428 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.18:54846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:04.123104 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.18:54846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:04.171912 2026] [ssl:error] [pid 3007936:tid 3007936] (70014)End of file found: [client 216.73.216.199:30236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:04.382637 2026] [access_compat:error] [pid 3012105:tid 3012105] [client 176.241.66.87:58040] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:04.455229 2026] [security2:error] [pid 3005698:tid 3005698] [client 162.14.114.97:55472] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amsw0CaxOasDpo61Lk8LtQAAAB0"], referer: https://www.berehap.be/
[Thu Jul 30 12:09:04.795578 2026] [ssl:error] [pid 3012544:tid 3012544] (EAI 2)Name or service not known: [client 144.76.19.72:65290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:04.795629 2026] [ssl:error] [pid 3012544:tid 3012544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:04.850815 2026] [ssl:error] [pid 3010714:tid 3010714] (EAI 2)Name or service not known: [client 144.76.19.72:65294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:04.850848 2026] [ssl:error] [pid 3010714:tid 3010714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:05.003397 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.69:35912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:05.004045 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.69:35912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:05.160004 2026] [core:error] [pid 3012544:tid 3012544] [client 66.249.66.41:49102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:05.160041 2026] [core:error] [pid 3012544:tid 3012544] [client 66.249.66.41:49102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:05.165003 2026] [core:error] [pid 3010714:tid 3010714] [client 66.249.66.168:44903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:05.165044 2026] [core:error] [pid 3010714:tid 3010714] [client 66.249.66.168:44903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:05.629710 2026] [access_compat:error] [pid 2998392:tid 2998392] [client 103.72.86.239:40165] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:05.847155 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.14:37616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:05.847809 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.14:37616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:06.120857 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.19:24912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:06.121492 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.19:24912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:06.154723 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.34:44522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:06.155376 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.34:44522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:06.277390 2026] [ssl:error] [pid 2992186:tid 2992186] (70014)End of file found: [client 216.73.216.199:50944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:06.711585 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.48:20104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:06.712206 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.48:20104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:06.839729 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.47:24398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:06.840391 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.47:24398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:07.083706 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.48:20120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:07.084329 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.48:20120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:07.641351 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.14:37632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:07.641974 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.14:37632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:07.715938 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.39:27720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:07.716570 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.39:27720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:07.733995 2026] [access_compat:error] [pid 3012140:tid 3012140] [client 157.20.138.62:60044] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:07.905657 2026] [ssl:error] [pid 3012828:tid 3012828] (EAI 2)Name or service not known: [client 144.76.19.72:65302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:07.905692 2026] [ssl:error] [pid 3012828:tid 3012828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:07.959372 2026] [ssl:error] [pid 3012138:tid 3012138] (EAI 2)Name or service not known: [client 144.76.19.72:65306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:07.959405 2026] [ssl:error] [pid 3012138:tid 3012138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:08.000879 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.40:33300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:08.001513 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.40:33300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:08.690920 2026] [ssl:error] [pid 2998335:tid 2998335] (70014)End of file found: [client 216.73.216.199:2557] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:08.781637 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.29:37708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:08.782269 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.29:37708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:09.150283 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.49:22568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:09.150929 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.49:22568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:09.344628 2026] [access_compat:error] [pid 2987552:tid 2987552] [client 103.25.250.251:59721] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:09.403208 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.27:43114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:09.403828 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.27:43114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:09.884493 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.17:37528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:09.885131 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.17:37528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:10.160864 2026] [access_compat:error] [pid 3007509:tid 3007509] [client 176.241.66.87:58458] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:10.185217 2026] [security2:error] [pid 3012929:tid 3012929] [client 188.132.150.181:55474] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsw1t6KRNQwKpW8xm6mDgAAACo"]
[Thu Jul 30 12:09:10.185273 2026] [security2:error] [pid 3012929:tid 3012929] [client 188.132.150.181:55474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsw1t6KRNQwKpW8xm6mDgAAACo"]
[Thu Jul 30 12:09:10.185608 2026] [security2:error] [pid 3012929:tid 3012929] [client 188.132.150.181:55474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsw1t6KRNQwKpW8xm6mDgAAACo"]
[Thu Jul 30 12:09:10.277643 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.70:54746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:10.278273 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.70:54746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:10.290190 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.64:33308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:10.290802 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.64:33308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:10.415111 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 103.59.160.131:62915] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/customize/error_log
[Thu Jul 30 12:09:10.503623 2026] [ssl:error] [pid 3012675:tid 3012675] (70014)End of file found: [client 216.73.216.199:11620] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:11.013368 2026] [ssl:error] [pid 3012929:tid 3012929] (EAI 2)Name or service not known: [client 144.76.19.72:18868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:11.013405 2026] [ssl:error] [pid 3012929:tid 3012929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:11.066984 2026] [ssl:error] [pid 3010047:tid 3010047] (EAI 2)Name or service not known: [client 144.76.19.72:18878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:11.067021 2026] [ssl:error] [pid 3010047:tid 3010047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:11.262885 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.59:33376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:11.263530 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.59:33376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:11.402167 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.31:35522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:11.402790 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.31:35522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:11.635367 2026] [security2:error] [pid 3008689:tid 3008689] [client 94.154.43.187:45278] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "andrewmarvell5642.co.uk"] [uri "/.env"] [unique_id "amsw184E-Qjj3rQVWVh26wAAAB8"]
[Thu Jul 30 12:09:11.635520 2026] [security2:error] [pid 3008689:tid 3008689] [client 94.154.43.187:45278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "andrewmarvell5642.co.uk"] [uri "/.env"] [unique_id "amsw184E-Qjj3rQVWVh26wAAAB8"]
[Thu Jul 30 12:09:11.635739 2026] [security2:error] [pid 3008689:tid 3008689] [client 94.154.43.187:45278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "andrewmarvell5642.co.uk"] [uri "/.env"] [unique_id "amsw184E-Qjj3rQVWVh26wAAAB8"]
[Thu Jul 30 12:09:12.048415 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.69:40490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:12.049047 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.69:40490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:12.166817 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.42:34250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:12.167442 2026] [authz_core:error] [pid 2998392:tid 2998392] [client 57.141.0.42:34250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:12.521521 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.64:33324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:12.522174 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.64:33324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:12.673881 2026] [security2:error] [pid 3002610:tid 3002610] [client 185.191.171.13:61074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6617.0/prev_next,next.html"] [unique_id "amsw2FGwQ4YUBmCjFNv21wAAABc"]
[Thu Jul 30 12:09:12.842411 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.20:29992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:12.843031 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.20:29992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:12.893422 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.68:59830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:12.894054 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.68:59830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:13.261459 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.67:54244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:13.262092 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.67:54244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:13.995144 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.16:30244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:13.995789 2026] [authz_core:error] [pid 2976711:tid 2976711] [client 57.141.0.16:30244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:14.094603 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.29:30070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:14.095238 2026] [authz_core:error] [pid 3002610:tid 3002610] [client 57.141.0.29:30070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:14.124888 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:18894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:14.124912 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:14.178181 2026] [ssl:error] [pid 3012732:tid 3012732] (EAI 2)Name or service not known: [client 144.76.19.72:18904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:14.178218 2026] [ssl:error] [pid 3012732:tid 3012732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:14.416382 2026] [ssl:error] [pid 3001138:tid 3001138] (70014)End of file found: [client 216.73.216.199:51232] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:14.514539 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:09:14.641926 2026] [security2:error] [pid 3012203:tid 3012203] [client 43.157.22.109:38258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "amsw2q3g7BQbBxogURqHiQAAABo"]
[Thu Jul 30 12:09:14.892207 2026] [security2:error] [pid 3012140:tid 3012140] [client 114.119.136.8:44773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/directions-to-kinesiology-centres/westbourne-grove-location/"] [unique_id "amsw2oU_oo1POksLIDVpgAAAAA4"], referer: https://www.kinesiologylondon.co.uk/directions-to-kinesiology-centres/westbourne-grove-location?share=tumblr
[Thu Jul 30 12:09:15.069920 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.13:56832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:15.070569 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.13:56832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:15.133084 2026] [security2:error] [pid 3004769:tid 3004769] [client 177.74.75.232:37483] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsw2xIadbEctGyHTWZl6wAAABk"]
[Thu Jul 30 12:09:15.133125 2026] [security2:error] [pid 3004769:tid 3004769] [client 177.74.75.232:37483] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsw2xIadbEctGyHTWZl6wAAABk"]
[Thu Jul 30 12:09:15.133345 2026] [security2:error] [pid 3004769:tid 3004769] [client 177.74.75.232:37483] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsw2xIadbEctGyHTWZl6wAAABk"]
[Thu Jul 30 12:09:15.276275 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.28:56678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:15.276896 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.28:56678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:15.367379 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.30:26236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:15.367997 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.30:26236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:15.643195 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.16:30258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:15.643851 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.16:30258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:15.653853 2026] [access_compat:error] [pid 3012828:tid 3012828] [client 103.25.250.251:4197] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:15.689476 2026] [access_compat:error] [pid 2995446:tid 2995446] [client 176.241.66.87:59096] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:15.873721 2026] [access_compat:error] [pid 3008689:tid 3008689] [client 125.176.202.122:51476] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:15.980319 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.26:42986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:15.980933 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.26:42986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:16.186171 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.1:20870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:16.186793 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.1:20870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:16.325223 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.68:52550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:16.325847 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.68:52550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:16.490264 2026] [authz_core:error] [pid 3012675:tid 3012675] [client 57.141.0.40:33306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:16.490884 2026] [authz_core:error] [pid 3012675:tid 3012675] [client 57.141.0.40:33306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:16.523747 2026] [core:error] [pid 2998335:tid 2998335] (13)Permission denied: [client 216.73.216.199:52310] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS1/flags
[Thu Jul 30 12:09:16.825713 2026] [core:error] [pid 2998335:tid 2998335] (13)Permission denied: [client 216.73.216.199:52310] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/ext4/vda1/trigger_fs_error
[Thu Jul 30 12:09:17.125942 2026] [ssl:error] [pid 2998335:tid 2998335] (70014)End of file found: [client 216.73.216.199:52310] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:17.229029 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.43:46662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:17.229660 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.43:46662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:17.233575 2026] [ssl:error] [pid 3007898:tid 3007898] (EAI 2)Name or service not known: [client 144.76.19.72:18908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:17.233600 2026] [ssl:error] [pid 3007898:tid 3007898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:17.288668 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:18910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:17.288696 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:17.364327 2026] [access_compat:error] [pid 3011001:tid 3011001] [client 103.72.86.239:40585] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:17.655927 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.43:46674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:17.656553 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.43:46674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:17.693212 2026] [security2:error] [pid 2998280:tid 2998280] [client 94.154.43.178:53486] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "crm.outsource-it-now.com"] [uri "/.env"] [unique_id "amsw3c44-HqgXIL6SydZkAAAACI"]
[Thu Jul 30 12:09:17.693388 2026] [security2:error] [pid 2998280:tid 2998280] [client 94.154.43.178:53486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crm.outsource-it-now.com"] [uri "/.env"] [unique_id "amsw3c44-HqgXIL6SydZkAAAACI"]
[Thu Jul 30 12:09:17.693559 2026] [security2:error] [pid 2998280:tid 2998280] [client 94.154.43.178:53486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "crm.outsource-it-now.com"] [uri "/403.shtml"] [unique_id "amsw3c44-HqgXIL6SydZkAAAACI"]
[Thu Jul 30 12:09:17.775592 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.8:55532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:17.776212 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.8:55532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:17.805895 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.17:37538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:17.806531 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.17:37538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:17.832119 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.33:45608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:17.832739 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.33:45608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:18.028840 2026] [ssl:error] [pid 3012929:tid 3012929] (70014)End of file found: [client 216.73.216.199:28306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:18.259557 2026] [access_compat:error] [pid 2976711:tid 2976711] [client 157.20.138.62:60633] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:18.550615 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.19:36890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:18.551248 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.19:36890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:18.960638 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.50:49798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:18.961256 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.50:49798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:19.076567 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.28:56682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:19.077189 2026] [authz_core:error] [pid 3012203:tid 3012203] [client 57.141.0.28:56682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:19.745490 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.60:20206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:19.746143 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.60:20206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:20.055737 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.12:26162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:20.056243 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.62:62626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:20.056864 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.62:62626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:20.056874 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.12:26162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:20.084420 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.24:50672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:20.085041 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.24:50672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:20.136680 2026] [ssl:error] [pid 2981908:tid 2981908] (70014)End of file found: [client 216.73.216.199:4505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:20.277178 2026] [access_compat:error] [pid 3001138:tid 3001138] [client 103.25.250.251:59722] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:20.340471 2026] [ssl:error] [pid 3012139:tid 3012139] (EAI 2)Name or service not known: [client 144.76.19.72:48272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:20.340519 2026] [ssl:error] [pid 3012139:tid 3012139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:20.393747 2026] [ssl:error] [pid 3012106:tid 3012106] (EAI 2)Name or service not known: [client 144.76.19.72:48284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:20.393779 2026] [ssl:error] [pid 3012106:tid 3012106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:20.427486 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.19:36892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:20.428121 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.19:36892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:20.847184 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.29:38584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:20.847806 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.29:38584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:21.770193 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.62:38300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:21.770849 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.62:38300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:21.785851 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.62:38310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:21.786510 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.62:38310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:21.918605 2026] [cgi:error] [pid 3007936:tid 3007936] [client 43.173.180.232:34950] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:09:21.949943 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.39:21104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:21.950634 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.39:21104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:22.003460 2026] [security2:error] [pid 3012140:tid 3012140] [client 114.119.146.111:47187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563145200/cat_ids~104,18/request_format~html"] [unique_id "amsw4oU_oo1POksLIDVpggAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~104,18/request_format~html
[Thu Jul 30 12:09:22.552556 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.71:39618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:22.553174 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.71:39618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:22.732541 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.27:59334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:22.733239 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.27:59334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:23.449448 2026] [ssl:error] [pid 3005606:tid 3005606] (EAI 2)Name or service not known: [client 144.76.19.72:48300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:23.449484 2026] [ssl:error] [pid 3005606:tid 3005606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:23.471105 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.38:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:23.471729 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.38:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:23.526138 2026] [ssl:error] [pid 3012827:tid 3012827] (EAI 2)Name or service not known: [client 144.76.19.72:48304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:23.526168 2026] [ssl:error] [pid 3012827:tid 3012827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:23.568351 2026] [security2:error] [pid 3010714:tid 3010714] [client 114.119.146.111:47191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563145200/cat_ids~104,18/request_format~html"] [unique_id "amsw42gae-wb7ZyfEhk8iwAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~104,18/request_format~html
[Thu Jul 30 12:09:23.919430 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.68:52566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:23.920087 2026] [authz_core:error] [pid 3012106:tid 3012106] [client 57.141.0.68:52566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:24.060592 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.29:38598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:24.061209 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.29:38598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:24.248450 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.9:53766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:24.249084 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.9:53766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:24.549348 2026] [security2:error] [pid 3013341:tid 3013341] [client 139.155.126.16:54388] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yourpartyyourway.com"] [uri "/"] [unique_id "amsw5Jfs1ULcRtckyJEyMwAAABQ"], referer: http://yourpartyyourway.com
[Thu Jul 30 12:09:24.647922 2026] [security2:error] [pid 2992186:tid 2992186] [client 43.153.73.200:34338] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.martingriese.com"] [uri "/"] [unique_id "amsw5DSa-5cyMocdjfSRlwAAADo"]
[Thu Jul 30 12:09:24.794829 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.23:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:24.795457 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.23:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:24.976771 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:09:25.294687 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.18:23842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:25.295319 2026] [authz_core:error] [pid 3007936:tid 3007936] [client 57.141.0.18:23842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:25.452576 2026] [ssl:error] [pid 3012827:tid 3012827] (70014)End of file found: [client 216.73.216.199:40701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:25.504484 2026] [core:error] [pid 3012929:tid 3012929] [client 66.249.66.168:43771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:25.504533 2026] [core:error] [pid 3012929:tid 3012929] [client 66.249.66.168:43771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:25.629972 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.27:59352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:25.630618 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.27:59352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:25.741974 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.60:54694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:25.742611 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.60:54694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:25.757526 2026] [ssl:error] [pid 3007898:tid 3007898] (70014)End of file found: [client 216.73.216.199:8720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:26.107400 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.39:60498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:26.108018 2026] [authz_core:error] [pid 3007275:tid 3007275] [client 57.141.0.39:60498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:26.257349 2026] [ssl:error] [pid 3012106:tid 3012106] (70014)End of file found: [client 216.73.216.199:34767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:26.258277 2026] [access_compat:error] [pid 3010157:tid 3010157] [client 125.176.202.122:51700] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:26.424108 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.69:24850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:26.424722 2026] [authz_core:error] [pid 2992186:tid 2992186] [client 57.141.0.69:24850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:26.497144 2026] [access_compat:error] [pid 3011001:tid 3011001] [client 103.25.250.251:4198] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:26.581322 2026] [ssl:error] [pid 3012929:tid 3012929] (EAI 2)Name or service not known: [client 144.76.19.72:48310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:26.581347 2026] [ssl:error] [pid 3012929:tid 3012929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:26.622821 2026] [access_compat:error] [pid 3005606:tid 3005606] [client 176.241.66.87:60100] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:26.635151 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.61:23820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:26.635768 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.61:23820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:26.636993 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:48318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:26.637019 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:27.499510 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.11:44016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:27.500137 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.11:44016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:27.500409 2026] [security2:error] [pid 3007868:tid 3007868] [client 139.155.126.16:32980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amsw5ySJkwAwHIM19GiCcAAAAAQ"]
[Thu Jul 30 12:09:27.967428 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.30:47440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:27.968054 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.30:47440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:28.100994 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.42:25666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:28.101631 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.42:25666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:28.129613 2026] [access_compat:error] [pid 2992186:tid 2992186] [client 103.72.86.239:38269] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:28.800420 2026] [access_compat:error] [pid 3004768:tid 3004768] [client 157.20.138.62:61222] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:28.816589 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.63:45262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:28.817280 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.63:45262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:28.838851 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.59:30570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:28.839476 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.59:30570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:29.255100 2026] [security2:error] [pid 2998280:tid 2998280] [client 85.208.98.23:60698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsw6c44-HqgXIL6SydZnwAAACI"]
[Thu Jul 30 12:09:29.708087 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:36940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:29.708124 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:29.726121 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.10:32862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:29.726737 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.10:32862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:29.762846 2026] [ssl:error] [pid 3012105:tid 3012105] (EAI 2)Name or service not known: [client 144.76.19.72:36948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:29.762876 2026] [ssl:error] [pid 3012105:tid 3012105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:29.778376 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.18:61754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:29.778988 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.18:61754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:29.785833 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.50:20440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:29.786439 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.50:20440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:29.930085 2026] [security2:error] [pid 3012928:tid 3012928] [client 43.130.40.120:38752] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "vain.band"] [uri "/"] [unique_id "amsw6fiM5b2OqbeJpd_PKAAAACY"]
[Thu Jul 30 12:09:30.308458 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.65:22210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:30.309103 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.65:22210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:30.771679 2026] [ssl:error] [pid 3012828:tid 3012828] (70014)End of file found: [client 216.73.216.199:52429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:30.979112 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.3:32758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:30.979729 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.3:32758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:31.059242 2026] [ssl:error] [pid 3005698:tid 3005698] (70014)End of file found: [client 216.73.216.199:41256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:31.060240 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.59:30584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:31.060894 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.59:30584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:31.160173 2026] [access_compat:error] [pid 3001174:tid 3001174] [client 103.25.250.251:59723] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:31.260250 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.58:64574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:31.260868 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.58:64574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:31.341653 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.43:29286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:31.342276 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.43:29286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:31.388344 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.9:53784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:31.388965 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.9:53784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:31.704668 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.13:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:31.705293 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.13:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:31.741436 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.60:53098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:31.742055 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.60:53098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:31.906818 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.26:46720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:31.907531 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.26:46720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:32.448978 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.63:45264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:32.449623 2026] [authz_core:error] [pid 3012105:tid 3012105] [client 57.141.0.63:45264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:32.698149 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.28:46362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:32.699133 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.28:46362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:32.815246 2026] [ssl:error] [pid 3012928:tid 3012928] (EAI 2)Name or service not known: [client 144.76.19.72:36950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:32.815276 2026] [ssl:error] [pid 3012928:tid 3012928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:32.869856 2026] [ssl:error] [pid 3012544:tid 3012544] (EAI 2)Name or service not known: [client 144.76.19.72:36966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:32.869880 2026] [ssl:error] [pid 3012544:tid 3012544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:33.070143 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.70:51528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:33.070764 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.70:51528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:33.304640 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.32:25126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:33.305266 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.32:25126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:34.147677 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.36:46644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:34.148297 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.36:46644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:34.390017 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.59:30590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:34.390651 2026] [authz_core:error] [pid 3012732:tid 3012732] [client 57.141.0.59:30590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:34.481813 2026] [ssl:error] [pid 3007936:tid 3007936] (70014)End of file found: [client 216.73.216.199:22121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:34.809341 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.58:30512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:34.809970 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.58:30512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:35.362244 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.44:30182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:35.362870 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.44:30182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:35.463467 2026] [lsapi:warn] [pid 2987552:tid 2987552] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:09:35.704711 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.19:62580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:35.705334 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.19:62580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:35.738665 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.14:43882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:35.739296 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.14:43882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:35.778474 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.5:42454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:35.779119 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.5:42454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:35.923281 2026] [ssl:error] [pid 3000715:tid 3000715] (EAI 2)Name or service not known: [client 144.76.19.72:36982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:35.923314 2026] [ssl:error] [pid 3000715:tid 3000715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:35.979491 2026] [ssl:error] [pid 3012928:tid 3012928] (EAI 2)Name or service not known: [client 144.76.19.72:36990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:35.979528 2026] [ssl:error] [pid 3012928:tid 3012928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:36.208876 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.39:54698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:36.209496 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.39:54698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:36.452145 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.63:50294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:36.452765 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.63:50294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:36.698087 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.70:45246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:36.698781 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.70:45246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:36.736171 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.19:62602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:36.736811 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.19:62602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:37.017363 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.1:31160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:37.018369 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.1:31160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:37.192804 2026] [ssl:error] [pid 3012929:tid 3012929] (70014)End of file found: [client 216.73.216.199:30876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:37.792901 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.29:41922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:37.793546 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.29:41922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:37.964258 2026] [access_compat:error] [pid 3012828:tid 3012828] [client 176.241.66.87:61484] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:38.134210 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.30:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:38.134834 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.30:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:38.259004 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.5:42908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:38.259638 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.5:42908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:38.368670 2026] [access_compat:error] [pid 3012077:tid 3012077] [client 125.176.202.122:51922] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:39.036607 2026] [ssl:error] [pid 3005698:tid 3005698] (EAI 2)Name or service not known: [client 144.76.19.72:36998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:39.036644 2026] [ssl:error] [pid 3005698:tid 3005698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:39.090117 2026] [ssl:error] [pid 2981908:tid 2981908] (EAI 2)Name or service not known: [client 144.76.19.72:37004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:39.090151 2026] [ssl:error] [pid 2981908:tid 2981908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:39.206416 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.36:46660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:39.207108 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.36:46660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:39.274588 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.18:61770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:39.275272 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.18:61770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:39.329205 2026] [access_compat:error] [pid 3009642:tid 3009642] [client 157.20.138.62:61814] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:39.839489 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.18:27552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:39.840119 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.18:27552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:40.433682 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.39:54710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:40.434372 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.39:54710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:40.502706 2026] [core:error] [pid 2998335:tid 2998335] (13)Permission denied: [client 216.73.216.199:41736] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/cache_dma
[Thu Jul 30 12:09:40.660867 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.58:30524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:40.661488 2026] [authz_core:error] [pid 2981908:tid 2981908] [client 57.141.0.58:30524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:40.803974 2026] [ssl:error] [pid 2998335:tid 2998335] (70014)End of file found: [client 216.73.216.199:41736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:40.987391 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.28:46366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:40.988083 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.28:46366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:41.058248 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.59:52262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:41.058865 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.59:52262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:41.150378 2026] [security2:error] [pid 3007936:tid 3007936] [client 43.130.139.177:43234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sudokulogicapp.com"] [uri "/"] [unique_id "amsw9VYVlFHvIkNoZVOeyAAAACc"]
[Thu Jul 30 12:09:41.292244 2026] [ssl:error] [pid 2981908:tid 2981908] (70014)End of file found: [client 216.73.216.199:1435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:41.426239 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.16:64226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:41.426919 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.16:64226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:42.150594 2026] [ssl:error] [pid 3005698:tid 3005698] (EAI 2)Name or service not known: [client 144.76.19.72:35234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:42.150622 2026] [ssl:error] [pid 3005698:tid 3005698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:42.205513 2026] [ssl:error] [pid 3008689:tid 3008689] (EAI 2)Name or service not known: [client 144.76.19.72:35236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:42.205551 2026] [ssl:error] [pid 3008689:tid 3008689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:42.395875 2026] [security2:error] [pid 3008689:tid 3008689] [client 43.131.39.179:59078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchellphotography.co.uk"] [uri "/"] [unique_id "amsw9s4E-Qjj3rQVWVh29QAAAB8"]
[Thu Jul 30 12:09:42.441244 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.40:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:42.441867 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.40:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:42.529157 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.36:64664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:42.529792 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.36:64664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:42.564660 2026] [access_compat:error] [pid 3007936:tid 3007936] [client 103.25.250.251:4199] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:42.614551 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.44:43278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:42.615172 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.44:43278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:42.638239 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.15:43030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:42.638857 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.15:43030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:42.697454 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.29:43410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:42.698083 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.29:43410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:43.463161 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.45:49226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:43.463790 2026] [authz_core:error] [pid 3012928:tid 3012928] [client 57.141.0.45:49226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:43.815396 2026] [ssl:error] [pid 3012929:tid 3012929] (70014)End of file found: [client 216.73.216.199:39388] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:43.909369 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.24:36510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:43.909988 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.24:36510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:44.018211 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.33:39014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:44.018830 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.33:39014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:44.523679 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.63:50296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:44.524294 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.63:50296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:44.912157 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.10:50050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:44.912791 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.10:50050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:45.048478 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.9:24622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:45.049109 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.9:24622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:45.261996 2026] [ssl:error] [pid 3007898:tid 3007898] (EAI 2)Name or service not known: [client 144.76.19.72:35246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:45.262021 2026] [ssl:error] [pid 3007898:tid 3007898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:45.317994 2026] [ssl:error] [pid 3012544:tid 3012544] (EAI 2)Name or service not known: [client 144.76.19.72:35260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:45.318025 2026] [ssl:error] [pid 3012544:tid 3012544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:45.728966 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.61:50326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:45.729607 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.61:50326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:45.800910 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.68:46666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:45.801540 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.68:46666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:45.936339 2026] [lsapi:warn] [pid 3012077:tid 3012077] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:09:46.130824 2026] [ssl:error] [pid 3009642:tid 3009642] (70014)End of file found: [client 216.73.216.199:25917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:46.594543 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.70:45268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:46.595171 2026] [authz_core:error] [pid 3010157:tid 3010157] [client 57.141.0.70:45268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:46.718788 2026] [ssl:error] [pid 3012544:tid 3012544] (70014)End of file found: [client 216.73.216.199:34139] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:46.742533 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.18:27568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:46.743157 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.18:27568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:47.043023 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.42:33236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:47.043801 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.42:33236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:47.214101 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.37:27836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:47.214749 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.37:27836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:47.321477 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.71:41842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:47.322518 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.71:41842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:47.943691 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.18:27572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:47.944315 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.18:27572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:48.231663 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.38:61684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:48.232279 2026] [authz_core:error] [pid 3000715:tid 3000715] [client 57.141.0.38:61684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:48.371559 2026] [ssl:error] [pid 3012139:tid 3012139] (EAI 2)Name or service not known: [client 144.76.19.72:35266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:48.371585 2026] [ssl:error] [pid 3012139:tid 3012139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:48.424200 2026] [ssl:error] [pid 3007898:tid 3007898] (EAI 2)Name or service not known: [client 144.76.19.72:35276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:48.424229 2026] [ssl:error] [pid 3007898:tid 3007898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:48.479686 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.40:36188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:48.480308 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.40:36188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:48.856530 2026] [access_compat:error] [pid 3004769:tid 3004769] [client 125.176.202.122:52143] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:49.048096 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.43:30348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:49.048722 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.43:30348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:49.437533 2026] [access_compat:error] [pid 3012138:tid 3012138] [client 176.241.66.87:55298] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:49.847322 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:15507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:49.847840 2026] [access_compat:error] [pid 3012139:tid 3012139] [client 157.20.138.62:62403] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:49.942277 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.26:22236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:49.942898 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.26:22236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:50.120411 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.70:30276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:50.121028 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.70:30276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:50.297495 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.66:48814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:50.298158 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.66:48814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:50.530937 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.6:37912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:50.531570 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.6:37912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:50.857473 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.39:46748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:50.858108 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.39:46748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:50.875338 2026] [core:error] [pid 3007898:tid 3007898] [client 66.249.66.66:57963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:50.875368 2026] [core:error] [pid 3007898:tid 3007898] [client 66.249.66.66:57963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:09:51.274530 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.37:51280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:51.275165 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.37:51280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:51.425280 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.22:48888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:51.425905 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.22:48888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:51.478868 2026] [ssl:error] [pid 3010714:tid 3010714] (EAI 2)Name or service not known: [client 144.76.19.72:23352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:51.478901 2026] [ssl:error] [pid 3010714:tid 3010714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:51.638587 2026] [ssl:error] [pid 3007868:tid 3007868] (EAI 2)Name or service not known: [client 144.76.19.72:23354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:51.638623 2026] [ssl:error] [pid 3007868:tid 3007868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:51.677012 2026] [security2:error] [pid 3001174:tid 3001174] [client 85.208.96.201:47348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9356.0/prev_next,next.html"] [unique_id "amsw_y3mOSFR2pFQnKCtrAAAAEo"]
[Thu Jul 30 12:09:52.058231 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.49:60044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:52.058874 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.49:60044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:52.085342 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.28:44856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:52.085966 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.28:44856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:52.111824 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.22:48896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:52.112446 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.22:48896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:52.140140 2026] [ssl:error] [pid 3001174:tid 3001174] (70014)End of file found: [client 216.73.216.199:8723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:52.262376 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.1:62684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:52.263004 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.1:62684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:52.562705 2026] [ssl:error] [pid 3007898:tid 3007898] (70014)End of file found: [client 216.73.216.199:22185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:52.878433 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.43:22592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:52.879055 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.43:22592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:52.964169 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.56:50964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:52.964815 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.56:50964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:53.025408 2026] [access_compat:error] [pid 3013377:tid 3013377] [client 103.25.250.251:59724] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:53.538654 2026] [access_compat:error] [pid 3005698:tid 3005698] [client 45.158.164.139:50582] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:09:53.826141 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.61:38688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:53.826793 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.61:38688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:54.026299 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.18:60394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:54.026926 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.18:60394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:54.039533 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.50:48194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:54.040156 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.50:48194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:54.533306 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.71:57374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:54.533932 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.71:57374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:54.700572 2026] [ssl:error] [pid 3014637:tid 3014637] (EAI 2)Name or service not known: [client 144.76.19.72:23374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:54.700604 2026] [ssl:error] [pid 3014637:tid 3014637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:54.753938 2026] [ssl:error] [pid 3014637:tid 3014637] (EAI 2)Name or service not known: [client 144.76.19.72:23384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:54.753959 2026] [ssl:error] [pid 3014637:tid 3014637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:54.828282 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.8:54612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:54.828930 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.8:54612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:55.007220 2026] [security2:error] [pid 3007868:tid 3007868] [client 85.208.96.197:21964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/ontario-ca-police-shooting"] [unique_id "amsxAySJkwAwHIM19GiCfgAAAAQ"]
[Thu Jul 30 12:09:55.212017 2026] [access_compat:error] [pid 3012139:tid 3012139] [client 176.241.66.87:62869] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:55.364242 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.1:62700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:55.364866 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.1:62700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:55.376257 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.18:60402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:55.376879 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.18:60402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:55.416313 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.71:57378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:55.416934 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.71:57378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:55.472425 2026] [ssl:error] [pid 2987552:tid 2987552] (70014)End of file found: [client 216.73.216.199:27990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:55.553035 2026] [access_compat:error] [pid 3009519:tid 3009519] [client 125.176.202.122:52259] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:56.066354 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.24:28530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:56.066976 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.24:28530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:56.400722 2026] [security2:error] [pid 3013341:tid 3013341] [client 85.208.96.194:37944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2962.0/prev_next,prev.html"] [unique_id "amsxBJfs1ULcRtckyJEyPwAAABQ"]
[Thu Jul 30 12:09:56.419881 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:09:56.758235 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.21:64768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:56.758861 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.21:64768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:56.902714 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.45:23626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:56.903344 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.45:23626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:57.014200 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.39:38840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:57.014826 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.39:38840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:57.256473 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.40:36194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:57.257113 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.40:36194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:57.469200 2026] [ssl:error] [pid 3012827:tid 3012827] (70014)End of file found: [client 216.73.216.199:1223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:09:57.596020 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.25:24270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:57.596648 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.25:24270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:57.770760 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.40:41066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:57.771392 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.40:41066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:57.808996 2026] [ssl:error] [pid 3014637:tid 3014637] (EAI 2)Name or service not known: [client 144.76.19.72:23386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:57.809027 2026] [ssl:error] [pid 3014637:tid 3014637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:57.908144 2026] [ssl:error] [pid 3011845:tid 3011845] (EAI 2)Name or service not known: [client 144.76.19.72:23394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:09:57.908173 2026] [ssl:error] [pid 3011845:tid 3011845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:09:58.258828 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.65:50532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:58.259458 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.65:50532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:58.425957 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.61:38700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:58.426589 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.61:38700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:58.733109 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.9:22548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:58.733730 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.9:22548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:59.452208 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.4:47954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:59.452841 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.4:47954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:59.546152 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 66.249.66.33:42765] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:09:59.548899 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 66.249.66.33:42765] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:09:59.616177 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.32:45738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:09:59.616797 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.32:45738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:09:59.854547 2026] [access_compat:error] [pid 3012077:tid 3012077] [client 103.25.250.251:4200] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:09:59.970331 2026] [access_compat:error] [pid 3009519:tid 3009519] [client 176.241.66.87:63420] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:00.070798 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.1:62716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:00.071805 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.1:62716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:00.341564 2026] [access_compat:error] [pid 2998335:tid 2998335] [client 157.20.138.62:62998] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:00.621659 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.56:21992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:00.622284 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.56:21992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:00.948973 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.31:60982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:00.949609 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.31:60982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:00.979673 2026] [ssl:error] [pid 3014090:tid 3014090] (EAI 2)Name or service not known: [client 144.76.19.72:52226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:00.979746 2026] [ssl:error] [pid 3014090:tid 3014090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:01.035682 2026] [ssl:error] [pid 3012138:tid 3012138] (EAI 2)Name or service not known: [client 144.76.19.72:52232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:01.035715 2026] [ssl:error] [pid 3012138:tid 3012138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:01.083580 2026] [access_compat:error] [pid 3010047:tid 3010047] [client 125.176.202.122:52370] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:01.206664 2026] [ssl:error] [pid 3007936:tid 3007936] (70014)End of file found: [client 216.73.216.199:28936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:01.347523 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.5:54448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:01.348190 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.5:54448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:01.466350 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.68:36836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:01.466978 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.68:36836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:01.473669 2026] [security2:error] [pid 3014090:tid 3014090] [client 85.208.98.31:34362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/eurolig-puan-k.html"] [unique_id "amsxCcpdhz-t6SaWJaa73QAAAAY"]
[Thu Jul 30 12:10:01.562698 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.36:63762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:01.563343 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.36:63762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:01.740344 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.37:29864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:01.740976 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.37:29864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:01.904887 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.40:41068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:01.905529 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.40:41068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:02.079777 2026] [security2:error] [pid 3014090:tid 3014090] [client 8.211.144.240:25159] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxCspdhz-t6SaWJaa73gAAAAY"]
[Thu Jul 30 12:10:02.079837 2026] [security2:error] [pid 3014090:tid 3014090] [client 8.211.144.240:25159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxCspdhz-t6SaWJaa73gAAAAY"]
[Thu Jul 30 12:10:02.080128 2026] [security2:error] [pid 3014090:tid 3014090] [client 8.211.144.240:25159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxCspdhz-t6SaWJaa73gAAAAY"]
[Thu Jul 30 12:10:02.195634 2026] [access_compat:error] [pid 3012138:tid 3012138] [client 103.72.86.239:40104] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:02.408248 2026] [ssl:error] [pid 2995446:tid 2995446] (70014)End of file found: [client 216.73.216.199:49313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:02.440002 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.59:50236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:02.440640 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.59:50236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:02.548448 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.45:23632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:02.549078 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.45:23632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:03.141432 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.37:29868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:03.142056 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.37:29868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:03.603651 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.32:45744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:03.604271 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.32:45744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:03.776470 2026] [access_compat:error] [pid 3012827:tid 3012827] [client 103.25.250.251:59725] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:04.211135 2026] [ssl:error] [pid 3013341:tid 3013341] (70014)End of file found: [client 216.73.216.199:52648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:04.396228 2026] [ssl:error] [pid 3007868:tid 3007868] (EAI 2)Name or service not known: [client 144.76.19.72:52244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:04.396260 2026] [ssl:error] [pid 3007868:tid 3007868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:04.450458 2026] [ssl:error] [pid 3014599:tid 3014599] (EAI 2)Name or service not known: [client 144.76.19.72:52258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:04.450510 2026] [ssl:error] [pid 3014599:tid 3014599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:04.513200 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.56:21994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:04.513816 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.56:21994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:04.558019 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.55:32410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:04.558650 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.55:32410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:04.877222 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.53:28258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:04.877885 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.53:28258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:04.893293 2026] [security2:error] [pid 3012139:tid 3012139] [client 101.47.25.187:51339] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxDOPss5cd7n2BWvDexgAAAA0"]
[Thu Jul 30 12:10:04.893336 2026] [security2:error] [pid 3012139:tid 3012139] [client 101.47.25.187:51339] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxDOPss5cd7n2BWvDexgAAAA0"]
[Thu Jul 30 12:10:04.893591 2026] [security2:error] [pid 3012139:tid 3012139] [client 101.47.25.187:51339] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxDOPss5cd7n2BWvDexgAAAA0"]
[Thu Jul 30 12:10:05.042291 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.66:59760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:05.042925 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.66:59760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:05.301551 2026] [core:error] [pid 3015119:tid 3015119] [client 66.249.66.67:53831] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:05.301584 2026] [core:error] [pid 3015119:tid 3015119] [client 66.249.66.67:53831] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:05.306849 2026] [core:error] [pid 3015120:tid 3015120] [client 66.249.66.40:46504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:05.306870 2026] [core:error] [pid 3015120:tid 3015120] [client 66.249.66.40:46504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:05.569693 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.2:21170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:05.570319 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.2:21170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:05.685783 2026] [security2:error] [pid 3007868:tid 3007868] [client 45.148.10.120:57640] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "butteredcat.com"] [uri "/.env"] [unique_id "amsxDSSJkwAwHIM19GiChAAAAAQ"]
[Thu Jul 30 12:10:05.685979 2026] [security2:error] [pid 3007868:tid 3007868] [client 45.148.10.120:57640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "butteredcat.com"] [uri "/.env"] [unique_id "amsxDSSJkwAwHIM19GiChAAAAAQ"]
[Thu Jul 30 12:10:05.686235 2026] [security2:error] [pid 3007868:tid 3007868] [client 45.148.10.120:57640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "butteredcat.com"] [uri "/.env"] [unique_id "amsxDSSJkwAwHIM19GiChAAAAAQ"]
[Thu Jul 30 12:10:05.833676 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.21:59200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:05.834299 2026] [authz_core:error] [pid 3011001:tid 3011001] [client 57.141.0.21:59200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:05.951222 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.55:32420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:05.951848 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.55:32420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:06.224559 2026] [security2:error] [pid 3011048:tid 3011048] [client 43.166.237.57:46070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "georgehotelofstamford.com"] [uri "/"] [unique_id "amsxDhqxMmnzQQfn_QbcIQAAADs"]
[Thu Jul 30 12:10:06.661770 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.54:30712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:06.662746 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.54:30712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:06.777597 2026] [security2:error] [pid 3007868:tid 3007868] [client 43.166.237.57:36660] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "georgehotelofstamford.com"] [uri "/"] [unique_id "amsxDiSJkwAwHIM19GiChQAAAAQ"], referer: http://georgehotelofstamford.com
[Thu Jul 30 12:10:06.950108 2026] [lsapi:warn] [pid 3011048:tid 3011048] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:10:07.214583 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.37:29880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:07.215213 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.37:29880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:07.315676 2026] [security2:error] [pid 3010047:tid 3010047] [client 43.166.237.57:36884] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amsxD8UPzERPKsK-I-N68wAAAAM"], referer: https://georgehotelofstamford.com/
[Thu Jul 30 12:10:07.478229 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.63:60540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:07.478851 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.63:60540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:07.509157 2026] [ssl:error] [pid 3015119:tid 3015119] (EAI 2)Name or service not known: [client 144.76.19.72:52260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:07.509213 2026] [ssl:error] [pid 3015119:tid 3015119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:07.520975 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:24675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:07.566253 2026] [ssl:error] [pid 3015120:tid 3015120] (EAI 2)Name or service not known: [client 144.76.19.72:52270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:07.566281 2026] [ssl:error] [pid 3015120:tid 3015120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:07.869996 2026] [security2:error] [pid 3011048:tid 3011048] [client 18.199.86.73:47900] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bookings.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsxDxqxMmnzQQfn_QbcIwAAADs"]
[Thu Jul 30 12:10:07.870208 2026] [security2:error] [pid 3011048:tid 3011048] [client 18.199.86.73:47900] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bookings.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amsxDxqxMmnzQQfn_QbcIwAAADs"]
[Thu Jul 30 12:10:07.870408 2026] [security2:error] [pid 3011048:tid 3011048] [client 18.199.86.73:47900] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bookings.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amsxDxqxMmnzQQfn_QbcIwAAADs"]
[Thu Jul 30 12:10:07.986816 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.51:39312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:07.987453 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.51:39312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:08.007836 2026] [ssl:error] [pid 2995446:tid 2995446] (70014)End of file found: [client 216.73.216.199:36810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:08.139000 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.18:54322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:08.140232 2026] [authz_core:error] [pid 3011048:tid 3011048] [client 57.141.0.18:54322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:08.294894 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.47:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:08.295529 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.47:56938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:08.295947 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.10:27928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:08.296576 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.10:27928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:08.406574 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.13:63902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:08.407195 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.13:63902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:08.649595 2026] [security2:error] [pid 3007275:tid 3007275] [client 101.47.25.187:52599] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxEIUhlGED_6YziDruVgAAAA8"]
[Thu Jul 30 12:10:08.649646 2026] [security2:error] [pid 3007275:tid 3007275] [client 101.47.25.187:52599] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxEIUhlGED_6YziDruVgAAAA8"]
[Thu Jul 30 12:10:08.649914 2026] [security2:error] [pid 3007275:tid 3007275] [client 101.47.25.187:52599] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxEIUhlGED_6YziDruVgAAAA8"]
[Thu Jul 30 12:10:09.162132 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.68:37228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:09.162758 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.68:37228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:09.280491 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.62:20866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:09.281133 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.62:20866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:09.531954 2026] [ssl:error] [pid 3015119:tid 3015119] (70014)End of file found: [client 216.73.216.199:8601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:09.795089 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.27:58550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:09.795712 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.27:58550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:09.926221 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.35:47996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:09.926860 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.35:47996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:10.259471 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.1:62332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:10.260510 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.1:62332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:10.304328 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.10:27940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:10.305538 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.10:27940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:10.503220 2026] [access_compat:error] [pid 3011048:tid 3011048] [client 176.241.66.87:64349] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:10.614086 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.53:53016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:10.614716 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.53:53016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:10.620050 2026] [ssl:error] [pid 3012827:tid 3012827] (EAI 2)Name or service not known: [client 144.76.19.72:35468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:10.620076 2026] [ssl:error] [pid 3012827:tid 3012827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:10.678625 2026] [ssl:error] [pid 3007898:tid 3007898] (EAI 2)Name or service not known: [client 144.76.19.72:35484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:10.678659 2026] [ssl:error] [pid 3007898:tid 3007898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:10.928828 2026] [access_compat:error] [pid 3012544:tid 3012544] [client 157.20.138.62:63600] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:11.872654 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.13:63908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:11.873281 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.13:63908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:12.161866 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.62:35502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:12.162567 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.62:35502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:12.550899 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.30:32634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:12.551532 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.30:32634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:12.562888 2026] [access_compat:error] [pid 3012929:tid 3012929] [client 125.176.202.122:52599] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:12.673236 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.70:41104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:12.673872 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.70:41104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:13.250957 2026] [security2:error] [pid 3012141:tid 3012141] [client 18.199.86.73:47914] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "broadbentandsmithcom.ditchfest.com"] [uri "/.git/config"] [unique_id "amsxFVakc7eTweaaUbl06wAAABE"]
[Thu Jul 30 12:10:13.251160 2026] [security2:error] [pid 3012141:tid 3012141] [client 18.199.86.73:47914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "broadbentandsmithcom.ditchfest.com"] [uri "/.git/config"] [unique_id "amsxFVakc7eTweaaUbl06wAAABE"]
[Thu Jul 30 12:10:13.251383 2026] [security2:error] [pid 3012141:tid 3012141] [client 18.199.86.73:47914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "broadbentandsmithcom.ditchfest.com"] [uri "/.git/config"] [unique_id "amsxFVakc7eTweaaUbl06wAAABE"]
[Thu Jul 30 12:10:13.380255 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.25:45408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:13.380878 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.25:45408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:13.407907 2026] [authz_core:error] [pid 3015070:tid 3015070] [client 57.141.0.12:30090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:13.408536 2026] [authz_core:error] [pid 3015070:tid 3015070] [client 57.141.0.12:30090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:13.675666 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.8:54296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:13.676293 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.8:54296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:13.735600 2026] [ssl:error] [pid 3012141:tid 3012141] (EAI 2)Name or service not known: [client 144.76.19.72:35490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:13.735633 2026] [ssl:error] [pid 3012141:tid 3012141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:13.791946 2026] [ssl:error] [pid 3010047:tid 3010047] (EAI 2)Name or service not known: [client 144.76.19.72:35504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:13.791971 2026] [ssl:error] [pid 3010047:tid 3010047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:14.194915 2026] [security2:error] [pid 3013377:tid 3013377] [client 18.199.86.73:38122] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "broadbentandsmith.ditchfest.com"] [uri "/.git/config"] [unique_id "amsxFl5uiqeeka-ntzmQEQAAABw"]
[Thu Jul 30 12:10:14.195091 2026] [security2:error] [pid 3013377:tid 3013377] [client 18.199.86.73:38122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "broadbentandsmith.ditchfest.com"] [uri "/.git/config"] [unique_id "amsxFl5uiqeeka-ntzmQEQAAABw"]
[Thu Jul 30 12:10:14.195260 2026] [security2:error] [pid 3013377:tid 3013377] [client 18.199.86.73:38122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "broadbentandsmith.ditchfest.com"] [uri "/403.shtml"] [unique_id "amsxFl5uiqeeka-ntzmQEQAAABw"]
[Thu Jul 30 12:10:14.500157 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.37:24014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:14.500781 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.37:24014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:14.541420 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.36:62588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:14.542101 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.36:62588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:14.742904 2026] [access_compat:error] [pid 3013377:tid 3013377] [client 103.25.250.251:59726] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:14.746248 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.53:53030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:14.746863 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.53:53030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:14.770260 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.3:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:14.770895 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.3:35272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:15.423658 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.35:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:15.424284 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.35:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:15.492274 2026] [ssl:error] [pid 3015499:tid 3015499] (70014)End of file found: [client 216.73.216.199:49641] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:15.628027 2026] [ssl:error] [pid 3012138:tid 3012138] (70014)End of file found: [client 216.73.216.199:10883] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:15.835945 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.32:46180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:15.836587 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.32:46180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:15.964135 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.13:35292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:15.964757 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.13:35292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:15.973496 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.7:55552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:15.974148 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.7:55552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:16.419261 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.61:34528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:16.419887 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.61:34528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:16.844095 2026] [ssl:error] [pid 3015119:tid 3015119] (EAI 2)Name or service not known: [client 144.76.19.72:35520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:16.844123 2026] [ssl:error] [pid 3015119:tid 3015119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:16.902676 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:35532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:16.902705 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:17.077190 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.28:45172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:17.077812 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.28:45172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:17.158223 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.43:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:17.158844 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.43:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:17.403676 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.5:59738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:17.404299 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.5:59738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:17.458962 2026] [lsapi:warn] [pid 3012141:tid 3012141] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:10:17.870000 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.1:22360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:17.870631 2026] [authz_core:error] [pid 3007898:tid 3007898] [client 57.141.0.1:22360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:18.640955 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.42:54586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:18.641598 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.42:54586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:18.741044 2026] [core:error] [pid 3012141:tid 3012141] [client 66.249.66.66:38886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:18.741085 2026] [core:error] [pid 3012141:tid 3012141] [client 66.249.66.66:38886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:18.848645 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.54:44450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:18.849320 2026] [authz_core:error] [pid 3012929:tid 3012929] [client 57.141.0.54:44450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:18.948139 2026] [ssl:error] [pid 3005650:tid 3005650] (70014)End of file found: [client 216.73.216.199:5727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:19.113349 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.2:48026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:19.113970 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.2:48026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:19.314106 2026] [access_compat:error] [pid 3015645:tid 3015645] [client 125.176.202.122:52726] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:19.902708 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.44:57198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:19.903334 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.44:57198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:19.963471 2026] [ssl:error] [pid 3015119:tid 3015119] (EAI 2)Name or service not known: [client 144.76.19.72:63854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:19.963515 2026] [ssl:error] [pid 3015119:tid 3015119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:19.972199 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.35:41682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:19.972821 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.35:41682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:20.014568 2026] [ssl:error] [pid 2998281:tid 2998281] (EAI 2)Name or service not known: [client 144.76.19.72:63862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:20.014596 2026] [ssl:error] [pid 2998281:tid 2998281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:20.051566 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.66:36644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:20.052195 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.66:36644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:20.053660 2026] [authz_core:error] [pid 3010047:tid 3010047] [client 57.141.0.11:43684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:20.054269 2026] [authz_core:error] [pid 3010047:tid 3010047] [client 57.141.0.11:43684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:20.379612 2026] [access_compat:error] [pid 3012139:tid 3012139] [client 103.72.86.239:39823] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:20.628745 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.23:56010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:20.629370 2026] [authz_core:error] [pid 2987552:tid 2987552] [client 57.141.0.23:56010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:20.694089 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.27:50088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:20.694709 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.27:50088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:21.037430 2026] [access_compat:error] [pid 3009519:tid 3009519] [client 176.241.66.87:65267] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:21.424165 2026] [access_compat:error] [pid 3012828:tid 3012828] [client 157.20.138.62:64193] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:21.762620 2026] [core:error] [pid 3013377:tid 3013377] [client 66.249.64.170:61368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:21.762656 2026] [core:error] [pid 3013377:tid 3013377] [client 66.249.64.170:61368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:22.012194 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.46:37280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:22.012821 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.46:37280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:22.239911 2026] [authz_core:error] [pid 3015645:tid 3015645] [client 57.141.0.9:41292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:22.240548 2026] [authz_core:error] [pid 3015645:tid 3015645] [client 57.141.0.9:41292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:22.259437 2026] [ssl:error] [pid 3010047:tid 3010047] (70014)End of file found: [client 216.73.216.199:46314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:22.643923 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.33:28524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:22.644549 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.33:28524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:22.892301 2026] [access_compat:error] [pid 3005698:tid 3005698] [client 125.176.202.122:52824] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:23.072151 2026] [ssl:error] [pid 3007868:tid 3007868] (EAI 2)Name or service not known: [client 144.76.19.72:63868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:23.072188 2026] [ssl:error] [pid 3007868:tid 3007868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:23.076448 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.33:28554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:23.077128 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.33:28554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:23.126542 2026] [ssl:error] [pid 3012141:tid 3012141] (EAI 2)Name or service not known: [client 144.76.19.72:63884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:23.126578 2026] [ssl:error] [pid 3012141:tid 3012141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:23.283294 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.2:48032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:23.283921 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.2:48032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:23.583478 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.13:59250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:23.584107 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.13:59250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:23.769124 2026] [ssl:error] [pid 3007936:tid 3007936] (70014)End of file found: [client 216.73.216.199:25881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:24.095469 2026] [authz_core:error] [pid 3015541:tid 3015541] [client 57.141.0.31:35112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:24.096101 2026] [authz_core:error] [pid 3015541:tid 3015541] [client 57.141.0.31:35112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:24.371739 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.64:56046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:24.372354 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.64:56046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:25.084174 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.11:43690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:25.084798 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.11:43690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:25.087055 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.10:40170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:25.087677 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.10:40170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:25.271359 2026] [ssl:error] [pid 3007868:tid 3007868] (70014)End of file found: [client 216.73.216.199:22617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:25.677160 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.27:50106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:25.677814 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.27:50106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:25.955520 2026] [access_compat:error] [pid 3015928:tid 3015928] [client 103.25.250.251:59727] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:26.379147 2026] [ssl:error] [pid 3013341:tid 3013341] (EAI 2)Name or service not known: [client 144.76.19.72:63890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:26.379188 2026] [ssl:error] [pid 3013341:tid 3013341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:26.403369 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.71:31490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:26.403992 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.71:31490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:26.579743 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.1:58656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:26.580367 2026] [authz_core:error] [pid 2995446:tid 2995446] [client 57.141.0.1:58656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:26.598025 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.58:45672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:26.598689 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.58:45672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:26.841514 2026] [ssl:error] [pid 3012139:tid 3012139] (EAI 2)Name or service not known: [client 144.76.19.72:63894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:26.841549 2026] [ssl:error] [pid 3012139:tid 3012139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:27.025679 2026] [authz_core:error] [pid 3016112:tid 3016112] [client 57.141.0.32:38274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:27.026338 2026] [authz_core:error] [pid 3016112:tid 3016112] [client 57.141.0.32:38274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:27.026866 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.9:41304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:27.027512 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.9:41304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:27.278925 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.7:21178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:27.279568 2026] [authz_core:error] [pid 3012139:tid 3012139] [client 57.141.0.7:21178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:27.808907 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.17:30244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:27.809548 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.17:30244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:28.088516 2026] [lsapi:warn] [pid 3012139:tid 3012139] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:10:28.312697 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.21:27402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:28.313330 2026] [authz_core:error] [pid 3009641:tid 3009641] [client 57.141.0.21:27402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:28.369535 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.41:30558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:28.370195 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.41:30558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:28.460136 2026] [authz_core:error] [pid 3016163:tid 3016163] [client 57.141.0.36:38836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:28.460787 2026] [authz_core:error] [pid 3016163:tid 3016163] [client 57.141.0.36:38836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:29.165592 2026] [authz_core:error] [pid 3016166:tid 3016166] [client 57.141.0.51:63778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:29.166217 2026] [authz_core:error] [pid 3016166:tid 3016166] [client 57.141.0.51:63778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:29.201135 2026] [ssl:error] [pid 3010047:tid 3010047] (70014)End of file found: [client 216.73.216.199:21251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:29.533101 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.44:57210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:29.533764 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.44:57210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:29.562015 2026] [access_compat:error] [pid 3016162:tid 3016162] [client 125.176.202.122:52937] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:29.687100 2026] [ssl:error] [pid 3008689:tid 3008689] (70014)End of file found: [client 216.73.216.199:31196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:29.914858 2026] [ssl:error] [pid 3015645:tid 3015645] (EAI 2)Name or service not known: [client 144.76.19.72:51324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:29.914906 2026] [ssl:error] [pid 3015645:tid 3015645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:29.966574 2026] [ssl:error] [pid 2995446:tid 2995446] (EAI 2)Name or service not known: [client 144.76.19.72:51338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:29.966601 2026] [ssl:error] [pid 2995446:tid 2995446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:30.008679 2026] [ssl:error] [pid 3012139:tid 3012139] [client 87.236.176.184:60653] AH02032: Hostname holistic-clear.co.uk provided via SNI and hostname kinesiologylondon.co.uk provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://holistic-clear.co.uk
[Thu Jul 30 12:10:30.038336 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.26:32570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:30.038960 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.26:32570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:30.047171 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.38:40058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:30.047787 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.38:40058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:30.305299 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.10:34970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:30.305912 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.10:34970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:30.350037 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.20:27820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:30.350686 2026] [authz_core:error] [pid 3012077:tid 3012077] [client 57.141.0.20:27820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:30.401765 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.71:31502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:30.402405 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.71:31502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:30.496735 2026] [authz_core:error] [pid 3016111:tid 3016111] [client 57.141.0.65:29484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:30.497373 2026] [authz_core:error] [pid 3016111:tid 3016111] [client 57.141.0.65:29484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:30.569682 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.33:28658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:30.570307 2026] [authz_core:error] [pid 3012828:tid 3012828] [client 57.141.0.33:28658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:31.065192 2026] [access_compat:error] [pid 3016169:tid 3016169] [client 103.72.86.239:40730] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:31.582606 2026] [access_compat:error] [pid 3005606:tid 3005606] [client 176.241.66.87:1620] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:31.924023 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.61:33910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:31.924670 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.61:33910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:31.971613 2026] [access_compat:error] [pid 3012828:tid 3012828] [client 157.20.138.62:64784] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:32.060203 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.38:40072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:32.060826 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.38:40072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:32.154643 2026] [access_compat:error] [pid 3016067:tid 3016067] [client 103.25.250.251:59728] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:32.211210 2026] [ssl:error] [pid 3016168:tid 3016168] (70014)End of file found: [client 216.73.216.199:8985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:32.220816 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.48:27274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:32.221440 2026] [authz_core:error] [pid 3014090:tid 3014090] [client 57.141.0.48:27274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:32.791843 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.12:52750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:32.792475 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.12:52750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:33.023038 2026] [ssl:error] [pid 3016066:tid 3016066] (EAI 2)Name or service not known: [client 144.76.19.72:51368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:33.023099 2026] [ssl:error] [pid 3016066:tid 3016066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:33.076704 2026] [autoindex:error] [pid 3012544:tid 3012544] [client 68.221.69.72:8086] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:10:33.078219 2026] [ssl:error] [pid 3014090:tid 3014090] (EAI 2)Name or service not known: [client 144.76.19.72:51380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:33.078240 2026] [ssl:error] [pid 3014090:tid 3014090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:33.166262 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.35:46204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:33.166881 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.35:46204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:33.356870 2026] [authz_core:error] [pid 3016114:tid 3016114] [client 57.141.0.12:52756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:33.357492 2026] [authz_core:error] [pid 3016114:tid 3016114] [client 57.141.0.12:52756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:33.420874 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.43:27246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:33.421506 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.43:27246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:33.589962 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.50:26194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:33.590596 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.50:26194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:34.011724 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 66.249.66.35:54279] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:10:34.014360 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 66.249.66.35:54279] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:10:34.317378 2026] [core:error] [pid 3014164:tid 3014164] [client 57.141.0.11:38248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:34.317405 2026] [core:error] [pid 3014164:tid 3014164] [client 57.141.0.11:38248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:34.386124 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.60:43036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:34.386741 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.60:43036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:34.978078 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.32:63828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:34.979025 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.32:63828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:35.225757 2026] [ssl:error] [pid 3016114:tid 3016114] (70014)End of file found: [client 216.73.216.199:54043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:35.357191 2026] [autoindex:error] [pid 3007868:tid 3007868] [client 68.221.69.72:47677] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:10:35.544880 2026] [access_compat:error] [pid 2998280:tid 2998280] [client 125.176.202.122:53052] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:35.560822 2026] [authz_core:error] [pid 3010047:tid 3010047] [client 57.141.0.41:43570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:35.561441 2026] [authz_core:error] [pid 3010047:tid 3010047] [client 57.141.0.41:43570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:35.576590 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.48:27286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:35.577201 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.48:27286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:36.137419 2026] [ssl:error] [pid 2987552:tid 2987552] (EAI 2)Name or service not known: [client 144.76.19.72:51382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:36.137446 2026] [ssl:error] [pid 2987552:tid 2987552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:36.195093 2026] [ssl:error] [pid 3012544:tid 3012544] (EAI 2)Name or service not known: [client 144.76.19.72:51392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:36.195121 2026] [ssl:error] [pid 3012544:tid 3012544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:36.302872 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.56:23762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:36.303493 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.56:23762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:36.380760 2026] [access_compat:error] [pid 3016025:tid 3016025] [client 103.25.250.251:59729] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:36.430193 2026] [ssl:error] [pid 2998281:tid 2998281] (70014)End of file found: [client 216.73.216.199:25035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:36.529644 2026] [authz_core:error] [pid 3016163:tid 3016163] [client 66.249.66.33:42464] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:10:36.532307 2026] [authz_core:error] [pid 3016163:tid 3016163] [client 66.249.66.33:42464] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:10:36.579827 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.40:38232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:36.580445 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.40:38232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:36.627923 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.43:27254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:36.628558 2026] [authz_core:error] [pid 3012138:tid 3012138] [client 57.141.0.43:27254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:37.021738 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.48:27298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:37.022355 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.48:27298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:37.063235 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.49:29098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:37.063858 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.49:29098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:37.261749 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.28:33150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:37.261750 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.67:48404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:37.262371 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.28:33150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:37.262384 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.67:48404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:37.367660 2026] [authz_core:error] [pid 3015499:tid 3015499] [client 57.141.0.63:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:37.368278 2026] [authz_core:error] [pid 3015499:tid 3015499] [client 57.141.0.63:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:37.416493 2026] [access_compat:error] [pid 3007868:tid 3007868] [client 176.241.66.87:1989] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:37.774533 2026] [core:error] [pid 3015119:tid 3015119] [client 66.249.66.66:46254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:37.774559 2026] [core:error] [pid 3015119:tid 3015119] [client 66.249.66.66:46254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:37.937764 2026] [ssl:error] [pid 3012138:tid 3012138] (70014)End of file found: [client 216.73.216.199:51720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:38.060867 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.16:37870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:38.061512 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.16:37870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:38.522370 2026] [lsapi:warn] [pid 3016169:tid 3016169] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:10:39.010710 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.33:32244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:39.011326 2026] [authz_core:error] [pid 3005606:tid 3005606] [client 57.141.0.33:32244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:39.056275 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.24:46088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:39.056900 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.24:46088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:39.252665 2026] [ssl:error] [pid 3015119:tid 3015119] (EAI 2)Name or service not known: [client 144.76.19.72:51406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:39.252697 2026] [ssl:error] [pid 3015119:tid 3015119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:39.305535 2026] [ssl:error] [pid 3014636:tid 3014636] (EAI 2)Name or service not known: [client 144.76.19.72:51418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:39.305571 2026] [ssl:error] [pid 3014636:tid 3014636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:40.001923 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.51:24244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:40.002620 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.51:24244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:40.135844 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.34:23712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:40.136480 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.34:23712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:40.146902 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.40:58642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:40.147524 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.40:58642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:40.572261 2026] [authz_core:error] [pid 3016168:tid 3016168] [client 57.141.0.66:36070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:40.572888 2026] [authz_core:error] [pid 3016168:tid 3016168] [client 57.141.0.66:36070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:41.058206 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.10:23826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:41.058824 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.10:23826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:41.124233 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.36:64218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:41.124865 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.36:64218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:41.411739 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.68:57448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:41.412367 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.68:57448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:41.464548 2026] [core:error] [pid 3016168:tid 3016168] [client 66.249.66.195:44555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:41.464573 2026] [core:error] [pid 3016168:tid 3016168] [client 66.249.66.195:44555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:10:41.708268 2026] [ssl:error] [pid 3009519:tid 3009519] (70014)End of file found: [client 216.73.216.199:50619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:41.830084 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.12:43982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:41.830708 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.12:43982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:42.147943 2026] [access_compat:error] [pid 3016164:tid 3016164] [client 176.241.66.87:2469] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:42.184112 2026] [ssl:error] [pid 3015539:tid 3015539] (70014)End of file found: [client 216.73.216.199:14859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:42.361196 2026] [ssl:error] [pid 3001174:tid 3001174] (EAI 2)Name or service not known: [client 144.76.19.72:37610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:42.361226 2026] [ssl:error] [pid 3001174:tid 3001174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:42.415423 2026] [ssl:error] [pid 3016168:tid 3016168] (EAI 2)Name or service not known: [client 144.76.19.72:37616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:42.415457 2026] [ssl:error] [pid 3016168:tid 3016168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:42.421968 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.30:35948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:42.422592 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.30:35948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:42.490102 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 66.249.66.33:55765] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:10:42.492743 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 66.249.66.33:55765] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:10:42.493634 2026] [access_compat:error] [pid 3009642:tid 3009642] [client 157.20.138.62:65379] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:42.585927 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.3:37680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:42.586560 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.3:37680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:42.587356 2026] [access_compat:error] [pid 3016169:tid 3016169] [client 103.25.250.251:4201] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:42.747697 2026] [access_compat:error] [pid 3005698:tid 3005698] [client 103.72.86.239:40818] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:42.961004 2026] [authz_core:error] [pid 3015070:tid 3015070] [client 57.141.0.21:58896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:42.961678 2026] [authz_core:error] [pid 3015070:tid 3015070] [client 57.141.0.21:58896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:43.039623 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.41:60240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:43.040317 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.41:60240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:43.228692 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.49:24732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:43.229358 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.49:24732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:43.644151 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.34:23726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:43.644775 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.34:23726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:44.284788 2026] [authz_core:error] [pid 3016168:tid 3016168] [client 57.141.0.23:28630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:44.285420 2026] [authz_core:error] [pid 3016168:tid 3016168] [client 57.141.0.23:28630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:44.692400 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.66:38630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:44.693021 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.66:38630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:44.726154 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.40:58656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:44.727161 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.40:58656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:44.874257 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.54:45436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:44.875448 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.54:45436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:44.952348 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.22:24238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:44.952972 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.22:24238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:45.335195 2026] [authz_core:error] [pid 3016112:tid 3016112] [client 57.141.0.56:48512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:45.335828 2026] [authz_core:error] [pid 3016112:tid 3016112] [client 57.141.0.56:48512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:45.473898 2026] [ssl:error] [pid 3014702:tid 3014702] (EAI 2)Name or service not known: [client 144.76.19.72:37630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:45.473943 2026] [ssl:error] [pid 3014702:tid 3014702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:45.526169 2026] [ssl:error] [pid 3005650:tid 3005650] (EAI 2)Name or service not known: [client 144.76.19.72:37636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:45.526197 2026] [ssl:error] [pid 3005650:tid 3005650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:45.879198 2026] [security2:error] [pid 3016167:tid 3016167] [client 114.119.146.111:62907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1596236400/cat_ids~15,14/request_format~html"] [unique_id "amsxNc4rloJsi-b8vV0RwAAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1596236400/request_format~html/cat_ids~15
[Thu Jul 30 12:10:45.995032 2026] [ssl:error] [pid 3016025:tid 3016025] (70014)End of file found: [client 216.73.216.199:28927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:46.013038 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.52:27392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:46.013670 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.52:27392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:46.130697 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.33:48156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:46.131317 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.33:48156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:46.609179 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.29:48272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:46.609805 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.29:48272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:46.660213 2026] [access_compat:error] [pid 3005650:tid 3005650] [client 125.176.202.122:53275] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:47.082807 2026] [ssl:error] [pid 2998335:tid 2998335] (70014)End of file found: [client 216.73.216.199:13520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:47.417327 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.53:42192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:47.417943 2026] [authz_core:error] [pid 3014636:tid 3014636] [client 57.141.0.53:42192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:47.486253 2026] [access_compat:error] [pid 3009519:tid 3009519] [client 103.25.250.251:59730] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:47.805769 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.53:42194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:47.806401 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.53:42194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:47.992036 2026] [security2:error] [pid 3009641:tid 3009641] [client 114.119.146.111:62911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1596236400/cat_ids~15,14/request_format~html"] [unique_id "amsxNxNhInTJZy47phL-gAAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1596236400/request_format~html/cat_ids~15
[Thu Jul 30 12:10:48.048398 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.37:42952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:48.049263 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.37:42952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:48.101236 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.12:43988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:48.101862 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.12:43988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:48.403213 2026] [ssl:error] [pid 3012827:tid 3012827] (70014)End of file found: [client 216.73.216.199:48225] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:48.578962 2026] [ssl:error] [pid 3016162:tid 3016162] (EAI 2)Name or service not known: [client 144.76.19.72:37656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:48.578990 2026] [ssl:error] [pid 3016162:tid 3016162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:48.633532 2026] [ssl:error] [pid 3015539:tid 3015539] (EAI 2)Name or service not known: [client 144.76.19.72:37660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:48.633570 2026] [ssl:error] [pid 3015539:tid 3015539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:48.794042 2026] [authz_core:error] [pid 3015645:tid 3015645] [client 57.141.0.16:44062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:48.794783 2026] [authz_core:error] [pid 3015645:tid 3015645] [client 57.141.0.16:44062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:48.928043 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.69:26648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:48.928680 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.69:26648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:48.998799 2026] [lsapi:warn] [pid 3009642:tid 3009642] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:10:49.702000 2026] [authz_core:error] [pid 3016067:tid 3016067] [client 57.141.0.11:46216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:49.702655 2026] [authz_core:error] [pid 3016067:tid 3016067] [client 57.141.0.11:46216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:49.716878 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.49:45930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:49.717514 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.49:45930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:50.544744 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.69:26656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:50.545376 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.69:26656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:50.822777 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.34:40562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:50.823403 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.34:40562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:50.931220 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.63:39146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:50.931855 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.63:39146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:51.026755 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.35:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:51.027382 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.35:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:51.311822 2026] [ssl:error] [pid 3010714:tid 3010714] (70014)End of file found: [client 216.73.216.199:9896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:51.423516 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.2:26034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:51.424154 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.2:26034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:51.495952 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.8:37946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:51.496590 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.8:37946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:51.689049 2026] [ssl:error] [pid 3016169:tid 3016169] (EAI 2)Name or service not known: [client 144.76.19.72:40936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:51.689096 2026] [ssl:error] [pid 3016169:tid 3016169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:51.741510 2026] [ssl:error] [pid 3015645:tid 3015645] (EAI 2)Name or service not known: [client 144.76.19.72:40944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:51.741535 2026] [ssl:error] [pid 3015645:tid 3015645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:52.008589 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.18:46978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:52.009211 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.18:46978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:52.253038 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.1:48974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:52.253695 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.1:48974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:52.680316 2026] [access_compat:error] [pid 3016025:tid 3016025] [client 176.241.66.87:58598] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:52.966833 2026] [ssl:error] [pid 3015645:tid 3015645] (70014)End of file found: [client 216.73.216.199:19285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:53.018612 2026] [access_compat:error] [pid 3016067:tid 3016067] [client 157.20.138.62:49585] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:53.194282 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.37:51366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:53.195022 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.37:51366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:53.205495 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.38:61634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:53.206126 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.38:61634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:53.214324 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.63:39150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:53.214935 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.63:39150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:53.488181 2026] [access_compat:error] [pid 3004768:tid 3004768] [client 125.176.202.122:53397] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:53.569544 2026] [access_compat:error] [pid 3016168:tid 3016168] [client 103.72.86.239:40597] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:53.781609 2026] [access_compat:error] [pid 2998335:tid 2998335] [client 45.158.164.139:48108] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:10:53.870861 2026] [ssl:error] [pid 3009519:tid 3009519] (70014)End of file found: [client 216.73.216.199:37879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:54.005158 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.43:60464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:54.005780 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.43:60464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:54.055644 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.59:31052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:54.056265 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.59:31052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:54.463926 2026] [authz_core:error] [pid 3016164:tid 3016164] [client 57.141.0.30:38220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:54.464562 2026] [authz_core:error] [pid 3016164:tid 3016164] [client 57.141.0.30:38220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:54.797576 2026] [ssl:error] [pid 3016164:tid 3016164] (EAI 2)Name or service not known: [client 144.76.19.72:40964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:54.797612 2026] [ssl:error] [pid 3016164:tid 3016164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:54.853377 2026] [ssl:error] [pid 3008689:tid 3008689] (EAI 2)Name or service not known: [client 144.76.19.72:40970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:54.853412 2026] [ssl:error] [pid 3008689:tid 3008689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:54.999119 2026] [access_compat:error] [pid 3008689:tid 3008689] [client 45.158.164.139:48118] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:10:55.006025 2026] [access_compat:error] [pid 3016169:tid 3016169] [client 45.158.164.139:48122] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:10:55.035817 2026] [authz_core:error] [pid 3016164:tid 3016164] [client 57.141.0.38:61642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:55.036440 2026] [authz_core:error] [pid 3016164:tid 3016164] [client 57.141.0.38:61642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:55.306251 2026] [security2:error] [pid 3016164:tid 3016164] [client 85.208.96.205:23870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7444.0/prev_next,next.html"] [unique_id "amsxP_D4EXX8_ilgHRj5agAAADU"]
[Thu Jul 30 12:10:55.399029 2026] [security2:error] [pid 3016112:tid 3016112] [client 85.208.96.207:59968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/accident-on-hwy-57-wisconsin-today"] [unique_id "amsxP8tF8Zqk0MMksS25bAAAACw"]
[Thu Jul 30 12:10:55.484821 2026] [authz_core:error] [pid 3016164:tid 3016164] [client 57.141.0.17:64036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:55.485472 2026] [authz_core:error] [pid 3016164:tid 3016164] [client 57.141.0.17:64036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:55.690107 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.16:44070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:55.690735 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.16:44070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:55.793708 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.35:32366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:55.794325 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.35:32366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:56.135714 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.6:60160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:56.136773 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.6:60160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:56.917113 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.51:36518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:56.917735 2026] [authz_core:error] [pid 3016167:tid 3016167] [client 57.141.0.51:36518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:56.996363 2026] [security2:error] [pid 3015120:tid 3015120] [client 150.5.133.70:26185] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxQKItmxYHiL-gAx7dsgAAABo"]
[Thu Jul 30 12:10:56.996428 2026] [security2:error] [pid 3015120:tid 3015120] [client 150.5.133.70:26185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxQKItmxYHiL-gAx7dsgAAABo"]
[Thu Jul 30 12:10:56.996705 2026] [security2:error] [pid 3015120:tid 3015120] [client 150.5.133.70:26185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxQKItmxYHiL-gAx7dsgAAABo"]
[Thu Jul 30 12:10:57.106201 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.53:26374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:57.106825 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.53:26374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:57.349337 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.70:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:57.350270 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.70:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:57.499323 2026] [ssl:error] [pid 3008689:tid 3008689] (70014)End of file found: [client 216.73.216.199:23005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:57.662186 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.9:44534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:57.663418 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.9:44534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:57.908588 2026] [ssl:error] [pid 3017198:tid 3017198] (EAI 2)Name or service not known: [client 144.76.19.72:40994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:57.908621 2026] [ssl:error] [pid 3017198:tid 3017198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:57.913407 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.3:53332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:57.914086 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.3:53332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:57.961792 2026] [ssl:error] [pid 3015928:tid 3015928] (EAI 2)Name or service not known: [client 144.76.19.72:41008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:10:57.961832 2026] [ssl:error] [pid 3015928:tid 3015928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:10:58.008897 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 103.59.160.131:57754] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 12:10:58.071450 2026] [access_compat:error] [pid 3014702:tid 3014702] [client 125.176.202.122:53502] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:58.305127 2026] [ssl:error] [pid 3016113:tid 3016113] (70014)End of file found: [client 216.73.216.199:3699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:58.313602 2026] [access_compat:error] [pid 3014636:tid 3014636] [client 103.25.250.251:4202] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:58.457891 2026] [security2:error] [pid 3013377:tid 3013377] [client 43.157.172.39:60846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.info"] [uri "/"] [unique_id "amsxQl5uiqeeka-ntzmQIgAAABw"]
[Thu Jul 30 12:10:58.511516 2026] [access_compat:error] [pid 2998281:tid 2998281] [client 176.241.66.87:58824] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:10:58.658406 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.44:43352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:58.659026 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.44:43352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:58.770054 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.55:64400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:58.770741 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.55:64400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:58.822884 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.16:27312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:58.823849 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.16:27312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:59.006129 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.65:61458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:59.006800 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.65:61458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:10:59.210716 2026] [ssl:error] [pid 3012897:tid 3012897] (70014)End of file found: [client 216.73.216.199:16492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:10:59.582707 2026] [lsapi:warn] [pid 3016025:tid 3016025] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:10:59.847511 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.34:49774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:10:59.848150 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.34:49774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:00.177296 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.3:33380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:00.177952 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.3:33380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:00.317914 2026] [security2:error] [pid 3016168:tid 3016168] [client 43.157.172.39:34568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "amsxRDzpG5RWn9tAvDItlgAAADk"], referer: http://shelterforum.info
[Thu Jul 30 12:11:00.372793 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.6:60168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:00.373421 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.6:60168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:00.580311 2026] [core:error] [pid 3009519:tid 3009519] [client 66.249.66.168:61465] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:00.580337 2026] [core:error] [pid 3009519:tid 3009519] [client 66.249.66.168:61465] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:01.090555 2026] [ssl:error] [pid 3016112:tid 3016112] (EAI 2)Name or service not known: [client 144.76.19.72:63192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:01.090607 2026] [ssl:error] [pid 3016112:tid 3016112] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:01.136439 2026] [authz_core:error] [pid 3016067:tid 3016067] [client 57.141.0.55:64416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:01.137063 2026] [authz_core:error] [pid 3016067:tid 3016067] [client 57.141.0.55:64416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:01.139183 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.42:59302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:01.139784 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.42:59302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:01.148129 2026] [ssl:error] [pid 3013377:tid 3013377] (EAI 2)Name or service not known: [client 144.76.19.72:63204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:01.148157 2026] [ssl:error] [pid 3013377:tid 3013377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:01.244509 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.7:64096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:01.245139 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.7:64096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:01.419708 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.20:44324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:01.420696 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.20:44324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:01.763048 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.67:30606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:01.763679 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.67:30606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:02.143724 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.69:30854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:02.144357 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.69:30854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:02.243188 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.20:44334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:02.243824 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.20:44334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:02.546977 2026] [security2:error] [pid 3013377:tid 3013377] [client 163.7.15.41:18251] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxRl5uiqeeka-ntzmQJQAAABw"]
[Thu Jul 30 12:11:02.547031 2026] [security2:error] [pid 3013377:tid 3013377] [client 163.7.15.41:18251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxRl5uiqeeka-ntzmQJQAAABw"]
[Thu Jul 30 12:11:02.547314 2026] [security2:error] [pid 3013377:tid 3013377] [client 163.7.15.41:18251] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxRl5uiqeeka-ntzmQJQAAABw"]
[Thu Jul 30 12:11:03.089039 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.66:59542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:03.089681 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.66:59542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:03.205120 2026] [access_compat:error] [pid 3015120:tid 3015120] [client 176.241.66.87:59152] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:03.242640 2026] [security2:error] [pid 3001174:tid 3001174] [client 18.199.86.73:54060] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "borovetsexpress.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsxRy3mOSFR2pFQnKCtywAAAEo"]
[Thu Jul 30 12:11:03.242806 2026] [security2:error] [pid 3001174:tid 3001174] [client 18.199.86.73:54060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "borovetsexpress.banskoexpress.com"] [uri "/.git/config"] [unique_id "amsxRy3mOSFR2pFQnKCtywAAAEo"]
[Thu Jul 30 12:11:03.369374 2026] [lsapi:warn] [pid 3016168:tid 3016168] [client 62.7.102.3:56055] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:03.369416 2026] [lsapi:warn] [pid 3016168:tid 3016168] [client 62.7.102.3:56055] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:03.526724 2026] [ssl:error] [pid 3004769:tid 3004769] (70014)End of file found: [client 216.73.216.199:18018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:03.571028 2026] [access_compat:error] [pid 3008689:tid 3008689] [client 157.20.138.62:50186] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:03.675444 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.22:50828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:03.676064 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.22:50828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:03.802800 2026] [security2:error] [pid 3001174:tid 3001174] [client 18.199.86.73:54060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "borovetsexpress.banskoexpress.com"] [uri "/index.php"] [unique_id "amsxRy3mOSFR2pFQnKCtywAAAEo"]
[Thu Jul 30 12:11:03.870373 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.20:44340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:03.871010 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.20:44340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:04.041674 2026] [ssl:error] [pid 3015119:tid 3015119] (70014)End of file found: [client 216.73.216.199:54433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:04.087777 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.7:64106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:04.088404 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.7:64106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:04.136393 2026] [authz_core:error] [pid 3016168:tid 3016168] [client 57.141.0.50:60340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:04.137013 2026] [authz_core:error] [pid 3016168:tid 3016168] [client 57.141.0.50:60340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:04.204953 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:63208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:04.204988 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:04.259756 2026] [ssl:error] [pid 3016114:tid 3016114] (EAI 2)Name or service not known: [client 144.76.19.72:63214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:04.259795 2026] [ssl:error] [pid 3016114:tid 3016114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:04.325469 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.69:30866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:04.326104 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.69:30866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:04.562335 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.38:52358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:04.562960 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.38:52358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:04.676254 2026] [ssl:error] [pid 3001174:tid 3001174] (70014)End of file found: [client 216.73.216.199:4788] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:05.082490 2026] [security2:error] [pid 3012897:tid 3012897] [client 88.253.1.113:37010] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxSY3plc8XytrAZykbTAAAACU"]
[Thu Jul 30 12:11:05.082553 2026] [security2:error] [pid 3012897:tid 3012897] [client 88.253.1.113:37010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxSY3plc8XytrAZykbTAAAACU"]
[Thu Jul 30 12:11:05.082825 2026] [security2:error] [pid 3012897:tid 3012897] [client 88.253.1.113:37010] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxSY3plc8XytrAZykbTAAAACU"]
[Thu Jul 30 12:11:05.245612 2026] [security2:error] [pid 3014637:tid 3014637] [client 163.7.15.41:50203] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxSdAo2E3EKxTD_HpmTAAAAAs"]
[Thu Jul 30 12:11:05.245667 2026] [security2:error] [pid 3014637:tid 3014637] [client 163.7.15.41:50203] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxSdAo2E3EKxTD_HpmTAAAAAs"]
[Thu Jul 30 12:11:05.245932 2026] [security2:error] [pid 3014637:tid 3014637] [client 163.7.15.41:50203] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxSdAo2E3EKxTD_HpmTAAAAAs"]
[Thu Jul 30 12:11:05.782971 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.51:47882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:05.783606 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.51:47882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:05.992369 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.65:27360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:05.992989 2026] [authz_core:error] [pid 3014637:tid 3014637] [client 57.141.0.65:27360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:06.239272 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.2:53974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:06.239896 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.2:53974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:06.423218 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.35:50450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:06.424336 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.35:50450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:06.598309 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.22:50844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:06.599105 2026] [authz_core:error] [pid 3011845:tid 3011845] [client 57.141.0.22:50844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:06.898394 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.22:50854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:06.899013 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.22:50854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:07.009681 2026] [security2:error] [pid 3015539:tid 3015539] [client 190.83.10.5:59482] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxS6bud5PCw3QtpqHleQAAABs"]
[Thu Jul 30 12:11:07.009733 2026] [security2:error] [pid 3015539:tid 3015539] [client 190.83.10.5:59482] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxS6bud5PCw3QtpqHleQAAABs"]
[Thu Jul 30 12:11:07.010002 2026] [security2:error] [pid 3015539:tid 3015539] [client 190.83.10.5:59482] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxS6bud5PCw3QtpqHleQAAABs"]
[Thu Jul 30 12:11:07.318681 2026] [ssl:error] [pid 3016025:tid 3016025] (EAI 2)Name or service not known: [client 144.76.19.72:63218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:07.318721 2026] [ssl:error] [pid 3016025:tid 3016025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:07.358160 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.34:49788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:07.358819 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.34:49788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:07.361032 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.53:37498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:07.361667 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.53:37498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:07.373721 2026] [ssl:error] [pid 3005650:tid 3005650] (EAI 2)Name or service not known: [client 144.76.19.72:63220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:07.373748 2026] [ssl:error] [pid 3005650:tid 3005650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:08.087044 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.50:60348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:08.087682 2026] [authz_core:error] [pid 3005650:tid 3005650] [client 57.141.0.50:60348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:08.103264 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/.git/HEAD"] [unique_id "amsxTN3AtdczVS9yZ8WYZgAAAA4"]
[Thu Jul 30 12:11:08.103415 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/.git/HEAD"] [unique_id "amsxTN3AtdczVS9yZ8WYZgAAAA4"]
[Thu Jul 30 12:11:08.103629 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/.git/HEAD"] [unique_id "amsxTN3AtdczVS9yZ8WYZgAAAA4"]
[Thu Jul 30 12:11:08.172537 2026] [security2:error] [pid 3015539:tid 3015539] [client 43.166.132.142:53712] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ogsoil.com"] [uri "/"] [unique_id "amsxTKbud5PCw3QtpqHlewAAABs"]
[Thu Jul 30 12:11:08.230877 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/.env"] [unique_id "amsxTN3AtdczVS9yZ8WYZwAAAA4"]
[Thu Jul 30 12:11:08.231048 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/.env"] [unique_id "amsxTN3AtdczVS9yZ8WYZwAAAA4"]
[Thu Jul 30 12:11:08.231276 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/.env"] [unique_id "amsxTN3AtdczVS9yZ8WYZwAAAA4"]
[Thu Jul 30 12:11:08.247266 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.65:27374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:08.247883 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.65:27374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:08.274812 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.36:39622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:08.275432 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.36:39622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:08.378923 2026] [security2:error] [pid 3011845:tid 3011845] [client 208.84.102.200:57496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.development"] [unique_id "amsxTNZp4qB7NBerS_wCygAAAAE"]
[Thu Jul 30 12:11:08.379130 2026] [security2:error] [pid 3011845:tid 3011845] [client 208.84.102.200:57496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.development"] [unique_id "amsxTNZp4qB7NBerS_wCygAAAAE"]
[Thu Jul 30 12:11:08.379327 2026] [security2:error] [pid 3011845:tid 3011845] [client 208.84.102.200:57496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.development"] [unique_id "amsxTNZp4qB7NBerS_wCygAAAAE"]
[Thu Jul 30 12:11:08.383279 2026] [security2:error] [pid 3017199:tid 3017199] [client 208.84.102.200:57490] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.production"] [unique_id "amsxTPRHQhNofLJgOMjvugAAAAU"]
[Thu Jul 30 12:11:08.383415 2026] [security2:error] [pid 3017199:tid 3017199] [client 208.84.102.200:57490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.production"] [unique_id "amsxTPRHQhNofLJgOMjvugAAAAU"]
[Thu Jul 30 12:11:08.383624 2026] [security2:error] [pid 3017199:tid 3017199] [client 208.84.102.200:57490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.production"] [unique_id "amsxTPRHQhNofLJgOMjvugAAAAU"]
[Thu Jul 30 12:11:08.424669 2026] [security2:error] [pid 3015539:tid 3015539] [client 208.84.102.200:57498] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/backend/.env"] [unique_id "amsxTKbud5PCw3QtpqHlfAAAABs"]
[Thu Jul 30 12:11:08.424812 2026] [security2:error] [pid 3015539:tid 3015539] [client 208.84.102.200:57498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/backend/.env"] [unique_id "amsxTKbud5PCw3QtpqHlfAAAABs"]
[Thu Jul 30 12:11:08.425000 2026] [security2:error] [pid 3015539:tid 3015539] [client 208.84.102.200:57498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/backend/.env"] [unique_id "amsxTKbud5PCw3QtpqHlfAAAABs"]
[Thu Jul 30 12:11:08.448769 2026] [security2:error] [pid 3012827:tid 3012827] [client 208.84.102.200:57470] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/.git/config"] [unique_id "amsxTJppgfl2yEmo6EByjQAAACM"]
[Thu Jul 30 12:11:08.448944 2026] [security2:error] [pid 3012827:tid 3012827] [client 208.84.102.200:57470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/.git/config"] [unique_id "amsxTJppgfl2yEmo6EByjQAAACM"]
[Thu Jul 30 12:11:08.449152 2026] [security2:error] [pid 3012827:tid 3012827] [client 208.84.102.200:57470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/.git/config"] [unique_id "amsxTJppgfl2yEmo6EByjQAAACM"]
[Thu Jul 30 12:11:08.473474 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.local"] [unique_id "amsxTN3AtdczVS9yZ8WYaQAAAA4"]
[Thu Jul 30 12:11:08.473628 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.local"] [unique_id "amsxTN3AtdczVS9yZ8WYaQAAAA4"]
[Thu Jul 30 12:11:08.473808 2026] [security2:error] [pid 3014702:tid 3014702] [client 208.84.102.200:57466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/.env.local"] [unique_id "amsxTN3AtdczVS9yZ8WYaQAAAA4"]
[Thu Jul 30 12:11:08.485172 2026] [security2:error] [pid 3011845:tid 3011845] [client 208.84.102.200:57496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchellphotography.co.uk"] [uri "/api/.env"] [unique_id "amsxTNZp4qB7NBerS_wCywAAAAE"]
[Thu Jul 30 12:11:08.485356 2026] [security2:error] [pid 3011845:tid 3011845] [client 208.84.102.200:57496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchellphotography.co.uk"] [uri "/api/.env"] [unique_id "amsxTNZp4qB7NBerS_wCywAAAAE"]
[Thu Jul 30 12:11:08.485570 2026] [security2:error] [pid 3011845:tid 3011845] [client 208.84.102.200:57496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchellphotography.co.uk"] [uri "/api/.env"] [unique_id "amsxTNZp4qB7NBerS_wCywAAAAE"]
[Thu Jul 30 12:11:08.737545 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.11:37770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:08.738174 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.11:37770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:09.141294 2026] [security2:error] [pid 3015119:tid 3015119] [client 68.83.67.125:60794] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxTSrBmfUM6Y0Qv4mX7wAAABc"]
[Thu Jul 30 12:11:09.141344 2026] [security2:error] [pid 3015119:tid 3015119] [client 68.83.67.125:60794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxTSrBmfUM6Y0Qv4mX7wAAABc"]
[Thu Jul 30 12:11:09.141614 2026] [security2:error] [pid 3015119:tid 3015119] [client 68.83.67.125:60794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxTSrBmfUM6Y0Qv4mX7wAAABc"]
[Thu Jul 30 12:11:10.979227 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.43:51476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:10.979933 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.43:51476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:11.215649 2026] [ssl:error] [pid 3017773:tid 3017773] (70014)End of file found: [client 216.73.216.199:46793] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:11.305752 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.15:54632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:11.306374 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.15:54632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:11.312668 2026] [access_compat:error] [pid 3017774:tid 3017774] [client 103.25.250.251:4203] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:11.376872 2026] [ssl:error] [pid 3015120:tid 3015120] (70014)End of file found: [client 216.73.216.199:43709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:11.721278 2026] [access_compat:error] [pid 3016166:tid 3016166] [client 125.176.202.122:53722] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:12.049407 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.21:52064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:12.050097 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.21:52064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:12.309690 2026] [ssl:error] [pid 3014637:tid 3014637] (70014)End of file found: [client 216.73.216.199:58203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:12.344816 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:11:12.466983 2026] [ssl:error] [pid 3017822:tid 3017822] (EAI 2)Name or service not known: [client 144.76.19.72:52746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:12.467025 2026] [ssl:error] [pid 3017822:tid 3017822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:12.539316 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.46:60496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:12.539966 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.46:60496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:12.548786 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.63:64808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:12.549470 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.63:64808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:12.552443 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.61:30380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:12.553120 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.61:30380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:12.710987 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.31:61322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:12.711613 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.31:61322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:12.724668 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.68:47406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:12.725967 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.68:47406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:12.922167 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.2:53986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:12.922791 2026] [authz_core:error] [pid 3009519:tid 3009519] [client 57.141.0.2:53986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:13.016959 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.24:25618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:13.017597 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.24:25618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:13.099666 2026] [ssl:error] [pid 3017771:tid 3017771] (EAI 2)Name or service not known: [client 144.76.19.72:52760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:13.099697 2026] [ssl:error] [pid 3017771:tid 3017771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:13.261920 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.26:29318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:13.262566 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.26:29318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:13.302998 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.29:61074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:13.303634 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.29:61074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:13.398378 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.17:58092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:13.399007 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.17:58092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:13.433619 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.7:31874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:13.434239 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.7:31874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:13.755330 2026] [access_compat:error] [pid 3016165:tid 3016165] [client 176.241.66.87:3455] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:13.787008 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.61:30392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:13.787653 2026] [authz_core:error] [pid 3015928:tid 3015928] [client 57.141.0.61:30392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:13.915267 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.49:57570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:13.915892 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.49:57570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:14.105406 2026] [access_compat:error] [pid 3017824:tid 3017824] [client 157.20.138.62:50781] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:14.557944 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.63:64818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:14.559102 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.63:64818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:14.823195 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.36:22788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:14.823824 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.36:22788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:15.079226 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.53:37522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:15.080257 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.53:37522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:15.321551 2026] [access_compat:error] [pid 3014702:tid 3014702] [client 116.101.136.114:54145] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/the-sort-of-name, referer: https://www.google.com/
[Thu Jul 30 12:11:15.321653 2026] [access_compat:error] [pid 3014702:tid 3014702] [client 116.101.136.114:54145] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.google.com/
[Thu Jul 30 12:11:15.490741 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.25:59220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:15.491372 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.25:59220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:15.639878 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.65:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:15.640531 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.65:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:16.148975 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.56:49950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:16.149634 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.56:49950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:16.155104 2026] [ssl:error] [pid 3017876:tid 3017876] (EAI 2)Name or service not known: [client 144.76.19.72:52762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:16.155136 2026] [ssl:error] [pid 3017876:tid 3017876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:16.208335 2026] [ssl:error] [pid 3017878:tid 3017878] (EAI 2)Name or service not known: [client 144.76.19.72:52776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:16.208369 2026] [ssl:error] [pid 3017878:tid 3017878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:16.497088 2026] [security2:error] [pid 3017198:tid 3017198] [client 216.73.216.199:61908] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/systemd-pstore.conf"] [unique_id "amsxVNlBZLDQz20ygEz6ngAAAAM"]
[Thu Jul 30 12:11:16.497318 2026] [security2:error] [pid 3017198:tid 3017198] [client 216.73.216.199:61908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/systemd-pstore.conf"] [unique_id "amsxVNlBZLDQz20ygEz6ngAAAAM"]
[Thu Jul 30 12:11:16.497554 2026] [security2:error] [pid 3017198:tid 3017198] [client 216.73.216.199:61908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/systemd-pstore.conf"] [unique_id "amsxVNlBZLDQz20ygEz6ngAAAAM"]
[Thu Jul 30 12:11:16.902171 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.61:30406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:16.902848 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.61:30406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:17.077619 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.32:62034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:17.078242 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.32:62034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:17.098951 2026] [ssl:error] [pid 3017198:tid 3017198] (70014)End of file found: [client 216.73.216.199:61908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:17.156881 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.27:33810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:17.157506 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.27:33810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:17.278539 2026] [authz_core:error] [pid 3017868:tid 3017868] [client 57.141.0.15:38648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:17.279165 2026] [authz_core:error] [pid 3017868:tid 3017868] [client 57.141.0.15:38648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:17.371214 2026] [authz_core:error] [pid 3017864:tid 3017864] [client 57.141.0.60:55100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:17.371839 2026] [authz_core:error] [pid 3017864:tid 3017864] [client 57.141.0.60:55100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:17.514981 2026] [authz_core:error] [pid 3017874:tid 3017874] [client 57.141.0.56:49960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:17.515645 2026] [authz_core:error] [pid 3017874:tid 3017874] [client 57.141.0.56:49960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:17.700031 2026] [ssl:error] [pid 3017774:tid 3017774] (70014)End of file found: [client 216.73.216.199:32233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:17.856814 2026] [access_compat:error] [pid 3014702:tid 3014702] [client 104.30.167.164:13632] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:11:18.033590 2026] [access_compat:error] [pid 3017772:tid 3017772] [client 104.30.167.164:13443] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:11:18.395209 2026] [authz_core:error] [pid 3016067:tid 3016067] [client 57.141.0.10:43756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:18.395836 2026] [authz_core:error] [pid 3016067:tid 3016067] [client 57.141.0.10:43756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:18.611382 2026] [authz_core:error] [pid 3017868:tid 3017868] [client 57.141.0.25:59230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:18.611996 2026] [authz_core:error] [pid 3017868:tid 3017868] [client 57.141.0.25:59230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:18.910704 2026] [ssl:error] [pid 3017872:tid 3017872] (70014)End of file found: [client 216.73.216.199:57970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:19.130661 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.34:29162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:19.131284 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.34:29162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:19.263303 2026] [ssl:error] [pid 3017820:tid 3017820] (EAI 2)Name or service not known: [client 144.76.19.72:52780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:19.263338 2026] [ssl:error] [pid 3017820:tid 3017820] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:19.270738 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.19:36472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:19.271352 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.19:36472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:19.319537 2026] [ssl:error] [pid 3016067:tid 3016067] (EAI 2)Name or service not known: [client 144.76.19.72:52796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:19.319578 2026] [ssl:error] [pid 3016067:tid 3016067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:19.388755 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.68:38358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:19.389384 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.68:38358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:19.559556 2026] [core:error] [pid 3017706:tid 3017706] [client 66.249.66.167:39396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:19.559602 2026] [core:error] [pid 3017706:tid 3017706] [client 66.249.66.167:39396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:19.569790 2026] [core:error] [pid 3017868:tid 3017868] [client 66.249.66.167:48441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:19.569829 2026] [core:error] [pid 3017868:tid 3017868] [client 66.249.66.167:48441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:19.817197 2026] [access_compat:error] [pid 3017878:tid 3017878] [client 125.176.202.122:53952] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:19.934489 2026] [access_compat:error] [pid 3017873:tid 3017873] [client 103.25.250.251:59731] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:19.955986 2026] [security2:error] [pid 3005698:tid 3005698] [client 74.7.241.50:35572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.moodle.prosperon.co.uk"] [uri "/"] [unique_id "amsxVyaxOasDpo61Lk8L7AAAAB0"]
[Thu Jul 30 12:11:20.161391 2026] [lsapi:warn] [pid 3015120:tid 3015120] [client 45.158.164.139:60036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:20.161439 2026] [lsapi:warn] [pid 3015120:tid 3015120] [client 45.158.164.139:60036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:20.163691 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:20.163728 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:20.233099 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.8:45296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:20.233721 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.8:45296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:20.467080 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.14:57126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:20.468324 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.14:57126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:20.511289 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:20.511327 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:20.676586 2026] [lsapi:warn] [pid 3017740:tid 3017740] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:11:20.865343 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:47192] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:20.865385 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:47192] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:20.867228 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:20.867252 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:21.283784 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:21.283814 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:21.532582 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.11:53114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:21.533202 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.11:53114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:21.618515 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.52:64496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:21.619146 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.52:64496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:21.619939 2026] [lsapi:warn] [pid 3004769:tid 3004769] [client 45.158.164.139:47214] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:21.619972 2026] [lsapi:warn] [pid 3004769:tid 3004769] [client 45.158.164.139:47214] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:21.621305 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:21.621337 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:21.844464 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.12:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:21.845096 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.12:47956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:21.849244 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.34:29164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:21.849859 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.34:29164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:21.959698 2026] [lsapi:warn] [pid 3013377:tid 3013377] [client 45.158.164.139:47224] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:21.959742 2026] [lsapi:warn] [pid 3013377:tid 3013377] [client 45.158.164.139:47224] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:21.961919 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:21.961944 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:22.109998 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.4:64958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:22.110625 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.4:64958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:22.257272 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.39:59636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:22.257895 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.39:59636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:22.355251 2026] [lsapi:warn] [pid 3017199:tid 3017199] [client 45.158.164.139:47230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:22.355294 2026] [lsapi:warn] [pid 3017199:tid 3017199] [client 45.158.164.139:47230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:22.358553 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:22.358580 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:22.377092 2026] [ssl:error] [pid 3016066:tid 3016066] (EAI 2)Name or service not known: [client 144.76.19.72:22664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:22.377129 2026] [ssl:error] [pid 3016066:tid 3016066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:22.429425 2026] [ssl:error] [pid 3014702:tid 3014702] (EAI 2)Name or service not known: [client 144.76.19.72:22672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:22.429449 2026] [ssl:error] [pid 3014702:tid 3014702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:22.540469 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 66.249.66.34:63848] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:11:22.543201 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 66.249.66.34:63848] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:11:22.681617 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.7:40964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:22.682237 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.7:40964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:22.736736 2026] [lsapi:warn] [pid 3017773:tid 3017773] [client 45.158.164.139:47248] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:22.736778 2026] [lsapi:warn] [pid 3017773:tid 3017773] [client 45.158.164.139:47248] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:22.738763 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:22.738786 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:22.811875 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.47:43020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:22.812506 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.47:43020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:22.824041 2026] [ssl:error] [pid 3017772:tid 3017772] (70014)End of file found: [client 216.73.216.199:3689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:22.892947 2026] [security2:error] [pid 3001174:tid 3001174] [client 85.208.96.202:25182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11543.0/prev_next,prev.html"] [unique_id "amsxWi3mOSFR2pFQnKCtzgAAAEo"]
[Thu Jul 30 12:11:23.079770 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:23.079803 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:23.122661 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.12:47960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:23.123301 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.12:47960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:23.417748 2026] [lsapi:warn] [pid 3017868:tid 3017868] [client 45.158.164.139:47278] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:23.417795 2026] [lsapi:warn] [pid 3017868:tid 3017868] [client 45.158.164.139:47278] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:23.421035 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:23.421060 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:23.727111 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:8187] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:23.820805 2026] [lsapi:warn] [pid 3016165:tid 3016165] [client 45.158.164.139:47294] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:23.820852 2026] [lsapi:warn] [pid 3016165:tid 3016165] [client 45.158.164.139:47294] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:23.823864 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:23.823886 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:23.890050 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.58:34696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:23.890689 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.58:34696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:24.160665 2026] [lsapi:warn] [pid 3017198:tid 3017198] [client 45.158.164.139:47310] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:24.160710 2026] [lsapi:warn] [pid 3017198:tid 3017198] [client 45.158.164.139:47310] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:24.291887 2026] [access_compat:error] [pid 3009642:tid 3009642] [client 176.241.66.87:6097] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:24.455569 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.65:48624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:24.456193 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.65:48624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:24.516366 2026] [lsapi:warn] [pid 3007868:tid 3007868] [client 45.158.164.139:47322] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:24.516412 2026] [lsapi:warn] [pid 3007868:tid 3007868] [client 45.158.164.139:47322] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:24.603750 2026] [access_compat:error] [pid 3016066:tid 3016066] [client 157.20.138.62:51372] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:24.734232 2026] [authz_core:error] [pid 3017875:tid 3017875] [client 57.141.0.59:45296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:24.734873 2026] [authz_core:error] [pid 3017875:tid 3017875] [client 57.141.0.59:45296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:24.870108 2026] [authz_core:error] [pid 3017872:tid 3017872] [client 57.141.0.64:58830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:24.870738 2026] [authz_core:error] [pid 3017872:tid 3017872] [client 57.141.0.64:58830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:24.903693 2026] [lsapi:warn] [pid 3017198:tid 3017198] [client 45.158.164.139:47338] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:24.903725 2026] [lsapi:warn] [pid 3017198:tid 3017198] [client 45.158.164.139:47338] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:24.905739 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:24.905764 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:25.273133 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:25.273163 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:25.377523 2026] [authz_core:error] [pid 3017864:tid 3017864] [client 57.141.0.26:24014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:25.378145 2026] [authz_core:error] [pid 3017864:tid 3017864] [client 57.141.0.26:24014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:25.440026 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.59:45306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:25.440663 2026] [authz_core:error] [pid 3007868:tid 3007868] [client 57.141.0.59:45306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:25.484025 2026] [ssl:error] [pid 3017818:tid 3017818] (EAI 2)Name or service not known: [client 144.76.19.72:22674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:25.484083 2026] [ssl:error] [pid 3017818:tid 3017818] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:25.540570 2026] [ssl:error] [pid 3012897:tid 3012897] (EAI 2)Name or service not known: [client 144.76.19.72:22684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:25.540610 2026] [ssl:error] [pid 3012897:tid 3012897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:25.612840 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:25.612866 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:25.838854 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.64:58842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:25.839475 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.64:58842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:25.839901 2026] [ssl:error] [pid 3011845:tid 3011845] (70014)End of file found: [client 216.73.216.199:8783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:25.964792 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:25.964821 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:26.306460 2026] [lsapi:warn] [pid 2998281:tid 2998281] [client 45.158.164.139:47374] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:26.306511 2026] [lsapi:warn] [pid 2998281:tid 2998281] [client 45.158.164.139:47374] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:26.308724 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:26.308746 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:26.400217 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.25:30596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:26.400845 2026] [authz_core:error] [pid 3012544:tid 3012544] [client 57.141.0.25:30596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:26.454101 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.27:37576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:26.454767 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.27:37576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:26.644404 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:26.644429 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:26.921646 2026] [access_compat:error] [pid 3017864:tid 3017864] [client 125.176.202.122:54060] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:27.069688 2026] [lsapi:warn] [pid 3017869:tid 3017869] [client 45.158.164.139:47398] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:27.069731 2026] [lsapi:warn] [pid 3017869:tid 3017869] [client 45.158.164.139:47398] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:27.257995 2026] [authz_core:error] [pid 3017865:tid 3017865] [client 57.141.0.35:40828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:27.258636 2026] [authz_core:error] [pid 3017865:tid 3017865] [client 57.141.0.35:40828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:27.310138 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.12:47970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:27.310756 2026] [authz_core:error] [pid 3014164:tid 3014164] [client 57.141.0.12:47970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:27.522812 2026] [lsapi:warn] [pid 3017774:tid 3017774] [client 45.158.164.139:47414] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:27.522855 2026] [lsapi:warn] [pid 3017774:tid 3017774] [client 45.158.164.139:47414] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:27.597322 2026] [access_compat:error] [pid 2998335:tid 2998335] [client 103.72.86.239:39890] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:27.634799 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.44:57500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:27.635431 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.44:57500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:27.870230 2026] [lsapi:warn] [pid 3012897:tid 3012897] [client 45.158.164.139:47422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:27.870276 2026] [lsapi:warn] [pid 3012897:tid 3012897] [client 45.158.164.139:47422] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:27.873848 2026] [authz_core:error] [pid 3017872:tid 3017872] [client 57.141.0.8:47184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:27.874506 2026] [authz_core:error] [pid 3017872:tid 3017872] [client 57.141.0.8:47184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:27.876328 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:27.876357 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:27.929539 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.32:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:27.930170 2026] [authz_core:error] [pid 3015119:tid 3015119] [client 57.141.0.32:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:28.229117 2026] [lsapi:warn] [pid 3017867:tid 3017867] [client 45.158.164.139:47436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:28.229162 2026] [lsapi:warn] [pid 3017867:tid 3017867] [client 45.158.164.139:47436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:28.231213 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:28.231237 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:28.240942 2026] [core:error] [pid 3016165:tid 3016165] [client 57.141.0.38:24486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:28.240967 2026] [core:error] [pid 3016165:tid 3016165] [client 57.141.0.38:24486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:28.545912 2026] [ssl:error] [pid 3015539:tid 3015539] (70014)End of file found: [client 216.73.216.199:62995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:28.600366 2026] [ssl:error] [pid 3013377:tid 3013377] (EAI 2)Name or service not known: [client 144.76.19.72:22698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:28.600401 2026] [ssl:error] [pid 3013377:tid 3013377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:28.617618 2026] [lsapi:warn] [pid 3017162:tid 3017162] [client 45.158.164.139:47448] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:28.617671 2026] [lsapi:warn] [pid 3017162:tid 3017162] [client 45.158.164.139:47448] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:28.620173 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:28.620196 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:28.655083 2026] [ssl:error] [pid 3012897:tid 3012897] (EAI 2)Name or service not known: [client 144.76.19.72:22704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:28.655114 2026] [ssl:error] [pid 3012897:tid 3012897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:29.026832 2026] [authz_core:error] [pid 3017872:tid 3017872] [client 57.141.0.19:56514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:29.027454 2026] [authz_core:error] [pid 3017872:tid 3017872] [client 57.141.0.19:56514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:29.035901 2026] [lsapi:warn] [pid 3014702:tid 3014702] [client 45.158.164.139:47478] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:29.035945 2026] [lsapi:warn] [pid 3014702:tid 3014702] [client 45.158.164.139:47478] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:29.038061 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:29.038098 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:29.152774 2026] [ssl:error] [pid 3017870:tid 3017870] (70014)End of file found: [client 216.73.216.199:29673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:29.375810 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.37:45520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:29.376439 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.37:45520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:29.821145 2026] [authz_core:error] [pid 3017864:tid 3017864] [client 57.141.0.59:40476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:29.821767 2026] [authz_core:error] [pid 3017864:tid 3017864] [client 57.141.0.59:40476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:29.861358 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:29.861390 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:29.896826 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.45:25334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:29.897454 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.45:25334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:30.133622 2026] [access_compat:error] [pid 3017865:tid 3017865] [client 176.241.66.87:52959] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:30.208896 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.2:35488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:30.209545 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.2:35488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:30.289923 2026] [lsapi:warn] [pid 3017706:tid 3017706] [client 45.158.164.139:47512] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:30.289968 2026] [lsapi:warn] [pid 3017706:tid 3017706] [client 45.158.164.139:47512] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:30.291898 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:30.291923 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:30.414929 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.66:33538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:30.415562 2026] [authz_core:error] [pid 3001138:tid 3001138] [client 57.141.0.66:33538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:30.657989 2026] [lsapi:warn] [pid 3016066:tid 3016066] [client 45.158.164.139:47516] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:30.658036 2026] [lsapi:warn] [pid 3016066:tid 3016066] [client 45.158.164.139:47516] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:30.660253 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:30.660279 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:30.770255 2026] [access_compat:error] [pid 3014702:tid 3014702] [client 103.25.250.251:59732] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:30.889816 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.17:45930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:30.890445 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.17:45930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:31.123625 2026] [access_compat:error] [pid 3008689:tid 3008689] [client 125.176.202.122:54176] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:31.213949 2026] [lsapi:warn] [pid 3016113:tid 3016113] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:11:31.398772 2026] [lsapi:warn] [pid 3001138:tid 3001138] [client 45.158.164.139:34458] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:31.398815 2026] [lsapi:warn] [pid 3001138:tid 3001138] [client 45.158.164.139:34458] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:31.728850 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.24:41360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:31.729477 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.24:41360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:31.730972 2026] [ssl:error] [pid 3011845:tid 3011845] (EAI 2)Name or service not known: [client 144.76.19.72:64360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:31.731001 2026] [ssl:error] [pid 3011845:tid 3011845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:31.745128 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.13:58282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:31.745744 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.13:58282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:31.785621 2026] [ssl:error] [pid 3017819:tid 3017819] (EAI 2)Name or service not known: [client 144.76.19.72:64362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:31.785657 2026] [ssl:error] [pid 3017819:tid 3017819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:31.788340 2026] [lsapi:warn] [pid 3005698:tid 3005698] [client 45.158.164.139:34460] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:31.788378 2026] [lsapi:warn] [pid 3005698:tid 3005698] [client 45.158.164.139:34460] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:32.138970 2026] [security2:error] [pid 3004768:tid 3004768] [client 43.163.80.48:48740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclereracing.com"] [uri "/"] [unique_id "amsxZIspwPz1Zs118EYoIQAAABM"]
[Thu Jul 30 12:11:32.166309 2026] [ssl:error] [pid 3012897:tid 3012897] (70014)End of file found: [client 216.73.216.199:16688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:32.176252 2026] [security2:error] [pid 3017877:tid 3017877] [client 114.119.135.139:62981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hatch-works.com"] [uri "/robots.txt"] [unique_id "amsxZJKYTw6XeWTkVDVFEAAAAEc"], referer: http://hatch-works.com/robots.txt
[Thu Jul 30 12:11:32.436900 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 66.249.66.33:64657] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:11:32.439651 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 66.249.66.33:64657] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:11:32.513355 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.69:46464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:32.513976 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.69:46464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:32.643664 2026] [lsapi:warn] [pid 3011845:tid 3011845] [client 45.158.164.139:34498] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:32.643706 2026] [lsapi:warn] [pid 3011845:tid 3011845] [client 45.158.164.139:34498] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:32.645743 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:32.645767 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:32.834038 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.1:50048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:32.834674 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.1:50048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:32.839246 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.32:58860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:32.839854 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.32:58860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:33.031289 2026] [lsapi:warn] [pid 3016113:tid 3016113] [client 45.158.164.139:34510] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:33.031365 2026] [lsapi:warn] [pid 3016113:tid 3016113] [client 45.158.164.139:34510] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:33.034255 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:33.034282 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:33.404445 2026] [lsapi:warn] [pid 3017871:tid 3017871] [client 45.158.164.139:34538] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:33.404494 2026] [lsapi:warn] [pid 3017871:tid 3017871] [client 45.158.164.139:34538] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:33.406944 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:33.406968 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:33.505948 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.1:50058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:33.506583 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.1:50058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:33.775437 2026] [lsapi:warn] [pid 2998335:tid 2998335] [client 45.158.164.139:34558] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:33.775482 2026] [lsapi:warn] [pid 2998335:tid 2998335] [client 45.158.164.139:34558] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:33.777723 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:33.777745 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:33.899909 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.22:49806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:33.900535 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.22:49806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:34.116000 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:34562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:34.116044 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:34562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:34.303694 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.63:65378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:34.304320 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.63:65378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:34.348006 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.9:58710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:34.348707 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.9:58710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:34.513940 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:34.513966 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:34.659364 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.26:42304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:34.659986 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.26:42304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:34.729649 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.40:23824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:34.730273 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.40:23824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:34.766511 2026] [access_compat:error] [pid 2998335:tid 2998335] [client 176.241.66.87:6933] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:34.842349 2026] [ssl:error] [pid 3017869:tid 3017869] (EAI 2)Name or service not known: [client 144.76.19.72:64368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:34.842392 2026] [ssl:error] [pid 3017869:tid 3017869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:34.858306 2026] [lsapi:warn] [pid 3017199:tid 3017199] [client 45.158.164.139:34590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:34.858335 2026] [lsapi:warn] [pid 3017199:tid 3017199] [client 45.158.164.139:34590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:34.860466 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:34.860489 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:34.896712 2026] [ssl:error] [pid 3017870:tid 3017870] (EAI 2)Name or service not known: [client 144.76.19.72:64382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:34.896745 2026] [ssl:error] [pid 3017870:tid 3017870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:35.017347 2026] [autoindex:error] [pid 3017162:tid 3017162] [client 68.221.69.72:7319] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:11:35.102587 2026] [access_compat:error] [pid 3004768:tid 3004768] [client 157.20.138.62:51963] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:35.277669 2026] [lsapi:warn] [pid 3012141:tid 3012141] [client 45.158.164.139:34598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:35.277718 2026] [lsapi:warn] [pid 3012141:tid 3012141] [client 45.158.164.139:34598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:35.289773 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.49:61978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:35.290393 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.49:61978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:35.436808 2026] [authz_core:error] [pid 3017877:tid 3017877] [client 57.141.0.44:25456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:35.437434 2026] [authz_core:error] [pid 3017877:tid 3017877] [client 57.141.0.44:25456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:35.608808 2026] [authz_core:error] [pid 3017869:tid 3017869] [client 57.141.0.4:40384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:35.609901 2026] [authz_core:error] [pid 3017869:tid 3017869] [client 57.141.0.4:40384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:35.730090 2026] [authz_core:error] [pid 3017740:tid 3017740] [client 57.141.0.16:62812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:35.730706 2026] [authz_core:error] [pid 3017740:tid 3017740] [client 57.141.0.16:62812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:35.904368 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.64:31524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:35.904990 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.64:31524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:36.080749 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:36.080778 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:36.086142 2026] [ssl:error] [pid 3016113:tid 3016113] (70014)End of file found: [client 216.73.216.199:51383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:36.304013 2026] [authz_core:error] [pid 3017876:tid 3017876] [client 57.141.0.36:51716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:36.304648 2026] [authz_core:error] [pid 3017876:tid 3017876] [client 57.141.0.36:51716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:36.466010 2026] [lsapi:warn] [pid 3017870:tid 3017870] [client 45.158.164.139:34636] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:36.466054 2026] [lsapi:warn] [pid 3017870:tid 3017870] [client 45.158.164.139:34636] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:36.468136 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:36.468161 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:36.692416 2026] [ssl:error] [pid 2998280:tid 2998280] (70014)End of file found: [client 216.73.216.199:25165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:36.743688 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.29:39422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:36.744308 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.29:39422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:36.821612 2026] [lsapi:warn] [pid 3014702:tid 3014702] [client 45.158.164.139:34644] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:36.821639 2026] [lsapi:warn] [pid 3014702:tid 3014702] [client 45.158.164.139:34644] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:36.823855 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:36.823882 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:37.209352 2026] [lsapi:warn] [pid 3015539:tid 3015539] [client 45.158.164.139:34646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:37.209396 2026] [lsapi:warn] [pid 3015539:tid 3015539] [client 45.158.164.139:34646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:37.480631 2026] [ssl:error] [pid 3013378:tid 3013378] (70014)End of file found: [client 216.73.216.199:3452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:37.581570 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.22:49812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:37.582191 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.22:49812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:37.795289 2026] [authz_core:error] [pid 3017869:tid 3017869] [client 57.141.0.70:20144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:37.795916 2026] [authz_core:error] [pid 3017869:tid 3017869] [client 57.141.0.70:20144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:37.952032 2026] [ssl:error] [pid 3017867:tid 3017867] (EAI 2)Name or service not known: [client 144.76.19.72:64388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:37.952087 2026] [ssl:error] [pid 3017867:tid 3017867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:37.953568 2026] [lsapi:warn] [pid 3017772:tid 3017772] [client 45.158.164.139:34680] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:37.953605 2026] [lsapi:warn] [pid 3017772:tid 3017772] [client 45.158.164.139:34680] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:37.955562 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:37.955594 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:38.008567 2026] [ssl:error] [pid 3017706:tid 3017706] (EAI 2)Name or service not known: [client 144.76.19.72:64402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:38.008598 2026] [ssl:error] [pid 3017706:tid 3017706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:38.028318 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.58:55502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:38.028932 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.58:55502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:38.030113 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.18:55736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:38.030719 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.18:55736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:38.101668 2026] [access_compat:error] [pid 3017873:tid 3017873] [client 125.176.202.122:54283] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:38.156904 2026] [access_compat:error] [pid 3015539:tid 3015539] [client 103.72.86.239:38441] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:38.226951 2026] [authz_core:error] [pid 3017869:tid 3017869] [client 57.141.0.56:31598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:38.227582 2026] [authz_core:error] [pid 3017869:tid 3017869] [client 57.141.0.56:31598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:38.241110 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:38.241151 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:38.579766 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 45.158.164.139:34692] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:38.579808 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 45.158.164.139:34692] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:38.698016 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.18:55746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:38.698650 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.18:55746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:38.964729 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:38.964764 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:39.386339 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.45:41704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:39.386962 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.45:41704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:39.459783 2026] [authz_core:error] [pid 3017876:tid 3017876] [client 57.141.0.13:46004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:39.460397 2026] [authz_core:error] [pid 3017876:tid 3017876] [client 57.141.0.13:46004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:39.514258 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.21:24568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:39.514870 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.21:24568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:39.645673 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:39.645698 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:40.095279 2026] [lsapi:warn] [pid 3017876:tid 3017876] [client 45.158.164.139:34772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:40.095320 2026] [lsapi:warn] [pid 3017876:tid 3017876] [client 45.158.164.139:34772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:40.434574 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:34788] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:40.434600 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:34788] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:40.436681 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:40.436702 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:40.623540 2026] [access_compat:error] [pid 3011845:tid 3011845] [client 176.241.66.87:7315] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:40.842434 2026] [lsapi:warn] [pid 3016165:tid 3016165] [client 45.158.164.139:56930] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:40.842476 2026] [lsapi:warn] [pid 3016165:tid 3016165] [client 45.158.164.139:56930] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:40.967912 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.24:22308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:40.968541 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.24:22308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:41.063485 2026] [ssl:error] [pid 3008689:tid 3008689] (EAI 2)Name or service not known: [client 144.76.19.72:61906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:41.063521 2026] [ssl:error] [pid 3008689:tid 3008689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:41.116547 2026] [ssl:error] [pid 3017199:tid 3017199] (EAI 2)Name or service not known: [client 144.76.19.72:61908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:41.116585 2026] [ssl:error] [pid 3017199:tid 3017199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:41.120969 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.71:30044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:41.121600 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.71:30044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:41.150833 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 57.141.0.6:26190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:41.151456 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 57.141.0.6:26190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:41.155883 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.31:47514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:41.156494 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.31:47514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:41.197382 2026] [lsapi:warn] [pid 3012141:tid 3012141] [client 45.158.164.139:56942] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:41.197410 2026] [lsapi:warn] [pid 3012141:tid 3012141] [client 45.158.164.139:56942] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:41.296046 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.3:27586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:41.296679 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.3:27586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:41.577016 2026] [access_compat:error] [pid 3004768:tid 3004768] [client 103.25.250.251:4204] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:41.593355 2026] [lsapi:warn] [pid 3017819:tid 3017819] [client 45.158.164.139:56956] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:41.593395 2026] [lsapi:warn] [pid 3017819:tid 3017819] [client 45.158.164.139:56956] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:41.595114 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:41.595136 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:41.757361 2026] [lsapi:warn] [pid 3008689:tid 3008689] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:11:41.837330 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.12:42232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:41.837950 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.12:42232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:41.871902 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.60:59614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:41.872533 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.60:59614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:42.113540 2026] [ssl:error] [pid 3016165:tid 3016165] (70014)End of file found: [client 216.73.216.199:8054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:42.290471 2026] [lsapi:warn] [pid 3017817:tid 3017817] [client 45.158.164.139:56972] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:42.290555 2026] [lsapi:warn] [pid 3017817:tid 3017817] [client 45.158.164.139:56972] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:42.292917 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:42.292950 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:42.414826 2026] [ssl:error] [pid 3017873:tid 3017873] (70014)End of file found: [client 216.73.216.199:43178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:42.637452 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.26:35544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:42.638105 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.26:35544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:42.642112 2026] [lsapi:warn] [pid 3017772:tid 3017772] [client 45.158.164.139:56978] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:42.642141 2026] [lsapi:warn] [pid 3017772:tid 3017772] [client 45.158.164.139:56978] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:42.717699 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.10:25020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:42.718325 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.10:25020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:42.998241 2026] [lsapi:warn] [pid 3017867:tid 3017867] [client 45.158.164.139:56990] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:42.998272 2026] [lsapi:warn] [pid 3017867:tid 3017867] [client 45.158.164.139:56990] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:43.007384 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:43.007414 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:43.412720 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:43.412744 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:43.440267 2026] [access_compat:error] [pid 3017817:tid 3017817] [client 125.176.202.122:54401] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:43.623122 2026] [ssl:error] [pid 3017198:tid 3017198] (70014)End of file found: [client 216.73.216.199:18402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:43.710012 2026] [authz_core:error] [pid 3017876:tid 3017876] [client 57.141.0.13:35754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:43.710646 2026] [authz_core:error] [pid 3017876:tid 3017876] [client 57.141.0.13:35754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:43.856534 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.52:38300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:43.857180 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.52:38300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:43.871350 2026] [lsapi:warn] [pid 3004769:tid 3004769] [client 45.158.164.139:57010] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:43.871382 2026] [lsapi:warn] [pid 3004769:tid 3004769] [client 45.158.164.139:57010] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:43.873890 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:43.873915 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:43.941478 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.9:31730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:43.942116 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.9:31730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:44.123537 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 57.141.0.35:60152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:44.124194 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 57.141.0.35:60152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:44.172328 2026] [ssl:error] [pid 3017876:tid 3017876] (EAI 2)Name or service not known: [client 144.76.19.72:61912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:44.172358 2026] [ssl:error] [pid 3017876:tid 3017876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:44.229891 2026] [ssl:error] [pid 3008689:tid 3008689] (EAI 2)Name or service not known: [client 144.76.19.72:61916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:44.229916 2026] [ssl:error] [pid 3008689:tid 3008689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:44.238609 2026] [lsapi:warn] [pid 3016113:tid 3016113] [client 45.158.164.139:57032] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:44.238638 2026] [lsapi:warn] [pid 3016113:tid 3016113] [client 45.158.164.139:57032] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:44.240709 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:44.240735 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:44.637373 2026] [lsapi:warn] [pid 3013377:tid 3013377] [client 45.158.164.139:57044] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:44.637404 2026] [lsapi:warn] [pid 3013377:tid 3013377] [client 45.158.164.139:57044] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:44.644290 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:44.644312 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:44.834154 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.44:59586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:44.834821 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.44:59586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:44.948459 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.25:54762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:44.949088 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.25:54762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:44.986513 2026] [lsapi:warn] [pid 3017774:tid 3017774] [client 45.158.164.139:57054] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:44.986553 2026] [lsapi:warn] [pid 3017774:tid 3017774] [client 45.158.164.139:57054] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:44.988111 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:44.988138 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:45.075775 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 24.13.154.47:58047] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/the-sort-of-name
[Thu Jul 30 12:11:45.075908 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 24.13.154.47:58047] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:11:45.257153 2026] [access_compat:error] [pid 3017869:tid 3017869] [client 176.241.66.87:7771] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:45.446270 2026] [authz_core:error] [pid 3017740:tid 3017740] [client 57.141.0.63:50748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:45.446887 2026] [authz_core:error] [pid 3017740:tid 3017740] [client 57.141.0.63:50748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:45.472377 2026] [core:error] [pid 3017774:tid 3017774] [client 66.249.66.167:61666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:45.472408 2026] [core:error] [pid 3017774:tid 3017774] [client 66.249.66.167:61666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:45.490643 2026] [security2:error] [pid 3013377:tid 3013377] [client 185.191.171.2:27674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9451.0/prev_next,prev.html"] [unique_id "amsxcV5uiqeeka-ntzmQOgAAABw"]
[Thu Jul 30 12:11:45.523250 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 24.13.154.47:58047] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/favicon.ico, referer: https://blog.alism.com/the-sort-of-name/
[Thu Jul 30 12:11:45.523368 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 24.13.154.47:58047] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/the-sort-of-name/
[Thu Jul 30 12:11:45.571257 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 45.158.164.139:57068] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:45.571298 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 45.158.164.139:57068] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:45.622889 2026] [access_compat:error] [pid 3016162:tid 3016162] [client 103.72.86.239:38627] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:45.687195 2026] [access_compat:error] [pid 3016113:tid 3016113] [client 157.20.138.62:52557] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:45.801761 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.5:22106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:45.802446 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.5:22106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:45.977736 2026] [lsapi:warn] [pid 3017774:tid 3017774] [client 45.158.164.139:57090] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:45.977775 2026] [lsapi:warn] [pid 3017774:tid 3017774] [client 45.158.164.139:57090] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:46.077232 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.64:50684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:46.077856 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.64:50684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:46.294676 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.40:36280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:46.295319 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.40:36280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:46.324493 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:57098] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:46.324538 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:57098] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:46.326330 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:46.326369 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:46.414218 2026] [authz_core:error] [pid 3017774:tid 3017774] [client 57.141.0.70:20158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:46.414860 2026] [authz_core:error] [pid 3017774:tid 3017774] [client 57.141.0.70:20158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:46.887864 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:46.887930 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:46.893793 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.15:51656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:46.894431 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.15:51656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:47.222866 2026] [lsapi:warn] [pid 3017824:tid 3017824] [client 45.158.164.139:57116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:47.222909 2026] [lsapi:warn] [pid 3017824:tid 3017824] [client 45.158.164.139:57116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:47.224983 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:47.225025 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:47.287978 2026] [ssl:error] [pid 3017774:tid 3017774] (EAI 2)Name or service not known: [client 144.76.19.72:61932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:47.288030 2026] [ssl:error] [pid 3017774:tid 3017774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:47.344666 2026] [ssl:error] [pid 3013377:tid 3013377] (EAI 2)Name or service not known: [client 144.76.19.72:61946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:47.344697 2026] [ssl:error] [pid 3013377:tid 3013377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:47.463247 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.37:24666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:47.463876 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.37:24666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:47.568932 2026] [lsapi:warn] [pid 3017824:tid 3017824] [client 45.158.164.139:57130] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:47.568964 2026] [lsapi:warn] [pid 3017824:tid 3017824] [client 45.158.164.139:57130] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:47.571103 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:47.571126 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:47.739152 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.42:57668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:47.739834 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.42:57668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:47.874816 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.30:53168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:47.875461 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.30:53168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:47.907412 2026] [lsapi:warn] [pid 3016165:tid 3016165] [client 45.158.164.139:57138] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:47.907441 2026] [lsapi:warn] [pid 3016165:tid 3016165] [client 45.158.164.139:57138] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:47.910555 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:47.910580 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:47.932724 2026] [access_compat:error] [pid 3004768:tid 3004768] [client 103.25.250.251:59733] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:48.210720 2026] [ssl:error] [pid 3014702:tid 3014702] (70014)End of file found: [client 216.73.216.199:23502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:48.240206 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.7:49516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:48.240826 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.7:49516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:48.293059 2026] [lsapi:warn] [pid 3017873:tid 3017873] [client 45.158.164.139:57148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:48.293135 2026] [lsapi:warn] [pid 3017873:tid 3017873] [client 45.158.164.139:57148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:48.298554 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:48.298584 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:48.513063 2026] [ssl:error] [pid 3013377:tid 3013377] (70014)End of file found: [client 216.73.216.199:28636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:48.636731 2026] [lsapi:warn] [pid 3017824:tid 3017824] [client 45.158.164.139:57156] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:48.636763 2026] [lsapi:warn] [pid 3017824:tid 3017824] [client 45.158.164.139:57156] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:48.651809 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.29:26276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:48.652454 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.29:26276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:49.086759 2026] [lsapi:warn] [pid 3017198:tid 3017198] [client 45.158.164.139:57162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:49.086787 2026] [lsapi:warn] [pid 3017198:tid 3017198] [client 45.158.164.139:57162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:49.168186 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.44:59598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:49.168805 2026] [authz_core:error] [pid 3001174:tid 3001174] [client 57.141.0.44:59598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:49.373017 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.15:51670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:49.373645 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.15:51670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:49.434331 2026] [lsapi:warn] [pid 3017817:tid 3017817] [client 45.158.164.139:57188] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:49.434355 2026] [lsapi:warn] [pid 3017817:tid 3017817] [client 45.158.164.139:57188] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:49.436792 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:49.436818 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:49.441651 2026] [security2:error] [pid 3017866:tid 3017866] [client 74.7.241.17:54120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.techsuccess.uk"] [uri "/"] [unique_id "amsxdW62IV3wQ8dkc3QfaQAAADs"]
[Thu Jul 30 12:11:49.816410 2026] [lsapi:warn] [pid 3017873:tid 3017873] [client 45.158.164.139:57194] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:49.816440 2026] [lsapi:warn] [pid 3017873:tid 3017873] [client 45.158.164.139:57194] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:49.818454 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:49.818479 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:49.913002 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 37.97.114.57:9906] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 12:11:49.913046 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 37.97.114.57:9906] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 12:11:49.951722 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.15:51678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:49.952354 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.15:51678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:50.009477 2026] [authz_core:error] [pid 3017866:tid 3017866] [client 103.59.160.131:60453] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:11:50.058662 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.48:60634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:50.059280 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.48:60634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:50.096108 2026] [security2:error] [pid 3012141:tid 3012141] [client 43.135.115.233:33176] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amsxdlakc7eTweaaUbl1bQAAABE"]
[Thu Jul 30 12:11:50.136909 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:50.136945 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:50.322577 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.21:39940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:50.323205 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.21:39940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:50.400362 2026] [ssl:error] [pid 3017820:tid 3017820] (EAI 2)Name or service not known: [client 144.76.19.72:21816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:50.400388 2026] [ssl:error] [pid 3017820:tid 3017820] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:50.453143 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.47:38894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:50.453769 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.47:38894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:50.453924 2026] [ssl:error] [pid 3019587:tid 3019587] (EAI 2)Name or service not known: [client 144.76.19.72:21824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:50.453976 2026] [ssl:error] [pid 3019587:tid 3019587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:50.480804 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:57212] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:50.480837 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:57212] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:50.483286 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:50.483312 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:50.735116 2026] [ssl:error] [pid 3016165:tid 3016165] (70014)End of file found: [client 216.73.216.199:8185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:50.901573 2026] [security2:error] [pid 3017873:tid 3017873] [client 175.178.110.121:40146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mcgarvey.co.uk"] [uri "/"] [unique_id "amsxdsQkMYNHZ8Qp-tjVYAAAAEI"]
[Thu Jul 30 12:11:51.057834 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.50:43522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:51.058454 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.50:43522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:51.579206 2026] [authz_core:error] [pid 3019587:tid 3019587] [client 57.141.0.23:43384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:51.579834 2026] [authz_core:error] [pid 3019587:tid 3019587] [client 57.141.0.23:43384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:51.812562 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.24:50426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:51.813175 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.24:50426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:52.077357 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:52.077416 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:52.393283 2026] [access_compat:error] [pid 3015539:tid 3015539] [client 103.72.86.239:40299] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:52.610646 2026] [access_compat:error] [pid 3017818:tid 3017818] [client 103.25.250.251:4205] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:52.868925 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:11:52.915985 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:52.916026 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:53.002611 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.33:47412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:53.003233 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.33:47412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:53.347099 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.41:35186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:53.347725 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.41:35186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:53.418154 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.3:35722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:53.418777 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.3:35722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:53.526487 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:53.526530 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:53.535787 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.71:60840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:53.536404 2026] [authz_core:error] [pid 3008689:tid 3008689] [client 57.141.0.71:60840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:53.583575 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.6:43968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:53.584188 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.6:43968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:53.610536 2026] [ssl:error] [pid 3013377:tid 3013377] (EAI 2)Name or service not known: [client 144.76.19.72:21826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:53.610562 2026] [ssl:error] [pid 3013377:tid 3013377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:53.663174 2026] [ssl:error] [pid 3013377:tid 3013377] (EAI 2)Name or service not known: [client 144.76.19.72:21832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:53.663197 2026] [ssl:error] [pid 3013377:tid 3013377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:53.722097 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.12:35258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:53.722719 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.12:35258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:53.980896 2026] [security2:error] [pid 2998281:tid 2998281] [client 5.83.214.197:50900] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "router.markmitchell.org"] [uri "/.git/config"] [unique_id "amsxeTklaeJ2t5_m2z-yTgAAACk"]
[Thu Jul 30 12:11:53.981077 2026] [security2:error] [pid 2998281:tid 2998281] [client 5.83.214.197:50900] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "router.markmitchell.org"] [uri "/.git/config"] [unique_id "amsxeTklaeJ2t5_m2z-yTgAAACk"]
[Thu Jul 30 12:11:53.981414 2026] [core:error] [pid 2998281:tid 2998281] [client 5.83.214.197:50900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:53.981549 2026] [security2:error] [pid 2998281:tid 2998281] [client 5.83.214.197:50900] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "router.markmitchell.org"] [uri "/.git/config"] [unique_id "amsxeTklaeJ2t5_m2z-yTgAAACk"]
[Thu Jul 30 12:11:54.051853 2026] [security2:error] [pid 3013377:tid 3013377] [client 216.73.216.199:34838] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_test_db.sql"] [unique_id "amsxel5uiqeeka-ntzmQQQAAABw"]
[Thu Jul 30 12:11:54.052170 2026] [security2:error] [pid 3013377:tid 3013377] [client 216.73.216.199:34838] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_test_db.sql"] [unique_id "amsxel5uiqeeka-ntzmQQQAAABw"]
[Thu Jul 30 12:11:54.052402 2026] [security2:error] [pid 3013377:tid 3013377] [client 216.73.216.199:34838] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/share/mysql/mysql_test_db.sql"] [unique_id "amsxel5uiqeeka-ntzmQQQAAABw"]
[Thu Jul 30 12:11:54.069670 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 45.158.164.139:39646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:54.069706 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 45.158.164.139:39646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:54.118236 2026] [security2:error] [pid 3012897:tid 3012897] [client 5.83.214.197:50904] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "router.markmitchell.org"] [uri "/.git/HEAD"] [unique_id "amsxeo3plc8XytrAZykbXQAAACU"]
[Thu Jul 30 12:11:54.118430 2026] [security2:error] [pid 3012897:tid 3012897] [client 5.83.214.197:50904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "router.markmitchell.org"] [uri "/.git/HEAD"] [unique_id "amsxeo3plc8XytrAZykbXQAAACU"]
[Thu Jul 30 12:11:54.118772 2026] [core:error] [pid 3012897:tid 3012897] [client 5.83.214.197:50904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:54.118913 2026] [security2:error] [pid 3012897:tid 3012897] [client 5.83.214.197:50904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "router.markmitchell.org"] [uri "/.git/HEAD"] [unique_id "amsxeo3plc8XytrAZykbXQAAACU"]
[Thu Jul 30 12:11:54.507597 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 45.158.164.139:39652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:54.507628 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 45.158.164.139:39652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:54.759269 2026] [access_compat:error] [pid 3019808:tid 3019808] [client 125.176.202.122:54623] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:54.773686 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.65:48210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:54.774304 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.65:48210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:54.859865 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:54.859898 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:55.096482 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.53:33202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:55.097111 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.53:33202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:55.126001 2026] [authz_core:error] [pid 3019809:tid 3019809] [client 57.141.0.59:22804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:55.126625 2026] [authz_core:error] [pid 3019809:tid 3019809] [client 57.141.0.59:22804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:55.219222 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 45.158.164.139:39686] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:55.219252 2026] [lsapi:warn] [pid 3013378:tid 3013378] [client 45.158.164.139:39686] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:55.221044 2026] [access_compat:error] [pid 3010714:tid 3010714] [client 45.158.164.139:39698] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:11:55.237249 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:55.237279 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:55.255797 2026] [ssl:error] [pid 3013377:tid 3013377] (70014)End of file found: [client 216.73.216.199:34838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:55.282391 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.24:31294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:55.283088 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.24:31294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:55.368660 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.16:49520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:55.369293 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.16:49520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:55.615960 2026] [lsapi:warn] [pid 3016162:tid 3016162] [client 45.158.164.139:39706] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:55.616004 2026] [lsapi:warn] [pid 3016162:tid 3016162] [client 45.158.164.139:39706] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:55.763643 2026] [security2:error] [pid 3012897:tid 3012897] [client 85.208.98.20:40666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/eurolig-anadolu-efes-k.html"] [unique_id "amsxe43plc8XytrAZykbXwAAACU"]
[Thu Jul 30 12:11:55.787715 2026] [access_compat:error] [pid 3013378:tid 3013378] [client 176.241.66.87:62282] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:55.880883 2026] [security2:error] [pid 3017162:tid 3017162] [client 185.191.171.14:57186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/sahith-theegala-parents"] [unique_id "amsxe4_9BSyclhcfUkF-7gAAAAI"]
[Thu Jul 30 12:11:55.929033 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.2:51928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:55.929679 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.2:51928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:55.975356 2026] [lsapi:warn] [pid 3016162:tid 3016162] [client 45.158.164.139:39714] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:55.975386 2026] [lsapi:warn] [pid 3016162:tid 3016162] [client 45.158.164.139:39714] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:56.007389 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.26:64772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:56.008015 2026] [authz_core:error] [pid 3010714:tid 3010714] [client 57.141.0.26:64772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:56.292418 2026] [access_compat:error] [pid 3017819:tid 3017819] [client 103.72.86.239:38628] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:56.312224 2026] [access_compat:error] [pid 3017817:tid 3017817] [client 157.20.138.62:53154] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:56.353358 2026] [lsapi:warn] [pid 3019768:tid 3019768] [client 45.158.164.139:39734] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:56.353405 2026] [lsapi:warn] [pid 3019768:tid 3019768] [client 45.158.164.139:39734] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:56.354848 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:56.354880 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:56.358656 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.40:39152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:56.359642 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.40:39152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:56.594445 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.1:50476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:56.595081 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.1:50476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:56.703149 2026] [lsapi:warn] [pid 3019587:tid 3019587] [client 45.158.164.139:39740] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:56.703189 2026] [lsapi:warn] [pid 3019587:tid 3019587] [client 45.158.164.139:39740] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:56.705239 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:56.705262 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:56.724585 2026] [ssl:error] [pid 3019811:tid 3019811] (EAI 2)Name or service not known: [client 144.76.19.72:21840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:56.724617 2026] [ssl:error] [pid 3019811:tid 3019811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:56.783845 2026] [ssl:error] [pid 3013341:tid 3013341] (EAI 2)Name or service not known: [client 144.76.19.72:21856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:56.783870 2026] [ssl:error] [pid 3013341:tid 3013341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:56.834620 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.61:20876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:56.835260 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.61:20876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:57.157234 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:39752] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:57.157266 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:39752] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:57.159338 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:57.159373 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:57.348358 2026] [authz_core:error] [pid 3019587:tid 3019587] [client 57.141.0.69:29000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:57.348975 2026] [authz_core:error] [pid 3019587:tid 3019587] [client 57.141.0.69:29000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:57.411967 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.43:48420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:57.412598 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.43:48420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:57.416181 2026] [core:error] [pid 3019811:tid 3019811] [client 66.249.66.167:63915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:57.416202 2026] [core:error] [pid 3019811:tid 3019811] [client 66.249.66.167:63915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:11:57.663474 2026] [security2:error] [pid 3004768:tid 3004768] [client 216.73.216.199:21447] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/pam.conf"] [unique_id "amsxfYspwPz1Zs118EYoLwAAABM"]
[Thu Jul 30 12:11:57.663721 2026] [security2:error] [pid 3004768:tid 3004768] [client 216.73.216.199:21447] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/pam.conf"] [unique_id "amsxfYspwPz1Zs118EYoLwAAABM"]
[Thu Jul 30 12:11:57.663927 2026] [security2:error] [pid 3004768:tid 3004768] [client 216.73.216.199:21447] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/pam.conf"] [unique_id "amsxfYspwPz1Zs118EYoLwAAABM"]
[Thu Jul 30 12:11:57.903018 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:39774] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:57.903045 2026] [lsapi:warn] [pid 3012827:tid 3012827] [client 45.158.164.139:39774] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:58.059389 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.65:48216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:58.060018 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.65:48216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:58.379447 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.4:62120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:58.380085 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.4:62120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:58.529642 2026] [lsapi:warn] [pid 3017773:tid 3017773] [client 45.158.164.139:39790] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:58.529673 2026] [lsapi:warn] [pid 3017773:tid 3017773] [client 45.158.164.139:39790] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:58.531611 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:11:58.531636 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 191.232.199.39:16476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:11:58.724155 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.70:31762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:58.724773 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.70:31762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:59.039946 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.22:36920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:59.040594 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.22:36920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:59.304928 2026] [access_compat:error] [pid 3016169:tid 3016169] [client 103.25.250.251:59734] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:11:59.694875 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.7:22250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:11:59.695514 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.7:22250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:11:59.771211 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:21447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:11:59.841531 2026] [ssl:error] [pid 3015539:tid 3015539] (EAI 2)Name or service not known: [client 144.76.19.72:27046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:59.841566 2026] [ssl:error] [pid 3015539:tid 3015539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:11:59.894719 2026] [ssl:error] [pid 3017823:tid 3017823] (EAI 2)Name or service not known: [client 144.76.19.72:27056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:11:59.894764 2026] [ssl:error] [pid 3017823:tid 3017823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:00.038847 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.53:36178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:00.039477 2026] [authz_core:error] [pid 3005698:tid 3005698] [client 57.141.0.53:36178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:00.260058 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 45.158.164.139:39844] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:00.260102 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 45.158.164.139:39844] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:00.262807 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:00.262850 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:00.637445 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:00.637475 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:00.889567 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.24:31416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:00.890192 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.24:31416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:00.961149 2026] [core:error] [pid 3013341:tid 3013341] [client 57.141.0.20:49302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:00.961173 2026] [core:error] [pid 3013341:tid 3013341] [client 57.141.0.20:49302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:00.976550 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:33526] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:00.976579 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:33526] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:00.979091 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:00.979114 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:01.099266 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.7:22260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:01.099893 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.7:22260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:01.115936 2026] [authz_core:error] [pid 3019587:tid 3019587] [client 57.141.0.17:22824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:01.116556 2026] [authz_core:error] [pid 3019587:tid 3019587] [client 57.141.0.17:22824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:01.334326 2026] [access_compat:error] [pid 3017824:tid 3017824] [client 176.241.66.87:8141] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:01.354904 2026] [lsapi:warn] [pid 3016113:tid 3016113] [client 45.158.164.139:33542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:01.354932 2026] [lsapi:warn] [pid 3016113:tid 3016113] [client 45.158.164.139:33542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:01.357644 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:01.357669 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:01.484487 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.12:32538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:01.485126 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.12:32538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:01.727775 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.69:59290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:01.728396 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.69:59290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:01.776147 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 45.158.164.139:33560] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:01.776175 2026] [lsapi:warn] [pid 3017823:tid 3017823] [client 45.158.164.139:33560] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:01.801259 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:01.801288 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:02.156341 2026] [lsapi:warn] [pid 3017772:tid 3017772] [client 45.158.164.139:33580] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:02.156374 2026] [lsapi:warn] [pid 3017772:tid 3017772] [client 45.158.164.139:33580] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:02.158680 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:02.158706 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:02.253283 2026] [authz_core:error] [pid 3019808:tid 3019808] [client 57.141.0.22:36948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:02.253907 2026] [authz_core:error] [pid 3019808:tid 3019808] [client 57.141.0.22:36948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:02.347314 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.28:45440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:02.347935 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.28:45440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:02.426339 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.41:35212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:02.426961 2026] [authz_core:error] [pid 3017198:tid 3017198] [client 57.141.0.41:35212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:02.527202 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:33588] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:02.527236 2026] [lsapi:warn] [pid 3017771:tid 3017771] [client 45.158.164.139:33588] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:02.532936 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:02.532962 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:02.783167 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.53:36190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:02.783789 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.53:36190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:02.796221 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.14:50600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:02.796840 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.14:50600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:02.846848 2026] [lsapi:warn] [pid 3019808:tid 3019808] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:12:02.913531 2026] [lsapi:warn] [pid 3017706:tid 3017706] [client 45.158.164.139:33608] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:02.913561 2026] [lsapi:warn] [pid 3017706:tid 3017706] [client 45.158.164.139:33608] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:02.975512 2026] [ssl:error] [pid 3014702:tid 3014702] (EAI 2)Name or service not known: [client 144.76.19.72:27066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:02.975551 2026] [ssl:error] [pid 3014702:tid 3014702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:03.041608 2026] [ssl:error] [pid 3017162:tid 3017162] (EAI 2)Name or service not known: [client 144.76.19.72:27078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:03.041652 2026] [ssl:error] [pid 3017162:tid 3017162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:03.084137 2026] [ssl:error] [pid 3017823:tid 3017823] (70014)End of file found: [client 216.73.216.199:51327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:03.097704 2026] [access_compat:error] [pid 3009642:tid 3009642] [client 103.72.86.239:39490] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:03.503019 2026] [lsapi:warn] [pid 3017818:tid 3017818] [client 45.158.164.139:33622] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:03.503056 2026] [lsapi:warn] [pid 3017818:tid 3017818] [client 45.158.164.139:33622] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:03.505061 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:03.505093 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:03.640819 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.51:39578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:03.641442 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.51:39578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:03.842961 2026] [lsapi:warn] [pid 3017820:tid 3017820] [client 45.158.164.139:33646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:03.842996 2026] [lsapi:warn] [pid 3017820:tid 3017820] [client 45.158.164.139:33646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:03.844979 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:03.845000 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:03.897929 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.33:51384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:03.898568 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.33:51384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:04.251442 2026] [lsapi:warn] [pid 3004769:tid 3004769] [client 45.158.164.139:33662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:04.251472 2026] [lsapi:warn] [pid 3004769:tid 3004769] [client 45.158.164.139:33662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:04.253495 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:04.253534 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:04.261743 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.54:56874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:04.262372 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.54:56874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:04.418271 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.51:39600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:04.419126 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.51:39600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:04.584882 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.32:36236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:04.585521 2026] [authz_core:error] [pid 3012827:tid 3012827] [client 57.141.0.32:36236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:04.600421 2026] [lsapi:warn] [pid 3014702:tid 3014702] [client 45.158.164.139:33668] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:04.600455 2026] [lsapi:warn] [pid 3014702:tid 3014702] [client 45.158.164.139:33668] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:04.602552 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:04.602577 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:04.704841 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.32:36242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:04.705470 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.32:36242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:04.993329 2026] [lsapi:warn] [pid 3017871:tid 3017871] [client 45.158.164.139:33670] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:04.993361 2026] [lsapi:warn] [pid 3017871:tid 3017871] [client 45.158.164.139:33670] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:04.995932 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:04.995956 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:05.005540 2026] [access_compat:error] [pid 3016165:tid 3016165] [client 125.176.202.122:54844] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:05.333386 2026] [lsapi:warn] [pid 3009642:tid 3009642] [client 45.158.164.139:33714] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:05.333434 2026] [lsapi:warn] [pid 3009642:tid 3009642] [client 45.158.164.139:33714] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:05.406309 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.32:36246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:05.406934 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.32:36246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:05.678341 2026] [lsapi:warn] [pid 3004768:tid 3004768] [client 45.158.164.139:33726] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:05.678391 2026] [lsapi:warn] [pid 3004768:tid 3004768] [client 45.158.164.139:33726] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:05.681531 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:05.681554 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:06.030538 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:12:06.030570 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 191.232.199.39:50657] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:12:06.040582 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.22:36962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:06.041718 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.22:36962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:06.130665 2026] [ssl:error] [pid 3017824:tid 3017824] (EAI 2)Name or service not known: [client 144.76.19.72:27094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:06.130697 2026] [ssl:error] [pid 3017824:tid 3017824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:06.187564 2026] [ssl:error] [pid 3019810:tid 3019810] (EAI 2)Name or service not known: [client 144.76.19.72:27098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:06.187604 2026] [ssl:error] [pid 3019810:tid 3019810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:06.299732 2026] [core:error] [pid 3017819:tid 3017819] [client 66.249.64.170:65005] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:06.299755 2026] [core:error] [pid 3017819:tid 3017819] [client 66.249.64.170:65005] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:06.337677 2026] [access_compat:error] [pid 3017867:tid 3017867] [client 176.241.66.87:62834] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:06.449626 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.61:21222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:06.450255 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.61:21222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:06.657142 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.12:32558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:06.657779 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.12:32558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:06.837723 2026] [access_compat:error] [pid 3013341:tid 3013341] [client 157.20.138.62:53752] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:07.298865 2026] [ssl:error] [pid 3017873:tid 3017873] (70014)End of file found: [client 216.73.216.199:9923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:07.385705 2026] [security2:error] [pid 3004768:tid 3004768] [client 45.148.10.120:39130] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.markmitchellphotography.markmitchell.org"] [uri "/.env"] [unique_id "amsxh4spwPz1Zs118EYoOQAAABM"]
[Thu Jul 30 12:12:07.385846 2026] [security2:error] [pid 3004768:tid 3004768] [client 45.148.10.120:39130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.markmitchellphotography.markmitchell.org"] [uri "/.env"] [unique_id "amsxh4spwPz1Zs118EYoOQAAABM"]
[Thu Jul 30 12:12:07.386018 2026] [security2:error] [pid 3004768:tid 3004768] [client 45.148.10.120:39130] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.markmitchellphotography.markmitchell.org"] [uri "/.env"] [unique_id "amsxh4spwPz1Zs118EYoOQAAABM"]
[Thu Jul 30 12:12:07.389573 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.40:52984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:07.390554 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.40:52984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:07.432816 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.29:42440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:07.433432 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.29:42440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:07.598215 2026] [security2:error] [pid 3019809:tid 3019809] [client 43.160.219.138:48830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.curvmed.com"] [uri "/"] [unique_id "amsxh51_P30bNRStjHgLUgAAAAg"]
[Thu Jul 30 12:12:07.598645 2026] [security2:error] [pid 3017771:tid 3017771] [client 216.73.216.199:27799] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/dracut/dracut.conf.d/01-microcode.conf"] [unique_id "amsxh0QW5EBBvIvq_Z09TAAAAAw"]
[Thu Jul 30 12:12:07.598857 2026] [security2:error] [pid 3017771:tid 3017771] [client 216.73.216.199:27799] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/dracut/dracut.conf.d/01-microcode.conf"] [unique_id "amsxh0QW5EBBvIvq_Z09TAAAAAw"]
[Thu Jul 30 12:12:07.599044 2026] [security2:error] [pid 3017771:tid 3017771] [client 216.73.216.199:27799] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/dracut/dracut.conf.d/01-microcode.conf"] [unique_id "amsxh0QW5EBBvIvq_Z09TAAAAAw"]
[Thu Jul 30 12:12:07.772113 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.61:21230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:07.772743 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.61:21230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:07.805770 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.68:24120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:07.806396 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.68:24120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:07.899908 2026] [security2:error] [pid 3017771:tid 3017771] [client 216.73.216.199:27799] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/man-db.conf"] [unique_id "amsxh0QW5EBBvIvq_Z09TQAAAAw"]
[Thu Jul 30 12:12:07.900206 2026] [security2:error] [pid 3017771:tid 3017771] [client 216.73.216.199:27799] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/man-db.conf"] [unique_id "amsxh0QW5EBBvIvq_Z09TQAAAAw"]
[Thu Jul 30 12:12:07.900404 2026] [security2:error] [pid 3017771:tid 3017771] [client 216.73.216.199:27799] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/man-db.conf"] [unique_id "amsxh0QW5EBBvIvq_Z09TQAAAAw"]
[Thu Jul 30 12:12:08.383607 2026] [access_compat:error] [pid 3019810:tid 3019810] [client 103.72.86.239:38049] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:08.503047 2026] [ssl:error] [pid 3017771:tid 3017771] (70014)End of file found: [client 216.73.216.199:27799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:08.553766 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.37:31048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:08.554389 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.37:31048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:08.666732 2026] [security2:error] [pid 3012897:tid 3012897] [client 162.62.213.187:60226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/images/"] [unique_id "amsxiI3plc8XytrAZykbzQAAACU"]
[Thu Jul 30 12:12:08.921399 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.19:61646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:08.922019 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.19:61646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:09.103961 2026] [core:error] [pid 3004768:tid 3004768] (13)Permission denied: [client 216.73.216.199:27452] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/randomlearner.org.uk.db
[Thu Jul 30 12:12:09.158813 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.36:54442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:09.159462 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.36:54442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:09.236954 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.67:53558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:09.237599 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.67:53558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:09.289244 2026] [ssl:error] [pid 3020504:tid 3020504] (EAI 2)Name or service not known: [client 144.76.19.72:27108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:09.289279 2026] [ssl:error] [pid 3020504:tid 3020504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:09.374544 2026] [security2:error] [pid 3009642:tid 3009642] [client 114.119.155.144:57527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,19,15/request_format~html"] [unique_id "amsxibWWKRpH6RgE3FXnigAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~30,18,19,15/request_format~html
[Thu Jul 30 12:12:09.406014 2026] [ssl:error] [pid 3004768:tid 3004768] (70014)End of file found: [client 216.73.216.199:27452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:09.409610 2026] [ssl:error] [pid 3019714:tid 3019714] (EAI 2)Name or service not known: [client 144.76.19.72:27122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:09.409634 2026] [ssl:error] [pid 3019714:tid 3019714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:09.879639 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.43:51914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:09.880260 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.43:51914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:10.145992 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.30:34396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:10.146625 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.30:34396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:10.265062 2026] [authz_core:error] [pid 3020538:tid 3020538] [client 103.59.160.131:53775] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-content/uploads/rara-demo-pack/perfect-portfolio-demo-content/error_log, referer: https://www.google.com/
[Thu Jul 30 12:12:10.510202 2026] [security2:error] [pid 3009642:tid 3009642] [client 114.119.155.144:57543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18,19,15/request_format~html"] [unique_id "amsxirWWKRpH6RgE3FXniwAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~30,18,19,15/request_format~html
[Thu Jul 30 12:12:10.984325 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.46:63840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:10.984953 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.46:63840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:11.183781 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.12:31292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:11.184406 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.12:31292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:11.545752 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.51:53758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:11.546380 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.51:53758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:11.646415 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.27:58280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:11.647030 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.27:58280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:11.802978 2026] [access_compat:error] [pid 3016165:tid 3016165] [client 125.176.202.122:54950] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:11.942381 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.50:33680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:11.943002 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.50:33680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:12.015874 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.50:33690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:12.016510 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.50:33690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:12.396393 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.70:23098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:12.397019 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.70:23098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:12.464202 2026] [ssl:error] [pid 3017706:tid 3017706] (EAI 2)Name or service not known: [client 144.76.19.72:51536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:12.464229 2026] [ssl:error] [pid 3017706:tid 3017706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:12.519044 2026] [ssl:error] [pid 3013341:tid 3013341] (EAI 2)Name or service not known: [client 144.76.19.72:51538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:12.519084 2026] [ssl:error] [pid 3013341:tid 3013341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:12.618165 2026] [ssl:error] [pid 3017818:tid 3017818] (70014)End of file found: [client 216.73.216.199:47936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:12.992743 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.31:23524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:12.993369 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.31:23524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:13.330917 2026] [lsapi:warn] [pid 3013377:tid 3013377] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:12:13.605512 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.3:33992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:13.606138 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.3:33992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:13.973419 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.53:60442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:13.974037 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.53:60442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:14.114363 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.35:45460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:14.114982 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.35:45460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:14.124103 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.37:34568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:14.124721 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.37:34568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:14.176977 2026] [access_compat:error] [pid 3013341:tid 3013341] [client 103.25.250.251:59735] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:14.193614 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.27:58296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:14.194234 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.27:58296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:14.228089 2026] [ssl:error] [pid 3017873:tid 3017873] (70014)End of file found: [client 216.73.216.199:49732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:15.120043 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.21:62056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:15.120674 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.21:62056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:15.166227 2026] [security2:error] [pid 3015120:tid 3015120] [client 43.157.148.38:41796] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "devwebsitehub.com"] [uri "/"] [unique_id "amsxj6ItmxYHiL-gAx7d0gAAABo"]
[Thu Jul 30 12:12:15.326197 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.49:54810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:15.326826 2026] [authz_core:error] [pid 3017706:tid 3017706] [client 57.141.0.49:54810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:15.617363 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.71:23650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:15.618003 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.71:23650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:15.651917 2026] [ssl:error] [pid 3016165:tid 3016165] (EAI 2)Name or service not known: [client 144.76.19.72:51540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:15.651973 2026] [ssl:error] [pid 3016165:tid 3016165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:15.658795 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.39:36800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:15.659410 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.39:36800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:15.705369 2026] [ssl:error] [pid 3017706:tid 3017706] (EAI 2)Name or service not known: [client 144.76.19.72:51546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:15.705401 2026] [ssl:error] [pid 3017706:tid 3017706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:15.728611 2026] [ssl:error] [pid 3017771:tid 3017771] (70014)End of file found: [client 216.73.216.199:31666] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:15.904168 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.39:36810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:15.904792 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.39:36810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:16.488060 2026] [access_compat:error] [pid 3016169:tid 3016169] [client 125.176.202.122:55073] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:16.593268 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.22:35344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:16.593892 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.22:35344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:16.700213 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.18:25104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:16.700839 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.18:25104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:16.854004 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 176.241.66.87:9915] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:17.345699 2026] [access_compat:error] [pid 3016165:tid 3016165] [client 157.20.138.62:54347] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:17.571897 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.49:54818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:17.572530 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.49:54818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:17.649021 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.27:58298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:17.649652 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.27:58298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:17.828366 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.7:59060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:17.828990 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.7:59060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:17.887413 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.24:49146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:17.888034 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.24:49146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:18.256297 2026] [ssl:error] [pid 3019769:tid 3019769] (70014)End of file found: [client 216.73.216.199:15157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:18.760169 2026] [ssl:error] [pid 3017773:tid 3017773] (EAI 2)Name or service not known: [client 144.76.19.72:51548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:18.760216 2026] [ssl:error] [pid 3017773:tid 3017773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:18.780911 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.61:49758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:18.781539 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.61:49758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:18.812271 2026] [ssl:error] [pid 2998281:tid 2998281] (EAI 2)Name or service not known: [client 144.76.19.72:51564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:18.812300 2026] [ssl:error] [pid 2998281:tid 2998281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:19.084639 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.48:28538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:19.085267 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.48:28538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:19.879550 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.68:48170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:19.880170 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.68:48170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:20.062762 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.17:26396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:20.063382 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.17:26396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:20.144628 2026] [authz_core:error] [pid 3020955:tid 3020955] [client 57.141.0.46:63856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:20.145249 2026] [authz_core:error] [pid 3020955:tid 3020955] [client 57.141.0.46:63856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:20.169672 2026] [authz_core:error] [pid 3020954:tid 3020954] [client 57.141.0.8:57314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:20.170299 2026] [authz_core:error] [pid 3020954:tid 3020954] [client 57.141.0.8:57314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:20.413708 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.62:56992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:20.414350 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.62:56992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:20.595125 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.6:56082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:20.595744 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.6:56082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:20.616636 2026] [access_compat:error] [pid 3013377:tid 3013377] [client 103.25.250.251:4206] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:21.500523 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.55:46910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:21.501144 2026] [authz_core:error] [pid 3012897:tid 3012897] [client 57.141.0.55:46910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:21.808832 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.17:26406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:21.809461 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.17:26406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:21.867150 2026] [ssl:error] [pid 3017824:tid 3017824] (EAI 2)Name or service not known: [client 144.76.19.72:52666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:21.867180 2026] [ssl:error] [pid 3017824:tid 3017824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:21.918935 2026] [ssl:error] [pid 3017771:tid 3017771] (EAI 2)Name or service not known: [client 144.76.19.72:52670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:21.918963 2026] [ssl:error] [pid 3017771:tid 3017771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:21.919201 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.60:31974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:21.919820 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.60:31974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:21.963136 2026] [ssl:error] [pid 3019810:tid 3019810] (70014)End of file found: [client 216.73.216.199:65012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:22.056667 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 66.249.66.34:60167] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:12:22.059335 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 66.249.66.34:60167] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:12:22.741673 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.43:54462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:22.742298 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.43:54462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:23.034198 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.41:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:23.034823 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.41:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:23.167874 2026] [ssl:error] [pid 2998280:tid 2998280] (70014)End of file found: [client 216.73.216.199:35507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:23.272762 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.69:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:23.273378 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.69:21408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:23.275529 2026] [access_compat:error] [pid 3020954:tid 3020954] [client 125.176.202.122:55178] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:23.828359 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.39:36826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:23.828995 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.39:36826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:23.842492 2026] [lsapi:warn] [pid 3015539:tid 3015539] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:12:24.075943 2026] [ssl:error] [pid 3017771:tid 3017771] (70014)End of file found: [client 216.73.216.199:24826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:24.139244 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.29:43130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:24.139859 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.29:43130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:24.317786 2026] [access_compat:error] [pid 3004769:tid 3004769] [client 52.238.199.152:60733] AH01797: client denied by server configuration: /home/monitors/public_html/4k-monitors.co.uk/xmlrpc.php
[Thu Jul 30 12:12:24.972659 2026] [ssl:error] [pid 3019769:tid 3019769] (EAI 2)Name or service not known: [client 144.76.19.72:52674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:24.972694 2026] [ssl:error] [pid 3019769:tid 3019769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:24.998764 2026] [access_compat:error] [pid 3016165:tid 3016165] [client 103.25.250.251:59736] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:25.028885 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:52682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:25.028916 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:25.035334 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.46:35422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:25.035953 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.46:35422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:25.054864 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.40:65392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:25.055485 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.40:65392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:25.107612 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.30:52246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:25.108235 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.30:52246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:25.171683 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.37:48954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:25.172308 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.37:48954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:25.650106 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.35:30038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:25.650731 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.35:30038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:25.851212 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.13:41052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:25.851834 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.13:41052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:26.037876 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.39:62656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:26.039100 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.39:62656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:26.225367 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.6:22760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:26.225985 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.6:22760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:27.115700 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.62:29348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:27.116333 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.62:29348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:27.317675 2026] [security2:error] [pid 3013341:tid 3013341] [client 186.179.72.249:36326] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxm5fs1ULcRtckyJEygwAAABQ"]
[Thu Jul 30 12:12:27.317724 2026] [security2:error] [pid 3013341:tid 3013341] [client 186.179.72.249:36326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxm5fs1ULcRtckyJEygwAAABQ"]
[Thu Jul 30 12:12:27.317974 2026] [security2:error] [pid 3013341:tid 3013341] [client 186.179.72.249:36326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxm5fs1ULcRtckyJEygwAAABQ"]
[Thu Jul 30 12:12:27.408013 2026] [access_compat:error] [pid 3019769:tid 3019769] [client 176.241.66.87:10573] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:27.518024 2026] [authz_core:error] [pid 3019809:tid 3019809] [client 57.141.0.32:50562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:27.518660 2026] [authz_core:error] [pid 3019809:tid 3019809] [client 57.141.0.32:50562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:27.853836 2026] [access_compat:error] [pid 3014702:tid 3014702] [client 125.176.202.122:55300] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:27.871900 2026] [access_compat:error] [pid 3017823:tid 3017823] [client 157.20.138.62:54945] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:27.975077 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.20:41788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:27.975729 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.20:41788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:28.068282 2026] [authz_core:error] [pid 3021418:tid 3021418] [client 57.141.0.1:53536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:28.068907 2026] [authz_core:error] [pid 3021418:tid 3021418] [client 57.141.0.1:53536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:28.257685 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.11:60820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:28.258310 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.11:60820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:28.272226 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:52688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:28.272256 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:28.329534 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:52696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:28.329559 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:28.588279 2026] [ssl:error] [pid 3004769:tid 3004769] (70014)End of file found: [client 216.73.216.199:65412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:28.724391 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.24:41798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:28.725013 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.24:41798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:29.017833 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.68:27730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:29.018484 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.68:27730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:29.209474 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.15:20804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:29.210101 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.15:20804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:29.384359 2026] [ssl:error] [pid 3020953:tid 3020953] (70014)End of file found: [client 216.73.216.199:49737] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:29.795932 2026] [ssl:error] [pid 3012827:tid 3012827] (70014)End of file found: [client 216.73.216.199:8825] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:29.799626 2026] [security2:error] [pid 3019810:tid 3019810] [client 139.59.143.102:34032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.env"] [unique_id "amsxnYmuj3_HtRzpdGXwjQAAAAk"]
[Thu Jul 30 12:12:29.799760 2026] [security2:error] [pid 3019810:tid 3019810] [client 139.59.143.102:34032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.env"] [unique_id "amsxnYmuj3_HtRzpdGXwjQAAAAk"]
[Thu Jul 30 12:12:29.799956 2026] [security2:error] [pid 3019810:tid 3019810] [client 139.59.143.102:34032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/403.shtml"] [unique_id "amsxnYmuj3_HtRzpdGXwjQAAAAk"]
[Thu Jul 30 12:12:29.837801 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.47:60270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:29.838435 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.47:60270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:29.997755 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.61:47914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:29.998377 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.61:47914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:30.134887 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.60:31986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:30.135522 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.60:31986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:30.391351 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.38:62710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:30.391989 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.38:62710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:30.497441 2026] [security2:error] [pid 2998335:tid 2998335] [client 168.197.222.102:59191] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxnlN3xI2KZzaqx47jGQAAADI"]
[Thu Jul 30 12:12:30.497490 2026] [security2:error] [pid 2998335:tid 2998335] [client 168.197.222.102:59191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxnlN3xI2KZzaqx47jGQAAADI"]
[Thu Jul 30 12:12:30.497759 2026] [security2:error] [pid 2998335:tid 2998335] [client 168.197.222.102:59191] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxnlN3xI2KZzaqx47jGQAAADI"]
[Thu Jul 30 12:12:30.581214 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.22:46794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:30.581842 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.22:46794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:30.600200 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.64:46832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:30.600817 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.64:46832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:30.728399 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.71:51234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:30.729028 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.71:51234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:30.989611 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.40:51860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:30.990263 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.40:51860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:31.402569 2026] [ssl:error] [pid 3021589:tid 3021589] (EAI 2)Name or service not known: [client 144.76.19.72:22864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:31.402634 2026] [ssl:error] [pid 3021589:tid 3021589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:31.457559 2026] [ssl:error] [pid 3020912:tid 3020912] (EAI 2)Name or service not known: [client 144.76.19.72:22868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:31.457588 2026] [ssl:error] [pid 3020912:tid 3020912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:31.513882 2026] [access_compat:error] [pid 3021418:tid 3021418] [client 103.72.86.239:38705] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:31.608798 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.12:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:31.609418 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.12:43502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:32.178265 2026] [authz_core:error] [pid 3019811:tid 3019811] [client 57.141.0.63:23828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:32.178899 2026] [authz_core:error] [pid 3019811:tid 3019811] [client 57.141.0.63:23828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:32.524907 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.34:23252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:32.525550 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.34:23252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:32.623653 2026] [authz_core:error] [pid 3020538:tid 3020538] [client 57.141.0.18:61748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:32.624284 2026] [authz_core:error] [pid 3020538:tid 3020538] [client 57.141.0.18:61748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:32.931375 2026] [access_compat:error] [pid 3017866:tid 3017866] [client 176.241.66.87:10201] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:33.014579 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.50:28232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:33.015215 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.50:28232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:33.152250 2026] [authz_core:error] [pid 3020538:tid 3020538] [client 57.141.0.24:41810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:33.152866 2026] [authz_core:error] [pid 3020538:tid 3020538] [client 57.141.0.24:41810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:33.986618 2026] [security2:error] [pid 3020956:tid 3020956] [client 139.59.143.102:34054] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.git/config"] [unique_id "amsxoZcYvj98H_ENEDbrWgAAAB0"]
[Thu Jul 30 12:12:33.986810 2026] [security2:error] [pid 3020956:tid 3020956] [client 139.59.143.102:34054] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.git/config"] [unique_id "amsxoZcYvj98H_ENEDbrWgAAAB0"]
[Thu Jul 30 12:12:33.987036 2026] [security2:error] [pid 3020956:tid 3020956] [client 139.59.143.102:34054] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/403.shtml"] [unique_id "amsxoZcYvj98H_ENEDbrWgAAAB0"]
[Thu Jul 30 12:12:34.014566 2026] [lsapi:warn] [pid 3013341:tid 3013341] [client 216.73.216.199:24648] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  require_once(/var/softaculous/paste/includes/list_languages.php): Failed to open stream: No such file or directory in /var/softaculous/paste/config.php on line 69\n
[Thu Jul 30 12:12:34.014600 2026] [lsapi:error] [pid 3013341:tid 3013341] [client 216.73.216.199:24648] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Failed opening required '/var/softaculous/paste/includes/list_languages.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in /var/softaculous/paste/config.php:69\nStack trace:\n#0 {main}\n  thrown in /var/softaculous/paste/config.php on line 69\n
[Thu Jul 30 12:12:34.143384 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.29:44986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:34.144011 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.29:44986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:34.281911 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 66.249.66.33:50043] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:12:34.284594 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 66.249.66.33:50043] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:12:34.343084 2026] [lsapi:warn] [pid 3020537:tid 3020537] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:12:34.394766 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.58:20694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:34.395390 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.58:20694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:34.415217 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.4:61002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:34.415887 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.4:61002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:34.501102 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.11:53824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:34.501727 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.11:53824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:34.526486 2026] [ssl:error] [pid 3016165:tid 3016165] (EAI 2)Name or service not known: [client 144.76.19.72:22872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:34.526521 2026] [ssl:error] [pid 3016165:tid 3016165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:34.580811 2026] [ssl:error] [pid 3004768:tid 3004768] (EAI 2)Name or service not known: [client 144.76.19.72:22874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:34.580857 2026] [ssl:error] [pid 3004768:tid 3004768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:34.630083 2026] [ssl:error] [pid 3021419:tid 3021419] (70014)End of file found: [client 216.73.216.199:19439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:35.133647 2026] [access_compat:error] [pid 3014702:tid 3014702] [client 125.176.202.122:55409] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:35.217084 2026] [ssl:error] [pid 3016113:tid 3016113] (70014)End of file found: [client 216.73.216.199:48494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:35.409931 2026] [security2:error] [pid 3016162:tid 3016162] [client 41.141.229.121:57920] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxo7-0GfNxAiX5mZmdwAAAADM"]
[Thu Jul 30 12:12:35.409975 2026] [security2:error] [pid 3016162:tid 3016162] [client 41.141.229.121:57920] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxo7-0GfNxAiX5mZmdwAAAADM"]
[Thu Jul 30 12:12:35.410229 2026] [security2:error] [pid 3016162:tid 3016162] [client 41.141.229.121:57920] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxo7-0GfNxAiX5mZmdwAAAADM"]
[Thu Jul 30 12:12:35.670906 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.6:22742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:35.671541 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.6:22742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:35.727633 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.20:59118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:35.728252 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.20:59118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:35.843475 2026] [authz_core:error] [pid 3020861:tid 3020861] [client 57.141.0.4:61008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:35.844108 2026] [authz_core:error] [pid 3020861:tid 3020861] [client 57.141.0.4:61008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:36.056246 2026] [authz_core:error] [pid 3021418:tid 3021418] [client 57.141.0.13:62646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:36.056868 2026] [authz_core:error] [pid 3021418:tid 3021418] [client 57.141.0.13:62646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:36.114746 2026] [core:error] [pid 3013341:tid 3013341] (13)Permission denied: [client 216.73.216.199:23646] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/gather_update_log_stats
[Thu Jul 30 12:12:36.320264 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.35:52398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:36.320892 2026] [authz_core:error] [pid 2998281:tid 2998281] [client 57.141.0.35:52398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:37.316653 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.61:47918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:37.317310 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.61:47918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:37.328758 2026] [ssl:error] [pid 3013341:tid 3013341] (70014)End of file found: [client 216.73.216.199:23646] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:37.404121 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.18:61760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:37.404748 2026] [authz_core:error] [pid 3017162:tid 3017162] [client 57.141.0.18:61760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:37.637468 2026] [ssl:error] [pid 3009642:tid 3009642] (EAI 2)Name or service not known: [client 144.76.19.72:22882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:37.637507 2026] [ssl:error] [pid 3009642:tid 3009642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:37.695543 2026] [ssl:error] [pid 3012141:tid 3012141] (EAI 2)Name or service not known: [client 144.76.19.72:22886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:37.695571 2026] [ssl:error] [pid 3012141:tid 3012141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:37.806702 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.69:22478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:37.807319 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.69:22478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:37.899969 2026] [access_compat:error] [pid 3017823:tid 3017823] [client 176.241.66.87:11193] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:38.119473 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.31:20316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:38.120110 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.31:20316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:38.169564 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.52:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:38.170257 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.52:32354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:38.399395 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 157.20.138.62:55547] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:38.527529 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.61:47926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:38.528223 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.61:47926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:38.883426 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.29:44992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:38.884122 2026] [authz_core:error] [pid 3017818:tid 3017818] [client 57.141.0.29:44992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:39.133850 2026] [security2:error] [pid 3004769:tid 3004769] [client 142.93.129.190:44184] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.env"] [unique_id "amsxpxIadbEctGyHTWZmaAAAABk"]
[Thu Jul 30 12:12:39.133980 2026] [security2:error] [pid 3004769:tid 3004769] [client 142.93.129.190:44184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.env"] [unique_id "amsxpxIadbEctGyHTWZmaAAAABk"]
[Thu Jul 30 12:12:39.134148 2026] [security2:error] [pid 3004769:tid 3004769] [client 142.93.129.190:44184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/403.shtml"] [unique_id "amsxpxIadbEctGyHTWZmaAAAABk"]
[Thu Jul 30 12:12:39.280752 2026] [authz_core:error] [pid 3020954:tid 3020954] [client 57.141.0.38:58950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:39.281386 2026] [authz_core:error] [pid 3020954:tid 3020954] [client 57.141.0.38:58950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:40.041359 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.42:25064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:40.041978 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.42:25064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:40.160357 2026] [authz_core:error] [pid 3020956:tid 3020956] [client 57.141.0.55:23646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:40.160977 2026] [authz_core:error] [pid 3020956:tid 3020956] [client 57.141.0.55:23646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:40.302624 2026] [access_compat:error] [pid 2998281:tid 2998281] [client 125.176.202.122:55527] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:40.339296 2026] [ssl:error] [pid 3020954:tid 3020954] (70014)End of file found: [client 216.73.216.199:2684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:40.379455 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 66.249.64.174:48957] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:12:40.382505 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 66.249.64.174:48957] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:12:40.385389 2026] [authz_core:error] [pid 3020955:tid 3020955] [client 57.141.0.13:62676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:40.386064 2026] [authz_core:error] [pid 3020955:tid 3020955] [client 57.141.0.13:62676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:40.505968 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.58:20704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:40.506606 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.58:20704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:40.750343 2026] [ssl:error] [pid 3016025:tid 3016025] (EAI 2)Name or service not known: [client 144.76.19.72:51780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:40.750383 2026] [ssl:error] [pid 3016025:tid 3016025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:40.791127 2026] [access_compat:error] [pid 3020956:tid 3020956] [client 20.104.16.169:43226] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 12:12:40.794191 2026] [access_compat:error] [pid 3020956:tid 3020956] [client 20.104.16.169:43226] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/wc-logs/
[Thu Jul 30 12:12:40.803569 2026] [ssl:error] [pid 3020955:tid 3020955] (EAI 2)Name or service not known: [client 144.76.19.72:51788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:40.803604 2026] [ssl:error] [pid 3020955:tid 3020955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:41.110409 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.14:33364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:41.111130 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.14:33364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:41.427368 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.32:56552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:41.427988 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.32:56552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:41.597404 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.42:62506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:41.598036 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.42:62506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:41.990941 2026] [security2:error] [pid 3017772:tid 3017772] [client 139.59.143.102:56076] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/trace.axd"] [unique_id "amsxqeVnEp_1uKKMnSVUZwAAAA0"]
[Thu Jul 30 12:12:41.991226 2026] [security2:error] [pid 3017772:tid 3017772] [client 139.59.143.102:56076] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/trace.axd"] [unique_id "amsxqeVnEp_1uKKMnSVUZwAAAA0"]
[Thu Jul 30 12:12:41.991408 2026] [security2:error] [pid 3017772:tid 3017772] [client 139.59.143.102:56076] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/403.shtml"] [unique_id "amsxqeVnEp_1uKKMnSVUZwAAAA0"]
[Thu Jul 30 12:12:42.026716 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.30:57580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:42.027346 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.30:57580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:42.220230 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.14:33376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:42.220898 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.14:33376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:42.359226 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 66.249.66.77:54376] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:12:42.361882 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 66.249.66.77:54376] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:12:43.105486 2026] [security2:error] [pid 3019810:tid 3019810] [client 142.93.129.190:44204] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.git/config"] [unique_id "amsxq4muj3_HtRzpdGXwkgAAAAk"]
[Thu Jul 30 12:12:43.105697 2026] [security2:error] [pid 3019810:tid 3019810] [client 142.93.129.190:44204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/.git/config"] [unique_id "amsxq4muj3_HtRzpdGXwkgAAAAk"]
[Thu Jul 30 12:12:43.105855 2026] [security2:error] [pid 3019810:tid 3019810] [client 142.93.129.190:44204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/403.shtml"] [unique_id "amsxq4muj3_HtRzpdGXwkgAAAAk"]
[Thu Jul 30 12:12:43.128115 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.39:42418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:43.128738 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.39:42418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:43.134355 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.20:31776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:43.135064 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.20:31776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:43.536280 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.53:34058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:43.536903 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.53:34058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:43.858898 2026] [ssl:error] [pid 3017820:tid 3017820] (EAI 2)Name or service not known: [client 144.76.19.72:51794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:43.858926 2026] [ssl:error] [pid 3017820:tid 3017820] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:43.914604 2026] [ssl:error] [pid 3017873:tid 3017873] (EAI 2)Name or service not known: [client 144.76.19.72:51806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:43.914640 2026] [ssl:error] [pid 3017873:tid 3017873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:43.930180 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.38:58974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:43.930797 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.38:58974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:43.989801 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.14:33380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:43.990425 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.14:33380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:44.341155 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.63:62694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:44.341785 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.63:62694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:44.752609 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.33:59756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:44.753240 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.33:59756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:44.775446 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.42:62516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:44.776059 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.42:62516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:44.840601 2026] [lsapi:warn] [pid 2998280:tid 2998280] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:12:44.857288 2026] [ssl:error] [pid 3016113:tid 3016113] (70014)End of file found: [client 216.73.216.199:57891] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:45.123527 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.54:45204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:45.124150 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.54:45204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:45.720830 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.46:52670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:45.721453 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.46:52670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:45.751058 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.39:34588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:45.751689 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.39:34588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:45.761340 2026] [ssl:error] [pid 3017873:tid 3017873] (70014)End of file found: [client 216.73.216.199:3589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:45.875940 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.43:44854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:45.876571 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.43:44854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:46.254871 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 57.141.0.49:41246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:46.255538 2026] [authz_core:error] [pid 3017867:tid 3017867] [client 57.141.0.49:41246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:46.668575 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.43:44858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:46.669222 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.43:44858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:46.780881 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.41:26928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:46.781508 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.41:26928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:46.970464 2026] [ssl:error] [pid 2998281:tid 2998281] (EAI 2)Name or service not known: [client 144.76.19.72:51816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:46.970493 2026] [ssl:error] [pid 2998281:tid 2998281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:47.028392 2026] [ssl:error] [pid 3020861:tid 3020861] (EAI 2)Name or service not known: [client 144.76.19.72:51818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:47.028436 2026] [ssl:error] [pid 3020861:tid 3020861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:47.265930 2026] [ssl:error] [pid 3013378:tid 3013378] (70014)End of file found: [client 216.73.216.199:43292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:47.901123 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.23:52672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:47.901756 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.23:52672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:47.932760 2026] [authz_core:error] [pid 3020861:tid 3020861] [client 57.141.0.11:61140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:47.933448 2026] [authz_core:error] [pid 3020861:tid 3020861] [client 57.141.0.11:61140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:48.457306 2026] [access_compat:error] [pid 3020504:tid 3020504] [client 176.241.66.87:11767] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:48.465028 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.3:43938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:48.465743 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.3:43938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:48.670273 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.50:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:48.670894 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.50:24546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:48.972214 2026] [access_compat:error] [pid 3016066:tid 3016066] [client 157.20.138.62:56156] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:49.305654 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.46:52684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:49.306283 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.46:52684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:49.330655 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 20.91.199.21:10448] AH01630: client denied by server configuration: /home/erskinen/public_html/.well-known/acme-challenge/license.php
[Thu Jul 30 12:12:49.764776 2026] [core:error] [pid 3021589:tid 3021589] [client 66.249.66.8:57981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:49.764815 2026] [core:error] [pid 3021589:tid 3021589] [client 66.249.66.8:57981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:49.854872 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.3:28856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:49.855495 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.3:28856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:50.021482 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.41:26942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:50.022153 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.41:26942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:50.031927 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.51:27050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:50.032555 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.51:27050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:50.083678 2026] [ssl:error] [pid 3009642:tid 3009642] (EAI 2)Name or service not known: [client 144.76.19.72:34242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:50.083703 2026] [ssl:error] [pid 3009642:tid 3009642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:50.092439 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.67:52134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:50.093055 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.67:52134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:50.140868 2026] [ssl:error] [pid 3021589:tid 3021589] (EAI 2)Name or service not known: [client 144.76.19.72:34246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:50.140889 2026] [ssl:error] [pid 3021589:tid 3021589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:51.215045 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.65:41200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:51.215682 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.65:41200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:51.236147 2026] [lsapi:warn] [pid 3019810:tid 3019810] [client 144.124.192.240:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:12:51.530233 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.50:20980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:51.530853 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.50:20980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:51.729676 2026] [access_compat:error] [pid 3021589:tid 3021589] [client 125.176.202.122:55755] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:51.840775 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.22:21160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:51.841403 2026] [authz_core:error] [pid 3017772:tid 3017772] [client 57.141.0.22:21160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:52.219620 2026] [access_compat:error] [pid 3020954:tid 3020954] [client 3.228.43.166:3127] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 12:12:52.645626 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.40:36068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:52.646249 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.40:36068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:53.052234 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.5:36040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:53.052850 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.5:36040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:53.055460 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.12:29112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:53.056060 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.12:29112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:53.114441 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.20:32594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:53.115098 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.20:32594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:53.197381 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:34254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:53.197410 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:53.248553 2026] [ssl:error] [pid 3015539:tid 3015539] (EAI 2)Name or service not known: [client 144.76.19.72:34262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:53.248586 2026] [ssl:error] [pid 3015539:tid 3015539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:53.445466 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.11:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:53.446094 2026] [authz_core:error] [pid 3017824:tid 3017824] [client 57.141.0.11:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:53.670190 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.14:27582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:53.670816 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.14:27582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:53.685535 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.47:37452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:53.686154 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.47:37452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:54.104653 2026] [ssl:error] [pid 3019769:tid 3019769] (70014)End of file found: [client 216.73.216.199:63754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:54.168101 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.26:52454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:54.168730 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.26:52454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:54.238660 2026] [access_compat:error] [pid 3021347:tid 3021347] [client 176.241.66.87:65266] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:54.368329 2026] [core:error] [pid 3009642:tid 3009642] [client 66.249.66.167:50729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:54.368356 2026] [core:error] [pid 3009642:tid 3009642] [client 66.249.66.167:50729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:54.368612 2026] [core:error] [pid 3017824:tid 3017824] [client 66.249.66.169:61568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:54.368632 2026] [core:error] [pid 3017824:tid 3017824] [client 66.249.66.169:61568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:12:54.759016 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.4:57758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:54.759644 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.4:57758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:54.767673 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.37:20780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:54.768350 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.37:20780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:55.366603 2026] [lsapi:warn] [pid 2998335:tid 2998335] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:12:55.392167 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.29:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:55.392791 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.29:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:55.515579 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.44:31848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:55.516222 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.44:31848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:55.558971 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.63:32162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:55.559600 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.63:32162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:55.675956 2026] [security2:error] [pid 3017824:tid 3017824] [client 142.93.129.190:51348] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/trace.axd"] [unique_id "amsxt93FyaOI-X3xLtPRmgAAAC0"]
[Thu Jul 30 12:12:55.676216 2026] [security2:error] [pid 3017824:tid 3017824] [client 142.93.129.190:51348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/trace.axd"] [unique_id "amsxt93FyaOI-X3xLtPRmgAAAC0"]
[Thu Jul 30 12:12:55.676387 2026] [security2:error] [pid 3017824:tid 3017824] [client 142.93.129.190:51348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.grpgratingsystems.co.uk"] [uri "/403.shtml"] [unique_id "amsxt93FyaOI-X3xLtPRmgAAAC0"]
[Thu Jul 30 12:12:55.897855 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.46:40324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:55.898479 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.46:40324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:56.300764 2026] [ssl:error] [pid 3021347:tid 3021347] (EAI 2)Name or service not known: [client 144.76.19.72:34272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:56.300800 2026] [ssl:error] [pid 3021347:tid 3021347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:56.339801 2026] [access_compat:error] [pid 3020504:tid 3020504] [client 45.158.164.139:47604] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:12:56.351325 2026] [security2:error] [pid 3017773:tid 3017773] [client 185.191.171.5:59090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/daddy-sylvia-plath-line-numbers"] [unique_id "amsxuIDVKB2PsmB59OCOcAAAAA8"]
[Thu Jul 30 12:12:56.354169 2026] [ssl:error] [pid 3017824:tid 3017824] (EAI 2)Name or service not known: [client 144.76.19.72:34282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:56.354190 2026] [ssl:error] [pid 3017824:tid 3017824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:56.359507 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.59:46728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:56.360128 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.59:46728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:57.001209 2026] [ssl:error] [pid 2998280:tid 2998280] (70014)End of file found: [client 216.73.216.199:45046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:57.240571 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.12:29116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:57.240788 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.27:55330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:57.241297 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.12:29116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:57.241597 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.27:55330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:57.337400 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.58:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:57.338102 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.58:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:57.881411 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.70:21176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:57.882023 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.70:21176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:58.245141 2026] [security2:error] [pid 3016113:tid 3016113] [client 198.244.240.208:35890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/omt-ebony-001/"] [unique_id "amsxuvX5BUM7zG_YfyPhpQAAAC4"]
[Thu Jul 30 12:12:58.644776 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.14:26694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:58.645399 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.14:26694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:58.782563 2026] [authz_core:error] [pid 3020956:tid 3020956] [client 57.141.0.23:64708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:58.783187 2026] [authz_core:error] [pid 3020956:tid 3020956] [client 57.141.0.23:64708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:59.002919 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 176.241.66.87:49204] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:59.037791 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.30:62118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:59.038460 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.30:62118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:59.161390 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.50:20982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:59.162026 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.50:20982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:59.221625 2026] [ssl:error] [pid 3016162:tid 3016162] (70014)End of file found: [client 216.73.216.199:51908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:12:59.409885 2026] [ssl:error] [pid 3016113:tid 3016113] (EAI 2)Name or service not known: [client 144.76.19.72:34286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:59.409920 2026] [ssl:error] [pid 3016113:tid 3016113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:59.467330 2026] [ssl:error] [pid 3020954:tid 3020954] (EAI 2)Name or service not known: [client 144.76.19.72:34290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:12:59.467362 2026] [ssl:error] [pid 3020954:tid 3020954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:12:59.491328 2026] [access_compat:error] [pid 3019714:tid 3019714] [client 157.20.138.62:56751] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:12:59.495111 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.17:57018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:59.495722 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.17:57018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:59.533863 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.61:41520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:59.534483 2026] [authz_core:error] [pid 3017870:tid 3017870] [client 57.141.0.61:41520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:59.555712 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.41:42870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:12:59.556330 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.41:42870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:12:59.708237 2026] [ssl:error] [pid 3016169:tid 3016169] (70014)End of file found: [client 216.73.216.199:1337] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:00.562555 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 66.249.66.33:46623] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:13:00.565232 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 66.249.66.33:46623] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:13:00.886122 2026] [access_compat:error] [pid 3004768:tid 3004768] [client 103.72.86.239:40877] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:00.903486 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.39:56586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:00.904120 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.39:56586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:00.940060 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.20:22292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:00.940696 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.20:22292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:01.229449 2026] [authz_core:error] [pid 3022698:tid 3022698] [client 57.141.0.9:38294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:01.230127 2026] [authz_core:error] [pid 3022698:tid 3022698] [client 57.141.0.9:38294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:01.577997 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.70:21186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:01.578637 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.70:21186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:02.029363 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.38:51048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:02.029986 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.38:51048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:02.033054 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.32:46096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:02.033721 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.32:46096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:02.269234 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.5:47638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:02.269863 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 57.141.0.5:47638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:02.500347 2026] [security2:error] [pid 3017823:tid 3017823] [client 47.86.43.250:17253] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxvv7sp4G4pe2E_u_BOQAAACw"]
[Thu Jul 30 12:13:02.500396 2026] [security2:error] [pid 3017823:tid 3017823] [client 47.86.43.250:17253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxvv7sp4G4pe2E_u_BOQAAACw"]
[Thu Jul 30 12:13:02.500654 2026] [security2:error] [pid 3017823:tid 3017823] [client 47.86.43.250:17253] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxvv7sp4G4pe2E_u_BOQAAACw"]
[Thu Jul 30 12:13:02.542209 2026] [ssl:error] [pid 3015120:tid 3015120] (EAI 2)Name or service not known: [client 144.76.19.72:47254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:02.542251 2026] [ssl:error] [pid 3015120:tid 3015120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:02.582238 2026] [security2:error] [pid 3019769:tid 3019769] [client 106.52.216.13:45620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amsxvmIRgGC2PgIvFACVLgAAAAU"]
[Thu Jul 30 12:13:02.598103 2026] [ssl:error] [pid 3016113:tid 3016113] (EAI 2)Name or service not known: [client 144.76.19.72:47260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:02.598126 2026] [ssl:error] [pid 3016113:tid 3016113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:02.689427 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.66:41464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:02.690050 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.66:41464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:02.729746 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.41:59852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:02.730372 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.41:59852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:02.823145 2026] [access_compat:error] [pid 3017819:tid 3017819] [client 125.176.202.122:55979] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:03.488214 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.44:42996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:03.488839 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.44:42996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:03.549187 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.56:20642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:03.549823 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.56:20642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:03.953941 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.69:48586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:03.954575 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.69:48586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:04.473412 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.35:33436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:04.474045 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.35:33436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:04.653042 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.18:39452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:04.653988 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.18:39452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:05.276863 2026] [cgi:error] [pid 3017870:tid 3017870] [client 216.73.216.199:56496] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/stdio_bulk.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:13:05.276932 2026] [cgi:error] [pid 3017870:tid 3017870] [client 216.73.216.199:56496] End of script output before headers: stdio_bulk.pl
[Thu Jul 30 12:13:05.296317 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.46:57870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:05.296966 2026] [authz_core:error] [pid 3015120:tid 3015120] [client 57.141.0.46:57870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:05.303359 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.49:63780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:05.303983 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.49:63780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:05.343571 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.60:46060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:05.344193 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.60:46060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:05.551617 2026] [ssl:error] [pid 2998280:tid 2998280] (70014)End of file found: [client 216.73.216.199:46551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:05.651557 2026] [ssl:error] [pid 3020911:tid 3020911] (EAI 2)Name or service not known: [client 144.76.19.72:47272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:05.651604 2026] [ssl:error] [pid 3020911:tid 3020911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:05.674663 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.1:45910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:05.675338 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.1:45910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:05.703405 2026] [ssl:error] [pid 3017817:tid 3017817] (EAI 2)Name or service not known: [client 144.76.19.72:47284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:05.703447 2026] [ssl:error] [pid 3017817:tid 3017817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:05.972461 2026] [lsapi:warn] [pid 3015120:tid 3015120] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:13:06.031911 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.5:47644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:06.032552 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.5:47644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:06.394049 2026] [security2:error] [pid 3020953:tid 3020953] [client 202.165.90.149:18656] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxwgbCpz_aLacqXBLW3AAAABY"]
[Thu Jul 30 12:13:06.394137 2026] [security2:error] [pid 3020953:tid 3020953] [client 202.165.90.149:18656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxwgbCpz_aLacqXBLW3AAAABY"]
[Thu Jul 30 12:13:06.394461 2026] [security2:error] [pid 3020953:tid 3020953] [client 202.165.90.149:18656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxwgbCpz_aLacqXBLW3AAAABY"]
[Thu Jul 30 12:13:06.876262 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.10:27194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:06.876878 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.10:27194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:06.974934 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 103.72.86.239:38941] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:07.288251 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.1:45918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:07.288878 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.1:45918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:07.331260 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.5:47658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:07.331883 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.5:47658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:07.434319 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.70:24222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:07.434993 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.70:24222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:07.720627 2026] [authz_core:error] [pid 3016113:tid 3016113] [client 103.59.160.131:59893] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/includes/error_log
[Thu Jul 30 12:13:07.869312 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.60:46062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:07.869937 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.60:46062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:07.964944 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.10:27208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:07.965588 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.10:27208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:08.263765 2026] [ssl:error] [pid 3017870:tid 3017870] (70014)End of file found: [client 216.73.216.199:31129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:08.286239 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.44:43012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:08.286863 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.44:43012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:08.563694 2026] [ssl:error] [pid 3020911:tid 3020911] (70014)End of file found: [client 216.73.216.199:9220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:08.566061 2026] [security2:error] [pid 3013377:tid 3013377] [client 114.119.143.215:62233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amsxxF5uiqeeka-ntzmQaAAAABw"], referer: http://hoo-hah.co.uk?i=hh___12
[Thu Jul 30 12:13:08.756717 2026] [ssl:error] [pid 3016162:tid 3016162] (EAI 2)Name or service not known: [client 144.76.19.72:47296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:08.756759 2026] [ssl:error] [pid 3016162:tid 3016162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:08.809422 2026] [ssl:error] [pid 3019714:tid 3019714] (EAI 2)Name or service not known: [client 144.76.19.72:47312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:08.809447 2026] [ssl:error] [pid 3019714:tid 3019714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:09.272414 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.51:31598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:09.273046 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.51:31598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:09.424745 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.25:57660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:09.425366 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.25:57660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:09.521187 2026] [access_compat:error] [pid 3013378:tid 3013378] [client 176.241.66.87:13033] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:09.563578 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.11:35226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:09.564197 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.11:35226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:09.743112 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.55:59704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:09.743730 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.55:59704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:09.876430 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.4:31824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:09.877051 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.4:31824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:10.014523 2026] [access_compat:error] [pid 3017773:tid 3017773] [client 157.20.138.62:57601] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:10.325478 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.37:40926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:10.326109 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.37:40926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:10.542799 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.13:47796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:10.543417 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.13:47796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:10.938597 2026] [access_compat:error] [pid 3022698:tid 3022698] [client 103.72.86.239:40158] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:10.949721 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.54:24896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:10.950342 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.54:24896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:11.153645 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.48:46614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:11.154268 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.48:46614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:11.265411 2026] [security2:error] [pid 2998280:tid 2998280] [client 43.165.7.135:42460] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsxx844-HqgXIL6SydaGgAAACI"]
[Thu Jul 30 12:13:11.576563 2026] [ssl:error] [pid 3021347:tid 3021347] (70014)End of file found: [client 216.73.216.199:58520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:11.889084 2026] [ssl:error] [pid 3022845:tid 3022845] (EAI 2)Name or service not known: [client 144.76.19.72:41624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:11.889126 2026] [ssl:error] [pid 3022845:tid 3022845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:11.938152 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.28:33748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:11.938770 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.28:33748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:11.944561 2026] [ssl:error] [pid 3021925:tid 3021925] (EAI 2)Name or service not known: [client 144.76.19.72:41626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:11.944590 2026] [ssl:error] [pid 3021925:tid 3021925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:12.370365 2026] [security2:error] [pid 3004769:tid 3004769] [client 43.165.7.135:33512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amsxyBIadbEctGyHTWZmdAAAABk"], referer: http://orgent.eu
[Thu Jul 30 12:13:12.449591 2026] [security2:error] [pid 3020504:tid 3020504] [client 176.29.31.78:29884] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxyD-i3Y59EvLcik2uBQAAAAA"]
[Thu Jul 30 12:13:12.449641 2026] [security2:error] [pid 3020504:tid 3020504] [client 176.29.31.78:29884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsxyD-i3Y59EvLcik2uBQAAAAA"]
[Thu Jul 30 12:13:12.449899 2026] [security2:error] [pid 3020504:tid 3020504] [client 176.29.31.78:29884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsxyD-i3Y59EvLcik2uBQAAAAA"]
[Thu Jul 30 12:13:12.566027 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.20:47768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:12.566663 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.20:47768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:12.806563 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.23:52260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:12.807182 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.23:52260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:12.854461 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.3:59006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:12.855148 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.3:59006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:12.961468 2026] [authz_core:error] [pid 3023347:tid 3023347] [client 57.141.0.67:33366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:12.962140 2026] [authz_core:error] [pid 3023347:tid 3023347] [client 57.141.0.67:33366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:13.526316 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.32:50262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:13.526957 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.32:50262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:13.627637 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.35:27678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:13.628252 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.35:27678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:13.836550 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.8:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:13.837176 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.8:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:13.907370 2026] [cgi:error] [pid 3016162:tid 3016162] [client 216.73.216.199:60597] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/xfer_rcube_uid_resolver.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:13:13.907407 2026] [cgi:error] [pid 3016162:tid 3016162] [client 216.73.216.199:60597] End of script output before headers: xfer_rcube_uid_resolver.pl
[Thu Jul 30 12:13:14.251571 2026] [core:error] [pid 2998280:tid 2998280] [client 66.249.66.169:54039] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:14.251596 2026] [core:error] [pid 2998280:tid 2998280] [client 66.249.66.169:54039] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:14.287052 2026] [access_compat:error] [pid 3013341:tid 3013341] [client 125.176.202.122:56203] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:14.926793 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.22:28508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:14.927414 2026] [authz_core:error] [pid 3013377:tid 3013377] [client 57.141.0.22:28508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:14.965344 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.16:45292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:14.965962 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.16:45292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:15.033877 2026] [ssl:error] [pid 3023347:tid 3023347] (EAI 2)Name or service not known: [client 144.76.19.72:41632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:15.033919 2026] [ssl:error] [pid 3023347:tid 3023347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:15.088858 2026] [ssl:error] [pid 2998280:tid 2998280] (EAI 2)Name or service not known: [client 144.76.19.72:41634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:15.088885 2026] [ssl:error] [pid 2998280:tid 2998280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:15.235008 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.36:34754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:15.235638 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.36:34754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:15.305492 2026] [access_compat:error] [pid 3012141:tid 3012141] [client 176.241.66.87:49998] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:15.717753 2026] [authz_core:error] [pid 3020954:tid 3020954] [client 57.141.0.42:57934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:15.718407 2026] [authz_core:error] [pid 3020954:tid 3020954] [client 57.141.0.42:57934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:15.755959 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.60:30998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:15.756588 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.60:30998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:16.105411 2026] [core:error] [pid 3019810:tid 3019810] (13)Permission denied: [client 216.73.216.199:18695] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/189:1/remove
[Thu Jul 30 12:13:16.413782 2026] [lsapi:warn] [pid 3017873:tid 3017873] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:13:16.455199 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.53:51406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:16.455818 2026] [authz_core:error] [pid 3016162:tid 3016162] [client 57.141.0.53:51406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:16.712001 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.29:32404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:16.712638 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.29:32404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:17.622461 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.64:46662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:17.623093 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.64:46662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:17.689959 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.62:54992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:17.690612 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.62:54992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:18.143629 2026] [ssl:error] [pid 3020956:tid 3020956] (EAI 2)Name or service not known: [client 144.76.19.72:41638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:18.143666 2026] [ssl:error] [pid 3020956:tid 3020956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:18.201600 2026] [ssl:error] [pid 3022698:tid 3022698] (EAI 2)Name or service not known: [client 144.76.19.72:41648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:18.201657 2026] [ssl:error] [pid 3022698:tid 3022698] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:18.216226 2026] [core:error] [pid 3019810:tid 3019810] (13)Permission denied: [client 216.73.216.199:18695] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS2/flags
[Thu Jul 30 12:13:18.244124 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.37:44026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:18.244744 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.37:44026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:18.313720 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.4:44164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:18.314356 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.4:44164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:18.626911 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.8:48794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:18.627578 2026] [authz_core:error] [pid 3017820:tid 3017820] [client 57.141.0.8:48794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:18.659905 2026] [authz_core:error] [pid 3020956:tid 3020956] [client 57.141.0.53:37026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:18.660532 2026] [authz_core:error] [pid 3020956:tid 3020956] [client 57.141.0.53:37026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:18.673742 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.44:49434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:18.674431 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.44:49434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:18.985175 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.16:34972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:18.985796 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.16:34972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:19.079199 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.39:52288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:19.079827 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.39:52288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:19.940918 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.10:48032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:19.941565 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.10:48032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:20.035835 2026] [access_compat:error] [pid 3016066:tid 3016066] [client 176.241.66.87:50324] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:20.451937 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.39:52294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:20.452571 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.39:52294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:20.507639 2026] [core:error] [pid 3019810:tid 3019810] (13)Permission denied: [client 216.73.216.199:18695] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/wwwacct
[Thu Jul 30 12:13:20.508857 2026] [access_compat:error] [pid 3017773:tid 3017773] [client 157.20.138.62:58294] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:21.016114 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.70:33412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:21.016737 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.70:33412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:21.068954 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.25:65092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:21.069582 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.25:65092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:21.260790 2026] [ssl:error] [pid 3017873:tid 3017873] (EAI 2)Name or service not known: [client 144.76.19.72:25776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:21.260822 2026] [ssl:error] [pid 3017873:tid 3017873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:21.306612 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.27:25394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:21.307243 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.27:25394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:21.318209 2026] [ssl:error] [pid 3020953:tid 3020953] (EAI 2)Name or service not known: [client 144.76.19.72:25782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:21.318241 2026] [ssl:error] [pid 3020953:tid 3020953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:21.536749 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.18:65512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:21.537376 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.18:65512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:21.953297 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.55:21644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:21.953923 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.55:21644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:22.175678 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.56:64980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:22.176300 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.56:64980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:22.469797 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.3:20678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:22.470428 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.3:20678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:22.566862 2026] [access_compat:error] [pid 3016162:tid 3016162] [client 103.72.86.239:40591] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:22.670818 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.68:41930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:22.671452 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.68:41930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:22.965431 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.40:35402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:22.966049 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.40:35402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:23.263779 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.12:46842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:23.264430 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.12:46842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:23.453121 2026] [ssl:error] [pid 3020953:tid 3020953] (70014)End of file found: [client 216.73.216.199:50694] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:23.714182 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.16:34986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:23.714800 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.16:34986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:24.056592 2026] [core:error] [pid 3019769:tid 3019769] (13)Permission denied: [client 216.73.216.199:33203] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS2/close_delay
[Thu Jul 30 12:13:24.285699 2026] [authz_core:error] [pid 3023890:tid 3023890] [client 57.141.0.40:35416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:24.286346 2026] [authz_core:error] [pid 3023890:tid 3023890] [client 57.141.0.40:35416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:24.374964 2026] [ssl:error] [pid 3023892:tid 3023892] (EAI 2)Name or service not known: [client 144.76.19.72:25798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:24.375005 2026] [ssl:error] [pid 3023892:tid 3023892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:24.448089 2026] [ssl:error] [pid 3023892:tid 3023892] (EAI 2)Name or service not known: [client 144.76.19.72:25802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:24.448113 2026] [ssl:error] [pid 3023892:tid 3023892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:24.570543 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.28:52376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:24.571165 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.28:52376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:24.588908 2026] [access_compat:error] [pid 3021347:tid 3021347] [client 125.176.202.122:56434] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:24.655387 2026] [ssl:error] [pid 3019769:tid 3019769] (70014)End of file found: [client 216.73.216.199:33203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:24.778304 2026] [security2:error] [pid 3021925:tid 3021925] [client 43.165.7.135:51712] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.stopfordsackville.com"] [uri "/"] [unique_id "amsx1PNv9fVyFpR3QeT21wAAAAc"]
[Thu Jul 30 12:13:24.779226 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 43.165.7.135:51712] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 12:13:25.027827 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.64:20042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:25.028457 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.64:20042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:25.137427 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.32:25876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:25.138049 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.32:25876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:25.227622 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.51:26284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:25.228246 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.51:26284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:25.477416 2026] [security2:error] [pid 3023933:tid 3023933] [client 34.194.95.99:20338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amsx1d6-fEE9pXaIAZCmoQAAABg"]
[Thu Jul 30 12:13:25.814217 2026] [access_compat:error] [pid 3019768:tid 3019768] [client 176.241.66.87:13991] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:26.162097 2026] [ssl:error] [pid 3021925:tid 3021925] (70014)End of file found: [client 216.73.216.199:9143] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:26.526662 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.10:40812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:26.527286 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.10:40812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:26.609239 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.22:33050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:26.609859 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.22:33050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:26.730939 2026] [authz_core:error] [pid 3023347:tid 3023347] [client 57.141.0.45:44146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:26.731570 2026] [authz_core:error] [pid 3023347:tid 3023347] [client 57.141.0.45:44146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:27.038318 2026] [lsapi:warn] [pid 3023932:tid 3023932] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:13:27.076266 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.28:52396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:27.076887 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.28:52396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:27.147469 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.31:47792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:27.148109 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.31:47792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:27.212324 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.53:36872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:27.212949 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.53:36872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:27.503540 2026] [ssl:error] [pid 3012141:tid 3012141] (EAI 2)Name or service not known: [client 144.76.19.72:25814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:27.503569 2026] [ssl:error] [pid 3012141:tid 3012141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:27.555295 2026] [ssl:error] [pid 3017820:tid 3017820] (EAI 2)Name or service not known: [client 144.76.19.72:25824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:27.555323 2026] [ssl:error] [pid 3017820:tid 3017820] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:28.317803 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.48:55976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:28.318426 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.48:55976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:28.634276 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.9:59274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:28.634896 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.9:59274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:29.171241 2026] [ssl:error] [pid 3014702:tid 3014702] (70014)End of file found: [client 216.73.216.199:59680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:29.395057 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.26:55958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:29.395697 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.26:55958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:29.413026 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.24:52194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:29.413649 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.24:52194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:29.466893 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.50:28042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:29.467525 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.50:28042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:29.699215 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.30:37276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:29.699848 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.30:37276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:29.723954 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.25:40562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:29.724579 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.25:40562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:30.411297 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.68:41924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:30.411923 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.68:41924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:30.567638 2026] [access_compat:error] [pid 3020953:tid 3020953] [client 176.241.66.87:50868] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:30.610113 2026] [ssl:error] [pid 3020912:tid 3020912] (EAI 2)Name or service not known: [client 144.76.19.72:34200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:30.610140 2026] [ssl:error] [pid 3020912:tid 3020912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:30.665976 2026] [ssl:error] [pid 3019769:tid 3019769] (EAI 2)Name or service not known: [client 144.76.19.72:34210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:30.666003 2026] [ssl:error] [pid 3019769:tid 3019769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:30.978405 2026] [ssl:error] [pid 2998280:tid 2998280] (70014)End of file found: [client 216.73.216.199:1090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:31.043771 2026] [access_compat:error] [pid 3021347:tid 3021347] [client 157.20.138.62:58894] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:31.260306 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.67:25472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:31.260931 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.67:25472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:31.276114 2026] [access_compat:error] [pid 3017873:tid 3017873] [client 125.176.202.122:56531] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:31.344688 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.39:61988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:31.345350 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.39:61988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:31.393936 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.31:47806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:31.394574 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.31:47806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:31.440356 2026] [security2:error] [pid 3017823:tid 3017823] [client 3.225.45.252:7652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amsx2_7sp4G4pe2E_u_BQgAAACw"]
[Thu Jul 30 12:13:31.743094 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.32:25898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:31.743740 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.32:25898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:31.879098 2026] [ssl:error] [pid 3016113:tid 3016113] (70014)End of file found: [client 216.73.216.199:61503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:31.895263 2026] [access_compat:error] [pid 3017819:tid 3017819] [client 20.203.142.71:58640] AH01797: client denied by server configuration: /home/tompalm/public_html/wp-content/uploads/dlm_uploads/
[Thu Jul 30 12:13:31.904111 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.43:52102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:31.904742 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.43:52102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:32.269806 2026] [access_compat:error] [pid 3021419:tid 3021419] [client 103.72.86.239:38956] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:32.315456 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.44:39610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:32.316090 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.44:39610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:32.376701 2026] [security2:error] [pid 3016066:tid 3016066] [client 114.119.157.183:25583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~104,15,17/request_format~html"] [unique_id "amsx3Mn-KnOK0mq6po7pnwAAACg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~104,15/request_format~html
[Thu Jul 30 12:13:33.041949 2026] [security2:error] [pid 3023935:tid 3023935] [client 85.208.98.29:41312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/eurolig-tahmin-k.html"] [unique_id "amsx3XlRSOBGnTly4o-EWwAAABw"]
[Thu Jul 30 12:13:33.240049 2026] [authz_core:error] [pid 3024271:tid 3024271] [client 57.141.0.19:54164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:33.240720 2026] [authz_core:error] [pid 3024271:tid 3024271] [client 57.141.0.19:54164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:33.244451 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.16:60734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:33.245055 2026] [authz_core:error] [pid 3004768:tid 3004768] [client 57.141.0.16:60734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:33.347866 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.46:31776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:33.348479 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.46:31776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:33.675177 2026] [security2:error] [pid 3016066:tid 3016066] [client 114.119.157.183:25591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~104,15,17/request_format~html"] [unique_id "amsx3cn-KnOK0mq6po7poQAAACg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~104,15/request_format~html
[Thu Jul 30 12:13:33.754821 2026] [ssl:error] [pid 3023935:tid 3023935] (EAI 2)Name or service not known: [client 144.76.19.72:34216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:33.754861 2026] [ssl:error] [pid 3023935:tid 3023935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:33.809081 2026] [ssl:error] [pid 3017866:tid 3017866] (EAI 2)Name or service not known: [client 144.76.19.72:34232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:33.809140 2026] [ssl:error] [pid 3017866:tid 3017866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:33.913157 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.19:54178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:33.913781 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.19:54178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:34.193816 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.24:52218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:34.194439 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.24:52218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:34.236039 2026] [core:error] [pid 3024313:tid 3024313] [client 66.249.66.40:48787] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:34.236095 2026] [core:error] [pid 3024313:tid 3024313] [client 66.249.66.40:48787] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:34.249429 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.51:25082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:34.250040 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.51:25082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:34.409618 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.18:52354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:34.410245 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.18:52354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:34.584242 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.37:35846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:34.584861 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.37:35846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:35.316056 2026] [authz_core:error] [pid 3023934:tid 3023934] [client 57.141.0.20:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:35.316685 2026] [authz_core:error] [pid 3023934:tid 3023934] [client 57.141.0.20:51032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:35.535316 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.55:44600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:35.535943 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.55:44600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:35.925124 2026] [access_compat:error] [pid 3004768:tid 3004768] [client 125.176.202.122:56660] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:35.946022 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.14:39866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:35.946706 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.14:39866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:36.262863 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.14:39872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:36.263493 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.14:39872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:36.303359 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.2:28524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:36.303979 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.2:28524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:36.699892 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.26:23050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:36.700528 2026] [authz_core:error] [pid 2998280:tid 2998280] [client 57.141.0.26:23050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:36.866907 2026] [ssl:error] [pid 3019810:tid 3019810] (EAI 2)Name or service not known: [client 144.76.19.72:34240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:36.866935 2026] [ssl:error] [pid 3019810:tid 3019810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:36.912167 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.14:39880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:36.912790 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.14:39880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:36.921899 2026] [ssl:error] [pid 3020953:tid 3020953] (EAI 2)Name or service not known: [client 144.76.19.72:34248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:36.921928 2026] [ssl:error] [pid 3020953:tid 3020953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:37.135266 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.37:35856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:37.135890 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.37:35856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:37.532308 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.4:23682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:37.532934 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.4:23682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:37.535180 2026] [lsapi:warn] [pid 3016066:tid 3016066] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:13:38.370350 2026] [access_compat:error] [pid 3019714:tid 3019714] [client 52.238.199.152:15107] AH01797: client denied by server configuration: /home/monitors/public_html/4k-monitors.co.uk/wp-config-sample.php
[Thu Jul 30 12:13:38.404293 2026] [core:error] [pid 3023932:tid 3023932] (13)Permission denied: [client 216.73.216.199:43577] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:1e/eject
[Thu Jul 30 12:13:38.542589 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.17:35394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:38.543217 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.17:35394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:38.671381 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.22:50854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:38.672010 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.22:50854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:39.113749 2026] [authz_core:error] [pid 3023933:tid 3023933] [client 57.141.0.50:43262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:39.114378 2026] [authz_core:error] [pid 3023933:tid 3023933] [client 57.141.0.50:43262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:39.729990 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.16:23720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:39.730616 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.16:23720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:39.887167 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.71:50866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:39.887802 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.71:50866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:39.978248 2026] [ssl:error] [pid 2998335:tid 2998335] (EAI 2)Name or service not known: [client 144.76.19.72:35488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:39.978279 2026] [ssl:error] [pid 2998335:tid 2998335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:39.986174 2026] [authz_core:error] [pid 3017866:tid 3017866] [client 57.141.0.58:21402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:39.986821 2026] [authz_core:error] [pid 3017866:tid 3017866] [client 57.141.0.58:21402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:39.996857 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.70:52708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:39.997476 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.70:52708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:40.026819 2026] [ssl:error] [pid 3024271:tid 3024271] (70014)End of file found: [client 216.73.216.199:16651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:40.031098 2026] [ssl:error] [pid 3022845:tid 3022845] (EAI 2)Name or service not known: [client 144.76.19.72:35502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:40.031135 2026] [ssl:error] [pid 3022845:tid 3022845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:40.676998 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.67:38998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:40.677629 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.67:38998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:40.810649 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.9:28762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:40.811271 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.9:28762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:41.042477 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.42:24146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:41.043112 2026] [authz_core:error] [pid 2998335:tid 2998335] [client 57.141.0.42:24146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:41.094886 2026] [access_compat:error] [pid 3016169:tid 3016169] [client 176.241.66.87:51414] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:41.565455 2026] [access_compat:error] [pid 3004769:tid 3004769] [client 157.20.138.62:59497] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:41.983304 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.56:59174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:41.983931 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.56:59174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:42.235359 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.6:28334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:42.235981 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.6:28334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:42.591505 2026] [access_compat:error] [pid 3017866:tid 3017866] [client 125.176.202.122:56756] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:42.762563 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.37:42790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:42.763190 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.37:42790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:43.084407 2026] [ssl:error] [pid 3021589:tid 3021589] (EAI 2)Name or service not known: [client 144.76.19.72:35514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:43.084441 2026] [ssl:error] [pid 3021589:tid 3021589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:43.137749 2026] [ssl:error] [pid 3014702:tid 3014702] (EAI 2)Name or service not known: [client 144.76.19.72:35520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:43.137780 2026] [ssl:error] [pid 3014702:tid 3014702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:43.193024 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.55:44640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:43.193657 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.55:44640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:43.488194 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.69:44212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:43.488813 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.69:44212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:43.541547 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.18:23024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:43.542170 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.18:23024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:43.896201 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.42:24150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:43.896817 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.42:24150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:44.371851 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.10:42726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:44.372487 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.10:42726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:44.583119 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.43:48738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:44.583761 2026] [authz_core:error] [pid 3016025:tid 3016025] [client 57.141.0.43:48738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:44.879892 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.43:48748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:44.880536 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.43:48748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:46.052293 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.69:44220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:46.052917 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.69:44220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:46.189808 2026] [ssl:error] [pid 3017866:tid 3017866] (EAI 2)Name or service not known: [client 144.76.19.72:35522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:46.189843 2026] [ssl:error] [pid 3017866:tid 3017866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:46.242898 2026] [ssl:error] [pid 3019769:tid 3019769] (EAI 2)Name or service not known: [client 144.76.19.72:35538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:46.242934 2026] [ssl:error] [pid 3019769:tid 3019769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:46.372750 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.4:26900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:46.373367 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.4:26900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:46.578573 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.17:63656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:46.579196 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.17:63656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:46.699609 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.2:42294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:46.700246 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.2:42294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:46.933099 2026] [access_compat:error] [pid 3023890:tid 3023890] [client 176.241.66.87:15243] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:46.957471 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.2:42300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:46.958105 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.2:42300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:47.110711 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.10:28008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:47.111334 2026] [authz_core:error] [pid 3021419:tid 3021419] [client 57.141.0.10:28008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:47.300425 2026] [access_compat:error] [pid 3024313:tid 3024313] [client 125.176.202.122:56886] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:47.326245 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.71:34554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:47.326870 2026] [authz_core:error] [pid 3019769:tid 3019769] [client 57.141.0.71:34554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:47.663108 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.71:34562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:47.663731 2026] [authz_core:error] [pid 3016169:tid 3016169] [client 57.141.0.71:34562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:47.973423 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.58:60792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:47.974087 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.58:60792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:48.026277 2026] [lsapi:warn] [pid 3021589:tid 3021589] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:13:48.346941 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.42:24158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:48.347983 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.42:24158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:48.650276 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.13:30106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:48.650917 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.13:30106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:48.702039 2026] [authz_core:error] [pid 3023890:tid 3023890] [client 57.141.0.64:53898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:48.702692 2026] [authz_core:error] [pid 3023890:tid 3023890] [client 57.141.0.64:53898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:49.097677 2026] [ssl:error] [pid 3023932:tid 3023932] (70014)End of file found: [client 216.73.216.199:43577] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:49.297965 2026] [ssl:error] [pid 3020911:tid 3020911] (EAI 2)Name or service not known: [client 144.76.19.72:35552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:49.297998 2026] [ssl:error] [pid 3020911:tid 3020911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:49.352447 2026] [ssl:error] [pid 3021925:tid 3021925] (EAI 2)Name or service not known: [client 144.76.19.72:35554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:49.352481 2026] [ssl:error] [pid 3021925:tid 3021925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:49.557392 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.1:25628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:49.558016 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.1:25628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:49.707247 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.70:36846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:49.707939 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.70:36846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:50.092293 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.55:40162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:50.092922 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.55:40162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:50.108664 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.44:49890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:50.109276 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.44:49890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:50.187507 2026] [security2:error] [pid 3013341:tid 3013341] [client 85.128.143.151:40802] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "apotheekcandidejacobs.be"] [uri "/xmlrpc.php"] [unique_id "amsx7pfs1ULcRtckyJEytgAAABQ"]
[Thu Jul 30 12:13:50.513092 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.51:25572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:50.514125 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.51:25572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:50.951680 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.31:31782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:50.952691 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.31:31782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:51.112807 2026] [security2:error] [pid 3013378:tid 3013378] [client 18.199.86.73:55084] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "chateausaintjeannetorg.chateausaintjeannet.com"] [uri "/.git/config"] [unique_id "amsx7_IUzf_YAfTXuJm9gQAAACA"]
[Thu Jul 30 12:13:51.112959 2026] [security2:error] [pid 3013378:tid 3013378] [client 18.199.86.73:55084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chateausaintjeannetorg.chateausaintjeannet.com"] [uri "/.git/config"] [unique_id "amsx7_IUzf_YAfTXuJm9gQAAACA"]
[Thu Jul 30 12:13:51.113147 2026] [security2:error] [pid 3013378:tid 3013378] [client 18.199.86.73:55084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "chateausaintjeannetorg.chateausaintjeannet.com"] [uri "/.git/config"] [unique_id "amsx7_IUzf_YAfTXuJm9gQAAACA"]
[Thu Jul 30 12:13:51.136004 2026] [core:error] [pid 3020911:tid 3020911] [client 66.249.66.3:38453] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:51.136035 2026] [core:error] [pid 3020911:tid 3020911] [client 66.249.66.3:38453] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:51.357012 2026] [core:error] [pid 3020912:tid 3020912] [client 66.249.66.169:54218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:51.357042 2026] [core:error] [pid 3020912:tid 3020912] [client 66.249.66.169:54218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:13:51.702037 2026] [access_compat:error] [pid 3020504:tid 3020504] [client 176.241.66.87:15603] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:52.120874 2026] [access_compat:error] [pid 3024156:tid 3024156] [client 157.20.138.62:60097] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:52.153948 2026] [security2:error] [pid 3013341:tid 3013341] [client 43.130.174.37:51772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/"] [unique_id "amsx8Jfs1ULcRtckyJEytwAAABQ"]
[Thu Jul 30 12:13:52.179090 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.9:29422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:52.179733 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.9:29422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:52.263997 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 20.203.142.71:58640] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/Requests/error_log
[Thu Jul 30 12:13:52.314361 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.63:56588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:52.315122 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.63:56588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:52.377871 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.65:53940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:52.378507 2026] [authz_core:error] [pid 3016165:tid 3016165] [client 57.141.0.65:53940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:52.404604 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.26:54772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:52.405293 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.26:54772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:52.410552 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:63502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:52.410587 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:52.463551 2026] [ssl:error] [pid 3023890:tid 3023890] (EAI 2)Name or service not known: [client 144.76.19.72:63512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:52.463593 2026] [ssl:error] [pid 3023890:tid 3023890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:53.149190 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.53:53302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:53.149837 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.53:53302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:53.357567 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.60:52436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:53.358198 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.60:52436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:53.380109 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.41:64008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:53.380729 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.41:64008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:53.518172 2026] [security2:error] [pid 3013341:tid 3013341] [client 47.128.125.114:21722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/11/04/geneva-identity-in-the-cloud/"] [unique_id "amsx8Zfs1ULcRtckyJEyuAAAABQ"]
[Thu Jul 30 12:13:54.098143 2026] [ssl:error] [pid 3023892:tid 3023892] (70014)End of file found: [client 216.73.216.199:2256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:54.322553 2026] [access_compat:error] [pid 3024362:tid 3024362] [client 125.176.202.122:56985] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:54.474700 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.36:37800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:54.475359 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.36:37800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:54.598350 2026] [authz_core:error] [pid 3025043:tid 3025043] [client 57.141.0.7:61802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:54.599013 2026] [authz_core:error] [pid 3025043:tid 3025043] [client 57.141.0.7:61802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:54.946645 2026] [security2:error] [pid 3022845:tid 3022845] [client 85.208.98.23:38672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amsx8oGad8Mqg2bxbNmF3QAAAAg"]
[Thu Jul 30 12:13:54.995625 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.41:64022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:54.996248 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.41:64022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:55.308752 2026] [core:error] [pid 3009642:tid 3009642] (13)Permission denied: [client 216.73.216.199:26811] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/objs_per_slab
[Thu Jul 30 12:13:55.519312 2026] [ssl:error] [pid 3022845:tid 3022845] (EAI 2)Name or service not known: [client 144.76.19.72:63518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:55.519343 2026] [ssl:error] [pid 3022845:tid 3022845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:55.575321 2026] [ssl:error] [pid 3025043:tid 3025043] (EAI 2)Name or service not known: [client 144.76.19.72:63524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:55.575358 2026] [ssl:error] [pid 3025043:tid 3025043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:55.609101 2026] [ssl:error] [pid 3009642:tid 3009642] (70014)End of file found: [client 216.73.216.199:26811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:55.629680 2026] [authz_core:error] [pid 3024362:tid 3024362] [client 57.141.0.25:63128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:55.630308 2026] [authz_core:error] [pid 3024362:tid 3024362] [client 57.141.0.25:63128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:55.642244 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.12:22834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:55.642885 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.12:22834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:55.755789 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.21:55674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:55.756441 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.21:55674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:55.884898 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.14:39934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:55.885591 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.14:39934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:55.904438 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.34:28572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:55.905062 2026] [authz_core:error] [pid 3017873:tid 3017873] [client 57.141.0.34:28572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:55.914763 2026] [ssl:error] [pid 3019714:tid 3019714] (70014)End of file found: [client 216.73.216.199:37228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:13:56.528825 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.25:63144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:56.529525 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.25:63144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:56.727089 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.67:60844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:56.727719 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.67:60844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:56.762997 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.18:60264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:56.763689 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.18:60264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:56.854837 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.31:24936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:56.855468 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.31:24936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:57.366618 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.2:39942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:57.367249 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.2:39942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:57.504566 2026] [access_compat:error] [pid 3025093:tid 3025093] [client 176.241.66.87:15855] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:57.513187 2026] [security2:error] [pid 3025091:tid 3025091] [client 185.191.171.16:32756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/apple-tv-volume-control-not-working"] [unique_id "amsx9arXO0chUKEnmm0J6AAAAB0"]
[Thu Jul 30 12:13:58.030014 2026] [access_compat:error] [pid 3020912:tid 3020912] [client 45.158.164.139:50584] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:13:58.405017 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.37:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:58.405650 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.37:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:58.556707 2026] [lsapi:warn] [pid 3025089:tid 3025089] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:13:58.633480 2026] [ssl:error] [pid 3024362:tid 3024362] (EAI 2)Name or service not known: [client 144.76.19.72:63532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:58.633522 2026] [ssl:error] [pid 3024362:tid 3024362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:58.690964 2026] [ssl:error] [pid 3025091:tid 3025091] (EAI 2)Name or service not known: [client 144.76.19.72:63540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:13:58.691001 2026] [ssl:error] [pid 3025091:tid 3025091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:13:58.931629 2026] [authz_core:error] [pid 3025043:tid 3025043] [client 57.141.0.42:52750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:58.932258 2026] [authz_core:error] [pid 3025043:tid 3025043] [client 57.141.0.42:52750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:59.405483 2026] [authz_core:error] [pid 3024362:tid 3024362] [client 57.141.0.43:64940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:59.406113 2026] [authz_core:error] [pid 3024362:tid 3024362] [client 57.141.0.43:64940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:59.599021 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.35:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:13:59.599661 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.35:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:13:59.658678 2026] [access_compat:error] [pid 3020504:tid 3020504] [client 168.228.45.215:56028] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 12:13:59.658792 2026] [access_compat:error] [pid 3020504:tid 3020504] [client 168.228.45.215:56028] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:13:59.731049 2026] [access_compat:error] [pid 3020912:tid 3020912] [client 125.176.202.122:57111] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:13:59.949282 2026] [access_compat:error] [pid 3021589:tid 3021589] [client 196.196.31.29:58812] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 12:13:59.949379 2026] [access_compat:error] [pid 3021589:tid 3021589] [client 196.196.31.29:58812] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:14:00.055295 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.40:44236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:00.055942 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.40:44236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:00.167082 2026] [access_compat:error] [pid 3024362:tid 3024362] [client 5.157.52.139:44498] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 12:14:00.167182 2026] [access_compat:error] [pid 3024362:tid 3024362] [client 5.157.52.139:44498] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:14:00.346738 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.48:35000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:00.347363 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.48:35000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:00.385605 2026] [access_compat:error] [pid 3019768:tid 3019768] [client 196.245.159.253:51740] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 12:14:00.385739 2026] [access_compat:error] [pid 3019768:tid 3019768] [client 196.245.159.253:51740] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:14:00.941795 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.23:39344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:00.942434 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.23:39344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:00.989319 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.28:32400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:00.989950 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.28:32400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:01.351262 2026] [core:error] [pid 3023890:tid 3023890] (13)Permission denied: [client 216.73.216.199:33069] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS2/flags
[Thu Jul 30 12:14:01.689771 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.37:30716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:01.690402 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.37:30716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:01.745472 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:26612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:01.745522 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:01.802662 2026] [ssl:error] [pid 3015539:tid 3015539] (EAI 2)Name or service not known: [client 144.76.19.72:26624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:01.802693 2026] [ssl:error] [pid 3015539:tid 3015539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:01.939059 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.56:43596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:01.939691 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.56:43596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:01.955280 2026] [ssl:error] [pid 3023890:tid 3023890] (70014)End of file found: [client 216.73.216.199:33069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:02.029307 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.1:59568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:02.029947 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.1:59568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:02.055951 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.41:64044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:02.056591 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.41:64044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:02.138446 2026] [cgi:error] [pid 3021589:tid 3021589] [client 66.249.66.196:47063] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:14:02.162431 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.12:40446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:02.163059 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.12:40446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:02.241227 2026] [access_compat:error] [pid 3015539:tid 3015539] [client 176.241.66.87:16197] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:02.646133 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 157.20.138.62:60700] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:02.994917 2026] [core:error] [pid 3009642:tid 3009642] [client 66.249.66.168:60273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:02.994946 2026] [core:error] [pid 3009642:tid 3009642] [client 66.249.66.168:60273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:03.454813 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.51:31350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:03.455441 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.51:31350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:03.544743 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.67:59896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:03.545394 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.67:59896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:03.694337 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.70:24478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:03.694959 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.70:24478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:04.022696 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.43:60206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:04.023363 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.43:60206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:04.311012 2026] [core:error] [pid 3017773:tid 3017773] [client 66.249.64.170:56682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:04.311041 2026] [core:error] [pid 3017773:tid 3017773] [client 66.249.64.170:56682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:04.377857 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.63:40054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:04.378520 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.63:40054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:04.434145 2026] [ssl:error] [pid 3023932:tid 3023932] (70014)End of file found: [client 216.73.216.199:13794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:04.885895 2026] [ssl:error] [pid 3023892:tid 3023892] (EAI 2)Name or service not known: [client 144.76.19.72:26628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:04.885936 2026] [ssl:error] [pid 3023892:tid 3023892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:04.942019 2026] [ssl:error] [pid 3017773:tid 3017773] (EAI 2)Name or service not known: [client 144.76.19.72:26640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:04.942050 2026] [ssl:error] [pid 3017773:tid 3017773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:04.958625 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.36:23292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:04.959251 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.36:23292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:05.098922 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.16:53514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:05.099566 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.16:53514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:05.281099 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.65:30700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:05.281776 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.65:30700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:05.551916 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.71:43360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:05.552552 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.71:43360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:05.741446 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.43:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:05.742079 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.43:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:06.180396 2026] [security2:error] [pid 3025005:tid 3025005] [client 143.198.119.177:36506] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "apotheekcandidejacobs.be"] [uri "/xmlrpc.php"] [unique_id "amsx_lCn4mGvja8LXzhmtwAAAAU"]
[Thu Jul 30 12:14:06.494692 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.28:41742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:06.495327 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.28:41742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:06.504619 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.34:31800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:06.505273 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.34:31800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:06.531094 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 66.249.66.34:57935] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:14:06.533893 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 66.249.66.34:57935] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:14:06.761030 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.51:36964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:06.761663 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.51:36964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:07.029980 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.28:41746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:07.030608 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.28:41746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:07.140119 2026] [access_compat:error] [pid 3023892:tid 3023892] [client 103.72.86.239:40038] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:07.201788 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.28:41756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:07.202431 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.28:41756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:07.995928 2026] [ssl:error] [pid 3015539:tid 3015539] (EAI 2)Name or service not known: [client 144.76.19.72:26652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:07.995955 2026] [ssl:error] [pid 3015539:tid 3015539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:08.054120 2026] [ssl:error] [pid 3020504:tid 3020504] (EAI 2)Name or service not known: [client 144.76.19.72:26654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:08.054148 2026] [ssl:error] [pid 3020504:tid 3020504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:08.144744 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.52:55484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:08.145368 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.52:55484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:08.517112 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.63:36422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:08.517744 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.63:36422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:08.653117 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.25:39770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:08.653758 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.25:39770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:08.728942 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.34:31816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:08.729578 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.34:31816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:08.936890 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.31:27986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:08.937946 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.31:27986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:09.046399 2026] [lsapi:warn] [pid 3009642:tid 3009642] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:14:09.174569 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.66:51972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:09.175191 2026] [authz_core:error] [pid 3024313:tid 3024313] [client 57.141.0.66:51972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:09.328815 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.69:41632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:09.329430 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.69:41632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:09.500738 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 12:14:09.500788 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:09.612305 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 12:14:09.612359 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:09.753363 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 12:14:09.753416 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:09.865604 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 12:14:09.865655 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:09.896803 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.9:20640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:09.897422 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.9:20640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:10.025125 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 12:14:10.025180 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:10.196181 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/hosty.php
[Thu Jul 30 12:14:10.196236 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:10.341309 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/test1.php
[Thu Jul 30 12:14:10.341360 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:10.478656 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/zwso.php
[Thu Jul 30 12:14:10.478706 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:10.494328 2026] [ssl:error] [pid 3016066:tid 3016066] (70014)End of file found: [client 216.73.216.199:25509] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:10.630940 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.52:65486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:10.631616 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.52:65486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:10.640985 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 12:14:10.641038 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:10.727089 2026] [access_compat:error] [pid 3025042:tid 3025042] [client 125.176.202.122:57341] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:10.752905 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/mini
[Thu Jul 30 12:14:10.921697 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog-header.php
[Thu Jul 30 12:14:10.921749 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:11.109755 2026] [ssl:error] [pid 3024313:tid 3024313] (EAI 2)Name or service not known: [client 144.76.19.72:60584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:11.109803 2026] [ssl:error] [pid 3024313:tid 3024313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:11.117324 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/about
[Thu Jul 30 12:14:11.125336 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.69:41646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:11.125972 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.69:41646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:11.161723 2026] [ssl:error] [pid 3019768:tid 3019768] (EAI 2)Name or service not known: [client 144.76.19.72:60590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:11.161776 2026] [ssl:error] [pid 3019768:tid 3019768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:11.231810 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/function
[Thu Jul 30 12:14:11.312134 2026] [core:error] [pid 3019810:tid 3019810] (13)Permission denied: [client 216.73.216.199:38045] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/nf_defrag_ipv6/uevent
[Thu Jul 30 12:14:11.343772 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-signin.php
[Thu Jul 30 12:14:11.343821 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:11.370010 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.45:34076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:11.370680 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.45:34076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:11.495601 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 12:14:11.495650 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:11.607468 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 12:14:11.607533 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:11.772251 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/class.php
[Thu Jul 30 12:14:11.772301 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:11.889641 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/flower.php
[Thu Jul 30 12:14:11.889695 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:11.935124 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.43:37608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:11.935748 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.43:37608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:12.036149 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/motu.php
[Thu Jul 30 12:14:12.036198 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:12.148854 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 12:14:12.148905 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:12.158763 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.36:36722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:12.159387 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.36:36722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:12.261269 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/lite.php
[Thu Jul 30 12:14:12.261316 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:12.374494 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 12:14:12.374555 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:12.540437 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:14:12.728415 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-links-opml.php
[Thu Jul 30 12:14:12.728466 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:12.767600 2026] [access_compat:error] [pid 3025592:tid 3025592] [client 176.241.66.87:53091] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:12.844946 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/.alf.php
[Thu Jul 30 12:14:12.844996 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:12.912033 2026] [ssl:error] [pid 3024363:tid 3024363] (70014)End of file found: [client 216.73.216.199:38952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:12.978616 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.48:52812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:12.979241 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.48:52812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:13.021297 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/ws.php
[Thu Jul 30 12:14:13.021352 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:13.149470 2026] [access_compat:error] [pid 3009642:tid 3009642] [client 157.20.138.62:61301] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:13.180145 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/css
[Thu Jul 30 12:14:13.293289 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 12:14:13.293338 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:13.444196 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.2:32540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:13.444822 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.2:32540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:13.468107 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/ws54.php
[Thu Jul 30 12:14:13.468153 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:13.581991 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 12:14:13.582043 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:13.650138 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.51:36970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:13.650771 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.51:36970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:13.764117 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:14:13.815369 2026] [ssl:error] [pid 3019810:tid 3019810] (70014)End of file found: [client 216.73.216.199:38045] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:13.925814 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.18:59840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:13.926439 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.18:59840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:13.981724 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 12:14:13.981771 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:14.130573 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/tinyfilemanager.php
[Thu Jul 30 12:14:14.130630 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:14.214593 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.7:27296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:14.215239 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.7:27296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:14.218621 2026] [ssl:error] [pid 3021925:tid 3021925] (EAI 2)Name or service not known: [client 144.76.19.72:60596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:14.218666 2026] [ssl:error] [pid 3021925:tid 3021925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:14.246263 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/hplfuns.php
[Thu Jul 30 12:14:14.246316 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:14.273267 2026] [ssl:error] [pid 3021589:tid 3021589] (EAI 2)Name or service not known: [client 144.76.19.72:60610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:14.273294 2026] [ssl:error] [pid 3021589:tid 3021589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:14.322774 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.24:22880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:14.323406 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.24:22880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:14.358565 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/bthil.php
[Thu Jul 30 12:14:14.358612 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:14.511595 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/cv.php
[Thu Jul 30 12:14:14.511645 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:14.628126 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/sf.php
[Thu Jul 30 12:14:14.628179 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:14.663720 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.60:30364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:14.664342 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.60:30364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:14.739999 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content.php
[Thu Jul 30 12:14:14.740046 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:14.841053 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.1:35724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:14.841688 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.1:35724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:14.852004 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/.bod
[Thu Jul 30 12:14:14.987707 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/txets.php
[Thu Jul 30 12:14:14.987757 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:15.141051 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wk
[Thu Jul 30 12:14:15.174665 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.29:55860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:15.175289 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.29:55860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:15.254586 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 12:14:15.254650 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:15.369148 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/new.php
[Thu Jul 30 12:14:15.369215 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:15.430050 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.6:55456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:15.430680 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.6:55456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:15.482043 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:14:15.596040 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/.trash7206
[Thu Jul 30 12:14:15.744900 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 12:14:15.744971 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:15.856909 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/error.php
[Thu Jul 30 12:14:15.856980 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:15.908629 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.51:22640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:15.909254 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.51:22640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:15.969643 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/a7.php
[Thu Jul 30 12:14:15.969708 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:14:16.024273 2026] [authz_core:error] [pid 3017866:tid 3017866] [client 57.141.0.18:59854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:16.024902 2026] [authz_core:error] [pid 3017866:tid 3017866] [client 57.141.0.18:59854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:16.082710 2026] [access_compat:error] [pid 3024361:tid 3024361] [client 172.202.95.21:34068] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:14:16.572219 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.61:62296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:16.572836 2026] [authz_core:error] [pid 3023935:tid 3023935] [client 57.141.0.61:62296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:16.857384 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.32:28196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:16.858014 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.32:28196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:16.889835 2026] [core:error] [pid 3025005:tid 3025005] [client 57.141.0.26:45958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:16.889859 2026] [core:error] [pid 3025005:tid 3025005] [client 57.141.0.26:45958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:17.327405 2026] [ssl:error] [pid 3017773:tid 3017773] (EAI 2)Name or service not known: [client 144.76.19.72:60616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:17.327438 2026] [ssl:error] [pid 3017773:tid 3017773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:17.381880 2026] [ssl:error] [pid 3019768:tid 3019768] (EAI 2)Name or service not known: [client 144.76.19.72:60630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:17.381906 2026] [ssl:error] [pid 3019768:tid 3019768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:17.431961 2026] [access_compat:error] [pid 3025093:tid 3025093] [client 125.176.202.122:57447] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:17.722872 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.29:55876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:17.723510 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.29:55876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:17.807058 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.68:39940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:17.807694 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.68:39940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:17.862484 2026] [access_compat:error] [pid 3013378:tid 3013378] [client 103.72.86.239:38042] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:17.936387 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.10:33360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:17.937018 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.10:33360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:18.016816 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.71:28124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:18.017458 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.71:28124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:18.316852 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.50:62556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:18.317518 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.50:62556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:18.640668 2026] [access_compat:error] [pid 3017773:tid 3017773] [client 176.241.66.87:17061] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:19.051634 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.68:39954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:19.052267 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.68:39954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:19.057853 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.11:55388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:19.058493 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.11:55388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:19.226299 2026] [core:error] [pid 3023932:tid 3023932] [client 66.249.66.39:56002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:19.226335 2026] [core:error] [pid 3023932:tid 3023932] [client 66.249.66.39:56002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:19.235672 2026] [ssl:error] [pid 3023892:tid 3023892] (70014)End of file found: [client 216.73.216.199:48147] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:19.564683 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.3:60346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:19.565334 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.3:60346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:19.568690 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:14:19.626253 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.66:52944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:19.626876 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 57.141.0.66:52944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:20.186253 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.49:47726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:20.186924 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.49:47726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:20.359802 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.34:27038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:20.360537 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.34:27038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:20.439656 2026] [ssl:error] [pid 3017771:tid 3017771] (EAI 2)Name or service not known: [client 144.76.19.72:39726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:20.439690 2026] [ssl:error] [pid 3017771:tid 3017771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:20.492726 2026] [ssl:error] [pid 3017773:tid 3017773] (EAI 2)Name or service not known: [client 144.76.19.72:39738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:20.492757 2026] [ssl:error] [pid 3017773:tid 3017773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:20.533863 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:20.634543 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.8:34896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:20.635171 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.8:34896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:20.715114 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:20.961171 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.036785 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.071113 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.30:42176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:21.071739 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.30:42176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:21.172292 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.353627 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.429020 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.499824 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.49:47738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:21.500468 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.49:47738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:21.535591 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.704889 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.786365 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.879122 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:21.951594 2026] [security2:error] [pid 3025091:tid 3025091] [client 216.73.216.199:13479] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/pdo_mysqlnd.ini"] [unique_id "amsyDarXO0chUKEnmm0J-QAAAB0"]
[Thu Jul 30 12:14:21.951885 2026] [security2:error] [pid 3025091:tid 3025091] [client 216.73.216.199:13479] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/pdo_mysqlnd.ini"] [unique_id "amsyDarXO0chUKEnmm0J-QAAAB0"]
[Thu Jul 30 12:14:21.952123 2026] [security2:error] [pid 3025091:tid 3025091] [client 216.73.216.199:13479] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/pdo_mysqlnd.ini"] [unique_id "amsyDarXO0chUKEnmm0J-QAAAB0"]
[Thu Jul 30 12:14:21.969596 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.058647 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.088635 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.15:63516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:22.089262 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.15:63516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:22.135261 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.232767 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.319400 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.12:37758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:22.320023 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.12:37758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:22.418287 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.473608 2026] [access_compat:error] [pid 3013341:tid 3013341] [client 125.176.202.122:57576] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:22.518807 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.607693 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.609366 2026] [security2:error] [pid 3017773:tid 3017773] [client 49.51.38.193:54384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amsyDoDVKB2PsmB59OCO0AAAAA8"]
[Thu Jul 30 12:14:22.721774 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.8:34906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:22.722412 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.8:34906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:22.723054 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.810090 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:22.943673 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.66:54630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:22.944329 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.66:54630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:22.955375 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.1:58624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:22.956007 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.1:58624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:22.995324 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:23.088949 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:23.292220 2026] [access_compat:error] [pid 3021925:tid 3021925] [client 176.241.66.87:53650] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:23.546706 2026] [ssl:error] [pid 3016066:tid 3016066] (EAI 2)Name or service not known: [client 144.76.19.72:39748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:23.546742 2026] [ssl:error] [pid 3016066:tid 3016066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:23.557421 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:23.602518 2026] [ssl:error] [pid 3025592:tid 3025592] (EAI 2)Name or service not known: [client 144.76.19.72:39752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:23.602553 2026] [ssl:error] [pid 3025592:tid 3025592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:23.618481 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.27:65146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:23.619136 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.27:65146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:23.630192 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.3:60358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:23.630815 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.3:60358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:23.639266 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:23.656487 2026] [access_compat:error] [pid 3015539:tid 3015539] [client 157.20.138.62:61901] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:23.760666 2026] [security2:error] [pid 3025042:tid 3025042] [client 49.51.38.193:37406] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amsyD8E7ZGlXXFGucyVOyAAAAAo"], referer: http://www.hazardous-materials.co.uk
[Thu Jul 30 12:14:23.803667 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:23.888230 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:23.969551 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:23.985440 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.68:39956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:23.986075 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.68:39956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:24.062556 2026] [ssl:error] [pid 3025091:tid 3025091] (70014)End of file found: [client 216.73.216.199:13479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:24.066271 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:24.175755 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.39:35290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:24.176409 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.39:35290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:24.344336 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:24.393967 2026] [security2:error] [pid 3027695:tid 3027695] [client 170.106.192.3:38676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kirmond.com"] [uri "/"] [unique_id "amsyEEaZqjkxyByQpExK1AAAABM"]
[Thu Jul 30 12:14:24.397267 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 170.106.192.3:38676] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 12:14:24.422572 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:24.538401 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:24.695160 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:24.749062 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.58:31662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:24.749692 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.58:31662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:24.816440 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:24.824306 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.65:48436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:24.824925 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.65:48436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:24.892094 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:25.090559 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:25.281852 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.32:58326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:25.282489 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.32:58326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:25.343914 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:25.428088 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:25.535318 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:25.624852 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:25.769869 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:25.928074 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.170363 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.246814 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.50:31084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:26.247436 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.50:31084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:26.249117 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.440022 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.528322 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.542954 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.34:27046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:26.543598 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.34:27046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:26.616411 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.655693 2026] [ssl:error] [pid 3025636:tid 3025636] (EAI 2)Name or service not known: [client 144.76.19.72:39760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:26.655733 2026] [ssl:error] [pid 3025636:tid 3025636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:26.733419 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.751003 2026] [ssl:error] [pid 3016066:tid 3016066] (EAI 2)Name or service not known: [client 144.76.19.72:39772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:26.751035 2026] [ssl:error] [pid 3016066:tid 3016066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:26.851458 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:26.971093 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.68:59458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:26.971724 2026] [authz_core:error] [pid 3004769:tid 3004769] [client 57.141.0.68:59458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:27.120965 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:27.198340 2026] [cgi:error] [pid 3014702:tid 3014702] [client 4.184.185.91:17284] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:27.303670 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.71:57028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:27.304318 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.71:57028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:27.530006 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.61:24972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:27.530658 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.61:24972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:27.722174 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.48:59424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:27.722834 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.48:59424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:27.828485 2026] [cgi:error] [pid 3022845:tid 3022845] [client 4.184.185.91:17310] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:27.849550 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.32:58328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:27.850191 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.32:58328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:27.870597 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 66.249.66.34:57367] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:14:27.873349 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 66.249.66.34:57367] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:14:27.916252 2026] [cgi:error] [pid 3022845:tid 3022845] [client 4.184.185.91:17310] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 12:14:28.367665 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 103.72.86.239:39087] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:28.517274 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.39:41538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:28.517893 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.39:41538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:28.899435 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.3:41288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:28.900050 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.3:41288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:29.114908 2026] [access_compat:error] [pid 3026897:tid 3026897] [client 176.241.66.87:17677] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:29.239306 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.22:62512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:29.239931 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.22:62512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:29.328773 2026] [core:error] [pid 3025089:tid 3025089] [client 66.249.66.167:60648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:29.328800 2026] [core:error] [pid 3025089:tid 3025089] [client 66.249.66.167:60648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:29.520934 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.18:50316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:29.521592 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.18:50316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:29.866858 2026] [ssl:error] [pid 3028231:tid 3028231] (EAI 2)Name or service not known: [client 144.76.19.72:54046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:29.866897 2026] [ssl:error] [pid 3028231:tid 3028231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:29.913287 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.33:40480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:29.913900 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.33:40480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:29.924740 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:54058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:29.924789 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:30.061457 2026] [lsapi:warn] [pid 3017819:tid 3017819] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:14:30.095425 2026] [ssl:error] [pid 3025592:tid 3025592] (70014)End of file found: [client 216.73.216.199:32087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:30.348376 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.8:53144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:30.348998 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.8:53144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:30.393046 2026] [ssl:error] [pid 3024363:tid 3024363] (70014)End of file found: [client 216.73.216.199:41791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:30.561467 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.20:20604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:30.562105 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.20:20604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:30.706715 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.41:41902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:30.707364 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.41:41902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:31.542216 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.44:30960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:31.542846 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.44:30960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:31.762335 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.4:27814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:31.762955 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.4:27814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:32.274428 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.41:41918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:32.275058 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.41:41918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:32.386821 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.20:20606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:32.387453 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.20:20606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:32.626052 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.20:20610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:32.626682 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.20:20610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:32.813711 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.66:23152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:32.814359 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.66:23152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:33.043376 2026] [ssl:error] [pid 3025090:tid 3025090] (EAI 2)Name or service not known: [client 144.76.19.72:54074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:33.043426 2026] [ssl:error] [pid 3025090:tid 3025090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:33.074042 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.37:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:33.074683 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.37:27970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:33.098292 2026] [ssl:error] [pid 3026897:tid 3026897] (EAI 2)Name or service not known: [client 144.76.19.72:54078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:33.098338 2026] [ssl:error] [pid 3026897:tid 3026897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:33.218276 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.12:31734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:33.218911 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.12:31734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:33.598453 2026] [access_compat:error] [pid 3013378:tid 3013378] [client 125.176.202.122:57805] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:33.829746 2026] [access_compat:error] [pid 3004769:tid 3004769] [client 176.241.66.87:18039] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:33.981790 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.40:55900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:33.982436 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.40:55900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:34.210686 2026] [access_compat:error] [pid 3020504:tid 3020504] [client 157.20.138.62:62499] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:34.766669 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.37:27986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:34.767294 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.37:27986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:34.794719 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.2:34812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:34.795347 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.2:34812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:35.031561 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.2:34814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:35.032183 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.2:34814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:35.122064 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.13:42280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:35.122692 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.13:42280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:35.455843 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.16:21452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:35.456472 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.16:21452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:35.562688 2026] [access_compat:error] [pid 3020953:tid 3020953] [client 103.25.250.251:60204] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:35.589403 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.2:34828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:35.590027 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.2:34828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:35.951598 2026] [ssl:error] [pid 3023935:tid 3023935] (70014)End of file found: [client 216.73.216.199:35978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:36.153335 2026] [ssl:error] [pid 3017817:tid 3017817] (EAI 2)Name or service not known: [client 144.76.19.72:54094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:36.153376 2026] [ssl:error] [pid 3017817:tid 3017817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:36.207786 2026] [ssl:error] [pid 3019768:tid 3019768] (EAI 2)Name or service not known: [client 144.76.19.72:54104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:36.207825 2026] [ssl:error] [pid 3019768:tid 3019768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:36.237626 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.36:64398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:36.238259 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.36:64398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:36.645276 2026] [core:error] [pid 3024363:tid 3024363] (13)Permission denied: [client 216.73.216.199:40497] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:0b/eject
[Thu Jul 30 12:14:36.923788 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.9:30636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:36.924433 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 57.141.0.9:30636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:37.207228 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.53:40880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:37.207855 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.53:40880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:37.245004 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.12:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:37.245645 2026] [authz_core:error] [pid 3013341:tid 3013341] [client 57.141.0.12:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:37.416419 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.32:37094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:37.417039 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.32:37094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:37.467651 2026] [security2:error] [pid 3017817:tid 3017817] [client 102.129.81.21:21245] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyHfdmqyl8JsbY-BT8bQAAABI"]
[Thu Jul 30 12:14:37.467710 2026] [security2:error] [pid 3017817:tid 3017817] [client 102.129.81.21:21245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyHfdmqyl8JsbY-BT8bQAAABI"]
[Thu Jul 30 12:14:37.468010 2026] [security2:error] [pid 3017817:tid 3017817] [client 102.129.81.21:21245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyHfdmqyl8JsbY-BT8bQAAABI"]
[Thu Jul 30 12:14:37.919307 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.56:57044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:37.919930 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.56:57044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:38.077663 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.28:56718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:38.078279 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.28:56718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:38.355094 2026] [security2:error] [pid 3024363:tid 3024363] [client 216.73.216.199:40497] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/req.conf"] [unique_id "amsyHsHvhZNfLRmQpE0YpAAAADA"]
[Thu Jul 30 12:14:38.355393 2026] [security2:error] [pid 3024363:tid 3024363] [client 216.73.216.199:40497] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/req.conf"] [unique_id "amsyHsHvhZNfLRmQpE0YpAAAADA"]
[Thu Jul 30 12:14:38.355640 2026] [security2:error] [pid 3024363:tid 3024363] [client 216.73.216.199:40497] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/req.conf"] [unique_id "amsyHsHvhZNfLRmQpE0YpAAAADA"]
[Thu Jul 30 12:14:38.385405 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.29:22178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:38.386031 2026] [authz_core:error] [pid 3021589:tid 3021589] [client 57.141.0.29:22178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:39.113119 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.18:32644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:39.113741 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.18:32644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:39.249800 2026] [authz_core:error] [pid 3012141:tid 3012141] [client 66.132.195.31:36676] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 12:14:39.262172 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:54118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:39.262196 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:39.315100 2026] [ssl:error] [pid 3021589:tid 3021589] (EAI 2)Name or service not known: [client 144.76.19.72:54124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:39.315127 2026] [ssl:error] [pid 3021589:tid 3021589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:39.548485 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.24:37488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:39.549115 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.24:37488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:39.806720 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.38:42384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:39.807354 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.38:42384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:40.367796 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.43:44814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:40.368438 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.43:44814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:40.515426 2026] [security2:error] [pid 3025042:tid 3025042] [client 43.153.34.133:12045] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyIME7ZGlXXFGucyVPDgAAAAo"]
[Thu Jul 30 12:14:40.515479 2026] [security2:error] [pid 3025042:tid 3025042] [client 43.153.34.133:12045] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyIME7ZGlXXFGucyVPDgAAAAo"]
[Thu Jul 30 12:14:40.515735 2026] [security2:error] [pid 3025042:tid 3025042] [client 43.153.34.133:12045] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyIME7ZGlXXFGucyVPDgAAAAo"]
[Thu Jul 30 12:14:40.557434 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.37:27992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:40.558055 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.37:27992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:40.612948 2026] [lsapi:warn] [pid 3012141:tid 3012141] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:14:40.705834 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.10:25702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:40.706470 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.10:25702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:40.768484 2026] [ssl:error] [pid 3014702:tid 3014702] (70014)End of file found: [client 216.73.216.199:28872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:41.030301 2026] [security2:error] [pid 3028231:tid 3028231] [client 185.191.171.4:57348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,331.0/prev_next,prev.html"] [unique_id "amsyIYMJB7nmDI4y9C-AsgAAACo"]
[Thu Jul 30 12:14:41.049704 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.23:60950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:41.050352 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.23:60950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:41.370770 2026] [ssl:error] [pid 3024363:tid 3024363] (70014)End of file found: [client 216.73.216.199:40497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:41.532620 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.51:25444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:41.533243 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.51:25444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:41.718671 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.47:43874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:41.719303 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.47:43874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:41.832172 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.6:35470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:41.832808 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.6:35470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:41.972736 2026] [ssl:error] [pid 3019714:tid 3019714] (70014)End of file found: [client 216.73.216.199:30396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:42.299308 2026] [security2:error] [pid 3023935:tid 3023935] [client 85.208.96.202:17292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8141.0/prev_next,next.html"] [unique_id "amsyInlRSOBGnTly4o-EfQAAABw"]
[Thu Jul 30 12:14:42.370168 2026] [ssl:error] [pid 3017773:tid 3017773] (EAI 2)Name or service not known: [client 144.76.19.72:21316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:42.370202 2026] [ssl:error] [pid 3017773:tid 3017773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:42.379880 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.61:61162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:42.380538 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.61:61162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:42.426462 2026] [ssl:error] [pid 3020504:tid 3020504] (EAI 2)Name or service not known: [client 144.76.19.72:21320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:42.426490 2026] [ssl:error] [pid 3020504:tid 3020504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:42.579299 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.68:37078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:42.579925 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.68:37078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:42.646595 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.37:25722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:42.647241 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.37:25722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:42.963288 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.26:46526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:42.963911 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.26:46526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:43.356244 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.23:60956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:43.356904 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.23:60956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:43.625435 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.28:61594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:43.626090 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.28:61594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:43.683059 2026] [security2:error] [pid 3025091:tid 3025091] [client 43.153.34.133:13425] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyI6rXO0chUKEnmm0KBgAAAB0"]
[Thu Jul 30 12:14:43.683131 2026] [security2:error] [pid 3025091:tid 3025091] [client 43.153.34.133:13425] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyI6rXO0chUKEnmm0KBgAAAB0"]
[Thu Jul 30 12:14:43.683374 2026] [security2:error] [pid 3025091:tid 3025091] [client 43.153.34.133:13425] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyI6rXO0chUKEnmm0KBgAAAB0"]
[Thu Jul 30 12:14:44.367360 2026] [access_compat:error] [pid 3021925:tid 3021925] [client 176.241.66.87:18647] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:44.694047 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.8:46704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:44.694684 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.8:46704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:44.716381 2026] [access_compat:error] [pid 3020504:tid 3020504] [client 157.20.138.62:63107] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:44.798214 2026] [security2:error] [pid 3023935:tid 3023935] [client 85.208.96.193:35376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3095.0/prev_next,prev.html"] [unique_id "amsyJHlRSOBGnTly4o-EfwAAABw"]
[Thu Jul 30 12:14:44.915893 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.43:44824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:44.916552 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.43:44824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:44.979687 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.41:40960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:44.980314 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.41:40960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:45.213409 2026] [access_compat:error] [pid 3019768:tid 3019768] [client 125.176.202.122:58035] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:45.487031 2026] [ssl:error] [pid 3026897:tid 3026897] (EAI 2)Name or service not known: [client 144.76.19.72:21336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:45.487062 2026] [ssl:error] [pid 3026897:tid 3026897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:45.544650 2026] [ssl:error] [pid 3019810:tid 3019810] (EAI 2)Name or service not known: [client 144.76.19.72:21352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:45.544695 2026] [ssl:error] [pid 3019810:tid 3019810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:45.713292 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.2:57140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:45.713913 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.2:57140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:45.992917 2026] [access_compat:error] [pid 3028451:tid 3028451] [client 103.25.250.251:4207] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:46.277459 2026] [security2:error] [pid 3020911:tid 3020911] [client 43.162.109.249:52620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amsyJneQLwlxHDOiAds5BQAAABA"]
[Thu Jul 30 12:14:46.602756 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.65:28388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:46.603385 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.65:28388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:46.699054 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.3:64718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:46.699693 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.3:64718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:46.769775 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.18:55914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:46.770397 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.18:55914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:47.101805 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.29:32500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:47.102428 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.29:32500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:47.603377 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.21:45922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:47.603997 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.21:45922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:47.705175 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.24:55182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:47.705795 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.24:55182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:48.086677 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.7:39068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:48.087334 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.7:39068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:48.139415 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.42:54894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:48.140058 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.42:54894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:48.599608 2026] [ssl:error] [pid 3028556:tid 3028556] (EAI 2)Name or service not known: [client 144.76.19.72:21364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:48.599639 2026] [ssl:error] [pid 3028556:tid 3028556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:48.656579 2026] [ssl:error] [pid 3028292:tid 3028292] (EAI 2)Name or service not known: [client 144.76.19.72:21372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:48.656658 2026] [ssl:error] [pid 3028292:tid 3028292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:48.772222 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.13:49570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:48.772878 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.13:49570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:48.783869 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 66.249.66.33:57244] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:14:48.786545 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 66.249.66.33:57244] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:14:49.245816 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.3:47328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:49.246458 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.3:47328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:49.444170 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.30:54826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:49.444831 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.30:54826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:49.483705 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.28:61600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:49.484329 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.28:61600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:49.511842 2026] [core:error] [pid 3029126:tid 3029126] [client 57.141.0.54:25818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:49.511866 2026] [core:error] [pid 3029126:tid 3029126] [client 57.141.0.54:25818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:14:49.707827 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.13:49584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:49.708447 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.13:49584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:49.811371 2026] [security2:error] [pid 3020912:tid 3020912] [client 216.73.216.199:47745] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mysqlnd_mysql.ini"] [unique_id "amsyKS3lTM3_g952gUt1VQAAABU"]
[Thu Jul 30 12:14:49.811664 2026] [security2:error] [pid 3020912:tid 3020912] [client 216.73.216.199:47745] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mysqlnd_mysql.ini"] [unique_id "amsyKS3lTM3_g952gUt1VQAAABU"]
[Thu Jul 30 12:14:49.811862 2026] [security2:error] [pid 3020912:tid 3020912] [client 216.73.216.199:47745] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/mysqlnd_mysql.ini"] [unique_id "amsyKS3lTM3_g952gUt1VQAAABU"]
[Thu Jul 30 12:14:50.142357 2026] [access_compat:error] [pid 3029126:tid 3029126] [client 176.241.66.87:54984] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:50.302104 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.39:24332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:50.302726 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.39:24332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:50.631438 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.45:57820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:50.632097 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.45:57820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:50.922544 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.38:57234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:50.923198 2026] [authz_core:error] [pid 3024361:tid 3024361] [client 57.141.0.38:57234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:51.015121 2026] [core:error] [pid 3020912:tid 3020912] (13)Permission denied: [client 216.73.216.199:47745] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty55/subsystem/ttyS2/close_delay
[Thu Jul 30 12:14:51.094863 2026] [lsapi:warn] [pid 3025090:tid 3025090] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:14:51.161342 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.66:52798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:51.161969 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.66:52798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:51.434888 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.59:62654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:51.435542 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.59:62654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:51.635265 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.65:28398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:51.635888 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.65:28398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:51.714036 2026] [ssl:error] [pid 3022845:tid 3022845] (EAI 2)Name or service not known: [client 144.76.19.72:21308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:51.714061 2026] [ssl:error] [pid 3022845:tid 3022845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:51.768209 2026] [ssl:error] [pid 3020953:tid 3020953] (EAI 2)Name or service not known: [client 144.76.19.72:21324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:51.768245 2026] [ssl:error] [pid 3020953:tid 3020953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:52.283666 2026] [access_compat:error] [pid 3017771:tid 3017771] [client 103.25.250.251:60206] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:52.463938 2026] [authz_core:error] [pid 3028451:tid 3028451] [client 57.141.0.38:57238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:52.464569 2026] [authz_core:error] [pid 3028451:tid 3028451] [client 57.141.0.38:57238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:52.476637 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.19:33324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:52.477253 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.19:33324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:52.690895 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.55:37662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:52.691551 2026] [authz_core:error] [pid 3014702:tid 3014702] [client 57.141.0.55:37662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:53.053835 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.35:32736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:53.054459 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.35:32736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:53.349716 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.33:23346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:53.350339 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.33:23346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:53.434316 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.6:48272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:53.434937 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.6:48272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:53.964284 2026] [ssl:error] [pid 3017823:tid 3017823] (70014)End of file found: [client 216.73.216.199:10384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:54.414649 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.29:36116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:54.415281 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.29:36116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:54.775329 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.13:64932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:54.775949 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.13:64932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:54.826343 2026] [ssl:error] [pid 3024314:tid 3024314] (EAI 2)Name or service not known: [client 144.76.19.72:21340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:54.826382 2026] [ssl:error] [pid 3024314:tid 3024314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:54.882582 2026] [ssl:error] [pid 3025592:tid 3025592] (EAI 2)Name or service not known: [client 144.76.19.72:21344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:54.882605 2026] [ssl:error] [pid 3025592:tid 3025592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:54.886921 2026] [access_compat:error] [pid 3024156:tid 3024156] [client 176.241.66.87:19273] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:54.908752 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.22:33994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:54.909397 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.22:33994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:55.264393 2026] [access_compat:error] [pid 3016066:tid 3016066] [client 157.20.138.62:63711] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:55.807327 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.29:36128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:55.807957 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.29:36128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:55.868922 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.8:50766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:55.869583 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.8:50766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:56.179647 2026] [ssl:error] [pid 3022845:tid 3022845] (70014)End of file found: [client 216.73.216.199:40752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:56.193086 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.68:42872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:56.193707 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.68:42872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:56.278704 2026] [security2:error] [pid 3028291:tid 3028291] [client 114.119.146.111:47795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~104,14/request_format~html"] [unique_id "amsyMJ1qJbBv7_3rlZcDQAAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~104,14/request_format~html
[Thu Jul 30 12:14:56.438476 2026] [access_compat:error] [pid 3025637:tid 3025637] [client 125.176.202.122:58262] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:56.458693 2026] [access_compat:error] [pid 3017817:tid 3017817] [client 103.25.250.251:60207] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:14:56.645238 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.39:40058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:56.645854 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.39:40058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:56.860700 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.7:42932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:56.861336 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.7:42932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:57.128277 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.9:42612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:57.128902 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.9:42612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:57.314240 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.71:21564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:57.314875 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.71:21564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:57.383292 2026] [core:error] [pid 3024361:tid 3024361] (13)Permission denied: [client 216.73.216.199:13571] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:14:57.565230 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.48:53272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:57.565846 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.48:53272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:57.620771 2026] [security2:error] [pid 3020912:tid 3020912] [client 114.119.146.111:47799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~104,14/request_format~html"] [unique_id "amsyMS3lTM3_g952gUt1XgAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~104,14/request_format~html
[Thu Jul 30 12:14:57.684247 2026] [ssl:error] [pid 3024361:tid 3024361] (70014)End of file found: [client 216.73.216.199:13571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:57.712087 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.62:23832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:57.712722 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.62:23832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:57.936185 2026] [ssl:error] [pid 3017773:tid 3017773] (EAI 2)Name or service not known: [client 144.76.19.72:21356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:57.936220 2026] [ssl:error] [pid 3017773:tid 3017773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:57.994582 2026] [ssl:error] [pid 3028291:tid 3028291] (EAI 2)Name or service not known: [client 144.76.19.72:21366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:14:57.994623 2026] [ssl:error] [pid 3028291:tid 3028291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:14:58.139450 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.54:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:58.140110 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.54:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:59.236262 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.51:43442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:59.236892 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.51:43442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:14:59.258418 2026] [security2:error] [pid 3029618:tid 3029618] [client 185.191.171.16:29768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/mountain-lion-rhode-island"] [unique_id "amsyM7SadIn_h92mqi0fVQAAABk"]
[Thu Jul 30 12:14:59.378795 2026] [ssl:error] [pid 3029126:tid 3029126] (70014)End of file found: [client 216.73.216.199:55688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:14:59.516586 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.47:47178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:14:59.517212 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.47:47178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:00.175275 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.52:27170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:00.175899 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.52:27170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:00.615867 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.1:44028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:00.616490 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.1:44028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:00.671054 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.46:60216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:00.671705 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.46:60216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:00.724988 2026] [access_compat:error] [pid 3019810:tid 3019810] [client 176.241.66.87:19523] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:00.888751 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.63:41822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:00.889445 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.63:41822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:01.052145 2026] [ssl:error] [pid 3029661:tid 3029661] (EAI 2)Name or service not known: [client 144.76.19.72:26212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:01.052180 2026] [ssl:error] [pid 3029661:tid 3029661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:01.111651 2026] [ssl:error] [pid 3029617:tid 3029617] (EAI 2)Name or service not known: [client 144.76.19.72:26218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:01.111684 2026] [ssl:error] [pid 3029617:tid 3029617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:01.181449 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.14:39906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:01.182153 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.14:39906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:01.336896 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.70:61426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:01.337539 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.70:61426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:01.383664 2026] [access_compat:error] [pid 3024363:tid 3024363] [client 45.158.164.139:45856] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:15:01.614938 2026] [lsapi:warn] [pid 3029617:tid 3029617] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:15:01.670940 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.5:45630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:01.671612 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.5:45630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:01.881353 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.53:33540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:01.881978 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.53:33540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:02.254292 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.65:40724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:02.254920 2026] [authz_core:error] [pid 3022845:tid 3022845] [client 57.141.0.65:40724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:02.409181 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.50:23714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:02.409814 2026] [authz_core:error] [pid 3020953:tid 3020953] [client 57.141.0.50:23714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:02.698237 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.64:31760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:02.698869 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.64:31760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:03.027636 2026] [authz_core:error] [pid 3020504:tid 3020504] [client 20.100.187.246:10628] AH01630: client denied by server configuration: /home/erskinen/public_html/.well-known/acme-challenge/license.php
[Thu Jul 30 12:15:03.182285 2026] [access_compat:error] [pid 3027695:tid 3027695] [client 103.25.250.251:4208] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:03.510226 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.44:24670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:03.510924 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.44:24670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:03.625919 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.50:23722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:03.626555 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.50:23722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:04.089121 2026] [security2:error] [pid 3024314:tid 3024314] [client 150.5.134.35:54965] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyOMcHLAHkR9Y80MKeCwAAACk"]
[Thu Jul 30 12:15:04.089183 2026] [security2:error] [pid 3024314:tid 3024314] [client 150.5.134.35:54965] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyOMcHLAHkR9Y80MKeCwAAACk"]
[Thu Jul 30 12:15:04.089457 2026] [security2:error] [pid 3024314:tid 3024314] [client 150.5.134.35:54965] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyOMcHLAHkR9Y80MKeCwAAACk"]
[Thu Jul 30 12:15:04.185911 2026] [ssl:error] [pid 3028292:tid 3028292] (EAI 2)Name or service not known: [client 144.76.19.72:26228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:04.185967 2026] [ssl:error] [pid 3028292:tid 3028292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:04.191524 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 12:15:04.244122 2026] [ssl:error] [pid 3017817:tid 3017817] (EAI 2)Name or service not known: [client 144.76.19.72:26244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:04.244151 2026] [ssl:error] [pid 3017817:tid 3017817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:04.277278 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.48:32518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:04.277902 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.48:32518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:04.562062 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log, referer: https://mail.kirmond.co.uk:443/lisichka.co.uk
[Thu Jul 30 12:15:04.562926 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini, referer: https://mail.kirmond.co.uk:443/lisichka.co.uk
[Thu Jul 30 12:15:04.681271 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.13:34220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:04.681889 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.13:34220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:04.690960 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.18:54196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:04.691586 2026] [authz_core:error] [pid 3025592:tid 3025592] [client 57.141.0.18:54196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:04.969256 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.15:37800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:04.969887 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.15:37800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:05.210898 2026] [core:error] [pid 3029658:tid 3029658] (13)Permission denied: [client 216.73.216.199:36345] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty62/subsystem/ttyS3/close_delay
[Thu Jul 30 12:15:05.349306 2026] [security2:error] [pid 3025089:tid 3025089] [client 43.133.191.206:13047] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyOcBZPzzpZr7g-GSBMQAAABg"]
[Thu Jul 30 12:15:05.349356 2026] [security2:error] [pid 3025089:tid 3025089] [client 43.133.191.206:13047] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyOcBZPzzpZr7g-GSBMQAAABg"]
[Thu Jul 30 12:15:05.349626 2026] [security2:error] [pid 3025089:tid 3025089] [client 43.133.191.206:13047] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyOcBZPzzpZr7g-GSBMQAAABg"]
[Thu Jul 30 12:15:05.388677 2026] [access_compat:error] [pid 3024314:tid 3024314] [client 176.241.66.87:19879] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:05.584843 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.32:29372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:05.585461 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.32:29372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:05.738160 2026] [security2:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.kirmond.co.uk"] [uri "/spamp.com"] [unique_id "amsyOYMJB7nmDI4y9C-A0AAAACo"]
[Thu Jul 30 12:15:05.738421 2026] [security2:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.kirmond.co.uk"] [uri "/spamp.com"] [unique_id "amsyOYMJB7nmDI4y9C-A0AAAACo"]
[Thu Jul 30 12:15:05.738687 2026] [security2:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.kirmond.co.uk"] [uri "/spamp.com"] [unique_id "amsyOYMJB7nmDI4y9C-A0AAAACo"]
[Thu Jul 30 12:15:05.809097 2026] [access_compat:error] [pid 3029126:tid 3029126] [client 157.20.138.62:64310] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:05.847693 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.52:27182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:05.848311 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.52:27182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:05.921273 2026] [security2:error] [pid 3025592:tid 3025592] [client 85.208.98.31:32854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/product/U"] [unique_id "amsyOYD3--JBDIoIVaTgTwAAACI"]
[Thu Jul 30 12:15:06.078131 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.67:53754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:06.078761 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.67:53754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:06.104659 2026] [core:error] [pid 3026897:tid 3026897] [client 57.141.0.49:65274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:06.104689 2026] [core:error] [pid 3026897:tid 3026897] [client 57.141.0.49:65274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:06.272674 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.45:28488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:06.273297 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.45:28488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:06.389039 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.67:53766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:06.389674 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.67:53766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:06.966325 2026] [access_compat:error] [pid 3029618:tid 3029618] [client 125.176.202.122:58486] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:07.021777 2026] [core:error] [pid 3024156:tid 3024156] (13)Permission denied: [client 216.73.216.199:60882] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty31/subsystem/ttyS3/close_delay
[Thu Jul 30 12:15:07.069971 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.63:36710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:07.070615 2026] [authz_core:error] [pid 3015539:tid 3015539] [client 57.141.0.63:36710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:07.129530 2026] [access_compat:error] [pid 3017819:tid 3017819] [client 103.25.250.251:60208] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:07.303541 2026] [ssl:error] [pid 3019714:tid 3019714] (EAI 2)Name or service not known: [client 144.76.19.72:26264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:07.303569 2026] [ssl:error] [pid 3019714:tid 3019714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:07.359386 2026] [ssl:error] [pid 3028556:tid 3028556] (EAI 2)Name or service not known: [client 144.76.19.72:26272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:07.359420 2026] [ssl:error] [pid 3028556:tid 3028556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:07.649886 2026] [cgi:error] [pid 3029658:tid 3029658] [client 216.73.216.199:36345] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/ssl-inetd-serv.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:15:07.649938 2026] [cgi:error] [pid 3029658:tid 3029658] [client 216.73.216.199:36345] End of script output before headers: ssl-inetd-serv.pl
[Thu Jul 30 12:15:07.668215 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.45:55600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:07.668831 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.45:55600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:07.720695 2026] [core:error] [pid 3013378:tid 3013378] [client 66.249.66.168:64251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:07.720721 2026] [core:error] [pid 3013378:tid 3013378] [client 66.249.66.168:64251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:07.877269 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.2:26088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:07.877920 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.2:26088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:08.155669 2026] [authz_core:error] [pid 3030075:tid 3030075] [client 57.141.0.48:32536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:08.156295 2026] [authz_core:error] [pid 3030075:tid 3030075] [client 57.141.0.48:32536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:08.410166 2026] [authz_core:error] [pid 3029658:tid 3029658] [client 57.141.0.54:37740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:08.410796 2026] [authz_core:error] [pid 3029658:tid 3029658] [client 57.141.0.54:37740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:08.596183 2026] [cgi:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://mail.kirmond.co.uk:443/cgi-bin
[Thu Jul 30 12:15:09.040366 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.3:50746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:09.040994 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.3:50746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:09.119314 2026] [security2:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.kirmond.co.uk"] [uri "/eraten.com"] [unique_id "amsyPYMJB7nmDI4y9C-A1wAAACo"]
[Thu Jul 30 12:15:09.119596 2026] [security2:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.kirmond.co.uk"] [uri "/eraten.com"] [unique_id "amsyPYMJB7nmDI4y9C-A1wAAACo"]
[Thu Jul 30 12:15:09.119823 2026] [security2:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.kirmond.co.uk"] [uri "/eraten.com"] [unique_id "amsyPYMJB7nmDI4y9C-A1wAAACo"]
[Thu Jul 30 12:15:09.236363 2026] [security2:error] [pid 3019714:tid 3019714] [client 43.133.191.206:27469] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyPXoF3vuTVpQbtEimcwAAAAE"]
[Thu Jul 30 12:15:09.236411 2026] [security2:error] [pid 3019714:tid 3019714] [client 43.133.191.206:27469] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyPXoF3vuTVpQbtEimcwAAAAE"]
[Thu Jul 30 12:15:09.236672 2026] [security2:error] [pid 3019714:tid 3019714] [client 43.133.191.206:27469] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyPXoF3vuTVpQbtEimcwAAAAE"]
[Thu Jul 30 12:15:09.573309 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.28:20136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:09.573936 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.28:20136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:09.738929 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.50:23738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:09.739561 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.50:23738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:09.988007 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.35:59052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:09.988643 2026] [authz_core:error] [pid 3028292:tid 3028292] [client 57.141.0.35:59052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:10.231204 2026] [security2:error] [pid 3021347:tid 3021347] [client 20.171.55.167:9209] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.lucynaden.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsyPi0CZcigqJwWFbjyXwAAAAY"]
[Thu Jul 30 12:15:10.231356 2026] [security2:error] [pid 3021347:tid 3021347] [client 20.171.55.167:9209] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.lucynaden.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amsyPi0CZcigqJwWFbjyXwAAAAY"]
[Thu Jul 30 12:15:10.260386 2026] [security2:error] [pid 3021347:tid 3021347] [client 20.171.55.167:9209] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.lucynaden.com"] [uri "/403.shtml"] [unique_id "amsyPi0CZcigqJwWFbjyXwAAAAY"]
[Thu Jul 30 12:15:10.297592 2026] [authz_core:error] [pid 3030182:tid 3030182] [client 57.141.0.39:34026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:10.298214 2026] [authz_core:error] [pid 3030182:tid 3030182] [client 57.141.0.39:34026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:10.332442 2026] [ssl:error] [pid 3024156:tid 3024156] (70014)End of file found: [client 216.73.216.199:60882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:10.412975 2026] [ssl:error] [pid 3028292:tid 3028292] (EAI 2)Name or service not known: [client 144.76.19.72:40992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:10.413000 2026] [ssl:error] [pid 3028292:tid 3028292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:10.436470 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.21:48420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:10.437108 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.21:48420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:10.466030 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:41006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:10.466058 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:10.470445 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.42:49552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:10.471061 2026] [authz_core:error] [pid 3025637:tid 3025637] [client 57.141.0.42:49552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:11.222629 2026] [access_compat:error] [pid 3019810:tid 3019810] [client 176.241.66.87:20165] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:11.579281 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 66.132.195.31:29910] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log, referer: https://mail.kirmond.co.uk:443/thestringman.co.uk
[Thu Jul 30 12:15:11.829884 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.63:36756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:11.830516 2026] [authz_core:error] [pid 3019714:tid 3019714] [client 57.141.0.63:36756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:11.860785 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.48:45536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:11.861400 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.48:45536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:11.870131 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.54:37744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:11.870757 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.54:37744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:11.961840 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.2:26094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:11.962466 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.2:26094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:12.186154 2026] [lsapi:warn] [pid 3029661:tid 3029661] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:15:12.280679 2026] [security2:error] [pid 3025091:tid 3025091] [client 49.51.183.220:49102] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "pamporovoexpress.com"] [uri "/"] [unique_id "amsyQKrXO0chUKEnmm0KDgAAAB0"]
[Thu Jul 30 12:15:12.343377 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.38:25264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:12.344013 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.38:25264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:12.780690 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.37:33256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:12.781315 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.37:33256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:13.500324 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.40:53676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:13.500949 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.40:53676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:13.504729 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.22:43250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:13.505342 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.22:43250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:13.521099 2026] [ssl:error] [pid 3024314:tid 3024314] (EAI 2)Name or service not known: [client 144.76.19.72:41014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:13.521123 2026] [ssl:error] [pid 3024314:tid 3024314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:13.577334 2026] [ssl:error] [pid 3025636:tid 3025636] (EAI 2)Name or service not known: [client 144.76.19.72:41016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:13.577364 2026] [ssl:error] [pid 3025636:tid 3025636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:13.692435 2026] [security2:error] [pid 3023827:tid 3023827] [client 49.51.183.220:35014] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "pamporovoexpress.com"] [uri "/"] [unique_id "amsyQTUtVn7VTFRfXChKtwAAAAI"], referer: http://pamporovoexpress.com
[Thu Jul 30 12:15:14.010669 2026] [security2:error] [pid 3025636:tid 3025636] [client 129.28.84.30:42280] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "craft-buddies.co.uk"] [uri "/"] [unique_id "amsyQq_BXSqFNOF4S6lj0AAAACQ"]
[Thu Jul 30 12:15:14.055046 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.39:34038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:14.055722 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.39:34038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:14.423673 2026] [access_compat:error] [pid 3029618:tid 3029618] [client 125.176.202.122:58578] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:14.552466 2026] [ssl:error] [pid 3025089:tid 3025089] (70014)End of file found: [client 216.73.216.199:63086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:14.564758 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.15:37814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:14.565379 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.15:37814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:14.643395 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.43:29020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:14.644016 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.43:29020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:14.959838 2026] [security2:error] [pid 3030417:tid 3030417] [client 49.51.183.220:35610] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "amsyQn2UvuRx3yzQ7nu4ZQAAABw"], referer: https://pamporovoexpress.com/
[Thu Jul 30 12:15:15.860163 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.22:43260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:15.860782 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.22:43260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:15.923319 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 176.241.66.87:20533] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:16.288643 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.61:61664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:16.289270 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.61:61664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:16.375020 2026] [access_compat:error] [pid 3024314:tid 3024314] [client 157.20.138.62:64913] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:16.501576 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.45:44652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:16.502201 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.45:44652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:16.503911 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.68:46220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:16.504526 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.68:46220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:16.632264 2026] [ssl:error] [pid 3025042:tid 3025042] (EAI 2)Name or service not known: [client 144.76.19.72:41026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:16.632309 2026] [ssl:error] [pid 3025042:tid 3025042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:16.685444 2026] [ssl:error] [pid 3029617:tid 3029617] (EAI 2)Name or service not known: [client 144.76.19.72:41040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:16.685473 2026] [ssl:error] [pid 3029617:tid 3029617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:17.068225 2026] [authz_core:error] [pid 3030075:tid 3030075] [client 57.141.0.59:41512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:17.068846 2026] [authz_core:error] [pid 3030075:tid 3030075] [client 57.141.0.59:41512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:17.108996 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.5:49654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:17.109632 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.5:49654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:17.860016 2026] [access_compat:error] [pid 3024156:tid 3024156] [client 103.25.250.251:60209] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:17.869962 2026] [ssl:error] [pid 3025592:tid 3025592] (70014)End of file found: [client 216.73.216.199:15857] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:18.264113 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.24:58280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:18.264741 2026] [authz_core:error] [pid 3028506:tid 3028506] [client 57.141.0.24:58280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:18.435562 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.59:41528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:18.436190 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.59:41528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:18.463445 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.6:28792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:18.464060 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.6:28792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:18.758421 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.25:61582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:18.759087 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.25:61582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:18.769322 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.29:61324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:18.769950 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.29:61324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:18.882628 2026] [access_compat:error] [pid 3030609:tid 3030609] [client 2.189.5.162:34706] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:15:19.080798 2026] [ssl:error] [pid 3029576:tid 3029576] (70014)End of file found: [client 216.73.216.199:25042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:19.084278 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.4:26596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:19.084919 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.4:26596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:19.300013 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.69:41120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:19.300648 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.69:41120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:19.407595 2026] [access_compat:error] [pid 3030607:tid 3030607] [client 125.176.202.122:58715] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:19.610606 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.66:48024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:19.611230 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.66:48024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:19.740769 2026] [ssl:error] [pid 3029659:tid 3029659] (EAI 2)Name or service not known: [client 144.76.19.72:55354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:19.740808 2026] [ssl:error] [pid 3029659:tid 3029659] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:19.911568 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:55366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:19.911597 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:20.233450 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.46:37920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:20.234087 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.46:37920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:20.248302 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.14:28148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:20.248937 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.14:28148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:20.266519 2026] [authz_core:error] [pid 3030652:tid 3030652] [client 57.141.0.25:61592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:20.267148 2026] [authz_core:error] [pid 3030652:tid 3030652] [client 57.141.0.25:61592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:20.579003 2026] [authz_core:error] [pid 3030654:tid 3030654] [client 57.141.0.48:54462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:20.579665 2026] [authz_core:error] [pid 3030654:tid 3030654] [client 57.141.0.48:54462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:20.664238 2026] [authz_core:error] [pid 3030656:tid 3030656] [client 57.141.0.23:46774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:20.664889 2026] [authz_core:error] [pid 3030656:tid 3030656] [client 57.141.0.23:46774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:21.129822 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.56:37732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:21.130475 2026] [authz_core:error] [pid 3025089:tid 3025089] [client 57.141.0.56:37732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:21.687272 2026] [access_compat:error] [pid 3030654:tid 3030654] [client 176.241.66.87:56638] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:21.915566 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.60:24948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:21.916203 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.60:24948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:22.137102 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.47:46018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:22.137720 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.47:46018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:22.327283 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.58:38502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:22.327908 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.58:38502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:22.438513 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.58:38512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:22.439140 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.58:38512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:22.660130 2026] [lsapi:warn] [pid 3030654:tid 3030654] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:15:22.945479 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.71:55006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:22.946119 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.71:55006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:22.948816 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.71:55012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:22.949419 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.71:55012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:23.001604 2026] [ssl:error] [pid 3021347:tid 3021347] (EAI 2)Name or service not known: [client 144.76.19.72:55372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:23.001629 2026] [ssl:error] [pid 3021347:tid 3021347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:23.053602 2026] [ssl:error] [pid 3030562:tid 3030562] (EAI 2)Name or service not known: [client 144.76.19.72:55380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:23.053629 2026] [ssl:error] [pid 3030562:tid 3030562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:23.942217 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.4:44890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:23.942891 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.4:44890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:24.091174 2026] [ssl:error] [pid 3029659:tid 3029659] (70014)End of file found: [client 216.73.216.199:1575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:24.108776 2026] [access_compat:error] [pid 3025592:tid 3025592] [client 103.25.250.251:4209] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:24.276844 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.11:55296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:24.277463 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.11:55296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:24.713746 2026] [authz_core:error] [pid 3030656:tid 3030656] [client 57.141.0.4:44892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:24.714401 2026] [authz_core:error] [pid 3030656:tid 3030656] [client 57.141.0.4:44892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:25.059559 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.16:50092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:25.060245 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.16:50092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:25.124864 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.25:20436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:25.125489 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.25:20436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:25.404390 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.49:47134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:25.405044 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.49:47134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:25.645085 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.10:28384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:25.645714 2026] [authz_core:error] [pid 3025005:tid 3025005] [client 57.141.0.10:28384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:26.043629 2026] [authz_core:error] [pid 3028451:tid 3028451] [client 57.141.0.49:47148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:26.044260 2026] [authz_core:error] [pid 3028451:tid 3028451] [client 57.141.0.49:47148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:26.103683 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.3:56214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:26.104309 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.3:56214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:26.107300 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:55386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:26.107338 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:26.165685 2026] [ssl:error] [pid 3017823:tid 3017823] (EAI 2)Name or service not known: [client 144.76.19.72:55400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:26.165736 2026] [ssl:error] [pid 3017823:tid 3017823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:26.436802 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.36:51572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:26.437437 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.36:51572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:26.452962 2026] [access_compat:error] [pid 3023827:tid 3023827] [client 176.241.66.87:21146] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:26.462380 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.13:44506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:26.463002 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.13:44506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:26.928593 2026] [access_compat:error] [pid 3027695:tid 3027695] [client 157.20.138.62:65514] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:27.509953 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.37:25886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:27.511029 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.37:25886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:27.769367 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.44:25164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:27.770387 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.44:25164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:28.123088 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.43:59348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:28.123715 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.43:59348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:28.589513 2026] [access_compat:error] [pid 3030562:tid 3030562] [client 103.25.250.251:4210] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:28.612710 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.21:42730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:28.613365 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.21:42730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:28.784378 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.34:45628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:28.784996 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.34:45628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:29.188000 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.70:37046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:29.188632 2026] [authz_core:error] [pid 3030657:tid 3030657] [client 57.141.0.70:37046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:29.223959 2026] [ssl:error] [pid 3025636:tid 3025636] (EAI 2)Name or service not known: [client 144.76.19.72:55414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:29.223988 2026] [ssl:error] [pid 3025636:tid 3025636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:29.276762 2026] [ssl:error] [pid 3028291:tid 3028291] (EAI 2)Name or service not known: [client 144.76.19.72:55418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:29.276804 2026] [ssl:error] [pid 3028291:tid 3028291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:29.310980 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.66:42808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:29.311642 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.66:42808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:29.415441 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.11:47108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:29.416063 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.11:47108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:30.105181 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.18:41454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:30.105799 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.18:41454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:30.173220 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.42:35394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:30.173843 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.42:35394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:30.253901 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.29:40100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:30.254564 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.29:40100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:30.414647 2026] [security2:error] [pid 3025042:tid 3025042] [client 216.73.216.199:2804] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/japanese/errmsg.sys"] [unique_id "amsyUsE7ZGlXXFGucyVPLQAAAAo"]
[Thu Jul 30 12:15:30.415097 2026] [security2:error] [pid 3025042:tid 3025042] [client 216.73.216.199:2804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/japanese/errmsg.sys"] [unique_id "amsyUsE7ZGlXXFGucyVPLQAAAAo"]
[Thu Jul 30 12:15:30.415433 2026] [security2:error] [pid 3025042:tid 3025042] [client 216.73.216.199:2804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/japanese/errmsg.sys"] [unique_id "amsyUsE7ZGlXXFGucyVPLQAAAAo"]
[Thu Jul 30 12:15:30.655504 2026] [access_compat:error] [pid 3030607:tid 3030607] [client 125.176.202.122:58942] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:30.776423 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.31:60404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:30.777052 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.31:60404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:31.456528 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.3:54398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:31.457179 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.3:54398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:32.062675 2026] [authz_core:error] [pid 3030182:tid 3030182] [client 57.141.0.40:36200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:32.063320 2026] [authz_core:error] [pid 3030182:tid 3030182] [client 57.141.0.40:36200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:32.227262 2026] [core:error] [pid 3025042:tid 3025042] (13)Permission denied: [client 216.73.216.199:2804] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/abcpress.com.mt.db
[Thu Jul 30 12:15:32.333130 2026] [ssl:error] [pid 3017773:tid 3017773] (EAI 2)Name or service not known: [client 144.76.19.72:50848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:32.333159 2026] [ssl:error] [pid 3017773:tid 3017773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:32.342101 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.10:47256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:32.342719 2026] [authz_core:error] [pid 3017823:tid 3017823] [client 57.141.0.10:47256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:32.386315 2026] [ssl:error] [pid 3030654:tid 3030654] (EAI 2)Name or service not known: [client 144.76.19.72:50858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:32.386351 2026] [ssl:error] [pid 3030654:tid 3030654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:32.513682 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.1:31772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:32.514303 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.1:31772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:32.632975 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.67:44258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:32.633609 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.67:44258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:32.984830 2026] [security2:error] [pid 3030075:tid 3030075] [client 114.119.151.126:43413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/pages/35/Studio/st_D0168/page:18"] [unique_id "amsyVLLZlB-UwzW7jTcdkwAAABY"], referer: http://jonathanmeyerart.co.uk/pages/35/Studio/st_1903/page:17
[Thu Jul 30 12:15:33.219317 2026] [lsapi:warn] [pid 3030182:tid 3030182] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:15:33.446888 2026] [ssl:error] [pid 3025042:tid 3025042] (70014)End of file found: [client 216.73.216.199:2804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:33.605310 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.65:23418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:33.605937 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.65:23418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:33.838636 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.43:52414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:33.839369 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.43:52414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:33.892677 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.27:57338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:33.893322 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.27:57338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:34.363143 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.71:31030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:34.363758 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.71:31030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:34.617842 2026] [core:error] [pid 3027695:tid 3027695] [client 66.249.66.168:43312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:34.617874 2026] [core:error] [pid 3027695:tid 3027695] [client 66.249.66.168:43312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:34.711129 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 66.249.66.35:41669] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:15:34.713819 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 66.249.66.35:41669] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:15:34.841112 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.18:41480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:34.841811 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.18:41480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:35.086631 2026] [access_compat:error] [pid 3021925:tid 3021925] [client 103.25.250.251:60210] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:35.107002 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.32:62894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:35.107628 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.32:62894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:35.457125 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.41:61110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:35.457745 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.41:61110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:35.486344 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:50860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:35.486382 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:35.539461 2026] [ssl:error] [pid 3025637:tid 3025637] (EAI 2)Name or service not known: [client 144.76.19.72:50874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:35.539516 2026] [ssl:error] [pid 3025637:tid 3025637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:35.894131 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.29:40150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:35.894817 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.29:40150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:35.912454 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.16:25832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:35.913085 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.16:25832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:36.151969 2026] [security2:error] [pid 3025636:tid 3025636] [client 216.73.216.199:19457] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/journal-nocow.conf"] [unique_id "amsyWK_BXSqFNOF4S6lj4wAAACQ"]
[Thu Jul 30 12:15:36.152354 2026] [security2:error] [pid 3025636:tid 3025636] [client 216.73.216.199:19457] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/journal-nocow.conf"] [unique_id "amsyWK_BXSqFNOF4S6lj4wAAACQ"]
[Thu Jul 30 12:15:36.152606 2026] [security2:error] [pid 3025636:tid 3025636] [client 216.73.216.199:19457] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/journal-nocow.conf"] [unique_id "amsyWK_BXSqFNOF4S6lj4wAAACQ"]
[Thu Jul 30 12:15:36.664324 2026] [authz_core:error] [pid 3030658:tid 3030658] [client 57.141.0.2:22976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:36.664979 2026] [authz_core:error] [pid 3030658:tid 3030658] [client 57.141.0.2:22976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:36.748976 2026] [ssl:error] [pid 3025636:tid 3025636] (70014)End of file found: [client 216.73.216.199:19457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:36.975808 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.71:31042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:36.976454 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.71:31042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:36.978778 2026] [access_compat:error] [pid 3030608:tid 3030608] [client 176.241.66.87:57508] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:37.127865 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.26:40416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:37.128548 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.26:40416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:37.445765 2026] [access_compat:error] [pid 3030607:tid 3030607] [client 157.20.138.62:49739] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:37.561760 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.1:31776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:37.562389 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.1:31776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:37.676045 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.32:62908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:37.676687 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.32:62908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:37.803218 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.51:32822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:37.803890 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.51:32822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:38.299686 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.40:28242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:38.300370 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.40:28242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:38.422338 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.23:53152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:38.422983 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.23:53152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:38.591858 2026] [ssl:error] [pid 3017771:tid 3017771] (EAI 2)Name or service not known: [client 144.76.19.72:50890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:38.591893 2026] [ssl:error] [pid 3017771:tid 3017771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:38.643578 2026] [ssl:error] [pid 3019768:tid 3019768] (EAI 2)Name or service not known: [client 144.76.19.72:50892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:38.643608 2026] [ssl:error] [pid 3019768:tid 3019768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:39.138735 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.10:60058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:39.139411 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.10:60058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:39.144656 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.7:23762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:39.145277 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.7:23762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:39.391957 2026] [access_compat:error] [pid 3030658:tid 3030658] [client 103.25.250.251:4211] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:39.457810 2026] [ssl:error] [pid 3027913:tid 3027913] (70014)End of file found: [client 216.73.216.199:29432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:39.879941 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.22:33514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:39.880663 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.22:33514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:39.946603 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.26:40430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:39.947227 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.26:40430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:40.258945 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.64:35912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:40.259690 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.64:35912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:40.335399 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.58:39320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:40.336023 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.58:39320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:40.682620 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.20:28722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:40.683235 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.20:28722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:40.787947 2026] [security2:error] [pid 3028291:tid 3028291] [client 185.191.171.8:29888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3659.0/prev_next,prev.html"] [unique_id "amsyXJ1qJbBv7_3rlZcDWQAAAC4"]
[Thu Jul 30 12:15:41.056781 2026] [access_compat:error] [pid 3030655:tid 3030655] [client 125.176.202.122:59170] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:41.264532 2026] [ssl:error] [pid 3017771:tid 3017771] (70014)End of file found: [client 216.73.216.199:34413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:41.292241 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.69:33378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:41.292903 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.69:33378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:41.728649 2026] [ssl:error] [pid 3028291:tid 3028291] (EAI 2)Name or service not known: [client 144.76.19.72:52108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:41.728674 2026] [ssl:error] [pid 3028291:tid 3028291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:41.783576 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:52118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:41.783610 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:41.827589 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.19:50456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:41.828262 2026] [authz_core:error] [pid 3019810:tid 3019810] [client 57.141.0.19:50456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:42.146108 2026] [security2:error] [pid 3025636:tid 3025636] [client 43.130.31.17:35890] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amsyXq_BXSqFNOF4S6lj5gAAACQ"]
[Thu Jul 30 12:15:42.319444 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.31:47458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:42.320092 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.31:47458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:42.375342 2026] [authz_core:error] [pid 3030509:tid 3030509] [client 57.141.0.59:57630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:42.376449 2026] [authz_core:error] [pid 3030509:tid 3030509] [client 57.141.0.59:57630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:42.738159 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.42:52040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:42.739146 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.42:52040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:42.757464 2026] [access_compat:error] [pid 3025090:tid 3025090] [client 176.241.66.87:57736] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:42.813237 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.37:38746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:42.813860 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.37:38746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:43.203156 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.41:58908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:43.203782 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.41:58908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:43.650081 2026] [security2:error] [pid 3020912:tid 3020912] [client 43.130.31.17:36748] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amsyXy3lTM3_g952gUt1ggAAABU"], referer: http://www.rogersbarbershopltd.co.uk
[Thu Jul 30 12:15:43.684025 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.66:45926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:43.684662 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.66:45926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:43.727012 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:15:44.003959 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.34:41638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:44.004593 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.34:41638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:44.466664 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.42:52048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:44.467284 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.42:52048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:44.799030 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.19:59874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:44.799671 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.19:59874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:44.898443 2026] [ssl:error] [pid 3030607:tid 3030607] (EAI 2)Name or service not known: [client 144.76.19.72:52130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:44.898512 2026] [ssl:error] [pid 3030607:tid 3030607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:44.955672 2026] [ssl:error] [pid 3028556:tid 3028556] (EAI 2)Name or service not known: [client 144.76.19.72:52142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:44.955707 2026] [ssl:error] [pid 3028556:tid 3028556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:44.991952 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.20:28726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:44.992588 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.20:28726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:45.299652 2026] [core:error] [pid 3030561:tid 3030561] [client 66.249.66.169:61598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:45.299681 2026] [core:error] [pid 3030561:tid 3030561] [client 66.249.66.169:61598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:45.584003 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.52:51196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:45.584660 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.52:51196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:45.633302 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.47:47878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:45.633947 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.47:47878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:46.547852 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.11:57956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:46.548479 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.11:57956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:46.573556 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.34:41650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:46.574181 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.34:41650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:46.921065 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.19:59884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:46.921695 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.19:59884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:47.176297 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.56:41606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:47.176927 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.56:41606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:47.220276 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 66.249.66.35:63058] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:15:47.222939 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 66.249.66.35:63058] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:15:47.282470 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.64:47808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:47.283116 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.64:47808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:47.367332 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.64:47812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:47.367962 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.64:47812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:47.497288 2026] [access_compat:error] [pid 3029659:tid 3029659] [client 176.241.66.87:22357] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:47.610621 2026] [ssl:error] [pid 3025093:tid 3025093] (70014)End of file found: [client 216.73.216.199:8163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:47.641191 2026] [security2:error] [pid 3020912:tid 3020912] [client 85.208.96.207:21654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5730.0.html"] [unique_id "amsyYy3lTM3_g952gUt1hgAAABU"]
[Thu Jul 30 12:15:47.702903 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.42:52064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:47.703541 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.42:52064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:47.914985 2026] [ssl:error] [pid 3023827:tid 3023827] (70014)End of file found: [client 216.73.216.199:14822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:47.938721 2026] [access_compat:error] [pid 3019768:tid 3019768] [client 157.20.138.62:50337] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:48.007437 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:52150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:48.007465 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:48.060614 2026] [ssl:error] [pid 3025090:tid 3025090] (EAI 2)Name or service not known: [client 144.76.19.72:52152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:48.060642 2026] [ssl:error] [pid 3025090:tid 3025090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:48.175647 2026] [access_compat:error] [pid 3030655:tid 3030655] [client 125.176.202.122:59256] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:48.269428 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.3:59942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:48.270073 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.3:59942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:48.793914 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.20:28750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:48.794553 2026] [authz_core:error] [pid 3028556:tid 3028556] [client 57.141.0.20:28750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:49.005447 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.22:35496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:49.006094 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.22:35496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:49.176797 2026] [core:error] [pid 3017771:tid 3017771] [client 66.249.64.170:51927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:49.176831 2026] [core:error] [pid 3017771:tid 3017771] [client 66.249.64.170:51927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:15:49.415304 2026] [security2:error] [pid 3020912:tid 3020912] [client 216.73.216.199:5951] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/systemd-nologin.conf"] [unique_id "amsyZS3lTM3_g952gUt1iwAAABU"]
[Thu Jul 30 12:15:49.415606 2026] [security2:error] [pid 3020912:tid 3020912] [client 216.73.216.199:5951] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/systemd-nologin.conf"] [unique_id "amsyZS3lTM3_g952gUt1iwAAABU"]
[Thu Jul 30 12:15:49.415834 2026] [security2:error] [pid 3020912:tid 3020912] [client 216.73.216.199:5951] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/systemd-nologin.conf"] [unique_id "amsyZS3lTM3_g952gUt1iwAAABU"]
[Thu Jul 30 12:15:49.711602 2026] [security2:error] [pid 3029126:tid 3029126] [client 43.157.174.69:58968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.iapib.com"] [uri "/"] [unique_id "amsyZb1sg9Rk-pQcvt4twwAAABE"]
[Thu Jul 30 12:15:49.748079 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.52:20416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:49.748701 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.52:20416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:49.958796 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.14:37540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:49.959422 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.14:37540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:50.378268 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.59:28112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:50.378894 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.59:28112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:50.411742 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.32:34444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:50.412370 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.32:34444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:50.879899 2026] [security2:error] [pid 3024314:tid 3024314] [client 43.157.174.69:59798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "iapib.com"] [uri "/"] [unique_id "amsyZscHLAHkR9Y80MKeKAAAACk"], referer: http://www.iapib.com
[Thu Jul 30 12:15:50.929856 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.12:25308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:50.930534 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.12:25308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:50.970113 2026] [authz_core:error] [pid 3030509:tid 3030509] [client 57.141.0.48:41702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:50.971051 2026] [authz_core:error] [pid 3030509:tid 3030509] [client 57.141.0.48:41702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:51.120727 2026] [ssl:error] [pid 3030651:tid 3030651] (EAI 2)Name or service not known: [client 144.76.19.72:33806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:51.120776 2026] [ssl:error] [pid 3030651:tid 3030651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:51.155208 2026] [access_compat:error] [pid 3030653:tid 3030653] [client 103.25.250.251:4212] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:51.178563 2026] [ssl:error] [pid 3029661:tid 3029661] (EAI 2)Name or service not known: [client 144.76.19.72:33808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:51.178594 2026] [ssl:error] [pid 3029661:tid 3029661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:51.516370 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.3:23298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:51.517015 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.3:23298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:51.683814 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.27:31196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:51.684509 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.27:31196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:51.827163 2026] [ssl:error] [pid 3020912:tid 3020912] (70014)End of file found: [client 216.73.216.199:5951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:52.093251 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.40:59822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:52.093958 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.40:59822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:52.319326 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.18:46476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:52.319950 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.18:46476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:52.452994 2026] [access_compat:error] [pid 3030561:tid 3030561] [client 125.176.202.122:59404] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:52.483890 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.7:40964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:52.484575 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.7:40964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:52.636709 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.67:25718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:52.637349 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.67:25718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:52.655422 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.61:43242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:52.656138 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.61:43242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:52.922968 2026] [ssl:error] [pid 3017817:tid 3017817] (70014)End of file found: [client 216.73.216.199:50954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:53.246445 2026] [access_compat:error] [pid 3025093:tid 3025093] [client 176.241.66.87:58284] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:53.730093 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.20:61134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:53.730746 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.20:61134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:53.880295 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.46:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:53.880921 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.46:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:54.135349 2026] [authz_core:error] [pid 3030656:tid 3030656] [client 57.141.0.11:43050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:54.136022 2026] [authz_core:error] [pid 3030656:tid 3030656] [client 57.141.0.11:43050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:54.235158 2026] [ssl:error] [pid 3021925:tid 3021925] (EAI 2)Name or service not known: [client 144.76.19.72:33810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:54.235196 2026] [ssl:error] [pid 3021925:tid 3021925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:54.260855 2026] [lsapi:warn] [pid 3028231:tid 3028231] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:15:54.277890 2026] [security2:error] [pid 3029659:tid 3029659] [client 47.128.17.187:45298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/regularvenues/ashbarton/"] [unique_id "amsyajBf0dLiDVagIXby1wAAACM"]
[Thu Jul 30 12:15:54.291019 2026] [ssl:error] [pid 3024314:tid 3024314] (EAI 2)Name or service not known: [client 144.76.19.72:33818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:54.291046 2026] [ssl:error] [pid 3024314:tid 3024314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:54.316794 2026] [core:error] [pid 3025090:tid 3025090] (13)Permission denied: [client 216.73.216.199:57709] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/userdomains
[Thu Jul 30 12:15:54.352987 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.69:27188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:54.353618 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.69:27188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:54.420248 2026] [ssl:error] [pid 3025090:tid 3025090] (70014)End of file found: [client 216.73.216.199:57709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:54.832151 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.61:43250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:54.832772 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.61:43250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:55.288186 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.31:54982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:55.288880 2026] [authz_core:error] [pid 3017819:tid 3017819] [client 57.141.0.31:54982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:55.629432 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.25:30416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:55.630115 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.25:30416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:55.891447 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.36:61602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:55.892134 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.36:61602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:56.225951 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.8:21896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:56.226588 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.8:21896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:56.307472 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.67:25734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:56.308105 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.67:25734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:56.696521 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.48:41708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:56.697208 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.48:41708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:56.787719 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.63:53004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:56.788330 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.63:53004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:57.151979 2026] [security2:error] [pid 3030608:tid 3030608] [client 47.128.17.187:48918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/wp-content/cache/wpfc-minified/7lg0kc08/dk7p6.css"] [unique_id "amsybcDYhMyEKPEDIsQ3dwAAADc"], referer: https://www.retrodisco.co.uk/regularvenues/ashbarton/
[Thu Jul 30 12:15:57.252524 2026] [security2:error] [pid 3020911:tid 3020911] [client 47.128.17.187:49060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/wp-content/uploads/2024/10/regular-300x63.jpg"] [unique_id "amsybXeQLwlxHDOiAds5IQAAABA"], referer: https://www.retrodisco.co.uk/regularvenues/ashbarton/
[Thu Jul 30 12:15:57.350599 2026] [ssl:error] [pid 3020912:tid 3020912] (EAI 2)Name or service not known: [client 144.76.19.72:33824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:57.350629 2026] [ssl:error] [pid 3020912:tid 3020912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:57.403425 2026] [ssl:error] [pid 3025093:tid 3025093] (EAI 2)Name or service not known: [client 144.76.19.72:33836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:15:57.403473 2026] [ssl:error] [pid 3025093:tid 3025093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:15:57.451739 2026] [core:crit] [pid 3029617:tid 3029617] (13)Permission denied: [client 216.73.216.199:51690] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/cache/ldconfig/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/cache/ldconfig/' is executable
[Thu Jul 30 12:15:57.451798 2026] [core:crit] [pid 3029617:tid 3029617] (13)Permission denied: [client 216.73.216.199:51690] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/cache/private/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/var/cache/private/' is executable
[Thu Jul 30 12:15:57.732955 2026] [ssl:error] [pid 3027695:tid 3027695] (70014)End of file found: [client 216.73.216.199:13140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:15:57.753258 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.59:30428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:57.753941 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.59:30428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:57.808290 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.11:43066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:57.809013 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.11:43066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:58.034180 2026] [access_compat:error] [pid 3025093:tid 3025093] [client 176.241.66.87:22958] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:58.037571 2026] [core:error] [pid 3029617:tid 3029617] (13)Permission denied: [client 216.73.216.199:51690] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/platform/drivers/intel_rapl_msr/bind
[Thu Jul 30 12:15:58.257542 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.23:32768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:58.258203 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.23:32768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:58.475259 2026] [access_compat:error] [pid 3028231:tid 3028231] [client 157.20.138.62:50936] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:58.710840 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.68:42750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:58.711474 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.68:42750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:59.072249 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.66:44058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:59.072953 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.66:44058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:59.354979 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.16:26656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:59.355680 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.16:26656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:59.358404 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.61:43260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:15:59.359017 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.61:43260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:15:59.397668 2026] [access_compat:error] [pid 3027913:tid 3027913] [client 125.176.202.122:59489] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:15:59.544178 2026] [ssl:error] [pid 3029617:tid 3029617] (70014)End of file found: [client 216.73.216.199:51690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:00.154520 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.5:38366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:00.155153 2026] [authz_core:error] [pid 3030417:tid 3030417] [client 57.141.0.5:38366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:00.278884 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.18:36910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:00.279517 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.18:36910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:00.400250 2026] [security2:error] [pid 3025090:tid 3025090] [client 47.128.17.187:53144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/wp-content/uploads/2022/10/img_3420__1_-768x480.jpg"] [unique_id "amsycLqCeNurjiU_J-_EQwAAABo"], referer: https://www.retrodisco.co.uk/regularvenues/ashbarton/
[Thu Jul 30 12:16:00.459740 2026] [ssl:error] [pid 3017817:tid 3017817] (EAI 2)Name or service not known: [client 144.76.19.72:51030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:00.459786 2026] [ssl:error] [pid 3017817:tid 3017817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:00.511481 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.41:20266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:00.512117 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.41:20266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:00.522023 2026] [ssl:error] [pid 3017817:tid 3017817] (EAI 2)Name or service not known: [client 144.76.19.72:51044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:00.522052 2026] [ssl:error] [pid 3017817:tid 3017817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:00.625653 2026] [security2:error] [pid 3017817:tid 3017817] [client 43.133.220.37:33302] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amsycPdmqyl8JsbY-BT8iwAAABI"]
[Thu Jul 30 12:16:00.776196 2026] [security2:error] [pid 3027913:tid 3027913] [client 185.191.171.7:17424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/funny-social-norms-to-break-in-public"] [unique_id "amsycNkQ2bJl8gia-cxaHQAAACY"]
[Thu Jul 30 12:16:00.802960 2026] [access_compat:error] [pid 3032653:tid 3032653] [client 103.25.250.251:60212] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:00.846819 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.51:24948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:00.847448 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.51:24948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:01.013163 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.66:44070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:01.013849 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.66:44070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:01.136448 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.33:51102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:01.137147 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.33:51102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:01.351353 2026] [ssl:error] [pid 3020912:tid 3020912] (70014)End of file found: [client 216.73.216.199:19095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:01.532354 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.40:25900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:01.533019 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.40:25900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:02.175280 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.12:32510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:02.175917 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.12:32510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:02.554512 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.54:22928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:02.555140 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.54:22928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:02.609013 2026] [security2:error] [pid 3024363:tid 3024363] [client 43.133.220.37:36278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/index.html"] [unique_id "amsycsHvhZNfLRmQpE0ZBAAAADA"], referer: http://www.shelterprojects.org
[Thu Jul 30 12:16:02.747410 2026] [security2:error] [pid 3030655:tid 3030655] [client 47.128.17.167:15370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.retrodisco.co.uk"] [uri "/robots.txt"] [unique_id "amsycmJsxukatLWCnKlaKAAAAD0"]
[Thu Jul 30 12:16:02.953056 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.67:30854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:02.953770 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.67:30854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:03.182671 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.24:36248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:03.183327 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.24:36248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:03.598719 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.3:38778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:03.599355 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.3:38778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:03.709677 2026] [access_compat:error] [pid 3032698:tid 3032698] [client 125.176.202.122:59634] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:03.729342 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.34:60446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:03.730027 2026] [authz_core:error] [pid 3017773:tid 3017773] [client 57.141.0.34:60446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:03.838747 2026] [authz_core:error] [pid 3032854:tid 3032854] [client 57.141.0.41:41890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:03.839473 2026] [authz_core:error] [pid 3032854:tid 3032854] [client 57.141.0.41:41890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:04.191112 2026] [ssl:error] [pid 3025637:tid 3025637] (EAI 2)Name or service not known: [client 144.76.19.72:51048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:04.191156 2026] [ssl:error] [pid 3025637:tid 3025637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:04.193787 2026] [access_compat:error] [pid 3028291:tid 3028291] [client 45.158.164.139:35616] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:16:04.217941 2026] [authz_core:error] [pid 3032854:tid 3032854] [client 57.141.0.66:57632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:04.218643 2026] [authz_core:error] [pid 3032854:tid 3032854] [client 57.141.0.66:57632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:04.244609 2026] [ssl:error] [pid 3032699:tid 3032699] (EAI 2)Name or service not known: [client 144.76.19.72:51050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:04.244645 2026] [ssl:error] [pid 3032699:tid 3032699] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:04.510388 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.36:41322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:04.511087 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.36:41322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:04.751120 2026] [lsapi:warn] [pid 3017817:tid 3017817] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:16:05.463304 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.13:52636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:05.463929 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.13:52636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:05.814808 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.50:34124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:05.815448 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.50:34124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:06.000782 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.13:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:06.001472 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.13:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:06.074223 2026] [security2:error] [pid 3019768:tid 3019768] [client 185.191.171.1:49874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amsydjhuEGvT3QVfhCVxHQAAAAQ"]
[Thu Jul 30 12:16:06.102236 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.29:48006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:06.102879 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.29:48006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:06.163151 2026] [ssl:error] [pid 3026897:tid 3026897] (70014)End of file found: [client 216.73.216.199:1927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:06.415913 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.37:27568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:06.416634 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.37:27568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:06.477552 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.69:29842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:06.478175 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.69:29842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:06.609843 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.39:30882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:06.610461 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.39:30882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:06.765058 2026] [core:error] [pid 3017817:tid 3017817] (13)Permission denied: [client 216.73.216.199:16936] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dax_cache/reclaim_account
[Thu Jul 30 12:16:07.064329 2026] [access_compat:error] [pid 3025637:tid 3025637] [client 103.25.250.251:60213] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:07.300689 2026] [ssl:error] [pid 3032653:tid 3032653] (EAI 2)Name or service not known: [client 144.76.19.72:51056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:07.300724 2026] [ssl:error] [pid 3032653:tid 3032653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:07.355478 2026] [ssl:error] [pid 3030608:tid 3030608] (EAI 2)Name or service not known: [client 144.76.19.72:51072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:07.355538 2026] [ssl:error] [pid 3030608:tid 3030608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:07.521003 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.12:32520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:07.521747 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.12:32520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:07.912939 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.40:24928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:07.913586 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.40:24928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:08.343380 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.60:58650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:08.344011 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.60:58650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:08.383560 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.56:45514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:08.384187 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.56:45514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:08.519390 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 176.241.66.87:59156] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:08.654807 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.17:21340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:08.655428 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.17:21340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:08.799535 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.23:32328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:08.800156 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.23:32328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:08.987979 2026] [access_compat:error] [pid 3027695:tid 3027695] [client 157.20.138.62:51534] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:09.091520 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.16:25798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:09.092160 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.16:25798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:09.715463 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.61:26502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:09.716093 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.61:26502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:10.104165 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.19:35390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:10.105594 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.19:35390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:10.194232 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.56:45524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:10.194906 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.56:45524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:10.410492 2026] [ssl:error] [pid 3023827:tid 3023827] (EAI 2)Name or service not known: [client 144.76.19.72:56642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:10.410551 2026] [ssl:error] [pid 3023827:tid 3023827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:10.466802 2026] [ssl:error] [pid 3030655:tid 3030655] (EAI 2)Name or service not known: [client 144.76.19.72:56656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:10.466836 2026] [ssl:error] [pid 3030655:tid 3030655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:10.980236 2026] [ssl:error] [pid 3017817:tid 3017817] (70014)End of file found: [client 216.73.216.199:16936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:11.145775 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.29:49684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:11.147193 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.29:49684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:11.226185 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.39:30890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:11.226804 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.39:30890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:11.273530 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.39:30906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:11.274158 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.39:30906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:11.280478 2026] [ssl:error] [pid 3030653:tid 3030653] (70014)End of file found: [client 216.73.216.199:21777] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:11.299493 2026] [access_compat:error] [pid 3032698:tid 3032698] [client 125.176.202.122:59726] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:11.628854 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.10:44860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:11.629483 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.10:44860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:11.715075 2026] [access_compat:error] [pid 3032699:tid 3032699] [client 103.25.250.251:60214] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:11.887548 2026] [core:error] [pid 3026897:tid 3026897] (13)Permission denied: [client 216.73.216.199:18884] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_perm_event/cpu_slabs
[Thu Jul 30 12:16:12.188915 2026] [core:error] [pid 3026897:tid 3026897] (13)Permission denied: [client 216.73.216.199:18884] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/scsi_sense_cache/destroy_by_rcu
[Thu Jul 30 12:16:12.285264 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.40:24936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:12.286226 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.40:24936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:12.607687 2026] [authz_core:error] [pid 3032698:tid 3032698] [client 57.141.0.39:30912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:12.608336 2026] [authz_core:error] [pid 3032698:tid 3032698] [client 57.141.0.39:30912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:12.619085 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.39:30918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:12.620468 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.39:30918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:12.850589 2026] [authz_core:error] [pid 3030562:tid 3030562] [client 57.141.0.31:40308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:12.851218 2026] [authz_core:error] [pid 3030562:tid 3030562] [client 57.141.0.31:40308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:13.091379 2026] [core:error] [pid 3026897:tid 3026897] (13)Permission denied: [client 216.73.216.199:18884] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory114/subsystem/uevent
[Thu Jul 30 12:16:13.520230 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:29054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:13.520846 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:29054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:13.522351 2026] [ssl:error] [pid 3030562:tid 3030562] (EAI 2)Name or service not known: [client 144.76.19.72:56668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:13.522373 2026] [ssl:error] [pid 3030562:tid 3030562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:13.562291 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.22:42270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:13.562911 2026] [authz_core:error] [pid 3019768:tid 3019768] [client 57.141.0.22:42270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:13.576666 2026] [ssl:error] [pid 3028231:tid 3028231] (EAI 2)Name or service not known: [client 144.76.19.72:56682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:13.576692 2026] [ssl:error] [pid 3028231:tid 3028231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:13.994356 2026] [ssl:error] [pid 3026897:tid 3026897] (70014)End of file found: [client 216.73.216.199:18884] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:14.257449 2026] [access_compat:error] [pid 3028231:tid 3028231] [client 176.241.66.87:59380] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:14.483122 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.45:27148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:14.483742 2026] [authz_core:error] [pid 3021347:tid 3021347] [client 57.141.0.45:27148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:14.822578 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.43:26448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:14.823202 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.43:26448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:14.976308 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.61:21132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:14.976928 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.61:21132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:14.977163 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.61:21136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:14.977769 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.61:21136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:15.122477 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.54:48310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:15.123119 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.54:48310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:15.135439 2026] [access_compat:error] [pid 3032698:tid 3032698] [client 125.176.202.122:59870] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:15.187867 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:16:15.408338 2026] [security2:error] [pid 3027913:tid 3027913] [client 43.163.206.70:58950] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-atrox-killers.net"] [uri "/"] [unique_id "amsyf9kQ2bJl8gia-cxaJwAAACY"]
[Thu Jul 30 12:16:15.916304 2026] [authz_core:error] [pid 3030509:tid 3030509] [client 57.141.0.47:24480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:15.916928 2026] [authz_core:error] [pid 3030509:tid 3030509] [client 57.141.0.47:24480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:15.977807 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.20:62644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:15.978439 2026] [authz_core:error] [pid 3028291:tid 3028291] [client 57.141.0.20:62644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:16.226993 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.25:45008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:16.227626 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.25:45008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:16.287331 2026] [core:error] [pid 3019768:tid 3019768] (13)Permission denied: [client 216.73.216.199:54196] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/computer-central.co.uk.db
[Thu Jul 30 12:16:16.341307 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.17:27276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:16.342014 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.17:27276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:16.715509 2026] [ssl:error] [pid 3030651:tid 3030651] (EAI 2)Name or service not known: [client 144.76.19.72:56696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:16.715538 2026] [ssl:error] [pid 3030651:tid 3030651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:16.767207 2026] [ssl:error] [pid 3029617:tid 3029617] (EAI 2)Name or service not known: [client 144.76.19.72:56702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:16.767233 2026] [ssl:error] [pid 3029617:tid 3029617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:17.394507 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.14:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:17.395142 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.14:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:17.570111 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.48:63140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:17.570752 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.48:63140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:18.122155 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.59:60008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:18.122802 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.59:60008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:18.278559 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.41:42804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:18.279179 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.41:42804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:18.505331 2026] [ssl:error] [pid 3019768:tid 3019768] (70014)End of file found: [client 216.73.216.199:54196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:18.833164 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.44:32678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:18.833844 2026] [authz_core:error] [pid 3024314:tid 3024314] [client 57.141.0.44:32678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:19.007007 2026] [security2:error] [pid 3025091:tid 3025091] [client 216.73.216.199:35871] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/nsswitch.conf"] [unique_id "amsyg6rXO0chUKEnmm0KKQAAAB0"]
[Thu Jul 30 12:16:19.007322 2026] [security2:error] [pid 3025091:tid 3025091] [client 216.73.216.199:35871] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/nsswitch.conf"] [unique_id "amsyg6rXO0chUKEnmm0KKQAAAB0"]
[Thu Jul 30 12:16:19.007562 2026] [security2:error] [pid 3025091:tid 3025091] [client 216.73.216.199:35871] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/nsswitch.conf"] [unique_id "amsyg6rXO0chUKEnmm0KKQAAAB0"]
[Thu Jul 30 12:16:19.062888 2026] [access_compat:error] [pid 3029617:tid 3029617] [client 176.241.66.87:24219] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:19.083123 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.7:61176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:19.083758 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.7:61176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:19.095581 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.24:33762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:19.096228 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.24:33762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:19.105921 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.2:61384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:19.106562 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.2:61384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:19.213751 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.53:59868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:19.214378 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.53:59868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:19.443705 2026] [security2:error] [pid 3029126:tid 3029126] [client 114.119.135.136:55155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~102,19,17,30/request_format~html"] [unique_id "amsyg71sg9Rk-pQcvt4t0gAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578355200/cat_ids~102,19,17,30/request_format~html
[Thu Jul 30 12:16:19.539300 2026] [access_compat:error] [pid 3017823:tid 3017823] [client 157.20.138.62:52134] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:19.820362 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:40168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:19.820385 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:19.877335 2026] [ssl:error] [pid 3032699:tid 3032699] (EAI 2)Name or service not known: [client 144.76.19.72:40178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:19.877373 2026] [ssl:error] [pid 3032699:tid 3032699] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:19.935534 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.44:26658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:19.936156 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.44:26658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:20.557737 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:29056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:20.558352 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:29056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:20.615997 2026] [ssl:error] [pid 3025091:tid 3025091] (70014)End of file found: [client 216.73.216.199:35871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:20.766364 2026] [security2:error] [pid 3029126:tid 3029126] [client 114.119.135.136:55169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~102,19,17,30/request_format~html"] [unique_id "amsyhL1sg9Rk-pQcvt4t1AAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578355200/cat_ids~102,19,17,30/request_format~html
[Thu Jul 30 12:16:20.958395 2026] [authz_core:error] [pid 3030562:tid 3030562] [client 57.141.0.12:28526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:20.959012 2026] [authz_core:error] [pid 3030562:tid 3030562] [client 57.141.0.12:28526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:21.258010 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.5:61408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:21.258651 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.5:61408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:21.444257 2026] [core:error] [pid 3026897:tid 3026897] [client 66.249.66.168:41605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:21.444291 2026] [core:error] [pid 3026897:tid 3026897] [client 66.249.66.168:41605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:21.518468 2026] [core:error] [pid 3032699:tid 3032699] (13)Permission denied: [client 216.73.216.199:57760] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory242/subsystem/uevent
[Thu Jul 30 12:16:21.646905 2026] [core:error] [pid 3030651:tid 3030651] [client 66.249.66.67:37754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:21.646938 2026] [core:error] [pid 3030651:tid 3030651] [client 66.249.66.67:37754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:21.823270 2026] [ssl:error] [pid 3032699:tid 3032699] (70014)End of file found: [client 216.73.216.199:57760] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:21.889342 2026] [access_compat:error] [pid 3013378:tid 3013378] [client 125.176.202.122:59954] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:22.047359 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.56:61168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:22.048008 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.56:61168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:22.295802 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.21:29748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:22.297202 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.21:29748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:22.330825 2026] [access_compat:error] [pid 3030651:tid 3030651] [client 103.25.250.251:4213] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:22.551790 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.25:45024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:22.552417 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.25:45024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:22.613907 2026] [security2:error] [pid 3033563:tid 3033563] [client 170.106.179.68:34718] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.com"] [uri "/"] [unique_id "amsyhiAeB7w4_SV6ZkhOHwAAABg"]
[Thu Jul 30 12:16:22.931415 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.7:61188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:22.932048 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.7:61188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:22.937605 2026] [ssl:error] [pid 3029126:tid 3029126] (EAI 2)Name or service not known: [client 144.76.19.72:40182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:22.937643 2026] [ssl:error] [pid 3029126:tid 3029126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:22.981013 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.55:37882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:22.981678 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.55:37882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:22.991208 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:40188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:22.991234 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:23.268477 2026] [core:error] [pid 3033525:tid 3033525] [client 66.249.66.168:43675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:23.268528 2026] [core:error] [pid 3033525:tid 3033525] [client 66.249.66.168:43675] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:23.299688 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.9:36538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:23.300334 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.9:36538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:23.674540 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.61:31740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:23.675169 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.61:31740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:24.137997 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.20:35552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:24.138662 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.20:35552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:24.446326 2026] [ssl:error] [pid 3033133:tid 3033133] (70014)End of file found: [client 216.73.216.199:9699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:24.615363 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 66.249.66.34:52630] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:16:24.618036 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 66.249.66.34:52630] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:16:24.820485 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.9:36554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:24.821150 2026] [authz_core:error] [pid 3023827:tid 3023827] [client 57.141.0.9:36554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:24.838283 2026] [authz_core:error] [pid 3032854:tid 3032854] [client 57.141.0.38:31330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:24.839225 2026] [authz_core:error] [pid 3032854:tid 3032854] [client 57.141.0.38:31330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:24.946854 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.33:31514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:24.947484 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.33:31514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:24.949649 2026] [access_compat:error] [pid 3030655:tid 3030655] [client 176.241.66.87:24467] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:25.508430 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.24:38268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:25.509060 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.24:38268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:25.706315 2026] [lsapi:warn] [pid 3033628:tid 3033628] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:16:26.046148 2026] [ssl:error] [pid 3025042:tid 3025042] (EAI 2)Name or service not known: [client 144.76.19.72:40198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:26.046182 2026] [ssl:error] [pid 3025042:tid 3025042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:26.098918 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:40208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:26.098951 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:26.110667 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.34:42582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:26.111317 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.34:42582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:26.139444 2026] [core:error] [pid 3025093:tid 3025093] (13)Permission denied: [client 216.73.216.199:35529] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-16/validate
[Thu Jul 30 12:16:26.270971 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.69:23030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:26.271614 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.69:23030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:26.517709 2026] [access_compat:error] [pid 3029126:tid 3029126] [client 125.176.202.122:60106] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:26.549234 2026] [core:error] [pid 3025093:tid 3025093] (13)Permission denied: [client 216.73.216.199:35529] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:16:26.927893 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.64:34738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:26.928972 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.64:34738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:27.264679 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.8:52814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:27.265322 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.8:52814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:27.377668 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.66:39374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:27.378291 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.66:39374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:27.465266 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.2:42490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:27.465889 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.2:42490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:27.622255 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.68:45246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:27.622888 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.68:45246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:27.631635 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.5:61412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:27.632249 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.5:61412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:28.620266 2026] [security2:error] [pid 3032699:tid 3032699] [client 175.178.110.121:57612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amsyjDPMDPOUOOIKFkR1NQAAAAg"]
[Thu Jul 30 12:16:28.649520 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.5:28350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:28.650144 2026] [authz_core:error] [pid 3017817:tid 3017817] [client 57.141.0.5:28350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:28.969186 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.30:35944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:28.969809 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.30:35944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:29.054244 2026] [access_compat:error] [pid 3033563:tid 3033563] [client 103.25.250.251:60215] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:29.152806 2026] [ssl:error] [pid 3016066:tid 3016066] (EAI 2)Name or service not known: [client 144.76.19.72:40222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:29.152835 2026] [ssl:error] [pid 3016066:tid 3016066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:29.208863 2026] [ssl:error] [pid 3030606:tid 3030606] (EAI 2)Name or service not known: [client 144.76.19.72:40224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:29.208901 2026] [ssl:error] [pid 3030606:tid 3030606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:29.493516 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.6:28104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:29.494144 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.6:28104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:29.593480 2026] [access_compat:error] [pid 3030653:tid 3030653] [client 176.241.66.87:24809] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:29.848909 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.2:42492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:29.849542 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.2:42492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:29.870601 2026] [core:error] [pid 3025093:tid 3025093] (13)Permission denied: [client 216.73.216.199:35529] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory127/subsystem/uevent
[Thu Jul 30 12:16:30.066109 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.50:42912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:30.066732 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.50:42912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:30.079309 2026] [access_compat:error] [pid 3033247:tid 3033247] [client 157.20.138.62:52735] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:30.300172 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.24:38284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:30.300789 2026] [authz_core:error] [pid 3030607:tid 3030607] [client 57.141.0.24:38284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:30.423512 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.48:49462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:30.424150 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.48:49462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:30.604990 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.71:54628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:30.605617 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.71:54628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:30.773197 2026] [core:error] [pid 3025093:tid 3025093] (13)Permission denied: [client 216.73.216.199:35529] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty43/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:16:31.048908 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.70:64364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:31.050128 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.70:64364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:31.151952 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.53:30280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:31.152590 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.53:30280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:32.070384 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.52:22228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:32.071017 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.52:22228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:32.268263 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:32856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:32.268298 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:32.322035 2026] [ssl:error] [pid 3020911:tid 3020911] (EAI 2)Name or service not known: [client 144.76.19.72:32870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:32.322083 2026] [ssl:error] [pid 3020911:tid 3020911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:32.588031 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.30:51934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:32.588717 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.30:51934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:32.621401 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.52:22240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:32.622032 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.52:22240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:32.822138 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.18:43498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:32.823169 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.18:43498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:33.142291 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.45:39392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:33.142915 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.45:39392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:33.173704 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.50:31190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:33.174323 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.50:31190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:33.212025 2026] [access_compat:error] [pid 3020911:tid 3020911] [client 125.176.202.122:60186] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:33.281888 2026] [access_compat:error] [pid 3029661:tid 3029661] [client 103.25.250.251:4214] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:33.802594 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.58:50774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:33.803624 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.58:50774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:34.143277 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.4:51532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:34.143903 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.4:51532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:34.502882 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.49:50278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:34.503535 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.49:50278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:35.014475 2026] [core:error] [pid 3030655:tid 3030655] (13)Permission denied: [client 216.73.216.199:2661] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/twelvecontent.com.db
[Thu Jul 30 12:16:35.218820 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.70:64370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:35.218859 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.61:52068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:35.219450 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.70:64370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:35.219487 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.61:52068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:35.329868 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.9:38490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:35.330545 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.9:38490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:35.402787 2026] [ssl:error] [pid 3033525:tid 3033525] (EAI 2)Name or service not known: [client 144.76.19.72:32886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:35.402831 2026] [ssl:error] [pid 3033525:tid 3033525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:35.458821 2026] [ssl:error] [pid 3029659:tid 3029659] (EAI 2)Name or service not known: [client 144.76.19.72:32890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:35.458845 2026] [ssl:error] [pid 3029659:tid 3029659] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:35.860462 2026] [security2:error] [pid 3033133:tid 3033133] [client 43.106.0.204:42535] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyk9m5mzUWz6NP_eaBbwAAAAE"]
[Thu Jul 30 12:16:35.860522 2026] [security2:error] [pid 3033133:tid 3033133] [client 43.106.0.204:42535] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyk9m5mzUWz6NP_eaBbwAAAAE"]
[Thu Jul 30 12:16:35.860772 2026] [security2:error] [pid 3033133:tid 3033133] [client 43.106.0.204:42535] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyk9m5mzUWz6NP_eaBbwAAAAE"]
[Thu Jul 30 12:16:35.874084 2026] [security2:error] [pid 3033563:tid 3033563] [client 85.208.98.16:51180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/road-tax-for-vans-uk-k.html"] [unique_id "amsykyAeB7w4_SV6ZkhOJQAAABg"]
[Thu Jul 30 12:16:35.889937 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.62:65170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:35.890618 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.62:65170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:35.941770 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.50:31200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:35.942388 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.50:31200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:36.214660 2026] [lsapi:warn] [pid 3030561:tid 3030561] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:16:36.258910 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 66.249.66.33:35498] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:16:36.261583 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 66.249.66.33:35498] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:16:36.704378 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.48:49470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:36.705003 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.48:49470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:37.270629 2026] [security2:error] [pid 3030561:tid 3030561] [client 103.18.77.47:44758] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsylTj90ts9dm7sOAUWjQAAACs"]
[Thu Jul 30 12:16:37.270681 2026] [security2:error] [pid 3030561:tid 3030561] [client 103.18.77.47:44758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsylTj90ts9dm7sOAUWjQAAACs"]
[Thu Jul 30 12:16:37.270942 2026] [security2:error] [pid 3030561:tid 3030561] [client 103.18.77.47:44758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsylTj90ts9dm7sOAUWjQAAACs"]
[Thu Jul 30 12:16:37.451993 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.67:57736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:37.452642 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.67:57736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:37.793888 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.23:63532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:37.794533 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.23:63532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:38.219226 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.45:34846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:38.219855 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.45:34846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:38.475943 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.59:43054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:38.476572 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.59:43054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:38.560557 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:32898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:38.560579 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:38.569247 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.12:23940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:38.569868 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.12:23940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:38.582366 2026] [authz_core:error] [pid 3034416:tid 3034416] [client 57.141.0.13:24426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:38.583053 2026] [authz_core:error] [pid 3034416:tid 3034416] [client 57.141.0.13:24426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:38.587201 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.45:34860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:38.587839 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.45:34860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:38.614813 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:32900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:38.614836 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:38.781641 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.23:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:38.782263 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.23:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:38.866879 2026] [access_compat:error] [pid 3033562:tid 3033562] [client 125.176.202.122:60336] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:39.112707 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.7:30140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:39.113332 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.7:30140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:39.677129 2026] [authz_core:error] [pid 3034279:tid 3034279] [client 57.141.0.14:23140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:39.677752 2026] [authz_core:error] [pid 3034279:tid 3034279] [client 57.141.0.14:23140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:40.118918 2026] [access_compat:error] [pid 3034279:tid 3034279] [client 176.241.66.87:25418] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:40.190702 2026] [access_compat:error] [pid 3034566:tid 3034566] [client 103.25.250.251:4215] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:40.271315 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.22:36388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:40.271939 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.22:36388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:40.374185 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.18:45308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:40.374808 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.18:45308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:40.669528 2026] [access_compat:error] [pid 3030562:tid 3030562] [client 157.20.138.62:53335] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:41.140877 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.27:32202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:41.141513 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.27:32202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:41.459892 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.14:23146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:41.460516 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.14:23146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:41.474023 2026] [security2:error] [pid 3033631:tid 3033631] [client 103.173.7.236:51990] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyme_mHTdVFAfJjX_XjQAAACI"]
[Thu Jul 30 12:16:41.474084 2026] [security2:error] [pid 3033631:tid 3033631] [client 103.173.7.236:51990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsyme_mHTdVFAfJjX_XjQAAACI"]
[Thu Jul 30 12:16:41.474391 2026] [security2:error] [pid 3033631:tid 3033631] [client 103.173.7.236:51990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsyme_mHTdVFAfJjX_XjQAAACI"]
[Thu Jul 30 12:16:41.672592 2026] [ssl:error] [pid 3027913:tid 3027913] (EAI 2)Name or service not known: [client 144.76.19.72:65324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:41.672630 2026] [ssl:error] [pid 3027913:tid 3027913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:41.727333 2026] [ssl:error] [pid 3029617:tid 3029617] (EAI 2)Name or service not known: [client 144.76.19.72:65334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:41.727362 2026] [ssl:error] [pid 3029617:tid 3029617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:41.756960 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.25:25502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:41.757594 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.25:25502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:41.933956 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.54:46952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:41.934611 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.54:46952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:42.334477 2026] [core:error] [pid 3034666:tid 3034666] [client 66.249.66.167:53943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:42.334536 2026] [core:error] [pid 3034666:tid 3034666] [client 66.249.66.167:53943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:42.367689 2026] [security2:error] [pid 3034670:tid 3034670] [client 43.166.226.186:60200] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hugoashmore.org"] [uri "/"] [unique_id "amsympgKXcvgg1cD10ywjQAAADM"]
[Thu Jul 30 12:16:42.393862 2026] [authz_core:error] [pid 3034668:tid 3034668] [client 57.141.0.63:27040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:42.394518 2026] [authz_core:error] [pid 3034668:tid 3034668] [client 57.141.0.63:27040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:42.910381 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.25:25518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:42.911005 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.25:25518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:43.232188 2026] [ssl:error] [pid 3034569:tid 3034569] (5)Input/output error: [client 216.73.216.199:56767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:43.466157 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.31:58926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:43.466771 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.31:58926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:43.644387 2026] [authz_core:error] [pid 3034674:tid 3034674] [client 57.141.0.43:45392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:43.645011 2026] [authz_core:error] [pid 3034674:tid 3034674] [client 57.141.0.43:45392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:43.724291 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.27:32204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:43.724910 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.27:32204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:43.828054 2026] [access_compat:error] [pid 3030653:tid 3030653] [client 103.25.250.251:4216] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:44.058378 2026] [ssl:error] [pid 3024314:tid 3024314] (70014)End of file found: [client 216.73.216.199:16123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:44.255694 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.53:54490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:44.256324 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.53:54490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:44.356591 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.61:20560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:44.357211 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.61:20560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:44.651861 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.49:27926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:44.652520 2026] [authz_core:error] [pid 3025042:tid 3025042] [client 57.141.0.49:27926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:44.738257 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.37:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:44.738879 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.37:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:44.780908 2026] [ssl:error] [pid 3030606:tid 3030606] (EAI 2)Name or service not known: [client 144.76.19.72:65342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:44.780942 2026] [ssl:error] [pid 3030606:tid 3030606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:44.833009 2026] [ssl:error] [pid 3030658:tid 3030658] (EAI 2)Name or service not known: [client 144.76.19.72:65354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:44.833082 2026] [ssl:error] [pid 3030658:tid 3030658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:45.559870 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.8:24956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:45.560519 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.8:24956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:46.067495 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.39:61780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:46.068157 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.39:61780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:46.308785 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.27:32220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:46.309421 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.27:32220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:46.396079 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.47:38224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:46.396700 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.47:38224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:46.463004 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.22:36400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:46.463643 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.22:36400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:46.702554 2026] [lsapi:warn] [pid 3033247:tid 3033247] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:16:46.769812 2026] [ssl:error] [pid 3030655:tid 3030655] (70014)End of file found: [client 216.73.216.199:2661] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:46.849636 2026] [authz_core:error] [pid 3034279:tid 3034279] [client 57.141.0.18:45386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:46.850254 2026] [authz_core:error] [pid 3034279:tid 3034279] [client 57.141.0.18:45386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:46.865530 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 66.249.66.33:54344] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:16:46.868197 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 66.249.66.33:54344] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:16:47.604440 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.70:38284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:47.605076 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.70:38284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:47.684795 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.71:24896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:47.685482 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.71:24896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:47.889423 2026] [ssl:error] [pid 3033628:tid 3033628] (EAI 2)Name or service not known: [client 144.76.19.72:65358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:47.889475 2026] [ssl:error] [pid 3033628:tid 3033628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:47.942740 2026] [ssl:error] [pid 3034566:tid 3034566] (EAI 2)Name or service not known: [client 144.76.19.72:65370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:47.942773 2026] [ssl:error] [pid 3034566:tid 3034566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:48.389963 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.1:40640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:48.390651 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.1:40640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:48.956261 2026] [security2:error] [pid 3033628:tid 3033628] [client 43.157.62.101:55166] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tripodhome.co.uk"] [uri "/"] [unique_id "amsyoBaW-22dg2aCUPoVkgAAABs"]
[Thu Jul 30 12:16:49.006290 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.17:50930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:49.006912 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.17:50930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:49.248333 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.15:63264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:49.248957 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.15:63264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:49.344486 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.32:48750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:49.345123 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.32:48750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:49.532912 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.68:36322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:49.533570 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.68:36322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:49.590768 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.23:57594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:49.591412 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.23:57594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:49.619602 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.39:61782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:49.620270 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.39:61782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:49.623402 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.33:43960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:49.624049 2026] [authz_core:error] [pid 3021925:tid 3021925] [client 57.141.0.33:43960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:50.256670 2026] [access_compat:error] [pid 3028231:tid 3028231] [client 125.176.202.122:60570] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:50.377486 2026] [ssl:error] [pid 3033630:tid 3033630] (70014)End of file found: [client 216.73.216.199:3376] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:50.621861 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.33:43962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:50.622491 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.33:43962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:50.650292 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 176.241.66.87:26275] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:50.897917 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.2:62874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:50.898924 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.2:62874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:50.930165 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.40:44528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:50.930789 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.40:44528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:50.983981 2026] [ssl:error] [pid 3027913:tid 3027913] (70014)End of file found: [client 216.73.216.199:56610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:51.000484 2026] [ssl:error] [pid 3021925:tid 3021925] (EAI 2)Name or service not known: [client 144.76.19.72:21082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:51.000523 2026] [ssl:error] [pid 3021925:tid 3021925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:51.044550 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.39:61784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:51.045196 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.39:61784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:51.057020 2026] [ssl:error] [pid 3033133:tid 3033133] (EAI 2)Name or service not known: [client 144.76.19.72:21094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:51.057060 2026] [ssl:error] [pid 3033133:tid 3033133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:51.061263 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 20.151.221.234:56827] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-admin/includes/error_log
[Thu Jul 30 12:16:51.202912 2026] [access_compat:error] [pid 3017771:tid 3017771] [client 157.20.138.62:53932] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:51.772389 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.4:29584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:51.773012 2026] [authz_core:error] [pid 3023892:tid 3023892] [client 57.141.0.4:29584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:51.778696 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.38:29256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:51.779333 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.38:29256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:51.815755 2026] [access_compat:error] [pid 3033631:tid 3033631] [client 54.87.15.208:58078] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/09/retroglide-400.jpg
[Thu Jul 30 12:16:51.815916 2026] [access_compat:error] [pid 3033631:tid 3033631] [client 54.87.15.208:58078] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:16:52.025886 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.71:24902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:52.026522 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.71:24902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:52.480681 2026] [security2:error] [pid 3029126:tid 3029126] [client 149.102.240.88:56236] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "alism.com"] [uri "/.git/index"] [unique_id "amsypL1sg9Rk-pQcvt4t4gAAABE"]
[Thu Jul 30 12:16:52.480860 2026] [security2:error] [pid 3029126:tid 3029126] [client 149.102.240.88:56236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "alism.com"] [uri "/.git/index"] [unique_id "amsypL1sg9Rk-pQcvt4t4gAAABE"]
[Thu Jul 30 12:16:52.481049 2026] [security2:error] [pid 3029126:tid 3029126] [client 149.102.240.88:56236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "alism.com"] [uri "/.git/index"] [unique_id "amsypL1sg9Rk-pQcvt4t4gAAABE"]
[Thu Jul 30 12:16:52.900254 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.41:32470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:52.900885 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.41:32470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:53.168121 2026] [authz_core:error] [pid 3034672:tid 3034672] [client 57.141.0.19:21412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:53.168745 2026] [authz_core:error] [pid 3034672:tid 3034672] [client 57.141.0.19:21412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:53.215734 2026] [core:error] [pid 3033631:tid 3033631] [client 57.141.0.4:29598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:53.215790 2026] [core:error] [pid 3033631:tid 3033631] [client 57.141.0.4:29598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:16:53.286539 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.39:61792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:53.287183 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.39:61792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:54.111928 2026] [ssl:error] [pid 3030562:tid 3030562] (EAI 2)Name or service not known: [client 144.76.19.72:21100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:54.111972 2026] [ssl:error] [pid 3030562:tid 3030562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:54.165616 2026] [ssl:error] [pid 3034566:tid 3034566] (EAI 2)Name or service not known: [client 144.76.19.72:21114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:54.165647 2026] [ssl:error] [pid 3034566:tid 3034566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:54.292258 2026] [lsapi:warn] [pid 3033133:tid 3033133] [client 2407:1c00:6300:3390:::0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:16:54.466228 2026] [ssl:error] [pid 3034668:tid 3034668] (70014)End of file found: [client 216.73.216.199:56102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:54.544169 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.28:62932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:54.544787 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.28:62932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:54.693745 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.62:48574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:54.694386 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.62:48574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:54.889730 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.23:27822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:54.890357 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.23:27822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:55.537378 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.1:28418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:55.538019 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.1:28418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:55.655325 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.58:48482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:55.655991 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.58:48482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:55.780744 2026] [access_compat:error] [pid 3033562:tid 3033562] [client 103.25.250.251:60216] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:16:56.009615 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.69:29778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:56.010244 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.69:29778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:56.050177 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.51:44270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:56.050810 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.51:44270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:56.213488 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.11:37104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:56.214122 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.11:37104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:57.167707 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.21:45584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:57.168332 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.21:45584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:57.185003 2026] [lsapi:warn] [pid 3027913:tid 3027913] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:16:57.221175 2026] [ssl:error] [pid 3034672:tid 3034672] (EAI 2)Name or service not known: [client 144.76.19.72:21130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:57.221202 2026] [ssl:error] [pid 3034672:tid 3034672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:57.235697 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.37:29476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:57.236324 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.37:29476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:57.280171 2026] [ssl:error] [pid 3034419:tid 3034419] (EAI 2)Name or service not known: [client 144.76.19.72:21146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:16:57.280207 2026] [ssl:error] [pid 3034419:tid 3034419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:16:57.476976 2026] [core:error] [pid 3030655:tid 3030655] (13)Permission denied: [client 216.73.216.199:7281] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCPv6/sanity_checks
[Thu Jul 30 12:16:57.777909 2026] [core:error] [pid 3032854:tid 3032854] (13)Permission denied: [client 216.73.216.199:40410] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/inet_diag/sections/__kcrctab_gpl
[Thu Jul 30 12:16:57.960013 2026] [security2:error] [pid 3034419:tid 3034419] [client 129.226.195.146:48300] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sarahwiseman.co.uk"] [uri "/"] [unique_id "amsyqV_l6qLG74fuInyd9wAAAAU"]
[Thu Jul 30 12:16:58.159982 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.44:63898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:58.160617 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.44:63898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:58.220754 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.4:29606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:58.221423 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.4:29606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:58.231756 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.64:42610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:58.232359 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.64:42610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:58.272586 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.64:42624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:58.273219 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.64:42624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:58.931670 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.66:57038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:58.932324 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.66:57038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:59.488631 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.66:57048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:16:59.489277 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.66:57048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:16:59.573262 2026] [security2:error] [pid 3034666:tid 3034666] [client 129.226.195.146:50130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amsyq0rOfxYn3-wyyOQ-eAAAACw"], referer: http://www.sarahwiseman.co.uk
[Thu Jul 30 12:16:59.599994 2026] [ssl:error] [pid 3032854:tid 3032854] (70014)End of file found: [client 216.73.216.199:40410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:16:59.892938 2026] [ssl:error] [pid 3030655:tid 3030655] (70014)End of file found: [client 216.73.216.199:7281] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:00.180774 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.49:33678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:00.181404 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.49:33678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:00.339106 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:61672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:00.339136 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:00.391616 2026] [ssl:error] [pid 3027913:tid 3027913] (EAI 2)Name or service not known: [client 144.76.19.72:61680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:00.391654 2026] [ssl:error] [pid 3027913:tid 3027913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:00.711657 2026] [access_compat:error] [pid 3034567:tid 3034567] [client 125.176.202.122:60799] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:00.759203 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.1:40304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:00.759854 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.1:40304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:01.158691 2026] [access_compat:error] [pid 3024363:tid 3024363] [client 176.241.66.87:26985] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:01.200874 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.8:52980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:01.201551 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.8:52980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:01.203757 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:60612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:01.204365 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:60612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:01.293412 2026] [security2:error] [pid 3027913:tid 3027913] [client 185.191.171.3:37334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/levi-ackerman-facts-isayama"] [unique_id "amsyrdkQ2bJl8gia-cxaRwAAACY"]
[Thu Jul 30 12:17:01.378184 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 66.249.66.34:55657] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:17:01.380855 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 66.249.66.34:55657] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:17:01.387711 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.58:48500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:01.388330 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.58:48500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:01.677454 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.71:61932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:01.678081 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.71:61932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:01.736579 2026] [access_compat:error] [pid 3033563:tid 3033563] [client 157.20.138.62:54534] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:02.214608 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.15:26000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:02.215276 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.15:26000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:02.288703 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.62:27508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:02.289331 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.62:27508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:02.519290 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.63:40978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:02.519919 2026] [authz_core:error] [pid 3034670:tid 3034670] [client 57.141.0.63:40978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:02.899466 2026] [ssl:error] [pid 3034668:tid 3034668] (70014)End of file found: [client 216.73.216.199:3628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:03.005505 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.71:61944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:03.006131 2026] [authz_core:error] [pid 3027913:tid 3027913] [client 57.141.0.71:61944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:03.033158 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.32:23400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:03.033779 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.32:23400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:03.239636 2026] [access_compat:error] [pid 3034673:tid 3034673] [client 172.213.225.181:54405] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/edd/
[Thu Jul 30 12:17:03.241931 2026] [access_compat:error] [pid 3034673:tid 3034673] [client 172.213.225.181:54405] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:17:03.243535 2026] [access_compat:error] [pid 3034673:tid 3034673] [client 172.213.225.181:54405] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 12:17:03.268357 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.16:33046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:03.269004 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.16:33046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:03.633436 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amsyr71sg9Rk-pQcvt4t6QAAABE"]
[Thu Jul 30 12:17:03.633648 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amsyr71sg9Rk-pQcvt4t6QAAABE"]
[Thu Jul 30 12:17:03.633929 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amsyr71sg9Rk-pQcvt4t6QAAABE"]
[Thu Jul 30 12:17:03.766869 2026] [ssl:error] [pid 3036116:tid 3036116] (EAI 2)Name or service not known: [client 144.76.19.72:61696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:03.766912 2026] [ssl:error] [pid 3036116:tid 3036116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:03.820731 2026] [ssl:error] [pid 3036115:tid 3036115] (EAI 2)Name or service not known: [client 144.76.19.72:61704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:03.820796 2026] [ssl:error] [pid 3036115:tid 3036115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:03.887179 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.14:29814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:03.887798 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.14:29814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:04.335588 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.51:44282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:04.336281 2026] [authz_core:error] [pid 3029618:tid 3029618] [client 57.141.0.51:44282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:04.339900 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amsysL1sg9Rk-pQcvt4t6gAAABE"]
[Thu Jul 30 12:17:04.340105 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amsysL1sg9Rk-pQcvt4t6gAAABE"]
[Thu Jul 30 12:17:04.340327 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amsysL1sg9Rk-pQcvt4t6gAAABE"]
[Thu Jul 30 12:17:04.657705 2026] [security2:error] [pid 3030653:tid 3030653] [client 5.231.108.52:39856] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/config"] [unique_id "amsysDbLxruOhIz-Tihi-QAAADs"]
[Thu Jul 30 12:17:04.657848 2026] [security2:error] [pid 3030653:tid 3030653] [client 5.231.108.52:39856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/config"] [unique_id "amsysDbLxruOhIz-Tihi-QAAADs"]
[Thu Jul 30 12:17:04.658024 2026] [security2:error] [pid 3030653:tid 3030653] [client 5.231.108.52:39856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/config"] [unique_id "amsysDbLxruOhIz-Tihi-QAAADs"]
[Thu Jul 30 12:17:04.685887 2026] [security2:error] [pid 3036117:tid 3036117] [client 5.231.108.52:39898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.development"] [unique_id "amsysIfEGiLYTQM1QJrCKwAAADI"]
[Thu Jul 30 12:17:04.686087 2026] [security2:error] [pid 3036117:tid 3036117] [client 5.231.108.52:39898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.development"] [unique_id "amsysIfEGiLYTQM1QJrCKwAAADI"]
[Thu Jul 30 12:17:04.686350 2026] [security2:error] [pid 3036117:tid 3036117] [client 5.231.108.52:39898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.development"] [unique_id "amsysIfEGiLYTQM1QJrCKwAAADI"]
[Thu Jul 30 12:17:04.925288 2026] [security2:error] [pid 3030653:tid 3030653] [client 5.231.108.52:39856] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.production"] [unique_id "amsysDbLxruOhIz-Tihi-gAAADs"]
[Thu Jul 30 12:17:04.925549 2026] [security2:error] [pid 3030653:tid 3030653] [client 5.231.108.52:39856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.production"] [unique_id "amsysDbLxruOhIz-Tihi-gAAADs"]
[Thu Jul 30 12:17:04.925804 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/backend/.env"] [unique_id "amsysL1sg9Rk-pQcvt4t7AAAABE"]
[Thu Jul 30 12:17:04.925827 2026] [security2:error] [pid 3030653:tid 3030653] [client 5.231.108.52:39856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.production"] [unique_id "amsysDbLxruOhIz-Tihi-gAAADs"]
[Thu Jul 30 12:17:04.925956 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/backend/.env"] [unique_id "amsysL1sg9Rk-pQcvt4t7AAAABE"]
[Thu Jul 30 12:17:04.926180 2026] [security2:error] [pid 3029126:tid 3029126] [client 5.231.108.52:38198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/backend/.env"] [unique_id "amsysL1sg9Rk-pQcvt4t7AAAABE"]
[Thu Jul 30 12:17:04.962708 2026] [security2:error] [pid 3036117:tid 3036117] [client 5.231.108.52:39898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.local"] [unique_id "amsysIfEGiLYTQM1QJrCLAAAADI"]
[Thu Jul 30 12:17:04.962908 2026] [security2:error] [pid 3036117:tid 3036117] [client 5.231.108.52:39898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.local"] [unique_id "amsysIfEGiLYTQM1QJrCLAAAADI"]
[Thu Jul 30 12:17:04.963150 2026] [security2:error] [pid 3036117:tid 3036117] [client 5.231.108.52:39898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/.env.local"] [unique_id "amsysIfEGiLYTQM1QJrCLAAAADI"]
[Thu Jul 30 12:17:05.000027 2026] [security2:error] [pid 3017771:tid 3017771] [client 5.231.108.52:39906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/api/.env"] [unique_id "amsysEQW5EBBvIvq_Z090QAAAAw"]
[Thu Jul 30 12:17:05.000233 2026] [security2:error] [pid 3017771:tid 3017771] [client 5.231.108.52:39906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/api/.env"] [unique_id "amsysEQW5EBBvIvq_Z090QAAAAw"]
[Thu Jul 30 12:17:05.000456 2026] [security2:error] [pid 3017771:tid 3017771] [client 5.231.108.52:39906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bespokegardenliving.josieandmatt.co.uk"] [uri "/api/.env"] [unique_id "amsysEQW5EBBvIvq_Z090QAAAAw"]
[Thu Jul 30 12:17:05.684150 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.22:45514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:05.684866 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.22:45514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:05.687474 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.44:55054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:05.688156 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.44:55054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:05.854864 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.67:34306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:05.855521 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.67:34306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:05.909882 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.41:50756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:05.910521 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.41:50756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:05.990372 2026] [access_compat:error] [pid 3036166:tid 3036166] [client 103.25.250.251:60217] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:06.072019 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.67:34310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:06.072653 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.67:34310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:06.082155 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.9:26754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:06.082766 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.9:26754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:06.495323 2026] [security2:error] [pid 3036164:tid 3036164] [client 103.76.46.192:52586] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsystMygI2fhOkC4khbkAAAAEI"]
[Thu Jul 30 12:17:06.495391 2026] [security2:error] [pid 3036164:tid 3036164] [client 103.76.46.192:52586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsystMygI2fhOkC4khbkAAAAEI"]
[Thu Jul 30 12:17:06.495827 2026] [security2:error] [pid 3036164:tid 3036164] [client 103.76.46.192:52586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsystMygI2fhOkC4khbkAAAAEI"]
[Thu Jul 30 12:17:06.682489 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.56:32632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:06.683128 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.56:32632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:06.756611 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.43:29844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:06.757245 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.43:29844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:06.798742 2026] [access_compat:error] [pid 3033563:tid 3033563] [client 45.158.164.139:41010] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:17:06.905089 2026] [ssl:error] [pid 3024363:tid 3024363] (EAI 2)Name or service not known: [client 144.76.19.72:61718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:06.905153 2026] [ssl:error] [pid 3024363:tid 3024363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:07.030200 2026] [ssl:error] [pid 3033525:tid 3033525] (EAI 2)Name or service not known: [client 144.76.19.72:61720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:07.030240 2026] [ssl:error] [pid 3033525:tid 3033525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:07.033622 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.42:38724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:07.034240 2026] [authz_core:error] [pid 3024363:tid 3024363] [client 57.141.0.42:38724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:07.056720 2026] [access_compat:error] [pid 3033631:tid 3033631] [client 176.241.66.87:27231] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:07.186495 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.38:34752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:07.187174 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.38:34752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:07.677621 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.59:23614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:07.678248 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.59:23614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:07.706189 2026] [lsapi:warn] [pid 3033133:tid 3033133] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:17:07.862916 2026] [access_compat:error] [pid 3033525:tid 3033525] [client 125.176.202.122:60884] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:08.020535 2026] [ssl:error] [pid 3036165:tid 3036165] (70014)End of file found: [client 216.73.216.199:50956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:08.322229 2026] [ssl:error] [pid 3036163:tid 3036163] (70014)End of file found: [client 216.73.216.199:50027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:08.575453 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.4:31608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:08.576109 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.4:31608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:08.625323 2026] [security2:error] [pid 3036019:tid 3036019] [client 47.86.13.119:40233] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsytIXth2MbuPN4BdLo_QAAAAc"]
[Thu Jul 30 12:17:08.625380 2026] [security2:error] [pid 3036019:tid 3036019] [client 47.86.13.119:40233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsytIXth2MbuPN4BdLo_QAAAAc"]
[Thu Jul 30 12:17:08.625674 2026] [security2:error] [pid 3036019:tid 3036019] [client 47.86.13.119:40233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsytIXth2MbuPN4BdLo_QAAAAc"]
[Thu Jul 30 12:17:08.954743 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.47:34084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:08.955373 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.47:34084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:09.133075 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.42:38730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:09.133698 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.42:38730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:09.380755 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.32:38332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:09.381391 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.32:38332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:09.975889 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.18:59548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:09.976538 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.18:59548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:10.022958 2026] [authz_core:error] [pid 3036019:tid 3036019] [client 57.141.0.11:28846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:10.023662 2026] [authz_core:error] [pid 3036019:tid 3036019] [client 57.141.0.11:28846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:10.083301 2026] [ssl:error] [pid 3016066:tid 3016066] (EAI 2)Name or service not known: [client 144.76.19.72:59136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:10.083327 2026] [ssl:error] [pid 3016066:tid 3016066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:10.135747 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:59146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:10.135770 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:10.259123 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.3:58922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:10.259747 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.3:58922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:10.776130 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.11:28852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:10.776756 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.11:28852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:11.003512 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.31:35238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:11.004134 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.31:35238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:11.294393 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.59:23618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:11.295036 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.59:23618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:11.674650 2026] [access_compat:error] [pid 3036116:tid 3036116] [client 176.241.66.87:27571] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:11.780916 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.37:25502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:11.781570 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.37:25502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:11.817907 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.7:49894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:11.818559 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.7:49894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:11.967384 2026] [security2:error] [pid 3023892:tid 3023892] [client 47.86.13.119:12775] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsytzBNELXvkWz_Iw3pEQAAAA0"]
[Thu Jul 30 12:17:11.967432 2026] [security2:error] [pid 3023892:tid 3023892] [client 47.86.13.119:12775] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsytzBNELXvkWz_Iw3pEQAAAA0"]
[Thu Jul 30 12:17:11.967700 2026] [security2:error] [pid 3023892:tid 3023892] [client 47.86.13.119:12775] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsytzBNELXvkWz_Iw3pEQAAAA0"]
[Thu Jul 30 12:17:12.257160 2026] [access_compat:error] [pid 3035863:tid 3035863] [client 157.20.138.62:55131] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:12.358831 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.63:34004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:12.359461 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.63:34004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:12.544182 2026] [ssl:error] [pid 3026897:tid 3026897] (70014)End of file found: [client 216.73.216.199:31421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:12.659620 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.13:29148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:12.660243 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.13:29148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:12.706625 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.12:25280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:12.707250 2026] [authz_core:error] [pid 3029126:tid 3029126] [client 57.141.0.12:25280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:12.709207 2026] [authz_core:error] [pid 3030652:tid 3030652] [client 57.141.0.35:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:12.709846 2026] [authz_core:error] [pid 3030652:tid 3030652] [client 57.141.0.35:59446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:13.012750 2026] [security2:error] [pid 3036018:tid 3036018] [client 85.208.96.194:17856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1414.0/prev_next,prev.html"] [unique_id "amsyuRcA4Ftj9RhUq2pd8gAAAAQ"]
[Thu Jul 30 12:17:13.192121 2026] [ssl:error] [pid 3034671:tid 3034671] (EAI 2)Name or service not known: [client 144.76.19.72:59158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:13.192164 2026] [ssl:error] [pid 3034671:tid 3034671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:13.221620 2026] [access_compat:error] [pid 3036160:tid 3036160] [client 125.176.202.122:61036] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:13.250082 2026] [ssl:error] [pid 3027913:tid 3027913] (EAI 2)Name or service not known: [client 144.76.19.72:59168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:13.250111 2026] [ssl:error] [pid 3027913:tid 3027913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:13.607546 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.1:29432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:13.608171 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.1:29432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:13.704177 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.29:40476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:13.704797 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.29:40476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:14.139820 2026] [core:error] [pid 3036162:tid 3036162] (13)Permission denied: [client 216.73.216.199:58586] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/pcie_aspm/uevent
[Thu Jul 30 12:17:14.330359 2026] [authz_core:error] [pid 3036115:tid 3036115] [client 57.141.0.13:29164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:14.330982 2026] [authz_core:error] [pid 3036115:tid 3036115] [client 57.141.0.13:29164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:14.656165 2026] [ssl:error] [pid 3036159:tid 3036159] (70014)End of file found: [client 216.73.216.199:49765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:14.762859 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.10:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:14.763484 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.10:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:14.790211 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.19:29072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:14.790832 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.19:29072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:15.788046 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.25:29690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:15.788683 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.25:29690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:16.107048 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.59:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:16.107740 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.59:62860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:16.183896 2026] [access_compat:error] [pid 3036117:tid 3036117] [client 103.25.250.251:60218] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:16.299114 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.8:43874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:16.299736 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.8:43874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:16.304156 2026] [ssl:error] [pid 3033525:tid 3033525] (EAI 2)Name or service not known: [client 144.76.19.72:59184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:16.304176 2026] [ssl:error] [pid 3033525:tid 3033525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:16.312732 2026] [authz_core:error] [pid 3036165:tid 3036165] [client 57.141.0.42:60710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:16.313894 2026] [authz_core:error] [pid 3036165:tid 3036165] [client 57.141.0.42:60710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:16.359935 2026] [ssl:error] [pid 3036114:tid 3036114] (EAI 2)Name or service not known: [client 144.76.19.72:59192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:16.359964 2026] [ssl:error] [pid 3036114:tid 3036114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:16.398242 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.49:63364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:16.398883 2026] [authz_core:error] [pid 3033628:tid 3033628] [client 57.141.0.49:63364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:16.459288 2026] [ssl:error] [pid 3036162:tid 3036162] (70014)End of file found: [client 216.73.216.199:58586] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:16.821222 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.67:39670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:16.822172 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.67:39670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:17.374936 2026] [authz_core:error] [pid 3030562:tid 3030562] [client 57.141.0.23:56996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:17.375594 2026] [authz_core:error] [pid 3030562:tid 3030562] [client 57.141.0.23:56996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:17.493643 2026] [access_compat:error] [pid 3033631:tid 3033631] [client 176.241.66.87:27843] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:17.500130 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.69:52538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:17.500767 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.69:52538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:17.636433 2026] [rewrite:error] [pid 3020912:tid 3020912] [client 74.7.244.27:38446] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/robots.txt
[Thu Jul 30 12:17:17.636584 2026] [rewrite:error] [pid 3020912:tid 3020912] [client 74.7.244.27:38446] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 12:17:17.689323 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.18:59728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:17.689948 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.18:59728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:17.868518 2026] [ssl:error] [pid 3020911:tid 3020911] (70014)End of file found: [client 216.73.216.199:23320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:17.958550 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.59:62874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:17.959193 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.59:62874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:18.223168 2026] [lsapi:warn] [pid 3030562:tid 3030562] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:17:18.726018 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.32:41848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:18.726663 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.32:41848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:18.888980 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.12:25294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:18.889640 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.12:25294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:19.034107 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.34:32840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:19.034731 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.34:32840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:19.416511 2026] [ssl:error] [pid 3036165:tid 3036165] (EAI 2)Name or service not known: [client 144.76.19.72:59202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:19.416549 2026] [ssl:error] [pid 3036165:tid 3036165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:19.465314 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.32:41854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:19.465929 2026] [authz_core:error] [pid 3017771:tid 3017771] [client 57.141.0.32:41854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:19.472785 2026] [ssl:error] [pid 3036114:tid 3036114] (EAI 2)Name or service not known: [client 144.76.19.72:59216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:19.472804 2026] [ssl:error] [pid 3036114:tid 3036114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:19.799282 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 20.151.221.234:56815] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-includes/Text/Diff/Engine/error_log
[Thu Jul 30 12:17:19.869521 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.29:53634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:19.870164 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.29:53634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:20.460807 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.69:26694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:20.461458 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.69:26694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:20.659524 2026] [security2:error] [pid 3036159:tid 3036159] [client 43.153.10.83:53076] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "render-farm.co.uk"] [uri "/"] [unique_id "amsywL6WmmV3qGhdod3-HQAAADw"]
[Thu Jul 30 12:17:20.724913 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.3:65086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:20.725606 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.3:65086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:20.962099 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.47:54860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:20.962724 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.47:54860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:21.137399 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.21:44648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:21.138017 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.21:44648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:21.424684 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.49:29758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:21.425311 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.49:29758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:21.507908 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.1:35180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:21.508541 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.1:35180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:22.179568 2026] [core:error] [pid 3036165:tid 3036165] (13)Permission denied: [client 216.73.216.199:8310] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/rtc_cmos/uevent
[Thu Jul 30 12:17:22.224360 2026] [access_compat:error] [pid 3036286:tid 3036286] [client 176.241.66.87:28211] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:22.426686 2026] [access_compat:error] [pid 3030652:tid 3030652] [client 103.25.250.251:4217] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:22.480563 2026] [ssl:error] [pid 3036165:tid 3036165] (70014)End of file found: [client 216.73.216.199:8310] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:22.532732 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:58080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:22.532779 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:22.534617 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.49:29774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:22.535258 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.49:29774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:22.570959 2026] [authz_core:error] [pid 3034668:tid 3034668] [client 57.141.0.20:45840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:22.571602 2026] [authz_core:error] [pid 3034668:tid 3034668] [client 57.141.0.20:45840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:22.588657 2026] [ssl:error] [pid 3033562:tid 3033562] (EAI 2)Name or service not known: [client 144.76.19.72:58084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:22.588707 2026] [ssl:error] [pid 3033562:tid 3033562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:22.772774 2026] [access_compat:error] [pid 3029617:tid 3029617] [client 157.20.138.62:55736] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:23.034184 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.28:45510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:23.034843 2026] [authz_core:error] [pid 3030606:tid 3030606] [client 57.141.0.28:45510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:23.169688 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.66:33102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:23.170341 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.66:33102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:23.249834 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.52:21550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:23.250481 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.52:21550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:23.625049 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.46:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:23.625711 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.46:58840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:24.098720 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.42:28212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:24.099388 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.42:28212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:24.183743 2026] [ssl:error] [pid 3033133:tid 3033133] (70014)End of file found: [client 216.73.216.199:28162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:24.739291 2026] [access_compat:error] [pid 3029659:tid 3029659] [client 125.176.202.122:61271] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:24.937545 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.45:64728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:24.938199 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.45:64728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:25.137149 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.31:27446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:25.137783 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.31:27446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:25.168882 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.14:49114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:25.169512 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.14:49114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:25.414573 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.24:29350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:25.415217 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.24:29350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:25.645645 2026] [ssl:error] [pid 3036161:tid 3036161] (EAI 2)Name or service not known: [client 144.76.19.72:58100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:25.645683 2026] [ssl:error] [pid 3036161:tid 3036161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:25.700849 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:58102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:25.700889 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:25.765427 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.40:45174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:25.766058 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.40:45174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:26.290909 2026] [ssl:error] [pid 3024156:tid 3024156] (70014)End of file found: [client 216.73.216.199:62352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:26.372696 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.44:29406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:26.373360 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.44:29406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:26.619538 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.28:45526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:26.620176 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.28:45526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:27.001263 2026] [access_compat:error] [pid 3026897:tid 3026897] [client 103.25.250.251:60219] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:27.046009 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.47:32164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:27.046694 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.47:32164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:27.227574 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.28:45532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:27.228205 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.28:45532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:27.320640 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.25:22018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:27.321306 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.25:22018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:27.987340 2026] [ssl:error] [pid 3036116:tid 3036116] (70014)End of file found: [client 216.73.216.199:49054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:28.260082 2026] [authz_core:error] [pid 3036166:tid 3036166] [client 57.141.0.31:44438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:28.260710 2026] [authz_core:error] [pid 3036166:tid 3036166] [client 57.141.0.31:44438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:28.750265 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.59:46150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:28.750863 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.59:46150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:28.754801 2026] [ssl:error] [pid 3030653:tid 3030653] (EAI 2)Name or service not known: [client 144.76.19.72:58108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:28.754834 2026] [ssl:error] [pid 3030653:tid 3030653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:28.809643 2026] [ssl:error] [pid 3029661:tid 3029661] (EAI 2)Name or service not known: [client 144.76.19.72:58112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:28.809666 2026] [ssl:error] [pid 3029661:tid 3029661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:28.810234 2026] [lsapi:warn] [pid 3009642:tid 3009642] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:17:28.966554 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.14:49118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:28.967201 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.14:49118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:28.993650 2026] [authz_core:error] [pid 3036165:tid 3036165] [client 57.141.0.30:64112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:28.994982 2026] [authz_core:error] [pid 3036165:tid 3036165] [client 57.141.0.30:64112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:29.185765 2026] [core:error] [pid 3030652:tid 3030652] [client 66.249.66.196:41370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:29.185806 2026] [core:error] [pid 3030652:tid 3030652] [client 66.249.66.196:41370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:29.189897 2026] [core:error] [pid 3036161:tid 3036161] [client 66.249.66.3:53759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:29.189920 2026] [core:error] [pid 3036161:tid 3036161] [client 66.249.66.3:53759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:29.208721 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.9:22464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:29.209367 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.9:22464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:30.120313 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.19:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:30.120953 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.19:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:30.487210 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.27:33264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:30.487848 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.27:33264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:30.731606 2026] [authz_core:error] [pid 3030652:tid 3030652] [client 57.141.0.65:43472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:30.732229 2026] [authz_core:error] [pid 3030652:tid 3030652] [client 57.141.0.65:43472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:30.736966 2026] [core:error] [pid 3034569:tid 3034569] [client 57.141.0.71:26972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:30.736984 2026] [core:error] [pid 3034569:tid 3034569] [client 57.141.0.71:26972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:31.412240 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.16:23952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:31.412865 2026] [authz_core:error] [pid 3029659:tid 3029659] [client 57.141.0.16:23952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:31.455823 2026] [access_compat:error] [pid 3029661:tid 3029661] [client 125.176.202.122:61374] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:31.532464 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.19:33290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:31.533109 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.19:33290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:31.595764 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.29:57266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:31.596412 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.29:57266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:31.764640 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.71:26976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:31.765292 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.71:26976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:31.863465 2026] [ssl:error] [pid 3030652:tid 3030652] (EAI 2)Name or service not known: [client 144.76.19.72:51744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:31.863533 2026] [ssl:error] [pid 3030652:tid 3030652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:31.916799 2026] [ssl:error] [pid 3029659:tid 3029659] (EAI 2)Name or service not known: [client 144.76.19.72:51754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:31.916826 2026] [ssl:error] [pid 3029659:tid 3029659] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:32.013513 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.47:29644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:32.014155 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.47:29644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:32.135291 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.37:54678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:32.135985 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.37:54678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:32.739531 2026] [access_compat:error] [pid 3024156:tid 3024156] [client 176.241.66.87:28798] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:33.006197 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.45:52802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:33.006846 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.45:52802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:33.139814 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.69:57714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:33.140468 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.69:57714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:33.214043 2026] [core:error] [pid 3029617:tid 3029617] (13)Permission denied: [client 216.73.216.199:53675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty50/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:17:33.371766 2026] [access_compat:error] [pid 3013378:tid 3013378] [client 157.20.138.62:56342] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:33.547299 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.2:46004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:33.547928 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.2:46004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:33.588649 2026] [authz_core:error] [pid 3036114:tid 3036114] [client 57.141.0.47:29654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:33.589283 2026] [authz_core:error] [pid 3036114:tid 3036114] [client 57.141.0.47:29654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:33.776279 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.37:54694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:33.776901 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.37:54694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:34.279945 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.69:57716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:34.280611 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.69:57716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:34.286562 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.58:36708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:34.287209 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.58:36708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:34.815296 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.25:23374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:34.815922 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.25:23374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:34.992808 2026] [ssl:error] [pid 3034569:tid 3034569] (EAI 2)Name or service not known: [client 144.76.19.72:51768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:34.992885 2026] [ssl:error] [pid 3034569:tid 3034569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:35.044664 2026] [ssl:error] [pid 3034671:tid 3034671] (EAI 2)Name or service not known: [client 144.76.19.72:51784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:35.044697 2026] [ssl:error] [pid 3034671:tid 3034671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:35.318659 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.8:55354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:35.319290 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.8:55354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:35.614195 2026] [access_compat:error] [pid 3036116:tid 3036116] [client 125.176.202.122:61505] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:35.622347 2026] [core:error] [pid 3029617:tid 3029617] (13)Permission denied: [client 216.73.216.199:53675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS3/closing_wait
[Thu Jul 30 12:17:35.995755 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.18:39304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:35.996413 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.18:39304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:36.018005 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.67:63876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:36.018662 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.67:63876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:36.301775 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.9:32328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:36.302419 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.9:32328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:36.561613 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.66:55752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:36.562239 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.66:55752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:36.954870 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.29:57280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:36.955506 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.29:57280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:37.196249 2026] [security2:error] [pid 3033247:tid 3033247] [client 106.52.49.148:59032] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsy0fDzQeaf57L_M5P4cwAAAA8"], referer: http://www.banskoexpress.co.uk
[Thu Jul 30 12:17:37.644966 2026] [access_compat:error] [pid 3035863:tid 3035863] [client 103.25.250.251:4683] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:37.977216 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.15:27914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:37.977842 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.15:27914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:38.031225 2026] [core:error] [pid 3029617:tid 3029617] (13)Permission denied: [client 216.73.216.199:53675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/partial
[Thu Jul 30 12:17:38.099621 2026] [ssl:error] [pid 3030653:tid 3030653] (EAI 2)Name or service not known: [client 144.76.19.72:51786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:38.099657 2026] [ssl:error] [pid 3030653:tid 3030653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:38.130185 2026] [authz_core:error] [pid 3034668:tid 3034668] [client 57.141.0.4:52982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:38.130815 2026] [authz_core:error] [pid 3034668:tid 3034668] [client 57.141.0.4:52982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:38.151620 2026] [ssl:error] [pid 3036114:tid 3036114] (EAI 2)Name or service not known: [client 144.76.19.72:51788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:38.151668 2026] [ssl:error] [pid 3036114:tid 3036114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:38.332437 2026] [ssl:error] [pid 3029617:tid 3029617] (70014)End of file found: [client 216.73.216.199:53675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:38.511367 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.10:21270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:38.512010 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 57.141.0.10:21270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:38.514952 2026] [access_compat:error] [pid 3033630:tid 3033630] [client 176.241.66.87:29059] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:38.667314 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.62:56200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:38.668005 2026] [authz_core:error] [pid 3034569:tid 3034569] [client 57.141.0.62:56200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:38.838015 2026] [core:error] [pid 3034668:tid 3034668] (13)Permission denied: [client 216.73.216.199:11008] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory257/subsystem/uevent
[Thu Jul 30 12:17:39.222560 2026] [core:error] [pid 3029576:tid 3029576] [client 66.249.66.168:46306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:39.222596 2026] [core:error] [pid 3029576:tid 3029576] [client 66.249.66.168:46306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:39.248061 2026] [lsapi:warn] [pid 3025636:tid 3025636] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:17:39.259857 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.32:54300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:39.260495 2026] [authz_core:error] [pid 3033247:tid 3033247] [client 57.141.0.32:54300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:39.330183 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.50:26072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:39.330827 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.50:26072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:39.386592 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 20.151.221.234:59393] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-includes/ID3/error_log
[Thu Jul 30 12:17:39.424514 2026] [core:error] [pid 3034569:tid 3034569] [client 57.141.0.2:53496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:39.424552 2026] [core:error] [pid 3034569:tid 3034569] [client 57.141.0.2:53496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:39.473186 2026] [authz_core:error] [pid 3034666:tid 3034666] [client 20.151.221.234:59393] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-includes/Text/Diff/error_log
[Thu Jul 30 12:17:40.146946 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.4:52998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:40.147577 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.4:52998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:40.445666 2026] [ssl:error] [pid 3034668:tid 3034668] (70014)End of file found: [client 216.73.216.199:11008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:40.809690 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.49:47114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:40.810345 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.49:47114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:40.956442 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.2:53512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:40.957157 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.2:53512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:40.963656 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.71:45310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:40.964284 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.71:45310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:41.205202 2026] [ssl:error] [pid 3029576:tid 3029576] (EAI 2)Name or service not known: [client 144.76.19.72:40290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:41.205247 2026] [ssl:error] [pid 3029576:tid 3029576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:41.258385 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.25:23454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:41.259029 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.25:23454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:41.261432 2026] [ssl:error] [pid 3033630:tid 3033630] (EAI 2)Name or service not known: [client 144.76.19.72:40300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:41.261480 2026] [ssl:error] [pid 3033630:tid 3033630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:41.340590 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.15:27924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:41.341230 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.15:27924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:42.095879 2026] [security2:error] [pid 3033562:tid 3033562] [client 106.52.49.148:56096] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsy1m5mGf47eAOpmQojigAAABY"], referer: http://www.banskoexpress.com
[Thu Jul 30 12:17:42.252658 2026] [ssl:error] [pid 3025091:tid 3025091] (70014)End of file found: [client 216.73.216.199:42241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:42.322365 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.71:45314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:42.323006 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.71:45314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:42.347105 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.50:59800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:42.347726 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.50:59800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:42.632118 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.29:48340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:42.632767 2026] [authz_core:error] [pid 3030561:tid 3030561] [client 57.141.0.29:48340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:42.645366 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 125.176.202.122:61591] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:43.100297 2026] [security2:error] [pid 3020911:tid 3020911] [client 114.119.144.31:62813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~102,18/request_format~html"] [unique_id "amsy13eQLwlxHDOiAds5SQAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~102,18/request_format~html
[Thu Jul 30 12:17:43.137933 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.17:40112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:43.138566 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.17:40112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:43.237829 2026] [access_compat:error] [pid 3033525:tid 3033525] [client 176.241.66.87:29417] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:43.288840 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 89.124.92.137:63119] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:17:43.291559 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 89.124.92.137:63119] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:17:43.360421 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 139.162.177.81:38930] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 12:17:43.594992 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.44:36952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:43.595660 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.44:36952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:43.850083 2026] [access_compat:error] [pid 3030651:tid 3030651] [client 157.20.138.62:57005] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:43.879477 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.67:64724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:43.880162 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.67:64724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:43.944695 2026] [access_compat:error] [pid 3033562:tid 3033562] [client 103.25.250.251:4684] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:44.086211 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.65:63614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:44.086837 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.65:63614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:44.170635 2026] [security2:error] [pid 3036162:tid 3036162] [client 114.119.144.31:62829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~102,18/request_format~html"] [unique_id "amsy2JOgvfaF1-zGPcPEJgAAAEA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~102,18/request_format~html
[Thu Jul 30 12:17:44.314981 2026] [ssl:error] [pid 3020911:tid 3020911] (EAI 2)Name or service not known: [client 144.76.19.72:40314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:44.315003 2026] [ssl:error] [pid 3020911:tid 3020911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:44.371563 2026] [ssl:error] [pid 3033563:tid 3033563] (EAI 2)Name or service not known: [client 144.76.19.72:40324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:44.371599 2026] [ssl:error] [pid 3033563:tid 3033563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:44.646595 2026] [security2:error] [pid 3020911:tid 3020911] [client 94.154.43.186:20036] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/.env"] [unique_id "amsy2HeQLwlxHDOiAds5TgAAABA"]
[Thu Jul 30 12:17:44.646792 2026] [security2:error] [pid 3020911:tid 3020911] [client 94.154.43.186:20036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/.env"] [unique_id "amsy2HeQLwlxHDOiAds5TgAAABA"]
[Thu Jul 30 12:17:44.647361 2026] [security2:error] [pid 3020911:tid 3020911] [client 94.154.43.186:20036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amsy2HeQLwlxHDOiAds5TgAAABA"]
[Thu Jul 30 12:17:44.648589 2026] [security2:error] [pid 3030561:tid 3030561] [client 94.154.43.177:63426] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/.env"] [unique_id "amsy2Dj90ts9dm7sOAUWpAAAACs"]
[Thu Jul 30 12:17:44.648786 2026] [security2:error] [pid 3030561:tid 3030561] [client 94.154.43.177:63426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/.env"] [unique_id "amsy2Dj90ts9dm7sOAUWpAAAACs"]
[Thu Jul 30 12:17:44.649020 2026] [security2:error] [pid 3030561:tid 3030561] [client 94.154.43.177:63426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amsy2Dj90ts9dm7sOAUWpAAAACs"]
[Thu Jul 30 12:17:45.196244 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.9:34460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:45.196901 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.9:34460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:45.379890 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.10:21276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:45.380640 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.10:21276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:45.412227 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.55:43752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:45.412847 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.55:43752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:45.952348 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.54:42238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:45.952988 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.54:42238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:46.208328 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.7:64110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:46.208952 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.7:64110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:46.288830 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.1:37828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:46.289474 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.1:37828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:46.374778 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.6:54120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:46.375413 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.6:54120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:46.928245 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.65:63632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:46.928904 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.65:63632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:47.208856 2026] [access_compat:error] [pid 3013378:tid 3013378] [client 125.176.202.122:61731] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:47.358143 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.67:64754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:47.358758 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.67:64754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:47.426368 2026] [ssl:error] [pid 3034567:tid 3034567] (EAI 2)Name or service not known: [client 144.76.19.72:40334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:47.426403 2026] [ssl:error] [pid 3034567:tid 3034567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:47.482521 2026] [ssl:error] [pid 3030608:tid 3030608] (EAI 2)Name or service not known: [client 144.76.19.72:40346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:47.482547 2026] [ssl:error] [pid 3030608:tid 3030608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:47.955175 2026] [authz_core:error] [pid 3038215:tid 3038215] [client 57.141.0.61:61736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:47.956453 2026] [authz_core:error] [pid 3038215:tid 3038215] [client 57.141.0.61:61736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:48.124648 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.62:50840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:48.125342 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.62:50840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:48.690216 2026] [ssl:error] [pid 3030608:tid 3030608] (70014)End of file found: [client 216.73.216.199:1710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:48.789479 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.39:60640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:48.790118 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.39:60640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:49.082847 2026] [access_compat:error] [pid 3034671:tid 3034671] [client 176.241.66.87:29661] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:49.347541 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.7:64118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:49.348163 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.7:64118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:49.350763 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.1:37838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:49.351377 2026] [authz_core:error] [pid 3030653:tid 3030653] [client 57.141.0.1:37838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:49.595001 2026] [ssl:error] [pid 3034668:tid 3034668] (70014)End of file found: [client 216.73.216.199:57799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:49.743306 2026] [lsapi:warn] [pid 3035863:tid 3035863] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:17:49.980981 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.7:64130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:49.981620 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.7:64130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:50.104154 2026] [core:error] [pid 3030651:tid 3030651] (13)Permission denied: [client 216.73.216.199:59214] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory19/subsystem/uevent
[Thu Jul 30 12:17:50.271588 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.10:22368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:50.272213 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.10:22368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:50.418145 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.51:50786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:50.418786 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.51:50786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:50.501991 2026] [ssl:error] [pid 3030651:tid 3030651] (70014)End of file found: [client 216.73.216.199:59214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:50.538174 2026] [ssl:error] [pid 3032699:tid 3032699] (EAI 2)Name or service not known: [client 144.76.19.72:55212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:50.538215 2026] [ssl:error] [pid 3032699:tid 3032699] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:50.590080 2026] [ssl:error] [pid 3020912:tid 3020912] (EAI 2)Name or service not known: [client 144.76.19.72:55222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:50.590104 2026] [ssl:error] [pid 3020912:tid 3020912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:50.599414 2026] [security2:error] [pid 3016066:tid 3016066] [client 18.207.79.144:11917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/services/"] [unique_id "amsy3sn-KnOK0mq6po7qsAAAACg"]
[Thu Jul 30 12:17:50.910615 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.16:48214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:50.911258 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.16:48214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:51.563691 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.9:34476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:51.564315 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.9:34476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:51.869348 2026] [core:error] [pid 3038428:tid 3038428] [client 57.141.0.65:26112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:51.869394 2026] [core:error] [pid 3038428:tid 3038428] [client 57.141.0.65:26112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:51.955891 2026] [authz_core:error] [pid 3038428:tid 3038428] [client 80.225.239.192:55309] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:51.956440 2026] [authz_core:error] [pid 3038428:tid 3038428] [client 80.225.239.192:55309] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:52.080843 2026] [core:error] [pid 3038428:tid 3038428] [client 80.225.239.192:55309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:52.080868 2026] [core:error] [pid 3038428:tid 3038428] [client 80.225.239.192:55309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:52.180867 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.30:63816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:52.181509 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.30:63816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:52.288671 2026] [core:error] [pid 3033631:tid 3033631] [client 66.249.66.66:39524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:52.288705 2026] [core:error] [pid 3033631:tid 3033631] [client 66.249.66.66:39524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:52.292023 2026] [authz_core:error] [pid 3038428:tid 3038428] [client 57.141.0.38:60712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:52.292651 2026] [authz_core:error] [pid 3038428:tid 3038428] [client 57.141.0.38:60712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:52.339922 2026] [core:error] [pid 3036161:tid 3036161] [client 80.225.239.192:61940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:17:52.437870 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.24:64376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:52.438525 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.24:64376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:52.922335 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.60:39244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:52.923022 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.60:39244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:53.631281 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.29:53670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:53.631907 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.29:53670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:53.642055 2026] [ssl:error] [pid 3024156:tid 3024156] (EAI 2)Name or service not known: [client 144.76.19.72:55234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:53.642113 2026] [ssl:error] [pid 3024156:tid 3024156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:53.695454 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:55244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:53.695490 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:53.771446 2026] [access_compat:error] [pid 3032699:tid 3032699] [client 176.241.66.87:64998] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:53.810450 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.50:31906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:53.811113 2026] [authz_core:error] [pid 3036161:tid 3036161] [client 57.141.0.50:31906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:53.811435 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.65:26114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:53.812140 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.65:26114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:53.905817 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.16:48218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:53.906460 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.16:48218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:54.347593 2026] [access_compat:error] [pid 3024156:tid 3024156] [client 157.20.138.62:57835] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:54.420430 2026] [ssl:error] [pid 3036162:tid 3036162] (70014)End of file found: [client 216.73.216.199:11900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:54.585703 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.58:51998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:54.586328 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.58:51998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:54.805726 2026] [security2:error] [pid 3025091:tid 3025091] [client 114.119.145.68:23513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amsy4qrXO0chUKEnmm0KhwAAAB0"], referer: http://www.jonathanhill.co.uk/
[Thu Jul 30 12:17:54.820046 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.30:63818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:54.820691 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.30:63818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:54.821936 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.17:29894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:54.822654 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.17:29894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:54.899007 2026] [ssl:error] [pid 3034668:tid 3034668] (70014)End of file found: [client 216.73.216.199:59448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:55.353196 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.26:52458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:55.353892 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.26:52458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:55.538812 2026] [cgi:error] [pid 3030608:tid 3030608] [client 185.166.43.42:64598] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: https://www.google.co.uk/
[Thu Jul 30 12:17:55.575217 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.11:26220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:55.575857 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.11:26220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:55.921572 2026] [ssl:error] [pid 3033525:tid 3033525] (70014)End of file found: [client 216.73.216.199:44537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:56.572059 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.29:53672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:56.572717 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.29:53672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:56.575402 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.59:28016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:56.576016 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.59:28016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:56.755670 2026] [ssl:error] [pid 3020911:tid 3020911] (EAI 2)Name or service not known: [client 144.76.19.72:55268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:56.755710 2026] [ssl:error] [pid 3020911:tid 3020911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:56.808772 2026] [ssl:error] [pid 3028231:tid 3028231] (EAI 2)Name or service not known: [client 144.76.19.72:55272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:56.808800 2026] [ssl:error] [pid 3028231:tid 3028231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:56.892585 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.16:48240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:56.893214 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.16:48240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:56.943367 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.14:38564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:56.944013 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.14:38564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:57.493647 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.36:21762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:57.494277 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.36:21762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:58.399161 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.54:54968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:58.399801 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.54:54968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:58.558741 2026] [access_compat:error] [pid 3036286:tid 3036286] [client 125.176.202.122:61966] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:17:58.678353 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.70:24806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:58.678986 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.70:24806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:58.838446 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.8:20414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:58.839091 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.8:20414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:58.936406 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.62:57452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:58.937031 2026] [authz_core:error] [pid 3025091:tid 3025091] [client 57.141.0.62:57452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:59.347706 2026] [authz_core:error] [pid 3034673:tid 3034673] [client 57.141.0.55:23464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:59.348328 2026] [authz_core:error] [pid 3034673:tid 3034673] [client 57.141.0.55:23464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:59.566936 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.48:39868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:59.567580 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.48:39868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:59.695973 2026] [security2:error] [pid 3033630:tid 3033630] [client 185.191.171.17:28050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1808.0/prev_next,prev.html"] [unique_id "amsy54gVV9m2JwRGAgP2CQAAACE"]
[Thu Jul 30 12:17:59.712683 2026] [ssl:error] [pid 3034671:tid 3034671] (70014)End of file found: [client 216.73.216.199:44618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:17:59.854327 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.44:41156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:17:59.854958 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.44:41156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:17:59.865397 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:42658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:59.865421 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:17:59.918735 2026] [ssl:error] [pid 3025636:tid 3025636] (EAI 2)Name or service not known: [client 144.76.19.72:42672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:17:59.918784 2026] [ssl:error] [pid 3025636:tid 3025636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:00.207179 2026] [access_compat:error] [pid 3038495:tid 3038495] [client 2.189.5.142:34210] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:18:00.332385 2026] [ssl:error] [pid 3034566:tid 3034566] (70014)End of file found: [client 216.73.216.199:30530] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:00.407614 2026] [lsapi:warn] [pid 3036162:tid 3036162] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:18:00.669191 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.53:52408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:00.669827 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.53:52408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:00.884970 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.61:42846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:00.885610 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.61:42846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:01.240043 2026] [ssl:error] [pid 3038495:tid 3038495] (70014)End of file found: [client 216.73.216.199:48215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:01.429293 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.3:56290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:01.429920 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.3:56290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:01.583877 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.64:61008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:01.584516 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.64:61008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:01.696526 2026] [security2:error] [pid 3036117:tid 3036117] [client 185.191.171.1:23276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/captain-mark-howard-eyebrows"] [unique_id "amsy6YfEGiLYTQM1QJrCpwAAADI"]
[Thu Jul 30 12:18:01.721094 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.54:54970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:01.721721 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.54:54970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:01.826132 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.22:22414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:01.826776 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.22:22414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:01.947419 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.55:23474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:01.948051 2026] [authz_core:error] [pid 3032699:tid 3032699] [client 57.141.0.55:23474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:02.761858 2026] [authz_core:error] [pid 3036244:tid 3036244] [client 57.141.0.63:53416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:02.762562 2026] [authz_core:error] [pid 3036244:tid 3036244] [client 57.141.0.63:53416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:02.975770 2026] [ssl:error] [pid 3013378:tid 3013378] (EAI 2)Name or service not known: [client 144.76.19.72:42684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:02.975796 2026] [ssl:error] [pid 3013378:tid 3013378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:03.029745 2026] [ssl:error] [pid 3033563:tid 3033563] (EAI 2)Name or service not known: [client 144.76.19.72:42696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:03.029780 2026] [ssl:error] [pid 3033563:tid 3033563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:03.214818 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.2:35146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:03.215452 2026] [authz_core:error] [pid 3029617:tid 3029617] [client 57.141.0.2:35146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:04.086224 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.48:39880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:04.086850 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.48:39880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:04.143145 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.3:56298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:04.143762 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.3:56298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:04.236057 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.6:44494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:04.236712 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.6:44494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:04.304121 2026] [access_compat:error] [pid 3036117:tid 3036117] [client 176.241.66.87:30541] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:04.347003 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.55:56274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:04.347638 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.55:56274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:04.887679 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.26:56430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:04.888387 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.26:56430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:04.906396 2026] [access_compat:error] [pid 3030653:tid 3030653] [client 157.20.138.62:58486] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:05.069470 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 20.151.221.234:61062] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-admin/maint/error_log
[Thu Jul 30 12:18:05.261855 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.53:52436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:05.262490 2026] [authz_core:error] [pid 3033562:tid 3033562] [client 57.141.0.53:52436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:05.475389 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.17:32196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:05.476020 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.17:32196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:05.751581 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.15:47996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:05.752212 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.15:47996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:05.855316 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.7:61684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:05.855940 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.7:61684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:05.933617 2026] [ssl:error] [pid 3033563:tid 3033563] (70014)End of file found: [client 216.73.216.199:31186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:06.091769 2026] [security2:error] [pid 3036162:tid 3036162] [client 103.78.18.178:57669] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsy7pOgvfaF1-zGPcPELgAAAEA"]
[Thu Jul 30 12:18:06.091838 2026] [security2:error] [pid 3036162:tid 3036162] [client 103.78.18.178:57669] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsy7pOgvfaF1-zGPcPELgAAAEA"]
[Thu Jul 30 12:18:06.092190 2026] [security2:error] [pid 3036162:tid 3036162] [client 103.78.18.178:57669] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsy7pOgvfaF1-zGPcPELgAAAEA"]
[Thu Jul 30 12:18:06.105963 2026] [ssl:error] [pid 3034566:tid 3034566] (EAI 2)Name or service not known: [client 144.76.19.72:42706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:06.106000 2026] [ssl:error] [pid 3034566:tid 3034566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:06.159355 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:42716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:06.159383 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:06.298528 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.62:45428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:06.299154 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.62:45428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:06.805203 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.66:51762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:06.805828 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.66:51762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:06.956696 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.35:38366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:06.957322 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.35:38366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:07.122726 2026] [access_compat:error] [pid 3027695:tid 3027695] [client 20.206.204.219:65368] AH01797: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-content/uploads/ps_auto_sitemap/, referer: binance.com
[Thu Jul 30 12:18:07.272689 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.22:22428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:07.273383 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.22:22428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:07.529702 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.62:45438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:07.530334 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.62:45438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:07.639869 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.31:43548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:07.640508 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.31:43548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:07.663245 2026] [ssl:error] [pid 3033562:tid 3033562] (70014)End of file found: [client 216.73.216.199:22819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:07.895317 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.63:31134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:07.896003 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.63:31134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:08.149259 2026] [ssl:error] [pid 3038615:tid 3038615] (70014)End of file found: [client 216.73.216.199:51449] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:08.469344 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.46:47512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:08.470027 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.46:47512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:08.528165 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.21:60120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:08.528878 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.21:60120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:09.128494 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.39:52420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:09.129124 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.39:52420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:09.212733 2026] [ssl:error] [pid 3036162:tid 3036162] (EAI 2)Name or service not known: [client 144.76.19.72:42724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:09.212774 2026] [ssl:error] [pid 3036162:tid 3036162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:09.266124 2026] [ssl:error] [pid 3029576:tid 3029576] (EAI 2)Name or service not known: [client 144.76.19.72:42728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:09.266157 2026] [ssl:error] [pid 3029576:tid 3029576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:09.272775 2026] [access_compat:error] [pid 3036116:tid 3036116] [client 125.176.202.122:62197] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:09.373320 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.23:58348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:09.373942 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.23:58348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:09.730005 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.64:54188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:09.730661 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.64:54188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:09.738943 2026] [access_compat:error] [pid 3020912:tid 3020912] [client 45.158.164.139:43162] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:18:09.789135 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.15:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:09.789753 2026] [authz_core:error] [pid 3034566:tid 3034566] [client 57.141.0.15:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:09.833010 2026] [core:error] [pid 3038428:tid 3038428] [client 66.249.66.39:47473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:09.833037 2026] [core:error] [pid 3038428:tid 3038428] [client 66.249.66.39:47473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:09.833813 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.47:47794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:09.834447 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.47:47794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:09.966429 2026] [security2:error] [pid 3038495:tid 3038495] [client 43.153.96.79:39480] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsy8XhweRPniRLmBb1wGAAAAAo"], referer: http://banskoexpresstransfers.com
[Thu Jul 30 12:18:10.086290 2026] [access_compat:error] [pid 3029576:tid 3029576] [client 176.241.66.87:49394] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:10.238557 2026] [cgi:error] [pid 3039205:tid 3039205] [client 68.67.112.68:21342] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:18:10.676555 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.22:45580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:10.677185 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.22:45580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:10.936475 2026] [lsapi:warn] [pid 3034671:tid 3034671] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:18:11.253084 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.47:47798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:11.253709 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.47:47798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:11.484329 2026] [security2:error] [pid 3038495:tid 3038495] [client 170.79.201.36:18374] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsy83hweRPniRLmBb1wGQAAAAo"]
[Thu Jul 30 12:18:11.484379 2026] [security2:error] [pid 3038495:tid 3038495] [client 170.79.201.36:18374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsy83hweRPniRLmBb1wGQAAAAo"]
[Thu Jul 30 12:18:11.484679 2026] [security2:error] [pid 3038495:tid 3038495] [client 170.79.201.36:18374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsy83hweRPniRLmBb1wGQAAAAo"]
[Thu Jul 30 12:18:11.561610 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.58:42360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:11.562232 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.58:42360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:11.574244 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.64:54196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:11.574894 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.64:54196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:11.807711 2026] [security2:error] [pid 3026897:tid 3026897] [client 43.153.96.79:37954] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amsy82VX0gxdyfRqKSwNlgAAAAs"], referer: http://www.banskoexpress.com
[Thu Jul 30 12:18:12.135425 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.60:29280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:12.136125 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.60:29280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:12.319665 2026] [ssl:error] [pid 3034671:tid 3034671] (EAI 2)Name or service not known: [client 144.76.19.72:55778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:12.319707 2026] [ssl:error] [pid 3034671:tid 3034671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:12.372565 2026] [ssl:error] [pid 3030651:tid 3030651] (EAI 2)Name or service not known: [client 144.76.19.72:55790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:12.372599 2026] [ssl:error] [pid 3030651:tid 3030651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:12.397373 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.54:41120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:12.398037 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.54:41120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:12.991260 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.37:28668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:12.991966 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.37:28668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:13.408295 2026] [authz_core:error] [pid 3038428:tid 3038428] [client 57.141.0.48:20222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:13.408958 2026] [authz_core:error] [pid 3038428:tid 3038428] [client 57.141.0.48:20222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:13.790779 2026] [core:error] [pid 3033525:tid 3033525] (13)Permission denied: [client 216.73.216.199:26712] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/userips
[Thu Jul 30 12:18:13.824468 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.49:24758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:13.825105 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.49:24758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:13.826895 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.33:62418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:13.827511 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.33:62418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:14.330902 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.48:20236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:14.331534 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.48:20236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:14.716480 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.62:37486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:14.717114 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.62:37486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:14.828086 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.46:63760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:14.828706 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.46:63760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:14.832525 2026] [access_compat:error] [pid 3033247:tid 3033247] [client 176.241.66.87:49718] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:15.002665 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.15:24422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:15.003297 2026] [authz_core:error] [pid 3013378:tid 3013378] [client 57.141.0.15:24422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:15.390781 2026] [access_compat:error] [pid 3024156:tid 3024156] [client 157.20.138.62:59083] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:15.429783 2026] [ssl:error] [pid 3030655:tid 3030655] (EAI 2)Name or service not known: [client 144.76.19.72:55802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:15.429832 2026] [ssl:error] [pid 3030655:tid 3030655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:15.484559 2026] [ssl:error] [pid 3036116:tid 3036116] (EAI 2)Name or service not known: [client 144.76.19.72:55814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:15.484649 2026] [ssl:error] [pid 3036116:tid 3036116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:15.541201 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.52:23216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:15.541853 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.52:23216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:15.598144 2026] [ssl:error] [pid 3033525:tid 3033525] (70014)End of file found: [client 216.73.216.199:26712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:15.894481 2026] [ssl:error] [pid 3038043:tid 3038043] (70014)End of file found: [client 216.73.216.199:39169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:15.916931 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.42:53526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:15.917954 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.42:53526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:15.957685 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.22:45594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:15.958332 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.22:45594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:16.089999 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.29:60626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:16.090675 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.29:60626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:16.697760 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.56:61204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:16.698392 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.56:61204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:17.135103 2026] [security2:error] [pid 3038494:tid 3038494] [client 103.183.63.62:43832] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsy-Y8hqBe_lkB9YdTxYgAAAAk"]
[Thu Jul 30 12:18:17.135163 2026] [security2:error] [pid 3038494:tid 3038494] [client 103.183.63.62:43832] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsy-Y8hqBe_lkB9YdTxYgAAAAk"]
[Thu Jul 30 12:18:17.135482 2026] [security2:error] [pid 3038494:tid 3038494] [client 103.183.63.62:43832] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsy-Y8hqBe_lkB9YdTxYgAAAAk"]
[Thu Jul 30 12:18:17.370306 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.21:29286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:17.370937 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.21:29286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:17.445279 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.35:25456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:17.445904 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.35:25456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:17.900181 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.15:24434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:17.900818 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.15:24434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:18.002030 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.23:48900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:18.002668 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.23:48900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:18.174822 2026] [core:error] [pid 3033563:tid 3033563] [client 66.249.66.167:50325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:18.174844 2026] [core:error] [pid 3033563:tid 3033563] [client 66.249.66.167:50325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:18.546414 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.12:53234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:18.547041 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.12:53234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:18.569286 2026] [ssl:error] [pid 3036160:tid 3036160] (EAI 2)Name or service not known: [client 144.76.19.72:55820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:18.569318 2026] [ssl:error] [pid 3036160:tid 3036160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:18.624063 2026] [ssl:error] [pid 3036160:tid 3036160] (EAI 2)Name or service not known: [client 144.76.19.72:55830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:18.624102 2026] [ssl:error] [pid 3036160:tid 3036160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:18.936392 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.8:26334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:18.937010 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.8:26334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:19.185892 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.25:48356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:19.186548 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.25:48356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:19.236982 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.15:24438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:19.237619 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.15:24438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:19.377621 2026] [security2:error] [pid 3039628:tid 3039628] [client 85.208.98.31:33042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/canali-parisian-gentleman-k.html"] [unique_id "amsy-6zU05C8xoG3HcKxgwAAABQ"]
[Thu Jul 30 12:18:19.511233 2026] [core:error] [pid 3039484:tid 3039484] (13)Permission denied: [client 216.73.216.199:37071] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty35/subsystem/ttyS1/uartclk
[Thu Jul 30 12:18:19.694602 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.4:20010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:19.695232 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.4:20010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:20.221184 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.19:34272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:20.221802 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.19:34272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:20.321645 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:18:20.341843 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 12:18:20.341908 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.364239 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 12:18:20.364308 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.385013 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/66.php
[Thu Jul 30 12:18:20.385082 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.404652 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-edit.php
[Thu Jul 30 12:18:20.404692 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.409926 2026] [ssl:error] [pid 3039484:tid 3039484] (70014)End of file found: [client 216.73.216.199:37071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:20.424752 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 12:18:20.424799 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.444918 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/bgymj.php
[Thu Jul 30 12:18:20.444966 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.465575 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ah25.php
[Thu Jul 30 12:18:20.465631 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.486600 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/main.php
[Thu Jul 30 12:18:20.486653 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.506778 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/new4.php
[Thu Jul 30 12:18:20.506821 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.526694 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 12:18:20.526747 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.547215 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 12:18:20.547267 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.567568 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/a2.php
[Thu Jul 30 12:18:20.567616 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.587946 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:18:20.609981 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/0.php
[Thu Jul 30 12:18:20.610034 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.631592 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 12:18:20.631647 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.652370 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/plss3.php
[Thu Jul 30 12:18:20.652451 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.656666 2026] [access_compat:error] [pid 3036160:tid 3036160] [client 125.176.202.122:62431] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:20.664453 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 176.241.66.87:49954] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:20.673429 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 12:18:20.673472 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.693057 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 12:18:20.693110 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.703376 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.9:33880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:20.703993 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.9:33880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:20.712703 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/aq.php
[Thu Jul 30 12:18:20.712743 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.732912 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:18:20.753701 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 12:18:20.753759 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.774578 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/public
[Thu Jul 30 12:18:20.794739 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wsd.php
[Thu Jul 30 12:18:20.794794 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.815446 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/gecko-litespeed.php
[Thu Jul 30 12:18:20.815488 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.836373 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/nw.php
[Thu Jul 30 12:18:20.836415 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.856250 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:18:20.877057 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-the.php
[Thu Jul 30 12:18:20.877106 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.897514 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/myfile.php
[Thu Jul 30 12:18:20.897552 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.917148 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 12:18:20.917191 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.936734 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 12:18:20.936773 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.944256 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.38:34838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:20.944876 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.38:34838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:20.956668 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/fs.php
[Thu Jul 30 12:18:20.956713 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.976895 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ff.php
[Thu Jul 30 12:18:20.976939 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:20.996657 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/axx.php
[Thu Jul 30 12:18:20.996699 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.017857 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-access.php
[Thu Jul 30 12:18:21.017898 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.038287 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/Sanskrit.php
[Thu Jul 30 12:18:21.038327 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.059177 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 12:18:21.059222 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.078954 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins.php
[Thu Jul 30 12:18:21.078994 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.102790 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/style.php
[Thu Jul 30 12:18:21.102834 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.122326 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.6:33942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:21.122942 2026] [authz_core:error] [pid 3024156:tid 3024156] [client 57.141.0.6:33942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:21.123736 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-act.php
[Thu Jul 30 12:18:21.123771 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.143370 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:18:21.163181 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 12:18:21.163232 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.182991 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:18:21.204103 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ms.php
[Thu Jul 30 12:18:21.204147 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.227983 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 12:18:21.228034 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.249630 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/06.php
[Thu Jul 30 12:18:21.249679 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.269362 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 12:18:21.269421 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.289517 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ol.php
[Thu Jul 30 12:18:21.289560 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.309479 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/X57.php
[Thu Jul 30 12:18:21.309535 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.333905 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/file59.php
[Thu Jul 30 12:18:21.333946 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.354529 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/vx.php
[Thu Jul 30 12:18:21.354572 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.379259 2026] [lsapi:warn] [pid 3036117:tid 3036117] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:18:21.418610 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/prv8.php
[Thu Jul 30 12:18:21.418653 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.422488 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.40:61860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:21.423147 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.40:61860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:21.438396 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/166.php
[Thu Jul 30 12:18:21.438438 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.458200 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/we.php
[Thu Jul 30 12:18:21.458244 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.479173 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:18:21.499048 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:18:21.521671 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/a1vx.php
[Thu Jul 30 12:18:21.521732 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.541614 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 12:18:21.541664 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.561476 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/666.php
[Thu Jul 30 12:18:21.561531 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.582357 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/cu.php
[Thu Jul 30 12:18:21.582400 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.603288 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/re.php
[Thu Jul 30 12:18:21.603329 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.623050 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:18:21.642727 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:18:21.662527 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/kj.php
[Thu Jul 30 12:18:21.662569 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.682249 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:18:21.701927 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/styll.php
[Thu Jul 30 12:18:21.701971 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.722203 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 12:18:21.722244 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.726138 2026] [ssl:error] [pid 3033563:tid 3033563] (EAI 2)Name or service not known: [client 144.76.19.72:35406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:21.726163 2026] [ssl:error] [pid 3033563:tid 3033563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:21.741884 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/aw.php
[Thu Jul 30 12:18:21.741938 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.761535 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/xqq.php
[Thu Jul 30 12:18:21.761576 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.781894 2026] [ssl:error] [pid 3025636:tid 3025636] (EAI 2)Name or service not known: [client 144.76.19.72:35418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:21.781925 2026] [ssl:error] [pid 3025636:tid 3025636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:21.782900 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:18:21.802666 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-update.php
[Thu Jul 30 12:18:21.802707 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.824977 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 12:18:21.825022 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.838323 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.30:37052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:21.838963 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.30:37052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:21.846210 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/opts.php
[Thu Jul 30 12:18:21.846253 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.867426 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/manager.php
[Thu Jul 30 12:18:21.867467 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.889939 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:18:21.910810 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/8xyz.php
[Thu Jul 30 12:18:21.910851 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.931130 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 12:18:21.931172 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.950742 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/gifclass.php
[Thu Jul 30 12:18:21.950795 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.970437 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ws60.php
[Thu Jul 30 12:18:21.970478 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:21.990834 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/ff1.php
[Thu Jul 30 12:18:21.990871 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:22.010362 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/init.php
[Thu Jul 30 12:18:22.010400 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:22.030604 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/grsiuk.php
[Thu Jul 30 12:18:22.030644 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:22.052014 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/admin.php
[Thu Jul 30 12:18:22.052053 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 4.184.60.71:9447] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:18:22.337591 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.32:58926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:22.338220 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.32:58926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:22.485181 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.9:62660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:22.485802 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.9:62660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:22.706118 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.65:34612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:22.706754 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.65:34612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:22.758889 2026] [core:error] [pid 3033525:tid 3033525] [client 66.249.66.10:49728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:22.758915 2026] [core:error] [pid 3033525:tid 3033525] [client 66.249.66.10:49728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:22.816990 2026] [core:error] [pid 3033247:tid 3033247] (13)Permission denied: [client 216.73.216.199:16537] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory39/subsystem/uevent
[Thu Jul 30 12:18:22.920197 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:22.920244 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:22.923005 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.49:59878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:22.923657 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.49:59878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:23.347745 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:23.347777 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:23.639566 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.27:36210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:23.640208 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.27:36210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:23.793327 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:23.793356 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:23.974589 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.29:61314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:23.975231 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.29:61314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:24.225908 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:24.225942 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:24.263722 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.62:46856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:24.264389 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.62:46856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:24.307590 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.18:38470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:24.308271 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.18:38470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:24.645651 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.23:48910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:24.646298 2026] [authz_core:error] [pid 3025090:tid 3025090] [client 57.141.0.23:48910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:24.668245 2026] [lsapi:warn] [pid 3009642:tid 3009642] [client 45.158.164.139:45892] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:24.668283 2026] [lsapi:warn] [pid 3009642:tid 3009642] [client 45.158.164.139:45892] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:24.670888 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:24.670913 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:24.839284 2026] [ssl:error] [pid 3020912:tid 3020912] (EAI 2)Name or service not known: [client 144.76.19.72:35424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:24.839310 2026] [ssl:error] [pid 3020912:tid 3020912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:24.896479 2026] [ssl:error] [pid 3038043:tid 3038043] (EAI 2)Name or service not known: [client 144.76.19.72:35430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:24.896537 2026] [ssl:error] [pid 3038043:tid 3038043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:25.094393 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:45908] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:25.094457 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:45908] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:25.096640 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:25.096692 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:25.161676 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.37:45042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:25.162301 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.37:45042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:25.356192 2026] [access_compat:error] [pid 3034419:tid 3034419] [client 176.241.66.87:31817] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:25.530821 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:45914] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:25.530904 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:45914] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:25.533108 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:25.533146 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:25.953207 2026] [access_compat:error] [pid 3033525:tid 3033525] [client 157.20.138.62:59684] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:25.973007 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:25.973041 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:25.994306 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.5:47788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:25.994979 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.5:47788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:26.038027 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.56:52486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:26.038660 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.56:52486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:26.052186 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.5:47802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:26.052824 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.5:47802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:26.217264 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.16:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:26.217917 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.16:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:26.415189 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:45944] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:26.415219 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:45944] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:26.419540 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:26.419585 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:26.441475 2026] [ssl:error] [pid 3038215:tid 3038215] (70014)End of file found: [client 216.73.216.199:25619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:26.790374 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.47:33634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:26.791007 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.47:33634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:26.792367 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.14:63892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:26.792994 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.14:63892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:26.860267 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:26.860305 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:27.313553 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:45960] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:27.313583 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:45960] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:27.320710 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:27.320741 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:27.433193 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.67:26896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:27.433844 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.67:26896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:27.600490 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.50:54780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:27.601124 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.50:54780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:27.645158 2026] [core:error] [pid 3033247:tid 3033247] (13)Permission denied: [client 216.73.216.199:16537] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfit/sections/__mcount_loc
[Thu Jul 30 12:18:27.755527 2026] [lsapi:warn] [pid 3028231:tid 3028231] [client 45.158.164.139:45974] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:27.755590 2026] [lsapi:warn] [pid 3028231:tid 3028231] [client 45.158.164.139:45974] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:27.758901 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:27.758924 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:27.953731 2026] [ssl:error] [pid 3033630:tid 3033630] (EAI 2)Name or service not known: [client 144.76.19.72:35440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:27.953768 2026] [ssl:error] [pid 3033630:tid 3033630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:28.008493 2026] [ssl:error] [pid 3039484:tid 3039484] (EAI 2)Name or service not known: [client 144.76.19.72:35456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:28.008552 2026] [ssl:error] [pid 3039484:tid 3039484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:28.093331 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.2:48766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:28.093953 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.2:48766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:28.221989 2026] [lsapi:warn] [pid 3033563:tid 3033563] [client 45.158.164.139:45998] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:28.222036 2026] [lsapi:warn] [pid 3033563:tid 3033563] [client 45.158.164.139:45998] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:28.228297 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:28.228336 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:28.370914 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.40:37974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:28.371574 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.40:37974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:28.417803 2026] [access_compat:error] [pid 3030608:tid 3030608] [client 125.176.202.122:62519] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:28.526077 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.51:25728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:28.526699 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.51:25728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:28.709930 2026] [lsapi:warn] [pid 3039205:tid 3039205] [client 45.158.164.139:46008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:28.709987 2026] [lsapi:warn] [pid 3039205:tid 3039205] [client 45.158.164.139:46008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:28.712568 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:28.712592 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:28.789973 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.70:46394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:28.790605 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.70:46394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:29.179828 2026] [lsapi:warn] [pid 3033563:tid 3033563] [client 45.158.164.139:46016] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:29.179860 2026] [lsapi:warn] [pid 3033563:tid 3033563] [client 45.158.164.139:46016] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:29.193267 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:29.193302 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:29.273554 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.21:48796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:29.274180 2026] [authz_core:error] [pid 3036116:tid 3036116] [client 57.141.0.21:48796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:29.444094 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.62:46860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:29.444712 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.62:46860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:29.539481 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.55:60318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:29.540123 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.55:60318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:29.627817 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:29.627850 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:29.653623 2026] [ssl:error] [pid 3039688:tid 3039688] (70014)End of file found: [client 216.73.216.199:44835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:29.888332 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.23:60840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:29.888956 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.23:60840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:30.064020 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:46038] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:30.064049 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:46038] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:30.066102 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:30.066124 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:30.497010 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:46044] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:30.497058 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:46044] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:30.499437 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:30.499461 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:30.530146 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.15:64256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:30.530768 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.15:64256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:30.604610 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.5:53934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:30.605235 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.5:53934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:30.926923 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:49806] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:30.926957 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:49806] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:30.929790 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:30.929810 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:31.066281 2026] [ssl:error] [pid 3020537:tid 3020537] (EAI 2)Name or service not known: [client 144.76.19.72:30916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:31.066334 2026] [ssl:error] [pid 3020537:tid 3020537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:31.122750 2026] [ssl:error] [pid 3034668:tid 3034668] (EAI 2)Name or service not known: [client 144.76.19.72:30928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:31.122791 2026] [ssl:error] [pid 3034668:tid 3034668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:31.152857 2026] [access_compat:error] [pid 3039528:tid 3039528] [client 176.241.66.87:50502] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:31.359772 2026] [lsapi:warn] [pid 3034567:tid 3034567] [client 45.158.164.139:49810] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:31.359819 2026] [lsapi:warn] [pid 3034567:tid 3034567] [client 45.158.164.139:49810] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:31.364474 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:31.364507 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:31.608577 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.10:43894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:31.609197 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.10:43894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:31.817441 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:31.817479 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:31.867005 2026] [lsapi:warn] [pid 3034668:tid 3034668] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:18:32.085729 2026] [access_compat:error] [pid 3038494:tid 3038494] [client 125.176.202.122:62663] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:32.187646 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.26:58462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:32.188271 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.26:58462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:32.229525 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.17:23358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:32.230145 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.17:23358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:32.268808 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:32.268841 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:32.403800 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.53:65170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:32.404427 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.53:65170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:32.700585 2026] [lsapi:warn] [pid 3028231:tid 3028231] [client 45.158.164.139:49832] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:32.700621 2026] [lsapi:warn] [pid 3028231:tid 3028231] [client 45.158.164.139:49832] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:32.703055 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:32.703091 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:33.132760 2026] [lsapi:warn] [pid 3033525:tid 3033525] [client 45.158.164.139:49836] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:33.132804 2026] [lsapi:warn] [pid 3033525:tid 3033525] [client 45.158.164.139:49836] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:33.135345 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:33.135371 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:33.261541 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.48:34358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:33.262176 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.48:34358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:33.315790 2026] [authz_core:error] [pid 3039528:tid 3039528] [client 57.141.0.17:23362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:33.316432 2026] [authz_core:error] [pid 3039528:tid 3039528] [client 57.141.0.17:23362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:33.559238 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:33.559266 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:33.748895 2026] [authz_core:error] [pid 3039205:tid 3039205] [client 57.141.0.38:23340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:33.749540 2026] [authz_core:error] [pid 3039205:tid 3039205] [client 57.141.0.38:23340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:33.993295 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:33.993325 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:34.178121 2026] [ssl:error] [pid 3033133:tid 3033133] (EAI 2)Name or service not known: [client 144.76.19.72:30934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:34.178172 2026] [ssl:error] [pid 3033133:tid 3033133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:34.234474 2026] [ssl:error] [pid 3032699:tid 3032699] (EAI 2)Name or service not known: [client 144.76.19.72:30936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:34.234520 2026] [ssl:error] [pid 3032699:tid 3032699] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:34.360026 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.15:64260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:34.360662 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.15:64260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:34.419298 2026] [lsapi:warn] [pid 3027695:tid 3027695] [client 45.158.164.139:49866] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:34.419364 2026] [lsapi:warn] [pid 3027695:tid 3027695] [client 45.158.164.139:49866] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:34.421289 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:34.421325 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:34.834975 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:49876] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:34.835005 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:49876] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:34.837597 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:34.837625 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:34.916861 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.62:60132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:34.917519 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.62:60132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:35.009683 2026] [authz_core:error] [pid 3039205:tid 3039205] [client 57.141.0.46:25922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:35.010302 2026] [authz_core:error] [pid 3039205:tid 3039205] [client 57.141.0.46:25922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:35.256869 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:35.256901 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:35.401115 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.59:46502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:35.401760 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.59:46502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:35.702097 2026] [lsapi:warn] [pid 3039484:tid 3039484] [client 45.158.164.139:49894] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:35.702150 2026] [lsapi:warn] [pid 3039484:tid 3039484] [client 45.158.164.139:49894] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:35.704893 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:35.704923 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:35.893787 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 176.241.66.87:50814] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:35.979268 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.58:23690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:35.979889 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.58:23690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:36.077513 2026] [cgi:error] [pid 3033525:tid 3033525] [client 66.132.172.141:48136] AH02812: stderr from /home/jgqawffu/public_html/greenduckgallery.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://mail.greenduckgallery.co.uk:80/cgi-bin
[Thu Jul 30 12:18:36.095244 2026] [ssl:error] [pid 3016066:tid 3016066] (70014)End of file found: [client 216.73.216.199:62169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:36.138213 2026] [lsapi:warn] [pid 3028231:tid 3028231] [client 45.158.164.139:49906] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:36.138247 2026] [lsapi:warn] [pid 3028231:tid 3028231] [client 45.158.164.139:49906] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:36.141320 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:36.141347 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:36.283456 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.25:40486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:36.284089 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.25:40486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:36.331383 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.16:54224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:36.332002 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.16:54224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:36.443659 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.43:44020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:36.444288 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.43:44020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:36.490823 2026] [access_compat:error] [pid 3030653:tid 3030653] [client 157.20.138.62:60280] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:36.575169 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:49918] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:36.575200 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:49918] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:36.578414 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:36.578470 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:36.768127 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.25:40488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:36.768753 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.25:40488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:37.031439 2026] [lsapi:warn] [pid 3039484:tid 3039484] [client 45.158.164.139:49928] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:37.031472 2026] [lsapi:warn] [pid 3039484:tid 3039484] [client 45.158.164.139:49928] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:37.036270 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:37.036300 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:37.307205 2026] [ssl:error] [pid 3036160:tid 3036160] (EAI 2)Name or service not known: [client 144.76.19.72:30948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:37.307273 2026] [ssl:error] [pid 3036160:tid 3036160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:37.400418 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:30954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:37.400447 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:37.456147 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.20:63250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:37.456794 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.20:63250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:37.461511 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:37.461555 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:37.597303 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.52:56028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:37.597943 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.52:56028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:37.610230 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.1:53502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:37.610902 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.1:53502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:37.895995 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:37.896023 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:38.320461 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:38.320491 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:38.459454 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.29:31482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:38.460095 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.29:31482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:38.656384 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.1:53518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:38.657028 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.1:53518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:38.697876 2026] [security2:error] [pid 3033631:tid 3033631] [client 119.28.89.249:54486] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-ganymede.com"] [uri "/"] [unique_id "amszDu_mHTdVFAfJjX_XvwAAACI"]
[Thu Jul 30 12:18:38.754304 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:38.754341 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:38.776670 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.58:23702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:38.777311 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.58:23702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:38.972924 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.2:23590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:38.973563 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.2:23590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:39.185292 2026] [lsapi:warn] [pid 3029576:tid 3029576] [client 45.158.164.139:49980] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:39.185361 2026] [lsapi:warn] [pid 3029576:tid 3029576] [client 45.158.164.139:49980] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:39.187479 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:39.187521 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:39.457713 2026] [access_compat:error] [pid 3029661:tid 3029661] [client 125.176.202.122:62748] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:39.595639 2026] [ssl:error] [pid 3033247:tid 3033247] (70014)End of file found: [client 216.73.216.199:16537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:39.633268 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.21:30578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:39.633893 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.21:30578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:39.671196 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:39.671229 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:39.712286 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.61:37084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:39.712907 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.61:37084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:39.967288 2026] [core:error] [pid 3038494:tid 3038494] [client 66.249.66.67:54321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:39.967322 2026] [core:error] [pid 3038494:tid 3038494] [client 66.249.66.67:54321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:39.970256 2026] [core:error] [pid 3026897:tid 3026897] [client 66.249.66.169:57064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:39.970277 2026] [core:error] [pid 3026897:tid 3026897] [client 66.249.66.169:57064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:40.058048 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.22:53822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:40.058702 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.22:53822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:40.090493 2026] [security2:error] [pid 3040626:tid 3040626] [client 216.73.216.199:15411] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/udev/udev.conf"] [unique_id "amszED15wjf4R7JOTgjL3gAAAAg"]
[Thu Jul 30 12:18:40.090793 2026] [security2:error] [pid 3040626:tid 3040626] [client 216.73.216.199:15411] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/udev/udev.conf"] [unique_id "amszED15wjf4R7JOTgjL3gAAAAg"]
[Thu Jul 30 12:18:40.091038 2026] [security2:error] [pid 3040626:tid 3040626] [client 216.73.216.199:15411] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/udev/udev.conf"] [unique_id "amszED15wjf4R7JOTgjL3gAAAAg"]
[Thu Jul 30 12:18:40.116532 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:40.116563 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:40.311994 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.8:46252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:40.312630 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.8:46252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:40.456112 2026] [ssl:error] [pid 3034419:tid 3034419] (EAI 2)Name or service not known: [client 144.76.19.72:65034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:40.456158 2026] [ssl:error] [pid 3034419:tid 3034419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:40.510624 2026] [ssl:error] [pid 3027695:tid 3027695] (EAI 2)Name or service not known: [client 144.76.19.72:65046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:40.510665 2026] [ssl:error] [pid 3027695:tid 3027695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:40.539385 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:50032] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:40.539413 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:50032] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:40.541836 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:40.541862 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:40.957704 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:50008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:40.957732 2026] [lsapi:warn] [pid 3033631:tid 3033631] [client 45.158.164.139:50008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:40.960416 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:40.960462 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:41.223508 2026] [authz_core:error] [pid 3040674:tid 3040674] [client 57.141.0.68:64356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:41.224169 2026] [authz_core:error] [pid 3040674:tid 3040674] [client 57.141.0.68:64356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:41.227288 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.43:21568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:41.227924 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.43:21568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:41.411289 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:41.411322 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:41.603621 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.26:31228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:41.604249 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.26:31228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:41.697616 2026] [access_compat:error] [pid 3016066:tid 3016066] [client 176.241.66.87:32669] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:41.782239 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.37:32796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:41.782859 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.37:32796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:41.830880 2026] [lsapi:warn] [pid 3030653:tid 3030653] [client 45.158.164.139:50048] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:41.830929 2026] [lsapi:warn] [pid 3030653:tid 3030653] [client 45.158.164.139:50048] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:41.833435 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:41.833460 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:42.085956 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.61:37650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:42.086589 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.61:37650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:42.263277 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:50058] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:42.263332 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:50058] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:42.265624 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:42.265667 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:42.268338 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.15:48622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:42.268953 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.15:48622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:42.338438 2026] [lsapi:warn] [pid 3033525:tid 3033525] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:18:42.493286 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.22:53836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:42.493922 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.22:53836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:42.735551 2026] [lsapi:warn] [pid 3040673:tid 3040673] [client 45.158.164.139:50066] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:42.735598 2026] [lsapi:warn] [pid 3040673:tid 3040673] [client 45.158.164.139:50066] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:42.738985 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:42.739010 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:43.166347 2026] [lsapi:warn] [pid 3036116:tid 3036116] [client 45.158.164.139:50074] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:43.166390 2026] [lsapi:warn] [pid 3036116:tid 3036116] [client 45.158.164.139:50074] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:43.168992 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:43.169016 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:43.222989 2026] [ssl:error] [pid 3039529:tid 3039529] (70014)End of file found: [client 216.73.216.199:19005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:43.247635 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.33:57986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:43.248262 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.33:57986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:43.528560 2026] [access_compat:error] [pid 3034671:tid 3034671] [client 125.176.202.122:62900] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:43.559394 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.16:53756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:43.560017 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.16:53756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:43.568848 2026] [ssl:error] [pid 3033525:tid 3033525] (EAI 2)Name or service not known: [client 144.76.19.72:65060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:43.568875 2026] [ssl:error] [pid 3033525:tid 3033525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:43.618301 2026] [lsapi:warn] [pid 3034567:tid 3034567] [client 45.158.164.139:50084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:43.618332 2026] [lsapi:warn] [pid 3034567:tid 3034567] [client 45.158.164.139:50084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:43.623615 2026] [ssl:error] [pid 3016066:tid 3016066] (EAI 2)Name or service not known: [client 144.76.19.72:65074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:43.623638 2026] [ssl:error] [pid 3016066:tid 3016066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:43.624221 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:43.624247 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:43.840861 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.9:24208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:43.841492 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.9:24208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:44.025819 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.5:46268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:44.026449 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.5:46268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:44.070986 2026] [lsapi:warn] [pid 3030651:tid 3030651] [client 45.158.164.139:50094] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:44.071028 2026] [lsapi:warn] [pid 3030651:tid 3030651] [client 45.158.164.139:50094] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:44.074440 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:44.074467 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:44.294925 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.16:53760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:44.295566 2026] [authz_core:error] [pid 3040673:tid 3040673] [client 57.141.0.16:53760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:44.343329 2026] [autoindex:error] [pid 3038043:tid 3038043] [client 172.213.244.85:21594] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:18:44.459298 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.47:25282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:44.459923 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.47:25282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:44.464209 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.64:28910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:44.464823 2026] [authz_core:error] [pid 3036160:tid 3036160] [client 57.141.0.64:28910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:44.495601 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:50104] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:44.495630 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:50104] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:44.497878 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:44.497900 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:44.659807 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.7:26176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:44.660429 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.7:26176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:44.932024 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:50116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:44.932049 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:50116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:44.934486 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:44.934521 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:45.377338 2026] [security2:error] [pid 3040673:tid 3040673] [client 185.191.171.17:64876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "techsuccess.uk"] [uri "/robots.txt"] [unique_id "amszFbHap83pPO-y9Nuq_gAAABY"]
[Thu Jul 30 12:18:45.393609 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:45.393639 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:45.488877 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.64:28922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:45.489518 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.64:28922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:45.790800 2026] [security2:error] [pid 3033247:tid 3033247] [client 85.208.96.200:39250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "techsuccess.uk"] [uri "/privacy"] [unique_id "amszFfDzQeaf57L_M5P4qgAAAA8"]
[Thu Jul 30 12:18:45.822728 2026] [lsapi:warn] [pid 3038215:tid 3038215] [client 45.158.164.139:50134] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:45.822771 2026] [lsapi:warn] [pid 3038215:tid 3038215] [client 45.158.164.139:50134] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:45.825175 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:45.825198 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:45.979582 2026] [authz_core:error] [pid 3039205:tid 3039205] [client 57.141.0.24:34212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:45.980213 2026] [authz_core:error] [pid 3039205:tid 3039205] [client 57.141.0.24:34212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:46.013855 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.12:25212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:46.014487 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.12:25212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:46.051831 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.14:49324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:46.052465 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.14:49324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:46.256583 2026] [lsapi:warn] [pid 3029576:tid 3029576] [client 45.158.164.139:50144] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:46.256614 2026] [lsapi:warn] [pid 3029576:tid 3029576] [client 45.158.164.139:50144] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:46.259209 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:46.259239 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:46.440019 2026] [access_compat:error] [pid 3020911:tid 3020911] [client 176.241.66.87:51358] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:46.678315 2026] [ssl:error] [pid 3039205:tid 3039205] (EAI 2)Name or service not known: [client 144.76.19.72:65088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:46.678358 2026] [ssl:error] [pid 3039205:tid 3039205] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:46.685441 2026] [lsapi:warn] [pid 3038215:tid 3038215] [client 45.158.164.139:50160] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:46.685469 2026] [lsapi:warn] [pid 3038215:tid 3038215] [client 45.158.164.139:50160] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:46.687845 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:46.687883 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:46.734837 2026] [ssl:error] [pid 3029576:tid 3029576] (EAI 2)Name or service not known: [client 144.76.19.72:65104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:46.734861 2026] [ssl:error] [pid 3029576:tid 3029576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:46.812987 2026] [core:error] [pid 3036286:tid 3036286] [client 57.141.0.43:21592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:46.813008 2026] [core:error] [pid 3036286:tid 3036286] [client 57.141.0.43:21592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:46.962270 2026] [access_compat:error] [pid 3040673:tid 3040673] [client 157.20.138.62:60880] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:47.098559 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.39:51198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:47.099178 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.39:51198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:47.291370 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:50168] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:47.291396 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:50168] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:47.293447 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:47.293471 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:47.334822 2026] [security2:error] [pid 3033247:tid 3033247] [client 185.191.171.9:45048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amszF_DzQeaf57L_M5P4rAAAAA8"]
[Thu Jul 30 12:18:47.443582 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.54:62518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:47.444212 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.54:62518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:47.748392 2026] [core:error] [pid 3040626:tid 3040626] (13)Permission denied: [client 216.73.216.199:15411] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/sunrpc/uevent
[Thu Jul 30 12:18:47.795334 2026] [security2:error] [pid 3033630:tid 3033630] [client 185.191.171.15:56586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg422/"] [unique_id "amszF4gVV9m2JwRGAgP2IQAAACE"]
[Thu Jul 30 12:18:47.844096 2026] [autoindex:error] [pid 3038043:tid 3038043] [client 172.213.244.85:21594] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:18:48.188340 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:50170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:48.188402 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:50170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:48.195536 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:48.195585 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:48.976714 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.46:28500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:48.977338 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.46:28500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:49.116590 2026] [lsapi:warn] [pid 3026897:tid 3026897] [client 45.158.164.139:50184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:49.116634 2026] [lsapi:warn] [pid 3026897:tid 3026897] [client 45.158.164.139:50184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:49.119682 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:49.119706 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:49.155490 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.16:41768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:49.156141 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.16:41768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:49.202778 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.28:59870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:49.203401 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.28:59870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:49.332468 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.17:24718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:49.333130 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.17:24718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:49.389486 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.55:51282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:49.390113 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.55:51282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:49.564645 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.17:24738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:49.565267 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.17:24738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:49.739971 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.70:50068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:49.740597 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.70:50068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:49.867273 2026] [ssl:error] [pid 3040626:tid 3040626] (70014)End of file found: [client 216.73.216.199:15411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:49.912322 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.63:44644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:49.912948 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.63:44644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:50.133706 2026] [lsapi:warn] [pid 3034671:tid 3034671] [client 45.158.164.139:50190] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:50.133755 2026] [lsapi:warn] [pid 3034671:tid 3034671] [client 45.158.164.139:50190] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:50.137651 2026] [ssl:error] [pid 3034671:tid 3034671] (EAI 2)Name or service not known: [client 144.76.19.72:61722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:50.137678 2026] [ssl:error] [pid 3034671:tid 3034671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:50.138678 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:50.138699 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:50.190838 2026] [ssl:error] [pid 3041179:tid 3041179] (EAI 2)Name or service not known: [client 144.76.19.72:61732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:50.190875 2026] [ssl:error] [pid 3041179:tid 3041179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:50.253249 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.37:32798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:50.253867 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.37:32798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:50.594361 2026] [lsapi:warn] [pid 3030655:tid 3030655] [client 45.158.164.139:50210] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:50.594406 2026] [lsapi:warn] [pid 3030655:tid 3030655] [client 45.158.164.139:50210] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:50.601365 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:50.601389 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:50.815615 2026] [authz_core:error] [pid 3039528:tid 3039528] [client 57.141.0.47:25286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:50.816230 2026] [authz_core:error] [pid 3039528:tid 3039528] [client 57.141.0.47:25286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:50.855648 2026] [autoindex:error] [pid 3038043:tid 3038043] [client 172.213.244.85:21594] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:18:50.948573 2026] [security2:error] [pid 3030651:tid 3030651] [client 49.234.192.248:56438] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.org.uk"] [uri "/"] [unique_id "amszGj3zkxcDjGAzkKlDcQAAADk"]
[Thu Jul 30 12:18:51.051637 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:51.051688 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:51.190862 2026] [access_compat:error] [pid 3039484:tid 3039484] [client 125.176.202.122:62985] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:51.222605 2026] [autoindex:error] [pid 3038043:tid 3038043] [client 172.213.244.85:21594] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:18:51.476977 2026] [authz_core:error] [pid 3039528:tid 3039528] [client 57.141.0.58:53224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:51.477620 2026] [authz_core:error] [pid 3039528:tid 3039528] [client 57.141.0.58:53224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:51.548495 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:51.548536 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:51.555216 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.2:23194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:51.555834 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.2:23194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:51.990668 2026] [lsapi:warn] [pid 3039484:tid 3039484] [client 45.158.164.139:49500] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:51.990707 2026] [lsapi:warn] [pid 3039484:tid 3039484] [client 45.158.164.139:49500] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:52.004941 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:52.004992 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:52.091249 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.53:23804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:52.091870 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.53:23804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:52.439740 2026] [security2:error] [pid 3041288:tid 3041288] [client 49.234.192.248:57128] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amszHBOK6NfFjjrFj5dSuAAAADA"], referer: http://www.shelterforum.org.uk
[Thu Jul 30 12:18:52.481675 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.7:53500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:52.482329 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.7:53500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:52.510127 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.33:47516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:52.510775 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.33:47516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:52.562947 2026] [lsapi:warn] [pid 3041287:tid 3041287] [client 45.158.164.139:49512] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:52.562986 2026] [lsapi:warn] [pid 3041287:tid 3041287] [client 45.158.164.139:49512] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:52.573819 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:52.573848 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:52.860232 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:18:53.030323 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:53.030356 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:53.190208 2026] [core:error] [pid 3041179:tid 3041179] (13)Permission denied: [client 216.73.216.199:24910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS2/port
[Thu Jul 30 12:18:53.245793 2026] [ssl:error] [pid 3038615:tid 3038615] (EAI 2)Name or service not known: [client 144.76.19.72:61748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:53.245865 2026] [ssl:error] [pid 3038615:tid 3038615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:53.262177 2026] [authz_core:error] [pid 3041457:tid 3041457] [client 57.141.0.27:26372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:53.262821 2026] [authz_core:error] [pid 3041457:tid 3041457] [client 57.141.0.27:26372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:53.302210 2026] [ssl:error] [pid 3033563:tid 3033563] (EAI 2)Name or service not known: [client 144.76.19.72:61756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:53.302251 2026] [ssl:error] [pid 3033563:tid 3033563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:53.442860 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.39:51208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:53.443516 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.39:51208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:53.496010 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:49542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:53.496054 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:49542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:53.497853 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:53.497911 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:53.607721 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.63:44680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:53.608342 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.63:44680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:53.749660 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 20.206.204.219:58765] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:18:53.804855 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.5:53450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:53.805537 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.5:53450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:53.936746 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:53.936815 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:54.378536 2026] [lsapi:warn] [pid 3041287:tid 3041287] [client 45.158.164.139:49586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:54.378586 2026] [lsapi:warn] [pid 3041287:tid 3041287] [client 45.158.164.139:49586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:54.381453 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:54.381477 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:54.540323 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.46:52984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:54.540952 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.46:52984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:54.804399 2026] [lsapi:warn] [pid 3030651:tid 3030651] [client 45.158.164.139:49592] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:54.804441 2026] [lsapi:warn] [pid 3030651:tid 3030651] [client 45.158.164.139:49592] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:54.806018 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:54.806045 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:54.939351 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.37:21246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:54.939973 2026] [authz_core:error] [pid 3029661:tid 3029661] [client 57.141.0.37:21246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:55.229352 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:49594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:55.229410 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:49594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:55.231372 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:55.231395 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:55.280290 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.31:34114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:55.280916 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.31:34114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:55.475385 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.16:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:55.476008 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.16:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:55.571008 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.49:41078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:55.571687 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.49:41078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:55.663853 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:55.663881 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:55.713812 2026] [access_compat:error] [pid 3041287:tid 3041287] [client 125.176.202.122:63133] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:56.087323 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:56.087364 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:56.095860 2026] [core:error] [pid 3038495:tid 3038495] [client 66.249.66.66:35927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:56.095890 2026] [core:error] [pid 3038495:tid 3038495] [client 66.249.66.66:35927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:18:56.231896 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.31:64250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:56.232529 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.31:64250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:56.356286 2026] [ssl:error] [pid 3030608:tid 3030608] (EAI 2)Name or service not known: [client 144.76.19.72:61772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:56.356320 2026] [ssl:error] [pid 3030608:tid 3030608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:56.412078 2026] [ssl:error] [pid 3030651:tid 3030651] (EAI 2)Name or service not known: [client 144.76.19.72:61784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:56.412110 2026] [ssl:error] [pid 3030651:tid 3030651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:56.503908 2026] [lsapi:warn] [pid 3036162:tid 3036162] [client 45.158.164.139:49628] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:56.503965 2026] [lsapi:warn] [pid 3036162:tid 3036162] [client 45.158.164.139:49628] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:56.506134 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:56.506173 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:56.532273 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.40:43800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:56.532896 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.40:43800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:56.946930 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:56.946969 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:56.973618 2026] [access_compat:error] [pid 3041094:tid 3041094] [client 176.241.66.87:51904] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:56.977436 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.71:20338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:56.978055 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.71:20338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:56.990870 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.69:56784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:56.991568 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.69:56784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:57.143958 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.32:39654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:57.144639 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.32:39654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:57.386807 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:49676] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:57.386841 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:49676] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:57.389314 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:57.389345 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:57.542795 2026] [access_compat:error] [pid 3041285:tid 3041285] [client 157.20.138.62:61480] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:18:57.670125 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.2:27200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:57.670772 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.2:27200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:57.787310 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.3:51978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:57.787937 2026] [authz_core:error] [pid 3030655:tid 3030655] [client 57.141.0.3:51978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:57.841363 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:49714] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:57.841391 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:49714] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:57.858772 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:57.858813 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:58.065628 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.56:60650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:58.066273 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.56:60650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:58.278368 2026] [lsapi:warn] [pid 3030651:tid 3030651] [client 45.158.164.139:49728] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:58.278411 2026] [lsapi:warn] [pid 3030651:tid 3030651] [client 45.158.164.139:49728] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:58.280592 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:58.280620 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:58.546175 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.63:56498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:58.546816 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.63:56498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:58.703596 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:58.703632 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:58.951283 2026] [ssl:error] [pid 3033133:tid 3033133] (70014)End of file found: [client 216.73.216.199:40439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:18:59.148180 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:49780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:59.148213 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:49780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:59.154127 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:59.154156 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:59.449050 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.35:21204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:59.449705 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.35:21204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:59.470255 2026] [ssl:error] [pid 3033525:tid 3033525] (EAI 2)Name or service not known: [client 144.76.19.72:61796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:59.470294 2026] [ssl:error] [pid 3033525:tid 3033525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:59.533876 2026] [ssl:error] [pid 3041289:tid 3041289] (EAI 2)Name or service not known: [client 144.76.19.72:61802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:18:59.533911 2026] [ssl:error] [pid 3041289:tid 3041289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:18:59.620243 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.71:20342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:59.620863 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.71:20342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:18:59.631485 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:49796] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:59.631549 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:49796] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:59.634182 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:18:59.634212 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:18:59.881683 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.28:39512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:18:59.882300 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.28:39512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:00.071054 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:49822] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:00.071095 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:49822] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:00.077214 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:00.077240 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:00.208419 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.66:23872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:00.209043 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.66:23872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:00.245044 2026] [authz_core:error] [pid 3041291:tid 3041291] [client 57.141.0.56:60662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:00.245693 2026] [authz_core:error] [pid 3041291:tid 3041291] [client 57.141.0.56:60662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:00.455314 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.36:23044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:00.455937 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.36:23044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:00.564457 2026] [lsapi:warn] [pid 3033525:tid 3033525] [client 45.158.164.139:49838] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:00.564514 2026] [lsapi:warn] [pid 3033525:tid 3033525] [client 45.158.164.139:49838] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:00.576478 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:00.576528 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:00.790358 2026] [authz_core:error] [pid 3041291:tid 3041291] [client 57.141.0.15:63372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:00.790991 2026] [authz_core:error] [pid 3041291:tid 3041291] [client 57.141.0.15:63372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:00.856454 2026] [core:error] [pid 3034419:tid 3034419] [client 66.249.66.68:54991] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:00.856481 2026] [core:error] [pid 3034419:tid 3034419] [client 66.249.66.68:54991] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:01.100021 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:37384] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:01.100053 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:37384] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:01.102622 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:01.102651 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:01.470620 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 20.206.204.219:60565] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:19:01.540543 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:01.540570 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:01.558728 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.28:39524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:01.559368 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.28:39524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:01.755719 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.56:60666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:01.756373 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.56:60666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:01.784174 2026] [authz_core:error] [pid 3041178:tid 3041178] [client 57.141.0.43:31792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:01.784794 2026] [authz_core:error] [pid 3041178:tid 3041178] [client 57.141.0.43:31792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:02.030351 2026] [lsapi:warn] [pid 3036162:tid 3036162] [client 45.158.164.139:37420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:02.030393 2026] [lsapi:warn] [pid 3036162:tid 3036162] [client 45.158.164.139:37420] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:02.032316 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:02.032360 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:02.148605 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.24:43194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:02.149242 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.24:43194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:02.296732 2026] [access_compat:error] [pid 3033630:tid 3033630] [client 125.176.202.122:63239] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:02.399011 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.34:35126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:02.399648 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.34:35126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:02.447998 2026] [core:error] [pid 3027695:tid 3027695] [client 66.249.66.66:47544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:02.448036 2026] [core:error] [pid 3027695:tid 3027695] [client 66.249.66.66:47544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:02.489076 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:02.489106 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:02.595734 2026] [ssl:error] [pid 3030655:tid 3030655] (EAI 2)Name or service not known: [client 144.76.19.72:57092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:02.595779 2026] [ssl:error] [pid 3030655:tid 3030655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:02.625186 2026] [security2:error] [pid 3039529:tid 3039529] [client 185.191.171.16:54776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/harry-potter-fanfiction-fem-harry-reading-the-books-fictionhunt"] [unique_id "amszJgQGHSyG0Bnc35Il0wAAABI"]
[Thu Jul 30 12:19:02.651970 2026] [ssl:error] [pid 3033563:tid 3033563] (EAI 2)Name or service not known: [client 144.76.19.72:57096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:02.652010 2026] [ssl:error] [pid 3033563:tid 3033563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:02.755897 2026] [access_compat:error] [pid 3034419:tid 3034419] [client 176.241.66.87:33941] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:02.991396 2026] [lsapi:warn] [pid 3020537:tid 3020537] [client 45.158.164.139:37438] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:02.991442 2026] [lsapi:warn] [pid 3020537:tid 3020537] [client 45.158.164.139:37438] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:02.993480 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:02.993522 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:03.095352 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.61:40744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:03.095975 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.61:40744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:03.396347 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:19:03.401202 2026] [security2:error] [pid 3041094:tid 3041094] [client 150.5.133.67:59193] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszJ7XOlU_d3eLRC2hxpAAAAB0"]
[Thu Jul 30 12:19:03.401242 2026] [security2:error] [pid 3041094:tid 3041094] [client 150.5.133.67:59193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszJ7XOlU_d3eLRC2hxpAAAAB0"]
[Thu Jul 30 12:19:03.401523 2026] [security2:error] [pid 3041094:tid 3041094] [client 150.5.133.67:59193] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszJ7XOlU_d3eLRC2hxpAAAAB0"]
[Thu Jul 30 12:19:03.468304 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:03.468334 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:03.479120 2026] [core:error] [pid 3030608:tid 3030608] [client 57.141.0.32:39666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:03.479157 2026] [core:error] [pid 3030608:tid 3030608] [client 57.141.0.32:39666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:03.908392 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:37456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:03.908424 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:37456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:03.911080 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:03.911104 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:04.349344 2026] [lsapi:warn] [pid 3029576:tid 3029576] [client 45.158.164.139:37470] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:04.349375 2026] [lsapi:warn] [pid 3029576:tid 3029576] [client 45.158.164.139:37470] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:04.354443 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:04.354473 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:04.440186 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.49:50660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:04.440808 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.49:50660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:04.799137 2026] [core:error] [pid 3041094:tid 3041094] [client 57.141.0.10:63318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:04.799176 2026] [core:error] [pid 3041094:tid 3041094] [client 57.141.0.10:63318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:04.806042 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:04.806086 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:04.977812 2026] [security2:error] [pid 3033133:tid 3033133] [client 85.208.96.193:44620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8817.465.html"] [unique_id "amszKNm5mzUWz6NP_eaCSwAAAAE"]
[Thu Jul 30 12:19:05.226816 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:37488] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:05.226852 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:37488] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:05.229174 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:05.229203 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:05.315317 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.55:36216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:05.315941 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.55:36216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:05.612351 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.64:53308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:05.612983 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.64:53308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:05.663223 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 45.158.164.139:37498] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:05.663273 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 45.158.164.139:37498] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:05.665409 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:05.665434 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:05.708705 2026] [ssl:error] [pid 3030608:tid 3030608] (EAI 2)Name or service not known: [client 144.76.19.72:57112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:05.708744 2026] [ssl:error] [pid 3030608:tid 3030608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:05.764494 2026] [ssl:error] [pid 3033133:tid 3033133] (EAI 2)Name or service not known: [client 144.76.19.72:57126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:05.764537 2026] [ssl:error] [pid 3033133:tid 3033133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:05.873832 2026] [ssl:error] [pid 3036117:tid 3036117] (70014)End of file found: [client 216.73.216.199:24285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:05.918095 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.19:50106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:05.918725 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.19:50106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:06.065283 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.62:30586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:06.065907 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.62:30586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:06.113980 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 45.158.164.139:37504] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:06.114025 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 45.158.164.139:37504] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:06.116210 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:06.116247 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:06.299398 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.36:20852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:06.300042 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.36:20852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:06.373235 2026] [cgi:error] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:19:06.392623 2026] [access_compat:error] [pid 3029576:tid 3029576] [client 125.176.202.122:63370] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:06.545798 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 45.158.164.139:37510] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:06.545839 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 45.158.164.139:37510] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:06.548030 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:06.548058 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:06.579314 2026] [security2:error] [pid 3033133:tid 3033133] [client 114.119.135.136:24769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~102,17,14/request_format~html"] [unique_id "amszKtm5mzUWz6NP_eaCTAAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~102,19,17,14/request_format~html
[Thu Jul 30 12:19:06.818904 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.60:38338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:06.819569 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.60:38338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:06.826252 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.49:50672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:06.826877 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.49:50672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:06.976182 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:37514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:06.976214 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:37514] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:06.978629 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:06.978650 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:07.178823 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.35:21208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:07.179474 2026] [authz_core:error] [pid 3025093:tid 3025093] [client 57.141.0.35:21208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:07.430316 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 45.158.164.139:37542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:07.430357 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 45.158.164.139:37542] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:07.432709 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:07.432748 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:07.502779 2026] [access_compat:error] [pid 3034671:tid 3034671] [client 176.241.66.87:52476] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:07.533947 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.45:63270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:07.534588 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.45:63270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:07.865174 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 45.158.164.139:37550] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:07.865208 2026] [lsapi:warn] [pid 3025093:tid 3025093] [client 45.158.164.139:37550] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:07.873881 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:07.873923 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:08.020977 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.23:46872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:08.021662 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.23:46872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:08.026515 2026] [access_compat:error] [pid 3016066:tid 3016066] [client 157.20.138.62:62082] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:08.056682 2026] [security2:error] [pid 3030608:tid 3030608] [client 114.119.135.136:24773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578268800/cat_ids~102,17,14/request_format~html"] [unique_id "amszLMDYhMyEKPEDIsQ39wAAADc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~102,19,17,14/request_format~html
[Thu Jul 30 12:19:08.316725 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:37562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:08.316761 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:37562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:08.317616 2026] [security2:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clientseodata.com"] [uri "/"] [unique_id "amszLH1MVEuH81SyHGe2EwAAACc"]
[Thu Jul 30 12:19:08.319040 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 12:19:08.319162 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 12:19:08.319325 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 12:19:08.319530 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 12:19:08.319621 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 12:19:08.319783 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 12:19:08.319956 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 12:19:08.320023 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 12:19:08.320198 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 12:19:08.320298 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:08.320319 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 12:19:08.320325 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:08.320383 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 12:19:08.320448 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 12:19:08.320708 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 12:19:08.320893 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 12:19:08.320960 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 12:19:08.321153 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 12:19:08.321319 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 12:19:08.321385 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 12:19:08.321598 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 12:19:08.322448 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 12:19:08.322556 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 12:19:08.322719 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 12:19:08.322908 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 12:19:08.322973 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 12:19:08.323145 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 12:19:08.323672 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 12:19:08.323740 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 12:19:08.323898 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 12:19:08.324061 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 12:19:08.324146 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 12:19:08.324310 2026] [access_compat:error] [pid 3041181:tid 3041181] [client 1.12.70.96:38294] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 12:19:08.771146 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:08.771186 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:08.838764 2026] [ssl:error] [pid 3039688:tid 3039688] (EAI 2)Name or service not known: [client 144.76.19.72:57142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:08.838819 2026] [ssl:error] [pid 3039688:tid 3039688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:08.862437 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.68:21646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:08.863054 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.68:21646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:08.895291 2026] [ssl:error] [pid 3039688:tid 3039688] (EAI 2)Name or service not known: [client 144.76.19.72:57146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:08.895315 2026] [ssl:error] [pid 3039688:tid 3039688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:09.315163 2026] [core:error] [pid 3041179:tid 3041179] (13)Permission denied: [client 216.73.216.199:24910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS3/closing_wait
[Thu Jul 30 12:19:09.513987 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:37586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:09.514035 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:37586] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:09.516232 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:09.516266 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 20.48.234.177:32135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:09.554734 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.37:26164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:09.555358 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.37:26164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:09.594160 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.30:41554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:09.594807 2026] [authz_core:error] [pid 3020537:tid 3020537] [client 57.141.0.30:41554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:09.731560 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.31:57604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:09.732180 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.31:57604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:10.211483 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:37590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:10.211518 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:37590] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:10.215457 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:10.215509 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:10.300685 2026] [security2:error] [pid 3039689:tid 3039689] [client 46.55.118.219:9182] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszLthWlT8hjoog2r1_VAAAABs"]
[Thu Jul 30 12:19:10.300739 2026] [security2:error] [pid 3039689:tid 3039689] [client 46.55.118.219:9182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszLthWlT8hjoog2r1_VAAAABs"]
[Thu Jul 30 12:19:10.301017 2026] [security2:error] [pid 3039689:tid 3039689] [client 46.55.118.219:9182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszLthWlT8hjoog2r1_VAAAABs"]
[Thu Jul 30 12:19:10.519530 2026] [core:error] [pid 3041179:tid 3041179] (13)Permission denied: [client 216.73.216.199:24910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty28/subsystem/ttyS1/uartclk
[Thu Jul 30 12:19:10.532535 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 20.206.204.219:62502] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:19:10.617844 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.19:50128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:10.618470 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.19:50128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:10.631518 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:37616] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:10.631548 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:37616] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:10.635172 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:10.635207 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:10.655693 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.54:42026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:10.656346 2026] [authz_core:error] [pid 3020911:tid 3020911] [client 57.141.0.54:42026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:11.063214 2026] [lsapi:warn] [pid 3039528:tid 3039528] [client 45.158.164.139:32868] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:11.063261 2026] [lsapi:warn] [pid 3039528:tid 3039528] [client 45.158.164.139:32868] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:11.064861 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:11.064887 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:11.077007 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.14:20690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:11.077653 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.14:20690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:11.505210 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.1:33686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:11.505670 2026] [lsapi:warn] [pid 3042692:tid 3042692] [client 45.158.164.139:32876] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:11.505709 2026] [lsapi:warn] [pid 3042692:tid 3042692] [client 45.158.164.139:32876] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:11.505862 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.1:33686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:11.521459 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:11.521491 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:11.748413 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.56:24578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:11.749030 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.56:24578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:11.795667 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.52:63316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:11.796285 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.52:63316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:11.952267 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:11.952304 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:11.992831 2026] [ssl:error] [pid 3041284:tid 3041284] (EAI 2)Name or service not known: [client 144.76.19.72:20792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:11.992868 2026] [ssl:error] [pid 3041284:tid 3041284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:12.049780 2026] [ssl:error] [pid 3039528:tid 3039528] (EAI 2)Name or service not known: [client 144.76.19.72:20804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:12.049824 2026] [ssl:error] [pid 3039528:tid 3039528] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:12.389890 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:12.389922 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:12.565926 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.32:51874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:12.566566 2026] [authz_core:error] [pid 3026897:tid 3026897] [client 57.141.0.32:51874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:12.761876 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.17:47812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:12.762514 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.17:47812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:12.836343 2026] [lsapi:warn] [pid 3036162:tid 3036162] [client 45.158.164.139:32928] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:12.836371 2026] [lsapi:warn] [pid 3036162:tid 3036162] [client 45.158.164.139:32928] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:12.848489 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:12.848532 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:13.278425 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:13.278457 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:13.287253 2026] [access_compat:error] [pid 3029576:tid 3029576] [client 176.241.66.87:34585] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:13.319334 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.52:63332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:13.319966 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.52:63332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:13.752336 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:13.752378 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:13.835817 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 45.158.164.139:32950] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:19:13.886050 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.11:25810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:13.886692 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.11:25810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:13.902719 2026] [lsapi:warn] [pid 3034671:tid 3034671] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:19:14.080122 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.2:50970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:14.080825 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.2:50970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:14.107836 2026] [authz_core:error] [pid 3042692:tid 3042692] [client 57.141.0.14:20706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:14.108478 2026] [authz_core:error] [pid 3042692:tid 3042692] [client 57.141.0.14:20706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:14.190356 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:32954] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:14.190390 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:32954] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:14.198271 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:14.198323 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:14.511050 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.41:31216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:14.511775 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.41:31216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:14.619122 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:32968] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:14.619157 2026] [lsapi:warn] [pid 3041284:tid 3041284] [client 45.158.164.139:32968] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:14.621649 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:14.621683 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:14.965533 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.3:60232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:14.966160 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.3:60232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:14.981132 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.19:23424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:14.981907 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.19:23424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:15.047873 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:15.047939 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:15.104732 2026] [ssl:error] [pid 3020911:tid 3020911] (EAI 2)Name or service not known: [client 144.76.19.72:20816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:15.104778 2026] [ssl:error] [pid 3020911:tid 3020911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:15.184411 2026] [ssl:error] [pid 3041095:tid 3041095] (EAI 2)Name or service not known: [client 144.76.19.72:20824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:15.184455 2026] [ssl:error] [pid 3041095:tid 3041095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:15.362988 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.61:37940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:15.363696 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.61:37940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:15.387449 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.27:20590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:15.388104 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.27:20590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:15.479865 2026] [lsapi:warn] [pid 3027695:tid 3027695] [client 45.158.164.139:33000] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:15.479899 2026] [lsapi:warn] [pid 3027695:tid 3027695] [client 45.158.164.139:33000] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:15.494291 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:15.494323 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:15.839607 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.35:53132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:15.840416 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.35:53132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:15.938773 2026] [lsapi:warn] [pid 3042693:tid 3042693] [client 45.158.164.139:33002] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:15.938834 2026] [lsapi:warn] [pid 3042693:tid 3042693] [client 45.158.164.139:33002] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:15.940917 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:15.940947 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:16.243105 2026] [ssl:error] [pid 3038215:tid 3038215] (70014)End of file found: [client 216.73.216.199:26709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:16.365854 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.12:51138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:16.366486 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.12:51138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:16.383444 2026] [lsapi:warn] [pid 3033133:tid 3033133] [client 45.158.164.139:33010] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:16.383510 2026] [lsapi:warn] [pid 3033133:tid 3033133] [client 45.158.164.139:33010] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:16.387298 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:16.387346 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:16.874708 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.67:31552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:16.875364 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.67:31552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:16.879306 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:16.879342 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:17.029529 2026] [security2:error] [pid 3042693:tid 3042693] [client 84.54.122.76:50314] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszNZCjSSJ6aF1WCsM3pAAAAA8"]
[Thu Jul 30 12:19:17.029584 2026] [security2:error] [pid 3042693:tid 3042693] [client 84.54.122.76:50314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszNZCjSSJ6aF1WCsM3pAAAAA8"]
[Thu Jul 30 12:19:17.029856 2026] [security2:error] [pid 3042693:tid 3042693] [client 84.54.122.76:50314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszNZCjSSJ6aF1WCsM3pAAAAA8"]
[Thu Jul 30 12:19:17.272959 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.71:40378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:17.273597 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.71:40378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:17.295346 2026] [lsapi:warn] [pid 3023932:tid 3023932] [client 45.158.164.139:33020] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:17.295404 2026] [lsapi:warn] [pid 3023932:tid 3023932] [client 45.158.164.139:33020] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:17.297530 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:17.297560 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:17.756249 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:33028] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:17.756281 2026] [lsapi:warn] [pid 3033630:tid 3033630] [client 45.158.164.139:33028] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:17.759105 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.21:47556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:17.759760 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.21:47556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:17.761304 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:17.761336 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:17.779745 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.55:61320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:17.780396 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.55:61320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:17.822023 2026] [access_compat:error] [pid 3033133:tid 3033133] [client 125.176.202.122:63607] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:17.955262 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.67:23982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:17.955890 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.67:23982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:18.036958 2026] [access_compat:error] [pid 3016066:tid 3016066] [client 176.241.66.87:34951] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:18.049666 2026] [ssl:error] [pid 3041179:tid 3041179] (70014)End of file found: [client 216.73.216.199:24910] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:18.195475 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:18.195532 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:18.239996 2026] [ssl:error] [pid 3042693:tid 3042693] (EAI 2)Name or service not known: [client 144.76.19.72:20832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:18.240038 2026] [ssl:error] [pid 3042693:tid 3042693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:18.296648 2026] [ssl:error] [pid 3033630:tid 3033630] (EAI 2)Name or service not known: [client 144.76.19.72:20842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:18.296682 2026] [ssl:error] [pid 3033630:tid 3033630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:18.541643 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 157.20.138.62:62682] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:18.671481 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:33036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:18.671528 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:33036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:18.674591 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.19:23438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:18.675224 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.19:23438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:18.676869 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:18.676895 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:19.124326 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:19.124369 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:19.227685 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.23:41424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:19.228327 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.23:41424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:19.553254 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:33052] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:19.553292 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:33052] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:19.557278 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:19.557317 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:19.934780 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 20.206.204.219:64520] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:19:19.934830 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.58:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:19.935472 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.58:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:19.984173 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:19.984207 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:19.988131 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.9:31050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:19.988924 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.9:31050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:20.076945 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.39:64422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:20.077584 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.39:64422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:20.405683 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:20.405714 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:20.636512 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.48:39830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:20.637139 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.48:39830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:20.820745 2026] [lsapi:warn] [pid 3042693:tid 3042693] [client 45.158.164.139:51140] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:20.820774 2026] [lsapi:warn] [pid 3042693:tid 3042693] [client 45.158.164.139:51140] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:20.822810 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:20.822847 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:20.868998 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.22:49424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:20.869631 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.22:49424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:21.263088 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:51156] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:21.263124 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:51156] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:21.265868 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:21.265897 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:21.353741 2026] [ssl:error] [pid 3038615:tid 3038615] (EAI 2)Name or service not known: [client 144.76.19.72:23004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:21.353787 2026] [ssl:error] [pid 3038615:tid 3038615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:21.363266 2026] [ssl:error] [pid 3027695:tid 3027695] (70014)End of file found: [client 216.73.216.199:23658] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:21.404860 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:23016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:21.404892 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:21.450193 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.11:63836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:21.450815 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.11:63836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:21.502110 2026] [core:error] [pid 3041290:tid 3041290] [client 57.141.0.1:37966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:21.502134 2026] [core:error] [pid 3041290:tid 3041290] [client 57.141.0.1:37966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:21.664511 2026] [authz_core:error] [pid 3038215:tid 3038215] [client 57.141.0.37:50596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:21.665140 2026] [authz_core:error] [pid 3038215:tid 3038215] [client 57.141.0.37:50596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:21.703730 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:21.703764 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:21.793438 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.58:33298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:21.794092 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.58:33298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:21.969138 2026] [core:error] [pid 3039529:tid 3039529] (13)Permission denied: [client 216.73.216.199:9700] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/cleversprogs.com.db
[Thu Jul 30 12:19:21.988359 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.36:60288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:21.989100 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.36:60288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:22.012598 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.13:61616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:22.013232 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.13:61616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:22.132005 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:51164] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:22.132035 2026] [lsapi:warn] [pid 3041290:tid 3041290] [client 45.158.164.139:51164] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:22.134517 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:22.134542 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:22.556000 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:51166] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:22.556039 2026] [lsapi:warn] [pid 3038615:tid 3038615] [client 45.158.164.139:51166] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:22.558508 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:22.558537 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:22.779991 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.34:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:22.780649 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.34:60222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:22.996591 2026] [lsapi:warn] [pid 3038215:tid 3038215] [client 45.158.164.139:51168] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:22.996616 2026] [lsapi:warn] [pid 3038215:tid 3038215] [client 45.158.164.139:51168] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:22.998082 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:22.998103 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:23.420188 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:23.420219 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:23.428409 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.61:24070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:23.429022 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.61:24070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:23.435811 2026] [access_compat:error] [pid 3042647:tid 3042647] [client 172.213.225.181:50769] AH01797: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:19:23.464194 2026] [authz_core:error] [pid 3038215:tid 3038215] [client 57.141.0.29:56238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:23.464808 2026] [authz_core:error] [pid 3038215:tid 3038215] [client 57.141.0.29:56238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:23.743691 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.65:62464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:23.744352 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.65:62464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:23.779876 2026] [ssl:error] [pid 3039529:tid 3039529] (70014)End of file found: [client 216.73.216.199:9700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:23.824872 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.16:61650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:23.825527 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.16:61650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:23.854672 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:51194] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:23.854724 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:51194] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:23.857231 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:23.857255 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:24.282306 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:51198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:24.282339 2026] [lsapi:warn] [pid 3038495:tid 3038495] [client 45.158.164.139:51198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:24.284719 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:24.284745 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:24.458302 2026] [ssl:error] [pid 3036286:tid 3036286] (EAI 2)Name or service not known: [client 144.76.19.72:23018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:24.458348 2026] [ssl:error] [pid 3036286:tid 3036286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:24.458366 2026] [lsapi:warn] [pid 3033525:tid 3033525] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:19:24.511038 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.52:33178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:24.511769 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.52:33178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:24.513592 2026] [ssl:error] [pid 3038495:tid 3038495] (EAI 2)Name or service not known: [client 144.76.19.72:23022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:24.513627 2026] [ssl:error] [pid 3038495:tid 3038495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:24.631133 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 172.213.225.181:50769] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 12:19:24.684122 2026] [ssl:error] [pid 3023932:tid 3023932] (70014)End of file found: [client 216.73.216.199:1846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:24.709459 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:51214] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:24.709521 2026] [lsapi:warn] [pid 3036286:tid 3036286] [client 45.158.164.139:51214] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:24.711076 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:24.711106 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:24.779760 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.44:54096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:24.780387 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.44:54096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:24.933873 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.13:62506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:24.934508 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.13:62506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:25.130672 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:25.130702 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:25.319630 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.22:49432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:25.320258 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.22:49432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:25.549485 2026] [lsapi:warn] [pid 3016066:tid 3016066] [client 45.158.164.139:51230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:25.549553 2026] [lsapi:warn] [pid 3016066:tid 3016066] [client 45.158.164.139:51230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:25.551120 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:25.551148 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:25.588477 2026] [security2:error] [pid 3036117:tid 3036117] [client 43.136.167.197:38838] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "amszPYfEGiLYTQM1QJrC2AAAADI"]
[Thu Jul 30 12:19:25.701153 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.49:51960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:25.701781 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.49:51960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:25.950099 2026] [security2:error] [pid 3020911:tid 3020911] [client 185.191.171.16:63234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1886.0/prev_next,prev.html"] [unique_id "amszPXeQLwlxHDOiAds5ywAAABA"]
[Thu Jul 30 12:19:25.980428 2026] [lsapi:warn] [pid 3041180:tid 3041180] [client 45.158.164.139:51246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:25.980461 2026] [lsapi:warn] [pid 3041180:tid 3041180] [client 45.158.164.139:51246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:25.982998 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:25.983023 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:26.414888 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:26.414924 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:26.427556 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.15:58306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:26.428178 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.15:58306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:26.816111 2026] [security2:error] [pid 3036117:tid 3036117] [client 43.157.172.39:50634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.magic-cookie.co.uk"] [uri "/"] [unique_id "amszPofEGiLYTQM1QJrC2QAAADI"]
[Thu Jul 30 12:19:26.843522 2026] [lsapi:warn] [pid 3039689:tid 3039689] [client 45.158.164.139:51270] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:26.843594 2026] [lsapi:warn] [pid 3039689:tid 3039689] [client 45.158.164.139:51270] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:26.845902 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:26.845936 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:26.881085 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.39:21912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:26.881755 2026] [authz_core:error] [pid 3027695:tid 3027695] [client 57.141.0.39:21912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:27.093532 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.49:51972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:27.094153 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.49:51972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:27.110331 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.69:60294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:27.110968 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.69:60294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:27.251102 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.25:34894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:27.251771 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.25:34894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:27.267439 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:51282] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:27.267474 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:51282] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:27.269938 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:27.269969 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:27.317936 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.34:60230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:27.318572 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.34:60230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:27.566426 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:23026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:27.566471 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:27.623632 2026] [ssl:error] [pid 3038043:tid 3038043] (EAI 2)Name or service not known: [client 144.76.19.72:23040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:27.623668 2026] [ssl:error] [pid 3038043:tid 3038043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:27.693561 2026] [lsapi:warn] [pid 3026897:tid 3026897] [client 45.158.164.139:51288] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:27.693592 2026] [lsapi:warn] [pid 3026897:tid 3026897] [client 45.158.164.139:51288] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:27.696276 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:27.696306 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:27.980421 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.48:39844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:27.981042 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.48:39844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:28.126084 2026] [lsapi:warn] [pid 3039689:tid 3039689] [client 45.158.164.139:51298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:28.126118 2026] [lsapi:warn] [pid 3039689:tid 3039689] [client 45.158.164.139:51298] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:28.128698 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:28.128726 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:28.550616 2026] [lsapi:warn] [pid 3041181:tid 3041181] [client 45.158.164.139:51312] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:28.550659 2026] [lsapi:warn] [pid 3041181:tid 3041181] [client 45.158.164.139:51312] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:28.552648 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:28.552673 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:28.576173 2026] [access_compat:error] [pid 3041286:tid 3041286] [client 176.241.66.87:35640] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:28.612639 2026] [security2:error] [pid 3038043:tid 3038043] [client 43.136.167.197:41520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amszQOAqppI-tnbkQ1srDAAAAAI"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 12:19:28.651631 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.69:37580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:28.652274 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.69:37580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:28.892875 2026] [core:error] [pid 3041180:tid 3041180] (13)Permission denied: [client 216.73.216.199:17161] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty54/subsystem/ttyS1/close_delay
[Thu Jul 30 12:19:28.965224 2026] [lsapi:warn] [pid 3034419:tid 3034419] [client 45.158.164.139:51314] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:28.965267 2026] [lsapi:warn] [pid 3034419:tid 3034419] [client 45.158.164.139:51314] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:28.967392 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:28.967420 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:29.019444 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.66:28040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:29.020079 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.66:28040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:29.108210 2026] [access_compat:error] [pid 3026897:tid 3026897] [client 157.20.138.62:63291] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:29.150783 2026] [access_compat:error] [pid 3036117:tid 3036117] [client 125.176.202.122:63845] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:29.172883 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.36:60300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:29.173517 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.36:60300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:29.255559 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.1:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:29.256207 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.1:37978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:29.418825 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:29.418857 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:29.696968 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.33:28834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:29.697600 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.33:28834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:29.835825 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.32:35672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:29.836472 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.32:35672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:29.838679 2026] [lsapi:warn] [pid 3042693:tid 3042693] [client 45.158.164.139:51326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:29.838709 2026] [lsapi:warn] [pid 3042693:tid 3042693] [client 45.158.164.139:51326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:29.840876 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:29.840895 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:30.295024 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:51340] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:30.295057 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:51340] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:30.297622 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:30.297648 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:30.680105 2026] [ssl:error] [pid 3041094:tid 3041094] (EAI 2)Name or service not known: [client 144.76.19.72:63958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:30.680153 2026] [ssl:error] [pid 3041094:tid 3041094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:30.736782 2026] [lsapi:warn] [pid 3034567:tid 3034567] [client 45.158.164.139:34076] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:30.736827 2026] [lsapi:warn] [pid 3034567:tid 3034567] [client 45.158.164.139:34076] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:30.737920 2026] [ssl:error] [pid 3038495:tid 3038495] (EAI 2)Name or service not known: [client 144.76.19.72:63974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:30.737954 2026] [ssl:error] [pid 3038495:tid 3038495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:30.739531 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:30.739556 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:30.759249 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.41:38022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:30.759872 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.41:38022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:31.159521 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:34088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:31.159551 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:34088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:31.162015 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:31.162043 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:31.281398 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.19:53070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:31.282046 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.19:53070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:31.303246 2026] [ssl:error] [pid 3041180:tid 3041180] (70014)End of file found: [client 216.73.216.199:17161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:31.580054 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:34092] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:31.580103 2026] [lsapi:warn] [pid 3041094:tid 3041094] [client 45.158.164.139:34092] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:31.582453 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:31.582480 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:31.603677 2026] [ssl:error] [pid 3042693:tid 3042693] (70014)End of file found: [client 216.73.216.199:25067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:31.655232 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.23:38628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:31.655854 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.23:38628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:31.924608 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.6:29972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:31.925226 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.6:29972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:32.000316 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.43:44512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:32.000945 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.43:44512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:32.006375 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.63:34354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:32.006990 2026] [authz_core:error] [pid 3030651:tid 3030651] [client 57.141.0.63:34354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:32.039772 2026] [lsapi:warn] [pid 3043567:tid 3043567] [client 45.158.164.139:34096] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:32.039823 2026] [lsapi:warn] [pid 3043567:tid 3043567] [client 45.158.164.139:34096] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:32.042008 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:32.042040 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:32.045770 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 20.215.216.94:55618] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:19:32.193489 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.55:59448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:32.194120 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.55:59448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:32.464981 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:32.465024 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:32.513201 2026] [core:error] [pid 3033133:tid 3033133] (13)Permission denied: [client 216.73.216.199:8882] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory118/subsystem/uevent
[Thu Jul 30 12:19:32.628149 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.19:53080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:32.628775 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.19:53080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:32.930796 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:32.930829 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:33.188323 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.56:63626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:33.188950 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.56:63626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:33.303843 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.13:44290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:33.304478 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.13:44290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:33.372569 2026] [core:error] [pid 3041031:tid 3041031] [client 66.249.66.167:37674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:33.372601 2026] [core:error] [pid 3041031:tid 3041031] [client 66.249.66.167:37674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:33.381753 2026] [lsapi:warn] [pid 3020911:tid 3020911] [client 45.158.164.139:34152] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:33.381798 2026] [lsapi:warn] [pid 3020911:tid 3020911] [client 45.158.164.139:34152] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:33.384017 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:33.384048 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:33.484086 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.54:33306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:33.484712 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.54:33306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:33.752189 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.71:51098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:33.752820 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.71:51098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:33.796161 2026] [ssl:error] [pid 3038615:tid 3038615] (EAI 2)Name or service not known: [client 144.76.19.72:63982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:33.796191 2026] [ssl:error] [pid 3038615:tid 3038615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:33.827420 2026] [lsapi:warn] [pid 3039688:tid 3039688] [client 45.158.164.139:34158] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:33.827470 2026] [lsapi:warn] [pid 3039688:tid 3039688] [client 45.158.164.139:34158] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:33.831479 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:33.831521 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:33.850611 2026] [ssl:error] [pid 3038495:tid 3038495] (EAI 2)Name or service not known: [client 144.76.19.72:63988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:33.850635 2026] [ssl:error] [pid 3038495:tid 3038495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:34.016285 2026] [ssl:error] [pid 3033133:tid 3033133] (70014)End of file found: [client 216.73.216.199:8882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:34.169089 2026] [core:error] [pid 3039529:tid 3039529] [client 66.249.64.170:44753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:34.169124 2026] [core:error] [pid 3039529:tid 3039529] [client 66.249.64.170:44753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:34.256983 2026] [lsapi:warn] [pid 3020912:tid 3020912] [client 45.158.164.139:34170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:34.257046 2026] [lsapi:warn] [pid 3020912:tid 3020912] [client 45.158.164.139:34170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:34.265312 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:34.265360 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:34.373795 2026] [access_compat:error] [pid 3038615:tid 3038615] [client 176.241.66.87:35913] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:34.574254 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.2:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:34.574882 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.2:49402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:34.742709 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.46:54996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:34.743362 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.46:54996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:34.752303 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:34.752344 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:34.832438 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.14:26212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:34.833095 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.14:26212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:35.027094 2026] [lsapi:warn] [pid 3043298:tid 3043298] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:19:35.151121 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.32:48180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:35.151743 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.32:48180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:35.207407 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:35.207435 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:35.655160 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:35.655193 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:36.068984 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:34222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:36.069019 2026] [lsapi:warn] [pid 3038494:tid 3038494] [client 45.158.164.139:34222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:36.071090 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:36.071115 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:36.369217 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.25:62614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:36.369881 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.25:62614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:36.511639 2026] [lsapi:warn] [pid 3041095:tid 3041095] [client 45.158.164.139:34228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:36.511680 2026] [lsapi:warn] [pid 3041095:tid 3041095] [client 45.158.164.139:34228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:36.518188 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.62:50030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:36.518815 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.62:50030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:36.523744 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:36.523778 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:36.885779 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.36:30604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:36.886405 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.36:30604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:36.923688 2026] [ssl:error] [pid 3038495:tid 3038495] (EAI 2)Name or service not known: [client 144.76.19.72:63996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:36.923723 2026] [ssl:error] [pid 3038495:tid 3038495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:36.926696 2026] [access_compat:error] [pid 3036162:tid 3036162] [client 2.189.5.162:53932] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:19:36.957074 2026] [lsapi:warn] [pid 3041285:tid 3041285] [client 45.158.164.139:34236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:36.957124 2026] [lsapi:warn] [pid 3041285:tid 3041285] [client 45.158.164.139:34236] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:36.960846 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:36.960870 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:36.978152 2026] [ssl:error] [pid 3041095:tid 3041095] (EAI 2)Name or service not known: [client 144.76.19.72:64006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:36.978174 2026] [ssl:error] [pid 3041095:tid 3041095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:36.993456 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.47:38058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:36.994081 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.47:38058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:37.033161 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.69:37596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:37.033780 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.69:37596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:37.397642 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:19:37.397677 2026] [lsapi:warn] [pid 3030608:tid 3030608] [client 20.48.234.177:32228] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:19:38.260727 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.21:36320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:38.261348 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.21:36320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:38.554889 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.38:25502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:38.555521 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.38:25502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:38.597369 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.18:58994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:38.598474 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.18:58994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:39.012616 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.51:31254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:39.013238 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.51:31254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:39.092573 2026] [access_compat:error] [pid 3041095:tid 3041095] [client 176.241.66.87:36313] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:39.101116 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.36:30618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:39.101735 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.36:30618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:39.478305 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.5:46014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:39.478924 2026] [authz_core:error] [pid 3033630:tid 3033630] [client 57.141.0.5:46014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:39.496272 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.14:26220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:39.496907 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.14:26220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:39.600081 2026] [access_compat:error] [pid 3036162:tid 3036162] [client 157.20.138.62:63892] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:39.939040 2026] [core:error] [pid 3033525:tid 3033525] (13)Permission denied: [client 216.73.216.199:24899] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/serio/drivers/psmouse/module/uevent
[Thu Jul 30 12:19:40.035850 2026] [ssl:error] [pid 3039529:tid 3039529] (EAI 2)Name or service not known: [client 144.76.19.72:41850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:40.035892 2026] [ssl:error] [pid 3039529:tid 3039529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:40.087914 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.65:61740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:40.088625 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.65:61740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:40.090362 2026] [ssl:error] [pid 3033133:tid 3033133] (EAI 2)Name or service not known: [client 144.76.19.72:41852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:40.090380 2026] [ssl:error] [pid 3033133:tid 3033133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:40.604859 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.27:49336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:40.605484 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.27:49336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:40.753961 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.11:27334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:40.754592 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.11:27334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:40.888214 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.11:27344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:40.888826 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.11:27344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:41.189616 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.13:44292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:41.190252 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.13:44292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:41.258383 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.24:49288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:41.259005 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.24:49288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:41.331609 2026] [access_compat:error] [pid 3039529:tid 3039529] [client 125.176.202.122:64077] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:41.360894 2026] [core:crit] [pid 3028231:tid 3028231] (13)Permission denied: [client 40.77.167.132:22339] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 12:19:41.911206 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.71:51100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:41.911821 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.71:51100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:42.486246 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.42:52690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:42.486865 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.42:52690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:42.861639 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.27:49348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:42.862260 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.27:49348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:43.049671 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.7:57490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:43.050336 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.7:57490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:43.146307 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.1:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:43.146990 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.1:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:43.147801 2026] [ssl:error] [pid 3041284:tid 3041284] (EAI 2)Name or service not known: [client 144.76.19.72:41854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:43.147820 2026] [ssl:error] [pid 3041284:tid 3041284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:43.204912 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:41866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:43.204944 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:43.551843 2026] [core:error] [pid 3033525:tid 3033525] (13)Permission denied: [client 216.73.216.199:24899] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/hwcache_align
[Thu Jul 30 12:19:43.624552 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.53:30232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:43.625183 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.53:30232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:43.810451 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.39:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:43.811089 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.39:35164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:44.155792 2026] [core:crit] [pid 3033525:tid 3033525] (13)Permission denied: [client 216.73.216.199:24899] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/initramfs/log/private/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/initramfs/log/private/' is executable
[Thu Jul 30 12:19:44.770089 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.51:31262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:44.770714 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.51:31262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:44.883230 2026] [access_compat:error] [pid 3030608:tid 3030608] [client 176.241.66.87:54358] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:45.206332 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.59:36488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:45.206975 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.59:36488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:45.306727 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 66.249.66.35:39661] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:19:45.309429 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 66.249.66.35:39661] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:19:45.356291 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.30:28366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:45.356912 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.30:28366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:45.395423 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.25:31102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:45.396044 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.25:31102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:45.399436 2026] [ssl:error] [pid 3042647:tid 3042647] (70014)End of file found: [client 216.73.216.199:9974] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:19:45.578005 2026] [lsapi:warn] [pid 3041180:tid 3041180] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:19:45.701374 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.53:30248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:45.702040 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.53:30248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:45.828352 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.61:57434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:45.828990 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.61:57434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:46.126656 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.31:34792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:46.127279 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.31:34792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:46.260106 2026] [ssl:error] [pid 3041179:tid 3041179] (EAI 2)Name or service not known: [client 144.76.19.72:41870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:46.260137 2026] [ssl:error] [pid 3041179:tid 3041179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:46.315868 2026] [ssl:error] [pid 3041180:tid 3041180] (EAI 2)Name or service not known: [client 144.76.19.72:41880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:46.315904 2026] [ssl:error] [pid 3041180:tid 3041180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:46.659975 2026] [core:error] [pid 3033631:tid 3033631] [client 66.249.66.167:52982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:46.660000 2026] [core:error] [pid 3033631:tid 3033631] [client 66.249.66.167:52982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:46.663610 2026] [core:error] [pid 3041180:tid 3041180] [client 66.249.66.167:47423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:46.663629 2026] [core:error] [pid 3041180:tid 3041180] [client 66.249.66.167:47423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:46.796627 2026] [security2:error] [pid 3041031:tid 3041031] [client 3.222.190.107:53637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/index.php"] [unique_id "amszUhcEOGANLeN7jYJHOwAAABo"]
[Thu Jul 30 12:19:46.831293 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.16:36404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:46.831912 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.16:36404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:47.055901 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.1:53608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:47.056536 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.1:53608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:47.254654 2026] [authz_core:error] [pid 3044525:tid 3044525] [client 57.141.0.24:24944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:47.255445 2026] [authz_core:error] [pid 3044525:tid 3044525] [client 57.141.0.24:24944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:47.531862 2026] [security2:error] [pid 3033133:tid 3033133] [client 43.157.22.19:64581] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszU9m5mzUWz6NP_eaCXAAAAAE"]
[Thu Jul 30 12:19:47.531915 2026] [security2:error] [pid 3033133:tid 3033133] [client 43.157.22.19:64581] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszU9m5mzUWz6NP_eaCXAAAAAE"]
[Thu Jul 30 12:19:47.532185 2026] [security2:error] [pid 3033133:tid 3033133] [client 43.157.22.19:64581] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszU9m5mzUWz6NP_eaCXAAAAAE"]
[Thu Jul 30 12:19:47.684717 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.25:31112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:47.685338 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.25:31112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:47.967802 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.8:51536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:47.968451 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.8:51536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:48.180205 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.15:20330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:48.180821 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.15:20330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:48.482386 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.43:26978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:48.483006 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.43:26978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:48.843729 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.23:47528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:48.844411 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.23:47528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:48.898232 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.46:51584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:48.898877 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.46:51584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:49.102473 2026] [security2:error] [pid 3039689:tid 3039689] [client 85.208.96.202:35420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2545.0/prev_next,prev.html"] [unique_id "amszVdhWlT8hjoog2r1_aAAAABs"]
[Thu Jul 30 12:19:49.370332 2026] [ssl:error] [pid 3039529:tid 3039529] (EAI 2)Name or service not known: [client 144.76.19.72:41888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:49.370385 2026] [ssl:error] [pid 3039529:tid 3039529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:49.426012 2026] [ssl:error] [pid 3041180:tid 3041180] (EAI 2)Name or service not known: [client 144.76.19.72:41900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:49.426043 2026] [ssl:error] [pid 3041180:tid 3041180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:49.626205 2026] [security2:error] [pid 3036286:tid 3036286] [client 197.1.147.109:46226] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszVfoPbCIL8xj3r8M5-wAAAEc"]
[Thu Jul 30 12:19:49.626250 2026] [security2:error] [pid 3036286:tid 3036286] [client 197.1.147.109:46226] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszVfoPbCIL8xj3r8M5-wAAAEc"]
[Thu Jul 30 12:19:49.626481 2026] [security2:error] [pid 3036286:tid 3036286] [client 197.1.147.109:46226] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszVfoPbCIL8xj3r8M5-wAAAEc"]
[Thu Jul 30 12:19:49.713315 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.71:57354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:49.713951 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.71:57354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:49.726438 2026] [access_compat:error] [pid 3041290:tid 3041290] [client 176.241.66.87:36959] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:50.231649 2026] [access_compat:error] [pid 3033630:tid 3033630] [client 157.20.138.62:64494] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:50.236366 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.66:62998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:50.237030 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.66:62998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:50.289185 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.54:31856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:50.289810 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.54:31856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:50.494117 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.27:49356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:50.494745 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.27:49356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:51.138195 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.46:24920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:51.138884 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.46:24920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:51.526993 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.39:38940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:51.527627 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.39:38940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:52.456972 2026] [core:error] [pid 3041284:tid 3041284] [client 57.141.0.36:24568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:52.457003 2026] [core:error] [pid 3041284:tid 3041284] [client 57.141.0.36:24568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:52.480807 2026] [ssl:error] [pid 3033525:tid 3033525] (EAI 2)Name or service not known: [client 144.76.19.72:33312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:52.480845 2026] [ssl:error] [pid 3033525:tid 3033525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:52.535666 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.13:30426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:52.536334 2026] [authz_core:error] [pid 3041285:tid 3041285] [client 57.141.0.13:30426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:52.536972 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:33322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:52.537001 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:52.660928 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 125.176.202.122:64314] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:52.929424 2026] [core:error] [pid 3041094:tid 3041094] (13)Permission denied: [client 216.73.216.199:2300] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/objects_partial
[Thu Jul 30 12:19:52.936537 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.66:63344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:52.937160 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.66:63344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:52.958719 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.18:54502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:52.959346 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.18:54502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:53.142822 2026] [security2:error] [pid 3041031:tid 3041031] [client 14.162.47.252:44394] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszWRcEOGANLeN7jYJHPQAAABo"]
[Thu Jul 30 12:19:53.142870 2026] [security2:error] [pid 3041031:tid 3041031] [client 14.162.47.252:44394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszWRcEOGANLeN7jYJHPQAAABo"]
[Thu Jul 30 12:19:53.143142 2026] [security2:error] [pid 3041031:tid 3041031] [client 14.162.47.252:44394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszWRcEOGANLeN7jYJHPQAAABo"]
[Thu Jul 30 12:19:53.491928 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.33:60616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:53.492565 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.33:60616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:53.946330 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.14:60404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:53.946993 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.14:60404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:53.979835 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.47:55246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:53.979852 2026] [authz_core:error] [pid 3044597:tid 3044597] [client 57.141.0.54:31872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:53.980511 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.47:55246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:53.980967 2026] [authz_core:error] [pid 3044597:tid 3044597] [client 57.141.0.54:31872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:54.303248 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.64:33216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:54.303869 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.64:33216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:54.632189 2026] [authz_core:error] [pid 3044597:tid 3044597] [client 57.141.0.25:31116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:54.632821 2026] [authz_core:error] [pid 3044597:tid 3044597] [client 57.141.0.25:31116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:54.693317 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.40:55702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:54.693947 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.40:55702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:54.799870 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.71:24614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:54.800514 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.71:24614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:55.572714 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.40:55712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:55.573333 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.40:55712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:55.614565 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:33334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:55.614601 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:55.672608 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:33346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:55.672638 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:55.783296 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.26:46938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:55.783915 2026] [authz_core:error] [pid 3041095:tid 3041095] [client 57.141.0.26:46938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:55.925725 2026] [core:error] [pid 3041289:tid 3041289] [client 57.141.0.46:24930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:55.925768 2026] [core:error] [pid 3041289:tid 3041289] [client 57.141.0.46:24930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:19:56.110340 2026] [lsapi:warn] [pid 3043298:tid 3043298] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:19:56.310214 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.46:24932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:56.310840 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.46:24932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:56.412137 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.18:54530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:56.412859 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.18:54530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:57.093269 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.69:27390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:57.093895 2026] [authz_core:error] [pid 3041290:tid 3041290] [client 57.141.0.69:27390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:57.120667 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.59:51868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:57.121288 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.59:51868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:57.643149 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.38:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:57.643858 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.38:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:58.147934 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.16:59310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:58.148572 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.16:59310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:58.398672 2026] [access_compat:error] [pid 3044598:tid 3044598] [client 125.176.202.122:64183] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:19:58.428652 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.36:24574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:58.429284 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.36:24574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:58.723936 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.69:60608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:58.724569 2026] [authz_core:error] [pid 3016066:tid 3016066] [client 57.141.0.69:60608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:58.728015 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.51:52012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:58.728704 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.51:52012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:58.729564 2026] [ssl:error] [pid 3038494:tid 3038494] (EAI 2)Name or service not known: [client 144.76.19.72:33362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:58.729594 2026] [ssl:error] [pid 3038494:tid 3038494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:58.786683 2026] [ssl:error] [pid 3036162:tid 3036162] (EAI 2)Name or service not known: [client 144.76.19.72:33372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:19:58.786707 2026] [ssl:error] [pid 3036162:tid 3036162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:19:59.480214 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.60:23192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:59.480907 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.60:23192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:19:59.608232 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.32:53584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:19:59.608854 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.32:53584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:00.241802 2026] [access_compat:error] [pid 3044598:tid 3044598] [client 176.241.66.87:37707] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:00.454173 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.63:62426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:00.454851 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.63:62426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:00.741234 2026] [access_compat:error] [pid 3033133:tid 3033133] [client 157.20.138.62:65093] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:00.876321 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.19:34642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:00.876944 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.19:34642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:01.056899 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.12:64538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:01.057539 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.12:64538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:01.276462 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.38:22442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:01.277111 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.38:22442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:01.376994 2026] [security2:error] [pid 3042647:tid 3042647] [client 85.208.98.22:35178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nba-son-ma%C3%A7lar-k.html"] [unique_id "amszYfkMmqgyiRy7nBishwAAAAg"]
[Thu Jul 30 12:20:01.555833 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.28:21870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:01.556479 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.28:21870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:01.847869 2026] [ssl:error] [pid 3042647:tid 3042647] (EAI 2)Name or service not known: [client 144.76.19.72:33864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:01.847909 2026] [ssl:error] [pid 3042647:tid 3042647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:01.904639 2026] [ssl:error] [pid 3045651:tid 3045651] (EAI 2)Name or service not known: [client 144.76.19.72:33872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:01.904677 2026] [ssl:error] [pid 3045651:tid 3045651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:02.265094 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.8:58014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:02.265741 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.8:58014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:02.388706 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.55:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:02.389355 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.55:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:02.612808 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.9:21214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:02.613431 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.9:21214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:03.179152 2026] [authz_core:error] [pid 3046005:tid 3046005] [client 57.141.0.64:33232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:03.179786 2026] [authz_core:error] [pid 3046005:tid 3046005] [client 57.141.0.64:33232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:03.288210 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.8:58028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:03.288872 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.8:58028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:03.585828 2026] [security2:error] [pid 3041286:tid 3041286] [client 85.208.96.207:39522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/the-drope-st-fagans-cardiff"] [unique_id "amszY7-dIZA3ah_vb6BH0QAAACw"]
[Thu Jul 30 12:20:03.798329 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.25:32654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:03.798949 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.25:32654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:04.388039 2026] [access_compat:error] [pid 3041284:tid 3041284] [client 125.176.202.122:64550] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:04.411336 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.14:36552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:04.411951 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.14:36552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:04.865582 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.30:46096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:04.866209 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.30:46096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:04.962906 2026] [ssl:error] [pid 3046005:tid 3046005] (EAI 2)Name or service not known: [client 144.76.19.72:33888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:04.962946 2026] [ssl:error] [pid 3046005:tid 3046005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:05.020991 2026] [ssl:error] [pid 3046101:tid 3046101] (EAI 2)Name or service not known: [client 144.76.19.72:33902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:05.021026 2026] [ssl:error] [pid 3046101:tid 3046101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:05.425330 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.71:63376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:05.425967 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.71:63376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:05.523802 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.32:38526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:05.524442 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.32:38526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:06.010253 2026] [access_compat:error] [pid 3034567:tid 3034567] [client 176.241.66.87:55448] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:06.116724 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.13:38488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:06.117382 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.13:38488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:06.256804 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.39:32042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:06.257429 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.39:32042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:06.580242 2026] [lsapi:warn] [pid 3038043:tid 3038043] [client 103.162.74.184:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:20:07.018777 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.31:64174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:07.019430 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.31:64174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:07.040199 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.18:54732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:07.040920 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.18:54732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:07.497427 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.35:58612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:07.498053 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.35:58612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:07.920044 2026] [security2:error] [pid 3046103:tid 3046103] [client 69.5.20.32:51537] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszZyn5rMUYfqI3JNvezwAAACE"]
[Thu Jul 30 12:20:07.920116 2026] [security2:error] [pid 3046103:tid 3046103] [client 69.5.20.32:51537] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszZyn5rMUYfqI3JNvezwAAACE"]
[Thu Jul 30 12:20:07.920403 2026] [security2:error] [pid 3046103:tid 3046103] [client 69.5.20.32:51537] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszZyn5rMUYfqI3JNvezwAAACE"]
[Thu Jul 30 12:20:07.924278 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.15:35022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:07.924902 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.15:35022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:08.091249 2026] [ssl:error] [pid 3046102:tid 3046102] (EAI 2)Name or service not known: [client 144.76.19.72:33916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:08.091306 2026] [ssl:error] [pid 3046102:tid 3046102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:08.112650 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.20:38288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:08.113304 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.20:38288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:08.147713 2026] [ssl:error] [pid 3034419:tid 3034419] (EAI 2)Name or service not known: [client 144.76.19.72:33924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:08.147754 2026] [ssl:error] [pid 3034419:tid 3034419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:08.374704 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.25:33740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:08.375370 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.25:33740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:08.765279 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.37:20462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:08.765930 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.37:20462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:08.803990 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.31:64178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:08.804638 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.31:64178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:09.465478 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:47918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:09.466595 2026] [authz_core:error] [pid 3033133:tid 3033133] [client 57.141.0.26:47918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:09.559036 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.5:59504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:09.559676 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.5:59504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:09.583854 2026] [security2:error] [pid 3036117:tid 3036117] [client 8.216.42.7:56343] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszaYfEGiLYTQM1QJrC5gAAADI"]
[Thu Jul 30 12:20:09.583937 2026] [security2:error] [pid 3036117:tid 3036117] [client 8.216.42.7:56343] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszaYfEGiLYTQM1QJrC5gAAADI"]
[Thu Jul 30 12:20:09.584351 2026] [security2:error] [pid 3036117:tid 3036117] [client 8.216.42.7:56343] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszaYfEGiLYTQM1QJrC5gAAADI"]
[Thu Jul 30 12:20:09.981127 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.37:20464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:09.982259 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.37:20464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:10.192672 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 4.213.163.102:49517] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 12:20:10.478204 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.56:57078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:10.478824 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.56:57078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:10.625986 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.27:36896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:10.626624 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.27:36896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:10.724634 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.21:46098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:10.725256 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.21:46098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:10.791396 2026] [access_compat:error] [pid 3038495:tid 3038495] [client 176.241.66.87:55768] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:11.141672 2026] [core:error] [pid 3043526:tid 3043526] [client 66.249.66.169:48373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:11.141700 2026] [core:error] [pid 3043526:tid 3043526] [client 66.249.66.169:48373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:11.203648 2026] [ssl:error] [pid 3030608:tid 3030608] (EAI 2)Name or service not known: [client 144.76.19.72:31708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:11.203693 2026] [ssl:error] [pid 3030608:tid 3030608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:11.255542 2026] [ssl:error] [pid 3038615:tid 3038615] (EAI 2)Name or service not known: [client 144.76.19.72:31722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:11.255571 2026] [ssl:error] [pid 3038615:tid 3038615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:11.323352 2026] [access_compat:error] [pid 3046102:tid 3046102] [client 157.20.138.62:49312] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:11.353081 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 66.249.66.35:57479] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:20:11.355793 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 66.249.66.35:57479] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:20:11.550945 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.45:26936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:11.551577 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.45:26936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:11.788965 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.38:55422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:11.789598 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.38:55422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:12.599846 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.51:44088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:12.600466 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.51:44088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:12.638212 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.59:25626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:12.638997 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.59:25626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:12.727149 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.35:41538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:12.727773 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.35:41538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:12.989234 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.59:25628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:12.989864 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.59:25628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:13.412689 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.24:24782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:13.413311 2026] [authz_core:error] [pid 3029576:tid 3029576] [client 57.141.0.24:24782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:13.596570 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.6:38706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:13.597189 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.6:38706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:13.861655 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.34:42514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:13.862303 2026] [authz_core:error] [pid 3033563:tid 3033563] [client 57.141.0.34:42514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:14.311593 2026] [ssl:error] [pid 3033563:tid 3033563] (EAI 2)Name or service not known: [client 144.76.19.72:31734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:14.311625 2026] [ssl:error] [pid 3033563:tid 3033563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:14.364617 2026] [ssl:error] [pid 3039688:tid 3039688] (EAI 2)Name or service not known: [client 144.76.19.72:31748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:14.364645 2026] [ssl:error] [pid 3039688:tid 3039688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:14.732580 2026] [security2:error] [pid 3042647:tid 3042647] [client 118.24.135.34:35404] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "lucynaden.com"] [uri "/"] [unique_id "amszbvkMmqgyiRy7nBislAAAAAg"]
[Thu Jul 30 12:20:14.834213 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.47:36062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:14.834837 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.47:36062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:15.094638 2026] [core:error] [pid 3039688:tid 3039688] [client 57.141.0.41:24162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:15.094669 2026] [core:error] [pid 3039688:tid 3039688] [client 57.141.0.41:24162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:15.452632 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.52:54394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:15.453287 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.52:54394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:15.480607 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 125.176.202.122:64786] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:15.899311 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.19:20680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:15.899939 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.19:20680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:16.308706 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.6:38724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:16.309357 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.6:38724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:16.375101 2026] [access_compat:error] [pid 3046102:tid 3046102] [client 45.158.164.139:56046] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:20:16.643715 2026] [autoindex:error] [pid 3034671:tid 3034671] [client 4.223.67.9:55362] AH01276: Cannot serve directory /home/erskinen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:20:16.690172 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.30:46712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:16.690794 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.30:46712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:16.723014 2026] [authz_core:error] [pid 3047122:tid 3047122] [client 57.141.0.42:35982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:16.723711 2026] [authz_core:error] [pid 3047122:tid 3047122] [client 57.141.0.42:35982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:16.939987 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.14:24614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:16.940629 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.14:24614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:17.216803 2026] [autoindex:error] [pid 3034671:tid 3034671] [client 4.223.67.9:55362] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:20:17.421730 2026] [ssl:error] [pid 3041289:tid 3041289] (EAI 2)Name or service not known: [client 144.76.19.72:31754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:17.421779 2026] [ssl:error] [pid 3041289:tid 3041289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:17.482526 2026] [ssl:error] [pid 3036286:tid 3036286] (EAI 2)Name or service not known: [client 144.76.19.72:31756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:17.482558 2026] [ssl:error] [pid 3036286:tid 3036286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:17.617080 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.63:41372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:17.617700 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.63:41372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:17.638938 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.71:27590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:17.639673 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.71:27590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:17.732169 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.17:23226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:17.732795 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.17:23226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:18.631194 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.59:20496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:18.631822 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.59:20496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:18.637439 2026] [security2:error] [pid 3045901:tid 3045901] [client 8.216.42.7:28069] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszcidYpILzvmFRebjAsQAAAA0"]
[Thu Jul 30 12:20:18.637509 2026] [security2:error] [pid 3045901:tid 3045901] [client 8.216.42.7:28069] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszcidYpILzvmFRebjAsQAAAA0"]
[Thu Jul 30 12:20:18.637727 2026] [security2:error] [pid 3045901:tid 3045901] [client 8.216.42.7:28069] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszcidYpILzvmFRebjAsQAAAA0"]
[Thu Jul 30 12:20:18.660992 2026] [security2:error] [pid 3047191:tid 3047191] [client 74.7.242.35:44426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "woodsandgreen.rediscoveredgarden.co.uk"] [uri "/"] [unique_id "amszcm2ugff398NEq9V2TQAAADg"]
[Thu Jul 30 12:20:18.680656 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.31:52884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:18.681302 2026] [authz_core:error] [pid 3041286:tid 3041286] [client 57.141.0.31:52884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:18.719883 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.44:42758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:18.720550 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.44:42758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:18.870572 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.22:38572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:18.871241 2026] [authz_core:error] [pid 3041179:tid 3041179] [client 57.141.0.22:38572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:19.274052 2026] [core:error] [pid 3039689:tid 3039689] [client 57.141.0.2:43118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:19.274096 2026] [core:error] [pid 3039689:tid 3039689] [client 57.141.0.2:43118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:19.415155 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.17:23228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:19.415774 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.17:23228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:19.885169 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.33:59650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:19.885792 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.33:59650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:20.209923 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.42:35998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:20.210557 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.42:35998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:20.537390 2026] [ssl:error] [pid 3045901:tid 3045901] (EAI 2)Name or service not known: [client 144.76.19.72:18832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:20.537426 2026] [ssl:error] [pid 3045901:tid 3045901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:20.565799 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.33:59656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:20.566422 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.33:59656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:20.590466 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:18842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:20.590488 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:21.076732 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.71:27606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:21.077482 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.71:27606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:21.080007 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.60:52806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:21.080645 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.60:52806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:21.324180 2026] [access_compat:error] [pid 3045901:tid 3045901] [client 176.241.66.87:39039] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:21.511693 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.46:20712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:21.512316 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.46:20712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:21.533077 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.34:58078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:21.533699 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.34:58078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:21.797621 2026] [access_compat:error] [pid 3046005:tid 3046005] [client 157.20.138.62:49913] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:22.427014 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.56:61016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:22.427648 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.56:61016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:22.440046 2026] [access_compat:error] [pid 3047039:tid 3047039] [client 199.45.154.139:56930] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/
[Thu Jul 30 12:20:22.440190 2026] [access_compat:error] [pid 3047039:tid 3047039] [client 199.45.154.139:56930] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 12:20:22.635624 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.44:37066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:22.636262 2026] [authz_core:error] [pid 3041284:tid 3041284] [client 57.141.0.44:37066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:23.443805 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.60:48998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:23.444431 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.60:48998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:23.648580 2026] [ssl:error] [pid 3046007:tid 3046007] (EAI 2)Name or service not known: [client 144.76.19.72:18852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:23.648616 2026] [ssl:error] [pid 3046007:tid 3046007] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:23.705025 2026] [ssl:error] [pid 3047039:tid 3047039] (EAI 2)Name or service not known: [client 144.76.19.72:18862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:23.705076 2026] [ssl:error] [pid 3047039:tid 3047039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:23.785655 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.48:35508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:23.786299 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.48:35508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:23.934727 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.34:58094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:23.935354 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.34:58094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:24.315297 2026] [authz_core:error] [pid 3047038:tid 3047038] [client 57.141.0.39:51570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:24.315915 2026] [authz_core:error] [pid 3047038:tid 3047038] [client 57.141.0.39:51570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:24.334139 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.42:36636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:24.334757 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.42:36636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:24.896790 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.41:21234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:24.897423 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.41:21234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:25.002409 2026] [authz_core:error] [pid 3047197:tid 3047197] [client 57.141.0.24:21628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:25.003034 2026] [authz_core:error] [pid 3047197:tid 3047197] [client 57.141.0.24:21628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:25.609013 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.45:34172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:25.609664 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.45:34172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:25.708205 2026] [autoindex:error] [pid 3034671:tid 3034671] [client 4.223.67.9:55362] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:20:25.967777 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.71:58064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:25.968408 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.71:58064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:26.385417 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.8:54430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:26.386034 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.8:54430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:26.712396 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.27:53068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:26.713045 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.27:53068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:26.750665 2026] [access_compat:error] [pid 3047191:tid 3047191] [client 125.176.202.122:65020] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:26.820280 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.24:21634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:26.820904 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.24:21634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:26.835791 2026] [ssl:error] [pid 3039529:tid 3039529] (EAI 2)Name or service not known: [client 144.76.19.72:18876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:26.835819 2026] [ssl:error] [pid 3039529:tid 3039529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:26.891702 2026] [ssl:error] [pid 3047199:tid 3047199] (EAI 2)Name or service not known: [client 144.76.19.72:18880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:26.891730 2026] [ssl:error] [pid 3047199:tid 3047199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:26.929598 2026] [access_compat:error] [pid 3043526:tid 3043526] [client 176.241.66.87:56000] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:26.962633 2026] [security2:error] [pid 3044276:tid 3044276] [client 43.159.136.201:43728] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.plastic-sheeting.org"] [uri "/"] [unique_id "amszesmyJyqm5J4zVpv7qQAAAAQ"]
[Thu Jul 30 12:20:27.053342 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.16:64636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:27.053969 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.16:64636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:27.381672 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.68:51574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:27.382359 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.68:51574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:28.293420 2026] [authz_core:error] [pid 3047117:tid 3047117] [client 57.141.0.5:24174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:28.294084 2026] [authz_core:error] [pid 3047117:tid 3047117] [client 57.141.0.5:24174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:28.414868 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.12:30514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:28.415602 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.12:30514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:28.582165 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.30:49546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:28.582818 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.30:49546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:29.323401 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.22:27476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:29.324023 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.22:27476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:29.835050 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.71:58072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:29.835691 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.71:58072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:29.886453 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.65:48932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:29.887111 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.65:48932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:29.956618 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:28058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:29.956642 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:30.009494 2026] [ssl:error] [pid 3046007:tid 3046007] (EAI 2)Name or service not known: [client 144.76.19.72:28064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:30.009558 2026] [ssl:error] [pid 3046007:tid 3046007] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:30.177026 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.28:53774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:30.177660 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.28:53774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:30.185015 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.6:23896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:30.185757 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.6:23896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:30.398042 2026] [security2:error] [pid 3047122:tid 3047122] [client 114.119.146.111:46591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~17,19/request_format~html"] [unique_id "amszfv4tP-f_yLu4OTYrMwAAADY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578182400/cat_ids~17/request_format~html
[Thu Jul 30 12:20:30.856034 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.25:45976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:30.856698 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.25:45976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:31.276894 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.16:27190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:31.277821 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.16:27190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:31.777694 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.11:21324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:31.778323 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.11:21324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:31.852566 2026] [access_compat:error] [pid 3046005:tid 3046005] [client 176.241.66.87:39739] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:31.855485 2026] [security2:error] [pid 3043526:tid 3043526] [client 114.119.146.111:46605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~17,19/request_format~html"] [unique_id "amszf5uACfPBNcxAhJOMEQAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578182400/cat_ids~17/request_format~html
[Thu Jul 30 12:20:32.129483 2026] [autoindex:error] [pid 3034671:tid 3034671] [client 4.223.67.9:55362] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:20:32.324472 2026] [access_compat:error] [pid 3042647:tid 3042647] [client 157.20.138.62:50512] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:32.497295 2026] [core:error] [pid 3038615:tid 3038615] [client 66.249.66.167:59809] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:32.497325 2026] [core:error] [pid 3038615:tid 3038615] [client 66.249.66.167:59809] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:32.554441 2026] [core:error] [pid 3009642:tid 3009642] [client 57.141.0.15:22262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:32.554464 2026] [core:error] [pid 3009642:tid 3009642] [client 57.141.0.15:22262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:32.762745 2026] [autoindex:error] [pid 3034671:tid 3034671] [client 4.223.67.9:55362] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 12:20:32.967742 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.15:22276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:32.968405 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.15:22276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:33.064818 2026] [ssl:error] [pid 3034567:tid 3034567] (EAI 2)Name or service not known: [client 144.76.19.72:28066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:33.064866 2026] [ssl:error] [pid 3034567:tid 3034567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:33.118155 2026] [ssl:error] [pid 3039628:tid 3039628] (EAI 2)Name or service not known: [client 144.76.19.72:28082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:33.118215 2026] [ssl:error] [pid 3039628:tid 3039628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:33.158353 2026] [authz_core:error] [pid 3047197:tid 3047197] [client 57.141.0.67:60604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:33.159037 2026] [authz_core:error] [pid 3047197:tid 3047197] [client 57.141.0.67:60604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:33.385904 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.62:22742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:33.386608 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.62:22742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:33.589231 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.40:39472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:33.589876 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.40:39472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:33.924916 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.37:52302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:33.925800 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.37:52302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:34.611858 2026] [authz_core:error] [pid 3043298:tid 3043298] [client 57.141.0.5:24178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:34.612510 2026] [authz_core:error] [pid 3043298:tid 3043298] [client 57.141.0.5:24178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:34.702727 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.28:43158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:34.703358 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.28:43158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:34.789388 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.12:35816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:34.790023 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.12:35816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:34.871180 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 66.249.66.33:54913] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:20:34.874114 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 66.249.66.33:54913] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:20:34.997192 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.9:46828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:34.997826 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.9:46828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:35.740411 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.26:22800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:35.741181 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.26:22800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:35.862959 2026] [authz_core:error] [pid 3047117:tid 3047117] [client 57.141.0.60:65266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:35.863586 2026] [authz_core:error] [pid 3047117:tid 3047117] [client 57.141.0.60:65266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:36.050649 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.43:49114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:36.051276 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.43:49114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:36.176010 2026] [ssl:error] [pid 3043298:tid 3043298] (EAI 2)Name or service not known: [client 144.76.19.72:28090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:36.176045 2026] [ssl:error] [pid 3043298:tid 3043298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:36.232487 2026] [ssl:error] [pid 3038043:tid 3038043] (EAI 2)Name or service not known: [client 144.76.19.72:28100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:36.232530 2026] [ssl:error] [pid 3038043:tid 3038043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:36.330985 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.59:61432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:36.331648 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.59:61432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:36.816967 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.7:24352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:36.817640 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.7:24352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:37.214254 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.69:37232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:37.214989 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.69:37232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:37.637490 2026] [access_compat:error] [pid 3041289:tid 3041289] [client 176.241.66.87:40027] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:38.056826 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.68:45486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:38.057452 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.68:45486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:38.086744 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.42:64938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:38.087423 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.42:64938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:38.320889 2026] [access_compat:error] [pid 3047122:tid 3047122] [client 125.176.202.122:65253] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:38.495166 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.67:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:38.495788 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.67:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:39.145376 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.61:63000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:39.146026 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.61:63000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:39.297301 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.20:63496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:39.297943 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.20:63496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:39.317491 2026] [ssl:error] [pid 3047192:tid 3047192] (EAI 2)Name or service not known: [client 144.76.19.72:28102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:39.317546 2026] [ssl:error] [pid 3047192:tid 3047192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:39.389421 2026] [ssl:error] [pid 3023932:tid 3023932] (EAI 2)Name or service not known: [client 144.76.19.72:28112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:39.389465 2026] [ssl:error] [pid 3023932:tid 3023932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:39.859254 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.27:53994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:39.859881 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.27:53994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:39.894567 2026] [ssl:error] [pid 3038495:tid 3038495] (70014)End of file found: [client 216.73.216.199:53055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:20:39.958746 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.48:25452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:39.959371 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.48:25452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:40.629458 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.65:38340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:40.630196 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.65:38340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:40.896217 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.54:50980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:40.896837 2026] [authz_core:error] [pid 3039484:tid 3039484] [client 57.141.0.54:50980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:41.115354 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.36:35290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:41.116005 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.36:35290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:41.419930 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.11:28006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:41.420576 2026] [authz_core:error] [pid 3028231:tid 3028231] [client 57.141.0.11:28006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:42.099328 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.3:62240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:42.099951 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.3:62240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:42.293735 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.32:42904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:42.294428 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.32:42904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:42.306208 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.70:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:42.306876 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.70:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:42.370205 2026] [access_compat:error] [pid 3036117:tid 3036117] [client 176.241.66.87:57403] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:42.444196 2026] [ssl:error] [pid 3036162:tid 3036162] (EAI 2)Name or service not known: [client 144.76.19.72:45586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:42.444223 2026] [ssl:error] [pid 3036162:tid 3036162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:42.496712 2026] [ssl:error] [pid 3028231:tid 3028231] (EAI 2)Name or service not known: [client 144.76.19.72:45602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:42.496756 2026] [ssl:error] [pid 3028231:tid 3028231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:42.910646 2026] [access_compat:error] [pid 3047117:tid 3047117] [client 157.20.138.62:51106] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:43.189434 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.14:26010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:43.190089 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.14:26010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:43.207239 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.45:32120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:43.207874 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.45:32120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:43.836328 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.67:34368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:43.837013 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.67:34368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:44.110971 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.35:51678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:44.111844 2026] [authz_core:error] [pid 3047199:tid 3047199] [client 57.141.0.35:51678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:44.389354 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.7:24366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:44.389979 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.7:24366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:44.674881 2026] [security2:error] [pid 3046007:tid 3046007] [client 20.171.55.167:1685] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.hbsanorth.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amszjEF3vKrgrvvU1rbYIQAAABY"]
[Thu Jul 30 12:20:44.675108 2026] [security2:error] [pid 3046007:tid 3046007] [client 20.171.55.167:1685] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.hbsanorth.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amszjEF3vKrgrvvU1rbYIQAAABY"]
[Thu Jul 30 12:20:44.706792 2026] [security2:error] [pid 3046007:tid 3046007] [client 20.171.55.167:1685] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.hbsanorth.co.uk"] [uri "/403.shtml"] [unique_id "amszjEF3vKrgrvvU1rbYIQAAABY"]
[Thu Jul 30 12:20:44.766495 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.47:43670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:44.767158 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.47:43670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:45.491524 2026] [authz_core:error] [pid 3046007:tid 3046007] [client 57.141.0.49:35406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:45.492161 2026] [authz_core:error] [pid 3046007:tid 3046007] [client 57.141.0.49:35406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:45.525587 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.3:62262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:45.526232 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.3:62262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:45.552093 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.17:54916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:45.552740 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.17:54916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:45.591775 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:45608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:45.591804 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:45.646139 2026] [ssl:error] [pid 3043298:tid 3043298] (EAI 2)Name or service not known: [client 144.76.19.72:45610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:45.646166 2026] [ssl:error] [pid 3043298:tid 3043298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:45.711636 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.44:55864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:45.712282 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.44:55864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:45.766594 2026] [ssl:error] [pid 3041031:tid 3041031] (70014)End of file found: [client 216.73.216.199:30275] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:20:46.753083 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.66:27762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:46.753701 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.66:27762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:46.772889 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.56:46748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:46.773544 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.56:46748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:47.307674 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.21:44814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:47.308312 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.21:44814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:47.431575 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.2:43928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:47.432203 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.2:43928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:47.598623 2026] [security2:error] [pid 3041287:tid 3041287] [client 162.62.213.187:53582] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.acthoroughbreds.com"] [uri "/"] [unique_id "amszj5L5L7z-aRDed2XIowAAAC4"]
[Thu Jul 30 12:20:47.599228 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 162.62.213.187:53582] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 12:20:47.599266 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 162.62.213.187:53582] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 12:20:48.114572 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.18:31824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:48.115204 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.18:31824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:48.703880 2026] [ssl:error] [pid 3041180:tid 3041180] (EAI 2)Name or service not known: [client 144.76.19.72:45622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:48.703905 2026] [ssl:error] [pid 3041180:tid 3041180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:48.759852 2026] [ssl:error] [pid 3041094:tid 3041094] (EAI 2)Name or service not known: [client 144.76.19.72:45626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:48.759877 2026] [ssl:error] [pid 3041094:tid 3041094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:49.067167 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.49:60130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:49.067802 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.49:60130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:49.115176 2026] [core:error] [pid 3041181:tid 3041181] [client 66.249.66.4:37924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:49.115218 2026] [core:error] [pid 3041181:tid 3041181] [client 66.249.66.4:37924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:49.117271 2026] [core:error] [pid 3044598:tid 3044598] [client 66.249.66.40:37358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:49.117299 2026] [core:error] [pid 3044598:tid 3044598] [client 66.249.66.40:37358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:49.520644 2026] [access_compat:error] [pid 3041180:tid 3041180] [client 125.176.202.122:65492] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:49.557871 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.26:59482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:49.558505 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.26:59482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:49.774861 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.71:29762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:49.775515 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.71:29762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:49.861295 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.15:36470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:49.861931 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.15:36470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:49.912689 2026] [ssl:error] [pid 3038495:tid 3038495] (70014)End of file found: [client 216.73.216.199:26240] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:20:50.637764 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.31:50590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:50.638401 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.31:50590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:50.725002 2026] [core:error] [pid 3047359:tid 3047359] [client 66.249.64.170:56810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:50.725028 2026] [core:error] [pid 3047359:tid 3047359] [client 66.249.64.170:56810] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:50.824271 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.2:43932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:50.824899 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.2:43932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:50.956593 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.63:58672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:50.957239 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.63:58672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:50.977366 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.14:20670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:50.977994 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.14:20670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:51.297560 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.25:59096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:51.298186 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.25:59096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:51.364308 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.23:48812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:51.364932 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.23:48812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:51.572958 2026] [core:error] [pid 3041094:tid 3041094] [client 57.141.0.53:30948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:51.572988 2026] [core:error] [pid 3041094:tid 3041094] [client 57.141.0.53:30948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:51.814174 2026] [ssl:error] [pid 3038043:tid 3038043] (EAI 2)Name or service not known: [client 144.76.19.72:44190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:51.814217 2026] [ssl:error] [pid 3038043:tid 3038043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:51.869952 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:44198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:51.869980 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:51.977988 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.6:25564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:51.978616 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.6:25564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:52.637980 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.23:48828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:52.638656 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.23:48828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:52.897183 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.21:44822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:52.897809 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.21:44822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:52.910798 2026] [access_compat:error] [pid 3030608:tid 3030608] [client 176.241.66.87:57944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:53.195694 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.65:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:53.196330 2026] [authz_core:error] [pid 3041094:tid 3041094] [client 57.141.0.65:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:53.314249 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.47:25000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:53.314897 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.47:25000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:53.387169 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.68:26336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:53.387807 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.68:26336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:53.462771 2026] [access_compat:error] [pid 3048778:tid 3048778] [client 157.20.138.62:51700] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:53.817234 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 100.58.93.56:35912] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/11/markking.jpg
[Thu Jul 30 12:20:53.817354 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 100.58.93.56:35912] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:20:54.081348 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.27:42816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:54.081979 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.27:42816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:54.236409 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.44:30440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:54.237056 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.44:30440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:54.417790 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.25:59102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:54.418434 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.25:59102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:54.923834 2026] [ssl:error] [pid 3042647:tid 3042647] (EAI 2)Name or service not known: [client 144.76.19.72:44210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:54.923859 2026] [ssl:error] [pid 3042647:tid 3042647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:54.979588 2026] [ssl:error] [pid 3046007:tid 3046007] (EAI 2)Name or service not known: [client 144.76.19.72:44222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:54.979635 2026] [ssl:error] [pid 3046007:tid 3046007] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:55.008396 2026] [core:error] [pid 3047191:tid 3047191] [client 57.141.0.13:31646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:55.008432 2026] [core:error] [pid 3047191:tid 3047191] [client 57.141.0.13:31646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:55.414299 2026] [core:error] [pid 3036117:tid 3036117] [client 66.249.66.67:62930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:55.414323 2026] [core:error] [pid 3036117:tid 3036117] [client 66.249.66.67:62930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:20:55.519254 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.15:62150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:55.519879 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.15:62150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:55.665394 2026] [ssl:error] [pid 3036162:tid 3036162] (70014)End of file found: [client 216.73.216.199:52729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:20:56.146300 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.41:22602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:56.146920 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.41:22602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:56.494526 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.40:20288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:56.495152 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.40:20288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:56.845835 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.45:33066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:56.846464 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.45:33066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:57.052301 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.60:35890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:57.052987 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.60:35890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:57.144202 2026] [authz_core:error] [pid 3047197:tid 3047197] [client 57.141.0.34:61360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:57.144832 2026] [authz_core:error] [pid 3047197:tid 3047197] [client 57.141.0.34:61360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:57.504234 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.31:34876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:57.504855 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.31:34876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:57.618318 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.30:44696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:57.618935 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.30:44696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:57.774598 2026] [core:error] [pid 3047117:tid 3047117] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/irq
[Thu Jul 30 12:20:57.788942 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.14:41562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:57.789586 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.14:41562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:58.033004 2026] [ssl:error] [pid 3047200:tid 3047200] (EAI 2)Name or service not known: [client 144.76.19.72:44234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:58.033045 2026] [ssl:error] [pid 3047200:tid 3047200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:58.085200 2026] [ssl:error] [pid 3047120:tid 3047120] (EAI 2)Name or service not known: [client 144.76.19.72:44238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:20:58.085263 2026] [ssl:error] [pid 3047120:tid 3047120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:20:58.504046 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.42:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:58.504681 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.42:33778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:58.699378 2026] [access_compat:error] [pid 3043526:tid 3043526] [client 176.241.66.87:41375] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:20:58.856177 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.26:33356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:58.856877 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.26:33356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:59.250545 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.45:33068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:59.251178 2026] [authz_core:error] [pid 3047120:tid 3047120] [client 57.141.0.45:33068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:59.800936 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.21:58910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:20:59.801577 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.21:58910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:20:59.927514 2026] [access_compat:error] [pid 3044276:tid 3044276] [client 125.176.202.122:49346] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:00.018404 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.67:33942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:00.019032 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.67:33942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:00.648846 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.65:22194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:00.649470 2026] [authz_core:error] [pid 3046102:tid 3046102] [client 57.141.0.65:22194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:01.144724 2026] [ssl:error] [pid 3047120:tid 3047120] (EAI 2)Name or service not known: [client 144.76.19.72:29320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:01.144757 2026] [ssl:error] [pid 3047120:tid 3047120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:01.157618 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.29:56472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:01.158246 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.29:56472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:01.201560 2026] [ssl:error] [pid 3048774:tid 3048774] (EAI 2)Name or service not known: [client 144.76.19.72:29336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:01.201598 2026] [ssl:error] [pid 3048774:tid 3048774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:01.694656 2026] [core:error] [pid 3047117:tid 3047117] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/iommu_iova/remote_node_defrag_ratio
[Thu Jul 30 12:21:02.164447 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.33:27220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:02.165142 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.33:27220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:02.193807 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.51:62874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:02.194443 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.51:62874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:02.367835 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.4:52430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:02.368463 2026] [authz_core:error] [pid 3038615:tid 3038615] [client 57.141.0.4:52430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:02.616238 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.60:24454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:02.616864 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.60:24454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:02.749968 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.22:34076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:02.750601 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.22:34076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:03.402577 2026] [access_compat:error] [pid 3046102:tid 3046102] [client 176.241.66.87:41743] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:03.629326 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.40:35478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:03.629975 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.40:35478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:03.641117 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.27:22880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:03.641737 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.27:22880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:03.802061 2026] [core:error] [pid 3047117:tid 3047117] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/devices/cpu/rdpmc
[Thu Jul 30 12:21:03.991272 2026] [security2:error] [pid 3043526:tid 3043526] [client 85.208.96.197:32970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/what-animals-live-in-palm-trees-in-florida"] [unique_id "amszn5uACfPBNcxAhJOMJwAAAAc"]
[Thu Jul 30 12:21:04.016883 2026] [access_compat:error] [pid 3047039:tid 3047039] [client 157.20.138.62:52295] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:04.192860 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.29:56488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:04.193511 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.29:56488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:04.203524 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.44:29262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:04.204214 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.44:29262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:04.263588 2026] [ssl:error] [pid 3046103:tid 3046103] (EAI 2)Name or service not known: [client 144.76.19.72:29350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:04.263628 2026] [ssl:error] [pid 3046103:tid 3046103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:04.315956 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.24:21976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:04.316659 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.24:21976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:04.320118 2026] [ssl:error] [pid 3041181:tid 3041181] (EAI 2)Name or service not known: [client 144.76.19.72:29356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:04.320157 2026] [ssl:error] [pid 3041181:tid 3041181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:04.416622 2026] [ssl:error] [pid 3047200:tid 3047200] (70014)End of file found: [client 216.73.216.199:59463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:04.577400 2026] [security2:error] [pid 3034671:tid 3034671] [client 94.154.43.187:41830] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amszoFwB1zEP3QIromHT2wAAADU"]
[Thu Jul 30 12:21:04.577665 2026] [security2:error] [pid 3034671:tid 3034671] [client 94.154.43.187:41830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amszoFwB1zEP3QIromHT2wAAADU"]
[Thu Jul 30 12:21:04.577812 2026] [security2:error] [pid 3034671:tid 3034671] [client 94.154.43.187:41830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amszoFwB1zEP3QIromHT2wAAADU"]
[Thu Jul 30 12:21:04.882111 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.63:32488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:04.882766 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.63:32488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:04.896117 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.2:33374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:04.896796 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.2:33374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:05.616040 2026] [core:error] [pid 3047117:tid 3047117] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/objs_per_slab
[Thu Jul 30 12:21:06.753970 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.61:34822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:06.754604 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.61:34822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:06.900653 2026] [security2:error] [pid 3041181:tid 3041181] [client 197.42.14.151:48705] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszon1MVEuH81SyHGe2tAAAACc"]
[Thu Jul 30 12:21:06.900703 2026] [security2:error] [pid 3041181:tid 3041181] [client 197.42.14.151:48705] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszon1MVEuH81SyHGe2tAAAACc"]
[Thu Jul 30 12:21:06.900984 2026] [security2:error] [pid 3041181:tid 3041181] [client 197.42.14.151:48705] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszon1MVEuH81SyHGe2tAAAACc"]
[Thu Jul 30 12:21:07.097684 2026] [access_compat:error] [pid 3042647:tid 3042647] [client 125.176.202.122:49435] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:07.165101 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.38:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:07.165721 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.38:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:07.278286 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.7:33302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:07.278922 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.7:33302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:07.384320 2026] [ssl:error] [pid 3047197:tid 3047197] (EAI 2)Name or service not known: [client 144.76.19.72:29364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:07.384357 2026] [ssl:error] [pid 3047197:tid 3047197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:07.439546 2026] [ssl:error] [pid 3048778:tid 3048778] (EAI 2)Name or service not known: [client 144.76.19.72:29380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:07.439583 2026] [ssl:error] [pid 3048778:tid 3048778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:07.844170 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.51:27488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:07.844792 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.51:27488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:07.908831 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.68:58658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:07.909523 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.68:58658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:08.014765 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.48:27330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:08.015394 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.48:27330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:08.327240 2026] [core:error] [pid 3047117:tid 3047117] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 12:21:08.465710 2026] [authz_core:error] [pid 3050763:tid 3050763] [client 57.141.0.33:27236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:08.466361 2026] [authz_core:error] [pid 3050763:tid 3050763] [client 57.141.0.33:27236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:08.627578 2026] [core:error] [pid 3047117:tid 3047117] (13)Permission denied: [client 216.73.216.199:65502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/sanity_checks
[Thu Jul 30 12:21:08.697183 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.19:30100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:08.697801 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.19:30100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:08.928636 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.8:37452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:08.929255 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.8:37452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:09.148581 2026] [access_compat:error] [pid 3047196:tid 3047196] [client 176.241.66.87:42040] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:09.662396 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.10:60886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:09.663129 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.10:60886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:09.893590 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.20:61292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:09.894207 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.20:61292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:10.338060 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.12:39924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:10.338693 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.12:39924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:10.509189 2026] [ssl:error] [pid 3047196:tid 3047196] (EAI 2)Name or service not known: [client 144.76.19.72:57362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:10.509241 2026] [ssl:error] [pid 3047196:tid 3047196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:10.562648 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:57374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:10.562674 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:10.974771 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.6:45946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:10.975400 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.6:45946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:11.106637 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.26:47544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:11.107267 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.26:47544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:11.271368 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.63:65382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:11.271993 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.63:65382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:11.294801 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.16:57170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:11.295427 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.16:57170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:11.301994 2026] [access_compat:error] [pid 3038615:tid 3038615] [client 125.176.202.122:49577] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:11.600418 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.70:35968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:11.601032 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.70:35968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:11.638418 2026] [ssl:error] [pid 3047117:tid 3047117] (70014)End of file found: [client 216.73.216.199:65502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:11.922021 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.22:27258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:11.922679 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.22:27258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:12.279022 2026] [cgi:error] [pid 3036162:tid 3036162] [client 74.248.33.8:39286] AH02811: stderr from /home/aurorav/public_html/auroravation.com/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:21:12.282244 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.60:25348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:12.282856 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.60:25348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:13.186984 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.50:32726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:13.187629 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.50:32726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:13.288699 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.34:29396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:13.289327 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.34:29396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:13.448704 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.68:58674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:13.449334 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.68:58674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:13.616252 2026] [ssl:error] [pid 3033525:tid 3033525] (EAI 2)Name or service not known: [client 144.76.19.72:57380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:13.616276 2026] [ssl:error] [pid 3033525:tid 3033525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:13.672299 2026] [ssl:error] [pid 3034419:tid 3034419] (EAI 2)Name or service not known: [client 144.76.19.72:57392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:13.672328 2026] [ssl:error] [pid 3034419:tid 3034419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:13.749868 2026] [ssl:error] [pid 3039689:tid 3039689] (70014)End of file found: [client 216.73.216.199:39740] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:13.931626 2026] [access_compat:error] [pid 3025636:tid 3025636] [client 176.241.66.87:42447] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:13.975374 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.7:33316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:13.975998 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.7:33316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:14.306341 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.21:26528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:14.306966 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.21:26528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:14.502020 2026] [access_compat:error] [pid 3033525:tid 3033525] [client 157.20.138.62:52897] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:14.707487 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.16:57184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:14.708155 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.16:57184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:14.771954 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.53:50540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:14.772684 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.53:50540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:15.405854 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.10:60892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:15.406475 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.10:60892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:15.532021 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.52:46638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:15.532652 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.52:46638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:16.091488 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.1:54932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:16.092139 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.1:54932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:16.330363 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.27:63094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:16.330987 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.27:63094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:16.725091 2026] [ssl:error] [pid 3038495:tid 3038495] (EAI 2)Name or service not known: [client 144.76.19.72:57398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:16.725116 2026] [ssl:error] [pid 3038495:tid 3038495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:16.779454 2026] [ssl:error] [pid 3047359:tid 3047359] (EAI 2)Name or service not known: [client 144.76.19.72:57400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:16.779515 2026] [ssl:error] [pid 3047359:tid 3047359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:16.866813 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.56:49302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:16.867457 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.56:49302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:16.943748 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.19:22832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:16.944383 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.19:22832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:17.067148 2026] [core:error] [pid 3042647:tid 3042647] (13)Permission denied: [client 216.73.216.199:52629] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dio/free_calls
[Thu Jul 30 12:21:17.076676 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.24:28488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:17.077357 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.24:28488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:17.724671 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.59:21620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:17.725298 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.59:21620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:18.091922 2026] [access_compat:error] [pid 3048651:tid 3048651] [client 125.176.202.122:49678] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:18.285998 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.65:38170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:18.286623 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.65:38170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:18.519245 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.65:38174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:18.519879 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.65:38174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:18.520590 2026] [core:error] [pid 3038495:tid 3038495] [client 66.249.66.195:49535] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:18.520610 2026] [core:error] [pid 3038495:tid 3038495] [client 66.249.66.195:49535] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:18.651907 2026] [access_compat:error] [pid 3047359:tid 3047359] [client 45.158.164.139:38606] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:21:18.792680 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.40:23238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:18.793329 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.40:23238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:18.946584 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.50:32730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:18.947226 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.50:32730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:19.023481 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.61:35346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:19.024113 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.61:35346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:19.284232 2026] [security2:error] [pid 3038494:tid 3038494] [client 85.208.98.23:26192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amszr48hqBe_lkB9YdTyEgAAAAk"]
[Thu Jul 30 12:21:19.617855 2026] [autoindex:error] [pid 3042647:tid 3042647] (13)Permission denied: [client 216.73.216.199:52629] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/freeprin/
[Thu Jul 30 12:21:19.663086 2026] [access_compat:error] [pid 3039529:tid 3039529] [client 44.212.25.160:45764] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/09/the-expendables.jpg
[Thu Jul 30 12:21:19.663198 2026] [access_compat:error] [pid 3039529:tid 3039529] [client 44.212.25.160:45764] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:21:19.837238 2026] [ssl:error] [pid 3047359:tid 3047359] (EAI 2)Name or service not known: [client 144.76.19.72:57350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:19.837269 2026] [ssl:error] [pid 3047359:tid 3047359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:19.889993 2026] [ssl:error] [pid 3048777:tid 3048777] (EAI 2)Name or service not known: [client 144.76.19.72:57352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:19.890024 2026] [ssl:error] [pid 3048777:tid 3048777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:19.992103 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.34:34874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:19.992719 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.34:34874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:20.074300 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.71:23834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:20.074916 2026] [authz_core:error] [pid 3033525:tid 3033525] [client 57.141.0.71:23834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:20.761353 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.34:34882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:20.761976 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.34:34882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:20.814113 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.5:37734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:20.814734 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.5:37734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:21.121349 2026] [ssl:error] [pid 3042647:tid 3042647] (70014)End of file found: [client 216.73.216.199:52629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:21.189638 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.30:50270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:21.190281 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.30:50270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:21.284030 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.27:50714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:21.284663 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.27:50714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:21.523265 2026] [security2:error] [pid 3039689:tid 3039689] [client 85.208.98.29:35792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nba-takas-2021-k.html"] [unique_id "amszsdhWlT8hjoog2r1_oAAAABs"]
[Thu Jul 30 12:21:21.634908 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.52:36968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:21.635625 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.52:36968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:21.752962 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.34:34892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:21.753593 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.34:34892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:21.951723 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.1:29498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:21.952365 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.1:29498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:22.924962 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.51:33204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:22.925602 2026] [authz_core:error] [pid 3047359:tid 3047359] [client 57.141.0.51:33204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:22.946669 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:57368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:22.946692 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:22.999544 2026] [ssl:error] [pid 3048651:tid 3048651] (EAI 2)Name or service not known: [client 144.76.19.72:57376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:22.999582 2026] [ssl:error] [pid 3048651:tid 3048651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:23.075629 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.58:49922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:23.076253 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.58:49922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:23.183794 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.11:59026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:23.184422 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.11:59026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:23.231727 2026] [ssl:error] [pid 3038043:tid 3038043] (70014)End of file found: [client 216.73.216.199:12611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:23.479569 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.66:63256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:23.480192 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.66:63256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:23.548443 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.30:52628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:23.549077 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.30:52628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:23.565998 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.42:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:23.566653 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.42:44974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:23.739038 2026] [access_compat:error] [pid 3009642:tid 3009642] [client 125.176.202.122:49832] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:24.467427 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 176.241.66.87:43124] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:24.587348 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.27:50736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:24.587967 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.27:50736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:24.720419 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.41:28332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:24.721077 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.41:28332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:24.876110 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.39:57288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:24.876730 2026] [authz_core:error] [pid 3034567:tid 3034567] [client 57.141.0.39:57288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:24.904955 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.19:48856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:24.905591 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.19:48856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:25.069024 2026] [access_compat:error] [pid 3046103:tid 3046103] [client 157.20.138.62:53488] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:25.735461 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.60:20032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:25.736131 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.60:20032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:26.054940 2026] [ssl:error] [pid 3038615:tid 3038615] (EAI 2)Name or service not known: [client 144.76.19.72:57382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:26.054973 2026] [ssl:error] [pid 3038615:tid 3038615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:26.107799 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.46:33594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:26.108451 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.46:33594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:26.109691 2026] [ssl:error] [pid 3048702:tid 3048702] (EAI 2)Name or service not known: [client 144.76.19.72:57384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:26.109727 2026] [ssl:error] [pid 3048702:tid 3048702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:26.307459 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.19:48858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:26.308148 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.19:48858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:26.738630 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.66:63262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:26.739281 2026] [authz_core:error] [pid 3025636:tid 3025636] [client 57.141.0.66:63262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:26.741757 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.14:57320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:26.742385 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.14:57320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:27.094261 2026] [core:error] [pid 3043526:tid 3043526] [client 66.249.66.167:50812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:27.094296 2026] [core:error] [pid 3043526:tid 3043526] [client 66.249.66.167:50812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:27.221394 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.56:64160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:27.222034 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.56:64160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:27.327320 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.45:50012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:27.327943 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.45:50012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:28.061712 2026] [ssl:error] [pid 3048774:tid 3048774] (70014)End of file found: [client 216.73.216.199:64012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:28.310976 2026] [authz_core:error] [pid 3052006:tid 3052006] [client 57.141.0.60:20042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:28.311750 2026] [authz_core:error] [pid 3052006:tid 3052006] [client 57.141.0.60:20042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:28.391961 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.59:36660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:28.392597 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.59:36660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:28.668965 2026] [core:error] [pid 3033631:tid 3033631] (13)Permission denied: [client 216.73.216.199:32999] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/free_calls
[Thu Jul 30 12:21:28.834403 2026] [security2:error] [pid 3052006:tid 3052006] [client 82.79.130.136:57684] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszuGHyvm13rlmjt2jwjgAAABE"]
[Thu Jul 30 12:21:28.834488 2026] [security2:error] [pid 3052006:tid 3052006] [client 82.79.130.136:57684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amszuGHyvm13rlmjt2jwjgAAABE"]
[Thu Jul 30 12:21:28.834822 2026] [security2:error] [pid 3052006:tid 3052006] [client 82.79.130.136:57684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amszuGHyvm13rlmjt2jwjgAAABE"]
[Thu Jul 30 12:21:28.842133 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.37:54014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:28.842839 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.37:54014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:29.016192 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.23:51938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:29.016838 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.23:51938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:29.194146 2026] [ssl:error] [pid 3038043:tid 3038043] (EAI 2)Name or service not known: [client 144.76.19.72:57402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:29.194177 2026] [ssl:error] [pid 3038043:tid 3038043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:29.250789 2026] [ssl:error] [pid 3052065:tid 3052065] (EAI 2)Name or service not known: [client 144.76.19.72:57414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:29.250831 2026] [ssl:error] [pid 3052065:tid 3052065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:29.502650 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.33:57296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:29.503276 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.33:57296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:29.646737 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 66.249.66.35:59957] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:21:29.649412 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 66.249.66.35:59957] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:21:29.707591 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.17:49542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:29.708215 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.17:49542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:29.927084 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.38:21848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:29.927707 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.38:21848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:30.231788 2026] [access_compat:error] [pid 3052064:tid 3052064] [client 176.241.66.87:43374] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:30.282186 2026] [access_compat:error] [pid 3051892:tid 3051892] [client 125.176.202.122:49963] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:30.400330 2026] [core:error] [pid 3034419:tid 3034419] [client 66.249.66.167:55039] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:30.400352 2026] [core:error] [pid 3034419:tid 3034419] [client 66.249.66.167:55039] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:30.540836 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.12:35880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:30.541455 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.12:35880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:30.885187 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.35:27270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:30.885809 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.35:27270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:31.471557 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.55:50818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:31.472182 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.55:50818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:31.592813 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.6:56554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:31.593463 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.6:56554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:31.732607 2026] [authz_core:error] [pid 3051892:tid 3051892] [client 57.141.0.14:57334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:31.733247 2026] [authz_core:error] [pid 3051892:tid 3051892] [client 57.141.0.14:57334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:31.790271 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.59:36666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:31.790902 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.59:36666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:32.273454 2026] [core:error] [pid 3033631:tid 3033631] (13)Permission denied: [client 216.73.216.199:32999] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS0/port
[Thu Jul 30 12:21:32.325387 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.61:39324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:32.326004 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.61:39324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:32.410428 2026] [security2:error] [pid 3048778:tid 3048778] [client 85.208.96.205:24780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5780.0.html"] [unique_id "amszvPskspug5Ztw1kRpyQAAACk"]
[Thu Jul 30 12:21:32.454940 2026] [ssl:error] [pid 3034671:tid 3034671] (EAI 2)Name or service not known: [client 144.76.19.72:30798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:32.454972 2026] [ssl:error] [pid 3034671:tid 3034671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:32.534994 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.31:42606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:32.535627 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.31:42606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:32.574950 2026] [ssl:error] [pid 3033631:tid 3033631] (70014)End of file found: [client 216.73.216.199:32999] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:32.585782 2026] [ssl:error] [pid 3052064:tid 3052064] (EAI 2)Name or service not known: [client 144.76.19.72:30814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:32.585835 2026] [ssl:error] [pid 3052064:tid 3052064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:33.177522 2026] [core:error] [pid 3052006:tid 3052006] (13)Permission denied: [client 216.73.216.199:48167] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty1/subsystem/ttyS0/closing_wait
[Thu Jul 30 12:21:33.245127 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.62:51310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:33.245750 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.62:51310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:33.257398 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.30:63506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:33.258367 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.30:63506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:33.851275 2026] [authz_core:error] [pid 3052197:tid 3052197] [client 57.141.0.6:31442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:33.852023 2026] [authz_core:error] [pid 3052197:tid 3052197] [client 57.141.0.6:31442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:33.928636 2026] [security2:error] [pid 3041289:tid 3041289] [client 93.174.93.12:60000] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "303"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/"] [unique_id "amszvbbhpFG_qPHCh-c2iQAAADE"]
[Thu Jul 30 12:21:34.501607 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.27:35976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:34.502772 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.27:35976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:34.707101 2026] [security2:error] [pid 3034419:tid 3034419] [client 43.159.138.217:56566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchell.org"] [uri "/"] [unique_id "amszvl_l6qLG74fuInyfIwAAAAU"]
[Thu Jul 30 12:21:34.871755 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.20:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:34.872379 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.20:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:34.905521 2026] [access_compat:error] [pid 3052064:tid 3052064] [client 125.176.202.122:50092] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:34.987702 2026] [access_compat:error] [pid 3052197:tid 3052197] [client 176.241.66.87:43779] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:35.102590 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.64:23352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:35.103224 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.64:23352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:35.202243 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.15:61942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:35.202883 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.15:61942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:35.289125 2026] [ssl:error] [pid 3052006:tid 3052006] (70014)End of file found: [client 216.73.216.199:48167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:35.586889 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.32:42768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:35.587547 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.32:42768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:35.598669 2026] [access_compat:error] [pid 3041289:tid 3041289] [client 157.20.138.62:54078] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:35.641217 2026] [ssl:error] [pid 3042693:tid 3042693] (EAI 2)Name or service not known: [client 144.76.19.72:30828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:35.641252 2026] [ssl:error] [pid 3042693:tid 3042693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:35.698760 2026] [ssl:error] [pid 3041181:tid 3041181] (EAI 2)Name or service not known: [client 144.76.19.72:30834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:35.698807 2026] [ssl:error] [pid 3041181:tid 3041181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:35.883146 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.32:42770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:35.883770 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.32:42770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:35.987305 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.1:49482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:35.987950 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.1:49482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:36.104299 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.45:50018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:36.104991 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.45:50018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:36.554915 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.51:43144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:36.555565 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.51:43144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:36.889268 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.29:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:36.889893 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.29:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:37.118044 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.64:23354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:37.118676 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.64:23354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:37.279231 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.41:50326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:37.279854 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.41:50326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:37.400885 2026] [core:error] [pid 3052198:tid 3052198] (13)Permission denied: [client 216.73.216.199:26989] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/usb/drivers/hub/bind
[Thu Jul 30 12:21:37.933305 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.34:56076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:37.933958 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.34:56076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:38.352138 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.69:26808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:38.352777 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.69:26808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:38.772169 2026] [ssl:error] [pid 3041181:tid 3041181] (EAI 2)Name or service not known: [client 144.76.19.72:30846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:38.772236 2026] [ssl:error] [pid 3041181:tid 3041181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:38.827259 2026] [ssl:error] [pid 3034419:tid 3034419] (EAI 2)Name or service not known: [client 144.76.19.72:30858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:38.827293 2026] [ssl:error] [pid 3034419:tid 3034419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:38.850894 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.30:63518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:38.851551 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.30:63518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:39.083899 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.7:42342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:39.084554 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.7:42342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:39.894886 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.45:20550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:39.895536 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.45:20550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:40.194628 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.17:44732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:40.195255 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.17:44732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:40.303302 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.29:29498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:40.303932 2026] [authz_core:error] [pid 3034419:tid 3034419] [client 57.141.0.29:29498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:40.362283 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.29:29502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:40.362903 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.29:29502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:40.769660 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.6:31452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:40.770284 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.6:31452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:41.330779 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.28:49390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:41.331418 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.28:49390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:41.532308 2026] [authz_core:error] [pid 3052128:tid 3052128] [client 57.141.0.26:51818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:41.532954 2026] [authz_core:error] [pid 3052128:tid 3052128] [client 57.141.0.26:51818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:41.606589 2026] [core:crit] [pid 3052197:tid 3052197] (13)Permission denied: [client 40.77.167.132:22346] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 12:21:41.689373 2026] [core:error] [pid 3047191:tid 3047191] [client 57.141.0.16:40852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:41.689411 2026] [core:error] [pid 3047191:tid 3047191] [client 57.141.0.16:40852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:21:41.882796 2026] [ssl:error] [pid 3041289:tid 3041289] (EAI 2)Name or service not known: [client 144.76.19.72:24066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:41.882837 2026] [ssl:error] [pid 3041289:tid 3041289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:41.936035 2026] [ssl:error] [pid 3044598:tid 3044598] (EAI 2)Name or service not known: [client 144.76.19.72:24074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:41.936080 2026] [ssl:error] [pid 3044598:tid 3044598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:42.057546 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.14:26476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:42.058163 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.14:26476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:42.530426 2026] [security2:error] [pid 3052198:tid 3052198] [client 216.73.216.199:26989] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_eth_z8e.dat"] [unique_id "amszxk0MlND_aGnfcOiW-gAAADk"]
[Thu Jul 30 12:21:42.530735 2026] [security2:error] [pid 3052198:tid 3052198] [client 216.73.216.199:26989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_eth_z8e.dat"] [unique_id "amszxk0MlND_aGnfcOiW-gAAADk"]
[Thu Jul 30 12:21:42.530952 2026] [security2:error] [pid 3052198:tid 3052198] [client 216.73.216.199:26989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/myri10ge_eth_z8e.dat"] [unique_id "amszxk0MlND_aGnfcOiW-gAAADk"]
[Thu Jul 30 12:21:42.573181 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.69:49104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:42.573831 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.69:49104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:43.233994 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.45:20562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:43.234639 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.45:20562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:43.239049 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.3:30722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:43.239678 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.3:30722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:43.679298 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.43:26340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:43.679949 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.43:26340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:43.744135 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.66:26936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:43.744775 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.66:26936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:43.778998 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.38:42084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:43.779632 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.38:42084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:43.842736 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.24:32868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:43.843348 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.24:32868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:43.918369 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.71:30554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:43.918991 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.71:30554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:44.991861 2026] [ssl:error] [pid 3047193:tid 3047193] (EAI 2)Name or service not known: [client 144.76.19.72:24104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:44.991913 2026] [ssl:error] [pid 3047193:tid 3047193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:45.094745 2026] [ssl:error] [pid 3047196:tid 3047196] (EAI 2)Name or service not known: [client 144.76.19.72:24114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:45.094784 2026] [ssl:error] [pid 3047196:tid 3047196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:45.348269 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.13:48616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:45.348908 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.13:48616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:45.387013 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.55:50252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:45.387652 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.55:50252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:45.485736 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.7:53620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:45.486408 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.7:53620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:45.522799 2026] [access_compat:error] [pid 3047193:tid 3047193] [client 176.241.66.87:44441] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:45.895213 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.7:53622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:45.895833 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.7:53622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:46.118818 2026] [access_compat:error] [pid 3044276:tid 3044276] [client 157.20.138.62:54667] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:46.123135 2026] [access_compat:error] [pid 3041180:tid 3041180] [client 125.176.202.122:50342] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:46.160438 2026] [ssl:error] [pid 3052198:tid 3052198] (70014)End of file found: [client 216.73.216.199:26989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:46.468656 2026] [ssl:error] [pid 3042693:tid 3042693] (70014)End of file found: [client 216.73.216.199:13644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:46.548022 2026] [authz_core:error] [pid 3051892:tid 3051892] [client 57.141.0.33:57502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:46.548688 2026] [authz_core:error] [pid 3051892:tid 3051892] [client 57.141.0.33:57502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:46.641155 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.50:49238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:46.641801 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.50:49238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:46.782257 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.40:33156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:46.782886 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.40:33156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:47.187046 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 66.249.66.33:51962] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:21:47.189715 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 66.249.66.33:51962] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:21:47.471216 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.25:22806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:47.471859 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.25:22806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:47.472587 2026] [security2:error] [pid 3047196:tid 3047196] [client 43.140.37.167:55408] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glasgowball.com"] [uri "/"] [unique_id "amszy2YMNjognqRCLJP8sQAAADw"]
[Thu Jul 30 12:21:47.807013 2026] [cgi:error] [pid 3047196:tid 3047196] [client 194.9.110.170:59958] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:21:48.154554 2026] [ssl:error] [pid 3039688:tid 3039688] (EAI 2)Name or service not known: [client 144.76.19.72:24124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:48.154590 2026] [ssl:error] [pid 3039688:tid 3039688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:48.207805 2026] [ssl:error] [pid 3036286:tid 3036286] (EAI 2)Name or service not known: [client 144.76.19.72:24130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:48.207838 2026] [ssl:error] [pid 3036286:tid 3036286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:48.412489 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.1:27456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:48.413311 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.1:27456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:48.431089 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.4:58814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:48.431712 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.4:58814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:48.484046 2026] [ssl:error] [pid 3047191:tid 3047191] (70014)End of file found: [client 216.73.216.199:9419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:48.768187 2026] [ssl:error] [pid 3052192:tid 3052192] (70014)End of file found: [client 216.73.216.199:9948] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:48.776918 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.65:65214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:48.777549 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.65:65214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:48.799883 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.26:57142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:48.800547 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.26:57142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:49.546260 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.65:65224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:49.546949 2026] [authz_core:error] [pid 3042647:tid 3042647] [client 57.141.0.65:65224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:49.628536 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.56:51970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:49.629168 2026] [authz_core:error] [pid 3034671:tid 3034671] [client 57.141.0.56:51970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:49.818477 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.68:22050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:49.819137 2026] [authz_core:error] [pid 3033631:tid 3033631] [client 57.141.0.68:22050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:49.889998 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.23:21038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:49.890667 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.23:21038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:50.196036 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.9:20402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:50.196676 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.9:20402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:50.697036 2026] [ssl:error] [pid 3036286:tid 3036286] (70014)End of file found: [client 216.73.216.199:1930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:51.089599 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.59:58828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:51.090230 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.59:58828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:51.188148 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.70:60688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:51.188774 2026] [authz_core:error] [pid 3048778:tid 3048778] [client 57.141.0.70:60688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:51.264094 2026] [ssl:error] [pid 3045651:tid 3045651] (EAI 2)Name or service not known: [client 144.76.19.72:42794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:51.264124 2026] [ssl:error] [pid 3045651:tid 3045651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:51.321349 2026] [ssl:error] [pid 3033631:tid 3033631] (EAI 2)Name or service not known: [client 144.76.19.72:42800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:51.321377 2026] [ssl:error] [pid 3033631:tid 3033631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:51.336464 2026] [security2:error] [pid 3041180:tid 3041180] [client 43.140.37.167:58512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020"] [unique_id "amszz4ykAHDpGAuYxDPkewAAACY"], referer: http://glasgowball.com
[Thu Jul 30 12:21:51.738914 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.15:42316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:51.739581 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 57.141.0.15:42316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:52.395664 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.43:48002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:52.396318 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.43:48002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:52.474475 2026] [security2:error] [pid 3048777:tid 3048777] [client 43.140.37.167:59484] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020/"] [unique_id "amsz0CqZ7A4Pyg_vVPCrRgAAACM"], referer: http://www.glasgowball.com/glaball/2020
[Thu Jul 30 12:21:52.870202 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.28:64926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:52.870835 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.28:64926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:52.928888 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.41:47550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:52.929516 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.41:47550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:53.182267 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.46:20878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:53.182937 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.46:20878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:53.228772 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.14:33402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:53.229415 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.14:33402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:53.587740 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.27:51782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:53.588390 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.27:51782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:53.807340 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.11:41908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:53.807990 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.11:41908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:54.164247 2026] [security2:error] [pid 3052192:tid 3052192] [client 170.106.181.163:49922] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "annawelshagent.com"] [uri "/"] [unique_id "amsz0n-B5dhIMhwfB8E1AwAAACw"]
[Thu Jul 30 12:21:54.354463 2026] [security2:error] [pid 3045651:tid 3045651] [client 114.119.146.111:22943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14/request_format~html"] [unique_id "amsz0pELMN-Knyk83OWxEwAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578182400/cat_ids~14/request_format~html
[Thu Jul 30 12:21:54.381291 2026] [ssl:error] [pid 3048777:tid 3048777] (EAI 2)Name or service not known: [client 144.76.19.72:42802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:54.381328 2026] [ssl:error] [pid 3048777:tid 3048777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:54.436267 2026] [ssl:error] [pid 3042693:tid 3042693] (EAI 2)Name or service not known: [client 144.76.19.72:42816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:54.436305 2026] [ssl:error] [pid 3042693:tid 3042693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:54.625210 2026] [ssl:error] [pid 3047191:tid 3047191] (70014)End of file found: [client 216.73.216.199:62115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:54.814362 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.42:28458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:54.815489 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.42:28458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:54.893370 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.28:64930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:54.894022 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.28:64930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:55.136637 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.28:64936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:55.137264 2026] [authz_core:error] [pid 3038495:tid 3038495] [client 57.141.0.28:64936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:55.233518 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.12:21952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:55.234144 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.12:21952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:55.309087 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.31:57538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:55.309742 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.31:57538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:55.527522 2026] [ssl:error] [pid 3052195:tid 3052195] (70014)End of file found: [client 216.73.216.199:9887] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:56.052687 2026] [access_compat:error] [pid 3038494:tid 3038494] [client 176.241.66.87:61468] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:56.098043 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.10:25896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:56.098698 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.10:25896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:56.102452 2026] [security2:error] [pid 3036286:tid 3036286] [client 114.119.146.111:22955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14/request_format~html"] [unique_id "amsz1PoPbCIL8xj3r8M6ygAAAEc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578182400/cat_ids~14/request_format~html
[Thu Jul 30 12:21:56.116773 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.35:56592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:56.117392 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.35:56592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:56.514526 2026] [access_compat:error] [pid 3052192:tid 3052192] [client 125.176.202.122:50574] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:56.620987 2026] [access_compat:error] [pid 3038043:tid 3038043] [client 157.20.138.62:55258] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:21:56.819674 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.62:25156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:56.820297 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.62:25156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:57.034030 2026] [ssl:error] [pid 3020912:tid 3020912] (70014)End of file found: [client 216.73.216.199:25665] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:21:57.377239 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.49:42474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:57.377887 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.49:42474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:57.469142 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.32:56624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:57.469779 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.32:56624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:57.491429 2026] [ssl:error] [pid 3041289:tid 3041289] (EAI 2)Name or service not known: [client 144.76.19.72:42830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:57.491469 2026] [ssl:error] [pid 3041289:tid 3041289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:57.542822 2026] [ssl:error] [pid 3047121:tid 3047121] (EAI 2)Name or service not known: [client 144.76.19.72:42838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:21:57.542858 2026] [ssl:error] [pid 3047121:tid 3047121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:21:57.785378 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.32:56640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:57.786024 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.32:56640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:57.797474 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.15:57160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:57.798119 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.15:57160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:58.152305 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.18:58566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:58.152951 2026] [authz_core:error] [pid 3036162:tid 3036162] [client 57.141.0.18:58566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:58.196669 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.60:31866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:58.197300 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.60:31866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:58.279104 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.45:51536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:58.279751 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.45:51536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:58.965843 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.45:51538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:58.966493 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.45:51538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:59.120315 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.46:20888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:59.121006 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.46:20888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:59.641031 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.12:21956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:59.641686 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.12:21956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:21:59.841906 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.19:30138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:21:59.842700 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.19:30138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:00.599259 2026] [ssl:error] [pid 3047191:tid 3047191] (EAI 2)Name or service not known: [client 144.76.19.72:36236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:00.599300 2026] [ssl:error] [pid 3047191:tid 3047191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:00.652998 2026] [ssl:error] [pid 3039688:tid 3039688] (EAI 2)Name or service not known: [client 144.76.19.72:36252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:00.653032 2026] [ssl:error] [pid 3039688:tid 3039688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:00.663529 2026] [ssl:error] [pid 3052065:tid 3052065] (70014)End of file found: [client 216.73.216.199:38463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:00.969054 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.2:27824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:00.969692 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.2:27824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:01.176878 2026] [ssl:error] [pid 3053403:tid 3053403] (70014)End of file found: [client 216.73.216.199:7284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:01.181865 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.61:59530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:01.182767 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.61:59530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:01.635050 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.15:57174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:01.635692 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.15:57174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:01.797209 2026] [access_compat:error] [pid 3036162:tid 3036162] [client 176.241.66.87:61764] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:01.877777 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.55:49138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:01.878423 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.55:49138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:02.112145 2026] [security2:error] [pid 3038043:tid 3038043] [client 46.225.123.58:50768] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amsz2uAqppI-tnbkQ1srsAAAAAI"]
[Thu Jul 30 12:22:02.140636 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.23:45602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:02.141261 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.23:45602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:02.713141 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.45:51540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:02.713786 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.45:51540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:03.086957 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.18:25728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:03.087589 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.18:25728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:03.367263 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.10:25906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:03.367906 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.10:25906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:03.690309 2026] [core:error] [pid 3051647:tid 3051647] (13)Permission denied: [client 216.73.216.199:3712] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-512/objs_per_slab
[Thu Jul 30 12:22:03.709262 2026] [ssl:error] [pid 3053793:tid 3053793] (EAI 2)Name or service not known: [client 144.76.19.72:36260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:03.709291 2026] [ssl:error] [pid 3053793:tid 3053793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:03.729203 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.60:47108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:03.729836 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.60:47108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:03.763350 2026] [ssl:error] [pid 3038494:tid 3038494] (EAI 2)Name or service not known: [client 144.76.19.72:36274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:03.763384 2026] [ssl:error] [pid 3038494:tid 3038494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:03.840156 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.68:60620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:03.840776 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.68:60620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:04.052540 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.40:22616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:04.053162 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.40:22616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:04.082570 2026] [access_compat:error] [pid 3038043:tid 3038043] [client 125.176.202.122:50676] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:04.164457 2026] [core:error] [pid 3038494:tid 3038494] [client 66.249.66.167:49244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:04.164486 2026] [core:error] [pid 3038494:tid 3038494] [client 66.249.66.167:49244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:04.170185 2026] [core:error] [pid 3039529:tid 3039529] [client 66.249.66.168:58714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:04.170219 2026] [core:error] [pid 3039529:tid 3039529] [client 66.249.66.168:58714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:04.286826 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.60:47122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:04.287558 2026] [authz_core:error] [pid 3041181:tid 3041181] [client 57.141.0.60:47122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:04.384958 2026] [security2:error] [pid 3036286:tid 3036286] [client 85.208.96.207:53700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/motherwell-players-wages"] [unique_id "amsz3PoPbCIL8xj3r8M60QAAAEc"]
[Thu Jul 30 12:22:04.530284 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.66:39384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:04.530905 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.66:39384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:04.594546 2026] [ssl:error] [pid 3051647:tid 3051647] (70014)End of file found: [client 216.73.216.199:3712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:05.119391 2026] [core:error] [pid 3030608:tid 3030608] [client 66.249.66.169:55428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:05.119422 2026] [core:error] [pid 3030608:tid 3030608] [client 66.249.66.169:55428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:05.406217 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.20:45414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:05.406860 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.20:45414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:05.698347 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.22:35974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:05.699412 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.22:35974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:06.131527 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.36:23850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:06.132179 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.36:23850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:06.320924 2026] [core:error] [pid 3048703:tid 3048703] [client 57.141.0.37:53196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:06.320957 2026] [core:error] [pid 3048703:tid 3048703] [client 57.141.0.37:53196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:06.353345 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.9:54576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:06.354022 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.9:54576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:06.533290 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.16:44380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:06.533951 2026] [authz_core:error] [pid 3044598:tid 3044598] [client 57.141.0.16:44380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:06.561453 2026] [access_compat:error] [pid 3048774:tid 3048774] [client 176.241.66.87:62098] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:06.741311 2026] [authz_core:error] [pid 3052192:tid 3052192] [client 57.141.0.51:37562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:06.741939 2026] [authz_core:error] [pid 3052192:tid 3052192] [client 57.141.0.51:37562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:06.816928 2026] [ssl:error] [pid 3038494:tid 3038494] (EAI 2)Name or service not known: [client 144.76.19.72:36290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:06.816978 2026] [ssl:error] [pid 3038494:tid 3038494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:06.872001 2026] [ssl:error] [pid 3052195:tid 3052195] (EAI 2)Name or service not known: [client 144.76.19.72:36294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:06.872048 2026] [ssl:error] [pid 3052195:tid 3052195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:07.148711 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 157.20.138.62:55855] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:07.472004 2026] [core:error] [pid 3030608:tid 3030608] (13)Permission denied: [client 216.73.216.199:31259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_cui_item/red_zone
[Thu Jul 30 12:22:07.686155 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.59:50802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:07.686781 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.59:50802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:07.831636 2026] [access_compat:error] [pid 3042693:tid 3042693] [client 125.176.202.122:50804] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:07.878473 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.56:26352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:07.879138 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.56:26352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:08.057109 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.21:42408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:08.057726 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.21:42408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:08.071683 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.33:52530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:08.072301 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.33:52530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:08.445632 2026] [authz_core:error] [pid 3052192:tid 3052192] [client 57.141.0.15:62600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:08.446318 2026] [authz_core:error] [pid 3052192:tid 3052192] [client 57.141.0.15:62600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:08.691776 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.5:45870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:08.692402 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.5:45870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:09.180140 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.59:50804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:09.180773 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.59:50804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:09.230123 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.16:51642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:09.230788 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.16:51642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:09.658512 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.7:54600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:09.659208 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.7:54600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:09.943039 2026] [ssl:error] [pid 3047200:tid 3047200] (EAI 2)Name or service not known: [client 144.76.19.72:36914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:09.943106 2026] [ssl:error] [pid 3047200:tid 3047200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:09.997817 2026] [ssl:error] [pid 3052131:tid 3052131] (EAI 2)Name or service not known: [client 144.76.19.72:36916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:09.997870 2026] [ssl:error] [pid 3052131:tid 3052131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:10.078188 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.71:27784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:10.078814 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.71:27784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:10.615689 2026] [ssl:error] [pid 3030608:tid 3030608] (70014)End of file found: [client 216.73.216.199:31259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:10.872379 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.11:47852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:10.873006 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.11:47852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:10.920704 2026] [ssl:error] [pid 3047191:tid 3047191] (70014)End of file found: [client 216.73.216.199:5704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:10.987973 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.38:64384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:10.988620 2026] [authz_core:error] [pid 3046103:tid 3046103] [client 57.141.0.38:64384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:10.990375 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.19:29142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:10.991055 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.19:29142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:11.429198 2026] [core:error] [pid 3020912:tid 3020912] (13)Permission denied: [client 216.73.216.199:47178] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_conntrack_ftp/parameters/ports
[Thu Jul 30 12:22:11.662758 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.30:59028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:11.663398 2026] [authz_core:error] [pid 3039529:tid 3039529] [client 57.141.0.30:59028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:12.419038 2026] [authz_core:error] [pid 3009642:tid 3009642] [client 169.58.39.193:54979] AH01630: client denied by server configuration: /home/stcols/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:22:12.461178 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.8:23794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:12.461798 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.8:23794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:12.776821 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.49:27958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:12.777480 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.49:27958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:13.053806 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.4:36794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:13.054451 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.4:36794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:13.083821 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.39:37786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:13.084467 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.39:37786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:13.260212 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.12:61512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:13.260895 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.12:61512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:13.285701 2026] [ssl:error] [pid 3052129:tid 3052129] (EAI 2)Name or service not known: [client 144.76.19.72:36928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:13.285739 2026] [ssl:error] [pid 3052129:tid 3052129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:13.634240 2026] [security2:error] [pid 3036286:tid 3036286] [client 47.128.24.234:12226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amsz5foPbCIL8xj3r8M61QAAAEc"]
[Thu Jul 30 12:22:13.962361 2026] [ssl:error] [pid 3039628:tid 3039628] (EAI 2)Name or service not known: [client 144.76.19.72:36934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:13.962385 2026] [ssl:error] [pid 3039628:tid 3039628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:14.234942 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.60:21592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:14.235579 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.60:21592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:14.429689 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.20:32460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:14.430312 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.20:32460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:14.552775 2026] [core:error] [pid 3020912:tid 3020912] (13)Permission denied: [client 216.73.216.199:47178] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty28/subsystem/ttyS1/closing_wait
[Thu Jul 30 12:22:15.114751 2026] [access_compat:error] [pid 3047193:tid 3047193] [client 125.176.202.122:50901] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:15.289897 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.37:22432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:15.290621 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.37:22432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:15.351708 2026] [authz_core:error] [pid 3054945:tid 3054945] [client 57.141.0.34:54614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:15.352331 2026] [authz_core:error] [pid 3054945:tid 3054945] [client 57.141.0.34:54614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:15.371247 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.9:25866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:15.371871 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.9:25866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:15.375242 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.71:57228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:15.375903 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.71:57228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:15.523214 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.15:59942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:15.523838 2026] [authz_core:error] [pid 3036286:tid 3036286] [client 57.141.0.15:59942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:15.939599 2026] [lsapi:warn] [pid 3054944:tid 3054944] [client 20.191.45.212:1987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 12:22:15.939654 2026] [lsapi:warn] [pid 3054944:tid 3054944] [client 20.191.45.212:1987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 12:22:16.395044 2026] [security2:error] [pid 3041289:tid 3041289] [client 43.153.21.113:55019] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsz6LbhpFG_qPHCh-c2pAAAADE"]
[Thu Jul 30 12:22:16.395140 2026] [security2:error] [pid 3041289:tid 3041289] [client 43.153.21.113:55019] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsz6LbhpFG_qPHCh-c2pAAAADE"]
[Thu Jul 30 12:22:16.395451 2026] [security2:error] [pid 3041289:tid 3041289] [client 43.153.21.113:55019] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsz6LbhpFG_qPHCh-c2pAAAADE"]
[Thu Jul 30 12:22:16.420254 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.22:20760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:16.420903 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.22:20760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:16.589743 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.54:47050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:16.590373 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.54:47050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:16.658217 2026] [autoindex:error] [pid 3020912:tid 3020912] (13)Permission denied: [client 216.73.216.199:47178] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/wmsfirea/
[Thu Jul 30 12:22:16.929664 2026] [authz_core:error] [pid 3052192:tid 3052192] [client 57.141.0.25:29280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:16.930284 2026] [authz_core:error] [pid 3052192:tid 3052192] [client 57.141.0.25:29280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:17.027948 2026] [ssl:error] [pid 3054555:tid 3054555] (EAI 2)Name or service not known: [client 144.76.19.72:36948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:17.027984 2026] [ssl:error] [pid 3054555:tid 3054555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:17.084143 2026] [ssl:error] [pid 3054939:tid 3054939] (EAI 2)Name or service not known: [client 144.76.19.72:36958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:17.084184 2026] [ssl:error] [pid 3054939:tid 3054939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:17.093323 2026] [access_compat:error] [pid 3052195:tid 3052195] [client 176.241.66.87:46421] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:17.370313 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.21:57004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:17.370940 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.21:57004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:17.461515 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.43:22832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:17.462141 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.43:22832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:17.666008 2026] [access_compat:error] [pid 3054942:tid 3054942] [client 157.20.138.62:56448] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:17.674853 2026] [security2:error] [pid 3045651:tid 3045651] [client 171.251.236.147:25786] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsz6ZELMN-Knyk83OWxIAAAAAs"]
[Thu Jul 30 12:22:17.674899 2026] [security2:error] [pid 3045651:tid 3045651] [client 171.251.236.147:25786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsz6ZELMN-Knyk83OWxIAAAAAs"]
[Thu Jul 30 12:22:17.675154 2026] [security2:error] [pid 3045651:tid 3045651] [client 171.251.236.147:25786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsz6ZELMN-Knyk83OWxIAAAAAs"]
[Thu Jul 30 12:22:17.813028 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.35:40932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:17.813668 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.35:40932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:17.824404 2026] [authz_core:error] [pid 3052130:tid 3052130] [client 57.141.0.44:35784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:17.825012 2026] [authz_core:error] [pid 3052130:tid 3052130] [client 57.141.0.44:35784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:18.143039 2026] [authz_core:error] [pid 3054555:tid 3054555] [client 57.141.0.5:33002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:18.143670 2026] [authz_core:error] [pid 3054555:tid 3054555] [client 57.141.0.5:33002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:18.690654 2026] [authz_core:error] [pid 3054946:tid 3054946] [client 57.141.0.49:26014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:18.691313 2026] [authz_core:error] [pid 3054946:tid 3054946] [client 57.141.0.49:26014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:18.900001 2026] [autoindex:error] [pid 3020912:tid 3020912] (13)Permission denied: [client 216.73.216.199:47178] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/candidejacobs/
[Thu Jul 30 12:22:19.041206 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.54:37186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:19.041822 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.54:37186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:19.092755 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.68:37040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:19.093376 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.68:37040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:19.337845 2026] [access_compat:error] [pid 3041031:tid 3041031] [client 125.176.202.122:51065] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:19.378427 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.9:25876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:19.379049 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.9:25876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:19.657625 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.49:26022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:19.658244 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.49:26022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:19.815897 2026] [access_compat:error] [pid 3054619:tid 3054619] [client 45.158.164.139:60194] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:22:19.915390 2026] [security2:error] [pid 3036117:tid 3036117] [client 73.221.239.154:60736] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsz64fEGiLYTQM1QJrDJwAAADI"]
[Thu Jul 30 12:22:19.915452 2026] [security2:error] [pid 3036117:tid 3036117] [client 73.221.239.154:60736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amsz64fEGiLYTQM1QJrDJwAAADI"]
[Thu Jul 30 12:22:19.915779 2026] [security2:error] [pid 3036117:tid 3036117] [client 73.221.239.154:60736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amsz64fEGiLYTQM1QJrDJwAAADI"]
[Thu Jul 30 12:22:20.143667 2026] [ssl:error] [pid 3054945:tid 3054945] (EAI 2)Name or service not known: [client 144.76.19.72:48918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:20.143710 2026] [ssl:error] [pid 3054945:tid 3054945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:20.162852 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.17:29668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:20.163481 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.17:29668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:20.200613 2026] [ssl:error] [pid 3054822:tid 3054822] (EAI 2)Name or service not known: [client 144.76.19.72:48926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:20.200648 2026] [ssl:error] [pid 3054822:tid 3054822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:20.645520 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 169.58.39.193:56534] AH01630: client denied by server configuration: /home/stcols/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:22:21.179012 2026] [core:error] [pid 3052065:tid 3052065] [client 46.246.88.142:35480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:21.179040 2026] [core:error] [pid 3052065:tid 3052065] [client 46.246.88.142:35480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:21.426566 2026] [core:error] [pid 3047039:tid 3047039] [client 46.246.88.142:35488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:21.426596 2026] [core:error] [pid 3047039:tid 3047039] [client 46.246.88.142:35488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:21.758625 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.66:55352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:21.759249 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.66:55352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:21.978217 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.27:46210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:21.978852 2026] [authz_core:error] [pid 3052065:tid 3052065] [client 57.141.0.27:46210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:22.033513 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 66.249.66.33:38455] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:22:22.036158 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 66.249.66.33:38455] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:22:22.135523 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 66.249.66.35:61017] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:22:22.138192 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 66.249.66.35:61017] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:22:22.342306 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.55:35820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:22.342939 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.55:35820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:22.596096 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.69:32288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:22.596718 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.69:32288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:22.779182 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.27:46214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:22.779804 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.27:46214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:22.861017 2026] [access_compat:error] [pid 3042693:tid 3042693] [client 176.241.66.87:62870] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:22.890854 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.38:47982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:22.891480 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.38:47982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:23.254519 2026] [ssl:error] [pid 3054822:tid 3054822] (EAI 2)Name or service not known: [client 144.76.19.72:48964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:23.254555 2026] [ssl:error] [pid 3054822:tid 3054822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:23.291663 2026] [authz_core:error] [pid 3054946:tid 3054946] [client 57.141.0.64:26294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:23.292304 2026] [authz_core:error] [pid 3054946:tid 3054946] [client 57.141.0.64:26294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:23.307634 2026] [ssl:error] [pid 3052064:tid 3052064] (EAI 2)Name or service not known: [client 144.76.19.72:48976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:23.307662 2026] [ssl:error] [pid 3052064:tid 3052064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:23.336155 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.15:59964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:23.336807 2026] [authz_core:error] [pid 3044276:tid 3044276] [client 57.141.0.15:59964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:23.869857 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.17:29670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:23.870483 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.17:29670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:24.216279 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.71:31742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:24.216911 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.71:31742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:24.765169 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.46:51162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:24.765788 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.46:51162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:24.791128 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.28:33868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:24.791764 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.28:33868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:24.871747 2026] [core:error] [pid 3041289:tid 3041289] [client 66.249.64.170:43800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:24.871783 2026] [core:error] [pid 3041289:tid 3041289] [client 66.249.64.170:43800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:25.226354 2026] [core:error] [pid 3039688:tid 3039688] (13)Permission denied: [client 216.73.216.199:22602] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/highbrightness.com.db
[Thu Jul 30 12:22:25.397195 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.1:56030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:25.397809 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.1:56030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:25.470230 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.25:41462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:25.470849 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.25:41462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:25.713295 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.69:32314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:25.713911 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.69:32314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:26.213140 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.56:62450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:26.213756 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.56:62450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:26.286042 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.19:65106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:26.286677 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.19:65106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:26.364366 2026] [ssl:error] [pid 3052131:tid 3052131] (EAI 2)Name or service not known: [client 144.76.19.72:49004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:26.364394 2026] [ssl:error] [pid 3052131:tid 3052131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:26.417397 2026] [ssl:error] [pid 3048777:tid 3048777] (EAI 2)Name or service not known: [client 144.76.19.72:49016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:26.417423 2026] [ssl:error] [pid 3048777:tid 3048777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:26.710187 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.43:33928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:26.710809 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.43:33928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:27.036449 2026] [ssl:error] [pid 3039688:tid 3039688] (5)Input/output error: [client 216.73.216.199:22602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:27.072032 2026] [core:error] [pid 3047039:tid 3047039] [client 66.249.66.66:61371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:27.072058 2026] [core:error] [pid 3047039:tid 3047039] [client 66.249.66.66:61371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:27.074923 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.14:37528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:27.075561 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.14:37528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:27.104683 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.65:33144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:27.105327 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.65:33144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:27.476213 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.68:62914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:27.476865 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.68:62914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:27.615807 2026] [access_compat:error] [pid 3047200:tid 3047200] [client 176.241.66.87:63188] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:27.868158 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.6:48566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:27.869376 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.6:48566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:27.886258 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.32:62812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:27.887345 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.32:62812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:27.927191 2026] [security2:error] [pid 3023932:tid 3023932] [client 43.160.219.138:43856] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "edwardkensington.com"] [uri "/"] [unique_id "amsz807r6Z6BZc7IwyroFQAAABc"]
[Thu Jul 30 12:22:27.929922 2026] [core:crit] [pid 3023932:tid 3023932] (13)Permission denied: [client 43.160.219.138:43856] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 12:22:28.102039 2026] [access_compat:error] [pid 3052064:tid 3052064] [client 157.20.138.62:57131] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:28.594303 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.38:48010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:28.594948 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.38:48010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:28.836465 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.71:31758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:28.837474 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.71:31758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:28.868567 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.15:57410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:28.869194 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.15:57410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:29.336230 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.16:28900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:29.336852 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.16:28900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:29.474766 2026] [ssl:error] [pid 3054890:tid 3054890] (EAI 2)Name or service not known: [client 144.76.19.72:49030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:29.474809 2026] [ssl:error] [pid 3054890:tid 3054890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:29.528213 2026] [ssl:error] [pid 3048703:tid 3048703] (EAI 2)Name or service not known: [client 144.76.19.72:49036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:29.528252 2026] [ssl:error] [pid 3048703:tid 3048703] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:29.982439 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.41:63616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:29.983096 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.41:63616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:30.125207 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.51:24976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:30.125861 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.51:24976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:30.153538 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.39:31818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:30.154160 2026] [authz_core:error] [pid 3047121:tid 3047121] [client 57.141.0.39:31818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:30.578042 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.70:58782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:30.578673 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.70:58782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:30.674565 2026] [access_compat:error] [pid 3052131:tid 3052131] [client 125.176.202.122:51407] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:31.713279 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.44:35882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:31.713923 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.44:35882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:31.733639 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.12:60690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:31.734275 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.12:60690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:31.906372 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.44:35894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:31.906990 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.44:35894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:32.252574 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.33:60138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:32.253226 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.33:60138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:32.454391 2026] [ssl:error] [pid 3020912:tid 3020912] (70014)End of file found: [client 216.73.216.199:47178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:32.587669 2026] [ssl:error] [pid 3047039:tid 3047039] (EAI 2)Name or service not known: [client 144.76.19.72:39438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:32.587707 2026] [ssl:error] [pid 3047039:tid 3047039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:32.643142 2026] [ssl:error] [pid 3047196:tid 3047196] (EAI 2)Name or service not known: [client 144.76.19.72:39444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:32.643171 2026] [ssl:error] [pid 3047196:tid 3047196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:32.843568 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.32:62828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:32.844196 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.32:62828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:33.107225 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.28:49314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:33.107851 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.28:49314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:33.308157 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.22:40236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:33.308812 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.22:40236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:33.353008 2026] [security2:error] [pid 3051647:tid 3051647] [client 216.73.216.199:28697] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/dbus-1/session.conf"] [unique_id "amsz-c2EK4yvpaFUzy8rdgAAABA"]
[Thu Jul 30 12:22:33.353310 2026] [security2:error] [pid 3051647:tid 3051647] [client 216.73.216.199:28697] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/dbus-1/session.conf"] [unique_id "amsz-c2EK4yvpaFUzy8rdgAAABA"]
[Thu Jul 30 12:22:33.353538 2026] [security2:error] [pid 3051647:tid 3051647] [client 216.73.216.199:28697] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/dbus-1/session.conf"] [unique_id "amsz-c2EK4yvpaFUzy8rdgAAABA"]
[Thu Jul 30 12:22:33.409327 2026] [access_compat:error] [pid 3041031:tid 3041031] [client 176.241.66.87:51387] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:33.682912 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.21:27214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:33.683549 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.21:27214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:34.207198 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.31:53250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:34.207823 2026] [authz_core:error] [pid 3045651:tid 3045651] [client 57.141.0.31:53250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:34.402989 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.71:32928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:34.403637 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.71:32928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:35.496817 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.70:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:35.497489 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.70:58818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:35.701017 2026] [ssl:error] [pid 3009642:tid 3009642] (EAI 2)Name or service not known: [client 144.76.19.72:39458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:35.701049 2026] [ssl:error] [pid 3009642:tid 3009642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:35.740517 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.52:59564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:35.741147 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.52:59564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:35.757030 2026] [ssl:error] [pid 3053403:tid 3053403] (EAI 2)Name or service not known: [client 144.76.19.72:39466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:35.757081 2026] [ssl:error] [pid 3053403:tid 3053403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:35.765050 2026] [ssl:error] [pid 3051647:tid 3051647] (70014)End of file found: [client 216.73.216.199:28697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:35.956377 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.42:43290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:35.957008 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.42:43290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:36.010790 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.42:43296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:36.011416 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.42:43296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:36.039241 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.54:51018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:36.039857 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.54:51018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:36.343179 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.64:33840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:36.343840 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.64:33840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:36.722959 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.62:48766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:36.723621 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.62:48766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:36.833081 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.7:55728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:36.833731 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.7:55728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:36.981578 2026] [ssl:error] [pid 3039688:tid 3039688] (70014)End of file found: [client 216.73.216.199:10274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:37.799922 2026] [access_compat:error] [pid 3047196:tid 3047196] [client 125.176.202.122:51498] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:37.881704 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.44:35896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:37.882332 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.44:35896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:38.145128 2026] [access_compat:error] [pid 3052129:tid 3052129] [client 176.241.66.87:63730] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:38.413178 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.54:44202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:38.413805 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.54:44202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:38.427116 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.64:33846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:38.427752 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.64:33846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:38.536631 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.5:55444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:38.537274 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.5:55444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:38.653789 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.18:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:38.654438 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.18:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:38.678942 2026] [access_compat:error] [pid 3020912:tid 3020912] [client 157.20.138.62:57916] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:38.830414 2026] [ssl:error] [pid 3054940:tid 3054940] (EAI 2)Name or service not known: [client 144.76.19.72:39480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:38.830458 2026] [ssl:error] [pid 3054940:tid 3054940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:38.888536 2026] [ssl:error] [pid 3047196:tid 3047196] (EAI 2)Name or service not known: [client 144.76.19.72:39496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:38.888560 2026] [ssl:error] [pid 3047196:tid 3047196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:38.930752 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.48:40360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:38.931371 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.48:40360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:38.991783 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.54:44206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:38.992398 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.54:44206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:39.654680 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.54:44210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:39.655325 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.54:44210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:39.689372 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.1:45250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:39.689996 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.1:45250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:39.702433 2026] [core:error] [pid 3056320:tid 3056320] (13)Permission denied: [client 216.73.216.199:9416] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_mmu_page_header/slabs
[Thu Jul 30 12:22:40.052239 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.37:29128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:40.052856 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.37:29128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:40.179151 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.1:45266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:40.179773 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.1:45266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:40.553246 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.47:33272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:40.553865 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.47:33272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:41.595201 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.36:32626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:41.595822 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.36:32626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:41.779088 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.37:33658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:41.779710 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.37:33658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:41.943038 2026] [ssl:error] [pid 3039628:tid 3039628] (EAI 2)Name or service not known: [client 144.76.19.72:43842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:41.943061 2026] [ssl:error] [pid 3039628:tid 3039628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:41.997344 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:43844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:41.997373 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:42.158806 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.35:36952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:42.159540 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.35:36952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:42.279394 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.68:22644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:42.280037 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.68:22644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:42.414197 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.70:40860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:42.414846 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.70:40860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:42.491429 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.7:55742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:42.492093 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.7:55742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:42.693243 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.43:40908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:42.693859 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.43:40908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:43.030876 2026] [access_compat:error] [pid 3054894:tid 3054894] [client 125.176.202.122:51641] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:43.057731 2026] [core:error] [pid 3039689:tid 3039689] [client 66.249.66.167:58318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:43.057759 2026] [core:error] [pid 3039689:tid 3039689] [client 66.249.66.167:58318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:43.263532 2026] [security2:error] [pid 3047196:tid 3047196] [client 170.106.165.186:52046] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "localhero.org.uk"] [uri "/"] [unique_id "ams0A2YMNjognqRCLJP9NwAAADw"]
[Thu Jul 30 12:22:43.307306 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.19:47862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:43.307936 2026] [authz_core:error] [pid 3052064:tid 3052064] [client 57.141.0.19:47862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:43.524093 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.65:63248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:43.524716 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.65:63248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:44.295127 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 45.32.151.65:44962] AH01630: client denied by server configuration: /home/erskinen/public_html/wp-content/plugins/cost-calculator-builder-pro
[Thu Jul 30 12:22:44.456519 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.27:39392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:44.457166 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.27:39392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:44.469426 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.11:30540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:44.470045 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.11:30540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:44.797543 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.27:39396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:44.798170 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.27:39396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:45.052374 2026] [ssl:error] [pid 3038494:tid 3038494] (EAI 2)Name or service not known: [client 144.76.19.72:43846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:45.052409 2026] [ssl:error] [pid 3038494:tid 3038494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:45.105331 2026] [ssl:error] [pid 3052064:tid 3052064] (EAI 2)Name or service not known: [client 144.76.19.72:43854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:45.105362 2026] [ssl:error] [pid 3052064:tid 3052064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:45.287265 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.13:46728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:45.287889 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.13:46728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:45.334956 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.16:45244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:45.335597 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.16:45244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:45.849081 2026] [lsapi:warn] [pid 3041180:tid 3041180] [client 20.191.45.212:2251] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 12:22:45.849120 2026] [lsapi:warn] [pid 3041180:tid 3041180] [client 20.191.45.212:2251] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 12:22:45.954213 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.8:48394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:45.954835 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.8:48394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:46.033759 2026] [security2:error] [pid 3038043:tid 3038043] [client 43.153.48.240:47210] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams0BuAqppI-tnbkQ1sryQAAAAI"]
[Thu Jul 30 12:22:46.049251 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.25:26820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:46.049890 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.25:26820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:46.340247 2026] [ssl:error] [pid 3042693:tid 3042693] (70014)End of file found: [client 216.73.216.199:21211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:46.398637 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.5:55454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:46.399267 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.5:55454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:46.895220 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.30:39240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:46.895865 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.30:39240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:47.014158 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.50:40818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:47.014786 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.50:40818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:47.439410 2026] [security2:error] [pid 3052131:tid 3052131] [client 43.153.48.240:50352] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams0Bz7983SpfMalvQh4xAAAACo"], referer: http://staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 12:22:47.501382 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.13:46732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:47.502025 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.13:46732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:48.088185 2026] [core:error] [pid 3052064:tid 3052064] [client 57.141.0.4:38780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:48.088215 2026] [core:error] [pid 3052064:tid 3052064] [client 57.141.0.4:38780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:48.209093 2026] [ssl:error] [pid 3052197:tid 3052197] (EAI 2)Name or service not known: [client 144.76.19.72:43866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:48.209133 2026] [ssl:error] [pid 3052197:tid 3052197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:48.266535 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:43868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:48.266577 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:48.620845 2026] [ssl:error] [pid 3038043:tid 3038043] (70014)End of file found: [client 216.73.216.199:20621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:48.639046 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.16:27256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:48.639709 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.16:27256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:48.674661 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 176.241.66.87:64274] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:48.903216 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.41:31908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:48.903857 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.41:31908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:49.172676 2026] [access_compat:error] [pid 3048702:tid 3048702] [client 157.20.138.62:58535] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:49.290641 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.2:27412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:49.291271 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.2:27412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:49.318462 2026] [ssl:error] [pid 3056320:tid 3056320] (70014)End of file found: [client 216.73.216.199:9416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:49.328556 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.32:40866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:49.329178 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.32:40866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:49.566833 2026] [access_compat:error] [pid 3054891:tid 3054891] [client 125.176.202.122:51757] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:49.573031 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.34:61264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:49.573674 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.34:61264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:49.967881 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.2:27424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:49.968516 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.2:27424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:49.981124 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.24:21512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:49.981736 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.24:21512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:49.990170 2026] [core:error] [pid 3039628:tid 3039628] [client 66.249.66.194:48121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:49.990207 2026] [core:error] [pid 3039628:tid 3039628] [client 66.249.66.194:48121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:22:50.052436 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.63:53190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:50.053134 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.63:53190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:50.897239 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.21:55562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:50.897863 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.21:55562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:50.907896 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.71:42112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:50.908532 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.71:42112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:51.316115 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.49:41122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:51.316740 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.49:41122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:51.322642 2026] [ssl:error] [pid 3054619:tid 3054619] (EAI 2)Name or service not known: [client 144.76.19.72:23128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:51.322672 2026] [ssl:error] [pid 3054619:tid 3054619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:51.381453 2026] [ssl:error] [pid 3039628:tid 3039628] (EAI 2)Name or service not known: [client 144.76.19.72:23144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:51.381484 2026] [ssl:error] [pid 3039628:tid 3039628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:51.803716 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.50:43702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:51.804336 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.50:43702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:52.094638 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.58:40214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:52.095318 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.58:40214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:52.110510 2026] [security2:error] [pid 3054944:tid 3054944] [client 43.135.172.89:42360] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/stderr.txt"] [unique_id "ams0DNHRRSsj9OHS2yVaKwAAAD0"]
[Thu Jul 30 12:22:52.452150 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.23:57956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:52.452773 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.23:57956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:53.014825 2026] [authz_core:error] [pid 3057218:tid 3057218] [client 57.141.0.48:38236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:53.015481 2026] [authz_core:error] [pid 3057218:tid 3057218] [client 57.141.0.48:38236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:53.450811 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.47:52122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:53.451494 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.47:52122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:53.662090 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.62:57530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:53.662707 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.62:57530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:53.675035 2026] [authz_core:error] [pid 3057218:tid 3057218] [client 57.141.0.42:55670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:53.675686 2026] [authz_core:error] [pid 3057218:tid 3057218] [client 57.141.0.42:55670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:54.018130 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.40:53062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:54.018771 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.40:53062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:54.084684 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.65:52368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:54.085307 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.65:52368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:54.353836 2026] [access_compat:error] [pid 3041289:tid 3041289] [client 125.176.202.122:51876] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:54.435657 2026] [access_compat:error] [pid 3054891:tid 3054891] [client 176.241.66.87:64504] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:54.440347 2026] [ssl:error] [pid 3039688:tid 3039688] (EAI 2)Name or service not known: [client 144.76.19.72:23156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:54.440385 2026] [ssl:error] [pid 3039688:tid 3039688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:54.494944 2026] [ssl:error] [pid 3057338:tid 3057338] (EAI 2)Name or service not known: [client 144.76.19.72:23166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:54.494990 2026] [ssl:error] [pid 3057338:tid 3057338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:54.890757 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.68:53224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:54.891416 2026] [authz_core:error] [pid 3039688:tid 3039688] [client 57.141.0.68:53224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:55.329667 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.44:20900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:55.330314 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.44:20900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:55.451881 2026] [authz_core:error] [pid 3054945:tid 3054945] [client 57.141.0.33:65198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:55.452520 2026] [authz_core:error] [pid 3054945:tid 3054945] [client 57.141.0.33:65198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:55.835941 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.24:32656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:55.836577 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.24:32656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:56.232781 2026] [ssl:error] [pid 3047193:tid 3047193] (70014)End of file found: [client 216.73.216.199:38681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:56.755368 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.14:61926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:56.755989 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.14:61926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:56.829127 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.42:55674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:56.829765 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.42:55674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:56.882724 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.53:64756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:56.884041 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.53:64756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:57.116041 2026] [core:error] [pid 3042693:tid 3042693] (13)Permission denied: [client 216.73.216.199:16058] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-280/slab_size
[Thu Jul 30 12:22:57.552534 2026] [ssl:error] [pid 3054939:tid 3054939] (EAI 2)Name or service not known: [client 144.76.19.72:23170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:57.552568 2026] [ssl:error] [pid 3054939:tid 3054939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:57.608920 2026] [ssl:error] [pid 3030608:tid 3030608] (EAI 2)Name or service not known: [client 144.76.19.72:23184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:22:57.608950 2026] [ssl:error] [pid 3030608:tid 3030608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:22:57.816354 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.56:44432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:57.817002 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.56:44432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:58.328403 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.39:56156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:58.329045 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.39:56156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:58.364318 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.53:64768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:58.364969 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.53:64768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:58.618625 2026] [authz_core:error] [pid 3052197:tid 3052197] [client 66.249.66.34:51558] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:22:58.619925 2026] [ssl:error] [pid 3056320:tid 3056320] (70014)End of file found: [client 216.73.216.199:21370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:22:58.621302 2026] [authz_core:error] [pid 3052197:tid 3052197] [client 66.249.66.34:51558] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:22:59.200478 2026] [access_compat:error] [pid 3039628:tid 3039628] [client 176.241.66.87:64822] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:59.433277 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.46:34342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:59.433925 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.46:34342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:59.436979 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.58:40234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:59.437612 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.58:40234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:22:59.766573 2026] [access_compat:error] [pid 3041180:tid 3041180] [client 157.20.138.62:59123] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:22:59.966593 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.18:49386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:22:59.967235 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.18:49386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:00.012259 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.24:32692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:00.012885 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.24:32692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:00.136405 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.24:32702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:00.137028 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.24:32702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:00.389071 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 20.206.204.219:55627] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:23:00.502005 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.39:56160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:00.502669 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.39:56160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:00.662167 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:29444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:00.662194 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:00.717864 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:29448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:00.717891 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:00.744479 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.66:44488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:00.745109 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.66:44488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:01.003136 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.62:51452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:01.003768 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.62:51452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:01.041185 2026] [core:error] [pid 3042693:tid 3042693] (13)Permission denied: [client 216.73.216.199:16058] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_delay_info/reclaim_account
[Thu Jul 30 12:23:01.433495 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.71:39266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:01.434157 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.71:39266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:01.944299 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.67:28300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:01.944923 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.67:28300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:02.076853 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.26:54408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:02.077521 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.26:54408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:02.271939 2026] [ssl:error] [pid 3042693:tid 3042693] (70014)End of file found: [client 216.73.216.199:16058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:02.685338 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.64:65528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:02.685952 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.64:65528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:02.884155 2026] [ssl:error] [pid 3047196:tid 3047196] (70014)End of file found: [client 216.73.216.199:51753] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:03.172932 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.40:39890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:03.173617 2026] [authz_core:error] [pid 3048774:tid 3048774] [client 57.141.0.40:39890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:03.348530 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.27:26410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:03.349158 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.27:26410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:03.451579 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.56:44448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:03.452212 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.56:44448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:03.772395 2026] [ssl:error] [pid 3048777:tid 3048777] (EAI 2)Name or service not known: [client 144.76.19.72:29450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:03.772419 2026] [ssl:error] [pid 3048777:tid 3048777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:03.826912 2026] [ssl:error] [pid 3052129:tid 3052129] (EAI 2)Name or service not known: [client 144.76.19.72:29460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:03.826941 2026] [ssl:error] [pid 3052129:tid 3052129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:03.838998 2026] [security2:error] [pid 3054822:tid 3054822] [client 43.153.104.196:48000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "ams0F5b_FejzXC0CXHBdXwAAABY"]
[Thu Jul 30 12:23:03.845032 2026] [security2:error] [pid 3052199:tid 3052199] [client 74.7.241.32:53780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "highclereracing.com"] [uri "/"] [unique_id "ams0F3n2hBdSHNrgyyFecQAAADs"], referer: https://www.pudhe.com
[Thu Jul 30 12:23:04.248113 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.39:56166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:04.248738 2026] [authz_core:error] [pid 3048703:tid 3048703] [client 57.141.0.39:56166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:04.440322 2026] [lsapi:warn] [pid 3054822:tid 3054822] [client 43.153.104.196:48000] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 12:23:04.480109 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.20:31904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:04.480729 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.20:31904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:04.497531 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.55:55392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:04.498189 2026] [authz_core:error] [pid 3048777:tid 3048777] [client 57.141.0.55:55392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:04.661002 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 125.176.202.122:52106] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:04.716362 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.13:42166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:04.717042 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.13:42166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:04.819625 2026] [security2:error] [pid 3054894:tid 3054894] [client 185.191.171.6:34866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/richard-gordon-bethel"] [unique_id "ams0GH_4VmuP9UB5RmExEgAAACc"]
[Thu Jul 30 12:23:04.959813 2026] [access_compat:error] [pid 3039628:tid 3039628] [client 176.241.66.87:49789] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:05.076745 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 66.249.66.35:57910] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:23:05.079487 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 66.249.66.35:57910] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:23:05.328092 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.42:28490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:05.328716 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.42:28490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:05.434268 2026] [security2:error] [pid 3054942:tid 3054942] [client 45.148.10.120:51234] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.env"] [unique_id "ams0GVAFRtetRy-ta2tXqQAAADA"]
[Thu Jul 30 12:23:05.434463 2026] [security2:error] [pid 3054942:tid 3054942] [client 45.148.10.120:51234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.env"] [unique_id "ams0GVAFRtetRy-ta2tXqQAAADA"]
[Thu Jul 30 12:23:05.602580 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.46:42656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:05.603626 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.46:42656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:05.913279 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.67:28314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:05.913899 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.67:28314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:05.950328 2026] [security2:error] [pid 3054942:tid 3054942] [client 45.148.10.120:51234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/index.php"] [unique_id "ams0GVAFRtetRy-ta2tXqQAAADA"]
[Thu Jul 30 12:23:05.966304 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.71:29616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:05.966917 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.71:29616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:06.012199 2026] [security2:error] [pid 3057697:tid 3057697] [client 88.169.220.164:21105] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0GqHMyryQK_NGjRJaNQAAABM"]
[Thu Jul 30 12:23:06.012250 2026] [security2:error] [pid 3057697:tid 3057697] [client 88.169.220.164:21105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0GqHMyryQK_NGjRJaNQAAABM"]
[Thu Jul 30 12:23:06.012548 2026] [security2:error] [pid 3057697:tid 3057697] [client 88.169.220.164:21105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0GqHMyryQK_NGjRJaNQAAABM"]
[Thu Jul 30 12:23:06.661127 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.16:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:06.662167 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.16:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:07.335288 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.40:39902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:07.335910 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.40:39902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:07.379930 2026] [ssl:error] [pid 3042693:tid 3042693] (EAI 2)Name or service not known: [client 144.76.19.72:29466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:07.379972 2026] [ssl:error] [pid 3042693:tid 3042693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:07.460879 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.36:32540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:07.461569 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.36:32540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:07.478439 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.56:44454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:07.479063 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.56:44454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:07.503645 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.48:39180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:07.504265 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.48:39180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:07.548607 2026] [ssl:error] [pid 3058024:tid 3058024] (EAI 2)Name or service not known: [client 144.76.19.72:29482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:07.548654 2026] [ssl:error] [pid 3058024:tid 3058024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:07.770925 2026] [ssl:error] [pid 3053403:tid 3053403] (70014)End of file found: [client 216.73.216.199:25017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:08.565433 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.59:39584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:08.566127 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.59:39584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:08.953806 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.51:62286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:08.954438 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.51:62286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:08.963045 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 20.206.204.219:57537] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:23:09.295160 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.15:29918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:09.295783 2026] [authz_core:error] [pid 3020912:tid 3020912] [client 57.141.0.15:29918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:09.298593 2026] [security2:error] [pid 3041289:tid 3041289] [client 85.208.96.201:61170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6746.0/prev_next,prev.html"] [unique_id "ams0HbbhpFG_qPHCh-c2vwAAADE"]
[Thu Jul 30 12:23:09.385303 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.30:42860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:09.385953 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.30:42860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:09.485823 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.48:21156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:09.486448 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.48:21156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:09.789354 2026] [access_compat:error] [pid 3030608:tid 3030608] [client 176.241.66.87:50185] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:09.887319 2026] [ssl:error] [pid 3057697:tid 3057697] (70014)End of file found: [client 216.73.216.199:20489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:09.978628 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.41:61302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:09.979258 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.41:61302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:10.327647 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 157.20.138.62:59715] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:10.370737 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.66:58510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:10.371377 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.66:58510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:10.458552 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.29:50892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:10.459174 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.29:50892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:10.469280 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.7:44142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:10.469896 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.7:44142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:10.658538 2026] [ssl:error] [pid 3047121:tid 3047121] (EAI 2)Name or service not known: [client 144.76.19.72:64896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:10.658582 2026] [ssl:error] [pid 3047121:tid 3047121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:10.719549 2026] [ssl:error] [pid 3041180:tid 3041180] (EAI 2)Name or service not known: [client 144.76.19.72:64904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:10.719582 2026] [ssl:error] [pid 3041180:tid 3041180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:11.103951 2026] [security2:error] [pid 3035863:tid 3035863] [client 92.97.6.252:59842] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0H09lrlA1D9eAUlQJDgAAAAA"]
[Thu Jul 30 12:23:11.104007 2026] [security2:error] [pid 3035863:tid 3035863] [client 92.97.6.252:59842] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0H09lrlA1D9eAUlQJDgAAAAA"]
[Thu Jul 30 12:23:11.104347 2026] [security2:error] [pid 3035863:tid 3035863] [client 92.97.6.252:59842] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0H09lrlA1D9eAUlQJDgAAAAA"]
[Thu Jul 30 12:23:11.119287 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.53:28752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:11.119909 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.53:28752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:11.251812 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.59:39592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:11.252439 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.59:39592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:11.882843 2026] [authz_core:error] [pid 3058078:tid 3058078] [client 57.141.0.29:50894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:11.883650 2026] [authz_core:error] [pid 3058078:tid 3058078] [client 57.141.0.29:50894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:12.062214 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.63:51018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:12.062837 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.63:51018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:12.558124 2026] [authz_core:error] [pid 3058078:tid 3058078] [client 57.141.0.8:40894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:12.558748 2026] [authz_core:error] [pid 3058078:tid 3058078] [client 57.141.0.8:40894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:12.591385 2026] [core:error] [pid 3047191:tid 3047191] [client 66.249.66.3:51396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:12.591413 2026] [core:error] [pid 3047191:tid 3047191] [client 66.249.66.3:51396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:12.599620 2026] [core:error] [pid 3041031:tid 3041031] [client 66.249.66.66:36839] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:12.599647 2026] [core:error] [pid 3041031:tid 3041031] [client 66.249.66.66:36839] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:12.694785 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.10:52074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:12.695421 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.10:52074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:13.168293 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.67:44158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:13.168925 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.67:44158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:13.511239 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.60:37062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:13.511878 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.60:37062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:13.750971 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.33:20218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:13.751613 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.33:20218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:13.775600 2026] [ssl:error] [pid 3054942:tid 3054942] (EAI 2)Name or service not known: [client 144.76.19.72:64918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:13.775635 2026] [ssl:error] [pid 3054942:tid 3054942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:13.827538 2026] [ssl:error] [pid 3054940:tid 3054940] (EAI 2)Name or service not known: [client 144.76.19.72:64934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:13.827569 2026] [ssl:error] [pid 3054940:tid 3054940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:14.674286 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.13:63998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:14.674914 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.13:63998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:14.723908 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.33:20222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:14.724541 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.33:20222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:14.874380 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.58:24738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:14.875003 2026] [authz_core:error] [pid 3056320:tid 3056320] [client 57.141.0.58:24738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:15.640277 2026] [core:error] [pid 3039529:tid 3039529] (13)Permission denied: [client 216.73.216.199:2165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/annawelshagent.com.db
[Thu Jul 30 12:23:16.100199 2026] [access_compat:error] [pid 3039688:tid 3039688] [client 125.176.202.122:52349] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:16.125001 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.29:50898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:16.125665 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.29:50898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:16.224489 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.20:61682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:16.225195 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.20:61682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:16.240153 2026] [security2:error] [pid 3057922:tid 3057922] [client 200.189.34.245:20250] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0JJFfZp3_s_JGFzWFdwAAAB4"]
[Thu Jul 30 12:23:16.240197 2026] [security2:error] [pid 3057922:tid 3057922] [client 200.189.34.245:20250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0JJFfZp3_s_JGFzWFdwAAAB4"]
[Thu Jul 30 12:23:16.240475 2026] [security2:error] [pid 3057922:tid 3057922] [client 200.189.34.245:20250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0JJFfZp3_s_JGFzWFdwAAAB4"]
[Thu Jul 30 12:23:16.305492 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.26:57272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:16.306124 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.26:57272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:16.313920 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.11:20148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:16.314547 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.11:20148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:16.666183 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.49:53084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:16.666799 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.49:53084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:16.882313 2026] [ssl:error] [pid 3052198:tid 3052198] (EAI 2)Name or service not known: [client 144.76.19.72:64936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:16.882357 2026] [ssl:error] [pid 3052198:tid 3052198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:16.994257 2026] [ssl:error] [pid 3054891:tid 3054891] (EAI 2)Name or service not known: [client 144.76.19.72:64940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:16.994291 2026] [ssl:error] [pid 3054891:tid 3054891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:17.702733 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.4:24022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:17.703410 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.4:24022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:17.881560 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.16:43448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:17.882210 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.16:43448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:18.108145 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.4:24026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:18.108765 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.4:24026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:18.131113 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.62:64264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:18.131749 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.62:64264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:18.193472 2026] [security2:error] [pid 3052198:tid 3052198] [client 114.119.132.171:53181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14,17/request_format~html"] [unique_id "ams0Jk0MlND_aGnfcOiXLQAAADk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578182400/cat_ids%7E14/request_format%7Ehtml
[Thu Jul 30 12:23:18.232582 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.43:62962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:18.233209 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.43:62962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:18.525272 2026] [security2:error] [pid 3054942:tid 3054942] [client 110.249.202.155:52140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/sites/default/files/uploaded/The%20Oak%20Room%20Prix%20Fixe_6.pdf"] [unique_id "ams0JlAFRtetRy-ta2tXsAAAADA"]
[Thu Jul 30 12:23:18.708981 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.70:21326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:18.709612 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.70:21326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:18.920814 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.6:32608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:18.921455 2026] [authz_core:error] [pid 3042693:tid 3042693] [client 57.141.0.6:32608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:19.497406 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.50:44692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:19.498032 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.50:44692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:19.597286 2026] [security2:error] [pid 3059121:tid 3059121] [client 114.119.132.171:53195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14,17/request_format~html"] [unique_id "ams0J3P6WbOTf-o0cC5cRwAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578182400/cat_ids%7E14/request_format%7Ehtml
[Thu Jul 30 12:23:19.762058 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.36:44588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:19.762731 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.36:44588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:19.911586 2026] [security2:error] [pid 3052131:tid 3052131] [client 85.208.96.204:43096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6342.0/prev_next,next.html"] [unique_id "ams0Jz7983SpfMalvQh45QAAACo"]
[Thu Jul 30 12:23:20.048044 2026] [ssl:error] [pid 3051647:tid 3051647] (EAI 2)Name or service not known: [client 144.76.19.72:41384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:20.048090 2026] [ssl:error] [pid 3051647:tid 3051647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:20.099721 2026] [ssl:error] [pid 3054618:tid 3054618] (EAI 2)Name or service not known: [client 144.76.19.72:41388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:20.099758 2026] [ssl:error] [pid 3054618:tid 3054618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:20.134355 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 89.45.53.3:60562] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:23:20.189301 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.51:24852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:20.189938 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.51:24852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:20.273903 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.26:57288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:20.274532 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.26:57288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:20.310588 2026] [access_compat:error] [pid 3042693:tid 3042693] [client 176.241.66.87:51186] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:20.416496 2026] [access_compat:error] [pid 3051647:tid 3051647] [client 2.189.5.218:58260] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:23:20.780727 2026] [access_compat:error] [pid 3059124:tid 3059124] [client 45.158.164.139:34932] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:23:20.837391 2026] [access_compat:error] [pid 3052131:tid 3052131] [client 89.45.53.30:35156] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:23:20.897485 2026] [access_compat:error] [pid 3052129:tid 3052129] [client 157.20.138.62:60301] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:20.962762 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.46:24386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:20.963410 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.46:24386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:21.017022 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 2.189.5.142:42780] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:23:21.029401 2026] [core:error] [pid 3048703:tid 3048703] [client 66.249.66.195:51350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:21.029427 2026] [core:error] [pid 3048703:tid 3048703] [client 66.249.66.195:51350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:21.109259 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.35:45048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:21.109887 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.35:45048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:21.419676 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.12:61870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:21.420335 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.12:61870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:21.498254 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.4:37986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:21.498875 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.4:37986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:21.678054 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.16:43470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:21.678743 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.16:43470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:21.983981 2026] [ssl:error] [pid 3054942:tid 3054942] (70014)End of file found: [client 216.73.216.199:24938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:22.274993 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.8:63384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:22.275626 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.8:63384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:22.349678 2026] [security2:error] [pid 3041031:tid 3041031] [client 43.159.143.190:42056] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "ams0KhcEOGANLeN7jYJIEwAAABo"]
[Thu Jul 30 12:23:23.154998 2026] [ssl:error] [pid 3041287:tid 3041287] (EAI 2)Name or service not known: [client 144.76.19.72:41396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:23.155052 2026] [ssl:error] [pid 3041287:tid 3041287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:23.209312 2026] [ssl:error] [pid 3035863:tid 3035863] (EAI 2)Name or service not known: [client 144.76.19.72:41406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:23.209349 2026] [ssl:error] [pid 3035863:tid 3035863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:23.547290 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.39:24320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:23.547943 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.39:24320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:23.625837 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.23:40174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:23.626468 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.23:40174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:23.669957 2026] [access_compat:error] [pid 3048651:tid 3048651] [client 125.176.202.122:52444] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:23.835081 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.41:25180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:23.835700 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.41:25180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:24.067015 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.61:29976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:24.067646 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.61:29976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:24.200335 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.12:61894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:24.200968 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.12:61894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:24.405443 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.18:51776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:24.406609 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.18:51776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:24.486020 2026] [security2:error] [pid 3059121:tid 3059121] [client 43.159.143.190:43154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "ams0LHP6WbOTf-o0cC5cSQAAADQ"], referer: http://purple-childcare.co.uk
[Thu Jul 30 12:23:25.264028 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.62:57854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:25.264705 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.62:57854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:25.306854 2026] [security2:error] [pid 3052199:tid 3052199] [client 216.73.216.199:15523] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/smartmontools/smartd.conf"] [unique_id "ams0LXn2hBdSHNrgyyFefwAAADs"]
[Thu Jul 30 12:23:25.307246 2026] [security2:error] [pid 3052199:tid 3052199] [client 216.73.216.199:15523] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/smartmontools/smartd.conf"] [unique_id "ams0LXn2hBdSHNrgyyFefwAAADs"]
[Thu Jul 30 12:23:25.307542 2026] [security2:error] [pid 3052199:tid 3052199] [client 216.73.216.199:15523] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/smartmontools/smartd.conf"] [unique_id "ams0LXn2hBdSHNrgyyFefwAAADs"]
[Thu Jul 30 12:23:25.470230 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.40:25758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:25.470878 2026] [authz_core:error] [pid 3048651:tid 3048651] [client 57.141.0.40:25758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:25.479733 2026] [core:error] [pid 3058612:tid 3058612] [client 66.249.64.170:48462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:25.479760 2026] [core:error] [pid 3058612:tid 3058612] [client 66.249.64.170:48462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:25.700013 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.66:43894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:25.700669 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.66:43894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:25.796989 2026] [security2:error] [pid 3038494:tid 3038494] [client 185.191.171.9:46300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9874.0.html"] [unique_id "ams0LY8hqBe_lkB9YdTyWwAAAAk"]
[Thu Jul 30 12:23:26.161264 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.55:49948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:26.161912 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.55:49948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:26.275995 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.35:45064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:26.276717 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.35:45064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:26.286868 2026] [ssl:error] [pid 3048702:tid 3048702] (EAI 2)Name or service not known: [client 144.76.19.72:41414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:26.286911 2026] [ssl:error] [pid 3048702:tid 3048702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:26.345778 2026] [ssl:error] [pid 3054822:tid 3054822] (EAI 2)Name or service not known: [client 144.76.19.72:41430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:26.345820 2026] [ssl:error] [pid 3054822:tid 3054822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:26.609888 2026] [security2:error] [pid 3048651:tid 3048651] [client 43.166.142.76:45202] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "craft-buddies.co.uk"] [uri "/"] [unique_id "ams0LlFR4wHgMpS_UaLXUAAAAAE"]
[Thu Jul 30 12:23:26.699460 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.51:64204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:26.700107 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.51:64204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:26.972460 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.40:25768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:26.973106 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.40:25768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:27.159982 2026] [security2:error] [pid 3041031:tid 3041031] [client 85.208.96.198:23494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3663.0/prev_next,next.html"] [unique_id "ams0LxcEOGANLeN7jYJIFgAAABo"]
[Thu Jul 30 12:23:27.303755 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.45:49428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:27.304434 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.45:49428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:27.474022 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.50:53662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:27.474663 2026] [authz_core:error] [pid 3041287:tid 3041287] [client 57.141.0.50:53662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:27.534129 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.14:41796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:27.534755 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.14:41796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:28.147080 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.31:30380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:28.147707 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.31:30380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:28.484548 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.34:60578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:28.485222 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.34:60578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:28.537710 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.1:43768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:28.538802 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.1:43768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:28.569180 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.5:60558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:28.569824 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.5:60558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:29.075005 2026] [access_compat:error] [pid 3041031:tid 3041031] [client 125.176.202.122:52592] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:29.203459 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.24:20896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:29.204097 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.24:20896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:29.408126 2026] [ssl:error] [pid 3036117:tid 3036117] (EAI 2)Name or service not known: [client 144.76.19.72:41444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:29.408167 2026] [ssl:error] [pid 3036117:tid 3036117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:29.461428 2026] [ssl:error] [pid 3054822:tid 3054822] (EAI 2)Name or service not known: [client 144.76.19.72:41460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:29.461454 2026] [ssl:error] [pid 3054822:tid 3054822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:29.564391 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.35:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:29.565014 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.35:32744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:29.854774 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.9:27288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:29.855406 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.9:27288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:29.953278 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.15:44660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:29.953928 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.15:44660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:30.238252 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.58:32466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:30.238900 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.58:32466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:30.284804 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.61:21818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:30.285432 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.61:21818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:30.847239 2026] [access_compat:error] [pid 3047196:tid 3047196] [client 176.241.66.87:52291] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:31.376247 2026] [core:error] [pid 3052199:tid 3052199] (13)Permission denied: [client 216.73.216.199:15523] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-512/poison
[Thu Jul 30 12:23:31.406647 2026] [access_compat:error] [pid 3039628:tid 3039628] [client 157.20.138.62:60889] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:31.606671 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.33:42820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:31.607304 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.33:42820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:31.635694 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.52:58490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:31.636317 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.52:58490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:31.790420 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.39:29462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:31.791085 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.39:29462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:31.795399 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.53:45636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:31.796022 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.53:45636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:32.435291 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.69:24042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:32.435916 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.69:24042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:32.516112 2026] [ssl:error] [pid 3058860:tid 3058860] (EAI 2)Name or service not known: [client 144.76.19.72:46144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:32.516150 2026] [ssl:error] [pid 3058860:tid 3058860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:32.570711 2026] [ssl:error] [pid 3054822:tid 3054822] (EAI 2)Name or service not known: [client 144.76.19.72:46148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:32.570740 2026] [ssl:error] [pid 3054822:tid 3054822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:32.745400 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.67:40632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:32.746023 2026] [authz_core:error] [pid 3047039:tid 3047039] [client 57.141.0.67:40632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:32.953807 2026] [core:error] [pid 3058986:tid 3058986] [client 57.141.0.43:23744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:32.953845 2026] [core:error] [pid 3058986:tid 3058986] [client 57.141.0.43:23744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:33.034329 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.62:20640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:33.034950 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.62:20640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:33.349333 2026] [lsapi:warn] [pid 3057863:tid 3057863] [client 66.249.66.4:57283] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:23:33.349405 2026] [lsapi:warn] [pid 3057863:tid 3057863] [client 66.249.66.4:57283] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:23:33.564875 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.21:23602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:33.565529 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.21:23602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:33.928015 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.49:52820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:33.928653 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.49:52820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:34.202039 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.41:30104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:34.202693 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.41:30104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:34.313546 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.2:55590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:34.314174 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.2:55590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:34.730036 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.31:30390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:34.730695 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.31:30390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:34.921470 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.21:44046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:34.922132 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.21:44046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:35.438779 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.15:52446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:35.439433 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.15:52446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:35.627916 2026] [ssl:error] [pid 3047200:tid 3047200] (EAI 2)Name or service not known: [client 144.76.19.72:46164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:35.627946 2026] [ssl:error] [pid 3047200:tid 3047200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:35.664637 2026] [access_compat:error] [pid 3041031:tid 3041031] [client 125.176.202.122:52904] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:35.683635 2026] [ssl:error] [pid 3052198:tid 3052198] (EAI 2)Name or service not known: [client 144.76.19.72:46168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:35.683677 2026] [ssl:error] [pid 3052198:tid 3052198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:35.753829 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.56:53586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:35.754450 2026] [authz_core:error] [pid 3054618:tid 3054618] [client 57.141.0.56:53586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:35.779421 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.60:38256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:35.780084 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.60:38256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:36.146241 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.2:30756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:36.146867 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.2:30756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:36.227496 2026] [ssl:error] [pid 3030608:tid 3030608] (70014)End of file found: [client 216.73.216.199:5438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:36.438833 2026] [security2:error] [pid 3041031:tid 3041031] [client 49.51.252.146:35860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "ams0OBcEOGANLeN7jYJIGgAAABo"]
[Thu Jul 30 12:23:36.644399 2026] [access_compat:error] [pid 3054619:tid 3054619] [client 176.241.66.87:52806] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:36.756870 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.30:40772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:36.757507 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.30:40772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:37.272077 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.61:21850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:37.272716 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.61:21850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:37.438730 2026] [ssl:error] [pid 3057697:tid 3057697] (70014)End of file found: [client 216.73.216.199:61744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:37.792185 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.69:24050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:37.792808 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.69:24050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:37.823421 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.11:50000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:37.824039 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.11:50000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:38.300627 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.21:44054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:38.301257 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.21:44054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:38.627718 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.4:52690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:38.628368 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.4:52690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:38.740108 2026] [ssl:error] [pid 3052195:tid 3052195] (EAI 2)Name or service not known: [client 144.76.19.72:46180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:38.740142 2026] [ssl:error] [pid 3052195:tid 3052195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:38.793205 2026] [ssl:error] [pid 3048702:tid 3048702] (EAI 2)Name or service not known: [client 144.76.19.72:46192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:38.793247 2026] [ssl:error] [pid 3048702:tid 3048702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:38.816021 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.65:32186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:38.816657 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.65:32186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:39.146958 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.12:37726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:39.147589 2026] [authz_core:error] [pid 3047191:tid 3047191] [client 57.141.0.12:37726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:39.363089 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.32:29742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:39.363712 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.32:29742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:39.560551 2026] [lsapi:warn] [pid 3059124:tid 3059124] [client 216.73.216.199:11258] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 12:23:39.560580 2026] [lsapi:error] [pid 3059124:tid 3059124] [client 216.73.216.199:11258] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-date-holidays/examples/usingCompositeDriver.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 12:23:39.706137 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.10:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:39.706760 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.10:49262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:39.987758 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 45.76.130.43:58182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 12:23:39.987795 2026] [lsapi:warn] [pid 3039628:tid 3039628] [client 45.76.130.43:58182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 12:23:40.297815 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.44:42724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:40.298446 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.44:42724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:40.345346 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.62:20646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:40.345973 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.62:20646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:40.774506 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.45:42952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:40.775131 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.45:42952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:41.015899 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.7:26166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:41.016535 2026] [authz_core:error] [pid 3039628:tid 3039628] [client 57.141.0.7:26166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:41.145625 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.70:40060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:41.146251 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.70:40060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:41.321375 2026] [access_compat:error] [pid 3041031:tid 3041031] [client 176.241.66.87:53444] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:41.869173 2026] [ssl:error] [pid 3039628:tid 3039628] (EAI 2)Name or service not known: [client 144.76.19.72:50098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:41.869211 2026] [ssl:error] [pid 3039628:tid 3039628] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:41.922224 2026] [ssl:error] [pid 3057863:tid 3057863] (EAI 2)Name or service not known: [client 144.76.19.72:50108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:41.922266 2026] [ssl:error] [pid 3057863:tid 3057863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:41.932214 2026] [access_compat:error] [pid 3047191:tid 3047191] [client 157.20.138.62:61479] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:42.168444 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.19:60114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:42.169145 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.19:60114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:42.439166 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.34:51322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:42.439830 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.34:51322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:42.559472 2026] [ssl:error] [pid 3054942:tid 3054942] (70014)End of file found: [client 216.73.216.199:22953] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:42.665735 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.7:26176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:42.666362 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.7:26176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:42.727104 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.37:44686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:42.727722 2026] [authz_core:error] [pid 3057863:tid 3057863] [client 57.141.0.37:44686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:42.831951 2026] [access_compat:error] [pid 3058024:tid 3058024] [client 125.176.202.122:53219] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:42.859582 2026] [ssl:error] [pid 3047039:tid 3047039] (70014)End of file found: [client 216.73.216.199:63203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:43.586191 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.51:34704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:43.586866 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.51:34704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:43.829556 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.38:50466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:43.830201 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.38:50466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:44.206100 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.31:62610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:44.206737 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.31:62610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:44.273284 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.65:56590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:44.273906 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.65:56590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:44.692701 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.23:57392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:44.693336 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.23:57392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:44.976035 2026] [ssl:error] [pid 3061142:tid 3061142] (EAI 2)Name or service not known: [client 144.76.19.72:50118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:44.976088 2026] [ssl:error] [pid 3061142:tid 3061142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:45.035818 2026] [ssl:error] [pid 3048702:tid 3048702] (EAI 2)Name or service not known: [client 144.76.19.72:50130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:45.035850 2026] [ssl:error] [pid 3048702:tid 3048702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:45.113108 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.61:35034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:45.113745 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.61:35034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:45.235025 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.55:40358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:45.235694 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.55:40358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:45.511289 2026] [security2:error] [pid 3023932:tid 3023932] [client 114.119.157.84:55139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "ams0QU7r6Z6BZc7IwyroNQAAABc"], referer: http://hoo-hah.co.uk?i=hh___12
[Thu Jul 30 12:23:45.874445 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.9:45336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:45.875109 2026] [authz_core:error] [pid 3035863:tid 3035863] [client 57.141.0.9:45336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:45.936317 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.4:56408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:45.936938 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.4:56408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:46.057238 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.54:52746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:46.057860 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.54:52746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:46.527805 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.1:41496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:46.528552 2026] [authz_core:error] [pid 3023932:tid 3023932] [client 57.141.0.1:41496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:47.093632 2026] [access_compat:error] [pid 3057922:tid 3057922] [client 176.241.66.87:53918] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:47.206322 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.39:27670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:47.206947 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.39:27670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:47.745175 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.55:40378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:47.745819 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.55:40378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:47.873611 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.47:37272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:47.874230 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.47:37272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:48.032722 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.28:59190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:48.033346 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.28:59190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:48.093435 2026] [ssl:error] [pid 3054942:tid 3054942] (EAI 2)Name or service not known: [client 144.76.19.72:50136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:48.093474 2026] [ssl:error] [pid 3054942:tid 3054942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:48.149412 2026] [ssl:error] [pid 3057921:tid 3057921] (EAI 2)Name or service not known: [client 144.76.19.72:50150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:48.149444 2026] [ssl:error] [pid 3057921:tid 3057921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:48.336472 2026] [security2:error] [pid 3047200:tid 3047200] [client 110.249.201.91:27174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "ams0RILTG_3dptT9IfSyzgAAAD8"]
[Thu Jul 30 12:23:48.712686 2026] [authz_core:error] [pid 3058077:tid 3058077] [client 57.141.0.20:48864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:48.713322 2026] [authz_core:error] [pid 3058077:tid 3058077] [client 57.141.0.20:48864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:49.033878 2026] [security2:error] [pid 3061097:tid 3061097] [client 162.14.109.170:43524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "ams0Rfa7wpwMI9S8ptd7PQAAAAQ"]
[Thu Jul 30 12:23:49.385434 2026] [access_compat:error] [pid 3054890:tid 3054890] [client 125.176.202.122:53535] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:49.498205 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.23:43268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:49.498830 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.23:43268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:49.618455 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.22:31640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:49.619077 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.22:31640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:49.767885 2026] [core:error] [pid 3057922:tid 3057922] (13)Permission denied: [client 216.73.216.199:11066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/align
[Thu Jul 30 12:23:49.822244 2026] [security2:error] [pid 3058024:tid 3058024] [client 110.249.201.69:52480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0Re__3H44jLx5NqOk0AAAACE"]
[Thu Jul 30 12:23:49.901467 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.50:48416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:49.902101 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.50:48416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:50.336854 2026] [security2:error] [pid 3035863:tid 3035863] [client 114.119.154.252:51053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/products/ipages"] [unique_id "ams0Rk9lrlA1D9eAUlQJgwAAAAA"], referer: http://codeworks.co.uk/products/iprint
[Thu Jul 30 12:23:50.485944 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.46:51054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:50.486581 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.46:51054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:50.632339 2026] [authz_core:error] [pid 3058077:tid 3058077] [client 57.141.0.1:41508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:50.632974 2026] [authz_core:error] [pid 3058077:tid 3058077] [client 57.141.0.1:41508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:50.834122 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.51:39172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:50.834740 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.51:39172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:51.052000 2026] [ssl:error] [pid 3057922:tid 3057922] (70014)End of file found: [client 216.73.216.199:11066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:51.170907 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.61:60720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:51.171540 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.61:60720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:51.250136 2026] [ssl:error] [pid 3059121:tid 3059121] (EAI 2)Name or service not known: [client 144.76.19.72:62084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:51.250184 2026] [ssl:error] [pid 3059121:tid 3059121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:51.306472 2026] [ssl:error] [pid 3061141:tid 3061141] (EAI 2)Name or service not known: [client 144.76.19.72:62092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:51.306520 2026] [ssl:error] [pid 3061141:tid 3061141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:51.338902 2026] [security2:error] [pid 3054619:tid 3054619] [client 162.14.109.170:40638] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "ams0R7PICPCT-mMZkLnQ0AAAAAw"], referer: http://www.chateausaintjeannet.com
[Thu Jul 30 12:23:51.616061 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.43:47732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:51.616695 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.43:47732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:51.848858 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 176.241.66.87:54583] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:51.927424 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.54:28802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:51.928043 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.54:28802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:52.224759 2026] [authz_core:error] [pid 3058987:tid 3058987] [client 57.141.0.7:45338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:52.225407 2026] [authz_core:error] [pid 3058987:tid 3058987] [client 57.141.0.7:45338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:52.514924 2026] [access_compat:error] [pid 3047196:tid 3047196] [client 157.20.138.62:62072] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:52.551801 2026] [core:error] [pid 3047200:tid 3047200] (13)Permission denied: [client 216.73.216.199:29597] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/trace
[Thu Jul 30 12:23:52.794312 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.36:25166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:52.794938 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.36:25166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:52.853824 2026] [ssl:error] [pid 3047200:tid 3047200] (70014)End of file found: [client 216.73.216.199:29597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:53.530890 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.13:27546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:53.531527 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.13:27546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:53.605644 2026] [authz_core:error] [pid 3058987:tid 3058987] [client 57.141.0.36:25174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:53.606291 2026] [authz_core:error] [pid 3058987:tid 3058987] [client 57.141.0.36:25174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:53.791128 2026] [lsapi:warn] [pid 3054894:tid 3054894] [client 216.73.216.199:65151] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 12:23:53.791172 2026] [lsapi:error] [pid 3054894:tid 3054894] [client 216.73.216.199:65151] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-services-weather/examples/metar-basic.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 12:23:53.834059 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.19:47296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:53.834729 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.19:47296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:54.034221 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.10:29766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:54.034850 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.10:29766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:54.267106 2026] [security2:error] [pid 3054894:tid 3054894] [client 43.135.135.57:45372] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/class-wp-abilities-registry.php"] [unique_id "ams0Sn_4VmuP9UB5RmExTAAAACc"]
[Thu Jul 30 12:23:54.404531 2026] [ssl:error] [pid 3052129:tid 3052129] (EAI 2)Name or service not known: [client 144.76.19.72:62102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:54.404569 2026] [ssl:error] [pid 3052129:tid 3052129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:54.439509 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.4:52526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:54.440138 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.4:52526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:54.461731 2026] [ssl:error] [pid 3052129:tid 3052129] (EAI 2)Name or service not known: [client 144.76.19.72:62108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:54.461751 2026] [ssl:error] [pid 3052129:tid 3052129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:54.749842 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.62:50450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:54.750472 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.62:50450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:55.214473 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.49:44170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:55.215150 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.49:44170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:55.473931 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.70:34608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:55.474568 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.70:34608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:55.697561 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.53:31668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:55.698205 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.53:31668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:55.721976 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.29:39346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:55.722662 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.29:39346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:56.344166 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.61:60736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:56.344807 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.61:60736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:56.538789 2026] [ssl:error] [pid 3043526:tid 3043526] (70014)End of file found: [client 216.73.216.199:50133] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:56.750474 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.37:41408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:56.751127 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.37:41408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:56.855997 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.28:26142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:56.856683 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.28:26142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:57.048109 2026] [ssl:error] [pid 3054894:tid 3054894] (70014)End of file found: [client 216.73.216.199:64916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:57.518280 2026] [ssl:error] [pid 3054619:tid 3054619] (EAI 2)Name or service not known: [client 144.76.19.72:62118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:57.518316 2026] [ssl:error] [pid 3054619:tid 3054619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:57.520116 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.8:59462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:57.520740 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.8:59462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:57.574613 2026] [ssl:error] [pid 3047196:tid 3047196] (EAI 2)Name or service not known: [client 144.76.19.72:62120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:23:57.574647 2026] [ssl:error] [pid 3047196:tid 3047196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:23:57.641514 2026] [access_compat:error] [pid 3054890:tid 3054890] [client 176.241.66.87:55042] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:57.725335 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.61:60740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:57.725961 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.61:60740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:58.294964 2026] [ssl:error] [pid 3054891:tid 3054891] (70014)End of file found: [client 216.73.216.199:43542] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:23:58.340211 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.18:47106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:58.340846 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.18:47106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:58.711902 2026] [authz_core:error] [pid 3061815:tid 3061815] [client 57.141.0.45:42208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:58.712568 2026] [authz_core:error] [pid 3061815:tid 3061815] [client 57.141.0.45:42208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:58.887807 2026] [access_compat:error] [pid 3058612:tid 3058612] [client 125.176.202.122:53865] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:23:59.243109 2026] [core:error] [pid 3047200:tid 3047200] [client 66.249.66.39:55250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:59.243133 2026] [core:error] [pid 3047200:tid 3047200] [client 66.249.66.39:55250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:59.323843 2026] [core:error] [pid 3054942:tid 3054942] [client 66.249.66.167:60916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:59.323873 2026] [core:error] [pid 3054942:tid 3054942] [client 66.249.66.167:60916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:23:59.425297 2026] [authz_core:error] [pid 3060811:tid 3060811] [client 57.141.0.36:25178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:59.425945 2026] [authz_core:error] [pid 3060811:tid 3060811] [client 57.141.0.36:25178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:23:59.618272 2026] [authz_core:error] [pid 3061815:tid 3061815] [client 57.141.0.4:52536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:23:59.618924 2026] [authz_core:error] [pid 3061815:tid 3061815] [client 57.141.0.4:52536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:00.020806 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.37:41424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:00.021438 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.37:41424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:00.439678 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.5:41790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:00.440299 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.5:41790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:00.624288 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.59:43966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:00.624912 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.59:43966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:00.651539 2026] [ssl:error] [pid 3041289:tid 3041289] (EAI 2)Name or service not known: [client 144.76.19.72:38154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:00.651564 2026] [ssl:error] [pid 3041289:tid 3041289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:00.707131 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.12:60712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:00.707804 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.12:60712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:00.716790 2026] [ssl:error] [pid 3052199:tid 3052199] (EAI 2)Name or service not known: [client 144.76.19.72:38170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:00.716845 2026] [ssl:error] [pid 3052199:tid 3052199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:01.145542 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.34:63510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:01.146165 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.34:63510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:01.166102 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.52:34482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:01.166722 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.52:34482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:01.199946 2026] [authz_core:error] [pid 3061858:tid 3061858] [client 57.141.0.16:20902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:01.200580 2026] [authz_core:error] [pid 3061858:tid 3061858] [client 57.141.0.16:20902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:01.437731 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.39:53202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:01.438365 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.39:53202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:01.561901 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.tmb
[Thu Jul 30 12:24:01.573607 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.20:61568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:01.574245 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.20:61568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:01.631799 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.tmb
[Thu Jul 30 12:24:01.661603 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.tmb
[Thu Jul 30 12:24:01.695648 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.tmb
[Thu Jul 30 12:24:01.726872 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.tmb
[Thu Jul 30 12:24:01.756557 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/.well-known
[Thu Jul 30 12:24:01.787308 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/991176.php
[Thu Jul 30 12:24:01.787375 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:01.883654 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/adminfuns.php
[Thu Jul 30 12:24:01.883717 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:01.913279 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/atomlib.php
[Thu Jul 30 12:24:01.913339 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.007702 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/classsmtps.php
[Thu Jul 30 12:24:02.007793 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.037243 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/content.php
[Thu Jul 30 12:24:02.037325 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.066699 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/doc.php
[Thu Jul 30 12:24:02.066756 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.104170 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:02.163357 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/fond.php
[Thu Jul 30 12:24:02.163416 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.193616 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/install.php
[Thu Jul 30 12:24:02.193674 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.224113 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/license.php
[Thu Jul 30 12:24:02.224180 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.253597 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/mariju.php
[Thu Jul 30 12:24:02.253653 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.334056 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.15:50904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:02.334685 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.15:50904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:02.338830 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/moon.php
[Thu Jul 30 12:24:02.338892 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.346981 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.58:46432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:02.347606 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.58:46432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:02.379860 2026] [access_compat:error] [pid 3047193:tid 3047193] [client 176.241.66.87:55671] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:02.425730 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/plugins.php
[Thu Jul 30 12:24:02.425783 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.519814 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/sx.php
[Thu Jul 30 12:24:02.519865 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.550179 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/wp-login.php
[Thu Jul 30 12:24:02.550236 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.586566 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/amaxx.php
[Thu Jul 30 12:24:02.586618 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.621615 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/bek.php
[Thu Jul 30 12:24:02.621668 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.623174 2026] [ssl:error] [pid 3054944:tid 3054944] (70014)End of file found: [client 216.73.216.199:33828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:02.702600 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/caches.php.suspected
[Thu Jul 30 12:24:02.733622 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/class.api.php
[Thu Jul 30 12:24:02.733681 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.763601 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/cong.php
[Thu Jul 30 12:24:02.763662 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.793619 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/content.php
[Thu Jul 30 12:24:02.793670 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.831650 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/cwianpri.php
[Thu Jul 30 12:24:02.831704 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.861151 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/elp.php
[Thu Jul 30 12:24:02.861206 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.929465 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/kwggvpup.php
[Thu Jul 30 12:24:02.929526 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 12:24:02.959810 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:02.985951 2026] [access_compat:error] [pid 3041289:tid 3041289] [client 157.20.138.62:62657] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:02.997463 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.033821 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.096081 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.099972 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.55:30500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:03.100597 2026] [authz_core:error] [pid 3054619:tid 3054619] [client 57.141.0.55:30500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:03.120756 2026] [ssl:error] [pid 3052129:tid 3052129] (70014)End of file found: [client 216.73.216.199:46683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:03.193682 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.225196 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.255238 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.288328 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.318620 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.351700 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.369886 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.19:36898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:03.370522 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.19:36898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:03.383388 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.460544 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.546569 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.552197 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.26:40604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:03.552808 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.26:40604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:03.577376 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.607450 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.638034 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.708091 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.775828 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:38174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:03.775864 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:03.805698 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.833222 2026] [ssl:error] [pid 3043526:tid 3043526] (EAI 2)Name or service not known: [client 144.76.19.72:38186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:03.833256 2026] [ssl:error] [pid 3043526:tid 3043526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:03.873839 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.883475 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.6:41062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:03.884098 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.6:41062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:03.904080 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:03.972311 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.007132 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.040435 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.072667 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.103825 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.134811 2026] [ssl:error] [pid 3054894:tid 3054894] (70014)End of file found: [client 216.73.216.199:60788] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:04.135599 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.166392 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.197096 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.259609 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.290937 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.321565 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.351726 2026] [access_compat:error] [pid 3052199:tid 3052199] [client 68.221.186.136:18916] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.shtml
[Thu Jul 30 12:24:04.394344 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.47:42960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:04.394976 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.47:42960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:04.536377 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.58:46458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:04.536999 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.58:46458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:04.844415 2026] [authz_core:error] [pid 3062266:tid 3062266] [client 57.141.0.2:54392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:04.845063 2026] [authz_core:error] [pid 3062266:tid 3062266] [client 57.141.0.2:54392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:05.013333 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.33:60624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:05.013957 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.33:60624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:05.119557 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.68:29886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:05.120177 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.68:29886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:05.281404 2026] [security2:error] [pid 3054822:tid 3054822] [client 85.208.96.204:44502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/florida-baseball-coach-scandal"] [unique_id "ams0VZb_FejzXC0CXHBddAAAABY"]
[Thu Jul 30 12:24:05.657008 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.36:39874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:05.657633 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.36:39874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:05.753821 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.26:40614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:05.754444 2026] [authz_core:error] [pid 3030608:tid 3030608] [client 57.141.0.26:40614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:05.769950 2026] [authz_core:error] [pid 3062266:tid 3062266] [client 57.141.0.66:62232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:05.770563 2026] [authz_core:error] [pid 3062266:tid 3062266] [client 57.141.0.66:62232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:06.888863 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.43:28942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:06.889665 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.43:28942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:06.890031 2026] [ssl:error] [pid 3047200:tid 3047200] (EAI 2)Name or service not known: [client 144.76.19.72:38202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:06.890086 2026] [ssl:error] [pid 3047200:tid 3047200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:06.925474 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.50:47720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:06.926147 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.50:47720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:06.951746 2026] [ssl:error] [pid 3041031:tid 3041031] (EAI 2)Name or service not known: [client 144.76.19.72:38218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:06.951801 2026] [ssl:error] [pid 3041031:tid 3041031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:07.587236 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.46:26548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:07.587862 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.46:26548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:07.897105 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.30:60682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:07.897744 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.30:60682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:07.909332 2026] [ssl:error] [pid 3061859:tid 3061859] (70014)End of file found: [client 216.73.216.199:7746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:08.209665 2026] [ssl:error] [pid 3062266:tid 3062266] (70014)End of file found: [client 216.73.216.199:44609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:08.347644 2026] [authz_core:error] [pid 3061626:tid 3061626] [client 57.141.0.54:43758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:08.348267 2026] [authz_core:error] [pid 3061626:tid 3061626] [client 57.141.0.54:43758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:08.713679 2026] [security2:error] [pid 3043526:tid 3043526] [client 216.73.216.199:24579] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/alt-php72-error.log"] [unique_id "ams0WJuACfPBNcxAhJOMjAAAAAc"]
[Thu Jul 30 12:24:08.714017 2026] [security2:error] [pid 3043526:tid 3043526] [client 216.73.216.199:24579] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/alt-php72-error.log"] [unique_id "ams0WJuACfPBNcxAhJOMjAAAAAc"]
[Thu Jul 30 12:24:08.714339 2026] [security2:error] [pid 3043526:tid 3043526] [client 216.73.216.199:24579] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/alt-php72-error.log"] [unique_id "ams0WJuACfPBNcxAhJOMjAAAAAc"]
[Thu Jul 30 12:24:08.973819 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.25:27780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:08.974463 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.25:27780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:09.164712 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.33:60626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:09.165364 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.33:60626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:09.242685 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.61:63986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:09.243323 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.61:63986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:09.397482 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.21:22958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:09.398133 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 57.141.0.21:22958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:09.412122 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.18:48502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:09.412758 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.18:48502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:09.822554 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.54:43776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:09.823245 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.54:43776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:09.988197 2026] [security2:error] [pid 3061627:tid 3061627] [client 186.27.170.35:38181] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0WcVSawWXoYDRYr-A4AAAABI"]
[Thu Jul 30 12:24:09.988250 2026] [security2:error] [pid 3061627:tid 3061627] [client 186.27.170.35:38181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0WcVSawWXoYDRYr-A4AAAABI"]
[Thu Jul 30 12:24:09.988584 2026] [security2:error] [pid 3061627:tid 3061627] [client 186.27.170.35:38181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0WcVSawWXoYDRYr-A4AAAABI"]
[Thu Jul 30 12:24:10.027129 2026] [ssl:error] [pid 3054944:tid 3054944] (EAI 2)Name or service not known: [client 144.76.19.72:32782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:10.027193 2026] [ssl:error] [pid 3054944:tid 3054944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:10.080695 2026] [ssl:error] [pid 3054944:tid 3054944] (EAI 2)Name or service not known: [client 144.76.19.72:32798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:10.080726 2026] [ssl:error] [pid 3054944:tid 3054944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:10.152390 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.41:62502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:10.153083 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.41:62502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:10.266695 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.67:21954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:10.267317 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.67:21954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:10.351414 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.36:39898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:10.352035 2026] [authz_core:error] [pid 3057922:tid 3057922] [client 57.141.0.36:39898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:11.055688 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.59:34292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:11.056316 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.59:34292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:11.282664 2026] [access_compat:error] [pid 3051647:tid 3051647] [client 125.176.202.122:54402] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:11.523286 2026] [core:error] [pid 3043526:tid 3043526] (13)Permission denied: [client 216.73.216.199:24579] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/cpu_partial
[Thu Jul 30 12:24:11.740294 2026] [authz_core:error] [pid 3062466:tid 3062466] [client 57.141.0.22:48770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:11.740917 2026] [authz_core:error] [pid 3062466:tid 3062466] [client 57.141.0.22:48770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:11.761324 2026] [authz_core:error] [pid 3058860:tid 3058860] [client 57.141.0.33:59582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:11.762320 2026] [authz_core:error] [pid 3058860:tid 3058860] [client 57.141.0.33:59582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:11.909118 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.64:64866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:11.909759 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.64:64866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:11.922031 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.43:45968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:11.922666 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.43:45968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:12.436422 2026] [security2:error] [pid 3062466:tid 3062466] [client 85.208.98.24:37890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/product/T"] [unique_id "ams0XOL3NU1KPE06cJEKygAAABk"]
[Thu Jul 30 12:24:12.550751 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.25:27796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:12.551401 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.25:27796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:12.951185 2026] [access_compat:error] [pid 3036117:tid 3036117] [client 176.241.66.87:56747] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:13.025933 2026] [security2:error] [pid 3062504:tid 3062504] [client 74.7.243.131:38198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "ams0XXdkUNUE83cbQ607mgAAABw"]
[Thu Jul 30 12:24:13.138556 2026] [ssl:error] [pid 3054890:tid 3054890] (EAI 2)Name or service not known: [client 144.76.19.72:32810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:13.138594 2026] [ssl:error] [pid 3054890:tid 3054890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:13.193136 2026] [ssl:error] [pid 3061627:tid 3061627] (EAI 2)Name or service not known: [client 144.76.19.72:32812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:13.193175 2026] [ssl:error] [pid 3061627:tid 3061627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:13.332778 2026] [ssl:error] [pid 3043526:tid 3043526] (70014)End of file found: [client 216.73.216.199:24579] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:13.473820 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.64:64874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:13.474445 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.64:64874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:13.515649 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.29:64254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:13.516278 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.29:64254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:13.569362 2026] [access_compat:error] [pid 3054944:tid 3054944] [client 157.20.138.62:63255] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:13.822033 2026] [ssl:error] [pid 3052198:tid 3052198] (70014)End of file found: [client 216.73.216.199:64042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:14.020381 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.18:58656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:14.021083 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.18:58656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:14.135988 2026] [core:error] [pid 3054894:tid 3054894] (13)Permission denied: [client 216.73.216.199:45004] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory7/node0/compact
[Thu Jul 30 12:24:14.311628 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.38:57448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:14.312269 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.38:57448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:14.506255 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.19:43690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:14.506939 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.19:43690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:14.537542 2026] [ssl:error] [pid 3054894:tid 3054894] (70014)End of file found: [client 216.73.216.199:45004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:14.874531 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.17:61430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:14.875681 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.17:61430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:15.155961 2026] [security2:error] [pid 3061627:tid 3061627] [client 170.238.148.196:12768] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0X8VSawWXoYDRYr-A4QAAABI"]
[Thu Jul 30 12:24:15.156028 2026] [security2:error] [pid 3061627:tid 3061627] [client 170.238.148.196:12768] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0X8VSawWXoYDRYr-A4QAAABI"]
[Thu Jul 30 12:24:15.156400 2026] [security2:error] [pid 3061627:tid 3061627] [client 170.238.148.196:12768] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0X8VSawWXoYDRYr-A4QAAABI"]
[Thu Jul 30 12:24:15.394635 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.65:41868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:15.395339 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.65:41868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:15.456684 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.58:27022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:15.457658 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.58:27022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:15.548709 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.22:48784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:15.549358 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.22:48784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:15.980029 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.35:55726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:15.980666 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.35:55726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:16.050696 2026] [authz_core:error] [pid 3062690:tid 3062690] [client 57.141.0.17:61446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:16.051322 2026] [authz_core:error] [pid 3062690:tid 3062690] [client 57.141.0.17:61446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:16.251678 2026] [ssl:error] [pid 3062266:tid 3062266] (EAI 2)Name or service not known: [client 144.76.19.72:32818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:16.251715 2026] [ssl:error] [pid 3062266:tid 3062266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:16.310011 2026] [ssl:error] [pid 3061097:tid 3061097] (EAI 2)Name or service not known: [client 144.76.19.72:32832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:16.310042 2026] [ssl:error] [pid 3061097:tid 3061097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:16.486404 2026] [authz_core:error] [pid 3062266:tid 3062266] [client 57.141.0.35:55734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:16.487021 2026] [authz_core:error] [pid 3062266:tid 3062266] [client 57.141.0.35:55734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:16.954687 2026] [security2:error] [pid 3041031:tid 3041031] [client 43.163.206.70:40146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "ams0YBcEOGANLeN7jYJIPQAAABo"]
[Thu Jul 30 12:24:17.218523 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.63:35932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:17.219586 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.63:35932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:17.586659 2026] [authz_core:error] [pid 3060811:tid 3060811] [client 57.141.0.64:21402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:17.587286 2026] [authz_core:error] [pid 3060811:tid 3060811] [client 57.141.0.64:21402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:18.048155 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.19:43692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:18.049175 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.19:43692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:18.186059 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.25:42592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:18.186723 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.25:42592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:18.226488 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.6:20024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:18.227190 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.6:20024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:18.610620 2026] [security2:error] [pid 3054941:tid 3054941] [client 77.222.105.19:53268] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0YmNVu3csc7ADFVwYcQAAAC0"]
[Thu Jul 30 12:24:18.610675 2026] [security2:error] [pid 3054941:tid 3054941] [client 77.222.105.19:53268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0YmNVu3csc7ADFVwYcQAAAC0"]
[Thu Jul 30 12:24:18.610942 2026] [security2:error] [pid 3054941:tid 3054941] [client 77.222.105.19:53268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0YmNVu3csc7ADFVwYcQAAAC0"]
[Thu Jul 30 12:24:18.654525 2026] [ssl:error] [pid 3061141:tid 3061141] (70014)End of file found: [client 216.73.216.199:46085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:18.718651 2026] [access_compat:error] [pid 3062690:tid 3062690] [client 176.241.66.87:57168] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:18.851191 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.34:57300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:18.852200 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.34:57300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:19.017745 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.32:28240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:19.018370 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.32:28240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:19.164608 2026] [access_compat:error] [pid 3051647:tid 3051647] [client 125.176.202.122:54677] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:19.270077 2026] [ssl:error] [pid 3043526:tid 3043526] (70014)End of file found: [client 216.73.216.199:32073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:19.310259 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.36:59992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:19.310881 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.36:59992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:19.367178 2026] [ssl:error] [pid 3038494:tid 3038494] (EAI 2)Name or service not known: [client 144.76.19.72:32844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:19.367210 2026] [ssl:error] [pid 3038494:tid 3038494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:19.423761 2026] [ssl:error] [pid 3030608:tid 3030608] (EAI 2)Name or service not known: [client 144.76.19.72:32856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:19.423789 2026] [ssl:error] [pid 3030608:tid 3030608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:19.843341 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.17:63798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:19.843965 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.17:63798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:20.069252 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.7:38632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:20.069869 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.7:38632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:20.569059 2026] [core:error] [pid 3052198:tid 3052198] (13)Permission denied: [client 216.73.216.199:10080] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory151/node0/compact
[Thu Jul 30 12:24:20.666905 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.66:33270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:20.667532 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.66:33270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:20.672168 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.14:40538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:20.672778 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.14:40538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:20.870850 2026] [ssl:error] [pid 3052198:tid 3052198] (70014)End of file found: [client 216.73.216.199:10080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:21.209764 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.7:38638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:21.210421 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.7:38638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:21.444106 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.52:39978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:21.444740 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.52:39978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:21.501057 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.16:35842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:21.501686 2026] [authz_core:error] [pid 3058986:tid 3058986] [client 57.141.0.16:35842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:21.648534 2026] [core:error] [pid 3062466:tid 3062466] [client 66.249.66.194:44780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:21.648563 2026] [core:error] [pid 3062466:tid 3062466] [client 66.249.66.194:44780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:21.648870 2026] [core:error] [pid 3062689:tid 3062689] [client 66.249.66.66:36511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:21.648903 2026] [core:error] [pid 3062689:tid 3062689] [client 66.249.66.66:36511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:21.692387 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.19:43708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:21.693531 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.19:43708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:22.234034 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.54:23764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:22.234676 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.54:23764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:22.477548 2026] [ssl:error] [pid 3062689:tid 3062689] (EAI 2)Name or service not known: [client 144.76.19.72:39370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:22.477582 2026] [ssl:error] [pid 3062689:tid 3062689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:22.533524 2026] [ssl:error] [pid 3054890:tid 3054890] (EAI 2)Name or service not known: [client 144.76.19.72:39380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:22.533553 2026] [ssl:error] [pid 3054890:tid 3054890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:22.741303 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.25:42608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:22.741917 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.25:42608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:23.195091 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.43:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:23.195712 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.43:30384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:23.527819 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.66:37072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:23.528445 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.66:37072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:23.533282 2026] [access_compat:error] [pid 3058986:tid 3058986] [client 176.241.66.87:52890] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:23.759735 2026] [authz_core:error] [pid 3062466:tid 3062466] [client 57.141.0.30:33806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:23.760417 2026] [authz_core:error] [pid 3062466:tid 3062466] [client 57.141.0.30:33806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:23.987910 2026] [access_compat:error] [pid 3062504:tid 3062504] [client 45.158.164.139:58412] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:24:24.087107 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.45:29328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:24.087736 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.45:29328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:24.108129 2026] [ssl:error] [pid 3039689:tid 3039689] (70014)End of file found: [client 216.73.216.199:26126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:24.132780 2026] [access_compat:error] [pid 3036117:tid 3036117] [client 157.20.138.62:63845] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:24.329727 2026] [authz_core:error] [pid 3061858:tid 3061858] [client 57.141.0.33:37346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:24.330350 2026] [authz_core:error] [pid 3061858:tid 3061858] [client 57.141.0.33:37346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:24.837023 2026] [ssl:error] [pid 3054939:tid 3054939] (70014)End of file found: [client 216.73.216.199:29687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:24.941835 2026] [access_compat:error] [pid 3059122:tid 3059122] [client 125.176.202.122:54953] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:25.213301 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.26:44534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:25.213925 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.26:44534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:25.281226 2026] [authz_core:error] [pid 3062505:tid 3062505] [client 57.141.0.26:44546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:25.281852 2026] [authz_core:error] [pid 3062505:tid 3062505] [client 57.141.0.26:44546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:25.589833 2026] [ssl:error] [pid 3047196:tid 3047196] (EAI 2)Name or service not known: [client 144.76.19.72:39390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:25.589886 2026] [ssl:error] [pid 3047196:tid 3047196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:25.642736 2026] [ssl:error] [pid 3060811:tid 3060811] (EAI 2)Name or service not known: [client 144.76.19.72:39396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:25.642776 2026] [ssl:error] [pid 3060811:tid 3060811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:25.748086 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.29:60942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:25.748708 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.29:60942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:25.777276 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.41:30702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:25.777911 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.41:30702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:26.231814 2026] [core:error] [pid 3054761:tid 3054761] (13)Permission denied: [client 216.73.216.199:45021] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory1/node0/compact
[Thu Jul 30 12:24:26.297181 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.36:41872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:26.297805 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.36:41872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:26.332436 2026] [ssl:error] [pid 3054761:tid 3054761] (70014)End of file found: [client 216.73.216.199:45021] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:26.405711 2026] [security2:error] [pid 3062642:tid 3062642] [client 85.208.96.197:16024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5233.0.html"] [unique_id "ams0anlgvgY7CHHEAZRo-QAAACU"]
[Thu Jul 30 12:24:26.596298 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.54:23780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:26.596953 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.54:23780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:26.635357 2026] [authz_core:error] [pid 3061859:tid 3061859] [client 57.141.0.38:22634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:26.636041 2026] [authz_core:error] [pid 3061859:tid 3061859] [client 57.141.0.38:22634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:26.817489 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.13:49912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:26.818123 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.13:49912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:27.329849 2026] [core:error] [pid 3061859:tid 3061859] [client 57.141.0.6:64512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:27.329875 2026] [core:error] [pid 3061859:tid 3061859] [client 57.141.0.6:64512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:27.519642 2026] [security2:error] [pid 3062690:tid 3062690] [client 43.164.3.182:36394] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "ams0a7jBWMSq6Ue5jKyRBQAAACs"]
[Thu Jul 30 12:24:27.779866 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.28:24340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:27.780506 2026] [authz_core:error] [pid 3054944:tid 3054944] [client 57.141.0.28:24340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:27.898483 2026] [authz_core:error] [pid 3061859:tid 3061859] [client 57.141.0.65:58910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:27.899136 2026] [authz_core:error] [pid 3061859:tid 3061859] [client 57.141.0.65:58910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:27.919442 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.11:36362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:27.920060 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.11:36362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:28.117852 2026] [security2:error] [pid 3057697:tid 3057697] [client 129.226.193.111:44840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "ams0bKHMyryQK_NGjRJa0AAAABM"]
[Thu Jul 30 12:24:28.617464 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.13:49922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:28.618094 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.13:49922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:28.696392 2026] [ssl:error] [pid 3052129:tid 3052129] (EAI 2)Name or service not known: [client 144.76.19.72:39402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:28.696417 2026] [ssl:error] [pid 3052129:tid 3052129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:28.752732 2026] [ssl:error] [pid 3061858:tid 3061858] (EAI 2)Name or service not known: [client 144.76.19.72:39416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:28.752773 2026] [ssl:error] [pid 3061858:tid 3061858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:29.007826 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.44:49164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:29.008445 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.44:49164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:29.080908 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.54:33132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:29.081568 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.54:33132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:29.361675 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.12:38202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:29.362325 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.12:38202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:29.567999 2026] [ssl:error] [pid 3061858:tid 3061858] (70014)End of file found: [client 216.73.216.199:22336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:29.937057 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.12:38208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:29.937748 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.12:38208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:30.165220 2026] [ssl:error] [pid 3054891:tid 3054891] (70014)End of file found: [client 216.73.216.199:49513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:30.220552 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.59:34386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:30.221195 2026] [authz_core:error] [pid 3047196:tid 3047196] [client 57.141.0.59:34386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:30.640615 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.43:52854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:30.641239 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.43:52854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:31.047447 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.56:38326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:31.048087 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.56:38326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:31.115342 2026] [security2:error] [pid 3061859:tid 3061859] [client 43.164.3.182:58738] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "ams0b-dC4A5VrPgMGkx0nQAAABc"], referer: http://ditchfest.com
[Thu Jul 30 12:24:31.283823 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.54:33148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:31.284447 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.54:33148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:31.634221 2026] [access_compat:error] [pid 3052195:tid 3052195] [client 125.176.202.122:55231] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:31.817822 2026] [ssl:error] [pid 3054939:tid 3054939] (EAI 2)Name or service not known: [client 144.76.19.72:46452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:31.817864 2026] [ssl:error] [pid 3054939:tid 3054939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:31.875121 2026] [ssl:error] [pid 3061141:tid 3061141] (EAI 2)Name or service not known: [client 144.76.19.72:46466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:31.875154 2026] [ssl:error] [pid 3061141:tid 3061141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:31.876802 2026] [authz_core:error] [pid 3059122:tid 3059122] [client 57.141.0.22:44948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:31.877423 2026] [authz_core:error] [pid 3059122:tid 3059122] [client 57.141.0.22:44948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:32.048215 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.14:40498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:32.048842 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.14:40498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:32.154625 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.66:23462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:32.155251 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.66:23462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:32.690012 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.49:36344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:32.690649 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.49:36344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:32.856933 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.49:36360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:32.857561 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.49:36360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:33.470959 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.23:59026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:33.471609 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.23:59026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:33.762230 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.58:29978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:33.762851 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.58:29978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:33.921219 2026] [security2:error] [pid 3041031:tid 3041031] [client 47.128.24.43:39536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "ams0cRcEOGANLeN7jYJIQwAAABo"]
[Thu Jul 30 12:24:34.045231 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.9:23998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:34.045868 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.9:23998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:34.061912 2026] [access_compat:error] [pid 3062689:tid 3062689] [client 176.241.66.87:58798] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:34.573418 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.64:25706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:34.574045 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.64:25706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:34.662461 2026] [access_compat:error] [pid 3062504:tid 3062504] [client 157.20.138.62:64435] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:34.699042 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.5:61480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:34.699679 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.5:61480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:34.896238 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.69:31350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:34.896864 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.69:31350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:34.929060 2026] [ssl:error] [pid 3057921:tid 3057921] (EAI 2)Name or service not known: [client 144.76.19.72:46478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:34.929100 2026] [ssl:error] [pid 3057921:tid 3057921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:34.984854 2026] [ssl:error] [pid 3061858:tid 3061858] (EAI 2)Name or service not known: [client 144.76.19.72:46492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:34.984885 2026] [ssl:error] [pid 3061858:tid 3061858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:35.043133 2026] [ssl:error] [pid 3041289:tid 3041289] (70014)End of file found: [client 216.73.216.199:41981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:35.053429 2026] [core:error] [pid 3061142:tid 3061142] [client 66.249.64.170:46876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:35.053454 2026] [core:error] [pid 3061142:tid 3061142] [client 66.249.64.170:46876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:35.280451 2026] [ssl:error] [pid 3054942:tid 3054942] (70014)End of file found: [client 216.73.216.199:26081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:35.284770 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.9:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:35.285419 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.9:24008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:35.335043 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 169.58.39.193:50326] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:24:35.410596 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.39:23252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:35.411244 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.39:23252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:35.550423 2026] [ssl:error] [pid 3041031:tid 3041031] (70014)End of file found: [client 216.73.216.199:33510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:35.942128 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.22:44964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:35.942752 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.22:44964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:36.430154 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.65:41786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:36.430806 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.65:41786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:36.992890 2026] [core:error] [pid 3054891:tid 3054891] [client 66.249.66.66:63094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:36.992925 2026] [core:error] [pid 3054891:tid 3054891] [client 66.249.66.66:63094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:37.010738 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.1:47978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:37.011378 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.1:47978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:37.261719 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.39:23270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:37.262382 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.39:23270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:37.835897 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.15:34992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:37.836530 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.15:34992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:38.007874 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.59:61338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:38.008547 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.59:61338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:38.041013 2026] [ssl:error] [pid 3061626:tid 3061626] (EAI 2)Name or service not known: [client 144.76.19.72:46498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:38.041075 2026] [ssl:error] [pid 3061626:tid 3061626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:38.093338 2026] [ssl:error] [pid 3053403:tid 3053403] (EAI 2)Name or service not known: [client 144.76.19.72:46502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:38.093367 2026] [ssl:error] [pid 3053403:tid 3053403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:38.523703 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.11:61464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:38.524334 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.11:61464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:38.554254 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 125.193.148.224:63143] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://search.yahoo.co.jp/
[Thu Jul 30 12:24:38.557149 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 125.193.148.224:63143] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://search.yahoo.co.jp/
[Thu Jul 30 12:24:38.657452 2026] [security2:error] [pid 3061626:tid 3061626] [client 74.7.227.9:55540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tartanbag.com"] [uri "/"] [unique_id "ams0dozQ8TPbacKswhoEVAAAAA8"]
[Thu Jul 30 12:24:38.983550 2026] [access_compat:error] [pid 3059121:tid 3059121] [client 125.176.202.122:55513] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:39.004018 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.47:42404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:39.004691 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.47:42404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:39.211200 2026] [authz_core:error] [pid 3061626:tid 3061626] [client 57.141.0.35:62940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:39.211823 2026] [authz_core:error] [pid 3061626:tid 3061626] [client 57.141.0.35:62940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:39.417207 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 20.193.250.173:51812] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 12:24:39.419109 2026] [access_compat:error] [pid 3048702:tid 3048702] [client 20.193.250.173:51812] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/, referer: binance.com
[Thu Jul 30 12:24:39.419156 2026] [access_compat:error] [pid 3048702:tid 3048702] [client 20.193.250.173:51812] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/, referer: binance.com
[Thu Jul 30 12:24:39.423380 2026] [access_compat:error] [pid 3048702:tid 3048702] [client 20.193.250.173:51812] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/, referer: binance.com
[Thu Jul 30 12:24:39.473619 2026] [authz_core:error] [pid 3047193:tid 3047193] [client 169.58.39.193:51164] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:24:39.716928 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.69:53542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:39.717583 2026] [authz_core:error] [pid 3062689:tid 3062689] [client 57.141.0.69:53542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:39.723978 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.48:55440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:39.724594 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.48:55440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:39.758421 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.50:62042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:39.759034 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.50:62042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:40.356840 2026] [ssl:error] [pid 3041180:tid 3041180] (70014)End of file found: [client 216.73.216.199:10121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:40.606821 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.41:48578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:40.607473 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.41:48578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:40.609995 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.39:23276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:40.610626 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.39:23276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:40.939246 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.18:32386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:40.939867 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.18:32386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:40.973846 2026] [ssl:error] [pid 3054942:tid 3054942] (70014)End of file found: [client 216.73.216.199:44142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:41.068735 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.3:41150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:41.069360 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.3:41150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:41.164668 2026] [ssl:error] [pid 3041031:tid 3041031] (EAI 2)Name or service not known: [client 144.76.19.72:40902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:41.164701 2026] [ssl:error] [pid 3041031:tid 3041031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:41.217615 2026] [ssl:error] [pid 3061097:tid 3061097] (EAI 2)Name or service not known: [client 144.76.19.72:40912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:41.217642 2026] [ssl:error] [pid 3061097:tid 3061097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:41.610162 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.45:34506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:41.610783 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.45:34506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:41.652669 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.27:47802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:41.653306 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.27:47802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:41.686844 2026] [ssl:error] [pid 3061567:tid 3061567] (70014)End of file found: [client 216.73.216.199:44180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:41.843882 2026] [security2:error] [pid 3058024:tid 3058024] [client 114.119.142.20:50165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14,104/request_format~html"] [unique_id "ams0ee__3H44jLx5NqOk5gAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578182400/cat_ids%7E14/request_format%7Ehtml
[Thu Jul 30 12:24:41.846482 2026] [core:error] [pid 3057697:tid 3057697] [client 57.141.0.21:28894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:41.846511 2026] [core:error] [pid 3057697:tid 3057697] [client 57.141.0.21:28894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:42.499447 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.37:34240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:42.500076 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.37:34240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:42.543470 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.70:30718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:42.544114 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.70:30718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:42.963324 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.42:36094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:42.963948 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.42:36094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:43.305296 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.68:64508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:43.305915 2026] [authz_core:error] [pid 3057042:tid 3057042] [client 57.141.0.68:64508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:43.649243 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.68:64518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:43.649890 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.68:64518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:43.741042 2026] [security2:error] [pid 3054939:tid 3054939] [client 114.119.142.20:50173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14,104/request_format~html"] [unique_id "ams0e3c1i5lB4O4tF-H_gQAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578182400/cat_ids%7E14/request_format%7Ehtml
[Thu Jul 30 12:24:43.764144 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.11:26342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:43.764773 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.11:26342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:44.271352 2026] [ssl:error] [pid 3061627:tid 3061627] (EAI 2)Name or service not known: [client 144.76.19.72:40942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:44.271378 2026] [ssl:error] [pid 3061627:tid 3061627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:44.327166 2026] [ssl:error] [pid 3057697:tid 3057697] (EAI 2)Name or service not known: [client 144.76.19.72:40956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:44.327204 2026] [ssl:error] [pid 3057697:tid 3057697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:44.584932 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 176.241.66.87:59785] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:44.684310 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.68:64532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:44.684931 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.68:64532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:45.023578 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.17:41332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:45.024204 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.17:41332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:45.167795 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.64:47256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:45.168437 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.64:47256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:45.173602 2026] [access_compat:error] [pid 3054822:tid 3054822] [client 157.20.138.62:65029] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:45.461052 2026] [security2:error] [pid 3062642:tid 3062642] [client 85.208.96.198:31110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,153.0.html"] [unique_id "ams0fXlgvgY7CHHEAZRo_wAAACU"]
[Thu Jul 30 12:24:45.528176 2026] [access_compat:error] [pid 3057042:tid 3057042] [client 125.176.202.122:55793] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:45.618793 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.23:31438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:45.619419 2026] [authz_core:error] [pid 3054939:tid 3054939] [client 57.141.0.23:31438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:45.627614 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.62:21784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:45.628251 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.62:21784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:45.833122 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.30:33824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:45.833810 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.30:33824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:45.941305 2026] [ssl:error] [pid 3063856:tid 3063856] (70014)End of file found: [client 216.73.216.199:4619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:46.120427 2026] [core:error] [pid 3062642:tid 3062642] [client 66.249.66.66:54585] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:46.120468 2026] [core:error] [pid 3062642:tid 3062642] [client 66.249.66.66:54585] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:46.207423 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.58:65200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:46.208085 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.58:65200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:46.532308 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.37:34248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:46.532962 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.37:34248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:47.110025 2026] [authz_core:error] [pid 3061626:tid 3061626] [client 57.141.0.47:41244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:47.110658 2026] [authz_core:error] [pid 3061626:tid 3061626] [client 57.141.0.47:41244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:47.390495 2026] [ssl:error] [pid 3059121:tid 3059121] (EAI 2)Name or service not known: [client 144.76.19.72:40964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:47.390536 2026] [ssl:error] [pid 3059121:tid 3059121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:47.446569 2026] [ssl:error] [pid 3061567:tid 3061567] (EAI 2)Name or service not known: [client 144.76.19.72:40980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:47.446607 2026] [ssl:error] [pid 3061567:tid 3061567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:47.464765 2026] [ssl:error] [pid 3047200:tid 3047200] (70014)End of file found: [client 216.73.216.199:33638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:47.514471 2026] [core:error] [pid 3054891:tid 3054891] [client 57.141.0.47:41246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:47.514520 2026] [core:error] [pid 3054891:tid 3054891] [client 57.141.0.47:41246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:24:47.576254 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.60:60760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:47.576874 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.60:60760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:47.930955 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.12:49812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:47.931620 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.12:49812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:48.369565 2026] [ssl:error] [pid 3059121:tid 3059121] (70014)End of file found: [client 216.73.216.199:18767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:48.446007 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.66:56588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:48.446668 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.66:56588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:48.726247 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.19:58698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:48.726883 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.19:58698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:48.778321 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.69:62698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:48.778964 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.69:62698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:49.102978 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.10:36604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:49.103673 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.10:36604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:49.444193 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.11:64966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:49.444818 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.11:64966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:50.371370 2026] [access_compat:error] [pid 3054942:tid 3054942] [client 176.241.66.87:60221] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:50.451242 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.63:23980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:50.451869 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.63:23980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:50.473211 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.24:64920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:50.473935 2026] [authz_core:error] [pid 3052129:tid 3052129] [client 57.141.0.24:64920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:50.502325 2026] [ssl:error] [pid 3062642:tid 3062642] (EAI 2)Name or service not known: [client 144.76.19.72:58844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:50.502362 2026] [ssl:error] [pid 3062642:tid 3062642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:50.555278 2026] [ssl:error] [pid 3061627:tid 3061627] (EAI 2)Name or service not known: [client 144.76.19.72:58848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:50.555325 2026] [ssl:error] [pid 3061627:tid 3061627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:51.179872 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.59:25514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:51.180511 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.59:25514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:51.297091 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.65:33862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:51.298192 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.65:33862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:51.351242 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.11:64976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:51.352134 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.11:64976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:51.703912 2026] [core:error] [pid 3052199:tid 3052199] (13)Permission denied: [client 216.73.216.199:19377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/validate
[Thu Jul 30 12:24:51.935369 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.48:62220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:51.935993 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.48:62220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:52.324170 2026] [ssl:error] [pid 3052199:tid 3052199] (70014)End of file found: [client 216.73.216.199:19377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:52.536876 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.18:46246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:52.537512 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.18:46246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:52.868270 2026] [ssl:error] [pid 3038494:tid 3038494] (70014)End of file found: [client 216.73.216.199:48060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:53.276438 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.58:44566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:53.277059 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.58:44566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:53.487306 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.22:22448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:53.487930 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.22:22448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:53.573850 2026] [authz_core:error] [pid 3063856:tid 3063856] [client 57.141.0.62:38156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:53.574471 2026] [authz_core:error] [pid 3063856:tid 3063856] [client 57.141.0.62:38156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:53.611306 2026] [ssl:error] [pid 3041031:tid 3041031] (EAI 2)Name or service not known: [client 144.76.19.72:58854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:53.611351 2026] [ssl:error] [pid 3041031:tid 3041031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:53.667770 2026] [ssl:error] [pid 3051647:tid 3051647] (EAI 2)Name or service not known: [client 144.76.19.72:58862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:53.667803 2026] [ssl:error] [pid 3051647:tid 3051647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:53.743765 2026] [access_compat:error] [pid 3061627:tid 3061627] [client 125.176.202.122:56053] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:54.069654 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.43:54506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:54.070290 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.43:54506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:54.450314 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.59:25530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:54.451008 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.59:25530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:54.913488 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.5:30752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:54.914127 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.5:30752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:55.112172 2026] [access_compat:error] [pid 3054891:tid 3054891] [client 176.241.66.87:60897] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:55.459968 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.60:61664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:55.460631 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.60:61664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:55.705682 2026] [access_compat:error] [pid 3058024:tid 3058024] [client 157.20.138.62:49245] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:24:55.979294 2026] [ssl:error] [pid 3064451:tid 3064451] (70014)End of file found: [client 216.73.216.199:57828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:56.011483 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.47:59334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:56.012136 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.47:59334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:56.274707 2026] [ssl:error] [pid 3047200:tid 3047200] (70014)End of file found: [client 216.73.216.199:48526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:56.516644 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.46:60674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:56.517272 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.46:60674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:56.635142 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.19:53490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:56.635756 2026] [authz_core:error] [pid 3061142:tid 3061142] [client 57.141.0.19:53490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:56.721322 2026] [ssl:error] [pid 3062504:tid 3062504] (EAI 2)Name or service not known: [client 144.76.19.72:58876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:56.721362 2026] [ssl:error] [pid 3062504:tid 3062504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:56.730237 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.16:37732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:56.730856 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.16:37732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:56.750442 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.4:64882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:56.751097 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.4:64882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:56.774520 2026] [ssl:error] [pid 3061142:tid 3061142] (EAI 2)Name or service not known: [client 144.76.19.72:58892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:56.774569 2026] [ssl:error] [pid 3061142:tid 3061142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:56.977530 2026] [ssl:error] [pid 3058987:tid 3058987] (70014)End of file found: [client 216.73.216.199:19391] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:24:57.255238 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.70:25736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:57.255887 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.70:25736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:57.699444 2026] [autoindex:error] [pid 3064507:tid 3064507] [client 45.148.10.194:36160] AH01276: Cannot serve directory /home/banskoex/public_html/pamporovoexpress.com/test/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://pamporovoexpress.com/test/
[Thu Jul 30 12:24:57.868778 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.71:50676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:57.869404 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.71:50676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:57.997841 2026] [authz_core:error] [pid 3064508:tid 3064508] [client 57.141.0.46:60678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:57.998488 2026] [authz_core:error] [pid 3064508:tid 3064508] [client 57.141.0.46:60678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:58.427782 2026] [security2:error] [pid 3052199:tid 3052199] [client 43.159.136.201:35810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "gangway-media.com"] [uri "/"] [unique_id "ams0inn2hBdSHNrgyyFfFAAAADs"]
[Thu Jul 30 12:24:58.697300 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.28:34100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:58.697931 2026] [authz_core:error] [pid 3054822:tid 3054822] [client 57.141.0.28:34100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:59.678410 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.30:63458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:59.679061 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.30:63458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:59.721938 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.21:52116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:59.722563 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.21:52116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:24:59.831001 2026] [ssl:error] [pid 3054822:tid 3054822] (EAI 2)Name or service not known: [client 144.76.19.72:29150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:59.831027 2026] [ssl:error] [pid 3054822:tid 3054822] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:59.832904 2026] [security2:error] [pid 3052131:tid 3052131] [client 43.159.136.201:57850] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.gangway-media.com"] [uri "/"] [unique_id "ams0iz7983SpfMalvQh5GQAAACo"], referer: http://gangway-media.com
[Thu Jul 30 12:24:59.888573 2026] [ssl:error] [pid 3061141:tid 3061141] (EAI 2)Name or service not known: [client 144.76.19.72:29166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:24:59.888604 2026] [ssl:error] [pid 3061141:tid 3061141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:24:59.920326 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.49:61708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:24:59.920953 2026] [authz_core:error] [pid 3052199:tid 3052199] [client 57.141.0.49:61708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:00.246045 2026] [authz_core:error] [pid 3063856:tid 3063856] [client 57.141.0.4:64894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:00.246783 2026] [authz_core:error] [pid 3063856:tid 3063856] [client 57.141.0.4:64894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:00.538777 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.70:25746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:00.539396 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.70:25746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:00.615639 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.35:55442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:00.616256 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.35:55442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:00.655560 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:25:00.685488 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:25:00.721467 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:25:00.733695 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.27:65018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:00.734316 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.27:65018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:00.751427 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 12:25:00.751473 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:25:00.781040 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:25:00.810675 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/blog
[Thu Jul 30 12:25:00.840849 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/web
[Thu Jul 30 12:25:00.870744 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/wordpress
[Thu Jul 30 12:25:00.900390 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/website
[Thu Jul 30 12:25:00.932480 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/wp
[Thu Jul 30 12:25:00.951548 2026] [access_compat:error] [pid 3063856:tid 3063856] [client 176.241.66.87:61407] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:00.962272 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.47:59348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:00.962309 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/news
[Thu Jul 30 12:25:00.962893 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.47:59348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:00.992159 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/2018
[Thu Jul 30 12:25:01.022482 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/2019
[Thu Jul 30 12:25:01.063825 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/shop
[Thu Jul 30 12:25:01.093814 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/wp1
[Thu Jul 30 12:25:01.126537 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/test
[Thu Jul 30 12:25:01.158463 2026] [security2:error] [pid 3052199:tid 3052199] [client 123.207.65.62:52820] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "ams0jXn2hBdSHNrgyyFfGQAAADs"]
[Thu Jul 30 12:25:01.170044 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/media
[Thu Jul 30 12:25:01.200429 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/wp2
[Thu Jul 30 12:25:01.235675 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/site
[Thu Jul 30 12:25:01.265471 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/cms
[Thu Jul 30 12:25:01.295283 2026] [access_compat:error] [pid 3061141:tid 3061141] [client 85.204.70.104:57184] AH01797: client denied by server configuration: /home/nspandor/public_html/sito
[Thu Jul 30 12:25:01.375263 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.17:27776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:01.376360 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.17:27776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:01.702624 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.23:63834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:01.703247 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.23:63834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:02.039978 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.46:51620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:02.040620 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.46:51620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:02.915437 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.38:45356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:02.916064 2026] [authz_core:error] [pid 3054894:tid 3054894] [client 57.141.0.38:45356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:02.970822 2026] [ssl:error] [pid 3064452:tid 3064452] (EAI 2)Name or service not known: [client 144.76.19.72:29170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:02.970892 2026] [ssl:error] [pid 3064452:tid 3064452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:03.027025 2026] [ssl:error] [pid 3062504:tid 3062504] (EAI 2)Name or service not known: [client 144.76.19.72:29182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:03.027057 2026] [ssl:error] [pid 3062504:tid 3062504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:03.076246 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.38:45362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:03.076886 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.38:45362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:03.088463 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.28:56554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:03.089116 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.28:56554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:03.472277 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.54:60106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:03.472926 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.54:60106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:03.593675 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.35:55458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:03.594298 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.35:55458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:03.866269 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.15:38676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:03.866901 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.15:38676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:04.324223 2026] [security2:error] [pid 3064509:tid 3064509] [client 163.61.129.86:48396] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0kD6M7Kiz-QGXINwyiwAAABc"]
[Thu Jul 30 12:25:04.324270 2026] [security2:error] [pid 3064509:tid 3064509] [client 163.61.129.86:48396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0kD6M7Kiz-QGXINwyiwAAABc"]
[Thu Jul 30 12:25:04.324553 2026] [security2:error] [pid 3064509:tid 3064509] [client 163.61.129.86:48396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0kD6M7Kiz-QGXINwyiwAAABc"]
[Thu Jul 30 12:25:04.793323 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.5:25910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:04.793940 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.5:25910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:05.195396 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.15:41230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:05.196022 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 57.141.0.15:41230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:05.290958 2026] [authz_core:error] [pid 3062642:tid 3062642] [client 57.141.0.51:63642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:05.291598 2026] [authz_core:error] [pid 3062642:tid 3062642] [client 57.141.0.51:63642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:05.539959 2026] [access_compat:error] [pid 3041180:tid 3041180] [client 125.176.202.122:56576] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:05.581091 2026] [access_compat:error] [pid 3061627:tid 3061627] [client 176.241.66.87:62053] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:05.659678 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.54:60114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:05.660300 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.54:60114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:05.691487 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.64:39510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:05.692120 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.64:39510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:05.747558 2026] [security2:error] [pid 3062504:tid 3062504] [client 85.208.96.198:16794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/homestead-exemption-alabama-jefferson-county"] [unique_id "ams0kXdkUNUE83cbQ607rwAAABw"]
[Thu Jul 30 12:25:05.810250 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.4:54164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:05.810874 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.4:54164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:06.082600 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:29188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:06.082636 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:06.138449 2026] [ssl:error] [pid 3058612:tid 3058612] (EAI 2)Name or service not known: [client 144.76.19.72:29204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:06.138491 2026] [ssl:error] [pid 3058612:tid 3058612] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:06.251539 2026] [access_compat:error] [pid 3038494:tid 3038494] [client 157.20.138.62:49844] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:06.636459 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.65:23920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:06.637098 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.65:23920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:06.699800 2026] [security2:error] [pid 3043526:tid 3043526] [client 185.115.101.11:58646] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0kpuACfPBNcxAhJOMrQAAAAc"]
[Thu Jul 30 12:25:06.699848 2026] [security2:error] [pid 3043526:tid 3043526] [client 185.115.101.11:58646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0kpuACfPBNcxAhJOMrQAAAAc"]
[Thu Jul 30 12:25:06.700110 2026] [security2:error] [pid 3043526:tid 3043526] [client 185.115.101.11:58646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0kpuACfPBNcxAhJOMrQAAAAc"]
[Thu Jul 30 12:25:06.715106 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.52:29572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:06.715723 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.52:29572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:07.320389 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.3:26320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:07.321012 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.3:26320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:07.630786 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.12:62618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:07.631420 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.12:62618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:07.946556 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.2:55586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:07.947202 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.2:55586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:08.280700 2026] [core:error] [pid 3039689:tid 3039689] [client 66.249.66.41:37897] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:08.280725 2026] [core:error] [pid 3039689:tid 3039689] [client 66.249.66.41:37897] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:09.051568 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.54:39376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.052225 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.54:39376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:09.180176 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.32:36280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.180825 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.32:36280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:09.192529 2026] [ssl:error] [pid 3065168:tid 3065168] (EAI 2)Name or service not known: [client 144.76.19.72:29214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:09.192565 2026] [ssl:error] [pid 3065168:tid 3065168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:09.247654 2026] [ssl:error] [pid 3059121:tid 3059121] (EAI 2)Name or service not known: [client 144.76.19.72:29224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:09.247698 2026] [ssl:error] [pid 3059121:tid 3059121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:09.361880 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.40:37234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.362529 2026] [authz_core:error] [pid 3041289:tid 3041289] [client 57.141.0.40:37234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:09.387530 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.13:26376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.388165 2026] [authz_core:error] [pid 3057697:tid 3057697] [client 57.141.0.13:26376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:09.432340 2026] [authz_core:error] [pid 3065168:tid 3065168] [client 57.141.0.23:29684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.432965 2026] [authz_core:error] [pid 3065168:tid 3065168] [client 57.141.0.23:29684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:09.592587 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.29:51676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.593227 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.29:51676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:09.901306 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.29:22166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.901925 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.29:22166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:09.984550 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.56:24978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:09.985201 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.56:24978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:10.135105 2026] [authz_core:error] [pid 3065168:tid 3065168] [client 57.141.0.9:59590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:10.135746 2026] [authz_core:error] [pid 3065168:tid 3065168] [client 57.141.0.9:59590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:10.265322 2026] [security2:error] [pid 3059121:tid 3059121] [client 103.172.45.8:44842] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0lnP6WbOTf-o0cC5cdAAAADQ"]
[Thu Jul 30 12:25:10.265381 2026] [security2:error] [pid 3059121:tid 3059121] [client 103.172.45.8:44842] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams0lnP6WbOTf-o0cC5cdAAAADQ"]
[Thu Jul 30 12:25:10.265688 2026] [security2:error] [pid 3059121:tid 3059121] [client 103.172.45.8:44842] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams0lnP6WbOTf-o0cC5cdAAAADQ"]
[Thu Jul 30 12:25:11.388764 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.52:34994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:11.389413 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.52:34994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:11.837880 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.41:26126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:11.838609 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.41:26126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:11.941125 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.16:27684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:11.941753 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.16:27684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:12.178514 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.65:53646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:12.179132 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.65:53646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:12.328425 2026] [ssl:error] [pid 3054942:tid 3054942] (EAI 2)Name or service not known: [client 144.76.19.72:25482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:12.328474 2026] [ssl:error] [pid 3054942:tid 3054942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:12.382708 2026] [ssl:error] [pid 3061627:tid 3061627] (EAI 2)Name or service not known: [client 144.76.19.72:25486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:12.382736 2026] [ssl:error] [pid 3061627:tid 3061627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:12.382834 2026] [core:error] [pid 3061567:tid 3061567] [client 45.205.1.124:64878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:12.382868 2026] [core:error] [pid 3061567:tid 3061567] [client 45.205.1.124:64878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:12.509316 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.16:27700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:12.509958 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.16:27700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:12.760370 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.8:26394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:12.761011 2026] [authz_core:error] [pid 3059121:tid 3059121] [client 57.141.0.8:26394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:13.318598 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.40:37252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:13.319226 2026] [authz_core:error] [pid 3041031:tid 3041031] [client 57.141.0.40:37252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:13.537841 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.25:34626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:13.538898 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.25:34626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:13.860380 2026] [authz_core:error] [pid 3064507:tid 3064507] [client 57.141.0.8:26404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:13.861005 2026] [authz_core:error] [pid 3064507:tid 3064507] [client 57.141.0.8:26404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:14.309359 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.65:53648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:14.309987 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.65:53648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:14.682209 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.42:35682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:14.682854 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.42:35682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:14.721810 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.52:34996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:14.722462 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.52:34996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:15.215585 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.9:56738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:15.216211 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.9:56738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:15.434360 2026] [ssl:error] [pid 3054890:tid 3054890] (EAI 2)Name or service not known: [client 144.76.19.72:25494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:15.434391 2026] [ssl:error] [pid 3054890:tid 3054890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:15.487136 2026] [ssl:error] [pid 3058024:tid 3058024] (EAI 2)Name or service not known: [client 144.76.19.72:25498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:15.487168 2026] [ssl:error] [pid 3058024:tid 3058024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:15.511159 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.21:50924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:15.511774 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.21:50924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:15.996767 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.6:51908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:15.997387 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.6:51908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:16.031484 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.62:28336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:16.032135 2026] [authz_core:error] [pid 3054941:tid 3054941] [client 57.141.0.62:28336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:16.109318 2026] [access_compat:error] [pid 3054822:tid 3054822] [client 176.241.66.87:62964] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:16.332496 2026] [core:error] [pid 3061567:tid 3061567] [client 66.249.66.167:43690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:16.332537 2026] [core:error] [pid 3061567:tid 3061567] [client 66.249.66.167:43690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:16.333697 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.9:56754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:16.334314 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.9:56754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:16.777883 2026] [access_compat:error] [pid 3064402:tid 3064402] [client 157.20.138.62:50445] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:17.199140 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.33:45426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:17.199762 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.33:45426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:17.344135 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.34:43232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:17.344757 2026] [authz_core:error] [pid 3048702:tid 3048702] [client 57.141.0.34:43232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:17.696605 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.68:22460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:17.697231 2026] [authz_core:error] [pid 3047200:tid 3047200] [client 57.141.0.68:22460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:17.725693 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.35:46686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:17.726308 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.35:46686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:18.114342 2026] [core:error] [pid 3057921:tid 3057921] [client 57.141.0.61:27630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:18.114372 2026] [core:error] [pid 3057921:tid 3057921] [client 57.141.0.61:27630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:18.263713 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.43:39522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:18.264339 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.43:39522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:18.551589 2026] [ssl:error] [pid 3052195:tid 3052195] (EAI 2)Name or service not known: [client 144.76.19.72:25502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:18.551615 2026] [ssl:error] [pid 3052195:tid 3052195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:18.607444 2026] [ssl:error] [pid 3043526:tid 3043526] (EAI 2)Name or service not known: [client 144.76.19.72:25508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:18.607469 2026] [ssl:error] [pid 3043526:tid 3043526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:19.034154 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.11:32408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:19.034772 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.11:32408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:19.503876 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.42:35692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:19.504515 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.42:35692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:19.721928 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.58:57430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:19.722556 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.58:57430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:19.960998 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.24:60330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:19.961646 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.24:60330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:20.294394 2026] [access_compat:error] [pid 3048702:tid 3048702] [client 125.176.202.122:57091] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:20.443735 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.55:22090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:20.444355 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.55:22090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:21.248740 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.21:50932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:21.249364 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.21:50932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:21.386109 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.63:43926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:21.386731 2026] [authz_core:error] [pid 3051647:tid 3051647] [client 57.141.0.63:43926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:21.433364 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.16:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:21.433983 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.16:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:21.451369 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.5:47592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:21.451981 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.5:47592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:21.701760 2026] [ssl:error] [pid 3038494:tid 3038494] (EAI 2)Name or service not known: [client 144.76.19.72:56982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:21.701781 2026] [ssl:error] [pid 3038494:tid 3038494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:21.757555 2026] [ssl:error] [pid 3054891:tid 3054891] (EAI 2)Name or service not known: [client 144.76.19.72:56986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:21.757580 2026] [ssl:error] [pid 3054891:tid 3054891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:21.852321 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.32:31896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:21.852944 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.32:31896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:21.876928 2026] [access_compat:error] [pid 3057921:tid 3057921] [client 176.241.66.87:55884] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:22.089907 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.49:51384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:22.090544 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.49:51384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:22.187328 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.29:40334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:22.187968 2026] [authz_core:error] [pid 3038494:tid 3038494] [client 57.141.0.29:40334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:22.670588 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.31:54760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:22.671216 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.31:54760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:23.111974 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.67:41734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:23.112675 2026] [authz_core:error] [pid 3058024:tid 3058024] [client 57.141.0.67:41734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:23.388100 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.50:57788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:23.388725 2026] [authz_core:error] [pid 3061141:tid 3061141] [client 57.141.0.50:57788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:23.393454 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.27:49042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:23.394060 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.27:49042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:24.004589 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.2:61158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:24.005223 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.2:61158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:24.823327 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.70:43224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:24.824009 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.70:43224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:24.858523 2026] [ssl:error] [pid 3065877:tid 3065877] (EAI 2)Name or service not known: [client 144.76.19.72:56992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:24.858559 2026] [ssl:error] [pid 3065877:tid 3065877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:24.911446 2026] [ssl:error] [pid 3052131:tid 3052131] (EAI 2)Name or service not known: [client 144.76.19.72:57004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:24.911469 2026] [ssl:error] [pid 3052131:tid 3052131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:24.991670 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.27:49048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:24.992289 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.27:49048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:25.424524 2026] [security2:error] [pid 3041180:tid 3041180] [client 185.191.171.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/author/revoracing/"] [unique_id "ams0pYykAHDpGAuYxDPk8AAAACY"]
[Thu Jul 30 12:25:25.532522 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.26:63978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:25.533142 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.26:63978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:25.568305 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.3:51626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:25.568936 2026] [authz_core:error] [pid 3064452:tid 3064452] [client 57.141.0.3:51626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:25.705952 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.46:38300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:25.706579 2026] [authz_core:error] [pid 3039689:tid 3039689] [client 57.141.0.46:38300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:26.164762 2026] [ssl:error] [pid 3061141:tid 3061141] (70014)End of file found: [client 216.73.216.199:33611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:26.323629 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.51:56058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:26.324253 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.51:56058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:26.394253 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.68:41308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:26.394941 2026] [authz_core:error] [pid 3053403:tid 3053403] [client 57.141.0.68:41308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:26.479836 2026] [ssl:error] [pid 3065812:tid 3065812] (70014)End of file found: [client 216.73.216.199:61177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:26.607770 2026] [access_compat:error] [pid 3065933:tid 3065933] [client 176.241.66.87:63899] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:27.098357 2026] [access_compat:error] [pid 3038043:tid 3038043] [client 45.158.164.139:59718] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:25:27.142428 2026] [authz_core:error] [pid 3065931:tid 3065931] [client 57.141.0.70:34464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:27.143060 2026] [authz_core:error] [pid 3065931:tid 3065931] [client 57.141.0.70:34464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:27.166018 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.41:30606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:27.166653 2026] [authz_core:error] [pid 3052131:tid 3052131] [client 57.141.0.41:30606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:27.268937 2026] [access_compat:error] [pid 3036117:tid 3036117] [client 157.20.138.62:51037] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:27.409738 2026] [ssl:error] [pid 3065877:tid 3065877] (70014)End of file found: [client 216.73.216.199:54927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:27.593278 2026] [authz_core:error] [pid 3065931:tid 3065931] [client 57.141.0.34:36780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:27.593912 2026] [authz_core:error] [pid 3065931:tid 3065931] [client 57.141.0.34:36780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:27.964523 2026] [ssl:error] [pid 3065932:tid 3065932] (EAI 2)Name or service not known: [client 144.76.19.72:57018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:27.964556 2026] [ssl:error] [pid 3065932:tid 3065932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:28.021532 2026] [ssl:error] [pid 3057697:tid 3057697] (EAI 2)Name or service not known: [client 144.76.19.72:57020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:28.021559 2026] [ssl:error] [pid 3057697:tid 3057697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:28.191448 2026] [security2:error] [pid 3054891:tid 3054891] [client 85.208.96.195:27580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11079.0.html"] [unique_id "ams0qE5KuDSa3A7jv08ewQAAACI"]
[Thu Jul 30 12:25:28.243061 2026] [authz_core:error] [pid 3064508:tid 3064508] [client 57.141.0.25:55092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:28.243696 2026] [authz_core:error] [pid 3064508:tid 3064508] [client 57.141.0.25:55092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:28.463848 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.37:27716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:28.464547 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.37:27716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:28.730580 2026] [authz_core:error] [pid 3065931:tid 3065931] [client 57.141.0.39:48276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:28.731198 2026] [authz_core:error] [pid 3065931:tid 3065931] [client 57.141.0.39:48276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:28.835543 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.60:41376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:28.836170 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.60:41376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:28.946529 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.66:31450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:28.947151 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.66:31450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:29.420784 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.27:49078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:29.421470 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.27:49078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:29.630243 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.14:51482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:29.631488 2026] [authz_core:error] [pid 3041180:tid 3041180] [client 57.141.0.14:51482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:30.184349 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.3:60836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:30.184983 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.3:60836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:30.427733 2026] [authz_core:error] [pid 3066113:tid 3066113] [client 57.141.0.61:32392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:30.428412 2026] [authz_core:error] [pid 3066113:tid 3066113] [client 57.141.0.61:32392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:30.984005 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.66:31458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:30.984641 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.66:31458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:31.076651 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:50412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:31.076676 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:31.181538 2026] [authz_core:error] [pid 3064506:tid 3064506] [client 57.141.0.41:30622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:31.182164 2026] [authz_core:error] [pid 3064506:tid 3064506] [client 57.141.0.41:30622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:31.199139 2026] [ssl:error] [pid 3052131:tid 3052131] (EAI 2)Name or service not known: [client 144.76.19.72:50426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:31.199165 2026] [ssl:error] [pid 3052131:tid 3052131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:31.206212 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.46:37340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:31.206823 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.46:37340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:31.317382 2026] [access_compat:error] [pid 3057921:tid 3057921] [client 125.176.202.122:57599] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:31.640040 2026] [core:error] [pid 3039689:tid 3039689] (13)Permission denied: [client 216.73.216.199:9777] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/i2c_piix4/sections/__param
[Thu Jul 30 12:25:32.138336 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.48:46288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:32.138961 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.48:46288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:32.241531 2026] [ssl:error] [pid 3061141:tid 3061141] (70014)End of file found: [client 216.73.216.199:64190] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:32.719393 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.53:29414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:32.720090 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.53:29414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:32.895710 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.26:33362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:32.896347 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.26:33362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:33.197031 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.65:57108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:33.197657 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.65:57108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:33.742894 2026] [ssl:error] [pid 3039689:tid 3039689] (70014)End of file found: [client 216.73.216.199:9777] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:33.862688 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.31:38332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:33.863305 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.31:38332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:34.020272 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.65:57114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:34.020883 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.65:57114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:34.039261 2026] [security2:error] [pid 3065168:tid 3065168] [client 34.125.84.50:35706] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "ams0rsLGvhvgIY4T-k3S5wAAAAA"]
[Thu Jul 30 12:25:34.039400 2026] [security2:error] [pid 3065168:tid 3065168] [client 34.125.84.50:35706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "ams0rsLGvhvgIY4T-k3S5wAAAAA"]
[Thu Jul 30 12:25:34.039609 2026] [security2:error] [pid 3065168:tid 3065168] [client 34.125.84.50:35706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rsLGvhvgIY4T-k3S5wAAAAA"]
[Thu Jul 30 12:25:34.042960 2026] [security2:error] [pid 3054761:tid 3054761] [client 34.125.84.50:35702] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "ams0rrpvasDKbBoyJt5c9QAAABE"]
[Thu Jul 30 12:25:34.043169 2026] [security2:error] [pid 3054761:tid 3054761] [client 34.125.84.50:35702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "ams0rrpvasDKbBoyJt5c9QAAABE"]
[Thu Jul 30 12:25:34.043358 2026] [security2:error] [pid 3054761:tid 3054761] [client 34.125.84.50:35702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rrpvasDKbBoyJt5c9QAAABE"]
[Thu Jul 30 12:25:34.045393 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:35722] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "ams0rtvJ2_gkZ0S9MzOXmwAAAAU"]
[Thu Jul 30 12:25:34.045533 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:35722] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "ams0rtvJ2_gkZ0S9MzOXmwAAAAU"]
[Thu Jul 30 12:25:34.045722 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:35722] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rtvJ2_gkZ0S9MzOXmwAAAAU"]
[Thu Jul 30 12:25:34.047361 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35734] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams0rryutpCbTVNQer-FtAAAACM"]
[Thu Jul 30 12:25:34.047574 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams0rryutpCbTVNQer-FtAAAACM"]
[Thu Jul 30 12:25:34.047775 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rryutpCbTVNQer-FtAAAACM"]
[Thu Jul 30 12:25:34.054161 2026] [security2:error] [pid 3064402:tid 3064402] [client 34.125.84.50:35738] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "ams0ro6NLH3MrdKihYtlIgAAAAE"]
[Thu Jul 30 12:25:34.054368 2026] [security2:error] [pid 3064402:tid 3064402] [client 34.125.84.50:35738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "ams0ro6NLH3MrdKihYtlIgAAAAE"]
[Thu Jul 30 12:25:34.054576 2026] [security2:error] [pid 3064402:tid 3064402] [client 34.125.84.50:35738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0ro6NLH3MrdKihYtlIgAAAAE"]
[Thu Jul 30 12:25:34.237645 2026] [ssl:error] [pid 3048702:tid 3048702] (70014)End of file found: [client 216.73.216.199:46618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:34.284742 2026] [ssl:error] [pid 3054761:tid 3054761] (EAI 2)Name or service not known: [client 144.76.19.72:50428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:34.284773 2026] [ssl:error] [pid 3054761:tid 3054761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:34.339457 2026] [ssl:error] [pid 3064402:tid 3064402] (EAI 2)Name or service not known: [client 144.76.19.72:50432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:34.339486 2026] [ssl:error] [pid 3064402:tid 3064402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:34.343287 2026] [core:error] [pid 3065168:tid 3065168] [client 57.141.0.50:24716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:34.343308 2026] [core:error] [pid 3065168:tid 3065168] [client 57.141.0.50:24716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:34.474367 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:35770] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "ams0rtvJ2_gkZ0S9MzOXnAAAAAU"]
[Thu Jul 30 12:25:34.474514 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:35770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "ams0rtvJ2_gkZ0S9MzOXnAAAAAU"]
[Thu Jul 30 12:25:34.474728 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:35770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rtvJ2_gkZ0S9MzOXnAAAAAU"]
[Thu Jul 30 12:25:34.479693 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35782] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "ams0rryutpCbTVNQer-FtQAAACM"]
[Thu Jul 30 12:25:34.479829 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "ams0rryutpCbTVNQer-FtQAAACM"]
[Thu Jul 30 12:25:34.480018 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rryutpCbTVNQer-FtQAAACM"]
[Thu Jul 30 12:25:34.707222 2026] [authz_core:error] [pid 3065933:tid 3065933] [client 57.141.0.8:57900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:34.707850 2026] [authz_core:error] [pid 3065933:tid 3065933] [client 57.141.0.8:57900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:34.709403 2026] [security2:error] [pid 3065931:tid 3065931] [client 34.125.84.50:35806] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "ams0rmS-S2axAVEhiIhXDgAAAB4"]
[Thu Jul 30 12:25:34.709536 2026] [security2:error] [pid 3065931:tid 3065931] [client 34.125.84.50:35806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "ams0rmS-S2axAVEhiIhXDgAAAB4"]
[Thu Jul 30 12:25:34.709729 2026] [security2:error] [pid 3065931:tid 3065931] [client 34.125.84.50:35806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rmS-S2axAVEhiIhXDgAAAB4"]
[Thu Jul 30 12:25:34.857745 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 66.249.66.34:62127] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:25:34.860418 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 66.249.66.34:62127] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:25:34.901747 2026] [security2:error] [pid 3054761:tid 3054761] [client 34.125.84.50:35818] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "ams0rrpvasDKbBoyJt5c9wAAABE"]
[Thu Jul 30 12:25:34.901946 2026] [security2:error] [pid 3054761:tid 3054761] [client 34.125.84.50:35818] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "ams0rrpvasDKbBoyJt5c9wAAABE"]
[Thu Jul 30 12:25:34.902158 2026] [security2:error] [pid 3054761:tid 3054761] [client 34.125.84.50:35818] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rrpvasDKbBoyJt5c9wAAABE"]
[Thu Jul 30 12:25:34.911017 2026] [security2:error] [pid 3066379:tid 3066379] [client 34.125.84.50:35830] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "ams0rixiyldMH_PDNgVpZwAAAAw"]
[Thu Jul 30 12:25:34.911228 2026] [security2:error] [pid 3066379:tid 3066379] [client 34.125.84.50:35830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "ams0rixiyldMH_PDNgVpZwAAAAw"]
[Thu Jul 30 12:25:34.911470 2026] [security2:error] [pid 3066379:tid 3066379] [client 34.125.84.50:35830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rixiyldMH_PDNgVpZwAAAAw"]
[Thu Jul 30 12:25:34.924853 2026] [security2:error] [pid 3065168:tid 3065168] [client 34.125.84.50:35842] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "ams0rsLGvhvgIY4T-k3S6gAAAAA"]
[Thu Jul 30 12:25:34.925030 2026] [security2:error] [pid 3065168:tid 3065168] [client 34.125.84.50:35842] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "ams0rsLGvhvgIY4T-k3S6gAAAAA"]
[Thu Jul 30 12:25:34.925244 2026] [security2:error] [pid 3065168:tid 3065168] [client 34.125.84.50:35842] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rsLGvhvgIY4T-k3S6gAAAAA"]
[Thu Jul 30 12:25:34.935753 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35846] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "ams0rryutpCbTVNQer-FtwAAACM"]
[Thu Jul 30 12:25:34.935881 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "ams0rryutpCbTVNQer-FtwAAACM"]
[Thu Jul 30 12:25:34.936087 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35846] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0rryutpCbTVNQer-FtwAAACM"]
[Thu Jul 30 12:25:35.130124 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.14:50566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:35.130743 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.14:50566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:35.322966 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.64:50060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:35.323590 2026] [authz_core:error] [pid 3061627:tid 3061627] [client 57.141.0.64:50060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:35.353610 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.38:33302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:35.354231 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.38:33302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:35.657386 2026] [security2:error] [pid 3052198:tid 3052198] [client 159.223.167.117:39742] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "ams0r00MlND_aGnfcOiXYwAAADk"]
[Thu Jul 30 12:25:35.657539 2026] [security2:error] [pid 3052198:tid 3052198] [client 159.223.167.117:39742] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "ams0r00MlND_aGnfcOiXYwAAADk"]
[Thu Jul 30 12:25:35.657730 2026] [security2:error] [pid 3052198:tid 3052198] [client 159.223.167.117:39742] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0r00MlND_aGnfcOiXYwAAADk"]
[Thu Jul 30 12:25:35.689463 2026] [security2:error] [pid 3054761:tid 3054761] [client 159.223.167.117:39738] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.git/HEAD"] [unique_id "ams0r7pvasDKbBoyJt5c-gAAABE"]
[Thu Jul 30 12:25:35.689654 2026] [security2:error] [pid 3054761:tid 3054761] [client 159.223.167.117:39738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.git/HEAD"] [unique_id "ams0r7pvasDKbBoyJt5c-gAAABE"]
[Thu Jul 30 12:25:35.689868 2026] [security2:error] [pid 3054761:tid 3054761] [client 159.223.167.117:39738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0r7pvasDKbBoyJt5c-gAAABE"]
[Thu Jul 30 12:25:35.864825 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.56:56698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:35.864824 2026] [authz_core:error] [pid 3066425:tid 3066425] [client 57.141.0.10:49020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:35.865485 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.56:56698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:35.865493 2026] [authz_core:error] [pid 3066425:tid 3066425] [client 57.141.0.10:49020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:35.994925 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35968] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "ams0r7yutpCbTVNQer-FuwAAACM"]
[Thu Jul 30 12:25:35.995059 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35968] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "ams0r7yutpCbTVNQer-FuwAAACM"]
[Thu Jul 30 12:25:35.995247 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "ams0r7yutpCbTVNQer-FuwAAACM"]
[Thu Jul 30 12:25:35.995459 2026] [security2:error] [pid 3065933:tid 3065933] [client 34.125.84.50:35968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0r7yutpCbTVNQer-FuwAAACM"]
[Thu Jul 30 12:25:36.257311 2026] [security2:error] [pid 3054939:tid 3054939] [client 34.125.84.50:35994] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "ams0sHc1i5lB4O4tF-H_lQAAACk"]
[Thu Jul 30 12:25:36.257582 2026] [security2:error] [pid 3054939:tid 3054939] [client 34.125.84.50:35994] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "ams0sHc1i5lB4O4tF-H_lQAAACk"]
[Thu Jul 30 12:25:36.257784 2026] [security2:error] [pid 3054939:tid 3054939] [client 34.125.84.50:35994] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0sHc1i5lB4O4tF-H_lQAAACk"]
[Thu Jul 30 12:25:36.508250 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.3:60842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:36.508876 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.3:60842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:36.689508 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:36042] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "ams0sNvJ2_gkZ0S9MzOXoQAAAAU"]
[Thu Jul 30 12:25:36.689699 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:36042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "ams0sNvJ2_gkZ0S9MzOXoQAAAAU"]
[Thu Jul 30 12:25:36.689907 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:36042] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0sNvJ2_gkZ0S9MzOXoQAAAAU"]
[Thu Jul 30 12:25:36.694438 2026] [security2:error] [pid 3054939:tid 3054939] [client 34.125.84.50:36034] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "ams0sHc1i5lB4O4tF-H_lgAAACk"]
[Thu Jul 30 12:25:36.694597 2026] [security2:error] [pid 3054939:tid 3054939] [client 34.125.84.50:36034] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "ams0sHc1i5lB4O4tF-H_lgAAACk"]
[Thu Jul 30 12:25:36.694782 2026] [security2:error] [pid 3054939:tid 3054939] [client 34.125.84.50:36034] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0sHc1i5lB4O4tF-H_lgAAACk"]
[Thu Jul 30 12:25:36.699008 2026] [security2:error] [pid 3043526:tid 3043526] [client 34.125.84.50:36056] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "ams0sJuACfPBNcxAhJOMuQAAAAc"]
[Thu Jul 30 12:25:36.699155 2026] [security2:error] [pid 3043526:tid 3043526] [client 34.125.84.50:36056] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "ams0sJuACfPBNcxAhJOMuQAAAAc"]
[Thu Jul 30 12:25:36.699349 2026] [security2:error] [pid 3043526:tid 3043526] [client 34.125.84.50:36056] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0sJuACfPBNcxAhJOMuQAAAAc"]
[Thu Jul 30 12:25:37.140431 2026] [security2:error] [pid 3057697:tid 3057697] [client 159.223.167.117:39980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/serviceAccountKey.json"] [unique_id "ams0saHMyryQK_NGjRJa7QAAABM"]
[Thu Jul 30 12:25:37.183601 2026] [security2:error] [pid 3059121:tid 3059121] [client 159.223.167.117:39840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/api/.env"] [unique_id "ams0sXP6WbOTf-o0cC5cfQAAADQ"]
[Thu Jul 30 12:25:37.183786 2026] [security2:error] [pid 3059121:tid 3059121] [client 159.223.167.117:39840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/api/.env"] [unique_id "ams0sXP6WbOTf-o0cC5cfQAAADQ"]
[Thu Jul 30 12:25:37.183995 2026] [security2:error] [pid 3059121:tid 3059121] [client 159.223.167.117:39840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sXP6WbOTf-o0cC5cfQAAADQ"]
[Thu Jul 30 12:25:37.216682 2026] [security2:error] [pid 3052198:tid 3052198] [client 159.223.167.117:40182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/aws-exports.js"] [unique_id "ams0sU0MlND_aGnfcOiXZgAAADk"]
[Thu Jul 30 12:25:37.459178 2026] [security2:error] [pid 3043526:tid 3043526] [client 159.223.167.117:39816] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.old"] [unique_id "ams0sZuACfPBNcxAhJOMugAAAAc"]
[Thu Jul 30 12:25:37.459322 2026] [security2:error] [pid 3043526:tid 3043526] [client 159.223.167.117:39816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.old"] [unique_id "ams0sZuACfPBNcxAhJOMugAAAAc"]
[Thu Jul 30 12:25:37.459516 2026] [security2:error] [pid 3043526:tid 3043526] [client 159.223.167.117:39816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sZuACfPBNcxAhJOMugAAAAc"]
[Thu Jul 30 12:25:37.710778 2026] [security2:error] [pid 3066464:tid 3066464] [client 159.223.167.117:40246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "ams0sUwhJHiSepnn2-prZQAAAC4"]
[Thu Jul 30 12:25:37.711850 2026] [security2:error] [pid 3066462:tid 3066462] [client 159.223.167.117:40306] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/wp-config.php"] [unique_id "ams0sVJAkIsNyLX-D5rTywAAACg"]
[Thu Jul 30 12:25:37.712039 2026] [security2:error] [pid 3066462:tid 3066462] [client 159.223.167.117:40306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/wp-config.php"] [unique_id "ams0sVJAkIsNyLX-D5rTywAAACg"]
[Thu Jul 30 12:25:37.712286 2026] [security2:error] [pid 3066462:tid 3066462] [client 159.223.167.117:40306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sVJAkIsNyLX-D5rTywAAACg"]
[Thu Jul 30 12:25:37.718992 2026] [security2:error] [pid 3066379:tid 3066379] [client 159.223.167.117:39812] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "ams0sSxiyldMH_PDNgVpawAAAAw"]
[Thu Jul 30 12:25:37.719168 2026] [security2:error] [pid 3066379:tid 3066379] [client 159.223.167.117:39812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.backup"] [unique_id "ams0sSxiyldMH_PDNgVpawAAAAw"]
[Thu Jul 30 12:25:37.719413 2026] [security2:error] [pid 3066379:tid 3066379] [client 159.223.167.117:39812] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sSxiyldMH_PDNgVpawAAAAw"]
[Thu Jul 30 12:25:37.814043 2026] [security2:error] [pid 3065932:tid 3065932] [client 159.223.167.117:39848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/public/.env"] [unique_id "ams0sdsunARk3PHEZTLKMwAAACA"]
[Thu Jul 30 12:25:37.814254 2026] [security2:error] [pid 3065932:tid 3065932] [client 159.223.167.117:39848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/public/.env"] [unique_id "ams0sdsunARk3PHEZTLKMwAAACA"]
[Thu Jul 30 12:25:37.814454 2026] [security2:error] [pid 3065932:tid 3065932] [client 159.223.167.117:39848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sdsunARk3PHEZTLKMwAAACA"]
[Thu Jul 30 12:25:38.212151 2026] [security2:error] [pid 3052195:tid 3052195] [client 159.223.167.117:39914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/config.yml"] [unique_id "ams0skj8IEMeNdkc_kiThQAAADM"]
[Thu Jul 30 12:25:38.421870 2026] [security2:error] [pid 3043526:tid 3043526] [client 159.223.167.117:39972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/service_account.json"] [unique_id "ams0spuACfPBNcxAhJOMuwAAAAc"]
[Thu Jul 30 12:25:38.423250 2026] [security2:error] [pid 3064507:tid 3064507] [client 159.223.167.117:39828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.staging"] [unique_id "ams0smQExg-N0ZCGMYeiygAAABQ"]
[Thu Jul 30 12:25:38.423383 2026] [security2:error] [pid 3064507:tid 3064507] [client 159.223.167.117:39828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.staging"] [unique_id "ams0smQExg-N0ZCGMYeiygAAABQ"]
[Thu Jul 30 12:25:38.423587 2026] [security2:error] [pid 3064507:tid 3064507] [client 159.223.167.117:39828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0smQExg-N0ZCGMYeiygAAABQ"]
[Thu Jul 30 12:25:38.509963 2026] [security2:error] [pid 3057921:tid 3057921] [client 159.223.167.117:40094] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "45.158.164.139"] [uri "/web.config"] [unique_id "ams0stPMMr9V9t4Q40qLaAAAAB0"]
[Thu Jul 30 12:25:38.510096 2026] [security2:error] [pid 3057921:tid 3057921] [client 159.223.167.117:40094] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/web.config"] [unique_id "ams0stPMMr9V9t4Q40qLaAAAAB0"]
[Thu Jul 30 12:25:38.510262 2026] [security2:error] [pid 3057921:tid 3057921] [client 159.223.167.117:40094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/web.config"] [unique_id "ams0stPMMr9V9t4Q40qLaAAAAB0"]
[Thu Jul 30 12:25:38.510469 2026] [security2:error] [pid 3057921:tid 3057921] [client 159.223.167.117:40094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0stPMMr9V9t4Q40qLaAAAAB0"]
[Thu Jul 30 12:25:38.513410 2026] [security2:error] [pid 3066379:tid 3066379] [client 159.223.167.117:39876] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/wp/.env"] [unique_id "ams0sixiyldMH_PDNgVpbAAAAAw"]
[Thu Jul 30 12:25:38.513571 2026] [security2:error] [pid 3066379:tid 3066379] [client 159.223.167.117:39876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/wp/.env"] [unique_id "ams0sixiyldMH_PDNgVpbAAAAAw"]
[Thu Jul 30 12:25:38.513760 2026] [security2:error] [pid 3066379:tid 3066379] [client 159.223.167.117:39876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sixiyldMH_PDNgVpbAAAAAw"]
[Thu Jul 30 12:25:38.561898 2026] [security2:error] [pid 3066462:tid 3066462] [client 159.223.167.117:39770] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "ams0slJAkIsNyLX-D5rTzAAAACg"]
[Thu Jul 30 12:25:38.562099 2026] [security2:error] [pid 3066462:tid 3066462] [client 159.223.167.117:39770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.local"] [unique_id "ams0slJAkIsNyLX-D5rTzAAAACg"]
[Thu Jul 30 12:25:38.562311 2026] [security2:error] [pid 3066462:tid 3066462] [client 159.223.167.117:39770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0slJAkIsNyLX-D5rTzAAAACg"]
[Thu Jul 30 12:25:38.581477 2026] [security2:error] [pid 3065932:tid 3065932] [client 159.223.167.117:39778] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "ams0stsunARk3PHEZTLKNAAAACA"]
[Thu Jul 30 12:25:38.581614 2026] [security2:error] [pid 3065932:tid 3065932] [client 159.223.167.117:39778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.production"] [unique_id "ams0stsunARk3PHEZTLKNAAAACA"]
[Thu Jul 30 12:25:38.581795 2026] [security2:error] [pid 3065932:tid 3065932] [client 159.223.167.117:39778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0stsunARk3PHEZTLKNAAAACA"]
[Thu Jul 30 12:25:38.660513 2026] [security2:error] [pid 3066498:tid 3066498] [client 159.223.167.117:39836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.prod"] [unique_id "ams0suKRCLNvbfAKqEKZ-QAAADc"]
[Thu Jul 30 12:25:38.660716 2026] [security2:error] [pid 3066498:tid 3066498] [client 159.223.167.117:39836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.prod"] [unique_id "ams0suKRCLNvbfAKqEKZ-QAAADc"]
[Thu Jul 30 12:25:38.660973 2026] [security2:error] [pid 3066498:tid 3066498] [client 159.223.167.117:39836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0suKRCLNvbfAKqEKZ-QAAADc"]
[Thu Jul 30 12:25:38.665086 2026] [security2:error] [pid 3066499:tid 3066499] [client 159.223.167.117:40290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/openapi.json"] [unique_id "ams0soUqq6cB67Scfaqr5wAAADg"]
[Thu Jul 30 12:25:38.689763 2026] [security2:error] [pid 3066502:tid 3066502] [client 159.223.167.117:39796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/.env.bak"] [unique_id "ams0suCw2L8In57Q4GWcFwAAADw"]
[Thu Jul 30 12:25:38.909539 2026] [security2:error] [pid 3041180:tid 3041180] [client 159.223.167.117:40248] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.git/HEAD"] [unique_id "ams0soykAHDpGAuYxDPk-AAAACY"]
[Thu Jul 30 12:25:38.909736 2026] [security2:error] [pid 3041180:tid 3041180] [client 159.223.167.117:40248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.git/HEAD"] [unique_id "ams0soykAHDpGAuYxDPk-AAAACY"]
[Thu Jul 30 12:25:38.909946 2026] [security2:error] [pid 3041180:tid 3041180] [client 159.223.167.117:40248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0soykAHDpGAuYxDPk-AAAACY"]
[Thu Jul 30 12:25:38.913100 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.54:47234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:38.913717 2026] [authz_core:error] [pid 3064451:tid 3064451] [client 57.141.0.54:47234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:38.914889 2026] [security2:error] [pid 3057697:tid 3057697] [client 159.223.167.117:39754] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "ams0sqHMyryQK_NGjRJa7wAAABM"]
[Thu Jul 30 12:25:38.915022 2026] [security2:error] [pid 3057697:tid 3057697] [client 159.223.167.117:39754] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "ams0sqHMyryQK_NGjRJa7wAAABM"]
[Thu Jul 30 12:25:38.915232 2026] [security2:error] [pid 3057697:tid 3057697] [client 159.223.167.117:39754] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sqHMyryQK_NGjRJa7wAAABM"]
[Thu Jul 30 12:25:38.960599 2026] [security2:error] [pid 3052198:tid 3052198] [client 159.223.167.117:39956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/api/config"] [unique_id "ams0sk0MlND_aGnfcOiXaAAAADk"]
[Thu Jul 30 12:25:39.151025 2026] [security2:error] [pid 3043526:tid 3043526] [client 159.223.167.117:39944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "45.158.164.139"] [uri "/settings.json"] [unique_id "ams0s5uACfPBNcxAhJOMvAAAAAc"]
[Thu Jul 30 12:25:39.164490 2026] [access_compat:error] [pid 3064451:tid 3064451] [client 176.241.66.87:64825] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:39.181113 2026] [authz_core:error] [pid 3066496:tid 3066496] [client 57.141.0.8:30168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.181757 2026] [authz_core:error] [pid 3066496:tid 3066496] [client 57.141.0.8:30168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.186679 2026] [security2:error] [pid 3066462:tid 3066462] [client 34.125.84.50:36102] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "ams0s1JAkIsNyLX-D5rTzQAAACg"]
[Thu Jul 30 12:25:39.186970 2026] [security2:error] [pid 3066462:tid 3066462] [client 34.125.84.50:36102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "ams0s1JAkIsNyLX-D5rTzQAAACg"]
[Thu Jul 30 12:25:39.187207 2026] [security2:error] [pid 3066462:tid 3066462] [client 34.125.84.50:36102] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0s1JAkIsNyLX-D5rTzQAAACg"]
[Thu Jul 30 12:25:39.199222 2026] [ssl:error] [pid 3066497:tid 3066497] (EAI 2)Name or service not known: [client 144.76.19.72:50440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:39.199250 2026] [ssl:error] [pid 3066497:tid 3066497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:39.228142 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.1:39038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.228771 2026] [authz_core:error] [pid 3064402:tid 3064402] [client 57.141.0.1:39038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.230457 2026] [security2:error] [pid 3052195:tid 3052195] [client 159.223.167.117:39782] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "ams0s0j8IEMeNdkc_kiThwAAADM"]
[Thu Jul 30 12:25:39.230602 2026] [security2:error] [pid 3052195:tid 3052195] [client 159.223.167.117:39782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.development"] [unique_id "ams0s0j8IEMeNdkc_kiThwAAADM"]
[Thu Jul 30 12:25:39.230803 2026] [security2:error] [pid 3052195:tid 3052195] [client 159.223.167.117:39782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0s0j8IEMeNdkc_kiThwAAADM"]
[Thu Jul 30 12:25:39.261944 2026] [security2:error] [pid 3065812:tid 3065812] [client 34.125.84.50:36092] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "ams0swmqlQEUsgrQU5--4QAAAAo"]
[Thu Jul 30 12:25:39.262181 2026] [security2:error] [pid 3065812:tid 3065812] [client 34.125.84.50:36092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "ams0swmqlQEUsgrQU5--4QAAAAo"]
[Thu Jul 30 12:25:39.262397 2026] [security2:error] [pid 3065812:tid 3065812] [client 34.125.84.50:36092] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0swmqlQEUsgrQU5--4QAAAAo"]
[Thu Jul 30 12:25:39.301578 2026] [authz_core:error] [pid 3066500:tid 3066500] [client 57.141.0.64:50076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.302224 2026] [authz_core:error] [pid 3066500:tid 3066500] [client 57.141.0.64:50076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.328641 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.26:33364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.329263 2026] [authz_core:error] [pid 3036117:tid 3036117] [client 57.141.0.26:33364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.342652 2026] [security2:error] [pid 3066463:tid 3066463] [client 34.125.84.50:36122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "ams0s6JwiH9E_D-y2y4hFAAAACw"]
[Thu Jul 30 12:25:39.342855 2026] [security2:error] [pid 3066463:tid 3066463] [client 34.125.84.50:36122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "ams0s6JwiH9E_D-y2y4hFAAAACw"]
[Thu Jul 30 12:25:39.343114 2026] [security2:error] [pid 3066463:tid 3066463] [client 34.125.84.50:36122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0s6JwiH9E_D-y2y4hFAAAACw"]
[Thu Jul 30 12:25:39.343946 2026] [security2:error] [pid 3066464:tid 3066464] [client 34.125.84.50:36114] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "ams0s0whJHiSepnn2-prZwAAAC4"]
[Thu Jul 30 12:25:39.344096 2026] [security2:error] [pid 3066464:tid 3066464] [client 34.125.84.50:36114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "ams0s0whJHiSepnn2-prZwAAAC4"]
[Thu Jul 30 12:25:39.344298 2026] [security2:error] [pid 3066464:tid 3066464] [client 34.125.84.50:36114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0s0whJHiSepnn2-prZwAAAC4"]
[Thu Jul 30 12:25:39.416687 2026] [security2:error] [pid 3065931:tid 3065931] [client 159.223.167.117:39862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/laravel/.env"] [unique_id "ams0s2S-S2axAVEhiIhXFAAAAB4"]
[Thu Jul 30 12:25:39.416854 2026] [security2:error] [pid 3065931:tid 3065931] [client 159.223.167.117:39862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/laravel/.env"] [unique_id "ams0s2S-S2axAVEhiIhXFAAAAB4"]
[Thu Jul 30 12:25:39.417048 2026] [security2:error] [pid 3065931:tid 3065931] [client 159.223.167.117:39862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0s2S-S2axAVEhiIhXFAAAAB4"]
[Thu Jul 30 12:25:39.429859 2026] [security2:error] [pid 3064507:tid 3064507] [client 159.223.167.117:40088] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/wp-config.php.bak"] [unique_id "ams0s2QExg-N0ZCGMYeiywAAABQ"]
[Thu Jul 30 12:25:39.430155 2026] [security2:error] [pid 3064507:tid 3064507] [client 159.223.167.117:40088] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/wp-config.php.bak"] [unique_id "ams0s2QExg-N0ZCGMYeiywAAABQ"]
[Thu Jul 30 12:25:39.430527 2026] [security2:error] [pid 3064507:tid 3064507] [client 159.223.167.117:40088] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0s2QExg-N0ZCGMYeiywAAABQ"]
[Thu Jul 30 12:25:39.470103 2026] [authz_core:error] [pid 3065932:tid 3065932] [client 57.141.0.60:57356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.470728 2026] [authz_core:error] [pid 3065932:tid 3065932] [client 57.141.0.60:57356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.492704 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.20:37088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.493360 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.20:37088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.592911 2026] [ssl:error] [pid 3061141:tid 3061141] (EAI 2)Name or service not known: [client 144.76.19.72:50446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:39.592937 2026] [ssl:error] [pid 3061141:tid 3061141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:39.595599 2026] [security2:error] [pid 3066465:tid 3066465] [client 159.223.167.117:40334] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/backend/.env"] [unique_id "ams0sztdW69RMMbaEn63xgAAAC8"]
[Thu Jul 30 12:25:39.595768 2026] [security2:error] [pid 3066465:tid 3066465] [client 159.223.167.117:40334] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/backend/.env"] [unique_id "ams0sztdW69RMMbaEn63xgAAAC8"]
[Thu Jul 30 12:25:39.595982 2026] [security2:error] [pid 3066465:tid 3066465] [client 159.223.167.117:40334] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0sztdW69RMMbaEn63xgAAAC8"]
[Thu Jul 30 12:25:39.602690 2026] [security2:error] [pid 3054891:tid 3054891] [client 159.223.167.117:40350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env.test"] [unique_id "ams0s05KuDSa3A7jv08exgAAACI"]
[Thu Jul 30 12:25:39.602822 2026] [security2:error] [pid 3054891:tid 3054891] [client 159.223.167.117:40350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env.test"] [unique_id "ams0s05KuDSa3A7jv08exgAAACI"]
[Thu Jul 30 12:25:39.603013 2026] [security2:error] [pid 3054891:tid 3054891] [client 159.223.167.117:40350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "ams0s05KuDSa3A7jv08exgAAACI"]
[Thu Jul 30 12:25:39.606565 2026] [access_compat:error] [pid 3066498:tid 3066498] [client 157.20.138.62:51630] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:39.663897 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.55:46264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.664534 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.55:46264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.761602 2026] [security2:error] [pid 3052198:tid 3052198] [client 34.125.84.50:36138] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "ams0s00MlND_aGnfcOiXaQAAADk"]
[Thu Jul 30 12:25:39.761817 2026] [security2:error] [pid 3052198:tid 3052198] [client 34.125.84.50:36138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "ams0s00MlND_aGnfcOiXaQAAADk"]
[Thu Jul 30 12:25:39.762030 2026] [security2:error] [pid 3052198:tid 3052198] [client 34.125.84.50:36138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0s00MlND_aGnfcOiXaQAAADk"]
[Thu Jul 30 12:25:39.796548 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:36144] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "ams0s9vJ2_gkZ0S9MzOXpAAAAAU"]
[Thu Jul 30 12:25:39.796742 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:36144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "ams0s9vJ2_gkZ0S9MzOXpAAAAAU"]
[Thu Jul 30 12:25:39.796937 2026] [security2:error] [pid 3053403:tid 3053403] [client 34.125.84.50:36144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0s9vJ2_gkZ0S9MzOXpAAAAAU"]
[Thu Jul 30 12:25:39.829964 2026] [authz_core:error] [pid 3066502:tid 3066502] [client 57.141.0.50:24722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.830601 2026] [authz_core:error] [pid 3066502:tid 3066502] [client 57.141.0.50:24722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:39.870351 2026] [security2:error] [pid 3064509:tid 3064509] [client 34.125.84.50:36148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "ams0sz6M7Kiz-QGXINwy-QAAABc"]
[Thu Jul 30 12:25:39.870523 2026] [security2:error] [pid 3064509:tid 3064509] [client 34.125.84.50:36148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "ams0sz6M7Kiz-QGXINwy-QAAABc"]
[Thu Jul 30 12:25:39.870729 2026] [security2:error] [pid 3064509:tid 3064509] [client 34.125.84.50:36148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0sz6M7Kiz-QGXINwy-QAAABc"]
[Thu Jul 30 12:25:39.905382 2026] [security2:error] [pid 3043526:tid 3043526] [client 34.125.84.50:36158] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "ams0s5uACfPBNcxAhJOMvQAAAAc"]
[Thu Jul 30 12:25:39.905563 2026] [security2:error] [pid 3043526:tid 3043526] [client 34.125.84.50:36158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "ams0s5uACfPBNcxAhJOMvQAAAAc"]
[Thu Jul 30 12:25:39.905752 2026] [security2:error] [pid 3043526:tid 3043526] [client 34.125.84.50:36158] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0s5uACfPBNcxAhJOMvQAAAAc"]
[Thu Jul 30 12:25:39.906975 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:36156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "ams0s0j8IEMeNdkc_kiTiAAAADM"]
[Thu Jul 30 12:25:39.907113 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:36156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "ams0s0j8IEMeNdkc_kiTiAAAADM"]
[Thu Jul 30 12:25:39.907299 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:36156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0s0j8IEMeNdkc_kiTiAAAADM"]
[Thu Jul 30 12:25:39.911253 2026] [access_compat:error] [pid 3066462:tid 3066462] [client 125.176.202.122:57885] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:39.917804 2026] [security2:error] [pid 3065877:tid 3065877] [client 34.125.84.50:36164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "ams0syaRXfySc0w8ar1tIQAAABk"]
[Thu Jul 30 12:25:39.917965 2026] [security2:error] [pid 3065877:tid 3065877] [client 34.125.84.50:36164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "ams0syaRXfySc0w8ar1tIQAAABk"]
[Thu Jul 30 12:25:39.918515 2026] [security2:error] [pid 3065877:tid 3065877] [client 34.125.84.50:36164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0syaRXfySc0w8ar1tIQAAABk"]
[Thu Jul 30 12:25:39.937368 2026] [authz_core:error] [pid 3066503:tid 3066503] [client 57.141.0.66:34600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:39.938005 2026] [authz_core:error] [pid 3066503:tid 3066503] [client 57.141.0.66:34600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:40.069766 2026] [ssl:error] [pid 3066464:tid 3066464] (70014)End of file found: [client 216.73.216.199:21943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:40.206121 2026] [security2:error] [pid 3057921:tid 3057921] [client 34.125.84.50:36178] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "ams0tNPMMr9V9t4Q40qLawAAAB0"]
[Thu Jul 30 12:25:40.206614 2026] [security2:error] [pid 3057921:tid 3057921] [client 34.125.84.50:36178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "ams0tNPMMr9V9t4Q40qLawAAAB0"]
[Thu Jul 30 12:25:40.206941 2026] [security2:error] [pid 3057921:tid 3057921] [client 34.125.84.50:36178] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0tNPMMr9V9t4Q40qLawAAAB0"]
[Thu Jul 30 12:25:40.258451 2026] [security2:error] [pid 3064507:tid 3064507] [client 34.125.84.50:36180] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "ams0tGQExg-N0ZCGMYeizAAAABQ"]
[Thu Jul 30 12:25:40.259000 2026] [security2:error] [pid 3064507:tid 3064507] [client 34.125.84.50:36180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "ams0tGQExg-N0ZCGMYeizAAAABQ"]
[Thu Jul 30 12:25:40.259356 2026] [security2:error] [pid 3064507:tid 3064507] [client 34.125.84.50:36180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0tGQExg-N0ZCGMYeizAAAABQ"]
[Thu Jul 30 12:25:40.365700 2026] [core:error] [pid 3052131:tid 3052131] (13)Permission denied: [client 216.73.216.199:55706] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/align
[Thu Jul 30 12:25:40.667520 2026] [core:error] [pid 3052131:tid 3052131] (13)Permission denied: [client 216.73.216.199:55706] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/total_objects
[Thu Jul 30 12:25:40.697660 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0tAhigOvBqkNxds4YpgAAADY"]
[Thu Jul 30 12:25:40.697870 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0tAhigOvBqkNxds4YpgAAADY"]
[Thu Jul 30 12:25:40.698126 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0tAhigOvBqkNxds4YpgAAADY"]
[Thu Jul 30 12:25:40.721162 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.25:57292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:40.721785 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.25:57292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:40.944533 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.37:59406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:40.945166 2026] [authz_core:error] [pid 3061567:tid 3061567] [client 57.141.0.37:59406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:41.165169 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.local"] [unique_id "ams0tQhigOvBqkNxds4YpwAAADY"]
[Thu Jul 30 12:25:41.165395 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.local"] [unique_id "ams0tQhigOvBqkNxds4YpwAAADY"]
[Thu Jul 30 12:25:41.165623 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.local"] [unique_id "ams0tQhigOvBqkNxds4YpwAAADY"]
[Thu Jul 30 12:25:41.269240 2026] [ssl:error] [pid 3052131:tid 3052131] (70014)End of file found: [client 216.73.216.199:55706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:41.389957 2026] [authz_core:error] [pid 3065877:tid 3065877] [client 57.141.0.37:59416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:41.390589 2026] [authz_core:error] [pid 3065877:tid 3065877] [client 57.141.0.37:59416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:41.570714 2026] [ssl:error] [pid 3066499:tid 3066499] (70014)End of file found: [client 216.73.216.199:31005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:41.599258 2026] [authz_core:error] [pid 3064509:tid 3064509] [client 57.141.0.63:40234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:41.599878 2026] [authz_core:error] [pid 3064509:tid 3064509] [client 57.141.0.63:40234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:41.625919 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.10:49038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:41.626540 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.10:49038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:41.633547 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "ams0tQhigOvBqkNxds4YqAAAADY"]
[Thu Jul 30 12:25:41.633708 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "ams0tQhigOvBqkNxds4YqAAAADY"]
[Thu Jul 30 12:25:41.633903 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "ams0tQhigOvBqkNxds4YqAAAADY"]
[Thu Jul 30 12:25:41.869083 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.64:50084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:41.869702 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.64:50084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:42.100907 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.development"] [unique_id "ams0tghigOvBqkNxds4YqQAAADY"]
[Thu Jul 30 12:25:42.101097 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.development"] [unique_id "ams0tghigOvBqkNxds4YqQAAADY"]
[Thu Jul 30 12:25:42.101305 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.development"] [unique_id "ams0tghigOvBqkNxds4YqQAAADY"]
[Thu Jul 30 12:25:42.379311 2026] [authz_core:error] [pid 3066539:tid 3066539] [client 57.141.0.58:57370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:42.379968 2026] [authz_core:error] [pid 3066539:tid 3066539] [client 57.141.0.58:57370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:42.469250 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.31:57412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:42.469884 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.31:57412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:42.533220 2026] [security2:error] [pid 3066541:tid 3066541] [client 34.125.84.50:36468] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "ams0thByYtxRmWc0sR2scwAAAE0"]
[Thu Jul 30 12:25:42.533470 2026] [security2:error] [pid 3066541:tid 3066541] [client 34.125.84.50:36468] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "ams0thByYtxRmWc0sR2scwAAAE0"]
[Thu Jul 30 12:25:42.533790 2026] [security2:error] [pid 3066541:tid 3066541] [client 34.125.84.50:36468] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0thByYtxRmWc0sR2scwAAAE0"]
[Thu Jul 30 12:25:42.568300 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.dev"] [unique_id "ams0tghigOvBqkNxds4YqgAAADY"]
[Thu Jul 30 12:25:42.568510 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.dev"] [unique_id "ams0tghigOvBqkNxds4YqgAAADY"]
[Thu Jul 30 12:25:42.568724 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.dev"] [unique_id "ams0tghigOvBqkNxds4YqgAAADY"]
[Thu Jul 30 12:25:42.664669 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:36490] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "ams0tkj8IEMeNdkc_kiTiwAAADM"]
[Thu Jul 30 12:25:42.664854 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:36490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "ams0tkj8IEMeNdkc_kiTiwAAADM"]
[Thu Jul 30 12:25:42.665053 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:36490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0tkj8IEMeNdkc_kiTiwAAADM"]
[Thu Jul 30 12:25:42.675356 2026] [ssl:error] [pid 3066424:tid 3066424] (EAI 2)Name or service not known: [client 144.76.19.72:36364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:42.675389 2026] [ssl:error] [pid 3066424:tid 3066424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:42.722597 2026] [authz_core:error] [pid 3066502:tid 3066502] [client 57.141.0.58:57384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:42.723218 2026] [authz_core:error] [pid 3066502:tid 3066502] [client 57.141.0.58:57384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:42.730311 2026] [ssl:error] [pid 3065931:tid 3065931] (EAI 2)Name or service not known: [client 144.76.19.72:36370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:42.730347 2026] [ssl:error] [pid 3065931:tid 3065931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:42.884342 2026] [authz_core:error] [pid 3066527:tid 3066527] [client 57.141.0.48:30208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:42.885050 2026] [authz_core:error] [pid 3066527:tid 3066527] [client 57.141.0.48:30208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:43.035891 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.prod"] [unique_id "ams0twhigOvBqkNxds4YqwAAADY"]
[Thu Jul 30 12:25:43.036125 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.prod"] [unique_id "ams0twhigOvBqkNxds4YqwAAADY"]
[Thu Jul 30 12:25:43.036361 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.prod"] [unique_id "ams0twhigOvBqkNxds4YqwAAADY"]
[Thu Jul 30 12:25:43.060839 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.16:64002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:43.061453 2026] [authz_core:error] [pid 3054891:tid 3054891] [client 57.141.0.16:64002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:43.487121 2026] [security2:error] [pid 3066534:tid 3066534] [client 34.125.84.50:36548] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env"] [unique_id "ams0t8UUQ-GJqjsnesAc2wAAAEY"]
[Thu Jul 30 12:25:43.487371 2026] [security2:error] [pid 3066534:tid 3066534] [client 34.125.84.50:36548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env"] [unique_id "ams0t8UUQ-GJqjsnesAc2wAAAEY"]
[Thu Jul 30 12:25:43.487659 2026] [security2:error] [pid 3066534:tid 3066534] [client 34.125.84.50:36548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0t8UUQ-GJqjsnesAc2wAAAEY"]
[Thu Jul 30 12:25:43.752617 2026] [access_compat:error] [pid 3066533:tid 3066533] [client 125.176.202.122:58113] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:43.789531 2026] [security2:error] [pid 3066540:tid 3066540] [client 34.125.84.50:36566] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "ams0t2R71AqUhV-ZZGhSFgAAAEw"]
[Thu Jul 30 12:25:43.789698 2026] [security2:error] [pid 3066540:tid 3066540] [client 34.125.84.50:36566] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "ams0t2R71AqUhV-ZZGhSFgAAAEw"]
[Thu Jul 30 12:25:43.789915 2026] [security2:error] [pid 3066540:tid 3066540] [client 34.125.84.50:36566] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0t2R71AqUhV-ZZGhSFgAAAEw"]
[Thu Jul 30 12:25:43.792621 2026] [security2:error] [pid 3066465:tid 3066465] [client 34.125.84.50:36554] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "ams0tztdW69RMMbaEn63yQAAAC8"]
[Thu Jul 30 12:25:43.792853 2026] [security2:error] [pid 3066465:tid 3066465] [client 34.125.84.50:36554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "ams0tztdW69RMMbaEn63yQAAAC8"]
[Thu Jul 30 12:25:43.793091 2026] [security2:error] [pid 3066465:tid 3066465] [client 34.125.84.50:36554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0tztdW69RMMbaEn63yQAAAC8"]
[Thu Jul 30 12:25:43.948538 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.test"] [unique_id "ams0twhigOvBqkNxds4YrAAAADY"]
[Thu Jul 30 12:25:43.948814 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.test"] [unique_id "ams0twhigOvBqkNxds4YrAAAADY"]
[Thu Jul 30 12:25:43.949039 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.test"] [unique_id "ams0twhigOvBqkNxds4YrAAAADY"]
[Thu Jul 30 12:25:44.056577 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:59648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "ams0uEj8IEMeNdkc_kiTjAAAADM"]
[Thu Jul 30 12:25:44.056764 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:59648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "ams0uEj8IEMeNdkc_kiTjAAAADM"]
[Thu Jul 30 12:25:44.056960 2026] [security2:error] [pid 3052195:tid 3052195] [client 34.125.84.50:59648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uEj8IEMeNdkc_kiTjAAAADM"]
[Thu Jul 30 12:25:44.229667 2026] [security2:error] [pid 3066496:tid 3066496] [client 34.125.84.50:59656] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "ams0uFjh2lCYTV53WS6mwgAAADU"]
[Thu Jul 30 12:25:44.229867 2026] [security2:error] [pid 3066496:tid 3066496] [client 34.125.84.50:59656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "ams0uFjh2lCYTV53WS6mwgAAADU"]
[Thu Jul 30 12:25:44.230115 2026] [security2:error] [pid 3066496:tid 3066496] [client 34.125.84.50:59656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uFjh2lCYTV53WS6mwgAAADU"]
[Thu Jul 30 12:25:44.305456 2026] [authz_core:error] [pid 3066530:tid 3066530] [client 57.141.0.16:64016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:44.306133 2026] [authz_core:error] [pid 3066530:tid 3066530] [client 57.141.0.16:64016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:44.306476 2026] [authz_core:error] [pid 3062690:tid 3062690] [client 57.141.0.40:32648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:44.307378 2026] [authz_core:error] [pid 3062690:tid 3062690] [client 57.141.0.40:32648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:44.322438 2026] [authz_core:error] [pid 3066462:tid 3066462] [client 57.141.0.36:36338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:44.323046 2026] [authz_core:error] [pid 3066462:tid 3066462] [client 57.141.0.36:36338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:44.397168 2026] [security2:error] [pid 3066542:tid 3066542] [client 34.125.84.50:59658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "ams0uOzwxMRk-dKe7S2JIQAAAE4"]
[Thu Jul 30 12:25:44.397363 2026] [security2:error] [pid 3066542:tid 3066542] [client 34.125.84.50:59658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "ams0uOzwxMRk-dKe7S2JIQAAAE4"]
[Thu Jul 30 12:25:44.397595 2026] [security2:error] [pid 3066542:tid 3066542] [client 34.125.84.50:59658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uOzwxMRk-dKe7S2JIQAAAE4"]
[Thu Jul 30 12:25:44.398666 2026] [security2:error] [pid 3051647:tid 3051647] [client 34.125.84.50:59668] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "ams0uM2EK4yvpaFUzy8sNAAAABA"]
[Thu Jul 30 12:25:44.398787 2026] [security2:error] [pid 3051647:tid 3051647] [client 34.125.84.50:59668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "ams0uM2EK4yvpaFUzy8sNAAAABA"]
[Thu Jul 30 12:25:44.398966 2026] [security2:error] [pid 3051647:tid 3051647] [client 34.125.84.50:59668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uM2EK4yvpaFUzy8sNAAAABA"]
[Thu Jul 30 12:25:44.407925 2026] [security2:error] [pid 3066529:tid 3066529] [client 34.125.84.50:59690] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "ams0uK_tZaLZMTVTB1qGPwAAAEE"]
[Thu Jul 30 12:25:44.408056 2026] [security2:error] [pid 3066529:tid 3066529] [client 34.125.84.50:59690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "ams0uK_tZaLZMTVTB1qGPwAAAEE"]
[Thu Jul 30 12:25:44.408277 2026] [security2:error] [pid 3066529:tid 3066529] [client 34.125.84.50:59690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uK_tZaLZMTVTB1qGPwAAAEE"]
[Thu Jul 30 12:25:44.415931 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.staging"] [unique_id "ams0uAhigOvBqkNxds4YrQAAADY"]
[Thu Jul 30 12:25:44.416089 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.staging"] [unique_id "ams0uAhigOvBqkNxds4YrQAAADY"]
[Thu Jul 30 12:25:44.416287 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.staging"] [unique_id "ams0uAhigOvBqkNxds4YrQAAADY"]
[Thu Jul 30 12:25:44.738213 2026] [security2:error] [pid 3066502:tid 3066502] [client 34.125.84.50:59704] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "ams0uOCw2L8In57Q4GWcHQAAADw"]
[Thu Jul 30 12:25:44.738405 2026] [security2:error] [pid 3066502:tid 3066502] [client 34.125.84.50:59704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "ams0uOCw2L8In57Q4GWcHQAAADw"]
[Thu Jul 30 12:25:44.738622 2026] [security2:error] [pid 3066502:tid 3066502] [client 34.125.84.50:59704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uOCw2L8In57Q4GWcHQAAADw"]
[Thu Jul 30 12:25:44.784202 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.20:62722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:44.784823 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.20:62722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:44.838225 2026] [security2:error] [pid 3066540:tid 3066540] [client 34.125.84.50:59736] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "ams0uGR71AqUhV-ZZGhSFwAAAEw"]
[Thu Jul 30 12:25:44.838422 2026] [security2:error] [pid 3066540:tid 3066540] [client 34.125.84.50:59736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "ams0uGR71AqUhV-ZZGhSFwAAAEw"]
[Thu Jul 30 12:25:44.838647 2026] [security2:error] [pid 3066540:tid 3066540] [client 34.125.84.50:59736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uGR71AqUhV-ZZGhSFwAAAEw"]
[Thu Jul 30 12:25:44.850899 2026] [security2:error] [pid 3061567:tid 3061567] [client 34.125.84.50:59764] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "ams0uPkKDxrgsnL6IPJYJwAAAA4"]
[Thu Jul 30 12:25:44.851051 2026] [security2:error] [pid 3061567:tid 3061567] [client 34.125.84.50:59764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "ams0uPkKDxrgsnL6IPJYJwAAAA4"]
[Thu Jul 30 12:25:44.851266 2026] [security2:error] [pid 3061567:tid 3061567] [client 34.125.84.50:59764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uPkKDxrgsnL6IPJYJwAAAA4"]
[Thu Jul 30 12:25:44.884632 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.backup"] [unique_id "ams0uAhigOvBqkNxds4YrgAAADY"]
[Thu Jul 30 12:25:44.885012 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.backup"] [unique_id "ams0uAhigOvBqkNxds4YrgAAADY"]
[Thu Jul 30 12:25:44.885446 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.backup"] [unique_id "ams0uAhigOvBqkNxds4YrgAAADY"]
[Thu Jul 30 12:25:44.899442 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.14:56428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:44.900074 2026] [authz_core:error] [pid 3052195:tid 3052195] [client 57.141.0.14:56428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:45.272893 2026] [security2:error] [pid 3066462:tid 3066462] [client 34.125.84.50:59814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cms.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "ams0uVJAkIsNyLX-D5rT0gAAACg"]
[Thu Jul 30 12:25:45.273030 2026] [security2:error] [pid 3066462:tid 3066462] [client 34.125.84.50:59814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "ams0uVJAkIsNyLX-D5rT0gAAACg"]
[Thu Jul 30 12:25:45.273235 2026] [security2:error] [pid 3066462:tid 3066462] [client 34.125.84.50:59814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uVJAkIsNyLX-D5rT0gAAACg"]
[Thu Jul 30 12:25:45.352890 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.save"] [unique_id "ams0uQhigOvBqkNxds4YrwAAADY"]
[Thu Jul 30 12:25:45.353157 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.save"] [unique_id "ams0uQhigOvBqkNxds4YrwAAADY"]
[Thu Jul 30 12:25:45.353453 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.save"] [unique_id "ams0uQhigOvBqkNxds4YrwAAADY"]
[Thu Jul 30 12:25:45.433905 2026] [security2:error] [pid 3066529:tid 3066529] [client 34.125.84.50:59830] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "ams0ua_tZaLZMTVTB1qGQAAAAEE"]
[Thu Jul 30 12:25:45.434196 2026] [security2:error] [pid 3066529:tid 3066529] [client 34.125.84.50:59830] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "ams0ua_tZaLZMTVTB1qGQAAAAEE"]
[Thu Jul 30 12:25:45.434393 2026] [security2:error] [pid 3066529:tid 3066529] [client 34.125.84.50:59830] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0ua_tZaLZMTVTB1qGQAAAAEE"]
[Thu Jul 30 12:25:45.580384 2026] [authz_core:error] [pid 3065877:tid 3065877] [client 57.141.0.61:62154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:45.581489 2026] [authz_core:error] [pid 3065877:tid 3065877] [client 57.141.0.61:62154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:45.702355 2026] [security2:error] [pid 3059121:tid 3059121] [client 34.125.84.50:59850] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "ams0uXP6WbOTf-o0cC5chwAAADQ"]
[Thu Jul 30 12:25:45.702645 2026] [security2:error] [pid 3059121:tid 3059121] [client 34.125.84.50:59850] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "ams0uXP6WbOTf-o0cC5chwAAADQ"]
[Thu Jul 30 12:25:45.702838 2026] [security2:error] [pid 3059121:tid 3059121] [client 34.125.84.50:59850] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0uXP6WbOTf-o0cC5chwAAADQ"]
[Thu Jul 30 12:25:45.744099 2026] [security2:error] [pid 3041289:tid 3041289] [client 34.125.84.50:59874] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cms.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "ams0ubbhpFG_qPHCh-c3WQAAADE"]
[Thu Jul 30 12:25:45.744308 2026] [security2:error] [pid 3041289:tid 3041289] [client 34.125.84.50:59874] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cms.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "ams0ubbhpFG_qPHCh-c3WQAAADE"]
[Thu Jul 30 12:25:45.744601 2026] [security2:error] [pid 3041289:tid 3041289] [client 34.125.84.50:59874] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "cms.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "ams0ubbhpFG_qPHCh-c3WQAAADE"]
[Thu Jul 30 12:25:45.782717 2026] [ssl:error] [pid 3062504:tid 3062504] (EAI 2)Name or service not known: [client 144.76.19.72:36374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:45.782739 2026] [ssl:error] [pid 3062504:tid 3062504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:45.820876 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.old"] [unique_id "ams0uQhigOvBqkNxds4YsAAAADY"]
[Thu Jul 30 12:25:45.821131 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.old"] [unique_id "ams0uQhigOvBqkNxds4YsAAAADY"]
[Thu Jul 30 12:25:45.821426 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.old"] [unique_id "ams0uQhigOvBqkNxds4YsAAAADY"]
[Thu Jul 30 12:25:45.838524 2026] [ssl:error] [pid 3057697:tid 3057697] (EAI 2)Name or service not known: [client 144.76.19.72:36378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:45.838549 2026] [ssl:error] [pid 3057697:tid 3057697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:45.963025 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.19:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:45.963661 2026] [authz_core:error] [pid 3043526:tid 3043526] [client 57.141.0.19:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:45.991327 2026] [security2:error] [pid 3066540:tid 3066540] [client 43.153.49.151:48934] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brightredsocks.com"] [uri "/"] [unique_id "ams0uWR71AqUhV-ZZGhSGAAAAEw"]
[Thu Jul 30 12:25:45.992218 2026] [core:crit] [pid 3066540:tid 3066540] (13)Permission denied: [client 43.153.49.151:48934] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 12:25:45.992258 2026] [authz_core:error] [pid 3066540:tid 3066540] [client 43.153.49.151:48934] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 12:25:45.992620 2026] [core:crit] [pid 3066540:tid 3066540] (13)Permission denied: [client 43.153.49.151:48934] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 12:25:45.992638 2026] [core:crit] [pid 3066540:tid 3066540] (13)Permission denied: [client 43.153.49.151:48934] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 12:25:45.992672 2026] [core:crit] [pid 3066540:tid 3066540] (13)Permission denied: [client 43.153.49.151:48934] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 12:25:46.267367 2026] [authz_core:error] [pid 3066530:tid 3066530] [client 57.141.0.55:45854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:46.267991 2026] [authz_core:error] [pid 3066530:tid 3066530] [client 57.141.0.55:45854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:46.288798 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.bak"] [unique_id "ams0ughigOvBqkNxds4YsQAAADY"]
[Thu Jul 30 12:25:46.289004 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.bak"] [unique_id "ams0ughigOvBqkNxds4YsQAAADY"]
[Thu Jul 30 12:25:46.289248 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.bak"] [unique_id "ams0ughigOvBqkNxds4YsQAAADY"]
[Thu Jul 30 12:25:46.533977 2026] [authz_core:error] [pid 3066531:tid 3066531] [client 57.141.0.37:59458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:46.534685 2026] [authz_core:error] [pid 3066531:tid 3066531] [client 57.141.0.37:59458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:46.756583 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.tmp"] [unique_id "ams0ughigOvBqkNxds4YsgAAADY"]
[Thu Jul 30 12:25:46.756804 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.tmp"] [unique_id "ams0ughigOvBqkNxds4YsgAAADY"]
[Thu Jul 30 12:25:46.757050 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.tmp"] [unique_id "ams0ughigOvBqkNxds4YsgAAADY"]
[Thu Jul 30 12:25:46.806094 2026] [authz_core:error] [pid 3066496:tid 3066496] [client 57.141.0.7:64498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:46.806712 2026] [authz_core:error] [pid 3066496:tid 3066496] [client 57.141.0.7:64498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:47.224289 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.swp"] [unique_id "ams0uwhigOvBqkNxds4YswAAADY"]
[Thu Jul 30 12:25:47.224513 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.swp"] [unique_id "ams0uwhigOvBqkNxds4YswAAADY"]
[Thu Jul 30 12:25:47.224749 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.swp"] [unique_id "ams0uwhigOvBqkNxds4YswAAADY"]
[Thu Jul 30 12:25:47.590679 2026] [authz_core:error] [pid 3066500:tid 3066500] [client 57.141.0.51:42742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:47.591302 2026] [authz_core:error] [pid 3066500:tid 3066500] [client 57.141.0.51:42742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:47.680492 2026] [access_compat:error] [pid 3057697:tid 3057697] [client 176.241.66.87:57292] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:47.691942 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env~"] [unique_id "ams0uwhigOvBqkNxds4YtAAAADY"]
[Thu Jul 30 12:25:47.692162 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env~"] [unique_id "ams0uwhigOvBqkNxds4YtAAAADY"]
[Thu Jul 30 12:25:47.692375 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env~"] [unique_id "ams0uwhigOvBqkNxds4YtAAAADY"]
[Thu Jul 30 12:25:47.746250 2026] [authz_core:error] [pid 3066540:tid 3066540] [client 57.141.0.27:22648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:47.746928 2026] [authz_core:error] [pid 3066540:tid 3066540] [client 57.141.0.27:22648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:47.878359 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.51:42746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:47.879042 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.51:42746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:48.399687 2026] [access_compat:error] [pid 3066499:tid 3066499] [client 157.20.138.62:52227] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:48.415470 2026] [authz_core:error] [pid 3062690:tid 3062690] [client 57.141.0.62:54080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:48.416171 2026] [authz_core:error] [pid 3062690:tid 3062690] [client 57.141.0.62:54080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:48.506731 2026] [authz_core:error] [pid 3066425:tid 3066425] [client 57.141.0.19:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:48.507356 2026] [authz_core:error] [pid 3066425:tid 3066425] [client 57.141.0.19:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:48.579717 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.example"] [unique_id "ams0vAhigOvBqkNxds4YtQAAADY"]
[Thu Jul 30 12:25:48.579888 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.example"] [unique_id "ams0vAhigOvBqkNxds4YtQAAADY"]
[Thu Jul 30 12:25:48.580096 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.example"] [unique_id "ams0vAhigOvBqkNxds4YtQAAADY"]
[Thu Jul 30 12:25:48.700609 2026] [authz_core:error] [pid 3066535:tid 3066535] [client 57.141.0.71:30640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:48.701227 2026] [authz_core:error] [pid 3066535:tid 3066535] [client 57.141.0.71:30640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:48.895614 2026] [ssl:error] [pid 3066500:tid 3066500] (EAI 2)Name or service not known: [client 144.76.19.72:36388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:48.895648 2026] [ssl:error] [pid 3066500:tid 3066500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:48.951311 2026] [ssl:error] [pid 3061097:tid 3061097] (EAI 2)Name or service not known: [client 144.76.19.72:36400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:48.951342 2026] [ssl:error] [pid 3061097:tid 3061097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:48.955322 2026] [authz_core:error] [pid 3064508:tid 3064508] [client 57.141.0.53:54396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:48.955939 2026] [authz_core:error] [pid 3064508:tid 3064508] [client 57.141.0.53:54396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:49.047120 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.sample"] [unique_id "ams0vQhigOvBqkNxds4YtgAAADY"]
[Thu Jul 30 12:25:49.047324 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.sample"] [unique_id "ams0vQhigOvBqkNxds4YtgAAADY"]
[Thu Jul 30 12:25:49.047559 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.sample"] [unique_id "ams0vQhigOvBqkNxds4YtgAAADY"]
[Thu Jul 30 12:25:49.098178 2026] [authz_core:error] [pid 3066465:tid 3066465] [client 57.141.0.30:62510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:49.098813 2026] [authz_core:error] [pid 3066465:tid 3066465] [client 57.141.0.30:62510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:49.311640 2026] [ssl:error] [pid 3066537:tid 3066537] (70014)End of file found: [client 216.73.216.199:45493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:49.514402 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.dist"] [unique_id "ams0vQhigOvBqkNxds4YtwAAADY"]
[Thu Jul 30 12:25:49.514616 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.dist"] [unique_id "ams0vQhigOvBqkNxds4YtwAAADY"]
[Thu Jul 30 12:25:49.514833 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.dist"] [unique_id "ams0vQhigOvBqkNxds4YtwAAADY"]
[Thu Jul 30 12:25:49.852869 2026] [security2:error] [pid 3062690:tid 3062690] [client 147.182.149.75:48670] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0vbjBWMSq6Ue5jKyRfgAAACs"]
[Thu Jul 30 12:25:49.853091 2026] [security2:error] [pid 3062690:tid 3062690] [client 147.182.149.75:48670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0vbjBWMSq6Ue5jKyRfgAAACs"]
[Thu Jul 30 12:25:49.853297 2026] [security2:error] [pid 3062690:tid 3062690] [client 147.182.149.75:48670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0vbjBWMSq6Ue5jKyRfgAAACs"]
[Thu Jul 30 12:25:49.981765 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.template"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.template"] [unique_id "ams0vQhigOvBqkNxds4YuAAAADY"]
[Thu Jul 30 12:25:49.981964 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.template"] [unique_id "ams0vQhigOvBqkNxds4YuAAAADY"]
[Thu Jul 30 12:25:49.982171 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.template"] [unique_id "ams0vQhigOvBqkNxds4YuAAAADY"]
[Thu Jul 30 12:25:50.160031 2026] [security2:error] [pid 3066535:tid 3066535] [client 85.208.98.20:51626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/dumbell-fiyat-7.5-kg-k.html"] [unique_id "ams0vn9seKxACR5Wy4-02gAAAEc"]
[Thu Jul 30 12:25:50.207842 2026] [authz_core:error] [pid 3065877:tid 3065877] [client 57.141.0.18:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:50.208570 2026] [authz_core:error] [pid 3065877:tid 3065877] [client 57.141.0.18:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:50.307344 2026] [access_compat:error] [pid 3061567:tid 3061567] [client 125.176.202.122:58387] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:50.449898 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.production.local"] [unique_id "ams0vghigOvBqkNxds4YuQAAADY"]
[Thu Jul 30 12:25:50.450118 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.production.local"] [unique_id "ams0vghigOvBqkNxds4YuQAAADY"]
[Thu Jul 30 12:25:50.450337 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.production.local"] [unique_id "ams0vghigOvBqkNxds4YuQAAADY"]
[Thu Jul 30 12:25:50.622150 2026] [authz_core:error] [pid 3066465:tid 3066465] [client 57.141.0.17:50444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:50.622779 2026] [authz_core:error] [pid 3066465:tid 3066465] [client 57.141.0.17:50444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:50.665655 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 66.249.66.33:45614] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:25:50.668332 2026] [authz_core:error] [pid 3058612:tid 3058612] [client 66.249.66.33:45614] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:25:50.698756 2026] [ssl:error] [pid 3043526:tid 3043526] (70014)End of file found: [client 216.73.216.199:54175] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:25:50.805707 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.4:23284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:50.806332 2026] [authz_core:error] [pid 3054761:tid 3054761] [client 57.141.0.4:23284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:51.257560 2026] [authz_core:error] [pid 3066496:tid 3066496] [client 57.141.0.17:50460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:51.258194 2026] [authz_core:error] [pid 3066496:tid 3066496] [client 57.141.0.17:50460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:51.298846 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.11:44826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:51.299468 2026] [authz_core:error] [pid 3054890:tid 3054890] [client 57.141.0.11:44826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:51.339465 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.development.local"] [unique_id "ams0vwhigOvBqkNxds4YugAAADY"]
[Thu Jul 30 12:25:51.339656 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.development.local"] [unique_id "ams0vwhigOvBqkNxds4YugAAADY"]
[Thu Jul 30 12:25:51.339870 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.development.local"] [unique_id "ams0vwhigOvBqkNxds4YugAAADY"]
[Thu Jul 30 12:25:51.498083 2026] [authz_core:error] [pid 3066535:tid 3066535] [client 57.141.0.13:23454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:51.498885 2026] [authz_core:error] [pid 3066535:tid 3066535] [client 57.141.0.13:23454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:51.754619 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.51:42768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:51.755667 2026] [authz_core:error] [pid 3038043:tid 3038043] [client 57.141.0.51:42768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:51.785494 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.44:21104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:51.786168 2026] [authz_core:error] [pid 3061097:tid 3061097] [client 57.141.0.44:21104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:51.786365 2026] [security2:error] [pid 3066539:tid 3066539] [client 147.182.200.94:49738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0v-MY8jop_ZDsx9Zc4AAAAEs"]
[Thu Jul 30 12:25:51.786530 2026] [security2:error] [pid 3066539:tid 3066539] [client 147.182.200.94:49738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0v-MY8jop_ZDsx9Zc4AAAAEs"]
[Thu Jul 30 12:25:51.786718 2026] [security2:error] [pid 3066539:tid 3066539] [client 147.182.200.94:49738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0v-MY8jop_ZDsx9Zc4AAAAEs"]
[Thu Jul 30 12:25:51.806663 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.test.local"] [unique_id "ams0vwhigOvBqkNxds4YuwAAADY"]
[Thu Jul 30 12:25:51.806845 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.test.local"] [unique_id "ams0vwhigOvBqkNxds4YuwAAADY"]
[Thu Jul 30 12:25:51.807052 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.test.local"] [unique_id "ams0vwhigOvBqkNxds4YuwAAADY"]
[Thu Jul 30 12:25:52.090080 2026] [ssl:error] [pid 3064507:tid 3064507] (EAI 2)Name or service not known: [client 144.76.19.72:39160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:52.090126 2026] [ssl:error] [pid 3064507:tid 3064507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:52.147765 2026] [ssl:error] [pid 3039689:tid 3039689] (EAI 2)Name or service not known: [client 144.76.19.72:39162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:52.147800 2026] [ssl:error] [pid 3039689:tid 3039689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:52.273928 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.envrc"] [unique_id "ams0wAhigOvBqkNxds4YvAAAADY"]
[Thu Jul 30 12:25:52.274105 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.envrc"] [unique_id "ams0wAhigOvBqkNxds4YvAAAADY"]
[Thu Jul 30 12:25:52.274304 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.envrc"] [unique_id "ams0wAhigOvBqkNxds4YvAAAADY"]
[Thu Jul 30 12:25:52.633234 2026] [core:error] [pid 3038494:tid 3038494] [client 66.249.66.169:56687] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:52.633265 2026] [core:error] [pid 3038494:tid 3038494] [client 66.249.66.169:56687] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:52.636511 2026] [core:error] [pid 3057921:tid 3057921] [client 66.249.66.167:38524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:52.636541 2026] [core:error] [pid 3057921:tid 3057921] [client 66.249.66.167:38524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:52.644296 2026] [security2:error] [pid 3066538:tid 3066538] [client 147.182.149.75:55328] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0wOqw_RF9verfSYGoagAAAEo"]
[Thu Jul 30 12:25:52.644442 2026] [security2:error] [pid 3066538:tid 3066538] [client 147.182.149.75:55328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0wOqw_RF9verfSYGoagAAAEo"]
[Thu Jul 30 12:25:52.644658 2026] [security2:error] [pid 3066538:tid 3066538] [client 147.182.149.75:55328] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0wOqw_RF9verfSYGoagAAAEo"]
[Thu Jul 30 12:25:52.671145 2026] [authz_core:error] [pid 3066535:tid 3066535] [client 57.141.0.43:47228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:52.671777 2026] [authz_core:error] [pid 3066535:tid 3066535] [client 57.141.0.43:47228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:52.952784 2026] [core:error] [pid 3048702:tid 3048702] [client 66.249.66.66:60763] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:52.952817 2026] [core:error] [pid 3048702:tid 3048702] [client 66.249.66.66:60763] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:53.226288 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.44:21120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:53.226910 2026] [authz_core:error] [pid 3052198:tid 3052198] [client 57.141.0.44:21120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:53.315519 2026] [core:error] [pid 3064507:tid 3064507] [client 66.249.66.168:40265] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:53.315546 2026] [core:error] [pid 3064507:tid 3064507] [client 66.249.66.168:40265] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:25:53.448810 2026] [access_compat:error] [pid 3039689:tid 3039689] [client 176.241.66.87:1617] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:25:53.457837 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.50:53474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:53.458527 2026] [authz_core:error] [pid 3065812:tid 3065812] [client 57.141.0.50:53474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:53.615210 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.17:50476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:53.615852 2026] [authz_core:error] [pid 3062504:tid 3062504] [client 57.141.0.17:50476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:53.634582 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.33:58962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:53.635201 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.33:58962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:53.850204 2026] [security2:error] [pid 3066542:tid 3066542] [client 147.182.149.75:48676] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "ams0wezwxMRk-dKe7S2JJgAAAE4"]
[Thu Jul 30 12:25:53.850441 2026] [security2:error] [pid 3066542:tid 3066542] [client 147.182.149.75:48676] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "ams0wezwxMRk-dKe7S2JJgAAAE4"]
[Thu Jul 30 12:25:53.850665 2026] [security2:error] [pid 3066542:tid 3066542] [client 147.182.149.75:48676] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "ams0wezwxMRk-dKe7S2JJgAAAE4"]
[Thu Jul 30 12:25:54.099985 2026] [authz_core:error] [pid 3066499:tid 3066499] [client 57.141.0.35:30600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:54.100623 2026] [authz_core:error] [pid 3066499:tid 3066499] [client 57.141.0.35:30600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:54.611469 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/app/.env"] [unique_id "ams0wghigOvBqkNxds4YwQAAADY"]
[Thu Jul 30 12:25:54.611711 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/app/.env"] [unique_id "ams0wghigOvBqkNxds4YwQAAADY"]
[Thu Jul 30 12:25:54.611953 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/app/.env"] [unique_id "ams0wghigOvBqkNxds4YwQAAADY"]
[Thu Jul 30 12:25:54.615745 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.8:32074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:54.616377 2026] [authz_core:error] [pid 3057921:tid 3057921] [client 57.141.0.8:32074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:54.778625 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.8:53296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:54.779251 2026] [authz_core:error] [pid 3054942:tid 3054942] [client 57.141.0.8:53296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:54.815898 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.12:20724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:54.816538 2026] [authz_core:error] [pid 3066424:tid 3066424] [client 57.141.0.12:20724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:54.884819 2026] [security2:error] [pid 3066542:tid 3066542] [client 159.65.18.197:53410] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0wuzwxMRk-dKe7S2JJwAAAE4"]
[Thu Jul 30 12:25:54.885048 2026] [security2:error] [pid 3066542:tid 3066542] [client 159.65.18.197:53410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0wuzwxMRk-dKe7S2JJwAAAE4"]
[Thu Jul 30 12:25:54.885296 2026] [security2:error] [pid 3066542:tid 3066542] [client 159.65.18.197:53410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams0wuzwxMRk-dKe7S2JJwAAAE4"]
[Thu Jul 30 12:25:55.079159 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/src/.env"] [unique_id "ams0wwhigOvBqkNxds4YwgAAADY"]
[Thu Jul 30 12:25:55.079362 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/src/.env"] [unique_id "ams0wwhigOvBqkNxds4YwgAAADY"]
[Thu Jul 30 12:25:55.079577 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/src/.env"] [unique_id "ams0wwhigOvBqkNxds4YwgAAADY"]
[Thu Jul 30 12:25:55.200816 2026] [ssl:error] [pid 3066538:tid 3066538] (EAI 2)Name or service not known: [client 144.76.19.72:39178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:55.200845 2026] [ssl:error] [pid 3066538:tid 3066538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:55.255873 2026] [ssl:error] [pid 3051647:tid 3051647] (EAI 2)Name or service not known: [client 144.76.19.72:39190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:25:55.255915 2026] [ssl:error] [pid 3051647:tid 3051647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:25:55.546753 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/config/.env"] [unique_id "ams0wwhigOvBqkNxds4YwwAAADY"]
[Thu Jul 30 12:25:55.546954 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/config/.env"] [unique_id "ams0wwhigOvBqkNxds4YwwAAADY"]
[Thu Jul 30 12:25:55.547183 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/config/.env"] [unique_id "ams0wwhigOvBqkNxds4YwwAAADY"]
[Thu Jul 30 12:25:55.579627 2026] [mpm_prefork:notice] [pid 2274919:tid 2274919] AH00171: Graceful restart requested, doing restart
[Thu Jul 30 12:25:55.666723 2026] [core:error] [pid 3066499:tid 3066499] (13)Permission denied: [client 216.73.216.199:7762] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS2/device/driver/bind
[Thu Jul 30 12:25:55.853679 2026] [:notice] [pid 2410982:tid 2410982] [host nativespace-pandora.ns-pandora.com] mod_lsapi:  Selfstarter 2410982 stopped
[Thu Jul 30 12:25:56.014192 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backend/.env"] [unique_id "ams0xAhigOvBqkNxds4YxAAAADY"]
[Thu Jul 30 12:25:56.014378 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backend/.env"] [unique_id "ams0xAhigOvBqkNxds4YxAAAADY"]
[Thu Jul 30 12:25:56.014596 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backend/.env"] [unique_id "ams0xAhigOvBqkNxds4YxAAAADY"]
[Thu Jul 30 12:25:56.014628 2026] [security2:error] [pid 3066497:tid 3066497] [client 118.194.253.208:49828] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backend/.env"] [unique_id "ams0xAhigOvBqkNxds4YxAAAADY"]
[Thu Jul 30 12:25:56.229405 2026] [log_config:warn] [pid 3062690:tid 3062690] (32)Broken pipe: [client 192.178.4.100:48049] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --suffix=-bytes_log
[Thu Jul 30 12:25:56.229451 2026] [log_config:warn] [pid 3062690:tid 3062690] (32)Broken pipe: [client 192.178.4.100:48049] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
[Thu Jul 30 12:25:56.232189 2026] [log_config:warn] [pid 3066534:tid 3066534] (32)Broken pipe: [client 192.178.4.101:59019] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --suffix=-bytes_log
[Thu Jul 30 12:25:56.232218 2026] [log_config:warn] [pid 3066534:tid 3066534] (32)Broken pipe: [client 192.178.4.101:59019] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
[Thu Jul 30 12:25:56.238892 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: use Min UID 1000
[Thu Jul 30 12:25:56.238922 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: version 1.0-39. LVE mechanism enabled
[Thu Jul 30 12:25:56.238926 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: found apr extention version 3
[Thu Jul 30 12:25:56.238934 2026] [hostinglimits:notice] [pid 2274919:tid 2274919] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
[Thu Jul 30 12:25:56.243519 2026] [lsapi:notice] [pid 2274919:tid 2274919] mod_lsapi:  version 1.1-96 with CRIU support
[Thu Jul 30 12:25:56.244997 2026] [:notice] [pid 3067454:tid 3067454] [host nativespace-pandora.ns-pandora.com] mod_lsapi:  Selfstarter 3067454 started
[Thu Jul 30 12:25:56.266898 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: craft-buddies.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.294185 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: jonathanhill.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.299881 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: development.horus-wellbeing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.302812 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: simplychange.robwalsh.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.336508 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: wartypig.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.337312 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: lucynaden.stadiumdatabase.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.347878 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: sharonduggal.sharonduggal.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.386411 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: vain.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.387277 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: sewyork.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.388270 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: p2studio.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.389138 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: yorkfabricshop.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.390022 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: yorkguitarworkshop.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.390820 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: karenthomasjewellery.yorkschoolofsewing.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.393398 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: codeworks.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.394229 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: codeworksuk.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.395093 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: thewhitefamily.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.395985 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: thewhitefamily.uk.printmycontent.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.401157 2026] [log_config:warn] [pid 3066465:tid 3066465] (32)Broken pipe: [client 152.32.142.138:45552] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --suffix=-bytes_log
[Thu Jul 30 12:25:56.401187 2026] [log_config:warn] [pid 3066465:tid 3066465] (32)Broken pipe: [client 152.32.142.138:45552] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
[Thu Jul 30 12:25:56.401201 2026] [log_config:warn] [pid 3066465:tid 3066465] (32)Broken pipe: [client 152.32.142.138:45552] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --mainout=/etc/apache2/logs/access_log
[Thu Jul 30 12:25:56.421819 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: render-farm.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.422638 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: 4k-monitors.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.423508 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: renderserver.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.424382 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: 3dworkstation.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.425285 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: highbrightness.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.426245 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: highbrightnesscom.broadcastmonitors.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.448463 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: evtech.ltd.jd-media.tv:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.465534 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: risergrating.grpgratingsystems.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.466340 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: minimeshgrating.grpgratingsystems.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.478471 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: europla.fireworkswedding.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.479247 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: pyromusical.fireworkswedding.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.480096 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: fireworkssolihull.fireworkswedding.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.491551 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: ditchlingfair.ditchfest.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.522228 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: thecameramonkey.broken-paradox.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.523115 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: disturbancephotography.broken-paradox.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.574276 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: strategem-ireland.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.587516 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: sharonduggal.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.613160 2026] [log_config:warn] [pid 3066541:tid 3066541] (32)Broken pipe: [client 180.243.40.43:61528] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --suffix=-bytes_log
[Thu Jul 30 12:25:56.613194 2026] [log_config:warn] [pid 3066541:tid 3066541] (32)Broken pipe: [client 180.243.40.43:61528] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
[Thu Jul 30 12:25:56.613204 2026] [log_config:warn] [pid 3066541:tid 3066541] (32)Broken pipe: [client 180.243.40.43:61528] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --mainout=/etc/apache2/logs/access_log
[Thu Jul 30 12:25:56.676635 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: grpgratingsystems.co.uk:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.690539 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: equinoxkombucha.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.709269 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: clucasdesign.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.739660 2026] [ssl:warn] [pid 2274919:tid 2274919] AH01909: adamdix.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 30 12:25:56.755774 2026] [mpm_prefork:notice] [pid 2274919:tid 2274919] AH00163: Apache/2.4.68 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations
[Thu Jul 30 12:25:56.755796 2026] [core:notice] [pid 2274919:tid 2274919] AH00094: Command line: '/usr/sbin/httpd'
[Thu Jul 30 12:25:57.405680 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.11:44836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:57.406329 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.11:44836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:57.411147 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.24:56764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:25:57.411784 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.24:56764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:25:58.056945 2026] [access_compat:error] [pid 3067467:tid 3067467] [client 125.176.202.122:58631] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:00.503373 2026] [ssl:error] [pid 3067505:tid 3067505] (70014)End of file found: [client 216.73.216.199:40912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:01.970229 2026] [ssl:error] [pid 3067640:tid 3067640] (70014)End of file found: [client 216.73.216.199:33935] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:02.959394 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.22:27512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:02.960053 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.22:27512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:03.043559 2026] [security2:error] [pid 3067689:tid 3067689] [client 147.182.200.94:49760] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "ams0y0NhHA6zbuwVXWdTkgAAAAY"]
[Thu Jul 30 12:26:03.043757 2026] [security2:error] [pid 3067689:tid 3067689] [client 147.182.200.94:49760] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "ams0y0NhHA6zbuwVXWdTkgAAAAY"]
[Thu Jul 30 12:26:03.043922 2026] [security2:error] [pid 3067689:tid 3067689] [client 147.182.200.94:49760] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "ams0y0NhHA6zbuwVXWdTkgAAAAY"]
[Thu Jul 30 12:26:04.004583 2026] [log_config:warn] [pid 3066532:tid 3066532] (32)Broken pipe: [client 20.9.4.9:23774] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --suffix=-bytes_log
[Thu Jul 30 12:26:04.004618 2026] [log_config:warn] [pid 3066532:tid 3066532] (32)Broken pipe: [client 20.9.4.9:23774] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
[Thu Jul 30 12:26:04.004630 2026] [log_config:warn] [pid 3066532:tid 3066532] (32)Broken pipe: [client 20.9.4.9:23774] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --mainout=/etc/apache2/logs/access_log
[Thu Jul 30 12:26:06.374140 2026] [lsapi:error] [pid 3054891:tid 3054891] (70007)The timeout specified has expired: [client 192.178.4.104:63180] [host www.the-pryors.co.uk] mod_lsapi:  Backend spawn failed: timeout exceeded on waiting for reading Notify from client pipe
[Thu Jul 30 12:26:07.374291 2026] [lsapi:error] [pid 3054891:tid 3054891] [client 192.178.4.104:63180] mod_lsapi: [host www.the-pryors.co.uk] [req GET /?goods/072044964 HTTP/1.1] Connect to backend failed: spawn backend error
[Thu Jul 30 12:26:07.504797 2026] [security2:error] [pid 3067505:tid 3067505] [client 114.119.158.38:31609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14,102/request_format~html"] [unique_id "ams0z6iipOsOtKCsM6eciQAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578182400/cat_ids%7E14/request_format%7Ehtml
[Thu Jul 30 12:26:08.319865 2026] [log_config:warn] [pid 3054891:tid 3054891] (32)Broken pipe: [client 192.178.4.104:63180] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --suffix=-bytes_log
[Thu Jul 30 12:26:08.319911 2026] [log_config:warn] [pid 3054891:tid 3054891] (32)Broken pipe: [client 192.178.4.104:63180] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
[Thu Jul 30 12:26:08.319921 2026] [log_config:warn] [pid 3054891:tid 3054891] (32)Broken pipe: [client 192.178.4.104:63180] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=nativespace-pandora.ns-pandora.com --mainout=/etc/apache2/logs/access_log
[Thu Jul 30 12:26:09.301801 2026] [ssl:error] [pid 3067640:tid 3067640] (EAI 2)Name or service not known: [client 144.76.19.72:39198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:09.301837 2026] [ssl:error] [pid 3067640:tid 3067640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:09.303219 2026] [security2:error] [pid 3067640:tid 3067640] [client 114.119.158.38:52699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~14,102/request_format~html"] [unique_id "ams00WH01UtlY7ecJlLAnAAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1578182400/cat_ids%7E14/request_format%7Ehtml
[Thu Jul 30 12:26:10.437428 2026] [ssl:error] [pid 3067956:tid 3067956] (70014)End of file found: [client 216.73.216.199:51556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:10.641882 2026] [ssl:error] [pid 3067505:tid 3067505] (70014)End of file found: [client 216.73.216.199:47839] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:11.690053 2026] [security2:error] [pid 3067985:tid 3067985] [client 147.182.149.75:43044] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams002fxZBRq1UjSPQbWoAAAABY"]
[Thu Jul 30 12:26:11.690401 2026] [security2:error] [pid 3067985:tid 3067985] [client 147.182.149.75:43044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams002fxZBRq1UjSPQbWoAAAABY"]
[Thu Jul 30 12:26:11.690674 2026] [security2:error] [pid 3067985:tid 3067985] [client 147.182.149.75:43044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams002fxZBRq1UjSPQbWoAAAABY"]
[Thu Jul 30 12:26:11.816333 2026] [authz_core:error] [pid 3067990:tid 3067990] [client 57.141.0.46:21268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:11.816986 2026] [authz_core:error] [pid 3067990:tid 3067990] [client 57.141.0.46:21268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:11.891330 2026] [authz_core:error] [pid 3067985:tid 3067985] [client 57.141.0.6:53826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:11.891948 2026] [authz_core:error] [pid 3067985:tid 3067985] [client 57.141.0.6:53826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:12.162986 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.17:49478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:12.163656 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.17:49478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:12.296620 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.65:24900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:12.297262 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.65:24900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:12.470811 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.19:35414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:12.471432 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.19:35414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:12.644943 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.44:63580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:12.645570 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.44:63580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:12.679783 2026] [authz_core:error] [pid 3067845:tid 3067845] [client 57.141.0.25:61828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:12.680404 2026] [authz_core:error] [pid 3067845:tid 3067845] [client 57.141.0.25:61828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.655055 2026] [authz_core:error] [pid 3067883:tid 3067883] [client 57.141.0.47:63256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.655697 2026] [authz_core:error] [pid 3067883:tid 3067883] [client 57.141.0.47:63256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.861124 2026] [security2:error] [pid 3068013:tid 3068013] [client 216.73.216.199:63689] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/rpcbind.conf"] [unique_id "ams01ZqkTd8zwpr1RGq-ywAAAB8"]
[Thu Jul 30 12:26:13.861582 2026] [security2:error] [pid 3068013:tid 3068013] [client 216.73.216.199:63689] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/rpcbind.conf"] [unique_id "ams01ZqkTd8zwpr1RGq-ywAAAB8"]
[Thu Jul 30 12:26:13.861968 2026] [security2:error] [pid 3068013:tid 3068013] [client 216.73.216.199:63689] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/rpcbind.conf"] [unique_id "ams01ZqkTd8zwpr1RGq-ywAAAB8"]
[Thu Jul 30 12:26:13.928921 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.17:49484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.929582 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.17:49484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.946003 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.39:44390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.946685 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.39:44390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.957715 2026] [authz_core:error] [pid 3068018:tid 3068018] [client 57.141.0.38:54120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.958362 2026] [authz_core:error] [pid 3068018:tid 3068018] [client 57.141.0.38:54120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.961358 2026] [authz_core:error] [pid 3068019:tid 3068019] [client 57.141.0.40:49888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.962015 2026] [authz_core:error] [pid 3068019:tid 3068019] [client 57.141.0.40:49888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.972114 2026] [authz_core:error] [pid 3068022:tid 3068022] [client 57.141.0.18:23634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.972751 2026] [authz_core:error] [pid 3068022:tid 3068022] [client 57.141.0.18:23634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.977281 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.37:63158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.977941 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.37:63158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.981054 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.1:60070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.981705 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.1:60070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.982877 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.30:47210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.983532 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.30:47210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:13.985187 2026] [authz_core:error] [pid 3068028:tid 3068028] [client 57.141.0.17:49498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:13.985822 2026] [authz_core:error] [pid 3068028:tid 3068028] [client 57.141.0.17:49498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.038082 2026] [security2:error] [pid 3068016:tid 3068016] [client 85.208.96.200:47508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/aquidneck-club-membership-fee"] [unique_id "ams01pk0kk_dm7WMmwPqRwAAACM"]
[Thu Jul 30 12:26:14.156835 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.53:53912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:14.157462 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.53:53912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.202409 2026] [access_compat:error] [pid 3068018:tid 3068018] [client 176.241.66.87:3058] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:14.214004 2026] [authz_core:error] [pid 3068016:tid 3068016] [client 57.141.0.35:40784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:14.214646 2026] [authz_core:error] [pid 3068016:tid 3068016] [client 57.141.0.35:40784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.233160 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.39:44400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:14.233787 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.39:44400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.330297 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.13:52988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:14.330917 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.13:52988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.406134 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.58:61666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:14.406755 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.58:61666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.499627 2026] [access_compat:error] [pid 3068027:tid 3068027] [client 125.176.202.122:59153] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:14.525553 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.38:63102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:14.526190 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.38:63102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.657532 2026] [authz_core:error] [pid 3068016:tid 3068016] [client 57.141.0.10:30994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:14.658167 2026] [authz_core:error] [pid 3068016:tid 3068016] [client 57.141.0.10:30994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:14.933383 2026] [security2:error] [pid 3068015:tid 3068015] [client 85.208.96.210:58628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2650.0/prev_next,next.html"] [unique_id "ams01nWu4qo9OR6C8lUZCAAAACI"]
[Thu Jul 30 12:26:14.947053 2026] [security2:error] [pid 3068022:tid 3068022] [client 47.245.127.212:23745] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams01ohKDQSpefIZFI3ebgAAACk"]
[Thu Jul 30 12:26:14.947118 2026] [security2:error] [pid 3068022:tid 3068022] [client 47.245.127.212:23745] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams01ohKDQSpefIZFI3ebgAAACk"]
[Thu Jul 30 12:26:14.947411 2026] [security2:error] [pid 3068022:tid 3068022] [client 47.245.127.212:23745] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams01ohKDQSpefIZFI3ebgAAACk"]
[Thu Jul 30 12:26:15.000867 2026] [ssl:error] [pid 3068122:tid 3068122] (EAI 2)Name or service not known: [client 144.76.19.72:28428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:15.000925 2026] [ssl:error] [pid 3068122:tid 3068122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:15.344149 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.67:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:15.344898 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.67:52652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:15.349675 2026] [cgi:error] [pid 3067470:tid 3067470] [client 66.132.172.196:24766] AH02812: stderr from /home/innersp/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://innerspacer.co.uk:443/cgi-bin
[Thu Jul 30 12:26:15.519080 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.68:30748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:15.519729 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.68:30748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:15.538225 2026] [authz_core:error] [pid 3067955:tid 3067955] [client 57.141.0.13:53000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:15.538857 2026] [authz_core:error] [pid 3067955:tid 3067955] [client 57.141.0.13:53000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:15.739166 2026] [security2:error] [pid 3067505:tid 3067505] [client 168.100.149.59:64076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "ams016iipOsOtKCsM6ecjgAAAAE"]
[Thu Jul 30 12:26:16.029153 2026] [security2:error] [pid 3067955:tid 3067955] [client 168.110.218.47:26430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "ams02JApPFwQEbaJlPup1gAAABM"]
[Thu Jul 30 12:26:16.029373 2026] [security2:error] [pid 3067955:tid 3067955] [client 168.110.218.47:26430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "ams02JApPFwQEbaJlPup1gAAABM"]
[Thu Jul 30 12:26:16.029599 2026] [security2:error] [pid 3067955:tid 3067955] [client 168.110.218.47:26430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "ams02JApPFwQEbaJlPup1gAAABM"]
[Thu Jul 30 12:26:16.077509 2026] [ssl:error] [pid 3067924:tid 3067924] (EAI 2)Name or service not known: [client 144.76.19.72:28436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:16.077549 2026] [ssl:error] [pid 3067924:tid 3067924] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:16.119388 2026] [ssl:error] [pid 3068020:tid 3068020] (70014)End of file found: [client 216.73.216.199:34261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:16.133397 2026] [authz_core:error] [pid 3068157:tid 3068157] [client 57.141.0.49:41184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:16.134060 2026] [authz_core:error] [pid 3068157:tid 3068157] [client 57.141.0.49:41184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:16.294682 2026] [security2:error] [pid 3068021:tid 3068021] [client 106.52.49.148:52566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-in-london.co.uk"] [uri "/"] [unique_id "ams02JJHBZQOB44T2ieUOwAAACg"]
[Thu Jul 30 12:26:16.424666 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.61:53622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:16.425285 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.61:53622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:16.812922 2026] [security2:error] [pid 3068024:tid 3068024] [client 147.182.200.94:57470] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams02Nj6w0CdhbeVJS2ClwAAACs"]
[Thu Jul 30 12:26:16.813267 2026] [security2:error] [pid 3068024:tid 3068024] [client 147.182.200.94:57470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams02Nj6w0CdhbeVJS2ClwAAACs"]
[Thu Jul 30 12:26:16.813508 2026] [security2:error] [pid 3068024:tid 3068024] [client 147.182.200.94:57470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams02Nj6w0CdhbeVJS2ClwAAACs"]
[Thu Jul 30 12:26:17.084265 2026] [security2:error] [pid 3067505:tid 3067505] [client 168.100.149.122:30108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/wp-content/uploads/2009/12/Lotus_F1_Racing_wind_tunnel_model_C1024x768.jpg"] [unique_id "ams02aiipOsOtKCsM6eckAAAAAE"]
[Thu Jul 30 12:26:17.358653 2026] [core:error] [pid 3068013:tid 3068013] (13)Permission denied: [client 216.73.216.199:63689] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/ssh/ssh_host_ed25519_key
[Thu Jul 30 12:26:17.904203 2026] [authz_core:error] [pid 3067640:tid 3067640] [client 66.249.66.34:36144] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:26:17.906895 2026] [authz_core:error] [pid 3067640:tid 3067640] [client 66.249.66.34:36144] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:26:18.083612 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.22:21456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:18.084242 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.22:21456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:18.470780 2026] [core:error] [pid 3068197:tid 3068197] [client 66.249.64.170:45521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:26:18.470808 2026] [core:error] [pid 3068197:tid 3068197] [client 66.249.64.170:45521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:26:19.182136 2026] [ssl:error] [pid 3068196:tid 3068196] (EAI 2)Name or service not known: [client 144.76.19.72:28442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:19.182172 2026] [ssl:error] [pid 3068196:tid 3068196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:19.235528 2026] [ssl:error] [pid 3068027:tid 3068027] (EAI 2)Name or service not known: [client 144.76.19.72:28448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:19.235563 2026] [ssl:error] [pid 3068027:tid 3068027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:19.252250 2026] [access_compat:error] [pid 3068013:tid 3068013] [client 176.241.66.87:3976] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:19.565420 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.5:44618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:19.566043 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.5:44618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:19.737938 2026] [ssl:error] [pid 3067925:tid 3067925] (70014)End of file found: [client 216.73.216.199:21763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:20.032903 2026] [access_compat:error] [pid 3067468:tid 3067468] [client 157.20.138.62:54017] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:20.128434 2026] [security2:error] [pid 3067992:tid 3067992] [client 136.158.62.223:46745] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams03NlnbwxAFb8DMevOkwAAAB4"]
[Thu Jul 30 12:26:20.128509 2026] [security2:error] [pid 3067992:tid 3067992] [client 136.158.62.223:46745] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams03NlnbwxAFb8DMevOkwAAAB4"]
[Thu Jul 30 12:26:20.128807 2026] [security2:error] [pid 3067992:tid 3067992] [client 136.158.62.223:46745] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams03NlnbwxAFb8DMevOkwAAAB4"]
[Thu Jul 30 12:26:20.440945 2026] [ssl:error] [pid 3068234:tid 3068234] (70014)End of file found: [client 216.73.216.199:43043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:20.552881 2026] [security2:error] [pid 3067734:tid 3067734] [client 106.52.49.148:46344] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "ams03Geu6u6-nlrZjh81RwAAAAc"], referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 12:26:20.554725 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 106.52.49.148:46344] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 12:26:20.557369 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 106.52.49.148:46344] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 12:26:21.166239 2026] [authz_core:error] [pid 3068122:tid 3068122] [client 20.193.250.173:57154] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:26:21.338865 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.6:53858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:21.339489 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.6:53858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:21.685801 2026] [access_compat:error] [pid 3067988:tid 3067988] [client 125.176.202.122:59686] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:21.897125 2026] [security2:error] [pid 3067526:tid 3067526] [client 147.182.149.75:40076] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams03eLv4VLi71vYLi4I4gAAAAM"]
[Thu Jul 30 12:26:21.897490 2026] [security2:error] [pid 3067526:tid 3067526] [client 147.182.149.75:40076] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams03eLv4VLi71vYLi4I4gAAAAM"]
[Thu Jul 30 12:26:21.897784 2026] [security2:error] [pid 3067526:tid 3067526] [client 147.182.149.75:40076] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams03eLv4VLi71vYLi4I4gAAAAM"]
[Thu Jul 30 12:26:22.287893 2026] [ssl:error] [pid 3067564:tid 3067564] (EAI 2)Name or service not known: [client 144.76.19.72:55460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:22.287932 2026] [ssl:error] [pid 3067564:tid 3067564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:22.357576 2026] [ssl:error] [pid 3068019:tid 3068019] (EAI 2)Name or service not known: [client 144.76.19.72:55466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:22.357608 2026] [ssl:error] [pid 3068019:tid 3068019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:22.453715 2026] [core:error] [pid 3068014:tid 3068014] (13)Permission denied: [client 216.73.216.199:40425] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_groupinfo_4k/total_objects
[Thu Jul 30 12:26:22.867087 2026] [ssl:error] [pid 3068014:tid 3068014] (70014)End of file found: [client 216.73.216.199:40425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:22.871042 2026] [authz_core:error] [pid 3067564:tid 3067564] [client 57.141.0.24:44438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:22.871671 2026] [authz_core:error] [pid 3067564:tid 3067564] [client 57.141.0.24:44438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:24.127769 2026] [security2:error] [pid 3068016:tid 3068016] [client 159.65.18.197:52322] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams04Jk0kk_dm7WMmwPqTwAAACM"]
[Thu Jul 30 12:26:24.127992 2026] [security2:error] [pid 3068016:tid 3068016] [client 159.65.18.197:52322] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams04Jk0kk_dm7WMmwPqTwAAACM"]
[Thu Jul 30 12:26:24.128192 2026] [security2:error] [pid 3068016:tid 3068016] [client 159.65.18.197:52322] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/trace.axd"] [unique_id "ams04Jk0kk_dm7WMmwPqTwAAACM"]
[Thu Jul 30 12:26:24.989405 2026] [access_compat:error] [pid 3067924:tid 3067924] [client 176.241.66.87:4367] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:25.072233 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.55:20936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:25.072852 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.55:20936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:25.088693 2026] [ssl:error] [pid 3067564:tid 3067564] (70014)End of file found: [client 216.73.216.199:50707] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:25.417990 2026] [ssl:error] [pid 3068231:tid 3068231] (EAI 2)Name or service not known: [client 144.76.19.72:55476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:25.418023 2026] [ssl:error] [pid 3068231:tid 3068231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:25.475676 2026] [ssl:error] [pid 3068235:tid 3068235] (EAI 2)Name or service not known: [client 144.76.19.72:55478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:25.475708 2026] [ssl:error] [pid 3068235:tid 3068235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:26.146537 2026] [ssl:error] [pid 3067957:tid 3067957] (70014)End of file found: [client 216.73.216.199:27444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:26.651794 2026] [ssl:error] [pid 3068158:tid 3068158] (70014)End of file found: [client 216.73.216.199:22714] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:26.928297 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.7:56312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:26.928920 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.7:56312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:26.947872 2026] [ssl:error] [pid 3067470:tid 3067470] (70014)End of file found: [client 216.73.216.199:22652] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:27.700436 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.49:50446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:27.701113 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.49:50446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:28.021653 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/client/.env"] [unique_id "ams05KiipOsOtKCsM6eclwAAAAE"]
[Thu Jul 30 12:26:28.021862 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/client/.env"] [unique_id "ams05KiipOsOtKCsM6eclwAAAAE"]
[Thu Jul 30 12:26:28.022062 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/client/.env"] [unique_id "ams05KiipOsOtKCsM6eclwAAAAE"]
[Thu Jul 30 12:26:28.216394 2026] [security2:error] [pid 3067883:tid 3067883] [client 49.51.36.179:47534] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/"] [unique_id "ams05JVRdJoft9Qjae2sKwAAAA4"]
[Thu Jul 30 12:26:28.373376 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/web/.env"] [unique_id "ams05KiipOsOtKCsM6ecmAAAAAE"]
[Thu Jul 30 12:26:28.373598 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/web/.env"] [unique_id "ams05KiipOsOtKCsM6ecmAAAAAE"]
[Thu Jul 30 12:26:28.373827 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/web/.env"] [unique_id "ams05KiipOsOtKCsM6ecmAAAAAE"]
[Thu Jul 30 12:26:28.531993 2026] [ssl:error] [pid 3067469:tid 3067469] (EAI 2)Name or service not known: [client 144.76.19.72:55488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:28.532033 2026] [ssl:error] [pid 3067469:tid 3067469] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:28.590472 2026] [ssl:error] [pid 3067640:tid 3067640] (EAI 2)Name or service not known: [client 144.76.19.72:55490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:28.590512 2026] [ssl:error] [pid 3067640:tid 3067640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:28.722949 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/public/.env"] [unique_id "ams05KiipOsOtKCsM6ecmQAAAAE"]
[Thu Jul 30 12:26:28.723170 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/public/.env"] [unique_id "ams05KiipOsOtKCsM6ecmQAAAAE"]
[Thu Jul 30 12:26:28.723374 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/public/.env"] [unique_id "ams05KiipOsOtKCsM6ecmQAAAAE"]
[Thu Jul 30 12:26:29.072765 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/private/.env"] [unique_id "ams05aiipOsOtKCsM6ecmgAAAAE"]
[Thu Jul 30 12:26:29.072952 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/private/.env"] [unique_id "ams05aiipOsOtKCsM6ecmgAAAAE"]
[Thu Jul 30 12:26:29.073170 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/private/.env"] [unique_id "ams05aiipOsOtKCsM6ecmgAAAAE"]
[Thu Jul 30 12:26:29.380510 2026] [authz_core:error] [pid 3068122:tid 3068122] [client 57.141.0.28:47448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:29.381142 2026] [authz_core:error] [pid 3068122:tid 3068122] [client 57.141.0.28:47448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:29.422125 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/var/.env"] [unique_id "ams05aiipOsOtKCsM6ecmwAAAAE"]
[Thu Jul 30 12:26:29.422287 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/var/.env"] [unique_id "ams05aiipOsOtKCsM6ecmwAAAAE"]
[Thu Jul 30 12:26:29.422507 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/var/.env"] [unique_id "ams05aiipOsOtKCsM6ecmwAAAAE"]
[Thu Jul 30 12:26:29.442690 2026] [security2:error] [pid 3068231:tid 3068231] [client 49.51.36.179:48048] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "ams05cI5bogH--_ALo9ICQAAACA"], referer: http://www.taylorshouse.com
[Thu Jul 30 12:26:29.813255 2026] [access_compat:error] [pid 3067883:tid 3067883] [client 176.241.66.87:4915] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:30.182350 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.66:31458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:30.183037 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.66:31458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:30.249273 2026] [access_compat:error] [pid 3067809:tid 3067809] [client 45.158.164.139:48586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:26:30.378568 2026] [security2:error] [pid 3067469:tid 3067469] [client 49.51.36.179:48508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "ams05lCyM-Od4MAXKJPjqAAAAD8"], referer: http://www.taylorshouse.com/home
[Thu Jul 30 12:26:30.524297 2026] [access_compat:error] [pid 3067775:tid 3067775] [client 157.20.138.62:54615] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:30.617218 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 20.193.250.173:51005] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:26:31.181676 2026] [core:error] [pid 3067640:tid 3067640] [client 66.249.66.66:55203] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:26:31.181712 2026] [core:error] [pid 3067640:tid 3067640] [client 66.249.66.66:55203] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:26:31.648588 2026] [ssl:error] [pid 3068013:tid 3068013] (EAI 2)Name or service not known: [client 144.76.19.72:32340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:31.648622 2026] [ssl:error] [pid 3068013:tid 3068013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:31.703552 2026] [ssl:error] [pid 3068234:tid 3068234] (EAI 2)Name or service not known: [client 144.76.19.72:32354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:31.703588 2026] [ssl:error] [pid 3068234:tid 3068234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:31.775309 2026] [ssl:error] [pid 3068308:tid 3068308] (70014)End of file found: [client 216.73.216.199:46004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:31.800039 2026] [security2:error] [pid 3068025:tid 3068025] [client 49.51.36.179:49202] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "ams05_zgNAYN3n36AW1YBQAAACw"], referer: http://www.taylorshouse.com/home/
[Thu Jul 30 12:26:32.193008 2026] [ssl:error] [pid 3068015:tid 3068015] (70014)End of file found: [client 216.73.216.199:31679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:32.501671 2026] [ssl:error] [pid 3068022:tid 3068022] (70014)End of file found: [client 216.73.216.199:48334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:33.563782 2026] [authz_core:error] [pid 3068231:tid 3068231] [client 57.141.0.15:47402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:33.564408 2026] [authz_core:error] [pid 3068231:tid 3068231] [client 57.141.0.15:47402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:33.585564 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.29:48358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:33.586203 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.29:48358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:34.541647 2026] [access_compat:error] [pid 3067956:tid 3067956] [client 125.176.202.122:60214] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:34.760381 2026] [ssl:error] [pid 3068231:tid 3068231] (EAI 2)Name or service not known: [client 144.76.19.72:32360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:34.760407 2026] [ssl:error] [pid 3068231:tid 3068231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:34.814575 2026] [ssl:error] [pid 3068158:tid 3068158] (EAI 2)Name or service not known: [client 144.76.19.72:32362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:34.814605 2026] [ssl:error] [pid 3068158:tid 3068158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:35.006358 2026] [authz_core:error] [pid 3068013:tid 3068013] [client 57.141.0.14:58164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:35.007009 2026] [authz_core:error] [pid 3068013:tid 3068013] [client 57.141.0.14:58164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:35.163399 2026] [access_compat:error] [pid 3068019:tid 3068019] [client 5.127.0.38:33860] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:26:36.611357 2026] [authz_core:error] [pid 3068236:tid 3068236] [client 57.141.0.52:50494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:36.612012 2026] [authz_core:error] [pid 3068236:tid 3068236] [client 57.141.0.52:50494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:37.352904 2026] [ssl:error] [pid 3067545:tid 3067545] (70014)End of file found: [client 216.73.216.199:40438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:37.836463 2026] [ssl:error] [pid 3068027:tid 3068027] (70014)End of file found: [client 216.73.216.199:51547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:37.871121 2026] [ssl:error] [pid 3067925:tid 3067925] (EAI 2)Name or service not known: [client 144.76.19.72:32372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:37.871157 2026] [ssl:error] [pid 3067925:tid 3067925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:37.927338 2026] [ssl:error] [pid 3068015:tid 3068015] (EAI 2)Name or service not known: [client 144.76.19.72:32376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:37.927372 2026] [ssl:error] [pid 3068015:tid 3068015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:37.995434 2026] [authz_core:error] [pid 3068022:tid 3068022] [client 57.141.0.38:20186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:37.996077 2026] [authz_core:error] [pid 3068022:tid 3068022] [client 57.141.0.38:20186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:38.157276 2026] [ssl:error] [pid 3067925:tid 3067925] (70014)End of file found: [client 216.73.216.199:12547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:38.827953 2026] [security2:error] [pid 3068016:tid 3068016] [client 94.154.43.179:54382] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "gangway-media.com"] [uri "/.env"] [unique_id "ams07pk0kk_dm7WMmwPqVQAAACM"]
[Thu Jul 30 12:26:38.828136 2026] [security2:error] [pid 3068016:tid 3068016] [client 94.154.43.179:54382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "gangway-media.com"] [uri "/.env"] [unique_id "ams07pk0kk_dm7WMmwPqVQAAACM"]
[Thu Jul 30 12:26:39.109315 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.14:58174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:39.109941 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.14:58174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:39.358928 2026] [security2:error] [pid 3068016:tid 3068016] [client 94.154.43.179:54382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "gangway-media.com"] [uri "/index.php"] [unique_id "ams07pk0kk_dm7WMmwPqVQAAACM"]
[Thu Jul 30 12:26:40.477667 2026] [access_compat:error] [pid 3067734:tid 3067734] [client 176.241.66.87:60052] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:40.847213 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 20.193.250.173:62549] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:26:40.985151 2026] [ssl:error] [pid 3067469:tid 3067469] (EAI 2)Name or service not known: [client 144.76.19.72:40546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:40.985195 2026] [ssl:error] [pid 3067469:tid 3067469] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:41.041641 2026] [ssl:error] [pid 3067990:tid 3067990] (EAI 2)Name or service not known: [client 144.76.19.72:40562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:41.041676 2026] [ssl:error] [pid 3067990:tid 3067990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:41.068480 2026] [access_compat:error] [pid 3068013:tid 3068013] [client 157.20.138.62:55206] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:41.624052 2026] [authz_core:error] [pid 3067990:tid 3067990] [client 57.141.0.70:52696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:41.624687 2026] [authz_core:error] [pid 3067990:tid 3067990] [client 57.141.0.70:52696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:41.777706 2026] [security2:error] [pid 3067809:tid 3067809] [client 106.52.49.148:57006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "ams08VRMcxKP5SGHEhITfQAAAAw"]
[Thu Jul 30 12:26:41.979133 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.19:48276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:41.979761 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.19:48276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:42.389035 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/config/master.key"] [unique_id "ams08qiipOsOtKCsM6ecwAAAAAE"]
[Thu Jul 30 12:26:42.389374 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/config/master.key"] [unique_id "ams08qiipOsOtKCsM6ecwAAAAAE"]
[Thu Jul 30 12:26:42.389650 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/config/master.key"] [unique_id "ams08qiipOsOtKCsM6ecwAAAAAE"]
[Thu Jul 30 12:26:42.470427 2026] [security2:error] [pid 3069123:tid 3069123] [client 43.130.16.212:53710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "ams08g7BaU3u6U-yUIgiuAAAABM"]
[Thu Jul 30 12:26:42.546956 2026] [access_compat:error] [pid 3067883:tid 3067883] [client 125.176.202.122:60475] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:42.682844 2026] [ssl:error] [pid 3067809:tid 3067809] (70014)End of file found: [client 216.73.216.199:31440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:42.740766 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.bak"] [unique_id "ams08qiipOsOtKCsM6ecwQAAAAE"]
[Thu Jul 30 12:26:42.740986 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.bak"] [unique_id "ams08qiipOsOtKCsM6ecwQAAAAE"]
[Thu Jul 30 12:26:42.741263 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.bak"] [unique_id "ams08qiipOsOtKCsM6ecwQAAAAE"]
[Thu Jul 30 12:26:43.090793 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.old"] [unique_id "ams086iipOsOtKCsM6ecwgAAAAE"]
[Thu Jul 30 12:26:43.091138 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.old"] [unique_id "ams086iipOsOtKCsM6ecwgAAAAE"]
[Thu Jul 30 12:26:43.091416 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.old"] [unique_id "ams086iipOsOtKCsM6ecwgAAAAE"]
[Thu Jul 30 12:26:43.281778 2026] [ssl:error] [pid 3069123:tid 3069123] (70014)End of file found: [client 216.73.216.199:1763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:43.441049 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.save"] [unique_id "ams086iipOsOtKCsM6ecwwAAAAE"]
[Thu Jul 30 12:26:43.441261 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.save"] [unique_id "ams086iipOsOtKCsM6ecwwAAAAE"]
[Thu Jul 30 12:26:43.441527 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.save"] [unique_id "ams086iipOsOtKCsM6ecwwAAAAE"]
[Thu Jul 30 12:26:43.790779 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.txt"] [unique_id "ams086iipOsOtKCsM6ecxAAAAAE"]
[Thu Jul 30 12:26:43.791007 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.txt"] [unique_id "ams086iipOsOtKCsM6ecxAAAAAE"]
[Thu Jul 30 12:26:43.791252 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php.txt"] [unique_id "ams086iipOsOtKCsM6ecxAAAAAE"]
[Thu Jul 30 12:26:43.899908 2026] [security2:error] [pid 3069160:tid 3069160] [client 43.130.16.212:35750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "ams08-AFnaPgVP-R_A3q1gAAABY"], referer: http://www.itsupportinayrshire.com
[Thu Jul 30 12:26:43.982455 2026] [ssl:error] [pid 3068027:tid 3068027] (70014)End of file found: [client 216.73.216.199:53360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:44.130550 2026] [ssl:error] [pid 3068233:tid 3068233] (EAI 2)Name or service not known: [client 144.76.19.72:40578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:44.130609 2026] [ssl:error] [pid 3068233:tid 3068233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:44.140494 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php~"] [unique_id "ams09KiipOsOtKCsM6ecxQAAAAE"]
[Thu Jul 30 12:26:44.140736 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php~"] [unique_id "ams09KiipOsOtKCsM6ecxQAAAAE"]
[Thu Jul 30 12:26:44.140972 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php~"] [unique_id "ams09KiipOsOtKCsM6ecxQAAAAE"]
[Thu Jul 30 12:26:44.188741 2026] [ssl:error] [pid 3068233:tid 3068233] (EAI 2)Name or service not known: [client 144.76.19.72:40582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:44.188767 2026] [ssl:error] [pid 3068233:tid 3068233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:44.207245 2026] [authz_core:error] [pid 3068234:tid 3068234] [client 57.141.0.10:28896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:44.207869 2026] [authz_core:error] [pid 3068234:tid 3068234] [client 57.141.0.10:28896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:45.211815 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.16:29288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:45.212470 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.16:29288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:46.142519 2026] [authz_core:error] [pid 3068019:tid 3068019] [client 57.141.0.39:45402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:46.143142 2026] [authz_core:error] [pid 3068019:tid 3068019] [client 57.141.0.39:45402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:47.246292 2026] [ssl:error] [pid 3069203:tid 3069203] (EAI 2)Name or service not known: [client 144.76.19.72:40588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:47.246331 2026] [ssl:error] [pid 3069203:tid 3069203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:47.301620 2026] [ssl:error] [pid 3067734:tid 3067734] (EAI 2)Name or service not known: [client 144.76.19.72:40598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:47.301652 2026] [ssl:error] [pid 3067734:tid 3067734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:47.412288 2026] [authz_core:error] [pid 3069161:tid 3069161] [client 57.141.0.47:52850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:47.413393 2026] [authz_core:error] [pid 3069161:tid 3069161] [client 57.141.0.47:52850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:47.653981 2026] [access_compat:error] [pid 3069206:tid 3069206] [client 125.176.202.122:60742] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:48.502397 2026] [ssl:error] [pid 3067468:tid 3067468] (70014)End of file found: [client 216.73.216.199:33004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:48.848615 2026] [authz_core:error] [pid 3067466:tid 3067466] [client 57.141.0.61:41474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:48.849248 2026] [authz_core:error] [pid 3067466:tid 3067466] [client 57.141.0.61:41474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:48.986941 2026] [ssl:error] [pid 3067545:tid 3067545] (70014)End of file found: [client 216.73.216.199:34579] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:50.244048 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.31:41704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:50.244690 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.31:41704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:50.355483 2026] [ssl:error] [pid 3068390:tid 3068390] (EAI 2)Name or service not known: [client 144.76.19.72:46340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:50.355529 2026] [ssl:error] [pid 3068390:tid 3068390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:50.411787 2026] [ssl:error] [pid 3068390:tid 3068390] (EAI 2)Name or service not known: [client 144.76.19.72:46354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:50.411812 2026] [ssl:error] [pid 3068390:tid 3068390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:50.868334 2026] [access_compat:error] [pid 3067925:tid 3067925] [client 176.241.66.87:60630] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:50.904319 2026] [ssl:error] [pid 3067564:tid 3067564] (70014)End of file found: [client 216.73.216.199:43010] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:51.051218 2026] [security2:error] [pid 3068026:tid 3068026] [client 95.179.189.194:54254] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "oliviamarjorie.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams0--rZpp7Qfl37_wQ7IwAAAC4"]
[Thu Jul 30 12:26:51.051514 2026] [security2:error] [pid 3068026:tid 3068026] [client 95.179.189.194:54254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "oliviamarjorie.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams0--rZpp7Qfl37_wQ7IwAAAC4"]
[Thu Jul 30 12:26:51.051706 2026] [security2:error] [pid 3068026:tid 3068026] [client 95.179.189.194:54254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "oliviamarjorie.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams0--rZpp7Qfl37_wQ7IwAAAC4"]
[Thu Jul 30 12:26:51.144912 2026] [authz_core:error] [pid 3069515:tid 3069515] [client 57.141.0.52:62110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:51.145571 2026] [authz_core:error] [pid 3069515:tid 3069515] [client 57.141.0.52:62110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:51.600002 2026] [access_compat:error] [pid 3068158:tid 3068158] [client 157.20.138.62:55808] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:52.761532 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.39:45414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:52.762170 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.39:45414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:53.268645 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backup/.env"] [unique_id "ams0_aiipOsOtKCsM6ec3wAAAAE"]
[Thu Jul 30 12:26:53.268814 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backup/.env"] [unique_id "ams0_aiipOsOtKCsM6ec3wAAAAE"]
[Thu Jul 30 12:26:53.269036 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backup/.env"] [unique_id "ams0_aiipOsOtKCsM6ec3wAAAAE"]
[Thu Jul 30 12:26:53.463826 2026] [ssl:error] [pid 3067775:tid 3067775] (EAI 2)Name or service not known: [client 144.76.19.72:46370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:53.463873 2026] [ssl:error] [pid 3067775:tid 3067775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:53.520001 2026] [ssl:error] [pid 3068390:tid 3068390] (EAI 2)Name or service not known: [client 144.76.19.72:46378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:53.520030 2026] [ssl:error] [pid 3068390:tid 3068390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:53.619290 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backups/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backups/.env"] [unique_id "ams0_aiipOsOtKCsM6ec4AAAAAE"]
[Thu Jul 30 12:26:53.619527 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backups/.env"] [unique_id "ams0_aiipOsOtKCsM6ec4AAAAAE"]
[Thu Jul 30 12:26:53.619753 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/backups/.env"] [unique_id "ams0_aiipOsOtKCsM6ec4AAAAAE"]
[Thu Jul 30 12:26:53.675942 2026] [authz_core:error] [pid 3067990:tid 3067990] [client 57.141.0.21:32226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:53.676581 2026] [authz_core:error] [pid 3067990:tid 3067990] [client 57.141.0.21:32226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:53.823157 2026] [ssl:error] [pid 3068232:tid 3068232] (70014)End of file found: [client 216.73.216.199:16165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:53.969374 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/old/.env"] [unique_id "ams0_aiipOsOtKCsM6ec4QAAAAE"]
[Thu Jul 30 12:26:53.969600 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/old/.env"] [unique_id "ams0_aiipOsOtKCsM6ec4QAAAAE"]
[Thu Jul 30 12:26:53.969870 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/old/.env"] [unique_id "ams0_aiipOsOtKCsM6ec4QAAAAE"]
[Thu Jul 30 12:26:54.181761 2026] [access_compat:error] [pid 3069206:tid 3069206] [client 125.176.202.122:61006] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:54.326037 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/temp/.env"] [unique_id "ams0_qiipOsOtKCsM6ec4gAAAAE"]
[Thu Jul 30 12:26:54.326279 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/temp/.env"] [unique_id "ams0_qiipOsOtKCsM6ec4gAAAAE"]
[Thu Jul 30 12:26:54.326619 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/temp/.env"] [unique_id "ams0_qiipOsOtKCsM6ec4gAAAAE"]
[Thu Jul 30 12:26:54.518496 2026] [ssl:error] [pid 3068020:tid 3068020] (70014)End of file found: [client 216.73.216.199:16922] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:54.675839 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/tmp/.env"] [unique_id "ams0_qiipOsOtKCsM6ec4wAAAAE"]
[Thu Jul 30 12:26:54.676016 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/tmp/.env"] [unique_id "ams0_qiipOsOtKCsM6ec4wAAAAE"]
[Thu Jul 30 12:26:54.676290 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/tmp/.env"] [unique_id "ams0_qiipOsOtKCsM6ec4wAAAAE"]
[Thu Jul 30 12:26:55.104263 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 20.193.250.173:60882] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:26:55.286886 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.37:30052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:55.287518 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.37:30052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:56.094699 2026] [authz_core:error] [pid 3068231:tid 3068231] [client 57.141.0.60:50194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:56.095434 2026] [authz_core:error] [pid 3068231:tid 3068231] [client 57.141.0.60:50194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:56.429722 2026] [access_compat:error] [pid 3068015:tid 3068015] [client 176.241.66.87:6174] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:26:56.578418 2026] [ssl:error] [pid 3069572:tid 3069572] (EAI 2)Name or service not known: [client 144.76.19.72:46388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:56.578457 2026] [ssl:error] [pid 3069572:tid 3069572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:56.636162 2026] [ssl:error] [pid 3068024:tid 3068024] (EAI 2)Name or service not known: [client 144.76.19.72:46402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:56.636201 2026] [ssl:error] [pid 3068024:tid 3068024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:56.921819 2026] [security2:error] [pid 3068016:tid 3068016] [client 85.208.98.19:34702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/dumbell-7-kilo-k.html"] [unique_id "ams1AJk0kk_dm7WMmwPqrgAAACM"]
[Thu Jul 30 12:26:56.937315 2026] [ssl:error] [pid 3068026:tid 3068026] (70014)End of file found: [client 216.73.216.199:19808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:26:57.489899 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 57.141.0.49:24736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:57.490534 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 57.141.0.49:24736] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:57.670242 2026] [security2:error] [pid 3068231:tid 3068231] [client 185.191.171.15:20716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4776.0/prev_next,next.html"] [unique_id "ams1AcI5bogH--_ALo9IeAAAACA"]
[Thu Jul 30 12:26:58.366589 2026] [authz_core:error] [pid 3067466:tid 3067466] [client 57.141.0.41:24232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:26:58.367323 2026] [authz_core:error] [pid 3067466:tid 3067466] [client 57.141.0.41:24232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:26:59.242925 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vault"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.vault"] [unique_id "ams1A6iipOsOtKCsM6ec8AAAAAE"]
[Thu Jul 30 12:26:59.243158 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.vault"] [unique_id "ams1A6iipOsOtKCsM6ec8AAAAAE"]
[Thu Jul 30 12:26:59.243398 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env.vault"] [unique_id "ams1A6iipOsOtKCsM6ec8AAAAAE"]
[Thu Jul 30 12:26:59.695548 2026] [ssl:error] [pid 3069515:tid 3069515] (EAI 2)Name or service not known: [client 144.76.19.72:19490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:59.695587 2026] [ssl:error] [pid 3069515:tid 3069515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:59.753391 2026] [ssl:error] [pid 3067466:tid 3067466] (EAI 2)Name or service not known: [client 144.76.19.72:19492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:26:59.753430 2026] [ssl:error] [pid 3067466:tid 3067466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:26:59.789566 2026] [ssl:error] [pid 3067689:tid 3067689] (70014)End of file found: [client 216.73.216.199:57339] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:00.153432 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.11:22498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:00.154099 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.11:22498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:00.567661 2026] [ssl:error] [pid 3067468:tid 3067468] (70014)End of file found: [client 216.73.216.199:28104] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:00.651180 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/framework/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/storage/framework/.env"] [unique_id "ams1BKiipOsOtKCsM6ec9AAAAAE"]
[Thu Jul 30 12:27:00.651405 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/storage/framework/.env"] [unique_id "ams1BKiipOsOtKCsM6ec9AAAAAE"]
[Thu Jul 30 12:27:00.651681 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/storage/framework/.env"] [unique_id "ams1BKiipOsOtKCsM6ec9AAAAAE"]
[Thu Jul 30 12:27:00.888285 2026] [security2:error] [pid 3068014:tid 3068014] [client 110.42.208.131:42420] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "ams1BP0tEKWAi3GU5OV-XwAAACE"]
[Thu Jul 30 12:27:01.001904 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/laravel/.env"] [unique_id "ams1BaiipOsOtKCsM6ec9QAAAAE"]
[Thu Jul 30 12:27:01.002135 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/laravel/.env"] [unique_id "ams1BaiipOsOtKCsM6ec9QAAAAE"]
[Thu Jul 30 12:27:01.002364 2026] [security2:error] [pid 3067505:tid 3067505] [client 45.249.89.53:50919] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/laravel/.env"] [unique_id "ams1BaiipOsOtKCsM6ec9QAAAAE"]
[Thu Jul 30 12:27:01.056305 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.35:33122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:01.056932 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.35:33122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:01.402275 2026] [access_compat:error] [pid 3069515:tid 3069515] [client 176.241.66.87:7574] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:01.486029 2026] [security2:error] [pid 3067991:tid 3067991] [client 43.157.52.191:10615] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1BWLpIKL2ZK4qoABtKAAAAB0"]
[Thu Jul 30 12:27:01.486092 2026] [security2:error] [pid 3067991:tid 3067991] [client 43.157.52.191:10615] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1BWLpIKL2ZK4qoABtKAAAAB0"]
[Thu Jul 30 12:27:01.486349 2026] [security2:error] [pid 3067991:tid 3067991] [client 43.157.52.191:10615] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1BWLpIKL2ZK4qoABtKAAAAB0"]
[Thu Jul 30 12:27:01.722145 2026] [authz_core:error] [pid 3068904:tid 3068904] [client 66.249.66.33:63176] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:27:01.724813 2026] [authz_core:error] [pid 3068904:tid 3068904] [client 66.249.66.33:63176] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:27:02.141243 2026] [access_compat:error] [pid 3068020:tid 3068020] [client 157.20.138.62:56409] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:02.312687 2026] [ssl:error] [pid 3069203:tid 3069203] (70014)End of file found: [client 216.73.216.199:20489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:02.455825 2026] [access_compat:error] [pid 3068232:tid 3068232] [client 125.176.202.122:61293] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:02.471102 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.4:38146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:02.471721 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.4:38146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:02.809144 2026] [ssl:error] [pid 3069206:tid 3069206] (EAI 2)Name or service not known: [client 144.76.19.72:19494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:02.809202 2026] [ssl:error] [pid 3069206:tid 3069206] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:02.862858 2026] [ssl:error] [pid 3068026:tid 3068026] (EAI 2)Name or service not known: [client 144.76.19.72:19506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:02.862895 2026] [ssl:error] [pid 3068026:tid 3068026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:03.212367 2026] [authz_core:error] [pid 3069042:tid 3069042] [client 57.141.0.5:24308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:03.212999 2026] [authz_core:error] [pid 3069042:tid 3069042] [client 57.141.0.5:24308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:03.663010 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.25:56878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:03.663650 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.25:56878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:05.306369 2026] [ssl:error] [pid 3068198:tid 3068198] (70014)End of file found: [client 216.73.216.199:58880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:05.840312 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.68:49014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:05.841120 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.68:49014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:05.917080 2026] [ssl:error] [pid 3067468:tid 3067468] (EAI 2)Name or service not known: [client 144.76.19.72:19522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:05.917115 2026] [ssl:error] [pid 3067468:tid 3067468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:05.970620 2026] [ssl:error] [pid 3067689:tid 3067689] (EAI 2)Name or service not known: [client 144.76.19.72:19536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:05.970652 2026] [ssl:error] [pid 3067689:tid 3067689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:06.232132 2026] [security2:error] [pid 3068390:tid 3068390] [client 45.249.89.53:59348] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/root/.config/gcloud/credentials.db"] [unique_id "ams1CmM3DkyKHCR3u9XJ1AAAABc"]
[Thu Jul 30 12:27:06.232439 2026] [security2:error] [pid 3068390:tid 3068390] [client 45.249.89.53:59348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/root/.config/gcloud/credentials.db"] [unique_id "ams1CmM3DkyKHCR3u9XJ1AAAABc"]
[Thu Jul 30 12:27:06.232675 2026] [security2:error] [pid 3068390:tid 3068390] [client 45.249.89.53:59348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/root/.config/gcloud/credentials.db"] [unique_id "ams1CmM3DkyKHCR3u9XJ1AAAABc"]
[Thu Jul 30 12:27:06.259938 2026] [security2:error] [pid 3068904:tid 3068904] [client 114.119.167.129:28449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/sitemap-pt-post-2003-03.html"] [unique_id "ams1CpjHMnnuGsTnLvDI6QAAAAQ"], referer: http://www.localhero.org.uk/sitemap.html
[Thu Jul 30 12:27:06.614254 2026] [ssl:error] [pid 3068017:tid 3068017] (70014)End of file found: [client 216.73.216.199:6855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:06.839031 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.9:28572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:06.839663 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.9:28572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:07.171522 2026] [access_compat:error] [pid 3068014:tid 3068014] [client 176.241.66.87:7917] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:07.250359 2026] [cgi:error] [pid 3069205:tid 3069205] [client 128.14.237.43:49344] AH02812: stderr from /home/ppclcom/parallel-coordinates.org/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:27:07.518099 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 57.141.0.62:62386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:07.518731 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 57.141.0.62:62386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:07.611552 2026] [security2:error] [pid 3069204:tid 3069204] [client 101.47.20.221:29067] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1C0yGfIjDI4FJOvj15wAAADA"]
[Thu Jul 30 12:27:07.611614 2026] [security2:error] [pid 3069204:tid 3069204] [client 101.47.20.221:29067] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1C0yGfIjDI4FJOvj15wAAADA"]
[Thu Jul 30 12:27:07.611861 2026] [security2:error] [pid 3069204:tid 3069204] [client 101.47.20.221:29067] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1C0yGfIjDI4FJOvj15wAAADA"]
[Thu Jul 30 12:27:07.844903 2026] [security2:error] [pid 3068232:tid 3068232] [client 85.208.96.202:53746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.5565.html"] [unique_id "ams1C98xaabPs62I6n_oPgAAADY"]
[Thu Jul 30 12:27:08.647036 2026] [core:error] [pid 3069160:tid 3069160] (13)Permission denied: [client 216.73.216.199:22535] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/slabs_cpu_partial
[Thu Jul 30 12:27:08.789782 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.68:49026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:08.790415 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.68:49026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:09.024663 2026] [ssl:error] [pid 3068026:tid 3068026] (EAI 2)Name or service not known: [client 144.76.19.72:19546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:09.024707 2026] [ssl:error] [pid 3068026:tid 3068026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:09.027684 2026] [core:error] [pid 3069123:tid 3069123] [client 66.249.66.169:40658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:09.027707 2026] [core:error] [pid 3069123:tid 3069123] [client 66.249.66.169:40658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:09.076770 2026] [ssl:error] [pid 3069205:tid 3069205] (EAI 2)Name or service not known: [client 144.76.19.72:19548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:09.076822 2026] [ssl:error] [pid 3069205:tid 3069205] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:09.092193 2026] [core:error] [pid 3067466:tid 3067466] [client 66.249.66.168:51673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:09.092231 2026] [core:error] [pid 3067466:tid 3067466] [client 66.249.66.168:51673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:09.650728 2026] [security2:error] [pid 3068158:tid 3068158] [client 110.42.208.131:50922] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "ams1DdbrMDoOTv5M2WqE0AAAADE"], referer: http://prosperon.co.uk
[Thu Jul 30 12:27:09.885321 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.62:62400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:09.885936 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.62:62400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:10.587640 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.68:49034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:10.588263 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.68:49034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:10.594764 2026] [security2:error] [pid 3068904:tid 3068904] [client 114.119.135.232:47937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/A.6-Gaza-Palestine-2009-Conflict.pdf"] [unique_id "ams1DpjHMnnuGsTnLvDI6wAAAAQ"]
[Thu Jul 30 12:27:11.925387 2026] [access_compat:error] [pid 3068904:tid 3068904] [client 176.241.66.87:62006] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:12.083252 2026] [ssl:error] [pid 3068231:tid 3068231] (70014)End of file found: [client 216.73.216.199:46512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:12.102919 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.16:25088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:12.103558 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.16:25088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:12.131120 2026] [ssl:error] [pid 3067468:tid 3067468] (EAI 2)Name or service not known: [client 144.76.19.72:47204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:12.131145 2026] [ssl:error] [pid 3067468:tid 3067468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:12.184653 2026] [ssl:error] [pid 3068020:tid 3068020] (EAI 2)Name or service not known: [client 144.76.19.72:47208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:12.184697 2026] [ssl:error] [pid 3068020:tid 3068020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:12.364149 2026] [authz_core:error] [pid 3068198:tid 3068198] [client 57.141.0.67:41038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:12.364771 2026] [authz_core:error] [pid 3068198:tid 3068198] [client 57.141.0.67:41038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:12.655765 2026] [access_compat:error] [pid 3067545:tid 3067545] [client 157.20.138.62:57091] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:12.688152 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:22535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:13.159862 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.8:38054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:13.160519 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.8:38054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:13.208729 2026] [core:error] [pid 3068020:tid 3068020] (13)Permission denied: [client 216.73.216.199:11999] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_pending_reservation/cpu_partial
[Thu Jul 30 12:27:14.454496 2026] [security2:error] [pid 3068233:tid 3068233] [client 85.208.96.198:53354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/mandrill-bite-strength"] [unique_id "ams1EqLveGzswds2FqfQKAAAADc"]
[Thu Jul 30 12:27:14.530179 2026] [core:error] [pid 3068020:tid 3068020] (13)Permission denied: [client 216.73.216.199:11999] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/signal_cache/order
[Thu Jul 30 12:27:15.136125 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.14:36232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:15.136766 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.14:36232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:15.292489 2026] [ssl:error] [pid 3069204:tid 3069204] (EAI 2)Name or service not known: [client 144.76.19.72:47214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:15.292534 2026] [ssl:error] [pid 3069204:tid 3069204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:15.348679 2026] [ssl:error] [pid 3069204:tid 3069204] (EAI 2)Name or service not known: [client 144.76.19.72:47224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:15.348702 2026] [ssl:error] [pid 3069204:tid 3069204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:15.573193 2026] [access_compat:error] [pid 3068158:tid 3068158] [client 125.176.202.122:61809] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:15.756609 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.23:25902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:15.757226 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.23:25902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:16.107541 2026] [cgi:error] [pid 3070571:tid 3070571] [client 128.14.237.43:49940] AH02812: stderr from /home/ppclcom/parallel-coordinates.org/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:27:16.810871 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.61:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:16.811528 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.61:48000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:16.894270 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.3:65414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:16.894887 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.3:65414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:17.757650 2026] [access_compat:error] [pid 3068023:tid 3068023] [client 176.241.66.87:62236] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:18.333006 2026] [security2:error] [pid 3068231:tid 3068231] [client 101.47.20.221:54569] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1FsI5bogH--_ALo9IfQAAACA"]
[Thu Jul 30 12:27:18.333050 2026] [security2:error] [pid 3068231:tid 3068231] [client 101.47.20.221:54569] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1FsI5bogH--_ALo9IfQAAACA"]
[Thu Jul 30 12:27:18.333321 2026] [security2:error] [pid 3068231:tid 3068231] [client 101.47.20.221:54569] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1FsI5bogH--_ALo9IfQAAACA"]
[Thu Jul 30 12:27:18.387338 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.31:58182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:18.387990 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.31:58182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:18.401997 2026] [ssl:error] [pid 3069042:tid 3069042] (EAI 2)Name or service not known: [client 144.76.19.72:47236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:18.402031 2026] [ssl:error] [pid 3069042:tid 3069042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:18.453906 2026] [ssl:error] [pid 3068904:tid 3068904] (EAI 2)Name or service not known: [client 144.76.19.72:47238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:18.453940 2026] [ssl:error] [pid 3068904:tid 3068904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:19.638258 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.35:61030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:19.638937 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.35:61030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:19.742304 2026] [authz_core:error] [pid 3069042:tid 3069042] [client 57.141.0.30:29060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:19.742927 2026] [authz_core:error] [pid 3069042:tid 3069042] [client 57.141.0.30:29060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:21.507512 2026] [ssl:error] [pid 3069204:tid 3069204] (EAI 2)Name or service not known: [client 144.76.19.72:40646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:21.507543 2026] [ssl:error] [pid 3069204:tid 3069204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:21.563206 2026] [ssl:error] [pid 3068198:tid 3068198] (EAI 2)Name or service not known: [client 144.76.19.72:40652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:21.563238 2026] [ssl:error] [pid 3068198:tid 3068198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:21.603468 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.8:41104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:21.604170 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.8:41104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:21.705426 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 66.249.66.33:38357] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:27:21.708087 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 66.249.66.33:38357] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:27:22.050104 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.36:57744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:22.050726 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.36:57744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:22.419614 2026] [access_compat:error] [pid 3067991:tid 3067991] [client 125.176.202.122:62168] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:22.452496 2026] [access_compat:error] [pid 3067466:tid 3067466] [client 176.241.66.87:9166] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:22.457191 2026] [core:error] [pid 3068390:tid 3068390] (13)Permission denied: [client 216.73.216.199:2625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS2/uartclk
[Thu Jul 30 12:27:22.757925 2026] [core:error] [pid 3068390:tid 3068390] (13)Permission denied: [client 216.73.216.199:2625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS2/flags
[Thu Jul 30 12:27:22.948232 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.4:58588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:22.948859 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.4:58588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:23.159860 2026] [access_compat:error] [pid 3070129:tid 3070129] [client 157.20.138.62:57875] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:23.365974 2026] [ssl:error] [pid 3068390:tid 3068390] (70014)End of file found: [client 216.73.216.199:2625] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:23.797387 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.67:20930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:23.798010 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.67:20930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:24.272565 2026] [ssl:error] [pid 3068020:tid 3068020] (70014)End of file found: [client 216.73.216.199:11999] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:24.616382 2026] [ssl:error] [pid 3067954:tid 3067954] (EAI 2)Name or service not known: [client 144.76.19.72:40660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:24.616421 2026] [ssl:error] [pid 3067954:tid 3067954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:24.672284 2026] [ssl:error] [pid 3068233:tid 3068233] (EAI 2)Name or service not known: [client 144.76.19.72:40670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:24.672310 2026] [ssl:error] [pid 3068233:tid 3068233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:24.788257 2026] [core:error] [pid 3068015:tid 3068015] (13)Permission denied: [client 216.73.216.199:43639] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS2/flags
[Thu Jul 30 12:27:24.802685 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.50:62200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:24.803302 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.50:62200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:24.971190 2026] [core:error] [pid 3067954:tid 3067954] [client 66.249.66.167:55145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:24.971214 2026] [core:error] [pid 3067954:tid 3067954] [client 66.249.66.167:55145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:25.565326 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.64:20632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:25.565949 2026] [authz_core:error] [pid 3067954:tid 3067954] [client 57.141.0.64:20632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:25.784318 2026] [ssl:error] [pid 3068015:tid 3068015] (70014)End of file found: [client 216.73.216.199:43639] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:26.177634 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.8:54914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:26.178267 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.8:54914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:26.914533 2026] [core:error] [pid 3068021:tid 3068021] [client 66.249.64.170:38982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:26.914577 2026] [core:error] [pid 3068021:tid 3068021] [client 66.249.64.170:38982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:26.938983 2026] [access_compat:error] [pid 3068025:tid 3068025] [client 125.176.202.122:62340] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:27.701489 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.13:53664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:27.702140 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.13:53664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:27.729614 2026] [ssl:error] [pid 3067956:tid 3067956] (EAI 2)Name or service not known: [client 144.76.19.72:40674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:27.729642 2026] [ssl:error] [pid 3067956:tid 3067956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:27.749555 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 66.249.66.33:43815] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:27:27.752289 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 66.249.66.33:43815] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:27:27.781345 2026] [ssl:error] [pid 3068016:tid 3068016] (EAI 2)Name or service not known: [client 144.76.19.72:40676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:27.781389 2026] [ssl:error] [pid 3068016:tid 3068016] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:28.534210 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.56:54300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:28.534834 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.56:54300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:28.898696 2026] [authz_core:error] [pid 3070129:tid 3070129] [client 57.141.0.40:25898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:28.899343 2026] [authz_core:error] [pid 3070129:tid 3070129] [client 57.141.0.40:25898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:29.587354 2026] [security2:error] [pid 3070129:tid 3070129] [client 74.7.227.146:41388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "loca.co.uk"] [uri "/"] [unique_id "ams1Ifw2yP6bUcoihOF5AgAAAAU"]
[Thu Jul 30 12:27:30.452041 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 57.141.0.26:56240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:30.452698 2026] [authz_core:error] [pid 3067734:tid 3067734] [client 57.141.0.26:56240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:30.836297 2026] [ssl:error] [pid 3068023:tid 3068023] (EAI 2)Name or service not known: [client 144.76.19.72:29686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:30.836345 2026] [ssl:error] [pid 3068023:tid 3068023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:30.865047 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.64:20642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:30.865712 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.64:20642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:30.894344 2026] [ssl:error] [pid 3068390:tid 3068390] (EAI 2)Name or service not known: [client 144.76.19.72:29696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:30.894383 2026] [ssl:error] [pid 3068390:tid 3068390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:30.898686 2026] [ssl:error] [pid 3068308:tid 3068308] (70014)End of file found: [client 216.73.216.199:41494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:31.282658 2026] [security2:error] [pid 3068023:tid 3068023] [client 18.206.47.187:6429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/wp-content-677f/uploads/2014/04/premium-bond-prize-129x110.jpg"] [unique_id "ams1I8wltRLIApIOyYkh9wAAACo"]
[Thu Jul 30 12:27:31.360794 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSAAAAAI"]
[Thu Jul 30 12:27:31.360998 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSAAAAAI"]
[Thu Jul 30 12:27:31.361235 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSAAAAAI"]
[Thu Jul 30 12:27:31.379921 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/api/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSQAAAAI"]
[Thu Jul 30 12:27:31.380053 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/api/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSQAAAAI"]
[Thu Jul 30 12:27:31.380234 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/api/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSQAAAAI"]
[Thu Jul 30 12:27:31.398962 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/backend/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSgAAAAI"]
[Thu Jul 30 12:27:31.399104 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/backend/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSgAAAAI"]
[Thu Jul 30 12:27:31.399262 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/backend/.env"] [unique_id "ams1I9RdTJA3erHnfDsYSgAAAAI"]
[Thu Jul 30 12:27:31.437314 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/admin/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTAAAAAI"]
[Thu Jul 30 12:27:31.437439 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/admin/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTAAAAAI"]
[Thu Jul 30 12:27:31.437608 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/admin/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTAAAAAI"]
[Thu Jul 30 12:27:31.475461 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/laravel/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTgAAAAI"]
[Thu Jul 30 12:27:31.475622 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/laravel/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTgAAAAI"]
[Thu Jul 30 12:27:31.475789 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/laravel/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTgAAAAI"]
[Thu Jul 30 12:27:31.497026 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/core/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTwAAAAI"]
[Thu Jul 30 12:27:31.497177 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/core/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTwAAAAI"]
[Thu Jul 30 12:27:31.497342 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/core/.env"] [unique_id "ams1I9RdTJA3erHnfDsYTwAAAAI"]
[Thu Jul 30 12:27:31.509617 2026] [ssl:error] [pid 3068020:tid 3068020] (70014)End of file found: [client 216.73.216.199:61483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:31.536865 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/.env.example"] [unique_id "ams1I9RdTJA3erHnfDsYUQAAAAI"]
[Thu Jul 30 12:27:31.537006 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/.env.example"] [unique_id "ams1I9RdTJA3erHnfDsYUQAAAAI"]
[Thu Jul 30 12:27:31.537183 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/.env.example"] [unique_id "ams1I9RdTJA3erHnfDsYUQAAAAI"]
[Thu Jul 30 12:27:31.555908 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/app/.env"] [unique_id "ams1I9RdTJA3erHnfDsYUgAAAAI"]
[Thu Jul 30 12:27:31.556032 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/app/.env"] [unique_id "ams1I9RdTJA3erHnfDsYUgAAAAI"]
[Thu Jul 30 12:27:31.556210 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/app/.env"] [unique_id "ams1I9RdTJA3erHnfDsYUgAAAAI"]
[Thu Jul 30 12:27:31.574960 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/dev/.env"] [unique_id "ams1I9RdTJA3erHnfDsYUwAAAAI"]
[Thu Jul 30 12:27:31.575115 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/dev/.env"] [unique_id "ams1I9RdTJA3erHnfDsYUwAAAAI"]
[Thu Jul 30 12:27:31.575273 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:45085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/dev/.env"] [unique_id "ams1I9RdTJA3erHnfDsYUwAAAAI"]
[Thu Jul 30 12:27:32.035892 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.44:30802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:32.036553 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.44:30802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:32.167970 2026] [security2:error] [pid 3067987:tid 3067987] [client 185.93.89.167:59857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/server/.env"] [unique_id "ams1JL9Gj9_8vE5LCGAXBAAAABg"]
[Thu Jul 30 12:27:32.168243 2026] [security2:error] [pid 3067987:tid 3067987] [client 185.93.89.167:59857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/server/.env"] [unique_id "ams1JL9Gj9_8vE5LCGAXBAAAABg"]
[Thu Jul 30 12:27:32.168527 2026] [security2:error] [pid 3067987:tid 3067987] [client 185.93.89.167:59857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/server/.env"] [unique_id "ams1JL9Gj9_8vE5LCGAXBAAAABg"]
[Thu Jul 30 12:27:32.184575 2026] [security2:error] [pid 3067987:tid 3067987] [client 185.93.89.167:59857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/.env.save"] [unique_id "ams1JL9Gj9_8vE5LCGAXBQAAABg"]
[Thu Jul 30 12:27:32.184840 2026] [security2:error] [pid 3067987:tid 3067987] [client 185.93.89.167:59857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/.env.save"] [unique_id "ams1JL9Gj9_8vE5LCGAXBQAAABg"]
[Thu Jul 30 12:27:32.185140 2026] [security2:error] [pid 3067987:tid 3067987] [client 185.93.89.167:59857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/.env.save"] [unique_id "ams1JL9Gj9_8vE5LCGAXBQAAABg"]
[Thu Jul 30 12:27:32.409159 2026] [ssl:error] [pid 3070129:tid 3070129] (70014)End of file found: [client 216.73.216.199:5737] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:33.123112 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVQAAAAI"]
[Thu Jul 30 12:27:33.123315 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVQAAAAI"]
[Thu Jul 30 12:27:33.123524 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVQAAAAI"]
[Thu Jul 30 12:27:33.140744 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/api/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVgAAAAI"]
[Thu Jul 30 12:27:33.140923 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/api/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVgAAAAI"]
[Thu Jul 30 12:27:33.141100 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/api/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVgAAAAI"]
[Thu Jul 30 12:27:33.157703 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.38:46828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:33.158159 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/backend/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVwAAAAI"]
[Thu Jul 30 12:27:33.158322 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/backend/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVwAAAAI"]
[Thu Jul 30 12:27:33.158347 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.38:46828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:33.158478 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/backend/.env"] [unique_id "ams1JdRdTJA3erHnfDsYVwAAAAI"]
[Thu Jul 30 12:27:33.193175 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/admin/.env"] [unique_id "ams1JdRdTJA3erHnfDsYWQAAAAI"]
[Thu Jul 30 12:27:33.193320 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/admin/.env"] [unique_id "ams1JdRdTJA3erHnfDsYWQAAAAI"]
[Thu Jul 30 12:27:33.193466 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/admin/.env"] [unique_id "ams1JdRdTJA3erHnfDsYWQAAAAI"]
[Thu Jul 30 12:27:33.227927 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/laravel/.env"] [unique_id "ams1JdRdTJA3erHnfDsYWwAAAAI"]
[Thu Jul 30 12:27:33.228096 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/laravel/.env"] [unique_id "ams1JdRdTJA3erHnfDsYWwAAAAI"]
[Thu Jul 30 12:27:33.228248 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/laravel/.env"] [unique_id "ams1JdRdTJA3erHnfDsYWwAAAAI"]
[Thu Jul 30 12:27:33.245168 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/core/.env"] [unique_id "ams1JdRdTJA3erHnfDsYXAAAAAI"]
[Thu Jul 30 12:27:33.245330 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/core/.env"] [unique_id "ams1JdRdTJA3erHnfDsYXAAAAAI"]
[Thu Jul 30 12:27:33.245483 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/core/.env"] [unique_id "ams1JdRdTJA3erHnfDsYXAAAAAI"]
[Thu Jul 30 12:27:33.279831 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/.env.example"] [unique_id "ams1JdRdTJA3erHnfDsYXgAAAAI"]
[Thu Jul 30 12:27:33.279962 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/.env.example"] [unique_id "ams1JdRdTJA3erHnfDsYXgAAAAI"]
[Thu Jul 30 12:27:33.280117 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/.env.example"] [unique_id "ams1JdRdTJA3erHnfDsYXgAAAAI"]
[Thu Jul 30 12:27:33.296989 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/app/.env"] [unique_id "ams1JdRdTJA3erHnfDsYXwAAAAI"]
[Thu Jul 30 12:27:33.297141 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/app/.env"] [unique_id "ams1JdRdTJA3erHnfDsYXwAAAAI"]
[Thu Jul 30 12:27:33.297280 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/app/.env"] [unique_id "ams1JdRdTJA3erHnfDsYXwAAAAI"]
[Thu Jul 30 12:27:33.314247 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/dev/.env"] [unique_id "ams1JdRdTJA3erHnfDsYYAAAAAI"]
[Thu Jul 30 12:27:33.314371 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/dev/.env"] [unique_id "ams1JdRdTJA3erHnfDsYYAAAAAI"]
[Thu Jul 30 12:27:33.314516 2026] [security2:error] [pid 3071225:tid 3071225] [client 185.93.89.167:16245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/dev/.env"] [unique_id "ams1JdRdTJA3erHnfDsYYAAAAAI"]
[Thu Jul 30 12:27:33.371654 2026] [security2:error] [pid 3068195:tid 3068195] [client 185.93.89.167:5161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/server/.env"] [unique_id "ams1JUNFkXXuht3774eNvAAAADI"]
[Thu Jul 30 12:27:33.371870 2026] [security2:error] [pid 3068195:tid 3068195] [client 185.93.89.167:5161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/server/.env"] [unique_id "ams1JUNFkXXuht3774eNvAAAADI"]
[Thu Jul 30 12:27:33.372094 2026] [security2:error] [pid 3068195:tid 3068195] [client 185.93.89.167:5161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/server/.env"] [unique_id "ams1JUNFkXXuht3774eNvAAAADI"]
[Thu Jul 30 12:27:33.387519 2026] [security2:error] [pid 3068195:tid 3068195] [client 185.93.89.167:5161] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/.env.save"] [unique_id "ams1JUNFkXXuht3774eNvQAAADI"]
[Thu Jul 30 12:27:33.387666 2026] [security2:error] [pid 3068195:tid 3068195] [client 185.93.89.167:5161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/.env.save"] [unique_id "ams1JUNFkXXuht3774eNvQAAADI"]
[Thu Jul 30 12:27:33.387817 2026] [security2:error] [pid 3068195:tid 3068195] [client 185.93.89.167:5161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/.env.save"] [unique_id "ams1JUNFkXXuht3774eNvQAAADI"]
[Thu Jul 30 12:27:33.537513 2026] [access_compat:error] [pid 3068014:tid 3068014] [client 125.176.202.122:62594] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:33.683974 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.21:49616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:33.684637 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.21:49616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:33.747263 2026] [access_compat:error] [pid 3070571:tid 3070571] [client 157.20.138.62:58512] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:33.950711 2026] [ssl:error] [pid 3067775:tid 3067775] (EAI 2)Name or service not known: [client 144.76.19.72:29708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:33.950737 2026] [ssl:error] [pid 3067775:tid 3067775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:34.006773 2026] [ssl:error] [pid 3067992:tid 3067992] (EAI 2)Name or service not known: [client 144.76.19.72:29724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:34.006837 2026] [ssl:error] [pid 3067992:tid 3067992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:34.392217 2026] [access_compat:error] [pid 3070541:tid 3070541] [client 45.158.164.139:38052] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:27:34.590434 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.58:37892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:34.591116 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.58:37892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:34.702584 2026] [access_compat:error] [pid 3067775:tid 3067775] [client 45.158.164.139:38062] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:27:34.939344 2026] [security2:error] [pid 3067987:tid 3067987] [client 34.196.6.199:33723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/wp-content-677f/uploads/2014/05/logos.png"] [unique_id "ams1Jr9Gj9_8vE5LCGAXBwAAABg"]
[Thu Jul 30 12:27:35.327750 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.70:27556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:35.328419 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.70:27556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:35.341012 2026] [security2:error] [pid 3068233:tid 3068233] [client 1.12.70.96:60606] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.greenduckgallery.co.uk"] [uri "/"] [unique_id "ams1J6LveGzswds2FqfQLwAAADc"]
[Thu Jul 30 12:27:36.271797 2026] [ssl:error] [pid 3067987:tid 3067987] (70014)End of file found: [client 216.73.216.199:17772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:36.299475 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.41:50580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:36.300114 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.41:50580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:36.554278 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.59:60018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:36.554899 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.59:60018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:37.060704 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:29730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:37.060736 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:37.183724 2026] [ssl:error] [pid 3068020:tid 3068020] (EAI 2)Name or service not known: [client 144.76.19.72:29744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:37.183768 2026] [ssl:error] [pid 3068020:tid 3068020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:37.224461 2026] [authz_core:error] [pid 3069205:tid 3069205] [client 57.141.0.47:59442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:37.225098 2026] [authz_core:error] [pid 3069205:tid 3069205] [client 57.141.0.47:59442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:37.473078 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.21:49618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:37.473702 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.21:49618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:38.159826 2026] [core:error] [pid 3071450:tid 3071450] (13)Permission denied: [client 216.73.216.199:19783] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/sunrpc/sections/__param
[Thu Jul 30 12:27:39.079097 2026] [security2:error] [pid 3071450:tid 3071450] [client 216.73.216.199:19783] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/setup.conf"] [unique_id "ams1KyP4_0JDcznDl-Za8AAAAAQ"]
[Thu Jul 30 12:27:39.079388 2026] [security2:error] [pid 3071450:tid 3071450] [client 216.73.216.199:19783] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/setup.conf"] [unique_id "ams1KyP4_0JDcznDl-Za8AAAAAQ"]
[Thu Jul 30 12:27:39.079610 2026] [security2:error] [pid 3071450:tid 3071450] [client 216.73.216.199:19783] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/protected.d/setup.conf"] [unique_id "ams1KyP4_0JDcznDl-Za8AAAAAQ"]
[Thu Jul 30 12:27:39.531103 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.40:30550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:39.531730 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.40:30550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:39.894896 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.17:31396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:39.895559 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.17:31396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:40.194999 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.28:51412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:40.195631 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.28:51412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:40.238168 2026] [ssl:error] [pid 3067689:tid 3067689] (EAI 2)Name or service not known: [client 144.76.19.72:53220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:40.238212 2026] [ssl:error] [pid 3067689:tid 3067689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:40.294308 2026] [ssl:error] [pid 3067991:tid 3067991] (EAI 2)Name or service not known: [client 144.76.19.72:53228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:40.294350 2026] [ssl:error] [pid 3067991:tid 3067991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:40.590361 2026] [ssl:error] [pid 3068024:tid 3068024] (70014)End of file found: [client 216.73.216.199:59387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:40.906572 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.26:51612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:40.907223 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.26:51612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:41.279932 2026] [security2:error] [pid 3068014:tid 3068014] [client 185.191.171.16:32194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9412.0/prev_next,prev.html"] [unique_id "ams1Lf0tEKWAi3GU5OV-ewAAACE"]
[Thu Jul 30 12:27:41.427205 2026] [access_compat:error] [pid 3069160:tid 3069160] [client 125.176.202.122:62859] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:41.678352 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.39:45996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:41.678984 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.39:45996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:42.662084 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.67:37010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:42.662734 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 57.141.0.67:37010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:42.693174 2026] [ssl:error] [pid 3071450:tid 3071450] (70014)End of file found: [client 216.73.216.199:19783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:42.994739 2026] [ssl:error] [pid 3070571:tid 3070571] (70014)End of file found: [client 216.73.216.199:39347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:43.051063 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.54:23618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:43.051705 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.54:23618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:43.388104 2026] [ssl:error] [pid 3068308:tid 3068308] (EAI 2)Name or service not known: [client 144.76.19.72:53230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:43.388149 2026] [ssl:error] [pid 3068308:tid 3068308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:43.446119 2026] [ssl:error] [pid 3068027:tid 3068027] (EAI 2)Name or service not known: [client 144.76.19.72:53236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:43.446150 2026] [ssl:error] [pid 3068027:tid 3068027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:44.194575 2026] [authz_core:error] [pid 3067545:tid 3067545] [client 57.141.0.30:63370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:44.195223 2026] [authz_core:error] [pid 3067545:tid 3067545] [client 57.141.0.30:63370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:44.321508 2026] [access_compat:error] [pid 3068308:tid 3068308] [client 157.20.138.62:59106] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:44.855527 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.45:27058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:44.856187 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.45:27058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:45.604643 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.1:26838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:45.605273 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.1:26838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:46.204951 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.39:51462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:46.205610 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.39:51462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:46.578599 2026] [ssl:error] [pid 3068015:tid 3068015] (EAI 2)Name or service not known: [client 144.76.19.72:53240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:46.578648 2026] [ssl:error] [pid 3068015:tid 3068015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:46.633166 2026] [ssl:error] [pid 3068196:tid 3068196] (EAI 2)Name or service not known: [client 144.76.19.72:53252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:46.633217 2026] [ssl:error] [pid 3068196:tid 3068196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:46.896514 2026] [core:error] [pid 3068233:tid 3068233] [client 66.249.66.66:50211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:46.896545 2026] [core:error] [pid 3068233:tid 3068233] [client 66.249.66.66:50211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:47.887267 2026] [core:error] [pid 3071225:tid 3071225] [client 66.249.66.66:56820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:47.887298 2026] [core:error] [pid 3071225:tid 3071225] [client 66.249.66.66:56820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:27:48.183293 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.27:32702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:48.183914 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.27:32702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:48.427835 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.30:63378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:48.428544 2026] [authz_core:error] [pid 3068017:tid 3068017] [client 57.141.0.30:63378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:48.865836 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.43:38210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:48.866483 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.43:38210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:48.867708 2026] [core:error] [pid 3068195:tid 3068195] (13)Permission denied: [client 216.73.216.199:4807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/syscopyarea/sections/__mcount_loc
[Thu Jul 30 12:27:49.050810 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.8:52642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:49.051442 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.8:52642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:49.607783 2026] [authz_core:error] [pid 3068232:tid 3068232] [client 57.141.0.71:52312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:49.608414 2026] [authz_core:error] [pid 3068232:tid 3068232] [client 57.141.0.71:52312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:49.688187 2026] [ssl:error] [pid 3067734:tid 3067734] (EAI 2)Name or service not known: [client 144.76.19.72:64516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:49.688217 2026] [ssl:error] [pid 3067734:tid 3067734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:49.744137 2026] [ssl:error] [pid 3068014:tid 3068014] (EAI 2)Name or service not known: [client 144.76.19.72:64520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:49.744171 2026] [ssl:error] [pid 3068014:tid 3068014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:50.130991 2026] [core:error] [pid 3068195:tid 3068195] (13)Permission denied: [client 216.73.216.199:4807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/align
[Thu Jul 30 12:27:50.432039 2026] [core:error] [pid 3068195:tid 3068195] (13)Permission denied: [client 216.73.216.199:4807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/align
[Thu Jul 30 12:27:50.885868 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.52:37354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:50.886510 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.52:37354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:51.032953 2026] [security2:error] [pid 3068308:tid 3068308] [client 185.191.171.9:37252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6300.0/prev_next,next.html"] [unique_id "ams1Nx_0SzRZhL0QTk9d_QAAAC0"]
[Thu Jul 30 12:27:51.034688 2026] [ssl:error] [pid 3068195:tid 3068195] (70014)End of file found: [client 216.73.216.199:4807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:51.488333 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.55:31574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:51.489346 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.55:31574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:51.941209 2026] [ssl:error] [pid 3068016:tid 3068016] (70014)End of file found: [client 216.73.216.199:8278] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:52.300835 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.38:38504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:52.301471 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.38:38504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:52.430054 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.45:31198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:52.430719 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.45:31198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:52.804888 2026] [ssl:error] [pid 3067987:tid 3067987] (EAI 2)Name or service not known: [client 144.76.19.72:64526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:52.804943 2026] [ssl:error] [pid 3067987:tid 3067987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:52.863228 2026] [ssl:error] [pid 3067467:tid 3067467] (EAI 2)Name or service not known: [client 144.76.19.72:64534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:52.863267 2026] [ssl:error] [pid 3067467:tid 3067467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:53.129320 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.git/config"] [unique_id "ams1OR_0SzRZhL0QTk9eAgAAAC0"]
[Thu Jul 30 12:27:53.129527 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.git/config"] [unique_id "ams1OR_0SzRZhL0QTk9eAgAAAC0"]
[Thu Jul 30 12:27:53.129755 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.git/config"] [unique_id "ams1OR_0SzRZhL0QTk9eAgAAAC0"]
[Thu Jul 30 12:27:53.502829 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env"] [unique_id "ams1OR_0SzRZhL0QTk9eBAAAAC0"]
[Thu Jul 30 12:27:53.502990 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env"] [unique_id "ams1OR_0SzRZhL0QTk9eBAAAAC0"]
[Thu Jul 30 12:27:53.503196 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env"] [unique_id "ams1OR_0SzRZhL0QTk9eBAAAAC0"]
[Thu Jul 30 12:27:53.603128 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.40:64070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:53.603763 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.40:64070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:53.689426 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.local"] [unique_id "ams1OR_0SzRZhL0QTk9eBQAAAC0"]
[Thu Jul 30 12:27:53.689639 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.local"] [unique_id "ams1OR_0SzRZhL0QTk9eBQAAAC0"]
[Thu Jul 30 12:27:53.689844 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.local"] [unique_id "ams1OR_0SzRZhL0QTk9eBQAAAC0"]
[Thu Jul 30 12:27:53.752315 2026] [ssl:error] [pid 3068025:tid 3068025] (70014)End of file found: [client 216.73.216.199:59069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:53.832637 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 54.200.132.85:12118] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 12:27:53.832684 2026] [authz_core:error] [pid 3067957:tid 3067957] [client 54.200.132.85:12118] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 12:27:53.875810 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.production"] [unique_id "ams1OR_0SzRZhL0QTk9eBgAAAC0"]
[Thu Jul 30 12:27:53.875999 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.production"] [unique_id "ams1OR_0SzRZhL0QTk9eBgAAAC0"]
[Thu Jul 30 12:27:53.876212 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.production"] [unique_id "ams1OR_0SzRZhL0QTk9eBgAAAC0"]
[Thu Jul 30 12:27:53.922585 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.29:53550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:53.923212 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.29:53550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:54.066744 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.staging"] [unique_id "ams1Oh_0SzRZhL0QTk9eBwAAAC0"]
[Thu Jul 30 12:27:54.066943 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.staging"] [unique_id "ams1Oh_0SzRZhL0QTk9eBwAAAC0"]
[Thu Jul 30 12:27:54.067176 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.staging"] [unique_id "ams1Oh_0SzRZhL0QTk9eBwAAAC0"]
[Thu Jul 30 12:27:54.252943 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.development"] [unique_id "ams1Oh_0SzRZhL0QTk9eCAAAAC0"]
[Thu Jul 30 12:27:54.253150 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.development"] [unique_id "ams1Oh_0SzRZhL0QTk9eCAAAAC0"]
[Thu Jul 30 12:27:54.253358 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.development"] [unique_id "ams1Oh_0SzRZhL0QTk9eCAAAAC0"]
[Thu Jul 30 12:27:54.254195 2026] [access_compat:error] [pid 3067467:tid 3067467] [client 125.176.202.122:63366] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:54.438931 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.test"] [unique_id "ams1Oh_0SzRZhL0QTk9eCQAAAC0"]
[Thu Jul 30 12:27:54.439150 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.test"] [unique_id "ams1Oh_0SzRZhL0QTk9eCQAAAC0"]
[Thu Jul 30 12:27:54.439367 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.test"] [unique_id "ams1Oh_0SzRZhL0QTk9eCQAAAC0"]
[Thu Jul 30 12:27:54.625736 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.remote"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.remote"] [unique_id "ams1Oh_0SzRZhL0QTk9eCgAAAC0"]
[Thu Jul 30 12:27:54.625940 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.remote"] [unique_id "ams1Oh_0SzRZhL0QTk9eCgAAAC0"]
[Thu Jul 30 12:27:54.626160 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.remote"] [unique_id "ams1Oh_0SzRZhL0QTk9eCgAAAC0"]
[Thu Jul 30 12:27:54.798787 2026] [access_compat:error] [pid 3067689:tid 3067689] [client 157.20.138.62:59718] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:27:54.814209 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.bak"] [unique_id "ams1Oh_0SzRZhL0QTk9eCwAAAC0"]
[Thu Jul 30 12:27:54.814396 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.bak"] [unique_id "ams1Oh_0SzRZhL0QTk9eCwAAAC0"]
[Thu Jul 30 12:27:54.814604 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.bak"] [unique_id "ams1Oh_0SzRZhL0QTk9eCwAAAC0"]
[Thu Jul 30 12:27:54.975875 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.38:38508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:54.976496 2026] [authz_core:error] [pid 3068014:tid 3068014] [client 57.141.0.38:38508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:55.000917 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.backup"] [unique_id "ams1Ox_0SzRZhL0QTk9eDAAAAC0"]
[Thu Jul 30 12:27:55.001056 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.backup"] [unique_id "ams1Ox_0SzRZhL0QTk9eDAAAAC0"]
[Thu Jul 30 12:27:55.001261 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.backup"] [unique_id "ams1Ox_0SzRZhL0QTk9eDAAAAC0"]
[Thu Jul 30 12:27:55.192726 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.save"] [unique_id "ams1Ox_0SzRZhL0QTk9eDQAAAC0"]
[Thu Jul 30 12:27:55.192921 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.save"] [unique_id "ams1Ox_0SzRZhL0QTk9eDQAAAC0"]
[Thu Jul 30 12:27:55.193139 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.save"] [unique_id "ams1Ox_0SzRZhL0QTk9eDQAAAC0"]
[Thu Jul 30 12:27:55.378894 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.old"] [unique_id "ams1Ox_0SzRZhL0QTk9eDgAAAC0"]
[Thu Jul 30 12:27:55.379111 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.old"] [unique_id "ams1Ox_0SzRZhL0QTk9eDgAAAC0"]
[Thu Jul 30 12:27:55.379328 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.old"] [unique_id "ams1Ox_0SzRZhL0QTk9eDgAAAC0"]
[Thu Jul 30 12:27:55.411190 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.33:33682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:55.411823 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.33:33682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:55.457900 2026] [core:error] [pid 3068026:tid 3068026] (13)Permission denied: [client 216.73.216.199:6597] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-16/hwcache_align
[Thu Jul 30 12:27:55.570280 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.sample"] [unique_id "ams1Ox_0SzRZhL0QTk9eDwAAAC0"]
[Thu Jul 30 12:27:55.570468 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.sample"] [unique_id "ams1Ox_0SzRZhL0QTk9eDwAAAC0"]
[Thu Jul 30 12:27:55.570687 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.sample"] [unique_id "ams1Ox_0SzRZhL0QTk9eDwAAAC0"]
[Thu Jul 30 12:27:55.757478 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.example"] [unique_id "ams1Ox_0SzRZhL0QTk9eEAAAAC0"]
[Thu Jul 30 12:27:55.757680 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.example"] [unique_id "ams1Ox_0SzRZhL0QTk9eEAAAAC0"]
[Thu Jul 30 12:27:55.757886 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.example"] [unique_id "ams1Ox_0SzRZhL0QTk9eEAAAAC0"]
[Thu Jul 30 12:27:55.862282 2026] [ssl:error] [pid 3071225:tid 3071225] (70014)End of file found: [client 216.73.216.199:21977] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:55.947739 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.dev"] [unique_id "ams1Ox_0SzRZhL0QTk9eEQAAAC0"]
[Thu Jul 30 12:27:55.947894 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.dev"] [unique_id "ams1Ox_0SzRZhL0QTk9eEQAAAC0"]
[Thu Jul 30 12:27:55.948097 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.dev"] [unique_id "ams1Ox_0SzRZhL0QTk9eEQAAAC0"]
[Thu Jul 30 12:27:55.962353 2026] [ssl:error] [pid 3068236:tid 3068236] (EAI 2)Name or service not known: [client 144.76.19.72:64538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:55.962384 2026] [ssl:error] [pid 3068236:tid 3068236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:55.987737 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.40:64072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:55.988363 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.40:64072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:56.019145 2026] [ssl:error] [pid 3068014:tid 3068014] (EAI 2)Name or service not known: [client 144.76.19.72:64550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:56.019165 2026] [ssl:error] [pid 3068014:tid 3068014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:56.133779 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.prod"] [unique_id "ams1PB_0SzRZhL0QTk9eEgAAAC0"]
[Thu Jul 30 12:27:56.133964 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.prod"] [unique_id "ams1PB_0SzRZhL0QTk9eEgAAAC0"]
[Thu Jul 30 12:27:56.134181 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.prod"] [unique_id "ams1PB_0SzRZhL0QTk9eEgAAAC0"]
[Thu Jul 30 12:27:56.321821 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.stage"] [unique_id "ams1PB_0SzRZhL0QTk9eEwAAAC0"]
[Thu Jul 30 12:27:56.322017 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.stage"] [unique_id "ams1PB_0SzRZhL0QTk9eEwAAAC0"]
[Thu Jul 30 12:27:56.322227 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.stage"] [unique_id "ams1PB_0SzRZhL0QTk9eEwAAAC0"]
[Thu Jul 30 12:27:56.508221 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ci"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.ci"] [unique_id "ams1PB_0SzRZhL0QTk9eFAAAAC0"]
[Thu Jul 30 12:27:56.508428 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.ci"] [unique_id "ams1PB_0SzRZhL0QTk9eFAAAAC0"]
[Thu Jul 30 12:27:56.508644 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.ci"] [unique_id "ams1PB_0SzRZhL0QTk9eFAAAAC0"]
[Thu Jul 30 12:27:56.562369 2026] [security2:error] [pid 3067775:tid 3067775] [client 43.138.68.113:48912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "nigelmassey.com"] [uri "/"] [unique_id "ams1PHSNFImGjNOWzzWpUAAAAAo"]
[Thu Jul 30 12:27:56.686056 2026] [authz_core:error] [pid 3067545:tid 3067545] [client 57.141.0.39:20380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:56.686711 2026] [authz_core:error] [pid 3067545:tid 3067545] [client 57.141.0.39:20380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:56.694921 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.docker"] [unique_id "ams1PB_0SzRZhL0QTk9eFQAAAC0"]
[Thu Jul 30 12:27:56.695105 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.docker"] [unique_id "ams1PB_0SzRZhL0QTk9eFQAAAC0"]
[Thu Jul 30 12:27:56.695323 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.docker"] [unique_id "ams1PB_0SzRZhL0QTk9eFQAAAC0"]
[Thu Jul 30 12:27:56.881199 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.live"] [unique_id "ams1PB_0SzRZhL0QTk9eFgAAAC0"]
[Thu Jul 30 12:27:56.881357 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.live"] [unique_id "ams1PB_0SzRZhL0QTk9eFgAAAC0"]
[Thu Jul 30 12:27:56.881582 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.live"] [unique_id "ams1PB_0SzRZhL0QTk9eFgAAAC0"]
[Thu Jul 30 12:27:57.069818 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.preprod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.preprod"] [unique_id "ams1PR_0SzRZhL0QTk9eFwAAAC0"]
[Thu Jul 30 12:27:57.069957 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.preprod"] [unique_id "ams1PR_0SzRZhL0QTk9eFwAAAC0"]
[Thu Jul 30 12:27:57.070158 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.preprod"] [unique_id "ams1PR_0SzRZhL0QTk9eFwAAAC0"]
[Thu Jul 30 12:27:57.077153 2026] [ssl:error] [pid 3068026:tid 3068026] (70014)End of file found: [client 216.73.216.199:6597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:57.258140 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.uat"] [unique_id "ams1PR_0SzRZhL0QTk9eGAAAAC0"]
[Thu Jul 30 12:27:57.258334 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.uat"] [unique_id "ams1PR_0SzRZhL0QTk9eGAAAAC0"]
[Thu Jul 30 12:27:57.258546 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.uat"] [unique_id "ams1PR_0SzRZhL0QTk9eGAAAAC0"]
[Thu Jul 30 12:27:57.444298 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.dist"] [unique_id "ams1PR_0SzRZhL0QTk9eGQAAAC0"]
[Thu Jul 30 12:27:57.444512 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.dist"] [unique_id "ams1PR_0SzRZhL0QTk9eGQAAAC0"]
[Thu Jul 30 12:27:57.444735 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.dist"] [unique_id "ams1PR_0SzRZhL0QTk9eGQAAAC0"]
[Thu Jul 30 12:27:57.493225 2026] [authz_core:error] [pid 3068016:tid 3068016] [client 57.141.0.11:32174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:57.493846 2026] [authz_core:error] [pid 3068016:tid 3068016] [client 57.141.0.11:32174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:57.636433 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env.swp"] [unique_id "ams1PR_0SzRZhL0QTk9eGgAAAC0"]
[Thu Jul 30 12:27:57.636639 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env.swp"] [unique_id "ams1PR_0SzRZhL0QTk9eGgAAAC0"]
[Thu Jul 30 12:27:57.636848 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env.swp"] [unique_id "ams1PR_0SzRZhL0QTk9eGgAAAC0"]
[Thu Jul 30 12:27:57.824021 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/.env~"] [unique_id "ams1PR_0SzRZhL0QTk9eGwAAAC0"]
[Thu Jul 30 12:27:57.824233 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/.env~"] [unique_id "ams1PR_0SzRZhL0QTk9eGwAAAC0"]
[Thu Jul 30 12:27:57.824456 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/.env~"] [unique_id "ams1PR_0SzRZhL0QTk9eGwAAAC0"]
[Thu Jul 30 12:27:57.980328 2026] [core:error] [pid 3068016:tid 3068016] (13)Permission denied: [client 216.73.216.199:51195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/pstore/parameters/update_ms
[Thu Jul 30 12:27:58.011290 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/app/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHAAAAC0"]
[Thu Jul 30 12:27:58.011489 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/app/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHAAAAC0"]
[Thu Jul 30 12:27:58.011701 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/app/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHAAAAC0"]
[Thu Jul 30 12:27:58.199128 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/apps/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHQAAAC0"]
[Thu Jul 30 12:27:58.199331 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/apps/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHQAAAC0"]
[Thu Jul 30 12:27:58.199571 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/apps/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHQAAAC0"]
[Thu Jul 30 12:27:58.386741 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/api/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHgAAAC0"]
[Thu Jul 30 12:27:58.386939 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/api/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHgAAAC0"]
[Thu Jul 30 12:27:58.387158 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/api/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHgAAAC0"]
[Thu Jul 30 12:27:58.414541 2026] [lsapi:warn] [pid 3067991:tid 3067991] [client 82.130.249.15:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:27:58.463219 2026] [authz_core:error] [pid 3070571:tid 3070571] [client 57.141.0.62:33868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:58.463915 2026] [authz_core:error] [pid 3070571:tid 3070571] [client 57.141.0.62:33868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:58.496296 2026] [security2:error] [pid 3068027:tid 3068027] [client 114.119.135.207:26821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-515.xml"] [unique_id "ams1Ppu2e5hscI0jxOdjGAAAAC8"]
[Thu Jul 30 12:27:58.579940 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/web/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHwAAAC0"]
[Thu Jul 30 12:27:58.580180 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/web/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHwAAAC0"]
[Thu Jul 30 12:27:58.580401 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/web/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eHwAAAC0"]
[Thu Jul 30 12:27:58.765786 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/site/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eIAAAAC0"]
[Thu Jul 30 12:27:58.765928 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/site/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eIAAAAC0"]
[Thu Jul 30 12:27:58.766134 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/site/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eIAAAAC0"]
[Thu Jul 30 12:27:58.958382 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/public/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eIQAAAC0"]
[Thu Jul 30 12:27:58.958671 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/public/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eIQAAAC0"]
[Thu Jul 30 12:27:58.958968 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/public/.env"] [unique_id "ams1Ph_0SzRZhL0QTk9eIQAAAC0"]
[Thu Jul 30 12:27:59.079425 2026] [ssl:error] [pid 3068025:tid 3068025] (EAI 2)Name or service not known: [client 144.76.19.72:64556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:59.079469 2026] [ssl:error] [pid 3068025:tid 3068025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:59.131594 2026] [ssl:error] [pid 3067991:tid 3067991] (EAI 2)Name or service not known: [client 144.76.19.72:64566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:27:59.131625 2026] [ssl:error] [pid 3067991:tid 3067991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:27:59.144010 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/admin/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eIgAAAC0"]
[Thu Jul 30 12:27:59.144271 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/admin/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eIgAAAC0"]
[Thu Jul 30 12:27:59.144537 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/admin/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eIgAAAC0"]
[Thu Jul 30 12:27:59.207376 2026] [ssl:error] [pid 3068016:tid 3068016] (70014)End of file found: [client 216.73.216.199:51195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:27:59.263281 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.16:60020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:27:59.263911 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.16:60020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:27:59.330971 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/backend/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eIwAAAC0"]
[Thu Jul 30 12:27:59.331236 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/backend/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eIwAAAC0"]
[Thu Jul 30 12:27:59.331532 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/backend/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eIwAAAC0"]
[Thu Jul 30 12:27:59.517349 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/server/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJAAAAC0"]
[Thu Jul 30 12:27:59.517613 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/server/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJAAAAC0"]
[Thu Jul 30 12:27:59.517955 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/server/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJAAAAC0"]
[Thu Jul 30 12:27:59.704328 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/frontend/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJQAAAC0"]
[Thu Jul 30 12:27:59.704593 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/frontend/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJQAAAC0"]
[Thu Jul 30 12:27:59.704895 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/frontend/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJQAAAC0"]
[Thu Jul 30 12:27:59.891112 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/src/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJgAAAC0"]
[Thu Jul 30 12:27:59.891365 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/src/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJgAAAC0"]
[Thu Jul 30 12:27:59.891664 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/src/.env"] [unique_id "ams1Px_0SzRZhL0QTk9eJgAAAC0"]
[Thu Jul 30 12:28:00.079994 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/core/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eJwAAAC0"]
[Thu Jul 30 12:28:00.080269 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/core/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eJwAAAC0"]
[Thu Jul 30 12:28:00.080570 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/core/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eJwAAAC0"]
[Thu Jul 30 12:28:00.236868 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.8:32494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:00.237532 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.8:32494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:00.266876 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/core/app/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKAAAAC0"]
[Thu Jul 30 12:28:00.267145 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/core/app/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKAAAAC0"]
[Thu Jul 30 12:28:00.267427 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/core/app/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKAAAAC0"]
[Thu Jul 30 12:28:00.406292 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.1:40666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:00.406922 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.1:40666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:00.453594 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.61:27518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:00.454233 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.61:27518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:00.457162 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/core/Database/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKQAAAC0"]
[Thu Jul 30 12:28:00.457349 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/core/Database/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKQAAAC0"]
[Thu Jul 30 12:28:00.457575 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/core/Database/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKQAAAC0"]
[Thu Jul 30 12:28:00.649419 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/config/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKgAAAC0"]
[Thu Jul 30 12:28:00.649703 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/config/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKgAAAC0"]
[Thu Jul 30 12:28:00.650002 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/config/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKgAAAC0"]
[Thu Jul 30 12:28:00.839051 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/private/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKwAAAC0"]
[Thu Jul 30 12:28:00.839260 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/private/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKwAAAC0"]
[Thu Jul 30 12:28:00.839480 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/private/.env"] [unique_id "ams1QB_0SzRZhL0QTk9eKwAAAC0"]
[Thu Jul 30 12:28:01.025933 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/current/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLAAAAC0"]
[Thu Jul 30 12:28:01.026161 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/current/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLAAAAC0"]
[Thu Jul 30 12:28:01.026380 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/current/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLAAAAC0"]
[Thu Jul 30 12:28:01.087595 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.66:43360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:01.088285 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.66:43360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:01.213953 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /release/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/release/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLQAAAC0"]
[Thu Jul 30 12:28:01.214184 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/release/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLQAAAC0"]
[Thu Jul 30 12:28:01.214399 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/release/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLQAAAC0"]
[Thu Jul 30 12:28:01.405334 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/releases/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLgAAAC0"]
[Thu Jul 30 12:28:01.405563 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/releases/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLgAAAC0"]
[Thu Jul 30 12:28:01.405779 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/releases/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLgAAAC0"]
[Thu Jul 30 12:28:01.591146 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/shared/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLwAAAC0"]
[Thu Jul 30 12:28:01.591297 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/shared/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLwAAAC0"]
[Thu Jul 30 12:28:01.591517 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/shared/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eLwAAAC0"]
[Thu Jul 30 12:28:01.778129 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/deploy/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eMAAAAC0"]
[Thu Jul 30 12:28:01.778343 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/deploy/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eMAAAAC0"]
[Thu Jul 30 12:28:01.778581 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/deploy/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eMAAAAC0"]
[Thu Jul 30 12:28:01.964584 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/build/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eMQAAAC0"]
[Thu Jul 30 12:28:01.964784 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/build/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eMQAAAC0"]
[Thu Jul 30 12:28:01.965005 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/build/.env"] [unique_id "ams1QR_0SzRZhL0QTk9eMQAAAC0"]
[Thu Jul 30 12:28:02.151952 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/dist/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eMgAAAC0"]
[Thu Jul 30 12:28:02.152182 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/dist/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eMgAAAC0"]
[Thu Jul 30 12:28:02.152402 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/dist/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eMgAAAC0"]
[Thu Jul 30 12:28:02.340046 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/public_html/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eMwAAAC0"]
[Thu Jul 30 12:28:02.340264 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/public_html/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eMwAAAC0"]
[Thu Jul 30 12:28:02.340513 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/public_html/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eMwAAAC0"]
[Thu Jul 30 12:28:02.412102 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.44:31630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:02.412730 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.44:31630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:02.526454 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/htdocs/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNAAAAC0"]
[Thu Jul 30 12:28:02.526670 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/htdocs/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNAAAAC0"]
[Thu Jul 30 12:28:02.526897 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/htdocs/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNAAAAC0"]
[Thu Jul 30 12:28:02.716422 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/www/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNQAAAC0"]
[Thu Jul 30 12:28:02.716693 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/www/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNQAAAC0"]
[Thu Jul 30 12:28:02.716996 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/www/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNQAAAC0"]
[Thu Jul 30 12:28:02.904600 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/html/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNgAAAC0"]
[Thu Jul 30 12:28:02.904878 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/html/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNgAAAC0"]
[Thu Jul 30 12:28:02.905183 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/html/.env"] [unique_id "ams1Qh_0SzRZhL0QTk9eNgAAAC0"]
[Thu Jul 30 12:28:03.089104 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.12:64674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:03.090220 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.12:64674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:03.091478 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /live/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/live/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eNwAAAC0"]
[Thu Jul 30 12:28:03.091714 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/live/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eNwAAAC0"]
[Thu Jul 30 12:28:03.091977 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/live/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eNwAAAC0"]
[Thu Jul 30 12:28:03.097400 2026] [ssl:error] [pid 3067954:tid 3067954] (EAI 2)Name or service not known: [client 144.76.19.72:27576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:03.097423 2026] [ssl:error] [pid 3067954:tid 3067954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:03.155655 2026] [ssl:error] [pid 3068390:tid 3068390] (EAI 2)Name or service not known: [client 144.76.19.72:27586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:03.155712 2026] [ssl:error] [pid 3068390:tid 3068390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:03.199018 2026] [authz_core:error] [pid 3068196:tid 3068196] [client 57.141.0.3:25224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:03.199661 2026] [authz_core:error] [pid 3068196:tid 3068196] [client 57.141.0.3:25224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:03.284296 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/prod/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOAAAAC0"]
[Thu Jul 30 12:28:03.284563 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/prod/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOAAAAC0"]
[Thu Jul 30 12:28:03.284853 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/prod/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOAAAAC0"]
[Thu Jul 30 12:28:03.472770 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/dev/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOQAAAC0"]
[Thu Jul 30 12:28:03.473023 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/dev/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOQAAAC0"]
[Thu Jul 30 12:28:03.473321 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/dev/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOQAAAC0"]
[Thu Jul 30 12:28:03.522274 2026] [ssl:error] [pid 3067526:tid 3067526] (70014)End of file found: [client 216.73.216.199:26657] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:03.583475 2026] [security2:error] [pid 3068024:tid 3068024] [client 130.12.182.254:19972] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1Q9j6w0CdhbeVJS2CvQAAACs"]
[Thu Jul 30 12:28:03.583652 2026] [security2:error] [pid 3068024:tid 3068024] [client 130.12.182.254:19972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1Q9j6w0CdhbeVJS2CvQAAACs"]
[Thu Jul 30 12:28:03.583893 2026] [security2:error] [pid 3068024:tid 3068024] [client 130.12.182.254:19972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1Q9j6w0CdhbeVJS2CvQAAACs"]
[Thu Jul 30 12:28:03.659227 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/staging/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOgAAAC0"]
[Thu Jul 30 12:28:03.659483 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/staging/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOgAAAC0"]
[Thu Jul 30 12:28:03.659840 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/staging/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOgAAAC0"]
[Thu Jul 30 12:28:03.703101 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.56:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:03.703718 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.56:39540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:03.712684 2026] [security2:error] [pid 3068390:tid 3068390] [client 130.12.182.254:38848] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "ams1Q2M3DkyKHCR3u9XJ9QAAABc"]
[Thu Jul 30 12:28:03.712853 2026] [security2:error] [pid 3068390:tid 3068390] [client 130.12.182.254:38848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "ams1Q2M3DkyKHCR3u9XJ9QAAABc"]
[Thu Jul 30 12:28:03.713048 2026] [security2:error] [pid 3068390:tid 3068390] [client 130.12.182.254:38848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "ams1Q2M3DkyKHCR3u9XJ9QAAABc"]
[Thu Jul 30 12:28:03.846248 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/laravel/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOwAAAC0"]
[Thu Jul 30 12:28:03.846516 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/laravel/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOwAAAC0"]
[Thu Jul 30 12:28:03.846830 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/laravel/.env"] [unique_id "ams1Qx_0SzRZhL0QTk9eOwAAAC0"]
[Thu Jul 30 12:28:04.028873 2026] [authz_core:error] [pid 3068196:tid 3068196] [client 66.249.66.33:57849] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:28:04.031592 2026] [authz_core:error] [pid 3068196:tid 3068196] [client 66.249.66.33:57849] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:28:04.032905 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/symfony/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePAAAAC0"]
[Thu Jul 30 12:28:04.033151 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/symfony/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePAAAAC0"]
[Thu Jul 30 12:28:04.033462 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/symfony/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePAAAAC0"]
[Thu Jul 30 12:28:04.221931 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/wordpress/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePQAAAC0"]
[Thu Jul 30 12:28:04.222187 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/wordpress/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePQAAAC0"]
[Thu Jul 30 12:28:04.222460 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/wordpress/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePQAAAC0"]
[Thu Jul 30 12:28:04.410088 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/wp/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePgAAAC0"]
[Thu Jul 30 12:28:04.410300 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/wp/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePgAAAC0"]
[Thu Jul 30 12:28:04.410520 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/wp/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePgAAAC0"]
[Thu Jul 30 12:28:04.599639 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/cms/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePwAAAC0"]
[Thu Jul 30 12:28:04.599844 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/cms/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePwAAAC0"]
[Thu Jul 30 12:28:04.600100 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/cms/.env"] [unique_id "ams1RB_0SzRZhL0QTk9ePwAAAC0"]
[Thu Jul 30 12:28:04.731444 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.67:52962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:04.732077 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.67:52962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:04.789217 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/drupal/.env"] [unique_id "ams1RB_0SzRZhL0QTk9eQAAAAC0"]
[Thu Jul 30 12:28:04.789473 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/drupal/.env"] [unique_id "ams1RB_0SzRZhL0QTk9eQAAAAC0"]
[Thu Jul 30 12:28:04.789734 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/drupal/.env"] [unique_id "ams1RB_0SzRZhL0QTk9eQAAAAC0"]
[Thu Jul 30 12:28:04.890851 2026] [security2:error] [pid 3071225:tid 3071225] [client 47.89.212.77:37445] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1RNRdTJA3erHnfDsY1gAAAAI"]
[Thu Jul 30 12:28:04.890921 2026] [security2:error] [pid 3071225:tid 3071225] [client 47.89.212.77:37445] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1RNRdTJA3erHnfDsY1gAAAAI"]
[Thu Jul 30 12:28:04.891340 2026] [security2:error] [pid 3071225:tid 3071225] [client 47.89.212.77:37445] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1RNRdTJA3erHnfDsY1gAAAAI"]
[Thu Jul 30 12:28:04.919607 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.58:50180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:04.920252 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.58:50180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:04.975478 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /joomla/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/joomla/.env"] [unique_id "ams1RB_0SzRZhL0QTk9eQQAAAC0"]
[Thu Jul 30 12:28:04.975689 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/joomla/.env"] [unique_id "ams1RB_0SzRZhL0QTk9eQQAAAC0"]
[Thu Jul 30 12:28:04.975887 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/joomla/.env"] [unique_id "ams1RB_0SzRZhL0QTk9eQQAAAC0"]
[Thu Jul 30 12:28:05.028657 2026] [access_compat:error] [pid 3068195:tid 3068195] [client 125.176.202.122:63879] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:05.161883 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /magento/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/magento/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eQgAAAC0"]
[Thu Jul 30 12:28:05.162107 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/magento/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eQgAAAC0"]
[Thu Jul 30 12:28:05.162313 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/magento/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eQgAAAC0"]
[Thu Jul 30 12:28:05.329512 2026] [access_compat:error] [pid 3068016:tid 3068016] [client 157.20.138.62:60317] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:05.343371 2026] [ssl:error] [pid 3068024:tid 3068024] (70014)End of file found: [client 216.73.216.199:44437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:05.349165 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shopify/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/shopify/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eQwAAAC0"]
[Thu Jul 30 12:28:05.349431 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/shopify/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eQwAAAC0"]
[Thu Jul 30 12:28:05.349738 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/shopify/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eQwAAAC0"]
[Thu Jul 30 12:28:05.375041 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.1:22418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:05.375746 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.1:22418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:05.536325 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prestashop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/prestashop/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRAAAAC0"]
[Thu Jul 30 12:28:05.536636 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/prestashop/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRAAAAC0"]
[Thu Jul 30 12:28:05.536938 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/prestashop/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRAAAAC0"]
[Thu Jul 30 12:28:05.542296 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.34:53360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:05.542953 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.34:53360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:05.723162 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/v1/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRQAAAC0"]
[Thu Jul 30 12:28:05.723455 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/v1/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRQAAAC0"]
[Thu Jul 30 12:28:05.723786 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/v1/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRQAAAC0"]
[Thu Jul 30 12:28:05.911513 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/v2/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRgAAAC0"]
[Thu Jul 30 12:28:05.911711 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/v2/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRgAAAC0"]
[Thu Jul 30 12:28:05.911924 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/v2/.env"] [unique_id "ams1RR_0SzRZhL0QTk9eRgAAAC0"]
[Thu Jul 30 12:28:05.942033 2026] [ssl:error] [pid 3071450:tid 3071450] (70014)End of file found: [client 216.73.216.199:28337] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:06.100259 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/v3/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eRwAAAC0"]
[Thu Jul 30 12:28:06.100418 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/v3/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eRwAAAC0"]
[Thu Jul 30 12:28:06.100628 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/v3/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eRwAAAC0"]
[Thu Jul 30 12:28:06.212516 2026] [ssl:error] [pid 3068020:tid 3068020] (EAI 2)Name or service not known: [client 144.76.19.72:27608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:06.212547 2026] [ssl:error] [pid 3068020:tid 3068020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:06.229051 2026] [authz_core:error] [pid 3068232:tid 3068232] [client 57.141.0.26:59780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:06.229689 2026] [authz_core:error] [pid 3068232:tid 3068232] [client 57.141.0.26:59780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:06.263795 2026] [ssl:error] [pid 3068015:tid 3068015] (EAI 2)Name or service not known: [client 144.76.19.72:27610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:06.263822 2026] [ssl:error] [pid 3068015:tid 3068015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:06.289226 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/api/v1/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSAAAAC0"]
[Thu Jul 30 12:28:06.289419 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/api/v1/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSAAAAC0"]
[Thu Jul 30 12:28:06.289636 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/api/v1/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSAAAAC0"]
[Thu Jul 30 12:28:06.475705 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/api/v2/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSQAAAC0"]
[Thu Jul 30 12:28:06.475913 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/api/v2/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSQAAAC0"]
[Thu Jul 30 12:28:06.476129 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/api/v2/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSQAAAC0"]
[Thu Jul 30 12:28:06.666524 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/rest/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSgAAAC0"]
[Thu Jul 30 12:28:06.666723 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/rest/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSgAAAC0"]
[Thu Jul 30 12:28:06.666930 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/rest/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSgAAAC0"]
[Thu Jul 30 12:28:06.856052 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /graphql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/graphql/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSwAAAC0"]
[Thu Jul 30 12:28:06.856284 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/graphql/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSwAAAC0"]
[Thu Jul 30 12:28:06.856505 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/graphql/.env"] [unique_id "ams1Rh_0SzRZhL0QTk9eSwAAAC0"]
[Thu Jul 30 12:28:07.042006 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gateway/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/gateway/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTAAAAC0"]
[Thu Jul 30 12:28:07.042228 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/gateway/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTAAAAC0"]
[Thu Jul 30 12:28:07.042445 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/gateway/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTAAAAC0"]
[Thu Jul 30 12:28:07.163726 2026] [core:error] [pid 3067954:tid 3067954] [client 57.141.0.13:41054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:07.163757 2026] [core:error] [pid 3067954:tid 3067954] [client 57.141.0.13:41054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:07.231421 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /microservice/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/microservice/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTQAAAC0"]
[Thu Jul 30 12:28:07.231642 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/microservice/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTQAAAC0"]
[Thu Jul 30 12:28:07.231849 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/microservice/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTQAAAC0"]
[Thu Jul 30 12:28:07.418003 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/service/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTgAAAC0"]
[Thu Jul 30 12:28:07.418229 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/service/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTgAAAC0"]
[Thu Jul 30 12:28:07.418442 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/service/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTgAAAC0"]
[Thu Jul 30 12:28:07.473395 2026] [security2:error] [pid 3067954:tid 3067954] [client 130.12.182.254:38852] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1R9MDAwvOr-83u4TskQAAABI"]
[Thu Jul 30 12:28:07.473605 2026] [security2:error] [pid 3067954:tid 3067954] [client 130.12.182.254:38852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1R9MDAwvOr-83u4TskQAAABI"]
[Thu Jul 30 12:28:07.473806 2026] [security2:error] [pid 3067954:tid 3067954] [client 130.12.182.254:38852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1R9MDAwvOr-83u4TskQAAABI"]
[Thu Jul 30 12:28:07.604481 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/vendor/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTwAAAC0"]
[Thu Jul 30 12:28:07.604692 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/vendor/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTwAAAC0"]
[Thu Jul 30 12:28:07.604889 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/vendor/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eTwAAAC0"]
[Thu Jul 30 12:28:07.610122 2026] [security2:error] [pid 3072752:tid 3072752] [client 130.12.182.254:38864] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "ams1R9EvYr3ifyBKBK22OAAAAAg"]
[Thu Jul 30 12:28:07.610323 2026] [security2:error] [pid 3072752:tid 3072752] [client 130.12.182.254:38864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "ams1R9EvYr3ifyBKBK22OAAAAAg"]
[Thu Jul 30 12:28:07.610603 2026] [security2:error] [pid 3072752:tid 3072752] [client 130.12.182.254:38864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "ams1R9EvYr3ifyBKBK22OAAAAAg"]
[Thu Jul 30 12:28:07.790278 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/lib/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eUAAAAC0"]
[Thu Jul 30 12:28:07.790474 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/lib/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eUAAAAC0"]
[Thu Jul 30 12:28:07.790692 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/lib/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eUAAAAC0"]
[Thu Jul 30 12:28:07.976588 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/database/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eUQAAAC0"]
[Thu Jul 30 12:28:07.976806 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/database/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eUQAAAC0"]
[Thu Jul 30 12:28:07.977025 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/database/.env"] [unique_id "ams1Rx_0SzRZhL0QTk9eUQAAAC0"]
[Thu Jul 30 12:28:08.164743 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/resources/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eUgAAAC0"]
[Thu Jul 30 12:28:08.164889 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/resources/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eUgAAAC0"]
[Thu Jul 30 12:28:08.165103 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/resources/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eUgAAAC0"]
[Thu Jul 30 12:28:08.352028 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/storage/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eUwAAAC0"]
[Thu Jul 30 12:28:08.352272 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/storage/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eUwAAAC0"]
[Thu Jul 30 12:28:08.352509 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/storage/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eUwAAAC0"]
[Thu Jul 30 12:28:08.516287 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.10:62688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:08.516919 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.10:62688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:08.540290 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/assets/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVAAAAC0"]
[Thu Jul 30 12:28:08.540491 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/assets/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVAAAAC0"]
[Thu Jul 30 12:28:08.540741 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/assets/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVAAAAC0"]
[Thu Jul 30 12:28:08.592459 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.60:20764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:08.593094 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.60:20764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:08.688027 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.59:26464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:08.688671 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.59:26464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:08.733997 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/uploads/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVQAAAC0"]
[Thu Jul 30 12:28:08.734275 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/uploads/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVQAAAC0"]
[Thu Jul 30 12:28:08.734512 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/uploads/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVQAAAC0"]
[Thu Jul 30 12:28:08.920624 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /internal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/internal/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVgAAAC0"]
[Thu Jul 30 12:28:08.920829 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/internal/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVgAAAC0"]
[Thu Jul 30 12:28:08.921044 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/internal/.env"] [unique_id "ams1SB_0SzRZhL0QTk9eVgAAAC0"]
[Thu Jul 30 12:28:09.064357 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.7:60848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:09.064983 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.7:60848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:09.106977 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/tools/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eVwAAAC0"]
[Thu Jul 30 12:28:09.107192 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/tools/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eVwAAAC0"]
[Thu Jul 30 12:28:09.107420 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/tools/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eVwAAAC0"]
[Thu Jul 30 12:28:09.296251 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/scripts/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWAAAAC0"]
[Thu Jul 30 12:28:09.296450 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/scripts/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWAAAAC0"]
[Thu Jul 30 12:28:09.296680 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/scripts/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWAAAAC0"]
[Thu Jul 30 12:28:09.318565 2026] [ssl:error] [pid 3068196:tid 3068196] (EAI 2)Name or service not known: [client 144.76.19.72:27616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:09.318597 2026] [ssl:error] [pid 3068196:tid 3068196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:09.319081 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.48:46144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:09.319726 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.48:46144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:09.374538 2026] [ssl:error] [pid 3071225:tid 3071225] (EAI 2)Name or service not known: [client 144.76.19.72:27628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:09.374573 2026] [ssl:error] [pid 3071225:tid 3071225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:09.459324 2026] [security2:error] [pid 3072752:tid 3072752] [client 102.213.133.238:19672] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1SdEvYr3ifyBKBK22OgAAAAg"]
[Thu Jul 30 12:28:09.459377 2026] [security2:error] [pid 3072752:tid 3072752] [client 102.213.133.238:19672] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1SdEvYr3ifyBKBK22OgAAAAg"]
[Thu Jul 30 12:28:09.459674 2026] [security2:error] [pid 3072752:tid 3072752] [client 102.213.133.238:19672] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1SdEvYr3ifyBKBK22OgAAAAg"]
[Thu Jul 30 12:28:09.485982 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/portal/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWQAAAC0"]
[Thu Jul 30 12:28:09.486173 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/portal/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWQAAAC0"]
[Thu Jul 30 12:28:09.486377 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/portal/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWQAAAC0"]
[Thu Jul 30 12:28:09.599690 2026] [security2:error] [pid 3073210:tid 3073210] [client 49.51.166.228:36216] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.co.uk"] [uri "/"] [unique_id "ams1SWWcocs9iybNSmMcigAAADU"]
[Thu Jul 30 12:28:09.673894 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/dashboard/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWgAAAC0"]
[Thu Jul 30 12:28:09.674106 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/dashboard/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWgAAAC0"]
[Thu Jul 30 12:28:09.674329 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/dashboard/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWgAAAC0"]
[Thu Jul 30 12:28:09.861286 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/panel/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWwAAAC0"]
[Thu Jul 30 12:28:09.861480 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/panel/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWwAAAC0"]
[Thu Jul 30 12:28:09.861706 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/panel/.env"] [unique_id "ams1SR_0SzRZhL0QTk9eWwAAAC0"]
[Thu Jul 30 12:28:10.048555 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/crm/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXAAAAC0"]
[Thu Jul 30 12:28:10.048756 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/crm/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXAAAAC0"]
[Thu Jul 30 12:28:10.048995 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/crm/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXAAAAC0"]
[Thu Jul 30 12:28:10.236353 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /erp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/erp/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXQAAAC0"]
[Thu Jul 30 12:28:10.236582 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/erp/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXQAAAC0"]
[Thu Jul 30 12:28:10.236783 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/erp/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXQAAAC0"]
[Thu Jul 30 12:28:10.427319 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/shop/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXgAAAC0"]
[Thu Jul 30 12:28:10.427536 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/shop/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXgAAAC0"]
[Thu Jul 30 12:28:10.427758 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/shop/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXgAAAC0"]
[Thu Jul 30 12:28:10.512090 2026] [authz_core:error] [pid 3073218:tid 3073218] [client 57.141.0.24:53690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:10.512810 2026] [authz_core:error] [pid 3073218:tid 3073218] [client 57.141.0.24:53690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:10.598177 2026] [lsapi:warn] [pid 3073217:tid 3073217] [client 122.180.21.11:60287] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:28:10.613912 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /store/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/store/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXwAAAC0"]
[Thu Jul 30 12:28:10.614120 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/store/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXwAAAC0"]
[Thu Jul 30 12:28:10.614329 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/store/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eXwAAAC0"]
[Thu Jul 30 12:28:10.801751 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/saas/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eYAAAAC0"]
[Thu Jul 30 12:28:10.801953 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/saas/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eYAAAAC0"]
[Thu Jul 30 12:28:10.802176 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/saas/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eYAAAAC0"]
[Thu Jul 30 12:28:10.889963 2026] [ssl:error] [pid 3067468:tid 3067468] (70014)End of file found: [client 216.73.216.199:29428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:10.987865 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/client/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eYQAAAC0"]
[Thu Jul 30 12:28:10.988063 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/client/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eYQAAAC0"]
[Thu Jul 30 12:28:10.988292 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/client/.env"] [unique_id "ams1Sh_0SzRZhL0QTk9eYQAAAC0"]
[Thu Jul 30 12:28:11.114586 2026] [ssl:error] [pid 3067775:tid 3067775] (70014)End of file found: [client 216.73.216.199:20967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:11.175080 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/project/.env"] [unique_id "ams1Sx_0SzRZhL0QTk9eYgAAAC0"]
[Thu Jul 30 12:28:11.175247 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/project/.env"] [unique_id "ams1Sx_0SzRZhL0QTk9eYgAAAC0"]
[Thu Jul 30 12:28:11.175445 2026] [security2:error] [pid 3068308:tid 3068308] [client 178.128.89.89:39552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/project/.env"] [unique_id "ams1Sx_0SzRZhL0QTk9eYgAAAC0"]
[Thu Jul 30 12:28:11.370696 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.5:54732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:11.371325 2026] [authz_core:error] [pid 3067469:tid 3067469] [client 57.141.0.5:54732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:11.632340 2026] [authz_core:error] [pid 3068236:tid 3068236] [client 57.141.0.29:52506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:11.633027 2026] [authz_core:error] [pid 3068236:tid 3068236] [client 57.141.0.29:52506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:11.762617 2026] [access_compat:error] [pid 3067545:tid 3067545] [client 125.176.202.122:64152] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:11.940722 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/node/.env"] [unique_id "ams1S_ANIc1DDWTZQu24PQAAADQ"]
[Thu Jul 30 12:28:11.940916 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/node/.env"] [unique_id "ams1S_ANIc1DDWTZQu24PQAAADQ"]
[Thu Jul 30 12:28:11.941149 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/node/.env"] [unique_id "ams1S_ANIc1DDWTZQu24PQAAADQ"]
[Thu Jul 30 12:28:12.015296 2026] [ssl:error] [pid 3073212:tid 3073212] (70014)End of file found: [client 216.73.216.199:25796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:12.146131 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /express/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/express/.env"] [unique_id "ams1TPANIc1DDWTZQu24PgAAADQ"]
[Thu Jul 30 12:28:12.146343 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/express/.env"] [unique_id "ams1TPANIc1DDWTZQu24PgAAADQ"]
[Thu Jul 30 12:28:12.146569 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/express/.env"] [unique_id "ams1TPANIc1DDWTZQu24PgAAADQ"]
[Thu Jul 30 12:28:12.340223 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /next/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/next/.env"] [unique_id "ams1TPANIc1DDWTZQu24PwAAADQ"]
[Thu Jul 30 12:28:12.340417 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/next/.env"] [unique_id "ams1TPANIc1DDWTZQu24PwAAADQ"]
[Thu Jul 30 12:28:12.340633 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/next/.env"] [unique_id "ams1TPANIc1DDWTZQu24PwAAADQ"]
[Thu Jul 30 12:28:12.430567 2026] [ssl:error] [pid 3073217:tid 3073217] (EAI 2)Name or service not known: [client 144.76.19.72:33258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:12.430605 2026] [ssl:error] [pid 3073217:tid 3073217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:12.441161 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.36:52252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:12.441794 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.36:52252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:12.535165 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuxt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/nuxt/.env"] [unique_id "ams1TPANIc1DDWTZQu24QAAAADQ"]
[Thu Jul 30 12:28:12.535323 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/nuxt/.env"] [unique_id "ams1TPANIc1DDWTZQu24QAAAADQ"]
[Thu Jul 30 12:28:12.535542 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/nuxt/.env"] [unique_id "ams1TPANIc1DDWTZQu24QAAAADQ"]
[Thu Jul 30 12:28:12.545669 2026] [ssl:error] [pid 3068017:tid 3068017] (EAI 2)Name or service not known: [client 144.76.19.72:33264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:12.545723 2026] [ssl:error] [pid 3068017:tid 3068017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:12.719141 2026] [core:error] [pid 3070569:tid 3070569] [client 66.249.66.40:38581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:12.719167 2026] [core:error] [pid 3070569:tid 3070569] [client 66.249.66.40:38581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:12.730928 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/nest/.env"] [unique_id "ams1TPANIc1DDWTZQu24QQAAADQ"]
[Thu Jul 30 12:28:12.731104 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/nest/.env"] [unique_id "ams1TPANIc1DDWTZQu24QQAAADQ"]
[Thu Jul 30 12:28:12.731308 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/nest/.env"] [unique_id "ams1TPANIc1DDWTZQu24QQAAADQ"]
[Thu Jul 30 12:28:12.790669 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.5:54734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:12.791312 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.5:54734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:12.925643 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/backup/.env"] [unique_id "ams1TPANIc1DDWTZQu24QgAAADQ"]
[Thu Jul 30 12:28:12.925840 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/backup/.env"] [unique_id "ams1TPANIc1DDWTZQu24QgAAADQ"]
[Thu Jul 30 12:28:12.926043 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/backup/.env"] [unique_id "ams1TPANIc1DDWTZQu24QgAAADQ"]
[Thu Jul 30 12:28:13.120714 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backups/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/backups/.env"] [unique_id "ams1TfANIc1DDWTZQu24QwAAADQ"]
[Thu Jul 30 12:28:13.120922 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/backups/.env"] [unique_id "ams1TfANIc1DDWTZQu24QwAAADQ"]
[Thu Jul 30 12:28:13.121146 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/backups/.env"] [unique_id "ams1TfANIc1DDWTZQu24QwAAADQ"]
[Thu Jul 30 12:28:13.146791 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.54:51340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:13.147418 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.54:51340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:13.318610 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/old/.env"] [unique_id "ams1TfANIc1DDWTZQu24RAAAADQ"]
[Thu Jul 30 12:28:13.318802 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/old/.env"] [unique_id "ams1TfANIc1DDWTZQu24RAAAADQ"]
[Thu Jul 30 12:28:13.319026 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/old/.env"] [unique_id "ams1TfANIc1DDWTZQu24RAAAADQ"]
[Thu Jul 30 12:28:13.518178 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/tmp/.env"] [unique_id "ams1TfANIc1DDWTZQu24RQAAADQ"]
[Thu Jul 30 12:28:13.518398 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/tmp/.env"] [unique_id "ams1TfANIc1DDWTZQu24RQAAADQ"]
[Thu Jul 30 12:28:13.518630 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/tmp/.env"] [unique_id "ams1TfANIc1DDWTZQu24RQAAADQ"]
[Thu Jul 30 12:28:13.726331 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/temp/.env"] [unique_id "ams1TfANIc1DDWTZQu24RgAAADQ"]
[Thu Jul 30 12:28:13.726543 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/temp/.env"] [unique_id "ams1TfANIc1DDWTZQu24RgAAADQ"]
[Thu Jul 30 12:28:13.726768 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/temp/.env"] [unique_id "ams1TfANIc1DDWTZQu24RgAAADQ"]
[Thu Jul 30 12:28:13.921388 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/lab/.env"] [unique_id "ams1TfANIc1DDWTZQu24RwAAADQ"]
[Thu Jul 30 12:28:13.921634 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/lab/.env"] [unique_id "ams1TfANIc1DDWTZQu24RwAAADQ"]
[Thu Jul 30 12:28:13.921859 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/lab/.env"] [unique_id "ams1TfANIc1DDWTZQu24RwAAADQ"]
[Thu Jul 30 12:28:14.115743 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/cronlab/.env"] [unique_id "ams1TvANIc1DDWTZQu24SAAAADQ"]
[Thu Jul 30 12:28:14.115940 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/cronlab/.env"] [unique_id "ams1TvANIc1DDWTZQu24SAAAADQ"]
[Thu Jul 30 12:28:14.116156 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/cronlab/.env"] [unique_id "ams1TvANIc1DDWTZQu24SAAAADQ"]
[Thu Jul 30 12:28:14.151216 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.21:34684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:14.151840 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.21:34684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:14.310915 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/cron/.env"] [unique_id "ams1TvANIc1DDWTZQu24SQAAADQ"]
[Thu Jul 30 12:28:14.311142 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/cron/.env"] [unique_id "ams1TvANIc1DDWTZQu24SQAAADQ"]
[Thu Jul 30 12:28:14.311347 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/cron/.env"] [unique_id "ams1TvANIc1DDWTZQu24SQAAADQ"]
[Thu Jul 30 12:28:14.509000 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/en/.env"] [unique_id "ams1TvANIc1DDWTZQu24SgAAADQ"]
[Thu Jul 30 12:28:14.509232 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/en/.env"] [unique_id "ams1TvANIc1DDWTZQu24SgAAADQ"]
[Thu Jul 30 12:28:14.509436 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/en/.env"] [unique_id "ams1TvANIc1DDWTZQu24SgAAADQ"]
[Thu Jul 30 12:28:14.707565 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/administrator/.env"] [unique_id "ams1TvANIc1DDWTZQu24SwAAADQ"]
[Thu Jul 30 12:28:14.707733 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/administrator/.env"] [unique_id "ams1TvANIc1DDWTZQu24SwAAADQ"]
[Thu Jul 30 12:28:14.707934 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/administrator/.env"] [unique_id "ams1TvANIc1DDWTZQu24SwAAADQ"]
[Thu Jul 30 12:28:14.759181 2026] [ssl:error] [pid 3068017:tid 3068017] (70014)End of file found: [client 216.73.216.199:46519] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:14.835009 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.63:36374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:14.835688 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.63:36374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:14.868581 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.49:43724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:14.869186 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.49:43724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:14.906606 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/psnlink/.env"] [unique_id "ams1TvANIc1DDWTZQu24TAAAADQ"]
[Thu Jul 30 12:28:14.906761 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/psnlink/.env"] [unique_id "ams1TvANIc1DDWTZQu24TAAAADQ"]
[Thu Jul 30 12:28:14.906946 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/psnlink/.env"] [unique_id "ams1TvANIc1DDWTZQu24TAAAADQ"]
[Thu Jul 30 12:28:15.000776 2026] [security2:error] [pid 3068308:tid 3068308] [client 85.208.98.22:37600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/hp-250-g7-n4020-k.html"] [unique_id "ams1Tx_0SzRZhL0QTk9eZAAAAC0"]
[Thu Jul 30 12:28:15.103559 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/exapi/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TQAAADQ"]
[Thu Jul 30 12:28:15.103701 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/exapi/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TQAAADQ"]
[Thu Jul 30 12:28:15.103887 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/exapi/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TQAAADQ"]
[Thu Jul 30 12:28:15.297382 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/sitemaps/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TgAAADQ"]
[Thu Jul 30 12:28:15.297605 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/sitemaps/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TgAAADQ"]
[Thu Jul 30 12:28:15.297834 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/sitemaps/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TgAAADQ"]
[Thu Jul 30 12:28:15.492829 2026] [security2:error] [pid 3068025:tid 3068025] [client 85.208.96.207:28520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/unlimited-credit-card-numbers-that-work-with-zip-code-2021"] [unique_id "ams1T_zgNAYN3n36AW1YKgAAACw"]
[Thu Jul 30 12:28:15.495517 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/mailer/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TwAAADQ"]
[Thu Jul 30 12:28:15.495713 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/mailer/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TwAAADQ"]
[Thu Jul 30 12:28:15.495966 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/mailer/.env"] [unique_id "ams1T_ANIc1DDWTZQu24TwAAADQ"]
[Thu Jul 30 12:28:15.609695 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 52.167.144.169:2771] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 12:28:15.636870 2026] [ssl:error] [pid 3073217:tid 3073217] (EAI 2)Name or service not known: [client 144.76.19.72:33270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:15.636904 2026] [ssl:error] [pid 3073217:tid 3073217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:15.688458 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/mail/.env"] [unique_id "ams1T_ANIc1DDWTZQu24UAAAADQ"]
[Thu Jul 30 12:28:15.688641 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/mail/.env"] [unique_id "ams1T_ANIc1DDWTZQu24UAAAADQ"]
[Thu Jul 30 12:28:15.688836 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/mail/.env"] [unique_id "ams1T_ANIc1DDWTZQu24UAAAADQ"]
[Thu Jul 30 12:28:15.693178 2026] [ssl:error] [pid 3068020:tid 3068020] (EAI 2)Name or service not known: [client 144.76.19.72:33280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:15.693206 2026] [ssl:error] [pid 3068020:tid 3068020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:15.882107 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/email/.env"] [unique_id "ams1T_ANIc1DDWTZQu24UQAAADQ"]
[Thu Jul 30 12:28:15.882307 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/email/.env"] [unique_id "ams1T_ANIc1DDWTZQu24UQAAADQ"]
[Thu Jul 30 12:28:15.882554 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/email/.env"] [unique_id "ams1T_ANIc1DDWTZQu24UQAAADQ"]
[Thu Jul 30 12:28:15.907636 2026] [access_compat:error] [pid 3068021:tid 3068021] [client 157.20.138.62:60913] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:16.077420 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /smtp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/smtp/.env"] [unique_id "ams1UPANIc1DDWTZQu24UgAAADQ"]
[Thu Jul 30 12:28:16.077645 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/smtp/.env"] [unique_id "ams1UPANIc1DDWTZQu24UgAAADQ"]
[Thu Jul 30 12:28:16.077864 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/smtp/.env"] [unique_id "ams1UPANIc1DDWTZQu24UgAAADQ"]
[Thu Jul 30 12:28:16.077963 2026] [security2:error] [pid 3068014:tid 3068014] [client 201.219.248.90:4497] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1UP0tEKWAi3GU5OV-hgAAACE"]
[Thu Jul 30 12:28:16.078005 2026] [security2:error] [pid 3068014:tid 3068014] [client 201.219.248.90:4497] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1UP0tEKWAi3GU5OV-hgAAACE"]
[Thu Jul 30 12:28:16.078267 2026] [security2:error] [pid 3068014:tid 3068014] [client 201.219.248.90:4497] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1UP0tEKWAi3GU5OV-hgAAACE"]
[Thu Jul 30 12:28:16.271271 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/mailing/.env"] [unique_id "ams1UPANIc1DDWTZQu24UwAAADQ"]
[Thu Jul 30 12:28:16.271433 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/mailing/.env"] [unique_id "ams1UPANIc1DDWTZQu24UwAAADQ"]
[Thu Jul 30 12:28:16.271651 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/mailing/.env"] [unique_id "ams1UPANIc1DDWTZQu24UwAAADQ"]
[Thu Jul 30 12:28:16.400954 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.29:52514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:16.401613 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.29:52514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:16.465602 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /notifications/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/notifications/.env"] [unique_id "ams1UPANIc1DDWTZQu24VAAAADQ"]
[Thu Jul 30 12:28:16.465808 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/notifications/.env"] [unique_id "ams1UPANIc1DDWTZQu24VAAAADQ"]
[Thu Jul 30 12:28:16.466018 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/notifications/.env"] [unique_id "ams1UPANIc1DDWTZQu24VAAAADQ"]
[Thu Jul 30 12:28:16.572792 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.11:25526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:16.573419 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.11:25526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:16.659691 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /notify/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/notify/.env"] [unique_id "ams1UPANIc1DDWTZQu24VQAAADQ"]
[Thu Jul 30 12:28:16.659895 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/notify/.env"] [unique_id "ams1UPANIc1DDWTZQu24VQAAADQ"]
[Thu Jul 30 12:28:16.660136 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/notify/.env"] [unique_id "ams1UPANIc1DDWTZQu24VQAAADQ"]
[Thu Jul 30 12:28:16.854257 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sender/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/sender/.env"] [unique_id "ams1UPANIc1DDWTZQu24VgAAADQ"]
[Thu Jul 30 12:28:16.854461 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/sender/.env"] [unique_id "ams1UPANIc1DDWTZQu24VgAAADQ"]
[Thu Jul 30 12:28:16.854697 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/sender/.env"] [unique_id "ams1UPANIc1DDWTZQu24VgAAADQ"]
[Thu Jul 30 12:28:17.005677 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.55:34348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:17.006365 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.55:34348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:17.048238 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /campaign/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/campaign/.env"] [unique_id "ams1UfANIc1DDWTZQu24VwAAADQ"]
[Thu Jul 30 12:28:17.048437 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/campaign/.env"] [unique_id "ams1UfANIc1DDWTZQu24VwAAADQ"]
[Thu Jul 30 12:28:17.048668 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/campaign/.env"] [unique_id "ams1UfANIc1DDWTZQu24VwAAADQ"]
[Thu Jul 30 12:28:17.176585 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.24:25256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:17.177214 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.24:25256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:17.248112 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /newsletter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/newsletter/.env"] [unique_id "ams1UfANIc1DDWTZQu24WAAAADQ"]
[Thu Jul 30 12:28:17.248309 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/newsletter/.env"] [unique_id "ams1UfANIc1DDWTZQu24WAAAADQ"]
[Thu Jul 30 12:28:17.248539 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/newsletter/.env"] [unique_id "ams1UfANIc1DDWTZQu24WAAAADQ"]
[Thu Jul 30 12:28:17.445164 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ses/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/ses/.env"] [unique_id "ams1UfANIc1DDWTZQu24WQAAADQ"]
[Thu Jul 30 12:28:17.445357 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/ses/.env"] [unique_id "ams1UfANIc1DDWTZQu24WQAAADQ"]
[Thu Jul 30 12:28:17.445579 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/ses/.env"] [unique_id "ams1UfANIc1DDWTZQu24WQAAADQ"]
[Thu Jul 30 12:28:17.503729 2026] [access_compat:error] [pid 3073155:tid 3073155] [client 125.176.202.122:64399] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:17.639989 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/sendgrid/.env"] [unique_id "ams1UfANIc1DDWTZQu24WgAAADQ"]
[Thu Jul 30 12:28:17.640200 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/sendgrid/.env"] [unique_id "ams1UfANIc1DDWTZQu24WgAAADQ"]
[Thu Jul 30 12:28:17.640421 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/sendgrid/.env"] [unique_id "ams1UfANIc1DDWTZQu24WgAAADQ"]
[Thu Jul 30 12:28:17.835817 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sparkpost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/sparkpost/.env"] [unique_id "ams1UfANIc1DDWTZQu24WwAAADQ"]
[Thu Jul 30 12:28:17.836025 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/sparkpost/.env"] [unique_id "ams1UfANIc1DDWTZQu24WwAAADQ"]
[Thu Jul 30 12:28:17.836274 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/sparkpost/.env"] [unique_id "ams1UfANIc1DDWTZQu24WwAAADQ"]
[Thu Jul 30 12:28:17.836839 2026] [ssl:error] [pid 3067991:tid 3067991] (70014)End of file found: [client 216.73.216.199:36372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:18.029897 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postmark/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/postmark/.env"] [unique_id "ams1UvANIc1DDWTZQu24XAAAADQ"]
[Thu Jul 30 12:28:18.030129 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/postmark/.env"] [unique_id "ams1UvANIc1DDWTZQu24XAAAADQ"]
[Thu Jul 30 12:28:18.030375 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/postmark/.env"] [unique_id "ams1UvANIc1DDWTZQu24XAAAADQ"]
[Thu Jul 30 12:28:18.200468 2026] [security2:error] [pid 3073215:tid 3073215] [client 43.157.180.116:46688] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "ams1Ui41WRkqAs_RphIksgAAADs"]
[Thu Jul 30 12:28:18.225949 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailgun/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/mailgun/.env"] [unique_id "ams1UvANIc1DDWTZQu24XQAAADQ"]
[Thu Jul 30 12:28:18.226162 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/mailgun/.env"] [unique_id "ams1UvANIc1DDWTZQu24XQAAADQ"]
[Thu Jul 30 12:28:18.226370 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/mailgun/.env"] [unique_id "ams1UvANIc1DDWTZQu24XQAAADQ"]
[Thu Jul 30 12:28:18.419528 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mandrill/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/mandrill/.env"] [unique_id "ams1UvANIc1DDWTZQu24XgAAADQ"]
[Thu Jul 30 12:28:18.419742 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/mandrill/.env"] [unique_id "ams1UvANIc1DDWTZQu24XgAAADQ"]
[Thu Jul 30 12:28:18.419995 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/mandrill/.env"] [unique_id "ams1UvANIc1DDWTZQu24XgAAADQ"]
[Thu Jul 30 12:28:18.552916 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.38:64430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:18.553553 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.38:64430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:18.617573 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailjet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/mailjet/.env"] [unique_id "ams1UvANIc1DDWTZQu24XwAAADQ"]
[Thu Jul 30 12:28:18.617749 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/mailjet/.env"] [unique_id "ams1UvANIc1DDWTZQu24XwAAADQ"]
[Thu Jul 30 12:28:18.617965 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/mailjet/.env"] [unique_id "ams1UvANIc1DDWTZQu24XwAAADQ"]
[Thu Jul 30 12:28:18.776795 2026] [ssl:error] [pid 3068014:tid 3068014] (EAI 2)Name or service not known: [client 144.76.19.72:33296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:18.776865 2026] [ssl:error] [pid 3068014:tid 3068014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:18.811429 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /brevo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/brevo/.env"] [unique_id "ams1UvANIc1DDWTZQu24YAAAADQ"]
[Thu Jul 30 12:28:18.811644 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/brevo/.env"] [unique_id "ams1UvANIc1DDWTZQu24YAAAADQ"]
[Thu Jul 30 12:28:18.811877 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/brevo/.env"] [unique_id "ams1UvANIc1DDWTZQu24YAAAADQ"]
[Thu Jul 30 12:28:18.832456 2026] [ssl:error] [pid 3067987:tid 3067987] (EAI 2)Name or service not known: [client 144.76.19.72:33304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:18.832494 2026] [ssl:error] [pid 3067987:tid 3067987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:18.923349 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.60:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:18.924016 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.60:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:19.006246 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /transactional/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/transactional/.env"] [unique_id "ams1U_ANIc1DDWTZQu24YQAAADQ"]
[Thu Jul 30 12:28:19.006391 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/transactional/.env"] [unique_id "ams1U_ANIc1DDWTZQu24YQAAADQ"]
[Thu Jul 30 12:28:19.006670 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/transactional/.env"] [unique_id "ams1U_ANIc1DDWTZQu24YQAAADQ"]
[Thu Jul 30 12:28:19.200617 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bulk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "liberator-no-email.com"] [uri "/bulk/.env"] [unique_id "ams1U_ANIc1DDWTZQu24YgAAADQ"]
[Thu Jul 30 12:28:19.200830 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "liberator-no-email.com"] [uri "/bulk/.env"] [unique_id "ams1U_ANIc1DDWTZQu24YgAAADQ"]
[Thu Jul 30 12:28:19.201046 2026] [security2:error] [pid 3069205:tid 3069205] [client 178.128.89.89:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "liberator-no-email.com"] [uri "/bulk/.env"] [unique_id "ams1U_ANIc1DDWTZQu24YgAAADQ"]
[Thu Jul 30 12:28:19.461997 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.17:57880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:19.462712 2026] [authz_core:error] [pid 3068158:tid 3068158] [client 57.141.0.17:57880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:19.926627 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.20:35938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:19.927301 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.20:35938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:20.554644 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.25:34808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:20.555272 2026] [authz_core:error] [pid 3068023:tid 3068023] [client 57.141.0.25:34808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:21.371404 2026] [lsapi:warn] [pid 3073212:tid 3073212] [client 122.180.21.11:60772] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:28:21.505588 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.59:21428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:21.506212 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.59:21428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:21.658633 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.7:36778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:21.659268 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.7:36778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:21.888574 2026] [ssl:error] [pid 3068232:tid 3068232] (EAI 2)Name or service not known: [client 144.76.19.72:49250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:21.888623 2026] [ssl:error] [pid 3068232:tid 3068232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:21.946726 2026] [ssl:error] [pid 3073215:tid 3073215] (EAI 2)Name or service not known: [client 144.76.19.72:49254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:21.946757 2026] [ssl:error] [pid 3073215:tid 3073215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:22.726910 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.21:34700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:22.727733 2026] [authz_core:error] [pid 3067987:tid 3067987] [client 57.141.0.21:34700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:23.215264 2026] [authz_core:error] [pid 3067545:tid 3067545] [client 57.141.0.53:42814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:23.215891 2026] [authz_core:error] [pid 3067545:tid 3067545] [client 57.141.0.53:42814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:23.627482 2026] [core:error] [pid 3068026:tid 3068026] (13)Permission denied: [client 216.73.216.199:44608] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/validate
[Thu Jul 30 12:28:23.767762 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.28:33078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:23.768410 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.28:33078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:23.904453 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.70:22890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:23.905090 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.70:22890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:24.143193 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.10:48666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:24.143815 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.10:48666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:24.851020 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:9659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:24.864620 2026] [core:error] [pid 3067545:tid 3067545] [client 66.249.66.39:63938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:24.864643 2026] [core:error] [pid 3067545:tid 3067545] [client 66.249.66.39:63938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:25.004296 2026] [ssl:error] [pid 3067468:tid 3067468] (EAI 2)Name or service not known: [client 144.76.19.72:49258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:25.004322 2026] [ssl:error] [pid 3067468:tid 3067468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:25.055658 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:49260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:25.055689 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:25.600841 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.60:42548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:25.601463 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.60:42548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:25.716039 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.26:20856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:25.716676 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.26:20856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:26.415487 2026] [access_compat:error] [pid 3068308:tid 3068308] [client 157.20.138.62:61511] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:26.580300 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.15:31486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:26.580930 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.15:31486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:26.660782 2026] [ssl:error] [pid 3068026:tid 3068026] (70014)End of file found: [client 216.73.216.199:44608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:26.724050 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.48:45616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:26.724708 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.48:45616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:27.245881 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.41:22598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:27.246521 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.41:22598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:27.387015 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.48:45622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:27.387719 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.48:45622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:28.112523 2026] [ssl:error] [pid 3067991:tid 3067991] (EAI 2)Name or service not known: [client 144.76.19.72:49272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:28.112583 2026] [ssl:error] [pid 3067991:tid 3067991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:28.167323 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:49276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:28.167369 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:28.243401 2026] [core:error] [pid 3068027:tid 3068027] [client 66.249.64.170:63112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:28.243437 2026] [core:error] [pid 3068027:tid 3068027] [client 66.249.64.170:63112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:28.474823 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.45:30784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:28.475469 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.45:30784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:29.039959 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.24:53632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:29.041147 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.24:53632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:29.257163 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.61:50850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:29.257816 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.61:50850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:30.225436 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.31:57936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:30.226809 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.31:57936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:30.691091 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.30:27032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:30.691709 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.30:27032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:31.084578 2026] [authz_core:error] [pid 3069205:tid 3069205] [client 57.141.0.33:38246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:31.085222 2026] [authz_core:error] [pid 3069205:tid 3069205] [client 57.141.0.33:38246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:31.280815 2026] [ssl:error] [pid 3073210:tid 3073210] (EAI 2)Name or service not known: [client 144.76.19.72:39144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:31.280856 2026] [ssl:error] [pid 3073210:tid 3073210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:31.340683 2026] [ssl:error] [pid 3072617:tid 3072617] (EAI 2)Name or service not known: [client 144.76.19.72:39158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:31.340741 2026] [ssl:error] [pid 3072617:tid 3072617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:31.366664 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.24:53642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:31.367307 2026] [authz_core:error] [pid 3067467:tid 3067467] [client 57.141.0.24:53642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:31.665051 2026] [access_compat:error] [pid 3069160:tid 3069160] [client 125.176.202.122:64925] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:31.730871 2026] [lsapi:warn] [pid 3070569:tid 3070569] [client 122.180.21.11:61525] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:28:32.107659 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.3:61416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:32.108332 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.3:61416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:32.623577 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.19:35264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:32.624203 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.19:35264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:32.713671 2026] [ssl:error] [pid 3073152:tid 3073152] (70014)End of file found: [client 216.73.216.199:47749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:33.187378 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.68:54196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:33.188011 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.68:54196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:33.315773 2026] [ssl:error] [pid 3068027:tid 3068027] (70014)End of file found: [client 216.73.216.199:13079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:33.541688 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.1:62620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:33.542829 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.1:62620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:34.102938 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.11:32474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:34.103581 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.11:32474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:34.225511 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.50:25314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:34.226209 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.50:25314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:34.393823 2026] [ssl:error] [pid 3068026:tid 3068026] (EAI 2)Name or service not known: [client 144.76.19.72:39178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:34.393855 2026] [ssl:error] [pid 3068026:tid 3068026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:34.449995 2026] [ssl:error] [pid 3068024:tid 3068024] (EAI 2)Name or service not known: [client 144.76.19.72:39192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:34.450054 2026] [ssl:error] [pid 3068024:tid 3068024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:34.541491 2026] [ssl:error] [pid 3068308:tid 3068308] (70014)End of file found: [client 216.73.216.199:58090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:35.170401 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.9:41092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:35.171041 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.9:41092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:35.505886 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.64:24724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:35.506880 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.64:24724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:35.924713 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.38:28540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:35.925340 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.38:28540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:36.018316 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.65:26924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:36.019003 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.65:26924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:36.446425 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.37:35604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:36.447107 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.37:35604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:36.927192 2026] [access_compat:error] [pid 3074373:tid 3074373] [client 157.20.138.62:62114] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:37.387337 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 45.158.164.139:53454] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:28:37.509007 2026] [ssl:error] [pid 3073210:tid 3073210] (EAI 2)Name or service not known: [client 144.76.19.72:39212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:37.509032 2026] [ssl:error] [pid 3073210:tid 3073210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:37.527631 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.12:43514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:37.528295 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.12:43514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:37.563360 2026] [ssl:error] [pid 3073083:tid 3073083] (EAI 2)Name or service not known: [client 144.76.19.72:39220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:37.563407 2026] [ssl:error] [pid 3073083:tid 3073083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:37.723740 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.6:35104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:37.724394 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.6:35104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:38.166059 2026] [core:error] [pid 3073210:tid 3073210] (13)Permission denied: [client 216.73.216.199:34670] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/objects_partial
[Thu Jul 30 12:28:38.302265 2026] [access_compat:error] [pid 3072565:tid 3072565] [client 125.176.202.122:65242] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:38.469336 2026] [ssl:error] [pid 3073210:tid 3073210] (70014)End of file found: [client 216.73.216.199:34670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:38.556407 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.9:41106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:38.557033 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.9:41106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:39.104437 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.61:30468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:39.105096 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.61:30468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:39.676371 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.32:20960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:39.676989 2026] [authz_core:error] [pid 3068027:tid 3068027] [client 57.141.0.32:20960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:39.987224 2026] [ssl:error] [pid 3068390:tid 3068390] (70014)End of file found: [client 216.73.216.199:41307] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:40.097124 2026] [authz_core:error] [pid 3072565:tid 3072565] [client 57.141.0.12:43528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:40.097743 2026] [authz_core:error] [pid 3072565:tid 3072565] [client 57.141.0.12:43528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:40.297513 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.27:37654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:40.298143 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.27:37654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:40.507201 2026] [ssl:error] [pid 3068308:tid 3068308] (70014)End of file found: [client 216.73.216.199:15727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:40.618765 2026] [ssl:error] [pid 3072617:tid 3072617] (EAI 2)Name or service not known: [client 144.76.19.72:28440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:40.618790 2026] [ssl:error] [pid 3072617:tid 3072617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:40.707490 2026] [ssl:error] [pid 3073026:tid 3073026] (EAI 2)Name or service not known: [client 144.76.19.72:28448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:40.707557 2026] [ssl:error] [pid 3073026:tid 3073026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:41.209138 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.34:22840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:41.209763 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.34:22840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:41.214130 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.64:24732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:41.214744 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.64:24732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:41.837355 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.41:56446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:41.838046 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.41:56446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:42.346174 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.69:29704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:42.346876 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.69:29704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:42.439917 2026] [lsapi:warn] [pid 3070569:tid 3070569] [client 122.180.21.11:62172] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:28:43.280877 2026] [access_compat:error] [pid 3072565:tid 3072565] [client 125.176.202.122:65463] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:43.569886 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.39:41586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:43.570530 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.39:41586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:43.665156 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.64:41604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:43.665784 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.64:41604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:43.764276 2026] [ssl:error] [pid 3073210:tid 3073210] (EAI 2)Name or service not known: [client 144.76.19.72:28460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:43.764308 2026] [ssl:error] [pid 3073210:tid 3073210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:43.818810 2026] [ssl:error] [pid 3073212:tid 3073212] (EAI 2)Name or service not known: [client 144.76.19.72:28466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:43.818852 2026] [ssl:error] [pid 3073212:tid 3073212] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:43.858752 2026] [ssl:error] [pid 3074780:tid 3074780] (70014)End of file found: [client 216.73.216.199:19044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:43.961992 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.20:44026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:43.962628 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.20:44026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:44.610228 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.59:45654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:44.610850 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.59:45654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:44.615763 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.25:31228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:44.616400 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.25:31228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:45.022828 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:48059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:45.230135 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.66:65116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:45.230757 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.66:65116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:45.258454 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.24:53988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:45.259082 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.24:53988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:45.337118 2026] [ssl:error] [pid 3074373:tid 3074373] (70014)End of file found: [client 216.73.216.199:53247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:45.636867 2026] [ssl:error] [pid 3074543:tid 3074543] (70014)End of file found: [client 216.73.216.199:35720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:45.819156 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.50:25946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:45.819778 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.50:25946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:46.194947 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.16:47310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:46.195582 2026] [authz_core:error] [pid 3068390:tid 3068390] [client 57.141.0.16:47310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:46.903530 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:28476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:46.903569 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:46.914730 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.21:59934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:46.915354 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.21:59934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:46.958081 2026] [ssl:error] [pid 3072617:tid 3072617] (EAI 2)Name or service not known: [client 144.76.19.72:28492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:46.958116 2026] [ssl:error] [pid 3072617:tid 3072617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:47.391033 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.60:58258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:47.391675 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.60:58258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:47.476174 2026] [access_compat:error] [pid 3068021:tid 3068021] [client 157.20.138.62:62710] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:47.841236 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.3:50326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:47.841860 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.3:50326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:47.944060 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.54:37678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:47.944700 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.54:37678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:48.578191 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.34:22846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:48.578842 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.34:22846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:49.276075 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.37:27148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:49.276723 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.37:27148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:49.332508 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.63:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:49.333117 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.63:23586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:49.476383 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.25:53978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:49.477006 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.25:53978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:49.881460 2026] [access_compat:error] [pid 3068024:tid 3068024] [client 125.176.202.122:49358] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:50.044334 2026] [ssl:error] [pid 3068025:tid 3068025] (EAI 2)Name or service not known: [client 144.76.19.72:28370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:50.044366 2026] [ssl:error] [pid 3068025:tid 3068025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:50.046315 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.34:62150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:50.046927 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.34:62150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:50.100874 2026] [ssl:error] [pid 3074780:tid 3074780] (EAI 2)Name or service not known: [client 144.76.19.72:28380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:50.100910 2026] [ssl:error] [pid 3074780:tid 3074780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:50.196811 2026] [authz_core:error] [pid 3072565:tid 3072565] [client 57.141.0.48:42266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:50.197433 2026] [authz_core:error] [pid 3072565:tid 3072565] [client 57.141.0.48:42266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:50.496853 2026] [ssl:error] [pid 3073215:tid 3073215] (70014)End of file found: [client 216.73.216.199:51445] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:50.789530 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:53066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:51.084678 2026] [ssl:error] [pid 3069203:tid 3069203] (70014)End of file found: [client 216.73.216.199:36583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:51.205333 2026] [security2:error] [pid 3072565:tid 3072565] [client 43.130.40.120:48316] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theovertones.co.uk"] [uri "/"] [unique_id "ams1c9z11LO5vfv4SQl-KAAAAAE"]
[Thu Jul 30 12:28:51.658968 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.71:33990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:51.659616 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.71:33990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:52.037562 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.69:47082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:52.038571 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.69:47082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:52.074343 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.35:27710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:52.075029 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.35:27710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:53.059600 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.37:37642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:53.060227 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.37:37642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:53.060366 2026] [lsapi:warn] [pid 3074373:tid 3074373] [client 122.180.21.11:62798] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:28:53.155965 2026] [ssl:error] [pid 3068021:tid 3068021] (EAI 2)Name or service not known: [client 144.76.19.72:28392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:53.156010 2026] [ssl:error] [pid 3068021:tid 3068021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:53.207221 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.50:54868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:53.207844 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.50:54868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:53.211046 2026] [ssl:error] [pid 3071225:tid 3071225] (EAI 2)Name or service not known: [client 144.76.19.72:28402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:53.211100 2026] [ssl:error] [pid 3071225:tid 3071225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:53.724601 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.65:50064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:53.725313 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.65:50064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:53.844783 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.50:54876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:53.846011 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.50:54876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:54.060876 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.23:54938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:54.061512 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.23:54938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:54.227553 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.40:62958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:54.228183 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.40:62958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:54.960549 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.30:26680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:54.961161 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.30:26680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:55.225461 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.48:42310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:55.226104 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.48:42310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:55.770718 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.9:47590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:55.771378 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.9:47590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:55.889563 2026] [ssl:error] [pid 3071450:tid 3071450] (70014)End of file found: [client 216.73.216.199:56111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:56.073218 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.56:43244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:56.073843 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.56:43244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:56.196481 2026] [ssl:error] [pid 3073215:tid 3073215] (70014)End of file found: [client 216.73.216.199:60575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:56.230567 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 125.176.202.122:49621] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:56.267083 2026] [ssl:error] [pid 3069572:tid 3069572] (EAI 2)Name or service not known: [client 144.76.19.72:28410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:56.267118 2026] [ssl:error] [pid 3069572:tid 3069572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:56.322181 2026] [ssl:error] [pid 3073082:tid 3073082] (EAI 2)Name or service not known: [client 144.76.19.72:28420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:56.322225 2026] [ssl:error] [pid 3073082:tid 3073082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:56.344655 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.55:39070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:56.345292 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.55:39070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:56.517600 2026] [ssl:error] [pid 3073152:tid 3073152] (70014)End of file found: [client 216.73.216.199:16518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:28:56.614253 2026] [core:error] [pid 3068026:tid 3068026] [client 66.249.66.194:60155] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:56.614285 2026] [core:error] [pid 3068026:tid 3068026] [client 66.249.66.194:60155] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:56.622797 2026] [core:error] [pid 3069203:tid 3069203] [client 66.249.66.167:50091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:56.622826 2026] [core:error] [pid 3069203:tid 3069203] [client 66.249.66.167:50091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:28:56.842285 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.25:32612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:56.842905 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.25:32612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:56.981471 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.28:53620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:56.982100 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.28:53620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:57.951916 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.20:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:57.952550 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.20:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:58.019926 2026] [access_compat:error] [pid 3068195:tid 3068195] [client 157.20.138.62:63317] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:28:58.176271 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.18:59086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:58.176891 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.18:59086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:58.231528 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.68:30546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:58.232242 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.68:30546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:59.156896 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.62:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:59.157543 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.62:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:59.429595 2026] [ssl:error] [pid 3073213:tid 3073213] (EAI 2)Name or service not known: [client 144.76.19.72:28450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:59.429628 2026] [ssl:error] [pid 3073213:tid 3073213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:59.481824 2026] [ssl:error] [pid 3073155:tid 3073155] (EAI 2)Name or service not known: [client 144.76.19.72:28452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:28:59.481865 2026] [ssl:error] [pid 3073155:tid 3073155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:28:59.799777 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.54:55368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:59.800407 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.54:55368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:28:59.837388 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.45:30606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:28:59.838370 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.45:30606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:00.372184 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.24:31772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:00.372829 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.24:31772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:00.441492 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.2:64436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:00.442184 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.2:64436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:00.830970 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.43:53816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:00.831601 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.43:53816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:01.361115 2026] [ssl:error] [pid 3074373:tid 3074373] (70014)End of file found: [client 216.73.216.199:40564] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:01.642052 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.8:21712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:01.642758 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.8:21712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:01.769274 2026] [ssl:error] [pid 3073155:tid 3073155] (70014)End of file found: [client 216.73.216.199:41350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:01.784859 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.1:55414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:01.785911 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.1:55414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:02.059886 2026] [ssl:error] [pid 3073215:tid 3073215] (70014)End of file found: [client 216.73.216.199:47318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:02.157520 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.67:39114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:02.158279 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.67:39114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:02.360612 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.54:55374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:02.361237 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.54:55374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:02.580857 2026] [ssl:error] [pid 3069160:tid 3069160] (EAI 2)Name or service not known: [client 144.76.19.72:34636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:02.580905 2026] [ssl:error] [pid 3069160:tid 3069160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:02.633563 2026] [ssl:error] [pid 3068026:tid 3068026] (EAI 2)Name or service not known: [client 144.76.19.72:34644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:02.633603 2026] [ssl:error] [pid 3068026:tid 3068026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:02.912541 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.25:32624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:02.913164 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.25:32624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:02.947314 2026] [core:error] [pid 3073152:tid 3073152] [client 66.249.66.167:35271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:02.947341 2026] [core:error] [pid 3073152:tid 3073152] [client 66.249.66.167:35271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:03.541539 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.71:52790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:03.542639 2026] [authz_core:error] [pid 3067468:tid 3067468] [client 57.141.0.71:52790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:03.696293 2026] [lsapi:warn] [pid 3068026:tid 3068026] [client 122.180.21.11:63421] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:29:03.892778 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.59:39840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:03.893437 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.59:39840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:03.897762 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.1:55426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:03.898583 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.1:55426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:04.071007 2026] [access_compat:error] [pid 3068195:tid 3068195] [client 125.176.202.122:49917] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:04.386237 2026] [security2:error] [pid 3068021:tid 3068021] [client 45.148.10.120:59862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1gJJHBZQOB44T2ieUZwAAACg"]
[Thu Jul 30 12:29:04.386436 2026] [security2:error] [pid 3068021:tid 3068021] [client 45.148.10.120:59862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1gJJHBZQOB44T2ieUZwAAACg"]
[Thu Jul 30 12:29:04.386691 2026] [security2:error] [pid 3068021:tid 3068021] [client 45.148.10.120:59862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "ams1gJJHBZQOB44T2ieUZwAAACg"]
[Thu Jul 30 12:29:04.504727 2026] [security2:error] [pid 3067956:tid 3067956] [client 43.166.246.180:56292] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.soul-connections.net"] [uri "/"] [unique_id "ams1gPX0AuNWx09N36iAPwAAABQ"]
[Thu Jul 30 12:29:04.582222 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.67:39130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:04.583329 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.67:39130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:04.697432 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.44:62006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:04.698053 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.44:62006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:04.843491 2026] [security2:error] [pid 3073212:tid 3073212] [client 43.130.91.75:48765] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1gBSKPZqJ4b82hnZ1RAAAADg"]
[Thu Jul 30 12:29:04.843555 2026] [security2:error] [pid 3073212:tid 3073212] [client 43.130.91.75:48765] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1gBSKPZqJ4b82hnZ1RAAAADg"]
[Thu Jul 30 12:29:04.843795 2026] [security2:error] [pid 3073212:tid 3073212] [client 43.130.91.75:48765] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1gBSKPZqJ4b82hnZ1RAAAADg"]
[Thu Jul 30 12:29:05.067659 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.25:44120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:05.068412 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.25:44120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:05.224230 2026] [authz_core:error] [pid 3068196:tid 3068196] [client 57.141.0.66:55844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:05.224872 2026] [authz_core:error] [pid 3068196:tid 3068196] [client 57.141.0.66:55844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:05.689060 2026] [ssl:error] [pid 3073212:tid 3073212] (EAI 2)Name or service not known: [client 144.76.19.72:34654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:05.689118 2026] [ssl:error] [pid 3073212:tid 3073212] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:05.745684 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:34658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:05.745719 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:05.886190 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.60:54948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:05.886859 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.60:54948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:06.095269 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.62:26808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:06.095891 2026] [authz_core:error] [pid 3067991:tid 3067991] [client 57.141.0.62:26808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:06.505591 2026] [security2:error] [pid 3067956:tid 3067956] [client 113.186.137.226:55888] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1gvX0AuNWx09N36iAQQAAABQ"]
[Thu Jul 30 12:29:06.505647 2026] [security2:error] [pid 3067956:tid 3067956] [client 113.186.137.226:55888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1gvX0AuNWx09N36iAQQAAABQ"]
[Thu Jul 30 12:29:06.505901 2026] [security2:error] [pid 3067956:tid 3067956] [client 113.186.137.226:55888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1gvX0AuNWx09N36iAQQAAABQ"]
[Thu Jul 30 12:29:06.638288 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.2:43238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:06.638916 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.2:43238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:06.866845 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.14:48532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:06.867468 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.14:48532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:06.925010 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.28:28728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:06.925645 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.28:28728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:07.102879 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.23:54544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:07.103521 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.23:54544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:07.796198 2026] [ssl:error] [pid 3068021:tid 3068021] (70014)End of file found: [client 216.73.216.199:16282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:07.883915 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.44:62034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:07.884564 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.44:62034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:08.058808 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.35:31282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:08.059913 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.35:31282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:08.401375 2026] [ssl:error] [pid 3073212:tid 3073212] (70014)End of file found: [client 216.73.216.199:27392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:08.506477 2026] [access_compat:error] [pid 3073215:tid 3073215] [client 157.20.138.62:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:08.749773 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.33:30290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:08.750402 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.33:30290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:08.806275 2026] [ssl:error] [pid 3069203:tid 3069203] (EAI 2)Name or service not known: [client 144.76.19.72:34664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:08.806307 2026] [ssl:error] [pid 3069203:tid 3069203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:08.860407 2026] [ssl:error] [pid 3069571:tid 3069571] (EAI 2)Name or service not known: [client 144.76.19.72:34666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:08.860443 2026] [ssl:error] [pid 3069571:tid 3069571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:09.137605 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.67:59990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:09.138229 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.67:59990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:09.306104 2026] [ssl:error] [pid 3073153:tid 3073153] (70014)End of file found: [client 216.73.216.199:49580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:09.722700 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.55:41278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:09.723320 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.55:41278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:09.777390 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.52:21310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:09.778017 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.52:21310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:10.227111 2026] [core:crit] [pid 3070569:tid 3070569] (13)Permission denied: [client 52.167.144.219:56978] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 12:29:10.411157 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.32:23076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:10.411774 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.32:23076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:10.468332 2026] [access_compat:error] [pid 3075860:tid 3075860] [client 125.176.202.122:50206] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:10.506119 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.40:29760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:10.506741 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.40:29760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:10.606152 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.27:22812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:10.606777 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.27:22812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:10.996622 2026] [security2:error] [pid 3073083:tid 3073083] [client 189.36.254.51:3219] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1hm7i6oh1iLa5tUK0vAAAABM"]
[Thu Jul 30 12:29:10.996669 2026] [security2:error] [pid 3073083:tid 3073083] [client 189.36.254.51:3219] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1hm7i6oh1iLa5tUK0vAAAABM"]
[Thu Jul 30 12:29:10.996929 2026] [security2:error] [pid 3073083:tid 3073083] [client 189.36.254.51:3219] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1hm7i6oh1iLa5tUK0vAAAABM"]
[Thu Jul 30 12:29:11.301531 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.34:22408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:11.302156 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.34:22408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:11.533464 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.63:39896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:11.534132 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.63:39896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:11.575153 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.66:59168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:11.575779 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.66:59168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:11.791080 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.22:24576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:11.792132 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.22:24576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:11.916753 2026] [ssl:error] [pid 3073155:tid 3073155] (EAI 2)Name or service not known: [client 144.76.19.72:50360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:11.916783 2026] [ssl:error] [pid 3073155:tid 3073155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:11.972385 2026] [ssl:error] [pid 3073155:tid 3073155] (EAI 2)Name or service not known: [client 144.76.19.72:50374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:11.972406 2026] [ssl:error] [pid 3073155:tid 3073155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:12.450432 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.56:53850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:12.451055 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.56:53850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:12.988542 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.41:65362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:12.989177 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.41:65362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:13.215828 2026] [ssl:error] [pid 3068026:tid 3068026] (70014)End of file found: [client 216.73.216.199:38400] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:13.706287 2026] [ssl:error] [pid 3068024:tid 3068024] (70014)End of file found: [client 216.73.216.199:56059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:13.707894 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.25:44122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:13.708532 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.25:44122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:13.872906 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.2:43260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:13.873541 2026] [authz_core:error] [pid 3073155:tid 3073155] [client 57.141.0.2:43260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:14.111307 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.69:25940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:14.111947 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.69:25940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:14.369325 2026] [lsapi:warn] [pid 3068025:tid 3068025] [client 122.180.21.11:64052] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:29:14.609401 2026] [ssl:error] [pid 3073155:tid 3073155] (70014)End of file found: [client 216.73.216.199:24018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:14.644645 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.30:42588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:14.645274 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.30:42588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:15.037494 2026] [ssl:error] [pid 3073153:tid 3073153] (EAI 2)Name or service not known: [client 144.76.19.72:50390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:15.037551 2026] [ssl:error] [pid 3073153:tid 3073153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:15.081149 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.35:55636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:15.081790 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.35:55636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:15.089727 2026] [ssl:error] [pid 3073212:tid 3073212] (EAI 2)Name or service not known: [client 144.76.19.72:50402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:15.089753 2026] [ssl:error] [pid 3073212:tid 3073212] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:15.180203 2026] [lsapi:warn] [pid 3073210:tid 3073210] [client 216.73.216.199:30840] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 12:29:15.180231 2026] [lsapi:error] [pid 3073210:tid 3073210] [client 216.73.216.199:30840] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/unserializeClassNames.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 12:29:15.332587 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.36:64436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:15.333212 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.36:64436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:15.591808 2026] [ssl:error] [pid 3067956:tid 3067956] (70014)End of file found: [client 216.73.216.199:55685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:15.876697 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.71:23432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:15.877320 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.71:23432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:15.946211 2026] [security2:error] [pid 3069204:tid 3069204] [client 85.208.96.198:10614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/indigent-funeral-texas"] [unique_id "ams1i0yGfIjDI4FJOvj2OAAAADA"]
[Thu Jul 30 12:29:15.984094 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.43:62264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:15.984711 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.43:62264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:16.009766 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.35:55642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:16.010393 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.35:55642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:16.082567 2026] [ssl:error] [pid 3072565:tid 3072565] (70014)End of file found: [client 216.73.216.199:47270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:16.257998 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.11:63306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:16.258625 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.11:63306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:16.296710 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.71:23442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:16.297328 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.71:23442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:16.498704 2026] [ssl:error] [pid 3073153:tid 3073153] (70014)End of file found: [client 216.73.216.199:62435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:17.071195 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.71:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:17.071816 2026] [authz_core:error] [pid 3073210:tid 3073210] [client 57.141.0.71:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:17.402449 2026] [authz_core:error] [pid 3074780:tid 3074780] [client 57.141.0.65:54118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:17.403078 2026] [authz_core:error] [pid 3074780:tid 3074780] [client 57.141.0.65:54118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:18.148002 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.35:55652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:18.148642 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.35:55652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:18.179575 2026] [ssl:error] [pid 3068020:tid 3068020] (EAI 2)Name or service not known: [client 144.76.19.72:50416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:18.179609 2026] [ssl:error] [pid 3068020:tid 3068020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:18.238130 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.9:59114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:18.238152 2026] [ssl:error] [pid 3067689:tid 3067689] (EAI 2)Name or service not known: [client 144.76.19.72:50418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:18.238174 2026] [ssl:error] [pid 3067689:tid 3067689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:18.238921 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.9:59114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:18.268906 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.21:38714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:18.269545 2026] [authz_core:error] [pid 3073212:tid 3073212] [client 57.141.0.21:38714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:18.573176 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.59:32294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:18.573794 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.59:32294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:18.699902 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.33:35906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:18.700536 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.33:35906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:19.028849 2026] [access_compat:error] [pid 3076204:tid 3076204] [client 157.20.138.62:64519] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:19.248841 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.44:50686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:19.249462 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.44:50686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:19.883610 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.32:21052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:19.884263 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.32:21052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:19.943832 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.20:50214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:19.944484 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.20:50214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:20.121087 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.69:43866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:20.121707 2026] [authz_core:error] [pid 3069572:tid 3069572] [client 57.141.0.69:43866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:20.262218 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.39:42988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:20.262840 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.39:42988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:20.378695 2026] [security2:error] [pid 3075978:tid 3075978] [client 124.156.226.179:35176] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "ams1kDbE97VlTlQYp8NtRgAAABc"]
[Thu Jul 30 12:29:20.643256 2026] [security2:error] [pid 3067989:tid 3067989] [client 85.208.98.19:34662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/folio-1040-g2-k.html"] [unique_id "ams1kOVKjpjv7lr4k5YxgQAAABo"]
[Thu Jul 30 12:29:20.942089 2026] [ssl:error] [pid 3076267:tid 3076267] (70014)End of file found: [client 216.73.216.199:43943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:20.973601 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.60:32156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:20.974237 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.60:32156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:21.294574 2026] [ssl:error] [pid 3067956:tid 3067956] (EAI 2)Name or service not known: [client 144.76.19.72:58120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:21.294611 2026] [ssl:error] [pid 3067956:tid 3067956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:21.333193 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.5:35134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:21.333827 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.5:35134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:21.348871 2026] [ssl:error] [pid 3067989:tid 3067989] (EAI 2)Name or service not known: [client 144.76.19.72:58128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:21.348904 2026] [ssl:error] [pid 3067989:tid 3067989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:21.516735 2026] [security2:error] [pid 3068026:tid 3068026] [client 49.51.253.83:42486] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sijames.com"] [uri "/"] [unique_id "ams1kerZpp7Qfl37_wQ73wAAAC4"]
[Thu Jul 30 12:29:21.706713 2026] [ssl:error] [pid 3073215:tid 3073215] (70014)End of file found: [client 216.73.216.199:49673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:21.930372 2026] [ssl:error] [pid 3067956:tid 3067956] (70014)End of file found: [client 216.73.216.199:9065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:21.977215 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.29:57170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:21.977835 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.29:57170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:22.222186 2026] [access_compat:error] [pid 3072565:tid 3072565] [client 125.176.202.122:50751] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:22.288405 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.31:55208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:22.289031 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.31:55208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:22.437163 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.58:33864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:22.437797 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.58:33864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:22.619271 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.68:45532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:22.619897 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.68:45532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:22.662359 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.6:47344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:22.662980 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.6:47344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:23.056774 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.22:56074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:23.057398 2026] [authz_core:error] [pid 3068026:tid 3068026] [client 57.141.0.22:56074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:23.287657 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.35:32970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:23.288279 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.35:32970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:23.976300 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.7:32140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:23.976920 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.7:32140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:23.983543 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.68:45546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:23.984149 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.68:45546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:24.173191 2026] [security2:error] [pid 3074373:tid 3074373] [client 123.207.65.62:50742] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.londonkinesiology.com"] [uri "/"] [unique_id "ams1lDD2nVqlgEIbBdOPUgAAAAA"]
[Thu Jul 30 12:29:24.304737 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.10:32638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:24.305360 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.10:32638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:24.403759 2026] [ssl:error] [pid 3073026:tid 3073026] (EAI 2)Name or service not known: [client 144.76.19.72:58130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:24.403802 2026] [ssl:error] [pid 3073026:tid 3073026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:24.455122 2026] [ssl:error] [pid 3068021:tid 3068021] (EAI 2)Name or service not known: [client 144.76.19.72:58132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:24.455149 2026] [ssl:error] [pid 3068021:tid 3068021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:24.710365 2026] [cgi:error] [pid 3073213:tid 3073213] [client 128.14.237.43:42020] AH02812: stderr from /home/ppclcom/parallel-coordinates.org/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:29:24.822711 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.61:37686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:24.823341 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.61:37686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:25.081885 2026] [lsapi:warn] [pid 3075978:tid 3075978] [client 122.180.21.11:64677] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:29:25.138881 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.32:63936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:25.139514 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.32:63936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:25.701340 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.62:57570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:25.702079 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.62:57570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:25.709829 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.44:41466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:25.710434 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.44:41466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:25.784971 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.61:37690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:25.785614 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.61:37690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:26.335520 2026] [ssl:error] [pid 3068020:tid 3068020] (70014)End of file found: [client 216.73.216.199:11693] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:26.984105 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.12:24626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:26.984728 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.12:24626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:27.043228 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.2:46476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:27.043855 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.2:46476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:27.209579 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.20:50222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:27.210197 2026] [authz_core:error] [pid 3068021:tid 3068021] [client 57.141.0.20:50222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:27.249387 2026] [ssl:error] [pid 3073213:tid 3073213] (70014)End of file found: [client 216.73.216.199:40990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:27.506686 2026] [ssl:error] [pid 3067989:tid 3067989] (EAI 2)Name or service not known: [client 144.76.19.72:58134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:27.506730 2026] [ssl:error] [pid 3067989:tid 3067989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:27.552684 2026] [ssl:error] [pid 3076267:tid 3076267] (70014)End of file found: [client 216.73.216.199:40963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:27.561385 2026] [ssl:error] [pid 3068015:tid 3068015] (EAI 2)Name or service not known: [client 144.76.19.72:58148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:27.561415 2026] [ssl:error] [pid 3068015:tid 3068015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:27.703596 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 66.249.66.35:59436] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:29:27.706629 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 66.249.66.35:59436] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:29:28.000405 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.20:50228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:28.001022 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.20:50228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:28.697613 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.15:45524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:28.698237 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.15:45524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:28.854335 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.14:51034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:28.854961 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.14:51034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:29.118930 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.17:56628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:29.119568 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.17:56628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:29.455151 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.34:58242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:29.455777 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.34:58242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:29.582009 2026] [access_compat:error] [pid 3067689:tid 3067689] [client 157.20.138.62:65125] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:29.781460 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.48:54960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:29.782096 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.48:54960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:29.855316 2026] [security2:error] [pid 3073082:tid 3073082] [client 123.207.65.62:49634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "ams1maFoD7dpTPSPihIlQgAAABE"], referer: http://www.londonkinesiology.com
[Thu Jul 30 12:29:29.857188 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 123.207.65.62:49634] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.londonkinesiology.com
[Thu Jul 30 12:29:29.859886 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 123.207.65.62:49634] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.londonkinesiology.com
[Thu Jul 30 12:29:29.975092 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.51:52132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:29.975715 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.51:52132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:30.036309 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.50:37810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:30.036931 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.50:37810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:30.170594 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 45.13.186.114:55890] AH01630: client denied by server configuration: /home/clss/public_html/error_log, referer: https://www.google.com/
[Thu Jul 30 12:29:30.616764 2026] [ssl:error] [pid 3071450:tid 3071450] (EAI 2)Name or service not known: [client 144.76.19.72:51506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:30.616802 2026] [ssl:error] [pid 3071450:tid 3071450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:30.670299 2026] [ssl:error] [pid 3067989:tid 3067989] (EAI 2)Name or service not known: [client 144.76.19.72:51518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:30.670332 2026] [ssl:error] [pid 3067989:tid 3067989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:30.886367 2026] [cgi:error] [pid 3068025:tid 3068025] [client 128.14.237.43:42032] AH02812: stderr from /home/ppclcom/parallel-coordinates.org/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:29:30.903983 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.28:47424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:30.904607 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.28:47424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:30.957023 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.38:42216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:30.957660 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.38:42216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:31.229374 2026] [security2:error] [pid 3073082:tid 3073082] [client 52.3.104.214:21217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2016/01/leeds-651x1024.jpg"] [unique_id "ams1m6FoD7dpTPSPihIlQwAAABE"]
[Thu Jul 30 12:29:31.317458 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.49:22044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:31.318097 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.49:22044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:31.760688 2026] [ssl:error] [pid 3071450:tid 3071450] (70014)End of file found: [client 216.73.216.199:25508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:31.763108 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.16:54914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:31.763727 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.16:54914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:32.127951 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.11:56450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:32.128590 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.11:56450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:32.403161 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.58:42190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:32.403785 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.58:42190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:32.657663 2026] [ssl:error] [pid 3075258:tid 3075258] (70014)End of file found: [client 216.73.216.199:9638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:32.771956 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.27:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:32.772587 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.27:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:32.958470 2026] [ssl:error] [pid 3068308:tid 3068308] (70014)End of file found: [client 216.73.216.199:45063] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:33.068002 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.56:64424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:33.068634 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.56:64424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:33.090699 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.34:58248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:33.091329 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.34:58248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:33.279661 2026] [security2:error] [pid 3075978:tid 3075978] [client 94.154.43.178:58582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hazardous-materials.co.uk.ditchfest.com"] [uri "/.env"] [unique_id "ams1nTbE97VlTlQYp8NtTgAAABc"]
[Thu Jul 30 12:29:33.279859 2026] [security2:error] [pid 3075978:tid 3075978] [client 94.154.43.178:58582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hazardous-materials.co.uk.ditchfest.com"] [uri "/.env"] [unique_id "ams1nTbE97VlTlQYp8NtTgAAABc"]
[Thu Jul 30 12:29:33.280119 2026] [security2:error] [pid 3075978:tid 3075978] [client 94.154.43.178:58582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hazardous-materials.co.uk.ditchfest.com"] [uri "/.env"] [unique_id "ams1nTbE97VlTlQYp8NtTgAAABc"]
[Thu Jul 30 12:29:33.309621 2026] [security2:error] [pid 3076266:tid 3076266] [client 94.154.43.188:30958] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hoo-hah.ditchfest.com"] [uri "/.env"] [unique_id "ams1nadMx2-rBeOvcrb4gwAAAB0"]
[Thu Jul 30 12:29:33.309811 2026] [security2:error] [pid 3076266:tid 3076266] [client 94.154.43.188:30958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hoo-hah.ditchfest.com"] [uri "/.env"] [unique_id "ams1nadMx2-rBeOvcrb4gwAAAB0"]
[Thu Jul 30 12:29:33.310024 2026] [security2:error] [pid 3076266:tid 3076266] [client 94.154.43.188:30958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hoo-hah.ditchfest.com"] [uri "/.env"] [unique_id "ams1nadMx2-rBeOvcrb4gwAAAB0"]
[Thu Jul 30 12:29:33.726433 2026] [ssl:error] [pid 3076266:tid 3076266] (EAI 2)Name or service not known: [client 144.76.19.72:51526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:33.726477 2026] [ssl:error] [pid 3076266:tid 3076266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:33.749427 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.40:22002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:33.750050 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.40:22002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:33.826909 2026] [ssl:error] [pid 3067989:tid 3067989] (EAI 2)Name or service not known: [client 144.76.19.72:51532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:33.826933 2026] [ssl:error] [pid 3067989:tid 3067989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:33.918297 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.4:39376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:33.918925 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.4:39376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:34.217191 2026] [security2:error] [pid 3075943:tid 3075943] [client 94.154.43.185:38186] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hoo-hah.co.uk"] [uri "/.env"] [unique_id "ams1npTRjfVvuMHq7P4c1AAAABU"]
[Thu Jul 30 12:29:34.217361 2026] [security2:error] [pid 3075943:tid 3075943] [client 94.154.43.185:38186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hoo-hah.co.uk"] [uri "/.env"] [unique_id "ams1npTRjfVvuMHq7P4c1AAAABU"]
[Thu Jul 30 12:29:34.217592 2026] [security2:error] [pid 3075943:tid 3075943] [client 94.154.43.185:38186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hoo-hah.co.uk"] [uri "/.env"] [unique_id "ams1npTRjfVvuMHq7P4c1AAAABU"]
[Thu Jul 30 12:29:34.378555 2026] [security2:error] [pid 3074373:tid 3074373] [client 94.154.43.184:43964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hazardous-materials.co.uk"] [uri "/.env"] [unique_id "ams1njD2nVqlgEIbBdOPVgAAAAA"]
[Thu Jul 30 12:29:34.378757 2026] [security2:error] [pid 3074373:tid 3074373] [client 94.154.43.184:43964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hazardous-materials.co.uk"] [uri "/.env"] [unique_id "ams1njD2nVqlgEIbBdOPVgAAAAA"]
[Thu Jul 30 12:29:34.378963 2026] [security2:error] [pid 3074373:tid 3074373] [client 94.154.43.184:43964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hazardous-materials.co.uk"] [uri "/.env"] [unique_id "ams1njD2nVqlgEIbBdOPVgAAAAA"]
[Thu Jul 30 12:29:34.540959 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.43:44664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:34.541641 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.43:44664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:34.613277 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.20:43690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:34.613898 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.20:43690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:34.863440 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.29:44674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:34.864074 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.29:44674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:34.872991 2026] [security2:error] [pid 3067689:tid 3067689] [client 98.82.63.147:1866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "ams1nkNhHA6zbuwVXWdT0AAAAAY"]
[Thu Jul 30 12:29:34.978674 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.58:42210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:34.979303 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.58:42210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:35.366746 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.59:57146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:35.367367 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.59:57146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:35.412838 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.16:54926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:35.413462 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.16:54926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:35.737549 2026] [lsapi:warn] [pid 3067956:tid 3067956] [client 122.180.21.11:65306] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:29:35.878420 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.43:44702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:35.879046 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.43:44702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:36.289818 2026] [access_compat:error] [pid 3073083:tid 3073083] [client 125.176.202.122:51390] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:36.290561 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.27:41680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:36.291177 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.27:41680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:36.613488 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.4:39386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:36.614121 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.4:39386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:36.880163 2026] [ssl:error] [pid 3067689:tid 3067689] (EAI 2)Name or service not known: [client 144.76.19.72:51544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:36.880194 2026] [ssl:error] [pid 3067689:tid 3067689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:36.933986 2026] [ssl:error] [pid 3070569:tid 3070569] (EAI 2)Name or service not known: [client 144.76.19.72:51558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:36.934038 2026] [ssl:error] [pid 3070569:tid 3070569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:37.172543 2026] [ssl:error] [pid 3068195:tid 3068195] (70014)End of file found: [client 216.73.216.199:57702] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:37.198168 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.1:26684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:37.198834 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.1:26684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:37.231739 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.44:43722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:37.232352 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.44:43722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:37.316123 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.69:40350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:37.316747 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.69:40350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:37.676847 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.8:32828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:37.677471 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.8:32828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:38.032979 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.33:27440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:38.033623 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.33:27440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:38.078305 2026] [ssl:error] [pid 3073152:tid 3073152] (70014)End of file found: [client 216.73.216.199:36900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:38.395354 2026] [ssl:error] [pid 3068024:tid 3068024] (70014)End of file found: [client 216.73.216.199:60236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:38.706387 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.15:57108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:38.707008 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.15:57108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:38.951370 2026] [security2:error] [pid 3076204:tid 3076204] [client 52.6.5.24:5163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2024/09/6-Easedale-Tarn-150x150.jpg"] [unique_id "ams1ouNZahxoGbMZrgbNlgAAABs"]
[Thu Jul 30 12:29:38.972317 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.16:42678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:38.972937 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.16:42678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:39.444477 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.66:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:39.445112 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.66:34356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:39.924699 2026] [core:error] [pid 3068015:tid 3068015] [client 66.249.66.8:48091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:39.924730 2026] [core:error] [pid 3068015:tid 3068015] [client 66.249.66.8:48091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:39.991395 2026] [ssl:error] [pid 3076267:tid 3076267] (EAI 2)Name or service not known: [client 144.76.19.72:53222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:39.991428 2026] [ssl:error] [pid 3076267:tid 3076267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:40.044809 2026] [ssl:error] [pid 3075860:tid 3075860] (EAI 2)Name or service not known: [client 144.76.19.72:53232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:40.044845 2026] [ssl:error] [pid 3075860:tid 3075860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:40.112834 2026] [access_compat:error] [pid 3075979:tid 3075979] [client 157.20.138.62:49341] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:40.373074 2026] [authz_core:error] [pid 3072565:tid 3072565] [client 57.141.0.63:38818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:40.373757 2026] [authz_core:error] [pid 3072565:tid 3072565] [client 57.141.0.63:38818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:40.520375 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.48:60554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:40.521002 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.48:60554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:40.561236 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 45.158.164.139:41696] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:29:40.618243 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.27:55232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:40.618863 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.27:55232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:40.796250 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.9:41756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:40.796871 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.9:41756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:40.814776 2026] [core:error] [pid 3073082:tid 3073082] [client 66.249.66.169:43640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:40.814801 2026] [core:error] [pid 3073082:tid 3073082] [client 66.249.66.169:43640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:41.114553 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.65:38988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:41.115186 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.65:38988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:41.626563 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.65:39002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:41.627194 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.65:39002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:41.801239 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.55:42358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:41.801861 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.55:42358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:42.245799 2026] [core:error] [pid 3072617:tid 3072617] [client 57.141.0.39:36936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:42.245825 2026] [core:error] [pid 3072617:tid 3072617] [client 57.141.0.39:36936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:42.283394 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.27:55242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:42.284014 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.27:55242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:42.552047 2026] [security2:error] [pid 3076266:tid 3076266] [client 114.119.142.20:58205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~5-7-2016"] [unique_id "ams1pqdMx2-rBeOvcrb4hwAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~month/exact_date~1467327600/cat_ids~18,102,103,30/request_format~html
[Thu Jul 30 12:29:42.694422 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.70:55732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:42.695048 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.70:55732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:42.811982 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.44:63352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:42.812631 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.44:63352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:42.941461 2026] [security2:error] [pid 3068195:tid 3068195] [client 3.208.146.193:51463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "ams1pkNFkXXuht3774eOPAAAADI"]
[Thu Jul 30 12:29:43.022612 2026] [ssl:error] [pid 3068308:tid 3068308] (70014)End of file found: [client 216.73.216.199:46322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:43.103088 2026] [ssl:error] [pid 3068233:tid 3068233] (EAI 2)Name or service not known: [client 144.76.19.72:53236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:43.103124 2026] [ssl:error] [pid 3068233:tid 3068233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:43.160868 2026] [ssl:error] [pid 3067989:tid 3067989] (EAI 2)Name or service not known: [client 144.76.19.72:53238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:43.160901 2026] [ssl:error] [pid 3067989:tid 3067989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:43.171122 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.62:30360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:43.171755 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.62:30360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:43.792407 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.32:58328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:43.793029 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.32:58328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:43.885916 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.61:65428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:43.886548 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.61:65428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:43.924861 2026] [ssl:error] [pid 3071225:tid 3071225] (70014)End of file found: [client 216.73.216.199:57706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:44.014693 2026] [security2:error] [pid 3076266:tid 3076266] [client 114.119.142.20:58221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~5-7-2016"] [unique_id "ams1qKdMx2-rBeOvcrb4iAAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~month/exact_date~1467327600/cat_ids~18,102,103,30/request_format~html
[Thu Jul 30 12:29:44.129884 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.46:58558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:44.130517 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.46:58558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:44.170335 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.8:32842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:44.170954 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.8:32842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:44.427057 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.24:32522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:44.427688 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.24:32522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:44.522714 2026] [ssl:error] [pid 3073152:tid 3073152] (70014)End of file found: [client 216.73.216.199:45425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:44.554296 2026] [security2:error] [pid 3072617:tid 3072617] [client 43.164.197.117:43042] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams1qKZ4tVQ-yNgj4iZyfQAAAAc"], referer: http://banskotransfer.com
[Thu Jul 30 12:29:44.846571 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.36:48322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:44.847193 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.36:48322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:45.559527 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.1:25250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:45.560149 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.1:25250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:45.610163 2026] [security2:error] [pid 3068195:tid 3068195] [client 148.135.187.50:49829] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/svg+xml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "thatwall.com"] [uri "/"] [unique_id "ams1qUNFkXXuht3774eOPwAAADI"]
[Thu Jul 30 12:29:45.610881 2026] [security2:error] [pid 3068195:tid 3068195] [client 148.135.187.50:49829] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thatwall.com"] [uri "/"] [unique_id "ams1qUNFkXXuht3774eOPwAAADI"]
[Thu Jul 30 12:29:45.611109 2026] [security2:error] [pid 3068195:tid 3068195] [client 148.135.187.50:49829] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "thatwall.com"] [uri "/"] [unique_id "ams1qUNFkXXuht3774eOPwAAADI"]
[Thu Jul 30 12:29:45.839258 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.5:32202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:45.839887 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.5:32202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:46.103857 2026] [security2:error] [pid 3076266:tid 3076266] [client 43.164.197.117:45698] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams1qqdMx2-rBeOvcrb4iQAAAB0"], referer: http://www.banskoexpress.com
[Thu Jul 30 12:29:46.178629 2026] [lsapi:warn] [pid 3068025:tid 3068025] [client 122.180.21.11:49555] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:29:46.217529 2026] [ssl:error] [pid 3072616:tid 3072616] (EAI 2)Name or service not known: [client 144.76.19.72:53254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:46.217563 2026] [ssl:error] [pid 3072616:tid 3072616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:46.261183 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.62:30370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:46.261806 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.62:30370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:46.271385 2026] [ssl:error] [pid 3072617:tid 3072617] (EAI 2)Name or service not known: [client 144.76.19.72:53256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:46.271408 2026] [ssl:error] [pid 3072617:tid 3072617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:46.625899 2026] [core:error] [pid 3073082:tid 3073082] (13)Permission denied: [client 216.73.216.199:19111] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/subsystem/ttyS3/flags
[Thu Jul 30 12:29:46.667822 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.68:48402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:46.668450 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.68:48402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:46.927968 2026] [core:error] [pid 3073082:tid 3073082] (13)Permission denied: [client 216.73.216.199:19111] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS3/flags
[Thu Jul 30 12:29:46.961780 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.19:58534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:46.962402 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.19:58534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:47.150913 2026] [security2:error] [pid 3068025:tid 3068025] [client 52.44.148.203:10332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "ams1q_zgNAYN3n36AW1YTAAAACw"]
[Thu Jul 30 12:29:47.326777 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.69:48406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:47.327397 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.69:48406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:47.594269 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.65:65274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:47.594891 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.65:65274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:47.757760 2026] [access_compat:error] [pid 3075943:tid 3075943] [client 125.176.202.122:51916] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:47.799089 2026] [security2:error] [pid 3074780:tid 3074780] [client 51.68.111.207:27019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/robots.txt"] [unique_id "ams1q2sOSxhJaXT8O9Jp6QAAAAg"]
[Thu Jul 30 12:29:47.830746 2026] [ssl:error] [pid 3073082:tid 3073082] (70014)End of file found: [client 216.73.216.199:19111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:48.106780 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.45:44002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:48.107411 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.45:44002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:48.625668 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.54:56428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:48.626293 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.54:56428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:48.668565 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.40:32114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:48.669186 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.40:32114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:49.292082 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.50:20978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:49.292712 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.50:20978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:49.340052 2026] [ssl:error] [pid 3070569:tid 3070569] (70014)End of file found: [client 216.73.216.199:11222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:49.362918 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:53260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:49.362948 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:49.422199 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.44:63376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:49.422831 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.44:63376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:49.423450 2026] [ssl:error] [pid 3068025:tid 3068025] (EAI 2)Name or service not known: [client 144.76.19.72:53266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:49.423469 2026] [ssl:error] [pid 3068025:tid 3068025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:49.431875 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.52:43514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:49.432483 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.52:43514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:49.596555 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.34:44752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:49.597183 2026] [authz_core:error] [pid 3068308:tid 3068308] [client 57.141.0.34:44752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:49.636428 2026] [core:error] [pid 3074373:tid 3074373] (13)Permission denied: [client 216.73.216.199:1407] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/align
[Thu Jul 30 12:29:49.655984 2026] [core:error] [pid 3073213:tid 3073213] [client 57.141.0.39:32260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:49.656001 2026] [core:error] [pid 3073213:tid 3073213] [client 57.141.0.39:32260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:50.238385 2026] [ssl:error] [pid 3074373:tid 3074373] (70014)End of file found: [client 216.73.216.199:1407] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:50.649960 2026] [access_compat:error] [pid 3067775:tid 3067775] [client 157.20.138.62:49678] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:50.889450 2026] [cgi:error] [pid 3076204:tid 3076204] [client 20.113.225.120:65042] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 12:29:50.889568 2026] [cgi:error] [pid 3076204:tid 3076204] [client 20.113.225.120:65042] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 12:29:51.012829 2026] [core:error] [pid 3075860:tid 3075860] [client 57.141.0.30:34510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:51.012861 2026] [core:error] [pid 3075860:tid 3075860] [client 57.141.0.30:34510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:29:51.094875 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.52:35840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:51.095522 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.52:35840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:51.130077 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.52:35842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:51.130697 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.52:35842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:51.278626 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.59:42430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:51.279242 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.59:42430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:51.487284 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.15:28552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:51.487900 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.15:28552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:52.002117 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.8:33186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:52.002768 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.8:33186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:52.478518 2026] [ssl:error] [pid 3071225:tid 3071225] (EAI 2)Name or service not known: [client 144.76.19.72:51260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:52.478550 2026] [ssl:error] [pid 3071225:tid 3071225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:52.531570 2026] [ssl:error] [pid 3075860:tid 3075860] (EAI 2)Name or service not known: [client 144.76.19.72:51266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:52.531596 2026] [ssl:error] [pid 3075860:tid 3075860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:52.923215 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.44:49280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:52.923842 2026] [authz_core:error] [pid 3069204:tid 3069204] [client 57.141.0.44:49280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:53.140129 2026] [ssl:error] [pid 3068308:tid 3068308] (70014)End of file found: [client 216.73.216.199:43215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:53.155794 2026] [security2:error] [pid 3069203:tid 3069203] [client 44.209.35.147:11166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/26116"] [unique_id "ams1sX5bIaeapdUBrpvl6wAAACU"]
[Thu Jul 30 12:29:53.571605 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.11:27930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:53.572642 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.11:27930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:53.705021 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.17:38148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:53.705661 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.17:38148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:53.714865 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.69:63700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:53.715506 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.69:63700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:53.924012 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.67:27298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:53.924652 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.67:27298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:54.054797 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.71:28330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:54.055424 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.71:28330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:54.300822 2026] [access_compat:error] [pid 3073210:tid 3073210] [client 125.176.202.122:52183] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:29:54.890226 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.8:26152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:54.890846 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.8:26152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:55.095079 2026] [security2:error] [pid 3067989:tid 3067989] [client 18.214.251.19:1237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/39470"] [unique_id "ams1s-VKjpjv7lr4k5YxlAAAABo"]
[Thu Jul 30 12:29:55.587910 2026] [ssl:error] [pid 3075860:tid 3075860] (EAI 2)Name or service not known: [client 144.76.19.72:51286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:55.587946 2026] [ssl:error] [pid 3075860:tid 3075860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:55.596040 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.48:22656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:55.596677 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.48:22656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:55.641059 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.51:54648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:55.641707 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.51:54648] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:55.642484 2026] [ssl:error] [pid 3073153:tid 3073153] (EAI 2)Name or service not known: [client 144.76.19.72:51298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:55.642525 2026] [ssl:error] [pid 3073153:tid 3073153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:56.071364 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.6:54178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:56.071991 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.6:54178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:56.355173 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.43:31694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:56.355808 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.43:31694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:56.444527 2026] [ssl:error] [pid 3068233:tid 3068233] (70014)End of file found: [client 216.73.216.199:45170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:56.883031 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.65:56886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:56.883675 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.65:56886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:56.994912 2026] [lsapi:warn] [pid 3076848:tid 3076848] [client 122.180.21.11:50202] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:29:57.463392 2026] [ssl:error] [pid 3073026:tid 3073026] (70014)End of file found: [client 216.73.216.199:13844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:57.600319 2026] [authz_core:error] [pid 3074780:tid 3074780] [client 57.141.0.56:22122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:57.600939 2026] [authz_core:error] [pid 3074780:tid 3074780] [client 57.141.0.56:22122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:57.744247 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.17:38158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:57.744934 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.17:38158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:57.865310 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.26:30608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:57.865930 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.26:30608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:58.271803 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.36:61944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:58.272488 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.36:61944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:58.487146 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.9:63240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:58.487837 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.9:63240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:58.696040 2026] [ssl:error] [pid 3076204:tid 3076204] (EAI 2)Name or service not known: [client 144.76.19.72:51312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:58.696093 2026] [ssl:error] [pid 3076204:tid 3076204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:58.790091 2026] [ssl:error] [pid 3071450:tid 3071450] (EAI 2)Name or service not known: [client 144.76.19.72:51328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:29:58.790128 2026] [ssl:error] [pid 3071450:tid 3071450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:29:58.978336 2026] [core:error] [pid 3077443:tid 3077443] (13)Permission denied: [client 216.73.216.199:46541] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS3/flags
[Thu Jul 30 12:29:59.273169 2026] [ssl:error] [pid 3077443:tid 3077443] (70014)End of file found: [client 216.73.216.199:46541] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:29:59.348917 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.3:56858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:59.349546 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.3:56858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:29:59.472091 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.29:27534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:29:59.472775 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.29:27534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:00.159032 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.31:50316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:00.159675 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.31:50316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:00.327296 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 125.176.202.122:52435] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:00.698378 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.21:33012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:00.698997 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.21:33012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:01.019090 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.69:29520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:01.019710 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.69:29520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:01.251124 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.53:64530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:01.251756 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.53:64530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:01.478406 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.69:29522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:01.479031 2026] [authz_core:error] [pid 3068024:tid 3068024] [client 57.141.0.69:29522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:01.853642 2026] [ssl:error] [pid 3075943:tid 3075943] (EAI 2)Name or service not known: [client 144.76.19.72:43886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:01.853681 2026] [ssl:error] [pid 3075943:tid 3075943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:01.911644 2026] [ssl:error] [pid 3073210:tid 3073210] (EAI 2)Name or service not known: [client 144.76.19.72:43898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:01.911667 2026] [ssl:error] [pid 3073210:tid 3073210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:01.978412 2026] [ssl:error] [pid 3069203:tid 3069203] (70014)End of file found: [client 216.73.216.199:6727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:02.007295 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.50:23064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:02.007948 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.50:23064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:02.407041 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.47:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:02.407684 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.47:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:02.472308 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.54:20458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:02.472935 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.54:20458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:02.770658 2026] [core:error] [pid 3073152:tid 3073152] (13)Permission denied: [client 216.73.216.199:18267] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/sections/__jump_table
[Thu Jul 30 12:30:02.881452 2026] [core:error] [pid 3073152:tid 3073152] (13)Permission denied: [client 216.73.216.199:18267] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/order
[Thu Jul 30 12:30:02.922382 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.1:55526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:02.923035 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.1:55526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:03.182754 2026] [ssl:error] [pid 3073152:tid 3073152] (70014)End of file found: [client 216.73.216.199:18267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:03.286919 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 169.58.39.193:50979] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:30:03.419773 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.58:50692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:03.420390 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.58:50692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:03.721594 2026] [security2:error] [pid 3074373:tid 3074373] [client 78.136.67.42:60322] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1uzD2nVqlgEIbBdOPYwAAAAA"]
[Thu Jul 30 12:30:03.721649 2026] [security2:error] [pid 3074373:tid 3074373] [client 78.136.67.42:60322] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1uzD2nVqlgEIbBdOPYwAAAAA"]
[Thu Jul 30 12:30:03.721898 2026] [security2:error] [pid 3074373:tid 3074373] [client 78.136.67.42:60322] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1uzD2nVqlgEIbBdOPYwAAAAA"]
[Thu Jul 30 12:30:03.809113 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.64:22634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:03.809752 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.64:22634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:03.961190 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 20.63.98.115:30387] AH01630: client denied by server configuration: /home/cssystem/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 12:30:04.066587 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.71:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:04.067213 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.71:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:04.796739 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.26:56550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:04.797366 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.26:56550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:04.966041 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.45:47132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:04.966692 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.45:47132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:04.969770 2026] [ssl:error] [pid 3073210:tid 3073210] (EAI 2)Name or service not known: [client 144.76.19.72:43908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:04.969790 2026] [ssl:error] [pid 3073210:tid 3073210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:05.022872 2026] [ssl:error] [pid 3077443:tid 3077443] (EAI 2)Name or service not known: [client 144.76.19.72:43914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:05.022914 2026] [ssl:error] [pid 3077443:tid 3077443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:05.268167 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.50:23074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:05.269161 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.50:23074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:05.292718 2026] [ssl:error] [pid 3073082:tid 3073082] (70014)End of file found: [client 216.73.216.199:25714] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:05.639334 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.58:50706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:05.639953 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.58:50706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:06.069164 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.16:21014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:06.069797 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.16:21014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:06.205289 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.59:43072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:06.205905 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.59:43072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:06.362276 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.71:44418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:06.362897 2026] [authz_core:error] [pid 3068015:tid 3068015] [client 57.141.0.71:44418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:06.676792 2026] [security2:error] [pid 3076266:tid 3076266] [client 77.223.247.219:54656] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1vqdMx2-rBeOvcrb4kwAAAB0"]
[Thu Jul 30 12:30:06.676836 2026] [security2:error] [pid 3076266:tid 3076266] [client 77.223.247.219:54656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1vqdMx2-rBeOvcrb4kwAAAB0"]
[Thu Jul 30 12:30:06.677089 2026] [security2:error] [pid 3076266:tid 3076266] [client 77.223.247.219:54656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1vqdMx2-rBeOvcrb4kwAAAB0"]
[Thu Jul 30 12:30:06.787725 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.50:23076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:06.788346 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.50:23076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:07.047984 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 169.58.39.193:51747] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:30:07.105193 2026] [security2:error] [pid 3073026:tid 3073026] [client 156.59.198.135:29646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/files/terranigma/geiger/stderr.txt"] [unique_id "ams1v1l_B8jMJQbOr8IFdQAAAA8"]
[Thu Jul 30 12:30:07.324076 2026] [core:error] [pid 3072616:tid 3072616] [client 66.249.66.169:51836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:07.324102 2026] [core:error] [pid 3072616:tid 3072616] [client 66.249.66.169:51836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:07.353121 2026] [core:error] [pid 3076266:tid 3076266] [client 66.249.66.194:62827] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:07.353147 2026] [core:error] [pid 3076266:tid 3076266] [client 66.249.66.194:62827] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:07.552172 2026] [lsapi:warn] [pid 3068015:tid 3068015] [client 122.180.21.11:50824] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:30:07.891452 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.43:46762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:07.892084 2026] [authz_core:error] [pid 3076204:tid 3076204] [client 57.141.0.43:46762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:08.004653 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.63:48374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:08.005270 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.63:48374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:08.021360 2026] [ssl:error] [pid 3073210:tid 3073210] (70014)End of file found: [client 216.73.216.199:54375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:08.083477 2026] [ssl:error] [pid 3075258:tid 3075258] (EAI 2)Name or service not known: [client 144.76.19.72:43918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:08.083518 2026] [ssl:error] [pid 3075258:tid 3075258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:08.139708 2026] [ssl:error] [pid 3075979:tid 3075979] (EAI 2)Name or service not known: [client 144.76.19.72:43934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:08.139742 2026] [ssl:error] [pid 3075979:tid 3075979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:08.312370 2026] [access_compat:error] [pid 3073026:tid 3073026] [client 125.176.202.122:52727] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:08.535043 2026] [ssl:error] [pid 3075943:tid 3075943] (70014)End of file found: [client 216.73.216.199:43759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:08.795259 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.52:45158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:08.795898 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.52:45158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:08.800877 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.66:27718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:08.801492 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.66:27718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:09.006274 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.32:61210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:09.006897 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.32:61210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:09.144060 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.49:64860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:09.144693 2026] [authz_core:error] [pid 3075979:tid 3075979] [client 57.141.0.49:64860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:09.248794 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.39:38688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:09.249418 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.39:38688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:10.032990 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 66.249.66.33:43315] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:30:10.035673 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 66.249.66.33:43315] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:30:10.766338 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.15:40592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:10.766961 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.15:40592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:10.902568 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.3:44220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:10.903186 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.3:44220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:10.941007 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.35:65118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:10.941643 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.35:65118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:11.196436 2026] [ssl:error] [pid 3075979:tid 3075979] (EAI 2)Name or service not known: [client 144.76.19.72:29462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:11.196474 2026] [ssl:error] [pid 3075979:tid 3075979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:11.250017 2026] [ssl:error] [pid 3077443:tid 3077443] (EAI 2)Name or service not known: [client 144.76.19.72:29470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:11.250048 2026] [ssl:error] [pid 3077443:tid 3077443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:11.281740 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.17:59892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:11.282375 2026] [authz_core:error] [pid 3071450:tid 3071450] [client 57.141.0.17:59892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:11.357515 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.16:41610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:11.358139 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.16:41610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:11.394780 2026] [security2:error] [pid 3068015:tid 3068015] [client 183.88.7.191:55751] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1w3Wu4qo9OR6C8lUaFQAAACI"]
[Thu Jul 30 12:30:11.394827 2026] [security2:error] [pid 3068015:tid 3068015] [client 183.88.7.191:55751] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams1w3Wu4qo9OR6C8lUaFQAAACI"]
[Thu Jul 30 12:30:11.395061 2026] [security2:error] [pid 3068015:tid 3068015] [client 183.88.7.191:55751] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams1w3Wu4qo9OR6C8lUaFQAAACI"]
[Thu Jul 30 12:30:11.980657 2026] [security2:error] [pid 3076940:tid 3076940] [client 185.191.171.13:49900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6184.0/prev_next,prev.html"] [unique_id "ams1ww5BluTSY-XY-Ts0FAAAACE"]
[Thu Jul 30 12:30:12.098720 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.25:54466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:12.099344 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.25:54466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:12.222322 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.53:44958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:12.222971 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.53:44958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:12.239118 2026] [ssl:error] [pid 3076266:tid 3076266] (70014)End of file found: [client 216.73.216.199:1795] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:12.350185 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 169.58.39.193:52668] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:30:12.516435 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.69:59928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:12.517127 2026] [authz_core:error] [pid 3076848:tid 3076848] [client 57.141.0.69:59928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:12.969467 2026] [core:error] [pid 3077443:tid 3077443] [client 66.249.66.167:62393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:12.969486 2026] [core:error] [pid 3077443:tid 3077443] [client 66.249.66.167:62393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:13.168864 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.31:23834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:13.169509 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.31:23834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:13.309321 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:13.315324 2026] [access_compat:error] [pid 3076940:tid 3076940] [client 125.176.202.122:53119] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:13.336933 2026] [ssl:error] [pid 3076267:tid 3076267] (70014)End of file found: [client 216.73.216.199:20496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:13.543201 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.21:53592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:13.543829 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.21:53592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:13.629516 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.28:59730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:13.630152 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.28:59730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:13.838551 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 12:30:13.838604 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.049347 2026] [core:error] [pid 3068195:tid 3068195] (13)Permission denied: [client 216.73.216.199:33318] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS2/close_delay
[Thu Jul 30 12:30:14.120352 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.7:41642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:14.120987 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.7:41642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:14.192201 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wawe.php
[Thu Jul 30 12:30:14.192252 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.225490 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa123.php
[Thu Jul 30 12:30:14.225546 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.254572 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/kn.php
[Thu Jul 30 12:30:14.254621 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.290873 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/class-wp.php
[Thu Jul 30 12:30:14.290917 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.306189 2026] [ssl:error] [pid 3073082:tid 3073082] (EAI 2)Name or service not known: [client 144.76.19.72:29472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:14.306214 2026] [ssl:error] [pid 3073082:tid 3073082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:14.310113 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.63:48376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:14.310732 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.63:48376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:14.337538 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/shelp.php
[Thu Jul 30 12:30:14.337582 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.360514 2026] [ssl:error] [pid 3077443:tid 3077443] (EAI 2)Name or service not known: [client 144.76.19.72:29474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:14.360539 2026] [ssl:error] [pid 3077443:tid 3077443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:14.366572 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/phpi.php
[Thu Jul 30 12:30:14.366613 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.462700 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.22:45032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:14.463382 2026] [authz_core:error] [pid 3073153:tid 3073153] [client 57.141.0.22:45032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:14.471270 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/birlingsless.php
[Thu Jul 30 12:30:14.471315 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.648392 2026] [ssl:error] [pid 3068195:tid 3068195] (70014)End of file found: [client 216.73.216.199:33318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:14.933613 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/shell20211028.php
[Thu Jul 30 12:30:14.933657 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:14.966400 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/x402.ph
[Thu Jul 30 12:30:15.003017 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-slss.php
[Thu Jul 30 12:30:15.003059 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.017443 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.65:20506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:15.018052 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.65:20506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:15.030831 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/mifta.ph
[Thu Jul 30 12:30:15.058527 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/amxloxxr.php
[Thu Jul 30 12:30:15.058564 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.088425 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/infophp.php
[Thu Jul 30 12:30:15.088463 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.123015 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/xxl.php
[Thu Jul 30 12:30:15.123060 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.150917 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/png.php
[Thu Jul 30 12:30:15.150959 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.339337 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.26:39596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:15.339970 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.26:39596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:15.418887 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.50:27630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:15.419587 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.50:27630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:15.440949 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlss.php
[Thu Jul 30 12:30:15.440990 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.469122 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wuasr.php
[Thu Jul 30 12:30:15.469163 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.499168 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/kbfr.php
[Thu Jul 30 12:30:15.499209 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.527422 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko-new.php
[Thu Jul 30 12:30:15.527464 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.560433 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/god4m.php
[Thu Jul 30 12:30:15.560479 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.605260 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/ok.php
[Thu Jul 30 12:30:15.605307 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.635106 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/usr.php
[Thu Jul 30 12:30:15.635154 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.663429 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/ncx.php
[Thu Jul 30 12:30:15.663473 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.691189 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/jo.php
[Thu Jul 30 12:30:15.691230 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.719337 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/ixpsdyrw.php
[Thu Jul 30 12:30:15.719380 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.747147 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/er.php
[Thu Jul 30 12:30:15.747200 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.775439 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/oxshell.php
[Thu Jul 30 12:30:15.775482 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.804939 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/in.php
[Thu Jul 30 12:30:15.804982 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.834702 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/nw.php
[Thu Jul 30 12:30:15.834746 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.882920 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 12:30:15.882968 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.910740 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/pxx.php
[Thu Jul 30 12:30:15.910854 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:15.984591 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.13:28460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:15.985211 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.13:28460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:16.159608 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.71:59094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:16.160235 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.71:59094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:16.216027 2026] [ssl:error] [pid 3074373:tid 3074373] (70014)End of file found: [client 216.73.216.199:44495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:16.266492 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/f8moue.php
[Thu Jul 30 12:30:16.266546 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.311744 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/011i.php
[Thu Jul 30 12:30:16.311790 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.339929 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.1:24066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:16.340572 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.1:24066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:16.422927 2026] [security2:error] [pid 3075978:tid 3075978] [client 185.191.171.7:28732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/fyzika-7-rocnik-odpovede"] [unique_id "ams1yDbE97VlTlQYp8NtXAAAABc"]
[Thu Jul 30 12:30:16.549910 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/b00869ae6e.php
[Thu Jul 30 12:30:16.549957 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.577903 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/13134.php
[Thu Jul 30 12:30:16.577943 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.605946 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/xminie.php
[Thu Jul 30 12:30:16.605988 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.651629 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 12:30:16.651679 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.877485 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/mgrr.php
[Thu Jul 30 12:30:16.877541 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.930050 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/domvf.php
[Thu Jul 30 12:30:16.930108 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.958038 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/yup.php
[Thu Jul 30 12:30:16.958100 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:16.985797 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/X.php
[Thu Jul 30 12:30:16.985845 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:17.013977 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/1polka.php
[Thu Jul 30 12:30:17.014046 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:17.042677 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/gec.php
[Thu Jul 30 12:30:17.042722 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:17.120001 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.41:59060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:17.120643 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.41:59060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:17.420913 2026] [ssl:error] [pid 3069203:tid 3069203] (70014)End of file found: [client 216.73.216.199:1361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:17.452749 2026] [ssl:error] [pid 3073153:tid 3073153] (EAI 2)Name or service not known: [client 144.76.19.72:29490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:17.452787 2026] [ssl:error] [pid 3073153:tid 3073153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:17.505741 2026] [core:error] [pid 3075943:tid 3075943] [client 57.141.0.28:59746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:17.505770 2026] [core:error] [pid 3075943:tid 3075943] [client 57.141.0.28:59746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:17.506900 2026] [ssl:error] [pid 3077443:tid 3077443] (EAI 2)Name or service not known: [client 144.76.19.72:29504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:17.506923 2026] [ssl:error] [pid 3077443:tid 3077443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:17.529442 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/sky.php
[Thu Jul 30 12:30:17.529517 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:17.648610 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.70:34464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:17.649231 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.70:34464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:17.718185 2026] [ssl:error] [pid 3078511:tid 3078511] (70014)End of file found: [client 216.73.216.199:24089] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:18.080514 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/fffm.php
[Thu Jul 30 12:30:18.080578 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:18.109003 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/sixxis.php
[Thu Jul 30 12:30:18.109059 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:18.154110 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/yj09.php
[Thu Jul 30 12:30:18.154168 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:18.156406 2026] [lsapi:warn] [pid 3073153:tid 3073153] [client 122.180.21.11:51460] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:30:18.255722 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.6:29982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:18.256348 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.6:29982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:18.367535 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.36:25370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:18.368566 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.36:25370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:18.505088 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 12:30:18.505138 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:18.798682 2026] [core:error] [pid 3073213:tid 3073213] [client 66.249.66.194:63781] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:18.798708 2026] [core:error] [pid 3073213:tid 3073213] [client 66.249.66.194:63781] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:18.951117 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.14:22768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:18.951743 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.14:22768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:19.035811 2026] [security2:error] [pid 3076267:tid 3076267] [client 114.119.144.31:20487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~31-8-2019"] [unique_id "ams1y6UHMOutMATPW21TdgAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~31-8-2019
[Thu Jul 30 12:30:19.056570 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/k2.php
[Thu Jul 30 12:30:19.056617 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.106586 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.51:43558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:19.107218 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.51:43558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:19.115879 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 12:30:19.115919 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.170864 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 12:30:19.170910 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.200280 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/w2025.php
[Thu Jul 30 12:30:19.200321 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.240868 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/FWAZ.php
[Thu Jul 30 12:30:19.240905 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.285909 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/qterm.php
[Thu Jul 30 12:30:19.285951 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.314089 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/blurbs.php
[Thu Jul 30 12:30:19.314127 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.540533 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.40:53012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:19.541292 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.40:53012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:19.624255 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.42:55216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:19.624873 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.42:55216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:19.643456 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-ws68.php
[Thu Jul 30 12:30:19.643515 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:19.805417 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.54:56446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:19.806037 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.54:56446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:20.166022 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/xyn.php
[Thu Jul 30 12:30:20.166083 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.193876 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/ccc.php
[Thu Jul 30 12:30:20.193919 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.222080 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/get.php
[Thu Jul 30 12:30:20.222126 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.250021 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 12:30:20.250083 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.260074 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.45:65516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:20.260702 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.45:65516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:20.313042 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/alls.php
[Thu Jul 30 12:30:20.313125 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.323193 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.50:27646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:20.323812 2026] [authz_core:error] [pid 3068025:tid 3068025] [client 57.141.0.50:27646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:20.355366 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/coffexium.php
[Thu Jul 30 12:30:20.355405 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.426316 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/red.php
[Thu Jul 30 12:30:20.426359 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.454398 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:20.482433 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:20.510235 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:20.524838 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 169.58.39.193:53514] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:30:20.566371 2026] [ssl:error] [pid 3076940:tid 3076940] (EAI 2)Name or service not known: [client 144.76.19.72:25640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:20.566425 2026] [ssl:error] [pid 3076940:tid 3076940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:20.572270 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:20.615915 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:20.621763 2026] [ssl:error] [pid 3071225:tid 3071225] (EAI 2)Name or service not known: [client 144.76.19.72:25654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:20.621782 2026] [ssl:error] [pid 3071225:tid 3071225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:20.679525 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 12:30:20.679571 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.708259 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/177.php
[Thu Jul 30 12:30:20.708301 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.743585 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/199.php
[Thu Jul 30 12:30:20.743628 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.782383 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/file52.php
[Thu Jul 30 12:30:20.782429 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.810857 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/geck.php
[Thu Jul 30 12:30:20.810902 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.838873 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/biufile.php
[Thu Jul 30 12:30:20.838916 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.866806 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/dejavu.php
[Thu Jul 30 12:30:20.866851 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:20.908535 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/aaf.php
[Thu Jul 30 12:30:20.908580 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.151803 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.59:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:21.152442 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.59:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:21.255357 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.47:51532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:21.256014 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.47:51532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:21.362718 2026] [security2:error] [pid 3069205:tid 3069205] [client 114.119.144.31:22697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~31-8-2019"] [unique_id "ams1zfANIc1DDWTZQu24hQAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~31-8-2019
[Thu Jul 30 12:30:21.367826 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.63:49724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:21.368455 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.63:49724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:21.406569 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/ha.php
[Thu Jul 30 12:30:21.406628 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.460004 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/hur.php
[Thu Jul 30 12:30:21.460054 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.480673 2026] [access_compat:error] [pid 3076266:tid 3076266] [client 125.176.202.122:53446] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:21.488322 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/h02ugyh.php
[Thu Jul 30 12:30:21.488369 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.519660 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 12:30:21.519709 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.543089 2026] [ssl:error] [pid 3068025:tid 3068025] (70014)End of file found: [client 216.73.216.199:14822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:21.548473 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 12:30:21.548536 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.580953 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/ingfo.php
[Thu Jul 30 12:30:21.581002 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.630422 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/error_log.php
[Thu Jul 30 12:30:21.630476 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.664960 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/koala.php
[Thu Jul 30 12:30:21.665010 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.690430 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.66:21076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:21.691480 2026] [authz_core:error] [pid 3078609:tid 3078609] [client 57.141.0.66:21076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:21.735045 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 12:30:21.735114 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.763213 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wefile.php
[Thu Jul 30 12:30:21.763265 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.791246 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:21.819482 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:21.847547 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/makeasmtp.php
[Thu Jul 30 12:30:21.847599 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.875572 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/2P.php
[Thu Jul 30 12:30:21.875632 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:21.903656 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/about.php
[Thu Jul 30 12:30:21.903724 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:22.000285 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 20.193.250.173:50473] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:30:22.497048 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:22.524987 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 12:30:22.525034 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:22.560389 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.34:57550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:22.561023 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.34:57550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:22.563511 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:22.591676 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:22.619523 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/crgio.php
[Thu Jul 30 12:30:22.619578 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:22.647482 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/pucci.php
[Thu Jul 30 12:30:22.647551 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:22.675461 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:22.816746 2026] [core:error] [pid 3077669:tid 3077669] (13)Permission denied: [client 216.73.216.199:8796] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/object_size
[Thu Jul 30 12:30:22.911993 2026] [access_compat:error] [pid 3076848:tid 3076848] [client 20.100.187.180:56428] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:23.129998 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.43:30310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:23.130663 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.43:30310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:23.670434 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.15:56970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:23.671093 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.15:56970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:23.676445 2026] [ssl:error] [pid 3067689:tid 3067689] (EAI 2)Name or service not known: [client 144.76.19.72:25660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:23.676478 2026] [ssl:error] [pid 3067689:tid 3067689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:23.763279 2026] [ssl:error] [pid 3069203:tid 3069203] (EAI 2)Name or service not known: [client 144.76.19.72:25676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:23.763314 2026] [ssl:error] [pid 3069203:tid 3069203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:23.901125 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.11:28904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:23.901799 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.11:28904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:23.961515 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.37:55226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:23.962230 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.37:55226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:24.082127 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.8:56488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:24.082812 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.8:56488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:24.822959 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.13:52508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:24.823695 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.13:52508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:25.013570 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-temp.php
[Thu Jul 30 12:30:25.013626 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.047294 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.16:37870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:25.047915 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.16:37870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:25.237137 2026] [ssl:error] [pid 3077669:tid 3077669] (70014)End of file found: [client 216.73.216.199:8796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:25.348964 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:25.443913 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.5:28090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:25.444628 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.5:28090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:25.488926 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/puc.php
[Thu Jul 30 12:30:25.488974 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.516686 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/dx.php
[Thu Jul 30 12:30:25.516732 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.544733 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:25.558467 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.45:20008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:25.559108 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.45:20008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:25.573282 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 12:30:25.573327 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.601260 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 12:30:25.601311 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.812915 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 12:30:25.812967 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.841158 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 12:30:25.841236 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.869307 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 12:30:25.869357 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.897315 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 12:30:25.897399 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.925305 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:25.953630 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 12:30:25.953694 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:25.981549 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 12:30:25.981610 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.011685 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 12:30:26.011763 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.020215 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.58:45002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:26.020832 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.58:45002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:26.039603 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:26.071683 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.51:49128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:26.072376 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.51:49128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:26.285179 2026] [access_compat:error] [pid 3078561:tid 3078561] [client 125.176.202.122:53730] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:26.313415 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 12:30:26.313457 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.342344 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:26.370734 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:26.415819 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 12:30:26.415869 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.446559 2026] [ssl:error] [pid 3074373:tid 3074373] (70014)End of file found: [client 216.73.216.199:18566] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:26.463554 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 12:30:26.463599 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.491634 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-edit.php
[Thu Jul 30 12:30:26.491679 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.539012 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 12:30:26.539086 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.582873 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/index.php
[Thu Jul 30 12:30:26.582926 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.610974 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:26.669405 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/BDKR28WP.php
[Thu Jul 30 12:30:26.669458 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:26.711130 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.4:34290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:26.712375 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.4:34290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:26.727806 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:26.819483 2026] [ssl:error] [pid 3072616:tid 3072616] (EAI 2)Name or service not known: [client 144.76.19.72:25690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:26.819521 2026] [ssl:error] [pid 3072616:tid 3072616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:26.877361 2026] [ssl:error] [pid 3069203:tid 3069203] (EAI 2)Name or service not known: [client 144.76.19.72:25692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:26.877399 2026] [ssl:error] [pid 3069203:tid 3069203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:26.944291 2026] [ssl:error] [pid 3067989:tid 3067989] (70014)End of file found: [client 216.73.216.199:12160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:27.007431 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:27.036411 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 12:30:27.036454 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.065491 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 12:30:27.065543 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.088956 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.47:53064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:27.089589 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.47:53064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:27.147595 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.40:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:27.148272 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.40:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:27.244025 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/a1.php
[Thu Jul 30 12:30:27.244104 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.272188 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:27.300533 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/admin.php
[Thu Jul 30 12:30:27.300594 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.328497 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:30:27.356384 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 12:30:27.356425 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.384733 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 12:30:27.384791 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.415151 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/hypo.php
[Thu Jul 30 12:30:27.415208 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.443225 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:27.471186 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 12:30:27.471236 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.511114 2026] [security2:error] [pid 3068233:tid 3068233] [client 20.203.200.218:20380] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns2.ns-narvi.com"] [uri "/wp-config.php"] [unique_id "ams106LveGzswds2FqfQ2wAAADc"]
[Thu Jul 30 12:30:27.511239 2026] [security2:error] [pid 3068233:tid 3068233] [client 20.203.200.218:20380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-narvi.com"] [uri "/wp-config.php"] [unique_id "ams106LveGzswds2FqfQ2wAAADc"]
[Thu Jul 30 12:30:27.511732 2026] [security2:error] [pid 3068233:tid 3068233] [client 20.203.200.218:20380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns2.ns-narvi.com"] [uri "/403.shtml"] [unique_id "ams106LveGzswds2FqfQ2wAAADc"]
[Thu Jul 30 12:30:27.544648 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:27.566843 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.64:22908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:27.567624 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.64:22908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:27.572596 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/als.php
[Thu Jul 30 12:30:27.572634 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.615182 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/pol.php
[Thu Jul 30 12:30:27.615226 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.651802 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 12:30:27.651845 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.688229 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 12:30:27.688289 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.689898 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.16:61312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:27.690555 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.16:61312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:27.718588 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 12:30:27.718643 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.746552 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/aa2.php
[Thu Jul 30 12:30:27.746592 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.776455 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/ccou.php
[Thu Jul 30 12:30:27.776511 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.804712 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/dr.php
[Thu Jul 30 12:30:27.804754 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.839921 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/xamp.php
[Thu Jul 30 12:30:27.839963 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:27.876789 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.41:34352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:27.877420 2026] [authz_core:error] [pid 3073213:tid 3073213] [client 57.141.0.41:34352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:28.120010 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/bless.php
[Thu Jul 30 12:30:28.120059 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.125369 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.23:50500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:28.125998 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.23:50500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:28.148256 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/file25.php
[Thu Jul 30 12:30:28.148301 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.205169 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/file6.php
[Thu Jul 30 12:30:28.205215 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.236582 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/a2.php
[Thu Jul 30 12:30:28.236630 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.273961 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/file15.php
[Thu Jul 30 12:30:28.274025 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.302248 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 12:30:28.302311 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.342513 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 12:30:28.342567 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.381466 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/xwpg.php
[Thu Jul 30 12:30:28.381524 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.410013 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:30:28.438176 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:28.466148 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/xstelth.php
[Thu Jul 30 12:30:28.466193 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:28.493985 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:30:28.869264 2026] [lsapi:warn] [pid 3075860:tid 3075860] [client 122.180.21.11:52111] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:30:29.019883 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 12:30:29.019930 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.047890 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko.php
[Thu Jul 30 12:30:29.047937 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.076005 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/pbck.php
[Thu Jul 30 12:30:29.076047 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.103985 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/xiugai.php
[Thu Jul 30 12:30:29.104024 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.132306 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/e.php
[Thu Jul 30 12:30:29.132352 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.159157 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.64:22918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:29.159782 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.64:22918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:29.160172 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/adminner.php
[Thu Jul 30 12:30:29.160214 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.189340 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/file1221.php
[Thu Jul 30 12:30:29.189383 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.246537 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/inx.php
[Thu Jul 30 12:30:29.246580 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.285335 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/qqqa.php
[Thu Jul 30 12:30:29.285388 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.501572 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.52:26196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:29.502197 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.52:26196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:29.507032 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.44:51358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:29.507663 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.44:51358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:29.599206 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.45:35894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:29.599836 2026] [authz_core:error] [pid 3076267:tid 3076267] [client 57.141.0.45:35894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:29.616524 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-firewall.php
[Thu Jul 30 12:30:29.616581 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.644847 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/reviall.php
[Thu Jul 30 12:30:29.644891 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.693267 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 12:30:29.693308 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.732206 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/bolt.php
[Thu Jul 30 12:30:29.732251 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:29.790338 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.28:40720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:29.790969 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.28:40720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:29.935634 2026] [ssl:error] [pid 3068025:tid 3068025] (EAI 2)Name or service not known: [client 144.76.19.72:52886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:29.935674 2026] [ssl:error] [pid 3068025:tid 3068025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:29.993655 2026] [ssl:error] [pid 3075258:tid 3075258] (EAI 2)Name or service not known: [client 144.76.19.72:52900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:29.993684 2026] [ssl:error] [pid 3075258:tid 3075258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:30.100056 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/File.php
[Thu Jul 30 12:30:30.100116 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.145701 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/fi22.php
[Thu Jul 30 12:30:30.145743 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.173710 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/zero.php
[Thu Jul 30 12:30:30.173750 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.201705 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/1xmomo.php
[Thu Jul 30 12:30:30.201749 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.213137 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.13:52522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:30.213772 2026] [authz_core:error] [pid 3076266:tid 3076266] [client 57.141.0.13:52522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:30.229629 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/fmws.php
[Thu Jul 30 12:30:30.229669 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.257634 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/3PJcpMFsD8B.php
[Thu Jul 30 12:30:30.257675 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.285534 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/hp2.php
[Thu Jul 30 12:30:30.285575 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.443048 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/aabb.php
[Thu Jul 30 12:30:30.443102 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.748470 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/1254xx.php
[Thu Jul 30 12:30:30.748522 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.776432 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/a3ampzmbipnkpxeqhqpsanCdefault.php
[Thu Jul 30 12:30:30.776477 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.814374 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/ffs.php
[Thu Jul 30 12:30:30.814421 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.842269 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/1PJcpMFsD8B.php
[Thu Jul 30 12:30:30.842309 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.896865 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/4PJcpMFsD8B.php
[Thu Jul 30 12:30:30.896912 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:30.924676 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/i99z7zzbwtpteujvv6s8hiCdefault.php
[Thu Jul 30 12:30:30.924734 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.037400 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.65:23268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:31.038021 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.65:23268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:31.156406 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/gwaih1gfzp5vuwr04Cdefault.php
[Thu Jul 30 12:30:31.156454 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.229010 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.15:49562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:31.229704 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.15:49562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:31.270134 2026] [ssl:error] [pid 3076940:tid 3076940] (70014)End of file found: [client 216.73.216.199:6876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:31.357652 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/dyui.php
[Thu Jul 30 12:30:31.357694 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.675840 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/ho.php
[Thu Jul 30 12:30:31.675892 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.710399 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/zildan.php
[Thu Jul 30 12:30:31.710440 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.738307 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/66b867516c8f01.php
[Thu Jul 30 12:30:31.738352 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.779630 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/ext.php
[Thu Jul 30 12:30:31.779672 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.807495 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/1wvekeybd9it2di2vyipgr6Cdefault.php
[Thu Jul 30 12:30:31.807549 2026] [access_compat:error] [pid 3071225:tid 3071225] [client 20.100.187.180:54595] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:30:31.868199 2026] [ssl:error] [pid 3074373:tid 3074373] (70014)End of file found: [client 216.73.216.199:33034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:32.188588 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.51:49130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:32.189207 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.51:49130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:32.444518 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.46:28656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:32.445171 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.46:28656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:32.533710 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.11:46314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:32.534346 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.11:46314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:32.943083 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.35:28150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:32.943704 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.35:28150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:33.050688 2026] [ssl:error] [pid 3079143:tid 3079143] (EAI 2)Name or service not known: [client 144.76.19.72:52916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:33.050746 2026] [ssl:error] [pid 3079143:tid 3079143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:33.076204 2026] [ssl:error] [pid 3073215:tid 3073215] (70014)End of file found: [client 216.73.216.199:45469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:33.094636 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 20.193.250.173:58586] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:30:33.106238 2026] [ssl:error] [pid 3079144:tid 3079144] (EAI 2)Name or service not known: [client 144.76.19.72:52918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:33.106279 2026] [ssl:error] [pid 3079144:tid 3079144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:33.132389 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.70:58368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:33.133093 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.70:58368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:33.245900 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.65:55706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:33.246548 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.65:55706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:33.832013 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.48:39376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:33.832652 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.48:39376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:34.095178 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.28:34656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:34.095816 2026] [authz_core:error] [pid 3068233:tid 3068233] [client 57.141.0.28:34656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:34.424286 2026] [core:error] [pid 3076267:tid 3076267] [client 45.13.186.114:50695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:34.424327 2026] [core:error] [pid 3076267:tid 3076267] [client 45.13.186.114:50695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:34.596641 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.28:34664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:34.597274 2026] [authz_core:error] [pid 3077916:tid 3077916] [client 57.141.0.28:34664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:34.797472 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.11:46316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:34.798152 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.11:46316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:35.114920 2026] [authz_core:error] [pid 3079195:tid 3079195] [client 57.141.0.3:54038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:35.115654 2026] [authz_core:error] [pid 3079195:tid 3079195] [client 57.141.0.3:54038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:35.187923 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.68:55986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:35.188570 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.68:55986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:35.703474 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 45.13.186.114:51366] AH01630: client denied by server configuration: /home/clss/public_html/error_log, referer: http://www.google.com.hk
[Thu Jul 30 12:30:35.815401 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.11:46328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:35.816024 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.11:46328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:35.858434 2026] [security2:error] [pid 3067775:tid 3067775] [client 20.203.200.218:54018] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns2.ns-narvi.com"] [uri "/var/log/error.log"] [unique_id "ams123SNFImGjNOWzzWqHwAAAAo"]
[Thu Jul 30 12:30:35.858629 2026] [security2:error] [pid 3067775:tid 3067775] [client 20.203.200.218:54018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-narvi.com"] [uri "/var/log/error.log"] [unique_id "ams123SNFImGjNOWzzWqHwAAAAo"]
[Thu Jul 30 12:30:35.859154 2026] [security2:error] [pid 3067775:tid 3067775] [client 20.203.200.218:54018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns2.ns-narvi.com"] [uri "/403.shtml"] [unique_id "ams123SNFImGjNOWzzWqHwAAAAo"]
[Thu Jul 30 12:30:35.943486 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 125.193.148.224:63138] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://search.yahoo.co.jp/
[Thu Jul 30 12:30:35.946239 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 125.193.148.224:63138] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://search.yahoo.co.jp/
[Thu Jul 30 12:30:36.158770 2026] [ssl:error] [pid 3079143:tid 3079143] (EAI 2)Name or service not known: [client 144.76.19.72:52934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:36.158810 2026] [ssl:error] [pid 3079143:tid 3079143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:36.212100 2026] [ssl:error] [pid 3079194:tid 3079194] (EAI 2)Name or service not known: [client 144.76.19.72:52950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:36.212133 2026] [ssl:error] [pid 3079194:tid 3079194] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:36.562182 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.17:53370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:36.562813 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.17:53370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:36.691132 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.21:48848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:36.691790 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.21:48848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:36.758209 2026] [core:error] [pid 3076940:tid 3076940] [client 45.13.186.114:51842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:36.758233 2026] [core:error] [pid 3076940:tid 3076940] [client 45.13.186.114:51842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:36.991344 2026] [ssl:error] [pid 3079194:tid 3079194] (70014)End of file found: [client 216.73.216.199:1037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:37.108170 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.4:65036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:37.108869 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.4:65036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:37.297402 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.55:50442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:37.298113 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.55:50442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:37.305723 2026] [core:error] [pid 3076940:tid 3076940] [client 45.13.186.114:51981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:37.305764 2026] [core:error] [pid 3076940:tid 3076940] [client 45.13.186.114:51981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:37.765568 2026] [authz_core:error] [pid 3079366:tid 3079366] [client 57.141.0.25:34576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:37.766643 2026] [authz_core:error] [pid 3079366:tid 3079366] [client 57.141.0.25:34576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:38.020539 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.48:39390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:38.021212 2026] [authz_core:error] [pid 3076940:tid 3076940] [client 57.141.0.48:39390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:38.160563 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.14:58828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:38.161311 2026] [authz_core:error] [pid 3073026:tid 3073026] [client 57.141.0.14:58828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:38.328911 2026] [authz_core:error] [pid 3079366:tid 3079366] [client 57.141.0.29:64408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:38.329549 2026] [authz_core:error] [pid 3079366:tid 3079366] [client 57.141.0.29:64408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:38.403157 2026] [core:error] [pid 3076266:tid 3076266] [client 45.13.186.114:52087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:38.403194 2026] [core:error] [pid 3076266:tid 3076266] [client 45.13.186.114:52087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:38.571657 2026] [core:error] [pid 3079329:tid 3079329] [client 45.13.186.114:52256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:38.571686 2026] [core:error] [pid 3079329:tid 3079329] [client 45.13.186.114:52256] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:38.689704 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.1:58434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:38.690328 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.1:58434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:38.863603 2026] [access_compat:error] [pid 3079190:tid 3079190] [client 125.176.202.122:54254] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:39.247654 2026] [core:error] [pid 3067775:tid 3067775] [client 45.13.186.114:52285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:39.247699 2026] [core:error] [pid 3067775:tid 3067775] [client 45.13.186.114:52285] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:39.358715 2026] [ssl:error] [pid 3067775:tid 3067775] (EAI 2)Name or service not known: [client 144.76.19.72:52964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:39.358756 2026] [ssl:error] [pid 3067775:tid 3067775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:39.365115 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.24:51540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:39.365742 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.24:51540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:39.412897 2026] [core:crit] [pid 3074373:tid 3074373] (13)Permission denied: [client 216.73.216.199:44188] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/up2date/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/up2date/' is executable
[Thu Jul 30 12:30:39.412959 2026] [core:crit] [pid 3074373:tid 3074373] (13)Permission denied: [client 216.73.216.199:44188] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/cron.suspended/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/cron.suspended/' is executable
[Thu Jul 30 12:30:39.417396 2026] [core:crit] [pid 3074373:tid 3074373] (13)Permission denied: [client 216.73.216.199:44188] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/cron/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/cron/' is executable
[Thu Jul 30 12:30:39.417441 2026] [core:crit] [pid 3074373:tid 3074373] (13)Permission denied: [client 216.73.216.199:44188] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/at/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/spool/at/' is executable
[Thu Jul 30 12:30:39.453779 2026] [ssl:error] [pid 3070569:tid 3070569] (EAI 2)Name or service not known: [client 144.76.19.72:52980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:39.453816 2026] [ssl:error] [pid 3070569:tid 3070569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:39.473762 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.59:60904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:39.474411 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.59:60904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:39.596253 2026] [lsapi:warn] [pid 3071225:tid 3071225] [client 122.180.21.11:52773] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:30:39.637344 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.59:60914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:39.637966 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.59:60914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:39.966410 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.25:34584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:39.967039 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.25:34584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:40.082975 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.49:60882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:40.083617 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.49:60882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:40.386813 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.48:43390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:40.387447 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.48:43390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:40.447458 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.58:48794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:40.448093 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.58:48794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:40.607214 2026] [ssl:error] [pid 3076266:tid 3076266] (70014)End of file found: [client 216.73.216.199:34536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:40.909971 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 45.13.186.114:52608] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 12:30:41.066284 2026] [core:error] [pid 3079065:tid 3079065] [client 45.13.186.114:52778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:41.066313 2026] [core:error] [pid 3079065:tid 3079065] [client 45.13.186.114:52778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:41.165693 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.31:24860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:41.166360 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.31:24860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:41.716185 2026] [authz_core:error] [pid 3079470:tid 3079470] [client 57.141.0.56:24994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:41.716847 2026] [authz_core:error] [pid 3079470:tid 3079470] [client 57.141.0.56:24994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:42.020447 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.39:21902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:42.021082 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.39:21902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:42.211953 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.18:38926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:42.212607 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.18:38926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:42.510093 2026] [ssl:error] [pid 3079191:tid 3079191] (EAI 2)Name or service not known: [client 144.76.19.72:48900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:42.510128 2026] [ssl:error] [pid 3079191:tid 3079191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:42.582119 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.8:65222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:42.582751 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.8:65222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:42.596800 2026] [ssl:error] [pid 3067956:tid 3067956] (EAI 2)Name or service not known: [client 144.76.19.72:48910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:42.596826 2026] [ssl:error] [pid 3067956:tid 3067956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:42.854166 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.19:21890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:42.854948 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.19:21890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:42.939684 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.12:57606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:42.940308 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.12:57606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:43.318739 2026] [ssl:error] [pid 3074373:tid 3074373] (70014)End of file found: [client 216.73.216.199:44188] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:43.433175 2026] [authz_core:error] [pid 3079470:tid 3079470] [client 57.141.0.59:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:43.433799 2026] [authz_core:error] [pid 3079470:tid 3079470] [client 57.141.0.59:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:43.677874 2026] [core:error] [pid 3076267:tid 3076267] [client 45.13.186.114:53251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:43.677904 2026] [core:error] [pid 3076267:tid 3076267] [client 45.13.186.114:53251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:43.803413 2026] [ssl:error] [pid 3072616:tid 3072616] (70014)End of file found: [client 216.73.216.199:59687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:44.308819 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.52:57074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:44.309456 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.52:57074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:44.505302 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.23:64582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:44.505931 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.23:64582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:44.575768 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.63:22102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:44.576398 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.63:22102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:44.758401 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.31:24862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:44.759035 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.31:24862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:45.461051 2026] [access_compat:error] [pid 3079365:tid 3079365] [client 125.176.202.122:54518] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:45.621022 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.31:24870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:45.621670 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.31:24870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:45.655378 2026] [ssl:error] [pid 3079329:tid 3079329] (EAI 2)Name or service not known: [client 144.76.19.72:48916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:45.655414 2026] [ssl:error] [pid 3079329:tid 3079329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:45.661025 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.51:59748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:45.661666 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.51:59748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:45.713294 2026] [ssl:error] [pid 3079195:tid 3079195] (EAI 2)Name or service not known: [client 144.76.19.72:48926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:45.713339 2026] [ssl:error] [pid 3079195:tid 3079195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:45.909867 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.12:57620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:45.910507 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.12:57620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:45.933874 2026] [security2:error] [pid 3079141:tid 3079141] [client 216.73.216.199:16399] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysusers.d/systemd.conf"] [unique_id "ams15eruGb_s47o3rw0BbQAAAC0"]
[Thu Jul 30 12:30:45.934143 2026] [security2:error] [pid 3079141:tid 3079141] [client 216.73.216.199:16399] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysusers.d/systemd.conf"] [unique_id "ams15eruGb_s47o3rw0BbQAAAC0"]
[Thu Jul 30 12:30:45.934338 2026] [security2:error] [pid 3079141:tid 3079141] [client 216.73.216.199:16399] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysusers.d/systemd.conf"] [unique_id "ams15eruGb_s47o3rw0BbQAAAC0"]
[Thu Jul 30 12:30:45.957806 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.69:35234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:45.958432 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.69:35234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:46.025197 2026] [access_compat:error] [pid 3068195:tid 3068195] [client 45.158.164.139:57150] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:30:46.270482 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.36:49464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:46.271129 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.36:49464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:46.562437 2026] [core:error] [pid 3079436:tid 3079436] [client 45.13.186.114:53445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:46.562472 2026] [core:error] [pid 3079436:tid 3079436] [client 45.13.186.114:53445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:46.630571 2026] [ssl:error] [pid 3079141:tid 3079141] (70014)End of file found: [client 216.73.216.199:16399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:46.997410 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.22:42594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:46.998117 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.22:42594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:47.365294 2026] [security2:error] [pid 3079329:tid 3079329] [client 43.131.32.36:47466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "ams150vDlpRngioaNzobzQAAADc"]
[Thu Jul 30 12:30:47.405625 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.32:45210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:47.406277 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.32:45210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:47.794664 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.43:54014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:47.795290 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.43:54014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:48.018046 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.21:43368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:48.018713 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.21:43368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:48.387149 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.21:43374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:48.387840 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.21:43374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:48.505161 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.49:30966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:48.505792 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.49:30966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:48.637625 2026] [core:error] [pid 3078607:tid 3078607] (13)Permission denied: [client 216.73.216.199:22690] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/flags
[Thu Jul 30 12:30:48.741219 2026] [ssl:error] [pid 3078607:tid 3078607] (70014)End of file found: [client 216.73.216.199:22690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:48.790224 2026] [ssl:error] [pid 3070569:tid 3070569] (EAI 2)Name or service not known: [client 144.76.19.72:48936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:48.790259 2026] [ssl:error] [pid 3070569:tid 3070569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:48.847787 2026] [ssl:error] [pid 3069203:tid 3069203] (EAI 2)Name or service not known: [client 144.76.19.72:48950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:48.847828 2026] [ssl:error] [pid 3069203:tid 3069203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:49.159595 2026] [access_compat:error] [pid 3079366:tid 3079366] [client 172.202.95.21:34449] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.alf.php
[Thu Jul 30 12:30:49.186325 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.28:35196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:49.186961 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.28:35196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:49.216941 2026] [core:error] [pid 3078561:tid 3078561] [client 45.13.186.114:54336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:49.216965 2026] [core:error] [pid 3078561:tid 3078561] [client 45.13.186.114:54336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:49.230452 2026] [ssl:error] [pid 3074780:tid 3074780] (70014)End of file found: [client 216.73.216.199:4142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:49.412670 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.53:29948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:49.413296 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.53:29948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:49.912139 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.2:60156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:49.912765 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.2:60156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:50.265260 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.27:63742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:50.265889 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.27:63742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:50.305038 2026] [lsapi:warn] [pid 3075258:tid 3075258] [client 122.180.21.11:53431] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:30:50.334118 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.56:23368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:50.334745 2026] [authz_core:error] [pid 3072616:tid 3072616] [client 57.141.0.56:23368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:50.424108 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.15:59336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:50.424782 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.15:59336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:50.516962 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.20:42010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:50.517595 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.20:42010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:50.614775 2026] [core:error] [pid 3079192:tid 3079192] [client 57.141.0.7:29200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:50.614797 2026] [core:error] [pid 3079192:tid 3079192] [client 57.141.0.7:29200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:51.581735 2026] [core:error] [pid 3074373:tid 3074373] [client 45.13.186.114:54861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:51.581766 2026] [core:error] [pid 3074373:tid 3074373] [client 45.13.186.114:54861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:51.719578 2026] [access_compat:error] [pid 3069203:tid 3069203] [client 125.176.202.122:54788] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:51.730711 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.35:45214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:51.731344 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.35:45214] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:51.904774 2026] [ssl:error] [pid 3076267:tid 3076267] (EAI 2)Name or service not known: [client 144.76.19.72:47358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:51.904815 2026] [ssl:error] [pid 3076267:tid 3076267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:51.962995 2026] [ssl:error] [pid 3075258:tid 3075258] (EAI 2)Name or service not known: [client 144.76.19.72:47364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:51.963042 2026] [ssl:error] [pid 3075258:tid 3075258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:52.285459 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.63:24152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:52.286116 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.63:24152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:52.441511 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.34:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:52.442140 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.34:38204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:52.513346 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.60:54774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:52.513969 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.60:54774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:52.587246 2026] [access_compat:error] [pid 3075943:tid 3075943] [client 172.202.95.21:33806] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.bod
[Thu Jul 30 12:30:52.750999 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.43:40534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:52.751672 2026] [authz_core:error] [pid 3070569:tid 3070569] [client 57.141.0.43:40534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:53.147745 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.6:64808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:53.148451 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.6:64808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:53.198741 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.7:29216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:53.199366 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.7:29216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:53.349863 2026] [access_compat:error] [pid 3075943:tid 3075943] [client 172.202.95.21:33806] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.trash7206
[Thu Jul 30 12:30:53.429305 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 66.249.66.33:40557] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:30:53.432177 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 66.249.66.33:40557] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:30:53.556949 2026] [ssl:error] [pid 3074543:tid 3074543] (70014)End of file found: [client 216.73.216.199:58171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:53.889467 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.42:51020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:53.890102 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.42:51020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:54.052581 2026] [ssl:error] [pid 3079144:tid 3079144] (70014)End of file found: [client 216.73.216.199:31152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:54.225822 2026] [cgi:error] [pid 3079329:tid 3079329] [client 20.203.200.218:54071] AH02811: stderr from /var/www/html/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 12:30:54.312324 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 20.203.200.218:54071] AH01630: client denied by server configuration: /var/www/html/php.ini
[Thu Jul 30 12:30:54.465215 2026] [core:error] [pid 3075978:tid 3075978] [client 45.13.186.114:55067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:54.465241 2026] [core:error] [pid 3075978:tid 3075978] [client 45.13.186.114:55067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:54.652642 2026] [ssl:error] [pid 3079191:tid 3079191] (70014)End of file found: [client 216.73.216.199:33150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:54.812911 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.27:23260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:54.813577 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.27:23260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:54.898245 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.34:38218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:54.898876 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.34:38218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:55.019031 2026] [ssl:error] [pid 3075860:tid 3075860] (EAI 2)Name or service not known: [client 144.76.19.72:47366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:55.019076 2026] [ssl:error] [pid 3075860:tid 3075860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:55.072163 2026] [ssl:error] [pid 3078511:tid 3078511] (EAI 2)Name or service not known: [client 144.76.19.72:47378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:55.072206 2026] [ssl:error] [pid 3078511:tid 3078511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:55.290870 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.11:32190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:55.291508 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.11:32190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:55.350828 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.65:50298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:55.351472 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.65:50298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:55.354397 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.8:34064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:55.355007 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.8:34064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:55.578157 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.1:24864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:55.578828 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.1:24864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:55.966547 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.56:23384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:55.967172 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.56:23384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:56.149159 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.30:46582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:56.149792 2026] [authz_core:error] [pid 3069571:tid 3069571] [client 57.141.0.30:46582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:56.866612 2026] [core:error] [pid 3074780:tid 3074780] [client 66.249.66.167:63512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:56.866638 2026] [core:error] [pid 3074780:tid 3074780] [client 66.249.66.167:63512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:30:57.360086 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.22:58464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:57.360712 2026] [authz_core:error] [pid 3079329:tid 3079329] [client 57.141.0.22:58464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:57.529001 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.9:20202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:57.529646 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.9:20202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:57.916186 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.43:40554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:57.916815 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.43:40554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:58.128494 2026] [ssl:error] [pid 3079196:tid 3079196] (EAI 2)Name or service not known: [client 144.76.19.72:47386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:58.128544 2026] [ssl:error] [pid 3079196:tid 3079196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:58.152495 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.58:31162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:58.153133 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.58:31162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:58.182795 2026] [ssl:error] [pid 3078606:tid 3078606] (EAI 2)Name or service not known: [client 144.76.19.72:47398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:30:58.182848 2026] [ssl:error] [pid 3078606:tid 3078606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:30:58.321829 2026] [access_compat:error] [pid 3075978:tid 3075978] [client 125.176.202.122:55054] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:30:58.588460 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.14:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:58.589124 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.14:57748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:58.879575 2026] [ssl:error] [pid 3074543:tid 3074543] (70014)End of file found: [client 216.73.216.199:56277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:30:58.917665 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.5:53606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:58.918299 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.5:53606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:59.311003 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.43:40556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:59.311678 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.43:40556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:59.518352 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.69:26420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:30:59.518981 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.69:26420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:30:59.881174 2026] [ssl:error] [pid 3072617:tid 3072617] (70014)End of file found: [client 216.73.216.199:51419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:00.344116 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.64:41188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:00.344767 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.64:41188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:00.752089 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.34:28614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:00.752734 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.34:28614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:00.787241 2026] [ssl:error] [pid 3079191:tid 3079191] (70014)End of file found: [client 216.73.216.199:24855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:00.823452 2026] [lsapi:warn] [pid 3079193:tid 3079193] [client 122.180.21.11:54089] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:31:00.966395 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.63:46660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:00.967091 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.63:46660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:01.142373 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.69:26424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:01.143027 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.69:26424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:01.239722 2026] [ssl:error] [pid 3077443:tid 3077443] (EAI 2)Name or service not known: [client 144.76.19.72:62316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:01.239757 2026] [ssl:error] [pid 3077443:tid 3077443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:01.296811 2026] [ssl:error] [pid 3069203:tid 3069203] (EAI 2)Name or service not known: [client 144.76.19.72:62318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:01.296847 2026] [ssl:error] [pid 3069203:tid 3069203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:02.340978 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.38:58022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:02.341636 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.38:58022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:02.420707 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.39:57192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:02.421338 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.39:57192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:02.464788 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.44:59140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:02.465409 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.44:59140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:03.173228 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.67:48362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:03.173856 2026] [authz_core:error] [pid 3079190:tid 3079190] [client 57.141.0.67:48362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:03.280273 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.27:22024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:03.280895 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.27:22024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:03.300120 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.20:37956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:03.300748 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.20:37956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:03.371529 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.26:39250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:03.372150 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.26:39250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:03.663700 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.71:40704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:03.664326 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.71:40704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:03.759027 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.8:34106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:03.759767 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.8:34106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:04.356005 2026] [ssl:error] [pid 3071225:tid 3071225] (EAI 2)Name or service not known: [client 144.76.19.72:62332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:04.356034 2026] [ssl:error] [pid 3071225:tid 3071225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:04.409044 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:62342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:04.409088 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:04.452570 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.55:41322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:04.453235 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.55:41322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:04.464161 2026] [core:error] [pid 3069203:tid 3069203] [client 57.141.0.47:47888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:04.464188 2026] [core:error] [pid 3069203:tid 3069203] [client 57.141.0.47:47888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:04.976050 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.68:27162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:04.976720 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.68:27162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:05.014330 2026] [core:error] [pid 3078607:tid 3078607] (13)Permission denied: [client 216.73.216.199:50222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS2/close_delay
[Thu Jul 30 12:31:05.317941 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.4:24138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:05.318679 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.4:24138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:05.377294 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.50:38862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:05.377914 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.50:38862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:05.713693 2026] [access_compat:error] [pid 3078122:tid 3078122] [client 125.176.202.122:55323] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:31:05.748683 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.5:53608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:05.749349 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.5:53608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:06.097109 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.47:47896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:06.097731 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.47:47896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:06.486477 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.70:55330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:06.487115 2026] [authz_core:error] [pid 3068020:tid 3068020] [client 57.141.0.70:55330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:06.522101 2026] [ssl:error] [pid 3078607:tid 3078607] (70014)End of file found: [client 216.73.216.199:50222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:06.753785 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.11:62944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:06.754414 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.11:62944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:06.845273 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.45:37614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:06.845894 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.45:37614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:07.137353 2026] [ssl:error] [pid 3067689:tid 3067689] (70014)End of file found: [client 216.73.216.199:32386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:07.423543 2026] [ssl:error] [pid 3068020:tid 3068020] (70014)End of file found: [client 216.73.216.199:15799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:07.446522 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.68:46894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:07.447147 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.68:46894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:07.453002 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.14:61052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:07.453621 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.14:61052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:07.462690 2026] [ssl:error] [pid 3079191:tid 3079191] (EAI 2)Name or service not known: [client 144.76.19.72:62354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:07.462716 2026] [ssl:error] [pid 3079191:tid 3079191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:07.514868 2026] [ssl:error] [pid 3077443:tid 3077443] (EAI 2)Name or service not known: [client 144.76.19.72:62368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:07.514898 2026] [ssl:error] [pid 3077443:tid 3077443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:07.775366 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.5:21416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:07.775987 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.5:21416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:07.943336 2026] [security2:error] [pid 3069203:tid 3069203] [client 43.164.0.21:47820] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "ams1-35bIaeapdUBrpvmEAAAACU"]
[Thu Jul 30 12:31:07.971480 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.26:39264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:07.972144 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.26:39264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:08.902156 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.37:60300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:08.902780 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.37:60300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:08.979139 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.29:59180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:08.979776 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.29:59180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:09.237309 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.10:56760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:09.237936 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.10:56760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:09.294805 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.23:54542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:09.295451 2026] [authz_core:error] [pid 3067775:tid 3067775] [client 57.141.0.23:54542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:09.693117 2026] [security2:error] [pid 3067775:tid 3067775] [client 43.164.0.21:51834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "ams1_XSNFImGjNOWzzWqXAAAAAo"], referer: http://thesilkshed.co.uk
[Thu Jul 30 12:31:09.832339 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.41:23614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:09.833013 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.41:23614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:10.567956 2026] [ssl:error] [pid 3080065:tid 3080065] (EAI 2)Name or service not known: [client 144.76.19.72:61062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:10.567989 2026] [ssl:error] [pid 3080065:tid 3080065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:10.624179 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:61074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:10.624214 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:11.363908 2026] [lsapi:warn] [pid 3079193:tid 3079193] [client 122.180.21.11:54741] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:31:11.712978 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.9:50504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:11.713637 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.9:50504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:11.794037 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.23:54544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:11.794701 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.23:54544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:12.078569 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.13:42138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:12.079211 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.13:42138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:12.091807 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.63:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:12.092443 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.63:41772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:12.322255 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.21:41080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:12.322888 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.21:41080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:12.532948 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.8:33872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:12.533617 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.8:33872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:12.844647 2026] [ssl:error] [pid 3078122:tid 3078122] (70014)End of file found: [client 216.73.216.199:60100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:13.146870 2026] [security2:error] [pid 3080545:tid 3080545] [client 181.119.107.185:43846] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2AZsOke5wut2VWZCb-gAAAA4"]
[Thu Jul 30 12:31:13.146921 2026] [security2:error] [pid 3080545:tid 3080545] [client 181.119.107.185:43846] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2AZsOke5wut2VWZCb-gAAAA4"]
[Thu Jul 30 12:31:13.147186 2026] [security2:error] [pid 3080545:tid 3080545] [client 181.119.107.185:43846] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2AZsOke5wut2VWZCb-gAAAA4"]
[Thu Jul 30 12:31:13.272329 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.19:25028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:13.272976 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.19:25028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:13.347231 2026] [ssl:error] [pid 3067689:tid 3067689] (70014)End of file found: [client 216.73.216.199:36653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:13.610240 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.68:46906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:13.610860 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.68:46906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:13.678003 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:61096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:13.678032 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:13.732409 2026] [ssl:error] [pid 3075258:tid 3075258] (EAI 2)Name or service not known: [client 144.76.19.72:61102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:13.732441 2026] [ssl:error] [pid 3075258:tid 3075258] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:13.819277 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.62:46764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:13.819920 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.62:46764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:13.952792 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.59:35328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:13.953444 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.59:35328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:14.581441 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.24:61842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:14.581631 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.70:28860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:14.582124 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.24:61842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:14.582299 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.70:28860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:14.658374 2026] [ssl:error] [pid 3076267:tid 3076267] (70014)End of file found: [client 216.73.216.199:5146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:14.968233 2026] [security2:error] [pid 3079193:tid 3079193] [client 85.208.96.207:39084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7470.0.html"] [unique_id "ams2Aq5yKleAOdJPc5MSzwAAADg"]
[Thu Jul 30 12:31:15.080476 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.10:56772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:15.081119 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.10:56772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:15.471225 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.21:57936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:15.471841 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.21:57936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:16.253206 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.62:46770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:16.253857 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.62:46770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:16.493207 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.15:63452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:16.493837 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.15:63452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:16.510801 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.14:52886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:16.511419 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.14:52886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:16.614830 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.38:27396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:16.615559 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.38:27396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:16.785758 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:61118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:16.785800 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:16.833989 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.28:29568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:16.834629 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.28:29568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:16.836604 2026] [security2:error] [pid 3080545:tid 3080545] [client 186.224.80.68:23011] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2BJsOke5wut2VWZCb_gAAAA4"]
[Thu Jul 30 12:31:16.836644 2026] [security2:error] [pid 3080545:tid 3080545] [client 186.224.80.68:23011] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2BJsOke5wut2VWZCb_gAAAA4"]
[Thu Jul 30 12:31:16.836871 2026] [security2:error] [pid 3080545:tid 3080545] [client 186.224.80.68:23011] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2BJsOke5wut2VWZCb_gAAAA4"]
[Thu Jul 30 12:31:16.841372 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:61120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:16.841395 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:16.919948 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.36:20796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:16.920583 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.36:20796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:17.135607 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.7:25580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:17.136312 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.7:25580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:17.291471 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.46:47500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:17.292118 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.46:47500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:17.595212 2026] [security2:error] [pid 3077443:tid 3077443] [client 85.208.96.206:45548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/russell-poole-a-cop-we-should-insist-on"] [unique_id "ams2BcNbRHWnwopdEvrgvwAAAAE"]
[Thu Jul 30 12:31:17.923031 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.6:29258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:17.923753 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.6:29258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:18.506278 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.38:27404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:18.506905 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.38:27404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:18.709979 2026] [access_compat:error] [pid 3077916:tid 3077916] [client 125.176.202.122:55867] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:31:18.808685 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.28:29582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:18.809332 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.28:29582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:18.871817 2026] [core:error] [pid 3075978:tid 3075978] (13)Permission denied: [client 216.73.216.199:22180] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS2/close_delay
[Thu Jul 30 12:31:18.975660 2026] [core:error] [pid 3074543:tid 3074543] [client 66.249.66.167:43382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:18.975690 2026] [core:error] [pid 3074543:tid 3074543] [client 66.249.66.167:43382] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:19.006398 2026] [core:error] [pid 3067689:tid 3067689] [client 66.249.66.68:35917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:19.006428 2026] [core:error] [pid 3067689:tid 3067689] [client 66.249.66.68:35917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:19.095266 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.39:38954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:19.095896 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.39:38954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:19.142224 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.31:62832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:19.142852 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.31:62832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:19.206248 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.19:25042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:19.206881 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.19:25042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:19.528462 2026] [security2:error] [pid 3073215:tid 3073215] [client 176.29.166.197:23945] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2By41WRkqAs_RphIlZwAAADs"]
[Thu Jul 30 12:31:19.528523 2026] [security2:error] [pid 3073215:tid 3073215] [client 176.29.166.197:23945] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2By41WRkqAs_RphIlZwAAADs"]
[Thu Jul 30 12:31:19.528781 2026] [security2:error] [pid 3073215:tid 3073215] [client 176.29.166.197:23945] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2By41WRkqAs_RphIlZwAAADs"]
[Thu Jul 30 12:31:19.922162 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:55530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:19.922231 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:19.933978 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.61:49446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:19.934621 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.61:49446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:19.980554 2026] [ssl:error] [pid 3073215:tid 3073215] (EAI 2)Name or service not known: [client 144.76.19.72:55534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:19.980578 2026] [ssl:error] [pid 3073215:tid 3073215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:20.438617 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.58:41222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:20.439251 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.58:41222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:20.683173 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.39:38970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:20.683800 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.39:38970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:21.346717 2026] [core:error] [pid 3075978:tid 3075978] (13)Permission denied: [client 216.73.216.199:22180] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/usersize
[Thu Jul 30 12:31:21.545582 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.6:29266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:21.546209 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.6:29266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:21.720979 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.52:38282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:21.721617 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.52:38282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:22.164993 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.42:65046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:22.165678 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.42:65046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:22.194747 2026] [core:error] [pid 3069203:tid 3069203] (13)Permission denied: [client 216.73.216.199:5750] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/ctor
[Thu Jul 30 12:31:22.422594 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.69:27848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:22.423216 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.69:27848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:22.465271 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.55:62988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:22.465959 2026] [authz_core:error] [pid 3073083:tid 3073083] [client 57.141.0.55:62988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:22.496199 2026] [ssl:error] [pid 3069203:tid 3069203] (70014)End of file found: [client 216.73.216.199:5750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:22.592364 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.23:59758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:22.593000 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.23:59758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:22.766372 2026] [security2:error] [pid 3079191:tid 3079191] [client 3.230.224.6:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/js/blank.html"] [unique_id "ams2CvTTADdQuei4MrmlZwAAADQ"]
[Thu Jul 30 12:31:22.796816 2026] [ssl:error] [pid 3081072:tid 3081072] (70014)End of file found: [client 216.73.216.199:47650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:22.926466 2026] [lsapi:warn] [pid 3073083:tid 3073083] [client 122.180.21.11:55404] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:31:23.085627 2026] [ssl:error] [pid 3081200:tid 3081200] (EAI 2)Name or service not known: [client 144.76.19.72:55546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:23.085671 2026] [ssl:error] [pid 3081200:tid 3081200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:23.093576 2026] [ssl:error] [pid 3075978:tid 3075978] (70014)End of file found: [client 216.73.216.199:22180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:23.114697 2026] [authz_core:error] [pid 3081198:tid 3081198] [client 57.141.0.46:33262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:23.115351 2026] [authz_core:error] [pid 3081198:tid 3081198] [client 57.141.0.46:33262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:23.144821 2026] [ssl:error] [pid 3079191:tid 3079191] (EAI 2)Name or service not known: [client 144.76.19.72:55552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:23.144846 2026] [ssl:error] [pid 3079191:tid 3079191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:23.211165 2026] [authz_core:error] [pid 3081200:tid 3081200] [client 57.141.0.8:60562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:23.211795 2026] [authz_core:error] [pid 3081200:tid 3081200] [client 57.141.0.8:60562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:23.424456 2026] [authz_core:error] [pid 3081198:tid 3081198] [client 57.141.0.42:65054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:23.425095 2026] [authz_core:error] [pid 3081198:tid 3081198] [client 57.141.0.42:65054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:23.880547 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.11:52868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:23.881176 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.11:52868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:24.678002 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.28:25346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:24.678690 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.28:25346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:25.172710 2026] [security2:error] [pid 3079436:tid 3079436] [client 216.73.216.199:10078] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/universal_hooks.conf"] [unique_id "ams2DaiQXC3qyNk3n6JClwAAAD8"]
[Thu Jul 30 12:31:25.173013 2026] [security2:error] [pid 3079436:tid 3079436] [client 216.73.216.199:10078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/universal_hooks.conf"] [unique_id "ams2DaiQXC3qyNk3n6JClwAAAD8"]
[Thu Jul 30 12:31:25.173251 2026] [security2:error] [pid 3079436:tid 3079436] [client 216.73.216.199:10078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/universal_hooks.conf"] [unique_id "ams2DaiQXC3qyNk3n6JClwAAAD8"]
[Thu Jul 30 12:31:25.180246 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.34:45340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:25.180868 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.34:45340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:25.312588 2026] [access_compat:error] [pid 3081199:tid 3081199] [client 125.176.202.122:56192] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:31:25.441193 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.39:57026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:25.441821 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.39:57026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:25.646351 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.41:41956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:25.647008 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.41:41956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:25.851450 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.65:29992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:25.852116 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.65:29992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:26.047750 2026] [authz_core:error] [pid 3079470:tid 3079470] [client 57.141.0.29:50542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:26.048378 2026] [authz_core:error] [pid 3079470:tid 3079470] [client 57.141.0.29:50542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:26.240236 2026] [ssl:error] [pid 3081290:tid 3081290] (EAI 2)Name or service not known: [client 144.76.19.72:55556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:26.240286 2026] [ssl:error] [pid 3081290:tid 3081290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:26.297603 2026] [ssl:error] [pid 3077443:tid 3077443] (EAI 2)Name or service not known: [client 144.76.19.72:55570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:26.297635 2026] [ssl:error] [pid 3077443:tid 3077443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:26.343418 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.67:30026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:26.344054 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.67:30026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:26.411074 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.26:36126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:26.411706 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.26:36126] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:26.669136 2026] [core:error] [pid 3068195:tid 3068195] (13)Permission denied: [client 216.73.216.199:2562] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:31:26.970515 2026] [core:error] [pid 3068195:tid 3068195] (13)Permission denied: [client 216.73.216.199:2562] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 12:31:27.251237 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.14:54574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:27.251869 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.14:54574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:27.271054 2026] [ssl:error] [pid 3068195:tid 3068195] (70014)End of file found: [client 216.73.216.199:2562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:27.577453 2026] [ssl:error] [pid 3079436:tid 3079436] (70014)End of file found: [client 216.73.216.199:10078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:27.856005 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.13:45232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:27.856654 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.13:45232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:28.092543 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.10:38698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:28.093172 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.10:38698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:28.243176 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.13:45246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:28.243804 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.13:45246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:28.438237 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.45:46500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:28.438865 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.45:46500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:28.589026 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.9:54430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:28.589661 2026] [authz_core:error] [pid 3069203:tid 3069203] [client 57.141.0.9:54430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:28.967931 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.56:53404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:28.968567 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.56:53404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:29.079522 2026] [ssl:error] [pid 3081289:tid 3081289] (70014)End of file found: [client 216.73.216.199:52628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:29.081362 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.51:49006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:29.081985 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.51:49006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:29.085610 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.9:54440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:29.086286 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.9:54440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:29.357486 2026] [ssl:error] [pid 3077669:tid 3077669] (EAI 2)Name or service not known: [client 144.76.19.72:55572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:29.357542 2026] [ssl:error] [pid 3077669:tid 3077669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:29.411552 2026] [ssl:error] [pid 3081290:tid 3081290] (EAI 2)Name or service not known: [client 144.76.19.72:55582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:29.411648 2026] [ssl:error] [pid 3081290:tid 3081290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:29.565799 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.20:39878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:29.566430 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.20:39878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:30.382649 2026] [access_compat:error] [pid 3081295:tid 3081295] [client 125.176.202.122:56408] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:31:30.498211 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.40:41336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:30.498834 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.40:41336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:30.981454 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.7:26038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:30.982091 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.7:26038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:31.095607 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.37:65144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:31.096241 2026] [authz_core:error] [pid 3075258:tid 3075258] [client 57.141.0.37:65144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:31.223235 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.61:38062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:31.223875 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.61:38062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:31.389523 2026] [security2:error] [pid 3077669:tid 3077669] [client 138.197.80.41:60862] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "berehap.be"] [uri "/xmlrpc.php"] [unique_id "ams2E85Gbx53uaKvYaXJ_QAAACM"]
[Thu Jul 30 12:31:31.502144 2026] [core:error] [pid 3067989:tid 3067989] [client 66.249.64.170:54895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:31.502169 2026] [core:error] [pid 3067989:tid 3067989] [client 66.249.64.170:54895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:31.907859 2026] [security2:error] [pid 3074543:tid 3074543] [client 52.207.47.227:20934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-json/wp/v2/categories/41"] [unique_id "ams2E9WU-I6qbWT5sw3J4gAAAAM"]
[Thu Jul 30 12:31:32.030695 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.35:51664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:32.031320 2026] [authz_core:error] [pid 3073082:tid 3073082] [client 57.141.0.35:51664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:32.404989 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.69:57668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:32.405618 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.69:57668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:32.443890 2026] [authz_core:error] [pid 3081200:tid 3081200] [client 57.141.0.34:48184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:32.444526 2026] [authz_core:error] [pid 3081200:tid 3081200] [client 57.141.0.34:48184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:32.465816 2026] [ssl:error] [pid 3075943:tid 3075943] (EAI 2)Name or service not known: [client 144.76.19.72:28544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:32.465842 2026] [ssl:error] [pid 3075943:tid 3075943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:32.518297 2026] [ssl:error] [pid 3081294:tid 3081294] (EAI 2)Name or service not known: [client 144.76.19.72:28554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:32.518365 2026] [ssl:error] [pid 3081294:tid 3081294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:32.662630 2026] [lsapi:warn] [pid 3075258:tid 3075258] [client 122.180.21.11:56061] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:31:32.861077 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.70:22436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:32.861704 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.70:22436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:32.937991 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.13:37306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:32.938630 2026] [authz_core:error] [pid 3074373:tid 3074373] [client 57.141.0.13:37306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:33.362269 2026] [ssl:error] [pid 3078607:tid 3078607] (70014)End of file found: [client 216.73.216.199:48808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:33.651592 2026] [ssl:error] [pid 3081199:tid 3081199] (70014)End of file found: [client 216.73.216.199:2506] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:34.013062 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.67:34200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:34.013706 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.67:34200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:34.197723 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.3:61584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:34.198353 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.3:61584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:34.379428 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.14:54592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:34.380056 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.14:54592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:34.555391 2026] [ssl:error] [pid 3081293:tid 3081293] (70014)End of file found: [client 216.73.216.199:49864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:34.764517 2026] [core:error] [pid 3081292:tid 3081292] [client 66.249.66.39:35811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:34.764546 2026] [core:error] [pid 3081292:tid 3081292] [client 66.249.66.39:35811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:34.899373 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.43:31622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:34.899998 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.43:31622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:34.944620 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.61:38068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:34.945242 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.61:38068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:35.555647 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.47:43532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:35.556269 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.47:43532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:35.573350 2026] [ssl:error] [pid 3071225:tid 3071225] (EAI 2)Name or service not known: [client 144.76.19.72:28566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:35.573380 2026] [ssl:error] [pid 3071225:tid 3071225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:35.627820 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:28580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:35.627844 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:35.751912 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.16:36984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:35.752548 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.16:36984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:35.909687 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.31:62866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:35.910317 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.31:62866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:35.938782 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.25:53964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:35.939431 2026] [authz_core:error] [pid 3067956:tid 3067956] [client 57.141.0.25:53964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:36.616267 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.30:40676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:36.616905 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.30:40676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:36.869037 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.16:36986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:36.869667 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.16:36986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:37.139685 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.46:52536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:37.140315 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.46:52536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:37.414125 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.22:26820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:37.414751 2026] [authz_core:error] [pid 3071225:tid 3071225] [client 57.141.0.22:26820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:37.627391 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.48:60036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:37.628029 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.48:60036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:37.837052 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.70:61810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:37.837683 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.70:61810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:38.374273 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.59:29806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:38.374897 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.59:29806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:38.438349 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.38:45412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:38.439041 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.38:45412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:38.682788 2026] [ssl:error] [pid 3081072:tid 3081072] (EAI 2)Name or service not known: [client 144.76.19.72:28596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:38.682822 2026] [ssl:error] [pid 3081072:tid 3081072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:38.738735 2026] [ssl:error] [pid 3081163:tid 3081163] (EAI 2)Name or service not known: [client 144.76.19.72:28610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:38.738764 2026] [ssl:error] [pid 3081163:tid 3081163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:38.869258 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.62:22926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:38.869878 2026] [authz_core:error] [pid 3080464:tid 3080464] [client 57.141.0.62:22926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:39.234648 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 20.206.204.219:59264] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 12:31:39.628264 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.10:61978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:39.628883 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.10:61978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:39.803046 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.53:64902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:39.803760 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.53:64902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:40.009289 2026] [security2:error] [pid 3081199:tid 3081199] [client 114.119.157.183:64775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~104,15/request_format~html"] [unique_id "ams2HBIuqxZuHBD2DnE8SQAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~104,15/request_format~html
[Thu Jul 30 12:31:40.162044 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.31:62904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:40.162758 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.31:62904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:40.533423 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.35:30278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:40.534045 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.35:30278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:40.817649 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.34:30492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:40.818340 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.34:30492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:40.884289 2026] [core:error] [pid 3078607:tid 3078607] (13)Permission denied: [client 216.73.216.199:16215] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS2/close_delay
[Thu Jul 30 12:31:40.910747 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.21:34002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:40.911372 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.21:34002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:41.045449 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.55:58614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:41.046090 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.55:58614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:41.185886 2026] [ssl:error] [pid 3078607:tid 3078607] (70014)End of file found: [client 216.73.216.199:16215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:41.794149 2026] [ssl:error] [pid 3079065:tid 3079065] (EAI 2)Name or service not known: [client 144.76.19.72:55060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:41.794183 2026] [ssl:error] [pid 3079065:tid 3079065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:41.850801 2026] [ssl:error] [pid 3075860:tid 3075860] (EAI 2)Name or service not known: [client 144.76.19.72:55068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:41.850833 2026] [ssl:error] [pid 3075860:tid 3075860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:41.960738 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.20:55852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:41.961368 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.20:55852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:41.977994 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.5:59246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:41.978636 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.5:59246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:42.089723 2026] [ssl:error] [pid 3067689:tid 3067689] (70014)End of file found: [client 216.73.216.199:18269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:42.509985 2026] [security2:error] [pid 3081288:tid 3081288] [client 114.119.157.183:21763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578182400/cat_ids~104,15/request_format~html"] [unique_id "ams2Hmirx_MBLbgJlMXYFwAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578268800/cat_ids~104,15/request_format~html
[Thu Jul 30 12:31:42.653242 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.11:27744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:42.653869 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.11:27744] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:42.884819 2026] [core:error] [pid 3079193:tid 3079193] [client 57.141.0.43:35344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:42.884846 2026] [core:error] [pid 3079193:tid 3079193] [client 57.141.0.43:35344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:42.987253 2026] [core:error] [pid 3081295:tid 3081295] (13)Permission denied: [client 216.73.216.199:51984] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS3/flags
[Thu Jul 30 12:31:43.288312 2026] [core:error] [pid 3081295:tid 3081295] (13)Permission denied: [client 216.73.216.199:51984] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/flags
[Thu Jul 30 12:31:43.296276 2026] [lsapi:warn] [pid 3079436:tid 3079436] [client 122.180.21.11:56711] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:31:43.450667 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.48:46668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:43.451299 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.48:46668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:43.757044 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.44:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:43.757679 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.44:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:44.504400 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.1:30110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:44.505032 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.1:30110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:44.587625 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.23:38796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:44.588251 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.23:38796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:44.793224 2026] [core:error] [pid 3081295:tid 3081295] (13)Permission denied: [client 216.73.216.199:51984] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/platform/drivers_probe
[Thu Jul 30 12:31:44.842823 2026] [authz_core:error] [pid 3082325:tid 3082325] [client 57.141.0.29:64258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:44.843483 2026] [authz_core:error] [pid 3082325:tid 3082325] [client 57.141.0.29:64258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:45.104725 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.36:29560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:45.105351 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.36:29560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:45.149590 2026] [access_compat:error] [pid 3081294:tid 3081294] [client 125.176.202.122:56936] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:31:45.437670 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.8:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:45.438302 2026] [authz_core:error] [pid 3079196:tid 3079196] [client 57.141.0.8:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:45.673844 2026] [ssl:error] [pid 3082324:tid 3082324] (EAI 2)Name or service not known: [client 144.76.19.72:55070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:45.673877 2026] [ssl:error] [pid 3082324:tid 3082324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:45.789727 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.38:41294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:45.790345 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.38:41294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:45.960937 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.62:31952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:45.961569 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.62:31952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:45.967961 2026] [ssl:error] [pid 3082377:tid 3082377] (EAI 2)Name or service not known: [client 144.76.19.72:55082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:45.967995 2026] [ssl:error] [pid 3082377:tid 3082377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:45.999919 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.41:51536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:46.000574 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.41:51536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:46.066117 2026] [authz_core:error] [pid 3082378:tid 3082378] [client 57.141.0.51:50424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:46.066771 2026] [authz_core:error] [pid 3082378:tid 3082378] [client 57.141.0.51:50424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:46.442743 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.36:29564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:46.443383 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.36:29564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:46.464223 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.7:24222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:46.464858 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.7:24222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:46.901988 2026] [core:error] [pid 3081295:tid 3081295] (13)Permission denied: [client 216.73.216.199:51984] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/cpu_slabs
[Thu Jul 30 12:31:47.000536 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.59:54044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:47.001189 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.59:54044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:47.202899 2026] [ssl:error] [pid 3081295:tid 3081295] (70014)End of file found: [client 216.73.216.199:51984] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:47.713128 2026] [cgi:error] [pid 3081289:tid 3081289] [client 74.248.33.8:63513] AH02812: stderr from /home/davidebell/public_html/bashforthbell.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:31:48.088951 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.12:26716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:48.089595 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.12:26716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:48.293954 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.66:61238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:48.294586 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.66:61238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:48.468433 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.24:35886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:48.469096 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.24:35886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:48.727256 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.44:22232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:48.727886 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.44:22232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:49.010027 2026] [ssl:error] [pid 3082324:tid 3082324] (70014)End of file found: [client 216.73.216.199:59566] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:49.022061 2026] [ssl:error] [pid 3079101:tid 3079101] (EAI 2)Name or service not known: [client 144.76.19.72:55096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:49.022112 2026] [ssl:error] [pid 3079101:tid 3079101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:49.091235 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.56:54156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:49.091862 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.56:54156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:49.114846 2026] [ssl:error] [pid 3081293:tid 3081293] (EAI 2)Name or service not known: [client 144.76.19.72:55104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:49.114889 2026] [ssl:error] [pid 3081293:tid 3081293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:49.262682 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.62:31984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:49.263334 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.62:31984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:49.486404 2026] [security2:error] [pid 3082379:tid 3082379] [client 94.154.43.186:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "papier.com.mt"] [uri "/.env"] [unique_id "ams2JXE9sjTs_Gh-m5K76gAAABM"]
[Thu Jul 30 12:31:49.486632 2026] [security2:error] [pid 3082379:tid 3082379] [client 94.154.43.186:0] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "papier.com.mt"] [uri "/.env"] [unique_id "ams2JXE9sjTs_Gh-m5K76gAAABM"]
[Thu Jul 30 12:31:49.486875 2026] [security2:error] [pid 3082379:tid 3082379] [client 94.154.43.186:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "papier.com.mt"] [uri "/.env"] [unique_id "ams2JXE9sjTs_Gh-m5K76gAAABM"]
[Thu Jul 30 12:31:49.618964 2026] [core:error] [pid 3078606:tid 3078606] (13)Permission denied: [client 216.73.216.199:34001] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS3/flags
[Thu Jul 30 12:31:49.631239 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.68:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:49.631863 2026] [authz_core:error] [pid 3078607:tid 3078607] [client 57.141.0.68:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:50.049359 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.10:37350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:50.049991 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.10:37350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:50.807676 2026] [authz_core:error] [pid 3082204:tid 3082204] [client 57.141.0.30:53350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:50.808305 2026] [authz_core:error] [pid 3082204:tid 3082204] [client 57.141.0.30:53350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:51.132104 2026] [ssl:error] [pid 3078606:tid 3078606] (70014)End of file found: [client 216.73.216.199:34001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:51.669397 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.55:23814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:51.670044 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.55:23814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:51.684930 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.53:53004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:51.685564 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.53:53004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:51.797139 2026] [access_compat:error] [pid 3079365:tid 3079365] [client 125.176.202.122:57287] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:31:51.807391 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.31:49916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:51.808011 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.31:49916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:51.950296 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.53:53008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:51.950920 2026] [authz_core:error] [pid 3079436:tid 3079436] [client 57.141.0.53:53008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:52.168549 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:40834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:52.168582 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:52.221654 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:40840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:52.221687 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:52.224667 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.7:24248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:52.225288 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.7:24248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:52.298804 2026] [access_compat:error] [pid 3075943:tid 3075943] [client 45.158.164.139:41908] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:31:52.484084 2026] [core:error] [pid 3081288:tid 3081288] [client 66.249.66.167:53087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:52.484128 2026] [core:error] [pid 3081288:tid 3081288] [client 66.249.66.167:53087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:53.022920 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.22:31142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:53.023556 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.22:31142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:53.162167 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.29:34458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:53.162820 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.29:34458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:53.171199 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.35:48674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:53.171826 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.35:48674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:53.238402 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.43:33352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:53.239033 2026] [authz_core:error] [pid 3077443:tid 3077443] [client 57.141.0.43:33352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:53.316565 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.25:48628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:53.317194 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.25:48628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:53.388616 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.35:48684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:53.389246 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.35:48684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:53.463953 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 66.249.66.33:52674] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:31:53.466651 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 66.249.66.33:52674] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:31:53.838405 2026] [lsapi:warn] [pid 3078560:tid 3078560] [client 122.180.21.11:57358] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:31:54.167669 2026] [ssl:error] [pid 3067989:tid 3067989] (70014)End of file found: [client 216.73.216.199:4140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:54.565621 2026] [ssl:error] [pid 3081288:tid 3081288] (70014)End of file found: [client 216.73.216.199:52253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:55.148851 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.69:45074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:55.149489 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.69:45074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:55.279449 2026] [ssl:error] [pid 3081072:tid 3081072] (EAI 2)Name or service not known: [client 144.76.19.72:40842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:55.279486 2026] [ssl:error] [pid 3081072:tid 3081072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:55.309606 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 66.249.66.33:52674] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:31:55.312256 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 66.249.66.33:52674] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:31:55.332402 2026] [ssl:error] [pid 3078560:tid 3078560] (EAI 2)Name or service not known: [client 144.76.19.72:40856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:55.332447 2026] [ssl:error] [pid 3078560:tid 3078560] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:55.442741 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.38:25846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:55.443369 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.38:25846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:55.465320 2026] [core:error] [pid 3080545:tid 3080545] (13)Permission denied: [client 216.73.216.199:22331] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ipt_REJECT/sections/__mcount_loc
[Thu Jul 30 12:31:55.617845 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.58:57710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:55.618478 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.58:57710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:55.748321 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.59:54066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:55.748956 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.59:54066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:55.844172 2026] [access_compat:error] [pid 3082324:tid 3082324] [client 125.176.202.122:57476] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:31:56.228715 2026] [core:error] [pid 3081072:tid 3081072] [client 57.141.0.63:25300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:56.228746 2026] [core:error] [pid 3081072:tid 3081072] [client 57.141.0.63:25300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:31:56.747393 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.7:41462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:56.748015 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.7:41462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:56.903275 2026] [ssl:error] [pid 3081290:tid 3081290] (70014)End of file found: [client 216.73.216.199:34284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:56.950848 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.12:31254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:56.951485 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.12:31254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:56.970257 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.38:25850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:56.970867 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.38:25850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:57.200577 2026] [ssl:error] [pid 3075860:tid 3075860] (70014)End of file found: [client 216.73.216.199:42217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:57.503553 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.7:41472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:57.504196 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.7:41472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:57.635889 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.10:62882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:57.636519 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.10:62882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:57.662315 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.50:44822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:57.662944 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.50:44822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:57.663712 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.63:25312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:57.664314 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.63:25312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:57.800391 2026] [ssl:error] [pid 3079365:tid 3079365] (70014)End of file found: [client 216.73.216.199:64421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:31:58.172748 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.10:62890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:58.173439 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.10:62890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:58.393810 2026] [ssl:error] [pid 3082379:tid 3082379] (EAI 2)Name or service not known: [client 144.76.19.72:40868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:58.393868 2026] [ssl:error] [pid 3082379:tid 3082379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:58.415168 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.23:35916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:58.415795 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.23:35916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:58.451165 2026] [ssl:error] [pid 3067689:tid 3067689] (EAI 2)Name or service not known: [client 144.76.19.72:40876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:31:58.451195 2026] [ssl:error] [pid 3067689:tid 3067689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:31:58.749425 2026] [security2:error] [pid 3082819:tid 3082819] [client 85.208.98.23:58338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "ams2Ltehm7EGLUfupDUa_gAAAAA"]
[Thu Jul 30 12:31:59.360803 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.3:32990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:59.361433 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.3:32990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:31:59.451711 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 169.58.39.193:53294] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:31:59.808353 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.52:62692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:31:59.809020 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.52:62692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:00.297637 2026] [core:error] [pid 3075978:tid 3075978] [client 66.249.66.194:47617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:00.297670 2026] [core:error] [pid 3075978:tid 3075978] [client 66.249.66.194:47617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:00.309455 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.3:32992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:00.310091 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.3:32992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:00.777404 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.4:47974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:00.778028 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.4:47974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:00.937999 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.8:28672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:00.938636 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.8:28672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:00.950016 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.52:20694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:00.950636 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.52:20694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:01.508149 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:36888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:01.508202 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:01.541968 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.43:55524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:01.542595 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.43:55524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:01.561410 2026] [ssl:error] [pid 3074543:tid 3074543] (EAI 2)Name or service not known: [client 144.76.19.72:36898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:01.561449 2026] [ssl:error] [pid 3074543:tid 3074543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:02.168278 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.26:47328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:02.168908 2026] [authz_core:error] [pid 3079065:tid 3079065] [client 57.141.0.26:47328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:02.303424 2026] [authz_core:error] [pid 3083227:tid 3083227] [client 57.141.0.51:47722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:02.304103 2026] [authz_core:error] [pid 3083227:tid 3083227] [client 57.141.0.51:47722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:02.430868 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.16:46330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:02.431496 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.16:46330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:02.433513 2026] [access_compat:error] [pid 3082324:tid 3082324] [client 125.176.202.122:57745] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:02.622562 2026] [ssl:error] [pid 3083227:tid 3083227] (70014)End of file found: [client 216.73.216.199:4535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:02.868366 2026] [security2:error] [pid 3078560:tid 3078560] [client 185.191.171.13:12140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.7770.html"] [unique_id "ams2MuoMEeJs5lFuQQQRtwAAACI"]
[Thu Jul 30 12:32:02.905971 2026] [security2:error] [pid 3079365:tid 3079365] [client 43.160.225.169:49920] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams2Mm6QgkgV_UtwPmXscgAAAD0"], referer: http://www.banskoexpress.net
[Thu Jul 30 12:32:03.059801 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.36:39666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:03.060428 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.36:39666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:03.128042 2026] [core:error] [pid 3079365:tid 3079365] [client 85.17.142.37:58636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:03.128083 2026] [core:error] [pid 3079365:tid 3079365] [client 85.17.142.37:58636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:03.521950 2026] [ssl:error] [pid 3081290:tid 3081290] (70014)End of file found: [client 216.73.216.199:61178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:03.603268 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.2:53990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:03.603908 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.2:53990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:03.737776 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.55:33954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:03.738446 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.55:33954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:03.994226 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.51:47732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:03.994853 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.51:47732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:04.161352 2026] [ssl:error] [pid 3083304:tid 3083304] (70014)End of file found: [client 216.73.216.199:31817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:04.347250 2026] [security2:error] [pid 3083302:tid 3083302] [client 43.160.225.169:48454] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams2NBi5YQFCepCA8X4diQAAADc"], referer: http://www.banskoexpress.com
[Thu Jul 30 12:32:04.498079 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.55:33658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:04.498699 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.55:33658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:04.510946 2026] [lsapi:warn] [pid 3083305:tid 3083305] [client 122.180.21.11:58013] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:32:04.609322 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.68:23256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:04.609971 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.68:23256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:04.618836 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:36910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:04.618863 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:04.671737 2026] [ssl:error] [pid 3083306:tid 3083306] (EAI 2)Name or service not known: [client 144.76.19.72:36920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:04.671766 2026] [ssl:error] [pid 3083306:tid 3083306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:05.005001 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.59:56166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:05.005641 2026] [authz_core:error] [pid 3067689:tid 3067689] [client 57.141.0.59:56166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:05.123052 2026] [authz_core:error] [pid 3083306:tid 3083306] [client 57.141.0.30:20906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:05.123683 2026] [authz_core:error] [pid 3083306:tid 3083306] [client 57.141.0.30:20906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:05.229506 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.37:61906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:05.230138 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.37:61906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:05.402776 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.42:49524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:05.403402 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.42:49524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:05.752547 2026] [authz_core:error] [pid 3082276:tid 3082276] [client 57.141.0.66:23884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:05.753177 2026] [authz_core:error] [pid 3082276:tid 3082276] [client 57.141.0.66:23884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:06.202955 2026] [security2:error] [pid 3083305:tid 3083305] [client 89.151.187.182:8568] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2NlGsM2vsMMf5AtT9RQAAAEI"]
[Thu Jul 30 12:32:06.203007 2026] [security2:error] [pid 3083305:tid 3083305] [client 89.151.187.182:8568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2NlGsM2vsMMf5AtT9RQAAAEI"]
[Thu Jul 30 12:32:06.203289 2026] [security2:error] [pid 3083305:tid 3083305] [client 89.151.187.182:8568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2NlGsM2vsMMf5AtT9RQAAAEI"]
[Thu Jul 30 12:32:06.482304 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.66:23900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:06.482933 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.66:23900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:07.150610 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.49:48980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:07.151267 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.49:48980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:07.240901 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.23:56208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:07.241531 2026] [authz_core:error] [pid 3081289:tid 3081289] [client 57.141.0.23:56208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:07.600917 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.45:33244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:07.601551 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.45:33244] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:07.728319 2026] [ssl:error] [pid 3083302:tid 3083302] (EAI 2)Name or service not known: [client 144.76.19.72:36928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:07.728351 2026] [ssl:error] [pid 3083302:tid 3083302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:07.784916 2026] [ssl:error] [pid 3081295:tid 3081295] (EAI 2)Name or service not known: [client 144.76.19.72:36944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:07.784961 2026] [ssl:error] [pid 3081295:tid 3081295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:07.805597 2026] [authz_core:error] [pid 3083306:tid 3083306] [client 57.141.0.19:47678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:07.806216 2026] [authz_core:error] [pid 3083306:tid 3083306] [client 57.141.0.19:47678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:08.010178 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.53:38212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:08.010811 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.53:38212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:08.146514 2026] [security2:error] [pid 3082377:tid 3082377] [client 188.50.45.55:3500] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2OGwfi5tzO5JoEzDbKwAAABA"]
[Thu Jul 30 12:32:08.146561 2026] [security2:error] [pid 3082377:tid 3082377] [client 188.50.45.55:3500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2OGwfi5tzO5JoEzDbKwAAABA"]
[Thu Jul 30 12:32:08.146789 2026] [security2:error] [pid 3082377:tid 3082377] [client 188.50.45.55:3500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2OGwfi5tzO5JoEzDbKwAAABA"]
[Thu Jul 30 12:32:08.349849 2026] [access_compat:error] [pid 3080065:tid 3080065] [client 125.176.202.122:58000] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:08.405682 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.32:59636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:08.406311 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.32:59636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:08.470794 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.30:20912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:08.471414 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.30:20912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:08.640175 2026] [ssl:error] [pid 3083073:tid 3083073] (70014)End of file found: [client 216.73.216.199:57530] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:08.836705 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 169.58.39.193:54424] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:32:08.952712 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.65:46064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:08.953337 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.65:46064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:09.051466 2026] [authz_core:error] [pid 3083306:tid 3083306] [client 57.141.0.16:47216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:09.052103 2026] [authz_core:error] [pid 3083306:tid 3083306] [client 57.141.0.16:47216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:09.547474 2026] [ssl:error] [pid 3068195:tid 3068195] (70014)End of file found: [client 216.73.216.199:61796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:09.574640 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 20.206.204.219:63160] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 12:32:09.675276 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.30:20922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:09.675899 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.30:20922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:09.811751 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.36:39672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:09.812373 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.36:39672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:10.561725 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.1:60144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:10.562409 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.1:60144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:10.765810 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.5:28318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:10.766448 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.5:28318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:10.839728 2026] [ssl:error] [pid 3083115:tid 3083115] (EAI 2)Name or service not known: [client 144.76.19.72:31446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:10.839761 2026] [ssl:error] [pid 3083115:tid 3083115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:10.878508 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.31:24460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:10.879133 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.31:24460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:11.300327 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.27:22224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:11.300953 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.27:22224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:11.583649 2026] [security2:error] [pid 3082324:tid 3082324] [client 189.203.228.146:2361] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2O-BcCK6BsfHYQH5b2gAAAAs"]
[Thu Jul 30 12:32:11.583698 2026] [security2:error] [pid 3082324:tid 3082324] [client 189.203.228.146:2361] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2O-BcCK6BsfHYQH5b2gAAAAs"]
[Thu Jul 30 12:32:11.583944 2026] [security2:error] [pid 3082324:tid 3082324] [client 189.203.228.146:2361] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2O-BcCK6BsfHYQH5b2gAAAAs"]
[Thu Jul 30 12:32:11.653029 2026] [ssl:error] [pid 3081290:tid 3081290] (70014)End of file found: [client 216.73.216.199:21575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:11.882197 2026] [ssl:error] [pid 3081198:tid 3081198] (EAI 2)Name or service not known: [client 144.76.19.72:31448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:11.882228 2026] [ssl:error] [pid 3081198:tid 3081198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:12.257914 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.44:58738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:12.258561 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.44:58738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:12.302811 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.13:45640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:12.303435 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.13:45640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:12.408543 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.35:27020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:12.409171 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.35:27020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:12.823980 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.67:24798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:12.824620 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.67:24798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:12.920755 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.60:28284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:12.921381 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.60:28284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:12.973692 2026] [core:error] [pid 3067989:tid 3067989] [client 66.249.66.66:36077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:12.973718 2026] [core:error] [pid 3067989:tid 3067989] [client 66.249.66.66:36077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:13.508470 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.34:42174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:13.509107 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.34:42174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:13.831692 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.28:26780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:13.832318 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.28:26780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:13.930781 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.66:22766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:13.931411 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.66:22766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:14.919753 2026] [access_compat:error] [pid 3075943:tid 3075943] [client 125.176.202.122:58262] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:14.957697 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:32:14.962382 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.66:22772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:14.963009 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.66:22772] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:15.077351 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.65:21174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:15.077970 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.65:21174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:15.119881 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.32:38394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:15.120519 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.32:38394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:15.249764 2026] [ssl:error] [pid 3083305:tid 3083305] (EAI 2)Name or service not known: [client 144.76.19.72:31462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:15.249799 2026] [ssl:error] [pid 3083305:tid 3083305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:15.306441 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:31466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:15.306467 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:15.376767 2026] [lsapi:warn] [pid 3080065:tid 3080065] [client 122.180.21.11:58664] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:32:15.577851 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.7:37556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:15.578471 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.7:37556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:15.710766 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 169.58.39.193:55383] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:32:16.062244 2026] [ssl:error] [pid 3078606:tid 3078606] (70014)End of file found: [client 216.73.216.199:36861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:16.241277 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.6:54326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:16.241988 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.6:54326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:16.404362 2026] [security2:error] [pid 3080545:tid 3080545] [client 23.21.175.228:49674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "theovertones.co.uk"] [uri "/robots.txt"] [unique_id "ams2QJsOke5wut2VWZCcFAAAAA4"]
[Thu Jul 30 12:32:16.543242 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.53:38222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:16.543871 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.53:38222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:16.643033 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.71:54092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:16.643674 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.71:54092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:16.775742 2026] [ssl:error] [pid 3083225:tid 3083225] (70014)End of file found: [client 216.73.216.199:62626] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:16.900806 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.6:54338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:16.901431 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.6:54338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:17.276770 2026] [security2:error] [pid 3083226:tid 3083226] [client 216.73.216.199:29444] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/slicoss/oasisrcvucode.sys"] [unique_id "ams2QZWjf-zYUs3NIwv4TAAAACU"]
[Thu Jul 30 12:32:17.277059 2026] [security2:error] [pid 3083226:tid 3083226] [client 216.73.216.199:29444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/slicoss/oasisrcvucode.sys"] [unique_id "ams2QZWjf-zYUs3NIwv4TAAAACU"]
[Thu Jul 30 12:32:17.277294 2026] [security2:error] [pid 3083226:tid 3083226] [client 216.73.216.199:29444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/slicoss/oasisrcvucode.sys"] [unique_id "ams2QZWjf-zYUs3NIwv4TAAAACU"]
[Thu Jul 30 12:32:17.384969 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.1:63554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:17.385689 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.1:63554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:17.429733 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.11:59058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:17.430358 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.11:59058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:17.677106 2026] [ssl:error] [pid 3083226:tid 3083226] (70014)End of file found: [client 216.73.216.199:29444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:17.763653 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.60:28298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:17.764277 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.60:28298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:17.897881 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.62:59504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:17.898531 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.62:59504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:18.167177 2026] [security2:error] [pid 3072617:tid 3072617] [client 185.191.171.2:25784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/elvis-presley-grandson-singing"] [unique_id "ams2QqZ4tVQ-yNgj4iZyvAAAAAc"]
[Thu Jul 30 12:32:18.364331 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:31470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:18.364357 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:18.398171 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.67:46974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:18.398790 2026] [authz_core:error] [pid 3081290:tid 3081290] [client 57.141.0.67:46974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:18.424490 2026] [ssl:error] [pid 3079101:tid 3079101] (EAI 2)Name or service not known: [client 144.76.19.72:31474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:18.424528 2026] [ssl:error] [pid 3079101:tid 3079101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:18.600430 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.53:32258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:18.601059 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.53:32258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:18.705125 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.42:49572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:18.705747 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.42:49572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:18.863687 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.9:27794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:18.864316 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.9:27794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:19.922328 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.51:57286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:19.922962 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.51:57286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:20.612154 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.61:24886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:20.612777 2026] [authz_core:error] [pid 3077669:tid 3077669] [client 57.141.0.61:24886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:20.726397 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.36:50620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:20.727018 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.36:50620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:20.750630 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.27:22712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:20.751257 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.27:22712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:21.069307 2026] [access_compat:error] [pid 3067956:tid 3067956] [client 125.176.202.122:58537] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:21.283143 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.43:40132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:21.283800 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.43:40132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:21.497184 2026] [ssl:error] [pid 3075943:tid 3075943] (EAI 2)Name or service not known: [client 144.76.19.72:33142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:21.497228 2026] [ssl:error] [pid 3075943:tid 3075943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:21.526860 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 169.58.39.193:56363] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:32:21.551644 2026] [ssl:error] [pid 3081293:tid 3081293] (EAI 2)Name or service not known: [client 144.76.19.72:33152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:21.551683 2026] [ssl:error] [pid 3081293:tid 3081293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:21.583735 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.18:20582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:21.584369 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.18:20582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:21.899529 2026] [core:error] [pid 3079469:tid 3079469] (13)Permission denied: [client 216.73.216.199:53558] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 12:32:22.264074 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.47:50092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:22.264768 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.47:50092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:22.325906 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.4:45650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:22.326580 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.4:45650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:22.808615 2026] [ssl:error] [pid 3078608:tid 3078608] (70014)End of file found: [client 216.73.216.199:49600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:22.828414 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 20.63.98.115:24027] AH01630: client denied by server configuration: /home/maisongerlyn/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 12:32:22.859521 2026] [authz_core:error] [pid 3082276:tid 3082276] [client 57.141.0.48:53750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:22.860149 2026] [authz_core:error] [pid 3082276:tid 3082276] [client 57.141.0.48:53750] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:23.249537 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.15:42024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:23.250161 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.15:42024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:23.303668 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.28:30776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:23.304361 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.28:30776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:23.426723 2026] [core:error] [pid 3079469:tid 3079469] (13)Permission denied: [client 216.73.216.199:53558] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 12:32:23.493273 2026] [authz_core:error] [pid 3083226:tid 3083226] [client 57.141.0.43:40138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:23.493922 2026] [authz_core:error] [pid 3083226:tid 3083226] [client 57.141.0.43:40138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:23.560666 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.58:45410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:23.561296 2026] [authz_core:error] [pid 3075943:tid 3075943] [client 57.141.0.58:45410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:24.101246 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 66.249.66.33:52076] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:32:24.103946 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 66.249.66.33:52076] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:32:24.189017 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.43:40142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:24.189646 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.43:40142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:24.314447 2026] [ssl:error] [pid 3079469:tid 3079469] (70014)End of file found: [client 216.73.216.199:53558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:24.607949 2026] [ssl:error] [pid 3083225:tid 3083225] (EAI 2)Name or service not known: [client 144.76.19.72:33158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:24.607989 2026] [ssl:error] [pid 3083225:tid 3083225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:24.664363 2026] [ssl:error] [pid 3079101:tid 3079101] (EAI 2)Name or service not known: [client 144.76.19.72:33160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:24.664406 2026] [ssl:error] [pid 3079101:tid 3079101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:24.721167 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.5:38956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:24.721791 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.5:38956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:24.825139 2026] [security2:error] [pid 3083305:tid 3083305] [client 119.91.20.139:52070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.co.uk"] [uri "/"] [unique_id "ams2SFGsM2vsMMf5AtT9SgAAAEI"]
[Thu Jul 30 12:32:25.045904 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.4:45656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:25.046554 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.4:45656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:25.122432 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.71:27716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:25.123051 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.71:27716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:25.165524 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.17:30424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:25.166175 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.17:30424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:25.524467 2026] [ssl:error] [pid 3081294:tid 3081294] (70014)End of file found: [client 216.73.216.199:33681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:25.726697 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.17:30426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:25.727323 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.17:30426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:25.963647 2026] [lsapi:warn] [pid 3075978:tid 3075978] [client 122.180.21.11:59308] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:32:26.229625 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.14:22542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:26.230267 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.14:22542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:26.672948 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.38:44962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:26.673594 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.38:44962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:26.979975 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.67:46988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:26.980623 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.67:46988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:27.199756 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.14:22552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:27.200384 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.14:22552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:27.406690 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.51:60990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:27.407343 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.51:60990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:27.548993 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.12:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:27.549638 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.12:23456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:27.642020 2026] [access_compat:error] [pid 3067956:tid 3067956] [client 125.176.202.122:58804] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:27.718795 2026] [ssl:error] [pid 3083301:tid 3083301] (EAI 2)Name or service not known: [client 144.76.19.72:33166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:27.718834 2026] [ssl:error] [pid 3083301:tid 3083301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:27.783569 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:33182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:27.783603 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:27.826137 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.17:30442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:27.826763 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.17:30442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:28.485445 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.64:39100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:28.486109 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.64:39100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:28.537298 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.69:27598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:28.537926 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.69:27598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:29.149787 2026] [ssl:error] [pid 3078561:tid 3078561] (70014)End of file found: [client 216.73.216.199:4871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:29.286827 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.6:20256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:29.288052 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 57.141.0.6:20256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.157994 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.67:52616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:30.158630 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.67:52616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.171387 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.19:63444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:30.172004 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.19:63444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.290885 2026] [authz_core:error] [pid 3081162:tid 3081162] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:32:30.443432 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.4:45660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:30.444092 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.4:45660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.624617 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.62:45980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:30.625242 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.62:45980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.670984 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.35:34120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:30.671485 2026] [ssl:error] [pid 3078608:tid 3078608] (70014)End of file found: [client 216.73.216.199:30085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:30.671622 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.35:34120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.779159 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.65:23574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:30.779790 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.65:23574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.839046 2026] [ssl:error] [pid 3079191:tid 3079191] (EAI 2)Name or service not known: [client 144.76.19.72:18718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:30.839104 2026] [ssl:error] [pid 3079191:tid 3079191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:30.849139 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.69:55188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:30.849773 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.69:55188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:30.891918 2026] [ssl:error] [pid 3082377:tid 3082377] (EAI 2)Name or service not known: [client 144.76.19.72:18722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:30.891951 2026] [ssl:error] [pid 3082377:tid 3082377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:31.046143 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 20.206.204.219:50034] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:32:31.646606 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.41:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:31.647227 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.41:48160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:31.884615 2026] [core:error] [pid 3085402:tid 3085402] (13)Permission denied: [client 216.73.216.199:10981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/modlsapi.secret
[Thu Jul 30 12:32:32.383455 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.6:23334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:32.384114 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.6:23334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:32.485273 2026] [core:error] [pid 3085402:tid 3085402] (13)Permission denied: [client 216.73.216.199:10981] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/systemd/random-seed
[Thu Jul 30 12:32:32.577567 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.68:31554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:32.578194 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.68:31554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:32.787083 2026] [ssl:error] [pid 3085402:tid 3085402] (70014)End of file found: [client 216.73.216.199:10981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:32.853880 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.19:32694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:32.854537 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.19:32694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:33.086933 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.38:56958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:33.087582 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.38:56958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:33.724688 2026] [access_compat:error] [pid 3080065:tid 3080065] [client 125.176.202.122:59079] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:33.734146 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.10:30942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:33.734764 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.10:30942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:33.983721 2026] [ssl:error] [pid 3084598:tid 3084598] (EAI 2)Name or service not known: [client 144.76.19.72:18724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:33.983753 2026] [ssl:error] [pid 3084598:tid 3084598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:34.016204 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.20:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:34.016912 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.20:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:34.041285 2026] [ssl:error] [pid 3083308:tid 3083308] (EAI 2)Name or service not known: [client 144.76.19.72:18726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:34.041326 2026] [ssl:error] [pid 3083308:tid 3083308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:34.209520 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.29:38820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:34.210146 2026] [authz_core:error] [pid 3084742:tid 3084742] [client 57.141.0.29:38820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:34.483473 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.40:30516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:34.484560 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.40:30516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:35.064474 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.1:24260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:35.065163 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.1:24260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:35.177596 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.35:34122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:35.178791 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.35:34122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:35.211805 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.43:46920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:35.212447 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.43:46920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:35.514559 2026] [ssl:error] [pid 3072617:tid 3072617] (70014)End of file found: [client 216.73.216.199:23071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:35.643783 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.61:30266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:35.644481 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.61:30266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:35.768427 2026] [security2:error] [pid 3079469:tid 3079469] [client 119.91.20.139:42360] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "ams2U-ilL0SoevDAG8pOVAAAAEA"], referer: http://saturnsports.co.uk
[Thu Jul 30 12:32:36.177902 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.22:44626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:36.178539 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.22:44626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:36.359484 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.2:26512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:36.360141 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.2:26512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:36.378104 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.47:54156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:36.378721 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.47:54156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:36.551440 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.40:30546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:36.552078 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.40:30546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:36.714409 2026] [ssl:error] [pid 3081199:tid 3081199] (70014)End of file found: [client 216.73.216.199:33001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:36.856633 2026] [lsapi:warn] [pid 3068195:tid 3068195] [client 122.180.21.11:59957] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:32:37.099029 2026] [ssl:error] [pid 3081293:tid 3081293] (EAI 2)Name or service not known: [client 144.76.19.72:18732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:37.099085 2026] [ssl:error] [pid 3081293:tid 3081293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:37.154642 2026] [ssl:error] [pid 3083308:tid 3083308] (EAI 2)Name or service not known: [client 144.76.19.72:18744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:37.154686 2026] [ssl:error] [pid 3083308:tid 3083308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:37.406702 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.2:26522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:37.407340 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.2:26522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:37.819931 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.35:34134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:37.820580 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.35:34134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:37.868985 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.14:62582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:37.869700 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.14:62582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:38.519489 2026] [core:error] [pid 3079101:tid 3079101] (13)Permission denied: [client 216.73.216.199:50591] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu6/driver/cpu5/crash_notes
[Thu Jul 30 12:32:38.820152 2026] [core:error] [pid 3079101:tid 3079101] (13)Permission denied: [client 216.73.216.199:50591] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu5/driver/cpu6/crash_notes
[Thu Jul 30 12:32:38.900937 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.68:30686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:38.901578 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.68:30686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:39.101552 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.23:45304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:39.102193 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.23:45304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:39.337052 2026] [security2:error] [pid 3074543:tid 3074543] [client 47.128.34.21:44528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "ams2V9WU-I6qbWT5sw3J-AAAAAM"]
[Thu Jul 30 12:32:39.340357 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.4:43254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:39.340978 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.4:43254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:39.488834 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.15:25250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:39.489459 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.15:25250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:39.787988 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.13:27070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:39.788620 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.13:27070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:39.947777 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.11:48040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:39.948407 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.11:48040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:40.212576 2026] [ssl:error] [pid 3085402:tid 3085402] (EAI 2)Name or service not known: [client 144.76.19.72:34054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:40.212615 2026] [ssl:error] [pid 3085402:tid 3085402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:40.265971 2026] [ssl:error] [pid 3081293:tid 3081293] (EAI 2)Name or service not known: [client 144.76.19.72:34062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:40.266003 2026] [ssl:error] [pid 3081293:tid 3081293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:40.325825 2026] [core:error] [pid 3079101:tid 3079101] (13)Permission denied: [client 216.73.216.199:50591] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/custom_divisor
[Thu Jul 30 12:32:40.542098 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.7:58370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:40.542721 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.7:58370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:40.544379 2026] [core:error] [pid 3083305:tid 3083305] [client 66.249.64.170:37832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:40.544417 2026] [core:error] [pid 3083305:tid 3083305] [client 66.249.64.170:37832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:40.612960 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.67:64668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:40.613596 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.67:64668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:40.626654 2026] [ssl:error] [pid 3079101:tid 3079101] (70014)End of file found: [client 216.73.216.199:50591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:40.951904 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.15:25262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:40.952558 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.15:25262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:41.266224 2026] [security2:error] [pid 3085660:tid 3085660] [client 47.128.34.21:46672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "ams2WWBkeW9hd4GCsDz_UwAAABU"]
[Thu Jul 30 12:32:41.316366 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.6:23338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:41.317013 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.6:23338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:41.672227 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.17:53522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:41.672857 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.17:53522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:42.235635 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.33:46288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:42.236260 2026] [authz_core:error] [pid 3073152:tid 3073152] [client 57.141.0.33:46288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:42.262401 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.47:23042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:42.263027 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.47:23042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:42.270885 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.42:41102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:42.271543 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.42:41102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:42.313436 2026] [ssl:error] [pid 3081072:tid 3081072] (70014)End of file found: [client 216.73.216.199:59382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:42.915339 2026] [ssl:error] [pid 3085660:tid 3085660] (70014)End of file found: [client 216.73.216.199:32409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:43.322622 2026] [ssl:error] [pid 3075860:tid 3075860] (EAI 2)Name or service not known: [client 144.76.19.72:34066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:43.322666 2026] [ssl:error] [pid 3075860:tid 3075860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:43.375684 2026] [ssl:error] [pid 3083305:tid 3083305] (EAI 2)Name or service not known: [client 144.76.19.72:34074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:43.375712 2026] [ssl:error] [pid 3083305:tid 3083305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:43.663895 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.69:32478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:43.664543 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.69:32478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:43.773156 2026] [authz_core:error] [pid 3083226:tid 3083226] [client 57.141.0.42:41118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:43.773786 2026] [authz_core:error] [pid 3083226:tid 3083226] [client 57.141.0.42:41118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:43.883659 2026] [authz_core:error] [pid 3069515:tid 3069515] [client 57.141.0.5:20322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:43.884291 2026] [authz_core:error] [pid 3069515:tid 3069515] [client 57.141.0.5:20322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:44.071895 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.13:21032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:44.072542 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.13:21032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:44.127694 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.7:58372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:44.128318 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.7:58372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:44.129477 2026] [security2:error] [pid 3075860:tid 3075860] [client 85.208.98.19:53228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/entretien-lunettes-de-soleil-k.html"] [unique_id "ams2XNmLn1D1aF4CLTkGBQAAABI"]
[Thu Jul 30 12:32:44.285316 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.56:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:44.285947 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.56:23208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:44.426887 2026] [ssl:error] [pid 3078561:tid 3078561] (70014)End of file found: [client 216.73.216.199:51999] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:44.771539 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 20.206.204.219:52591] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:32:45.393563 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.27:51226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:45.394236 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.27:51226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:45.458753 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.68:30690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:45.459402 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.68:30690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:45.524158 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.65:55184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:45.524806 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.65:55184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:45.573179 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.8:42042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:45.573807 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.8:42042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:45.770412 2026] [core:error] [pid 3073215:tid 3073215] [client 66.249.66.39:45648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:45.770452 2026] [core:error] [pid 3073215:tid 3073215] [client 66.249.66.39:45648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:45.771698 2026] [core:error] [pid 3083115:tid 3083115] [client 66.249.66.39:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:45.771717 2026] [core:error] [pid 3083115:tid 3083115] [client 66.249.66.39:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:46.430352 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:34088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:46.430383 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:46.549776 2026] [ssl:error] [pid 3067992:tid 3067992] (EAI 2)Name or service not known: [client 144.76.19.72:34098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:46.549822 2026] [ssl:error] [pid 3067992:tid 3067992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:46.686525 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.71:59830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:46.687168 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.71:59830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:46.715697 2026] [access_compat:error] [pid 3079469:tid 3079469] [client 125.176.202.122:59633] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:46.748317 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.47:23054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:46.748965 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.47:23054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:47.489475 2026] [lsapi:warn] [pid 3083226:tid 3083226] [client 122.180.21.11:60775] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:32:47.674356 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.47:23056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:47.674984 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.47:23056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:47.923612 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.56:24038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:47.924244 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.56:24038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:48.106197 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.38:39238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:48.106815 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.38:39238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:48.596914 2026] [security2:error] [pid 3081199:tid 3081199] [client 101.33.66.34:47472] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alism.com"] [uri "/"] [unique_id "ams2YBIuqxZuHBD2DnE8XQAAAB0"]
[Thu Jul 30 12:32:48.610438 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.67:59148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:48.611058 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.67:59148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:48.753945 2026] [authz_core:error] [pid 3083226:tid 3083226] [client 57.141.0.16:44396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:48.754576 2026] [authz_core:error] [pid 3083226:tid 3083226] [client 57.141.0.16:44396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:48.939995 2026] [core:error] [pid 3083303:tid 3083303] (13)Permission denied: [client 216.73.216.199:64252] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/alt-php72-error.log-20260727
[Thu Jul 30 12:32:49.193989 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.16:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:49.194662 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.16:44408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:49.308060 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.12:38920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:49.308780 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.12:38920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:49.451448 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.71:59846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:49.452156 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.71:59846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:49.481025 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.71:59852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:49.481667 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.71:59852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:49.549230 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 66.249.66.33:57100] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:32:49.552135 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 66.249.66.33:57100] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:32:49.606639 2026] [ssl:error] [pid 3081072:tid 3081072] (EAI 2)Name or service not known: [client 144.76.19.72:62936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:49.606664 2026] [ssl:error] [pid 3081072:tid 3081072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:49.659701 2026] [ssl:error] [pid 3067989:tid 3067989] (EAI 2)Name or service not known: [client 144.76.19.72:62944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:49.659731 2026] [ssl:error] [pid 3067989:tid 3067989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:50.129119 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.62:65002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:50.129744 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 57.141.0.62:65002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:50.143681 2026] [ssl:error] [pid 3083303:tid 3083303] (70014)End of file found: [client 216.73.216.199:64252] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:50.712348 2026] [core:error] [pid 3078561:tid 3078561] [client 66.249.66.194:42951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:50.712386 2026] [core:error] [pid 3078561:tid 3078561] [client 66.249.66.194:42951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:50.978788 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.15:53682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:50.979484 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.15:53682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:51.313468 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.60:24362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:51.314096 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.60:24362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:51.372673 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.50:61298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:51.373313 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.50:61298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:51.441108 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 178.117.202.181:47704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:51.441727 2026] [authz_core:error] [pid 3072617:tid 3072617] [client 178.117.202.181:47704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:51.564119 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.26:43536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:51.564761 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.26:43536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:51.602107 2026] [core:error] [pid 3072617:tid 3072617] [client 178.117.202.181:47704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apotheekcandidejacobs.be/?ved=2ahUKEwiE0sbFpvqVAxX6LPsDHaeLD-UQgU96BAgQEAw
[Thu Jul 30 12:32:51.602126 2026] [core:error] [pid 3072617:tid 3072617] [client 178.117.202.181:47704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.apotheekcandidejacobs.be/?ved=2ahUKEwiE0sbFpvqVAxX6LPsDHaeLD-UQgU96BAgQEAw
[Thu Jul 30 12:32:51.645627 2026] [authz_core:error] [pid 3082276:tid 3082276] [client 57.141.0.55:22216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:51.646281 2026] [authz_core:error] [pid 3082276:tid 3082276] [client 57.141.0.55:22216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:51.945836 2026] [ssl:error] [pid 3081072:tid 3081072] (70014)End of file found: [client 216.73.216.199:15210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:52.126623 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.45:31298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:52.127262 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.45:31298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:52.152633 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.52:33698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:52.153244 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.52:33698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:52.250783 2026] [core:error] [pid 3085660:tid 3085660] (13)Permission denied: [client 216.73.216.199:30610] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cron
[Thu Jul 30 12:32:52.551309 2026] [security2:error] [pid 3085660:tid 3085660] [client 216.73.216.199:30610] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php-fpm.conf"] [unique_id "ams2ZGBkeW9hd4GCsDz_WQAAABU"]
[Thu Jul 30 12:32:52.551571 2026] [security2:error] [pid 3085660:tid 3085660] [client 216.73.216.199:30610] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php-fpm.conf"] [unique_id "ams2ZGBkeW9hd4GCsDz_WQAAABU"]
[Thu Jul 30 12:32:52.551783 2026] [security2:error] [pid 3085660:tid 3085660] [client 216.73.216.199:30610] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php-fpm.conf"] [unique_id "ams2ZGBkeW9hd4GCsDz_WQAAABU"]
[Thu Jul 30 12:32:52.742456 2026] [ssl:error] [pid 3073215:tid 3073215] (EAI 2)Name or service not known: [client 144.76.19.72:62946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:52.742491 2026] [ssl:error] [pid 3073215:tid 3073215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:52.797329 2026] [ssl:error] [pid 3073152:tid 3073152] (EAI 2)Name or service not known: [client 144.76.19.72:62948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:52.797364 2026] [ssl:error] [pid 3073152:tid 3073152] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:52.853350 2026] [ssl:error] [pid 3085660:tid 3085660] (70014)End of file found: [client 216.73.216.199:30610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:52.976367 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.24:50690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:52.977023 2026] [authz_core:error] [pid 3079191:tid 3079191] [client 57.141.0.24:50690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:53.148275 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.45:31304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:53.148901 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.45:31304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:53.661703 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.18:46194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:53.662331 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.18:46194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:53.975012 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.65:35228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:53.975669 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.65:35228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:53.996940 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.33:28910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:53.997563 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.33:28910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:54.274738 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.63:40574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:54.275370 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.63:40574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:54.592507 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.14:58834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:54.593155 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.14:58834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:54.750330 2026] [access_compat:error] [pid 3079469:tid 3079469] [client 125.176.202.122:59896] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:54.837657 2026] [core:error] [pid 3082324:tid 3082324] [client 74.7.241.138:57252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:54.837681 2026] [core:error] [pid 3082324:tid 3082324] [client 74.7.241.138:57252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:32:55.025401 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.25:54446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:55.026024 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.25:54446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:55.298444 2026] [access_compat:error] [pid 3079143:tid 3079143] [client 45.158.164.139:46136] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:32:55.382204 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.63:40576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:55.382821 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.63:40576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:55.851393 2026] [ssl:error] [pid 3083115:tid 3083115] (EAI 2)Name or service not known: [client 144.76.19.72:62962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:55.851421 2026] [ssl:error] [pid 3083115:tid 3083115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:55.907458 2026] [ssl:error] [pid 3075860:tid 3075860] (EAI 2)Name or service not known: [client 144.76.19.72:62978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:55.907482 2026] [ssl:error] [pid 3075860:tid 3075860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:55.991915 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.28:38726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:55.992548 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.28:38726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:56.321737 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.15:27928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:56.322370 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.15:27928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:56.584169 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.48:64318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:56.584798 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.48:64318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:56.611363 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.52:33702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:56.612015 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.52:33702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:56.647117 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.18:46204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:56.647742 2026] [authz_core:error] [pid 3075860:tid 3075860] [client 57.141.0.18:46204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:56.779732 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 66.249.66.33:44521] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:32:56.782447 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 66.249.66.33:44521] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:32:57.230568 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.58:60878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:57.231243 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.58:60878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:57.662759 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.1:33478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:57.663392 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.1:33478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:57.857377 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.4:50112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:57.858002 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.4:50112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:58.038541 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.4:50114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:58.039170 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.4:50114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:58.140557 2026] [lsapi:warn] [pid 3082819:tid 3082819] [client 122.180.21.11:61550] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:32:58.274751 2026] [ssl:error] [pid 3081294:tid 3081294] (70014)End of file found: [client 216.73.216.199:57730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:32:58.960608 2026] [ssl:error] [pid 3083303:tid 3083303] (EAI 2)Name or service not known: [client 144.76.19.72:62986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:58.960641 2026] [ssl:error] [pid 3083303:tid 3083303] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:59.015872 2026] [ssl:error] [pid 3085660:tid 3085660] (EAI 2)Name or service not known: [client 144.76.19.72:62994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:32:59.015923 2026] [ssl:error] [pid 3085660:tid 3085660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:32:59.295765 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.50:61300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:59.296409 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.50:61300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:59.537192 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.65:35236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:59.537818 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.65:35236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:59.571565 2026] [access_compat:error] [pid 3078511:tid 3078511] [client 125.176.202.122:60169] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:32:59.807892 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.58:60894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:59.808536 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.58:60894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:32:59.863328 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.16:28540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:32:59.863971 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.16:28540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:00.328729 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.13:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:00.329352 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.13:22370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:00.647717 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.43:21716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:00.648340 2026] [authz_core:error] [pid 3083301:tid 3083301] [client 57.141.0.43:21716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:01.036823 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.28:38728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:01.037465 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.28:38728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:01.476438 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.37:42040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:01.477077 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.37:42040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:01.488354 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.16:28560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:01.488970 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.16:28560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:01.514681 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.8:49584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:01.515305 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.8:49584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:01.998979 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.42:56142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:01.999626 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.42:56142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:02.069582 2026] [ssl:error] [pid 3083308:tid 3083308] (EAI 2)Name or service not known: [client 144.76.19.72:36116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:02.069608 2026] [ssl:error] [pid 3083308:tid 3083308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:02.127083 2026] [ssl:error] [pid 3067989:tid 3067989] (EAI 2)Name or service not known: [client 144.76.19.72:36132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:02.127117 2026] [ssl:error] [pid 3067989:tid 3067989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:02.496329 2026] [ssl:error] [pid 3075978:tid 3075978] (70014)End of file found: [client 216.73.216.199:1085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:02.779188 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.25:54462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:02.780154 2026] [authz_core:error] [pid 3083303:tid 3083303] [client 57.141.0.25:54462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:02.954210 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.67:63096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:02.954838 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.67:63096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:03.041220 2026] [core:error] [pid 3069515:tid 3069515] [client 66.249.64.1:64954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:03.041248 2026] [core:error] [pid 3069515:tid 3069515] [client 66.249.64.1:64954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:03.125267 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.22:61260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:03.125887 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.22:61260] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:03.397493 2026] [ssl:error] [pid 3083305:tid 3083305] (70014)End of file found: [client 216.73.216.199:58229] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:03.704321 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 20.206.204.219:56116] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:33:03.895922 2026] [ssl:error] [pid 3079141:tid 3079141] (70014)End of file found: [client 216.73.216.199:35161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:04.052248 2026] [authz_core:error] [pid 3069515:tid 3069515] [client 57.141.0.51:25370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:04.052888 2026] [authz_core:error] [pid 3069515:tid 3069515] [client 57.141.0.51:25370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:04.093959 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.60:46900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:04.094601 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.60:46900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:04.095121 2026] [security2:error] [pid 3081072:tid 3081072] [client 114.119.135.136:42661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577750400/request_format~html/cat_ids~102"] [unique_id "ams2cHUUdWypNd7FMdU09gAAAAo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~31-12-2019
[Thu Jul 30 12:33:04.125006 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.29:22292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:04.125638 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.29:22292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:04.746253 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.24:63542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:04.746878 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.24:63542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:04.766237 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.70:31192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:04.766856 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.70:31192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:04.872697 2026] [security2:error] [pid 3079469:tid 3079469] [client 163.7.16.15:24359] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2cOilL0SoevDAG8pOXgAAAEA"]
[Thu Jul 30 12:33:04.872748 2026] [security2:error] [pid 3079469:tid 3079469] [client 163.7.16.15:24359] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2cOilL0SoevDAG8pOXgAAAEA"]
[Thu Jul 30 12:33:04.873011 2026] [security2:error] [pid 3079469:tid 3079469] [client 163.7.16.15:24359] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2cOilL0SoevDAG8pOXgAAAEA"]
[Thu Jul 30 12:33:04.949804 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.65:58028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:04.950427 2026] [authz_core:error] [pid 3078560:tid 3078560] [client 57.141.0.65:58028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:05.183592 2026] [ssl:error] [pid 3078561:tid 3078561] (EAI 2)Name or service not known: [client 144.76.19.72:36142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:05.183642 2026] [ssl:error] [pid 3078561:tid 3078561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:05.236418 2026] [ssl:error] [pid 3081292:tid 3081292] (EAI 2)Name or service not known: [client 144.76.19.72:36144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:05.236454 2026] [ssl:error] [pid 3081292:tid 3081292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:05.295570 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.40:24250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:05.296195 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.40:24250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:05.828874 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.11:26364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:05.829552 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.11:26364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:06.136712 2026] [access_compat:error] [pid 3068195:tid 3068195] [client 125.176.202.122:60432] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:06.258289 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.48:51510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:06.258913 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.48:51510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:06.467307 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.11:26370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:06.467934 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.11:26370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:06.502506 2026] [security2:error] [pid 3079469:tid 3079469] [client 123.21.190.151:46138] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2cuilL0SoevDAG8pOXwAAAEA"]
[Thu Jul 30 12:33:06.502574 2026] [security2:error] [pid 3079469:tid 3079469] [client 123.21.190.151:46138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2cuilL0SoevDAG8pOXwAAAEA"]
[Thu Jul 30 12:33:06.502826 2026] [security2:error] [pid 3079469:tid 3079469] [client 123.21.190.151:46138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2cuilL0SoevDAG8pOXwAAAEA"]
[Thu Jul 30 12:33:06.634761 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.50:50880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:06.635390 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.50:50880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:06.851475 2026] [security2:error] [pid 3078561:tid 3078561] [client 114.119.135.136:42665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577750400/request_format~html/cat_ids~102"] [unique_id "ams2cpwG2X6nYFG18t1K_gAAACg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~31-12-2019
[Thu Jul 30 12:33:07.013654 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.45:28238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:07.014278 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.45:28238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:07.624466 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.69:53326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:07.625160 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.69:53326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:07.751169 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.37:42048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:07.751792 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.37:42048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:07.789799 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.28:42026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:07.790463 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.28:42026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:08.054947 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.63:65490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:08.055649 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.63:65490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:08.293185 2026] [ssl:error] [pid 3083304:tid 3083304] (EAI 2)Name or service not known: [client 144.76.19.72:36150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:08.293225 2026] [ssl:error] [pid 3083304:tid 3083304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:08.348422 2026] [ssl:error] [pid 3081288:tid 3081288] (EAI 2)Name or service not known: [client 144.76.19.72:36160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:08.348458 2026] [ssl:error] [pid 3081288:tid 3081288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:08.568947 2026] [lsapi:warn] [pid 3082377:tid 3082377] [client 122.180.21.11:62201] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:33:08.909480 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 66.249.66.35:59652] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:33:08.912298 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 66.249.66.35:59652] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:33:09.060050 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.16:45952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:09.060688 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.16:45952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:09.405873 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.67:45822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:09.406998 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.67:45822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:09.472227 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.60:46908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:09.472859 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.60:46908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:09.671246 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.5:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:09.671873 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.5:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:10.119474 2026] [security2:error] [pid 3078561:tid 3078561] [client 86.245.237.75:43290] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2dpwG2X6nYFG18t1LAAAAACg"]
[Thu Jul 30 12:33:10.119542 2026] [security2:error] [pid 3078561:tid 3078561] [client 86.245.237.75:43290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2dpwG2X6nYFG18t1LAAAAACg"]
[Thu Jul 30 12:33:10.119784 2026] [security2:error] [pid 3078561:tid 3078561] [client 86.245.237.75:43290] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2dpwG2X6nYFG18t1LAAAAACg"]
[Thu Jul 30 12:33:10.273589 2026] [security2:error] [pid 3081288:tid 3081288] [client 185.191.171.16:51974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,107.0/prev_next,prev.html"] [unique_id "ams2dmirx_MBLbgJlMXYkAAAACw"]
[Thu Jul 30 12:33:10.360709 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.55:45430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:10.361336 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.55:45430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:10.648095 2026] [ssl:error] [pid 3067992:tid 3067992] (70014)End of file found: [client 216.73.216.199:5493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:10.670314 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.44:36608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:10.670938 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.44:36608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:10.730307 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.24:63558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:10.730959 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.24:63558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:10.948771 2026] [ssl:error] [pid 3083225:tid 3083225] (70014)End of file found: [client 216.73.216.199:33010] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:11.207492 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.65:58032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:11.208157 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.65:58032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:11.247448 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.49:41114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:11.248121 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.49:41114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:11.405365 2026] [ssl:error] [pid 3081288:tid 3081288] (EAI 2)Name or service not known: [client 144.76.19.72:31968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:11.405392 2026] [ssl:error] [pid 3081288:tid 3081288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:11.458105 2026] [ssl:error] [pid 3081292:tid 3081292] (EAI 2)Name or service not known: [client 144.76.19.72:31982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:11.458128 2026] [ssl:error] [pid 3081292:tid 3081292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:11.608129 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.58:47546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:11.608791 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.58:47546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:11.650619 2026] [ssl:error] [pid 3083308:tid 3083308] (70014)End of file found: [client 216.73.216.199:21831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:11.683826 2026] [security2:error] [pid 3078511:tid 3078511] [client 170.106.187.106:32818] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "ams2d2aZb_1POQETO94qLAAAAAQ"]
[Thu Jul 30 12:33:12.067270 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 20.206.204.219:57798] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:33:12.355665 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.52:53284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:12.356287 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.52:53284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:12.748023 2026] [access_compat:error] [pid 3068195:tid 3068195] [client 125.176.202.122:60704] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:12.802543 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.6:30322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:12.803165 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.6:30322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:12.944400 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.4:31248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:12.945122 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.4:31248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:13.497882 2026] [security2:error] [pid 3083115:tid 3083115] [client 43.153.87.54:33280] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/Valid.Ext"] [unique_id "ams2eeIkb7w0yOz5YPxgIAAAACE"]
[Thu Jul 30 12:33:13.621208 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.28:58632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:13.621832 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.28:58632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:13.658891 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.55:63028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:13.659523 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.55:63028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:14.164138 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.16:45958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:14.164977 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.16:45958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:14.212096 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.10:61514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:14.212796 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.10:61514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:14.282957 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.45:28258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:14.283592 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.45:28258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:14.342890 2026] [security2:error] [pid 3079193:tid 3079193] [client 170.106.187.106:49554] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "ams2eq5yKleAOdJPc5MS9wAAADg"], referer: http://maisongerlyn.be
[Thu Jul 30 12:33:14.566507 2026] [ssl:error] [pid 3078606:tid 3078606] (EAI 2)Name or service not known: [client 144.76.19.72:31994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:14.566540 2026] [ssl:error] [pid 3078606:tid 3078606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:14.622901 2026] [ssl:error] [pid 3084598:tid 3084598] (EAI 2)Name or service not known: [client 144.76.19.72:32008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:14.622938 2026] [ssl:error] [pid 3084598:tid 3084598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:15.262382 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.27:43770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:15.263007 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.27:43770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:15.304597 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.13:37452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:15.305239 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.13:37452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:15.328024 2026] [authz_core:error] [pid 3083307:tid 3083307] [client 57.141.0.20:60538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:15.328656 2026] [authz_core:error] [pid 3083307:tid 3083307] [client 57.141.0.20:60538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:15.613289 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.45:28270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:15.613917 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.45:28270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:15.874917 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.52:53292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:15.875565 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.52:53292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:16.524836 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.7:50064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:16.525474 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.7:50064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:17.272732 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.23:56678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:17.273367 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.23:56678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:17.675424 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.25:47254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:17.676044 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.25:47254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:17.730237 2026] [ssl:error] [pid 3083302:tid 3083302] (EAI 2)Name or service not known: [client 144.76.19.72:32020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:17.730273 2026] [ssl:error] [pid 3083302:tid 3083302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:17.784372 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:32022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:17.784404 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:17.927013 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.29:55692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:17.927652 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.29:55692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:18.055451 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.43:29812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:18.056123 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.43:29812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:18.254359 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.63:43206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:18.254989 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.63:43206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:18.378178 2026] [ssl:error] [pid 3067989:tid 3067989] (70014)End of file found: [client 216.73.216.199:3494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:18.570135 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.65:57484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:18.570755 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.65:57484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:18.658668 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.3:34866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:18.659295 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.3:34866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:18.984797 2026] [ssl:error] [pid 3083307:tid 3083307] (70014)End of file found: [client 216.73.216.199:6203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:19.154687 2026] [lsapi:warn] [pid 3081199:tid 3081199] [client 122.180.21.11:62847] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:33:19.167218 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.25:47258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:19.167847 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.25:47258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:19.174801 2026] [security2:error] [pid 3082819:tid 3082819] [client 185.191.171.14:10472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/u-pull-it-albuquerque-inventory"] [unique_id "ams2f9ehm7EGLUfupDUbJgAAAAA"]
[Thu Jul 30 12:33:19.332819 2026] [access_compat:error] [pid 3083302:tid 3083302] [client 125.176.202.122:60970] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:19.849355 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.34:57010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:19.849986 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.34:57010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:20.187410 2026] [core:error] [pid 3082819:tid 3082819] (13)Permission denied: [client 216.73.216.199:54495] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:33:20.341096 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.48:54690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:20.341726 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.48:54690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:20.488158 2026] [ssl:error] [pid 3082819:tid 3082819] (70014)End of file found: [client 216.73.216.199:54495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:20.608058 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.12:65184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:20.608693 2026] [authz_core:error] [pid 3079101:tid 3079101] [client 57.141.0.12:65184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:20.830967 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.20:39310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:20.831605 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.20:39310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:20.836714 2026] [ssl:error] [pid 3082378:tid 3082378] (EAI 2)Name or service not known: [client 144.76.19.72:30570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:20.836741 2026] [ssl:error] [pid 3082378:tid 3082378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:20.888483 2026] [ssl:error] [pid 3079101:tid 3079101] (EAI 2)Name or service not known: [client 144.76.19.72:30574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:20.888513 2026] [ssl:error] [pid 3079101:tid 3079101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:21.117970 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.3:30766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:21.118612 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.3:30766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:21.418666 2026] [authz_core:error] [pid 3082378:tid 3082378] [client 57.141.0.45:26818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:21.419301 2026] [authz_core:error] [pid 3082378:tid 3082378] [client 57.141.0.45:26818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:21.630722 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 66.249.66.33:55667] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:33:21.633551 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 66.249.66.33:55667] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:33:21.796473 2026] [authz_core:error] [pid 3082378:tid 3082378] [client 57.141.0.5:43532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:21.797102 2026] [authz_core:error] [pid 3082378:tid 3082378] [client 57.141.0.5:43532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:21.893628 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.32:38478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:21.894255 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.32:38478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:22.346157 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.19:50852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:22.346782 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.19:50852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:22.348980 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.68:34910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:22.349664 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.68:34910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:23.604731 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.44:46414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:23.605412 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.44:46414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:23.760899 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.70:58166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:23.761528 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.70:58166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:23.762292 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.39:22820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:23.762938 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.39:22820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:23.923312 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.60:50942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:23.923938 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.60:50942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:23.999332 2026] [ssl:error] [pid 3079143:tid 3079143] (EAI 2)Name or service not known: [client 144.76.19.72:30578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:23.999362 2026] [ssl:error] [pid 3079143:tid 3079143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:24.055539 2026] [ssl:error] [pid 3081294:tid 3081294] (EAI 2)Name or service not known: [client 144.76.19.72:30584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:24.055564 2026] [ssl:error] [pid 3081294:tid 3081294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:24.200939 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.51:57388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:24.201608 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.51:57388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:24.431627 2026] [core:error] [pid 3083115:tid 3083115] (13)Permission denied: [client 216.73.216.199:53062] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/uartclk
[Thu Jul 30 12:33:24.567375 2026] [core:error] [pid 3079193:tid 3079193] [client 57.141.0.23:56690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:24.567401 2026] [core:error] [pid 3079193:tid 3079193] [client 57.141.0.23:56690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:24.796451 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.38:43154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:24.797141 2026] [authz_core:error] [pid 3081294:tid 3081294] [client 57.141.0.38:43154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:25.034900 2026] [ssl:error] [pid 3083115:tid 3083115] (70014)End of file found: [client 216.73.216.199:53062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:25.282310 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.9:37032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:25.282940 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.9:37032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:25.574711 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.54:46690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:25.575338 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.54:46690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:26.014267 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.71:30742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:26.014887 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.71:30742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:26.186781 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.9:37046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:26.187407 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.9:37046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:26.336946 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.59:60522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:26.337578 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.59:60522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:26.627760 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.10:38908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:26.628385 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.10:38908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:26.879991 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.54:46694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:26.880626 2026] [authz_core:error] [pid 3085660:tid 3085660] [client 57.141.0.54:46694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:27.060274 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.33:60890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:27.060902 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.33:60890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:27.111671 2026] [ssl:error] [pid 3087912:tid 3087912] (EAI 2)Name or service not known: [client 144.76.19.72:30596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:27.111703 2026] [ssl:error] [pid 3087912:tid 3087912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:27.146815 2026] [ssl:error] [pid 3083302:tid 3083302] (70014)End of file found: [client 216.73.216.199:22006] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:27.163968 2026] [ssl:error] [pid 3079192:tid 3079192] (EAI 2)Name or service not known: [client 144.76.19.72:30598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:27.164013 2026] [ssl:error] [pid 3079192:tid 3079192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:27.208125 2026] [access_compat:error] [pid 3081199:tid 3081199] [client 125.176.202.122:61247] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:28.140911 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.66:36976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:28.141596 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.66:36976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:28.210403 2026] [security2:error] [pid 3079193:tid 3079193] [client 43.167.245.18:52322] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "ams2iK5yKleAOdJPc5MS_gAAADg"]
[Thu Jul 30 12:33:28.355322 2026] [ssl:error] [pid 3082526:tid 3082526] (70014)End of file found: [client 216.73.216.199:44224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:28.639022 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.42:20010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:28.639660 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.42:20010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:28.656227 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.22:29654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:28.656901 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.22:29654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:28.694249 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.66.167:42806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:28.694272 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.66.167:42806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:28.910614 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.45:54110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:28.911611 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.45:54110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:29.058235 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.59:60528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:29.058868 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.59:60528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:29.455265 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.50:23620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:29.455888 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.50:23620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:29.744841 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.37:55164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:29.745481 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.37:55164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:29.915769 2026] [lsapi:warn] [pid 3081295:tid 3081295] [client 122.180.21.11:63491] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:33:30.221514 2026] [ssl:error] [pid 3083225:tid 3083225] (EAI 2)Name or service not known: [client 144.76.19.72:30452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:30.221539 2026] [ssl:error] [pid 3083225:tid 3083225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:30.277933 2026] [ssl:error] [pid 3088195:tid 3088195] (EAI 2)Name or service not known: [client 144.76.19.72:30456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:30.277975 2026] [ssl:error] [pid 3088195:tid 3088195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:30.633438 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.1:45890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:30.634076 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.1:45890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:30.801634 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.64:25792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:30.802318 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.64:25792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:31.345906 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.23:23204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:31.346540 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.23:23204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:31.601213 2026] [core:error] [pid 3081295:tid 3081295] [client 66.249.66.194:60274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:31.601241 2026] [core:error] [pid 3081295:tid 3081295] [client 66.249.66.194:60274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:31.645565 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.26:24756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:31.646284 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.26:24756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:31.828763 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.50:36418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:31.829386 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.50:36418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:32.060773 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.46:52050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:32.061414 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.46:52050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:32.264234 2026] [ssl:error] [pid 3081288:tid 3081288] (70014)End of file found: [client 216.73.216.199:64673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:32.600761 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.28:49678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:32.601447 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.28:49678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:32.753760 2026] [ssl:error] [pid 3068195:tid 3068195] (70014)End of file found: [client 216.73.216.199:41838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:33.127480 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.21:52882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:33.128117 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.21:52882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:33.211915 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.43:45732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:33.212542 2026] [authz_core:error] [pid 3079469:tid 3079469] [client 57.141.0.43:45732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:33.333152 2026] [ssl:error] [pid 3079192:tid 3079192] (EAI 2)Name or service not known: [client 144.76.19.72:30468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:33.333178 2026] [ssl:error] [pid 3079192:tid 3079192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:33.387035 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.49:23086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:33.387675 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 57.141.0.49:23086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:33.389103 2026] [ssl:error] [pid 3081199:tid 3081199] (EAI 2)Name or service not known: [client 144.76.19.72:30476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:33.389143 2026] [ssl:error] [pid 3081199:tid 3081199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:33.791917 2026] [access_compat:error] [pid 3081072:tid 3081072] [client 125.176.202.122:61560] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:33.869924 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.17:28142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:33.870554 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.17:28142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:34.389907 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.26:54504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:34.390546 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.26:54504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:34.495740 2026] [security2:error] [pid 3079469:tid 3079469] [client 47.128.20.145:19948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edmundwild.co.uk"] [uri "/robots.txt"] [unique_id "ams2juilL0SoevDAG8pOawAAAEA"]
[Thu Jul 30 12:33:34.498666 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.71:45276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:34.499540 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.71:45276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:34.919713 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.14:52168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:34.920336 2026] [authz_core:error] [pid 3078511:tid 3078511] [client 57.141.0.14:52168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:34.979667 2026] [ssl:error] [pid 3087912:tid 3087912] (70014)End of file found: [client 216.73.216.199:15420] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:35.085814 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.37:46220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:35.086473 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.37:46220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:35.410153 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.61:20330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:35.410779 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.61:20330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:35.670652 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.52:35368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:35.671271 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.52:35368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:36.308952 2026] [security2:error] [pid 3079143:tid 3079143] [client 74.7.227.165:35562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.saturnsports.co.uk"] [uri "/"] [unique_id "ams2kFuvG5M-ASLiStcN1wAAAC8"]
[Thu Jul 30 12:33:36.672681 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.58:52556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:36.673423 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.58:52556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:36.702291 2026] [ssl:error] [pid 3083225:tid 3083225] (EAI 2)Name or service not known: [client 144.76.19.72:30478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:36.702321 2026] [ssl:error] [pid 3083225:tid 3083225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:36.799687 2026] [ssl:error] [pid 3079192:tid 3079192] (EAI 2)Name or service not known: [client 144.76.19.72:30492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:36.799720 2026] [ssl:error] [pid 3079192:tid 3079192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:36.899190 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.45:25148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:36.899811 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.45:25148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:37.228424 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.48:44284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:37.229148 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.48:44284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:37.661188 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.23:39692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:37.661807 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.23:39692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:37.687663 2026] [ssl:error] [pid 3083115:tid 3083115] (70014)End of file found: [client 216.73.216.199:14869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:37.708692 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.4:35880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:37.709362 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.4:35880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:37.713513 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.68:64728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:37.714124 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.68:64728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:38.094144 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.10:57400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:38.094764 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.10:57400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:38.429104 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.27:57826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:38.429734 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.27:57826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:38.599222 2026] [ssl:error] [pid 3088548:tid 3088548] (70014)End of file found: [client 216.73.216.199:41791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:39.374576 2026] [authz_core:error] [pid 3088677:tid 3088677] [client 57.141.0.34:43226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:39.375242 2026] [authz_core:error] [pid 3088677:tid 3088677] [client 57.141.0.34:43226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:39.467034 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.5:41574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:39.467747 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.5:41574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:39.595232 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.54:41338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:39.595857 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.54:41338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:39.776136 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.41:39418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:39.776809 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.41:39418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:39.856292 2026] [ssl:error] [pid 3084598:tid 3084598] (EAI 2)Name or service not known: [client 144.76.19.72:57918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:39.856318 2026] [ssl:error] [pid 3084598:tid 3084598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:39.913839 2026] [ssl:error] [pid 3081199:tid 3081199] (EAI 2)Name or service not known: [client 144.76.19.72:57930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:39.913868 2026] [ssl:error] [pid 3081199:tid 3081199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:39.995634 2026] [access_compat:error] [pid 3074543:tid 3074543] [client 125.176.202.122:61780] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:40.025279 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.64:25060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:40.025903 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.64:25060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:40.305147 2026] [security2:error] [pid 3075978:tid 3075978] [client 216.73.216.199:11012] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/agent360-install.log"] [unique_id "ams2lDbE97VlTlQYp8NttQAAABc"]
[Thu Jul 30 12:33:40.305436 2026] [security2:error] [pid 3075978:tid 3075978] [client 216.73.216.199:11012] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/agent360-install.log"] [unique_id "ams2lDbE97VlTlQYp8NttQAAABc"]
[Thu Jul 30 12:33:40.305650 2026] [security2:error] [pid 3075978:tid 3075978] [client 216.73.216.199:11012] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/agent360-install.log"] [unique_id "ams2lDbE97VlTlQYp8NttQAAABc"]
[Thu Jul 30 12:33:40.417444 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.17:56872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:40.418080 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.17:56872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:40.462145 2026] [lsapi:warn] [pid 3079100:tid 3079100] [client 122.180.21.11:64142] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:33:40.702792 2026] [core:error] [pid 3075978:tid 3075978] (13)Permission denied: [client 216.73.216.199:11012] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/min_partial
[Thu Jul 30 12:33:41.332147 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.61:61122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:41.332831 2026] [authz_core:error] [pid 3081295:tid 3081295] [client 57.141.0.61:61122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:41.378010 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.41:39444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:41.378644 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.41:39444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:41.457326 2026] [core:error] [pid 3075978:tid 3075978] (13)Permission denied: [client 216.73.216.199:11012] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/feature_flags
[Thu Jul 30 12:33:41.484388 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.67:34992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:41.485088 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.67:34992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:41.758111 2026] [ssl:error] [pid 3075978:tid 3075978] (70014)End of file found: [client 216.73.216.199:11012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:41.938064 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.18:39882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:41.938694 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.18:39882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:42.298128 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.35:41616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:42.298750 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.35:41616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:42.312577 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.11:64156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:42.313254 2026] [authz_core:error] [pid 3085402:tid 3085402] [client 57.141.0.11:64156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:42.763202 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.15:46486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:42.763832 2026] [authz_core:error] [pid 3067989:tid 3067989] [client 57.141.0.15:46486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:42.969562 2026] [ssl:error] [pid 3087847:tid 3087847] (EAI 2)Name or service not known: [client 144.76.19.72:57942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:42.969601 2026] [ssl:error] [pid 3087847:tid 3087847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:43.027407 2026] [ssl:error] [pid 3082526:tid 3082526] (EAI 2)Name or service not known: [client 144.76.19.72:57954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:43.027444 2026] [ssl:error] [pid 3082526:tid 3082526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:43.156686 2026] [core:error] [pid 3087789:tid 3087789] (13)Permission denied: [client 216.73.216.199:50986] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:33:43.768703 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.67:35006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:43.769330 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.67:35006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:43.866722 2026] [core:error] [pid 3087789:tid 3087789] (13)Permission denied: [client 216.73.216.199:50986] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:33:43.910088 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.42:31896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:43.910714 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.42:31896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:44.177440 2026] [ssl:error] [pid 3087789:tid 3087789] (70014)End of file found: [client 216.73.216.199:50986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:44.218934 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.64.170:47281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:44.218958 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.64.170:47281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:44.582869 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.70:30354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:44.583495 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.70:30354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:44.728597 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.47:39246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:44.729216 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.47:39246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:44.790226 2026] [authz_core:error] [pid 3088549:tid 3088549] [client 57.141.0.58:51578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:44.790842 2026] [authz_core:error] [pid 3088549:tid 3088549] [client 57.141.0.58:51578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:45.212579 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.32:53024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:45.213239 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.32:53024] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:45.383763 2026] [ssl:error] [pid 3079193:tid 3079193] (70014)End of file found: [client 216.73.216.199:9374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:45.419751 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.51:26444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:45.420370 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.51:26444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:45.542053 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.46:41354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:45.542697 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.46:41354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:46.081619 2026] [ssl:error] [pid 3081072:tid 3081072] (EAI 2)Name or service not known: [client 144.76.19.72:57966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:46.081651 2026] [ssl:error] [pid 3081072:tid 3081072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:46.133411 2026] [ssl:error] [pid 3088985:tid 3088985] (EAI 2)Name or service not known: [client 144.76.19.72:57972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:46.133452 2026] [ssl:error] [pid 3088985:tid 3088985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:46.193391 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.55:56188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:46.194022 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.55:56188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:46.608091 2026] [access_compat:error] [pid 3088677:tid 3088677] [client 125.176.202.122:62100] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:46.743564 2026] [authz_core:error] [pid 3088985:tid 3088985] [client 57.141.0.41:38316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:46.744196 2026] [authz_core:error] [pid 3088985:tid 3088985] [client 57.141.0.41:38316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:46.789478 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.56:29458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:46.790115 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.56:29458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:47.354455 2026] [authz_core:error] [pid 3088985:tid 3088985] [client 57.141.0.58:51586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:47.355095 2026] [authz_core:error] [pid 3088985:tid 3088985] [client 57.141.0.58:51586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:47.507872 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.26:63884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:47.508505 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.26:63884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:47.523534 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.30:57848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:47.524169 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.30:57848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:47.796568 2026] [core:error] [pid 3088950:tid 3088950] (13)Permission denied: [client 216.73.216.199:58479] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/physical_node/driver/unbind
[Thu Jul 30 12:33:48.327893 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.63:41954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:48.328524 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.63:41954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:48.395093 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.34:43304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:48.395720 2026] [authz_core:error] [pid 3081199:tid 3081199] [client 57.141.0.34:43304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:48.703518 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.23:23016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:48.704183 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.23:23016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:48.845120 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.43:21874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:48.845738 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.43:21874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:49.002671 2026] [core:error] [pid 3088950:tid 3088950] (13)Permission denied: [client 216.73.216.199:58479] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/hid_magicmouse/uevent
[Thu Jul 30 12:33:49.187976 2026] [ssl:error] [pid 3088985:tid 3088985] (EAI 2)Name or service not known: [client 144.76.19.72:57976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:49.188010 2026] [ssl:error] [pid 3088985:tid 3088985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:49.195413 2026] [core:error] [pid 3082379:tid 3082379] [client 57.141.0.63:41956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:49.195441 2026] [core:error] [pid 3082379:tid 3082379] [client 57.141.0.63:41956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:33:49.243812 2026] [ssl:error] [pid 3081197:tid 3081197] (EAI 2)Name or service not known: [client 144.76.19.72:57988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:49.243847 2026] [ssl:error] [pid 3081197:tid 3081197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:49.581026 2026] [authz_core:error] [pid 3088985:tid 3088985] [client 57.141.0.7:31954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:49.581662 2026] [authz_core:error] [pid 3088985:tid 3088985] [client 57.141.0.7:31954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:49.603821 2026] [ssl:error] [pid 3088950:tid 3088950] (70014)End of file found: [client 216.73.216.199:58479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:49.976725 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.34:49308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:49.977374 2026] [authz_core:error] [pid 3082379:tid 3082379] [client 57.141.0.34:49308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:50.201491 2026] [ssl:error] [pid 3079141:tid 3079141] (70014)End of file found: [client 216.73.216.199:10505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:50.227715 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.11:50376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:50.228339 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.11:50376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:51.104391 2026] [ssl:error] [pid 3082379:tid 3082379] (70014)End of file found: [client 216.73.216.199:32556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:51.157660 2026] [lsapi:warn] [pid 3085402:tid 3085402] [client 122.180.21.11:64802] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:33:51.307901 2026] [access_compat:error] [pid 3083304:tid 3083304] [client 125.176.202.122:62316] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:51.331272 2026] [authz_core:error] [pid 3088677:tid 3088677] [client 57.141.0.13:62158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:51.331895 2026] [authz_core:error] [pid 3088677:tid 3088677] [client 57.141.0.13:62158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:51.514245 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.23:23032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:51.514931 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.23:23032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:51.604089 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.20:26448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:51.604712 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.20:26448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:51.763368 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.68:31582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:51.763995 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.68:31582] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:51.894675 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.55:56194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:51.895301 2026] [authz_core:error] [pid 3083225:tid 3083225] [client 57.141.0.55:56194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:52.196916 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.70:53806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:52.197551 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.70:53806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:52.315259 2026] [ssl:error] [pid 3082377:tid 3082377] (EAI 2)Name or service not known: [client 144.76.19.72:62052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:52.315291 2026] [ssl:error] [pid 3082377:tid 3082377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:52.317758 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.52:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:52.318376 2026] [authz_core:error] [pid 3068195:tid 3068195] [client 57.141.0.52:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:52.368536 2026] [ssl:error] [pid 3078606:tid 3078606] (EAI 2)Name or service not known: [client 144.76.19.72:62066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:52.368558 2026] [ssl:error] [pid 3078606:tid 3078606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:52.926836 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.69:39062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:52.927464 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.69:39062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:53.013909 2026] [security2:error] [pid 3082377:tid 3082377] [client 85.208.98.20:39548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/lunette-soleil-lennon-k.html"] [unique_id "ams2oWwfi5tzO5JoEzDb3gAAABA"]
[Thu Jul 30 12:33:53.137059 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.31:45092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:53.137690 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.31:45092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:53.543938 2026] [authz_core:error] [pid 3089278:tid 3089278] [client 57.141.0.43:24608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:53.544584 2026] [authz_core:error] [pid 3089278:tid 3089278] [client 57.141.0.43:24608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:53.972355 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.53:56532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:53.973041 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.53:56532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:54.303895 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.60:64878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:54.304565 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.60:64878] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:54.313702 2026] [security2:error] [pid 3073215:tid 3073215] [client 185.191.171.16:25944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams2oi41WRkqAs_RphIlnQAAADs"]
[Thu Jul 30 12:33:54.890407 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.71:25090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:54.891046 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.71:25090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:54.910579 2026] [ssl:error] [pid 3088548:tid 3088548] (70014)End of file found: [client 216.73.216.199:56201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:55.135300 2026] [authz_core:error] [pid 3088549:tid 3088549] [client 57.141.0.21:42408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:55.135917 2026] [authz_core:error] [pid 3088549:tid 3088549] [client 57.141.0.21:42408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:55.423679 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:62082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:55.423717 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:55.477458 2026] [ssl:error] [pid 3087912:tid 3087912] (EAI 2)Name or service not known: [client 144.76.19.72:62088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:55.477493 2026] [ssl:error] [pid 3087912:tid 3087912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:56.044747 2026] [authz_core:error] [pid 3088549:tid 3088549] [client 57.141.0.47:62830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:56.045370 2026] [authz_core:error] [pid 3088549:tid 3088549] [client 57.141.0.47:62830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:56.189586 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.25:24334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:56.190209 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.25:24334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:56.235935 2026] [security2:error] [pid 3067989:tid 3067989] [client 185.191.171.13:19778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/prosperon-welcomes-dan-ghibaldan-to-the-board-as-non-executive-director/"] [unique_id "ams2pOVKjpjv7lr4k5YyrAAAABo"]
[Thu Jul 30 12:33:56.268223 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.36:26696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:56.268842 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.36:26696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:56.450693 2026] [ssl:error] [pid 3087912:tid 3087912] (70014)End of file found: [client 216.73.216.199:65425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:33:56.458436 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.61:39946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:56.459057 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.61:39946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:56.872044 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.1:29026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:56.872680 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.1:29026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:56.992429 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.37:25994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:56.993082 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.37:25994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:57.826410 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.1:29036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:57.827031 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.1:29036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:57.848562 2026] [access_compat:error] [pid 3088196:tid 3088196] [client 125.176.202.122:62586] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:33:58.171364 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.11:50390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:58.171991 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.11:50390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:58.359545 2026] [access_compat:error] [pid 3088479:tid 3088479] [client 45.158.164.139:52554] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:33:58.373438 2026] [security2:error] [pid 3088950:tid 3088950] [client 216.73.216.199:60712] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php-fpm.d/www.conf"] [unique_id "ams2polqSeiBy3PWsYAq_AAAABs"]
[Thu Jul 30 12:33:58.373720 2026] [security2:error] [pid 3088950:tid 3088950] [client 216.73.216.199:60712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php-fpm.d/www.conf"] [unique_id "ams2polqSeiBy3PWsYAq_AAAABs"]
[Thu Jul 30 12:33:58.373918 2026] [security2:error] [pid 3088950:tid 3088950] [client 216.73.216.199:60712] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php-fpm.d/www.conf"] [unique_id "ams2polqSeiBy3PWsYAq_AAAABs"]
[Thu Jul 30 12:33:58.428097 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.6:33892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:58.428749 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.6:33892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:58.511958 2026] [authz_core:error] [pid 3079141:tid 3079141] [client 20.206.204.219:51054] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/error_log, referer: binance.com
[Thu Jul 30 12:33:58.532525 2026] [ssl:error] [pid 3079143:tid 3079143] (EAI 2)Name or service not known: [client 144.76.19.72:62090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:58.532553 2026] [ssl:error] [pid 3079143:tid 3079143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:58.587915 2026] [ssl:error] [pid 3079100:tid 3079100] (EAI 2)Name or service not known: [client 144.76.19.72:62106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:33:58.587956 2026] [ssl:error] [pid 3079100:tid 3079100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:33:58.964247 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.49:35454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:58.964869 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.49:35454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:59.112304 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.12:44806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:59.112932 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.12:44806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:59.165414 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.65:51794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:59.166043 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.65:51794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:59.254085 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.2:35406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:33:59.254767 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.2:35406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:33:59.879563 2026] [ssl:error] [pid 3088950:tid 3088950] (70014)End of file found: [client 216.73.216.199:60712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:00.618531 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.29:36128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:00.619158 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.29:36128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:00.654779 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.58:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:00.655405 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.58:33288] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:00.759541 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.63:42550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:00.760172 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.63:42550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:01.257251 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.23:48790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:01.257880 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.23:48790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:01.643433 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:28986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:01.643464 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:01.654109 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.49:35456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:01.654728 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.49:35456] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:01.685481 2026] [ssl:error] [pid 3078561:tid 3078561] (70014)End of file found: [client 216.73.216.199:1062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:01.699357 2026] [ssl:error] [pid 3081197:tid 3081197] (EAI 2)Name or service not known: [client 144.76.19.72:28992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:01.699390 2026] [ssl:error] [pid 3081197:tid 3081197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:01.760724 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.14:56572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:01.761352 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.14:56572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:01.949358 2026] [lsapi:warn] [pid 3082819:tid 3082819] [client 122.180.21.11:65448] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:34:02.151400 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.46:53940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:02.152086 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.46:53940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:02.161402 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.8:35102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:02.162007 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.8:35102] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:02.170634 2026] [core:error] [pid 3083305:tid 3083305] (13)Permission denied: [client 216.73.216.199:57764] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:34:02.333041 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.48:41338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:02.333739 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.48:41338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:02.755008 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.12:23390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:02.755641 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.12:23390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:02.837059 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.61:54488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:02.837746 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.61:54488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:03.433800 2026] [ssl:error] [pid 3079143:tid 3079143] (70014)End of file found: [client 216.73.216.199:27946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:03.855411 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.23:48804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:03.856101 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.23:48804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:03.869685 2026] [access_compat:error] [pid 3087912:tid 3087912] [client 125.176.202.122:62848] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:04.080146 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.26:45000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:04.080768 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.26:45000] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:04.348978 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.9:48528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:04.349678 2026] [authz_core:error] [pid 3088548:tid 3088548] [client 57.141.0.9:48528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:04.515850 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.61:54494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:04.516477 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.61:54494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:04.755256 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:28996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:04.755282 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:04.810950 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:29008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:04.810974 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:05.238409 2026] [core:error] [pid 3082377:tid 3082377] (13)Permission denied: [client 216.73.216.199:43367] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS3/close_delay
[Thu Jul 30 12:34:05.408062 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 20.206.204.219:52430] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/error_log, referer: binance.com
[Thu Jul 30 12:34:05.519926 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.54:40844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:05.520564 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.54:40844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:05.779651 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.28:28742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:05.780289 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.28:28742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:06.069052 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.58:26130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:06.069690 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.58:26130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:06.284854 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.53:46230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:06.285484 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.53:46230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:06.442910 2026] [ssl:error] [pid 3082377:tid 3082377] (70014)End of file found: [client 216.73.216.199:43367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:06.462682 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.51:45382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:06.463357 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.51:45382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:06.670643 2026] [core:error] [pid 3082324:tid 3082324] [client 66.249.66.169:48533] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:06.670676 2026] [core:error] [pid 3082324:tid 3082324] [client 66.249.66.169:48533] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:06.671659 2026] [core:error] [pid 3088479:tid 3088479] [client 66.249.66.196:59780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:06.671678 2026] [core:error] [pid 3088479:tid 3088479] [client 66.249.66.196:59780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:07.223186 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.38:46520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:07.223816 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.38:46520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:07.252450 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.14:60540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:07.253084 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.14:60540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:07.326389 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.36:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:07.327010 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.36:51780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:07.510530 2026] [core:error] [pid 3078561:tid 3078561] [client 66.249.66.169:60557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:07.510568 2026] [core:error] [pid 3078561:tid 3078561] [client 66.249.66.169:60557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:07.652216 2026] [ssl:error] [pid 3088950:tid 3088950] (70014)End of file found: [client 216.73.216.199:23635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:07.863329 2026] [ssl:error] [pid 3083307:tid 3083307] (EAI 2)Name or service not known: [client 144.76.19.72:29012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:07.863372 2026] [ssl:error] [pid 3083307:tid 3083307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:07.916602 2026] [ssl:error] [pid 3078561:tid 3078561] (EAI 2)Name or service not known: [client 144.76.19.72:29018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:07.916631 2026] [ssl:error] [pid 3078561:tid 3078561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:08.030040 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.69:44508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:08.030679 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.69:44508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:08.100300 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.26:45006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:08.100939 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.26:45006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:08.852436 2026] [ssl:error] [pid 3088479:tid 3088479] (70014)End of file found: [client 216.73.216.199:26982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:08.945213 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.52:21594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:08.945835 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.52:21594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:09.014081 2026] [security2:error] [pid 3088144:tid 3088144] [client 156.59.198.135:44258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/terranigma/Terranigma_game_script_v1.pdf"] [unique_id "ams2sQsn8dZRT0BASB5nYQAAAAk"]
[Thu Jul 30 12:34:09.297514 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.34:50828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:09.298251 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.34:50828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:09.377256 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.48:30746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:09.377879 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.48:30746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:09.850611 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.5:26338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:09.851248 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.5:26338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:09.872455 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.41:59788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:09.873089 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.41:59788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:10.403517 2026] [access_compat:error] [pid 3090080:tid 3090080] [client 125.176.202.122:63122] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:10.543416 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.68:42004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:10.544050 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.68:42004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:10.796520 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.41:59802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:10.797151 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.41:59802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:10.973271 2026] [ssl:error] [pid 3079143:tid 3079143] (EAI 2)Name or service not known: [client 144.76.19.72:57318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:10.973302 2026] [ssl:error] [pid 3079143:tid 3079143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:11.005272 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.51:45400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:11.005904 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.51:45400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:11.029023 2026] [ssl:error] [pid 3088548:tid 3088548] (EAI 2)Name or service not known: [client 144.76.19.72:57328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:11.029060 2026] [ssl:error] [pid 3088548:tid 3088548] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:11.373844 2026] [core:error] [pid 3088195:tid 3088195] (13)Permission denied: [client 216.73.216.199:64286] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/pci_hotplug/uevent
[Thu Jul 30 12:34:11.476784 2026] [ssl:error] [pid 3088195:tid 3088195] (70014)End of file found: [client 216.73.216.199:64286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:11.822749 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.58:26154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:11.823378 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.58:26154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:12.092372 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.26:45014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:12.093004 2026] [authz_core:error] [pid 3081288:tid 3081288] [client 57.141.0.26:45014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:12.150752 2026] [security2:error] [pid 3079193:tid 3079193] [client 129.226.195.146:46328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/class-wp-ability-category.php"] [unique_id "ams2tK5yKleAOdJPc5MTFgAAADg"]
[Thu Jul 30 12:34:12.258937 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.63:38218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:12.259580 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.63:38218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:12.403311 2026] [lsapi:warn] [pid 3079141:tid 3079141] [client 122.180.21.11:49727] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:34:12.662538 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.8:45950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:12.663170 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.8:45950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:13.007535 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.50:28908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:13.008165 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.50:28908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:13.062281 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.29:43100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:13.062912 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.29:43100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:13.124325 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.1:57594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:13.124947 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.1:57594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:13.521152 2026] [security2:error] [pid 3088950:tid 3088950] [client 41.251.114.10:36146] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2tYlqSeiBy3PWsYArBgAAABs"]
[Thu Jul 30 12:34:13.521199 2026] [security2:error] [pid 3088950:tid 3088950] [client 41.251.114.10:36146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2tYlqSeiBy3PWsYArBgAAABs"]
[Thu Jul 30 12:34:13.521452 2026] [security2:error] [pid 3088950:tid 3088950] [client 41.251.114.10:36146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2tYlqSeiBy3PWsYArBgAAABs"]
[Thu Jul 30 12:34:13.833925 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.4:37570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:13.834563 2026] [authz_core:error] [pid 3082526:tid 3082526] [client 57.141.0.4:37570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:13.880370 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.52:58570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:13.881000 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.52:58570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:13.995810 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.40:35806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:13.996443 2026] [authz_core:error] [pid 3079142:tid 3079142] [client 57.141.0.40:35806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:14.082780 2026] [ssl:error] [pid 3079141:tid 3079141] (EAI 2)Name or service not known: [client 144.76.19.72:57344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:14.082824 2026] [ssl:error] [pid 3079141:tid 3079141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:14.135508 2026] [ssl:error] [pid 3087789:tid 3087789] (EAI 2)Name or service not known: [client 144.76.19.72:57346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:14.135537 2026] [ssl:error] [pid 3087789:tid 3087789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:14.239239 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.47:20952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:14.239867 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.47:20952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:14.747514 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.41:38304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:14.748151 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.41:38304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:14.784682 2026] [ssl:error] [pid 3079143:tid 3079143] (70014)End of file found: [client 216.73.216.199:35443] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:14.822110 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.63:38220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:14.822791 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.63:38220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:15.363411 2026] [core:error] [pid 3081072:tid 3081072] [client 57.141.0.38:53498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:15.363440 2026] [core:error] [pid 3081072:tid 3081072] [client 57.141.0.38:53498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:15.686835 2026] [ssl:error] [pid 3087789:tid 3087789] (70014)End of file found: [client 216.73.216.199:13007] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:16.257387 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.19:37212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:16.258015 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.19:37212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:16.444595 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.55:47492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:16.445229 2026] [authz_core:error] [pid 3081292:tid 3081292] [client 57.141.0.55:47492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:16.448695 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.50:28954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:16.449302 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.50:28954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:16.617607 2026] [access_compat:error] [pid 3073215:tid 3073215] [client 125.176.202.122:63392] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:16.719243 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.12:20724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:16.719874 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.12:20724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:16.792639 2026] [ssl:error] [pid 3075978:tid 3075978] (70014)End of file found: [client 216.73.216.199:37386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:17.086034 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.2:53362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:17.086674 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.2:53362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:17.189628 2026] [ssl:error] [pid 3090117:tid 3090117] (EAI 2)Name or service not known: [client 144.76.19.72:57352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:17.189669 2026] [ssl:error] [pid 3090117:tid 3090117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:17.247648 2026] [ssl:error] [pid 3081292:tid 3081292] (EAI 2)Name or service not known: [client 144.76.19.72:57364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:17.247681 2026] [ssl:error] [pid 3081292:tid 3081292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:17.280252 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.21:31418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:17.280870 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.21:31418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:17.387444 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.49:21922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:17.388145 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.49:21922] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:17.801524 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.10:23924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:17.802171 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.10:23924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:18.424693 2026] [core:error] [pid 3083302:tid 3083302] [client 66.249.66.3:57619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:18.424723 2026] [core:error] [pid 3083302:tid 3083302] [client 66.249.66.3:57619] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:18.590629 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.39:46796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:18.591267 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.39:46796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:19.097742 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.32:42936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:19.098376 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.32:42936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:19.198210 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.30:56484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:19.198832 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.30:56484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:19.207891 2026] [security2:error] [pid 3088195:tid 3088195] [client 47.83.118.32:15097] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2uyMTTyyQR4l_pYJhvQAAAAw"]
[Thu Jul 30 12:34:19.207937 2026] [security2:error] [pid 3088195:tid 3088195] [client 47.83.118.32:15097] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2uyMTTyyQR4l_pYJhvQAAAAw"]
[Thu Jul 30 12:34:19.208205 2026] [security2:error] [pid 3088195:tid 3088195] [client 47.83.118.32:15097] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2uyMTTyyQR4l_pYJhvQAAAAw"]
[Thu Jul 30 12:34:19.493612 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.1:57610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:19.494242 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.1:57610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:19.725764 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.10:23936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:19.726474 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.10:23936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:20.114930 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.22:34770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:20.115563 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.22:34770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:20.143348 2026] [security2:error] [pid 3087912:tid 3087912] [client 85.208.96.207:54188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/union-pacific-844-schedule-2022"] [unique_id "ams2vIjAjFEwvkI9ErixcAAAAAg"]
[Thu Jul 30 12:34:20.304365 2026] [ssl:error] [pid 3082819:tid 3082819] (EAI 2)Name or service not known: [client 144.76.19.72:22942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:20.304401 2026] [ssl:error] [pid 3082819:tid 3082819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:20.359565 2026] [ssl:error] [pid 3079143:tid 3079143] (EAI 2)Name or service not known: [client 144.76.19.72:22958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:20.359592 2026] [ssl:error] [pid 3079143:tid 3079143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:20.476228 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.32:42946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:20.476856 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.32:42946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:20.555834 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.55:47504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:20.556460 2026] [authz_core:error] [pid 3083302:tid 3083302] [client 57.141.0.55:47504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:21.272638 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.10:23948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:21.273262 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.10:23948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:21.708999 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.8:55410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:21.709655 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.8:55410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:21.728309 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.33:27842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:21.728929 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.33:27842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:21.876363 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 20.206.204.219:55183] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/Diff/error_log, referer: binance.com
[Thu Jul 30 12:34:22.198279 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.63:56494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:22.198980 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.63:56494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:22.217223 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.11:24522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:22.217845 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.11:24522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:22.487945 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.7:59686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:22.488591 2026] [authz_core:error] [pid 3079143:tid 3079143] [client 57.141.0.7:59686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:23.086368 2026] [lsapi:warn] [pid 3067992:tid 3067992] [client 122.180.21.11:50381] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:34:23.217183 2026] [core:error] [pid 3083307:tid 3083307] (13)Permission denied: [client 216.73.216.199:24022] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/ipv6/uevent
[Thu Jul 30 12:34:23.436910 2026] [ssl:error] [pid 3090118:tid 3090118] (EAI 2)Name or service not known: [client 144.76.19.72:22974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:23.436955 2026] [ssl:error] [pid 3090118:tid 3090118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:23.454287 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.15:37702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:23.454913 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.15:37702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:23.524043 2026] [ssl:error] [pid 3068195:tid 3068195] (EAI 2)Name or service not known: [client 144.76.19.72:22988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:23.524083 2026] [ssl:error] [pid 3068195:tid 3068195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:23.745343 2026] [security2:error] [pid 3067992:tid 3067992] [client 47.83.118.32:12389] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2v9lnbwxAFb8DMevPCQAAAB4"]
[Thu Jul 30 12:34:23.745436 2026] [security2:error] [pid 3067992:tid 3067992] [client 47.83.118.32:12389] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams2v9lnbwxAFb8DMevPCQAAAB4"]
[Thu Jul 30 12:34:23.745669 2026] [security2:error] [pid 3067992:tid 3067992] [client 47.83.118.32:12389] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams2v9lnbwxAFb8DMevPCQAAAB4"]
[Thu Jul 30 12:34:23.838970 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.34:51424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:23.839601 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.34:51424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:24.056218 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.34:51438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:24.056837 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.34:51438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:24.458203 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.19:25174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:24.458839 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.19:25174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:24.577631 2026] [access_compat:error] [pid 3067992:tid 3067992] [client 125.176.202.122:63669] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:24.578399 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.28:37832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:24.579022 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.28:37832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:24.909254 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.56:43626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:24.909873 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.56:43626] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:25.148545 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.24:30548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:25.149207 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.24:30548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:25.418336 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.48:21348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:25.418958 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.48:21348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:25.798250 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.11:24530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:25.798929 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.11:24530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:26.161854 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.67:53620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:26.162487 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.67:53620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:26.240122 2026] [security2:error] [pid 3078606:tid 3078606] [client 114.119.135.136:52067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577750400/request_format~html"] [unique_id "ams2wvuKE1ec173Xu__rJQAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577836800/request_format~html
[Thu Jul 30 12:34:26.582549 2026] [ssl:error] [pid 3081072:tid 3081072] (EAI 2)Name or service not known: [client 144.76.19.72:22998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:26.582584 2026] [ssl:error] [pid 3081072:tid 3081072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:26.635864 2026] [ssl:error] [pid 3090705:tid 3090705] (EAI 2)Name or service not known: [client 144.76.19.72:23004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:26.635910 2026] [ssl:error] [pid 3090705:tid 3090705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:26.669737 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.52:42414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:26.670373 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.52:42414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:26.832022 2026] [ssl:error] [pid 3083307:tid 3083307] (70014)End of file found: [client 216.73.216.199:24022] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:26.912820 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.43:39544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:26.913447 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.43:39544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:26.942469 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.29:52440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:26.943095 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.29:52440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:27.140461 2026] [ssl:error] [pid 3081197:tid 3081197] (70014)End of file found: [client 216.73.216.199:11627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:27.634382 2026] [ssl:error] [pid 3088950:tid 3088950] (70014)End of file found: [client 216.73.216.199:48721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:28.203982 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.60:39340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:28.204631 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.60:39340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:28.265732 2026] [security2:error] [pid 3083304:tid 3083304] [client 114.119.135.136:52075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577750400/request_format~html"] [unique_id "ams2xFo41Z7s89_4RnqmqwAAAEE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577836800/request_format~html
[Thu Jul 30 12:34:28.449075 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.61:53970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:28.449732 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.61:53970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:28.622664 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.24:30564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:28.623292 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.24:30564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:29.678008 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 20.206.204.219:56458] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/Diff/error_log, referer: binance.com
[Thu Jul 30 12:34:29.850478 2026] [access_compat:error] [pid 3090793:tid 3090793] [client 125.176.202.122:63942] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:29.850826 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.9:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:29.851455 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.9:30760] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:29.936279 2026] [ssl:error] [pid 3087847:tid 3087847] (EAI 2)Name or service not known: [client 144.76.19.72:35894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:29.936306 2026] [ssl:error] [pid 3087847:tid 3087847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:29.942383 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.44:50866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:29.943007 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.44:50866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:29.951797 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.6:24216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:29.952418 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.6:24216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:29.990000 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.4:30248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:29.990663 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.4:30248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:30.034822 2026] [ssl:error] [pid 3078606:tid 3078606] (EAI 2)Name or service not known: [client 144.76.19.72:35904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:30.034862 2026] [ssl:error] [pid 3078606:tid 3078606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:30.063766 2026] [authz_core:error] [pid 3090796:tid 3090796] [client 57.141.0.66:56564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:30.064394 2026] [authz_core:error] [pid 3090796:tid 3090796] [client 57.141.0.66:56564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:30.153466 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.10:45118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:30.154129 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.10:45118] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:30.415704 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.48:23254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:30.416374 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.48:23254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:31.011037 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.19:25212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:31.011702 2026] [authz_core:error] [pid 3078606:tid 3078606] [client 57.141.0.19:25212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:31.234676 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.31:23830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:31.235307 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.31:23830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:31.546692 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.35:34296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:31.547314 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.35:34296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:32.143342 2026] [authz_core:error] [pid 3090839:tid 3090839] [client 57.141.0.60:28616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:32.143971 2026] [authz_core:error] [pid 3090839:tid 3090839] [client 57.141.0.60:28616] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:32.265107 2026] [ssl:error] [pid 3083304:tid 3083304] (70014)End of file found: [client 216.73.216.199:39701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:32.458163 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.39:20742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:32.458800 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.39:20742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:32.643175 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.13:29622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:32.643826 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.13:29622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:33.093259 2026] [ssl:error] [pid 3090742:tid 3090742] (EAI 2)Name or service not known: [client 144.76.19.72:35916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:33.093293 2026] [ssl:error] [pid 3090742:tid 3090742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:33.148305 2026] [ssl:error] [pid 3090839:tid 3090839] (EAI 2)Name or service not known: [client 144.76.19.72:35920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:33.148351 2026] [ssl:error] [pid 3090839:tid 3090839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:33.209321 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.58:37586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:33.209946 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.58:37586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:33.540192 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.23:36676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:33.540821 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.23:36676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:33.677633 2026] [lsapi:warn] [pid 3090838:tid 3090838] [client 122.180.21.11:51030] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:34:33.937540 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.36:21348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:33.938793 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.36:21348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:34.172303 2026] [lsapi:warn] [pid 3075978:tid 3075978] [client 173.252.87.46:32856] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:34:34.172349 2026] [lsapi:warn] [pid 3075978:tid 3075978] [client 173.252.87.46:32856] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:34:34.244347 2026] [lsapi:warn] [pid 3090705:tid 3090705] [client 173.252.87.41:38368] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:34:34.244393 2026] [lsapi:warn] [pid 3090705:tid 3090705] [client 173.252.87.41:38368] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:34:34.295613 2026] [lsapi:warn] [pid 3090117:tid 3090117] [client 173.252.87.25:47084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:34:34.295658 2026] [lsapi:warn] [pid 3090117:tid 3090117] [client 173.252.87.25:47084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:34:34.391423 2026] [ssl:error] [pid 3083307:tid 3083307] (70014)End of file found: [client 216.73.216.199:21029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:34.891575 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.52:55072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:34.892271 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.52:55072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:35.221269 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.44:62194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:35.221894 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.44:62194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:35.238399 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.55:23476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:35.239622 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.55:23476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:35.307299 2026] [ssl:error] [pid 3088479:tid 3088479] (70014)End of file found: [client 216.73.216.199:51576] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:35.458715 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.37:46518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:35.459351 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.37:46518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:35.576060 2026] [authz_core:error] [pid 3090794:tid 3090794] [client 57.141.0.60:28622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:35.576704 2026] [authz_core:error] [pid 3090794:tid 3090794] [client 57.141.0.60:28622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:35.885050 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.45:46066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:35.885697 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.45:46066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:36.033448 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.54:62684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:36.034150 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.54:62684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:36.206307 2026] [ssl:error] [pid 3078606:tid 3078606] (EAI 2)Name or service not known: [client 144.76.19.72:35934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:36.206342 2026] [ssl:error] [pid 3078606:tid 3078606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:36.260865 2026] [ssl:error] [pid 3090793:tid 3090793] (EAI 2)Name or service not known: [client 144.76.19.72:35948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:36.260902 2026] [ssl:error] [pid 3090793:tid 3090793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:36.844040 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.36:21366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:36.844678 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.36:21366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:36.942685 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.10:26694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:36.943325 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.10:26694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:37.366579 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.71:22978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:37.367211 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.71:22978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:37.602475 2026] [ssl:error] [pid 3078606:tid 3078606] (70014)End of file found: [client 216.73.216.199:61283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:37.604283 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.24:54016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:37.604905 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.24:54016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:38.353870 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.13:29628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:38.354517 2026] [authz_core:error] [pid 3081072:tid 3081072] [client 57.141.0.13:29628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:38.743057 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.14:59914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:38.743749 2026] [authz_core:error] [pid 3083304:tid 3083304] [client 57.141.0.14:59914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:39.002720 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 20.206.204.219:57792] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/Diff/Engine/error_log, referer: binance.com
[Thu Jul 30 12:34:39.223606 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.39:50986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:39.224248 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.39:50986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:39.318791 2026] [ssl:error] [pid 3089278:tid 3089278] (EAI 2)Name or service not known: [client 144.76.19.72:35952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:39.318832 2026] [ssl:error] [pid 3089278:tid 3089278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:39.328235 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.21:24380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:39.328862 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.21:24380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:39.375339 2026] [ssl:error] [pid 3090845:tid 3090845] (EAI 2)Name or service not known: [client 144.76.19.72:35960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:39.375388 2026] [ssl:error] [pid 3090845:tid 3090845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:39.723030 2026] [core:error] [pid 3067992:tid 3067992] (13)Permission denied: [client 216.73.216.199:19035] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:66/flags
[Thu Jul 30 12:34:39.865372 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.9:20058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:39.866011 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.9:20058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:39.960712 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.28:23720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:39.961366 2026] [authz_core:error] [pid 3083305:tid 3083305] [client 57.141.0.28:23720] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:39.994273 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.59:38108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:39.994901 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.59:38108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:40.203776 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.47:58414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:40.204434 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.47:58414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:40.326204 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.2:46172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:40.326829 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.2:46172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:40.345163 2026] [core:error] [pid 3090843:tid 3090843] [client 66.249.66.167:35486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:40.345195 2026] [core:error] [pid 3090843:tid 3090843] [client 66.249.66.167:35486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:40.548955 2026] [authz_core:error] [pid 3089278:tid 3089278] [client 57.141.0.56:40836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:40.549595 2026] [authz_core:error] [pid 3089278:tid 3089278] [client 57.141.0.56:40836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:40.792445 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.52:22322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:40.793089 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.52:22322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:41.432622 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.17:65072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:41.433255 2026] [authz_core:error] [pid 3079192:tid 3079192] [client 57.141.0.17:65072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:42.042538 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.2:46178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:42.043170 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.2:46178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:42.186348 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.65:20884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:42.186998 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.65:20884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:42.189205 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.8:25110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:42.189817 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.8:25110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:42.313188 2026] [access_compat:error] [pid 3078561:tid 3078561] [client 195.3.220.7:59162] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/edd/
[Thu Jul 30 12:34:42.315008 2026] [access_compat:error] [pid 3078561:tid 3078561] [client 195.3.220.7:59162] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:34:42.315038 2026] [access_compat:error] [pid 3078561:tid 3078561] [client 195.3.220.7:59162] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 12:34:42.414830 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.28:41192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:42.415533 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.28:41192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:42.430584 2026] [ssl:error] [pid 3080065:tid 3080065] (EAI 2)Name or service not known: [client 144.76.19.72:19026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:42.430613 2026] [ssl:error] [pid 3080065:tid 3080065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:42.486323 2026] [ssl:error] [pid 3079192:tid 3079192] (EAI 2)Name or service not known: [client 144.76.19.72:19034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:42.486356 2026] [ssl:error] [pid 3079192:tid 3079192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:42.519462 2026] [authz_core:error] [pid 3090844:tid 3090844] [client 57.141.0.35:38848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:42.520119 2026] [authz_core:error] [pid 3090844:tid 3090844] [client 57.141.0.35:38848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:42.563315 2026] [access_compat:error] [pid 3088479:tid 3088479] [client 125.176.202.122:64492] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:43.282580 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.8:25124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:43.283232 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.8:25124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:43.385732 2026] [core:error] [pid 3090080:tid 3090080] [client 66.249.66.194:61174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:43.385762 2026] [core:error] [pid 3090080:tid 3090080] [client 66.249.66.194:61174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:43.762316 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.63:26014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:43.762980 2026] [authz_core:error] [pid 3087789:tid 3087789] [client 57.141.0.63:26014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:44.032696 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.36:42430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:44.033327 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.36:42430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:44.298142 2026] [lsapi:warn] [pid 3078606:tid 3078606] [client 122.180.21.11:51675] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:34:44.321852 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.62:50716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:44.322481 2026] [authz_core:error] [pid 3090117:tid 3090117] [client 57.141.0.62:50716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:44.469945 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.19:25098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:44.470591 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.19:25098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:44.676002 2026] [core:error] [pid 3090618:tid 3090618] [client 66.249.66.167:39045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:44.676033 2026] [core:error] [pid 3090618:tid 3090618] [client 66.249.66.167:39045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:44.725996 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.2:31296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:44.726663 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.2:31296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:45.297574 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.70:49550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:45.298211 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.70:49550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:45.414227 2026] [ssl:error] [pid 3067992:tid 3067992] (70014)End of file found: [client 216.73.216.199:19035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:45.539818 2026] [ssl:error] [pid 3090117:tid 3090117] (EAI 2)Name or service not known: [client 144.76.19.72:19040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:45.539851 2026] [ssl:error] [pid 3090117:tid 3090117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:45.595494 2026] [ssl:error] [pid 3090845:tid 3090845] (EAI 2)Name or service not known: [client 144.76.19.72:19054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:45.595537 2026] [ssl:error] [pid 3090845:tid 3090845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:46.283816 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.56:40844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:46.284445 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.56:40844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:46.586913 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.6:49406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:46.587548 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.6:49406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:46.662648 2026] [security2:error] [pid 3083073:tid 3083073] [client 94.23.188.218:35974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/project-zomboid-cheat-engine-table"] [unique_id "ams21nqyHXfIRPalQ2h0rAAAAAE"]
[Thu Jul 30 12:34:46.673819 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.11:21278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:46.674442 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.11:21278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:46.865322 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.55:63688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:46.865955 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.55:63688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:47.178003 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.6:49410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:47.178644 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.6:49410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:47.578776 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.3:62344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:47.579855 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.3:62344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:48.074609 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.71:47116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:48.075232 2026] [authz_core:error] [pid 3090118:tid 3090118] [client 57.141.0.71:47116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:48.131023 2026] [ssl:error] [pid 3090840:tid 3090840] (70014)End of file found: [client 216.73.216.199:12149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:48.240931 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.13:61498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:48.241575 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.13:61498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:48.619875 2026] [ssl:error] [pid 3090838:tid 3090838] (70014)End of file found: [client 216.73.216.199:5526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:48.656543 2026] [ssl:error] [pid 3083308:tid 3083308] (EAI 2)Name or service not known: [client 144.76.19.72:19058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:48.656592 2026] [ssl:error] [pid 3083308:tid 3083308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:48.710974 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:19062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:48.711009 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:48.832052 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.27:63596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:48.832683 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.27:63596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:48.841190 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.1:60632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:48.841805 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.1:60632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:48.851650 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.6:49418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:48.852275 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.6:49418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:49.156650 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 195.3.220.7:60206] AH01630: client denied by server configuration: /home/horusw/public_html/wp-admin/includes/error_log
[Thu Jul 30 12:34:49.167398 2026] [access_compat:error] [pid 3090705:tid 3090705] [client 125.176.202.122:64763] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:49.521080 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.45:57412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:49.521731 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.45:57412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:49.720372 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.68:60848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:49.720994 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.68:60848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:49.724655 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.70:61724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:49.725297 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.70:61724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:49.774923 2026] [core:error] [pid 3074543:tid 3074543] [client 66.249.64.170:37891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:49.774950 2026] [core:error] [pid 3074543:tid 3074543] [client 66.249.64.170:37891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:50.106590 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.21:29726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:50.107221 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.21:29726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:50.583130 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.30:35758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:50.583756 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.30:35758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:50.799098 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.8:35418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:50.799719 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.8:35418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:51.454173 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.43:30354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:51.454806 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.43:30354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:51.666575 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.15:62088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:51.667207 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.15:62088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:51.764669 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:56110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:51.764695 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:51.818983 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:56112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:51.819017 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:52.106395 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.19:25130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:52.107016 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.19:25130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:52.647049 2026] [core:error] [pid 3090742:tid 3090742] (13)Permission denied: [client 216.73.216.199:58664] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/closing_wait
[Thu Jul 30 12:34:52.876311 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.34:42054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:52.876935 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.34:42054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:53.008347 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.47:38092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:53.008975 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.47:38092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:53.126171 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.63:58604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:53.126797 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.63:58604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:53.249701 2026] [ssl:error] [pid 3090742:tid 3090742] (70014)End of file found: [client 216.73.216.199:58664] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:53.289449 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.63:58620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:53.290083 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.63:58620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:53.796437 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.42:60166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:53.797059 2026] [authz_core:error] [pid 3088479:tid 3088479] [client 57.141.0.42:60166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:54.155300 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.39:22842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:54.155927 2026] [authz_core:error] [pid 3087912:tid 3087912] [client 57.141.0.39:22842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:54.290230 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.24:21958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:54.290855 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.24:21958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:54.333863 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.59:45424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:54.334507 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.59:45424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:54.758251 2026] [ssl:error] [pid 3090840:tid 3090840] (70014)End of file found: [client 216.73.216.199:54573] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:54.776171 2026] [lsapi:warn] [pid 3090843:tid 3090843] [client 122.180.21.11:52318] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:34:54.890849 2026] [ssl:error] [pid 3067992:tid 3067992] (EAI 2)Name or service not known: [client 144.76.19.72:56122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:54.890891 2026] [ssl:error] [pid 3067992:tid 3067992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:54.946850 2026] [ssl:error] [pid 3087912:tid 3087912] (EAI 2)Name or service not known: [client 144.76.19.72:56132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:54.946882 2026] [ssl:error] [pid 3087912:tid 3087912] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:55.111544 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.13:64314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:55.112169 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.13:64314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:55.179536 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.38:24292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:55.180155 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.38:24292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:55.564288 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.18:20154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:55.565003 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.18:20154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:55.937451 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.29:20382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:55.938155 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.29:20382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:55.963230 2026] [ssl:error] [pid 3078608:tid 3078608] (70014)End of file found: [client 216.73.216.199:51234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:34:56.083905 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.5:34274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:56.084539 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.5:34274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:56.497653 2026] [access_compat:error] [pid 3079365:tid 3079365] [client 125.176.202.122:65028] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:34:57.137609 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.60:25602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:57.138239 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.60:25602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:57.405477 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.38:24324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:57.406117 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.38:24324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:57.485034 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.9:49284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:57.485688 2026] [authz_core:error] [pid 3078561:tid 3078561] [client 57.141.0.9:49284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:57.511319 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.54:25510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:57.511945 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.54:25510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:57.726665 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.41:34262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:57.727295 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.41:34262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:58.003771 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:56150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:58.003818 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:58.060342 2026] [ssl:error] [pid 3088479:tid 3088479] (EAI 2)Name or service not known: [client 144.76.19.72:56156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:34:58.060417 2026] [ssl:error] [pid 3088479:tid 3088479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:34:58.116440 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.17:33888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:58.117081 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.17:33888] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:58.296581 2026] [authz_core:error] [pid 3092131:tid 3092131] [client 57.141.0.39:21146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:58.297239 2026] [authz_core:error] [pid 3092131:tid 3092131] [client 57.141.0.39:21146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:58.804043 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.40:57682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:58.804829 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.40:57682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:59.264005 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.22:45424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:59.264644 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.22:45424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:59.631363 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.41:34270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:59.631990 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.41:34270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:34:59.909221 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 20.206.204.219:61472] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/Diff/Engine/error_log, referer: binance.com
[Thu Jul 30 12:34:59.930162 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.66.39:48357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:59.930185 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.66.39:48357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:34:59.935971 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.45:20802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:34:59.936602 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.45:20802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:00.515043 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.4:65396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:00.515685 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.4:65396] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:01.079761 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.4:41192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:01.080429 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.4:41192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:01.117009 2026] [ssl:error] [pid 3087847:tid 3087847] (EAI 2)Name or service not known: [client 144.76.19.72:22766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:01.117044 2026] [ssl:error] [pid 3087847:tid 3087847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:01.169983 2026] [ssl:error] [pid 3090742:tid 3090742] (EAI 2)Name or service not known: [client 144.76.19.72:22776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:01.170011 2026] [ssl:error] [pid 3090742:tid 3090742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:01.557837 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.19:44908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:01.558799 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.19:44908] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:01.772408 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.63:23478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:01.773035 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.63:23478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:01.992474 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.2:49248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:01.993110 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.2:49248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:02.217355 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.29:30368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:02.217991 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.29:30368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:02.289459 2026] [ssl:error] [pid 3088479:tid 3088479] (70014)End of file found: [client 216.73.216.199:13150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:02.408831 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.44:46296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:02.409458 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.44:46296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:02.650331 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.35:24510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:02.650959 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.35:24510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:02.723804 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 66.249.66.34:58389] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:35:02.726484 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 66.249.66.34:58389] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:35:02.872676 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.19:50678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:02.873314 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.19:50678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:02.895018 2026] [ssl:error] [pid 3090840:tid 3090840] (70014)End of file found: [client 216.73.216.199:8676] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:03.099517 2026] [access_compat:error] [pid 3067992:tid 3067992] [client 125.176.202.122:65359] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:35:03.295808 2026] [core:error] [pid 3090838:tid 3090838] [client 66.249.66.39:39353] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:03.295838 2026] [core:error] [pid 3090838:tid 3090838] [client 66.249.66.39:39353] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:03.400203 2026] [ssl:error] [pid 3083073:tid 3083073] (70014)End of file found: [client 216.73.216.199:45791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:03.450801 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.46:44254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:03.451432 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.46:44254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:03.653048 2026] [access_compat:error] [pid 3090838:tid 3090838] [client 45.158.164.139:48200] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:35:04.225285 2026] [ssl:error] [pid 3090838:tid 3090838] (EAI 2)Name or service not known: [client 144.76.19.72:22778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:04.225325 2026] [ssl:error] [pid 3090838:tid 3090838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:04.280383 2026] [ssl:error] [pid 3090838:tid 3090838] (EAI 2)Name or service not known: [client 144.76.19.72:22786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:04.280413 2026] [ssl:error] [pid 3090838:tid 3090838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:04.295169 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.48:37142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:04.295827 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.48:37142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:04.340426 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.40:57694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:04.341056 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.40:57694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:04.570199 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.66:22986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:04.570830 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.66:22986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:04.765766 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.65:36942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:04.766388 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.65:36942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:04.935077 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.11:45510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:04.935739 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.11:45510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:05.270996 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.41:42070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:05.271632 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.41:42070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:05.485370 2026] [lsapi:warn] [pid 3089278:tid 3089278] [client 122.180.21.11:52955] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:35:05.692433 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.47:34258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:05.692976 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.71:41584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:05.693075 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.47:34258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:05.693623 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.71:41584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:06.005129 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.9:63898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:06.005756 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.9:63898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:06.268930 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.35:24512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:06.269838 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.35:24512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:07.279322 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.1:44548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:07.279950 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.1:44548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:07.346773 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:22802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:07.346812 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:07.414124 2026] [ssl:error] [pid 3089278:tid 3089278] (EAI 2)Name or service not known: [client 144.76.19.72:22812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:07.414153 2026] [ssl:error] [pid 3089278:tid 3089278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:07.493245 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.63:37174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:07.493895 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.63:37174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:07.497980 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.38:32010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:07.498606 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.38:32010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:07.713339 2026] [ssl:error] [pid 3090118:tid 3090118] (70014)End of file found: [client 216.73.216.199:53559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:07.784396 2026] [security2:error] [pid 3092223:tid 3092223] [client 150.5.133.199:40283] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams269CrgzNNzERd_GWl5QAAAAg"]
[Thu Jul 30 12:35:07.784442 2026] [security2:error] [pid 3092223:tid 3092223] [client 150.5.133.199:40283] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams269CrgzNNzERd_GWl5QAAAAg"]
[Thu Jul 30 12:35:07.784726 2026] [security2:error] [pid 3092223:tid 3092223] [client 150.5.133.199:40283] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams269CrgzNNzERd_GWl5QAAAAg"]
[Thu Jul 30 12:35:08.296383 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.51:38672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:08.297007 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.51:38672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:08.491232 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.48:37148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:08.491853 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.48:37148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:08.740201 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.56:30778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:08.740825 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.56:30778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:08.759858 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 20.206.204.219:63600] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/Diff/Renderer/error_log, referer: binance.com
[Thu Jul 30 12:35:09.113983 2026] [access_compat:error] [pid 3083115:tid 3083115] [client 125.176.202.122:49195] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:35:09.222431 2026] [core:error] [pid 3089278:tid 3089278] (13)Permission denied: [client 216.73.216.199:32344] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu6/driver/unbind
[Thu Jul 30 12:35:09.244728 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.46:44258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:09.245784 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.46:44258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:09.524520 2026] [ssl:error] [pid 3089278:tid 3089278] (70014)End of file found: [client 216.73.216.199:32344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:09.543333 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.50:55484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:09.543968 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.50:55484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:10.397553 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 192.175.111.237:58606] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 12:35:10.470553 2026] [ssl:error] [pid 3090838:tid 3090838] (EAI 2)Name or service not known: [client 144.76.19.72:59546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:10.470581 2026] [ssl:error] [pid 3090838:tid 3090838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:10.486284 2026] [core:error] [pid 3092223:tid 3092223] [client 57.141.0.9:63914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:10.486311 2026] [core:error] [pid 3092223:tid 3092223] [client 57.141.0.9:63914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:10.526315 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:59556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:10.526351 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:10.593553 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.35:27976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:10.594187 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.35:27976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:10.799650 2026] [security2:error] [pid 3083308:tid 3083308] [client 111.88.171.209:39544] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams27iXgLGqBmKGYq2uZagAAAEU"]
[Thu Jul 30 12:35:10.799705 2026] [security2:error] [pid 3083308:tid 3083308] [client 111.88.171.209:39544] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams27iXgLGqBmKGYq2uZagAAAEU"]
[Thu Jul 30 12:35:10.799968 2026] [security2:error] [pid 3083308:tid 3083308] [client 111.88.171.209:39544] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams27iXgLGqBmKGYq2uZagAAAEU"]
[Thu Jul 30 12:35:10.820314 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.70:40710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:10.820941 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.70:40710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:11.089765 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.19:50694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:11.090396 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.19:50694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:11.096620 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.40:34202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:11.097239 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.40:34202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:11.434375 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.40:34218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:11.435002 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.40:34218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:11.518174 2026] [ssl:error] [pid 3090840:tid 3090840] (70014)End of file found: [client 216.73.216.199:63804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:11.535427 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.39:51444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:11.536049 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.39:51444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:11.975128 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.62:45060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:11.975762 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.62:45060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:12.209026 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.70:40724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:12.209680 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.70:40724] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:12.453544 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.23:54936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:12.454193 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.23:54936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:12.970117 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.23:54944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:12.970743 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.23:54944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:13.332853 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.68:47534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:13.333476 2026] [authz_core:error] [pid 3090845:tid 3090845] [client 57.141.0.68:47534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:13.446084 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.63:37190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:13.446708 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.63:37190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:13.588523 2026] [ssl:error] [pid 3089788:tid 3089788] (EAI 2)Name or service not known: [client 144.76.19.72:59560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:13.588569 2026] [ssl:error] [pid 3089788:tid 3089788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:13.646713 2026] [ssl:error] [pid 3092131:tid 3092131] (EAI 2)Name or service not known: [client 144.76.19.72:59564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:13.646759 2026] [ssl:error] [pid 3092131:tid 3092131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:13.938379 2026] [ssl:error] [pid 3078608:tid 3078608] (70014)End of file found: [client 216.73.216.199:38757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:14.023817 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.25:23132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:14.024445 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.25:23132] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:14.288940 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.35:27988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:14.289575 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.35:27988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:14.447387 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.58:53294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:14.448024 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.58:53294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:14.644517 2026] [security2:error] [pid 3090793:tid 3090793] [client 5.187.10.13:51335] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams28kaYl2zT20hOl3vPrgAAACY"]
[Thu Jul 30 12:35:14.644609 2026] [security2:error] [pid 3090793:tid 3090793] [client 5.187.10.13:51335] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams28kaYl2zT20hOl3vPrgAAACY"]
[Thu Jul 30 12:35:14.644981 2026] [security2:error] [pid 3090793:tid 3090793] [client 5.187.10.13:51335] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams28kaYl2zT20hOl3vPrgAAACY"]
[Thu Jul 30 12:35:14.701320 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.28:21700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:14.701950 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.28:21700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:15.142948 2026] [core:error] [pid 3092223:tid 3092223] (13)Permission denied: [client 216.73.216.199:2959] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS1/uartclk
[Thu Jul 30 12:35:15.694611 2026] [lsapi:warn] [pid 3083115:tid 3083115] [client 45.158.164.139:44660] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:35:15.694663 2026] [lsapi:warn] [pid 3083115:tid 3083115] [client 45.158.164.139:44660] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:35:15.697474 2026] [lsapi:warn] [pid 3092477:tid 3092477] [client 89.197.16.98:34673] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:35:15.697526 2026] [lsapi:warn] [pid 3092477:tid 3092477] [client 89.197.16.98:34673] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:35:15.854657 2026] [security2:error] [pid 3080065:tid 3080065] [client 85.208.98.29:35470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/tester-des-lunettes-en-ligne-k.html"] [unique_id "ams28zeSFqEjNdgdfimYFQAAAAU"]
[Thu Jul 30 12:35:15.920674 2026] [security2:error] [pid 3081197:tid 3081197] [client 51.68.236.68:10787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edmundwild.co.uk"] [uri "/robots.txt"] [unique_id "ams28_wCixxg0899_azarQAAABg"]
[Thu Jul 30 12:35:15.952725 2026] [authz_core:error] [pid 3092131:tid 3092131] [client 57.141.0.26:22842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:15.953367 2026] [authz_core:error] [pid 3092131:tid 3092131] [client 57.141.0.26:22842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:16.025401 2026] [lsapi:warn] [pid 3088144:tid 3088144] [client 122.180.21.11:53604] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:35:16.031219 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.69:45820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:16.031846 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.69:45820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:16.347002 2026] [core:error] [pid 3092223:tid 3092223] (13)Permission denied: [client 216.73.216.199:2959] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS0/uartclk
[Thu Jul 30 12:35:16.574825 2026] [authz_core:error] [pid 3092131:tid 3092131] [client 57.141.0.25:38488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:16.575453 2026] [authz_core:error] [pid 3092131:tid 3092131] [client 57.141.0.25:38488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:16.705615 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:59576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:16.705647 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:16.758741 2026] [ssl:error] [pid 3089299:tid 3089299] (EAI 2)Name or service not known: [client 144.76.19.72:59586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:16.758780 2026] [ssl:error] [pid 3089299:tid 3089299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:16.765713 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.59:25048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:16.766339 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.59:25048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:17.114860 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.23:30438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:17.115529 2026] [authz_core:error] [pid 3090840:tid 3090840] [client 57.141.0.23:30438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:17.381603 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.3:54182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:17.382229 2026] [authz_core:error] [pid 3083073:tid 3083073] [client 57.141.0.3:54182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:17.932477 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 20.206.204.219:65355] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/Diff/Renderer/error_log, referer: binance.com
[Thu Jul 30 12:35:18.139641 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.12:29636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:18.140269 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.12:29636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:18.279126 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.19:42610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:18.279759 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.19:42610] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:18.538754 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.28:21716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:18.539392 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.28:21716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:19.050985 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.69:39600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:19.051676 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.69:39600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:19.056085 2026] [core:error] [pid 3092223:tid 3092223] (13)Permission denied: [client 216.73.216.199:2959] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/trace
[Thu Jul 30 12:35:19.507879 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.23:30454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:19.508524 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.23:30454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:19.818627 2026] [ssl:error] [pid 3088950:tid 3088950] (EAI 2)Name or service not known: [client 144.76.19.72:56294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:19.818667 2026] [ssl:error] [pid 3088950:tid 3088950] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:19.841774 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.68:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:19.842403 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.68:22358] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:19.846597 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.26:22886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:19.847273 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.26:22886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:19.871885 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:56304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:19.871908 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:20.346172 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.48:20934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:20.346821 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.48:20934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:20.497485 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.39:35668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:20.498128 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.39:35668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:20.565406 2026] [security2:error] [pid 3088144:tid 3088144] [client 185.191.171.19:49162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/z-nation-10k-actor-change"] [unique_id "ams2-Asn8dZRT0BASB5nywAAAAk"]
[Thu Jul 30 12:35:20.655471 2026] [access_compat:error] [pid 3081197:tid 3081197] [client 125.176.202.122:49758] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:35:20.914109 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.25:38502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:20.914738 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.25:38502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:21.076219 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.3:26914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:21.076891 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.3:26914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:21.178926 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.26:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:21.179636 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.26:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:21.215734 2026] [security2:error] [pid 3090838:tid 3090838] [client 49.51.38.193:49332] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "q-s-e.org"] [uri "/"] [unique_id "ams2-XStnWUR1An1rnNUZAAAAC0"]
[Thu Jul 30 12:35:21.513334 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.37:23216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:21.513975 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.37:23216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:21.545238 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.31:65386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:21.545859 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.31:65386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:21.578569 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 158.158.32.229:4802] AH01630: client denied by server configuration: /home/heritag1/staging.heritageinsuranceagency.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 12:35:22.454266 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.58:34766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:22.454903 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.58:34766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:22.664144 2026] [core:error] [pid 3075978:tid 3075978] [client 66.249.66.167:46547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:22.664184 2026] [core:error] [pid 3075978:tid 3075978] [client 66.249.66.167:46547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:22.666282 2026] [core:error] [pid 3090618:tid 3090618] [client 66.249.66.39:64430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:22.666302 2026] [core:error] [pid 3090618:tid 3090618] [client 66.249.66.39:64430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:22.755329 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.70:32504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:22.755966 2026] [authz_core:error] [pid 3073215:tid 3073215] [client 57.141.0.70:32504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:22.816872 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.21:59918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:22.817564 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.21:59918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:22.935522 2026] [ssl:error] [pid 3092131:tid 3092131] (EAI 2)Name or service not known: [client 144.76.19.72:56318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:22.935558 2026] [ssl:error] [pid 3092131:tid 3092131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:23.030950 2026] [ssl:error] [pid 3089299:tid 3089299] (EAI 2)Name or service not known: [client 144.76.19.72:56324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:23.030979 2026] [ssl:error] [pid 3089299:tid 3089299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:23.058120 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.60:43968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:23.058779 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.60:43968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:23.249254 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.59:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:23.250242 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.59:25058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:23.874845 2026] [ssl:error] [pid 3092223:tid 3092223] (70014)End of file found: [client 216.73.216.199:2959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:24.038457 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.26:32178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:24.039091 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.26:32178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:24.068870 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.52:56542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:24.069519 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.52:56542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:24.666439 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.54:38454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:24.667350 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.54:38454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:24.679840 2026] [ssl:error] [pid 3090846:tid 3090846] (70014)End of file found: [client 216.73.216.199:56392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:24.890382 2026] [security2:error] [pid 3074543:tid 3074543] [client 185.191.171.16:54880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2762.0/prev_next,next.html"] [unique_id "ams2_NWU-I6qbWT5sw3KmAAAAAM"]
[Thu Jul 30 12:35:25.155044 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.40:36180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:25.155704 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.40:36180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:25.319405 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.32:48592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:25.320052 2026] [authz_core:error] [pid 3083308:tid 3083308] [client 57.141.0.32:48592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:25.585168 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.47:22660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:25.586101 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.47:22660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:25.953861 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.28:39832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:25.954506 2026] [authz_core:error] [pid 3074543:tid 3074543] [client 57.141.0.28:39832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:26.148473 2026] [core:error] [pid 3090793:tid 3090793] [client 57.141.0.33:51242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:26.148520 2026] [core:error] [pid 3090793:tid 3090793] [client 57.141.0.33:51242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:26.203231 2026] [ssl:error] [pid 3090795:tid 3090795] (EAI 2)Name or service not known: [client 144.76.19.72:56326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:26.203287 2026] [ssl:error] [pid 3090795:tid 3090795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:26.257808 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:56330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:26.257842 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:26.276681 2026] [core:error] [pid 3073215:tid 3073215] (13)Permission denied: [client 216.73.216.199:49696] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/machinecheck/machinecheck1/subsystem/drivers_probe
[Thu Jul 30 12:35:26.718398 2026] [lsapi:warn] [pid 3093454:tid 3093454] [client 122.180.21.11:54238] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:35:26.750581 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.3:26926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:26.751225 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.3:26926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:26.982666 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.18:48986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:26.983291 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.18:48986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:27.209474 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.31:44158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:27.210116 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.31:44158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:27.266206 2026] [access_compat:error] [pid 3082324:tid 3082324] [client 125.176.202.122:50059] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:35:27.770688 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.46:29352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:27.771318 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.46:29352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:27.779548 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.27:26536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:27.780185 2026] [authz_core:error] [pid 3090080:tid 3090080] [client 57.141.0.27:26536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:28.083168 2026] [ssl:error] [pid 3073215:tid 3073215] (70014)End of file found: [client 216.73.216.199:49696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:28.313239 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.51:54696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:28.313873 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.51:54696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:28.878398 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.26:32228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:28.879024 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.26:32228] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:29.101908 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.7:43738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:29.102569 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.7:43738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:29.152386 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.58:34812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:29.153044 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.58:34812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:29.291302 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.69:45072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:29.291949 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.69:45072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:29.613871 2026] [ssl:error] [pid 3088986:tid 3088986] (EAI 2)Name or service not known: [client 144.76.19.72:56334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:29.613916 2026] [ssl:error] [pid 3088986:tid 3088986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:29.747918 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:64038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:29.747947 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:29.861643 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.64:31052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:29.862267 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.64:31052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:29.866469 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.3:43326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:29.867091 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.3:43326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:29.890180 2026] [ssl:error] [pid 3093546:tid 3093546] (70014)End of file found: [client 216.73.216.199:53941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:30.297564 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 62.253.3.73:42226] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 12:35:30.303627 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 62.253.3.73:42226] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 12:35:30.389706 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.1:21770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:30.390341 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.1:21770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:30.569120 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.65:33166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:30.569744 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.65:33166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:30.879377 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.25:53804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:30.880013 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.25:53804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:31.063999 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.44:42488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:31.064659 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.44:42488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:31.394185 2026] [ssl:error] [pid 3090846:tid 3090846] (70014)End of file found: [client 216.73.216.199:32451] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:32.077277 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.45:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:32.077918 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.45:44344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:32.181348 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 66.249.66.34:35552] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:35:32.184006 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 66.249.66.34:35552] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:35:32.351086 2026] [authz_core:error] [pid 3093642:tid 3093642] [client 57.141.0.51:54718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:32.351714 2026] [authz_core:error] [pid 3093642:tid 3093642] [client 57.141.0.51:54718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:32.801669 2026] [ssl:error] [pid 3067992:tid 3067992] (EAI 2)Name or service not known: [client 144.76.19.72:64044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:32.801706 2026] [ssl:error] [pid 3067992:tid 3067992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:33.012539 2026] [ssl:error] [pid 3090741:tid 3090741] (EAI 2)Name or service not known: [client 144.76.19.72:64046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:33.012582 2026] [ssl:error] [pid 3090741:tid 3090741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:33.130268 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.21:48040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:33.130895 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 57.141.0.21:48040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:33.235976 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.41:23322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:33.236675 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.41:23322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:33.359922 2026] [authz_core:error] [pid 3093642:tid 3093642] [client 57.141.0.47:30374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:33.360561 2026] [authz_core:error] [pid 3093642:tid 3093642] [client 57.141.0.47:30374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:33.392993 2026] [access_compat:error] [pid 3067992:tid 3067992] [client 125.176.202.122:50341] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:35:33.516960 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.14:48998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:33.517657 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.14:48998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:33.802896 2026] [ssl:error] [pid 3090741:tid 3090741] (70014)End of file found: [client 216.73.216.199:30896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:34.422305 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.5:43312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:34.422934 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.5:43312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:34.688422 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.63:56700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:34.689167 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.63:56700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:34.864966 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.30:20886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:34.865598 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.30:20886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:34.980872 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 20.206.204.219:52369] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/pomo/error_log, referer: binance.com
[Thu Jul 30 12:35:35.607527 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.70:64752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:35.608156 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.70:64752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:35.628881 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.35:51240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:35.629513 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.35:51240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:35.838201 2026] [authz_core:error] [pid 3093642:tid 3093642] [client 57.141.0.29:49092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:35.838828 2026] [authz_core:error] [pid 3093642:tid 3093642] [client 57.141.0.29:49092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:36.068096 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:64052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:36.068126 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:36.126405 2026] [ssl:error] [pid 3090795:tid 3090795] (EAI 2)Name or service not known: [client 144.76.19.72:64068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:36.126442 2026] [ssl:error] [pid 3090795:tid 3090795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:36.270042 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.9:59628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:36.270680 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.9:59628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:36.580109 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.16:26002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:36.580734 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.16:26002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:36.979829 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.41:23332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:36.980448 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.41:23332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:37.072087 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.58:29258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:37.072716 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.58:29258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:37.366271 2026] [lsapi:warn] [pid 3088986:tid 3088986] [client 122.180.21.11:54875] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:35:37.424745 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.20:57540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:37.425373 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.20:57540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:37.426509 2026] [ssl:error] [pid 3083308:tid 3083308] (70014)End of file found: [client 216.73.216.199:15771] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:37.543601 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.20:57542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:37.544302 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.20:57542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:37.921510 2026] [ssl:error] [pid 3078608:tid 3078608] (70014)End of file found: [client 216.73.216.199:40849] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:38.288099 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.8:34904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:38.288789 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.8:34904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:38.296422 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.50:54484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:38.297036 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.50:54484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:38.440786 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.11:22746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:38.441410 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.11:22746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:38.558268 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.40:60586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:38.558902 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.40:60586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:39.191823 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:64070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:39.191867 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:39.248842 2026] [ssl:error] [pid 3089788:tid 3089788] (EAI 2)Name or service not known: [client 144.76.19.72:64082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:39.248870 2026] [ssl:error] [pid 3089788:tid 3089788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:39.911636 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.28:65412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:39.912392 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.28:65412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:40.099785 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.24:41040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:40.100415 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.24:41040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:40.135401 2026] [ssl:error] [pid 3082819:tid 3082819] (70014)End of file found: [client 216.73.216.199:58609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:40.135979 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.53:47598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:40.136613 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.53:47598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:40.242876 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.32:58452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:40.243507 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.32:58452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:40.253930 2026] [authz_core:error] [pid 3090741:tid 3090741] [client 20.206.204.219:53633] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/pomo/error_log, referer: binance.com
[Thu Jul 30 12:35:40.751913 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.3:21370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:40.752546 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.3:21370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:41.820834 2026] [authz_core:error] [pid 3093587:tid 3093587] [client 57.141.0.48:31574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:41.821464 2026] [authz_core:error] [pid 3093587:tid 3093587] [client 57.141.0.48:31574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:42.032046 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.13:29480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:42.032681 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.13:29480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:42.261821 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.34:33428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:42.262477 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.34:33428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:42.304315 2026] [ssl:error] [pid 3081197:tid 3081197] (EAI 2)Name or service not known: [client 144.76.19.72:55258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:42.304356 2026] [ssl:error] [pid 3081197:tid 3081197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:42.357493 2026] [ssl:error] [pid 3082377:tid 3082377] (EAI 2)Name or service not known: [client 144.76.19.72:55266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:42.357531 2026] [ssl:error] [pid 3082377:tid 3082377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:42.432123 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.60:30852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:42.432849 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.60:30852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:42.458180 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.6:43400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:42.458820 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.6:43400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:42.478481 2026] [ssl:error] [pid 3090742:tid 3090742] (70014)End of file found: [client 216.73.216.199:50787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:42.774923 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.2:53168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:42.775950 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.2:53168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:42.865635 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.51:62540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:42.866263 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.51:62540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:42.999142 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.12:23048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:42.999770 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.12:23048] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:43.388208 2026] [ssl:error] [pid 3092223:tid 3092223] (70014)End of file found: [client 216.73.216.199:57188] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:43.936674 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.10:34500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:43.937301 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.10:34500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:44.269780 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.23:31716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:44.270568 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.23:31716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:44.330567 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.19:61472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:44.331261 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.19:61472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:44.475776 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.7:60820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:44.476425 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.7:60820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:44.835820 2026] [security2:error] [pid 3093546:tid 3093546] [client 94.154.43.184:26730] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.cleversprogs.hatch-works.com"] [uri "/.env"] [unique_id "ams3EMvN1AQ_xNYhVt7jUQAAAAY"]
[Thu Jul 30 12:35:44.836012 2026] [security2:error] [pid 3093546:tid 3093546] [client 94.154.43.184:26730] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.cleversprogs.hatch-works.com"] [uri "/.env"] [unique_id "ams3EMvN1AQ_xNYhVt7jUQAAAAY"]
[Thu Jul 30 12:35:45.121275 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.45:44926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:45.121933 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.45:44926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:45.415396 2026] [ssl:error] [pid 3082819:tid 3082819] (EAI 2)Name or service not known: [client 144.76.19.72:55268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:45.415435 2026] [ssl:error] [pid 3082819:tid 3082819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:45.468387 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:55282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:45.468413 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:45.469478 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.20:47282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:45.470107 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.20:47282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:45.552374 2026] [security2:error] [pid 3093546:tid 3093546] [client 94.154.43.184:26730] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.cleversprogs.hatch-works.com"] [uri "/index.php"] [unique_id "ams3EMvN1AQ_xNYhVt7jUQAAAAY"]
[Thu Jul 30 12:35:46.454927 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.16:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:46.456067 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.16:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:46.680396 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.38:57028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:46.681146 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.38:57028] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:47.038568 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.45:49952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:47.039198 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.45:49952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:47.148136 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.24:50378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:47.148760 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.24:50378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:47.213378 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.7:20248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:47.214007 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.7:20248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:47.422671 2026] [access_compat:error] [pid 3093749:tid 3093749] [client 125.176.202.122:50878] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:35:47.688295 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.38:57034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:47.688921 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.38:57034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:47.797818 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.8:28128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:47.798464 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.8:28128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:47.894525 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.51:49286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:47.895222 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.51:49286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:48.008771 2026] [lsapi:warn] [pid 3090793:tid 3090793] [client 122.180.21.11:55506] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:35:48.211661 2026] [ssl:error] [pid 3090118:tid 3090118] (70014)End of file found: [client 216.73.216.199:50108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:48.520585 2026] [ssl:error] [pid 3090795:tid 3090795] (EAI 2)Name or service not known: [client 144.76.19.72:55286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:48.520622 2026] [ssl:error] [pid 3090795:tid 3090795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:48.576801 2026] [ssl:error] [pid 3090742:tid 3090742] (EAI 2)Name or service not known: [client 144.76.19.72:55288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:48.576849 2026] [ssl:error] [pid 3090742:tid 3090742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:48.770477 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.56:54018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:48.771112 2026] [authz_core:error] [pid 3092223:tid 3092223] [client 57.141.0.56:54018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:48.820108 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.55:46792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:48.820759 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.55:46792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:49.093789 2026] [core:error] [pid 3090795:tid 3090795] [client 66.249.66.167:53432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:49.093823 2026] [core:error] [pid 3090795:tid 3090795] [client 66.249.66.167:53432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:49.101598 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.41:52056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:49.102254 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.41:52056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:49.415121 2026] [ssl:error] [pid 3090793:tid 3090793] (70014)End of file found: [client 216.73.216.199:52533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:49.996450 2026] [security2:error] [pid 3088195:tid 3088195] [client 114.119.157.183:58575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~30"] [unique_id "ams3FSMTTyyQR4l_pYJh2QAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~30
[Thu Jul 30 12:35:49.996783 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.69:53280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:49.997408 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.69:53280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:50.174346 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.58:20534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:50.174978 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.58:20534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:50.723141 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.35:56150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:50.723791 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.35:56150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:50.917881 2026] [core:error] [pid 3080065:tid 3080065] (13)Permission denied: [client 216.73.216.199:4236] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS1/uartclk
[Thu Jul 30 12:35:51.041910 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.29:30910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:51.042554 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.29:30910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:51.188992 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.27:21378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:51.189633 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.27:21378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:51.220528 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.61:64902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:51.221167 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.61:64902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:51.450118 2026] [security2:error] [pid 3078608:tid 3078608] [client 114.119.157.183:26837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~30"] [unique_id "ams3FzcV7LM50MsWMMmdUQAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~30
[Thu Jul 30 12:35:51.630224 2026] [ssl:error] [pid 3093750:tid 3093750] (EAI 2)Name or service not known: [client 144.76.19.72:30466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:51.630274 2026] [ssl:error] [pid 3093750:tid 3093750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:51.683613 2026] [ssl:error] [pid 3088195:tid 3088195] (EAI 2)Name or service not known: [client 144.76.19.72:30482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:51.683645 2026] [ssl:error] [pid 3088195:tid 3088195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:51.798846 2026] [core:error] [pid 3090795:tid 3090795] [client 57.141.0.49:53812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:51.798873 2026] [core:error] [pid 3090795:tid 3090795] [client 57.141.0.49:53812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:35:51.975676 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.46:53158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:51.976303 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.46:53158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:52.830573 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.22:35370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:52.831197 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.22:35370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:53.168362 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.70:46380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:53.169004 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.70:46380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:53.184822 2026] [authz_core:error] [pid 3093587:tid 3093587] [client 57.141.0.16:34094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:53.185460 2026] [authz_core:error] [pid 3093587:tid 3093587] [client 57.141.0.16:34094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:53.325737 2026] [ssl:error] [pid 3080065:tid 3080065] (70014)End of file found: [client 216.73.216.199:4236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:53.381821 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.65:61686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:53.382479 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.65:61686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:53.401805 2026] [authz_core:error] [pid 3093546:tid 3093546] [client 57.141.0.11:23284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:53.402435 2026] [authz_core:error] [pid 3093546:tid 3093546] [client 57.141.0.11:23284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:53.605552 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.27:21386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:53.606185 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.27:21386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:53.970735 2026] [access_compat:error] [pid 3093750:tid 3093750] [client 125.176.202.122:51281] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:35:54.137570 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.40:22100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:54.138219 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.40:22100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:54.549840 2026] [authz_core:error] [pid 3093546:tid 3093546] [client 57.141.0.32:51332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:54.550475 2026] [authz_core:error] [pid 3093546:tid 3093546] [client 57.141.0.32:51332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:54.618093 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.15:20410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:54.618717 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.15:20410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:54.770707 2026] [ssl:error] [pid 3090705:tid 3090705] (EAI 2)Name or service not known: [client 144.76.19.72:30488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:54.770764 2026] [ssl:error] [pid 3090705:tid 3090705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:54.824328 2026] [ssl:error] [pid 3082324:tid 3082324] (EAI 2)Name or service not known: [client 144.76.19.72:30502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:54.824374 2026] [ssl:error] [pid 3082324:tid 3082324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:54.835108 2026] [ssl:error] [pid 3089788:tid 3089788] (70014)End of file found: [client 216.73.216.199:10747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:55.012857 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.51:49306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:55.013542 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.51:49306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:55.334777 2026] [core:error] [pid 3093587:tid 3093587] (13)Permission denied: [client 216.73.216.199:28285] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/usbmon/usbmon1/device/driver/bind
[Thu Jul 30 12:35:55.459333 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.15:20416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:55.459956 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.15:20416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:55.606822 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.8:39010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:55.607477 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.8:39010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:55.832345 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.21:46624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:55.832981 2026] [authz_core:error] [pid 3082324:tid 3082324] [client 57.141.0.21:46624] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:56.240052 2026] [authz_core:error] [pid 3093546:tid 3093546] [client 57.141.0.43:62856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:56.240713 2026] [authz_core:error] [pid 3093546:tid 3093546] [client 57.141.0.43:62856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:56.339161 2026] [ssl:error] [pid 3093587:tid 3093587] (70014)End of file found: [client 216.73.216.199:28285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:35:56.941458 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.55:20434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:56.942158 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.55:20434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:57.336155 2026] [security2:error] [pid 3093750:tid 3093750] [client 198.244.168.150:60588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/tag/asset-management/"] [unique_id "ams3HW9b87tfxUiu390diwAAACw"]
[Thu Jul 30 12:35:57.366040 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.55:20442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:57.366711 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.55:20442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:57.682129 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.23:43838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:57.682783 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.23:43838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:57.879107 2026] [ssl:error] [pid 3093641:tid 3093641] (EAI 2)Name or service not known: [client 144.76.19.72:30516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:57.879163 2026] [ssl:error] [pid 3093641:tid 3093641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:57.931550 2026] [ssl:error] [pid 3093750:tid 3093750] (EAI 2)Name or service not known: [client 144.76.19.72:30518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:35:57.931593 2026] [ssl:error] [pid 3093750:tid 3093750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:35:58.419339 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.48:61482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:58.419967 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.48:61482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:58.498386 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.31:33792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:58.499029 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.31:33792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:58.534125 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.56:52154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:58.534755 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.56:52154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:58.625946 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.27:21422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:58.626587 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.27:21422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:58.875085 2026] [lsapi:warn] [pid 3094784:tid 3094784] [client 122.180.21.11:56131] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:35:58.969304 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.38:20370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:58.969952 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.38:20370] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:59.909314 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.34:27570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:59.909951 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.34:27570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:35:59.918791 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.33:65130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:35:59.919408 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.33:65130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:00.457117 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.43:40642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:00.457742 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.43:40642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:00.594686 2026] [access_compat:error] [pid 3094489:tid 3094489] [client 125.176.202.122:51530] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:36:00.684606 2026] [core:error] [pid 3090841:tid 3090841] [client 66.249.66.167:64026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:00.684637 2026] [core:error] [pid 3090841:tid 3090841] [client 66.249.66.167:64026] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:00.988548 2026] [ssl:error] [pid 3078608:tid 3078608] (EAI 2)Name or service not known: [client 144.76.19.72:49218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:00.988579 2026] [ssl:error] [pid 3078608:tid 3078608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:01.044462 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:49228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:01.044491 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:01.062727 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.11:56006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:01.063365 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.11:56006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:01.166437 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 20.206.204.219:57881] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/sitemaps/error_log, referer: binance.com
[Thu Jul 30 12:36:01.296016 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.18:62148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:01.296661 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.18:62148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:01.334275 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.60:53386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:01.334901 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.60:53386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:01.549450 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.47:45084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:01.550170 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.47:45084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:01.693638 2026] [security2:error] [pid 3094784:tid 3094784] [client 51.68.111.202:20011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "chemicalgalaxy.co.uk"] [uri "/robots.txt"] [unique_id "ams3IchrIfdYCXxMFjwmIgAAAAg"]
[Thu Jul 30 12:36:02.325814 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.50:45676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:02.326462 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.50:45676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:02.774009 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.36:62896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:02.774660 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.36:62896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:02.945146 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.18:62164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:02.945803 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.18:62164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:03.135909 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.71:43336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:03.136547 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.71:43336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:03.316854 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.12:35442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:03.317488 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.12:35442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:03.620628 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.2:35834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:03.621270 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.2:35834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:03.917282 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.8:39020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:03.917922 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.8:39020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:04.100011 2026] [ssl:error] [pid 3094784:tid 3094784] (EAI 2)Name or service not known: [client 144.76.19.72:49232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:04.100061 2026] [ssl:error] [pid 3094784:tid 3094784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:04.153516 2026] [ssl:error] [pid 3081197:tid 3081197] (EAI 2)Name or service not known: [client 144.76.19.72:49242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:04.153551 2026] [ssl:error] [pid 3081197:tid 3081197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:04.163972 2026] [security2:error] [pid 3079100:tid 3079100] [client 216.73.216.199:37294] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/named.conf"] [unique_id "ams3JLbruTh_qe0pWp9i6AAAABw"]
[Thu Jul 30 12:36:04.164290 2026] [security2:error] [pid 3079100:tid 3079100] [client 216.73.216.199:37294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/named.conf"] [unique_id "ams3JLbruTh_qe0pWp9i6AAAABw"]
[Thu Jul 30 12:36:04.164550 2026] [security2:error] [pid 3079100:tid 3079100] [client 216.73.216.199:37294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/named.conf"] [unique_id "ams3JLbruTh_qe0pWp9i6AAAABw"]
[Thu Jul 30 12:36:04.466411 2026] [ssl:error] [pid 3079100:tid 3079100] (70014)End of file found: [client 216.73.216.199:37294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:04.877880 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.11:56012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:04.878527 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.11:56012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:04.961169 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.69:21216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:04.961798 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.69:21216] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:05.006928 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.43:40664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:05.007574 2026] [authz_core:error] [pid 3089299:tid 3089299] [client 57.141.0.43:40664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:05.184606 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.55:29018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:05.185233 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.55:29018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:05.274119 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.37:45316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:05.274756 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.37:45316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:05.398543 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.39:53268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:05.399206 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.39:53268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:05.934562 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.50:45688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:05.935181 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.50:45688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:07.162775 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.1:57302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:07.163418 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.1:57302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:07.208167 2026] [ssl:error] [pid 3089299:tid 3089299] (EAI 2)Name or service not known: [client 144.76.19.72:49258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:07.208205 2026] [ssl:error] [pid 3089299:tid 3089299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:07.247748 2026] [security2:error] [pid 3089788:tid 3089788] [client 124.222.230.178:36536] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tartanbag.com"] [uri "/"] [unique_id "ams3J721OhZwe40My7rHTgAAAA8"]
[Thu Jul 30 12:36:07.261730 2026] [ssl:error] [pid 3090841:tid 3090841] (EAI 2)Name or service not known: [client 144.76.19.72:49274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:07.261757 2026] [ssl:error] [pid 3090841:tid 3090841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:07.261769 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.10:60904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:07.262394 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.10:60904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:07.570684 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.65:27180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:07.571314 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.65:27180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:08.022487 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.65:27184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:08.023131 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.65:27184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:08.045102 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.46:57802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:08.045746 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.46:57802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:08.083470 2026] [core:error] [pid 3067992:tid 3067992] (13)Permission denied: [client 216.73.216.199:36478] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nft_compat/sections/__mcount_loc
[Thu Jul 30 12:36:08.439227 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.64.170:51443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:08.439259 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.64.170:51443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:08.685516 2026] [ssl:error] [pid 3067992:tid 3067992] (70014)End of file found: [client 216.73.216.199:36478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:08.926752 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 57.141.0.34:59278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:08.927385 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 57.141.0.34:59278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:08.986581 2026] [ssl:error] [pid 3094784:tid 3094784] (70014)End of file found: [client 216.73.216.199:4229] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:09.033232 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.16:26122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:09.033884 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.16:26122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:09.217464 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.61:59146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:09.218109 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.61:59146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:09.409976 2026] [lsapi:warn] [pid 3079193:tid 3079193] [client 122.180.21.11:56757] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:36:09.428189 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.59:26804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:09.428839 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.59:26804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:09.641142 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.70:46690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:09.641775 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.70:46690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:09.707389 2026] [authz_core:error] [pid 3089278:tid 3089278] [client 57.141.0.16:26124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:09.708019 2026] [authz_core:error] [pid 3089278:tid 3089278] [client 57.141.0.16:26124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:09.896140 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.2:47436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:09.896784 2026] [authz_core:error] [pid 3093718:tid 3093718] [client 57.141.0.2:47436] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:10.320179 2026] [ssl:error] [pid 3093454:tid 3093454] (EAI 2)Name or service not known: [client 144.76.19.72:47898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:10.320216 2026] [ssl:error] [pid 3093454:tid 3093454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:10.378204 2026] [ssl:error] [pid 3087847:tid 3087847] (EAI 2)Name or service not known: [client 144.76.19.72:47914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:10.378264 2026] [ssl:error] [pid 3087847:tid 3087847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:10.788733 2026] [ssl:error] [pid 3093749:tid 3093749] (70014)End of file found: [client 216.73.216.199:6372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:10.893475 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.55:29032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:10.894128 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.55:29032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:10.922877 2026] [authz_core:error] [pid 3089278:tid 3089278] [client 20.206.204.219:59953] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/sitemaps/error_log, referer: binance.com
[Thu Jul 30 12:36:11.326639 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.40:55584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:11.327268 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.40:55584] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:11.776244 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.20:42100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:11.776879 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.20:42100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:11.999492 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.13:64774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:12.000210 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.13:64774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:12.511007 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.55:29036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:12.511687 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.55:29036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:12.787179 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 66.249.66.33:44957] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:36:12.789831 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 66.249.66.33:44957] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:36:13.342768 2026] [access_compat:error] [pid 3088144:tid 3088144] [client 125.176.202.122:52066] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:36:13.412127 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.33:37392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:13.412770 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.33:37392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:13.438631 2026] [ssl:error] [pid 3090742:tid 3090742] (EAI 2)Name or service not known: [client 144.76.19.72:47922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:13.438678 2026] [ssl:error] [pid 3090742:tid 3090742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:13.475798 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.6:46092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:13.476441 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.6:46092] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:13.491722 2026] [ssl:error] [pid 3083115:tid 3083115] (EAI 2)Name or service not known: [client 144.76.19.72:47934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:13.491766 2026] [ssl:error] [pid 3083115:tid 3083115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:13.553677 2026] [authz_core:error] [pid 3095194:tid 3095194] [client 57.141.0.40:55614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:13.554335 2026] [authz_core:error] [pid 3095194:tid 3095194] [client 57.141.0.40:55614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:13.617044 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.71:56052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:13.617755 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.71:56052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:13.628709 2026] [ssl:error] [pid 3078608:tid 3078608] (70014)End of file found: [client 216.73.216.199:20754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:13.833998 2026] [access_compat:error] [pid 3088195:tid 3088195] [client 45.158.164.139:41850] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:36:13.929977 2026] [ssl:error] [pid 3090618:tid 3090618] (70014)End of file found: [client 216.73.216.199:51086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:13.953099 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.25:27964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:13.953727 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.25:27964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:14.712348 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.1:63678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:14.713001 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.1:63678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:14.829672 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.10:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:14.830310 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.10:60928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:14.836960 2026] [security2:error] [pid 3095196:tid 3095196] [client 216.73.216.199:59148] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/lib64/cracklib_dict.pwd"] [unique_id "ams3Lr2-wMPmeXECdPQp-wAAABU"]
[Thu Jul 30 12:36:14.837289 2026] [security2:error] [pid 3095196:tid 3095196] [client 216.73.216.199:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/lib64/cracklib_dict.pwd"] [unique_id "ams3Lr2-wMPmeXECdPQp-wAAABU"]
[Thu Jul 30 12:36:14.837541 2026] [security2:error] [pid 3095196:tid 3095196] [client 216.73.216.199:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/lib64/cracklib_dict.pwd"] [unique_id "ams3Lr2-wMPmeXECdPQp-wAAABU"]
[Thu Jul 30 12:36:15.138591 2026] [ssl:error] [pid 3095196:tid 3095196] (70014)End of file found: [client 216.73.216.199:59148] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:15.245459 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.67:34274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:15.246120 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.67:34274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:15.676047 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.35:39694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:15.676705 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.35:39694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:15.699478 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.62:37062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:15.700136 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.62:37062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:15.702866 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.54:38162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:15.703507 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.54:38162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:15.823174 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.17:42848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:15.823809 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.17:42848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:16.547059 2026] [ssl:error] [pid 3092477:tid 3092477] (EAI 2)Name or service not known: [client 144.76.19.72:47950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:16.547116 2026] [ssl:error] [pid 3092477:tid 3092477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:16.602697 2026] [ssl:error] [pid 3090795:tid 3090795] (EAI 2)Name or service not known: [client 144.76.19.72:47958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:16.602756 2026] [ssl:error] [pid 3090795:tid 3090795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:16.642048 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.50:21650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:16.642708 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.50:21650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:17.153936 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.33:37446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:17.154608 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.33:37446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:17.215336 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.59:27920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:17.215609 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.11:39630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:17.215966 2026] [authz_core:error] [pid 3080065:tid 3080065] [client 57.141.0.59:27920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:17.216226 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.11:39630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:17.897019 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.32:42226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:17.897734 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.32:42226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:18.262259 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.23:25738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:18.262910 2026] [authz_core:error] [pid 3090846:tid 3090846] [client 57.141.0.23:25738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:18.859413 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.48:47332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:18.860048 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.48:47332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:19.184588 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.29:45982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:19.185225 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.29:45982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:19.229598 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.54:46124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:19.230250 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.54:46124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:19.354821 2026] [core:error] [pid 3082377:tid 3082377] (13)Permission denied: [client 216.73.216.199:31852] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/firmware/acpi/tables/APIC
[Thu Jul 30 12:36:19.489609 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.15:61022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:19.490252 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.15:61022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:19.655850 2026] [ssl:error] [pid 3089788:tid 3089788] (EAI 2)Name or service not known: [client 144.76.19.72:54524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:19.655894 2026] [ssl:error] [pid 3089788:tid 3089788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:19.710364 2026] [ssl:error] [pid 3090793:tid 3090793] (EAI 2)Name or service not known: [client 144.76.19.72:54526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:19.710395 2026] [ssl:error] [pid 3090793:tid 3090793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:19.763976 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.59:27932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:19.764641 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.59:27932] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:19.787016 2026] [security2:error] [pid 3090618:tid 3090618] [client 139.155.134.17:59312] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "ams3MzqpBC0FwvDMksESeAAAAA0"]
[Thu Jul 30 12:36:20.084549 2026] [lsapi:warn] [pid 3088986:tid 3088986] [client 122.180.21.11:57394] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:36:20.202974 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.42:59422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:20.203635 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.42:59422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:20.472011 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.20:64894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:20.472767 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.20:64894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:20.858780 2026] [security2:error] [pid 3082377:tid 3082377] [client 216.73.216.199:31852] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/vconsole.conf"] [unique_id "ams3NGwfi5tzO5JoEzDccwAAABA"]
[Thu Jul 30 12:36:20.859087 2026] [security2:error] [pid 3082377:tid 3082377] [client 216.73.216.199:31852] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/vconsole.conf"] [unique_id "ams3NGwfi5tzO5JoEzDccwAAABA"]
[Thu Jul 30 12:36:20.859310 2026] [security2:error] [pid 3082377:tid 3082377] [client 216.73.216.199:31852] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/vconsole.conf"] [unique_id "ams3NGwfi5tzO5JoEzDccwAAABA"]
[Thu Jul 30 12:36:21.160160 2026] [core:error] [pid 3082377:tid 3082377] (13)Permission denied: [client 216.73.216.199:31852] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ftrace_event_field/total_objects
[Thu Jul 30 12:36:21.331555 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.33:37490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:21.332206 2026] [authz_core:error] [pid 3093750:tid 3093750] [client 57.141.0.33:37490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:21.461575 2026] [ssl:error] [pid 3082377:tid 3082377] (70014)End of file found: [client 216.73.216.199:31852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:21.580092 2026] [security2:error] [pid 3090618:tid 3090618] [client 185.191.171.11:22318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/examples-of-smart-goals-for-medical-coders"] [unique_id "ams3NTqpBC0FwvDMksESeQAAAA0"]
[Thu Jul 30 12:36:21.670452 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.12:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:21.671113 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.12:42518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:21.740217 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.1:32334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:21.740840 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.1:32334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:22.001622 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.41:31210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:22.002281 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.41:31210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:22.005006 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.22:26752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:22.005668 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.22:26752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:22.019306 2026] [security2:error] [pid 3093639:tid 3093639] [client 139.155.134.17:34006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ams3NqRTLzqZ21fiszm5iQAAAB0"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 12:36:22.059625 2026] [cgi:error] [pid 3093639:tid 3093639] [client 139.155.134.17:34006] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 12:36:22.078407 2026] [ssl:error] [pid 3090742:tid 3090742] (70014)End of file found: [client 216.73.216.199:12169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:22.372292 2026] [autoindex:error] [pid 3093454:tid 3093454] (13)Permission denied: [client 216.73.216.199:58901] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cpanel/
[Thu Jul 30 12:36:22.610946 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.18:34150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:22.611738 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.18:34150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:22.670117 2026] [security2:error] [pid 3093454:tid 3093454] [client 216.73.216.199:58901] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/man_db.conf"] [unique_id "ams3Nux7rLm3SGVaWCF1nAAAABE"]
[Thu Jul 30 12:36:22.670480 2026] [security2:error] [pid 3093454:tid 3093454] [client 216.73.216.199:58901] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/man_db.conf"] [unique_id "ams3Nux7rLm3SGVaWCF1nAAAABE"]
[Thu Jul 30 12:36:22.670818 2026] [security2:error] [pid 3093454:tid 3093454] [client 216.73.216.199:58901] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/man_db.conf"] [unique_id "ams3Nux7rLm3SGVaWCF1nAAAABE"]
[Thu Jul 30 12:36:22.766193 2026] [ssl:error] [pid 3093641:tid 3093641] (EAI 2)Name or service not known: [client 144.76.19.72:54538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:22.766234 2026] [ssl:error] [pid 3093641:tid 3093641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:22.820703 2026] [ssl:error] [pid 3082819:tid 3082819] (EAI 2)Name or service not known: [client 144.76.19.72:54548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:22.820747 2026] [ssl:error] [pid 3082819:tid 3082819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:22.963089 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.15:61036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:22.963719 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.15:61036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:23.338879 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.52:31406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:23.339538 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.52:31406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:23.366230 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.39:39508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:23.366911 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.39:39508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:23.568622 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.47:38022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:23.569274 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.47:38022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:23.873302 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.50:57504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:23.873931 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.50:57504] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:24.084995 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.43:20234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:24.085657 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.43:20234] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:24.351453 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.65:41842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:24.352209 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.65:41842] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:24.608974 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 125.176.202.122:52610] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:36:25.387559 2026] [ssl:error] [pid 3093454:tid 3093454] (70014)End of file found: [client 216.73.216.199:58901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:25.485728 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.6:31714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:25.486385 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.6:31714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:25.822487 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.40:26918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:25.823199 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.40:26918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:25.898766 2026] [ssl:error] [pid 3084598:tid 3084598] (EAI 2)Name or service not known: [client 144.76.19.72:54552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:25.898813 2026] [ssl:error] [pid 3084598:tid 3084598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:25.953584 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:54556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:25.953622 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:26.203640 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.71:20734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:26.204286 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.71:20734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:26.585154 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.51:64756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:26.585802 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.51:64756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:26.756086 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.65:41846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:26.756732 2026] [authz_core:error] [pid 3082819:tid 3082819] [client 57.141.0.65:41846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:27.494538 2026] [ssl:error] [pid 3090705:tid 3090705] (70014)End of file found: [client 216.73.216.199:8773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:27.952413 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.67:65070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:27.953087 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.67:65070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:27.999984 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.50:57518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:28.000642 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.50:57518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:28.009598 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.61:28412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:28.010686 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.61:28412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:28.096848 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.43:20250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:28.097485 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.43:20250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:28.250661 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.71:20742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:28.251305 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.71:20742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:28.570557 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.14:50614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:28.571202 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.14:50614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:28.953836 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.19:20346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:28.955024 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.19:20346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:29.007730 2026] [ssl:error] [pid 3093641:tid 3093641] (EAI 2)Name or service not known: [client 144.76.19.72:54564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:29.007768 2026] [ssl:error] [pid 3093641:tid 3093641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:29.099899 2026] [ssl:error] [pid 3093588:tid 3093588] (EAI 2)Name or service not known: [client 144.76.19.72:54572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:29.099947 2026] [ssl:error] [pid 3093588:tid 3093588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:29.260168 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.6:31726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:29.260814 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.6:31726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:29.331963 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.44:36380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:29.332594 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.44:36380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:30.011198 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.59:49220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:30.011834 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.59:49220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:30.042290 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.26:25734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:30.042938 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.26:25734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:30.199285 2026] [ssl:error] [pid 3082819:tid 3082819] (70014)End of file found: [client 216.73.216.199:46912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:30.349294 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 20.206.204.219:63701] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:36:30.635731 2026] [lsapi:warn] [pid 3088986:tid 3088986] [client 122.180.21.11:58024] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:36:30.671171 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.46:24730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:30.671799 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.46:24730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:30.686918 2026] [ssl:error] [pid 3079365:tid 3079365] (70014)End of file found: [client 216.73.216.199:9912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:30.751909 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.65:41848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:30.752542 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.65:41848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:30.784116 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.64:55040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:30.784745 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.64:55040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:31.301725 2026] [access_compat:error] [pid 3093749:tid 3093749] [client 125.176.202.122:52984] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:36:31.623526 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.68:42164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:31.624157 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.68:42164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:31.668206 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.56:61904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:31.668881 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.56:61904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:32.083370 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.42:57550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:32.084008 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.42:57550] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:32.155634 2026] [ssl:error] [pid 3088986:tid 3088986] (EAI 2)Name or service not known: [client 144.76.19.72:35180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:32.155670 2026] [ssl:error] [pid 3088986:tid 3088986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:32.209484 2026] [ssl:error] [pid 3096133:tid 3096133] (EAI 2)Name or service not known: [client 144.76.19.72:35196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:32.209537 2026] [ssl:error] [pid 3096133:tid 3096133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:32.566150 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.56:61920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:32.566786 2026] [authz_core:error] [pid 3096133:tid 3096133] [client 57.141.0.56:61920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:32.688015 2026] [authz_core:error] [pid 3096339:tid 3096339] [client 57.141.0.42:57556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:32.688702 2026] [authz_core:error] [pid 3096339:tid 3096339] [client 57.141.0.42:57556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:32.801855 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 66.249.66.33:60913] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:36:32.804574 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 66.249.66.33:60913] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:36:32.813537 2026] [ssl:error] [pid 3090795:tid 3090795] (70014)End of file found: [client 216.73.216.199:39441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:33.011406 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.61:27362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:33.012037 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.61:27362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:33.292730 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.33:62278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:33.293422 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.33:62278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:33.432652 2026] [security2:error] [pid 3094784:tid 3094784] [client 119.73.99.125:11898] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3QchrIfdYCXxMFjwmLgAAAAg"]
[Thu Jul 30 12:36:33.432704 2026] [security2:error] [pid 3094784:tid 3094784] [client 119.73.99.125:11898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3QchrIfdYCXxMFjwmLgAAAAg"]
[Thu Jul 30 12:36:33.432976 2026] [security2:error] [pid 3094784:tid 3094784] [client 119.73.99.125:11898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3QchrIfdYCXxMFjwmLgAAAAg"]
[Thu Jul 30 12:36:34.494484 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.54:55586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:34.495198 2026] [authz_core:error] [pid 3090705:tid 3090705] [client 57.141.0.54:55586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:34.565186 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.38:27472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:34.565815 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.38:27472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:34.720186 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.9:29170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:34.720904 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.9:29170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:34.837986 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.30:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:34.838635 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.30:29728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:34.922532 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.66.39:57287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:34.922559 2026] [core:error] [pid 3079193:tid 3079193] [client 66.249.66.39:57287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:34.924989 2026] [core:error] [pid 3090705:tid 3090705] [client 66.249.66.167:51279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:34.925016 2026] [core:error] [pid 3090705:tid 3090705] [client 66.249.66.167:51279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:35.266986 2026] [ssl:error] [pid 3094489:tid 3094489] (EAI 2)Name or service not known: [client 144.76.19.72:35202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:35.267030 2026] [ssl:error] [pid 3094489:tid 3094489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:35.321312 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.59:49226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:35.322011 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.59:49226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:35.323647 2026] [ssl:error] [pid 3083115:tid 3083115] (EAI 2)Name or service not known: [client 144.76.19.72:35218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:35.323681 2026] [ssl:error] [pid 3083115:tid 3083115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:35.542543 2026] [ssl:error] [pid 3090705:tid 3090705] (70014)End of file found: [client 216.73.216.199:13608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:35.556463 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.12:50682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:35.557166 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.12:50682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:35.730385 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.48:23034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:35.731004 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.48:23034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:36.119901 2026] [ssl:error] [pid 3079365:tid 3079365] (70014)End of file found: [client 216.73.216.199:62964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:36.294045 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.58:43850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:36.294685 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.58:43850] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:36.723181 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.58:43854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:36.723846 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.58:43854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:36.799283 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.63:36892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:36.799904 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.63:36892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:37.419645 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.26:38742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:37.420284 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.26:38742] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:37.491536 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.44:44642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:37.492227 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.44:44642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:37.516729 2026] [access_compat:error] [pid 3087847:tid 3087847] [client 125.176.202.122:53319] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:36:37.555378 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.62:47680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:37.556028 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.62:47680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:38.066164 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 20.206.204.219:64913] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:36:38.267598 2026] [ssl:error] [pid 3079193:tid 3079193] (70014)End of file found: [client 216.73.216.199:4640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:38.273489 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.50:55666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:38.274158 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.50:55666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:38.377656 2026] [ssl:error] [pid 3095156:tid 3095156] (EAI 2)Name or service not known: [client 144.76.19.72:35230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:38.377699 2026] [ssl:error] [pid 3095156:tid 3095156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:38.421129 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 66.249.66.33:62409] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:36:38.423818 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 66.249.66.33:62409] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:36:38.435383 2026] [ssl:error] [pid 3090793:tid 3090793] (EAI 2)Name or service not known: [client 144.76.19.72:35244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:38.435412 2026] [ssl:error] [pid 3090793:tid 3090793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:38.531104 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.2:36382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:38.531731 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.2:36382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:38.590258 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 66.249.66.33:62409] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:36:38.592914 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 66.249.66.33:62409] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:36:38.627174 2026] [core:error] [pid 3093454:tid 3093454] [client 66.249.66.167:44784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:38.627201 2026] [core:error] [pid 3093454:tid 3093454] [client 66.249.66.167:44784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:38.989367 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.7:27122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:38.989992 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.7:27122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:39.172877 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.19:39712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:39.173527 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.19:39712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:39.230281 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.41:64758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:39.230910 2026] [authz_core:error] [pid 3079100:tid 3079100] [client 57.141.0.41:64758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:39.352923 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.6:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:39.353561 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.6:27544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:39.837765 2026] [authz_core:error] [pid 3096659:tid 3096659] [client 57.141.0.55:33820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:39.838453 2026] [authz_core:error] [pid 3096659:tid 3096659] [client 57.141.0.55:33820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:39.954733 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.40:47366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:39.955362 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.40:47366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:39.988536 2026] [security2:error] [pid 3079100:tid 3079100] [client 45.148.10.67:41268] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.git/config"] [unique_id "ams3R7bruTh_qe0pWp9i9AAAABw"]
[Thu Jul 30 12:36:39.988730 2026] [security2:error] [pid 3079100:tid 3079100] [client 45.148.10.67:41268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.git/config"] [unique_id "ams3R7bruTh_qe0pWp9i9AAAABw"]
[Thu Jul 30 12:36:39.988912 2026] [security2:error] [pid 3079100:tid 3079100] [client 45.148.10.67:41268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/403.shtml"] [unique_id "ams3R7bruTh_qe0pWp9i9AAAABw"]
[Thu Jul 30 12:36:40.304375 2026] [security2:error] [pid 3088144:tid 3088144] [client 101.47.24.93:50267] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3SAsn8dZRT0BASB5n6gAAAAk"]
[Thu Jul 30 12:36:40.304428 2026] [security2:error] [pid 3088144:tid 3088144] [client 101.47.24.93:50267] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3SAsn8dZRT0BASB5n6gAAAAk"]
[Thu Jul 30 12:36:40.304708 2026] [security2:error] [pid 3088144:tid 3088144] [client 101.47.24.93:50267] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3SAsn8dZRT0BASB5n6gAAAAk"]
[Thu Jul 30 12:36:40.404389 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env"] [unique_id "ams3SL2-wMPmeXECdPQqBwAAABU"]
[Thu Jul 30 12:36:40.404591 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env"] [unique_id "ams3SL2-wMPmeXECdPQqBwAAABU"]
[Thu Jul 30 12:36:40.404829 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env"] [unique_id "ams3SL2-wMPmeXECdPQqBwAAABU"]
[Thu Jul 30 12:36:40.647827 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/portal/.env"] [unique_id "ams3SL2-wMPmeXECdPQqCgAAABU"]
[Thu Jul 30 12:36:40.648021 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/portal/.env"] [unique_id "ams3SL2-wMPmeXECdPQqCgAAABU"]
[Thu Jul 30 12:36:40.648297 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/portal/.env"] [unique_id "ams3SL2-wMPmeXECdPQqCgAAABU"]
[Thu Jul 30 12:36:40.671107 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/env/.env"] [unique_id "ams3SL2-wMPmeXECdPQqCwAAABU"]
[Thu Jul 30 12:36:40.671292 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/env/.env"] [unique_id "ams3SL2-wMPmeXECdPQqCwAAABU"]
[Thu Jul 30 12:36:40.671521 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/env/.env"] [unique_id "ams3SL2-wMPmeXECdPQqCwAAABU"]
[Thu Jul 30 12:36:40.716446 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/api/.env"] [unique_id "ams3SL2-wMPmeXECdPQqDAAAABU"]
[Thu Jul 30 12:36:40.716649 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/api/.env"] [unique_id "ams3SL2-wMPmeXECdPQqDAAAABU"]
[Thu Jul 30 12:36:40.716862 2026] [security2:error] [pid 3095196:tid 3095196] [client 45.148.10.67:52808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/api/.env"] [unique_id "ams3SL2-wMPmeXECdPQqDAAAABU"]
[Thu Jul 30 12:36:40.805293 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/app/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlAAAABo"]
[Thu Jul 30 12:36:40.805479 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/app/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlAAAABo"]
[Thu Jul 30 12:36:40.805713 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/app/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlAAAABo"]
[Thu Jul 30 12:36:40.870401 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/dev/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlQAAABo"]
[Thu Jul 30 12:36:40.870598 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/dev/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlQAAABo"]
[Thu Jul 30 12:36:40.870821 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/dev/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlQAAABo"]
[Thu Jul 30 12:36:40.915455 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/new/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlgAAABo"]
[Thu Jul 30 12:36:40.915634 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/new/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlgAAABo"]
[Thu Jul 30 12:36:40.915827 2026] [security2:error] [pid 3093588:tid 3093588] [client 45.148.10.67:52824] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/new/.env"] [unique_id "ams3SDkL3IKLip6cYp4DlgAAABo"]
[Thu Jul 30 12:36:40.936863 2026] [authz_core:error] [pid 3096711:tid 3096711] [client 57.141.0.40:47378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:40.937489 2026] [authz_core:error] [pid 3096711:tid 3096711] [client 57.141.0.40:47378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:40.987434 2026] [ssl:error] [pid 3090705:tid 3090705] (70014)End of file found: [client 216.73.216.199:62481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:41.030151 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/new/.env.local"] [unique_id "ams3SfjpY7cYgsiqcJcqAAAAACk"]
[Thu Jul 30 12:36:41.030342 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/new/.env.local"] [unique_id "ams3SfjpY7cYgsiqcJcqAAAAACk"]
[Thu Jul 30 12:36:41.030568 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/new/.env.local"] [unique_id "ams3SfjpY7cYgsiqcJcqAAAAACk"]
[Thu Jul 30 12:36:41.064996 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/new/.env.production"] [unique_id "ams3SfjpY7cYgsiqcJcqAQAAACk"]
[Thu Jul 30 12:36:41.065209 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/new/.env.production"] [unique_id "ams3SfjpY7cYgsiqcJcqAQAAACk"]
[Thu Jul 30 12:36:41.065456 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/new/.env.production"] [unique_id "ams3SfjpY7cYgsiqcJcqAQAAACk"]
[Thu Jul 30 12:36:41.102475 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/new/.env.staging"] [unique_id "ams3SfjpY7cYgsiqcJcqAgAAACk"]
[Thu Jul 30 12:36:41.102681 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/new/.env.staging"] [unique_id "ams3SfjpY7cYgsiqcJcqAgAAACk"]
[Thu Jul 30 12:36:41.102907 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/new/.env.staging"] [unique_id "ams3SfjpY7cYgsiqcJcqAgAAACk"]
[Thu Jul 30 12:36:41.199158 2026] [lsapi:warn] [pid 3090618:tid 3090618] [client 122.180.21.11:58650] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:36:41.374442 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.27:46670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:41.375084 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.27:46670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:41.384646 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/awstats/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCQAAACk"]
[Thu Jul 30 12:36:41.384815 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/awstats/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCQAAACk"]
[Thu Jul 30 12:36:41.385018 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/awstats/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCQAAACk"]
[Thu Jul 30 12:36:41.421095 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/conf/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCgAAACk"]
[Thu Jul 30 12:36:41.421280 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/conf/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCgAAACk"]
[Thu Jul 30 12:36:41.421523 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/conf/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCgAAACk"]
[Thu Jul 30 12:36:41.444411 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/cron/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCwAAACk"]
[Thu Jul 30 12:36:41.444600 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/cron/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCwAAACk"]
[Thu Jul 30 12:36:41.444821 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/cron/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqCwAAACk"]
[Thu Jul 30 12:36:41.486424 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/www/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDAAAACk"]
[Thu Jul 30 12:36:41.486589 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/www/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDAAAACk"]
[Thu Jul 30 12:36:41.486808 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/www/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDAAAACk"]
[Thu Jul 30 12:36:41.490730 2026] [ssl:error] [pid 3093640:tid 3093640] (EAI 2)Name or service not known: [client 144.76.19.72:55442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:41.490759 2026] [ssl:error] [pid 3093640:tid 3093640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:41.518192 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/docker/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDQAAACk"]
[Thu Jul 30 12:36:41.518378 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/docker/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDQAAACk"]
[Thu Jul 30 12:36:41.518598 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/docker/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDQAAACk"]
[Thu Jul 30 12:36:41.542475 2026] [ssl:error] [pid 3093640:tid 3093640] (EAI 2)Name or service not known: [client 144.76.19.72:55446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:41.542510 2026] [ssl:error] [pid 3093640:tid 3093640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:41.552399 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/docker/app/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDgAAACk"]
[Thu Jul 30 12:36:41.552604 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/docker/app/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDgAAACk"]
[Thu Jul 30 12:36:41.552823 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/docker/app/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqDgAAACk"]
[Thu Jul 30 12:36:41.583145 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.ditchfest.com"] [uri "/env.backup"] [unique_id "ams3SfjpY7cYgsiqcJcqDwAAACk"]
[Thu Jul 30 12:36:41.583399 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/env.backup"] [unique_id "ams3SfjpY7cYgsiqcJcqDwAAACk"]
[Thu Jul 30 12:36:41.583631 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/env.backup"] [unique_id "ams3SfjpY7cYgsiqcJcqDwAAACk"]
[Thu Jul 30 12:36:41.727939 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.vscode/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFAAAACk"]
[Thu Jul 30 12:36:41.728188 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.vscode/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFAAAACk"]
[Thu Jul 30 12:36:41.728414 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.vscode/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFAAAACk"]
[Thu Jul 30 12:36:41.797096 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/js/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFQAAACk"]
[Thu Jul 30 12:36:41.797289 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/js/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFQAAACk"]
[Thu Jul 30 12:36:41.797515 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/js/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFQAAACk"]
[Thu Jul 30 12:36:41.819877 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/laravel/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFgAAACk"]
[Thu Jul 30 12:36:41.820059 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/laravel/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFgAAACk"]
[Thu Jul 30 12:36:41.820304 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/laravel/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFgAAACk"]
[Thu Jul 30 12:36:41.845770 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/laravel/core/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFwAAACk"]
[Thu Jul 30 12:36:41.845985 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/laravel/core/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFwAAACk"]
[Thu Jul 30 12:36:41.846252 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/laravel/core/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqFwAAACk"]
[Thu Jul 30 12:36:41.879245 2026] [authz_core:error] [pid 3096034:tid 3096034] [client 57.141.0.39:26844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:41.879873 2026] [authz_core:error] [pid 3096034:tid 3096034] [client 57.141.0.39:26844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:41.896569 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/mail/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGAAAACk"]
[Thu Jul 30 12:36:41.896752 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/mail/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGAAAACk"]
[Thu Jul 30 12:36:41.896971 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/mail/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGAAAACk"]
[Thu Jul 30 12:36:41.922385 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/mailer/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGQAAACk"]
[Thu Jul 30 12:36:41.922571 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/mailer/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGQAAACk"]
[Thu Jul 30 12:36:41.922782 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/mailer/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGQAAACk"]
[Thu Jul 30 12:36:41.953639 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.65:23040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:41.954269 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.65:23040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:41.959640 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/nginx/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGgAAACk"]
[Thu Jul 30 12:36:41.959810 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/nginx/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGgAAACk"]
[Thu Jul 30 12:36:41.960037 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/nginx/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGgAAACk"]
[Thu Jul 30 12:36:41.994738 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/public/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGwAAACk"]
[Thu Jul 30 12:36:41.994962 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/public/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGwAAACk"]
[Thu Jul 30 12:36:41.995207 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/public/.env"] [unique_id "ams3SfjpY7cYgsiqcJcqGwAAACk"]
[Thu Jul 30 12:36:42.034213 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/site/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHAAAACk"]
[Thu Jul 30 12:36:42.034417 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/site/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHAAAACk"]
[Thu Jul 30 12:36:42.034668 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/site/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHAAAACk"]
[Thu Jul 30 12:36:42.061872 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.63:36906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:42.062546 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.63:36906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:42.086420 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/xampp/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHQAAACk"]
[Thu Jul 30 12:36:42.086625 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/xampp/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHQAAACk"]
[Thu Jul 30 12:36:42.086865 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/xampp/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHQAAACk"]
[Thu Jul 30 12:36:42.125288 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/main/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHgAAACk"]
[Thu Jul 30 12:36:42.125506 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/main/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHgAAACk"]
[Thu Jul 30 12:36:42.125738 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/main/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHgAAACk"]
[Thu Jul 30 12:36:42.167180 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/node_modules/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHwAAACk"]
[Thu Jul 30 12:36:42.167368 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/node_modules/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHwAAACk"]
[Thu Jul 30 12:36:42.167593 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/node_modules/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqHwAAACk"]
[Thu Jul 30 12:36:42.206287 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/kyc/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIAAAACk"]
[Thu Jul 30 12:36:42.206491 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/kyc/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIAAAACk"]
[Thu Jul 30 12:36:42.206743 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/kyc/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIAAAACk"]
[Thu Jul 30 12:36:42.252928 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/admin/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIQAAACk"]
[Thu Jul 30 12:36:42.253135 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/admin/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIQAAACk"]
[Thu Jul 30 12:36:42.253360 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/admin/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIQAAACk"]
[Thu Jul 30 12:36:42.307093 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/prod/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIgAAACk"]
[Thu Jul 30 12:36:42.307306 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/prod/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIgAAACk"]
[Thu Jul 30 12:36:42.307547 2026] [security2:error] [pid 3093749:tid 3093749] [client 45.148.10.67:52840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/prod/.env"] [unique_id "ams3SvjpY7cYgsiqcJcqIgAAACk"]
[Thu Jul 30 12:36:42.333813 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.6:27484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:42.334453 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.6:27484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:42.443701 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env.bak"] [unique_id "ams3SmbZhKijPUnfBmVKugAAAAE"]
[Thu Jul 30 12:36:42.443951 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env.bak"] [unique_id "ams3SmbZhKijPUnfBmVKugAAAAE"]
[Thu Jul 30 12:36:42.444221 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env.bak"] [unique_id "ams3SmbZhKijPUnfBmVKugAAAAE"]
[Thu Jul 30 12:36:42.631297 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/website/.env"] [unique_id "ams3SmbZhKijPUnfBmVKvgAAAAE"]
[Thu Jul 30 12:36:42.631572 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/website/.env"] [unique_id "ams3SmbZhKijPUnfBmVKvgAAAAE"]
[Thu Jul 30 12:36:42.631806 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/website/.env"] [unique_id "ams3SmbZhKijPUnfBmVKvgAAAAE"]
[Thu Jul 30 12:36:42.662953 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/development/.env"] [unique_id "ams3SmbZhKijPUnfBmVKvwAAAAE"]
[Thu Jul 30 12:36:42.663220 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/development/.env"] [unique_id "ams3SmbZhKijPUnfBmVKvwAAAAE"]
[Thu Jul 30 12:36:42.663520 2026] [security2:error] [pid 3096034:tid 3096034] [client 45.148.10.67:52848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/development/.env"] [unique_id "ams3SmbZhKijPUnfBmVKvwAAAAE"]
[Thu Jul 30 12:36:42.788544 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/backend/.env"] [unique_id "ams3SotQ2T3bc892H1mb6wAAAB8"]
[Thu Jul 30 12:36:42.788749 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/backend/.env"] [unique_id "ams3SotQ2T3bc892H1mb6wAAAB8"]
[Thu Jul 30 12:36:42.788974 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/backend/.env"] [unique_id "ams3SotQ2T3bc892H1mb6wAAAB8"]
[Thu Jul 30 12:36:42.817709 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/api/shared/config/.env"] [unique_id "ams3SotQ2T3bc892H1mb7AAAAB8"]
[Thu Jul 30 12:36:42.817886 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/api/shared/config/.env"] [unique_id "ams3SotQ2T3bc892H1mb7AAAAB8"]
[Thu Jul 30 12:36:42.818117 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/api/shared/config/.env"] [unique_id "ams3SotQ2T3bc892H1mb7AAAAB8"]
[Thu Jul 30 12:36:42.858253 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/api/shared/.env"] [unique_id "ams3SotQ2T3bc892H1mb7QAAAB8"]
[Thu Jul 30 12:36:42.858467 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/api/shared/.env"] [unique_id "ams3SotQ2T3bc892H1mb7QAAAB8"]
[Thu Jul 30 12:36:42.858715 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/api/shared/.env"] [unique_id "ams3SotQ2T3bc892H1mb7QAAAB8"]
[Thu Jul 30 12:36:42.987092 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/node/.env_example"] [unique_id "ams3SotQ2T3bc892H1mb8AAAAB8"]
[Thu Jul 30 12:36:42.987321 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/node/.env_example"] [unique_id "ams3SotQ2T3bc892H1mb8AAAAB8"]
[Thu Jul 30 12:36:42.987552 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/node/.env_example"] [unique_id "ams3SotQ2T3bc892H1mb8AAAAB8"]
[Thu Jul 30 12:36:43.010897 2026] [core:error] [pid 3096742:tid 3096742] [client 57.141.0.21:39156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:43.010922 2026] [core:error] [pid 3096742:tid 3096742] [client 57.141.0.21:39156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:43.045564 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env.production.local"] [unique_id "ams3S4tQ2T3bc892H1mb8QAAAB8"]
[Thu Jul 30 12:36:43.045789 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env.production.local"] [unique_id "ams3S4tQ2T3bc892H1mb8QAAAB8"]
[Thu Jul 30 12:36:43.046010 2026] [security2:error] [pid 3093640:tid 3093640] [client 45.148.10.67:52858] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env.production.local"] [unique_id "ams3S4tQ2T3bc892H1mb8QAAAB8"]
[Thu Jul 30 12:36:43.237410 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.2:36392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:43.238059 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.2:36392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:43.275091 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env.local"] [unique_id "ams3S2wfi5tzO5JoEzDcfQAAABA"]
[Thu Jul 30 12:36:43.275305 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env.local"] [unique_id "ams3S2wfi5tzO5JoEzDcfQAAABA"]
[Thu Jul 30 12:36:43.275542 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env.local"] [unique_id "ams3S2wfi5tzO5JoEzDcfQAAABA"]
[Thu Jul 30 12:36:43.400039 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env.example"] [unique_id "ams3S2wfi5tzO5JoEzDcfgAAABA"]
[Thu Jul 30 12:36:43.400297 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env.example"] [unique_id "ams3S2wfi5tzO5JoEzDcfgAAABA"]
[Thu Jul 30 12:36:43.400560 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env.example"] [unique_id "ams3S2wfi5tzO5JoEzDcfgAAABA"]
[Thu Jul 30 12:36:43.484387 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env.stage"] [unique_id "ams3S2wfi5tzO5JoEzDcfwAAABA"]
[Thu Jul 30 12:36:43.484638 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env.stage"] [unique_id "ams3S2wfi5tzO5JoEzDcfwAAABA"]
[Thu Jul 30 12:36:43.484890 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.67:52872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env.stage"] [unique_id "ams3S2wfi5tzO5JoEzDcfwAAABA"]
[Thu Jul 30 12:36:43.602315 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.13:23800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:43.602992 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.13:23800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:43.662009 2026] [ssl:error] [pid 3090795:tid 3090795] (70014)End of file found: [client 216.73.216.199:15606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:43.724795 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.31:20368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:43.725424 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.31:20368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:43.895163 2026] [security2:error] [pid 3096812:tid 3096812] [client 45.148.10.67:52878] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env.old"] [unique_id "ams3Sw-H4bwJ7fQLPAk5IAAAAC8"]
[Thu Jul 30 12:36:43.895356 2026] [security2:error] [pid 3096812:tid 3096812] [client 45.148.10.67:52878] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env.old"] [unique_id "ams3Sw-H4bwJ7fQLPAk5IAAAAC8"]
[Thu Jul 30 12:36:43.895613 2026] [security2:error] [pid 3096812:tid 3096812] [client 45.148.10.67:52878] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env.old"] [unique_id "ams3Sw-H4bwJ7fQLPAk5IAAAAC8"]
[Thu Jul 30 12:36:44.140757 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.11:20978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:44.141406 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.11:20978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:44.170576 2026] [security2:error] [pid 3096516:tid 3096516] [client 45.148.10.67:52894] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env_sample"] [unique_id "ams3TGtfdcKhvYLCcxwTdgAAAAs"]
[Thu Jul 30 12:36:44.170778 2026] [security2:error] [pid 3096516:tid 3096516] [client 45.148.10.67:52894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env_sample"] [unique_id "ams3TGtfdcKhvYLCcxwTdgAAAAs"]
[Thu Jul 30 12:36:44.171077 2026] [security2:error] [pid 3096516:tid 3096516] [client 45.148.10.67:52894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env_sample"] [unique_id "ams3TGtfdcKhvYLCcxwTdgAAAAs"]
[Thu Jul 30 12:36:44.251877 2026] [security2:error] [pid 3088144:tid 3088144] [client 101.47.24.93:18561] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3TAsn8dZRT0BASB5n7gAAAAk"]
[Thu Jul 30 12:36:44.251932 2026] [security2:error] [pid 3088144:tid 3088144] [client 101.47.24.93:18561] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3TAsn8dZRT0BASB5n7gAAAAk"]
[Thu Jul 30 12:36:44.252201 2026] [security2:error] [pid 3088144:tid 3088144] [client 101.47.24.93:18561] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3TAsn8dZRT0BASB5n7gAAAAk"]
[Thu Jul 30 12:36:44.447640 2026] [security2:error] [pid 3090838:tid 3090838] [client 45.148.10.67:52896] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/.env.prod"] [unique_id "ams3THStnWUR1An1rnNVEgAAAC0"]
[Thu Jul 30 12:36:44.447849 2026] [security2:error] [pid 3090838:tid 3090838] [client 45.148.10.67:52896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/.env.prod"] [unique_id "ams3THStnWUR1An1rnNVEgAAAC0"]
[Thu Jul 30 12:36:44.448109 2026] [security2:error] [pid 3090838:tid 3090838] [client 45.148.10.67:52896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/.env.prod"] [unique_id "ams3THStnWUR1An1rnNVEgAAAC0"]
[Thu Jul 30 12:36:44.588390 2026] [security2:error] [pid 3090838:tid 3090838] [client 45.148.10.67:52896] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/crm/.env"] [unique_id "ams3THStnWUR1An1rnNVEwAAAC0"]
[Thu Jul 30 12:36:44.588587 2026] [security2:error] [pid 3090838:tid 3090838] [client 45.148.10.67:52896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/crm/.env"] [unique_id "ams3THStnWUR1An1rnNVEwAAAC0"]
[Thu Jul 30 12:36:44.588799 2026] [security2:error] [pid 3090838:tid 3090838] [client 45.148.10.67:52896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/crm/.env"] [unique_id "ams3THStnWUR1An1rnNVEwAAAC0"]
[Thu Jul 30 12:36:44.600192 2026] [ssl:error] [pid 3079193:tid 3079193] (EAI 2)Name or service not known: [client 144.76.19.72:55462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:44.600227 2026] [ssl:error] [pid 3079193:tid 3079193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:44.653858 2026] [ssl:error] [pid 3096845:tid 3096845] (EAI 2)Name or service not known: [client 144.76.19.72:55470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:44.653896 2026] [ssl:error] [pid 3096845:tid 3096845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:44.734407 2026] [authz_core:error] [pid 3096844:tid 3096844] [client 57.141.0.4:20124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:44.735060 2026] [authz_core:error] [pid 3096844:tid 3096844] [client 57.141.0.4:20124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:44.791661 2026] [security2:error] [pid 3088144:tid 3088144] [client 45.148.10.67:52910] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/local/.env"] [unique_id "ams3TAsn8dZRT0BASB5n7wAAAAk"]
[Thu Jul 30 12:36:44.791861 2026] [security2:error] [pid 3088144:tid 3088144] [client 45.148.10.67:52910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/local/.env"] [unique_id "ams3TAsn8dZRT0BASB5n7wAAAAk"]
[Thu Jul 30 12:36:44.792088 2026] [security2:error] [pid 3088144:tid 3088144] [client 45.148.10.67:52910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/local/.env"] [unique_id "ams3TAsn8dZRT0BASB5n7wAAAAk"]
[Thu Jul 30 12:36:45.078383 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.31:20380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:45.079093 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.31:20380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:45.091153 2026] [security2:error] [pid 3079193:tid 3079193] [client 45.148.10.67:35304] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/core/.env"] [unique_id "ams3Ta5yKleAOdJPc5MTVgAAADg"]
[Thu Jul 30 12:36:45.091353 2026] [security2:error] [pid 3079193:tid 3079193] [client 45.148.10.67:35304] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/core/.env"] [unique_id "ams3Ta5yKleAOdJPc5MTVgAAADg"]
[Thu Jul 30 12:36:45.091593 2026] [security2:error] [pid 3079193:tid 3079193] [client 45.148.10.67:35304] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/core/.env"] [unique_id "ams3Ta5yKleAOdJPc5MTVgAAADg"]
[Thu Jul 30 12:36:45.155031 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.45:62386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:45.155680 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.45:62386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:45.175713 2026] [security2:error] [pid 3096742:tid 3096742] [client 216.73.216.199:39197] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/german/errmsg.sys"] [unique_id "ams3TT7flATmqdxWmLMSTAAAACw"]
[Thu Jul 30 12:36:45.175933 2026] [security2:error] [pid 3096742:tid 3096742] [client 216.73.216.199:39197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/german/errmsg.sys"] [unique_id "ams3TT7flATmqdxWmLMSTAAAACw"]
[Thu Jul 30 12:36:45.176154 2026] [security2:error] [pid 3096742:tid 3096742] [client 216.73.216.199:39197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/german/errmsg.sys"] [unique_id "ams3TT7flATmqdxWmLMSTAAAACw"]
[Thu Jul 30 12:36:45.310832 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.44:60770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:45.311470 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.44:60770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:45.317083 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.66:46770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:45.317752 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.66:46770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:45.326426 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.24:63534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:45.327036 2026] [authz_core:error] [pid 3088950:tid 3088950] [client 57.141.0.24:63534] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:45.478275 2026] [security2:error] [pid 3078608:tid 3078608] [client 45.148.10.67:35306] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/apps/.env"] [unique_id "ams3TTcV7LM50MsWMMmdbAAAACs"]
[Thu Jul 30 12:36:45.478420 2026] [security2:error] [pid 3078608:tid 3078608] [client 45.148.10.67:35306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/apps/.env"] [unique_id "ams3TTcV7LM50MsWMMmdbAAAACs"]
[Thu Jul 30 12:36:45.478610 2026] [security2:error] [pid 3078608:tid 3078608] [client 45.148.10.67:35306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/apps/.env"] [unique_id "ams3TTcV7LM50MsWMMmdbAAAACs"]
[Thu Jul 30 12:36:46.086711 2026] [core:error] [pid 3096742:tid 3096742] (13)Permission denied: [client 216.73.216.199:39197] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/vm_area_struct/align
[Thu Jul 30 12:36:46.134203 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.17:38410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:46.134856 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.17:38410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:46.206573 2026] [security2:error] [pid 3096133:tid 3096133] [client 45.148.10.67:35320] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/application/.env"] [unique_id "ams3ToKrLzs3gIOhjGtCBgAAAAQ"]
[Thu Jul 30 12:36:46.206771 2026] [security2:error] [pid 3096133:tid 3096133] [client 45.148.10.67:35320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/application/.env"] [unique_id "ams3ToKrLzs3gIOhjGtCBgAAAAQ"]
[Thu Jul 30 12:36:46.206999 2026] [security2:error] [pid 3096133:tid 3096133] [client 45.148.10.67:35320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/application/.env"] [unique_id "ams3ToKrLzs3gIOhjGtCBgAAAAQ"]
[Thu Jul 30 12:36:46.331236 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 20.206.204.219:49947] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:36:46.978367 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.38:30494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:46.979046 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.38:30494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:47.106302 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.55:49586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:47.106929 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.55:49586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:47.595953 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.60:32252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:47.596613 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.60:32252] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:47.622009 2026] [core:error] [pid 3096742:tid 3096742] (13)Permission denied: [client 216.73.216.199:39197] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory81/node0/compact
[Thu Jul 30 12:36:47.713005 2026] [ssl:error] [pid 3095156:tid 3095156] (EAI 2)Name or service not known: [client 144.76.19.72:55472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:47.713056 2026] [ssl:error] [pid 3095156:tid 3095156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:47.769027 2026] [ssl:error] [pid 3093454:tid 3093454] (EAI 2)Name or service not known: [client 144.76.19.72:55480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:47.769056 2026] [ssl:error] [pid 3093454:tid 3093454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:48.236662 2026] [core:error] [pid 3096742:tid 3096742] (13)Permission denied: [client 216.73.216.199:39197] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/dev/fd/8
[Thu Jul 30 12:36:48.335077 2026] [security2:error] [pid 3088195:tid 3088195] [client 45.148.10.67:35324] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/web/.env"] [unique_id "ams3UCMTTyyQR4l_pYJiTAAAAAw"]
[Thu Jul 30 12:36:48.335331 2026] [security2:error] [pid 3088195:tid 3088195] [client 45.148.10.67:35324] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/web/.env"] [unique_id "ams3UCMTTyyQR4l_pYJiTAAAAAw"]
[Thu Jul 30 12:36:48.335633 2026] [security2:error] [pid 3088195:tid 3088195] [client 45.148.10.67:35324] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/web/.env"] [unique_id "ams3UCMTTyyQR4l_pYJiTAAAAAw"]
[Thu Jul 30 12:36:48.378727 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.46:45572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:48.379363 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.46:45572] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:48.401201 2026] [security2:error] [pid 3088195:tid 3088195] [client 45.148.10.67:35324] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/wp-config.php.bak"] [unique_id "ams3UCMTTyyQR4l_pYJiTgAAAAw"]
[Thu Jul 30 12:36:48.401405 2026] [security2:error] [pid 3088195:tid 3088195] [client 45.148.10.67:35324] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/wp-config.php.bak"] [unique_id "ams3UCMTTyyQR4l_pYJiTgAAAAw"]
[Thu Jul 30 12:36:48.401653 2026] [security2:error] [pid 3088195:tid 3088195] [client 45.148.10.67:35324] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/wp-config.php.bak"] [unique_id "ams3UCMTTyyQR4l_pYJiTgAAAAw"]
[Thu Jul 30 12:36:48.422836 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 57.141.0.50:37374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:48.423533 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 57.141.0.50:37374] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:48.692816 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.36:43546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:48.693465 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.36:43546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:48.877970 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.64:54876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:48.878625 2026] [authz_core:error] [pid 3093588:tid 3093588] [client 57.141.0.64:54876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:49.016625 2026] [authz_core:error] [pid 3096887:tid 3096887] [client 57.141.0.68:56684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:49.017275 2026] [authz_core:error] [pid 3096887:tid 3096887] [client 57.141.0.68:56684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:49.411363 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.2:50996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:49.412032 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.2:50996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:49.795047 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.33:47538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:49.795757 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.33:47538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:50.239320 2026] [authz_core:error] [pid 3096887:tid 3096887] [client 57.141.0.24:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:50.239947 2026] [authz_core:error] [pid 3096887:tid 3096887] [client 57.141.0.24:63544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:50.298914 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.24:63548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:50.299574 2026] [authz_core:error] [pid 3083115:tid 3083115] [client 57.141.0.24:63548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:50.365948 2026] [security2:error] [pid 3096742:tid 3096742] [client 216.73.216.199:39197] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/sqlite3.ini"] [unique_id "ams3Uj7flATmqdxWmLMSXQAAACw"]
[Thu Jul 30 12:36:50.366295 2026] [security2:error] [pid 3096742:tid 3096742] [client 216.73.216.199:39197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/sqlite3.ini"] [unique_id "ams3Uj7flATmqdxWmLMSXQAAACw"]
[Thu Jul 30 12:36:50.366534 2026] [security2:error] [pid 3096742:tid 3096742] [client 216.73.216.199:39197] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/sqlite3.ini"] [unique_id "ams3Uj7flATmqdxWmLMSXQAAACw"]
[Thu Jul 30 12:36:50.452324 2026] [access_compat:error] [pid 3090793:tid 3090793] [client 125.176.202.122:53905] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:36:50.624326 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.38:54650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:50.624975 2026] [authz_core:error] [pid 3090795:tid 3090795] [client 57.141.0.38:54650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:50.676447 2026] [core:error] [pid 3096742:tid 3096742] (13)Permission denied: [client 216.73.216.199:39197] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory90/node0/compact
[Thu Jul 30 12:36:50.821438 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:65508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:50.821469 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:50.874794 2026] [ssl:error] [pid 3093640:tid 3093640] (EAI 2)Name or service not known: [client 144.76.19.72:65522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:50.874843 2026] [ssl:error] [pid 3093640:tid 3093640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:51.116818 2026] [core:error] [pid 3093749:tid 3093749] [client 57.141.0.44:29852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:51.116856 2026] [core:error] [pid 3093749:tid 3093749] [client 57.141.0.44:29852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:51.281758 2026] [ssl:error] [pid 3096742:tid 3096742] (70014)End of file found: [client 216.73.216.199:39197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:51.659933 2026] [lsapi:warn] [pid 3093588:tid 3093588] [client 122.180.21.11:59269] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:36:51.848755 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.48:34196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:51.849384 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.48:34196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:52.106453 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.13:23812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:52.107163 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.13:23812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:52.253763 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.6:36112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:52.254410 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.6:36112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:52.540836 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.69:31728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:52.541487 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.69:31728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:52.806266 2026] [core:error] [pid 3096034:tid 3096034] (13)Permission denied: [client 216.73.216.199:1424] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory60/node0/compact
[Thu Jul 30 12:36:53.066081 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 20.206.204.219:51131] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:36:53.409052 2026] [core:error] [pid 3096034:tid 3096034] (13)Permission denied: [client 216.73.216.199:1424] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory131/node0/compact
[Thu Jul 30 12:36:53.423631 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.70:61184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:53.424309 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.70:61184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:53.560837 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.71:31740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:53.561485 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.71:31740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:53.714337 2026] [core:error] [pid 3096034:tid 3096034] (13)Permission denied: [client 216.73.216.199:1424] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory176/node0/compact
[Thu Jul 30 12:36:53.958556 2026] [ssl:error] [pid 3092477:tid 3092477] (EAI 2)Name or service not known: [client 144.76.19.72:65530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:53.958589 2026] [ssl:error] [pid 3092477:tid 3092477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:53.964405 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.39:27884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:53.965041 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.39:27884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:54.012911 2026] [ssl:error] [pid 3090838:tid 3090838] (EAI 2)Name or service not known: [client 144.76.19.72:18006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:54.012955 2026] [ssl:error] [pid 3090838:tid 3090838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:54.511435 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.2:50998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:54.512064 2026] [authz_core:error] [pid 3094784:tid 3094784] [client 57.141.0.2:50998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:54.532483 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.66:26968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:54.533208 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.66:26968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:54.842866 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.68:56686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:54.843543 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.68:56686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:54.860866 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.56:25968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:54.861565 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.56:25968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:54.883127 2026] [security2:error] [pid 3096739:tid 3096739] [client 43.164.190.124:59930] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unique-pr.co.uk"] [uri "/"] [unique_id "ams3Viv1ZNRfkBc1bD1R7QAAACc"]
[Thu Jul 30 12:36:55.340023 2026] [core:error] [pid 3088986:tid 3088986] [client 57.141.0.4:41696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:55.340054 2026] [core:error] [pid 3088986:tid 3088986] [client 57.141.0.4:41696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:55.528409 2026] [ssl:error] [pid 3096034:tid 3096034] (70014)End of file found: [client 216.73.216.199:1424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:55.839898 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.25:44864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:55.840562 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.25:44864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:56.628441 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.25:44872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:56.629102 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.25:44872] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:56.629142 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.55:35722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:56.629828 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.55:35722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:56.745551 2026] [core:error] [pid 3096516:tid 3096516] (13)Permission denied: [client 216.73.216.199:35854] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_alias/cpu_partial
[Thu Jul 30 12:36:56.890706 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.69:31740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:56.891835 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.69:31740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:57.047441 2026] [ssl:error] [pid 3096516:tid 3096516] (70014)End of file found: [client 216.73.216.199:35854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:57.068720 2026] [ssl:error] [pid 3096886:tid 3096886] (EAI 2)Name or service not known: [client 144.76.19.72:18022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:57.068759 2026] [ssl:error] [pid 3096886:tid 3096886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:57.070648 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.61:40670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:57.071301 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.61:40670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:57.125047 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:18034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:36:57.125109 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:36:57.166162 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.62:55382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:57.167270 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.62:55382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:57.552142 2026] [ssl:error] [pid 3090838:tid 3090838] (70014)End of file found: [client 216.73.216.199:56947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:36:57.703739 2026] [authz_core:error] [pid 3096844:tid 3096844] [client 57.141.0.56:25974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:57.704374 2026] [authz_core:error] [pid 3096844:tid 3096844] [client 57.141.0.56:25974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:58.623942 2026] [core:error] [pid 3084598:tid 3084598] [client 66.249.66.3:53899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:58.623986 2026] [core:error] [pid 3084598:tid 3084598] [client 66.249.66.3:53899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:36:58.838965 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.37:53526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:58.839643 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.37:53526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:59.012952 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.3:28076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:59.013607 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.3:28076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:59.442158 2026] [security2:error] [pid 3090705:tid 3090705] [client 129.211.229.121:48174] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.inrc.org.uk"] [uri "/"] [unique_id "ams3W63KHaTN5wRzFMdqHAAAABM"]
[Thu Jul 30 12:36:59.541267 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.20:26104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:59.541907 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.20:26104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:59.703141 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.40:28054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:59.703765 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.40:28054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:36:59.737515 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.43:42220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:36:59.738151 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.43:42220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:00.179452 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:63366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:00.179492 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:00.233673 2026] [ssl:error] [pid 3097448:tid 3097448] (EAI 2)Name or service not known: [client 144.76.19.72:63370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:00.233720 2026] [ssl:error] [pid 3097448:tid 3097448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:00.524859 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.12:44920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:00.525487 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.12:44920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:01.133751 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.49:54386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:01.134394 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.49:54386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:01.308318 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.63:40224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:01.309002 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.63:40224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:01.777566 2026] [authz_core:error] [pid 3097448:tid 3097448] [client 57.141.0.62:29152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:01.778189 2026] [authz_core:error] [pid 3097448:tid 3097448] [client 57.141.0.62:29152] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:01.883158 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:1179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Operand/cpu_partial
[Thu Jul 30 12:37:02.184300 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:1179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory55/node0/compact
[Thu Jul 30 12:37:02.326940 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.24:23822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:02.327579 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.24:23822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:02.523858 2026] [authz_core:error] [pid 3097511:tid 3097511] [client 57.141.0.41:35238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:02.524505 2026] [authz_core:error] [pid 3097511:tid 3097511] [client 57.141.0.41:35238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:02.696194 2026] [lsapi:warn] [pid 3093641:tid 3093641] [client 122.180.21.11:59900] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:37:02.743092 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.6:42896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:02.743720 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.6:42896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:02.812150 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.67:49138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:02.813211 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.67:49138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:03.177195 2026] [access_compat:error] [pid 3097511:tid 3097511] [client 125.176.202.122:54453] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:03.201717 2026] [ssl:error] [pid 3090838:tid 3090838] (70014)End of file found: [client 216.73.216.199:26205] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:03.288970 2026] [ssl:error] [pid 3088677:tid 3088677] (EAI 2)Name or service not known: [client 144.76.19.72:63378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:03.289015 2026] [ssl:error] [pid 3088677:tid 3088677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:03.347002 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:63380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:03.347032 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:03.714862 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.33:31790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:03.715521 2026] [authz_core:error] [pid 3089788:tid 3089788] [client 57.141.0.33:31790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:03.957531 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.26:38104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:03.958168 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.26:38104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:04.278785 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.59:49670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:04.279431 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.59:49670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:04.292766 2026] [security2:error] [pid 3097447:tid 3097447] [client 216.73.216.199:1179] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/xmlwriter.ini"] [unique_id "ams3YAwdUtr6PLa6YOMkJwAAABw"]
[Thu Jul 30 12:37:04.293061 2026] [security2:error] [pid 3097447:tid 3097447] [client 216.73.216.199:1179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/xmlwriter.ini"] [unique_id "ams3YAwdUtr6PLa6YOMkJwAAABw"]
[Thu Jul 30 12:37:04.293299 2026] [security2:error] [pid 3097447:tid 3097447] [client 216.73.216.199:1179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/xmlwriter.ini"] [unique_id "ams3YAwdUtr6PLa6YOMkJwAAABw"]
[Thu Jul 30 12:37:04.987464 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.29:23944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:04.988107 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.29:23944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:05.043850 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.17:52508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:05.044458 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.17:52508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:05.195935 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:1179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/objects
[Thu Jul 30 12:37:05.320198 2026] [security2:error] [pid 3087847:tid 3087847] [client 103.221.249.25:61842] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "ams3YREKPgz2R8MqG0aXPgAAAAc"]
[Thu Jul 30 12:37:05.464392 2026] [authz_core:error] [pid 3097448:tid 3097448] [client 89.124.112.117:61500] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:37:05.467297 2026] [authz_core:error] [pid 3097448:tid 3097448] [client 89.124.112.117:61500] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:37:05.497164 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:1179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory256/node0/compact
[Thu Jul 30 12:37:05.556133 2026] [authz_core:error] [pid 3096844:tid 3096844] [client 57.141.0.64:54966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:05.556760 2026] [authz_core:error] [pid 3096844:tid 3096844] [client 57.141.0.64:54966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:06.000947 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.7:39268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:06.001606 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.7:39268] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:06.185372 2026] [authz_core:error] [pid 3095194:tid 3095194] [client 57.141.0.52:46678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:06.186046 2026] [authz_core:error] [pid 3095194:tid 3095194] [client 57.141.0.52:46678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:06.188643 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.29:23956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:06.189269 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.29:23956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:06.224633 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:37:06.405030 2026] [ssl:error] [pid 3097397:tid 3097397] (EAI 2)Name or service not known: [client 144.76.19.72:63394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:06.405088 2026] [ssl:error] [pid 3097397:tid 3097397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:06.458438 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:63406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:06.458463 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:06.688909 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.60:58604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:06.689615 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.60:58604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:06.935952 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.32:20526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:06.936615 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.32:20526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:07.010438 2026] [ssl:error] [pid 3097447:tid 3097447] (70014)End of file found: [client 216.73.216.199:1179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:07.474042 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.1:20930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:07.474687 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.1:20930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:07.493434 2026] [authz_core:error] [pid 3095194:tid 3095194] [client 57.141.0.16:55806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:07.494126 2026] [authz_core:error] [pid 3095194:tid 3095194] [client 57.141.0.16:55806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:08.083965 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.52:46692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:08.084606 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.52:46692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:08.154879 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.47:56206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:08.155511 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.47:56206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:08.204391 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.48:43894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:08.205021 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.48:43894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:08.542366 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.60:58620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:08.543014 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.60:58620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:08.826945 2026] [ssl:error] [pid 3095156:tid 3095156] (70014)End of file found: [client 216.73.216.199:31610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:09.041821 2026] [security2:error] [pid 3067992:tid 3067992] [client 45.148.10.67:37926] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.ditchfest.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams3ZdlnbwxAFb8DMevPaAAAAB4"]
[Thu Jul 30 12:37:09.042056 2026] [security2:error] [pid 3067992:tid 3067992] [client 45.148.10.67:37926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams3ZdlnbwxAFb8DMevPaAAAAB4"]
[Thu Jul 30 12:37:09.042267 2026] [security2:error] [pid 3067992:tid 3067992] [client 45.148.10.67:37926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/storage/logs/laravel.log"] [unique_id "ams3ZdlnbwxAFb8DMevPaAAAAB4"]
[Thu Jul 30 12:37:09.328056 2026] [ssl:error] [pid 3087847:tid 3087847] (70014)End of file found: [client 216.73.216.199:49748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:09.511994 2026] [ssl:error] [pid 3090793:tid 3090793] (EAI 2)Name or service not known: [client 144.76.19.72:63422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:09.512025 2026] [ssl:error] [pid 3090793:tid 3090793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:09.569315 2026] [ssl:error] [pid 3096888:tid 3096888] (EAI 2)Name or service not known: [client 144.76.19.72:63332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:09.569356 2026] [ssl:error] [pid 3096888:tid 3096888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:10.173570 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.10:21952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:10.174217 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.10:21952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:10.226326 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.61:25012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:10.226956 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.61:25012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:10.336512 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.20:32180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:10.337148 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.20:32180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:10.337208 2026] [security2:error] [pid 3097397:tid 3097397] [client 169.224.17.22:16275] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3Zs9UkRbrj5uPocc7jQAAAAU"]
[Thu Jul 30 12:37:10.337265 2026] [security2:error] [pid 3097397:tid 3097397] [client 169.224.17.22:16275] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3Zs9UkRbrj5uPocc7jQAAAAU"]
[Thu Jul 30 12:37:10.337551 2026] [security2:error] [pid 3097397:tid 3097397] [client 169.224.17.22:16275] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3Zs9UkRbrj5uPocc7jQAAAAU"]
[Thu Jul 30 12:37:10.696169 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 57.141.0.40:61140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:10.696800 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 57.141.0.40:61140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:10.840751 2026] [access_compat:error] [pid 3088195:tid 3088195] [client 125.176.202.122:54729] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:11.264273 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.13:45710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:11.264899 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.13:45710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:11.451576 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.11:54542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:11.452208 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.11:54542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:11.562660 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.26:38120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:11.563309 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.26:38120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:11.735076 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.10:21956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:11.735711 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.10:21956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:11.914952 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.34:58452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:11.915581 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.34:58452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:12.337300 2026] [ssl:error] [pid 3090793:tid 3090793] (70014)End of file found: [client 216.73.216.199:3297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:12.362009 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.45:52236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:12.362660 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.45:52236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:12.403038 2026] [security2:error] [pid 3093454:tid 3093454] [client 158.140.166.86:16368] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3aOx7rLm3SGVaWCF1sAAAABE"]
[Thu Jul 30 12:37:12.403098 2026] [security2:error] [pid 3093454:tid 3093454] [client 158.140.166.86:16368] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3aOx7rLm3SGVaWCF1sAAAABE"]
[Thu Jul 30 12:37:12.403372 2026] [security2:error] [pid 3093454:tid 3093454] [client 158.140.166.86:16368] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3aOx7rLm3SGVaWCF1sAAAABE"]
[Thu Jul 30 12:37:12.626202 2026] [ssl:error] [pid 3092477:tid 3092477] (EAI 2)Name or service not known: [client 144.76.19.72:63348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:12.626233 2026] [ssl:error] [pid 3092477:tid 3092477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:12.677695 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:63362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:12.677736 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:12.946487 2026] [authz_core:error] [pid 3088677:tid 3088677] [client 57.141.0.35:31578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:12.947141 2026] [authz_core:error] [pid 3088677:tid 3088677] [client 57.141.0.35:31578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:12.995181 2026] [lsapi:warn] [pid 3096516:tid 3096516] [client 122.180.21.11:60637] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:37:13.398189 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.36:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:13.398845 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.36:24808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:13.515706 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 57.141.0.63:23966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:13.516329 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 57.141.0.63:23966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:14.025151 2026] [security2:error] [pid 3097397:tid 3097397] [client 114.119.146.111:32695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~19"] [unique_id "ams3as9UkRbrj5uPocc7kAAAAAU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~19
[Thu Jul 30 12:37:14.150125 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.6:62722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:14.150753 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.6:62722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:14.564220 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.28:26874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:14.564842 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.28:26874] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:14.573528 2026] [ssl:error] [pid 3096516:tid 3096516] (70014)End of file found: [client 216.73.216.199:46173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:14.650732 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 57.141.0.59:43846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:14.651361 2026] [authz_core:error] [pid 3093454:tid 3093454] [client 57.141.0.59:43846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:14.862932 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/app/config/parameters.yml"] [unique_id "ams3apOq7xGazC7L_mEQcQAAACI"]
[Thu Jul 30 12:37:14.863093 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/app/config/parameters.yml"] [unique_id "ams3apOq7xGazC7L_mEQcQAAACI"]
[Thu Jul 30 12:37:14.863288 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/app/config/parameters.yml"] [unique_id "ams3apOq7xGazC7L_mEQcQAAACI"]
[Thu Jul 30 12:37:14.968245 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/config/parameters.yml"] [unique_id "ams3apOq7xGazC7L_mEQcgAAACI"]
[Thu Jul 30 12:37:14.968522 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/config/parameters.yml"] [unique_id "ams3apOq7xGazC7L_mEQcgAAACI"]
[Thu Jul 30 12:37:14.968854 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/config/parameters.yml"] [unique_id "ams3apOq7xGazC7L_mEQcgAAACI"]
[Thu Jul 30 12:37:15.040543 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.69:20302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:15.041251 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.69:20302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:15.196647 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.62:51100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:15.197276 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.62:51100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:15.579105 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /api/config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.ditchfest.com"] [uri "/api/config/config.yml"] [unique_id "ams3a5Oq7xGazC7L_mEQeAAAACI"]
[Thu Jul 30 12:37:15.579315 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ditchfest.com"] [uri "/api/config/config.yml"] [unique_id "ams3a5Oq7xGazC7L_mEQeAAAACI"]
[Thu Jul 30 12:37:15.579572 2026] [security2:error] [pid 3088986:tid 3088986] [client 45.148.10.67:38016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.ditchfest.com"] [uri "/api/config/config.yml"] [unique_id "ams3a5Oq7xGazC7L_mEQeAAAACI"]
[Thu Jul 30 12:37:15.736507 2026] [ssl:error] [pid 3096742:tid 3096742] (EAI 2)Name or service not known: [client 144.76.19.72:63372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:15.736549 2026] [ssl:error] [pid 3096742:tid 3096742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:15.772952 2026] [security2:error] [pid 3096886:tid 3096886] [client 114.119.146.111:32707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~19"] [unique_id "ams3a6h0WHG9iluVBaT9PQAAADI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~19
[Thu Jul 30 12:37:15.791839 2026] [ssl:error] [pid 3094489:tid 3094489] (EAI 2)Name or service not known: [client 144.76.19.72:63374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:15.791865 2026] [ssl:error] [pid 3094489:tid 3094489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:15.800208 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.16:53848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:15.800830 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.16:53848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:15.915523 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.38:33470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:15.916148 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.38:33470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:15.997825 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.34:58460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:15.998506 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.34:58460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:16.118478 2026] [access_compat:error] [pid 3096845:tid 3096845] [client 125.176.202.122:55005] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:16.202755 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.29:32312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:16.203410 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.29:32312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:16.381040 2026] [security2:error] [pid 3096742:tid 3096742] [client 189.216.41.248:36693] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3bD7flATmqdxWmLMSZAAAACw"]
[Thu Jul 30 12:37:16.381097 2026] [security2:error] [pid 3096742:tid 3096742] [client 189.216.41.248:36693] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3bD7flATmqdxWmLMSZAAAACw"]
[Thu Jul 30 12:37:16.381333 2026] [security2:error] [pid 3096742:tid 3096742] [client 189.216.41.248:36693] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3bD7flATmqdxWmLMSZAAAACw"]
[Thu Jul 30 12:37:16.646283 2026] [access_compat:error] [pid 3095156:tid 3095156] [client 45.158.164.139:47960] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:37:17.165468 2026] [security2:error] [pid 3096812:tid 3096812] [client 20.171.55.167:9816] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "familyjames.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams3bQ-H4bwJ7fQLPAk5fwAAAC8"]
[Thu Jul 30 12:37:17.165700 2026] [security2:error] [pid 3096812:tid 3096812] [client 20.171.55.167:9816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "familyjames.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams3bQ-H4bwJ7fQLPAk5fwAAAC8"]
[Thu Jul 30 12:37:17.166471 2026] [security2:error] [pid 3096812:tid 3096812] [client 20.171.55.167:9816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "familyjames.com"] [uri "/403.shtml"] [unique_id "ams3bQ-H4bwJ7fQLPAk5fwAAAC8"]
[Thu Jul 30 12:37:17.194532 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:37:17.392842 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.68:25688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:17.393474 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.68:25688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:17.397336 2026] [core:error] [pid 3097445:tid 3097445] (13)Permission denied: [client 216.73.216.199:42244] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/thunderbolt/uevent
[Thu Jul 30 12:37:17.480603 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.45:33622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:17.481256 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.45:33622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:17.551242 2026] [security2:error] [pid 3096886:tid 3096886] [client 43.157.20.63:34864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-narvi.com"] [uri "/"] [unique_id "ams3bah0WHG9iluVBaT9PgAAADI"]
[Thu Jul 30 12:37:17.599711 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.19:28266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:17.600337 2026] [authz_core:error] [pid 3095156:tid 3095156] [client 57.141.0.19:28266] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:18.087492 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.66:43652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:18.088662 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.66:43652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:18.199005 2026] [core:error] [pid 3096886:tid 3096886] [client 66.249.66.5:35916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:18.199029 2026] [core:error] [pid 3096886:tid 3096886] [client 66.249.66.5:35916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:18.559820 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.52:22380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:18.560453 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.52:22380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:18.733918 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.36:24816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:18.734578 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.36:24816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:18.848603 2026] [ssl:error] [pid 3097446:tid 3097446] (EAI 2)Name or service not known: [client 144.76.19.72:63384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:18.848640 2026] [ssl:error] [pid 3097446:tid 3097446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:18.902710 2026] [ssl:error] [pid 3096886:tid 3096886] (EAI 2)Name or service not known: [client 144.76.19.72:63398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:18.902749 2026] [ssl:error] [pid 3096886:tid 3096886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:19.178063 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.29:32318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:19.178700 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.29:32318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:19.203608 2026] [ssl:error] [pid 3097445:tid 3097445] (70014)End of file found: [client 216.73.216.199:42244] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:19.794699 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.36:24832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:19.795325 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.36:24832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:19.902493 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.36:24848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:19.903126 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.36:24848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:19.999908 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.16:59524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:20.000549 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.16:59524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:20.293652 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.38:62698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:20.294275 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.38:62698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:20.407842 2026] [core:error] [pid 3093641:tid 3093641] (13)Permission denied: [client 216.73.216.199:14998] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS2/line
[Thu Jul 30 12:37:21.163738 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.14:65360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:21.164389 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.14:65360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:21.436056 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.60:46538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:21.436693 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.60:46538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:21.500089 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.27:20662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:21.500718 2026] [authz_core:error] [pid 3090841:tid 3090841] [client 57.141.0.27:20662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:21.555346 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.120:60102] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "ams3cWwfi5tzO5JoEzDciQAAABA"]
[Thu Jul 30 12:37:21.555612 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.120:60102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "ams3cWwfi5tzO5JoEzDciQAAABA"]
[Thu Jul 30 12:37:21.555766 2026] [security2:error] [pid 3082377:tid 3082377] [client 45.148.10.120:60102] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "ams3cWwfi5tzO5JoEzDciQAAABA"]
[Thu Jul 30 12:37:21.860802 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.46:55620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:21.861456 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.46:55620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:21.976259 2026] [ssl:error] [pid 3088195:tid 3088195] (EAI 2)Name or service not known: [client 144.76.19.72:21228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:21.976294 2026] [ssl:error] [pid 3088195:tid 3088195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:22.027456 2026] [ssl:error] [pid 3084598:tid 3084598] (EAI 2)Name or service not known: [client 144.76.19.72:21234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:22.027505 2026] [ssl:error] [pid 3084598:tid 3084598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:22.237891 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.6:26658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:22.238537 2026] [authz_core:error] [pid 3082377:tid 3082377] [client 57.141.0.6:26658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:22.242655 2026] [core:error] [pid 3096812:tid 3096812] (13)Permission denied: [client 216.73.216.199:46596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8k/ctor
[Thu Jul 30 12:37:22.572195 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.22:64362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:22.572826 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.22:64362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:22.645649 2026] [security2:error] [pid 3096890:tid 3096890] [client 185.191.171.11:25938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/fbi:-international-cancelled"] [unique_id "ams3cpc0U-lj0CL9tVsHNQAAADc"]
[Thu Jul 30 12:37:22.938433 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.13:31182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:22.939108 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.13:31182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:22.950941 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.62:23402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:22.952115 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.62:23402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:23.028753 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.17:22708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:23.029387 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.17:22708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:23.147281 2026] [core:error] [pid 3096812:tid 3096812] (13)Permission denied: [client 216.73.216.199:46596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/destroy_by_rcu
[Thu Jul 30 12:37:23.345309 2026] [access_compat:error] [pid 3088195:tid 3088195] [client 125.176.202.122:55309] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:23.358652 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.4:28756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:23.359279 2026] [authz_core:error] [pid 3096845:tid 3096845] [client 57.141.0.4:28756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:23.700462 2026] [lsapi:warn] [pid 3090841:tid 3090841] [client 122.180.21.11:61400] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:37:24.049697 2026] [core:error] [pid 3096812:tid 3096812] (13)Permission denied: [client 216.73.216.199:46596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS2/line
[Thu Jul 30 12:37:24.164296 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.22:64364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:24.165538 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.22:64364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:24.379506 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.9:44304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:24.380153 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.9:44304] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:24.404777 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.47:20300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:24.405404 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.47:20300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:24.566062 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.54:64944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:24.566747 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.54:64944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:24.953646 2026] [ssl:error] [pid 3096812:tid 3096812] (70014)End of file found: [client 216.73.216.199:46596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:25.100780 2026] [ssl:error] [pid 3097397:tid 3097397] (EAI 2)Name or service not known: [client 144.76.19.72:21250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:25.100828 2026] [ssl:error] [pid 3097397:tid 3097397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:25.158276 2026] [ssl:error] [pid 3093640:tid 3093640] (EAI 2)Name or service not known: [client 144.76.19.72:21254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:25.158305 2026] [ssl:error] [pid 3093640:tid 3093640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:25.863230 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 66.249.66.34:37828] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:37:25.865917 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 66.249.66.34:37828] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:37:25.972214 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.65:37988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:25.972920 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.65:37988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:26.003803 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.34:35726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:26.004437 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.34:35726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:26.166531 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.62:23406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:26.167160 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.62:23406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:26.256793 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.42:64682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:26.257446 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.42:64682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:26.382366 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.58:40716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:26.382989 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.58:40716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:26.680719 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.50:34960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:26.681976 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.50:34960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:26.738643 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.28:38768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:26.739270 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.28:38768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:27.178934 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.63:65520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:27.179612 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.63:65520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:27.364662 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.9:44314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:27.365298 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.9:44314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:28.105944 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.69:59072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:28.106639 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.69:59072] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:28.211800 2026] [ssl:error] [pid 3093639:tid 3093639] (EAI 2)Name or service not known: [client 144.76.19.72:21268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:28.211853 2026] [ssl:error] [pid 3093639:tid 3093639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:28.265326 2026] [ssl:error] [pid 3090793:tid 3090793] (EAI 2)Name or service not known: [client 144.76.19.72:21276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:28.265353 2026] [ssl:error] [pid 3090793:tid 3090793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:28.561051 2026] [ssl:error] [pid 3093641:tid 3093641] (70014)End of file found: [client 216.73.216.199:14998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:28.564546 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.7:56786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:28.565246 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.7:56786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:28.762513 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.53:37598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:28.763169 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.53:37598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:28.949196 2026] [access_compat:error] [pid 3093640:tid 3093640] [client 125.176.202.122:55548] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:29.316264 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.12:26620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:29.316951 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.12:26620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:29.762087 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.49:31022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:29.762745 2026] [authz_core:error] [pid 3093639:tid 3093639] [client 57.141.0.49:31022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:29.764335 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.53:37604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:29.764979 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.53:37604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:30.484786 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.26:44698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:30.485429 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.26:44698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:30.974389 2026] [ssl:error] [pid 3096890:tid 3096890] (70014)End of file found: [client 216.73.216.199:12647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:31.099955 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.49:31036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:31.100594 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.49:31036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:31.131675 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.24:56994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:31.132300 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.24:56994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:31.321223 2026] [ssl:error] [pid 3096710:tid 3096710] (EAI 2)Name or service not known: [client 144.76.19.72:26664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:31.321264 2026] [ssl:error] [pid 3096710:tid 3096710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:31.375893 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:26676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:31.375930 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:31.634791 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.2:57410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:31.635528 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.2:57410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:31.873879 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.6:22894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:31.874523 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.6:22894] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:31.922088 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.28:26410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:31.922718 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.28:26410] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:32.179785 2026] [ssl:error] [pid 3079193:tid 3079193] (70014)End of file found: [client 216.73.216.199:49632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:32.392029 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 57.141.0.6:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:32.392673 2026] [authz_core:error] [pid 3096710:tid 3096710] [client 57.141.0.6:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:32.495744 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.49:31044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:32.496376 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.49:31044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:32.680666 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.1:20086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:32.681369 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.1:20086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:33.423298 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.38:64978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:33.423947 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.38:64978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:33.541268 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.1:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:33.541903 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.1:20096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:33.862020 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.51:58664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:33.862688 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.51:58664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:33.875475 2026] [core:error] [pid 3084598:tid 3084598] (13)Permission denied: [client 216.73.216.199:35698] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/slabs
[Thu Jul 30 12:37:33.886936 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.49:31046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:33.887720 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.49:31046] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:34.429281 2026] [ssl:error] [pid 3093641:tid 3093641] (EAI 2)Name or service not known: [client 144.76.19.72:26682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:34.429315 2026] [ssl:error] [pid 3093641:tid 3093641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:34.484648 2026] [ssl:error] [pid 3096710:tid 3096710] (EAI 2)Name or service not known: [client 144.76.19.72:26696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:34.484691 2026] [ssl:error] [pid 3096710:tid 3096710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:34.708314 2026] [lsapi:warn] [pid 3097447:tid 3097447] [client 122.180.21.11:62054] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:37:34.783647 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.38:64984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:34.784303 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.38:64984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:35.394142 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.21:28460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:35.394795 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.21:28460] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:35.427468 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.68:23522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:35.428774 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.68:23522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:35.538844 2026] [access_compat:error] [pid 3096743:tid 3096743] [client 125.176.202.122:55822] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:36.051184 2026] [authz_core:error] [pid 3097448:tid 3097448] [client 57.141.0.21:28468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:36.051834 2026] [authz_core:error] [pid 3097448:tid 3097448] [client 57.141.0.21:28468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:36.230812 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.61:64418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:36.231463 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.61:64418] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:36.384352 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.18:28440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:36.385059 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.18:28440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:36.689142 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.71:63732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:36.690360 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.71:63732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:37.207340 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.43:54686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:37.207977 2026] [authz_core:error] [pid 3097569:tid 3097569] [client 57.141.0.43:54686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:37.237634 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.18:28454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:37.238323 2026] [authz_core:error] [pid 3067992:tid 3067992] [client 57.141.0.18:28454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:37.537683 2026] [ssl:error] [pid 3096812:tid 3096812] (EAI 2)Name or service not known: [client 144.76.19.72:26706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:37.537728 2026] [ssl:error] [pid 3096812:tid 3096812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:37.589815 2026] [ssl:error] [pid 3093640:tid 3093640] (EAI 2)Name or service not known: [client 144.76.19.72:26710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:37.589841 2026] [ssl:error] [pid 3093640:tid 3093640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:37.664320 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.50:44804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:37.664946 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.50:44804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:37.673103 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.51:48426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:37.673779 2026] [authz_core:error] [pid 3096890:tid 3096890] [client 57.141.0.51:48426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:38.132030 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.28:26414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:38.132701 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.28:26414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:38.514192 2026] [ssl:error] [pid 3084598:tid 3084598] (70014)End of file found: [client 216.73.216.199:35698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:38.527786 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.1:20108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:38.528419 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.1:20108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:39.069194 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.51:48432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:39.069877 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.51:48432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:39.374447 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.19:63094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:39.375148 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.19:63094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:39.552304 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.10:59430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:39.552956 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.10:59430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:40.128300 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.29:61412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:40.129274 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.29:61412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:40.634163 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.7:49178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:40.634795 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.7:49178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:40.641846 2026] [ssl:error] [pid 3098133:tid 3098133] (EAI 2)Name or service not known: [client 144.76.19.72:46434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:40.641879 2026] [ssl:error] [pid 3098133:tid 3098133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:40.695802 2026] [ssl:error] [pid 3096812:tid 3096812] (EAI 2)Name or service not known: [client 144.76.19.72:46440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:40.695834 2026] [ssl:error] [pid 3096812:tid 3096812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:40.962316 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.40:60480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:40.963027 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.40:60480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:40.977657 2026] [authz_core:error] [pid 3098765:tid 3098765] [client 57.141.0.58:51828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:40.978311 2026] [authz_core:error] [pid 3098765:tid 3098765] [client 57.141.0.58:51828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:41.203567 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.47:23098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:41.204194 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.47:23098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:41.227751 2026] [core:error] [pid 3095196:tid 3095196] (13)Permission denied: [client 216.73.216.199:31013] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip6-frags/ctor
[Thu Jul 30 12:37:41.641552 2026] [access_compat:error] [pid 3096516:tid 3096516] [client 125.176.202.122:56083] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:41.984795 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.49:49136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:41.985425 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.49:49136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:42.286747 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.49:49150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:42.287376 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.49:49150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:42.878656 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.13:36656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:42.879320 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.13:36656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:43.076011 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.27:53530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:43.076686 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.27:53530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:43.105042 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.4:50128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:43.105716 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.4:50128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:43.580274 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.54:53746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:43.580901 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.54:53746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:43.640738 2026] [core:error] [pid 3095196:tid 3095196] (13)Permission denied: [client 216.73.216.199:31013] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty49/subsystem/ttyS2/flags
[Thu Jul 30 12:37:43.669240 2026] [core:error] [pid 3097446:tid 3097446] [client 66.249.66.39:47475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:43.669280 2026] [core:error] [pid 3097446:tid 3097446] [client 66.249.66.39:47475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:43.694542 2026] [core:error] [pid 3088144:tid 3088144] [client 66.249.66.39:51590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:43.694575 2026] [core:error] [pid 3088144:tid 3088144] [client 66.249.66.39:51590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:43.751631 2026] [ssl:error] [pid 3096739:tid 3096739] (EAI 2)Name or service not known: [client 144.76.19.72:46452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:43.751685 2026] [ssl:error] [pid 3096739:tid 3096739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:43.765923 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.55:27156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:43.766559 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.55:27156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:43.809709 2026] [ssl:error] [pid 3097397:tid 3097397] (EAI 2)Name or service not known: [client 144.76.19.72:46464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:43.809753 2026] [ssl:error] [pid 3097397:tid 3097397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:44.196745 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.5:37494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:44.197388 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.5:37494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:44.506307 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.18:23472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:44.506964 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.18:23472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:44.648560 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.53:34340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:44.649221 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.53:34340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:44.955333 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.28:45464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:44.955978 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.28:45464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:44.982678 2026] [core:error] [pid 3088144:tid 3088144] (13)Permission denied: [client 216.73.216.199:57910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/cryptomgr/uevent
[Thu Jul 30 12:37:45.451840 2026] [lsapi:warn] [pid 3090742:tid 3090742] [client 122.180.21.11:62675] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:37:45.495266 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.23:34316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:45.495888 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.23:34316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:45.571220 2026] [ssl:error] [pid 3096743:tid 3096743] (70014)End of file found: [client 216.73.216.199:35871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:45.620454 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.5:37510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:45.621092 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.5:37510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:45.683159 2026] [security2:error] [pid 3090793:tid 3090793] [client 74.7.243.238:59948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "ams3iUaYl2zT20hOl3vP6gAAACY"]
[Thu Jul 30 12:37:45.786474 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.61:34796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:45.787113 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.61:34796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:45.892295 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.24:26464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:45.893317 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.24:26464] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:46.172780 2026] [core:error] [pid 3088144:tid 3088144] (13)Permission denied: [client 216.73.216.199:57910] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS3/flags
[Thu Jul 30 12:37:46.452751 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.19:20412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:46.453382 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.19:20412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:46.525387 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 20.206.204.219:61537] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/fonts/error_log, referer: binance.com
[Thu Jul 30 12:37:46.666202 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.50:49340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:46.666829 2026] [authz_core:error] [pid 3090793:tid 3090793] [client 57.141.0.50:49340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:46.867844 2026] [ssl:error] [pid 3094489:tid 3094489] (EAI 2)Name or service not known: [client 144.76.19.72:46476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:46.867876 2026] [ssl:error] [pid 3094489:tid 3094489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:46.922404 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:46486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:46.922430 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:47.766444 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.39:23026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:47.767083 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.39:23026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:47.978783 2026] [ssl:error] [pid 3088144:tid 3088144] (70014)End of file found: [client 216.73.216.199:57910] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:48.086032 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.39:23034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:48.086663 2026] [authz_core:error] [pid 3090838:tid 3090838] [client 57.141.0.39:23034] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:48.413396 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.22:63210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:48.414017 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.22:63210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:48.609139 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.34:24574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:48.609778 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.34:24574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:48.770378 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.64:24826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:48.771006 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.64:24826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:48.793035 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.33:47702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:48.793668 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.33:47702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:49.661853 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.67:58880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:49.662485 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.67:58880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:49.830658 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.24:26472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:49.831285 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.24:26472] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:49.837232 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.62:20578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:49.838000 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.62:20578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:49.978144 2026] [ssl:error] [pid 3090838:tid 3090838] (EAI 2)Name or service not known: [client 144.76.19.72:51134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:49.978179 2026] [ssl:error] [pid 3090838:tid 3090838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:50.036690 2026] [ssl:error] [pid 3098797:tid 3098797] (EAI 2)Name or service not known: [client 144.76.19.72:51146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:50.036733 2026] [ssl:error] [pid 3098797:tid 3098797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:50.082153 2026] [ssl:error] [pid 3097446:tid 3097446] (70014)End of file found: [client 216.73.216.199:8967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:50.635054 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.26:37140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:50.635695 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.26:37140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:50.771360 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.36:33844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:50.772008 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.36:33844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:50.879698 2026] [ssl:error] [pid 3096743:tid 3096743] (70014)End of file found: [client 216.73.216.199:21266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:51.141592 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.17:25778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:51.142220 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.17:25778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:51.607939 2026] [access_compat:error] [pid 3098734:tid 3098734] [client 47.236.96.46:31318] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/02/iridium-satellite.jpg
[Thu Jul 30 12:37:51.608125 2026] [access_compat:error] [pid 3098734:tid 3098734] [client 47.236.96.46:31318] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 12:37:51.822403 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.71:27110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:51.823028 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.71:27110] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:51.891342 2026] [authz_core:error] [pid 3099139:tid 3099139] [client 57.141.0.31:36124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:51.892023 2026] [authz_core:error] [pid 3099139:tid 3099139] [client 57.141.0.31:36124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:52.187675 2026] [lsapi:warn] [pid 3097445:tid 3097445] [client 184.168.126.180:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:37:52.234328 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.26:37158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:52.235028 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.26:37158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:52.571422 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.69:45540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:52.572061 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.69:45540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:52.698866 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.34:27264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:52.699540 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.34:27264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:52.916193 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.9:62512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:52.916816 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.9:62512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:53.093567 2026] [ssl:error] [pid 3096742:tid 3096742] (EAI 2)Name or service not known: [client 144.76.19.72:51156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:53.093600 2026] [ssl:error] [pid 3096742:tid 3096742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:53.100075 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.69:45548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:53.100702 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.69:45548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:53.146644 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:51162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:53.146674 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:53.348727 2026] [core:error] [pid 3088144:tid 3088144] [client 66.249.64.170:61187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:53.348753 2026] [core:error] [pid 3088144:tid 3088144] [client 66.249.64.170:61187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:53.577914 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.5:38448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:53.578848 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.5:38448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:53.818528 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 20.206.204.219:63265] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/fonts/error_log, referer: binance.com
[Thu Jul 30 12:37:53.953082 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.27:50262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:53.953748 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.27:50262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:54.004102 2026] [ssl:error] [pid 3099187:tid 3099187] (70014)End of file found: [client 216.73.216.199:1826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:54.236719 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.42:37552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:54.237346 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.42:37552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:54.286400 2026] [security2:error] [pid 3069160:tid 3069160] [client 51.68.107.148:23577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/robots.txt"] [unique_id "ams3kuAFnaPgVP-R_A3rqAAAABY"]
[Thu Jul 30 12:37:54.515879 2026] [access_compat:error] [pid 3099224:tid 3099224] [client 125.176.202.122:56636] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:37:54.543414 2026] [core:error] [pid 3090618:tid 3090618] [client 66.249.66.39:39274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:54.543438 2026] [core:error] [pid 3090618:tid 3090618] [client 66.249.66.39:39274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:37:54.679207 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.43:41208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:54.679834 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.43:41208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:55.394128 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.51:58776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:55.394776 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.51:58776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:55.537849 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.35:30614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:55.538473 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.35:30614] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:55.710385 2026] [security2:error] [pid 3096516:tid 3096516] [client 85.208.98.20:42768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/product/M"] [unique_id "ams3k2tfdcKhvYLCcxwT9AAAAAs"]
[Thu Jul 30 12:37:55.784080 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.71:39558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:55.784723 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.71:39558] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:56.156334 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.30:34540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:56.156968 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.30:34540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:56.163430 2026] [lsapi:warn] [pid 3096886:tid 3096886] [client 122.180.21.11:63303] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:37:56.236033 2026] [ssl:error] [pid 3099221:tid 3099221] (EAI 2)Name or service not known: [client 144.76.19.72:51168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:56.236093 2026] [ssl:error] [pid 3099221:tid 3099221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:56.292431 2026] [ssl:error] [pid 3090793:tid 3090793] (EAI 2)Name or service not known: [client 144.76.19.72:51184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:56.292460 2026] [ssl:error] [pid 3090793:tid 3090793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:56.423354 2026] [security2:error] [pid 3098796:tid 3098796] [client 20.171.55.167:8505] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.nigelmassey.jasperandtroy.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams3lHFx-HcT8lXW9zkfkwAAAAg"]
[Thu Jul 30 12:37:56.423534 2026] [security2:error] [pid 3098796:tid 3098796] [client 20.171.55.167:8505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nigelmassey.jasperandtroy.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams3lHFx-HcT8lXW9zkfkwAAAAg"]
[Thu Jul 30 12:37:56.423754 2026] [security2:error] [pid 3098796:tid 3098796] [client 20.171.55.167:8505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.nigelmassey.jasperandtroy.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams3lHFx-HcT8lXW9zkfkwAAAAg"]
[Thu Jul 30 12:37:56.665334 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.54:55486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:56.665985 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.54:55486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:57.010944 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:46928] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:57.073704 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.32:62242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:57.074334 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.32:62242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:57.520429 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.58:49882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:57.521080 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.58:49882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:57.562752 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.67:58884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:57.563381 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.67:58884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:57.632191 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.32:62258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:57.632846 2026] [authz_core:error] [pid 3096886:tid 3096886] [client 57.141.0.32:62258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:58.271924 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.35:30622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:58.272562 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.35:30622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:58.615731 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.68:55056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:58.616365 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.68:55056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:59.088992 2026] [authz_core:error] [pid 3096711:tid 3096711] [client 57.141.0.36:33858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:59.089627 2026] [authz_core:error] [pid 3096711:tid 3096711] [client 57.141.0.36:33858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:59.121890 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.67:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:59.122523 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.67:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:59.347313 2026] [ssl:error] [pid 3096742:tid 3096742] (EAI 2)Name or service not known: [client 144.76.19.72:51190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:59.347344 2026] [ssl:error] [pid 3096742:tid 3096742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:59.404159 2026] [ssl:error] [pid 3099187:tid 3099187] (EAI 2)Name or service not known: [client 144.76.19.72:51192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:37:59.404214 2026] [ssl:error] [pid 3099187:tid 3099187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:37:59.405465 2026] [security2:error] [pid 3097447:tid 3097447] [client 54.39.89.102:48236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "ams3lwwdUtr6PLa6YOMkQAAAABw"]
[Thu Jul 30 12:37:59.422833 2026] [ssl:error] [pid 3090618:tid 3090618] (70014)End of file found: [client 216.73.216.199:37369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:37:59.591628 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.14:48730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:59.592251 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.14:48730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:59.698974 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.33:52324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:59.699607 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.33:52324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:37:59.923187 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.32:62262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:37:59.923829 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.32:62262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:00.623196 2026] [core:error] [pid 3096742:tid 3096742] (13)Permission denied: [client 216.73.216.199:7348] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty28/subsystem/ttyS3/flags
[Thu Jul 30 12:38:00.786310 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.41:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:00.786988 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.41:62340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:00.818707 2026] [security2:error] [pid 3099223:tid 3099223] [client 15.235.27.189:45360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2017-2018.html"] [unique_id "ams3mKxL0Bqq8SYLUfzTegAAAB0"]
[Thu Jul 30 12:38:00.924566 2026] [ssl:error] [pid 3096742:tid 3096742] (5)Input/output error: [client 216.73.216.199:7348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:01.126187 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.26:25090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:01.126810 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.26:25090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:01.164776 2026] [access_compat:error] [pid 3099222:tid 3099222] [client 125.176.202.122:56913] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:01.231899 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.3:24764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:01.233089 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.3:24764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:01.486341 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.15:62754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:01.486983 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.15:62754] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:01.667294 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.17:52168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:01.667925 2026] [authz_core:error] [pid 3078608:tid 3078608] [client 57.141.0.17:52168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:01.721202 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.65:30706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:01.721828 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.65:30706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:02.464288 2026] [ssl:error] [pid 3098798:tid 3098798] (EAI 2)Name or service not known: [client 144.76.19.72:19878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:02.464321 2026] [ssl:error] [pid 3098798:tid 3098798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:02.519038 2026] [ssl:error] [pid 3099187:tid 3099187] (EAI 2)Name or service not known: [client 144.76.19.72:19882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:02.519083 2026] [ssl:error] [pid 3099187:tid 3099187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:02.938637 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.9:43646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:02.939261 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.9:43646] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:03.095272 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.49:34904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:03.095934 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.49:34904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:03.171376 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.21:28194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:03.172012 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.21:28194] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:03.240961 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.22:33844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:03.241594 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.22:33844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:03.881413 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.17:52188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:03.882036 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.17:52188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:03.882915 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.41:32084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:03.883527 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.41:32084] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:04.666539 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.28:49342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:04.667176 2026] [authz_core:error] [pid 3099187:tid 3099187] [client 57.141.0.28:49342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:04.775823 2026] [security2:error] [pid 3097447:tid 3097447] [client 74.7.227.151:36384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/essentials.html"] [unique_id "ams3nAwdUtr6PLa6YOMkRgAAABw"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:04.909852 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 66.249.66.34:45647] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:38:04.912543 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 66.249.66.34:45647] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:38:04.971790 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 66.249.66.33:40701] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:38:04.974453 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 66.249.66.33:40701] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:38:05.065525 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.24:29346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:05.066160 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.24:29346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:05.102489 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.45:56094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:05.103128 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.45:56094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:05.547385 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.30:33836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:05.548011 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.30:33836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:05.576515 2026] [ssl:error] [pid 3096516:tid 3096516] (EAI 2)Name or service not known: [client 144.76.19.72:19930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:05.576548 2026] [ssl:error] [pid 3096516:tid 3096516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:05.631428 2026] [ssl:error] [pid 3097448:tid 3097448] (EAI 2)Name or service not known: [client 144.76.19.72:19946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:05.631459 2026] [ssl:error] [pid 3097448:tid 3097448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:05.853525 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.17:52192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:05.854140 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.17:52192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:06.122301 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.19:20094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:06.122923 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.19:20094] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:06.146660 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.62:40388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:06.147273 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.62:40388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:06.483370 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.22:33852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:06.484048 2026] [authz_core:error] [pid 3079193:tid 3079193] [client 57.141.0.22:33852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:06.512622 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.27:26430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:06.513279 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.27:26430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:06.729381 2026] [lsapi:warn] [pid 3084598:tid 3084598] [client 122.180.21.11:63935] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:38:06.764854 2026] [authz_core:error] [pid 3099224:tid 3099224] [client 57.141.0.44:28748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:06.765478 2026] [authz_core:error] [pid 3099224:tid 3099224] [client 57.141.0.44:28748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:07.329836 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.3:24776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:07.330462 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.3:24776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:07.350766 2026] [access_compat:error] [pid 3099187:tid 3099187] [client 125.176.202.122:57178] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:07.796118 2026] [security2:error] [pid 3097445:tid 3097445] [client 74.7.227.151:36386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects-compilations.html"] [unique_id "ams3n_xGbFTzp5iIeC048wAAABo"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:07.849870 2026] [core:error] [pid 3078608:tid 3078608] (13)Permission denied: [client 216.73.216.199:17495] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm/holders/kvm_intel/uevent
[Thu Jul 30 12:38:08.096160 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.28:49354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:08.096785 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.28:49354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:08.448418 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.7:43220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:08.449048 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.7:43220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:08.451052 2026] [ssl:error] [pid 3078608:tid 3078608] (70014)End of file found: [client 216.73.216.199:17495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:08.622150 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.1:61050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:08.622872 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.1:61050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:08.689488 2026] [ssl:error] [pid 3098133:tid 3098133] (EAI 2)Name or service not known: [client 144.76.19.72:19954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:08.689520 2026] [ssl:error] [pid 3098133:tid 3098133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:08.745782 2026] [ssl:error] [pid 3069160:tid 3069160] (EAI 2)Name or service not known: [client 144.76.19.72:19970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:08.745817 2026] [ssl:error] [pid 3069160:tid 3069160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:08.795046 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.4:46130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:08.795681 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.4:46130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:09.062889 2026] [core:error] [pid 3099834:tid 3099834] [client 66.249.66.40:62701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:09.062934 2026] [core:error] [pid 3099834:tid 3099834] [client 66.249.66.40:62701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:09.881909 2026] [core:error] [pid 3099223:tid 3099223] [client 66.249.66.167:39268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:09.881947 2026] [core:error] [pid 3099223:tid 3099223] [client 66.249.66.167:39268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:09.939341 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.12:40950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:09.939961 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.12:40950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:09.989923 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.23:64184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:09.990622 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.23:64184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:10.224487 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.4:46142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:10.225122 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.4:46142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:10.887384 2026] [security2:error] [pid 3097445:tid 3097445] [client 74.7.227.151:36390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/submit.html"] [unique_id "ams3ovxGbFTzp5iIeC049gAAABo"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:10.912769 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.15:52524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:10.913393 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.15:52524] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:11.183678 2026] [ssl:error] [pid 3090618:tid 3090618] (70014)End of file found: [client 216.73.216.199:55006] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:11.311693 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.40:58178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:11.312323 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.40:58178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:11.437919 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.62:46434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:11.438583 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.62:46434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:11.475076 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.38:53704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:11.475756 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.38:53704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:11.563377 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.63:37076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:11.563997 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.63:37076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:11.666548 2026] [ssl:error] [pid 3098797:tid 3098797] (70014)End of file found: [client 216.73.216.199:57025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:11.801900 2026] [ssl:error] [pid 3099223:tid 3099223] (EAI 2)Name or service not known: [client 144.76.19.72:39866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:11.801951 2026] [ssl:error] [pid 3099223:tid 3099223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:11.855572 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:39872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:11.855601 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:11.924994 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.14:30996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:11.925636 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.14:30996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:12.367551 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.65:33988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:12.368247 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.65:33988] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:12.864567 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.28:57104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:12.865216 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.28:57104] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:13.043561 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.15:52532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:13.044203 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.15:52532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:13.445671 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.43:31672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:13.446300 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.43:31672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:13.662225 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.45:51412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:13.663659 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.45:51412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:13.876566 2026] [security2:error] [pid 3093640:tid 3093640] [client 74.7.227.151:36392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/CCCM.html"] [unique_id "ams3pYtQ2T3bc892H1mcFgAAAB8"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:14.514456 2026] [core:error] [pid 3097446:tid 3097446] [client 66.249.66.168:38377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:14.514486 2026] [core:error] [pid 3097446:tid 3097446] [client 66.249.66.168:38377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:14.684586 2026] [ssl:error] [pid 3099221:tid 3099221] (70014)End of file found: [client 216.73.216.199:15963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:14.735853 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.26:34406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:14.736505 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.26:34406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:14.895491 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.10:27312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:14.896528 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.10:27312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:14.914480 2026] [ssl:error] [pid 3090793:tid 3090793] (EAI 2)Name or service not known: [client 144.76.19.72:39882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:14.914520 2026] [ssl:error] [pid 3090793:tid 3090793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:14.968923 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:39886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:14.968966 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:15.136576 2026] [access_compat:error] [pid 3099187:tid 3099187] [client 125.176.202.122:57402] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:15.195953 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.6:37112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:15.196590 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.6:37112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:15.215513 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.54:44316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:15.216144 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.54:44316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:15.233186 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.22:35176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:15.234194 2026] [authz_core:error] [pid 3096743:tid 3096743] [client 57.141.0.22:35176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:15.673225 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.68:56020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:15.673856 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.68:56020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:15.827858 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.24:28446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:15.828485 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.24:28446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:16.488056 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.24:28462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:16.488722 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.24:28462] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:16.585891 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.21:28450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:16.586529 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.21:28450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:16.683889 2026] [security2:error] [pid 3090618:tid 3090618] [client 169.224.17.207:47065] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3qDqpBC0FwvDMksESsgAAAA0"]
[Thu Jul 30 12:38:16.683949 2026] [security2:error] [pid 3090618:tid 3090618] [client 169.224.17.207:47065] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3qDqpBC0FwvDMksESsgAAAA0"]
[Thu Jul 30 12:38:16.684393 2026] [security2:error] [pid 3090618:tid 3090618] [client 169.224.17.207:47065] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3qDqpBC0FwvDMksESsgAAAA0"]
[Thu Jul 30 12:38:16.995265 2026] [security2:error] [pid 3088195:tid 3088195] [client 74.7.227.151:43486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/translations.html"] [unique_id "ams3qCMTTyyQR4l_pYJiwQAAAAw"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:17.103746 2026] [ssl:error] [pid 3096516:tid 3096516] (70014)End of file found: [client 216.73.216.199:18068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:17.293188 2026] [lsapi:warn] [pid 3096812:tid 3096812] [client 122.180.21.11:64556] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:38:17.405051 2026] [ssl:error] [pid 3093640:tid 3093640] (70014)End of file found: [client 216.73.216.199:20787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:17.489202 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.18:27788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:17.489830 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.18:27788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:18.023680 2026] [ssl:error] [pid 3097446:tid 3097446] (EAI 2)Name or service not known: [client 144.76.19.72:39892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:18.023709 2026] [ssl:error] [pid 3097446:tid 3097446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:18.038749 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.17:55670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:18.039410 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.17:55670] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:18.079744 2026] [ssl:error] [pid 3096739:tid 3096739] (EAI 2)Name or service not known: [client 144.76.19.72:39898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:18.079796 2026] [ssl:error] [pid 3096739:tid 3096739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:18.189622 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.51:49644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:18.190251 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.51:49644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:18.417900 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.52:38124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:18.418607 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.52:38124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:18.501599 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.38:53732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:18.502225 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.38:53732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:18.545191 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.49:28588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:18.545819 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.49:28588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:18.774091 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.41:43948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:18.774712 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.41:43948] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:19.707765 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.20:61526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:19.708418 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.20:61526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:19.714139 2026] [security2:error] [pid 3094489:tid 3094489] [client 185.191.171.15:49960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1433.0/prev_next,prev.html"] [unique_id "ams3qyROGz31AdnVcPyLCgAAAAM"]
[Thu Jul 30 12:38:19.855760 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.32:53074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:19.856473 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.32:53074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:20.019566 2026] [ssl:error] [pid 3100223:tid 3100223] (70014)End of file found: [client 216.73.216.199:39641] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:20.222628 2026] [security2:error] [pid 3096742:tid 3096742] [client 74.7.227.151:43490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/editions.html"] [unique_id "ams3rD7flATmqdxWmLMSfwAAACw"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:20.246459 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.41:43960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:20.247097 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.41:43960] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:20.792184 2026] [access_compat:error] [pid 3092477:tid 3092477] [client 125.176.202.122:57639] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:20.881940 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.21:28452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:20.882592 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.21:28452] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:20.949289 2026] [authz_core:error] [pid 3100286:tid 3100286] [client 57.141.0.15:32860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:20.949945 2026] [authz_core:error] [pid 3100286:tid 3100286] [client 57.141.0.15:32860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:20.960951 2026] [security2:error] [pid 3099223:tid 3099223] [client 179.30.212.243:59302] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3rKxL0Bqq8SYLUfzThQAAAB0"]
[Thu Jul 30 12:38:20.960997 2026] [security2:error] [pid 3099223:tid 3099223] [client 179.30.212.243:59302] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3rKxL0Bqq8SYLUfzThQAAAB0"]
[Thu Jul 30 12:38:20.961251 2026] [security2:error] [pid 3099223:tid 3099223] [client 179.30.212.243:59302] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3rKxL0Bqq8SYLUfzThQAAAB0"]
[Thu Jul 30 12:38:21.135026 2026] [ssl:error] [pid 3096742:tid 3096742] (EAI 2)Name or service not known: [client 144.76.19.72:52388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:21.135060 2026] [ssl:error] [pid 3096742:tid 3096742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:21.190891 2026] [ssl:error] [pid 3100286:tid 3100286] (EAI 2)Name or service not known: [client 144.76.19.72:52404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:21.190929 2026] [ssl:error] [pid 3100286:tid 3100286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:21.212093 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.23:48946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:21.212740 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.23:48946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:21.269420 2026] [access_compat:error] [pid 3099223:tid 3099223] [client 45.158.164.139:32824] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:38:21.329784 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.67:23432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:21.330428 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.67:23432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:21.871738 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.52:25002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:21.872374 2026] [authz_core:error] [pid 3094489:tid 3094489] [client 57.141.0.52:25002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:22.211388 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.39:64538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:22.212011 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.39:64538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:22.292017 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.47:59846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:22.292672 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.47:59846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:22.430475 2026] [core:error] [pid 3094489:tid 3094489] (13)Permission denied: [client 216.73.216.199:4411] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/line
[Thu Jul 30 12:38:22.530312 2026] [ssl:error] [pid 3094489:tid 3094489] (70014)End of file found: [client 216.73.216.199:4411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:22.936168 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.69:38128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:22.936796 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.69:38128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:22.946311 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.51:49654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:22.947408 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.51:49654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:23.062779 2026] [ssl:error] [pid 3100286:tid 3100286] (70014)End of file found: [client 216.73.216.199:38864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:23.119555 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.46:20758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:23.120186 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.46:20758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:23.328237 2026] [security2:error] [pid 3096516:tid 3096516] [client 74.7.227.151:43504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/partners.html"] [unique_id "ams3r2tfdcKhvYLCcxwUBwAAAAs"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:23.491517 2026] [security2:error] [pid 3099223:tid 3099223] [client 185.191.171.1:31000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/southington-high-school-honor-roll-2021"] [unique_id "ams3r6xL0Bqq8SYLUfzTjAAAAB0"]
[Thu Jul 30 12:38:23.860305 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.20:61532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:23.860958 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.20:61532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:24.244484 2026] [ssl:error] [pid 3096739:tid 3096739] (EAI 2)Name or service not known: [client 144.76.19.72:52418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:24.244537 2026] [ssl:error] [pid 3096739:tid 3096739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:24.295869 2026] [ssl:error] [pid 3100377:tid 3100377] (EAI 2)Name or service not known: [client 144.76.19.72:52420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:24.295907 2026] [ssl:error] [pid 3100377:tid 3100377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:24.336602 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.61:25774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:24.337225 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.61:25774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:24.381395 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.66:26230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:24.382017 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.66:26230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:24.870975 2026] [security2:error] [pid 3075978:tid 3075978] [client 191.187.135.180:5118] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3sDbE97VlTlQYp8NuUQAAABc"]
[Thu Jul 30 12:38:24.871023 2026] [security2:error] [pid 3075978:tid 3075978] [client 191.187.135.180:5118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams3sDbE97VlTlQYp8NuUQAAABc"]
[Thu Jul 30 12:38:24.871273 2026] [security2:error] [pid 3075978:tid 3075978] [client 191.187.135.180:5118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams3sDbE97VlTlQYp8NuUQAAABc"]
[Thu Jul 30 12:38:25.427319 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.52:25016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:25.427957 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.52:25016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:25.487222 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.38:36294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:25.487853 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.38:36294] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:25.648781 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.27:50448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:25.649428 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.27:50448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:25.762252 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.67:23458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:25.762872 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.67:23458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:25.927252 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.8:61062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:25.927878 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.8:61062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:26.413320 2026] [security2:error] [pid 3099223:tid 3099223] [client 74.7.227.151:43748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/about.html"] [unique_id "ams3sqxL0Bqq8SYLUfzTkAAAAB0"], referer: https://shelter.appsians.com
[Thu Jul 30 12:38:26.443375 2026] [ssl:error] [pid 3100416:tid 3100416] (70014)End of file found: [client 216.73.216.199:53135] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:26.616571 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.19:52158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:26.617198 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.19:52158] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:26.717009 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.61:25782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:26.717677 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.61:25782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:27.272345 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.70:27684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:27.272987 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.70:27684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:27.392048 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:52432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:27.392126 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:27.448270 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:52442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:27.448328 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:27.492851 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.38:36298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:27.493506 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.38:36298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:27.852110 2026] [ssl:error] [pid 3096812:tid 3096812] (70014)End of file found: [client 216.73.216.199:40928] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:27.911761 2026] [lsapi:warn] [pid 3092477:tid 3092477] [client 122.180.21.11:65184] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:38:27.945048 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.36:64854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:27.945686 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.36:64854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:27.997849 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.52:25040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:27.998479 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.52:25040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:28.443444 2026] [ssl:error] [pid 3099221:tid 3099221] (70014)End of file found: [client 216.73.216.199:51448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:28.758416 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.9:29702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:28.759047 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.9:29702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:28.909087 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.12:64142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:28.909710 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.12:64142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:28.927416 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.32:53030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:28.928056 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.32:53030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:29.101924 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.55:30076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:29.102562 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.55:30076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:29.475595 2026] [security2:error] [pid 3097397:tid 3097397] [client 72.146.16.10:40607] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.actsa.co.uk.acthoroughbreds.com"] [uri "/wp-config.php"] [unique_id "ams3tc9UkRbrj5uPocc8BgAAAAU"]
[Thu Jul 30 12:38:29.475743 2026] [security2:error] [pid 3097397:tid 3097397] [client 72.146.16.10:40607] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.actsa.co.uk.acthoroughbreds.com"] [uri "/wp-config.php"] [unique_id "ams3tc9UkRbrj5uPocc8BgAAAAU"]
[Thu Jul 30 12:38:29.475932 2026] [security2:error] [pid 3097397:tid 3097397] [client 72.146.16.10:40607] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.actsa.co.uk.acthoroughbreds.com"] [uri "/wp-config.php"] [unique_id "ams3tc9UkRbrj5uPocc8BgAAAAU"]
[Thu Jul 30 12:38:29.635518 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.10:50868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:29.636147 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.10:50868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:29.966023 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.29:37190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:29.966677 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.29:37190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:30.390977 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 80.225.239.192:63160] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:38:30.393674 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 80.225.239.192:63160] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:38:30.465374 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.68:43392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:30.466003 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.68:43392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:30.530587 2026] [ssl:error] [pid 3099223:tid 3099223] (EAI 2)Name or service not known: [client 144.76.19.72:41490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:30.530619 2026] [ssl:error] [pid 3099223:tid 3099223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:30.584914 2026] [ssl:error] [pid 3097397:tid 3097397] (EAI 2)Name or service not known: [client 144.76.19.72:41504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:30.584943 2026] [ssl:error] [pid 3097397:tid 3097397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:30.890105 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 80.225.239.192:63160] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:38:30.892772 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 80.225.239.192:63160] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:38:31.196447 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.28:63784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:31.197078 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.28:63784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:31.260170 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.16:57734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:31.260787 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.16:57734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:31.358120 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.45:25738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:31.358772 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.45:25738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:31.666622 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 66.249.66.33:57087] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:38:31.669240 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 66.249.66.33:57087] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:38:31.717657 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.56:65470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:31.718318 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.56:65470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:31.755993 2026] [ssl:error] [pid 3096743:tid 3096743] (70014)End of file found: [client 216.73.216.199:9643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:31.854483 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.27:35406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:31.855151 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.27:35406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:32.038303 2026] [access_compat:error] [pid 3098133:tid 3098133] [client 125.176.202.122:58095] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:32.513106 2026] [core:error] [pid 3088195:tid 3088195] [client 66.249.66.194:45443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:32.513132 2026] [core:error] [pid 3088195:tid 3088195] [client 66.249.66.194:45443] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:32.716916 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.24:53602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:32.717580 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.24:53602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:32.797135 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.41:56388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:32.797761 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.41:56388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:33.020487 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.65:25222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:33.021122 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.65:25222] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:33.195403 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.39:46438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:33.196054 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.39:46438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:33.290775 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.6:59920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:33.291465 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.6:59920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:33.337843 2026] [security2:error] [pid 3097446:tid 3097446] [client 94.154.43.186:62254] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mjs-services.com"] [uri "/.env"] [unique_id "ams3uUyC5Ei-HyIne43evAAAABs"]
[Thu Jul 30 12:38:33.337984 2026] [security2:error] [pid 3097446:tid 3097446] [client 94.154.43.186:62254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mjs-services.com"] [uri "/.env"] [unique_id "ams3uUyC5Ei-HyIne43evAAAABs"]
[Thu Jul 30 12:38:33.636936 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.44:34388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:33.637660 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.44:34388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:33.639978 2026] [ssl:error] [pid 3100318:tid 3100318] (EAI 2)Name or service not known: [client 144.76.19.72:41510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:33.640007 2026] [ssl:error] [pid 3100318:tid 3100318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:33.696212 2026] [ssl:error] [pid 3100377:tid 3100377] (EAI 2)Name or service not known: [client 144.76.19.72:41520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:33.696243 2026] [ssl:error] [pid 3100377:tid 3100377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:34.011528 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.52:52290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:34.012177 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.52:52290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:34.188720 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.3:47372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:34.189370 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.3:47372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:34.229061 2026] [security2:error] [pid 3097446:tid 3097446] [client 94.154.43.186:62254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mjs-services.com"] [uri "/index.php"] [unique_id "ams3uUyC5Ei-HyIne43evAAAABs"]
[Thu Jul 30 12:38:34.271936 2026] [ssl:error] [pid 3093640:tid 3093640] (70014)End of file found: [client 216.73.216.199:58829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:34.577185 2026] [ssl:error] [pid 3093749:tid 3093749] (70014)End of file found: [client 216.73.216.199:57351] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:35.282967 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.12:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:35.283615 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.12:42506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:35.332244 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.28:48232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:35.332892 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.28:48232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:35.661795 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.3:47376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:35.662431 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.3:47376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:35.751929 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.46:44124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:35.752575 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.46:44124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:36.199392 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.24:54192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:36.200024 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.24:54192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:36.753903 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:41536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:36.753937 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:36.761240 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.53:20238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:36.761862 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.53:20238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:36.807615 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:41552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:36.807657 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:37.038396 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.15:52832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:37.039073 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.15:52832] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:37.172459 2026] [security2:error] [pid 3075978:tid 3075978] [client 114.119.144.31:41855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~18"] [unique_id "ams3vTbE97VlTlQYp8NuWQAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~18
[Thu Jul 30 12:38:37.295668 2026] [security2:error] [pid 3100415:tid 3100415] [client 72.146.16.10:2892] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.actsa.co.uk.acthoroughbreds.com"] [uri "/var/log/error.log"] [unique_id "ams3vX1tj2k9F5sJ8p4UkQAAACY"]
[Thu Jul 30 12:38:37.295903 2026] [security2:error] [pid 3100415:tid 3100415] [client 72.146.16.10:2892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.actsa.co.uk.acthoroughbreds.com"] [uri "/var/log/error.log"] [unique_id "ams3vX1tj2k9F5sJ8p4UkQAAACY"]
[Thu Jul 30 12:38:37.296135 2026] [security2:error] [pid 3100415:tid 3100415] [client 72.146.16.10:2892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.actsa.co.uk.acthoroughbreds.com"] [uri "/var/log/error.log"] [unique_id "ams3vX1tj2k9F5sJ8p4UkQAAACY"]
[Thu Jul 30 12:38:37.566855 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.20:38454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:37.567484 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.20:38454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:37.843818 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.14:61310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:37.844462 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.14:61310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:37.896400 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:7877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:38.248216 2026] [security2:error] [pid 3098133:tid 3098133] [client 114.119.144.31:41869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~18"] [unique_id "ams3vrKIr-IMeJLFjAGj5gAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~18
[Thu Jul 30 12:38:38.473244 2026] [lsapi:warn] [pid 3087847:tid 3087847] [client 122.180.21.11:49421] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:38:38.496180 2026] [authz_core:error] [pid 3100942:tid 3100942] [client 57.141.0.43:55594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:38.496801 2026] [authz_core:error] [pid 3100942:tid 3100942] [client 57.141.0.43:55594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:38.596630 2026] [access_compat:error] [pid 3097447:tid 3097447] [client 125.176.202.122:58319] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:38.668299 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.42:38236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:38.668926 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.42:38236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:38.751788 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.56:41422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:38.752418 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.56:41422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:38.939839 2026] [authz_core:error] [pid 3100286:tid 3100286] [client 57.141.0.44:34416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:38.940485 2026] [authz_core:error] [pid 3100286:tid 3100286] [client 57.141.0.44:34416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:39.420217 2026] [authz_core:error] [pid 3100942:tid 3100942] [client 57.141.0.30:39144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:39.420843 2026] [authz_core:error] [pid 3100942:tid 3100942] [client 57.141.0.30:39144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:39.594507 2026] [ssl:error] [pid 3098797:tid 3098797] (70014)End of file found: [client 216.73.216.199:48063] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:39.863540 2026] [ssl:error] [pid 3093640:tid 3093640] (EAI 2)Name or service not known: [client 144.76.19.72:50322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:39.863568 2026] [ssl:error] [pid 3093640:tid 3093640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:39.919869 2026] [ssl:error] [pid 3099834:tid 3099834] (EAI 2)Name or service not known: [client 144.76.19.72:50334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:39.919941 2026] [ssl:error] [pid 3099834:tid 3099834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:39.993779 2026] [ssl:error] [pid 3100286:tid 3100286] (70014)End of file found: [client 216.73.216.199:7775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:40.130333 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.11:29630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:40.130961 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.11:29630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:40.232746 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.50:43474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:40.233372 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.50:43474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:40.281059 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.7:42164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:40.281697 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.7:42164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:40.600363 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.48:38630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:40.600985 2026] [authz_core:error] [pid 3093640:tid 3093640] [client 57.141.0.48:38630] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:40.668416 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.2:41112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:40.669028 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.2:41112] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:40.721605 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.15:52854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:40.722230 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.15:52854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:41.924371 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.46:47330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:41.924995 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.46:47330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:42.322948 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.41:56392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:42.323592 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.41:56392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:42.501905 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.52:50696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:42.502542 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.52:50696] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:42.604596 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.8:51510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:42.605233 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.8:51510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:42.754912 2026] [security2:error] [pid 3099188:tid 3099188] [client 43.130.228.73:42692] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.newtronicmedia.com"] [uri "/"] [unique_id "ams3wuvqOagaDuNCD6HQKQAAABM"]
[Thu Jul 30 12:38:42.991562 2026] [ssl:error] [pid 3098734:tid 3098734] (EAI 2)Name or service not known: [client 144.76.19.72:50346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:42.991601 2026] [ssl:error] [pid 3098734:tid 3098734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:43.052952 2026] [ssl:error] [pid 3081197:tid 3081197] (EAI 2)Name or service not known: [client 144.76.19.72:50360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:43.052983 2026] [ssl:error] [pid 3081197:tid 3081197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:43.114323 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.42:26274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:43.114941 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.42:26274] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:43.193893 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.12:50296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:43.194529 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.12:50296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:43.215452 2026] [ssl:error] [pid 3098766:tid 3098766] (70014)End of file found: [client 216.73.216.199:9955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:43.504960 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.55:41286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:43.505599 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.55:41286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:44.230115 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.23:38776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:44.230742 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.23:38776] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:44.484510 2026] [access_compat:error] [pid 3069160:tid 3069160] [client 125.176.202.122:58548] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:44.707181 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.37:64664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:44.707806 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.37:64664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:45.253042 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.64:31806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:45.253693 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.64:31806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:45.323725 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.36:27186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:45.324347 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.36:27186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:46.082338 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.63:56828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:46.082964 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.63:56828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:46.110194 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:50372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:46.110219 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:46.163448 2026] [ssl:error] [pid 3092477:tid 3092477] (EAI 2)Name or service not known: [client 144.76.19.72:50376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:46.163477 2026] [ssl:error] [pid 3092477:tid 3092477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:46.718323 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.15:45058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:46.718943 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.15:45058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:46.767601 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.22:24600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:46.768226 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.22:24600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:47.051248 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.59:24078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:47.051871 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.59:24078] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:47.291459 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.7:60600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:47.292090 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.7:60600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:47.589343 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.4:44854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:47.589965 2026] [authz_core:error] [pid 3096739:tid 3096739] [client 57.141.0.4:44854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:47.659920 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.54:54552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:47.660545 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.54:54552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:47.663605 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.15:45068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:47.664227 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.15:45068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:47.964319 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.63:56836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:47.964937 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.63:56836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:48.158899 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.19:31302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:48.159535 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.19:31302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:49.061802 2026] [lsapi:warn] [pid 3100377:tid 3100377] [client 122.180.21.11:50067] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:38:49.215423 2026] [ssl:error] [pid 3093641:tid 3093641] (EAI 2)Name or service not known: [client 144.76.19.72:50378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:49.215451 2026] [ssl:error] [pid 3093641:tid 3093641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:49.221476 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.10:23868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:49.222107 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.10:23868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:49.267442 2026] [ssl:error] [pid 3090742:tid 3090742] (EAI 2)Name or service not known: [client 144.76.19.72:50386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:49.267472 2026] [ssl:error] [pid 3090742:tid 3090742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:49.374800 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.36:27188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:49.375436 2026] [authz_core:error] [pid 3098766:tid 3098766] [client 57.141.0.36:27188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:49.738134 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.28:63264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:49.738758 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.28:63264] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:49.756255 2026] [security2:error] [pid 3096888:tid 3096888] [client 156.59.198.136:54154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3yW9nS8J9a8C2jGBcLgAAADY"]
[Thu Jul 30 12:38:49.853513 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.46:47338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:49.854178 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.46:47338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:50.024553 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.3:22946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:50.025175 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.3:22946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:50.571291 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.58:33500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:50.571922 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.58:33500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:50.730022 2026] [ssl:error] [pid 3093749:tid 3093749] (70014)End of file found: [client 216.73.216.199:26767] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:50.808198 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.47:21790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:50.808855 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.47:21790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:51.065339 2026] [access_compat:error] [pid 3099222:tid 3099222] [client 125.176.202.122:58807] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:51.252635 2026] [security2:error] [pid 3097447:tid 3097447] [client 156.59.198.136:22682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3ywwdUtr6PLa6YOMkUwAAABw"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:38:51.506332 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.13:61108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:51.506956 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.13:61108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:51.695843 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 66.249.66.33:54644] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:38:51.698783 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 66.249.66.33:54644] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:38:51.912425 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.37:53654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:51.913088 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.37:53654] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:52.081697 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.34:23360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:52.082321 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.34:23360] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:52.141720 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.45:56302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:52.142372 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.45:56302] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:52.322634 2026] [ssl:error] [pid 3099221:tid 3099221] (EAI 2)Name or service not known: [client 144.76.19.72:44600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:52.322666 2026] [ssl:error] [pid 3099221:tid 3099221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:52.376459 2026] [ssl:error] [pid 3090742:tid 3090742] (EAI 2)Name or service not known: [client 144.76.19.72:44614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:52.376480 2026] [ssl:error] [pid 3090742:tid 3090742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:52.404547 2026] [core:error] [pid 3100377:tid 3100377] [client 66.249.66.167:52892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:52.404571 2026] [core:error] [pid 3100377:tid 3100377] [client 66.249.66.167:52892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:52.412260 2026] [core:error] [pid 3100223:tid 3100223] [client 66.249.66.167:52751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:52.412281 2026] [core:error] [pid 3100223:tid 3100223] [client 66.249.66.167:52751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:52.485557 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.21:21644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:52.486182 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.21:21644] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:52.536258 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:50469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:52.992747 2026] [security2:error] [pid 3090742:tid 3090742] [client 156.59.198.136:56890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3zEUc-9DNL_6dbgAtoQAAACU"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:38:53.076477 2026] [core:error] [pid 3096742:tid 3096742] [client 57.141.0.59:24102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:53.076517 2026] [core:error] [pid 3096742:tid 3096742] [client 57.141.0.59:24102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:38:53.142267 2026] [ssl:error] [pid 3096888:tid 3096888] (70014)End of file found: [client 216.73.216.199:19207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:53.168962 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.22:21232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:53.169639 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.22:21232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:53.580028 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.21:21650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:53.580669 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.21:21650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:53.726207 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.10:23876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:53.726835 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.10:23876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:54.269986 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.48:37316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:54.270622 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.48:37316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:54.349746 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.63:56838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:54.350374 2026] [authz_core:error] [pid 3090742:tid 3090742] [client 57.141.0.63:56838] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:54.539181 2026] [security2:error] [pid 3088195:tid 3088195] [client 156.59.198.136:29270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3ziMTTyyQR4l_pYJizgAAAAw"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:38:54.563056 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.38:46968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:54.563692 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.38:46968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:54.806622 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.60:25476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:54.807240 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.60:25476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:55.442571 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.40:23338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:55.443192 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.40:23338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:55.460958 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:44622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:55.460991 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:55.507544 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.67:56994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:55.508199 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.67:56994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:55.516983 2026] [ssl:error] [pid 3100223:tid 3100223] (EAI 2)Name or service not known: [client 144.76.19.72:44634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:55.517015 2026] [ssl:error] [pid 3100223:tid 3100223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:55.800724 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.48:37330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:55.801354 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.48:37330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:55.989985 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.16:37660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:55.990626 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.16:37660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:56.317726 2026] [security2:error] [pid 3097397:tid 3097397] [client 156.59.198.136:30802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams30M9UkRbrj5uPocc8EwAAAAU"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:38:56.463858 2026] [core:error] [pid 3081197:tid 3081197] (13)Permission denied: [client 216.73.216.199:43644] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS2/uartclk
[Thu Jul 30 12:38:56.777569 2026] [cgi:error] [pid 3099221:tid 3099221] [client 72.146.16.10:55499] AH02811: stderr from /home/acthorou/actsa.co.uk/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 12:38:56.806088 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.46:25016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:56.806716 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.46:25016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:56.895776 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 72.146.16.10:55499] AH01630: client denied by server configuration: /home/acthorou/actsa.co.uk/php.ini
[Thu Jul 30 12:38:57.000180 2026] [authz_core:error] [pid 3100318:tid 3100318] [client 57.141.0.60:25484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:57.000804 2026] [authz_core:error] [pid 3100318:tid 3100318] [client 57.141.0.60:25484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:57.135743 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.55:30652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:57.136453 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.55:30652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:57.367857 2026] [ssl:error] [pid 3081197:tid 3081197] (70014)End of file found: [client 216.73.216.199:43644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:57.670208 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.20:26914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:57.670832 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.20:26914] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:57.816317 2026] [security2:error] [pid 3090618:tid 3090618] [client 156.59.198.135:61808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams30TqpBC0FwvDMksETDwAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:38:58.090722 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.39:36716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:58.091346 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.39:36716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:58.473131 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:52199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:58.577771 2026] [ssl:error] [pid 3096516:tid 3096516] (EAI 2)Name or service not known: [client 144.76.19.72:44636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:58.577800 2026] [ssl:error] [pid 3096516:tid 3096516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:58.632137 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:44638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:38:58.632163 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:38:58.724934 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.23:40596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:58.725567 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.23:40596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:59.052919 2026] [access_compat:error] [pid 3098799:tid 3098799] [client 125.176.202.122:59182] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:38:59.085932 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.24:29278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:38:59.086565 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.24:29278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:38:59.188926 2026] [ssl:error] [pid 3097397:tid 3097397] (70014)End of file found: [client 216.73.216.199:1852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:38:59.358984 2026] [security2:error] [pid 3090843:tid 3090843] [client 156.59.198.136:26384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3022GxN977hVBJdJBjAAAADQ"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:00.354879 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.2:49586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:00.355519 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.2:49586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:00.428403 2026] [lsapi:warn] [pid 3090843:tid 3090843] [client 122.180.21.11:50698] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:39:00.530364 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.46:25036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:00.530986 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.46:25036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:00.562130 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.4:31352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:00.562755 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.4:31352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:00.704411 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.15:48818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:00.705030 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.15:48818] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:00.876788 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.25:60178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:00.877415 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.25:60178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:01.327615 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.56:27054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:01.328251 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.56:27054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:01.503886 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.44:51502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:01.504547 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.44:51502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:01.642264 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.46:62836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:01.642893 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.46:62836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:01.708637 2026] [security2:error] [pid 3101835:tid 3101835] [client 156.59.198.135:45936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams31Smwt5cKjMEEgy3TpQAAACo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:01.858126 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.2:49596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:01.859353 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.2:49596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:01.989272 2026] [ssl:error] [pid 3101870:tid 3101870] (EAI 2)Name or service not known: [client 144.76.19.72:63272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:01.989346 2026] [ssl:error] [pid 3101870:tid 3101870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:02.185034 2026] [ssl:error] [pid 3088986:tid 3088986] (EAI 2)Name or service not known: [client 144.76.19.72:63282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:02.185063 2026] [ssl:error] [pid 3088986:tid 3088986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:02.709275 2026] [ssl:error] [pid 3101806:tid 3101806] (70014)End of file found: [client 216.73.216.199:63697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:02.805200 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.61:37056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:02.805818 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.61:37056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:02.896875 2026] [authz_core:error] [pid 3101869:tid 3101869] [client 57.141.0.16:48686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:02.897522 2026] [authz_core:error] [pid 3101869:tid 3101869] [client 57.141.0.16:48686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:03.336452 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.17:40886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:03.337120 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.17:40886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:03.502917 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.24:29298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:03.503555 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.24:29298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:03.534458 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.4:37706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:03.535118 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.4:37706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:03.753277 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.12:49920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:03.753893 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.12:49920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:04.332481 2026] [core:error] [pid 3101869:tid 3101869] (13)Permission denied: [client 216.73.216.199:63621] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/aliases
[Thu Jul 30 12:39:04.382122 2026] [authz_core:error] [pid 3101835:tid 3101835] [client 57.141.0.29:32220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:04.382750 2026] [authz_core:error] [pid 3101835:tid 3101835] [client 57.141.0.29:32220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:04.411227 2026] [security2:error] [pid 3069160:tid 3069160] [client 156.59.198.136:50424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams32OAFnaPgVP-R_A3ryAAAABY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:04.634154 2026] [core:error] [pid 3101869:tid 3101869] (13)Permission denied: [client 216.73.216.199:63621] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS2/uartclk
[Thu Jul 30 12:39:04.771199 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.21:27672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:04.771828 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.21:27672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:04.966351 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.54:45642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:04.966986 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.54:45642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:04.980584 2026] [security2:error] [pid 3101835:tid 3101835] [client 79.177.129.18:12982] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams32Cmwt5cKjMEEgy3TpwAAACo"]
[Thu Jul 30 12:39:04.980632 2026] [security2:error] [pid 3101835:tid 3101835] [client 79.177.129.18:12982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams32Cmwt5cKjMEEgy3TpwAAACo"]
[Thu Jul 30 12:39:04.980894 2026] [security2:error] [pid 3101835:tid 3101835] [client 79.177.129.18:12982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams32Cmwt5cKjMEEgy3TpwAAACo"]
[Thu Jul 30 12:39:05.230325 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.56:27086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:05.230951 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.56:27086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:05.236898 2026] [ssl:error] [pid 3099834:tid 3099834] (EAI 2)Name or service not known: [client 144.76.19.72:63284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:05.236923 2026] [ssl:error] [pid 3099834:tid 3099834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:05.241485 2026] [ssl:error] [pid 3101869:tid 3101869] (70014)End of file found: [client 216.73.216.199:63621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:05.292622 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:63290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:05.292650 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:05.362676 2026] [cgi:error] [pid 3101834:tid 3101834] [client 20.63.10.215:22995] AH02812: stderr from /home/davidebell/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:39:05.548626 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.61:37068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:05.549252 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.61:37068] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:05.634638 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.32:44326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:05.635272 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.32:44326] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:05.663309 2026] [access_compat:error] [pid 3100415:tid 3100415] [client 125.176.202.122:59434] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:39:05.940259 2026] [security2:error] [pid 3090618:tid 3090618] [client 156.59.198.135:12414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams32TqpBC0FwvDMksETEgAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:06.271328 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.70:24106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:06.271959 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.70:24106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:06.441163 2026] [security2:error] [pid 3069160:tid 3069160] [client 216.73.216.199:62921] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/systemd/system/systemd-udev-trigger.service.d/systemd-udev-trigger-no-reload.conf"] [unique_id "ams32uAFnaPgVP-R_A3rzAAAABY"]
[Thu Jul 30 12:39:06.441464 2026] [security2:error] [pid 3069160:tid 3069160] [client 216.73.216.199:62921] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/systemd/system/systemd-udev-trigger.service.d/systemd-udev-trigger-no-reload.conf"] [unique_id "ams32uAFnaPgVP-R_A3rzAAAABY"]
[Thu Jul 30 12:39:06.441715 2026] [security2:error] [pid 3069160:tid 3069160] [client 216.73.216.199:62921] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/systemd/system/systemd-udev-trigger.service.d/systemd-udev-trigger-no-reload.conf"] [unique_id "ams32uAFnaPgVP-R_A3rzAAAABY"]
[Thu Jul 30 12:39:06.790520 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.11:31140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:06.791174 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.11:31140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:06.828838 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.58:62598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:06.829502 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.58:62598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:07.000909 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.56:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:07.001569 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.56:27090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:07.131138 2026] [security2:error] [pid 3102099:tid 3102099] [client 47.77.228.207:30017] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams325po1Svnf_xVthKTaQAAADM"]
[Thu Jul 30 12:39:07.131191 2026] [security2:error] [pid 3102099:tid 3102099] [client 47.77.228.207:30017] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams325po1Svnf_xVthKTaQAAADM"]
[Thu Jul 30 12:39:07.131443 2026] [security2:error] [pid 3102099:tid 3102099] [client 47.77.228.207:30017] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams325po1Svnf_xVthKTaQAAADM"]
[Thu Jul 30 12:39:07.258821 2026] [security2:error] [pid 3090618:tid 3090618] [client 156.59.198.135:47048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams32zqpBC0FwvDMksETFAAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:07.346318 2026] [security2:error] [pid 3069160:tid 3069160] [client 216.73.216.199:62921] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-latency-performance-cgv1/tuned.conf"] [unique_id "ams32-AFnaPgVP-R_A3rzwAAABY"]
[Thu Jul 30 12:39:07.346590 2026] [security2:error] [pid 3069160:tid 3069160] [client 216.73.216.199:62921] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-latency-performance-cgv1/tuned.conf"] [unique_id "ams32-AFnaPgVP-R_A3rzwAAABY"]
[Thu Jul 30 12:39:07.346839 2026] [security2:error] [pid 3069160:tid 3069160] [client 216.73.216.199:62921] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-latency-performance-cgv1/tuned.conf"] [unique_id "ams32-AFnaPgVP-R_A3rzwAAABY"]
[Thu Jul 30 12:39:07.889593 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.17:40890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:07.890225 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.17:40890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:07.949862 2026] [ssl:error] [pid 3069160:tid 3069160] (70014)End of file found: [client 216.73.216.199:62921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:08.055698 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.48:43498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:08.056367 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.48:43498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:08.346275 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:63300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:08.346307 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:08.402258 2026] [ssl:error] [pid 3102200:tid 3102200] (EAI 2)Name or service not known: [client 144.76.19.72:63308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:08.402288 2026] [ssl:error] [pid 3102200:tid 3102200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:08.490446 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.23:26996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:08.491082 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.23:26996] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:08.664828 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.12:49946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:08.665458 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.12:49946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:08.738987 2026] [security2:error] [pid 3093641:tid 3093641] [client 156.59.198.135:55044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams33JB1VhJVvf-ofVc3BgAAACA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:09.320181 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.48:63774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:09.320800 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.48:63774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:09.750204 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.38:62066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:09.750830 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.38:62066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:09.792351 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.59:50120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:09.792976 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.59:50120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:10.222957 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.40:62574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:10.223592 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.40:62574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:10.252274 2026] [security2:error] [pid 3102199:tid 3102199] [client 156.59.198.135:25550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams33ra6yYWqMkuUuFudQwAAADU"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:10.300613 2026] [authz_core:error] [pid 3101835:tid 3101835] [client 57.141.0.54:41594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:10.301242 2026] [authz_core:error] [pid 3101835:tid 3101835] [client 57.141.0.54:41594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:10.334439 2026] [lsapi:warn] [pid 3096812:tid 3096812] [client 122.180.21.11:51349] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:39:10.604505 2026] [core:error] [pid 3101868:tid 3101868] [client 66.249.66.68:36656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:10.604529 2026] [core:error] [pid 3101868:tid 3101868] [client 66.249.66.68:36656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:10.804711 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.36:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:10.805333 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.36:42368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:10.957484 2026] [security2:error] [pid 3098797:tid 3098797] [client 47.77.228.207:48379] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams33nYs6YNH84K0b6DJWQAAAA8"]
[Thu Jul 30 12:39:10.957540 2026] [security2:error] [pid 3098797:tid 3098797] [client 47.77.228.207:48379] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams33nYs6YNH84K0b6DJWQAAAA8"]
[Thu Jul 30 12:39:10.957763 2026] [security2:error] [pid 3098797:tid 3098797] [client 47.77.228.207:48379] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams33nYs6YNH84K0b6DJWQAAAA8"]
[Thu Jul 30 12:39:11.274045 2026] [ssl:error] [pid 3090618:tid 3090618] (70014)End of file found: [client 216.73.216.199:32744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:11.276775 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.2:29762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:11.277395 2026] [authz_core:error] [pid 3096742:tid 3096742] [client 57.141.0.2:29762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:11.354707 2026] [access_compat:error] [pid 3101835:tid 3101835] [client 125.176.202.122:59676] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:39:11.412563 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.25:61290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:11.413197 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.25:61290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:11.461560 2026] [ssl:error] [pid 3102199:tid 3102199] (EAI 2)Name or service not known: [client 144.76.19.72:59340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:11.461597 2026] [ssl:error] [pid 3102199:tid 3102199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:11.503590 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.51:20352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:11.504214 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.51:20352] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:11.516559 2026] [ssl:error] [pid 3098797:tid 3098797] (EAI 2)Name or service not known: [client 144.76.19.72:59350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:11.516589 2026] [ssl:error] [pid 3098797:tid 3098797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:11.739396 2026] [security2:error] [pid 3099221:tid 3099221] [client 156.59.198.136:37488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams334Vn_MFHnTReTkxvAAAAABQ"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:12.374340 2026] [security2:error] [pid 3097447:tid 3097447] [client 131.221.13.51:11394] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams34AwdUtr6PLa6YOMkXQAAABw"]
[Thu Jul 30 12:39:12.374392 2026] [security2:error] [pid 3097447:tid 3097447] [client 131.221.13.51:11394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams34AwdUtr6PLa6YOMkXQAAABw"]
[Thu Jul 30 12:39:12.374705 2026] [security2:error] [pid 3097447:tid 3097447] [client 131.221.13.51:11394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams34AwdUtr6PLa6YOMkXQAAABw"]
[Thu Jul 30 12:39:12.458881 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.56:52390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:12.459515 2026] [authz_core:error] [pid 3098797:tid 3098797] [client 57.141.0.56:52390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:12.477552 2026] [ssl:error] [pid 3088986:tid 3088986] (70014)End of file found: [client 216.73.216.199:3758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:12.720785 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.10:25500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:12.721418 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.10:25500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:12.756459 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.15:23640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:12.757095 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.15:23640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:13.021982 2026] [security2:error] [pid 3099221:tid 3099221] [client 156.59.198.136:64624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams34YVn_MFHnTReTkxvAQAAABQ"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:13.749777 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.6:52494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:13.750410 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.6:52494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:13.929184 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.31:46926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:13.929805 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.31:46926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:13.977774 2026] [core:error] [pid 3102099:tid 3102099] (13)Permission denied: [client 216.73.216.199:31399] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/aliases
[Thu Jul 30 12:39:14.191287 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.1:64620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:14.191915 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.1:64620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:14.334007 2026] [security2:error] [pid 3088144:tid 3088144] [client 43.130.110.15:64159] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams34gsn8dZRT0BASB5pCwAAAAk"]
[Thu Jul 30 12:39:14.334057 2026] [security2:error] [pid 3088144:tid 3088144] [client 43.130.110.15:64159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams34gsn8dZRT0BASB5pCwAAAAk"]
[Thu Jul 30 12:39:14.334330 2026] [security2:error] [pid 3088144:tid 3088144] [client 43.130.110.15:64159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams34gsn8dZRT0BASB5pCwAAAAk"]
[Thu Jul 30 12:39:14.366279 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.68:33480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:14.366906 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.68:33480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:14.581795 2026] [ssl:error] [pid 3102099:tid 3102099] (70014)End of file found: [client 216.73.216.199:31399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:14.607742 2026] [ssl:error] [pid 3100942:tid 3100942] (EAI 2)Name or service not known: [client 144.76.19.72:59360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:14.607784 2026] [ssl:error] [pid 3100942:tid 3100942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:14.644026 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.29:52248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:14.644665 2026] [authz_core:error] [pid 3100377:tid 3100377] [client 57.141.0.29:52248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:14.662699 2026] [ssl:error] [pid 3100317:tid 3100317] (EAI 2)Name or service not known: [client 144.76.19.72:59362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:14.662729 2026] [ssl:error] [pid 3100317:tid 3100317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:14.808245 2026] [authz_core:error] [pid 3102201:tid 3102201] [client 57.141.0.11:31790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:14.808874 2026] [authz_core:error] [pid 3102201:tid 3102201] [client 57.141.0.11:31790] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:15.078716 2026] [security2:error] [pid 3090843:tid 3090843] [client 51.68.107.146:30755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "vain.band"] [uri "/robots.txt"] [unique_id "ams3422GxN977hVBJdJBlQAAADQ"]
[Thu Jul 30 12:39:15.171214 2026] [security2:error] [pid 3100416:tid 3100416] [client 51.68.107.146:18791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "vain.band"] [uri "/"] [unique_id "ams346HbcbuFxsfZYLtStgAAACg"]
[Thu Jul 30 12:39:15.251757 2026] [security2:error] [pid 3097397:tid 3097397] [client 156.59.198.136:25024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3489UkRbrj5uPocc8GwAAAAU"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:15.258262 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.6:52502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:15.258880 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.6:52502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:15.355197 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.33:33306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:15.355819 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.33:33306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:15.361600 2026] [security2:error] [pid 3093749:tid 3093749] [client 51.68.107.146:35355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "vain.band"] [uri "/robots.txt"] [unique_id "ams34_jpY7cYgsiqcJcquQAAACk"]
[Thu Jul 30 12:39:15.650180 2026] [security2:error] [pid 3098734:tid 3098734] [client 85.208.96.204:20096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.1425.html"] [unique_id "ams34zQTspO8vz2JftH92QAAAAE"]
[Thu Jul 30 12:39:15.962647 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.20:48398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:15.963318 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.20:48398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:16.914053 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.19:22638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:16.914695 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.19:22638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:16.943355 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.22:43056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:16.943981 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.22:43056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:17.079457 2026] [security2:error] [pid 3087847:tid 3087847] [client 43.130.110.15:64611] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams35REKPgz2R8MqG0aYJAAAAAc"]
[Thu Jul 30 12:39:17.079513 2026] [security2:error] [pid 3087847:tid 3087847] [client 43.130.110.15:64611] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams35REKPgz2R8MqG0aYJAAAAAc"]
[Thu Jul 30 12:39:17.079760 2026] [security2:error] [pid 3087847:tid 3087847] [client 43.130.110.15:64611] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams35REKPgz2R8MqG0aYJAAAAAc"]
[Thu Jul 30 12:39:17.224757 2026] [security2:error] [pid 3098797:tid 3098797] [client 156.59.198.136:37102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams35XYs6YNH84K0b6DJXAAAAA8"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:17.303091 2026] [core:error] [pid 3098133:tid 3098133] (13)Permission denied: [client 216.73.216.199:20637] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS0/flags
[Thu Jul 30 12:39:17.346326 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.60:62620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:17.346949 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.60:62620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:17.575408 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.31:20562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:17.576035 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.31:20562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:17.655321 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 178.62.82.141:38900] AH01630: client denied by server configuration: /home/eznoyveg/public_html/Zfiles/error_log
[Thu Jul 30 12:39:17.755255 2026] [ssl:error] [pid 3099223:tid 3099223] (EAI 2)Name or service not known: [client 144.76.19.72:59378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:17.755297 2026] [ssl:error] [pid 3099223:tid 3099223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:17.808413 2026] [ssl:error] [pid 3088986:tid 3088986] (EAI 2)Name or service not known: [client 144.76.19.72:59390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:17.808441 2026] [ssl:error] [pid 3088986:tid 3088986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:17.822710 2026] [cgi:error] [pid 3080545:tid 3080545] [client 178.62.82.141:39036] AH02812: stderr from /home/eznoyveg/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:39:17.912838 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.16:41416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:17.913465 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.16:41416] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:17.915860 2026] [access_compat:error] [pid 3090618:tid 3090618] [client 125.176.202.122:59887] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 12:39:18.000107 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.68:41892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:18.000857 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.68:41892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:18.211398 2026] [ssl:error] [pid 3098133:tid 3098133] (70014)End of file found: [client 216.73.216.199:20637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:18.218149 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.65:49184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:18.218864 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.65:49184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:18.391342 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.9:30366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:18.391963 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.9:30366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:18.534447 2026] [security2:error] [pid 3099223:tid 3099223] [client 156.59.198.135:26994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams35qxL0Bqq8SYLUfzTpAAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:19.176219 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.65:49190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:19.176854 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.65:49190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:19.415960 2026] [ssl:error] [pid 3101870:tid 3101870] (70014)End of file found: [client 216.73.216.199:28259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:19.436758 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.66:53942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:19.437438 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.66:53942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:19.616650 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.31:20588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:19.617274 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.31:20588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:19.701354 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.27:33332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:19.701981 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.27:33332] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:19.770662 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.44:37052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:19.771283 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.44:37052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:19.902604 2026] [ssl:error] [pid 3099223:tid 3099223] (70014)End of file found: [client 216.73.216.199:21285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:20.060806 2026] [security2:error] [pid 3101631:tid 3101631] [client 156.59.198.136:19416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams36CkITwoKWdeCDp1WewAAABI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:20.332099 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.40:44330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:20.332727 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.40:44330] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:20.698851 2026] [core:error] [pid 3081293:tid 3081293] (13)Permission denied: [client 216.73.216.199:1510] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS3/flags
[Thu Jul 30 12:39:20.773620 2026] [lsapi:warn] [pid 3099834:tid 3099834] [client 122.180.21.11:51974] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:39:20.807809 2026] [ssl:error] [pid 3081293:tid 3081293] (70014)End of file found: [client 216.73.216.199:1510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:20.865886 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:43466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:20.865912 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:20.921849 2026] [ssl:error] [pid 3102098:tid 3102098] (EAI 2)Name or service not known: [client 144.76.19.72:43480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:20.921883 2026] [ssl:error] [pid 3102098:tid 3102098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:21.194517 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.43:51992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:21.195166 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.43:51992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:21.230301 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.52:35400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:21.230928 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.52:35400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:21.294742 2026] [ssl:error] [pid 3097445:tid 3097445] (70014)End of file found: [client 216.73.216.199:45986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:21.530249 2026] [security2:error] [pid 3100416:tid 3100416] [client 156.59.198.135:15296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams36aHbcbuFxsfZYLtSuwAAACg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:21.580514 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.21:23328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:21.581145 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.21:23328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:21.602305 2026] [ssl:error] [pid 3097447:tid 3097447] (70014)End of file found: [client 216.73.216.199:35139] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:21.682949 2026] [security2:error] [pid 3102098:tid 3102098] [client 51.68.236.59:28731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "ams36avS4N6V3zOgYy8UKgAAADI"]
[Thu Jul 30 12:39:21.988908 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.3:37716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:21.989546 2026] [authz_core:error] [pid 3098799:tid 3098799] [client 57.141.0.3:37716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:22.065023 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.26:45390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:22.065660 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.26:45390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:22.840382 2026] [security2:error] [pid 3098799:tid 3098799] [client 156.59.198.136:20460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams36ikKp-RuYHxqyjioZAAAABE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:22.864054 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.37:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:22.864785 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.37:31746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:23.229213 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.67:47978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:23.229862 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.67:47978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:23.430729 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.55:33728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:23.431355 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.55:33728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:23.775018 2026] [authz_core:error] [pid 3101835:tid 3101835] [client 57.141.0.65:61866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:23.775654 2026] [authz_core:error] [pid 3101835:tid 3101835] [client 57.141.0.65:61866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:23.811370 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.58:38770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:23.812014 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.58:38770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:24.041152 2026] [ssl:error] [pid 3102201:tid 3102201] (EAI 2)Name or service not known: [client 144.76.19.72:43492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:24.041189 2026] [ssl:error] [pid 3102201:tid 3102201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:24.097508 2026] [ssl:error] [pid 3101868:tid 3101868] (EAI 2)Name or service not known: [client 144.76.19.72:43498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:24.097543 2026] [ssl:error] [pid 3101868:tid 3101868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:24.162850 2026] [security2:error] [pid 3080545:tid 3080545] [client 156.59.198.135:51928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams37JsOke5wut2VWZCcQQAAAA4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:24.434133 2026] [security2:error] [pid 3098798:tid 3098798] [client 185.191.171.8:52286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/mobile-homes-for-rent-in-beaufort-county,-nc"] [unique_id "ams37HwHV8lHrHH_kFfM4AAAABA"]
[Thu Jul 30 12:39:24.653682 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.16:41420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:24.654307 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.16:41420] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:24.818731 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.50:44994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:24.819364 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.50:44994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:24.897564 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.70:47176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:24.898192 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.70:47176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:24.942536 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.10:36848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:24.943159 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.10:36848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:25.091028 2026] [core:error] [pid 3100416:tid 3100416] [client 66.249.64.170:64199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:25.091062 2026] [core:error] [pid 3100416:tid 3100416] [client 66.249.64.170:64199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:25.660880 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.67:47992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:25.661524 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.67:47992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:25.812213 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 169.58.39.192:59081] AH01630: client denied by server configuration: /home/blowha/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:39:26.160736 2026] [security2:error] [pid 3075978:tid 3075978] [client 156.59.198.135:64860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams37jbE97VlTlQYp8NutQAAABc"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:26.165238 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.13:37592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:26.165922 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.13:37592] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:26.213116 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.29:65498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:26.213738 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.29:65498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:26.225840 2026] [ssl:error] [pid 3098133:tid 3098133] (70014)End of file found: [client 216.73.216.199:61333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:26.310687 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.18:54502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:26.311312 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.18:54502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:26.717040 2026] [ssl:error] [pid 3099188:tid 3099188] (70014)End of file found: [client 216.73.216.199:9570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:26.726411 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.46:40036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:26.727033 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.46:40036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:27.027565 2026] [ssl:error] [pid 3090618:tid 3090618] (70014)End of file found: [client 216.73.216.199:28015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:27.171365 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:43504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:27.171401 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:27.224240 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:43518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:27.224267 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:27.248110 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.64:41490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:27.248736 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.64:41490] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:27.330252 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.11:21488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:27.330882 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.11:21488] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:27.682372 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.7:21516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:27.683001 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.7:21516] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:27.876677 2026] [security2:error] [pid 3102098:tid 3102098] [client 85.208.96.210:14954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg447/"] [unique_id "ams376vS4N6V3zOgYy8ULQAAADI"]
[Thu Jul 30 12:39:27.968075 2026] [security2:error] [pid 3088986:tid 3088986] [client 156.59.198.136:29924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams375Oq7xGazC7L_mEQqwAAACI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:28.458038 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.64:41498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:28.458670 2026] [authz_core:error] [pid 3090843:tid 3090843] [client 57.141.0.64:41498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:28.733077 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.4:62580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:28.733706 2026] [authz_core:error] [pid 3101870:tid 3101870] [client 57.141.0.4:62580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:28.773997 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.61:44430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:28.774635 2026] [authz_core:error] [pid 3096812:tid 3096812] [client 57.141.0.61:44430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:29.262308 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 169.58.39.192:60440] AH01630: client denied by server configuration: /home/blowha/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:39:29.470537 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.63:51788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:29.471165 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.63:51788] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:29.514859 2026] [security2:error] [pid 3100415:tid 3100415] [client 156.59.198.135:20550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams38X1tj2k9F5sJ8p4U2QAAACY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:29.546020 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.11:53800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:29.546659 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.11:53800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:29.637347 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.67:31026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:29.637978 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.67:31026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:30.226786 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.51:50950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:30.227412 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.51:50950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:30.281207 2026] [ssl:error] [pid 3096888:tid 3096888] (EAI 2)Name or service not known: [client 144.76.19.72:41158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:30.281236 2026] [ssl:error] [pid 3096888:tid 3096888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:30.334204 2026] [ssl:error] [pid 3101834:tid 3101834] (EAI 2)Name or service not known: [client 144.76.19.72:41164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:30.334237 2026] [ssl:error] [pid 3101834:tid 3101834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:30.462114 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.45:27886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:30.462787 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.45:27886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:30.684167 2026] [authz_core:error] [pid 3101869:tid 3101869] [client 57.141.0.52:32532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:30.684804 2026] [authz_core:error] [pid 3101869:tid 3101869] [client 57.141.0.52:32532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:30.807293 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.36:45026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:30.807917 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.36:45026] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:31.064418 2026] [security2:error] [pid 3096888:tid 3096888] [client 156.59.198.135:52812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3829nS8J9a8C2jGBcPgAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:31.193213 2026] [lsapi:warn] [pid 3100415:tid 3100415] [client 122.180.21.11:52594] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:39:31.539166 2026] [ssl:error] [pid 3101869:tid 3101869] (70014)End of file found: [client 216.73.216.199:61947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:31.570246 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.63:51804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:31.570922 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.63:51804] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:31.789078 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.45:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:31.789708 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.45:27898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:32.159631 2026] [ssl:error] [pid 3100377:tid 3100377] (70014)End of file found: [client 216.73.216.199:16072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:32.414522 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.62:59570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:32.415158 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.62:59570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:32.429214 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.50:31386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:32.429838 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.50:31386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:32.564214 2026] [security2:error] [pid 3099188:tid 3099188] [client 156.59.198.135:26086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams39OvqOagaDuNCD6HQPgAAABM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:32.701754 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.66:57356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:32.702377 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.66:57356] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:32.844427 2026] [core:error] [pid 3099222:tid 3099222] [client 57.141.0.11:53802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:32.844449 2026] [core:error] [pid 3099222:tid 3099222] [client 57.141.0.11:53802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:32.864398 2026] [ssl:error] [pid 3095196:tid 3095196] (70014)End of file found: [client 216.73.216.199:12727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:33.390481 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:41166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:33.390519 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:33.443309 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:41180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:33.443339 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:33.475218 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.48:58986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:33.475837 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.48:58986] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:33.738968 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.51:50966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:33.739602 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.51:50966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:34.137180 2026] [security2:error] [pid 3096888:tid 3096888] [client 156.59.198.136:34970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams39m9nS8J9a8C2jGBcQQAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:34.574328 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.49:41622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:34.574971 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.49:41622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:34.715023 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.63:51816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:34.715653 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.63:51816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:34.723024 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.31:64138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:34.723674 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.31:64138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:34.994262 2026] [core:error] [pid 3102202:tid 3102202] [client 66.249.66.39:37140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:34.994289 2026] [core:error] [pid 3102202:tid 3102202] [client 66.249.66.39:37140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:35.038239 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.61:49658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:35.038869 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.61:49658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:35.685411 2026] [security2:error] [pid 3098133:tid 3098133] [client 156.59.198.135:57192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams397KIr-IMeJLFjAGkDAAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:35.716486 2026] [authz_core:error] [pid 3103942:tid 3103942] [client 57.141.0.45:27904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:35.717153 2026] [authz_core:error] [pid 3103942:tid 3103942] [client 57.141.0.45:27904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:35.729866 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.51:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:35.730522 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.51:53596] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:36.500579 2026] [ssl:error] [pid 3102199:tid 3102199] (EAI 2)Name or service not known: [client 144.76.19.72:41188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:36.500612 2026] [ssl:error] [pid 3102199:tid 3102199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:36.553381 2026] [ssl:error] [pid 3096812:tid 3096812] (EAI 2)Name or service not known: [client 144.76.19.72:41192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:36.553418 2026] [ssl:error] [pid 3096812:tid 3096812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:36.729207 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.71:38792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:36.729836 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.71:38792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:36.736618 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.28:56328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:36.737255 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.28:56328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:36.796293 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.69:28062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:36.796938 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.69:28062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:36.957944 2026] [ssl:error] [pid 3080545:tid 3080545] (70014)End of file found: [client 216.73.216.199:53427] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:36.985192 2026] [security2:error] [pid 3098133:tid 3098133] [client 156.59.198.136:45292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3-LKIr-IMeJLFjAGkDQAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:37.169676 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.58:32562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:37.170300 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.58:32562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:37.969659 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.16:47554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:37.970285 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.16:47554] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:38.020104 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.62:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:38.020725 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.62:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:38.265803 2026] [core:error] [pid 3099834:tid 3099834] [client 66.249.66.40:44316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:38.265830 2026] [core:error] [pid 3099834:tid 3099834] [client 66.249.66.40:44316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:38.277469 2026] [ssl:error] [pid 3096812:tid 3096812] (70014)End of file found: [client 216.73.216.199:55873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:38.290902 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.8:63882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:38.291536 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.8:63882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:38.542663 2026] [security2:error] [pid 3098133:tid 3098133] [client 156.59.198.135:30816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3-rKIr-IMeJLFjAGkDgAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:38.578632 2026] [ssl:error] [pid 3103941:tid 3103941] (70014)End of file found: [client 216.73.216.199:1511] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:38.713941 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.63:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:38.714579 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.63:22900] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:38.854200 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.70:27962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:38.854821 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.70:27962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:38.994784 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.66:57362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:38.995409 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.66:57362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:39.606918 2026] [ssl:error] [pid 3099834:tid 3099834] (EAI 2)Name or service not known: [client 144.76.19.72:64682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:39.606955 2026] [ssl:error] [pid 3099834:tid 3099834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:39.662830 2026] [ssl:error] [pid 3096516:tid 3096516] (EAI 2)Name or service not known: [client 144.76.19.72:64696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:39.662857 2026] [ssl:error] [pid 3096516:tid 3096516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:39.666565 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.70:27978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:39.667187 2026] [authz_core:error] [pid 3100317:tid 3100317] [client 57.141.0.70:27978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:39.832545 2026] [security2:error] [pid 3098798:tid 3098798] [client 156.59.198.135:10254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3-3wHV8lHrHH_kFfM5QAAABA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:40.019674 2026] [security2:error] [pid 3098133:tid 3098133] [client 43.159.36.180:60044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.co.uk"] [uri "/"] [unique_id "ams3_LKIr-IMeJLFjAGkDwAAAAA"]
[Thu Jul 30 12:39:40.041430 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.22:34508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:40.042058 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.22:34508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:40.265514 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.6:24010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:40.266165 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.6:24010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:40.877786 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.17:51810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:40.878414 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.17:51810] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:40.909119 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.52:30350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:40.909748 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.52:30350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:41.166254 2026] [security2:error] [pid 3096888:tid 3096888] [client 156.59.198.135:28514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3_W9nS8J9a8C2jGBcQwAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:41.436470 2026] [security2:error] [pid 3101834:tid 3101834] [client 43.159.36.180:58842] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "ams3_RXXMkOI2FdQZFujhgAAACc"], referer: http://www.spampmusic.co.uk
[Thu Jul 30 12:39:41.554982 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.49:49016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:41.555626 2026] [authz_core:error] [pid 3069160:tid 3069160] [client 57.141.0.49:49016] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:41.831779 2026] [lsapi:warn] [pid 3098734:tid 3098734] [client 122.180.21.11:53223] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:39:42.086452 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.64:23774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:42.087521 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.64:23774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:42.375909 2026] [ssl:error] [pid 3096516:tid 3096516] (70014)End of file found: [client 216.73.216.199:52783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:42.435746 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.50:28174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:42.436380 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.50:28174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:42.660399 2026] [security2:error] [pid 3101870:tid 3101870] [client 156.59.198.136:63922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams3_k8GuL0GwKk9B7xFvwAAAC4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:42.794269 2026] [ssl:error] [pid 3092477:tid 3092477] (EAI 2)Name or service not known: [client 144.76.19.72:64706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:42.794299 2026] [ssl:error] [pid 3092477:tid 3092477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:42.848760 2026] [ssl:error] [pid 3102200:tid 3102200] (EAI 2)Name or service not known: [client 144.76.19.72:64708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:42.848791 2026] [ssl:error] [pid 3102200:tid 3102200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:43.045441 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.14:44830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:43.046080 2026] [authz_core:error] [pid 3099834:tid 3099834] [client 57.141.0.14:44830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:43.488186 2026] [authz_core:error] [pid 3103942:tid 3103942] [client 57.141.0.50:28182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:43.488837 2026] [authz_core:error] [pid 3103942:tid 3103942] [client 57.141.0.50:28182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:43.602868 2026] [ssl:error] [pid 3100416:tid 3100416] (70014)End of file found: [client 216.73.216.199:55385] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:43.635636 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.64:39898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:43.636264 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.64:39898] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:43.664829 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.61:40138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:43.665473 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.61:40138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:43.685227 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.13:34632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:43.685852 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.13:34632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:43.887565 2026] [ssl:error] [pid 3097445:tid 3097445] (70014)End of file found: [client 216.73.216.199:58874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:43.905464 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.14:44840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:43.906157 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.14:44840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:44.057468 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.27:33628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:44.058127 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.27:33628] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:44.220346 2026] [security2:error] [pid 3102099:tid 3102099] [client 156.59.198.135:28378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4AJpo1Svnf_xVthKTdgAAADM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:44.809668 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.47:47320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:44.810302 2026] [authz_core:error] [pid 3092477:tid 3092477] [client 57.141.0.47:47320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:45.308615 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.49:49042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:45.309255 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.49:49042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:45.389186 2026] [ssl:error] [pid 3101871:tid 3101871] (70014)End of file found: [client 216.73.216.199:1729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:45.510760 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.56:22402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:45.511396 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.56:22402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:45.561125 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.61:40150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:45.561760 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 57.141.0.61:40150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:45.725285 2026] [security2:error] [pid 3097445:tid 3097445] [client 156.59.198.136:24536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4AfxGbFTzp5iIeC05FgAAABo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:45.886975 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.21:35494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:45.887620 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.21:35494] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:45.905399 2026] [ssl:error] [pid 3102099:tid 3102099] (EAI 2)Name or service not known: [client 144.76.19.72:64716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:45.905436 2026] [ssl:error] [pid 3102099:tid 3102099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:45.961515 2026] [ssl:error] [pid 3095196:tid 3095196] (EAI 2)Name or service not known: [client 144.76.19.72:64732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:45.961573 2026] [ssl:error] [pid 3095196:tid 3095196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:45.991421 2026] [ssl:error] [pid 3101834:tid 3101834] (70014)End of file found: [client 216.73.216.199:13392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:46.350843 2026] [security2:error] [pid 3102200:tid 3102200] [client 74.7.243.230:50340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "the-atrox-killers.net"] [uri "/"] [unique_id "ams4AicjPZN8R0-Qc7q24AAAADc"]
[Thu Jul 30 12:39:46.354505 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 148.222.185.49:55775] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:39:46.357221 2026] [authz_core:error] [pid 3084598:tid 3084598] [client 148.222.185.49:55775] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:39:46.726685 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.26:39010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:46.727340 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.26:39010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:47.132017 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.65:52298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:47.132669 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.65:52298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:47.138408 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.22:34522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:47.139019 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.22:34522] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:47.191261 2026] [ssl:error] [pid 3102202:tid 3102202] (70014)End of file found: [client 216.73.216.199:41817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:47.232138 2026] [security2:error] [pid 3098798:tid 3098798] [client 156.59.198.135:37314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4A3wHV8lHrHH_kFfM6wAAABA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:47.848265 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.16:52434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:47.848912 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.16:52434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:48.134790 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.39:44836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:48.135421 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.39:44836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:48.197981 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.56:63148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:48.198630 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.56:63148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:48.472089 2026] [core:error] [pid 3097445:tid 3097445] [client 66.249.66.195:35802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:48.472123 2026] [core:error] [pid 3097445:tid 3097445] [client 66.249.66.195:35802] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:48.518370 2026] [security2:error] [pid 3080545:tid 3080545] [client 156.59.198.136:27228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4BJsOke5wut2VWZCcSQAAAA4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:48.650436 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.48:45060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:48.651073 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.48:45060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:48.875365 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.25:43622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:48.876015 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.25:43622] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:49.421717 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.3:34236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:49.422348 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.3:34236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:49.544844 2026] [ssl:error] [pid 3098734:tid 3098734] (EAI 2)Name or service not known: [client 144.76.19.72:64746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:49.544883 2026] [ssl:error] [pid 3098734:tid 3098734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:49.610761 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:57230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:49.610796 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:49.751030 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.28:57482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:49.751681 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.28:57482] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:49.821968 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.31:46774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:49.822607 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.31:46774] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:49.904462 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.53:30170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:49.905142 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.53:30170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:49.980144 2026] [security2:error] [pid 3081197:tid 3081197] [client 156.59.198.135:26686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4BfwCixxg0899_azb6AAAABg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:50.101198 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.58:48032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:50.101824 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.58:48032] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:50.489513 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.53:30172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:50.490146 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.53:30172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:50.716120 2026] [ssl:error] [pid 3097445:tid 3097445] (70014)End of file found: [client 216.73.216.199:40734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:50.751253 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.16:52442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:50.752294 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.16:52442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:51.043697 2026] [security2:error] [pid 3102056:tid 3102056] [client 35.172.125.172:34647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2022/07/class-sets-2048x1152.jpg"] [unique_id "ams4B9Nq20V9r-faDuO2QQAAADE"]
[Thu Jul 30 12:39:51.255261 2026] [security2:error] [pid 3102098:tid 3102098] [client 85.208.96.207:23206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8124.0/prev_next,next.html"] [unique_id "ams4B6vS4N6V3zOgYy8UQAAAADI"]
[Thu Jul 30 12:39:51.276016 2026] [security2:error] [pid 3101871:tid 3101871] [client 156.59.198.135:35754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4B8Oqrs1UaFc1eCDVdgAAADA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:51.476862 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.36:60684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:51.477872 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.36:60684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:51.712326 2026] [ssl:error] [pid 3081197:tid 3081197] (70014)End of file found: [client 216.73.216.199:7967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:51.727205 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.60:23508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:51.727840 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.60:23508] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:52.290314 2026] [lsapi:warn] [pid 3097397:tid 3097397] [client 122.180.21.11:53844] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:39:52.400575 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.30:39432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:52.401197 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.30:39432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:52.518420 2026] [core:error] [pid 3095196:tid 3095196] (13)Permission denied: [client 216.73.216.199:35575] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:09/physical_node/rescan
[Thu Jul 30 12:39:52.578952 2026] [security2:error] [pid 3098798:tid 3098798] [client 156.59.198.136:62246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4CHwHV8lHrHH_kFfM7wAAABA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:52.708121 2026] [ssl:error] [pid 3088195:tid 3088195] (EAI 2)Name or service not known: [client 144.76.19.72:57234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:52.708153 2026] [ssl:error] [pid 3088195:tid 3088195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:52.755706 2026] [security2:error] [pid 3098734:tid 3098734] [client 85.208.96.197:63262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6027.0.html"] [unique_id "ams4CDQTspO8vz2JftH96wAAAAE"]
[Thu Jul 30 12:39:52.761854 2026] [ssl:error] [pid 3081293:tid 3081293] (EAI 2)Name or service not known: [client 144.76.19.72:57242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:52.761898 2026] [ssl:error] [pid 3081293:tid 3081293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:52.770091 2026] [authz_core:error] [pid 3101871:tid 3101871] [client 57.141.0.40:35282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:52.770712 2026] [authz_core:error] [pid 3101871:tid 3101871] [client 57.141.0.40:35282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:53.170273 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.51:51726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:53.170897 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.51:51726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:53.178035 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.6:30808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:53.178685 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.6:30808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:53.245415 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.20:24014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:53.246088 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.20:24014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:53.524280 2026] [ssl:error] [pid 3095196:tid 3095196] (70014)End of file found: [client 216.73.216.199:35575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:54.067263 2026] [security2:error] [pid 3102202:tid 3102202] [client 156.59.198.135:49762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4CqajUkyKbKepVU-bxQAAADo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:54.097541 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.30:39446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:54.098170 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.30:39446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:54.371822 2026] [core:error] [pid 3103941:tid 3103941] [client 57.141.0.53:30174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:54.371860 2026] [core:error] [pid 3103941:tid 3103941] [client 57.141.0.53:30174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:54.663707 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.37:30082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:54.664351 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.37:30082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:54.710234 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.38:42492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:54.710883 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.38:42492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:55.045178 2026] [security2:error] [pid 3104754:tid 3104754] [client 49.234.192.248:36248] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "ams4C04MD8SAME35PXCYUwAAAAo"]
[Thu Jul 30 12:39:55.091561 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.3:34248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:55.092206 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.3:34248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:55.100619 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.56:63156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:55.101244 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.56:63156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:55.177566 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.2:24586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:55.178204 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.2:24586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:55.628165 2026] [security2:error] [pid 3102202:tid 3102202] [client 156.59.198.135:24766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4C6ajUkyKbKepVU-bxgAAADo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:55.848565 2026] [ssl:error] [pid 3100415:tid 3100415] (EAI 2)Name or service not known: [client 144.76.19.72:57252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:55.848606 2026] [ssl:error] [pid 3100415:tid 3100415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:55.903340 2026] [ssl:error] [pid 3103941:tid 3103941] (EAI 2)Name or service not known: [client 144.76.19.72:57256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:55.903387 2026] [ssl:error] [pid 3103941:tid 3103941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:56.126771 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.50:44676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:56.127409 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.50:44676] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:56.127920 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.30:39454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:56.128569 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.30:39454] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:56.304247 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.1:25904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:56.304915 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.1:25904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:56.783847 2026] [core:error] [pid 3081293:tid 3081293] [client 57.141.0.71:31518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:56.783877 2026] [core:error] [pid 3081293:tid 3081293] [client 57.141.0.71:31518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:39:56.834900 2026] [ssl:error] [pid 3093641:tid 3093641] (70014)End of file found: [client 216.73.216.199:52106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:57.034768 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.68:30424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:57.035402 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.68:30424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:57.126337 2026] [security2:error] [pid 3103941:tid 3103941] [client 156.59.198.136:19312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4DeAG1GNOfqOmiqwAywAAACM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:57.320788 2026] [ssl:error] [pid 3079365:tid 3079365] (70014)End of file found: [client 216.73.216.199:33030] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:39:57.407640 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.3:34258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:57.408272 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.3:34258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:57.580090 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.1:25920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:57.580709 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.1:25920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:57.823565 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.13:33520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:57.824212 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.13:33520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:58.337828 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.37:30086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:58.338461 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.37:30086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:58.493907 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.68:30426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:58.494544 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.68:30426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:58.661025 2026] [security2:error] [pid 3101870:tid 3101870] [client 156.59.198.136:50732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4Dk8GuL0GwKk9B7xFwwAAAC4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:39:58.854774 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.11:62666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:58.855415 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.11:62666] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:58.962112 2026] [ssl:error] [pid 3096888:tid 3096888] (EAI 2)Name or service not known: [client 144.76.19.72:57262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:58.962142 2026] [ssl:error] [pid 3096888:tid 3096888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:59.017050 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:57270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:39:59.017116 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:39:59.080765 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.11:62678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:59.081832 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.11:62678] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:59.528200 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.21:57100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:59.528835 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.21:57100] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:39:59.547636 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.5:36220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:39:59.548255 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.5:36220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:00.172688 2026] [security2:error] [pid 3087847:tid 3087847] [client 156.59.198.136:21838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4EBEKPgz2R8MqG0aYNAAAAAc"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:00.467952 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.49:27726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:00.468593 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.49:27726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:01.238897 2026] [security2:error] [pid 3096516:tid 3096516] [client 114.119.132.171:27317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~30,18/request_format~html"] [unique_id "ams4EWtfdcKhvYLCcxwUJAAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~30,18/request_format~html
[Thu Jul 30 12:40:01.324238 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.6:30824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:01.324930 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.6:30824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:01.524198 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.2:24600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:01.525248 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.2:24600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:01.652520 2026] [ssl:error] [pid 3102202:tid 3102202] (70014)End of file found: [client 216.73.216.199:36419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:01.833585 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.61:30040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:01.834805 2026] [authz_core:error] [pid 3102199:tid 3102199] [client 57.141.0.61:30040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:01.912420 2026] [security2:error] [pid 3098734:tid 3098734] [client 156.59.198.135:38534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4ETQTspO8vz2JftH97wAAAAE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:02.075682 2026] [ssl:error] [pid 3101868:tid 3101868] (EAI 2)Name or service not known: [client 144.76.19.72:49144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:02.075715 2026] [ssl:error] [pid 3101868:tid 3101868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:02.128795 2026] [ssl:error] [pid 3096516:tid 3096516] (EAI 2)Name or service not known: [client 144.76.19.72:49156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:02.128841 2026] [ssl:error] [pid 3096516:tid 3096516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:02.146658 2026] [ssl:error] [pid 3099221:tid 3099221] (70014)End of file found: [client 216.73.216.199:33722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:02.150756 2026] [core:error] [pid 3102056:tid 3102056] [client 66.249.66.41:58175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:02.150793 2026] [core:error] [pid 3102056:tid 3102056] [client 66.249.66.41:58175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:02.277423 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.70:40242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:02.278082 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.70:40242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:02.618693 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.25:53156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:02.619343 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.25:53156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:02.667226 2026] [lsapi:warn] [pid 3087847:tid 3087847] [client 122.180.21.11:54466] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:40:02.754962 2026] [ssl:error] [pid 3101871:tid 3101871] (70014)End of file found: [client 216.73.216.199:27121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:03.044337 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.58:29518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:03.044979 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.58:29518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:03.081613 2026] [security2:error] [pid 3075978:tid 3075978] [client 114.119.132.171:27329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~30,18/request_format~html"] [unique_id "ams4EzbE97VlTlQYp8NuxwAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~30,18/request_format~html
[Thu Jul 30 12:40:03.465747 2026] [authz_core:error] [pid 3105120:tid 3105120] [client 57.141.0.19:59822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:03.466381 2026] [authz_core:error] [pid 3105120:tid 3105120] [client 57.141.0.19:59822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:03.769636 2026] [security2:error] [pid 3098734:tid 3098734] [client 156.59.198.136:16258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4EzQTspO8vz2JftH98AAAAAE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:03.794404 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.52:48594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:03.795037 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.52:48594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:03.850194 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.10:52040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:03.850894 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.10:52040] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:04.660555 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.10:52058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:04.661219 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.10:52058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:04.837202 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.56:20070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:04.837848 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.56:20070] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:04.962945 2026] [security2:error] [pid 3095196:tid 3095196] [client 186.193.62.210:54862] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4FL2-wMPmeXECdPQqVQAAABU"]
[Thu Jul 30 12:40:04.963021 2026] [security2:error] [pid 3095196:tid 3095196] [client 186.193.62.210:54862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4FL2-wMPmeXECdPQqVQAAABU"]
[Thu Jul 30 12:40:04.963024 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.56:20086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:04.963331 2026] [security2:error] [pid 3095196:tid 3095196] [client 186.193.62.210:54862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4FL2-wMPmeXECdPQqVQAAABU"]
[Thu Jul 30 12:40:04.963690 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.56:20086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:05.009513 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.9:28150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:05.010165 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.9:28150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:05.185868 2026] [ssl:error] [pid 3096516:tid 3096516] (EAI 2)Name or service not known: [client 144.76.19.72:49168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:05.185906 2026] [ssl:error] [pid 3096516:tid 3096516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:05.238517 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:49176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:05.238551 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:05.347580 2026] [security2:error] [pid 3104754:tid 3104754] [client 156.59.198.136:49942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4FU4MD8SAME35PXCYWwAAAAo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:05.661652 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.65:34086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:05.662284 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.65:34086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:06.097776 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.25:59116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:06.098433 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.25:59116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:06.261743 2026] [security2:error] [pid 3088144:tid 3088144] [client 49.51.135.144:63615] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4Fgsn8dZRT0BASB5pHgAAAAk"]
[Thu Jul 30 12:40:06.261798 2026] [security2:error] [pid 3088144:tid 3088144] [client 49.51.135.144:63615] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4Fgsn8dZRT0BASB5pHgAAAAk"]
[Thu Jul 30 12:40:06.262057 2026] [security2:error] [pid 3088144:tid 3088144] [client 49.51.135.144:63615] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4Fgsn8dZRT0BASB5pHgAAAAk"]
[Thu Jul 30 12:40:06.354656 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.24:23656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:06.355310 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.24:23656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:06.647262 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.4:30682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:06.647898 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.4:30682] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:06.848793 2026] [security2:error] [pid 3098133:tid 3098133] [client 85.208.98.29:46722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/product/E"] [unique_id "ams4FrKIr-IMeJLFjAGkFwAAAAA"]
[Thu Jul 30 12:40:06.908757 2026] [security2:error] [pid 3080545:tid 3080545] [client 156.59.198.135:62276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4FpsOke5wut2VWZCcVAAAAA4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:07.024005 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 66.249.66.33:57745] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:40:07.026733 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 66.249.66.33:57745] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:40:07.424541 2026] [security2:error] [pid 3088144:tid 3088144] [client 185.191.171.6:53450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1197.0/prev_next,next.html"] [unique_id "ams4Fwsn8dZRT0BASB5pHwAAAAk"]
[Thu Jul 30 12:40:07.537565 2026] [lsapi:warn] [pid 3097446:tid 3097446] [client 97.74.93.24:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:40:07.677130 2026] [core:error] [pid 3104754:tid 3104754] (13)Permission denied: [client 216.73.216.199:3889] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/226:0/device/resource0_wc
[Thu Jul 30 12:40:07.819090 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.9:28164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:07.819744 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.9:28164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:07.913726 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.28:38298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:07.914383 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.28:38298] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:08.054851 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.69:34336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:08.055516 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.69:34336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:08.296480 2026] [ssl:error] [pid 3081197:tid 3081197] (EAI 2)Name or service not known: [client 144.76.19.72:49190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:08.296523 2026] [ssl:error] [pid 3081197:tid 3081197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:08.316156 2026] [cgi:error] [pid 3104754:tid 3104754] [client 216.73.216.199:3889] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-Getopt-Long/examples/parsetime.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:40:08.316267 2026] [cgi:error] [pid 3104754:tid 3104754] [client 216.73.216.199:3889] End of script output before headers: parsetime.pl
[Thu Jul 30 12:40:08.349386 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:49192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:08.349413 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:08.462321 2026] [security2:error] [pid 3099221:tid 3099221] [client 156.59.198.136:50852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4GIVn_MFHnTReTkxvFgAAABQ"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:08.687963 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.51:43686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:08.688603 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.51:43686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:08.784016 2026] [ssl:error] [pid 3098133:tid 3098133] (70014)End of file found: [client 216.73.216.199:59420] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:08.793662 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.23:23934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:08.794320 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.23:23934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:08.839414 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.65:34098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:08.840046 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.65:34098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:09.076456 2026] [ssl:error] [pid 3088144:tid 3088144] (70014)End of file found: [client 216.73.216.199:37987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:09.264166 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.10:22042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:09.264797 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.10:22042] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:09.389765 2026] [ssl:error] [pid 3102098:tid 3102098] (70014)End of file found: [client 216.73.216.199:30418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:09.518191 2026] [security2:error] [pid 3097446:tid 3097446] [client 49.51.135.144:15313] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4GUyC5Ei-HyIne43fLAAAABs"]
[Thu Jul 30 12:40:09.518251 2026] [security2:error] [pid 3097446:tid 3097446] [client 49.51.135.144:15313] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4GUyC5Ei-HyIne43fLAAAABs"]
[Thu Jul 30 12:40:09.518574 2026] [security2:error] [pid 3097446:tid 3097446] [client 49.51.135.144:15313] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4GUyC5Ei-HyIne43fLAAAABs"]
[Thu Jul 30 12:40:09.827965 2026] [security2:error] [pid 3081197:tid 3081197] [client 156.59.198.136:27858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4GfwCixxg0899_azb8AAAABg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:10.124139 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.25:59122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:10.124762 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.25:59122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:10.393446 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.33:52728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:10.394084 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.33:52728] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:10.606677 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.69:43006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:10.607331 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.69:43006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:10.645370 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.1:53704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:10.646026 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.1:53704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:10.846618 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.29:62208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:10.847248 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.29:62208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:10.952946 2026] [security2:error] [pid 3099834:tid 3099834] [client 54.235.172.96:34718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2022/07/class-sets-1536x864.jpg"] [unique_id "ams4GlHuc61CLY3vVKRhYQAAACE"]
[Thu Jul 30 12:40:11.330981 2026] [security2:error] [pid 3096516:tid 3096516] [client 156.59.198.136:35918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4G2tfdcKhvYLCcxwUKgAAAAs"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:11.402865 2026] [ssl:error] [pid 3096888:tid 3096888] (EAI 2)Name or service not known: [client 144.76.19.72:44514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:11.402894 2026] [ssl:error] [pid 3096888:tid 3096888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:11.458451 2026] [ssl:error] [pid 3103817:tid 3103817] (EAI 2)Name or service not known: [client 144.76.19.72:44520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:11.458490 2026] [ssl:error] [pid 3103817:tid 3103817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:11.775226 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.44:65082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:11.775971 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.44:65082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:11.903046 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.2:23916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:11.903681 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.2:23916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:11.999734 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.44:65090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:12.000744 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.44:65090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:12.034313 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.33:56058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:12.034942 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.33:56058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:12.853630 2026] [security2:error] [pid 3097397:tid 3097397] [client 156.59.198.135:50346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4HM9UkRbrj5uPocc8kgAAAAU"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:12.932030 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.36:46642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:12.932661 2026] [authz_core:error] [pid 3098734:tid 3098734] [client 57.141.0.36:46642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:12.964227 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.3:61450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:12.964848 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.3:61450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:13.169724 2026] [lsapi:warn] [pid 3095196:tid 3095196] [client 122.180.21.11:55084] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:40:13.387917 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.63:59082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:13.388574 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.63:59082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:13.993553 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.9:33544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:13.994175 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.9:33544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:14.203310 2026] [ssl:error] [pid 3095196:tid 3095196] (70014)End of file found: [client 216.73.216.199:59779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:14.434732 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.61:58338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:14.435430 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.61:58338] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:14.511554 2026] [ssl:error] [pid 3098133:tid 3098133] (EAI 2)Name or service not known: [client 144.76.19.72:44530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:14.511586 2026] [ssl:error] [pid 3098133:tid 3098133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:14.567395 2026] [ssl:error] [pid 3101574:tid 3101574] (EAI 2)Name or service not known: [client 144.76.19.72:44542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:14.567435 2026] [ssl:error] [pid 3101574:tid 3101574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:14.699787 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.13:55096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:14.700411 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.13:55096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:14.710893 2026] [security2:error] [pid 3087847:tid 3087847] [client 156.59.198.135:40592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4HhEKPgz2R8MqG0aYPAAAAAc"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:15.110693 2026] [ssl:error] [pid 3098133:tid 3098133] (70014)End of file found: [client 216.73.216.199:25706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:15.198331 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.48:42098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:15.198981 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.48:42098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:15.307022 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.49:55860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:15.307664 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.49:55860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:15.412954 2026] [ssl:error] [pid 3088144:tid 3088144] (70014)End of file found: [client 216.73.216.199:16056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:15.880420 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.5:44458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:15.881105 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.5:44458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:16.071344 2026] [security2:error] [pid 3102098:tid 3102098] [client 156.59.198.135:26672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4IKvS4N6V3zOgYy8UmQAAADI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:16.163251 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.43:50492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:16.163879 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.43:50492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:16.481649 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.59:34966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:16.482281 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.59:34966] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:16.824082 2026] [access_compat:error] [pid 3104805:tid 3104805] [client 45.158.164.139:54024] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:40:17.006099 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.40:53328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:17.006738 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.40:53328] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:17.622890 2026] [ssl:error] [pid 3088986:tid 3088986] (EAI 2)Name or service not known: [client 144.76.19.72:44546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:17.622923 2026] [ssl:error] [pid 3088986:tid 3088986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:17.643989 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.20:49136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:17.644628 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.20:49136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:17.665537 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.53:32860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:17.666163 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.53:32860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:17.678519 2026] [ssl:error] [pid 3097446:tid 3097446] (EAI 2)Name or service not known: [client 144.76.19.72:44548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:17.678542 2026] [ssl:error] [pid 3097446:tid 3097446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:17.821250 2026] [security2:error] [pid 3103943:tid 3103943] [client 156.59.198.135:41770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4IcsK4-JKSsfPZbHlhQAAACo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:18.061171 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.52:25198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:18.061802 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.52:25198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:18.156981 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.59:34982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:18.157657 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.59:34982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:18.341280 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.27:50122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:18.341906 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.27:50122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:18.749702 2026] [security2:error] [pid 3097446:tid 3097446] [client 74.7.227.183:53866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.prosperon.co.uk"] [uri "/"] [unique_id "ams4IkyC5Ei-HyIne43fLwAAABs"]
[Thu Jul 30 12:40:18.852375 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.39:47290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:18.853023 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.39:47290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:18.975803 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.47:38308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:18.976439 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.47:38308] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:19.163566 2026] [security2:error] [pid 3103941:tid 3103941] [client 156.59.198.135:24436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4I-AG1GNOfqOmiqwA0QAAACM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:19.598055 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.26:44826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:19.598745 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.26:44826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:20.116791 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.41:59580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:20.117461 2026] [authz_core:error] [pid 3102202:tid 3102202] [client 57.141.0.41:59580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:20.321782 2026] [security2:error] [pid 3102200:tid 3102200] [client 51.68.236.68:9099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "ams4JCcjPZN8R0-Qc7q27QAAADc"]
[Thu Jul 30 12:40:20.386711 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.70:65174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:20.387361 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.70:65174] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:20.489742 2026] [security2:error] [pid 3102202:tid 3102202] [client 51.68.236.68:9823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams4JKajUkyKbKepVU-b0gAAADo"]
[Thu Jul 30 12:40:20.532846 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.39:47300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:20.533509 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.39:47300] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:20.534437 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 12:40:20.587238 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.42:35512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:20.587880 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.42:35512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:20.591481 2026] [security2:error] [pid 3096888:tid 3096888] [client 51.68.236.68:22743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "ams4JG9nS8J9a8C2jGBcUQAAADY"]
[Thu Jul 30 12:40:20.621261 2026] [security2:error] [pid 3103941:tid 3103941] [client 94.154.43.177:30266] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/.env"] [unique_id "ams4JOAG1GNOfqOmiqwA0wAAACM"]
[Thu Jul 30 12:40:20.621480 2026] [security2:error] [pid 3103941:tid 3103941] [client 94.154.43.177:30266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/.env"] [unique_id "ams4JOAG1GNOfqOmiqwA0wAAACM"]
[Thu Jul 30 12:40:20.696312 2026] [security2:error] [pid 3099834:tid 3099834] [client 156.59.198.135:38602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4JFHuc61CLY3vVKRhZAAAACE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:20.732541 2026] [ssl:error] [pid 3102200:tid 3102200] (EAI 2)Name or service not known: [client 144.76.19.72:21536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:20.732570 2026] [ssl:error] [pid 3102200:tid 3102200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:20.785340 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:21550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:20.785364 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:20.843826 2026] [ssl:error] [pid 3103881:tid 3103881] (70014)End of file found: [client 216.73.216.199:41509] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:21.063056 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 12:40:21.095744 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.39:47310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:21.096401 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.39:47310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:21.150552 2026] [security2:error] [pid 3103941:tid 3103941] [client 94.154.43.177:30266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.blackseaexpresscouk.banskoexpress.com"] [uri "/index.php"] [unique_id "ams4JOAG1GNOfqOmiqwA0wAAACM"]
[Thu Jul 30 12:40:21.270299 2026] [security2:error] [pid 3106113:tid 3106113] [client 51.68.236.68:15479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "ams4JXq5bqwz8ZziUzXGcgAAAAE"]
[Thu Jul 30 12:40:21.352423 2026] [core:error] [pid 3102200:tid 3102200] (13)Permission denied: [client 216.73.216.199:17313] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty35/subsystem/ttyS3/close_delay
[Thu Jul 30 12:40:21.420006 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.5:61038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:21.420644 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.5:61038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:21.451549 2026] [ssl:error] [pid 3102200:tid 3102200] (70014)End of file found: [client 216.73.216.199:17313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:21.707395 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 12:40:21.795108 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.38:30674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:21.795749 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.38:30674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:22.052195 2026] [ssl:error] [pid 3103941:tid 3103941] (70014)End of file found: [client 216.73.216.199:7461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:22.184222 2026] [security2:error] [pid 3099834:tid 3099834] [client 156.59.198.136:15988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4JlHuc61CLY3vVKRhZQAAACE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:22.206707 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 12:40:22.637960 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.16:43598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:22.638602 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.16:43598] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:22.793349 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.41:24608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:22.793973 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.41:24608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:22.830544 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/av.php
[Thu Jul 30 12:40:22.907363 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.38:30684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:22.907987 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.38:30684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:23.083226 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.56:23056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:23.083846 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.56:23056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:23.346685 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/av.php
[Thu Jul 30 12:40:23.347029 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.5:61044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:23.347699 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.5:61044] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:23.471261 2026] [security2:error] [pid 3099834:tid 3099834] [client 156.59.198.135:26148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4J1Huc61CLY3vVKRhZgAAACE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:23.691382 2026] [lsapi:warn] [pid 3104805:tid 3104805] [client 122.180.21.11:55706] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:40:23.846373 2026] [ssl:error] [pid 3101868:tid 3101868] (EAI 2)Name or service not known: [client 144.76.19.72:21558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:23.846404 2026] [ssl:error] [pid 3101868:tid 3101868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:23.851059 2026] [core:error] [pid 3102098:tid 3102098] [client 57.141.0.36:21744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:23.851092 2026] [core:error] [pid 3102098:tid 3102098] [client 57.141.0.36:21744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:23.924168 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:21572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:23.924212 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:24.230889 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.31:39864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:24.231572 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.31:39864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:24.290814 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.66:38912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:24.291454 2026] [authz_core:error] [pid 3097446:tid 3097446] [client 57.141.0.66:38912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:24.391716 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/xa.php
[Thu Jul 30 12:40:24.819294 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.49:40170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:24.819924 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.49:40170] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:24.898768 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/xa.php
[Thu Jul 30 12:40:24.929738 2026] [security2:error] [pid 3075978:tid 3075978] [client 185.191.171.18:43510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/one-earth-journal-impact-factor"] [unique_id "ams4KDbE97VlTlQYp8NuzwAAABc"]
[Thu Jul 30 12:40:25.011878 2026] [security2:error] [pid 3097447:tid 3097447] [client 156.59.198.136:48694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4KQwdUtr6PLa6YOMkZgAAABw"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:25.061284 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.53:32924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:25.061947 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.53:32924] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:25.109447 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.47:64668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:25.110112 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.47:64668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:25.520448 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/media.php
[Thu Jul 30 12:40:25.665530 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.32:29890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:25.666147 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.32:29890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:25.944184 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.1:58212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:25.944809 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.1:58212] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:25.990583 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.7:58890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:25.991207 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.7:58890] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:26.046786 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/media.php
[Thu Jul 30 12:40:26.350275 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.70:65190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:26.350904 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.70:65190] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:26.452028 2026] [core:error] [pid 3097446:tid 3097446] [client 66.249.66.168:37902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:26.452059 2026] [core:error] [pid 3097446:tid 3097446] [client 66.249.66.168:37902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:26.460241 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.8:47188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:26.460857 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.8:47188] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:26.564470 2026] [ssl:error] [pid 3079365:tid 3079365] (70014)End of file found: [client 216.73.216.199:58957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:26.572196 2026] [security2:error] [pid 3106318:tid 3106318] [client 156.59.198.136:29232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4Kgru6kBriIq1hMAuugAAACQ"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:26.995263 2026] [ssl:error] [pid 3099223:tid 3099223] (EAI 2)Name or service not known: [client 144.76.19.72:21576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:26.995310 2026] [ssl:error] [pid 3099223:tid 3099223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:27.049659 2026] [ssl:error] [pid 3104754:tid 3104754] (EAI 2)Name or service not known: [client 144.76.19.72:21588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:27.049700 2026] [ssl:error] [pid 3104754:tid 3104754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:27.166736 2026] [ssl:error] [pid 3099222:tid 3099222] (70014)End of file found: [client 216.73.216.199:2827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:27.245121 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.14:25566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:27.245805 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.14:25566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:27.288878 2026] [core:error] [pid 3096516:tid 3096516] [client 66.249.66.66:60013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:27.288907 2026] [core:error] [pid 3096516:tid 3096516] [client 66.249.66.66:60013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:27.659242 2026] [ssl:error] [pid 3105273:tid 3105273] (70014)End of file found: [client 216.73.216.199:17527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:27.876404 2026] [security2:error] [pid 3099223:tid 3099223] [client 156.59.198.136:50226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4K6xL0Bqq8SYLUfzUAAAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:28.012828 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.8:47196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:28.013612 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.8:47196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:28.119149 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/images.php
[Thu Jul 30 12:40:28.410205 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.69:28824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:28.410829 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.69:28824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:28.596281 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/images.php
[Thu Jul 30 12:40:28.702656 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.51:34254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:28.703368 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.51:34254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:28.760827 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.24:25506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:28.761455 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.24:25506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:29.088264 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.69:29576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:29.088945 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.69:29576] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:29.186951 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 66.249.66.33:46464] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:40:29.189640 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 66.249.66.33:46464] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:40:29.246841 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/gecko.php
[Thu Jul 30 12:40:29.266012 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.33:38144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:29.266646 2026] [authz_core:error] [pid 3087847:tid 3087847] [client 57.141.0.33:38144] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:29.277799 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.61:26934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:29.278418 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.61:26934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:29.421264 2026] [security2:error] [pid 3106594:tid 3106594] [client 156.59.198.136:64618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4LUPrDf9RapMNVh3TzgAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:29.714082 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.58:57950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:29.714714 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.58:57950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:29.805757 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/gecko.php
[Thu Jul 30 12:40:30.107700 2026] [ssl:error] [pid 3099221:tid 3099221] (EAI 2)Name or service not known: [client 144.76.19.72:29216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:30.107736 2026] [ssl:error] [pid 3099221:tid 3099221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:30.163322 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:29226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:30.163369 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:30.494156 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/82.php
[Thu Jul 30 12:40:30.580254 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.13:39336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:30.580881 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.13:39336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:30.657191 2026] [core:error] [pid 3106665:tid 3106665] [client 66.249.64.170:49944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:30.657234 2026] [core:error] [pid 3106665:tid 3106665] [client 66.249.64.170:49944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:30.953647 2026] [security2:error] [pid 3081197:tid 3081197] [client 156.59.198.135:23866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4LvwCixxg0899_azb-gAAABg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:31.370031 2026] [core:error] [pid 3103941:tid 3103941] [client 57.141.0.29:32046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:31.370061 2026] [core:error] [pid 3103941:tid 3103941] [client 57.141.0.29:32046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:31.500984 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.17:44762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:31.501627 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.17:44762] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:31.903103 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.8:47198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:31.903751 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.8:47198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:31.960753 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.17:44770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:31.961390 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.17:44770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:32.068917 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.11:37884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:32.069558 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.11:37884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:32.385580 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/82.php
[Thu Jul 30 12:40:32.423659 2026] [security2:error] [pid 3104805:tid 3104805] [client 156.59.198.135:52190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4MDyr-g9dOuarfHn3bwAAABY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:32.536625 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.22:56088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:32.537275 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.22:56088] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:32.601775 2026] [ssl:error] [pid 3106665:tid 3106665] (70014)End of file found: [client 216.73.216.199:49996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:32.849178 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.1:61178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:32.849802 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.1:61178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:32.993730 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/xstelth.php
[Thu Jul 30 12:40:33.092089 2026] [ssl:error] [pid 3106320:tid 3106320] (70014)End of file found: [client 216.73.216.199:52490] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:33.220556 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:29244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:33.220590 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:33.274890 2026] [ssl:error] [pid 3102098:tid 3102098] (EAI 2)Name or service not known: [client 144.76.19.72:29260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:33.274916 2026] [ssl:error] [pid 3102098:tid 3102098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:33.358978 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.4:58062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:33.359627 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.4:58062] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:33.502148 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/xstelth.php
[Thu Jul 30 12:40:33.666572 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.61:33708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:33.667212 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.61:33708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:33.684359 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.37:46834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:33.685443 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.37:46834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:33.804920 2026] [core:error] [pid 3105273:tid 3105273] (13)Permission denied: [client 216.73.216.199:35419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/pci_express/drivers_probe
[Thu Jul 30 12:40:33.918213 2026] [security2:error] [pid 3106594:tid 3106594] [client 156.59.198.136:33790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4MUPrDf9RapMNVh3T0QAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:34.079139 2026] [lsapi:warn] [pid 3106318:tid 3106318] [client 122.180.21.11:56322] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:40:34.103238 2026] [ssl:error] [pid 3105273:tid 3105273] (70014)End of file found: [client 216.73.216.199:35419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:34.140320 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/xp.php
[Thu Jul 30 12:40:34.143797 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.12:20290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:34.144419 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.12:20290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:34.641804 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/xp.php
[Thu Jul 30 12:40:34.650393 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.49:63792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:34.651020 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.49:63792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:34.897363 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.5:38402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:34.897999 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.5:38402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:35.577662 2026] [security2:error] [pid 3099223:tid 3099223] [client 156.59.198.135:57622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4M6xL0Bqq8SYLUfzUAgAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:35.583254 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.42:37180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:35.583872 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.42:37180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:35.644940 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.39:22684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:35.645576 2026] [authz_core:error] [pid 3098798:tid 3098798] [client 57.141.0.39:22684] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:36.066806 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.32:24912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:36.067441 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.32:24912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:36.324326 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.11:37886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:36.324951 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.11:37886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:36.331479 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:29288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:36.331512 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:36.382865 2026] [ssl:error] [pid 3099223:tid 3099223] (EAI 2)Name or service not known: [client 144.76.19.72:29290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:36.382892 2026] [ssl:error] [pid 3099223:tid 3099223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:36.911196 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/adminner.php
[Thu Jul 30 12:40:36.964902 2026] [security2:error] [pid 3106318:tid 3106318] [client 156.59.198.135:44350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4NAru6kBriIq1hMAuxAAAACQ"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:37.033026 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.3:30022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:37.033756 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.3:30022] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:37.281273 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.50:64620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:37.281905 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.50:64620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:37.328839 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.59:40926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:37.329467 2026] [authz_core:error] [pid 3102056:tid 3102056] [client 57.141.0.59:40926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:37.402788 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/adminner.php
[Thu Jul 30 12:40:37.902101 2026] [core:error] [pid 3101868:tid 3101868] (13)Permission denied: [client 216.73.216.199:64909] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory243/subsystem/uevent
[Thu Jul 30 12:40:37.965715 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.5:21560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:37.966343 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.5:21560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:38.016385 2026] [ssl:error] [pid 3101868:tid 3101868] (70014)End of file found: [client 216.73.216.199:64909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:38.031886 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/a.php
[Thu Jul 30 12:40:38.200516 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.7:50218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:38.201173 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.7:50218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:38.240717 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.48:54674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:38.241337 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.48:54674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:38.289223 2026] [security2:error] [pid 3081197:tid 3081197] [client 156.59.198.135:62418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4NvwCixxg0899_azb_AAAABg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:38.544209 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/a.php
[Thu Jul 30 12:40:38.736336 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.7:50224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:38.736963 2026] [authz_core:error] [pid 3100416:tid 3100416] [client 57.141.0.7:50224] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:39.041322 2026] [security2:error] [pid 3079365:tid 3079365] [client 101.42.46.71:52154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.fast-hosting.co.uk"] [uri "/"] [unique_id "ams4N26QgkgV_UtwPmXuBwAAAD0"]
[Thu Jul 30 12:40:39.220142 2026] [ssl:error] [pid 3099834:tid 3099834] (70014)End of file found: [client 216.73.216.199:13144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:39.437310 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:29310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:39.437352 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:39.494699 2026] [ssl:error] [pid 3100416:tid 3100416] (EAI 2)Name or service not known: [client 144.76.19.72:29326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:39.494738 2026] [ssl:error] [pid 3100416:tid 3100416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:39.623165 2026] [security2:error] [pid 3098133:tid 3098133] [client 156.59.198.136:22688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4N7KIr-IMeJLFjAGkIQAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:39.638590 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 12:40:39.843223 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.67:28318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:39.843848 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.67:28318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:40.122975 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 12:40:40.206366 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.36:64574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:40.207786 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.36:64574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:40.651222 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.26:64086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:40.651847 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.26:64086] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:40.688930 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.63:43532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:40.689569 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.63:43532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:40.735395 2026] [ssl:error] [pid 3093641:tid 3093641] (70014)End of file found: [client 216.73.216.199:59852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:40.740188 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 12:40:40.863504 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.55:65114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:40.864138 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.55:65114] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:41.017656 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.52:25162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:41.018283 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.52:25162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:41.067476 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.31:38002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:41.068126 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.31:38002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:41.162384 2026] [security2:error] [pid 3079365:tid 3079365] [client 156.59.198.135:30896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4OW6QgkgV_UtwPmXuCAAAAD0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:41.261598 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 12:40:41.496018 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.46:24880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:41.496683 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.46:24880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:41.915605 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/mac.php
[Thu Jul 30 12:40:42.058191 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.19:45272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:42.058809 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.19:45272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:42.436101 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/mac.php
[Thu Jul 30 12:40:42.552769 2026] [ssl:error] [pid 3088195:tid 3088195] (EAI 2)Name or service not known: [client 144.76.19.72:48366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:42.552795 2026] [ssl:error] [pid 3088195:tid 3088195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:42.605760 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:48382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:42.605791 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:42.670047 2026] [security2:error] [pid 3098133:tid 3098133] [client 156.59.198.136:11118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4OrKIr-IMeJLFjAGkJAAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:42.676322 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.19:45282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:42.676960 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.19:45282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:42.757875 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.58:34466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:42.758513 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.58:34466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:43.113356 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Text/Exception.php
[Thu Jul 30 12:40:43.122511 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Text/Diff.php
[Thu Jul 30 12:40:43.155846 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/ops.php
[Thu Jul 30 12:40:43.316135 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.30:35388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:43.316767 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.30:35388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:43.342356 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.48:23904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:43.343092 2026] [authz_core:error] [pid 3099223:tid 3099223] [client 57.141.0.48:23904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:43.824101 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.42:62388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:43.824724 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.42:62388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:43.974710 2026] [security2:error] [pid 3081197:tid 3081197] [client 156.59.198.136:40712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4O_wCixxg0899_azcAQAAABg"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:44.178857 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.14:34956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:44.179515 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.14:34956] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:44.344012 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.47:21992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:44.344649 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.47:21992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:44.367742 2026] [security2:error] [pid 3106320:tid 3106320] [client 74.7.242.16:58370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "pixelstopkidz.net.davidebell.com"] [uri "/"] [unique_id "ams4PF7yOIAs9GhbMuqVBgAAACU"]
[Thu Jul 30 12:40:44.415144 2026] [security2:error] [pid 3099221:tid 3099221] [client 85.208.96.208:27170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5289.0/prev_next,next.html"] [unique_id "ams4PIVn_MFHnTReTkxvJwAAABQ"]
[Thu Jul 30 12:40:44.534296 2026] [ssl:error] [pid 3088195:tid 3088195] (70014)End of file found: [client 216.73.216.199:39859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:44.602617 2026] [lsapi:warn] [pid 3097445:tid 3097445] [client 122.180.21.11:56940] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:40:44.672508 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.71:36834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:44.673154 2026] [authz_core:error] [pid 3098133:tid 3098133] [client 57.141.0.71:36834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:45.019608 2026] [ssl:error] [pid 3099221:tid 3099221] (70014)End of file found: [client 216.73.216.199:49532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:45.072737 2026] [core:error] [pid 3099834:tid 3099834] [client 57.141.0.34:20508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:45.072762 2026] [core:error] [pid 3099834:tid 3099834] [client 57.141.0.34:20508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:40:45.229713 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/ops.php
[Thu Jul 30 12:40:45.448942 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.55:60906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:45.449602 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.55:60906] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:45.473752 2026] [security2:error] [pid 3102098:tid 3102098] [client 156.59.198.135:46690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4PavS4N6V3zOgYy8UqwAAADI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:45.599369 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.51:26538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:45.600014 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.51:26538] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:45.660174 2026] [ssl:error] [pid 3096888:tid 3096888] (EAI 2)Name or service not known: [client 144.76.19.72:48398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:45.660211 2026] [ssl:error] [pid 3096888:tid 3096888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:45.712920 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:48412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:45.712958 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:45.897958 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/8.php
[Thu Jul 30 12:40:46.552415 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/8.php
[Thu Jul 30 12:40:46.595749 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.58:34478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:46.596376 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.58:34478] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:46.746521 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.63:43434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:46.747149 2026] [authz_core:error] [pid 3096516:tid 3096516] [client 57.141.0.63:43434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:46.767142 2026] [security2:error] [pid 3099223:tid 3099223] [client 156.59.198.135:21266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4PqxL0Bqq8SYLUfzUBgAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:47.011865 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.4:46342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:47.012552 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.4:46342] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:47.050133 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.69:24958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:47.050782 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.69:24958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:47.185849 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/FWAZ.php
[Thu Jul 30 12:40:47.325030 2026] [security2:error] [pid 3105120:tid 3105120] [client 85.208.96.208:27178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/01/09/what-does-ss-mean-to-the-customer/"] [unique_id "ams4P3DGGkBgT_SIJUjMywAAAB4"]
[Thu Jul 30 12:40:47.355913 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.25:22860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:47.356643 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.25:22860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:47.431948 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.16:37526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:47.432587 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.16:37526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:47.700934 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/FWAZ.php
[Thu Jul 30 12:40:47.877225 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.25:22862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:47.877848 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.25:22862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:48.067092 2026] [security2:error] [pid 3093641:tid 3093641] [client 156.59.198.136:36798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4QJB1VhJVvf-ofVc3dwAAACA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:48.310503 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.11:48802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:48.311176 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.11:48802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:48.346593 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/biufile.php
[Thu Jul 30 12:40:48.751710 2026] [ssl:error] [pid 3099188:tid 3099188] (70014)End of file found: [client 216.73.216.199:53359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:48.769205 2026] [ssl:error] [pid 3102098:tid 3102098] (EAI 2)Name or service not known: [client 144.76.19.72:48422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:48.769267 2026] [ssl:error] [pid 3102098:tid 3102098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:48.822104 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:48438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:48.822139 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:48.862616 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/biufile.php
[Thu Jul 30 12:40:48.865624 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.40:44492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:48.866256 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.40:44492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:49.332748 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.48:49612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:49.333381 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.48:49612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:49.481778 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.19:65202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:49.482404 2026] [authz_core:error] [pid 3102098:tid 3102098] [client 57.141.0.19:65202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:49.508933 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/coffexium.php
[Thu Jul 30 12:40:49.571313 2026] [security2:error] [pid 3103941:tid 3103941] [client 156.59.198.135:38058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4QeAG1GNOfqOmiqwA3gAAACM"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:49.611597 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.49:43820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:49.612228 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.49:43820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:49.623731 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.10:31856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:49.624393 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.10:31856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:49.848725 2026] [ssl:error] [pid 3106318:tid 3106318] (70014)End of file found: [client 216.73.216.199:60948] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:50.011267 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/coffexium.php
[Thu Jul 30 12:40:50.261751 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.38:29208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:50.262397 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.38:29208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:50.668320 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 12:40:50.846272 2026] [authz_core:error] [pid 3107467:tid 3107467] [client 57.141.0.51:32230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:50.846894 2026] [authz_core:error] [pid 3107467:tid 3107467] [client 57.141.0.51:32230] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:50.859024 2026] [core:error] [pid 3081293:tid 3081293] (13)Permission denied: [client 216.73.216.199:5620] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS3/closing_wait
[Thu Jul 30 12:40:50.968807 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.15:40692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:50.969460 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.15:40692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:51.156463 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 12:40:51.157556 2026] [ssl:error] [pid 3081293:tid 3081293] (70014)End of file found: [client 216.73.216.199:5620] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:51.348373 2026] [security2:error] [pid 3098133:tid 3098133] [client 156.59.198.135:18232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4Q7KIr-IMeJLFjAGkKwAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:51.700294 2026] [authz_core:error] [pid 3107467:tid 3107467] [client 57.141.0.16:23782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:51.700983 2026] [authz_core:error] [pid 3107467:tid 3107467] [client 57.141.0.16:23782] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:51.874312 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:28622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:51.874341 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:51.929516 2026] [ssl:error] [pid 3097397:tid 3097397] (EAI 2)Name or service not known: [client 144.76.19.72:28624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:51.929556 2026] [ssl:error] [pid 3097397:tid 3097397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:51.957228 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.13:62862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:51.957898 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.13:62862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:51.994112 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 169.58.39.192:56646] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:40:52.037251 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.45:38296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:52.037879 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 57.141.0.45:38296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:52.443142 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/fpwch.php
[Thu Jul 30 12:40:52.556006 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.2:46936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:52.556651 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.2:46936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:52.753991 2026] [security2:error] [pid 3107467:tid 3107467] [client 156.59.198.135:61558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4RCG-aV8Yv3CKPb06oAAAADA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:52.930651 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/fpwch.php
[Thu Jul 30 12:40:53.505982 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.9:24400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:53.506672 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.9:24400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:53.559676 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/dex.php
[Thu Jul 30 12:40:53.608768 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.3:54074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:53.608771 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.59:21994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:53.609415 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.3:54074] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:53.609415 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.59:21994] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:53.646443 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.51:32242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:53.647106 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.51:32242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:53.891219 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.32:52566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:53.891868 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.32:52566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:54.121229 2026] [ssl:error] [pid 3106666:tid 3106666] (70014)End of file found: [client 216.73.216.199:31381] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:54.236276 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.29:39388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:54.236905 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.29:39388] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:54.482782 2026] [security2:error] [pid 3107467:tid 3107467] [client 156.59.198.136:39098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4RiG-aV8Yv3CKPb06ogAAADA"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:54.542505 2026] [core:error] [pid 3102200:tid 3102200] (13)Permission denied: [client 216.73.216.199:1531] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup14/device/driver/unbind
[Thu Jul 30 12:40:54.568541 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/dex.php
[Thu Jul 30 12:40:54.598214 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.1:64392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:54.598841 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.1:64392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:55.007667 2026] [ssl:error] [pid 3100415:tid 3100415] (EAI 2)Name or service not known: [client 144.76.19.72:28640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:55.007697 2026] [ssl:error] [pid 3100415:tid 3100415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:55.059529 2026] [ssl:error] [pid 3103941:tid 3103941] (EAI 2)Name or service not known: [client 144.76.19.72:28642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:55.059556 2026] [ssl:error] [pid 3103941:tid 3103941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:55.119337 2026] [lsapi:warn] [pid 3098796:tid 3098796] [client 122.180.21.11:57567] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:40:55.194617 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 12:40:55.445160 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 169.58.39.192:57844] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:40:55.560189 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.22:58512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:55.560813 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.22:58512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:55.692113 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 12:40:55.855175 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.25:65060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:55.855801 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.25:65060] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:55.991657 2026] [security2:error] [pid 3102098:tid 3102098] [client 156.59.198.135:13452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4R6vS4N6V3zOgYy8UsQAAADI"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:56.070219 2026] [core:error] [pid 3102200:tid 3102200] (13)Permission denied: [client 216.73.216.199:1531] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/jbd2/uevent
[Thu Jul 30 12:40:56.128589 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.59:62020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:56.129220 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.59:62020] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:56.672006 2026] [ssl:error] [pid 3102200:tid 3102200] (70014)End of file found: [client 216.73.216.199:1531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:57.080841 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.22:58526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:57.081479 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.22:58526] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:57.081569 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.61:20066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:57.082183 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.61:20066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:57.171369 2026] [ssl:error] [pid 3096516:tid 3096516] (70014)End of file found: [client 216.73.216.199:47079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:57.226381 2026] [security2:error] [pid 3104804:tid 3104804] [client 43.135.133.194:57532] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "ams4SSzKK1swe1lslJqwAQAAABE"]
[Thu Jul 30 12:40:57.251618 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.64:33560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:57.252245 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.64:33560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:57.302280 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/config.json.php
[Thu Jul 30 12:40:57.488007 2026] [security2:error] [pid 3096888:tid 3096888] [client 156.59.198.135:44108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4SW9nS8J9a8C2jGBcWgAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:57.646753 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.35:31378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:57.647384 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.35:31378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:57.835271 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/config.json.php
[Thu Jul 30 12:40:57.968277 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.7:61166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:57.968910 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.7:61166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:58.087826 2026] [security2:error] [pid 3075978:tid 3075978] [client 43.135.133.194:57972] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "ams4SjbE97VlTlQYp8Nu2gAAABc"], referer: http://spamp.co.uk
[Thu Jul 30 12:40:58.089117 2026] [security2:error] [pid 3097445:tid 3097445] [client 34.239.103.190:49555] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.com"] [uri "/.env"] [unique_id "ams4SvxGbFTzp5iIeC05nQAAABo"]
[Thu Jul 30 12:40:58.089284 2026] [security2:error] [pid 3097445:tid 3097445] [client 34.239.103.190:49555] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/.env"] [unique_id "ams4SvxGbFTzp5iIeC05nQAAABo"]
[Thu Jul 30 12:40:58.134163 2026] [ssl:error] [pid 3099221:tid 3099221] (EAI 2)Name or service not known: [client 144.76.19.72:28656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:58.134203 2026] [ssl:error] [pid 3099221:tid 3099221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:58.191546 2026] [ssl:error] [pid 3103881:tid 3103881] (EAI 2)Name or service not known: [client 144.76.19.72:28670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:40:58.191584 2026] [ssl:error] [pid 3103881:tid 3103881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:40:58.329312 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.58:24968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:58.329948 2026] [authz_core:error] [pid 3093641:tid 3093641] [client 57.141.0.58:24968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:58.437439 2026] [security2:error] [pid 3097445:tid 3097445] [client 34.239.103.190:49555] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "ams4SvxGbFTzp5iIeC05nQAAABo"]
[Thu Jul 30 12:40:58.461558 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/k2.php
[Thu Jul 30 12:40:58.649156 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.47:52770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:58.649790 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 57.141.0.47:52770] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:58.652287 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.32:52574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:58.652892 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.32:52574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:58.725156 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.12:24980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:58.725779 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.12:24980] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:58.925960 2026] [security2:error] [pid 3104804:tid 3104804] [client 156.59.198.136:32346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4SizKK1swe1lslJqwAwAAABE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:40:58.955728 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/k2.php
[Thu Jul 30 12:40:59.267458 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.34:59588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:59.268099 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.34:59588] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:59.565654 2026] [ssl:error] [pid 3099221:tid 3099221] (70014)End of file found: [client 216.73.216.199:24916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:40:59.569529 2026] [security2:error] [pid 3106903:tid 3106903] [client 43.135.133.194:44826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "ams4S8Lf6cvdVdDLd0gfiwAAAAc"], referer: http://spamp.com/
[Thu Jul 30 12:40:59.580749 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.44:45168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:40:59.581372 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.44:45168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:40:59.618664 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/raw.php
[Thu Jul 30 12:41:00.116805 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/raw.php
[Thu Jul 30 12:41:00.218273 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.23:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:00.218902 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.23:31862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:00.224813 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.40:63006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:00.225436 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.40:63006] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:00.251061 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.12:24992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:00.251688 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.12:24992] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:00.431201 2026] [security2:error] [pid 3104754:tid 3104754] [client 156.59.198.135:43172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4TE4MD8SAME35PXCYvAAAAAo"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:41:00.536281 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.66:58400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:00.536908 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.66:58400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:00.655039 2026] [security2:error] [pid 3093749:tid 3093749] [client 34.239.103.190:49663] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.com"] [uri "/.env"] [unique_id "ams4TPjpY7cYgsiqcJcrCAAAACk"]
[Thu Jul 30 12:41:00.655265 2026] [security2:error] [pid 3093749:tid 3093749] [client 34.239.103.190:49663] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/.env"] [unique_id "ams4TPjpY7cYgsiqcJcrCAAAACk"]
[Thu Jul 30 12:41:00.874061 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 12:41:00.901666 2026] [security2:error] [pid 3093749:tid 3093749] [client 34.239.103.190:49663] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "ams4TPjpY7cYgsiqcJcrCAAAACk"]
[Thu Jul 30 12:41:01.237226 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.24:46868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:01.237848 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.24:46868] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:01.282582 2026] [ssl:error] [pid 3106903:tid 3106903] (EAI 2)Name or service not known: [client 144.76.19.72:47388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:01.282621 2026] [ssl:error] [pid 3106903:tid 3106903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:01.346428 2026] [ssl:error] [pid 3097397:tid 3097397] (EAI 2)Name or service not known: [client 144.76.19.72:47396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:01.346459 2026] [ssl:error] [pid 3097397:tid 3097397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:01.375622 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 12:41:01.404827 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.58:24970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:01.405569 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.58:24970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:01.856373 2026] [security2:error] [pid 3106666:tid 3106666] [client 156.59.198.135:32058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4TaZSyV5H63KBMldNqAAAAC4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:41:02.034783 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/fffm.php
[Thu Jul 30 12:41:02.154180 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.58:50650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:02.154819 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.58:50650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:02.394658 2026] [ssl:error] [pid 3106318:tid 3106318] (5)Input/output error: [client 216.73.216.199:5729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:02.586460 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.52:52746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:02.587124 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.52:52746] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:02.676198 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.20:38384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:02.676819 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.20:38384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:02.684778 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/fffm.php
[Thu Jul 30 12:41:02.883985 2026] [ssl:error] [pid 3106255:tid 3106255] (70014)End of file found: [client 216.73.216.199:1380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:03.238363 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.51:44802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:03.238987 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.51:44802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:03.488657 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.45:55706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:03.489287 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.45:55706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:03.591296 2026] [security2:error] [pid 3106666:tid 3106666] [client 156.59.198.135:53634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4T6ZSyV5H63KBMldNqQAAAC4"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:41:03.604169 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/111.php
[Thu Jul 30 12:41:03.631280 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.12:48938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:03.631905 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.12:48938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:03.667272 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.36:30012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:03.667901 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.36:30012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:03.791798 2026] [security2:error] [pid 3106594:tid 3106594] [client 34.239.103.190:49773] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "spamp.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ams4T0PrDf9RapMNVh3T3AAAACw"]
[Thu Jul 30 12:41:03.791880 2026] [security2:error] [pid 3106594:tid 3106594] [client 34.239.103.190:49773] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "spamp.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ams4T0PrDf9RapMNVh3T3AAAACw"]
[Thu Jul 30 12:41:03.792204 2026] [security2:error] [pid 3106594:tid 3106594] [client 34.239.103.190:49773] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ams4T0PrDf9RapMNVh3T3AAAACw"]
[Thu Jul 30 12:41:04.270528 2026] [security2:error] [pid 3101868:tid 3101868] [client 114.119.132.36:41777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "gangway-media.com"] [uri "/robots.txt"] [unique_id "ams4UITHfE-VXaNOiMjXjwAAACs"], referer: https://gangway-media.com/robots.txt
[Thu Jul 30 12:41:04.435383 2026] [ssl:error] [pid 3104804:tid 3104804] (EAI 2)Name or service not known: [client 144.76.19.72:47404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:04.435423 2026] [ssl:error] [pid 3104804:tid 3104804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:04.459762 2026] [core:error] [pid 3102200:tid 3102200] [client 66.249.66.169:39152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:04.459792 2026] [core:error] [pid 3102200:tid 3102200] [client 66.249.66.169:39152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:04.488678 2026] [ssl:error] [pid 3106666:tid 3106666] (EAI 2)Name or service not known: [client 144.76.19.72:47420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:04.488713 2026] [ssl:error] [pid 3106666:tid 3106666] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:04.552816 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/111.php
[Thu Jul 30 12:41:04.623274 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.22:26426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:04.623901 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.22:26426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:04.744332 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.54:22828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:04.745013 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.54:22828] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:04.863845 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.26:37740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:04.864476 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.26:37740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:04.905879 2026] [security2:error] [pid 3104804:tid 3104804] [client 156.59.198.135:37866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4UCzKK1swe1lslJqwBgAAABE"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:41:04.995911 2026] [ssl:error] [pid 3099221:tid 3099221] (70014)End of file found: [client 216.73.216.199:54716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:05.108746 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.47:24236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:05.109375 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.47:24236] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:05.184852 2026] [security2:error] [pid 3106594:tid 3106594] [client 34.239.103.190:49773] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 7 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request Containing Content, but Missing Content-Type header"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "ams4T0PrDf9RapMNVh3T3AAAACw"]
[Thu Jul 30 12:41:05.427816 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/ws.php
[Thu Jul 30 12:41:05.687057 2026] [lsapi:warn] [pid 3081197:tid 3081197] [client 122.180.21.11:58186] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:41:05.800024 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.14:22412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:05.800663 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.14:22412] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:05.942049 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/ws.php
[Thu Jul 30 12:41:06.063388 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.20:38400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:06.064016 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.20:38400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:06.084041 2026] [ssl:error] [pid 3099188:tid 3099188] (70014)End of file found: [client 216.73.216.199:10872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:06.397019 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.17:46284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:06.397666 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.17:46284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:06.549103 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.3:47844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:06.549725 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.3:47844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:06.670851 2026] [security2:error] [pid 3100415:tid 3100415] [client 156.59.198.135:24530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4Un1tj2k9F5sJ8p4VQgAAACY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:41:06.694592 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/coffee.php
[Thu Jul 30 12:41:06.939177 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.55:26930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:06.939802 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.55:26930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:07.187781 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 4.232.188.49:64444] AH01797: client denied by server configuration: /home/thepryor/public_html/coffee.php
[Thu Jul 30 12:41:07.462290 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.19:33926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:07.462920 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.19:33926] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:07.544740 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:47436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:07.544774 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:07.600548 2026] [ssl:error] [pid 3101868:tid 3101868] (EAI 2)Name or service not known: [client 144.76.19.72:47452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:07.600580 2026] [ssl:error] [pid 3101868:tid 3101868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:07.711376 2026] [ssl:error] [pid 3081293:tid 3081293] (5)Input/output error: [client 216.73.216.199:4674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:07.946645 2026] [lsapi:error] [pid 3101834:tid 3101834] [client 102.188.163.118:57436] [host www.bigbangburgerbar.co.uk] Backend fatal error: PHP Fatal error:  Allowed memory size of 33554432 bytes exhausted (tried to allocate 11211687 bytes) in /home/bigbangb/public_html/Forum/Sources/QueryString.php on line 445\n, referer: http://www.bigbangburgerbar.co.uk
[Thu Jul 30 12:41:07.949014 2026] [security2:error] [pid 3096888:tid 3096888] [client 156.59.198.136:49304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf"] [unique_id "ams4U29nS8J9a8C2jGBcXgAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/solarwinds/Orion%20Netflow%20Traffic%20Analyzer.pdf
[Thu Jul 30 12:41:08.248418 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.30:48384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:08.249040 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.30:48384] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:08.332361 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.16:29310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:08.332993 2026] [authz_core:error] [pid 3100415:tid 3100415] [client 57.141.0.16:29310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:08.424658 2026] [security2:error] [pid 3106318:tid 3106318] [client 5.62.139.210:39540] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4VAru6kBriIq1hMAu0QAAACQ"]
[Thu Jul 30 12:41:08.424707 2026] [security2:error] [pid 3106318:tid 3106318] [client 5.62.139.210:39540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4VAru6kBriIq1hMAu0QAAACQ"]
[Thu Jul 30 12:41:08.424985 2026] [security2:error] [pid 3106318:tid 3106318] [client 5.62.139.210:39540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4VAru6kBriIq1hMAu0QAAACQ"]
[Thu Jul 30 12:41:08.428465 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.15:50350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:08.429097 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.15:50350] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:08.595518 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.30:48400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:08.596145 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.30:48400] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:08.877394 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.55:26940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:08.878012 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.55:26940] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:09.079116 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.6:32014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:09.079739 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.6:32014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:09.616139 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.61:24492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:09.616768 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.61:24492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:09.922469 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.4:59038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:09.923108 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.4:59038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:10.189910 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.59:30824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:10.190553 2026] [authz_core:error] [pid 3106318:tid 3106318] [client 57.141.0.59:30824] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:10.504039 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.66:29124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:10.504667 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.66:29124] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:10.713995 2026] [ssl:error] [pid 3102200:tid 3102200] (EAI 2)Name or service not known: [client 144.76.19.72:30628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:10.714023 2026] [ssl:error] [pid 3102200:tid 3102200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:10.721556 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:7009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty62/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:41:10.726694 2026] [security2:error] [pid 3103817:tid 3103817] [client 43.173.1.57:52350] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.oliviamarjorie.com"] [uri "/"] [unique_id "ams4Vqqt9Jv6pQ1E_bXf9QAAAAM"]
[Thu Jul 30 12:41:10.741597 2026] [authz_core:error] [pid 3099221:tid 3099221] [client 20.193.250.173:53554] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 12:41:10.766828 2026] [ssl:error] [pid 3093641:tid 3093641] (EAI 2)Name or service not known: [client 144.76.19.72:30640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:10.766859 2026] [ssl:error] [pid 3093641:tid 3093641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:11.128422 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.31:32442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:11.129050 2026] [authz_core:error] [pid 3103882:tid 3103882] [client 57.141.0.31:32442] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:11.131427 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.9:21704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:11.132033 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.9:21704] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:11.418242 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.34:52802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:11.418869 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.34:52802] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:11.531623 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.23:22844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:11.532252 2026] [authz_core:error] [pid 3101868:tid 3101868] [client 57.141.0.23:22844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:11.731489 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.55:26942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:11.732119 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.55:26942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:12.211171 2026] [security2:error] [pid 3106113:tid 3106113] [client 47.128.116.14:17376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.theislipgarage.co.uk"] [uri "/blog"] [unique_id "ams4WHq5bqwz8ZziUzXG4wAAAAE"]
[Thu Jul 30 12:41:12.240048 2026] [security2:error] [pid 3088986:tid 3088986] [client 189.97.78.187:36587] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4WJOq7xGazC7L_mEQ0QAAACI"]
[Thu Jul 30 12:41:12.240116 2026] [security2:error] [pid 3088986:tid 3088986] [client 189.97.78.187:36587] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4WJOq7xGazC7L_mEQ0QAAACI"]
[Thu Jul 30 12:41:12.240353 2026] [security2:error] [pid 3088986:tid 3088986] [client 189.97.78.187:36587] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4WJOq7xGazC7L_mEQ0QAAACI"]
[Thu Jul 30 12:41:12.809890 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.62:63964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:12.810522 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.62:63964] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:13.325246 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.43:59892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:13.325877 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.43:59892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:13.559271 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.18:51050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:13.559899 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.18:51050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:13.684430 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.15:50362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:13.685053 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.15:50362] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:13.820218 2026] [ssl:error] [pid 3095196:tid 3095196] (EAI 2)Name or service not known: [client 144.76.19.72:30650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:13.820242 2026] [ssl:error] [pid 3095196:tid 3095196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:13.852485 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.41:25840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:13.853121 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.41:25840] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:13.876396 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:30662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:13.876425 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:13.924093 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.30:44636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:13.924711 2026] [authz_core:error] [pid 3079365:tid 3079365] [client 57.141.0.30:44636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:14.035782 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:7009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS2/iomem_base
[Thu Jul 30 12:41:14.360715 2026] [core:error] [pid 3106113:tid 3106113] [client 66.249.66.39:45872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:14.360747 2026] [core:error] [pid 3106113:tid 3106113] [client 66.249.66.39:45872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:14.935162 2026] [authz_core:error] [pid 3106113:tid 3106113] [client 57.141.0.1:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:14.935788 2026] [authz_core:error] [pid 3106113:tid 3106113] [client 57.141.0.1:63848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:14.938379 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:7009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty31/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:41:14.966876 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.2:31468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:14.967509 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.2:31468] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:15.160913 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.25:50984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:15.161549 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.25:50984] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:15.841451 2026] [ssl:error] [pid 3097447:tid 3097447] (70014)End of file found: [client 216.73.216.199:7009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:15.844953 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.52:47968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:15.845582 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.52:47968] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:15.900272 2026] [security2:error] [pid 3099222:tid 3099222] [client 105.99.176.110:59106] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4W2mJMDE7Ux8aWFYfrAAAABk"]
[Thu Jul 30 12:41:15.900339 2026] [security2:error] [pid 3099222:tid 3099222] [client 105.99.176.110:59106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4W2mJMDE7Ux8aWFYfrAAAABk"]
[Thu Jul 30 12:41:15.900616 2026] [security2:error] [pid 3099222:tid 3099222] [client 105.99.176.110:59106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4W2mJMDE7Ux8aWFYfrAAAABk"]
[Thu Jul 30 12:41:16.129851 2026] [lsapi:warn] [pid 3095196:tid 3095196] [client 122.180.21.11:58800] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:41:16.221575 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.47:43692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:16.222201 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.47:43692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:16.250368 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.5:21688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:16.251001 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.5:21688] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:16.299174 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.6:47604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:16.299800 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.6:47604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:16.924963 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.3:58694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:16.925597 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.3:58694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:16.932752 2026] [ssl:error] [pid 3095196:tid 3095196] (EAI 2)Name or service not known: [client 144.76.19.72:30674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:16.932771 2026] [ssl:error] [pid 3095196:tid 3095196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:16.988313 2026] [ssl:error] [pid 3096888:tid 3096888] (EAI 2)Name or service not known: [client 144.76.19.72:30684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:16.988352 2026] [ssl:error] [pid 3096888:tid 3096888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:17.175219 2026] [access_compat:error] [pid 3095196:tid 3095196] [client 45.158.164.139:44388] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:41:17.714606 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 12:41:17.799810 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.61:44218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:17.800442 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.61:44218] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:18.002694 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.19:54730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:18.003313 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.19:54730] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:18.140420 2026] [ssl:error] [pid 3106594:tid 3106594] (70014)End of file found: [client 216.73.216.199:9324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:18.200538 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 12:41:18.296837 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.40:57162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:18.297460 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.40:57162] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:18.503346 2026] [authz_core:error] [pid 3105120:tid 3105120] [client 57.141.0.20:63928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:18.503969 2026] [authz_core:error] [pid 3105120:tid 3105120] [client 57.141.0.20:63928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:18.537403 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.15:29714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:18.538028 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.15:29714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:18.845833 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 12:41:18.864052 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.35:26010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:18.864705 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.35:26010] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:18.955375 2026] [cgi:error] [pid 3096888:tid 3096888] [client 103.83.87.82:42498] AH02812: stderr from /home/sharonduggal/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:41:18.968244 2026] [cgi:error] [pid 3106665:tid 3106665] [client 103.83.87.82:42508] AH02812: stderr from /home/sharonduggal/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:41:19.078097 2026] [cgi:error] [pid 3105120:tid 3105120] [client 103.83.87.82:43976] AH02812: stderr from /home/sharonduggal/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:41:19.078100 2026] [cgi:error] [pid 3095196:tid 3095196] [client 103.83.87.82:43972] AH02812: stderr from /home/sharonduggal/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:41:19.150882 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.56:31974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:19.151517 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.56:31974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:19.328377 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 12:41:19.976432 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.24:62862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:19.977062 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.24:62862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:20.046061 2026] [ssl:error] [pid 3106665:tid 3106665] (EAI 2)Name or service not known: [client 144.76.19.72:30510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:20.046113 2026] [ssl:error] [pid 3106665:tid 3106665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:20.091375 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 12:41:20.098015 2026] [ssl:error] [pid 3105120:tid 3105120] (EAI 2)Name or service not known: [client 144.76.19.72:30512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:20.098051 2026] [ssl:error] [pid 3105120:tid 3105120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:20.240905 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.30:44642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:20.241556 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.30:44642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:20.459614 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.36:25318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:20.460403 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.36:25318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:20.674559 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 12:41:20.764776 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.17:36306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:20.765417 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.17:36306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:21.338801 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 12:41:21.694466 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.9:59372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:21.695103 2026] [authz_core:error] [pid 3095196:tid 3095196] [client 57.141.0.9:59372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:21.802270 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 12:41:21.885740 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.61:55870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:21.886372 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.61:55870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:21.920860 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.13:23718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:21.921485 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.13:23718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:22.072047 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.48:55364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:22.072680 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.48:55364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:22.106425 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.17:36310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:22.107054 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.17:36310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:22.416555 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.34:25946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:22.417301 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.34:25946] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:22.426231 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/xxx.php
[Thu Jul 30 12:41:22.573121 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.6:33892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:22.573744 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.6:33892] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:22.931286 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/xxx.php
[Thu Jul 30 12:41:23.155525 2026] [ssl:error] [pid 3100416:tid 3100416] (EAI 2)Name or service not known: [client 144.76.19.72:30528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:23.155555 2026] [ssl:error] [pid 3100416:tid 3100416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:23.208765 2026] [ssl:error] [pid 3109938:tid 3109938] (EAI 2)Name or service not known: [client 144.76.19.72:30536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:23.208803 2026] [ssl:error] [pid 3109938:tid 3109938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:23.536367 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.69:59052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:23.536996 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.69:59052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:23.556517 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 12:41:23.666853 2026] [ssl:error] [pid 3106320:tid 3106320] (70014)End of file found: [client 216.73.216.199:50027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:23.914054 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.28:32318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:23.914704 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.28:32318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:23.968298 2026] [ssl:error] [pid 3103882:tid 3103882] (70014)End of file found: [client 216.73.216.199:42297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:24.042687 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 12:41:24.109660 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.64:33916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:24.110293 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.64:33916] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:24.318527 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.17:36312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:24.319148 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.17:36312] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:24.457227 2026] [core:error] [pid 3103881:tid 3103881] (13)Permission denied: [client 216.73.216.199:45195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nft_reject/uevent
[Thu Jul 30 12:41:24.483201 2026] [security2:error] [pid 3109938:tid 3109938] [client 114.119.135.136:57387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~19/request_format~html"] [unique_id "ams4ZMdMsoeyaeUbW1IkTwAAABs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~19,102/request_format~html
[Thu Jul 30 12:41:24.588247 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.10:31242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:24.588868 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.10:31242] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:24.757487 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/234ff.php
[Thu Jul 30 12:41:25.172358 2026] [ssl:error] [pid 3103881:tid 3103881] (70014)End of file found: [client 216.73.216.199:45195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:25.264197 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/234ff.php
[Thu Jul 30 12:41:25.377280 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.3:43492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:25.377909 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.3:43492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:25.572369 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 20.193.250.173:53085] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 12:41:25.781451 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.26:43528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:25.782089 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.26:43528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:25.823264 2026] [security2:error] [pid 3080545:tid 3080545] [client 85.208.96.206:31464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/mary-berry-chocolate-chip-muffins"] [unique_id "ams4ZZsOke5wut2VWZCc9gAAAA4"]
[Thu Jul 30 12:41:25.865732 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/133.php
[Thu Jul 30 12:41:26.089964 2026] [security2:error] [pid 3081293:tid 3081293] [client 114.119.135.136:57401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~19/request_format~html"] [unique_id "ams4ZsgsicUKgH0EEO9MvAAAADk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~19,102/request_format~html
[Thu Jul 30 12:41:26.287359 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:30540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:26.287398 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:26.330976 2026] [security2:error] [pid 3080545:tid 3080545] [client 80.94.92.167:54866] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "itsupportinayrshire.com"] [uri "/.svn/wc.db"] [unique_id "ams4ZpsOke5wut2VWZCc9wAAAA4"]
[Thu Jul 30 12:41:26.331128 2026] [security2:error] [pid 3080545:tid 3080545] [client 80.94.92.167:54866] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "itsupportinayrshire.com"] [uri "/.svn/wc.db"] [unique_id "ams4ZpsOke5wut2VWZCc9wAAAA4"]
[Thu Jul 30 12:41:26.331300 2026] [security2:error] [pid 3080545:tid 3080545] [client 80.94.92.167:54866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "itsupportinayrshire.com"] [uri "/.svn/wc.db"] [unique_id "ams4ZpsOke5wut2VWZCc9wAAAA4"]
[Thu Jul 30 12:41:26.331548 2026] [security2:error] [pid 3080545:tid 3080545] [client 80.94.92.167:54866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "itsupportinayrshire.com"] [uri "/.svn/wc.db"] [unique_id "ams4ZpsOke5wut2VWZCc9wAAAA4"]
[Thu Jul 30 12:41:26.338824 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.42:47998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:26.339445 2026] [authz_core:error] [pid 3103817:tid 3103817] [client 57.141.0.42:47998] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:26.351880 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.50:35552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:26.352525 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.50:35552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:26.353241 2026] [security2:error] [pid 3106594:tid 3106594] [client 74.7.241.11:55544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/"] [unique_id "ams4ZkPrDf9RapMNVh3T6QAAACw"]
[Thu Jul 30 12:41:26.373569 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/133.php
[Thu Jul 30 12:41:26.375475 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:30544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:26.375504 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:26.463444 2026] [lsapi:warn] [pid 3109938:tid 3109938] [client 122.180.21.11:59417] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:41:26.512822 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 66.249.66.33:45295] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:41:26.515468 2026] [authz_core:error] [pid 3093749:tid 3093749] [client 66.249.66.33:45295] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:41:26.718777 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.42:48008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:26.719450 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.42:48008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:26.778696 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.31:33702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:26.779374 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.31:33702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:26.925284 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.17:36314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:26.925923 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.17:36314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:26.988109 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-ws68.php
[Thu Jul 30 12:41:27.119539 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.24:53204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:27.120221 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.24:53204] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:27.456584 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-ws68.php
[Thu Jul 30 12:41:27.481395 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.25:63912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:27.482010 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.25:63912] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:27.626431 2026] [lsapi:error] [pid 3088144:tid 3088144] [client 94.132.183.19:57076] [host www.bigbangburgerbar.co.uk] Backend fatal error: PHP Fatal error:  Allowed memory size of 33554432 bytes exhausted (tried to allocate 11211687 bytes) in /home/bigbangb/public_html/Forum/Sources/QueryString.php on line 445\n, referer: http://www.bigbangburgerbar.co.uk
[Thu Jul 30 12:41:27.894796 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.54:26382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:27.895421 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.54:26382] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:28.043846 2026] [access_compat:error] [pid 3101574:tid 3101574] [client 4.232.188.49:57618] AH01797: client denied by server configuration: /home/thepryor/public_html/mgrr.php
[Thu Jul 30 12:41:28.274325 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.20:55752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:28.274946 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.20:55752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:28.499583 2026] [access_compat:error] [pid 3109064:tid 3109064] [client 4.232.188.49:63917] AH01797: client denied by server configuration: /home/thepryor/public_html/mgrr.php
[Thu Jul 30 12:41:28.695320 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.24:53208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:28.695946 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.24:53208] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:29.025517 2026] [ssl:error] [pid 3110672:tid 3110672] (70014)End of file found: [client 216.73.216.199:15764] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:29.261842 2026] [core:error] [pid 3100415:tid 3100415] [client 57.141.0.21:24950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:29.261883 2026] [core:error] [pid 3100415:tid 3100415] [client 57.141.0.21:24950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:29.286297 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.65:48262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:29.286923 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.65:48262] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:29.431532 2026] [ssl:error] [pid 3104805:tid 3104805] (EAI 2)Name or service not known: [client 144.76.19.72:30546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:29.431572 2026] [ssl:error] [pid 3104805:tid 3104805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:29.485244 2026] [ssl:error] [pid 3103882:tid 3103882] (EAI 2)Name or service not known: [client 144.76.19.72:30556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:29.485277 2026] [ssl:error] [pid 3103882:tid 3103882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:29.546264 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.41:56700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:29.546887 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.41:56700] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:29.707318 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.29:22192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:29.707993 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.29:22192] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:29.777004 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.4:52324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:29.777640 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.4:52324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:30.652538 2026] [ssl:error] [pid 3106903:tid 3106903] (70014)End of file found: [client 216.73.216.199:52471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:30.746803 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.46:22698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:30.747432 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.46:22698] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:30.759092 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.44:31870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:30.759715 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.44:31870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:30.911419 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.39:31058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:30.912049 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.39:31058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:31.650931 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.56:23122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:31.651586 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.56:23122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:32.180342 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.62:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:32.180963 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.62:59574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:32.236873 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.36:56324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:32.237509 2026] [authz_core:error] [pid 3106666:tid 3106666] [client 57.141.0.36:56324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:32.481523 2026] [ssl:error] [pid 3103882:tid 3103882] (70014)End of file found: [client 216.73.216.199:25012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:32.538802 2026] [ssl:error] [pid 3079365:tid 3079365] (EAI 2)Name or service not known: [client 144.76.19.72:61338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:32.538833 2026] [ssl:error] [pid 3079365:tid 3079365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:32.592017 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:61344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:32.592051 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:32.810468 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.32:30408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:32.811126 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.32:30408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:33.014971 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.65:28202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:33.015612 2026] [authz_core:error] [pid 3106320:tid 3106320] [client 57.141.0.65:28202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:33.690345 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.11:25808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:33.691037 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.11:25808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:33.780753 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.19:41058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:33.781383 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.19:41058] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:33.862719 2026] [security2:error] [pid 3106320:tid 3106320] [client 94.154.43.184:27168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dream.robin64.co.uk"] [uri "/.env"] [unique_id "ams4bV7yOIAs9GhbMuqVIgAAACU"]
[Thu Jul 30 12:41:33.862931 2026] [security2:error] [pid 3106320:tid 3106320] [client 94.154.43.184:27168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dream.robin64.co.uk"] [uri "/.env"] [unique_id "ams4bV7yOIAs9GhbMuqVIgAAACU"]
[Thu Jul 30 12:41:33.863143 2026] [security2:error] [pid 3106320:tid 3106320] [client 94.154.43.184:27168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dream.robin64.co.uk"] [uri "/.env"] [unique_id "ams4bV7yOIAs9GhbMuqVIgAAACU"]
[Thu Jul 30 12:41:34.235307 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.18:20608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:34.235939 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.18:20608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:34.475244 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.36:56334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:34.475872 2026] [authz_core:error] [pid 3103941:tid 3103941] [client 57.141.0.36:56334] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:34.484046 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.24:53210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:34.484668 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.24:53210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:34.898715 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.70:31422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:34.899391 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.70:31422] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:35.509130 2026] [ssl:error] [pid 3102200:tid 3102200] (70014)End of file found: [client 216.73.216.199:28177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:35.531468 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.62:59638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:35.532106 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.62:59638] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:35.565670 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.55:52138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:35.566286 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.55:52138] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:35.645406 2026] [authz_core:error] [pid 3110672:tid 3110672] [client 57.141.0.38:23458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:35.646036 2026] [authz_core:error] [pid 3110672:tid 3110672] [client 57.141.0.38:23458] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:35.650330 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:61354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:35.650357 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:35.706514 2026] [ssl:error] [pid 3096888:tid 3096888] (EAI 2)Name or service not known: [client 144.76.19.72:61368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:35.706545 2026] [ssl:error] [pid 3096888:tid 3096888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:35.876483 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.63:29566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:35.877120 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.63:29566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:36.062224 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.31:45702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:36.062881 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.31:45702] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:36.238722 2026] [ssl:error] [pid 3106594:tid 3106594] (5)Input/output error: [client 216.73.216.199:45185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:36.707156 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.34:31200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:36.707784 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.34:31200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:36.827562 2026] [core:error] [pid 3088986:tid 3088986] [client 66.249.66.167:38988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:36.827594 2026] [core:error] [pid 3088986:tid 3088986] [client 66.249.66.167:38988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:36.939275 2026] [lsapi:warn] [pid 3100415:tid 3100415] [client 122.180.21.11:60033] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:41:37.619659 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.30:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:37.620704 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.30:41660] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:37.815321 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.50:51822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:37.815949 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 57.141.0.50:51822] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:38.070352 2026] [security2:error] [pid 3106255:tid 3106255] [client 216.73.216.199:10557] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/throughput-performance/tuned.conf"] [unique_id "ams4coyc_b8idBnMRsR_ywAAAAI"]
[Thu Jul 30 12:41:38.070671 2026] [security2:error] [pid 3106255:tid 3106255] [client 216.73.216.199:10557] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/throughput-performance/tuned.conf"] [unique_id "ams4coyc_b8idBnMRsR_ywAAAAI"]
[Thu Jul 30 12:41:38.070888 2026] [security2:error] [pid 3106255:tid 3106255] [client 216.73.216.199:10557] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/throughput-performance/tuned.conf"] [unique_id "ams4coyc_b8idBnMRsR_ywAAAAI"]
[Thu Jul 30 12:41:38.202573 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.65:28210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:38.203203 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.65:28210] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:38.372120 2026] [ssl:error] [pid 3106255:tid 3106255] (70014)End of file found: [client 216.73.216.199:10557] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:38.583139 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.3:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:38.583765 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.3:32106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:38.650101 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.15:24590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:38.650724 2026] [authz_core:error] [pid 3103943:tid 3103943] [client 57.141.0.15:24590] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:38.762884 2026] [ssl:error] [pid 3106903:tid 3106903] (EAI 2)Name or service not known: [client 144.76.19.72:61382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:38.762906 2026] [ssl:error] [pid 3106903:tid 3106903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:38.823711 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:61394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:38.823753 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:39.555109 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.20:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:39.555744 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.20:47390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:39.576185 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 20.193.250.173:64091] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:41:39.796472 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.36:56346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:39.797109 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.36:56346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:39.979605 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.69:57184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:39.980234 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.69:57184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:40.612039 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.13:48292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:40.612674 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.13:48292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:41.077912 2026] [authz_core:error] [pid 3111412:tid 3111412] [client 57.141.0.5:36794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:41.078554 2026] [authz_core:error] [pid 3111412:tid 3111412] [client 57.141.0.5:36794] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:41.366125 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.43:57712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:41.366756 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.43:57712] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:41.398906 2026] [ssl:error] [pid 3101574:tid 3101574] (70014)End of file found: [client 216.73.216.199:38750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:41.539197 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.23:41090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:41.539851 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.23:41090] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:41.876995 2026] [ssl:error] [pid 3106320:tid 3106320] (EAI 2)Name or service not known: [client 144.76.19.72:26890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:41.877043 2026] [ssl:error] [pid 3106320:tid 3106320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:41.884428 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.25:26852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:41.885051 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.25:26852] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:41.934765 2026] [ssl:error] [pid 3106665:tid 3106665] (EAI 2)Name or service not known: [client 144.76.19.72:26896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:41.934808 2026] [ssl:error] [pid 3106665:tid 3106665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:42.513108 2026] [security2:error] [pid 3106665:tid 3106665] [client 43.135.211.148:57178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-pandora.com"] [uri "/"] [unique_id "ams4drNoQcrXlEnQECOHSwAAAC0"]
[Thu Jul 30 12:41:42.795122 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.43:57722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:42.795755 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.43:57722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:42.988063 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.29:26372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:42.988694 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 57.141.0.29:26372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:43.085388 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.22:39806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:43.086009 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.22:39806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:43.252458 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 66.249.66.33:41529] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:41:43.255122 2026] [authz_core:error] [pid 3104754:tid 3104754] [client 66.249.66.33:41529] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:41:44.097083 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.16:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:44.097745 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.16:53038] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:44.141619 2026] [ssl:error] [pid 3081293:tid 3081293] (70014)End of file found: [client 216.73.216.199:28111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:44.294746 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.33:55354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:44.295378 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.33:55354] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:44.701183 2026] [authz_core:error] [pid 3106113:tid 3106113] [client 57.141.0.1:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:44.701813 2026] [authz_core:error] [pid 3106113:tid 3106113] [client 57.141.0.1:22180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:44.814513 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.58:39378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:44.815148 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.58:39378] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:44.948752 2026] [authz_core:error] [pid 3097445:tid 3097445] [client 216.73.216.82:36338] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 12:41:45.056188 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.11:20936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:45.056811 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.11:20936] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:45.233202 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.15:59348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:45.233820 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.15:59348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:45.264873 2026] [ssl:error] [pid 3109938:tid 3109938] (EAI 2)Name or service not known: [client 144.76.19.72:26900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:45.264898 2026] [ssl:error] [pid 3109938:tid 3109938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:45.322448 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:26916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:45.322480 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:45.529798 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.60:29870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:45.530420 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.60:29870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:45.587519 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.2:39336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:45.588175 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.2:39336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:45.676261 2026] [authz_core:error] [pid 3111819:tid 3111819] [client 57.141.0.28:51542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:45.676921 2026] [authz_core:error] [pid 3111819:tid 3111819] [client 57.141.0.28:51542] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:46.137264 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.24:31816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:46.137915 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.24:31816] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:46.207308 2026] [core:error] [pid 3111819:tid 3111819] [client 66.249.66.39:56073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:46.207333 2026] [core:error] [pid 3111819:tid 3111819] [client 66.249.66.39:56073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:46.399601 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.29:26386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:46.400256 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.29:26386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:46.467502 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.5:36820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:46.468131 2026] [authz_core:error] [pid 3106903:tid 3106903] [client 57.141.0.5:36820] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:46.733334 2026] [security2:error] [pid 3111819:tid 3111819] [client 185.191.171.6:27742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "ams4emfjDFk7whLZHkIYNwAAADA"]
[Thu Jul 30 12:41:47.163340 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.41:31122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:47.164039 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.41:31122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:47.453483 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.18:31348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:47.454199 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.18:31348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:47.515418 2026] [authz_core:error] [pid 3111983:tid 3111983] [client 57.141.0.69:57196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:47.516047 2026] [authz_core:error] [pid 3111983:tid 3111983] [client 57.141.0.69:57196] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:47.525300 2026] [lsapi:warn] [pid 3106903:tid 3106903] [client 122.180.21.11:60790] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:41:47.541354 2026] [security2:error] [pid 3099222:tid 3099222] [client 185.191.171.13:18220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/images.html"] [unique_id "ams4e2mJMDE7Ux8aWFYfuQAAABk"]
[Thu Jul 30 12:41:47.911926 2026] [authz_core:error] [pid 3111819:tid 3111819] [client 57.141.0.2:39346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:47.912562 2026] [authz_core:error] [pid 3111819:tid 3111819] [client 57.141.0.2:39346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:48.375814 2026] [ssl:error] [pid 3111722:tid 3111722] (70014)End of file found: [client 216.73.216.199:14483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:48.388927 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:26918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:48.388957 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:48.445582 2026] [ssl:error] [pid 3111644:tid 3111644] (EAI 2)Name or service not known: [client 144.76.19.72:26920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:48.445620 2026] [ssl:error] [pid 3111644:tid 3111644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:48.653609 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.66:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:48.654234 2026] [authz_core:error] [pid 3102200:tid 3102200] [client 57.141.0.66:46652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:48.660013 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.71:64076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:48.660708 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.71:64076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:48.664300 2026] [authz_core:error] [pid 3111644:tid 3111644] [client 57.141.0.46:63680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:48.664927 2026] [authz_core:error] [pid 3111644:tid 3111644] [client 57.141.0.46:63680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:48.748986 2026] [core:error] [pid 3107076:tid 3107076] [client 66.249.66.66:56009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:48.749018 2026] [core:error] [pid 3107076:tid 3107076] [client 66.249.66.66:56009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:49.450265 2026] [authz_core:error] [pid 3111644:tid 3111644] [client 57.141.0.34:58392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:49.450955 2026] [authz_core:error] [pid 3111644:tid 3111644] [client 57.141.0.34:58392] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:49.592310 2026] [authz_core:error] [pid 3111721:tid 3111721] [client 57.141.0.8:63426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:49.592952 2026] [authz_core:error] [pid 3111721:tid 3111721] [client 57.141.0.8:63426] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:49.652215 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.64:59714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:49.653181 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.64:59714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:49.968822 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.66:46656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:49.969448 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.66:46656] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:50.332681 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.42:46904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:50.333329 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.42:46904] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:50.781905 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.30:51178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:50.782561 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.30:51178] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:50.987861 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.37:65008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:50.988481 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.37:65008] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:51.499078 2026] [ssl:error] [pid 3106665:tid 3106665] (EAI 2)Name or service not known: [client 144.76.19.72:43202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:51.499107 2026] [ssl:error] [pid 3106665:tid 3106665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:51.554765 2026] [ssl:error] [pid 3106665:tid 3106665] (EAI 2)Name or service not known: [client 144.76.19.72:43212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:51.554791 2026] [ssl:error] [pid 3106665:tid 3106665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:51.936859 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.68:29202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:51.937499 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.68:29202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:52.165157 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.18:28054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:52.165786 2026] [authz_core:error] [pid 3081293:tid 3081293] [client 57.141.0.18:28054] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:52.643766 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.14:43854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:52.644397 2026] [authz_core:error] [pid 3104804:tid 3104804] [client 57.141.0.14:43854] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:52.693127 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.55:55148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:52.693747 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.55:55148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:53.298356 2026] [ssl:error] [pid 3106666:tid 3106666] (70014)End of file found: [client 216.73.216.199:38547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:41:53.661979 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.31:37500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:53.662721 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.31:37500] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:53.750596 2026] [authz_core:error] [pid 3112394:tid 3112394] [client 57.141.0.70:42870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:53.751221 2026] [authz_core:error] [pid 3112394:tid 3112394] [client 57.141.0.70:42870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:53.823757 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.18:28056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:53.824387 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.18:28056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:53.974798 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.47:57928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:53.975427 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.47:57928] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:54.526995 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.62:29930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:54.527638 2026] [authz_core:error] [pid 3110012:tid 3110012] [client 57.141.0.62:29930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:54.546056 2026] [authz_core:error] [pid 3112394:tid 3112394] [client 57.141.0.46:33544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:54.546688 2026] [authz_core:error] [pid 3112394:tid 3112394] [client 57.141.0.46:33544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:54.609606 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:43222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:54.609633 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:54.665270 2026] [ssl:error] [pid 3112061:tid 3112061] (EAI 2)Name or service not known: [client 144.76.19.72:43228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:54.665304 2026] [ssl:error] [pid 3112061:tid 3112061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:54.814895 2026] [authz_core:error] [pid 3111983:tid 3111983] [client 57.141.0.66:59200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:54.815537 2026] [authz_core:error] [pid 3111983:tid 3111983] [client 57.141.0.66:59200] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:55.091211 2026] [core:error] [pid 3103941:tid 3103941] [client 66.249.66.167:41918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:55.091242 2026] [core:error] [pid 3103941:tid 3103941] [client 66.249.66.167:41918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:55.095755 2026] [core:error] [pid 3111818:tid 3111818] [client 66.249.66.167:39437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:55.095778 2026] [core:error] [pid 3111818:tid 3111818] [client 66.249.66.167:39437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:55.105140 2026] [security2:error] [pid 3106113:tid 3106113] [client 216.73.216.199:56219] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/lve-stats.log"] [unique_id "ams4g3q5bqwz8ZziUzXHCAAAAAE"]
[Thu Jul 30 12:41:55.105426 2026] [security2:error] [pid 3106113:tid 3106113] [client 216.73.216.199:56219] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/lve-stats.log"] [unique_id "ams4g3q5bqwz8ZziUzXHCAAAAAE"]
[Thu Jul 30 12:41:55.105663 2026] [security2:error] [pid 3106113:tid 3106113] [client 216.73.216.199:56219] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/lve-stats.log"] [unique_id "ams4g3q5bqwz8ZziUzXHCAAAAAE"]
[Thu Jul 30 12:41:55.767589 2026] [core:error] [pid 3109064:tid 3109064] [client 66.249.66.194:47448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:55.767619 2026] [core:error] [pid 3109064:tid 3109064] [client 66.249.66.194:47448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:41:55.915260 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.14:56284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:55.915933 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.14:56284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:56.075612 2026] [security2:error] [pid 3099188:tid 3099188] [client 185.191.171.7:63032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,529.0.html"] [unique_id "ams4hOvqOagaDuNCD6HRFgAAABM"]
[Thu Jul 30 12:41:56.312532 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.71:41830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:56.313163 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.71:41830] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:56.475524 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.26:50886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:56.476161 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.26:50886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:56.695110 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.59:50680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:56.695875 2026] [authz_core:error] [pid 3111818:tid 3111818] [client 57.141.0.59:50680] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:56.916680 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.60:20884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:56.917308 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.60:20884] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:57.313807 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.32:38732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:57.315161 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.32:38732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:57.421311 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.35:51564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:57.421938 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.35:51564] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:57.482194 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.4:50386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:57.482855 2026] [authz_core:error] [pid 3088195:tid 3088195] [client 57.141.0.4:50386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:57.736800 2026] [ssl:error] [pid 3110012:tid 3110012] (EAI 2)Name or service not known: [client 144.76.19.72:43244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:57.736848 2026] [ssl:error] [pid 3110012:tid 3110012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:57.789611 2026] [ssl:error] [pid 3111818:tid 3111818] (EAI 2)Name or service not known: [client 144.76.19.72:43246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:41:57.789652 2026] [ssl:error] [pid 3111818:tid 3111818] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:41:57.924356 2026] [lsapi:warn] [pid 3106320:tid 3106320] [client 122.180.21.11:61520] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:41:58.002887 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.56:35408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:58.003516 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.56:35408] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:58.495165 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.11:50690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:58.495784 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.11:50690] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:58.761721 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.29:42012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:58.762346 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.29:42012] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:59.257154 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.28:25116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:59.257781 2026] [authz_core:error] [pid 3081197:tid 3081197] [client 57.141.0.28:25116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:59.354660 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.3:48320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:59.355293 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.3:48320] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:59.490854 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.7:62232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:59.491480 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.7:62232] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:59.649260 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.50:36546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:59.649889 2026] [authz_core:error] [pid 3105273:tid 3105273] [client 57.141.0.50:36546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:41:59.942994 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.39:47910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:41:59.943627 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.39:47910] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:00.747559 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.24:64066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:00.748184 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.24:64066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:00.843486 2026] [ssl:error] [pid 3088144:tid 3088144] (EAI 2)Name or service not known: [client 144.76.19.72:50686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:00.843527 2026] [ssl:error] [pid 3088144:tid 3088144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:00.896890 2026] [ssl:error] [pid 3107076:tid 3107076] (EAI 2)Name or service not known: [client 144.76.19.72:50700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:00.896923 2026] [ssl:error] [pid 3107076:tid 3107076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:01.107483 2026] [authz_core:error] [pid 3111412:tid 3111412] [client 57.141.0.17:58552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:01.108131 2026] [authz_core:error] [pid 3111412:tid 3111412] [client 57.141.0.17:58552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:01.290291 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.23:30594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:01.290965 2026] [authz_core:error] [pid 3096888:tid 3096888] [client 57.141.0.23:30594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:01.435244 2026] [core:error] [pid 3103943:tid 3103943] [client 66.249.66.68:34778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:01.435285 2026] [core:error] [pid 3103943:tid 3103943] [client 66.249.66.68:34778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:01.784505 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.7:62250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:01.785146 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.7:62250] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:01.831361 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.61:22896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:01.831987 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.61:22896] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:01.878271 2026] [security2:error] [pid 3088986:tid 3088986] [client 150.109.10.41:39204] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "ams4iZOq7xGazC7L_mEQ4wAAACI"]
[Thu Jul 30 12:42:02.700318 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.53:40316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:02.701011 2026] [authz_core:error] [pid 3080545:tid 3080545] [client 57.141.0.53:40316] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:02.711146 2026] [ssl:error] [pid 3109064:tid 3109064] (70014)End of file found: [client 216.73.216.199:5046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:02.747690 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.4:41710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:02.748320 2026] [authz_core:error] [pid 3097447:tid 3097447] [client 57.141.0.4:41710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:02.815256 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.40:55520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:02.815884 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.40:55520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:03.090555 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.51:53098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:03.091230 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.51:53098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:03.312709 2026] [core:error] [pid 3106113:tid 3106113] (13)Permission denied: [client 216.73.216.199:56219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/intel_rapl_msr/uevent
[Thu Jul 30 12:42:03.950540 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:50714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:03.950579 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:04.007641 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:50716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:04.007673 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:04.155827 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.71:37586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:04.156952 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 57.141.0.71:37586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:04.237837 2026] [ssl:error] [pid 3106113:tid 3106113] (70014)End of file found: [client 216.73.216.199:56219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:04.253962 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.1:31186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:04.254664 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.1:31186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:04.672922 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.16:23540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:04.673608 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.16:23540] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:04.898065 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.64:51686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:04.898757 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.64:51686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:05.191879 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.19:27722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:05.192525 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.19:27722] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:05.257138 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.15:35578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:05.257762 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 57.141.0.15:35578] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:05.473294 2026] [authz_core:error] [pid 3088144:tid 3088144] [client 20.193.250.173:63574] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:42:05.507581 2026] [security2:error] [pid 3101834:tid 3101834] [client 69.57.172.96:55888] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "ams4jRXXMkOI2FdQZFukDQAAACc"]
[Thu Jul 30 12:42:05.942274 2026] [ssl:error] [pid 3103943:tid 3103943] (70014)End of file found: [client 216.73.216.199:58356] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:06.150149 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.44:63014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:06.150812 2026] [authz_core:error] [pid 3088986:tid 3088986] [client 57.141.0.44:63014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:06.179282 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.56:35432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:06.180468 2026] [authz_core:error] [pid 3110011:tid 3110011] [client 57.141.0.56:35432] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:06.336188 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.59:33430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:06.336807 2026] [authz_core:error] [pid 3098796:tid 3098796] [client 57.141.0.59:33430] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:06.393349 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.49:55148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:06.393985 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.49:55148] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:06.462247 2026] [authz_core:error] [pid 3110672:tid 3110672] [client 57.141.0.30:34254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:06.463413 2026] [authz_core:error] [pid 3110672:tid 3110672] [client 57.141.0.30:34254] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:07.064509 2026] [ssl:error] [pid 3110011:tid 3110011] (EAI 2)Name or service not known: [client 144.76.19.72:50720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:07.064546 2026] [ssl:error] [pid 3110011:tid 3110011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:07.119787 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:50724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:07.119813 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:07.123784 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.20:31314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:07.124404 2026] [authz_core:error] [pid 3104805:tid 3104805] [client 57.141.0.20:31314] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:07.758410 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.26:54284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:07.759053 2026] [authz_core:error] [pid 3107076:tid 3107076] [client 57.141.0.26:54284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:07.851714 2026] [core:error] [pid 3110011:tid 3110011] [client 66.249.66.40:44030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:07.851743 2026] [core:error] [pid 3110011:tid 3110011] [client 66.249.66.40:44030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:07.913604 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.38:47278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:07.914245 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.38:47278] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:08.508598 2026] [lsapi:warn] [pid 3088986:tid 3088986] [client 122.180.21.11:62150] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:42:08.570098 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.43:22256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:08.571128 2026] [authz_core:error] [pid 3090618:tid 3090618] [client 57.141.0.43:22256] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:08.653319 2026] [ssl:error] [pid 3097447:tid 3097447] (5)Input/output error: [client 216.73.216.199:10083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:08.899454 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.64:51694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:08.900122 2026] [authz_core:error] [pid 3106665:tid 3106665] [client 57.141.0.64:51694] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:09.189965 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.38:29160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:09.190604 2026] [authz_core:error] [pid 3099188:tid 3099188] [client 57.141.0.38:29160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:09.354765 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.51:26672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:09.355403 2026] [authz_core:error] [pid 3109938:tid 3109938] [client 57.141.0.51:26672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:09.944152 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.61:40186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:09.944774 2026] [authz_core:error] [pid 3109064:tid 3109064] [client 57.141.0.61:40186] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:10.172677 2026] [ssl:error] [pid 3110012:tid 3110012] (EAI 2)Name or service not known: [client 144.76.19.72:23178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:10.172704 2026] [ssl:error] [pid 3110012:tid 3110012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:10.228905 2026] [ssl:error] [pid 3111817:tid 3111817] (EAI 2)Name or service not known: [client 144.76.19.72:23194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:10.228937 2026] [ssl:error] [pid 3111817:tid 3111817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:10.679787 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.41:27270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:10.680551 2026] [authz_core:error] [pid 3106255:tid 3106255] [client 57.141.0.41:27270] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:11.629184 2026] [security2:error] [pid 3099222:tid 3099222] [client 47.128.20.254:42400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "apotheekcandidejacobs.be"] [uri "/robots.txt"] [unique_id "ams4k2mJMDE7Ux8aWFYfwgAAABk"]
[Thu Jul 30 12:42:11.629677 2026] [core:error] [pid 3099222:tid 3099222] [client 47.128.20.254:42400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:12.480407 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.22:58286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:12.481033 2026] [authz_core:error] [pid 3097397:tid 3097397] [client 57.141.0.22:58286] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:13.284875 2026] [ssl:error] [pid 3097397:tid 3097397] (EAI 2)Name or service not known: [client 144.76.19.72:23198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:13.284901 2026] [ssl:error] [pid 3097397:tid 3097397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:13.312645 2026] [security2:error] [pid 3106255:tid 3106255] [client 160.176.89.9:44204] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4lYyc_b8idBnMRsR_2AAAAAI"]
[Thu Jul 30 12:42:13.312689 2026] [security2:error] [pid 3106255:tid 3106255] [client 160.176.89.9:44204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4lYyc_b8idBnMRsR_2AAAAAI"]
[Thu Jul 30 12:42:13.312949 2026] [security2:error] [pid 3106255:tid 3106255] [client 160.176.89.9:44204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4lYyc_b8idBnMRsR_2AAAAAI"]
[Thu Jul 30 12:42:13.337869 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:23202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:13.337893 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:15.366330 2026] [security2:error] [pid 3097445:tid 3097445] [client 5.62.147.195:35834] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4l_xGbFTzp5iIeC059gAAABo"]
[Thu Jul 30 12:42:15.366385 2026] [security2:error] [pid 3097445:tid 3097445] [client 5.62.147.195:35834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4l_xGbFTzp5iIeC059gAAABo"]
[Thu Jul 30 12:42:15.366634 2026] [security2:error] [pid 3097445:tid 3097445] [client 5.62.147.195:35834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4l_xGbFTzp5iIeC059gAAABo"]
[Thu Jul 30 12:42:16.394534 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:23212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:16.394568 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:16.449352 2026] [ssl:error] [pid 3103882:tid 3103882] (EAI 2)Name or service not known: [client 144.76.19.72:23216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:16.449381 2026] [ssl:error] [pid 3103882:tid 3103882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:17.138139 2026] [authz_core:error] [pid 3114023:tid 3114023] [client 57.141.0.53:27740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:42:17.138830 2026] [authz_core:error] [pid 3114023:tid 3114023] [client 57.141.0.53:27740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:42:18.150161 2026] [core:error] [pid 3093749:tid 3093749] [client 57.141.0.40:41692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:18.150185 2026] [core:error] [pid 3093749:tid 3093749] [client 57.141.0.40:41692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:18.166825 2026] [security2:error] [pid 3103882:tid 3103882] [client 45.231.114.211:16358] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4msAaIPs83wr14cyj9AAAAA8"]
[Thu Jul 30 12:42:18.166867 2026] [security2:error] [pid 3103882:tid 3103882] [client 45.231.114.211:16358] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams4msAaIPs83wr14cyj9AAAAA8"]
[Thu Jul 30 12:42:18.167131 2026] [security2:error] [pid 3103882:tid 3103882] [client 45.231.114.211:16358] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams4msAaIPs83wr14cyj9AAAAA8"]
[Thu Jul 30 12:42:18.941046 2026] [lsapi:warn] [pid 3106255:tid 3106255] [client 122.180.21.11:62769] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:42:19.535979 2026] [ssl:error] [pid 3114213:tid 3114213] (EAI 2)Name or service not known: [client 144.76.19.72:23224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:19.536024 2026] [ssl:error] [pid 3114213:tid 3114213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:19.591082 2026] [ssl:error] [pid 3114214:tid 3114214] (EAI 2)Name or service not known: [client 144.76.19.72:54474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:19.591129 2026] [ssl:error] [pid 3114214:tid 3114214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:20.921261 2026] [authz_core:error] [pid 3114297:tid 3114297] [client 20.193.250.173:58852] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:42:21.373974 2026] [core:error] [pid 3097447:tid 3097447] [client 66.249.66.167:51030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:21.374006 2026] [core:error] [pid 3097447:tid 3097447] [client 66.249.66.167:51030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:22.690117 2026] [ssl:error] [pid 3114214:tid 3114214] (EAI 2)Name or service not known: [client 144.76.19.72:54482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:22.690147 2026] [ssl:error] [pid 3114214:tid 3114214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:22.745758 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:54492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:22.745785 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:25.801037 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:54506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:25.801078 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:25.855523 2026] [ssl:error] [pid 3114213:tid 3114213] (EAI 2)Name or service not known: [client 144.76.19.72:54514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:25.855570 2026] [ssl:error] [pid 3114213:tid 3114213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:26.443411 2026] [ssl:error] [pid 3112063:tid 3112063] (70014)End of file found: [client 216.73.216.199:26501] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:26.515704 2026] [security2:error] [pid 3114213:tid 3114213] [client 85.208.96.210:18706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/wegovy-before-and-after-pictures"] [unique_id "ams4ouCSS5Sglmz_qWSVHQAAAAk"]
[Thu Jul 30 12:42:27.045252 2026] [ssl:error] [pid 3093749:tid 3093749] (5)Input/output error: [client 216.73.216.199:49813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:27.426825 2026] [security2:error] [pid 3114299:tid 3114299] [client 88.90.240.27:35530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "ams4oy8ioLQDJuaynBxQzgAAACU"]
[Thu Jul 30 12:42:27.558799 2026] [access_compat:error] [pid 3106255:tid 3106255] [client 45.158.164.139:53256] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:42:27.595673 2026] [security2:error] [pid 3112394:tid 3112394] [client 43.134.236.36:56294] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/"] [unique_id "ams4o0TdL6Jp66zvUQ0W2wAAADo"]
[Thu Jul 30 12:42:27.950351 2026] [ssl:error] [pid 3114300:tid 3114300] (70014)End of file found: [client 216.73.216.199:6548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:28.893364 2026] [security2:error] [pid 3105120:tid 3105120] [client 88.90.240.27:35242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "ams4pHDGGkBgT_SIJUjNoQAAAB4"]
[Thu Jul 30 12:42:28.925832 2026] [ssl:error] [pid 3103881:tid 3103881] (EAI 2)Name or service not known: [client 144.76.19.72:54518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:28.925869 2026] [ssl:error] [pid 3103881:tid 3103881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:28.978971 2026] [ssl:error] [pid 3114023:tid 3114023] (EAI 2)Name or service not known: [client 144.76.19.72:54530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:28.978999 2026] [ssl:error] [pid 3114023:tid 3114023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:29.374313 2026] [lsapi:warn] [pid 3114845:tid 3114845] [client 122.180.21.11:63383] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:42:32.032093 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:27418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:32.032141 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:32.083324 2026] [ssl:error] [pid 3111722:tid 3111722] (EAI 2)Name or service not known: [client 144.76.19.72:27432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:32.083363 2026] [ssl:error] [pid 3111722:tid 3111722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:32.476478 2026] [ssl:error] [pid 3088986:tid 3088986] (70014)End of file found: [client 216.73.216.199:5001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:32.956886 2026] [ssl:error] [pid 3114214:tid 3114214] (70014)End of file found: [client 216.73.216.199:7846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:33.253933 2026] [core:error] [pid 3109938:tid 3109938] [client 66.249.66.167:36555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:33.253959 2026] [core:error] [pid 3109938:tid 3109938] [client 66.249.66.167:36555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:33.338150 2026] [security2:error] [pid 3106318:tid 3106318] [client 94.154.43.178:40022] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "ams4qQru6kBriIq1hMAvQwAAACQ"]
[Thu Jul 30 12:42:33.338343 2026] [security2:error] [pid 3106318:tid 3106318] [client 94.154.43.178:40022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "ams4qQru6kBriIq1hMAvQwAAACQ"]
[Thu Jul 30 12:42:33.338561 2026] [security2:error] [pid 3106318:tid 3106318] [client 94.154.43.178:40022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "ams4qQru6kBriIq1hMAvQwAAACQ"]
[Thu Jul 30 12:42:33.974186 2026] [ssl:error] [pid 3111817:tid 3111817] (70014)End of file found: [client 216.73.216.199:36835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:35.139556 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:27440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:35.139588 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:35.194014 2026] [ssl:error] [pid 3114297:tid 3114297] (EAI 2)Name or service not known: [client 144.76.19.72:27446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:35.194051 2026] [ssl:error] [pid 3114297:tid 3114297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:36.310014 2026] [authz_core:error] [pid 3114297:tid 3114297] [client 20.193.250.173:54601] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:42:37.013258 2026] [authz_core:error] [pid 3112394:tid 3112394] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 12:42:38.246887 2026] [ssl:error] [pid 3088986:tid 3088986] (EAI 2)Name or service not known: [client 144.76.19.72:27462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:38.246921 2026] [ssl:error] [pid 3088986:tid 3088986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:38.302871 2026] [ssl:error] [pid 3105273:tid 3105273] (EAI 2)Name or service not known: [client 144.76.19.72:27464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:38.302911 2026] [ssl:error] [pid 3105273:tid 3105273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:39.075252 2026] [core:error] [pid 3114895:tid 3114895] (13)Permission denied: [client 216.73.216.199:49578] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-160/objects_partial
[Thu Jul 30 12:42:39.937730 2026] [lsapi:warn] [pid 3114297:tid 3114297] [client 122.180.21.11:64008] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:42:40.280610 2026] [ssl:error] [pid 3114895:tid 3114895] (70014)End of file found: [client 216.73.216.199:49578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:40.787396 2026] [ssl:error] [pid 3106903:tid 3106903] (70014)End of file found: [client 216.73.216.199:1674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:41.357637 2026] [ssl:error] [pid 3114892:tid 3114892] (EAI 2)Name or service not known: [client 144.76.19.72:31990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:41.357693 2026] [ssl:error] [pid 3114892:tid 3114892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:41.414231 2026] [ssl:error] [pid 3110672:tid 3110672] (EAI 2)Name or service not known: [client 144.76.19.72:31998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:41.414261 2026] [ssl:error] [pid 3110672:tid 3110672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:41.485018 2026] [ssl:error] [pid 3114214:tid 3114214] (70014)End of file found: [client 216.73.216.199:20759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:43.576589 2026] [security2:error] [pid 3106666:tid 3106666] [client 74.7.227.165:51396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.andrewvenables.com"] [uri "/"] [unique_id "ams4s6ZSyV5H63KBMldNyQAAAC4"]
[Thu Jul 30 12:42:43.576966 2026] [security2:error] [pid 3112394:tid 3112394] [client 127.0.0.1:56946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ams4s0TdL6Jp66zvUQ0W4wAAADo"]
[Thu Jul 30 12:42:44.469527 2026] [ssl:error] [pid 3115377:tid 3115377] (EAI 2)Name or service not known: [client 144.76.19.72:32002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:44.469572 2026] [ssl:error] [pid 3115377:tid 3115377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:44.522820 2026] [ssl:error] [pid 3114213:tid 3114213] (EAI 2)Name or service not known: [client 144.76.19.72:32014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:44.522843 2026] [ssl:error] [pid 3114213:tid 3114213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:45.419746 2026] [core:error] [pid 3081293:tid 3081293] (13)Permission denied: [client 216.73.216.199:61640] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 12:42:45.788488 2026] [authz_core:error] [pid 3114213:tid 3114213] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 12:42:45.891794 2026] [core:error] [pid 3105273:tid 3105273] [client 66.249.66.167:45875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:45.891818 2026] [core:error] [pid 3105273:tid 3105273] [client 66.249.66.167:45875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:47.410612 2026] [security2:error] [pid 3111722:tid 3111722] [client 156.59.198.136:55436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4t-DXCBVbXs3enefI4gAAACA"]
[Thu Jul 30 12:42:47.577024 2026] [ssl:error] [pid 3110012:tid 3110012] (EAI 2)Name or service not known: [client 144.76.19.72:32024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:47.577051 2026] [ssl:error] [pid 3110012:tid 3110012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:47.630594 2026] [ssl:error] [pid 3114297:tid 3114297] (EAI 2)Name or service not known: [client 144.76.19.72:32032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:47.630618 2026] [ssl:error] [pid 3114297:tid 3114297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:47.829805 2026] [ssl:error] [pid 3081293:tid 3081293] (70014)End of file found: [client 216.73.216.199:61640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:47.928336 2026] [security2:error] [pid 3090618:tid 3090618] [client 114.119.135.136:44129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~19,18/request_format~html"] [unique_id "ams4tzqpBC0FwvDMksETyQAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~19,18,102/request_format~html
[Thu Jul 30 12:42:49.053039 2026] [security2:error] [pid 3112063:tid 3112063] [client 114.119.135.136:44145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~19,18/request_format~html"] [unique_id "ams4uV3Yv6GEE0VhQiPKkwAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~19,18,102/request_format~html
[Thu Jul 30 12:42:49.940292 2026] [ssl:error] [pid 3114892:tid 3114892] (70014)End of file found: [client 216.73.216.199:2494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:50.461119 2026] [lsapi:warn] [pid 3102200:tid 3102200] [client 122.180.21.11:64623] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:42:50.685828 2026] [ssl:error] [pid 3101574:tid 3101574] (EAI 2)Name or service not known: [client 144.76.19.72:25082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:50.685854 2026] [ssl:error] [pid 3101574:tid 3101574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:50.741560 2026] [ssl:error] [pid 3114894:tid 3114894] (EAI 2)Name or service not known: [client 144.76.19.72:25098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:50.741595 2026] [ssl:error] [pid 3114894:tid 3114894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:51.834101 2026] [security2:error] [pid 3102200:tid 3102200] [client 156.59.198.136:30212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4uycjPZN8R0-Qc7q3agAAADc"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:42:53.062301 2026] [security2:error] [pid 3114213:tid 3114213] [client 43.135.144.81:50590] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.evtech.ltd"] [uri "/"] [unique_id "ams4veCSS5Sglmz_qWSVKQAAAAk"]
[Thu Jul 30 12:42:53.139537 2026] [security2:error] [pid 3116086:tid 3116086] [client 156.59.198.136:40510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4vSkDoib011HA8MImOAAAABg"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:42:53.803773 2026] [ssl:error] [pid 3102200:tid 3102200] (EAI 2)Name or service not known: [client 144.76.19.72:25106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:53.803805 2026] [ssl:error] [pid 3102200:tid 3102200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:53.859568 2026] [ssl:error] [pid 3114895:tid 3114895] (EAI 2)Name or service not known: [client 144.76.19.72:25118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:53.859600 2026] [ssl:error] [pid 3114895:tid 3114895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:54.444404 2026] [security2:error] [pid 3106255:tid 3106255] [client 156.59.198.136:62526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4voyc_b8idBnMRsR_9AAAAAI"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:42:54.457685 2026] [ssl:error] [pid 3105120:tid 3105120] (70014)End of file found: [client 216.73.216.199:35533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:54.945225 2026] [core:error] [pid 3112061:tid 3112061] (13)Permission denied: [client 216.73.216.199:34321] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/inet_diag/uevent
[Thu Jul 30 12:42:55.043093 2026] [authz_core:error] [pid 3114297:tid 3114297] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:42:55.737583 2026] [security2:error] [pid 3114778:tid 3114778] [client 156.59.198.135:60736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4v71By8bOArCy2VW-4wAAABQ"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:42:55.959621 2026] [core:error] [pid 3112061:tid 3112061] (13)Permission denied: [client 216.73.216.199:34321] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/sections/__kcrctab_gpl
[Thu Jul 30 12:42:56.229901 2026] [security2:error] [pid 3097447:tid 3097447] [client 101.32.49.171:40922] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "borovetsexpress.com"] [uri "/"] [unique_id "ams4wAwdUtr6PLa6YOMlDQAAABw"]
[Thu Jul 30 12:42:56.267182 2026] [ssl:error] [pid 3112061:tid 3112061] (70014)End of file found: [client 216.73.216.199:34321] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:42:58.207488 2026] [ssl:error] [pid 3116911:tid 3116911] (EAI 2)Name or service not known: [client 144.76.19.72:25130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:58.207545 2026] [ssl:error] [pid 3116911:tid 3116911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:58.259923 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:10807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:58.259966 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:10807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:42:58.412033 2026] [security2:error] [pid 3110672:tid 3110672] [client 156.59.198.135:30522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4wjOH3ygftyNRtNMRjQAAAAA"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:42:58.931928 2026] [lsapi:warn] [pid 3116911:tid 3116911] [client 40.77.167.61:23179] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:42:58.931969 2026] [lsapi:warn] [pid 3116911:tid 3116911] [client 40.77.167.61:23179] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:42:59.428352 2026] [ssl:error] [pid 3116969:tid 3116969] (EAI 2)Name or service not known: [client 144.76.19.72:25136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:42:59.428395 2026] [ssl:error] [pid 3116969:tid 3116969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:42:59.849855 2026] [security2:error] [pid 3116967:tid 3116967] [client 101.32.49.171:38810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "ams4w8DqzxhBbBiF5TTuEAAAACg"], referer: http://borovetsexpress.com
[Thu Jul 30 12:42:59.876759 2026] [ssl:error] [pid 3114893:tid 3114893] (70014)End of file found: [client 216.73.216.199:39597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:00.405449 2026] [core:error] [pid 3106903:tid 3106903] [client 4.225.203.146:10677] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:00.405473 2026] [core:error] [pid 3106903:tid 3106903] [client 4.225.203.146:10677] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:00.654007 2026] [core:error] [pid 3103881:tid 3103881] [client 57.141.0.41:45074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:00.654037 2026] [core:error] [pid 3103881:tid 3103881] [client 57.141.0.41:45074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:00.982507 2026] [security2:error] [pid 3112063:tid 3112063] [client 156.59.198.136:20570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4xF3Yv6GEE0VhQiPK-QAAADg"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:01.423291 2026] [lsapi:warn] [pid 3103882:tid 3103882] [client 122.180.21.11:65248] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:43:01.766082 2026] [core:error] [pid 3116825:tid 3116825] [client 4.225.203.146:10304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:01.766109 2026] [core:error] [pid 3116825:tid 3116825] [client 4.225.203.146:10304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:02.475039 2026] [security2:error] [pid 3114894:tid 3114894] [client 156.59.198.135:45248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4xqQqpyT0-zO1c9LIWQAAADQ"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:02.485847 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:42300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:02.485871 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:02.541746 2026] [ssl:error] [pid 3106318:tid 3106318] (EAI 2)Name or service not known: [client 144.76.19.72:42310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:02.541778 2026] [ssl:error] [pid 3106318:tid 3106318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:02.679685 2026] [core:error] [pid 3112063:tid 3112063] [client 4.225.203.146:10344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:02.679713 2026] [core:error] [pid 3112063:tid 3112063] [client 4.225.203.146:10344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:03.188982 2026] [core:error] [pid 3093749:tid 3093749] [client 4.225.203.146:10773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:03.189006 2026] [core:error] [pid 3093749:tid 3093749] [client 4.225.203.146:10773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:03.454251 2026] [core:error] [pid 3111817:tid 3111817] [client 4.225.203.146:35639] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:03.454275 2026] [core:error] [pid 3111817:tid 3111817] [client 4.225.203.146:35639] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:03.790047 2026] [ssl:error] [pid 3114300:tid 3114300] (70014)End of file found: [client 216.73.216.199:3854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:03.996012 2026] [security2:error] [pid 3104805:tid 3104805] [client 156.59.198.135:34494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4xzyr-g9dOuarfHn3nwAAABY"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:05.029002 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.18:61168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:43:05.029649 2026] [authz_core:error] [pid 3075978:tid 3075978] [client 57.141.0.18:61168] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:43:05.541483 2026] [security2:error] [pid 3081293:tid 3081293] [client 156.59.198.135:32188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4ycgsicUKgH0EEO9NNgAAADk"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:05.595529 2026] [ssl:error] [pid 3114150:tid 3114150] (70014)End of file found: [client 216.73.216.199:26544] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:05.596144 2026] [ssl:error] [pid 3102098:tid 3102098] (EAI 2)Name or service not known: [client 144.76.19.72:42312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:05.596168 2026] [ssl:error] [pid 3102098:tid 3102098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:05.650623 2026] [ssl:error] [pid 3116970:tid 3116970] (EAI 2)Name or service not known: [client 144.76.19.72:42326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:05.650661 2026] [ssl:error] [pid 3116970:tid 3116970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:06.796107 2026] [core:error] [pid 3104805:tid 3104805] [client 4.225.203.146:36286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:06.796134 2026] [core:error] [pid 3104805:tid 3104805] [client 4.225.203.146:36286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:07.153597 2026] [security2:error] [pid 3117045:tid 3117045] [client 156.59.198.135:29814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4yxFP9OHLFRyQ5YJz8AAAAEE"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:08.664150 2026] [security2:error] [pid 3114895:tid 3114895] [client 156.59.198.136:26198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4zAo8BF9a5O5VtynNfwAAADs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:08.703551 2026] [ssl:error] [pid 3117044:tid 3117044] (EAI 2)Name or service not known: [client 144.76.19.72:42342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:08.703578 2026] [ssl:error] [pid 3117044:tid 3117044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:08.757018 2026] [ssl:error] [pid 3104805:tid 3104805] (EAI 2)Name or service not known: [client 144.76.19.72:42352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:08.757053 2026] [ssl:error] [pid 3104805:tid 3104805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:09.207592 2026] [core:error] [pid 3106255:tid 3106255] (13)Permission denied: [client 216.73.216.199:12741] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory181/subsystem/uevent
[Thu Jul 30 12:43:09.809431 2026] [security2:error] [pid 3106255:tid 3106255] [client 216.73.216.199:12741] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/10-default-yama-scope.conf"] [unique_id "ams4zYyc_b8idBnMRsSAAwAAAAI"]
[Thu Jul 30 12:43:09.809731 2026] [security2:error] [pid 3106255:tid 3106255] [client 216.73.216.199:12741] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/10-default-yama-scope.conf"] [unique_id "ams4zYyc_b8idBnMRsSAAwAAAAI"]
[Thu Jul 30 12:43:09.809936 2026] [security2:error] [pid 3106255:tid 3106255] [client 216.73.216.199:12741] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/10-default-yama-scope.conf"] [unique_id "ams4zYyc_b8idBnMRsSAAwAAAAI"]
[Thu Jul 30 12:43:09.810227 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:10676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:09.810247 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:10676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:10.081323 2026] [core:error] [pid 3104805:tid 3104805] [client 4.225.203.146:10752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:10.081352 2026] [core:error] [pid 3104805:tid 3104805] [client 4.225.203.146:10752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:10.111243 2026] [ssl:error] [pid 3106255:tid 3106255] (70014)End of file found: [client 216.73.216.199:12741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:10.172368 2026] [security2:error] [pid 3117040:tid 3117040] [client 156.59.198.136:12406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4zqcdie92pFBXL32e4gAAAD0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:11.008994 2026] [core:error] [pid 3117042:tid 3117042] [client 4.225.203.146:10355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:11.009022 2026] [core:error] [pid 3117042:tid 3117042] [client 4.225.203.146:10355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:11.311369 2026] [core:error] [pid 3103882:tid 3103882] [client 4.225.203.146:10682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:11.311399 2026] [core:error] [pid 3103882:tid 3103882] [client 4.225.203.146:10682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:11.324256 2026] [ssl:error] [pid 3117039:tid 3117039] (5)Input/output error: [client 216.73.216.199:51885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:11.395989 2026] [lsapi:warn] [pid 3111721:tid 3111721] [client 122.180.21.11:49489] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:43:11.418315 2026] [authz_core:error] [pid 3110672:tid 3110672] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:43:11.703804 2026] [security2:error] [pid 3114892:tid 3114892] [client 156.59.198.136:41006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4z3uu5L903ATRErusPQAAAC0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:11.812786 2026] [ssl:error] [pid 3117044:tid 3117044] (EAI 2)Name or service not known: [client 144.76.19.72:62026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:11.812828 2026] [ssl:error] [pid 3117044:tid 3117044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:11.818732 2026] [security2:error] [pid 3117041:tid 3117041] [client 216.73.216.199:50089] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/sysctl.d/50-libkcapi-optmem_max.conf"] [unique_id "ams4z1QLWsvR8-HEeyux3wAAAD4"]
[Thu Jul 30 12:43:11.819034 2026] [security2:error] [pid 3117041:tid 3117041] [client 216.73.216.199:50089] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/sysctl.d/50-libkcapi-optmem_max.conf"] [unique_id "ams4z1QLWsvR8-HEeyux3wAAAD4"]
[Thu Jul 30 12:43:11.819270 2026] [security2:error] [pid 3117041:tid 3117041] [client 216.73.216.199:50089] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/sysctl.d/50-libkcapi-optmem_max.conf"] [unique_id "ams4z1QLWsvR8-HEeyux3wAAAD4"]
[Thu Jul 30 12:43:11.868254 2026] [ssl:error] [pid 3075978:tid 3075978] (EAI 2)Name or service not known: [client 144.76.19.72:62038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:11.868280 2026] [ssl:error] [pid 3075978:tid 3075978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:11.899947 2026] [core:error] [pid 3114300:tid 3114300] [client 57.141.0.29:39464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:11.899973 2026] [core:error] [pid 3114300:tid 3114300] [client 57.141.0.29:39464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:11.979121 2026] [security2:error] [pid 3114150:tid 3114150] [client 129.204.188.64:56520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "barbaramatarrese.com"] [uri "/"] [unique_id "ams4zyAhgIlAG-cfDvrJygAAAAg"]
[Thu Jul 30 12:43:13.219710 2026] [core:error] [pid 3109938:tid 3109938] [client 66.249.66.8:35313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:13.219736 2026] [core:error] [pid 3109938:tid 3109938] [client 66.249.66.8:35313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:13.241256 2026] [security2:error] [pid 3111721:tid 3111721] [client 156.59.198.136:33524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams40RC9AMF9hQevWgSPVAAAABU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:13.711001 2026] [ssl:error] [pid 3101574:tid 3101574] (70014)End of file found: [client 216.73.216.199:18380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:13.984039 2026] [ssl:error] [pid 3117042:tid 3117042] (70014)End of file found: [client 216.73.216.199:46347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:14.138879 2026] [core:error] [pid 3117040:tid 3117040] [client 4.225.203.146:35610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:14.138903 2026] [core:error] [pid 3117040:tid 3117040] [client 4.225.203.146:35610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:14.559515 2026] [security2:error] [pid 3114150:tid 3114150] [client 156.59.198.136:27152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams40iAhgIlAG-cfDvrJywAAAAg"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:14.700637 2026] [ssl:error] [pid 3099222:tid 3099222] (70014)End of file found: [client 216.73.216.199:21743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:14.924644 2026] [ssl:error] [pid 3111721:tid 3111721] (EAI 2)Name or service not known: [client 144.76.19.72:62046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:14.924681 2026] [ssl:error] [pid 3111721:tid 3111721] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:14.978807 2026] [ssl:error] [pid 3114892:tid 3114892] (EAI 2)Name or service not known: [client 144.76.19.72:62054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:14.978832 2026] [ssl:error] [pid 3114892:tid 3114892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:16.053482 2026] [authz_core:error] [pid 3114894:tid 3114894] [client 57.141.0.48:39952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:43:16.054143 2026] [authz_core:error] [pid 3114894:tid 3114894] [client 57.141.0.48:39952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:43:16.127011 2026] [security2:error] [pid 3114214:tid 3114214] [client 156.59.198.135:53006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams41K5NCW0Oyaj66OeYCgAAAAo"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:16.918730 2026] [core:error] [pid 3117044:tid 3117044] [client 4.225.203.146:10328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:16.918761 2026] [core:error] [pid 3117044:tid 3117044] [client 4.225.203.146:10328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:17.645216 2026] [security2:error] [pid 3114297:tid 3114297] [client 156.59.198.136:56888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams41eh5oljkjE90exfbUQAAABE"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:17.894600 2026] [core:error] [pid 3117039:tid 3117039] [client 4.225.203.146:36257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:17.894628 2026] [core:error] [pid 3117039:tid 3117039] [client 4.225.203.146:36257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:18.035092 2026] [ssl:error] [pid 3104805:tid 3104805] (EAI 2)Name or service not known: [client 144.76.19.72:62068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:18.035119 2026] [ssl:error] [pid 3104805:tid 3104805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:18.089511 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:62082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:18.089543 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:18.283533 2026] [core:error] [pid 3117044:tid 3117044] [client 4.225.203.146:10570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:18.283564 2026] [core:error] [pid 3117044:tid 3117044] [client 4.225.203.146:10570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:18.304223 2026] [core:error] [pid 3114892:tid 3114892] (13)Permission denied: [client 216.73.216.199:41376] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/secure-20260712
[Thu Jul 30 12:43:18.616846 2026] [core:error] [pid 3114895:tid 3114895] [client 4.225.203.146:10611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:18.616875 2026] [core:error] [pid 3114895:tid 3114895] [client 4.225.203.146:10611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:18.948670 2026] [security2:error] [pid 3102099:tid 3102099] [client 156.59.198.135:43740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams41ppo1Svnf_xVthKT_gAAADM"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:19.463882 2026] [core:error] [pid 3102200:tid 3102200] [client 4.225.203.146:35595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:19.463907 2026] [core:error] [pid 3102200:tid 3102200] [client 4.225.203.146:35595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:19.993255 2026] [cgi:error] [pid 3117041:tid 3117041] [client 4.225.203.146:10779] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:43:19.993621 2026] [core:error] [pid 3117041:tid 3117041] [client 4.225.203.146:10779] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:20.464244 2026] [security2:error] [pid 3101574:tid 3101574] [client 156.59.198.136:12930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams42Ij-kqtTHx5Fa2UIagAAAAY"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:20.671009 2026] [authz_core:error] [pid 3117042:tid 3117042] [client 4.225.203.146:10591] AH01630: client denied by server configuration: /home/uukkeqwo/public_html/blog/wp-admin/includes/error_log
[Thu Jul 30 12:43:20.759139 2026] [core:error] [pid 3117042:tid 3117042] [client 4.225.203.146:10591] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:20.759164 2026] [core:error] [pid 3117042:tid 3117042] [client 4.225.203.146:10591] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:21.174019 2026] [ssl:error] [pid 3102200:tid 3102200] (EAI 2)Name or service not known: [client 144.76.19.72:51808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:21.174052 2026] [ssl:error] [pid 3102200:tid 3102200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:21.225299 2026] [ssl:error] [pid 3114895:tid 3114895] (EAI 2)Name or service not known: [client 144.76.19.72:51814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:21.225349 2026] [ssl:error] [pid 3114895:tid 3114895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:21.570222 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:10754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:21.570250 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:10754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:21.802294 2026] [ssl:error] [pid 3117039:tid 3117039] (70014)End of file found: [client 216.73.216.199:18695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:21.916035 2026] [core:error] [pid 3114892:tid 3114892] (13)Permission denied: [client 216.73.216.199:41376] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/secure-20260726
[Thu Jul 30 12:43:21.930772 2026] [lsapi:warn] [pid 3099222:tid 3099222] [client 122.180.21.11:50132] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:43:21.951386 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:23361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:21.951412 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:23361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:22.111318 2026] [security2:error] [pid 3116970:tid 3116970] [client 114.119.154.124:38899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/internalreordering06.doc"] [unique_id "ams42shRBKoTUm2otR1OXQAAADY"], referer: http://peterboroughdiocesanregistry.co.uk/dac.html
[Thu Jul 30 12:43:22.275619 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.36:42484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:43:22.276327 2026] [authz_core:error] [pid 3102099:tid 3102099] [client 57.141.0.36:42484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:43:23.119285 2026] [security2:error] [pid 3114150:tid 3114150] [client 114.119.154.124:62549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/403.shtml"] [unique_id "ams42yAhgIlAG-cfDvrJzQAAAAg"], referer: http://peterboroughdiocesanregistry.co.uk/dac.html
[Thu Jul 30 12:43:23.119731 2026] [ssl:error] [pid 3114892:tid 3114892] (70014)End of file found: [client 216.73.216.199:41376] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:24.095714 2026] [core:error] [pid 3115377:tid 3115377] [client 4.225.203.146:36271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:24.095760 2026] [core:error] [pid 3115377:tid 3115377] [client 4.225.203.146:36271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:24.319158 2026] [ssl:error] [pid 3106255:tid 3106255] (EAI 2)Name or service not known: [client 144.76.19.72:51828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:24.319196 2026] [ssl:error] [pid 3106255:tid 3106255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:24.374992 2026] [ssl:error] [pid 3114150:tid 3114150] (EAI 2)Name or service not known: [client 144.76.19.72:51830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:24.375031 2026] [ssl:error] [pid 3114150:tid 3114150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:24.875092 2026] [core:error] [pid 3111721:tid 3111721] [client 66.249.66.40:49828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:24.875123 2026] [core:error] [pid 3111721:tid 3111721] [client 66.249.66.40:49828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:24.879508 2026] [core:error] [pid 3112394:tid 3112394] [client 66.249.66.195:44135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:24.879540 2026] [core:error] [pid 3112394:tid 3112394] [client 66.249.66.195:44135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:25.087360 2026] [core:error] [pid 3099222:tid 3099222] [client 57.141.0.51:30872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:25.087387 2026] [core:error] [pid 3099222:tid 3099222] [client 57.141.0.51:30872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:25.534438 2026] [core:error] [pid 3116970:tid 3116970] (13)Permission denied: [client 216.73.216.199:10116] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS2/irq
[Thu Jul 30 12:43:25.934146 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.30:53246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:43:25.934778 2026] [authz_core:error] [pid 3103881:tid 3103881] [client 57.141.0.30:53246] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:43:26.726306 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:10362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:26.726337 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:10362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:26.945998 2026] [security2:error] [pid 3099222:tid 3099222] [client 156.59.198.135:55908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams43mmJMDE7Ux8aWFYgOwAAABk"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:27.040376 2026] [core:error] [pid 3116970:tid 3116970] (13)Permission denied: [client 216.73.216.199:10116] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS2/irq
[Thu Jul 30 12:43:27.042463 2026] [security2:error] [pid 3116825:tid 3116825] [client 85.208.96.200:31796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/boots-no-7-expiration-date"] [unique_id "ams43zqdAIFrwZT-HWo7BQAAAAE"]
[Thu Jul 30 12:43:27.449341 2026] [ssl:error] [pid 3106255:tid 3106255] (EAI 2)Name or service not known: [client 144.76.19.72:51836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:27.449386 2026] [ssl:error] [pid 3106255:tid 3106255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:27.503177 2026] [ssl:error] [pid 3115377:tid 3115377] (EAI 2)Name or service not known: [client 144.76.19.72:51844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:27.503213 2026] [ssl:error] [pid 3115377:tid 3115377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:27.642769 2026] [ssl:error] [pid 3116970:tid 3116970] (70014)End of file found: [client 216.73.216.199:10116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:28.093564 2026] [security2:error] [pid 3116825:tid 3116825] [client 18.232.12.157:53791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/feed/"] [unique_id "ams44DqdAIFrwZT-HWo7BgAAAAE"]
[Thu Jul 30 12:43:28.151628 2026] [ssl:error] [pid 3106255:tid 3106255] (70014)End of file found: [client 216.73.216.199:24126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:28.264437 2026] [security2:error] [pid 3097447:tid 3097447] [client 156.59.198.136:48770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams44AwdUtr6PLa6YOMlFwAAABw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:28.452971 2026] [core:error] [pid 3117040:tid 3117040] [client 4.225.203.146:37019] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:28.452994 2026] [core:error] [pid 3117040:tid 3117040] [client 4.225.203.146:37019] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:30.044212 2026] [core:error] [pid 3111722:tid 3111722] [client 4.225.203.146:10618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:30.044252 2026] [core:error] [pid 3111722:tid 3111722] [client 4.225.203.146:10618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:30.114295 2026] [security2:error] [pid 3116912:tid 3116912] [client 156.59.198.136:25838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams44oGLqoOy4-80cIlekAAAACU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:30.614441 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:18690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:30.614467 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:30.667270 2026] [ssl:error] [pid 3105273:tid 3105273] (EAI 2)Name or service not known: [client 144.76.19.72:18704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:30.667294 2026] [ssl:error] [pid 3105273:tid 3105273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:31.247791 2026] [core:error] [pid 3117041:tid 3117041] [client 66.249.64.170:46316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:31.247817 2026] [core:error] [pid 3117041:tid 3117041] [client 66.249.64.170:46316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:31.986199 2026] [security2:error] [pid 3117040:tid 3117040] [client 156.59.198.136:34486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams446cdie92pFBXL32e8QAAAD0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:32.036771 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:35626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:32.036800 2026] [core:error] [pid 3116912:tid 3116912] [client 4.225.203.146:35626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:32.354933 2026] [lsapi:warn] [pid 3101574:tid 3101574] [client 122.180.21.11:50753] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:43:32.637422 2026] [security2:error] [pid 3097447:tid 3097447] [client 143.44.129.67:3179] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams45AwdUtr6PLa6YOMlGQAAABw"]
[Thu Jul 30 12:43:32.637488 2026] [security2:error] [pid 3097447:tid 3097447] [client 143.44.129.67:3179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams45AwdUtr6PLa6YOMlGQAAABw"]
[Thu Jul 30 12:43:32.637759 2026] [security2:error] [pid 3097447:tid 3097447] [client 143.44.129.67:3179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams45AwdUtr6PLa6YOMlGQAAABw"]
[Thu Jul 30 12:43:33.666470 2026] [ssl:error] [pid 3114895:tid 3114895] (70014)End of file found: [client 216.73.216.199:54136] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:33.723532 2026] [security2:error] [pid 3112061:tid 3112061] [client 156.59.198.135:22472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams45ZXSh_muGvfVwUaluwAAADU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:33.726661 2026] [ssl:error] [pid 3116825:tid 3116825] (EAI 2)Name or service not known: [client 144.76.19.72:18720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:33.726688 2026] [ssl:error] [pid 3116825:tid 3116825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:33.782932 2026] [ssl:error] [pid 3116970:tid 3116970] (EAI 2)Name or service not known: [client 144.76.19.72:18730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:33.782967 2026] [ssl:error] [pid 3116970:tid 3116970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:33.970650 2026] [core:error] [pid 3099222:tid 3099222] (13)Permission denied: [client 216.73.216.199:20659] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS2/port
[Thu Jul 30 12:43:35.260025 2026] [security2:error] [pid 3116912:tid 3116912] [client 156.59.198.135:12164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams454GLqoOy4-80cIlekwAAACU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:35.614384 2026] [security2:error] [pid 3117042:tid 3117042] [client 185.188.96.240:10102] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams45-hH87pnVhbDC904MAAAAD8"]
[Thu Jul 30 12:43:35.614437 2026] [security2:error] [pid 3117042:tid 3117042] [client 185.188.96.240:10102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams45-hH87pnVhbDC904MAAAAD8"]
[Thu Jul 30 12:43:35.614702 2026] [security2:error] [pid 3117042:tid 3117042] [client 185.188.96.240:10102] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams45-hH87pnVhbDC904MAAAAD8"]
[Thu Jul 30 12:43:35.755181 2026] [core:error] [pid 3106255:tid 3106255] [client 4.225.203.146:10651] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:35.755207 2026] [core:error] [pid 3106255:tid 3106255] [client 4.225.203.146:10651] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:36.015176 2026] [authz_core:error] [pid 3111721:tid 3111721] [client 57.141.0.50:51962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:43:36.015803 2026] [authz_core:error] [pid 3111721:tid 3111721] [client 57.141.0.50:51962] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:43:36.274288 2026] [core:error] [pid 3114214:tid 3114214] [client 4.225.203.146:10654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:36.274312 2026] [core:error] [pid 3114214:tid 3114214] [client 4.225.203.146:10654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:36.620768 2026] [core:error] [pid 3111721:tid 3111721] [client 66.249.66.195:44825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:36.620790 2026] [core:error] [pid 3111721:tid 3111721] [client 66.249.66.195:44825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:36.680924 2026] [ssl:error] [pid 3099222:tid 3099222] (70014)End of file found: [client 216.73.216.199:20659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:36.775176 2026] [security2:error] [pid 3116912:tid 3116912] [client 156.59.198.135:40554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams46IGLqoOy4-80cIlelAAAACU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:36.837722 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:18736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:36.837754 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:36.898489 2026] [ssl:error] [pid 3115377:tid 3115377] (EAI 2)Name or service not known: [client 144.76.19.72:18748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:36.898529 2026] [ssl:error] [pid 3115377:tid 3115377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:38.186666 2026] [ssl:error] [pid 3116970:tid 3116970] (70014)End of file found: [client 216.73.216.199:8501] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:38.260624 2026] [security2:error] [pid 3117042:tid 3117042] [client 156.59.198.135:30704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams46uhH87pnVhbDC904MwAAAD8"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:38.380266 2026] [security2:error] [pid 3106255:tid 3106255] [client 85.208.96.199:27682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1363.0/prev_next,next.html"] [unique_id "ams46oyc_b8idBnMRsSADwAAAAI"]
[Thu Jul 30 12:43:39.100837 2026] [ssl:error] [pid 3106255:tid 3106255] (70014)End of file found: [client 216.73.216.199:11120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:39.777883 2026] [security2:error] [pid 3114895:tid 3114895] [client 156.59.198.136:26394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams46wo8BF9a5O5VtynNjQAAADs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:39.953504 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:18700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:39.953536 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:40.008248 2026] [ssl:error] [pid 3117042:tid 3117042] (EAI 2)Name or service not known: [client 144.76.19.72:18710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:40.008299 2026] [ssl:error] [pid 3117042:tid 3117042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:41.020686 2026] [core:error] [pid 3109938:tid 3109938] [client 4.225.203.146:10569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:41.020709 2026] [core:error] [pid 3109938:tid 3109938] [client 4.225.203.146:10569] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:41.066851 2026] [security2:error] [pid 3117039:tid 3117039] [client 156.59.198.136:15076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams47TvBMhsnxRce_3ysxwAAADw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:41.239215 2026] [security2:error] [pid 3117042:tid 3117042] [client 104.28.198.247:18982] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams47ehH87pnVhbDC904NAAAAD8"]
[Thu Jul 30 12:43:41.239260 2026] [security2:error] [pid 3117042:tid 3117042] [client 104.28.198.247:18982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams47ehH87pnVhbDC904NAAAAD8"]
[Thu Jul 30 12:43:41.239513 2026] [security2:error] [pid 3117042:tid 3117042] [client 104.28.198.247:18982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams47ehH87pnVhbDC904NAAAAD8"]
[Thu Jul 30 12:43:42.107189 2026] [ssl:error] [pid 3109064:tid 3109064] (70014)End of file found: [client 216.73.216.199:61873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:42.528044 2026] [security2:error] [pid 3112061:tid 3112061] [client 156.59.198.135:36760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams47pXSh_muGvfVwUalvQAAADU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:42.962138 2026] [lsapi:warn] [pid 3117040:tid 3117040] [client 122.180.21.11:51385] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:43:43.067631 2026] [ssl:error] [pid 3114778:tid 3114778] (EAI 2)Name or service not known: [client 144.76.19.72:18716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:43.067676 2026] [ssl:error] [pid 3114778:tid 3114778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:43.122503 2026] [ssl:error] [pid 3117042:tid 3117042] (EAI 2)Name or service not known: [client 144.76.19.72:18732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:43.122547 2026] [ssl:error] [pid 3117042:tid 3117042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:43.548462 2026] [cgi:error] [pid 3103881:tid 3103881] [client 4.225.203.146:36224] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:43:43.548804 2026] [core:error] [pid 3103881:tid 3103881] [client 4.225.203.146:36224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:43.912711 2026] [core:error] [pid 3117039:tid 3117039] (13)Permission denied: [client 216.73.216.199:38115] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS1/custom_divisor
[Thu Jul 30 12:43:44.039828 2026] [security2:error] [pid 3097447:tid 3097447] [client 156.59.198.136:28144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams48AwdUtr6PLa6YOMlHAAAABw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:44.243002 2026] [authz_core:error] [pid 3116825:tid 3116825] [client 57.141.0.31:37306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:43:44.243637 2026] [authz_core:error] [pid 3116825:tid 3116825] [client 57.141.0.31:37306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:43:44.817025 2026] [ssl:error] [pid 3117039:tid 3117039] (70014)End of file found: [client 216.73.216.199:38115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:45.330987 2026] [security2:error] [pid 3104805:tid 3104805] [client 156.59.198.136:58626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams48Tyr-g9dOuarfHn3qgAAABY"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:45.336838 2026] [cgi:error] [pid 3117041:tid 3117041] [client 216.73.216.199:23897] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-Getopt-Long/examples/skel1.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:43:45.336892 2026] [cgi:error] [pid 3117041:tid 3117041] [client 216.73.216.199:23897] End of script output before headers: skel1.pl
[Thu Jul 30 12:43:46.134554 2026] [access_compat:error] [pid 3097447:tid 3097447] [client 94.154.43.187:28696] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.env
[Thu Jul 30 12:43:46.174489 2026] [ssl:error] [pid 3116970:tid 3116970] (EAI 2)Name or service not known: [client 144.76.19.72:18738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:46.174526 2026] [ssl:error] [pid 3116970:tid 3116970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:46.230469 2026] [ssl:error] [pid 3105273:tid 3105273] (EAI 2)Name or service not known: [client 144.76.19.72:18750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:46.230504 2026] [ssl:error] [pid 3105273:tid 3105273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:46.329031 2026] [ssl:error] [pid 3114895:tid 3114895] (70014)End of file found: [client 216.73.216.199:13108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:46.597226 2026] [security2:error] [pid 3114845:tid 3114845] [client 156.59.198.136:20624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams48pzVIeXbMuU6nld-9gAAACM"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:47.461729 2026] [core:error] [pid 3097447:tid 3097447] [client 57.141.0.30:35980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:47.461761 2026] [core:error] [pid 3097447:tid 3097447] [client 57.141.0.30:35980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:47.474441 2026] [authz_core:error] [pid 3116970:tid 3116970] [client 66.249.66.33:38135] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:43:47.477110 2026] [authz_core:error] [pid 3116970:tid 3116970] [client 66.249.66.33:38135] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:43:47.563017 2026] [core:error] [pid 3111722:tid 3111722] [client 217.29.59.24:64798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:47.563053 2026] [core:error] [pid 3111722:tid 3111722] [client 217.29.59.24:64798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:47.985436 2026] [core:error] [pid 3090618:tid 3090618] (13)Permission denied: [client 216.73.216.199:64095] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS3/irq
[Thu Jul 30 12:43:48.267309 2026] [core:error] [pid 3117047:tid 3117047] [client 4.225.203.146:35587] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:48.267330 2026] [core:error] [pid 3117047:tid 3117047] [client 4.225.203.146:35587] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:48.343700 2026] [security2:error] [pid 3080545:tid 3080545] [client 156.59.198.136:42412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams49JsOke5wut2VWZCd8QAAAA4"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:49.643439 2026] [core:error] [pid 3111817:tid 3111817] [client 4.225.203.146:43721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:49.643470 2026] [core:error] [pid 3111817:tid 3111817] [client 4.225.203.146:43721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:49.707200 2026] [ssl:error] [pid 3117042:tid 3117042] (EAI 2)Name or service not known: [client 144.76.19.72:18764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:49.707227 2026] [ssl:error] [pid 3117042:tid 3117042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:49.764276 2026] [ssl:error] [pid 3117042:tid 3117042] (EAI 2)Name or service not known: [client 144.76.19.72:55680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:49.764298 2026] [ssl:error] [pid 3117042:tid 3117042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:49.775606 2026] [core:error] [pid 3112061:tid 3112061] [client 66.249.66.194:49706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:49.775631 2026] [core:error] [pid 3112061:tid 3112061] [client 66.249.66.194:49706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:49.955094 2026] [ssl:error] [pid 3101834:tid 3101834] (70014)End of file found: [client 216.73.216.199:22476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:49.955152 2026] [security2:error] [pid 3111817:tid 3111817] [client 156.59.198.136:38572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams49ThsspRxBbmxMlPgRAAAACE"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:50.436119 2026] [core:error] [pid 3119501:tid 3119501] (13)Permission denied: [client 216.73.216.199:40080] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/sbin/modsec-sdbm-util
[Thu Jul 30 12:43:50.557589 2026] [core:error] [pid 3119501:tid 3119501] (13)Permission denied: [client 216.73.216.199:40080] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory106/subsystem/uevent
[Thu Jul 30 12:43:51.452232 2026] [security2:error] [pid 3114892:tid 3114892] [client 156.59.198.135:26208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams493uu5L903ATRErusaAAAAC0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:51.620672 2026] [cgi:error] [pid 3110012:tid 3110012] [client 51.120.70.186:26116] AH02812: stderr from /home/josieand/www.bespokegardenliving.info/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:43:51.806255 2026] [cgi:error] [pid 3119556:tid 3119556] [client 4.225.203.146:43758] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:43:51.806635 2026] [core:error] [pid 3119556:tid 3119556] [client 4.225.203.146:43758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:52.054978 2026] [core:error] [pid 3119557:tid 3119557] [client 4.225.203.146:11228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:52.055021 2026] [core:error] [pid 3119557:tid 3119557] [client 4.225.203.146:11228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:52.735900 2026] [security2:error] [pid 3116970:tid 3116970] [client 156.59.198.136:64484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4-MhRBKoTUm2otR1OcwAAADY"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:52.815871 2026] [ssl:error] [pid 3117039:tid 3117039] (EAI 2)Name or service not known: [client 144.76.19.72:55686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:52.815909 2026] [ssl:error] [pid 3117039:tid 3117039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:52.872173 2026] [ssl:error] [pid 3119557:tid 3119557] (EAI 2)Name or service not known: [client 144.76.19.72:55698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:52.872205 2026] [ssl:error] [pid 3119557:tid 3119557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:52.971741 2026] [ssl:error] [pid 3119501:tid 3119501] (70014)End of file found: [client 216.73.216.199:40080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:53.360526 2026] [lsapi:warn] [pid 3114892:tid 3114892] [client 122.180.21.11:52008] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:43:54.193985 2026] [security2:error] [pid 3105273:tid 3105273] [client 156.59.198.135:23784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4-nvdCa5vknD44uDJYAAAAB8"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:55.728020 2026] [security2:error] [pid 3119557:tid 3119557] [client 156.59.198.136:14580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4-zYECyJXcECBr0WuLwAAAAs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:55.929135 2026] [ssl:error] [pid 3104805:tid 3104805] (EAI 2)Name or service not known: [client 144.76.19.72:55714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:55.929168 2026] [ssl:error] [pid 3104805:tid 3104805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:55.982428 2026] [ssl:error] [pid 3116967:tid 3116967] (70014)End of file found: [client 216.73.216.199:6160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:55.987535 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:55718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:55.987555 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:56.479647 2026] [core:error] [pid 3090618:tid 3090618] (13)Permission denied: [client 216.73.216.199:34475] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory34/subsystem/uevent
[Thu Jul 30 12:43:56.588262 2026] [ssl:error] [pid 3090618:tid 3090618] (70014)End of file found: [client 216.73.216.199:34475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:57.062648 2026] [security2:error] [pid 3097447:tid 3097447] [client 156.59.198.136:54764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4_QwdUtr6PLa6YOMlIwAAABw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:57.844314 2026] [core:error] [pid 3116825:tid 3116825] [client 4.225.203.146:11179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:57.844344 2026] [core:error] [pid 3116825:tid 3116825] [client 4.225.203.146:11179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:58.296747 2026] [ssl:error] [pid 3114214:tid 3114214] (70014)End of file found: [client 216.73.216.199:31954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:43:58.481030 2026] [core:error] [pid 3114778:tid 3114778] [client 4.225.203.146:11146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:58.481054 2026] [core:error] [pid 3114778:tid 3114778] [client 4.225.203.146:11146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:43:58.571575 2026] [security2:error] [pid 3105273:tid 3105273] [client 156.59.198.136:61924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams4_nvdCa5vknD44uDJYgAAAB8"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:43:59.058959 2026] [ssl:error] [pid 3119501:tid 3119501] (EAI 2)Name or service not known: [client 144.76.19.72:55730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:59.059013 2026] [ssl:error] [pid 3119501:tid 3119501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:59.114046 2026] [ssl:error] [pid 3117040:tid 3117040] (EAI 2)Name or service not known: [client 144.76.19.72:55734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:43:59.114099 2026] [ssl:error] [pid 3117040:tid 3117040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:43:59.445825 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/test1.php
[Thu Jul 30 12:43:59.445894 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:43:59.594690 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:43:59.706567 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:43:59.874621 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/zoom1.php
[Thu Jul 30 12:43:59.874676 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:43:59.992710 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 12:43:59.992757 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:00.032607 2026] [core:error] [pid 3116825:tid 3116825] [client 4.225.203.146:37877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:00.032633 2026] [core:error] [pid 3116825:tid 3116825] [client 4.225.203.146:37877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:00.121976 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/r.php
[Thu Jul 30 12:44:00.122053 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:00.122973 2026] [security2:error] [pid 3117039:tid 3117039] [client 156.59.198.136:33980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5ADvBMhsnxRce_3ys0AAAADw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:00.234594 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/sf.php
[Thu Jul 30 12:44:00.234659 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:00.347801 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/t.php
[Thu Jul 30 12:44:00.347854 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:00.518798 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 12:44:00.518854 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:00.631252 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/b.php
[Thu Jul 30 12:44:00.631298 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:00.743287 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/buy.php
[Thu Jul 30 12:44:00.743339 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:00.800363 2026] [authz_core:error] [pid 3117042:tid 3117042] [client 66.249.66.33:51412] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:44:00.803039 2026] [authz_core:error] [pid 3117042:tid 3117042] [client 66.249.66.33:51412] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:44:00.855043 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/config.php
[Thu Jul 30 12:44:00.855105 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:01.020732 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/num.php
[Thu Jul 30 12:44:01.020785 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:01.133717 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/areak1.php
[Thu Jul 30 12:44:01.133770 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:01.245468 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/vc.php
[Thu Jul 30 12:44:01.245530 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:01.251151 2026] [core:error] [pid 3105273:tid 3105273] [client 4.225.203.146:28241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:01.251182 2026] [core:error] [pid 3105273:tid 3105273] [client 4.225.203.146:28241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:01.357819 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:01.514116 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/core.php
[Thu Jul 30 12:44:01.514168 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:01.590931 2026] [security2:error] [pid 3111722:tid 3111722] [client 156.59.198.136:55934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5AeDXCBVbXs3enefJVwAAACA"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:01.625922 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:01.734018 2026] [authz_core:error] [pid 3117039:tid 3117039] [client 66.249.64.174:40294] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:44:01.736732 2026] [authz_core:error] [pid 3117039:tid 3117039] [client 66.249.64.174:40294] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:44:01.737719 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:01.768578 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:11170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:01.768598 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:11170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:01.868699 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:02.020272 2026] [core:error] [pid 3097447:tid 3097447] [client 66.249.66.169:41187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:02.020301 2026] [core:error] [pid 3097447:tid 3097447] [client 66.249.66.169:41187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:02.037386 2026] [security2:error] [pid 3105273:tid 3105273] [client 170.106.152.69:52297] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5AnvdCa5vknD44uDJZAAAAB8"]
[Thu Jul 30 12:44:02.037442 2026] [security2:error] [pid 3105273:tid 3105273] [client 170.106.152.69:52297] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5AnvdCa5vknD44uDJZAAAAB8"]
[Thu Jul 30 12:44:02.037700 2026] [security2:error] [pid 3105273:tid 3105273] [client 170.106.152.69:52297] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5AnvdCa5vknD44uDJZAAAAB8"]
[Thu Jul 30 12:44:02.053244 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:02.167197 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/ws37.php
[Thu Jul 30 12:44:02.167247 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:02.214002 2026] [ssl:error] [pid 3114845:tid 3114845] (EAI 2)Name or service not known: [client 144.76.19.72:24582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:02.214051 2026] [ssl:error] [pid 3114845:tid 3114845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:02.270474 2026] [ssl:error] [pid 3090618:tid 3090618] (EAI 2)Name or service not known: [client 144.76.19.72:24592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:02.270510 2026] [ssl:error] [pid 3090618:tid 3090618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:02.280389 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/assets
[Thu Jul 30 12:44:02.376716 2026] [security2:error] [pid 3112394:tid 3112394] [client 101.33.81.73:46452] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-sun.com"] [uri "/"] [unique_id "ams5AkTdL6Jp66zvUQ0W-QAAADo"]
[Thu Jul 30 12:44:02.392098 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/new.php
[Thu Jul 30 12:44:02.392149 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:02.508385 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:02.675441 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/il.php
[Thu Jul 30 12:44:02.675506 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:02.675773 2026] [ssl:error] [pid 3114778:tid 3114778] (70014)End of file found: [client 216.73.216.199:47251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:02.786975 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 12:44:02.997378 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/lite.php
[Thu Jul 30 12:44:02.997429 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:03.082046 2026] [security2:error] [pid 3115377:tid 3115377] [client 156.59.198.136:32140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5AxA459X4LvK7ndtF2AAAABI"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:03.198740 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/load.php
[Thu Jul 30 12:44:03.198797 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:03.213391 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:19432] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS0/custom_divisor
[Thu Jul 30 12:44:03.310435 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:03.462619 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-themes.php
[Thu Jul 30 12:44:03.462666 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:03.549769 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:11249] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:03.549793 2026] [core:error] [pid 3116967:tid 3116967] [client 4.225.203.146:11249] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:03.575797 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/xda.php
[Thu Jul 30 12:44:03.575866 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:03.731980 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/.trash7206
[Thu Jul 30 12:44:03.844052 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/doc.php
[Thu Jul 30 12:44:03.844115 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:03.987053 2026] [lsapi:warn] [pid 3112394:tid 3112394] [client 122.180.21.11:52631] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:44:03.993288 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/storage
[Thu Jul 30 12:44:04.105112 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content.php
[Thu Jul 30 12:44:04.105166 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:04.269848 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:04.381892 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:04.395398 2026] [security2:error] [pid 3109938:tid 3109938] [client 156.59.198.135:57408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5BMdMsoeyaeUbW1IkgAAAABs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:04.417950 2026] [security2:error] [pid 3116912:tid 3116912] [client 102.213.71.243:22950] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5BIGLqoOy4-80cIleoAAAACU"]
[Thu Jul 30 12:44:04.417994 2026] [security2:error] [pid 3116912:tid 3116912] [client 102.213.71.243:22950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5BIGLqoOy4-80cIleoAAAACU"]
[Thu Jul 30 12:44:04.418269 2026] [security2:error] [pid 3116912:tid 3116912] [client 102.213.71.243:22950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5BIGLqoOy4-80cIleoAAAACU"]
[Thu Jul 30 12:44:04.544833 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:04.656725 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:04.826666 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/cache.php
[Thu Jul 30 12:44:04.826716 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:04.934894 2026] [core:error] [pid 3110012:tid 3110012] [client 4.225.203.146:11139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:04.934920 2026] [core:error] [pid 3110012:tid 3110012] [client 4.225.203.146:11139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:04.939203 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/filemanager.php
[Thu Jul 30 12:44:04.939245 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:05.071743 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 12:44:05.071803 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:05.235088 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:05.358219 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 12:44:05.358268 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:05.370873 2026] [ssl:error] [pid 3115377:tid 3115377] (EAI 2)Name or service not known: [client 144.76.19.72:24598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:05.370895 2026] [ssl:error] [pid 3115377:tid 3115377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:05.443966 2026] [ssl:error] [pid 3119554:tid 3119554] (EAI 2)Name or service not known: [client 144.76.19.72:24608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:05.443998 2026] [ssl:error] [pid 3119554:tid 3119554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:05.454035 2026] [core:error] [pid 3099222:tid 3099222] [client 4.225.203.146:11157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:05.454055 2026] [core:error] [pid 3099222:tid 3099222] [client 4.225.203.146:11157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:05.511754 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/cd.php
[Thu Jul 30 12:44:05.511802 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:05.649863 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 12:44:05.649912 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:05.729470 2026] [security2:error] [pid 3112394:tid 3112394] [client 156.59.198.135:20960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5BUTdL6Jp66zvUQ0W-wAAADo"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:05.761837 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/lu4.php
[Thu Jul 30 12:44:05.761892 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:05.824012 2026] [core:error] [pid 3119556:tid 3119556] [client 4.225.203.146:37875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:05.824034 2026] [core:error] [pid 3119556:tid 3119556] [client 4.225.203.146:37875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:05.874628 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:05.986404 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:06.099914 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:06.194533 2026] [core:error] [pid 3115377:tid 3115377] [client 4.225.203.146:28266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:06.194564 2026] [core:error] [pid 3115377:tid 3115377] [client 4.225.203.146:28266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:06.212311 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/gecko-litespeed.php
[Thu Jul 30 12:44:06.212362 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:06.244295 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:19432] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory250/subsystem/uevent
[Thu Jul 30 12:44:06.324128 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/ant.php
[Thu Jul 30 12:44:06.324178 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:06.486432 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 12:44:06.486482 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:06.535393 2026] [cgi:error] [pid 3117040:tid 3117040] [client 4.225.203.146:38023] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:44:06.535721 2026] [core:error] [pid 3117040:tid 3117040] [client 4.225.203.146:38023] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:06.644096 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/storage
[Thu Jul 30 12:44:06.756603 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/tinyfilemanager.php
[Thu Jul 30 12:44:06.756658 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:06.868444 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:07.019408 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.php
[Thu Jul 30 12:44:07.019463 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:07.131595 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 12:44:07.131766 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:07.204060 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "ams5By31XQN39CUjS2HkiQAAABA"]
[Thu Jul 30 12:44:07.204282 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "ams5By31XQN39CUjS2HkiQAAABA"]
[Thu Jul 30 12:44:07.204478 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "ams5By31XQN39CUjS2HkiQAAABA"]
[Thu Jul 30 12:44:07.226938 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/api/.env"] [unique_id "ams5By31XQN39CUjS2HkigAAABA"]
[Thu Jul 30 12:44:07.227131 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/api/.env"] [unique_id "ams5By31XQN39CUjS2HkigAAABA"]
[Thu Jul 30 12:44:07.227310 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/api/.env"] [unique_id "ams5By31XQN39CUjS2HkigAAABA"]
[Thu Jul 30 12:44:07.242195 2026] [security2:error] [pid 3116968:tid 3116968] [client 156.59.198.136:42870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5B-eS3mRv_sZfKFjs8gAAAC4"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:07.247544 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/backend/.env"] [unique_id "ams5By31XQN39CUjS2HkiwAAABA"]
[Thu Jul 30 12:44:07.247713 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/backend/.env"] [unique_id "ams5By31XQN39CUjS2HkiwAAABA"]
[Thu Jul 30 12:44:07.247870 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/backend/.env"] [unique_id "ams5By31XQN39CUjS2HkiwAAABA"]
[Thu Jul 30 12:44:07.289413 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/admin/.env"] [unique_id "ams5By31XQN39CUjS2HkjQAAABA"]
[Thu Jul 30 12:44:07.289608 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/admin/.env"] [unique_id "ams5By31XQN39CUjS2HkjQAAABA"]
[Thu Jul 30 12:44:07.289783 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/admin/.env"] [unique_id "ams5By31XQN39CUjS2HkjQAAABA"]
[Thu Jul 30 12:44:07.304213 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/tool.php
[Thu Jul 30 12:44:07.304325 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:07.330846 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/laravel/.env"] [unique_id "ams5By31XQN39CUjS2HkjwAAABA"]
[Thu Jul 30 12:44:07.331027 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/laravel/.env"] [unique_id "ams5By31XQN39CUjS2HkjwAAABA"]
[Thu Jul 30 12:44:07.331209 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/laravel/.env"] [unique_id "ams5By31XQN39CUjS2HkjwAAABA"]
[Thu Jul 30 12:44:07.354841 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/core/.env"] [unique_id "ams5By31XQN39CUjS2HkkAAAABA"]
[Thu Jul 30 12:44:07.355018 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/core/.env"] [unique_id "ams5By31XQN39CUjS2HkkAAAABA"]
[Thu Jul 30 12:44:07.355213 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/core/.env"] [unique_id "ams5By31XQN39CUjS2HkkAAAABA"]
[Thu Jul 30 12:44:07.398707 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/.env.example"] [unique_id "ams5By31XQN39CUjS2HkkgAAABA"]
[Thu Jul 30 12:44:07.398886 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/.env.example"] [unique_id "ams5By31XQN39CUjS2HkkgAAABA"]
[Thu Jul 30 12:44:07.399082 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/.env.example"] [unique_id "ams5By31XQN39CUjS2HkkgAAABA"]
[Thu Jul 30 12:44:07.415902 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:07.419392 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/app/.env"] [unique_id "ams5By31XQN39CUjS2HkkwAAABA"]
[Thu Jul 30 12:44:07.419567 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/app/.env"] [unique_id "ams5By31XQN39CUjS2HkkwAAABA"]
[Thu Jul 30 12:44:07.419728 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/app/.env"] [unique_id "ams5By31XQN39CUjS2HkkwAAABA"]
[Thu Jul 30 12:44:07.439945 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/dev/.env"] [unique_id "ams5By31XQN39CUjS2HklAAAABA"]
[Thu Jul 30 12:44:07.440118 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/dev/.env"] [unique_id "ams5By31XQN39CUjS2HklAAAABA"]
[Thu Jul 30 12:44:07.440281 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/dev/.env"] [unique_id "ams5By31XQN39CUjS2HklAAAABA"]
[Thu Jul 30 12:44:07.508327 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/server/.env"] [unique_id "ams5By31XQN39CUjS2HklgAAABA"]
[Thu Jul 30 12:44:07.508517 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/server/.env"] [unique_id "ams5By31XQN39CUjS2HklgAAABA"]
[Thu Jul 30 12:44:07.508701 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/server/.env"] [unique_id "ams5By31XQN39CUjS2HklgAAABA"]
[Thu Jul 30 12:44:07.529279 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/.env.save"] [unique_id "ams5By31XQN39CUjS2HklwAAABA"]
[Thu Jul 30 12:44:07.529450 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/.env.save"] [unique_id "ams5By31XQN39CUjS2HklwAAABA"]
[Thu Jul 30 12:44:07.529644 2026] [security2:error] [pid 3109064:tid 3109064] [client 185.93.89.167:61653] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/.env.save"] [unique_id "ams5By31XQN39CUjS2HklwAAABA"]
[Thu Jul 30 12:44:07.569711 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:07.681448 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:07.793399 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:07.905430 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:08.017030 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-trackback.php
[Thu Jul 30 12:44:08.017100 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:08.150674 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/ws.php
[Thu Jul 30 12:44:08.150722 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:08.262697 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/.bod
[Thu Jul 30 12:44:08.356426 2026] [core:error] [pid 3097447:tid 3097447] (13)Permission denied: [client 216.73.216.199:19432] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty35/subsystem/ttyS3/uartclk
[Thu Jul 30 12:44:08.416473 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/0.php
[Thu Jul 30 12:44:08.416534 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:08.528176 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/1index.php
[Thu Jul 30 12:44:08.528229 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:08.536605 2026] [ssl:error] [pid 3117040:tid 3117040] (EAI 2)Name or service not known: [client 144.76.19.72:24610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:08.536630 2026] [ssl:error] [pid 3117040:tid 3117040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:08.555850 2026] [security2:error] [pid 3117039:tid 3117039] [client 156.59.198.135:19736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5CDvBMhsnxRce_3ys0gAAADw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:08.594227 2026] [ssl:error] [pid 3114895:tid 3114895] (EAI 2)Name or service not known: [client 144.76.19.72:24614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:08.594252 2026] [ssl:error] [pid 3114895:tid 3114895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:08.692858 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap
[Thu Jul 30 12:44:08.826831 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/dvve.php
[Thu Jul 30 12:44:08.826880 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:08.942232 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:09.054960 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/ws77.php
[Thu Jul 30 12:44:09.055014 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:09.166789 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/acme-challenge/index.php
[Thu Jul 30 12:44:09.166841 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:09.280241 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 12:44:09.401516 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:09.542946 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:09.678044 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/xx.php
[Thu Jul 30 12:44:09.678129 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:09.845845 2026] [core:error] [pid 3115377:tid 3115377] [client 4.225.203.146:37128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:09.845874 2026] [core:error] [pid 3115377:tid 3115377] [client 4.225.203.146:37128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:09.848854 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:09.969598 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:10.099580 2026] [security2:error] [pid 3117039:tid 3117039] [client 85.208.96.211:35966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1248.0.html"] [unique_id "ams5CjvBMhsnxRce_3ys0wAAADw"]
[Thu Jul 30 12:44:10.150382 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-the.php
[Thu Jul 30 12:44:10.150439 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:10.178197 2026] [ssl:error] [pid 3097447:tid 3097447] (70014)End of file found: [client 216.73.216.199:19432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:10.207178 2026] [core:error] [pid 3119555:tid 3119555] [client 4.225.203.146:28234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:10.207206 2026] [core:error] [pid 3119555:tid 3119555] [client 4.225.203.146:28234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:10.211448 2026] [security2:error] [pid 3104805:tid 3104805] [client 156.59.198.135:39314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5Cjyr-g9dOuarfHn3sQAAABY"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:10.262043 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/ws81.php
[Thu Jul 30 12:44:10.262114 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:10.427558 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/3.php
[Thu Jul 30 12:44:10.427611 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:10.430438 2026] [core:error] [pid 3117041:tid 3117041] [client 20.104.22.47:55171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:10.430460 2026] [core:error] [pid 3117041:tid 3117041] [client 20.104.22.47:55171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:10.539577 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/a1.php
[Thu Jul 30 12:44:10.539633 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:10.651759 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/ca5.php
[Thu Jul 30 12:44:10.651814 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:10.763625 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/install.php
[Thu Jul 30 12:44:10.763680 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:10.771947 2026] [core:error] [pid 3111722:tid 3111722] [client 20.104.22.47:55240] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:10.771974 2026] [core:error] [pid 3111722:tid 3111722] [client 20.104.22.47:55240] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:10.914230 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/radio.php
[Thu Jul 30 12:44:10.914283 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.026825 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:11.169000 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-signin.php
[Thu Jul 30 12:44:11.169050 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.281019 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/Ov-Simple1.php
[Thu Jul 30 12:44:11.281086 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.392629 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/fm.php
[Thu Jul 30 12:44:11.392692 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.505611 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/ftde.php
[Thu Jul 30 12:44:11.505663 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.549940 2026] [security2:error] [pid 3117040:tid 3117040] [client 156.59.198.136:27904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5C6cdie92pFBXL32e_QAAAD0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:11.561662 2026] [core:error] [pid 3101834:tid 3101834] [client 4.225.203.146:28258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:11.561686 2026] [core:error] [pid 3101834:tid 3101834] [client 4.225.203.146:28258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:11.618181 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/hplfuns.php
[Thu Jul 30 12:44:11.618235 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.651358 2026] [ssl:error] [pid 3112061:tid 3112061] (EAI 2)Name or service not known: [client 144.76.19.72:28434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:11.651385 2026] [ssl:error] [pid 3112061:tid 3112061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:11.690660 2026] [core:error] [pid 3112394:tid 3112394] (13)Permission denied: [client 216.73.216.199:22758] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory225/subsystem/uevent
[Thu Jul 30 12:44:11.705899 2026] [ssl:error] [pid 3111722:tid 3111722] (EAI 2)Name or service not known: [client 144.76.19.72:28450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:11.705944 2026] [ssl:error] [pid 3111722:tid 3111722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:11.792703 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/log.php
[Thu Jul 30 12:44:11.792756 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.863529 2026] [security2:error] [pid 3103881:tid 3103881] [client 114.119.144.31:43909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~17,14/request_format~html"] [unique_id "ams5C7NUtFuJht2VTfHrWgAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~17
[Thu Jul 30 12:44:11.906145 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/test.php
[Thu Jul 30 12:44:11.906224 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:11.971946 2026] [core:error] [pid 3104805:tid 3104805] [client 4.225.203.146:11248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:11.971982 2026] [core:error] [pid 3104805:tid 3104805] [client 4.225.203.146:11248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:12.048167 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/txets.php
[Thu Jul 30 12:44:12.048257 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:12.160337 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin.php
[Thu Jul 30 12:44:12.160392 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:12.272759 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:12.292947 2026] [ssl:error] [pid 3112394:tid 3112394] (70014)End of file found: [client 216.73.216.199:22758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:12.384716 2026] [core:error] [pid 3117039:tid 3117039] [client 20.104.22.47:55170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:12.384743 2026] [core:error] [pid 3117039:tid 3117039] [client 20.104.22.47:55170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:12.385392 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 12:44:12.541187 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-config-sample.php
[Thu Jul 30 12:44:12.541242 2026] [access_compat:error] [pid 3111817:tid 3111817] [client 52.238.199.152:4749] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:44:12.557837 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "ams5DDyr-g9dOuarfHn3swAAABY"]
[Thu Jul 30 12:44:12.558052 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "ams5DDyr-g9dOuarfHn3swAAABY"]
[Thu Jul 30 12:44:12.558283 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/.env"] [unique_id "ams5DDyr-g9dOuarfHn3swAAABY"]
[Thu Jul 30 12:44:12.577035 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/api/.env"] [unique_id "ams5DDyr-g9dOuarfHn3tAAAABY"]
[Thu Jul 30 12:44:12.577227 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/api/.env"] [unique_id "ams5DDyr-g9dOuarfHn3tAAAABY"]
[Thu Jul 30 12:44:12.577427 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/api/.env"] [unique_id "ams5DDyr-g9dOuarfHn3tAAAABY"]
[Thu Jul 30 12:44:12.596143 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/backend/.env"] [unique_id "ams5DDyr-g9dOuarfHn3tQAAABY"]
[Thu Jul 30 12:44:12.596340 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/backend/.env"] [unique_id "ams5DDyr-g9dOuarfHn3tQAAABY"]
[Thu Jul 30 12:44:12.596553 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/backend/.env"] [unique_id "ams5DDyr-g9dOuarfHn3tQAAABY"]
[Thu Jul 30 12:44:12.598342 2026] [ssl:error] [pid 3115377:tid 3115377] (70014)End of file found: [client 216.73.216.199:11247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:12.634709 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/admin/.env"] [unique_id "ams5DDyr-g9dOuarfHn3twAAABY"]
[Thu Jul 30 12:44:12.634894 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/admin/.env"] [unique_id "ams5DDyr-g9dOuarfHn3twAAABY"]
[Thu Jul 30 12:44:12.635087 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/admin/.env"] [unique_id "ams5DDyr-g9dOuarfHn3twAAABY"]
[Thu Jul 30 12:44:12.673238 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/laravel/.env"] [unique_id "ams5DDyr-g9dOuarfHn3uQAAABY"]
[Thu Jul 30 12:44:12.673435 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/laravel/.env"] [unique_id "ams5DDyr-g9dOuarfHn3uQAAABY"]
[Thu Jul 30 12:44:12.673661 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/laravel/.env"] [unique_id "ams5DDyr-g9dOuarfHn3uQAAABY"]
[Thu Jul 30 12:44:12.692381 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/core/.env"] [unique_id "ams5DDyr-g9dOuarfHn3ugAAABY"]
[Thu Jul 30 12:44:12.692548 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/core/.env"] [unique_id "ams5DDyr-g9dOuarfHn3ugAAABY"]
[Thu Jul 30 12:44:12.692741 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/core/.env"] [unique_id "ams5DDyr-g9dOuarfHn3ugAAABY"]
[Thu Jul 30 12:44:12.730607 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/.env.example"] [unique_id "ams5DDyr-g9dOuarfHn3vAAAABY"]
[Thu Jul 30 12:44:12.730797 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/.env.example"] [unique_id "ams5DDyr-g9dOuarfHn3vAAAABY"]
[Thu Jul 30 12:44:12.730997 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/.env.example"] [unique_id "ams5DDyr-g9dOuarfHn3vAAAABY"]
[Thu Jul 30 12:44:12.749683 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/app/.env"] [unique_id "ams5DDyr-g9dOuarfHn3vQAAABY"]
[Thu Jul 30 12:44:12.749839 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/app/.env"] [unique_id "ams5DDyr-g9dOuarfHn3vQAAABY"]
[Thu Jul 30 12:44:12.750020 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/app/.env"] [unique_id "ams5DDyr-g9dOuarfHn3vQAAABY"]
[Thu Jul 30 12:44:12.768797 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/dev/.env"] [unique_id "ams5DDyr-g9dOuarfHn3vgAAABY"]
[Thu Jul 30 12:44:12.768980 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/dev/.env"] [unique_id "ams5DDyr-g9dOuarfHn3vgAAABY"]
[Thu Jul 30 12:44:12.769195 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/dev/.env"] [unique_id "ams5DDyr-g9dOuarfHn3vgAAABY"]
[Thu Jul 30 12:44:12.771509 2026] [authz_core:error] [pid 3120570:tid 3120570] [client 57.141.0.65:58520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:44:12.772196 2026] [authz_core:error] [pid 3120570:tid 3120570] [client 57.141.0.65:58520] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:44:12.827296 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/server/.env"] [unique_id "ams5DDyr-g9dOuarfHn3wAAAABY"]
[Thu Jul 30 12:44:12.827504 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/server/.env"] [unique_id "ams5DDyr-g9dOuarfHn3wAAAABY"]
[Thu Jul 30 12:44:12.827713 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/server/.env"] [unique_id "ams5DDyr-g9dOuarfHn3wAAAABY"]
[Thu Jul 30 12:44:12.846516 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sudokulogicapp.com"] [uri "/.env.save"] [unique_id "ams5DDyr-g9dOuarfHn3wQAAABY"]
[Thu Jul 30 12:44:12.846701 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sudokulogicapp.com"] [uri "/.env.save"] [unique_id "ams5DDyr-g9dOuarfHn3wQAAABY"]
[Thu Jul 30 12:44:12.846892 2026] [security2:error] [pid 3104805:tid 3104805] [client 185.93.89.167:28099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sudokulogicapp.com"] [uri "/.env.save"] [unique_id "ams5DDyr-g9dOuarfHn3wQAAABY"]
[Thu Jul 30 12:44:12.863967 2026] [core:error] [pid 3117040:tid 3117040] [client 4.225.203.146:11171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:12.863987 2026] [core:error] [pid 3117040:tid 3117040] [client 4.225.203.146:11171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:13.286874 2026] [security2:error] [pid 3114895:tid 3114895] [client 156.59.198.136:52290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5DQo8BF9a5O5VtynNxQAAADs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:13.943041 2026] [core:error] [pid 3117039:tid 3117039] [client 20.104.22.47:55248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:13.943083 2026] [core:error] [pid 3117039:tid 3117039] [client 20.104.22.47:55248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:13.973468 2026] [security2:error] [pid 3114214:tid 3114214] [client 114.119.144.31:43913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~17,14/request_format~html"] [unique_id "ams5Da5NCW0Oyaj66OeYHAAAAAo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/request_format~html/cat_ids~17
[Thu Jul 30 12:44:14.352336 2026] [lsapi:warn] [pid 3119502:tid 3119502] [client 122.180.21.11:53263] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:44:14.473417 2026] [lsapi:warn] [pid 3120570:tid 3120570] [client 151.158.180.11:0] [host mail.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:44:14.490881 2026] [access_compat:error] [pid 3120626:tid 3120626] [client 52.238.199.152:27088] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:44:14.607664 2026] [access_compat:error] [pid 3120626:tid 3120626] [client 52.238.199.152:27088] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:44:14.738540 2026] [core:error] [pid 3120711:tid 3120711] [client 66.249.66.40:63540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:14.738584 2026] [core:error] [pid 3120711:tid 3120711] [client 66.249.66.40:63540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:14.760573 2026] [ssl:error] [pid 3120712:tid 3120712] (EAI 2)Name or service not known: [client 144.76.19.72:28466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:14.760611 2026] [ssl:error] [pid 3120712:tid 3120712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:14.816559 2026] [ssl:error] [pid 3120714:tid 3120714] (EAI 2)Name or service not known: [client 144.76.19.72:28468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:14.816600 2026] [ssl:error] [pid 3120714:tid 3120714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:14.833181 2026] [security2:error] [pid 3114892:tid 3114892] [client 156.59.198.136:26200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5Dnuu5L903ATREruscQAAAC0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:15.284021 2026] [core:error] [pid 3117039:tid 3117039] [client 20.104.22.47:54988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:15.284052 2026] [core:error] [pid 3117039:tid 3117039] [client 20.104.22.47:54988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:15.337743 2026] [security2:error] [pid 3119502:tid 3119502] [client 43.135.144.81:46800] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "ams5DyFWg5rYHm2gTuXhyAAAAAM"]
[Thu Jul 30 12:44:16.145279 2026] [security2:error] [pid 3097447:tid 3097447] [client 156.59.198.136:53408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5EAwdUtr6PLa6YOMlQAAAABw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:16.214268 2026] [core:error] [pid 3114845:tid 3114845] [client 66.249.66.194:44571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:16.214297 2026] [core:error] [pid 3114845:tid 3114845] [client 66.249.66.194:44571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:16.640551 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:55177] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:16.640578 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:55177] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:16.818241 2026] [security2:error] [pid 3104805:tid 3104805] [client 216.73.216.199:21615] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/imunify360.db"] [unique_id "ams5EDyr-g9dOuarfHn3xgAAABY"]
[Thu Jul 30 12:44:16.818554 2026] [security2:error] [pid 3104805:tid 3104805] [client 216.73.216.199:21615] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/imunify360.db"] [unique_id "ams5EDyr-g9dOuarfHn3xgAAABY"]
[Thu Jul 30 12:44:16.818797 2026] [security2:error] [pid 3104805:tid 3104805] [client 216.73.216.199:21615] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/imunify360.db"] [unique_id "ams5EDyr-g9dOuarfHn3xgAAABY"]
[Thu Jul 30 12:44:17.220229 2026] [core:error] [pid 3114895:tid 3114895] [client 20.104.22.47:55202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:17.220265 2026] [core:error] [pid 3114895:tid 3114895] [client 20.104.22.47:55202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:17.430960 2026] [security2:error] [pid 3119501:tid 3119501] [client 156.59.198.136:10512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5EX9-IF-pdvI93CK8_AAAAAI"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:17.584555 2026] [core:error] [pid 3090618:tid 3090618] [client 4.225.203.146:43752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:17.584593 2026] [core:error] [pid 3090618:tid 3090618] [client 4.225.203.146:43752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:17.768545 2026] [core:error] [pid 3110012:tid 3110012] [client 20.104.22.47:54977] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:17.768572 2026] [core:error] [pid 3110012:tid 3110012] [client 20.104.22.47:54977] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:17.874091 2026] [ssl:error] [pid 3114214:tid 3114214] (EAI 2)Name or service not known: [client 144.76.19.72:28474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:17.874124 2026] [ssl:error] [pid 3114214:tid 3114214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:17.926137 2026] [ssl:error] [pid 3114895:tid 3114895] (EAI 2)Name or service not known: [client 144.76.19.72:28490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:17.926163 2026] [ssl:error] [pid 3114895:tid 3114895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:18.324568 2026] [ssl:error] [pid 3104805:tid 3104805] (70014)End of file found: [client 216.73.216.199:21615] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:18.364728 2026] [core:error] [pid 3111722:tid 3111722] [client 20.104.22.47:54983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:18.364755 2026] [core:error] [pid 3111722:tid 3111722] [client 20.104.22.47:54983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:18.469511 2026] [core:error] [pid 3119556:tid 3119556] [client 4.225.203.146:37856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:18.469539 2026] [core:error] [pid 3119556:tid 3119556] [client 4.225.203.146:37856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:18.945476 2026] [security2:error] [pid 3090618:tid 3090618] [client 156.59.198.136:20354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5EjqpBC0FwvDMksEUTQAAAA0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:19.238599 2026] [core:error] [pid 3114895:tid 3114895] [client 4.225.203.146:28249] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:19.238623 2026] [core:error] [pid 3114895:tid 3114895] [client 4.225.203.146:28249] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:19.986205 2026] [core:error] [pid 3119453:tid 3119453] [client 20.104.22.47:54996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:19.986236 2026] [core:error] [pid 3119453:tid 3119453] [client 20.104.22.47:54996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:20.278463 2026] [ssl:error] [pid 3109938:tid 3109938] (70014)End of file found: [client 216.73.216.199:40020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:20.355452 2026] [core:error] [pid 3120712:tid 3120712] [client 4.225.203.146:37883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:20.355475 2026] [core:error] [pid 3120712:tid 3120712] [client 4.225.203.146:37883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:20.429759 2026] [security2:error] [pid 3114895:tid 3114895] [client 156.59.198.135:48696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5FAo8BF9a5O5VtynNyQAAADs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:20.988195 2026] [ssl:error] [pid 3114778:tid 3114778] (EAI 2)Name or service not known: [client 144.76.19.72:23516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:20.988227 2026] [ssl:error] [pid 3114778:tid 3114778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:21.041222 2026] [ssl:error] [pid 3119453:tid 3119453] (EAI 2)Name or service not known: [client 144.76.19.72:23520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:21.041251 2026] [ssl:error] [pid 3119453:tid 3119453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:21.167523 2026] [core:error] [pid 3090618:tid 3090618] [client 4.225.203.146:37870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:21.167561 2026] [core:error] [pid 3090618:tid 3090618] [client 4.225.203.146:37870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:21.729645 2026] [security2:error] [pid 3114895:tid 3114895] [client 156.59.198.136:29952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5FQo8BF9a5O5VtynNygAAADs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:22.403509 2026] [core:error] [pid 3117047:tid 3117047] (13)Permission denied: [client 216.73.216.199:20246] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory215/subsystem/uevent
[Thu Jul 30 12:44:22.425864 2026] [core:error] [pid 3090618:tid 3090618] [client 4.225.203.146:28225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:22.425887 2026] [core:error] [pid 3090618:tid 3090618] [client 4.225.203.146:28225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:22.945740 2026] [core:error] [pid 3114895:tid 3114895] [client 20.104.22.47:55021] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:22.945768 2026] [core:error] [pid 3114895:tid 3114895] [client 20.104.22.47:55021] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:22.987524 2026] [security2:error] [pid 3114845:tid 3114845] [client 196.217.102.35:61794] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5FpzVIeXbMuU6nld_AgAAACM"]
[Thu Jul 30 12:44:22.987568 2026] [security2:error] [pid 3114845:tid 3114845] [client 196.217.102.35:61794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5FpzVIeXbMuU6nld_AgAAACM"]
[Thu Jul 30 12:44:22.987801 2026] [security2:error] [pid 3114845:tid 3114845] [client 196.217.102.35:61794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5FpzVIeXbMuU6nld_AgAAACM"]
[Thu Jul 30 12:44:23.240431 2026] [security2:error] [pid 3120625:tid 3120625] [client 156.59.198.136:30226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5FyxrPAmk7itDnHMUAwAAAAw"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:23.614417 2026] [ssl:error] [pid 3117047:tid 3117047] (70014)End of file found: [client 216.73.216.199:20246] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:24.095136 2026] [ssl:error] [pid 3120625:tid 3120625] (EAI 2)Name or service not known: [client 144.76.19.72:23532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:24.095181 2026] [ssl:error] [pid 3120625:tid 3120625] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:24.148671 2026] [ssl:error] [pid 3119555:tid 3119555] (EAI 2)Name or service not known: [client 144.76.19.72:23548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:24.148705 2026] [ssl:error] [pid 3119555:tid 3119555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:24.741597 2026] [security2:error] [pid 3120713:tid 3120713] [client 156.59.198.136:58642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5GPtWsi_70OFsb6sKfwAAABc"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:24.774318 2026] [lsapi:warn] [pid 3119555:tid 3119555] [client 122.180.21.11:53882] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:44:25.118023 2026] [core:error] [pid 3101834:tid 3101834] (13)Permission denied: [client 216.73.216.199:64260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty49/subsystem/ttyS3/uartclk
[Thu Jul 30 12:44:25.274595 2026] [core:error] [pid 3114845:tid 3114845] [client 4.225.203.146:37835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:25.274630 2026] [core:error] [pid 3114845:tid 3114845] [client 4.225.203.146:37835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:26.256858 2026] [security2:error] [pid 3114845:tid 3114845] [client 156.59.198.135:20928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5GpzVIeXbMuU6nld_BAAAACM"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:26.744570 2026] [core:error] [pid 3121317:tid 3121317] [client 20.104.22.47:55186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:26.744610 2026] [core:error] [pid 3121317:tid 3121317] [client 20.104.22.47:55186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:27.204129 2026] [ssl:error] [pid 3121444:tid 3121444] (EAI 2)Name or service not known: [client 144.76.19.72:23560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:27.204175 2026] [ssl:error] [pid 3121444:tid 3121444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:27.259662 2026] [ssl:error] [pid 3121445:tid 3121445] (EAI 2)Name or service not known: [client 144.76.19.72:23566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:27.259700 2026] [ssl:error] [pid 3121445:tid 3121445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:27.371007 2026] [core:error] [pid 3114214:tid 3114214] [client 66.249.66.167:42714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:27.371037 2026] [core:error] [pid 3114214:tid 3114214] [client 66.249.66.167:42714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:27.381471 2026] [core:error] [pid 3114778:tid 3114778] [client 66.249.66.66:52896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:27.381500 2026] [core:error] [pid 3114778:tid 3114778] [client 66.249.66.66:52896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:27.752874 2026] [security2:error] [pid 3114892:tid 3114892] [client 156.59.198.135:51676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5G3uu5L903ATRErusdAAAAC0"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:28.557875 2026] [authz_core:error] [pid 3114845:tid 3114845] [client 66.249.66.33:38390] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:44:28.560552 2026] [authz_core:error] [pid 3114845:tid 3114845] [client 66.249.66.33:38390] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:44:28.921561 2026] [security2:error] [pid 3114778:tid 3114778] [client 185.191.171.14:62512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/percentage-of-black-population-in-sweden"] [unique_id "ams5HL1By8bOArCy2VW_BAAAABQ"]
[Thu Jul 30 12:44:29.046207 2026] [security2:error] [pid 3103881:tid 3103881] [client 156.59.198.135:29658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5HbNUtFuJht2VTfHrYAAAAAQ"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:29.577033 2026] [authz_core:error] [pid 3114845:tid 3114845] [client 66.249.66.33:38390] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:44:29.579699 2026] [authz_core:error] [pid 3114845:tid 3114845] [client 66.249.66.33:38390] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:44:29.814061 2026] [core:error] [pid 3121439:tid 3121439] [client 20.104.22.47:55172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:29.814116 2026] [core:error] [pid 3121439:tid 3121439] [client 20.104.22.47:55172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:30.264433 2026] [ssl:error] [pid 3120713:tid 3120713] (70014)End of file found: [client 216.73.216.199:41022] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:30.337827 2026] [ssl:error] [pid 3111817:tid 3111817] (EAI 2)Name or service not known: [client 144.76.19.72:52010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:30.337864 2026] [ssl:error] [pid 3111817:tid 3111817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:30.348389 2026] [security2:error] [pid 3114778:tid 3114778] [client 156.59.198.135:43702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5Hr1By8bOArCy2VW_BQAAABQ"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:30.392133 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:52012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:30.392169 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:30.757968 2026] [ssl:error] [pid 3117047:tid 3117047] (70014)End of file found: [client 216.73.216.199:35539] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:31.170503 2026] [ssl:error] [pid 3101834:tid 3101834] (70014)End of file found: [client 216.73.216.199:64260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:31.682198 2026] [security2:error] [pid 3111817:tid 3111817] [client 156.59.198.136:60212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5HzhsspRxBbmxMlPgrwAAACE"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:33.181559 2026] [security2:error] [pid 3121374:tid 3121374] [client 156.59.198.135:63016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5IXao5EE_RbitM5qRiQAAACQ"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:33.447475 2026] [ssl:error] [pid 3117040:tid 3117040] (EAI 2)Name or service not known: [client 144.76.19.72:52014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:33.447517 2026] [ssl:error] [pid 3117040:tid 3117040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:33.500456 2026] [ssl:error] [pid 3120711:tid 3120711] (EAI 2)Name or service not known: [client 144.76.19.72:52028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:33.500504 2026] [ssl:error] [pid 3120711:tid 3120711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:33.550797 2026] [core:error] [pid 3109938:tid 3109938] [client 20.104.22.47:55015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:33.550827 2026] [core:error] [pid 3109938:tid 3109938] [client 20.104.22.47:55015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:34.099452 2026] [core:error] [pid 3111817:tid 3111817] [client 20.104.22.47:55179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:34.099480 2026] [core:error] [pid 3111817:tid 3111817] [client 20.104.22.47:55179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:34.543580 2026] [security2:error] [pid 3116912:tid 3116912] [client 156.59.198.136:46436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5IoGLqoOy4-80cIlerQAAACU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:35.845408 2026] [lsapi:warn] [pid 3116967:tid 3116967] [client 122.180.21.11:54505] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:44:35.880477 2026] [security2:error] [pid 3117044:tid 3117044] [client 156.59.198.135:39034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5I2EvwcDGQxBXgny57QAAAEA"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:36.006279 2026] [authz_core:error] [pid 3121374:tid 3121374] [client 57.141.0.46:49930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:44:36.006934 2026] [authz_core:error] [pid 3121374:tid 3121374] [client 57.141.0.46:49930] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:44:36.065833 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55003] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:36.065858 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55003] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:36.555872 2026] [ssl:error] [pid 3121440:tid 3121440] (EAI 2)Name or service not known: [client 144.76.19.72:52042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:36.555915 2026] [ssl:error] [pid 3121440:tid 3121440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:36.583915 2026] [core:error] [pid 3109938:tid 3109938] (13)Permission denied: [client 216.73.216.199:42437] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory189/subsystem/uevent
[Thu Jul 30 12:44:36.585414 2026] [core:error] [pid 3116912:tid 3116912] [client 20.104.22.47:54979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:36.585434 2026] [core:error] [pid 3116912:tid 3116912] [client 20.104.22.47:54979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:36.612602 2026] [ssl:error] [pid 3120713:tid 3120713] (EAI 2)Name or service not known: [client 144.76.19.72:52048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:36.612636 2026] [ssl:error] [pid 3120713:tid 3120713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:36.727147 2026] [core:error] [pid 3114778:tid 3114778] [client 57.141.0.11:33644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:36.727181 2026] [core:error] [pid 3114778:tid 3114778] [client 57.141.0.11:33644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:36.821293 2026] [authz_core:error] [pid 3119557:tid 3119557] [client 57.141.0.8:60290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:44:36.821922 2026] [authz_core:error] [pid 3119557:tid 3119557] [client 57.141.0.8:60290] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:44:37.073050 2026] [core:error] [pid 3117047:tid 3117047] [client 20.104.22.47:55184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:37.073087 2026] [core:error] [pid 3117047:tid 3117047] [client 20.104.22.47:55184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:37.364582 2026] [security2:error] [pid 3121444:tid 3121444] [client 156.59.198.135:44006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5JY8MvzdlgmmfxRjcqAAAADk"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:37.736464 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:54984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:37.736499 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:54984] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:38.277322 2026] [core:error] [pid 3121440:tid 3121440] [client 20.104.22.47:55175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:38.277348 2026] [core:error] [pid 3121440:tid 3121440] [client 20.104.22.47:55175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:38.733409 2026] [security2:error] [pid 3114778:tid 3114778] [client 156.59.198.136:13814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5Jr1By8bOArCy2VW_CQAAABQ"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:38.765641 2026] [core:error] [pid 3117042:tid 3117042] [client 20.104.22.47:55007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:38.765669 2026] [core:error] [pid 3117042:tid 3117042] [client 20.104.22.47:55007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:38.997212 2026] [core:error] [pid 3110012:tid 3110012] [client 66.249.64.170:56661] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:38.997238 2026] [core:error] [pid 3110012:tid 3110012] [client 66.249.64.170:56661] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:39.669751 2026] [ssl:error] [pid 3119555:tid 3119555] (EAI 2)Name or service not known: [client 144.76.19.72:22436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:39.669778 2026] [ssl:error] [pid 3119555:tid 3119555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:39.725843 2026] [ssl:error] [pid 3121438:tid 3121438] (EAI 2)Name or service not known: [client 144.76.19.72:22446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:39.725873 2026] [ssl:error] [pid 3121438:tid 3121438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:39.847158 2026] [core:error] [pid 3120714:tid 3120714] [client 20.104.22.47:55031] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:39.847183 2026] [core:error] [pid 3120714:tid 3120714] [client 20.104.22.47:55031] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:40.029922 2026] [core:error] [pid 3121440:tid 3121440] [client 66.249.66.39:48032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:40.029949 2026] [core:error] [pid 3121440:tid 3121440] [client 66.249.66.39:48032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:40.242949 2026] [security2:error] [pid 3121444:tid 3121444] [client 156.59.198.136:17314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5KI8MvzdlgmmfxRjcqQAAADk"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:40.673045 2026] [security2:error] [pid 3117042:tid 3117042] [client 43.156.37.91:36702] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ilkagriese.com"] [uri "/"] [unique_id "ams5KOhH87pnVhbDC904QwAAAD8"]
[Thu Jul 30 12:44:41.099488 2026] [core:error] [pid 3109938:tid 3109938] (13)Permission denied: [client 216.73.216.199:42437] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory108/subsystem/uevent
[Thu Jul 30 12:44:41.367228 2026] [authz_core:error] [pid 3114778:tid 3114778] [client 57.141.0.54:62658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:44:41.367854 2026] [authz_core:error] [pid 3114778:tid 3114778] [client 57.141.0.54:62658] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:44:41.621114 2026] [security2:error] [pid 3121438:tid 3121438] [client 156.59.198.136:36482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5KSPjokfRztinGlL7_AAAADI"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:41.876357 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:54980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:41.876398 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:54980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:42.573697 2026] [core:error] [pid 3116825:tid 3116825] [client 20.104.22.47:55016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:42.573725 2026] [core:error] [pid 3116825:tid 3116825] [client 20.104.22.47:55016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:42.785794 2026] [ssl:error] [pid 3114778:tid 3114778] (EAI 2)Name or service not known: [client 144.76.19.72:22460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:42.785823 2026] [ssl:error] [pid 3114778:tid 3114778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:42.840595 2026] [ssl:error] [pid 3111722:tid 3111722] (EAI 2)Name or service not known: [client 144.76.19.72:22476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:42.840624 2026] [ssl:error] [pid 3111722:tid 3111722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:42.906153 2026] [ssl:error] [pid 3109938:tid 3109938] (70014)End of file found: [client 216.73.216.199:42437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:42.938954 2026] [security2:error] [pid 3119502:tid 3119502] [client 156.59.198.135:40024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5KiFWg5rYHm2gTuXh0AAAAAM"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:43.009121 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:54989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:43.009144 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:54989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:43.553757 2026] [core:error] [pid 3119555:tid 3119555] [client 20.104.22.47:55008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:43.553787 2026] [core:error] [pid 3119555:tid 3119555] [client 20.104.22.47:55008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:43.809273 2026] [ssl:error] [pid 3114214:tid 3114214] (70014)End of file found: [client 216.73.216.199:6925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:44.339029 2026] [core:error] [pid 3121437:tid 3121437] [client 20.104.22.47:55178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:44.339058 2026] [core:error] [pid 3121437:tid 3121437] [client 20.104.22.47:55178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:44.423807 2026] [security2:error] [pid 3104805:tid 3104805] [client 156.59.198.136:49138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5LDyr-g9dOuarfHn30AAAABY"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:44.992869 2026] [security2:error] [pid 3119555:tid 3119555] [client 185.191.171.12:15790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5238.0/prev_next,next.html"] [unique_id "ams5LJV90pVzOMqzLVhTUQAAAAc"]
[Thu Jul 30 12:44:45.541301 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:55643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:45.541329 2026] [core:error] [pid 3119501:tid 3119501] [client 20.104.22.47:55643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:45.699449 2026] [security2:error] [pid 3116967:tid 3116967] [client 156.59.198.136:13768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5LcDqzxhBbBiF5TTuNgAAACg"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:45.875384 2026] [lsapi:warn] [pid 3120570:tid 3120570] [client 122.180.21.11:55119] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:44:45.898547 2026] [ssl:error] [pid 3121376:tid 3121376] (EAI 2)Name or service not known: [client 144.76.19.72:22482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:45.898576 2026] [ssl:error] [pid 3121376:tid 3121376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:45.954679 2026] [ssl:error] [pid 3119555:tid 3119555] (EAI 2)Name or service not known: [client 144.76.19.72:22492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:45.954711 2026] [ssl:error] [pid 3119555:tid 3119555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:46.098131 2026] [core:error] [pid 3114845:tid 3114845] [client 20.104.22.47:55628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:46.098159 2026] [core:error] [pid 3114845:tid 3114845] [client 20.104.22.47:55628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:47.417255 2026] [security2:error] [pid 3119555:tid 3119555] [client 156.59.198.135:64206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5L5V90pVzOMqzLVhTUgAAAAc"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:47.479658 2026] [core:error] [pid 3120570:tid 3120570] [client 20.104.22.47:55622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:47.479688 2026] [core:error] [pid 3120570:tid 3120570] [client 20.104.22.47:55622] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:48.031341 2026] [core:error] [pid 3121445:tid 3121445] [client 20.104.22.47:55627] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:48.031368 2026] [core:error] [pid 3121445:tid 3121445] [client 20.104.22.47:55627] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:48.680748 2026] [core:error] [pid 3119555:tid 3119555] [client 20.104.22.47:55647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:48.680773 2026] [core:error] [pid 3119555:tid 3119555] [client 20.104.22.47:55647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:48.738971 2026] [security2:error] [pid 3117041:tid 3117041] [client 156.59.198.136:42684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5MFQLWsvR8-HEeyuydwAAAD4"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:49.237513 2026] [core:error] [pid 3114214:tid 3114214] [client 20.104.22.47:55674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:49.237537 2026] [core:error] [pid 3114214:tid 3114214] [client 20.104.22.47:55674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:49.298887 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:22494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:49.298911 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:49.375421 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:22510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:49.375458 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:50.026421 2026] [access_compat:error] [pid 3122409:tid 3122409] [client 5.127.0.46:60056] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:44:50.075303 2026] [core:error] [pid 3099188:tid 3099188] [client 20.104.22.47:55672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:50.075328 2026] [core:error] [pid 3099188:tid 3099188] [client 20.104.22.47:55672] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:50.254294 2026] [core:error] [pid 3090618:tid 3090618] (13)Permission denied: [client 216.73.216.199:26366] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/virtio_net/uevent
[Thu Jul 30 12:44:50.566762 2026] [security2:error] [pid 3117041:tid 3117041] [client 156.59.198.136:57348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5MlQLWsvR8-HEeyuyeAAAAD4"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:51.183044 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:55508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:51.183078 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:55508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:51.458205 2026] [core:error] [pid 3090618:tid 3090618] (13)Permission denied: [client 216.73.216.199:26366] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ftrace_event_field/usersize
[Thu Jul 30 12:44:52.427960 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:27432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:52.427998 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:52.482427 2026] [ssl:error] [pid 3114778:tid 3114778] (EAI 2)Name or service not known: [client 144.76.19.72:27436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:52.482453 2026] [ssl:error] [pid 3114778:tid 3114778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:52.611861 2026] [security2:error] [pid 3115377:tid 3115377] [client 156.59.198.135:18576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5NBA459X4LvK7ndtF6AAAABI"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:52.662280 2026] [ssl:error] [pid 3090618:tid 3090618] (70014)End of file found: [client 216.73.216.199:26366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:52.702034 2026] [core:error] [pid 3120714:tid 3120714] [client 20.104.22.47:55617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:52.702082 2026] [core:error] [pid 3120714:tid 3120714] [client 20.104.22.47:55617] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:52.985687 2026] [security2:error] [pid 3121437:tid 3121437] [client 110.249.202.135:43988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.plastic-sheeting.org"] [uri "/robots.txt"] [unique_id "ams5NL0EBB981O6_adDGPAAAADA"]
[Thu Jul 30 12:44:54.146188 2026] [security2:error] [pid 3104805:tid 3104805] [client 156.59.198.136:24554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5Njyr-g9dOuarfHn30wAAABY"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:54.256530 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:55535] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:54.256558 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:55535] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:54.618906 2026] [core:error] [pid 3121437:tid 3121437] [client 66.249.66.167:53563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:54.618941 2026] [core:error] [pid 3121437:tid 3121437] [client 66.249.66.167:53563] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:54.821105 2026] [authz_core:error] [pid 3121445:tid 3121445] [client 18.211.55.47:51029] AH01630: client denied by server configuration: /home/lukess/public_html/error_log
[Thu Jul 30 12:44:55.540393 2026] [ssl:error] [pid 3121437:tid 3121437] (EAI 2)Name or service not known: [client 144.76.19.72:27450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:55.540432 2026] [ssl:error] [pid 3121437:tid 3121437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:55.593887 2026] [ssl:error] [pid 3111817:tid 3111817] (EAI 2)Name or service not known: [client 144.76.19.72:27462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:55.593918 2026] [ssl:error] [pid 3111817:tid 3111817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:55.651361 2026] [security2:error] [pid 3116967:tid 3116967] [client 156.59.198.135:30270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5N8DqzxhBbBiF5TTuOQAAACg"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:56.312079 2026] [lsapi:warn] [pid 3121445:tid 3121445] [client 122.180.21.11:55732] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:44:56.774407 2026] [ssl:error] [pid 3080545:tid 3080545] (70014)End of file found: [client 216.73.216.199:11865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:57.079847 2026] [ssl:error] [pid 3117039:tid 3117039] (70014)End of file found: [client 216.73.216.199:5597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:57.174526 2026] [security2:error] [pid 3121375:tid 3121375] [client 156.59.198.136:54276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5OfnH_A9oDZTulrtPMgAAACs"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:57.401980 2026] [core:error] [pid 3115377:tid 3115377] [client 20.104.22.47:55515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:57.402014 2026] [core:error] [pid 3115377:tid 3115377] [client 20.104.22.47:55515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:58.500500 2026] [security2:error] [pid 3112061:tid 3112061] [client 156.59.198.136:15094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5OpXSh_muGvfVwUamIAAAADU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:44:58.668804 2026] [ssl:error] [pid 3120711:tid 3120711] (EAI 2)Name or service not known: [client 144.76.19.72:27474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:58.668847 2026] [ssl:error] [pid 3120711:tid 3120711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:58.707635 2026] [core:error] [pid 3121440:tid 3121440] [client 20.104.22.47:55679] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:58.707665 2026] [core:error] [pid 3121440:tid 3121440] [client 20.104.22.47:55679] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:44:58.723727 2026] [ssl:error] [pid 3120714:tid 3120714] (EAI 2)Name or service not known: [client 144.76.19.72:27488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:44:58.723750 2026] [ssl:error] [pid 3120714:tid 3120714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:44:58.997582 2026] [ssl:error] [pid 3109938:tid 3109938] (70014)End of file found: [client 216.73.216.199:1221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:44:59.496138 2026] [access_compat:error] [pid 3121376:tid 3121376] [client 45.158.164.139:36224] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:45:00.165781 2026] [security2:error] [pid 3120711:tid 3120711] [client 156.59.198.135:42938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5PCiqAem9v9E6ZYLDXQAAABE"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:45:00.224969 2026] [core:error] [pid 3114845:tid 3114845] [client 20.104.22.47:55450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:00.224996 2026] [core:error] [pid 3114845:tid 3114845] [client 20.104.22.47:55450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:01.675854 2026] [security2:error] [pid 3122826:tid 3122826] [client 156.59.198.135:18822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5PUZFBIjyaJhOQjoxrQAAAAQ"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:45:01.768436 2026] [core:error] [pid 3114845:tid 3114845] [client 20.104.22.47:55484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:01.768466 2026] [core:error] [pid 3114845:tid 3114845] [client 20.104.22.47:55484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:01.804531 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 12:45:01.874598 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:56786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:01.874628 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:02.122856 2026] [ssl:error] [pid 3117041:tid 3117041] (EAI 2)Name or service not known: [client 144.76.19.72:56798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:02.122899 2026] [ssl:error] [pid 3117041:tid 3117041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:02.559594 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 12:45:02.610838 2026] [ssl:error] [pid 3117041:tid 3117041] (70014)End of file found: [client 216.73.216.199:31687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:02.963299 2026] [core:error] [pid 3122972:tid 3122972] [client 20.104.22.47:55433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:02.963357 2026] [core:error] [pid 3122972:tid 3122972] [client 20.104.22.47:55433] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:03.290265 2026] [security2:error] [pid 3122972:tid 3122972] [client 156.59.198.135:27636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5P1QmGzE-Z2B1AV7G7gAAAAk"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:45:03.352811 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 12:45:03.853641 2026] [security2:error] [pid 3109064:tid 3109064] [client 43.155.26.193:43756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "ams5Py31XQN39CUjS2Hk8wAAABA"]
[Thu Jul 30 12:45:04.235827 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 12:45:04.597710 2026] [security2:error] [pid 3112061:tid 3112061] [client 156.59.198.135:33176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5QJXSh_muGvfVwUamIgAAADU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:45:04.783644 2026] [authz_core:error] [pid 3122975:tid 3122975] [client 20.79.250.162:13389] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/l10n/error_log
[Thu Jul 30 12:45:05.176710 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:56802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:05.176743 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:05.229420 2026] [ssl:error] [pid 3111722:tid 3111722] (EAI 2)Name or service not known: [client 144.76.19.72:56812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:05.229450 2026] [ssl:error] [pid 3111722:tid 3111722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:05.396706 2026] [core:error] [pid 3121376:tid 3121376] [client 20.104.22.47:55487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:05.396734 2026] [core:error] [pid 3121376:tid 3121376] [client 20.104.22.47:55487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:05.420378 2026] [core:error] [pid 3121375:tid 3121375] [client 66.249.66.195:60266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:05.421032 2026] [core:error] [pid 3121375:tid 3121375] [client 66.249.66.195:60266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:05.878117 2026] [security2:error] [pid 3123045:tid 3123045] [client 43.155.26.193:33204] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "ams5QYogiTdslne5aOicMQAAAB4"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 12:45:06.159782 2026] [security2:error] [pid 3123046:tid 3123046] [client 156.59.198.135:29392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf"] [unique_id "ams5QsbMKeq25OBAHP9GHAAAACU"], referer: https://www.prosperon.co.uk/assets/whitepapers/Prosperon%20Networks/Terms%20&%20Conditions.pdf
[Thu Jul 30 12:45:06.424077 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55503] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:06.424122 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55503] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:06.486245 2026] [lsapi:warn] [pid 3123045:tid 3123045] [client 43.155.26.193:33204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 12:45:06.486294 2026] [lsapi:warn] [pid 3123045:tid 3123045] [client 43.155.26.193:33204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 12:45:06.521474 2026] [ssl:error] [pid 3121439:tid 3121439] (70014)End of file found: [client 216.73.216.199:4596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:06.714692 2026] [lsapi:warn] [pid 3106594:tid 3106594] [client 122.180.21.11:56346] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:45:07.022770 2026] [ssl:error] [pid 3121376:tid 3121376] (70014)End of file found: [client 216.73.216.199:10357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:07.432189 2026] [core:error] [pid 3122827:tid 3122827] [client 20.104.22.47:55442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:07.432215 2026] [core:error] [pid 3122827:tid 3122827] [client 20.104.22.47:55442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:07.925393 2026] [core:error] [pid 3121317:tid 3121317] (13)Permission denied: [client 216.73.216.199:37798] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS0/iomem_base
[Thu Jul 30 12:45:08.284532 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:56814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:08.284565 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:08.359675 2026] [ssl:error] [pid 3112061:tid 3112061] (EAI 2)Name or service not known: [client 144.76.19.72:56826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:08.359702 2026] [ssl:error] [pid 3112061:tid 3112061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:08.520334 2026] [authz_core:error] [pid 3120570:tid 3120570] [client 169.58.39.192:59360] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:45:09.062632 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 12:45:09.646754 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 12:45:09.773706 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:09.773734 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:10.425751 2026] [core:error] [pid 3106594:tid 3106594] [client 20.104.22.47:55441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:10.425779 2026] [core:error] [pid 3106594:tid 3106594] [client 20.104.22.47:55441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:10.444011 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 12:45:10.999398 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 12:45:11.413352 2026] [ssl:error] [pid 3120570:tid 3120570] (EAI 2)Name or service not known: [client 144.76.19.72:39610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:11.413392 2026] [ssl:error] [pid 3120570:tid 3120570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:11.466881 2026] [ssl:error] [pid 3120714:tid 3120714] (EAI 2)Name or service not known: [client 144.76.19.72:39620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:11.466916 2026] [ssl:error] [pid 3120714:tid 3120714] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:11.768020 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 12:45:11.861274 2026] [authz_core:error] [pid 3123048:tid 3123048] [client 169.58.39.192:60576] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 12:45:11.956208 2026] [ssl:error] [pid 3121317:tid 3121317] (70014)End of file found: [client 216.73.216.199:37798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:12.162001 2026] [security2:error] [pid 3101574:tid 3101574] [client 47.128.116.122:44190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.theislipgarage.co.uk"] [uri "/blog"] [unique_id "ams5SIj-kqtTHx5Fa2UI4AAAAAY"]
[Thu Jul 30 12:45:12.296439 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 12:45:13.747487 2026] [authz_core:error] [pid 3123045:tid 3123045] [client 57.141.0.49:55014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:45:13.748120 2026] [authz_core:error] [pid 3123045:tid 3123045] [client 57.141.0.49:55014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:45:14.174612 2026] [authz_core:error] [pid 3117044:tid 3117044] [client 4.223.71.149:20588] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/l10n/error_log
[Thu Jul 30 12:45:14.255536 2026] [authz_core:error] [pid 3117044:tid 3117044] [client 4.223.71.149:20588] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:45:14.520833 2026] [ssl:error] [pid 3123048:tid 3123048] (EAI 2)Name or service not known: [client 144.76.19.72:39636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:14.520882 2026] [ssl:error] [pid 3123048:tid 3123048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:14.577363 2026] [ssl:error] [pid 3114895:tid 3114895] (EAI 2)Name or service not known: [client 144.76.19.72:39642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:14.577390 2026] [ssl:error] [pid 3114895:tid 3114895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:14.700645 2026] [core:error] [pid 3080545:tid 3080545] [client 20.104.22.47:55090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:14.700672 2026] [core:error] [pid 3080545:tid 3080545] [client 20.104.22.47:55090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:15.567856 2026] [core:error] [pid 3099222:tid 3099222] (13)Permission denied: [client 216.73.216.199:32075] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS3/port
[Thu Jul 30 12:45:16.096004 2026] [authz_core:error] [pid 3114895:tid 3114895] [client 169.58.39.192:61925] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:45:16.478782 2026] [ssl:error] [pid 3099222:tid 3099222] (70014)End of file found: [client 216.73.216.199:32075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:17.002816 2026] [core:error] [pid 3119555:tid 3119555] [client 20.104.22.47:55476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:17.002844 2026] [core:error] [pid 3119555:tid 3119555] [client 20.104.22.47:55476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:17.088178 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/term.php
[Thu Jul 30 12:45:17.318878 2026] [lsapi:warn] [pid 3117042:tid 3117042] [client 122.180.21.11:56964] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:45:17.618464 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/term.php
[Thu Jul 30 12:45:17.637042 2026] [ssl:error] [pid 3123757:tid 3123757] (EAI 2)Name or service not known: [client 144.76.19.72:39648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:17.637120 2026] [ssl:error] [pid 3123757:tid 3123757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:17.683520 2026] [ssl:error] [pid 3119501:tid 3119501] (70014)End of file found: [client 216.73.216.199:50320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:17.692666 2026] [ssl:error] [pid 3123051:tid 3123051] (EAI 2)Name or service not known: [client 144.76.19.72:39654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:17.692701 2026] [ssl:error] [pid 3123051:tid 3123051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:17.983233 2026] [ssl:error] [pid 3119555:tid 3119555] (70014)End of file found: [client 216.73.216.199:13680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:18.090268 2026] [core:error] [pid 3123757:tid 3123757] [client 66.249.66.167:54323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:18.090305 2026] [core:error] [pid 3123757:tid 3123757] [client 66.249.66.167:54323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:18.440338 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/ioxi-o.php
[Thu Jul 30 12:45:18.795921 2026] [core:error] [pid 3121317:tid 3121317] [client 20.104.22.47:55583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:18.795952 2026] [core:error] [pid 3121317:tid 3121317] [client 20.104.22.47:55583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:19.025846 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/ioxi-o.php
[Thu Jul 30 12:45:19.193828 2026] [security2:error] [pid 3123051:tid 3123051] [client 177.37.154.28:40163] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5TwJzqrdqyNc-bS06NwAAADg"]
[Thu Jul 30 12:45:19.193874 2026] [security2:error] [pid 3123051:tid 3123051] [client 177.37.154.28:40163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5TwJzqrdqyNc-bS06NwAAADg"]
[Thu Jul 30 12:45:19.194182 2026] [security2:error] [pid 3123051:tid 3123051] [client 177.37.154.28:40163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5TwJzqrdqyNc-bS06NwAAADg"]
[Thu Jul 30 12:45:19.428606 2026] [authz_core:error] [pid 3101574:tid 3101574] [client 169.58.39.192:63044] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 12:45:19.777475 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 12:45:20.378891 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 12:45:20.747922 2026] [ssl:error] [pid 3111817:tid 3111817] (EAI 2)Name or service not known: [client 144.76.19.72:24184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:20.747953 2026] [ssl:error] [pid 3111817:tid 3111817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:20.805003 2026] [ssl:error] [pid 3121445:tid 3121445] (EAI 2)Name or service not known: [client 144.76.19.72:24196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:20.805028 2026] [ssl:error] [pid 3121445:tid 3121445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:21.195597 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/alfa.php
[Thu Jul 30 12:45:21.719916 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/alfa.php
[Thu Jul 30 12:45:21.808080 2026] [ssl:error] [pid 3123046:tid 3123046] (70014)End of file found: [client 216.73.216.199:1419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:22.208451 2026] [security2:error] [pid 3122410:tid 3122410] [client 74.7.243.244:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.revoracing.org.uk"] [uri "/"] [unique_id "ams5UpkufcbC6cVZ5ITJPwAAAAM"]
[Thu Jul 30 12:45:22.208862 2026] [security2:error] [pid 3123713:tid 3123713] [client 127.0.0.1:51316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "ams5UmJXM-M4iVya05c8WQAAAAo"]
[Thu Jul 30 12:45:22.978756 2026] [security2:error] [pid 3099222:tid 3099222] [client 41.203.198.76:42694] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5UmmJMDE7Ux8aWFYgewAAABk"]
[Thu Jul 30 12:45:22.978806 2026] [security2:error] [pid 3099222:tid 3099222] [client 41.203.198.76:42694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5UmmJMDE7Ux8aWFYgewAAABk"]
[Thu Jul 30 12:45:22.979082 2026] [security2:error] [pid 3099222:tid 3099222] [client 41.203.198.76:42694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5UmmJMDE7Ux8aWFYgewAAABk"]
[Thu Jul 30 12:45:23.725994 2026] [lsapi:warn] [pid 3122975:tid 3122975] [client 216.73.216.199:38199] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Constant PASSWORD_DEFAULT already defined in /var/softaculous/moodle39/update_pass.php on line 17\n
[Thu Jul 30 12:45:23.861315 2026] [ssl:error] [pid 3119555:tid 3119555] (EAI 2)Name or service not known: [client 144.76.19.72:24212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:23.861343 2026] [ssl:error] [pid 3119555:tid 3119555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:23.917033 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:24220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:23.917091 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:24.093781 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/elp.php
[Thu Jul 30 12:45:24.654530 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/elp.php
[Thu Jul 30 12:45:24.927769 2026] [core:error] [pid 3122975:tid 3122975] (13)Permission denied: [client 216.73.216.199:38199] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty61/subsystem/ttyS0/uartclk
[Thu Jul 30 12:45:25.405815 2026] [ssl:error] [pid 3122975:tid 3122975] (70014)End of file found: [client 216.73.216.199:38199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:25.467960 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 12:45:25.991550 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 12:45:26.308121 2026] [core:error] [pid 3122972:tid 3122972] (13)Permission denied: [client 216.73.216.199:27148] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/sanity_checks
[Thu Jul 30 12:45:26.766159 2026] [access_compat:error] [pid 3115377:tid 3115377] [client 20.104.22.47:61688] AH01797: client denied by server configuration: /home/thepryor/public_html/666.php
[Thu Jul 30 12:45:26.972768 2026] [ssl:error] [pid 3122795:tid 3122795] (EAI 2)Name or service not known: [client 144.76.19.72:24236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:26.972814 2026] [ssl:error] [pid 3122795:tid 3122795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:27.026230 2026] [ssl:error] [pid 3104805:tid 3104805] (EAI 2)Name or service not known: [client 144.76.19.72:24242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:27.026267 2026] [ssl:error] [pid 3104805:tid 3104805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:27.332224 2026] [access_compat:error] [pid 3099188:tid 3099188] [client 20.104.22.47:61635] AH01797: client denied by server configuration: /home/thepryor/public_html/666.php
[Thu Jul 30 12:45:27.346440 2026] [core:error] [pid 3122973:tid 3122973] [client 20.104.22.47:55613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:27.346471 2026] [core:error] [pid 3122973:tid 3122973] [client 20.104.22.47:55613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:27.842960 2026] [lsapi:warn] [pid 3122795:tid 3122795] [client 122.180.21.11:57570] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:45:28.507516 2026] [security2:error] [pid 3123046:tid 3123046] [client 43.164.196.244:35754] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "juliaashmore.org"] [uri "/"] [unique_id "ams5WMbMKeq25OBAHP9GJAAAACU"]
[Thu Jul 30 12:45:28.677760 2026] [security2:error] [pid 3114846:tid 3114846] [client 179.130.184.137:47418] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5WANZVd-j5eKO3rf1IgAAACo"]
[Thu Jul 30 12:45:28.677827 2026] [security2:error] [pid 3114846:tid 3114846] [client 179.130.184.137:47418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5WANZVd-j5eKO3rf1IgAAACo"]
[Thu Jul 30 12:45:28.678172 2026] [security2:error] [pid 3114846:tid 3114846] [client 179.130.184.137:47418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5WANZVd-j5eKO3rf1IgAAACo"]
[Thu Jul 30 12:45:28.932082 2026] [core:error] [pid 3122973:tid 3122973] [client 20.104.22.47:55601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:28.932108 2026] [core:error] [pid 3122973:tid 3122973] [client 20.104.22.47:55601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:29.028125 2026] [authz_core:error] [pid 3117044:tid 3117044] [client 4.223.71.149:20588] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 12:45:29.478724 2026] [security2:error] [pid 3122372:tid 3122372] [client 185.191.171.7:54370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/toy-caldwell-house"] [unique_id "ams5WYMFjb7tQ-mRB5eF3wAAAAA"]
[Thu Jul 30 12:45:30.100309 2026] [ssl:error] [pid 3123046:tid 3123046] (EAI 2)Name or service not known: [client 144.76.19.72:60158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:30.100350 2026] [ssl:error] [pid 3123046:tid 3123046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:30.153574 2026] [ssl:error] [pid 3101834:tid 3101834] (EAI 2)Name or service not known: [client 144.76.19.72:60172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:30.153606 2026] [ssl:error] [pid 3101834:tid 3101834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:30.228025 2026] [ssl:error] [pid 3122972:tid 3122972] (70014)End of file found: [client 216.73.216.199:27148] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:31.917916 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.66:49708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:45:31.918581 2026] [authz_core:error] [pid 3101834:tid 3101834] [client 57.141.0.66:49708] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:45:32.033529 2026] [ssl:error] [pid 3122410:tid 3122410] (70014)End of file found: [client 216.73.216.199:27880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:33.212002 2026] [ssl:error] [pid 3121445:tid 3121445] (EAI 2)Name or service not known: [client 144.76.19.72:60182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:33.212028 2026] [ssl:error] [pid 3121445:tid 3121445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:33.267903 2026] [ssl:error] [pid 3101574:tid 3101574] (EAI 2)Name or service not known: [client 144.76.19.72:60186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:33.267932 2026] [ssl:error] [pid 3101574:tid 3101574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:34.763592 2026] [ssl:error] [pid 3123047:tid 3123047] (70014)End of file found: [client 216.73.216.199:5713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:34.859322 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/ws54.php
[Thu Jul 30 12:45:35.835790 2026] [security2:error] [pid 3123713:tid 3123713] [client 114.119.142.20:50191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~104,17,103,19,18/request_format~html"] [unique_id "ams5X2JXM-M4iVya05c8XQAAAAo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~104,17,103,19/request_format~html
[Thu Jul 30 12:45:36.320616 2026] [ssl:error] [pid 3121445:tid 3121445] (EAI 2)Name or service not known: [client 144.76.19.72:60200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:36.320641 2026] [ssl:error] [pid 3121445:tid 3121445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:36.372027 2026] [ssl:error] [pid 3121375:tid 3121375] (EAI 2)Name or service not known: [client 144.76.19.72:60214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:36.372063 2026] [ssl:error] [pid 3121375:tid 3121375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:36.663434 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/ws54.php
[Thu Jul 30 12:45:37.410035 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/deepseek_d.php
[Thu Jul 30 12:45:37.623980 2026] [security2:error] [pid 3122372:tid 3122372] [client 114.119.142.20:50203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~104,17,103,19,18/request_format~html"] [unique_id "ams5YYMFjb7tQ-mRB5eF4QAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~104,17,103,19/request_format~html
[Thu Jul 30 12:45:37.853749 2026] [authz_core:error] [pid 3114846:tid 3114846] [client 57.141.0.60:54336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:45:37.854374 2026] [authz_core:error] [pid 3114846:tid 3114846] [client 57.141.0.60:54336] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:45:37.942829 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/deepseek_d.php
[Thu Jul 30 12:45:38.163951 2026] [lsapi:warn] [pid 3121317:tid 3121317] [client 122.180.21.11:58176] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:45:39.413407 2026] [authz_core:error] [pid 3115377:tid 3115377] [client 57.141.0.67:42160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:45:39.414777 2026] [authz_core:error] [pid 3115377:tid 3115377] [client 57.141.0.67:42160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:45:39.424882 2026] [ssl:error] [pid 3123713:tid 3123713] (EAI 2)Name or service not known: [client 144.76.19.72:60226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:39.424913 2026] [ssl:error] [pid 3123713:tid 3123713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:39.479525 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:60230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:39.479551 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:40.213789 2026] [core:error] [pid 3120711:tid 3120711] (13)Permission denied: [client 216.73.216.199:38173] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty55/subsystem/ttyS1/uartclk
[Thu Jul 30 12:45:40.494098 2026] [security2:error] [pid 3121317:tid 3121317] [client 114.119.156.17:28411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/how-it-works"] [unique_id "ams5ZCoki6IG1QaEsTyQDAAAAB8"]
[Thu Jul 30 12:45:40.870297 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/nw.php
[Thu Jul 30 12:45:40.953138 2026] [authz_core:error] [pid 3122372:tid 3122372] [client 216.73.216.199:46232] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/jquery/error_log
[Thu Jul 30 12:45:41.399293 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/nw.php
[Thu Jul 30 12:45:41.412712 2026] [access_compat:error] [pid 3119501:tid 3119501] [client 146.56.229.214:48506] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:45:42.184012 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/xleet.php
[Thu Jul 30 12:45:42.535414 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:61718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:42.535445 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:42.588438 2026] [ssl:error] [pid 3124882:tid 3124882] (EAI 2)Name or service not known: [client 144.76.19.72:61726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:42.588477 2026] [ssl:error] [pid 3124882:tid 3124882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:42.782478 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/xleet.php
[Thu Jul 30 12:45:43.363358 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:43.363391 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:43.553581 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 12:45:43.612076 2026] [core:error] [pid 3119555:tid 3119555] [client 66.249.66.167:35115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:43.612105 2026] [core:error] [pid 3119555:tid 3119555] [client 66.249.66.167:35115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:43.620518 2026] [core:error] [pid 3100415:tid 3100415] [client 66.249.66.194:61736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:43.620541 2026] [core:error] [pid 3100415:tid 3100415] [client 66.249.66.194:61736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:44.000957 2026] [security2:error] [pid 3112061:tid 3112061] [client 114.119.156.17:28425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/modules/node/node.css"] [unique_id "ams5aJXSh_muGvfVwUamkAAAADU"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.106529 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 12:45:44.136512 2026] [security2:error] [pid 3119555:tid 3119555] [client 114.119.156.17:28449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/modules/system/defaults.css"] [unique_id "ams5aJV90pVzOMqzLVhTZwAAAAc"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.143134 2026] [security2:error] [pid 3124882:tid 3124882] [client 114.119.156.17:28441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/modules/system/system.css"] [unique_id "ams5aGibJVLdcmd_fWYlegAAAA8"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.162830 2026] [security2:error] [pid 3122826:tid 3122826] [client 216.73.216.199:6006] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/dracut/dracut.conf.d/99-microcode-override.conf"] [unique_id "ams5aEZFBIjyaJhOQjoxwwAAAAQ"]
[Thu Jul 30 12:45:44.163165 2026] [security2:error] [pid 3122826:tid 3122826] [client 216.73.216.199:6006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/dracut/dracut.conf.d/99-microcode-override.conf"] [unique_id "ams5aEZFBIjyaJhOQjoxwwAAAAQ"]
[Thu Jul 30 12:45:44.163384 2026] [security2:error] [pid 3122826:tid 3122826] [client 216.73.216.199:6006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/dracut/dracut.conf.d/99-microcode-override.conf"] [unique_id "ams5aEZFBIjyaJhOQjoxwwAAAAQ"]
[Thu Jul 30 12:45:44.170446 2026] [security2:error] [pid 3116967:tid 3116967] [client 114.119.156.17:28535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/sites/all/modules/booking/booking.js"] [unique_id "ams5aMDqzxhBbBiF5TTuSgAAACg"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.170916 2026] [security2:error] [pid 3100415:tid 3100415] [client 114.119.156.17:28479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/images/jquery.html5-placeholder-shim.js"] [unique_id "ams5aH1tj2k9F5sJ8p4VUwAAACY"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.783686 2026] [security2:error] [pid 3123757:tid 3123757] [client 114.119.156.17:28463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/css/jquery.datetimepicker.js"] [unique_id "ams5aAEkZb8AQ3L31y9cxQAAABg"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.816456 2026] [security2:error] [pid 3112061:tid 3112061] [client 114.119.156.17:28493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/misc/touchpunch.js"] [unique_id "ams5aJXSh_muGvfVwUamkgAAADU"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.845003 2026] [security2:error] [pid 3119555:tid 3119555] [client 114.119.156.17:28501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/misc/drupal.js"] [unique_id "ams5aJV90pVzOMqzLVhTaAAAAAc"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.878163 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/155.php
[Thu Jul 30 12:45:44.923835 2026] [security2:error] [pid 3123046:tid 3123046] [client 114.119.156.17:28511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/sites/all/themes/bansko/js/menu.js"] [unique_id "ams5aMbMKeq25OBAHP9GKQAAACU"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:44.948609 2026] [security2:error] [pid 3124882:tid 3124882] [client 114.119.156.17:28519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/sites/all/modules/jquery_update/compat-1.0.js"] [unique_id "ams5aGibJVLdcmd_fWYlewAAAA8"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:45.172287 2026] [security2:error] [pid 3124963:tid 3124963] [client 114.119.156.17:28545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/css/jquery.datetimepicker.css"] [unique_id "ams5aUD-3l95neCfIg7bCgAAAB4"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:45.187671 2026] [security2:error] [pid 3124966:tid 3124966] [client 114.119.156.17:28555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/misc/jquery.js"] [unique_id "ams5aW3x1MZAR5-eb3zPyQAAAC4"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:45.244125 2026] [security2:error] [pid 3101834:tid 3101834] [client 114.119.156.17:28557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/sites/all/themes/bansko/css/express.css"] [unique_id "ams5aRXXMkOI2FdQZFulWwAAACc"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:45.444230 2026] [security2:error] [pid 3114892:tid 3114892] [client 114.119.156.17:28577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/sites/all/modules/fckeditor/fckeditor.css"] [unique_id "ams5aXuu5L903ATRErustQAAAC0"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:45.464485 2026] [security2:error] [pid 3124919:tid 3124919] [client 114.119.156.17:28567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/modules/user/user.css"] [unique_id "ams5acY97x6k6_uISmToxwAAABs"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:45.489947 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/155.php
[Thu Jul 30 12:45:45.642143 2026] [ssl:error] [pid 3123046:tid 3123046] (EAI 2)Name or service not known: [client 144.76.19.72:61732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:45.642179 2026] [ssl:error] [pid 3123046:tid 3123046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:45.695584 2026] [ssl:error] [pid 3124882:tid 3124882] (EAI 2)Name or service not known: [client 144.76.19.72:61748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:45.695618 2026] [ssl:error] [pid 3124882:tid 3124882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:45.791931 2026] [security2:error] [pid 3112061:tid 3112061] [client 114.119.156.17:28583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/sites/all/modules/jquery_update/collapse-fix.js"] [unique_id "ams5aZXSh_muGvfVwUamkwAAADU"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:45.851304 2026] [security2:error] [pid 3119555:tid 3119555] [client 114.119.156.17:28591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.borovetsexpress.com"] [uri "/sites/all/modules/google_analytics/googleanalytics.js"] [unique_id "ams5aZV90pVzOMqzLVhTaQAAAAc"], referer: https://www.borovetsexpress.com/how-it-works
[Thu Jul 30 12:45:46.044037 2026] [ssl:error] [pid 3122826:tid 3122826] (70014)End of file found: [client 216.73.216.199:6006] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:46.099372 2026] [core:error] [pid 3124918:tid 3124918] [client 20.104.22.47:55048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:46.099399 2026] [core:error] [pid 3124918:tid 3124918] [client 20.104.22.47:55048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:46.281458 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/96i.php
[Thu Jul 30 12:45:46.629700 2026] [core:error] [pid 3114892:tid 3114892] [client 20.104.22.47:55589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:46.629726 2026] [core:error] [pid 3114892:tid 3114892] [client 20.104.22.47:55589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:47.045616 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55573] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:47.045638 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55573] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:47.906180 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/96i.php
[Thu Jul 30 12:45:48.075234 2026] [core:error] [pid 3120711:tid 3120711] (13)Permission denied: [client 216.73.216.199:6127] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/perf_event/destroy_by_rcu
[Thu Jul 30 12:45:48.257134 2026] [core:error] [pid 3123047:tid 3123047] [client 20.104.22.47:55558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:48.257162 2026] [core:error] [pid 3123047:tid 3123047] [client 20.104.22.47:55558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:48.450120 2026] [security2:error] [pid 3121439:tid 3121439] [client 43.157.22.57:38548] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.marcwhiffen.co.uk"] [uri "/"] [unique_id "ams5bG4HolghqVZKlhS6IwAAADM"]
[Thu Jul 30 12:45:48.450946 2026] [authz_core:error] [pid 3121439:tid 3121439] [client 43.157.22.57:38548] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 12:45:48.611460 2026] [lsapi:warn] [pid 3124919:tid 3124919] [client 122.180.21.11:58781] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:45:48.677832 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 12:45:48.750138 2026] [ssl:error] [pid 3124963:tid 3124963] (EAI 2)Name or service not known: [client 144.76.19.72:61764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:48.750171 2026] [ssl:error] [pid 3124963:tid 3124963] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:48.769425 2026] [core:error] [pid 3111820:tid 3111820] [client 20.104.22.47:55599] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:48.769448 2026] [core:error] [pid 3111820:tid 3111820] [client 20.104.22.47:55599] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:48.806327 2026] [ssl:error] [pid 3123047:tid 3123047] (EAI 2)Name or service not known: [client 144.76.19.72:61768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:48.806365 2026] [ssl:error] [pid 3123047:tid 3123047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:49.226524 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 12:45:50.637878 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/min.php
[Thu Jul 30 12:45:50.733130 2026] [core:error] [pid 3111820:tid 3111820] [client 20.104.22.47:55561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:50.733157 2026] [core:error] [pid 3111820:tid 3111820] [client 20.104.22.47:55561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:51.154839 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/min.php
[Thu Jul 30 12:45:51.861827 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:58236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:51.861864 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:51.915380 2026] [ssl:error] [pid 3119501:tid 3119501] (EAI 2)Name or service not known: [client 144.76.19.72:58244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:51.915414 2026] [ssl:error] [pid 3119501:tid 3119501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:52.010887 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/php8.php
[Thu Jul 30 12:45:52.551948 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/php8.php
[Thu Jul 30 12:45:53.535042 2026] [core:error] [pid 3121444:tid 3121444] [client 20.104.22.47:55564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:53.535080 2026] [core:error] [pid 3121444:tid 3121444] [client 20.104.22.47:55564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:54.020919 2026] [core:error] [pid 3101834:tid 3101834] [client 20.104.22.47:55058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:54.020948 2026] [core:error] [pid 3101834:tid 3101834] [client 20.104.22.47:55058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:54.640502 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 12:45:54.972711 2026] [ssl:error] [pid 3123757:tid 3123757] (EAI 2)Name or service not known: [client 144.76.19.72:58258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:54.972736 2026] [ssl:error] [pid 3123757:tid 3123757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:55.025713 2026] [ssl:error] [pid 3125447:tid 3125447] (EAI 2)Name or service not known: [client 144.76.19.72:58268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:55.025757 2026] [ssl:error] [pid 3125447:tid 3125447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:55.029352 2026] [ssl:error] [pid 3120711:tid 3120711] (70014)End of file found: [client 216.73.216.199:6127] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:55.225631 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 12:45:56.133164 2026] [core:error] [pid 3115377:tid 3115377] [client 66.249.66.167:43402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:56.133196 2026] [core:error] [pid 3115377:tid 3115377] [client 66.249.66.167:43402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:56.234009 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.13:62434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:45:56.234644 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.13:62434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:45:56.854467 2026] [core:error] [pid 3114892:tid 3114892] [client 20.104.22.47:55044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:56.854509 2026] [core:error] [pid 3114892:tid 3114892] [client 20.104.22.47:55044] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:45:57.261791 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/info.php
[Thu Jul 30 12:45:57.811948 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/info.php
[Thu Jul 30 12:45:58.082025 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:58284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:58.082078 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:58.137287 2026] [ssl:error] [pid 3112061:tid 3112061] (EAI 2)Name or service not known: [client 144.76.19.72:58290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:45:58.137317 2026] [ssl:error] [pid 3112061:tid 3112061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:45:58.340355 2026] [ssl:error] [pid 3124918:tid 3124918] (70014)End of file found: [client 216.73.216.199:29659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:58.604524 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/a.php
[Thu Jul 30 12:45:58.948150 2026] [ssl:error] [pid 3123051:tid 3123051] (70014)End of file found: [client 216.73.216.199:1447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:45:59.145305 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/a.php
[Thu Jul 30 12:45:59.247206 2026] [lsapi:warn] [pid 3112061:tid 3112061] [client 122.180.21.11:59396] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:45:59.515563 2026] [security2:error] [pid 3121444:tid 3121444] [client 146.56.229.214:34374] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.org"] [uri "/"] [unique_id "ams5d48MvzdlgmmfxRjcwQAAADk"]
[Thu Jul 30 12:45:59.676537 2026] [access_compat:error] [pid 3117039:tid 3117039] [client 45.158.164.139:52212] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:45:59.764360 2026] [authz_core:error] [pid 3122974:tid 3122974] [client 57.141.0.34:51364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:45:59.764982 2026] [authz_core:error] [pid 3122974:tid 3122974] [client 57.141.0.34:51364] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:00.258090 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 12:46:00.756691 2026] [core:error] [pid 3112061:tid 3112061] (13)Permission denied: [client 216.73.216.199:16317] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty61/subsystem/ttyS0/closing_wait
[Thu Jul 30 12:46:00.835400 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 12:46:01.206592 2026] [ssl:error] [pid 3120711:tid 3120711] (EAI 2)Name or service not known: [client 144.76.19.72:31046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:01.206644 2026] [ssl:error] [pid 3120711:tid 3120711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:01.263561 2026] [ssl:error] [pid 3117039:tid 3117039] (EAI 2)Name or service not known: [client 144.76.19.72:31062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:01.263597 2026] [ssl:error] [pid 3117039:tid 3117039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:01.845769 2026] [core:error] [pid 3119501:tid 3119501] [client 57.141.0.30:47570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:01.845792 2026] [core:error] [pid 3119501:tid 3119501] [client 57.141.0.30:47570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:01.992976 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/vx.php
[Thu Jul 30 12:46:02.514513 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/vx.php
[Thu Jul 30 12:46:03.077403 2026] [core:error] [pid 3122974:tid 3122974] [client 57.141.0.59:64620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:03.077453 2026] [core:error] [pid 3122974:tid 3122974] [client 57.141.0.59:64620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:03.798660 2026] [core:error] [pid 3122972:tid 3122972] [client 57.141.0.8:24680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:03.798689 2026] [core:error] [pid 3122972:tid 3122972] [client 57.141.0.8:24680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:04.013857 2026] [core:error] [pid 3116967:tid 3116967] [client 20.104.22.47:55605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:04.013884 2026] [core:error] [pid 3116967:tid 3116967] [client 20.104.22.47:55605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:04.082116 2026] [security2:error] [pid 3117041:tid 3117041] [client 20.171.55.167:6319] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.thecameramonkey.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams5fFQLWsvR8-HEeyuylQAAAD4"]
[Thu Jul 30 12:46:04.082316 2026] [security2:error] [pid 3117041:tid 3117041] [client 20.171.55.167:6319] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.thecameramonkey.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams5fFQLWsvR8-HEeyuylQAAAD4"]
[Thu Jul 30 12:46:04.111951 2026] [security2:error] [pid 3117041:tid 3117041] [client 20.171.55.167:6319] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.thecameramonkey.co.uk"] [uri "/403.shtml"] [unique_id "ams5fFQLWsvR8-HEeyuylQAAAD4"]
[Thu Jul 30 12:46:04.319832 2026] [ssl:error] [pid 3124918:tid 3124918] (EAI 2)Name or service not known: [client 144.76.19.72:31072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:04.319875 2026] [ssl:error] [pid 3124918:tid 3124918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:04.374693 2026] [ssl:error] [pid 3121317:tid 3121317] (EAI 2)Name or service not known: [client 144.76.19.72:31082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:04.374741 2026] [ssl:error] [pid 3121317:tid 3121317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:05.274879 2026] [core:error] [pid 3112061:tid 3112061] (13)Permission denied: [client 216.73.216.199:16317] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/boot/System.map-4.18.0-553.141.2.lve.el8.x86_64
[Thu Jul 30 12:46:05.434696 2026] [core:error] [pid 3125447:tid 3125447] [client 20.104.22.47:55059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:05.434725 2026] [core:error] [pid 3125447:tid 3125447] [client 20.104.22.47:55059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:05.576448 2026] [ssl:error] [pid 3112061:tid 3112061] (70014)End of file found: [client 216.73.216.199:16317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:05.891606 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wap.php
[Thu Jul 30 12:46:05.995471 2026] [core:error] [pid 3124966:tid 3124966] [client 20.104.22.47:55581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:05.995514 2026] [core:error] [pid 3124966:tid 3124966] [client 20.104.22.47:55581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:06.439988 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/wap.php
[Thu Jul 30 12:46:06.481444 2026] [ssl:error] [pid 3121317:tid 3121317] (70014)End of file found: [client 216.73.216.199:28250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:06.983319 2026] [ssl:error] [pid 3115377:tid 3115377] (70014)End of file found: [client 216.73.216.199:26164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:07.204563 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/wp.php
[Thu Jul 30 12:46:07.384350 2026] [core:error] [pid 3101834:tid 3101834] [client 20.104.22.47:55593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:07.384382 2026] [core:error] [pid 3101834:tid 3101834] [client 20.104.22.47:55593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:07.431407 2026] [ssl:error] [pid 3125447:tid 3125447] (EAI 2)Name or service not known: [client 144.76.19.72:31092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:07.431437 2026] [ssl:error] [pid 3125447:tid 3125447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:07.487281 2026] [ssl:error] [pid 3124966:tid 3124966] (EAI 2)Name or service not known: [client 144.76.19.72:31102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:07.487321 2026] [ssl:error] [pid 3124966:tid 3124966] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:07.737286 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/wp.php
[Thu Jul 30 12:46:08.226931 2026] [core:error] [pid 3126063:tid 3126063] [client 20.104.22.47:55052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:08.226975 2026] [core:error] [pid 3126063:tid 3126063] [client 20.104.22.47:55052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:08.522030 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/bgymj.php
[Thu Jul 30 12:46:08.604727 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.61:55574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:08.605351 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.61:55574] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:09.084825 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/bgymj.php
[Thu Jul 30 12:46:09.744345 2026] [lsapi:warn] [pid 3125447:tid 3125447] [client 122.180.21.11:60006] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:46:09.853416 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 12:46:09.954294 2026] [core:error] [pid 3120570:tid 3120570] [client 66.249.66.167:60860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:09.954316 2026] [core:error] [pid 3120570:tid 3120570] [client 66.249.66.167:60860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:10.305929 2026] [core:error] [pid 3099188:tid 3099188] [client 20.104.22.47:55077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:10.305955 2026] [core:error] [pid 3099188:tid 3099188] [client 20.104.22.47:55077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:10.428830 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 12:46:10.545902 2026] [ssl:error] [pid 3120570:tid 3120570] (EAI 2)Name or service not known: [client 144.76.19.72:24992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:10.545930 2026] [ssl:error] [pid 3120570:tid 3120570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:10.601659 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:25002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:10.601691 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:10.882984 2026] [ssl:error] [pid 3122827:tid 3122827] (70014)End of file found: [client 216.73.216.199:24231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:11.213161 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-mail.php
[Thu Jul 30 12:46:11.748880 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-mail.php
[Thu Jul 30 12:46:12.207869 2026] [core:error] [pid 3101574:tid 3101574] [client 20.104.22.47:55393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:12.207894 2026] [core:error] [pid 3101574:tid 3101574] [client 20.104.22.47:55393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:12.506286 2026] [ssl:error] [pid 3122975:tid 3122975] (70014)End of file found: [client 216.73.216.199:37508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:12.529328 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/bolt.php
[Thu Jul 30 12:46:13.021314 2026] [ssl:error] [pid 3093749:tid 3093749] (70014)End of file found: [client 216.73.216.199:10283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:13.335301 2026] [security2:error] [pid 3125446:tid 3125446] [client 51.68.236.90:19213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/robots.txt"] [unique_id "ams5hYe8zs2ReYfnvBEwRgAAAA8"]
[Thu Jul 30 12:46:13.555196 2026] [core:error] [pid 3123049:tid 3123049] [client 20.104.22.47:55559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:13.555224 2026] [core:error] [pid 3123049:tid 3123049] [client 20.104.22.47:55559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:13.562826 2026] [security2:error] [pid 3114895:tid 3114895] [client 51.68.236.90:15355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "ams5hQo8BF9a5O5VtynN7wAAADs"]
[Thu Jul 30 12:46:13.659530 2026] [ssl:error] [pid 3123048:tid 3123048] (EAI 2)Name or service not known: [client 144.76.19.72:25016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:13.659559 2026] [ssl:error] [pid 3123048:tid 3123048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:13.665385 2026] [security2:error] [pid 3123757:tid 3123757] [client 51.68.236.90:20895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/robots.txt"] [unique_id "ams5hQEkZb8AQ3L31y9czwAAABg"]
[Thu Jul 30 12:46:13.715475 2026] [ssl:error] [pid 3123051:tid 3123051] (EAI 2)Name or service not known: [client 144.76.19.72:25024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:13.715512 2026] [ssl:error] [pid 3123051:tid 3123051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:13.811121 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/bolt.php
[Thu Jul 30 12:46:14.595337 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/bthil.php
[Thu Jul 30 12:46:14.657913 2026] [core:error] [pid 3123049:tid 3123049] [client 20.104.22.47:55408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:14.657944 2026] [core:error] [pid 3123049:tid 3123049] [client 20.104.22.47:55408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:15.111970 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/bthil.php
[Thu Jul 30 12:46:15.482132 2026] [core:error] [pid 3124966:tid 3124966] [client 20.104.22.47:55421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:15.482159 2026] [core:error] [pid 3124966:tid 3124966] [client 20.104.22.47:55421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:16.378276 2026] [security2:error] [pid 3121444:tid 3121444] [client 45.169.185.203:39776] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5iI8MvzdlgmmfxRjcyQAAADk"]
[Thu Jul 30 12:46:16.378327 2026] [security2:error] [pid 3121444:tid 3121444] [client 45.169.185.203:39776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5iI8MvzdlgmmfxRjcyQAAADk"]
[Thu Jul 30 12:46:16.378613 2026] [security2:error] [pid 3121444:tid 3121444] [client 45.169.185.203:39776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5iI8MvzdlgmmfxRjcyQAAADk"]
[Thu Jul 30 12:46:16.769478 2026] [ssl:error] [pid 3123048:tid 3123048] (EAI 2)Name or service not known: [client 144.76.19.72:25034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:16.769522 2026] [ssl:error] [pid 3123048:tid 3123048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:16.826245 2026] [ssl:error] [pid 3122827:tid 3122827] (EAI 2)Name or service not known: [client 144.76.19.72:25050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:16.826286 2026] [ssl:error] [pid 3122827:tid 3122827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:17.180466 2026] [authz_core:error] [pid 3125446:tid 3125446] [client 57.141.0.16:52600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:17.181099 2026] [authz_core:error] [pid 3125446:tid 3125446] [client 57.141.0.16:52600] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:17.489487 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/x.php
[Thu Jul 30 12:46:18.025181 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/x.php
[Thu Jul 30 12:46:18.435519 2026] [security2:error] [pid 3123756:tid 3123756] [client 45.230.242.138:43408] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5ilI0fplH8L5Eovc2nAAAABc"]
[Thu Jul 30 12:46:18.435575 2026] [security2:error] [pid 3123756:tid 3123756] [client 45.230.242.138:43408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5ilI0fplH8L5Eovc2nAAAABc"]
[Thu Jul 30 12:46:18.435852 2026] [security2:error] [pid 3123756:tid 3123756] [client 45.230.242.138:43408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5ilI0fplH8L5Eovc2nAAAABc"]
[Thu Jul 30 12:46:18.447685 2026] [ssl:error] [pid 3080545:tid 3080545] (70014)End of file found: [client 216.73.216.199:63455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:18.629119 2026] [ssl:error] [pid 3106594:tid 3106594] (70014)End of file found: [client 216.73.216.199:52949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:18.844430 2026] [ssl:error] [pid 3123757:tid 3123757] (70014)End of file found: [client 216.73.216.199:36852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:19.715096 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:19.715124 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55568] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:19.908893 2026] [ssl:error] [pid 3115377:tid 3115377] (EAI 2)Name or service not known: [client 144.76.19.72:50964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:19.908921 2026] [ssl:error] [pid 3115377:tid 3115377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:19.966943 2026] [ssl:error] [pid 3125446:tid 3125446] (EAI 2)Name or service not known: [client 144.76.19.72:50966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:19.966979 2026] [ssl:error] [pid 3125446:tid 3125446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:20.053129 2026] [lsapi:warn] [pid 3123756:tid 3123756] [client 122.180.21.11:60753] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:46:20.297564 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/aaa.php
[Thu Jul 30 12:46:20.496226 2026] [core:error] [pid 3116967:tid 3116967] [client 20.104.22.47:55422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:20.496259 2026] [core:error] [pid 3116967:tid 3116967] [client 20.104.22.47:55422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:20.860226 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/aaa.php
[Thu Jul 30 12:46:20.918624 2026] [security2:error] [pid 3100415:tid 3100415] [client 216.73.216.199:25241] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/rpcbind.conf"] [unique_id "ams5jH1tj2k9F5sJ8p4VYgAAACY"]
[Thu Jul 30 12:46:20.918954 2026] [security2:error] [pid 3100415:tid 3100415] [client 216.73.216.199:25241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/rpcbind.conf"] [unique_id "ams5jH1tj2k9F5sJ8p4VYgAAACY"]
[Thu Jul 30 12:46:20.919224 2026] [security2:error] [pid 3100415:tid 3100415] [client 216.73.216.199:25241] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/rpcbind.conf"] [unique_id "ams5jH1tj2k9F5sJ8p4VYgAAACY"]
[Thu Jul 30 12:46:21.020976 2026] [ssl:error] [pid 3100415:tid 3100415] (70014)End of file found: [client 216.73.216.199:25241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:21.142581 2026] [core:error] [pid 3116967:tid 3116967] [client 66.249.64.170:37175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:21.142608 2026] [core:error] [pid 3116967:tid 3116967] [client 66.249.64.170:37175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:21.672058 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/abcd.php
[Thu Jul 30 12:46:21.730334 2026] [core:error] [pid 3122827:tid 3122827] [client 20.104.22.47:55755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:21.730359 2026] [core:error] [pid 3122827:tid 3122827] [client 20.104.22.47:55755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:21.811188 2026] [core:error] [pid 3116967:tid 3116967] [client 66.249.66.40:55268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:21.811215 2026] [core:error] [pid 3116967:tid 3116967] [client 66.249.66.40:55268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:22.215501 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory83/node0/compact
[Thu Jul 30 12:46:22.221549 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/abcd.php
[Thu Jul 30 12:46:22.323663 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:22.323705 2026] [core:error] [pid 3123048:tid 3123048] [client 20.104.22.47:55784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:22.943959 2026] [core:error] [pid 3122827:tid 3122827] [client 20.104.22.47:55761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:22.943987 2026] [core:error] [pid 3122827:tid 3122827] [client 20.104.22.47:55761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:23.001641 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-good.php
[Thu Jul 30 12:46:23.053150 2026] [ssl:error] [pid 3123048:tid 3123048] (EAI 2)Name or service not known: [client 144.76.19.72:50984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:23.053212 2026] [ssl:error] [pid 3123048:tid 3123048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:23.107740 2026] [ssl:error] [pid 3124964:tid 3124964] (EAI 2)Name or service not known: [client 144.76.19.72:50992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:23.107781 2026] [ssl:error] [pid 3124964:tid 3124964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:23.339341 2026] [security2:error] [pid 3122826:tid 3122826] [client 103.98.107.231:53938] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5j0ZFBIjyaJhOQjox2QAAAAQ"]
[Thu Jul 30 12:46:23.339395 2026] [security2:error] [pid 3122826:tid 3122826] [client 103.98.107.231:53938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5j0ZFBIjyaJhOQjox2QAAAAQ"]
[Thu Jul 30 12:46:23.339675 2026] [security2:error] [pid 3122826:tid 3122826] [client 103.98.107.231:53938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5j0ZFBIjyaJhOQjox2QAAAAQ"]
[Thu Jul 30 12:46:23.422596 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory40/node0/compact
[Thu Jul 30 12:46:23.576558 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-good.php
[Thu Jul 30 12:46:23.736431 2026] [core:error] [pid 3123051:tid 3123051] [client 20.104.22.47:55744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:23.736455 2026] [core:error] [pid 3123051:tid 3123051] [client 20.104.22.47:55744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:24.187281 2026] [authz_core:error] [pid 3126201:tid 3126201] [client 169.58.39.192:53196] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:46:24.355478 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 12:46:24.886426 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 12:46:25.230699 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory44/node0/compact
[Thu Jul 30 12:46:25.532219 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory261/node0/compact
[Thu Jul 30 12:46:26.161923 2026] [ssl:error] [pid 3122372:tid 3122372] (EAI 2)Name or service not known: [client 144.76.19.72:51006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:26.161974 2026] [ssl:error] [pid 3122372:tid 3122372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:26.219622 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:51010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:26.219647 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:27.052871 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory252/node0/compact
[Thu Jul 30 12:46:27.118926 2026] [authz_core:error] [pid 3124919:tid 3124919] [client 57.141.0.34:30974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:27.119573 2026] [authz_core:error] [pid 3124919:tid 3124919] [client 57.141.0.34:30974] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:27.353798 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory63/node0/compact
[Thu Jul 30 12:46:27.742054 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/u.php
[Thu Jul 30 12:46:27.954694 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory72/node0/compact
[Thu Jul 30 12:46:28.207079 2026] [authz_core:error] [pid 3123713:tid 3123713] [client 169.58.39.192:54595] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:46:28.316004 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/u.php
[Thu Jul 30 12:46:28.674788 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:55775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:28.674818 2026] [core:error] [pid 3093749:tid 3093749] [client 20.104.22.47:55775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:29.171437 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory9/node0/compact
[Thu Jul 30 12:46:29.268234 2026] [core:error] [pid 3120711:tid 3120711] [client 20.104.22.47:55058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:29.268266 2026] [core:error] [pid 3120711:tid 3120711] [client 20.104.22.47:55058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:29.328529 2026] [ssl:error] [pid 3121445:tid 3121445] (EAI 2)Name or service not known: [client 144.76.19.72:51036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:29.328566 2026] [ssl:error] [pid 3121445:tid 3121445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:29.379883 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:51050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:29.379911 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:29.472168 2026] [core:error] [pid 3124918:tid 3124918] (13)Permission denied: [client 216.73.216.199:61088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory6/node0/compact
[Thu Jul 30 12:46:29.941295 2026] [security2:error] [pid 3122972:tid 3122972] [client 85.208.96.198:15106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/twin-peaks-diner-waitress"] [unique_id "ams5lVQmGzE-Z2B1AV7HkAAAAAk"]
[Thu Jul 30 12:46:30.375653 2026] [ssl:error] [pid 3124918:tid 3124918] (70014)End of file found: [client 216.73.216.199:61088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:30.572283 2026] [lsapi:warn] [pid 3121445:tid 3121445] [client 122.180.21.11:61468] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:46:31.048999 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/h.php
[Thu Jul 30 12:46:31.279481 2026] [ssl:error] [pid 3124964:tid 3124964] (70014)End of file found: [client 216.73.216.199:2693] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:31.349134 2026] [core:error] [pid 3101574:tid 3101574] [client 20.104.22.47:55366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:31.349160 2026] [core:error] [pid 3101574:tid 3101574] [client 20.104.22.47:55366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:31.598255 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/h.php
[Thu Jul 30 12:46:32.270993 2026] [core:error] [pid 3119557:tid 3119557] [client 20.104.22.47:55745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:32.271033 2026] [core:error] [pid 3119557:tid 3119557] [client 20.104.22.47:55745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:32.325048 2026] [authz_core:error] [pid 3123757:tid 3123757] [client 169.58.39.192:55927] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:46:32.433852 2026] [ssl:error] [pid 3112061:tid 3112061] (EAI 2)Name or service not known: [client 144.76.19.72:23182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:32.433882 2026] [ssl:error] [pid 3112061:tid 3112061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:32.485333 2026] [ssl:error] [pid 3126063:tid 3126063] (EAI 2)Name or service not known: [client 144.76.19.72:23188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:32.485371 2026] [ssl:error] [pid 3126063:tid 3126063] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:32.687388 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/ms-edit.php
[Thu Jul 30 12:46:33.196909 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/ms-edit.php
[Thu Jul 30 12:46:33.586427 2026] [authz_core:error] [pid 3124919:tid 3124919] [client 57.141.0.3:59518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:33.587097 2026] [authz_core:error] [pid 3124919:tid 3124919] [client 57.141.0.3:59518] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:33.692433 2026] [ssl:error] [pid 3126204:tid 3126204] (70014)End of file found: [client 216.73.216.199:3175] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:33.950897 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/a7.php
[Thu Jul 30 12:46:34.187682 2026] [core:error] [pid 3115377:tid 3115377] [client 66.249.66.194:45147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:34.187712 2026] [core:error] [pid 3115377:tid 3115377] [client 66.249.66.194:45147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:34.522189 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/a7.php
[Thu Jul 30 12:46:34.597974 2026] [authz_core:error] [pid 3112061:tid 3112061] [client 20.193.250.173:65426] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:46:35.075628 2026] [authz_core:error] [pid 3122975:tid 3122975] [client 169.58.39.192:57062] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:46:35.433612 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/manager.php
[Thu Jul 30 12:46:35.537543 2026] [ssl:error] [pid 3121445:tid 3121445] (EAI 2)Name or service not known: [client 144.76.19.72:23204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:35.537578 2026] [ssl:error] [pid 3121445:tid 3121445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:35.590377 2026] [ssl:error] [pid 3093749:tid 3093749] (EAI 2)Name or service not known: [client 144.76.19.72:23210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:35.590403 2026] [ssl:error] [pid 3093749:tid 3093749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:36.007468 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/manager.php
[Thu Jul 30 12:46:36.129367 2026] [cgi:error] [pid 3121445:tid 3121445] [client 216.73.216.199:35922] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-threads-shared/examples/class.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:46:36.129439 2026] [cgi:error] [pid 3121445:tid 3121445] [client 216.73.216.199:35922] End of script output before headers: class.pl
[Thu Jul 30 12:46:36.805410 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/w1.php
[Thu Jul 30 12:46:37.379592 2026] [access_compat:error] [pid 3123044:tid 3123044] [client 20.104.22.47:61670] AH01797: client denied by server configuration: /home/thepryor/public_html/w1.php
[Thu Jul 30 12:46:38.646127 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:23220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:38.646164 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:38.699121 2026] [ssl:error] [pid 3120711:tid 3120711] (EAI 2)Name or service not known: [client 144.76.19.72:23230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:38.699153 2026] [ssl:error] [pid 3120711:tid 3120711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:39.108148 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-face-resolver.php
[Thu Jul 30 12:46:39.108266 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-face.php
[Thu Jul 30 12:46:39.108285 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-utils.php
[Thu Jul 30 12:46:39.108326 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-library.php
[Thu Jul 30 12:46:39.108356 2026] [access_compat:error] [pid 3121318:tid 3121318] [client 20.104.22.47:61588] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-collection.php
[Thu Jul 30 12:46:40.283348 2026] [authz_core:error] [pid 3126203:tid 3126203] [client 66.249.66.34:65148] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:46:40.286025 2026] [authz_core:error] [pid 3126203:tid 3126203] [client 66.249.66.34:65148] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:46:40.418452 2026] [authz_core:error] [pid 3120711:tid 3120711] [client 66.249.66.33:41509] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:46:40.421350 2026] [authz_core:error] [pid 3120711:tid 3120711] [client 66.249.66.33:41509] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:46:41.042637 2026] [lsapi:warn] [pid 3126204:tid 3126204] [client 122.180.21.11:62089] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:46:41.367499 2026] [security2:error] [pid 3124966:tid 3124966] [client 85.208.96.198:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/author/liambard/"] [unique_id "ams5oW3x1MZAR5-eb3zP4QAAAC4"]
[Thu Jul 30 12:46:41.751574 2026] [ssl:error] [pid 3124919:tid 3124919] (EAI 2)Name or service not known: [client 144.76.19.72:19150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:41.751620 2026] [ssl:error] [pid 3124919:tid 3124919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:41.807886 2026] [ssl:error] [pid 3115377:tid 3115377] (EAI 2)Name or service not known: [client 144.76.19.72:19160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:41.807918 2026] [ssl:error] [pid 3115377:tid 3115377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:43.030340 2026] [ssl:error] [pid 3122975:tid 3122975] (70014)End of file found: [client 216.73.216.199:64285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:43.863030 2026] [authz_core:error] [pid 3121317:tid 3121317] [client 57.141.0.71:60184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:43.863672 2026] [authz_core:error] [pid 3121317:tid 3121317] [client 57.141.0.71:60184] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:43.990810 2026] [authz_core:error] [pid 3123757:tid 3123757] [client 57.141.0.17:34434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:43.991471 2026] [authz_core:error] [pid 3123757:tid 3123757] [client 57.141.0.17:34434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:44.132427 2026] [core:error] [pid 3126063:tid 3126063] [client 20.104.22.47:55799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:44.132458 2026] [core:error] [pid 3126063:tid 3126063] [client 20.104.22.47:55799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:44.637382 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:44.637410 2026] [core:error] [pid 3112061:tid 3112061] [client 20.104.22.47:55900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:44.864394 2026] [ssl:error] [pid 3099188:tid 3099188] (EAI 2)Name or service not known: [client 144.76.19.72:19168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:44.864423 2026] [ssl:error] [pid 3099188:tid 3099188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:44.921267 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:19184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:44.921299 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:45.044161 2026] [core:error] [pid 3126063:tid 3126063] [client 20.104.22.47:55926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:45.044194 2026] [core:error] [pid 3126063:tid 3126063] [client 20.104.22.47:55926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:45.667179 2026] [core:error] [pid 3123757:tid 3123757] [client 20.104.22.47:55888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:45.667204 2026] [core:error] [pid 3123757:tid 3123757] [client 20.104.22.47:55888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:45.739628 2026] [core:error] [pid 3122410:tid 3122410] (13)Permission denied: [client 216.73.216.199:64372] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory213/subsystem/uevent
[Thu Jul 30 12:46:45.791841 2026] [lsapi:warn] [pid 3121317:tid 3121317] [client 2a01:9700:4d04:e300:f1f1:bbed:98e9:e7ba:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:46:46.040340 2026] [core:error] [pid 3122410:tid 3122410] (13)Permission denied: [client 216.73.216.199:64372] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory173/subsystem/uevent
[Thu Jul 30 12:46:46.048971 2026] [authz_core:error] [pid 3123756:tid 3123756] [client 20.193.250.173:56752] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:46:46.649059 2026] [ssl:error] [pid 3122410:tid 3122410] (70014)End of file found: [client 216.73.216.199:64372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:46.841870 2026] [core:error] [pid 3117041:tid 3117041] [client 20.104.22.47:55930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:46.841908 2026] [core:error] [pid 3117041:tid 3117041] [client 20.104.22.47:55930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:46.862934 2026] [core:error] [pid 3123756:tid 3123756] [client 66.249.66.66:48395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:46.862955 2026] [core:error] [pid 3123756:tid 3123756] [client 66.249.66.66:48395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:46.862983 2026] [core:error] [pid 3121317:tid 3121317] [client 66.249.66.167:47423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:46.863007 2026] [core:error] [pid 3121317:tid 3121317] [client 66.249.66.167:47423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:47.974807 2026] [ssl:error] [pid 3127910:tid 3127910] (EAI 2)Name or service not known: [client 144.76.19.72:19200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:47.974839 2026] [ssl:error] [pid 3127910:tid 3127910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:48.030875 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:19208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:48.030904 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:48.149748 2026] [access_compat:error] [pid 3126204:tid 3126204] [client 20.104.22.47:61593] AH01797: client denied by server configuration: /home/thepryor/public_html/default.php
[Thu Jul 30 12:46:48.154893 2026] [core:error] [pid 3123757:tid 3123757] [client 20.104.22.47:55412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:48.154925 2026] [core:error] [pid 3123757:tid 3123757] [client 20.104.22.47:55412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:48.552979 2026] [core:error] [pid 3106594:tid 3106594] [client 20.104.22.47:55754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:48.553005 2026] [core:error] [pid 3106594:tid 3106594] [client 20.104.22.47:55754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:48.757090 2026] [ssl:error] [pid 3116967:tid 3116967] (70014)End of file found: [client 216.73.216.199:46698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:48.971657 2026] [core:error] [pid 3122826:tid 3122826] [client 20.104.22.47:55927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:48.971694 2026] [core:error] [pid 3122826:tid 3122826] [client 20.104.22.47:55927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:49.568032 2026] [core:error] [pid 3121317:tid 3121317] [client 20.104.22.47:55924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:49.568062 2026] [core:error] [pid 3121317:tid 3121317] [client 20.104.22.47:55924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:49.915317 2026] [core:error] [pid 3115377:tid 3115377] [client 66.249.66.199:57292] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:49.915346 2026] [core:error] [pid 3115377:tid 3115377] [client 66.249.66.199:57292] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:51.011332 2026] [authz_core:error] [pid 3122972:tid 3122972] [client 51.103.154.47:13568] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/Requests/error_log
[Thu Jul 30 12:46:51.085688 2026] [ssl:error] [pid 3080545:tid 3080545] (EAI 2)Name or service not known: [client 144.76.19.72:50028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:51.085725 2026] [ssl:error] [pid 3080545:tid 3080545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:51.139955 2026] [ssl:error] [pid 3112061:tid 3112061] (EAI 2)Name or service not known: [client 144.76.19.72:50030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:51.139989 2026] [ssl:error] [pid 3112061:tid 3112061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:51.627311 2026] [lsapi:warn] [pid 3122827:tid 3122827] [client 122.180.21.11:62701] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:46:52.560750 2026] [ssl:error] [pid 3123756:tid 3123756] (70014)End of file found: [client 216.73.216.199:1986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:52.867308 2026] [ssl:error] [pid 3080545:tid 3080545] (70014)End of file found: [client 216.73.216.199:20643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:53.379271 2026] [core:error] [pid 3114895:tid 3114895] [client 20.104.22.47:55915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:53.379297 2026] [core:error] [pid 3114895:tid 3114895] [client 20.104.22.47:55915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:53.466012 2026] [ssl:error] [pid 3122410:tid 3122410] (70014)End of file found: [client 216.73.216.199:5083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:53.858402 2026] [security2:error] [pid 3126203:tid 3126203] [client 114.119.135.136:37909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "ams5rUGriQj-fWO21w5p5QAAADE"], referer: http://www.erskinenazarene.co.uk/robots.txt
[Thu Jul 30 12:46:54.021581 2026] [access_compat:error] [pid 3120711:tid 3120711] [client 20.104.22.47:61667] AH01797: client denied by server configuration: /home/thepryor/public_html/default.php
[Thu Jul 30 12:46:54.034060 2026] [authz_core:error] [pid 3122975:tid 3122975] [client 57.141.0.58:21366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:54.034696 2026] [authz_core:error] [pid 3122975:tid 3122975] [client 57.141.0.58:21366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:54.196482 2026] [ssl:error] [pid 3116967:tid 3116967] (EAI 2)Name or service not known: [client 144.76.19.72:50042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:54.196536 2026] [ssl:error] [pid 3116967:tid 3116967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:54.248451 2026] [ssl:error] [pid 3124919:tid 3124919] (EAI 2)Name or service not known: [client 144.76.19.72:50046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:54.248481 2026] [ssl:error] [pid 3124919:tid 3124919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:55.322107 2026] [security2:error] [pid 3126203:tid 3126203] [client 114.119.135.136:37915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "ams5r0GriQj-fWO21w5p5gAAADE"], referer: http://www.erskinenazarene.co.uk/robots.txt
[Thu Jul 30 12:46:56.006224 2026] [core:error] [pid 3125446:tid 3125446] [client 20.104.22.47:55785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:56.006254 2026] [core:error] [pid 3125446:tid 3125446] [client 20.104.22.47:55785] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:56.147468 2026] [lsapi:warn] [pid 3100415:tid 3100415] [client 2a01:9700:4d04:e300:f1f1:bbed:98e9:e7ba:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:46:57.120275 2026] [authz_core:error] [pid 3114895:tid 3114895] [client 20.193.250.173:53015] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:46:57.307798 2026] [ssl:error] [pid 3114895:tid 3114895] (EAI 2)Name or service not known: [client 144.76.19.72:50054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:57.307833 2026] [ssl:error] [pid 3114895:tid 3114895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:57.360977 2026] [ssl:error] [pid 3114895:tid 3114895] (EAI 2)Name or service not known: [client 144.76.19.72:50068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:46:57.361010 2026] [ssl:error] [pid 3114895:tid 3114895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:46:58.084847 2026] [authz_core:error] [pid 3128734:tid 3128734] [client 57.141.0.33:59796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:46:58.085542 2026] [authz_core:error] [pid 3128734:tid 3128734] [client 57.141.0.33:59796] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:46:58.299850 2026] [ssl:error] [pid 3128735:tid 3128735] (70014)End of file found: [client 216.73.216.199:22402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:58.605642 2026] [ssl:error] [pid 3126201:tid 3126201] (70014)End of file found: [client 216.73.216.199:48300] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:58.952785 2026] [security2:error] [pid 3128734:tid 3128734] [client 114.119.144.31:30331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~102,14/request_format~html"] [unique_id "ams5suu5cfkaY_0YqYuK5wAAAAo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~102,14/request_format~html
[Thu Jul 30 12:46:59.101693 2026] [ssl:error] [pid 3122826:tid 3122826] (70014)End of file found: [client 216.73.216.199:21392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:46:59.416744 2026] [core:error] [pid 3123051:tid 3123051] [client 20.104.22.47:55801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:59.416775 2026] [core:error] [pid 3123051:tid 3123051] [client 20.104.22.47:55801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:59.552314 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.3:40151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:59.552338 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.3:40151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:59.926860 2026] [core:error] [pid 3127521:tid 3127521] [client 20.104.22.47:55882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:59.926883 2026] [core:error] [pid 3127521:tid 3127521] [client 20.104.22.47:55882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:46:59.931047 2026] [security2:error] [pid 3128807:tid 3128807] [client 114.119.144.31:30343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577664000/cat_ids~102,14/request_format~html"] [unique_id "ams5s5L3_iBPckrp7xnbAAAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577664000/cat_ids~102,14/request_format~html
[Thu Jul 30 12:47:00.232699 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/i.php
[Thu Jul 30 12:47:00.321984 2026] [core:error] [pid 3124963:tid 3124963] [client 20.104.22.47:55921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:00.322015 2026] [core:error] [pid 3124963:tid 3124963] [client 20.104.22.47:55921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:00.433665 2026] [ssl:error] [pid 3121439:tid 3121439] (EAI 2)Name or service not known: [client 144.76.19.72:59074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:00.433716 2026] [ssl:error] [pid 3121439:tid 3121439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:00.488619 2026] [ssl:error] [pid 3128734:tid 3128734] (EAI 2)Name or service not known: [client 144.76.19.72:59076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:00.488659 2026] [ssl:error] [pid 3128734:tid 3128734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:00.685050 2026] [access_compat:error] [pid 3123051:tid 3123051] [client 45.158.164.139:41892] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:47:02.073115 2026] [lsapi:warn] [pid 3123051:tid 3123051] [client 122.180.21.11:63308] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:02.448946 2026] [security2:error] [pid 3122410:tid 3122410] [client 43.157.20.63:46522] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "ams5tpkufcbC6cVZ5ITJ1gAAAAM"]
[Thu Jul 30 12:47:02.583207 2026] [core:error] [pid 3122974:tid 3122974] [client 20.104.22.47:55899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:02.583239 2026] [core:error] [pid 3122974:tid 3122974] [client 20.104.22.47:55899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:02.865852 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/i.php
[Thu Jul 30 12:47:03.304726 2026] [security2:error] [pid 3124919:tid 3124919] [client 43.157.20.63:52214] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "ams5t8Y97x6k6_uISmTpOQAAABs"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 12:47:03.306582 2026] [authz_core:error] [pid 3124919:tid 3124919] [client 43.157.20.63:52214] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 12:47:03.309220 2026] [authz_core:error] [pid 3124919:tid 3124919] [client 43.157.20.63:52214] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 12:47:03.542775 2026] [ssl:error] [pid 3128735:tid 3128735] (EAI 2)Name or service not known: [client 144.76.19.72:59080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:03.542814 2026] [ssl:error] [pid 3128735:tid 3128735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:03.596232 2026] [ssl:error] [pid 3123756:tid 3123756] (EAI 2)Name or service not known: [client 144.76.19.72:59096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:03.596271 2026] [ssl:error] [pid 3123756:tid 3123756] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:03.869553 2026] [core:error] [pid 3126204:tid 3126204] [client 20.104.22.47:55299] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:03.869581 2026] [core:error] [pid 3126204:tid 3126204] [client 20.104.22.47:55299] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:04.312388 2026] [authz_core:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01630: client denied by server configuration: /home/thepryor/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 12:47:04.312424 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Requests/library/Requests.php
[Thu Jul 30 12:47:04.531227 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/gecko-new.php
[Thu Jul 30 12:47:04.628545 2026] [authz_core:error] [pid 3124963:tid 3124963] [client 20.9.63.139:35342] AH01630: client denied by server configuration: /home/andrewmarvell/public_html/php.ini
[Thu Jul 30 12:47:05.107653 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/gecko-new.php
[Thu Jul 30 12:47:05.110930 2026] [core:error] [pid 3116967:tid 3116967] [client 20.104.22.47:55124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:05.110951 2026] [core:error] [pid 3116967:tid 3116967] [client 20.104.22.47:55124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:05.801622 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/NewFile.php
[Thu Jul 30 12:47:05.865509 2026] [ssl:error] [pid 3122974:tid 3122974] (70014)End of file found: [client 216.73.216.199:11212] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:06.171873 2026] [ssl:error] [pid 3122975:tid 3122975] (70014)End of file found: [client 216.73.216.199:37269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:06.609565 2026] [lsapi:warn] [pid 3129168:tid 3129168] [client 2a01:9700:4d04:e300:f1f1:bbed:98e9:e7ba:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:06.614024 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/NewFile.php
[Thu Jul 30 12:47:06.657185 2026] [core:error] [pid 3121317:tid 3121317] (13)Permission denied: [client 216.73.216.199:24976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/papier.com.mt.db
[Thu Jul 30 12:47:06.729672 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:59100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:06.729706 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:06.780171 2026] [ssl:error] [pid 3121317:tid 3121317] (70014)End of file found: [client 216.73.216.199:24976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:06.794696 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:59112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:06.794716 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:07.401202 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-Blogs.php
[Thu Jul 30 12:47:07.933908 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-Blogs.php
[Thu Jul 30 12:47:09.612738 2026] [authz_core:error] [pid 3129439:tid 3129439] [client 20.193.250.173:62635] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:47:09.852179 2026] [ssl:error] [pid 3124966:tid 3124966] (EAI 2)Name or service not known: [client 144.76.19.72:61952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:09.852207 2026] [ssl:error] [pid 3124966:tid 3124966] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:09.908175 2026] [ssl:error] [pid 3129340:tid 3129340] (EAI 2)Name or service not known: [client 144.76.19.72:61966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:09.908205 2026] [ssl:error] [pid 3129340:tid 3129340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:10.603347 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-face-resolver.php
[Thu Jul 30 12:47:10.603431 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-face.php
[Thu Jul 30 12:47:10.603448 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-utils.php
[Thu Jul 30 12:47:10.603481 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-library.php
[Thu Jul 30 12:47:10.603507 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-collection.php
[Thu Jul 30 12:47:12.001637 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/cv.php
[Thu Jul 30 12:47:12.474639 2026] [core:error] [pid 3097445:tid 3097445] [client 66.249.66.169:51963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:12.474672 2026] [core:error] [pid 3097445:tid 3097445] [client 66.249.66.169:51963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:12.522750 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/cv.php
[Thu Jul 30 12:47:12.658022 2026] [lsapi:warn] [pid 3126202:tid 3126202] [client 122.180.21.11:63927] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:12.965668 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:61980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:12.965697 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:13.021514 2026] [ssl:error] [pid 3128807:tid 3128807] (EAI 2)Name or service not known: [client 144.76.19.72:61988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:13.021548 2026] [ssl:error] [pid 3128807:tid 3128807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:14.337971 2026] [ssl:error] [pid 3123051:tid 3123051] (70014)End of file found: [client 216.73.216.199:36813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:14.518943 2026] [security2:error] [pid 3116967:tid 3116967] [client 43.164.3.182:39656] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.annasmithagent.com"] [uri "/"] [unique_id "ams5wsDqzxhBbBiF5TTucAAAACg"]
[Thu Jul 30 12:47:14.678422 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/ws83.php
[Thu Jul 30 12:47:14.868485 2026] [security2:error] [pid 3128734:tid 3128734] [client 79.155.138.101:51949] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5wuu5cfkaY_0YqYuLJwAAAAo"]
[Thu Jul 30 12:47:14.868560 2026] [security2:error] [pid 3128734:tid 3128734] [client 79.155.138.101:51949] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5wuu5cfkaY_0YqYuLJwAAAAo"]
[Thu Jul 30 12:47:14.868849 2026] [security2:error] [pid 3128734:tid 3128734] [client 79.155.138.101:51949] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5wuu5cfkaY_0YqYuLJwAAAAo"]
[Thu Jul 30 12:47:15.209437 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/ws83.php
[Thu Jul 30 12:47:16.002860 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/atex1.php
[Thu Jul 30 12:47:16.078326 2026] [ssl:error] [pid 3119557:tid 3119557] (EAI 2)Name or service not known: [client 144.76.19.72:61992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:16.078358 2026] [ssl:error] [pid 3119557:tid 3119557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:16.132839 2026] [ssl:error] [pid 3112061:tid 3112061] (EAI 2)Name or service not known: [client 144.76.19.72:62002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:16.132868 2026] [ssl:error] [pid 3112061:tid 3112061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:16.165177 2026] [ssl:error] [pid 3126063:tid 3126063] (70014)End of file found: [client 216.73.216.199:21838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:16.580572 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/atex1.php
[Thu Jul 30 12:47:16.651430 2026] [ssl:error] [pid 3128807:tid 3128807] (70014)End of file found: [client 216.73.216.199:1400] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:17.083440 2026] [lsapi:warn] [pid 3126204:tid 3126204] [client 2a01:9700:4d04:e300:f1f1:bbed:98e9:e7ba:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:17.130497 2026] [security2:error] [pid 3093749:tid 3093749] [client 43.106.5.3:52225] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5xfjpY7cYgsiqcJcrkQAAACk"]
[Thu Jul 30 12:47:17.130559 2026] [security2:error] [pid 3093749:tid 3093749] [client 43.106.5.3:52225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5xfjpY7cYgsiqcJcrkQAAACk"]
[Thu Jul 30 12:47:17.130807 2026] [security2:error] [pid 3093749:tid 3093749] [client 43.106.5.3:52225] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5xfjpY7cYgsiqcJcrkQAAACk"]
[Thu Jul 30 12:47:17.353534 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/class-t.api.php
[Thu Jul 30 12:47:17.935702 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/class-t.api.php
[Thu Jul 30 12:47:19.215770 2026] [ssl:error] [pid 3119557:tid 3119557] (EAI 2)Name or service not known: [client 144.76.19.72:62018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:19.215795 2026] [ssl:error] [pid 3119557:tid 3119557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:19.271667 2026] [ssl:error] [pid 3129168:tid 3129168] (EAI 2)Name or service not known: [client 144.76.19.72:62030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:19.271706 2026] [ssl:error] [pid 3129168:tid 3129168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:19.692171 2026] [ssl:error] [pid 3121374:tid 3121374] (70014)End of file found: [client 216.73.216.199:35140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:19.693224 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/w.php
[Thu Jul 30 12:47:20.227574 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/w.php
[Thu Jul 30 12:47:20.260888 2026] [security2:error] [pid 3101834:tid 3101834] [client 43.106.5.3:32271] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5yBXXMkOI2FdQZFulhgAAACc"]
[Thu Jul 30 12:47:20.260937 2026] [security2:error] [pid 3101834:tid 3101834] [client 43.106.5.3:32271] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams5yBXXMkOI2FdQZFulhgAAACc"]
[Thu Jul 30 12:47:20.261249 2026] [security2:error] [pid 3101834:tid 3101834] [client 43.106.5.3:32271] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams5yBXXMkOI2FdQZFulhgAAACc"]
[Thu Jul 30 12:47:20.974843 2026] [authz_core:error] [pid 3122372:tid 3122372] [client 57.141.0.41:32834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:47:20.975485 2026] [authz_core:error] [pid 3122372:tid 3122372] [client 57.141.0.41:32834] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:47:21.546995 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/archive.php
[Thu Jul 30 12:47:21.780877 2026] [ssl:error] [pid 3112061:tid 3112061] (70014)End of file found: [client 216.73.216.199:36558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:22.093111 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/archive.php
[Thu Jul 30 12:47:22.329350 2026] [ssl:error] [pid 3126063:tid 3126063] (EAI 2)Name or service not known: [client 144.76.19.72:58386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:22.329382 2026] [ssl:error] [pid 3126063:tid 3126063] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:22.383506 2026] [ssl:error] [pid 3128734:tid 3128734] (EAI 2)Name or service not known: [client 144.76.19.72:58400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:22.383538 2026] [ssl:error] [pid 3128734:tid 3128734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:22.405400 2026] [core:error] [pid 3129436:tid 3129436] [client 89.149.242.147:39696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:22.405426 2026] [core:error] [pid 3129436:tid 3129436] [client 89.149.242.147:39696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:22.849167 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/bless.php
[Thu Jul 30 12:47:22.963477 2026] [lsapi:warn] [pid 3129341:tid 3129341] [client 122.180.21.11:64533] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:22.982133 2026] [ssl:error] [pid 3125446:tid 3125446] (70014)End of file found: [client 216.73.216.199:58864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:23.405858 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/bless.php
[Thu Jul 30 12:47:23.469770 2026] [ssl:error] [pid 3101574:tid 3101574] (70014)End of file found: [client 216.73.216.199:62034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:24.308595 2026] [authz_core:error] [pid 3129437:tid 3129437] [client 66.249.66.34:56527] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:47:24.311244 2026] [authz_core:error] [pid 3129437:tid 3129437] [client 66.249.66.34:56527] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:47:24.662135 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/sagax1.php
[Thu Jul 30 12:47:25.064930 2026] [core:error] [pid 3120711:tid 3120711] [client 66.249.66.167:42496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:25.064961 2026] [core:error] [pid 3120711:tid 3120711] [client 66.249.66.167:42496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:25.217370 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/sagax1.php
[Thu Jul 30 12:47:25.554694 2026] [ssl:error] [pid 3097445:tid 3097445] (EAI 2)Name or service not known: [client 144.76.19.72:58414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:25.554723 2026] [ssl:error] [pid 3097445:tid 3097445] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:25.745765 2026] [ssl:error] [pid 3130265:tid 3130265] (EAI 2)Name or service not known: [client 144.76.19.72:58416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:25.745808 2026] [ssl:error] [pid 3130265:tid 3130265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:25.978933 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/wpc.php
[Thu Jul 30 12:47:26.559669 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wpc.php
[Thu Jul 30 12:47:27.090194 2026] [security2:error] [pid 3121439:tid 3121439] [client 216.73.216.199:10975] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/systemd/system.conf"] [unique_id "ams5z24HolghqVZKlhS7BQAAADM"]
[Thu Jul 30 12:47:27.090503 2026] [security2:error] [pid 3121439:tid 3121439] [client 216.73.216.199:10975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/systemd/system.conf"] [unique_id "ams5z24HolghqVZKlhS7BQAAADM"]
[Thu Jul 30 12:47:27.090742 2026] [security2:error] [pid 3121439:tid 3121439] [client 216.73.216.199:10975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/systemd/system.conf"] [unique_id "ams5z24HolghqVZKlhS7BQAAADM"]
[Thu Jul 30 12:47:27.195925 2026] [core:error] [pid 3121439:tid 3121439] (13)Permission denied: [client 216.73.216.199:10975] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty31/subsystem/ttyS1/closing_wait
[Thu Jul 30 12:47:27.332790 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/fone1.php
[Thu Jul 30 12:47:27.849698 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/fone1.php
[Thu Jul 30 12:47:28.099866 2026] [ssl:error] [pid 3121439:tid 3121439] (70014)End of file found: [client 216.73.216.199:10975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:28.592256 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/ncx.php
[Thu Jul 30 12:47:28.701554 2026] [core:error] [pid 3112061:tid 3112061] (13)Permission denied: [client 216.73.216.199:38818] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/subsystem/drivers/ec/unbind
[Thu Jul 30 12:47:28.838306 2026] [ssl:error] [pid 3125446:tid 3125446] (EAI 2)Name or service not known: [client 144.76.19.72:58420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:28.838341 2026] [ssl:error] [pid 3125446:tid 3125446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:28.905511 2026] [ssl:error] [pid 3124964:tid 3124964] (EAI 2)Name or service not known: [client 144.76.19.72:58424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:28.905534 2026] [ssl:error] [pid 3124964:tid 3124964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:29.119082 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/ncx.php
[Thu Jul 30 12:47:29.586085 2026] [lsapi:warn] [pid 3101574:tid 3101574] [client 45.158.164.139:35254] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:47:29.586129 2026] [lsapi:warn] [pid 3101574:tid 3101574] [client 45.158.164.139:35254] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:47:29.588670 2026] [lsapi:warn] [pid 3120570:tid 3120570] [client 89.197.16.98:51668] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:47:29.588705 2026] [lsapi:warn] [pid 3120570:tid 3120570] [client 89.197.16.98:51668] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:47:30.622402 2026] [security2:error] [pid 3099222:tid 3099222] [client 185.191.171.4:30632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/harbottle-lake-fishing"] [unique_id "ams50mmJMDE7Ux8aWFYg9AAAABk"]
[Thu Jul 30 12:47:30.625840 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/wso.php
[Thu Jul 30 12:47:31.174483 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wso.php
[Thu Jul 30 12:47:31.411598 2026] [ssl:error] [pid 3112061:tid 3112061] (70014)End of file found: [client 216.73.216.199:38818] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:31.974754 2026] [ssl:error] [pid 3130218:tid 3130218] (EAI 2)Name or service not known: [client 144.76.19.72:41058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:31.974800 2026] [ssl:error] [pid 3130218:tid 3130218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:32.031157 2026] [ssl:error] [pid 3101574:tid 3101574] (EAI 2)Name or service not known: [client 144.76.19.72:41074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:32.031182 2026] [ssl:error] [pid 3101574:tid 3101574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:33.453121 2026] [lsapi:warn] [pid 3130218:tid 3130218] [client 122.180.21.11:65140] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:34.322001 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 12:47:34.847281 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 12:47:35.023512 2026] [core:error] [pid 3101574:tid 3101574] (13)Permission denied: [client 216.73.216.199:34292] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/breakpoint/subsystem/uevent
[Thu Jul 30 12:47:35.090533 2026] [ssl:error] [pid 3129340:tid 3129340] (EAI 2)Name or service not known: [client 144.76.19.72:41086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:35.090560 2026] [ssl:error] [pid 3129340:tid 3129340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:35.144889 2026] [ssl:error] [pid 3124966:tid 3124966] (EAI 2)Name or service not known: [client 144.76.19.72:41100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:35.144925 2026] [ssl:error] [pid 3124966:tid 3124966] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:35.628558 2026] [ssl:error] [pid 3101574:tid 3101574] (70014)End of file found: [client 216.73.216.199:34292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:35.642138 2026] [authz_core:error] [pid 3122410:tid 3122410] [client 66.249.66.34:41400] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:47:35.644799 2026] [authz_core:error] [pid 3122410:tid 3122410] [client 66.249.66.34:41400] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:47:35.645749 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blink.php
[Thu Jul 30 12:47:35.927907 2026] [ssl:error] [pid 3129437:tid 3129437] (70014)End of file found: [client 216.73.216.199:47990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:36.170539 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blink.php
[Thu Jul 30 12:47:36.711928 2026] [ssl:error] [pid 3129340:tid 3129340] (70014)End of file found: [client 216.73.216.199:16021] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:37.271846 2026] [security2:error] [pid 3112061:tid 3112061] [client 44.212.232.231:46583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "ams52ZXSh_muGvfVwUam1gAAADU"]
[Thu Jul 30 12:47:37.641090 2026] [core:error] [pid 3128807:tid 3128807] [client 66.249.66.167:57242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:37.641115 2026] [core:error] [pid 3128807:tid 3128807] [client 66.249.66.167:57242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:38.196897 2026] [ssl:error] [pid 3121374:tid 3121374] (EAI 2)Name or service not known: [client 144.76.19.72:41106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:38.196944 2026] [ssl:error] [pid 3121374:tid 3121374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:38.250255 2026] [ssl:error] [pid 3121439:tid 3121439] (EAI 2)Name or service not known: [client 144.76.19.72:41116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:38.250281 2026] [ssl:error] [pid 3121439:tid 3121439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:38.789652 2026] [lsapi:warn] [pid 3112061:tid 3112061] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:38.958059 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/ww5.php
[Thu Jul 30 12:47:39.522585 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/ww5.php
[Thu Jul 30 12:47:40.267539 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/2.php
[Thu Jul 30 12:47:40.809500 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/2.php
[Thu Jul 30 12:47:40.936413 2026] [ssl:error] [pid 3126201:tid 3126201] (70014)End of file found: [client 216.73.216.199:47701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:40.982170 2026] [cgi:error] [pid 3121374:tid 3121374] [client 98.87.102.177:7126] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:47:40.982526 2026] [core:error] [pid 3121374:tid 3121374] [client 98.87.102.177:7126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:41.308592 2026] [ssl:error] [pid 3122372:tid 3122372] (EAI 2)Name or service not known: [client 144.76.19.72:39926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:41.308621 2026] [ssl:error] [pid 3122372:tid 3122372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:41.362844 2026] [ssl:error] [pid 3100415:tid 3100415] (EAI 2)Name or service not known: [client 144.76.19.72:39938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:41.362870 2026] [ssl:error] [pid 3100415:tid 3100415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:41.573264 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/classwithtostring.php
[Thu Jul 30 12:47:41.947757 2026] [ssl:error] [pid 3130328:tid 3130328] (70014)End of file found: [client 216.73.216.199:18176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:42.098270 2026] [core:error] [pid 3101574:tid 3101574] [client 66.249.64.170:39092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:42.098311 2026] [core:error] [pid 3101574:tid 3101574] [client 66.249.64.170:39092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:42.173365 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/classwithtostring.php
[Thu Jul 30 12:47:42.357146 2026] [authz_core:error] [pid 3129168:tid 3129168] [client 57.141.0.16:32434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:47:42.357832 2026] [authz_core:error] [pid 3129168:tid 3129168] [client 57.141.0.16:32434] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:47:42.971877 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/atomlib.php
[Thu Jul 30 12:47:43.500818 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/atomlib.php
[Thu Jul 30 12:47:44.003558 2026] [lsapi:warn] [pid 3123049:tid 3123049] [client 122.180.21.11:49364] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:44.057998 2026] [ssl:error] [pid 3117044:tid 3117044] (70014)End of file found: [client 216.73.216.199:31928] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:44.279089 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/rip.php
[Thu Jul 30 12:47:44.418111 2026] [ssl:error] [pid 3122372:tid 3122372] (EAI 2)Name or service not known: [client 144.76.19.72:39952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:44.418164 2026] [ssl:error] [pid 3122372:tid 3122372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:44.474016 2026] [ssl:error] [pid 3129340:tid 3129340] (EAI 2)Name or service not known: [client 144.76.19.72:39966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:44.474045 2026] [ssl:error] [pid 3129340:tid 3129340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:44.829015 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/rip.php
[Thu Jul 30 12:47:45.387949 2026] [security2:error] [pid 3130326:tid 3130326] [client 5.43.72.48:50898] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams54TzsD91UhP3NAkR7SwAAAB8"]
[Thu Jul 30 12:47:45.387998 2026] [security2:error] [pid 3130326:tid 3130326] [client 5.43.72.48:50898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams54TzsD91UhP3NAkR7SwAAAB8"]
[Thu Jul 30 12:47:45.388299 2026] [security2:error] [pid 3130326:tid 3130326] [client 5.43.72.48:50898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams54TzsD91UhP3NAkR7SwAAAB8"]
[Thu Jul 30 12:47:45.608955 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/p.php
[Thu Jul 30 12:47:46.142800 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/p.php
[Thu Jul 30 12:47:46.361328 2026] [ssl:error] [pid 3129340:tid 3129340] (70014)End of file found: [client 216.73.216.199:41172] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:46.932873 2026] [access_compat:error] [pid 3127947:tid 3127947] [client 20.104.22.47:61693] AH01797: client denied by server configuration: /home/thepryor/public_html/php.php
[Thu Jul 30 12:47:47.108311 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.59:55848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:47:47.109005 2026] [authz_core:error] [pid 3106594:tid 3106594] [client 57.141.0.59:55848] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:47:47.272541 2026] [ssl:error] [pid 3122826:tid 3122826] (70014)End of file found: [client 216.73.216.199:62234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:47.520603 2026] [access_compat:error] [pid 3127520:tid 3127520] [client 20.104.22.47:61605] AH01797: client denied by server configuration: /home/thepryor/public_html/php.php
[Thu Jul 30 12:47:47.528155 2026] [ssl:error] [pid 3106594:tid 3106594] (EAI 2)Name or service not known: [client 144.76.19.72:39972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:47.528178 2026] [ssl:error] [pid 3106594:tid 3106594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:47.582731 2026] [ssl:error] [pid 3129439:tid 3129439] (EAI 2)Name or service not known: [client 144.76.19.72:39986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:47.582771 2026] [ssl:error] [pid 3129439:tid 3129439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:47.835573 2026] [security2:error] [pid 3127948:tid 3127948] [client 109.200.254.232:45090] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams546_fQxaKIOvEEJ193gAAACs"]
[Thu Jul 30 12:47:47.835619 2026] [security2:error] [pid 3127948:tid 3127948] [client 109.200.254.232:45090] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams546_fQxaKIOvEEJ193gAAACs"]
[Thu Jul 30 12:47:47.835884 2026] [security2:error] [pid 3127948:tid 3127948] [client 109.200.254.232:45090] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams546_fQxaKIOvEEJ193gAAACs"]
[Thu Jul 30 12:47:49.219055 2026] [lsapi:warn] [pid 3130328:tid 3130328] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:50.274455 2026] [core:error] [pid 3120711:tid 3120711] [client 66.249.66.66:59695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:50.274484 2026] [core:error] [pid 3120711:tid 3120711] [client 66.249.66.66:59695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:50.288652 2026] [core:error] [pid 3130327:tid 3130327] [client 66.249.66.66:46444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:50.288677 2026] [core:error] [pid 3130327:tid 3130327] [client 66.249.66.66:46444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:50.377105 2026] [ssl:error] [pid 3121374:tid 3121374] (70014)End of file found: [client 216.73.216.199:17048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:47:50.670617 2026] [ssl:error] [pid 3129437:tid 3129437] (EAI 2)Name or service not known: [client 144.76.19.72:37052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:50.670648 2026] [ssl:error] [pid 3129437:tid 3129437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:50.725470 2026] [ssl:error] [pid 3101574:tid 3101574] (EAI 2)Name or service not known: [client 144.76.19.72:37068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:50.725503 2026] [ssl:error] [pid 3101574:tid 3101574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:51.014574 2026] [authz_core:error] [pid 3130266:tid 3130266] [client 57.141.0.11:58438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:47:51.015202 2026] [authz_core:error] [pid 3130266:tid 3130266] [client 57.141.0.11:58438] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:47:51.579192 2026] [security2:error] [pid 3117044:tid 3117044] [client 185.191.171.7:14672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,548.0/prev_next,prev.html"] [unique_id "ams552EvwcDGQxBXgny6YAAAAEA"]
[Thu Jul 30 12:47:52.362390 2026] [security2:error] [pid 3128735:tid 3128735] [client 45.172.99.165:50502] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams56Nfj_-8BFxBoZFMoAwAAAAw"]
[Thu Jul 30 12:47:52.362440 2026] [security2:error] [pid 3128735:tid 3128735] [client 45.172.99.165:50502] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams56Nfj_-8BFxBoZFMoAwAAAAw"]
[Thu Jul 30 12:47:52.362729 2026] [security2:error] [pid 3128735:tid 3128735] [client 45.172.99.165:50502] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams56Nfj_-8BFxBoZFMoAwAAAAw"]
[Thu Jul 30 12:47:53.778760 2026] [ssl:error] [pid 3128735:tid 3128735] (EAI 2)Name or service not known: [client 144.76.19.72:37080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:53.778794 2026] [ssl:error] [pid 3128735:tid 3128735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:53.836429 2026] [ssl:error] [pid 3124966:tid 3124966] (EAI 2)Name or service not known: [client 144.76.19.72:37096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:53.836464 2026] [ssl:error] [pid 3124966:tid 3124966] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:54.408656 2026] [lsapi:warn] [pid 3127521:tid 3127521] [client 122.180.21.11:49988] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:55.416669 2026] [core:error] [pid 3129437:tid 3129437] (13)Permission denied: [client 216.73.216.199:14346] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty6/subsystem/ttyS3/uartclk
[Thu Jul 30 12:47:56.894330 2026] [ssl:error] [pid 3130266:tid 3130266] (EAI 2)Name or service not known: [client 144.76.19.72:37108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:56.894368 2026] [ssl:error] [pid 3130266:tid 3130266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:56.952159 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:37110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:47:56.952184 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:47:57.017656 2026] [core:error] [pid 3119501:tid 3119501] [client 66.249.66.71:61736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:57.017688 2026] [core:error] [pid 3119501:tid 3119501] [client 66.249.66.71:61736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:47:57.144293 2026] [authz_core:error] [pid 3124964:tid 3124964] [client 57.141.0.43:37414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:47:57.145335 2026] [authz_core:error] [pid 3124964:tid 3124964] [client 57.141.0.43:37414] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:47:57.831355 2026] [core:error] [pid 3129437:tid 3129437] (13)Permission denied: [client 216.73.216.199:14346] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/mdio_bus/drivers_probe
[Thu Jul 30 12:47:58.344150 2026] [security2:error] [pid 3099222:tid 3099222] [client 43.135.145.117:41282] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sudokulogicapp.com"] [uri "/"] [unique_id "ams57mmJMDE7Ux8aWFYg_AAAABk"]
[Thu Jul 30 12:47:58.734931 2026] [core:error] [pid 3129437:tid 3129437] (13)Permission denied: [client 216.73.216.199:14346] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/devices/LNXCPU:05/eject
[Thu Jul 30 12:47:59.336638 2026] [core:error] [pid 3129437:tid 3129437] (13)Permission denied: [client 216.73.216.199:14346] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/bus/nd/drivers_probe
[Thu Jul 30 12:47:59.684320 2026] [lsapi:warn] [pid 3131354:tid 3131354] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:47:59.938469 2026] [ssl:error] [pid 3129437:tid 3129437] (70014)End of file found: [client 216.73.216.199:14346] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:00.027655 2026] [ssl:error] [pid 3100415:tid 3100415] (EAI 2)Name or service not known: [client 144.76.19.72:22854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:00.027695 2026] [ssl:error] [pid 3100415:tid 3100415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:00.085631 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:22856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:00.085660 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:01.138651 2026] [core:error] [pid 3123048:tid 3123048] (13)Permission denied: [client 216.73.216.199:15505] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/devices/device:17/eject
[Thu Jul 30 12:48:02.959633 2026] [core:error] [pid 3121374:tid 3121374] [client 66.249.66.41:40771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:02.959661 2026] [core:error] [pid 3121374:tid 3121374] [client 66.249.66.41:40771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:03.143844 2026] [ssl:error] [pid 3131354:tid 3131354] (EAI 2)Name or service not known: [client 144.76.19.72:22860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:03.143877 2026] [ssl:error] [pid 3131354:tid 3131354] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:03.200200 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:22874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:03.200232 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:03.548556 2026] [ssl:error] [pid 3123048:tid 3123048] (70014)End of file found: [client 216.73.216.199:15505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:04.451457 2026] [ssl:error] [pid 3131354:tid 3131354] (70014)End of file found: [client 216.73.216.199:6321] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:04.992503 2026] [lsapi:warn] [pid 3121439:tid 3121439] [client 122.180.21.11:50594] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:06.253558 2026] [ssl:error] [pid 3132239:tid 3132239] (EAI 2)Name or service not known: [client 144.76.19.72:22876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:06.253609 2026] [ssl:error] [pid 3132239:tid 3132239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:06.282274 2026] [ssl:error] [pid 3128734:tid 3128734] (70014)End of file found: [client 216.73.216.199:53483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:06.306041 2026] [ssl:error] [pid 3132240:tid 3132240] (EAI 2)Name or service not known: [client 144.76.19.72:22892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:06.306102 2026] [ssl:error] [pid 3132240:tid 3132240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:06.604248 2026] [security2:error] [pid 3080545:tid 3080545] [client 1.14.110.85:48902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "cssystems.co.uk"] [uri "/"] [unique_id "ams59psOke5wut2VWZCeuAAAAA4"], referer: http://cssystems.co.uk
[Thu Jul 30 12:48:08.687303 2026] [security2:error] [pid 3128807:tid 3128807] [client 85.208.96.198:42036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3194.0.html"] [unique_id "ams5-JL3_iBPckrp7xnbHgAAABM"]
[Thu Jul 30 12:48:08.988237 2026] [ssl:error] [pid 3129289:tid 3129289] (70014)End of file found: [client 216.73.216.199:23807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:09.361514 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:22896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:09.361546 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:09.416037 2026] [ssl:error] [pid 3127948:tid 3127948] (EAI 2)Name or service not known: [client 144.76.19.72:22912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:09.416090 2026] [ssl:error] [pid 3127948:tid 3127948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:09.785243 2026] [core:error] [pid 3080545:tid 3080545] (13)Permission denied: [client 216.73.216.199:59523] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty6/subsystem/ttyS3/close_delay
[Thu Jul 30 12:48:09.892670 2026] [autoindex:error] [pid 3080545:tid 3080545] (13)Permission denied: [client 216.73.216.199:59523] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/opt/cpanel/alt-php72/
[Thu Jul 30 12:48:10.148426 2026] [lsapi:warn] [pid 3132334:tid 3132334] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:10.192155 2026] [ssl:error] [pid 3080545:tid 3080545] (70014)End of file found: [client 216.73.216.199:59523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:12.007320 2026] [ssl:error] [pid 3123051:tid 3123051] (70014)End of file found: [client 216.73.216.199:16349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:12.089650 2026] [authz_core:error] [pid 3132332:tid 3132332] [client 57.141.0.19:29568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:12.090291 2026] [authz_core:error] [pid 3132332:tid 3132332] [client 57.141.0.19:29568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:12.474118 2026] [ssl:error] [pid 3132336:tid 3132336] (EAI 2)Name or service not known: [client 144.76.19.72:39278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:12.474155 2026] [ssl:error] [pid 3132336:tid 3132336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:12.527585 2026] [ssl:error] [pid 3122827:tid 3122827] (EAI 2)Name or service not known: [client 144.76.19.72:39288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:12.527615 2026] [ssl:error] [pid 3122827:tid 3122827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:13.688096 2026] [authz_core:error] [pid 3132239:tid 3132239] [client 57.141.0.59:26866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:13.688724 2026] [authz_core:error] [pid 3132239:tid 3132239] [client 57.141.0.59:26866] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:14.304346 2026] [ssl:error] [pid 3122827:tid 3122827] (70014)End of file found: [client 216.73.216.199:8440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:15.512220 2026] [lsapi:warn] [pid 3129289:tid 3129289] [client 122.180.21.11:51217] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:15.581393 2026] [ssl:error] [pid 3132288:tid 3132288] (EAI 2)Name or service not known: [client 144.76.19.72:39298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:15.581436 2026] [ssl:error] [pid 3132288:tid 3132288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:15.636423 2026] [ssl:error] [pid 3127947:tid 3127947] (EAI 2)Name or service not known: [client 144.76.19.72:39300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:15.636468 2026] [ssl:error] [pid 3127947:tid 3127947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:15.927942 2026] [ssl:error] [pid 3123049:tid 3123049] (70014)End of file found: [client 216.73.216.199:64923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:16.028377 2026] [security2:error] [pid 3132239:tid 3132239] [client 77.48.21.22:40160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "ams6APx1ODqKU4oArw-rpAAAAAk"]
[Thu Jul 30 12:48:16.528395 2026] [core:error] [pid 3124966:tid 3124966] [client 66.249.66.167:59413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:16.528428 2026] [core:error] [pid 3124966:tid 3124966] [client 66.249.66.167:59413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:17.224333 2026] [authz_core:error] [pid 3129289:tid 3129289] [client 57.141.0.39:25716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:17.224965 2026] [authz_core:error] [pid 3129289:tid 3129289] [client 57.141.0.39:25716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:18.068829 2026] [ssl:error] [pid 3129439:tid 3129439] (70014)End of file found: [client 216.73.216.199:56602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:18.693534 2026] [ssl:error] [pid 3132239:tid 3132239] (EAI 2)Name or service not known: [client 144.76.19.72:39312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:18.693559 2026] [ssl:error] [pid 3132239:tid 3132239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:18.747133 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:39326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:18.747225 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:19.769573 2026] [ssl:error] [pid 3127520:tid 3127520] (70014)End of file found: [client 216.73.216.199:57711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:20.614669 2026] [lsapi:warn] [pid 3130218:tid 3130218] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:21.279039 2026] [authz_core:error] [pid 3126201:tid 3126201] [client 57.141.0.28:28580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:21.279672 2026] [authz_core:error] [pid 3126201:tid 3126201] [client 57.141.0.28:28580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:21.300684 2026] [core:error] [pid 3099222:tid 3099222] (13)Permission denied: [client 216.73.216.199:59826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty6/subsystem/ttyS3/flags
[Thu Jul 30 12:48:21.702953 2026] [ssl:error] [pid 3099222:tid 3099222] (70014)End of file found: [client 216.73.216.199:59826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:21.804819 2026] [ssl:error] [pid 3122827:tid 3122827] (EAI 2)Name or service not known: [client 144.76.19.72:54014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:21.804846 2026] [ssl:error] [pid 3122827:tid 3122827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:21.859577 2026] [ssl:error] [pid 3122410:tid 3122410] (EAI 2)Name or service not known: [client 144.76.19.72:54018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:21.859619 2026] [ssl:error] [pid 3122410:tid 3122410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:22.687212 2026] [security2:error] [pid 3123051:tid 3123051] [client 114.119.142.20:30301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577404800/request_format~html/cat_ids~103"] [unique_id "ams6BgJzqrdqyNc-bS06hwAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E27-12-2019
[Thu Jul 30 12:48:23.429579 2026] [ssl:error] [pid 3129439:tid 3129439] (70014)End of file found: [client 216.73.216.199:41020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:24.324580 2026] [security2:error] [pid 3133073:tid 3133073] [client 114.119.142.20:30307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577404800/request_format~html/cat_ids~103"] [unique_id "ams6CEMeuXUpZecduKDgzwAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E27-12-2019
[Thu Jul 30 12:48:24.913439 2026] [ssl:error] [pid 3133072:tid 3133072] (EAI 2)Name or service not known: [client 144.76.19.72:54028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:24.913475 2026] [ssl:error] [pid 3133072:tid 3133072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:24.968170 2026] [ssl:error] [pid 3123051:tid 3123051] (EAI 2)Name or service not known: [client 144.76.19.72:54032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:24.968195 2026] [ssl:error] [pid 3123051:tid 3123051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:25.264802 2026] [ssl:error] [pid 3127948:tid 3127948] (70014)End of file found: [client 216.73.216.199:37444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:25.289637 2026] [security2:error] [pid 3133072:tid 3133072] [client 169.224.38.62:4378] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6CZZC2TxZ9HhX4_ZflwAAABA"]
[Thu Jul 30 12:48:25.289680 2026] [security2:error] [pid 3133072:tid 3133072] [client 169.224.38.62:4378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6CZZC2TxZ9HhX4_ZflwAAABA"]
[Thu Jul 30 12:48:25.289961 2026] [security2:error] [pid 3133072:tid 3133072] [client 169.224.38.62:4378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6CZZC2TxZ9HhX4_ZflwAAABA"]
[Thu Jul 30 12:48:25.691641 2026] [ssl:error] [pid 3133115:tid 3133115] (70014)End of file found: [client 216.73.216.199:7248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:25.950263 2026] [lsapi:warn] [pid 3132283:tid 3132283] [client 122.180.21.11:51824] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:26.005129 2026] [authz_core:error] [pid 3127948:tid 3127948] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:48:26.226335 2026] [authz_core:error] [pid 3132239:tid 3132239] [client 57.141.0.16:24756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:26.227139 2026] [authz_core:error] [pid 3132239:tid 3132239] [client 57.141.0.16:24756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:26.489287 2026] [ssl:error] [pid 3127520:tid 3127520] (70014)End of file found: [client 216.73.216.199:27360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:27.103286 2026] [security2:error] [pid 3121439:tid 3121439] [client 144.48.134.114:12538] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6C24HolghqVZKlhS7LQAAADM"]
[Thu Jul 30 12:48:27.103348 2026] [security2:error] [pid 3121439:tid 3121439] [client 144.48.134.114:12538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6C24HolghqVZKlhS7LQAAADM"]
[Thu Jul 30 12:48:27.103626 2026] [security2:error] [pid 3121439:tid 3121439] [client 144.48.134.114:12538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6C24HolghqVZKlhS7LQAAADM"]
[Thu Jul 30 12:48:27.787200 2026] [ssl:error] [pid 3129437:tid 3129437] (70014)End of file found: [client 216.73.216.199:41285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:28.024900 2026] [ssl:error] [pid 3120711:tid 3120711] (EAI 2)Name or service not known: [client 144.76.19.72:54046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:28.024925 2026] [ssl:error] [pid 3120711:tid 3120711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:28.080940 2026] [ssl:error] [pid 3133073:tid 3133073] (EAI 2)Name or service not known: [client 144.76.19.72:54052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:28.080973 2026] [ssl:error] [pid 3133073:tid 3133073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:28.191175 2026] [security2:error] [pid 3132334:tid 3132334] [client 45.148.10.120:40216] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams6DLvAyjtt2E08J3n9-AAAADA"]
[Thu Jul 30 12:48:28.191337 2026] [security2:error] [pid 3132334:tid 3132334] [client 45.148.10.120:40216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams6DLvAyjtt2E08J3n9-AAAADA"]
[Thu Jul 30 12:48:28.191727 2026] [security2:error] [pid 3132334:tid 3132334] [client 45.148.10.120:40216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams6DLvAyjtt2E08J3n9-AAAADA"]
[Thu Jul 30 12:48:28.323463 2026] [core:error] [pid 3120570:tid 3120570] [client 66.249.66.167:50438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:28.323496 2026] [core:error] [pid 3120570:tid 3120570] [client 66.249.66.167:50438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:31.086619 2026] [lsapi:warn] [pid 3132288:tid 3132288] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:31.109285 2026] [security2:error] [pid 3133072:tid 3133072] [client 14.234.242.157:59008] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6D5ZC2TxZ9HhX4_ZfmAAAABA"]
[Thu Jul 30 12:48:31.109334 2026] [security2:error] [pid 3133072:tid 3133072] [client 14.234.242.157:59008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6D5ZC2TxZ9HhX4_ZfmAAAABA"]
[Thu Jul 30 12:48:31.109582 2026] [security2:error] [pid 3133072:tid 3133072] [client 14.234.242.157:59008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6D5ZC2TxZ9HhX4_ZfmAAAABA"]
[Thu Jul 30 12:48:31.149743 2026] [ssl:error] [pid 3132334:tid 3132334] (EAI 2)Name or service not known: [client 144.76.19.72:41456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:31.149788 2026] [ssl:error] [pid 3132334:tid 3132334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:31.151730 2026] [security2:error] [pid 3129168:tid 3129168] [client 185.191.171.19:10268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/tozo-t10-left-earbud-won't-reset"] [unique_id "ams6D8LpleHrEbeTPD9xngAAABY"]
[Thu Jul 30 12:48:31.201446 2026] [ssl:error] [pid 3128735:tid 3128735] (EAI 2)Name or service not known: [client 144.76.19.72:41458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:31.201474 2026] [ssl:error] [pid 3128735:tid 3128735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:31.409423 2026] [ssl:error] [pid 3132336:tid 3132336] (70014)End of file found: [client 216.73.216.199:44129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:32.012054 2026] [ssl:error] [pid 3133072:tid 3133072] (70014)End of file found: [client 216.73.216.199:46067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:33.105474 2026] [ssl:error] [pid 3132185:tid 3132185] (70014)End of file found: [client 216.73.216.199:39975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:34.256350 2026] [ssl:error] [pid 3132239:tid 3132239] (EAI 2)Name or service not known: [client 144.76.19.72:41466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:34.256394 2026] [ssl:error] [pid 3132239:tid 3132239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:34.309906 2026] [ssl:error] [pid 3126201:tid 3126201] (EAI 2)Name or service not known: [client 144.76.19.72:41480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:34.309945 2026] [ssl:error] [pid 3126201:tid 3126201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:34.774385 2026] [authz_core:error] [pid 3116967:tid 3116967] [client 57.141.0.61:29080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:34.775023 2026] [authz_core:error] [pid 3116967:tid 3116967] [client 57.141.0.61:29080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:34.896797 2026] [security2:error] [pid 3121374:tid 3121374] [client 85.208.96.210:11900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1934.0/prev_next,next.html"] [unique_id "ams6Enao5EE_RbitM5qSCgAAACQ"]
[Thu Jul 30 12:48:36.389179 2026] [lsapi:warn] [pid 3080545:tid 3080545] [client 122.180.21.11:52433] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:36.735591 2026] [ssl:error] [pid 3121374:tid 3121374] (70014)End of file found: [client 216.73.216.199:13683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:37.103034 2026] [authz_core:error] [pid 3132339:tid 3132339] [client 57.141.0.65:46164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:37.103687 2026] [authz_core:error] [pid 3132339:tid 3132339] [client 57.141.0.65:46164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:37.312286 2026] [ssl:error] [pid 3100415:tid 3100415] (70014)End of file found: [client 216.73.216.199:51713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:37.365665 2026] [ssl:error] [pid 3121439:tid 3121439] (EAI 2)Name or service not known: [client 144.76.19.72:41488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:37.365692 2026] [ssl:error] [pid 3121439:tid 3121439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:37.421454 2026] [ssl:error] [pid 3128734:tid 3128734] (EAI 2)Name or service not known: [client 144.76.19.72:41500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:37.421483 2026] [ssl:error] [pid 3128734:tid 3128734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:38.533841 2026] [ssl:error] [pid 3129289:tid 3129289] (70014)End of file found: [client 216.73.216.199:40392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:40.476926 2026] [ssl:error] [pid 3126201:tid 3126201] (EAI 2)Name or service not known: [client 144.76.19.72:30010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:40.476960 2026] [ssl:error] [pid 3126201:tid 3126201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:40.531324 2026] [ssl:error] [pid 3123051:tid 3123051] (EAI 2)Name or service not known: [client 144.76.19.72:30024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:40.531351 2026] [ssl:error] [pid 3123051:tid 3123051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:40.997632 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.167:37389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:40.997663 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.167:37389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:41.554389 2026] [lsapi:warn] [pid 3122827:tid 3122827] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:43.586092 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:30026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:43.586122 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:43.587136 2026] [authz_core:error] [pid 3129168:tid 3129168] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 12:48:43.641986 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:30040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:43.642008 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:44.382454 2026] [ssl:error] [pid 3132185:tid 3132185] (70014)End of file found: [client 216.73.216.199:23572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:45.588056 2026] [core:error] [pid 3132335:tid 3132335] (13)Permission denied: [client 216.73.216.199:40115] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS1/port
[Thu Jul 30 12:48:46.695864 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:30054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:46.695898 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:46.752095 2026] [ssl:error] [pid 3128734:tid 3128734] (EAI 2)Name or service not known: [client 144.76.19.72:30066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:46.752126 2026] [ssl:error] [pid 3128734:tid 3128734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:46.905921 2026] [lsapi:warn] [pid 3132334:tid 3132334] [client 122.180.21.11:53054] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:47.695263 2026] [ssl:error] [pid 3132335:tid 3132335] (70014)End of file found: [client 216.73.216.199:40115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:48.302384 2026] [ssl:error] [pid 3129438:tid 3129438] (70014)End of file found: [client 216.73.216.199:1862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:49.806692 2026] [core:error] [pid 3129168:tid 3129168] (13)Permission denied: [client 216.73.216.199:28743] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_reject_ipv4/sections/__ksymtab_gpl
[Thu Jul 30 12:48:49.823261 2026] [ssl:error] [pid 3121374:tid 3121374] (EAI 2)Name or service not known: [client 144.76.19.72:58188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:49.823287 2026] [ssl:error] [pid 3121374:tid 3121374] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:49.879590 2026] [ssl:error] [pid 3101574:tid 3101574] (EAI 2)Name or service not known: [client 144.76.19.72:58204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:49.879613 2026] [ssl:error] [pid 3101574:tid 3101574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:50.946479 2026] [security2:error] [pid 3101574:tid 3101574] [client 1.15.52.154:47606] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "ams6Ioj-kqtTHx5Fa2UJWQAAAAY"]
[Thu Jul 30 12:48:51.197225 2026] [core:error] [pid 3120570:tid 3120570] [client 57.141.0.66:26700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:51.197268 2026] [core:error] [pid 3120570:tid 3120570] [client 57.141.0.66:26700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:51.916907 2026] [ssl:error] [pid 3129168:tid 3129168] (70014)End of file found: [client 216.73.216.199:28743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:52.023337 2026] [lsapi:warn] [pid 3130327:tid 3130327] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:52.892328 2026] [security2:error] [pid 3133743:tid 3133743] [client 114.119.140.206:56687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/pages/26/Field_notes/fn_D0319___nr_jerramungup/page:13"] [unique_id "ams6JM46wrxSPt8bmqSIQwAAAAI"], referer: http://jonathanmeyerart.co.uk/pages/26/Field_notes/fn_1998___springfield/page:14
[Thu Jul 30 12:48:52.976566 2026] [ssl:error] [pid 3128807:tid 3128807] (EAI 2)Name or service not known: [client 144.76.19.72:58218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:52.976594 2026] [ssl:error] [pid 3128807:tid 3128807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:53.023435 2026] [core:error] [pid 3130326:tid 3130326] (13)Permission denied: [client 216.73.216.199:38689] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty57/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:48:53.029462 2026] [ssl:error] [pid 3133113:tid 3133113] (EAI 2)Name or service not known: [client 144.76.19.72:58232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:53.029500 2026] [ssl:error] [pid 3133113:tid 3133113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:53.349706 2026] [authz_core:error] [pid 3122826:tid 3122826] [client 57.141.0.1:36202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:53.350317 2026] [authz_core:error] [pid 3122826:tid 3122826] [client 57.141.0.1:36202] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:53.424268 2026] [ssl:error] [pid 3130326:tid 3130326] (70014)End of file found: [client 216.73.216.199:38689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:53.693162 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.167:50268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:53.693198 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.167:50268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:53.693938 2026] [core:error] [pid 3128807:tid 3128807] [client 66.249.66.167:53151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:53.693959 2026] [core:error] [pid 3128807:tid 3128807] [client 66.249.66.167:53151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:48:54.064261 2026] [authz_core:error] [pid 3122826:tid 3122826] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:48:55.432617 2026] [ssl:error] [pid 3132286:tid 3132286] (70014)End of file found: [client 216.73.216.199:18996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:56.082233 2026] [ssl:error] [pid 3122827:tid 3122827] (EAI 2)Name or service not known: [client 144.76.19.72:58238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:56.082266 2026] [ssl:error] [pid 3122827:tid 3122827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:56.139029 2026] [ssl:error] [pid 3134148:tid 3134148] (EAI 2)Name or service not known: [client 144.76.19.72:58246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:56.139085 2026] [ssl:error] [pid 3134148:tid 3134148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:56.545028 2026] [authz_core:error] [pid 3122827:tid 3122827] [client 57.141.0.30:28476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:48:56.545667 2026] [authz_core:error] [pid 3122827:tid 3122827] [client 57.141.0.30:28476] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:48:57.222026 2026] [lsapi:warn] [pid 3133116:tid 3133116] [client 122.180.21.11:53664] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:48:57.438249 2026] [ssl:error] [pid 3122827:tid 3122827] (70014)End of file found: [client 216.73.216.199:15433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:48:58.976171 2026] [security2:error] [pid 3129438:tid 3129438] [client 3.219.80.71:16237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams6Krt7-ljs2dlfeH6DKQAAADw"]
[Thu Jul 30 12:48:59.196841 2026] [ssl:error] [pid 3132334:tid 3132334] (EAI 2)Name or service not known: [client 144.76.19.72:58256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:59.196877 2026] [ssl:error] [pid 3132334:tid 3132334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:59.248345 2026] [ssl:error] [pid 3133115:tid 3133115] (EAI 2)Name or service not known: [client 144.76.19.72:58262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:48:59.248380 2026] [ssl:error] [pid 3133115:tid 3133115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:48:59.353984 2026] [ssl:error] [pid 3130218:tid 3130218] (70014)End of file found: [client 216.73.216.199:54186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:01.242883 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 12:49:01.242942 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.331113 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 12:49:01.331166 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.434017 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 12:49:01.434088 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.526480 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 12:49:01.526555 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.615214 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 12:49:01.615265 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.732214 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/hosty.php
[Thu Jul 30 12:49:01.732263 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.817532 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/test1.php
[Thu Jul 30 12:49:01.817580 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.903098 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/zwso.php
[Thu Jul 30 12:49:01.903152 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:01.962061 2026] [authz_core:error] [pid 3132240:tid 3132240] [client 57.141.0.52:52492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:01.962698 2026] [authz_core:error] [pid 3132240:tid 3132240] [client 57.141.0.52:52492] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:01.988641 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 12:49:01.988683 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.073527 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/mini
[Thu Jul 30 12:49:02.158618 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog-header.php
[Thu Jul 30 12:49:02.158670 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.243766 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/about
[Thu Jul 30 12:49:02.318838 2026] [ssl:error] [pid 3120570:tid 3120570] (EAI 2)Name or service not known: [client 144.76.19.72:46540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:02.318878 2026] [ssl:error] [pid 3120570:tid 3120570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:02.339338 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/function
[Thu Jul 30 12:49:02.370535 2026] [ssl:error] [pid 3133877:tid 3133877] (EAI 2)Name or service not known: [client 144.76.19.72:46544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:02.370573 2026] [ssl:error] [pid 3133877:tid 3133877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:02.425238 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-signin.php
[Thu Jul 30 12:49:02.425289 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.483897 2026] [lsapi:warn] [pid 3129168:tid 3129168] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:02.537456 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 12:49:02.537525 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.623894 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 12:49:02.623942 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.713221 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/class.php
[Thu Jul 30 12:49:02.713269 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.798694 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/flower.php
[Thu Jul 30 12:49:02.798745 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.883872 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/motu.php
[Thu Jul 30 12:49:02.883925 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:02.969010 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 12:49:02.969080 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.054553 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/lite.php
[Thu Jul 30 12:49:03.054603 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.140095 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 12:49:03.140144 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.225921 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:49:03.312587 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-links-opml.php
[Thu Jul 30 12:49:03.312634 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.397632 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/.alf.php
[Thu Jul 30 12:49:03.397684 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.482805 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/ws.php
[Thu Jul 30 12:49:03.482855 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.567897 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/css
[Thu Jul 30 12:49:03.653118 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 12:49:03.653171 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.738106 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/ws54.php
[Thu Jul 30 12:49:03.738153 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.769056 2026] [authz_core:error] [pid 3129168:tid 3129168] [client 57.141.0.60:35862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:03.769687 2026] [authz_core:error] [pid 3129168:tid 3129168] [client 57.141.0.60:35862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:03.826285 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 12:49:03.826333 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:03.911414 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 12:49:03.996485 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 12:49:03.996548 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.083727 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/tinyfilemanager.php
[Thu Jul 30 12:49:04.083776 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.168705 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/hplfuns.php
[Thu Jul 30 12:49:04.168750 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.254385 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/bthil.php
[Thu Jul 30 12:49:04.254430 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.339954 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/cv.php
[Thu Jul 30 12:49:04.339998 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.413540 2026] [authz_core:error] [pid 3117044:tid 3117044] [client 20.40.60.34:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 12:49:04.428476 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/sf.php
[Thu Jul 30 12:49:04.428524 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.533984 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content.php
[Thu Jul 30 12:49:04.534029 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.618958 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/.bod
[Thu Jul 30 12:49:04.703847 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/txets.php
[Thu Jul 30 12:49:04.703894 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.791809 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wk
[Thu Jul 30 12:49:04.803222 2026] [authz_core:error] [pid 3132336:tid 3132336] [client 57.141.0.33:38018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:04.804288 2026] [authz_core:error] [pid 3132336:tid 3132336] [client 57.141.0.33:38018] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:04.890321 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 12:49:04.890372 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:04.976776 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/new.php
[Thu Jul 30 12:49:04.976827 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:05.062423 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:49:05.147429 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/.trash7206
[Thu Jul 30 12:49:05.241869 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 12:49:05.241914 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:05.326998 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/error.php
[Thu Jul 30 12:49:05.327044 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:05.411875 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/a7.php
[Thu Jul 30 12:49:05.411923 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 12:49:05.424774 2026] [ssl:error] [pid 3133116:tid 3133116] (EAI 2)Name or service not known: [client 144.76.19.72:46552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:05.424804 2026] [ssl:error] [pid 3133116:tid 3133116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:05.481014 2026] [ssl:error] [pid 3132336:tid 3132336] (EAI 2)Name or service not known: [client 144.76.19.72:46562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:05.481039 2026] [ssl:error] [pid 3132336:tid 3132336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:05.511888 2026] [access_compat:error] [pid 3132335:tid 3132335] [client 20.104.16.169:55984] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 12:49:06.959564 2026] [core:error] [pid 3133116:tid 3133116] [client 66.249.66.4:43366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:06.959597 2026] [core:error] [pid 3133116:tid 3133116] [client 66.249.66.4:43366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:07.745959 2026] [lsapi:warn] [pid 3133116:tid 3133116] [client 122.180.21.11:54281] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:08.534778 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:46568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:08.534831 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:08.563103 2026] [security2:error] [pid 3132240:tid 3132240] [client 94.154.43.177:61062] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bumpyburpuk.hatch-works.com"] [uri "/.env"] [unique_id "ams6NK_SDxKJ6YCtXZTN5gAAABI"]
[Thu Jul 30 12:49:08.563305 2026] [security2:error] [pid 3132240:tid 3132240] [client 94.154.43.177:61062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bumpyburpuk.hatch-works.com"] [uri "/.env"] [unique_id "ams6NK_SDxKJ6YCtXZTN5gAAABI"]
[Thu Jul 30 12:49:08.589867 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:46574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:08.589906 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:08.690626 2026] [ssl:error] [pid 3129438:tid 3129438] (70014)End of file found: [client 216.73.216.199:44059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:08.716870 2026] [security2:error] [pid 3124919:tid 3124919] [client 51.68.111.209:25157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wildduckdesigns.co.uk"] [uri "/robots.txt"] [unique_id "ams6NMY97x6k6_uISmTp7wAAABs"]
[Thu Jul 30 12:49:08.717287 2026] [security2:error] [pid 3133116:tid 3133116] [client 94.154.43.178:60806] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "ams6NI_h_f1tYydPMLgCaAAAAC4"]
[Thu Jul 30 12:49:08.717451 2026] [security2:error] [pid 3133116:tid 3133116] [client 94.154.43.178:60806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "ams6NI_h_f1tYydPMLgCaAAAAC4"]
[Thu Jul 30 12:49:08.717662 2026] [security2:error] [pid 3133116:tid 3133116] [client 94.154.43.178:60806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "ams6NI_h_f1tYydPMLgCaAAAAC4"]
[Thu Jul 30 12:49:08.718503 2026] [security2:error] [pid 3132286:tid 3132286] [client 94.154.43.183:52466] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "ams6NLT5p3UBjaHj_hKzTAAAABo"]
[Thu Jul 30 12:49:08.718639 2026] [security2:error] [pid 3132286:tid 3132286] [client 94.154.43.183:52466] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "ams6NLT5p3UBjaHj_hKzTAAAABo"]
[Thu Jul 30 12:49:08.718832 2026] [security2:error] [pid 3132286:tid 3132286] [client 94.154.43.183:52466] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "ams6NLT5p3UBjaHj_hKzTAAAABo"]
[Thu Jul 30 12:49:08.992519 2026] [ssl:error] [pid 3132340:tid 3132340] (70014)End of file found: [client 216.73.216.199:47945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:09.277061 2026] [security2:error] [pid 3132240:tid 3132240] [client 94.154.43.177:61062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bumpyburpuk.hatch-works.com"] [uri "/index.php"] [unique_id "ams6NK_SDxKJ6YCtXZTN5gAAABI"]
[Thu Jul 30 12:49:09.735038 2026] [security2:error] [pid 3101574:tid 3101574] [client 94.154.43.183:52478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "ams6NYj-kqtTHx5Fa2UJXgAAAAY"]
[Thu Jul 30 12:49:09.735250 2026] [security2:error] [pid 3101574:tid 3101574] [client 94.154.43.183:52478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "ams6NYj-kqtTHx5Fa2UJXgAAAAY"]
[Thu Jul 30 12:49:09.735470 2026] [security2:error] [pid 3101574:tid 3101574] [client 94.154.43.183:52478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "ams6NYj-kqtTHx5Fa2UJXgAAAAY"]
[Thu Jul 30 12:49:10.080220 2026] [security2:error] [pid 3122410:tid 3122410] [client 82.156.34.74:50780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/"] [unique_id "ams6NpkufcbC6cVZ5ITJ8gAAAAM"]
[Thu Jul 30 12:49:10.794389 2026] [ssl:error] [pid 3132286:tid 3132286] (70014)End of file found: [client 216.73.216.199:1409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:11.527846 2026] [authz_core:error] [pid 3132288:tid 3132288] [client 57.141.0.13:39860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:11.528477 2026] [authz_core:error] [pid 3132288:tid 3132288] [client 57.141.0.13:39860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:11.542661 2026] [security2:error] [pid 3130326:tid 3130326] [client 82.156.34.74:51866] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ams6NzzsD91UhP3NAkR7VwAAAB8"], referer: http://www.theislipgarage.co.uk
[Thu Jul 30 12:49:11.646992 2026] [ssl:error] [pid 3122410:tid 3122410] (EAI 2)Name or service not known: [client 144.76.19.72:29064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:11.647023 2026] [ssl:error] [pid 3122410:tid 3122410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:11.701444 2026] [ssl:error] [pid 3126201:tid 3126201] (EAI 2)Name or service not known: [client 144.76.19.72:29072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:11.701467 2026] [ssl:error] [pid 3126201:tid 3126201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:13.020028 2026] [lsapi:warn] [pid 3132335:tid 3132335] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:14.437415 2026] [ssl:error] [pid 3123049:tid 3123049] (70014)End of file found: [client 216.73.216.199:38746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:14.758605 2026] [ssl:error] [pid 3129438:tid 3129438] (EAI 2)Name or service not known: [client 144.76.19.72:29086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:14.758659 2026] [ssl:error] [pid 3129438:tid 3129438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:14.816210 2026] [ssl:error] [pid 3129168:tid 3129168] (EAI 2)Name or service not known: [client 144.76.19.72:29102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:14.816247 2026] [ssl:error] [pid 3129168:tid 3129168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:15.039857 2026] [autoindex:error] [pid 3100415:tid 3100415] (13)Permission denied: [client 216.73.216.199:1956] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/alismcom/
[Thu Jul 30 12:49:15.866616 2026] [security2:error] [pid 3129438:tid 3129438] [client 43.164.190.124:36270] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ogsoil.com"] [uri "/"] [unique_id "ams6O7t7-ljs2dlfeH6DPQAAADw"]
[Thu Jul 30 12:49:16.544581 2026] [core:error] [pid 3100415:tid 3100415] (13)Permission denied: [client 216.73.216.199:1956] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfit/sections/__kcrctab_gpl
[Thu Jul 30 12:49:16.845937 2026] [ssl:error] [pid 3100415:tid 3100415] (70014)End of file found: [client 216.73.216.199:1956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:17.748772 2026] [core:error] [pid 3132286:tid 3132286] (13)Permission denied: [client 216.73.216.199:30002] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/kess2012.org.db
[Thu Jul 30 12:49:17.870163 2026] [ssl:error] [pid 3122826:tid 3122826] (EAI 2)Name or service not known: [client 144.76.19.72:29116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:17.870202 2026] [ssl:error] [pid 3122826:tid 3122826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:17.924683 2026] [ssl:error] [pid 3126201:tid 3126201] (EAI 2)Name or service not known: [client 144.76.19.72:29132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:17.924720 2026] [ssl:error] [pid 3126201:tid 3126201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:18.309180 2026] [authz_core:error] [pid 3117044:tid 3117044] [client 57.141.0.8:34566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:18.309805 2026] [authz_core:error] [pid 3117044:tid 3117044] [client 57.141.0.8:34566] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:18.372413 2026] [lsapi:warn] [pid 3132339:tid 3132339] [client 122.180.21.11:54887] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:19.057151 2026] [core:error] [pid 3123051:tid 3123051] [client 66.249.66.39:65183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:19.057188 2026] [core:error] [pid 3123051:tid 3123051] [client 66.249.66.39:65183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:19.855649 2026] [core:error] [pid 3132286:tid 3132286] (13)Permission denied: [client 216.73.216.199:30002] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/slabs
[Thu Jul 30 12:49:20.155908 2026] [security2:error] [pid 3132286:tid 3132286] [client 216.73.216.199:30002] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib/systemd/resolv.conf"] [unique_id "ams6QLT5p3UBjaHj_hKzWwAAABo"]
[Thu Jul 30 12:49:20.156175 2026] [security2:error] [pid 3132286:tid 3132286] [client 216.73.216.199:30002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib/systemd/resolv.conf"] [unique_id "ams6QLT5p3UBjaHj_hKzWwAAABo"]
[Thu Jul 30 12:49:20.156399 2026] [security2:error] [pid 3132286:tid 3132286] [client 216.73.216.199:30002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib/systemd/resolv.conf"] [unique_id "ams6QLT5p3UBjaHj_hKzWwAAABo"]
[Thu Jul 30 12:49:20.261193 2026] [authz_core:error] [pid 3126201:tid 3126201] [client 57.141.0.42:51052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:20.261824 2026] [authz_core:error] [pid 3126201:tid 3126201] [client 57.141.0.42:51052] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:20.758943 2026] [ssl:error] [pid 3132286:tid 3132286] (70014)End of file found: [client 216.73.216.199:30002] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:20.986998 2026] [ssl:error] [pid 3132288:tid 3132288] (EAI 2)Name or service not known: [client 144.76.19.72:33040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:20.987030 2026] [ssl:error] [pid 3132288:tid 3132288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:21.040304 2026] [ssl:error] [pid 3128735:tid 3128735] (EAI 2)Name or service not known: [client 144.76.19.72:33054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:21.040351 2026] [ssl:error] [pid 3128735:tid 3128735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:23.487314 2026] [lsapi:warn] [pid 3120570:tid 3120570] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:24.096219 2026] [ssl:error] [pid 3132288:tid 3132288] (EAI 2)Name or service not known: [client 144.76.19.72:33070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:24.096249 2026] [ssl:error] [pid 3132288:tid 3132288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:24.150540 2026] [ssl:error] [pid 3117044:tid 3117044] (EAI 2)Name or service not known: [client 144.76.19.72:33072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:24.150571 2026] [ssl:error] [pid 3117044:tid 3117044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:26.934792 2026] [security2:error] [pid 3122826:tid 3122826] [client 216.73.216.199:35058] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/container/cl-quotas.dat"] [unique_id "ams6RkZFBIjyaJhOQjoyFwAAAAQ"]
[Thu Jul 30 12:49:26.935268 2026] [security2:error] [pid 3122826:tid 3122826] [client 216.73.216.199:35058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/container/cl-quotas.dat"] [unique_id "ams6RkZFBIjyaJhOQjoyFwAAAAQ"]
[Thu Jul 30 12:49:26.935628 2026] [security2:error] [pid 3122826:tid 3122826] [client 216.73.216.199:35058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/container/cl-quotas.dat"] [unique_id "ams6RkZFBIjyaJhOQjoyFwAAAAQ"]
[Thu Jul 30 12:49:27.205718 2026] [ssl:error] [pid 3132286:tid 3132286] (EAI 2)Name or service not known: [client 144.76.19.72:33078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:27.205760 2026] [ssl:error] [pid 3132286:tid 3132286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:27.258027 2026] [ssl:error] [pid 3124919:tid 3124919] (EAI 2)Name or service not known: [client 144.76.19.72:33092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:27.258089 2026] [ssl:error] [pid 3124919:tid 3124919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:27.541978 2026] [ssl:error] [pid 3122826:tid 3122826] (70014)End of file found: [client 216.73.216.199:35058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:28.818276 2026] [lsapi:warn] [pid 3127947:tid 3127947] [client 122.180.21.11:55496] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:29.121244 2026] [security2:error] [pid 3117044:tid 3117044] [client 124.105.3.34:51776] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6SWEvwcDGQxBXgny62gAAAEA"]
[Thu Jul 30 12:49:29.121298 2026] [security2:error] [pid 3117044:tid 3117044] [client 124.105.3.34:51776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6SWEvwcDGQxBXgny62gAAAEA"]
[Thu Jul 30 12:49:29.121560 2026] [security2:error] [pid 3117044:tid 3117044] [client 124.105.3.34:51776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6SWEvwcDGQxBXgny62gAAAEA"]
[Thu Jul 30 12:49:30.312729 2026] [ssl:error] [pid 3127947:tid 3127947] (EAI 2)Name or service not known: [client 144.76.19.72:60862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:30.312762 2026] [ssl:error] [pid 3127947:tid 3127947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:30.365965 2026] [ssl:error] [pid 3129289:tid 3129289] (EAI 2)Name or service not known: [client 144.76.19.72:60870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:30.366007 2026] [ssl:error] [pid 3129289:tid 3129289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:30.551254 2026] [ssl:error] [pid 3129168:tid 3129168] (70014)End of file found: [client 216.73.216.199:53470] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:30.772997 2026] [authz_core:error] [pid 3129341:tid 3129341] [client 66.249.66.34:48389] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:49:30.776244 2026] [authz_core:error] [pid 3129341:tid 3129341] [client 66.249.66.34:48389] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:49:31.663585 2026] [security2:error] [pid 3135524:tid 3135524] [client 85.208.96.199:40062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/fishes-and-more-aruba-early-bird-menu"] [unique_id "ams6S1wTupsq52Oc8QXdBQAAABU"]
[Thu Jul 30 12:49:31.753737 2026] [core:error] [pid 3099222:tid 3099222] [client 66.249.66.66:52567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:31.753772 2026] [core:error] [pid 3099222:tid 3099222] [client 66.249.66.66:52567] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:32.102439 2026] [security2:error] [pid 3135523:tid 3135523] [client 37.36.32.174:37344] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6TLigg3feKm0XcREFqQAAABE"]
[Thu Jul 30 12:49:32.102517 2026] [security2:error] [pid 3135523:tid 3135523] [client 37.36.32.174:37344] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6TLigg3feKm0XcREFqQAAABE"]
[Thu Jul 30 12:49:32.102873 2026] [security2:error] [pid 3135523:tid 3135523] [client 37.36.32.174:37344] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6TLigg3feKm0XcREFqQAAABE"]
[Thu Jul 30 12:49:33.260430 2026] [core:error] [pid 3134148:tid 3134148] (13)Permission denied: [client 216.73.216.199:39222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty17/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:49:33.442591 2026] [ssl:error] [pid 3132286:tid 3132286] (EAI 2)Name or service not known: [client 144.76.19.72:60894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:33.442642 2026] [ssl:error] [pid 3132286:tid 3132286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:33.502138 2026] [ssl:error] [pid 3129436:tid 3129436] (EAI 2)Name or service not known: [client 144.76.19.72:60910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:33.502175 2026] [ssl:error] [pid 3129436:tid 3129436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:33.868745 2026] [ssl:error] [pid 3134148:tid 3134148] (5)Input/output error: [client 216.73.216.199:39222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:33.992893 2026] [lsapi:warn] [pid 3101574:tid 3101574] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:35.668797 2026] [core:error] [pid 3135567:tid 3135567] (13)Permission denied: [client 216.73.216.199:61882] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty25/subsystem/ttyS2/closing_wait
[Thu Jul 30 12:49:35.855798 2026] [security2:error] [pid 3128807:tid 3128807] [client 103.119.64.173:59522] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6T5L3_iBPckrp7xnbdAAAABM"]
[Thu Jul 30 12:49:35.855848 2026] [security2:error] [pid 3128807:tid 3128807] [client 103.119.64.173:59522] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6T5L3_iBPckrp7xnbdAAAABM"]
[Thu Jul 30 12:49:35.856145 2026] [security2:error] [pid 3128807:tid 3128807] [client 103.119.64.173:59522] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6T5L3_iBPckrp7xnbdAAAABM"]
[Thu Jul 30 12:49:36.056274 2026] [core:error] [pid 3130218:tid 3130218] [client 66.249.64.170:60257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:36.056309 2026] [core:error] [pid 3130218:tid 3130218] [client 66.249.64.170:60257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:36.573545 2026] [ssl:error] [pid 3133114:tid 3133114] (EAI 2)Name or service not known: [client 144.76.19.72:60920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:36.573579 2026] [ssl:error] [pid 3133114:tid 3133114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:36.626098 2026] [ssl:error] [pid 3130327:tid 3130327] (EAI 2)Name or service not known: [client 144.76.19.72:60932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:36.626161 2026] [ssl:error] [pid 3130327:tid 3130327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:36.873466 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:61882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:37.479952 2026] [ssl:error] [pid 3133073:tid 3133073] (70014)End of file found: [client 216.73.216.199:18334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:39.210298 2026] [ssl:error] [pid 3135522:tid 3135522] (70014)End of file found: [client 216.73.216.199:25296] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:39.243129 2026] [lsapi:warn] [pid 3133877:tid 3133877] [client 122.180.21.11:56106] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:39.681524 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:62750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:39.681553 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:39.738414 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:62756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:39.738441 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:39.973690 2026] [authz_core:error] [pid 3129438:tid 3129438] [client 57.141.0.22:57602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:39.974318 2026] [authz_core:error] [pid 3129438:tid 3129438] [client 57.141.0.22:57602] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:40.184496 2026] [cgi:error] [pid 3128735:tid 3128735] [client 192.175.111.232:51546] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden, referer: https://mail.clarepillinger.co.uk
[Thu Jul 30 12:49:40.184616 2026] [cgi:error] [pid 3128735:tid 3128735] [client 192.175.111.232:51546] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157., referer: https://mail.clarepillinger.co.uk
[Thu Jul 30 12:49:40.305241 2026] [authz_core:error] [pid 3134148:tid 3134148] [client 66.249.66.34:49010] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:49:40.308176 2026] [authz_core:error] [pid 3134148:tid 3134148] [client 66.249.66.34:49010] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:49:42.607813 2026] [ssl:error] [pid 3129436:tid 3129436] (70014)End of file found: [client 216.73.216.199:49682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:42.794571 2026] [ssl:error] [pid 3129438:tid 3129438] (EAI 2)Name or service not known: [client 144.76.19.72:62772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:42.794607 2026] [ssl:error] [pid 3129438:tid 3129438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:42.848809 2026] [ssl:error] [pid 3128735:tid 3128735] (EAI 2)Name or service not known: [client 144.76.19.72:62778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:42.848857 2026] [ssl:error] [pid 3128735:tid 3128735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:43.113607 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:46262] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:43.929341 2026] [authz_core:error] [pid 3129438:tid 3129438] [client 57.141.0.7:65066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:43.929987 2026] [authz_core:error] [pid 3129438:tid 3129438] [client 57.141.0.7:65066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:44.414674 2026] [core:error] [pid 3133743:tid 3133743] [client 66.249.66.39:60264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:44.414702 2026] [core:error] [pid 3133743:tid 3133743] [client 66.249.66.39:60264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:44.459874 2026] [lsapi:warn] [pid 3135568:tid 3135568] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:44.717916 2026] [ssl:error] [pid 3133073:tid 3133073] (95)Operation not supported: [client 216.73.216.199:5872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:45.625690 2026] [security2:error] [pid 3135523:tid 3135523] [client 114.119.132.171:47397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~8-4-2020"] [unique_id "ams6Wbigg3feKm0XcREFsAAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~8-4-2020
[Thu Jul 30 12:49:45.907894 2026] [ssl:error] [pid 3130266:tid 3130266] (EAI 2)Name or service not known: [client 144.76.19.72:62780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:45.907928 2026] [ssl:error] [pid 3130266:tid 3130266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:45.962528 2026] [ssl:error] [pid 3132286:tid 3132286] (EAI 2)Name or service not known: [client 144.76.19.72:62792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:45.962560 2026] [ssl:error] [pid 3132286:tid 3132286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:47.549075 2026] [security2:error] [pid 3135521:tid 3135521] [client 114.119.132.171:47413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~8-4-2020"] [unique_id "ams6W3873yIkJDsq_M2pwAAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~8-4-2020
[Thu Jul 30 12:49:47.902499 2026] [core:error] [pid 3100415:tid 3100415] [client 66.249.66.8:56992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:47.902524 2026] [core:error] [pid 3100415:tid 3100415] [client 66.249.66.8:56992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:47.917398 2026] [core:error] [pid 3130218:tid 3130218] (13)Permission denied: [client 216.73.216.199:39186] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/thunderbolt/drivers/pci:thunderbolt/new_id
[Thu Jul 30 12:49:49.018563 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:62796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:49.018603 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:49.071259 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:62810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:49.071292 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:49.726435 2026] [lsapi:warn] [pid 3120570:tid 3120570] [client 122.180.21.11:56720] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:49.836531 2026] [core:error] [pid 3122826:tid 3122826] (13)Permission denied: [client 216.73.216.199:61819] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/scsi/uevent
[Thu Jul 30 12:49:50.138142 2026] [ssl:error] [pid 3122826:tid 3122826] (70014)End of file found: [client 216.73.216.199:61819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:50.608272 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.15:21934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:49:50.608935 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.15:21934] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:49:52.125258 2026] [ssl:error] [pid 3135522:tid 3135522] (EAI 2)Name or service not known: [client 144.76.19.72:30916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:52.125319 2026] [ssl:error] [pid 3135522:tid 3135522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:52.179687 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:30926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:52.179731 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:52.847287 2026] [ssl:error] [pid 3130218:tid 3130218] (70014)End of file found: [client 216.73.216.199:39186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:54.062183 2026] [core:error] [pid 3099222:tid 3099222] (13)Permission denied: [client 216.73.216.199:38782] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS3/line
[Thu Jul 30 12:49:54.935910 2026] [lsapi:warn] [pid 3130266:tid 3130266] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:49:55.237956 2026] [ssl:error] [pid 3135521:tid 3135521] (EAI 2)Name or service not known: [client 144.76.19.72:30942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:55.238002 2026] [ssl:error] [pid 3135521:tid 3135521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:55.293594 2026] [ssl:error] [pid 3135522:tid 3135522] (EAI 2)Name or service not known: [client 144.76.19.72:30956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:55.293627 2026] [ssl:error] [pid 3135522:tid 3135522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:55.750412 2026] [ssl:error] [pid 3099222:tid 3099222] (70014)End of file found: [client 216.73.216.199:38782] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:49:58.303031 2026] [security2:error] [pid 3122826:tid 3122826] [client 85.208.96.205:19772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10447.0/prev_next,prev.html"] [unique_id "ams6ZkZFBIjyaJhOQjoyIwAAAAQ"]
[Thu Jul 30 12:49:58.349093 2026] [ssl:error] [pid 3128735:tid 3128735] (EAI 2)Name or service not known: [client 144.76.19.72:30966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:58.349124 2026] [ssl:error] [pid 3128735:tid 3128735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:58.404815 2026] [ssl:error] [pid 3122827:tid 3122827] (EAI 2)Name or service not known: [client 144.76.19.72:30972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:49:58.404844 2026] [ssl:error] [pid 3122827:tid 3122827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:49:59.048419 2026] [core:error] [pid 3122827:tid 3122827] [client 66.249.66.167:53416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:59.048447 2026] [core:error] [pid 3122827:tid 3122827] [client 66.249.66.167:53416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:59.048929 2026] [core:error] [pid 3135521:tid 3135521] [client 66.249.66.3:65280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:49:59.048949 2026] [core:error] [pid 3135521:tid 3135521] [client 66.249.66.3:65280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:00.139716 2026] [lsapi:warn] [pid 3135566:tid 3135566] [client 122.180.21.11:57323] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:00.866417 2026] [ssl:error] [pid 3135570:tid 3135570] (70014)End of file found: [client 216.73.216.199:41622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:01.473218 2026] [ssl:error] [pid 3135521:tid 3135521] (EAI 2)Name or service not known: [client 144.76.19.72:44668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:01.473256 2026] [ssl:error] [pid 3135521:tid 3135521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:01.476234 2026] [ssl:error] [pid 3135522:tid 3135522] (70014)End of file found: [client 216.73.216.199:1996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:01.527635 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:44682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:01.527660 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:01.565124 2026] [authz_core:error] [pid 3133116:tid 3133116] [client 57.141.0.13:38808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:01.565766 2026] [authz_core:error] [pid 3133116:tid 3133116] [client 57.141.0.13:38808] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:01.983640 2026] [ssl:error] [pid 3135521:tid 3135521] (70014)End of file found: [client 216.73.216.199:26441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:04.583126 2026] [ssl:error] [pid 3130218:tid 3130218] (EAI 2)Name or service not known: [client 144.76.19.72:44694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:04.583157 2026] [ssl:error] [pid 3130218:tid 3130218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:04.635639 2026] [ssl:error] [pid 3132286:tid 3132286] (EAI 2)Name or service not known: [client 144.76.19.72:44696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:04.635661 2026] [ssl:error] [pid 3132286:tid 3132286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:05.413475 2026] [lsapi:warn] [pid 3133113:tid 3133113] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:06.362819 2026] [authz_core:error] [pid 3137000:tid 3137000] [client 57.141.0.3:50064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:06.363497 2026] [authz_core:error] [pid 3137000:tid 3137000] [client 57.141.0.3:50064] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:06.367224 2026] [ssl:error] [pid 3136999:tid 3136999] (70014)End of file found: [client 216.73.216.199:11533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:07.066647 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.39:41386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:07.067282 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.39:41386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:07.494395 2026] [security2:error] [pid 3132339:tid 3132339] [client 38.25.60.246:17732] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6b2va6e-if0PFjfpQHAAAADs"]
[Thu Jul 30 12:50:07.494445 2026] [security2:error] [pid 3132339:tid 3132339] [client 38.25.60.246:17732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6b2va6e-if0PFjfpQHAAAADs"]
[Thu Jul 30 12:50:07.494691 2026] [security2:error] [pid 3132339:tid 3132339] [client 38.25.60.246:17732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6b2va6e-if0PFjfpQHAAAADs"]
[Thu Jul 30 12:50:07.691773 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:44706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:07.691806 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:07.745541 2026] [ssl:error] [pid 3137001:tid 3137001] (EAI 2)Name or service not known: [client 144.76.19.72:44714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:07.745575 2026] [ssl:error] [pid 3137001:tid 3137001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:07.831796 2026] [ssl:error] [pid 3136907:tid 3136907] (70014)End of file found: [client 216.73.216.199:43748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:08.316868 2026] [ssl:error] [pid 3133116:tid 3133116] (70014)End of file found: [client 216.73.216.199:58818] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:10.629572 2026] [lsapi:warn] [pid 3135564:tid 3135564] [client 122.180.21.11:57924] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:10.800703 2026] [ssl:error] [pid 3122827:tid 3122827] (EAI 2)Name or service not known: [client 144.76.19.72:25254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:10.800735 2026] [ssl:error] [pid 3122827:tid 3122827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:10.853764 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:25260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:10.853798 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:11.317932 2026] [core:error] [pid 3135564:tid 3135564] [client 66.249.66.194:39980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:11.317965 2026] [core:error] [pid 3135564:tid 3135564] [client 66.249.66.194:39980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:11.335223 2026] [authz_core:error] [pid 3137160:tid 3137160] [client 57.141.0.4:34340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:11.336301 2026] [authz_core:error] [pid 3137160:tid 3137160] [client 57.141.0.4:34340] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:11.960100 2026] [ssl:error] [pid 3136999:tid 3136999] (70014)End of file found: [client 216.73.216.199:59506] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:12.134047 2026] [security2:error] [pid 3135570:tid 3135570] [client 102.213.216.2:60942] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6dIqwOCcpQ9oSVoeEGQAAAC0"]
[Thu Jul 30 12:50:12.134122 2026] [security2:error] [pid 3135570:tid 3135570] [client 102.213.216.2:60942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6dIqwOCcpQ9oSVoeEGQAAAC0"]
[Thu Jul 30 12:50:12.134391 2026] [security2:error] [pid 3135570:tid 3135570] [client 102.213.216.2:60942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6dIqwOCcpQ9oSVoeEGQAAAC0"]
[Thu Jul 30 12:50:12.564183 2026] [authz_core:error] [pid 3135567:tid 3135567] [client 57.141.0.12:53652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:12.564816 2026] [authz_core:error] [pid 3135567:tid 3135567] [client 57.141.0.12:53652] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:13.493209 2026] [authz_core:error] [pid 3135565:tid 3135565] [client 57.141.0.26:23918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:13.493832 2026] [authz_core:error] [pid 3135565:tid 3135565] [client 57.141.0.26:23918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:13.939935 2026] [ssl:error] [pid 3136907:tid 3136907] (EAI 2)Name or service not known: [client 144.76.19.72:25264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:13.939978 2026] [ssl:error] [pid 3136907:tid 3136907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:13.995156 2026] [ssl:error] [pid 3136940:tid 3136940] (EAI 2)Name or service not known: [client 144.76.19.72:25266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:13.995216 2026] [ssl:error] [pid 3136940:tid 3136940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:14.165437 2026] [core:error] [pid 3135524:tid 3135524] (13)Permission denied: [client 216.73.216.199:23407] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nf_nat_ftp/uevent
[Thu Jul 30 12:50:15.586175 2026] [security2:error] [pid 3136998:tid 3136998] [client 190.101.121.93:49312] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6dxKRFU_Yx8Z0kpiOwgAAABY"]
[Thu Jul 30 12:50:15.586235 2026] [security2:error] [pid 3136998:tid 3136998] [client 190.101.121.93:49312] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6dxKRFU_Yx8Z0kpiOwgAAABY"]
[Thu Jul 30 12:50:15.586498 2026] [security2:error] [pid 3136998:tid 3136998] [client 190.101.121.93:49312] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6dxKRFU_Yx8Z0kpiOwgAAABY"]
[Thu Jul 30 12:50:15.671830 2026] [core:error] [pid 3135524:tid 3135524] (13)Permission denied: [client 216.73.216.199:23407] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCPv6/free_calls
[Thu Jul 30 12:50:15.888735 2026] [lsapi:warn] [pid 3133114:tid 3133114] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:17.039697 2026] [security2:error] [pid 3132288:tid 3132288] [client 43.157.20.63:60456] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampman.com"] [uri "/"] [unique_id "ams6eTHvye0ErMp3lpWzKQAAAB0"]
[Thu Jul 30 12:50:17.087305 2026] [ssl:error] [pid 3132334:tid 3132334] (EAI 2)Name or service not known: [client 144.76.19.72:25274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:17.087339 2026] [ssl:error] [pid 3132334:tid 3132334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:17.142085 2026] [ssl:error] [pid 3134148:tid 3134148] (EAI 2)Name or service not known: [client 144.76.19.72:25288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:17.142115 2026] [ssl:error] [pid 3134148:tid 3134148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:18.188831 2026] [security2:error] [pid 3132288:tid 3132288] [client 43.157.20.63:38000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "ams6ejHvye0ErMp3lpWzKgAAAB0"], referer: http://spampman.com
[Thu Jul 30 12:50:18.383429 2026] [ssl:error] [pid 3135524:tid 3135524] (70014)End of file found: [client 216.73.216.199:23407] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:19.059852 2026] [security2:error] [pid 3134415:tid 3134415] [client 51.195.244.216:49772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jasperandtroy.com"] [uri "/robots.txt"] [unique_id "ams6exim9oHS0qqOzPUfaAAAAAA"]
[Thu Jul 30 12:50:19.180865 2026] [core:error] [pid 3135523:tid 3135523] [client 66.249.66.66:47939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:19.180889 2026] [core:error] [pid 3135523:tid 3135523] [client 66.249.66.66:47939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:19.887063 2026] [ssl:error] [pid 3128735:tid 3128735] (70014)End of file found: [client 216.73.216.199:18131] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:20.111202 2026] [security2:error] [pid 3122827:tid 3122827] [client 51.195.244.61:60116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jasperandtroy.com"] [uri "/michael-boffey.co.uk/image-3.php"] [unique_id "ams6fOFQH5vc3F4o6V3rvgAAAAg"]
[Thu Jul 30 12:50:20.234017 2026] [ssl:error] [pid 3132288:tid 3132288] (EAI 2)Name or service not known: [client 144.76.19.72:50174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:20.234048 2026] [ssl:error] [pid 3132288:tid 3132288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:20.285663 2026] [ssl:error] [pid 3130327:tid 3130327] (EAI 2)Name or service not known: [client 144.76.19.72:50184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:20.285695 2026] [ssl:error] [pid 3130327:tid 3130327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:21.263486 2026] [lsapi:warn] [pid 3120570:tid 3120570] [client 122.180.21.11:58539] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:21.706248 2026] [ssl:error] [pid 3133743:tid 3133743] (70014)End of file found: [client 216.73.216.199:47811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:23.346876 2026] [core:error] [pid 3136999:tid 3136999] [client 66.249.66.167:58578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:23.346910 2026] [core:error] [pid 3136999:tid 3136999] [client 66.249.66.167:58578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:23.411058 2026] [ssl:error] [pid 3136998:tid 3136998] (EAI 2)Name or service not known: [client 144.76.19.72:50198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:23.411109 2026] [ssl:error] [pid 3136998:tid 3136998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:23.463055 2026] [ssl:error] [pid 3129438:tid 3129438] (EAI 2)Name or service not known: [client 144.76.19.72:50214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:23.463113 2026] [ssl:error] [pid 3129438:tid 3129438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:25.769046 2026] [core:error] [pid 3136705:tid 3136705] (13)Permission denied: [client 216.73.216.199:11861] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/iapib.com.db
[Thu Jul 30 12:50:26.070307 2026] [ssl:error] [pid 3136705:tid 3136705] (70014)End of file found: [client 216.73.216.199:11861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:26.378612 2026] [lsapi:warn] [pid 3134148:tid 3134148] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:26.519882 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:50222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:26.519914 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:26.575676 2026] [ssl:error] [pid 3132334:tid 3132334] (EAI 2)Name or service not known: [client 144.76.19.72:50236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:26.575705 2026] [ssl:error] [pid 3132334:tid 3132334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:27.280296 2026] [ssl:error] [pid 3136998:tid 3136998] (70014)End of file found: [client 216.73.216.199:19044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:28.480196 2026] [ssl:error] [pid 3134148:tid 3134148] (70014)End of file found: [client 216.73.216.199:20236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:29.602442 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 12:50:29.602580 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 12:50:29.602770 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 12:50:29.602966 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 12:50:29.603043 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 12:50:29.603255 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 12:50:29.603438 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 12:50:29.603531 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 12:50:29.603777 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 12:50:29.603923 2026] [authz_core:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 12:50:29.604010 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 12:50:29.604097 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 12:50:29.604283 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 12:50:29.604462 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 12:50:29.604589 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 12:50:29.604776 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 12:50:29.604956 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 12:50:29.605031 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 12:50:29.605258 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 12:50:29.606272 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 12:50:29.606371 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 12:50:29.606565 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 12:50:29.606767 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 12:50:29.606843 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 12:50:29.607143 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 12:50:29.607817 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 12:50:29.607897 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 12:50:29.608095 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 12:50:29.608276 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 12:50:29.608367 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 12:50:29.608560 2026] [access_compat:error] [pid 3135484:tid 3135484] [client 192.175.111.230:59363] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 12:50:29.632520 2026] [ssl:error] [pid 3132340:tid 3132340] (EAI 2)Name or service not known: [client 144.76.19.72:59552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:29.632562 2026] [ssl:error] [pid 3132340:tid 3132340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:29.687214 2026] [ssl:error] [pid 3133116:tid 3133116] (EAI 2)Name or service not known: [client 144.76.19.72:59558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:29.687247 2026] [ssl:error] [pid 3133116:tid 3133116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:30.919649 2026] [authz_core:error] [pid 3132334:tid 3132334] [client 66.249.66.35:49860] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:50:30.922406 2026] [authz_core:error] [pid 3132334:tid 3132334] [client 66.249.66.35:49860] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:50:31.631372 2026] [lsapi:warn] [pid 3122826:tid 3122826] [client 122.180.21.11:59155] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:32.283822 2026] [security2:error] [pid 3133116:tid 3133116] [client 185.191.171.11:46678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/world-championship-darts-2023-tickets"] [unique_id "ams6iI_h_f1tYydPMLgCgQAAAC4"]
[Thu Jul 30 12:50:32.644806 2026] [security2:error] [pid 3128807:tid 3128807] [client 43.130.141.193:49872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/"] [unique_id "ams6iJL3_iBPckrp7xnbgwAAABM"]
[Thu Jul 30 12:50:32.762303 2026] [ssl:error] [pid 3132286:tid 3132286] (EAI 2)Name or service not known: [client 144.76.19.72:59564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:32.762333 2026] [ssl:error] [pid 3132286:tid 3132286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:32.818518 2026] [ssl:error] [pid 3132288:tid 3132288] (EAI 2)Name or service not known: [client 144.76.19.72:59578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:32.818545 2026] [ssl:error] [pid 3132288:tid 3132288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:33.350371 2026] [security2:error] [pid 3099222:tid 3099222] [client 43.130.141.193:50440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ams6iWmJMDE7Ux8aWFYhTgAAABk"], referer: http://www.clarepillinger.co.uk
[Thu Jul 30 12:50:33.599064 2026] [ssl:error] [pid 3123049:tid 3123049] (70014)End of file found: [client 216.73.216.199:4545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:35.148051 2026] [core:error] [pid 3135567:tid 3135567] [client 66.249.66.167:44741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:35.148108 2026] [core:error] [pid 3135567:tid 3135567] [client 66.249.66.167:44741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:35.711639 2026] [core:error] [pid 3135564:tid 3135564] (13)Permission denied: [client 216.73.216.199:63644] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/destroy_by_rcu
[Thu Jul 30 12:50:35.874532 2026] [ssl:error] [pid 3122827:tid 3122827] (EAI 2)Name or service not known: [client 144.76.19.72:59584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:35.874569 2026] [ssl:error] [pid 3122827:tid 3122827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:35.930122 2026] [ssl:error] [pid 3133113:tid 3133113] (EAI 2)Name or service not known: [client 144.76.19.72:59592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:35.930160 2026] [ssl:error] [pid 3133113:tid 3133113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:36.015077 2026] [security2:error] [pid 3099222:tid 3099222] [client 170.106.147.63:53716] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "ams6jGmJMDE7Ux8aWFYhUwAAABk"]
[Thu Jul 30 12:50:36.132737 2026] [security2:error] [pid 3134415:tid 3134415] [client 47.128.126.142:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/robots.txt"] [unique_id "ams6jBim9oHS0qqOzPUfbgAAAAA"]
[Thu Jul 30 12:50:36.673980 2026] [authz_core:error] [pid 3132340:tid 3132340] [client 57.141.0.43:24486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:36.674623 2026] [authz_core:error] [pid 3132340:tid 3132340] [client 57.141.0.43:24486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:36.858239 2026] [lsapi:warn] [pid 3134148:tid 3134148] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:37.170008 2026] [security2:error] [pid 3132339:tid 3132339] [client 170.106.147.63:45932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "ams6jWva6e-if0PFjfpQKAAAADs"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 12:50:37.221402 2026] [ssl:error] [pid 3135564:tid 3135564] (70014)End of file found: [client 216.73.216.199:63644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:38.390725 2026] [security2:error] [pid 3099222:tid 3099222] [client 170.106.147.63:46860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "ams6jmmJMDE7Ux8aWFYhVQAAABk"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 12:50:38.432422 2026] [core:error] [pid 3128735:tid 3128735] (13)Permission denied: [client 216.73.216.199:1247] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/iomem_base
[Thu Jul 30 12:50:38.948203 2026] [authz_core:error] [pid 3132334:tid 3132334] [client 57.141.0.17:33394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:38.948822 2026] [authz_core:error] [pid 3132334:tid 3132334] [client 57.141.0.17:33394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:39.052475 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:59594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:39.052519 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:39.107677 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:59600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:39.107704 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:39.336021 2026] [ssl:error] [pid 3128735:tid 3128735] (70014)End of file found: [client 216.73.216.199:1247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:40.103154 2026] [authz_core:error] [pid 3133073:tid 3133073] [client 45.137.215.48:49365] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:50:40.105835 2026] [authz_core:error] [pid 3133073:tid 3133073] [client 45.137.215.48:49365] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 12:50:40.240632 2026] [ssl:error] [pid 3127520:tid 3127520] (70014)End of file found: [client 216.73.216.199:50431] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:42.030516 2026] [lsapi:warn] [pid 3134415:tid 3134415] [client 122.180.21.11:59771] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:42.162563 2026] [ssl:error] [pid 3137000:tid 3137000] (EAI 2)Name or service not known: [client 144.76.19.72:39910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:42.162612 2026] [ssl:error] [pid 3137000:tid 3137000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:42.216577 2026] [ssl:error] [pid 3130218:tid 3130218] (EAI 2)Name or service not known: [client 144.76.19.72:39912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:42.216610 2026] [ssl:error] [pid 3130218:tid 3130218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:44.811091 2026] [core:error] [pid 3130218:tid 3130218] [client 66.249.64.170:54601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:44.811123 2026] [core:error] [pid 3130218:tid 3130218] [client 66.249.64.170:54601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:45.274964 2026] [ssl:error] [pid 3138686:tid 3138686] (EAI 2)Name or service not known: [client 144.76.19.72:39924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:45.274997 2026] [ssl:error] [pid 3138686:tid 3138686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:45.333211 2026] [ssl:error] [pid 3129438:tid 3129438] (EAI 2)Name or service not known: [client 144.76.19.72:39940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:45.333237 2026] [ssl:error] [pid 3129438:tid 3129438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:45.985318 2026] [ssl:error] [pid 3135521:tid 3135521] (70014)End of file found: [client 216.73.216.199:50506] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:46.108747 2026] [authz_core:error] [pid 3138686:tid 3138686] [client 57.141.0.10:35594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:46.109379 2026] [authz_core:error] [pid 3138686:tid 3138686] [client 57.141.0.10:35594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:46.583404 2026] [core:error] [pid 3132288:tid 3132288] (13)Permission denied: [client 216.73.216.199:55242] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/subsystem/drivers/pvpanic/unbind
[Thu Jul 30 12:50:47.324287 2026] [lsapi:warn] [pid 3123049:tid 3123049] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:47.835718 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.3:43441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:47.835743 2026] [core:error] [pid 3127947:tid 3127947] [client 66.249.66.3:43441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:50:48.387280 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:39954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:48.387311 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:48.442037 2026] [ssl:error] [pid 3134148:tid 3134148] (EAI 2)Name or service not known: [client 144.76.19.72:39956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:48.442092 2026] [ssl:error] [pid 3134148:tid 3134148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:48.992014 2026] [ssl:error] [pid 3132288:tid 3132288] (70014)End of file found: [client 216.73.216.199:55242] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:49.870455 2026] [authz_core:error] [pid 3135484:tid 3135484] [client 216.73.216.199:10780] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 12:50:49.897091 2026] [security2:error] [pid 3128807:tid 3128807] [client 43.173.1.57:40006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mgarrmushrooms.com"] [uri "/"] [unique_id "ams6mZL3_iBPckrp7xnbiQAAABM"]
[Thu Jul 30 12:50:50.139181 2026] [authz_core:error] [pid 3130327:tid 3130327] [client 57.141.0.58:53920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:50.139856 2026] [authz_core:error] [pid 3130327:tid 3130327] [client 57.141.0.58:53920] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:50.233459 2026] [security2:error] [pid 3135567:tid 3135567] [client 43.159.34.167:36404] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.com"] [uri "/"] [unique_id "ams6mkcf7TmX9AaQQdDWhwAAACk"]
[Thu Jul 30 12:50:51.271031 2026] [ssl:error] [pid 3134415:tid 3134415] (70014)End of file found: [client 216.73.216.199:52102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:51.495177 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:41050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:51.495211 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:51.552369 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:41066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:51.552405 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:52.517599 2026] [lsapi:warn] [pid 3097447:tid 3097447] [client 122.180.21.11:60441] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:53.192814 2026] [ssl:error] [pid 3132240:tid 3132240] (70014)End of file found: [client 216.73.216.199:19346] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:54.406665 2026] [ssl:error] [pid 3132339:tid 3132339] (70014)End of file found: [client 216.73.216.199:31460] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:54.611507 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:41074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:54.611541 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:54.667267 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:41086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:54.667299 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:56.505744 2026] [authz_core:error] [pid 3127520:tid 3127520] [client 57.141.0.50:40732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:50:56.506376 2026] [authz_core:error] [pid 3127520:tid 3127520] [client 57.141.0.50:40732] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:50:57.427867 2026] [core:error] [pid 3130218:tid 3130218] (13)Permission denied: [client 216.73.216.199:17966] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/domainusers
[Thu Jul 30 12:50:57.729808 2026] [ssl:error] [pid 3130218:tid 3130218] (70014)End of file found: [client 216.73.216.199:17966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:57.795804 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:41098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:57.795832 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:57.849035 2026] [ssl:error] [pid 3133073:tid 3133073] (EAI 2)Name or service not known: [client 144.76.19.72:41114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:50:57.849075 2026] [ssl:error] [pid 3133073:tid 3133073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:50:57.870182 2026] [lsapi:warn] [pid 3136998:tid 3136998] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:50:58.543210 2026] [ssl:error] [pid 3135522:tid 3135522] (70014)End of file found: [client 216.73.216.199:31544] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:50:59.741765 2026] [ssl:error] [pid 3137160:tid 3137160] (70014)End of file found: [client 216.73.216.199:16238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:00.772577 2026] [core:error] [pid 3133073:tid 3133073] [client 66.249.66.196:35232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:00.772603 2026] [core:error] [pid 3133073:tid 3133073] [client 66.249.66.196:35232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:00.800043 2026] [core:error] [pid 3123049:tid 3123049] [client 66.249.66.196:54792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:00.800100 2026] [core:error] [pid 3123049:tid 3123049] [client 66.249.66.196:54792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:00.904798 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:42318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:00.904826 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:00.957412 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:42330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:00.957438 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:01.027864 2026] [security2:error] [pid 3123049:tid 3123049] [client 51.68.236.94:29501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "ams6pbDcsLBpvHJZiCzOrQAAADc"]
[Thu Jul 30 12:51:02.654522 2026] [ssl:error] [pid 3123049:tid 3123049] (70014)End of file found: [client 216.73.216.199:54362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:03.429136 2026] [ssl:error] [pid 3139143:tid 3139143] (70014)End of file found: [client 216.73.216.199:64037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:03.715867 2026] [lsapi:warn] [pid 3139615:tid 3139615] [client 122.180.21.11:61204] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:04.030112 2026] [ssl:error] [pid 3135522:tid 3135522] (EAI 2)Name or service not known: [client 144.76.19.72:42336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:04.030147 2026] [ssl:error] [pid 3135522:tid 3135522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:04.081760 2026] [ssl:error] [pid 3133073:tid 3133073] (EAI 2)Name or service not known: [client 144.76.19.72:42342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:04.081792 2026] [ssl:error] [pid 3133073:tid 3133073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:04.494170 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.3:49876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:04.494794 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.3:49876] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:05.373156 2026] [authz_core:error] [pid 3133113:tid 3133113] [client 57.141.0.64:38568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:05.373780 2026] [authz_core:error] [pid 3133113:tid 3133113] [client 57.141.0.64:38568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:05.881951 2026] [ssl:error] [pid 3139618:tid 3139618] (70014)End of file found: [client 216.73.216.199:49289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:07.138820 2026] [ssl:error] [pid 3130327:tid 3130327] (EAI 2)Name or service not known: [client 144.76.19.72:42354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:07.138865 2026] [ssl:error] [pid 3130327:tid 3130327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:07.193413 2026] [ssl:error] [pid 3127520:tid 3127520] (EAI 2)Name or service not known: [client 144.76.19.72:42370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:07.193440 2026] [ssl:error] [pid 3127520:tid 3127520] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:08.192555 2026] [ssl:error] [pid 3139577:tid 3139577] (70014)End of file found: [client 216.73.216.199:44408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:08.355237 2026] [lsapi:warn] [pid 3129438:tid 3129438] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:08.803141 2026] [authz_core:error] [pid 3136907:tid 3136907] [client 66.249.66.33:44206] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:51:08.805820 2026] [authz_core:error] [pid 3136907:tid 3136907] [client 66.249.66.33:44206] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:51:10.246398 2026] [ssl:error] [pid 3136998:tid 3136998] (EAI 2)Name or service not known: [client 144.76.19.72:18796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:10.246428 2026] [ssl:error] [pid 3136998:tid 3136998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:10.275400 2026] [security2:error] [pid 3129438:tid 3129438] [client 114.119.132.171:45991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~29-9-2019"] [unique_id "ams6rrt7-ljs2dlfeH6DcwAAADw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1567292400/cat_ids%7E104,18/request_format%7Ehtml
[Thu Jul 30 12:51:10.297957 2026] [ssl:error] [pid 3132339:tid 3132339] (EAI 2)Name or service not known: [client 144.76.19.72:18804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:10.297992 2026] [ssl:error] [pid 3132339:tid 3132339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:11.911348 2026] [ssl:error] [pid 3132240:tid 3132240] (70014)End of file found: [client 216.73.216.199:26808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:12.162028 2026] [security2:error] [pid 3132286:tid 3132286] [client 114.119.132.171:45999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~29-9-2019"] [unique_id "ams6sLT5p3UBjaHj_hKznAAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1567292400/cat_ids%7E104,18/request_format%7Ehtml
[Thu Jul 30 12:51:12.296642 2026] [security2:error] [pid 3135521:tid 3135521] [client 103.133.174.108:54918] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6sH873yIkJDsq_M2p4wAAAA8"]
[Thu Jul 30 12:51:12.296710 2026] [security2:error] [pid 3135521:tid 3135521] [client 103.133.174.108:54918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6sH873yIkJDsq_M2p4wAAAA8"]
[Thu Jul 30 12:51:12.296988 2026] [security2:error] [pid 3135521:tid 3135521] [client 103.133.174.108:54918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6sH873yIkJDsq_M2p4wAAAA8"]
[Thu Jul 30 12:51:12.874414 2026] [authz_core:error] [pid 3139616:tid 3139616] [client 57.141.0.43:57674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:12.875042 2026] [authz_core:error] [pid 3139616:tid 3139616] [client 57.141.0.43:57674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:13.354473 2026] [ssl:error] [pid 3135451:tid 3135451] (EAI 2)Name or service not known: [client 144.76.19.72:18814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:13.354517 2026] [ssl:error] [pid 3135451:tid 3135451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:13.411456 2026] [ssl:error] [pid 3135521:tid 3135521] (EAI 2)Name or service not known: [client 144.76.19.72:18822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:13.411509 2026] [ssl:error] [pid 3135521:tid 3135521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:13.522558 2026] [lsapi:warn] [pid 3137000:tid 3137000] [client 122.180.21.11:61867] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:13.718921 2026] [ssl:error] [pid 3138265:tid 3138265] (5)Input/output error: [client 216.73.216.199:5408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:13.823974 2026] [core:error] [pid 3135484:tid 3135484] [client 66.249.66.167:62861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:13.823994 2026] [core:error] [pid 3135484:tid 3135484] [client 66.249.66.167:62861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:15.062987 2026] [security2:error] [pid 3097447:tid 3097447] [client 47.237.254.33:57987] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6swwdUtr6PLa6YOMmIAAAABw"]
[Thu Jul 30 12:51:15.063056 2026] [security2:error] [pid 3097447:tid 3097447] [client 47.237.254.33:57987] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6swwdUtr6PLa6YOMmIAAAABw"]
[Thu Jul 30 12:51:15.063309 2026] [security2:error] [pid 3097447:tid 3097447] [client 47.237.254.33:57987] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6swwdUtr6PLa6YOMmIAAAABw"]
[Thu Jul 30 12:51:15.227625 2026] [security2:error] [pid 3132286:tid 3132286] [client 216.73.216.199:60433] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/systemd/user.conf"] [unique_id "ams6s7T5p3UBjaHj_hKzoQAAABo"]
[Thu Jul 30 12:51:15.227922 2026] [security2:error] [pid 3132286:tid 3132286] [client 216.73.216.199:60433] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/systemd/user.conf"] [unique_id "ams6s7T5p3UBjaHj_hKzoQAAABo"]
[Thu Jul 30 12:51:15.228180 2026] [security2:error] [pid 3132286:tid 3132286] [client 216.73.216.199:60433] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/systemd/user.conf"] [unique_id "ams6s7T5p3UBjaHj_hKzoQAAABo"]
[Thu Jul 30 12:51:16.468755 2026] [ssl:error] [pid 3135484:tid 3135484] (EAI 2)Name or service not known: [client 144.76.19.72:18828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:16.468801 2026] [ssl:error] [pid 3135484:tid 3135484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:16.595742 2026] [ssl:error] [pid 3135524:tid 3135524] (EAI 2)Name or service not known: [client 144.76.19.72:18842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:16.595792 2026] [ssl:error] [pid 3135524:tid 3135524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:17.187138 2026] [ssl:error] [pid 3132286:tid 3132286] (70014)End of file found: [client 216.73.216.199:60433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:17.335594 2026] [ssl:error] [pid 3135524:tid 3135524] (70014)End of file found: [client 216.73.216.199:54284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:18.516886 2026] [security2:error] [pid 3122827:tid 3122827] [client 47.237.254.33:48753] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6tuFQH5vc3F4o6V3sMwAAAAg"]
[Thu Jul 30 12:51:18.516938 2026] [security2:error] [pid 3122827:tid 3122827] [client 47.237.254.33:48753] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams6tuFQH5vc3F4o6V3sMwAAAAg"]
[Thu Jul 30 12:51:18.517170 2026] [security2:error] [pid 3122827:tid 3122827] [client 47.237.254.33:48753] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams6tuFQH5vc3F4o6V3sMwAAAAg"]
[Thu Jul 30 12:51:18.835990 2026] [lsapi:warn] [pid 3135565:tid 3135565] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:19.650051 2026] [ssl:error] [pid 3138686:tid 3138686] (EAI 2)Name or service not known: [client 144.76.19.72:34628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:19.650105 2026] [ssl:error] [pid 3138686:tid 3138686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:19.702972 2026] [ssl:error] [pid 3139363:tid 3139363] (EAI 2)Name or service not known: [client 144.76.19.72:34636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:19.703009 2026] [ssl:error] [pid 3139363:tid 3139363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:19.744738 2026] [security2:error] [pid 3140218:tid 3140218] [client 216.73.216.199:27364] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dovecot/dovecot.conf"] [unique_id "ams6t8VMHQUnwcXWmIQYhQAAAAk"]
[Thu Jul 30 12:51:19.745022 2026] [security2:error] [pid 3140218:tid 3140218] [client 216.73.216.199:27364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dovecot/dovecot.conf"] [unique_id "ams6t8VMHQUnwcXWmIQYhQAAAAk"]
[Thu Jul 30 12:51:19.745255 2026] [security2:error] [pid 3140218:tid 3140218] [client 216.73.216.199:27364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dovecot/dovecot.conf"] [unique_id "ams6t8VMHQUnwcXWmIQYhQAAAAk"]
[Thu Jul 30 12:51:20.346795 2026] [ssl:error] [pid 3140218:tid 3140218] (70014)End of file found: [client 216.73.216.199:27364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:21.261422 2026] [security2:error] [pid 3139616:tid 3139616] [client 72.146.16.10:32675] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/wp-config.php"] [unique_id "ams6uRqqx4ZFbmxrqN25QAAAACw"]
[Thu Jul 30 12:51:21.261537 2026] [security2:error] [pid 3139616:tid 3139616] [client 72.146.16.10:32675] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/wp-config.php"] [unique_id "ams6uRqqx4ZFbmxrqN25QAAAACw"]
[Thu Jul 30 12:51:21.261892 2026] [security2:error] [pid 3139616:tid 3139616] [client 72.146.16.10:32675] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/wp-config.php"] [unique_id "ams6uRqqx4ZFbmxrqN25QAAAACw"]
[Thu Jul 30 12:51:22.657293 2026] [ssl:error] [pid 3132288:tid 3132288] (70014)End of file found: [client 216.73.216.199:35819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:22.759654 2026] [ssl:error] [pid 3130266:tid 3130266] (EAI 2)Name or service not known: [client 144.76.19.72:34648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:22.759690 2026] [ssl:error] [pid 3130266:tid 3130266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:22.896952 2026] [ssl:error] [pid 3140511:tid 3140511] (EAI 2)Name or service not known: [client 144.76.19.72:34654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:22.896981 2026] [ssl:error] [pid 3140511:tid 3140511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:23.367595 2026] [lsapi:warn] [pid 3132286:tid 3132286] [client 216.73.216.199:65312] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  require_once(/var/softaculous/moodle39/lib/setup.php): Failed to open stream: No such file or directory in /var/softaculous/moodle39/config.php on line 27\n
[Thu Jul 30 12:51:23.367625 2026] [lsapi:error] [pid 3132286:tid 3132286] [client 216.73.216.199:65312] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Failed opening required '/var/softaculous/moodle39/lib/setup.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in /var/softaculous/moodle39/config.php:27\nStack trace:\n#0 {main}\n  thrown in /var/softaculous/moodle39/config.php on line 27\n
[Thu Jul 30 12:51:23.966918 2026] [lsapi:warn] [pid 3139578:tid 3139578] [client 122.180.21.11:62487] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:25.478316 2026] [ssl:error] [pid 3136998:tid 3136998] (70014)End of file found: [client 216.73.216.199:28833] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:25.872517 2026] [core:error] [pid 3139618:tid 3139618] [client 66.249.66.167:54068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:25.872540 2026] [core:error] [pid 3139618:tid 3139618] [client 66.249.66.167:54068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:25.953038 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:34666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:25.953087 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:25.970247 2026] [ssl:error] [pid 3097447:tid 3097447] (70014)End of file found: [client 216.73.216.199:15297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:26.008585 2026] [ssl:error] [pid 3140218:tid 3140218] (EAI 2)Name or service not known: [client 144.76.19.72:34668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:26.008631 2026] [ssl:error] [pid 3140218:tid 3140218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:28.481993 2026] [core:error] [pid 3139618:tid 3139618] (13)Permission denied: [client 216.73.216.199:13579] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/cpu/devices/cpu2/subsystem/uevent
[Thu Jul 30 12:51:29.062851 2026] [ssl:error] [pid 3134148:tid 3134148] (EAI 2)Name or service not known: [client 144.76.19.72:34682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:29.062893 2026] [ssl:error] [pid 3134148:tid 3134148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:29.117661 2026] [ssl:error] [pid 3139616:tid 3139616] (EAI 2)Name or service not known: [client 144.76.19.72:34684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:29.117700 2026] [ssl:error] [pid 3139616:tid 3139616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:29.310586 2026] [lsapi:warn] [pid 3127947:tid 3127947] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:29.686438 2026] [ssl:error] [pid 3139618:tid 3139618] (70014)End of file found: [client 216.73.216.199:13579] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:31.477592 2026] [authz_core:error] [pid 3135565:tid 3135565] [client 57.141.0.41:48206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:31.478226 2026] [authz_core:error] [pid 3135565:tid 3135565] [client 57.141.0.41:48206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:32.173046 2026] [ssl:error] [pid 3140814:tid 3140814] (EAI 2)Name or service not known: [client 144.76.19.72:53300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:32.173092 2026] [ssl:error] [pid 3140814:tid 3140814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:32.226945 2026] [ssl:error] [pid 3139577:tid 3139577] (EAI 2)Name or service not known: [client 144.76.19.72:53308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:32.226982 2026] [ssl:error] [pid 3139577:tid 3139577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:32.878470 2026] [security2:error] [pid 3139577:tid 3139577] [client 85.208.96.194:38168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/langdon-school-headteacher-suspended"] [unique_id "ams6xPQz47vvqTTZ0qx1awAAACI"]
[Thu Jul 30 12:51:33.622155 2026] [authz_core:error] [pid 3140511:tid 3140511] [client 57.141.0.70:64238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:33.622784 2026] [authz_core:error] [pid 3140511:tid 3140511] [client 57.141.0.70:64238] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:34.437531 2026] [lsapi:warn] [pid 3130218:tid 3130218] [client 122.180.21.11:63108] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:35.000271 2026] [core:error] [pid 3135484:tid 3135484] (13)Permission denied: [client 216.73.216.199:13213] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS1/iomem_reg_shift
[Thu Jul 30 12:51:35.302639 2026] [ssl:error] [pid 3139618:tid 3139618] (EAI 2)Name or service not known: [client 144.76.19.72:53316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:35.302687 2026] [ssl:error] [pid 3139618:tid 3139618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:35.359137 2026] [ssl:error] [pid 3141098:tid 3141098] (EAI 2)Name or service not known: [client 144.76.19.72:53320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:35.359175 2026] [ssl:error] [pid 3141098:tid 3141098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:35.784607 2026] [security2:error] [pid 3141189:tid 3141189] [client 146.56.229.214:44914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "ams6x1TTKw4fiZokdXudsAAAADI"]
[Thu Jul 30 12:51:37.282137 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.34:39172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:37.282774 2026] [authz_core:error] [pid 3111722:tid 3111722] [client 57.141.0.34:39172] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:37.712208 2026] [ssl:error] [pid 3135484:tid 3135484] (70014)End of file found: [client 216.73.216.199:13213] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:38.260013 2026] [security2:error] [pid 3138686:tid 3138686] [client 43.157.179.227:51848] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thelambproductions.com"] [uri "/"] [unique_id "ams6yoo0IkpINsqN6pHaggAAABs"]
[Thu Jul 30 12:51:38.416999 2026] [ssl:error] [pid 3138265:tid 3138265] (EAI 2)Name or service not known: [client 144.76.19.72:53326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:38.417032 2026] [ssl:error] [pid 3138265:tid 3138265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:38.471954 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:53340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:38.471985 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:38.550226 2026] [core:error] [pid 3133073:tid 3133073] [client 66.249.66.167:46766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:38.550252 2026] [core:error] [pid 3133073:tid 3133073] [client 66.249.66.167:46766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:39.678190 2026] [authz_core:error] [pid 3136998:tid 3136998] [client 57.141.0.17:47502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:39.678819 2026] [authz_core:error] [pid 3136998:tid 3136998] [client 57.141.0.17:47502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:39.773341 2026] [lsapi:warn] [pid 3123049:tid 3123049] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:41.528575 2026] [ssl:error] [pid 3140218:tid 3140218] (EAI 2)Name or service not known: [client 144.76.19.72:49290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:41.528607 2026] [ssl:error] [pid 3140218:tid 3140218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:41.586119 2026] [ssl:error] [pid 3141581:tid 3141581] (EAI 2)Name or service not known: [client 144.76.19.72:49298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:41.586157 2026] [ssl:error] [pid 3141581:tid 3141581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:41.839148 2026] [lsapi:warn] [pid 3130266:tid 3130266] [client 45.158.164.139:34868] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:51:41.839194 2026] [lsapi:warn] [pid 3130266:tid 3130266] [client 45.158.164.139:34868] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:51:41.841459 2026] [lsapi:warn] [pid 3132340:tid 3132340] [client 89.197.16.98:60563] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:51:41.841504 2026] [lsapi:warn] [pid 3132340:tid 3132340] [client 89.197.16.98:60563] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:51:42.837349 2026] [core:error] [pid 3139578:tid 3139578] (13)Permission denied: [client 216.73.216.199:19025] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/drivers/ac/unbind
[Thu Jul 30 12:51:43.326549 2026] [security2:error] [pid 3127520:tid 3127520] [client 185.191.171.19:15568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,872.0/prev_next,next.html"] [unique_id "ams6z7LMZlsGeFzxwt_b4AAAAA0"]
[Thu Jul 30 12:51:44.147081 2026] [cgi:error] [pid 3139615:tid 3139615] [client 194.9.110.170:24097] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:51:44.214457 2026] [core:error] [pid 3141581:tid 3141581] [client 178.83.10.254:6356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:44.214497 2026] [core:error] [pid 3141581:tid 3141581] [client 178.83.10.254:6356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:44.316356 2026] [core:error] [pid 3130218:tid 3130218] [client 82.29.95.116:6367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:44.316379 2026] [core:error] [pid 3130218:tid 3130218] [client 82.29.95.116:6367] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:44.642414 2026] [ssl:error] [pid 3130218:tid 3130218] (EAI 2)Name or service not known: [client 144.76.19.72:49300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:44.642446 2026] [ssl:error] [pid 3130218:tid 3130218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:44.695529 2026] [ssl:error] [pid 3134415:tid 3134415] (EAI 2)Name or service not known: [client 144.76.19.72:49306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:44.695570 2026] [ssl:error] [pid 3134415:tid 3134415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:44.797693 2026] [lsapi:warn] [pid 3133073:tid 3133073] [client 122.180.21.11:63728] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:44.947852 2026] [ssl:error] [pid 3136705:tid 3136705] (70014)End of file found: [client 216.73.216.199:7711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:45.542319 2026] [ssl:error] [pid 3135566:tid 3135566] (70014)End of file found: [client 216.73.216.199:48048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:45.553121 2026] [core:error] [pid 3135565:tid 3135565] [client 82.29.95.6:6370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:45.553145 2026] [core:error] [pid 3135565:tid 3135565] [client 82.29.95.6:6370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:45.653008 2026] [core:error] [pid 3122827:tid 3122827] [client 82.29.95.120:6477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:45.653034 2026] [core:error] [pid 3122827:tid 3122827] [client 82.29.95.120:6477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 12:51:45.755292 2026] [core:crit] [pid 3137000:tid 3137000] (13)Permission denied: [client 82.29.95.120:6486] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/
[Thu Jul 30 12:51:46.045866 2026] [authz_core:error] [pid 3123049:tid 3123049] [client 57.141.0.38:46030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:51:46.046502 2026] [authz_core:error] [pid 3123049:tid 3123049] [client 57.141.0.38:46030] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:51:46.148865 2026] [ssl:error] [pid 3139578:tid 3139578] (70014)End of file found: [client 216.73.216.199:19025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:48.120803 2026] [ssl:error] [pid 3142029:tid 3142029] (EAI 2)Name or service not known: [client 144.76.19.72:49312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:48.120848 2026] [ssl:error] [pid 3142029:tid 3142029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:48.449944 2026] [ssl:error] [pid 3132340:tid 3132340] (EAI 2)Name or service not known: [client 144.76.19.72:49320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:48.449974 2026] [ssl:error] [pid 3132340:tid 3132340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:50.031510 2026] [core:error] [pid 3134148:tid 3134148] [client 57.141.0.70:51428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:50.031539 2026] [core:error] [pid 3134148:tid 3134148] [client 57.141.0.70:51428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:50.244021 2026] [lsapi:warn] [pid 3134148:tid 3134148] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:50.558013 2026] [security2:error] [pid 3133743:tid 3133743] [client 72.146.16.10:48550] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/var/log/error.log"] [unique_id "ams61s46wrxSPt8bmqSIlAAAAAI"]
[Thu Jul 30 12:51:50.558229 2026] [security2:error] [pid 3133743:tid 3133743] [client 72.146.16.10:48550] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/var/log/error.log"] [unique_id "ams61s46wrxSPt8bmqSIlAAAAAI"]
[Thu Jul 30 12:51:50.558571 2026] [security2:error] [pid 3133743:tid 3133743] [client 72.146.16.10:48550] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "andrewvenables.wmsfirearmstraining.com"] [uri "/var/log/error.log"] [unique_id "ams61s46wrxSPt8bmqSIlAAAAAI"]
[Thu Jul 30 12:51:50.570934 2026] [core:error] [pid 3127520:tid 3127520] [client 57.141.0.22:29818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:50.570957 2026] [core:error] [pid 3127520:tid 3127520] [client 57.141.0.22:29818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:50.814099 2026] [ssl:error] [pid 3111722:tid 3111722] (70014)End of file found: [client 216.73.216.199:11757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:50.960541 2026] [core:error] [pid 3127520:tid 3127520] (13)Permission denied: [client 216.73.216.199:41874] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/clucasdesign.com.db
[Thu Jul 30 12:51:51.242568 2026] [core:error] [pid 3137160:tid 3137160] [client 66.249.66.66:39362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:51.242595 2026] [core:error] [pid 3137160:tid 3137160] [client 66.249.66.66:39362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:51.503504 2026] [ssl:error] [pid 3130327:tid 3130327] (EAI 2)Name or service not known: [client 144.76.19.72:40958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:51.503527 2026] [ssl:error] [pid 3130327:tid 3130327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:51.556222 2026] [ssl:error] [pid 3137160:tid 3137160] (EAI 2)Name or service not known: [client 144.76.19.72:40974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:51.556254 2026] [ssl:error] [pid 3137160:tid 3137160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:52.056474 2026] [security2:error] [pid 3130327:tid 3130327] [client 216.73.216.199:65385] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/systemd-logind.service.d/lve_capabilities.conf"] [unique_id "ams62M_W7HxHIem-uTAEZgAAACc"]
[Thu Jul 30 12:51:52.056778 2026] [security2:error] [pid 3130327:tid 3130327] [client 216.73.216.199:65385] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/systemd-logind.service.d/lve_capabilities.conf"] [unique_id "ams62M_W7HxHIem-uTAEZgAAACc"]
[Thu Jul 30 12:51:52.057002 2026] [security2:error] [pid 3130327:tid 3130327] [client 216.73.216.199:65385] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/systemd-logind.service.d/lve_capabilities.conf"] [unique_id "ams62M_W7HxHIem-uTAEZgAAACc"]
[Thu Jul 30 12:51:52.769737 2026] [ssl:error] [pid 3127520:tid 3127520] (70014)End of file found: [client 216.73.216.199:41874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:53.586029 2026] [core:error] [pid 3142254:tid 3142254] [client 66.249.64.170:38746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:53.586059 2026] [core:error] [pid 3142254:tid 3142254] [client 66.249.64.170:38746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:51:54.273622 2026] [ssl:error] [pid 3130327:tid 3130327] (70014)End of file found: [client 216.73.216.199:65385] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:54.634257 2026] [ssl:error] [pid 3130218:tid 3130218] (EAI 2)Name or service not known: [client 144.76.19.72:40988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:54.634290 2026] [ssl:error] [pid 3130218:tid 3130218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:54.687677 2026] [ssl:error] [pid 3141688:tid 3141688] (EAI 2)Name or service not known: [client 144.76.19.72:40992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:54.687721 2026] [ssl:error] [pid 3141688:tid 3141688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:55.462046 2026] [lsapi:warn] [pid 3142254:tid 3142254] [client 122.180.21.11:64352] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:51:57.374898 2026] [security2:error] [pid 3132288:tid 3132288] [client 43.156.41.180:51258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.be"] [uri "/"] [unique_id "ams63THvye0ErMp3lpWzXQAAAB0"]
[Thu Jul 30 12:51:57.597185 2026] [ssl:error] [pid 3132240:tid 3132240] (70014)End of file found: [client 216.73.216.199:43459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:57.786632 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:41002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:57.786671 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:57.841681 2026] [ssl:error] [pid 3135565:tid 3135565] (EAI 2)Name or service not known: [client 144.76.19.72:41012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:51:57.841717 2026] [ssl:error] [pid 3135565:tid 3135565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:51:58.090567 2026] [ssl:error] [pid 3139143:tid 3139143] (70014)End of file found: [client 216.73.216.199:27796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:51:59.693623 2026] [security2:error] [pid 3142159:tid 3142159] [client 43.156.41.180:57858] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "ams63_s2FsY4V7Elk_A2OgAAADk"], referer: http://orgent.be
[Thu Jul 30 12:52:00.100619 2026] [security2:error] [pid 3142251:tid 3142251] [client 43.166.130.123:49910] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "broadcast-support.com"] [uri "/"] [unique_id "ams64D0SGvpSihJNcDbQggAAADo"]
[Thu Jul 30 12:52:00.488520 2026] [authz_core:error] [pid 3135568:tid 3135568] [client 57.141.0.17:35768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:00.489172 2026] [authz_core:error] [pid 3135568:tid 3135568] [client 57.141.0.17:35768] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:00.734650 2026] [lsapi:warn] [pid 3138642:tid 3138642] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:00.784496 2026] [security2:error] [pid 3122827:tid 3122827] [client 20.171.55.167:5314] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "innerspacer.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams64OFQH5vc3F4o6V3smAAAAAg"]
[Thu Jul 30 12:52:00.784723 2026] [security2:error] [pid 3122827:tid 3122827] [client 20.171.55.167:5314] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "innerspacer.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams64OFQH5vc3F4o6V3smAAAAAg"]
[Thu Jul 30 12:52:00.784939 2026] [security2:error] [pid 3122827:tid 3122827] [client 20.171.55.167:5314] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "innerspacer.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams64OFQH5vc3F4o6V3smAAAAAg"]
[Thu Jul 30 12:52:00.898444 2026] [ssl:error] [pid 3140511:tid 3140511] (EAI 2)Name or service not known: [client 144.76.19.72:43324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:00.898485 2026] [ssl:error] [pid 3140511:tid 3140511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:00.950999 2026] [ssl:error] [pid 3133113:tid 3133113] (EAI 2)Name or service not known: [client 144.76.19.72:43336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:00.951037 2026] [ssl:error] [pid 3133113:tid 3133113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:01.524609 2026] [ssl:error] [pid 3142076:tid 3142076] (70014)End of file found: [client 216.73.216.199:60765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:02.936655 2026] [ssl:error] [pid 3139618:tid 3139618] (70014)End of file found: [client 216.73.216.199:22794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:03.096015 2026] [access_compat:error] [pid 3138642:tid 3138642] [client 169.58.39.193:60834] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 12:52:03.532079 2026] [ssl:error] [pid 3122826:tid 3122826] (70014)End of file found: [client 216.73.216.199:28240] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:03.919788 2026] [core:error] [pid 3132339:tid 3132339] [client 66.249.66.167:59332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:03.919815 2026] [core:error] [pid 3132339:tid 3132339] [client 66.249.66.167:59332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:03.950779 2026] [core:error] [pid 3140511:tid 3140511] [client 66.249.66.167:45391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:03.950805 2026] [core:error] [pid 3140511:tid 3140511] [client 66.249.66.167:45391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:04.031967 2026] [ssl:error] [pid 3132340:tid 3132340] (EAI 2)Name or service not known: [client 144.76.19.72:43352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:04.032012 2026] [ssl:error] [pid 3132340:tid 3132340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:04.085963 2026] [ssl:error] [pid 3132240:tid 3132240] (EAI 2)Name or service not known: [client 144.76.19.72:43364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:04.086004 2026] [ssl:error] [pid 3132240:tid 3132240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:04.528563 2026] [security2:error] [pid 3139143:tid 3139143] [client 43.131.26.227:45481] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams65GCzgnce8LPpdPj-LgAAAAU"]
[Thu Jul 30 12:52:04.528619 2026] [security2:error] [pid 3139143:tid 3139143] [client 43.131.26.227:45481] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams65GCzgnce8LPpdPj-LgAAAAU"]
[Thu Jul 30 12:52:04.528899 2026] [security2:error] [pid 3139143:tid 3139143] [client 43.131.26.227:45481] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams65GCzgnce8LPpdPj-LgAAAAU"]
[Thu Jul 30 12:52:04.996715 2026] [authz_core:error] [pid 3134415:tid 3134415] [client 57.141.0.17:35778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:04.997341 2026] [authz_core:error] [pid 3134415:tid 3134415] [client 57.141.0.17:35778] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:05.922606 2026] [lsapi:warn] [pid 3132340:tid 3132340] [client 122.180.21.11:64969] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:07.144176 2026] [ssl:error] [pid 3135568:tid 3135568] (EAI 2)Name or service not known: [client 144.76.19.72:43370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:07.144238 2026] [ssl:error] [pid 3135568:tid 3135568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:07.202345 2026] [ssl:error] [pid 3134415:tid 3134415] (EAI 2)Name or service not known: [client 144.76.19.72:43372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:07.202383 2026] [ssl:error] [pid 3134415:tid 3134415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:08.532170 2026] [security2:error] [pid 3130266:tid 3130266] [client 47.245.84.33:30555] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams66Bgj0Q0_SpL1nhSn2QAAABc"]
[Thu Jul 30 12:52:08.532240 2026] [security2:error] [pid 3130266:tid 3130266] [client 47.245.84.33:30555] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams66Bgj0Q0_SpL1nhSn2QAAABc"]
[Thu Jul 30 12:52:08.532534 2026] [security2:error] [pid 3130266:tid 3130266] [client 47.245.84.33:30555] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams66Bgj0Q0_SpL1nhSn2QAAABc"]
[Thu Jul 30 12:52:10.255710 2026] [ssl:error] [pid 3133743:tid 3133743] (EAI 2)Name or service not known: [client 144.76.19.72:42762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:10.255749 2026] [ssl:error] [pid 3133743:tid 3133743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:10.307940 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:42764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:10.307980 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:10.311012 2026] [ssl:error] [pid 3141581:tid 3141581] (70014)End of file found: [client 216.73.216.199:5081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:11.199862 2026] [lsapi:warn] [pid 3140814:tid 3140814] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:11.514395 2026] [cgi:error] [pid 3138265:tid 3138265] [client 20.104.22.47:19117] AH02812: stderr from /home/thepryor/dev1.the-pryors.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:52:11.548358 2026] [authz_core:error] [pid 3139615:tid 3139615] [client 57.141.0.34:62128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:11.548984 2026] [authz_core:error] [pid 3139615:tid 3139615] [client 57.141.0.34:62128] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:12.015203 2026] [authz_core:error] [pid 3136907:tid 3136907] [client 57.141.0.45:49470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:12.015836 2026] [authz_core:error] [pid 3136907:tid 3136907] [client 57.141.0.45:49470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:12.737021 2026] [core:error] [pid 3127520:tid 3127520] (13)Permission denied: [client 216.73.216.199:32418] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ftrace_event_field/min_partial
[Thu Jul 30 12:52:13.038601 2026] [core:error] [pid 3127520:tid 3127520] (13)Permission denied: [client 216.73.216.199:32418] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:65/irq
[Thu Jul 30 12:52:13.364303 2026] [ssl:error] [pid 3139616:tid 3139616] (EAI 2)Name or service not known: [client 144.76.19.72:42780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:13.364331 2026] [ssl:error] [pid 3139616:tid 3139616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:13.418188 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:42788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:13.418224 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:15.232975 2026] [security2:error] [pid 3142251:tid 3142251] [client 34.230.124.21:22242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/wp-login.php"] [unique_id "ams67z0SGvpSihJNcDbQhQAAADo"]
[Thu Jul 30 12:52:15.765682 2026] [ssl:error] [pid 3127520:tid 3127520] (70014)End of file found: [client 216.73.216.199:32418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:16.299235 2026] [lsapi:warn] [pid 3142251:tid 3142251] [client 122.180.21.11:49207] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:16.427586 2026] [core:error] [pid 3139618:tid 3139618] [client 57.141.0.2:25534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:16.427617 2026] [core:error] [pid 3139618:tid 3139618] [client 57.141.0.2:25534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:16.474499 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:42800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:16.474530 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:16.529136 2026] [ssl:error] [pid 3139143:tid 3139143] (EAI 2)Name or service not known: [client 144.76.19.72:42816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:16.529179 2026] [ssl:error] [pid 3139143:tid 3139143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:16.732432 2026] [core:error] [pid 3143383:tid 3143383] [client 66.249.66.194:62580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:16.732473 2026] [core:error] [pid 3143383:tid 3143383] [client 66.249.66.194:62580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:17.260909 2026] [authz_core:error] [pid 3138265:tid 3138265] [client 20.104.22.47:19117] AH01630: client denied by server configuration: /home/thepryor/dev1.the-pryors.co.uk/php.ini
[Thu Jul 30 12:52:19.101871 2026] [ssl:error] [pid 3142159:tid 3142159] (70014)End of file found: [client 216.73.216.199:15412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:19.282763 2026] [security2:error] [pid 3142251:tid 3142251] [client 34.196.237.236:51613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams68z0SGvpSihJNcDbQhwAAADo"]
[Thu Jul 30 12:52:19.586523 2026] [ssl:error] [pid 3139143:tid 3139143] (EAI 2)Name or service not known: [client 144.76.19.72:29940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:19.586561 2026] [ssl:error] [pid 3139143:tid 3139143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:19.639590 2026] [ssl:error] [pid 3137160:tid 3137160] (EAI 2)Name or service not known: [client 144.76.19.72:29950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:19.639623 2026] [ssl:error] [pid 3137160:tid 3137160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:19.662204 2026] [security2:error] [pid 3132286:tid 3132286] [client 1.14.110.85:49830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highbrightness.com"] [uri "/"] [unique_id "ams687T5p3UBjaHj_hKz7AAAABo"]
[Thu Jul 30 12:52:21.741820 2026] [lsapi:warn] [pid 3133743:tid 3133743] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:22.186873 2026] [core:error] [pid 3135484:tid 3135484] [client 57.141.0.58:40936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:22.186902 2026] [core:error] [pid 3135484:tid 3135484] [client 57.141.0.58:40936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:22.371934 2026] [authz_core:error] [pid 3142251:tid 3142251] [client 57.141.0.64:46570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:22.372569 2026] [authz_core:error] [pid 3142251:tid 3142251] [client 57.141.0.64:46570] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:22.434534 2026] [ssl:error] [pid 3133073:tid 3133073] (70014)End of file found: [client 216.73.216.199:41561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:22.692717 2026] [ssl:error] [pid 3135522:tid 3135522] (EAI 2)Name or service not known: [client 144.76.19.72:29958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:22.692765 2026] [ssl:error] [pid 3135522:tid 3135522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:22.745808 2026] [ssl:error] [pid 3133743:tid 3133743] (EAI 2)Name or service not known: [client 144.76.19.72:29968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:22.745844 2026] [ssl:error] [pid 3133743:tid 3133743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:22.901228 2026] [security2:error] [pid 3142251:tid 3142251] [client 35.171.117.160:46630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams69j0SGvpSihJNcDbQigAAADo"]
[Thu Jul 30 12:52:22.930404 2026] [ssl:error] [pid 3137160:tid 3137160] (70014)End of file found: [client 216.73.216.199:16008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:23.274168 2026] [security2:error] [pid 3135568:tid 3135568] [client 184.73.195.18:49984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/403.shtml"] [unique_id "ams69-5cus954JWKoIK8_AAAACo"]
[Thu Jul 30 12:52:23.531735 2026] [authz_core:error] [pid 3138265:tid 3138265] [client 20.104.22.47:19117] AH01630: client denied by server configuration: /home/thepryor/dev1.the-pryors.co.uk/wp-admin/maint/error_log
[Thu Jul 30 12:52:25.799521 2026] [ssl:error] [pid 3135568:tid 3135568] (EAI 2)Name or service not known: [client 144.76.19.72:29978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:25.799552 2026] [ssl:error] [pid 3135568:tid 3135568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:25.854615 2026] [ssl:error] [pid 3130327:tid 3130327] (EAI 2)Name or service not known: [client 144.76.19.72:29990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:25.854643 2026] [ssl:error] [pid 3130327:tid 3130327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:26.396241 2026] [ssl:error] [pid 3111722:tid 3111722] (70014)End of file found: [client 216.73.216.199:7083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:26.856374 2026] [lsapi:warn] [pid 3142259:tid 3142259] [client 122.180.21.11:49851] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:27.796689 2026] [ssl:error] [pid 3142254:tid 3142254] (70014)End of file found: [client 216.73.216.199:39924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:27.796859 2026] [security2:error] [pid 3122826:tid 3122826] [client 47.128.24.58:31934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "ams6-0ZFBIjyaJhOQjozBgAAAAQ"]
[Thu Jul 30 12:52:28.096644 2026] [authz_core:error] [pid 3140814:tid 3140814] [client 57.141.0.2:56718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:28.097269 2026] [authz_core:error] [pid 3140814:tid 3140814] [client 57.141.0.2:56718] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:28.908568 2026] [ssl:error] [pid 3133113:tid 3133113] (EAI 2)Name or service not known: [client 144.76.19.72:30002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:28.908617 2026] [ssl:error] [pid 3133113:tid 3133113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:28.961420 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:30010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:28.961450 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:29.286132 2026] [core:error] [pid 3132288:tid 3132288] [client 66.249.66.167:46358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:29.286159 2026] [core:error] [pid 3132288:tid 3132288] [client 66.249.66.167:46358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:29.703655 2026] [ssl:error] [pid 3132340:tid 3132340] (70014)End of file found: [client 216.73.216.199:19786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:30.392118 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.10:36580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:30.392800 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.10:36580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:31.498613 2026] [authz_core:error] [pid 3133113:tid 3133113] [client 66.249.66.33:59813] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:52:31.501411 2026] [authz_core:error] [pid 3133113:tid 3133113] [client 66.249.66.33:59813] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:52:31.979111 2026] [authz_core:error] [pid 3135568:tid 3135568] [client 57.141.0.7:50548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:31.979772 2026] [authz_core:error] [pid 3135568:tid 3135568] [client 57.141.0.7:50548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:32.016722 2026] [ssl:error] [pid 3133073:tid 3133073] (EAI 2)Name or service not known: [client 144.76.19.72:50820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:32.016758 2026] [ssl:error] [pid 3133073:tid 3133073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:32.072822 2026] [ssl:error] [pid 3142253:tid 3142253] (EAI 2)Name or service not known: [client 144.76.19.72:50832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:32.072856 2026] [ssl:error] [pid 3142253:tid 3142253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:32.220119 2026] [lsapi:warn] [pid 3143336:tid 3143336] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:33.572015 2026] [security2:error] [pid 3142254:tid 3142254] [client 114.119.157.183:44725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~18-7-2019"] [unique_id "ams7AU7PSIXtYTpQCOUZugAAAD8"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563145200/cat_ids%7E102,17/request_format%7Ehtml
[Thu Jul 30 12:52:33.632163 2026] [security2:error] [pid 3142076:tid 3142076] [client 185.191.171.11:37988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/nipt-said-boy-but-it's-a-girl"] [unique_id "ams7AVSnN1Qo4CgdTj9nQAAAADM"]
[Thu Jul 30 12:52:33.851905 2026] [security2:error] [pid 3135564:tid 3135564] [client 51.68.111.203:24961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "ams7AesFovqitjInmC_PHQAAACM"]
[Thu Jul 30 12:52:33.999725 2026] [authz_core:error] [pid 3142253:tid 3142253] [client 57.141.0.14:46156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:34.000364 2026] [authz_core:error] [pid 3142253:tid 3142253] [client 57.141.0.14:46156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:35.147399 2026] [ssl:error] [pid 3139615:tid 3139615] (EAI 2)Name or service not known: [client 144.76.19.72:50844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:35.147453 2026] [ssl:error] [pid 3139615:tid 3139615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:35.201228 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:50850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:35.201273 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:35.304017 2026] [security2:error] [pid 3143383:tid 3143383] [client 185.191.171.2:48448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3102.0/prev_next,prev.html"] [unique_id "ams7Aw4SXc6FMyhPcDnOZgAAAAg"]
[Thu Jul 30 12:52:35.403355 2026] [security2:error] [pid 3135484:tid 3135484] [client 114.119.157.183:44733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~18-7-2019"] [unique_id "ams7A_B0ywKCH7WQg2xfEgAAAAo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1563145200/cat_ids%7E102,17/request_format%7Ehtml
[Thu Jul 30 12:52:37.195317 2026] [lsapi:warn] [pid 3133743:tid 3133743] [client 122.180.21.11:50469] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:37.556443 2026] [ssl:error] [pid 3141871:tid 3141871] (70014)End of file found: [client 216.73.216.199:43445] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:38.255631 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:50858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:38.255666 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:38.314105 2026] [ssl:error] [pid 3133743:tid 3133743] (EAI 2)Name or service not known: [client 144.76.19.72:50868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:38.314138 2026] [ssl:error] [pid 3133743:tid 3133743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:38.465313 2026] [ssl:error] [pid 3135521:tid 3135521] (70014)End of file found: [client 216.73.216.199:1205] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:39.965096 2026] [core:error] [pid 3139577:tid 3139577] (13)Permission denied: [client 216.73.216.199:63691] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/recent_recipient_mail_server_ips
[Thu Jul 30 12:52:41.170171 2026] [ssl:error] [pid 3139577:tid 3139577] (70014)End of file found: [client 216.73.216.199:63691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:41.620759 2026] [ssl:error] [pid 3132340:tid 3132340] (EAI 2)Name or service not known: [client 144.76.19.72:32670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:41.620796 2026] [ssl:error] [pid 3132340:tid 3132340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:41.687611 2026] [ssl:error] [pid 3132286:tid 3132286] (EAI 2)Name or service not known: [client 144.76.19.72:32672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:41.687642 2026] [ssl:error] [pid 3132286:tid 3132286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:42.488133 2026] [core:error] [pid 3142159:tid 3142159] [client 66.249.66.39:38909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:42.488159 2026] [core:error] [pid 3142159:tid 3142159] [client 66.249.66.39:38909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:42.955540 2026] [lsapi:warn] [pid 3132288:tid 3132288] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:43.375555 2026] [core:error] [pid 3144328:tid 3144328] [client 57.141.0.44:31440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:43.375607 2026] [core:error] [pid 3144328:tid 3144328] [client 57.141.0.44:31440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:43.747807 2026] [security2:error] [pid 3132288:tid 3132288] [client 49.51.166.228:41746] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "ams7CzHvye0ErMp3lpWzawAAAB0"]
[Thu Jul 30 12:52:43.920294 2026] [authz_core:error] [pid 3142259:tid 3142259] [client 57.141.0.23:58714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:43.920918 2026] [authz_core:error] [pid 3142259:tid 3142259] [client 57.141.0.23:58714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:44.741661 2026] [ssl:error] [pid 3136907:tid 3136907] (EAI 2)Name or service not known: [client 144.76.19.72:32680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:44.741719 2026] [ssl:error] [pid 3136907:tid 3136907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:44.799393 2026] [ssl:error] [pid 3135565:tid 3135565] (EAI 2)Name or service not known: [client 144.76.19.72:32686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:44.799427 2026] [ssl:error] [pid 3135565:tid 3135565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:44.844415 2026] [security2:error] [pid 3142259:tid 3142259] [client 3.94.199.128:25714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7DIYx9ZcljU-ejb0j7wAAAEM"]
[Thu Jul 30 12:52:46.573409 2026] [lsapi:warn] [pid 3139618:tid 3139618] [client 144.79.133.30:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:46.913229 2026] [security2:error] [pid 3143336:tid 3143336] [client 85.208.96.207:48602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2746.0/prev_next,next.html"] [unique_id "ams7DsSO-nTZSIHdJAQBDQAAAAA"]
[Thu Jul 30 12:52:47.048913 2026] [security2:error] [pid 3144293:tid 3144293] [client 85.208.96.202:21650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2011/05/29/lewis-hamilton-at-monaco/"] [unique_id "ams7D350vBRC8jJWqPNZBQAAABU"]
[Thu Jul 30 12:52:47.331505 2026] [security2:error] [pid 3144252:tid 3144252] [client 3.229.95.193:40060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7Dy-cksmvUUVSusW2yAAAAAw"]
[Thu Jul 30 12:52:47.489795 2026] [cgi:error] [pid 3142076:tid 3142076] [client 4.232.188.49:63824] AH02811: stderr from /home/abcdysle/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:52:47.815266 2026] [lsapi:warn] [pid 3143382:tid 3143382] [client 122.180.21.11:51092] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:47.817262 2026] [cgi:error] [pid 3143383:tid 3143383] [client 47.128.117.239:52866] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:52:47.889596 2026] [ssl:error] [pid 3144252:tid 3144252] (EAI 2)Name or service not known: [client 144.76.19.72:32692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:47.889631 2026] [ssl:error] [pid 3144252:tid 3144252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:47.928928 2026] [cgi:error] [pid 3142076:tid 3142076] [client 4.232.188.49:63824] AH02811: stderr from /home/abcdysle/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:52:47.948568 2026] [ssl:error] [pid 3142077:tid 3142077] (EAI 2)Name or service not known: [client 144.76.19.72:32694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:47.948598 2026] [ssl:error] [pid 3142077:tid 3142077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:48.976820 2026] [security2:error] [pid 3143382:tid 3143382] [client 52.2.83.227:20430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7EGMyjfqRll1dohBX3wAAAAM"]
[Thu Jul 30 12:52:50.251561 2026] [ssl:error] [pid 3142158:tid 3142158] (70014)End of file found: [client 216.73.216.199:20515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:50.375541 2026] [authz_core:error] [pid 3144253:tid 3144253] [client 74.248.24.145:56468] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 12:52:50.377494 2026] [access_compat:error] [pid 3144253:tid 3144253] [client 74.248.24.145:56468] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 12:52:50.377546 2026] [access_compat:error] [pid 3144253:tid 3144253] [client 74.248.24.145:56468] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 12:52:50.381885 2026] [access_compat:error] [pid 3144253:tid 3144253] [client 74.248.24.145:56468] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 12:52:50.848753 2026] [ssl:error] [pid 3135484:tid 3135484] (70014)End of file found: [client 216.73.216.199:64819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:51.002333 2026] [ssl:error] [pid 3135521:tid 3135521] (EAI 2)Name or service not known: [client 144.76.19.72:64746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:51.002360 2026] [ssl:error] [pid 3135521:tid 3135521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:51.054021 2026] [ssl:error] [pid 3144326:tid 3144326] (EAI 2)Name or service not known: [client 144.76.19.72:64754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:51.054053 2026] [ssl:error] [pid 3144326:tid 3144326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:51.755262 2026] [authz_core:error] [pid 3142156:tid 3142156] [client 20.193.250.173:59468] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 12:52:51.757286 2026] [access_compat:error] [pid 3142156:tid 3142156] [client 20.193.250.173:59468] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/, referer: binance.com
[Thu Jul 30 12:52:51.757331 2026] [access_compat:error] [pid 3142156:tid 3142156] [client 20.193.250.173:59468] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/, referer: binance.com
[Thu Jul 30 12:52:51.761767 2026] [access_compat:error] [pid 3142156:tid 3142156] [client 20.193.250.173:59468] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/, referer: binance.com
[Thu Jul 30 12:52:53.171257 2026] [security2:error] [pid 3135565:tid 3135565] [client 52.4.213.199:19249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7FWmWJnvp4YflN9TopgAAACQ"]
[Thu Jul 30 12:52:53.181967 2026] [lsapi:warn] [pid 3144292:tid 3144292] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:53.263931 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:40214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:54.110886 2026] [ssl:error] [pid 3138642:tid 3138642] (EAI 2)Name or service not known: [client 144.76.19.72:64756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:54.110924 2026] [ssl:error] [pid 3138642:tid 3138642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:54.164434 2026] [ssl:error] [pid 3142156:tid 3142156] (EAI 2)Name or service not known: [client 144.76.19.72:64772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:54.164473 2026] [ssl:error] [pid 3142156:tid 3142156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:54.209211 2026] [authz_core:error] [pid 3144253:tid 3144253] [client 74.248.24.145:56468] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 12:52:54.646202 2026] [core:error] [pid 3136907:tid 3136907] [client 66.249.66.194:51349] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:54.646232 2026] [core:error] [pid 3136907:tid 3136907] [client 66.249.66.194:51349] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:52:54.768127 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.46:58530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:52:54.768754 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.46:58530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:52:56.350062 2026] [security2:error] [pid 3144514:tid 3144514] [client 43.135.134.127:46200] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.vain.band"] [uri "/"] [unique_id "ams7GJr70gBw_Om7UMIi_gAAAAs"]
[Thu Jul 30 12:52:57.198204 2026] [security2:error] [pid 3135565:tid 3135565] [client 34.195.248.30:52179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7GWmWJnvp4YflN9TopwAAACQ"]
[Thu Jul 30 12:52:57.223631 2026] [ssl:error] [pid 3139143:tid 3139143] (EAI 2)Name or service not known: [client 144.76.19.72:64774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:57.223668 2026] [ssl:error] [pid 3139143:tid 3139143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:57.280043 2026] [ssl:error] [pid 3144324:tid 3144324] (EAI 2)Name or service not known: [client 144.76.19.72:64784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:52:57.280123 2026] [ssl:error] [pid 3144324:tid 3144324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:52:58.172882 2026] [lsapi:warn] [pid 3138642:tid 3138642] [client 122.180.21.11:51712] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:52:58.380723 2026] [ssl:error] [pid 3144486:tid 3144486] (70014)End of file found: [client 216.73.216.199:15430] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:52:59.870236 2026] [authz_core:error] [pid 3142156:tid 3142156] [client 72.146.16.10:65198] AH01630: client denied by server configuration: /home/wmsfirea/public_html/andrewvenables.com/php.ini
[Thu Jul 30 12:53:00.187105 2026] [ssl:error] [pid 3144293:tid 3144293] (70014)End of file found: [client 216.73.216.199:2027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:00.310725 2026] [core:error] [pid 3139143:tid 3139143] [client 57.141.0.6:59228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:00.310752 2026] [core:error] [pid 3139143:tid 3139143] [client 57.141.0.6:59228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:00.362855 2026] [ssl:error] [pid 3144252:tid 3144252] (EAI 2)Name or service not known: [client 144.76.19.72:61926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:00.362884 2026] [ssl:error] [pid 3144252:tid 3144252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:00.419651 2026] [ssl:error] [pid 3142251:tid 3142251] (EAI 2)Name or service not known: [client 144.76.19.72:61932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:00.419685 2026] [ssl:error] [pid 3142251:tid 3142251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:00.692800 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:6695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:02.106885 2026] [authz_core:error] [pid 3138265:tid 3138265] [client 52.202.41.153:6366] AH01630: client denied by server configuration: /home/lukess/public_html/error_log
[Thu Jul 30 12:53:02.183384 2026] [security2:error] [pid 3144324:tid 3144324] [client 3.94.199.128:1710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7HkrF2JXLiecr27cuDwAAACc"]
[Thu Jul 30 12:53:02.955437 2026] [ssl:error] [pid 3143382:tid 3143382] (70014)End of file found: [client 216.73.216.199:8028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:03.534517 2026] [ssl:error] [pid 3144322:tid 3144322] (EAI 2)Name or service not known: [client 144.76.19.72:61940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:03.534559 2026] [ssl:error] [pid 3144322:tid 3144322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:03.590908 2026] [ssl:error] [pid 3142076:tid 3142076] (EAI 2)Name or service not known: [client 144.76.19.72:61952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:03.590946 2026] [ssl:error] [pid 3142076:tid 3142076] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:03.647473 2026] [lsapi:warn] [pid 3097447:tid 3097447] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:04.580672 2026] [ssl:error] [pid 3144324:tid 3144324] (70014)End of file found: [client 216.73.216.199:12800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:04.949231 2026] [authz_core:error] [pid 3142076:tid 3142076] [client 66.249.66.33:54236] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:53:04.951997 2026] [authz_core:error] [pid 3142076:tid 3142076] [client 66.249.66.33:54236] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:53:05.005348 2026] [authz_core:error] [pid 3128807:tid 3128807] [client 169.58.39.193:54560] AH01630: client denied by server configuration: /home/orgent/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:53:05.484251 2026] [core:error] [pid 3142252:tid 3142252] (13)Permission denied: [client 216.73.216.199:31936] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory183/subsystem/uevent
[Thu Jul 30 12:53:05.689894 2026] [security2:error] [pid 3144325:tid 3144325] [client 35.173.38.202:39923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/BBBB-BBS.html"] [unique_id "ams7IUCW-7EBAb_5zG8UTgAAACw"]
[Thu Jul 30 12:53:06.351128 2026] [core:error] [pid 3135567:tid 3135567] [client 57.141.0.42:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:06.351160 2026] [core:error] [pid 3135567:tid 3135567] [client 57.141.0.42:45994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:06.660676 2026] [ssl:error] [pid 3145199:tid 3145199] (EAI 2)Name or service not known: [client 144.76.19.72:61958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:06.660734 2026] [ssl:error] [pid 3145199:tid 3145199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:06.714324 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:61962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:06.714350 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:06.989702 2026] [ssl:error] [pid 3142252:tid 3142252] (70014)End of file found: [client 216.73.216.199:31936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:08.534133 2026] [core:error] [pid 3127520:tid 3127520] [client 66.249.66.167:43584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:08.534167 2026] [core:error] [pid 3127520:tid 3127520] [client 66.249.66.167:43584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:08.767409 2026] [lsapi:warn] [pid 3122826:tid 3122826] [client 122.180.21.11:52329] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:09.768368 2026] [ssl:error] [pid 3133073:tid 3133073] (EAI 2)Name or service not known: [client 144.76.19.72:25506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:09.768404 2026] [ssl:error] [pid 3133073:tid 3133073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:09.819710 2026] [ssl:error] [pid 3141871:tid 3141871] (EAI 2)Name or service not known: [client 144.76.19.72:25510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:09.819754 2026] [ssl:error] [pid 3141871:tid 3141871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:10.078016 2026] [security2:error] [pid 3144292:tid 3144292] [client 94.154.43.183:63638] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dawnrobinson.co.uk"] [uri "/.env"] [unique_id "ams7Jh6eP1Zs1sN0lN9IkgAAABQ"]
[Thu Jul 30 12:53:10.078224 2026] [security2:error] [pid 3144292:tid 3144292] [client 94.154.43.183:63638] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/.env"] [unique_id "ams7Jh6eP1Zs1sN0lN9IkgAAABQ"]
[Thu Jul 30 12:53:10.424626 2026] [security2:error] [pid 3144292:tid 3144292] [client 94.154.43.183:63638] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "ams7Jh6eP1Zs1sN0lN9IkgAAABQ"]
[Thu Jul 30 12:53:10.815622 2026] [authz_core:error] [pid 3138642:tid 3138642] [client 169.58.39.193:55680] AH01630: client denied by server configuration: /home/orgent/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:53:10.906254 2026] [ssl:error] [pid 3130266:tid 3130266] (5)Input/output error: [client 216.73.216.199:36775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:12.230280 2026] [security2:error] [pid 3144293:tid 3144293] [client 177.8.53.52:5912] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7KH50vBRC8jJWqPNZDwAAABU"]
[Thu Jul 30 12:53:12.230333 2026] [security2:error] [pid 3144293:tid 3144293] [client 177.8.53.52:5912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7KH50vBRC8jJWqPNZDwAAABU"]
[Thu Jul 30 12:53:12.230634 2026] [security2:error] [pid 3144293:tid 3144293] [client 177.8.53.52:5912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7KH50vBRC8jJWqPNZDwAAABU"]
[Thu Jul 30 12:53:12.707595 2026] [core:error] [pid 3142251:tid 3142251] (13)Permission denied: [client 216.73.216.199:42364] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/digestshadow
[Thu Jul 30 12:53:12.875676 2026] [ssl:error] [pid 3142254:tid 3142254] (EAI 2)Name or service not known: [client 144.76.19.72:25514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:12.875716 2026] [ssl:error] [pid 3142254:tid 3142254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:12.930841 2026] [ssl:error] [pid 3136907:tid 3136907] (EAI 2)Name or service not known: [client 144.76.19.72:25518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:12.930872 2026] [ssl:error] [pid 3136907:tid 3136907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:13.679540 2026] [security2:error] [pid 3123049:tid 3123049] [client 47.254.142.11:49735] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7KbDcsLBpvHJZiCzPJAAAADc"]
[Thu Jul 30 12:53:13.679591 2026] [security2:error] [pid 3123049:tid 3123049] [client 47.254.142.11:49735] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7KbDcsLBpvHJZiCzPJAAAADc"]
[Thu Jul 30 12:53:13.679858 2026] [security2:error] [pid 3123049:tid 3123049] [client 47.254.142.11:49735] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7KbDcsLBpvHJZiCzPJAAAADc"]
[Thu Jul 30 12:53:14.112154 2026] [lsapi:warn] [pid 3097447:tid 3097447] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:15.199035 2026] [core:error] [pid 3142158:tid 3142158] [client 57.141.0.48:25386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:15.199076 2026] [core:error] [pid 3142158:tid 3142158] [client 57.141.0.48:25386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:15.988982 2026] [ssl:error] [pid 3135568:tid 3135568] (EAI 2)Name or service not known: [client 144.76.19.72:25522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:15.989021 2026] [ssl:error] [pid 3135568:tid 3135568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:16.044779 2026] [ssl:error] [pid 3144253:tid 3144253] (EAI 2)Name or service not known: [client 144.76.19.72:25532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:16.044813 2026] [ssl:error] [pid 3144253:tid 3144253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:16.746333 2026] [security2:error] [pid 3123049:tid 3123049] [client 47.254.142.11:40915] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7LLDcsLBpvHJZiCzPJgAAADc"]
[Thu Jul 30 12:53:16.746387 2026] [security2:error] [pid 3123049:tid 3123049] [client 47.254.142.11:40915] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7LLDcsLBpvHJZiCzPJgAAADc"]
[Thu Jul 30 12:53:16.746634 2026] [security2:error] [pid 3123049:tid 3123049] [client 47.254.142.11:40915] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7LLDcsLBpvHJZiCzPJgAAADc"]
[Thu Jul 30 12:53:16.961576 2026] [security2:error] [pid 3137000:tid 3137000] [client 43.153.104.196:57426] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.freakorgeek.com"] [uri "/"] [unique_id "ams7LO3uwfeypQ4ACwM6dAAAAB8"]
[Thu Jul 30 12:53:19.099941 2026] [ssl:error] [pid 3132288:tid 3132288] (EAI 2)Name or service not known: [client 144.76.19.72:25548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:19.099990 2026] [ssl:error] [pid 3132288:tid 3132288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:19.126899 2026] [lsapi:warn] [pid 3122826:tid 3122826] [client 122.180.21.11:52957] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:19.154057 2026] [ssl:error] [pid 3144327:tid 3144327] (EAI 2)Name or service not known: [client 144.76.19.72:25564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:19.154105 2026] [ssl:error] [pid 3144327:tid 3144327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:20.514081 2026] [core:error] [pid 3142252:tid 3142252] [client 66.249.66.167:58947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:20.514107 2026] [core:error] [pid 3142252:tid 3142252] [client 66.249.66.167:58947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:21.125280 2026] [security2:error] [pid 3142254:tid 3142254] [client 43.163.86.65:60516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/"] [unique_id "ams7MU7PSIXtYTpQCOUZ6AAAAD8"]
[Thu Jul 30 12:53:22.292242 2026] [ssl:error] [pid 3143382:tid 3143382] (EAI 2)Name or service not known: [client 144.76.19.72:31538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:22.292274 2026] [ssl:error] [pid 3143382:tid 3143382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:22.348844 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:31544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:22.348881 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:23.266684 2026] [core:error] [pid 3142251:tid 3142251] (13)Permission denied: [client 216.73.216.199:42364] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS2/custom_divisor
[Thu Jul 30 12:53:24.169343 2026] [core:error] [pid 3142251:tid 3142251] (13)Permission denied: [client 216.73.216.199:42364] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty52/subsystem/ttyS0/closing_wait
[Thu Jul 30 12:53:24.603941 2026] [lsapi:warn] [pid 3097447:tid 3097447] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:24.665573 2026] [security2:error] [pid 3144328:tid 3144328] [client 94.154.43.178:59956] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "ams7NDyagE264_jgnPDWsgAAADY"]
[Thu Jul 30 12:53:24.665814 2026] [security2:error] [pid 3144328:tid 3144328] [client 94.154.43.178:59956] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "ams7NDyagE264_jgnPDWsgAAADY"]
[Thu Jul 30 12:53:24.666363 2026] [core:error] [pid 3144328:tid 3144328] [client 94.154.43.178:59956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:24.666534 2026] [security2:error] [pid 3144328:tid 3144328] [client 94.154.43.178:59956] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "ams7NDyagE264_jgnPDWsgAAADY"]
[Thu Jul 30 12:53:25.373769 2026] [ssl:error] [pid 3142251:tid 3142251] (70014)End of file found: [client 216.73.216.199:42364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:25.406146 2026] [ssl:error] [pid 3135484:tid 3135484] (EAI 2)Name or service not known: [client 144.76.19.72:31558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:25.406169 2026] [ssl:error] [pid 3135484:tid 3135484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:25.459543 2026] [ssl:error] [pid 3142159:tid 3142159] (EAI 2)Name or service not known: [client 144.76.19.72:31564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:25.459571 2026] [ssl:error] [pid 3142159:tid 3142159] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:27.564830 2026] [security2:error] [pid 3136907:tid 3136907] [client 3.212.205.90:13354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/rocky/rocky-soccer-diaries-2/"] [unique_id "ams7NzwHtgQLmKcg68DCbAAAAAY"]
[Thu Jul 30 12:53:28.180142 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.28:22076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:53:28.180785 2026] [authz_core:error] [pid 3099222:tid 3099222] [client 57.141.0.28:22076] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:53:28.525857 2026] [ssl:error] [pid 3099222:tid 3099222] (EAI 2)Name or service not known: [client 144.76.19.72:31580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:28.525886 2026] [ssl:error] [pid 3099222:tid 3099222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:28.582958 2026] [ssl:error] [pid 3146055:tid 3146055] (EAI 2)Name or service not known: [client 144.76.19.72:31588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:28.582997 2026] [ssl:error] [pid 3146055:tid 3146055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:29.654916 2026] [core:error] [pid 3146108:tid 3146108] [client 66.249.64.170:53136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:29.654981 2026] [core:error] [pid 3146108:tid 3146108] [client 66.249.64.170:53136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:29.666137 2026] [lsapi:warn] [pid 3141871:tid 3141871] [client 122.180.21.11:53579] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:31.263152 2026] [security2:error] [pid 3146139:tid 3146139] [client 44.195.50.71:46604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/flyboy/flyboy-hardit-jatinder/"] [unique_id "ams7O5AS0nFOBax92S151QAAABc"]
[Thu Jul 30 12:53:31.644533 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:21448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:31.644566 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:31.704823 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:21460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:31.704851 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:31.744458 2026] [lsapi:warn] [pid 3135522:tid 3135522] [client 52.167.144.160:61559] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:53:31.744514 2026] [lsapi:warn] [pid 3135522:tid 3135522] [client 52.167.144.160:61559] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:53:31.978040 2026] [security2:error] [pid 3122826:tid 3122826] [client 43.133.187.11:49086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "ams7O0ZFBIjyaJhOQjozFwAAAAQ"]
[Thu Jul 30 12:53:32.699199 2026] [core:error] [pid 3144514:tid 3144514] [client 66.249.66.194:51167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:32.699233 2026] [core:error] [pid 3144514:tid 3144514] [client 66.249.66.194:51167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:32.789853 2026] [ssl:error] [pid 3144328:tid 3144328] (5)Input/output error: [client 216.73.216.199:36524] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:33.140947 2026] [security2:error] [pid 3097447:tid 3097447] [client 110.249.201.90:16040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams7PQwdUtr6PLa6YOMmUgAAABw"]
[Thu Jul 30 12:53:34.105428 2026] [security2:error] [pid 3138265:tid 3138265] [client 185.191.171.19:39406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/george-teichner-wife"] [unique_id "ams7Pm9PNvQ7pWvg0LVPMAAAAA4"]
[Thu Jul 30 12:53:34.761645 2026] [ssl:error] [pid 3146231:tid 3146231] (EAI 2)Name or service not known: [client 144.76.19.72:21466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:34.761680 2026] [ssl:error] [pid 3146231:tid 3146231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:34.831241 2026] [ssl:error] [pid 3144514:tid 3144514] (EAI 2)Name or service not known: [client 144.76.19.72:21474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:34.831289 2026] [ssl:error] [pid 3144514:tid 3144514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:34.870831 2026] [security2:error] [pid 3142159:tid 3142159] [client 98.83.10.183:52199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/schools-librarians/literacy-resources/rugby-2013/"] [unique_id "ams7Pvs2FsY4V7Elk_A3WAAAADk"]
[Thu Jul 30 12:53:35.050922 2026] [core:error] [pid 3145200:tid 3145200] [client 66.249.66.167:59918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:35.050962 2026] [core:error] [pid 3145200:tid 3145200] [client 66.249.66.167:59918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:35.102295 2026] [lsapi:warn] [pid 3146138:tid 3146138] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:35.827159 2026] [authz_core:error] [pid 3122826:tid 3122826] [client 57.141.0.48:42748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:53:35.828232 2026] [authz_core:error] [pid 3122826:tid 3122826] [client 57.141.0.48:42748] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:53:36.106153 2026] [core:error] [pid 3132340:tid 3132340] (13)Permission denied: [client 216.73.216.199:22587] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty16/subsystem/ttyS2/custom_divisor
[Thu Jul 30 12:53:37.887470 2026] [ssl:error] [pid 3111722:tid 3111722] (EAI 2)Name or service not known: [client 144.76.19.72:21476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:37.887509 2026] [ssl:error] [pid 3111722:tid 3111722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:37.942844 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:21490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:37.942871 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:38.213566 2026] [ssl:error] [pid 3128807:tid 3128807] (70014)End of file found: [client 216.73.216.199:65463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:38.513942 2026] [core:error] [pid 3132340:tid 3132340] (13)Permission denied: [client 216.73.216.199:22587] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup17/device/subsystem/uevent
[Thu Jul 30 12:53:39.062317 2026] [security2:error] [pid 3146108:tid 3146108] [client 3.213.106.226:35479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/arctic-star/tom-palmer_arctic-star_book-signing_sg-002/"] [unique_id "ams7Q9Ut6rbiaJsfCz-2HQAAAAc"]
[Thu Jul 30 12:53:39.928386 2026] [security2:error] [pid 3135522:tid 3135522] [client 175.27.171.245:38790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "ams7Q3WuBmJUddiT9oYJtQAAABA"]
[Thu Jul 30 12:53:40.143892 2026] [lsapi:warn] [pid 3143336:tid 3143336] [client 122.180.21.11:54204] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:40.320573 2026] [ssl:error] [pid 3132340:tid 3132340] (70014)End of file found: [client 216.73.216.199:22587] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:40.997738 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:40928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:40.997782 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:41.055645 2026] [ssl:error] [pid 3146108:tid 3146108] (EAI 2)Name or service not known: [client 144.76.19.72:40932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:41.055676 2026] [ssl:error] [pid 3146108:tid 3146108] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:41.524950 2026] [core:error] [pid 3144515:tid 3144515] (13)Permission denied: [client 216.73.216.199:50031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/alism.com.db
[Thu Jul 30 12:53:41.825690 2026] [core:error] [pid 3144515:tid 3144515] (13)Permission denied: [client 216.73.216.199:50031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/kulinarja.com.db
[Thu Jul 30 12:53:42.428281 2026] [ssl:error] [pid 3144515:tid 3144515] (70014)End of file found: [client 216.73.216.199:50031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:43.502527 2026] [security2:error] [pid 3146138:tid 3146138] [client 50.19.221.48:44918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/world-book-day/lucy/"] [unique_id "ams7RzN8Q_sH0Y21KcbG_gAAABY"]
[Thu Jul 30 12:53:44.113089 2026] [ssl:error] [pid 3097447:tid 3097447] (EAI 2)Name or service not known: [client 144.76.19.72:40940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:44.113120 2026] [ssl:error] [pid 3097447:tid 3097447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:44.166682 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:40954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:44.166715 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:45.287001 2026] [security2:error] [pid 3141871:tid 3141871] [client 114.119.143.103:63413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.unclaimedassets.co.uk"] [uri "/robots.txt"] [unique_id "ams7SbRy5CvOjA8qd5TmvwAAADI"], referer: https://www.unclaimedassets.co.uk/robots.txt
[Thu Jul 30 12:53:45.438537 2026] [ssl:error] [pid 3135566:tid 3135566] (70014)End of file found: [client 216.73.216.199:3155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:45.528704 2026] [core:error] [pid 3137000:tid 3137000] [client 66.249.66.66:38496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:45.528745 2026] [core:error] [pid 3137000:tid 3137000] [client 66.249.66.66:38496] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:45.580668 2026] [lsapi:warn] [pid 3146138:tid 3146138] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:45.915704 2026] [core:error] [pid 3133743:tid 3133743] [client 57.141.0.67:40040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:45.915736 2026] [core:error] [pid 3133743:tid 3133743] [client 57.141.0.67:40040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:46.941909 2026] [ssl:error] [pid 3146108:tid 3146108] (5)Input/output error: [client 216.73.216.199:28574] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:47.224803 2026] [ssl:error] [pid 3133743:tid 3133743] (EAI 2)Name or service not known: [client 144.76.19.72:40956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:47.224839 2026] [ssl:error] [pid 3133743:tid 3133743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:47.261755 2026] [security2:error] [pid 3099222:tid 3099222] [client 18.213.240.226:16680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/translations/resist-modstand-argasso-sweden/"] [unique_id "ams7S2mJMDE7Ux8aWFYhdgAAABk"]
[Thu Jul 30 12:53:47.281626 2026] [ssl:error] [pid 3146138:tid 3146138] (EAI 2)Name or service not known: [client 144.76.19.72:40970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:47.281669 2026] [ssl:error] [pid 3146138:tid 3146138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:48.132524 2026] [security2:error] [pid 3133743:tid 3133743] [client 23.23.103.31:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "revoracing.org.uk"] [uri "/"] [unique_id "ams7TM46wrxSPt8bmqSJDQAAAAI"]
[Thu Jul 30 12:53:48.882148 2026] [security2:error] [pid 3144253:tid 3144253] [client 23.23.103.31:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/"] [unique_id "ams7TDPy80R9fSOag8I0QQAAABI"]
[Thu Jul 30 12:53:49.648337 2026] [core:error] [pid 3132340:tid 3132340] (13)Permission denied: [client 216.73.216.199:6090] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/ssl/private/ftpd-ca.pem
[Thu Jul 30 12:53:50.258933 2026] [authz_core:error] [pid 3144253:tid 3144253] [client 57.141.0.8:63514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:53:50.259567 2026] [authz_core:error] [pid 3144253:tid 3144253] [client 57.141.0.8:63514] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:53:50.344738 2026] [ssl:error] [pid 3144253:tid 3144253] (EAI 2)Name or service not known: [client 144.76.19.72:35422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:50.344767 2026] [ssl:error] [pid 3144253:tid 3144253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:50.408458 2026] [ssl:error] [pid 3144253:tid 3144253] (EAI 2)Name or service not known: [client 144.76.19.72:35428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:50.408498 2026] [ssl:error] [pid 3144253:tid 3144253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:50.550376 2026] [security2:error] [pid 3132340:tid 3132340] [client 216.73.216.199:6090] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/pdns/pdns.conf"] [unique_id "ams7Tm3NllLeaFcIlO_gfAAAAD4"]
[Thu Jul 30 12:53:50.550694 2026] [security2:error] [pid 3132340:tid 3132340] [client 216.73.216.199:6090] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/pdns/pdns.conf"] [unique_id "ams7Tm3NllLeaFcIlO_gfAAAAD4"]
[Thu Jul 30 12:53:50.550914 2026] [security2:error] [pid 3132340:tid 3132340] [client 216.73.216.199:6090] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/pdns/pdns.conf"] [unique_id "ams7Tm3NllLeaFcIlO_gfAAAAD4"]
[Thu Jul 30 12:53:50.667429 2026] [lsapi:warn] [pid 3144514:tid 3144514] [client 122.180.21.11:54825] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:51.155377 2026] [security2:error] [pid 3145157:tid 3145157] [client 3.217.82.254:17972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/responses-to-over-the-line/"] [unique_id "ams7T2HHoFYNKI4L8n1vOQAAAAE"]
[Thu Jul 30 12:53:51.514441 2026] [ssl:error] [pid 3132340:tid 3132340] (70014)End of file found: [client 216.73.216.199:6090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:51.575076 2026] [cgi:error] [pid 3144514:tid 3144514] [client 20.104.22.47:31413] AH02812: stderr from /home/enigmasu/Enigmasupies.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:53:51.756138 2026] [ssl:error] [pid 3147077:tid 3147077] (70014)End of file found: [client 216.73.216.199:18491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:52.097633 2026] [authz_core:error] [pid 3136907:tid 3136907] [client 57.141.0.65:27552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:53:52.098267 2026] [authz_core:error] [pid 3136907:tid 3136907] [client 57.141.0.65:27552] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:53:52.301213 2026] [lsapi:warn] [pid 3146109:tid 3146109] [client 143.110.177.252:44496] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 12:53:52.301254 2026] [lsapi:warn] [pid 3146109:tid 3146109] [client 143.110.177.252:44496] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 12:53:52.360402 2026] [core:error] [pid 3146139:tid 3146139] (13)Permission denied: [client 216.73.216.199:33915] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty43/subsystem/ttyS2/custom_divisor
[Thu Jul 30 12:53:53.466592 2026] [ssl:error] [pid 3147120:tid 3147120] (EAI 2)Name or service not known: [client 144.76.19.72:35434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:53.466713 2026] [ssl:error] [pid 3147120:tid 3147120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:53.523820 2026] [ssl:error] [pid 3147122:tid 3147122] (EAI 2)Name or service not known: [client 144.76.19.72:35448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:53.523865 2026] [ssl:error] [pid 3147122:tid 3147122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:54.765997 2026] [core:error] [pid 3146139:tid 3146139] (13)Permission denied: [client 216.73.216.199:33915] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/acthoroughbreds.com.db
[Thu Jul 30 12:53:54.926092 2026] [security2:error] [pid 3144327:tid 3144327] [client 35.174.253.85:58183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/other/siteplanning/site-planning-references/CODI%20Update2008_%2050%20upgrading%20projects%20(see%20page%2010).pdf"] [unique_id "ams7Uk8GLcu3moCp2P7JggAAAC8"]
[Thu Jul 30 12:53:55.391242 2026] [security2:error] [pid 3144328:tid 3144328] [client 34.194.95.99:27937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/virtual-visits/church/"] [unique_id "ams7UzyagE264_jgnPDWyQAAADY"]
[Thu Jul 30 12:53:55.518162 2026] [security2:error] [pid 3135565:tid 3135565] [client 34.234.206.30:39155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/A.2-Afghanistan-2002-onwards-Returns.pdf"] [unique_id "ams7U2mWJnvp4YflN9TouwAAACQ"]
[Thu Jul 30 12:53:56.049652 2026] [lsapi:warn] [pid 3111722:tid 3111722] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:53:56.274841 2026] [ssl:error] [pid 3146139:tid 3146139] (70014)End of file found: [client 216.73.216.199:33915] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:53:56.580468 2026] [ssl:error] [pid 3142254:tid 3142254] (EAI 2)Name or service not known: [client 144.76.19.72:35460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:56.580511 2026] [ssl:error] [pid 3142254:tid 3142254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:56.636360 2026] [ssl:error] [pid 3143382:tid 3143382] (EAI 2)Name or service not known: [client 144.76.19.72:35468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:56.636388 2026] [ssl:error] [pid 3143382:tid 3143382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:56.871839 2026] [security2:error] [pid 3135565:tid 3135565] [client 114.119.157.183:22535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577232000/cat_ids~15,17/request_format~html"] [unique_id "ams7VGmWJnvp4YflN9TovAAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577232000/cat_ids~15,17/request_format~html
[Thu Jul 30 12:53:56.939529 2026] [core:error] [pid 3141871:tid 3141871] [client 57.141.0.69:63612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:56.939555 2026] [core:error] [pid 3141871:tid 3141871] [client 57.141.0.69:63612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:57.800991 2026] [authz_core:error] [pid 3144514:tid 3144514] [client 20.104.22.47:31413] AH01630: client denied by server configuration: /home/enigmasu/Enigmasupies.co.uk/php.ini
[Thu Jul 30 12:53:58.069186 2026] [core:error] [pid 3136907:tid 3136907] [client 66.249.66.167:64904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:58.069216 2026] [core:error] [pid 3136907:tid 3136907] [client 66.249.66.167:64904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:53:58.314765 2026] [security2:error] [pid 3144327:tid 3144327] [client 114.119.157.183:22539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577232000/cat_ids~15,17/request_format~html"] [unique_id "ams7Vk8GLcu3moCp2P7JhAAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577232000/cat_ids~15,17/request_format~html
[Thu Jul 30 12:53:59.098925 2026] [security2:error] [pid 3147077:tid 3147077] [client 98.82.214.73:10525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/posters/rugby-poster-image/"] [unique_id "ams7V6-cbfGYGMNSdZzIZgAAABo"]
[Thu Jul 30 12:53:59.569855 2026] [security2:error] [pid 3136907:tid 3136907] [client 100.29.164.178:37910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2015-2016/SP15-16_A31-A32-Lebanon-2015-2016.pdf"] [unique_id "ams7VzwHtgQLmKcg68DCeQAAAAY"]
[Thu Jul 30 12:53:59.693443 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:40126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:59.693483 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:53:59.715941 2026] [security2:error] [pid 3135566:tid 3135566] [client 34.194.226.74:65196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/files/Transitional%20Settlement%20Displaced%20Populations_%20OXFAM%20and%20Shelter%20Centre.pdf"] [unique_id "ams7V0Kdalo69QDYF3AnZQAAACg"]
[Thu Jul 30 12:53:59.745614 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:40142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:53:59.745650 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:01.090028 2026] [authz_core:error] [pid 3135566:tid 3135566] [client 57.141.0.16:62976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:01.090673 2026] [authz_core:error] [pid 3135566:tid 3135566] [client 57.141.0.16:62976] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:01.128200 2026] [lsapi:warn] [pid 3147122:tid 3147122] [client 122.180.21.11:55443] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:02.649966 2026] [security2:error] [pid 3147122:tid 3147122] [client 3.232.39.98:48294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/other/siteplanning/site-planning-references/WHO-ASSAR-guide-to-sanitaiton-in-natural-disasters.pdf"] [unique_id "ams7WosiWxfMzf7sgpxgqwAAACM"]
[Thu Jul 30 12:54:02.838337 2026] [ssl:error] [pid 3146139:tid 3146139] (EAI 2)Name or service not known: [client 144.76.19.72:40156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:02.838382 2026] [ssl:error] [pid 3146139:tid 3146139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:02.895946 2026] [ssl:error] [pid 3144515:tid 3144515] (EAI 2)Name or service not known: [client 144.76.19.72:40172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:02.895987 2026] [ssl:error] [pid 3144515:tid 3144515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:03.217524 2026] [core:error] [pid 3135522:tid 3135522] (13)Permission denied: [client 216.73.216.199:63556] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory22/node0/compact
[Thu Jul 30 12:54:03.503859 2026] [security2:error] [pid 3136907:tid 3136907] [client 54.210.155.69:35484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2017-2018/SP17-18_C01-03-Annexes.pdf"] [unique_id "ams7WzwHtgQLmKcg68DCfQAAAAY"]
[Thu Jul 30 12:54:03.611124 2026] [security2:error] [pid 3147635:tid 3147635] [client 3.220.148.166:39013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/meet-me/compton-library/"] [unique_id "ams7W5w9Obg-tYoTUjsW5AAAABU"]
[Thu Jul 30 12:54:03.630604 2026] [ssl:error] [pid 3144515:tid 3144515] (70014)End of file found: [client 216.73.216.199:54493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:04.528701 2026] [ssl:error] [pid 3135522:tid 3135522] (70014)End of file found: [client 216.73.216.199:63556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:04.958303 2026] [security2:error] [pid 3144326:tid 3144326] [client 20.79.29.209:9864] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "static3.alism.com"] [uri "/wp-config.php"] [unique_id "ams7XLO1InXF9VCMYdKhggAAAC4"]
[Thu Jul 30 12:54:04.958419 2026] [security2:error] [pid 3144326:tid 3144326] [client 20.79.29.209:9864] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "static3.alism.com"] [uri "/wp-config.php"] [unique_id "ams7XLO1InXF9VCMYdKhggAAAC4"]
[Thu Jul 30 12:54:04.958600 2026] [security2:error] [pid 3144326:tid 3144326] [client 20.79.29.209:9864] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "static3.alism.com"] [uri "/wp-config.php"] [unique_id "ams7XLO1InXF9VCMYdKhggAAAC4"]
[Thu Jul 30 12:54:05.437118 2026] [core:error] [pid 3136907:tid 3136907] (13)Permission denied: [client 216.73.216.199:9184] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory64/node0/compact
[Thu Jul 30 12:54:05.975413 2026] [ssl:error] [pid 3147077:tid 3147077] (EAI 2)Name or service not known: [client 144.76.19.72:40184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:05.975478 2026] [ssl:error] [pid 3147077:tid 3147077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:06.031030 2026] [ssl:error] [pid 3143382:tid 3143382] (EAI 2)Name or service not known: [client 144.76.19.72:40194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:06.031053 2026] [ssl:error] [pid 3143382:tid 3143382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:06.203947 2026] [security2:error] [pid 3146138:tid 3146138] [client 43.164.1.211:37820] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.devwebsitehub.com"] [uri "/"] [unique_id "ams7XjN8Q_sH0Y21KcbHEgAAABY"]
[Thu Jul 30 12:54:06.529918 2026] [lsapi:warn] [pid 3142159:tid 3142159] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:07.061898 2026] [security2:error] [pid 3135566:tid 3135566] [client 44.209.187.99:26343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/meet-me/barnsley-15-august/"] [unique_id "ams7X0Kdalo69QDYF3AnaQAAACg"]
[Thu Jul 30 12:54:08.244979 2026] [security2:error] [pid 3144327:tid 3144327] [client 54.225.98.148:3813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects8/ref/A01-burkinafaso180821.pdf"] [unique_id "ams7YE8GLcu3moCp2P7JiAAAAC8"]
[Thu Jul 30 12:54:08.256977 2026] [security2:error] [pid 3146138:tid 3146138] [client 50.16.248.61:27185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2013-2014/SP13-14_A01-CAR-2013.pdf"] [unique_id "ams7YDN8Q_sH0Y21KcbHEwAAABY"]
[Thu Jul 30 12:54:09.084224 2026] [ssl:error] [pid 3142252:tid 3142252] (EAI 2)Name or service not known: [client 144.76.19.72:40196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:09.084261 2026] [ssl:error] [pid 3142252:tid 3142252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:09.159272 2026] [ssl:error] [pid 3146138:tid 3146138] (EAI 2)Name or service not known: [client 144.76.19.72:40206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:09.159315 2026] [ssl:error] [pid 3146138:tid 3146138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:09.834955 2026] [security2:error] [pid 3132340:tid 3132340] [client 85.208.96.196:51756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,127.0/prev_next,next.html"] [unique_id "ams7YW3NllLeaFcIlO_ghQAAAD4"]
[Thu Jul 30 12:54:10.298518 2026] [security2:error] [pid 3147636:tid 3147636] [client 20.79.29.209:9937] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "static3.alism.com"] [uri "/var/log/error.log"] [unique_id "ams7Yh_gIcwlXWIMkXvnhAAAABk"]
[Thu Jul 30 12:54:10.298681 2026] [security2:error] [pid 3147636:tid 3147636] [client 20.79.29.209:9937] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "static3.alism.com"] [uri "/var/log/error.log"] [unique_id "ams7Yh_gIcwlXWIMkXvnhAAAABk"]
[Thu Jul 30 12:54:10.298859 2026] [security2:error] [pid 3147636:tid 3147636] [client 20.79.29.209:9937] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "static3.alism.com"] [uri "/var/log/error.log"] [unique_id "ams7Yh_gIcwlXWIMkXvnhAAAABk"]
[Thu Jul 30 12:54:10.848776 2026] [core:error] [pid 3123049:tid 3123049] [client 66.249.66.168:61715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:10.848805 2026] [core:error] [pid 3123049:tid 3123049] [client 66.249.66.168:61715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:10.988741 2026] [security2:error] [pid 3135566:tid 3135566] [client 50.19.221.48:47461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects2013-2014.html"] [unique_id "ams7YkKdalo69QDYF3AnawAAACg"]
[Thu Jul 30 12:54:11.126996 2026] [security2:error] [pid 3135567:tid 3135567] [client 43.132.214.228:35584] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "ams7Y0cf7TmX9AaQQdDW6QAAACk"]
[Thu Jul 30 12:54:11.373987 2026] [security2:error] [pid 3147555:tid 3147555] [client 34.224.132.215:57917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/home/best-pic-of-tom/"] [unique_id "ams7YxMTYhWI5PVe79b6RgAAAAQ"]
[Thu Jul 30 12:54:11.467593 2026] [lsapi:warn] [pid 3132340:tid 3132340] [client 122.180.21.11:56072] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:11.538323 2026] [security2:error] [pid 3142254:tid 3142254] [client 103.136.107.178:50948] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7Y07PSIXtYTpQCOUaKAAAAD8"]
[Thu Jul 30 12:54:11.538376 2026] [security2:error] [pid 3142254:tid 3142254] [client 103.136.107.178:50948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7Y07PSIXtYTpQCOUaKAAAAD8"]
[Thu Jul 30 12:54:11.538675 2026] [security2:error] [pid 3142254:tid 3142254] [client 103.136.107.178:50948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7Y07PSIXtYTpQCOUaKAAAAD8"]
[Thu Jul 30 12:54:12.169595 2026] [security2:error] [pid 3132340:tid 3132340] [client 54.225.148.123:51926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2015-2016/SP15-16_A2-Myanmar-2014-2016.pdf"] [unique_id "ams7ZG3NllLeaFcIlO_giAAAAD4"]
[Thu Jul 30 12:54:12.261110 2026] [ssl:error] [pid 3146231:tid 3146231] (EAI 2)Name or service not known: [client 144.76.19.72:30704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:12.261163 2026] [ssl:error] [pid 3146231:tid 3146231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:12.316846 2026] [ssl:error] [pid 3144253:tid 3144253] (EAI 2)Name or service not known: [client 144.76.19.72:30720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:12.316891 2026] [ssl:error] [pid 3144253:tid 3144253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:12.963041 2026] [ssl:error] [pid 3136907:tid 3136907] (70014)End of file found: [client 216.73.216.199:9184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:13.560575 2026] [ssl:error] [pid 3144515:tid 3144515] (70014)End of file found: [client 216.73.216.199:1695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:14.309919 2026] [security2:error] [pid 3147635:tid 3147635] [client 8.216.32.197:65075] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7Zpw9Obg-tYoTUjsW6wAAABU"]
[Thu Jul 30 12:54:14.309980 2026] [security2:error] [pid 3147635:tid 3147635] [client 8.216.32.197:65075] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7Zpw9Obg-tYoTUjsW6wAAABU"]
[Thu Jul 30 12:54:14.310366 2026] [security2:error] [pid 3147635:tid 3147635] [client 8.216.32.197:65075] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7Zpw9Obg-tYoTUjsW6wAAABU"]
[Thu Jul 30 12:54:14.641534 2026] [authz_core:error] [pid 3144322:tid 3144322] [client 57.141.0.50:46348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:14.642159 2026] [authz_core:error] [pid 3144322:tid 3144322] [client 57.141.0.50:46348] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:14.768794 2026] [ssl:error] [pid 3147076:tid 3147076] (70014)End of file found: [client 216.73.216.199:42459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:14.804759 2026] [core:error] [pid 3144514:tid 3144514] [client 66.249.66.168:47029] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:14.804786 2026] [core:error] [pid 3144514:tid 3144514] [client 66.249.66.168:47029] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:15.054268 2026] [security2:error] [pid 3143382:tid 3143382] [client 52.44.174.136:33557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/after-the-war/atw-glossary/"] [unique_id "ams7Z2MyjfqRll1dohBYJwAAAAM"]
[Thu Jul 30 12:54:15.433702 2026] [ssl:error] [pid 3148271:tid 3148271] (EAI 2)Name or service not known: [client 144.76.19.72:30722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:15.433750 2026] [ssl:error] [pid 3148271:tid 3148271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:15.744404 2026] [ssl:error] [pid 3147029:tid 3147029] (EAI 2)Name or service not known: [client 144.76.19.72:30728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:15.744442 2026] [ssl:error] [pid 3147029:tid 3147029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:16.799320 2026] [authz_core:error] [pid 3147029:tid 3147029] [client 66.249.66.34:54531] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:54:16.802006 2026] [authz_core:error] [pid 3147029:tid 3147029] [client 66.249.66.34:54531] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:54:17.104116 2026] [lsapi:warn] [pid 3144292:tid 3144292] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:17.551331 2026] [access_compat:error] [pid 3146138:tid 3146138] [client 45.158.164.139:39916] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:54:18.217221 2026] [cgi:error] [pid 3148363:tid 3148363] [client 34.224.175.62:57950] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:54:18.217583 2026] [core:error] [pid 3148363:tid 3148363] [client 34.224.175.62:57950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:18.303895 2026] [ssl:error] [pid 3148364:tid 3148364] (70014)End of file found: [client 216.73.216.199:24258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:18.311637 2026] [security2:error] [pid 3142158:tid 3142158] [client 8.216.32.197:51967] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7anOHaK84tBsGOCa8pgAAADg"]
[Thu Jul 30 12:54:18.311679 2026] [security2:error] [pid 3142158:tid 3142158] [client 8.216.32.197:51967] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7anOHaK84tBsGOCa8pgAAADg"]
[Thu Jul 30 12:54:18.311926 2026] [security2:error] [pid 3142158:tid 3142158] [client 8.216.32.197:51967] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7anOHaK84tBsGOCa8pgAAADg"]
[Thu Jul 30 12:54:18.802351 2026] [ssl:error] [pid 3136907:tid 3136907] (EAI 2)Name or service not known: [client 144.76.19.72:30730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:18.802383 2026] [ssl:error] [pid 3136907:tid 3136907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:18.856795 2026] [ssl:error] [pid 3146138:tid 3146138] (EAI 2)Name or service not known: [client 144.76.19.72:30734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:18.856834 2026] [ssl:error] [pid 3146138:tid 3146138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:18.867438 2026] [core:error] [pid 3144292:tid 3144292] (13)Permission denied: [client 216.73.216.199:30455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_tables_set/sections/__bug_table
[Thu Jul 30 12:54:18.983407 2026] [core:error] [pid 3144292:tid 3144292] (13)Permission denied: [client 216.73.216.199:30455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/libata/sections/__param
[Thu Jul 30 12:54:19.668215 2026] [security2:error] [pid 3144515:tid 3144515] [client 43.164.133.138:57470] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "greenduckgallery.co.uk"] [uri "/"] [unique_id "ams7a0hrXGJl7E3SO3Y-CwAAAEA"]
[Thu Jul 30 12:54:21.399787 2026] [ssl:error] [pid 3144292:tid 3144292] (70014)End of file found: [client 216.73.216.199:30455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:21.914527 2026] [ssl:error] [pid 3145157:tid 3145157] (EAI 2)Name or service not known: [client 144.76.19.72:46874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:21.914569 2026] [ssl:error] [pid 3145157:tid 3145157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:21.972715 2026] [ssl:error] [pid 3147120:tid 3147120] (EAI 2)Name or service not known: [client 144.76.19.72:46878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:21.972761 2026] [ssl:error] [pid 3147120:tid 3147120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:21.974537 2026] [lsapi:warn] [pid 3147635:tid 3147635] [client 122.180.21.11:56693] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:23.595562 2026] [core:error] [pid 3147029:tid 3147029] [client 66.249.66.195:36812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:23.595592 2026] [core:error] [pid 3147029:tid 3147029] [client 66.249.66.195:36812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:24.731820 2026] [ssl:error] [pid 3144325:tid 3144325] (70014)End of file found: [client 216.73.216.199:36155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:24.757732 2026] [cgi:error] [pid 3147635:tid 3147635] [client 20.79.29.209:9931] AH02811: stderr from /home/alismcom/public_html/static3/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 12:54:24.815005 2026] [authz_core:error] [pid 3147635:tid 3147635] [client 20.79.29.209:9931] AH01630: client denied by server configuration: /home/alismcom/public_html/static3/php.ini
[Thu Jul 30 12:54:25.031600 2026] [ssl:error] [pid 3148312:tid 3148312] (EAI 2)Name or service not known: [client 144.76.19.72:46890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:25.031633 2026] [ssl:error] [pid 3148312:tid 3148312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:25.085450 2026] [ssl:error] [pid 3148364:tid 3148364] (EAI 2)Name or service not known: [client 144.76.19.72:46904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:25.085498 2026] [ssl:error] [pid 3148364:tid 3148364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:27.446163 2026] [ssl:error] [pid 3147029:tid 3147029] (70014)End of file found: [client 216.73.216.199:60660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:27.532991 2026] [lsapi:warn] [pid 3148312:tid 3148312] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:27.604392 2026] [authz_core:error] [pid 3142158:tid 3142158] [client 57.141.0.24:36942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:27.605032 2026] [authz_core:error] [pid 3142158:tid 3142158] [client 57.141.0.24:36942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:27.948932 2026] [ssl:error] [pid 3146140:tid 3146140] (70014)End of file found: [client 216.73.216.199:63824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:28.000316 2026] [security2:error] [pid 3143382:tid 3143382] [client 43.162.103.213:44624] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "ams7c2MyjfqRll1dohBYLAAAAAM"]
[Thu Jul 30 12:54:28.142331 2026] [ssl:error] [pid 3135568:tid 3135568] (EAI 2)Name or service not known: [client 144.76.19.72:46918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:28.142359 2026] [ssl:error] [pid 3135568:tid 3135568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:28.198455 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:46932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:28.198480 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:29.442616 2026] [core:error] [pid 3144515:tid 3144515] [client 57.141.0.43:60574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:29.442647 2026] [core:error] [pid 3144515:tid 3144515] [client 57.141.0.43:60574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:30.064039 2026] [ssl:error] [pid 3144326:tid 3144326] (70014)End of file found: [client 216.73.216.199:27950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:31.251988 2026] [ssl:error] [pid 3146109:tid 3146109] (EAI 2)Name or service not known: [client 144.76.19.72:44434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:31.252036 2026] [ssl:error] [pid 3146109:tid 3146109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:31.306341 2026] [ssl:error] [pid 3144322:tid 3144322] (EAI 2)Name or service not known: [client 144.76.19.72:44436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:31.306368 2026] [ssl:error] [pid 3144322:tid 3144322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:31.371168 2026] [authz_core:error] [pid 3147076:tid 3147076] [client 57.141.0.27:49738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:31.371787 2026] [authz_core:error] [pid 3147076:tid 3147076] [client 57.141.0.27:49738] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:31.570980 2026] [authz_core:error] [pid 3144292:tid 3144292] [client 94.154.43.183:63120] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 12:54:31.951495 2026] [authz_core:error] [pid 3135484:tid 3135484] [client 20.193.250.173:54802] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:54:32.795821 2026] [ssl:error] [pid 3132340:tid 3132340] (70014)End of file found: [client 216.73.216.199:59994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:32.865251 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.71:65160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:32.865883 2026] [authz_core:error] [pid 3135522:tid 3135522] [client 57.141.0.71:65160] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:33.405242 2026] [ssl:error] [pid 3146138:tid 3146138] (70014)End of file found: [client 216.73.216.199:29587] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:34.363030 2026] [ssl:error] [pid 3135522:tid 3135522] (EAI 2)Name or service not known: [client 144.76.19.72:44444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:34.363081 2026] [ssl:error] [pid 3135522:tid 3135522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:34.414414 2026] [ssl:error] [pid 3146140:tid 3146140] (EAI 2)Name or service not known: [client 144.76.19.72:44458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:34.414458 2026] [ssl:error] [pid 3146140:tid 3146140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:34.634770 2026] [security2:error] [pid 3137000:tid 3137000] [client 185.191.171.13:48438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/beautiful-bts-army-anime-girl"] [unique_id "ams7eu3uwfeypQ4ACwM7kgAAAB8"]
[Thu Jul 30 12:54:35.422875 2026] [authz_core:error] [pid 3146140:tid 3146140] [client 66.249.66.33:48241] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:54:35.425557 2026] [authz_core:error] [pid 3146140:tid 3146140] [client 66.249.66.33:48241] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:54:35.505719 2026] [ssl:error] [pid 3148271:tid 3148271] (70014)End of file found: [client 216.73.216.199:13885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:36.105425 2026] [core:error] [pid 3142158:tid 3142158] [client 66.249.66.66:50895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:36.105469 2026] [core:error] [pid 3142158:tid 3142158] [client 66.249.66.66:50895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:37.489857 2026] [ssl:error] [pid 3144326:tid 3144326] (EAI 2)Name or service not known: [client 144.76.19.72:44466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:37.489895 2026] [ssl:error] [pid 3144326:tid 3144326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:37.542579 2026] [ssl:error] [pid 3148454:tid 3148454] (EAI 2)Name or service not known: [client 144.76.19.72:44476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:37.542610 2026] [ssl:error] [pid 3148454:tid 3148454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:38.068523 2026] [lsapi:warn] [pid 3138265:tid 3138265] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:38.236977 2026] [ssl:error] [pid 3144326:tid 3144326] (70014)End of file found: [client 216.73.216.199:25778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:38.640167 2026] [authz_core:error] [pid 3148454:tid 3148454] [client 57.141.0.29:35258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:38.640797 2026] [authz_core:error] [pid 3148454:tid 3148454] [client 57.141.0.29:35258] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:38.952672 2026] [ssl:error] [pid 3145199:tid 3145199] (70014)End of file found: [client 216.73.216.199:50792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:40.218052 2026] [cgi:error] [pid 3147122:tid 3147122] [client 20.9.4.9:51342] AH02812: stderr from /home/alismcom/public_html/static2/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 12:54:40.597154 2026] [ssl:error] [pid 3145157:tid 3145157] (EAI 2)Name or service not known: [client 144.76.19.72:19242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:40.597189 2026] [ssl:error] [pid 3145157:tid 3145157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:40.649939 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:19256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:40.649968 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:40.713829 2026] [access_compat:error] [pid 3144322:tid 3144322] [client 2.189.5.162:47898] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:54:40.955655 2026] [core:error] [pid 3147077:tid 3147077] (13)Permission denied: [client 216.73.216.199:32498] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kdb/parameters/cmd_enable
[Thu Jul 30 12:54:41.069585 2026] [ssl:error] [pid 3147077:tid 3147077] (70014)End of file found: [client 216.73.216.199:32498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:41.799584 2026] [authz_core:error] [pid 3147122:tid 3147122] [client 20.9.4.9:51342] AH01630: client denied by server configuration: /home/alismcom/public_html/static2/php.ini
[Thu Jul 30 12:54:43.704615 2026] [ssl:error] [pid 3148361:tid 3148361] (EAI 2)Name or service not known: [client 144.76.19.72:19262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:43.704655 2026] [ssl:error] [pid 3148361:tid 3148361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:43.759389 2026] [ssl:error] [pid 3135484:tid 3135484] (EAI 2)Name or service not known: [client 144.76.19.72:19272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:43.759436 2026] [ssl:error] [pid 3135484:tid 3135484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:43.793217 2026] [core:error] [pid 3144326:tid 3144326] (13)Permission denied: [client 216.73.216.199:32258] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/objects_partial
[Thu Jul 30 12:54:44.753618 2026] [security2:error] [pid 3149635:tid 3149635] [client 45.148.10.67:59928] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "shelterprojects.org"] [uri "/.git/config"] [unique_id "ams7hJiqv-mUzdzbb_EWIgAAAAM"]
[Thu Jul 30 12:54:44.753892 2026] [security2:error] [pid 3149635:tid 3149635] [client 45.148.10.67:59928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shelterprojects.org"] [uri "/.git/config"] [unique_id "ams7hJiqv-mUzdzbb_EWIgAAAAM"]
[Thu Jul 30 12:54:44.754180 2026] [security2:error] [pid 3149635:tid 3149635] [client 45.148.10.67:59928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "shelterprojects.org"] [uri "/.git/config"] [unique_id "ams7hJiqv-mUzdzbb_EWIgAAAAM"]
[Thu Jul 30 12:54:46.044148 2026] [ssl:error] [pid 3138265:tid 3138265] (70014)End of file found: [client 216.73.216.199:26319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:46.661208 2026] [core:error] [pid 3135522:tid 3135522] (13)Permission denied: [client 216.73.216.199:65343] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/trace
[Thu Jul 30 12:54:46.816791 2026] [ssl:error] [pid 3135565:tid 3135565] (EAI 2)Name or service not known: [client 144.76.19.72:19282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:46.816823 2026] [ssl:error] [pid 3135565:tid 3135565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:46.874504 2026] [ssl:error] [pid 3148312:tid 3148312] (EAI 2)Name or service not known: [client 144.76.19.72:19298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:46.874545 2026] [ssl:error] [pid 3148312:tid 3148312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:47.576183 2026] [ssl:error] [pid 3135522:tid 3135522] (70014)End of file found: [client 216.73.216.199:65343] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:48.232504 2026] [security2:error] [pid 3148312:tid 3148312] [client 43.130.78.203:35424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kirmond.com"] [uri "/"] [unique_id "ams7iOgl-S0B4n0rChV3kgAAACY"]
[Thu Jul 30 12:54:48.235588 2026] [authz_core:error] [pid 3148312:tid 3148312] [client 43.130.78.203:35424] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 12:54:48.551571 2026] [lsapi:warn] [pid 3135566:tid 3135566] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:48.746151 2026] [authz_core:error] [pid 3148454:tid 3148454] [client 57.141.0.41:34108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:48.746786 2026] [authz_core:error] [pid 3148454:tid 3148454] [client 57.141.0.41:34108] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:48.787962 2026] [ssl:error] [pid 3149669:tid 3149669] (70014)End of file found: [client 216.73.216.199:40061] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:54:48.794602 2026] [core:error] [pid 3148271:tid 3148271] [client 66.249.66.167:57391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:48.794620 2026] [core:error] [pid 3148271:tid 3148271] [client 66.249.66.167:57391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:54:49.932707 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:47742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:49.932750 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:49.985682 2026] [ssl:error] [pid 3146139:tid 3146139] (EAI 2)Name or service not known: [client 144.76.19.72:47748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:49.985721 2026] [ssl:error] [pid 3146139:tid 3146139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:51.427691 2026] [core:error] [pid 3142252:tid 3142252] (13)Permission denied: [client 216.73.216.199:49366] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/partial
[Thu Jul 30 12:54:51.836894 2026] [security2:error] [pid 3142252:tid 3142252] [client 216.73.216.199:49366] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sw-engine/conf.d/include_path.ini"] [unique_id "ams7izCzA87FaoIJXSuL1wAAADw"]
[Thu Jul 30 12:54:51.837185 2026] [security2:error] [pid 3142252:tid 3142252] [client 216.73.216.199:49366] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sw-engine/conf.d/include_path.ini"] [unique_id "ams7izCzA87FaoIJXSuL1wAAADw"]
[Thu Jul 30 12:54:51.837424 2026] [security2:error] [pid 3142252:tid 3142252] [client 216.73.216.199:49366] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sw-engine/conf.d/include_path.ini"] [unique_id "ams7izCzA87FaoIJXSuL1wAAADw"]
[Thu Jul 30 12:54:52.450125 2026] [lsapi:error] [pid 3142252:tid 3142252] [client 216.73.216.199:49366] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Symfony\\Component\\Console\\Command\\Command" not found in /opt/cpanel/ea-wappspector/src/Command/Inspect.php:23\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/Command/Inspect.php on line 23\n
[Thu Jul 30 12:54:52.939436 2026] [security2:error] [pid 3148361:tid 3148361] [client 47.128.24.80:31700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "ams7jGWTh06MrKAZ49pFZAAAACc"]
[Thu Jul 30 12:54:53.040291 2026] [ssl:error] [pid 3145200:tid 3145200] (EAI 2)Name or service not known: [client 144.76.19.72:47756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:53.040353 2026] [ssl:error] [pid 3145200:tid 3145200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:53.096924 2026] [ssl:error] [pid 3135522:tid 3135522] (EAI 2)Name or service not known: [client 144.76.19.72:47772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:53.096971 2026] [ssl:error] [pid 3135522:tid 3135522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:53.153169 2026] [core:error] [pid 3142158:tid 3142158] (13)Permission denied: [client 216.73.216.199:35625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-16/partial
[Thu Jul 30 12:54:54.105549 2026] [security2:error] [pid 3145199:tid 3145199] [client 85.208.96.201:57762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4900.0/prev_next,next.html"] [unique_id "ams7jnbbwd8GiVx4XEwrkQAAAAg"]
[Thu Jul 30 12:54:54.520907 2026] [authz_core:error] [pid 3145199:tid 3145199] [client 57.141.0.10:49292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:54.521570 2026] [authz_core:error] [pid 3145199:tid 3145199] [client 57.141.0.10:49292] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:54:56.162503 2026] [ssl:error] [pid 3144322:tid 3144322] (EAI 2)Name or service not known: [client 144.76.19.72:47778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:56.162532 2026] [ssl:error] [pid 3144322:tid 3144322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:56.218538 2026] [ssl:error] [pid 3148271:tid 3148271] (EAI 2)Name or service not known: [client 144.76.19.72:47794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:56.218572 2026] [ssl:error] [pid 3148271:tid 3148271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:56.675724 2026] [security2:error] [pid 3137000:tid 3137000] [client 58.26.249.98:54090] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "ams7kO3uwfeypQ4ACwM7nAAAAB8"]
[Thu Jul 30 12:54:57.098372 2026] [authz_core:error] [pid 3146140:tid 3146140] [client 20.193.250.173:61490] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 12:54:57.308892 2026] [core:error] [pid 3142158:tid 3142158] (13)Permission denied: [client 216.73.216.199:35625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCPv6/validate
[Thu Jul 30 12:54:58.226315 2026] [core:error] [pid 3142158:tid 3142158] (13)Permission denied: [client 216.73.216.199:35625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/perf_event/validate
[Thu Jul 30 12:54:58.527108 2026] [core:error] [pid 3142158:tid 3142158] (13)Permission denied: [client 216.73.216.199:35625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-96/ctor
[Thu Jul 30 12:54:58.828060 2026] [security2:error] [pid 3142158:tid 3142158] [client 216.73.216.199:35625] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/30-pdo_sqlite.ini"] [unique_id "ams7knOHaK84tBsGOCa8zwAAADg"]
[Thu Jul 30 12:54:58.828370 2026] [security2:error] [pid 3142158:tid 3142158] [client 216.73.216.199:35625] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/30-pdo_sqlite.ini"] [unique_id "ams7knOHaK84tBsGOCa8zwAAADg"]
[Thu Jul 30 12:54:58.828619 2026] [security2:error] [pid 3142158:tid 3142158] [client 216.73.216.199:35625] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/30-pdo_sqlite.ini"] [unique_id "ams7knOHaK84tBsGOCa8zwAAADg"]
[Thu Jul 30 12:54:59.013722 2026] [lsapi:warn] [pid 3135484:tid 3135484] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:54:59.129321 2026] [core:error] [pid 3142158:tid 3142158] (13)Permission denied: [client 216.73.216.199:35625] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_piix/sections/__param
[Thu Jul 30 12:54:59.271875 2026] [ssl:error] [pid 3148859:tid 3148859] (EAI 2)Name or service not known: [client 144.76.19.72:47798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:59.271933 2026] [ssl:error] [pid 3148859:tid 3148859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:59.325397 2026] [ssl:error] [pid 3145200:tid 3145200] (EAI 2)Name or service not known: [client 144.76.19.72:47802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:54:59.325442 2026] [ssl:error] [pid 3145200:tid 3145200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:54:59.466793 2026] [authz_core:error] [pid 3144325:tid 3144325] [client 66.249.66.33:42688] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:54:59.469516 2026] [authz_core:error] [pid 3144325:tid 3144325] [client 66.249.66.33:42688] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:54:59.676704 2026] [authz_core:error] [pid 3144322:tid 3144322] [client 57.141.0.58:63098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:54:59.677337 2026] [authz_core:error] [pid 3144322:tid 3144322] [client 57.141.0.58:63098] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:01.127460 2026] [core:error] [pid 3148859:tid 3148859] [client 66.249.66.41:41918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:01.127501 2026] [core:error] [pid 3148859:tid 3148859] [client 66.249.66.41:41918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:01.277533 2026] [ssl:error] [pid 3142158:tid 3142158] (70014)End of file found: [client 216.73.216.199:35625] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:01.482847 2026] [core:error] [pid 3144322:tid 3144322] [client 66.249.66.194:64871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:01.482880 2026] [core:error] [pid 3144322:tid 3144322] [client 66.249.66.194:64871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:02.393782 2026] [ssl:error] [pid 3147555:tid 3147555] (EAI 2)Name or service not known: [client 144.76.19.72:24784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:02.393835 2026] [ssl:error] [pid 3147555:tid 3147555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:02.454834 2026] [ssl:error] [pid 3149974:tid 3149974] (EAI 2)Name or service not known: [client 144.76.19.72:24792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:02.454872 2026] [ssl:error] [pid 3149974:tid 3149974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:02.754456 2026] [security2:error] [pid 3144514:tid 3144514] [client 18.214.238.178:29855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/network-management/"] [unique_id "ams7lpr70gBw_Om7UMIjfQAAAAs"]
[Thu Jul 30 12:55:02.799390 2026] [ssl:error] [pid 3147077:tid 3147077] (70014)End of file found: [client 216.73.216.199:48662] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:03.399856 2026] [ssl:error] [pid 3147122:tid 3147122] (70014)End of file found: [client 216.73.216.199:10749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:04.476845 2026] [security2:error] [pid 3144325:tid 3144325] [client 52.3.102.51:25415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/tag/netbrain-integrated-edition/"] [unique_id "ams7mECW-7EBAb_5zG8UwwAAACw"]
[Thu Jul 30 12:55:06.183537 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:24806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:06.183572 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:06.921988 2026] [core:error] [pid 3149635:tid 3149635] (13)Permission denied: [client 216.73.216.199:55707] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-2/cache_dma
[Thu Jul 30 12:55:07.547743 2026] [ssl:error] [pid 3148271:tid 3148271] (EAI 2)Name or service not known: [client 144.76.19.72:24812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:07.547786 2026] [ssl:error] [pid 3148271:tid 3148271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:07.619359 2026] [core:error] [pid 3135567:tid 3135567] [client 173.252.70.12:65396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:07.619386 2026] [core:error] [pid 3135567:tid 3135567] [client 173.252.70.12:65396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:08.266526 2026] [security2:error] [pid 3141871:tid 3141871] [client 3.220.70.171:19807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/disability-confident-prosperons-commitment/"] [unique_id "ams7nLRy5CvOjA8qd5TnPAAAADI"]
[Thu Jul 30 12:55:08.541672 2026] [ssl:error] [pid 3149635:tid 3149635] (70014)End of file found: [client 216.73.216.199:55707] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:09.487870 2026] [lsapi:warn] [pid 3147029:tid 3147029] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:55:10.379425 2026] [ssl:error] [pid 3147122:tid 3147122] (70014)End of file found: [client 216.73.216.199:57681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:10.601423 2026] [ssl:error] [pid 3145157:tid 3145157] (EAI 2)Name or service not known: [client 144.76.19.72:49746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:10.601452 2026] [ssl:error] [pid 3145157:tid 3145157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:10.657416 2026] [ssl:error] [pid 3132340:tid 3132340] (EAI 2)Name or service not known: [client 144.76.19.72:49752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:10.657454 2026] [ssl:error] [pid 3132340:tid 3132340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:11.737528 2026] [authz_core:error] [pid 3149974:tid 3149974] [client 20.193.250.173:50104] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:55:12.341116 2026] [security2:error] [pid 3150483:tid 3150483] [client 52.204.71.8:4209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/category/reporting-custom-reports/"] [unique_id "ams7oJvXjX-CrrzJYZW9eQAAAEI"]
[Thu Jul 30 12:55:13.439024 2026] [ssl:error] [pid 3142252:tid 3142252] (70014)End of file found: [client 216.73.216.199:55077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:13.709627 2026] [ssl:error] [pid 3150486:tid 3150486] (EAI 2)Name or service not known: [client 144.76.19.72:49774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:13.709660 2026] [ssl:error] [pid 3150486:tid 3150486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:13.761791 2026] [ssl:error] [pid 3148271:tid 3148271] (EAI 2)Name or service not known: [client 144.76.19.72:49776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:13.761824 2026] [ssl:error] [pid 3148271:tid 3148271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:13.784384 2026] [authz_core:error] [pid 3147121:tid 3147121] [client 57.141.0.51:64706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:55:13.785131 2026] [authz_core:error] [pid 3147121:tid 3147121] [client 57.141.0.51:64706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:14.369011 2026] [ssl:error] [pid 3150482:tid 3150482] (70014)End of file found: [client 216.73.216.199:26957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:16.225633 2026] [ssl:error] [pid 3150480:tid 3150480] (70014)End of file found: [client 216.73.216.199:61141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:16.817741 2026] [ssl:error] [pid 3147122:tid 3147122] (EAI 2)Name or service not known: [client 144.76.19.72:49796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:16.817768 2026] [ssl:error] [pid 3147122:tid 3147122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:16.870564 2026] [ssl:error] [pid 3150354:tid 3150354] (EAI 2)Name or service not known: [client 144.76.19.72:49812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:16.870598 2026] [ssl:error] [pid 3150354:tid 3150354] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:17.564080 2026] [core:error] [pid 3150487:tid 3150487] [client 66.249.66.40:45887] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:17.564110 2026] [core:error] [pid 3150487:tid 3150487] [client 66.249.66.40:45887] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:17.565029 2026] [core:error] [pid 3144326:tid 3144326] [client 66.249.66.168:58693] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:17.565046 2026] [core:error] [pid 3144326:tid 3144326] [client 66.249.66.168:58693] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:19.008401 2026] [ssl:error] [pid 3135565:tid 3135565] (70014)End of file found: [client 216.73.216.199:19124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:19.281038 2026] [authz_core:error] [pid 3150487:tid 3150487] [client 57.141.0.47:50146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:55:19.281684 2026] [authz_core:error] [pid 3150487:tid 3150487] [client 57.141.0.47:50146] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:19.838575 2026] [ssl:error] [pid 3137000:tid 3137000] (70014)End of file found: [client 216.73.216.199:42299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:19.929881 2026] [ssl:error] [pid 3150482:tid 3150482] (EAI 2)Name or service not known: [client 144.76.19.72:19260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:19.929921 2026] [ssl:error] [pid 3150482:tid 3150482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:19.988342 2026] [ssl:error] [pid 3146139:tid 3146139] (EAI 2)Name or service not known: [client 144.76.19.72:19266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:19.988379 2026] [ssl:error] [pid 3146139:tid 3146139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:19.995453 2026] [lsapi:warn] [pid 3150487:tid 3150487] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:55:20.709573 2026] [security2:error] [pid 3145200:tid 3145200] [client 114.119.158.38:59505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577232000/cat_ids~15,14,102/request_format~html"] [unique_id "ams7qFLI4O9a1zJFh_V-3QAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577232000/cat_ids~15,14/request_format~html
[Thu Jul 30 12:55:21.344428 2026] [core:error] [pid 3150485:tid 3150485] [client 66.249.66.8:48894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:21.344458 2026] [core:error] [pid 3150485:tid 3150485] [client 66.249.66.8:48894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:21.764147 2026] [security2:error] [pid 3144515:tid 3144515] [client 49.51.138.110:16581] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7qUhrXGJl7E3SO3Y-JgAAAEA"]
[Thu Jul 30 12:55:21.764199 2026] [security2:error] [pid 3144515:tid 3144515] [client 49.51.138.110:16581] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7qUhrXGJl7E3SO3Y-JgAAAEA"]
[Thu Jul 30 12:55:21.764499 2026] [security2:error] [pid 3144515:tid 3144515] [client 49.51.138.110:16581] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7qUhrXGJl7E3SO3Y-JgAAAEA"]
[Thu Jul 30 12:55:23.018286 2026] [security2:error] [pid 3150485:tid 3150485] [client 114.119.158.38:59513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577232000/cat_ids~15,14,102/request_format~html"] [unique_id "ams7q1pOirsrwAxjPgpfvQAAAEQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577232000/cat_ids~15,14/request_format~html
[Thu Jul 30 12:55:23.044246 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:19268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:23.044281 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:23.099142 2026] [ssl:error] [pid 3142252:tid 3142252] (EAI 2)Name or service not known: [client 144.76.19.72:19270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:23.099175 2026] [ssl:error] [pid 3142252:tid 3142252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:23.260902 2026] [security2:error] [pid 3150482:tid 3150482] [client 34.231.156.59:50483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/churchyards.html"] [unique_id "ams7q1s8Sv-WPLyZcTbBMQAAAEE"]
[Thu Jul 30 12:55:23.749423 2026] [security2:error] [pid 3145200:tid 3145200] [client 103.13.193.74:36028] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7q1LI4O9a1zJFh_V-3wAAAA8"]
[Thu Jul 30 12:55:23.749509 2026] [security2:error] [pid 3145200:tid 3145200] [client 103.13.193.74:36028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7q1LI4O9a1zJFh_V-3wAAAA8"]
[Thu Jul 30 12:55:23.749854 2026] [security2:error] [pid 3145200:tid 3145200] [client 103.13.193.74:36028] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7q1LI4O9a1zJFh_V-3wAAAA8"]
[Thu Jul 30 12:55:26.153201 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:19274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:26.153229 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:26.210605 2026] [ssl:error] [pid 3148207:tid 3148207] (EAI 2)Name or service not known: [client 144.76.19.72:19284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:26.210644 2026] [ssl:error] [pid 3148207:tid 3148207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:26.868757 2026] [core:error] [pid 3150485:tid 3150485] [client 66.249.66.3:62504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:26.868790 2026] [core:error] [pid 3150485:tid 3150485] [client 66.249.66.3:62504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:27.524177 2026] [ssl:error] [pid 3141871:tid 3141871] (70014)End of file found: [client 216.73.216.199:41719] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:27.732136 2026] [security2:error] [pid 3144292:tid 3144292] [client 2.50.220.212:60020] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7rx6eP1Zs1sN0lN9IxAAAABQ"]
[Thu Jul 30 12:55:27.732192 2026] [security2:error] [pid 3144292:tid 3144292] [client 2.50.220.212:60020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams7rx6eP1Zs1sN0lN9IxAAAABQ"]
[Thu Jul 30 12:55:27.732515 2026] [security2:error] [pid 3144292:tid 3144292] [client 2.50.220.212:60020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams7rx6eP1Zs1sN0lN9IxAAAABQ"]
[Thu Jul 30 12:55:27.985889 2026] [authz_core:error] [pid 3146139:tid 3146139] [client 20.193.250.173:57199] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 12:55:28.151302 2026] [ssl:error] [pid 3150354:tid 3150354] (70014)End of file found: [client 216.73.216.199:48071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:29.199044 2026] [authz_core:error] [pid 3150434:tid 3150434] [client 57.141.0.64:20662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:55:29.199682 2026] [authz_core:error] [pid 3150434:tid 3150434] [client 57.141.0.64:20662] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:29.269183 2026] [ssl:error] [pid 3137000:tid 3137000] (EAI 2)Name or service not known: [client 144.76.19.72:19290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:29.269213 2026] [ssl:error] [pid 3137000:tid 3137000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:29.322173 2026] [ssl:error] [pid 3138265:tid 3138265] (EAI 2)Name or service not known: [client 144.76.19.72:19302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:29.322207 2026] [ssl:error] [pid 3138265:tid 3138265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:29.584484 2026] [access_compat:error] [pid 3146109:tid 3146109] [client 2.189.5.142:54064] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 12:55:29.848578 2026] [authz_core:error] [pid 3146231:tid 3146231] [client 66.249.66.34:45128] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:55:29.851237 2026] [authz_core:error] [pid 3146231:tid 3146231] [client 66.249.66.34:45128] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:55:30.480403 2026] [lsapi:warn] [pid 3146109:tid 3146109] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:55:30.698149 2026] [core:error] [pid 3150483:tid 3150483] [client 57.141.0.55:28592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:30.698187 2026] [core:error] [pid 3150483:tid 3150483] [client 57.141.0.55:28592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:31.149571 2026] [ssl:error] [pid 3150482:tid 3150482] (70014)End of file found: [client 216.73.216.199:5103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:32.376458 2026] [ssl:error] [pid 3147122:tid 3147122] (EAI 2)Name or service not known: [client 144.76.19.72:43694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:32.376497 2026] [ssl:error] [pid 3147122:tid 3147122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:32.430968 2026] [ssl:error] [pid 3138265:tid 3138265] (EAI 2)Name or service not known: [client 144.76.19.72:43696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:32.430996 2026] [ssl:error] [pid 3138265:tid 3138265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:32.450216 2026] [cgi:error] [pid 3146138:tid 3146138] [client 172.213.208.20:32900] AH02811: stderr from /home/aurorav/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:55:33.157751 2026] [security2:error] [pid 3150396:tid 3150396] [client 107.151.197.114:46012] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "thatwall.com"] [uri "/"] [unique_id "ams7tSFfoseiQ-UOrnBSxwAAABg"]
[Thu Jul 30 12:55:33.158591 2026] [security2:error] [pid 3150396:tid 3150396] [client 107.151.197.114:46012] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thatwall.com"] [uri "/"] [unique_id "ams7tSFfoseiQ-UOrnBSxwAAABg"]
[Thu Jul 30 12:55:33.158780 2026] [security2:error] [pid 3150396:tid 3150396] [client 107.151.197.114:46012] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "thatwall.com"] [uri "/"] [unique_id "ams7tSFfoseiQ-UOrnBSxwAAABg"]
[Thu Jul 30 12:55:35.134105 2026] [security2:error] [pid 3146231:tid 3146231] [client 85.208.96.209:30254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/johnny-contardo-married"] [unique_id "ams7t_Mvh5d8_xdgqVN2OgAAAB4"]
[Thu Jul 30 12:55:35.483623 2026] [ssl:error] [pid 3147029:tid 3147029] (EAI 2)Name or service not known: [client 144.76.19.72:43712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:35.483658 2026] [ssl:error] [pid 3147029:tid 3147029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:35.538300 2026] [ssl:error] [pid 3150396:tid 3150396] (EAI 2)Name or service not known: [client 144.76.19.72:43716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:35.538360 2026] [ssl:error] [pid 3150396:tid 3150396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:37.365621 2026] [authz_core:error] [pid 3137000:tid 3137000] [client 65.109.124.116:39249] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 12:55:37.371623 2026] [authz_core:error] [pid 3137000:tid 3137000] [client 65.109.124.116:39249] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 12:55:38.210880 2026] [authz_core:error] [pid 3147077:tid 3147077] [client 52.167.144.140:2182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:55:38.211513 2026] [authz_core:error] [pid 3147077:tid 3147077] [client 52.167.144.140:2182] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:38.612555 2026] [ssl:error] [pid 3151703:tid 3151703] (EAI 2)Name or service not known: [client 144.76.19.72:43726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:38.612609 2026] [ssl:error] [pid 3151703:tid 3151703] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:38.670765 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:43736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:38.670796 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:39.324278 2026] [ssl:error] [pid 3149635:tid 3149635] (70014)End of file found: [client 216.73.216.199:12893] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:39.547320 2026] [core:error] [pid 3150562:tid 3150562] [client 66.249.66.167:39370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:39.547349 2026] [core:error] [pid 3150562:tid 3150562] [client 66.249.66.167:39370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:40.997423 2026] [lsapi:warn] [pid 3151703:tid 3151703] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:55:41.727542 2026] [ssl:error] [pid 3137000:tid 3137000] (EAI 2)Name or service not known: [client 144.76.19.72:50284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:41.727580 2026] [ssl:error] [pid 3137000:tid 3137000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:41.780589 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:50298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:41.780616 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:42.365302 2026] [ssl:error] [pid 3123049:tid 3123049] (70014)End of file found: [client 216.73.216.199:48507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:42.865052 2026] [core:error] [pid 3137000:tid 3137000] (13)Permission denied: [client 216.73.216.199:22157] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory190/node0/compact
[Thu Jul 30 12:55:44.170672 2026] [core:error] [pid 3137000:tid 3137000] (13)Permission denied: [client 216.73.216.199:22157] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory193/node0/compact
[Thu Jul 30 12:55:44.835168 2026] [ssl:error] [pid 3150485:tid 3150485] (EAI 2)Name or service not known: [client 144.76.19.72:50318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:44.835210 2026] [ssl:error] [pid 3150485:tid 3150485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:44.891685 2026] [ssl:error] [pid 3150562:tid 3150562] (EAI 2)Name or service not known: [client 144.76.19.72:50334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:44.891732 2026] [ssl:error] [pid 3150562:tid 3150562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:47.117237 2026] [authz_core:error] [pid 3138265:tid 3138265] [client 57.141.0.22:63870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:55:47.117895 2026] [authz_core:error] [pid 3138265:tid 3138265] [client 57.141.0.22:63870] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:47.948404 2026] [ssl:error] [pid 3135484:tid 3135484] (EAI 2)Name or service not known: [client 144.76.19.72:50360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:47.948437 2026] [ssl:error] [pid 3135484:tid 3135484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:48.002910 2026] [ssl:error] [pid 3146137:tid 3146137] (EAI 2)Name or service not known: [client 144.76.19.72:50364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:48.002953 2026] [ssl:error] [pid 3146137:tid 3146137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:48.985176 2026] [ssl:error] [pid 3150433:tid 3150433] (70014)End of file found: [client 216.73.216.199:47607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:49.483032 2026] [ssl:error] [pid 3146137:tid 3146137] (70014)End of file found: [client 216.73.216.199:1037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:49.888642 2026] [ssl:error] [pid 3150485:tid 3150485] (70014)End of file found: [client 216.73.216.199:12525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:51.058399 2026] [ssl:error] [pid 3148207:tid 3148207] (EAI 2)Name or service not known: [client 144.76.19.72:22336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:51.058449 2026] [ssl:error] [pid 3148207:tid 3148207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:51.114210 2026] [ssl:error] [pid 3146231:tid 3146231] (EAI 2)Name or service not known: [client 144.76.19.72:22352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:51.114247 2026] [ssl:error] [pid 3146231:tid 3146231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:51.549874 2026] [lsapi:warn] [pid 3145200:tid 3145200] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:55:52.203096 2026] [core:error] [pid 3142158:tid 3142158] [client 66.249.66.167:59441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:52.203136 2026] [core:error] [pid 3142158:tid 3142158] [client 66.249.66.167:59441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:55:52.751959 2026] [authz_core:error] [pid 3150354:tid 3150354] [client 57.141.0.69:51716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:55:52.752599 2026] [authz_core:error] [pid 3150354:tid 3150354] [client 57.141.0.69:51716] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:53.020820 2026] [authz_core:error] [pid 3145200:tid 3145200] [client 57.141.0.46:32050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:55:53.021515 2026] [authz_core:error] [pid 3145200:tid 3145200] [client 57.141.0.46:32050] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:55:53.709125 2026] [authz_core:error] [pid 3148361:tid 3148361] [client 20.203.133.142:47364] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 12:55:54.167889 2026] [ssl:error] [pid 3148207:tid 3148207] (EAI 2)Name or service not known: [client 144.76.19.72:22360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:54.167933 2026] [ssl:error] [pid 3148207:tid 3148207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:54.222296 2026] [ssl:error] [pid 3152450:tid 3152450] (EAI 2)Name or service not known: [client 144.76.19.72:22376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:54.222325 2026] [ssl:error] [pid 3152450:tid 3152450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:55.927431 2026] [ssl:error] [pid 3152525:tid 3152525] (70014)End of file found: [client 216.73.216.199:32715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:56.228247 2026] [ssl:error] [pid 3144514:tid 3144514] (70014)End of file found: [client 216.73.216.199:44458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:57.131485 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:27872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:55:57.277690 2026] [ssl:error] [pid 3150483:tid 3150483] (EAI 2)Name or service not known: [client 144.76.19.72:22398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:57.277729 2026] [ssl:error] [pid 3150483:tid 3150483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:57.334208 2026] [ssl:error] [pid 3150433:tid 3150433] (EAI 2)Name or service not known: [client 144.76.19.72:22400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:55:57.334249 2026] [ssl:error] [pid 3150433:tid 3150433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:55:59.698285 2026] [authz_core:error] [pid 3148361:tid 3148361] [client 169.58.39.193:49843] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:56:00.055394 2026] [authz_core:error] [pid 3150397:tid 3150397] [client 57.141.0.67:31972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:00.056029 2026] [authz_core:error] [pid 3150397:tid 3150397] [client 57.141.0.67:31972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:00.398507 2026] [ssl:error] [pid 3144325:tid 3144325] (EAI 2)Name or service not known: [client 144.76.19.72:29108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:00.398545 2026] [ssl:error] [pid 3144325:tid 3144325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:00.488593 2026] [ssl:error] [pid 3145200:tid 3145200] (EAI 2)Name or service not known: [client 144.76.19.72:29116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:00.488627 2026] [ssl:error] [pid 3145200:tid 3145200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:01.254458 2026] [ssl:error] [pid 3145200:tid 3145200] (70014)End of file found: [client 216.73.216.199:34980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:01.722721 2026] [authz_core:error] [pid 3152577:tid 3152577] [client 57.141.0.62:26826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:01.723355 2026] [authz_core:error] [pid 3152577:tid 3152577] [client 57.141.0.62:26826] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:01.957442 2026] [ssl:error] [pid 3147077:tid 3147077] (70014)End of file found: [client 216.73.216.199:50700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:02.031461 2026] [lsapi:warn] [pid 3151703:tid 3151703] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:56:02.476157 2026] [authz_core:error] [pid 3152526:tid 3152526] [client 66.249.66.33:48535] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:56:02.478828 2026] [authz_core:error] [pid 3152526:tid 3152526] [client 66.249.66.33:48535] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:56:03.462624 2026] [ssl:error] [pid 3144514:tid 3144514] (70014)End of file found: [client 216.73.216.199:16512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:03.543920 2026] [ssl:error] [pid 3150562:tid 3150562] (EAI 2)Name or service not known: [client 144.76.19.72:29128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:03.543951 2026] [ssl:error] [pid 3150562:tid 3150562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:03.597011 2026] [ssl:error] [pid 3152577:tid 3152577] (EAI 2)Name or service not known: [client 144.76.19.72:29144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:03.597045 2026] [ssl:error] [pid 3152577:tid 3152577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:04.669802 2026] [authz_core:error] [pid 3144292:tid 3144292] [client 169.58.39.193:50851] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:56:04.975350 2026] [core:error] [pid 3146138:tid 3146138] [client 66.249.66.168:55184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:04.975392 2026] [core:error] [pid 3146138:tid 3146138] [client 66.249.66.168:55184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:06.627682 2026] [security2:error] [pid 3150480:tid 3150480] [client 185.191.171.13:46858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11316.0/prev_next,prev.html"] [unique_id "ams71siZuwTram_FqSo3rAAAAD0"]
[Thu Jul 30 12:56:06.650960 2026] [ssl:error] [pid 3152527:tid 3152527] (EAI 2)Name or service not known: [client 144.76.19.72:29156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:06.650987 2026] [ssl:error] [pid 3152527:tid 3152527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:06.651276 2026] [ssl:error] [pid 3147122:tid 3147122] (70014)End of file found: [client 216.73.216.199:1260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:06.707898 2026] [ssl:error] [pid 3153255:tid 3153255] (EAI 2)Name or service not known: [client 144.76.19.72:29164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:06.707956 2026] [ssl:error] [pid 3153255:tid 3153255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:07.228216 2026] [authz_core:error] [pid 3135566:tid 3135566] [client 57.141.0.11:28640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:07.228847 2026] [authz_core:error] [pid 3135566:tid 3135566] [client 57.141.0.11:28640] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:07.679324 2026] [ssl:error] [pid 3145200:tid 3145200] (70014)End of file found: [client 216.73.216.199:37684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:09.782347 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:48528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:09.782393 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:09.837226 2026] [ssl:error] [pid 3147121:tid 3147121] (EAI 2)Name or service not known: [client 144.76.19.72:48544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:09.837281 2026] [ssl:error] [pid 3147121:tid 3147121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:09.922043 2026] [security2:error] [pid 3151703:tid 3151703] [client 185.191.171.13:46878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1311.0/prev_next,prev.html"] [unique_id "ams72SQ10Gi3fUsurHRJNQAAAAQ"]
[Thu Jul 30 12:56:10.870410 2026] [security2:error] [pid 3151703:tid 3151703] [client 190.83.42.184:56914] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams72iQ10Gi3fUsurHRJNgAAAAQ"]
[Thu Jul 30 12:56:10.870458 2026] [security2:error] [pid 3151703:tid 3151703] [client 190.83.42.184:56914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams72iQ10Gi3fUsurHRJNgAAAAQ"]
[Thu Jul 30 12:56:10.870696 2026] [security2:error] [pid 3151703:tid 3151703] [client 190.83.42.184:56914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams72iQ10Gi3fUsurHRJNgAAAAQ"]
[Thu Jul 30 12:56:11.320814 2026] [authz_core:error] [pid 3152579:tid 3152579] [client 57.141.0.7:51226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:11.321441 2026] [authz_core:error] [pid 3152579:tid 3152579] [client 57.141.0.7:51226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:11.598844 2026] [ssl:error] [pid 3150480:tid 3150480] (70014)End of file found: [client 216.73.216.199:64597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:12.074818 2026] [security2:error] [pid 3152579:tid 3152579] [client 88.189.91.89:3041] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams73KCvkpkb4t0YtcV3OQAAADM"]
[Thu Jul 30 12:56:12.074883 2026] [security2:error] [pid 3152579:tid 3152579] [client 88.189.91.89:3041] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams73KCvkpkb4t0YtcV3OQAAADM"]
[Thu Jul 30 12:56:12.075151 2026] [security2:error] [pid 3152579:tid 3152579] [client 88.189.91.89:3041] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams73KCvkpkb4t0YtcV3OQAAADM"]
[Thu Jul 30 12:56:12.497436 2026] [lsapi:warn] [pid 3147121:tid 3147121] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:56:12.535414 2026] [cgi:error] [pid 3144322:tid 3144322] [client 216.73.216.199:4115] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/dovecot_set_defaults.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 12:56:12.535458 2026] [cgi:error] [pid 3144322:tid 3144322] [client 216.73.216.199:4115] End of script output before headers: dovecot_set_defaults.pl
[Thu Jul 30 12:56:12.891376 2026] [ssl:error] [pid 3152579:tid 3152579] (EAI 2)Name or service not known: [client 144.76.19.72:48558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:12.891418 2026] [ssl:error] [pid 3152579:tid 3152579] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:12.946098 2026] [ssl:error] [pid 3152527:tid 3152527] (EAI 2)Name or service not known: [client 144.76.19.72:48568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:12.946149 2026] [ssl:error] [pid 3152527:tid 3152527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:13.015137 2026] [ssl:error] [pid 3152524:tid 3152524] (70014)End of file found: [client 216.73.216.199:61973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:13.589318 2026] [core:error] [pid 3145200:tid 3145200] [client 57.141.0.39:44774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:13.589348 2026] [core:error] [pid 3145200:tid 3145200] [client 57.141.0.39:44774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:14.013408 2026] [core:error] [pid 3144322:tid 3144322] (13)Permission denied: [client 216.73.216.199:63996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-1k/total_objects
[Thu Jul 30 12:56:14.298440 2026] [authz_core:error] [pid 3147121:tid 3147121] [client 57.141.0.50:34014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:14.299114 2026] [authz_core:error] [pid 3147121:tid 3147121] [client 57.141.0.50:34014] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:14.921914 2026] [security2:error] [pid 3144322:tid 3144322] [client 216.73.216.199:63996] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/alt-php72-error.log"] [unique_id "ams73hj5zv62_4HJ-6QBfAAAACU"]
[Thu Jul 30 12:56:14.922151 2026] [security2:error] [pid 3144322:tid 3144322] [client 216.73.216.199:63996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/alt-php72-error.log"] [unique_id "ams73hj5zv62_4HJ-6QBfAAAACU"]
[Thu Jul 30 12:56:14.922353 2026] [security2:error] [pid 3144322:tid 3144322] [client 216.73.216.199:63996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/alt-php72-error.log"] [unique_id "ams73hj5zv62_4HJ-6QBfAAAACU"]
[Thu Jul 30 12:56:15.202558 2026] [security2:error] [pid 3152525:tid 3152525] [client 141.98.140.160:62879] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams736Hx1cxZy_8dMSRgVAAAAB0"]
[Thu Jul 30 12:56:15.202626 2026] [security2:error] [pid 3152525:tid 3152525] [client 141.98.140.160:62879] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams736Hx1cxZy_8dMSRgVAAAAB0"]
[Thu Jul 30 12:56:15.202962 2026] [security2:error] [pid 3152525:tid 3152525] [client 141.98.140.160:62879] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams736Hx1cxZy_8dMSRgVAAAAB0"]
[Thu Jul 30 12:56:15.231352 2026] [ssl:error] [pid 3144322:tid 3144322] (70014)End of file found: [client 216.73.216.199:63996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:16.002399 2026] [ssl:error] [pid 3147121:tid 3147121] (EAI 2)Name or service not known: [client 144.76.19.72:48578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:16.002454 2026] [ssl:error] [pid 3147121:tid 3147121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:16.055508 2026] [ssl:error] [pid 3123049:tid 3123049] (EAI 2)Name or service not known: [client 144.76.19.72:48594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:16.055538 2026] [ssl:error] [pid 3123049:tid 3123049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:17.342960 2026] [ssl:error] [pid 3152525:tid 3152525] (70014)End of file found: [client 216.73.216.199:56025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:18.031393 2026] [core:error] [pid 3123049:tid 3123049] [client 66.249.66.167:39542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:18.031429 2026] [core:error] [pid 3123049:tid 3123049] [client 66.249.66.167:39542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:18.439144 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:34381] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:19.109524 2026] [ssl:error] [pid 3150480:tid 3150480] (EAI 2)Name or service not known: [client 144.76.19.72:48604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:19.109568 2026] [ssl:error] [pid 3150480:tid 3150480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:19.161605 2026] [ssl:error] [pid 3144325:tid 3144325] (EAI 2)Name or service not known: [client 144.76.19.72:48606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:19.161649 2026] [ssl:error] [pid 3144325:tid 3144325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:22.218658 2026] [ssl:error] [pid 3152526:tid 3152526] (EAI 2)Name or service not known: [client 144.76.19.72:25804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:22.218702 2026] [ssl:error] [pid 3152526:tid 3152526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:22.270440 2026] [ssl:error] [pid 3145199:tid 3145199] (EAI 2)Name or service not known: [client 144.76.19.72:25806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:22.270474 2026] [ssl:error] [pid 3145199:tid 3145199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:23.031926 2026] [lsapi:warn] [pid 3148361:tid 3148361] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:56:24.295237 2026] [core:error] [pid 3150433:tid 3150433] (13)Permission denied: [client 216.73.216.199:64812] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/poison
[Thu Jul 30 12:56:24.951344 2026] [authz_core:error] [pid 3152576:tid 3152576] [client 94.154.43.187:63656] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:56:24.954016 2026] [authz_core:error] [pid 3152576:tid 3152576] [client 94.154.43.187:63656] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:56:25.323716 2026] [ssl:error] [pid 3152525:tid 3152525] (EAI 2)Name or service not known: [client 144.76.19.72:25820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:25.323781 2026] [ssl:error] [pid 3152525:tid 3152525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:25.378832 2026] [ssl:error] [pid 3145199:tid 3145199] (EAI 2)Name or service not known: [client 144.76.19.72:25832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:25.378864 2026] [ssl:error] [pid 3145199:tid 3145199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:26.405686 2026] [ssl:error] [pid 3150433:tid 3150433] (70014)End of file found: [client 216.73.216.199:64812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:26.725081 2026] [ssl:error] [pid 3152585:tid 3152585] (70014)End of file found: [client 216.73.216.199:27497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:28.231871 2026] [ssl:error] [pid 3145199:tid 3145199] (70014)End of file found: [client 216.73.216.199:58564] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:28.432023 2026] [ssl:error] [pid 3149635:tid 3149635] (EAI 2)Name or service not known: [client 144.76.19.72:25848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:28.432080 2026] [ssl:error] [pid 3149635:tid 3149635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:28.485835 2026] [ssl:error] [pid 3152576:tid 3152576] (EAI 2)Name or service not known: [client 144.76.19.72:25864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:28.485880 2026] [ssl:error] [pid 3152576:tid 3152576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:30.356334 2026] [core:error] [pid 3144325:tid 3144325] [client 66.249.66.167:63446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:30.356364 2026] [core:error] [pid 3144325:tid 3144325] [client 66.249.66.167:63446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:30.395416 2026] [core:error] [pid 3148361:tid 3148361] [client 66.249.66.194:58340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:30.395440 2026] [core:error] [pid 3148361:tid 3148361] [client 66.249.66.194:58340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:31.542951 2026] [ssl:error] [pid 3142252:tid 3142252] (EAI 2)Name or service not known: [client 144.76.19.72:41138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:31.543005 2026] [ssl:error] [pid 3142252:tid 3142252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:31.597450 2026] [ssl:error] [pid 3147029:tid 3147029] (EAI 2)Name or service not known: [client 144.76.19.72:41142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:31.597479 2026] [ssl:error] [pid 3147029:tid 3147029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:31.814275 2026] [core:error] [pid 3149635:tid 3149635] [client 66.249.64.170:38780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:31.814299 2026] [core:error] [pid 3149635:tid 3149635] [client 66.249.64.170:38780] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:33.495359 2026] [lsapi:warn] [pid 3148361:tid 3148361] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:56:34.653669 2026] [ssl:error] [pid 3144514:tid 3144514] (EAI 2)Name or service not known: [client 144.76.19.72:41148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:34.653705 2026] [ssl:error] [pid 3144514:tid 3144514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:34.713698 2026] [ssl:error] [pid 3150483:tid 3150483] (EAI 2)Name or service not known: [client 144.76.19.72:41152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:34.713747 2026] [ssl:error] [pid 3150483:tid 3150483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:35.514665 2026] [security2:error] [pid 3150483:tid 3150483] [client 185.191.171.4:41496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/frenship-blue-gold-calendar-21-22"] [unique_id "ams785vXjX-CrrzJYZW9kwAAAEI"]
[Thu Jul 30 12:56:35.802592 2026] [core:error] [pid 3146138:tid 3146138] (13)Permission denied: [client 216.73.216.199:22038] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_tasks/align
[Thu Jul 30 12:56:35.863620 2026] [security2:error] [pid 3142159:tid 3142159] [client 43.134.93.164:48078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yourpartyyourway.com"] [uri "/"] [unique_id "ams78_s2FsY4V7Elk_A4NwAAADk"], referer: http://yourpartyyourway.com
[Thu Jul 30 12:56:36.712145 2026] [core:error] [pid 3146138:tid 3146138] (13)Permission denied: [client 216.73.216.199:22038] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-4k/cpu_partial
[Thu Jul 30 12:56:37.528456 2026] [security2:error] [pid 3152389:tid 3152389] [client 43.134.93.164:46234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "ams79f98gw7zdpAyx-xRhAAAAAc"]
[Thu Jul 30 12:56:37.789377 2026] [ssl:error] [pid 3152581:tid 3152581] (EAI 2)Name or service not known: [client 144.76.19.72:41156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:37.789425 2026] [ssl:error] [pid 3152581:tid 3152581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:37.845834 2026] [ssl:error] [pid 3150396:tid 3150396] (EAI 2)Name or service not known: [client 144.76.19.72:41168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:37.845866 2026] [ssl:error] [pid 3150396:tid 3150396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:39.109288 2026] [ssl:error] [pid 3128807:tid 3128807] (70014)End of file found: [client 216.73.216.199:10458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:39.860305 2026] [authz_core:error] [pid 3154499:tid 3154499] [client 57.141.0.21:24710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:39.861015 2026] [authz_core:error] [pid 3154499:tid 3154499] [client 57.141.0.21:24710] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:40.900174 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:40296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:40.900202 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:40.951890 2026] [ssl:error] [pid 3154497:tid 3154497] (EAI 2)Name or service not known: [client 144.76.19.72:40310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:40.951923 2026] [ssl:error] [pid 3154497:tid 3154497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:41.451237 2026] [authz_core:error] [pid 3144325:tid 3144325] [client 57.141.0.66:48978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:41.451865 2026] [authz_core:error] [pid 3144325:tid 3144325] [client 57.141.0.66:48978] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:41.844054 2026] [ssl:error] [pid 3146138:tid 3146138] (70014)End of file found: [client 216.73.216.199:22038] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:42.327677 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:38313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:42.935626 2026] [core:error] [pid 3149635:tid 3149635] [client 66.249.66.3:40799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:42.935652 2026] [core:error] [pid 3149635:tid 3149635] [client 66.249.66.3:40799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:43.109796 2026] [security2:error] [pid 3154456:tid 3154456] [client 44.207.69.106:38109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/robots.txt"] [unique_id "ams7-6RSkJLMa5sWG9jqyAAAABc"]
[Thu Jul 30 12:56:43.451384 2026] [security2:error] [pid 3145199:tid 3145199] [client 43.157.22.57:41220] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bashforthbell.com"] [uri "/"] [unique_id "ams7-3bbwd8GiVx4XEwrsgAAAAg"]
[Thu Jul 30 12:56:43.908103 2026] [core:error] [pid 3149635:tid 3149635] [client 57.141.0.28:59566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:43.908134 2026] [core:error] [pid 3149635:tid 3149635] [client 57.141.0.28:59566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:43.928142 2026] [security2:error] [pid 3150485:tid 3150485] [client 114.119.135.136:48175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577145600/cat_ids~19,104,15/request_format~html"] [unique_id "ams7-1pOirsrwAxjPgpgDwAAAEQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~19,104/request_format~html
[Thu Jul 30 12:56:43.969124 2026] [lsapi:warn] [pid 3154496:tid 3154496] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:56:43.991908 2026] [security2:error] [pid 3145199:tid 3145199] [client 43.157.22.57:41580] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "ams7-3bbwd8GiVx4XEwrswAAAAg"], referer: http://bashforthbell.com
[Thu Jul 30 12:56:44.013878 2026] [ssl:error] [pid 3144322:tid 3144322] (EAI 2)Name or service not known: [client 144.76.19.72:40316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:44.013902 2026] [ssl:error] [pid 3144322:tid 3144322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:44.068521 2026] [ssl:error] [pid 3146109:tid 3146109] (EAI 2)Name or service not known: [client 144.76.19.72:40330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:44.068551 2026] [ssl:error] [pid 3146109:tid 3146109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:45.077710 2026] [security2:error] [pid 3144325:tid 3144325] [client 114.119.135.136:48177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577145600/cat_ids~19,104,15/request_format~html"] [unique_id "ams7_UCW-7EBAb_5zG8VUAAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~19,104/request_format~html
[Thu Jul 30 12:56:45.146482 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Text/Diff/Renderer.php
[Thu Jul 30 12:56:45.263818 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 12:56:45.721806 2026] [access_compat:error] [pid 3138265:tid 3138265] [client 45.158.164.139:55478] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 12:56:45.876618 2026] [authz_core:error] [pid 3150485:tid 3150485] [client 57.141.0.45:33752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:45.877260 2026] [authz_core:error] [pid 3150485:tid 3150485] [client 57.141.0.45:33752] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:46.392809 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/ahax.php
[Thu Jul 30 12:56:47.010662 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/breads1.php
[Thu Jul 30 12:56:47.123462 2026] [ssl:error] [pid 3150485:tid 3150485] (EAI 2)Name or service not known: [client 144.76.19.72:40336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:47.123500 2026] [ssl:error] [pid 3150485:tid 3150485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:47.177732 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:40338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:47.177759 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:47.573500 2026] [core:error] [pid 3152585:tid 3152585] (13)Permission denied: [client 216.73.216.199:45060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/fs/protected_regular
[Thu Jul 30 12:56:47.606655 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/must.php
[Thu Jul 30 12:56:47.876161 2026] [ssl:error] [pid 3152585:tid 3152585] (70014)End of file found: [client 216.73.216.199:45060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:48.080406 2026] [authz_core:error] [pid 3144325:tid 3144325] [client 57.141.0.70:41548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:48.081039 2026] [authz_core:error] [pid 3144325:tid 3144325] [client 57.141.0.70:41548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:48.233355 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/up.php
[Thu Jul 30 12:56:49.045173 2026] [security2:error] [pid 3144325:tid 3144325] [client 44.221.105.234:6160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "ams8AUCW-7EBAb_5zG8VUgAAACw"]
[Thu Jul 30 12:56:49.479087 2026] [ssl:error] [pid 3144292:tid 3144292] (70014)End of file found: [client 216.73.216.199:47817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:49.575709 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/155.php
[Thu Jul 30 12:56:50.231131 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:36766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:50.231161 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:50.283910 2026] [ssl:error] [pid 3135566:tid 3135566] (EAI 2)Name or service not known: [client 144.76.19.72:36768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:50.283936 2026] [ssl:error] [pid 3135566:tid 3135566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:50.680154 2026] [ssl:error] [pid 3152524:tid 3152524] (70014)End of file found: [client 216.73.216.199:3020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:50.769271 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-update.php
[Thu Jul 30 12:56:51.391644 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/xmrlpc.php
[Thu Jul 30 12:56:51.688997 2026] [security2:error] [pid 3142029:tid 3142029] [client 185.191.171.11:48660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7014.0/prev_next,next.html"] [unique_id "ams8A2evmTZOuWbv2XAYVwAAADE"]
[Thu Jul 30 12:56:52.538901 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/an.php
[Thu Jul 30 12:56:53.078918 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/asw.php
[Thu Jul 30 12:56:53.339170 2026] [ssl:error] [pid 3142029:tid 3142029] (EAI 2)Name or service not known: [client 144.76.19.72:36774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:53.339202 2026] [ssl:error] [pid 3142029:tid 3142029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:53.395149 2026] [ssl:error] [pid 3154388:tid 3154388] (EAI 2)Name or service not known: [client 144.76.19.72:36778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:53.395185 2026] [ssl:error] [pid 3154388:tid 3154388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:53.790726 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/jga.php
[Thu Jul 30 12:56:54.174299 2026] [security2:error] [pid 3152585:tid 3152585] [client 85.208.96.196:21906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,916.0/prev_next,next.html"] [unique_id "ams8BmjnYxFNPMBt4aVCAQAAAD4"]
[Thu Jul 30 12:56:54.314155 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/mac.php
[Thu Jul 30 12:56:54.471405 2026] [lsapi:warn] [pid 3146109:tid 3146109] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:56:54.580030 2026] [authz_core:error] [pid 3146137:tid 3146137] [client 57.141.0.4:57740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:56:54.580665 2026] [authz_core:error] [pid 3146137:tid 3146137] [client 57.141.0.4:57740] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:56:54.683250 2026] [core:error] [pid 3152576:tid 3152576] (13)Permission denied: [client 216.73.216.199:62217] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/graphics/fb0/device/driver/bind
[Thu Jul 30 12:56:54.860930 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/system.php
[Thu Jul 30 12:56:54.983353 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:62217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:55.171282 2026] [cgi:error] [pid 3144292:tid 3144292] [client 62.60.130.232:63628] AH02811: stderr from /home/jdmedi/public_html/cgi-bin/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:56:55.284257 2026] [core:error] [pid 3154454:tid 3154454] (13)Permission denied: [client 216.73.216.199:12693] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/validate
[Thu Jul 30 12:56:55.424123 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-access.php
[Thu Jul 30 12:56:55.624792 2026] [lsapi:warn] [pid 3144322:tid 3144322] [client 194.249.231.23:59604] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 12:56:55.624839 2026] [lsapi:warn] [pid 3144322:tid 3144322] [client 194.249.231.23:59604] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 12:56:55.629116 2026] [core:error] [pid 3142158:tid 3142158] [client 66.249.66.3:54618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:55.629137 2026] [core:error] [pid 3142158:tid 3142158] [client 66.249.66.3:54618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:55.656484 2026] [security2:error] [pid 3144514:tid 3144514] [client 43.164.3.182:57560] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-atrox-killers.net"] [uri "/"] [unique_id "ams8B5r70gBw_Om7UMIj3QAAAAs"]
[Thu Jul 30 12:56:55.733902 2026] [cgi:error] [pid 3146137:tid 3146137] [client 62.60.130.232:59150] AH02811: stderr from /home/jdmedi/public_html/cgi-bin/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:56:56.187319 2026] [ssl:error] [pid 3154454:tid 3154454] (70014)End of file found: [client 216.73.216.199:12693] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:56.447264 2026] [ssl:error] [pid 3146109:tid 3146109] (EAI 2)Name or service not known: [client 144.76.19.72:36786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:56.447292 2026] [ssl:error] [pid 3146109:tid 3146109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:56.498504 2026] [ssl:error] [pid 3142029:tid 3142029] (EAI 2)Name or service not known: [client 144.76.19.72:36802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:56.498535 2026] [ssl:error] [pid 3142029:tid 3142029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:56.684471 2026] [ssl:error] [pid 3144292:tid 3144292] (70014)End of file found: [client 216.73.216.199:59871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:56:56.994526 2026] [cgi:error] [pid 3154501:tid 3154501] [client 62.60.130.232:62728] AH02811: stderr from /home/jdmedi/public_html/cgi-bin/cgi-bin: script not found or unable to stat
[Thu Jul 30 12:56:57.058571 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-load.php
[Thu Jul 30 12:56:57.610103 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/zafir1.php
[Thu Jul 30 12:56:57.647785 2026] [authz_core:error] [pid 3152524:tid 3152524] [client 151.80.133.111:53096] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 12:56:58.148096 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/abc.php
[Thu Jul 30 12:56:58.217484 2026] [core:error] [pid 3146138:tid 3146138] [client 57.141.0.12:35650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:58.217525 2026] [core:error] [pid 3146138:tid 3146138] [client 57.141.0.12:35650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:56:58.695520 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/c1.php
[Thu Jul 30 12:56:59.554743 2026] [ssl:error] [pid 3146231:tid 3146231] (EAI 2)Name or service not known: [client 144.76.19.72:52860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:59.554771 2026] [ssl:error] [pid 3146231:tid 3146231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:59.609285 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:52862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:56:59.609310 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:56:59.795573 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/root.php
[Thu Jul 30 12:57:00.333791 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/shell.php
[Thu Jul 30 12:57:00.407337 2026] [ssl:error] [pid 3154457:tid 3154457] (70014)End of file found: [client 216.73.216.199:34691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:01.492970 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-block.php
[Thu Jul 30 12:57:01.521099 2026] [ssl:error] [pid 3152525:tid 3152525] (70014)End of file found: [client 216.73.216.199:23964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:01.617114 2026] [authz_core:error] [pid 3154388:tid 3154388] [client 20.215.216.94:35267] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-includes/Text/error_log
[Thu Jul 30 12:57:02.522150 2026] [ssl:error] [pid 3154454:tid 3154454] (70014)End of file found: [client 216.73.216.199:30621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:02.629577 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-header-json.php
[Thu Jul 30 12:57:02.666546 2026] [ssl:error] [pid 3146137:tid 3146137] (EAI 2)Name or service not known: [client 144.76.19.72:52866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:02.666590 2026] [ssl:error] [pid 3146137:tid 3146137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:02.721377 2026] [ssl:error] [pid 3140218:tid 3140218] (EAI 2)Name or service not known: [client 144.76.19.72:52868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:02.721409 2026] [ssl:error] [pid 3140218:tid 3140218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:03.849357 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/zup.php
[Thu Jul 30 12:57:04.414647 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/a9.php
[Thu Jul 30 12:57:04.455743 2026] [security2:error] [pid 3138686:tid 3138686] [client 110.42.208.131:34016] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "ams8EIo0IkpINsqN6pHajQAAABs"]
[Thu Jul 30 12:57:04.945719 2026] [lsapi:warn] [pid 3150397:tid 3150397] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:57:05.547801 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/content.php
[Thu Jul 30 12:57:05.775535 2026] [ssl:error] [pid 3150485:tid 3150485] (EAI 2)Name or service not known: [client 144.76.19.72:52878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:05.775566 2026] [ssl:error] [pid 3150485:tid 3150485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:05.828579 2026] [ssl:error] [pid 3150397:tid 3150397] (EAI 2)Name or service not known: [client 144.76.19.72:52892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:05.828615 2026] [ssl:error] [pid 3150397:tid 3150397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:06.112692 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/gg.php
[Thu Jul 30 12:57:06.665640 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/makeasmtp.php
[Thu Jul 30 12:57:07.208665 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/paku.php
[Thu Jul 30 12:57:07.334273 2026] [ssl:error] [pid 3144325:tid 3144325] (70014)End of file found: [client 216.73.216.199:17945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:07.917290 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/rtx.php
[Thu Jul 30 12:57:07.936515 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:57304] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:08.845870 2026] [ssl:error] [pid 3154454:tid 3154454] (70014)End of file found: [client 216.73.216.199:21802] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:08.907717 2026] [ssl:error] [pid 3142029:tid 3142029] (EAI 2)Name or service not known: [client 144.76.19.72:52908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:08.907769 2026] [ssl:error] [pid 3142029:tid 3142029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:08.965894 2026] [ssl:error] [pid 3154498:tid 3154498] (EAI 2)Name or service not known: [client 144.76.19.72:52916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:08.965927 2026] [ssl:error] [pid 3154498:tid 3154498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:09.109689 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/maint/repair.php
[Thu Jul 30 12:57:09.113672 2026] [core:error] [pid 3154494:tid 3154494] [client 57.141.0.44:43158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:09.113691 2026] [core:error] [pid 3154494:tid 3154494] [client 57.141.0.44:43158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:09.196871 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/min.php
[Thu Jul 30 12:57:09.634954 2026] [core:error] [pid 3142252:tid 3142252] [client 66.249.66.3:42389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:09.634998 2026] [core:error] [pid 3142252:tid 3142252] [client 66.249.66.3:42389] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:09.683274 2026] [security2:error] [pid 3154494:tid 3154494] [client 110.42.208.131:39588] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "ams8FebCuRdhuwG44qO53wAAABw"], referer: http://www.1stcolsterworthscouts.org.uk
[Thu Jul 30 12:57:09.719187 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/wp-fileesx-449.php
[Thu Jul 30 12:57:10.268283 2026] [security2:error] [pid 3156030:tid 3156030] [client 47.76.51.204:39349] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8Ft3aFAmu5SySbAxmqgAAAA0"]
[Thu Jul 30 12:57:10.268330 2026] [security2:error] [pid 3156030:tid 3156030] [client 47.76.51.204:39349] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8Ft3aFAmu5SySbAxmqgAAAA0"]
[Thu Jul 30 12:57:10.268596 2026] [security2:error] [pid 3156030:tid 3156030] [client 47.76.51.204:39349] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8Ft3aFAmu5SySbAxmqgAAAA0"]
[Thu Jul 30 12:57:10.277527 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/themes/min.php
[Thu Jul 30 12:57:10.804588 2026] [security2:error] [pid 3155680:tid 3155680] [client 114.119.159.92:41983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/legal/"] [unique_id "ams8FsBkVrHlq3tQZociJgAAAAQ"], referer: http://codeworks.co.uk/products/
[Thu Jul 30 12:57:10.864721 2026] [core:error] [pid 3142158:tid 3142158] [client 57.141.0.34:58832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:10.864747 2026] [core:error] [pid 3142158:tid 3142158] [client 57.141.0.34:58832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:12.019675 2026] [ssl:error] [pid 3154499:tid 3154499] (EAI 2)Name or service not known: [client 144.76.19.72:21610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:12.019731 2026] [ssl:error] [pid 3154499:tid 3154499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:12.077945 2026] [ssl:error] [pid 3154456:tid 3154456] (EAI 2)Name or service not known: [client 144.76.19.72:21612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:12.077982 2026] [ssl:error] [pid 3154456:tid 3154456] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:12.114210 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-info.php
[Thu Jul 30 12:57:12.471303 2026] [security2:error] [pid 3154456:tid 3154456] [client 185.191.171.12:59294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4620.0.html"] [unique_id "ams8GKRSkJLMa5sWG9jq0QAAABc"]
[Thu Jul 30 12:57:12.595800 2026] [authz_core:error] [pid 3154388:tid 3154388] [client 57.141.0.48:44134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:57:12.596424 2026] [authz_core:error] [pid 3154388:tid 3154388] [client 57.141.0.48:44134] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:57:12.608742 2026] [security2:error] [pid 3156125:tid 3156125] [client 36.73.182.157:12896] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8GIBVmxELrU1SWR3kJwAAAC8"]
[Thu Jul 30 12:57:12.608792 2026] [security2:error] [pid 3156125:tid 3156125] [client 36.73.182.157:12896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8GIBVmxELrU1SWR3kJwAAAC8"]
[Thu Jul 30 12:57:12.609084 2026] [security2:error] [pid 3156125:tid 3156125] [client 36.73.182.157:12896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8GIBVmxELrU1SWR3kJwAAAC8"]
[Thu Jul 30 12:57:12.640951 2026] [ssl:error] [pid 3156123:tid 3156123] (70014)End of file found: [client 216.73.216.199:2160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:12.717338 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-wordfence-waf.php
[Thu Jul 30 12:57:13.306642 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/ws49.php
[Thu Jul 30 12:57:13.834718 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/xxx.php
[Thu Jul 30 12:57:14.404604 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/0x.php
[Thu Jul 30 12:57:14.499316 2026] [security2:error] [pid 3138265:tid 3138265] [client 86.77.25.239:33546] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8Gm9PNvQ7pWvg0LVQQwAAAA4"]
[Thu Jul 30 12:57:14.499365 2026] [security2:error] [pid 3138265:tid 3138265] [client 86.77.25.239:33546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8Gm9PNvQ7pWvg0LVQQwAAAA4"]
[Thu Jul 30 12:57:14.499636 2026] [security2:error] [pid 3138265:tid 3138265] [client 86.77.25.239:33546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8Gm9PNvQ7pWvg0LVQQwAAAA4"]
[Thu Jul 30 12:57:15.021335 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/CDX1.php
[Thu Jul 30 12:57:15.133354 2026] [ssl:error] [pid 3138686:tid 3138686] (EAI 2)Name or service not known: [client 144.76.19.72:21622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:15.133386 2026] [ssl:error] [pid 3138686:tid 3138686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:15.190638 2026] [ssl:error] [pid 3154457:tid 3154457] (EAI 2)Name or service not known: [client 144.76.19.72:21638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:15.190672 2026] [ssl:error] [pid 3154457:tid 3154457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:15.429826 2026] [lsapi:warn] [pid 3154454:tid 3154454] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:57:15.550991 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/akcc.php
[Thu Jul 30 12:57:16.126569 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/control.php
[Thu Jul 30 12:57:17.620352 2026] [ssl:error] [pid 3154456:tid 3154456] (70014)End of file found: [client 216.73.216.199:5520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:17.804739 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/s.php
[Thu Jul 30 12:57:17.921443 2026] [ssl:error] [pid 3156184:tid 3156184] (70014)End of file found: [client 216.73.216.199:55036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:18.244200 2026] [ssl:error] [pid 3138265:tid 3138265] (EAI 2)Name or service not known: [client 144.76.19.72:21650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:18.244229 2026] [ssl:error] [pid 3138265:tid 3138265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:18.295545 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:21652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:18.295575 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:18.360206 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/sagax.php
[Thu Jul 30 12:57:18.928685 2026] [authz_core:error] [pid 3154502:tid 3154502] [client 57.141.0.8:26272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:57:18.929314 2026] [authz_core:error] [pid 3154502:tid 3154502] [client 57.141.0.8:26272] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:57:19.482326 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/wp-teest.php
[Thu Jul 30 12:57:20.003955 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/plugins/ftde.php
[Thu Jul 30 12:57:20.330209 2026] [security2:error] [pid 3156124:tid 3156124] [client 216.73.216.199:6424] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/etc.conf"] [unique_id "ams8IDgem4t1Z8onWIP9swAAACc"]
[Thu Jul 30 12:57:20.330547 2026] [security2:error] [pid 3156124:tid 3156124] [client 216.73.216.199:6424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/etc.conf"] [unique_id "ams8IDgem4t1Z8onWIP9swAAACc"]
[Thu Jul 30 12:57:20.330792 2026] [security2:error] [pid 3156124:tid 3156124] [client 216.73.216.199:6424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/etc.conf"] [unique_id "ams8IDgem4t1Z8onWIP9swAAACc"]
[Thu Jul 30 12:57:21.082095 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Text/Diff/Engine/string.php
[Thu Jul 30 12:57:21.082132 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Text/Diff/Engine/shell.php
[Thu Jul 30 12:57:21.082151 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Text/Diff/Engine/xdiff.php
[Thu Jul 30 12:57:21.082167 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/Text/Diff/Engine/native.php
[Thu Jul 30 12:57:21.144457 2026] [authz_core:error] [pid 3142029:tid 3142029] [client 20.215.216.94:35289] AH01630: client denied by server configuration: /home/buttere/public_html/fswknowledge.store/wp-includes/Requests/error_log
[Thu Jul 30 12:57:21.169874 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/z.php
[Thu Jul 30 12:57:21.243221 2026] [core:error] [pid 3156124:tid 3156124] (13)Permission denied: [client 216.73.216.199:6424] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-64/slabs
[Thu Jul 30 12:57:21.395543 2026] [ssl:error] [pid 3156177:tid 3156177] (EAI 2)Name or service not known: [client 144.76.19.72:57618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:21.395583 2026] [ssl:error] [pid 3156177:tid 3156177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:21.449043 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:57624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:21.449090 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:21.725308 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/f35.php
[Thu Jul 30 12:57:22.278959 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/file61.php
[Thu Jul 30 12:57:22.348245 2026] [core:error] [pid 3156177:tid 3156177] [client 66.249.66.167:58923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:22.348275 2026] [core:error] [pid 3156177:tid 3156177] [client 66.249.66.167:58923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:22.927586 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/mini.php
[Thu Jul 30 12:57:23.525965 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/system_log.php
[Thu Jul 30 12:57:23.791638 2026] [ssl:error] [pid 3155506:tid 3155506] (70014)End of file found: [client 216.73.216.199:43761] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:24.052744 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/v.php
[Thu Jul 30 12:57:24.545300 2026] [ssl:error] [pid 3156122:tid 3156122] (EAI 2)Name or service not known: [client 144.76.19.72:57650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:24.545338 2026] [ssl:error] [pid 3156122:tid 3156122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:24.601521 2026] [ssl:error] [pid 3135567:tid 3135567] (EAI 2)Name or service not known: [client 144.76.19.72:57654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:24.601551 2026] [ssl:error] [pid 3135567:tid 3135567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:25.212725 2026] [access_compat:error] [pid 3142158:tid 3142158] [client 20.100.203.84:39439] AH01797: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-content/uploads/ps_auto_sitemap/
[Thu Jul 30 12:57:25.252592 2026] [authz_core:error] [pid 3142158:tid 3142158] [client 20.100.203.84:39439] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Text/error_log
[Thu Jul 30 12:57:25.281738 2026] [security2:error] [pid 3138686:tid 3138686] [client 47.128.118.60:41604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/robots.txt"] [unique_id "ams8JYo0IkpINsqN6pHalAAAABs"]
[Thu Jul 30 12:57:25.428230 2026] [authz_core:error] [pid 3154456:tid 3154456] [client 57.141.0.61:60970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:57:25.428848 2026] [authz_core:error] [pid 3154456:tid 3154456] [client 57.141.0.61:60970] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:57:25.520023 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:8727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:25.906595 2026] [lsapi:warn] [pid 3142252:tid 3142252] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:57:25.907328 2026] [ssl:error] [pid 3156124:tid 3156124] (70014)End of file found: [client 216.73.216.199:6424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:25.954603 2026] [core:error] [pid 3154495:tid 3154495] [client 57.141.0.49:47752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:25.954632 2026] [core:error] [pid 3154495:tid 3154495] [client 57.141.0.49:47752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:26.455098 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/fields/class-wp-rest-comment-meta-fields.php
[Thu Jul 30 12:57:26.455155 2026] [authz_core:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01630: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 12:57:26.455177 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/fields/class-wp-rest-term-meta-fields.php
[Thu Jul 30 12:57:26.455195 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/fields/class-wp-rest-meta-fields.php
[Thu Jul 30 12:57:26.455215 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/fields/class-wp-rest-user-meta-fields.php
[Thu Jul 30 12:57:26.455236 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/fields/class-wp-rest-post-meta-fields.php
[Thu Jul 30 12:57:26.550667 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-index.php
[Thu Jul 30 12:57:26.553279 2026] [security2:error] [pid 3154502:tid 3154502] [client 3.224.215.150:14512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/australian-acfid-shelter-reference-groups-annual-shelter-forum-2013/"] [unique_id "ams8JqNwCbGOTkAlmaSCVgAAADQ"]
[Thu Jul 30 12:57:27.610743 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/ws80.php
[Thu Jul 30 12:57:27.655777 2026] [ssl:error] [pid 3156180:tid 3156180] (EAI 2)Name or service not known: [client 144.76.19.72:57656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:27.655807 2026] [ssl:error] [pid 3156180:tid 3156180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:27.710880 2026] [ssl:error] [pid 3150397:tid 3150397] (EAI 2)Name or service not known: [client 144.76.19.72:57672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:27.710910 2026] [ssl:error] [pid 3150397:tid 3150397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:27.857009 2026] [authz_core:error] [pid 3154494:tid 3154494] [client 57.141.0.1:52176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:57:27.857641 2026] [authz_core:error] [pid 3154494:tid 3154494] [client 57.141.0.1:52176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:57:28.149001 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/ww2.php
[Thu Jul 30 12:57:28.748608 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/7logs.php
[Thu Jul 30 12:57:28.843007 2026] [security2:error] [pid 3155936:tid 3155936] [client 3.224.205.25:15934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "ams8KBlf5u41mLHuj9psRgAAAAg"]
[Thu Jul 30 12:57:29.138338 2026] [core:error] [pid 3144514:tid 3144514] (13)Permission denied: [client 216.73.216.199:60039] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/kcore
[Thu Jul 30 12:57:29.266683 2026] [ssl:error] [pid 3144514:tid 3144514] (70014)End of file found: [client 216.73.216.199:60039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:29.285553 2026] [security2:error] [pid 3156077:tid 3156077] [client 52.2.191.202:55176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/403.shtml"] [unique_id "ams8KRGdHyFpqCmmVwIBPwAAABg"]
[Thu Jul 30 12:57:29.292551 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/ac.php
[Thu Jul 30 12:57:30.409889 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/ctex1.php
[Thu Jul 30 12:57:30.762919 2026] [ssl:error] [pid 3155506:tid 3155506] (EAI 2)Name or service not known: [client 144.76.19.72:35420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:30.762954 2026] [ssl:error] [pid 3155506:tid 3155506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:30.816520 2026] [ssl:error] [pid 3152579:tid 3152579] (EAI 2)Name or service not known: [client 144.76.19.72:35422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:30.816550 2026] [ssl:error] [pid 3152579:tid 3152579] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:31.041236 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/domains.php
[Thu Jul 30 12:57:31.101003 2026] [ssl:error] [pid 3150397:tid 3150397] (70014)End of file found: [client 216.73.216.199:5078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:31.616725 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/dropdown.php
[Thu Jul 30 12:57:31.986551 2026] [ssl:error] [pid 3155936:tid 3155936] (70014)End of file found: [client 216.73.216.199:41855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:32.796840 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/flower.php
[Thu Jul 30 12:57:33.338687 2026] [access_compat:error] [pid 3154416:tid 3154416] [client 20.63.98.115:64927] AH01797: client denied by server configuration: /home/thepryor/public_html/insc.php
[Thu Jul 30 12:57:33.663921 2026] [core:error] [pid 3144322:tid 3144322] [client 66.249.66.167:46923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:33.663948 2026] [core:error] [pid 3144322:tid 3144322] [client 66.249.66.167:46923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:33.670599 2026] [core:error] [pid 3156181:tid 3156181] [client 66.249.66.66:43022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:33.670624 2026] [core:error] [pid 3156181:tid 3156181] [client 66.249.66.66:43022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:33.872662 2026] [ssl:error] [pid 3146109:tid 3146109] (EAI 2)Name or service not known: [client 144.76.19.72:35430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:33.872693 2026] [ssl:error] [pid 3146109:tid 3146109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:33.963587 2026] [ssl:error] [pid 3128807:tid 3128807] (EAI 2)Name or service not known: [client 144.76.19.72:35434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:33.963615 2026] [ssl:error] [pid 3128807:tid 3128807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:34.425611 2026] [security2:error] [pid 3128807:tid 3128807] [client 43.166.134.114:40624] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.fr"] [uri "/"] [unique_id "ams8LpL3_iBPckrp7xncAgAAABM"]
[Thu Jul 30 12:57:34.566330 2026] [authz_core:error] [pid 3142158:tid 3142158] [client 20.100.203.84:39439] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 12:57:35.017847 2026] [ssl:error] [pid 3154498:tid 3154498] (70014)End of file found: [client 216.73.216.199:42009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:35.975780 2026] [security2:error] [pid 3128807:tid 3128807] [client 185.191.171.12:51992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/cook-county-building-violations"] [unique_id "ams8L5L3_iBPckrp7xncAwAAABM"]
[Thu Jul 30 12:57:36.400855 2026] [lsapi:warn] [pid 3154494:tid 3154494] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:57:36.519953 2026] [ssl:error] [pid 3149635:tid 3149635] (70014)End of file found: [client 216.73.216.199:23216] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:36.664496 2026] [security2:error] [pid 3156179:tid 3156179] [client 43.166.134.114:51514] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "ams8MObHIGpDSLnHhBWQ5AAAADs"], referer: http://orgent.fr
[Thu Jul 30 12:57:37.020497 2026] [ssl:error] [pid 3150397:tid 3150397] (EAI 2)Name or service not known: [client 144.76.19.72:35448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:37.020531 2026] [ssl:error] [pid 3150397:tid 3150397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:37.076312 2026] [ssl:error] [pid 3154494:tid 3154494] (EAI 2)Name or service not known: [client 144.76.19.72:35456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:37.076358 2026] [ssl:error] [pid 3154494:tid 3154494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:37.609425 2026] [core:error] [pid 3156184:tid 3156184] [client 66.249.64.170:40705] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:37.609460 2026] [core:error] [pid 3156184:tid 3156184] [client 66.249.64.170:40705] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:37.729173 2026] [ssl:error] [pid 3152524:tid 3152524] (70014)End of file found: [client 216.73.216.199:5763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:38.361206 2026] [security2:error] [pid 3154494:tid 3154494] [client 85.208.96.204:43060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6251.0/prev_next,prev.html"] [unique_id "ams8MubCuRdhuwG44qO57AAAABw"]
[Thu Jul 30 12:57:40.152940 2026] [ssl:error] [pid 3128807:tid 3128807] (EAI 2)Name or service not known: [client 144.76.19.72:31214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:40.152968 2026] [ssl:error] [pid 3128807:tid 3128807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:40.207261 2026] [ssl:error] [pid 3141098:tid 3141098] (EAI 2)Name or service not known: [client 144.76.19.72:31216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:40.207290 2026] [ssl:error] [pid 3141098:tid 3141098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:40.294876 2026] [core:error] [pid 3156179:tid 3156179] [client 57.141.0.39:49342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:40.294907 2026] [core:error] [pid 3156179:tid 3156179] [client 57.141.0.39:49342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:40.437753 2026] [core:error] [pid 3156184:tid 3156184] (13)Permission denied: [client 216.73.216.199:35260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/1089269.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.8b4eaf2f.tmp
[Thu Jul 30 12:57:40.739851 2026] [ssl:error] [pid 3156184:tid 3156184] (70014)End of file found: [client 216.73.216.199:35260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:42.542332 2026] [ssl:error] [pid 3135567:tid 3135567] (70014)End of file found: [client 216.73.216.199:56796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:43.146914 2026] [authz_core:error] [pid 3156183:tid 3156183] [client 57.141.0.17:38950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:57:43.147546 2026] [authz_core:error] [pid 3156183:tid 3156183] [client 57.141.0.17:38950] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:57:43.261701 2026] [ssl:error] [pid 3157421:tid 3157421] (EAI 2)Name or service not known: [client 144.76.19.72:31230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:43.261742 2026] [ssl:error] [pid 3157421:tid 3157421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:43.319203 2026] [ssl:error] [pid 3155506:tid 3155506] (EAI 2)Name or service not known: [client 144.76.19.72:31234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:43.319246 2026] [ssl:error] [pid 3155506:tid 3155506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:43.448059 2026] [ssl:error] [pid 3157329:tid 3157329] (70014)End of file found: [client 216.73.216.199:21798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:44.896559 2026] [authz_core:error] [pid 3154501:tid 3154501] [client 66.249.66.33:46350] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:57:44.899202 2026] [authz_core:error] [pid 3154501:tid 3154501] [client 66.249.66.33:46350] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:57:45.613767 2026] [core:crit] [pid 3152576:tid 3152576] (13)Permission denied: [client 94.154.43.179:40506] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 12:57:45.613813 2026] [authz_core:error] [pid 3152576:tid 3152576] [client 94.154.43.179:40506] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 12:57:45.614276 2026] [core:crit] [pid 3152576:tid 3152576] (13)Permission denied: [client 94.154.43.179:40506] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 12:57:45.614297 2026] [core:crit] [pid 3152576:tid 3152576] (13)Permission denied: [client 94.154.43.179:40506] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 12:57:45.614329 2026] [core:crit] [pid 3152576:tid 3152576] (13)Permission denied: [client 94.154.43.179:40506] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 12:57:45.854597 2026] [security2:error] [pid 3146109:tid 3146109] [client 49.51.39.209:53976] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wildduckdesigns.co.uk"] [uri "/"] [unique_id "ams8ORehAd6F6bxzEvOWlAAAAAw"]
[Thu Jul 30 12:57:46.344175 2026] [core:error] [pid 3138686:tid 3138686] [client 66.249.66.167:37190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:46.344202 2026] [core:error] [pid 3138686:tid 3138686] [client 66.249.66.167:37190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:46.374186 2026] [ssl:error] [pid 3156122:tid 3156122] (EAI 2)Name or service not known: [client 144.76.19.72:31236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:46.374214 2026] [ssl:error] [pid 3156122:tid 3156122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:46.429894 2026] [ssl:error] [pid 3154502:tid 3154502] (EAI 2)Name or service not known: [client 144.76.19.72:31248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:46.429937 2026] [ssl:error] [pid 3154502:tid 3154502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:46.863564 2026] [lsapi:warn] [pid 3156122:tid 3156122] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:57:47.944847 2026] [security2:error] [pid 3156177:tid 3156177] [client 185.191.171.12:39532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5038.0.html"] [unique_id "ams8Oyw8IlqiLUPh8MMnIwAAADY"]
[Thu Jul 30 12:57:48.578132 2026] [authz_core:error] [pid 3156177:tid 3156177] [client 4.184.185.91:16927] AH01630: client denied by server configuration: /home/monitors/public_html/highbrightness.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 12:57:49.306787 2026] [ssl:error] [pid 3149635:tid 3149635] (70014)End of file found: [client 216.73.216.199:13181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:49.485879 2026] [ssl:error] [pid 3140218:tid 3140218] (EAI 2)Name or service not known: [client 144.76.19.72:31254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:49.485907 2026] [ssl:error] [pid 3140218:tid 3140218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:49.539141 2026] [ssl:error] [pid 3157329:tid 3157329] (EAI 2)Name or service not known: [client 144.76.19.72:31256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:49.539173 2026] [ssl:error] [pid 3157329:tid 3157329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:50.194164 2026] [ssl:error] [pid 3152524:tid 3152524] (70014)End of file found: [client 216.73.216.199:36815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:50.711356 2026] [security2:error] [pid 3155506:tid 3155506] [client 46.37.124.80:39740] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bigbangburgerbar.co.uk"] [uri "/.git/config"] [unique_id "ams8PpmpxlocEpUrny70lQAAAAA"]
[Thu Jul 30 12:57:50.711567 2026] [security2:error] [pid 3155506:tid 3155506] [client 46.37.124.80:39740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bigbangburgerbar.co.uk"] [uri "/.git/config"] [unique_id "ams8PpmpxlocEpUrny70lQAAAAA"]
[Thu Jul 30 12:57:50.711814 2026] [security2:error] [pid 3155506:tid 3155506] [client 46.37.124.80:39740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8PpmpxlocEpUrny70lQAAAAA"]
[Thu Jul 30 12:57:51.399528 2026] [core:error] [pid 3157329:tid 3157329] (13)Permission denied: [client 216.73.216.199:30415] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_conntrack/sections/__ksymtab_strings
[Thu Jul 30 12:57:51.601732 2026] [security2:error] [pid 3155506:tid 3155506] [client 46.37.124.80:39740] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bigbangburgerbar.co.uk"] [uri "/.git/HEAD"] [unique_id "ams8P5mpxlocEpUrny70lgAAAAA"]
[Thu Jul 30 12:57:51.601923 2026] [security2:error] [pid 3155506:tid 3155506] [client 46.37.124.80:39740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bigbangburgerbar.co.uk"] [uri "/.git/HEAD"] [unique_id "ams8P5mpxlocEpUrny70lgAAAAA"]
[Thu Jul 30 12:57:51.602190 2026] [security2:error] [pid 3155506:tid 3155506] [client 46.37.124.80:39740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8P5mpxlocEpUrny70lgAAAAA"]
[Thu Jul 30 12:57:52.233240 2026] [authz_core:error] [pid 3156124:tid 3156124] [client 57.141.0.25:22692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:57:52.233898 2026] [authz_core:error] [pid 3156124:tid 3156124] [client 57.141.0.25:22692] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:57:52.594319 2026] [ssl:error] [pid 3138265:tid 3138265] (EAI 2)Name or service not known: [client 144.76.19.72:20182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:52.594351 2026] [ssl:error] [pid 3138265:tid 3138265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:52.647403 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:20190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:52.647430 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:53.816163 2026] [core:crit] [pid 3157329:tid 3157329] (13)Permission denied: [client 216.73.216.199:30415] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/kernel/tracing/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/kernel/tracing/' is executable
[Thu Jul 30 12:57:53.825706 2026] [core:crit] [pid 3157329:tid 3157329] (13)Permission denied: [client 216.73.216.199:30415] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/kernel/debug/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/kernel/debug/' is executable
[Thu Jul 30 12:57:55.493551 2026] [ssl:error] [pid 3156124:tid 3156124] [client 199.45.154.151:55792] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname www.techsuccess.uk provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 12:57:55.702564 2026] [ssl:error] [pid 3149635:tid 3149635] (EAI 2)Name or service not known: [client 144.76.19.72:20204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:55.702594 2026] [ssl:error] [pid 3149635:tid 3149635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:55.758615 2026] [ssl:error] [pid 3154502:tid 3154502] (EAI 2)Name or service not known: [client 144.76.19.72:20218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:55.758651 2026] [ssl:error] [pid 3154502:tid 3154502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:56.541271 2026] [ssl:error] [pid 3157329:tid 3157329] (70014)End of file found: [client 216.73.216.199:30415] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:57:57.360302 2026] [lsapi:warn] [pid 3156124:tid 3156124] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:57:57.970947 2026] [security2:error] [pid 3154499:tid 3154499] [client 43.130.26.3:33842] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "ams8RWmITs5fKtgWXxKdnwAAACs"]
[Thu Jul 30 12:57:58.812500 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:20246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:58.812525 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:58.863865 2026] [ssl:error] [pid 3155506:tid 3155506] (EAI 2)Name or service not known: [client 144.76.19.72:20256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:57:58.863894 2026] [ssl:error] [pid 3155506:tid 3155506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:57:59.038574 2026] [core:error] [pid 3156180:tid 3156180] [client 66.249.66.167:48624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:59.038607 2026] [core:error] [pid 3156180:tid 3156180] [client 66.249.66.167:48624] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:57:59.329845 2026] [security2:error] [pid 3135484:tid 3135484] [client 43.130.26.3:34786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "ams8R_B0ywKCH7WQg2xftwAAAAo"], referer: http://www.georgehotelofstamford.com
[Thu Jul 30 12:57:59.688680 2026] [security2:error] [pid 3135567:tid 3135567] [client 43.157.191.20:40154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.com"] [uri "/"] [unique_id "ams8R0cf7TmX9AaQQdDXLwAAACk"]
[Thu Jul 30 12:58:00.760407 2026] [ssl:error] [pid 3157876:tid 3157876] (70014)End of file found: [client 216.73.216.199:40197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:00.981882 2026] [core:error] [pid 3135484:tid 3135484] [client 66.249.66.167:41250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:00.981907 2026] [core:error] [pid 3135484:tid 3135484] [client 66.249.66.167:41250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:01.918816 2026] [ssl:error] [pid 3156183:tid 3156183] (EAI 2)Name or service not known: [client 144.76.19.72:54310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:01.918852 2026] [ssl:error] [pid 3156183:tid 3156183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:01.975148 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:54320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:01.975181 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:02.566141 2026] [ssl:error] [pid 3138686:tid 3138686] (70014)End of file found: [client 216.73.216.199:45092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:05.033369 2026] [ssl:error] [pid 3156077:tid 3156077] (EAI 2)Name or service not known: [client 144.76.19.72:54324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:05.033400 2026] [ssl:error] [pid 3156077:tid 3156077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:05.086681 2026] [ssl:error] [pid 3156077:tid 3156077] (EAI 2)Name or service not known: [client 144.76.19.72:54330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:05.086706 2026] [ssl:error] [pid 3156077:tid 3156077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:05.594408 2026] [ssl:error] [pid 3152524:tid 3152524] (70014)End of file found: [client 216.73.216.199:17743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:05.705858 2026] [security2:error] [pid 3157421:tid 3157421] [client 106.52.49.148:56576] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "ams8TSIV60nplIdkwoliVgAAABE"]
[Thu Jul 30 12:58:06.353786 2026] [authz_core:error] [pid 3158927:tid 3158927] [client 57.141.0.17:35642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:58:06.354464 2026] [authz_core:error] [pid 3158927:tid 3158927] [client 57.141.0.17:35642] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:58:06.810897 2026] [core:error] [pid 3158923:tid 3158923] (13)Permission denied: [client 216.73.216.199:42132] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/poison
[Thu Jul 30 12:58:07.122740 2026] [ssl:error] [pid 3158923:tid 3158923] (70014)End of file found: [client 216.73.216.199:42132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:07.196331 2026] [security2:error] [pid 3158357:tid 3158357] [client 114.119.157.183:65135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577145600/cat_ids~104,17/request_format~html"] [unique_id "ams8T0YG8dwByC2nqpw_0AAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~104,17/request_format~html
[Thu Jul 30 12:58:07.861509 2026] [lsapi:warn] [pid 3157876:tid 3157876] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:58:07.927113 2026] [ssl:error] [pid 3154502:tid 3154502] (70014)End of file found: [client 216.73.216.199:24948] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:08.126799 2026] [security2:error] [pid 3144514:tid 3144514] [client 114.119.157.183:65137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577145600/cat_ids~104,17/request_format~html"] [unique_id "ams8UJr70gBw_Om7UMIj9QAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~104,17/request_format~html
[Thu Jul 30 12:58:08.138508 2026] [ssl:error] [pid 3157917:tid 3157917] (EAI 2)Name or service not known: [client 144.76.19.72:54346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:08.138543 2026] [ssl:error] [pid 3157917:tid 3157917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:08.193453 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:54350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:08.193496 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:11.271879 2026] [ssl:error] [pid 3155506:tid 3155506] (EAI 2)Name or service not known: [client 144.76.19.72:40792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:11.271921 2026] [ssl:error] [pid 3155506:tid 3155506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:11.323131 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:40796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:11.323159 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:11.697757 2026] [core:error] [pid 3156183:tid 3156183] (13)Permission denied: [client 216.73.216.199:48938] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/shadow-
[Thu Jul 30 12:58:12.190788 2026] [core:error] [pid 3152524:tid 3152524] [client 66.249.66.194:56564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:12.190818 2026] [core:error] [pid 3152524:tid 3152524] [client 66.249.66.194:56564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:14.292157 2026] [ssl:error] [pid 3156183:tid 3156183] (70014)End of file found: [client 216.73.216.199:48938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:14.378844 2026] [ssl:error] [pid 3157917:tid 3157917] (EAI 2)Name or service not known: [client 144.76.19.72:40810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:14.378872 2026] [ssl:error] [pid 3157917:tid 3157917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:14.430467 2026] [ssl:error] [pid 3156077:tid 3156077] (EAI 2)Name or service not known: [client 144.76.19.72:40816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:14.430498 2026] [ssl:error] [pid 3156077:tid 3156077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:14.598040 2026] [ssl:error] [pid 3154498:tid 3154498] (70014)End of file found: [client 216.73.216.199:5307] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:16.408318 2026] [ssl:error] [pid 3157917:tid 3157917] (70014)End of file found: [client 216.73.216.199:1947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:17.485871 2026] [ssl:error] [pid 3158927:tid 3158927] (EAI 2)Name or service not known: [client 144.76.19.72:40820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:17.485912 2026] [ssl:error] [pid 3158927:tid 3158927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:17.540909 2026] [ssl:error] [pid 3144514:tid 3144514] (EAI 2)Name or service not known: [client 144.76.19.72:40822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:17.540944 2026] [ssl:error] [pid 3144514:tid 3144514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:18.329247 2026] [authz_core:error] [pid 3144514:tid 3144514] [client 57.141.0.2:28806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:58:18.329966 2026] [authz_core:error] [pid 3144514:tid 3144514] [client 57.141.0.2:28806] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:58:18.350676 2026] [lsapi:warn] [pid 3156179:tid 3156179] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:58:19.815082 2026] [security2:error] [pid 3156183:tid 3156183] [client 85.208.96.201:13398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4774.0.html"] [unique_id "ams8W-5YRBltLKwt68i1ZQAAAEA"]
[Thu Jul 30 12:58:20.597400 2026] [ssl:error] [pid 3157876:tid 3157876] (EAI 2)Name or service not known: [client 144.76.19.72:23156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:20.597446 2026] [ssl:error] [pid 3157876:tid 3157876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:20.650889 2026] [core:error] [pid 3155506:tid 3155506] (13)Permission denied: [client 216.73.216.199:65448] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/shrink
[Thu Jul 30 12:58:20.652982 2026] [ssl:error] [pid 3159608:tid 3159608] (EAI 2)Name or service not known: [client 144.76.19.72:23158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:20.653013 2026] [ssl:error] [pid 3159608:tid 3159608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:20.681277 2026] [cgi:error] [pid 3158922:tid 3158922] [client 147.161.144.170:59498] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:58:22.167835 2026] [core:error] [pid 3158928:tid 3158928] (13)Permission denied: [client 216.73.216.199:32069] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/sys/kernel/usermodehelper/bset
[Thu Jul 30 12:58:22.469093 2026] [ssl:error] [pid 3158928:tid 3158928] (70014)End of file found: [client 216.73.216.199:32069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:23.377318 2026] [ssl:error] [pid 3158826:tid 3158826] (70014)End of file found: [client 216.73.216.199:37288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:23.468887 2026] [core:error] [pid 3158825:tid 3158825] [client 57.141.0.34:45398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:23.468918 2026] [core:error] [pid 3158825:tid 3158825] [client 57.141.0.34:45398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:23.707121 2026] [ssl:error] [pid 3155680:tid 3155680] (EAI 2)Name or service not known: [client 144.76.19.72:23164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:23.707154 2026] [ssl:error] [pid 3155680:tid 3155680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:23.759134 2026] [ssl:error] [pid 3146138:tid 3146138] (EAI 2)Name or service not known: [client 144.76.19.72:23166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:23.759162 2026] [ssl:error] [pid 3146138:tid 3146138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:23.980931 2026] [ssl:error] [pid 3155506:tid 3155506] (70014)End of file found: [client 216.73.216.199:65448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:24.395669 2026] [core:error] [pid 3156182:tid 3156182] [client 66.249.66.194:35633] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:24.395698 2026] [core:error] [pid 3156182:tid 3156182] [client 66.249.66.194:35633] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:26.816505 2026] [ssl:error] [pid 3144322:tid 3144322] (EAI 2)Name or service not known: [client 144.76.19.72:23168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:26.816545 2026] [ssl:error] [pid 3144322:tid 3144322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:26.874437 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:23172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:26.874467 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:28.202846 2026] [ssl:error] [pid 3157916:tid 3157916] (70014)End of file found: [client 216.73.216.199:56215] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:28.692596 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:25537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:28.836500 2026] [lsapi:warn] [pid 3156180:tid 3156180] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:58:29.726797 2026] [ssl:error] [pid 3154454:tid 3154454] (70014)End of file found: [client 216.73.216.199:10580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:29.929769 2026] [ssl:error] [pid 3156177:tid 3156177] (EAI 2)Name or service not known: [client 144.76.19.72:40844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:29.929804 2026] [ssl:error] [pid 3156177:tid 3156177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:29.986957 2026] [ssl:error] [pid 3154498:tid 3154498] (EAI 2)Name or service not known: [client 144.76.19.72:40854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:29.986987 2026] [ssl:error] [pid 3154498:tid 3154498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:30.796817 2026] [ssl:error] [pid 3158921:tid 3158921] (70014)End of file found: [client 216.73.216.199:16701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:30.952506 2026] [authz_core:error] [pid 3150482:tid 3150482] [client 66.249.66.34:38439] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:58:30.955171 2026] [authz_core:error] [pid 3150482:tid 3150482] [client 66.249.66.34:38439] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:58:31.397931 2026] [ssl:error] [pid 3156177:tid 3156177] (70014)End of file found: [client 216.73.216.199:59729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:31.891740 2026] [ssl:error] [pid 3155506:tid 3155506] (70014)End of file found: [client 216.73.216.199:44036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:33.045544 2026] [ssl:error] [pid 3158825:tid 3158825] (EAI 2)Name or service not known: [client 144.76.19.72:40868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:33.045581 2026] [ssl:error] [pid 3158825:tid 3158825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:33.098942 2026] [ssl:error] [pid 3152524:tid 3152524] (EAI 2)Name or service not known: [client 144.76.19.72:40872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:33.098981 2026] [ssl:error] [pid 3152524:tid 3152524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:36.153995 2026] [ssl:error] [pid 3158928:tid 3158928] (EAI 2)Name or service not known: [client 144.76.19.72:40882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:36.154033 2026] [ssl:error] [pid 3158928:tid 3158928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:36.205826 2026] [ssl:error] [pid 3157916:tid 3157916] (EAI 2)Name or service not known: [client 144.76.19.72:40886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:36.205881 2026] [ssl:error] [pid 3157916:tid 3157916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:36.415687 2026] [security2:error] [pid 3152576:tid 3152576] [client 85.208.96.206:25838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/hamilton-county-mugshots"] [unique_id "ams8bJoe-03o4nTR5wVzEQAAAC4"]
[Thu Jul 30 12:58:37.069949 2026] [core:error] [pid 3157916:tid 3157916] [client 66.249.66.194:52771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:37.069975 2026] [core:error] [pid 3157916:tid 3157916] [client 66.249.66.194:52771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:37.076176 2026] [core:error] [pid 3158827:tid 3158827] [client 66.249.66.39:52729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:37.076198 2026] [core:error] [pid 3158827:tid 3158827] [client 66.249.66.39:52729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:37.744286 2026] [ssl:error] [pid 3144292:tid 3144292] (70014)End of file found: [client 216.73.216.199:11370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:38.245314 2026] [ssl:error] [pid 3158928:tid 3158928] (70014)End of file found: [client 216.73.216.199:15305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:38.516552 2026] [core:error] [pid 3158922:tid 3158922] [client 57.141.0.59:65252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:38.516582 2026] [core:error] [pid 3158922:tid 3158922] [client 57.141.0.59:65252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:38.651580 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:64054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:39.294945 2026] [lsapi:warn] [pid 3158922:tid 3158922] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:58:39.302833 2026] [ssl:error] [pid 3156177:tid 3156177] (EAI 2)Name or service not known: [client 144.76.19.72:40900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:39.302855 2026] [ssl:error] [pid 3156177:tid 3156177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:39.372934 2026] [ssl:error] [pid 3156177:tid 3156177] (EAI 2)Name or service not known: [client 144.76.19.72:40902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:39.372959 2026] [ssl:error] [pid 3156177:tid 3156177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:42.468141 2026] [ssl:error] [pid 3146109:tid 3146109] (EAI 2)Name or service not known: [client 144.76.19.72:32402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:42.468178 2026] [ssl:error] [pid 3146109:tid 3146109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:42.523314 2026] [ssl:error] [pid 3154502:tid 3154502] (EAI 2)Name or service not known: [client 144.76.19.72:32404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:42.523347 2026] [ssl:error] [pid 3154502:tid 3154502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:43.468212 2026] [ssl:error] [pid 3144292:tid 3144292] (70014)End of file found: [client 216.73.216.199:22248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:43.707162 2026] [authz_core:error] [pid 3154502:tid 3154502] [client 57.141.0.12:53220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:58:43.707794 2026] [authz_core:error] [pid 3154502:tid 3154502] [client 57.141.0.12:53220] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:58:44.671313 2026] [core:error] [pid 3152576:tid 3152576] (13)Permission denied: [client 216.73.216.199:16538] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_console/drivers/virtio:virtio_console/uevent
[Thu Jul 30 12:58:44.972384 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:16538] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:45.570319 2026] [ssl:error] [pid 3144514:tid 3144514] (70014)End of file found: [client 216.73.216.199:13701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:45.582264 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:32442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:45.582293 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:45.638935 2026] [ssl:error] [pid 3158757:tid 3158757] (EAI 2)Name or service not known: [client 144.76.19.72:32454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:45.638969 2026] [ssl:error] [pid 3158757:tid 3158757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:45.778168 2026] [authz_core:error] [pid 3156182:tid 3156182] [client 66.249.66.33:38042] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:58:45.780814 2026] [authz_core:error] [pid 3156182:tid 3156182] [client 66.249.66.33:38042] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 12:58:45.933374 2026] [security2:error] [pid 3158316:tid 3158316] [client 43.131.45.213:37976] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-ganymede.com"] [uri "/"] [unique_id "ams8deXLvjUbUGVNlH6zLQAAAAE"]
[Thu Jul 30 12:58:46.283038 2026] [core:error] [pid 3146109:tid 3146109] [client 66.249.64.170:38921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:46.283083 2026] [core:error] [pid 3146109:tid 3146109] [client 66.249.64.170:38921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:48.402970 2026] [lsapi:warn] [pid 3152525:tid 3152525] [client 52.167.144.163:29581] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 12:58:48.403028 2026] [lsapi:warn] [pid 3152525:tid 3152525] [client 52.167.144.163:29581] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 12:58:48.694885 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:32490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:48.694919 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:48.746950 2026] [ssl:error] [pid 3156179:tid 3156179] (EAI 2)Name or service not known: [client 144.76.19.72:32502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:48.746991 2026] [ssl:error] [pid 3156179:tid 3156179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:48.882271 2026] [ssl:error] [pid 3158357:tid 3158357] (70014)End of file found: [client 216.73.216.199:50049] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:49.767805 2026] [core:error] [pid 3155506:tid 3155506] [client 66.249.66.66:40013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:49.767838 2026] [core:error] [pid 3155506:tid 3155506] [client 66.249.66.66:40013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:58:49.898448 2026] [lsapi:warn] [pid 3158923:tid 3158923] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:58:50.656430 2026] [authz_core:error] [pid 3156182:tid 3156182] [client 57.141.0.21:63198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:58:50.657049 2026] [authz_core:error] [pid 3156182:tid 3156182] [client 57.141.0.21:63198] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:58:51.800009 2026] [ssl:error] [pid 3160805:tid 3160805] (EAI 2)Name or service not known: [client 144.76.19.72:50696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:51.800048 2026] [ssl:error] [pid 3160805:tid 3160805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:51.852504 2026] [ssl:error] [pid 3146109:tid 3146109] (EAI 2)Name or service not known: [client 144.76.19.72:50704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:51.852532 2026] [ssl:error] [pid 3146109:tid 3146109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:52.199377 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:53632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:52.496016 2026] [ssl:error] [pid 3154494:tid 3154494] (70014)End of file found: [client 216.73.216.199:50555] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:54.908649 2026] [ssl:error] [pid 3154498:tid 3154498] (EAI 2)Name or service not known: [client 144.76.19.72:50720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:54.908684 2026] [ssl:error] [pid 3154498:tid 3154498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:54.961607 2026] [ssl:error] [pid 3152525:tid 3152525] (EAI 2)Name or service not known: [client 144.76.19.72:50730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:54.961633 2026] [ssl:error] [pid 3152525:tid 3152525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:55.194262 2026] [security2:error] [pid 3141098:tid 3141098] [client 43.159.36.180:40860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.eu"] [uri "/"] [unique_id "ams8f5lmU9CFjYwk2XqMLQAAADA"]
[Thu Jul 30 12:58:55.861993 2026] [ssl:error] [pid 3158316:tid 3158316] (70014)End of file found: [client 216.73.216.199:47746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:58:57.276774 2026] [security2:error] [pid 3158826:tid 3158826] [client 43.159.36.180:40246] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "ams8gfrsY-Rmp1x4sTWDCQAAACI"], referer: http://www.orgent.eu
[Thu Jul 30 12:58:58.020204 2026] [ssl:error] [pid 3158827:tid 3158827] (EAI 2)Name or service not known: [client 144.76.19.72:50736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:58.020244 2026] [ssl:error] [pid 3158827:tid 3158827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:58.077528 2026] [ssl:error] [pid 3154494:tid 3154494] (EAI 2)Name or service not known: [client 144.76.19.72:50746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:58:58.077560 2026] [ssl:error] [pid 3154494:tid 3154494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:58:59.820383 2026] [security2:error] [pid 3158826:tid 3158826] [client 43.164.190.28:35642] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tripodhome.co.uk"] [uri "/"] [unique_id "ams8g_rsY-Rmp1x4sTWDCgAAACI"]
[Thu Jul 30 12:59:00.261468 2026] [lsapi:warn] [pid 3156181:tid 3156181] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:59:00.507400 2026] [ssl:error] [pid 3144322:tid 3144322] (70014)End of file found: [client 216.73.216.199:32623] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:00.720985 2026] [security2:error] [pid 3160755:tid 3160755] [client 124.156.157.91:44124] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "ams8hAN85SlX7lx7-qu32wAAAAk"]
[Thu Jul 30 12:59:00.926202 2026] [security2:error] [pid 3150397:tid 3150397] [client 52.204.71.8:23725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "magic-cookie.co.uk"] [uri "/jargon/jarg423/"] [unique_id "ams8hO4slRwLWWEhQj_GtgAAACo"]
[Thu Jul 30 12:59:01.133560 2026] [ssl:error] [pid 3159608:tid 3159608] (EAI 2)Name or service not known: [client 144.76.19.72:49678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:01.133591 2026] [ssl:error] [pid 3159608:tid 3159608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:01.190856 2026] [ssl:error] [pid 3160755:tid 3160755] (EAI 2)Name or service not known: [client 144.76.19.72:49682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:01.190887 2026] [ssl:error] [pid 3160755:tid 3160755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:02.022515 2026] [core:error] [pid 3156180:tid 3156180] (13)Permission denied: [client 216.73.216.199:59971] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/iptable_nat/uevent
[Thu Jul 30 12:59:02.322928 2026] [security2:error] [pid 3156180:tid 3156180] [client 216.73.216.199:59971] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cagefs.log"] [unique_id "ams8hpgnEWofmi0a1jxhwwAAAD0"]
[Thu Jul 30 12:59:02.323229 2026] [security2:error] [pid 3156180:tid 3156180] [client 216.73.216.199:59971] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cagefs.log"] [unique_id "ams8hpgnEWofmi0a1jxhwwAAAD0"]
[Thu Jul 30 12:59:02.323454 2026] [security2:error] [pid 3156180:tid 3156180] [client 216.73.216.199:59971] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cagefs.log"] [unique_id "ams8hpgnEWofmi0a1jxhwwAAAD0"]
[Thu Jul 30 12:59:02.367267 2026] [security2:error] [pid 3150482:tid 3150482] [client 124.156.157.91:44602] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "ams8hls8Sv-WPLyZcTbBxQAAAEE"], referer: http://www.pamporovoexpress.com
[Thu Jul 30 12:59:02.444053 2026] [core:error] [pid 3161368:tid 3161368] [client 66.249.66.194:57363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:02.444093 2026] [core:error] [pid 3161368:tid 3161368] [client 66.249.66.194:57363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:02.561981 2026] [core:error] [pid 3161434:tid 3161434] [client 57.141.0.62:21106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:02.562024 2026] [core:error] [pid 3161434:tid 3161434] [client 57.141.0.62:21106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:02.933316 2026] [ssl:error] [pid 3156180:tid 3156180] (70014)End of file found: [client 216.73.216.199:59971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:03.413747 2026] [ssl:error] [pid 3156181:tid 3156181] (70014)End of file found: [client 216.73.216.199:52985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:04.184527 2026] [authz_core:error] [pid 3157917:tid 3157917] [client 57.141.0.41:29972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:59:04.185165 2026] [authz_core:error] [pid 3157917:tid 3157917] [client 57.141.0.41:29972] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:59:04.248594 2026] [ssl:error] [pid 3161519:tid 3161519] (EAI 2)Name or service not known: [client 144.76.19.72:49694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:04.248637 2026] [ssl:error] [pid 3161519:tid 3161519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:04.300876 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:49706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:04.300917 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:07.361522 2026] [ssl:error] [pid 3141098:tid 3141098] (EAI 2)Name or service not known: [client 144.76.19.72:49716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:07.361571 2026] [ssl:error] [pid 3141098:tid 3141098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:07.416045 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:49718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:07.416092 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:07.763529 2026] [ssl:error] [pid 3153255:tid 3153255] (70014)End of file found: [client 216.73.216.199:63814] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:07.893668 2026] [security2:error] [pid 3154498:tid 3154498] [client 51.83.35.19:43596] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "georgehotelofstamford.com"] [uri "/xmlrpc.php"] [unique_id "ams8ixNMlXoQjJ05sVCiLwAAACY"]
[Thu Jul 30 12:59:08.270616 2026] [ssl:error] [pid 3150397:tid 3150397] (70014)End of file found: [client 216.73.216.199:19072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:08.387625 2026] [authz_core:error] [pid 3141098:tid 3141098] [client 57.141.0.20:63862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:59:08.388255 2026] [authz_core:error] [pid 3141098:tid 3141098] [client 57.141.0.20:63862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:59:10.175511 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:27093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:10.469829 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:43970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:10.469863 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:10.522328 2026] [ssl:error] [pid 3154498:tid 3154498] (EAI 2)Name or service not known: [client 144.76.19.72:43978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:10.522355 2026] [ssl:error] [pid 3154498:tid 3154498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:10.737612 2026] [lsapi:warn] [pid 3158921:tid 3158921] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:59:13.088028 2026] [ssl:error] [pid 3158927:tid 3158927] (70014)End of file found: [client 216.73.216.199:2789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:13.593630 2026] [ssl:error] [pid 3153255:tid 3153255] (EAI 2)Name or service not known: [client 144.76.19.72:43982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:13.593665 2026] [ssl:error] [pid 3153255:tid 3153255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:13.646758 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:43992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:13.646791 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:14.102179 2026] [ssl:error] [pid 3161607:tid 3161607] (70014)End of file found: [client 216.73.216.199:51264] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:16.031728 2026] [core:error] [pid 3144292:tid 3144292] [client 66.249.66.167:41856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:16.031752 2026] [core:error] [pid 3144292:tid 3144292] [client 66.249.66.167:41856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:16.704574 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:44008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:16.704607 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:16.761257 2026] [ssl:error] [pid 3158316:tid 3158316] (EAI 2)Name or service not known: [client 144.76.19.72:44024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:16.761292 2026] [ssl:error] [pid 3158316:tid 3158316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:17.108729 2026] [ssl:error] [pid 3161185:tid 3161185] (70014)End of file found: [client 216.73.216.199:32869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:18.039968 2026] [security2:error] [pid 3161435:tid 3161435] [client 74.7.241.63:59238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/memorials.html"] [unique_id "ams8lreIiZKGCC3UCKNkbQAAABc"], referer: https://www.tdichurches.co.uk
[Thu Jul 30 12:59:18.508746 2026] [ssl:error] [pid 3158922:tid 3158922] (70014)End of file found: [client 216.73.216.199:53549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:19.823515 2026] [ssl:error] [pid 3160804:tid 3160804] (70014)End of file found: [client 216.73.216.199:61271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:20.515341 2026] [ssl:error] [pid 3152576:tid 3152576] (EAI 2)Name or service not known: [client 144.76.19.72:54478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:20.515365 2026] [ssl:error] [pid 3152576:tid 3152576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:20.646280 2026] [ssl:error] [pid 3158757:tid 3158757] (EAI 2)Name or service not known: [client 144.76.19.72:54494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:20.646310 2026] [ssl:error] [pid 3158757:tid 3158757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:21.203586 2026] [lsapi:warn] [pid 3161605:tid 3161605] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:59:21.405254 2026] [security2:error] [pid 3153255:tid 3153255] [client 3.94.40.182:50591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.josephashmore.org"] [uri "/robots.txt"] [unique_id "ams8mcGHQXeZjhfX5efgnAAAAAU"]
[Thu Jul 30 12:59:22.428863 2026] [ssl:error] [pid 3161605:tid 3161605] (70014)End of file found: [client 216.73.216.199:41899] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:23.714647 2026] [ssl:error] [pid 3152524:tid 3152524] (EAI 2)Name or service not known: [client 144.76.19.72:54496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:23.714713 2026] [ssl:error] [pid 3152524:tid 3152524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:23.766648 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:54498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:23.766683 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:24.638932 2026] [ssl:error] [pid 3150482:tid 3150482] (70014)End of file found: [client 216.73.216.199:21706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:24.641946 2026] [authz_core:error] [pid 3160679:tid 3160679] [client 57.141.0.70:54470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:59:24.642603 2026] [authz_core:error] [pid 3160679:tid 3160679] [client 57.141.0.70:54470] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:59:25.133885 2026] [ssl:error] [pid 3158823:tid 3158823] (70014)End of file found: [client 216.73.216.199:52028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:26.820928 2026] [ssl:error] [pid 3156181:tid 3156181] (EAI 2)Name or service not known: [client 144.76.19.72:54506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:26.820978 2026] [ssl:error] [pid 3156181:tid 3156181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:26.878675 2026] [ssl:error] [pid 3161564:tid 3161564] (EAI 2)Name or service not known: [client 144.76.19.72:54508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:26.878705 2026] [ssl:error] [pid 3161564:tid 3161564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:27.628035 2026] [security2:error] [pid 3160503:tid 3160503] [client 18.208.11.93:4916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.josephashmore.org"] [uri "/working/dadaab/11-08-13-draft-firesafety-for-kids-colour.pdf"] [unique_id "ams8n3j9XEFazPMhrPmLBAAAAAI"]
[Thu Jul 30 12:59:27.696401 2026] [cgi:error] [pid 3160805:tid 3160805] [client 47.128.117.224:12866] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 12:59:27.796513 2026] [core:error] [pid 3156181:tid 3156181] [client 66.249.66.39:58455] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:27.796542 2026] [core:error] [pid 3156181:tid 3156181] [client 66.249.66.39:58455] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:28.255357 2026] [ssl:error] [pid 3161606:tid 3161606] (70014)End of file found: [client 216.73.216.199:9876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:29.930189 2026] [ssl:error] [pid 3150397:tid 3150397] (70014)End of file found: [client 216.73.216.199:24190] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:29.932957 2026] [ssl:error] [pid 3157876:tid 3157876] (EAI 2)Name or service not known: [client 144.76.19.72:41492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:29.932982 2026] [ssl:error] [pid 3157876:tid 3157876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:29.984128 2026] [ssl:error] [pid 3160804:tid 3160804] (EAI 2)Name or service not known: [client 144.76.19.72:41494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:29.984179 2026] [ssl:error] [pid 3160804:tid 3160804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:30.235879 2026] [ssl:error] [pid 3154498:tid 3154498] (70014)End of file found: [client 216.73.216.199:1327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:30.833939 2026] [ssl:error] [pid 3160804:tid 3160804] (70014)End of file found: [client 216.73.216.199:1088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:31.256462 2026] [security2:error] [pid 3157876:tid 3157876] [client 114.119.146.111:50241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577145600/cat_ids~102/request_format~html"] [unique_id "ams8o_EPsRam6ua6ILhyZQAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~102/request_format~html
[Thu Jul 30 12:59:31.699000 2026] [security2:error] [pid 3156181:tid 3156181] [client 52.3.104.214:40797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.josephashmore.org"] [uri "/publications/Constructing-transitional-shelters24-12-05.pdf"] [unique_id "ams8owog60xCfovWGHXOVQAAAD4"]
[Thu Jul 30 12:59:31.737392 2026] [lsapi:warn] [pid 3161563:tid 3161563] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:59:32.740599 2026] [security2:error] [pid 3156182:tid 3156182] [client 114.119.146.111:50249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577145600/cat_ids~102/request_format~html"] [unique_id "ams8pFN4Sucee3Vu_RdzzgAAAD8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~102/request_format~html
[Thu Jul 30 12:59:33.039632 2026] [ssl:error] [pid 3161368:tid 3161368] (EAI 2)Name or service not known: [client 144.76.19.72:41510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:33.039674 2026] [ssl:error] [pid 3161368:tid 3161368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:33.092859 2026] [ssl:error] [pid 3153255:tid 3153255] (EAI 2)Name or service not known: [client 144.76.19.72:41524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:33.092888 2026] [ssl:error] [pid 3153255:tid 3153255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:34.649997 2026] [authz_core:error] [pid 3158827:tid 3158827] [client 20.193.250.173:57249] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:59:35.245080 2026] [ssl:error] [pid 3156181:tid 3156181] (70014)End of file found: [client 216.73.216.199:42183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:36.222656 2026] [ssl:error] [pid 3158358:tid 3158358] (EAI 2)Name or service not known: [client 144.76.19.72:41528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:36.222690 2026] [ssl:error] [pid 3158358:tid 3158358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:36.279308 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:41536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:36.279349 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:36.558137 2026] [ssl:error] [pid 3160503:tid 3160503] (70014)End of file found: [client 216.73.216.199:20090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:36.835172 2026] [security2:error] [pid 3161564:tid 3161564] [client 85.208.96.208:25106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/21-laps-entertainment-jobs"] [unique_id "ams8qAF3Z5Pp3spxAAokYAAAAB4"]
[Thu Jul 30 12:59:37.163990 2026] [ssl:error] [pid 3153255:tid 3153255] (70014)End of file found: [client 216.73.216.199:51811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:38.663976 2026] [security2:error] [pid 3161564:tid 3161564] [client 139.28.49.21:5724] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8qgF3Z5Pp3spxAAokYgAAAB4"]
[Thu Jul 30 12:59:38.664025 2026] [security2:error] [pid 3161564:tid 3161564] [client 139.28.49.21:5724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8qgF3Z5Pp3spxAAokYgAAAB4"]
[Thu Jul 30 12:59:38.664308 2026] [security2:error] [pid 3161564:tid 3161564] [client 139.28.49.21:5724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8qgF3Z5Pp3spxAAokYgAAAB4"]
[Thu Jul 30 12:59:39.179250 2026] [authz_core:error] [pid 3158826:tid 3158826] [client 57.141.0.17:43480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:59:39.179891 2026] [authz_core:error] [pid 3158826:tid 3158826] [client 57.141.0.17:43480] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:59:39.335159 2026] [ssl:error] [pid 3154454:tid 3154454] (EAI 2)Name or service not known: [client 144.76.19.72:41552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:39.335216 2026] [ssl:error] [pid 3154454:tid 3154454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:39.391431 2026] [ssl:error] [pid 3158316:tid 3158316] (EAI 2)Name or service not known: [client 144.76.19.72:41560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:39.391464 2026] [ssl:error] [pid 3158316:tid 3158316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:40.486080 2026] [core:error] [pid 3158357:tid 3158357] [client 66.249.66.167:44127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:40.486110 2026] [core:error] [pid 3158357:tid 3158357] [client 66.249.66.167:44127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:40.487099 2026] [core:error] [pid 3144292:tid 3144292] [client 66.249.66.3:61162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:40.487120 2026] [core:error] [pid 3144292:tid 3144292] [client 66.249.66.3:61162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:40.668026 2026] [security2:error] [pid 3158823:tid 3158823] [client 185.191.171.13:55412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webstersltd.com"] [uri "/robots.txt"] [unique_id "ams8rPvPQBHCPDQ4G-or4AAAAB8"]
[Thu Jul 30 12:59:40.677161 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:2930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:41.098983 2026] [security2:error] [pid 3144292:tid 3144292] [client 85.208.96.197:16790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webstersltd.com"] [uri "/web-internet-services.html"] [unique_id "ams8rR6eP1Zs1sN0lN9JjQAAABQ"]
[Thu Jul 30 12:59:41.891710 2026] [ssl:error] [pid 3156124:tid 3156124] (70014)End of file found: [client 216.73.216.199:59906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:42.217700 2026] [lsapi:warn] [pid 3144292:tid 3144292] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:59:42.467890 2026] [ssl:error] [pid 3136907:tid 3136907] (EAI 2)Name or service not known: [client 144.76.19.72:23632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:42.467931 2026] [ssl:error] [pid 3136907:tid 3136907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:42.471037 2026] [ssl:error] [pid 3154494:tid 3154494] (70014)End of file found: [client 216.73.216.199:41295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:42.525662 2026] [ssl:error] [pid 3158316:tid 3158316] (EAI 2)Name or service not known: [client 144.76.19.72:23648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:42.525691 2026] [ssl:error] [pid 3158316:tid 3158316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:42.860915 2026] [security2:error] [pid 3161185:tid 3161185] [client 187.12.111.78:40447] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8rhBhWAWs9kLwLYyM-wAAAAw"]
[Thu Jul 30 12:59:42.860976 2026] [security2:error] [pid 3161185:tid 3161185] [client 187.12.111.78:40447] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8rhBhWAWs9kLwLYyM-wAAAAw"]
[Thu Jul 30 12:59:42.861227 2026] [security2:error] [pid 3161185:tid 3161185] [client 187.12.111.78:40447] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8rhBhWAWs9kLwLYyM-wAAAAw"]
[Thu Jul 30 12:59:43.132402 2026] [security2:error] [pid 3158358:tid 3158358] [client 114.119.157.221:61663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "butteredcat.com"] [uri "/stephencater.co.uk/"] [unique_id "ams8rweoC9um3MXJxgvMkwAAAA4"], referer: https://butteredcat.com/
[Thu Jul 30 12:59:43.456385 2026] [security2:error] [pid 3136907:tid 3136907] [client 194.147.114.175:57092] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "ams8rzwHtgQLmKcg68DCoQAAAAY"]
[Thu Jul 30 12:59:44.126119 2026] [security2:error] [pid 3158316:tid 3158316] [client 47.128.99.122:60512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "ams8sOXLvjUbUGVNlH6zTQAAAAE"]
[Thu Jul 30 12:59:45.354107 2026] [authz_core:error] [pid 3158928:tid 3158928] [client 57.141.0.6:58800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:59:45.354731 2026] [authz_core:error] [pid 3158928:tid 3158928] [client 57.141.0.6:58800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:59:45.584212 2026] [ssl:error] [pid 3148364:tid 3148364] (EAI 2)Name or service not known: [client 144.76.19.72:23650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:45.584243 2026] [ssl:error] [pid 3148364:tid 3148364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:45.637207 2026] [ssl:error] [pid 3158316:tid 3158316] (EAI 2)Name or service not known: [client 144.76.19.72:23664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:45.637256 2026] [ssl:error] [pid 3158316:tid 3158316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:46.101606 2026] [ssl:error] [pid 3157917:tid 3157917] (70014)End of file found: [client 216.73.216.199:35535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:46.729216 2026] [security2:error] [pid 3158358:tid 3158358] [client 170.247.244.147:21872] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8sgeoC9um3MXJxgvMlwAAAA4"]
[Thu Jul 30 12:59:46.729264 2026] [security2:error] [pid 3158358:tid 3158358] [client 170.247.244.147:21872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams8sgeoC9um3MXJxgvMlwAAAA4"]
[Thu Jul 30 12:59:46.729552 2026] [security2:error] [pid 3158358:tid 3158358] [client 170.247.244.147:21872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams8sgeoC9um3MXJxgvMlwAAAA4"]
[Thu Jul 30 12:59:47.700794 2026] [ssl:error] [pid 3152525:tid 3152525] (70014)End of file found: [client 216.73.216.199:21912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:48.166806 2026] [authz_core:error] [pid 3158921:tid 3158921] [client 57.141.0.12:44586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:59:48.167432 2026] [authz_core:error] [pid 3158921:tid 3158921] [client 57.141.0.12:44586] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:59:48.194012 2026] [ssl:error] [pid 3158928:tid 3158928] (70014)End of file found: [client 216.73.216.199:29539] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:48.693527 2026] [ssl:error] [pid 3154494:tid 3154494] (EAI 2)Name or service not known: [client 144.76.19.72:23672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:48.693559 2026] [ssl:error] [pid 3154494:tid 3154494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:48.749463 2026] [ssl:error] [pid 3161563:tid 3161563] (EAI 2)Name or service not known: [client 144.76.19.72:23686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:48.749511 2026] [ssl:error] [pid 3161563:tid 3161563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:51.360396 2026] [authz_core:error] [pid 3153255:tid 3153255] [client 20.193.250.173:49941] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 12:59:51.801781 2026] [ssl:error] [pid 3161606:tid 3161606] (EAI 2)Name or service not known: [client 144.76.19.72:40120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:51.801833 2026] [ssl:error] [pid 3161606:tid 3161606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:51.858028 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:40130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:51.858062 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:51.924022 2026] [ssl:error] [pid 3154454:tid 3154454] (70014)End of file found: [client 216.73.216.199:3672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:52.683610 2026] [lsapi:warn] [pid 3161368:tid 3161368] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 12:59:53.732781 2026] [core:error] [pid 3156182:tid 3156182] [client 66.249.66.39:55141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:53.732810 2026] [core:error] [pid 3156182:tid 3156182] [client 66.249.66.39:55141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 12:59:54.032343 2026] [ssl:error] [pid 3158823:tid 3158823] (70014)End of file found: [client 216.73.216.199:57404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:54.518223 2026] [ssl:error] [pid 3158928:tid 3158928] (70014)End of file found: [client 216.73.216.199:1532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:54.912602 2026] [ssl:error] [pid 3156181:tid 3156181] (EAI 2)Name or service not known: [client 144.76.19.72:40138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:54.912628 2026] [ssl:error] [pid 3156181:tid 3156181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:54.965641 2026] [ssl:error] [pid 3162024:tid 3162024] (EAI 2)Name or service not known: [client 144.76.19.72:40152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:54.965670 2026] [ssl:error] [pid 3162024:tid 3162024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:55.792919 2026] [authz_core:error] [pid 3160679:tid 3160679] [client 57.141.0.12:62306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 12:59:55.793575 2026] [authz_core:error] [pid 3160679:tid 3160679] [client 57.141.0.12:62306] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 12:59:57.553822 2026] [ssl:error] [pid 3148364:tid 3148364] (70014)End of file found: [client 216.73.216.199:49341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:57.962474 2026] [ssl:error] [pid 3161519:tid 3161519] (70014)End of file found: [client 216.73.216.199:1729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:58.022473 2026] [ssl:error] [pid 3154454:tid 3154454] (EAI 2)Name or service not known: [client 144.76.19.72:40162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:58.022507 2026] [ssl:error] [pid 3154454:tid 3154454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:58.078292 2026] [ssl:error] [pid 3161434:tid 3161434] (EAI 2)Name or service not known: [client 144.76.19.72:40178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 12:59:58.078321 2026] [ssl:error] [pid 3161434:tid 3161434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 12:59:58.552351 2026] [ssl:error] [pid 3156177:tid 3156177] (70014)End of file found: [client 216.73.216.199:17333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 12:59:59.874097 2026] [authz_core:error] [pid 3161185:tid 3161185] [client 66.249.66.34:56144] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 12:59:59.876776 2026] [authz_core:error] [pid 3161185:tid 3161185] [client 66.249.66.34:56144] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:00:00.161879 2026] [core:error] [pid 3161564:tid 3161564] [client 66.249.66.167:38626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:00.161911 2026] [core:error] [pid 3161564:tid 3161564] [client 66.249.66.167:38626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:01.134910 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:52618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:01.134944 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:01.150359 2026] [authz_core:error] [pid 3161564:tid 3161564] [client 57.141.0.8:45404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:00:01.150978 2026] [authz_core:error] [pid 3161564:tid 3161564] [client 57.141.0.8:45404] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:00:01.186115 2026] [ssl:error] [pid 3158921:tid 3158921] (EAI 2)Name or service not known: [client 144.76.19.72:52624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:01.186153 2026] [ssl:error] [pid 3158921:tid 3158921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:02.676447 2026] [security2:error] [pid 3154494:tid 3154494] [client 43.131.32.36:38942] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.render-farm.co.uk"] [uri "/"] [unique_id "ams8wubCuRdhuwG44qO6JAAAABw"]
[Thu Jul 30 13:00:03.166756 2026] [lsapi:warn] [pid 3160805:tid 3160805] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:00:03.670728 2026] [ssl:error] [pid 3148364:tid 3148364] (70014)End of file found: [client 216.73.216.199:15443] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:04.072245 2026] [access_compat:error] [pid 3159608:tid 3159608] [client 20.104.16.169:40806] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:00:04.239851 2026] [ssl:error] [pid 3158358:tid 3158358] (EAI 2)Name or service not known: [client 144.76.19.72:52632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:04.239885 2026] [ssl:error] [pid 3158358:tid 3158358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:04.277432 2026] [ssl:error] [pid 3164000:tid 3164000] (70014)End of file found: [client 216.73.216.199:51551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:04.297156 2026] [ssl:error] [pid 3152576:tid 3152576] (EAI 2)Name or service not known: [client 144.76.19.72:52638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:04.297184 2026] [ssl:error] [pid 3152576:tid 3152576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:04.890830 2026] [security2:error] [pid 3152576:tid 3152576] [client 43.155.162.41:34876] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchlingfair.com"] [uri "/"] [unique_id "ams8xJoe-03o4nTR5wVzlgAAAC4"]
[Thu Jul 30 13:00:05.847609 2026] [core:error] [pid 3161519:tid 3161519] [client 66.249.66.167:64062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:05.847636 2026] [core:error] [pid 3161519:tid 3161519] [client 66.249.66.167:64062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:06.424190 2026] [authz_core:error] [pid 3152576:tid 3152576] [client 57.141.0.47:24448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:00:06.424818 2026] [authz_core:error] [pid 3152576:tid 3152576] [client 57.141.0.47:24448] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:00:06.519646 2026] [core:error] [pid 3158928:tid 3158928] [client 66.249.64.170:41400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:06.519671 2026] [core:error] [pid 3158928:tid 3158928] [client 66.249.64.170:41400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:07.283777 2026] [ssl:error] [pid 3161607:tid 3161607] (70014)End of file found: [client 216.73.216.199:48413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:07.350810 2026] [ssl:error] [pid 3161563:tid 3161563] (EAI 2)Name or service not known: [client 144.76.19.72:52642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:07.350840 2026] [ssl:error] [pid 3161563:tid 3161563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:07.405433 2026] [ssl:error] [pid 3152576:tid 3152576] (EAI 2)Name or service not known: [client 144.76.19.72:52646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:07.405476 2026] [ssl:error] [pid 3152576:tid 3152576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:08.980836 2026] [ssl:error] [pid 3158928:tid 3158928] (70014)End of file found: [client 216.73.216.199:49821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:09.582539 2026] [ssl:error] [pid 3160805:tid 3160805] (70014)End of file found: [client 216.73.216.199:11729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:10.489929 2026] [ssl:error] [pid 3144292:tid 3144292] (EAI 2)Name or service not known: [client 144.76.19.72:19494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:10.489968 2026] [ssl:error] [pid 3144292:tid 3144292] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:10.542965 2026] [ssl:error] [pid 3156177:tid 3156177] (EAI 2)Name or service not known: [client 144.76.19.72:19510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:10.542990 2026] [ssl:error] [pid 3156177:tid 3156177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:12.478759 2026] [security2:error] [pid 3148364:tid 3148364] [client 110.249.201.8:13882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.josephashmore.org"] [uri "/robots.txt"] [unique_id "ams8zLY3mX6-unRCsxarRgAAAC0"]
[Thu Jul 30 13:00:12.597088 2026] [ssl:error] [pid 3159608:tid 3159608] (70014)End of file found: [client 216.73.216.199:16488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:13.614437 2026] [ssl:error] [pid 3153255:tid 3153255] (EAI 2)Name or service not known: [client 144.76.19.72:19520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:13.614478 2026] [ssl:error] [pid 3153255:tid 3153255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:13.632731 2026] [lsapi:warn] [pid 3161185:tid 3161185] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:00:13.674871 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:19522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:13.674901 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:15.116251 2026] [ssl:error] [pid 3142158:tid 3142158] (70014)End of file found: [client 216.73.216.199:61364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:15.613226 2026] [ssl:error] [pid 3161563:tid 3161563] (70014)End of file found: [client 216.73.216.199:46924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:16.728951 2026] [ssl:error] [pid 3158358:tid 3158358] (EAI 2)Name or service not known: [client 144.76.19.72:19538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:16.728987 2026] [ssl:error] [pid 3158358:tid 3158358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:16.782600 2026] [ssl:error] [pid 3155936:tid 3155936] (EAI 2)Name or service not known: [client 144.76.19.72:19550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:16.782641 2026] [ssl:error] [pid 3155936:tid 3155936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:17.078243 2026] [security2:error] [pid 3154454:tid 3154454] [client 114.119.128.126:55487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/wp-content/uploads/2011/11/"] [unique_id "ams80b4S3Nz42oFPzdNXXQAAABA"], referer: http://www.localhero.org.uk/2011/11/dsc-lovember-2-beast?ak_action=reject_mobile
[Thu Jul 30 13:00:18.025815 2026] [core:error] [pid 3152576:tid 3152576] (13)Permission denied: [client 216.73.216.199:56793] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/nfit/uevent
[Thu Jul 30 13:00:18.428716 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:56793] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:18.533035 2026] [core:error] [pid 3156177:tid 3156177] [client 66.249.66.66:37224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:18.533075 2026] [core:error] [pid 3156177:tid 3156177] [client 66.249.66.66:37224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:18.779190 2026] [security2:error] [pid 3161606:tid 3161606] [client 114.119.138.235:52485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/A.19-Sudan-Darfur-2004-ongoing-Conflict.pdf"] [unique_id "ams80rAC2pOuFDW-K06fCQAAACk"], referer: https://www.shelterprojects.org/editions.html
[Thu Jul 30 13:00:19.840797 2026] [ssl:error] [pid 3156177:tid 3156177] (EAI 2)Name or service not known: [client 144.76.19.72:45574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:19.840832 2026] [ssl:error] [pid 3156177:tid 3156177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:19.893706 2026] [ssl:error] [pid 3148364:tid 3148364] (EAI 2)Name or service not known: [client 144.76.19.72:45590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:19.893740 2026] [ssl:error] [pid 3148364:tid 3148364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:20.051225 2026] [authz_core:error] [pid 3161434:tid 3161434] [client 57.141.0.68:50812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:00:20.051853 2026] [authz_core:error] [pid 3161434:tid 3161434] [client 57.141.0.68:50812] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:00:20.429476 2026] [ssl:error] [pid 3164720:tid 3164720] (70014)End of file found: [client 216.73.216.199:1051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:20.853413 2026] [core:error] [pid 3160679:tid 3160679] [client 66.249.66.8:52546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:20.853436 2026] [core:error] [pid 3160679:tid 3160679] [client 66.249.66.8:52546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:21.742943 2026] [ssl:error] [pid 3156177:tid 3156177] (70014)End of file found: [client 216.73.216.199:50161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:22.951245 2026] [ssl:error] [pid 3161519:tid 3161519] (EAI 2)Name or service not known: [client 144.76.19.72:45596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:22.951280 2026] [ssl:error] [pid 3161519:tid 3161519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:22.993461 2026] [security2:error] [pid 3153255:tid 3153255] [client 150.5.130.220:62607] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams81sGHQXeZjhfX5efgswAAAAU"]
[Thu Jul 30 13:00:22.993528 2026] [security2:error] [pid 3153255:tid 3153255] [client 150.5.130.220:62607] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams81sGHQXeZjhfX5efgswAAAAU"]
[Thu Jul 30 13:00:22.993788 2026] [security2:error] [pid 3153255:tid 3153255] [client 150.5.130.220:62607] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams81sGHQXeZjhfX5efgswAAAAU"]
[Thu Jul 30 13:00:23.005479 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:45600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:23.005507 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:24.108462 2026] [lsapi:warn] [pid 3158928:tid 3158928] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:00:24.449809 2026] [ssl:error] [pid 3161563:tid 3161563] (70014)End of file found: [client 216.73.216.199:17756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:26.005416 2026] [authz_core:error] [pid 3158358:tid 3158358] [client 57.141.0.66:42446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:00:26.006035 2026] [authz_core:error] [pid 3158358:tid 3158358] [client 57.141.0.66:42446] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:00:26.091626 2026] [ssl:error] [pid 3159608:tid 3159608] (EAI 2)Name or service not known: [client 144.76.19.72:45610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:26.091655 2026] [ssl:error] [pid 3159608:tid 3159608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:26.148929 2026] [ssl:error] [pid 3158928:tid 3158928] (EAI 2)Name or service not known: [client 144.76.19.72:45622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:26.148955 2026] [ssl:error] [pid 3158928:tid 3158928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:27.093625 2026] [authz_core:error] [pid 3158358:tid 3158358] [client 66.249.66.35:50527] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:00:27.096420 2026] [authz_core:error] [pid 3158358:tid 3158358] [client 66.249.66.35:50527] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:00:27.131194 2026] [security2:error] [pid 3162435:tid 3162435] [client 82.209.73.248:3361] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams824DM2ado2BikDUymAwAAAA0"]
[Thu Jul 30 13:00:27.131249 2026] [security2:error] [pid 3162435:tid 3162435] [client 82.209.73.248:3361] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams824DM2ado2BikDUymAwAAAA0"]
[Thu Jul 30 13:00:27.131535 2026] [security2:error] [pid 3162435:tid 3162435] [client 82.209.73.248:3361] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams824DM2ado2BikDUymAwAAAA0"]
[Thu Jul 30 13:00:27.365395 2026] [ssl:error] [pid 3161607:tid 3161607] (70014)End of file found: [client 216.73.216.199:63066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:27.972756 2026] [ssl:error] [pid 3158928:tid 3158928] (70014)End of file found: [client 216.73.216.199:49989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:29.290905 2026] [ssl:error] [pid 3165081:tid 3165081] (EAI 2)Name or service not known: [client 144.76.19.72:45630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:29.290947 2026] [ssl:error] [pid 3165081:tid 3165081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:29.346202 2026] [ssl:error] [pid 3161606:tid 3161606] (EAI 2)Name or service not known: [client 144.76.19.72:45644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:29.346238 2026] [ssl:error] [pid 3161606:tid 3161606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:30.797116 2026] [ssl:error] [pid 3161434:tid 3161434] (70014)End of file found: [client 216.73.216.199:54363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:31.215770 2026] [core:error] [pid 3161519:tid 3161519] [client 66.249.66.39:59100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:31.215801 2026] [core:error] [pid 3161519:tid 3161519] [client 66.249.66.39:59100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:31.704570 2026] [ssl:error] [pid 3161519:tid 3161519] (70014)End of file found: [client 216.73.216.199:56236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:32.301855 2026] [ssl:error] [pid 3152576:tid 3152576] (70014)End of file found: [client 216.73.216.199:65383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:32.399116 2026] [ssl:error] [pid 3165166:tid 3165166] (EAI 2)Name or service not known: [client 144.76.19.72:63190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:32.399165 2026] [ssl:error] [pid 3165166:tid 3165166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:32.451041 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:63206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:32.451089 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:32.537942 2026] [authz_core:error] [pid 3160679:tid 3160679] [client 66.249.66.34:43664] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:00:32.540709 2026] [authz_core:error] [pid 3160679:tid 3160679] [client 66.249.66.34:43664] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:00:34.504812 2026] [security2:error] [pid 3152525:tid 3152525] [client 74.7.241.25:39600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "ams84qHx1cxZy_8dMSRg6wAAAB0"]
[Thu Jul 30 13:00:34.634661 2026] [lsapi:warn] [pid 3161607:tid 3161607] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:00:35.011989 2026] [access_compat:error] [pid 3161606:tid 3161606] [client 45.158.164.139:55074] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:00:35.504477 2026] [ssl:error] [pid 3161564:tid 3161564] (EAI 2)Name or service not known: [client 144.76.19.72:63220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:35.504510 2026] [ssl:error] [pid 3161564:tid 3161564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:35.558614 2026] [ssl:error] [pid 3157917:tid 3157917] (EAI 2)Name or service not known: [client 144.76.19.72:63222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:35.558648 2026] [ssl:error] [pid 3157917:tid 3157917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:36.904858 2026] [authz_core:error] [pid 3161434:tid 3161434] [client 57.141.0.65:40346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:00:36.905527 2026] [authz_core:error] [pid 3161434:tid 3161434] [client 57.141.0.65:40346] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:00:37.131388 2026] [ssl:error] [pid 3158823:tid 3158823] (70014)End of file found: [client 216.73.216.199:50950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:37.301027 2026] [security2:error] [pid 3161563:tid 3161563] [client 185.191.171.3:38820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/what-happened-to-norman-the-cow-from-city-slickers"] [unique_id "ams85Xyz0iFiyQVTVBedFwAAABs"]
[Thu Jul 30 13:00:38.615256 2026] [ssl:error] [pid 3161434:tid 3161434] (EAI 2)Name or service not known: [client 144.76.19.72:63228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:38.615289 2026] [ssl:error] [pid 3161434:tid 3161434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:38.632591 2026] [ssl:error] [pid 3161564:tid 3161564] (70014)End of file found: [client 216.73.216.199:62077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:38.667188 2026] [ssl:error] [pid 3164001:tid 3164001] (EAI 2)Name or service not known: [client 144.76.19.72:63238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:38.667242 2026] [ssl:error] [pid 3164001:tid 3164001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:40.141724 2026] [ssl:error] [pid 3155936:tid 3155936] (70014)End of file found: [client 216.73.216.199:51726] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:40.871189 2026] [security2:error] [pid 3159608:tid 3159608] [client 114.119.132.89:58899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-488.xml"] [unique_id "ams86IcvmICqdv0CDfHw4wAAAAc"]
[Thu Jul 30 13:00:41.723154 2026] [ssl:error] [pid 3157876:tid 3157876] (EAI 2)Name or service not known: [client 144.76.19.72:52846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:41.723182 2026] [ssl:error] [pid 3157876:tid 3157876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:41.776509 2026] [ssl:error] [pid 3161563:tid 3161563] (EAI 2)Name or service not known: [client 144.76.19.72:52862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:41.776543 2026] [ssl:error] [pid 3161563:tid 3161563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:42.429605 2026] [ssl:error] [pid 3164000:tid 3164000] (70014)End of file found: [client 216.73.216.199:40795] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:43.896448 2026] [core:error] [pid 3164668:tid 3164668] [client 66.249.66.167:56202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:43.896479 2026] [core:error] [pid 3164668:tid 3164668] [client 66.249.66.167:56202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:43.901546 2026] [core:error] [pid 3157876:tid 3157876] [client 66.249.66.39:40116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:43.901584 2026] [core:error] [pid 3157876:tid 3157876] [client 66.249.66.39:40116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:44.661699 2026] [ssl:error] [pid 3157917:tid 3157917] (70014)End of file found: [client 216.73.216.199:12164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:44.851328 2026] [ssl:error] [pid 3152525:tid 3152525] (EAI 2)Name or service not known: [client 144.76.19.72:52864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:44.851358 2026] [ssl:error] [pid 3152525:tid 3152525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:44.908350 2026] [ssl:error] [pid 3161519:tid 3161519] (EAI 2)Name or service not known: [client 144.76.19.72:52874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:44.908384 2026] [ssl:error] [pid 3161519:tid 3161519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:45.099740 2026] [lsapi:warn] [pid 3164001:tid 3164001] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:00:46.092475 2026] [authz_core:error] [pid 3156181:tid 3156181] [client 57.141.0.40:22394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:00:46.093123 2026] [authz_core:error] [pid 3156181:tid 3156181] [client 57.141.0.40:22394] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:00:46.167117 2026] [core:error] [pid 3165647:tid 3165647] (13)Permission denied: [client 216.73.216.199:46889] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/bin/sudoedit
[Thu Jul 30 13:00:47.964687 2026] [ssl:error] [pid 3164719:tid 3164719] (EAI 2)Name or service not known: [client 144.76.19.72:52876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:47.964729 2026] [ssl:error] [pid 3164719:tid 3164719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:48.025628 2026] [ssl:error] [pid 3162301:tid 3162301] (EAI 2)Name or service not known: [client 144.76.19.72:52882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:48.025672 2026] [ssl:error] [pid 3162301:tid 3162301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:48.875731 2026] [ssl:error] [pid 3165647:tid 3165647] (70014)End of file found: [client 216.73.216.199:46889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:50.845974 2026] [security2:error] [pid 3165118:tid 3165118] [client 114.119.157.177:33075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/root-chair/"] [unique_id "ams88r-SsWMAa8hIeO3Q5wAAABk"], referer: http://tripodhome.co.uk/products/
[Thu Jul 30 13:00:51.087099 2026] [ssl:error] [pid 3164000:tid 3164000] (EAI 2)Name or service not known: [client 144.76.19.72:30578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:51.087131 2026] [ssl:error] [pid 3164000:tid 3164000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:51.144636 2026] [ssl:error] [pid 3159608:tid 3159608] (EAI 2)Name or service not known: [client 144.76.19.72:30594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:51.144671 2026] [ssl:error] [pid 3159608:tid 3159608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:52.784681 2026] [ssl:error] [pid 3158357:tid 3158357] (70014)End of file found: [client 216.73.216.199:41366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:53.391168 2026] [ssl:error] [pid 3148364:tid 3148364] (70014)End of file found: [client 216.73.216.199:52954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:54.201043 2026] [ssl:error] [pid 3165993:tid 3165993] (EAI 2)Name or service not known: [client 144.76.19.72:30604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:54.201092 2026] [ssl:error] [pid 3165993:tid 3165993] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:54.258883 2026] [ssl:error] [pid 3165081:tid 3165081] (EAI 2)Name or service not known: [client 144.76.19.72:30606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:54.258918 2026] [ssl:error] [pid 3165081:tid 3165081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:54.595687 2026] [ssl:error] [pid 3158928:tid 3158928] (70014)End of file found: [client 216.73.216.199:2931] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:00:55.249644 2026] [security2:error] [pid 3161564:tid 3161564] [client 49.51.166.228:52444] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "ams89wF3Z5Pp3spxAAokiwAAAB4"]
[Thu Jul 30 13:00:55.250628 2026] [authz_core:error] [pid 3161564:tid 3161564] [client 49.51.166.228:52444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:00:55.251173 2026] [authz_core:error] [pid 3161564:tid 3161564] [client 49.51.166.228:52444] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:00:55.568704 2026] [lsapi:warn] [pid 3161435:tid 3161435] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:00:56.577630 2026] [core:error] [pid 3158827:tid 3158827] [client 66.249.66.167:46673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:56.577661 2026] [core:error] [pid 3158827:tid 3158827] [client 66.249.66.167:46673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:00:57.319018 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:30616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:57.319050 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:00:57.371496 2026] [ssl:error] [pid 3165647:tid 3165647] (EAI 2)Name or service not known: [client 144.76.19.72:30630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:00:57.371527 2026] [ssl:error] [pid 3165647:tid 3165647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:00.210824 2026] [ssl:error] [pid 3164000:tid 3164000] (70014)End of file found: [client 216.73.216.199:10816] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:00.432326 2026] [ssl:error] [pid 3156177:tid 3156177] (EAI 2)Name or service not known: [client 144.76.19.72:42084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:00.432355 2026] [ssl:error] [pid 3156177:tid 3156177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:00.485383 2026] [ssl:error] [pid 3152525:tid 3152525] (EAI 2)Name or service not known: [client 144.76.19.72:42094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:00.485413 2026] [ssl:error] [pid 3152525:tid 3152525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:01.349214 2026] [security2:error] [pid 3141098:tid 3141098] [client 185.191.171.13:37882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4422.0.html"] [unique_id "ams8_ZlmU9CFjYwk2XqMQwAAADA"]
[Thu Jul 30 13:01:02.211134 2026] [ssl:error] [pid 3165117:tid 3165117] (70014)End of file found: [client 216.73.216.199:61850] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:02.620410 2026] [ssl:error] [pid 3161563:tid 3161563] (70014)End of file found: [client 216.73.216.199:7411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:03.538813 2026] [ssl:error] [pid 3166364:tid 3166364] (EAI 2)Name or service not known: [client 144.76.19.72:42106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:03.538845 2026] [ssl:error] [pid 3166364:tid 3166364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:03.596881 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:42108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:03.596909 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:03.756215 2026] [authz_core:error] [pid 3164668:tid 3164668] [client 57.141.0.71:20180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:01:03.756845 2026] [authz_core:error] [pid 3164668:tid 3164668] [client 57.141.0.71:20180] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:01:06.046841 2026] [lsapi:warn] [pid 3156177:tid 3156177] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:01:06.490001 2026] [security2:error] [pid 3166420:tid 3166420] [client 185.191.171.2:21832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2267.0/prev_next,next.html"] [unique_id "ams9Ai7hbQvvxgcdoxtUiwAAACg"]
[Thu Jul 30 13:01:06.653048 2026] [ssl:error] [pid 3166297:tid 3166297] (EAI 2)Name or service not known: [client 144.76.19.72:42122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:06.653114 2026] [ssl:error] [pid 3166297:tid 3166297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:06.709006 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:42128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:06.709037 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:06.829685 2026] [ssl:error] [pid 3165647:tid 3165647] (70014)End of file found: [client 216.73.216.199:22858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:07.602103 2026] [security2:error] [pid 3141098:tid 3141098] [client 45.148.10.120:57206] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.org.uk"] [uri "/.env"] [unique_id "ams9A5lmU9CFjYwk2XqMSQAAADA"]
[Thu Jul 30 13:01:07.602247 2026] [security2:error] [pid 3141098:tid 3141098] [client 45.148.10.120:57206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.org.uk"] [uri "/.env"] [unique_id "ams9A5lmU9CFjYwk2XqMSQAAADA"]
[Thu Jul 30 13:01:07.602448 2026] [security2:error] [pid 3141098:tid 3141098] [client 45.148.10.120:57206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.org.uk"] [uri "/.env"] [unique_id "ams9A5lmU9CFjYwk2XqMSQAAADA"]
[Thu Jul 30 13:01:08.033752 2026] [ssl:error] [pid 3166297:tid 3166297] (70014)End of file found: [client 216.73.216.199:19290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:08.087383 2026] [cgi:error] [pid 3164720:tid 3164720] [client 20.104.22.47:19133] AH02812: stderr from /home/thepryor/dev1.the-pryors.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:01:09.116229 2026] [security2:error] [pid 3166423:tid 3166423] [client 114.119.146.111:54949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~30"] [unique_id "ams9BfTaIMk1aP8tIeaT5QAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~30
[Thu Jul 30 13:01:09.420879 2026] [core:error] [pid 3158823:tid 3158823] [client 66.249.66.5:58935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:09.420915 2026] [core:error] [pid 3158823:tid 3158823] [client 66.249.66.5:58935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:09.764986 2026] [ssl:error] [pid 3136907:tid 3136907] (EAI 2)Name or service not known: [client 144.76.19.72:38578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:09.765012 2026] [ssl:error] [pid 3136907:tid 3136907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:09.817518 2026] [ssl:error] [pid 3162301:tid 3162301] (EAI 2)Name or service not known: [client 144.76.19.72:38582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:09.817543 2026] [ssl:error] [pid 3162301:tid 3162301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:11.745893 2026] [authz_core:error] [pid 3161564:tid 3161564] [client 66.249.66.34:64857] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:01:11.748592 2026] [authz_core:error] [pid 3161564:tid 3161564] [client 66.249.66.34:64857] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:01:11.952418 2026] [ssl:error] [pid 3162435:tid 3162435] (70014)End of file found: [client 216.73.216.199:51781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:12.190352 2026] [security2:error] [pid 3159608:tid 3159608] [client 114.119.146.111:50281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~30"] [unique_id "ams9CIcvmICqdv0CDfHw8wAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~30
[Thu Jul 30 13:01:12.537571 2026] [core:error] [pid 3158357:tid 3158357] [client 66.249.66.39:40978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:12.537595 2026] [core:error] [pid 3158357:tid 3158357] [client 66.249.66.39:40978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:12.713747 2026] [core:error] [pid 3158357:tid 3158357] [client 57.141.0.67:32400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:12.713769 2026] [core:error] [pid 3158357:tid 3158357] [client 57.141.0.67:32400] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:13.111003 2026] [ssl:error] [pid 3166422:tid 3166422] (EAI 2)Name or service not known: [client 144.76.19.72:38590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:13.111046 2026] [ssl:error] [pid 3166422:tid 3166422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:13.150536 2026] [authz_core:error] [pid 3164720:tid 3164720] [client 20.104.22.47:19133] AH01630: client denied by server configuration: /home/thepryor/dev1.the-pryors.co.uk/php.ini
[Thu Jul 30 13:01:13.179289 2026] [ssl:error] [pid 3166422:tid 3166422] (EAI 2)Name or service not known: [client 144.76.19.72:38602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:13.179311 2026] [ssl:error] [pid 3166422:tid 3166422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:13.352763 2026] [ssl:error] [pid 3166422:tid 3166422] (70014)End of file found: [client 216.73.216.199:9727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:13.762203 2026] [ssl:error] [pid 3165166:tid 3165166] (70014)End of file found: [client 216.73.216.199:1201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:15.290225 2026] [core:error] [pid 3161519:tid 3161519] [client 66.249.64.170:56175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:15.290262 2026] [core:error] [pid 3161519:tid 3161519] [client 66.249.64.170:56175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:16.234514 2026] [ssl:error] [pid 3154454:tid 3154454] (EAI 2)Name or service not known: [client 144.76.19.72:38616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:16.234545 2026] [ssl:error] [pid 3154454:tid 3154454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:16.287478 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:38628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:16.287520 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:16.592180 2026] [lsapi:warn] [pid 3136907:tid 3136907] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:01:17.278720 2026] [ssl:error] [pid 3166297:tid 3166297] (70014)End of file found: [client 216.73.216.199:65496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:17.893861 2026] [security2:error] [pid 3160805:tid 3160805] [client 114.119.148.163:39893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hoo-hah.co.uk"] [uri "/images/igallery/resized/1-100/img-1013-93-1000-1000-80.jpeg"] [unique_id "ams9DXDB2rerQnroCspLWAAAABE"], referer: https://www.hoo-hah.co.uk/?i=img-1013
[Thu Jul 30 13:01:18.796422 2026] [ssl:error] [pid 3156182:tid 3156182] (70014)End of file found: [client 216.73.216.199:1932] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:19.349843 2026] [ssl:error] [pid 3154454:tid 3154454] (EAI 2)Name or service not known: [client 144.76.19.72:38630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:19.349889 2026] [ssl:error] [pid 3154454:tid 3154454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:19.406623 2026] [ssl:error] [pid 3166423:tid 3166423] (EAI 2)Name or service not known: [client 144.76.19.72:38644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:19.406665 2026] [ssl:error] [pid 3166423:tid 3166423] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:19.491505 2026] [ssl:error] [pid 3160805:tid 3160805] (70014)End of file found: [client 216.73.216.199:42027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:19.912656 2026] [authz_core:error] [pid 3164720:tid 3164720] [client 20.104.22.47:19133] AH01630: client denied by server configuration: /home/thepryor/dev1.the-pryors.co.uk/wp-admin/maint/error_log
[Thu Jul 30 13:01:20.634793 2026] [core:error] [pid 3148364:tid 3148364] [client 66.249.66.39:40547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:20.634828 2026] [core:error] [pid 3148364:tid 3148364] [client 66.249.66.39:40547] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:20.792289 2026] [security2:error] [pid 3154454:tid 3154454] [client 114.119.141.139:54899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/pages/35/Studio/st_1375/22"] [unique_id "ams9EL4S3Nz42oFPzdNXcwAAABA"], referer: https://www.jonathanmeyerart.com/pages/35/Studio/st_1375/page:21
[Thu Jul 30 13:01:21.717299 2026] [security2:error] [pid 3165118:tid 3165118] [client 74.7.227.140:41564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hectorproperty.com.carpediemproperty.com"] [uri "/"] [unique_id "ams9Eb-SsWMAa8hIeO3Q8QAAABk"]
[Thu Jul 30 13:01:22.466476 2026] [ssl:error] [pid 3161563:tid 3161563] (EAI 2)Name or service not known: [client 144.76.19.72:41852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:22.466516 2026] [ssl:error] [pid 3161563:tid 3161563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:22.476686 2026] [security2:error] [pid 3167557:tid 3167557] [client 49.51.166.228:42288] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.com"] [uri "/"] [unique_id "ams9EjGNmaouDhJkQ-26QwAAAAY"]
[Thu Jul 30 13:01:22.537536 2026] [ssl:error] [pid 3165163:tid 3165163] (EAI 2)Name or service not known: [client 144.76.19.72:41862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:22.537577 2026] [ssl:error] [pid 3165163:tid 3165163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:22.979814 2026] [authz_core:error] [pid 3166297:tid 3166297] [client 57.141.0.1:30664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:01:22.980443 2026] [authz_core:error] [pid 3166297:tid 3166297] [client 57.141.0.1:30664] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:01:24.187143 2026] [core:error] [pid 3166421:tid 3166421] [client 66.249.66.168:43368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:24.187175 2026] [core:error] [pid 3166421:tid 3166421] [client 66.249.66.168:43368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:24.606382 2026] [ssl:error] [pid 3150397:tid 3150397] (70014)End of file found: [client 216.73.216.199:15123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:24.670751 2026] [security2:error] [pid 3157917:tid 3157917] [client 163.7.13.29:24461] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9FJfWrVkGuIPiq3xbyQAAABU"]
[Thu Jul 30 13:01:24.670808 2026] [security2:error] [pid 3157917:tid 3157917] [client 163.7.13.29:24461] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9FJfWrVkGuIPiq3xbyQAAABU"]
[Thu Jul 30 13:01:24.671117 2026] [security2:error] [pid 3157917:tid 3157917] [client 163.7.13.29:24461] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9FJfWrVkGuIPiq3xbyQAAABU"]
[Thu Jul 30 13:01:25.227691 2026] [ssl:error] [pid 3156182:tid 3156182] (70014)End of file found: [client 216.73.216.199:60460] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:25.595783 2026] [ssl:error] [pid 3152525:tid 3152525] (EAI 2)Name or service not known: [client 144.76.19.72:41878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:25.595810 2026] [ssl:error] [pid 3152525:tid 3152525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:25.651736 2026] [ssl:error] [pid 3161564:tid 3161564] (EAI 2)Name or service not known: [client 144.76.19.72:41884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:25.651770 2026] [ssl:error] [pid 3161564:tid 3161564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:26.434553 2026] [ssl:error] [pid 3161368:tid 3161368] (70014)End of file found: [client 216.73.216.199:42858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:26.594126 2026] [security2:error] [pid 3167136:tid 3167136] [client 85.128.143.125:35522] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "georgehotelofstamford.com"] [uri "/xmlrpc.php"] [unique_id "ams9FrjPMInMuYqUN-tZMAAAACY"]
[Thu Jul 30 13:01:27.054283 2026] [lsapi:warn] [pid 3157917:tid 3157917] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:01:27.610706 2026] [security2:error] [pid 3148364:tid 3148364] [client 101.47.24.77:24361] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9F7Y3mX6-unRCsxarYQAAAC0"]
[Thu Jul 30 13:01:27.610760 2026] [security2:error] [pid 3148364:tid 3148364] [client 101.47.24.77:24361] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9F7Y3mX6-unRCsxarYQAAAC0"]
[Thu Jul 30 13:01:27.611033 2026] [security2:error] [pid 3148364:tid 3148364] [client 101.47.24.77:24361] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9F7Y3mX6-unRCsxarYQAAAC0"]
[Thu Jul 30 13:01:28.703603 2026] [ssl:error] [pid 3167557:tid 3167557] (EAI 2)Name or service not known: [client 144.76.19.72:41896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:28.703638 2026] [ssl:error] [pid 3167557:tid 3167557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:28.758748 2026] [ssl:error] [pid 3166422:tid 3166422] (EAI 2)Name or service not known: [client 144.76.19.72:41910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:28.758782 2026] [ssl:error] [pid 3166422:tid 3166422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:29.736631 2026] [security2:error] [pid 3159608:tid 3159608] [client 212.227.236.81:57500] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "ams9GYcvmICqdv0CDfHw-gAAAAc"]
[Thu Jul 30 13:01:30.327565 2026] [ssl:error] [pid 3161606:tid 3161606] (70014)End of file found: [client 216.73.216.199:10013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:30.960031 2026] [security2:error] [pid 3150397:tid 3150397] [client 101.47.24.77:16523] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9Gu4slRwLWWEhQj_G7AAAACo"]
[Thu Jul 30 13:01:30.960099 2026] [security2:error] [pid 3150397:tid 3150397] [client 101.47.24.77:16523] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9Gu4slRwLWWEhQj_G7AAAACo"]
[Thu Jul 30 13:01:30.960325 2026] [security2:error] [pid 3150397:tid 3150397] [client 101.47.24.77:16523] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9Gu4slRwLWWEhQj_G7AAAACo"]
[Thu Jul 30 13:01:31.235190 2026] [ssl:error] [pid 3158823:tid 3158823] (70014)End of file found: [client 216.73.216.199:2756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:31.813635 2026] [ssl:error] [pid 3159608:tid 3159608] (EAI 2)Name or service not known: [client 144.76.19.72:41940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:31.813676 2026] [ssl:error] [pid 3159608:tid 3159608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:31.868229 2026] [ssl:error] [pid 3161368:tid 3161368] (EAI 2)Name or service not known: [client 144.76.19.72:41942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:31.868276 2026] [ssl:error] [pid 3161368:tid 3161368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:32.435604 2026] [ssl:error] [pid 3142158:tid 3142158] (70014)End of file found: [client 216.73.216.199:57885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:33.070140 2026] [security2:error] [pid 3165164:tid 3165164] [client 114.119.134.192:59075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/a.png"] [unique_id "ams9HfxsdjL5dfpPT-9ruwAAABw"], referer: https://robin64.co.uk/a.png
[Thu Jul 30 13:01:33.998005 2026] [ssl:error] [pid 3159608:tid 3159608] (70014)End of file found: [client 216.73.216.199:11515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:34.642752 2026] [core:error] [pid 3165164:tid 3165164] [client 66.249.66.167:63795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:34.642791 2026] [core:error] [pid 3165164:tid 3165164] [client 66.249.66.167:63795] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:34.974248 2026] [ssl:error] [pid 3152525:tid 3152525] (EAI 2)Name or service not known: [client 144.76.19.72:41950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:34.974288 2026] [ssl:error] [pid 3152525:tid 3152525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:35.028213 2026] [ssl:error] [pid 3165993:tid 3165993] (EAI 2)Name or service not known: [client 144.76.19.72:41952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:35.028249 2026] [ssl:error] [pid 3165993:tid 3165993] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:35.816952 2026] [ssl:error] [pid 3156181:tid 3156181] (70014)End of file found: [client 216.73.216.199:57015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:36.262647 2026] [authz_core:error] [pid 3164000:tid 3164000] [client 57.141.0.32:26858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:01:36.263273 2026] [authz_core:error] [pid 3164000:tid 3164000] [client 57.141.0.32:26858] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:01:36.423437 2026] [ssl:error] [pid 3166364:tid 3166364] (70014)End of file found: [client 216.73.216.199:61221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:37.520998 2026] [lsapi:warn] [pid 3164000:tid 3164000] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:01:37.720952 2026] [security2:error] [pid 3166297:tid 3166297] [client 85.208.96.203:52356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/what-happened-to-the-minchew-sisters"] [unique_id "ams9IXyoyaQUjvXnh251sQAAACQ"]
[Thu Jul 30 13:01:38.086814 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:41958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:38.086862 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:38.143010 2026] [ssl:error] [pid 3142158:tid 3142158] (EAI 2)Name or service not known: [client 144.76.19.72:41962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:38.143041 2026] [ssl:error] [pid 3142158:tid 3142158] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:38.700127 2026] [security2:error] [pid 3142158:tid 3142158] [client 85.208.96.203:26308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2300.0.html"] [unique_id "ams9InOHaK84tBsGOCa-AwAAADg"]
[Thu Jul 30 13:01:40.951559 2026] [ssl:error] [pid 3166423:tid 3166423] (70014)End of file found: [client 216.73.216.199:12374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:41.199465 2026] [ssl:error] [pid 3165081:tid 3165081] (EAI 2)Name or service not known: [client 144.76.19.72:38786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:41.199507 2026] [ssl:error] [pid 3165081:tid 3165081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:41.254195 2026] [ssl:error] [pid 3156181:tid 3156181] (EAI 2)Name or service not known: [client 144.76.19.72:38790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:41.254236 2026] [ssl:error] [pid 3156181:tid 3156181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:42.165677 2026] [ssl:error] [pid 3161607:tid 3161607] (70014)End of file found: [client 216.73.216.199:30109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:44.325405 2026] [ssl:error] [pid 3162435:tid 3162435] (EAI 2)Name or service not known: [client 144.76.19.72:38800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:44.325451 2026] [ssl:error] [pid 3162435:tid 3162435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:44.378989 2026] [ssl:error] [pid 3166186:tid 3166186] (EAI 2)Name or service not known: [client 144.76.19.72:38814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:44.379031 2026] [ssl:error] [pid 3166186:tid 3166186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:44.573335 2026] [ssl:error] [pid 3156177:tid 3156177] (70014)End of file found: [client 216.73.216.199:33404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:45.144805 2026] [authz_core:error] [pid 3166186:tid 3166186] [client 57.141.0.20:48530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:01:45.145429 2026] [authz_core:error] [pid 3166186:tid 3166186] [client 57.141.0.20:48530] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:01:47.394144 2026] [core:error] [pid 3167557:tid 3167557] [client 66.249.66.67:37092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:47.394173 2026] [core:error] [pid 3167557:tid 3167557] [client 66.249.66.67:37092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:47.394670 2026] [core:error] [pid 3165166:tid 3165166] [client 66.249.66.167:62579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:47.394699 2026] [core:error] [pid 3165166:tid 3165166] [client 66.249.66.167:62579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:47.423224 2026] [ssl:error] [pid 3167136:tid 3167136] (70014)End of file found: [client 216.73.216.199:27571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:47.437595 2026] [ssl:error] [pid 3162435:tid 3162435] (EAI 2)Name or service not known: [client 144.76.19.72:38826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:47.437618 2026] [ssl:error] [pid 3162435:tid 3162435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:47.490789 2026] [ssl:error] [pid 3165117:tid 3165117] (EAI 2)Name or service not known: [client 144.76.19.72:38840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:47.490824 2026] [ssl:error] [pid 3165117:tid 3165117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:47.583225 2026] [ssl:error] [pid 3152525:tid 3152525] (70014)End of file found: [client 216.73.216.199:27410] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:47.994370 2026] [lsapi:warn] [pid 3165081:tid 3165081] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:01:50.544896 2026] [ssl:error] [pid 3160805:tid 3160805] (EAI 2)Name or service not known: [client 144.76.19.72:23962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:50.544934 2026] [ssl:error] [pid 3160805:tid 3160805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:50.597861 2026] [ssl:error] [pid 3162435:tid 3162435] (EAI 2)Name or service not known: [client 144.76.19.72:23968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:50.597890 2026] [ssl:error] [pid 3162435:tid 3162435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:51.092216 2026] [authz_core:error] [pid 3160805:tid 3160805] [client 57.141.0.62:30372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:01:51.092855 2026] [authz_core:error] [pid 3160805:tid 3160805] [client 57.141.0.62:30372] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:01:51.198355 2026] [ssl:error] [pid 3167188:tid 3167188] (70014)End of file found: [client 216.73.216.199:65156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:52.812464 2026] [security2:error] [pid 3167136:tid 3167136] [client 43.130.39.254:34264] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "islay.me"] [uri "/"] [unique_id "ams9MLjPMInMuYqUN-tZOgAAACY"]
[Thu Jul 30 13:01:53.609567 2026] [security2:error] [pid 3160805:tid 3160805] [client 216.73.216.199:25295] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/ftp.ini"] [unique_id "ams9MXDB2rerQnroCspLbAAAABE"]
[Thu Jul 30 13:01:53.609866 2026] [security2:error] [pid 3160805:tid 3160805] [client 216.73.216.199:25295] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/ftp.ini"] [unique_id "ams9MXDB2rerQnroCspLbAAAABE"]
[Thu Jul 30 13:01:53.610091 2026] [security2:error] [pid 3160805:tid 3160805] [client 216.73.216.199:25295] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/ftp.ini"] [unique_id "ams9MXDB2rerQnroCspLbAAAABE"]
[Thu Jul 30 13:01:53.653827 2026] [ssl:error] [pid 3152525:tid 3152525] (EAI 2)Name or service not known: [client 144.76.19.72:23970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:53.653850 2026] [ssl:error] [pid 3152525:tid 3152525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:53.708544 2026] [ssl:error] [pid 3169260:tid 3169260] (EAI 2)Name or service not known: [client 144.76.19.72:23974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:53.708581 2026] [ssl:error] [pid 3169260:tid 3169260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:54.211628 2026] [ssl:error] [pid 3160805:tid 3160805] (70014)End of file found: [client 216.73.216.199:25295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:54.656335 2026] [core:error] [pid 3169325:tid 3169325] [client 57.141.0.63:32974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:54.656379 2026] [core:error] [pid 3169325:tid 3169325] [client 57.141.0.63:32974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:54.739666 2026] [security2:error] [pid 3164668:tid 3164668] [client 74.7.241.58:40824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "wmsfirearmstraining.com"] [uri "/"] [unique_id "ams9MvXFIF5vk7LhEVWuHQAAAAA"]
[Thu Jul 30 13:01:54.813792 2026] [ssl:error] [pid 3161368:tid 3161368] (70014)End of file found: [client 216.73.216.199:35134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:54.991020 2026] [lsapi:warn] [pid 3165164:tid 3165164] [client 57.141.0.45:20438] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:01:54.991062 2026] [lsapi:warn] [pid 3165164:tid 3165164] [client 57.141.0.45:20438] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:01:56.767466 2026] [security2:error] [pid 3164668:tid 3164668] [client 43.164.196.47:48442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/release notes.html"] [unique_id "ams9NPXFIF5vk7LhEVWuHgAAAAA"]
[Thu Jul 30 13:01:56.772260 2026] [ssl:error] [pid 3165163:tid 3165163] (70014)End of file found: [client 216.73.216.199:34182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:01:57.057647 2026] [ssl:error] [pid 3148364:tid 3148364] (EAI 2)Name or service not known: [client 144.76.19.72:23980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:57.057680 2026] [ssl:error] [pid 3148364:tid 3148364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:57.110518 2026] [authz_core:error] [pid 3153255:tid 3153255] [client 57.141.0.65:20150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:01:57.111146 2026] [authz_core:error] [pid 3153255:tid 3153255] [client 57.141.0.65:20150] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:01:57.195809 2026] [ssl:error] [pid 3153255:tid 3153255] (EAI 2)Name or service not known: [client 144.76.19.72:23988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:01:57.195831 2026] [ssl:error] [pid 3153255:tid 3153255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:01:58.477990 2026] [lsapi:warn] [pid 3169398:tid 3169398] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:01:59.071634 2026] [authz_core:error] [pid 3161606:tid 3161606] [client 87.58.197.201:56253] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:01:59.072196 2026] [authz_core:error] [pid 3161606:tid 3161606] [client 87.58.197.201:56253] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:01:59.988967 2026] [core:error] [pid 3161606:tid 3161606] [client 66.249.66.169:65018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:01:59.988991 2026] [core:error] [pid 3161606:tid 3161606] [client 66.249.66.169:65018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:00.252428 2026] [ssl:error] [pid 3169326:tid 3169326] (EAI 2)Name or service not known: [client 144.76.19.72:64668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:00.252459 2026] [ssl:error] [pid 3169326:tid 3169326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:00.305962 2026] [ssl:error] [pid 3169325:tid 3169325] (EAI 2)Name or service not known: [client 144.76.19.72:64672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:00.305999 2026] [ssl:error] [pid 3169325:tid 3169325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:00.731270 2026] [ssl:error] [pid 3169502:tid 3169502] (70014)End of file found: [client 216.73.216.199:37515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:01.468086 2026] [security2:error] [pid 3156182:tid 3156182] [client 74.7.227.37:39908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.henger-de-bahn.newtronicmedia.com"] [uri "/"] [unique_id "ams9OVN4Sucee3Vu_Rdz-wAAAD8"]
[Thu Jul 30 13:02:01.611973 2026] [authz_core:error] [pid 3152525:tid 3152525] [client 57.141.0.8:25056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:01.612628 2026] [authz_core:error] [pid 3152525:tid 3152525] [client 57.141.0.8:25056] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:02.279740 2026] [security2:error] [pid 3156182:tid 3156182] [client 43.156.232.154:54626] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "2023.the-pryors.co.uk"] [uri "/"] [unique_id "ams9OlN4Sucee3Vu_Rdz_AAAAD8"]
[Thu Jul 30 13:02:02.652331 2026] [ssl:error] [pid 3161368:tid 3161368] (70014)End of file found: [client 216.73.216.199:33580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:02.747332 2026] [authz_core:error] [pid 3164000:tid 3164000] [client 66.249.66.35:56538] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:02:02.749992 2026] [authz_core:error] [pid 3164000:tid 3164000] [client 66.249.66.35:56538] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:02:03.145646 2026] [ssl:error] [pid 3165166:tid 3165166] (70014)End of file found: [client 216.73.216.199:36958] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:03.359544 2026] [ssl:error] [pid 3169494:tid 3169494] (EAI 2)Name or service not known: [client 144.76.19.72:64682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:03.359579 2026] [ssl:error] [pid 3169494:tid 3169494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:03.411498 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:64688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:03.411529 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:04.038805 2026] [authz_core:error] [pid 3169396:tid 3169396] [client 57.141.0.22:47510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:04.039503 2026] [authz_core:error] [pid 3169396:tid 3169396] [client 57.141.0.22:47510] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:04.270875 2026] [security2:error] [pid 3156182:tid 3156182] [client 43.156.232.154:51052] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "ams9PFN4Sucee3Vu_Rdz_wAAAD8"], referer: http://2023.the-pryors.co.uk
[Thu Jul 30 13:02:04.702862 2026] [ssl:error] [pid 3161564:tid 3161564] (70014)End of file found: [client 216.73.216.199:36640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:05.304731 2026] [core:error] [pid 3161563:tid 3161563] (13)Permission denied: [client 216.73.216.199:21228] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/tomhackney.com.db
[Thu Jul 30 13:02:05.605859 2026] [ssl:error] [pid 3161563:tid 3161563] (70014)End of file found: [client 216.73.216.199:21228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:06.099916 2026] [ssl:error] [pid 3169498:tid 3169498] (70014)End of file found: [client 216.73.216.199:13669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:06.466341 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:64700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:06.466379 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:06.521061 2026] [ssl:error] [pid 3169502:tid 3169502] (EAI 2)Name or service not known: [client 144.76.19.72:64702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:06.521114 2026] [ssl:error] [pid 3169502:tid 3169502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:06.623537 2026] [security2:error] [pid 3169879:tid 3169879] [client 198.244.183.73:16216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,485.msg1231.html"] [unique_id "ams9PiwuGzNh7V_GMo5tIgAAAAA"]
[Thu Jul 30 13:02:06.975250 2026] [security2:error] [pid 3156182:tid 3156182] [client 43.131.32.36:45436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams9PlN4Sucee3Vu_Rd0AQAAAD8"]
[Thu Jul 30 13:02:07.951179 2026] [security2:error] [pid 3167188:tid 3167188] [client 43.131.32.36:38542] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams9P9FfgYwID9E1v1p7bwAAADI"], referer: http://www.staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 13:02:08.941759 2026] [lsapi:warn] [pid 3167136:tid 3167136] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:02:09.366382 2026] [security2:error] [pid 3164719:tid 3164719] [client 43.131.32.36:39148] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "ams9QcLhDCmO60RCkJMRlQAAAAI"], referer: https://www.staffordshirephoenixrifleandpistolclub.co.uk/
[Thu Jul 30 13:02:09.578127 2026] [ssl:error] [pid 3165164:tid 3165164] (EAI 2)Name or service not known: [client 144.76.19.72:25264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:09.578164 2026] [ssl:error] [pid 3165164:tid 3165164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:09.634285 2026] [ssl:error] [pid 3159608:tid 3159608] (EAI 2)Name or service not known: [client 144.76.19.72:25272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:09.634311 2026] [ssl:error] [pid 3159608:tid 3159608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:10.118344 2026] [ssl:error] [pid 3164000:tid 3164000] (70014)End of file found: [client 216.73.216.199:32642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:10.125313 2026] [security2:error] [pid 3165166:tid 3165166] [client 110.249.201.143:28540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ditchlingfair.ditchfest.com"] [uri "/robots.txt"] [unique_id "ams9QnrmRN10PNBIIrfU_QAAACE"]
[Thu Jul 30 13:02:11.854579 2026] [security2:error] [pid 3165118:tid 3165118] [client 124.222.230.178:49882] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.baketastic.co.uk"] [uri "/"] [unique_id "ams9Q7-SsWMAa8hIeO3RBgAAABk"]
[Thu Jul 30 13:02:12.201060 2026] [security2:error] [pid 3161563:tid 3161563] [client 74.7.227.22:45000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localdonuts.co.uk.davidebell.com"] [uri "/"] [unique_id "ams9RHyz0iFiyQVTVBedSAAAABs"]
[Thu Jul 30 13:02:12.679294 2026] [core:error] [pid 3169497:tid 3169497] [client 66.249.66.39:46665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:12.679323 2026] [core:error] [pid 3169497:tid 3169497] [client 66.249.66.39:46665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:12.690951 2026] [ssl:error] [pid 3157876:tid 3157876] (EAI 2)Name or service not known: [client 144.76.19.72:25280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:12.690978 2026] [ssl:error] [pid 3157876:tid 3157876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:12.743648 2026] [ssl:error] [pid 3169879:tid 3169879] (EAI 2)Name or service not known: [client 144.76.19.72:25296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:12.743692 2026] [ssl:error] [pid 3169879:tid 3169879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:14.649064 2026] [ssl:error] [pid 3169496:tid 3169496] (70014)End of file found: [client 216.73.216.199:59314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:14.793791 2026] [security2:error] [pid 3170354:tid 3170354] [client 185.191.171.19:20918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8487.0/prev_next,prev.html"] [unique_id "ams9RhnqjT4xb5dsi3Q7zgAAAAQ"]
[Thu Jul 30 13:02:14.949572 2026] [ssl:error] [pid 3165163:tid 3165163] (70014)End of file found: [client 216.73.216.199:38980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:15.061532 2026] [security2:error] [pid 3170354:tid 3170354] [client 45.219.211.14:34176] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9RxnqjT4xb5dsi3Q7zwAAAAQ"]
[Thu Jul 30 13:02:15.061578 2026] [security2:error] [pid 3170354:tid 3170354] [client 45.219.211.14:34176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9RxnqjT4xb5dsi3Q7zwAAAAQ"]
[Thu Jul 30 13:02:15.061841 2026] [security2:error] [pid 3170354:tid 3170354] [client 45.219.211.14:34176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9RxnqjT4xb5dsi3Q7zwAAAAQ"]
[Thu Jul 30 13:02:15.424390 2026] [security2:error] [pid 3160805:tid 3160805] [client 124.222.230.178:40460] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "ams9R3DB2rerQnroCspLdQAAABE"], referer: http://www.baketastic.co.uk
[Thu Jul 30 13:02:15.547382 2026] [ssl:error] [pid 3167136:tid 3167136] (70014)End of file found: [client 216.73.216.199:34909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:15.814792 2026] [ssl:error] [pid 3153255:tid 3153255] (EAI 2)Name or service not known: [client 144.76.19.72:25304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:15.814825 2026] [ssl:error] [pid 3153255:tid 3153255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:15.870964 2026] [ssl:error] [pid 3170387:tid 3170387] (EAI 2)Name or service not known: [client 144.76.19.72:25316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:15.871008 2026] [ssl:error] [pid 3170387:tid 3170387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:16.528537 2026] [core:error] [pid 3169502:tid 3169502] [client 57.141.0.35:40484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:16.528565 2026] [core:error] [pid 3169502:tid 3169502] [client 57.141.0.35:40484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:17.946967 2026] [security2:error] [pid 3161368:tid 3161368] [client 200.106.193.157:48459] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9ScKcL_JEc1DDqA1KSQAAABM"]
[Thu Jul 30 13:02:17.947016 2026] [security2:error] [pid 3161368:tid 3161368] [client 200.106.193.157:48459] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9ScKcL_JEc1DDqA1KSQAAABM"]
[Thu Jul 30 13:02:17.947280 2026] [security2:error] [pid 3161368:tid 3161368] [client 200.106.193.157:48459] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9ScKcL_JEc1DDqA1KSQAAABM"]
[Thu Jul 30 13:02:18.925157 2026] [ssl:error] [pid 3169497:tid 3169497] (EAI 2)Name or service not known: [client 144.76.19.72:25322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:18.925203 2026] [ssl:error] [pid 3169497:tid 3169497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:18.980322 2026] [ssl:error] [pid 3169395:tid 3169395] (EAI 2)Name or service not known: [client 144.76.19.72:25324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:18.980359 2026] [ssl:error] [pid 3169395:tid 3169395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:19.259918 2026] [core:error] [pid 3161368:tid 3161368] [client 57.141.0.62:26630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:19.259950 2026] [core:error] [pid 3161368:tid 3161368] [client 57.141.0.62:26630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:19.501803 2026] [lsapi:warn] [pid 3160805:tid 3160805] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:02:19.888303 2026] [security2:error] [pid 3169395:tid 3169395] [client 114.119.132.171:54113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~19"] [unique_id "ams9S2TEPXNncS2sFsx0JgAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E23-12-2019
[Thu Jul 30 13:02:20.974691 2026] [core:error] [pid 3170388:tid 3170388] (13)Permission denied: [client 216.73.216.199:45304] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS3/flags
[Thu Jul 30 13:02:21.219481 2026] [security2:error] [pid 3165118:tid 3165118] [client 197.26.185.120:52542] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9Tb-SsWMAa8hIeO3RDQAAABk"]
[Thu Jul 30 13:02:21.219542 2026] [security2:error] [pid 3165118:tid 3165118] [client 197.26.185.120:52542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9Tb-SsWMAa8hIeO3RDQAAABk"]
[Thu Jul 30 13:02:21.219810 2026] [security2:error] [pid 3165118:tid 3165118] [client 197.26.185.120:52542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9Tb-SsWMAa8hIeO3RDQAAABk"]
[Thu Jul 30 13:02:21.885962 2026] [security2:error] [pid 3170388:tid 3170388] [client 216.73.216.199:45304] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/hindi/errmsg.sys"] [unique_id "ams9TdfsAdCwuxNX_jG1UgAAAAo"]
[Thu Jul 30 13:02:21.886280 2026] [security2:error] [pid 3170388:tid 3170388] [client 216.73.216.199:45304] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/hindi/errmsg.sys"] [unique_id "ams9TdfsAdCwuxNX_jG1UgAAAAo"]
[Thu Jul 30 13:02:21.886523 2026] [security2:error] [pid 3170388:tid 3170388] [client 216.73.216.199:45304] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/hindi/errmsg.sys"] [unique_id "ams9TdfsAdCwuxNX_jG1UgAAAAo"]
[Thu Jul 30 13:02:22.037329 2026] [ssl:error] [pid 3165118:tid 3165118] (EAI 2)Name or service not known: [client 144.76.19.72:31350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:22.037383 2026] [ssl:error] [pid 3165118:tid 3165118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:22.092436 2026] [ssl:error] [pid 3165163:tid 3165163] (EAI 2)Name or service not known: [client 144.76.19.72:31364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:22.092469 2026] [ssl:error] [pid 3165163:tid 3165163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:22.216317 2026] [security2:error] [pid 3169496:tid 3169496] [client 185.191.171.4:30026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "ams9ToL9PlgJ7lP2trL_SAAAACA"]
[Thu Jul 30 13:02:22.255909 2026] [authz_core:error] [pid 3142158:tid 3142158] [client 57.141.0.30:44142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:22.256546 2026] [authz_core:error] [pid 3142158:tid 3142158] [client 57.141.0.30:44142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:22.396662 2026] [security2:error] [pid 3167557:tid 3167557] [client 114.119.132.171:54121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~19"] [unique_id "ams9TjGNmaouDhJkQ-26VgAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E23-12-2019
[Thu Jul 30 13:02:22.790521 2026] [ssl:error] [pid 3170388:tid 3170388] (70014)End of file found: [client 216.73.216.199:45304] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:25.197146 2026] [ssl:error] [pid 3167188:tid 3167188] (EAI 2)Name or service not known: [client 144.76.19.72:31366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:25.197195 2026] [ssl:error] [pid 3167188:tid 3167188] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:25.250554 2026] [ssl:error] [pid 3166423:tid 3166423] (EAI 2)Name or service not known: [client 144.76.19.72:31376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:25.250588 2026] [ssl:error] [pid 3166423:tid 3166423] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:25.351174 2026] [core:error] [pid 3165081:tid 3165081] [client 66.249.66.167:56752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:25.351204 2026] [core:error] [pid 3165081:tid 3165081] [client 66.249.66.167:56752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:26.981509 2026] [autoindex:error] [pid 3161519:tid 3161519] [client 104.251.181.79:57900] AH01276: Cannot serve directory /home/winterb/public_html/drupal2/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 13:02:27.843241 2026] [security2:error] [pid 3165118:tid 3165118] [client 49.51.166.228:57324] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "ams9U7-SsWMAa8hIeO3REQAAABk"]
[Thu Jul 30 13:02:28.349136 2026] [ssl:error] [pid 3170831:tid 3170831] (EAI 2)Name or service not known: [client 144.76.19.72:31382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:28.349174 2026] [ssl:error] [pid 3170831:tid 3170831] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:28.403737 2026] [ssl:error] [pid 3165081:tid 3165081] (EAI 2)Name or service not known: [client 144.76.19.72:31392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:28.403781 2026] [ssl:error] [pid 3165081:tid 3165081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:29.741624 2026] [security2:error] [pid 3159608:tid 3159608] [client 49.51.166.228:59996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "ams9VYcvmICqdv0CDfHxEgAAAAc"], referer: http://www.purple-childcare.co.uk
[Thu Jul 30 13:02:29.973718 2026] [lsapi:warn] [pid 3150397:tid 3150397] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:02:30.598517 2026] [authz_core:error] [pid 3164719:tid 3164719] [client 57.141.0.54:22402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:30.599150 2026] [authz_core:error] [pid 3164719:tid 3164719] [client 57.141.0.54:22402] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:31.457860 2026] [ssl:error] [pid 3165081:tid 3165081] (EAI 2)Name or service not known: [client 144.76.19.72:51684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:31.457895 2026] [ssl:error] [pid 3165081:tid 3165081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:31.513828 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:51688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:31.513868 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:31.740361 2026] [cgi:error] [pid 3167136:tid 3167136] [client 4.232.188.49:63471] AH02811: stderr from /home/abcdysle/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:02:32.098158 2026] [cgi:error] [pid 3167136:tid 3167136] [client 4.232.188.49:63471] AH02811: stderr from /home/abcdysle/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:02:32.121886 2026] [ssl:error] [pid 3161606:tid 3161606] (70014)End of file found: [client 216.73.216.199:25528] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:34.568926 2026] [ssl:error] [pid 3170387:tid 3170387] (EAI 2)Name or service not known: [client 144.76.19.72:51692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:34.568967 2026] [ssl:error] [pid 3170387:tid 3170387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:34.622614 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:51702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:34.622648 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:35.358091 2026] [core:error] [pid 3169879:tid 3169879] [client 57.141.0.68:40762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.358125 2026] [core:error] [pid 3169879:tid 3169879] [client 57.141.0.68:40762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.421393 2026] [security2:error] [pid 3169396:tid 3169396] [client 146.56.197.150:44378] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.loca.co.uk"] [uri "/"] [unique_id "ams9W4aHZaQmFUgJWYtkZgAAAAw"]
[Thu Jul 30 13:02:35.504786 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.504812 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31766] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.614212 2026] [core:error] [pid 3169500:tid 3169500] [client 20.215.216.94:31776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.614239 2026] [core:error] [pid 3169500:tid 3169500] [client 20.215.216.94:31776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.770460 2026] [core:error] [pid 3165164:tid 3165164] [client 20.215.216.94:31752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.770494 2026] [core:error] [pid 3165164:tid 3165164] [client 20.215.216.94:31752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.901820 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:31752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:35.901846 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:31752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.030947 2026] [core:error] [pid 3169397:tid 3169397] [client 20.215.216.94:31751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.030972 2026] [core:error] [pid 3169397:tid 3169397] [client 20.215.216.94:31751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.143298 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:25941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.143320 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:25941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.320446 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:31554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.320473 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:31554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.638512 2026] [core:error] [pid 3165993:tid 3165993] [client 20.215.216.94:31756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.638542 2026] [core:error] [pid 3165993:tid 3165993] [client 20.215.216.94:31756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.976876 2026] [core:error] [pid 3165993:tid 3165993] [client 20.215.216.94:31576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:36.976901 2026] [core:error] [pid 3165993:tid 3165993] [client 20.215.216.94:31576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.006306 2026] [security2:error] [pid 3156182:tid 3156182] [client 216.73.216.199:10886] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-dummy/tuned.conf"] [unique_id "ams9XVN4Sucee3Vu_Rd0CAAAAD8"]
[Thu Jul 30 13:02:37.006596 2026] [security2:error] [pid 3156182:tid 3156182] [client 216.73.216.199:10886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-dummy/tuned.conf"] [unique_id "ams9XVN4Sucee3Vu_Rd0CAAAAD8"]
[Thu Jul 30 13:02:37.006824 2026] [security2:error] [pid 3156182:tid 3156182] [client 216.73.216.199:10886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-dummy/tuned.conf"] [unique_id "ams9XVN4Sucee3Vu_Rd0CAAAAD8"]
[Thu Jul 30 13:02:37.051359 2026] [authz_core:error] [pid 3161519:tid 3161519] [client 57.141.0.61:46428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:37.051990 2026] [authz_core:error] [pid 3161519:tid 3161519] [client 57.141.0.61:46428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:37.145646 2026] [core:error] [pid 3169879:tid 3169879] [client 20.215.216.94:25951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.145674 2026] [core:error] [pid 3169879:tid 3169879] [client 20.215.216.94:25951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.241276 2026] [core:error] [pid 3165164:tid 3165164] [client 20.215.216.94:31595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.241305 2026] [core:error] [pid 3165164:tid 3165164] [client 20.215.216.94:31595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.457139 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:25942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.457167 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:25942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.539645 2026] [core:error] [pid 3169879:tid 3169879] [client 20.215.216.94:25931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.539669 2026] [core:error] [pid 3169879:tid 3169879] [client 20.215.216.94:25931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.619843 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:31562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.619870 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:31562] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.680262 2026] [ssl:error] [pid 3171209:tid 3171209] (EAI 2)Name or service not known: [client 144.76.19.72:51708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:37.680312 2026] [ssl:error] [pid 3171209:tid 3171209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:37.697526 2026] [authz_core:error] [pid 3161435:tid 3161435] [client 185.220.101.175:9507] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 13:02:37.724223 2026] [core:error] [pid 3160805:tid 3160805] (13)Permission denied: [client 216.73.216.199:53245] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/libata/sections/__tracepoints
[Thu Jul 30 13:02:37.738167 2026] [ssl:error] [pid 3169500:tid 3169500] (EAI 2)Name or service not known: [client 144.76.19.72:51724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:37.738201 2026] [ssl:error] [pid 3169500:tid 3169500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:37.738814 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:31773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.738834 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:31773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.831931 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:37.831955 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31782] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.042705 2026] [core:error] [pid 3161435:tid 3161435] [client 66.249.66.66:57082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.042737 2026] [core:error] [pid 3161435:tid 3161435] [client 66.249.66.66:57082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.067949 2026] [security2:error] [pid 3164000:tid 3164000] [client 94.154.43.188:40276] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "maisongerlyn.be"] [uri "/.env"] [unique_id "ams9XicgqeYWYj1LcIONvQAAAAk"]
[Thu Jul 30 13:02:38.068180 2026] [security2:error] [pid 3164000:tid 3164000] [client 94.154.43.188:40276] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "maisongerlyn.be"] [uri "/.env"] [unique_id "ams9XicgqeYWYj1LcIONvQAAAAk"]
[Thu Jul 30 13:02:38.089361 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:31611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.089388 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:31611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.189856 2026] [security2:error] [pid 3169397:tid 3169397] [client 185.191.171.1:31528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/ertugrul-tour-package"] [unique_id "ams9XsalMsKMoEmvjgA47QAAAA4"]
[Thu Jul 30 13:02:38.320145 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.320176 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.447973 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:25930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.447998 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:25930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.525762 2026] [core:error] [pid 3169396:tid 3169396] [client 20.215.216.94:31793] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.525786 2026] [core:error] [pid 3169396:tid 3169396] [client 20.215.216.94:31793] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.662826 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:25947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.662850 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:25947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.837553 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:25948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:38.837587 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:25948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.111251 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:31593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.111280 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:31593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.341183 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:31581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.341212 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:31581] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.425746 2026] [security2:error] [pid 3164000:tid 3164000] [client 94.154.43.188:40276] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "maisongerlyn.be"] [uri "/index.php"] [unique_id "ams9XicgqeYWYj1LcIONvQAAAAk"]
[Thu Jul 30 13:02:39.529651 2026] [core:error] [pid 3156182:tid 3156182] (13)Permission denied: [client 216.73.216.199:10886] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/named.loopback
[Thu Jul 30 13:02:39.556659 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:31789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.556687 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:31789] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.895421 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.895447 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:39.992220 2026] [authz_core:error] [pid 3169496:tid 3169496] [client 66.249.66.33:51759] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:02:39.994979 2026] [authz_core:error] [pid 3169496:tid 3169496] [client 66.249.66.33:51759] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:02:40.197693 2026] [authz_core:error] [pid 3164720:tid 3164720] [client 192.42.116.108:54588] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 13:02:40.223761 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:31557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:40.223782 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:31557] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:40.454343 2026] [lsapi:warn] [pid 3164000:tid 3164000] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:02:40.796279 2026] [ssl:error] [pid 3164720:tid 3164720] (EAI 2)Name or service not known: [client 144.76.19.72:24572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:40.796314 2026] [ssl:error] [pid 3164720:tid 3164720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:40.848501 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:24580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:40.848528 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:41.290633 2026] [core:error] [pid 3164720:tid 3164720] [client 20.215.216.94:31774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:41.290662 2026] [core:error] [pid 3164720:tid 3164720] [client 20.215.216.94:31774] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:41.657160 2026] [authz_core:error] [pid 3158357:tid 3158357] [client 57.141.0.19:33536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:41.657806 2026] [authz_core:error] [pid 3158357:tid 3158357] [client 57.141.0.19:33536] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:42.069908 2026] [core:error] [pid 3165118:tid 3165118] [client 20.215.216.94:31601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:42.069932 2026] [core:error] [pid 3165118:tid 3165118] [client 20.215.216.94:31601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:42.238109 2026] [ssl:error] [pid 3156182:tid 3156182] (70014)End of file found: [client 216.73.216.199:10886] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:42.395509 2026] [core:error] [pid 3170388:tid 3170388] [client 20.215.216.94:31561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:42.395537 2026] [core:error] [pid 3170388:tid 3170388] [client 20.215.216.94:31561] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:42.539162 2026] [ssl:error] [pid 3160805:tid 3160805] (70014)End of file found: [client 216.73.216.199:53245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:42.644401 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:25954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:42.644433 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:25954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:43.024798 2026] [ssl:error] [pid 3165118:tid 3165118] (70014)End of file found: [client 216.73.216.199:21171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:43.237199 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:31768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:43.237227 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:31768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.035199 2026] [core:error] [pid 3171425:tid 3171425] [client 20.215.216.94:31777] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.035228 2026] [core:error] [pid 3171425:tid 3171425] [client 20.215.216.94:31777] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.327178 2026] [ssl:error] [pid 3161434:tid 3161434] (EAI 2)Name or service not known: [client 144.76.19.72:24590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:44.327214 2026] [ssl:error] [pid 3161434:tid 3161434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:44.330927 2026] [core:error] [pid 3169499:tid 3169499] [client 20.215.216.94:23447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.330945 2026] [core:error] [pid 3169499:tid 3169499] [client 20.215.216.94:23447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.383377 2026] [ssl:error] [pid 3169497:tid 3169497] (EAI 2)Name or service not known: [client 144.76.19.72:24602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:44.383406 2026] [ssl:error] [pid 3169497:tid 3169497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:44.533774 2026] [core:error] [pid 3169499:tid 3169499] [client 66.249.64.170:62640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.533797 2026] [core:error] [pid 3169499:tid 3169499] [client 66.249.64.170:62640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.617672 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:31564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:44.617700 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:31564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:45.106367 2026] [core:error] [pid 3158357:tid 3158357] [client 20.215.216.94:25923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:45.106396 2026] [core:error] [pid 3158357:tid 3158357] [client 20.215.216.94:25923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:45.420232 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:25964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:45.420258 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:25964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.177324 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.177349 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.180306 2026] [security2:error] [pid 3171209:tid 3171209] [client 43.135.183.82:38856] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "leaccess.co.uk"] [uri "/"] [unique_id "ams9ZnDECF4SJgL2vcndLwAAAAY"]
[Thu Jul 30 13:02:46.465186 2026] [core:error] [pid 3153255:tid 3153255] [client 20.215.216.94:31555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.465214 2026] [core:error] [pid 3153255:tid 3153255] [client 20.215.216.94:31555] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.742364 2026] [core:error] [pid 3171425:tid 3171425] [client 20.215.216.94:23459] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.742408 2026] [core:error] [pid 3171425:tid 3171425] [client 20.215.216.94:23459] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.997858 2026] [core:error] [pid 3166364:tid 3166364] [client 20.215.216.94:31806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:46.997883 2026] [core:error] [pid 3166364:tid 3166364] [client 20.215.216.94:31806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:47.245553 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:47.245579 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:47.438671 2026] [ssl:error] [pid 3171425:tid 3171425] (EAI 2)Name or service not known: [client 144.76.19.72:24612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:47.438702 2026] [ssl:error] [pid 3171425:tid 3171425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:47.454482 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:31552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:47.454514 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:31552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:47.491744 2026] [ssl:error] [pid 3161606:tid 3161606] (EAI 2)Name or service not known: [client 144.76.19.72:24620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:47.491781 2026] [ssl:error] [pid 3161606:tid 3161606] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:48.260494 2026] [core:error] [pid 3171425:tid 3171425] [client 20.215.216.94:31608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.260519 2026] [core:error] [pid 3171425:tid 3171425] [client 20.215.216.94:31608] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.404637 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:25961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.404659 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:25961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.577841 2026] [core:error] [pid 3160805:tid 3160805] [client 20.215.216.94:31584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.577871 2026] [core:error] [pid 3160805:tid 3160805] [client 20.215.216.94:31584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.675258 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.675287 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.771025 2026] [core:error] [pid 3171458:tid 3171458] [client 20.215.216.94:31749] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.771054 2026] [core:error] [pid 3171458:tid 3171458] [client 20.215.216.94:31749] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.857884 2026] [core:error] [pid 3164719:tid 3164719] [client 20.215.216.94:31612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.857908 2026] [core:error] [pid 3164719:tid 3164719] [client 20.215.216.94:31612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.863999 2026] [ssl:error] [pid 3164000:tid 3164000] (70014)End of file found: [client 216.73.216.199:65377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:48.960615 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:25936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:48.960646 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:25936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.196199 2026] [core:error] [pid 3148364:tid 3148364] [client 20.215.216.94:25956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.196222 2026] [core:error] [pid 3148364:tid 3148364] [client 20.215.216.94:25956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.295877 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:31609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.295915 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:31609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.522573 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.522600 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.666607 2026] [ssl:error] [pid 3171458:tid 3171458] (70014)End of file found: [client 216.73.216.199:41441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:49.813084 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:31600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:49.813114 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:31600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.068349 2026] [ssl:error] [pid 3166364:tid 3166364] (70014)End of file found: [client 216.73.216.199:26087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:50.147788 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.147816 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.267854 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:25899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.267877 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:25899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.428847 2026] [core:error] [pid 3158823:tid 3158823] [client 20.215.216.94:31565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.428875 2026] [core:error] [pid 3158823:tid 3158823] [client 20.215.216.94:31565] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.557205 2026] [ssl:error] [pid 3171425:tid 3171425] (EAI 2)Name or service not known: [client 144.76.19.72:28792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:50.557256 2026] [ssl:error] [pid 3171425:tid 3171425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:50.632350 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:31779] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.632373 2026] [core:error] [pid 3161519:tid 3161519] [client 20.215.216.94:31779] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.635405 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:28808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:50.635428 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:50.728258 2026] [core:error] [pid 3165163:tid 3165163] [client 66.249.66.167:44013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.728291 2026] [core:error] [pid 3165163:tid 3165163] [client 66.249.66.167:44013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.730483 2026] [core:error] [pid 3165118:tid 3165118] [client 66.249.66.66:56416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.730510 2026] [core:error] [pid 3165118:tid 3165118] [client 66.249.66.66:56416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.745718 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31607] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.745738 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31607] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.833290 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31781] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.833311 2026] [core:error] [pid 3169496:tid 3169496] [client 20.215.216.94:31781] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.925655 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:31792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.925685 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:31792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.938092 2026] [lsapi:warn] [pid 3164720:tid 3164720] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:02:50.997550 2026] [core:error] [pid 3166995:tid 3166995] [client 20.215.216.94:25874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:50.997576 2026] [core:error] [pid 3166995:tid 3166995] [client 20.215.216.94:25874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.100028 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:25920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.100051 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:25920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.304590 2026] [core:error] [pid 3169395:tid 3169395] [client 20.215.216.94:23445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.304623 2026] [core:error] [pid 3169395:tid 3169395] [client 20.215.216.94:23445] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.381211 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:31744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.381242 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:31744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.487911 2026] [core:error] [pid 3170831:tid 3170831] [client 20.215.216.94:31606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.487936 2026] [core:error] [pid 3170831:tid 3170831] [client 20.215.216.94:31606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.553298 2026] [core:error] [pid 3166995:tid 3166995] [client 20.215.216.94:25972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.553328 2026] [core:error] [pid 3166995:tid 3166995] [client 20.215.216.94:25972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.686325 2026] [core:error] [pid 3169395:tid 3169395] [client 20.215.216.94:23432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.686351 2026] [core:error] [pid 3169395:tid 3169395] [client 20.215.216.94:23432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.910796 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:25894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:51.910817 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:25894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.252305 2026] [core:error] [pid 3158357:tid 3158357] [client 20.215.216.94:25965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.252337 2026] [core:error] [pid 3158357:tid 3158357] [client 20.215.216.94:25965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.342135 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:25952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.342158 2026] [core:error] [pid 3165163:tid 3165163] [client 20.215.216.94:25952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.436999 2026] [core:error] [pid 3158357:tid 3158357] [client 20.215.216.94:25983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.437025 2026] [core:error] [pid 3158357:tid 3158357] [client 20.215.216.94:25983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.520266 2026] [authz_core:error] [pid 3167188:tid 3167188] [client 57.141.0.63:55240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:52.520893 2026] [authz_core:error] [pid 3167188:tid 3167188] [client 57.141.0.63:55240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:52.719515 2026] [core:error] [pid 3162435:tid 3162435] [client 20.215.216.94:25946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:52.719540 2026] [core:error] [pid 3162435:tid 3162435] [client 20.215.216.94:25946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:53.596963 2026] [core:error] [pid 3171836:tid 3171836] [client 20.215.216.94:31757] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:53.597005 2026] [core:error] [pid 3171836:tid 3171836] [client 20.215.216.94:31757] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:53.694196 2026] [ssl:error] [pid 3171878:tid 3171878] (EAI 2)Name or service not known: [client 144.76.19.72:28814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:53.694248 2026] [ssl:error] [pid 3171878:tid 3171878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:53.698535 2026] [core:error] [pid 3171879:tid 3171879] [client 20.215.216.94:25899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:53.698573 2026] [core:error] [pid 3171879:tid 3171879] [client 20.215.216.94:25899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:53.752599 2026] [ssl:error] [pid 3171878:tid 3171878] (EAI 2)Name or service not known: [client 144.76.19.72:28818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:53.752633 2026] [ssl:error] [pid 3171878:tid 3171878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:53.812363 2026] [core:error] [pid 3171879:tid 3171879] [client 20.215.216.94:31746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:53.812387 2026] [core:error] [pid 3171879:tid 3171879] [client 20.215.216.94:31746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:54.123278 2026] [core:error] [pid 3153255:tid 3153255] [client 20.215.216.94:25978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:54.123306 2026] [core:error] [pid 3153255:tid 3153255] [client 20.215.216.94:25978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:54.369624 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:54.369656 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:54.870020 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:23464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:54.870047 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:23464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:54.975925 2026] [security2:error] [pid 3171919:tid 3171919] [client 34.234.200.207:26776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiology-therapy-centre-moorgate-liverpool-street/"] [unique_id "ams9bmZ6dQeHLl3v2khhsAAAACA"]
[Thu Jul 30 13:02:55.333762 2026] [core:error] [pid 3171919:tid 3171919] [client 20.215.216.94:31769] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:55.333790 2026] [core:error] [pid 3171919:tid 3171919] [client 20.215.216.94:31769] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:55.468204 2026] [access_compat:error] [pid 3166364:tid 3166364] [client 44.216.125.112:15255] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 13:02:55.468314 2026] [access_compat:error] [pid 3166364:tid 3166364] [client 44.216.125.112:15255] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:02:55.847932 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:25921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:55.847967 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:25921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.223503 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:25909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.223532 2026] [core:error] [pid 3167136:tid 3167136] [client 20.215.216.94:25909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.408150 2026] [ssl:error] [pid 3170387:tid 3170387] (70014)End of file found: [client 216.73.216.199:43262] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:56.468112 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:31807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.468136 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:31807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.532520 2026] [authz_core:error] [pid 3171972:tid 3171972] [client 89.124.118.119:53517] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 13:02:56.535259 2026] [authz_core:error] [pid 3171972:tid 3171972] [client 89.124.118.119:53517] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 13:02:56.577597 2026] [authz_core:error] [pid 3171969:tid 3171969] [client 57.141.0.30:64844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:02:56.578258 2026] [authz_core:error] [pid 3171969:tid 3171969] [client 57.141.0.30:64844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:02:56.579822 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:23450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.579839 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:23450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.741400 2026] [core:error] [pid 3171973:tid 3171973] [client 20.215.216.94:25945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.741424 2026] [core:error] [pid 3171973:tid 3171973] [client 20.215.216.94:25945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.810468 2026] [ssl:error] [pid 3160805:tid 3160805] (EAI 2)Name or service not known: [client 144.76.19.72:28830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:56.810507 2026] [ssl:error] [pid 3160805:tid 3160805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:56.862558 2026] [ssl:error] [pid 3171969:tid 3171969] (EAI 2)Name or service not known: [client 144.76.19.72:28846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:56.862591 2026] [ssl:error] [pid 3171969:tid 3171969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:56.894792 2026] [ssl:error] [pid 3171972:tid 3171972] (70014)End of file found: [client 216.73.216.199:20294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:56.928084 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:56.928108 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.003202 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:25905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.003230 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:25905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.083714 2026] [core:error] [pid 3171969:tid 3171969] [client 20.215.216.94:25969] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.083736 2026] [core:error] [pid 3171969:tid 3171969] [client 20.215.216.94:25969] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.209689 2026] [ssl:error] [pid 3161519:tid 3161519] (70014)End of file found: [client 216.73.216.199:11020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:02:57.225294 2026] [core:error] [pid 3166423:tid 3166423] [client 20.215.216.94:31801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.225318 2026] [core:error] [pid 3166423:tid 3166423] [client 20.215.216.94:31801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.315854 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.315877 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.445040 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:25973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.445083 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:25973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.603774 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:31762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.603798 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:31762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.770825 2026] [core:error] [pid 3166423:tid 3166423] [client 20.215.216.94:25858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.770850 2026] [core:error] [pid 3166423:tid 3166423] [client 20.215.216.94:25858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.944134 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:57.944179 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31762] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.070154 2026] [core:error] [pid 3166423:tid 3166423] [client 20.215.216.94:31590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.070179 2026] [core:error] [pid 3166423:tid 3166423] [client 20.215.216.94:31590] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.232203 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:23426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.232224 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:23426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.447238 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.447260 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.580016 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:31604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.580036 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:31604] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.671889 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31783] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.671914 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31783] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.824944 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.824965 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31778] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.915202 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:58.915225 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.013255 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:31605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.013283 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:31605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.184678 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31803] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.184708 2026] [core:error] [pid 3167188:tid 3167188] [client 20.215.216.94:31803] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.361219 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.361250 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.442653 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:25937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.442676 2026] [core:error] [pid 3159608:tid 3159608] [client 20.215.216.94:25937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.535184 2026] [core:error] [pid 3171836:tid 3171836] [client 20.215.216.94:23435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.535209 2026] [core:error] [pid 3171836:tid 3171836] [client 20.215.216.94:23435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.664812 2026] [core:error] [pid 3171878:tid 3171878] [client 20.215.216.94:31596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.664840 2026] [core:error] [pid 3171878:tid 3171878] [client 20.215.216.94:31596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.757867 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:25940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.757901 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:25940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.879461 2026] [core:error] [pid 3172012:tid 3172012] [client 20.215.216.94:23430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.879516 2026] [core:error] [pid 3172012:tid 3172012] [client 20.215.216.94:23430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:02:59.917871 2026] [ssl:error] [pid 3161564:tid 3161564] (EAI 2)Name or service not known: [client 144.76.19.72:51612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:59.917896 2026] [ssl:error] [pid 3161564:tid 3161564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:02:59.971192 2026] [ssl:error] [pid 3172013:tid 3172013] (EAI 2)Name or service not known: [client 144.76.19.72:51618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:02:59.971226 2026] [ssl:error] [pid 3172013:tid 3172013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:00.054087 2026] [core:error] [pid 3172014:tid 3172014] [client 20.215.216.94:31788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:00.054128 2026] [core:error] [pid 3172014:tid 3172014] [client 20.215.216.94:31788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:00.251888 2026] [core:error] [pid 3172015:tid 3172015] [client 20.215.216.94:25959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:00.251927 2026] [core:error] [pid 3172015:tid 3172015] [client 20.215.216.94:25959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:00.617321 2026] [core:error] [pid 3172019:tid 3172019] [client 20.215.216.94:31794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:00.617362 2026] [core:error] [pid 3172019:tid 3172019] [client 20.215.216.94:31794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.071495 2026] [core:error] [pid 3172027:tid 3172027] [client 20.215.216.94:23451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.071534 2026] [core:error] [pid 3172027:tid 3172027] [client 20.215.216.94:23451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.094781 2026] [authz_core:error] [pid 3172026:tid 3172026] [client 66.249.66.34:50133] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:03:01.097462 2026] [authz_core:error] [pid 3172026:tid 3172026] [client 66.249.66.34:50133] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:03:01.262920 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.262949 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31764] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.429259 2026] [lsapi:warn] [pid 3171878:tid 3171878] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:03:01.432377 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:25958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.432399 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:25958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.611541 2026] [core:error] [pid 3172014:tid 3172014] [client 20.215.216.94:31599] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.611568 2026] [core:error] [pid 3172014:tid 3172014] [client 20.215.216.94:31599] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.689295 2026] [core:error] [pid 3172015:tid 3172015] [client 20.215.216.94:31784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.689322 2026] [core:error] [pid 3172015:tid 3172015] [client 20.215.216.94:31784] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.733809 2026] [ssl:error] [pid 3169879:tid 3169879] (70014)End of file found: [client 216.73.216.199:24317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:01.792783 2026] [core:error] [pid 3172020:tid 3172020] [client 20.215.216.94:25925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.792817 2026] [core:error] [pid 3172020:tid 3172020] [client 20.215.216.94:25925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.880321 2026] [core:error] [pid 3171920:tid 3171920] [client 20.215.216.94:31745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:01.880360 2026] [core:error] [pid 3171920:tid 3171920] [client 20.215.216.94:31745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.123079 2026] [core:error] [pid 3172021:tid 3172021] [client 20.215.216.94:23425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.123117 2026] [core:error] [pid 3172021:tid 3172021] [client 20.215.216.94:23425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.205855 2026] [core:error] [pid 3169397:tid 3169397] [client 20.215.216.94:23279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.205880 2026] [core:error] [pid 3169397:tid 3169397] [client 20.215.216.94:23279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.314345 2026] [core:error] [pid 3158823:tid 3158823] [client 20.215.216.94:31572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.314368 2026] [core:error] [pid 3158823:tid 3158823] [client 20.215.216.94:31572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.461909 2026] [core:error] [pid 3161368:tid 3161368] [client 20.215.216.94:31798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.461937 2026] [core:error] [pid 3161368:tid 3161368] [client 20.215.216.94:31798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.629408 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:25935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.629435 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:25935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.728372 2026] [core:error] [pid 3171458:tid 3171458] (13)Permission denied: [client 216.73.216.199:32714] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/sanity_checks
[Thu Jul 30 13:03:02.915525 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:23487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:02.915562 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:23487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.025406 2026] [ssl:error] [pid 3172015:tid 3172015] (EAI 2)Name or service not known: [client 144.76.19.72:51628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:03.025442 2026] [ssl:error] [pid 3172015:tid 3172015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:03.030573 2026] [ssl:error] [pid 3171458:tid 3171458] (70014)End of file found: [client 216.73.216.199:32714] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:03.082255 2026] [ssl:error] [pid 3172020:tid 3172020] (EAI 2)Name or service not known: [client 144.76.19.72:51640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:03.082299 2026] [ssl:error] [pid 3172020:tid 3172020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:03.163364 2026] [core:error] [pid 3171920:tid 3171920] [client 20.215.216.94:25892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.163387 2026] [core:error] [pid 3171920:tid 3171920] [client 20.215.216.94:25892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.267562 2026] [core:error] [pid 3171878:tid 3171878] [client 20.215.216.94:31614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.267582 2026] [core:error] [pid 3171878:tid 3171878] [client 20.215.216.94:31614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.399931 2026] [core:error] [pid 3171918:tid 3171918] [client 66.249.66.66:36248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.399961 2026] [core:error] [pid 3171918:tid 3171918] [client 66.249.66.66:36248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.505690 2026] [core:error] [pid 3172018:tid 3172018] [client 20.215.216.94:25880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:03.505714 2026] [core:error] [pid 3172018:tid 3172018] [client 20.215.216.94:25880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.032707 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:25865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.032733 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:25865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.171205 2026] [ssl:error] [pid 3165993:tid 3165993] (70014)End of file found: [client 216.73.216.199:31409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:04.176793 2026] [access_compat:error] [pid 3161368:tid 3161368] [client 2.189.5.162:37146] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:03:04.215506 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:31566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.215528 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:31566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.288277 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31573] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.288302 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:31573] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.383656 2026] [core:error] [pid 3172020:tid 3172020] [client 20.215.216.94:31791] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.383677 2026] [core:error] [pid 3172020:tid 3172020] [client 20.215.216.94:31791] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.464215 2026] [core:error] [pid 3171878:tid 3171878] [client 20.215.216.94:31578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.464234 2026] [core:error] [pid 3171878:tid 3171878] [client 20.215.216.94:31578] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.478651 2026] [ssl:error] [pid 3172015:tid 3172015] (70014)End of file found: [client 216.73.216.199:59806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:04.711321 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:23239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.711345 2026] [core:error] [pid 3161435:tid 3161435] [client 20.215.216.94:23239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.768964 2026] [ssl:error] [pid 3172018:tid 3172018] (70014)End of file found: [client 216.73.216.199:8684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:04.836395 2026] [core:error] [pid 3169397:tid 3169397] [client 20.215.216.94:25934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:04.836429 2026] [core:error] [pid 3169397:tid 3169397] [client 20.215.216.94:25934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.033248 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:25884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.033271 2026] [core:error] [pid 3167187:tid 3167187] [client 20.215.216.94:25884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.232916 2026] [core:error] [pid 3171974:tid 3171974] [client 20.215.216.94:25950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.232940 2026] [core:error] [pid 3171974:tid 3171974] [client 20.215.216.94:25950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.367085 2026] [core:error] [pid 3170388:tid 3170388] [client 20.215.216.94:23473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.367108 2026] [core:error] [pid 3170388:tid 3170388] [client 20.215.216.94:23473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.514621 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:25865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.514648 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:25865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.596630 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.596653 2026] [core:error] [pid 3169498:tid 3169498] [client 20.215.216.94:25924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.692315 2026] [core:error] [pid 3172020:tid 3172020] [client 20.215.216.94:23462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.692335 2026] [core:error] [pid 3172020:tid 3172020] [client 20.215.216.94:23462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.776951 2026] [core:error] [pid 3165081:tid 3165081] [client 20.215.216.94:25971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.776972 2026] [core:error] [pid 3165081:tid 3165081] [client 20.215.216.94:25971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.927091 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31787] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:05.927114 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:31787] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.029314 2026] [core:error] [pid 3171919:tid 3171919] [client 20.215.216.94:31586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.029341 2026] [core:error] [pid 3171919:tid 3171919] [client 20.215.216.94:31586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.140890 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:51644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:06.140920 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:06.195545 2026] [ssl:error] [pid 3171974:tid 3171974] (EAI 2)Name or service not known: [client 144.76.19.72:51656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:06.195577 2026] [ssl:error] [pid 3171974:tid 3171974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:06.298825 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:25967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.298850 2026] [core:error] [pid 3169497:tid 3169497] [client 20.215.216.94:25967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.456458 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:23448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.456507 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:23448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.589895 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:25908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.589938 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:25908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.750336 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:25901] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.750358 2026] [core:error] [pid 3171209:tid 3171209] [client 20.215.216.94:25901] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.955298 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:31613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:06.955321 2026] [core:error] [pid 3156182:tid 3156182] [client 20.215.216.94:31613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:07.124178 2026] [core:error] [pid 3170388:tid 3170388] [client 20.215.216.94:31575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:07.124200 2026] [core:error] [pid 3170388:tid 3170388] [client 20.215.216.94:31575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:07.464273 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:31589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:07.464307 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:31589] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:07.827979 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:31597] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:07.828016 2026] [core:error] [pid 3161607:tid 3161607] [client 20.215.216.94:31597] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:07.927055 2026] [security2:error] [pid 3171968:tid 3171968] [client 74.7.243.248:38794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.thatwall.com.davidebell.com"] [uri "/"] [unique_id "ams9e7Os0kvpq9bEbbx4SgAAACo"]
[Thu Jul 30 13:03:08.063050 2026] [core:error] [pid 3169879:tid 3169879] [client 66.249.66.194:39239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.063108 2026] [core:error] [pid 3169879:tid 3169879] [client 66.249.66.194:39239] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.265780 2026] [authz_core:error] [pid 3172028:tid 3172028] [client 57.141.0.40:20844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:03:08.266400 2026] [authz_core:error] [pid 3172028:tid 3172028] [client 57.141.0.40:20844] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:03:08.302879 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:25922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.302906 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:25922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.504311 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:25933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.504334 2026] [core:error] [pid 3170387:tid 3170387] [client 20.215.216.94:25933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.671368 2026] [core:error] [pid 3164720:tid 3164720] [client 20.215.216.94:25907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.671398 2026] [core:error] [pid 3164720:tid 3164720] [client 20.215.216.94:25907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.851444 2026] [core:error] [pid 3170831:tid 3170831] [client 20.215.216.94:31579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.851467 2026] [core:error] [pid 3170831:tid 3170831] [client 20.215.216.94:31579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.980847 2026] [core:error] [pid 3171968:tid 3171968] [client 20.215.216.94:25877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:08.980872 2026] [core:error] [pid 3171968:tid 3171968] [client 20.215.216.94:25877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.107914 2026] [core:error] [pid 3171458:tid 3171458] [client 20.215.216.94:31786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.107942 2026] [core:error] [pid 3171458:tid 3171458] [client 20.215.216.94:31786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.231017 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:25867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.231045 2026] [core:error] [pid 3164000:tid 3164000] [client 20.215.216.94:25867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.251601 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:51668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:09.251633 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:09.307657 2026] [ssl:error] [pid 3170387:tid 3170387] (EAI 2)Name or service not known: [client 144.76.19.72:51672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:09.307679 2026] [ssl:error] [pid 3170387:tid 3170387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:09.530743 2026] [core:error] [pid 3172023:tid 3172023] [client 20.215.216.94:25927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.530766 2026] [core:error] [pid 3172023:tid 3172023] [client 20.215.216.94:25927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.617903 2026] [ssl:error] [pid 3164720:tid 3164720] (70014)End of file found: [client 216.73.216.199:60343] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:09.714163 2026] [core:error] [pid 3171458:tid 3171458] [client 20.215.216.94:25970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.714186 2026] [core:error] [pid 3171458:tid 3171458] [client 20.215.216.94:25970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:09.936598 2026] [ssl:error] [pid 3167136:tid 3167136] (70014)End of file found: [client 216.73.216.199:35908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:10.220034 2026] [ssl:error] [pid 3164000:tid 3164000] (70014)End of file found: [client 216.73.216.199:52315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:11.909460 2026] [lsapi:warn] [pid 3171458:tid 3171458] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:03:12.389615 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:40736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:12.389648 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:12.445282 2026] [ssl:error] [pid 3172014:tid 3172014] (EAI 2)Name or service not known: [client 144.76.19.72:40746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:12.445327 2026] [ssl:error] [pid 3172014:tid 3172014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:15.557317 2026] [ssl:error] [pid 3153255:tid 3153255] (EAI 2)Name or service not known: [client 144.76.19.72:40760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:15.557357 2026] [ssl:error] [pid 3153255:tid 3153255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:15.614670 2026] [ssl:error] [pid 3161435:tid 3161435] (EAI 2)Name or service not known: [client 144.76.19.72:40776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:15.614718 2026] [ssl:error] [pid 3161435:tid 3161435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:16.752685 2026] [ssl:error] [pid 3165993:tid 3165993] (70014)End of file found: [client 216.73.216.199:65535] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:17.309734 2026] [core:error] [pid 3169396:tid 3169396] [client 66.249.66.167:40035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:17.309766 2026] [core:error] [pid 3169396:tid 3169396] [client 66.249.66.167:40035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:18.670549 2026] [ssl:error] [pid 3161519:tid 3161519] (EAI 2)Name or service not known: [client 144.76.19.72:40782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:18.670584 2026] [ssl:error] [pid 3161519:tid 3161519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:18.726219 2026] [ssl:error] [pid 3164000:tid 3164000] (EAI 2)Name or service not known: [client 144.76.19.72:40794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:18.726248 2026] [ssl:error] [pid 3164000:tid 3164000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:19.182029 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php.dat.d/php_native_ver.dat"] [unique_id "ams9h7yUccp_T8FAQyjPGgAAAEQ"]
[Thu Jul 30 13:03:19.182411 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php.dat.d/php_native_ver.dat"] [unique_id "ams9h7yUccp_T8FAQyjPGgAAAEQ"]
[Thu Jul 30 13:03:19.182741 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php.dat.d/php_native_ver.dat"] [unique_id "ams9h7yUccp_T8FAQyjPGgAAAEQ"]
[Thu Jul 30 13:03:19.266155 2026] [authz_core:error] [pid 3171879:tid 3171879] [client 66.249.66.33:51304] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:03:19.268843 2026] [authz_core:error] [pid 3171879:tid 3171879] [client 66.249.66.33:51304] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:03:19.483134 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/phar.ini"] [unique_id "ams9h7yUccp_T8FAQyjPGwAAAEQ"]
[Thu Jul 30 13:03:19.483513 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/phar.ini"] [unique_id "ams9h7yUccp_T8FAQyjPGwAAAEQ"]
[Thu Jul 30 13:03:19.483811 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/phar.ini"] [unique_id "ams9h7yUccp_T8FAQyjPGwAAAEQ"]
[Thu Jul 30 13:03:19.986889 2026] [security2:error] [pid 3172020:tid 3172020] [client 74.7.227.60:47972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "ams9h7T8azhWznD4Er_2vQAAAEI"]
[Thu Jul 30 13:03:20.697604 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cldeploy-debug.log"] [unique_id "ams9iLyUccp_T8FAQyjPHwAAAEQ"]
[Thu Jul 30 13:03:20.697919 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cldeploy-debug.log"] [unique_id "ams9iLyUccp_T8FAQyjPHwAAAEQ"]
[Thu Jul 30 13:03:20.698155 2026] [security2:error] [pid 3172022:tid 3172022] [client 216.73.216.199:23957] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cldeploy-debug.log"] [unique_id "ams9iLyUccp_T8FAQyjPHwAAAEQ"]
[Thu Jul 30 13:03:21.299639 2026] [ssl:error] [pid 3172022:tid 3172022] (70014)End of file found: [client 216.73.216.199:23957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:21.779573 2026] [ssl:error] [pid 3172024:tid 3172024] (EAI 2)Name or service not known: [client 144.76.19.72:62474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:21.779612 2026] [ssl:error] [pid 3172024:tid 3172024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:21.809022 2026] [ssl:error] [pid 3170831:tid 3170831] (70014)End of file found: [client 216.73.216.199:28976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:21.836692 2026] [ssl:error] [pid 3171969:tid 3171969] (EAI 2)Name or service not known: [client 144.76.19.72:62488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:21.836727 2026] [ssl:error] [pid 3171969:tid 3171969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:22.388609 2026] [lsapi:warn] [pid 3158823:tid 3158823] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:03:22.505299 2026] [ssl:error] [pid 3169499:tid 3169499] (70014)End of file found: [client 216.73.216.199:28822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:22.802551 2026] [authz_core:error] [pid 3171879:tid 3171879] [client 66.249.66.33:51304] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:03:22.805259 2026] [authz_core:error] [pid 3171879:tid 3171879] [client 66.249.66.33:51304] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:03:24.603172 2026] [core:error] [pid 3158823:tid 3158823] [client 57.141.0.31:63808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:24.603212 2026] [core:error] [pid 3158823:tid 3158823] [client 57.141.0.31:63808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:24.892450 2026] [ssl:error] [pid 3169396:tid 3169396] (EAI 2)Name or service not known: [client 144.76.19.72:62498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:24.892499 2026] [ssl:error] [pid 3169396:tid 3169396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:25.365345 2026] [security2:error] [pid 3158823:tid 3158823] [client 43.135.44.152:20479] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9jfvPQBHCPDQ4G-osxwAAAB8"]
[Thu Jul 30 13:03:25.365407 2026] [security2:error] [pid 3158823:tid 3158823] [client 43.135.44.152:20479] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9jfvPQBHCPDQ4G-osxwAAAB8"]
[Thu Jul 30 13:03:25.365731 2026] [security2:error] [pid 3158823:tid 3158823] [client 43.135.44.152:20479] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9jfvPQBHCPDQ4G-osxwAAAB8"]
[Thu Jul 30 13:03:25.800744 2026] [ssl:error] [pid 3172024:tid 3172024] (EAI 2)Name or service not known: [client 144.76.19.72:62506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:25.800777 2026] [ssl:error] [pid 3172024:tid 3172024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:27.582735 2026] [authz_core:error] [pid 3169494:tid 3169494] [client 57.141.0.69:42800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:03:27.583371 2026] [authz_core:error] [pid 3169494:tid 3169494] [client 57.141.0.69:42800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:03:27.698786 2026] [ssl:error] [pid 3172024:tid 3172024] (70014)End of file found: [client 216.73.216.199:36790] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:28.613561 2026] [ssl:error] [pid 3171919:tid 3171919] (70014)End of file found: [client 216.73.216.199:30153] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:28.755712 2026] [core:error] [pid 3169494:tid 3169494] [client 66.249.66.167:58572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:28.755747 2026] [core:error] [pid 3169494:tid 3169494] [client 66.249.66.167:58572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:29.169749 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:62514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:29.169789 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:29.223287 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:62520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:29.223314 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:29.240621 2026] [security2:error] [pid 3164001:tid 3164001] [client 136.158.33.30:1220] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9kTZhvP_89BNqNAGeJwAAABI"]
[Thu Jul 30 13:03:29.240667 2026] [security2:error] [pid 3164001:tid 3164001] [client 136.158.33.30:1220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9kTZhvP_89BNqNAGeJwAAABI"]
[Thu Jul 30 13:03:29.240895 2026] [security2:error] [pid 3164001:tid 3164001] [client 136.158.33.30:1220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9kTZhvP_89BNqNAGeJwAAABI"]
[Thu Jul 30 13:03:29.521325 2026] [core:crit] [pid 3169497:tid 3169497] (13)Permission denied: [client 216.73.216.199:45934] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/py-selector/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/py-selector/' is executable
[Thu Jul 30 13:03:29.521496 2026] [core:crit] [pid 3169497:tid 3169497] (13)Permission denied: [client 216.73.216.199:45934] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/wizard/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/wizard/' is executable
[Thu Jul 30 13:03:29.521961 2026] [core:crit] [pid 3169497:tid 3169497] (13)Permission denied: [client 216.73.216.199:45934] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/hooks/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/hooks/' is executable
[Thu Jul 30 13:03:29.827123 2026] [ssl:error] [pid 3169497:tid 3169497] (70014)End of file found: [client 216.73.216.199:45934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:32.277534 2026] [ssl:error] [pid 3158928:tid 3158928] (EAI 2)Name or service not known: [client 144.76.19.72:44742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:32.277566 2026] [ssl:error] [pid 3158928:tid 3158928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:32.330533 2026] [ssl:error] [pid 3173382:tid 3173382] (EAI 2)Name or service not known: [client 144.76.19.72:44750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:32.330572 2026] [ssl:error] [pid 3173382:tid 3173382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:32.878606 2026] [lsapi:warn] [pid 3172020:tid 3172020] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:03:33.773086 2026] [security2:error] [pid 3172020:tid 3172020] [client 157.15.63.231:56108] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9lbT8azhWznD4Er_2wQAAAEI"]
[Thu Jul 30 13:03:33.773142 2026] [security2:error] [pid 3172020:tid 3172020] [client 157.15.63.231:56108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9lbT8azhWznD4Er_2wQAAAEI"]
[Thu Jul 30 13:03:33.773389 2026] [security2:error] [pid 3172020:tid 3172020] [client 157.15.63.231:56108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9lbT8azhWznD4Er_2wQAAAEI"]
[Thu Jul 30 13:03:34.298479 2026] [security2:error] [pid 3166364:tid 3166364] [client 74.7.241.58:53172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.learning.secretbluestone.co.uk"] [uri "/"] [unique_id "ams9lsgXdNWhjaDGQkWhaQAAACc"]
[Thu Jul 30 13:03:34.330939 2026] [ssl:error] [pid 3160805:tid 3160805] (70014)End of file found: [client 216.73.216.199:39198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:34.960962 2026] [ssl:error] [pid 3172020:tid 3172020] (70014)End of file found: [client 216.73.216.199:61529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:35.388030 2026] [ssl:error] [pid 3156182:tid 3156182] (EAI 2)Name or service not known: [client 144.76.19.72:44766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:35.388083 2026] [ssl:error] [pid 3156182:tid 3156182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:35.445684 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:44778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:35.445710 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:35.487384 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 57.141.0.69:58618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:03:35.488414 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 57.141.0.69:58618] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:03:36.170857 2026] [ssl:error] [pid 3164000:tid 3164000] (70014)End of file found: [client 216.73.216.199:7424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:38.153167 2026] [security2:error] [pid 3166364:tid 3166364] [client 47.128.96.33:37766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9msgXdNWhjaDGQkWhcAAAACc"]
[Thu Jul 30 13:03:38.501811 2026] [ssl:error] [pid 3171968:tid 3171968] (EAI 2)Name or service not known: [client 144.76.19.72:44782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:38.501867 2026] [ssl:error] [pid 3171968:tid 3171968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:38.558701 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:44786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:38.558746 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:38.609326 2026] [security2:error] [pid 3165163:tid 3165163] [client 85.208.96.193:56170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/waconia-school-board-meeting"] [unique_id "ams9mgFCW38BR3_kXUrBVAAAABo"]
[Thu Jul 30 13:03:40.104535 2026] [ssl:error] [pid 3161435:tid 3161435] (70014)End of file found: [client 216.73.216.199:1237] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:41.103186 2026] [security2:error] [pid 3172014:tid 3172014] [client 47.128.96.33:60496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9nQTy-miOro_1QpjTPQAAADo"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:41.223851 2026] [security2:error] [pid 3171921:tid 3171921] [client 114.119.132.171:49079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~18"] [unique_id "ams9nfRxEkeW1Jx8WxteQQAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~18
[Thu Jul 30 13:03:41.450045 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.66.3:62216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:41.450087 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.66.3:62216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:41.619441 2026] [ssl:error] [pid 3164000:tid 3164000] (EAI 2)Name or service not known: [client 144.76.19.72:22092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:41.619470 2026] [ssl:error] [pid 3164000:tid 3164000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:41.671557 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:22098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:41.671591 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:42.354137 2026] [security2:error] [pid 3169497:tid 3169497] [client 114.119.132.171:49093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~18"] [unique_id "ams9ntPV6NPpx_od9h3_6QAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~18
[Thu Jul 30 13:03:43.077270 2026] [security2:error] [pid 3172014:tid 3172014] [client 47.128.96.33:63368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9nwTy-miOro_1QpjTPwAAADo"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:43.339559 2026] [lsapi:warn] [pid 3171921:tid 3171921] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:03:43.893352 2026] [cgi:error] [pid 3169494:tid 3169494] [client 52.165.196.84:15211] AH02811: stderr from /home/aurorav/public_html/auroravation.com/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:03:44.024461 2026] [ssl:error] [pid 3166423:tid 3166423] (70014)End of file found: [client 216.73.216.199:8680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:44.728378 2026] [ssl:error] [pid 3174099:tid 3174099] (EAI 2)Name or service not known: [client 144.76.19.72:22104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:44.728410 2026] [ssl:error] [pid 3174099:tid 3174099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:44.786175 2026] [ssl:error] [pid 3172026:tid 3172026] (EAI 2)Name or service not known: [client 144.76.19.72:22110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:44.786213 2026] [ssl:error] [pid 3172026:tid 3172026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:45.265341 2026] [security2:error] [pid 3172014:tid 3172014] [client 47.128.96.33:10180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9oQTy-miOro_1QpjTQAAAADo"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:45.527708 2026] [ssl:error] [pid 3166364:tid 3166364] (70014)End of file found: [client 216.73.216.199:17636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:45.794587 2026] [authz_core:error] [pid 3172018:tid 3172018] [client 57.141.0.17:63282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:03:45.795214 2026] [authz_core:error] [pid 3172018:tid 3172018] [client 57.141.0.17:63282] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:03:46.034622 2026] [ssl:error] [pid 3172026:tid 3172026] (70014)End of file found: [client 216.73.216.199:8594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:46.311567 2026] [core:error] [pid 3170831:tid 3170831] [client 66.249.64.170:42191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:46.311597 2026] [core:error] [pid 3170831:tid 3170831] [client 66.249.64.170:42191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:47.232874 2026] [security2:error] [pid 3170831:tid 3170831] [client 47.128.96.33:13002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9oy3tm8oN0KuPtsNK4gAAAAQ"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:47.855991 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:22122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:47.856018 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:47.913698 2026] [ssl:error] [pid 3172014:tid 3172014] (EAI 2)Name or service not known: [client 144.76.19.72:22126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:47.913727 2026] [ssl:error] [pid 3172014:tid 3172014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:49.212737 2026] [security2:error] [pid 3171919:tid 3171919] [client 47.128.96.33:15384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9pWZ6dQeHLl3v2khiAAAAACA"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:49.463143 2026] [ssl:error] [pid 3172019:tid 3172019] (70014)End of file found: [client 216.73.216.199:14171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:49.619579 2026] [lsapi:warn] [pid 3171878:tid 3171878] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:03:50.969264 2026] [ssl:error] [pid 3172020:tid 3172020] (EAI 2)Name or service not known: [client 144.76.19.72:62010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:50.969299 2026] [ssl:error] [pid 3172020:tid 3172020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:51.025506 2026] [ssl:error] [pid 3166364:tid 3166364] (EAI 2)Name or service not known: [client 144.76.19.72:62020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:51.025541 2026] [ssl:error] [pid 3166364:tid 3166364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:51.157183 2026] [security2:error] [pid 3171458:tid 3171458] [client 47.128.96.33:17858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9p_KTPqJiEd35oQODRQAAABw"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:51.266143 2026] [ssl:error] [pid 3169397:tid 3169397] (70014)End of file found: [client 216.73.216.199:28606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:51.700625 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 51.120.70.186:29594] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-admin/includes/error_log
[Thu Jul 30 13:03:52.168083 2026] [ssl:error] [pid 3166364:tid 3166364] (70014)End of file found: [client 216.73.216.199:25721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:53.387191 2026] [security2:error] [pid 3158823:tid 3158823] [client 47.128.96.33:20246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9qfvPQBHCPDQ4G-os3gAAAB8"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:53.819270 2026] [lsapi:warn] [pid 3172014:tid 3172014] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:03:54.079666 2026] [ssl:error] [pid 3164001:tid 3164001] (EAI 2)Name or service not known: [client 144.76.19.72:62036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:54.079697 2026] [ssl:error] [pid 3164001:tid 3164001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:54.130134 2026] [core:error] [pid 3165163:tid 3165163] [client 66.249.66.167:54432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:54.130180 2026] [core:error] [pid 3165163:tid 3165163] [client 66.249.66.167:54432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:54.138734 2026] [core:error] [pid 3169494:tid 3169494] [client 66.249.66.3:55190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:54.138767 2026] [core:error] [pid 3169494:tid 3169494] [client 66.249.66.3:55190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:03:54.139542 2026] [ssl:error] [pid 3164001:tid 3164001] (EAI 2)Name or service not known: [client 144.76.19.72:62052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:54.139563 2026] [ssl:error] [pid 3164001:tid 3164001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:54.777417 2026] [ssl:error] [pid 3172014:tid 3172014] (70014)End of file found: [client 216.73.216.199:45091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:54.965891 2026] [authz_core:error] [pid 3172019:tid 3172019] [client 57.141.0.5:34800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:03:54.966541 2026] [authz_core:error] [pid 3172019:tid 3172019] [client 57.141.0.5:34800] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:03:56.263130 2026] [security2:error] [pid 3172019:tid 3172019] [client 47.128.96.33:24212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9rLa20LhEekYcx56PxAAAAEE"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:03:56.988010 2026] [ssl:error] [pid 3169397:tid 3169397] (70014)End of file found: [client 216.73.216.199:23980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:57.193177 2026] [ssl:error] [pid 3173382:tid 3173382] (EAI 2)Name or service not known: [client 144.76.19.72:62066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:57.193209 2026] [ssl:error] [pid 3173382:tid 3173382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:57.247898 2026] [ssl:error] [pid 3172021:tid 3172021] (EAI 2)Name or service not known: [client 144.76.19.72:62070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:03:57.247968 2026] [ssl:error] [pid 3172021:tid 3172021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:03:58.188836 2026] [ssl:error] [pid 3165163:tid 3165163] (70014)End of file found: [client 216.73.216.199:11197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:03:58.354924 2026] [access_compat:error] [pid 3171458:tid 3171458] [client 191.232.199.39:42284] AH01797: client denied by server configuration: /home/monitors/public_html/4k-monitors.co.uk/xmlrpc.php
[Thu Jul 30 13:03:59.267097 2026] [lsapi:warn] [pid 3172022:tid 3172022] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:00.246257 2026] [security2:error] [pid 3161435:tid 3161435] [client 47.128.96.33:29094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9sLeIiZKGCC3UCKNk0AAAABc"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:00.301794 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:53732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:00.301828 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:00.358122 2026] [ssl:error] [pid 3169497:tid 3169497] (EAI 2)Name or service not known: [client 144.76.19.72:53746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:00.358159 2026] [ssl:error] [pid 3169497:tid 3169497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:00.922186 2026] [ssl:error] [pid 3161607:tid 3161607] (70014)End of file found: [client 216.73.216.199:23277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:01.491298 2026] [core:error] [pid 3161435:tid 3161435] [client 57.141.0.35:24492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:01.491329 2026] [core:error] [pid 3161435:tid 3161435] [client 57.141.0.35:24492] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:02.213935 2026] [security2:error] [pid 3172018:tid 3172018] [client 47.128.96.33:31912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9srIcH4L5fXNAeIvwfwAAAD4"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:02.322132 2026] [ssl:error] [pid 3166423:tid 3166423] (70014)End of file found: [client 216.73.216.199:4082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:03.415568 2026] [ssl:error] [pid 3174703:tid 3174703] (EAI 2)Name or service not known: [client 144.76.19.72:53750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:03.415608 2026] [ssl:error] [pid 3174703:tid 3174703] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:03.471612 2026] [ssl:error] [pid 3169397:tid 3169397] (EAI 2)Name or service not known: [client 144.76.19.72:53758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:03.471651 2026] [ssl:error] [pid 3169397:tid 3169397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:03.632328 2026] [security2:error] [pid 3174754:tid 3174754] [client 216.73.216.199:24806] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/sockets.ini"] [unique_id "ams9sxIapq4pES2KI4_gOwAAAAw"]
[Thu Jul 30 13:04:03.632698 2026] [security2:error] [pid 3174754:tid 3174754] [client 216.73.216.199:24806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/sockets.ini"] [unique_id "ams9sxIapq4pES2KI4_gOwAAAAw"]
[Thu Jul 30 13:04:03.633020 2026] [security2:error] [pid 3174754:tid 3174754] [client 216.73.216.199:24806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/sockets.ini"] [unique_id "ams9sxIapq4pES2KI4_gOwAAAAw"]
[Thu Jul 30 13:04:04.118694 2026] [security2:error] [pid 3174900:tid 3174900] [client 47.128.96.33:34596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9tKNkVbs9Oj5DzpZr-AAAABM"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:04.284322 2026] [lsapi:warn] [pid 3171879:tid 3171879] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:04.630965 2026] [authz_core:error] [pid 3158928:tid 3158928] [client 57.141.0.62:64686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:04:04.631619 2026] [authz_core:error] [pid 3158928:tid 3158928] [client 57.141.0.62:64686] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:04:04.806182 2026] [authz_core:error] [pid 3174703:tid 3174703] [client 57.141.0.36:45120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:04:04.806872 2026] [authz_core:error] [pid 3174703:tid 3174703] [client 57.141.0.36:45120] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:04:05.123075 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 51.120.70.186:29594] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/ID3/error_log
[Thu Jul 30 13:04:05.262392 2026] [ssl:error] [pid 3174754:tid 3174754] (70014)End of file found: [client 216.73.216.199:24806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:06.101782 2026] [security2:error] [pid 3172023:tid 3172023] [client 47.128.96.33:37056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9tl1eHk7D7er-9Hz7-AAAAEU"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:06.529652 2026] [ssl:error] [pid 3165163:tid 3165163] (EAI 2)Name or service not known: [client 144.76.19.72:53768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:06.529683 2026] [ssl:error] [pid 3165163:tid 3165163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:06.582495 2026] [ssl:error] [pid 3171425:tid 3171425] (EAI 2)Name or service not known: [client 144.76.19.72:53784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:06.582530 2026] [ssl:error] [pid 3171425:tid 3171425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:06.773971 2026] [ssl:error] [pid 3171971:tid 3171971] (70014)End of file found: [client 216.73.216.199:44230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:06.808172 2026] [core:error] [pid 3170831:tid 3170831] [client 66.249.66.169:34920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:06.808200 2026] [core:error] [pid 3170831:tid 3170831] [client 66.249.66.169:34920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:07.607891 2026] [security2:error] [pid 3174702:tid 3174702] [client 85.208.96.211:14378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11270.0/prev_next,prev.html"] [unique_id "ams9txTdyjraqMV4GdlrJAAAAAY"]
[Thu Jul 30 13:04:07.865536 2026] [ssl:error] [pid 3171919:tid 3171919] (70014)End of file found: [client 216.73.216.199:2028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:08.411274 2026] [security2:error] [pid 3165993:tid 3165993] [client 47.128.96.33:39980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9uCViRs5PpqmeLavzHAAAACI"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:09.638615 2026] [ssl:error] [pid 3174099:tid 3174099] (EAI 2)Name or service not known: [client 144.76.19.72:54774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:09.638644 2026] [ssl:error] [pid 3174099:tid 3174099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:09.691467 2026] [ssl:error] [pid 3165993:tid 3165993] (EAI 2)Name or service not known: [client 144.76.19.72:54786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:09.691508 2026] [ssl:error] [pid 3165993:tid 3165993] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:09.720896 2026] [lsapi:warn] [pid 3164001:tid 3164001] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:09.727438 2026] [security2:error] [pid 3171969:tid 3171969] [client 49.51.180.2:45932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/fantversion.php"] [unique_id "ams9uUoxNlqZlmhYRQ6BigAAAC4"]
[Thu Jul 30 13:04:10.340688 2026] [security2:error] [pid 3166423:tid 3166423] [client 47.128.96.33:43056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9uvTaIMk1aP8tIeaUcAAAAC8"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:11.603545 2026] [ssl:error] [pid 3169494:tid 3169494] (70014)End of file found: [client 216.73.216.199:13287] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:12.498813 2026] [security2:error] [pid 3171969:tid 3171969] [client 47.128.96.33:45790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9vEoxNlqZlmhYRQ6BkAAAAC4"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:12.591191 2026] [security2:error] [pid 3175656:tid 3175656] [client 216.73.216.199:34196] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/zip.ini"] [unique_id "ams9vH5IZQvQQNe1DzoE7AAAAAg"]
[Thu Jul 30 13:04:12.591550 2026] [security2:error] [pid 3175656:tid 3175656] [client 216.73.216.199:34196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/zip.ini"] [unique_id "ams9vH5IZQvQQNe1DzoE7AAAAAg"]
[Thu Jul 30 13:04:12.591803 2026] [security2:error] [pid 3175656:tid 3175656] [client 216.73.216.199:34196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/zip.ini"] [unique_id "ams9vH5IZQvQQNe1DzoE7AAAAAg"]
[Thu Jul 30 13:04:13.176301 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:54796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:13.176330 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:13.255576 2026] [ssl:error] [pid 3175761:tid 3175761] (EAI 2)Name or service not known: [client 144.76.19.72:54802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:13.255617 2026] [ssl:error] [pid 3175761:tid 3175761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:13.866392 2026] [authz_core:error] [pid 3171969:tid 3171969] [client 57.141.0.36:63322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:04:13.867019 2026] [authz_core:error] [pid 3171969:tid 3171969] [client 57.141.0.36:63322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:04:14.333301 2026] [security2:error] [pid 3175656:tid 3175656] [client 216.73.216.199:34196] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/xmlwriter.ini"] [unique_id "ams9vn5IZQvQQNe1DzoE8gAAAAg"]
[Thu Jul 30 13:04:14.333592 2026] [security2:error] [pid 3175656:tid 3175656] [client 216.73.216.199:34196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/xmlwriter.ini"] [unique_id "ams9vn5IZQvQQNe1DzoE8gAAAAg"]
[Thu Jul 30 13:04:14.333798 2026] [security2:error] [pid 3175656:tid 3175656] [client 216.73.216.199:34196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/xmlwriter.ini"] [unique_id "ams9vn5IZQvQQNe1DzoE8gAAAAg"]
[Thu Jul 30 13:04:14.437543 2026] [security2:error] [pid 3172024:tid 3172024] [client 43.157.25.64:63795] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9vtXqEzmlI9p9XvWH0gAAAEY"]
[Thu Jul 30 13:04:14.437596 2026] [security2:error] [pid 3172024:tid 3172024] [client 43.157.25.64:63795] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9vtXqEzmlI9p9XvWH0gAAAEY"]
[Thu Jul 30 13:04:14.437851 2026] [security2:error] [pid 3172024:tid 3172024] [client 43.157.25.64:63795] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9vtXqEzmlI9p9XvWH0gAAAEY"]
[Thu Jul 30 13:04:14.441304 2026] [security2:error] [pid 3171458:tid 3171458] [client 47.128.96.33:48524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9vvKTPqJiEd35oQODUQAAABw"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:14.772272 2026] [lsapi:warn] [pid 3174753:tid 3174753] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:16.309403 2026] [ssl:error] [pid 3166364:tid 3166364] (EAI 2)Name or service not known: [client 144.76.19.72:54812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:16.309435 2026] [ssl:error] [pid 3166364:tid 3166364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:16.362121 2026] [ssl:error] [pid 3175758:tid 3175758] (EAI 2)Name or service not known: [client 144.76.19.72:54820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:16.362185 2026] [ssl:error] [pid 3175758:tid 3175758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:16.400150 2026] [security2:error] [pid 3175761:tid 3175761] [client 47.128.96.33:51056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9wF8TeXvwvvuZDEkXZQAAABg"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:16.754376 2026] [ssl:error] [pid 3175858:tid 3175858] (70014)End of file found: [client 216.73.216.199:15428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:17.657853 2026] [ssl:error] [pid 3175656:tid 3175656] (70014)End of file found: [client 216.73.216.199:34196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:18.375498 2026] [security2:error] [pid 3172018:tid 3172018] [client 47.128.96.33:53782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9wrIcH4L5fXNAeIvwhQAAAD4"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:18.443575 2026] [core:error] [pid 3171425:tid 3171425] [client 66.249.66.71:62603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:18.443600 2026] [core:error] [pid 3171425:tid 3171425] [client 66.249.66.71:62603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:19.408607 2026] [core:error] [pid 3156182:tid 3156182] [client 57.141.0.49:47832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:19.408663 2026] [core:error] [pid 3156182:tid 3156182] [client 57.141.0.49:47832] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:19.455423 2026] [ssl:error] [pid 3175856:tid 3175856] (EAI 2)Name or service not known: [client 144.76.19.72:54828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:19.455464 2026] [ssl:error] [pid 3175856:tid 3175856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:19.487428 2026] [core:error] [pid 3172028:tid 3172028] [client 66.249.66.39:55775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:19.487457 2026] [core:error] [pid 3172028:tid 3172028] [client 66.249.66.39:55775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:19.510232 2026] [ssl:error] [pid 3174755:tid 3174755] (EAI 2)Name or service not known: [client 144.76.19.72:54834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:19.510265 2026] [ssl:error] [pid 3174755:tid 3174755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:19.752356 2026] [security2:error] [pid 3172021:tid 3172021] [client 102.141.41.222:4696] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9w2M38Dp6pD6XK1Uz3QAAAEM"]
[Thu Jul 30 13:04:19.752406 2026] [security2:error] [pid 3172021:tid 3172021] [client 102.141.41.222:4696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9w2M38Dp6pD6XK1Uz3QAAAEM"]
[Thu Jul 30 13:04:19.752665 2026] [security2:error] [pid 3172021:tid 3172021] [client 102.141.41.222:4696] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9w2M38Dp6pD6XK1Uz3QAAAEM"]
[Thu Jul 30 13:04:20.219339 2026] [lsapi:warn] [pid 3174755:tid 3174755] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:20.336305 2026] [security2:error] [pid 3175857:tid 3175857] [client 47.128.96.33:56544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9xFjzfDLyHgkKHRR8jQAAACM"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:20.671278 2026] [ssl:error] [pid 3175758:tid 3175758] (70014)End of file found: [client 216.73.216.199:39140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:22.287977 2026] [security2:error] [pid 3175856:tid 3175856] [client 47.128.96.33:59158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9xpErHYn4f6fUQ9Up_QAAACE"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:22.567629 2026] [ssl:error] [pid 3175855:tid 3175855] (EAI 2)Name or service not known: [client 144.76.19.72:56322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:22.567686 2026] [ssl:error] [pid 3175855:tid 3175855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:22.691636 2026] [ssl:error] [pid 3172021:tid 3172021] (EAI 2)Name or service not known: [client 144.76.19.72:56338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:22.691669 2026] [ssl:error] [pid 3172021:tid 3172021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:22.794346 2026] [ssl:error] [pid 3170831:tid 3170831] (70014)End of file found: [client 216.73.216.199:55464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:23.650123 2026] [cgi:error] [pid 3165118:tid 3165118] [client 20.104.22.47:59709] AH02812: stderr from /home/rediscov/public_html/woodsandgreenfurniture.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:04:23.797659 2026] [security2:error] [pid 3175856:tid 3175856] [client 37.205.118.52:56001] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9x5ErHYn4f6fUQ9Up_gAAACE"]
[Thu Jul 30 13:04:23.797720 2026] [security2:error] [pid 3175856:tid 3175856] [client 37.205.118.52:56001] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9x5ErHYn4f6fUQ9Up_gAAACE"]
[Thu Jul 30 13:04:23.798099 2026] [security2:error] [pid 3175856:tid 3175856] [client 37.205.118.52:56001] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9x5ErHYn4f6fUQ9Up_gAAACE"]
[Thu Jul 30 13:04:24.177191 2026] [security2:error] [pid 3175656:tid 3175656] [client 47.128.96.33:61922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9yH5IZQvQQNe1DzoE-gAAAAg"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:25.256628 2026] [lsapi:warn] [pid 3171969:tid 3171969] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:25.557834 2026] [core:error] [pid 3172021:tid 3172021] [client 57.141.0.18:33986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:25.557863 2026] [core:error] [pid 3172021:tid 3172021] [client 57.141.0.18:33986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:25.749545 2026] [ssl:error] [pid 3175854:tid 3175854] (EAI 2)Name or service not known: [client 144.76.19.72:56340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:25.749579 2026] [ssl:error] [pid 3175854:tid 3175854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:25.805901 2026] [ssl:error] [pid 3156183:tid 3156183] (EAI 2)Name or service not known: [client 144.76.19.72:56350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:25.805925 2026] [ssl:error] [pid 3156183:tid 3156183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:26.180748 2026] [security2:error] [pid 3175759:tid 3175759] [client 47.128.96.33:64640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9yvKes8uLwmk6grKSMgAAABQ"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:27.952692 2026] [core:error] [pid 3175758:tid 3175758] (13)Permission denied: [client 216.73.216.199:59754] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/bus/memory/drivers_probe
[Thu Jul 30 13:04:28.025875 2026] [authz_core:error] [pid 3175760:tid 3175760] [client 66.249.66.33:52076] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:04:28.028531 2026] [authz_core:error] [pid 3175760:tid 3175760] [client 66.249.66.33:52076] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:04:28.251141 2026] [security2:error] [pid 3173382:tid 3173382] [client 47.128.96.33:11858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9zCL7JDCgmf0bAu-LEgAAAAA"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:28.254372 2026] [ssl:error] [pid 3175758:tid 3175758] (70014)End of file found: [client 216.73.216.199:59754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:28.550810 2026] [core:error] [pid 3165163:tid 3165163] (13)Permission denied: [client 216.73.216.199:30945] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:1b/eject
[Thu Jul 30 13:04:28.863616 2026] [ssl:error] [pid 3156183:tid 3156183] (EAI 2)Name or service not known: [client 144.76.19.72:56358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:28.863647 2026] [ssl:error] [pid 3156183:tid 3156183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:28.919028 2026] [ssl:error] [pid 3169497:tid 3169497] (EAI 2)Name or service not known: [client 144.76.19.72:56370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:28.919054 2026] [ssl:error] [pid 3169497:tid 3169497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:30.179173 2026] [security2:error] [pid 3172026:tid 3172026] [client 47.128.96.33:14682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams9zi78IHy3xzMQauDA7QAAAEg"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:30.666754 2026] [core:error] [pid 3174099:tid 3174099] (13)Permission denied: [client 216.73.216.199:11715] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty44/subsystem/ttyS0/flags
[Thu Jul 30 13:04:30.686747 2026] [lsapi:warn] [pid 3171971:tid 3171971] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:31.273666 2026] [ssl:error] [pid 3174099:tid 3174099] (70014)End of file found: [client 216.73.216.199:11715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:31.611497 2026] [security2:error] [pid 3175855:tid 3175855] [client 47.128.114.125:36506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.josephashmore.org"] [uri "/robots.txt"] [unique_id "ams9z8RlP7B9AjcGdDSxkAAAAB4"]
[Thu Jul 30 13:04:31.970856 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:42652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:31.970886 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:32.023209 2026] [ssl:error] [pid 3171971:tid 3171971] (EAI 2)Name or service not known: [client 144.76.19.72:42664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:32.023268 2026] [ssl:error] [pid 3171971:tid 3171971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:32.142130 2026] [security2:error] [pid 3172021:tid 3172021] [client 47.128.96.33:17484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams90GM38Dp6pD6XK1Uz4wAAAEM"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:32.170051 2026] [core:error] [pid 3174755:tid 3174755] [client 66.249.66.167:37656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:32.170088 2026] [core:error] [pid 3174755:tid 3174755] [client 66.249.66.167:37656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:32.484753 2026] [security2:error] [pid 3156183:tid 3156183] [client 64.225.75.246:59252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "ams90O5YRBltLKwt68i1ggAAAEA"]
[Thu Jul 30 13:04:32.484934 2026] [security2:error] [pid 3156183:tid 3156183] [client 64.225.75.246:59252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "ams90O5YRBltLKwt68i1ggAAAEA"]
[Thu Jul 30 13:04:32.485130 2026] [security2:error] [pid 3156183:tid 3156183] [client 64.225.75.246:59252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "ams90O5YRBltLKwt68i1ggAAAEA"]
[Thu Jul 30 13:04:33.700843 2026] [security2:error] [pid 3165163:tid 3165163] [client 216.73.216.199:30945] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/native.conf"] [unique_id "ams90QFCW38BR3_kXUrB8gAAABo"]
[Thu Jul 30 13:04:33.701156 2026] [security2:error] [pid 3165163:tid 3165163] [client 216.73.216.199:30945] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/native.conf"] [unique_id "ams90QFCW38BR3_kXUrB8gAAABo"]
[Thu Jul 30 13:04:33.701380 2026] [security2:error] [pid 3165163:tid 3165163] [client 216.73.216.199:30945] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/native.conf"] [unique_id "ams90QFCW38BR3_kXUrB8gAAABo"]
[Thu Jul 30 13:04:33.919981 2026] [authz_core:error] [pid 3172026:tid 3172026] [client 57.141.0.17:42780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:04:33.920630 2026] [authz_core:error] [pid 3172026:tid 3172026] [client 57.141.0.17:42780] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:04:34.087380 2026] [security2:error] [pid 3158823:tid 3158823] [client 47.128.96.33:20354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams90vvPQBHCPDQ4G-os9gAAAB8"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:35.076688 2026] [ssl:error] [pid 3172021:tid 3172021] (EAI 2)Name or service not known: [client 144.76.19.72:42666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:35.076720 2026] [ssl:error] [pid 3172021:tid 3172021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:35.128859 2026] [ssl:error] [pid 3175760:tid 3175760] (EAI 2)Name or service not known: [client 144.76.19.72:42672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:35.128903 2026] [ssl:error] [pid 3175760:tid 3175760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:35.205170 2026] [core:error] [pid 3156183:tid 3156183] [client 66.249.66.167:55858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:35.205202 2026] [core:error] [pid 3156183:tid 3156183] [client 66.249.66.167:55858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:35.748642 2026] [lsapi:warn] [pid 3172021:tid 3172021] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:36.024088 2026] [security2:error] [pid 3175761:tid 3175761] [client 47.128.96.33:23180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "ams91F8TeXvwvvuZDEkXagAAABg"], referer: http://www.prosperon.co.uk/robots.txt
[Thu Jul 30 13:04:36.110287 2026] [ssl:error] [pid 3165163:tid 3165163] (70014)End of file found: [client 216.73.216.199:30945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:36.581028 2026] [security2:error] [pid 3175858:tid 3175858] [client 64.225.75.246:33088] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "ams91HprHHYgU0-ckCodbQAAACU"]
[Thu Jul 30 13:04:36.581245 2026] [security2:error] [pid 3175858:tid 3175858] [client 64.225.75.246:33088] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "ams91HprHHYgU0-ckCodbQAAACU"]
[Thu Jul 30 13:04:36.581428 2026] [security2:error] [pid 3175858:tid 3175858] [client 64.225.75.246:33088] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "ams91HprHHYgU0-ckCodbQAAACU"]
[Thu Jul 30 13:04:36.712251 2026] [core:error] [pid 3172022:tid 3172022] (13)Permission denied: [client 216.73.216.199:26277] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty40/subsystem/ttyS0/flags
[Thu Jul 30 13:04:36.939320 2026] [security2:error] [pid 3172021:tid 3172021] [client 34.206.212.24:38009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "ams91GM38Dp6pD6XK1Uz5gAAAEM"]
[Thu Jul 30 13:04:38.181498 2026] [ssl:error] [pid 3171919:tid 3171919] (EAI 2)Name or service not known: [client 144.76.19.72:42678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:38.181549 2026] [ssl:error] [pid 3171919:tid 3171919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:38.234669 2026] [ssl:error] [pid 3170831:tid 3170831] (EAI 2)Name or service not known: [client 144.76.19.72:42680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:38.234702 2026] [ssl:error] [pid 3170831:tid 3170831] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:38.474805 2026] [authz_core:error] [pid 3171878:tid 3171878] [client 57.141.0.31:21556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:04:38.475438 2026] [authz_core:error] [pid 3171878:tid 3171878] [client 57.141.0.31:21556] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:04:38.769520 2026] [security2:error] [pid 3175578:tid 3175578] [client 54.198.33.233:31006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "ams91hX6R8BWsgi0rrzBugAAAAc"]
[Thu Jul 30 13:04:39.025556 2026] [security2:error] [pid 3170831:tid 3170831] [client 43.153.10.83:53830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.annawelshagent.com"] [uri "/"] [unique_id "ams91y3tm8oN0KuPtsNLBAAAAAQ"]
[Thu Jul 30 13:04:39.027293 2026] [security2:error] [pid 3161607:tid 3161607] [client 85.208.96.195:36202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/james-delvecchio-pennsylvania"] [unique_id "ams91xOlKma8f1Ez3iSz5wAAACs"]
[Thu Jul 30 13:04:40.594684 2026] [security2:error] [pid 3175761:tid 3175761] [client 23.23.137.202:14784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "ams92F8TeXvwvvuZDEkXbgAAABg"]
[Thu Jul 30 13:04:41.222283 2026] [lsapi:warn] [pid 3174755:tid 3174755] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:41.292353 2026] [ssl:error] [pid 3175856:tid 3175856] (EAI 2)Name or service not known: [client 144.76.19.72:31032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:41.292386 2026] [ssl:error] [pid 3175856:tid 3175856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:41.349913 2026] [ssl:error] [pid 3170831:tid 3170831] (EAI 2)Name or service not known: [client 144.76.19.72:31048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:41.349943 2026] [ssl:error] [pid 3170831:tid 3170831] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:41.708030 2026] [ssl:error] [pid 3175857:tid 3175857] (70014)End of file found: [client 216.73.216.199:30688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:43.114107 2026] [ssl:error] [pid 3175853:tid 3175853] (70014)End of file found: [client 216.73.216.199:1822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:43.830246 2026] [ssl:error] [pid 3156182:tid 3156182] (70014)End of file found: [client 216.73.216.199:14946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:44.213183 2026] [security2:error] [pid 3170831:tid 3170831] [client 165.22.34.189:54888] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "ams93C3tm8oN0KuPtsNLCAAAAAQ"]
[Thu Jul 30 13:04:44.213316 2026] [security2:error] [pid 3170831:tid 3170831] [client 165.22.34.189:54888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "ams93C3tm8oN0KuPtsNLCAAAAAQ"]
[Thu Jul 30 13:04:44.213548 2026] [security2:error] [pid 3170831:tid 3170831] [client 165.22.34.189:54888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "ams93C3tm8oN0KuPtsNLCAAAAAQ"]
[Thu Jul 30 13:04:44.409421 2026] [ssl:error] [pid 3172020:tid 3172020] (EAI 2)Name or service not known: [client 144.76.19.72:31050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:44.409462 2026] [ssl:error] [pid 3172020:tid 3172020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:44.464253 2026] [ssl:error] [pid 3165118:tid 3165118] (EAI 2)Name or service not known: [client 144.76.19.72:31056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:44.464305 2026] [ssl:error] [pid 3165118:tid 3165118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:44.692001 2026] [security2:error] [pid 3165118:tid 3165118] [client 50.19.102.70:9813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "ams93L-SsWMAa8hIeO3RWQAAABk"]
[Thu Jul 30 13:04:44.850548 2026] [core:error] [pid 3172020:tid 3172020] [client 66.249.66.39:38513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:44.850588 2026] [core:error] [pid 3172020:tid 3172020] [client 66.249.66.39:38513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:45.340749 2026] [security2:error] [pid 3174653:tid 3174653] [client 64.225.75.246:33188] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.wotmania.spamp.co.uk"] [uri "/trace.axd"] [unique_id "ams93ceOSVrY1GjpPqHTSAAAAAU"]
[Thu Jul 30 13:04:45.341033 2026] [security2:error] [pid 3174653:tid 3174653] [client 64.225.75.246:33188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/trace.axd"] [unique_id "ams93ceOSVrY1GjpPqHTSAAAAAU"]
[Thu Jul 30 13:04:45.341241 2026] [security2:error] [pid 3174653:tid 3174653] [client 64.225.75.246:33188] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/trace.axd"] [unique_id "ams93ceOSVrY1GjpPqHTSAAAAAU"]
[Thu Jul 30 13:04:46.228200 2026] [lsapi:warn] [pid 3172020:tid 3172020] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:46.273899 2026] [authz_core:error] [pid 3177146:tid 3177146] [client 57.141.0.17:28136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:04:46.274698 2026] [authz_core:error] [pid 3177146:tid 3177146] [client 57.141.0.17:28136] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:04:47.543901 2026] [ssl:error] [pid 3156183:tid 3156183] (EAI 2)Name or service not known: [client 144.76.19.72:31058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:47.543946 2026] [ssl:error] [pid 3156183:tid 3156183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:47.601365 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:31060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:47.601394 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:47.890821 2026] [security2:error] [pid 3174099:tid 3174099] [client 165.22.34.189:54912] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "ams933syeHgBnpO6F-MuvgAAAAI"]
[Thu Jul 30 13:04:47.890972 2026] [security2:error] [pid 3174099:tid 3174099] [client 165.22.34.189:54912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "ams933syeHgBnpO6F-MuvgAAAAI"]
[Thu Jul 30 13:04:47.891183 2026] [security2:error] [pid 3174099:tid 3174099] [client 165.22.34.189:54912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.git/config"] [unique_id "ams933syeHgBnpO6F-MuvgAAAAI"]
[Thu Jul 30 13:04:49.582122 2026] [security2:error] [pid 3173630:tid 3173630] [client 146.56.229.214:58988] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "ams94eL3XwBQdehD8jC5DQAAAAE"]
[Thu Jul 30 13:04:50.657756 2026] [ssl:error] [pid 3175857:tid 3175857] (EAI 2)Name or service not known: [client 144.76.19.72:42944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:50.657801 2026] [ssl:error] [pid 3175857:tid 3175857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:50.711233 2026] [ssl:error] [pid 3175761:tid 3175761] (EAI 2)Name or service not known: [client 144.76.19.72:42960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:50.711262 2026] [ssl:error] [pid 3175761:tid 3175761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:50.763453 2026] [core:error] [pid 3172019:tid 3172019] [client 57.141.0.49:22012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:50.763479 2026] [core:error] [pid 3172019:tid 3172019] [client 57.141.0.49:22012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:51.086501 2026] [security2:error] [pid 3175761:tid 3175761] [client 43.167.241.46:47852] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "abc-dyslexia.com"] [uri "/"] [unique_id "ams9418TeXvwvvuZDEkXdAAAABg"]
[Thu Jul 30 13:04:51.371548 2026] [ssl:error] [pid 3175759:tid 3175759] (70014)End of file found: [client 216.73.216.199:48138] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:51.672911 2026] [ssl:error] [pid 3171425:tid 3171425] (70014)End of file found: [client 216.73.216.199:11667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:51.686244 2026] [lsapi:warn] [pid 3172023:tid 3172023] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:51.961179 2026] [authz_core:error] [pid 3169494:tid 3169494] [client 169.58.39.193:58287] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 13:04:52.178372 2026] [ssl:error] [pid 3175761:tid 3175761] (70014)End of file found: [client 216.73.216.199:37272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:53.768213 2026] [ssl:error] [pid 3172028:tid 3172028] (EAI 2)Name or service not known: [client 144.76.19.72:42968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:53.768254 2026] [ssl:error] [pid 3172028:tid 3172028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:53.826043 2026] [ssl:error] [pid 3172028:tid 3172028] (EAI 2)Name or service not known: [client 144.76.19.72:42972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:53.826074 2026] [ssl:error] [pid 3172028:tid 3172028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:54.653694 2026] [authz_core:error] [pid 3156183:tid 3156183] [client 169.58.39.193:59072] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 13:04:56.701721 2026] [lsapi:warn] [pid 3177147:tid 3177147] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:04:56.882527 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:42974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:56.882570 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:56.939158 2026] [ssl:error] [pid 3171878:tid 3171878] (EAI 2)Name or service not known: [client 144.76.19.72:42982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:56.939187 2026] [ssl:error] [pid 3171878:tid 3171878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:04:56.989277 2026] [authz_core:error] [pid 3175856:tid 3175856] [client 57.141.0.55:32002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:04:56.989904 2026] [authz_core:error] [pid 3175856:tid 3175856] [client 57.141.0.55:32002] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:04:57.705296 2026] [ssl:error] [pid 3172020:tid 3172020] (70014)End of file found: [client 216.73.216.199:56695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:04:57.859836 2026] [core:error] [pid 3175758:tid 3175758] [client 66.249.66.167:52273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:57.859865 2026] [core:error] [pid 3175758:tid 3175758] [client 66.249.66.167:52273] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:57.861684 2026] [core:error] [pid 3172026:tid 3172026] [client 66.249.66.167:58466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:57.861699 2026] [core:error] [pid 3172026:tid 3172026] [client 66.249.66.167:58466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:04:58.880801 2026] [security2:error] [pid 3175758:tid 3175758] [client 165.22.34.189:49704] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.wotmania.spamp.co.uk"] [uri "/trace.axd"] [unique_id "ams96hBn_4CwBp9NJgXLrgAAAAo"]
[Thu Jul 30 13:04:58.881044 2026] [security2:error] [pid 3175758:tid 3175758] [client 165.22.34.189:49704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/trace.axd"] [unique_id "ams96hBn_4CwBp9NJgXLrgAAAAo"]
[Thu Jul 30 13:04:58.881263 2026] [security2:error] [pid 3175758:tid 3175758] [client 165.22.34.189:49704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/trace.axd"] [unique_id "ams96hBn_4CwBp9NJgXLrgAAAAo"]
[Thu Jul 30 13:04:59.329034 2026] [authz_core:error] [pid 3175656:tid 3175656] [client 169.58.39.193:60198] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 13:04:59.992715 2026] [ssl:error] [pid 3177729:tid 3177729] (EAI 2)Name or service not known: [client 144.76.19.72:58662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:04:59.992761 2026] [ssl:error] [pid 3177729:tid 3177729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:00.049510 2026] [ssl:error] [pid 3177729:tid 3177729] (EAI 2)Name or service not known: [client 144.76.19.72:58672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:00.049539 2026] [ssl:error] [pid 3177729:tid 3177729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:01.642424 2026] [ssl:error] [pid 3175760:tid 3175760] (70014)End of file found: [client 216.73.216.199:59525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:01.940814 2026] [core:error] [pid 3165163:tid 3165163] (13)Permission denied: [client 216.73.216.199:42568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS2/close_delay
[Thu Jul 30 13:05:02.124731 2026] [lsapi:warn] [pid 3158823:tid 3158823] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:02.543308 2026] [ssl:error] [pid 3165163:tid 3165163] (70014)End of file found: [client 216.73.216.199:42568] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:03.102733 2026] [ssl:error] [pid 3177873:tid 3177873] (EAI 2)Name or service not known: [client 144.76.19.72:58686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:03.102774 2026] [ssl:error] [pid 3177873:tid 3177873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:03.160237 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:58696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:03.160280 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:04.049531 2026] [ssl:error] [pid 3158823:tid 3158823] (70014)End of file found: [client 216.73.216.199:45168] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:04.652479 2026] [security2:error] [pid 3177760:tid 3177760] [client 114.119.135.136:63159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~102"] [unique_id "ams98MleJmmLSKBjJoes_wAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~102
[Thu Jul 30 13:05:06.201765 2026] [security2:error] [pid 3177874:tid 3177874] [client 114.119.135.136:63167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~102"] [unique_id "ams98hkPwsNy-ALHrodTOQAAACI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/request_format~html/cat_ids~102
[Thu Jul 30 13:05:06.219391 2026] [ssl:error] [pid 3177760:tid 3177760] (EAI 2)Name or service not known: [client 144.76.19.72:58710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:06.219434 2026] [ssl:error] [pid 3177760:tid 3177760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:06.279191 2026] [ssl:error] [pid 3175860:tid 3175860] (EAI 2)Name or service not known: [client 144.76.19.72:58718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:06.279247 2026] [ssl:error] [pid 3175860:tid 3175860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:06.957543 2026] [ssl:error] [pid 3175860:tid 3175860] (70014)End of file found: [client 216.73.216.199:30718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:07.167996 2026] [lsapi:warn] [pid 3175759:tid 3175759] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:07.981087 2026] [cgi:error] [pid 3175856:tid 3175856] [client 158.158.32.229:36769] AH02811: stderr from /home/aurorav/public_html/auroravation.com/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:05:08.104908 2026] [authz_core:error] [pid 3175761:tid 3175761] [client 169.58.39.193:61157] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 13:05:08.267652 2026] [cgi:error] [pid 3175856:tid 3175856] [client 158.158.32.229:36769] AH02811: stderr from /home/aurorav/public_html/auroravation.com/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:05:09.199166 2026] [security2:error] [pid 3169494:tid 3169494] [client 185.191.171.19:42278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "soul-connections.co.uk"] [uri "/robots.txt"] [unique_id "ams99fWmSNHoXW93nCeECwAAABU"]
[Thu Jul 30 13:05:09.331564 2026] [ssl:error] [pid 3177874:tid 3177874] (EAI 2)Name or service not known: [client 144.76.19.72:58734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:09.331604 2026] [ssl:error] [pid 3177874:tid 3177874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:09.387179 2026] [ssl:error] [pid 3171878:tid 3171878] (EAI 2)Name or service not known: [client 144.76.19.72:58738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:09.387206 2026] [ssl:error] [pid 3171878:tid 3171878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:09.486121 2026] [ssl:error] [pid 3172024:tid 3172024] (70014)End of file found: [client 216.73.216.199:42001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:09.613413 2026] [security2:error] [pid 3169494:tid 3169494] [client 185.191.171.3:61790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "soul-connections.co.uk"] [uri "/packages.php"] [unique_id "ams99fWmSNHoXW93nCeEDAAAABU"]
[Thu Jul 30 13:05:11.135560 2026] [ssl:error] [pid 3175761:tid 3175761] (70014)End of file found: [client 216.73.216.199:17201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:11.596719 2026] [core:error] [pid 3174099:tid 3174099] [client 66.249.66.195:58968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:11.596747 2026] [core:error] [pid 3174099:tid 3174099] [client 66.249.66.195:58968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:12.444631 2026] [ssl:error] [pid 3175759:tid 3175759] (EAI 2)Name or service not known: [client 144.76.19.72:60322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:12.444672 2026] [ssl:error] [pid 3175759:tid 3175759] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:12.498295 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:60336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:12.498326 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:12.627581 2026] [lsapi:warn] [pid 3174099:tid 3174099] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:13.846437 2026] [ssl:error] [pid 3177116:tid 3177116] (70014)End of file found: [client 216.73.216.199:55470] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:14.219723 2026] [authz_core:error] [pid 3178234:tid 3178234] [client 66.249.66.33:38695] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:05:14.222387 2026] [authz_core:error] [pid 3178234:tid 3178234] [client 66.249.66.33:38695] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:05:14.957833 2026] [ssl:error] [pid 3173630:tid 3173630] (70014)End of file found: [client 216.73.216.199:39043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:15.551578 2026] [ssl:error] [pid 3165118:tid 3165118] (EAI 2)Name or service not known: [client 144.76.19.72:60340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:15.551609 2026] [ssl:error] [pid 3165118:tid 3165118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:15.603054 2026] [ssl:error] [pid 3177874:tid 3177874] (EAI 2)Name or service not known: [client 144.76.19.72:60352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:15.603114 2026] [ssl:error] [pid 3177874:tid 3177874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:16.855185 2026] [security2:error] [pid 3177502:tid 3177502] [client 150.5.134.214:15721] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9_IAMf0X47M1iwESv_QAAAA4"]
[Thu Jul 30 13:05:16.855241 2026] [security2:error] [pid 3177502:tid 3177502] [client 150.5.134.214:15721] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams9_IAMf0X47M1iwESv_QAAAA4"]
[Thu Jul 30 13:05:16.855506 2026] [security2:error] [pid 3177502:tid 3177502] [client 150.5.134.214:15721] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams9_IAMf0X47M1iwESv_QAAAA4"]
[Thu Jul 30 13:05:17.700694 2026] [lsapi:warn] [pid 3177876:tid 3177876] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:18.674821 2026] [ssl:error] [pid 3177876:tid 3177876] (EAI 2)Name or service not known: [client 144.76.19.72:60362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:18.674857 2026] [ssl:error] [pid 3177876:tid 3177876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:18.797475 2026] [ssl:error] [pid 3158823:tid 3158823] (EAI 2)Name or service not known: [client 144.76.19.72:60368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:18.797524 2026] [ssl:error] [pid 3158823:tid 3158823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:20.043029 2026] [core:error] [pid 3156182:tid 3156182] [client 66.249.64.170:41447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:20.043056 2026] [core:error] [pid 3156182:tid 3156182] [client 66.249.64.170:41447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:21.381317 2026] [ssl:error] [pid 3177761:tid 3177761] (70014)End of file found: [client 216.73.216.199:26569] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:21.454379 2026] [security2:error] [pid 3175860:tid 3175860] [client 80.94.92.167:44888] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "horus-wellbeing.co.uk"] [uri "/.svn/wc.db"] [unique_id "ams-AfS6yx2HLbV9Tl_oJgAAACg"]
[Thu Jul 30 13:05:21.454552 2026] [security2:error] [pid 3175860:tid 3175860] [client 80.94.92.167:44888] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "horus-wellbeing.co.uk"] [uri "/.svn/wc.db"] [unique_id "ams-AfS6yx2HLbV9Tl_oJgAAACg"]
[Thu Jul 30 13:05:21.454738 2026] [security2:error] [pid 3175860:tid 3175860] [client 80.94.92.167:44888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "horus-wellbeing.co.uk"] [uri "/.svn/wc.db"] [unique_id "ams-AfS6yx2HLbV9Tl_oJgAAACg"]
[Thu Jul 30 13:05:21.593356 2026] [authz_core:error] [pid 3175578:tid 3175578] [client 20.104.22.47:59739] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/php.ini
[Thu Jul 30 13:05:21.853952 2026] [ssl:error] [pid 3165118:tid 3165118] (EAI 2)Name or service not known: [client 144.76.19.72:52082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:21.853996 2026] [ssl:error] [pid 3165118:tid 3165118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:21.909046 2026] [ssl:error] [pid 3178482:tid 3178482] (EAI 2)Name or service not known: [client 144.76.19.72:52084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:21.909092 2026] [ssl:error] [pid 3178482:tid 3178482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:22.094012 2026] [core:error] [pid 3175856:tid 3175856] [client 57.141.0.27:55354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:22.094044 2026] [core:error] [pid 3175856:tid 3175856] [client 57.141.0.27:55354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:22.287164 2026] [ssl:error] [pid 3178235:tid 3178235] (70014)End of file found: [client 216.73.216.199:29073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:22.454756 2026] [security2:error] [pid 3175860:tid 3175860] [client 80.94.92.167:44888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "horus-wellbeing.co.uk"] [uri "/index.php"] [unique_id "ams-AfS6yx2HLbV9Tl_oJgAAACg"]
[Thu Jul 30 13:05:22.926096 2026] [core:error] [pid 3172026:tid 3172026] [client 66.249.66.67:54943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:22.926127 2026] [core:error] [pid 3172026:tid 3172026] [client 66.249.66.67:54943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:23.095994 2026] [lsapi:warn] [pid 3171919:tid 3171919] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:23.196007 2026] [core:error] [pid 3174099:tid 3174099] (13)Permission denied: [client 216.73.216.199:46549] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty16/subsystem/ttyS2/close_delay
[Thu Jul 30 13:05:24.965260 2026] [ssl:error] [pid 3177876:tid 3177876] (EAI 2)Name or service not known: [client 144.76.19.72:52096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:24.965293 2026] [ssl:error] [pid 3177876:tid 3177876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:25.017962 2026] [ssl:error] [pid 3178203:tid 3178203] (EAI 2)Name or service not known: [client 144.76.19.72:52104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:25.017995 2026] [ssl:error] [pid 3178203:tid 3178203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:25.387191 2026] [ssl:error] [pid 3178445:tid 3178445] (70014)End of file found: [client 216.73.216.199:18370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:25.961333 2026] [security2:error] [pid 3175578:tid 3175578] [client 170.231.134.216:13097] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-BRX6R8BWsgi0rrzB1wAAAAc"]
[Thu Jul 30 13:05:25.961379 2026] [security2:error] [pid 3175578:tid 3175578] [client 170.231.134.216:13097] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-BRX6R8BWsgi0rrzB1wAAAAc"]
[Thu Jul 30 13:05:25.961636 2026] [security2:error] [pid 3175578:tid 3175578] [client 170.231.134.216:13097] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams-BRX6R8BWsgi0rrzB1wAAAAc"]
[Thu Jul 30 13:05:26.166315 2026] [ssl:error] [pid 3177729:tid 3177729] (70014)End of file found: [client 216.73.216.199:12605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:26.498642 2026] [authz_core:error] [pid 3175761:tid 3175761] [client 57.141.0.69:54756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:05:26.499278 2026] [authz_core:error] [pid 3175761:tid 3175761] [client 57.141.0.69:54756] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:05:27.105110 2026] [ssl:error] [pid 3178203:tid 3178203] (70014)End of file found: [client 216.73.216.199:5638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:28.074547 2026] [ssl:error] [pid 3178829:tid 3178829] (EAI 2)Name or service not known: [client 144.76.19.72:52110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:28.074613 2026] [ssl:error] [pid 3178829:tid 3178829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:28.128342 2026] [ssl:error] [pid 3172024:tid 3172024] (EAI 2)Name or service not known: [client 144.76.19.72:52124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:28.128380 2026] [ssl:error] [pid 3172024:tid 3172024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:28.167614 2026] [lsapi:warn] [pid 3175856:tid 3175856] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:30.654815 2026] [access_compat:error] [pid 3178829:tid 3178829] [client 45.158.164.139:53050] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:05:31.182300 2026] [ssl:error] [pid 3175858:tid 3175858] (EAI 2)Name or service not known: [client 144.76.19.72:21006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:31.182336 2026] [ssl:error] [pid 3175858:tid 3175858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:31.240461 2026] [ssl:error] [pid 3178867:tid 3178867] (EAI 2)Name or service not known: [client 144.76.19.72:21010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:31.240501 2026] [ssl:error] [pid 3178867:tid 3178867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:31.622534 2026] [ssl:error] [pid 3178445:tid 3178445] (70014)End of file found: [client 216.73.216.199:17567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:31.909685 2026] [security2:error] [pid 3174755:tid 3174755] [client 102.102.13.187:47866] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-C5oM_0qZA1Bm7WwNLwAAAA0"]
[Thu Jul 30 13:05:31.909749 2026] [security2:error] [pid 3174755:tid 3174755] [client 102.102.13.187:47866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-C5oM_0qZA1Bm7WwNLwAAAA0"]
[Thu Jul 30 13:05:31.909995 2026] [security2:error] [pid 3174755:tid 3174755] [client 102.102.13.187:47866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams-C5oM_0qZA1Bm7WwNLwAAAA0"]
[Thu Jul 30 13:05:32.121407 2026] [ssl:error] [pid 3178866:tid 3178866] (70014)End of file found: [client 216.73.216.199:38223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:33.554179 2026] [lsapi:warn] [pid 3158823:tid 3158823] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:33.697854 2026] [security2:error] [pid 3177582:tid 3177582] [client 185.191.171.15:34944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3118.0/prev_next,next.html"] [unique_id "ams-DSqKFmHLWqQUs3QX8gAAABE"]
[Thu Jul 30 13:05:34.050448 2026] [ssl:error] [pid 3174755:tid 3174755] (70014)End of file found: [client 216.73.216.199:33829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:34.296017 2026] [ssl:error] [pid 3177874:tid 3177874] (EAI 2)Name or service not known: [client 144.76.19.72:21020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:34.296058 2026] [ssl:error] [pid 3177874:tid 3177874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:34.348010 2026] [ssl:error] [pid 3178482:tid 3178482] (EAI 2)Name or service not known: [client 144.76.19.72:21032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:34.348040 2026] [ssl:error] [pid 3178482:tid 3178482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:34.815710 2026] [security2:error] [pid 3178482:tid 3178482] [client 206.189.225.181:59442] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-Do8BZlYqojU3N9d8bwAAAC0"]
[Thu Jul 30 13:05:34.815924 2026] [security2:error] [pid 3178482:tid 3178482] [client 206.189.225.181:59442] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-Do8BZlYqojU3N9d8bwAAAC0"]
[Thu Jul 30 13:05:34.816352 2026] [security2:error] [pid 3178482:tid 3178482] [client 206.189.225.181:59442] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-Do8BZlYqojU3N9d8bwAAAC0"]
[Thu Jul 30 13:05:35.583150 2026] [core:error] [pid 3175858:tid 3175858] [client 66.249.66.167:36621] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:35.583176 2026] [core:error] [pid 3175858:tid 3175858] [client 66.249.66.167:36621] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:35.679914 2026] [security2:error] [pid 3175578:tid 3175578] [client 206.189.225.181:59446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-DxX6R8BWsgi0rrzB3AAAAAc"]
[Thu Jul 30 13:05:35.680112 2026] [security2:error] [pid 3175578:tid 3175578] [client 206.189.225.181:59446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-DxX6R8BWsgi0rrzB3AAAAAc"]
[Thu Jul 30 13:05:35.680455 2026] [security2:error] [pid 3175578:tid 3175578] [client 206.189.225.181:59446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-DxX6R8BWsgi0rrzB3AAAAAc"]
[Thu Jul 30 13:05:35.755399 2026] [security2:error] [pid 3178234:tid 3178234] [client 20.171.55.167:10646] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.purple-childcare.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams-D5arSXaMaAfNCsg9KwAAACk"]
[Thu Jul 30 13:05:35.755630 2026] [security2:error] [pid 3178234:tid 3178234] [client 20.171.55.167:10646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.purple-childcare.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "ams-D5arSXaMaAfNCsg9KwAAACk"]
[Thu Jul 30 13:05:35.783344 2026] [security2:error] [pid 3178234:tid 3178234] [client 20.171.55.167:10646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.purple-childcare.co.uk"] [uri "/403.shtml"] [unique_id "ams-D5arSXaMaAfNCsg9KwAAACk"]
[Thu Jul 30 13:05:36.979513 2026] [ssl:error] [pid 3158823:tid 3158823] (70014)End of file found: [client 216.73.216.199:49357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:37.399598 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:21044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:37.399628 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:37.452567 2026] [ssl:error] [pid 3178866:tid 3178866] (EAI 2)Name or service not known: [client 144.76.19.72:21052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:37.452596 2026] [ssl:error] [pid 3178866:tid 3178866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:37.596292 2026] [core:error] [pid 3177761:tid 3177761] (13)Permission denied: [client 216.73.216.199:46010] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/total_objects
[Thu Jul 30 13:05:37.841992 2026] [security2:error] [pid 3178203:tid 3178203] [client 206.189.225.181:52648] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-EeMSoEzUrp-Lt6s_cgAAABM"]
[Thu Jul 30 13:05:37.842187 2026] [security2:error] [pid 3178203:tid 3178203] [client 206.189.225.181:52648] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-EeMSoEzUrp-Lt6s_cgAAABM"]
[Thu Jul 30 13:05:37.842603 2026] [security2:error] [pid 3178203:tid 3178203] [client 206.189.225.181:52648] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-EeMSoEzUrp-Lt6s_cgAAABM"]
[Thu Jul 30 13:05:37.998091 2026] [ssl:error] [pid 3177761:tid 3177761] (70014)End of file found: [client 216.73.216.199:46010] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:38.657550 2026] [lsapi:warn] [pid 3175856:tid 3175856] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:38.923340 2026] [security2:error] [pid 3177873:tid 3177873] [client 206.189.225.181:56414] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-EuZCW8g5abJbLdj8yQAAAB4"]
[Thu Jul 30 13:05:38.923646 2026] [security2:error] [pid 3177873:tid 3177873] [client 206.189.225.181:56414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-EuZCW8g5abJbLdj8yQAAAB4"]
[Thu Jul 30 13:05:38.924140 2026] [security2:error] [pid 3177873:tid 3177873] [client 206.189.225.181:56414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-EuZCW8g5abJbLdj8yQAAAB4"]
[Thu Jul 30 13:05:39.412001 2026] [security2:error] [pid 3179293:tid 3179293] [client 185.191.171.18:36658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/lakewood,-nj-dump-hours"] [unique_id "ams-E_tRvS8hJzwSSAg04gAAAAw"]
[Thu Jul 30 13:05:39.498761 2026] [ssl:error] [pid 3172026:tid 3172026] (70014)End of file found: [client 216.73.216.199:3733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:39.508458 2026] [authz_core:error] [pid 3165118:tid 3165118] [client 57.141.0.45:47880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:05:39.509161 2026] [authz_core:error] [pid 3165118:tid 3165118] [client 57.141.0.45:47880] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:05:39.582176 2026] [security2:error] [pid 3178867:tid 3178867] [client 206.189.225.181:56430] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-E68yF86QiAB0VofQhQAAAAo"]
[Thu Jul 30 13:05:39.582366 2026] [security2:error] [pid 3178867:tid 3178867] [client 206.189.225.181:56430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-E68yF86QiAB0VofQhQAAAAo"]
[Thu Jul 30 13:05:39.582764 2026] [security2:error] [pid 3178867:tid 3178867] [client 206.189.225.181:56430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-E68yF86QiAB0VofQhQAAAAo"]
[Thu Jul 30 13:05:40.509279 2026] [ssl:error] [pid 3178867:tid 3178867] (EAI 2)Name or service not known: [client 144.76.19.72:44440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:40.509307 2026] [ssl:error] [pid 3178867:tid 3178867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:40.562339 2026] [ssl:error] [pid 3174755:tid 3174755] (EAI 2)Name or service not known: [client 144.76.19.72:44442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:40.562365 2026] [ssl:error] [pid 3174755:tid 3174755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:42.011196 2026] [security2:error] [pid 3172022:tid 3172022] [client 51.68.111.245:17785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "ams-FryUccp_T8FAQyjPYwAAAEQ"]
[Thu Jul 30 13:05:42.019411 2026] [security2:error] [pid 3165118:tid 3165118] [client 206.189.225.181:36438] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-Fr-SsWMAa8hIeO3RdwAAABk"]
[Thu Jul 30 13:05:42.019564 2026] [security2:error] [pid 3165118:tid 3165118] [client 206.189.225.181:36438] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-Fr-SsWMAa8hIeO3RdwAAABk"]
[Thu Jul 30 13:05:42.019894 2026] [security2:error] [pid 3165118:tid 3165118] [client 206.189.225.181:36438] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-Fr-SsWMAa8hIeO3RdwAAABk"]
[Thu Jul 30 13:05:42.405127 2026] [ssl:error] [pid 3178483:tid 3178483] (70014)End of file found: [client 216.73.216.199:57472] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:42.755691 2026] [security2:error] [pid 3172024:tid 3172024] [client 159.65.144.72:46752] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-FtXqEzmlI9p9XvWH9QAAAEY"]
[Thu Jul 30 13:05:42.755885 2026] [security2:error] [pid 3172024:tid 3172024] [client 159.65.144.72:46752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-FtXqEzmlI9p9XvWH9QAAAEY"]
[Thu Jul 30 13:05:42.756295 2026] [security2:error] [pid 3172024:tid 3172024] [client 159.65.144.72:46752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "ams-FtXqEzmlI9p9XvWH9QAAAEY"]
[Thu Jul 30 13:05:43.616985 2026] [ssl:error] [pid 3175578:tid 3175578] (EAI 2)Name or service not known: [client 144.76.19.72:44452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:43.617025 2026] [ssl:error] [pid 3175578:tid 3175578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:43.673711 2026] [ssl:error] [pid 3179293:tid 3179293] (EAI 2)Name or service not known: [client 144.76.19.72:44466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:43.673746 2026] [ssl:error] [pid 3179293:tid 3179293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:43.724686 2026] [ssl:error] [pid 3178203:tid 3178203] (70014)End of file found: [client 216.73.216.199:42498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:44.046021 2026] [lsapi:warn] [pid 3175578:tid 3175578] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:45.240008 2026] [ssl:error] [pid 3178234:tid 3178234] (70014)End of file found: [client 216.73.216.199:43167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:45.830476 2026] [authz_core:error] [pid 3158823:tid 3158823] [client 57.141.0.9:50594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:05:45.831561 2026] [authz_core:error] [pid 3158823:tid 3158823] [client 57.141.0.9:50594] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:05:46.730606 2026] [ssl:error] [pid 3179533:tid 3179533] (EAI 2)Name or service not known: [client 144.76.19.72:44472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:46.730639 2026] [ssl:error] [pid 3179533:tid 3179533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:46.785191 2026] [ssl:error] [pid 3172024:tid 3172024] (EAI 2)Name or service not known: [client 144.76.19.72:44476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:46.785219 2026] [ssl:error] [pid 3172024:tid 3172024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:47.224948 2026] [security2:error] [pid 3178445:tid 3178445] [client 159.65.144.72:38272] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-GyUMEI1XvR2QPnk95wAAABU"]
[Thu Jul 30 13:05:47.225152 2026] [security2:error] [pid 3178445:tid 3178445] [client 159.65.144.72:38272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-GyUMEI1XvR2QPnk95wAAABU"]
[Thu Jul 30 13:05:47.225573 2026] [security2:error] [pid 3178445:tid 3178445] [client 159.65.144.72:38272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/.git/config"] [unique_id "ams-GyUMEI1XvR2QPnk95wAAABU"]
[Thu Jul 30 13:05:47.869571 2026] [ssl:error] [pid 3177116:tid 3177116] (70014)End of file found: [client 216.73.216.199:46288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:48.268881 2026] [core:error] [pid 3171968:tid 3171968] [client 66.249.66.3:47612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:48.268921 2026] [core:error] [pid 3171968:tid 3171968] [client 66.249.66.3:47612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:05:49.064723 2026] [ssl:error] [pid 3179345:tid 3179345] (70014)End of file found: [client 216.73.216.199:22618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:49.113276 2026] [lsapi:warn] [pid 3173630:tid 3173630] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:49.474758 2026] [security2:error] [pid 3177502:tid 3177502] [client 206.189.225.181:59150] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-HYAMf0X47M1iwESwDwAAAA4"]
[Thu Jul 30 13:05:49.475060 2026] [security2:error] [pid 3177502:tid 3177502] [client 206.189.225.181:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-HYAMf0X47M1iwESwDwAAAA4"]
[Thu Jul 30 13:05:49.475443 2026] [security2:error] [pid 3177502:tid 3177502] [client 206.189.225.181:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-HYAMf0X47M1iwESwDwAAAA4"]
[Thu Jul 30 13:05:49.574870 2026] [security2:error] [pid 3179346:tid 3179346] [client 206.189.225.181:59156] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-Hc5hx1yvHOCks1uWwQAAACA"]
[Thu Jul 30 13:05:49.575176 2026] [security2:error] [pid 3179346:tid 3179346] [client 206.189.225.181:59156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-Hc5hx1yvHOCks1uWwQAAACA"]
[Thu Jul 30 13:05:49.575548 2026] [security2:error] [pid 3179346:tid 3179346] [client 206.189.225.181:59156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-Hc5hx1yvHOCks1uWwQAAACA"]
[Thu Jul 30 13:05:50.003689 2026] [ssl:error] [pid 3174755:tid 3174755] (EAI 2)Name or service not known: [client 144.76.19.72:34120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:50.003727 2026] [ssl:error] [pid 3174755:tid 3174755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:50.534691 2026] [ssl:error] [pid 3171968:tid 3171968] (EAI 2)Name or service not known: [client 144.76.19.72:34124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:50.534744 2026] [ssl:error] [pid 3171968:tid 3171968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:52.390349 2026] [ssl:error] [pid 3179897:tid 3179897] (70014)End of file found: [client 216.73.216.199:38119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:53.061888 2026] [security2:error] [pid 3174099:tid 3174099] [client 94.154.43.229:21230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "chateausaintjeannetorg.chateausaintjeannet.com"] [uri "/.env"] [unique_id "ams-IXsyeHgBnpO6F-MvDAAAAAI"]
[Thu Jul 30 13:05:53.062032 2026] [security2:error] [pid 3174099:tid 3174099] [client 94.154.43.229:21230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chateausaintjeannetorg.chateausaintjeannet.com"] [uri "/.env"] [unique_id "ams-IXsyeHgBnpO6F-MvDAAAAAI"]
[Thu Jul 30 13:05:53.062255 2026] [security2:error] [pid 3174099:tid 3174099] [client 94.154.43.229:21230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "chateausaintjeannetorg.chateausaintjeannet.com"] [uri "/.env"] [unique_id "ams-IXsyeHgBnpO6F-MvDAAAAAI"]
[Thu Jul 30 13:05:53.455601 2026] [ssl:error] [pid 3175856:tid 3175856] (70014)End of file found: [client 216.73.216.199:38437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:53.587346 2026] [ssl:error] [pid 3179533:tid 3179533] (EAI 2)Name or service not known: [client 144.76.19.72:34130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:53.587380 2026] [ssl:error] [pid 3179533:tid 3179533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:53.669613 2026] [ssl:error] [pid 3179533:tid 3179533] (EAI 2)Name or service not known: [client 144.76.19.72:34146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:53.669641 2026] [ssl:error] [pid 3179533:tid 3179533] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:54.246299 2026] [security2:error] [pid 3179936:tid 3179936] [client 94.154.43.187:42880] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "chateausaintjeannet.org"] [uri "/.env"] [unique_id "ams-IvfYnj-YlkuMBJSZBQAAADk"]
[Thu Jul 30 13:05:54.246540 2026] [security2:error] [pid 3179936:tid 3179936] [client 94.154.43.187:42880] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chateausaintjeannet.org"] [uri "/.env"] [unique_id "ams-IvfYnj-YlkuMBJSZBQAAADk"]
[Thu Jul 30 13:05:54.246814 2026] [security2:error] [pid 3179936:tid 3179936] [client 94.154.43.187:42880] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "chateausaintjeannet.org"] [uri "/.env"] [unique_id "ams-IvfYnj-YlkuMBJSZBQAAADk"]
[Thu Jul 30 13:05:54.517507 2026] [security2:error] [pid 3179939:tid 3179939] [client 206.189.225.181:60528] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-Iq089LkpjxcneYrMUgAAADw"]
[Thu Jul 30 13:05:54.517816 2026] [security2:error] [pid 3179939:tid 3179939] [client 206.189.225.181:60528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-Iq089LkpjxcneYrMUgAAADw"]
[Thu Jul 30 13:05:54.518291 2026] [security2:error] [pid 3179939:tid 3179939] [client 206.189.225.181:60528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-Iq089LkpjxcneYrMUgAAADw"]
[Thu Jul 30 13:05:54.543088 2026] [lsapi:warn] [pid 3179937:tid 3179937] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:55.562604 2026] [core:error] [pid 3179939:tid 3179939] (13)Permission denied: [client 216.73.216.199:21270] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS2/flags
[Thu Jul 30 13:05:56.722784 2026] [ssl:error] [pid 3179935:tid 3179935] (EAI 2)Name or service not known: [client 144.76.19.72:34158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:56.722818 2026] [ssl:error] [pid 3179935:tid 3179935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:56.771831 2026] [ssl:error] [pid 3172022:tid 3172022] (70014)End of file found: [client 216.73.216.199:59349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:56.780766 2026] [ssl:error] [pid 3172020:tid 3172020] (EAI 2)Name or service not known: [client 144.76.19.72:34162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:56.780788 2026] [ssl:error] [pid 3172020:tid 3172020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:56.818252 2026] [authz_core:error] [pid 3175854:tid 3175854] [client 57.141.0.31:52862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:05:56.818879 2026] [authz_core:error] [pid 3175854:tid 3175854] [client 57.141.0.31:52862] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:05:57.374372 2026] [ssl:error] [pid 3179939:tid 3179939] (70014)End of file found: [client 216.73.216.199:21270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:57.974716 2026] [ssl:error] [pid 3178203:tid 3178203] (70014)End of file found: [client 216.73.216.199:15148] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:05:59.579201 2026] [security2:error] [pid 3179898:tid 3179898] [client 159.65.144.72:33404] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-J5Z3Hsa5gKDFRogs3gAAADM"]
[Thu Jul 30 13:05:59.579470 2026] [security2:error] [pid 3179898:tid 3179898] [client 159.65.144.72:33404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-J5Z3Hsa5gKDFRogs3gAAADM"]
[Thu Jul 30 13:05:59.579861 2026] [security2:error] [pid 3179898:tid 3179898] [client 159.65.144.72:33404] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.andrewvenables.wmsfirearmstraining.com"] [uri "/trace.axd"] [unique_id "ams-J5Z3Hsa5gKDFRogs3gAAADM"]
[Thu Jul 30 13:05:59.598781 2026] [lsapi:warn] [pid 3172020:tid 3172020] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:05:59.837202 2026] [ssl:error] [pid 3177729:tid 3177729] (EAI 2)Name or service not known: [client 144.76.19.72:49050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:59.837228 2026] [ssl:error] [pid 3177729:tid 3177729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:05:59.890144 2026] [ssl:error] [pid 3172024:tid 3172024] (EAI 2)Name or service not known: [client 144.76.19.72:49056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:05:59.890170 2026] [ssl:error] [pid 3172024:tid 3172024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:01.080940 2026] [core:error] [pid 3174653:tid 3174653] [client 66.249.66.194:43142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:01.080971 2026] [core:error] [pid 3174653:tid 3174653] [client 66.249.66.194:43142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:01.081865 2026] [core:error] [pid 3179940:tid 3179940] [client 66.249.66.167:53507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:01.081896 2026] [core:error] [pid 3179940:tid 3179940] [client 66.249.66.167:53507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:02.106506 2026] [ssl:error] [pid 3175760:tid 3175760] (70014)End of file found: [client 216.73.216.199:29430] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:02.946479 2026] [ssl:error] [pid 3175854:tid 3175854] (EAI 2)Name or service not known: [client 144.76.19.72:49064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:02.946520 2026] [ssl:error] [pid 3175854:tid 3175854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:02.997983 2026] [ssl:error] [pid 3175656:tid 3175656] (EAI 2)Name or service not known: [client 144.76.19.72:49066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:02.998020 2026] [ssl:error] [pid 3175656:tid 3175656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:03.303683 2026] [ssl:error] [pid 3179840:tid 3179840] (70014)End of file found: [client 216.73.216.199:17291] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:03.728988 2026] [core:error] [pid 3174653:tid 3174653] (13)Permission denied: [client 216.73.216.199:17558] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/hwcache_align
[Thu Jul 30 13:06:04.940692 2026] [ssl:error] [pid 3174653:tid 3174653] (70014)End of file found: [client 216.73.216.199:17558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:05.019883 2026] [lsapi:warn] [pid 3175761:tid 3175761] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:06.053138 2026] [ssl:error] [pid 3178483:tid 3178483] (EAI 2)Name or service not known: [client 144.76.19.72:49072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:06.053176 2026] [ssl:error] [pid 3178483:tid 3178483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:06.107907 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:49076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:06.107937 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:07.337375 2026] [authz_core:error] [pid 3177875:tid 3177875] [client 66.249.66.33:49791] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:06:07.340032 2026] [authz_core:error] [pid 3177875:tid 3177875] [client 66.249.66.33:49791] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:06:07.538199 2026] [ssl:error] [pid 3165118:tid 3165118] (70014)End of file found: [client 216.73.216.199:4364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:08.748711 2026] [ssl:error] [pid 3177873:tid 3177873] (70014)End of file found: [client 216.73.216.199:48266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:08.768085 2026] [access_compat:error] [pid 3158823:tid 3158823] [client 45.78.203.40:48077] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/09/shoot-em-up.jpg, referer: https://blog.alism.com
[Thu Jul 30 13:06:08.768197 2026] [access_compat:error] [pid 3158823:tid 3158823] [client 45.78.203.40:48077] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com
[Thu Jul 30 13:06:09.159695 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:49088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:09.159730 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:09.211222 2026] [ssl:error] [pid 3179840:tid 3179840] (EAI 2)Name or service not known: [client 144.76.19.72:49094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:09.211256 2026] [ssl:error] [pid 3179840:tid 3179840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:09.609220 2026] [authz_core:error] [pid 3158823:tid 3158823] [client 57.141.0.27:64886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:06:09.610276 2026] [authz_core:error] [pid 3158823:tid 3158823] [client 57.141.0.27:64886] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:06:10.085224 2026] [lsapi:warn] [pid 3156183:tid 3156183] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:10.245182 2026] [ssl:error] [pid 3179840:tid 3179840] (70014)End of file found: [client 216.73.216.199:40899] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:12.296917 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:48402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:12.296944 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:12.350367 2026] [ssl:error] [pid 3179869:tid 3179869] (EAI 2)Name or service not known: [client 144.76.19.72:48412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:12.350404 2026] [ssl:error] [pid 3179869:tid 3179869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:13.374733 2026] [ssl:error] [pid 3175856:tid 3175856] (70014)End of file found: [client 216.73.216.199:64252] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:13.653102 2026] [core:error] [pid 3175854:tid 3175854] [client 66.249.66.66:38850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:13.653127 2026] [core:error] [pid 3175854:tid 3175854] [client 66.249.66.66:38850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:14.677368 2026] [ssl:error] [pid 3177876:tid 3177876] (70014)End of file found: [client 216.73.216.199:30484] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:14.966186 2026] [ssl:error] [pid 3177729:tid 3177729] (70014)End of file found: [client 216.73.216.199:57840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:15.407037 2026] [ssl:error] [pid 3178235:tid 3178235] (EAI 2)Name or service not known: [client 144.76.19.72:48418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:15.407090 2026] [ssl:error] [pid 3178235:tid 3178235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:15.450255 2026] [ssl:error] [pid 3179934:tid 3179934] (70014)End of file found: [client 216.73.216.199:57375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:15.460444 2026] [ssl:error] [pid 3179897:tid 3179897] (EAI 2)Name or service not known: [client 144.76.19.72:48432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:15.460478 2026] [ssl:error] [pid 3179897:tid 3179897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:15.483341 2026] [lsapi:warn] [pid 3172022:tid 3172022] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:17.537267 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 57.141.0.49:22164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:06:17.537969 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 57.141.0.49:22164] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:06:18.527861 2026] [ssl:error] [pid 3175760:tid 3175760] (EAI 2)Name or service not known: [client 144.76.19.72:48434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:18.527923 2026] [ssl:error] [pid 3175760:tid 3175760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:18.599230 2026] [ssl:error] [pid 3179345:tid 3179345] (EAI 2)Name or service not known: [client 144.76.19.72:48448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:18.599266 2026] [ssl:error] [pid 3179345:tid 3179345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:19.977330 2026] [ssl:error] [pid 3175856:tid 3175856] (70014)End of file found: [client 216.73.216.199:60422] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:20.270536 2026] [ssl:error] [pid 3172019:tid 3172019] (70014)End of file found: [client 216.73.216.199:56014] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:20.570605 2026] [lsapi:warn] [pid 3178234:tid 3178234] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:20.870323 2026] [ssl:error] [pid 3172026:tid 3172026] (70014)End of file found: [client 216.73.216.199:33862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:21.655707 2026] [ssl:error] [pid 3177873:tid 3177873] (EAI 2)Name or service not known: [client 144.76.19.72:22376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:21.655735 2026] [ssl:error] [pid 3177873:tid 3177873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:21.710127 2026] [ssl:error] [pid 3178235:tid 3178235] (EAI 2)Name or service not known: [client 144.76.19.72:22388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:21.710152 2026] [ssl:error] [pid 3178235:tid 3178235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:22.658596 2026] [authz_core:error] [pid 3175860:tid 3175860] [client 57.141.0.63:49496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:06:22.659229 2026] [authz_core:error] [pid 3175860:tid 3175860] [client 57.141.0.63:49496] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:06:24.767203 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:22404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:24.767234 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:24.822909 2026] [ssl:error] [pid 3178482:tid 3178482] (EAI 2)Name or service not known: [client 144.76.19.72:22410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:24.822934 2026] [ssl:error] [pid 3178482:tid 3178482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:25.509027 2026] [ssl:error] [pid 3175860:tid 3175860] (70014)End of file found: [client 216.73.216.199:55238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:25.939103 2026] [lsapi:warn] [pid 3178482:tid 3178482] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:26.017663 2026] [core:error] [pid 3175760:tid 3175760] (13)Permission denied: [client 216.73.216.199:31634] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory82/node0/compact
[Thu Jul 30 13:06:26.307923 2026] [core:error] [pid 3172019:tid 3172019] [client 66.249.66.66:51830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:26.307951 2026] [core:error] [pid 3172019:tid 3172019] [client 66.249.66.66:51830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:26.713388 2026] [ssl:error] [pid 3175858:tid 3175858] (70014)End of file found: [client 216.73.216.199:24742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:27.750736 2026] [security2:error] [pid 3172024:tid 3172024] [client 114.119.135.136:64087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~30,15,19/request_format~html"] [unique_id "ams-Q9XqEzmlI9p9XvWIBQAAAEY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~30,15/request_format~html
[Thu Jul 30 13:06:27.881187 2026] [ssl:error] [pid 3175854:tid 3175854] (EAI 2)Name or service not known: [client 144.76.19.72:22412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:27.881222 2026] [ssl:error] [pid 3175854:tid 3175854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:27.884699 2026] [core:error] [pid 3177582:tid 3177582] [client 66.249.66.8:61713] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:27.884724 2026] [core:error] [pid 3177582:tid 3177582] [client 66.249.66.8:61713] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:27.917846 2026] [ssl:error] [pid 3175760:tid 3175760] (70014)End of file found: [client 216.73.216.199:31634] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:27.937311 2026] [ssl:error] [pid 3179345:tid 3179345] (EAI 2)Name or service not known: [client 144.76.19.72:22426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:27.937337 2026] [ssl:error] [pid 3179345:tid 3179345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:28.821116 2026] [security2:error] [pid 3165118:tid 3165118] [client 114.119.135.136:64093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~30,15,19/request_format~html"] [unique_id "ams-RL-SsWMAa8hIeO3RigAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~30,15/request_format~html
[Thu Jul 30 13:06:30.863290 2026] [ssl:error] [pid 3177876:tid 3177876] (70014)End of file found: [client 216.73.216.199:39531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:30.997381 2026] [ssl:error] [pid 3175860:tid 3175860] (EAI 2)Name or service not known: [client 144.76.19.72:48466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:30.997415 2026] [ssl:error] [pid 3175860:tid 3175860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:31.051640 2026] [lsapi:warn] [pid 3156183:tid 3156183] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:31.054343 2026] [ssl:error] [pid 3165118:tid 3165118] (EAI 2)Name or service not known: [client 144.76.19.72:48468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:31.054360 2026] [ssl:error] [pid 3165118:tid 3165118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:32.164866 2026] [ssl:error] [pid 3156183:tid 3156183] (70014)End of file found: [client 216.73.216.199:1471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:33.250103 2026] [ssl:error] [pid 3181679:tid 3181679] (70014)End of file found: [client 216.73.216.199:28824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:34.109949 2026] [ssl:error] [pid 3181802:tid 3181802] (EAI 2)Name or service not known: [client 144.76.19.72:48480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:34.109983 2026] [ssl:error] [pid 3181802:tid 3181802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:34.166100 2026] [ssl:error] [pid 3178234:tid 3178234] (EAI 2)Name or service not known: [client 144.76.19.72:48490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:34.166141 2026] [ssl:error] [pid 3178234:tid 3178234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:36.269576 2026] [ssl:error] [pid 3177761:tid 3177761] (70014)End of file found: [client 216.73.216.199:15851] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:36.430142 2026] [lsapi:warn] [pid 3177873:tid 3177873] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:36.959405 2026] [authz_core:error] [pid 3179933:tid 3179933] [client 169.58.39.193:50032] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 13:06:37.192950 2026] [security2:error] [pid 3175656:tid 3175656] [client 170.106.163.84:59970] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.edwardkensington.com"] [uri "/"] [unique_id "ams-TX5IZQvQQNe1DzoFlgAAAAg"]
[Thu Jul 30 13:06:37.195701 2026] [core:crit] [pid 3175656:tid 3175656] (13)Permission denied: [client 170.106.163.84:59970] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 13:06:37.222210 2026] [ssl:error] [pid 3181349:tid 3181349] (EAI 2)Name or service not known: [client 144.76.19.72:48500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:37.222238 2026] [ssl:error] [pid 3181349:tid 3181349] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:37.276906 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:48514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:37.276931 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:37.889420 2026] [ssl:error] [pid 3181802:tid 3181802] (70014)End of file found: [client 216.73.216.199:14988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:38.990052 2026] [core:error] [pid 3178234:tid 3178234] [client 66.249.66.194:50259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:38.990097 2026] [core:error] [pid 3178234:tid 3178234] [client 66.249.66.194:50259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:39.092513 2026] [ssl:error] [pid 3181680:tid 3181680] (70014)End of file found: [client 216.73.216.199:40216] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:40.046752 2026] [security2:error] [pid 3177876:tid 3177876] [client 85.208.96.209:29394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/sylvia-browne-funeral"] [unique_id "ams-UKiAvUMrrokGYWuL0AAAACY"]
[Thu Jul 30 13:06:40.330808 2026] [ssl:error] [pid 3179898:tid 3179898] (EAI 2)Name or service not known: [client 144.76.19.72:27428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:40.330848 2026] [ssl:error] [pid 3179898:tid 3179898] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:40.387188 2026] [ssl:error] [pid 3175656:tid 3175656] (EAI 2)Name or service not known: [client 144.76.19.72:27436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:40.387223 2026] [ssl:error] [pid 3175656:tid 3175656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:40.587574 2026] [authz_core:error] [pid 3177502:tid 3177502] [client 57.141.0.31:43952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:06:40.588199 2026] [authz_core:error] [pid 3177502:tid 3177502] [client 57.141.0.31:43952] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:06:41.517270 2026] [lsapi:warn] [pid 3179898:tid 3179898] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:41.712385 2026] [ssl:error] [pid 3172022:tid 3172022] (70014)End of file found: [client 216.73.216.199:35439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:42.342907 2026] [authz_core:error] [pid 3178235:tid 3178235] [client 169.58.39.193:51010] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 13:06:43.442637 2026] [ssl:error] [pid 3177761:tid 3177761] (EAI 2)Name or service not known: [client 144.76.19.72:27444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:43.442680 2026] [ssl:error] [pid 3177761:tid 3177761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:43.495943 2026] [ssl:error] [pid 3178235:tid 3178235] (EAI 2)Name or service not known: [client 144.76.19.72:27452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:43.495972 2026] [ssl:error] [pid 3178235:tid 3178235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:45.248123 2026] [ssl:error] [pid 3179345:tid 3179345] (70014)End of file found: [client 216.73.216.199:64869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:46.551435 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:27466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:46.551467 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:46.610870 2026] [ssl:error] [pid 3179937:tid 3179937] (EAI 2)Name or service not known: [client 144.76.19.72:27468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:46.610912 2026] [ssl:error] [pid 3179937:tid 3179937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:46.873124 2026] [lsapi:warn] [pid 3181349:tid 3181349] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:47.043124 2026] [security2:error] [pid 3165118:tid 3165118] [client 43.134.91.35:36712] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "ams-V7-SsWMAa8hIeO3RjwAAABk"]
[Thu Jul 30 13:06:47.052999 2026] [ssl:error] [pid 3175656:tid 3175656] (70014)End of file found: [client 216.73.216.199:17349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:47.545333 2026] [security2:error] [pid 3181680:tid 3181680] [client 43.134.15.174:38908] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "ams-V6cpaXLOkkF2Z_sLFgAAAAo"]
[Thu Jul 30 13:06:47.653891 2026] [ssl:error] [pid 3178235:tid 3178235] (70014)End of file found: [client 216.73.216.199:28396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:47.689878 2026] [authz_core:error] [pid 3179940:tid 3179940] [client 169.58.39.193:52227] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 13:06:48.159462 2026] [security2:error] [pid 3178829:tid 3178829] [client 43.134.15.174:39840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "ams-WILPN06s1fpfg-DyGQAAAAQ"]
[Thu Jul 30 13:06:48.248389 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.64.170:60694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:48.248418 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.64.170:60694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:48.627419 2026] [security2:error] [pid 3175760:tid 3175760] [client 43.134.15.174:40552] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "ams-WFr1n9vi3JxH79Oi3AAAABc"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 13:06:49.685900 2026] [security2:error] [pid 3166364:tid 3166364] [client 43.134.15.174:42572] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "ams-WcgXdNWhjaDGQkWiBgAAACc"]
[Thu Jul 30 13:06:49.689324 2026] [ssl:error] [pid 3181349:tid 3181349] (EAI 2)Name or service not known: [client 144.76.19.72:63672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:49.689351 2026] [ssl:error] [pid 3181349:tid 3181349] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:49.821460 2026] [ssl:error] [pid 3181802:tid 3181802] (EAI 2)Name or service not known: [client 144.76.19.72:63688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:49.821498 2026] [ssl:error] [pid 3181802:tid 3181802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:50.412288 2026] [security2:error] [pid 3177874:tid 3177874] [client 43.134.15.174:43760] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "ams-WhkPwsNy-ALHrodTuwAAACI"]
[Thu Jul 30 13:06:50.996759 2026] [security2:error] [pid 3179345:tid 3179345] [client 43.134.15.174:44500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ams-Wtuqda5ubYWtbZhK6gAAABs"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 13:06:51.051675 2026] [cgi:error] [pid 3179345:tid 3179345] [client 43.134.15.174:44500] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 13:06:51.278857 2026] [authz_core:error] [pid 3177874:tid 3177874] [client 169.58.39.193:53340] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 13:06:51.425153 2026] [security2:error] [pid 3181802:tid 3181802] [client 43.134.15.174:44964] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ams-W2iO-GMwdnqDvy8SswAAABQ"], referer: http://www.all4s.co.uk
[Thu Jul 30 13:06:51.679868 2026] [core:error] [pid 3181349:tid 3181349] [client 66.249.66.167:65127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:51.679897 2026] [core:error] [pid 3181349:tid 3181349] [client 66.249.66.167:65127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:06:51.879548 2026] [lsapi:error] [pid 3175760:tid 3175760] [client 216.73.216.199:45590] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Joomla.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Joomla.php on line 8\n
[Thu Jul 30 13:06:52.077495 2026] [lsapi:warn] [pid 3179345:tid 3179345] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:52.374869 2026] [ssl:error] [pid 3181802:tid 3181802] (70014)End of file found: [client 216.73.216.199:19998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:06:52.734409 2026] [access_compat:error] [pid 3178483:tid 3178483] [client 172.213.225.181:21904] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 13:06:52.735091 2026] [access_compat:error] [pid 3178483:tid 3178483] [client 172.213.225.181:21904] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 13:06:52.739033 2026] [access_compat:error] [pid 3178483:tid 3178483] [client 172.213.225.181:21904] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 13:06:52.740713 2026] [access_compat:error] [pid 3178483:tid 3178483] [client 172.213.225.181:21904] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 13:06:52.877028 2026] [ssl:error] [pid 3179934:tid 3179934] (EAI 2)Name or service not known: [client 144.76.19.72:63690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:52.877061 2026] [ssl:error] [pid 3179934:tid 3179934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:52.931779 2026] [ssl:error] [pid 3179345:tid 3179345] (EAI 2)Name or service not known: [client 144.76.19.72:63702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:52.931807 2026] [ssl:error] [pid 3179345:tid 3179345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:53.722861 2026] [cgi:error] [pid 3175854:tid 3175854] [client 47.128.117.70:58636] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:06:55.200546 2026] [core:error] [pid 3172024:tid 3172024] (13)Permission denied: [client 216.73.216.199:40153] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory187/subsystem/uevent
[Thu Jul 30 13:06:55.986860 2026] [ssl:error] [pid 3178829:tid 3178829] (EAI 2)Name or service not known: [client 144.76.19.72:63714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:55.986887 2026] [ssl:error] [pid 3178829:tid 3178829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:56.042526 2026] [ssl:error] [pid 3172024:tid 3172024] (EAI 2)Name or service not known: [client 144.76.19.72:63724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:56.042554 2026] [ssl:error] [pid 3172024:tid 3172024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:57.358856 2026] [lsapi:warn] [pid 3181679:tid 3181679] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:06:58.982149 2026] [authz_core:error] [pid 3181802:tid 3181802] [client 57.141.0.54:60860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:06:58.982779 2026] [authz_core:error] [pid 3181802:tid 3181802] [client 57.141.0.54:60860] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:06:59.099136 2026] [ssl:error] [pid 3178482:tid 3178482] (EAI 2)Name or service not known: [client 144.76.19.72:63732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:59.099170 2026] [ssl:error] [pid 3178482:tid 3178482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:06:59.152591 2026] [ssl:error] [pid 3175854:tid 3175854] (EAI 2)Name or service not known: [client 144.76.19.72:63748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:06:59.152615 2026] [ssl:error] [pid 3175854:tid 3175854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:02.209200 2026] [ssl:error] [pid 3181802:tid 3181802] (EAI 2)Name or service not known: [client 144.76.19.72:58646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:02.209235 2026] [ssl:error] [pid 3181802:tid 3181802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:02.265176 2026] [ssl:error] [pid 3183270:tid 3183270] (EAI 2)Name or service not known: [client 144.76.19.72:58652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:02.265207 2026] [ssl:error] [pid 3183270:tid 3183270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:02.571386 2026] [lsapi:warn] [pid 3183465:tid 3183465] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:02.673149 2026] [core:error] [pid 3183466:tid 3183466] [client 172.213.10.64:10186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:02.673175 2026] [core:error] [pid 3183466:tid 3183466] [client 172.213.10.64:10186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:03.352133 2026] [core:error] [pid 3178235:tid 3178235] (13)Permission denied: [client 216.73.216.199:18170] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 13:07:03.371810 2026] [authz_core:error] [pid 3178483:tid 3178483] [client 172.213.225.181:21904] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/Requests/error_log
[Thu Jul 30 13:07:03.735133 2026] [security2:error] [pid 3178866:tid 3178866] [client 43.157.98.187:33764] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "ams-Z-SLVqVe8dUw_tZ8KgAAAAY"]
[Thu Jul 30 13:07:04.360284 2026] [core:error] [pid 3183465:tid 3183465] [client 66.249.66.167:35648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:04.360313 2026] [core:error] [pid 3183465:tid 3183465] [client 66.249.66.167:35648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:04.624875 2026] [security2:error] [pid 3173630:tid 3173630] [client 43.157.98.187:58912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "ams-aOL3XwBQdehD8jC5dAAAAAE"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 13:07:05.318317 2026] [ssl:error] [pid 3179345:tid 3179345] (EAI 2)Name or service not known: [client 144.76.19.72:58668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:05.318346 2026] [ssl:error] [pid 3179345:tid 3179345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:05.370596 2026] [ssl:error] [pid 3177729:tid 3177729] (EAI 2)Name or service not known: [client 144.76.19.72:58670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:05.370631 2026] [ssl:error] [pid 3177729:tid 3177729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:05.760106 2026] [ssl:error] [pid 3178235:tid 3178235] (70014)End of file found: [client 216.73.216.199:18170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:05.807278 2026] [core:error] [pid 3177729:tid 3177729] [client 172.213.10.64:10112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:05.807298 2026] [core:error] [pid 3177729:tid 3177729] [client 172.213.10.64:10112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:06.060756 2026] [ssl:error] [pid 3178234:tid 3178234] (70014)End of file found: [client 216.73.216.199:54978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:06.915316 2026] [authz_core:error] [pid 3178866:tid 3178866] [client 57.141.0.43:30428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:07:06.915976 2026] [authz_core:error] [pid 3178866:tid 3178866] [client 57.141.0.43:30428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:07:06.958939 2026] [core:error] [pid 3177729:tid 3177729] (13)Permission denied: [client 216.73.216.199:55563] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:01/subsystem/drivers_probe
[Thu Jul 30 13:07:07.561910 2026] [ssl:error] [pid 3177729:tid 3177729] (70014)End of file found: [client 216.73.216.199:55563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:07.811882 2026] [lsapi:warn] [pid 3181680:tid 3181680] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:08.021329 2026] [core:error] [pid 3179934:tid 3179934] [client 172.213.10.64:10181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:08.021359 2026] [core:error] [pid 3179934:tid 3179934] [client 172.213.10.64:10181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:08.443112 2026] [ssl:error] [pid 3175760:tid 3175760] (EAI 2)Name or service not known: [client 144.76.19.72:58684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:08.443147 2026] [ssl:error] [pid 3175760:tid 3175760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:08.497584 2026] [ssl:error] [pid 3175858:tid 3175858] (EAI 2)Name or service not known: [client 144.76.19.72:58700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:08.497615 2026] [ssl:error] [pid 3175858:tid 3175858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:08.876384 2026] [lsapi:warn] [pid 3183557:tid 3183557] [client 112.86.225.70:49092] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:07:08.876433 2026] [lsapi:warn] [pid 3183557:tid 3183557] [client 112.86.225.70:49092] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:07:09.933728 2026] [authz_core:error] [pid 3183270:tid 3183270] [client 57.141.0.44:42668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:07:09.934371 2026] [authz_core:error] [pid 3183270:tid 3183270] [client 57.141.0.44:42668] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:07:10.013705 2026] [core:error] [pid 3178829:tid 3178829] [client 172.213.10.64:10222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:10.013734 2026] [core:error] [pid 3178829:tid 3178829] [client 172.213.10.64:10222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:11.071596 2026] [ssl:error] [pid 3175858:tid 3175858] (70014)End of file found: [client 216.73.216.199:31600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:11.483806 2026] [core:error] [pid 3175760:tid 3175760] [client 172.213.10.64:10229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:11.483838 2026] [core:error] [pid 3175760:tid 3175760] [client 172.213.10.64:10229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:11.555724 2026] [ssl:error] [pid 3177582:tid 3177582] (EAI 2)Name or service not known: [client 144.76.19.72:55868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:11.555768 2026] [ssl:error] [pid 3177582:tid 3177582] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:11.636208 2026] [ssl:error] [pid 3183465:tid 3183465] (EAI 2)Name or service not known: [client 144.76.19.72:55876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:11.636246 2026] [ssl:error] [pid 3183465:tid 3183465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:12.687734 2026] [core:error] [pid 3174755:tid 3174755] (13)Permission denied: [client 216.73.216.199:61671] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/uprobe/subsystem/drivers_probe
[Thu Jul 30 13:07:12.989699 2026] [ssl:error] [pid 3174755:tid 3174755] (70014)End of file found: [client 216.73.216.199:61671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:13.035759 2026] [lsapi:warn] [pid 3179898:tid 3179898] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:13.164406 2026] [core:error] [pid 3177146:tid 3177146] [client 57.141.0.52:63390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:13.164432 2026] [core:error] [pid 3177146:tid 3177146] [client 57.141.0.52:63390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:13.597038 2026] [ssl:error] [pid 3177729:tid 3177729] (70014)End of file found: [client 216.73.216.199:37378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:14.280965 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:14.280994 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10201] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:14.690480 2026] [ssl:error] [pid 3179840:tid 3179840] (EAI 2)Name or service not known: [client 144.76.19.72:55884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:14.690521 2026] [ssl:error] [pid 3179840:tid 3179840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:14.743587 2026] [ssl:error] [pid 3177874:tid 3177874] (EAI 2)Name or service not known: [client 144.76.19.72:55898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:14.743612 2026] [ssl:error] [pid 3177874:tid 3177874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:15.809109 2026] [authz_core:error] [pid 3175656:tid 3175656] [client 57.141.0.18:55620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:07:15.809742 2026] [authz_core:error] [pid 3175656:tid 3175656] [client 57.141.0.18:55620] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:07:16.496719 2026] [core:error] [pid 3179940:tid 3179940] (13)Permission denied: [client 216.73.216.199:35685] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu3/subsystem/uevent
[Thu Jul 30 13:07:16.532136 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:16.532161 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:16.908810 2026] [ssl:error] [pid 3179940:tid 3179940] (70014)End of file found: [client 216.73.216.199:35685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:17.797512 2026] [ssl:error] [pid 3183557:tid 3183557] (EAI 2)Name or service not known: [client 144.76.19.72:55908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:17.797568 2026] [ssl:error] [pid 3183557:tid 3183557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:17.853687 2026] [ssl:error] [pid 3181680:tid 3181680] (EAI 2)Name or service not known: [client 144.76.19.72:55912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:17.853723 2026] [ssl:error] [pid 3181680:tid 3181680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:18.288540 2026] [lsapi:warn] [pid 3177873:tid 3177873] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:18.316675 2026] [ssl:error] [pid 3175760:tid 3175760] (70014)End of file found: [client 216.73.216.199:15097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:18.903056 2026] [core:error] [pid 3175860:tid 3175860] (13)Permission denied: [client 216.73.216.199:32612] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/trace_event_file/poison
[Thu Jul 30 13:07:19.262362 2026] [core:error] [pid 3177729:tid 3177729] [client 66.249.66.167:39287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:19.262392 2026] [core:error] [pid 3177729:tid 3177729] [client 66.249.66.167:39287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:20.935682 2026] [ssl:error] [pid 3182762:tid 3182762] (EAI 2)Name or service not known: [client 144.76.19.72:28108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:20.935728 2026] [ssl:error] [pid 3182762:tid 3182762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:20.992259 2026] [ssl:error] [pid 3174755:tid 3174755] (EAI 2)Name or service not known: [client 144.76.19.72:28124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:20.992287 2026] [ssl:error] [pid 3174755:tid 3174755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:21.575609 2026] [core:error] [pid 3177502:tid 3177502] (13)Permission denied: [client 216.73.216.199:46807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty31/subsystem/ttyS0/close_delay
[Thu Jul 30 13:07:21.660191 2026] [core:error] [pid 3182762:tid 3182762] [client 172.213.10.64:10118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:21.660213 2026] [core:error] [pid 3182762:tid 3182762] [client 172.213.10.64:10118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:22.170511 2026] [authz_core:error] [pid 3181349:tid 3181349] [client 104.251.181.79:36702] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:07:22.176619 2026] [authz_core:error] [pid 3181349:tid 3181349] [client 104.251.181.79:36702] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:07:23.517747 2026] [lsapi:warn] [pid 3178483:tid 3178483] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:24.050617 2026] [ssl:error] [pid 3178234:tid 3178234] (EAI 2)Name or service not known: [client 144.76.19.72:28136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:24.050646 2026] [ssl:error] [pid 3178234:tid 3178234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:24.105184 2026] [ssl:error] [pid 3182762:tid 3182762] (EAI 2)Name or service not known: [client 144.76.19.72:28140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:24.105208 2026] [ssl:error] [pid 3182762:tid 3182762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:24.324800 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:24.324826 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10184] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:25.896931 2026] [security2:error] [pid 3181679:tid 3181679] [client 43.154.250.181:53002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "ams-fR70xGKqaSwnYJ6MeAAAAAk"]
[Thu Jul 30 13:07:26.884561 2026] [security2:error] [pid 3171878:tid 3171878] [client 192.144.148.122:37416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.akoptimize.co.uk"] [uri "/"] [unique_id "ams-fj_kNIbIqbBRyWa8VAAAABY"]
[Thu Jul 30 13:07:27.162171 2026] [ssl:error] [pid 3177761:tid 3177761] (EAI 2)Name or service not known: [client 144.76.19.72:28152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:27.162201 2026] [ssl:error] [pid 3177761:tid 3177761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:27.213576 2026] [ssl:error] [pid 3178483:tid 3178483] (EAI 2)Name or service not known: [client 144.76.19.72:28158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:27.213603 2026] [ssl:error] [pid 3178483:tid 3178483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:27.268040 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 57.141.0.16:32366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:07:27.268675 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 57.141.0.16:32366] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:07:27.536024 2026] [security2:error] [pid 3181679:tid 3181679] [client 43.154.250.181:59538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "ams-fx70xGKqaSwnYJ6MeQAAAAk"], referer: http://www.ditchfest.com
[Thu Jul 30 13:07:28.750663 2026] [lsapi:warn] [pid 3165118:tid 3165118] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:29.079784 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 13:07:29.620240 2026] [access_compat:error] [pid 3177761:tid 3177761] [client 45.158.164.139:49850] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:07:29.720569 2026] [core:error] [pid 3173630:tid 3173630] [client 66.249.66.39:49063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:29.720589 2026] [core:error] [pid 3173630:tid 3173630] [client 66.249.66.39:49063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:29.792466 2026] [authz_core:error] [pid 3165118:tid 3165118] [client 66.249.66.33:43830] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:07:29.795172 2026] [authz_core:error] [pid 3165118:tid 3165118] [client 66.249.66.33:43830] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:07:29.833243 2026] [core:error] [pid 3177502:tid 3177502] (13)Permission denied: [client 216.73.216.199:46807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS2/iomem_base
[Thu Jul 30 13:07:30.247521 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 13:07:30.270499 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:43950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:30.270526 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:30.327429 2026] [ssl:error] [pid 3183557:tid 3183557] (EAI 2)Name or service not known: [client 144.76.19.72:43952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:30.327460 2026] [ssl:error] [pid 3183557:tid 3183557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:31.236850 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/system_log.php
[Thu Jul 30 13:07:31.383713 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:31.383763 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:32.242667 2026] [ssl:error] [pid 3177502:tid 3177502] (70014)End of file found: [client 216.73.216.199:46807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:32.244201 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/x.php
[Thu Jul 30 13:07:33.101724 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/autoload_classmap.php
[Thu Jul 30 13:07:33.384130 2026] [ssl:error] [pid 3179937:tid 3179937] (EAI 2)Name or service not known: [client 144.76.19.72:43966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:33.384160 2026] [ssl:error] [pid 3179937:tid 3179937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:33.435377 2026] [ssl:error] [pid 3171968:tid 3171968] (EAI 2)Name or service not known: [client 144.76.19.72:43978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:33.435409 2026] [ssl:error] [pid 3171968:tid 3171968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:33.472180 2026] [security2:error] [pid 3183465:tid 3183465] [client 110.249.201.83:17682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "ams-hbvtbJn-gMPs3-7t4gAAABo"]
[Thu Jul 30 13:07:33.982097 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/hosty.php
[Thu Jul 30 13:07:34.007534 2026] [lsapi:warn] [pid 3179937:tid 3179937] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:34.933530 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/test1.php
[Thu Jul 30 13:07:34.967612 2026] [core:error] [pid 3177873:tid 3177873] (13)Permission denied: [client 216.73.216.199:19742] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/free_calls
[Thu Jul 30 13:07:35.268175 2026] [ssl:error] [pid 3177873:tid 3177873] (70014)End of file found: [client 216.73.216.199:19742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:35.794855 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/zwso.php
[Thu Jul 30 13:07:36.491864 2026] [ssl:error] [pid 3181679:tid 3181679] (EAI 2)Name or service not known: [client 144.76.19.72:43994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:36.491894 2026] [ssl:error] [pid 3181679:tid 3181679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:36.501989 2026] [core:error] [pid 3178866:tid 3178866] (13)Permission denied: [client 216.73.216.199:62176] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS1/line
[Thu Jul 30 13:07:36.549979 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:43996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:36.550015 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:36.656354 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/fpwch.php
[Thu Jul 30 13:07:36.802927 2026] [core:error] [pid 3178866:tid 3178866] (13)Permission denied: [client 216.73.216.199:62176] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory157/subsystem/uevent
[Thu Jul 30 13:07:38.146444 2026] [core:error] [pid 3181634:tid 3181634] [client 172.213.10.64:10199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:38.146472 2026] [core:error] [pid 3181634:tid 3181634] [client 172.213.10.64:10199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:38.277115 2026] [lsapi:warn] [pid 3179934:tid 3179934] [client 69.63.184.19:34816] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:07:38.277155 2026] [lsapi:warn] [pid 3179934:tid 3179934] [client 69.63.184.19:34816] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:07:38.379593 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blog-header.php
[Thu Jul 30 13:07:39.222890 2026] [lsapi:warn] [pid 3181680:tid 3181680] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:39.577467 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 57.141.0.10:51580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:07:39.578103 2026] [authz_core:error] [pid 3173630:tid 3173630] [client 57.141.0.10:51580] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:07:39.608768 2026] [ssl:error] [pid 3177502:tid 3177502] (EAI 2)Name or service not known: [client 144.76.19.72:28634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:39.608804 2026] [ssl:error] [pid 3177502:tid 3177502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:39.666568 2026] [ssl:error] [pid 3179899:tid 3179899] (EAI 2)Name or service not known: [client 144.76.19.72:28636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:39.666603 2026] [ssl:error] [pid 3179899:tid 3179899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:40.869801 2026] [security2:error] [pid 3179934:tid 3179934] [client 185.191.171.7:10352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/george-wicks-joe-wicks-brother"] [unique_id "ams-jPdKNOuU5BIsMfvWFQAAADc"]
[Thu Jul 30 13:07:40.991387 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-signin.php
[Thu Jul 30 13:07:41.824666 2026] [core:error] [pid 3171878:tid 3171878] [client 172.213.10.64:10226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:41.824695 2026] [core:error] [pid 3171878:tid 3171878] [client 172.213.10.64:10226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:41.867595 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/f35.php
[Thu Jul 30 13:07:42.242407 2026] [ssl:error] [pid 3175760:tid 3175760] (70014)End of file found: [client 216.73.216.199:50151] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:42.405110 2026] [core:error] [pid 3174755:tid 3174755] [client 66.249.66.167:51149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:42.405140 2026] [core:error] [pid 3174755:tid 3174755] [client 66.249.66.167:51149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:42.723464 2026] [ssl:error] [pid 3165118:tid 3165118] (EAI 2)Name or service not known: [client 144.76.19.72:28644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:42.723503 2026] [ssl:error] [pid 3165118:tid 3165118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:42.749219 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/gg.php
[Thu Jul 30 13:07:42.779187 2026] [ssl:error] [pid 3183616:tid 3183616] (EAI 2)Name or service not known: [client 144.76.19.72:28648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:42.779222 2026] [ssl:error] [pid 3183616:tid 3183616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:42.844846 2026] [ssl:error] [pid 3178866:tid 3178866] (70014)End of file found: [client 216.73.216.199:62176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:43.441730 2026] [core:error] [pid 3184824:tid 3184824] (13)Permission denied: [client 216.73.216.199:25823] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS2/iomem_base
[Thu Jul 30 13:07:43.641058 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/class.php
[Thu Jul 30 13:07:43.743206 2026] [core:error] [pid 3184824:tid 3184824] (13)Permission denied: [client 216.73.216.199:25823] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/poison
[Thu Jul 30 13:07:44.457117 2026] [core:error] [pid 3174755:tid 3174755] [client 57.141.0.58:47098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:44.457148 2026] [core:error] [pid 3174755:tid 3174755] [client 57.141.0.58:47098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:44.487203 2026] [lsapi:warn] [pid 3179940:tid 3179940] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:44.497307 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/flower.php
[Thu Jul 30 13:07:45.247385 2026] [core:error] [pid 3184824:tid 3184824] (13)Permission denied: [client 216.73.216.199:25823] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_head_cache/reclaim_account
[Thu Jul 30 13:07:45.289283 2026] [core:error] [pid 3181802:tid 3181802] [client 172.213.10.64:10130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:45.289309 2026] [core:error] [pid 3181802:tid 3181802] [client 172.213.10.64:10130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:45.447456 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/motu.php
[Thu Jul 30 13:07:45.482500 2026] [security2:error] [pid 3179937:tid 3179937] [client 47.128.98.6:33260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "ams-kVhAZw9OwhXg2L7EUAAAADo"]
[Thu Jul 30 13:07:45.876645 2026] [ssl:error] [pid 3171878:tid 3171878] (EAI 2)Name or service not known: [client 144.76.19.72:28664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:45.876684 2026] [ssl:error] [pid 3171878:tid 3171878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:45.931476 2026] [ssl:error] [pid 3178483:tid 3178483] (EAI 2)Name or service not known: [client 144.76.19.72:28670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:45.931516 2026] [ssl:error] [pid 3178483:tid 3178483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:46.150660 2026] [core:error] [pid 3184824:tid 3184824] (13)Permission denied: [client 216.73.216.199:25823] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS0/custom_divisor
[Thu Jul 30 13:07:46.300005 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 13:07:47.194333 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/lite.php
[Thu Jul 30 13:07:47.457753 2026] [security2:error] [pid 3185340:tid 3185340] [client 85.208.96.210:50014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "ams-k61w3YdoOahF5epnnQAAAB8"]
[Thu Jul 30 13:07:47.486635 2026] [security2:error] [pid 3177761:tid 3177761] [client 43.157.95.239:38276] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "ams-k6zc2AMlHVuDJRY0RwAAABw"]
[Thu Jul 30 13:07:47.694010 2026] [core:error] [pid 3178483:tid 3178483] [client 57.141.0.5:54800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:47.694044 2026] [core:error] [pid 3178483:tid 3178483] [client 57.141.0.5:54800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:47.754010 2026] [core:error] [pid 3179940:tid 3179940] [client 172.213.10.64:10224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:47.754034 2026] [core:error] [pid 3179940:tid 3179940] [client 172.213.10.64:10224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:47.830052 2026] [security2:error] [pid 3185340:tid 3185340] [client 185.191.171.7:61346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4572.0/prev_next,next.html"] [unique_id "ams-k61w3YdoOahF5epnngAAAB8"]
[Thu Jul 30 13:07:47.932895 2026] [security2:error] [pid 3179937:tid 3179937] [client 170.106.192.208:38608] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "ams-k1hAZw9OwhXg2L7EUwAAADo"]
[Thu Jul 30 13:07:47.968392 2026] [core:error] [pid 3179345:tid 3179345] [client 57.141.0.3:35968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:47.968422 2026] [core:error] [pid 3179345:tid 3179345] [client 57.141.0.3:35968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:48.100252 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/lock360.php
[Thu Jul 30 13:07:48.306716 2026] [security2:error] [pid 3185340:tid 3185340] [client 170.106.192.208:39230] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "ams-lK1w3YdoOahF5epnnwAAAB8"]
[Thu Jul 30 13:07:48.961770 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/wp-conflg.php
[Thu Jul 30 13:07:49.000230 2026] [ssl:error] [pid 3179934:tid 3179934] (EAI 2)Name or service not known: [client 144.76.19.72:28682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:49.000265 2026] [ssl:error] [pid 3179934:tid 3179934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:49.054684 2026] [ssl:error] [pid 3179936:tid 3179936] (EAI 2)Name or service not known: [client 144.76.19.72:28684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:49.054734 2026] [ssl:error] [pid 3179936:tid 3179936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:49.312317 2026] [security2:error] [pid 3171878:tid 3171878] [client 43.157.95.239:59580] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "ams-lT_kNIbIqbBRyWa8XwAAABY"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 13:07:49.314137 2026] [authz_core:error] [pid 3171878:tid 3171878] [client 43.157.95.239:59580] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 13:07:49.316777 2026] [authz_core:error] [pid 3171878:tid 3171878] [client 43.157.95.239:59580] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 13:07:49.692625 2026] [lsapi:warn] [pid 3178235:tid 3178235] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:49.774762 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-links-opml.php
[Thu Jul 30 13:07:49.915056 2026] [security2:error] [pid 3185340:tid 3185340] [client 170.106.192.208:54710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "ams-la1w3YdoOahF5epnoAAAAB8"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 13:07:50.658236 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/.alf.php
[Thu Jul 30 13:07:50.671744 2026] [security2:error] [pid 3183616:tid 3183616] [client 170.106.192.208:55114] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "ams-lsQj_RpYFywWESfjXgAAACM"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 13:07:51.221448 2026] [authz_core:error] [pid 3185340:tid 3185340] [client 66.249.66.33:34965] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:07:51.224340 2026] [authz_core:error] [pid 3185340:tid 3185340] [client 66.249.66.33:34965] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:07:51.547609 2026] [security2:error] [pid 3177873:tid 3177873] [client 170.106.192.208:56000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "ams-l-ZCW8g5abJbLdj9AAAAAB4"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 13:07:51.586480 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/ws.php
[Thu Jul 30 13:07:52.110239 2026] [ssl:error] [pid 3179934:tid 3179934] (EAI 2)Name or service not known: [client 144.76.19.72:62452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:52.110275 2026] [ssl:error] [pid 3179934:tid 3179934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:52.169478 2026] [ssl:error] [pid 3183750:tid 3183750] (EAI 2)Name or service not known: [client 144.76.19.72:62456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:52.169523 2026] [ssl:error] [pid 3183750:tid 3183750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:52.407134 2026] [core:error] [pid 3171425:tid 3171425] [client 172.213.10.64:10124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:52.407163 2026] [core:error] [pid 3171425:tid 3171425] [client 172.213.10.64:10124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:52.594396 2026] [ssl:error] [pid 3171878:tid 3171878] (70014)End of file found: [client 216.73.216.199:63846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:52.632232 2026] [security2:error] [pid 3181634:tid 3181634] [client 114.119.155.144:32715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~19,104/request_format~html"] [unique_id "ams-mL7ewYShIj04H6nipwAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E19
[Thu Jul 30 13:07:53.173183 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/ioxi-o.php
[Thu Jul 30 13:07:54.039426 2026] [security2:error] [pid 3184824:tid 3184824] [client 114.119.155.144:32727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~19,104/request_format~html"] [unique_id "ams-mtmUGldR0cMt6DXwFwAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E19
[Thu Jul 30 13:07:54.113162 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/ws54.php
[Thu Jul 30 13:07:54.267054 2026] [core:error] [pid 3179940:tid 3179940] [client 57.141.0.7:29012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:54.267096 2026] [core:error] [pid 3179940:tid 3179940] [client 57.141.0.7:29012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:54.390727 2026] [ssl:error] [pid 3175760:tid 3175760] (EAI 2)Name or service not known: [client 34.96.38.76:60427] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:54.390753 2026] [ssl:error] [pid 3175760:tid 3175760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:54.714059 2026] [ssl:error] [pid 3172019:tid 3172019] (70014)End of file found: [client 216.73.216.199:55081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:54.959856 2026] [lsapi:warn] [pid 3183750:tid 3183750] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:07:54.960707 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/155.php
[Thu Jul 30 13:07:55.092847 2026] [core:error] [pid 3171425:tid 3171425] [client 66.249.66.39:61620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:55.092870 2026] [core:error] [pid 3171425:tid 3171425] [client 66.249.66.39:61620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:55.221524 2026] [ssl:error] [pid 3183615:tid 3183615] (70014)End of file found: [client 216.73.216.199:1353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:55.223029 2026] [ssl:error] [pid 3175760:tid 3175760] (EAI 2)Name or service not known: [client 144.76.19.72:62468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:55.223048 2026] [ssl:error] [pid 3175760:tid 3175760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:55.275961 2026] [ssl:error] [pid 3182762:tid 3182762] (EAI 2)Name or service not known: [client 144.76.19.72:62472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:55.276002 2026] [ssl:error] [pid 3182762:tid 3182762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:55.825528 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/min.php
[Thu Jul 30 13:07:56.603864 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:56.603889 2026] [core:error] [pid 3179898:tid 3179898] [client 172.213.10.64:10131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:56.756318 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:07:57.130338 2026] [ssl:error] [pid 3181802:tid 3181802] (70014)End of file found: [client 216.73.216.199:15181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:07:57.531948 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/tinyfilemanager.php
[Thu Jul 30 13:07:58.329478 2026] [ssl:error] [pid 3181679:tid 3181679] (EAI 2)Name or service not known: [client 144.76.19.72:62480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:58.329521 2026] [ssl:error] [pid 3181679:tid 3181679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:58.359896 2026] [security2:error] [pid 3185340:tid 3185340] [client 43.166.237.57:53408] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "ams-nq1w3YdoOahF5epnowAAAB8"]
[Thu Jul 30 13:07:58.370613 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/hplfuns.php
[Thu Jul 30 13:07:58.386497 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:62488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:07:58.386522 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:07:58.503501 2026] [core:error] [pid 3165118:tid 3165118] [client 172.213.10.64:10212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:58.503524 2026] [core:error] [pid 3165118:tid 3165118] [client 172.213.10.64:10212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:59.206086 2026] [security2:error] [pid 3181679:tid 3181679] [client 43.133.69.37:51256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "ams-nx70xGKqaSwnYJ6MhAAAAAk"]
[Thu Jul 30 13:07:59.299882 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/bthil.php
[Thu Jul 30 13:07:59.615247 2026] [core:error] [pid 3172022:tid 3172022] [client 172.213.10.64:10217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:07:59.615271 2026] [core:error] [pid 3172022:tid 3172022] [client 172.213.10.64:10217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:00.112421 2026] [core:error] [pid 3177146:tid 3177146] [client 172.213.10.64:10192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:00.112451 2026] [core:error] [pid 3177146:tid 3177146] [client 172.213.10.64:10192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:00.167311 2026] [lsapi:warn] [pid 3178234:tid 3178234] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:00.189393 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/cv.php
[Thu Jul 30 13:08:00.412282 2026] [core:error] [pid 3172019:tid 3172019] [client 172.213.10.64:10060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:00.412324 2026] [core:error] [pid 3172019:tid 3172019] [client 172.213.10.64:10060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:01.112331 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/sf.php
[Thu Jul 30 13:08:01.295048 2026] [core:error] [pid 3178866:tid 3178866] [client 172.213.10.64:10196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:01.295089 2026] [core:error] [pid 3178866:tid 3178866] [client 172.213.10.64:10196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:01.351798 2026] [ssl:error] [pid 3171968:tid 3171968] (70014)End of file found: [client 216.73.216.199:59779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:01.440355 2026] [ssl:error] [pid 3183388:tid 3183388] (EAI 2)Name or service not known: [client 144.76.19.72:45312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:01.440391 2026] [ssl:error] [pid 3183388:tid 3183388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:01.493408 2026] [ssl:error] [pid 3181680:tid 3181680] (EAI 2)Name or service not known: [client 144.76.19.72:45326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:01.493434 2026] [ssl:error] [pid 3181680:tid 3181680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:01.943645 2026] [core:error] [pid 3185098:tid 3185098] (13)Permission denied: [client 216.73.216.199:50009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/pde_opener/shrink
[Thu Jul 30 13:08:02.023874 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content.php
[Thu Jul 30 13:08:02.521237 2026] [authz_core:error] [pid 3181680:tid 3181680] [client 57.141.0.68:59784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:08:02.521860 2026] [authz_core:error] [pid 3181680:tid 3181680] [client 57.141.0.68:59784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:08:02.836513 2026] [cgi:error] [pid 3171878:tid 3171878] [client 172.213.208.20:38983] AH02812: stderr from /home/davidebell/public_html/bashforthbell.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:08:03.376380 2026] [security2:error] [pid 3178866:tid 3178866] [client 46.248.200.66:56668] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-o-SLVqVe8dUw_tZ8UwAAAAY"]
[Thu Jul 30 13:08:03.376434 2026] [security2:error] [pid 3178866:tid 3178866] [client 46.248.200.66:56668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-o-SLVqVe8dUw_tZ8UwAAAAY"]
[Thu Jul 30 13:08:03.376698 2026] [security2:error] [pid 3178866:tid 3178866] [client 46.248.200.66:56668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams-o-SLVqVe8dUw_tZ8UwAAAAY"]
[Thu Jul 30 13:08:03.493673 2026] [security2:error] [pid 3183388:tid 3183388] [client 43.133.69.37:47164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "ams-oxJPU3bbWfkp8AOUSwAAABg"], referer: http://www.retrodisco.co.uk
[Thu Jul 30 13:08:03.775879 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/txets.php
[Thu Jul 30 13:08:04.547333 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:45338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:04.547364 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:04.610574 2026] [ssl:error] [pid 3177873:tid 3177873] (EAI 2)Name or service not known: [client 144.76.19.72:45354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:04.610604 2026] [ssl:error] [pid 3177873:tid 3177873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:05.255260 2026] [ssl:error] [pid 3185098:tid 3185098] (70014)End of file found: [client 216.73.216.199:50009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:05.323198 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 13:08:05.501239 2026] [lsapi:warn] [pid 3172022:tid 3172022] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:05.748816 2026] [ssl:error] [pid 3177873:tid 3177873] (70014)End of file found: [client 216.73.216.199:37570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:05.768249 2026] [security2:error] [pid 3183388:tid 3183388] [client 47.77.234.18:18871] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-pRJPU3bbWfkp8AOUTAAAABg"]
[Thu Jul 30 13:08:05.768296 2026] [security2:error] [pid 3183388:tid 3183388] [client 47.77.234.18:18871] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-pRJPU3bbWfkp8AOUTAAAABg"]
[Thu Jul 30 13:08:05.768545 2026] [security2:error] [pid 3183388:tid 3183388] [client 47.77.234.18:18871] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams-pRJPU3bbWfkp8AOUTAAAABg"]
[Thu Jul 30 13:08:06.224476 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/new.php
[Thu Jul 30 13:08:07.665433 2026] [ssl:error] [pid 3178483:tid 3178483] (EAI 2)Name or service not known: [client 144.76.19.72:45362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:07.665466 2026] [ssl:error] [pid 3178483:tid 3178483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:07.716753 2026] [ssl:error] [pid 3178234:tid 3178234] (EAI 2)Name or service not known: [client 144.76.19.72:45364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:07.716789 2026] [ssl:error] [pid 3178234:tid 3178234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:08.042222 2026] [authz_core:error] [pid 3186720:tid 3186720] [client 57.141.0.14:21786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:08:08.042839 2026] [authz_core:error] [pid 3186720:tid 3186720] [client 57.141.0.14:21786] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:08:08.154694 2026] [core:error] [pid 3178234:tid 3178234] [client 172.213.10.64:10143] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:08.154730 2026] [core:error] [pid 3178234:tid 3178234] [client 172.213.10.64:10143] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:08.335508 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 13:08:08.482647 2026] [core:error] [pid 3181679:tid 3181679] [client 66.249.66.169:46311] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:08.482677 2026] [core:error] [pid 3181679:tid 3181679] [client 66.249.66.169:46311] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:08.844287 2026] [core:error] [pid 3171968:tid 3171968] [client 172.213.10.64:10227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:08.844312 2026] [core:error] [pid 3171968:tid 3171968] [client 172.213.10.64:10227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:08.877040 2026] [core:error] [pid 3183270:tid 3183270] (13)Permission denied: [client 216.73.216.199:50474] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/request_sock_TCPv6/destroy_by_rcu
[Thu Jul 30 13:08:09.223994 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/error.php
[Thu Jul 30 13:08:09.558632 2026] [security2:error] [pid 3178866:tid 3178866] [client 43.133.69.37:60442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "ams-qeSLVqVe8dUw_tZ8VAAAAAY"]
[Thu Jul 30 13:08:09.639661 2026] [core:error] [pid 3181679:tid 3181679] [client 172.213.10.64:10209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:09.639687 2026] [core:error] [pid 3181679:tid 3181679] [client 172.213.10.64:10209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:10.164673 2026] [access_compat:error] [pid 3181349:tid 3181349] [client 172.202.95.21:36384] AH01797: client denied by server configuration: /home/thepryor/public_html/a7.php
[Thu Jul 30 13:08:10.636815 2026] [lsapi:warn] [pid 3178483:tid 3178483] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:10.687442 2026] [ssl:error] [pid 3183270:tid 3183270] (70014)End of file found: [client 216.73.216.199:50474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:10.770031 2026] [ssl:error] [pid 3179940:tid 3179940] (EAI 2)Name or service not known: [client 144.76.19.72:63306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:10.770094 2026] [ssl:error] [pid 3179940:tid 3179940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:10.825023 2026] [ssl:error] [pid 3183615:tid 3183615] (EAI 2)Name or service not known: [client 144.76.19.72:63316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:10.825061 2026] [ssl:error] [pid 3183615:tid 3183615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:10.935309 2026] [core:error] [pid 3174755:tid 3174755] [client 172.213.10.64:10122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:10.935335 2026] [core:error] [pid 3174755:tid 3174755] [client 172.213.10.64:10122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:11.596260 2026] [core:error] [pid 3178866:tid 3178866] [client 172.213.10.64:10233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:11.596290 2026] [core:error] [pid 3178866:tid 3178866] [client 172.213.10.64:10233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:11.743452 2026] [security2:error] [pid 3177873:tid 3177873] [client 47.77.234.18:60487] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-q-ZCW8g5abJbLdj9BQAAAB4"]
[Thu Jul 30 13:08:11.743524 2026] [security2:error] [pid 3177873:tid 3177873] [client 47.77.234.18:60487] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-q-ZCW8g5abJbLdj9BQAAAB4"]
[Thu Jul 30 13:08:11.743766 2026] [security2:error] [pid 3177873:tid 3177873] [client 47.77.234.18:60487] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams-q-ZCW8g5abJbLdj9BQAAAB4"]
[Thu Jul 30 13:08:13.419356 2026] [core:error] [pid 3177729:tid 3177729] [client 172.213.10.64:10221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:13.419399 2026] [core:error] [pid 3177729:tid 3177729] [client 172.213.10.64:10221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:13.883153 2026] [ssl:error] [pid 3178235:tid 3178235] (EAI 2)Name or service not known: [client 144.76.19.72:63322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:13.883186 2026] [ssl:error] [pid 3178235:tid 3178235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:13.936644 2026] [ssl:error] [pid 3171968:tid 3171968] (EAI 2)Name or service not known: [client 144.76.19.72:63328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:13.936681 2026] [ssl:error] [pid 3171968:tid 3171968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:15.986963 2026] [lsapi:warn] [pid 3185098:tid 3185098] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:16.060954 2026] [core:error] [pid 3183270:tid 3183270] [client 172.213.10.64:10182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:16.060977 2026] [core:error] [pid 3183270:tid 3183270] [client 172.213.10.64:10182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:16.131447 2026] [ssl:error] [pid 3174755:tid 3174755] (70014)End of file found: [client 216.73.216.199:7894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:16.734501 2026] [ssl:error] [pid 3179898:tid 3179898] (70014)End of file found: [client 216.73.216.199:54289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:16.996872 2026] [ssl:error] [pid 3187190:tid 3187190] (EAI 2)Name or service not known: [client 144.76.19.72:63342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:16.996909 2026] [ssl:error] [pid 3187190:tid 3187190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:17.052025 2026] [ssl:error] [pid 3183270:tid 3183270] (EAI 2)Name or service not known: [client 144.76.19.72:63344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:17.052056 2026] [ssl:error] [pid 3183270:tid 3183270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:17.810799 2026] [security2:error] [pid 3179345:tid 3179345] [client 43.135.186.135:40828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.marcwhiffen.co.uk"] [uri "/"] [unique_id "ams-sduqda5ubYWtbZhLDQAAABs"]
[Thu Jul 30 13:08:17.811659 2026] [authz_core:error] [pid 3179345:tid 3179345] [client 43.135.186.135:40828] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 13:08:17.877539 2026] [ssl:error] [pid 3181634:tid 3181634] (70014)End of file found: [client 216.73.216.199:64939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:19.580427 2026] [core:error] [pid 3185098:tid 3185098] [client 172.213.10.64:10136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:19.580462 2026] [core:error] [pid 3185098:tid 3185098] [client 172.213.10.64:10136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:20.136491 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:60496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:20.136531 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:20.190840 2026] [ssl:error] [pid 3178866:tid 3178866] (EAI 2)Name or service not known: [client 144.76.19.72:60502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:20.190871 2026] [ssl:error] [pid 3178866:tid 3178866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:20.479427 2026] [core:error] [pid 3179345:tid 3179345] [client 66.249.66.167:57361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:20.479450 2026] [core:error] [pid 3179345:tid 3179345] [client 66.249.66.167:57361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:20.502572 2026] [core:error] [pid 3179933:tid 3179933] [client 172.213.10.64:10132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:20.502595 2026] [core:error] [pid 3179933:tid 3179933] [client 172.213.10.64:10132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:21.075617 2026] [lsapi:warn] [pid 3178235:tid 3178235] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:22.482412 2026] [core:error] [pid 3174755:tid 3174755] [client 172.213.10.64:10216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:22.482440 2026] [core:error] [pid 3174755:tid 3174755] [client 172.213.10.64:10216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:22.676232 2026] [authz_core:error] [pid 3185098:tid 3185098] [client 57.141.0.35:56276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:08:22.676856 2026] [authz_core:error] [pid 3185098:tid 3185098] [client 57.141.0.35:56276] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:08:23.247165 2026] [ssl:error] [pid 3178235:tid 3178235] (EAI 2)Name or service not known: [client 144.76.19.72:60506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:23.247198 2026] [ssl:error] [pid 3178235:tid 3178235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:23.302848 2026] [ssl:error] [pid 3171878:tid 3171878] (EAI 2)Name or service not known: [client 144.76.19.72:60510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:23.302873 2026] [ssl:error] [pid 3171878:tid 3171878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:26.356607 2026] [ssl:error] [pid 3174755:tid 3174755] (EAI 2)Name or service not known: [client 144.76.19.72:60514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:26.356644 2026] [ssl:error] [pid 3174755:tid 3174755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:26.411325 2026] [ssl:error] [pid 3177874:tid 3177874] (EAI 2)Name or service not known: [client 144.76.19.72:60516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:26.411361 2026] [ssl:error] [pid 3177874:tid 3177874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:26.472952 2026] [lsapi:warn] [pid 3179936:tid 3179936] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:27.525888 2026] [security2:error] [pid 3173630:tid 3173630] [client 216.73.216.199:4146] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libssh/libssh_server.config"] [unique_id "ams-u-L3XwBQdehD8jC6DAAAAAE"]
[Thu Jul 30 13:08:27.526410 2026] [security2:error] [pid 3173630:tid 3173630] [client 216.73.216.199:4146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libssh/libssh_server.config"] [unique_id "ams-u-L3XwBQdehD8jC6DAAAAAE"]
[Thu Jul 30 13:08:27.526844 2026] [security2:error] [pid 3173630:tid 3173630] [client 216.73.216.199:4146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/libssh/libssh_server.config"] [unique_id "ams-u-L3XwBQdehD8jC6DAAAAAE"]
[Thu Jul 30 13:08:28.178986 2026] [core:error] [pid 3175860:tid 3175860] [client 172.213.10.64:10223] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:28.179015 2026] [core:error] [pid 3175860:tid 3175860] [client 172.213.10.64:10223] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:28.322502 2026] [authz_core:error] [pid 3187298:tid 3187298] [client 66.249.66.33:46430] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:08:28.326839 2026] [authz_core:error] [pid 3187298:tid 3187298] [client 66.249.66.33:46430] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:08:28.435710 2026] [ssl:error] [pid 3173630:tid 3173630] (70014)End of file found: [client 216.73.216.199:4146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:29.033801 2026] [ssl:error] [pid 3181679:tid 3181679] (70014)End of file found: [client 216.73.216.199:50219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:29.464730 2026] [ssl:error] [pid 3177874:tid 3177874] (EAI 2)Name or service not known: [client 144.76.19.72:60524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:29.464764 2026] [ssl:error] [pid 3177874:tid 3177874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:29.465911 2026] [core:error] [pid 3187137:tid 3187137] [client 172.213.10.64:10235] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:29.465945 2026] [core:error] [pid 3187137:tid 3187137] [client 172.213.10.64:10235] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:29.517470 2026] [ssl:error] [pid 3183750:tid 3183750] (EAI 2)Name or service not known: [client 144.76.19.72:60536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:29.517511 2026] [ssl:error] [pid 3183750:tid 3183750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:30.396603 2026] [core:error] [pid 3179940:tid 3179940] [client 172.213.10.64:10210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:30.396638 2026] [core:error] [pid 3179940:tid 3179940] [client 172.213.10.64:10210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:31.159376 2026] [lsapi:warn] [pid 3171968:tid 3171968] [client 216.73.216.199:10014] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 13:08:31.159407 2026] [lsapi:error] [pid 3171968:tid 3171968] [client 216.73.216.199:10014] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeWithIndentedAttributes.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 13:08:31.386240 2026] [authz_core:error] [pid 3174755:tid 3174755] [client 57.141.0.47:52674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:08:31.386932 2026] [authz_core:error] [pid 3174755:tid 3174755] [client 57.141.0.47:52674] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:08:31.560101 2026] [lsapi:warn] [pid 3179345:tid 3179345] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:31.657717 2026] [ssl:error] [pid 3171425:tid 3171425] (70014)End of file found: [client 216.73.216.199:15424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:31.969611 2026] [core:error] [pid 3183270:tid 3183270] [client 172.213.10.64:10115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:31.969649 2026] [core:error] [pid 3183270:tid 3183270] [client 172.213.10.64:10115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:32.400243 2026] [authz_core:error] [pid 3177874:tid 3177874] [client 66.249.66.34:55341] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:08:32.402908 2026] [authz_core:error] [pid 3177874:tid 3177874] [client 66.249.66.34:55341] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:08:32.611913 2026] [ssl:error] [pid 3174755:tid 3174755] (EAI 2)Name or service not known: [client 144.76.19.72:25102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:32.611948 2026] [ssl:error] [pid 3174755:tid 3174755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:32.645991 2026] [security2:error] [pid 3177729:tid 3177729] [client 111.225.149.156:14662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "ams-wDB5M-1SiOlBRFd3NgAAABI"]
[Thu Jul 30 13:08:32.669599 2026] [ssl:error] [pid 3165118:tid 3165118] (EAI 2)Name or service not known: [client 144.76.19.72:25106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:32.669655 2026] [ssl:error] [pid 3165118:tid 3165118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:32.850946 2026] [cgi:error] [pid 3171968:tid 3171968] [client 37.59.21.100:33268] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:08:33.136312 2026] [core:error] [pid 3171878:tid 3171878] [client 66.249.66.167:62271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:33.136343 2026] [core:error] [pid 3171878:tid 3171878] [client 66.249.66.167:62271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:33.964291 2026] [security2:error] [pid 3187190:tid 3187190] [client 43.130.141.193:41908] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "webstersltd.com"] [uri "/"] [unique_id "ams-wRDqt92hWydlJ6JSggAAAB8"]
[Thu Jul 30 13:08:34.089310 2026] [core:error] [pid 3181634:tid 3181634] [client 172.213.10.64:10177] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:34.089340 2026] [core:error] [pid 3181634:tid 3181634] [client 172.213.10.64:10177] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:34.442323 2026] [security2:error] [pid 3177761:tid 3177761] [client 43.158.91.71:33410] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "ams-wqzc2AMlHVuDJRY0VQAAABw"]
[Thu Jul 30 13:08:35.017304 2026] [security2:error] [pid 3181679:tid 3181679] [client 43.130.141.193:43768] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "webstersltd.com"] [uri "/"] [unique_id "ams-wx70xGKqaSwnYJ6MjgAAAAk"], referer: http://webstersltd.com
[Thu Jul 30 13:08:35.724573 2026] [ssl:error] [pid 3175656:tid 3175656] (EAI 2)Name or service not known: [client 144.76.19.72:25120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:35.724613 2026] [ssl:error] [pid 3175656:tid 3175656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:35.810114 2026] [ssl:error] [pid 3179933:tid 3179933] (EAI 2)Name or service not known: [client 144.76.19.72:25122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:35.810153 2026] [ssl:error] [pid 3179933:tid 3179933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:35.997454 2026] [core:error] [pid 3181634:tid 3181634] [client 172.213.10.64:10157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:35.997477 2026] [core:error] [pid 3181634:tid 3181634] [client 172.213.10.64:10157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:36.938228 2026] [lsapi:warn] [pid 3175860:tid 3175860] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:37.394330 2026] [ssl:error] [pid 3175656:tid 3175656] (70014)End of file found: [client 216.73.216.199:23166] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:37.687316 2026] [ssl:error] [pid 3178866:tid 3178866] (70014)End of file found: [client 216.73.216.199:56085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:37.987002 2026] [ssl:error] [pid 3179936:tid 3179936] (70014)End of file found: [client 216.73.216.199:40117] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:38.186987 2026] [security2:error] [pid 3175860:tid 3175860] [client 43.157.170.13:43720] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.craft-buddies.co.uk"] [uri "/"] [unique_id "ams-xvS6yx2HLbV9Tl_owwAAACg"]
[Thu Jul 30 13:08:38.867344 2026] [ssl:error] [pid 3187137:tid 3187137] (EAI 2)Name or service not known: [client 144.76.19.72:25138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:38.867406 2026] [ssl:error] [pid 3187137:tid 3187137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:38.920901 2026] [ssl:error] [pid 3181679:tid 3181679] (EAI 2)Name or service not known: [client 144.76.19.72:25146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:38.920936 2026] [ssl:error] [pid 3181679:tid 3181679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:41.328378 2026] [security2:error] [pid 3158357:tid 3158357] [client 85.208.96.196:37532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/southend-racquet-club"] [unique_id "ams-yUYG8dwByC2nqpxAgAAAAAM"]
[Thu Jul 30 13:08:41.974557 2026] [ssl:error] [pid 3174755:tid 3174755] (EAI 2)Name or service not known: [client 144.76.19.72:56536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:41.974588 2026] [ssl:error] [pid 3174755:tid 3174755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:42.027731 2026] [ssl:error] [pid 3187298:tid 3187298] (EAI 2)Name or service not known: [client 144.76.19.72:56540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:42.027787 2026] [ssl:error] [pid 3187298:tid 3187298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:42.111184 2026] [lsapi:warn] [pid 3179934:tid 3179934] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:42.813650 2026] [ssl:error] [pid 3174755:tid 3174755] (70014)End of file found: [client 216.73.216.199:62951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:43.033107 2026] [core:error] [pid 3172019:tid 3172019] [client 172.213.10.64:10225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:43.033154 2026] [core:error] [pid 3172019:tid 3172019] [client 172.213.10.64:10225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:43.146673 2026] [ssl:error] [pid 3183388:tid 3183388] (70014)End of file found: [client 216.73.216.199:16752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:43.426711 2026] [ssl:error] [pid 3171425:tid 3171425] (70014)End of file found: [client 216.73.216.199:8259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:44.431282 2026] [access_compat:error] [pid 3179934:tid 3179934] [client 84.75.148.62:34558] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/hobnobbled-the-mcvities-hobnobs-flapjacks-scam
[Thu Jul 30 13:08:44.431385 2026] [access_compat:error] [pid 3179934:tid 3179934] [client 84.75.148.62:34558] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:08:45.085684 2026] [ssl:error] [pid 3187298:tid 3187298] (EAI 2)Name or service not known: [client 144.76.19.72:56548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:45.085718 2026] [ssl:error] [pid 3187298:tid 3187298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:45.149136 2026] [ssl:error] [pid 3177729:tid 3177729] (EAI 2)Name or service not known: [client 144.76.19.72:56556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:45.149162 2026] [ssl:error] [pid 3177729:tid 3177729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:45.808382 2026] [core:error] [pid 3177761:tid 3177761] [client 66.249.66.39:48378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:45.808410 2026] [core:error] [pid 3177761:tid 3177761] [client 66.249.66.39:48378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:46.685826 2026] [security2:error] [pid 3177729:tid 3177729] [client 43.166.255.102:45420] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "fast-hosting.co.uk"] [uri "/"] [unique_id "ams-zjB5M-1SiOlBRFd3PAAAABI"]
[Thu Jul 30 13:08:47.000660 2026] [core:error] [pid 3174653:tid 3174653] [client 172.213.10.64:10116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:47.000689 2026] [core:error] [pid 3174653:tid 3174653] [client 172.213.10.64:10116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:47.411224 2026] [lsapi:warn] [pid 3183465:tid 3183465] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:48.202297 2026] [ssl:error] [pid 3177729:tid 3177729] (EAI 2)Name or service not known: [client 144.76.19.72:56568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:48.202324 2026] [ssl:error] [pid 3177729:tid 3177729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:48.259851 2026] [ssl:error] [pid 3183270:tid 3183270] (EAI 2)Name or service not known: [client 144.76.19.72:56570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:48.259886 2026] [ssl:error] [pid 3183270:tid 3183270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:49.411251 2026] [security2:error] [pid 3171425:tid 3171425] [client 185.191.171.15:53974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,582.0/prev_next,next.html"] [unique_id "ams-0R50EOkuho_qGHM8pAAAABA"]
[Thu Jul 30 13:08:49.414753 2026] [ssl:error] [pid 3183270:tid 3183270] (70014)End of file found: [client 216.73.216.199:62145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:49.430402 2026] [cgi:error] [pid 3177729:tid 3177729] [client 216.73.216.199:54781] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Thread-Queue/examples/callback.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:08:49.430451 2026] [cgi:error] [pid 3177729:tid 3177729] [client 216.73.216.199:54781] End of script output before headers: callback.pl
[Thu Jul 30 13:08:49.578490 2026] [lsapi:warn] [pid 3181679:tid 3181679] [client 216.73.216.199:45334] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 13:08:49.578527 2026] [lsapi:error] [pid 3181679:tid 3181679] [client 216.73.216.199:45334] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/unserializeObject.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 13:08:49.860533 2026] [ssl:error] [pid 3178483:tid 3178483] (70014)End of file found: [client 216.73.216.199:64964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:50.612526 2026] [core:error] [pid 3179293:tid 3179293] [client 172.213.10.64:10220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:50.612557 2026] [core:error] [pid 3179293:tid 3179293] [client 172.213.10.64:10220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:50.765441 2026] [ssl:error] [pid 3171425:tid 3171425] (70014)End of file found: [client 216.73.216.199:4135] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:51.341410 2026] [ssl:error] [pid 3187298:tid 3187298] (EAI 2)Name or service not known: [client 144.76.19.72:38594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:51.341493 2026] [ssl:error] [pid 3187298:tid 3187298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:51.394711 2026] [ssl:error] [pid 3183388:tid 3183388] (EAI 2)Name or service not known: [client 144.76.19.72:38610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:51.394737 2026] [ssl:error] [pid 3183388:tid 3183388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:52.666921 2026] [lsapi:warn] [pid 3187190:tid 3187190] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:53.339427 2026] [lsapi:error] [pid 3179934:tid 3179934] [client 45.158.164.139:60638] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 131072 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-recovery-mode.php on line 172\n, referer: https://demo.mjs-services.com/wp-cron.php?doing_wp_cron=1785413332.7748448848724365234375
[Thu Jul 30 13:08:54.056751 2026] [core:error] [pid 3184824:tid 3184824] [client 172.213.10.64:10128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:54.056779 2026] [core:error] [pid 3184824:tid 3184824] [client 172.213.10.64:10128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:54.452503 2026] [ssl:error] [pid 3177874:tid 3177874] (EAI 2)Name or service not known: [client 144.76.19.72:38622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:54.452535 2026] [ssl:error] [pid 3177874:tid 3177874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:54.504012 2026] [ssl:error] [pid 3183388:tid 3183388] (EAI 2)Name or service not known: [client 144.76.19.72:38632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:54.504042 2026] [ssl:error] [pid 3183388:tid 3183388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:55.895103 2026] [core:error] [pid 3179934:tid 3179934] [client 172.213.10.64:10205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:55.895145 2026] [core:error] [pid 3179934:tid 3179934] [client 172.213.10.64:10205] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:56.754707 2026] [access_compat:error] [pid 3179937:tid 3179937] [client 20.104.16.169:37347] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:08:57.559472 2026] [ssl:error] [pid 3179345:tid 3179345] (EAI 2)Name or service not known: [client 144.76.19.72:38640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:57.559513 2026] [ssl:error] [pid 3179345:tid 3179345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:57.615431 2026] [ssl:error] [pid 3167187:tid 3167187] (EAI 2)Name or service not known: [client 144.76.19.72:38650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:08:57.615477 2026] [ssl:error] [pid 3167187:tid 3167187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:08:57.868806 2026] [lsapi:warn] [pid 3188776:tid 3188776] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:08:58.039742 2026] [core:error] [pid 3178866:tid 3178866] [client 172.213.10.64:10142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:58.039766 2026] [core:error] [pid 3178866:tid 3178866] [client 172.213.10.64:10142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:58.501479 2026] [core:error] [pid 3177761:tid 3177761] [client 66.249.66.39:41829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:58.501511 2026] [core:error] [pid 3177761:tid 3177761] [client 66.249.66.39:41829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:58.621188 2026] [ssl:error] [pid 3187298:tid 3187298] (70014)End of file found: [client 216.73.216.199:19238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:08:59.552408 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:59.552431 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:08:59.592481 2026] [lsapi:warn] [pid 3172022:tid 3172022] [client 167.172.175.168:40848] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:08:59.592549 2026] [lsapi:warn] [pid 3172022:tid 3172022] [client 167.172.175.168:40848] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:08:59.964306 2026] [authz_core:error] [pid 3181679:tid 3181679] [client 57.141.0.41:24798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:08:59.964946 2026] [authz_core:error] [pid 3181679:tid 3181679] [client 57.141.0.41:24798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:09:00.646003 2026] [core:error] [pid 3179940:tid 3179940] (13)Permission denied: [client 216.73.216.199:28230] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/hwcache_align
[Thu Jul 30 13:09:00.672502 2026] [ssl:error] [pid 3179933:tid 3179933] (EAI 2)Name or service not known: [client 144.76.19.72:42142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:00.672523 2026] [ssl:error] [pid 3179933:tid 3179933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:00.724313 2026] [ssl:error] [pid 3179936:tid 3179936] (EAI 2)Name or service not known: [client 144.76.19.72:42158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:00.724359 2026] [ssl:error] [pid 3179936:tid 3179936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:01.966051 2026] [core:error] [pid 3179933:tid 3179933] [client 172.213.10.64:10148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:01.966102 2026] [core:error] [pid 3179933:tid 3179933] [client 172.213.10.64:10148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:03.107993 2026] [lsapi:warn] [pid 3175656:tid 3175656] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:03.814987 2026] [ssl:error] [pid 3183270:tid 3183270] (EAI 2)Name or service not known: [client 144.76.19.72:42170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:03.815039 2026] [ssl:error] [pid 3183270:tid 3183270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:03.872644 2026] [ssl:error] [pid 3183388:tid 3183388] (EAI 2)Name or service not known: [client 144.76.19.72:42184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:03.872672 2026] [ssl:error] [pid 3183388:tid 3183388] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:04.192177 2026] [security2:error] [pid 3175656:tid 3175656] [client 124.221.140.98:55044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "ams-4H5IZQvQQNe1DzoGGwAAAAg"]
[Thu Jul 30 13:09:04.534733 2026] [authz_core:error] [pid 3187137:tid 3187137] [client 57.141.0.22:62650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:09:04.535383 2026] [authz_core:error] [pid 3187137:tid 3187137] [client 57.141.0.22:62650] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:09:05.036610 2026] [ssl:error] [pid 3179345:tid 3179345] (70014)End of file found: [client 216.73.216.199:25442] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:05.621740 2026] [authz_core:error] [pid 3183388:tid 3183388] [client 66.249.66.34:41914] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:09:05.624477 2026] [authz_core:error] [pid 3183388:tid 3183388] [client 66.249.66.34:41914] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:09:06.930508 2026] [ssl:error] [pid 3187137:tid 3187137] (EAI 2)Name or service not known: [client 144.76.19.72:42186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:06.930539 2026] [ssl:error] [pid 3187137:tid 3187137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:06.984954 2026] [ssl:error] [pid 3187298:tid 3187298] (EAI 2)Name or service not known: [client 144.76.19.72:42190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:06.984985 2026] [ssl:error] [pid 3187298:tid 3187298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:08.111042 2026] [security2:error] [pid 3183615:tid 3183615] [client 74.7.227.41:60926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "saturnsports.com"] [uri "/"] [unique_id "ams-5Mja7znT4GqNutZ59QAAACE"]
[Thu Jul 30 13:09:08.343751 2026] [lsapi:warn] [pid 3183615:tid 3183615] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:09.070639 2026] [ssl:error] [pid 3186720:tid 3186720] (70014)End of file found: [client 216.73.216.199:32461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:09.080840 2026] [authz_core:error] [pid 3183615:tid 3183615] [client 57.141.0.9:47502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:09:09.081507 2026] [authz_core:error] [pid 3183615:tid 3183615] [client 57.141.0.9:47502] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:09:09.935292 2026] [core:error] [pid 3179940:tid 3179940] [client 172.213.10.64:10189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:09.935326 2026] [core:error] [pid 3179940:tid 3179940] [client 172.213.10.64:10189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:10.039367 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:62126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:10.039391 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:10.096469 2026] [ssl:error] [pid 3173630:tid 3173630] (EAI 2)Name or service not known: [client 144.76.19.72:62138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:10.096510 2026] [ssl:error] [pid 3173630:tid 3173630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:10.297664 2026] [security2:error] [pid 3179345:tid 3179345] [client 144.124.199.158:24543] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-5tuqda5ubYWtbZhLewAAABs"]
[Thu Jul 30 13:09:10.297715 2026] [security2:error] [pid 3179345:tid 3179345] [client 144.124.199.158:24543] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-5tuqda5ubYWtbZhLewAAABs"]
[Thu Jul 30 13:09:10.297960 2026] [security2:error] [pid 3179345:tid 3179345] [client 144.124.199.158:24543] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams-5tuqda5ubYWtbZhLewAAABs"]
[Thu Jul 30 13:09:11.487003 2026] [ssl:error] [pid 3187190:tid 3187190] (70014)End of file found: [client 216.73.216.199:63541] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:11.832044 2026] [core:error] [pid 3181349:tid 3181349] [client 66.249.66.169:49451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:11.832081 2026] [core:error] [pid 3181349:tid 3181349] [client 66.249.66.169:49451] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:11.841276 2026] [core:error] [pid 3189427:tid 3189427] [client 66.249.66.167:56336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:11.841294 2026] [core:error] [pid 3189427:tid 3189427] [client 66.249.66.167:56336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:12.603041 2026] [core:error] [pid 3177582:tid 3177582] [client 57.141.0.30:65500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:12.603085 2026] [core:error] [pid 3177582:tid 3177582] [client 57.141.0.30:65500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:12.998135 2026] [ssl:error] [pid 3171425:tid 3171425] (70014)End of file found: [client 216.73.216.199:22475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:13.154993 2026] [ssl:error] [pid 3187137:tid 3187137] (EAI 2)Name or service not known: [client 144.76.19.72:62142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:13.155026 2026] [ssl:error] [pid 3187137:tid 3187137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:13.212776 2026] [ssl:error] [pid 3188776:tid 3188776] (EAI 2)Name or service not known: [client 144.76.19.72:62154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:13.212819 2026] [ssl:error] [pid 3188776:tid 3188776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:13.612707 2026] [lsapi:warn] [pid 3181679:tid 3181679] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:14.495876 2026] [authz_core:error] [pid 3177729:tid 3177729] [client 138.91.30.49:12069] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:09:14.498597 2026] [authz_core:error] [pid 3177729:tid 3177729] [client 138.91.30.49:12069] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:09:15.045134 2026] [security2:error] [pid 3175656:tid 3175656] [client 114.119.146.111:26651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~19,104,102/request_format~html"] [unique_id "ams-635IZQvQQNe1DzoGHwAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~19,104/request_format~html
[Thu Jul 30 13:09:16.060650 2026] [security2:error] [pid 3183388:tid 3183388] [client 114.119.146.111:26657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~19,104,102/request_format~html"] [unique_id "ams-7BJPU3bbWfkp8AOUXwAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~19,104/request_format~html
[Thu Jul 30 13:09:16.242336 2026] [authz_core:error] [pid 3179345:tid 3179345] [client 57.141.0.70:33116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:09:16.242975 2026] [authz_core:error] [pid 3179345:tid 3179345] [client 57.141.0.70:33116] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:09:16.271754 2026] [ssl:error] [pid 3189203:tid 3189203] (EAI 2)Name or service not known: [client 144.76.19.72:62164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:16.271789 2026] [ssl:error] [pid 3189203:tid 3189203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:16.326588 2026] [ssl:error] [pid 3187298:tid 3187298] (EAI 2)Name or service not known: [client 144.76.19.72:62180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:16.326630 2026] [ssl:error] [pid 3187298:tid 3187298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:17.213388 2026] [security2:error] [pid 3174755:tid 3174755] [client 216.73.216.199:2184] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/nftables.conf"] [unique_id "ams-7ZoM_0qZA1Bm7WwN7gAAAA0"]
[Thu Jul 30 13:09:17.213683 2026] [security2:error] [pid 3174755:tid 3174755] [client 216.73.216.199:2184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/nftables.conf"] [unique_id "ams-7ZoM_0qZA1Bm7WwN7gAAAA0"]
[Thu Jul 30 13:09:17.213893 2026] [security2:error] [pid 3174755:tid 3174755] [client 216.73.216.199:2184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/nftables.conf"] [unique_id "ams-7ZoM_0qZA1Bm7WwN7gAAAA0"]
[Thu Jul 30 13:09:18.194315 2026] [security2:error] [pid 3189428:tid 3189428] [client 181.24.144.242:52040] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-7hbuBwAHksAHmXIL8wAAACo"]
[Thu Jul 30 13:09:18.194362 2026] [security2:error] [pid 3189428:tid 3189428] [client 181.24.144.242:52040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams-7hbuBwAHksAHmXIL8wAAACo"]
[Thu Jul 30 13:09:18.194632 2026] [security2:error] [pid 3189428:tid 3189428] [client 181.24.144.242:52040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams-7hbuBwAHksAHmXIL8wAAACo"]
[Thu Jul 30 13:09:18.623259 2026] [authz_core:error] [pid 3175860:tid 3175860] [client 138.91.30.56:36771] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:09:18.625987 2026] [authz_core:error] [pid 3175860:tid 3175860] [client 138.91.30.56:36771] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:09:18.869283 2026] [lsapi:warn] [pid 3178483:tid 3178483] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:19.029196 2026] [core:error] [pid 3174755:tid 3174755] (13)Permission denied: [client 216.73.216.199:2184] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/filp/slabs
[Thu Jul 30 13:09:19.385089 2026] [ssl:error] [pid 3171425:tid 3171425] (EAI 2)Name or service not known: [client 144.76.19.72:62182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:19.385122 2026] [ssl:error] [pid 3171425:tid 3171425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:19.459640 2026] [ssl:error] [pid 3189425:tid 3189425] (EAI 2)Name or service not known: [client 144.76.19.72:62192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:19.459672 2026] [ssl:error] [pid 3189425:tid 3189425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:22.120308 2026] [core:error] [pid 3177729:tid 3177729] [client 57.141.0.56:25110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:22.120336 2026] [core:error] [pid 3177729:tid 3177729] [client 57.141.0.56:25110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:22.532099 2026] [ssl:error] [pid 3179899:tid 3179899] (EAI 2)Name or service not known: [client 144.76.19.72:20484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:22.532135 2026] [ssl:error] [pid 3179899:tid 3179899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:22.585323 2026] [ssl:error] [pid 3186720:tid 3186720] (EAI 2)Name or service not known: [client 144.76.19.72:20496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:22.585382 2026] [ssl:error] [pid 3186720:tid 3186720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:24.058098 2026] [core:error] [pid 3179937:tid 3179937] [client 66.249.66.39:51689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:24.058133 2026] [core:error] [pid 3179937:tid 3179937] [client 66.249.66.39:51689] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:24.091040 2026] [lsapi:warn] [pid 3187189:tid 3187189] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:24.155573 2026] [ssl:error] [pid 3186720:tid 3186720] (70014)End of file found: [client 216.73.216.199:18763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:24.812153 2026] [lsapi:error] [pid 3189377:tid 3189377] [client 191.232.199.39:35053] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 20480 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-fatal-error-handler.php on line 67\n
[Thu Jul 30 13:09:25.654531 2026] [ssl:error] [pid 3183750:tid 3183750] (EAI 2)Name or service not known: [client 144.76.19.72:20506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:25.654563 2026] [ssl:error] [pid 3183750:tid 3183750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:25.710634 2026] [ssl:error] [pid 3177729:tid 3177729] (EAI 2)Name or service not known: [client 144.76.19.72:20514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:25.710673 2026] [ssl:error] [pid 3177729:tid 3177729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:26.855107 2026] [authz_core:error] [pid 3175860:tid 3175860] [client 191.232.199.39:35021] AH01630: client denied by server configuration: /home/mjsser/demo.mjs-services.com/wp-admin/includes/error_log
[Thu Jul 30 13:09:27.171726 2026] [ssl:error] [pid 3174755:tid 3174755] (70014)End of file found: [client 216.73.216.199:2184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:28.316906 2026] [authz_core:error] [pid 3179293:tid 3179293] [client 66.249.66.33:64715] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:09:28.319620 2026] [authz_core:error] [pid 3179293:tid 3179293] [client 66.249.66.33:64715] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:09:28.375015 2026] [core:error] [pid 3183465:tid 3183465] (13)Permission denied: [client 216.73.216.199:8738] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ftrace_event_field/partial
[Thu Jul 30 13:09:28.675721 2026] [core:error] [pid 3183465:tid 3183465] (13)Permission denied: [client 216.73.216.199:8738] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory105/subsystem/uevent
[Thu Jul 30 13:09:28.765458 2026] [ssl:error] [pid 3188776:tid 3188776] (EAI 2)Name or service not known: [client 144.76.19.72:20528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:28.765499 2026] [ssl:error] [pid 3188776:tid 3188776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:28.820381 2026] [ssl:error] [pid 3171425:tid 3171425] (EAI 2)Name or service not known: [client 144.76.19.72:20532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:28.820425 2026] [ssl:error] [pid 3171425:tid 3171425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:29.371264 2026] [lsapi:warn] [pid 3165118:tid 3165118] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:31.746992 2026] [core:error] [pid 3184824:tid 3184824] [client 172.213.10.64:10119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:31.747027 2026] [core:error] [pid 3184824:tid 3184824] [client 172.213.10.64:10119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:31.931466 2026] [ssl:error] [pid 3189426:tid 3189426] (EAI 2)Name or service not known: [client 144.76.19.72:54862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:31.931511 2026] [ssl:error] [pid 3189426:tid 3189426] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:31.987840 2026] [ssl:error] [pid 3189426:tid 3189426] (EAI 2)Name or service not known: [client 144.76.19.72:54878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:31.987859 2026] [ssl:error] [pid 3189426:tid 3189426] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:34.520721 2026] [ssl:error] [pid 3174756:tid 3174756] (EAI 2)Name or service not known: [client 34.96.62.179:16975] AH01972: could not resolve address of OCSP responder r3.o.lencr.org
[Thu Jul 30 13:09:34.520776 2026] [ssl:error] [pid 3174756:tid 3174756] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:34.564371 2026] [lsapi:warn] [pid 3183615:tid 3183615] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:35.046246 2026] [ssl:error] [pid 3190541:tid 3190541] (EAI 2)Name or service not known: [client 144.76.19.72:54888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:35.046285 2026] [ssl:error] [pid 3190541:tid 3190541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:35.101520 2026] [ssl:error] [pid 3179293:tid 3179293] (EAI 2)Name or service not known: [client 144.76.19.72:54892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:35.101542 2026] [ssl:error] [pid 3179293:tid 3179293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:36.569554 2026] [core:error] [pid 3190495:tid 3190495] [client 66.249.66.167:60538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:36.569578 2026] [core:error] [pid 3190495:tid 3190495] [client 66.249.66.167:60538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:36.673754 2026] [ssl:error] [pid 3183750:tid 3183750] (70014)End of file found: [client 216.73.216.199:3461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:36.689974 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 66.249.66.33:39815] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:09:36.692626 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 66.249.66.33:39815] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:09:38.154838 2026] [ssl:error] [pid 3190536:tid 3190536] (EAI 2)Name or service not known: [client 144.76.19.72:54906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:38.154870 2026] [ssl:error] [pid 3190536:tid 3190536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:38.209654 2026] [ssl:error] [pid 3190437:tid 3190437] (EAI 2)Name or service not known: [client 144.76.19.72:54922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:38.209691 2026] [ssl:error] [pid 3190437:tid 3190437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:38.683240 2026] [ssl:error] [pid 3183465:tid 3183465] (70014)End of file found: [client 216.73.216.199:8738] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:39.704810 2026] [core:error] [pid 3189203:tid 3189203] (13)Permission denied: [client 216.73.216.199:20614] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 13:09:39.856575 2026] [lsapi:warn] [pid 3190541:tid 3190541] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:41.262002 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:42848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:41.262028 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:41.317457 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:42864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:41.317482 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:41.719266 2026] [security2:error] [pid 3183270:tid 3183270] [client 185.191.171.11:11466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/joseph-castellano-tampa-wife"] [unique_id "ams_BTpATU3CGmueFqgq0AAAABU"]
[Thu Jul 30 13:09:43.326237 2026] [ssl:error] [pid 3189203:tid 3189203] (70014)End of file found: [client 216.73.216.199:20614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:44.376006 2026] [ssl:error] [pid 3190437:tid 3190437] (EAI 2)Name or service not known: [client 144.76.19.72:42866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:44.376057 2026] [ssl:error] [pid 3190437:tid 3190437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:44.430473 2026] [ssl:error] [pid 3190534:tid 3190534] (EAI 2)Name or service not known: [client 144.76.19.72:42882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:44.430511 2026] [ssl:error] [pid 3190534:tid 3190534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:45.029440 2026] [lsapi:warn] [pid 3189427:tid 3189427] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:45.272217 2026] [authz_core:error] [pid 3186720:tid 3186720] [client 57.141.0.9:25706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:09:45.272844 2026] [authz_core:error] [pid 3186720:tid 3186720] [client 57.141.0.9:25706] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:09:45.446466 2026] [ssl:error] [pid 3178483:tid 3178483] (70014)End of file found: [client 216.73.216.199:34053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:46.428547 2026] [core:error] [pid 3186720:tid 3186720] [client 172.213.10.64:10011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:46.428587 2026] [core:error] [pid 3186720:tid 3186720] [client 172.213.10.64:10011] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:46.972636 2026] [authz_core:error] [pid 3158357:tid 3158357] [client 66.249.66.33:38031] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:09:46.975293 2026] [authz_core:error] [pid 3158357:tid 3158357] [client 66.249.66.33:38031] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:09:47.488375 2026] [ssl:error] [pid 3179937:tid 3179937] (EAI 2)Name or service not known: [client 144.76.19.72:42896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:47.488406 2026] [ssl:error] [pid 3179937:tid 3179937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:47.544401 2026] [ssl:error] [pid 3190436:tid 3190436] (EAI 2)Name or service not known: [client 144.76.19.72:42910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:47.544443 2026] [ssl:error] [pid 3190436:tid 3190436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:48.169975 2026] [ssl:error] [pid 3189377:tid 3189377] (70014)End of file found: [client 216.73.216.199:31277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:48.657466 2026] [ssl:error] [pid 3175860:tid 3175860] (70014)End of file found: [client 216.73.216.199:53078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:49.222705 2026] [core:error] [pid 3190537:tid 3190537] [client 66.249.66.3:52339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:49.222733 2026] [core:error] [pid 3190537:tid 3190537] [client 66.249.66.3:52339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:50.309407 2026] [core:error] [pid 3187190:tid 3187190] [client 172.213.10.64:10194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:50.309438 2026] [core:error] [pid 3187190:tid 3187190] [client 172.213.10.64:10194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:50.324205 2026] [lsapi:warn] [pid 3190537:tid 3190537] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:50.626527 2026] [ssl:error] [pid 3190437:tid 3190437] (EAI 2)Name or service not known: [client 144.76.19.72:18548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:50.626567 2026] [ssl:error] [pid 3190437:tid 3190437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:50.682751 2026] [ssl:error] [pid 3187137:tid 3187137] (EAI 2)Name or service not known: [client 144.76.19.72:18556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:50.682792 2026] [ssl:error] [pid 3187137:tid 3187137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:51.186536 2026] [ssl:error] [pid 3187189:tid 3187189] (70014)End of file found: [client 216.73.216.199:13397] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:53.737301 2026] [ssl:error] [pid 3190540:tid 3190540] (EAI 2)Name or service not known: [client 144.76.19.72:18562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:53.737339 2026] [ssl:error] [pid 3190540:tid 3190540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:53.793456 2026] [ssl:error] [pid 3183270:tid 3183270] (EAI 2)Name or service not known: [client 144.76.19.72:18570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:53.793499 2026] [ssl:error] [pid 3183270:tid 3183270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:54.221817 2026] [ssl:error] [pid 3171878:tid 3171878] (70014)End of file found: [client 216.73.216.199:40460] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:55.522307 2026] [lsapi:warn] [pid 3189426:tid 3189426] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:09:55.721391 2026] [ssl:error] [pid 3178483:tid 3178483] (70014)End of file found: [client 216.73.216.199:16928] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:09:56.891458 2026] [ssl:error] [pid 3190541:tid 3190541] (EAI 2)Name or service not known: [client 144.76.19.72:18576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:56.891494 2026] [ssl:error] [pid 3190541:tid 3190541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:56.944476 2026] [ssl:error] [pid 3190401:tid 3190401] (EAI 2)Name or service not known: [client 144.76.19.72:18584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:09:56.944518 2026] [ssl:error] [pid 3190401:tid 3190401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:09:57.704409 2026] [core:error] [pid 3179937:tid 3179937] [client 172.213.10.64:10049] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:57.704440 2026] [core:error] [pid 3179937:tid 3179937] [client 172.213.10.64:10049] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:57.732634 2026] [core:error] [pid 3191652:tid 3191652] [client 66.249.66.66:38912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:57.732673 2026] [core:error] [pid 3191652:tid 3191652] [client 66.249.66.66:38912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:09:57.841876 2026] [authz_core:error] [pid 3179937:tid 3179937] [client 66.249.66.33:37717] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:09:57.845209 2026] [authz_core:error] [pid 3179937:tid 3179937] [client 66.249.66.33:37717] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:10:00.056225 2026] [ssl:error] [pid 3190539:tid 3190539] (EAI 2)Name or service not known: [client 144.76.19.72:58728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:00.056264 2026] [ssl:error] [pid 3190539:tid 3190539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:00.111344 2026] [ssl:error] [pid 3191652:tid 3191652] (EAI 2)Name or service not known: [client 144.76.19.72:58740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:00.111379 2026] [ssl:error] [pid 3191652:tid 3191652] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:00.799164 2026] [lsapi:warn] [pid 3181679:tid 3181679] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:00.878909 2026] [cgi:error] [pid 3181349:tid 3181349] [client 20.9.4.9:26268] AH02812: stderr from /home/orgent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:10:01.011315 2026] [core:error] [pid 3189427:tid 3189427] (13)Permission denied: [client 216.73.216.199:5668] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory255/node0/compact
[Thu Jul 30 13:10:01.148104 2026] [security2:error] [pid 3178483:tid 3178483] [client 85.208.96.202:39742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3253.0.html"] [unique_id "ams_GVUwioqpddrOEw7QfAAAAC4"]
[Thu Jul 30 13:10:01.609678 2026] [core:error] [pid 3158357:tid 3158357] (13)Permission denied: [client 216.73.216.199:61627] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory75/node0/compact
[Thu Jul 30 13:10:01.760115 2026] [cgi:error] [pid 3189376:tid 3189376] [client 20.9.4.9:26327] AH02812: stderr from /home/orgent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:10:01.914560 2026] [core:error] [pid 3191652:tid 3191652] [client 66.249.66.167:54631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:01.914587 2026] [core:error] [pid 3191652:tid 3191652] [client 66.249.66.167:54631] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:02.814499 2026] [ssl:error] [pid 3189427:tid 3189427] (70014)End of file found: [client 216.73.216.199:5668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:02.982888 2026] [core:error] [pid 3174653:tid 3174653] [client 172.213.10.64:10154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:02.982912 2026] [core:error] [pid 3174653:tid 3174653] [client 172.213.10.64:10154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:03.168606 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:58750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:03.168634 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:03.224746 2026] [ssl:error] [pid 3183270:tid 3183270] (EAI 2)Name or service not known: [client 144.76.19.72:58752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:03.224780 2026] [ssl:error] [pid 3183270:tid 3183270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:03.719348 2026] [ssl:error] [pid 3158357:tid 3158357] (70014)End of file found: [client 216.73.216.199:61627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:03.832925 2026] [security2:error] [pid 3190495:tid 3190495] [client 80.94.92.67:39940] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "baketastic.co.uk"] [uri "/.svn/wc.db"] [unique_id "ams_G0mN14vAI1VPTJO7hgAAAB4"]
[Thu Jul 30 13:10:03.833092 2026] [security2:error] [pid 3190495:tid 3190495] [client 80.94.92.67:39940] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "baketastic.co.uk"] [uri "/.svn/wc.db"] [unique_id "ams_G0mN14vAI1VPTJO7hgAAAB4"]
[Thu Jul 30 13:10:03.833266 2026] [security2:error] [pid 3190495:tid 3190495] [client 80.94.92.67:39940] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "baketastic.co.uk"] [uri "/.svn/wc.db"] [unique_id "ams_G0mN14vAI1VPTJO7hgAAAB4"]
[Thu Jul 30 13:10:04.631560 2026] [ssl:error] [pid 3183750:tid 3183750] (70014)End of file found: [client 216.73.216.199:10933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:05.064053 2026] [security2:error] [pid 3191960:tid 3191960] [client 43.167.172.179:46461] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_HbaQqp-Q3105kECLygAAABM"]
[Thu Jul 30 13:10:05.064116 2026] [security2:error] [pid 3191960:tid 3191960] [client 43.167.172.179:46461] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_HbaQqp-Q3105kECLygAAABM"]
[Thu Jul 30 13:10:05.064418 2026] [security2:error] [pid 3191960:tid 3191960] [client 43.167.172.179:46461] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_HbaQqp-Q3105kECLygAAABM"]
[Thu Jul 30 13:10:05.776918 2026] [security2:error] [pid 3190495:tid 3190495] [client 80.94.92.67:39940] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "baketastic.co.uk"] [uri "/index.php"] [unique_id "ams_G0mN14vAI1VPTJO7hgAAAB4"]
[Thu Jul 30 13:10:06.020748 2026] [lsapi:warn] [pid 3191960:tid 3191960] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:06.278481 2026] [ssl:error] [pid 3179293:tid 3179293] (EAI 2)Name or service not known: [client 144.76.19.72:58768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:06.278519 2026] [ssl:error] [pid 3179293:tid 3179293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:06.304976 2026] [security2:error] [pid 3190537:tid 3190537] [client 91.187.124.16:53912] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_HrlLB7ZKCwJeZNFpkwAAADA"]
[Thu Jul 30 13:10:06.305021 2026] [security2:error] [pid 3190537:tid 3190537] [client 91.187.124.16:53912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_HrlLB7ZKCwJeZNFpkwAAADA"]
[Thu Jul 30 13:10:06.305285 2026] [security2:error] [pid 3190537:tid 3190537] [client 91.187.124.16:53912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_HrlLB7ZKCwJeZNFpkwAAADA"]
[Thu Jul 30 13:10:06.331458 2026] [ssl:error] [pid 3181679:tid 3181679] (EAI 2)Name or service not known: [client 144.76.19.72:58782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:06.331504 2026] [ssl:error] [pid 3181679:tid 3181679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:07.261220 2026] [core:error] [pid 3179293:tid 3179293] [client 172.213.10.64:10054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:07.261246 2026] [core:error] [pid 3179293:tid 3179293] [client 172.213.10.64:10054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:07.966130 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/.env"] [unique_id "ams_H445SCIMcfzE_KZuCQAAACs"]
[Thu Jul 30 13:10:07.966266 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/.env"] [unique_id "ams_H445SCIMcfzE_KZuCQAAACs"]
[Thu Jul 30 13:10:07.966692 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_H445SCIMcfzE_KZuCQAAACs"]
[Thu Jul 30 13:10:08.108689 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/.env.production"] [unique_id "ams_II45SCIMcfzE_KZuCgAAACs"]
[Thu Jul 30 13:10:08.108827 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/.env.production"] [unique_id "ams_II45SCIMcfzE_KZuCgAAACs"]
[Thu Jul 30 13:10:08.109236 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_II45SCIMcfzE_KZuCgAAACs"]
[Thu Jul 30 13:10:08.460843 2026] [core:error] [pid 3179899:tid 3179899] [client 172.213.10.64:10215] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:08.460867 2026] [core:error] [pid 3179899:tid 3179899] [client 172.213.10.64:10215] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:08.486386 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/application/.env"] [unique_id "ams_II45SCIMcfzE_KZuCwAAACs"]
[Thu Jul 30 13:10:08.486473 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/application/.env"] [unique_id "ams_II45SCIMcfzE_KZuCwAAACs"]
[Thu Jul 30 13:10:08.486976 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_II45SCIMcfzE_KZuCwAAACs"]
[Thu Jul 30 13:10:08.502426 2026] [security2:error] [pid 3189427:tid 3189427] [client 177.230.137.115:11434] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_IPFARQoG12P75vqpNQAAACk"]
[Thu Jul 30 13:10:08.502477 2026] [security2:error] [pid 3189427:tid 3189427] [client 177.230.137.115:11434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_IPFARQoG12P75vqpNQAAACk"]
[Thu Jul 30 13:10:08.502731 2026] [security2:error] [pid 3189427:tid 3189427] [client 177.230.137.115:11434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_IPFARQoG12P75vqpNQAAACk"]
[Thu Jul 30 13:10:08.818764 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/prod/.env"] [unique_id "ams_II45SCIMcfzE_KZuDAAAACs"]
[Thu Jul 30 13:10:08.818881 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/prod/.env"] [unique_id "ams_II45SCIMcfzE_KZuDAAAACs"]
[Thu Jul 30 13:10:08.819285 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_II45SCIMcfzE_KZuDAAAACs"]
[Thu Jul 30 13:10:08.967874 2026] [core:error] [pid 3179937:tid 3179937] (13)Permission denied: [client 216.73.216.199:45502] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory87/node0/compact
[Thu Jul 30 13:10:09.155555 2026] [ssl:error] [pid 3179937:tid 3179937] (70014)End of file found: [client 216.73.216.199:45502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:09.211857 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/.env.save"] [unique_id "ams_IY45SCIMcfzE_KZuDQAAACs"]
[Thu Jul 30 13:10:09.212000 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/.env.save"] [unique_id "ams_IY45SCIMcfzE_KZuDQAAACs"]
[Thu Jul 30 13:10:09.212399 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_IY45SCIMcfzE_KZuDQAAACs"]
[Thu Jul 30 13:10:09.390061 2026] [ssl:error] [pid 3178866:tid 3178866] (EAI 2)Name or service not known: [client 144.76.19.72:58794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:09.390106 2026] [ssl:error] [pid 3178866:tid 3178866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:09.445164 2026] [ssl:error] [pid 3179899:tid 3179899] (EAI 2)Name or service not known: [client 144.76.19.72:58800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:09.445194 2026] [ssl:error] [pid 3179899:tid 3179899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:09.455020 2026] [core:error] [pid 3190401:tid 3190401] (13)Permission denied: [client 216.73.216.199:31980] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/partial
[Thu Jul 30 13:10:09.524662 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/beta/.env"] [unique_id "ams_IY45SCIMcfzE_KZuDgAAACs"]
[Thu Jul 30 13:10:09.524768 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/beta/.env"] [unique_id "ams_IY45SCIMcfzE_KZuDgAAACs"]
[Thu Jul 30 13:10:09.525151 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_IY45SCIMcfzE_KZuDgAAACs"]
[Thu Jul 30 13:10:09.757248 2026] [ssl:error] [pid 3190401:tid 3190401] (70014)End of file found: [client 216.73.216.199:31980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:09.820360 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:09.820386 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:10.108779 2026] [security2:error] [pid 3190437:tid 3190437] [client 85.208.96.198:64356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9431.0/prev_next,prev.html"] [unique_id "ams_InD-Acb4sxRWzgAH9QAAABE"]
[Thu Jul 30 13:10:10.254171 2026] [ssl:error] [pid 3178866:tid 3178866] (70014)End of file found: [client 216.73.216.199:49713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:10.558029 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/admin/.env"] [unique_id "ams_Io45SCIMcfzE_KZuDwAAACs"]
[Thu Jul 30 13:10:10.558139 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/admin/.env"] [unique_id "ams_Io45SCIMcfzE_KZuDwAAACs"]
[Thu Jul 30 13:10:10.558516 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_Io45SCIMcfzE_KZuDwAAACs"]
[Thu Jul 30 13:10:10.613405 2026] [core:error] [pid 3183750:tid 3183750] [client 172.213.10.64:10236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:10.613445 2026] [core:error] [pid 3183750:tid 3183750] [client 172.213.10.64:10236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:11.278626 2026] [lsapi:warn] [pid 3189377:tid 3189377] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:11.671999 2026] [security2:error] [pid 3190541:tid 3190541] [client 158.158.34.91:6082] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "itsupportinayrshire.webstersltd.com"] [uri "/wp-config.php"] [unique_id "ams_I90h_SiXiFClYCUF1QAAADc"]
[Thu Jul 30 13:10:11.672147 2026] [security2:error] [pid 3190541:tid 3190541] [client 158.158.34.91:6082] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "itsupportinayrshire.webstersltd.com"] [uri "/wp-config.php"] [unique_id "ams_I90h_SiXiFClYCUF1QAAADc"]
[Thu Jul 30 13:10:11.672308 2026] [security2:error] [pid 3190541:tid 3190541] [client 158.158.34.91:6082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "itsupportinayrshire.webstersltd.com"] [uri "/403.shtml"] [unique_id "ams_I90h_SiXiFClYCUF1QAAADc"]
[Thu Jul 30 13:10:11.954122 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/app/.env"] [unique_id "ams_I445SCIMcfzE_KZuEAAAACs"]
[Thu Jul 30 13:10:11.954253 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/app/.env"] [unique_id "ams_I445SCIMcfzE_KZuEAAAACs"]
[Thu Jul 30 13:10:11.954682 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_I445SCIMcfzE_KZuEAAAACs"]
[Thu Jul 30 13:10:12.212796 2026] [core:error] [pid 3190541:tid 3190541] [client 172.213.10.64:10137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:12.212823 2026] [core:error] [pid 3190541:tid 3190541] [client 172.213.10.64:10137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:12.243772 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/config/.env"] [unique_id "ams_JI45SCIMcfzE_KZuEQAAACs"]
[Thu Jul 30 13:10:12.243887 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/config/.env"] [unique_id "ams_JI45SCIMcfzE_KZuEQAAACs"]
[Thu Jul 30 13:10:12.244375 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_JI45SCIMcfzE_KZuEQAAACs"]
[Thu Jul 30 13:10:12.508792 2026] [ssl:error] [pid 3187190:tid 3187190] (EAI 2)Name or service not known: [client 144.76.19.72:65172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:12.508821 2026] [ssl:error] [pid 3187190:tid 3187190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:12.559008 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/api/.env"] [unique_id "ams_JI45SCIMcfzE_KZuEgAAACs"]
[Thu Jul 30 13:10:12.559149 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/api/.env"] [unique_id "ams_JI45SCIMcfzE_KZuEgAAACs"]
[Thu Jul 30 13:10:12.559524 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_JI45SCIMcfzE_KZuEgAAACs"]
[Thu Jul 30 13:10:12.564826 2026] [ssl:error] [pid 3183270:tid 3183270] (EAI 2)Name or service not known: [client 144.76.19.72:65182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:12.564848 2026] [ssl:error] [pid 3183270:tid 3183270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:13.021427 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "magic-cookie.co.uk"] [uri "/laravel/.env"] [unique_id "ams_JY45SCIMcfzE_KZuEwAAACs"]
[Thu Jul 30 13:10:13.021569 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/laravel/.env"] [unique_id "ams_JY45SCIMcfzE_KZuEwAAACs"]
[Thu Jul 30 13:10:13.021970 2026] [security2:error] [pid 3190497:tid 3190497] [client 161.153.121.253:55318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "ams_JY45SCIMcfzE_KZuEwAAACs"]
[Thu Jul 30 13:10:14.545057 2026] [core:error] [pid 3189377:tid 3189377] [client 172.213.10.64:10170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:14.545111 2026] [core:error] [pid 3189377:tid 3189377] [client 172.213.10.64:10170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:14.900540 2026] [ssl:error] [pid 3190541:tid 3190541] (70014)End of file found: [client 216.73.216.199:56191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:15.095449 2026] [core:error] [pid 3189377:tid 3189377] [client 66.249.64.170:64002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:15.095472 2026] [core:error] [pid 3189377:tid 3189377] [client 66.249.64.170:64002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:15.617121 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:65196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:15.617149 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:15.673044 2026] [ssl:error] [pid 3178866:tid 3178866] (EAI 2)Name or service not known: [client 144.76.19.72:65210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:15.673086 2026] [ssl:error] [pid 3178866:tid 3178866] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:15.795529 2026] [core:error] [pid 3189427:tid 3189427] [client 66.249.66.168:42069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:15.795555 2026] [core:error] [pid 3189427:tid 3189427] [client 66.249.66.168:42069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:15.797129 2026] [core:error] [pid 3178483:tid 3178483] [client 66.249.66.168:49421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:15.797147 2026] [core:error] [pid 3178483:tid 3178483] [client 66.249.66.168:49421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:16.406248 2026] [ssl:error] [pid 3179293:tid 3179293] (70014)End of file found: [client 216.73.216.199:35044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:16.526723 2026] [lsapi:warn] [pid 3190401:tid 3190401] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:16.696358 2026] [core:error] [pid 3158357:tid 3158357] [client 172.213.10.64:10153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:16.696384 2026] [core:error] [pid 3158357:tid 3158357] [client 172.213.10.64:10153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:17.318592 2026] [ssl:error] [pid 3183750:tid 3183750] (70014)End of file found: [client 216.73.216.199:31919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:18.730809 2026] [ssl:error] [pid 3175860:tid 3175860] (EAI 2)Name or service not known: [client 144.76.19.72:65224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:18.730838 2026] [ssl:error] [pid 3175860:tid 3175860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:18.815315 2026] [ssl:error] [pid 3190437:tid 3190437] (EAI 2)Name or service not known: [client 144.76.19.72:65240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:18.815344 2026] [ssl:error] [pid 3190437:tid 3190437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:18.883882 2026] [core:error] [pid 3192791:tid 3192791] [client 172.213.10.64:10193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:18.883907 2026] [core:error] [pid 3192791:tid 3192791] [client 172.213.10.64:10193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:20.637468 2026] [ssl:error] [pid 3190541:tid 3190541] (70014)End of file found: [client 216.73.216.199:13700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:20.724642 2026] [core:error] [pid 3190540:tid 3190540] [client 172.213.10.64:10198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:20.724668 2026] [core:error] [pid 3190540:tid 3190540] [client 172.213.10.64:10198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:20.875155 2026] [security2:error] [pid 3187137:tid 3187137] [client 43.133.253.253:55850] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "ams_LEo5dSxFgDwT4CxleQAAAAo"]
[Thu Jul 30 13:10:21.726180 2026] [core:error] [pid 3188776:tid 3188776] (13)Permission denied: [client 216.73.216.199:60259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/hid_magicmouse/drivers/hid:magicmouse/bind
[Thu Jul 30 13:10:21.758304 2026] [lsapi:warn] [pid 3187137:tid 3187137] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:21.887264 2026] [ssl:error] [pid 3173382:tid 3173382] (EAI 2)Name or service not known: [client 144.76.19.72:37614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:21.887308 2026] [ssl:error] [pid 3173382:tid 3173382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:21.941511 2026] [ssl:error] [pid 3173382:tid 3173382] (EAI 2)Name or service not known: [client 144.76.19.72:37630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:21.941539 2026] [ssl:error] [pid 3173382:tid 3173382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:22.886412 2026] [security2:error] [pid 3190437:tid 3190437] [client 43.133.253.253:44062] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "ams_LnD-Acb4sxRWzgAH_gAAABE"], referer: http://glottalstop.co.uk
[Thu Jul 30 13:10:23.050626 2026] [ssl:error] [pid 3179933:tid 3179933] (70014)End of file found: [client 216.73.216.199:1722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:23.650455 2026] [core:error] [pid 3188776:tid 3188776] (13)Permission denied: [client 216.73.216.199:60259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/cache_dma
[Thu Jul 30 13:10:23.956492 2026] [core:error] [pid 3188776:tid 3188776] (13)Permission denied: [client 216.73.216.199:60259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/objects_partial
[Thu Jul 30 13:10:24.822994 2026] [core:error] [pid 3189427:tid 3189427] [client 172.213.10.64:10159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:24.823018 2026] [core:error] [pid 3189427:tid 3189427] [client 172.213.10.64:10159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:24.851332 2026] [core:error] [pid 3188776:tid 3188776] (13)Permission denied: [client 216.73.216.199:60259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_tasks/objects
[Thu Jul 30 13:10:24.993597 2026] [ssl:error] [pid 3181802:tid 3181802] (EAI 2)Name or service not known: [client 144.76.19.72:37636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:24.993624 2026] [ssl:error] [pid 3181802:tid 3181802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:25.048155 2026] [ssl:error] [pid 3189427:tid 3189427] (EAI 2)Name or service not known: [client 144.76.19.72:37638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:25.048197 2026] [ssl:error] [pid 3189427:tid 3189427] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:26.050351 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 57.141.0.28:61004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:10:26.050989 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 57.141.0.28:61004] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:10:26.858982 2026] [authz_core:error] [pid 3181349:tid 3181349] [client 20.9.4.9:26268] AH01630: client denied by server configuration: /home/orgent/public_html/php.ini
[Thu Jul 30 13:10:26.988538 2026] [lsapi:warn] [pid 3174653:tid 3174653] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:27.279985 2026] [core:error] [pid 3192733:tid 3192733] [client 66.249.66.167:43829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:27.280010 2026] [core:error] [pid 3192733:tid 3192733] [client 66.249.66.167:43829] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:27.340480 2026] [authz_core:error] [pid 3189376:tid 3189376] [client 20.9.4.9:26327] AH01630: client denied by server configuration: /home/orgent/public_html/php.ini
[Thu Jul 30 13:10:28.104576 2026] [ssl:error] [pid 3187137:tid 3187137] (EAI 2)Name or service not known: [client 144.76.19.72:37652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:28.104606 2026] [ssl:error] [pid 3187137:tid 3187137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:28.160132 2026] [ssl:error] [pid 3187137:tid 3187137] (EAI 2)Name or service not known: [client 144.76.19.72:37658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:28.160151 2026] [ssl:error] [pid 3187137:tid 3187137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:28.338936 2026] [core:error] [pid 3187137:tid 3187137] [client 172.213.10.64:10158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:28.338958 2026] [core:error] [pid 3187137:tid 3187137] [client 172.213.10.64:10158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:28.583086 2026] [core:error] [pid 3171878:tid 3171878] (13)Permission denied: [client 216.73.216.199:14195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_group/align
[Thu Jul 30 13:10:28.887887 2026] [ssl:error] [pid 3171878:tid 3171878] (70014)End of file found: [client 216.73.216.199:14195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:29.618766 2026] [ssl:error] [pid 3183750:tid 3183750] (70014)End of file found: [client 216.73.216.199:23148] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:30.037910 2026] [security2:error] [pid 3190928:tid 3190928] [client 170.106.143.6:51298] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.quantum.com.mt"] [uri "/"] [unique_id "ams_Nr7JXp_GupR77Kqv1gAAAA0"]
[Thu Jul 30 13:10:30.576885 2026] [core:error] [pid 3193236:tid 3193236] (13)Permission denied: [client 216.73.216.199:57531] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kvm/sections/__param
[Thu Jul 30 13:10:30.882303 2026] [ssl:error] [pid 3193236:tid 3193236] (70014)End of file found: [client 216.73.216.199:57531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:30.882640 2026] [core:error] [pid 3179937:tid 3179937] [client 172.213.10.64:9997] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:30.882658 2026] [core:error] [pid 3179937:tid 3179937] [client 172.213.10.64:9997] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:31.212435 2026] [ssl:error] [pid 3193726:tid 3193726] (EAI 2)Name or service not known: [client 144.76.19.72:43054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:31.212477 2026] [ssl:error] [pid 3193726:tid 3193726] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:31.245387 2026] [core:error] [pid 3175860:tid 3175860] [client 172.213.10.64:10129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:31.245413 2026] [core:error] [pid 3175860:tid 3175860] [client 172.213.10.64:10129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:31.264650 2026] [ssl:error] [pid 3190539:tid 3190539] (EAI 2)Name or service not known: [client 144.76.19.72:43058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:31.264678 2026] [ssl:error] [pid 3190539:tid 3190539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:31.402199 2026] [core:error] [pid 3193725:tid 3193725] [client 172.213.10.64:10145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:31.402241 2026] [core:error] [pid 3193725:tid 3193725] [client 172.213.10.64:10145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:31.843653 2026] [security2:error] [pid 3189427:tid 3189427] [client 158.158.34.91:6142] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "itsupportinayrshire.webstersltd.com"] [uri "/var/log/error.log"] [unique_id "ams_N_FARQoG12P75vqpdQAAACk"]
[Thu Jul 30 13:10:31.843801 2026] [security2:error] [pid 3189427:tid 3189427] [client 158.158.34.91:6142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "itsupportinayrshire.webstersltd.com"] [uri "/var/log/error.log"] [unique_id "ams_N_FARQoG12P75vqpdQAAACk"]
[Thu Jul 30 13:10:31.843975 2026] [security2:error] [pid 3189427:tid 3189427] [client 158.158.34.91:6142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "itsupportinayrshire.webstersltd.com"] [uri "/403.shtml"] [unique_id "ams_N_FARQoG12P75vqpdQAAACk"]
[Thu Jul 30 13:10:31.857133 2026] [authz_core:error] [pid 3193726:tid 3193726] [client 191.232.199.39:44692] AH01630: client denied by server configuration: /home/mjsser/demo.mjs-services.com/wp-includes/ID3/error_log
[Thu Jul 30 13:10:32.226883 2026] [lsapi:warn] [pid 3190540:tid 3190540] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:32.532472 2026] [core:error] [pid 3189377:tid 3189377] [client 172.213.10.64:10195] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:32.532513 2026] [core:error] [pid 3189377:tid 3189377] [client 172.213.10.64:10195] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:34.317564 2026] [ssl:error] [pid 3191712:tid 3191712] (EAI 2)Name or service not known: [client 144.76.19.72:43062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:34.317599 2026] [ssl:error] [pid 3191712:tid 3191712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:34.370816 2026] [ssl:error] [pid 3190539:tid 3190539] (EAI 2)Name or service not known: [client 144.76.19.72:43068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:34.370849 2026] [ssl:error] [pid 3190539:tid 3190539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:34.958580 2026] [authz_core:error] [pid 3190495:tid 3190495] [client 57.141.0.46:43982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:10:34.959204 2026] [authz_core:error] [pid 3190495:tid 3190495] [client 57.141.0.46:43982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:10:35.505451 2026] [ssl:error] [pid 3187190:tid 3187190] (70014)End of file found: [client 216.73.216.199:2046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:36.028198 2026] [core:error] [pid 3193723:tid 3193723] (13)Permission denied: [client 216.73.216.199:3072] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_ctx/objects
[Thu Jul 30 13:10:36.459093 2026] [ssl:error] [pid 3193723:tid 3193723] (70014)End of file found: [client 216.73.216.199:3072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:36.977170 2026] [core:error] [pid 3181349:tid 3181349] (13)Permission denied: [client 216.73.216.199:3873] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory38/node0/compact
[Thu Jul 30 13:10:37.426343 2026] [ssl:error] [pid 3171878:tid 3171878] (EAI 2)Name or service not known: [client 144.76.19.72:43080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:37.426391 2026] [ssl:error] [pid 3171878:tid 3171878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:37.456296 2026] [lsapi:warn] [pid 3174653:tid 3174653] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:37.479114 2026] [ssl:error] [pid 3190497:tid 3190497] (EAI 2)Name or service not known: [client 144.76.19.72:43096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:37.479149 2026] [ssl:error] [pid 3190497:tid 3190497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:38.296946 2026] [core:error] [pid 3181349:tid 3181349] (13)Permission denied: [client 216.73.216.199:3873] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/slab_common/parameters/usercopy_fallback
[Thu Jul 30 13:10:38.646834 2026] [core:error] [pid 3179293:tid 3179293] [client 172.213.10.64:10231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:38.646863 2026] [core:error] [pid 3179293:tid 3179293] [client 172.213.10.64:10231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:39.206712 2026] [core:error] [pid 3181349:tid 3181349] (13)Permission denied: [client 216.73.216.199:3873] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/cache_dma
[Thu Jul 30 13:10:39.265415 2026] [security2:error] [pid 3178483:tid 3178483] [client 114.119.155.144:21183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~17,15/request_format~html"] [unique_id "ams_P1UwioqpddrOEw7QkgAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E17
[Thu Jul 30 13:10:39.715619 2026] [core:error] [pid 3189376:tid 3189376] [client 57.141.0.47:48798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:39.715654 2026] [core:error] [pid 3189376:tid 3189376] [client 57.141.0.47:48798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:39.954133 2026] [core:error] [pid 3171878:tid 3171878] [client 66.249.66.167:58493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:39.954162 2026] [core:error] [pid 3171878:tid 3171878] [client 66.249.66.167:58493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:40.375155 2026] [security2:error] [pid 3167187:tid 3167187] [client 114.119.155.144:21187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~17,15/request_format~html"] [unique_id "ams_QFIOYBlKOuIdcBy2fwAAADE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E17
[Thu Jul 30 13:10:40.530965 2026] [ssl:error] [pid 3191711:tid 3191711] (EAI 2)Name or service not known: [client 144.76.19.72:40832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:40.530998 2026] [ssl:error] [pid 3191711:tid 3191711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:40.587896 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:40848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:40.587932 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:40.718145 2026] [core:error] [pid 3181349:tid 3181349] (13)Permission denied: [client 216.73.216.199:3873] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_allocation_context/usersize
[Thu Jul 30 13:10:41.014391 2026] [access_compat:error] [pid 3193236:tid 3193236] [client 89.45.53.3:34298] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:10:41.161521 2026] [access_compat:error] [pid 3183615:tid 3183615] [client 2.189.5.218:50442] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:10:41.330199 2026] [core:error] [pid 3181349:tid 3181349] (13)Permission denied: [client 216.73.216.199:3873] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory23/node0/compact
[Thu Jul 30 13:10:41.432797 2026] [access_compat:error] [pid 3187190:tid 3187190] [client 89.45.53.30:60732] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:10:41.502575 2026] [access_compat:error] [pid 3178483:tid 3178483] [client 2.189.5.142:46198] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:10:42.152249 2026] [security2:error] [pid 3183750:tid 3183750] [client 85.208.96.195:40650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/pork-casserole-delia"] [unique_id "ams_QnN9HAqtQyT17zy4QgAAACQ"]
[Thu Jul 30 13:10:42.247247 2026] [ssl:error] [pid 3181349:tid 3181349] (70014)End of file found: [client 216.73.216.199:3873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:42.418125 2026] [core:error] [pid 3190538:tid 3190538] [client 172.213.10.64:10219] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:42.418151 2026] [core:error] [pid 3190538:tid 3190538] [client 172.213.10.64:10219] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:42.694879 2026] [lsapi:warn] [pid 3187190:tid 3187190] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:43.644188 2026] [ssl:error] [pid 3183750:tid 3183750] (EAI 2)Name or service not known: [client 144.76.19.72:40852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:43.644238 2026] [ssl:error] [pid 3183750:tid 3183750] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:43.698958 2026] [ssl:error] [pid 3191712:tid 3191712] (EAI 2)Name or service not known: [client 144.76.19.72:40866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:43.698982 2026] [ssl:error] [pid 3191712:tid 3191712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:44.377728 2026] [ssl:error] [pid 3193723:tid 3193723] (70014)End of file found: [client 216.73.216.199:64929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:44.817803 2026] [core:error] [pid 3183270:tid 3183270] [client 66.249.66.8:36678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:44.817841 2026] [core:error] [pid 3183270:tid 3183270] [client 66.249.66.8:36678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:44.876424 2026] [core:error] [pid 3191711:tid 3191711] (13)Permission denied: [client 216.73.216.199:58632] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory92/node0/compact
[Thu Jul 30 13:10:44.930119 2026] [lsapi:warn] [pid 3190537:tid 3190537] [client 203.175.125.116:62499] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:46.589477 2026] [lsapi:warn] [pid 3190537:tid 3190537] [client 203.175.125.116:62499] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:46.817780 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:40882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:46.817810 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:46.872012 2026] [ssl:error] [pid 3181802:tid 3181802] (EAI 2)Name or service not known: [client 144.76.19.72:40896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:46.872042 2026] [ssl:error] [pid 3181802:tid 3181802] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:46.998228 2026] [lsapi:warn] [pid 3190537:tid 3190537] [client 203.175.125.116:62499] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:47.103051 2026] [ssl:error] [pid 3191711:tid 3191711] (70014)End of file found: [client 216.73.216.199:58632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:47.608836 2026] [ssl:error] [pid 3193724:tid 3193724] (70014)End of file found: [client 216.73.216.199:15348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:47.934840 2026] [lsapi:warn] [pid 3173382:tid 3173382] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:49.743301 2026] [core:error] [pid 3190541:tid 3190541] (13)Permission denied: [client 216.73.216.199:49439] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/partial
[Thu Jul 30 13:10:49.941262 2026] [core:error] [pid 3193723:tid 3193723] [client 57.141.0.52:27204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:49.941289 2026] [core:error] [pid 3193723:tid 3193723] [client 57.141.0.52:27204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:49.941779 2026] [ssl:error] [pid 3183615:tid 3183615] (EAI 2)Name or service not known: [client 144.76.19.72:61036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:49.941816 2026] [ssl:error] [pid 3183615:tid 3183615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:49.993674 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:61046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:49.993698 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:52.486565 2026] [core:error] [pid 3191711:tid 3191711] (13)Permission denied: [client 216.73.216.199:49195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/rapl/sections/__bug_table
[Thu Jul 30 13:10:52.644474 2026] [core:error] [pid 3190497:tid 3190497] [client 66.249.66.167:52595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:52.644514 2026] [core:error] [pid 3190497:tid 3190497] [client 66.249.66.167:52595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:53.045423 2026] [ssl:error] [pid 3189203:tid 3189203] (EAI 2)Name or service not known: [client 144.76.19.72:61062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:53.045458 2026] [ssl:error] [pid 3189203:tid 3189203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:53.101337 2026] [ssl:error] [pid 3190497:tid 3190497] (EAI 2)Name or service not known: [client 144.76.19.72:61068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:53.101371 2026] [ssl:error] [pid 3190497:tid 3190497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:53.242199 2026] [lsapi:warn] [pid 3181802:tid 3181802] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:53.501552 2026] [core:error] [pid 3190537:tid 3190537] (13)Permission denied: [client 216.73.216.199:28443] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/bin/sudo
[Thu Jul 30 13:10:53.540878 2026] [core:error] [pid 3190437:tid 3190437] [client 172.213.10.64:10168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:53.540918 2026] [core:error] [pid 3190437:tid 3190437] [client 172.213.10.64:10168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:53.827371 2026] [authz_core:error] [pid 3190497:tid 3190497] [client 57.141.0.58:49498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:10:53.827994 2026] [authz_core:error] [pid 3190497:tid 3190497] [client 57.141.0.58:49498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:10:54.944175 2026] [core:error] [pid 3191711:tid 3191711] (13)Permission denied: [client 216.73.216.199:49195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_allocation_context/hwcache_align
[Thu Jul 30 13:10:55.601814 2026] [ssl:error] [pid 3190537:tid 3190537] (70014)End of file found: [client 216.73.216.199:28443] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:56.156780 2026] [ssl:error] [pid 3194790:tid 3194790] (EAI 2)Name or service not known: [client 144.76.19.72:61072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:56.156815 2026] [ssl:error] [pid 3194790:tid 3194790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:56.214888 2026] [ssl:error] [pid 3190495:tid 3190495] (EAI 2)Name or service not known: [client 144.76.19.72:61078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:56.214935 2026] [ssl:error] [pid 3190495:tid 3190495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:56.232558 2026] [ssl:error] [pid 3191711:tid 3191711] (70014)End of file found: [client 216.73.216.199:49195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:56.668249 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:56.668273 2026] [core:error] [pid 3177761:tid 3177761] [client 172.213.10.64:10228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:57.142461 2026] [ssl:error] [pid 3193723:tid 3193723] (70014)End of file found: [client 216.73.216.199:23020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:10:58.034456 2026] [security2:error] [pid 3177761:tid 3177761] [client 74.7.227.176:46018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tyredandmotional.co.uk"] [uri "/"] [unique_id "ams_Uqzc2AMlHVuDJRY0xQAAABw"]
[Thu Jul 30 13:10:58.490595 2026] [lsapi:warn] [pid 3192733:tid 3192733] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:10:59.273288 2026] [ssl:error] [pid 3190437:tid 3190437] (EAI 2)Name or service not known: [client 144.76.19.72:61088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:59.273319 2026] [ssl:error] [pid 3190437:tid 3190437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:59.326551 2026] [ssl:error] [pid 3191960:tid 3191960] (EAI 2)Name or service not known: [client 144.76.19.72:61104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:10:59.326604 2026] [ssl:error] [pid 3191960:tid 3191960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:10:59.819220 2026] [core:error] [pid 3193656:tid 3193656] [client 172.213.10.64:10140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:59.819250 2026] [core:error] [pid 3193656:tid 3193656] [client 172.213.10.64:10140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:10:59.863744 2026] [security2:error] [pid 3189428:tid 3189428] [client 185.191.171.14:47186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,664.0/prev_next,prev.html"] [unique_id "ams_UxbuBwAHksAHmXIMeQAAACo"]
[Thu Jul 30 13:11:01.696816 2026] [ssl:error] [pid 3179933:tid 3179933] (70014)End of file found: [client 216.73.216.199:9588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:01.848223 2026] [security2:error] [pid 3192792:tid 3192792] [client 74.7.227.32:56946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.akoptimize.onlinec.gatkabfs.com"] [uri "/"] [unique_id "ams_VSH6JB49PNFEiO-6zgAAABg"]
[Thu Jul 30 13:11:01.972373 2026] [core:error] [pid 3194790:tid 3194790] [client 172.213.10.64:10183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:01.972399 2026] [core:error] [pid 3194790:tid 3194790] [client 172.213.10.64:10183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:02.354550 2026] [ssl:error] [pid 3192792:tid 3192792] (70014)End of file found: [client 216.73.216.199:7399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:02.382560 2026] [ssl:error] [pid 3167187:tid 3167187] (EAI 2)Name or service not known: [client 144.76.19.72:36672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:02.382585 2026] [ssl:error] [pid 3167187:tid 3167187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:02.436011 2026] [ssl:error] [pid 3190497:tid 3190497] (EAI 2)Name or service not known: [client 144.76.19.72:36686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:02.436037 2026] [ssl:error] [pid 3190497:tid 3190497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:02.962865 2026] [ssl:error] [pid 3190537:tid 3190537] (70014)End of file found: [client 216.73.216.199:23906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:03.281753 2026] [security2:error] [pid 3171878:tid 3171878] [client 114.119.150.27:63517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.loca.co.uk"] [uri "/robots.txt"] [unique_id "ams_Vz_kNIbIqbBRyWa9agAAABY"], referer: http://www.loca.co.uk/robots.txt
[Thu Jul 30 13:11:03.687610 2026] [core:error] [pid 3193723:tid 3193723] [client 172.213.10.64:10179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:03.687652 2026] [core:error] [pid 3193723:tid 3193723] [client 172.213.10.64:10179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:03.708016 2026] [lsapi:warn] [pid 3193725:tid 3193725] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:04.545175 2026] [core:error] [pid 3181802:tid 3181802] [client 172.213.10.64:10138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:04.545207 2026] [core:error] [pid 3181802:tid 3181802] [client 172.213.10.64:10138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:05.086088 2026] [core:error] [pid 3192733:tid 3192733] [client 172.213.10.64:10139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:05.086114 2026] [core:error] [pid 3192733:tid 3192733] [client 172.213.10.64:10139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:05.321378 2026] [core:error] [pid 3181802:tid 3181802] [client 66.249.66.167:44359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:05.321405 2026] [core:error] [pid 3181802:tid 3181802] [client 66.249.66.167:44359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:05.521051 2026] [ssl:error] [pid 3193723:tid 3193723] (EAI 2)Name or service not known: [client 144.76.19.72:36688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:05.521098 2026] [ssl:error] [pid 3193723:tid 3193723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:05.584704 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 144.76.19.72:36690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:05.584736 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:07.295709 2026] [core:error] [pid 3181802:tid 3181802] [client 172.213.10.64:10197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:07.295733 2026] [core:error] [pid 3181802:tid 3181802] [client 172.213.10.64:10197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:07.913754 2026] [ssl:error] [pid 3191711:tid 3191711] (70014)End of file found: [client 216.73.216.199:44037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:08.161549 2026] [authz_core:error] [pid 3178483:tid 3178483] [client 57.141.0.62:27918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:08.162244 2026] [authz_core:error] [pid 3178483:tid 3178483] [client 57.141.0.62:27918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:08.450461 2026] [ssl:error] [pid 3192792:tid 3192792] (70014)End of file found: [client 216.73.216.199:34239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:08.642298 2026] [ssl:error] [pid 3178483:tid 3178483] (EAI 2)Name or service not known: [client 144.76.19.72:36696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:08.642328 2026] [ssl:error] [pid 3178483:tid 3178483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:08.664431 2026] [core:error] [pid 3172022:tid 3172022] [client 172.213.10.64:10167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:08.664451 2026] [core:error] [pid 3172022:tid 3172022] [client 172.213.10.64:10167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:08.697909 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:36706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:08.697934 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:08.951235 2026] [lsapi:warn] [pid 3190437:tid 3190437] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:09.165887 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 191.232.199.39:44687] AH01630: client denied by server configuration: /home/mjsser/demo.mjs-services.com/wp-admin/maint/error_log
[Thu Jul 30 13:11:10.600407 2026] [ssl:error] [pid 3172022:tid 3172022] (70014)End of file found: [client 216.73.216.199:23056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:10.621676 2026] [security2:error] [pid 3174653:tid 3174653] [client 170.106.15.3:53744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "ams_XseOSVrY1GjpPqHUNgAAAAU"]
[Thu Jul 30 13:11:11.418900 2026] [core:error] [pid 3193723:tid 3193723] [client 172.213.10.64:10068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:11.418931 2026] [core:error] [pid 3193723:tid 3193723] [client 172.213.10.64:10068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:11.751855 2026] [ssl:error] [pid 3195596:tid 3195596] (EAI 2)Name or service not known: [client 144.76.19.72:63674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:11.751902 2026] [ssl:error] [pid 3195596:tid 3195596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:11.805553 2026] [ssl:error] [pid 3193723:tid 3193723] (EAI 2)Name or service not known: [client 144.76.19.72:63682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:11.805584 2026] [ssl:error] [pid 3193723:tid 3193723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:14.190001 2026] [lsapi:warn] [pid 3193723:tid 3193723] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:14.642601 2026] [ssl:error] [pid 3175860:tid 3175860] (70014)End of file found: [client 216.73.216.199:40868] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:14.861239 2026] [ssl:error] [pid 3192792:tid 3192792] (EAI 2)Name or service not known: [client 144.76.19.72:63684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:14.861293 2026] [ssl:error] [pid 3192792:tid 3192792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:14.917490 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:63692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:14.917518 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:14.999193 2026] [core:error] [pid 3192791:tid 3192791] [client 57.141.0.67:54464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:14.999220 2026] [core:error] [pid 3192791:tid 3192791] [client 57.141.0.67:54464] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:17.081008 2026] [ssl:error] [pid 3186720:tid 3186720] (70014)End of file found: [client 216.73.216.199:62977] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:17.599855 2026] [ssl:error] [pid 3191712:tid 3191712] (70014)End of file found: [client 216.73.216.199:39968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:17.977700 2026] [ssl:error] [pid 3194994:tid 3194994] (EAI 2)Name or service not known: [client 144.76.19.72:63704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:17.977732 2026] [ssl:error] [pid 3194994:tid 3194994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:18.006471 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.66.4:42582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:18.006507 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.66.4:42582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:18.008908 2026] [core:error] [pid 3172019:tid 3172019] [client 66.249.66.66:52259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:18.008941 2026] [core:error] [pid 3172019:tid 3172019] [client 66.249.66.66:52259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:18.035610 2026] [ssl:error] [pid 3195534:tid 3195534] (EAI 2)Name or service not known: [client 144.76.19.72:63708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:18.035650 2026] [ssl:error] [pid 3195534:tid 3195534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:19.283564 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 57.141.0.20:63398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:19.284195 2026] [authz_core:error] [pid 3172022:tid 3172022] [client 57.141.0.20:63398] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:19.379267 2026] [security2:error] [pid 3194789:tid 3194789] [client 43.159.152.184:40028] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "ams_Z2ArPPhCZrTwEexE2QAAAAo"], referer: http://rock-ola.co.uk
[Thu Jul 30 13:11:19.442043 2026] [lsapi:warn] [pid 3181802:tid 3181802] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:19.456829 2026] [core:error] [pid 3171878:tid 3171878] [client 57.141.0.9:47416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:19.456849 2026] [core:error] [pid 3171878:tid 3171878] [client 57.141.0.9:47416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:20.010016 2026] [ssl:error] [pid 3194790:tid 3194790] (70014)End of file found: [client 216.73.216.199:10583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:21.120205 2026] [ssl:error] [pid 3192791:tid 3192791] (EAI 2)Name or service not known: [client 144.76.19.72:42406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:21.120266 2026] [ssl:error] [pid 3192791:tid 3192791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:21.134991 2026] [security2:error] [pid 3174653:tid 3174653] [client 43.159.152.184:54772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "ams_aceOSVrY1GjpPqHUPwAAAAU"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 13:11:21.176266 2026] [ssl:error] [pid 3189376:tid 3189376] (EAI 2)Name or service not known: [client 144.76.19.72:42412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:21.176339 2026] [ssl:error] [pid 3189376:tid 3189376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:22.424431 2026] [ssl:error] [pid 3189376:tid 3189376] (70014)End of file found: [client 216.73.216.199:36865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:23.419403 2026] [authz_core:error] [pid 3191712:tid 3191712] [client 136.64.188.227:33764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:23.420032 2026] [authz_core:error] [pid 3191712:tid 3191712] [client 136.64.188.227:33764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:23.742031 2026] [ssl:error] [pid 3183270:tid 3183270] (70014)End of file found: [client 216.73.216.199:52021] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:23.948075 2026] [authz_core:error] [pid 3191712:tid 3191712] [client 136.64.188.227:40938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:23.948634 2026] [authz_core:error] [pid 3191712:tid 3191712] [client 136.64.188.227:40938] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:24.233605 2026] [ssl:error] [pid 3189428:tid 3189428] (EAI 2)Name or service not known: [client 144.76.19.72:42420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:24.233643 2026] [ssl:error] [pid 3189428:tid 3189428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:24.291276 2026] [ssl:error] [pid 3190436:tid 3190436] (EAI 2)Name or service not known: [client 144.76.19.72:42422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:24.291314 2026] [ssl:error] [pid 3190436:tid 3190436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:24.397454 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 57.141.0.12:32544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:24.398084 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 57.141.0.12:32544] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:24.693032 2026] [lsapi:warn] [pid 3178483:tid 3178483] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:25.499935 2026] [authz_core:error] [pid 3194790:tid 3194790] [client 136.64.188.227:40942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:25.500505 2026] [authz_core:error] [pid 3194790:tid 3194790] [client 136.64.188.227:40942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:25.996034 2026] [authz_core:error] [pid 3190537:tid 3190537] [client 57.141.0.69:55982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:25.996678 2026] [authz_core:error] [pid 3190537:tid 3190537] [client 57.141.0.69:55982] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:26.701049 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 136.64.188.227:40958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:26.701616 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 136.64.188.227:40958] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:27.068183 2026] [ssl:error] [pid 3190495:tid 3190495] (70014)End of file found: [client 216.73.216.199:40131] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:27.375115 2026] [ssl:error] [pid 3179933:tid 3179933] (EAI 2)Name or service not known: [client 144.76.19.72:42436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:27.375145 2026] [ssl:error] [pid 3179933:tid 3179933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:27.427977 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:42442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:27.428005 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:28.219952 2026] [security2:error] [pid 3190537:tid 3190537] [client 85.208.96.204:25778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,751.0/prev_next,next.html"] [unique_id "ams_cLlLB7ZKCwJeZNFqhwAAADA"]
[Thu Jul 30 13:11:28.580093 2026] [ssl:error] [pid 3174653:tid 3174653] (70014)End of file found: [client 216.73.216.199:3922] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:29.917504 2026] [lsapi:warn] [pid 3181802:tid 3181802] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:30.485174 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:28780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:30.485210 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:30.538114 2026] [ssl:error] [pid 3192791:tid 3192791] (EAI 2)Name or service not known: [client 144.76.19.72:28796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:30.538148 2026] [ssl:error] [pid 3192791:tid 3192791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:30.677913 2026] [core:error] [pid 3192792:tid 3192792] [client 66.249.66.167:49075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:30.677939 2026] [core:error] [pid 3192792:tid 3192792] [client 66.249.66.167:49075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:31.907192 2026] [ssl:error] [pid 3181679:tid 3181679] (70014)End of file found: [client 216.73.216.199:60708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:32.004962 2026] [security2:error] [pid 3193656:tid 3193656] [client 43.136.86.241:60942] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "ams_dANXe4fDjGrphB6xeAAAACI"], referer: http://rock-ola.co.uk
[Thu Jul 30 13:11:32.396433 2026] [ssl:error] [pid 3175860:tid 3175860] (70014)End of file found: [client 216.73.216.199:53724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:33.596020 2026] [ssl:error] [pid 3195534:tid 3195534] (EAI 2)Name or service not known: [client 144.76.19.72:28808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:33.596053 2026] [ssl:error] [pid 3195534:tid 3195534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:33.653590 2026] [ssl:error] [pid 3189376:tid 3189376] (EAI 2)Name or service not known: [client 144.76.19.72:28818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:33.653622 2026] [ssl:error] [pid 3189376:tid 3189376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:34.017815 2026] [core:error] [pid 3192792:tid 3192792] (13)Permission denied: [client 216.73.216.199:46145] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory14/node0/compact
[Thu Jul 30 13:11:34.246301 2026] [security2:error] [pid 3192791:tid 3192791] [client 43.136.86.241:55894] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "ams_dso2WiEOPypMT-TCSAAAABA"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 13:11:34.823833 2026] [cgi:error] [pid 3183615:tid 3183615] [client 158.158.34.91:6109] AH02811: stderr from /home/websters/public_html/itsupportinayrshire.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 13:11:34.929089 2026] [ssl:error] [pid 3192792:tid 3192792] (70014)End of file found: [client 216.73.216.199:46145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:35.180228 2026] [lsapi:warn] [pid 3158357:tid 3158357] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:35.195614 2026] [authz_core:error] [pid 3183750:tid 3183750] [client 158.158.34.91:6133] AH01630: client denied by server configuration: /home/websters/public_html/itsupportinayrshire.com/php.ini
[Thu Jul 30 13:11:35.233966 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 57.141.0.15:29440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:35.234605 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 57.141.0.15:29440] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:36.711555 2026] [ssl:error] [pid 3195594:tid 3195594] (EAI 2)Name or service not known: [client 144.76.19.72:28828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:36.711591 2026] [ssl:error] [pid 3195594:tid 3195594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:36.766994 2026] [ssl:error] [pid 3196952:tid 3196952] (EAI 2)Name or service not known: [client 144.76.19.72:28830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:36.767039 2026] [ssl:error] [pid 3196952:tid 3196952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:36.894763 2026] [security2:error] [pid 3195594:tid 3195594] [client 122.51.236.174:34364] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "ams_eNwSizrrgYu41c9dQQAAACk"]
[Thu Jul 30 13:11:37.517955 2026] [security2:error] [pid 3181802:tid 3181802] [client 156.59.198.135:40726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_eWiO-GMwdnqDvy8UVAAAABQ"]
[Thu Jul 30 13:11:37.838108 2026] [ssl:error] [pid 3181679:tid 3181679] (70014)End of file found: [client 216.73.216.199:38938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:37.985161 2026] [security2:error] [pid 3175860:tid 3175860] [client 169.224.67.140:58112] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_efS6yx2HLbV9Tl_pgwAAACg"]
[Thu Jul 30 13:11:37.985213 2026] [security2:error] [pid 3175860:tid 3175860] [client 169.224.67.140:58112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_efS6yx2HLbV9Tl_pgwAAACg"]
[Thu Jul 30 13:11:37.985475 2026] [security2:error] [pid 3175860:tid 3175860] [client 169.224.67.140:58112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_efS6yx2HLbV9Tl_pgwAAACg"]
[Thu Jul 30 13:11:39.118597 2026] [security2:error] [pid 3196952:tid 3196952] [client 156.59.198.136:57798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_exaNF4HS4FIZEHEaDAAAABY"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:39.561185 2026] [lsapi:warn] [pid 3195535:tid 3195535] [client 69.57.172.96:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:39.864184 2026] [ssl:error] [pid 3196952:tid 3196952] (EAI 2)Name or service not known: [client 144.76.19.72:24352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:39.864215 2026] [ssl:error] [pid 3196952:tid 3196952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:40.052209 2026] [ssl:error] [pid 3192792:tid 3192792] (EAI 2)Name or service not known: [client 144.76.19.72:24356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:40.052237 2026] [ssl:error] [pid 3192792:tid 3192792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:40.129009 2026] [core:error] [pid 3194994:tid 3194994] (13)Permission denied: [client 216.73.216.199:55044] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/slabs_cpu_partial
[Thu Jul 30 13:11:40.543776 2026] [lsapi:warn] [pid 3197052:tid 3197052] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:40.676639 2026] [security2:error] [pid 3183270:tid 3183270] [client 156.59.198.135:32402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_fDpATU3CGmueFqgrBAAAABU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:41.339708 2026] [core:error] [pid 3194994:tid 3194994] (13)Permission denied: [client 216.73.216.199:55044] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/workqueue/uevent
[Thu Jul 30 13:11:42.126628 2026] [security2:error] [pid 3197097:tid 3197097] [client 156.59.198.135:34458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_fj3iWP3Zfhb0wknJtgAAADU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:42.569161 2026] [security2:error] [pid 3189376:tid 3189376] [client 185.191.171.17:18354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/erin-moran-meteorologist-age"] [unique_id "ams_fijgiQtmRdUAb0RyZAAAACA"]
[Thu Jul 30 13:11:43.108344 2026] [ssl:error] [pid 3195596:tid 3195596] (EAI 2)Name or service not known: [client 144.76.19.72:24362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:43.108376 2026] [ssl:error] [pid 3195596:tid 3195596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:43.165760 2026] [ssl:error] [pid 3193723:tid 3193723] (EAI 2)Name or service not known: [client 144.76.19.72:24372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:43.165798 2026] [ssl:error] [pid 3193723:tid 3193723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:43.370241 2026] [core:error] [pid 3195535:tid 3195535] [client 66.249.66.167:57182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:43.370282 2026] [core:error] [pid 3195535:tid 3195535] [client 66.249.66.167:57182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:43.698771 2026] [security2:error] [pid 3197098:tid 3197098] [client 156.59.198.136:49732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_f4R6tTpFtp9ozUNHDQAAADc"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:44.087726 2026] [security2:error] [pid 3194790:tid 3194790] [client 154.192.41.14:34645] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_gIOeclUfSKaYOsGVkQAAAAs"]
[Thu Jul 30 13:11:44.087782 2026] [security2:error] [pid 3194790:tid 3194790] [client 154.192.41.14:34645] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_gIOeclUfSKaYOsGVkQAAAAs"]
[Thu Jul 30 13:11:44.088038 2026] [security2:error] [pid 3194790:tid 3194790] [client 154.192.41.14:34645] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_gIOeclUfSKaYOsGVkQAAAAs"]
[Thu Jul 30 13:11:44.532816 2026] [security2:error] [pid 3189203:tid 3189203] [client 80.94.92.167:51422] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ilkagriese.com"] [uri "/.svn/wc.db"] [unique_id "ams_gBQ-se5M-hW3ZGnI-QAAAB0"]
[Thu Jul 30 13:11:44.532975 2026] [security2:error] [pid 3189203:tid 3189203] [client 80.94.92.167:51422] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ilkagriese.com"] [uri "/.svn/wc.db"] [unique_id "ams_gBQ-se5M-hW3ZGnI-QAAAB0"]
[Thu Jul 30 13:11:44.533169 2026] [security2:error] [pid 3189203:tid 3189203] [client 80.94.92.167:51422] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ilkagriese.com"] [uri "/.svn/wc.db"] [unique_id "ams_gBQ-se5M-hW3ZGnI-QAAAB0"]
[Thu Jul 30 13:11:44.533401 2026] [security2:error] [pid 3189203:tid 3189203] [client 80.94.92.167:51422] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ilkagriese.com"] [uri "/.svn/wc.db"] [unique_id "ams_gBQ-se5M-hW3ZGnI-QAAAB0"]
[Thu Jul 30 13:11:45.178946 2026] [security2:error] [pid 3197101:tid 3197101] [client 156.59.198.136:36534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_gX4L51d5BFkIKjNfZAAAADo"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:45.709443 2026] [lsapi:warn] [pid 3194790:tid 3194790] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:45.800348 2026] [core:error] [pid 3181634:tid 3181634] [client 66.249.64.170:64071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:45.800381 2026] [core:error] [pid 3181634:tid 3181634] [client 66.249.64.170:64071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:46.220170 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:24378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:46.220202 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:46.275084 2026] [ssl:error] [pid 3197102:tid 3197102] (EAI 2)Name or service not known: [client 144.76.19.72:24394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:46.275136 2026] [ssl:error] [pid 3197102:tid 3197102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:46.737122 2026] [security2:error] [pid 3197054:tid 3197054] [client 110.249.202.120:12026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/robots.txt"] [unique_id "ams_ghPy-YUNdZQs_R_n7gAAAC8"]
[Thu Jul 30 13:11:46.990678 2026] [security2:error] [pid 3172022:tid 3172022] [client 156.59.198.135:36430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_gryUccp_T8FAQyjQTwAAAEQ"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:47.751231 2026] [security2:error] [pid 3194994:tid 3194994] [client 114.119.130.210:44213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/bodhi-with-car"] [unique_id "ams_g7_gZJ56cLTSIJXVgQAAAAw"], referer: http://www.kinesiologylondon.co.uk/body-brite-no-car
[Thu Jul 30 13:11:48.051828 2026] [authz_core:error] [pid 3197098:tid 3197098] [client 57.141.0.68:24106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:48.052461 2026] [authz_core:error] [pid 3197098:tid 3197098] [client 57.141.0.68:24106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:11:48.560730 2026] [security2:error] [pid 3195592:tid 3195592] [client 156.59.198.136:61900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_hNGd3XW_DEEKfwzJ2wAAACU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:49.329447 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:24406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:49.329481 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:49.383839 2026] [ssl:error] [pid 3195473:tid 3195473] (EAI 2)Name or service not known: [client 144.76.19.72:24420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:49.383876 2026] [ssl:error] [pid 3195473:tid 3195473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:50.041244 2026] [security2:error] [pid 3179933:tid 3179933] [client 156.59.198.135:22024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_hgA_NlXIzZQDRqIpEwAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:50.140748 2026] [security2:error] [pid 3158357:tid 3158357] [client 118.24.135.34:52604] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams_hkYG8dwByC2nqpxBMgAAAAM"], referer: http://banskoexpresstransfers.co.uk
[Thu Jul 30 13:11:50.830237 2026] [lsapi:warn] [pid 3195535:tid 3195535] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:51.002862 2026] [access_compat:error] [pid 3194752:tid 3194752] [client 4.223.67.9:60753] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:11:51.532592 2026] [security2:error] [pid 3193724:tid 3193724] [client 156.59.198.135:37184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_h6h5HJpupVcK4HXvvQAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:51.630428 2026] [access_compat:error] [pid 3194789:tid 3194789] [client 3.228.112.215:1244] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 13:11:51.630558 2026] [access_compat:error] [pid 3194789:tid 3194789] [client 3.228.112.215:1244] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:11:51.840089 2026] [security2:error] [pid 3175860:tid 3175860] [client 43.164.197.117:39144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "ams_h_S6yx2HLbV9Tl_piQAAACg"]
[Thu Jul 30 13:11:52.468012 2026] [ssl:error] [pid 3194789:tid 3194789] (EAI 2)Name or service not known: [client 144.76.19.72:44470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:52.468078 2026] [ssl:error] [pid 3194789:tid 3194789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:52.522642 2026] [ssl:error] [pid 3195596:tid 3195596] (EAI 2)Name or service not known: [client 144.76.19.72:44480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:52.522668 2026] [ssl:error] [pid 3195596:tid 3195596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:52.735384 2026] [core:error] [pid 3197103:tid 3197103] [client 57.141.0.61:27612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:52.735412 2026] [core:error] [pid 3197103:tid 3197103] [client 57.141.0.61:27612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:52.846216 2026] [security2:error] [pid 3158357:tid 3158357] [client 151.233.56.79:55244] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_iEYG8dwByC2nqpxBNQAAAAM"]
[Thu Jul 30 13:11:52.846263 2026] [security2:error] [pid 3158357:tid 3158357] [client 151.233.56.79:55244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_iEYG8dwByC2nqpxBNQAAAAM"]
[Thu Jul 30 13:11:52.846530 2026] [security2:error] [pid 3158357:tid 3158357] [client 151.233.56.79:55244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_iEYG8dwByC2nqpxBNQAAAAM"]
[Thu Jul 30 13:11:53.020336 2026] [security2:error] [pid 3194994:tid 3194994] [client 156.59.198.136:32290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_ib_gZJ56cLTSIJXVhwAAAAw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:54.603215 2026] [security2:error] [pid 3197053:tid 3197053] [client 156.59.198.136:55334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_innCRx0Ez5UNhv2C1gAAAC4"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:55.577569 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:44484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:55.577596 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:55.633413 2026] [ssl:error] [pid 3186720:tid 3186720] (EAI 2)Name or service not known: [client 144.76.19.72:44500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:55.633440 2026] [ssl:error] [pid 3186720:tid 3186720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:56.014792 2026] [security2:error] [pid 3172019:tid 3172019] [client 49.51.183.15:47716] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "loca.co.uk"] [uri "/"] [unique_id "ams_jLa20LhEekYcx56RBQAAAEE"]
[Thu Jul 30 13:11:56.044792 2026] [core:error] [pid 3194994:tid 3194994] [client 66.249.66.167:57025] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:56.044816 2026] [core:error] [pid 3194994:tid 3194994] [client 66.249.66.167:57025] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:11:56.074186 2026] [ssl:error] [pid 3197054:tid 3197054] (70014)End of file found: [client 216.73.216.199:20374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:56.213787 2026] [security2:error] [pid 3195596:tid 3195596] [client 156.59.198.136:62788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_jM1f_ljHSdT0-i0RRwAAADI"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:56.265489 2026] [lsapi:warn] [pid 3194994:tid 3194994] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:11:57.174478 2026] [ssl:error] [pid 3183750:tid 3183750] (70014)End of file found: [client 216.73.216.199:46027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:57.472128 2026] [ssl:error] [pid 3186720:tid 3186720] (70014)End of file found: [client 216.73.216.199:11044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:11:58.090318 2026] [security2:error] [pid 3195535:tid 3195535] [client 156.59.198.136:45076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_joj5kQN7nz4vBd-CkgAAACM"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:58.732537 2026] [ssl:error] [pid 3197098:tid 3197098] (EAI 2)Name or service not known: [client 144.76.19.72:44502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:58.732565 2026] [ssl:error] [pid 3197098:tid 3197098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:58.795809 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:44508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:11:58.795833 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:11:59.580197 2026] [security2:error] [pid 3195473:tid 3195473] [client 156.59.198.135:31676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_jx_x3WAqsboqreIcmgAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:11:59.864341 2026] [authz_core:error] [pid 3197098:tid 3197098] [client 57.141.0.62:26206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:11:59.864966 2026] [authz_core:error] [pid 3197098:tid 3197098] [client 57.141.0.62:26206] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:01.059441 2026] [security2:error] [pid 3195473:tid 3195473] [client 156.59.198.136:18880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_kR_x3WAqsboqreIcmwAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:01.220337 2026] [core:error] [pid 3175860:tid 3175860] [client 66.249.66.167:51320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:01.220365 2026] [core:error] [pid 3175860:tid 3175860] [client 66.249.66.167:51320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:01.306143 2026] [lsapi:warn] [pid 3197962:tid 3197962] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:01.408158 2026] [core:error] [pid 3193588:tid 3193588] (13)Permission denied: [client 216.73.216.199:14156] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory113/node0/compact
[Thu Jul 30 13:12:01.877525 2026] [ssl:error] [pid 3195473:tid 3195473] (EAI 2)Name or service not known: [client 144.76.19.72:40392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:01.877551 2026] [ssl:error] [pid 3195473:tid 3195473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:01.936479 2026] [ssl:error] [pid 3195473:tid 3195473] (EAI 2)Name or service not known: [client 144.76.19.72:40406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:01.936513 2026] [ssl:error] [pid 3195473:tid 3195473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:02.363112 2026] [security2:error] [pid 3195473:tid 3195473] [client 156.59.198.136:30666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_kh_x3WAqsboqreIcnAAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:02.414646 2026] [security2:error] [pid 3197099:tid 3197099] [client 43.164.129.191:60664] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/Saves/"] [unique_id "ams_kixT7BoVbnhOC1TvmgAAADg"]
[Thu Jul 30 13:12:02.612467 2026] [ssl:error] [pid 3193588:tid 3193588] (70014)End of file found: [client 216.73.216.199:14156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:03.047990 2026] [security2:error] [pid 3189426:tid 3189426] [client 185.191.171.15:56296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.975.html"] [unique_id "ams_kyc2xNco5fHJDsmV-gAAACc"]
[Thu Jul 30 13:12:03.113457 2026] [ssl:error] [pid 3172019:tid 3172019] (70014)End of file found: [client 216.73.216.199:34567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:03.561942 2026] [security2:error] [pid 3158357:tid 3158357] [client 114.119.158.38:54359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/spark/"] [unique_id "ams_k0YG8dwByC2nqpxBQQAAAAM"], referer: http://www.erskinenazarene.co.uk/event/spark/?instance_id=40936
[Thu Jul 30 13:12:03.867191 2026] [security2:error] [pid 3195473:tid 3195473] [client 156.59.198.136:26280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_kx_x3WAqsboqreIcnQAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:04.827633 2026] [security2:error] [pid 3189376:tid 3189376] [client 114.119.158.38:54367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/spark/"] [unique_id "ams_lCjgiQtmRdUAb0RyrgAAACA"], referer: http://www.erskinenazarene.co.uk/event/spark/?instance_id=40936
[Thu Jul 30 13:12:04.996212 2026] [ssl:error] [pid 3195596:tid 3195596] (EAI 2)Name or service not known: [client 144.76.19.72:40418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:04.996237 2026] [ssl:error] [pid 3195596:tid 3195596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:05.035203 2026] [ssl:error] [pid 3198055:tid 3198055] (70014)End of file found: [client 216.73.216.199:34280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:05.075590 2026] [ssl:error] [pid 3194790:tid 3194790] (EAI 2)Name or service not known: [client 144.76.19.72:40428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:05.075623 2026] [ssl:error] [pid 3194790:tid 3194790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:05.179338 2026] [core:error] [pid 3158357:tid 3158357] [client 57.141.0.14:47050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:05.179362 2026] [core:error] [pid 3158357:tid 3158357] [client 57.141.0.14:47050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:05.512279 2026] [security2:error] [pid 3195596:tid 3195596] [client 156.59.198.136:42008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_lc1f_ljHSdT0-i0RTQAAADI"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:06.734690 2026] [lsapi:warn] [pid 3158357:tid 3158357] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:07.016056 2026] [security2:error] [pid 3195596:tid 3195596] [client 150.5.134.22:50627] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_l81f_ljHSdT0-i0RTgAAADI"]
[Thu Jul 30 13:12:07.016118 2026] [security2:error] [pid 3195596:tid 3195596] [client 150.5.134.22:50627] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_l81f_ljHSdT0-i0RTgAAADI"]
[Thu Jul 30 13:12:07.016360 2026] [security2:error] [pid 3195596:tid 3195596] [client 150.5.134.22:50627] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_l81f_ljHSdT0-i0RTgAAADI"]
[Thu Jul 30 13:12:07.208439 2026] [security2:error] [pid 3167187:tid 3167187] [client 156.59.198.135:33778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_l1IOYBlKOuIdcBy2ogAAADE"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:07.875823 2026] [security2:error] [pid 3197052:tid 3197052] [client 43.157.153.236:59884] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "ams_l_HCJuMNvO7YofQQ1AAAACs"]
[Thu Jul 30 13:12:07.937427 2026] [ssl:error] [pid 3197102:tid 3197102] (70014)End of file found: [client 216.73.216.199:27043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:08.130890 2026] [ssl:error] [pid 3198300:tid 3198300] (EAI 2)Name or service not known: [client 144.76.19.72:40434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:08.130942 2026] [ssl:error] [pid 3198300:tid 3198300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:08.183502 2026] [ssl:error] [pid 3195535:tid 3195535] (EAI 2)Name or service not known: [client 144.76.19.72:40438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:08.183532 2026] [ssl:error] [pid 3195535:tid 3195535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:08.702219 2026] [security2:error] [pid 3189376:tid 3189376] [client 156.59.198.136:18640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_mCjgiQtmRdUAb0RysQAAACA"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:08.838334 2026] [core:error] [pid 3198300:tid 3198300] [client 66.249.66.68:54221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:08.838365 2026] [core:error] [pid 3198300:tid 3198300] [client 66.249.66.68:54221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:08.892471 2026] [security2:error] [pid 3172019:tid 3172019] [client 101.47.26.233:22591] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_mLa20LhEekYcx56RCQAAAEE"]
[Thu Jul 30 13:12:08.892530 2026] [security2:error] [pid 3172019:tid 3172019] [client 101.47.26.233:22591] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_mLa20LhEekYcx56RCQAAAEE"]
[Thu Jul 30 13:12:08.892754 2026] [security2:error] [pid 3172019:tid 3172019] [client 101.47.26.233:22591] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_mLa20LhEekYcx56RCQAAAEE"]
[Thu Jul 30 13:12:08.952834 2026] [security2:error] [pid 3193723:tid 3193723] [client 216.73.216.199:59060] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "ams_mPNsG-qGtwkaYZiMUwAAACY"]
[Thu Jul 30 13:12:08.953111 2026] [security2:error] [pid 3193723:tid 3193723] [client 216.73.216.199:59060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "ams_mPNsG-qGtwkaYZiMUwAAACY"]
[Thu Jul 30 13:12:08.953308 2026] [security2:error] [pid 3193723:tid 3193723] [client 216.73.216.199:59060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "ams_mPNsG-qGtwkaYZiMUwAAACY"]
[Thu Jul 30 13:12:09.161829 2026] [authz_core:error] [pid 3196051:tid 3196051] [client 57.141.0.64:23486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:09.162459 2026] [authz_core:error] [pid 3196051:tid 3196051] [client 57.141.0.64:23486] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:09.297518 2026] [authz_core:error] [pid 3186720:tid 3186720] [client 66.249.66.35:39011] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:09.300266 2026] [authz_core:error] [pid 3186720:tid 3186720] [client 66.249.66.35:39011] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:09.762811 2026] [authz_core:error] [pid 3181634:tid 3181634] [client 57.141.0.20:33390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:09.763448 2026] [authz_core:error] [pid 3181634:tid 3181634] [client 57.141.0.20:33390] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:10.033134 2026] [security2:error] [pid 3196051:tid 3196051] [client 43.157.153.236:41196] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "ams_mtaqN_Zf2OYwIR1IxAAAABE"], referer: http://spamp.com
[Thu Jul 30 13:12:10.182295 2026] [security2:error] [pid 3189376:tid 3189376] [client 156.59.198.135:47976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_mijgiQtmRdUAb0RysgAAACA"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:11.255938 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:22876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:11.255967 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:11.309352 2026] [ssl:error] [pid 3196051:tid 3196051] (EAI 2)Name or service not known: [client 144.76.19.72:22884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:11.309401 2026] [ssl:error] [pid 3196051:tid 3196051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:11.367227 2026] [core:error] [pid 3193723:tid 3193723] (13)Permission denied: [client 216.73.216.199:59060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory181/node0/compact
[Thu Jul 30 13:12:11.717575 2026] [security2:error] [pid 3190436:tid 3190436] [client 156.59.198.135:56474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_m_TB3wYlTQh1bWG-0gAAAAg"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:11.789897 2026] [lsapi:warn] [pid 3181679:tid 3181679] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:12.712053 2026] [core:error] [pid 3197054:tid 3197054] [client 85.17.146.129:34572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:12.712105 2026] [core:error] [pid 3197054:tid 3197054] [client 85.17.146.129:34572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:12.844985 2026] [security2:error] [pid 3198055:tid 3198055] [client 101.47.26.233:64853] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_nF2S3lbaO5qvvbdS8AAAABc"]
[Thu Jul 30 13:12:12.845049 2026] [security2:error] [pid 3198055:tid 3198055] [client 101.47.26.233:64853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_nF2S3lbaO5qvvbdS8AAAABc"]
[Thu Jul 30 13:12:12.845317 2026] [security2:error] [pid 3198055:tid 3198055] [client 101.47.26.233:64853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_nF2S3lbaO5qvvbdS8AAAABc"]
[Thu Jul 30 13:12:13.258819 2026] [security2:error] [pid 3193724:tid 3193724] [client 156.59.198.136:44550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_nah5HJpupVcK4HXvywAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:14.096535 2026] [core:error] [pid 3193723:tid 3193723] (13)Permission denied: [client 216.73.216.199:59060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu7/driver/uevent
[Thu Jul 30 13:12:14.363609 2026] [ssl:error] [pid 3167187:tid 3167187] (EAI 2)Name or service not known: [client 144.76.19.72:22898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:14.363642 2026] [ssl:error] [pid 3167187:tid 3167187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:14.414930 2026] [ssl:error] [pid 3179933:tid 3179933] (EAI 2)Name or service not known: [client 144.76.19.72:22902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:14.414974 2026] [ssl:error] [pid 3179933:tid 3179933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:14.496021 2026] [authz_core:error] [pid 3197962:tid 3197962] [client 57.141.0.14:47082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:14.496655 2026] [authz_core:error] [pid 3197962:tid 3197962] [client 57.141.0.14:47082] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:15.060598 2026] [security2:error] [pid 3193236:tid 3193236] [client 156.59.198.136:21780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_nxPI31540IHe1wAZmgAAABk"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:16.578651 2026] [security2:error] [pid 3175860:tid 3175860] [client 156.59.198.135:65320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_oPS6yx2HLbV9Tl_plgAAACg"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:17.206026 2026] [lsapi:warn] [pid 3194994:tid 3194994] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:17.222845 2026] [core:error] [pid 3158357:tid 3158357] (13)Permission denied: [client 216.73.216.199:43631] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory195/node0/compact
[Thu Jul 30 13:12:17.472535 2026] [ssl:error] [pid 3194789:tid 3194789] (EAI 2)Name or service not known: [client 144.76.19.72:22908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:17.472567 2026] [ssl:error] [pid 3194789:tid 3194789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:17.526035 2026] [ssl:error] [pid 3197911:tid 3197911] (EAI 2)Name or service not known: [client 144.76.19.72:22918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:17.526090 2026] [ssl:error] [pid 3197911:tid 3197911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:18.180235 2026] [security2:error] [pid 3197097:tid 3197097] [client 156.59.198.135:25438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_oj3iWP3Zfhb0wknJwwAAADU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:18.248426 2026] [ssl:error] [pid 3193723:tid 3193723] (70014)End of file found: [client 216.73.216.199:25325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:18.856687 2026] [core:error] [pid 3158357:tid 3158357] (13)Permission denied: [client 216.73.216.199:43631] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/alloc_calls
[Thu Jul 30 13:12:19.685535 2026] [security2:error] [pid 3197911:tid 3197911] [client 156.59.198.136:65232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_o4BUnH6qWQ9zWzve7wAAABI"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:20.375607 2026] [core:error] [pid 3175860:tid 3175860] (13)Permission denied: [client 216.73.216.199:9378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/i8042/parameters/debug
[Thu Jul 30 13:12:20.581096 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:39918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:20.581150 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:20.661847 2026] [ssl:error] [pid 3197098:tid 3197098] (EAI 2)Name or service not known: [client 144.76.19.72:39920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:20.661882 2026] [ssl:error] [pid 3197098:tid 3197098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:21.199912 2026] [security2:error] [pid 3190401:tid 3190401] [client 156.59.198.135:38608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_pXJ7n1omRItjD5f_XgAAAAE"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:21.400645 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:21.403332 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:21.592277 2026] [core:error] [pid 3175860:tid 3175860] (13)Permission denied: [client 216.73.216.199:9378] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/object_size
[Thu Jul 30 13:12:21.841850 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:21.844735 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:22.179926 2026] [security2:error] [pid 3158357:tid 3158357] [client 216.73.216.199:43631] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/cryptsetup.conf"] [unique_id "ams_pkYG8dwByC2nqpxBUAAAAAM"]
[Thu Jul 30 13:12:22.180237 2026] [security2:error] [pid 3158357:tid 3158357] [client 216.73.216.199:43631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/cryptsetup.conf"] [unique_id "ams_pkYG8dwByC2nqpxBUAAAAAM"]
[Thu Jul 30 13:12:22.180472 2026] [security2:error] [pid 3158357:tid 3158357] [client 216.73.216.199:43631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/cryptsetup.conf"] [unique_id "ams_pkYG8dwByC2nqpxBUAAAAAM"]
[Thu Jul 30 13:12:22.273053 2026] [authz_core:error] [pid 3192791:tid 3192791] [client 57.141.0.67:22344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:22.273697 2026] [authz_core:error] [pid 3192791:tid 3192791] [client 57.141.0.67:22344] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:22.343831 2026] [lsapi:warn] [pid 3193656:tid 3193656] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:22.449836 2026] [core:error] [pid 3192791:tid 3192791] [client 66.249.66.167:50871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:22.449864 2026] [core:error] [pid 3192791:tid 3192791] [client 66.249.66.167:50871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:22.495895 2026] [security2:error] [pid 3190401:tid 3190401] [client 156.59.198.135:41632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_pnJ7n1omRItjD5f_XwAAAAE"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:22.887274 2026] [access_compat:error] [pid 3198952:tid 3198952] [client 45.158.164.139:36932] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:12:23.096928 2026] [security2:error] [pid 3158357:tid 3158357] [client 216.73.216.199:43631] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/tmp.conf"] [unique_id "ams_p0YG8dwByC2nqpxBUwAAAAM"]
[Thu Jul 30 13:12:23.097233 2026] [security2:error] [pid 3158357:tid 3158357] [client 216.73.216.199:43631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/tmp.conf"] [unique_id "ams_p0YG8dwByC2nqpxBUwAAAAM"]
[Thu Jul 30 13:12:23.097481 2026] [security2:error] [pid 3158357:tid 3158357] [client 216.73.216.199:43631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/tmp.conf"] [unique_id "ams_p0YG8dwByC2nqpxBUwAAAAM"]
[Thu Jul 30 13:12:23.102752 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:23.105431 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:23.399582 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:23.402242 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:23.490889 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:23.493535 2026] [authz_core:error] [pid 3193236:tid 3193236] [client 136.70.68.125:62349] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:23.730656 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:23.733431 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:23.738933 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:39924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:23.738971 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:23.796173 2026] [ssl:error] [pid 3193723:tid 3193723] (EAI 2)Name or service not known: [client 144.76.19.72:39938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:23.796217 2026] [ssl:error] [pid 3193723:tid 3193723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:23.841841 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:23.844577 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:23.933199 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:23.935926 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 136.70.68.125:57382] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:23.987901 2026] [security2:error] [pid 3198952:tid 3198952] [client 156.59.198.136:60750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_p7jjyL1_VirXC21ENgAAAAk"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:24.267644 2026] [core:error] [pid 3174653:tid 3174653] [client 66.249.66.168:51960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:24.267676 2026] [core:error] [pid 3174653:tid 3174653] [client 66.249.66.168:51960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:24.647653 2026] [ssl:error] [pid 3158357:tid 3158357] (70014)End of file found: [client 216.73.216.199:43631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:25.045046 2026] [ssl:error] [pid 3175860:tid 3175860] (70014)End of file found: [client 216.73.216.199:9378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:25.332843 2026] [security2:error] [pid 3189203:tid 3189203] [client 156.59.198.135:49698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_qRQ-se5M-hW3ZGnJOwAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:25.562539 2026] [ssl:error] [pid 3193723:tid 3193723] (70014)End of file found: [client 216.73.216.199:12327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:26.278884 2026] [authz_core:error] [pid 3199021:tid 3199021] [client 66.249.66.34:50623] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:12:26.281748 2026] [authz_core:error] [pid 3199021:tid 3199021] [client 66.249.66.34:50623] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:12:26.855381 2026] [ssl:error] [pid 3183615:tid 3183615] (EAI 2)Name or service not known: [client 144.76.19.72:39942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:26.855414 2026] [ssl:error] [pid 3183615:tid 3183615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:26.908534 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:39946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:26.908597 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:26.910338 2026] [security2:error] [pid 3195592:tid 3195592] [client 156.59.198.136:40164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_qtGd3XW_DEEKfwzJ5QAAACU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:27.676458 2026] [lsapi:warn] [pid 3198952:tid 3198952] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:27.679791 2026] [core:error] [pid 3197098:tid 3197098] [client 57.141.0.67:22366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:27.679812 2026] [core:error] [pid 3197098:tid 3197098] [client 57.141.0.67:22366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:28.259119 2026] [security2:error] [pid 3197054:tid 3197054] [client 156.59.198.135:11012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_rBPy-YUNdZQs_R_oPgAAAC8"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:28.832275 2026] [security2:error] [pid 3199023:tid 3199023] [client 43.157.38.131:58928] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams_rFROeq9lyr0oLV3-qQAAABU"], referer: http://www.banskotransfer.com
[Thu Jul 30 13:12:29.564325 2026] [security2:error] [pid 3198246:tid 3198246] [client 43.157.38.131:43178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams_rSUl1200r41wcKXYnQAAABg"], referer: http://www.banskoexpress.com
[Thu Jul 30 13:12:29.910261 2026] [security2:error] [pid 3197054:tid 3197054] [client 156.59.198.136:46958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_rRPy-YUNdZQs_R_oPwAAAC8"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:29.962631 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:43556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:29.962657 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:30.021034 2026] [ssl:error] [pid 3190436:tid 3190436] (EAI 2)Name or service not known: [client 144.76.19.72:43558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:30.021092 2026] [ssl:error] [pid 3190436:tid 3190436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:31.373725 2026] [ssl:error] [pid 3198984:tid 3198984] (70014)End of file found: [client 216.73.216.199:1113] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:31.423577 2026] [security2:error] [pid 3174653:tid 3174653] [client 156.59.198.136:59752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_r8eOSVrY1GjpPqHUXgAAAAU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:31.687373 2026] [lsapi:warn] [pid 3189203:tid 3189203] [client 216.73.216.199:2987] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 13:12:31.687403 2026] [lsapi:error] [pid 3189203:tid 3189203] [client 216.73.216.199:2987] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/scripts/cleanphpsessions.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 13:12:32.495400 2026] [core:error] [pid 3198246:tid 3198246] (13)Permission denied: [client 216.73.216.199:25409] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/align
[Thu Jul 30 13:12:32.615728 2026] [authz_core:error] [pid 3199025:tid 3199025] [client 57.141.0.59:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:32.616379 2026] [authz_core:error] [pid 3199025:tid 3199025] [client 57.141.0.59:35466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:32.842503 2026] [lsapi:warn] [pid 3195535:tid 3195535] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:32.922293 2026] [security2:error] [pid 3189203:tid 3189203] [client 156.59.198.136:62958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_sBQ-se5M-hW3ZGnJQAAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:33.077632 2026] [ssl:error] [pid 3190436:tid 3190436] (EAI 2)Name or service not known: [client 144.76.19.72:43562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:33.077682 2026] [ssl:error] [pid 3190436:tid 3190436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:33.139452 2026] [ssl:error] [pid 3195596:tid 3195596] (EAI 2)Name or service not known: [client 144.76.19.72:43568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:33.139503 2026] [ssl:error] [pid 3195596:tid 3195596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:33.829888 2026] [ssl:error] [pid 3198246:tid 3198246] (70014)End of file found: [client 216.73.216.199:25409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:34.101692 2026] [core:error] [pid 3197097:tid 3197097] [client 66.249.66.167:37123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:34.101716 2026] [core:error] [pid 3197097:tid 3197097] [client 66.249.66.167:37123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:34.315672 2026] [security2:error] [pid 3199415:tid 3199415] [client 156.59.198.136:17472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_ssIbLHEkEou2Dmu9-gAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:35.357203 2026] [ssl:error] [pid 3190401:tid 3190401] (70014)End of file found: [client 216.73.216.199:7155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:35.953304 2026] [security2:error] [pid 3199022:tid 3199022] [client 156.59.198.136:20248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_s3TeZU6c3OREV2XK7AAAABQ"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:36.194974 2026] [ssl:error] [pid 3158357:tid 3158357] (EAI 2)Name or service not known: [client 144.76.19.72:43570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:36.195009 2026] [ssl:error] [pid 3158357:tid 3158357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:36.248574 2026] [ssl:error] [pid 3191711:tid 3191711] (EAI 2)Name or service not known: [client 144.76.19.72:43580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:36.248612 2026] [ssl:error] [pid 3191711:tid 3191711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:37.216107 2026] [ssl:error] [pid 3198299:tid 3198299] (70014)End of file found: [client 216.73.216.199:42946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:37.620396 2026] [security2:error] [pid 3199415:tid 3199415] [client 156.59.198.136:48494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_tcIbLHEkEou2Dmu9-wAAAAA"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:38.139501 2026] [lsapi:warn] [pid 3193656:tid 3193656] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:39.141466 2026] [security2:error] [pid 3193724:tid 3193724] [client 156.59.198.135:32720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_t6h5HJpupVcK4HXv3QAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:39.241561 2026] [ssl:error] [pid 3195592:tid 3195592] (70014)End of file found: [client 216.73.216.199:27084] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:39.309710 2026] [ssl:error] [pid 3199022:tid 3199022] (EAI 2)Name or service not known: [client 144.76.19.72:43594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:39.309759 2026] [ssl:error] [pid 3199022:tid 3199022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:39.368144 2026] [ssl:error] [pid 3193656:tid 3193656] (EAI 2)Name or service not known: [client 144.76.19.72:43602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:39.368182 2026] [ssl:error] [pid 3193656:tid 3193656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:40.560050 2026] [security2:error] [pid 3189203:tid 3189203] [client 156.59.198.136:27122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_uBQ-se5M-hW3ZGnJRQAAAB0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:40.873802 2026] [ssl:error] [pid 3198300:tid 3198300] (70014)End of file found: [client 216.73.216.199:5046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:41.287908 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 57.141.0.3:40792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:41.288632 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 57.141.0.3:40792] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:41.985941 2026] [security2:error] [pid 3193656:tid 3193656] [client 156.59.198.135:62788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_uQNXe4fDjGrphB6xkgAAACI"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:42.427545 2026] [ssl:error] [pid 3197103:tid 3197103] (EAI 2)Name or service not known: [client 144.76.19.72:49456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:42.427583 2026] [ssl:error] [pid 3197103:tid 3197103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:42.482749 2026] [ssl:error] [pid 3193724:tid 3193724] (EAI 2)Name or service not known: [client 144.76.19.72:49460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:42.482788 2026] [ssl:error] [pid 3193724:tid 3193724] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:42.988373 2026] [security2:error] [pid 3199022:tid 3199022] [client 185.191.171.18:31838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/cherry-pie-filling-buttercream-frosting"] [unique_id "ams_unTeZU6c3OREV2XK7wAAABQ"]
[Thu Jul 30 13:12:43.615243 2026] [ssl:error] [pid 3194994:tid 3194994] (70014)End of file found: [client 216.73.216.199:62640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:43.700220 2026] [security2:error] [pid 3198299:tid 3198299] [client 156.59.198.135:10788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_u2MuIXpJV_w3Y67f1QAAABw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:44.134152 2026] [cgi:error] [pid 3197911:tid 3197911] [client 20.9.4.9:25298] AH02812: stderr from /home/eznoyveg/public_html/michael-boffey.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:12:45.264280 2026] [security2:error] [pid 3197053:tid 3197053] [client 156.59.198.136:54988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_vXnCRx0Ez5UNhv2C-wAAAC4"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:45.540716 2026] [ssl:error] [pid 3193723:tid 3193723] (EAI 2)Name or service not known: [client 144.76.19.72:49476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:45.540746 2026] [ssl:error] [pid 3193723:tid 3193723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:45.594465 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:49488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:45.594501 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:46.649112 2026] [security2:error] [pid 3193588:tid 3193588] [client 156.59.198.135:32248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_vimZenAB24c3LXCLkAAAABs"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:46.769629 2026] [core:error] [pid 3174653:tid 3174653] [client 66.249.66.3:36071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:46.769656 2026] [core:error] [pid 3174653:tid 3174653] [client 66.249.66.3:36071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:47.251792 2026] [security2:error] [pid 3183750:tid 3183750] [client 185.191.171.6:16978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6691.0.html"] [unique_id "ams_v3N9HAqtQyT17zy41wAAACQ"]
[Thu Jul 30 13:12:47.640698 2026] [security2:error] [pid 3181634:tid 3181634] [client 216.73.216.199:60109] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_test_data_timezone.sql"] [unique_id "ams_v77ewYShIj04H6njyQAAAAc"]
[Thu Jul 30 13:12:47.640940 2026] [security2:error] [pid 3181634:tid 3181634] [client 216.73.216.199:60109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_test_data_timezone.sql"] [unique_id "ams_v77ewYShIj04H6njyQAAAAc"]
[Thu Jul 30 13:12:47.641148 2026] [security2:error] [pid 3181634:tid 3181634] [client 216.73.216.199:60109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_test_data_timezone.sql"] [unique_id "ams_v77ewYShIj04H6njyQAAAAc"]
[Thu Jul 30 13:12:48.133251 2026] [authz_core:error] [pid 3183615:tid 3183615] [client 57.141.0.9:62766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:48.133885 2026] [authz_core:error] [pid 3183615:tid 3183615] [client 57.141.0.9:62766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:48.205235 2026] [security2:error] [pid 3198984:tid 3198984] [client 156.59.198.135:36318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_wE9r1BFchwy1o3EL8wAAAA4"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:48.543976 2026] [core:error] [pid 3181634:tid 3181634] (13)Permission denied: [client 216.73.216.199:60109] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_balloon/sections/__bug_table
[Thu Jul 30 13:12:48.649196 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:49498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:48.649231 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:48.693373 2026] [lsapi:warn] [pid 3194789:tid 3194789] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:48.703933 2026] [ssl:error] [pid 3183615:tid 3183615] (EAI 2)Name or service not known: [client 144.76.19.72:49512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:48.703953 2026] [ssl:error] [pid 3183615:tid 3183615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:49.564011 2026] [security2:error] [pid 3183615:tid 3183615] [client 156.59.198.135:46176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_wcja7znT4GqNutZ7yQAAACE"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:49.748610 2026] [ssl:error] [pid 3181634:tid 3181634] (70014)End of file found: [client 216.73.216.199:60109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:50.131742 2026] [core:error] [pid 3198952:tid 3198952] [client 66.249.64.170:39423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:50.131768 2026] [core:error] [pid 3198952:tid 3198952] [client 66.249.64.170:39423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:50.888098 2026] [security2:error] [pid 3197006:tid 3197006] [client 156.59.198.135:45386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_wppELHebWr9VulXfFQAAAB4"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:51.252646 2026] [core:error] [pid 3179933:tid 3179933] (13)Permission denied: [client 216.73.216.199:46996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_tree_mark/cpu_partial
[Thu Jul 30 13:12:51.779947 2026] [ssl:error] [pid 3194994:tid 3194994] (EAI 2)Name or service not known: [client 144.76.19.72:59732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:51.779984 2026] [ssl:error] [pid 3194994:tid 3194994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:51.835596 2026] [ssl:error] [pid 3191711:tid 3191711] (EAI 2)Name or service not known: [client 144.76.19.72:59742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:51.835626 2026] [ssl:error] [pid 3191711:tid 3191711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:52.159269 2026] [ssl:error] [pid 3179933:tid 3179933] (70014)End of file found: [client 216.73.216.199:46996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:52.177367 2026] [security2:error] [pid 3183750:tid 3183750] [client 156.59.198.135:39950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_xHN9HAqtQyT17zy43wAAACQ"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:52.656316 2026] [core:error] [pid 3195535:tid 3195535] (13)Permission denied: [client 216.73.216.199:49529] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/page_alloc/parameters/shuffle
[Thu Jul 30 13:12:52.765238 2026] [ssl:error] [pid 3195535:tid 3195535] (70014)End of file found: [client 216.73.216.199:49529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:53.469260 2026] [authz_core:error] [pid 3198299:tid 3198299] [client 57.141.0.43:31764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:53.469889 2026] [authz_core:error] [pid 3198299:tid 3198299] [client 57.141.0.43:31764] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:53.696198 2026] [security2:error] [pid 3200038:tid 3200038] [client 156.59.198.135:38022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_xWxpJ_00z9jIp8BW0AAAABk"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:54.891534 2026] [ssl:error] [pid 3197006:tid 3197006] (EAI 2)Name or service not known: [client 144.76.19.72:59754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:54.891578 2026] [ssl:error] [pid 3197006:tid 3197006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:54.946335 2026] [ssl:error] [pid 3198299:tid 3198299] (EAI 2)Name or service not known: [client 144.76.19.72:59768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:54.946377 2026] [ssl:error] [pid 3198299:tid 3198299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:55.564456 2026] [security2:error] [pid 3190401:tid 3190401] [client 156.59.198.135:55084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_x3J7n1omRItjD5f_cQAAAAE"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:56.986461 2026] [lsapi:warn] [pid 3197053:tid 3197053] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:56.987089 2026] [ssl:error] [pid 3200169:tid 3200169] (70014)End of file found: [client 216.73.216.199:18967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:57.077208 2026] [security2:error] [pid 3194994:tid 3194994] [client 156.59.198.136:54292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_yb_gZJ56cLTSIJXVpAAAAAw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:57.815258 2026] [ssl:error] [pid 3181634:tid 3181634] (70014)End of file found: [client 216.73.216.199:57604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:58.016787 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:59782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:58.016819 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:58.072741 2026] [ssl:error] [pid 3200515:tid 3200515] (EAI 2)Name or service not known: [client 144.76.19.72:59784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:12:58.072774 2026] [ssl:error] [pid 3200515:tid 3200515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:12:58.378052 2026] [authz_core:error] [pid 3198952:tid 3198952] [client 57.141.0.2:22122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:12:58.378686 2026] [authz_core:error] [pid 3198952:tid 3198952] [client 57.141.0.2:22122] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:12:58.521632 2026] [ssl:error] [pid 3167187:tid 3167187] (70014)End of file found: [client 216.73.216.199:57746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:12:58.755147 2026] [security2:error] [pid 3193724:tid 3193724] [client 156.59.198.135:37882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_yqh5HJpupVcK4HXv5AAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:12:59.150376 2026] [lsapi:warn] [pid 3200515:tid 3200515] [client 2a01:9700:4d04:e300:4047:c35d:65d5:e8df:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:12:59.456462 2026] [core:error] [pid 3197098:tid 3197098] [client 66.249.66.3:53213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:12:59.456497 2026] [core:error] [pid 3197098:tid 3197098] [client 66.249.66.3:53213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:00.080045 2026] [security2:error] [pid 3198246:tid 3198246] [client 156.59.198.135:60716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_zCUl1200r41wcKXYqQAAABg"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:00.345425 2026] [ssl:error] [pid 3198984:tid 3198984] (70014)End of file found: [client 216.73.216.199:14884] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:01.127880 2026] [ssl:error] [pid 3197911:tid 3197911] (EAI 2)Name or service not known: [client 144.76.19.72:63396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:01.127915 2026] [ssl:error] [pid 3197911:tid 3197911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:01.180786 2026] [ssl:error] [pid 3200515:tid 3200515] (EAI 2)Name or service not known: [client 144.76.19.72:63400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:01.180811 2026] [ssl:error] [pid 3200515:tid 3200515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:01.432341 2026] [security2:error] [pid 3197098:tid 3197098] [client 156.59.198.135:61108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_zYR6tTpFtp9ozUNHMQAAADc"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:02.987764 2026] [security2:error] [pid 3193723:tid 3193723] [client 156.59.198.136:35820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_zvNsG-qGtwkaYZiMgAAAACY"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:03.291457 2026] [ssl:error] [pid 3200038:tid 3200038] (70014)End of file found: [client 216.73.216.199:58092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:03.659558 2026] [autoindex:error] [pid 3183750:tid 3183750] [client 172.202.98.196:42601] AH01276: Cannot serve directory /home/quantumc/abcpress.com.mt/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 13:13:04.235109 2026] [ssl:error] [pid 3199025:tid 3199025] (EAI 2)Name or service not known: [client 144.76.19.72:63414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:04.235153 2026] [ssl:error] [pid 3199025:tid 3199025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:04.291204 2026] [ssl:error] [pid 3167187:tid 3167187] (EAI 2)Name or service not known: [client 144.76.19.72:63418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:04.291227 2026] [ssl:error] [pid 3167187:tid 3167187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:04.310299 2026] [security2:error] [pid 3172022:tid 3172022] [client 156.59.198.135:20778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_0LyUccp_T8FAQyjQbAAAAEQ"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:04.313132 2026] [ssl:error] [pid 3197053:tid 3197053] (70014)End of file found: [client 216.73.216.199:33383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:04.715532 2026] [lsapi:warn] [pid 3193588:tid 3193588] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:13:05.652411 2026] [security2:error] [pid 3172022:tid 3172022] [client 156.59.198.135:18854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_0byUccp_T8FAQyjQbwAAAEQ"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:05.812575 2026] [ssl:error] [pid 3193588:tid 3193588] (70014)End of file found: [client 216.73.216.199:26701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:06.706558 2026] [security2:error] [pid 3200037:tid 3200037] [client 43.157.188.74:56682] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams_0rcgkWdByV_D7OOdpwAAABM"], referer: http://www.banskoexpresstransfers.com
[Thu Jul 30 13:13:06.857803 2026] [cgi:error] [pid 3183750:tid 3183750] [client 172.202.98.196:42601] AH02812: stderr from /home/quantumc/abcpress.com.mt/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:13:07.169963 2026] [security2:error] [pid 3195473:tid 3195473] [client 156.59.198.136:46554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_0x_x3WAqsboqreIcugAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:07.346505 2026] [ssl:error] [pid 3194994:tid 3194994] (EAI 2)Name or service not known: [client 144.76.19.72:63430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:07.346530 2026] [ssl:error] [pid 3194994:tid 3194994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:07.399582 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:63446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:07.399606 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:07.741178 2026] [authz_core:error] [pid 3189426:tid 3189426] [client 57.141.0.40:24506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:13:07.741796 2026] [authz_core:error] [pid 3189426:tid 3189426] [client 57.141.0.40:24506] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:13:08.384894 2026] [security2:error] [pid 3193723:tid 3193723] [client 43.157.188.74:58466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "ams_1PNsG-qGtwkaYZiMhgAAACY"], referer: http://www.banskoexpress.com
[Thu Jul 30 13:13:08.772494 2026] [security2:error] [pid 3197054:tid 3197054] [client 156.59.198.136:56190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_1BPy-YUNdZQs_R_oUgAAAC8"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:10.349799 2026] [security2:error] [pid 3198055:tid 3198055] [client 156.59.198.135:45482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_1l2S3lbaO5qvvbdTeQAAABc"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:10.458642 2026] [ssl:error] [pid 3200836:tid 3200836] (EAI 2)Name or service not known: [client 144.76.19.72:46784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:10.458676 2026] [ssl:error] [pid 3200836:tid 3200836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:10.511160 2026] [ssl:error] [pid 3200836:tid 3200836] (EAI 2)Name or service not known: [client 144.76.19.72:46786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:10.511187 2026] [ssl:error] [pid 3200836:tid 3200836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:10.653352 2026] [ssl:error] [pid 3198300:tid 3198300] (70014)End of file found: [client 216.73.216.199:50556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:11.644005 2026] [security2:error] [pid 3189426:tid 3189426] [client 156.59.198.135:56070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_1yc2xNco5fHJDsmWdAAAACc"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:11.864394 2026] [ssl:error] [pid 3193588:tid 3193588] (70014)End of file found: [client 216.73.216.199:46102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:12.155229 2026] [core:error] [pid 3200895:tid 3200895] [client 66.249.66.68:44302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:12.155258 2026] [core:error] [pid 3200895:tid 3200895] [client 66.249.66.68:44302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:12.458866 2026] [core:error] [pid 3197911:tid 3197911] (13)Permission denied: [client 216.73.216.199:10804] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/modify_featurelist
[Thu Jul 30 13:13:12.756782 2026] [ssl:error] [pid 3197911:tid 3197911] (70014)End of file found: [client 216.73.216.199:10804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:13.147154 2026] [security2:error] [pid 3200896:tid 3200896] [client 156.59.198.135:51286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_2W39U_IqkN_haUn1hwAAACo"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:13.461123 2026] [core:error] [pid 3199983:tid 3199983] [client 57.141.0.7:36542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:13.461150 2026] [core:error] [pid 3199983:tid 3199983] [client 57.141.0.7:36542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:13.566034 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:46788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:13.566063 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:13.622736 2026] [ssl:error] [pid 3189203:tid 3189203] (EAI 2)Name or service not known: [client 144.76.19.72:46792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:13.622776 2026] [ssl:error] [pid 3189203:tid 3189203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:14.448374 2026] [security2:error] [pid 3174653:tid 3174653] [client 156.59.198.136:33780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_2seOSVrY1GjpPqHUdQAAAAU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:15.362680 2026] [authz_core:error] [pid 3199415:tid 3199415] [client 20.193.250.173:64585] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 13:13:15.951330 2026] [security2:error] [pid 3195473:tid 3195473] [client 156.59.198.135:58082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_2x_x3WAqsboqreIcwgAAAA0"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:16.202146 2026] [lsapi:warn] [pid 3198952:tid 3198952] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:13:16.677500 2026] [ssl:error] [pid 3199415:tid 3199415] (70014)End of file found: [client 216.73.216.199:42750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:16.678613 2026] [ssl:error] [pid 3194789:tid 3194789] (EAI 2)Name or service not known: [client 144.76.19.72:46804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:16.678634 2026] [ssl:error] [pid 3194789:tid 3194789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:16.731228 2026] [ssl:error] [pid 3198246:tid 3198246] (EAI 2)Name or service not known: [client 144.76.19.72:46810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:16.731265 2026] [ssl:error] [pid 3198246:tid 3198246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:17.304754 2026] [authz_core:error] [pid 3198246:tid 3198246] [client 66.249.66.35:45424] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:13:17.307430 2026] [authz_core:error] [pid 3198246:tid 3198246] [client 66.249.66.35:45424] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:13:17.572489 2026] [security2:error] [pid 3200169:tid 3200169] [client 156.59.198.136:55552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_3fhfOVJyOuSA_bvEEgAAABo"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:17.581224 2026] [ssl:error] [pid 3193656:tid 3193656] (70014)End of file found: [client 216.73.216.199:45085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:18.500441 2026] [ssl:error] [pid 3198984:tid 3198984] (70014)End of file found: [client 216.73.216.199:2966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:19.111706 2026] [security2:error] [pid 3193724:tid 3193724] [client 156.59.198.135:43032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_36h5HJpupVcK4HXv8AAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:19.786269 2026] [ssl:error] [pid 3197911:tid 3197911] (EAI 2)Name or service not known: [client 144.76.19.72:52936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:19.786295 2026] [ssl:error] [pid 3197911:tid 3197911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:19.873717 2026] [ssl:error] [pid 3193724:tid 3193724] (EAI 2)Name or service not known: [client 144.76.19.72:52942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:19.873740 2026] [ssl:error] [pid 3193724:tid 3193724] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:20.423107 2026] [security2:error] [pid 3193724:tid 3193724] [client 156.59.198.136:23016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_4Kh5HJpupVcK4HXv8gAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:20.738820 2026] [security2:error] [pid 3193588:tid 3193588] [client 43.135.139.165:36334] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "ams_4CmZenAB24c3LXCLowAAABs"], referer: http://somethingweb.co.uk
[Thu Jul 30 13:13:21.523973 2026] [security2:error] [pid 3197911:tid 3197911] [client 162.14.114.97:49032] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.co.uk"] [uri "/"] [unique_id "ams_4YBUnH6qWQ9zWzvfcAAAABI"]
[Thu Jul 30 13:13:21.778162 2026] [security2:error] [pid 3198299:tid 3198299] [client 156.59.198.135:47924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_4WMuIXpJV_w3Y67f5AAAABw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:22.257824 2026] [security2:error] [pid 3199415:tid 3199415] [client 43.135.139.165:45240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "ams_4sIbLHEkEou2Dmu-EAAAAAA"], referer: http://mwdesign.me.uk
[Thu Jul 30 13:13:22.969558 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:52952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:22.969620 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:23.022123 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:52968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:23.022152 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:23.256910 2026] [security2:error] [pid 3198299:tid 3198299] [client 156.59.198.135:35194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_42MuIXpJV_w3Y67f5QAAABw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:23.966287 2026] [ssl:error] [pid 3193724:tid 3193724] (70014)End of file found: [client 216.73.216.199:45774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:24.556037 2026] [security2:error] [pid 3198984:tid 3198984] [client 8.211.0.65:18139] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_5E9r1BFchwy1o3EMVAAAAA4"]
[Thu Jul 30 13:13:24.556099 2026] [security2:error] [pid 3198984:tid 3198984] [client 8.211.0.65:18139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_5E9r1BFchwy1o3EMVAAAAA4"]
[Thu Jul 30 13:13:24.556352 2026] [security2:error] [pid 3198984:tid 3198984] [client 8.211.0.65:18139] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_5E9r1BFchwy1o3EMVAAAAA4"]
[Thu Jul 30 13:13:24.781204 2026] [security2:error] [pid 3198952:tid 3198952] [client 156.59.198.135:44838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_5LjjyL1_VirXC21ErQAAAAk"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:25.398356 2026] [core:error] [pid 3199415:tid 3199415] [client 66.249.66.167:35057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:25.398391 2026] [core:error] [pid 3199415:tid 3199415] [client 66.249.66.167:35057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:25.403434 2026] [core:error] [pid 3175860:tid 3175860] [client 66.249.66.40:50143] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:25.403458 2026] [core:error] [pid 3175860:tid 3175860] [client 66.249.66.40:50143] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:25.607230 2026] [lsapi:warn] [pid 3181634:tid 3181634] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:13:25.782457 2026] [ssl:error] [pid 3198299:tid 3198299] (70014)End of file found: [client 216.73.216.199:4248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:26.029248 2026] [security2:error] [pid 3197054:tid 3197054] [client 114.119.158.38:39261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~104,17/request_format~html"] [unique_id "ams_5hPy-YUNdZQs_R_oxQAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~104,17/request_format~html
[Thu Jul 30 13:13:26.074715 2026] [ssl:error] [pid 3198246:tid 3198246] (EAI 2)Name or service not known: [client 144.76.19.72:52982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:26.074745 2026] [ssl:error] [pid 3198246:tid 3198246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:26.086149 2026] [security2:error] [pid 3172022:tid 3172022] [client 156.59.198.135:54474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_5ryUccp_T8FAQyjQhQAAAEQ"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:26.130620 2026] [ssl:error] [pid 3195596:tid 3195596] (EAI 2)Name or service not known: [client 144.76.19.72:52990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:26.130647 2026] [ssl:error] [pid 3195596:tid 3195596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:26.391450 2026] [security2:error] [pid 3200836:tid 3200836] [client 8.209.209.200:20801] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_5udvWxx-MPOGmxu5CgAAAA8"]
[Thu Jul 30 13:13:26.391519 2026] [security2:error] [pid 3200836:tid 3200836] [client 8.209.209.200:20801] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_5udvWxx-MPOGmxu5CgAAAA8"]
[Thu Jul 30 13:13:26.391787 2026] [security2:error] [pid 3200836:tid 3200836] [client 8.209.209.200:20801] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_5udvWxx-MPOGmxu5CgAAAA8"]
[Thu Jul 30 13:13:26.415990 2026] [core:error] [pid 3195473:tid 3195473] (13)Permission denied: [client 216.73.216.199:10204] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-2k/align
[Thu Jul 30 13:13:27.229207 2026] [security2:error] [pid 3181634:tid 3181634] [client 114.119.158.38:39277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~104,17/request_format~html"] [unique_id "ams_577ewYShIj04H6nj8AAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577145600/cat_ids~104,17/request_format~html
[Thu Jul 30 13:13:27.575030 2026] [security2:error] [pid 3197054:tid 3197054] [client 156.59.198.135:49008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_5xPy-YUNdZQs_R_oxgAAAC8"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:27.678300 2026] [authz_core:error] [pid 3198952:tid 3198952] [client 20.193.250.173:57527] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 13:13:27.931573 2026] [ssl:error] [pid 3195473:tid 3195473] (70014)End of file found: [client 216.73.216.199:10204] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:29.071702 2026] [security2:error] [pid 3179933:tid 3179933] [client 156.59.198.135:59856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_6QA_NlXIzZQDRqIpRQAAADY"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:29.189744 2026] [ssl:error] [pid 3199023:tid 3199023] (EAI 2)Name or service not known: [client 144.76.19.72:52998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:29.189783 2026] [ssl:error] [pid 3199023:tid 3199023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:29.245995 2026] [ssl:error] [pid 3201705:tid 3201705] (EAI 2)Name or service not known: [client 144.76.19.72:53000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:29.246028 2026] [ssl:error] [pid 3201705:tid 3201705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:29.797563 2026] [cgi:error] [pid 3198952:tid 3198952] [client 216.73.216.199:53468] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/scripts/custom_backup_destination.pl.sample: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:13:29.797605 2026] [cgi:error] [pid 3198952:tid 3198952] [client 216.73.216.199:53468] End of script output before headers: custom_backup_destination.pl.sample
[Thu Jul 30 13:13:29.924580 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 66.249.66.33:41844] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:13:29.927270 2026] [authz_core:error] [pid 3193724:tid 3193724] [client 66.249.66.33:41844] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:13:30.097315 2026] [security2:error] [pid 3199023:tid 3199023] [client 8.209.209.200:11189] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_6lROeq9lyr0oLV3_GQAAABU"]
[Thu Jul 30 13:13:30.097363 2026] [security2:error] [pid 3199023:tid 3199023] [client 8.209.209.200:11189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "ams_6lROeq9lyr0oLV3_GQAAABU"]
[Thu Jul 30 13:13:30.097641 2026] [security2:error] [pid 3199023:tid 3199023] [client 8.209.209.200:11189] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "ams_6lROeq9lyr0oLV3_GQAAABU"]
[Thu Jul 30 13:13:30.750035 2026] [security2:error] [pid 3201705:tid 3201705] [client 156.59.198.136:44222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_6oC7QdSj8uWcY8fmKgAAAAM"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:30.963376 2026] [ssl:error] [pid 3183615:tid 3183615] (70014)End of file found: [client 216.73.216.199:46966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:31.482219 2026] [ssl:error] [pid 3200895:tid 3200895] (70014)End of file found: [client 216.73.216.199:13761] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:32.111403 2026] [security2:error] [pid 3197097:tid 3197097] [client 156.59.198.136:15520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_7D3iWP3Zfhb0wknJ3QAAADU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:32.303057 2026] [ssl:error] [pid 3197053:tid 3197053] (EAI 2)Name or service not known: [client 144.76.19.72:49414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:32.303112 2026] [ssl:error] [pid 3197053:tid 3197053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:32.359865 2026] [ssl:error] [pid 3198299:tid 3198299] (EAI 2)Name or service not known: [client 144.76.19.72:49418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:32.359895 2026] [ssl:error] [pid 3198299:tid 3198299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:33.611311 2026] [security2:error] [pid 3198984:tid 3198984] [client 156.59.198.136:10070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_7U9r1BFchwy1o3EMWQAAAA4"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:34.004435 2026] [ssl:error] [pid 3195594:tid 3195594] (70014)End of file found: [client 216.73.216.199:16026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:34.516691 2026] [ssl:error] [pid 3197098:tid 3197098] (70014)End of file found: [client 216.73.216.199:28309] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:34.948706 2026] [security2:error] [pid 3200169:tid 3200169] [client 156.59.198.136:16602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_7vhfOVJyOuSA_bvEFwAAABo"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:35.415477 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:49420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:35.415519 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:35.468409 2026] [ssl:error] [pid 3194752:tid 3194752] (EAI 2)Name or service not known: [client 144.76.19.72:49432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:35.468444 2026] [ssl:error] [pid 3194752:tid 3194752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:35.812973 2026] [core:error] [pid 3193723:tid 3193723] (13)Permission denied: [client 216.73.216.199:55188] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/physical_node/remove
[Thu Jul 30 13:13:36.016339 2026] [ssl:error] [pid 3193723:tid 3193723] (70014)End of file found: [client 216.73.216.199:55188] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:36.476492 2026] [ssl:error] [pid 3200169:tid 3200169] (70014)End of file found: [client 216.73.216.199:3087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:36.528243 2026] [security2:error] [pid 3202415:tid 3202415] [client 156.59.198.135:44284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_8DgyG0CGHa5aEovNnQAAABM"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:36.736172 2026] [authz_core:error] [pid 3181634:tid 3181634] [client 57.141.0.8:48568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:13:36.736800 2026] [authz_core:error] [pid 3181634:tid 3181634] [client 57.141.0.8:48568] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:13:36.847713 2026] [ssl:error] [pid 3198300:tid 3198300] (70014)End of file found: [client 216.73.216.199:35002] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:37.168160 2026] [lsapi:warn] [pid 3199983:tid 3199983] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:13:38.323344 2026] [security2:error] [pid 3193724:tid 3193724] [client 156.59.198.136:32482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_8qh5HJpupVcK4HXv_QAAACw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:38.522296 2026] [ssl:error] [pid 3198246:tid 3198246] (EAI 2)Name or service not known: [client 144.76.19.72:49440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:38.522331 2026] [ssl:error] [pid 3198246:tid 3198246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:38.575093 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:49458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:38.575132 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:39.792054 2026] [security2:error] [pid 3199023:tid 3199023] [client 156.59.198.136:60440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_81ROeq9lyr0oLV3_HAAAABU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:41.291607 2026] [security2:error] [pid 3200895:tid 3200895] [client 156.59.198.135:47598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_9WjfvDpyX0zNgJKRawAAACU"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:41.598338 2026] [ssl:error] [pid 3183615:tid 3183615] (70014)End of file found: [client 216.73.216.199:54060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:41.631628 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:54266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:41.631656 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:41.687938 2026] [ssl:error] [pid 3199023:tid 3199023] (EAI 2)Name or service not known: [client 144.76.19.72:54276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:41.687971 2026] [ssl:error] [pid 3199023:tid 3199023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:41.880629 2026] [authz_core:error] [pid 3194789:tid 3194789] [client 20.193.250.173:50499] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 13:13:42.097190 2026] [ssl:error] [pid 3193723:tid 3193723] (70014)End of file found: [client 216.73.216.199:31531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:42.813030 2026] [security2:error] [pid 3172022:tid 3172022] [client 156.59.198.135:65140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_9ryUccp_T8FAQyjQ2QAAAEQ"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:43.139780 2026] [ssl:error] [pid 3174653:tid 3174653] (70014)End of file found: [client 216.73.216.199:18930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:43.218704 2026] [core:error] [pid 3181349:tid 3181349] [client 57.141.0.5:53630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:43.218735 2026] [core:error] [pid 3181349:tid 3181349] [client 57.141.0.5:53630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:43.732368 2026] [security2:error] [pid 3181349:tid 3181349] [client 85.208.96.206:36360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/vesteria-reset-scroll"] [unique_id "ams_93jhfvtirjIMffKDLAAAAAI"]
[Thu Jul 30 13:13:44.508806 2026] [security2:error] [pid 3202857:tid 3202857] [client 156.59.198.135:21410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_-O6ljn-GhRlwYWLO6wAAABk"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:44.744223 2026] [ssl:error] [pid 3197911:tid 3197911] (EAI 2)Name or service not known: [client 144.76.19.72:54292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:44.744248 2026] [ssl:error] [pid 3197911:tid 3197911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:44.799046 2026] [ssl:error] [pid 3199025:tid 3199025] (EAI 2)Name or service not known: [client 144.76.19.72:54306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:44.799087 2026] [ssl:error] [pid 3199025:tid 3199025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:46.030212 2026] [security2:error] [pid 3197911:tid 3197911] [client 156.59.198.135:41266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_-oBUnH6qWQ9zWzvffAAAABI"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:46.991813 2026] [ssl:error] [pid 3195594:tid 3195594] (70014)End of file found: [client 216.73.216.199:10737] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:47.444028 2026] [security2:error] [pid 3200896:tid 3200896] [client 156.59.198.135:49632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams_-239U_IqkN_haUn1lQAAACo"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:47.449697 2026] [lsapi:warn] [pid 3193656:tid 3193656] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:13:47.599622 2026] [ssl:error] [pid 3181634:tid 3181634] (70014)End of file found: [client 216.73.216.199:51838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:47.855380 2026] [ssl:error] [pid 3200895:tid 3200895] (EAI 2)Name or service not known: [client 144.76.19.72:54318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:47.855424 2026] [ssl:error] [pid 3200895:tid 3200895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:47.913515 2026] [ssl:error] [pid 3193723:tid 3193723] (EAI 2)Name or service not known: [client 144.76.19.72:54334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:47.913550 2026] [ssl:error] [pid 3193723:tid 3193723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:48.599633 2026] [ssl:error] [pid 3202857:tid 3202857] (70014)End of file found: [client 216.73.216.199:20304] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:48.938479 2026] [security2:error] [pid 3200896:tid 3200896] [client 156.59.198.136:13916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams__G39U_IqkN_haUn1lgAAACo"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:50.227017 2026] [security2:error] [pid 3197103:tid 3197103] [client 156.59.198.136:23714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams__iPOV_U2FSW7886YVwAAADw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:50.967307 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:40336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:50.967340 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:51.024952 2026] [ssl:error] [pid 3175860:tid 3175860] (EAI 2)Name or service not known: [client 144.76.19.72:40352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:51.024986 2026] [ssl:error] [pid 3175860:tid 3175860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:51.779603 2026] [security2:error] [pid 3197103:tid 3197103] [client 156.59.198.135:60248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "ams__yPOV_U2FSW7886YWAAAADw"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:52.835728 2026] [ssl:error] [pid 3202364:tid 3202364] (70014)End of file found: [client 216.73.216.199:10545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:53.264005 2026] [security2:error] [pid 3201705:tid 3201705] [client 156.59.198.135:19288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "amtAAYC7QdSj8uWcY8fmMAAAAAM"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:53.435329 2026] [ssl:error] [pid 3195535:tid 3195535] (70014)End of file found: [client 216.73.216.199:47533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:54.097482 2026] [ssl:error] [pid 3197006:tid 3197006] (EAI 2)Name or service not known: [client 144.76.19.72:40360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:54.097524 2026] [ssl:error] [pid 3197006:tid 3197006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:54.109996 2026] [ssl:error] [pid 3175860:tid 3175860] (EAI 2)Name or service not known: [client 34.96.38.76:50321] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:54.110021 2026] [ssl:error] [pid 3175860:tid 3175860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:54.151855 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 144.76.19.72:40366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:54.151889 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:54.227657 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 34.96.38.76:23878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:54.227699 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:54.640716 2026] [ssl:error] [pid 3199021:tid 3199021] (70014)End of file found: [client 216.73.216.199:60100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:54.965667 2026] [security2:error] [pid 3201705:tid 3201705] [client 156.59.198.136:52836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "amtAAoC7QdSj8uWcY8fmMQAAAAM"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:56.406731 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 34.96.38.76:50718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:56.406768 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:56.540530 2026] [security2:error] [pid 3190537:tid 3190537] [client 156.59.198.135:65492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.prosperon.co.uk"] [uri "/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf"] [unique_id "amtABLlLB7ZKCwJeZNFqlAAAADA"], referer: http://www.prosperon.co.uk/assets/brochures/prosperon/AdvancedDashboardsReporting.pdf
[Thu Jul 30 13:13:56.576994 2026] [authz_core:error] [pid 3190401:tid 3190401] [client 20.193.250.173:63418] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 13:13:56.892391 2026] [lsapi:warn] [pid 3189203:tid 3189203] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:13:57.209521 2026] [ssl:error] [pid 3203055:tid 3203055] (EAI 2)Name or service not known: [client 144.76.19.72:40378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:57.209556 2026] [ssl:error] [pid 3203055:tid 3203055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:57.267528 2026] [ssl:error] [pid 3200895:tid 3200895] (EAI 2)Name or service not known: [client 144.76.19.72:40392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:57.267559 2026] [ssl:error] [pid 3200895:tid 3200895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:57.402636 2026] [core:error] [pid 3197103:tid 3197103] [client 57.141.0.17:24318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:57.402664 2026] [core:error] [pid 3197103:tid 3197103] [client 57.141.0.17:24318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:57.530494 2026] [ssl:error] [pid 3199983:tid 3199983] (EAI 2)Name or service not known: [client 34.96.38.76:17027] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:13:57.530535 2026] [ssl:error] [pid 3199983:tid 3199983] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:13:57.981360 2026] [core:error] [pid 3199023:tid 3199023] [client 66.249.66.8:59549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:57.981394 2026] [core:error] [pid 3199023:tid 3199023] [client 66.249.66.8:59549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:13:58.789413 2026] [ssl:error] [pid 3200895:tid 3200895] (70014)End of file found: [client 216.73.216.199:41244] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:59.091874 2026] [ssl:error] [pid 3189203:tid 3189203] (70014)End of file found: [client 216.73.216.199:29454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:13:59.817769 2026] [ssl:error] [pid 3202364:tid 3202364] (70014)End of file found: [client 216.73.216.199:56893] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:00.321087 2026] [ssl:error] [pid 3197097:tid 3197097] (EAI 2)Name or service not known: [client 144.76.19.72:27208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:00.321113 2026] [ssl:error] [pid 3197097:tid 3197097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:00.375494 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:27220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:00.375521 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:00.602106 2026] [security2:error] [pid 3195594:tid 3195594] [client 49.51.245.241:33952] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/"] [unique_id "amtACNwSizrrgYu41c9dzAAAACk"]
[Thu Jul 30 13:14:00.839002 2026] [authz_core:error] [pid 3179933:tid 3179933] [client 66.249.66.35:38698] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:14:00.841676 2026] [authz_core:error] [pid 3179933:tid 3179933] [client 66.249.66.35:38698] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:14:01.442765 2026] [authz_core:error] [pid 3199021:tid 3199021] [client 57.141.0.10:36466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:14:01.443394 2026] [authz_core:error] [pid 3199021:tid 3199021] [client 57.141.0.10:36466] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:14:01.878408 2026] [authz_core:error] [pid 3181634:tid 3181634] [client 57.141.0.39:58240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:14:01.879047 2026] [authz_core:error] [pid 3181634:tid 3181634] [client 57.141.0.39:58240] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:14:02.800540 2026] [security2:error] [pid 3181634:tid 3181634] [client 185.191.171.15:14826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,602.0.html"] [unique_id "amtACr7ewYShIj04H6nj-gAAAAc"]
[Thu Jul 30 13:14:03.431236 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:27234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:03.431264 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:03.483374 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 144.76.19.72:27236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:03.483401 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:04.343323 2026] [ssl:error] [pid 3181634:tid 3181634] (70014)End of file found: [client 216.73.216.199:22956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:04.651907 2026] [core:error] [pid 3198246:tid 3198246] (13)Permission denied: [client 216.73.216.199:26635] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/partial
[Thu Jul 30 13:14:05.372772 2026] [ssl:error] [pid 3198246:tid 3198246] (70014)End of file found: [client 216.73.216.199:26635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:05.629256 2026] [security2:error] [pid 3195594:tid 3195594] [client 43.130.67.6:55828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtADdwSizrrgYu41c9d0AAAACk"], referer: http://banskoexpress.co.uk
[Thu Jul 30 13:14:05.904956 2026] [ssl:error] [pid 3200895:tid 3200895] (70014)End of file found: [client 216.73.216.199:18941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:06.333521 2026] [authz_core:error] [pid 3202364:tid 3202364] [client 20.193.250.173:50903] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 13:14:06.537953 2026] [ssl:error] [pid 3198984:tid 3198984] (EAI 2)Name or service not known: [client 144.76.19.72:27242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:06.537996 2026] [ssl:error] [pid 3198984:tid 3198984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:06.594240 2026] [ssl:error] [pid 3195594:tid 3195594] (EAI 2)Name or service not known: [client 144.76.19.72:27256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:06.594266 2026] [ssl:error] [pid 3195594:tid 3195594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:07.843548 2026] [security2:error] [pid 3197103:tid 3197103] [client 43.130.67.6:43384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtADyPOV_U2FSW7886YXgAAADw"], referer: http://www.banskoexpress.com
[Thu Jul 30 13:14:08.644113 2026] [lsapi:warn] [pid 3183615:tid 3183615] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:09.648737 2026] [ssl:error] [pid 3197103:tid 3197103] (EAI 2)Name or service not known: [client 144.76.19.72:65190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:09.648768 2026] [ssl:error] [pid 3197103:tid 3197103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:09.704477 2026] [ssl:error] [pid 3181634:tid 3181634] (EAI 2)Name or service not known: [client 144.76.19.72:65202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:09.704530 2026] [ssl:error] [pid 3181634:tid 3181634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:10.354735 2026] [ssl:error] [pid 3194994:tid 3194994] (70014)End of file found: [client 216.73.216.199:4892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:10.857576 2026] [ssl:error] [pid 3204025:tid 3204025] (70014)End of file found: [client 216.73.216.199:11777] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:10.958094 2026] [lsapi:warn] [pid 3181634:tid 3181634] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:11.869942 2026] [authz_core:error] [pid 3200169:tid 3200169] [client 94.154.43.179:59972] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/error_log
[Thu Jul 30 13:14:11.919182 2026] [authz_core:error] [pid 3200169:tid 3200169] [client 94.154.43.179:59972] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/php.ini
[Thu Jul 30 13:14:11.986843 2026] [authz_core:error] [pid 3200169:tid 3200169] [client 94.154.43.229:26896] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 13:14:12.762437 2026] [ssl:error] [pid 3199021:tid 3199021] (EAI 2)Name or service not known: [client 144.76.19.72:65210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:12.762476 2026] [ssl:error] [pid 3199021:tid 3199021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:12.819983 2026] [ssl:error] [pid 3199021:tid 3199021] (EAI 2)Name or service not known: [client 144.76.19.72:65224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:12.820007 2026] [ssl:error] [pid 3199021:tid 3199021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:13.474031 2026] [cgi:error] [pid 3192733:tid 3192733] [client 20.100.187.180:48028] AH02811: stderr from /home/aurorav/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:14:13.513279 2026] [authz_core:error] [pid 3204099:tid 3204099] [client 57.141.0.36:27322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:14:13.513905 2026] [authz_core:error] [pid 3204099:tid 3204099] [client 57.141.0.36:27322] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:14:13.744696 2026] [cgi:error] [pid 3192733:tid 3192733] [client 20.100.187.180:48028] AH02811: stderr from /home/aurorav/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:14:15.874991 2026] [ssl:error] [pid 3190537:tid 3190537] (EAI 2)Name or service not known: [client 144.76.19.72:65226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:15.875039 2026] [ssl:error] [pid 3190537:tid 3190537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:15.933006 2026] [ssl:error] [pid 3193588:tid 3193588] (EAI 2)Name or service not known: [client 144.76.19.72:65234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:15.933051 2026] [ssl:error] [pid 3193588:tid 3193588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:17.309611 2026] [ssl:error] [pid 3174653:tid 3174653] (70014)End of file found: [client 216.73.216.199:55384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:17.945170 2026] [lsapi:warn] [pid 3193588:tid 3193588] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:18.102674 2026] [authz_core:error] [pid 3199023:tid 3199023] [client 20.193.250.173:58209] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 13:14:18.184060 2026] [access_compat:error] [pid 3172022:tid 3172022] [client 45.158.164.139:42186] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:14:18.377281 2026] [ssl:error] [pid 3198952:tid 3198952] (70014)End of file found: [client 216.73.216.199:22597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:18.673947 2026] [ssl:error] [pid 3204099:tid 3204099] (70014)End of file found: [client 216.73.216.199:22650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:18.988366 2026] [ssl:error] [pid 3204457:tid 3204457] (EAI 2)Name or service not known: [client 144.76.19.72:65248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:18.988412 2026] [ssl:error] [pid 3204457:tid 3204457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:19.042819 2026] [ssl:error] [pid 3199415:tid 3199415] (EAI 2)Name or service not known: [client 144.76.19.72:65256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:19.042873 2026] [ssl:error] [pid 3199415:tid 3199415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:22.098012 2026] [ssl:error] [pid 3183615:tid 3183615] (EAI 2)Name or service not known: [client 144.76.19.72:51006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:22.098048 2026] [ssl:error] [pid 3183615:tid 3183615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:22.154194 2026] [ssl:error] [pid 3167187:tid 3167187] (EAI 2)Name or service not known: [client 144.76.19.72:51014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:22.154223 2026] [ssl:error] [pid 3167187:tid 3167187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:25.227429 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:51016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:25.227468 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:25.282567 2026] [ssl:error] [pid 3204099:tid 3204099] (EAI 2)Name or service not known: [client 144.76.19.72:51022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:25.282607 2026] [ssl:error] [pid 3204099:tid 3204099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:27.105791 2026] [ssl:error] [pid 3195535:tid 3195535] (70014)End of file found: [client 216.73.216.199:20119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:28.046466 2026] [core:error] [pid 3198952:tid 3198952] (13)Permission denied: [client 216.73.216.199:24908] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 13:14:28.338132 2026] [ssl:error] [pid 3200895:tid 3200895] (EAI 2)Name or service not known: [client 144.76.19.72:51030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:28.338163 2026] [ssl:error] [pid 3200895:tid 3200895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:28.393623 2026] [ssl:error] [pid 3202415:tid 3202415] (EAI 2)Name or service not known: [client 144.76.19.72:51046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:28.393689 2026] [ssl:error] [pid 3202415:tid 3202415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:29.049704 2026] [access_compat:error] [pid 3197097:tid 3197097] [client 106.222.248.251:28719] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:14:29.453542 2026] [lsapi:warn] [pid 3179933:tid 3179933] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:30.160463 2026] [core:error] [pid 3198952:tid 3198952] (13)Permission denied: [client 216.73.216.199:24908] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 13:14:30.467705 2026] [core:error] [pid 3198952:tid 3198952] (13)Permission denied: [client 216.73.216.199:24908] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 13:14:31.447525 2026] [ssl:error] [pid 3167187:tid 3167187] (EAI 2)Name or service not known: [client 144.76.19.72:32584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:31.447563 2026] [ssl:error] [pid 3167187:tid 3167187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:31.499863 2026] [ssl:error] [pid 3202416:tid 3202416] (EAI 2)Name or service not known: [client 144.76.19.72:32590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:31.499898 2026] [ssl:error] [pid 3202416:tid 3202416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:31.689595 2026] [ssl:error] [pid 3198952:tid 3198952] (70014)End of file found: [client 216.73.216.199:24908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:32.313310 2026] [core:error] [pid 3201304:tid 3201304] (13)Permission denied: [client 216.73.216.199:34593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 13:14:32.915263 2026] [core:error] [pid 3201304:tid 3201304] (13)Permission denied: [client 216.73.216.199:34593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 13:14:33.750904 2026] [security2:error] [pid 3200896:tid 3200896] [client 43.166.255.122:33624] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnstopwatches.com"] [uri "/"] [unique_id "amtAKW39U_IqkN_haUn1ogAAACo"]
[Thu Jul 30 13:14:33.823208 2026] [core:error] [pid 3201304:tid 3201304] (13)Permission denied: [client 216.73.216.199:34593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 13:14:34.555794 2026] [ssl:error] [pid 3172022:tid 3172022] (EAI 2)Name or service not known: [client 144.76.19.72:32596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:34.555853 2026] [ssl:error] [pid 3172022:tid 3172022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:34.608917 2026] [ssl:error] [pid 3198984:tid 3198984] (EAI 2)Name or service not known: [client 144.76.19.72:32606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:34.608957 2026] [ssl:error] [pid 3198984:tid 3198984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:35.319817 2026] [authz_core:error] [pid 3199023:tid 3199023] [client 57.141.0.9:53166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:14:35.320465 2026] [authz_core:error] [pid 3199023:tid 3199023] [client 57.141.0.9:53166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:14:35.514670 2026] [ssl:error] [pid 3199023:tid 3199023] (70014)End of file found: [client 216.73.216.199:53572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:36.605400 2026] [lsapi:warn] [pid 3205053:tid 3205053] [client 97.74.87.194:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:37.468864 2026] [security2:error] [pid 3201304:tid 3201304] [client 216.73.216.199:34593] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/apache2.conf"] [unique_id "amtALV1Ik7XXTnQJWwNWjQAAAC0"]
[Thu Jul 30 13:14:37.469385 2026] [security2:error] [pid 3201304:tid 3201304] [client 216.73.216.199:34593] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/apache2.conf"] [unique_id "amtALV1Ik7XXTnQJWwNWjQAAAC0"]
[Thu Jul 30 13:14:37.469623 2026] [security2:error] [pid 3201304:tid 3201304] [client 216.73.216.199:34593] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/apache2.conf"] [unique_id "amtALV1Ik7XXTnQJWwNWjQAAAC0"]
[Thu Jul 30 13:14:37.667361 2026] [ssl:error] [pid 3205054:tid 3205054] (EAI 2)Name or service not known: [client 144.76.19.72:32620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:37.667396 2026] [ssl:error] [pid 3205054:tid 3205054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:37.723943 2026] [ssl:error] [pid 3205054:tid 3205054] (EAI 2)Name or service not known: [client 144.76.19.72:32636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:37.723969 2026] [ssl:error] [pid 3205054:tid 3205054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:39.891674 2026] [lsapi:warn] [pid 3205133:tid 3205133] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:40.777007 2026] [ssl:error] [pid 3190537:tid 3190537] (EAI 2)Name or service not known: [client 144.76.19.72:57738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:40.777062 2026] [ssl:error] [pid 3190537:tid 3190537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:40.828868 2026] [ssl:error] [pid 3205054:tid 3205054] (EAI 2)Name or service not known: [client 144.76.19.72:57746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:40.828905 2026] [ssl:error] [pid 3205054:tid 3205054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:41.081104 2026] [ssl:error] [pid 3201304:tid 3201304] (70014)End of file found: [client 216.73.216.199:34593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:41.984856 2026] [ssl:error] [pid 3192733:tid 3192733] (70014)End of file found: [client 216.73.216.199:2618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:42.074743 2026] [access_compat:error] [pid 3200895:tid 3200895] [client 106.222.248.251:26403] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:14:43.829955 2026] [security2:error] [pid 3205088:tid 3205088] [client 94.154.43.186:63002] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtAMx1zOXY08-BVGRSXfQAAAAw"]
[Thu Jul 30 13:14:43.830226 2026] [security2:error] [pid 3205088:tid 3205088] [client 94.154.43.186:63002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtAMx1zOXY08-BVGRSXfQAAAAw"]
[Thu Jul 30 13:14:43.830513 2026] [security2:error] [pid 3205088:tid 3205088] [client 94.154.43.186:63002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtAMx1zOXY08-BVGRSXfQAAAAw"]
[Thu Jul 30 13:14:43.881634 2026] [ssl:error] [pid 3194752:tid 3194752] (EAI 2)Name or service not known: [client 144.76.19.72:57750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:43.881670 2026] [ssl:error] [pid 3194752:tid 3194752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:43.950245 2026] [security2:error] [pid 3197054:tid 3197054] [client 94.154.43.177:64410] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.tyredandmotional.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtAMxPy-YUNdZQs_R_pOQAAAC8"]
[Thu Jul 30 13:14:43.950498 2026] [security2:error] [pid 3197054:tid 3197054] [client 94.154.43.177:64410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tyredandmotional.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtAMxPy-YUNdZQs_R_pOQAAAC8"]
[Thu Jul 30 13:14:43.958205 2026] [ssl:error] [pid 3200169:tid 3200169] (EAI 2)Name or service not known: [client 144.76.19.72:57760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:43.958240 2026] [ssl:error] [pid 3200169:tid 3200169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:44.224342 2026] [security2:error] [pid 3197054:tid 3197054] [client 94.154.43.177:64410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.tyredandmotional.secretbluestone.co.uk"] [uri "/index.php"] [unique_id "amtAMxPy-YUNdZQs_R_pOQAAAC8"]
[Thu Jul 30 13:14:44.639325 2026] [security2:error] [pid 3202416:tid 3202416] [client 85.208.96.209:37244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/leo-weekly-career-horoscope-2022"] [unique_id "amtANNSoy2s6DbQdaKbXyQAAACQ"]
[Thu Jul 30 13:14:44.656491 2026] [security2:error] [pid 3204024:tid 3204024] [client 103.112.236.250:39182] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtANAEz1ipbOpvJ_vm-DAAAAAs"]
[Thu Jul 30 13:14:44.656540 2026] [security2:error] [pid 3204024:tid 3204024] [client 103.112.236.250:39182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtANAEz1ipbOpvJ_vm-DAAAAAs"]
[Thu Jul 30 13:14:44.656802 2026] [security2:error] [pid 3204024:tid 3204024] [client 103.112.236.250:39182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtANAEz1ipbOpvJ_vm-DAAAAAs"]
[Thu Jul 30 13:14:46.813008 2026] [security2:error] [pid 3174653:tid 3174653] [client 94.154.43.177:31410] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tyredandmotional.co.uk"] [uri "/.env"] [unique_id "amtANseOSVrY1GjpPqHU5AAAAAU"]
[Thu Jul 30 13:14:46.813226 2026] [security2:error] [pid 3174653:tid 3174653] [client 94.154.43.177:31410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tyredandmotional.co.uk"] [uri "/.env"] [unique_id "amtANseOSVrY1GjpPqHU5AAAAAU"]
[Thu Jul 30 13:14:47.059977 2026] [security2:error] [pid 3174653:tid 3174653] [client 94.154.43.177:31410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "tyredandmotional.co.uk"] [uri "/index.php"] [unique_id "amtANseOSVrY1GjpPqHU5AAAAAU"]
[Thu Jul 30 13:14:47.060255 2026] [ssl:error] [pid 3205088:tid 3205088] (EAI 2)Name or service not known: [client 144.76.19.72:57768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:47.060293 2026] [ssl:error] [pid 3205088:tid 3205088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:47.117357 2026] [ssl:error] [pid 3200896:tid 3200896] (EAI 2)Name or service not known: [client 144.76.19.72:57784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:47.117394 2026] [ssl:error] [pid 3200896:tid 3200896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:47.163803 2026] [security2:error] [pid 3198984:tid 3198984] [client 94.154.43.178:24770] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.tyredandmotional.co.uk"] [uri "/.env"] [unique_id "amtAN09r1BFchwy1o3EMfAAAAA4"]
[Thu Jul 30 13:14:47.164046 2026] [security2:error] [pid 3198984:tid 3198984] [client 94.154.43.178:24770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tyredandmotional.co.uk"] [uri "/.env"] [unique_id "amtAN09r1BFchwy1o3EMfAAAAA4"]
[Thu Jul 30 13:14:47.430850 2026] [security2:error] [pid 3198984:tid 3198984] [client 94.154.43.178:24770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.tyredandmotional.co.uk"] [uri "/index.php"] [unique_id "amtAN09r1BFchwy1o3EMfAAAAA4"]
[Thu Jul 30 13:14:48.711491 2026] [security2:error] [pid 3194789:tid 3194789] [client 5.57.13.196:49814] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAOGArPPhCZrTwEexFewAAAAo"]
[Thu Jul 30 13:14:48.711552 2026] [security2:error] [pid 3194789:tid 3194789] [client 5.57.13.196:49814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAOGArPPhCZrTwEexFewAAAAo"]
[Thu Jul 30 13:14:48.711898 2026] [security2:error] [pid 3194789:tid 3194789] [client 5.57.13.196:49814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAOGArPPhCZrTwEexFewAAAAo"]
[Thu Jul 30 13:14:49.200341 2026] [core:error] [pid 3205022:tid 3205022] [client 57.141.0.65:46822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:49.200375 2026] [core:error] [pid 3205022:tid 3205022] [client 57.141.0.65:46822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:49.351798 2026] [lsapi:warn] [pid 3195594:tid 3195594] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:49.672697 2026] [security2:error] [pid 3205131:tid 3205131] [client 114.119.146.111:36547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103/request_format~html"] [unique_id "amtAOUVAde5SQxOjJcvviQAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103,102/request_format~html
[Thu Jul 30 13:14:49.928471 2026] [access_compat:error] [pid 3199021:tid 3199021] [client 106.222.248.251:21158] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:14:50.219790 2026] [ssl:error] [pid 3197911:tid 3197911] (EAI 2)Name or service not known: [client 144.76.19.72:34716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:50.219832 2026] [ssl:error] [pid 3197911:tid 3197911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:50.274553 2026] [ssl:error] [pid 3201304:tid 3201304] (EAI 2)Name or service not known: [client 144.76.19.72:34728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:50.274594 2026] [ssl:error] [pid 3201304:tid 3201304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:50.492946 2026] [security2:error] [pid 3201705:tid 3201705] [client 85.208.96.206:14890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11319.0/prev_next,next.html"] [unique_id "amtAOoC7QdSj8uWcY8fmbgAAAAM"]
[Thu Jul 30 13:14:50.767297 2026] [security2:error] [pid 3200896:tid 3200896] [client 114.119.146.111:53635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103/request_format~html"] [unique_id "amtAOm39U_IqkN_haUn1qQAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103,102/request_format~html
[Thu Jul 30 13:14:50.827895 2026] [ssl:error] [pid 3198300:tid 3198300] (70014)End of file found: [client 216.73.216.199:3628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:51.407053 2026] [ssl:error] [pid 3201304:tid 3201304] (70014)End of file found: [client 216.73.216.199:35584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:51.937972 2026] [ssl:error] [pid 3205134:tid 3205134] (70014)End of file found: [client 216.73.216.199:41079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:52.530215 2026] [authz_core:error] [pid 3205839:tid 3205839] [client 57.141.0.23:35156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:14:52.530877 2026] [authz_core:error] [pid 3205839:tid 3205839] [client 57.141.0.23:35156] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:14:53.334060 2026] [ssl:error] [pid 3200896:tid 3200896] (EAI 2)Name or service not known: [client 144.76.19.72:34740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:53.334120 2026] [ssl:error] [pid 3200896:tid 3200896] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:53.395601 2026] [ssl:error] [pid 3205839:tid 3205839] (EAI 2)Name or service not known: [client 144.76.19.72:34748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:53.395650 2026] [ssl:error] [pid 3205839:tid 3205839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:53.477326 2026] [security2:error] [pid 3204024:tid 3204024] [client 103.248.207.51:47214] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAPQEz1ipbOpvJ_vm-DwAAAAs"]
[Thu Jul 30 13:14:53.477380 2026] [security2:error] [pid 3204024:tid 3204024] [client 103.248.207.51:47214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAPQEz1ipbOpvJ_vm-DwAAAAs"]
[Thu Jul 30 13:14:53.477673 2026] [security2:error] [pid 3204024:tid 3204024] [client 103.248.207.51:47214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAPQEz1ipbOpvJ_vm-DwAAAAs"]
[Thu Jul 30 13:14:53.632292 2026] [core:error] [pid 3205054:tid 3205054] [client 66.249.66.167:35576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:53.632315 2026] [core:error] [pid 3205054:tid 3205054] [client 66.249.66.167:35576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:53.644362 2026] [core:error] [pid 3205133:tid 3205133] [client 66.249.66.167:54398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:53.644383 2026] [core:error] [pid 3205133:tid 3205133] [client 66.249.66.167:54398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:54.001241 2026] [security2:error] [pid 3204099:tid 3204099] [client 47.128.24.254:52354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amtAPr4yX_wI7zzI85_tTgAAABw"]
[Thu Jul 30 13:14:56.225910 2026] [lsapi:warn] [pid 3205054:tid 3205054] [client 198.38.94.17:0] [host mail.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:14:56.448577 2026] [ssl:error] [pid 3194789:tid 3194789] (70014)End of file found: [client 216.73.216.199:39418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:56.478515 2026] [ssl:error] [pid 3205091:tid 3205091] (EAI 2)Name or service not known: [client 144.76.19.72:34758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:56.478573 2026] [ssl:error] [pid 3205091:tid 3205091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:56.534809 2026] [ssl:error] [pid 3204099:tid 3204099] (EAI 2)Name or service not known: [client 144.76.19.72:34768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:56.534838 2026] [ssl:error] [pid 3204099:tid 3204099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:57.170816 2026] [ssl:error] [pid 3199021:tid 3199021] (70014)End of file found: [client 216.73.216.199:1305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:57.438260 2026] [ssl:error] [pid 3204099:tid 3204099] (70014)End of file found: [client 216.73.216.199:31961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:14:58.297430 2026] [core:error] [pid 3205135:tid 3205135] [client 66.249.66.8:50599] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:58.297467 2026] [core:error] [pid 3205135:tid 3205135] [client 66.249.66.8:50599] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:58.530985 2026] [core:error] [pid 3205089:tid 3205089] [client 66.249.66.195:40051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:58.531018 2026] [core:error] [pid 3205089:tid 3205089] [client 66.249.66.195:40051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:14:58.631831 2026] [authz_core:error] [pid 3192733:tid 3192733] [client 57.141.0.13:26080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:14:58.632517 2026] [authz_core:error] [pid 3192733:tid 3192733] [client 57.141.0.13:26080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:14:59.588468 2026] [ssl:error] [pid 3205134:tid 3205134] (EAI 2)Name or service not known: [client 144.76.19.72:47112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:59.588514 2026] [ssl:error] [pid 3205134:tid 3205134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:59.643125 2026] [ssl:error] [pid 3202415:tid 3202415] (EAI 2)Name or service not known: [client 144.76.19.72:47116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:14:59.643147 2026] [ssl:error] [pid 3202415:tid 3202415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:14:59.840401 2026] [lsapi:warn] [pid 3198246:tid 3198246] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:00.061314 2026] [cgi:error] [pid 3174653:tid 3174653] [client 66.132.195.106:62302] AH02812: stderr from /home/pbyawsga/akoptimize.co.uk/cgi-bin/: attempt to invoke directory as script, referer: https://www.akoptimize.co.uk:443/cgi-bin
[Thu Jul 30 13:15:00.135627 2026] [access_compat:error] [pid 3192733:tid 3192733] [client 106.222.248.251:27308] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:15:02.700770 2026] [ssl:error] [pid 3205135:tid 3205135] (EAI 2)Name or service not known: [client 144.76.19.72:47132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:02.700813 2026] [ssl:error] [pid 3205135:tid 3205135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:02.756756 2026] [ssl:error] [pid 3194789:tid 3194789] (EAI 2)Name or service not known: [client 144.76.19.72:47136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:02.756804 2026] [ssl:error] [pid 3194789:tid 3194789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:03.171730 2026] [ssl:error] [pid 3172019:tid 3172019] (70014)End of file found: [client 216.73.216.199:36457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:03.323578 2026] [core:error] [pid 3204099:tid 3204099] [client 57.141.0.17:51376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:03.323629 2026] [core:error] [pid 3204099:tid 3204099] [client 57.141.0.17:51376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:03.511399 2026] [ssl:error] [pid 3205135:tid 3205135] (70014)End of file found: [client 216.73.216.199:43354] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:03.907211 2026] [ssl:error] [pid 3197099:tid 3197099] (70014)End of file found: [client 216.73.216.199:61325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:05.377388 2026] [security2:error] [pid 3205022:tid 3205022] [client 51.77.210.64:41484] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg211.html"] [unique_id "amtASdmtmMuAc_xWkbCHgAAAAAE"]
[Thu Jul 30 13:15:05.377440 2026] [security2:error] [pid 3205022:tid 3205022] [client 51.77.210.64:41484] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg211.html"] [unique_id "amtASdmtmMuAc_xWkbCHgAAAAAE"]
[Thu Jul 30 13:15:05.377734 2026] [security2:error] [pid 3205022:tid 3205022] [client 51.77.210.64:41484] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtASdmtmMuAc_xWkbCHgAAAAAE"]
[Thu Jul 30 13:15:05.709627 2026] [security2:error] [pid 3199021:tid 3199021] [client 57.129.139.88:36504] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg211.html"] [unique_id "amtASTIWdnHyqr8MomNfQAAAABE"]
[Thu Jul 30 13:15:05.709679 2026] [security2:error] [pid 3199021:tid 3199021] [client 57.129.139.88:36504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,114.msg211.html"] [unique_id "amtASTIWdnHyqr8MomNfQAAAABE"]
[Thu Jul 30 13:15:05.709919 2026] [security2:error] [pid 3199021:tid 3199021] [client 57.129.139.88:36504] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtASTIWdnHyqr8MomNfQAAAABE"]
[Thu Jul 30 13:15:05.811716 2026] [ssl:error] [pid 3205839:tid 3205839] (EAI 2)Name or service not known: [client 144.76.19.72:47142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:05.811750 2026] [ssl:error] [pid 3205839:tid 3205839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:05.864594 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 144.76.19.72:47152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:05.864619 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:06.763568 2026] [security2:error] [pid 3205090:tid 3205090] [client 51.75.21.177:54030] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtASvSA61rKiaiL_X7idQAAAB0"]
[Thu Jul 30 13:15:06.763618 2026] [security2:error] [pid 3205090:tid 3205090] [client 51.75.21.177:54030] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtASvSA61rKiaiL_X7idQAAAB0"]
[Thu Jul 30 13:15:06.763907 2026] [security2:error] [pid 3205090:tid 3205090] [client 51.75.21.177:54030] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtASvSA61rKiaiL_X7idQAAAB0"]
[Thu Jul 30 13:15:06.980957 2026] [security2:error] [pid 3195594:tid 3195594] [client 57.129.81.151:55896] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAStwSizrrgYu41c9d6AAAACk"]
[Thu Jul 30 13:15:06.981008 2026] [security2:error] [pid 3195594:tid 3195594] [client 57.129.81.151:55896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAStwSizrrgYu41c9d6AAAACk"]
[Thu Jul 30 13:15:06.981275 2026] [security2:error] [pid 3195594:tid 3195594] [client 57.129.81.151:55896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAStwSizrrgYu41c9d6AAAACk"]
[Thu Jul 30 13:15:07.100085 2026] [security2:error] [pid 3198984:tid 3198984] [client 123.27.246.113:38728] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAS09r1BFchwy1o3EMgwAAAA4"]
[Thu Jul 30 13:15:07.100136 2026] [security2:error] [pid 3198984:tid 3198984] [client 123.27.246.113:38728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAS09r1BFchwy1o3EMgwAAAA4"]
[Thu Jul 30 13:15:07.100392 2026] [security2:error] [pid 3198984:tid 3198984] [client 123.27.246.113:38728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAS09r1BFchwy1o3EMgwAAAA4"]
[Thu Jul 30 13:15:07.955469 2026] [ssl:error] [pid 3197097:tid 3197097] (70014)End of file found: [client 216.73.216.199:22939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:08.331391 2026] [ssl:error] [pid 3206579:tid 3206579] (70014)End of file found: [client 216.73.216.199:49093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:08.367211 2026] [authz_core:error] [pid 3172019:tid 3172019] [client 57.141.0.58:62324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:15:08.367874 2026] [authz_core:error] [pid 3172019:tid 3172019] [client 57.141.0.58:62324] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:15:08.858525 2026] [ssl:error] [pid 3194752:tid 3194752] (70014)End of file found: [client 216.73.216.199:10611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:08.951860 2026] [ssl:error] [pid 3204457:tid 3204457] (EAI 2)Name or service not known: [client 144.76.19.72:47164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:08.951889 2026] [ssl:error] [pid 3204457:tid 3204457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:09.004941 2026] [ssl:error] [pid 3193656:tid 3193656] (EAI 2)Name or service not known: [client 144.76.19.72:47170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:09.004993 2026] [ssl:error] [pid 3193656:tid 3193656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:09.115599 2026] [security2:error] [pid 3197099:tid 3197099] [client 181.224.206.38:33262] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtATSxT7BoVbnhOC1Tv4wAAADg"]
[Thu Jul 30 13:15:09.115648 2026] [security2:error] [pid 3197099:tid 3197099] [client 181.224.206.38:33262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtATSxT7BoVbnhOC1Tv4wAAADg"]
[Thu Jul 30 13:15:09.115882 2026] [security2:error] [pid 3197099:tid 3197099] [client 181.224.206.38:33262] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtATSxT7BoVbnhOC1Tv4wAAADg"]
[Thu Jul 30 13:15:09.314388 2026] [security2:error] [pid 3206639:tid 3206639] [client 141.94.78.40:51566] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amtATZKJV-fO6UhT09evXAAAACM"]
[Thu Jul 30 13:15:09.314440 2026] [security2:error] [pid 3206639:tid 3206639] [client 141.94.78.40:51566] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amtATZKJV-fO6UhT09evXAAAACM"]
[Thu Jul 30 13:15:09.314716 2026] [security2:error] [pid 3206639:tid 3206639] [client 141.94.78.40:51566] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtATZKJV-fO6UhT09evXAAAACM"]
[Thu Jul 30 13:15:09.374521 2026] [security2:error] [pid 3204457:tid 3204457] [client 57.129.81.224:58948] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amtATezkKHfhFp0FkpBRYQAAAB4"]
[Thu Jul 30 13:15:09.374569 2026] [security2:error] [pid 3204457:tid 3204457] [client 57.129.81.224:58948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amtATezkKHfhFp0FkpBRYQAAAB4"]
[Thu Jul 30 13:15:09.374834 2026] [security2:error] [pid 3204457:tid 3204457] [client 57.129.81.224:58948] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtATezkKHfhFp0FkpBRYQAAAB4"]
[Thu Jul 30 13:15:10.433912 2026] [lsapi:warn] [pid 3206695:tid 3206695] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:12.057330 2026] [ssl:error] [pid 3172019:tid 3172019] (EAI 2)Name or service not known: [client 144.76.19.72:60416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:12.057365 2026] [ssl:error] [pid 3172019:tid 3172019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:12.113472 2026] [ssl:error] [pid 3205839:tid 3205839] (EAI 2)Name or service not known: [client 144.76.19.72:60420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:12.113519 2026] [ssl:error] [pid 3205839:tid 3205839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:12.516679 2026] [access_compat:error] [pid 3205022:tid 3205022] [client 106.222.248.251:1661] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:15:13.112175 2026] [security2:error] [pid 3205090:tid 3205090] [client 180.254.240.194:44136] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAUfSA61rKiaiL_X7ieAAAAB0"]
[Thu Jul 30 13:15:13.112234 2026] [security2:error] [pid 3205090:tid 3205090] [client 180.254.240.194:44136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAUfSA61rKiaiL_X7ieAAAAB0"]
[Thu Jul 30 13:15:13.112478 2026] [security2:error] [pid 3205090:tid 3205090] [client 180.254.240.194:44136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAUfSA61rKiaiL_X7ieAAAAB0"]
[Thu Jul 30 13:15:13.594395 2026] [ssl:error] [pid 3199021:tid 3199021] (70014)End of file found: [client 216.73.216.199:36242] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:13.884235 2026] [ssl:error] [pid 3192733:tid 3192733] (70014)End of file found: [client 216.73.216.199:54868] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:15.167832 2026] [ssl:error] [pid 3205134:tid 3205134] (EAI 2)Name or service not known: [client 144.76.19.72:60432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:15.167861 2026] [ssl:error] [pid 3205134:tid 3205134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:15.192034 2026] [ssl:error] [pid 3205839:tid 3205839] (70014)End of file found: [client 216.73.216.199:15102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:15.223558 2026] [ssl:error] [pid 3205129:tid 3205129] (EAI 2)Name or service not known: [client 144.76.19.72:60434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:15.223592 2026] [ssl:error] [pid 3205129:tid 3205129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:15.753923 2026] [authz_core:error] [pid 3205088:tid 3205088] [client 57.141.0.8:45836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:15:15.754552 2026] [authz_core:error] [pid 3205088:tid 3205088] [client 57.141.0.8:45836] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:15:16.190405 2026] [authz_core:error] [pid 3205088:tid 3205088] [client 104.219.215.141:60584] AH01630: client denied by server configuration: /home/sfi/public_html/error_log, referer: https://securitiesfinance.co.uk/?yt1
[Thu Jul 30 13:15:16.960468 2026] [lsapi:error] [pid 3206579:tid 3206579] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Request retrieving failed. Reason: unknown, On: request body, Source: client, Where: unknown
[Thu Jul 30 13:15:16.960500 2026] [lsapi:error] [pid 3206579:tid 3206579] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] In order to get more info about fail reason try to change LogLevel to Info in httpd.conf and restart Apache
[Thu Jul 30 13:15:16.960513 2026] [lsapi:error] [pid 3206579:tid 3206579] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Client error on sending request(POST /xmlrpc.php HTTP/1.1); uri(/xmlrpc.php) content-length(711): user_get_body(tmpstackbuf, 16384): read from client failed
[Thu Jul 30 13:15:18.283572 2026] [ssl:error] [pid 3205088:tid 3205088] (EAI 2)Name or service not known: [client 144.76.19.72:60448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:18.283605 2026] [ssl:error] [pid 3205088:tid 3205088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:18.339372 2026] [ssl:error] [pid 3205053:tid 3205053] (EAI 2)Name or service not known: [client 144.76.19.72:60464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:18.339402 2026] [ssl:error] [pid 3205053:tid 3205053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:19.158758 2026] [ssl:error] [pid 3206694:tid 3206694] (70014)End of file found: [client 216.73.216.199:33647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:19.493467 2026] [lsapi:warn] [pid 3207319:tid 3207319] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:19.941779 2026] [core:error] [pid 3201304:tid 3201304] [client 57.141.0.49:29316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:19.941803 2026] [core:error] [pid 3201304:tid 3201304] [client 57.141.0.49:29316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:20.389833 2026] [ssl:error] [pid 3205088:tid 3205088] (70014)End of file found: [client 216.73.216.199:35239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:20.736302 2026] [lsapi:warn] [pid 3207319:tid 3207319] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:20.979158 2026] [security2:error] [pid 3206638:tid 3206638] [client 199.45.154.142:53548] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.jasperandtroy.com"] [uri "/nigelmassey.com"] [unique_id "amtAWJyPNe7XT9GI7TJEdwAAABk"]
[Thu Jul 30 13:15:20.979418 2026] [security2:error] [pid 3206638:tid 3206638] [client 199.45.154.142:53548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.jasperandtroy.com"] [uri "/nigelmassey.com"] [unique_id "amtAWJyPNe7XT9GI7TJEdwAAABk"]
[Thu Jul 30 13:15:20.979615 2026] [security2:error] [pid 3206638:tid 3206638] [client 199.45.154.142:53548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.jasperandtroy.com"] [uri "/nigelmassey.com"] [unique_id "amtAWJyPNe7XT9GI7TJEdwAAABk"]
[Thu Jul 30 13:15:21.396686 2026] [ssl:error] [pid 3205129:tid 3205129] (EAI 2)Name or service not known: [client 144.76.19.72:56846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:21.396714 2026] [ssl:error] [pid 3205129:tid 3205129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:21.452584 2026] [ssl:error] [pid 3205839:tid 3205839] (EAI 2)Name or service not known: [client 144.76.19.72:56862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:21.452610 2026] [ssl:error] [pid 3205839:tid 3205839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:22.761458 2026] [authz_core:error] [pid 3206638:tid 3206638] [client 199.45.154.142:53548] AH01630: client denied by server configuration: /home/eznoyveg/public_html/Zfiles/error_log, referer: http://mail.jasperandtroy.com:80/Zfiles
[Thu Jul 30 13:15:22.799460 2026] [ssl:error] [pid 3201304:tid 3201304] (70014)End of file found: [client 216.73.216.199:61018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:23.584218 2026] [access_compat:error] [pid 3205134:tid 3205134] [client 106.222.248.251:14672] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:15:24.052731 2026] [access_compat:error] [pid 3205135:tid 3205135] [client 45.158.164.139:59238] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:15:24.506013 2026] [ssl:error] [pid 3198300:tid 3198300] (EAI 2)Name or service not known: [client 144.76.19.72:56870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:24.506080 2026] [ssl:error] [pid 3198300:tid 3198300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:24.537961 2026] [ssl:error] [pid 3199023:tid 3199023] (70014)End of file found: [client 216.73.216.199:16027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:24.562110 2026] [ssl:error] [pid 3199022:tid 3199022] (EAI 2)Name or service not known: [client 144.76.19.72:56874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:24.562141 2026] [ssl:error] [pid 3199022:tid 3199022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:25.104618 2026] [authz_core:error] [pid 3205135:tid 3205135] [client 57.141.0.8:36532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:15:25.105250 2026] [authz_core:error] [pid 3205135:tid 3205135] [client 57.141.0.8:36532] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:15:25.732577 2026] [ssl:error] [pid 3205089:tid 3205089] (70014)End of file found: [client 216.73.216.199:35467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:26.560030 2026] [authz_core:error] [pid 3206693:tid 3206693] [client 89.124.92.70:62223] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 13:15:26.562734 2026] [authz_core:error] [pid 3206693:tid 3206693] [client 89.124.92.70:62223] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 13:15:27.576883 2026] [core:error] [pid 3205091:tid 3205091] [client 66.249.66.67:56119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:27.576908 2026] [core:error] [pid 3205091:tid 3205091] [client 66.249.66.67:56119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:27.631642 2026] [ssl:error] [pid 3198246:tid 3198246] (EAI 2)Name or service not known: [client 144.76.19.72:56886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:27.631694 2026] [ssl:error] [pid 3198246:tid 3198246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:27.682944 2026] [ssl:error] [pid 3190537:tid 3190537] (EAI 2)Name or service not known: [client 144.76.19.72:56898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:27.682974 2026] [ssl:error] [pid 3190537:tid 3190537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:28.882434 2026] [lsapi:warn] [pid 3205091:tid 3205091] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:29.144978 2026] [ssl:error] [pid 3205129:tid 3205129] (70014)End of file found: [client 216.73.216.199:32578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:29.941531 2026] [ssl:error] [pid 3205839:tid 3205839] (70014)End of file found: [client 216.73.216.199:31635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:30.739310 2026] [ssl:error] [pid 3205091:tid 3205091] (EAI 2)Name or service not known: [client 144.76.19.72:30008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:30.739335 2026] [ssl:error] [pid 3205091:tid 3205091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:30.759985 2026] [cgi:error] [pid 3195594:tid 3195594] [client 20.9.4.9:62376] AH02812: stderr from /home/onestop/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:15:30.795565 2026] [ssl:error] [pid 3201304:tid 3201304] (EAI 2)Name or service not known: [client 144.76.19.72:30016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:30.795595 2026] [ssl:error] [pid 3201304:tid 3201304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:31.163258 2026] [core:error] [pid 3207242:tid 3207242] (13)Permission denied: [client 216.73.216.199:16319] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/align
[Thu Jul 30 13:15:31.300154 2026] [lsapi:warn] [pid 3201304:tid 3201304] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:31.871740 2026] [ssl:error] [pid 3207242:tid 3207242] (70014)End of file found: [client 216.73.216.199:16319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:33.450464 2026] [access_compat:error] [pid 3199021:tid 3199021] [client 106.222.248.251:17224] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:15:33.542635 2026] [core:error] [pid 3205135:tid 3205135] [client 66.249.64.170:51968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:33.542660 2026] [core:error] [pid 3205135:tid 3205135] [client 66.249.64.170:51968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:15:33.851322 2026] [ssl:error] [pid 3208424:tid 3208424] (EAI 2)Name or service not known: [client 144.76.19.72:30028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:33.851395 2026] [ssl:error] [pid 3208424:tid 3208424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:34.079910 2026] [security2:error] [pid 3205089:tid 3205089] [client 43.155.162.41:49328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.maisongerlyn.be"] [uri "/"] [unique_id "amtAZgu7V06woUXucCgD3AAAAA0"]
[Thu Jul 30 13:15:34.211658 2026] [ssl:error] [pid 3208595:tid 3208595] (EAI 2)Name or service not known: [client 144.76.19.72:30042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:34.211702 2026] [ssl:error] [pid 3208595:tid 3208595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:34.942779 2026] [security2:error] [pid 3205053:tid 3205053] [client 47.128.32.132:41164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.unclaimedassets.co.uk"] [uri "/robots.txt"] [unique_id "amtAZpmgfJ0QB13yRMWAnwAAAAI"]
[Thu Jul 30 13:15:35.116288 2026] [authz_core:error] [pid 3206639:tid 3206639] [client 57.141.0.54:45166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:15:35.117037 2026] [authz_core:error] [pid 3206639:tid 3206639] [client 57.141.0.54:45166] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:15:35.484630 2026] [ssl:error] [pid 3198300:tid 3198300] (70014)End of file found: [client 216.73.216.199:6004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:35.801712 2026] [ssl:error] [pid 3201304:tid 3201304] (70014)End of file found: [client 216.73.216.199:64736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:37.125904 2026] [security2:error] [pid 3208715:tid 3208715] [client 43.155.162.41:57900] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtAaYvxTFD-rnyau-_7tgAAAD0"], referer: http://www.maisongerlyn.be
[Thu Jul 30 13:15:37.266572 2026] [ssl:error] [pid 3205133:tid 3205133] (EAI 2)Name or service not known: [client 144.76.19.72:30050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:37.266605 2026] [ssl:error] [pid 3205133:tid 3205133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:37.320339 2026] [ssl:error] [pid 3199023:tid 3199023] (EAI 2)Name or service not known: [client 144.76.19.72:30062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:37.320373 2026] [ssl:error] [pid 3199023:tid 3199023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:38.526445 2026] [ssl:error] [pid 3208717:tid 3208717] (70014)End of file found: [client 216.73.216.199:27780] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:39.140870 2026] [ssl:error] [pid 3205091:tid 3205091] (70014)End of file found: [client 216.73.216.199:1734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:39.704017 2026] [lsapi:warn] [pid 3208715:tid 3208715] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:40.417177 2026] [ssl:error] [pid 3206694:tid 3206694] (EAI 2)Name or service not known: [client 144.76.19.72:51418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:40.417209 2026] [ssl:error] [pid 3206694:tid 3206694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:40.470596 2026] [ssl:error] [pid 3198246:tid 3198246] (EAI 2)Name or service not known: [client 144.76.19.72:51430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:40.470630 2026] [ssl:error] [pid 3198246:tid 3198246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:40.651033 2026] [ssl:error] [pid 3207320:tid 3207320] (70014)End of file found: [client 216.73.216.199:59425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:41.163121 2026] [ssl:error] [pid 3206694:tid 3206694] (70014)End of file found: [client 216.73.216.199:10692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:41.653173 2026] [lsapi:warn] [pid 3198300:tid 3198300] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:42.156617 2026] [ssl:error] [pid 3172019:tid 3172019] (70014)End of file found: [client 216.73.216.199:11315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:43.572435 2026] [ssl:error] [pid 3205133:tid 3205133] (EAI 2)Name or service not known: [client 144.76.19.72:51438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:43.572465 2026] [ssl:error] [pid 3205133:tid 3205133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:43.589578 2026] [access_compat:error] [pid 3195594:tid 3195594] [client 106.222.248.251:1359] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:15:43.628558 2026] [ssl:error] [pid 3205054:tid 3205054] (EAI 2)Name or service not known: [client 144.76.19.72:51452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:43.628597 2026] [ssl:error] [pid 3205054:tid 3205054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:43.779275 2026] [security2:error] [pid 3201304:tid 3201304] [client 79.106.203.144:46202] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAb11Ik7XXTnQJWwNXGAAAAC0"]
[Thu Jul 30 13:15:43.779327 2026] [security2:error] [pid 3201304:tid 3201304] [client 79.106.203.144:46202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAb11Ik7XXTnQJWwNXGAAAAC0"]
[Thu Jul 30 13:15:43.779580 2026] [security2:error] [pid 3201304:tid 3201304] [client 79.106.203.144:46202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAb11Ik7XXTnQJWwNXGAAAAC0"]
[Thu Jul 30 13:15:45.131988 2026] [security2:error] [pid 3209168:tid 3209168] [client 85.208.96.204:56274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/chevy-cruze-door-chime"] [unique_id "amtAcbKkjMV6DML5RJv3XAAAABM"]
[Thu Jul 30 13:15:46.674816 2026] [ssl:error] [pid 3205131:tid 3205131] (70014)End of file found: [client 216.73.216.199:5635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:46.683784 2026] [ssl:error] [pid 3206470:tid 3206470] (EAI 2)Name or service not known: [client 144.76.19.72:51454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:46.683813 2026] [ssl:error] [pid 3206470:tid 3206470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:46.736837 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:51464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:46.736872 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:47.048331 2026] [security2:error] [pid 3206694:tid 3206694] [client 91.186.243.98:64023] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAc_R0kDAZN1izdTikUQAAACo"]
[Thu Jul 30 13:15:47.048381 2026] [security2:error] [pid 3206694:tid 3206694] [client 91.186.243.98:64023] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAc_R0kDAZN1izdTikUQAAACo"]
[Thu Jul 30 13:15:47.048639 2026] [security2:error] [pid 3206694:tid 3206694] [client 91.186.243.98:64023] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAc_R0kDAZN1izdTikUQAAACo"]
[Thu Jul 30 13:15:47.080273 2026] [authz_core:error] [pid 3205054:tid 3205054] [client 57.141.0.36:45066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:15:47.080927 2026] [authz_core:error] [pid 3205054:tid 3205054] [client 57.141.0.36:45066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:15:47.575694 2026] [ssl:error] [pid 3207320:tid 3207320] (70014)End of file found: [client 216.73.216.199:2721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:48.181043 2026] [core:error] [pid 3206695:tid 3206695] (13)Permission denied: [client 216.73.216.199:36724] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/slabs_cpu_partial
[Thu Jul 30 13:15:48.785166 2026] [ssl:error] [pid 3206695:tid 3206695] (70014)End of file found: [client 216.73.216.199:36724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:49.795601 2026] [ssl:error] [pid 3205088:tid 3205088] (EAI 2)Name or service not known: [client 144.76.19.72:63818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:49.795648 2026] [ssl:error] [pid 3205088:tid 3205088] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:49.850545 2026] [ssl:error] [pid 3205134:tid 3205134] (EAI 2)Name or service not known: [client 144.76.19.72:63828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:49.850577 2026] [ssl:error] [pid 3205134:tid 3205134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:50.347191 2026] [lsapi:warn] [pid 3199022:tid 3199022] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:52.024639 2026] [ssl:error] [pid 3201304:tid 3201304] (70014)End of file found: [client 216.73.216.199:14418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:52.459568 2026] [access_compat:error] [pid 3197097:tid 3197097] [client 106.222.248.251:27277] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:15:52.737985 2026] [security2:error] [pid 3195594:tid 3195594] [client 181.94.228.109:28432] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAeNwSizrrgYu41c9eWwAAACk"]
[Thu Jul 30 13:15:52.738038 2026] [security2:error] [pid 3195594:tid 3195594] [client 181.94.228.109:28432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAeNwSizrrgYu41c9eWwAAACk"]
[Thu Jul 30 13:15:52.738312 2026] [security2:error] [pid 3195594:tid 3195594] [client 181.94.228.109:28432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAeNwSizrrgYu41c9eWwAAACk"]
[Thu Jul 30 13:15:52.909809 2026] [ssl:error] [pid 3205131:tid 3205131] (EAI 2)Name or service not known: [client 144.76.19.72:63842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:52.909840 2026] [ssl:error] [pid 3205131:tid 3205131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:52.963523 2026] [ssl:error] [pid 3197911:tid 3197911] (EAI 2)Name or service not known: [client 144.76.19.72:63858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:52.963554 2026] [ssl:error] [pid 3197911:tid 3197911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:53.440643 2026] [lsapi:warn] [pid 3194752:tid 3194752] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:15:53.631994 2026] [ssl:error] [pid 3205133:tid 3205133] (70014)End of file found: [client 216.73.216.199:46407] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:54.229246 2026] [ssl:error] [pid 3205091:tid 3205091] (70014)End of file found: [client 216.73.216.199:55747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:56.016957 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:63874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:56.017006 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:56.075132 2026] [ssl:error] [pid 3193588:tid 3193588] (EAI 2)Name or service not known: [client 144.76.19.72:63884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:56.075164 2026] [ssl:error] [pid 3193588:tid 3193588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:57.438106 2026] [ssl:error] [pid 3205088:tid 3205088] (70014)End of file found: [client 216.73.216.199:41171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:59.071310 2026] [ssl:error] [pid 3193588:tid 3193588] (70014)End of file found: [client 216.73.216.199:59756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:15:59.147615 2026] [ssl:error] [pid 3206470:tid 3206470] (EAI 2)Name or service not known: [client 144.76.19.72:63894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:59.147654 2026] [ssl:error] [pid 3206470:tid 3206470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:59.205536 2026] [ssl:error] [pid 3204457:tid 3204457] (EAI 2)Name or service not known: [client 144.76.19.72:63908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:15:59.205584 2026] [ssl:error] [pid 3204457:tid 3204457] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:15:59.567156 2026] [ssl:error] [pid 3206639:tid 3206639] (70014)End of file found: [client 216.73.216.199:26724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:00.009799 2026] [security2:error] [pid 3205091:tid 3205091] [client 51.68.247.221:21450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "p2studio.co.uk"] [uri "/robots.txt"] [unique_id "amtAgCld_ZD4PvifjPVw0wAAACA"]
[Thu Jul 30 13:16:01.079356 2026] [security2:error] [pid 3205053:tid 3205053] [client 51.195.244.189:28458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "p2studio.co.uk"] [uri "/"] [unique_id "amtAgZmgfJ0QB13yRMWAqAAAAAI"]
[Thu Jul 30 13:16:01.272337 2026] [lsapi:warn] [pid 3208715:tid 3208715] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:02.261901 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 144.76.19.72:39706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:02.261931 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:02.316286 2026] [ssl:error] [pid 3199023:tid 3199023] (EAI 2)Name or service not known: [client 144.76.19.72:39720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:02.316334 2026] [ssl:error] [pid 3199023:tid 3199023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:03.002208 2026] [ssl:error] [pid 3199023:tid 3199023] (70014)End of file found: [client 216.73.216.199:42960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:03.515756 2026] [core:error] [pid 3193724:tid 3193724] [client 66.249.66.8:63653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:03.515783 2026] [core:error] [pid 3193724:tid 3193724] [client 66.249.66.8:63653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:03.770132 2026] [lsapi:warn] [pid 3208715:tid 3208715] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:05.256743 2026] [access_compat:error] [pid 3205053:tid 3205053] [client 106.222.248.251:29089] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:16:05.371600 2026] [ssl:error] [pid 3206639:tid 3206639] (EAI 2)Name or service not known: [client 144.76.19.72:39734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:05.371634 2026] [ssl:error] [pid 3206639:tid 3206639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:05.418794 2026] [ssl:error] [pid 3193724:tid 3193724] (70014)End of file found: [client 216.73.216.199:61422] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:05.427231 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 144.76.19.72:39742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:05.427255 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:05.503603 2026] [security2:error] [pid 3192733:tid 3192733] [client 106.219.88.148:12853] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAhdW9PUlofDhQr33eyAAAAAQ"]
[Thu Jul 30 13:16:05.503651 2026] [security2:error] [pid 3192733:tid 3192733] [client 106.219.88.148:12853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAhdW9PUlofDhQr33eyAAAAAQ"]
[Thu Jul 30 13:16:05.503912 2026] [security2:error] [pid 3192733:tid 3192733] [client 106.219.88.148:12853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAhdW9PUlofDhQr33eyAAAAAQ"]
[Thu Jul 30 13:16:06.565816 2026] [core:error] [pid 3198952:tid 3198952] [client 57.141.0.38:48798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:06.565848 2026] [core:error] [pid 3198952:tid 3198952] [client 57.141.0.38:48798] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:07.087659 2026] [authz_core:error] [pid 3194789:tid 3194789] [client 52.238.199.152:6344] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 13:16:07.794741 2026] [security2:error] [pid 3198952:tid 3198952] [client 43.167.252.201:50279] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAh7jjyL1_VirXC21FNAAAAAk"]
[Thu Jul 30 13:16:07.794785 2026] [security2:error] [pid 3198952:tid 3198952] [client 43.167.252.201:50279] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAh7jjyL1_VirXC21FNAAAAAk"]
[Thu Jul 30 13:16:07.795021 2026] [security2:error] [pid 3198952:tid 3198952] [client 43.167.252.201:50279] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAh7jjyL1_VirXC21FNAAAAAk"]
[Thu Jul 30 13:16:08.133632 2026] [ssl:error] [pid 3195594:tid 3195594] (70014)End of file found: [client 216.73.216.199:29558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:08.482499 2026] [ssl:error] [pid 3205134:tid 3205134] (EAI 2)Name or service not known: [client 144.76.19.72:39756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:08.482527 2026] [ssl:error] [pid 3205134:tid 3205134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:08.533907 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:39760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:08.533948 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:08.632779 2026] [ssl:error] [pid 3194752:tid 3194752] (70014)End of file found: [client 216.73.216.199:26816] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:10.541866 2026] [authz_core:error] [pid 3194789:tid 3194789] [client 52.238.199.152:6344] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/includes/error_log
[Thu Jul 30 13:16:10.868941 2026] [autoindex:error] [pid 3209224:tid 3209224] [client 20.193.250.173:63861] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jul 30 13:16:11.410339 2026] [authz_core:error] [pid 3194789:tid 3194789] [client 52.238.199.152:6344] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/error_log
[Thu Jul 30 13:16:11.531800 2026] [security2:error] [pid 3167187:tid 3167187] [client 43.167.252.201:16035] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAi1IOYBlKOuIdcBy3kAAAADE"]
[Thu Jul 30 13:16:11.531853 2026] [security2:error] [pid 3167187:tid 3167187] [client 43.167.252.201:16035] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAi1IOYBlKOuIdcBy3kAAAADE"]
[Thu Jul 30 13:16:11.532122 2026] [security2:error] [pid 3167187:tid 3167187] [client 43.167.252.201:16035] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAi1IOYBlKOuIdcBy3kAAAADE"]
[Thu Jul 30 13:16:11.591240 2026] [ssl:error] [pid 3208658:tid 3208658] (EAI 2)Name or service not known: [client 144.76.19.72:35164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:11.591276 2026] [ssl:error] [pid 3208658:tid 3208658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:11.646233 2026] [ssl:error] [pid 3206694:tid 3206694] (EAI 2)Name or service not known: [client 144.76.19.72:35172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:11.646262 2026] [ssl:error] [pid 3206694:tid 3206694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:12.981044 2026] [authz_core:error] [pid 3194789:tid 3194789] [client 52.238.199.152:6344] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/PHPMailer/error_log
[Thu Jul 30 13:16:13.196124 2026] [authz_core:error] [pid 3206693:tid 3206693] [client 57.141.0.10:44612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:16:13.196753 2026] [authz_core:error] [pid 3206693:tid 3206693] [client 57.141.0.10:44612] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:16:13.233254 2026] [lsapi:warn] [pid 3199021:tid 3199021] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:13.558544 2026] [ssl:error] [pid 3198300:tid 3198300] (70014)End of file found: [client 216.73.216.199:64746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:14.185261 2026] [security2:error] [pid 3205135:tid 3205135] [client 114.119.157.183:61991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~103,102/request_format~html"] [unique_id "amtAjuT3TQKn6zDb3iBcGgAAADs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E103
[Thu Jul 30 13:16:14.724011 2026] [ssl:error] [pid 3208715:tid 3208715] (EAI 2)Name or service not known: [client 144.76.19.72:35182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:14.724080 2026] [ssl:error] [pid 3208715:tid 3208715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:14.782022 2026] [ssl:error] [pid 3210507:tid 3210507] (EAI 2)Name or service not known: [client 144.76.19.72:35186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:14.782099 2026] [ssl:error] [pid 3210507:tid 3210507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:14.924144 2026] [lsapi:warn] [pid 3199021:tid 3199021] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:15.270668 2026] [access_compat:error] [pid 3197099:tid 3197099] [client 106.222.248.251:6953] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:16:15.362509 2026] [security2:error] [pid 3208715:tid 3208715] [client 114.119.157.183:62003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~103,102/request_format~html"] [unique_id "amtAj4vxTFD-rnyau-_7yAAAAD0"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E103
[Thu Jul 30 13:16:15.368829 2026] [ssl:error] [pid 3205839:tid 3205839] (70014)End of file found: [client 216.73.216.199:61246] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:16.576935 2026] [ssl:error] [pid 3210552:tid 3210552] (70014)End of file found: [client 216.73.216.199:17203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:17.841550 2026] [ssl:error] [pid 3205131:tid 3205131] (EAI 2)Name or service not known: [client 144.76.19.72:35198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:17.841582 2026] [ssl:error] [pid 3205131:tid 3205131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:17.893601 2026] [ssl:error] [pid 3199023:tid 3199023] (EAI 2)Name or service not known: [client 144.76.19.72:35212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:17.893640 2026] [ssl:error] [pid 3199023:tid 3199023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:18.882994 2026] [ssl:error] [pid 3199023:tid 3199023] (70014)End of file found: [client 216.73.216.199:27750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:19.453567 2026] [authz_core:error] [pid 3201304:tid 3201304] [client 52.238.199.152:6279] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 13:16:20.670293 2026] [ssl:error] [pid 3204457:tid 3204457] (70014)End of file found: [client 216.73.216.199:31616] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:20.950221 2026] [ssl:error] [pid 3194789:tid 3194789] (EAI 2)Name or service not known: [client 144.76.19.72:30602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:20.950255 2026] [ssl:error] [pid 3194789:tid 3194789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:21.005638 2026] [ssl:error] [pid 3205131:tid 3205131] (EAI 2)Name or service not known: [client 144.76.19.72:30612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:21.005691 2026] [ssl:error] [pid 3205131:tid 3205131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:21.282331 2026] [security2:error] [pid 3205134:tid 3205134] [client 185.191.171.7:24742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9468.0/prev_next,next.html"] [unique_id "amtAlT9cqIbUFQ9-rVy2UQAAADo"]
[Thu Jul 30 13:16:22.296578 2026] [ssl:error] [pid 3210200:tid 3210200] (70014)End of file found: [client 216.73.216.199:13477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:22.902457 2026] [lsapi:warn] [pid 3206639:tid 3206639] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:24.058644 2026] [ssl:error] [pid 3206639:tid 3206639] (EAI 2)Name or service not known: [client 144.76.19.72:30618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:24.058676 2026] [ssl:error] [pid 3206639:tid 3206639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:24.113590 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:30622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:24.113620 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:24.292754 2026] [ssl:error] [pid 3199023:tid 3199023] (70014)End of file found: [client 216.73.216.199:25109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:24.471047 2026] [access_compat:error] [pid 3210552:tid 3210552] [client 106.222.248.251:10479] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:16:24.953563 2026] [access_compat:error] [pid 3206695:tid 3206695] [client 45.158.164.139:52564] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:16:26.813111 2026] [core:error] [pid 3194752:tid 3194752] (13)Permission denied: [client 216.73.216.199:57082] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/clocksource/drivers_probe
[Thu Jul 30 13:16:27.113625 2026] [ssl:error] [pid 3194752:tid 3194752] (70014)End of file found: [client 216.73.216.199:57082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:27.184323 2026] [ssl:error] [pid 3209223:tid 3209223] (EAI 2)Name or service not known: [client 144.76.19.72:30626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:27.184372 2026] [ssl:error] [pid 3209223:tid 3209223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:27.240688 2026] [ssl:error] [pid 3205091:tid 3205091] (EAI 2)Name or service not known: [client 144.76.19.72:30638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:27.240713 2026] [ssl:error] [pid 3205091:tid 3205091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:27.598427 2026] [ssl:error] [pid 3204457:tid 3204457] (70014)End of file found: [client 216.73.216.199:44219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:27.756764 2026] [security2:error] [pid 3209223:tid 3209223] [client 23.154.136.246:27426] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns1.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtAm9TXIClCtqSoShl3GQAAAC4"]
[Thu Jul 30 13:16:27.757034 2026] [security2:error] [pid 3209223:tid 3209223] [client 23.154.136.246:27426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtAm9TXIClCtqSoShl3GQAAAC4"]
[Thu Jul 30 13:16:27.757245 2026] [security2:error] [pid 3209223:tid 3209223] [client 23.154.136.246:27426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns1.ns-narvi.com"] [uri "/403.shtml"] [unique_id "amtAm9TXIClCtqSoShl3GQAAAC4"]
[Thu Jul 30 13:16:27.945131 2026] [lsapi:warn] [pid 3197099:tid 3197099] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:28.019362 2026] [security2:error] [pid 3209223:tid 3209223] [client 23.154.136.246:27430] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns1.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtAnNTXIClCtqSoShl3GgAAAC4"]
[Thu Jul 30 13:16:28.019657 2026] [security2:error] [pid 3209223:tid 3209223] [client 23.154.136.246:27430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtAnNTXIClCtqSoShl3GgAAAC4"]
[Thu Jul 30 13:16:28.019850 2026] [security2:error] [pid 3209223:tid 3209223] [client 23.154.136.246:27430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns1.ns-narvi.com"] [uri "/403.shtml"] [unique_id "amtAnNTXIClCtqSoShl3GgAAAC4"]
[Thu Jul 30 13:16:28.193947 2026] [authz_core:error] [pid 3205053:tid 3205053] [client 57.141.0.46:41296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:16:28.194591 2026] [authz_core:error] [pid 3205053:tid 3205053] [client 57.141.0.46:41296] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:16:30.294258 2026] [ssl:error] [pid 3198300:tid 3198300] (EAI 2)Name or service not known: [client 144.76.19.72:57716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:30.294286 2026] [ssl:error] [pid 3198300:tid 3198300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:30.349932 2026] [ssl:error] [pid 3204099:tid 3204099] (EAI 2)Name or service not known: [client 144.76.19.72:57726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:30.349953 2026] [ssl:error] [pid 3204099:tid 3204099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:31.690503 2026] [cgi:error] [pid 3210551:tid 3210551] [client 20.104.22.47:22533] AH02812: stderr from /home/islay/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:16:32.799909 2026] [cgi:error] [pid 3205133:tid 3205133] [client 216.73.216.199:30239] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/systemd/catalog/systemd.pl.catalog: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:16:32.799963 2026] [cgi:error] [pid 3205133:tid 3205133] [client 216.73.216.199:30239] End of script output before headers: systemd.pl.catalog
[Thu Jul 30 13:16:33.430012 2026] [ssl:error] [pid 3209224:tid 3209224] (EAI 2)Name or service not known: [client 144.76.19.72:57736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:33.430043 2026] [ssl:error] [pid 3209224:tid 3209224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:33.482364 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:57740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:33.482403 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:33.883213 2026] [lsapi:warn] [pid 3205133:tid 3205133] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:34.103856 2026] [lsapi:warn] [pid 3205090:tid 3205090] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:34.129845 2026] [core:error] [pid 3211320:tid 3211320] [client 57.141.0.70:35114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:34.129869 2026] [core:error] [pid 3211320:tid 3211320] [client 57.141.0.70:35114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:35.068612 2026] [access_compat:error] [pid 3209168:tid 3209168] [client 106.222.248.251:17874] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:16:35.080203 2026] [security2:error] [pid 3211597:tid 3211597] [client 51.68.111.239:20477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.gatkabfs.com"] [uri "/robots.txt"] [unique_id "amtAoyyWnSq_e7s57ysbXgAAABs"]
[Thu Jul 30 13:16:35.080356 2026] [access_compat:error] [pid 3211597:tid 3211597] [client 51.68.111.239:20477] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:16:35.253411 2026] [ssl:error] [pid 3204099:tid 3204099] (70014)End of file found: [client 216.73.216.199:16380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:36.539322 2026] [ssl:error] [pid 3205135:tid 3205135] (EAI 2)Name or service not known: [client 144.76.19.72:57756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:36.539352 2026] [ssl:error] [pid 3205135:tid 3205135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:36.594415 2026] [ssl:error] [pid 3208595:tid 3208595] (EAI 2)Name or service not known: [client 144.76.19.72:57762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:36.594442 2026] [ssl:error] [pid 3208595:tid 3208595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:36.647676 2026] [ssl:error] [pid 3198055:tid 3198055] (70014)End of file found: [client 216.73.216.199:36617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:37.450957 2026] [ssl:error] [pid 3205089:tid 3205089] (70014)End of file found: [client 216.73.216.199:53211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:37.555082 2026] [ssl:error] [pid 3192733:tid 3192733] (70014)End of file found: [client 216.73.216.199:59759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:38.153097 2026] [authz_core:error] [pid 3211597:tid 3211597] [client 57.141.0.50:55546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:16:38.153791 2026] [authz_core:error] [pid 3211597:tid 3211597] [client 57.141.0.50:55546] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:16:39.650893 2026] [ssl:error] [pid 3212106:tid 3212106] (EAI 2)Name or service not known: [client 144.76.19.72:38110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:39.650932 2026] [ssl:error] [pid 3212106:tid 3212106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:39.707305 2026] [ssl:error] [pid 3211650:tid 3211650] (EAI 2)Name or service not known: [client 144.76.19.72:38116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:39.707338 2026] [ssl:error] [pid 3211650:tid 3211650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:40.308619 2026] [security2:error] [pid 3208424:tid 3208424] [client 146.56.199.139:51474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtAqL7WH3ioeVHfTuEFcAAAAA4"]
[Thu Jul 30 13:16:40.309634 2026] [authz_core:error] [pid 3208424:tid 3208424] [client 146.56.199.139:51474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:16:40.310186 2026] [authz_core:error] [pid 3208424:tid 3208424] [client 146.56.199.139:51474] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:16:42.434056 2026] [security2:error] [pid 3205088:tid 3205088] [client 23.154.136.246:31986] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns1.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtAqh1zOXY08-BVGRSYQwAAAAw"]
[Thu Jul 30 13:16:42.434287 2026] [security2:error] [pid 3205088:tid 3205088] [client 23.154.136.246:31986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtAqh1zOXY08-BVGRSYQwAAAAw"]
[Thu Jul 30 13:16:42.434491 2026] [security2:error] [pid 3205088:tid 3205088] [client 23.154.136.246:31986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns1.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtAqh1zOXY08-BVGRSYQwAAAAw"]
[Thu Jul 30 13:16:42.667559 2026] [security2:error] [pid 3198055:tid 3198055] [client 183.81.34.37:46830] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "blow-hairstudio.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtAql2S3lbaO5qvvbdT-wAAABc"]
[Thu Jul 30 13:16:42.764088 2026] [ssl:error] [pid 3208716:tid 3208716] (EAI 2)Name or service not known: [client 144.76.19.72:38122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:42.764117 2026] [ssl:error] [pid 3208716:tid 3208716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:42.820049 2026] [ssl:error] [pid 3212361:tid 3212361] (EAI 2)Name or service not known: [client 144.76.19.72:38128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:42.820109 2026] [ssl:error] [pid 3212361:tid 3212361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:42.967048 2026] [security2:error] [pid 3205088:tid 3205088] [client 23.154.136.246:31994] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns1.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtAqh1zOXY08-BVGRSYRAAAAAw"]
[Thu Jul 30 13:16:42.967347 2026] [security2:error] [pid 3205088:tid 3205088] [client 23.154.136.246:31994] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns1.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtAqh1zOXY08-BVGRSYRAAAAAw"]
[Thu Jul 30 13:16:42.967552 2026] [security2:error] [pid 3205088:tid 3205088] [client 23.154.136.246:31994] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns1.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtAqh1zOXY08-BVGRSYRAAAAAw"]
[Thu Jul 30 13:16:44.270479 2026] [lsapi:warn] [pid 3207320:tid 3207320] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:44.483200 2026] [core:error] [pid 3211650:tid 3211650] (13)Permission denied: [client 216.73.216.199:57413] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/bin/chsh
[Thu Jul 30 13:16:44.547534 2026] [lsapi:warn] [pid 3167187:tid 3167187] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:45.647217 2026] [security2:error] [pid 3205088:tid 3205088] [client 85.208.96.203:37410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/pickleball-tournament-names"] [unique_id "amtArR1zOXY08-BVGRSYRwAAAAw"]
[Thu Jul 30 13:16:45.841011 2026] [security2:error] [pid 3200895:tid 3200895] [client 43.153.7.191:48880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.gangway-media.com"] [uri "/"] [unique_id "amtArWjfvDpyX0zNgJKR3AAAACU"]
[Thu Jul 30 13:16:45.872400 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:38132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:45.872430 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:45.929891 2026] [ssl:error] [pid 3205129:tid 3205129] (EAI 2)Name or service not known: [client 144.76.19.72:38136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:45.929920 2026] [ssl:error] [pid 3205129:tid 3205129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:46.292031 2026] [core:error] [pid 3192733:tid 3192733] (13)Permission denied: [client 216.73.216.199:11525] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/names_cache/objs_per_slab
[Thu Jul 30 13:16:46.591932 2026] [security2:error] [pid 3192733:tid 3192733] [client 216.73.216.199:11525] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/access.conf"] [unique_id "amtArtW9PUlofDhQr33e0QAAAAQ"]
[Thu Jul 30 13:16:46.592271 2026] [security2:error] [pid 3192733:tid 3192733] [client 216.73.216.199:11525] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/access.conf"] [unique_id "amtArtW9PUlofDhQr33e0QAAAAQ"]
[Thu Jul 30 13:16:46.592532 2026] [security2:error] [pid 3192733:tid 3192733] [client 216.73.216.199:11525] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/access.conf"] [unique_id "amtArtW9PUlofDhQr33e0QAAAAQ"]
[Thu Jul 30 13:16:47.495349 2026] [core:error] [pid 3192733:tid 3192733] (13)Permission denied: [client 216.73.216.199:11525] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Operand/slabs
[Thu Jul 30 13:16:47.671848 2026] [security2:error] [pid 3204099:tid 3204099] [client 43.153.7.191:54810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.gangway-media.com"] [uri "/"] [unique_id "amtAr74yX_wI7zzI85_t8wAAABw"], referer: http://www.gangway-media.com
[Thu Jul 30 13:16:47.805315 2026] [ssl:error] [pid 3192733:tid 3192733] (70014)End of file found: [client 216.73.216.199:11525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:47.880253 2026] [core:error] [pid 3208657:tid 3208657] [client 66.249.66.39:56753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:47.880280 2026] [core:error] [pid 3208657:tid 3208657] [client 66.249.66.39:56753] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:47.885146 2026] [core:error] [pid 3210779:tid 3210779] [client 66.249.66.167:59394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:47.885170 2026] [core:error] [pid 3210779:tid 3210779] [client 66.249.66.167:59394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:47.899664 2026] [access_compat:error] [pid 3202364:tid 3202364] [client 106.222.248.251:23386] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:16:48.093015 2026] [core:error] [pid 3211650:tid 3211650] (13)Permission denied: [client 216.73.216.199:57413] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/remote_node_defrag_ratio
[Thu Jul 30 13:16:48.694998 2026] [ssl:error] [pid 3211650:tid 3211650] (70014)End of file found: [client 216.73.216.199:57413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:48.987564 2026] [ssl:error] [pid 3210779:tid 3210779] (EAI 2)Name or service not known: [client 144.76.19.72:38152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:48.987597 2026] [ssl:error] [pid 3210779:tid 3210779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:49.042474 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:38158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:49.042515 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:49.608565 2026] [ssl:error] [pid 3212106:tid 3212106] (70014)End of file found: [client 216.73.216.199:16794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:52.097521 2026] [ssl:error] [pid 3193724:tid 3193724] (EAI 2)Name or service not known: [client 144.76.19.72:19910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:52.097551 2026] [ssl:error] [pid 3193724:tid 3193724] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:52.150527 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:19924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:52.150565 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:53.092965 2026] [ssl:error] [pid 3208658:tid 3208658] (EAI 2)Name or service not known: [client 34.96.62.179:63457] AH01972: could not resolve address of OCSP responder r3.o.lencr.org
[Thu Jul 30 13:16:53.093017 2026] [ssl:error] [pid 3208658:tid 3208658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:53.148021 2026] [ssl:error] [pid 3205089:tid 3205089] (70014)End of file found: [client 216.73.216.199:36776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:53.155005 2026] [ssl:error] [pid 3208658:tid 3208658] (EAI 2)Name or service not known: [client 34.96.62.179:9124] AH01972: could not resolve address of OCSP responder r3.o.lencr.org
[Thu Jul 30 13:16:53.155028 2026] [ssl:error] [pid 3208658:tid 3208658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:53.211731 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 34.96.62.179:50027] AH01972: could not resolve address of OCSP responder r3.o.lencr.org
[Thu Jul 30 13:16:53.211759 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:54.314259 2026] [core:error] [pid 3197100:tid 3197100] [client 66.249.66.39:46267] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:54.314285 2026] [core:error] [pid 3197100:tid 3197100] [client 66.249.66.39:46267] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:54.734539 2026] [lsapi:warn] [pid 3208657:tid 3208657] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:54.758406 2026] [ssl:error] [pid 3167187:tid 3167187] (70014)End of file found: [client 216.73.216.199:62562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:55.105149 2026] [security2:error] [pid 3213065:tid 3213065] [client 185.191.171.18:12444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAt2bVjJvyV0FnvlpvSwAAACQ"]
[Thu Jul 30 13:16:55.206223 2026] [ssl:error] [pid 3210507:tid 3210507] (EAI 2)Name or service not known: [client 144.76.19.72:19926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:55.206250 2026] [ssl:error] [pid 3210507:tid 3210507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:55.259009 2026] [ssl:error] [pid 3211649:tid 3211649] (EAI 2)Name or service not known: [client 144.76.19.72:19930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:55.259044 2026] [ssl:error] [pid 3211649:tid 3211649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:55.537133 2026] [core:error] [pid 3209224:tid 3209224] [client 66.249.66.167:45687] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:55.537161 2026] [core:error] [pid 3209224:tid 3209224] [client 66.249.66.167:45687] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:16:55.592709 2026] [lsapi:warn] [pid 3206694:tid 3206694] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:16:55.957846 2026] [ssl:error] [pid 3199023:tid 3199023] (70014)End of file found: [client 216.73.216.199:6711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:16:56.547443 2026] [security2:error] [pid 3211597:tid 3211597] [client 74.7.241.2:55628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hugoashmore.org"] [uri "/"] [unique_id "amtAuCyWnSq_e7s57ysbaAAAABs"]
[Thu Jul 30 13:16:56.794026 2026] [access_compat:error] [pid 3208657:tid 3208657] [client 106.222.248.251:31175] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:16:58.340940 2026] [ssl:error] [pid 3210507:tid 3210507] (EAI 2)Name or service not known: [client 144.76.19.72:19934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:58.340978 2026] [ssl:error] [pid 3210507:tid 3210507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:16:58.396607 2026] [ssl:error] [pid 3205135:tid 3205135] (EAI 2)Name or service not known: [client 144.76.19.72:19940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:16:58.396637 2026] [ssl:error] [pid 3205135:tid 3205135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:00.471626 2026] [ssl:error] [pid 3199021:tid 3199021] (70014)End of file found: [client 216.73.216.199:65418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:01.450549 2026] [ssl:error] [pid 3210551:tid 3210551] (EAI 2)Name or service not known: [client 144.76.19.72:57020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:01.450583 2026] [ssl:error] [pid 3210551:tid 3210551] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:01.538343 2026] [ssl:error] [pid 3205091:tid 3205091] (EAI 2)Name or service not known: [client 144.76.19.72:57024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:01.538388 2026] [ssl:error] [pid 3205091:tid 3205091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:01.561519 2026] [security2:error] [pid 3206470:tid 3206470] [client 162.62.213.165:57672] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.co.uk"] [uri "/"] [unique_id "amtAvWAdQt_a5VL7Htxm_AAAAAM"]
[Thu Jul 30 13:17:01.679723 2026] [ssl:error] [pid 3211703:tid 3211703] (70014)End of file found: [client 216.73.216.199:32978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:02.034753 2026] [security2:error] [pid 3209224:tid 3209224] [client 162.62.213.165:36654] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtAvpa4SYgF9Ruv5I327wAAADI"], referer: http://saturnsports.co.uk
[Thu Jul 30 13:17:02.732695 2026] [core:error] [pid 3212907:tid 3212907] [client 57.141.0.42:62904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:02.732723 2026] [core:error] [pid 3212907:tid 3212907] [client 57.141.0.42:62904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:03.006701 2026] [core:error] [pid 3205091:tid 3205091] [client 66.249.64.170:53010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:03.006725 2026] [core:error] [pid 3205091:tid 3205091] [client 66.249.64.170:53010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:03.207157 2026] [core:error] [pid 3208424:tid 3208424] (13)Permission denied: [client 216.73.216.199:4005] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_tables/sections/__jump_table
[Thu Jul 30 13:17:03.514327 2026] [ssl:error] [pid 3208424:tid 3208424] (70014)End of file found: [client 216.73.216.199:4005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:04.593763 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:57032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:04.593802 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:04.649512 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 144.76.19.72:57040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:04.649546 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:05.202748 2026] [lsapi:warn] [pid 3200169:tid 3200169] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:05.747899 2026] [security2:error] [pid 3210200:tid 3210200] [client 200.110.206.251:54922] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAwbag3vTCV-ev5RxRSwAAAAg"]
[Thu Jul 30 13:17:05.747950 2026] [security2:error] [pid 3210200:tid 3210200] [client 200.110.206.251:54922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAwbag3vTCV-ev5RxRSwAAAAg"]
[Thu Jul 30 13:17:05.748228 2026] [security2:error] [pid 3210200:tid 3210200] [client 200.110.206.251:54922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAwbag3vTCV-ev5RxRSwAAAAg"]
[Thu Jul 30 13:17:06.158677 2026] [lsapi:warn] [pid 3209224:tid 3209224] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:06.232976 2026] [ssl:error] [pid 3205022:tid 3205022] (70014)End of file found: [client 216.73.216.199:16365] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:07.041592 2026] [ssl:error] [pid 3204099:tid 3204099] (70014)End of file found: [client 216.73.216.199:38742] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:07.142662 2026] [access_compat:error] [pid 3205129:tid 3205129] [client 106.222.248.251:24433] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:17:07.177664 2026] [core:error] [pid 3198055:tid 3198055] [client 57.141.0.10:41804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:07.177694 2026] [core:error] [pid 3198055:tid 3198055] [client 57.141.0.10:41804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:07.705518 2026] [ssl:error] [pid 3167187:tid 3167187] (EAI 2)Name or service not known: [client 144.76.19.72:57044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:07.705551 2026] [ssl:error] [pid 3167187:tid 3167187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:07.762164 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:57054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:07.762195 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:07.907580 2026] [authz_core:error] [pid 3205135:tid 3205135] [client 57.141.0.60:46380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:17:07.908210 2026] [authz_core:error] [pid 3205135:tid 3205135] [client 57.141.0.60:46380] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:17:08.211616 2026] [lsapi:warn] [pid 3199021:tid 3199021] [client 15.160.148.244:55502] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:17:08.857438 2026] [security2:error] [pid 3199023:tid 3199023] [client 38.224.34.156:34712] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAxFROeq9lyr0oLV3_ZQAAABU"]
[Thu Jul 30 13:17:08.857495 2026] [security2:error] [pid 3199023:tid 3199023] [client 38.224.34.156:34712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAxFROeq9lyr0oLV3_ZQAAABU"]
[Thu Jul 30 13:17:08.857728 2026] [security2:error] [pid 3199023:tid 3199023] [client 38.224.34.156:34712] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAxFROeq9lyr0oLV3_ZQAAABU"]
[Thu Jul 30 13:17:09.311227 2026] [cgi:error] [pid 3209223:tid 3209223] [client 20.203.133.142:55741] AH02812: stderr from /home/hatchw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:17:09.870625 2026] [ssl:error] [pid 3211649:tid 3211649] (70014)End of file found: [client 216.73.216.199:36141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:10.816943 2026] [ssl:error] [pid 3205089:tid 3205089] (EAI 2)Name or service not known: [client 144.76.19.72:65194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:10.817011 2026] [ssl:error] [pid 3205089:tid 3205089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:10.871572 2026] [ssl:error] [pid 3206695:tid 3206695] (EAI 2)Name or service not known: [client 144.76.19.72:65208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:10.871617 2026] [ssl:error] [pid 3206695:tid 3206695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:11.686866 2026] [security2:error] [pid 3205135:tid 3205135] [client 216.73.216.199:46159] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/lfd.log"] [unique_id "amtAx-T3TQKn6zDb3iBcMQAAADs"]
[Thu Jul 30 13:17:11.687209 2026] [security2:error] [pid 3205135:tid 3205135] [client 216.73.216.199:46159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/lfd.log"] [unique_id "amtAx-T3TQKn6zDb3iBcMQAAADs"]
[Thu Jul 30 13:17:11.687416 2026] [security2:error] [pid 3205135:tid 3205135] [client 216.73.216.199:46159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/lfd.log"] [unique_id "amtAx-T3TQKn6zDb3iBcMQAAADs"]
[Thu Jul 30 13:17:11.991226 2026] [ssl:error] [pid 3205135:tid 3205135] (70014)End of file found: [client 216.73.216.199:46159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:12.575706 2026] [core:error] [pid 3213662:tid 3213662] [client 57.141.0.34:51030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:12.575732 2026] [core:error] [pid 3213662:tid 3213662] [client 57.141.0.34:51030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:12.798148 2026] [authz_core:error] [pid 3211705:tid 3211705] [client 57.141.0.29:43512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:17:12.798813 2026] [authz_core:error] [pid 3211705:tid 3211705] [client 57.141.0.29:43512] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:17:12.931416 2026] [core:error] [pid 3205022:tid 3205022] [client 66.249.66.8:35500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:12.931446 2026] [core:error] [pid 3205022:tid 3205022] [client 66.249.66.8:35500] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:13.928202 2026] [ssl:error] [pid 3200895:tid 3200895] (EAI 2)Name or service not known: [client 144.76.19.72:65212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:13.928227 2026] [ssl:error] [pid 3200895:tid 3200895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:13.986506 2026] [ssl:error] [pid 3205129:tid 3205129] (EAI 2)Name or service not known: [client 144.76.19.72:65214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:13.986538 2026] [ssl:error] [pid 3205129:tid 3205129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:14.111078 2026] [ssl:error] [pid 3205089:tid 3205089] (70014)End of file found: [client 216.73.216.199:30358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:14.322549 2026] [security2:error] [pid 3205022:tid 3205022] [client 189.158.176.53:43960] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAytmtmMuAc_xWkbCHhwAAAAE"]
[Thu Jul 30 13:17:14.322599 2026] [security2:error] [pid 3205022:tid 3205022] [client 189.158.176.53:43960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtAytmtmMuAc_xWkbCHhwAAAAE"]
[Thu Jul 30 13:17:14.322832 2026] [security2:error] [pid 3205022:tid 3205022] [client 189.158.176.53:43960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtAytmtmMuAc_xWkbCHhwAAAAE"]
[Thu Jul 30 13:17:15.163643 2026] [security2:error] [pid 3200895:tid 3200895] [client 51.68.111.245:18261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.sharonduggal.co.uk"] [uri "/robots.txt"] [unique_id "amtAy2jfvDpyX0zNgJKR5QAAACU"]
[Thu Jul 30 13:17:15.201130 2026] [ssl:error] [pid 3210200:tid 3210200] (70014)End of file found: [client 216.73.216.199:33648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:15.673844 2026] [lsapi:warn] [pid 3205131:tid 3205131] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:16.900681 2026] [lsapi:warn] [pid 3211705:tid 3211705] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:17.043520 2026] [ssl:error] [pid 3206639:tid 3206639] (EAI 2)Name or service not known: [client 144.76.19.72:65220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:17.043550 2026] [ssl:error] [pid 3206639:tid 3206639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:17.099630 2026] [ssl:error] [pid 3211320:tid 3211320] (EAI 2)Name or service not known: [client 144.76.19.72:65234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:17.099662 2026] [ssl:error] [pid 3211320:tid 3211320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:17.697265 2026] [authz_core:error] [pid 3205131:tid 3205131] [client 57.141.0.27:29734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:17:17.697923 2026] [authz_core:error] [pid 3205131:tid 3205131] [client 57.141.0.27:29734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:17:17.749788 2026] [access_compat:error] [pid 3192733:tid 3192733] [client 106.222.248.251:11480] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:17:17.800944 2026] [core:error] [pid 3207320:tid 3207320] [client 57.141.0.63:46314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:17.800974 2026] [core:error] [pid 3207320:tid 3207320] [client 57.141.0.63:46314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:19.528169 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:33992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:19.829088 2026] [ssl:error] [pid 3205022:tid 3205022] (70014)End of file found: [client 216.73.216.199:25452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:20.154656 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:58846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:20.154685 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:20.213933 2026] [ssl:error] [pid 3204024:tid 3204024] (EAI 2)Name or service not known: [client 144.76.19.72:58862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:20.213969 2026] [ssl:error] [pid 3204024:tid 3204024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:21.340115 2026] [ssl:error] [pid 3205089:tid 3205089] (70014)End of file found: [client 216.73.216.199:49551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:23.295856 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:58878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:23.295899 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:23.350369 2026] [ssl:error] [pid 3206638:tid 3206638] (EAI 2)Name or service not known: [client 144.76.19.72:58882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:23.350411 2026] [ssl:error] [pid 3206638:tid 3206638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:25.431712 2026] [authz_core:error] [pid 3199415:tid 3199415] [client 57.141.0.28:23284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:17:25.432348 2026] [authz_core:error] [pid 3199415:tid 3199415] [client 57.141.0.28:23284] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:17:26.132278 2026] [lsapi:warn] [pid 3205022:tid 3205022] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:26.405641 2026] [ssl:error] [pid 3199415:tid 3199415] (EAI 2)Name or service not known: [client 144.76.19.72:58888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:26.405676 2026] [ssl:error] [pid 3199415:tid 3199415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:26.458549 2026] [ssl:error] [pid 3206638:tid 3206638] (EAI 2)Name or service not known: [client 144.76.19.72:58900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:26.458583 2026] [ssl:error] [pid 3206638:tid 3206638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:26.466956 2026] [security2:error] [pid 3212907:tid 3212907] [client 216.73.216.199:55851] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/time.conf"] [unique_id "amtA1qy2i5czgecEnNFjXQAAAAo"]
[Thu Jul 30 13:17:26.467248 2026] [security2:error] [pid 3212907:tid 3212907] [client 216.73.216.199:55851] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/time.conf"] [unique_id "amtA1qy2i5czgecEnNFjXQAAAAo"]
[Thu Jul 30 13:17:26.467475 2026] [security2:error] [pid 3212907:tid 3212907] [client 216.73.216.199:55851] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/time.conf"] [unique_id "amtA1qy2i5czgecEnNFjXQAAAAo"]
[Thu Jul 30 13:17:27.675737 2026] [lsapi:warn] [pid 3211705:tid 3211705] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:27.920744 2026] [access_compat:error] [pid 3205091:tid 3205091] [client 45.158.164.139:58066] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:17:28.242656 2026] [access_compat:error] [pid 3174653:tid 3174653] [client 106.222.248.251:3177] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:17:29.477133 2026] [ssl:error] [pid 3199023:tid 3199023] (70014)End of file found: [client 216.73.216.199:56831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:29.555664 2026] [ssl:error] [pid 3200169:tid 3200169] (EAI 2)Name or service not known: [client 144.76.19.72:57948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:29.555699 2026] [ssl:error] [pid 3200169:tid 3200169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:29.614545 2026] [ssl:error] [pid 3211705:tid 3211705] (EAI 2)Name or service not known: [client 144.76.19.72:57952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:29.614582 2026] [ssl:error] [pid 3211705:tid 3211705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:29.952919 2026] [ssl:error] [pid 3212907:tid 3212907] (70014)End of file found: [client 216.73.216.199:55851] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:30.079865 2026] [ssl:error] [pid 3212850:tid 3212850] (70014)End of file found: [client 216.73.216.199:50696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:30.608686 2026] [access_compat:error] [pid 3211705:tid 3211705] [client 157.55.39.225:5204] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/robots.txt
[Thu Jul 30 13:17:30.608788 2026] [access_compat:error] [pid 3211705:tid 3211705] [client 157.55.39.225:5204] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:17:31.309613 2026] [core:error] [pid 3210200:tid 3210200] [client 57.141.0.46:61724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:31.309645 2026] [core:error] [pid 3210200:tid 3210200] [client 57.141.0.46:61724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:17:32.682130 2026] [ssl:error] [pid 3205053:tid 3205053] (EAI 2)Name or service not known: [client 144.76.19.72:57960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:32.682167 2026] [ssl:error] [pid 3205053:tid 3205053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:32.736673 2026] [ssl:error] [pid 3199021:tid 3199021] (EAI 2)Name or service not known: [client 144.76.19.72:57964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:32.736706 2026] [ssl:error] [pid 3199021:tid 3199021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:33.608780 2026] [security2:error] [pid 3211705:tid 3211705] [client 43.154.127.188:34618] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brightredsocks.com"] [uri "/"] [unique_id "amtA3Zi3CkoM01H4j-HFAQAAAEE"]
[Thu Jul 30 13:17:33.609644 2026] [core:crit] [pid 3211705:tid 3211705] (13)Permission denied: [client 43.154.127.188:34618] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 13:17:33.609693 2026] [authz_core:error] [pid 3211705:tid 3211705] [client 43.154.127.188:34618] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 13:17:33.610035 2026] [core:crit] [pid 3211705:tid 3211705] (13)Permission denied: [client 43.154.127.188:34618] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 13:17:33.610052 2026] [core:crit] [pid 3211705:tid 3211705] (13)Permission denied: [client 43.154.127.188:34618] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 13:17:33.610095 2026] [core:crit] [pid 3211705:tid 3211705] (13)Permission denied: [client 43.154.127.188:34618] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 13:17:35.702644 2026] [ssl:error] [pid 3205088:tid 3205088] (70014)End of file found: [client 216.73.216.199:49250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:35.788854 2026] [ssl:error] [pid 3212907:tid 3212907] (EAI 2)Name or service not known: [client 144.76.19.72:57966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:35.788890 2026] [ssl:error] [pid 3212907:tid 3212907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:35.815621 2026] [core:error] [pid 3199415:tid 3199415] (13)Permission denied: [client 216.73.216.199:28334] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/cache_dma
[Thu Jul 30 13:17:35.841835 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:57980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:35.841859 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:36.252462 2026] [ssl:error] [pid 3199415:tid 3199415] (70014)End of file found: [client 216.73.216.199:28334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:36.595198 2026] [lsapi:warn] [pid 3207320:tid 3207320] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:37.320524 2026] [access_compat:error] [pid 3174653:tid 3174653] [client 52.167.144.159:12666] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2008/06/incredible-hulk.jpg
[Thu Jul 30 13:17:37.320642 2026] [access_compat:error] [pid 3174653:tid 3174653] [client 52.167.144.159:12666] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:17:37.753495 2026] [core:error] [pid 3212907:tid 3212907] (13)Permission denied: [client 216.73.216.199:23740] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-128/validate
[Thu Jul 30 13:17:37.964690 2026] [security2:error] [pid 3211649:tid 3211649] [client 114.119.144.31:57773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30/request_format~html"] [unique_id "amtA4cmXGK1T2KjbBzKi9wAAADU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30,18/request_format~html
[Thu Jul 30 13:17:38.540792 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:38.814754 2026] [access_compat:error] [pid 3209224:tid 3209224] [client 106.222.248.251:23236] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:17:38.898937 2026] [ssl:error] [pid 3198300:tid 3198300] (EAI 2)Name or service not known: [client 144.76.19.72:57990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:38.898966 2026] [ssl:error] [pid 3198300:tid 3198300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:38.952452 2026] [ssl:error] [pid 3198300:tid 3198300] (EAI 2)Name or service not known: [client 144.76.19.72:58000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:38.952479 2026] [ssl:error] [pid 3198300:tid 3198300] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:39.411489 2026] [authz_core:error] [pid 3195594:tid 3195594] [client 57.141.0.42:31814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:17:39.412142 2026] [authz_core:error] [pid 3195594:tid 3195594] [client 57.141.0.42:31814] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:17:39.689913 2026] [security2:error] [pid 3201304:tid 3201304] [client 114.119.144.31:57777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30/request_format~html"] [unique_id "amtA411Ik7XXTnQJWwNXgAAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30,18/request_format~html
[Thu Jul 30 13:17:39.860712 2026] [ssl:error] [pid 3212907:tid 3212907] (70014)End of file found: [client 216.73.216.199:23740] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:41.255369 2026] [core:error] [pid 3211649:tid 3211649] (13)Permission denied: [client 216.73.216.199:43971] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_transaction_s/partial
[Thu Jul 30 13:17:41.365547 2026] [ssl:error] [pid 3211649:tid 3211649] (70014)End of file found: [client 216.73.216.199:43971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:42.011347 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 144.76.19.72:51800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:42.011384 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:42.064538 2026] [ssl:error] [pid 3199415:tid 3199415] (EAI 2)Name or service not known: [client 144.76.19.72:51814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:42.064586 2026] [ssl:error] [pid 3199415:tid 3199415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:42.575253 2026] [core:error] [pid 3200169:tid 3200169] (13)Permission denied: [client 216.73.216.199:26675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/line
[Thu Jul 30 13:17:43.480896 2026] [cgi:error] [pid 3215262:tid 3215262] [client 109.155.195.116:59338] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:17:44.683373 2026] [ssl:error] [pid 3200169:tid 3200169] (70014)End of file found: [client 216.73.216.199:26675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:45.118788 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:51830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:45.118835 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:45.173052 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:51846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:45.173097 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:45.885251 2026] [core:error] [pid 3205053:tid 3205053] (13)Permission denied: [client 216.73.216.199:53794] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_revoke_table_s/partial
[Thu Jul 30 13:17:46.283865 2026] [security2:error] [pid 3205090:tid 3205090] [client 185.191.171.16:13472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/moody-funeral-home-sylva,-nc"] [unique_id "amtA6vSA61rKiaiL_X7ipwAAAB0"]
[Thu Jul 30 13:17:46.488543 2026] [ssl:error] [pid 3205053:tid 3205053] (70014)End of file found: [client 216.73.216.199:53794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:47.047601 2026] [lsapi:warn] [pid 3198952:tid 3198952] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:47.387314 2026] [core:error] [pid 3198246:tid 3198246] (13)Permission denied: [client 216.73.216.199:23319] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/usersize
[Thu Jul 30 13:17:47.708999 2026] [security2:error] [pid 3174653:tid 3174653] [client 94.154.43.177:29604] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "blow-hairstudio.co.uk"] [uri "/.env"] [unique_id "amtA68eOSVrY1GjpPqHVDgAAAAU"]
[Thu Jul 30 13:17:47.709201 2026] [security2:error] [pid 3174653:tid 3174653] [client 94.154.43.177:29604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "blow-hairstudio.co.uk"] [uri "/.env"] [unique_id "amtA68eOSVrY1GjpPqHVDgAAAAU"]
[Thu Jul 30 13:17:48.231608 2026] [ssl:error] [pid 3205090:tid 3205090] (EAI 2)Name or service not known: [client 144.76.19.72:51860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:48.231656 2026] [ssl:error] [pid 3205090:tid 3205090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:48.283249 2026] [ssl:error] [pid 3208716:tid 3208716] (EAI 2)Name or service not known: [client 144.76.19.72:51874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:48.283281 2026] [ssl:error] [pid 3208716:tid 3208716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:48.601865 2026] [security2:error] [pid 3174653:tid 3174653] [client 94.154.43.177:29604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "blow-hairstudio.co.uk"] [uri "/index.php"] [unique_id "amtA68eOSVrY1GjpPqHVDgAAAAU"]
[Thu Jul 30 13:17:49.403419 2026] [security2:error] [pid 3198952:tid 3198952] [client 148.116.104.144:57148] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/gif"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "www.thatwall.com"] [uri "/"] [unique_id "amtA7bjjyL1_VirXC21FUQAAAAk"]
[Thu Jul 30 13:17:49.404442 2026] [security2:error] [pid 3198952:tid 3198952] [client 148.116.104.144:57148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.thatwall.com"] [uri "/"] [unique_id "amtA7bjjyL1_VirXC21FUQAAAAk"]
[Thu Jul 30 13:17:49.519542 2026] [access_compat:error] [pid 3208716:tid 3208716] [client 106.222.248.251:2394] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:17:49.596934 2026] [lsapi:warn] [pid 3197100:tid 3197100] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:49.678017 2026] [security2:error] [pid 3198952:tid 3198952] [client 148.116.104.144:57148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "www.thatwall.com"] [uri "/"] [unique_id "amtA7bjjyL1_VirXC21FUQAAAAk"]
[Thu Jul 30 13:17:50.715221 2026] [ssl:error] [pid 3211649:tid 3211649] (70014)End of file found: [client 216.73.216.199:39601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:51.012275 2026] [ssl:error] [pid 3212850:tid 3212850] (70014)End of file found: [client 216.73.216.199:24565] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:51.338897 2026] [ssl:error] [pid 3209223:tid 3209223] (EAI 2)Name or service not known: [client 144.76.19.72:21304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:51.338927 2026] [ssl:error] [pid 3209223:tid 3209223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:51.378203 2026] [authz_core:error] [pid 3206639:tid 3206639] [client 66.249.66.34:42439] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:17:51.380848 2026] [authz_core:error] [pid 3206639:tid 3206639] [client 66.249.66.34:42439] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:17:51.393356 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 144.76.19.72:21310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:51.393377 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:52.523547 2026] [ssl:error] [pid 3215262:tid 3215262] (70014)End of file found: [client 216.73.216.199:6453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:54.447382 2026] [ssl:error] [pid 3215777:tid 3215777] (EAI 2)Name or service not known: [client 144.76.19.72:21316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:54.447425 2026] [ssl:error] [pid 3215777:tid 3215777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:54.504513 2026] [ssl:error] [pid 3206470:tid 3206470] (EAI 2)Name or service not known: [client 144.76.19.72:21320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:54.504545 2026] [ssl:error] [pid 3206470:tid 3206470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:57.341879 2026] [core:error] [pid 3205088:tid 3205088] (13)Permission denied: [client 216.73.216.199:23738] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/cred_jar/remote_node_defrag_ratio
[Thu Jul 30 13:17:57.505751 2026] [lsapi:warn] [pid 3211705:tid 3211705] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:17:57.558991 2026] [ssl:error] [pid 3206694:tid 3206694] (EAI 2)Name or service not known: [client 144.76.19.72:21324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:57.559018 2026] [ssl:error] [pid 3206694:tid 3206694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:57.610359 2026] [ssl:error] [pid 3200169:tid 3200169] (EAI 2)Name or service not known: [client 144.76.19.72:21334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:17:57.610392 2026] [ssl:error] [pid 3200169:tid 3200169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:17:57.901023 2026] [security2:error] [pid 3199023:tid 3199023] [client 46.105.39.50:25441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amtA9VROeq9lyr0oLV3_dwAAABU"]
[Thu Jul 30 13:17:57.993255 2026] [security2:error] [pid 3213662:tid 3213662] [client 46.105.39.50:19477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.first-grade.co.uk"] [uri "/"] [unique_id "amtA9apXoAfx_hV8Iyx8IQAAABI"]
[Thu Jul 30 13:17:58.102392 2026] [security2:error] [pid 3205053:tid 3205053] [client 46.105.39.50:25905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amtA9pmgfJ0QB13yRMWBDgAAAAI"]
[Thu Jul 30 13:17:58.410221 2026] [authz_core:error] [pid 3215262:tid 3215262] [client 65.109.124.116:55896] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:17:58.416156 2026] [authz_core:error] [pid 3215262:tid 3215262] [client 65.109.124.116:55896] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:17:58.545204 2026] [ssl:error] [pid 3211320:tid 3211320] (70014)End of file found: [client 216.73.216.199:16618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:17:58.847131 2026] [ssl:error] [pid 3205088:tid 3205088] (70014)End of file found: [client 216.73.216.199:23738] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:00.050458 2026] [ssl:error] [pid 3198300:tid 3198300] (70014)End of file found: [client 216.73.216.199:7747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:00.073149 2026] [lsapi:warn] [pid 3212850:tid 3212850] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:00.076391 2026] [access_compat:error] [pid 3211705:tid 3211705] [client 106.222.248.251:27133] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:18:00.666730 2026] [ssl:error] [pid 3205053:tid 3205053] (EAI 2)Name or service not known: [client 144.76.19.72:21660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:00.666764 2026] [ssl:error] [pid 3205053:tid 3205053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:00.719502 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:21664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:00.719533 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:02.755164 2026] [authz_core:error] [pid 3215262:tid 3215262] [client 57.141.0.30:49226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:18:02.755825 2026] [authz_core:error] [pid 3215262:tid 3215262] [client 57.141.0.30:49226] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:18:03.113514 2026] [security2:error] [pid 3199415:tid 3199415] [client 47.86.26.58:14323] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtA-8IbLHEkEou2Dmu-ggAAAAA"]
[Thu Jul 30 13:18:03.113576 2026] [security2:error] [pid 3199415:tid 3199415] [client 47.86.26.58:14323] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtA-8IbLHEkEou2Dmu-ggAAAAA"]
[Thu Jul 30 13:18:03.113840 2026] [security2:error] [pid 3199415:tid 3199415] [client 47.86.26.58:14323] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtA-8IbLHEkEou2Dmu-ggAAAAA"]
[Thu Jul 30 13:18:03.286132 2026] [authz_core:error] [pid 3174653:tid 3174653] [client 20.193.250.173:62564] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 13:18:03.787903 2026] [ssl:error] [pid 3205053:tid 3205053] (EAI 2)Name or service not known: [client 144.76.19.72:21670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:03.787947 2026] [ssl:error] [pid 3205053:tid 3205053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:03.840908 2026] [ssl:error] [pid 3215264:tid 3215264] (EAI 2)Name or service not known: [client 144.76.19.72:21686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:03.840943 2026] [ssl:error] [pid 3215264:tid 3215264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:03.845928 2026] [ssl:error] [pid 3206470:tid 3206470] (70014)End of file found: [client 216.73.216.199:10437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:04.788506 2026] [security2:error] [pid 3205053:tid 3205053] [client 47.245.140.255:32227] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtA_JmgfJ0QB13yRMWBEAAAAAI"]
[Thu Jul 30 13:18:04.788560 2026] [security2:error] [pid 3205053:tid 3205053] [client 47.245.140.255:32227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtA_JmgfJ0QB13yRMWBEAAAAAI"]
[Thu Jul 30 13:18:04.788826 2026] [security2:error] [pid 3205053:tid 3205053] [client 47.245.140.255:32227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtA_JmgfJ0QB13yRMWBEAAAAAI"]
[Thu Jul 30 13:18:06.068192 2026] [ssl:error] [pid 3195594:tid 3195594] (70014)End of file found: [client 216.73.216.199:55352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:06.858774 2026] [security2:error] [pid 3205090:tid 3205090] [client 47.245.140.255:49941] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtA_vSA61rKiaiL_X7irAAAAB0"]
[Thu Jul 30 13:18:06.858818 2026] [security2:error] [pid 3205090:tid 3205090] [client 47.245.140.255:49941] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtA_vSA61rKiaiL_X7irAAAAB0"]
[Thu Jul 30 13:18:06.859034 2026] [security2:error] [pid 3205090:tid 3205090] [client 47.245.140.255:49941] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtA_vSA61rKiaiL_X7irAAAAB0"]
[Thu Jul 30 13:18:06.899611 2026] [ssl:error] [pid 3211706:tid 3211706] (EAI 2)Name or service not known: [client 144.76.19.72:21690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:06.899645 2026] [ssl:error] [pid 3211706:tid 3211706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:06.956013 2026] [ssl:error] [pid 3201304:tid 3201304] (EAI 2)Name or service not known: [client 144.76.19.72:21696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:06.956045 2026] [ssl:error] [pid 3201304:tid 3201304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:07.365761 2026] [core:error] [pid 3211706:tid 3211706] [client 66.249.64.170:47431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:07.365792 2026] [core:error] [pid 3211706:tid 3211706] [client 66.249.64.170:47431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:08.000032 2026] [lsapi:warn] [pid 3216490:tid 3216490] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:09.085357 2026] [ssl:error] [pid 3205089:tid 3205089] (70014)End of file found: [client 216.73.216.199:27861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:10.013518 2026] [ssl:error] [pid 3205053:tid 3205053] (EAI 2)Name or service not known: [client 144.76.19.72:61348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:10.013552 2026] [ssl:error] [pid 3205053:tid 3205053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:10.069161 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:61356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:10.069192 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:10.293892 2026] [ssl:error] [pid 3200169:tid 3200169] (70014)End of file found: [client 216.73.216.199:47409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:10.329129 2026] [authz_core:error] [pid 3215702:tid 3215702] [client 57.141.0.36:48954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:18:10.329762 2026] [authz_core:error] [pid 3215702:tid 3215702] [client 57.141.0.36:48954] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:18:10.704882 2026] [access_compat:error] [pid 3208716:tid 3208716] [client 106.222.248.251:21485] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:18:11.035794 2026] [lsapi:warn] [pid 3215702:tid 3215702] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:11.411726 2026] [ssl:error] [pid 3209224:tid 3209224] (70014)End of file found: [client 216.73.216.199:44720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:13.128300 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:61366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:13.128337 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:13.183461 2026] [ssl:error] [pid 3211649:tid 3211649] (EAI 2)Name or service not known: [client 144.76.19.72:61378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:13.183497 2026] [ssl:error] [pid 3211649:tid 3211649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:14.418288 2026] [ssl:error] [pid 3211649:tid 3211649] (70014)End of file found: [client 216.73.216.199:37255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:15.231186 2026] [authz_core:error] [pid 3198300:tid 3198300] [client 57.141.0.6:32944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:18:15.231811 2026] [authz_core:error] [pid 3198300:tid 3198300] [client 57.141.0.6:32944] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:18:15.249387 2026] [cgi:error] [pid 3205089:tid 3205089] [client 68.67.112.216:50882] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:18:15.635198 2026] [ssl:error] [pid 3215777:tid 3215777] (70014)End of file found: [client 216.73.216.199:16432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:16.239852 2026] [ssl:error] [pid 3206695:tid 3206695] (EAI 2)Name or service not known: [client 144.76.19.72:61386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:16.239879 2026] [ssl:error] [pid 3206695:tid 3206695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:16.294216 2026] [ssl:error] [pid 3206694:tid 3206694] (EAI 2)Name or service not known: [client 144.76.19.72:61390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:16.294241 2026] [ssl:error] [pid 3206694:tid 3206694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:16.397063 2026] [authz_core:error] [pid 3215220:tid 3215220] [client 20.193.250.173:55254] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 13:18:16.587591 2026] [security2:error] [pid 3201304:tid 3201304] [client 94.154.43.187:61230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "barbaramatarrese.com"] [uri "/.env"] [unique_id "amtBCF1Ik7XXTnQJWwNXjQAAAC0"]
[Thu Jul 30 13:18:16.587794 2026] [security2:error] [pid 3201304:tid 3201304] [client 94.154.43.187:61230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "barbaramatarrese.com"] [uri "/.env"] [unique_id "amtBCF1Ik7XXTnQJWwNXjQAAAC0"]
[Thu Jul 30 13:18:16.588021 2026] [security2:error] [pid 3201304:tid 3201304] [client 94.154.43.187:61230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "barbaramatarrese.com"] [uri "/.env"] [unique_id "amtBCF1Ik7XXTnQJWwNXjQAAAC0"]
[Thu Jul 30 13:18:16.609226 2026] [security2:error] [pid 3207320:tid 3207320] [client 94.154.43.184:62310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thelambproductions.com"] [uri "/.env"] [unique_id "amtBCGT_2MJLJW5FC9rp-AAAADc"]
[Thu Jul 30 13:18:16.609566 2026] [security2:error] [pid 3207320:tid 3207320] [client 94.154.43.184:62310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thelambproductions.com"] [uri "/.env"] [unique_id "amtBCGT_2MJLJW5FC9rp-AAAADc"]
[Thu Jul 30 13:18:16.609913 2026] [security2:error] [pid 3207320:tid 3207320] [client 94.154.43.184:62310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thelambproductions.com"] [uri "/.env"] [unique_id "amtBCGT_2MJLJW5FC9rp-AAAADc"]
[Thu Jul 30 13:18:17.857975 2026] [ssl:error] [pid 3209224:tid 3209224] (70014)End of file found: [client 216.73.216.199:50994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:18.486273 2026] [lsapi:warn] [pid 3215264:tid 3215264] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:18.795960 2026] [authz_core:error] [pid 3198246:tid 3198246] [client 66.249.66.33:62864] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:18:18.798620 2026] [authz_core:error] [pid 3198246:tid 3198246] [client 66.249.66.33:62864] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:18:19.347452 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:61394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:19.347500 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:19.401841 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:61408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:19.401869 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:21.414326 2026] [access_compat:error] [pid 3205089:tid 3205089] [client 106.222.248.251:2725] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:18:21.746967 2026] [lsapi:warn] [pid 3215777:tid 3215777] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:22.458187 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:20228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:22.458216 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:22.511864 2026] [ssl:error] [pid 3217167:tid 3217167] (EAI 2)Name or service not known: [client 144.76.19.72:20244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:22.511903 2026] [ssl:error] [pid 3217167:tid 3217167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:23.300383 2026] [core:error] [pid 3211705:tid 3211705] (13)Permission denied: [client 216.73.216.199:48619] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/red_zone
[Thu Jul 30 13:18:24.202366 2026] [core:error] [pid 3211705:tid 3211705] (13)Permission denied: [client 216.73.216.199:48619] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS2/uartclk
[Thu Jul 30 13:18:24.503709 2026] [core:error] [pid 3211705:tid 3211705] (13)Permission denied: [client 216.73.216.199:48619] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-8/min_partial
[Thu Jul 30 13:18:25.108550 2026] [ssl:error] [pid 3211705:tid 3211705] (70014)End of file found: [client 216.73.216.199:48619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:25.565306 2026] [ssl:error] [pid 3215777:tid 3215777] (EAI 2)Name or service not known: [client 144.76.19.72:20248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:25.565332 2026] [ssl:error] [pid 3215777:tid 3215777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:25.612985 2026] [core:error] [pid 3208657:tid 3208657] (13)Permission denied: [client 216.73.216.199:9988] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_1k/object_size
[Thu Jul 30 13:18:25.620888 2026] [ssl:error] [pid 3211320:tid 3211320] (EAI 2)Name or service not known: [client 144.76.19.72:20250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:25.620913 2026] [ssl:error] [pid 3211320:tid 3211320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:26.014498 2026] [core:crit] [pid 3215777:tid 3215777] (13)Permission denied: [client 216.73.216.199:27996] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib64/mysql/plugin/auth_pam_tool_dir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib64/mysql/plugin/auth_pam_tool_dir/' is executable
[Thu Jul 30 13:18:26.312215 2026] [core:error] [pid 3215777:tid 3215777] (13)Permission denied: [client 216.73.216.199:27996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_ctx/cpu_slabs
[Thu Jul 30 13:18:27.216845 2026] [ssl:error] [pid 3215777:tid 3215777] (70014)End of file found: [client 216.73.216.199:27996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:27.515466 2026] [core:error] [pid 3208657:tid 3208657] (13)Permission denied: [client 216.73.216.199:9988] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS0/close_delay
[Thu Jul 30 13:18:28.118173 2026] [ssl:error] [pid 3208657:tid 3208657] (70014)End of file found: [client 216.73.216.199:9988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:28.350279 2026] [cgi:error] [pid 3217441:tid 3217441] [client 20.9.4.9:55073] AH02812: stderr from /home/nsganymede/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:18:28.898202 2026] [ssl:error] [pid 3217575:tid 3217575] (EAI 2)Name or service not known: [client 144.76.19.72:20252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:28.898240 2026] [ssl:error] [pid 3217575:tid 3217575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:28.954470 2026] [ssl:error] [pid 3217575:tid 3217575] (EAI 2)Name or service not known: [client 144.76.19.72:20268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:28.954501 2026] [ssl:error] [pid 3217575:tid 3217575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:29.105915 2026] [lsapi:warn] [pid 3217577:tid 3217577] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:29.209418 2026] [authz_core:error] [pid 3217576:tid 3217576] [client 20.193.250.173:65100] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 13:18:30.534231 2026] [ssl:error] [pid 3209223:tid 3209223] (70014)End of file found: [client 216.73.216.199:4485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:30.919776 2026] [authz_core:error] [pid 3217441:tid 3217441] [client 20.9.4.9:55073] AH01630: client denied by server configuration: /home/nsganymede/public_html/php.ini
[Thu Jul 30 13:18:32.027184 2026] [ssl:error] [pid 3215220:tid 3215220] (EAI 2)Name or service not known: [client 144.76.19.72:31302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:32.027230 2026] [ssl:error] [pid 3215220:tid 3215220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:32.086468 2026] [ssl:error] [pid 3212907:tid 3212907] (EAI 2)Name or service not known: [client 144.76.19.72:31304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:32.086512 2026] [ssl:error] [pid 3212907:tid 3212907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:32.443727 2026] [access_compat:error] [pid 3201304:tid 3201304] [client 106.222.248.251:25752] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:18:32.675123 2026] [ssl:error] [pid 3206694:tid 3206694] (70014)End of file found: [client 216.73.216.199:11589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:32.793279 2026] [lsapi:warn] [pid 3216490:tid 3216490] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:32.906647 2026] [access_compat:error] [pid 3209224:tid 3209224] [client 45.158.164.139:46900] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:18:34.147317 2026] [ssl:error] [pid 3217496:tid 3217496] (70014)End of file found: [client 216.73.216.199:20074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:34.872212 2026] [authz_core:error] [pid 3197100:tid 3197100] [client 57.141.0.12:33562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:18:34.872837 2026] [authz_core:error] [pid 3197100:tid 3197100] [client 57.141.0.12:33562] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:18:35.138083 2026] [ssl:error] [pid 3208716:tid 3208716] (EAI 2)Name or service not known: [client 144.76.19.72:31308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:35.138113 2026] [ssl:error] [pid 3208716:tid 3208716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:35.188998 2026] [ssl:error] [pid 3215777:tid 3215777] (EAI 2)Name or service not known: [client 144.76.19.72:31310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:35.189026 2026] [ssl:error] [pid 3215777:tid 3215777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:35.837647 2026] [core:error] [pid 3217892:tid 3217892] (13)Permission denied: [client 216.73.216.199:48227] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-32/slab_size
[Thu Jul 30 13:18:36.252826 2026] [authz_core:error] [pid 3215220:tid 3215220] [client 66.249.66.33:54416] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:18:36.255503 2026] [authz_core:error] [pid 3215220:tid 3215220] [client 66.249.66.33:54416] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:18:36.552393 2026] [ssl:error] [pid 3217892:tid 3217892] (70014)End of file found: [client 216.73.216.199:48227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:37.119558 2026] [cgi:error] [pid 3195594:tid 3195594] [client 216.73.216.205:18113] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/robots.txt
[Thu Jul 30 13:18:37.368841 2026] [cgi:error] [pid 3195594:tid 3195594] [client 216.73.216.205:18113] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/sitemap.xml
[Thu Jul 30 13:18:38.240997 2026] [ssl:error] [pid 3174653:tid 3174653] (EAI 2)Name or service not known: [client 144.76.19.72:31318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:38.241029 2026] [ssl:error] [pid 3174653:tid 3174653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:38.248644 2026] [core:error] [pid 3211705:tid 3211705] (13)Permission denied: [client 216.73.216.199:44206] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/alloc_calls
[Thu Jul 30 13:18:38.293524 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 144.76.19.72:31330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:38.293555 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:38.358870 2026] [ssl:error] [pid 3211705:tid 3211705] (70014)End of file found: [client 216.73.216.199:44206] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:39.207275 2026] [security2:error] [pid 3174653:tid 3174653] [client 85.208.96.208:48076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8646.0/prev_next,prev.html"] [unique_id "amtBH8eOSVrY1GjpPqHVHQAAAAU"]
[Thu Jul 30 13:18:39.474628 2026] [lsapi:warn] [pid 3217947:tid 3217947] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:39.873055 2026] [ssl:error] [pid 3192733:tid 3192733] (70014)End of file found: [client 216.73.216.199:15794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:40.126039 2026] [access_compat:error] [pid 3198952:tid 3198952] [client 199.45.155.70:42520] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:18:40.255016 2026] [authz_core:error] [pid 3218153:tid 3218153] [client 20.193.250.173:55147] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 13:18:40.721014 2026] [authz_core:error] [pid 3200169:tid 3200169] [client 57.141.0.21:37080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:18:40.721654 2026] [authz_core:error] [pid 3200169:tid 3200169] [client 57.141.0.21:37080] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:18:41.348756 2026] [ssl:error] [pid 3200169:tid 3200169] (EAI 2)Name or service not known: [client 144.76.19.72:45316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:41.348788 2026] [ssl:error] [pid 3200169:tid 3200169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:41.400691 2026] [ssl:error] [pid 3215777:tid 3215777] (EAI 2)Name or service not known: [client 144.76.19.72:45318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:41.400737 2026] [ssl:error] [pid 3215777:tid 3215777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:41.866626 2026] [ssl:error] [pid 3217574:tid 3217574] (70014)End of file found: [client 216.73.216.199:61474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:42.229012 2026] [authz_core:error] [pid 3205135:tid 3205135] [client 52.165.196.84:45317] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 13:18:42.458286 2026] [authz_core:error] [pid 3209224:tid 3209224] [client 66.249.66.33:56463] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:18:42.460942 2026] [authz_core:error] [pid 3209224:tid 3209224] [client 66.249.66.33:56463] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:18:43.321917 2026] [lsapi:warn] [pid 3174653:tid 3174653] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:44.087629 2026] [ssl:error] [pid 3195594:tid 3195594] (70014)End of file found: [client 216.73.216.199:40372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:44.457698 2026] [ssl:error] [pid 3215262:tid 3215262] (EAI 2)Name or service not known: [client 144.76.19.72:45320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:44.457733 2026] [ssl:error] [pid 3215262:tid 3215262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:44.513512 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:45330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:44.513542 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:45.308449 2026] [access_compat:error] [pid 3217892:tid 3217892] [client 106.222.248.251:13459] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:18:45.593175 2026] [core:error] [pid 3206694:tid 3206694] (13)Permission denied: [client 216.73.216.199:42033] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS1/flags
[Thu Jul 30 13:18:46.496930 2026] [ssl:error] [pid 3206694:tid 3206694] (70014)End of file found: [client 216.73.216.199:42033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:47.314593 2026] [security2:error] [pid 3217577:tid 3217577] [client 185.191.171.10:59540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/tui-pilot-roster"] [unique_id "amtBJ2evFR_CfWsVYNpYAgAAACA"]
[Thu Jul 30 13:18:47.568689 2026] [ssl:error] [pid 3217948:tid 3217948] (EAI 2)Name or service not known: [client 144.76.19.72:45332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:47.568728 2026] [ssl:error] [pid 3217948:tid 3217948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:47.626625 2026] [ssl:error] [pid 3200895:tid 3200895] (EAI 2)Name or service not known: [client 144.76.19.72:45344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:47.626658 2026] [ssl:error] [pid 3200895:tid 3200895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:48.300300 2026] [ssl:error] [pid 3205090:tid 3205090] (70014)End of file found: [client 216.73.216.199:48792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:48.558859 2026] [authz_core:error] [pid 3217577:tid 3217577] [client 57.141.0.12:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:18:48.559490 2026] [authz_core:error] [pid 3217577:tid 3217577] [client 57.141.0.12:33386] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:18:49.397313 2026] [core:error] [pid 3217948:tid 3217948] (13)Permission denied: [client 216.73.216.199:22221] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS3/close_delay
[Thu Jul 30 13:18:49.960748 2026] [lsapi:warn] [pid 3212850:tid 3212850] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:50.010630 2026] [ssl:error] [pid 3217948:tid 3217948] (70014)End of file found: [client 216.73.216.199:22221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:50.095445 2026] [core:error] [pid 3217892:tid 3217892] [client 66.249.66.169:51272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:50.095477 2026] [core:error] [pid 3217892:tid 3217892] [client 66.249.66.169:51272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:50.100834 2026] [core:error] [pid 3208716:tid 3208716] [client 66.249.66.196:49359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:50.100855 2026] [core:error] [pid 3208716:tid 3208716] [client 66.249.66.196:49359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:50.726522 2026] [ssl:error] [pid 3207320:tid 3207320] (EAI 2)Name or service not known: [client 144.76.19.72:36644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:50.726551 2026] [ssl:error] [pid 3207320:tid 3207320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:50.782554 2026] [ssl:error] [pid 3211706:tid 3211706] (EAI 2)Name or service not known: [client 144.76.19.72:36654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:50.782581 2026] [ssl:error] [pid 3211706:tid 3211706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:52.012326 2026] [core:error] [pid 3211706:tid 3211706] [client 104.251.181.79:56646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.012352 2026] [core:error] [pid 3211706:tid 3211706] [client 104.251.181.79:56646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.074133 2026] [core:error] [pid 3217441:tid 3217441] [client 104.251.181.79:56654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.074173 2026] [core:error] [pid 3217441:tid 3217441] [client 104.251.181.79:56654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.131336 2026] [core:error] [pid 3210637:tid 3210637] [client 104.251.181.79:56660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.131368 2026] [core:error] [pid 3210637:tid 3210637] [client 104.251.181.79:56660] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.187668 2026] [core:error] [pid 3218467:tid 3218467] [client 104.251.181.79:56666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.187690 2026] [core:error] [pid 3218467:tid 3218467] [client 104.251.181.79:56666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.244312 2026] [core:error] [pid 3218153:tid 3218153] [client 104.251.181.79:56676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.244338 2026] [core:error] [pid 3218153:tid 3218153] [client 104.251.181.79:56676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.302389 2026] [core:error] [pid 3217577:tid 3217577] [client 104.251.181.79:56682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.302415 2026] [core:error] [pid 3217577:tid 3217577] [client 104.251.181.79:56682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.356180 2026] [core:error] [pid 3174653:tid 3174653] [client 104.251.181.79:56688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:52.356208 2026] [core:error] [pid 3174653:tid 3174653] [client 104.251.181.79:56688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:53.037583 2026] [ssl:error] [pid 3198952:tid 3198952] (70014)End of file found: [client 216.73.216.199:1164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:53.783562 2026] [security2:error] [pid 3174653:tid 3174653] [client 85.208.96.209:49718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.3570.html"] [unique_id "amtBLceOSVrY1GjpPqHVIwAAAAU"]
[Thu Jul 30 13:18:53.839234 2026] [ssl:error] [pid 3211705:tid 3211705] (EAI 2)Name or service not known: [client 144.76.19.72:36668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:53.839295 2026] [ssl:error] [pid 3211705:tid 3211705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:53.900710 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:36680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:53.900755 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:54.031566 2026] [lsapi:warn] [pid 3211706:tid 3211706] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:18:54.246089 2026] [ssl:error] [pid 3217577:tid 3217577] (70014)End of file found: [client 216.73.216.199:52602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:55.246786 2026] [access_compat:error] [pid 3211705:tid 3211705] [client 106.222.248.251:3110] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:18:56.299300 2026] [security2:error] [pid 3215264:tid 3215264] [client 3.225.45.252:50090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2026/06/Prosperon-Cookie-Policy-Apr-2023.pdf"] [unique_id "amtBMEmS1QHdwm4tyLTJigAAABM"]
[Thu Jul 30 13:18:56.650140 2026] [ssl:error] [pid 3211706:tid 3211706] (70014)End of file found: [client 216.73.216.199:26297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:18:57.025709 2026] [ssl:error] [pid 3217948:tid 3217948] (EAI 2)Name or service not known: [client 144.76.19.72:36684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:57.025744 2026] [ssl:error] [pid 3217948:tid 3217948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:57.079984 2026] [ssl:error] [pid 3217948:tid 3217948] (EAI 2)Name or service not known: [client 144.76.19.72:36692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:18:57.080008 2026] [ssl:error] [pid 3217948:tid 3217948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:18:58.078315 2026] [core:error] [pid 3201304:tid 3201304] [client 104.251.181.79:57946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.078340 2026] [core:error] [pid 3201304:tid 3201304] [client 104.251.181.79:57946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.135016 2026] [core:error] [pid 3217441:tid 3217441] [client 104.251.181.79:57948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.135044 2026] [core:error] [pid 3217441:tid 3217441] [client 104.251.181.79:57948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.195897 2026] [core:error] [pid 3219035:tid 3219035] [client 104.251.181.79:57950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.195950 2026] [core:error] [pid 3219035:tid 3219035] [client 104.251.181.79:57950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.250515 2026] [core:error] [pid 3198952:tid 3198952] [client 104.251.181.79:57956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.250540 2026] [core:error] [pid 3198952:tid 3198952] [client 104.251.181.79:57956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.306337 2026] [core:error] [pid 3217441:tid 3217441] [client 104.251.181.79:57962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.306358 2026] [core:error] [pid 3217441:tid 3217441] [client 104.251.181.79:57962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.365944 2026] [core:error] [pid 3219035:tid 3219035] [client 104.251.181.79:57966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.365965 2026] [core:error] [pid 3219035:tid 3219035] [client 104.251.181.79:57966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.420950 2026] [core:error] [pid 3198246:tid 3198246] [client 104.251.181.79:57976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.420975 2026] [core:error] [pid 3198246:tid 3198246] [client 104.251.181.79:57976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:18:58.756716 2026] [core:error] [pid 3201304:tid 3201304] (13)Permission denied: [client 216.73.216.199:38451] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu6/crash_notes
[Thu Jul 30 13:18:59.359376 2026] [ssl:error] [pid 3201304:tid 3201304] (70014)End of file found: [client 216.73.216.199:38451] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:00.117380 2026] [security2:error] [pid 3206695:tid 3206695] [client 114.119.158.38:58699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30,18/request_format~html"] [unique_id "amtBNIQrxjC-DmZhBYU0yQAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30/request_format~html
[Thu Jul 30 13:19:00.137471 2026] [ssl:error] [pid 3208716:tid 3208716] (EAI 2)Name or service not known: [client 144.76.19.72:40358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:00.137521 2026] [ssl:error] [pid 3208716:tid 3208716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:00.149789 2026] [security2:error] [pid 3211597:tid 3211597] [client 52.204.71.8:4989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2022/07/Webinar-On-Demand-SolarWinds-Database-Monitoring-Junior-Database-Administrators-Blog-Banner-Prosperon-Networks.png"] [unique_id "amtBNCyWnSq_e7s57ysbsQAAABs"]
[Thu Jul 30 13:19:00.193322 2026] [ssl:error] [pid 3219104:tid 3219104] (EAI 2)Name or service not known: [client 144.76.19.72:40360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:00.193381 2026] [ssl:error] [pid 3219104:tid 3219104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:00.267080 2026] [ssl:error] [pid 3219034:tid 3219034] (70014)End of file found: [client 216.73.216.199:5132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:00.462281 2026] [lsapi:warn] [pid 3219105:tid 3219105] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:00.729197 2026] [core:error] [pid 3212907:tid 3212907] [client 57.141.0.67:22580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:00.729223 2026] [core:error] [pid 3212907:tid 3212907] [client 57.141.0.67:22580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:01.306241 2026] [security2:error] [pid 3192733:tid 3192733] [client 114.119.158.38:58707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30,18/request_format~html"] [unique_id "amtBNdW9PUlofDhQr33e_AAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~102,30/request_format~html
[Thu Jul 30 13:19:01.978555 2026] [core:error] [pid 3217495:tid 3217495] (13)Permission denied: [client 216.73.216.199:54434] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack_expect/alloc_calls
[Thu Jul 30 13:19:02.392194 2026] [ssl:error] [pid 3217495:tid 3217495] (70014)End of file found: [client 216.73.216.199:54434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:03.273443 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 144.76.19.72:40370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:03.273474 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:03.326234 2026] [ssl:error] [pid 3205022:tid 3205022] (EAI 2)Name or service not known: [client 144.76.19.72:40376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:03.326293 2026] [ssl:error] [pid 3205022:tid 3205022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:04.270242 2026] [authz_core:error] [pid 3219105:tid 3219105] [client 57.141.0.69:44498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:19:04.270875 2026] [authz_core:error] [pid 3219105:tid 3219105] [client 57.141.0.69:44498] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:19:04.735245 2026] [authz_core:error] [pid 3211320:tid 3211320] [client 57.141.0.71:27846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:19:04.735866 2026] [authz_core:error] [pid 3211320:tid 3211320] [client 57.141.0.71:27846] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:19:04.775850 2026] [lsapi:warn] [pid 3208595:tid 3208595] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:05.188126 2026] [access_compat:error] [pid 3198952:tid 3198952] [client 106.222.248.251:10758] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:19:05.693323 2026] [ssl:error] [pid 3198246:tid 3198246] (70014)End of file found: [client 216.73.216.199:14220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:06.199232 2026] [core:error] [pid 3216578:tid 3216578] (13)Permission denied: [client 216.73.216.199:62361] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kernfs_iattrs_cache/usersize
[Thu Jul 30 13:19:06.383977 2026] [ssl:error] [pid 3205090:tid 3205090] (EAI 2)Name or service not known: [client 144.76.19.72:40390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:06.384007 2026] [ssl:error] [pid 3205090:tid 3205090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:06.440262 2026] [ssl:error] [pid 3200169:tid 3200169] (EAI 2)Name or service not known: [client 144.76.19.72:40392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:06.440288 2026] [ssl:error] [pid 3200169:tid 3200169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:06.601060 2026] [ssl:error] [pid 3216578:tid 3216578] (70014)End of file found: [client 216.73.216.199:62361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:07.711259 2026] [ssl:error] [pid 3219035:tid 3219035] (70014)End of file found: [client 216.73.216.199:51078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:09.103596 2026] [core:error] [pid 3217574:tid 3217574] (13)Permission denied: [client 216.73.216.199:34848] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/usersize
[Thu Jul 30 13:19:09.376343 2026] [ssl:error] [pid 3218949:tid 3218949] (70014)End of file found: [client 216.73.216.199:41167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:09.495265 2026] [ssl:error] [pid 3215262:tid 3215262] (EAI 2)Name or service not known: [client 144.76.19.72:40394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:09.495293 2026] [ssl:error] [pid 3215262:tid 3215262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:09.549755 2026] [ssl:error] [pid 3217948:tid 3217948] (EAI 2)Name or service not known: [client 144.76.19.72:40400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:09.549780 2026] [ssl:error] [pid 3217948:tid 3217948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:10.932186 2026] [lsapi:warn] [pid 3198952:tid 3198952] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:11.479127 2026] [ssl:error] [pid 3215262:tid 3215262] (70014)End of file found: [client 216.73.216.199:41425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:11.957098 2026] [security2:error] [pid 3219109:tid 3219109] [client 94.154.43.183:57768] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.michael-boffey.jasperandtroy.com"] [uri "/.env"] [unique_id "amtBPxKhojYqErnNG49hKgAAAEA"]
[Thu Jul 30 13:19:11.957293 2026] [security2:error] [pid 3219109:tid 3219109] [client 94.154.43.183:57768] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.michael-boffey.jasperandtroy.com"] [uri "/.env"] [unique_id "amtBPxKhojYqErnNG49hKgAAAEA"]
[Thu Jul 30 13:19:11.957518 2026] [security2:error] [pid 3219109:tid 3219109] [client 94.154.43.183:57768] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.michael-boffey.jasperandtroy.com"] [uri "/.env"] [unique_id "amtBPxKhojYqErnNG49hKgAAAEA"]
[Thu Jul 30 13:19:12.603467 2026] [ssl:error] [pid 3219106:tid 3219106] (EAI 2)Name or service not known: [client 144.76.19.72:59714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:12.603511 2026] [ssl:error] [pid 3219106:tid 3219106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:12.659624 2026] [ssl:error] [pid 3212850:tid 3212850] (EAI 2)Name or service not known: [client 144.76.19.72:59720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:12.659652 2026] [ssl:error] [pid 3212850:tid 3212850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:12.991314 2026] [ssl:error] [pid 3217574:tid 3217574] (70014)End of file found: [client 216.73.216.199:34848] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:13.078221 2026] [security2:error] [pid 3217575:tid 3217575] [client 94.154.43.177:48444] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amtBQZpKoyMgvKvWyhi_0QAAABw"]
[Thu Jul 30 13:19:13.078404 2026] [security2:error] [pid 3217575:tid 3217575] [client 94.154.43.177:48444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amtBQZpKoyMgvKvWyhi_0QAAABw"]
[Thu Jul 30 13:19:13.078647 2026] [security2:error] [pid 3217575:tid 3217575] [client 94.154.43.177:48444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "michael-boffey.co.uk"] [uri "/.env"] [unique_id "amtBQZpKoyMgvKvWyhi_0QAAABw"]
[Thu Jul 30 13:19:15.527208 2026] [lsapi:warn] [pid 3219107:tid 3219107] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:15.718762 2026] [ssl:error] [pid 3219103:tid 3219103] (EAI 2)Name or service not known: [client 144.76.19.72:59734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:15.718803 2026] [ssl:error] [pid 3219103:tid 3219103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:15.776591 2026] [ssl:error] [pid 3211320:tid 3211320] (EAI 2)Name or service not known: [client 144.76.19.72:59736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:15.776618 2026] [ssl:error] [pid 3211320:tid 3211320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:16.004318 2026] [ssl:error] [pid 3198952:tid 3198952] (70014)End of file found: [client 216.73.216.199:48822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:16.086782 2026] [access_compat:error] [pid 3205022:tid 3205022] [client 106.222.248.251:25490] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:19:16.388214 2026] [lsapi:warn] [pid 3200169:tid 3200169] [client 140.235.3.35:9541] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:19:16.388268 2026] [lsapi:warn] [pid 3200169:tid 3200169] [client 140.235.3.35:9541] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:19:16.807401 2026] [ssl:error] [pid 3208595:tid 3208595] (70014)End of file found: [client 216.73.216.199:11236] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:17.705357 2026] [authz_core:error] [pid 3215264:tid 3215264] [client 66.249.66.34:61417] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:19:17.708021 2026] [authz_core:error] [pid 3215264:tid 3215264] [client 66.249.66.34:61417] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:19:18.340365 2026] [cgi:error] [pid 3217577:tid 3217577] [client 20.9.4.9:53079] AH02812: stderr from /home/jgqawffu/public_html/greenduckgallery.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:19:18.834597 2026] [ssl:error] [pid 3216490:tid 3216490] (EAI 2)Name or service not known: [client 144.76.19.72:59746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:18.834628 2026] [ssl:error] [pid 3216490:tid 3216490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:18.888787 2026] [ssl:error] [pid 3209223:tid 3209223] (EAI 2)Name or service not known: [client 144.76.19.72:59758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:18.888834 2026] [ssl:error] [pid 3209223:tid 3209223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:18.969438 2026] [access_compat:error] [pid 3215777:tid 3215777] [client 20.100.169.152:50090] AH01797: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:19:19.737770 2026] [authz_core:error] [pid 3211705:tid 3211705] [client 57.141.0.34:64176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:19:19.738403 2026] [authz_core:error] [pid 3211705:tid 3211705] [client 57.141.0.34:64176] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:19:19.825416 2026] [authz_core:error] [pid 3217577:tid 3217577] [client 20.9.4.9:53079] AH01630: client denied by server configuration: /home/jgqawffu/public_html/greenduckgallery.co.uk/php.ini
[Thu Jul 30 13:19:20.225959 2026] [core:error] [pid 3219034:tid 3219034] (13)Permission denied: [client 216.73.216.199:34262] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/alt-php72-error.log-20260729
[Thu Jul 30 13:19:20.284364 2026] [security2:error] [pid 3201304:tid 3201304] [client 85.208.96.206:48346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amtBSF1Ik7XXTnQJWwNXowAAAC0"]
[Thu Jul 30 13:19:20.526967 2026] [core:error] [pid 3219034:tid 3219034] (13)Permission denied: [client 216.73.216.199:34262] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:9/subsystem/ttyS1/flags
[Thu Jul 30 13:19:20.743753 2026] [authz_core:error] [pid 3215777:tid 3215777] [client 20.100.169.152:50090] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 13:19:20.828305 2026] [ssl:error] [pid 3219034:tid 3219034] (70014)End of file found: [client 216.73.216.199:34262] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:21.426133 2026] [lsapi:warn] [pid 3211597:tid 3211597] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:21.634551 2026] [access_compat:error] [pid 3215777:tid 3215777] [client 20.100.169.152:50090] AH01797: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:19:21.731008 2026] [ssl:error] [pid 3217574:tid 3217574] (70014)End of file found: [client 216.73.216.199:45021] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:21.948244 2026] [ssl:error] [pid 3198952:tid 3198952] (EAI 2)Name or service not known: [client 144.76.19.72:35760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:21.948270 2026] [ssl:error] [pid 3198952:tid 3198952] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:22.000897 2026] [ssl:error] [pid 3218153:tid 3218153] (EAI 2)Name or service not known: [client 144.76.19.72:35768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:22.000936 2026] [ssl:error] [pid 3218153:tid 3218153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:22.637582 2026] [core:error] [pid 3219105:tid 3219105] (13)Permission denied: [client 216.73.216.199:4076] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/event_source/uevent
[Thu Jul 30 13:19:23.538082 2026] [ssl:error] [pid 3219105:tid 3219105] (70014)End of file found: [client 216.73.216.199:4076] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:25.058747 2026] [ssl:error] [pid 3192733:tid 3192733] (EAI 2)Name or service not known: [client 144.76.19.72:35774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:25.058778 2026] [ssl:error] [pid 3192733:tid 3192733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:25.111602 2026] [ssl:error] [pid 3215220:tid 3215220] (EAI 2)Name or service not known: [client 144.76.19.72:35780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:25.111634 2026] [ssl:error] [pid 3215220:tid 3215220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:25.657727 2026] [core:error] [pid 3210637:tid 3210637] [client 66.249.66.8:39242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:25.657753 2026] [core:error] [pid 3210637:tid 3210637] [client 66.249.66.8:39242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:26.156428 2026] [ssl:error] [pid 3218949:tid 3218949] (70014)End of file found: [client 216.73.216.199:27879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:26.507901 2026] [lsapi:warn] [pid 3211705:tid 3211705] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:27.117752 2026] [access_compat:error] [pid 3210637:tid 3210637] [client 106.222.248.251:5280] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:19:27.754226 2026] [core:error] [pid 3219034:tid 3219034] (13)Permission denied: [client 216.73.216.199:48063] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS2/flags
[Thu Jul 30 13:19:28.055393 2026] [ssl:error] [pid 3219034:tid 3219034] (70014)End of file found: [client 216.73.216.199:48063] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:28.167324 2026] [ssl:error] [pid 3218467:tid 3218467] (EAI 2)Name or service not known: [client 144.76.19.72:35796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:28.167366 2026] [ssl:error] [pid 3218467:tid 3218467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:28.227643 2026] [ssl:error] [pid 3215264:tid 3215264] (EAI 2)Name or service not known: [client 144.76.19.72:35800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:28.227672 2026] [ssl:error] [pid 3215264:tid 3215264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:28.843990 2026] [core:error] [pid 3201304:tid 3201304] (13)Permission denied: [client 216.73.216.199:10244] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/alt-php72-error.log-20260728
[Thu Jul 30 13:19:29.651640 2026] [core:error] [pid 3217441:tid 3217441] [client 57.141.0.63:54132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:29.651670 2026] [core:error] [pid 3217441:tid 3217441] [client 57.141.0.63:54132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:30.167345 2026] [core:error] [pid 3201304:tid 3201304] (13)Permission denied: [client 216.73.216.199:10244] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/firewalld
[Thu Jul 30 13:19:30.468442 2026] [ssl:error] [pid 3201304:tid 3201304] (70014)End of file found: [client 216.73.216.199:10244] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:31.280786 2026] [ssl:error] [pid 3219105:tid 3219105] (EAI 2)Name or service not known: [client 144.76.19.72:40608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:31.280819 2026] [ssl:error] [pid 3219105:tid 3219105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:31.338945 2026] [ssl:error] [pid 3215264:tid 3215264] (EAI 2)Name or service not known: [client 144.76.19.72:40610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:31.338977 2026] [ssl:error] [pid 3215264:tid 3215264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:31.873821 2026] [lsapi:warn] [pid 3215262:tid 3215262] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:31.996138 2026] [ssl:error] [pid 3205090:tid 3205090] (70014)End of file found: [client 216.73.216.199:41362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:33.393358 2026] [ssl:error] [pid 3211320:tid 3211320] (70014)End of file found: [client 216.73.216.199:25761] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:33.743356 2026] [security2:error] [pid 3219107:tid 3219107] [client 43.130.53.252:52512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alism.com"] [uri "/"] [unique_id "amtBVUaFymnwZeMg7fOidwAAAD0"]
[Thu Jul 30 13:19:34.442000 2026] [ssl:error] [pid 3218949:tid 3218949] (EAI 2)Name or service not known: [client 144.76.19.72:40618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:34.442059 2026] [ssl:error] [pid 3218949:tid 3218949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:34.496942 2026] [ssl:error] [pid 3211597:tid 3211597] (EAI 2)Name or service not known: [client 144.76.19.72:40622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:34.496985 2026] [ssl:error] [pid 3211597:tid 3211597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:36.540956 2026] [ssl:error] [pid 3215262:tid 3215262] (70014)End of file found: [client 216.73.216.199:18243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:37.270390 2026] [access_compat:error] [pid 3215777:tid 3215777] [client 106.222.248.251:11623] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:19:37.353690 2026] [ssl:error] [pid 3206694:tid 3206694] (70014)End of file found: [client 216.73.216.199:45063] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:37.378423 2026] [lsapi:warn] [pid 3218949:tid 3218949] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:37.587465 2026] [ssl:error] [pid 3211649:tid 3211649] (EAI 2)Name or service not known: [client 144.76.19.72:40630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:37.587511 2026] [ssl:error] [pid 3211649:tid 3211649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:37.643370 2026] [ssl:error] [pid 3219034:tid 3219034] (EAI 2)Name or service not known: [client 144.76.19.72:40632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:37.643403 2026] [ssl:error] [pid 3219034:tid 3219034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:37.737835 2026] [access_compat:error] [pid 3205090:tid 3205090] [client 45.158.164.139:37490] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:19:38.522743 2026] [core:error] [pid 3216578:tid 3216578] [client 57.141.0.68:61714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:38.522776 2026] [core:error] [pid 3216578:tid 3216578] [client 57.141.0.68:61714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:39.000058 2026] [core:error] [pid 3217495:tid 3217495] (13)Permission denied: [client 216.73.216.199:24028] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 13:19:39.266728 2026] [security2:error] [pid 3216578:tid 3216578] [client 74.7.242.18:36614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kinesiologymerseyside.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtBW1GvFQfPfU516o-TyAAAABE"]
[Thu Jul 30 13:19:39.275980 2026] [core:error] [pid 3221058:tid 3221058] [client 66.249.64.170:58912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:39.276020 2026] [core:error] [pid 3221058:tid 3221058] [client 66.249.64.170:58912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:39.401349 2026] [ssl:error] [pid 3217495:tid 3217495] (70014)End of file found: [client 216.73.216.199:24028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:40.698932 2026] [ssl:error] [pid 3221058:tid 3221058] (EAI 2)Name or service not known: [client 144.76.19.72:39084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:40.698975 2026] [ssl:error] [pid 3221058:tid 3221058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:40.794867 2026] [ssl:error] [pid 3211320:tid 3211320] (EAI 2)Name or service not known: [client 144.76.19.72:39086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:40.794902 2026] [ssl:error] [pid 3211320:tid 3211320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:42.115528 2026] [ssl:error] [pid 3211597:tid 3211597] (70014)End of file found: [client 216.73.216.199:8960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:42.656908 2026] [lsapi:warn] [pid 3215262:tid 3215262] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:42.903084 2026] [ssl:error] [pid 3221140:tid 3221140] (70014)End of file found: [client 216.73.216.199:19447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:43.284931 2026] [core:error] [pid 3218153:tid 3218153] [client 57.141.0.63:56284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:43.284960 2026] [core:error] [pid 3218153:tid 3218153] [client 57.141.0.63:56284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:43.850344 2026] [ssl:error] [pid 3221189:tid 3221189] (EAI 2)Name or service not known: [client 144.76.19.72:39092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:43.850384 2026] [ssl:error] [pid 3221189:tid 3221189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:43.904326 2026] [ssl:error] [pid 3221141:tid 3221141] (EAI 2)Name or service not known: [client 144.76.19.72:39100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:43.904363 2026] [ssl:error] [pid 3221141:tid 3221141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:44.777924 2026] [authz_core:error] [pid 3204146:tid 3204146] [client 57.141.0.58:21604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:19:44.778577 2026] [authz_core:error] [pid 3204146:tid 3204146] [client 57.141.0.58:21604] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:19:45.441810 2026] [ssl:error] [pid 3219105:tid 3219105] (70014)End of file found: [client 216.73.216.199:15862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:46.713541 2026] [security2:error] [pid 3217495:tid 3217495] [client 162.14.66.219:52842] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtBYggCxLFStX4tEM1p6AAAABQ"]
[Thu Jul 30 13:19:46.959721 2026] [ssl:error] [pid 3215262:tid 3215262] (EAI 2)Name or service not known: [client 144.76.19.72:39114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:46.959755 2026] [ssl:error] [pid 3215262:tid 3215262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:47.018696 2026] [ssl:error] [pid 3216578:tid 3216578] (EAI 2)Name or service not known: [client 144.76.19.72:39124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:47.018755 2026] [ssl:error] [pid 3216578:tid 3216578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:47.719357 2026] [access_compat:error] [pid 3211320:tid 3211320] [client 106.222.248.251:33138] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:19:47.873221 2026] [security2:error] [pid 3215264:tid 3215264] [client 85.208.96.210:39570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/stanislav-szukalski-art-for-sale"] [unique_id "amtBY0mS1QHdwm4tyLTJlAAAABM"]
[Thu Jul 30 13:19:47.990736 2026] [core:error] [pid 3217575:tid 3217575] [client 66.249.66.196:36742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:47.990769 2026] [core:error] [pid 3217575:tid 3217575] [client 66.249.66.196:36742] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:19:48.251777 2026] [lsapi:warn] [pid 3219034:tid 3219034] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:48.469054 2026] [ssl:error] [pid 3215777:tid 3215777] (70014)End of file found: [client 216.73.216.199:17361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:48.509456 2026] [security2:error] [pid 3221058:tid 3221058] [client 43.165.7.74:57362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/"] [unique_id "amtBZAmCajP8ZNYZujTg7wAAAAE"]
[Thu Jul 30 13:19:48.971469 2026] [ssl:error] [pid 3221187:tid 3221187] (70014)End of file found: [client 216.73.216.199:38661] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:49.037802 2026] [security2:error] [pid 3217760:tid 3217760] [client 114.119.153.188:64041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/robots.txt"] [unique_id "amtBZS_X6AI9N9dJcuA9vgAAACE"], referer: http://jonathanmeyerart.co.uk/robots.txt
[Thu Jul 30 13:19:49.092311 2026] [security2:error] [pid 3217574:tid 3217574] [client 43.165.7.74:57622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amtBZbop9Po7VcihNi_0tQAAABk"], referer: http://www.thesilkshed.co.uk
[Thu Jul 30 13:19:50.077059 2026] [ssl:error] [pid 3221058:tid 3221058] (EAI 2)Name or service not known: [client 144.76.19.72:63330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:50.077098 2026] [ssl:error] [pid 3221058:tid 3221058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:50.133057 2026] [ssl:error] [pid 3219035:tid 3219035] (EAI 2)Name or service not known: [client 144.76.19.72:63340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:50.133105 2026] [ssl:error] [pid 3219035:tid 3219035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:50.206924 2026] [security2:error] [pid 3217577:tid 3217577] [client 162.14.66.219:40646] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtBZmevFR_CfWsVYNpYbQAAACA"], referer: http://www.hornsey-town-hall.org.uk
[Thu Jul 30 13:19:50.800889 2026] [ssl:error] [pid 3219109:tid 3219109] (70014)End of file found: [client 216.73.216.199:41028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:50.989262 2026] [security2:error] [pid 3209223:tid 3209223] [client 102.209.221.131:12868] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBZtTXIClCtqSoShl3_wAAAC4"]
[Thu Jul 30 13:19:50.989313 2026] [security2:error] [pid 3209223:tid 3209223] [client 102.209.221.131:12868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBZtTXIClCtqSoShl3_wAAAC4"]
[Thu Jul 30 13:19:50.989583 2026] [security2:error] [pid 3209223:tid 3209223] [client 102.209.221.131:12868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBZtTXIClCtqSoShl3_wAAAC4"]
[Thu Jul 30 13:19:52.905284 2026] [lsapi:warn] [pid 3218990:tid 3218990] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:53.002242 2026] [security2:error] [pid 3217577:tid 3217577] [client 162.14.66.219:43886] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtBaWevFR_CfWsVYNpYbwAAACA"], referer: https://www.hornsey-town-hall.org.uk/
[Thu Jul 30 13:19:53.189514 2026] [ssl:error] [pid 3219035:tid 3219035] (EAI 2)Name or service not known: [client 144.76.19.72:63346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:53.189543 2026] [ssl:error] [pid 3219035:tid 3219035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:53.241170 2026] [ssl:error] [pid 3211320:tid 3211320] (EAI 2)Name or service not known: [client 144.76.19.72:63362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:53.241201 2026] [ssl:error] [pid 3211320:tid 3211320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:53.825498 2026] [ssl:error] [pid 3200169:tid 3200169] (70014)End of file found: [client 216.73.216.199:56595] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:54.392995 2026] [ssl:error] [pid 3215777:tid 3215777] (70014)End of file found: [client 216.73.216.199:29462] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:55.144388 2026] [authz_core:error] [pid 3205135:tid 3205135] [client 52.165.196.84:45317] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-includes/l10n/error_log
[Thu Jul 30 13:19:56.298123 2026] [ssl:error] [pid 3212907:tid 3212907] (EAI 2)Name or service not known: [client 144.76.19.72:63376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:56.298151 2026] [ssl:error] [pid 3212907:tid 3212907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:56.318934 2026] [ssl:error] [pid 3221823:tid 3221823] (70014)End of file found: [client 216.73.216.199:54216] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:19:56.354063 2026] [ssl:error] [pid 3219035:tid 3219035] (EAI 2)Name or service not known: [client 144.76.19.72:63390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:56.354138 2026] [ssl:error] [pid 3219035:tid 3219035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:56.511824 2026] [authz_core:error] [pid 3216578:tid 3216578] [client 57.141.0.65:55318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:19:56.512465 2026] [authz_core:error] [pid 3216578:tid 3216578] [client 57.141.0.65:55318] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:19:57.481463 2026] [security2:error] [pid 3216578:tid 3216578] [client 157.10.107.38:48590] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBbVGvFQfPfU516o-TzgAAABE"]
[Thu Jul 30 13:19:57.481520 2026] [security2:error] [pid 3216578:tid 3216578] [client 157.10.107.38:48590] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBbVGvFQfPfU516o-TzgAAABE"]
[Thu Jul 30 13:19:57.481785 2026] [security2:error] [pid 3216578:tid 3216578] [client 157.10.107.38:48590] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBbVGvFQfPfU516o-TzgAAABE"]
[Thu Jul 30 13:19:59.136716 2026] [lsapi:warn] [pid 3221987:tid 3221987] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:19:59.169818 2026] [access_compat:error] [pid 3216578:tid 3216578] [client 106.222.248.251:32466] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:19:59.407463 2026] [ssl:error] [pid 3217495:tid 3217495] (EAI 2)Name or service not known: [client 144.76.19.72:63396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:59.407508 2026] [ssl:error] [pid 3217495:tid 3217495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:59.463807 2026] [ssl:error] [pid 3209223:tid 3209223] (EAI 2)Name or service not known: [client 144.76.19.72:63402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:19:59.463837 2026] [ssl:error] [pid 3209223:tid 3209223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:19:59.810623 2026] [ssl:error] [pid 3200169:tid 3200169] (70014)End of file found: [client 216.73.216.199:2033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:01.743241 2026] [ssl:error] [pid 3209223:tid 3209223] (70014)End of file found: [client 216.73.216.199:15576] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:02.237728 2026] [ssl:error] [pid 3204146:tid 3204146] (70014)End of file found: [client 216.73.216.199:32571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:02.520509 2026] [ssl:error] [pid 3206694:tid 3206694] (EAI 2)Name or service not known: [client 144.76.19.72:27400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:02.520547 2026] [ssl:error] [pid 3206694:tid 3206694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:02.577778 2026] [ssl:error] [pid 3201304:tid 3201304] (EAI 2)Name or service not known: [client 144.76.19.72:27408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:02.577803 2026] [ssl:error] [pid 3201304:tid 3201304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:03.360910 2026] [lsapi:warn] [pid 3217574:tid 3217574] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:05.667241 2026] [ssl:error] [pid 3221187:tid 3221187] (EAI 2)Name or service not known: [client 144.76.19.72:27424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:05.667290 2026] [ssl:error] [pid 3221187:tid 3221187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:05.722143 2026] [ssl:error] [pid 3200169:tid 3200169] (EAI 2)Name or service not known: [client 144.76.19.72:27428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:05.722168 2026] [ssl:error] [pid 3200169:tid 3200169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:08.081375 2026] [ssl:error] [pid 3215264:tid 3215264] (70014)End of file found: [client 216.73.216.199:58668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:08.580266 2026] [ssl:error] [pid 3221058:tid 3221058] (70014)End of file found: [client 216.73.216.199:43177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:08.815716 2026] [ssl:error] [pid 3219107:tid 3219107] (EAI 2)Name or service not known: [client 144.76.19.72:27434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:08.815756 2026] [ssl:error] [pid 3219107:tid 3219107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:08.870511 2026] [ssl:error] [pid 3222044:tid 3222044] (EAI 2)Name or service not known: [client 144.76.19.72:27444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:08.870544 2026] [ssl:error] [pid 3222044:tid 3222044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:08.914553 2026] [access_compat:error] [pid 3222829:tid 3222829] [client 106.222.248.251:7119] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:20:09.095776 2026] [core:error] [pid 3204146:tid 3204146] [client 57.141.0.51:27298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:09.095810 2026] [core:error] [pid 3204146:tid 3204146] [client 57.141.0.51:27298] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:09.820523 2026] [lsapi:warn] [pid 3201304:tid 3201304] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:11.230236 2026] [ssl:error] [pid 3222044:tid 3222044] (70014)End of file found: [client 216.73.216.199:63549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:11.929839 2026] [ssl:error] [pid 3219105:tid 3219105] (EAI 2)Name or service not known: [client 144.76.19.72:26384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:11.929872 2026] [ssl:error] [pid 3219105:tid 3219105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:11.985680 2026] [ssl:error] [pid 3221141:tid 3221141] (EAI 2)Name or service not known: [client 144.76.19.72:26398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:11.985712 2026] [ssl:error] [pid 3221141:tid 3221141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:13.540232 2026] [ssl:error] [pid 3222992:tid 3222992] (70014)End of file found: [client 216.73.216.199:9243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:13.872951 2026] [lsapi:warn] [pid 3221900:tid 3221900] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:15.042467 2026] [ssl:error] [pid 3219107:tid 3219107] (EAI 2)Name or service not known: [client 144.76.19.72:26404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:15.042527 2026] [ssl:error] [pid 3219107:tid 3219107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:15.098588 2026] [ssl:error] [pid 3222829:tid 3222829] (EAI 2)Name or service not known: [client 144.76.19.72:26418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:15.098622 2026] [ssl:error] [pid 3222829:tid 3222829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:15.144515 2026] [ssl:error] [pid 3221143:tid 3221143] (70014)End of file found: [client 216.73.216.199:58438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:15.224981 2026] [authz_core:error] [pid 3204146:tid 3204146] [client 57.141.0.48:56106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:20:15.225616 2026] [authz_core:error] [pid 3204146:tid 3204146] [client 57.141.0.48:56106] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:20:15.445814 2026] [security2:error] [pid 3215262:tid 3215262] [client 43.133.253.253:56778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.co.uk"] [uri "/"] [unique_id "amtBf5Rk8CU3E0BTU79XMgAAABA"]
[Thu Jul 30 13:20:16.950512 2026] [ssl:error] [pid 3219107:tid 3219107] (70014)End of file found: [client 216.73.216.199:64738] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:17.115972 2026] [security2:error] [pid 3222991:tid 3222991] [client 43.133.253.253:57500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtBgQqSPR_CveMZNQIWTwAAAE4"], referer: http://www.spamp.co.uk
[Thu Jul 30 13:20:18.154556 2026] [ssl:error] [pid 3218990:tid 3218990] (EAI 2)Name or service not known: [client 144.76.19.72:26422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:18.154593 2026] [ssl:error] [pid 3218990:tid 3218990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:18.206320 2026] [ssl:error] [pid 3216578:tid 3216578] (EAI 2)Name or service not known: [client 144.76.19.72:26436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:18.206353 2026] [ssl:error] [pid 3216578:tid 3216578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:19.060945 2026] [ssl:error] [pid 3217892:tid 3217892] (70014)End of file found: [client 216.73.216.199:3594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:19.103416 2026] [authz_core:error] [pid 3222045:tid 3222045] [client 66.249.66.34:59638] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:20:19.106376 2026] [authz_core:error] [pid 3222045:tid 3222045] [client 66.249.66.34:59638] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:20:19.622762 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.66.3:59388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:19.622807 2026] [core:error] [pid 3172022:tid 3172022] [client 66.249.66.3:59388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:19.624913 2026] [security2:error] [pid 3222987:tid 3222987] [client 43.133.253.253:46156] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtBgzsbZ8NPK3Jia7kb1AAAAEo"], referer: http://spamp.com/
[Thu Jul 30 13:20:20.450605 2026] [access_compat:error] [pid 3208716:tid 3208716] [client 106.222.248.251:28377] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:20:20.463545 2026] [ssl:error] [pid 3217574:tid 3217574] (70014)End of file found: [client 216.73.216.199:44711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:20.706135 2026] [lsapi:warn] [pid 3222919:tid 3222919] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:20.954439 2026] [security2:error] [pid 3172022:tid 3172022] [client 54.37.118.82:25670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/pastillas-para-volver-a-ser-virgen"] [unique_id "amtBhLyUccp_T8FAQyjRJgAAAEQ"]
[Thu Jul 30 13:20:21.262699 2026] [ssl:error] [pid 3216578:tid 3216578] (EAI 2)Name or service not known: [client 144.76.19.72:23444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:21.262732 2026] [ssl:error] [pid 3216578:tid 3216578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:21.320609 2026] [ssl:error] [pid 3222989:tid 3222989] (EAI 2)Name or service not known: [client 144.76.19.72:23458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:21.320650 2026] [ssl:error] [pid 3222989:tid 3222989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:22.292632 2026] [ssl:error] [pid 3222989:tid 3222989] (70014)End of file found: [client 216.73.216.199:31446] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:23.107339 2026] [security2:error] [pid 3222987:tid 3222987] [client 43.130.106.18:56686] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtBhzsbZ8NPK3Jia7kb1gAAAEo"]
[Thu Jul 30 13:20:24.260594 2026] [security2:error] [pid 3215777:tid 3215777] [client 114.119.142.20:47069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~102,15/request_format~html"] [unique_id "amtBiIVcaHwSX8G1aSaJPAAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~102/request_format~html
[Thu Jul 30 13:20:24.311258 2026] [lsapi:warn] [pid 3222990:tid 3222990] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:24.374289 2026] [ssl:error] [pid 3222987:tid 3222987] (EAI 2)Name or service not known: [client 144.76.19.72:23472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:24.374317 2026] [ssl:error] [pid 3222987:tid 3222987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:24.427832 2026] [ssl:error] [pid 3211320:tid 3211320] (EAI 2)Name or service not known: [client 144.76.19.72:23482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:24.427870 2026] [ssl:error] [pid 3211320:tid 3211320] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:24.521793 2026] [security2:error] [pid 3221143:tid 3221143] [client 43.130.106.18:47534] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtBiAktB2LKjTPzDGB9LwAAACM"], referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 13:20:25.098443 2026] [ssl:error] [pid 3219107:tid 3219107] (70014)End of file found: [client 216.73.216.199:60111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:25.152711 2026] [lsapi:warn] [pid 3221143:tid 3221143] [client 43.130.106.18:47534] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 13:20:25.152755 2026] [lsapi:warn] [pid 3221143:tid 3221143] [client 43.130.106.18:47534] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 13:20:25.489265 2026] [security2:error] [pid 3222987:tid 3222987] [client 114.119.142.20:47079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~102,15/request_format~html"] [unique_id "amtBiTsbZ8NPK3Jia7kb1wAAAEo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~102/request_format~html
[Thu Jul 30 13:20:25.881060 2026] [ssl:error] [pid 3222920:tid 3222920] (70014)End of file found: [client 216.73.216.199:44931] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:26.469045 2026] [security2:error] [pid 3211706:tid 3211706] [client 142.44.233.196:64726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "stampys.eu"] [uri "/robots.txt"] [unique_id "amtBihEKqLFmEcqLHwgENQAAAEI"]
[Thu Jul 30 13:20:26.903894 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:20:27.476513 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 13:20:27.476559 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.482137 2026] [ssl:error] [pid 3205090:tid 3205090] (EAI 2)Name or service not known: [client 144.76.19.72:23494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:27.482162 2026] [ssl:error] [pid 3205090:tid 3205090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:27.516703 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/if.php
[Thu Jul 30 13:20:27.516746 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.534968 2026] [ssl:error] [pid 3198055:tid 3198055] (EAI 2)Name or service not known: [client 144.76.19.72:23506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:27.534993 2026] [ssl:error] [pid 3198055:tid 3198055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:27.547416 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ru.php
[Thu Jul 30 13:20:27.547457 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.577988 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tttt.php
[Thu Jul 30 13:20:27.578028 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.591345 2026] [security2:error] [pid 3222044:tid 3222044] [client 198.244.183.56:35614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "stampys.eu"] [uri "/store/wishlist/index/add/product/25/form_key/TiN5htbBVib7rNDM/"] [unique_id "amtBi8S54_uwdQuuId4LvQAAADM"]
[Thu Jul 30 13:20:27.608800 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mi.php
[Thu Jul 30 13:20:27.608840 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.640497 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xo.php
[Thu Jul 30 13:20:27.640540 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.672335 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/alf.php
[Thu Jul 30 13:20:27.672378 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.703482 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/shx.php
[Thu Jul 30 13:20:27.703536 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.709559 2026] [ssl:error] [pid 3211706:tid 3211706] (70014)End of file found: [client 216.73.216.199:21699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:27.734130 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mini.php
[Thu Jul 30 13:20:27.734173 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.797904 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/Gel.php
[Thu Jul 30 13:20:27.797947 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.828583 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/doc.php
[Thu Jul 30 13:20:27.828627 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.859548 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/upel.php
[Thu Jul 30 13:20:27.859590 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.890301 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wawa.php
[Thu Jul 30 13:20:27.890344 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.937665 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xupe.php
[Thu Jul 30 13:20:27.937709 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:27.972636 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/web.php
[Thu Jul 30 13:20:27.972677 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:28.003586 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/idiot.php
[Thu Jul 30 13:20:28.003633 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:28.034619 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/b347k.php
[Thu Jul 30 13:20:28.034663 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:28.065280 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp13.php
[Thu Jul 30 13:20:28.065322 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:29.035760 2026] [access_compat:error] [pid 3222989:tid 3222989] [client 106.222.248.251:1900] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:20:29.073260 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/loder.php
[Thu Jul 30 13:20:29.073307 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:29.435728 2026] [authz_core:error] [pid 3222919:tid 3222919] [client 57.141.0.47:26376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:20:29.436349 2026] [authz_core:error] [pid 3222919:tid 3222919] [client 57.141.0.47:26376] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:20:30.068754 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ajax.php
[Thu Jul 30 13:20:30.068816 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.262828 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/vhost.php
[Thu Jul 30 13:20:30.262877 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.296335 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/Black.php
[Thu Jul 30 13:20:30.296380 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.337163 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xx1.php
[Thu Jul 30 13:20:30.337212 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.401336 2026] [ssl:error] [pid 3221182:tid 3221182] (70014)End of file found: [client 216.73.216.199:55895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:30.563267 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sado.php
[Thu Jul 30 13:20:30.563312 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.589871 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:31700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:30.589912 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:30.594766 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/saa.php
[Thu Jul 30 13:20:30.594806 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.631435 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/null.php
[Thu Jul 30 13:20:30.631479 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.646558 2026] [ssl:error] [pid 3205053:tid 3205053] (EAI 2)Name or service not known: [client 144.76.19.72:31704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:30.646590 2026] [ssl:error] [pid 3205053:tid 3205053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:30.662090 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/msss.php
[Thu Jul 30 13:20:30.662136 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.692724 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/b374.php
[Thu Jul 30 13:20:30.692770 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:30.731142 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/1234.php
[Thu Jul 30 13:20:30.731189 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.305688 2026] [ssl:error] [pid 3219107:tid 3219107] (70014)End of file found: [client 216.73.216.199:38324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:31.324359 2026] [authz_core:error] [pid 3219035:tid 3219035] [client 57.141.0.46:30424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:20:31.324980 2026] [authz_core:error] [pid 3219035:tid 3219035] [client 57.141.0.46:30424] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:20:31.602603 2026] [lsapi:warn] [pid 3221096:tid 3221096] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:31.734376 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/0day.php
[Thu Jul 30 13:20:31.734422 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.765973 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tcc.php
[Thu Jul 30 13:20:31.766016 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.798508 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fun.php
[Thu Jul 30 13:20:31.798557 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.844821 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/err.php
[Thu Jul 30 13:20:31.844864 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.875398 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/jmx.php
[Thu Jul 30 13:20:31.875441 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.908522 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/idx.php
[Thu Jul 30 13:20:31.908568 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.939205 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ler.php
[Thu Jul 30 13:20:31.939247 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:31.969885 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/img.php
[Thu Jul 30 13:20:31.969929 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.025507 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lel.php
[Thu Jul 30 13:20:32.025553 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.059246 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/prv.php
[Thu Jul 30 13:20:32.059289 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.096757 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xai.php
[Thu Jul 30 13:20:32.096804 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.131158 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sok.php
[Thu Jul 30 13:20:32.131209 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.162459 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/py.php
[Thu Jul 30 13:20:32.162531 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.193212 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/css.php
[Thu Jul 30 13:20:32.193253 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.225774 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ssl.php
[Thu Jul 30 13:20:32.225820 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.271773 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sql.php
[Thu Jul 30 13:20:32.271818 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.306389 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/spy.php
[Thu Jul 30 13:20:32.306432 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.344338 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ww3.php
[Thu Jul 30 13:20:32.344381 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.374950 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sok.php
[Thu Jul 30 13:20:32.374991 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.405586 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/vv.php
[Thu Jul 30 13:20:32.405630 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.436177 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gg.php
[Thu Jul 30 13:20:32.436222 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.466704 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/rtx.php
[Thu Jul 30 13:20:32.466748 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.497435 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/CDX1.php
[Thu Jul 30 13:20:32.497475 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.528119 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/akcc.php
[Thu Jul 30 13:20:32.528162 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.567082 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/z.php
[Thu Jul 30 13:20:32.567123 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.611277 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/v.php
[Thu Jul 30 13:20:32.611319 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.641916 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fs.php
[Thu Jul 30 13:20:32.641957 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.682827 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/y.php
[Thu Jul 30 13:20:32.682866 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:32.713705 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a5.php
[Thu Jul 30 13:20:32.713747 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:33.702775 2026] [ssl:error] [pid 3202364:tid 3202364] (EAI 2)Name or service not known: [client 144.76.19.72:31716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:33.702818 2026] [ssl:error] [pid 3202364:tid 3202364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:33.720180 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/vx.php
[Thu Jul 30 13:20:33.720237 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:33.758936 2026] [ssl:error] [pid 3217441:tid 3217441] (EAI 2)Name or service not known: [client 144.76.19.72:31730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:33.758985 2026] [ssl:error] [pid 3217441:tid 3217441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:33.830044 2026] [core:error] [pid 3217577:tid 3217577] (13)Permission denied: [client 216.73.216.199:12827] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup14/device/driver/bind
[Thu Jul 30 13:20:34.130559 2026] [ssl:error] [pid 3217577:tid 3217577] (70014)End of file found: [client 216.73.216.199:12827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:34.187013 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/asd.php
[Thu Jul 30 13:20:34.187084 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:34.791913 2026] [lsapi:warn] [pid 3219034:tid 3219034] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:34.929594 2026] [security2:error] [pid 3221141:tid 3221141] [client 160.30.104.240:43524] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBkmx7CBHD_FucT7eDugAAAAs"]
[Thu Jul 30 13:20:34.929643 2026] [security2:error] [pid 3221141:tid 3221141] [client 160.30.104.240:43524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBkmx7CBHD_FucT7eDugAAAAs"]
[Thu Jul 30 13:20:34.929897 2026] [security2:error] [pid 3221141:tid 3221141] [client 160.30.104.240:43524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBkmx7CBHD_FucT7eDugAAAAs"]
[Thu Jul 30 13:20:35.482123 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tfm.php
[Thu Jul 30 13:20:35.482170 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.542847 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sql.php
[Thu Jul 30 13:20:35.542893 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.577411 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/pomo.php
[Thu Jul 30 13:20:35.577453 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.618559 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/hp2.php
[Thu Jul 30 13:20:35.618603 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.658816 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/koiy.php
[Thu Jul 30 13:20:35.658861 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.689465 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/kua.php
[Thu Jul 30 13:20:35.689519 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.720158 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/kq1.php
[Thu Jul 30 13:20:35.720198 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.750815 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/genco.php
[Thu Jul 30 13:20:35.750860 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.782728 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xr.php
[Thu Jul 30 13:20:35.782774 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:35.844235 2026] [security2:error] [pid 3221096:tid 3221096] [client 216.73.216.199:57770] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/faillock.conf"] [unique_id "amtBk01-WPGNOl4XgFDi7AAAAAU"]
[Thu Jul 30 13:20:35.844533 2026] [security2:error] [pid 3221096:tid 3221096] [client 216.73.216.199:57770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/faillock.conf"] [unique_id "amtBk01-WPGNOl4XgFDi7AAAAAU"]
[Thu Jul 30 13:20:35.844756 2026] [security2:error] [pid 3221096:tid 3221096] [client 216.73.216.199:57770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/faillock.conf"] [unique_id "amtBk01-WPGNOl4XgFDi7AAAAAU"]
[Thu Jul 30 13:20:36.238341 2026] [ssl:error] [pid 3221096:tid 3221096] (70014)End of file found: [client 216.73.216.199:57770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:36.265641 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws69.php
[Thu Jul 30 13:20:36.265693 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.308522 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/thui.php
[Thu Jul 30 13:20:36.308568 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.339250 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a332.php
[Thu Jul 30 13:20:36.339295 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.395243 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/zu.php
[Thu Jul 30 13:20:36.395286 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.428398 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/w1.php
[Thu Jul 30 13:20:36.428443 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.459196 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/FAQ.php
[Thu Jul 30 13:20:36.459242 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.490552 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ano.php
[Thu Jul 30 13:20:36.490599 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.503595 2026] [security2:error] [pid 3222830:tid 3222830] [client 43.130.67.33:56502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-sun.com"] [uri "/"] [unique_id "amtBlAXvsz12zTcvpZv4GgAAAEA"]
[Thu Jul 30 13:20:36.521314 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/h2h.php
[Thu Jul 30 13:20:36.521357 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.551905 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sid4.php
[Thu Jul 30 13:20:36.551948 2026] [access_compat:error] [pid 3218990:tid 3218990] [client 158.158.38.215:9184] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:36.827242 2026] [ssl:error] [pid 3218153:tid 3218153] (EAI 2)Name or service not known: [client 144.76.19.72:31742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:36.827284 2026] [ssl:error] [pid 3218153:tid 3218153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:36.883381 2026] [ssl:error] [pid 3217574:tid 3217574] (EAI 2)Name or service not known: [client 144.76.19.72:31744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:36.883420 2026] [ssl:error] [pid 3217574:tid 3217574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:37.139718 2026] [core:error] [pid 3222985:tid 3222985] (13)Permission denied: [client 216.73.216.199:12830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/226:0/device/rom
[Thu Jul 30 13:20:37.368404 2026] [cgi:error] [pid 3211706:tid 3211706] [client 66.249.66.196:61826] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:20:37.441721 2026] [ssl:error] [pid 3222985:tid 3222985] (70014)End of file found: [client 216.73.216.199:12830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:37.967153 2026] [security2:error] [pid 3211649:tid 3211649] [client 46.55.112.166:19849] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBlcmXGK1T2KjbBzKjdQAAADU"]
[Thu Jul 30 13:20:37.967207 2026] [security2:error] [pid 3211649:tid 3211649] [client 46.55.112.166:19849] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBlcmXGK1T2KjbBzKjdQAAADU"]
[Thu Jul 30 13:20:37.967504 2026] [security2:error] [pid 3211649:tid 3211649] [client 46.55.112.166:19849] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBlcmXGK1T2KjbBzKjdQAAADU"]
[Thu Jul 30 13:20:38.054494 2026] [core:error] [pid 3222044:tid 3222044] [client 57.141.0.14:52852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:38.054526 2026] [core:error] [pid 3222044:tid 3222044] [client 57.141.0.14:52852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:39.140566 2026] [ssl:error] [pid 3219034:tid 3219034] (70014)End of file found: [client 216.73.216.199:58555] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:39.938881 2026] [ssl:error] [pid 3217577:tid 3217577] (EAI 2)Name or service not known: [client 144.76.19.72:32190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:39.938931 2026] [ssl:error] [pid 3217577:tid 3217577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:39.992386 2026] [ssl:error] [pid 3208716:tid 3208716] (EAI 2)Name or service not known: [client 144.76.19.72:32196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:39.992421 2026] [ssl:error] [pid 3208716:tid 3208716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:40.145895 2026] [core:error] [pid 3219107:tid 3219107] (13)Permission denied: [client 216.73.216.199:7847] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_net/sections/__verbose
[Thu Jul 30 13:20:41.365405 2026] [core:error] [pid 3219035:tid 3219035] (13)Permission denied: [client 216.73.216.199:6283] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS1/close_delay
[Thu Jul 30 13:20:41.414798 2026] [security2:error] [pid 3215777:tid 3215777] [client 103.127.7.76:32800] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBmYVcaHwSX8G1aSaJQwAAABY"]
[Thu Jul 30 13:20:41.414844 2026] [security2:error] [pid 3215777:tid 3215777] [client 103.127.7.76:32800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBmYVcaHwSX8G1aSaJQwAAABY"]
[Thu Jul 30 13:20:41.415095 2026] [security2:error] [pid 3215777:tid 3215777] [client 103.127.7.76:32800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBmYVcaHwSX8G1aSaJQwAAABY"]
[Thu Jul 30 13:20:41.665622 2026] [ssl:error] [pid 3205053:tid 3205053] (70014)End of file found: [client 216.73.216.199:9807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:41.784403 2026] [access_compat:error] [pid 3219036:tid 3219036] [client 106.222.248.251:10199] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:20:42.223153 2026] [access_compat:error] [pid 3221097:tid 3221097] [client 45.158.164.139:39512] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:20:42.263861 2026] [ssl:error] [pid 3219035:tid 3219035] (70014)End of file found: [client 216.73.216.199:6283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:42.380717 2026] [security2:error] [pid 3222988:tid 3222988] [client 74.7.241.20:41434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "butteredcat.com"] [uri "/"] [unique_id "amtBmve3in9M1JgcRam_dQAAAEs"], referer: https://rankzonedirectory.com
[Thu Jul 30 13:20:42.561539 2026] [lsapi:warn] [pid 3215777:tid 3215777] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:43.049536 2026] [ssl:error] [pid 3222989:tid 3222989] (EAI 2)Name or service not known: [client 144.76.19.72:32202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:43.049565 2026] [ssl:error] [pid 3222989:tid 3222989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:43.101054 2026] [ssl:error] [pid 3222985:tid 3222985] (EAI 2)Name or service not known: [client 144.76.19.72:32214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:43.101096 2026] [ssl:error] [pid 3222985:tid 3222985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:43.170882 2026] [ssl:error] [pid 3221096:tid 3221096] (70014)End of file found: [client 216.73.216.199:3777] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:45.262712 2026] [lsapi:warn] [pid 3222919:tid 3222919] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:46.153288 2026] [ssl:error] [pid 3219034:tid 3219034] (EAI 2)Name or service not known: [client 144.76.19.72:32226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:46.153317 2026] [ssl:error] [pid 3219034:tid 3219034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:46.207741 2026] [ssl:error] [pid 3222919:tid 3222919] (EAI 2)Name or service not known: [client 144.76.19.72:32228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:46.207779 2026] [ssl:error] [pid 3222919:tid 3222919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:46.887903 2026] [core:error] [pid 3221826:tid 3221826] [client 66.249.66.195:64194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:46.887927 2026] [core:error] [pid 3221826:tid 3221826] [client 66.249.66.195:64194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:46.976234 2026] [ssl:error] [pid 3221143:tid 3221143] (70014)End of file found: [client 216.73.216.199:54939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:47.989330 2026] [ssl:error] [pid 3202364:tid 3202364] (70014)End of file found: [client 216.73.216.199:63905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:48.428198 2026] [security2:error] [pid 3221798:tid 3221798] [client 85.208.96.195:39084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/voting-incentives-penalties-or-fines-ap-gov"] [unique_id "amtBoCGpTEEEFakYJJAziAAAAAQ"]
[Thu Jul 30 13:20:49.261229 2026] [ssl:error] [pid 3222989:tid 3222989] (EAI 2)Name or service not known: [client 144.76.19.72:32242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:49.261256 2026] [ssl:error] [pid 3222989:tid 3222989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:49.317775 2026] [ssl:error] [pid 3208716:tid 3208716] (EAI 2)Name or service not known: [client 144.76.19.72:32250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:49.317805 2026] [ssl:error] [pid 3208716:tid 3208716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:49.419843 2026] [authz_core:error] [pid 3222919:tid 3222919] [client 57.141.0.64:25368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:20:49.420605 2026] [authz_core:error] [pid 3222919:tid 3222919] [client 57.141.0.64:25368] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:20:50.098863 2026] [ssl:error] [pid 3219034:tid 3219034] (70014)End of file found: [client 216.73.216.199:19548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:52.371221 2026] [ssl:error] [pid 3208716:tid 3208716] (EAI 2)Name or service not known: [client 144.76.19.72:28362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:52.371253 2026] [ssl:error] [pid 3208716:tid 3208716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:52.380880 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:20:52.425547 2026] [ssl:error] [pid 3221798:tid 3221798] (EAI 2)Name or service not known: [client 144.76.19.72:28364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:52.425590 2026] [ssl:error] [pid 3221798:tid 3221798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:52.498789 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/php8.php
[Thu Jul 30 13:20:52.498845 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:52.669587 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/assets
[Thu Jul 30 13:20:52.826615 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lite.php
[Thu Jul 30 13:20:52.826706 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:52.944942 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/term.php
[Thu Jul 30 13:20:52.945005 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:53.102930 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/config.php
[Thu Jul 30 13:20:53.102983 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:53.106603 2026] [ssl:error] [pid 3221141:tid 3221141] (70014)End of file found: [client 216.73.216.199:44116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:53.207463 2026] [access_compat:error] [pid 3205053:tid 3205053] [client 106.222.248.251:12274] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:20:53.223602 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:20:53.285311 2026] [lsapi:warn] [pid 3221143:tid 3221143] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:53.383846 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-good.php
[Thu Jul 30 13:20:53.383898 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:53.501001 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:20:53.688042 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/abcd.php
[Thu Jul 30 13:20:53.688108 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:53.807120 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/x.php
[Thu Jul 30 13:20:53.807169 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:54.015500 2026] [ssl:error] [pid 3222922:tid 3222922] (70014)End of file found: [client 216.73.216.199:47888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:54.164036 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/goods.php
[Thu Jul 30 13:20:54.164109 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:54.364093 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-access.php
[Thu Jul 30 13:20:54.364141 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:54.530477 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:20:54.699569 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/filemanager.php
[Thu Jul 30 13:20:54.699619 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:54.746134 2026] [core:error] [pid 3218153:tid 3218153] [client 57.141.0.21:45628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:54.746156 2026] [core:error] [pid 3218153:tid 3218153] [client 57.141.0.21:45628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:20:54.816146 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:20:54.968010 2026] [security2:error] [pid 3222042:tid 3222042] [client 170.106.165.186:35262] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amtBpsy2z6YYHsuVisx8cQAAACQ"]
[Thu Jul 30 13:20:55.028127 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bthil.php
[Thu Jul 30 13:20:55.028182 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:55.221343 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xmlrpc.php
[Thu Jul 30 13:20:55.221390 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:55.389185 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:20:55.410533 2026] [ssl:error] [pid 3217892:tid 3217892] (70014)End of file found: [client 216.73.216.199:47303] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:55.475873 2026] [security2:error] [pid 3222919:tid 3222919] [client 170.106.165.186:35634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtBp_3XhWUlrMVLGRRWnAAAAEM"], referer: http://swingaddiction.co.uk
[Thu Jul 30 13:20:55.481935 2026] [ssl:error] [pid 3211706:tid 3211706] (EAI 2)Name or service not known: [client 144.76.19.72:28366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:55.481964 2026] [ssl:error] [pid 3211706:tid 3211706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:55.508188 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cv.php
[Thu Jul 30 13:20:55.508277 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:55.536084 2026] [ssl:error] [pid 3222044:tid 3222044] (EAI 2)Name or service not known: [client 144.76.19.72:28374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:55.536113 2026] [ssl:error] [pid 3222044:tid 3222044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:55.540688 2026] [cgi:error] [pid 3222919:tid 3222919] [client 170.106.165.186:35634] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://swingaddiction.co.uk
[Thu Jul 30 13:20:55.693841 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:20:55.719605 2026] [lsapi:warn] [pid 3219107:tid 3219107] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:20:55.868116 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/css.php
[Thu Jul 30 13:20:55.868174 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:55.985127 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:20:56.102959 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/core.php
[Thu Jul 30 13:20:56.103014 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:56.220568 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 13:20:56.409945 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 13:20:56.589822 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/storage
[Thu Jul 30 13:20:56.766727 2026] [security2:error] [pid 3219107:tid 3219107] [client 185.191.171.5:19066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4902.0.html"] [unique_id "amtBqEaFymnwZeMg7fOilgAAAD0"]
[Thu Jul 30 13:20:56.823895 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ahax.php
[Thu Jul 30 13:20:56.823940 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:56.940534 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/zoom1.php
[Thu Jul 30 13:20:56.940582 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:57.316891 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/txets.php
[Thu Jul 30 13:20:57.316944 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:57.500761 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:20:57.620517 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:20:57.739524 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:20:57.937166 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:20:58.138555 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:20:58.328600 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/radio.php
[Thu Jul 30 13:20:58.328650 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:58.445567 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/item.php
[Thu Jul 30 13:20:58.445619 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:58.564840 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/t.php
[Thu Jul 30 13:20:58.564891 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:58.628506 2026] [ssl:error] [pid 3221141:tid 3221141] (EAI 2)Name or service not known: [client 144.76.19.72:28388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:58.628536 2026] [ssl:error] [pid 3221141:tid 3221141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:58.682517 2026] [ssl:error] [pid 3221143:tid 3221143] (EAI 2)Name or service not known: [client 144.76.19.72:28404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:20:58.682559 2026] [ssl:error] [pid 3221143:tid 3221143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:20:58.727948 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/i.php
[Thu Jul 30 13:20:58.728001 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:58.848412 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/deepseek_d.php
[Thu Jul 30 13:20:58.848463 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:59.032103 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:20:59.149864 2026] [ssl:error] [pid 3222988:tid 3222988] (70014)End of file found: [client 216.73.216.199:56957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:20:59.159332 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/file.php
[Thu Jul 30 13:20:59.159386 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:59.282962 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:20:59.446971 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:20:59.563535 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/assets
[Thu Jul 30 13:20:59.755866 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bgymj.php
[Thu Jul 30 13:20:59.755914 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:20:59.915032 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/modules/mod_footer/tmpl/index.php
[Thu Jul 30 13:20:59.915127 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:00.045276 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images/
[Thu Jul 30 13:21:00.055350 2026] [core:error] [pid 3219035:tid 3219035] (13)Permission denied: [client 216.73.216.199:18995] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu1/driver/cpu7/crash_notes
[Thu Jul 30 13:21:00.162117 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-load.php
[Thu Jul 30 13:21:00.162172 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:00.285635 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:00.411016 2026] [core:error] [pid 3217574:tid 3217574] [client 57.141.0.41:35448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:00.411043 2026] [core:error] [pid 3217574:tid 3217574] [client 57.141.0.41:35448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:00.465157 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a.php
[Thu Jul 30 13:21:00.465210 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:00.628539 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/u.php
[Thu Jul 30 13:21:00.628593 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:00.745474 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/r.php
[Thu Jul 30 13:21:00.745534 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:00.862408 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-blog.php
[Thu Jul 30 13:21:00.862458 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:00.979321 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xxx.php
[Thu Jul 30 13:21:00.979367 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:01.114678 2026] [access_compat:error] [pid 3225728:tid 3225728] [client 106.222.248.251:2479] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:21:01.182819 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/randkeyword.PhP7
[Thu Jul 30 13:21:01.182872 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:01.299559 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/vendor
[Thu Jul 30 13:21:01.599574 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tool.php
[Thu Jul 30 13:21:01.599623 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:01.774915 2026] [ssl:error] [pid 3221184:tid 3221184] (EAI 2)Name or service not known: [client 144.76.19.72:57776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:01.774948 2026] [ssl:error] [pid 3221184:tid 3221184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:01.818106 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content.php
[Thu Jul 30 13:21:01.818158 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:01.830535 2026] [ssl:error] [pid 3211706:tid 3211706] (EAI 2)Name or service not known: [client 144.76.19.72:57792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:01.830560 2026] [ssl:error] [pid 3211706:tid 3211706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:01.866729 2026] [ssl:error] [pid 3219035:tid 3219035] (70014)End of file found: [client 216.73.216.199:18995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:01.935587 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/k.php
[Thu Jul 30 13:21:01.935637 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:02.052575 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/root.php
[Thu Jul 30 13:21:02.052629 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:02.229290 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws.php
[Thu Jul 30 13:21:02.229347 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:02.351382 2026] [ssl:error] [pid 3222990:tid 3222990] (70014)End of file found: [client 216.73.216.199:54515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:02.396971 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/p.php
[Thu Jul 30 13:21:02.397018 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:02.517970 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/elp.php
[Thu Jul 30 13:21:02.518016 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:02.702900 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a1.php
[Thu Jul 30 13:21:02.702949 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:02.830460 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:02.948146 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/alfa-rex.php7
[Thu Jul 30 13:21:02.948198 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:03.111965 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:21:03.273208 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/install.php
[Thu Jul 30 13:21:03.273260 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:03.460556 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:03.578584 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/upload.php
[Thu Jul 30 13:21:03.578633 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:03.761124 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:03.879054 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:04.049603 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:21:04.172126 2026] [lsapi:warn] [pid 3225760:tid 3225760] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:04.207349 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/files.php
[Thu Jul 30 13:21:04.207396 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:04.352980 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/o.php
[Thu Jul 30 13:21:04.353034 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:04.469877 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/file2.php
[Thu Jul 30 13:21:04.469923 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:04.493474 2026] [ssl:error] [pid 3225726:tid 3225726] (70014)End of file found: [client 216.73.216.199:9563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:04.694587 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/gecko-litespeed.php
[Thu Jul 30 13:21:04.694640 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:04.791399 2026] [ssl:error] [pid 3218990:tid 3218990] (70014)End of file found: [client 216.73.216.199:21580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:04.888667 2026] [ssl:error] [pid 3225169:tid 3225169] (EAI 2)Name or service not known: [client 144.76.19.72:57794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:04.888705 2026] [ssl:error] [pid 3225169:tid 3225169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:04.941773 2026] [ssl:error] [pid 3215777:tid 3215777] (EAI 2)Name or service not known: [client 144.76.19.72:57804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:04.941812 2026] [ssl:error] [pid 3215777:tid 3215777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:05.036626 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xda.php
[Thu Jul 30 13:21:05.036682 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:05.225959 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/theme.php
[Thu Jul 30 13:21:05.226009 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:05.343442 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/classwithtostring.php
[Thu Jul 30 13:21:05.343499 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:05.463358 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/news.php
[Thu Jul 30 13:21:05.463409 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:05.486291 2026] [core:error] [pid 3219034:tid 3219034] [client 57.141.0.26:53632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:05.486322 2026] [core:error] [pid 3219034:tid 3219034] [client 57.141.0.26:53632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:05.580106 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about
[Thu Jul 30 13:21:05.763203 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:21:05.904955 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:06.022570 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:06.160060 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lock360.php
[Thu Jul 30 13:21:06.160128 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:06.273817 2026] [lsapi:warn] [pid 3221143:tid 3221143] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:06.375806 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-conflg.php
[Thu Jul 30 13:21:06.375865 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:06.492850 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/123.php
[Thu Jul 30 13:21:06.492900 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:06.681001 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/yanz.php
[Thu Jul 30 13:21:06.681055 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:06.855585 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/autoload_classmap.php
[Thu Jul 30 13:21:06.855635 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:06.975473 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bi.php
[Thu Jul 30 13:21:06.975535 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:07.093582 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cc.php
[Thu Jul 30 13:21:07.093636 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:07.442919 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/files
[Thu Jul 30 13:21:07.654582 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/1.php7
[Thu Jul 30 13:21:07.654630 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:07.842537 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/disagraeosc.php
[Thu Jul 30 13:21:07.842590 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:07.959394 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-logs.php
[Thu Jul 30 13:21:07.959443 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:08.010468 2026] [ssl:error] [pid 3218153:tid 3218153] (EAI 2)Name or service not known: [client 144.76.19.72:57816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:08.010516 2026] [ssl:error] [pid 3218153:tid 3218153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:08.057767 2026] [security2:error] [pid 3221143:tid 3221143] [client 43.155.162.41:35058] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amtBtAktB2LKjTPzDGB9PwAAACM"]
[Thu Jul 30 13:21:08.066565 2026] [ssl:error] [pid 3219035:tid 3219035] (EAI 2)Name or service not known: [client 144.76.19.72:57830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:08.066588 2026] [ssl:error] [pid 3219035:tid 3219035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:08.076592 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:21:08.103393 2026] [ssl:error] [pid 3219036:tid 3219036] (70014)End of file found: [client 216.73.216.199:54303] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:08.235872 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/system_log.php
[Thu Jul 30 13:21:08.235922 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:08.454570 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/24.php
[Thu Jul 30 13:21:08.454623 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:08.690590 2026] [access_compat:error] [pid 3219108:tid 3219108] [client 172.202.44.182:43782] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:21:10.252099 2026] [security2:error] [pid 3217441:tid 3217441] [client 43.155.162.41:42916] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtBtsxROholbrzhBtrcKwAAAAM"], referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 13:21:10.253949 2026] [authz_core:error] [pid 3217441:tid 3217441] [client 43.155.162.41:42916] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 13:21:10.256643 2026] [authz_core:error] [pid 3217441:tid 3217441] [client 43.155.162.41:42916] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 13:21:10.389714 2026] [security2:error] [pid 3221096:tid 3221096] [client 160.187.191.212:45604] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBtk1-WPGNOl4XgFDi-QAAAAU"]
[Thu Jul 30 13:21:10.389781 2026] [security2:error] [pid 3221096:tid 3221096] [client 160.187.191.212:45604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBtk1-WPGNOl4XgFDi-QAAAAU"]
[Thu Jul 30 13:21:10.390033 2026] [security2:error] [pid 3221096:tid 3221096] [client 160.187.191.212:45604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBtk1-WPGNOl4XgFDi-QAAAAU"]
[Thu Jul 30 13:21:10.513445 2026] [ssl:error] [pid 3205088:tid 3205088] (70014)End of file found: [client 216.73.216.199:43691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:11.118010 2026] [ssl:error] [pid 3219105:tid 3219105] (EAI 2)Name or service not known: [client 144.76.19.72:54708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:11.118037 2026] [ssl:error] [pid 3219105:tid 3219105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:11.173585 2026] [ssl:error] [pid 3217441:tid 3217441] (EAI 2)Name or service not known: [client 144.76.19.72:54718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:11.173609 2026] [ssl:error] [pid 3217441:tid 3217441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:11.292386 2026] [security2:error] [pid 3225668:tid 3225668] [client 198.244.168.47:46394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "amtBt7HiIpJgi4NxriwLGgAAABA"]
[Thu Jul 30 13:21:11.514408 2026] [authz_core:error] [pid 3221798:tid 3221798] [client 57.141.0.63:30450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:21:11.515043 2026] [authz_core:error] [pid 3221798:tid 3221798] [client 57.141.0.63:30450] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:21:11.644974 2026] [security2:error] [pid 3225727:tid 3225727] [client 198.244.168.47:46396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "amtBtx3KcQK92w4zN7ZyDQAAABo"]
[Thu Jul 30 13:21:11.691501 2026] [security2:error] [pid 3221097:tid 3221097] [client 24.77.82.91:36080] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBt43HzOfCeUfeMRVojAAAAAY"]
[Thu Jul 30 13:21:11.691565 2026] [security2:error] [pid 3221097:tid 3221097] [client 24.77.82.91:36080] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBt43HzOfCeUfeMRVojAAAAAY"]
[Thu Jul 30 13:21:11.691818 2026] [security2:error] [pid 3221097:tid 3221097] [client 24.77.82.91:36080] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBt43HzOfCeUfeMRVojAAAAAY"]
[Thu Jul 30 13:21:11.845033 2026] [access_compat:error] [pid 3222989:tid 3222989] [client 106.222.248.251:26154] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:21:11.875559 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:21:12.069996 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 13:21:12.188901 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:12.307132 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:21:12.440773 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/num.php
[Thu Jul 30 13:21:12.440823 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:12.559055 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:21:12.723822 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:21:12.840850 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:21:12.876324 2026] [authz_core:error] [pid 3205053:tid 3205053] [client 20.151.221.234:55265] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-admin/includes/error_log
[Thu Jul 30 13:21:12.920854 2026] [ssl:error] [pid 3218989:tid 3218989] (70014)End of file found: [client 216.73.216.199:59067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:12.982162 2026] [security2:error] [pid 3225727:tid 3225727] [client 198.244.242.114:49560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/beyond-the-act/"] [unique_id "amtBuB3KcQK92w4zN7ZyDgAAABo"]
[Thu Jul 30 13:21:13.222214 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:13.391270 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gifclass.php
[Thu Jul 30 13:21:13.391324 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:13.419179 2026] [core:error] [pid 3221184:tid 3221184] (13)Permission denied: [client 216.73.216.199:10134] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS0/uartclk
[Thu Jul 30 13:21:13.508568 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:13.520272 2026] [ssl:error] [pid 3221184:tid 3221184] (70014)End of file found: [client 216.73.216.199:10134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:13.693529 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 13:21:13.811922 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/css
[Thu Jul 30 13:21:13.927508 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-cron.php
[Thu Jul 30 13:21:13.927559 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:14.143900 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-block.php
[Thu Jul 30 13:21:14.143951 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 13:21:14.231594 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:54720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:14.231632 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:14.286477 2026] [ssl:error] [pid 3225728:tid 3225728] (EAI 2)Name or service not known: [client 144.76.19.72:54722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:14.286523 2026] [ssl:error] [pid 3225728:tid 3225728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:14.317540 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 13:21:14.433014 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 172.202.44.182:43424] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 13:21:14.567691 2026] [core:error] [pid 3219105:tid 3219105] [client 66.249.66.167:45663] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:14.567733 2026] [core:error] [pid 3219105:tid 3219105] [client 66.249.66.167:45663] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:15.064464 2026] [lsapi:warn] [pid 3225757:tid 3225757] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:15.188622 2026] [security2:error] [pid 3225727:tid 3225727] [client 171.225.193.77:19993] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBux3KcQK92w4zN7ZyEAAAABo"]
[Thu Jul 30 13:21:15.188675 2026] [security2:error] [pid 3225727:tid 3225727] [client 171.225.193.77:19993] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtBux3KcQK92w4zN7ZyEAAAABo"]
[Thu Jul 30 13:21:15.188938 2026] [security2:error] [pid 3225727:tid 3225727] [client 171.225.193.77:19993] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtBux3KcQK92w4zN7ZyEAAAABo"]
[Thu Jul 30 13:21:16.632711 2026] [authz_core:error] [pid 3205088:tid 3205088] [client 66.249.66.35:43381] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:21:16.635388 2026] [authz_core:error] [pid 3205088:tid 3205088] [client 66.249.66.35:43381] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:21:16.731334 2026] [lsapi:warn] [pid 3225726:tid 3225726] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:17.343614 2026] [ssl:error] [pid 3215264:tid 3215264] (EAI 2)Name or service not known: [client 144.76.19.72:54738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:17.343648 2026] [ssl:error] [pid 3215264:tid 3215264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:17.401372 2026] [ssl:error] [pid 3221096:tid 3221096] (EAI 2)Name or service not known: [client 144.76.19.72:54752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:17.401420 2026] [ssl:error] [pid 3221096:tid 3221096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:18.313083 2026] [security2:error] [pid 3222989:tid 3222989] [client 85.208.96.207:45060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10991.0/prev_next,prev.html"] [unique_id "amtBvg-rT8AFODUBtzLPkQAAAEw"]
[Thu Jul 30 13:21:18.336331 2026] [ssl:error] [pid 3219105:tid 3219105] (70014)End of file found: [client 216.73.216.199:47515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:18.938369 2026] [ssl:error] [pid 3225725:tid 3225725] (70014)End of file found: [client 216.73.216.199:53131] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:20.460755 2026] [ssl:error] [pid 3219104:tid 3219104] (EAI 2)Name or service not known: [client 144.76.19.72:35488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:20.460784 2026] [ssl:error] [pid 3219104:tid 3219104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:20.515184 2026] [ssl:error] [pid 3222922:tid 3222922] (EAI 2)Name or service not known: [client 144.76.19.72:35502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:20.515225 2026] [ssl:error] [pid 3222922:tid 3222922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:21.646460 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:10037] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/partial
[Thu Jul 30 13:21:22.084168 2026] [authz_core:error] [pid 3211706:tid 3211706] [client 57.141.0.4:50280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:21:22.084793 2026] [authz_core:error] [pid 3211706:tid 3211706] [client 57.141.0.4:50280] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:21:22.909646 2026] [security2:error] [pid 3217892:tid 3217892] [client 114.119.139.78:40741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/Blog"] [unique_id "amtBwkL4l1lEmxrBbqPxxQAAACI"], referer: https://www.acthoroughbreds.com/investment/
[Thu Jul 30 13:21:23.151713 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:10037] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_allocation_context/free_calls
[Thu Jul 30 13:21:23.568412 2026] [ssl:error] [pid 3221182:tid 3221182] (EAI 2)Name or service not known: [client 144.76.19.72:35508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:23.568449 2026] [ssl:error] [pid 3221182:tid 3221182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:23.623520 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:35524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:23.623546 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:23.812477 2026] [access_compat:error] [pid 3222922:tid 3222922] [client 106.222.248.251:31267] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:21:24.429434 2026] [ssl:error] [pid 3225760:tid 3225760] (70014)End of file found: [client 216.73.216.199:10037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:24.656932 2026] [ssl:error] [pid 3225668:tid 3225668] (70014)End of file found: [client 216.73.216.199:56482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:25.921794 2026] [lsapi:warn] [pid 3218989:tid 3218989] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:26.678553 2026] [ssl:error] [pid 3216578:tid 3216578] (EAI 2)Name or service not known: [client 144.76.19.72:35530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:26.678582 2026] [ssl:error] [pid 3216578:tid 3216578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:26.736168 2026] [ssl:error] [pid 3217892:tid 3217892] (EAI 2)Name or service not known: [client 144.76.19.72:35540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:26.736204 2026] [ssl:error] [pid 3217892:tid 3217892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:27.004042 2026] [core:error] [pid 3219034:tid 3219034] [client 66.249.66.8:63885] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:27.004090 2026] [core:error] [pid 3219034:tid 3219034] [client 66.249.66.8:63885] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:27.069969 2026] [core:error] [pid 3225725:tid 3225725] (13)Permission denied: [client 216.73.216.199:14987] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-1k/slab_size
[Thu Jul 30 13:21:27.504743 2026] [lsapi:warn] [pid 3205088:tid 3205088] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:29.632864 2026] [security2:error] [pid 3205088:tid 3205088] [client 43.164.131.148:40804] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtByR1zOXY08-BVGRSYlQAAAAw"]
[Thu Jul 30 13:21:29.793121 2026] [ssl:error] [pid 3225760:tid 3225760] (EAI 2)Name or service not known: [client 144.76.19.72:23952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:29.793158 2026] [ssl:error] [pid 3225760:tid 3225760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:29.805688 2026] [authz_core:error] [pid 3222830:tid 3222830] [client 20.100.187.180:43987] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-includes/Requests/error_log
[Thu Jul 30 13:21:29.847685 2026] [ssl:error] [pid 3216578:tid 3216578] (EAI 2)Name or service not known: [client 144.76.19.72:23958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:29.847706 2026] [ssl:error] [pid 3216578:tid 3216578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:29.912301 2026] [authz_core:error] [pid 3225668:tid 3225668] [client 57.141.0.47:59560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:21:29.912929 2026] [authz_core:error] [pid 3225668:tid 3225668] [client 57.141.0.47:59560] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:21:31.796141 2026] [security2:error] [pid 3225760:tid 3225760] [client 47.128.55.56:41752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "andrewmarvell5642.co.uk"] [uri "/robots.txt"] [unique_id "amtBy5ExmLYXCVjdgiuBqgAAACs"]
[Thu Jul 30 13:21:31.886124 2026] [core:error] [pid 3225725:tid 3225725] (13)Permission denied: [client 216.73.216.199:14987] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/net_namespace/slabs
[Thu Jul 30 13:21:32.493599 2026] [ssl:error] [pid 3225725:tid 3225725] (70014)End of file found: [client 216.73.216.199:14987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:32.583539 2026] [security2:error] [pid 3225726:tid 3225726] [client 43.164.131.148:38872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtBzHK4BTYN4p8Ki3jHlwAAABU"], referer: http://tompalmer.co.uk
[Thu Jul 30 13:21:32.914666 2026] [ssl:error] [pid 3222984:tid 3222984] (EAI 2)Name or service not known: [client 144.76.19.72:23964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:32.914704 2026] [ssl:error] [pid 3222984:tid 3222984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:32.968263 2026] [ssl:error] [pid 3221096:tid 3221096] (EAI 2)Name or service not known: [client 144.76.19.72:23968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:32.968294 2026] [ssl:error] [pid 3221096:tid 3221096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:32.979454 2026] [core:error] [pid 3215777:tid 3215777] (13)Permission denied: [client 216.73.216.199:24164] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:21/subsystem/drivers_probe
[Thu Jul 30 13:21:33.306744 2026] [ssl:error] [pid 3215777:tid 3215777] (70014)End of file found: [client 216.73.216.199:24164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:33.384881 2026] [access_compat:error] [pid 3210779:tid 3210779] [client 106.222.248.251:1146] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:21:34.953799 2026] [security2:error] [pid 3221184:tid 3221184] [client 20.171.55.167:10059] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "broadbentandsmithcom.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtBzrFENoflTJbZlaUKowAAADE"]
[Thu Jul 30 13:21:34.954034 2026] [security2:error] [pid 3221184:tid 3221184] [client 20.171.55.167:10059] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "broadbentandsmithcom.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtBzrFENoflTJbZlaUKowAAADE"]
[Thu Jul 30 13:21:34.954290 2026] [security2:error] [pid 3221184:tid 3221184] [client 20.171.55.167:10059] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "broadbentandsmithcom.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtBzrFENoflTJbZlaUKowAAADE"]
[Thu Jul 30 13:21:35.831768 2026] [authz_core:error] [pid 3211706:tid 3211706] [client 57.141.0.12:33784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:21:35.832463 2026] [authz_core:error] [pid 3211706:tid 3211706] [client 57.141.0.12:33784] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:21:36.023228 2026] [ssl:error] [pid 3225760:tid 3225760] (EAI 2)Name or service not known: [client 144.76.19.72:23970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:36.023261 2026] [ssl:error] [pid 3225760:tid 3225760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:36.076454 2026] [ssl:error] [pid 3217441:tid 3217441] (EAI 2)Name or service not known: [client 144.76.19.72:23982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:36.076479 2026] [ssl:error] [pid 3217441:tid 3217441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:36.795653 2026] [lsapi:warn] [pid 3225726:tid 3225726] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:37.528342 2026] [core:error] [pid 3221986:tid 3221986] (13)Permission denied: [client 216.73.216.199:34146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PINGv6/store_user
[Thu Jul 30 13:21:37.665128 2026] [lsapi:warn] [pid 3222984:tid 3222984] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:38.636347 2026] [security2:error] [pid 3225757:tid 3225757] [client 51.68.111.199:32463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ziltdesign.be"] [uri "/robots.txt"] [unique_id "amtB0uXmVWaQWkoA5vCj5gAAACU"]
[Thu Jul 30 13:21:39.151309 2026] [ssl:error] [pid 3227484:tid 3227484] (EAI 2)Name or service not known: [client 144.76.19.72:23996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:39.151365 2026] [ssl:error] [pid 3227484:tid 3227484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:39.218637 2026] [ssl:error] [pid 3210779:tid 3210779] (EAI 2)Name or service not known: [client 144.76.19.72:24012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:39.218669 2026] [ssl:error] [pid 3210779:tid 3210779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:39.636775 2026] [ssl:error] [pid 3222045:tid 3222045] (70014)End of file found: [client 216.73.216.199:29305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:40.521172 2026] [security2:error] [pid 3217574:tid 3217574] [client 101.32.15.141:49096] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hatch-works.com"] [uri "/"] [unique_id "amtB1Lop9Po7VcihNi_0zwAAABk"]
[Thu Jul 30 13:21:42.272703 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:25412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:42.272740 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:42.330651 2026] [ssl:error] [pid 3225763:tid 3225763] (EAI 2)Name or service not known: [client 144.76.19.72:25414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:42.330685 2026] [ssl:error] [pid 3225763:tid 3225763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:43.254520 2026] [ssl:error] [pid 3227537:tid 3227537] (70014)End of file found: [client 216.73.216.199:40231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:43.529074 2026] [security2:error] [pid 3218989:tid 3218989] [client 52.0.63.151:7406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2016/07/gomer-300x211.png"] [unique_id "amtB19aHTmKZCSnupTxFxAAAAB4"]
[Thu Jul 30 13:21:43.554439 2026] [ssl:error] [pid 3221986:tid 3221986] (70014)End of file found: [client 216.73.216.199:34146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:43.784638 2026] [core:error] [pid 3221184:tid 3221184] [client 66.249.66.66:37148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:43.784666 2026] [core:error] [pid 3221184:tid 3221184] [client 66.249.66.66:37148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:21:45.387014 2026] [ssl:error] [pid 3218989:tid 3218989] (EAI 2)Name or service not known: [client 144.76.19.72:25428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:45.387057 2026] [ssl:error] [pid 3218989:tid 3218989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:45.440461 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:25432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:45.440501 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:45.625665 2026] [access_compat:error] [pid 3225616:tid 3225616] [client 106.222.248.251:3209] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:21:46.111789 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 45.158.164.139:46874] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:21:46.292280 2026] [ssl:error] [pid 3211706:tid 3211706] (70014)End of file found: [client 216.73.216.199:46339] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:47.316110 2026] [security2:error] [pid 3225726:tid 3225726] [client 114.119.132.171:45329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/request_format~html/cat_ids~103"] [unique_id "amtB23K4BTYN4p8Ki3jHmwAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E22-12-2019
[Thu Jul 30 13:21:47.701690 2026] [lsapi:warn] [pid 3225728:tid 3225728] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:47.809188 2026] [authz_core:error] [pid 3228373:tid 3228373] [client 57.141.0.54:49734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:21:47.809914 2026] [authz_core:error] [pid 3228373:tid 3228373] [client 57.141.0.54:49734] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:21:48.049259 2026] [security2:error] [pid 3228374:tid 3228374] [client 52.2.191.202:34222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtB3Nu4HHWRcQmfYsTfpAAAAAc"]
[Thu Jul 30 13:21:48.147126 2026] [lsapi:warn] [pid 3221140:tid 3221140] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:48.500622 2026] [ssl:error] [pid 3228373:tid 3228373] (EAI 2)Name or service not known: [client 144.76.19.72:25434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:48.500659 2026] [ssl:error] [pid 3228373:tid 3228373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:48.558546 2026] [ssl:error] [pid 3215264:tid 3215264] (EAI 2)Name or service not known: [client 144.76.19.72:25438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:48.558575 2026] [ssl:error] [pid 3215264:tid 3215264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:49.360045 2026] [security2:error] [pid 3221140:tid 3221140] [client 114.119.132.171:35155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/request_format~html/cat_ids~103"] [unique_id "amtB3eEEQ6_6WF8CZlxyeAAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E22-12-2019
[Thu Jul 30 13:21:49.614685 2026] [security2:error] [pid 3222984:tid 3222984] [client 85.208.96.210:12636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/scotts-triple-action-turf-builder"] [unique_id "amtB3RYuNevEExK1SOr5YgAAAEg"]
[Thu Jul 30 13:21:49.619800 2026] [ssl:error] [pid 3227484:tid 3227484] (70014)End of file found: [client 216.73.216.199:52521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:49.920709 2026] [core:error] [pid 3228408:tid 3228408] (13)Permission denied: [client 216.73.216.199:44196] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:1/subsystem/ttyS0/uartclk
[Thu Jul 30 13:21:50.676105 2026] [cgi:error] [pid 3228409:tid 3228409] [client 194.9.110.170:61759] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:21:50.987109 2026] [security2:error] [pid 3221184:tid 3221184] [client 43.153.48.240:40416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wmsfirearmstraining.com"] [uri "/"] [unique_id "amtB3rFENoflTJbZlaUKsgAAADE"]
[Thu Jul 30 13:21:51.124312 2026] [ssl:error] [pid 3228408:tid 3228408] (70014)End of file found: [client 216.73.216.199:44196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:51.140663 2026] [security2:error] [pid 3221182:tid 3221182] [client 54.147.238.89:47121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2021/03/Arctic-Star-vignette-400x51.png"] [unique_id "amtB36LvZbV4vFw66WVpmgAAACc"]
[Thu Jul 30 13:21:51.296185 2026] [security2:error] [pid 3225759:tid 3225759] [client 85.208.96.205:64910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3371.0/prev_next,prev.html"] [unique_id "amtB3xa6VFPtHBBtg7weyAAAACo"]
[Thu Jul 30 13:21:51.613413 2026] [ssl:error] [pid 3225616:tid 3225616] (EAI 2)Name or service not known: [client 144.76.19.72:55022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:51.613455 2026] [ssl:error] [pid 3225616:tid 3225616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:51.668099 2026] [ssl:error] [pid 3228411:tid 3228411] (EAI 2)Name or service not known: [client 144.76.19.72:55030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:51.668130 2026] [ssl:error] [pid 3228411:tid 3228411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:52.324169 2026] [core:error] [pid 3228323:tid 3228323] (13)Permission denied: [client 216.73.216.199:35526] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/x86_emulator/align
[Thu Jul 30 13:21:52.430777 2026] [security2:error] [pid 3221826:tid 3221826] [client 43.153.48.240:43728] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wmsfirearmstraining.com"] [uri "/"] [unique_id "amtB4D60f0C8LqVzU2yFpgAAAA4"], referer: http://wmsfirearmstraining.com
[Thu Jul 30 13:21:54.437665 2026] [core:error] [pid 3228323:tid 3228323] (13)Permission denied: [client 216.73.216.199:35526] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-160/align
[Thu Jul 30 13:21:54.726047 2026] [ssl:error] [pid 3221798:tid 3221798] (EAI 2)Name or service not known: [client 144.76.19.72:55044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:54.726091 2026] [ssl:error] [pid 3221798:tid 3221798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:54.739176 2026] [core:error] [pid 3228323:tid 3228323] (13)Permission denied: [client 216.73.216.199:35526] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/cpu_slabs
[Thu Jul 30 13:21:54.779326 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:55054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:54.779352 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:55.609233 2026] [security2:error] [pid 3215264:tid 3215264] [client 43.153.48.240:45034] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amtB40mS1QHdwm4tyLTJxwAAABM"], referer: https://wmsfirearmstraining.com/
[Thu Jul 30 13:21:55.646702 2026] [ssl:error] [pid 3228323:tid 3228323] (70014)End of file found: [client 216.73.216.199:35526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:55.925660 2026] [security2:error] [pid 3222989:tid 3222989] [client 3.213.213.161:8974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtB4w-rT8AFODUBtzLPngAAAEw"]
[Thu Jul 30 13:21:56.080177 2026] [cgi:error] [pid 3221140:tid 3221140] [client 66.132.224.233:45898] AH02812: stderr from /home/enigmasu/sentimentgifts.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://sentimentgifts.enigmasupplies.co.uk:80/cgi-bin
[Thu Jul 30 13:21:56.151031 2026] [ssl:error] [pid 3225761:tid 3225761] (70014)End of file found: [client 216.73.216.199:1077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:56.872396 2026] [ssl:error] [pid 3227484:tid 3227484] (70014)End of file found: [client 216.73.216.199:28284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:21:56.903564 2026] [access_compat:error] [pid 3222922:tid 3222922] [client 106.222.248.251:23233] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:21:57.031637 2026] [security2:error] [pid 3228373:tid 3228373] [client 92.222.108.101:21192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amtB5aZ_g1ZKnxfuOV9SFwAAAAY"]
[Thu Jul 30 13:21:57.059850 2026] [authz_core:error] [pid 3221798:tid 3221798] [client 57.141.0.44:25990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:21:57.060477 2026] [authz_core:error] [pid 3221798:tid 3221798] [client 57.141.0.44:25990] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:21:57.839695 2026] [ssl:error] [pid 3227538:tid 3227538] (EAI 2)Name or service not known: [client 144.76.19.72:55066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:57.839723 2026] [ssl:error] [pid 3227538:tid 3227538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:57.896240 2026] [ssl:error] [pid 3222045:tid 3222045] (EAI 2)Name or service not known: [client 144.76.19.72:55072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:21:57.896276 2026] [ssl:error] [pid 3222045:tid 3222045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:21:58.084192 2026] [security2:error] [pid 3228408:tid 3228408] [client 5.39.1.229:54926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtB5lutqZpUBbm0nnOD_gAAABA"]
[Thu Jul 30 13:21:58.505403 2026] [lsapi:warn] [pid 3219035:tid 3219035] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:58.613354 2026] [lsapi:warn] [pid 3215264:tid 3215264] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:21:59.005771 2026] [security2:error] [pid 3225763:tid 3225763] [client 3.210.114.189:19003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2024/07/9C20ACAA-098A-4A6A-8E2D-10079E2AD9A4-1536x1152.jpeg"] [unique_id "amtB55kEMvYBAOEaWcL1UwAAAC8"]
[Thu Jul 30 13:22:00.952606 2026] [ssl:error] [pid 3225763:tid 3225763] (EAI 2)Name or service not known: [client 144.76.19.72:47698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:00.952640 2026] [ssl:error] [pid 3225763:tid 3225763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:01.007558 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:47704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:01.007590 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:01.402018 2026] [ssl:error] [pid 3225760:tid 3225760] (70014)End of file found: [client 216.73.216.199:47114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:02.601357 2026] [core:error] [pid 3228410:tid 3228410] (13)Permission denied: [client 216.73.216.199:45650] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/order
[Thu Jul 30 13:22:03.327655 2026] [core:error] [pid 3228410:tid 3228410] (13)Permission denied: [client 216.73.216.199:45650] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/zswap_entry/alloc_calls
[Thu Jul 30 13:22:03.378881 2026] [authz_core:error] [pid 3222919:tid 3222919] [client 57.141.0.27:47036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:03.379524 2026] [authz_core:error] [pid 3222919:tid 3222919] [client 57.141.0.27:47036] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:04.059595 2026] [ssl:error] [pid 3221182:tid 3221182] (EAI 2)Name or service not known: [client 144.76.19.72:47706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:04.059622 2026] [ssl:error] [pid 3221182:tid 3221182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:04.114479 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:47720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:04.114517 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:04.832444 2026] [ssl:error] [pid 3228410:tid 3228410] (70014)End of file found: [client 216.73.216.199:45650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:05.982787 2026] [access_compat:error] [pid 3221798:tid 3221798] [client 106.222.248.251:28921] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:22:06.044130 2026] [core:error] [pid 3225763:tid 3225763] (13)Permission denied: [client 216.73.216.199:10510] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS3/uartclk
[Thu Jul 30 13:22:06.339343 2026] [ssl:error] [pid 3225763:tid 3225763] (70014)End of file found: [client 216.73.216.199:10510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:06.827055 2026] [core:error] [pid 3221143:tid 3221143] (13)Permission denied: [client 216.73.216.199:36581] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_rmap_item/partial
[Thu Jul 30 13:22:07.170207 2026] [ssl:error] [pid 3225762:tid 3225762] (EAI 2)Name or service not known: [client 144.76.19.72:47728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:07.170239 2026] [ssl:error] [pid 3225762:tid 3225762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:07.226842 2026] [ssl:error] [pid 3229321:tid 3229321] (EAI 2)Name or service not known: [client 144.76.19.72:47736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:07.226880 2026] [ssl:error] [pid 3229321:tid 3229321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:07.546155 2026] [ssl:error] [pid 3221143:tid 3221143] (70014)End of file found: [client 216.73.216.199:36581] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:08.110160 2026] [authz_core:error] [pid 3221184:tid 3221184] [client 57.141.0.61:53634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:08.110844 2026] [authz_core:error] [pid 3221184:tid 3221184] [client 57.141.0.61:53634] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:09.081228 2026] [lsapi:warn] [pid 3222919:tid 3222919] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:09.355805 2026] [lsapi:warn] [pid 3222830:tid 3222830] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:10.300690 2026] [ssl:error] [pid 3225667:tid 3225667] (EAI 2)Name or service not known: [client 144.76.19.72:32420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:10.300738 2026] [ssl:error] [pid 3225667:tid 3225667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:10.358541 2026] [ssl:error] [pid 3228410:tid 3228410] (EAI 2)Name or service not known: [client 144.76.19.72:32422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:10.358577 2026] [ssl:error] [pid 3228410:tid 3228410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:12.244002 2026] [security2:error] [pid 3225726:tid 3225726] [client 114.119.153.188:54261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/pages/26/Field_notes/fn_2872___oaxaca/page:86"] [unique_id "amtB9HK4BTYN4p8Ki3jHpAAAABU"], referer: http://jonathanmeyerart.co.uk/pages/26/Field_notes/fn_2881___oaxaca/page:87
[Thu Jul 30 13:22:12.382475 2026] [ssl:error] [pid 3222922:tid 3222922] (70014)End of file found: [client 216.73.216.199:4399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:12.691621 2026] [ssl:error] [pid 3221798:tid 3221798] (70014)End of file found: [client 216.73.216.199:33495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:12.720691 2026] [core:error] [pid 3228323:tid 3228323] [client 66.249.66.169:56756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:12.720721 2026] [core:error] [pid 3228323:tid 3228323] [client 66.249.66.169:56756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:12.733920 2026] [core:error] [pid 3227537:tid 3227537] [client 66.249.66.40:55852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:12.733947 2026] [core:error] [pid 3227537:tid 3227537] [client 66.249.66.40:55852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:13.139470 2026] [core:error] [pid 3222919:tid 3222919] [client 57.141.0.58:36692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:13.139505 2026] [core:error] [pid 3222919:tid 3222919] [client 57.141.0.58:36692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:13.411985 2026] [ssl:error] [pid 3228409:tid 3228409] (EAI 2)Name or service not known: [client 144.76.19.72:32436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:13.412023 2026] [ssl:error] [pid 3228409:tid 3228409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:13.465877 2026] [ssl:error] [pid 3225763:tid 3225763] (EAI 2)Name or service not known: [client 144.76.19.72:32438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:13.465912 2026] [ssl:error] [pid 3225763:tid 3225763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:14.683221 2026] [security2:error] [pid 3228373:tid 3228373] [client 74.7.242.15:38878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.webstersltd.com"] [uri "/"] [unique_id "amtB9qZ_g1ZKnxfuOV9SIAAAAAY"], referer: https://mail.lacartes.com
[Thu Jul 30 13:22:14.972953 2026] [security2:error] [pid 3208716:tid 3208716] [client 74.7.242.15:40598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.webstersltd.com"] [uri "/403.shtml"] [unique_id "amtB9nOxUtWPnMSaFI4RKwAAAD4"], referer: http://www.webstersltd.com
[Thu Jul 30 13:22:15.722936 2026] [core:error] [pid 3229414:tid 3229414] (13)Permission denied: [client 216.73.216.199:60207] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfit/sections/__jump_table
[Thu Jul 30 13:22:16.523513 2026] [ssl:error] [pid 3225667:tid 3225667] (EAI 2)Name or service not known: [client 144.76.19.72:32442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:16.523543 2026] [ssl:error] [pid 3225667:tid 3225667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:16.579115 2026] [ssl:error] [pid 3222984:tid 3222984] (EAI 2)Name or service not known: [client 144.76.19.72:32448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:16.579146 2026] [ssl:error] [pid 3222984:tid 3222984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:18.353141 2026] [security2:error] [pid 3225726:tid 3225726] [client 190.236.76.227:41909] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtB-nK4BTYN4p8Ki3jHqAAAABU"]
[Thu Jul 30 13:22:18.353192 2026] [security2:error] [pid 3225726:tid 3225726] [client 190.236.76.227:41909] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtB-nK4BTYN4p8Ki3jHqAAAABU"]
[Thu Jul 30 13:22:18.353457 2026] [security2:error] [pid 3225726:tid 3225726] [client 190.236.76.227:41909] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtB-nK4BTYN4p8Ki3jHqAAAABU"]
[Thu Jul 30 13:22:19.623006 2026] [lsapi:warn] [pid 3221184:tid 3221184] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:19.635410 2026] [ssl:error] [pid 3205053:tid 3205053] (EAI 2)Name or service not known: [client 144.76.19.72:63552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:19.635436 2026] [ssl:error] [pid 3205053:tid 3205053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:19.654651 2026] [authz_core:error] [pid 3211706:tid 3211706] [client 57.141.0.12:51484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:19.655268 2026] [authz_core:error] [pid 3211706:tid 3211706] [client 57.141.0.12:51484] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:19.691200 2026] [ssl:error] [pid 3225762:tid 3225762] (EAI 2)Name or service not known: [client 144.76.19.72:63566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:19.691234 2026] [ssl:error] [pid 3225762:tid 3225762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:20.398548 2026] [lsapi:warn] [pid 3205088:tid 3205088] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:21.913458 2026] [security2:error] [pid 3211706:tid 3211706] [client 91.186.250.218:21070] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtB_REKqLFmEcqLHwgEYAAAAEI"]
[Thu Jul 30 13:22:21.913518 2026] [security2:error] [pid 3211706:tid 3211706] [client 91.186.250.218:21070] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtB_REKqLFmEcqLHwgEYAAAAEI"]
[Thu Jul 30 13:22:21.913777 2026] [security2:error] [pid 3211706:tid 3211706] [client 91.186.250.218:21070] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtB_REKqLFmEcqLHwgEYAAAAEI"]
[Thu Jul 30 13:22:22.745857 2026] [ssl:error] [pid 3227537:tid 3227537] (EAI 2)Name or service not known: [client 144.76.19.72:63572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:22.745903 2026] [ssl:error] [pid 3227537:tid 3227537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:22.802311 2026] [ssl:error] [pid 3221182:tid 3221182] (EAI 2)Name or service not known: [client 144.76.19.72:63580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:22.802338 2026] [ssl:error] [pid 3221182:tid 3221182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:24.580014 2026] [authz_core:error] [pid 3225726:tid 3225726] [client 57.141.0.43:56154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:24.580664 2026] [authz_core:error] [pid 3225726:tid 3225726] [client 57.141.0.43:56154] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:25.865139 2026] [ssl:error] [pid 3222989:tid 3222989] (EAI 2)Name or service not known: [client 144.76.19.72:63582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:25.865169 2026] [ssl:error] [pid 3222989:tid 3222989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:25.955505 2026] [ssl:error] [pid 3219105:tid 3219105] (EAI 2)Name or service not known: [client 144.76.19.72:63596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:25.955531 2026] [ssl:error] [pid 3219105:tid 3219105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:27.412327 2026] [security2:error] [pid 3222984:tid 3222984] [client 85.208.98.29:53988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/bayan-uzun-kolye-k.html"] [unique_id "amtCAxYuNevEExK1SOr5cAAAAEg"]
[Thu Jul 30 13:22:27.725595 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 106.222.248.251:1602] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:22:29.013160 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:63600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:29.013187 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:29.070044 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:63602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:29.070088 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:29.646298 2026] [authz_core:error] [pid 3230438:tid 3230438] [client 57.141.0.39:29096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:29.646926 2026] [authz_core:error] [pid 3230438:tid 3230438] [client 57.141.0.39:29096] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:30.092054 2026] [lsapi:warn] [pid 3225757:tid 3225757] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:31.189095 2026] [lsapi:warn] [pid 3221986:tid 3221986] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:32.124282 2026] [ssl:error] [pid 3219035:tid 3219035] (EAI 2)Name or service not known: [client 144.76.19.72:49152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:32.124331 2026] [ssl:error] [pid 3219035:tid 3219035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:32.178857 2026] [ssl:error] [pid 3227537:tid 3227537] (EAI 2)Name or service not known: [client 144.76.19.72:49154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:32.178890 2026] [ssl:error] [pid 3227537:tid 3227537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:34.262842 2026] [ssl:error] [pid 3225667:tid 3225667] (70014)End of file found: [client 216.73.216.199:4487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:34.567681 2026] [core:error] [pid 3228411:tid 3228411] (13)Permission denied: [client 216.73.216.199:38398] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/kvm/sections/__ksymtab
[Thu Jul 30 13:22:35.235539 2026] [ssl:error] [pid 3229414:tid 3229414] (EAI 2)Name or service not known: [client 144.76.19.72:49164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:35.235581 2026] [ssl:error] [pid 3229414:tid 3229414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:35.291905 2026] [ssl:error] [pid 3222989:tid 3222989] (EAI 2)Name or service not known: [client 144.76.19.72:49180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:35.291930 2026] [ssl:error] [pid 3222989:tid 3222989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:36.272291 2026] [ssl:error] [pid 3222989:tid 3222989] (70014)End of file found: [client 216.73.216.199:35256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:36.407434 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "amtCDAqSPR_CveMZNQIWkQAAAE4"]
[Thu Jul 30 13:22:36.407637 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "amtCDAqSPR_CveMZNQIWkQAAAE4"]
[Thu Jul 30 13:22:36.407849 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "amtCDAqSPR_CveMZNQIWkQAAAE4"]
[Thu Jul 30 13:22:36.589629 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtCDAqSPR_CveMZNQIWkwAAAE4"]
[Thu Jul 30 13:22:36.589838 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtCDAqSPR_CveMZNQIWkwAAAE4"]
[Thu Jul 30 13:22:36.590050 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtCDAqSPR_CveMZNQIWkwAAAE4"]
[Thu Jul 30 13:22:36.614631 2026] [security2:error] [pid 3230621:tid 3230621] [client 23.150.248.144:52020] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-narvi.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtCDCsafohYp9bQmXW6bAAAADU"]
[Thu Jul 30 13:22:36.614913 2026] [security2:error] [pid 3230621:tid 3230621] [client 23.150.248.144:52020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace-narvi.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtCDCsafohYp9bQmXW6bAAAADU"]
[Thu Jul 30 13:22:36.615177 2026] [security2:error] [pid 3230621:tid 3230621] [client 23.150.248.144:52020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "nativespace-narvi.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtCDCsafohYp9bQmXW6bAAAADU"]
[Thu Jul 30 13:22:36.751991 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.local"] [unique_id "amtCDAqSPR_CveMZNQIWlQAAAE4"]
[Thu Jul 30 13:22:36.752171 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.local"] [unique_id "amtCDAqSPR_CveMZNQIWlQAAAE4"]
[Thu Jul 30 13:22:36.752365 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.local"] [unique_id "amtCDAqSPR_CveMZNQIWlQAAAE4"]
[Thu Jul 30 13:22:36.827189 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "amtCDAqSPR_CveMZNQIWlgAAAE4"]
[Thu Jul 30 13:22:36.827375 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "amtCDAqSPR_CveMZNQIWlgAAAE4"]
[Thu Jul 30 13:22:36.827606 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "amtCDAqSPR_CveMZNQIWlgAAAE4"]
[Thu Jul 30 13:22:36.886185 2026] [security2:error] [pid 3230621:tid 3230621] [client 23.150.248.144:52020] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-narvi.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtCDCsafohYp9bQmXW6bQAAADU"]
[Thu Jul 30 13:22:36.886482 2026] [security2:error] [pid 3230621:tid 3230621] [client 23.150.248.144:52020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace-narvi.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtCDCsafohYp9bQmXW6bQAAADU"]
[Thu Jul 30 13:22:36.886692 2026] [security2:error] [pid 3230621:tid 3230621] [client 23.150.248.144:52020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "nativespace-narvi.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtCDCsafohYp9bQmXW6bQAAADU"]
[Thu Jul 30 13:22:36.910692 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.development"] [unique_id "amtCDAqSPR_CveMZNQIWlwAAAE4"]
[Thu Jul 30 13:22:36.910878 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.development"] [unique_id "amtCDAqSPR_CveMZNQIWlwAAAE4"]
[Thu Jul 30 13:22:36.911093 2026] [security2:error] [pid 3222991:tid 3222991] [client 5.83.214.197:46362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.env.development"] [unique_id "amtCDAqSPR_CveMZNQIWlwAAAE4"]
[Thu Jul 30 13:22:37.198548 2026] [security2:error] [pid 3222988:tid 3222988] [client 5.83.214.197:44026] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/backend/.env"] [unique_id "amtCDfe3in9M1JgcRam_nQAAAEs"]
[Thu Jul 30 13:22:37.198753 2026] [security2:error] [pid 3222988:tid 3222988] [client 5.83.214.197:44026] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/backend/.env"] [unique_id "amtCDfe3in9M1JgcRam_nQAAAEs"]
[Thu Jul 30 13:22:37.198961 2026] [security2:error] [pid 3222988:tid 3222988] [client 5.83.214.197:44026] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/backend/.env"] [unique_id "amtCDfe3in9M1JgcRam_nQAAAEs"]
[Thu Jul 30 13:22:37.202104 2026] [security2:error] [pid 3227537:tid 3227537] [client 5.83.214.197:44034] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "amtCDUirk6Gzxh_Omx7lTQAAAAE"]
[Thu Jul 30 13:22:37.202311 2026] [security2:error] [pid 3227537:tid 3227537] [client 5.83.214.197:44034] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "amtCDUirk6Gzxh_Omx7lTQAAAAE"]
[Thu Jul 30 13:22:37.202507 2026] [security2:error] [pid 3227537:tid 3227537] [client 5.83.214.197:44034] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "amtCDUirk6Gzxh_Omx7lTQAAAAE"]
[Thu Jul 30 13:22:37.345455 2026] [security2:error] [pid 3225760:tid 3225760] [client 5.83.214.197:44022] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "amtCDZExmLYXCVjdgiuBvQAAACs"]
[Thu Jul 30 13:22:37.345599 2026] [security2:error] [pid 3225760:tid 3225760] [client 5.83.214.197:44022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "amtCDZExmLYXCVjdgiuBvQAAACs"]
[Thu Jul 30 13:22:37.345779 2026] [security2:error] [pid 3225760:tid 3225760] [client 5.83.214.197:44022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.secretbluestone.co.uk"] [uri "/.git/config"] [unique_id "amtCDZExmLYXCVjdgiuBvQAAACs"]
[Thu Jul 30 13:22:38.349544 2026] [ssl:error] [pid 3230438:tid 3230438] (EAI 2)Name or service not known: [client 144.76.19.72:49184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:38.349578 2026] [ssl:error] [pid 3230438:tid 3230438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:38.396146 2026] [access_compat:error] [pid 3228373:tid 3228373] [client 106.222.248.251:27873] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:22:38.405965 2026] [ssl:error] [pid 3230502:tid 3230502] (EAI 2)Name or service not known: [client 144.76.19.72:49194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:38.405996 2026] [ssl:error] [pid 3230502:tid 3230502] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:38.883093 2026] [authz_core:error] [pid 3225762:tid 3225762] [client 57.141.0.66:32864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:38.883723 2026] [authz_core:error] [pid 3225762:tid 3225762] [client 57.141.0.66:32864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:38.923804 2026] [security2:error] [pid 3230502:tid 3230502] [client 155.133.142.67:48971] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtCDkTxLu1cBjZgczXyAgAAABg"]
[Thu Jul 30 13:22:39.872282 2026] [security2:error] [pid 3230438:tid 3230438] [client 43.132.214.228:39272] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "barbaramatarrese.com"] [uri "/"] [unique_id "amtCDwWzfC7_P791ymLwSgAAAAw"]
[Thu Jul 30 13:22:40.580642 2026] [lsapi:warn] [pid 3225763:tid 3225763] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:41.471848 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:26088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:41.471885 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:41.527845 2026] [ssl:error] [pid 3230980:tid 3230980] (EAI 2)Name or service not known: [client 144.76.19.72:26104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:41.527890 2026] [ssl:error] [pid 3230980:tid 3230980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:41.853573 2026] [core:error] [pid 3225763:tid 3225763] [client 66.249.66.167:50637] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:41.853599 2026] [core:error] [pid 3225763:tid 3225763] [client 66.249.66.167:50637] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:41.912410 2026] [authz_core:error] [pid 3218989:tid 3218989] [client 66.249.66.33:43987] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:22:41.915113 2026] [authz_core:error] [pid 3218989:tid 3218989] [client 66.249.66.33:43987] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:22:42.029957 2026] [lsapi:warn] [pid 3225757:tid 3225757] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:42.101654 2026] [ssl:error] [pid 3228411:tid 3228411] (70014)End of file found: [client 216.73.216.199:38398] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:42.399266 2026] [authz_core:error] [pid 3225763:tid 3225763] [client 66.249.66.35:44453] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:22:42.401933 2026] [authz_core:error] [pid 3225763:tid 3225763] [client 66.249.66.35:44453] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:22:43.507097 2026] [core:error] [pid 3230985:tid 3230985] [client 57.141.0.20:57714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:43.507139 2026] [core:error] [pid 3230985:tid 3230985] [client 57.141.0.20:57714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:43.602967 2026] [ssl:error] [pid 3211706:tid 3211706] (70014)End of file found: [client 216.73.216.199:17997] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:44.505965 2026] [ssl:error] [pid 3222988:tid 3222988] (70014)End of file found: [client 216.73.216.199:60787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:44.583144 2026] [ssl:error] [pid 3230980:tid 3230980] (EAI 2)Name or service not known: [client 144.76.19.72:26114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:44.583175 2026] [ssl:error] [pid 3230980:tid 3230980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:44.635963 2026] [ssl:error] [pid 3230620:tid 3230620] (EAI 2)Name or service not known: [client 144.76.19.72:26124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:44.635997 2026] [ssl:error] [pid 3230620:tid 3230620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:47.688709 2026] [ssl:error] [pid 3229321:tid 3229321] (EAI 2)Name or service not known: [client 144.76.19.72:26128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:47.688739 2026] [ssl:error] [pid 3229321:tid 3229321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:47.741389 2026] [ssl:error] [pid 3228899:tid 3228899] (EAI 2)Name or service not known: [client 144.76.19.72:26138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:47.741417 2026] [ssl:error] [pid 3228899:tid 3228899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:48.370967 2026] [core:error] [pid 3228411:tid 3228411] [client 66.249.64.170:54526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:48.370993 2026] [core:error] [pid 3228411:tid 3228411] [client 66.249.64.170:54526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:22:48.436757 2026] [authz_core:error] [pid 3230935:tid 3230935] [client 57.141.0.20:57726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:48.437406 2026] [authz_core:error] [pid 3230935:tid 3230935] [client 57.141.0.20:57726] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:48.534644 2026] [ssl:error] [pid 3222991:tid 3222991] (70014)End of file found: [client 216.73.216.199:32690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:48.932279 2026] [ssl:error] [pid 3230501:tid 3230501] (70014)End of file found: [client 216.73.216.199:46787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:49.524496 2026] [ssl:error] [pid 3228373:tid 3228373] (70014)End of file found: [client 216.73.216.199:32803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:50.658929 2026] [access_compat:error] [pid 3219107:tid 3219107] [client 106.222.248.251:19161] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:22:50.799577 2026] [ssl:error] [pid 3222988:tid 3222988] (EAI 2)Name or service not known: [client 144.76.19.72:53546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:50.799613 2026] [ssl:error] [pid 3222988:tid 3222988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:50.802175 2026] [security2:error] [pid 3230985:tid 3230985] [client 185.191.171.14:60188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/tuxedo-weigela-companion-plants"] [unique_id "amtCGiwq9EqXw15sJKhtQwAAADs"]
[Thu Jul 30 13:22:50.852930 2026] [ssl:error] [pid 3230935:tid 3230935] (EAI 2)Name or service not known: [client 144.76.19.72:53560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:50.852967 2026] [ssl:error] [pid 3230935:tid 3230935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:51.084481 2026] [lsapi:warn] [pid 3228411:tid 3228411] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:51.097797 2026] [access_compat:error] [pid 3230936:tid 3230936] [client 45.158.164.139:46860] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:22:51.753428 2026] [lsapi:warn] [pid 3218989:tid 3218989] [client 185.215.151.31:53104] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:22:52.787185 2026] [lsapi:warn] [pid 3222988:tid 3222988] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:22:53.018080 2026] [authz_core:error] [pid 3230567:tid 3230567] [client 57.141.0.28:55130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:22:53.018708 2026] [authz_core:error] [pid 3230567:tid 3230567] [client 57.141.0.28:55130] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:22:53.907364 2026] [ssl:error] [pid 3219107:tid 3219107] (EAI 2)Name or service not known: [client 144.76.19.72:53576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:53.907395 2026] [ssl:error] [pid 3219107:tid 3219107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:53.961787 2026] [ssl:error] [pid 3230620:tid 3230620] (EAI 2)Name or service not known: [client 144.76.19.72:53582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:53.961811 2026] [ssl:error] [pid 3230620:tid 3230620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:56.448946 2026] [core:error] [pid 3228411:tid 3228411] (13)Permission denied: [client 216.73.216.199:33318] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/intel_rapl_common/sections/__kcrctab_gpl
[Thu Jul 30 13:22:57.023510 2026] [ssl:error] [pid 3228899:tid 3228899] (EAI 2)Name or service not known: [client 144.76.19.72:53594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:57.023534 2026] [ssl:error] [pid 3228899:tid 3228899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:57.081446 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:53596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:22:57.081477 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:22:58.241090 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 106.222.248.251:11133] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:22:58.255443 2026] [ssl:error] [pid 3228411:tid 3228411] (70014)End of file found: [client 216.73.216.199:33318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:58.869123 2026] [security2:error] [pid 3230981:tid 3230981] [client 43.133.220.37:48454] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "amtCIkthN7_DwUSHGZX2FwAAADg"]
[Thu Jul 30 13:22:59.160885 2026] [ssl:error] [pid 3219107:tid 3219107] (70014)End of file found: [client 216.73.216.199:4046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:22:59.459978 2026] [ssl:error] [pid 3215264:tid 3215264] (70014)End of file found: [client 216.73.216.199:5340] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:00.761209 2026] [ssl:error] [pid 3227537:tid 3227537] (EAI 2)Name or service not known: [client 144.76.19.72:53342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:00.761241 2026] [ssl:error] [pid 3227537:tid 3227537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:00.937916 2026] [ssl:error] [pid 3230935:tid 3230935] (EAI 2)Name or service not known: [client 144.76.19.72:53352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:00.937946 2026] [ssl:error] [pid 3230935:tid 3230935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:01.569617 2026] [lsapi:warn] [pid 3210637:tid 3210637] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:03.509667 2026] [security2:error] [pid 3225761:tid 3225761] [client 47.237.253.68:42561] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCJz6wAwboUAoNqgCgwAAAAC0"]
[Thu Jul 30 13:23:03.509722 2026] [security2:error] [pid 3225761:tid 3225761] [client 47.237.253.68:42561] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCJz6wAwboUAoNqgCgwAAAAC0"]
[Thu Jul 30 13:23:03.509984 2026] [security2:error] [pid 3225761:tid 3225761] [client 47.237.253.68:42561] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCJz6wAwboUAoNqgCgwAAAAC0"]
[Thu Jul 30 13:23:03.525253 2026] [lsapi:warn] [pid 3210637:tid 3210637] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:03.578618 2026] [ssl:error] [pid 3230619:tid 3230619] (70014)End of file found: [client 216.73.216.199:9316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:03.992935 2026] [ssl:error] [pid 3210779:tid 3210779] (EAI 2)Name or service not known: [client 144.76.19.72:53358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:03.992968 2026] [ssl:error] [pid 3210779:tid 3210779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:04.047521 2026] [ssl:error] [pid 3230621:tid 3230621] (EAI 2)Name or service not known: [client 144.76.19.72:53362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:04.047559 2026] [ssl:error] [pid 3230621:tid 3230621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:06.049639 2026] [security2:error] [pid 3231881:tid 3231881] [client 8.218.149.170:34329] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCKpPfCV0mNkSWKDYcNgAAABg"]
[Thu Jul 30 13:23:06.049692 2026] [security2:error] [pid 3231881:tid 3231881] [client 8.218.149.170:34329] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCKpPfCV0mNkSWKDYcNgAAABg"]
[Thu Jul 30 13:23:06.049955 2026] [security2:error] [pid 3231881:tid 3231881] [client 8.218.149.170:34329] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCKpPfCV0mNkSWKDYcNgAAABg"]
[Thu Jul 30 13:23:06.212565 2026] [authz_core:error] [pid 3225667:tid 3225667] [client 57.141.0.44:40672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:23:06.213199 2026] [authz_core:error] [pid 3225667:tid 3225667] [client 57.141.0.44:40672] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:23:06.691557 2026] [ssl:error] [pid 3230565:tid 3230565] (70014)End of file found: [client 216.73.216.199:54033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:06.883406 2026] [security2:error] [pid 3225726:tid 3225726] [client 43.130.53.252:44206] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/"] [unique_id "amtCKnK4BTYN4p8Ki3jHvAAAABU"]
[Thu Jul 30 13:23:06.985118 2026] [ssl:error] [pid 3225728:tid 3225728] (70014)End of file found: [client 216.73.216.199:53507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:07.099889 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:53366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:07.099918 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:07.155758 2026] [ssl:error] [pid 3230981:tid 3230981] (EAI 2)Name or service not known: [client 144.76.19.72:53374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:07.155788 2026] [ssl:error] [pid 3230981:tid 3230981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:07.228661 2026] [security2:error] [pid 3225760:tid 3225760] [client 84.75.155.64:40222] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,95.0.html"] [unique_id "amtCK5ExmLYXCVjdgiuBxQAAACs"]
[Thu Jul 30 13:23:07.228711 2026] [security2:error] [pid 3225760:tid 3225760] [client 84.75.155.64:40222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,95.0.html"] [unique_id "amtCK5ExmLYXCVjdgiuBxQAAACs"]
[Thu Jul 30 13:23:07.228954 2026] [security2:error] [pid 3225760:tid 3225760] [client 84.75.155.64:40222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCK5ExmLYXCVjdgiuBxQAAACs"]
[Thu Jul 30 13:23:09.003546 2026] [access_compat:error] [pid 3231881:tid 3231881] [client 106.222.248.251:15944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:23:09.805048 2026] [security2:error] [pid 3231909:tid 3231909] [client 8.218.149.170:51265] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCLbbZERrnOWPtd2SLVQAAACQ"]
[Thu Jul 30 13:23:09.805108 2026] [security2:error] [pid 3231909:tid 3231909] [client 8.218.149.170:51265] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCLbbZERrnOWPtd2SLVQAAACQ"]
[Thu Jul 30 13:23:09.805393 2026] [security2:error] [pid 3231909:tid 3231909] [client 8.218.149.170:51265] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCLbbZERrnOWPtd2SLVQAAACQ"]
[Thu Jul 30 13:23:10.251603 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:26424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:10.251635 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:10.307972 2026] [ssl:error] [pid 3229321:tid 3229321] (EAI 2)Name or service not known: [client 144.76.19.72:26434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:10.307995 2026] [ssl:error] [pid 3229321:tid 3229321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:10.614673 2026] [authz_core:error] [pid 3229667:tid 3229667] [client 66.249.66.35:39941] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:23:10.617464 2026] [authz_core:error] [pid 3229667:tid 3229667] [client 66.249.66.35:39941] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:23:11.008251 2026] [security2:error] [pid 3231908:tid 3231908] [client 114.119.142.20:21497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~14/request_format~html"] [unique_id "amtCL7TdVMnFtf_sAKPxiAAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E14
[Thu Jul 30 13:23:11.506599 2026] [ssl:error] [pid 3225726:tid 3225726] (70014)End of file found: [client 216.73.216.199:14917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:12.068475 2026] [lsapi:warn] [pid 3228373:tid 3228373] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:12.107763 2026] [security2:error] [pid 3230935:tid 3230935] [client 114.119.142.20:21509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~14/request_format~html"] [unique_id "amtCMLgbkUNYkyxGkLZqGAAAACI"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1577059200/request_format%7Ehtml/cat_ids%7E14
[Thu Jul 30 13:23:12.207378 2026] [ssl:error] [pid 3221184:tid 3221184] (70014)End of file found: [client 216.73.216.199:12888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:12.406444 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:5108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:12.518426 2026] [security2:error] [pid 3231909:tid 3231909] [client 94.154.43.187:40290] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kinesiology-in-london.co.uk"] [uri "/.env"] [unique_id "amtCMLbZERrnOWPtd2SLVwAAACQ"]
[Thu Jul 30 13:23:12.518640 2026] [security2:error] [pid 3231909:tid 3231909] [client 94.154.43.187:40290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiology-in-london.co.uk"] [uri "/.env"] [unique_id "amtCMLbZERrnOWPtd2SLVwAAACQ"]
[Thu Jul 30 13:23:12.518843 2026] [security2:error] [pid 3231909:tid 3231909] [client 94.154.43.187:40290] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kinesiology-in-london.co.uk"] [uri "/403.shtml"] [unique_id "amtCMLbZERrnOWPtd2SLVwAAACQ"]
[Thu Jul 30 13:23:12.754950 2026] [security2:error] [pid 3221143:tid 3221143] [client 94.154.43.184:20944] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "holisticclear.co.uk"] [uri "/.env"] [unique_id "amtCMAktB2LKjTPzDGB9fAAAACM"]
[Thu Jul 30 13:23:12.755168 2026] [security2:error] [pid 3221143:tid 3221143] [client 94.154.43.184:20944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "holisticclear.co.uk"] [uri "/.env"] [unique_id "amtCMAktB2LKjTPzDGB9fAAAACM"]
[Thu Jul 30 13:23:12.755370 2026] [security2:error] [pid 3221143:tid 3221143] [client 94.154.43.184:20944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "holisticclear.co.uk"] [uri "/403.shtml"] [unique_id "amtCMAktB2LKjTPzDGB9fAAAACM"]
[Thu Jul 30 13:23:12.877440 2026] [security2:error] [pid 3228323:tid 3228323] [client 94.154.43.187:40292] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "holistic-clear.co.uk"] [uri "/.env"] [unique_id "amtCMPo2dhPCCtNJzgbJjwAAAAU"]
[Thu Jul 30 13:23:12.877635 2026] [security2:error] [pid 3228323:tid 3228323] [client 94.154.43.187:40292] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "holistic-clear.co.uk"] [uri "/.env"] [unique_id "amtCMPo2dhPCCtNJzgbJjwAAAAU"]
[Thu Jul 30 13:23:12.877832 2026] [security2:error] [pid 3228323:tid 3228323] [client 94.154.43.187:40292] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "holistic-clear.co.uk"] [uri "/403.shtml"] [unique_id "amtCMPo2dhPCCtNJzgbJjwAAAAU"]
[Thu Jul 30 13:23:13.376645 2026] [ssl:error] [pid 3221143:tid 3221143] (EAI 2)Name or service not known: [client 144.76.19.72:26440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:13.376685 2026] [ssl:error] [pid 3221143:tid 3221143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:13.431033 2026] [ssl:error] [pid 3228373:tid 3228373] (EAI 2)Name or service not known: [client 144.76.19.72:26444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:13.431079 2026] [ssl:error] [pid 3228373:tid 3228373] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:13.603813 2026] [core:error] [pid 3215264:tid 3215264] [client 57.141.0.1:42934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:13.603842 2026] [core:error] [pid 3215264:tid 3215264] [client 57.141.0.1:42934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:14.183811 2026] [lsapi:warn] [pid 3230935:tid 3230935] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:16.408645 2026] [cgi:error] [pid 3205053:tid 3205053] [client 45.225.135.130:48552] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:23:16.409006 2026] [core:error] [pid 3205053:tid 3205053] [client 45.225.135.130:48552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.449177 2026] [core:error] [pid 3225616:tid 3225616] [client 45.225.135.130:48554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.449205 2026] [core:error] [pid 3225616:tid 3225616] [client 45.225.135.130:48554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.483128 2026] [cgi:error] [pid 3232601:tid 3232601] [client 45.225.135.130:48558] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:23:16.483448 2026] [core:error] [pid 3232601:tid 3232601] [client 45.225.135.130:48558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.488497 2026] [ssl:error] [pid 3230438:tid 3230438] (EAI 2)Name or service not known: [client 144.76.19.72:26454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:16.488521 2026] [ssl:error] [pid 3230438:tid 3230438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:16.519188 2026] [core:error] [pid 3230980:tid 3230980] [client 45.225.135.130:48574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.519213 2026] [core:error] [pid 3230980:tid 3230980] [client 45.225.135.130:48574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.548647 2026] [ssl:error] [pid 3230981:tid 3230981] (EAI 2)Name or service not known: [client 144.76.19.72:26464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:16.548680 2026] [ssl:error] [pid 3230981:tid 3230981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:16.557980 2026] [core:error] [pid 3222991:tid 3222991] [client 45.225.135.130:48576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.558006 2026] [core:error] [pid 3222991:tid 3222991] [client 45.225.135.130:48576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.598278 2026] [core:error] [pid 3230617:tid 3230617] [client 45.225.135.130:48580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.598326 2026] [core:error] [pid 3230617:tid 3230617] [client 45.225.135.130:48580] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.633714 2026] [core:error] [pid 3230501:tid 3230501] [client 45.225.135.130:48584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.633740 2026] [core:error] [pid 3230501:tid 3230501] [client 45.225.135.130:48584] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.664280 2026] [core:error] [pid 3205053:tid 3205053] [client 45.225.135.130:48592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:16.664300 2026] [core:error] [pid 3205053:tid 3205053] [client 45.225.135.130:48592] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:17.535658 2026] [core:error] [pid 3225726:tid 3225726] [client 57.141.0.24:41550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:17.535689 2026] [core:error] [pid 3225726:tid 3225726] [client 57.141.0.24:41550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:17.928812 2026] [security2:error] [pid 3230620:tid 3230620] [client 185.191.171.19:24342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1105.0/prev_next,next.html"] [unique_id "amtCNQ_xBRmibrUzOJAS5gAAADM"]
[Thu Jul 30 13:23:18.344315 2026] [core:error] [pid 3225616:tid 3225616] [client 216.73.216.199:46196] AH00038: Forbidden: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/fd/16 doesn't point to a file or directory
[Thu Jul 30 13:23:18.618389 2026] [authz_core:error] [pid 3232600:tid 3232600] [client 57.141.0.14:38248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:23:18.619011 2026] [authz_core:error] [pid 3232600:tid 3232600] [client 57.141.0.14:38248] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:23:18.967593 2026] [access_compat:error] [pid 3213662:tid 3213662] [client 106.222.248.251:1225] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:23:19.248815 2026] [core:error] [pid 3225616:tid 3225616] (13)Permission denied: [client 216.73.216.199:46196] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory39/subsystem/uevent
[Thu Jul 30 13:23:19.549846 2026] [ssl:error] [pid 3225616:tid 3225616] (70014)End of file found: [client 216.73.216.199:46196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:19.603108 2026] [ssl:error] [pid 3228411:tid 3228411] (EAI 2)Name or service not known: [client 144.76.19.72:23362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:19.603140 2026] [ssl:error] [pid 3228411:tid 3228411] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:19.658753 2026] [ssl:error] [pid 3210779:tid 3210779] (EAI 2)Name or service not known: [client 144.76.19.72:23370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:19.658781 2026] [ssl:error] [pid 3210779:tid 3210779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:19.926086 2026] [security2:error] [pid 3232600:tid 3232600] [client 43.166.130.123:36942] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amtCNzkJw8Qf1LCmxxQDsAAAACk"]
[Thu Jul 30 13:23:20.750344 2026] [security2:error] [pid 3230981:tid 3230981] [client 216.73.216.199:25790] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/man-db.conf"] [unique_id "amtCOEthN7_DwUSHGZX2HwAAADg"]
[Thu Jul 30 13:23:20.750645 2026] [security2:error] [pid 3230981:tid 3230981] [client 216.73.216.199:25790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/man-db.conf"] [unique_id "amtCOEthN7_DwUSHGZX2HwAAADg"]
[Thu Jul 30 13:23:20.750878 2026] [security2:error] [pid 3230981:tid 3230981] [client 216.73.216.199:25790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/man-db.conf"] [unique_id "amtCOEthN7_DwUSHGZX2HwAAADg"]
[Thu Jul 30 13:23:20.841963 2026] [security2:error] [pid 3230501:tid 3230501] [client 43.166.130.123:43320] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amtCOEq9VrGWfyYiswZaiQAAABQ"], referer: http://www.borovetsexpress.com
[Thu Jul 30 13:23:21.655591 2026] [ssl:error] [pid 3230981:tid 3230981] (70014)End of file found: [client 216.73.216.199:25790] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:22.557538 2026] [lsapi:warn] [pid 3230501:tid 3230501] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:22.567153 2026] [ssl:error] [pid 3222991:tid 3222991] (70014)End of file found: [client 216.73.216.199:63208] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:22.651514 2026] [security2:error] [pid 3225726:tid 3225726] [client 51.68.236.91:22925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.loca.co.uk"] [uri "/robots.txt"] [unique_id "amtCOnK4BTYN4p8Ki3jHyQAAABU"]
[Thu Jul 30 13:23:22.712941 2026] [ssl:error] [pid 3221986:tid 3221986] (EAI 2)Name or service not known: [client 144.76.19.72:23384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:22.712982 2026] [ssl:error] [pid 3221986:tid 3221986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:22.765899 2026] [ssl:error] [pid 3210779:tid 3210779] (EAI 2)Name or service not known: [client 144.76.19.72:23390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:22.765929 2026] [ssl:error] [pid 3210779:tid 3210779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:22.909924 2026] [security2:error] [pid 3232600:tid 3232600] [client 85.11.167.225:37826] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amtCOjkJw8Qf1LCmxxQDsgAAACk"]
[Thu Jul 30 13:23:22.910132 2026] [security2:error] [pid 3232600:tid 3232600] [client 85.11.167.225:37826] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amtCOjkJw8Qf1LCmxxQDsgAAACk"]
[Thu Jul 30 13:23:22.910347 2026] [security2:error] [pid 3232600:tid 3232600] [client 85.11.167.225:37826] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amtCOjkJw8Qf1LCmxxQDsgAAACk"]
[Thu Jul 30 13:23:22.912965 2026] [security2:error] [pid 3230985:tid 3230985] [client 85.11.167.225:37828] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.git/config"] [unique_id "amtCOiwq9EqXw15sJKhtSgAAADs"]
[Thu Jul 30 13:23:22.913136 2026] [security2:error] [pid 3230985:tid 3230985] [client 85.11.167.225:37828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.git/config"] [unique_id "amtCOiwq9EqXw15sJKhtSgAAADs"]
[Thu Jul 30 13:23:22.913323 2026] [security2:error] [pid 3230985:tid 3230985] [client 85.11.167.225:37828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.yahtzeecouk.alism.com"] [uri "/.git/config"] [unique_id "amtCOiwq9EqXw15sJKhtSgAAADs"]
[Thu Jul 30 13:23:23.086528 2026] [core:error] [pid 3232545:tid 3232545] [client 52.167.144.18:15169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:23.086560 2026] [core:error] [pid 3232545:tid 3232545] [client 52.167.144.18:15169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:25.051148 2026] [lsapi:warn] [pid 3230617:tid 3230617] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:25.821825 2026] [ssl:error] [pid 3230565:tid 3230565] (EAI 2)Name or service not known: [client 144.76.19.72:23406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:25.821864 2026] [ssl:error] [pid 3230565:tid 3230565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:25.875538 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:23416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:25.875593 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:25.893671 2026] [ssl:error] [pid 3229321:tid 3229321] (70014)End of file found: [client 216.73.216.199:28086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:27.998018 2026] [ssl:error] [pid 3225616:tid 3225616] (70014)End of file found: [client 216.73.216.199:58098] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:28.148513 2026] [authz_core:error] [pid 3230617:tid 3230617] [client 57.141.0.23:24142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:23:28.149145 2026] [authz_core:error] [pid 3230617:tid 3230617] [client 57.141.0.23:24142] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:23:28.930511 2026] [ssl:error] [pid 3222988:tid 3222988] (EAI 2)Name or service not known: [client 144.76.19.72:23428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:28.930544 2026] [ssl:error] [pid 3222988:tid 3222988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:28.982212 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:23430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:28.982268 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:30.411035 2026] [ssl:error] [pid 3230501:tid 3230501] (70014)End of file found: [client 216.73.216.199:4859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:32.041699 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:22732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:32.041734 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:32.093575 2026] [ssl:error] [pid 3231909:tid 3231909] (EAI 2)Name or service not known: [client 144.76.19.72:22736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:32.093619 2026] [ssl:error] [pid 3231909:tid 3231909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:32.212195 2026] [ssl:error] [pid 3230618:tid 3230618] (70014)End of file found: [client 216.73.216.199:35789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:33.020174 2026] [lsapi:warn] [pid 3227537:tid 3227537] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:33.573970 2026] [access_compat:error] [pid 3229321:tid 3229321] [client 45.148.10.123:52918] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/, referer: https://www.blog.alism.com/
[Thu Jul 30 13:23:33.574097 2026] [access_compat:error] [pid 3229321:tid 3229321] [client 45.148.10.123:52918] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/
[Thu Jul 30 13:23:34.024531 2026] [ssl:error] [pid 3233431:tid 3233431] (70014)End of file found: [client 216.73.216.199:39921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:35.154585 2026] [ssl:error] [pid 3232601:tid 3232601] (EAI 2)Name or service not known: [client 144.76.19.72:22750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:35.154625 2026] [ssl:error] [pid 3232601:tid 3232601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:35.208177 2026] [ssl:error] [pid 3225616:tid 3225616] (EAI 2)Name or service not known: [client 144.76.19.72:22752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:35.208212 2026] [ssl:error] [pid 3225616:tid 3225616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:35.915049 2026] [lsapi:warn] [pid 3230935:tid 3230935] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:36.141259 2026] [ssl:error] [pid 3230501:tid 3230501] (70014)End of file found: [client 216.73.216.199:45378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:36.155411 2026] [access_compat:error] [pid 3225667:tid 3225667] [client 159.138.142.39:58034] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/robots.txt, referer: http://blog.alism.com/robots.txt
[Thu Jul 30 13:23:36.155518 2026] [access_compat:error] [pid 3225667:tid 3225667] [client 159.138.142.39:58034] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: http://blog.alism.com/robots.txt
[Thu Jul 30 13:23:36.158001 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 150.40.252.123:60754] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/robots.txt, referer: http://blog.alism.com/robots.txt
[Thu Jul 30 13:23:36.158099 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 150.40.252.123:60754] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: http://blog.alism.com/robots.txt
[Thu Jul 30 13:23:37.545347 2026] [core:error] [pid 3230567:tid 3230567] (13)Permission denied: [client 216.73.216.199:5091] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/net_failover/uevent
[Thu Jul 30 13:23:37.950894 2026] [core:error] [pid 3230567:tid 3230567] (13)Permission denied: [client 216.73.216.199:5091] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/thunderbolt/drivers/pci:thunderbolt/remove_id
[Thu Jul 30 13:23:38.265017 2026] [ssl:error] [pid 3233432:tid 3233432] (EAI 2)Name or service not known: [client 144.76.19.72:22762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:38.265050 2026] [ssl:error] [pid 3233432:tid 3233432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:38.322710 2026] [ssl:error] [pid 3221184:tid 3221184] (EAI 2)Name or service not known: [client 144.76.19.72:22766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:38.322742 2026] [ssl:error] [pid 3221184:tid 3221184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:38.553907 2026] [ssl:error] [pid 3230567:tid 3230567] (70014)End of file found: [client 216.73.216.199:5091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:38.754052 2026] [cgi:error] [pid 3230935:tid 3230935] [client 82.215.112.167:6878] AH02812: stderr from /home/ppclcom/parallel-coordinates.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:23:38.776031 2026] [access_compat:error] [pid 3233432:tid 3233432] [client 45.148.10.123:52928] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-json, referer: https://www.blog.alism.com/
[Thu Jul 30 13:23:38.776145 2026] [access_compat:error] [pid 3233432:tid 3233432] [client 45.148.10.123:52928] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/
[Thu Jul 30 13:23:38.949750 2026] [access_compat:error] [pid 3230618:tid 3230618] [client 45.148.10.123:52944] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp, referer: https://www.blog.alism.com/wp/
[Thu Jul 30 13:23:38.949850 2026] [access_compat:error] [pid 3230618:tid 3230618] [client 45.148.10.123:52944] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/wp/
[Thu Jul 30 13:23:39.354126 2026] [core:error] [pid 3229667:tid 3229667] (13)Permission denied: [client 216.73.216.199:51475] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/drm_shmem_helper/sections/__ksymtab_strings
[Thu Jul 30 13:23:39.408464 2026] [core:error] [pid 3233565:tid 3233565] [client 57.141.0.3:34702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:39.408516 2026] [core:error] [pid 3233565:tid 3233565] [client 57.141.0.3:34702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:23:40.064825 2026] [ssl:error] [pid 3229667:tid 3229667] (70014)End of file found: [client 216.73.216.199:51475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:40.160425 2026] [access_compat:error] [pid 3233431:tid 3233431] [client 106.222.248.251:11649] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:23:40.785703 2026] [authz_core:error] [pid 3233397:tid 3233397] [client 66.249.66.34:42425] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:23:40.788369 2026] [authz_core:error] [pid 3233397:tid 3233397] [client 66.249.66.34:42425] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:23:41.543233 2026] [ssl:error] [pid 3210779:tid 3210779] (EAI 2)Name or service not known: [client 144.76.19.72:32078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:41.543262 2026] [ssl:error] [pid 3210779:tid 3210779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:41.596422 2026] [ssl:error] [pid 3230617:tid 3230617] (EAI 2)Name or service not known: [client 144.76.19.72:32092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:41.596456 2026] [ssl:error] [pid 3230617:tid 3230617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:42.182031 2026] [authz_core:error] [pid 3230617:tid 3230617] [client 66.249.66.33:59890] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:23:42.184762 2026] [authz_core:error] [pid 3230617:tid 3230617] [client 66.249.66.33:59890] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:23:42.473014 2026] [ssl:error] [pid 3210637:tid 3210637] (70014)End of file found: [client 216.73.216.199:6644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:42.583241 2026] [security2:error] [pid 3230501:tid 3230501] [client 51.68.111.244:28807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "taylorshouse.com"] [uri "/robots.txt"] [unique_id "amtCTkq9VrGWfyYiswZamAAAABQ"]
[Thu Jul 30 13:23:43.450781 2026] [lsapi:warn] [pid 3225757:tid 3225757] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:44.145907 2026] [access_compat:error] [pid 3227537:tid 3227537] [client 45.148.10.123:42564] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp, referer: https://www.blog.alism.com/wp/
[Thu Jul 30 13:23:44.146009 2026] [access_compat:error] [pid 3227537:tid 3227537] [client 45.148.10.123:42564] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/wp/
[Thu Jul 30 13:23:44.681900 2026] [ssl:error] [pid 3227537:tid 3227537] (EAI 2)Name or service not known: [client 144.76.19.72:32104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:44.681955 2026] [ssl:error] [pid 3227537:tid 3227537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:44.739432 2026] [ssl:error] [pid 3221184:tid 3221184] (EAI 2)Name or service not known: [client 144.76.19.72:32110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:44.739460 2026] [ssl:error] [pid 3221184:tid 3221184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:46.257363 2026] [security2:error] [pid 3228411:tid 3228411] [client 124.222.230.178:48628] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "butteredcat.com"] [uri "/"] [unique_id "amtCUiM41NI78JrmcO95PAAAABo"]
[Thu Jul 30 13:23:46.258235 2026] [authz_core:error] [pid 3228411:tid 3228411] [client 124.222.230.178:48628] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 13:23:46.825001 2026] [lsapi:warn] [pid 3225616:tid 3225616] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:47.648244 2026] [ssl:error] [pid 3228899:tid 3228899] (70014)End of file found: [client 216.73.216.199:15956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:47.796535 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:32114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:47.796567 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:47.852662 2026] [ssl:error] [pid 3230620:tid 3230620] (EAI 2)Name or service not known: [client 144.76.19.72:32116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:47.852692 2026] [ssl:error] [pid 3230620:tid 3230620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:47.891303 2026] [ssl:error] [pid 3221182:tid 3221182] (70014)End of file found: [client 216.73.216.199:27834] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:48.554463 2026] [core:error] [pid 3221986:tid 3221986] (13)Permission denied: [client 216.73.216.199:59834] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/drm_shmem_helper/sections/__ex_table
[Thu Jul 30 13:23:48.672446 2026] [ssl:error] [pid 3221986:tid 3221986] (70014)End of file found: [client 216.73.216.199:59834] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:49.181895 2026] [authz_core:error] [pid 3230568:tid 3230568] [client 66.249.66.33:60750] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:23:49.184695 2026] [authz_core:error] [pid 3230568:tid 3230568] [client 66.249.66.33:60750] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:23:49.209940 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 45.148.10.123:42576] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wordpress, referer: https://www.blog.alism.com/wordpress/
[Thu Jul 30 13:23:49.210046 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 45.148.10.123:42576] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/wordpress/
[Thu Jul 30 13:23:49.437407 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 57.141.0.29:47406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:23:49.438052 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 57.141.0.29:47406] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:23:50.411797 2026] [security2:error] [pid 3230621:tid 3230621] [client 43.159.62.129:56902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.q-s-e.org"] [uri "/"] [unique_id "amtCVisafohYp9bQmXW6iwAAADU"]
[Thu Jul 30 13:23:50.909387 2026] [ssl:error] [pid 3230567:tid 3230567] (EAI 2)Name or service not known: [client 144.76.19.72:65424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:50.909433 2026] [ssl:error] [pid 3230567:tid 3230567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:50.961540 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:65440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:50.961565 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:51.126035 2026] [security2:error] [pid 3202364:tid 3202364] [client 85.208.96.193:30400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "andrewmarvell5642.co.uk"] [uri "/robots.txt"] [unique_id "amtCVzJtTMo-yu--fesnVAAAAA8"]
[Thu Jul 30 13:23:51.317172 2026] [security2:error] [pid 3228408:tid 3228408] [client 85.208.96.203:50662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/eric-nelson-obituary"] [unique_id "amtCV1utqZpUBbm0nnOEFwAAABA"]
[Thu Jul 30 13:23:51.347163 2026] [security2:error] [pid 3213662:tid 3213662] [client 85.208.96.202:28358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtCV6pXoAfx_hV8Iyx8MQAAABI"]
[Thu Jul 30 13:23:53.939676 2026] [lsapi:warn] [pid 3210637:tid 3210637] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:54.015536 2026] [ssl:error] [pid 3230980:tid 3230980] (EAI 2)Name or service not known: [client 144.76.19.72:65450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:54.015568 2026] [ssl:error] [pid 3230980:tid 3230980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:54.072989 2026] [ssl:error] [pid 3230621:tid 3230621] (EAI 2)Name or service not known: [client 144.76.19.72:65458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:54.073032 2026] [ssl:error] [pid 3230621:tid 3230621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:54.271904 2026] [access_compat:error] [pid 3202364:tid 3202364] [client 45.148.10.123:60228] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wordpress, referer: https://www.blog.alism.com/wordpress/
[Thu Jul 30 13:23:54.272007 2026] [access_compat:error] [pid 3202364:tid 3202364] [client 45.148.10.123:60228] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/wordpress/
[Thu Jul 30 13:23:54.384107 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:6617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:54.445910 2026] [access_compat:error] [pid 3221798:tid 3221798] [client 45.148.10.123:60230] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/blog, referer: https://www.blog.alism.com/blog/
[Thu Jul 30 13:23:54.446019 2026] [access_compat:error] [pid 3221798:tid 3221798] [client 45.148.10.123:60230] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/blog/
[Thu Jul 30 13:23:55.012414 2026] [security2:error] [pid 3229414:tid 3229414] [client 43.134.100.175:39440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tyredandmotional.co.uk"] [uri "/"] [unique_id "amtCW5SG9mhhLSf6jOaGfgAAABk"]
[Thu Jul 30 13:23:55.394319 2026] [authz_core:error] [pid 3221826:tid 3221826] [client 57.141.0.21:55918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:23:55.394945 2026] [authz_core:error] [pid 3221826:tid 3221826] [client 57.141.0.21:55918] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:23:56.927884 2026] [security2:error] [pid 3221798:tid 3221798] [client 43.134.100.175:40736] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amtCXCGpTEEEFakYJJAztwAAAAQ"], referer: http://tyredandmotional.co.uk
[Thu Jul 30 13:23:57.127608 2026] [ssl:error] [pid 3233566:tid 3233566] (EAI 2)Name or service not known: [client 144.76.19.72:65470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:57.127644 2026] [ssl:error] [pid 3233566:tid 3233566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:57.183870 2026] [ssl:error] [pid 3233431:tid 3233431] (EAI 2)Name or service not known: [client 144.76.19.72:65482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:23:57.183900 2026] [ssl:error] [pid 3233431:tid 3233431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:23:57.631248 2026] [lsapi:warn] [pid 3233530:tid 3233530] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:23:58.002700 2026] [ssl:error] [pid 3232545:tid 3232545] (70014)End of file found: [client 216.73.216.199:22981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:58.509531 2026] [ssl:error] [pid 3233432:tid 3233432] (70014)End of file found: [client 216.73.216.199:62611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:23:59.047451 2026] [access_compat:error] [pid 3228411:tid 3228411] [client 43.135.115.233:42014] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:23:59.633630 2026] [access_compat:error] [pid 3230438:tid 3230438] [client 45.148.10.123:60236] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/blog, referer: https://www.blog.alism.com/blog/
[Thu Jul 30 13:23:59.633720 2026] [access_compat:error] [pid 3230438:tid 3230438] [client 45.148.10.123:60236] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/blog/
[Thu Jul 30 13:24:00.112562 2026] [ssl:error] [pid 3227538:tid 3227538] (70014)End of file found: [client 216.73.216.199:4354] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:00.240257 2026] [ssl:error] [pid 3228899:tid 3228899] (EAI 2)Name or service not known: [client 144.76.19.72:27994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:00.240288 2026] [ssl:error] [pid 3228899:tid 3228899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:00.341577 2026] [ssl:error] [pid 3230501:tid 3230501] (EAI 2)Name or service not known: [client 144.76.19.72:28006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:00.341616 2026] [ssl:error] [pid 3230501:tid 3230501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:00.619259 2026] [authz_core:error] [pid 3228323:tid 3228323] [client 57.141.0.56:27428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:24:00.619880 2026] [authz_core:error] [pid 3228323:tid 3228323] [client 57.141.0.56:27428] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:24:01.348669 2026] [access_compat:error] [pid 3228899:tid 3228899] [client 106.222.248.251:19109] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:24:01.830794 2026] [access_compat:error] [pid 3230620:tid 3230620] [client 45.158.164.139:41354] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:24:02.450615 2026] [security2:error] [pid 3233565:tid 3233565] [client 43.167.188.84:26571] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCYjvCDRG2jsg14q9GYgAAAB4"]
[Thu Jul 30 13:24:02.450664 2026] [security2:error] [pid 3233565:tid 3233565] [client 43.167.188.84:26571] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCYjvCDRG2jsg14q9GYgAAAB4"]
[Thu Jul 30 13:24:02.450958 2026] [security2:error] [pid 3233565:tid 3233565] [client 43.167.188.84:26571] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCYjvCDRG2jsg14q9GYgAAAB4"]
[Thu Jul 30 13:24:03.398543 2026] [ssl:error] [pid 3230617:tid 3230617] (EAI 2)Name or service not known: [client 144.76.19.72:28010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:03.398578 2026] [ssl:error] [pid 3230617:tid 3230617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:03.453101 2026] [ssl:error] [pid 3230621:tid 3230621] (EAI 2)Name or service not known: [client 144.76.19.72:28022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:03.453132 2026] [ssl:error] [pid 3230621:tid 3230621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:04.016930 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 45.32.148.97:55562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:24:04.016972 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 45.32.148.97:55562] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:24:04.326241 2026] [ssl:error] [pid 3221184:tid 3221184] (70014)End of file found: [client 216.73.216.199:42718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:04.493609 2026] [lsapi:warn] [pid 3221826:tid 3221826] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:04.821947 2026] [ssl:error] [pid 3225757:tid 3225757] (70014)End of file found: [client 216.73.216.199:60143] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:06.132933 2026] [core:error] [pid 3228373:tid 3228373] (13)Permission denied: [client 216.73.216.199:1405] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS0/closing_wait
[Thu Jul 30 13:24:06.239117 2026] [security2:error] [pid 3234602:tid 3234602] [client 43.167.239.241:44907] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCZrGSax1-dohAeNwGdQAAAAc"]
[Thu Jul 30 13:24:06.239167 2026] [security2:error] [pid 3234602:tid 3234602] [client 43.167.239.241:44907] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCZrGSax1-dohAeNwGdQAAAAc"]
[Thu Jul 30 13:24:06.239480 2026] [security2:error] [pid 3234602:tid 3234602] [client 43.167.239.241:44907] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCZrGSax1-dohAeNwGdQAAAAc"]
[Thu Jul 30 13:24:06.282308 2026] [core:error] [pid 3221826:tid 3221826] [client 57.141.0.19:34960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:06.282336 2026] [core:error] [pid 3221826:tid 3221826] [client 57.141.0.19:34960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:06.511169 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:28024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:06.511200 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:06.562260 2026] [ssl:error] [pid 3232601:tid 3232601] (EAI 2)Name or service not known: [client 144.76.19.72:28028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:06.562285 2026] [ssl:error] [pid 3232601:tid 3232601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:07.638891 2026] [ssl:error] [pid 3228373:tid 3228373] (70014)End of file found: [client 216.73.216.199:1405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:08.377198 2026] [lsapi:warn] [pid 3202364:tid 3202364] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:08.507199 2026] [core:error] [pid 3228411:tid 3228411] [client 66.249.66.68:49577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:08.507232 2026] [core:error] [pid 3228411:tid 3228411] [client 66.249.66.68:49577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:08.509679 2026] [core:error] [pid 3233431:tid 3233431] [client 66.249.66.168:64989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:08.509702 2026] [core:error] [pid 3233431:tid 3233431] [client 66.249.66.168:64989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:09.447912 2026] [security2:error] [pid 3233431:tid 3233431] [client 43.167.239.241:60251] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCaURFprvFmm_613DU3gAAAAk"]
[Thu Jul 30 13:24:09.447960 2026] [security2:error] [pid 3233431:tid 3233431] [client 43.167.239.241:60251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCaURFprvFmm_613DU3gAAAAk"]
[Thu Jul 30 13:24:09.448243 2026] [security2:error] [pid 3233431:tid 3233431] [client 43.167.239.241:60251] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCaURFprvFmm_613DU3gAAAAk"]
[Thu Jul 30 13:24:09.617007 2026] [ssl:error] [pid 3222919:tid 3222919] (EAI 2)Name or service not known: [client 144.76.19.72:35266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:09.617039 2026] [ssl:error] [pid 3222919:tid 3222919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:09.670004 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:35276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:09.670032 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:09.693755 2026] [access_compat:error] [pid 3225760:tid 3225760] [client 45.148.10.123:60484] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/old, referer: https://www.blog.alism.com/old/
[Thu Jul 30 13:24:09.693854 2026] [access_compat:error] [pid 3225760:tid 3225760] [client 45.148.10.123:60484] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/old/
[Thu Jul 30 13:24:09.764976 2026] [authz_core:error] [pid 3233530:tid 3233530] [client 57.141.0.26:41310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:24:09.765612 2026] [authz_core:error] [pid 3233530:tid 3233530] [client 57.141.0.26:41310] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:24:09.855601 2026] [access_compat:error] [pid 3202364:tid 3202364] [client 45.148.10.123:60490] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/old, referer: https://www.blog.alism.com/old/
[Thu Jul 30 13:24:09.855700 2026] [access_compat:error] [pid 3202364:tid 3202364] [client 45.148.10.123:60490] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/old/
[Thu Jul 30 13:24:10.168915 2026] [security2:error] [pid 3230617:tid 3230617] [client 43.165.198.224:46986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-london.com"] [uri "/"] [unique_id "amtCauDJOBjTYzzbuitfPQAAACY"]
[Thu Jul 30 13:24:10.356179 2026] [ssl:error] [pid 3221182:tid 3221182] (70014)End of file found: [client 216.73.216.199:14435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:10.839216 2026] [ssl:error] [pid 3222988:tid 3222988] (70014)End of file found: [client 216.73.216.199:51951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:12.055361 2026] [access_compat:error] [pid 3230617:tid 3230617] [client 106.222.248.251:26051] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:24:12.287169 2026] [security2:error] [pid 3230567:tid 3230567] [client 43.165.198.224:48372] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtCbIbhj5IHP40oahhfCAAAACA"], referer: http://kinesiology-london.com
[Thu Jul 30 13:24:12.289006 2026] [authz_core:error] [pid 3230567:tid 3230567] [client 43.165.198.224:48372] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-london.com
[Thu Jul 30 13:24:12.291670 2026] [authz_core:error] [pid 3230567:tid 3230567] [client 43.165.198.224:48372] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-london.com
[Thu Jul 30 13:24:12.628251 2026] [security2:error] [pid 3222919:tid 3222919] [client 185.191.171.7:42108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,457.0.html"] [unique_id "amtCbP3XhWUlrMVLGRRWxgAAAEM"]
[Thu Jul 30 13:24:12.722649 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:35282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:12.722674 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:12.774131 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:35286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:12.774168 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:13.661458 2026] [ssl:error] [pid 3228323:tid 3228323] (70014)End of file found: [client 216.73.216.199:28458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:14.917313 2026] [access_compat:error] [pid 3228411:tid 3228411] [client 45.148.10.123:56770] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/test, referer: https://www.blog.alism.com/test/
[Thu Jul 30 13:24:14.917449 2026] [access_compat:error] [pid 3228411:tid 3228411] [client 45.148.10.123:56770] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/test/
[Thu Jul 30 13:24:14.941495 2026] [lsapi:warn] [pid 3229667:tid 3229667] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:15.848905 2026] [ssl:error] [pid 3230618:tid 3230618] (EAI 2)Name or service not known: [client 144.76.19.72:35290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:15.848954 2026] [ssl:error] [pid 3230618:tid 3230618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:15.854217 2026] [authz_core:error] [pid 3230621:tid 3230621] [client 57.141.0.61:51608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:24:15.854850 2026] [authz_core:error] [pid 3230621:tid 3230621] [client 57.141.0.61:51608] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:24:15.906559 2026] [ssl:error] [pid 3221182:tid 3221182] (EAI 2)Name or service not known: [client 144.76.19.72:35304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:15.906590 2026] [ssl:error] [pid 3221182:tid 3221182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:16.076790 2026] [ssl:error] [pid 3233530:tid 3233530] (70014)End of file found: [client 216.73.216.199:2581] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:16.566394 2026] [ssl:error] [pid 3233432:tid 3233432] (70014)End of file found: [client 216.73.216.199:53941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:18.781718 2026] [ssl:error] [pid 3202364:tid 3202364] (70014)End of file found: [client 216.73.216.199:10515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:18.966046 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:35310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:18.966090 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:19.022217 2026] [ssl:error] [pid 3230438:tid 3230438] (EAI 2)Name or service not known: [client 144.76.19.72:35324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:19.022251 2026] [ssl:error] [pid 3230438:tid 3230438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:19.153201 2026] [lsapi:warn] [pid 3230567:tid 3230567] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:19.977919 2026] [access_compat:error] [pid 3228373:tid 3228373] [client 45.148.10.123:56794] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/test, referer: https://www.blog.alism.com/test/
[Thu Jul 30 13:24:19.978031 2026] [access_compat:error] [pid 3228373:tid 3228373] [client 45.148.10.123:56794] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/test/
[Thu Jul 30 13:24:19.986113 2026] [ssl:error] [pid 3227537:tid 3227537] (70014)End of file found: [client 216.73.216.199:59064] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:20.131508 2026] [access_compat:error] [pid 3222919:tid 3222919] [client 45.148.10.123:56802] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/dev, referer: https://www.blog.alism.com/dev/
[Thu Jul 30 13:24:20.131623 2026] [access_compat:error] [pid 3222919:tid 3222919] [client 45.148.10.123:56802] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/dev/
[Thu Jul 30 13:24:20.290839 2026] [access_compat:error] [pid 3221986:tid 3221986] [client 45.148.10.123:56814] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/dev, referer: https://www.blog.alism.com/dev/
[Thu Jul 30 13:24:20.290936 2026] [access_compat:error] [pid 3221986:tid 3221986] [client 45.148.10.123:56814] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/dev/
[Thu Jul 30 13:24:20.479381 2026] [ssl:error] [pid 3230567:tid 3230567] (70014)End of file found: [client 216.73.216.199:16122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:22.075561 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:37714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:22.075592 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:22.131511 2026] [ssl:error] [pid 3233432:tid 3233432] (EAI 2)Name or service not known: [client 144.76.19.72:37724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:22.131546 2026] [ssl:error] [pid 3233432:tid 3233432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:22.615582 2026] [access_compat:error] [pid 3233397:tid 3233397] [client 106.222.248.251:28760] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:24:24.518214 2026] [ssl:error] [pid 3230985:tid 3230985] (70014)End of file found: [client 216.73.216.199:9117] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:25.186254 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:37728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:25.186284 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:25.241061 2026] [ssl:error] [pid 3231909:tid 3231909] (EAI 2)Name or service not known: [client 144.76.19.72:37734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:25.241102 2026] [ssl:error] [pid 3231909:tid 3231909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:25.433288 2026] [lsapi:warn] [pid 3230568:tid 3230568] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:25.718495 2026] [ssl:error] [pid 3222919:tid 3222919] (70014)End of file found: [client 216.73.216.199:52986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:26.227028 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:45445] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/341066.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.541c6389.tmp
[Thu Jul 30 13:24:27.230099 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:45445] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2673155.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.570a2650.tmp
[Thu Jul 30 13:24:27.522631 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 167.94.146.48:45370] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:24:27.532188 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 167.94.146.48:45370] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:24:28.133276 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:45445] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:28.297333 2026] [ssl:error] [pid 3221798:tid 3221798] (EAI 2)Name or service not known: [client 144.76.19.72:37750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:28.297364 2026] [ssl:error] [pid 3221798:tid 3221798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:28.353467 2026] [ssl:error] [pid 3230567:tid 3230567] (EAI 2)Name or service not known: [client 144.76.19.72:37754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:28.353509 2026] [ssl:error] [pid 3230567:tid 3230567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:30.095142 2026] [lsapi:warn] [pid 3222991:tid 3222991] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:30.353283 2026] [access_compat:error] [pid 3230985:tid 3230985] [client 45.148.10.123:33120] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/backup, referer: https://www.blog.alism.com/backup/
[Thu Jul 30 13:24:30.353388 2026] [access_compat:error] [pid 3230985:tid 3230985] [client 45.148.10.123:33120] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/backup/
[Thu Jul 30 13:24:30.738565 2026] [core:alert] [pid 3221826:tid 3221826] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:30.738697 2026] [core:alert] [pid 3221826:tid 3221826] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:30.954355 2026] [core:alert] [pid 3230985:tid 3230985] [client 66.249.66.8:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:30.954444 2026] [core:alert] [pid 3230985:tid 3230985] [client 66.249.66.8:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:31.291736 2026] [core:alert] [pid 3221826:tid 3221826] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:31.291837 2026] [core:alert] [pid 3221826:tid 3221826] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:31.414514 2026] [ssl:error] [pid 3233565:tid 3233565] (EAI 2)Name or service not known: [client 144.76.19.72:58072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:31.414550 2026] [ssl:error] [pid 3233565:tid 3233565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:31.440683 2026] [ssl:error] [pid 3227538:tid 3227538] (70014)End of file found: [client 216.73.216.199:11230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:31.467713 2026] [ssl:error] [pid 3230567:tid 3230567] (EAI 2)Name or service not known: [client 144.76.19.72:58080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:31.467742 2026] [ssl:error] [pid 3230567:tid 3230567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:31.494166 2026] [core:alert] [pid 3228408:tid 3228408] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:31.494270 2026] [core:alert] [pid 3228408:tid 3228408] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:31.778406 2026] [core:alert] [pid 3227537:tid 3227537] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:31.778515 2026] [core:alert] [pid 3227537:tid 3227537] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:32.346643 2026] [lsapi:warn] [pid 3221826:tid 3221826] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:32.945398 2026] [core:error] [pid 3222919:tid 3222919] (13)Permission denied: [client 216.73.216.199:9323] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS2/flags
[Thu Jul 30 13:24:33.371623 2026] [access_compat:error] [pid 3230618:tid 3230618] [client 106.222.248.251:16319] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:24:33.547992 2026] [ssl:error] [pid 3222919:tid 3222919] (70014)End of file found: [client 216.73.216.199:9323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:34.149342 2026] [core:error] [pid 3230617:tid 3230617] (13)Permission denied: [client 216.73.216.199:37758] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_blk/drivers/virtio:virtio_blk/unbind
[Thu Jul 30 13:24:34.495206 2026] [core:alert] [pid 3235385:tid 3235385] [client 66.249.66.70:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:34.495308 2026] [core:alert] [pid 3235385:tid 3235385] [client 66.249.66.70:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:34.521570 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:58090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:34.521602 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:34.576175 2026] [ssl:error] [pid 3222988:tid 3222988] (EAI 2)Name or service not known: [client 144.76.19.72:58102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:34.576201 2026] [ssl:error] [pid 3222988:tid 3222988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:34.933932 2026] [core:alert] [pid 3228408:tid 3228408] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:34.934030 2026] [core:alert] [pid 3228408:tid 3228408] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:35.161934 2026] [core:alert] [pid 3222988:tid 3222988] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:35.162045 2026] [core:alert] [pid 3222988:tid 3222988] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:35.804594 2026] [authz_core:error] [pid 3213662:tid 3213662] [client 57.141.0.21:49942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:24:35.805225 2026] [authz_core:error] [pid 3213662:tid 3213662] [client 57.141.0.21:49942] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:24:35.837043 2026] [core:alert] [pid 3235414:tid 3235414] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:35.837173 2026] [core:alert] [pid 3235414:tid 3235414] [client 66.249.66.7:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:35.851291 2026] [security2:error] [pid 3231881:tid 3231881] [client 114.119.158.38:26023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~14,30/request_format~html"] [unique_id "amtCg5PfCV0mNkSWKDYcSgAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~14,30/request_format~html
[Thu Jul 30 13:24:35.915438 2026] [lsapi:warn] [pid 3228408:tid 3228408] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:35.957592 2026] [ssl:error] [pid 3230617:tid 3230617] (70014)End of file found: [client 216.73.216.199:37758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:36.406651 2026] [core:alert] [pid 3221143:tid 3221143] [client 66.249.66.70:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:36.406754 2026] [core:alert] [pid 3221143:tid 3221143] [client 66.249.66.70:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:36.803293 2026] [security2:error] [pid 3235141:tid 3235141] [client 114.119.158.38:26031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~14,30/request_format~html"] [unique_id "amtChOaCZtzI24sukCC9KwAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~14,30/request_format~html
[Thu Jul 30 13:24:36.901455 2026] [core:alert] [pid 3231881:tid 3231881] [client 66.249.66.8:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:36.901567 2026] [core:alert] [pid 3231881:tid 3231881] [client 66.249.66.8:0] /home/quantumc/kulinarja2023/.htaccess: php_value takes two arguments, PHP Value
[Thu Jul 30 13:24:37.633966 2026] [ssl:error] [pid 3231881:tid 3231881] (EAI 2)Name or service not known: [client 144.76.19.72:58116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:37.634008 2026] [ssl:error] [pid 3231881:tid 3231881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:37.690367 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:58130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:37.690395 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:38.372605 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:52657] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:38.449894 2026] [core:error] [pid 3221798:tid 3221798] [client 66.249.66.194:42520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:38.449920 2026] [core:error] [pid 3221798:tid 3221798] [client 66.249.66.194:42520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:39.707738 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 66.249.66.77:37815] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 13:24:39.707779 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 66.249.66.77:37815] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 13:24:39.872825 2026] [core:error] [pid 3227537:tid 3227537] (13)Permission denied: [client 216.73.216.199:11149] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS2/line
[Thu Jul 30 13:24:39.877854 2026] [security2:error] [pid 3221826:tid 3221826] [client 85.208.96.209:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/robots.txt"] [unique_id "amtChz60f0C8LqVzU2yGRgAAAA4"]
[Thu Jul 30 13:24:40.173797 2026] [ssl:error] [pid 3227537:tid 3227537] (70014)End of file found: [client 216.73.216.199:11149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:40.414967 2026] [access_compat:error] [pid 3221184:tid 3221184] [client 45.148.10.123:40820] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/backup, referer: https://www.blog.alism.com/backup/
[Thu Jul 30 13:24:40.415086 2026] [access_compat:error] [pid 3221184:tid 3221184] [client 45.148.10.123:40820] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/backup/
[Thu Jul 30 13:24:40.591732 2026] [access_compat:error] [pid 3221826:tid 3221826] [client 45.148.10.123:40834] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/staging, referer: https://www.blog.alism.com/staging/
[Thu Jul 30 13:24:40.591829 2026] [access_compat:error] [pid 3221826:tid 3221826] [client 45.148.10.123:40834] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/staging/
[Thu Jul 30 13:24:40.689500 2026] [security2:error] [pid 3221184:tid 3221184] [client 185.191.171.2:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2016/01/22/the-devon-cup-2016/"] [unique_id "amtCiLFENoflTJbZlaUK7wAAADE"]
[Thu Jul 30 13:24:40.743380 2026] [ssl:error] [pid 3234602:tid 3234602] (EAI 2)Name or service not known: [client 144.76.19.72:63028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:40.743415 2026] [ssl:error] [pid 3234602:tid 3234602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:40.797993 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:63030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:40.798021 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:40.951893 2026] [authz_core:error] [pid 3227538:tid 3227538] [client 167.94.146.48:20212] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:24:40.960938 2026] [authz_core:error] [pid 3227538:tid 3227538] [client 167.94.146.48:20212] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:24:41.137224 2026] [lsapi:warn] [pid 3230985:tid 3230985] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:41.277556 2026] [core:error] [pid 3231909:tid 3231909] (13)Permission denied: [client 216.73.216.199:50589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS1/closing_wait
[Thu Jul 30 13:24:41.352447 2026] [authz_core:error] [pid 3227538:tid 3227538] [client 167.94.146.48:20212] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/error_log, referer: https://dbstart.com:443/suitecrm
[Thu Jul 30 13:24:41.381869 2026] [ssl:error] [pid 3231909:tid 3231909] (70014)End of file found: [client 216.73.216.199:50589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:41.937173 2026] [autoindex:error] [pid 3227538:tid 3227538] [client 167.94.146.48:20212] AH01276: Cannot serve directory /home/winterb/public_html/drupal0/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive, referer: https://dbstart.com:443/drupal0
[Thu Jul 30 13:24:42.832659 2026] [lsapi:warn] [pid 3230985:tid 3230985] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:43.854106 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:63046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:43.854137 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:43.909629 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:63050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:43.909658 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:44.187871 2026] [access_compat:error] [pid 3233397:tid 3233397] [client 106.222.248.251:9232] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:24:44.694524 2026] [core:error] [pid 3230985:tid 3230985] (13)Permission denied: [client 216.73.216.199:24419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/red_zone
[Thu Jul 30 13:24:44.995137 2026] [ssl:error] [pid 3230985:tid 3230985] (70014)End of file found: [client 216.73.216.199:24419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:45.038258 2026] [autoindex:error] [pid 3227538:tid 3227538] [client 167.94.146.48:20212] AH01276: Cannot serve directory /home/winterb/public_html/drupal2/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive, referer: https://dbstart.com:443/drupal2
[Thu Jul 30 13:24:45.294141 2026] [lsapi:warn] [pid 3230567:tid 3230567] [client 192.36.109.108:50621] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:24:45.294184 2026] [lsapi:warn] [pid 3230567:tid 3230567] [client 192.36.109.108:50621] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:24:45.508477 2026] [core:error] [pid 3229414:tid 3229414] [client 66.249.64.170:44854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:45.508525 2026] [core:error] [pid 3229414:tid 3229414] [client 66.249.64.170:44854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:24:45.645994 2026] [access_compat:error] [pid 3236245:tid 3236245] [client 45.148.10.123:37702] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/staging, referer: https://www.blog.alism.com/staging/
[Thu Jul 30 13:24:45.646114 2026] [access_compat:error] [pid 3236245:tid 3236245] [client 45.148.10.123:37702] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/staging/
[Thu Jul 30 13:24:45.760179 2026] [authz_core:error] [pid 3227538:tid 3227538] [client 167.94.146.48:20212] AH01630: client denied by server configuration: /home/winterb/public_html/nortonnews/error_log, referer: https://dbstart.com:443/nortonnews
[Thu Jul 30 13:24:46.126852 2026] [lsapi:warn] [pid 3222919:tid 3222919] [client 192.36.109.91:42007] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:24:46.126901 2026] [lsapi:warn] [pid 3222919:tid 3222919] [client 192.36.109.91:42007] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:24:46.211193 2026] [authz_core:error] [pid 3236245:tid 3236245] [client 57.141.0.18:62714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:24:46.211818 2026] [authz_core:error] [pid 3236245:tid 3236245] [client 57.141.0.18:62714] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:24:46.398447 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:46.496432 2026] [core:error] [pid 3221798:tid 3221798] (13)Permission denied: [client 216.73.216.199:45851] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/clocksource/devices/clocksource0/unbind_clocksource
[Thu Jul 30 13:24:46.659617 2026] [security2:error] [pid 3236245:tid 3236245] [client 85.208.96.195:19398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11549.0.html"] [unique_id "amtCjlKjMT1taX2af8KDfgAAABY"]
[Thu Jul 30 13:24:46.960448 2026] [autoindex:error] [pid 3227538:tid 3227538] [client 167.94.146.48:20212] AH01276: Cannot serve directory /home/winterb/public_html/drupal1/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive, referer: https://dbstart.com:443/drupal1
[Thu Jul 30 13:24:46.981830 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:63058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:46.981875 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:47.033209 2026] [ssl:error] [pid 3222919:tid 3222919] (EAI 2)Name or service not known: [client 144.76.19.72:63062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:47.033238 2026] [ssl:error] [pid 3222919:tid 3222919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:50.006582 2026] [ssl:error] [pid 3221798:tid 3221798] (70014)End of file found: [client 216.73.216.199:45851] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:50.090715 2026] [ssl:error] [pid 3231909:tid 3231909] (EAI 2)Name or service not known: [client 144.76.19.72:38874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:50.090749 2026] [ssl:error] [pid 3231909:tid 3231909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:50.145277 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:38876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:50.145312 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:50.257270 2026] [security2:error] [pid 3225757:tid 3225757] [client 66.175.211.202:12084] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "303"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/"] [unique_id "amtCkuXmVWaQWkoA5vCkOgAAACU"]
[Thu Jul 30 13:24:50.704418 2026] [access_compat:error] [pid 3221184:tid 3221184] [client 45.148.10.123:37708] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/, referer: https://www.blog.alism.com/
[Thu Jul 30 13:24:50.704546 2026] [access_compat:error] [pid 3221184:tid 3221184] [client 45.148.10.123:37708] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/
[Thu Jul 30 13:24:51.217825 2026] [ssl:error] [pid 3233431:tid 3233431] (70014)End of file found: [client 216.73.216.199:56973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:51.520042 2026] [ssl:error] [pid 3234602:tid 3234602] (70014)End of file found: [client 216.73.216.199:6254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:51.703078 2026] [security2:error] [pid 3236285:tid 3236285] [client 185.191.171.6:37318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/is-ninja-storm-4-cross-platform-2020"] [unique_id "amtCkxJAOJlPlhVaxcahuwAAABc"]
[Thu Jul 30 13:24:51.836610 2026] [lsapi:warn] [pid 3233530:tid 3233530] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:53.198437 2026] [ssl:error] [pid 3230621:tid 3230621] (EAI 2)Name or service not known: [client 144.76.19.72:38886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:53.198473 2026] [ssl:error] [pid 3230621:tid 3230621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:53.254391 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:38890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:53.254424 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:53.476209 2026] [lsapi:warn] [pid 3227538:tid 3227538] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:54.184131 2026] [security2:error] [pid 3228323:tid 3228323] [client 74.7.241.49:38144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.nigelmassey.com"] [uri "/"] [unique_id "amtClvo2dhPCCtNJzgbJsgAAAAU"], referer: https://www.badbehaviour.london
[Thu Jul 30 13:24:54.693935 2026] [security2:error] [pid 3229667:tid 3229667] [client 157.66.27.31:37384] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtCln8RSmGh3jOqjL3A8AAAAAA"]
[Thu Jul 30 13:24:54.758409 2026] [access_compat:error] [pid 3222919:tid 3222919] [client 106.222.248.251:6053] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:24:55.339767 2026] [core:error] [pid 3233566:tid 3233566] (13)Permission denied: [client 216.73.216.199:43413] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/outgoing_mail_hold_users
[Thu Jul 30 13:24:56.175987 2026] [authz_core:error] [pid 3229667:tid 3229667] [client 57.141.0.2:22864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:24:56.176628 2026] [authz_core:error] [pid 3229667:tid 3229667] [client 57.141.0.2:22864] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:24:56.307821 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:38906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:56.307854 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:56.352469 2026] [ssl:error] [pid 3233566:tid 3233566] (70014)End of file found: [client 216.73.216.199:43413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:56.359429 2026] [ssl:error] [pid 3233565:tid 3233565] (EAI 2)Name or service not known: [client 144.76.19.72:38916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:56.359451 2026] [ssl:error] [pid 3233565:tid 3233565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:56.523110 2026] [ssl:error] [pid 3230618:tid 3230618] [client 66.175.211.202:18280] AH02031: Hostname cpanel.prosperon.co.uk provided via SNI, but no hostname provided in HTTP request
[Thu Jul 30 13:24:56.856561 2026] [lsapi:warn] [pid 3230438:tid 3230438] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:24:57.858240 2026] [ssl:error] [pid 3233431:tid 3233431] (70014)End of file found: [client 216.73.216.199:5306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:24:58.323810 2026] [security2:error] [pid 3230438:tid 3230438] [client 23.23.99.55:62484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/php.old"] [unique_id "amtCmgWzfC7_P791ymLwvgAAAAw"]
[Thu Jul 30 13:24:58.761419 2026] [core:error] [pid 3225757:tid 3225757] (13)Permission denied: [client 216.73.216.199:34523] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty53/subsystem/ttyS2/flags
[Thu Jul 30 13:24:59.063544 2026] [core:error] [pid 3225757:tid 3225757] (13)Permission denied: [client 216.73.216.199:34523] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS0/closing_wait
[Thu Jul 30 13:24:59.411574 2026] [ssl:error] [pid 3229667:tid 3229667] (EAI 2)Name or service not known: [client 144.76.19.72:38918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:59.411612 2026] [ssl:error] [pid 3229667:tid 3229667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:24:59.470309 2026] [ssl:error] [pid 3230618:tid 3230618] (EAI 2)Name or service not known: [client 144.76.19.72:38934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:24:59.470339 2026] [ssl:error] [pid 3230618:tid 3230618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:00.765989 2026] [access_compat:error] [pid 3230617:tid 3230617] [client 45.148.10.123:57240] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-json, referer: https://www.blog.alism.com/
[Thu Jul 30 13:25:00.766096 2026] [access_compat:error] [pid 3230617:tid 3230617] [client 45.148.10.123:57240] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.blog.alism.com/
[Thu Jul 30 13:25:01.476958 2026] [security2:error] [pid 3225757:tid 3225757] [client 216.73.216.199:34523] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-curl.ini"] [unique_id "amtCneXmVWaQWkoA5vCkRQAAACU"]
[Thu Jul 30 13:25:01.477278 2026] [security2:error] [pid 3225757:tid 3225757] [client 216.73.216.199:34523] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-curl.ini"] [unique_id "amtCneXmVWaQWkoA5vCkRQAAACU"]
[Thu Jul 30 13:25:01.477534 2026] [security2:error] [pid 3225757:tid 3225757] [client 216.73.216.199:34523] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-curl.ini"] [unique_id "amtCneXmVWaQWkoA5vCkRQAAACU"]
[Thu Jul 30 13:25:01.949631 2026] [core:error] [pid 3221986:tid 3221986] [client 66.249.66.8:60799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:01.949660 2026] [core:error] [pid 3221986:tid 3221986] [client 66.249.66.8:60799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:02.526637 2026] [ssl:error] [pid 3235414:tid 3235414] (EAI 2)Name or service not known: [client 144.76.19.72:49342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:02.526671 2026] [ssl:error] [pid 3235414:tid 3235414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:02.582702 2026] [ssl:error] [pid 3231881:tid 3231881] (EAI 2)Name or service not known: [client 144.76.19.72:49346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:02.582729 2026] [ssl:error] [pid 3231881:tid 3231881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:02.651465 2026] [lsapi:warn] [pid 3233530:tid 3233530] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:02.748813 2026] [core:error] [pid 3221986:tid 3221986] [client 66.249.66.169:48707] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:02.748838 2026] [core:error] [pid 3221986:tid 3221986] [client 66.249.66.169:48707] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:02.988881 2026] [ssl:error] [pid 3225757:tid 3225757] (70014)End of file found: [client 216.73.216.199:34523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:03.546665 2026] [core:error] [pid 3235414:tid 3235414] [client 57.141.0.47:40600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:03.546694 2026] [core:error] [pid 3235414:tid 3235414] [client 57.141.0.47:40600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:03.601539 2026] [ssl:error] [pid 3221826:tid 3221826] (70014)End of file found: [client 216.73.216.199:1650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:04.094645 2026] [ssl:error] [pid 3227538:tid 3227538] (70014)End of file found: [client 216.73.216.199:10827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:04.331831 2026] [lsapi:warn] [pid 3233431:tid 3233431] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:05.020881 2026] [access_compat:error] [pid 3225760:tid 3225760] [client 106.222.248.251:31244] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:25:05.490591 2026] [access_compat:error] [pid 3231881:tid 3231881] [client 45.158.164.139:45344] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:25:05.533142 2026] [security2:error] [pid 3221184:tid 3221184] [client 101.47.20.255:55861] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCobFENoflTJbZlaUK9wAAADE"]
[Thu Jul 30 13:25:05.533191 2026] [security2:error] [pid 3221184:tid 3221184] [client 101.47.20.255:55861] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCobFENoflTJbZlaUK9wAAADE"]
[Thu Jul 30 13:25:05.533442 2026] [security2:error] [pid 3221184:tid 3221184] [client 101.47.20.255:55861] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCobFENoflTJbZlaUK9wAAADE"]
[Thu Jul 30 13:25:05.639391 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:49358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:05.639419 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:05.694000 2026] [ssl:error] [pid 3230985:tid 3230985] (EAI 2)Name or service not known: [client 144.76.19.72:49360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:05.694039 2026] [ssl:error] [pid 3230985:tid 3230985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:06.399446 2026] [core:error] [pid 3230621:tid 3230621] [client 66.249.66.194:42658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:06.399471 2026] [core:error] [pid 3230621:tid 3230621] [client 66.249.66.194:42658] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:07.341368 2026] [lsapi:warn] [pid 3236695:tid 3236695] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:07.435893 2026] [lsapi:warn] [pid 3229667:tid 3229667] [client 97.74.93.24:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:07.554793 2026] [security2:error] [pid 3228408:tid 3228408] [client 41.235.203.165:20356] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCo1utqZpUBbm0nnOEMQAAABA"]
[Thu Jul 30 13:25:07.554839 2026] [security2:error] [pid 3228408:tid 3228408] [client 41.235.203.165:20356] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCo1utqZpUBbm0nnOEMQAAABA"]
[Thu Jul 30 13:25:07.555098 2026] [security2:error] [pid 3228408:tid 3228408] [client 41.235.203.165:20356] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCo1utqZpUBbm0nnOEMQAAABA"]
[Thu Jul 30 13:25:07.667562 2026] [authz_core:error] [pid 3237375:tid 3237375] [client 57.141.0.5:53856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:25:07.668224 2026] [authz_core:error] [pid 3237375:tid 3237375] [client 57.141.0.5:53856] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:25:08.749962 2026] [ssl:error] [pid 3230567:tid 3230567] (EAI 2)Name or service not known: [client 144.76.19.72:49366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:08.749994 2026] [ssl:error] [pid 3230567:tid 3230567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:08.805564 2026] [ssl:error] [pid 3237375:tid 3237375] (EAI 2)Name or service not known: [client 144.76.19.72:49374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:08.805599 2026] [ssl:error] [pid 3237375:tid 3237375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:09.331635 2026] [core:error] [pid 3228408:tid 3228408] (13)Permission denied: [client 216.73.216.199:50843] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/sanity_checks
[Thu Jul 30 13:25:10.236667 2026] [core:error] [pid 3228408:tid 3228408] (13)Permission denied: [client 216.73.216.199:50843] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kernfs_iattrs_cache/ctor
[Thu Jul 30 13:25:10.537179 2026] [ssl:error] [pid 3228408:tid 3228408] (70014)End of file found: [client 216.73.216.199:50843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:10.852216 2026] [ssl:error] [pid 3236245:tid 3236245] (70014)End of file found: [client 216.73.216.199:25873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:11.340589 2026] [ssl:error] [pid 3229414:tid 3229414] (70014)End of file found: [client 216.73.216.199:16339] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:11.427456 2026] [security2:error] [pid 3221986:tid 3221986] [client 178.159.210.124:53848] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCp2oHJ1ea8ZjYv8l6egAAABs"]
[Thu Jul 30 13:25:11.427508 2026] [security2:error] [pid 3221986:tid 3221986] [client 178.159.210.124:53848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtCp2oHJ1ea8ZjYv8l6egAAABs"]
[Thu Jul 30 13:25:11.427743 2026] [security2:error] [pid 3221986:tid 3221986] [client 178.159.210.124:53848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtCp2oHJ1ea8ZjYv8l6egAAABs"]
[Thu Jul 30 13:25:11.726232 2026] [lsapi:warn] [pid 3237269:tid 3237269] [client 207.46.13.87:39796] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:25:11.859009 2026] [ssl:error] [pid 3221798:tid 3221798] (EAI 2)Name or service not known: [client 144.76.19.72:54198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:11.859042 2026] [ssl:error] [pid 3221798:tid 3221798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:11.913993 2026] [ssl:error] [pid 3233431:tid 3233431] (EAI 2)Name or service not known: [client 144.76.19.72:54208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:11.914027 2026] [ssl:error] [pid 3233431:tid 3233431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:13.423723 2026] [lsapi:warn] [pid 3237269:tid 3237269] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:14.968709 2026] [ssl:error] [pid 3235141:tid 3235141] (EAI 2)Name or service not known: [client 144.76.19.72:54210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:14.968745 2026] [ssl:error] [pid 3235141:tid 3235141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:14.980340 2026] [lsapi:warn] [pid 3233566:tid 3233566] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:15.023569 2026] [ssl:error] [pid 3237269:tid 3237269] (EAI 2)Name or service not known: [client 144.76.19.72:54212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:15.023604 2026] [ssl:error] [pid 3237269:tid 3237269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:15.667083 2026] [access_compat:error] [pid 3230985:tid 3230985] [client 106.222.248.251:11978] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:25:15.890639 2026] [ssl:error] [pid 3235141:tid 3235141] (70014)End of file found: [client 216.73.216.199:59756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:16.805248 2026] [authz_core:error] [pid 3233530:tid 3233530] [client 57.141.0.67:27798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:25:16.805876 2026] [authz_core:error] [pid 3233530:tid 3233530] [client 57.141.0.67:27798] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:25:17.214414 2026] [ssl:error] [pid 3221143:tid 3221143] (70014)End of file found: [client 216.73.216.199:49259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:17.701491 2026] [core:error] [pid 3210637:tid 3210637] (13)Permission denied: [client 216.73.216.199:25997] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:66/close_delay
[Thu Jul 30 13:25:17.791841 2026] [lsapi:warn] [pid 3235385:tid 3235385] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:18.077531 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:54220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:18.077564 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:18.129480 2026] [ssl:error] [pid 3230618:tid 3230618] (EAI 2)Name or service not known: [client 144.76.19.72:54224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:18.129519 2026] [ssl:error] [pid 3230618:tid 3230618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:19.922029 2026] [ssl:error] [pid 3210637:tid 3210637] (70014)End of file found: [client 216.73.216.199:25997] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:19.991729 2026] [security2:error] [pid 3237935:tid 3237935] [client 3.90.73.206:64747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amtCrzYOqSELRzvIhuIupQAAABw"]
[Thu Jul 30 13:25:21.206115 2026] [ssl:error] [pid 3235141:tid 3235141] (EAI 2)Name or service not known: [client 144.76.19.72:52886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:21.206154 2026] [ssl:error] [pid 3235141:tid 3235141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:21.259543 2026] [ssl:error] [pid 3202364:tid 3202364] (EAI 2)Name or service not known: [client 144.76.19.72:52888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:21.259592 2026] [ssl:error] [pid 3202364:tid 3202364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:21.745791 2026] [ssl:error] [pid 3237935:tid 3237935] (70014)End of file found: [client 216.73.216.199:36048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:24.228732 2026] [lsapi:warn] [pid 3233566:tid 3233566] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:24.312578 2026] [ssl:error] [pid 3228408:tid 3228408] (EAI 2)Name or service not known: [client 144.76.19.72:52892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:24.312611 2026] [ssl:error] [pid 3228408:tid 3228408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:24.364371 2026] [ssl:error] [pid 3221798:tid 3221798] (EAI 2)Name or service not known: [client 144.76.19.72:52908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:24.364402 2026] [ssl:error] [pid 3221798:tid 3221798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:24.471358 2026] [ssl:error] [pid 3233431:tid 3233431] (70014)End of file found: [client 216.73.216.199:41224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:25.268532 2026] [ssl:error] [pid 3233566:tid 3233566] (70014)End of file found: [client 216.73.216.199:2267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:25.746512 2026] [security2:error] [pid 3237269:tid 3237269] [client 3.89.176.255:38572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amtCtcVwDvHl5isEBKk_VQAAAAE"]
[Thu Jul 30 13:25:25.883118 2026] [lsapi:warn] [pid 3222991:tid 3222991] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:26.332045 2026] [access_compat:error] [pid 3231881:tid 3231881] [client 106.222.248.251:21697] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:25:26.491506 2026] [security2:error] [pid 3202364:tid 3202364] [client 54.157.84.74:49836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amtCtjJtTMo-yu--fesneAAAAA8"]
[Thu Jul 30 13:25:26.746534 2026] [core:error] [pid 3235414:tid 3235414] [client 57.141.0.29:51826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:26.746558 2026] [core:error] [pid 3235414:tid 3235414] [client 57.141.0.29:51826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:27.086457 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:41642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/mailbox_formats
[Thu Jul 30 13:25:27.420657 2026] [ssl:error] [pid 3230985:tid 3230985] (EAI 2)Name or service not known: [client 144.76.19.72:52924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:27.420687 2026] [ssl:error] [pid 3230985:tid 3230985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:27.479138 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:52940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:27.479166 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:27.793740 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:41642] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/bin/sudo
[Thu Jul 30 13:25:28.058749 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:56974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.production"] [unique_id "amtCuDJtTMo-yu--fesnfAAAAA8"]
[Thu Jul 30 13:25:28.058907 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:56974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.production"] [unique_id "amtCuDJtTMo-yu--fesnfAAAAA8"]
[Thu Jul 30 13:25:28.059388 2026] [core:error] [pid 3202364:tid 3202364] [client 5.231.108.52:56974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.059520 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:56974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.production"] [unique_id "amtCuDJtTMo-yu--fesnfAAAAA8"]
[Thu Jul 30 13:25:28.149879 2026] [security2:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57202] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.git/HEAD"] [unique_id "amtCuOqVEeVpY6U_PowztwAAACw"]
[Thu Jul 30 13:25:28.150094 2026] [security2:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.git/HEAD"] [unique_id "amtCuOqVEeVpY6U_PowztwAAACw"]
[Thu Jul 30 13:25:28.150617 2026] [core:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.150750 2026] [security2:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.git/HEAD"] [unique_id "amtCuOqVEeVpY6U_PowztwAAACw"]
[Thu Jul 30 13:25:28.157784 2026] [core:error] [pid 3235141:tid 3235141] [client 5.231.108.52:57212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.157804 2026] [core:error] [pid 3235141:tid 3235141] [client 5.231.108.52:57212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.166230 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtCuDJtTMo-yu--fesnfQAAAA8"]
[Thu Jul 30 13:25:28.166404 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtCuDJtTMo-yu--fesnfQAAAA8"]
[Thu Jul 30 13:25:28.166638 2026] [core:error] [pid 3234602:tid 3234602] [client 5.231.108.52:57210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.166657 2026] [core:error] [pid 3234602:tid 3234602] [client 5.231.108.52:57210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.166848 2026] [core:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.166977 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtCuDJtTMo-yu--fesnfQAAAA8"]
[Thu Jul 30 13:25:28.170320 2026] [cgi:error] [pid 3236695:tid 3236695] [client 5.231.108.52:57208] AH02812: stderr from /home/luntmxm/public_html/apennyforyourthoughts.org.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:25:28.170902 2026] [core:error] [pid 3236695:tid 3236695] [client 5.231.108.52:57208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.239603 2026] [lsapi:warn] [pid 3237269:tid 3237269] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:28.311677 2026] [security2:error] [pid 3236695:tid 3236695] [client 5.231.108.52:57204] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/api/.env"] [unique_id "amtCuN36hsFkAi3I6ju62gAAAAY"]
[Thu Jul 30 13:25:28.311863 2026] [security2:error] [pid 3236695:tid 3236695] [client 5.231.108.52:57204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/api/.env"] [unique_id "amtCuN36hsFkAi3I6ju62gAAAAY"]
[Thu Jul 30 13:25:28.312309 2026] [core:error] [pid 3236695:tid 3236695] [client 5.231.108.52:57204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.312441 2026] [security2:error] [pid 3236695:tid 3236695] [client 5.231.108.52:57204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/api/.env"] [unique_id "amtCuN36hsFkAi3I6ju62gAAAAY"]
[Thu Jul 30 13:25:28.313735 2026] [core:error] [pid 3234602:tid 3234602] [client 5.231.108.52:57216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.313754 2026] [core:error] [pid 3234602:tid 3234602] [client 5.231.108.52:57216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.315595 2026] [security2:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.local"] [unique_id "amtCuOqVEeVpY6U_PowzuAAAACw"]
[Thu Jul 30 13:25:28.315726 2026] [security2:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.local"] [unique_id "amtCuOqVEeVpY6U_PowzuAAAACw"]
[Thu Jul 30 13:25:28.316156 2026] [core:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.316280 2026] [security2:error] [pid 3230618:tid 3230618] [client 5.231.108.52:57218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.local"] [unique_id "amtCuOqVEeVpY6U_PowzuAAAACw"]
[Thu Jul 30 13:25:28.522104 2026] [security2:error] [pid 3231909:tid 3231909] [client 5.231.108.52:57220] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.development"] [unique_id "amtCuLbZERrnOWPtd2SLhAAAACQ"]
[Thu Jul 30 13:25:28.522300 2026] [security2:error] [pid 3231909:tid 3231909] [client 5.231.108.52:57220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.development"] [unique_id "amtCuLbZERrnOWPtd2SLhAAAACQ"]
[Thu Jul 30 13:25:28.522787 2026] [core:error] [pid 3231909:tid 3231909] [client 5.231.108.52:57220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.522931 2026] [security2:error] [pid 3231909:tid 3231909] [client 5.231.108.52:57220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.env.development"] [unique_id "amtCuLbZERrnOWPtd2SLhAAAACQ"]
[Thu Jul 30 13:25:28.523200 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57222] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/backend/.env"] [unique_id "amtCuDJtTMo-yu--fesnfwAAAA8"]
[Thu Jul 30 13:25:28.523339 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/backend/.env"] [unique_id "amtCuDJtTMo-yu--fesnfwAAAA8"]
[Thu Jul 30 13:25:28.523777 2026] [core:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.523902 2026] [security2:error] [pid 3202364:tid 3202364] [client 5.231.108.52:57222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/backend/.env"] [unique_id "amtCuDJtTMo-yu--fesnfwAAAA8"]
[Thu Jul 30 13:25:28.525265 2026] [core:error] [pid 3235141:tid 3235141] [client 5.231.108.52:57228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.525280 2026] [core:error] [pid 3235141:tid 3235141] [client 5.231.108.52:57228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.696754 2026] [cgi:error] [pid 3231909:tid 3231909] [client 185.147.157.18:50214] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:25:28.697058 2026] [core:error] [pid 3231909:tid 3231909] [client 185.147.157.18:50214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.700658 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:41642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:28.743371 2026] [security2:error] [pid 3235414:tid 3235414] [client 5.231.108.52:57206] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.git/config"] [unique_id "amtCuPEEXrNBa4IaQ-FGDgAAAA0"]
[Thu Jul 30 13:25:28.743612 2026] [security2:error] [pid 3235414:tid 3235414] [client 5.231.108.52:57206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.git/config"] [unique_id "amtCuPEEXrNBa4IaQ-FGDgAAAA0"]
[Thu Jul 30 13:25:28.744078 2026] [core:error] [pid 3235414:tid 3235414] [client 5.231.108.52:57206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:28.744199 2026] [security2:error] [pid 3235414:tid 3235414] [client 5.231.108.52:57206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "apennyforyourthoughts.sarahwiseman.co.uk"] [uri "/.git/config"] [unique_id "amtCuPEEXrNBa4IaQ-FGDgAAAA0"]
[Thu Jul 30 13:25:29.293288 2026] [cgi:error] [pid 3221143:tid 3221143] [client 185.147.157.18:13490] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:25:29.293661 2026] [core:error] [pid 3221143:tid 3221143] [client 185.147.157.18:13490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:29.900874 2026] [core:error] [pid 3237375:tid 3237375] [client 57.141.0.66:41974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:29.900900 2026] [core:error] [pid 3237375:tid 3237375] [client 57.141.0.66:41974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:30.459891 2026] [core:error] [pid 3238065:tid 3238065] [client 57.141.0.33:32932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:30.459921 2026] [core:error] [pid 3238065:tid 3238065] [client 57.141.0.33:32932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:30.535868 2026] [ssl:error] [pid 3202364:tid 3202364] (EAI 2)Name or service not known: [client 144.76.19.72:47906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:30.535899 2026] [ssl:error] [pid 3202364:tid 3202364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:30.569409 2026] [cgi:error] [pid 3235414:tid 3235414] [client 185.147.157.18:50220] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:25:30.569737 2026] [core:error] [pid 3235414:tid 3235414] [client 185.147.157.18:50220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:30.591771 2026] [ssl:error] [pid 3237269:tid 3237269] (EAI 2)Name or service not known: [client 144.76.19.72:47922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:30.591800 2026] [ssl:error] [pid 3237269:tid 3237269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:30.970274 2026] [cgi:error] [pid 3235415:tid 3235415] [client 185.147.157.18:50230] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:25:30.970590 2026] [core:error] [pid 3235415:tid 3235415] [client 185.147.157.18:50230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:31.109223 2026] [ssl:error] [pid 3231909:tid 3231909] (70014)End of file found: [client 216.73.216.199:18324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:33.211928 2026] [core:error] [pid 3233566:tid 3233566] (13)Permission denied: [client 216.73.216.199:17618] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/cred_jar/cpu_slabs
[Thu Jul 30 13:25:33.676447 2026] [ssl:error] [pid 3238581:tid 3238581] (EAI 2)Name or service not known: [client 144.76.19.72:47924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:33.676477 2026] [ssl:error] [pid 3238581:tid 3238581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:33.735522 2026] [ssl:error] [pid 3230985:tid 3230985] (EAI 2)Name or service not known: [client 144.76.19.72:47940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:33.735549 2026] [ssl:error] [pid 3230985:tid 3230985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:34.606376 2026] [core:error] [pid 3233432:tid 3233432] (13)Permission denied: [client 216.73.216.199:32803] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/irqbypass/holders/kvm/sections/__bug_table
[Thu Jul 30 13:25:35.254013 2026] [lsapi:warn] [pid 3231881:tid 3231881] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:35.488736 2026] [authz_core:error] [pid 3236285:tid 3236285] [client 57.141.0.16:21606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:25:35.489374 2026] [authz_core:error] [pid 3236285:tid 3236285] [client 57.141.0.16:21606] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:25:35.501789 2026] [core:error] [pid 3202364:tid 3202364] [client 66.249.66.168:64610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:35.501813 2026] [core:error] [pid 3202364:tid 3202364] [client 66.249.66.168:64610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:35.511153 2026] [core:error] [pid 3225760:tid 3225760] [client 66.249.66.167:55918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:35.511192 2026] [core:error] [pid 3225760:tid 3225760] [client 66.249.66.167:55918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:36.434451 2026] [core:error] [pid 3225760:tid 3225760] [client 57.141.0.17:46760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:36.434481 2026] [core:error] [pid 3225760:tid 3225760] [client 57.141.0.17:46760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:36.506567 2026] [lsapi:warn] [pid 3236695:tid 3236695] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:36.812214 2026] [ssl:error] [pid 3231881:tid 3231881] (EAI 2)Name or service not known: [client 144.76.19.72:47944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:36.812247 2026] [ssl:error] [pid 3231881:tid 3231881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:36.863644 2026] [ssl:error] [pid 3229414:tid 3229414] (EAI 2)Name or service not known: [client 144.76.19.72:47956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:36.863681 2026] [ssl:error] [pid 3229414:tid 3229414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:37.065657 2026] [access_compat:error] [pid 3230621:tid 3230621] [client 106.222.248.251:4478] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:25:38.688052 2026] [lsapi:warn] [pid 3222988:tid 3222988] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:39.241504 2026] [ssl:error] [pid 3233432:tid 3233432] (70014)End of file found: [client 216.73.216.199:32803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:39.920628 2026] [ssl:error] [pid 3202364:tid 3202364] (EAI 2)Name or service not known: [client 144.76.19.72:33040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:39.920660 2026] [ssl:error] [pid 3202364:tid 3202364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:39.973503 2026] [ssl:error] [pid 3237375:tid 3237375] (EAI 2)Name or service not known: [client 144.76.19.72:33054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:39.973538 2026] [ssl:error] [pid 3237375:tid 3237375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:42.554283 2026] [ssl:error] [pid 3233566:tid 3233566] (70014)End of file found: [client 216.73.216.199:17618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:43.016215 2026] [security2:error] [pid 3210637:tid 3210637] [client 51.68.236.64:31549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/robots.txt"] [unique_id "amtCxxXSVgE4KuGhYj9F-wAAADA"]
[Thu Jul 30 13:25:43.016503 2026] [access_compat:error] [pid 3210637:tid 3210637] [client 51.68.236.64:31549] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:25:43.028185 2026] [ssl:error] [pid 3230617:tid 3230617] (EAI 2)Name or service not known: [client 144.76.19.72:33070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:43.028216 2026] [ssl:error] [pid 3230617:tid 3230617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:43.081392 2026] [ssl:error] [pid 3236284:tid 3236284] (EAI 2)Name or service not known: [client 144.76.19.72:33080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:43.081429 2026] [ssl:error] [pid 3236284:tid 3236284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:43.758743 2026] [ssl:error] [pid 3233530:tid 3233530] (70014)End of file found: [client 216.73.216.199:37755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:44.999136 2026] [core:error] [pid 3222991:tid 3222991] [client 66.249.66.194:35159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:44.999171 2026] [core:error] [pid 3222991:tid 3222991] [client 66.249.66.194:35159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:45.268584 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:58313] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS2/flags
[Thu Jul 30 13:25:45.869301 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:58313] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/226:0/device/rescan
[Thu Jul 30 13:25:46.002662 2026] [authz_core:error] [pid 3222991:tid 3222991] [client 57.141.0.15:39636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:25:46.003292 2026] [authz_core:error] [pid 3222991:tid 3222991] [client 57.141.0.15:39636] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:25:46.115089 2026] [lsapi:warn] [pid 3230985:tid 3230985] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:46.136629 2026] [ssl:error] [pid 3233432:tid 3233432] (EAI 2)Name or service not known: [client 144.76.19.72:33090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:46.136662 2026] [ssl:error] [pid 3233432:tid 3233432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:46.187933 2026] [ssl:error] [pid 3221826:tid 3221826] (EAI 2)Name or service not known: [client 144.76.19.72:33094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:46.187967 2026] [ssl:error] [pid 3221826:tid 3221826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:47.117974 2026] [lsapi:warn] [pid 3210637:tid 3210637] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:47.678372 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:58313] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/chkserv.d/lfd
[Thu Jul 30 13:25:48.085624 2026] [access_compat:error] [pid 3213662:tid 3213662] [client 106.222.248.251:21171] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:25:49.181775 2026] [lsapi:warn] [pid 3230985:tid 3230985] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:49.241319 2026] [ssl:error] [pid 3237375:tid 3237375] (EAI 2)Name or service not known: [client 144.76.19.72:33110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:49.241353 2026] [ssl:error] [pid 3237375:tid 3237375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:49.297894 2026] [ssl:error] [pid 3233566:tid 3233566] (EAI 2)Name or service not known: [client 144.76.19.72:33116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:49.297935 2026] [ssl:error] [pid 3233566:tid 3233566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:49.642373 2026] [ssl:error] [pid 3225760:tid 3225760] (70014)End of file found: [client 216.73.216.199:58313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:51.745460 2026] [ssl:error] [pid 3233566:tid 3233566] (70014)End of file found: [client 216.73.216.199:60981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:52.166187 2026] [security2:error] [pid 3235415:tid 3235415] [client 185.191.171.9:28044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/why-are-there-two-names-on-richard-turpin's-gravestone"] [unique_id "amtC0IRdQbG8mldkFv3IcAAAABU"]
[Thu Jul 30 13:25:52.348524 2026] [ssl:error] [pid 3221798:tid 3221798] (70014)End of file found: [client 216.73.216.199:41068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:52.381696 2026] [ssl:error] [pid 3230501:tid 3230501] (EAI 2)Name or service not known: [client 144.76.19.72:38428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:52.381729 2026] [ssl:error] [pid 3230501:tid 3230501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:52.438541 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:38432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:52.438576 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:52.924951 2026] [security2:error] [pid 3235141:tid 3235141] [client 85.208.98.29:53966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/new-orleans-saints-nfl-jerseys-k.html"] [unique_id "amtC0OaCZtzI24sukCC9dwAAAAM"]
[Thu Jul 30 13:25:54.086510 2026] [core:error] [pid 3239504:tid 3239504] [client 66.249.64.170:39435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:54.086556 2026] [core:error] [pid 3239504:tid 3239504] [client 66.249.64.170:39435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:55.496610 2026] [ssl:error] [pid 3238065:tid 3238065] (EAI 2)Name or service not known: [client 144.76.19.72:38438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:55.496664 2026] [ssl:error] [pid 3238065:tid 3238065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:55.553899 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:38444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:55.553945 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:55.660032 2026] [ssl:error] [pid 3233431:tid 3233431] (70014)End of file found: [client 216.73.216.199:48239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:55.717298 2026] [core:error] [pid 3235141:tid 3235141] [client 57.141.0.37:56996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:55.717326 2026] [core:error] [pid 3235141:tid 3235141] [client 57.141.0.37:56996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:25:57.002646 2026] [lsapi:warn] [pid 3236285:tid 3236285] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:57.631390 2026] [core:error] [pid 3233566:tid 3233566] (13)Permission denied: [client 216.73.216.199:31796] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/store_user
[Thu Jul 30 13:25:57.968741 2026] [lsapi:warn] [pid 3239669:tid 3239669] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:58.118800 2026] [security2:error] [pid 3202364:tid 3202364] [client 175.178.110.121:37464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.webstersltd.com"] [uri "/"] [unique_id "amtC1jJtTMo-yu--fesnjwAAAA8"]
[Thu Jul 30 13:25:58.341675 2026] [security2:error] [pid 3222991:tid 3222991] [client 94.154.43.178:58350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "asclarkproperty.acthoroughbreds.com"] [uri "/.env"] [unique_id "amtC1gqSPR_CveMZNQIW4QAAAE4"]
[Thu Jul 30 13:25:58.341869 2026] [security2:error] [pid 3222991:tid 3222991] [client 94.154.43.178:58350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "asclarkproperty.acthoroughbreds.com"] [uri "/.env"] [unique_id "amtC1gqSPR_CveMZNQIW4QAAAE4"]
[Thu Jul 30 13:25:58.342110 2026] [security2:error] [pid 3222991:tid 3222991] [client 94.154.43.178:58350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "asclarkproperty.acthoroughbreds.com"] [uri "/.env"] [unique_id "amtC1gqSPR_CveMZNQIW4QAAAE4"]
[Thu Jul 30 13:25:58.432961 2026] [security2:error] [pid 3222991:tid 3222991] [client 114.119.146.111:58921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~102,18,103/request_format~html"] [unique_id "amtC1gqSPR_CveMZNQIW4gAAAE4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576972800/cat_ids~102,18/request_format~html
[Thu Jul 30 13:25:58.610407 2026] [ssl:error] [pid 3202364:tid 3202364] (EAI 2)Name or service not known: [client 144.76.19.72:38456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:58.610436 2026] [ssl:error] [pid 3202364:tid 3202364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:58.675146 2026] [ssl:error] [pid 3239667:tid 3239667] (70014)End of file found: [client 216.73.216.199:1672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:58.722358 2026] [ssl:error] [pid 3234602:tid 3234602] (EAI 2)Name or service not known: [client 144.76.19.72:38462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:25:58.722389 2026] [ssl:error] [pid 3234602:tid 3234602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:25:58.970055 2026] [ssl:error] [pid 3233566:tid 3233566] (70014)End of file found: [client 216.73.216.199:31796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:25:59.287202 2026] [authz_core:error] [pid 3225757:tid 3225757] [client 66.249.66.33:46499] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:25:59.289893 2026] [authz_core:error] [pid 3225757:tid 3225757] [client 66.249.66.33:46499] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:25:59.448202 2026] [access_compat:error] [pid 3230501:tid 3230501] [client 106.222.248.251:6295] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:25:59.592789 2026] [cgi:error] [pid 3230618:tid 3230618] [client 20.9.4.9:12968] AH02812: stderr from /home/davidebell/public_html/evilworkshop.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:25:59.668383 2026] [lsapi:warn] [pid 3239705:tid 3239705] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:25:59.833592 2026] [security2:error] [pid 3239711:tid 3239711] [client 114.119.146.111:58925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~102,18,103/request_format~html"] [unique_id "amtC1zj4rN-A_CV6etFOMQAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576972800/cat_ids~102,18/request_format~html
[Thu Jul 30 13:26:00.286459 2026] [security2:error] [pid 3229414:tid 3229414] [client 124.221.140.98:40038] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.com"] [uri "/"] [unique_id "amtC2JSG9mhhLSf6jOaGqAAAABk"]
[Thu Jul 30 13:26:00.289551 2026] [authz_core:error] [pid 3229414:tid 3229414] [client 124.221.140.98:40038] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:26:00.295585 2026] [authz_core:error] [pid 3229414:tid 3229414] [client 124.221.140.98:40038] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:26:01.780098 2026] [ssl:error] [pid 3233431:tid 3233431] (EAI 2)Name or service not known: [client 144.76.19.72:19012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:01.780131 2026] [ssl:error] [pid 3233431:tid 3233431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:01.836128 2026] [ssl:error] [pid 3237375:tid 3237375] (EAI 2)Name or service not known: [client 144.76.19.72:19022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:01.836162 2026] [ssl:error] [pid 3237375:tid 3237375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:01.987095 2026] [ssl:error] [pid 3239706:tid 3239706] (70014)End of file found: [client 216.73.216.199:56837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:03.222047 2026] [security2:error] [pid 3235415:tid 3235415] [client 175.178.110.121:59190] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.webstersltd.com"] [uri "/"] [unique_id "amtC24RdQbG8mldkFv3IdAAAABU"], referer: http://www.webstersltd.com
[Thu Jul 30 13:26:03.986367 2026] [ssl:error] [pid 3221143:tid 3221143] (70014)End of file found: [client 216.73.216.199:24690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:04.298196 2026] [core:error] [pid 3239667:tid 3239667] [client 66.249.66.67:52200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:04.298230 2026] [core:error] [pid 3239667:tid 3239667] [client 66.249.66.67:52200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:04.889519 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:19024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:04.889548 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:04.943944 2026] [ssl:error] [pid 3239711:tid 3239711] (EAI 2)Name or service not known: [client 144.76.19.72:19030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:04.943975 2026] [ssl:error] [pid 3239711:tid 3239711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:06.285428 2026] [security2:error] [pid 3235415:tid 3235415] [client 41.97.26.198:50266] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtC3oRdQbG8mldkFv3IdQAAABU"]
[Thu Jul 30 13:26:06.285474 2026] [security2:error] [pid 3235415:tid 3235415] [client 41.97.26.198:50266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtC3oRdQbG8mldkFv3IdQAAABU"]
[Thu Jul 30 13:26:06.285735 2026] [security2:error] [pid 3235415:tid 3235415] [client 41.97.26.198:50266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtC3oRdQbG8mldkFv3IdQAAABU"]
[Thu Jul 30 13:26:07.764871 2026] [lsapi:warn] [pid 3228323:tid 3228323] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:07.998286 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:19046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:07.998314 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:08.053838 2026] [ssl:error] [pid 3231909:tid 3231909] (EAI 2)Name or service not known: [client 144.76.19.72:19052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:08.053865 2026] [ssl:error] [pid 3231909:tid 3231909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:08.478744 2026] [lsapi:warn] [pid 3230501:tid 3230501] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:09.072731 2026] [access_compat:error] [pid 3239713:tid 3239713] [client 106.222.248.251:29652] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:26:09.552175 2026] [access_compat:error] [pid 3239670:tid 3239670] [client 45.158.164.139:43296] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:26:09.884622 2026] [security2:error] [pid 3239706:tid 3239706] [client 189.37.77.116:7916] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtC4UfvUiRX0c0NiQ4TMQAAADM"]
[Thu Jul 30 13:26:09.884672 2026] [security2:error] [pid 3239706:tid 3239706] [client 189.37.77.116:7916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtC4UfvUiRX0c0NiQ4TMQAAADM"]
[Thu Jul 30 13:26:09.884938 2026] [security2:error] [pid 3239706:tid 3239706] [client 189.37.77.116:7916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtC4UfvUiRX0c0NiQ4TMQAAADM"]
[Thu Jul 30 13:26:10.117582 2026] [ssl:error] [pid 3225757:tid 3225757] (70014)End of file found: [client 216.73.216.199:13774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:10.181346 2026] [lsapi:warn] [pid 3239712:tid 3239712] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:11.110028 2026] [ssl:error] [pid 3239706:tid 3239706] (EAI 2)Name or service not known: [client 144.76.19.72:23050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:11.110075 2026] [ssl:error] [pid 3239706:tid 3239706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:11.163587 2026] [ssl:error] [pid 3239670:tid 3239670] (EAI 2)Name or service not known: [client 144.76.19.72:23064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:11.163620 2026] [ssl:error] [pid 3239670:tid 3239670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:12.015344 2026] [security2:error] [pid 3238369:tid 3238369] [client 85.208.96.194:11824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1988.0/prev_next,next.html"] [unique_id "amtC5G-PsYu0gMjYg7EkzgAAACA"]
[Thu Jul 30 13:26:12.495118 2026] [authz_core:error] [pid 3213662:tid 3213662] [client 57.141.0.12:21766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:26:12.495740 2026] [authz_core:error] [pid 3213662:tid 3213662] [client 57.141.0.12:21766] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:26:12.519721 2026] [ssl:error] [pid 3239638:tid 3239638] (70014)End of file found: [client 216.73.216.199:58881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:13.920439 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 66.249.66.34:63769] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:26:13.923108 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 66.249.66.34:63769] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:26:14.218736 2026] [ssl:error] [pid 3221143:tid 3221143] (EAI 2)Name or service not known: [client 144.76.19.72:23080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:14.218768 2026] [ssl:error] [pid 3221143:tid 3221143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:14.275919 2026] [ssl:error] [pid 3235415:tid 3235415] (EAI 2)Name or service not known: [client 144.76.19.72:23086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:14.275959 2026] [ssl:error] [pid 3235415:tid 3235415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:14.671752 2026] [security2:error] [pid 3237375:tid 3237375] [client 39.58.185.85:58160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtC5lnrpL5sbA5Alm-BawAAABo"]
[Thu Jul 30 13:26:14.671803 2026] [security2:error] [pid 3237375:tid 3237375] [client 39.58.185.85:58160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtC5lnrpL5sbA5Alm-BawAAABo"]
[Thu Jul 30 13:26:14.672061 2026] [security2:error] [pid 3237375:tid 3237375] [client 39.58.185.85:58160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtC5lnrpL5sbA5Alm-BawAAABo"]
[Thu Jul 30 13:26:14.927909 2026] [ssl:error] [pid 3239601:tid 3239601] (70014)End of file found: [client 216.73.216.199:40822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:15.428653 2026] [core:error] [pid 3238369:tid 3238369] (13)Permission denied: [client 216.73.216.199:54315] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/serio/drivers_probe
[Thu Jul 30 13:26:15.530344 2026] [ssl:error] [pid 3238369:tid 3238369] (70014)End of file found: [client 216.73.216.199:54315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:15.934342 2026] [security2:error] [pid 3237935:tid 3237935] [client 85.208.96.208:11308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9317.0/prev_next,prev.html"] [unique_id "amtC5zYOqSELRzvIhuIutgAAABw"]
[Thu Jul 30 13:26:17.332650 2026] [ssl:error] [pid 3239637:tid 3239637] (EAI 2)Name or service not known: [client 144.76.19.72:23096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:17.332685 2026] [ssl:error] [pid 3239637:tid 3239637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:17.388620 2026] [ssl:error] [pid 3238581:tid 3238581] (EAI 2)Name or service not known: [client 144.76.19.72:23112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:17.388650 2026] [ssl:error] [pid 3238581:tid 3238581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:18.236679 2026] [ssl:error] [pid 3225757:tid 3225757] (70014)End of file found: [client 216.73.216.199:47315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:18.582929 2026] [lsapi:warn] [pid 3230617:tid 3230617] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:18.892982 2026] [lsapi:warn] [pid 3234602:tid 3234602] [client 145.14.10.39:60186] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:26:18.893022 2026] [lsapi:warn] [pid 3234602:tid 3234602] [client 145.14.10.39:60186] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:26:19.116981 2026] [core:error] [pid 3239708:tid 3239708] (13)Permission denied: [client 216.73.216.199:47159] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_groupinfo_1k/cache_dma
[Thu Jul 30 13:26:19.263562 2026] [lsapi:warn] [pid 3239706:tid 3239706] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:19.387172 2026] [proxy_http:error] [pid 3230617:tid 3230617] (70008)Partial results are valid but processing is incomplete: [client 66.175.211.202:36132] AH01110: error reading response
[Thu Jul 30 13:26:19.778544 2026] [access_compat:error] [pid 3233432:tid 3233432] [client 106.222.248.251:17528] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:26:19.831809 2026] [ssl:error] [pid 3230618:tid 3230618] (70014)End of file found: [client 216.73.216.199:36954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:20.440941 2026] [ssl:error] [pid 3221184:tid 3221184] (EAI 2)Name or service not known: [client 144.76.19.72:54684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:20.440997 2026] [ssl:error] [pid 3221184:tid 3221184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:20.493799 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:54690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:20.493830 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:20.644564 2026] [lsapi:warn] [pid 3238581:tid 3238581] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:21.475280 2026] [ssl:error] [pid 3239708:tid 3239708] (70014)End of file found: [client 216.73.216.199:47159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:21.640371 2026] [ssl:error] [pid 3230617:tid 3230617] (70014)End of file found: [client 216.73.216.199:7023] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:23.547189 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:54698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:23.547228 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:23.604797 2026] [ssl:error] [pid 3239667:tid 3239667] (EAI 2)Name or service not known: [client 144.76.19.72:54712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:23.604836 2026] [ssl:error] [pid 3239667:tid 3239667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:25.166189 2026] [ssl:error] [pid 3237375:tid 3237375] (70014)End of file found: [client 216.73.216.199:47731] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:26.678317 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:54714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:26.678363 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:26.734712 2026] [ssl:error] [pid 3230621:tid 3230621] (EAI 2)Name or service not known: [client 144.76.19.72:54726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:26.734744 2026] [ssl:error] [pid 3230621:tid 3230621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:26.984690 2026] [core:error] [pid 3240755:tid 3240755] (13)Permission denied: [client 216.73.216.199:34436] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS2/close_delay
[Thu Jul 30 13:26:27.091711 2026] [ssl:error] [pid 3240755:tid 3240755] (70014)End of file found: [client 216.73.216.199:34436] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:27.588674 2026] [core:error] [pid 3230617:tid 3230617] (13)Permission denied: [client 216.73.216.199:19573] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS2/close_delay
[Thu Jul 30 13:26:27.694470 2026] [ssl:error] [pid 3230617:tid 3230617] (70014)End of file found: [client 216.73.216.199:19573] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:28.022151 2026] [core:error] [pid 3233530:tid 3233530] [client 66.249.66.8:56605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:28.022181 2026] [core:error] [pid 3233530:tid 3233530] [client 66.249.66.8:56605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:28.136043 2026] [authz_core:error] [pid 3233397:tid 3233397] [client 57.141.0.44:54528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:26:28.136687 2026] [authz_core:error] [pid 3233397:tid 3233397] [client 57.141.0.44:54528] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:26:28.535391 2026] [proxy_http:error] [pid 3240900:tid 3240900] (70008)Partial results are valid but processing is incomplete: [client 66.175.211.202:26348] AH01110: error reading response
[Thu Jul 30 13:26:29.406236 2026] [lsapi:warn] [pid 3233397:tid 3233397] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:29.788096 2026] [ssl:error] [pid 3225760:tid 3225760] (EAI 2)Name or service not known: [client 144.76.19.72:56320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:29.788131 2026] [ssl:error] [pid 3225760:tid 3225760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:29.877321 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:56330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:29.877356 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:30.298888 2026] [access_compat:error] [pid 3233431:tid 3233431] [client 106.222.248.251:10141] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:26:30.389445 2026] [lsapi:warn] [pid 3225760:tid 3225760] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:31.007121 2026] [ssl:error] [pid 3233432:tid 3233432] (70014)End of file found: [client 216.73.216.199:45218] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:31.170965 2026] [lsapi:warn] [pid 3239601:tid 3239601] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:31.704784 2026] [proxy_http:error] [pid 3225760:tid 3225760] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:54838] AH01110: error reading response
[Thu Jul 30 13:26:31.800028 2026] [proxy_http:error] [pid 3230618:tid 3230618] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:34849] AH01110: error reading response
[Thu Jul 30 13:26:32.033372 2026] [security2:error] [pid 3225760:tid 3225760] [client 43.131.243.61:44354] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/"] [unique_id "amtC-JExmLYXCVjdgiuCOQAAACs"]
[Thu Jul 30 13:26:32.935985 2026] [ssl:error] [pid 3241642:tid 3241642] (EAI 2)Name or service not known: [client 144.76.19.72:56340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:32.936030 2026] [ssl:error] [pid 3241642:tid 3241642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:32.992726 2026] [ssl:error] [pid 3230617:tid 3230617] (EAI 2)Name or service not known: [client 144.76.19.72:56346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:32.992753 2026] [ssl:error] [pid 3230617:tid 3230617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:33.100843 2026] [core:error] [pid 3240755:tid 3240755] [client 57.141.0.44:63118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:33.100867 2026] [core:error] [pid 3240755:tid 3240755] [client 57.141.0.44:63118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:34.231907 2026] [security2:error] [pid 3235415:tid 3235415] [client 43.131.243.61:45374] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtC-oRdQbG8mldkFv3IegAAABU"], referer: http://theislipgarage.co.uk
[Thu Jul 30 13:26:35.822721 2026] [ssl:error] [pid 3241641:tid 3241641] (70014)End of file found: [client 216.73.216.199:2992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:36.044516 2026] [ssl:error] [pid 3239706:tid 3239706] (EAI 2)Name or service not known: [client 144.76.19.72:56348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:36.044548 2026] [ssl:error] [pid 3239706:tid 3239706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:36.099537 2026] [ssl:error] [pid 3237935:tid 3237935] (EAI 2)Name or service not known: [client 144.76.19.72:56362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:36.099583 2026] [ssl:error] [pid 3237935:tid 3237935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:37.326286 2026] [core:error] [pid 3234602:tid 3234602] (13)Permission denied: [client 216.73.216.199:9572] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/kvm/sections/__verbose
[Thu Jul 30 13:26:39.154507 2026] [ssl:error] [pid 3225760:tid 3225760] (EAI 2)Name or service not known: [client 144.76.19.72:56364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:39.154537 2026] [ssl:error] [pid 3225760:tid 3225760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:39.209059 2026] [ssl:error] [pid 3239667:tid 3239667] (EAI 2)Name or service not known: [client 144.76.19.72:56368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:39.209099 2026] [ssl:error] [pid 3239667:tid 3239667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:39.717651 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 57.141.0.44:63140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:26:39.718300 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 57.141.0.44:63140] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:26:39.740450 2026] [ssl:error] [pid 3234602:tid 3234602] (70014)End of file found: [client 216.73.216.199:9572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:40.025060 2026] [lsapi:warn] [pid 3233397:tid 3233397] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:40.240238 2026] [ssl:error] [pid 3221184:tid 3221184] (70014)End of file found: [client 216.73.216.199:9006] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:40.834912 2026] [access_compat:error] [pid 3225760:tid 3225760] [client 106.222.248.251:21077] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:26:41.127798 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:41.551457 2026] [core:error] [pid 3239712:tid 3239712] (13)Permission denied: [client 216.73.216.199:12721] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:60/subsystem/ttyS0/uartclk
[Thu Jul 30 13:26:41.701488 2026] [lsapi:warn] [pid 3239667:tid 3239667] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:41.852743 2026] [ssl:error] [pid 3239712:tid 3239712] (70014)End of file found: [client 216.73.216.199:12721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:42.265269 2026] [ssl:error] [pid 3238581:tid 3238581] (EAI 2)Name or service not known: [client 144.76.19.72:19296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:42.265296 2026] [ssl:error] [pid 3238581:tid 3238581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:42.322580 2026] [ssl:error] [pid 3241641:tid 3241641] (EAI 2)Name or service not known: [client 144.76.19.72:19298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:42.322628 2026] [ssl:error] [pid 3241641:tid 3241641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:43.012382 2026] [core:error] [pid 3241641:tid 3241641] [client 104.210.140.143:26955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:43.012409 2026] [core:error] [pid 3241641:tid 3241641] [client 104.210.140.143:26955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:45.378206 2026] [ssl:error] [pid 3241641:tid 3241641] (EAI 2)Name or service not known: [client 144.76.19.72:19314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:45.378239 2026] [ssl:error] [pid 3241641:tid 3241641] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:45.434770 2026] [ssl:error] [pid 3235414:tid 3235414] (EAI 2)Name or service not known: [client 144.76.19.72:19322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:45.434802 2026] [ssl:error] [pid 3235414:tid 3235414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:45.465497 2026] [ssl:error] [pid 3239711:tid 3239711] (5)Input/output error: [client 216.73.216.199:18115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:46.063179 2026] [core:error] [pid 3241641:tid 3241641] (13)Permission denied: [client 216.73.216.199:42553] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/sections/__verbose
[Thu Jul 30 13:26:48.487974 2026] [ssl:error] [pid 3221143:tid 3221143] (EAI 2)Name or service not known: [client 144.76.19.72:19332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:48.488009 2026] [ssl:error] [pid 3221143:tid 3221143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:48.540674 2026] [ssl:error] [pid 3237375:tid 3237375] (EAI 2)Name or service not known: [client 144.76.19.72:19344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:48.540699 2026] [ssl:error] [pid 3237375:tid 3237375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:49.931446 2026] [security2:error] [pid 3237269:tid 3237269] [client 101.33.80.42:56686] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amtDCcVwDvHl5isEBKk_cwAAAAE"]
[Thu Jul 30 13:26:50.743336 2026] [ssl:error] [pid 3241641:tid 3241641] (70014)End of file found: [client 216.73.216.199:42553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:51.123144 2026] [lsapi:warn] [pid 3239708:tid 3239708] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:51.538646 2026] [access_compat:error] [pid 3237269:tid 3237269] [client 106.222.248.251:19004] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:26:51.622995 2026] [ssl:error] [pid 3238065:tid 3238065] (EAI 2)Name or service not known: [client 144.76.19.72:23448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:51.623027 2026] [ssl:error] [pid 3238065:tid 3238065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:51.646240 2026] [ssl:error] [pid 3235415:tid 3235415] (70014)End of file found: [client 216.73.216.199:21484] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:51.678911 2026] [ssl:error] [pid 3236285:tid 3236285] (EAI 2)Name or service not known: [client 144.76.19.72:23462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:51.678939 2026] [ssl:error] [pid 3236285:tid 3236285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:51.777011 2026] [lsapi:warn] [pid 3231881:tid 3231881] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:51.951216 2026] [core:error] [pid 3225757:tid 3225757] (13)Permission denied: [client 216.73.216.199:32758] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/device/driver/bind
[Thu Jul 30 13:26:52.177459 2026] [core:error] [pid 3213662:tid 3213662] [client 57.141.0.64:41262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:52.177498 2026] [core:error] [pid 3213662:tid 3213662] [client 57.141.0.64:41262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:26:52.186158 2026] [lsapi:warn] [pid 3238065:tid 3238065] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:26:52.251846 2026] [ssl:error] [pid 3225757:tid 3225757] (70014)End of file found: [client 216.73.216.199:32758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:52.289055 2026] [security2:error] [pid 3233432:tid 3233432] [client 51.68.236.73:29701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tripodhome.co.uk"] [uri "/robots.txt"] [unique_id "amtDDJHljSxCyCI-l8GO7AAAABM"]
[Thu Jul 30 13:26:52.823691 2026] [security2:error] [pid 3239708:tid 3239708] [client 185.191.171.12:29194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/michigan-state-police-scanner-live"] [unique_id "amtDDBosYR8oPXXEIem4SgAAADQ"]
[Thu Jul 30 13:26:54.754122 2026] [ssl:error] [pid 3239667:tid 3239667] (EAI 2)Name or service not known: [client 144.76.19.72:23466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:54.754158 2026] [ssl:error] [pid 3239667:tid 3239667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:54.825187 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:23482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:54.825226 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:56.049783 2026] [ssl:error] [pid 3239713:tid 3239713] (70014)End of file found: [client 216.73.216.199:18941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:57.067567 2026] [ssl:error] [pid 3243012:tid 3243012] (70014)End of file found: [client 216.73.216.199:14692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:57.883110 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:23484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:57.883139 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:57.936040 2026] [ssl:error] [pid 3237269:tid 3237269] (EAI 2)Name or service not known: [client 144.76.19.72:23492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:26:57.936083 2026] [ssl:error] [pid 3237269:tid 3237269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:26:57.971092 2026] [ssl:error] [pid 3230621:tid 3230621] (70014)End of file found: [client 216.73.216.199:1354] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:26:58.350843 2026] [security2:error] [pid 3239505:tid 3239505] [client 85.208.98.23:55740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/robots.txt"] [unique_id "amtDEkuzL7KgdLKPaPnJHQAAABs"]
[Thu Jul 30 13:26:58.432864 2026] [authz_core:error] [pid 3233566:tid 3233566] [client 57.141.0.59:22758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:26:58.433505 2026] [authz_core:error] [pid 3233566:tid 3233566] [client 57.141.0.59:22758] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:27:01.008685 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:33684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:01.008724 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:01.064398 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:33690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:01.064432 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:01.645420 2026] [authz_core:error] [pid 3221143:tid 3221143] [client 66.249.66.33:41936] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:27:01.648115 2026] [authz_core:error] [pid 3221143:tid 3221143] [client 66.249.66.33:41936] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:27:02.119075 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 106.222.248.251:1360] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:27:02.128581 2026] [lsapi:warn] [pid 3222991:tid 3222991] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:02.198473 2026] [ssl:error] [pid 3210637:tid 3210637] (70014)End of file found: [client 216.73.216.199:58055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:02.563884 2026] [lsapi:warn] [pid 3221798:tid 3221798] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:02.627884 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:02.686606 2026] [ssl:error] [pid 3230501:tid 3230501] (70014)End of file found: [client 216.73.216.199:36323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:02.852956 2026] [core:error] [pid 3241641:tid 3241641] [client 66.249.66.68:38706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:02.852984 2026] [core:error] [pid 3241641:tid 3241641] [client 66.249.66.68:38706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:02.854509 2026] [core:error] [pid 3239709:tid 3239709] [client 66.249.66.169:36181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:02.854534 2026] [core:error] [pid 3239709:tid 3239709] [client 66.249.66.169:36181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:02.873723 2026] [core:error] [pid 3239457:tid 3239457] [client 66.249.64.170:63737] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:02.873743 2026] [core:error] [pid 3239457:tid 3239457] [client 66.249.64.170:63737] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:03.290064 2026] [ssl:error] [pid 3241641:tid 3241641] (70014)End of file found: [client 216.73.216.199:28471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:04.148123 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:33698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:04.148146 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:04.204517 2026] [ssl:error] [pid 3221184:tid 3221184] (EAI 2)Name or service not known: [client 144.76.19.72:33708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:04.204548 2026] [ssl:error] [pid 3221184:tid 3221184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:06.097961 2026] [core:error] [pid 3243506:tid 3243506] [client 57.141.0.65:62884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:06.098009 2026] [core:error] [pid 3243506:tid 3243506] [client 57.141.0.65:62884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:07.260501 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:33724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:07.260536 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:07.313539 2026] [ssl:error] [pid 3233432:tid 3233432] (EAI 2)Name or service not known: [client 144.76.19.72:33734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:07.313562 2026] [ssl:error] [pid 3233432:tid 3233432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:07.436097 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 103.200.22.140:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:07.534681 2026] [ssl:error] [pid 3210637:tid 3210637] (70014)End of file found: [client 216.73.216.199:41414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:08.911892 2026] [security2:error] [pid 3231881:tid 3231881] [client 85.208.98.29:38902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/nike-sb-stefan-janoski-max-trainers-in-black-631303-010-k.html"] [unique_id "amtDHJPfCV0mNkSWKDYctgAAABg"]
[Thu Jul 30 13:27:09.798824 2026] [core:error] [pid 3233530:tid 3233530] (13)Permission denied: [client 216.73.216.199:44386] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:53/subsystem/ttyS0/line
[Thu Jul 30 13:27:10.099118 2026] [ssl:error] [pid 3233530:tid 3233530] (70014)End of file found: [client 216.73.216.199:44386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:10.368219 2026] [ssl:error] [pid 3233432:tid 3233432] (EAI 2)Name or service not known: [client 144.76.19.72:59676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:10.368257 2026] [ssl:error] [pid 3233432:tid 3233432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:10.421251 2026] [ssl:error] [pid 3235415:tid 3235415] (EAI 2)Name or service not known: [client 144.76.19.72:59682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:10.421284 2026] [ssl:error] [pid 3235415:tid 3235415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:10.492173 2026] [security2:error] [pid 3237375:tid 3237375] [client 37.125.210.32:54947] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDHlnrpL5sbA5Alm-BrQAAABo"]
[Thu Jul 30 13:27:10.492224 2026] [security2:error] [pid 3237375:tid 3237375] [client 37.125.210.32:54947] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDHlnrpL5sbA5Alm-BrQAAABo"]
[Thu Jul 30 13:27:10.492516 2026] [security2:error] [pid 3237375:tid 3237375] [client 37.125.210.32:54947] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDHlnrpL5sbA5Alm-BrQAAABo"]
[Thu Jul 30 13:27:11.020520 2026] [core:error] [pid 3240755:tid 3240755] (13)Permission denied: [client 216.73.216.199:49279] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/subsystem/ttyS0/line
[Thu Jul 30 13:27:11.322918 2026] [core:error] [pid 3240755:tid 3240755] (13)Permission denied: [client 216.73.216.199:49279] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:1/subsystem/ttyS0/line
[Thu Jul 30 13:27:11.624317 2026] [core:error] [pid 3240755:tid 3240755] (13)Permission denied: [client 216.73.216.199:49279] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS0/line
[Thu Jul 30 13:27:12.741637 2026] [access_compat:error] [pid 3233432:tid 3233432] [client 106.222.248.251:11447] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:27:12.890951 2026] [lsapi:warn] [pid 3241642:tid 3241642] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:13.098304 2026] [lsapi:warn] [pid 3233431:tid 3233431] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:13.170869 2026] [ssl:error] [pid 3240755:tid 3240755] (70014)End of file found: [client 216.73.216.199:49279] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:13.233151 2026] [lsapi:warn] [pid 3210637:tid 3210637] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:13.237184 2026] [access_compat:error] [pid 3213662:tid 3213662] [client 45.158.164.139:60538] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:27:13.480150 2026] [ssl:error] [pid 3230621:tid 3230621] (EAI 2)Name or service not known: [client 144.76.19.72:59686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:13.480181 2026] [ssl:error] [pid 3230621:tid 3230621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:13.532927 2026] [ssl:error] [pid 3239667:tid 3239667] (EAI 2)Name or service not known: [client 144.76.19.72:59700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:13.532960 2026] [ssl:error] [pid 3239667:tid 3239667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:13.777615 2026] [core:error] [pid 3241583:tid 3241583] [client 57.141.0.15:40426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:13.777643 2026] [core:error] [pid 3241583:tid 3241583] [client 57.141.0.15:40426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:14.323854 2026] [security2:error] [pid 3239711:tid 3239711] [client 105.113.57.170:33245] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDIjj4rN-A_CV6etFOSwAAADg"]
[Thu Jul 30 13:27:14.323910 2026] [security2:error] [pid 3239711:tid 3239711] [client 105.113.57.170:33245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDIjj4rN-A_CV6etFOSwAAADg"]
[Thu Jul 30 13:27:14.324175 2026] [security2:error] [pid 3239711:tid 3239711] [client 105.113.57.170:33245] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDIjj4rN-A_CV6etFOSwAAADg"]
[Thu Jul 30 13:27:15.581351 2026] [ssl:error] [pid 3221143:tid 3221143] (70014)End of file found: [client 216.73.216.199:17629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:16.064041 2026] [lsapi:warn] [pid 3236695:tid 3236695] [client 51.198.210.39:64452] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 13:27:16.064097 2026] [lsapi:warn] [pid 3236695:tid 3236695] [client 51.198.210.39:64452] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 13:27:16.585142 2026] [ssl:error] [pid 3231881:tid 3231881] (EAI 2)Name or service not known: [client 144.76.19.72:59714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:16.585172 2026] [ssl:error] [pid 3231881:tid 3231881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:16.641733 2026] [ssl:error] [pid 3241642:tid 3241642] (EAI 2)Name or service not known: [client 144.76.19.72:59724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:16.641765 2026] [ssl:error] [pid 3241642:tid 3241642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:17.104170 2026] [ssl:error] [pid 3225757:tid 3225757] (70014)End of file found: [client 216.73.216.199:34695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:17.558846 2026] [authz_core:error] [pid 3238065:tid 3238065] [client 57.141.0.52:52548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:27:17.559498 2026] [authz_core:error] [pid 3238065:tid 3238065] [client 57.141.0.52:52548] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:27:18.818126 2026] [security2:error] [pid 3233431:tid 3233431] [client 1.12.70.96:54038] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtDJkRFprvFmm_613DViQAAAAk"]
[Thu Jul 30 13:27:19.203202 2026] [security2:error] [pid 3240755:tid 3240755] [client 216.73.216.199:3317] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/etc.conf"] [unique_id "amtDJ5KwjoL9HtRt1UJlUAAAAA4"]
[Thu Jul 30 13:27:19.203503 2026] [security2:error] [pid 3240755:tid 3240755] [client 216.73.216.199:3317] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/etc.conf"] [unique_id "amtDJ5KwjoL9HtRt1UJlUAAAAA4"]
[Thu Jul 30 13:27:19.203743 2026] [security2:error] [pid 3240755:tid 3240755] [client 216.73.216.199:3317] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/etc.conf"] [unique_id "amtDJ5KwjoL9HtRt1UJlUAAAAA4"]
[Thu Jul 30 13:27:19.700801 2026] [ssl:error] [pid 3244065:tid 3244065] (EAI 2)Name or service not known: [client 144.76.19.72:48792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:19.700849 2026] [ssl:error] [pid 3244065:tid 3244065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:19.758383 2026] [ssl:error] [pid 3244066:tid 3244066] (EAI 2)Name or service not known: [client 144.76.19.72:48800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:19.758428 2026] [ssl:error] [pid 3244066:tid 3244066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:21.264456 2026] [security2:error] [pid 3239708:tid 3239708] [client 178.73.99.164:3179] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDKRosYR8oPXXEIem4VAAAADQ"]
[Thu Jul 30 13:27:21.264521 2026] [security2:error] [pid 3239708:tid 3239708] [client 178.73.99.164:3179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDKRosYR8oPXXEIem4VAAAADQ"]
[Thu Jul 30 13:27:21.264811 2026] [security2:error] [pid 3239708:tid 3239708] [client 178.73.99.164:3179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDKRosYR8oPXXEIem4VAAAADQ"]
[Thu Jul 30 13:27:21.616292 2026] [core:error] [pid 3240755:tid 3240755] (13)Permission denied: [client 216.73.216.199:3317] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/pnp/drivers_probe
[Thu Jul 30 13:27:22.276731 2026] [security2:error] [pid 3235414:tid 3235414] [client 114.119.146.111:23323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~102,103,19/request_format~html"] [unique_id "amtDKvEEXrNBa4IaQ-FGbwAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576972800/cat_ids~102,103/request_format~html
[Thu Jul 30 13:27:22.519374 2026] [core:error] [pid 3240755:tid 3240755] (13)Permission denied: [client 216.73.216.199:3317] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/subsystem/ttyS0/flags
[Thu Jul 30 13:27:22.572339 2026] [security2:error] [pid 3241641:tid 3241641] [client 162.55.254.149:47444] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtDKt-vEHe9z5j9TDF-QgAAABE"]
[Thu Jul 30 13:27:22.816240 2026] [ssl:error] [pid 3210637:tid 3210637] (EAI 2)Name or service not known: [client 144.76.19.72:48814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:22.816269 2026] [ssl:error] [pid 3210637:tid 3210637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:22.873608 2026] [ssl:error] [pid 3233432:tid 3233432] (EAI 2)Name or service not known: [client 144.76.19.72:48820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:22.873635 2026] [ssl:error] [pid 3233432:tid 3233432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:23.385466 2026] [security2:error] [pid 3228323:tid 3228323] [client 1.12.70.96:58074] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtDK_o2dhPCCtNJzgbKNAAAAAU"], referer: http://www.rogersbarbershopltd.co.uk
[Thu Jul 30 13:27:23.464451 2026] [access_compat:error] [pid 3239712:tid 3239712] [client 106.222.248.251:16045] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:27:23.512408 2026] [security2:error] [pid 3238580:tid 3238580] [client 114.119.146.111:23339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576972800/cat_ids~102,103,19/request_format~html"] [unique_id "amtDK1s3_Kf3V9UBeVtEZgAAACI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576972800/cat_ids~102,103/request_format~html
[Thu Jul 30 13:27:23.580223 2026] [lsapi:warn] [pid 3221798:tid 3221798] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:23.697471 2026] [lsapi:warn] [pid 3230618:tid 3230618] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:23.728443 2026] [ssl:error] [pid 3240755:tid 3240755] (70014)End of file found: [client 216.73.216.199:3317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:23.905198 2026] [lsapi:warn] [pid 3241641:tid 3241641] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:24.329714 2026] [core:error] [pid 3238581:tid 3238581] (13)Permission denied: [client 216.73.216.199:11325] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty15/subsystem/ttyS2/close_delay
[Thu Jul 30 13:27:25.096956 2026] [core:error] [pid 3239713:tid 3239713] [client 57.141.0.28:62136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:25.096987 2026] [core:error] [pid 3239713:tid 3239713] [client 57.141.0.28:62136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:25.930713 2026] [ssl:error] [pid 3238065:tid 3238065] (EAI 2)Name or service not known: [client 144.76.19.72:48830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:25.930759 2026] [ssl:error] [pid 3238065:tid 3238065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:25.988632 2026] [ssl:error] [pid 3221798:tid 3221798] (EAI 2)Name or service not known: [client 144.76.19.72:48840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:25.988670 2026] [ssl:error] [pid 3221798:tid 3221798] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:26.321804 2026] [security2:error] [pid 3235415:tid 3235415] [client 43.156.36.169:54220] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "elhassanartist.com"] [uri "/"] [unique_id "amtDLoRdQbG8mldkFv3IhwAAABU"]
[Thu Jul 30 13:27:27.353730 2026] [ssl:error] [pid 3238581:tid 3238581] (70014)End of file found: [client 216.73.216.199:11325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:27.857532 2026] [ssl:error] [pid 3240900:tid 3240900] (70014)End of file found: [client 216.73.216.199:18556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:28.959052 2026] [security2:error] [pid 3241583:tid 3241583] [client 147.135.213.32:34414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.localhero.org.uk"] [uri "/robots.txt"] [unique_id "amtDMKmdLgZARgQQdAuCqQAAAAs"]
[Thu Jul 30 13:27:29.044516 2026] [ssl:error] [pid 3237375:tid 3237375] (EAI 2)Name or service not known: [client 144.76.19.72:48842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:29.044542 2026] [ssl:error] [pid 3237375:tid 3237375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:29.095950 2026] [ssl:error] [pid 3236695:tid 3236695] (EAI 2)Name or service not known: [client 144.76.19.72:48846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:29.095989 2026] [ssl:error] [pid 3236695:tid 3236695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:29.334409 2026] [security2:error] [pid 3239601:tid 3239601] [client 147.135.213.32:46408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.localhero.org.uk"] [uri "/403.shtml"] [unique_id "amtDMSt5p4So3MalFU9TQAAAAB4"]
[Thu Jul 30 13:27:30.645307 2026] [security2:error] [pid 3235414:tid 3235414] [client 147.135.213.32:34416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.localhero.org.uk"] [uri "/"] [unique_id "amtDMvEEXrNBa4IaQ-FGcwAAAA0"]
[Thu Jul 30 13:27:30.970624 2026] [ssl:error] [pid 3239667:tid 3239667] (70014)End of file found: [client 216.73.216.199:8423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:32.169290 2026] [ssl:error] [pid 3243506:tid 3243506] (EAI 2)Name or service not known: [client 144.76.19.72:45698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:32.169336 2026] [ssl:error] [pid 3243506:tid 3243506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:32.225931 2026] [security2:error] [pid 3222991:tid 3222991] [client 147.135.213.32:46414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.localhero.org.uk"] [uri "/403.shtml"] [unique_id "amtDNAqSPR_CveMZNQIXAQAAAE4"]
[Thu Jul 30 13:27:32.227156 2026] [ssl:error] [pid 3239711:tid 3239711] (EAI 2)Name or service not known: [client 144.76.19.72:45702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:32.227176 2026] [ssl:error] [pid 3239711:tid 3239711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:32.777331 2026] [ssl:error] [pid 3239712:tid 3239712] (70014)End of file found: [client 216.73.216.199:11012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:33.687444 2026] [ssl:error] [pid 3244602:tid 3244602] (70014)End of file found: [client 216.73.216.199:6905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:34.053190 2026] [lsapi:warn] [pid 3243012:tid 3243012] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:34.093768 2026] [access_compat:error] [pid 3235414:tid 3235414] [client 106.222.248.251:10420] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:27:34.567820 2026] [lsapi:warn] [pid 3233530:tid 3233530] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:34.598116 2026] [lsapi:warn] [pid 3222991:tid 3222991] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:35.280414 2026] [ssl:error] [pid 3244066:tid 3244066] (EAI 2)Name or service not known: [client 144.76.19.72:45716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:35.280444 2026] [ssl:error] [pid 3244066:tid 3244066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:35.332611 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:45728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:35.332638 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:36.868639 2026] [security2:error] [pid 3222991:tid 3222991] [client 66.175.211.202:56492] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "303"] [id "920280"] [rev "2"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/"] [unique_id "amtDOAqSPR_CveMZNQIXAwAAAE4"]
[Thu Jul 30 13:27:37.063352 2026] [ssl:error] [pid 3233432:tid 3233432] [client 66.175.211.202:37874] AH02031: Hostname cpanel.prosperon.co.uk provided via SNI, but no hostname provided in HTTP request
[Thu Jul 30 13:27:37.826764 2026] [core:error] [pid 3210637:tid 3210637] [client 57.141.0.17:58222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:37.826795 2026] [core:error] [pid 3210637:tid 3210637] [client 57.141.0.17:58222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:38.218548 2026] [ssl:error] [pid 3244020:tid 3244020] (70014)End of file found: [client 216.73.216.199:30035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:38.388814 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:45742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:38.388845 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:38.445972 2026] [ssl:error] [pid 3239712:tid 3239712] (EAI 2)Name or service not known: [client 144.76.19.72:45746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:38.446025 2026] [ssl:error] [pid 3239712:tid 3239712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:38.803519 2026] [ssl:error] [pid 3210637:tid 3210637] (70014)End of file found: [client 216.73.216.199:6375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:39.811268 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:22921] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysconfig/rhn/jwt.token
[Thu Jul 30 13:27:41.502785 2026] [ssl:error] [pid 3238581:tid 3238581] (EAI 2)Name or service not known: [client 144.76.19.72:34120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:41.502821 2026] [ssl:error] [pid 3238581:tid 3238581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:41.560645 2026] [ssl:error] [pid 3225760:tid 3225760] (EAI 2)Name or service not known: [client 144.76.19.72:34134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:41.560670 2026] [ssl:error] [pid 3225760:tid 3225760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:44.346344 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:22921] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS0/flags
[Thu Jul 30 13:27:44.517185 2026] [lsapi:warn] [pid 3231881:tid 3231881] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:44.613862 2026] [ssl:error] [pid 3235414:tid 3235414] (EAI 2)Name or service not known: [client 144.76.19.72:34138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:44.613901 2026] [ssl:error] [pid 3235414:tid 3235414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:44.647592 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:22921] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/custom_divisor
[Thu Jul 30 13:27:44.670015 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:34148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:44.670044 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:44.724632 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 106.222.248.251:30107] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:27:45.231887 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:45.248988 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:22921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:45.353660 2026] [core:error] [pid 3235414:tid 3235414] [client 57.141.0.22:24072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:45.353691 2026] [core:error] [pid 3235414:tid 3235414] [client 57.141.0.22:24072] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:45.361293 2026] [lsapi:warn] [pid 3221798:tid 3221798] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:46.481193 2026] [ssl:error] [pid 3235414:tid 3235414] (70014)End of file found: [client 216.73.216.199:60374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:47.723595 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:34158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:47.723627 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:47.781119 2026] [ssl:error] [pid 3244021:tid 3244021] (EAI 2)Name or service not known: [client 144.76.19.72:34164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:47.781156 2026] [ssl:error] [pid 3244021:tid 3244021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:49.201249 2026] [ssl:error] [pid 3221184:tid 3221184] (70014)End of file found: [client 216.73.216.199:53046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:49.339849 2026] [cgi:error] [pid 3244021:tid 3244021] [client 66.132.186.173:2562] AH02812: stderr from /home/nssun/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://ns-sun.com:80/cgi-bin
[Thu Jul 30 13:27:50.626697 2026] [ssl:error] [pid 3238065:tid 3238065] (70014)End of file found: [client 216.73.216.199:28846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:50.835592 2026] [ssl:error] [pid 3245139:tid 3245139] (EAI 2)Name or service not known: [client 144.76.19.72:35172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:50.835642 2026] [ssl:error] [pid 3245139:tid 3245139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:50.889187 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:35176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:50.889230 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:52.245766 2026] [core:crit] [pid 3245139:tid 3245139] (13)Permission denied: [client 216.73.216.199:31735] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/systemd/ask-password-block/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/systemd/ask-password-block/' is executable
[Thu Jul 30 13:27:52.248079 2026] [core:crit] [pid 3245139:tid 3245139] (13)Permission denied: [client 216.73.216.199:31735] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/systemd/unit-root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/systemd/unit-root/' is executable
[Thu Jul 30 13:27:52.266720 2026] [core:crit] [pid 3245139:tid 3245139] (13)Permission denied: [client 216.73.216.199:31735] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/systemd/inaccessible/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/systemd/inaccessible/' is executable
[Thu Jul 30 13:27:52.579117 2026] [authz_core:error] [pid 3239706:tid 3239706] [client 20.48.234.177:39177] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 13:27:52.839565 2026] [ssl:error] [pid 3245139:tid 3245139] (70014)End of file found: [client 216.73.216.199:31735] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:53.324153 2026] [security2:error] [pid 3244064:tid 3244064] [client 85.208.96.212:43588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/satori-engineered-stone-sill-installation"] [unique_id "amtDSfzu26m0AIRqMws23AAAACE"]
[Thu Jul 30 13:27:53.945523 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:35190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:53.945552 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:54.001808 2026] [ssl:error] [pid 3244064:tid 3244064] (EAI 2)Name or service not known: [client 144.76.19.72:35194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:54.001845 2026] [ssl:error] [pid 3244064:tid 3244064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:54.026369 2026] [security2:error] [pid 3222991:tid 3222991] [client 185.191.171.17:28938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3709.0/prev_next,next.html"] [unique_id "amtDSgqSPR_CveMZNQIXCwAAAE4"]
[Thu Jul 30 13:27:54.542823 2026] [ssl:error] [pid 3243461:tid 3243461] (70014)End of file found: [client 216.73.216.199:7920] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:55.001216 2026] [lsapi:warn] [pid 3244064:tid 3244064] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:55.554618 2026] [access_compat:error] [pid 3221184:tid 3221184] [client 106.222.248.251:11835] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:27:55.677934 2026] [core:error] [pid 3239708:tid 3239708] [client 57.141.0.7:55284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:55.677959 2026] [core:error] [pid 3239708:tid 3239708] [client 57.141.0.7:55284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:27:56.025381 2026] [lsapi:warn] [pid 3244982:tid 3244982] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:56.192121 2026] [lsapi:warn] [pid 3240900:tid 3240900] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:27:56.464849 2026] [ssl:error] [pid 3244020:tid 3244020] (70014)End of file found: [client 216.73.216.199:51158] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:27:57.058144 2026] [ssl:error] [pid 3225760:tid 3225760] (EAI 2)Name or service not known: [client 144.76.19.72:35198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:57.058180 2026] [ssl:error] [pid 3225760:tid 3225760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:57.109721 2026] [ssl:error] [pid 3221143:tid 3221143] (EAI 2)Name or service not known: [client 144.76.19.72:35208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:27:57.109753 2026] [ssl:error] [pid 3221143:tid 3221143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:27:58.884948 2026] [lsapi:error] [pid 3235414:tid 3235414] [client 216.73.216.199:31609] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Interface "Plesk\\Wappspector\\MatchResult\\MatchResultInterface" not found in /opt/cpanel/ea-wappspector/src/MatchResult/MatchResult.php:12\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/MatchResult.php on line 12\n
[Thu Jul 30 13:27:59.371760 2026] [ssl:error] [pid 3231881:tid 3231881] (70014)End of file found: [client 216.73.216.199:9055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:00.069593 2026] [core:error] [pid 3222991:tid 3222991] [client 66.249.66.167:38321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:00.069626 2026] [core:error] [pid 3222991:tid 3222991] [client 66.249.66.167:38321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:00.077168 2026] [ssl:error] [pid 3235414:tid 3235414] (70014)End of file found: [client 216.73.216.199:9484] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:00.166184 2026] [ssl:error] [pid 3237269:tid 3237269] (EAI 2)Name or service not known: [client 144.76.19.72:35898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:00.166211 2026] [ssl:error] [pid 3237269:tid 3237269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:00.220631 2026] [ssl:error] [pid 3235415:tid 3235415] (EAI 2)Name or service not known: [client 144.76.19.72:35902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:00.220655 2026] [ssl:error] [pid 3235415:tid 3235415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:03.308315 2026] [ssl:error] [pid 3243506:tid 3243506] (EAI 2)Name or service not known: [client 144.76.19.72:35912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:03.308351 2026] [ssl:error] [pid 3243506:tid 3243506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:03.360256 2026] [ssl:error] [pid 3221143:tid 3221143] (EAI 2)Name or service not known: [client 144.76.19.72:35922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:03.360288 2026] [ssl:error] [pid 3221143:tid 3221143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:05.432631 2026] [lsapi:warn] [pid 3240900:tid 3240900] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:06.069594 2026] [access_compat:error] [pid 3239667:tid 3239667] [client 106.222.248.251:25816] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:28:06.336834 2026] [security2:error] [pid 3233566:tid 3233566] [client 47.77.239.179:28397] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDVoks_wxXqYCNkktEWQAAAB8"]
[Thu Jul 30 13:28:06.336883 2026] [security2:error] [pid 3233566:tid 3233566] [client 47.77.239.179:28397] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDVoks_wxXqYCNkktEWQAAAB8"]
[Thu Jul 30 13:28:06.337163 2026] [security2:error] [pid 3233566:tid 3233566] [client 47.77.239.179:28397] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDVoks_wxXqYCNkktEWQAAAB8"]
[Thu Jul 30 13:28:06.522150 2026] [ssl:error] [pid 3236695:tid 3236695] (EAI 2)Name or service not known: [client 144.76.19.72:35938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:06.522212 2026] [ssl:error] [pid 3236695:tid 3236695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:06.575566 2026] [ssl:error] [pid 3240900:tid 3240900] (EAI 2)Name or service not known: [client 144.76.19.72:35954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:06.575626 2026] [ssl:error] [pid 3240900:tid 3240900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:06.710262 2026] [ssl:error] [pid 3244982:tid 3244982] (70014)End of file found: [client 216.73.216.199:13533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:06.725125 2026] [lsapi:warn] [pid 3245089:tid 3245089] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:07.040183 2026] [lsapi:warn] [pid 3233432:tid 3233432] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:07.282026 2026] [core:error] [pid 3240900:tid 3240900] (13)Permission denied: [client 216.73.216.199:46408] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS2/custom_divisor
[Thu Jul 30 13:28:07.617532 2026] [ssl:error] [pid 3239711:tid 3239711] (70014)End of file found: [client 216.73.216.199:54582] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:08.240566 2026] [security2:error] [pid 3243461:tid 3243461] [client 49.228.51.35:57192] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDWICoZ5gAvKblAkqSMgAAAAM"]
[Thu Jul 30 13:28:08.240614 2026] [security2:error] [pid 3243461:tid 3243461] [client 49.228.51.35:57192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDWICoZ5gAvKblAkqSMgAAAAM"]
[Thu Jul 30 13:28:08.240849 2026] [security2:error] [pid 3243461:tid 3243461] [client 49.228.51.35:57192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDWICoZ5gAvKblAkqSMgAAAAM"]
[Thu Jul 30 13:28:09.675127 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:50500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:09.675162 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:09.731252 2026] [ssl:error] [pid 3241583:tid 3241583] (EAI 2)Name or service not known: [client 144.76.19.72:50514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:09.731301 2026] [ssl:error] [pid 3241583:tid 3241583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:10.181497 2026] [security2:error] [pid 3231881:tid 3231881] [client 86.246.38.88:55438] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDWpPfCV0mNkSWKDYcyAAAABg"]
[Thu Jul 30 13:28:10.181550 2026] [security2:error] [pid 3231881:tid 3231881] [client 86.246.38.88:55438] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDWpPfCV0mNkSWKDYcyAAAABg"]
[Thu Jul 30 13:28:10.181817 2026] [security2:error] [pid 3231881:tid 3231881] [client 86.246.38.88:55438] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDWpPfCV0mNkSWKDYcyAAAABg"]
[Thu Jul 30 13:28:10.448738 2026] [core:error] [pid 3241583:tid 3241583] [client 57.141.0.17:42534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:10.448770 2026] [core:error] [pid 3241583:tid 3241583] [client 57.141.0.17:42534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:12.319278 2026] [ssl:error] [pid 3240900:tid 3240900] (70014)End of file found: [client 216.73.216.199:46408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:12.519548 2026] [lsapi:warn] [pid 3244982:tid 3244982] [client 45.158.164.139:37404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:12.519593 2026] [lsapi:warn] [pid 3244982:tid 3244982] [client 45.158.164.139:37404] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:12.545611 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:25020] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:66/uartclk
[Thu Jul 30 13:28:12.593556 2026] [lsapi:warn] [pid 3221184:tid 3221184] [client 46.62.146.98:38924] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:12.593599 2026] [lsapi:warn] [pid 3221184:tid 3221184] [client 46.62.146.98:38924] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:12.597642 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 46.62.146.98:38942] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:12.597684 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 46.62.146.98:38942] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:12.680492 2026] [lsapi:warn] [pid 3221143:tid 3221143] [client 45.158.164.139:37414] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:12.680536 2026] [lsapi:warn] [pid 3221143:tid 3221143] [client 45.158.164.139:37414] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:12.688882 2026] [lsapi:warn] [pid 3246221:tid 3246221] [client 46.62.146.98:38932] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:12.688921 2026] [lsapi:warn] [pid 3246221:tid 3246221] [client 46.62.146.98:38932] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:12.785165 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 46.62.146.98:38966] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:12.785206 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 46.62.146.98:38966] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:12.837200 2026] [ssl:error] [pid 3221184:tid 3221184] (EAI 2)Name or service not known: [client 144.76.19.72:50516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:12.837226 2026] [ssl:error] [pid 3221184:tid 3221184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:12.898162 2026] [ssl:error] [pid 3239711:tid 3239711] (EAI 2)Name or service not known: [client 144.76.19.72:50524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:12.898194 2026] [ssl:error] [pid 3239711:tid 3239711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:13.302629 2026] [lsapi:warn] [pid 3241642:tid 3241642] [client 45.158.164.139:37436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.302676 2026] [lsapi:warn] [pid 3241642:tid 3241642] [client 45.158.164.139:37436] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:13.305185 2026] [lsapi:warn] [pid 3233432:tid 3233432] [client 46.62.146.98:38980] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.305224 2026] [lsapi:warn] [pid 3233432:tid 3233432] [client 46.62.146.98:38980] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:13.324711 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 45.158.164.139:37450] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.324748 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 45.158.164.139:37450] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:13.326389 2026] [lsapi:warn] [pid 3246218:tid 3246218] [client 46.62.146.98:38912] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.326421 2026] [lsapi:warn] [pid 3246218:tid 3246218] [client 46.62.146.98:38912] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:13.327455 2026] [lsapi:warn] [pid 3233397:tid 3233397] [client 45.158.164.139:37456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.327500 2026] [lsapi:warn] [pid 3233397:tid 3233397] [client 45.158.164.139:37456] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:13.329240 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 46.62.146.98:38996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.329260 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 46.62.146.98:38996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:13.529593 2026] [lsapi:warn] [pid 3210637:tid 3210637] [client 46.62.146.98:38990] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.529647 2026] [lsapi:warn] [pid 3210637:tid 3210637] [client 46.62.146.98:38990] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:13.551433 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 46.62.146.98:38966] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:13.551477 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 46.62.146.98:38966] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:14.957252 2026] [ssl:error] [pid 3233432:tid 3233432] (70014)End of file found: [client 216.73.216.199:27368] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:15.955561 2026] [ssl:error] [pid 3245089:tid 3245089] (EAI 2)Name or service not known: [client 144.76.19.72:50536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:15.955606 2026] [ssl:error] [pid 3245089:tid 3245089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:16.011790 2026] [ssl:error] [pid 3221184:tid 3221184] (EAI 2)Name or service not known: [client 144.76.19.72:50552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:16.011824 2026] [ssl:error] [pid 3221184:tid 3221184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:16.041787 2026] [lsapi:warn] [pid 3238065:tid 3238065] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:16.530913 2026] [access_compat:error] [pid 3244982:tid 3244982] [client 106.222.248.251:16338] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:28:17.011457 2026] [access_compat:error] [pid 3239708:tid 3239708] [client 45.158.164.139:37478] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:28:17.903227 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:19.067646 2026] [ssl:error] [pid 3245089:tid 3245089] (EAI 2)Name or service not known: [client 144.76.19.72:50562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:19.067681 2026] [ssl:error] [pid 3245089:tid 3245089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:19.122696 2026] [ssl:error] [pid 3246219:tid 3246219] (EAI 2)Name or service not known: [client 144.76.19.72:50566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:19.122733 2026] [ssl:error] [pid 3246219:tid 3246219] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:19.772995 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:25020] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/hid_magicmouse/uevent
[Thu Jul 30 13:28:20.503274 2026] [security2:error] [pid 3233431:tid 3233431] [client 167.114.47.75:44938] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtDZERFprvFmm_613DVmwAAAAk"]
[Thu Jul 30 13:28:20.561561 2026] [security2:error] [pid 3225760:tid 3225760] [client 216.73.216.199:25020] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/mariadb.conf"] [unique_id "amtDZJExmLYXCVjdgiuCbAAAACs"]
[Thu Jul 30 13:28:20.561870 2026] [security2:error] [pid 3225760:tid 3225760] [client 216.73.216.199:25020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/mariadb.conf"] [unique_id "amtDZJExmLYXCVjdgiuCbAAAACs"]
[Thu Jul 30 13:28:20.562105 2026] [security2:error] [pid 3225760:tid 3225760] [client 216.73.216.199:25020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/mariadb.conf"] [unique_id "amtDZJExmLYXCVjdgiuCbAAAACs"]
[Thu Jul 30 13:28:20.766186 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 66.249.66.33:64868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:28:20.769361 2026] [authz_core:error] [pid 3233432:tid 3233432] [client 66.249.66.33:64868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:28:21.178820 2026] [core:error] [pid 3239637:tid 3239637] [client 57.141.0.40:24806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:21.178849 2026] [core:error] [pid 3239637:tid 3239637] [client 57.141.0.40:24806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:21.232952 2026] [core:error] [pid 3230501:tid 3230501] [client 57.141.0.19:55034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:21.232980 2026] [core:error] [pid 3230501:tid 3230501] [client 57.141.0.19:55034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:22.184622 2026] [core:error] [pid 3225760:tid 3225760] (13)Permission denied: [client 216.73.216.199:25020] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS0/line
[Thu Jul 30 13:28:22.195525 2026] [ssl:error] [pid 3233431:tid 3233431] (EAI 2)Name or service not known: [client 144.76.19.72:52212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:22.195554 2026] [ssl:error] [pid 3233431:tid 3233431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:22.247181 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:52224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:22.247245 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:22.485919 2026] [ssl:error] [pid 3225760:tid 3225760] (70014)End of file found: [client 216.73.216.199:25020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:22.943194 2026] [lsapi:warn] [pid 3245140:tid 3245140] [client 31.98.57.214:33979] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:28:22.943239 2026] [lsapi:warn] [pid 3245140:tid 3245140] [client 31.98.57.214:33979] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:28:25.303476 2026] [ssl:error] [pid 3241583:tid 3241583] (EAI 2)Name or service not known: [client 144.76.19.72:52226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:25.303519 2026] [ssl:error] [pid 3241583:tid 3241583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:25.359403 2026] [ssl:error] [pid 3240900:tid 3240900] (EAI 2)Name or service not known: [client 144.76.19.72:52232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:25.359439 2026] [ssl:error] [pid 3240900:tid 3240900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:25.791925 2026] [core:error] [pid 3237269:tid 3237269] (13)Permission denied: [client 216.73.216.199:31959] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS2/line
[Thu Jul 30 13:28:26.394097 2026] [ssl:error] [pid 3237269:tid 3237269] (70014)End of file found: [client 216.73.216.199:31959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:26.486729 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:26.996931 2026] [ssl:error] [pid 3233397:tid 3233397] (70014)End of file found: [client 216.73.216.199:9609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:27.349708 2026] [access_compat:error] [pid 3246224:tid 3246224] [client 106.222.248.251:28410] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:28:28.416675 2026] [ssl:error] [pid 3247029:tid 3247029] (EAI 2)Name or service not known: [client 144.76.19.72:52246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:28.416720 2026] [ssl:error] [pid 3247029:tid 3247029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:28.470204 2026] [ssl:error] [pid 3245140:tid 3245140] (EAI 2)Name or service not known: [client 144.76.19.72:52254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:28.470237 2026] [ssl:error] [pid 3245140:tid 3245140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:28.603156 2026] [lsapi:warn] [pid 3239667:tid 3239667] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:29.020843 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.167:45444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:29.020885 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.167:45444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:29.025326 2026] [core:error] [pid 3245089:tid 3245089] [client 66.249.66.167:58480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:29.025348 2026] [core:error] [pid 3245089:tid 3245089] [client 66.249.66.167:58480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:29.110825 2026] [core:error] [pid 3244063:tid 3244063] (13)Permission denied: [client 216.73.216.199:38195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu4/driver/uevent
[Thu Jul 30 13:28:30.718286 2026] [authz_core:error] [pid 3239706:tid 3239706] [client 20.48.234.177:39177] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/l10n/error_log
[Thu Jul 30 13:28:31.527474 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:46180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:31.527515 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:31.581518 2026] [ssl:error] [pid 3247029:tid 3247029] (EAI 2)Name or service not known: [client 144.76.19.72:46186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:31.581551 2026] [ssl:error] [pid 3247029:tid 3247029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:32.046748 2026] [access_compat:error] [pid 3238580:tid 3238580] [client 20.104.16.169:30147] AH01797: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:28:32.678433 2026] [authz_core:error] [pid 3239706:tid 3239706] [client 20.48.234.177:39177] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/assets/error_log
[Thu Jul 30 13:28:32.723805 2026] [core:error] [pid 3244063:tid 3244063] (13)Permission denied: [client 216.73.216.199:38195] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS2/custom_divisor
[Thu Jul 30 13:28:33.383543 2026] [core:error] [pid 3230501:tid 3230501] [client 57.141.0.36:58882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:33.383573 2026] [core:error] [pid 3230501:tid 3230501] [client 57.141.0.36:58882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:33.627212 2026] [ssl:error] [pid 3244063:tid 3244063] (70014)End of file found: [client 216.73.216.199:38195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:34.130602 2026] [ssl:error] [pid 3244982:tid 3244982] (70014)End of file found: [client 216.73.216.199:41237] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:34.536655 2026] [authz_core:error] [pid 3221143:tid 3221143] [client 66.249.66.33:38702] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:28:34.539334 2026] [authz_core:error] [pid 3221143:tid 3221143] [client 66.249.66.33:38702] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:28:34.637616 2026] [ssl:error] [pid 3246102:tid 3246102] (EAI 2)Name or service not known: [client 144.76.19.72:46200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:34.637652 2026] [ssl:error] [pid 3246102:tid 3246102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:34.690899 2026] [ssl:error] [pid 3238065:tid 3238065] (EAI 2)Name or service not known: [client 144.76.19.72:46208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:34.690930 2026] [ssl:error] [pid 3238065:tid 3238065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:35.733682 2026] [ssl:error] [pid 3246397:tid 3246397] (70014)End of file found: [client 216.73.216.199:15325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:36.797225 2026] [security2:error] [pid 3246221:tid 3246221] [client 47.128.122.49:40960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.com"] [uri "/robots.txt"] [unique_id "amtDdFd8YkIa6cyu4_cajQAAACQ"]
[Thu Jul 30 13:28:37.035967 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:37.723725 2026] [security2:error] [pid 3246159:tid 3246159] [client 23.154.136.143:15084] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.nativespace-narvi.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtDdVWWZWkvWQG8FLN13QAAAAQ"]
[Thu Jul 30 13:28:37.724018 2026] [security2:error] [pid 3246159:tid 3246159] [client 23.154.136.143:15084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nativespace-narvi.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtDdVWWZWkvWQG8FLN13QAAAAQ"]
[Thu Jul 30 13:28:37.724239 2026] [security2:error] [pid 3246159:tid 3246159] [client 23.154.136.143:15084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.nativespace-narvi.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtDdVWWZWkvWQG8FLN13QAAAAQ"]
[Thu Jul 30 13:28:37.771341 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:46212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:37.771385 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:37.812652 2026] [security2:error] [pid 3246159:tid 3246159] [client 23.154.136.143:15084] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.nativespace-narvi.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtDdVWWZWkvWQG8FLN13gAAAAQ"]
[Thu Jul 30 13:28:37.812929 2026] [security2:error] [pid 3246159:tid 3246159] [client 23.154.136.143:15084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nativespace-narvi.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtDdVWWZWkvWQG8FLN13gAAAAQ"]
[Thu Jul 30 13:28:37.813128 2026] [security2:error] [pid 3246159:tid 3246159] [client 23.154.136.143:15084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.nativespace-narvi.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtDdVWWZWkvWQG8FLN13gAAAAQ"]
[Thu Jul 30 13:28:37.826977 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:46224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:37.827003 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:38.025116 2026] [core:error] [pid 3236695:tid 3236695] [client 66.249.66.8:51089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:38.025144 2026] [core:error] [pid 3236695:tid 3236695] [client 66.249.66.8:51089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:38.770637 2026] [access_compat:error] [pid 3236695:tid 3236695] [client 106.222.248.251:23555] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:28:38.913593 2026] [ssl:error] [pid 3239601:tid 3239601] (70014)End of file found: [client 216.73.216.199:26895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:39.335754 2026] [cgi:error] [pid 3246102:tid 3246102] [client 20.48.234.177:39255] AH02812: stderr from /home/jgqawffu/public_html/positivelydisruptive.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:28:39.483715 2026] [lsapi:warn] [pid 3221143:tid 3221143] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:39.702469 2026] [ssl:error] [pid 3244602:tid 3244602] (70014)End of file found: [client 216.73.216.199:61835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:40.883258 2026] [ssl:error] [pid 3244982:tid 3244982] (EAI 2)Name or service not known: [client 144.76.19.72:19630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:40.883320 2026] [ssl:error] [pid 3244982:tid 3244982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:40.948974 2026] [ssl:error] [pid 3244066:tid 3244066] (EAI 2)Name or service not known: [client 144.76.19.72:19646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:40.949011 2026] [ssl:error] [pid 3244066:tid 3244066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:44.003049 2026] [ssl:error] [pid 3244063:tid 3244063] (EAI 2)Name or service not known: [client 144.76.19.72:19650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:44.003102 2026] [ssl:error] [pid 3244063:tid 3244063] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:44.056369 2026] [ssl:error] [pid 3238580:tid 3238580] (EAI 2)Name or service not known: [client 144.76.19.72:19660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:44.056400 2026] [ssl:error] [pid 3238580:tid 3238580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:44.714595 2026] [core:error] [pid 3246397:tid 3246397] (13)Permission denied: [client 216.73.216.199:48364] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty37/subsystem/ttyS0/close_delay
[Thu Jul 30 13:28:45.391783 2026] [cgi:error] [pid 3239713:tid 3239713] [client 20.104.22.47:26593] AH02812: stderr from /home/websters/public_html/bengltd/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:28:46.017888 2026] [ssl:error] [pid 3246397:tid 3246397] (70014)End of file found: [client 216.73.216.199:48364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:46.106671 2026] [core:error] [pid 3238065:tid 3238065] [client 66.249.64.170:41949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:46.106703 2026] [core:error] [pid 3238065:tid 3238065] [client 66.249.64.170:41949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:46.275309 2026] [security2:error] [pid 3225760:tid 3225760] [client 114.119.135.136:25505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576627200/request_format~html/cat_ids~103"] [unique_id "amtDfpExmLYXCVjdgiuCegAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E18-12-2019
[Thu Jul 30 13:28:46.615350 2026] [ssl:error] [pid 3238065:tid 3238065] (70014)End of file found: [client 216.73.216.199:65377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:47.122503 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:19672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:47.122536 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:47.174674 2026] [ssl:error] [pid 3247975:tid 3247975] (EAI 2)Name or service not known: [client 144.76.19.72:19688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:47.174728 2026] [ssl:error] [pid 3247975:tid 3247975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:47.486664 2026] [security2:error] [pid 3247975:tid 3247975] [client 114.119.135.136:25509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576627200/request_format~html/cat_ids~103"] [unique_id "amtDf-SQvA16EQG-AO-w8gAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E18-12-2019
[Thu Jul 30 13:28:47.578089 2026] [lsapi:warn] [pid 3233530:tid 3233530] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:47.824437 2026] [ssl:error] [pid 3238580:tid 3238580] (70014)End of file found: [client 216.73.216.199:54667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:48.943983 2026] [authz_core:error] [pid 3233530:tid 3233530] [client 66.249.66.33:36111] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:28:48.946635 2026] [authz_core:error] [pid 3233530:tid 3233530] [client 66.249.66.33:36111] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:28:50.155005 2026] [lsapi:warn] [pid 3248115:tid 3248115] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:50.231996 2026] [ssl:error] [pid 3248117:tid 3248117] (EAI 2)Name or service not known: [client 144.76.19.72:27274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:50.232046 2026] [ssl:error] [pid 3248117:tid 3248117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:50.282040 2026] [access_compat:error] [pid 3247975:tid 3247975] [client 106.222.248.251:28090] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:28:50.289160 2026] [ssl:error] [pid 3248118:tid 3248118] (EAI 2)Name or service not known: [client 144.76.19.72:27276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:50.289205 2026] [ssl:error] [pid 3248118:tid 3248118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:51.337148 2026] [ssl:error] [pid 3246221:tid 3246221] (70014)End of file found: [client 216.73.216.199:41913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:51.936795 2026] [ssl:error] [pid 3239638:tid 3239638] (70014)End of file found: [client 216.73.216.199:54262] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:53.345562 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:27290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:53.345610 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:53.398338 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:27298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:53.398366 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:53.728188 2026] [security2:error] [pid 3239712:tid 3239712] [client 185.191.171.3:30234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/don-overcash-political-affiliation"] [unique_id "amtDhTudYdBMNvRO-e-nmAAAADk"]
[Thu Jul 30 13:28:55.086472 2026] [ssl:error] [pid 3238065:tid 3238065] (70014)End of file found: [client 216.73.216.199:21882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:56.039591 2026] [core:error] [pid 3233397:tid 3233397] [client 57.141.0.24:25596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:56.039624 2026] [core:error] [pid 3233397:tid 3233397] [client 57.141.0.24:25596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:28:56.270785 2026] [lsapi:warn] [pid 3236695:tid 3236695] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:56.449792 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:27302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:56.449820 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:56.509570 2026] [ssl:error] [pid 3246397:tid 3246397] (EAI 2)Name or service not known: [client 144.76.19.72:27318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:56.509601 2026] [ssl:error] [pid 3246397:tid 3246397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:57.796932 2026] [ssl:error] [pid 3246221:tid 3246221] (70014)End of file found: [client 216.73.216.199:64075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:58.078173 2026] [lsapi:warn] [pid 3238580:tid 3238580] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:28:59.307036 2026] [ssl:error] [pid 3244602:tid 3244602] (70014)End of file found: [client 216.73.216.199:25710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:28:59.565373 2026] [ssl:error] [pid 3233431:tid 3233431] (EAI 2)Name or service not known: [client 144.76.19.72:56642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:59.565404 2026] [ssl:error] [pid 3233431:tid 3233431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:28:59.618390 2026] [ssl:error] [pid 3245089:tid 3245089] (EAI 2)Name or service not known: [client 144.76.19.72:56658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:28:59.618417 2026] [ssl:error] [pid 3245089:tid 3245089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:00.409441 2026] [ssl:error] [pid 3239601:tid 3239601] (70014)End of file found: [client 216.73.216.199:11421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:01.402187 2026] [lsapi:warn] [pid 3233530:tid 3233530] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:01.643106 2026] [access_compat:error] [pid 3248994:tid 3248994] [client 106.222.248.251:29726] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:29:02.675643 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:56666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:02.675675 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:02.730519 2026] [ssl:error] [pid 3229414:tid 3229414] (EAI 2)Name or service not known: [client 144.76.19.72:56682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:02.730548 2026] [ssl:error] [pid 3229414:tid 3229414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:03.139252 2026] [ssl:error] [pid 3228323:tid 3228323] (70014)End of file found: [client 216.73.216.199:5500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:04.524043 2026] [security2:error] [pid 3247975:tid 3247975] [client 185.191.171.17:51592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6926.0/prev_next,prev.html"] [unique_id "amtDkOSQvA16EQG-AO-w_QAAAAE"]
[Thu Jul 30 13:29:05.787965 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:56696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:05.787995 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:05.839361 2026] [ssl:error] [pid 3236695:tid 3236695] (EAI 2)Name or service not known: [client 144.76.19.72:56700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:05.839389 2026] [ssl:error] [pid 3236695:tid 3236695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:06.553020 2026] [ssl:error] [pid 3238580:tid 3238580] (70014)End of file found: [client 216.73.216.199:44426] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:06.849207 2026] [core:error] [pid 3213662:tid 3213662] (13)Permission denied: [client 216.73.216.199:3123] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/close_delay
[Thu Jul 30 13:29:06.909120 2026] [lsapi:warn] [pid 3233431:tid 3233431] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:07.150620 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:3123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:08.502675 2026] [lsapi:warn] [pid 3241583:tid 3241583] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:08.912683 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:56708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:08.912724 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:08.968683 2026] [ssl:error] [pid 3239708:tid 3239708] (EAI 2)Name or service not known: [client 144.76.19.72:56712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:08.968721 2026] [ssl:error] [pid 3239708:tid 3239708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:09.007614 2026] [cgi:error] [pid 3245139:tid 3245139] [client 216.73.216.199:51466] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-Getopt-Long/examples/skel3.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:29:09.007662 2026] [cgi:error] [pid 3245139:tid 3245139] [client 216.73.216.199:51466] End of script output before headers: skel3.pl
[Thu Jul 30 13:29:09.482129 2026] [core:error] [pid 3228323:tid 3228323] (13)Permission denied: [client 216.73.216.199:10527] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/sections/__ksymtab_gpl
[Thu Jul 30 13:29:10.304626 2026] [security2:error] [pid 3245139:tid 3245139] [client 93.171.231.240:59024] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDlpJpbFqg3n-ZtWVw9AAAABE"]
[Thu Jul 30 13:29:10.304678 2026] [security2:error] [pid 3245139:tid 3245139] [client 93.171.231.240:59024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDlpJpbFqg3n-ZtWVw9AAAABE"]
[Thu Jul 30 13:29:10.304937 2026] [security2:error] [pid 3245139:tid 3245139] [client 93.171.231.240:59024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDlpJpbFqg3n-ZtWVw9AAAABE"]
[Thu Jul 30 13:29:10.492380 2026] [ssl:error] [pid 3228323:tid 3228323] (70014)End of file found: [client 216.73.216.199:10527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:10.635151 2026] [access_compat:error] [pid 3233397:tid 3233397] [client 47.128.120.24:33196] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/30-days-of-night
[Thu Jul 30 13:29:10.635260 2026] [access_compat:error] [pid 3233397:tid 3233397] [client 47.128.120.24:33196] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:29:11.332806 2026] [authz_core:error] [pid 3235414:tid 3235414] [client 66.249.66.35:46683] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:29:11.335705 2026] [authz_core:error] [pid 3235414:tid 3235414] [client 66.249.66.35:46683] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:29:11.547635 2026] [access_compat:error] [pid 3225757:tid 3225757] [client 106.222.248.251:30004] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:29:11.801190 2026] [lsapi:warn] [pid 3239711:tid 3239711] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:12.022500 2026] [ssl:error] [pid 3239708:tid 3239708] (EAI 2)Name or service not known: [client 144.76.19.72:54984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:12.022530 2026] [ssl:error] [pid 3239708:tid 3239708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:12.074226 2026] [ssl:error] [pid 3238580:tid 3238580] (EAI 2)Name or service not known: [client 144.76.19.72:54994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:12.074255 2026] [ssl:error] [pid 3238580:tid 3238580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:12.148261 2026] [security2:error] [pid 3239601:tid 3239601] [client 43.134.86.95:18551] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDmCt5p4So3MalFU9TZAAAAB4"]
[Thu Jul 30 13:29:12.148313 2026] [security2:error] [pid 3239601:tid 3239601] [client 43.134.86.95:18551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDmCt5p4So3MalFU9TZAAAAB4"]
[Thu Jul 30 13:29:12.148581 2026] [security2:error] [pid 3239601:tid 3239601] [client 43.134.86.95:18551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDmCt5p4So3MalFU9TZAAAAB4"]
[Thu Jul 30 13:29:12.297981 2026] [ssl:error] [pid 3248996:tid 3248996] (70014)End of file found: [client 216.73.216.199:20680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:12.521093 2026] [core:error] [pid 3249196:tid 3249196] [client 57.141.0.56:25284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:12.521124 2026] [core:error] [pid 3249196:tid 3249196] [client 57.141.0.56:25284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:13.707854 2026] [core:error] [pid 3239601:tid 3239601] [client 57.141.0.29:48130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:13.707885 2026] [core:error] [pid 3239601:tid 3239601] [client 57.141.0.29:48130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:13.806150 2026] [ssl:error] [pid 3248922:tid 3248922] (70014)End of file found: [client 216.73.216.199:32114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:15.132859 2026] [ssl:error] [pid 3249196:tid 3249196] (EAI 2)Name or service not known: [client 144.76.19.72:55004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:15.132894 2026] [ssl:error] [pid 3249196:tid 3249196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:15.191236 2026] [ssl:error] [pid 3246397:tid 3246397] (EAI 2)Name or service not known: [client 144.76.19.72:55006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:15.191264 2026] [ssl:error] [pid 3246397:tid 3246397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:15.814319 2026] [ssl:error] [pid 3248038:tid 3248038] (70014)End of file found: [client 216.73.216.199:29255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:15.926900 2026] [security2:error] [pid 3239667:tid 3239667] [client 43.134.86.95:59195] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDm2JwtTwQfHknIE5d5AAAACo"]
[Thu Jul 30 13:29:15.926946 2026] [security2:error] [pid 3239667:tid 3239667] [client 43.134.86.95:59195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDm2JwtTwQfHknIE5d5AAAACo"]
[Thu Jul 30 13:29:15.927192 2026] [security2:error] [pid 3239667:tid 3239667] [client 43.134.86.95:59195] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDm2JwtTwQfHknIE5d5AAAACo"]
[Thu Jul 30 13:29:17.378116 2026] [security2:error] [pid 3239667:tid 3239667] [client 185.191.171.11:23512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1365.0/prev_next,next.html"] [unique_id "amtDnWJwtTwQfHknIE5d5QAAACo"]
[Thu Jul 30 13:29:17.421938 2026] [authz_core:error] [pid 3228323:tid 3228323] [client 20.193.250.173:53078] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 13:29:17.423747 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 20.193.250.173:53078] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/, referer: binance.com
[Thu Jul 30 13:29:17.423796 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 20.193.250.173:53078] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/, referer: binance.com
[Thu Jul 30 13:29:17.427813 2026] [access_compat:error] [pid 3228323:tid 3228323] [client 20.193.250.173:53078] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/, referer: binance.com
[Thu Jul 30 13:29:17.516780 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:18.249655 2026] [ssl:error] [pid 3244066:tid 3244066] (EAI 2)Name or service not known: [client 144.76.19.72:55016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:18.249682 2026] [ssl:error] [pid 3244066:tid 3244066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:18.310241 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:55028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:18.310277 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:18.631498 2026] [autoindex:error] [pid 3233397:tid 3233397] (13)Permission denied: [client 216.73.216.199:54068] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/pccouk/
[Thu Jul 30 13:29:18.931284 2026] [ssl:error] [pid 3233397:tid 3233397] (70014)End of file found: [client 216.73.216.199:54068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:18.977124 2026] [lsapi:warn] [pid 3248118:tid 3248118] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:19.421701 2026] [ssl:error] [pid 3239638:tid 3239638] (70014)End of file found: [client 216.73.216.199:50840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:20.336011 2026] [cgi:error] [pid 3225757:tid 3225757] [client 66.132.186.188:7740] AH02812: stderr from /home/quantumc/public_html/quantum.com.mt/cgi-bin/: attempt to invoke directory as script, referer: http://quantum.com.mt:80/cgi-bin
[Thu Jul 30 13:29:21.225498 2026] [core:error] [pid 3248118:tid 3248118] (13)Permission denied: [client 216.73.216.199:27992] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup17/device/physical_node/subsystem/uevent
[Thu Jul 30 13:29:21.335845 2026] [ssl:error] [pid 3248118:tid 3248118] (70014)End of file found: [client 216.73.216.199:27992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:21.365222 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:59912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:21.365248 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:21.422644 2026] [ssl:error] [pid 3248038:tid 3248038] (EAI 2)Name or service not known: [client 144.76.19.72:59928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:21.422678 2026] [ssl:error] [pid 3248038:tid 3248038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:21.853780 2026] [security2:error] [pid 3233530:tid 3233530] [client 47.254.92.190:58880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampman.com"] [uri "/"] [unique_id "amtDoTTtr2Ps1OskGtbtNwAAAAI"]
[Thu Jul 30 13:29:22.572059 2026] [lsapi:warn] [pid 3225760:tid 3225760] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:23.039561 2026] [security2:error] [pid 3244064:tid 3244064] [client 47.254.92.190:35620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtDo_zu26m0AIRqMws2-QAAACE"], referer: http://www.spampman.com
[Thu Jul 30 13:29:23.054893 2026] [access_compat:error] [pid 3248921:tid 3248921] [client 106.222.248.251:24407] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:29:23.540815 2026] [access_compat:error] [pid 3213662:tid 3213662] [client 45.158.164.139:59422] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:29:24.240458 2026] [security2:error] [pid 3248922:tid 3248922] [client 216.73.216.199:18624] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/krb5.conf"] [unique_id "amtDpI94TEP8pjNCxd14mgAAAC0"]
[Thu Jul 30 13:29:24.240769 2026] [security2:error] [pid 3248922:tid 3248922] [client 216.73.216.199:18624] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/krb5.conf"] [unique_id "amtDpI94TEP8pjNCxd14mgAAAC0"]
[Thu Jul 30 13:29:24.240988 2026] [security2:error] [pid 3248922:tid 3248922] [client 216.73.216.199:18624] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/krb5.conf"] [unique_id "amtDpI94TEP8pjNCxd14mgAAAC0"]
[Thu Jul 30 13:29:24.480615 2026] [ssl:error] [pid 3248038:tid 3248038] (EAI 2)Name or service not known: [client 144.76.19.72:59930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:24.480658 2026] [ssl:error] [pid 3248038:tid 3248038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:24.533655 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:59942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:24.533688 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:25.252153 2026] [core:error] [pid 3248922:tid 3248922] (13)Permission denied: [client 216.73.216.199:18624] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/eventpoll_pwq/trace
[Thu Jul 30 13:29:25.552371 2026] [ssl:error] [pid 3248922:tid 3248922] (70014)End of file found: [client 216.73.216.199:18624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:26.044497 2026] [ssl:error] [pid 3244602:tid 3244602] (70014)End of file found: [client 216.73.216.199:34034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:26.646593 2026] [ssl:error] [pid 3249196:tid 3249196] (70014)End of file found: [client 216.73.216.199:4487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:27.588158 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:59946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:27.588184 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:27.645242 2026] [ssl:error] [pid 3244066:tid 3244066] (EAI 2)Name or service not known: [client 144.76.19.72:59956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:27.645273 2026] [ssl:error] [pid 3244066:tid 3244066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:28.082675 2026] [lsapi:warn] [pid 3250639:tid 3250639] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:29.471628 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:30.714040 2026] [ssl:error] [pid 3239708:tid 3239708] (EAI 2)Name or service not known: [client 144.76.19.72:23450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:30.714090 2026] [ssl:error] [pid 3239708:tid 3239708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:30.768200 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:23452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:30.768229 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:30.971218 2026] [ssl:error] [pid 3250879:tid 3250879] (70014)End of file found: [client 216.73.216.199:1122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:31.334271 2026] [authz_core:error] [pid 3239711:tid 3239711] [client 57.141.0.39:64882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:29:31.334905 2026] [authz_core:error] [pid 3239711:tid 3239711] [client 57.141.0.39:64882] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:29:31.572585 2026] [ssl:error] [pid 3248921:tid 3248921] (70014)End of file found: [client 216.73.216.199:57428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:32.147289 2026] [core:error] [pid 3233431:tid 3233431] [client 66.249.66.196:47104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:32.147315 2026] [core:error] [pid 3233431:tid 3233431] [client 66.249.66.196:47104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:32.155616 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.168:46674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:32.155639 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.168:46674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:32.174529 2026] [core:error] [pid 3244063:tid 3244063] (13)Permission denied: [client 216.73.216.199:51453] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/ftpd-ca.pem
[Thu Jul 30 13:29:32.432612 2026] [access_compat:error] [pid 3229414:tid 3229414] [client 106.222.248.251:26683] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:29:32.476264 2026] [ssl:error] [pid 3244063:tid 3244063] (70014)End of file found: [client 216.73.216.199:51453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:33.507129 2026] [lsapi:warn] [pid 3248038:tid 3248038] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:33.867953 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:23460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:33.867998 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:33.924576 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:23468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:33.924607 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:34.988787 2026] [core:error] [pid 3246224:tid 3246224] [client 66.249.66.169:56709] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:34.988811 2026] [core:error] [pid 3246224:tid 3246224] [client 66.249.66.169:56709] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:36.282749 2026] [core:error] [pid 3245139:tid 3245139] (13)Permission denied: [client 216.73.216.199:59999] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS0/close_delay
[Thu Jul 30 13:29:36.389976 2026] [core:error] [pid 3245139:tid 3245139] (13)Permission denied: [client 216.73.216.199:59999] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nft_reject/sections/__ksymtab_gpl
[Thu Jul 30 13:29:36.980174 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:23478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:36.980212 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:36.993476 2026] [ssl:error] [pid 3245139:tid 3245139] (70014)End of file found: [client 216.73.216.199:59999] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:37.054572 2026] [ssl:error] [pid 3244020:tid 3244020] (EAI 2)Name or service not known: [client 144.76.19.72:23488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:37.054605 2026] [ssl:error] [pid 3244020:tid 3244020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:38.196585 2026] [ssl:error] [pid 3248921:tid 3248921] (70014)End of file found: [client 216.73.216.199:51163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:38.682044 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:39.767964 2026] [security2:error] [pid 3239712:tid 3239712] [client 45.148.10.120:44906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "broadbentandsmith.co.uk"] [uri "/.env"] [unique_id "amtDszudYdBMNvRO-e-n3QAAADk"]
[Thu Jul 30 13:29:39.768145 2026] [security2:error] [pid 3239712:tid 3239712] [client 45.148.10.120:44906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "broadbentandsmith.co.uk"] [uri "/.env"] [unique_id "amtDszudYdBMNvRO-e-n3QAAADk"]
[Thu Jul 30 13:29:39.768360 2026] [security2:error] [pid 3239712:tid 3239712] [client 45.148.10.120:44906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "broadbentandsmith.co.uk"] [uri "/.env"] [unique_id "amtDszudYdBMNvRO-e-n3QAAADk"]
[Thu Jul 30 13:29:39.927711 2026] [lsapi:warn] [pid 3248676:tid 3248676] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:40.126276 2026] [ssl:error] [pid 3233397:tid 3233397] (EAI 2)Name or service not known: [client 144.76.19.72:39314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:40.126312 2026] [ssl:error] [pid 3233397:tid 3233397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:40.182267 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:39324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:40.182297 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:40.810954 2026] [ssl:error] [pid 3245140:tid 3245140] (70014)End of file found: [client 216.73.216.199:46377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:42.518242 2026] [ssl:error] [pid 3244982:tid 3244982] (70014)End of file found: [client 216.73.216.199:26545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:43.235989 2026] [ssl:error] [pid 3229414:tid 3229414] (EAI 2)Name or service not known: [client 144.76.19.72:39328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:43.236016 2026] [ssl:error] [pid 3229414:tid 3229414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:43.288846 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:39344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:43.288875 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:43.713734 2026] [ssl:error] [pid 3248117:tid 3248117] (70014)End of file found: [client 216.73.216.199:5616] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:44.219974 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:44.384119 2026] [lsapi:warn] [pid 3228323:tid 3228323] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:46.123502 2026] [ssl:error] [pid 3248119:tid 3248119] (70014)End of file found: [client 216.73.216.199:41679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:46.346407 2026] [ssl:error] [pid 3239711:tid 3239711] (EAI 2)Name or service not known: [client 144.76.19.72:39352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:46.346440 2026] [ssl:error] [pid 3239711:tid 3239711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:46.398173 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:39368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:46.398200 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:47.939643 2026] [ssl:error] [pid 3233530:tid 3233530] (70014)End of file found: [client 216.73.216.199:2131] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:48.032215 2026] [security2:error] [pid 3238580:tid 3238580] [client 85.208.96.209:45040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "nigelmassey.com"] [uri "/robots.txt"] [unique_id "amtDvFs3_Kf3V9UBeVtEzQAAACI"]
[Thu Jul 30 13:29:48.416719 2026] [security2:error] [pid 3245140:tid 3245140] [client 185.191.171.11:38672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "nigelmassey.com"] [uri "/2011.php"] [unique_id "amtDvB2wG2uBfp9_wb4dkAAAABs"]
[Thu Jul 30 13:29:49.142335 2026] [ssl:error] [pid 3245139:tid 3245139] (70014)End of file found: [client 216.73.216.199:16226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:49.261054 2026] [lsapi:warn] [pid 3244020:tid 3244020] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:49.452691 2026] [ssl:error] [pid 3245140:tid 3245140] (EAI 2)Name or service not known: [client 144.76.19.72:39372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:49.452725 2026] [ssl:error] [pid 3245140:tid 3245140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:49.503969 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:39374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:49.504001 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:50.385296 2026] [lsapi:warn] [pid 3248118:tid 3248118] [client 103.188.168.65:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:52.547974 2026] [access_compat:error] [pid 3248996:tid 3248996] [client 106.222.248.251:10656] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:29:52.557727 2026] [ssl:error] [pid 3239711:tid 3239711] (EAI 2)Name or service not known: [client 144.76.19.72:28114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:52.557758 2026] [ssl:error] [pid 3239711:tid 3239711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:52.569679 2026] [ssl:error] [pid 3251933:tid 3251933] (70014)End of file found: [client 216.73.216.199:43265] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:52.614192 2026] [ssl:error] [pid 3250639:tid 3250639] (EAI 2)Name or service not known: [client 144.76.19.72:28122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:52.614227 2026] [ssl:error] [pid 3250639:tid 3250639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:53.353635 2026] [ssl:error] [pid 3250639:tid 3250639] (70014)End of file found: [client 216.73.216.199:14430] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:54.469882 2026] [security2:error] [pid 3233431:tid 3233431] [client 51.68.107.149:12861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.plastic-sheeting.org"] [uri "/robots.txt"] [unique_id "amtDwkRFprvFmm_613DVtQAAAAk"]
[Thu Jul 30 13:29:54.715192 2026] [security2:error] [pid 3244066:tid 3244066] [client 185.191.171.16:29814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/trucking-companies-that-hire-with-no-experience-near-me"] [unique_id "amtDwgBmTNXipT94ZQKL1gAAACY"]
[Thu Jul 30 13:29:54.813805 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:54.979181 2026] [cgi:error] [pid 3248827:tid 3248827] [client 147.161.144.170:9327] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:29:55.085442 2026] [lsapi:warn] [pid 3225757:tid 3225757] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:29:55.274787 2026] [ssl:error] [pid 3251932:tid 3251932] (70014)End of file found: [client 216.73.216.199:26281] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:55.667845 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:28134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:55.667875 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:55.720585 2026] [ssl:error] [pid 3244066:tid 3244066] (EAI 2)Name or service not known: [client 144.76.19.72:28140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:55.720616 2026] [ssl:error] [pid 3244066:tid 3244066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:56.912047 2026] [core:error] [pid 3229414:tid 3229414] [client 57.141.0.38:35626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:56.912106 2026] [core:error] [pid 3229414:tid 3229414] [client 57.141.0.38:35626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:29:57.867813 2026] [ssl:error] [pid 3228323:tid 3228323] (70014)End of file found: [client 216.73.216.199:2679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:58.173589 2026] [cgi:error] [pid 3244021:tid 3244021] [client 158.158.41.78:47933] AH02812: stderr from /home/davidebell/public_html/bashforthbell.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:29:58.775867 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:28152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:58.775899 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:58.830671 2026] [ssl:error] [pid 3244064:tid 3244064] (EAI 2)Name or service not known: [client 144.76.19.72:28162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:29:58.830695 2026] [ssl:error] [pid 3244064:tid 3244064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:29:58.891378 2026] [ssl:error] [pid 3233397:tid 3233397] (70014)End of file found: [client 216.73.216.199:22386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:29:59.867691 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:00.998678 2026] [core:error] [pid 3247118:tid 3247118] (13)Permission denied: [client 216.73.216.199:38675] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory57/subsystem/uevent
[Thu Jul 30 13:30:01.300511 2026] [ssl:error] [pid 3247118:tid 3247118] (70014)End of file found: [client 216.73.216.199:38675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:01.891432 2026] [ssl:error] [pid 3245139:tid 3245139] (EAI 2)Name or service not known: [client 144.76.19.72:23978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:01.891460 2026] [ssl:error] [pid 3245139:tid 3245139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:01.956732 2026] [ssl:error] [pid 3239711:tid 3239711] (EAI 2)Name or service not known: [client 144.76.19.72:23994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:01.956760 2026] [ssl:error] [pid 3239711:tid 3239711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:03.315158 2026] [ssl:error] [pid 3252331:tid 3252331] (70014)End of file found: [client 216.73.216.199:29757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:03.701610 2026] [security2:error] [pid 3248676:tid 3248676] [client 101.47.25.122:37497] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDy9M6GCzwfq85gPIleQAAAAQ"]
[Thu Jul 30 13:30:03.701655 2026] [security2:error] [pid 3248676:tid 3248676] [client 101.47.25.122:37497] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDy9M6GCzwfq85gPIleQAAAAQ"]
[Thu Jul 30 13:30:03.701936 2026] [security2:error] [pid 3248676:tid 3248676] [client 101.47.25.122:37497] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDy9M6GCzwfq85gPIleQAAAAQ"]
[Thu Jul 30 13:30:04.207750 2026] [ssl:error] [pid 3248118:tid 3248118] (70014)End of file found: [client 216.73.216.199:55163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:05.009719 2026] [ssl:error] [pid 3238065:tid 3238065] (EAI 2)Name or service not known: [client 144.76.19.72:23996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:05.009744 2026] [ssl:error] [pid 3238065:tid 3238065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:05.061006 2026] [ssl:error] [pid 3245140:tid 3245140] (EAI 2)Name or service not known: [client 144.76.19.72:23998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:05.061031 2026] [ssl:error] [pid 3245140:tid 3245140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:05.436036 2026] [lsapi:warn] [pid 3244063:tid 3244063] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:05.540200 2026] [security2:error] [pid 3238065:tid 3238065] [client 82.156.116.86:51482] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "plastic-sheeting.org"] [uri "/"] [unique_id "amtDzTL2EbR7g7itoWwxNAAAAB0"]
[Thu Jul 30 13:30:05.880536 2026] [lsapi:warn] [pid 3245140:tid 3245140] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:05.928927 2026] [access_compat:error] [pid 3248676:tid 3248676] [client 106.222.248.251:1550] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:30:06.156972 2026] [security2:error] [pid 3230621:tid 3230621] [client 111.92.135.194:54931] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDzisafohYp9bQmXW8IwAAADU"]
[Thu Jul 30 13:30:06.157036 2026] [security2:error] [pid 3230621:tid 3230621] [client 111.92.135.194:54931] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtDzisafohYp9bQmXW8IwAAADU"]
[Thu Jul 30 13:30:06.157303 2026] [security2:error] [pid 3230621:tid 3230621] [client 111.92.135.194:54931] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtDzisafohYp9bQmXW8IwAAADU"]
[Thu Jul 30 13:30:06.288135 2026] [core:error] [pid 3225757:tid 3225757] [client 66.249.64.170:59737] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:06.288164 2026] [core:error] [pid 3225757:tid 3225757] [client 66.249.64.170:59737] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:06.934135 2026] [authz_core:error] [pid 3252378:tid 3252378] [client 20.193.250.173:56369] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 13:30:07.026252 2026] [core:error] [pid 3251883:tid 3251883] (13)Permission denied: [client 216.73.216.199:24940] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty35/subsystem/ttyS2/uartclk
[Thu Jul 30 13:30:07.339120 2026] [security2:error] [pid 3239637:tid 3239637] [client 185.191.171.14:54472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6346.0.html"] [unique_id "amtDz9DzwrgWZSO6npz69AAAACg"]
[Thu Jul 30 13:30:07.930671 2026] [ssl:error] [pid 3251883:tid 3251883] (70014)End of file found: [client 216.73.216.199:24940] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:08.115203 2026] [ssl:error] [pid 3238065:tid 3238065] (EAI 2)Name or service not known: [client 144.76.19.72:24000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:08.115230 2026] [ssl:error] [pid 3238065:tid 3238065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:08.168239 2026] [ssl:error] [pid 3213662:tid 3213662] (EAI 2)Name or service not known: [client 144.76.19.72:24010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:08.168270 2026] [ssl:error] [pid 3213662:tid 3213662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:08.674832 2026] [security2:error] [pid 3239637:tid 3239637] [client 114.119.142.20:62061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576627200/request_format~html"] [unique_id "amtD0NDzwrgWZSO6npz69QAAACg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576540800/request_format%7Ehtml
[Thu Jul 30 13:30:08.721026 2026] [ssl:error] [pid 3252379:tid 3252379] (70014)End of file found: [client 216.73.216.199:1136] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:09.107372 2026] [security2:error] [pid 3244021:tid 3244021] [client 197.53.109.2:8522] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtD0VgIsS_BeFyh90810QAAABw"]
[Thu Jul 30 13:30:09.107423 2026] [security2:error] [pid 3244021:tid 3244021] [client 197.53.109.2:8522] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtD0VgIsS_BeFyh90810QAAABw"]
[Thu Jul 30 13:30:09.107669 2026] [security2:error] [pid 3244021:tid 3244021] [client 197.53.109.2:8522] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtD0VgIsS_BeFyh90810QAAABw"]
[Thu Jul 30 13:30:09.662271 2026] [security2:error] [pid 3248827:tid 3248827] [client 114.119.142.20:62063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576627200/request_format~html"] [unique_id "amtD0SgStkwCBeIBDnvu5AAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576540800/request_format%7Ehtml
[Thu Jul 30 13:30:10.403769 2026] [authz_core:error] [pid 3244021:tid 3244021] [client 20.193.250.173:59998] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 13:30:10.530661 2026] [lsapi:warn] [pid 3248676:tid 3248676] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:11.223546 2026] [ssl:error] [pid 3239637:tid 3239637] (EAI 2)Name or service not known: [client 144.76.19.72:57604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:11.223581 2026] [ssl:error] [pid 3239637:tid 3239637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:11.276561 2026] [ssl:error] [pid 3228323:tid 3228323] (EAI 2)Name or service not known: [client 144.76.19.72:57612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:11.276617 2026] [ssl:error] [pid 3228323:tid 3228323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:11.408494 2026] [security2:error] [pid 3244063:tid 3244063] [client 216.73.216.199:63820] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/tuned.conf"] [unique_id "amtD04il8Pi5Bt6LqZtXOgAAACA"]
[Thu Jul 30 13:30:11.408779 2026] [security2:error] [pid 3244063:tid 3244063] [client 216.73.216.199:63820] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/tuned.conf"] [unique_id "amtD04il8Pi5Bt6LqZtXOgAAACA"]
[Thu Jul 30 13:30:11.408997 2026] [security2:error] [pid 3244063:tid 3244063] [client 216.73.216.199:63820] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/tuned.conf"] [unique_id "amtD04il8Pi5Bt6LqZtXOgAAACA"]
[Thu Jul 30 13:30:14.350115 2026] [ssl:error] [pid 3222991:tid 3222991] (EAI 2)Name or service not known: [client 144.76.19.72:57626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:14.350159 2026] [ssl:error] [pid 3222991:tid 3222991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:14.408017 2026] [ssl:error] [pid 3248676:tid 3248676] (EAI 2)Name or service not known: [client 144.76.19.72:57642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:14.408050 2026] [ssl:error] [pid 3248676:tid 3248676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:14.426518 2026] [ssl:error] [pid 3244063:tid 3244063] (70014)End of file found: [client 216.73.216.199:63820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:14.521317 2026] [authz_core:error] [pid 3252379:tid 3252379] [client 20.193.250.173:64147] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 13:30:16.056640 2026] [lsapi:warn] [pid 3248996:tid 3248996] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:16.307260 2026] [access_compat:error] [pid 3244020:tid 3244020] [client 106.222.248.251:11103] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:30:16.670630 2026] [lsapi:warn] [pid 3230621:tid 3230621] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:17.139555 2026] [ssl:error] [pid 3246397:tid 3246397] (70014)End of file found: [client 216.73.216.199:28729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:17.466889 2026] [ssl:error] [pid 3246102:tid 3246102] (EAI 2)Name or service not known: [client 144.76.19.72:57650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:17.466918 2026] [ssl:error] [pid 3246102:tid 3246102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:17.520934 2026] [ssl:error] [pid 3250639:tid 3250639] (EAI 2)Name or service not known: [client 144.76.19.72:57654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:17.520963 2026] [ssl:error] [pid 3250639:tid 3250639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:17.740886 2026] [core:error] [pid 3248118:tid 3248118] (13)Permission denied: [client 216.73.216.199:17513] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_da_state/shrink
[Thu Jul 30 13:30:17.827781 2026] [authz_core:error] [pid 3251933:tid 3251933] [client 20.193.250.173:51543] AH01630: client denied by server configuration: /home/healthki/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 13:30:18.042220 2026] [ssl:error] [pid 3248118:tid 3248118] (70014)End of file found: [client 216.73.216.199:17513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:19.751411 2026] [ssl:error] [pid 3239713:tid 3239713] (70014)End of file found: [client 216.73.216.199:24192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:20.408572 2026] [security2:error] [pid 3239708:tid 3239708] [client 185.93.89.167:27467] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtD3BosYR8oPXXEIem4wgAAADQ"]
[Thu Jul 30 13:30:20.408754 2026] [security2:error] [pid 3239708:tid 3239708] [client 185.93.89.167:27467] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtD3BosYR8oPXXEIem4wgAAADQ"]
[Thu Jul 30 13:30:20.578957 2026] [ssl:error] [pid 3253280:tid 3253280] (EAI 2)Name or service not known: [client 144.76.19.72:39054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:20.578998 2026] [ssl:error] [pid 3253280:tid 3253280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:20.635569 2026] [ssl:error] [pid 3244020:tid 3244020] (EAI 2)Name or service not known: [client 144.76.19.72:39064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:20.635605 2026] [ssl:error] [pid 3244020:tid 3244020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:21.122687 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:21.592235 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtD3eXmVWaQWkoA5vCk4QAAACU"]
[Thu Jul 30 13:30:21.592440 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtD3eXmVWaQWkoA5vCk4QAAACU"]
[Thu Jul 30 13:30:22.612385 2026] [security2:error] [pid 3239708:tid 3239708] [client 185.93.89.167:27467] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD3BosYR8oPXXEIem4wgAAADQ"]
[Thu Jul 30 13:30:22.719537 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD3eXmVWaQWkoA5vCk4QAAACU"]
[Thu Jul 30 13:30:22.743761 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amtD3uXmVWaQWkoA5vCk4gAAACU"]
[Thu Jul 30 13:30:22.743966 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/api/.env"] [unique_id "amtD3uXmVWaQWkoA5vCk4gAAACU"]
[Thu Jul 30 13:30:23.401845 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD3uXmVWaQWkoA5vCk4gAAACU"]
[Thu Jul 30 13:30:23.422316 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amtD3-XmVWaQWkoA5vCk4wAAACU"]
[Thu Jul 30 13:30:23.422469 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/backend/.env"] [unique_id "amtD3-XmVWaQWkoA5vCk4wAAACU"]
[Thu Jul 30 13:30:23.687547 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:39066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:23.687588 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:23.743653 2026] [ssl:error] [pid 3239637:tid 3239637] (EAI 2)Name or service not known: [client 144.76.19.72:39078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:23.743688 2026] [ssl:error] [pid 3239637:tid 3239637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:23.817176 2026] [ssl:error] [pid 3246397:tid 3246397] (70014)End of file found: [client 216.73.216.199:48688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:24.010905 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD3-XmVWaQWkoA5vCk4wAAACU"]
[Thu Jul 30 13:30:25.320924 2026] [core:error] [pid 3247118:tid 3247118] (13)Permission denied: [client 216.73.216.199:48861] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/custom_divisor
[Thu Jul 30 13:30:25.328956 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/admin/.env"] [unique_id "amtD4eXmVWaQWkoA5vCk5QAAACU"]
[Thu Jul 30 13:30:25.329176 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/admin/.env"] [unique_id "amtD4eXmVWaQWkoA5vCk5QAAACU"]
[Thu Jul 30 13:30:25.622804 2026] [ssl:error] [pid 3247118:tid 3247118] (70014)End of file found: [client 216.73.216.199:48861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:26.091829 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD4eXmVWaQWkoA5vCk5QAAACU"]
[Thu Jul 30 13:30:26.229617 2026] [ssl:error] [pid 3253569:tid 3253569] (70014)End of file found: [client 216.73.216.199:28474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:26.621278 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:26.763395 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/laravel/.env"] [unique_id "amtD4uXmVWaQWkoA5vCk5wAAACU"]
[Thu Jul 30 13:30:26.763615 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/laravel/.env"] [unique_id "amtD4uXmVWaQWkoA5vCk5wAAACU"]
[Thu Jul 30 13:30:26.801253 2026] [ssl:error] [pid 3253377:tid 3253377] (EAI 2)Name or service not known: [client 144.76.19.72:39084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:26.801308 2026] [ssl:error] [pid 3253377:tid 3253377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:26.853198 2026] [ssl:error] [pid 3244021:tid 3244021] (EAI 2)Name or service not known: [client 144.76.19.72:39088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:26.853238 2026] [ssl:error] [pid 3244021:tid 3244021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:27.391018 2026] [lsapi:warn] [pid 3244021:tid 3244021] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:27.419609 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD4uXmVWaQWkoA5vCk5wAAACU"]
[Thu Jul 30 13:30:27.442170 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/core/.env"] [unique_id "amtD4-XmVWaQWkoA5vCk6AAAACU"]
[Thu Jul 30 13:30:27.442375 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/core/.env"] [unique_id "amtD4-XmVWaQWkoA5vCk6AAAACU"]
[Thu Jul 30 13:30:27.629940 2026] [core:error] [pid 3250639:tid 3250639] [client 57.141.0.40:46352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:27.629966 2026] [core:error] [pid 3250639:tid 3250639] [client 57.141.0.40:46352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:28.041370 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD4-XmVWaQWkoA5vCk6AAAACU"]
[Thu Jul 30 13:30:28.695989 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/.env.example"] [unique_id "amtD5OXmVWaQWkoA5vCk6gAAACU"]
[Thu Jul 30 13:30:28.696227 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/.env.example"] [unique_id "amtD5OXmVWaQWkoA5vCk6gAAACU"]
[Thu Jul 30 13:30:29.294471 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD5OXmVWaQWkoA5vCk6gAAACU"]
[Thu Jul 30 13:30:29.316196 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/app/.env"] [unique_id "amtD5eXmVWaQWkoA5vCk6wAAACU"]
[Thu Jul 30 13:30:29.316405 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/app/.env"] [unique_id "amtD5eXmVWaQWkoA5vCk6wAAACU"]
[Thu Jul 30 13:30:29.843184 2026] [core:error] [pid 3245140:tid 3245140] (13)Permission denied: [client 216.73.216.199:39779] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 13:30:29.905792 2026] [ssl:error] [pid 3250639:tid 3250639] (EAI 2)Name or service not known: [client 144.76.19.72:30220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:29.905838 2026] [ssl:error] [pid 3250639:tid 3250639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:29.947819 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD5eXmVWaQWkoA5vCk6wAAACU"]
[Thu Jul 30 13:30:29.961687 2026] [ssl:error] [pid 3251933:tid 3251933] (EAI 2)Name or service not known: [client 144.76.19.72:30230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:29.961731 2026] [ssl:error] [pid 3251933:tid 3251933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:29.968826 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/dev/.env"] [unique_id "amtD5eXmVWaQWkoA5vCk7AAAACU"]
[Thu Jul 30 13:30:29.969097 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/dev/.env"] [unique_id "amtD5eXmVWaQWkoA5vCk7AAAACU"]
[Thu Jul 30 13:30:30.408732 2026] [security2:error] [pid 3251932:tid 3251932] [client 85.208.96.208:41892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,701.0/prev_next,next.html"] [unique_id "amtD5jh8cJWq72Mhg9myUwAAAA0"]
[Thu Jul 30 13:30:30.484193 2026] [access_compat:error] [pid 3253568:tid 3253568] [client 106.222.248.251:16822] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:30:30.578388 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD5eXmVWaQWkoA5vCk7AAAACU"]
[Thu Jul 30 13:30:30.619980 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/server/.env"] [unique_id "amtD5uXmVWaQWkoA5vCk7gAAACU"]
[Thu Jul 30 13:30:30.620183 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/server/.env"] [unique_id "amtD5uXmVWaQWkoA5vCk7gAAACU"]
[Thu Jul 30 13:30:30.934970 2026] [access_compat:error] [pid 3250639:tid 3250639] [client 45.158.164.139:56144] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:30:31.225524 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD5uXmVWaQWkoA5vCk7gAAACU"]
[Thu Jul 30 13:30:31.246062 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/.env.save"] [unique_id "amtD5-XmVWaQWkoA5vCk7wAAACU"]
[Thu Jul 30 13:30:31.246280 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/.env.save"] [unique_id "amtD5-XmVWaQWkoA5vCk7wAAACU"]
[Thu Jul 30 13:30:31.650007 2026] [ssl:error] [pid 3245140:tid 3245140] (70014)End of file found: [client 216.73.216.199:39779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:31.713398 2026] [lsapi:warn] [pid 3244066:tid 3244066] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:31.873093 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD5-XmVWaQWkoA5vCk7wAAACU"]
[Thu Jul 30 13:30:32.546636 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wmsfirearmstraining.com"] [uri "/staging/.env"] [unique_id "amtD6OXmVWaQWkoA5vCk8QAAACU"]
[Thu Jul 30 13:30:32.546843 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wmsfirearmstraining.com"] [uri "/staging/.env"] [unique_id "amtD6OXmVWaQWkoA5vCk8QAAACU"]
[Thu Jul 30 13:30:32.548300 2026] [core:error] [pid 3251883:tid 3251883] (13)Permission denied: [client 216.73.216.199:61762] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS1/flags
[Thu Jul 30 13:30:32.573915 2026] [core:error] [pid 3250639:tid 3250639] [client 66.249.66.66:37799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:32.573936 2026] [core:error] [pid 3250639:tid 3250639] [client 66.249.66.66:37799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:32.574499 2026] [core:error] [pid 3253568:tid 3253568] [client 66.249.66.196:57193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:32.574518 2026] [core:error] [pid 3253568:tid 3253568] [client 66.249.66.196:57193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:32.850430 2026] [ssl:error] [pid 3251883:tid 3251883] (70014)End of file found: [client 216.73.216.199:61762] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:33.018368 2026] [ssl:error] [pid 3253523:tid 3253523] (EAI 2)Name or service not known: [client 144.76.19.72:30234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:33.018413 2026] [ssl:error] [pid 3253523:tid 3253523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:33.071826 2026] [ssl:error] [pid 3253523:tid 3253523] (EAI 2)Name or service not known: [client 144.76.19.72:30242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:33.071849 2026] [ssl:error] [pid 3253523:tid 3253523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:33.195112 2026] [security2:error] [pid 3225757:tid 3225757] [client 185.93.89.167:61501] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wmsfirearmstraining.com"] [uri "/index.php"] [unique_id "amtD6OXmVWaQWkoA5vCk8QAAACU"]
[Thu Jul 30 13:30:33.342549 2026] [core:error] [pid 3225757:tid 3225757] (13)Permission denied: [client 216.73.216.199:13596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu1/driver/uevent
[Thu Jul 30 13:30:33.758597 2026] [ssl:error] [pid 3225757:tid 3225757] (70014)End of file found: [client 216.73.216.199:13596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:34.839562 2026] [authz_core:error] [pid 3254029:tid 3254029] [client 66.249.66.33:63348] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:30:34.842279 2026] [authz_core:error] [pid 3254029:tid 3254029] [client 66.249.66.33:63348] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:30:35.241696 2026] [security2:error] [pid 3253568:tid 3253568] [client 85.208.96.207:20404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amtD6-Vna0w01jFG3_MzzgAAABY"]
[Thu Jul 30 13:30:35.718020 2026] [security2:error] [pid 3250639:tid 3250639] [client 185.191.171.18:15202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtD65XRIJhCxe2oTIj__gAAAAY"]
[Thu Jul 30 13:30:36.124880 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:30258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:36.124925 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:36.183523 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:30260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:36.183552 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:36.965878 2026] [ssl:error] [pid 3244021:tid 3244021] (70014)End of file found: [client 216.73.216.199:19185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:37.231195 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:38.157527 2026] [ssl:error] [pid 3245140:tid 3245140] (70014)End of file found: [client 216.73.216.199:54921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:38.211030 2026] [lsapi:warn] [pid 3213662:tid 3213662] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:39.247747 2026] [ssl:error] [pid 3225757:tid 3225757] (EAI 2)Name or service not known: [client 144.76.19.72:30262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:39.247806 2026] [ssl:error] [pid 3225757:tid 3225757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:39.301344 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:30268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:39.301392 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:39.786007 2026] [ssl:error] [pid 3239708:tid 3239708] (70014)End of file found: [client 216.73.216.199:27836] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:42.342179 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:42.359576 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:37442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:42.359609 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:42.384742 2026] [core:error] [pid 3246397:tid 3246397] (13)Permission denied: [client 216.73.216.199:35241] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory229/subsystem/uevent
[Thu Jul 30 13:30:42.416350 2026] [ssl:error] [pid 3246102:tid 3246102] (EAI 2)Name or service not known: [client 144.76.19.72:37450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:42.416394 2026] [ssl:error] [pid 3246102:tid 3246102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:43.397970 2026] [ssl:error] [pid 3246397:tid 3246397] (70014)End of file found: [client 216.73.216.199:35241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:44.902762 2026] [ssl:error] [pid 3248676:tid 3248676] (70014)End of file found: [client 216.73.216.199:32439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:45.489306 2026] [ssl:error] [pid 3251932:tid 3251932] (EAI 2)Name or service not known: [client 144.76.19.72:37456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:45.489346 2026] [ssl:error] [pid 3251932:tid 3251932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:45.543959 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:37472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:45.543987 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:47.022359 2026] [core:error] [pid 3239708:tid 3239708] (13)Permission denied: [client 216.73.216.199:6691] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_net/drivers/virtio:virtio_net/uevent
[Thu Jul 30 13:30:47.199194 2026] [access_compat:error] [pid 3248921:tid 3248921] [client 106.222.248.251:28409] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:30:47.222260 2026] [core:error] [pid 3251933:tid 3251933] [client 57.141.0.21:37856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:47.222333 2026] [core:error] [pid 3251933:tid 3251933] [client 57.141.0.21:37856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:47.825883 2026] [lsapi:warn] [pid 3254310:tid 3254310] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:47.921478 2026] [ssl:error] [pid 3239708:tid 3239708] (70014)End of file found: [client 216.73.216.199:6691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:48.597092 2026] [ssl:error] [pid 3239637:tid 3239637] (EAI 2)Name or service not known: [client 144.76.19.72:37484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:48.597127 2026] [ssl:error] [pid 3239637:tid 3239637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:48.650572 2026] [ssl:error] [pid 3239711:tid 3239711] (EAI 2)Name or service not known: [client 144.76.19.72:37496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:48.650606 2026] [ssl:error] [pid 3239711:tid 3239711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:49.060763 2026] [authz_core:error] [pid 3254310:tid 3254310] [client 66.249.66.34:49492] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:30:49.063394 2026] [authz_core:error] [pid 3254310:tid 3254310] [client 66.249.66.34:49492] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:30:49.241109 2026] [lsapi:warn] [pid 3239637:tid 3239637] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:49.714527 2026] [core:error] [pid 3244066:tid 3244066] [client 57.141.0.70:29300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:49.714552 2026] [core:error] [pid 3244066:tid 3244066] [client 57.141.0.70:29300] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:50.638580 2026] [ssl:error] [pid 3254540:tid 3254540] (70014)End of file found: [client 216.73.216.199:55295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:51.140980 2026] [ssl:error] [pid 3244066:tid 3244066] (70014)End of file found: [client 216.73.216.199:45199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:51.705855 2026] [ssl:error] [pid 3239601:tid 3239601] (EAI 2)Name or service not known: [client 144.76.19.72:53682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:51.705885 2026] [ssl:error] [pid 3239601:tid 3239601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:51.763201 2026] [ssl:error] [pid 3253377:tid 3253377] (EAI 2)Name or service not known: [client 144.76.19.72:53686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:51.763244 2026] [ssl:error] [pid 3253377:tid 3253377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:52.941233 2026] [lsapi:warn] [pid 3228323:tid 3228323] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:53.748340 2026] [core:error] [pid 3244021:tid 3244021] [client 66.249.66.67:37575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:53.748388 2026] [core:error] [pid 3244021:tid 3244021] [client 66.249.66.67:37575] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:53.874678 2026] [ssl:error] [pid 3246397:tid 3246397] (70014)End of file found: [client 216.73.216.199:41996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:54.116585 2026] [cgi:error] [pid 3247118:tid 3247118] [client 74.248.33.8:36469] AH02812: stderr from /home/buttere/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:30:54.481584 2026] [ssl:error] [pid 3244064:tid 3244064] (70014)End of file found: [client 216.73.216.199:23473] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:54.652396 2026] [core:error] [pid 3244021:tid 3244021] [client 57.141.0.14:22896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:54.652425 2026] [core:error] [pid 3244021:tid 3244021] [client 57.141.0.14:22896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:30:54.819567 2026] [ssl:error] [pid 3254028:tid 3254028] (EAI 2)Name or service not known: [client 144.76.19.72:53688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:54.819604 2026] [ssl:error] [pid 3254028:tid 3254028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:54.872897 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:53702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:54.872926 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:55.328274 2026] [security2:error] [pid 3254028:tid 3254028] [client 85.208.96.194:46010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/remote-alaska-land-for-sale-by-owner"] [unique_id "amtD_4TS6DyQQ76UBmwh2QAAABc"]
[Thu Jul 30 13:30:55.681008 2026] [ssl:error] [pid 3254310:tid 3254310] (70014)End of file found: [client 216.73.216.199:12918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:56.654720 2026] [access_compat:error] [pid 3244982:tid 3244982] [client 106.222.248.251:19367] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:30:58.007649 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:53704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:58.007688 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:58.149368 2026] [ssl:error] [pid 3254029:tid 3254029] (EAI 2)Name or service not known: [client 144.76.19.72:53708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:30:58.149422 2026] [ssl:error] [pid 3254029:tid 3254029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:30:58.430656 2026] [lsapi:warn] [pid 3253992:tid 3253992] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:30:59.185972 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:46623] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:59.783523 2026] [ssl:error] [pid 3244064:tid 3244064] (70014)End of file found: [client 216.73.216.199:10870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:30:59.880783 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:01.244908 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:60416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:01.244948 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:01.299919 2026] [ssl:error] [pid 3255056:tid 3255056] (EAI 2)Name or service not known: [client 144.76.19.72:60418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:01.299952 2026] [ssl:error] [pid 3255056:tid 3255056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:01.410447 2026] [ssl:error] [pid 3255058:tid 3255058] (70014)End of file found: [client 216.73.216.199:40203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:03.548623 2026] [lsapi:warn] [pid 3254029:tid 3254029] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:03.596183 2026] [security2:error] [pid 3253569:tid 3253569] [client 14.191.12.190:3331] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEB-F_1xlOK-aZnPlhNQAAAB0"]
[Thu Jul 30 13:31:03.596228 2026] [security2:error] [pid 3253569:tid 3253569] [client 14.191.12.190:3331] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEB-F_1xlOK-aZnPlhNQAAAB0"]
[Thu Jul 30 13:31:03.596476 2026] [security2:error] [pid 3253569:tid 3253569] [client 14.191.12.190:3331] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEB-F_1xlOK-aZnPlhNQAAAB0"]
[Thu Jul 30 13:31:04.356775 2026] [ssl:error] [pid 3230621:tid 3230621] (EAI 2)Name or service not known: [client 144.76.19.72:60426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:04.356808 2026] [ssl:error] [pid 3230621:tid 3230621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:04.414132 2026] [ssl:error] [pid 3250639:tid 3250639] (EAI 2)Name or service not known: [client 144.76.19.72:60436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:04.414166 2026] [ssl:error] [pid 3250639:tid 3250639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:04.596557 2026] [core:error] [pid 3251933:tid 3251933] (13)Permission denied: [client 216.73.216.199:62493] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory199/subsystem/uevent
[Thu Jul 30 13:31:04.712381 2026] [ssl:error] [pid 3251933:tid 3251933] (70014)End of file found: [client 216.73.216.199:62493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:05.592619 2026] [security2:error] [pid 3250639:tid 3250639] [client 113.167.21.215:48856] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtECZXRIJhCxe2oTIgABwAAAAY"]
[Thu Jul 30 13:31:05.592670 2026] [security2:error] [pid 3250639:tid 3250639] [client 113.167.21.215:48856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtECZXRIJhCxe2oTIgABwAAAAY"]
[Thu Jul 30 13:31:05.592924 2026] [security2:error] [pid 3250639:tid 3250639] [client 113.167.21.215:48856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtECZXRIJhCxe2oTIgABwAAAAY"]
[Thu Jul 30 13:31:05.614749 2026] [ssl:error] [pid 3254029:tid 3254029] (70014)End of file found: [client 216.73.216.199:26613] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:06.723511 2026] [ssl:error] [pid 3213662:tid 3213662] (70014)End of file found: [client 216.73.216.199:41810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:07.357019 2026] [access_compat:error] [pid 3221143:tid 3221143] [client 106.222.248.251:27839] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:31:07.471924 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:60438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:07.471966 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:07.525956 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:60444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:07.525981 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:08.116220 2026] [security2:error] [pid 3251932:tid 3251932] [client 103.148.108.108:59870] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEDDh8cJWq72Mhg9myYAAAAA0"]
[Thu Jul 30 13:31:08.116269 2026] [security2:error] [pid 3251932:tid 3251932] [client 103.148.108.108:59870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEDDh8cJWq72Mhg9myYAAAAA0"]
[Thu Jul 30 13:31:08.116528 2026] [security2:error] [pid 3251932:tid 3251932] [client 103.148.108.108:59870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEDDh8cJWq72Mhg9myYAAAAA0"]
[Thu Jul 30 13:31:08.589651 2026] [core:error] [pid 3250879:tid 3250879] [client 66.249.66.8:39738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:08.589680 2026] [core:error] [pid 3250879:tid 3250879] [client 66.249.66.8:39738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:09.048324 2026] [lsapi:warn] [pid 3253569:tid 3253569] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:09.821526 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:09.962528 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.022126 2026] [core:error] [pid 3254581:tid 3254581] (13)Permission denied: [client 216.73.216.199:8409] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS0/close_delay
[Thu Jul 30 13:31:10.084252 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.130008 2026] [ssl:error] [pid 3254581:tid 3254581] (70014)End of file found: [client 216.73.216.199:8409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:10.190516 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.312015 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.411585 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.420239 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:10.420270 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:10.538010 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.651019 2026] [ssl:error] [pid 3246102:tid 3246102] (EAI 2)Name or service not known: [client 144.76.19.72:38692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:10.651048 2026] [ssl:error] [pid 3246102:tid 3246102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:10.680146 2026] [lsapi:warn] [pid 3251883:tid 3251883] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:10.699532 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.774422 2026] [lsapi:warn] [pid 3250879:tid 3250879] [client 45.158.164.139:43268] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:10.774462 2026] [lsapi:warn] [pid 3250879:tid 3250879] [client 45.158.164.139:43268] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:10.777510 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:10.777573 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:10.778762 2026] [ssl:error] [pid 3250879:tid 3250879] (EAI 2)Name or service not known: [client 144.76.19.72:38698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:10.778797 2026] [ssl:error] [pid 3250879:tid 3250879] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:10.855817 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:10.943875 2026] [ssl:error] [pid 3255505:tid 3255505] (70014)End of file found: [client 216.73.216.199:42458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:10.996336 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:11.135140 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:11.139488 2026] [lsapi:warn] [pid 3255509:tid 3255509] [client 45.158.164.139:43272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:11.139524 2026] [lsapi:warn] [pid 3255509:tid 3255509] [client 45.158.164.139:43272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:11.142817 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:11.142848 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:11.298233 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:11.410203 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:11.517127 2026] [cgi:error] [pid 3254310:tid 3254310] [client 158.158.76.106:44537] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 13:31:12.667318 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:12.667358 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:12.977857 2026] [lsapi:warn] [pid 3255629:tid 3255629] [client 45.158.164.139:43300] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:12.977901 2026] [lsapi:warn] [pid 3255629:tid 3255629] [client 45.158.164.139:43300] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:12.980956 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:12.980983 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:13.015578 2026] [access_compat:error] [pid 3255060:tid 3255060] [client 106.222.248.251:14049] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:31:13.301336 2026] [lsapi:warn] [pid 3251933:tid 3251933] [client 45.158.164.139:43312] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:13.301388 2026] [lsapi:warn] [pid 3251933:tid 3251933] [client 45.158.164.139:43312] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:13.310179 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:13.310226 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:13.835859 2026] [ssl:error] [pid 3246102:tid 3246102] (EAI 2)Name or service not known: [client 144.76.19.72:38710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:13.835914 2026] [ssl:error] [pid 3246102:tid 3246102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:13.893428 2026] [ssl:error] [pid 3221143:tid 3221143] (EAI 2)Name or service not known: [client 144.76.19.72:38722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:13.893466 2026] [ssl:error] [pid 3221143:tid 3221143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:13.957129 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:13.957176 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:14.047279 2026] [ssl:error] [pid 3253377:tid 3253377] (70014)End of file found: [client 216.73.216.199:48184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:14.158810 2026] [lsapi:warn] [pid 3255636:tid 3255636] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:14.750938 2026] [lsapi:warn] [pid 3255060:tid 3255060] [client 45.158.164.139:43326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:14.751006 2026] [lsapi:warn] [pid 3255060:tid 3255060] [client 45.158.164.139:43326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:14.753661 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:14.753688 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:15.100384 2026] [lsapi:warn] [pid 3253569:tid 3253569] [client 45.158.164.139:43336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:15.100437 2026] [lsapi:warn] [pid 3253569:tid 3253569] [client 45.158.164.139:43336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:15.106299 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:15.106339 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:15.443649 2026] [ssl:error] [pid 3255014:tid 3255014] (70014)End of file found: [client 216.73.216.199:17975] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:15.844300 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 45.158.164.139:43342] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:15.844344 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 45.158.164.139:43342] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:15.847477 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:15.847517 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:16.131352 2026] [lsapi:warn] [pid 3255060:tid 3255060] [client 45.158.164.139:43346] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:16.131382 2026] [lsapi:warn] [pid 3255060:tid 3255060] [client 45.158.164.139:43346] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:16.133552 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:16.133581 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:16.363127 2026] [ssl:error] [pid 3254581:tid 3254581] (70014)End of file found: [client 216.73.216.199:44261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:16.400912 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 45.158.164.139:43358] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:16.400977 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 45.158.164.139:43358] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:16.404391 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:16.404424 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:16.671444 2026] [lsapi:warn] [pid 3251883:tid 3251883] [client 45.158.164.139:43360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:16.671514 2026] [lsapi:warn] [pid 3251883:tid 3251883] [client 45.158.164.139:43360] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:16.680259 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:16.680305 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:16.951080 2026] [ssl:error] [pid 3248119:tid 3248119] (EAI 2)Name or service not known: [client 144.76.19.72:38732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:16.951120 2026] [ssl:error] [pid 3248119:tid 3248119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:17.004650 2026] [ssl:error] [pid 3255505:tid 3255505] (EAI 2)Name or service not known: [client 144.76.19.72:38748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:17.004701 2026] [ssl:error] [pid 3255505:tid 3255505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:17.010419 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 45.158.164.139:43366] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:17.010446 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 45.158.164.139:43366] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:17.013299 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:17.013374 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:17.307518 2026] [lsapi:warn] [pid 3254028:tid 3254028] [client 45.158.164.139:43372] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:17.307563 2026] [lsapi:warn] [pid 3254028:tid 3254028] [client 45.158.164.139:43372] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:17.311263 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:17.311285 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:18.213133 2026] [access_compat:error] [pid 3255634:tid 3255634] [client 106.222.248.251:23108] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:31:19.588977 2026] [lsapi:warn] [pid 3255426:tid 3255426] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:19.667022 2026] [lsapi:warn] [pid 3254580:tid 3254580] [client 45.158.164.139:43388] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:19.667061 2026] [lsapi:warn] [pid 3254580:tid 3254580] [client 45.158.164.139:43388] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:19.669684 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:19.669707 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:19.978670 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:19.978704 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:20.080469 2026] [ssl:error] [pid 3246102:tid 3246102] (EAI 2)Name or service not known: [client 144.76.19.72:64076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:20.080543 2026] [ssl:error] [pid 3246102:tid 3246102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:20.132931 2026] [ssl:error] [pid 3254029:tid 3254029] (EAI 2)Name or service not known: [client 144.76.19.72:64086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:20.132972 2026] [ssl:error] [pid 3254029:tid 3254029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:20.295584 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:20.295620 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:20.383808 2026] [ssl:error] [pid 3230621:tid 3230621] (70014)End of file found: [client 216.73.216.199:15369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:20.520498 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:20.520542 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:20.680512 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:20.680542 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:20.891792 2026] [core:error] [pid 3255627:tid 3255627] (13)Permission denied: [client 216.73.216.199:35320] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/secure-20260705
[Thu Jul 30 13:31:20.964506 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 45.158.164.139:58662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:20.964551 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 45.158.164.139:58662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:20.967946 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:20.967979 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:21.252061 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:21.252115 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:21.287555 2026] [ssl:error] [pid 3255627:tid 3255627] (70014)End of file found: [client 216.73.216.199:35320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:21.323693 2026] [lsapi:warn] [pid 3252331:tid 3252331] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:21.774033 2026] [ssl:error] [pid 3248996:tid 3248996] (70014)End of file found: [client 216.73.216.199:31106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:22.831002 2026] [security2:error] [pid 3254581:tid 3254581] [client 45.148.10.120:43452] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amtEGrwKkgSpOuM2FoJdpQAAACo"]
[Thu Jul 30 13:31:22.831161 2026] [security2:error] [pid 3254581:tid 3254581] [client 45.148.10.120:43452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amtEGrwKkgSpOuM2FoJdpQAAACo"]
[Thu Jul 30 13:31:22.831338 2026] [security2:error] [pid 3254581:tid 3254581] [client 45.148.10.120:43452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amtEGrwKkgSpOuM2FoJdpQAAACo"]
[Thu Jul 30 13:31:22.977792 2026] [core:error] [pid 3248921:tid 3248921] [client 57.141.0.29:48034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:22.977824 2026] [core:error] [pid 3248921:tid 3248921] [client 57.141.0.29:48034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:23.190760 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:64092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:23.190792 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:23.247032 2026] [ssl:error] [pid 3255507:tid 3255507] (EAI 2)Name or service not known: [client 144.76.19.72:64098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:23.247060 2026] [ssl:error] [pid 3255507:tid 3255507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:23.334457 2026] [ssl:error] [pid 3255625:tid 3255625] (70014)End of file found: [client 216.73.216.199:12174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:23.584507 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.68:50232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:23.584531 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.68:50232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:23.622412 2026] [core:error] [pid 3254310:tid 3254310] (13)Permission denied: [client 216.73.216.199:52624] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/objs_per_slab
[Thu Jul 30 13:31:24.300052 2026] [lsapi:warn] [pid 3254581:tid 3254581] [client 45.158.164.139:58694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:24.300144 2026] [lsapi:warn] [pid 3254581:tid 3254581] [client 45.158.164.139:58694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:24.302134 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:24.302168 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:24.643751 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 45.158.164.139:58698] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:24.643797 2026] [lsapi:warn] [pid 3239713:tid 3239713] [client 45.158.164.139:58698] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:24.652523 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:24.652549 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:24.693231 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.169:57155] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:24.693267 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.169:57155] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:24.746118 2026] [lsapi:warn] [pid 3244021:tid 3244021] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:25.127208 2026] [core:error] [pid 3254310:tid 3254310] (13)Permission denied: [client 216.73.216.199:52624] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS3/iomem_base
[Thu Jul 30 13:31:25.610301 2026] [cgi:error] [pid 3255634:tid 3255634] [client 20.104.22.47:32246] AH02812: stderr from /home/thepryor/2023/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:31:25.919634 2026] [core:error] [pid 3248676:tid 3248676] [client 57.141.0.13:47224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:25.919659 2026] [core:error] [pid 3248676:tid 3248676] [client 57.141.0.13:47224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:26.079057 2026] [lsapi:warn] [pid 3254028:tid 3254028] [client 45.158.164.139:58718] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:26.079107 2026] [lsapi:warn] [pid 3254028:tid 3254028] [client 45.158.164.139:58718] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:26.081075 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:26.081101 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:26.304435 2026] [ssl:error] [pid 3255633:tid 3255633] (EAI 2)Name or service not known: [client 144.76.19.72:64116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:26.304473 2026] [ssl:error] [pid 3255633:tid 3255633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:26.338697 2026] [ssl:error] [pid 3254310:tid 3254310] (70014)End of file found: [client 216.73.216.199:52624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:26.361007 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:64126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:26.361036 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:26.401949 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:26.401977 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:26.827140 2026] [authz_core:error] [pid 3255634:tid 3255634] [client 20.104.22.47:32246] AH01630: client denied by server configuration: /home/thepryor/2023/php.ini
[Thu Jul 30 13:31:28.452211 2026] [security2:error] [pid 3254969:tid 3254969] [client 4.201.104.113:5346] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/wp-config.php"] [unique_id "amtEIECnEyFFGnR9pppVQwAAACc"]
[Thu Jul 30 13:31:28.452384 2026] [security2:error] [pid 3254969:tid 3254969] [client 4.201.104.113:5346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/wp-config.php"] [unique_id "amtEIECnEyFFGnR9pppVQwAAACc"]
[Thu Jul 30 13:31:28.706190 2026] [access_compat:error] [pid 3251933:tid 3251933] [client 106.222.248.251:23890] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:31:28.887211 2026] [security2:error] [pid 3254969:tid 3254969] [client 4.201.104.113:5346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/index.php"] [unique_id "amtEIECnEyFFGnR9pppVQwAAACc"]
[Thu Jul 30 13:31:29.414676 2026] [ssl:error] [pid 3252379:tid 3252379] (EAI 2)Name or service not known: [client 144.76.19.72:64136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:29.414712 2026] [ssl:error] [pid 3252379:tid 3252379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:29.465807 2026] [lsapi:warn] [pid 3228323:tid 3228323] [client 45.158.164.139:58732] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:29.465847 2026] [lsapi:warn] [pid 3228323:tid 3228323] [client 45.158.164.139:58732] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:29.466808 2026] [ssl:error] [pid 3254540:tid 3254540] (EAI 2)Name or service not known: [client 144.76.19.72:64150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:29.466857 2026] [ssl:error] [pid 3254540:tid 3254540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:29.468201 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:29.468229 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:29.744755 2026] [lsapi:warn] [pid 3250879:tid 3250879] [client 45.158.164.139:58746] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:29.744787 2026] [lsapi:warn] [pid 3250879:tid 3250879] [client 45.158.164.139:58746] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:29.750363 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:29.750392 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:30.059454 2026] [lsapi:warn] [pid 3244064:tid 3244064] [client 45.158.164.139:58754] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:30.059506 2026] [lsapi:warn] [pid 3244064:tid 3244064] [client 45.158.164.139:58754] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:30.062740 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:30.062768 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:30.167396 2026] [lsapi:warn] [pid 3248117:tid 3248117] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:30.260016 2026] [security2:error] [pid 3248676:tid 3248676] [client 216.73.216.199:6736] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/pam.conf"] [unique_id "amtEItM6GCzwfq85gPIlxQAAAAQ"]
[Thu Jul 30 13:31:30.260279 2026] [security2:error] [pid 3248676:tid 3248676] [client 216.73.216.199:6736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/pam.conf"] [unique_id "amtEItM6GCzwfq85gPIlxQAAAAQ"]
[Thu Jul 30 13:31:30.260498 2026] [security2:error] [pid 3248676:tid 3248676] [client 216.73.216.199:6736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/pam.conf"] [unique_id "amtEItM6GCzwfq85gPIlxQAAAAQ"]
[Thu Jul 30 13:31:30.437541 2026] [lsapi:warn] [pid 3255014:tid 3255014] [client 45.158.164.139:58768] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:30.437589 2026] [lsapi:warn] [pid 3255014:tid 3255014] [client 45.158.164.139:58768] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:30.442443 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:30.442469 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:31.462475 2026] [ssl:error] [pid 3248676:tid 3248676] (70014)End of file found: [client 216.73.216.199:6736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:32.006353 2026] [lsapi:warn] [pid 3254581:tid 3254581] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:32.068058 2026] [ssl:error] [pid 3255636:tid 3255636] (70014)End of file found: [client 216.73.216.199:11648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:32.523745 2026] [ssl:error] [pid 3248117:tid 3248117] (EAI 2)Name or service not known: [client 144.76.19.72:32140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:32.523794 2026] [ssl:error] [pid 3248117:tid 3248117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:32.528564 2026] [lsapi:warn] [pid 3255507:tid 3255507] [client 45.158.164.139:35088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:32.528604 2026] [lsapi:warn] [pid 3255507:tid 3255507] [client 45.158.164.139:35088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:32.534328 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:32.534358 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:32.838458 2026] [lsapi:warn] [pid 3256865:tid 3256865] [client 45.158.164.139:35102] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:32.838516 2026] [lsapi:warn] [pid 3256865:tid 3256865] [client 45.158.164.139:35102] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:32.839537 2026] [core:error] [pid 3255507:tid 3255507] [client 57.141.0.50:33220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:32.839557 2026] [core:error] [pid 3255507:tid 3255507] [client 57.141.0.50:33220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:31:32.840389 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:32.840414 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:33.190539 2026] [lsapi:warn] [pid 3254580:tid 3254580] [client 45.158.164.139:35104] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:33.190590 2026] [lsapi:warn] [pid 3254580:tid 3254580] [client 45.158.164.139:35104] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:33.194273 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:33.194307 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:33.322181 2026] [security2:error] [pid 3256782:tid 3256782] [client 114.119.144.31:44951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/request_format~html/cat_ids~19"] [unique_id "amtEJeZvdbjCyKEUAyKkJgAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576540800/request_format%7Ehtml
[Thu Jul 30 13:31:33.418333 2026] [ssl:error] [pid 3255505:tid 3255505] (EAI 2)Name or service not known: [client 144.76.19.72:32150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:33.418368 2026] [ssl:error] [pid 3255505:tid 3255505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:33.499519 2026] [lsapi:warn] [pid 3248117:tid 3248117] [client 45.158.164.139:35108] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:33.499590 2026] [lsapi:warn] [pid 3248117:tid 3248117] [client 45.158.164.139:35108] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:33.506669 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:33.506702 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:33.564300 2026] [core:error] [pid 3253377:tid 3253377] (13)Permission denied: [client 216.73.216.199:55830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS3/iomem_base
[Thu Jul 30 13:31:33.661197 2026] [security2:error] [pid 3248117:tid 3248117] [client 85.208.98.20:46138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/jack-and-jones-eesti-k.html"] [unique_id "amtEJX2iUSm50bLjQCwY9AAAABo"]
[Thu Jul 30 13:31:33.873286 2026] [ssl:error] [pid 3253377:tid 3253377] (70014)End of file found: [client 216.73.216.199:55830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:33.889561 2026] [lsapi:warn] [pid 3248117:tid 3248117] [client 45.158.164.139:35116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:33.889603 2026] [lsapi:warn] [pid 3248117:tid 3248117] [client 45.158.164.139:35116] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:33.897133 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:33.897162 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:34.226926 2026] [lsapi:warn] [pid 3248117:tid 3248117] [client 45.158.164.139:35124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:34.226969 2026] [lsapi:warn] [pid 3248117:tid 3248117] [client 45.158.164.139:35124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:34.234042 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:34.234091 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:35.218638 2026] [security2:error] [pid 3255381:tid 3255381] [client 114.119.144.31:44967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/request_format~html/cat_ids~19"] [unique_id "amtEJ4br1uUE1k0bPjBCuQAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576540800/request_format%7Ehtml
[Thu Jul 30 13:31:35.323024 2026] [lsapi:warn] [pid 3244602:tid 3244602] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:35.378110 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:35.378149 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:35.602432 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:35.602472 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:35.902221 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:35.902251 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:36.260829 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:36.260863 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:36.531747 2026] [ssl:error] [pid 3256867:tid 3256867] (EAI 2)Name or service not known: [client 144.76.19.72:32160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:36.531779 2026] [ssl:error] [pid 3256867:tid 3256867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:36.549437 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:36.549474 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:36.585000 2026] [ssl:error] [pid 3255626:tid 3255626] (EAI 2)Name or service not known: [client 144.76.19.72:32168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:36.585040 2026] [ssl:error] [pid 3255626:tid 3255626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:36.818906 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:36.818958 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:37.026276 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:37.026309 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:37.177755 2026] [ssl:error] [pid 3239711:tid 3239711] (70014)End of file found: [client 216.73.216.199:3012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:37.316618 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:37.316653 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:37.939611 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:37.939642 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:38.239365 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 45.158.164.139:35162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:38.239398 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 45.158.164.139:35162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:38.241601 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:38.241623 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:38.381865 2026] [ssl:error] [pid 3252331:tid 3252331] (70014)End of file found: [client 216.73.216.199:55273] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:38.516600 2026] [lsapi:warn] [pid 3256866:tid 3256866] [client 45.158.164.139:35170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:38.516639 2026] [lsapi:warn] [pid 3256866:tid 3256866] [client 45.158.164.139:35170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:38.523361 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:38.523387 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:38.808200 2026] [lsapi:warn] [pid 3255056:tid 3255056] [client 45.158.164.139:35182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:38.808251 2026] [lsapi:warn] [pid 3255056:tid 3255056] [client 45.158.164.139:35182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:38.811294 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:38.811319 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:39.130416 2026] [lsapi:warn] [pid 3256868:tid 3256868] [client 45.158.164.139:35184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:39.130458 2026] [lsapi:warn] [pid 3256868:tid 3256868] [client 45.158.164.139:35184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:39.140265 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:39.140345 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:39.263609 2026] [access_compat:error] [pid 3255381:tid 3255381] [client 106.222.248.251:18027] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:31:39.446086 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:39.446115 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:39.643884 2026] [ssl:error] [pid 3255630:tid 3255630] (EAI 2)Name or service not known: [client 144.76.19.72:57378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:39.643921 2026] [ssl:error] [pid 3255630:tid 3255630] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:39.698635 2026] [ssl:error] [pid 3255625:tid 3255625] (EAI 2)Name or service not known: [client 144.76.19.72:57380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:39.698666 2026] [ssl:error] [pid 3255625:tid 3255625] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:39.791026 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:39.791056 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:39.852101 2026] [access_compat:error] [pid 3255056:tid 3255056] [client 45.158.164.139:35202] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:31:40.100350 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 45.158.164.139:35208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:40.100389 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 45.158.164.139:35208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:40.106001 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:40.106036 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:40.166922 2026] [security2:error] [pid 3255636:tid 3255636] [client 51.68.236.91:32667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amtELLaRUK_dDykYSy_8HgAAAEA"]
[Thu Jul 30 13:31:40.359131 2026] [security2:error] [pid 3248119:tid 3248119] [client 51.68.236.91:27163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtELA6peVLE1akJMNhC_QAAACw"]
[Thu Jul 30 13:31:40.419385 2026] [lsapi:warn] [pid 3255630:tid 3255630] [client 45.158.164.139:35222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:40.419442 2026] [lsapi:warn] [pid 3255630:tid 3255630] [client 45.158.164.139:35222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:40.423471 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:40.423505 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:40.495693 2026] [security2:error] [pid 3244064:tid 3244064] [client 51.68.236.91:21501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amtELPzu26m0AIRqMws3YgAAACE"]
[Thu Jul 30 13:31:40.712146 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:40.712191 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:40.748130 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:41.019229 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:41.019259 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:41.097493 2026] [core:error] [pid 3254581:tid 3254581] (13)Permission denied: [client 216.73.216.199:60053] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty30/subsystem/ttyS3/flags
[Thu Jul 30 13:31:41.157217 2026] [security2:error] [pid 3250879:tid 3250879] [client 51.68.236.91:19883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amtELeqKr4JzULdvas9sBgAAAA8"]
[Thu Jul 30 13:31:41.335900 2026] [lsapi:warn] [pid 3256982:tid 3256982] [client 45.158.164.139:48184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:41.335943 2026] [lsapi:warn] [pid 3256982:tid 3256982] [client 45.158.164.139:48184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:41.341730 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:31:41.341754 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 4.223.67.9:58345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:31:42.138428 2026] [authz_core:error] [pid 3255059:tid 3255059] [client 20.63.98.115:59255] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 13:31:42.755564 2026] [ssl:error] [pid 3229414:tid 3229414] (EAI 2)Name or service not known: [client 144.76.19.72:57390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:42.755593 2026] [ssl:error] [pid 3229414:tid 3229414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:42.808915 2026] [ssl:error] [pid 3255056:tid 3255056] (EAI 2)Name or service not known: [client 144.76.19.72:57402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:42.808947 2026] [ssl:error] [pid 3255056:tid 3255056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:42.973633 2026] [lsapi:warn] [pid 3256783:tid 3256783] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:44.990097 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.246:17482] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "autodiscover.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtEMLaRUK_dDykYSy_8IgAAAEA"]
[Thu Jul 30 13:31:44.990478 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.246:17482] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtEMLaRUK_dDykYSy_8IgAAAEA"]
[Thu Jul 30 13:31:45.017363 2026] [ssl:error] [pid 3239711:tid 3239711] (5)Input/output error: [client 216.73.216.199:27103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:45.019002 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.246:17482] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "autodiscover.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtEMLaRUK_dDykYSy_8IgAAAEA"]
[Thu Jul 30 13:31:45.281161 2026] [security2:error] [pid 3255625:tid 3255625] [client 23.154.136.246:17492] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "autodiscover.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtEMWtLMRGNbpGhR5OeowAAADc"]
[Thu Jul 30 13:31:45.281447 2026] [security2:error] [pid 3255625:tid 3255625] [client 23.154.136.246:17492] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtEMWtLMRGNbpGhR5OeowAAADc"]
[Thu Jul 30 13:31:45.310890 2026] [security2:error] [pid 3255625:tid 3255625] [client 23.154.136.246:17492] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "autodiscover.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtEMWtLMRGNbpGhR5OeowAAADc"]
[Thu Jul 30 13:31:45.866847 2026] [ssl:error] [pid 3255626:tid 3255626] (EAI 2)Name or service not known: [client 144.76.19.72:57416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:45.866878 2026] [ssl:error] [pid 3255626:tid 3255626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:45.924341 2026] [ssl:error] [pid 3239713:tid 3239713] (EAI 2)Name or service not known: [client 144.76.19.72:57418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:45.924369 2026] [ssl:error] [pid 3239713:tid 3239713] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:45.928106 2026] [lsapi:warn] [pid 3248676:tid 3248676] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:46.518517 2026] [ssl:error] [pid 3254581:tid 3254581] (70014)End of file found: [client 216.73.216.199:60053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:47.420426 2026] [ssl:error] [pid 3256866:tid 3256866] (70014)End of file found: [client 216.73.216.199:12982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:48.977831 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.143:22252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns2.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtENLaRUK_dDykYSy_8JAAAAEA"]
[Thu Jul 30 13:31:48.978096 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.143:22252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtENLaRUK_dDykYSy_8JAAAAEA"]
[Thu Jul 30 13:31:48.978322 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.143:22252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns2.ns-narvi.com"] [uri "/403.shtml"] [unique_id "amtENLaRUK_dDykYSy_8JAAAAEA"]
[Thu Jul 30 13:31:49.068827 2026] [ssl:error] [pid 3255636:tid 3255636] (EAI 2)Name or service not known: [client 144.76.19.72:57422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:49.068869 2026] [ssl:error] [pid 3255636:tid 3255636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:49.125224 2026] [ssl:error] [pid 3255636:tid 3255636] (EAI 2)Name or service not known: [client 144.76.19.72:57434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:49.125257 2026] [ssl:error] [pid 3255636:tid 3255636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:49.242587 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.143:22264] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns2.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtENbaRUK_dDykYSy_8JQAAAEA"]
[Thu Jul 30 13:31:49.242884 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.143:22264] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtENbaRUK_dDykYSy_8JQAAAEA"]
[Thu Jul 30 13:31:49.243111 2026] [security2:error] [pid 3255636:tid 3255636] [client 23.154.136.143:22264] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns2.ns-narvi.com"] [uri "/403.shtml"] [unique_id "amtENbaRUK_dDykYSy_8JQAAAEA"]
[Thu Jul 30 13:31:50.119235 2026] [authz_core:error] [pid 3229414:tid 3229414] [client 66.249.66.33:48990] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:31:50.121951 2026] [authz_core:error] [pid 3229414:tid 3229414] [client 66.249.66.33:48990] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:31:50.529714 2026] [authz_core:error] [pid 3229414:tid 3229414] [client 66.249.66.33:48990] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:31:50.532462 2026] [authz_core:error] [pid 3229414:tid 3229414] [client 66.249.66.33:48990] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:31:51.334230 2026] [lsapi:warn] [pid 3257885:tid 3257885] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:52.223275 2026] [ssl:error] [pid 3258001:tid 3258001] (EAI 2)Name or service not known: [client 144.76.19.72:23380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:52.223333 2026] [ssl:error] [pid 3258001:tid 3258001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:52.282720 2026] [ssl:error] [pid 3257885:tid 3257885] (EAI 2)Name or service not known: [client 144.76.19.72:23394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:52.282747 2026] [ssl:error] [pid 3257885:tid 3257885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:52.352265 2026] [access_compat:error] [pid 3258002:tid 3258002] [client 106.222.248.251:2256] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:31:53.010169 2026] [authz_core:error] [pid 3258000:tid 3258000] [client 66.249.66.33:63565] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:31:53.012859 2026] [authz_core:error] [pid 3258000:tid 3258000] [client 66.249.66.33:63565] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:31:53.041281 2026] [ssl:error] [pid 3254029:tid 3254029] (70014)End of file found: [client 216.73.216.199:61327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:53.526293 2026] [cgi:error] [pid 3244064:tid 3244064] [client 20.9.4.9:43100] AH02812: stderr from /home/robincou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:31:53.642955 2026] [ssl:error] [pid 3251933:tid 3251933] (70014)End of file found: [client 216.73.216.199:14574] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:53.668958 2026] [lsapi:warn] [pid 3239601:tid 3239601] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:53.817692 2026] [authz_core:error] [pid 3255426:tid 3255426] [client 45.3.35.73:9469] AH01630: client denied by server configuration: /home/lukess/public_html/error_log, referer: https://www.facebook.com/
[Thu Jul 30 13:31:54.511784 2026] [core:error] [pid 3250879:tid 3250879] [client 62.60.130.228:64554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:54.511813 2026] [core:error] [pid 3250879:tid 3250879] [client 62.60.130.228:64554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:54.692642 2026] [core:error] [pid 3255381:tid 3255381] [client 62.60.130.228:64695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:54.692669 2026] [core:error] [pid 3255381:tid 3255381] [client 62.60.130.228:64695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:54.847860 2026] [security2:error] [pid 3258101:tid 3258101] [client 185.191.171.16:35530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.5145.html"] [unique_id "amtEOiC7y4nX923msjm_EgAAAEU"]
[Thu Jul 30 13:31:54.888809 2026] [core:error] [pid 3253377:tid 3253377] [client 62.60.130.228:65004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:54.888845 2026] [core:error] [pid 3253377:tid 3253377] [client 62.60.130.228:65004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:54.968523 2026] [authz_core:error] [pid 3254310:tid 3254310] [client 209.50.180.98:58669] AH01630: client denied by server configuration: /home/lukess/public_html/error_log, referer: https://t.co/
[Thu Jul 30 13:31:55.043355 2026] [core:error] [pid 3252331:tid 3252331] [client 62.60.130.228:65244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.043383 2026] [core:error] [pid 3252331:tid 3252331] [client 62.60.130.228:65244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.216590 2026] [authz_core:error] [pid 3244064:tid 3244064] [client 20.9.4.9:43100] AH01630: client denied by server configuration: /home/robincou/public_html/php.ini
[Thu Jul 30 13:31:55.233462 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:49571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.233506 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:49571] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.338391 2026] [ssl:error] [pid 3256865:tid 3256865] (EAI 2)Name or service not known: [client 144.76.19.72:23408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:55.338442 2026] [ssl:error] [pid 3256865:tid 3256865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:55.394964 2026] [ssl:error] [pid 3255381:tid 3255381] (EAI 2)Name or service not known: [client 144.76.19.72:23422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:55.395008 2026] [ssl:error] [pid 3255381:tid 3255381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:55.449557 2026] [authz_core:error] [pid 3244021:tid 3244021] [client 172.213.208.20:28244] AH01630: client denied by server configuration: /home/blowha/public_html/wp-admin/includes/error_log
[Thu Jul 30 13:31:55.449590 2026] [ssl:error] [pid 3258100:tid 3258100] (70014)End of file found: [client 216.73.216.199:15536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:55.452120 2026] [core:error] [pid 3257999:tid 3257999] [client 62.60.130.228:56999] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.452158 2026] [core:error] [pid 3257999:tid 3257999] [client 62.60.130.228:56999] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.592058 2026] [authz_core:error] [pid 3255056:tid 3255056] [client 20.9.4.9:25669] AH01630: client denied by server configuration: /var/www/html/php.ini
[Thu Jul 30 13:31:55.676627 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:52930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.676656 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:52930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.748295 2026] [security2:error] [pid 3258102:tid 3258102] [client 185.191.171.1:49238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/what-channel-is-ion-mystery-on-optimum"] [unique_id "amtEO2jTZ3LBRUBf45SXawAAAEY"]
[Thu Jul 30 13:31:55.843825 2026] [core:error] [pid 3229414:tid 3229414] [client 62.60.130.228:61166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.843868 2026] [core:error] [pid 3229414:tid 3229414] [client 62.60.130.228:61166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.972687 2026] [core:error] [pid 3258096:tid 3258096] [client 62.60.130.228:61305] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:55.972712 2026] [core:error] [pid 3258096:tid 3258096] [client 62.60.130.228:61305] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.006269 2026] [authz_core:error] [pid 3258101:tid 3258101] [client 209.50.165.26:30835] AH01630: client denied by server configuration: /home/lukess/public_html/error_log, referer: https://www.google.com/search?q=wordpress
[Thu Jul 30 13:31:56.093397 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:61394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.093429 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:61394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.249743 2026] [core:error] [pid 3258102:tid 3258102] [client 62.60.130.228:64776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.249786 2026] [core:error] [pid 3258102:tid 3258102] [client 62.60.130.228:64776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.377142 2026] [core:error] [pid 3258096:tid 3258096] [client 62.60.130.228:64956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.377196 2026] [core:error] [pid 3258096:tid 3258096] [client 62.60.130.228:64956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.564716 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:61576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.564738 2026] [core:error] [pid 3248117:tid 3248117] [client 62.60.130.228:61576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.571634 2026] [lsapi:warn] [pid 3258002:tid 3258002] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:31:56.699754 2026] [core:error] [pid 3258102:tid 3258102] [client 62.60.130.228:61724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:56.699779 2026] [core:error] [pid 3258102:tid 3258102] [client 62.60.130.228:61724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:31:57.000329 2026] [authz_core:error] [pid 3258096:tid 3258096] [client 209.50.162.26:42611] AH01630: client denied by server configuration: /home/lukess/public_html/error_log, referer: https://www.google.com/
[Thu Jul 30 13:31:58.090622 2026] [authz_core:error] [pid 3258102:tid 3258102] [client 216.26.244.75:43933] AH01630: client denied by server configuration: /home/lukess/public_html/error_log, referer: https://wordpress.org/
[Thu Jul 30 13:31:58.450887 2026] [ssl:error] [pid 3257943:tid 3257943] (EAI 2)Name or service not known: [client 144.76.19.72:23428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:58.450918 2026] [ssl:error] [pid 3257943:tid 3257943] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:58.503882 2026] [ssl:error] [pid 3254029:tid 3254029] (EAI 2)Name or service not known: [client 144.76.19.72:23436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:31:58.503907 2026] [ssl:error] [pid 3254029:tid 3254029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:31:59.063320 2026] [ssl:error] [pid 3239711:tid 3239711] (70014)End of file found: [client 216.73.216.199:51701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:31:59.665147 2026] [ssl:error] [pid 3255059:tid 3255059] (70014)End of file found: [client 216.73.216.199:49258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:01.565100 2026] [ssl:error] [pid 3258100:tid 3258100] (EAI 2)Name or service not known: [client 144.76.19.72:40790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:01.565147 2026] [ssl:error] [pid 3258100:tid 3258100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:01.621580 2026] [ssl:error] [pid 3256783:tid 3256783] (EAI 2)Name or service not known: [client 144.76.19.72:40806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:01.621612 2026] [ssl:error] [pid 3256783:tid 3256783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:01.673337 2026] [access_compat:error] [pid 3258096:tid 3258096] [client 106.222.248.251:16597] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:32:01.952918 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:02.078888 2026] [ssl:error] [pid 3246397:tid 3246397] (70014)End of file found: [client 216.73.216.199:35847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:04.094602 2026] [security2:error] [pid 3250879:tid 3250879] [client 113.11.15.53:48022] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEROqKr4JzULdvas9sEAAAAA8"]
[Thu Jul 30 13:32:04.094657 2026] [security2:error] [pid 3250879:tid 3250879] [client 113.11.15.53:48022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEROqKr4JzULdvas9sEAAAAA8"]
[Thu Jul 30 13:32:04.094935 2026] [security2:error] [pid 3250879:tid 3250879] [client 113.11.15.53:48022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEROqKr4JzULdvas9sEAAAAA8"]
[Thu Jul 30 13:32:04.393231 2026] [ssl:error] [pid 3254580:tid 3254580] (70014)End of file found: [client 216.73.216.199:61130] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:04.423266 2026] [lsapi:warn] [pid 3229414:tid 3229414] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:04.678628 2026] [ssl:error] [pid 3254969:tid 3254969] (EAI 2)Name or service not known: [client 144.76.19.72:40820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:04.678683 2026] [ssl:error] [pid 3254969:tid 3254969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:04.737081 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:40836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:04.737134 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:05.391737 2026] [ssl:error] [pid 3258098:tid 3258098] (70014)End of file found: [client 216.73.216.199:6155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:07.178509 2026] [lsapi:warn] [pid 3251933:tid 3251933] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:07.489746 2026] [security2:error] [pid 3239711:tid 3239711] [client 181.93.181.160:37518] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtERzj4rN-A_CV6etFOrQAAADg"]
[Thu Jul 30 13:32:07.489811 2026] [security2:error] [pid 3239711:tid 3239711] [client 181.93.181.160:37518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtERzj4rN-A_CV6etFOrQAAADg"]
[Thu Jul 30 13:32:07.490165 2026] [security2:error] [pid 3239711:tid 3239711] [client 181.93.181.160:37518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtERzj4rN-A_CV6etFOrQAAADg"]
[Thu Jul 30 13:32:07.792749 2026] [ssl:error] [pid 3258096:tid 3258096] (EAI 2)Name or service not known: [client 144.76.19.72:40852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:07.792804 2026] [ssl:error] [pid 3258096:tid 3258096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:07.846348 2026] [ssl:error] [pid 3257468:tid 3257468] (EAI 2)Name or service not known: [client 144.76.19.72:40862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:07.846387 2026] [ssl:error] [pid 3257468:tid 3257468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:08.189142 2026] [security2:error] [pid 3257885:tid 3257885] [client 20.171.55.167:5777] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ziltdesign.be"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtESOwihN9HoawGwGINkwAAAAE"]
[Thu Jul 30 13:32:08.189402 2026] [security2:error] [pid 3257885:tid 3257885] [client 20.171.55.167:5777] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziltdesign.be"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtESOwihN9HoawGwGINkwAAAAE"]
[Thu Jul 30 13:32:08.189697 2026] [security2:error] [pid 3257885:tid 3257885] [client 20.171.55.167:5777] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ziltdesign.be"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtESOwihN9HoawGwGINkwAAAAE"]
[Thu Jul 30 13:32:09.602964 2026] [ssl:error] [pid 3255636:tid 3255636] (70014)End of file found: [client 216.73.216.199:10292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:10.094511 2026] [ssl:error] [pid 3256868:tid 3256868] (70014)End of file found: [client 216.73.216.199:59234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:10.719397 2026] [core:error] [pid 3250879:tid 3250879] (13)Permission denied: [client 216.73.216.199:23194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty25/subsystem/ttyS2/close_delay
[Thu Jul 30 13:32:10.903643 2026] [ssl:error] [pid 3252331:tid 3252331] (EAI 2)Name or service not known: [client 144.76.19.72:36762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:10.903691 2026] [ssl:error] [pid 3252331:tid 3252331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:10.957061 2026] [ssl:error] [pid 3251933:tid 3251933] (EAI 2)Name or service not known: [client 144.76.19.72:36772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:10.957109 2026] [ssl:error] [pid 3251933:tid 3251933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:11.620973 2026] [security2:error] [pid 3255059:tid 3255059] [client 177.8.34.59:48338] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtES9zVFDp4rG3jF-nF7AAAAC8"]
[Thu Jul 30 13:32:11.621051 2026] [security2:error] [pid 3255059:tid 3255059] [client 177.8.34.59:48338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtES9zVFDp4rG3jF-nF7AAAAC8"]
[Thu Jul 30 13:32:11.621392 2026] [security2:error] [pid 3255059:tid 3255059] [client 177.8.34.59:48338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtES9zVFDp4rG3jF-nF7AAAAC8"]
[Thu Jul 30 13:32:12.399225 2026] [core:error] [pid 3257943:tid 3257943] [client 66.249.64.170:63921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:12.399265 2026] [core:error] [pid 3257943:tid 3257943] [client 66.249.64.170:63921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:12.515156 2026] [lsapi:warn] [pid 3257885:tid 3257885] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:13.085977 2026] [access_compat:error] [pid 3255505:tid 3255505] [client 106.222.248.251:12962] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:32:14.050360 2026] [ssl:error] [pid 3255629:tid 3255629] (EAI 2)Name or service not known: [client 144.76.19.72:36786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:14.050408 2026] [ssl:error] [pid 3255629:tid 3255629] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:14.105654 2026] [ssl:error] [pid 3258957:tid 3258957] (EAI 2)Name or service not known: [client 144.76.19.72:36788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:14.105700 2026] [ssl:error] [pid 3258957:tid 3258957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:14.438546 2026] [core:error] [pid 3250879:tid 3250879] (13)Permission denied: [client 216.73.216.199:23194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS0/uartclk
[Thu Jul 30 13:32:15.333123 2026] [lsapi:warn] [pid 3256982:tid 3256982] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:17.207598 2026] [ssl:error] [pid 3258001:tid 3258001] (EAI 2)Name or service not known: [client 144.76.19.72:36792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:17.207644 2026] [ssl:error] [pid 3258001:tid 3258001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:17.263708 2026] [ssl:error] [pid 3248676:tid 3248676] (EAI 2)Name or service not known: [client 144.76.19.72:36804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:17.263748 2026] [ssl:error] [pid 3248676:tid 3248676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:17.751490 2026] [lsapi:warn] [pid 3256982:tid 3256982] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:18.697018 2026] [cgi:error] [pid 3248996:tid 3248996] [client 20.9.4.9:23248] AH02812: stderr from /home/horusw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:32:19.764366 2026] [security2:error] [pid 3255629:tid 3255629] [client 43.162.103.165:35830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "butteredcat.com"] [uri "/wp/"] [unique_id "amtEU762uHQCafTWmGXSlQAAADw"]
[Thu Jul 30 13:32:19.883081 2026] [security2:error] [pid 3257468:tid 3257468] [client 43.159.149.56:34660] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amtEU35AuqGoYnl8WwJjCwAAAAU"]
[Thu Jul 30 13:32:20.272265 2026] [authz_core:error] [pid 3244982:tid 3244982] [client 51.104.167.52:44454] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:32:20.274924 2026] [authz_core:error] [pid 3244982:tid 3244982] [client 51.104.167.52:44454] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:32:20.318472 2026] [ssl:error] [pid 3254029:tid 3254029] (EAI 2)Name or service not known: [client 144.76.19.72:21266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:20.318508 2026] [ssl:error] [pid 3254029:tid 3254029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:20.374263 2026] [ssl:error] [pid 3257468:tid 3257468] (EAI 2)Name or service not known: [client 144.76.19.72:21272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:20.374291 2026] [ssl:error] [pid 3257468:tid 3257468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:20.593350 2026] [core:error] [pid 3254029:tid 3254029] [client 66.249.66.194:55936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:20.593388 2026] [core:error] [pid 3254029:tid 3254029] [client 66.249.66.194:55936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:20.595205 2026] [core:error] [pid 3255014:tid 3255014] [client 66.249.66.169:62741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:20.595224 2026] [core:error] [pid 3255014:tid 3255014] [client 66.249.66.169:62741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:21.090683 2026] [core:error] [pid 3258001:tid 3258001] (13)Permission denied: [client 216.73.216.199:60071] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS3/iomem_base
[Thu Jul 30 13:32:22.996883 2026] [access_compat:error] [pid 3233530:tid 3233530] [client 106.222.248.251:18008] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:32:23.027776 2026] [security2:error] [pid 3257468:tid 3257468] [client 47.128.53.57:28296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.plastic-sheeting.org"] [uri "/robots.txt"] [unique_id "amtEV35AuqGoYnl8WwJjEQAAAAU"]
[Thu Jul 30 13:32:23.091664 2026] [lsapi:warn] [pid 3246397:tid 3246397] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:23.417906 2026] [security2:error] [pid 3255014:tid 3255014] [client 150.109.46.88:50766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtEV_6CzTDiC_PE2JXQeAAAACg"]
[Thu Jul 30 13:32:23.432546 2026] [ssl:error] [pid 3254969:tid 3254969] (EAI 2)Name or service not known: [client 144.76.19.72:21284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:23.432578 2026] [ssl:error] [pid 3254969:tid 3254969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:23.491543 2026] [ssl:error] [pid 3257468:tid 3257468] (EAI 2)Name or service not known: [client 144.76.19.72:21288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:23.491565 2026] [ssl:error] [pid 3257468:tid 3257468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:25.999190 2026] [lsapi:warn] [pid 3254580:tid 3254580] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:26.217941 2026] [core:error] [pid 3258102:tid 3258102] [client 66.249.66.67:45504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:26.217986 2026] [core:error] [pid 3258102:tid 3258102] [client 66.249.66.67:45504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:26.571972 2026] [ssl:error] [pid 3255058:tid 3255058] (EAI 2)Name or service not known: [client 144.76.19.72:21298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:26.572033 2026] [ssl:error] [pid 3255058:tid 3255058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:26.630855 2026] [ssl:error] [pid 3256865:tid 3256865] (EAI 2)Name or service not known: [client 144.76.19.72:21314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:26.630897 2026] [ssl:error] [pid 3256865:tid 3256865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:27.279548 2026] [core:error] [pid 3250879:tid 3250879] (13)Permission denied: [client 216.73.216.199:23194] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/bus/platform/drivers_probe
[Thu Jul 30 13:32:27.581567 2026] [ssl:error] [pid 3250879:tid 3250879] (70014)End of file found: [client 216.73.216.199:23194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:27.887773 2026] [authz_core:error] [pid 3248996:tid 3248996] [client 20.9.4.9:23248] AH01630: client denied by server configuration: /home/horusw/public_html/php.ini
[Thu Jul 30 13:32:28.346346 2026] [lsapi:warn] [pid 3260059:tid 3260059] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:29.387449 2026] [ssl:error] [pid 3258001:tid 3258001] (70014)End of file found: [client 216.73.216.199:60071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:29.688771 2026] [ssl:error] [pid 3248117:tid 3248117] (EAI 2)Name or service not known: [client 144.76.19.72:27652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:29.688807 2026] [ssl:error] [pid 3248117:tid 3248117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:29.740498 2026] [ssl:error] [pid 3258958:tid 3258958] (EAI 2)Name or service not known: [client 144.76.19.72:27654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:29.740545 2026] [ssl:error] [pid 3258958:tid 3258958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:31.189157 2026] [core:error] [pid 3260127:tid 3260127] (13)Permission denied: [client 216.73.216.199:2834] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/chkserv.d/lfd
[Thu Jul 30 13:32:32.275581 2026] [lsapi:warn] [pid 3257999:tid 3257999] [client 194.249.231.23:47286] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 13:32:32.275653 2026] [lsapi:warn] [pid 3257999:tid 3257999] [client 194.249.231.23:47286] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 13:32:32.794631 2026] [ssl:error] [pid 3254969:tid 3254969] (EAI 2)Name or service not known: [client 144.76.19.72:27662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:32.794663 2026] [ssl:error] [pid 3254969:tid 3254969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:32.850706 2026] [ssl:error] [pid 3255056:tid 3255056] (EAI 2)Name or service not known: [client 144.76.19.72:27674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:32.850733 2026] [ssl:error] [pid 3255056:tid 3255056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:33.703106 2026] [lsapi:warn] [pid 3250879:tid 3250879] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:33.912615 2026] [ssl:error] [pid 3260127:tid 3260127] (70014)End of file found: [client 216.73.216.199:2834] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:33.914938 2026] [access_compat:error] [pid 3257468:tid 3257468] [client 106.222.248.251:7161] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:32:34.427868 2026] [ssl:error] [pid 3254969:tid 3254969] (70014)End of file found: [client 216.73.216.199:58667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:34.722389 2026] [ssl:error] [pid 3251933:tid 3251933] (5)Input/output error: [client 216.73.216.199:60811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:35.058747 2026] [security2:error] [pid 3239711:tid 3239711] [client 43.165.7.74:40906] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bashforthbell.com"] [uri "/"] [unique_id "amtEYzj4rN-A_CV6etFPGgAAADg"]
[Thu Jul 30 13:32:35.926954 2026] [security2:error] [pid 3255056:tid 3255056] [client 43.165.7.74:41308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amtEY1dXJw6UjyLeY2W4KwAAAC0"], referer: http://www.bashforthbell.com
[Thu Jul 30 13:32:35.930533 2026] [ssl:error] [pid 3255014:tid 3255014] (EAI 2)Name or service not known: [client 144.76.19.72:27678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:35.930563 2026] [ssl:error] [pid 3255014:tid 3255014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:35.995862 2026] [ssl:error] [pid 3255014:tid 3255014] (EAI 2)Name or service not known: [client 144.76.19.72:27690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:35.995890 2026] [ssl:error] [pid 3255014:tid 3255014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:36.710893 2026] [security2:error] [pid 3260126:tid 3260126] [client 49.232.104.223:53780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchell.org"] [uri "/"] [unique_id "amtEZLb6mzLQ03ZAJn1nVgAAABM"]
[Thu Jul 30 13:32:36.835059 2026] [lsapi:warn] [pid 3258100:tid 3258100] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:38.951378 2026] [lsapi:warn] [pid 3258001:tid 3258001] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:39.048821 2026] [ssl:error] [pid 3260635:tid 3260635] (EAI 2)Name or service not known: [client 144.76.19.72:27706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:39.048853 2026] [ssl:error] [pid 3260635:tid 3260635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:39.103568 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:27710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:39.103595 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:39.249595 2026] [ssl:error] [pid 3258958:tid 3258958] (70014)End of file found: [client 216.73.216.199:44397] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:39.856342 2026] [core:error] [pid 3257942:tid 3257942] (13)Permission denied: [client 216.73.216.199:23735] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/subsystem/ttyS0/uartclk
[Thu Jul 30 13:32:39.963198 2026] [security2:error] [pid 3257942:tid 3257942] [client 216.73.216.199:23735] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/man-db.conf"] [unique_id "amtEZ9oxHclMkOO6Lg-d0AAAAAk"]
[Thu Jul 30 13:32:39.963501 2026] [security2:error] [pid 3257942:tid 3257942] [client 216.73.216.199:23735] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/man-db.conf"] [unique_id "amtEZ9oxHclMkOO6Lg-d0AAAAAk"]
[Thu Jul 30 13:32:39.963745 2026] [security2:error] [pid 3257942:tid 3257942] [client 216.73.216.199:23735] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/man-db.conf"] [unique_id "amtEZ9oxHclMkOO6Lg-d0AAAAAk"]
[Thu Jul 30 13:32:41.167966 2026] [ssl:error] [pid 3257942:tid 3257942] (5)Input/output error: [client 216.73.216.199:23735] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:42.158849 2026] [ssl:error] [pid 3258101:tid 3258101] (EAI 2)Name or service not known: [client 144.76.19.72:34006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:42.158893 2026] [ssl:error] [pid 3258101:tid 3258101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:42.213811 2026] [ssl:error] [pid 3256982:tid 3256982] (EAI 2)Name or service not known: [client 144.76.19.72:34016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:42.213851 2026] [ssl:error] [pid 3256982:tid 3256982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:43.584581 2026] [ssl:error] [pid 3250879:tid 3250879] (70014)End of file found: [client 216.73.216.199:33949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:44.274516 2026] [lsapi:warn] [pid 3255626:tid 3255626] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:44.672300 2026] [ssl:error] [pid 3244982:tid 3244982] (70014)End of file found: [client 216.73.216.199:56759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:45.268076 2026] [ssl:error] [pid 3259892:tid 3259892] (EAI 2)Name or service not known: [client 144.76.19.72:34024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:45.268114 2026] [ssl:error] [pid 3259892:tid 3259892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:45.282856 2026] [access_compat:error] [pid 3255014:tid 3255014] [client 106.222.248.251:11761] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:32:45.323591 2026] [ssl:error] [pid 3254969:tid 3254969] (EAI 2)Name or service not known: [client 144.76.19.72:34038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:45.323616 2026] [ssl:error] [pid 3254969:tid 3254969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:45.745914 2026] [access_compat:error] [pid 3254580:tid 3254580] [client 45.158.164.139:49074] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:32:47.604122 2026] [lsapi:warn] [pid 3255625:tid 3255625] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:48.113510 2026] [ssl:error] [pid 3258101:tid 3258101] (70014)End of file found: [client 216.73.216.199:55896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:48.380296 2026] [ssl:error] [pid 3251933:tid 3251933] (EAI 2)Name or service not known: [client 144.76.19.72:34042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:48.380338 2026] [ssl:error] [pid 3251933:tid 3251933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:48.437358 2026] [ssl:error] [pid 3257999:tid 3257999] (EAI 2)Name or service not known: [client 144.76.19.72:34054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:48.437385 2026] [ssl:error] [pid 3257999:tid 3257999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:48.723875 2026] [security2:error] [pid 3260059:tid 3260059] [client 43.156.36.169:54650] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.juliaashmore.org"] [uri "/"] [unique_id "amtEcNV3gMV3WFrO9o5UrQAAABI"]
[Thu Jul 30 13:32:49.019985 2026] [core:error] [pid 3254969:tid 3254969] (13)Permission denied: [client 216.73.216.199:39549] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS0/uartclk
[Thu Jul 30 13:32:49.315773 2026] [ssl:error] [pid 3254969:tid 3254969] (70014)End of file found: [client 216.73.216.199:39549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:49.376015 2026] [core:error] [pid 3257999:tid 3257999] [client 57.141.0.16:60224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:49.376039 2026] [core:error] [pid 3257999:tid 3257999] [client 57.141.0.16:60224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:32:49.611189 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:50.153856 2026] [core:error] [pid 3255014:tid 3255014] (13)Permission denied: [client 216.73.216.199:47274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 13:32:50.553443 2026] [ssl:error] [pid 3255014:tid 3255014] (70014)End of file found: [client 216.73.216.199:47274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:32:51.492423 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:31678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:51.492453 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:51.546640 2026] [ssl:error] [pid 3255625:tid 3255625] (EAI 2)Name or service not known: [client 144.76.19.72:31688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:51.546664 2026] [ssl:error] [pid 3255625:tid 3255625] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:51.849583 2026] [access_compat:error] [pid 3251933:tid 3251933] [client 2.189.5.142:51600] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:32:51.956060 2026] [access_compat:error] [pid 3259892:tid 3259892] [client 2.189.5.162:49230] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:32:54.605267 2026] [ssl:error] [pid 3258098:tid 3258098] (EAI 2)Name or service not known: [client 144.76.19.72:31702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:54.605311 2026] [ssl:error] [pid 3258098:tid 3258098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:54.659864 2026] [ssl:error] [pid 3255507:tid 3255507] (EAI 2)Name or service not known: [client 144.76.19.72:31712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:54.659894 2026] [ssl:error] [pid 3255507:tid 3255507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:54.695908 2026] [authz_core:error] [pid 3254029:tid 3254029] [client 20.193.250.173:63476] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 13:32:54.923739 2026] [security2:error] [pid 3246397:tid 3246397] [client 94.154.43.186:34820] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sewyork.co.uk"] [uri "/.env"] [unique_id "amtEdqbtC57EV7wXbM4ZfgAAAAc"]
[Thu Jul 30 13:32:54.923928 2026] [security2:error] [pid 3246397:tid 3246397] [client 94.154.43.186:34820] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sewyork.co.uk"] [uri "/.env"] [unique_id "amtEdqbtC57EV7wXbM4ZfgAAAAc"]
[Thu Jul 30 13:32:54.924135 2026] [security2:error] [pid 3246397:tid 3246397] [client 94.154.43.186:34820] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sewyork.co.uk"] [uri "/.env"] [unique_id "amtEdqbtC57EV7wXbM4ZfgAAAAc"]
[Thu Jul 30 13:32:54.933124 2026] [lsapi:warn] [pid 3257468:tid 3257468] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:32:55.609151 2026] [access_compat:error] [pid 3246397:tid 3246397] [client 106.222.248.251:14068] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:32:56.304045 2026] [security2:error] [pid 3260127:tid 3260127] [client 85.208.96.212:47694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/ernie-wise-house-peterborough"] [unique_id "amtEeM1OfGdZoYVI6stZggAAABQ"]
[Thu Jul 30 13:32:56.725563 2026] [security2:error] [pid 3255059:tid 3255059] [client 114.119.155.144:41489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~30,14/request_format~html"] [unique_id "amtEeNzVFDp4rG3jF-nGEwAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~30,14/request_format~html
[Thu Jul 30 13:32:56.793085 2026] [core:error] [pid 3258002:tid 3258002] (13)Permission denied: [client 216.73.216.199:26890] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 13:32:57.583132 2026] [security2:error] [pid 3256868:tid 3256868] [client 94.154.43.186:57170] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.sewyork.co.uk"] [uri "/.env"] [unique_id "amtEeVm1oNmaxRJQv4_g0QAAACM"]
[Thu Jul 30 13:32:57.583333 2026] [security2:error] [pid 3256868:tid 3256868] [client 94.154.43.186:57170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.sewyork.co.uk"] [uri "/.env"] [unique_id "amtEeVm1oNmaxRJQv4_g0QAAACM"]
[Thu Jul 30 13:32:57.607951 2026] [security2:error] [pid 3256868:tid 3256868] [client 94.154.43.186:57170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.sewyork.co.uk"] [uri "/403.shtml"] [unique_id "amtEeVm1oNmaxRJQv4_g0QAAACM"]
[Thu Jul 30 13:32:57.712976 2026] [ssl:error] [pid 3258001:tid 3258001] (EAI 2)Name or service not known: [client 144.76.19.72:31726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:57.713006 2026] [ssl:error] [pid 3258001:tid 3258001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:57.804608 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:31740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:32:57.804636 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:32:58.055332 2026] [security2:error] [pid 3260059:tid 3260059] [client 114.119.155.144:36957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~30,14/request_format~html"] [unique_id "amtEetV3gMV3WFrO9o5UswAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~30,14/request_format~html
[Thu Jul 30 13:32:58.135224 2026] [security2:error] [pid 3248921:tid 3248921] [client 94.154.43.183:62362] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.sewyork.co.uk"] [uri "/.env"] [unique_id "amtEeoZq0oeG8DcvKRfelQAAABg"]
[Thu Jul 30 13:32:58.135428 2026] [security2:error] [pid 3248921:tid 3248921] [client 94.154.43.183:62362] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.sewyork.co.uk"] [uri "/.env"] [unique_id "amtEeoZq0oeG8DcvKRfelQAAABg"]
[Thu Jul 30 13:32:58.135667 2026] [security2:error] [pid 3248921:tid 3248921] [client 94.154.43.183:62362] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mail.sewyork.co.uk"] [uri "/.env"] [unique_id "amtEeoZq0oeG8DcvKRfelQAAABg"]
[Thu Jul 30 13:32:58.784690 2026] [lsapi:warn] [pid 3258907:tid 3258907] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:00.239026 2026] [lsapi:warn] [pid 3230621:tid 3230621] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:00.858116 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:51790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:00.858149 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:00.914059 2026] [ssl:error] [pid 3260127:tid 3260127] (EAI 2)Name or service not known: [client 144.76.19.72:51806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:00.914103 2026] [ssl:error] [pid 3260127:tid 3260127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:02.067288 2026] [security2:error] [pid 3255014:tid 3255014] [client 114.119.135.233:41179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2014/04/IMG_2240.jpg"] [unique_id "amtEfv6CzTDiC_PE2JXQiAAAACg"], referer: https://wmsfirearmstraining.com/wms-photo-gallery/
[Thu Jul 30 13:33:02.554709 2026] [security2:error] [pid 3244982:tid 3244982] [client 47.77.228.156:46767] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEflkmgj8vGR34G0HAfAAAAA4"]
[Thu Jul 30 13:33:02.554768 2026] [security2:error] [pid 3244982:tid 3244982] [client 47.77.228.156:46767] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEflkmgj8vGR34G0HAfAAAAA4"]
[Thu Jul 30 13:33:02.555032 2026] [security2:error] [pid 3244982:tid 3244982] [client 47.77.228.156:46767] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEflkmgj8vGR34G0HAfAAAAA4"]
[Thu Jul 30 13:33:03.814596 2026] [ssl:error] [pid 3239711:tid 3239711] (70014)End of file found: [client 216.73.216.199:35226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:03.993600 2026] [ssl:error] [pid 3259892:tid 3259892] (EAI 2)Name or service not known: [client 144.76.19.72:51810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:03.993639 2026] [ssl:error] [pid 3259892:tid 3259892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:04.049174 2026] [ssl:error] [pid 3248676:tid 3248676] (EAI 2)Name or service not known: [client 144.76.19.72:51822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:04.049201 2026] [ssl:error] [pid 3248676:tid 3248676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:04.116116 2026] [ssl:error] [pid 3251933:tid 3251933] (70014)End of file found: [client 216.73.216.199:2086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:04.553313 2026] [core:error] [pid 3247029:tid 3247029] [client 66.249.66.169:45119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:04.553342 2026] [core:error] [pid 3247029:tid 3247029] [client 66.249.66.169:45119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:05.451984 2026] [security2:error] [pid 3258907:tid 3258907] [client 37.63.32.91:62004] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEgQuhTzyElPwrg7ZxfgAAABE"]
[Thu Jul 30 13:33:05.452049 2026] [security2:error] [pid 3258907:tid 3258907] [client 37.63.32.91:62004] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEgQuhTzyElPwrg7ZxfgAAABE"]
[Thu Jul 30 13:33:05.452348 2026] [security2:error] [pid 3258907:tid 3258907] [client 37.63.32.91:62004] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEgQuhTzyElPwrg7ZxfgAAABE"]
[Thu Jul 30 13:33:05.509080 2026] [lsapi:warn] [pid 3256868:tid 3256868] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:06.136623 2026] [core:error] [pid 3258101:tid 3258101] [client 66.249.66.41:41446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:06.136663 2026] [core:error] [pid 3258101:tid 3258101] [client 66.249.66.41:41446] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:07.027951 2026] [security2:error] [pid 3255059:tid 3255059] [client 51.161.37.187:28118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.brodie-engineering.co.uk"] [uri "/robots.txt"] [unique_id "amtEg9zVFDp4rG3jF-nGFgAAAC8"]
[Thu Jul 30 13:33:07.103491 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:51832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:07.103517 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:07.156080 2026] [ssl:error] [pid 3244982:tid 3244982] (EAI 2)Name or service not known: [client 144.76.19.72:51840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:07.156108 2026] [ssl:error] [pid 3244982:tid 3244982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:08.098900 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.167:44723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:08.098926 2026] [core:error] [pid 3244602:tid 3244602] [client 66.249.66.167:44723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:08.158379 2026] [security2:error] [pid 3255059:tid 3255059] [client 51.195.183.210:27466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.brodie-engineering.co.uk"] [uri "/news/apprenticeships.html"] [unique_id "amtEhNzVFDp4rG3jF-nGFwAAAC8"]
[Thu Jul 30 13:33:08.946889 2026] [ssl:error] [pid 3257942:tid 3257942] (70014)End of file found: [client 216.73.216.199:62551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:09.707401 2026] [access_compat:error] [pid 3244602:tid 3244602] [client 106.222.248.251:26056] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:33:09.710457 2026] [lsapi:warn] [pid 3254969:tid 3254969] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:10.213454 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:40630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:10.213508 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:10.269669 2026] [ssl:error] [pid 3257468:tid 3257468] (EAI 2)Name or service not known: [client 144.76.19.72:40632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:10.269709 2026] [ssl:error] [pid 3257468:tid 3257468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:10.337783 2026] [security2:error] [pid 3251933:tid 3251933] [client 74.244.5.139:48703] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEhkI9yJfJ3mOfon7TUgAAABA"]
[Thu Jul 30 13:33:10.337830 2026] [security2:error] [pid 3251933:tid 3251933] [client 74.244.5.139:48703] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEhkI9yJfJ3mOfon7TUgAAABA"]
[Thu Jul 30 13:33:10.338111 2026] [security2:error] [pid 3251933:tid 3251933] [client 74.244.5.139:48703] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEhkI9yJfJ3mOfon7TUgAAABA"]
[Thu Jul 30 13:33:10.894220 2026] [lsapi:warn] [pid 3233530:tid 3233530] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:13.326581 2026] [ssl:error] [pid 3260127:tid 3260127] (EAI 2)Name or service not known: [client 144.76.19.72:40640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:13.326620 2026] [ssl:error] [pid 3260127:tid 3260127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:13.381211 2026] [ssl:error] [pid 3255059:tid 3255059] (EAI 2)Name or service not known: [client 144.76.19.72:40646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:13.381249 2026] [ssl:error] [pid 3255059:tid 3255059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:13.466931 2026] [ssl:error] [pid 3257468:tid 3257468] (70014)End of file found: [client 216.73.216.199:1774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:14.360672 2026] [security2:error] [pid 3251933:tid 3251933] [client 49.51.233.95:47522] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/"] [unique_id "amtEikI9yJfJ3mOfon7TVAAAABA"]
[Thu Jul 30 13:33:14.964331 2026] [access_compat:error] [pid 3260127:tid 3260127] [client 24.183.239.133:37103] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/30-days-of-night, referer: https://www.google.com/
[Thu Jul 30 13:33:14.964491 2026] [access_compat:error] [pid 3260127:tid 3260127] [client 24.183.239.133:37103] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://www.google.com/
[Thu Jul 30 13:33:16.125291 2026] [lsapi:warn] [pid 3260127:tid 3260127] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:16.435283 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:40662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:16.435323 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:16.487562 2026] [ssl:error] [pid 3255059:tid 3255059] (EAI 2)Name or service not known: [client 144.76.19.72:40676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:16.487593 2026] [ssl:error] [pid 3255059:tid 3255059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:16.774541 2026] [core:error] [pid 3258100:tid 3258100] (13)Permission denied: [client 216.73.216.199:41995] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/exim_rejectlog
[Thu Jul 30 13:33:17.713252 2026] [access_compat:error] [pid 3239711:tid 3239711] [client 106.222.248.251:2742] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:33:17.764394 2026] [authz_core:error] [pid 3255626:tid 3255626] [client 20.193.250.173:56708] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 13:33:17.981298 2026] [ssl:error] [pid 3262956:tid 3262956] (70014)End of file found: [client 216.73.216.199:45235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:19.544188 2026] [ssl:error] [pid 3263004:tid 3263004] (EAI 2)Name or service not known: [client 144.76.19.72:40692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:19.544228 2026] [ssl:error] [pid 3263004:tid 3263004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:19.600675 2026] [ssl:error] [pid 3255509:tid 3255509] (EAI 2)Name or service not known: [client 144.76.19.72:58894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:19.600704 2026] [ssl:error] [pid 3255509:tid 3255509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:19.790563 2026] [ssl:error] [pid 3258100:tid 3258100] (70014)End of file found: [client 216.73.216.199:41995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:20.119907 2026] [access_compat:error] [pid 3248676:tid 3248676] [client 66.176.195.254:49203] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/30-days-of-night
[Thu Jul 30 13:33:20.120016 2026] [access_compat:error] [pid 3248676:tid 3248676] [client 66.176.195.254:49203] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:33:20.500633 2026] [access_compat:error] [pid 3248676:tid 3248676] [client 66.176.195.254:49203] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/favicon.ico, referer: https://blog.alism.com/30-days-of-night/
[Thu Jul 30 13:33:20.500730 2026] [access_compat:error] [pid 3248676:tid 3248676] [client 66.176.195.254:49203] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/30-days-of-night/
[Thu Jul 30 13:33:20.541500 2026] [lsapi:warn] [pid 3263004:tid 3263004] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:21.498229 2026] [lsapi:warn] [pid 3250879:tid 3250879] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:22.505441 2026] [ssl:error] [pid 3255636:tid 3255636] (70014)End of file found: [client 216.73.216.199:61602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:22.652806 2026] [ssl:error] [pid 3258101:tid 3258101] (EAI 2)Name or service not known: [client 144.76.19.72:58900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:22.652847 2026] [ssl:error] [pid 3258101:tid 3258101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:22.708909 2026] [ssl:error] [pid 3260059:tid 3260059] (EAI 2)Name or service not known: [client 144.76.19.72:58908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:22.708960 2026] [ssl:error] [pid 3260059:tid 3260059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:23.487158 2026] [ssl:error] [pid 3260059:tid 3260059] (70014)End of file found: [client 216.73.216.199:62651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:23.860946 2026] [security2:error] [pid 3258907:tid 3258907] [client 80.94.92.67:34236] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "beechhouseselfcatering.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtEkwuhTzyElPwrg7ZxgQAAABE"]
[Thu Jul 30 13:33:23.861116 2026] [security2:error] [pid 3258907:tid 3258907] [client 80.94.92.67:34236] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "beechhouseselfcatering.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtEkwuhTzyElPwrg7ZxgQAAABE"]
[Thu Jul 30 13:33:23.861300 2026] [security2:error] [pid 3258907:tid 3258907] [client 80.94.92.67:34236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "beechhouseselfcatering.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtEkwuhTzyElPwrg7ZxgQAAABE"]
[Thu Jul 30 13:33:24.425989 2026] [security2:error] [pid 3258907:tid 3258907] [client 80.94.92.67:34236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "beechhouseselfcatering.co.uk"] [uri "/index.php"] [unique_id "amtEkwuhTzyElPwrg7ZxgQAAABE"]
[Thu Jul 30 13:33:25.762946 2026] [ssl:error] [pid 3255059:tid 3255059] (EAI 2)Name or service not known: [client 144.76.19.72:58912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:25.762977 2026] [ssl:error] [pid 3255059:tid 3255059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:25.818947 2026] [ssl:error] [pid 3248676:tid 3248676] (EAI 2)Name or service not known: [client 144.76.19.72:58920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:25.818980 2026] [ssl:error] [pid 3248676:tid 3248676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:26.303739 2026] [ssl:error] [pid 3258957:tid 3258957] (70014)End of file found: [client 216.73.216.199:21118] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:26.727314 2026] [lsapi:warn] [pid 3248921:tid 3248921] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:27.330833 2026] [access_compat:error] [pid 3255626:tid 3255626] [client 106.222.248.251:1223] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:33:28.009008 2026] [ssl:error] [pid 3255059:tid 3255059] (70014)End of file found: [client 216.73.216.199:42062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:28.876965 2026] [ssl:error] [pid 3244021:tid 3244021] (EAI 2)Name or service not known: [client 144.76.19.72:58930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:28.876998 2026] [ssl:error] [pid 3244021:tid 3244021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:28.931412 2026] [ssl:error] [pid 3263004:tid 3263004] (EAI 2)Name or service not known: [client 144.76.19.72:58944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:28.931440 2026] [ssl:error] [pid 3263004:tid 3263004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:29.185039 2026] [security2:error] [pid 3244602:tid 3244602] [client 47.128.40.100:56066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns-earth.com"] [uri "/robots.txt"] [unique_id "amtEmVwbJaEZmfmm3NH0gQAAAAw"]
[Thu Jul 30 13:33:30.220529 2026] [ssl:error] [pid 3233530:tid 3233530] (70014)End of file found: [client 216.73.216.199:35294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:30.591545 2026] [core:error] [pid 3230621:tid 3230621] [client 57.141.0.22:45830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:30.591574 2026] [core:error] [pid 3230621:tid 3230621] [client 57.141.0.22:45830] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:31.212140 2026] [lsapi:warn] [pid 3263004:tid 3263004] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:31.619362 2026] [ssl:error] [pid 3258957:tid 3258957] (70014)End of file found: [client 216.73.216.199:56781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:31.990282 2026] [ssl:error] [pid 3263004:tid 3263004] (EAI 2)Name or service not known: [client 144.76.19.72:49168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:31.990308 2026] [ssl:error] [pid 3263004:tid 3263004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:32.091705 2026] [ssl:error] [pid 3251932:tid 3251932] (EAI 2)Name or service not known: [client 144.76.19.72:49174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:32.091744 2026] [ssl:error] [pid 3251932:tid 3251932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:32.099140 2026] [lsapi:warn] [pid 3263708:tid 3263708] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:34.129962 2026] [ssl:error] [pid 3263708:tid 3263708] (70014)End of file found: [client 216.73.216.199:56630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:35.118213 2026] [security2:error] [pid 3257999:tid 3257999] [client 47.128.118.77:55194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amtEnx0aZtJurv5DJNmY7QAAACA"]
[Thu Jul 30 13:33:35.145164 2026] [ssl:error] [pid 3263490:tid 3263490] (EAI 2)Name or service not known: [client 144.76.19.72:49176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:35.145202 2026] [ssl:error] [pid 3263490:tid 3263490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:35.197700 2026] [ssl:error] [pid 3263882:tid 3263882] (EAI 2)Name or service not known: [client 144.76.19.72:49192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:35.197735 2026] [ssl:error] [pid 3263882:tid 3263882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:35.706317 2026] [core:error] [pid 3262956:tid 3262956] [client 57.141.0.50:28376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:35.706346 2026] [core:error] [pid 3262956:tid 3262956] [client 57.141.0.50:28376] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:35.813533 2026] [authz_core:error] [pid 3257999:tid 3257999] [client 66.249.66.35:61315] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:33:35.816413 2026] [authz_core:error] [pid 3257999:tid 3257999] [client 66.249.66.35:61315] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:33:36.112649 2026] [security2:error] [pid 3260127:tid 3260127] [client 114.119.128.126:43223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/wp-content/uploads/2011/06/wolviepromo2-480x200.jpg"] [unique_id "amtEoM1OfGdZoYVI6stZkgAAABQ"], referer: http://www.localhero.org.uk/wp-content/uploads/2011/06/wolviepromo2-480x200.jpg
[Thu Jul 30 13:33:36.676092 2026] [core:error] [pid 3263882:tid 3263882] (13)Permission denied: [client 216.73.216.199:20317] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS2/line
[Thu Jul 30 13:33:37.579053 2026] [core:error] [pid 3263882:tid 3263882] (13)Permission denied: [client 216.73.216.199:20317] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:13/subsystem/uevent
[Thu Jul 30 13:33:37.821375 2026] [lsapi:warn] [pid 3258957:tid 3258957] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:37.880344 2026] [ssl:error] [pid 3263882:tid 3263882] (70014)End of file found: [client 216.73.216.199:20317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:38.286204 2026] [ssl:error] [pid 3255058:tid 3255058] (EAI 2)Name or service not known: [client 144.76.19.72:49202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:38.286247 2026] [ssl:error] [pid 3255058:tid 3255058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:38.329698 2026] [access_compat:error] [pid 3256783:tid 3256783] [client 106.222.248.251:10787] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:33:38.341166 2026] [ssl:error] [pid 3255058:tid 3255058] (EAI 2)Name or service not known: [client 144.76.19.72:49218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:38.341191 2026] [ssl:error] [pid 3255058:tid 3255058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:41.101015 2026] [core:error] [pid 3264146:tid 3264146] [client 57.141.0.45:32264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:41.101062 2026] [core:error] [pid 3264146:tid 3264146] [client 57.141.0.45:32264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:41.397258 2026] [ssl:error] [pid 3264150:tid 3264150] (EAI 2)Name or service not known: [client 144.76.19.72:44798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:41.397294 2026] [ssl:error] [pid 3264150:tid 3264150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:41.452611 2026] [ssl:error] [pid 3264151:tid 3264151] (EAI 2)Name or service not known: [client 144.76.19.72:44802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:41.452649 2026] [ssl:error] [pid 3264151:tid 3264151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:41.792638 2026] [core:error] [pid 3247029:tid 3247029] (13)Permission denied: [client 216.73.216.199:2733] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/irqbypass/holders/kvm/sections/__tracepoints_strings
[Thu Jul 30 13:33:41.956533 2026] [lsapi:warn] [pid 3264146:tid 3264146] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:42.076514 2026] [security2:error] [pid 3264148:tid 3264148] [client 114.119.150.190:43259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/A.18-Sri-Lanka-2007-Conflict-returns.pdf"] [unique_id "amtEpmkrWBQKsC5U9F0VcgAAADw"]
[Thu Jul 30 13:33:42.398518 2026] [ssl:error] [pid 3247029:tid 3247029] (70014)End of file found: [client 216.73.216.199:2733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:42.665500 2026] [security2:error] [pid 3258957:tid 3258957] [client 43.159.149.56:47924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.be"] [uri "/"] [unique_id "amtEpgVlT0XmtBLYx3m0UQAAABU"]
[Thu Jul 30 13:33:42.780795 2026] [lsapi:warn] [pid 3264151:tid 3264151] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:43.600270 2026] [core:error] [pid 3255059:tid 3255059] (13)Permission denied: [client 216.73.216.199:60353] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/subsystem/ttyS0/closing_wait
[Thu Jul 30 13:33:43.900653 2026] [ssl:error] [pid 3255059:tid 3255059] (70014)End of file found: [client 216.73.216.199:60353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:44.394665 2026] [ssl:error] [pid 3248996:tid 3248996] (70014)End of file found: [client 216.73.216.199:11542] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:44.510515 2026] [ssl:error] [pid 3255626:tid 3255626] (EAI 2)Name or service not known: [client 144.76.19.72:44814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:44.510548 2026] [ssl:error] [pid 3255626:tid 3255626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:44.566757 2026] [ssl:error] [pid 3258957:tid 3258957] (EAI 2)Name or service not known: [client 144.76.19.72:44828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:44.566785 2026] [ssl:error] [pid 3258957:tid 3258957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:44.706775 2026] [security2:error] [pid 3263882:tid 3263882] [client 43.159.149.56:54332] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtEqErZwA1Nnm3nLRzloQAAAAA"], referer: http://www.orgent.be
[Thu Jul 30 13:33:45.750915 2026] [security2:error] [pid 3264147:tid 3264147] [client 43.153.79.218:52924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtEqcz7A-VBqz8cpw3dwQAAADs"]
[Thu Jul 30 13:33:46.275728 2026] [core:error] [pid 3262956:tid 3262956] [client 57.141.0.61:60942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:46.275753 2026] [core:error] [pid 3262956:tid 3262956] [client 57.141.0.61:60942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:47.014655 2026] [security2:error] [pid 3248117:tid 3248117] [client 43.153.79.218:57728] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtEq32iUSm50bLjQCwZMwAAABo"], referer: http://mwdesign.me.uk
[Thu Jul 30 13:33:47.619451 2026] [ssl:error] [pid 3260127:tid 3260127] (EAI 2)Name or service not known: [client 144.76.19.72:44842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:47.619493 2026] [ssl:error] [pid 3260127:tid 3260127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:47.673941 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:44852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:47.673978 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:47.918922 2026] [lsapi:warn] [pid 3255626:tid 3255626] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:49.300848 2026] [authz_core:error] [pid 3264149:tid 3264149] [client 66.249.66.34:37880] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:33:49.303522 2026] [authz_core:error] [pid 3264149:tid 3264149] [client 66.249.66.34:37880] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:33:49.926560 2026] [ssl:error] [pid 3263882:tid 3263882] (70014)End of file found: [client 216.73.216.199:42290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:50.739651 2026] [ssl:error] [pid 3264147:tid 3264147] (EAI 2)Name or service not known: [client 144.76.19.72:54796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:50.739682 2026] [ssl:error] [pid 3264147:tid 3264147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:50.795090 2026] [ssl:error] [pid 3263708:tid 3263708] (EAI 2)Name or service not known: [client 144.76.19.72:54812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:50.795130 2026] [ssl:error] [pid 3263708:tid 3263708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:51.213291 2026] [access_compat:error] [pid 3258907:tid 3258907] [client 45.158.164.139:54044] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:33:52.215213 2026] [security2:error] [pid 3262955:tid 3262955] [client 85.208.96.208:65408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtEsCBlPubGtiqiOR80QgAAAAc"]
[Thu Jul 30 13:33:52.750660 2026] [lsapi:warn] [pid 3264152:tid 3264152] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:52.951063 2026] [core:error] [pid 3263004:tid 3263004] [client 57.141.0.32:28874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:52.951102 2026] [core:error] [pid 3263004:tid 3263004] [client 57.141.0.32:28874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:33:53.060198 2026] [security2:error] [pid 3257942:tid 3257942] [client 185.191.171.13:38298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2009/01/20/beware-of-the-dark-side-and-sports-cars/"] [unique_id "amtEsdoxHclMkOO6Lg-d8AAAAAk"]
[Thu Jul 30 13:33:53.543685 2026] [ssl:error] [pid 3262956:tid 3262956] (70014)End of file found: [client 216.73.216.199:52944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:53.846968 2026] [lsapi:warn] [pid 3263251:tid 3263251] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:53.851229 2026] [ssl:error] [pid 3262955:tid 3262955] (EAI 2)Name or service not known: [client 144.76.19.72:54824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:53.851252 2026] [ssl:error] [pid 3262955:tid 3262955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:53.907535 2026] [ssl:error] [pid 3256868:tid 3256868] (EAI 2)Name or service not known: [client 144.76.19.72:54832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:53.907575 2026] [ssl:error] [pid 3256868:tid 3256868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:56.175793 2026] [security2:error] [pid 3264001:tid 3264001] [client 43.164.129.191:42130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.greenduckgallery.co.uk"] [uri "/"] [unique_id "amtEtMmuOsIbwby6HUhR0gAAACc"]
[Thu Jul 30 13:33:56.762140 2026] [security2:error] [pid 3263882:tid 3263882] [client 185.191.171.9:11182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/travelers-rest,-sc-obituaries"] [unique_id "amtEtErZwA1Nnm3nLRzlqAAAAAA"]
[Thu Jul 30 13:33:56.965243 2026] [ssl:error] [pid 3263958:tid 3263958] (EAI 2)Name or service not known: [client 144.76.19.72:54834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:56.965282 2026] [ssl:error] [pid 3263958:tid 3263958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:57.023356 2026] [ssl:error] [pid 3255636:tid 3255636] (EAI 2)Name or service not known: [client 144.76.19.72:54848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:33:57.023398 2026] [ssl:error] [pid 3255636:tid 3255636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:33:57.160574 2026] [ssl:error] [pid 3255058:tid 3255058] (70014)End of file found: [client 216.73.216.199:43598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:57.969145 2026] [access_compat:error] [pid 3244021:tid 3244021] [client 106.222.248.251:4123] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:33:58.536571 2026] [lsapi:warn] [pid 3239711:tid 3239711] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:33:59.564399 2026] [ssl:error] [pid 3264093:tid 3264093] (70014)End of file found: [client 216.73.216.199:16629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:33:59.584907 2026] [security2:error] [pid 3233530:tid 3233530] [client 49.51.72.76:56040] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "amtEtzTtr2Ps1OskGtbtqwAAAAI"]
[Thu Jul 30 13:34:00.077456 2026] [ssl:error] [pid 3260127:tid 3260127] (EAI 2)Name or service not known: [client 144.76.19.72:49268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:00.077497 2026] [ssl:error] [pid 3260127:tid 3260127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:00.133221 2026] [ssl:error] [pid 3262956:tid 3262956] (EAI 2)Name or service not known: [client 144.76.19.72:49272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:00.133261 2026] [ssl:error] [pid 3262956:tid 3262956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:01.168286 2026] [lsapi:warn] [pid 3263490:tid 3263490] [client 197.186.70.164:37552] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies
[Thu Jul 30 13:34:01.168358 2026] [lsapi:warn] [pid 3263490:tid 3263490] [client 197.186.70.164:37552] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies
[Thu Jul 30 13:34:01.530822 2026] [security2:error] [pid 3248996:tid 3248996] [client 51.75.141.207:58558] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtEuWpvCL6m8t3ptGRxzwAAADA"]
[Thu Jul 30 13:34:02.277617 2026] [core:error] [pid 3257942:tid 3257942] (13)Permission denied: [client 216.73.216.199:21888] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:47/subsystem/ttyS0/iomem_base
[Thu Jul 30 13:34:03.191621 2026] [ssl:error] [pid 3263251:tid 3263251] (EAI 2)Name or service not known: [client 144.76.19.72:49278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:03.191662 2026] [ssl:error] [pid 3263251:tid 3263251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:03.246717 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:49292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:03.246752 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:03.594456 2026] [lsapi:warn] [pid 3256865:tid 3256865] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:04.389916 2026] [security2:error] [pid 3263003:tid 3263003] [client 43.163.112.225:62049] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEvPfZ6qznZS960Gf61AAAABc"]
[Thu Jul 30 13:34:04.389969 2026] [security2:error] [pid 3263003:tid 3263003] [client 43.163.112.225:62049] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEvPfZ6qznZS960Gf61AAAABc"]
[Thu Jul 30 13:34:04.390232 2026] [security2:error] [pid 3263003:tid 3263003] [client 43.163.112.225:62049] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEvPfZ6qznZS960Gf61AAAABc"]
[Thu Jul 30 13:34:04.596284 2026] [lsapi:warn] [pid 3263004:tid 3263004] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:04.686775 2026] [ssl:error] [pid 3257942:tid 3257942] (70014)End of file found: [client 216.73.216.199:21888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:05.494710 2026] [core:error] [pid 3260127:tid 3260127] (13)Permission denied: [client 216.73.216.199:56319] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty43/subsystem/ttyS1/uartclk
[Thu Jul 30 13:34:05.795284 2026] [core:error] [pid 3260127:tid 3260127] (13)Permission denied: [client 216.73.216.199:56319] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS1/irq
[Thu Jul 30 13:34:06.305813 2026] [ssl:error] [pid 3247029:tid 3247029] (EAI 2)Name or service not known: [client 144.76.19.72:49298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:06.305849 2026] [ssl:error] [pid 3247029:tid 3247029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:06.363185 2026] [ssl:error] [pid 3263251:tid 3263251] (EAI 2)Name or service not known: [client 144.76.19.72:49302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:06.363223 2026] [ssl:error] [pid 3263251:tid 3263251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:06.397207 2026] [ssl:error] [pid 3260127:tid 3260127] (70014)End of file found: [client 216.73.216.199:56319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:06.545234 2026] [security2:error] [pid 3233530:tid 3233530] [client 43.156.231.50:15985] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEvjTtr2Ps1OskGtbtrgAAAAI"]
[Thu Jul 30 13:34:06.545283 2026] [security2:error] [pid 3233530:tid 3233530] [client 43.156.231.50:15985] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEvjTtr2Ps1OskGtbtrgAAAAI"]
[Thu Jul 30 13:34:06.545529 2026] [security2:error] [pid 3233530:tid 3233530] [client 43.156.231.50:15985] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEvjTtr2Ps1OskGtbtrgAAAAI"]
[Thu Jul 30 13:34:06.903119 2026] [core:error] [pid 3263882:tid 3263882] (13)Permission denied: [client 216.73.216.199:44384] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS0/port
[Thu Jul 30 13:34:07.906163 2026] [ssl:error] [pid 3263882:tid 3263882] (70014)End of file found: [client 216.73.216.199:44384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:08.498689 2026] [authz_core:error] [pid 3264148:tid 3264148] [client 66.249.66.34:47831] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:34:08.501394 2026] [authz_core:error] [pid 3264148:tid 3264148] [client 66.249.66.34:47831] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:34:08.570499 2026] [access_compat:error] [pid 3263490:tid 3263490] [client 106.222.248.251:15926] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:34:09.159544 2026] [lsapi:warn] [pid 3255507:tid 3255507] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:09.421711 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:49316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:09.421744 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:09.477593 2026] [ssl:error] [pid 3263251:tid 3263251] (EAI 2)Name or service not known: [client 144.76.19.72:49332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:09.477631 2026] [ssl:error] [pid 3263251:tid 3263251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:09.869996 2026] [security2:error] [pid 3244021:tid 3244021] [client 43.156.231.50:31903] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEwVgIsS_BeFyh9082fQAAABw"]
[Thu Jul 30 13:34:09.870055 2026] [security2:error] [pid 3244021:tid 3244021] [client 43.156.231.50:31903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEwVgIsS_BeFyh9082fQAAABw"]
[Thu Jul 30 13:34:09.873307 2026] [security2:error] [pid 3244021:tid 3244021] [client 43.156.231.50:31903] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEwVgIsS_BeFyh9082fQAAABw"]
[Thu Jul 30 13:34:09.999969 2026] [security2:error] [pid 3265452:tid 3265452] [client 114.119.138.205:33421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-458.xml"] [unique_id "amtEwdsTazI66XaZksLKrAAAAAY"]
[Thu Jul 30 13:34:10.009288 2026] [security2:error] [pid 3265453:tid 3265453] [client 43.158.91.71:55904] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amtEwpVVy6pPxJWWCmt_qgAAAAg"]
[Thu Jul 30 13:34:10.315802 2026] [ssl:error] [pid 3255507:tid 3255507] (70014)End of file found: [client 216.73.216.199:35545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:11.159781 2026] [security2:error] [pid 3257999:tid 3257999] [client 114.119.159.19:27341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/rhino-head-black"] [unique_id "amtEwx0aZtJurv5DJNmY-AAAACA"], referer: https://tripodhome.co.uk/products/rhino-head-black/
[Thu Jul 30 13:34:11.304451 2026] [security2:error] [pid 3248921:tid 3248921] [client 185.191.171.9:14948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9572.0.html"] [unique_id "amtEw4Zq0oeG8DcvKRferAAAABg"]
[Thu Jul 30 13:34:12.548444 2026] [ssl:error] [pid 3248921:tid 3248921] (EAI 2)Name or service not known: [client 144.76.19.72:36630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:12.548525 2026] [ssl:error] [pid 3248921:tid 3248921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:12.603358 2026] [ssl:error] [pid 3260127:tid 3260127] (EAI 2)Name or service not known: [client 144.76.19.72:36640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:12.603390 2026] [ssl:error] [pid 3260127:tid 3260127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:14.649558 2026] [lsapi:warn] [pid 3265488:tid 3265488] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:15.286383 2026] [security2:error] [pid 3255014:tid 3255014] [client 150.109.10.41:41778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-ganymede.com"] [uri "/"] [unique_id "amtEx_6CzTDiC_PE2JXQvwAAACg"]
[Thu Jul 30 13:34:15.420809 2026] [lsapi:warn] [pid 3264148:tid 3264148] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:15.660001 2026] [ssl:error] [pid 3265488:tid 3265488] (EAI 2)Name or service not known: [client 144.76.19.72:36646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:15.660037 2026] [ssl:error] [pid 3265488:tid 3265488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:15.713799 2026] [ssl:error] [pid 3246221:tid 3246221] (EAI 2)Name or service not known: [client 144.76.19.72:36650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:15.713848 2026] [ssl:error] [pid 3246221:tid 3246221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:15.898619 2026] [lsapi:warn] [pid 3263708:tid 3263708] [client 217.79.118.158:63302] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:34:16.373103 2026] [core:error] [pid 3246221:tid 3246221] [client 66.249.66.68:49124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:34:16.373146 2026] [core:error] [pid 3246221:tid 3246221] [client 66.249.66.68:49124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:34:16.474845 2026] [security2:error] [pid 3255507:tid 3255507] [client 47.128.24.5:15780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amtEyK-lk8Uq6MAc4znkmQAAADM"]
[Thu Jul 30 13:34:18.219990 2026] [authz_core:error] [pid 3257942:tid 3257942] [client 66.132.172.184:9410] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:34:18.226761 2026] [authz_core:error] [pid 3257942:tid 3257942] [client 66.132.172.184:9410] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:34:18.771152 2026] [ssl:error] [pid 3257942:tid 3257942] (EAI 2)Name or service not known: [client 144.76.19.72:36666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:18.771194 2026] [ssl:error] [pid 3257942:tid 3257942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:18.796361 2026] [authz_core:error] [pid 3265488:tid 3265488] [client 66.249.66.34:65065] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:34:18.799010 2026] [authz_core:error] [pid 3265488:tid 3265488] [client 66.249.66.34:65065] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:34:18.829532 2026] [ssl:error] [pid 3263490:tid 3263490] (EAI 2)Name or service not known: [client 144.76.19.72:36668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:18.829559 2026] [ssl:error] [pid 3263490:tid 3263490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:18.997793 2026] [access_compat:error] [pid 3264093:tid 3264093] [client 106.222.248.251:28888] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:34:19.346139 2026] [core:error] [pid 3251933:tid 3251933] (13)Permission denied: [client 216.73.216.199:32594] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty52/subsystem/ttyS2/uartclk
[Thu Jul 30 13:34:19.778957 2026] [lsapi:warn] [pid 3257942:tid 3257942] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:20.381096 2026] [security2:error] [pid 3264147:tid 3264147] [client 41.209.3.82:42996] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEzMz7A-VBqz8cpw3dygAAADs"]
[Thu Jul 30 13:34:20.381161 2026] [security2:error] [pid 3264147:tid 3264147] [client 41.209.3.82:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtEzMz7A-VBqz8cpw3dygAAADs"]
[Thu Jul 30 13:34:20.381546 2026] [security2:error] [pid 3264147:tid 3264147] [client 41.209.3.82:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtEzMz7A-VBqz8cpw3dygAAADs"]
[Thu Jul 30 13:34:20.890652 2026] [security2:error] [pid 3255014:tid 3255014] [client 185.191.171.6:16400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5656.0.html"] [unique_id "amtEzP6CzTDiC_PE2JXQwwAAACg"]
[Thu Jul 30 13:34:21.756520 2026] [core:error] [pid 3251933:tid 3251933] (13)Permission denied: [client 216.73.216.199:32594] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS3/closing_wait
[Thu Jul 30 13:34:21.884380 2026] [ssl:error] [pid 3263882:tid 3263882] (EAI 2)Name or service not known: [client 144.76.19.72:30724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:21.884412 2026] [ssl:error] [pid 3263882:tid 3263882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:21.937343 2026] [ssl:error] [pid 3246221:tid 3246221] (EAI 2)Name or service not known: [client 144.76.19.72:30732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:21.937393 2026] [ssl:error] [pid 3246221:tid 3246221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:22.197841 2026] [security2:error] [pid 3265410:tid 3265410] [client 124.156.226.179:35468] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yourpartyyourway.com"] [uri "/"] [unique_id "amtEzssQHHUB4uL6-0RucwAAAAU"], referer: http://www.yourpartyyourway.com
[Thu Jul 30 13:34:22.356138 2026] [security2:error] [pid 3255014:tid 3255014] [client 114.119.134.204:36415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hoo-hah.co.uk"] [uri "/images/igallery/resized/1-100/img-0587-86-1000-1000-80.jpeg"] [unique_id "amtEzv6CzTDiC_PE2JXQxAAAACg"], referer: https://www.hoo-hah.co.uk/?i=img-0587
[Thu Jul 30 13:34:22.384220 2026] [security2:error] [pid 3258907:tid 3258907] [client 185.191.171.3:60536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4370.0/prev_next,next.html"] [unique_id "amtEzguhTzyElPwrg7ZxkwAAABE"]
[Thu Jul 30 13:34:22.975844 2026] [access_compat:error] [pid 3255636:tid 3255636] [client 104.28.159.128:36475] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 13:34:22.975895 2026] [access_compat:error] [pid 3255636:tid 3255636] [client 104.28.159.128:36475] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 13:34:23.866366 2026] [core:error] [pid 3251933:tid 3251933] (13)Permission denied: [client 216.73.216.199:32594] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/fidosfields.co.uk.db
[Thu Jul 30 13:34:24.620153 2026] [security2:error] [pid 3264093:tid 3264093] [client 124.156.226.179:49508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amtE0BJWVpBuRefHumWFFQAAACk"]
[Thu Jul 30 13:34:24.964082 2026] [core:error] [pid 3266200:tid 3266200] (13)Permission denied: [client 216.73.216.199:35298] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:15/subsystem/drivers_probe
[Thu Jul 30 13:34:25.584862 2026] [security2:error] [pid 3263251:tid 3263251] [client 45.123.220.251:14056] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE0XPr_Z-e3kdGnj-15wAAACE"]
[Thu Jul 30 13:34:25.584912 2026] [security2:error] [pid 3263251:tid 3263251] [client 45.123.220.251:14056] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE0XPr_Z-e3kdGnj-15wAAACE"]
[Thu Jul 30 13:34:25.585168 2026] [security2:error] [pid 3263251:tid 3263251] [client 45.123.220.251:14056] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtE0XPr_Z-e3kdGnj-15wAAACE"]
[Thu Jul 30 13:34:25.826511 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:30738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:25.826554 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:26.290199 2026] [lsapi:warn] [pid 3266260:tid 3266260] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:26.948638 2026] [ssl:error] [pid 3266260:tid 3266260] (EAI 2)Name or service not known: [client 144.76.19.72:30748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:26.948667 2026] [ssl:error] [pid 3266260:tid 3266260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:27.443197 2026] [lsapi:warn] [pid 3248996:tid 3248996] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:28.084717 2026] [core:error] [pid 3265488:tid 3265488] (13)Permission denied: [client 216.73.216.199:55395] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS1/iomem_reg_shift
[Thu Jul 30 13:34:29.288873 2026] [core:error] [pid 3265488:tid 3265488] (13)Permission denied: [client 216.73.216.199:55395] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS0/iomem_base
[Thu Jul 30 13:34:29.865641 2026] [access_compat:error] [pid 3248996:tid 3248996] [client 106.222.248.251:13013] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:34:30.012475 2026] [ssl:error] [pid 3233530:tid 3233530] (EAI 2)Name or service not known: [client 144.76.19.72:53638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:30.012514 2026] [ssl:error] [pid 3233530:tid 3233530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:30.013299 2026] [security2:error] [pid 3255508:tid 3255508] [client 114.119.158.38:28919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~15,17,30/request_format~html"] [unique_id "amtE1s9jXQrlDNHVHezrMQAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,30/request_format~html
[Thu Jul 30 13:34:30.097557 2026] [ssl:error] [pid 3251932:tid 3251932] (EAI 2)Name or service not known: [client 144.76.19.72:53644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:30.097583 2026] [ssl:error] [pid 3251932:tid 3251932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:30.385900 2026] [lsapi:warn] [pid 3254581:tid 3254581] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:31.391248 2026] [core:error] [pid 3244602:tid 3244602] (13)Permission denied: [client 216.73.216.199:64641] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty52/subsystem/ttyS0/closing_wait
[Thu Jul 30 13:34:32.526289 2026] [security2:error] [pid 3255508:tid 3255508] [client 114.119.158.38:28925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~15,17,30/request_format~html"] [unique_id "amtE2M9jXQrlDNHVHezrMgAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,30/request_format~html
[Thu Jul 30 13:34:33.154312 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:53676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:33.154352 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:33.198425 2026] [ssl:error] [pid 3244602:tid 3244602] (70014)End of file found: [client 216.73.216.199:64641] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:33.211993 2026] [ssl:error] [pid 3266311:tid 3266311] (EAI 2)Name or service not known: [client 144.76.19.72:53678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:33.212036 2026] [ssl:error] [pid 3266311:tid 3266311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:33.374987 2026] [security2:error] [pid 3255636:tid 3255636] [client 130.164.130.103:36968] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE2baRUK_dDykYSy_8aAAAAEA"]
[Thu Jul 30 13:34:33.375044 2026] [security2:error] [pid 3255636:tid 3255636] [client 130.164.130.103:36968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE2baRUK_dDykYSy_8aAAAAEA"]
[Thu Jul 30 13:34:33.375367 2026] [security2:error] [pid 3255636:tid 3255636] [client 130.164.130.103:36968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtE2baRUK_dDykYSy_8aAAAAEA"]
[Thu Jul 30 13:34:34.264298 2026] [authz_core:error] [pid 3255507:tid 3255507] [client 66.132.172.184:37502] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:34:34.270219 2026] [authz_core:error] [pid 3255507:tid 3255507] [client 66.132.172.184:37502] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:34:34.408428 2026] [ssl:error] [pid 3265488:tid 3265488] (70014)End of file found: [client 216.73.216.199:55395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:35.570343 2026] [autoindex:error] [pid 3246221:tid 3246221] [client 65.109.124.116:26223] AH01276: Cannot serve directory /home/winterb/public_html/drupal1/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 13:34:36.039049 2026] [authz_core:error] [pid 3255507:tid 3255507] [client 66.132.172.184:37502] AH01630: client denied by server configuration: /home/winterb/public_html/site/error_log, referer: http://www.dbstart.com:80/site
[Thu Jul 30 13:34:36.265912 2026] [ssl:error] [pid 3251933:tid 3251933] (EAI 2)Name or service not known: [client 144.76.19.72:53692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:36.265941 2026] [ssl:error] [pid 3251933:tid 3251933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:36.319083 2026] [ssl:error] [pid 3257942:tid 3257942] (EAI 2)Name or service not known: [client 144.76.19.72:53698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:36.319106 2026] [ssl:error] [pid 3257942:tid 3257942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:36.478494 2026] [lsapi:warn] [pid 3263251:tid 3263251] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:36.700042 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:37.385074 2026] [authz_core:error] [pid 3264095:tid 3264095] [client 66.249.66.33:57534] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:34:37.387747 2026] [authz_core:error] [pid 3264095:tid 3264095] [client 66.249.66.33:57534] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:34:38.139281 2026] [security2:error] [pid 3262956:tid 3262956] [client 114.119.141.139:33797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/pages/35/Studio/st_1350/2"] [unique_id "amtE3uBLoANQ7oBtfwGAfAAAABY"], referer: https://www.jonathanmeyerart.com/pages/35/Studio/st_1350/9
[Thu Jul 30 13:34:38.541060 2026] [authz_core:error] [pid 3264095:tid 3264095] [client 66.249.66.33:57534] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:34:38.543718 2026] [authz_core:error] [pid 3264095:tid 3264095] [client 66.249.66.33:57534] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:34:39.407506 2026] [ssl:error] [pid 3263251:tid 3263251] (EAI 2)Name or service not known: [client 144.76.19.72:53726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:39.407559 2026] [ssl:error] [pid 3263251:tid 3263251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:39.465808 2026] [ssl:error] [pid 3266313:tid 3266313] (EAI 2)Name or service not known: [client 144.76.19.72:53742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:39.465866 2026] [ssl:error] [pid 3266313:tid 3266313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:40.358757 2026] [access_compat:error] [pid 3244602:tid 3244602] [client 106.222.248.251:7123] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:34:41.021710 2026] [lsapi:warn] [pid 3258100:tid 3258100] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:42.552745 2026] [ssl:error] [pid 3266319:tid 3266319] (EAI 2)Name or service not known: [client 144.76.19.72:20542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:42.552822 2026] [ssl:error] [pid 3266319:tid 3266319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:42.611186 2026] [ssl:error] [pid 3266156:tid 3266156] (EAI 2)Name or service not known: [client 144.76.19.72:20554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:42.611242 2026] [ssl:error] [pid 3266156:tid 3266156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:42.744006 2026] [ssl:error] [pid 3265452:tid 3265452] (70014)End of file found: [client 216.73.216.199:22514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:44.852049 2026] [ssl:error] [pid 3258001:tid 3258001] (70014)End of file found: [client 216.73.216.199:10556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:45.362825 2026] [core:error] [pid 3258098:tid 3258098] [client 66.249.66.168:57961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:34:45.362856 2026] [core:error] [pid 3258098:tid 3258098] [client 66.249.66.168:57961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:34:45.453684 2026] [core:error] [pid 3248996:tid 3248996] (13)Permission denied: [client 216.73.216.199:51463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 13:34:45.596454 2026] [security2:error] [pid 3265490:tid 3265490] [client 47.128.127.58:25028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.epmsonline.co.uk"] [uri "/robots.txt"] [unique_id "amtE5Qxm3N4e5LSPauPJlgAAABU"]
[Thu Jul 30 13:34:45.671224 2026] [ssl:error] [pid 3266314:tid 3266314] (EAI 2)Name or service not known: [client 144.76.19.72:20558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:45.671277 2026] [ssl:error] [pid 3266314:tid 3266314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:45.729099 2026] [ssl:error] [pid 3265410:tid 3265410] (EAI 2)Name or service not known: [client 144.76.19.72:20562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:45.729139 2026] [ssl:error] [pid 3265410:tid 3265410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:45.755372 2026] [core:error] [pid 3248996:tid 3248996] (13)Permission denied: [client 216.73.216.199:51463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS3/port
[Thu Jul 30 13:34:47.257340 2026] [authz_core:error] [pid 3255507:tid 3255507] [client 66.132.172.184:37502] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/error_log, referer: http://www.dbstart.com:80/wordpress0
[Thu Jul 30 13:34:47.258594 2026] [core:error] [pid 3248996:tid 3248996] (13)Permission denied: [client 216.73.216.199:51463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/destroy_by_rcu
[Thu Jul 30 13:34:47.282553 2026] [lsapi:warn] [pid 3244602:tid 3244602] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:47.600386 2026] [lsapi:warn] [pid 3266314:tid 3266314] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:48.818685 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:20570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:48.818721 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:48.875003 2026] [ssl:error] [pid 3263708:tid 3263708] (EAI 2)Name or service not known: [client 144.76.19.72:20580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:48.875041 2026] [ssl:error] [pid 3263708:tid 3263708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:49.066268 2026] [core:error] [pid 3248996:tid 3248996] (13)Permission denied: [client 216.73.216.199:51463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS3/port
[Thu Jul 30 13:34:50.969545 2026] [access_compat:error] [pid 3255636:tid 3255636] [client 106.222.248.251:13650] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:34:51.536334 2026] [access_compat:error] [pid 3257999:tid 3257999] [client 45.158.164.139:47534] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:34:51.612154 2026] [lsapi:warn] [pid 3255014:tid 3255014] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:51.931351 2026] [ssl:error] [pid 3255507:tid 3255507] (EAI 2)Name or service not known: [client 144.76.19.72:63196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:51.931395 2026] [ssl:error] [pid 3255507:tid 3255507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:51.987651 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:63202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:51.987682 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:52.090449 2026] [security2:error] [pid 3264149:tid 3264149] [client 47.128.36.144:34110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amtE7JASy4txwN6-o9CkmAAAAD0"]
[Thu Jul 30 13:34:53.287407 2026] [core:error] [pid 3266311:tid 3266311] (13)Permission denied: [client 216.73.216.199:3728] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS0/iomem_base
[Thu Jul 30 13:34:53.743246 2026] [authz_core:error] [pid 3266319:tid 3266319] [client 66.132.172.184:38708] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/error_log, referer: http://www.dbstart.com:80/vtigercrm
[Thu Jul 30 13:34:54.797656 2026] [core:error] [pid 3266311:tid 3266311] (13)Permission denied: [client 216.73.216.199:3728] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/subsystem/ttyS0/irq
[Thu Jul 30 13:34:55.042125 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:63206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:55.042159 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:55.096989 2026] [ssl:error] [pid 3266259:tid 3266259] (EAI 2)Name or service not known: [client 144.76.19.72:63214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:55.097027 2026] [ssl:error] [pid 3266259:tid 3266259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:55.400035 2026] [core:error] [pid 3266311:tid 3266311] (13)Permission denied: [client 216.73.216.199:3728] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS3/irq
[Thu Jul 30 13:34:55.700999 2026] [ssl:error] [pid 3266311:tid 3266311] (70014)End of file found: [client 216.73.216.199:3728] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:34:57.510295 2026] [core:error] [pid 3248996:tid 3248996] (13)Permission denied: [client 216.73.216.199:51463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/easishop.com.db
[Thu Jul 30 13:34:57.940243 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:58.179014 2026] [ssl:error] [pid 3266314:tid 3266314] (EAI 2)Name or service not known: [client 144.76.19.72:63220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:58.179049 2026] [ssl:error] [pid 3266314:tid 3266314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:58.231521 2026] [ssl:error] [pid 3266313:tid 3266313] (EAI 2)Name or service not known: [client 144.76.19.72:63232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:34:58.231548 2026] [ssl:error] [pid 3266313:tid 3266313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:34:58.299135 2026] [lsapi:warn] [pid 3255507:tid 3255507] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:34:58.554759 2026] [security2:error] [pid 3263490:tid 3263490] [client 85.208.96.210:34246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/thuma-bed-nightstand"] [unique_id "amtE8jm-DxKsF5LbFcQlaAAAAB8"]
[Thu Jul 30 13:34:59.980094 2026] [autoindex:error] [pid 3266319:tid 3266319] [client 66.132.172.184:38708] AH01276: Cannot serve directory /home/winterb/public_html/drupal0/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive, referer: http://www.dbstart.com:80/drupal0
[Thu Jul 30 13:35:01.324395 2026] [ssl:error] [pid 3266313:tid 3266313] (EAI 2)Name or service not known: [client 144.76.19.72:30090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:01.324427 2026] [ssl:error] [pid 3266313:tid 3266313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:01.386521 2026] [ssl:error] [pid 3266311:tid 3266311] (EAI 2)Name or service not known: [client 144.76.19.72:30096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:01.386552 2026] [ssl:error] [pid 3266311:tid 3266311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:01.672664 2026] [access_compat:error] [pid 3255014:tid 3255014] [client 106.222.248.251:29805] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:01.735258 2026] [core:error] [pid 3248996:tid 3248996] (13)Permission denied: [client 216.73.216.199:51463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 13:35:02.032224 2026] [ssl:error] [pid 3248996:tid 3248996] (70014)End of file found: [client 216.73.216.199:51463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:02.227362 2026] [lsapi:warn] [pid 3258098:tid 3258098] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:04.444428 2026] [ssl:error] [pid 3268072:tid 3268072] (EAI 2)Name or service not known: [client 144.76.19.72:30104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:04.444491 2026] [ssl:error] [pid 3268072:tid 3268072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:04.500833 2026] [ssl:error] [pid 3266314:tid 3266314] (EAI 2)Name or service not known: [client 144.76.19.72:30116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:04.500860 2026] [ssl:error] [pid 3266314:tid 3266314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:05.552294 2026] [core:error] [pid 3251933:tid 3251933] (13)Permission denied: [client 216.73.216.199:23515] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 13:35:06.156354 2026] [ssl:error] [pid 3251933:tid 3251933] (70014)End of file found: [client 216.73.216.199:23515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:07.173374 2026] [security2:error] [pid 3258907:tid 3258907] [client 185.122.255.65:40412] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE-wuhTzyElPwrg7ZxoQAAABE"]
[Thu Jul 30 13:35:07.173428 2026] [security2:error] [pid 3258907:tid 3258907] [client 185.122.255.65:40412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE-wuhTzyElPwrg7ZxoQAAABE"]
[Thu Jul 30 13:35:07.173688 2026] [security2:error] [pid 3258907:tid 3258907] [client 185.122.255.65:40412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtE-wuhTzyElPwrg7ZxoQAAABE"]
[Thu Jul 30 13:35:07.375697 2026] [core:error] [pid 3247029:tid 3247029] (13)Permission denied: [client 216.73.216.199:18406] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:55/subsystem/ttyS3/port
[Thu Jul 30 13:35:07.557736 2026] [ssl:error] [pid 3255014:tid 3255014] (EAI 2)Name or service not known: [client 144.76.19.72:30132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:07.557769 2026] [ssl:error] [pid 3255014:tid 3255014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:07.652149 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:30138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:07.652189 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:08.654692 2026] [lsapi:warn] [pid 3263006:tid 3263006] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:08.939403 2026] [lsapi:warn] [pid 3265452:tid 3265452] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:09.182005 2026] [ssl:error] [pid 3247029:tid 3247029] (70014)End of file found: [client 216.73.216.199:18406] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:09.602835 2026] [security2:error] [pid 3264148:tid 3264148] [client 169.224.14.103:14709] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE_WkrWBQKsC5U9F0VhAAAADw"]
[Thu Jul 30 13:35:09.602887 2026] [security2:error] [pid 3264148:tid 3264148] [client 169.224.14.103:14709] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtE_WkrWBQKsC5U9F0VhAAAADw"]
[Thu Jul 30 13:35:09.603147 2026] [security2:error] [pid 3264148:tid 3264148] [client 169.224.14.103:14709] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtE_WkrWBQKsC5U9F0VhAAAADw"]
[Thu Jul 30 13:35:09.681966 2026] [core:error] [pid 3268116:tid 3268116] (13)Permission denied: [client 216.73.216.199:20243] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS1/closing_wait
[Thu Jul 30 13:35:10.708884 2026] [ssl:error] [pid 3268111:tid 3268111] (EAI 2)Name or service not known: [client 144.76.19.72:38534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:10.708917 2026] [ssl:error] [pid 3268111:tid 3268111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:10.765135 2026] [ssl:error] [pid 3268073:tid 3268073] (EAI 2)Name or service not known: [client 144.76.19.72:38550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:10.765164 2026] [ssl:error] [pid 3268073:tid 3268073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:10.818811 2026] [access_compat:error] [pid 3266259:tid 3266259] [client 202.88.254.53:54460] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:11.000460 2026] [ssl:error] [pid 3268116:tid 3268116] (70014)End of file found: [client 216.73.216.199:20243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:12.197593 2026] [access_compat:error] [pid 3258907:tid 3258907] [client 106.222.248.251:28990] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:12.207218 2026] [ssl:error] [pid 3263251:tid 3263251] (70014)End of file found: [client 216.73.216.199:29163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:12.827161 2026] [lsapi:warn] [pid 3264093:tid 3264093] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:13.276630 2026] [security2:error] [pid 3244602:tid 3244602] [client 45.117.84.191:45066] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFAVwbJaEZmfmm3NH0pQAAAAw"]
[Thu Jul 30 13:35:13.276676 2026] [security2:error] [pid 3244602:tid 3244602] [client 45.117.84.191:45066] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFAVwbJaEZmfmm3NH0pQAAAAw"]
[Thu Jul 30 13:35:13.276915 2026] [security2:error] [pid 3244602:tid 3244602] [client 45.117.84.191:45066] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFAVwbJaEZmfmm3NH0pQAAAAw"]
[Thu Jul 30 13:35:13.827612 2026] [ssl:error] [pid 3264093:tid 3264093] (EAI 2)Name or service not known: [client 144.76.19.72:38564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:13.827652 2026] [ssl:error] [pid 3264093:tid 3264093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:13.928430 2026] [ssl:error] [pid 3251932:tid 3251932] (EAI 2)Name or service not known: [client 144.76.19.72:38566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:13.928463 2026] [ssl:error] [pid 3251932:tid 3251932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:14.518625 2026] [ssl:error] [pid 3268112:tid 3268112] (5)Input/output error: [client 216.73.216.199:2651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:17.007962 2026] [ssl:error] [pid 3268072:tid 3268072] (EAI 2)Name or service not known: [client 144.76.19.72:38572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:17.008015 2026] [ssl:error] [pid 3268072:tid 3268072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:17.059750 2026] [ssl:error] [pid 3251932:tid 3251932] (EAI 2)Name or service not known: [client 144.76.19.72:38580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:17.059784 2026] [ssl:error] [pid 3251932:tid 3251932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:17.428849 2026] [access_compat:error] [pid 3268110:tid 3268110] [client 202.88.254.53:54715] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:19.640729 2026] [lsapi:warn] [pid 3257999:tid 3257999] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:19.741771 2026] [lsapi:warn] [pid 3266259:tid 3266259] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:20.114495 2026] [ssl:error] [pid 3268111:tid 3268111] (EAI 2)Name or service not known: [client 144.76.19.72:34210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:20.114528 2026] [ssl:error] [pid 3268111:tid 3268111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:20.173611 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:34220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:20.173642 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:21.544244 2026] [core:error] [pid 3265452:tid 3265452] (13)Permission denied: [client 216.73.216.199:37172] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty44/subsystem/ttyS0/closing_wait
[Thu Jul 30 13:35:21.574366 2026] [authz_core:error] [pid 3257942:tid 3257942] [client 66.249.66.33:63976] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:35:21.577020 2026] [authz_core:error] [pid 3257942:tid 3257942] [client 66.249.66.33:63976] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:35:21.669474 2026] [authz_core:error] [pid 3257942:tid 3257942] [client 66.249.66.33:63976] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:35:21.672139 2026] [authz_core:error] [pid 3257942:tid 3257942] [client 66.249.66.33:63976] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:35:22.007335 2026] [authz_core:error] [pid 3268114:tid 3268114] [client 57.141.0.41:29066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/error_log
[Thu Jul 30 13:35:22.007959 2026] [authz_core:error] [pid 3268114:tid 3268114] [client 57.141.0.41:29066] AH01630: client denied by server configuration: /home/candidejacobs/public_html/php.ini
[Thu Jul 30 13:35:22.143192 2026] [core:error] [pid 3258907:tid 3258907] (13)Permission denied: [client 216.73.216.199:41302] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS0/port
[Thu Jul 30 13:35:22.756623 2026] [ssl:error] [pid 3258907:tid 3258907] (70014)End of file found: [client 216.73.216.199:41302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:22.946230 2026] [core:error] [pid 3265488:tid 3265488] [client 66.249.66.40:62820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:22.946259 2026] [core:error] [pid 3265488:tid 3265488] [client 66.249.66.40:62820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:22.949180 2026] [core:error] [pid 3268027:tid 3268027] [client 66.249.66.167:41210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:22.949200 2026] [core:error] [pid 3268027:tid 3268027] [client 66.249.66.167:41210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:22.958772 2026] [access_compat:error] [pid 3266200:tid 3266200] [client 106.222.248.251:2456] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:23.230175 2026] [ssl:error] [pid 3268028:tid 3268028] (EAI 2)Name or service not known: [client 144.76.19.72:34226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:23.230209 2026] [ssl:error] [pid 3268028:tid 3268028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:23.286050 2026] [ssl:error] [pid 3265488:tid 3265488] (EAI 2)Name or service not known: [client 144.76.19.72:34236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:23.286093 2026] [ssl:error] [pid 3265488:tid 3265488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:23.408118 2026] [lsapi:warn] [pid 3266313:tid 3266313] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:26.242466 2026] [access_compat:error] [pid 3255014:tid 3255014] [client 202.88.254.53:55025] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:26.341161 2026] [ssl:error] [pid 3268027:tid 3268027] (EAI 2)Name or service not known: [client 144.76.19.72:34252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:26.341198 2026] [ssl:error] [pid 3268027:tid 3268027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:26.452582 2026] [ssl:error] [pid 3268109:tid 3268109] (EAI 2)Name or service not known: [client 144.76.19.72:34260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:26.452618 2026] [ssl:error] [pid 3268109:tid 3268109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:27.187310 2026] [ssl:error] [pid 3266259:tid 3266259] (70014)End of file found: [client 216.73.216.199:1065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:29.289674 2026] [authz_core:error] [pid 3255507:tid 3255507] [client 66.249.66.33:36960] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:35:29.292330 2026] [authz_core:error] [pid 3255507:tid 3255507] [client 66.249.66.33:36960] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:35:29.506949 2026] [ssl:error] [pid 3264093:tid 3264093] (EAI 2)Name or service not known: [client 144.76.19.72:34270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:29.506983 2026] [ssl:error] [pid 3264093:tid 3264093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:29.559572 2026] [ssl:error] [pid 3266200:tid 3266200] (EAI 2)Name or service not known: [client 144.76.19.72:25684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:29.559613 2026] [ssl:error] [pid 3266200:tid 3266200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:30.255603 2026] [lsapi:warn] [pid 3247029:tid 3247029] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:30.362449 2026] [ssl:error] [pid 3267536:tid 3267536] (70014)End of file found: [client 216.73.216.199:49141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:30.392789 2026] [lsapi:warn] [pid 3263251:tid 3263251] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:30.896268 2026] [security2:error] [pid 3256865:tid 3256865] [client 114.119.134.224:50465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "taylorshouse.com"] [uri "/home/wp-content/uploads/2011/06/tree-water-300.jpg"] [unique_id "amtFEo3TpqRJwSeEZxF0uwAAABs"], referer: http://taylorshouse.com/home/about
[Thu Jul 30 13:35:31.505344 2026] [core:error] [pid 3264093:tid 3264093] (13)Permission denied: [client 216.73.216.199:21762] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/nfnetlink/uevent
[Thu Jul 30 13:35:32.444752 2026] [security2:error] [pid 3256865:tid 3256865] [client 43.135.145.77:55950] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.broadcast-support.com"] [uri "/"] [unique_id "amtFFI3TpqRJwSeEZxF0vAAAABs"]
[Thu Jul 30 13:35:32.485505 2026] [access_compat:error] [pid 3265490:tid 3265490] [client 202.88.254.53:55234] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:32.620789 2026] [ssl:error] [pid 3263251:tid 3263251] (EAI 2)Name or service not known: [client 144.76.19.72:25688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:32.620823 2026] [ssl:error] [pid 3263251:tid 3263251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:32.676500 2026] [ssl:error] [pid 3255636:tid 3255636] (EAI 2)Name or service not known: [client 144.76.19.72:25702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:32.676534 2026] [ssl:error] [pid 3255636:tid 3255636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:33.011413 2026] [ssl:error] [pid 3264093:tid 3264093] (5)Input/output error: [client 216.73.216.199:21762] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:33.493825 2026] [access_compat:error] [pid 3265452:tid 3265452] [client 106.222.248.251:4284] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:33.916500 2026] [ssl:error] [pid 3266314:tid 3266314] (70014)End of file found: [client 216.73.216.199:38069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:34.012365 2026] [lsapi:warn] [pid 3263251:tid 3263251] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:35.730032 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:25716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:35.730060 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:35.784884 2026] [ssl:error] [pid 3251932:tid 3251932] (EAI 2)Name or service not known: [client 144.76.19.72:25732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:35.784912 2026] [ssl:error] [pid 3251932:tid 3251932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:35.917221 2026] [ssl:error] [pid 3268074:tid 3268074] (70014)End of file found: [client 216.73.216.199:2121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:38.381727 2026] [ssl:error] [pid 3251932:tid 3251932] (70014)End of file found: [client 216.73.216.199:30502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:38.594618 2026] [core:error] [pid 3267536:tid 3267536] [client 66.249.66.167:58868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:38.594645 2026] [core:error] [pid 3267536:tid 3267536] [client 66.249.66.167:58868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:38.891680 2026] [ssl:error] [pid 3255014:tid 3255014] (EAI 2)Name or service not known: [client 144.76.19.72:25748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:38.891721 2026] [ssl:error] [pid 3255014:tid 3255014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:38.945789 2026] [ssl:error] [pid 3257942:tid 3257942] (EAI 2)Name or service not known: [client 144.76.19.72:25764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:38.945829 2026] [ssl:error] [pid 3257942:tid 3257942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:39.228872 2026] [ssl:error] [pid 3247029:tid 3247029] (70014)End of file found: [client 216.73.216.199:1379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:40.954343 2026] [lsapi:warn] [pid 3257999:tid 3257999] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:40.971754 2026] [lsapi:warn] [pid 3268073:tid 3268073] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:41.293586 2026] [access_compat:error] [pid 3266317:tid 3266317] [client 202.88.254.53:55562] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:41.377038 2026] [core:error] [pid 3269521:tid 3269521] (13)Permission denied: [client 216.73.216.199:63426] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS2/line
[Thu Jul 30 13:35:42.000372 2026] [ssl:error] [pid 3266313:tid 3266313] (EAI 2)Name or service not known: [client 144.76.19.72:24220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:42.000397 2026] [ssl:error] [pid 3266313:tid 3266313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:42.056435 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:24226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:42.056463 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:43.299202 2026] [core:error] [pid 3269521:tid 3269521] (13)Permission denied: [client 216.73.216.199:63426] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS2/line
[Thu Jul 30 13:35:44.037971 2026] [access_compat:error] [pid 3268114:tid 3268114] [client 106.222.248.251:12524] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:44.510410 2026] [ssl:error] [pid 3269521:tid 3269521] (70014)End of file found: [client 216.73.216.199:63426] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:44.606062 2026] [lsapi:warn] [pid 3251932:tid 3251932] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:45.063265 2026] [security2:error] [pid 3264093:tid 3264093] [client 114.119.144.31:59313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~14,103/request_format~html"] [unique_id "amtFIRJWVpBuRefHumWFKwAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/request_format~html/cat_ids~14
[Thu Jul 30 13:35:45.110132 2026] [ssl:error] [pid 3247029:tid 3247029] (EAI 2)Name or service not known: [client 144.76.19.72:24242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:45.110173 2026] [ssl:error] [pid 3247029:tid 3247029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:45.164408 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:24256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:45.164438 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:47.225541 2026] [core:error] [pid 3248996:tid 3248996] (13)Permission denied: [client 216.73.216.199:21593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:47/subsystem/ttyS0/irq
[Thu Jul 30 13:35:47.395022 2026] [access_compat:error] [pid 3255508:tid 3255508] [client 202.88.254.53:55789] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:47.796176 2026] [security2:error] [pid 3266261:tid 3266261] [client 114.119.144.31:59321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~14,103/request_format~html"] [unique_id "amtFI4GcsjfbWNGCHfPAMQAAACU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/request_format~html/cat_ids~14
[Thu Jul 30 13:35:48.221933 2026] [ssl:error] [pid 3269893:tid 3269893] (EAI 2)Name or service not known: [client 144.76.19.72:24264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:48.221975 2026] [ssl:error] [pid 3269893:tid 3269893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:48.281569 2026] [ssl:error] [pid 3263006:tid 3263006] (EAI 2)Name or service not known: [client 144.76.19.72:24274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:48.281608 2026] [ssl:error] [pid 3263006:tid 3263006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:50.199515 2026] [core:error] [pid 3270012:tid 3270012] [client 66.249.64.170:52175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:50.199565 2026] [core:error] [pid 3270012:tid 3270012] [client 66.249.64.170:52175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:50.724350 2026] [core:error] [pid 3270014:tid 3270014] [client 66.249.66.10:49198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:50.724396 2026] [core:error] [pid 3270014:tid 3270014] [client 66.249.66.10:49198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:35:51.367017 2026] [ssl:error] [pid 3263490:tid 3263490] (EAI 2)Name or service not known: [client 144.76.19.72:40552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:51.367041 2026] [ssl:error] [pid 3263490:tid 3263490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:51.421192 2026] [ssl:error] [pid 3268028:tid 3268028] (EAI 2)Name or service not known: [client 144.76.19.72:40560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:51.421222 2026] [ssl:error] [pid 3268028:tid 3268028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:51.607936 2026] [lsapi:warn] [pid 3268111:tid 3268111] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:51.760375 2026] [ssl:error] [pid 3248996:tid 3248996] (70014)End of file found: [client 216.73.216.199:21593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:51.782771 2026] [lsapi:warn] [pid 3254581:tid 3254581] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:52.061293 2026] [core:error] [pid 3269947:tid 3269947] (13)Permission denied: [client 216.73.216.199:2088] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS0/irq
[Thu Jul 30 13:35:52.970940 2026] [ssl:error] [pid 3269947:tid 3269947] (70014)End of file found: [client 216.73.216.199:2088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:54.174052 2026] [ssl:error] [pid 3268114:tid 3268114] (70014)End of file found: [client 216.73.216.199:61497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:54.479373 2026] [ssl:error] [pid 3268027:tid 3268027] (EAI 2)Name or service not known: [client 144.76.19.72:40562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:54.479404 2026] [ssl:error] [pid 3268027:tid 3268027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:54.536495 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:40578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:54.536535 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:55.223329 2026] [lsapi:warn] [pid 3269893:tid 3269893] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:35:55.306715 2026] [access_compat:error] [pid 3255014:tid 3255014] [client 202.88.254.53:56099] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:55.521710 2026] [access_compat:error] [pid 3267536:tid 3267536] [client 106.222.248.251:3636] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:35:55.990683 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 45.158.164.139:49334] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:35:56.530859 2026] [access_compat:error] [pid 3270283:tid 3270283] [client 45.158.164.139:49342] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:35:57.521949 2026] [ssl:error] [pid 3266314:tid 3266314] (70014)End of file found: [client 216.73.216.199:14473] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:35:57.593227 2026] [ssl:error] [pid 3267985:tid 3267985] (EAI 2)Name or service not known: [client 144.76.19.72:40594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:57.593265 2026] [ssl:error] [pid 3267985:tid 3267985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:57.646765 2026] [ssl:error] [pid 3244602:tid 3244602] (EAI 2)Name or service not known: [client 144.76.19.72:40604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:35:57.646826 2026] [ssl:error] [pid 3244602:tid 3244602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:35:59.230532 2026] [security2:error] [pid 3268116:tid 3268116] [client 85.208.96.208:25872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/2022-forest-river-sandpiper-384qbok"] [unique_id "amtFLylSZG5UxNj4jjjkIgAAAC4"]
[Thu Jul 30 13:36:00.705598 2026] [ssl:error] [pid 3270012:tid 3270012] (EAI 2)Name or service not known: [client 144.76.19.72:43682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:00.705637 2026] [ssl:error] [pid 3270012:tid 3270012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:00.758950 2026] [ssl:error] [pid 3266261:tid 3266261] (EAI 2)Name or service not known: [client 144.76.19.72:43698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:00.758988 2026] [ssl:error] [pid 3266261:tid 3266261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:02.364129 2026] [ssl:error] [pid 3268028:tid 3268028] (70014)End of file found: [client 216.73.216.199:63383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:02.473559 2026] [lsapi:warn] [pid 3256865:tid 3256865] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:02.753700 2026] [lsapi:warn] [pid 3265452:tid 3265452] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:03.071557 2026] [authz_core:error] [pid 3269946:tid 3269946] [client 66.249.66.33:49711] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:36:03.074211 2026] [authz_core:error] [pid 3269946:tid 3269946] [client 66.249.66.33:49711] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:36:03.271152 2026] [ssl:error] [pid 3268111:tid 3268111] (70014)End of file found: [client 216.73.216.199:51732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:03.834462 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:43714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:03.834504 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:03.898535 2026] [ssl:error] [pid 3263251:tid 3263251] (EAI 2)Name or service not known: [client 144.76.19.72:43724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:03.898559 2026] [ssl:error] [pid 3263251:tid 3263251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:04.174828 2026] [ssl:error] [pid 3270399:tid 3270399] (70014)End of file found: [client 216.73.216.199:27119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:05.276627 2026] [access_compat:error] [pid 3263251:tid 3263251] [client 106.222.248.251:15349] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:05.817471 2026] [lsapi:warn] [pid 3263490:tid 3263490] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:06.953200 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:43728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:06.953227 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:07.009303 2026] [ssl:error] [pid 3270757:tid 3270757] (EAI 2)Name or service not known: [client 144.76.19.72:43740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:07.009340 2026] [ssl:error] [pid 3270757:tid 3270757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:08.156475 2026] [access_compat:error] [pid 3247029:tid 3247029] [client 202.88.254.53:56645] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:09.296772 2026] [ssl:error] [pid 3270757:tid 3270757] (70014)End of file found: [client 216.73.216.199:16841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:09.598086 2026] [ssl:error] [pid 3263490:tid 3263490] (70014)End of file found: [client 216.73.216.199:29998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:10.064100 2026] [ssl:error] [pid 3265488:tid 3265488] (EAI 2)Name or service not known: [client 144.76.19.72:44994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:10.064126 2026] [ssl:error] [pid 3265488:tid 3265488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:10.076017 2026] [core:error] [pid 3256865:tid 3256865] (13)Permission denied: [client 216.73.216.199:46411] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:47/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 13:36:10.120558 2026] [ssl:error] [pid 3268111:tid 3268111] (EAI 2)Name or service not known: [client 144.76.19.72:45006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:10.120586 2026] [ssl:error] [pid 3268111:tid 3268111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:10.496963 2026] [ssl:error] [pid 3256865:tid 3256865] (70014)End of file found: [client 216.73.216.199:46411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:13.200404 2026] [ssl:error] [pid 3268109:tid 3268109] (EAI 2)Name or service not known: [client 144.76.19.72:45010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:13.200440 2026] [ssl:error] [pid 3268109:tid 3268109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:13.254710 2026] [ssl:error] [pid 3269947:tid 3269947] (EAI 2)Name or service not known: [client 144.76.19.72:45024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:13.254740 2026] [ssl:error] [pid 3269947:tid 3269947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:13.317025 2026] [lsapi:warn] [pid 3267985:tid 3267985] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:13.446397 2026] [lsapi:warn] [pid 3268073:tid 3268073] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:14.772792 2026] [core:error] [pid 3269521:tid 3269521] (13)Permission denied: [client 216.73.216.199:52369] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS0/irq
[Thu Jul 30 13:36:15.353180 2026] [security2:error] [pid 3267985:tid 3267985] [client 216.73.216.199:33421] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/systemd/resolv.conf"] [unique_id "amtFP56rgMxpSLgUrVfC9wAAAAU"]
[Thu Jul 30 13:36:15.353471 2026] [security2:error] [pid 3267985:tid 3267985] [client 216.73.216.199:33421] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/systemd/resolv.conf"] [unique_id "amtFP56rgMxpSLgUrVfC9wAAAAU"]
[Thu Jul 30 13:36:15.353701 2026] [security2:error] [pid 3267985:tid 3267985] [client 216.73.216.199:33421] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/systemd/resolv.conf"] [unique_id "amtFP56rgMxpSLgUrVfC9wAAAAU"]
[Thu Jul 30 13:36:15.654417 2026] [ssl:error] [pid 3267985:tid 3267985] (70014)End of file found: [client 216.73.216.199:33421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:15.952025 2026] [access_compat:error] [pid 3266314:tid 3266314] [client 106.222.248.251:31919] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:16.313738 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:45028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:16.313784 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:16.367528 2026] [ssl:error] [pid 3256865:tid 3256865] (EAI 2)Name or service not known: [client 144.76.19.72:45040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:16.367557 2026] [ssl:error] [pid 3256865:tid 3256865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:16.412208 2026] [lsapi:warn] [pid 3269893:tid 3269893] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:16.558188 2026] [ssl:error] [pid 3269521:tid 3269521] (70014)End of file found: [client 216.73.216.199:52369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:19.267352 2026] [ssl:error] [pid 3270949:tid 3270949] (70014)End of file found: [client 216.73.216.199:9241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:19.422305 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:45042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:19.422334 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:19.480229 2026] [ssl:error] [pid 3268110:tid 3268110] (EAI 2)Name or service not known: [client 144.76.19.72:45052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:19.480266 2026] [ssl:error] [pid 3268110:tid 3268110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:20.123770 2026] [access_compat:error] [pid 3266317:tid 3266317] [client 202.88.254.53:57171] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:22.296051 2026] [core:error] [pid 3270948:tid 3270948] [client 107.150.61.58:43068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/wp-content/admin.php
[Thu Jul 30 13:36:22.296101 2026] [core:error] [pid 3270948:tid 3270948] [client 107.150.61.58:43068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/wp-content/admin.php
[Thu Jul 30 13:36:22.538607 2026] [ssl:error] [pid 3266311:tid 3266311] (EAI 2)Name or service not known: [client 144.76.19.72:63454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:22.538634 2026] [ssl:error] [pid 3266311:tid 3266311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:22.578447 2026] [ssl:error] [pid 3268111:tid 3268111] (70014)End of file found: [client 216.73.216.199:7712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:22.629869 2026] [ssl:error] [pid 3264093:tid 3264093] (EAI 2)Name or service not known: [client 144.76.19.72:63458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:22.629894 2026] [ssl:error] [pid 3264093:tid 3264093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:22.970080 2026] [security2:error] [pid 3268109:tid 3268109] [client 163.7.13.213:34079] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFRrchTWgEe5rzHFMN4gAAABY"]
[Thu Jul 30 13:36:22.970131 2026] [security2:error] [pid 3268109:tid 3268109] [client 163.7.13.213:34079] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFRrchTWgEe5rzHFMN4gAAABY"]
[Thu Jul 30 13:36:22.970380 2026] [security2:error] [pid 3268109:tid 3268109] [client 163.7.13.213:34079] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFRrchTWgEe5rzHFMN4gAAABY"]
[Thu Jul 30 13:36:23.070313 2026] [ssl:error] [pid 3269521:tid 3269521] (70014)End of file found: [client 216.73.216.199:25360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:23.564635 2026] [authz_core:error] [pid 3266200:tid 3266200] [client 51.116.238.8:15469] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:36:23.582742 2026] [authz_core:error] [pid 3266200:tid 3266200] [client 51.116.238.8:15469] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/mc4wp-debug-log.php
[Thu Jul 30 13:36:24.006972 2026] [core:error] [pid 3268074:tid 3268074] [client 66.249.66.39:61375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:24.006997 2026] [core:error] [pid 3268074:tid 3268074] [client 66.249.66.39:61375] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:24.014852 2026] [core:error] [pid 3270878:tid 3270878] [client 66.249.66.168:38859] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:24.014882 2026] [core:error] [pid 3270878:tid 3270878] [client 66.249.66.168:38859] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:24.016010 2026] [lsapi:warn] [pid 3258907:tid 3258907] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:24.195779 2026] [lsapi:warn] [pid 3270399:tid 3270399] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:24.449653 2026] [core:error] [pid 3254581:tid 3254581] [client 66.249.66.66:52595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:24.449678 2026] [core:error] [pid 3254581:tid 3254581] [client 66.249.66.66:52595] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:24.579081 2026] [ssl:error] [pid 3268114:tid 3268114] (70014)End of file found: [client 216.73.216.199:7718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:25.543661 2026] [authz_core:error] [pid 3268074:tid 3268074] [client 66.249.66.33:39762] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:36:25.546323 2026] [authz_core:error] [pid 3268074:tid 3268074] [client 66.249.66.33:39762] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:36:25.693367 2026] [ssl:error] [pid 3263490:tid 3263490] (EAI 2)Name or service not known: [client 144.76.19.72:63468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:25.693397 2026] [ssl:error] [pid 3263490:tid 3263490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:25.745166 2026] [ssl:error] [pid 3268073:tid 3268073] (EAI 2)Name or service not known: [client 144.76.19.72:63470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:25.745190 2026] [ssl:error] [pid 3268073:tid 3268073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:26.662153 2026] [security2:error] [pid 3263490:tid 3263490] [client 177.95.15.128:42419] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFSjm-DxKsF5LbFcQlhQAAAB8"]
[Thu Jul 30 13:36:26.662199 2026] [security2:error] [pid 3263490:tid 3263490] [client 177.95.15.128:42419] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFSjm-DxKsF5LbFcQlhQAAAB8"]
[Thu Jul 30 13:36:26.662436 2026] [security2:error] [pid 3263490:tid 3263490] [client 177.95.15.128:42419] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFSjm-DxKsF5LbFcQlhQAAAB8"]
[Thu Jul 30 13:36:26.714163 2026] [access_compat:error] [pid 3270948:tid 3270948] [client 106.222.248.251:7546] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:26.964157 2026] [lsapi:warn] [pid 3268073:tid 3268073] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:27.505523 2026] [security2:error] [pid 3265488:tid 3265488] [client 47.128.40.11:52338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.horus-wellbeing.co.uk"] [uri "/robots.txt"] [unique_id "amtFS9oHUQFbIAgkq-9zGAAAABI"]
[Thu Jul 30 13:36:27.511200 2026] [core:error] [pid 3266314:tid 3266314] [client 107.150.61.58:41942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/wp-content/admin.php
[Thu Jul 30 13:36:27.511222 2026] [core:error] [pid 3266314:tid 3266314] [client 107.150.61.58:41942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/wp-content/admin.php
[Thu Jul 30 13:36:27.732129 2026] [security2:error] [pid 3258907:tid 3258907] [client 47.128.36.129:65514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amtFSwuhTzyElPwrg7ZxwAAAABE"]
[Thu Jul 30 13:36:28.171393 2026] [ssl:error] [pid 3266311:tid 3266311] (70014)End of file found: [client 216.73.216.199:50709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:28.769969 2026] [ssl:error] [pid 3263490:tid 3263490] (70014)End of file found: [client 216.73.216.199:46237] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:28.835209 2026] [ssl:error] [pid 3266261:tid 3266261] (EAI 2)Name or service not known: [client 144.76.19.72:63482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:28.835237 2026] [ssl:error] [pid 3266261:tid 3266261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:28.892297 2026] [ssl:error] [pid 3264093:tid 3264093] (EAI 2)Name or service not known: [client 144.76.19.72:63494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:28.892330 2026] [ssl:error] [pid 3264093:tid 3264093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:29.233364 2026] [security2:error] [pid 3270400:tid 3270400] [client 47.128.36.129:51614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.peterboroughdiocesanregistry.co.uk"] [uri "/403.shtml"] [unique_id "amtFTVE2ry1i-s_sqG467AAAAC0"]
[Thu Jul 30 13:36:29.372315 2026] [ssl:error] [pid 3270669:tid 3270669] (70014)End of file found: [client 216.73.216.199:57117] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:30.616579 2026] [access_compat:error] [pid 3264093:tid 3264093] [client 85.204.70.104:40620] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/uploads/index.php
[Thu Jul 30 13:36:30.617349 2026] [core:error] [pid 3264093:tid 3264093] [client 85.204.70.104:40620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:30.679916 2026] [authz_core:error] [pid 3266261:tid 3266261] [client 85.204.70.104:40632] AH01630: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/error_log
[Thu Jul 30 13:36:30.802979 2026] [core:error] [pid 3266261:tid 3266261] [client 85.204.70.104:40632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:30.803004 2026] [core:error] [pid 3266261:tid 3266261] [client 85.204.70.104:40632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:31.169679 2026] [security2:error] [pid 3272097:tid 3272097] [client 181.115.175.45:60318] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFT-BOQCC4zkEQCt3K0gAAAA4"]
[Thu Jul 30 13:36:31.169725 2026] [security2:error] [pid 3272097:tid 3272097] [client 181.115.175.45:60318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFT-BOQCC4zkEQCt3K0gAAAA4"]
[Thu Jul 30 13:36:31.169975 2026] [security2:error] [pid 3272097:tid 3272097] [client 181.115.175.45:60318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFT-BOQCC4zkEQCt3K0gAAAA4"]
[Thu Jul 30 13:36:31.970791 2026] [access_compat:error] [pid 3266314:tid 3266314] [client 202.88.254.53:57709] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:32.019536 2026] [ssl:error] [pid 3268110:tid 3268110] (EAI 2)Name or service not known: [client 144.76.19.72:61430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:32.019560 2026] [ssl:error] [pid 3268110:tid 3268110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:32.092975 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:40646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:32.092996 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:40646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:32.241891 2026] [ssl:error] [pid 3272416:tid 3272416] (EAI 2)Name or service not known: [client 144.76.19.72:61440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:32.241935 2026] [ssl:error] [pid 3272416:tid 3272416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:32.737761 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:40674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:32.737788 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:40674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.037662 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:40688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.037687 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:40688] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.104573 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:40698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.104594 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:40698] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.299370 2026] [core:error] [pid 3265452:tid 3265452] [client 85.204.70.104:40706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.299395 2026] [core:error] [pid 3265452:tid 3265452] [client 85.204.70.104:40706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.389578 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:40712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.389602 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:40712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.637721 2026] [core:error] [pid 3266311:tid 3266311] [client 85.204.70.104:40738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.637748 2026] [core:error] [pid 3266311:tid 3266311] [client 85.204.70.104:40738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.773039 2026] [core:error] [pid 3270878:tid 3270878] [client 85.204.70.104:40750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.773062 2026] [core:error] [pid 3270878:tid 3270878] [client 85.204.70.104:40750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.894145 2026] [ssl:error] [pid 3270399:tid 3270399] (70014)End of file found: [client 216.73.216.199:29246] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:33.947591 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:40776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:33.947617 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:40776] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:35.203693 2026] [lsapi:warn] [pid 3268109:tid 3268109] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:35.301489 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:61452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:35.301513 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:35.360531 2026] [ssl:error] [pid 3272416:tid 3272416] (EAI 2)Name or service not known: [client 144.76.19.72:61454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:35.360554 2026] [ssl:error] [pid 3272416:tid 3272416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:35.955692 2026] [core:error] [pid 3270283:tid 3270283] [client 85.204.70.104:41084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:35.955715 2026] [core:error] [pid 3270283:tid 3270283] [client 85.204.70.104:41084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.300378 2026] [core:error] [pid 3272416:tid 3272416] [client 85.204.70.104:41118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.300406 2026] [core:error] [pid 3272416:tid 3272416] [client 85.204.70.104:41118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.487408 2026] [core:error] [pid 3268109:tid 3268109] [client 85.204.70.104:41140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.487453 2026] [core:error] [pid 3268109:tid 3268109] [client 85.204.70.104:41140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.664319 2026] [core:error] [pid 3266311:tid 3266311] [client 57.141.0.6:36814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.664350 2026] [core:error] [pid 3266311:tid 3266311] [client 57.141.0.6:36814] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.728146 2026] [core:error] [pid 3266261:tid 3266261] [client 85.204.70.104:41158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.728172 2026] [core:error] [pid 3266261:tid 3266261] [client 85.204.70.104:41158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.830756 2026] [security2:error] [pid 3266261:tid 3266261] [client 85.204.70.104:41174] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/src/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtFVIGcsjfbWNGCHfPAlAAAACU"]
[Thu Jul 30 13:36:36.830869 2026] [security2:error] [pid 3266261:tid 3266261] [client 85.204.70.104:41174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtFVIGcsjfbWNGCHfPAlAAAACU"]
[Thu Jul 30 13:36:36.831217 2026] [core:error] [pid 3266261:tid 3266261] [client 85.204.70.104:41174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.831324 2026] [security2:error] [pid 3266261:tid 3266261] [client 85.204.70.104:41174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtFVIGcsjfbWNGCHfPAlAAAACU"]
[Thu Jul 30 13:36:36.894179 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:41176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:36.894204 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:41176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.057111 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:41178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.057133 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:41178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.176363 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:41192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.176393 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:41192] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.302587 2026] [core:error] [pid 3266311:tid 3266311] [client 85.204.70.104:41198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.302618 2026] [core:error] [pid 3266311:tid 3266311] [client 85.204.70.104:41198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.423283 2026] [core:error] [pid 3255508:tid 3255508] [client 85.204.70.104:41204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.423307 2026] [core:error] [pid 3255508:tid 3255508] [client 85.204.70.104:41204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.517332 2026] [lsapi:warn] [pid 3270014:tid 3270014] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:37.575636 2026] [access_compat:error] [pid 3268027:tid 3268027] [client 106.222.248.251:4895] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:37.761388 2026] [core:error] [pid 3266314:tid 3266314] [client 85.204.70.104:41208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.761413 2026] [core:error] [pid 3266314:tid 3266314] [client 85.204.70.104:41208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.827523 2026] [core:error] [pid 3255508:tid 3255508] [client 85.204.70.104:41224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:37.827547 2026] [core:error] [pid 3255508:tid 3255508] [client 85.204.70.104:41224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.027333 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:41250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.027371 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:41250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.088900 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:41258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.088924 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:41258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.343231 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:38278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.343254 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:38278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.418163 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:61470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:38.418205 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:38.472873 2026] [ssl:error] [pid 3268110:tid 3268110] (EAI 2)Name or service not known: [client 144.76.19.72:61482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:38.472900 2026] [ssl:error] [pid 3268110:tid 3268110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:38.592030 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:38286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.592056 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:38286] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.689791 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:38290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.689814 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:38290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.769382 2026] [ssl:error] [pid 3270283:tid 3270283] (70014)End of file found: [client 216.73.216.199:32611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:38.964691 2026] [core:error] [pid 3272997:tid 3272997] [client 85.204.70.104:38302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:38.964717 2026] [core:error] [pid 3272997:tid 3272997] [client 85.204.70.104:38302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:39.030587 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:38304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:39.030620 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:38304] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:39.127890 2026] [security2:error] [pid 3270757:tid 3270757] [client 85.204.70.104:38308] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/library/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtFV69JpsnMELKdH9UScwAAAC8"]
[Thu Jul 30 13:36:39.128004 2026] [security2:error] [pid 3270757:tid 3270757] [client 85.204.70.104:38308] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtFV69JpsnMELKdH9UScwAAAC8"]
[Thu Jul 30 13:36:39.128335 2026] [core:error] [pid 3270757:tid 3270757] [client 85.204.70.104:38308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:39.128446 2026] [security2:error] [pid 3270757:tid 3270757] [client 85.204.70.104:38308] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtFV69JpsnMELKdH9UScwAAAC8"]
[Thu Jul 30 13:36:39.230917 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:38314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:39.230939 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:38314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:39.376944 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:38326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:39.376981 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:38326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:40.046649 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:38418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:40.046687 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:38418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:40.113431 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:38432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:40.113454 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:38432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:40.409490 2026] [security2:error] [pid 3264093:tid 3264093] [client 85.204.70.104:38458] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/src/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtFWBJWVpBuRefHumWFPgAAACk"]
[Thu Jul 30 13:36:40.409653 2026] [security2:error] [pid 3264093:tid 3264093] [client 85.204.70.104:38458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtFWBJWVpBuRefHumWFPgAAACk"]
[Thu Jul 30 13:36:40.410040 2026] [core:error] [pid 3264093:tid 3264093] [client 85.204.70.104:38458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:40.410205 2026] [security2:error] [pid 3264093:tid 3264093] [client 85.204.70.104:38458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtFWBJWVpBuRefHumWFPgAAACk"]
[Thu Jul 30 13:36:40.479623 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:38466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:40.479654 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:38466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.147121 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:38528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.147158 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:38528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.235408 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:38536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.235433 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:38536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.270642 2026] [core:error] [pid 3270878:tid 3270878] [client 66.249.66.168:58416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.270670 2026] [core:error] [pid 3270878:tid 3270878] [client 66.249.66.168:58416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.288222 2026] [security2:error] [pid 3270400:tid 3270400] [client 23.150.248.144:36154] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.nativespace-pandora.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtFWVE2ry1i-s_sqG469wAAAC0"]
[Thu Jul 30 13:36:41.288485 2026] [security2:error] [pid 3270400:tid 3270400] [client 23.150.248.144:36154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nativespace-pandora.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtFWVE2ry1i-s_sqG469wAAAC0"]
[Thu Jul 30 13:36:41.288689 2026] [security2:error] [pid 3270400:tid 3270400] [client 23.150.248.144:36154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtFWVE2ry1i-s_sqG469wAAAC0"]
[Thu Jul 30 13:36:41.528495 2026] [ssl:error] [pid 3270015:tid 3270015] (EAI 2)Name or service not known: [client 144.76.19.72:61028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:41.528532 2026] [ssl:error] [pid 3270015:tid 3270015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:41.610185 2026] [ssl:error] [pid 3270399:tid 3270399] (EAI 2)Name or service not known: [client 144.76.19.72:61036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:41.610217 2026] [ssl:error] [pid 3270399:tid 3270399] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:41.632154 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:38582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.632178 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:38582] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.653002 2026] [security2:error] [pid 3270369:tid 3270369] [client 23.150.248.144:36164] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.nativespace-pandora.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtFWcbPuNzKKibgMuIBRQAAAAk"]
[Thu Jul 30 13:36:41.653380 2026] [security2:error] [pid 3270369:tid 3270369] [client 23.150.248.144:36164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nativespace-pandora.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtFWcbPuNzKKibgMuIBRQAAAAk"]
[Thu Jul 30 13:36:41.653632 2026] [security2:error] [pid 3270369:tid 3270369] [client 23.150.248.144:36164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtFWcbPuNzKKibgMuIBRQAAAAk"]
[Thu Jul 30 13:36:41.708163 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:38598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.708184 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:38598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.825326 2026] [core:error] [pid 3270878:tid 3270878] [client 85.204.70.104:38612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.825355 2026] [core:error] [pid 3270878:tid 3270878] [client 85.204.70.104:38612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.931229 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:38626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:41.931252 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:38626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.002053 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:38642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.002094 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:38642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.224235 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:38646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.224258 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:38646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.388808 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:38652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.388834 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:38652] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.427210 2026] [access_compat:error] [pid 3272329:tid 3272329] [client 202.88.254.53:58224] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:42.702009 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:38656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.702050 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:38656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.770043 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:38670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:42.770076 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:38670] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:43.105232 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:38694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:43.105261 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:38694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:43.330790 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:38702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:43.330812 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:38702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:43.667391 2026] [core:error] [pid 3270400:tid 3270400] [client 85.204.70.104:38768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:43.667415 2026] [core:error] [pid 3270400:tid 3270400] [client 85.204.70.104:38768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:44.427306 2026] [authz_core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:38902] AH01630: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 13:36:44.449935 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:38902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:44.449956 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:38902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:44.503317 2026] [ssl:error] [pid 3266259:tid 3266259] (70014)End of file found: [client 216.73.216.199:25806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:44.686709 2026] [ssl:error] [pid 3255014:tid 3255014] (EAI 2)Name or service not known: [client 144.76.19.72:61038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:44.686780 2026] [ssl:error] [pid 3255014:tid 3255014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:44.743410 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:61052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:44.743433 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:45.898139 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:39102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:45.898161 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:39102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:45.988491 2026] [security2:error] [pid 3270014:tid 3270014] [client 185.191.171.13:45410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.4995.html"] [unique_id "amtFXZsy3miOHmmTCR0HZgAAACQ"]
[Thu Jul 30 13:36:46.002128 2026] [lsapi:warn] [pid 3272097:tid 3272097] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:46.068403 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:39138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.068427 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:39138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.133094 2026] [core:error] [pid 3268074:tid 3268074] [client 85.204.70.104:39142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.133114 2026] [core:error] [pid 3268074:tid 3268074] [client 85.204.70.104:39142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.306821 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:39176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.306851 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:39176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.527868 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:39206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.527924 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:39206] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.595830 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:39222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.595860 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:39222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.717159 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:39226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.717185 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:39226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.841298 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:39230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:46.841334 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:39230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:47.184173 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:39260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:47.184197 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:39260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:47.800421 2026] [ssl:error] [pid 3272097:tid 3272097] (EAI 2)Name or service not known: [client 144.76.19.72:61082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:47.800450 2026] [ssl:error] [pid 3272097:tid 3272097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:47.852613 2026] [ssl:error] [pid 3270013:tid 3270013] (EAI 2)Name or service not known: [client 144.76.19.72:61096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:47.852641 2026] [ssl:error] [pid 3270013:tid 3270013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:48.101612 2026] [access_compat:error] [pid 3271408:tid 3271408] [client 106.222.248.251:32819] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:48.105707 2026] [lsapi:warn] [pid 3269893:tid 3269893] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:48.762227 2026] [security2:error] [pid 3272997:tid 3272997] [client 185.191.171.7:29866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.1575.html"] [unique_id "amtFYGNSHkppt-kc1hgbzQAAADs"]
[Thu Jul 30 13:36:50.909320 2026] [ssl:error] [pid 3270399:tid 3270399] (EAI 2)Name or service not known: [client 144.76.19.72:33412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:50.909346 2026] [ssl:error] [pid 3270399:tid 3270399] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:50.965236 2026] [ssl:error] [pid 3268028:tid 3268028] (EAI 2)Name or service not known: [client 144.76.19.72:33420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:50.965258 2026] [ssl:error] [pid 3268028:tid 3268028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:51.548822 2026] [security2:error] [pid 3270369:tid 3270369] [client 185.191.171.5:41566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2147.0.html"] [unique_id "amtFY8bPuNzKKibgMuIBTQAAAAk"]
[Thu Jul 30 13:36:52.139125 2026] [core:error] [pid 3265452:tid 3265452] [client 85.204.70.104:48398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.139150 2026] [core:error] [pid 3265452:tid 3265452] [client 85.204.70.104:48398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.229622 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.229648 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.295296 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:48418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.295327 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:48418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.370096 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.370122 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.439686 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:48450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.439730 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:48450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.505048 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:48454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.505084 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:48454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.574210 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.574231 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.652253 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:48460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.652280 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:48460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.716688 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:48472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.716717 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:48472] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.780187 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.780211 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.852103 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:48484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.852126 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:48484] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.915892 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:48488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.915924 2026] [core:error] [pid 3268073:tid 3268073] [client 85.204.70.104:48488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.981185 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:52.981205 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.047045 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.047080 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.116920 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.116939 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.131689 2026] [access_compat:error] [pid 3270014:tid 3270014] [client 202.88.254.53:58751] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:53.180604 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.180627 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.244292 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.244312 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48520] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.309801 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:48524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.309839 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:48524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.372912 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.372934 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.472054 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.472088 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:48536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.536856 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:48544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.536877 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:48544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.599350 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:53.599376 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:48546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:54.023597 2026] [ssl:error] [pid 3270949:tid 3270949] (EAI 2)Name or service not known: [client 144.76.19.72:33436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:54.023636 2026] [ssl:error] [pid 3270949:tid 3270949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:54.080212 2026] [ssl:error] [pid 3270369:tid 3270369] (EAI 2)Name or service not known: [client 144.76.19.72:33444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:54.080250 2026] [ssl:error] [pid 3270369:tid 3270369] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:54.149746 2026] [security2:error] [pid 3271408:tid 3271408] [client 129.211.172.249:47750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sudokulogicapp.com"] [uri "/"] [unique_id "amtFZoJjgpM9WRcdFJn0KAAAADY"]
[Thu Jul 30 13:36:54.914512 2026] [access_compat:error] [pid 3270949:tid 3270949] [client 5.127.0.46:45258] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:36:56.057703 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:48914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:56.057724 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:48914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:56.303324 2026] [ssl:error] [pid 3270013:tid 3270013] (70014)End of file found: [client 216.73.216.199:55655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:36:56.482703 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:48926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:56.482723 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:48926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:56.616966 2026] [security2:error] [pid 3271408:tid 3271408] [client 43.162.103.213:37870] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "asian-kitchen.co.uk"] [uri "/"] [unique_id "amtFaIJjgpM9WRcdFJn0KQAAADY"]
[Thu Jul 30 13:36:56.762755 2026] [lsapi:warn] [pid 3258907:tid 3258907] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:57.041040 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.041090 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.118572 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:48968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.118597 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:48968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.137137 2026] [ssl:error] [pid 3265490:tid 3265490] (EAI 2)Name or service not known: [client 144.76.19.72:33452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:57.137509 2026] [ssl:error] [pid 3265490:tid 3265490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:57.190667 2026] [ssl:error] [pid 3268110:tid 3268110] (EAI 2)Name or service not known: [client 144.76.19.72:33468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:36:57.190695 2026] [ssl:error] [pid 3268110:tid 3268110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:36:57.226405 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:48970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.226426 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:48970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.292784 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:48978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.292811 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:48978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.360299 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.360323 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:48994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.429642 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:48996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.429663 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:48996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.559504 2026] [core:error] [pid 3268110:tid 3268110] [client 66.249.66.66:45941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.559528 2026] [core:error] [pid 3268110:tid 3268110] [client 66.249.66.66:45941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.653866 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:49016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.653902 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:49016] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.721901 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:49020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.721924 2026] [core:error] [pid 3258907:tid 3258907] [client 85.204.70.104:49020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.787754 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:49034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.787781 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:49034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.883195 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:49048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.883220 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:49048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.947448 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:49052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:57.947467 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:49052] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.054098 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:49062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.054122 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:49062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.257288 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:34850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.257312 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:34850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.321106 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:34866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.321141 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:34866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.445252 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:34880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.445276 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:34880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.513460 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:34890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.513492 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:34890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.566389 2026] [security2:error] [pid 3271408:tid 3271408] [client 185.191.171.11:11914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6348.0/prev_next,prev.html"] [unique_id "amtFaoJjgpM9WRcdFJn0LAAAADY"]
[Thu Jul 30 13:36:58.622236 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:34906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.622259 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:34906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.665112 2026] [lsapi:warn] [pid 3268028:tid 3268028] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:36:58.715997 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:34914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.716023 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:34914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.771596 2026] [access_compat:error] [pid 3268111:tid 3268111] [client 106.222.248.251:20999] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:36:58.814241 2026] [core:error] [pid 3267536:tid 3267536] [client 85.204.70.104:34922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.814279 2026] [core:error] [pid 3267536:tid 3267536] [client 85.204.70.104:34922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.921279 2026] [core:error] [pid 3269947:tid 3269947] [client 85.204.70.104:34936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:58.921303 2026] [core:error] [pid 3269947:tid 3269947] [client 85.204.70.104:34936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.011861 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:34938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.011885 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:34938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.104979 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:34954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.105002 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:34954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.194393 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:34968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.194415 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:34968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.226281 2026] [access_compat:error] [pid 3266259:tid 3266259] [client 45.158.164.139:59842] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:36:59.289288 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:34974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.289321 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:34974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.756250 2026] [core:error] [pid 3269947:tid 3269947] [client 85.204.70.104:34988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.756289 2026] [core:error] [pid 3269947:tid 3269947] [client 85.204.70.104:34988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.795195 2026] [security2:error] [pid 3248996:tid 3248996] [client 185.191.171.13:25062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/where-is-sue-aikens-now"] [unique_id "amtFa2pvCL6m8t3ptGRySAAAADA"]
[Thu Jul 30 13:36:59.826133 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:34998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.826158 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:34998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.896833 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.896868 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.960123 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:36:59.960148 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.045949 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.045976 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.112175 2026] [core:error] [pid 3268074:tid 3268074] [client 85.204.70.104:35050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.112198 2026] [core:error] [pid 3268074:tid 3268074] [client 85.204.70.104:35050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.178729 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:35060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.178757 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:35060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.247964 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:59666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:00.247986 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:00.255654 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.255676 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.303827 2026] [ssl:error] [pid 3270369:tid 3270369] (EAI 2)Name or service not known: [client 144.76.19.72:59682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:00.303857 2026] [ssl:error] [pid 3270369:tid 3270369] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:00.326065 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:35078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.326099 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:35078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.395772 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.395797 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.463424 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.463459 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.527920 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:35114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.527947 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:35114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.630515 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:35120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.630538 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:35120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.698948 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:35134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.698969 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:35134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.775215 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.775238 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.857207 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.857235 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.923170 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:35168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.923200 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:35168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.994448 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:00.994473 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.058774 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.058796 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.123795 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:35202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.123818 2026] [core:error] [pid 3270012:tid 3270012] [client 85.204.70.104:35202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.193241 2026] [core:error] [pid 3272416:tid 3272416] [client 85.204.70.104:35208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.193263 2026] [core:error] [pid 3272416:tid 3272416] [client 85.204.70.104:35208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.263351 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.263378 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.335992 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:35226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.336018 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:35226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.410239 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.410267 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.482274 2026] [core:error] [pid 3268116:tid 3268116] [client 85.204.70.104:35250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.482297 2026] [core:error] [pid 3268116:tid 3268116] [client 85.204.70.104:35250] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.549127 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.549161 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.613012 2026] [core:error] [pid 3272416:tid 3272416] [client 85.204.70.104:35266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.613032 2026] [core:error] [pid 3272416:tid 3272416] [client 85.204.70.104:35266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.676182 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.676206 2026] [core:error] [pid 3265490:tid 3265490] [client 85.204.70.104:35274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.740309 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:35282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.740332 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:35282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.807660 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.807683 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35284] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.879899 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:35294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.879919 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:35294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.947221 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:01.947242 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35308] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.015201 2026] [core:error] [pid 3266314:tid 3266314] [client 85.204.70.104:35314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.015241 2026] [core:error] [pid 3266314:tid 3266314] [client 85.204.70.104:35314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.079724 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:35322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.079753 2026] [core:error] [pid 3272097:tid 3272097] [client 85.204.70.104:35322] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.153319 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:35326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.153344 2026] [core:error] [pid 3268110:tid 3268110] [client 85.204.70.104:35326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.222110 2026] [core:error] [pid 3247029:tid 3247029] [client 85.204.70.104:35336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.222131 2026] [core:error] [pid 3247029:tid 3247029] [client 85.204.70.104:35336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.287766 2026] [security2:error] [pid 3269521:tid 3269521] [client 5.81.192.30:42214] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFbiPuWYtlRPhVfG4dxAAAAAQ"]
[Thu Jul 30 13:37:02.287818 2026] [security2:error] [pid 3269521:tid 3269521] [client 5.81.192.30:42214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFbiPuWYtlRPhVfG4dxAAAAAQ"]
[Thu Jul 30 13:37:02.288085 2026] [security2:error] [pid 3269521:tid 3269521] [client 5.81.192.30:42214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFbiPuWYtlRPhVfG4dxAAAAAQ"]
[Thu Jul 30 13:37:02.289093 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.289111 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.359489 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.359518 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.425233 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.425258 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.491568 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.491593 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.559880 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.559902 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.630975 2026] [core:error] [pid 3247029:tid 3247029] [client 85.204.70.104:35394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.630999 2026] [core:error] [pid 3247029:tid 3247029] [client 85.204.70.104:35394] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.700850 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.700879 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.767449 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.767472 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.833124 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.833147 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.896595 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.896619 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:02.987277 2026] [access_compat:error] [pid 3266259:tid 3266259] [client 202.88.254.53:59274] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:03.151577 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:03.151601 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35442] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:03.212684 2026] [security2:error] [pid 3254581:tid 3254581] [client 74.7.227.35:47792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "cpcontacts.nativespace-narvi.ns-narvi.com"] [uri "/"] [unique_id "amtFb7wKkgSpOuM2FoJeegAAACo"]
[Thu Jul 30 13:37:03.356973 2026] [security2:error] [pid 3270014:tid 3270014] [client 74.7.243.192:50816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/"] [unique_id "amtFb5sy3miOHmmTCR0HcgAAACQ"]
[Thu Jul 30 13:37:03.359948 2026] [ssl:error] [pid 3270013:tid 3270013] (EAI 2)Name or service not known: [client 144.76.19.72:59696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:03.359975 2026] [ssl:error] [pid 3270013:tid 3270013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:03.415401 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:59708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:03.415426 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:03.533039 2026] [core:error] [pid 3266317:tid 3266317] (13)Permission denied: [client 216.73.216.199:26852] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_head_cache/objects_partial
[Thu Jul 30 13:37:03.972005 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:03.972029 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.077255 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.077276 2026] [core:error] [pid 3270369:tid 3270369] [client 85.204.70.104:35514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.293588 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.293611 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.422734 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.422756 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.592402 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.592426 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.782182 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.782216 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:04.826869 2026] [security2:error] [pid 3263006:tid 3263006] [client 85.208.96.210:22618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amtFcMQyNdxWIvkSGfU9bgAAAB4"]
[Thu Jul 30 13:37:05.012926 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.012953 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.113989 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.114009 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35620] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.243187 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:35628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.243213 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:35628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.310493 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:35632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.310517 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:35632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.361761 2026] [security2:error] [pid 3270399:tid 3270399] [client 85.208.96.207:40930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg2910/"] [unique_id "amtFcYBG9e8qghR4OCNqCAAAABw"]
[Thu Jul 30 13:37:05.420683 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.420707 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.593640 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:35680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.593664 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:35680] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.699175 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.699201 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.765651 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:35696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:05.765679 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:35696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.021510 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:35732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.021539 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:35732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.300668 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:35786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.300689 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:35786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.341284 2026] [security2:error] [pid 3270015:tid 3270015] [client 45.219.120.81:36840] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFcgT-LAiZ2F71tQV-awAAACc"]
[Thu Jul 30 13:37:06.341340 2026] [security2:error] [pid 3270015:tid 3270015] [client 45.219.120.81:36840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFcgT-LAiZ2F71tQV-awAAACc"]
[Thu Jul 30 13:37:06.341592 2026] [security2:error] [pid 3270015:tid 3270015] [client 45.219.120.81:36840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFcgT-LAiZ2F71tQV-awAAACc"]
[Thu Jul 30 13:37:06.366745 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:35792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.366765 2026] [core:error] [pid 3269893:tid 3269893] [client 85.204.70.104:35792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.454226 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:35804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.454250 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:35804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.469370 2026] [ssl:error] [pid 3270014:tid 3270014] (EAI 2)Name or service not known: [client 144.76.19.72:59714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:06.469400 2026] [ssl:error] [pid 3270014:tid 3270014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:06.525258 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:59730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:06.525293 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:06.583129 2026] [core:error] [pid 3268074:tid 3268074] [client 85.204.70.104:35816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.583147 2026] [core:error] [pid 3268074:tid 3268074] [client 85.204.70.104:35816] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.704124 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:35826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.704149 2026] [core:error] [pid 3270015:tid 3270015] [client 85.204.70.104:35826] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.830192 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:06.830212 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.063323 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:35868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.063349 2026] [core:error] [pid 3270949:tid 3270949] [client 85.204.70.104:35868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.127197 2026] [security2:error] [pid 3263006:tid 3263006] [client 114.119.146.111:31467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~104,30,102/request_format~html"] [unique_id "amtFc8QyNdxWIvkSGfU9cwAAAB4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/cat_ids~104,30/request_format~html
[Thu Jul 30 13:37:07.315176 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:35914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.315198 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:35914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.524364 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:35926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.524387 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:35926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.623079 2026] [lsapi:warn] [pid 3270949:tid 3270949] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:07.697508 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.697529 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.868109 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:35970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.868135 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:35970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.888306 2026] [core:error] [pid 3266317:tid 3266317] (13)Permission denied: [client 216.73.216.199:26852] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/objects
[Thu Jul 30 13:37:07.935519 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:07.935544 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:35974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.051616 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:35990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.051642 2026] [core:error] [pid 3270399:tid 3270399] [client 85.204.70.104:35990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.136487 2026] [core:error] [pid 3264093:tid 3264093] [client 85.204.70.104:36004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.136513 2026] [core:error] [pid 3264093:tid 3264093] [client 85.204.70.104:36004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.272394 2026] [security2:error] [pid 3270283:tid 3270283] [client 114.119.146.111:31471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~104,30,102/request_format~html"] [unique_id "amtFdLVJ34X_iZrvVQbk4AAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/cat_ids~104,30/request_format~html
[Thu Jul 30 13:37:08.358897 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:35288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.358918 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:35288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.630427 2026] [core:error] [pid 3247029:tid 3247029] [client 85.204.70.104:35324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.630447 2026] [core:error] [pid 3247029:tid 3247029] [client 85.204.70.104:35324] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.802279 2026] [lsapi:warn] [pid 3266317:tid 3266317] [client 216.73.216.199:26852] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 13:37:08.802312 2026] [lsapi:error] [pid 3266317:tid 3266317] [client 216.73.216.199:26852] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/sqlite.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 13:37:08.807350 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:08.807374 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.056333 2026] [authz_core:error] [pid 3270399:tid 3270399] [client 66.249.66.35:38621] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:37:09.058979 2026] [authz_core:error] [pid 3270399:tid 3270399] [client 66.249.66.35:38621] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:37:09.213178 2026] [lsapi:warn] [pid 3264093:tid 3264093] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:09.224192 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.224211 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35414] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.260603 2026] [access_compat:error] [pid 3270014:tid 3270014] [client 106.222.248.251:2559] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:09.355783 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.355806 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.475361 2026] [core:error] [pid 3266317:tid 3266317] [client 85.204.70.104:35430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.475380 2026] [core:error] [pid 3266317:tid 3266317] [client 85.204.70.104:35430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.542459 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:35432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.542489 2026] [core:error] [pid 3268114:tid 3268114] [client 85.204.70.104:35432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.580414 2026] [ssl:error] [pid 3268028:tid 3268028] (EAI 2)Name or service not known: [client 144.76.19.72:26798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:09.580443 2026] [ssl:error] [pid 3268028:tid 3268028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:09.631095 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.631120 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.637656 2026] [ssl:error] [pid 3263006:tid 3263006] (EAI 2)Name or service not known: [client 144.76.19.72:26806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:09.637679 2026] [ssl:error] [pid 3263006:tid 3263006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:09.975755 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:09.975774 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35480] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.154205 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:35498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.154231 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:35498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.227133 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:35508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.227170 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:35508] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.354783 2026] [core:error] [pid 3264093:tid 3264093] [client 85.204.70.104:35518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.354804 2026] [core:error] [pid 3264093:tid 3264093] [client 85.204.70.104:35518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.418253 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.418277 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.534237 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.534257 2026] [core:error] [pid 3263006:tid 3263006] [client 85.204.70.104:35534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.601359 2026] [core:error] [pid 3270283:tid 3270283] [client 85.204.70.104:35538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.601384 2026] [core:error] [pid 3270283:tid 3270283] [client 85.204.70.104:35538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.716023 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.716046 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.783926 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:35544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.783947 2026] [core:error] [pid 3272329:tid 3272329] [client 85.204.70.104:35544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.903519 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.903552 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35548] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.923920 2026] [core:error] [pid 3268027:tid 3268027] (13)Permission denied: [client 216.73.216.199:15991] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/objects
[Thu Jul 30 13:37:10.974273 2026] [core:error] [pid 3268109:tid 3268109] [client 85.204.70.104:35552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:10.974297 2026] [core:error] [pid 3268109:tid 3268109] [client 85.204.70.104:35552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.092826 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.092849 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.375009 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.375032 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:35598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.442214 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:35600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.442240 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:35600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.536986 2026] [core:error] [pid 3268109:tid 3268109] [client 85.204.70.104:35612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.537006 2026] [core:error] [pid 3268109:tid 3268109] [client 85.204.70.104:35612] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.749708 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.749745 2026] [core:error] [pid 3275343:tid 3275343] [client 85.204.70.104:35650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.877435 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.877456 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.942836 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:11.942858 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.206633 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.206657 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35718] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.273622 2026] [core:error] [pid 3275343:tid 3275343] [client 66.249.66.169:61097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.273647 2026] [core:error] [pid 3275343:tid 3275343] [client 66.249.66.169:61097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.273805 2026] [core:error] [pid 3266317:tid 3266317] [client 85.204.70.104:35724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.273823 2026] [core:error] [pid 3266317:tid 3266317] [client 85.204.70.104:35724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.342408 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.342427 2026] [core:error] [pid 3269521:tid 3269521] [client 85.204.70.104:35730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.478884 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.478923 2026] [core:error] [pid 3274508:tid 3274508] [client 85.204.70.104:35732] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.496998 2026] [core:error] [pid 3272417:tid 3272417] [client 66.249.66.167:56344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.497026 2026] [core:error] [pid 3272417:tid 3272417] [client 66.249.66.167:56344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.695954 2026] [ssl:error] [pid 3266317:tid 3266317] (EAI 2)Name or service not known: [client 144.76.19.72:26822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:12.695989 2026] [ssl:error] [pid 3266317:tid 3266317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:12.757486 2026] [ssl:error] [pid 3269947:tid 3269947] (EAI 2)Name or service not known: [client 144.76.19.72:26832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:12.757507 2026] [ssl:error] [pid 3269947:tid 3269947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:12.820524 2026] [access_compat:error] [pid 3264093:tid 3264093] [client 202.88.254.53:59790] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:12.974563 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:35800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:12.974585 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:35800] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.227784 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:35842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.227815 2026] [core:error] [pid 3270669:tid 3270669] [client 85.204.70.104:35842] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.296755 2026] [core:error] [pid 3269947:tid 3269947] [client 85.204.70.104:35844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.296798 2026] [core:error] [pid 3269947:tid 3269947] [client 85.204.70.104:35844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.361970 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.362019 2026] [core:error] [pid 3271408:tid 3271408] [client 85.204.70.104:35860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.378594 2026] [cgi:error] [pid 3268111:tid 3268111] [client 20.9.4.9:64387] AH02812: stderr from /home/jgqawffu/public_html/wildduckdesigns.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:37:13.803458 2026] [security2:error] [pid 3268074:tid 3268074] [client 181.209.119.93:37664] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFeciSvcFQpU6QWpVtmgAAABQ"]
[Thu Jul 30 13:37:13.803524 2026] [security2:error] [pid 3268074:tid 3268074] [client 181.209.119.93:37664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFeciSvcFQpU6QWpVtmgAAABQ"]
[Thu Jul 30 13:37:13.803771 2026] [security2:error] [pid 3268074:tid 3268074] [client 181.209.119.93:37664] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFeciSvcFQpU6QWpVtmgAAABQ"]
[Thu Jul 30 13:37:13.956076 2026] [core:error] [pid 3266317:tid 3266317] [client 85.204.70.104:35958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:13.956100 2026] [core:error] [pid 3266317:tid 3266317] [client 85.204.70.104:35958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.024394 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.024420 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:35974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.121500 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.121531 2026] [core:error] [pid 3270013:tid 3270013] [client 85.204.70.104:35978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.186535 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.186562 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:35990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.422570 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:36018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.422595 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:36018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.897474 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:36062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.897510 2026] [core:error] [pid 3272417:tid 3272417] [client 85.204.70.104:36062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.965697 2026] [authz_core:error] [pid 3268111:tid 3268111] [client 20.9.4.9:64387] AH01630: client denied by server configuration: /home/jgqawffu/public_html/wildduckdesigns.co.uk/php.ini
[Thu Jul 30 13:37:14.990388 2026] [core:error] [pid 3266314:tid 3266314] [client 85.204.70.104:36066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:14.990427 2026] [core:error] [pid 3266314:tid 3266314] [client 85.204.70.104:36066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:15.139605 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:36074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:15.139631 2026] [core:error] [pid 3270014:tid 3270014] [client 85.204.70.104:36074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:15.375625 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:36082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:15.375650 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:36082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:15.549656 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:36114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:15.549679 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:36114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:15.810835 2026] [ssl:error] [pid 3268028:tid 3268028] (EAI 2)Name or service not known: [client 144.76.19.72:26842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:15.810857 2026] [ssl:error] [pid 3268028:tid 3268028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:15.866391 2026] [ssl:error] [pid 3270015:tid 3270015] (EAI 2)Name or service not known: [client 144.76.19.72:26854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:15.866414 2026] [ssl:error] [pid 3270015:tid 3270015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:18.191373 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:40864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.191396 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:40864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.327181 2026] [lsapi:warn] [pid 3270283:tid 3270283] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:18.484849 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:40916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.484868 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:40916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.742694 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:40960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.742716 2026] [core:error] [pid 3270948:tid 3270948] [client 85.204.70.104:40960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.886510 2026] [core:error] [pid 3255636:tid 3255636] [client 57.141.0.40:35746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.886533 2026] [core:error] [pid 3255636:tid 3255636] [client 57.141.0.40:35746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.938171 2026] [ssl:error] [pid 3248996:tid 3248996] (EAI 2)Name or service not known: [client 144.76.19.72:26870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:18.938198 2026] [ssl:error] [pid 3248996:tid 3248996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:18.991040 2026] [ssl:error] [pid 3270015:tid 3270015] (EAI 2)Name or service not known: [client 144.76.19.72:26876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:18.991076 2026] [ssl:error] [pid 3270015:tid 3270015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:18.994401 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:40966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:18.994421 2026] [core:error] [pid 3268028:tid 3268028] [client 85.204.70.104:40966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.210147 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:40990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.210175 2026] [core:error] [pid 3248996:tid 3248996] [client 85.204.70.104:40990] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.356811 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.356834 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41004] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.709220 2026] [core:error] [pid 3268116:tid 3268116] [client 85.204.70.104:41018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.709244 2026] [core:error] [pid 3268116:tid 3268116] [client 85.204.70.104:41018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.733639 2026] [lsapi:warn] [pid 3269893:tid 3269893] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:19.843284 2026] [core:error] [pid 3272997:tid 3272997] [client 85.204.70.104:41034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.843306 2026] [core:error] [pid 3272997:tid 3272997] [client 85.204.70.104:41034] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:19.976237 2026] [access_compat:error] [pid 3270948:tid 3270948] [client 106.222.248.251:14713] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:20.006587 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:41056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:20.006608 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:41056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:20.236204 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:20.236231 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:20.344359 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:41096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:20.344379 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:41096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:20.524295 2026] [security2:error] [pid 3272997:tid 3272997] [client 43.135.133.194:53750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kirstybashforth.com"] [uri "/"] [unique_id "amtFgGNSHkppt-kc1hgb3QAAADs"]
[Thu Jul 30 13:37:20.970864 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:20.970913 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41214] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.518284 2026] [core:error] [pid 3272997:tid 3272997] [client 85.204.70.104:41344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.518312 2026] [core:error] [pid 3272997:tid 3272997] [client 85.204.70.104:41344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.632081 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.632104 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.697626 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.697651 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.969195 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:41384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:21.969215 2026] [core:error] [pid 3266259:tid 3266259] [client 85.204.70.104:41384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.045180 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:47090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:22.045207 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:22.101168 2026] [ssl:error] [pid 3254581:tid 3254581] (EAI 2)Name or service not known: [client 144.76.19.72:47100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:22.101194 2026] [ssl:error] [pid 3254581:tid 3254581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:22.180749 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.180771 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41408] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.237239 2026] [core:error] [pid 3272997:tid 3272997] [client 57.141.0.60:60980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.237266 2026] [core:error] [pid 3272997:tid 3272997] [client 57.141.0.60:60980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.360606 2026] [core:error] [pid 3276647:tid 3276647] [client 85.204.70.104:41422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.360649 2026] [core:error] [pid 3276647:tid 3276647] [client 85.204.70.104:41422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.571248 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.571274 2026] [core:error] [pid 3255636:tid 3255636] [client 85.204.70.104:41448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.674859 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:41462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:22.674884 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:41462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.143498 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:41512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.143522 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:41512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.145343 2026] [access_compat:error] [pid 3254581:tid 3254581] [client 47.236.96.46:46498] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2009/05/star-trek-lens-flare.jpg
[Thu Jul 30 13:37:23.145433 2026] [access_compat:error] [pid 3254581:tid 3254581] [client 47.236.96.46:46498] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:37:23.376019 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:41566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.376043 2026] [core:error] [pid 3268027:tid 3268027] [client 85.204.70.104:41566] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.630530 2026] [access_compat:error] [pid 3270012:tid 3270012] [client 202.88.254.53:60311] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:23.663319 2026] [lsapi:warn] [pid 3263251:tid 3263251] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:23.711254 2026] [core:error] [pid 3276730:tid 3276730] [client 85.204.70.104:41602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.711298 2026] [core:error] [pid 3276730:tid 3276730] [client 85.204.70.104:41602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.885164 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:23.885189 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.134431 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.134453 2026] [core:error] [pid 3254581:tid 3254581] [client 85.204.70.104:41678] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.239891 2026] [core:error] [pid 3276729:tid 3276729] [client 85.204.70.104:41684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.239919 2026] [core:error] [pid 3276729:tid 3276729] [client 85.204.70.104:41684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.793040 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:41716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.793061 2026] [core:error] [pid 3263251:tid 3263251] [client 85.204.70.104:41716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.973411 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:24.973434 2026] [core:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:25.152233 2026] [ssl:error] [pid 3270949:tid 3270949] (70014)End of file found: [client 216.73.216.199:1880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:37:25.157622 2026] [ssl:error] [pid 3276729:tid 3276729] (EAI 2)Name or service not known: [client 144.76.19.72:47114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:25.157648 2026] [ssl:error] [pid 3276729:tid 3276729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:25.212622 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:47116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:25.212656 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:25.426517 2026] [core:error] [pid 3270283:tid 3270283] [client 85.204.70.104:41808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:25.426537 2026] [core:error] [pid 3270283:tid 3270283] [client 85.204.70.104:41808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:25.600781 2026] [core:error] [pid 3257999:tid 3257999] [client 85.204.70.104:41822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:25.600801 2026] [core:error] [pid 3257999:tid 3257999] [client 85.204.70.104:41822] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:25.859176 2026] [core:error] [pid 3276647:tid 3276647] [client 85.204.70.104:41840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:25.859202 2026] [core:error] [pid 3276647:tid 3276647] [client 85.204.70.104:41840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:37:26.452519 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.php8
[Thu Jul 30 13:37:26.452562 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.php7
[Thu Jul 30 13:37:26.452587 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.php5
[Thu Jul 30 13:37:26.452802 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.phtml
[Thu Jul 30 13:37:28.270734 2026] [ssl:error] [pid 3269947:tid 3269947] (EAI 2)Name or service not known: [client 144.76.19.72:47132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:28.270759 2026] [ssl:error] [pid 3269947:tid 3269947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:28.323755 2026] [ssl:error] [pid 3272097:tid 3272097] (EAI 2)Name or service not known: [client 144.76.19.72:47140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:28.323779 2026] [ssl:error] [pid 3272097:tid 3272097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:28.993121 2026] [lsapi:warn] [pid 3269947:tid 3269947] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:30.307053 2026] [lsapi:warn] [pid 3265452:tid 3265452] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:30.588971 2026] [access_compat:error] [pid 3268074:tid 3268074] [client 106.222.248.251:17957] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:31.387975 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:61110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:31.388001 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:31.440596 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:61116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:31.440625 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:34.355656 2026] [lsapi:warn] [pid 3265452:tid 3265452] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:34.499555 2026] [ssl:error] [pid 3272329:tid 3272329] (EAI 2)Name or service not known: [client 144.76.19.72:61126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:34.499586 2026] [ssl:error] [pid 3272329:tid 3272329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:34.555990 2026] [ssl:error] [pid 3275343:tid 3275343] (EAI 2)Name or service not known: [client 144.76.19.72:61142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:34.556026 2026] [ssl:error] [pid 3275343:tid 3275343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:35.020259 2026] [access_compat:error] [pid 3267536:tid 3267536] [client 202.88.254.53:60856] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:35.038799 2026] [access_compat:error] [pid 3276648:tid 3276648] [client 45.158.164.139:33224] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:37:36.106097 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/zhxxmk.php
[Thu Jul 30 13:37:37.611542 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:61158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:37.611567 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:37.669678 2026] [ssl:error] [pid 3277583:tid 3277583] (EAI 2)Name or service not known: [client 144.76.19.72:61174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:37.669709 2026] [ssl:error] [pid 3277583:tid 3277583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:38.048266 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/css/index.php8
[Thu Jul 30 13:37:38.048321 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/css/index.php7
[Thu Jul 30 13:37:38.048348 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/css/index.php5
[Thu Jul 30 13:37:38.048677 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/css/index.phtml
[Thu Jul 30 13:37:39.758581 2026] [lsapi:warn] [pid 3248996:tid 3248996] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:39.920046 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/ID3/index.php8
[Thu Jul 30 13:37:39.920106 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/ID3/index.php7
[Thu Jul 30 13:37:39.920132 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/ID3/index.php5
[Thu Jul 30 13:37:39.920344 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/ID3/index.phtml
[Thu Jul 30 13:37:41.057594 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:37722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:41.057619 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:41.130939 2026] [lsapi:warn] [pid 3268028:tid 3268028] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:41.263849 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:37736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:41.263874 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:41.555761 2026] [access_compat:error] [pid 3278197:tid 3278197] [client 106.222.248.251:16993] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:41.620058 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/IXR/index.php8
[Thu Jul 30 13:37:41.620116 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/IXR/index.php7
[Thu Jul 30 13:37:41.620142 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/IXR/index.php5
[Thu Jul 30 13:37:41.620361 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/IXR/index.phtml
[Thu Jul 30 13:37:42.999984 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php8
[Thu Jul 30 13:37:43.000030 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php7
[Thu Jul 30 13:37:43.000056 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php5
[Thu Jul 30 13:37:43.000298 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.phtml
[Thu Jul 30 13:37:44.322025 2026] [ssl:error] [pid 3278390:tid 3278390] (EAI 2)Name or service not known: [client 144.76.19.72:37742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:44.322084 2026] [ssl:error] [pid 3278390:tid 3278390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:44.377502 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:37750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:44.377535 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:44.492000 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/SimplePie/index.php8
[Thu Jul 30 13:37:44.492044 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/SimplePie/index.php7
[Thu Jul 30 13:37:44.492082 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/SimplePie/index.php5
[Thu Jul 30 13:37:44.492300 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/SimplePie/index.phtml
[Thu Jul 30 13:37:44.932110 2026] [lsapi:warn] [pid 3270014:tid 3270014] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:45.353438 2026] [security2:error] [pid 3269521:tid 3269521] [client 51.68.236.59:12133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "healthkinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amtFmSPuWYtlRPhVfG4d3wAAAAQ"]
[Thu Jul 30 13:37:45.893956 2026] [access_compat:error] [pid 3275343:tid 3275343] [client 202.88.254.53:61392] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:46.004299 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.php8
[Thu Jul 30 13:37:46.004343 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.php7
[Thu Jul 30 13:37:46.004368 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.php5
[Thu Jul 30 13:37:46.004589 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.phtml
[Thu Jul 30 13:37:46.139802 2026] [security2:error] [pid 3270012:tid 3270012] [client 43.153.19.83:34872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchlingfair.com"] [uri "/"] [unique_id "amtFmlgGREq-NRoZk6E33gAAABA"]
[Thu Jul 30 13:37:47.433487 2026] [ssl:error] [pid 3265452:tid 3265452] (EAI 2)Name or service not known: [client 144.76.19.72:37766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:47.433516 2026] [ssl:error] [pid 3265452:tid 3265452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:47.489454 2026] [ssl:error] [pid 3270012:tid 3270012] (EAI 2)Name or service not known: [client 144.76.19.72:37782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:47.489491 2026] [ssl:error] [pid 3270012:tid 3270012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:49.837567 2026] [security2:error] [pid 3269947:tid 3269947] [client 43.134.100.175:52562] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.com"] [uri "/"] [unique_id "amtFnaPhUqlEYCf4vYvylgAAAA8"]
[Thu Jul 30 13:37:50.542779 2026] [ssl:error] [pid 3269893:tid 3269893] (EAI 2)Name or service not known: [client 144.76.19.72:51784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:50.542809 2026] [ssl:error] [pid 3269893:tid 3269893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:50.596945 2026] [ssl:error] [pid 3270012:tid 3270012] (EAI 2)Name or service not known: [client 144.76.19.72:51796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:50.596975 2026] [ssl:error] [pid 3270012:tid 3270012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:50.633117 2026] [lsapi:warn] [pid 3278392:tid 3278392] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:50.820920 2026] [authz_core:error] [pid 3271408:tid 3271408] [client 66.249.66.33:40373] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:37:50.823843 2026] [authz_core:error] [pid 3271408:tid 3271408] [client 66.249.66.33:40373] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:37:51.454883 2026] [security2:error] [pid 3268027:tid 3268027] [client 43.134.100.175:57670] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtFn_tEZU8qMfK6BVYMJgAAAAc"], referer: http://www.saturnsports.com
[Thu Jul 30 13:37:51.503118 2026] [lsapi:warn] [pid 3276648:tid 3276648] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:51.897097 2026] [access_compat:error] [pid 3268114:tid 3268114] [client 106.222.248.251:4228] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:52.008646 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/mu-plugins/index.php8
[Thu Jul 30 13:37:52.008690 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/mu-plugins/index.php7
[Thu Jul 30 13:37:52.008717 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/mu-plugins/index.php5
[Thu Jul 30 13:37:52.008946 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/mu-plugins/index.phtml
[Thu Jul 30 13:37:53.306613 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/Diff/Renderer/index.php8
[Thu Jul 30 13:37:53.306663 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/Diff/Renderer/index.php7
[Thu Jul 30 13:37:53.306696 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/Diff/Renderer/index.php5
[Thu Jul 30 13:37:53.306963 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/Diff/Renderer/index.phtml
[Thu Jul 30 13:37:53.665654 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:51804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:53.665779 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:53.718913 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:51810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:53.718944 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:54.725798 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 18.191.207.242:39922] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:37:54.725864 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 18.191.207.242:39922] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:37:54.738880 2026] [lsapi:warn] [pid 3270949:tid 3270949] [client 18.191.207.242:57499] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:37:54.738950 2026] [lsapi:warn] [pid 3270949:tid 3270949] [client 18.191.207.242:57499] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:37:54.750091 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 18.191.207.242:29870] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 13:37:54.750135 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 18.191.207.242:29870] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 13:37:54.813041 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/certificates/index.php8
[Thu Jul 30 13:37:54.813098 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/certificates/index.php7
[Thu Jul 30 13:37:54.813124 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/certificates/index.php5
[Thu Jul 30 13:37:54.813339 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/certificates/index.phtml
[Thu Jul 30 13:37:55.068026 2026] [lsapi:warn] [pid 3270669:tid 3270669] [client 18.191.207.242:54446] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:37:55.068099 2026] [lsapi:warn] [pid 3270669:tid 3270669] [client 18.191.207.242:54446] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:37:55.259678 2026] [lsapi:warn] [pid 3270949:tid 3270949] [client 18.191.207.242:35413] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:37:55.259710 2026] [lsapi:warn] [pid 3270949:tid 3270949] [client 18.191.207.242:35413] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:37:55.494810 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 18.191.207.242:6216] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:37:55.494841 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 18.191.207.242:6216] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:37:55.501824 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 18.191.207.242:37876] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:37:55.501853 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 18.191.207.242:37876] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:37:55.642773 2026] [lsapi:warn] [pid 3269521:tid 3269521] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:37:56.416053 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/customize/index.php8
[Thu Jul 30 13:37:56.416116 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/customize/index.php7
[Thu Jul 30 13:37:56.416142 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/customize/index.php5
[Thu Jul 30 13:37:56.416358 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/customize/index.phtml
[Thu Jul 30 13:37:57.689089 2026] [ssl:error] [pid 3270949:tid 3270949] (EAI 2)Name or service not known: [client 144.76.19.72:51814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:57.689112 2026] [ssl:error] [pid 3270949:tid 3270949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:57.774632 2026] [access_compat:error] [pid 3265452:tid 3265452] [client 202.88.254.53:61928] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:37:57.813218 2026] [ssl:error] [pid 3266200:tid 3266200] (EAI 2)Name or service not known: [client 144.76.19.72:51820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:37:57.813242 2026] [ssl:error] [pid 3266200:tid 3266200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:37:58.007524 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/fonts/index.php8
[Thu Jul 30 13:37:58.007568 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/fonts/index.php7
[Thu Jul 30 13:37:58.007592 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/fonts/index.php5
[Thu Jul 30 13:37:58.007804 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/fonts/index.phtml
[Thu Jul 30 13:37:59.513983 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/images/index.php8
[Thu Jul 30 13:37:59.514045 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/images/index.php7
[Thu Jul 30 13:37:59.514099 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/images/index.php5
[Thu Jul 30 13:37:59.514442 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/images/index.phtml
[Thu Jul 30 13:38:00.242269 2026] [security2:error] [pid 3271408:tid 3271408] [client 185.191.171.9:24330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/deaths-portland,-oregon"] [unique_id "amtFqIJjgpM9WRcdFJn0bAAAADY"]
[Thu Jul 30 13:38:00.903937 2026] [ssl:error] [pid 3270948:tid 3270948] (EAI 2)Name or service not known: [client 144.76.19.72:34346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:00.903970 2026] [ssl:error] [pid 3270948:tid 3270948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:00.959614 2026] [ssl:error] [pid 3268028:tid 3268028] (EAI 2)Name or service not known: [client 144.76.19.72:34350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:00.959644 2026] [ssl:error] [pid 3268028:tid 3268028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:01.252783 2026] [lsapi:warn] [pid 3254581:tid 3254581] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:01.391047 2026] [security2:error] [pid 3278306:tid 3278306] [client 43.159.148.221:57368] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtFqdzlJwOKcQ-Gd52l1AAAACc"]
[Thu Jul 30 13:38:01.392838 2026] [authz_core:error] [pid 3278306:tid 3278306] [client 43.159.148.221:57368] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:38:01.394610 2026] [authz_core:error] [pid 3278306:tid 3278306] [client 43.159.148.221:57368] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:38:02.060663 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:02.510614 2026] [access_compat:error] [pid 3270948:tid 3270948] [client 106.222.248.251:2315] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:02.960582 2026] [access_compat:error] [pid 3269947:tid 3269947] [client 45.158.164.139:53890] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:38:03.988207 2026] [security2:error] [pid 3268116:tid 3268116] [client 8.216.46.87:37567] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFqylSZG5UxNj4jjjkXAAAAC4"]
[Thu Jul 30 13:38:03.988270 2026] [security2:error] [pid 3268116:tid 3268116] [client 8.216.46.87:37567] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFqylSZG5UxNj4jjjkXAAAAC4"]
[Thu Jul 30 13:38:03.988565 2026] [security2:error] [pid 3268116:tid 3268116] [client 8.216.46.87:37567] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFqylSZG5UxNj4jjjkXAAAAC4"]
[Thu Jul 30 13:38:04.016732 2026] [ssl:error] [pid 3278305:tid 3278305] (EAI 2)Name or service not known: [client 144.76.19.72:34360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:04.016776 2026] [ssl:error] [pid 3278305:tid 3278305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:04.075132 2026] [ssl:error] [pid 3277583:tid 3277583] (EAI 2)Name or service not known: [client 144.76.19.72:34362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:04.075156 2026] [ssl:error] [pid 3277583:tid 3277583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:04.622706 2026] [authz_core:error] [pid 3257999:tid 3257999] [client 52.238.199.152:9960] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 13:38:06.248631 2026] [lsapi:warn] [pid 3276728:tid 3276728] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:06.262842 2026] [access_compat:error] [pid 3270012:tid 3270012] [client 202.88.254.53:62471] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:07.131087 2026] [ssl:error] [pid 3270014:tid 3270014] (EAI 2)Name or service not known: [client 144.76.19.72:34374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:07.131117 2026] [ssl:error] [pid 3270014:tid 3270014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:07.186574 2026] [ssl:error] [pid 3269947:tid 3269947] (EAI 2)Name or service not known: [client 144.76.19.72:34388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:07.186602 2026] [ssl:error] [pid 3269947:tid 3269947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:07.901761 2026] [security2:error] [pid 3269947:tid 3269947] [client 176.45.165.135:53588] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFr6PhUqlEYCf4vYvy2AAAAA8"]
[Thu Jul 30 13:38:07.901820 2026] [security2:error] [pid 3269947:tid 3269947] [client 176.45.165.135:53588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFr6PhUqlEYCf4vYvy2AAAAA8"]
[Thu Jul 30 13:38:07.902088 2026] [security2:error] [pid 3269947:tid 3269947] [client 176.45.165.135:53588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFr6PhUqlEYCf4vYvy2AAAAA8"]
[Thu Jul 30 13:38:09.329226 2026] [authz_core:error] [pid 3270948:tid 3270948] [client 136.107.179.139:55488] AH01630: client denied by server configuration: /home/markmitc/recklesselectricity.com/error_log
[Thu Jul 30 13:38:10.244607 2026] [ssl:error] [pid 3272417:tid 3272417] (EAI 2)Name or service not known: [client 144.76.19.72:40462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:10.244646 2026] [ssl:error] [pid 3272417:tid 3272417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:10.302453 2026] [ssl:error] [pid 3278390:tid 3278390] (EAI 2)Name or service not known: [client 144.76.19.72:40466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:10.302491 2026] [ssl:error] [pid 3278390:tid 3278390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:12.040471 2026] [lsapi:warn] [pid 3270948:tid 3270948] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:12.042344 2026] [security2:error] [pid 3267536:tid 3267536] [client 189.138.41.244:53943] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFtLPJKHWigw-_Vj8GOQAAAAI"]
[Thu Jul 30 13:38:12.042388 2026] [security2:error] [pid 3267536:tid 3267536] [client 189.138.41.244:53943] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtFtLPJKHWigw-_Vj8GOQAAAAI"]
[Thu Jul 30 13:38:12.042659 2026] [security2:error] [pid 3267536:tid 3267536] [client 189.138.41.244:53943] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtFtLPJKHWigw-_Vj8GOQAAAAI"]
[Thu Jul 30 13:38:12.463352 2026] [ssl:error] [pid 3278197:tid 3278197] (70014)End of file found: [client 216.73.216.199:27201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:12.692110 2026] [lsapi:warn] [pid 3266200:tid 3266200] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:13.364825 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:40474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:13.364851 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:13.434730 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:40486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:13.434764 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:13.802133 2026] [lsapi:warn] [pid 3263005:tid 3263005] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:14.469565 2026] [access_compat:error] [pid 3281483:tid 3281483] [client 106.222.248.251:18792] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:15.846625 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 202.88.254.53:62999] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:16.511567 2026] [ssl:error] [pid 3278389:tid 3278389] (EAI 2)Name or service not known: [client 144.76.19.72:40492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:16.511599 2026] [ssl:error] [pid 3278389:tid 3278389] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:16.576804 2026] [ssl:error] [pid 3278305:tid 3278305] (EAI 2)Name or service not known: [client 144.76.19.72:40502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:16.576832 2026] [ssl:error] [pid 3278305:tid 3278305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:16.581560 2026] [security2:error] [pid 3270012:tid 3270012] [client 185.191.171.10:32022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9466.0/prev_next,prev.html"] [unique_id "amtFuFgGREq-NRoZk6E36AAAABA"]
[Thu Jul 30 13:38:16.879940 2026] [lsapi:warn] [pid 3278389:tid 3278389] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:17.836394 2026] [ssl:error] [pid 3272417:tid 3272417] (70014)End of file found: [client 216.73.216.199:17212] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:18.141511 2026] [ssl:error] [pid 3276648:tid 3276648] (70014)End of file found: [client 216.73.216.199:23017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:18.396603 2026] [core:error] [pid 3270012:tid 3270012] [client 20.104.22.47:56444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:38:18.396627 2026] [core:error] [pid 3270012:tid 3270012] [client 20.104.22.47:56444] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:38:18.635003 2026] [ssl:error] [pid 3254540:tid 3254540] (70014)End of file found: [client 216.73.216.199:37414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:19.636532 2026] [ssl:error] [pid 3257885:tid 3257885] (EAI 2)Name or service not known: [client 144.76.19.72:21922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:19.636557 2026] [ssl:error] [pid 3257885:tid 3257885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:19.689299 2026] [ssl:error] [pid 3278306:tid 3278306] (EAI 2)Name or service not known: [client 144.76.19.72:21934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:19.689332 2026] [ssl:error] [pid 3278306:tid 3278306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:20.644009 2026] [lsapi:warn] [pid 3258000:tid 3258000] [client 54.82.222.228:55462] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 13:38:20.644051 2026] [lsapi:warn] [pid 3258000:tid 3258000] [client 54.82.222.228:55462] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 13:38:20.692930 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 54.82.222.228:11372] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:20.692961 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 54.82.222.228:11372] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:20.777630 2026] [lsapi:warn] [pid 3270369:tid 3270369] [client 54.82.222.228:45601] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:20.777678 2026] [lsapi:warn] [pid 3270369:tid 3270369] [client 54.82.222.228:45601] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:20.830581 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 54.82.222.228:11234] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:20.830636 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 54.82.222.228:11234] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:20.954254 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 54.82.222.228:49479] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:20.954280 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 54.82.222.228:49479] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk/
[Thu Jul 30 13:38:21.161617 2026] [lsapi:warn] [pid 3270012:tid 3270012] [client 54.82.222.228:34646] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:38:21.161664 2026] [lsapi:warn] [pid 3270012:tid 3270012] [client 54.82.222.228:34646] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:38:21.453589 2026] [lsapi:warn] [pid 3270369:tid 3270369] [client 54.82.222.228:62479] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:38:21.453619 2026] [lsapi:warn] [pid 3270369:tid 3270369] [client 54.82.222.228:62479] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:38:21.468229 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 54.82.222.228:52535] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:38:21.468257 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 54.82.222.228:52535] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:38:21.593265 2026] [lsapi:warn] [pid 3282571:tid 3282571] [client 54.82.222.228:23197] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:38:21.593313 2026] [lsapi:warn] [pid 3282571:tid 3282571] [client 54.82.222.228:23197] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:38:22.190980 2026] [access_compat:error] [pid 3268114:tid 3268114] [client 34.205.37.69:45098] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2012/07/sherlock-holmes-game-of-shadows.jpg
[Thu Jul 30 13:38:22.191111 2026] [access_compat:error] [pid 3268114:tid 3268114] [client 34.205.37.69:45098] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:38:23.320782 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:21948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:23.320807 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:23.455239 2026] [lsapi:warn] [pid 3268114:tid 3268114] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:23.474816 2026] [authz_core:error] [pid 3257999:tid 3257999] [client 52.238.199.152:9960] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-admin/includes/error_log
[Thu Jul 30 13:38:23.533110 2026] [lsapi:warn] [pid 3270012:tid 3270012] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:23.700087 2026] [ssl:error] [pid 3278391:tid 3278391] (EAI 2)Name or service not known: [client 144.76.19.72:21958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:23.700122 2026] [ssl:error] [pid 3278391:tid 3278391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:24.401807 2026] [authz_core:error] [pid 3282782:tid 3282782] [client 66.249.66.34:56528] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:38:24.404611 2026] [authz_core:error] [pid 3282782:tid 3282782] [client 66.249.66.34:56528] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:38:24.427830 2026] [lsapi:warn] [pid 3282780:tid 3282780] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:24.898604 2026] [access_compat:error] [pid 3278389:tid 3278389] [client 202.88.254.53:63525] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:26.280771 2026] [ssl:error] [pid 3267536:tid 3267536] (70014)End of file found: [client 216.73.216.199:21484] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:26.769396 2026] [authz_core:error] [pid 3257999:tid 3257999] [client 52.238.199.152:9960] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/error_log
[Thu Jul 30 13:38:26.774625 2026] [ssl:error] [pid 3283107:tid 3283107] (EAI 2)Name or service not known: [client 144.76.19.72:21972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:26.774652 2026] [ssl:error] [pid 3283107:tid 3283107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:26.832473 2026] [ssl:error] [pid 3283107:tid 3283107] (EAI 2)Name or service not known: [client 144.76.19.72:21982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:26.832509 2026] [ssl:error] [pid 3283107:tid 3283107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:27.184119 2026] [core:error] [pid 3282571:tid 3282571] (13)Permission denied: [client 216.73.216.199:52244] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:9/subsystem/ttyS1/iomem_reg_shift
[Thu Jul 30 13:38:27.419598 2026] [lsapi:warn] [pid 3265452:tid 3265452] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:28.560693 2026] [core:error] [pid 3282780:tid 3282780] [client 20.104.22.47:11951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:38:28.560729 2026] [core:error] [pid 3282780:tid 3282780] [client 20.104.22.47:11951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:38:28.698048 2026] [ssl:error] [pid 3266311:tid 3266311] (70014)End of file found: [client 216.73.216.199:53646] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:29.884789 2026] [ssl:error] [pid 3283339:tid 3283339] (EAI 2)Name or service not known: [client 144.76.19.72:20086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:29.884822 2026] [ssl:error] [pid 3283339:tid 3283339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:29.940108 2026] [ssl:error] [pid 3283337:tid 3283337] (EAI 2)Name or service not known: [client 144.76.19.72:20098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:29.940136 2026] [ssl:error] [pid 3283337:tid 3283337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:31.388226 2026] [security2:error] [pid 3270014:tid 3270014] [client 114.119.132.171:54937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~104,102/request_format~html"] [unique_id "amtFx5sy3miOHmmTCR0H-wAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/cat_ids~104,102,30/request_format~html
[Thu Jul 30 13:38:32.135191 2026] [security2:error] [pid 3257885:tid 3257885] [client 185.191.171.12:46752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,967.0.html"] [unique_id "amtFyOwihN9HoawGwGIN_gAAAAE"]
[Thu Jul 30 13:38:32.397459 2026] [core:error] [pid 3270757:tid 3270757] (13)Permission denied: [client 216.73.216.199:57991] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack_expect/objs_per_slab
[Thu Jul 30 13:38:32.604296 2026] [core:error] [pid 3278389:tid 3278389] (13)Permission denied: [client 216.73.216.199:52002] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/simplyfacilitation.com.db
[Thu Jul 30 13:38:32.698660 2026] [security2:error] [pid 3283461:tid 3283461] [client 114.119.132.171:54945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~104,102/request_format~html"] [unique_id "amtFyO-z8t54Z17EB9c5hQAAAEY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/cat_ids~104,102,30/request_format~html
[Thu Jul 30 13:38:33.037471 2026] [ssl:error] [pid 3271408:tid 3271408] (EAI 2)Name or service not known: [client 144.76.19.72:20110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:33.037524 2026] [ssl:error] [pid 3271408:tid 3271408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:33.092715 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:20114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:33.092778 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:33.207530 2026] [ssl:error] [pid 3278389:tid 3278389] (70014)End of file found: [client 216.73.216.199:52002] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:33.668552 2026] [lsapi:warn] [pid 3282571:tid 3282571] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:33.679036 2026] [authz_core:error] [pid 3257999:tid 3257999] [client 52.238.199.152:9960] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 13:38:33.778938 2026] [authz_core:error] [pid 3272417:tid 3272417] [client 66.249.66.33:43125] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:38:33.781637 2026] [authz_core:error] [pid 3272417:tid 3272417] [client 66.249.66.33:43125] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:38:33.830707 2026] [lsapi:warn] [pid 3258000:tid 3258000] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:34.050516 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 202.88.254.53:64040] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:34.071020 2026] [access_compat:error] [pid 3283464:tid 3283464] [client 106.222.248.251:12699] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:34.717146 2026] [core:error] [pid 3270757:tid 3270757] (13)Permission denied: [client 216.73.216.199:57991] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/magic-cookie.co.uk.db
[Thu Jul 30 13:38:35.017864 2026] [core:error] [pid 3270757:tid 3270757] (13)Permission denied: [client 216.73.216.199:57991] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory65/subsystem/uevent
[Thu Jul 30 13:38:35.057858 2026] [lsapi:warn] [pid 3270948:tid 3270948] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:35.233509 2026] [access_compat:error] [pid 3270669:tid 3270669] [client 45.158.164.139:35778] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:38:36.151364 2026] [ssl:error] [pid 3279872:tid 3279872] (EAI 2)Name or service not known: [client 144.76.19.72:20128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:36.151395 2026] [ssl:error] [pid 3279872:tid 3279872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:36.209532 2026] [ssl:error] [pid 3258000:tid 3258000] (EAI 2)Name or service not known: [client 144.76.19.72:20138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:36.209565 2026] [ssl:error] [pid 3258000:tid 3258000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:38.020772 2026] [lsapi:warn] [pid 3270948:tid 3270948] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:38.028349 2026] [ssl:error] [pid 3270757:tid 3270757] (70014)End of file found: [client 216.73.216.199:57991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:38.261848 2026] [security2:error] [pid 3282780:tid 3282780] [client 206.81.24.74:44868] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dawnrobinson.co.uk"] [uri "/.env"] [unique_id "amtFzqbYfcI7z5d6xOeF7wAAACU"]
[Thu Jul 30 13:38:38.262029 2026] [security2:error] [pid 3282780:tid 3282780] [client 206.81.24.74:44868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/.env"] [unique_id "amtFzqbYfcI7z5d6xOeF7wAAACU"]
[Thu Jul 30 13:38:38.325259 2026] [ssl:error] [pid 3281483:tid 3281483] (70014)End of file found: [client 216.73.216.199:4614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:38.631595 2026] [security2:error] [pid 3282780:tid 3282780] [client 206.81.24.74:44868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtFzqbYfcI7z5d6xOeF7wAAACU"]
[Thu Jul 30 13:38:39.262059 2026] [ssl:error] [pid 3272329:tid 3272329] (EAI 2)Name or service not known: [client 144.76.19.72:20142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:39.262099 2026] [ssl:error] [pid 3272329:tid 3272329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:39.316876 2026] [ssl:error] [pid 3282784:tid 3282784] (EAI 2)Name or service not known: [client 144.76.19.72:20146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:39.316910 2026] [ssl:error] [pid 3282784:tid 3282784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:39.936256 2026] [security2:error] [pid 3283339:tid 3283339] [client 114.119.147.196:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/robots.txt"] [unique_id "amtFz_Q0jhM67rG8eSXsxwAAAEU"], referer: http://papier.com.mt/robots.txt
[Thu Jul 30 13:38:42.374000 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:49870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:42.374034 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:42.432679 2026] [ssl:error] [pid 3282079:tid 3282079] (EAI 2)Name or service not known: [client 144.76.19.72:49874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:42.432727 2026] [ssl:error] [pid 3282079:tid 3282079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:42.541385 2026] [core:error] [pid 3282687:tid 3282687] (13)Permission denied: [client 216.73.216.199:60941] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty11/subsystem/ttyS2/line
[Thu Jul 30 13:38:42.734204 2026] [security2:error] [pid 3283464:tid 3283464] [client 206.81.24.74:44872] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dawnrobinson.co.uk"] [uri "/.git/config"] [unique_id "amtF0u1J0tEhLRL5q7GAvAAAAEk"]
[Thu Jul 30 13:38:42.734401 2026] [security2:error] [pid 3283464:tid 3283464] [client 206.81.24.74:44872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/.git/config"] [unique_id "amtF0u1J0tEhLRL5q7GAvAAAAEk"]
[Thu Jul 30 13:38:43.095054 2026] [security2:error] [pid 3283464:tid 3283464] [client 206.81.24.74:44872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtF0u1J0tEhLRL5q7GAvAAAAEk"]
[Thu Jul 30 13:38:43.145257 2026] [core:error] [pid 3282687:tid 3282687] (13)Permission denied: [client 216.73.216.199:60941] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty27/subsystem/ttyS1/closing_wait
[Thu Jul 30 13:38:43.326878 2026] [access_compat:error] [pid 3265452:tid 3265452] [client 202.88.254.53:64579] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:43.357820 2026] [security2:error] [pid 3279872:tid 3279872] [client 43.130.150.80:37568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mgarrmushrooms.com"] [uri "/"] [unique_id "amtF0wCS7fFqUoLGOx-FJwAAABM"]
[Thu Jul 30 13:38:44.307116 2026] [lsapi:warn] [pid 3276648:tid 3276648] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:44.430589 2026] [lsapi:warn] [pid 3279777:tid 3279777] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:45.491471 2026] [ssl:error] [pid 3271408:tid 3271408] (EAI 2)Name or service not known: [client 144.76.19.72:49882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:45.491516 2026] [ssl:error] [pid 3271408:tid 3271408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:45.542865 2026] [ssl:error] [pid 3279872:tid 3279872] (EAI 2)Name or service not known: [client 144.76.19.72:49898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:45.542889 2026] [ssl:error] [pid 3279872:tid 3279872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:45.669282 2026] [authz_core:error] [pid 3283222:tid 3283222] [client 20.100.203.84:55019] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 13:38:45.701113 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:46.727627 2026] [access_compat:error] [pid 3277583:tid 3277583] [client 106.222.248.251:29504] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:47.179430 2026] [ssl:error] [pid 3268027:tid 3268027] (70014)End of file found: [client 216.73.216.199:58318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:47.470572 2026] [ssl:error] [pid 3283222:tid 3283222] (70014)End of file found: [client 216.73.216.199:62261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:48.605176 2026] [ssl:error] [pid 3278391:tid 3278391] (EAI 2)Name or service not known: [client 144.76.19.72:49910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:48.605206 2026] [ssl:error] [pid 3278391:tid 3278391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:48.658150 2026] [ssl:error] [pid 3283468:tid 3283468] (EAI 2)Name or service not known: [client 144.76.19.72:49922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:48.658181 2026] [ssl:error] [pid 3283468:tid 3283468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:48.696056 2026] [lsapi:warn] [pid 3265452:tid 3265452] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:49.673765 2026] [ssl:error] [pid 3266311:tid 3266311] (70014)End of file found: [client 216.73.216.199:42116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:51.712115 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:22424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:51.712141 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:51.767695 2026] [ssl:error] [pid 3282781:tid 3282781] (EAI 2)Name or service not known: [client 144.76.19.72:22426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:51.767726 2026] [ssl:error] [pid 3282781:tid 3282781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:52.540842 2026] [access_compat:error] [pid 3282687:tid 3282687] [client 202.88.254.53:65094] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:53.020567 2026] [security2:error] [pid 3268116:tid 3268116] [client 185.191.171.3:59752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10804.0.html"] [unique_id "amtF3SlSZG5UxNj4jjjkowAAAC4"]
[Thu Jul 30 13:38:53.239251 2026] [core:error] [pid 3270948:tid 3270948] [client 20.104.22.47:56424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:38:53.239276 2026] [core:error] [pid 3270948:tid 3270948] [client 20.104.22.47:56424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:38:53.257738 2026] [security2:error] [pid 3268027:tid 3268027] [client 85.208.96.211:26340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "innerspacer.co.uk"] [uri "/robots.txt"] [unique_id "amtF3ftEZU8qMfK6BVYMVAAAAAc"]
[Thu Jul 30 13:38:53.287787 2026] [ssl:error] [pid 3270949:tid 3270949] (70014)End of file found: [client 216.73.216.199:37338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:53.559399 2026] [security2:error] [pid 3283222:tid 3283222] [client 185.191.171.18:63868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "innerspacer.co.uk"] [uri "/default.htm"] [unique_id "amtF3XeGgW3rIENKGu03wgAAAA8"]
[Thu Jul 30 13:38:54.190759 2026] [ssl:error] [pid 3263005:tid 3263005] (70014)End of file found: [client 216.73.216.199:49474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:54.821300 2026] [ssl:error] [pid 3283466:tid 3283466] (EAI 2)Name or service not known: [client 144.76.19.72:22434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:54.821334 2026] [ssl:error] [pid 3283466:tid 3283466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:54.877988 2026] [ssl:error] [pid 3278305:tid 3278305] (EAI 2)Name or service not known: [client 144.76.19.72:22442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:54.878022 2026] [ssl:error] [pid 3278305:tid 3278305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:54.996508 2026] [ssl:error] [pid 3270669:tid 3270669] (70014)End of file found: [client 216.73.216.199:36882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:38:55.003432 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:55.025804 2026] [lsapi:warn] [pid 3278389:tid 3278389] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:55.177217 2026] [security2:error] [pid 3258907:tid 3258907] [client 206.81.24.74:41256] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dawnrobinson.co.uk"] [uri "/trace.axd"] [unique_id "amtF3wuhTzyElPwrg7ZytwAAABE"]
[Thu Jul 30 13:38:55.177490 2026] [security2:error] [pid 3258907:tid 3258907] [client 206.81.24.74:41256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/trace.axd"] [unique_id "amtF3wuhTzyElPwrg7ZytwAAABE"]
[Thu Jul 30 13:38:55.591820 2026] [security2:error] [pid 3258907:tid 3258907] [client 206.81.24.74:41256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtF3wuhTzyElPwrg7ZytwAAABE"]
[Thu Jul 30 13:38:55.723306 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/index.php8
[Thu Jul 30 13:38:55.723357 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/index.php7
[Thu Jul 30 13:38:55.723383 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/index.php5
[Thu Jul 30 13:38:55.723615 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/index.phtml
[Thu Jul 30 13:38:56.169856 2026] [access_compat:error] [pid 3282784:tid 3282784] [client 106.222.248.251:21944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:38:56.364494 2026] [lsapi:warn] [pid 3282780:tid 3282780] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:38:57.274244 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/themes/twentytwenty/index.php8
[Thu Jul 30 13:38:57.274293 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/themes/twentytwenty/index.php7
[Thu Jul 30 13:38:57.274334 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/themes/twentytwenty/index.php5
[Thu Jul 30 13:38:57.274603 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/themes/twentytwenty/index.phtml
[Thu Jul 30 13:38:58.224075 2026] [authz_core:error] [pid 3282687:tid 3282687] [client 52.238.199.152:39787] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/IXR/error_log
[Thu Jul 30 13:38:58.302380 2026] [ssl:error] [pid 3257999:tid 3257999] (EAI 2)Name or service not known: [client 144.76.19.72:22458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:58.302400 2026] [ssl:error] [pid 3257999:tid 3257999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:58.383008 2026] [ssl:error] [pid 3270949:tid 3270949] (EAI 2)Name or service not known: [client 144.76.19.72:22460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:38:58.383035 2026] [ssl:error] [pid 3270949:tid 3270949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:38:59.541963 2026] [lsapi:warn] [pid 3282781:tid 3282781] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:00.109426 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/maint/index.php8
[Thu Jul 30 13:39:00.109470 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/maint/index.php7
[Thu Jul 30 13:39:00.109507 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/maint/index.php5
[Thu Jul 30 13:39:00.109730 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/maint/index.phtml
[Thu Jul 30 13:39:00.214770 2026] [ssl:error] [pid 3283107:tid 3283107] (70014)End of file found: [client 216.73.216.199:9944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:00.723968 2026] [ssl:error] [pid 3281847:tid 3281847] (70014)End of file found: [client 216.73.216.199:21482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:01.067872 2026] [core:error] [pid 3268027:tid 3268027] [client 66.249.66.200:39904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:39:01.067897 2026] [core:error] [pid 3268027:tid 3268027] [client 66.249.66.200:39904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:39:01.214609 2026] [security2:error] [pid 3286099:tid 3286099] [client 185.191.171.15:32776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/yolanda-coulthard-michael-cole"] [unique_id "amtF5TOF18-S6SPCpOplGAAAAAQ"]
[Thu Jul 30 13:39:01.472418 2026] [ssl:error] [pid 3286185:tid 3286185] (EAI 2)Name or service not known: [client 144.76.19.72:31472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:01.472481 2026] [ssl:error] [pid 3286185:tid 3286185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:01.531439 2026] [ssl:error] [pid 3283469:tid 3283469] (EAI 2)Name or service not known: [client 144.76.19.72:31484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:01.531485 2026] [ssl:error] [pid 3283469:tid 3283469] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:01.678642 2026] [access_compat:error] [pid 3286184:tid 3286184] [client 202.88.254.53:49231] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:01.721633 2026] [ssl:error] [pid 3277583:tid 3277583] (70014)End of file found: [client 216.73.216.199:28329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:03.218732 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/assets/index.php8
[Thu Jul 30 13:39:03.218777 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/assets/index.php7
[Thu Jul 30 13:39:03.218802 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/assets/index.php5
[Thu Jul 30 13:39:03.219016 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/assets/index.phtml
[Thu Jul 30 13:39:04.586771 2026] [ssl:error] [pid 3283468:tid 3283468] (EAI 2)Name or service not known: [client 144.76.19.72:31486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:04.586800 2026] [ssl:error] [pid 3283468:tid 3283468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:04.640607 2026] [ssl:error] [pid 3278197:tid 3278197] (EAI 2)Name or service not known: [client 144.76.19.72:31500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:04.640644 2026] [ssl:error] [pid 3278197:tid 3278197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:04.800668 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-patterns/index.php8
[Thu Jul 30 13:39:04.800718 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-patterns/index.php7
[Thu Jul 30 13:39:04.800743 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-patterns/index.php5
[Thu Jul 30 13:39:04.800959 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-patterns/index.phtml
[Thu Jul 30 13:39:05.582192 2026] [lsapi:warn] [pid 3255636:tid 3255636] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:05.835263 2026] [lsapi:warn] [pid 3286183:tid 3286183] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:06.293107 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-supports/index.php8
[Thu Jul 30 13:39:06.293154 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-supports/index.php7
[Thu Jul 30 13:39:06.293180 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-supports/index.php5
[Thu Jul 30 13:39:06.293395 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/block-supports/index.phtml
[Thu Jul 30 13:39:06.971465 2026] [lsapi:warn] [pid 3282780:tid 3282780] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:07.694880 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/html-api/index.php8
[Thu Jul 30 13:39:07.694925 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/html-api/index.php7
[Thu Jul 30 13:39:07.694950 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/html-api/index.php5
[Thu Jul 30 13:39:07.695157 2026] [ssl:error] [pid 3286183:tid 3286183] (EAI 2)Name or service not known: [client 144.76.19.72:31514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:07.695181 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/html-api/index.phtml
[Thu Jul 30 13:39:07.695189 2026] [ssl:error] [pid 3286183:tid 3286183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:07.746971 2026] [ssl:error] [pid 3270669:tid 3270669] (EAI 2)Name or service not known: [client 144.76.19.72:31528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:07.747001 2026] [ssl:error] [pid 3270669:tid 3270669] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:07.754624 2026] [core:error] [pid 3278391:tid 3278391] (13)Permission denied: [client 216.73.216.199:60807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/validate
[Thu Jul 30 13:39:08.025923 2026] [access_compat:error] [pid 3277583:tid 3277583] [client 106.222.248.251:5167] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:08.540771 2026] [access_compat:error] [pid 3283222:tid 3283222] [client 45.158.164.139:34714] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:39:08.665441 2026] [ssl:error] [pid 3278197:tid 3278197] (70014)End of file found: [client 216.73.216.199:28600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:09.108053 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/js/index.php8
[Thu Jul 30 13:39:09.108136 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/js/index.php7
[Thu Jul 30 13:39:09.108161 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/js/index.php5
[Thu Jul 30 13:39:09.108370 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/js/index.phtml
[Thu Jul 30 13:39:09.568413 2026] [ssl:error] [pid 3278391:tid 3278391] (70014)End of file found: [client 216.73.216.199:60807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:09.849704 2026] [lsapi:warn] [pid 3278306:tid 3278306] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:10.055315 2026] [ssl:error] [pid 3270949:tid 3270949] (70014)End of file found: [client 216.73.216.199:31462] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:10.617896 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/php-compat/index.php8
[Thu Jul 30 13:39:10.617940 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/php-compat/index.php7
[Thu Jul 30 13:39:10.617965 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/php-compat/index.php5
[Thu Jul 30 13:39:10.618194 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/php-compat/index.phtml
[Thu Jul 30 13:39:10.670365 2026] [access_compat:error] [pid 3278305:tid 3278305] [client 202.88.254.53:49763] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:10.801924 2026] [ssl:error] [pid 3276728:tid 3276728] (EAI 2)Name or service not known: [client 144.76.19.72:35822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:10.801957 2026] [ssl:error] [pid 3276728:tid 3276728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:10.855559 2026] [ssl:error] [pid 3276578:tid 3276578] (EAI 2)Name or service not known: [client 144.76.19.72:35832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:10.855592 2026] [ssl:error] [pid 3276578:tid 3276578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:12.175966 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/PHPMailer/index.php8
[Thu Jul 30 13:39:12.176015 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/PHPMailer/index.php7
[Thu Jul 30 13:39:12.176040 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/PHPMailer/index.php5
[Thu Jul 30 13:39:12.176269 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/PHPMailer/index.phtml
[Thu Jul 30 13:39:12.251552 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 139.180.163.76:46722] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:39:12.251588 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 139.180.163.76:46722] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:39:13.801787 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/pomo/index.php8
[Thu Jul 30 13:39:13.801832 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/pomo/index.php7
[Thu Jul 30 13:39:13.801857 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/pomo/index.php5
[Thu Jul 30 13:39:13.802084 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/pomo/index.phtml
[Thu Jul 30 13:39:13.907956 2026] [ssl:error] [pid 3283339:tid 3283339] (EAI 2)Name or service not known: [client 144.76.19.72:35834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:13.907982 2026] [ssl:error] [pid 3283339:tid 3283339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:13.960533 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:35842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:13.960559 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:13.979265 2026] [ssl:error] [pid 3272997:tid 3272997] (70014)End of file found: [client 216.73.216.199:27985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:14.184411 2026] [authz_core:error] [pid 3263005:tid 3263005] [client 20.193.250.173:55191] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 13:39:14.887564 2026] [ssl:error] [pid 3278197:tid 3278197] (70014)End of file found: [client 216.73.216.199:57203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:16.186663 2026] [lsapi:warn] [pid 3258907:tid 3258907] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:16.652327 2026] [lsapi:warn] [pid 3278391:tid 3278391] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:16.798051 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/rest-api/index.php8
[Thu Jul 30 13:39:16.798115 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/rest-api/index.php7
[Thu Jul 30 13:39:16.798144 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/rest-api/index.php5
[Thu Jul 30 13:39:16.798394 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/rest-api/index.phtml
[Thu Jul 30 13:39:17.016777 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:35856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:17.016814 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:17.075510 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:35860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:17.075541 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:17.605704 2026] [ssl:error] [pid 3267536:tid 3267536] (70014)End of file found: [client 216.73.216.199:64734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:17.671220 2026] [lsapi:warn] [pid 3281483:tid 3281483] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:17.964385 2026] [security2:error] [pid 3270948:tid 3270948] [client 20.171.55.167:9966] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "nigelmassey.jasperandtroy.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtF9TZbORmKashVD3oehgAAADM"]
[Thu Jul 30 13:39:17.964576 2026] [security2:error] [pid 3270948:tid 3270948] [client 20.171.55.167:9966] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nigelmassey.jasperandtroy.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtF9TZbORmKashVD3oehgAAADM"]
[Thu Jul 30 13:39:17.964786 2026] [security2:error] [pid 3270948:tid 3270948] [client 20.171.55.167:9966] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "nigelmassey.jasperandtroy.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtF9TZbORmKashVD3oehgAAADM"]
[Thu Jul 30 13:39:18.157349 2026] [authz_core:error] [pid 3286183:tid 3286183] [client 20.193.250.173:61541] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 13:39:18.300650 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sitemaps/index.php8
[Thu Jul 30 13:39:18.300710 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sitemaps/index.php7
[Thu Jul 30 13:39:18.300736 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sitemaps/index.php5
[Thu Jul 30 13:39:18.300951 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sitemaps/index.phtml
[Thu Jul 30 13:39:18.519572 2026] [access_compat:error] [pid 3272329:tid 3272329] [client 106.222.248.251:13697] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:19.328522 2026] [ssl:error] [pid 3278306:tid 3278306] (70014)End of file found: [client 216.73.216.199:12411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:19.779535 2026] [access_compat:error] [pid 3283466:tid 3283466] [client 202.88.254.53:50297] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:19.816144 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sodium_compat/index.php8
[Thu Jul 30 13:39:19.816188 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sodium_compat/index.php7
[Thu Jul 30 13:39:19.816214 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sodium_compat/index.php5
[Thu Jul 30 13:39:19.816429 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/sodium_compat/index.phtml
[Thu Jul 30 13:39:20.128667 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:55628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:20.128698 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:20.185859 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:55638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:20.185883 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:20.560856 2026] [lsapi:warn] [pid 3276729:tid 3276729] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:20.932131 2026] [ssl:error] [pid 3286183:tid 3286183] (70014)End of file found: [client 216.73.216.199:46571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:21.267042 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/style-engine/index.php8
[Thu Jul 30 13:39:21.267104 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/style-engine/index.php7
[Thu Jul 30 13:39:21.267130 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/style-engine/index.php5
[Thu Jul 30 13:39:21.267359 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/style-engine/index.phtml
[Thu Jul 30 13:39:21.301667 2026] [security2:error] [pid 3258907:tid 3258907] [client 189.217.92.216:45124] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtF-QuhTzyElPwrg7Zy1QAAABE"]
[Thu Jul 30 13:39:21.301716 2026] [security2:error] [pid 3258907:tid 3258907] [client 189.217.92.216:45124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtF-QuhTzyElPwrg7Zy1QAAABE"]
[Thu Jul 30 13:39:21.301956 2026] [security2:error] [pid 3258907:tid 3258907] [client 189.217.92.216:45124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtF-QuhTzyElPwrg7Zy1QAAABE"]
[Thu Jul 30 13:39:21.686470 2026] [security2:error] [pid 3281847:tid 3281847] [client 43.161.234.148:41214] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewvenables.com"] [uri "/"] [unique_id "amtF-W4kz_Jk7JQGkf0dgAAAABI"]
[Thu Jul 30 13:39:22.396326 2026] [authz_core:error] [pid 3258907:tid 3258907] [client 20.193.250.173:50463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 13:39:22.649787 2026] [security2:error] [pid 3283468:tid 3283468] [client 27.2.209.151:45244] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtF-v4xSrjjCcaLxwasgQAAAEw"]
[Thu Jul 30 13:39:22.649844 2026] [security2:error] [pid 3283468:tid 3283468] [client 27.2.209.151:45244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtF-v4xSrjjCcaLxwasgQAAAEw"]
[Thu Jul 30 13:39:22.650090 2026] [security2:error] [pid 3283468:tid 3283468] [client 27.2.209.151:45244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtF-v4xSrjjCcaLxwasgQAAAEw"]
[Thu Jul 30 13:39:23.117798 2026] [security2:error] [pid 3288091:tid 3288091] [client 43.161.234.148:43714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewvenables.com"] [uri "/"] [unique_id "amtF-58PPAmoynewd_UGWQAAAAM"], referer: http://andrewvenables.com
[Thu Jul 30 13:39:23.243549 2026] [ssl:error] [pid 3270757:tid 3270757] (EAI 2)Name or service not known: [client 144.76.19.72:55648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:23.243575 2026] [ssl:error] [pid 3270757:tid 3270757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:23.301236 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:55654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:23.301262 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:23.692742 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/theme-compat/index.php8
[Thu Jul 30 13:39:23.692788 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/theme-compat/index.php7
[Thu Jul 30 13:39:23.692813 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/theme-compat/index.php5
[Thu Jul 30 13:39:23.693027 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/theme-compat/index.phtml
[Thu Jul 30 13:39:24.214253 2026] [security2:error] [pid 3283468:tid 3283468] [client 185.224.103.150:64656] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtF_P4xSrjjCcaLxwasggAAAEw"]
[Thu Jul 30 13:39:24.214307 2026] [security2:error] [pid 3283468:tid 3283468] [client 185.224.103.150:64656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtF_P4xSrjjCcaLxwasggAAAEw"]
[Thu Jul 30 13:39:24.214549 2026] [security2:error] [pid 3283468:tid 3283468] [client 185.224.103.150:64656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtF_P4xSrjjCcaLxwasggAAAEw"]
[Thu Jul 30 13:39:24.255795 2026] [ssl:error] [pid 3285998:tid 3285998] (70014)End of file found: [client 216.73.216.199:43689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:25.170925 2026] [ssl:error] [pid 3270757:tid 3270757] (70014)End of file found: [client 216.73.216.199:53899] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:25.324315 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.php8
[Thu Jul 30 13:39:25.324369 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.php7
[Thu Jul 30 13:39:25.324395 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.php5
[Thu Jul 30 13:39:25.324624 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/widgets/index.phtml
[Thu Jul 30 13:39:26.355559 2026] [ssl:error] [pid 3281483:tid 3281483] (EAI 2)Name or service not known: [client 144.76.19.72:55658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:26.355598 2026] [ssl:error] [pid 3281483:tid 3281483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:26.411678 2026] [ssl:error] [pid 3288393:tid 3288393] (EAI 2)Name or service not known: [client 144.76.19.72:55662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:26.411716 2026] [ssl:error] [pid 3288393:tid 3288393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:26.737945 2026] [lsapi:warn] [pid 3283222:tid 3283222] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:26.798652 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/ectoplasm/index.php8
[Thu Jul 30 13:39:26.798711 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/ectoplasm/index.php7
[Thu Jul 30 13:39:26.798743 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/ectoplasm/index.php5
[Thu Jul 30 13:39:26.799013 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/ectoplasm/index.phtml
[Thu Jul 30 13:39:27.551254 2026] [lsapi:warn] [pid 3281483:tid 3281483] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:27.570130 2026] [access_compat:error] [pid 3278391:tid 3278391] [client 106.222.248.251:13701] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:27.593333 2026] [ssl:error] [pid 3266311:tid 3266311] (70014)End of file found: [client 216.73.216.199:41219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:27.921717 2026] [authz_core:error] [pid 3266260:tid 3266260] [client 20.193.250.173:63266] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 13:39:28.264719 2026] [lsapi:warn] [pid 3283222:tid 3283222] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:28.409230 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/index.php8
[Thu Jul 30 13:39:28.409275 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/index.php7
[Thu Jul 30 13:39:28.409303 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/index.php5
[Thu Jul 30 13:39:28.409557 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/index.phtml
[Thu Jul 30 13:39:29.469469 2026] [ssl:error] [pid 3276728:tid 3276728] (EAI 2)Name or service not known: [client 144.76.19.72:55666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:29.469503 2026] [ssl:error] [pid 3276728:tid 3276728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:29.522539 2026] [ssl:error] [pid 3283464:tid 3283464] (EAI 2)Name or service not known: [client 144.76.19.72:55676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:29.522573 2026] [ssl:error] [pid 3283464:tid 3283464] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:30.583644 2026] [access_compat:error] [pid 3270948:tid 3270948] [client 202.88.254.53:50832] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:31.011276 2026] [cgi:error] [pid 3282687:tid 3282687] [client 20.104.22.47:3020] AH02812: stderr from /home/quantumc/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:39:31.221584 2026] [lsapi:warn] [pid 3283464:tid 3283464] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:31.808767 2026] [ssl:error] [pid 3283468:tid 3283468] (70014)End of file found: [client 216.73.216.199:48228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:32.142715 2026] [authz_core:error] [pid 3281847:tid 3281847] [client 20.193.250.173:55136] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 13:39:32.696528 2026] [ssl:error] [pid 3281847:tid 3281847] (EAI 2)Name or service not known: [client 144.76.19.72:36658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:32.696558 2026] [ssl:error] [pid 3281847:tid 3281847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:32.711092 2026] [ssl:error] [pid 3270757:tid 3270757] (70014)End of file found: [client 216.73.216.199:11849] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:32.749434 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:36674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:32.749461 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:33.565137 2026] [security2:error] [pid 3278391:tid 3278391] [client 47.128.23.231:39012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amtGBdInF-SoUylMZCbMZgAAADI"]
[Thu Jul 30 13:39:35.133589 2026] [core:error] [pid 3282079:tid 3282079] (13)Permission denied: [client 216.73.216.199:35637] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-256/validate
[Thu Jul 30 13:39:35.824379 2026] [ssl:error] [pid 3283107:tid 3283107] (EAI 2)Name or service not known: [client 144.76.19.72:36688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:35.824413 2026] [ssl:error] [pid 3283107:tid 3283107] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:35.844241 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 20.193.250.173:62032] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 13:39:35.879128 2026] [ssl:error] [pid 3289154:tid 3289154] (EAI 2)Name or service not known: [client 144.76.19.72:36698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:35.879159 2026] [ssl:error] [pid 3289154:tid 3289154] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:36.642153 2026] [core:error] [pid 3282079:tid 3282079] (13)Permission denied: [client 216.73.216.199:35637] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/red_zone
[Thu Jul 30 13:39:36.719230 2026] [access_compat:error] [pid 3270949:tid 3270949] [client 45.158.164.139:33966] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:39:36.933296 2026] [security2:error] [pid 3282571:tid 3282571] [client 43.157.67.70:53048] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.co.uk"] [uri "/"] [unique_id "amtGCIbAAoaDf93wXPWqzAAAABk"]
[Thu Jul 30 13:39:36.942562 2026] [ssl:error] [pid 3282079:tid 3282079] (70014)End of file found: [client 216.73.216.199:35637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:37.080662 2026] [security2:error] [pid 3266260:tid 3266260] [client 129.226.174.80:38226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtGCU7wPfz3XrjZjrs4EgAAACM"], referer: http://banskoexpresstransfers.co.uk
[Thu Jul 30 13:39:37.327543 2026] [lsapi:warn] [pid 3282784:tid 3282784] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:38.063653 2026] [access_compat:error] [pid 3276730:tid 3276730] [client 106.222.248.251:1871] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:38.405572 2026] [lsapi:warn] [pid 3283337:tid 3283337] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:38.816663 2026] [lsapi:warn] [pid 3270757:tid 3270757] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:38.904937 2026] [security2:error] [pid 3270400:tid 3270400] [client 129.226.174.80:37392] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtGClE2ry1i-s_sqG48LQAAAC0"], referer: http://www.banskoexpress.com
[Thu Jul 30 13:39:38.936096 2026] [ssl:error] [pid 3282784:tid 3282784] (EAI 2)Name or service not known: [client 144.76.19.72:36704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:38.936119 2026] [ssl:error] [pid 3282784:tid 3282784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:38.996556 2026] [ssl:error] [pid 3286184:tid 3286184] (EAI 2)Name or service not known: [client 144.76.19.72:36714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:38.996599 2026] [ssl:error] [pid 3286184:tid 3286184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:39.349678 2026] [ssl:error] [pid 3277583:tid 3277583] (70014)End of file found: [client 216.73.216.199:63659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:39.654895 2026] [ssl:error] [pid 3268116:tid 3268116] (70014)End of file found: [client 216.73.216.199:12529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:41.478785 2026] [security2:error] [pid 3288091:tid 3288091] [client 185.191.171.14:42830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3883.0/prev_next,next.html"] [unique_id "amtGDZ8PPAmoynewd_UGYAAAAAM"]
[Thu Jul 30 13:39:41.816616 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:41.839940 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 202.88.254.53:51353] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:42.052625 2026] [ssl:error] [pid 3264151:tid 3264151] (EAI 2)Name or service not known: [client 144.76.19.72:59866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:42.052653 2026] [ssl:error] [pid 3264151:tid 3264151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:42.103732 2026] [ssl:error] [pid 3270400:tid 3270400] (EAI 2)Name or service not known: [client 144.76.19.72:59880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:42.103771 2026] [ssl:error] [pid 3270400:tid 3270400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:42.250792 2026] [ssl:error] [pid 3276729:tid 3276729] (70014)End of file found: [client 216.73.216.199:63433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:44.511393 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/fonts/index.php8
[Thu Jul 30 13:39:44.511440 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/fonts/index.php7
[Thu Jul 30 13:39:44.511466 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/fonts/index.php5
[Thu Jul 30 13:39:44.511699 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/fonts/index.phtml
[Thu Jul 30 13:39:44.686019 2026] [ssl:error] [pid 3282687:tid 3282687] (70014)End of file found: [client 216.73.216.199:32239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:44.969051 2026] [core:error] [pid 3267536:tid 3267536] (13)Permission denied: [client 216.73.216.199:5921] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8/usersize
[Thu Jul 30 13:39:45.079840 2026] [core:error] [pid 3267536:tid 3267536] (13)Permission denied: [client 216.73.216.199:5921] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_async_pf/usersize
[Thu Jul 30 13:39:45.158993 2026] [ssl:error] [pid 3277583:tid 3277583] (EAI 2)Name or service not known: [client 144.76.19.72:59886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:45.159054 2026] [ssl:error] [pid 3277583:tid 3277583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:45.212267 2026] [ssl:error] [pid 3276730:tid 3276730] (EAI 2)Name or service not known: [client 144.76.19.72:59896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:45.212306 2026] [ssl:error] [pid 3276730:tid 3276730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:45.984262 2026] [ssl:error] [pid 3267536:tid 3267536] (70014)End of file found: [client 216.73.216.199:5921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:39:47.905681 2026] [lsapi:warn] [pid 3286099:tid 3286099] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:47.927378 2026] [access_compat:error] [pid 3281483:tid 3281483] [client 202.88.254.53:51623] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:48.271322 2026] [ssl:error] [pid 3277583:tid 3277583] (EAI 2)Name or service not known: [client 144.76.19.72:59898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:48.271351 2026] [ssl:error] [pid 3277583:tid 3277583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:48.328562 2026] [ssl:error] [pid 3286183:tid 3286183] (EAI 2)Name or service not known: [client 144.76.19.72:59902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:48.328589 2026] [ssl:error] [pid 3286183:tid 3286183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:48.485739 2026] [core:error] [pid 3283223:tid 3283223] (13)Permission denied: [client 216.73.216.199:12982] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/objects_partial
[Thu Jul 30 13:39:49.130115 2026] [lsapi:warn] [pid 3266260:tid 3266260] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:49.472498 2026] [lsapi:warn] [pid 3286183:tid 3286183] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:49.688801 2026] [lsapi:warn] [pid 3285998:tid 3285998] [client 216.73.216.199:58798] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 13:39:49.688836 2026] [lsapi:error] [pid 3285998:tid 3285998] [client 216.73.216.199:58798] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeWithNamespace.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 13:39:50.841927 2026] [access_compat:error] [pid 3282687:tid 3282687] [client 106.222.248.251:25184] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:51.129669 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/images/index.php8
[Thu Jul 30 13:39:51.129739 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/images/index.php7
[Thu Jul 30 13:39:51.129767 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/images/index.php5
[Thu Jul 30 13:39:51.129995 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/images/index.phtml
[Thu Jul 30 13:39:51.385616 2026] [ssl:error] [pid 3266260:tid 3266260] (EAI 2)Name or service not known: [client 144.76.19.72:43270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:51.385644 2026] [ssl:error] [pid 3266260:tid 3266260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:51.441859 2026] [ssl:error] [pid 3278305:tid 3278305] (EAI 2)Name or service not known: [client 144.76.19.72:43274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:51.441890 2026] [ssl:error] [pid 3278305:tid 3278305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:52.488109 2026] [lsapi:warn] [pid 3286100:tid 3286100] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:53.883326 2026] [access_compat:error] [pid 3285998:tid 3285998] [client 202.88.254.53:51889] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:39:53.980883 2026] [authz_core:error] [pid 3276728:tid 3276728] [client 94.154.43.178:58332] AH01630: client denied by server configuration: /home/markmitc/recklesselectricity.com/error_log
[Thu Jul 30 13:39:54.496709 2026] [ssl:error] [pid 3270948:tid 3270948] (EAI 2)Name or service not known: [client 144.76.19.72:43282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:54.496743 2026] [ssl:error] [pid 3270948:tid 3270948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:54.552667 2026] [ssl:error] [pid 3278305:tid 3278305] (EAI 2)Name or service not known: [client 144.76.19.72:43294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:54.552710 2026] [ssl:error] [pid 3278305:tid 3278305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:54.658088 2026] [security2:error] [pid 3272097:tid 3272097] [client 51.68.236.94:12901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "beechhouseselfcatering.co.uk"] [uri "/robots.txt"] [unique_id "amtGGuBOQCC4zkEQCt3LewAAAA4"]
[Thu Jul 30 13:39:54.737252 2026] [security2:error] [pid 3270948:tid 3270948] [client 51.68.236.94:11243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtGGjZbORmKashVD3oepgAAADM"]
[Thu Jul 30 13:39:54.860047 2026] [security2:error] [pid 3278305:tid 3278305] [client 114.119.142.20:42291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~103,17/request_format~html"] [unique_id "amtGGkqn1TCdgoCAcPneMgAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/request_format~html/cat_ids~103
[Thu Jul 30 13:39:54.871079 2026] [security2:error] [pid 3281847:tid 3281847] [client 51.68.236.94:17115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/robots.txt"] [unique_id "amtGGm4kz_Jk7JQGkf0d3wAAABI"]
[Thu Jul 30 13:39:55.694658 2026] [security2:error] [pid 3290270:tid 3290270] [client 51.68.236.94:9973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/403.shtml"] [unique_id "amtGG3lqFtlSPygsF102IAAAAAw"]
[Thu Jul 30 13:39:55.919261 2026] [core:error] [pid 3283223:tid 3283223] [client 20.104.22.47:11935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:39:55.919288 2026] [core:error] [pid 3283223:tid 3283223] [client 20.104.22.47:11935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:39:56.555008 2026] [security2:error] [pid 3283339:tid 3283339] [client 114.119.142.20:42293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576540800/cat_ids~103,17/request_format~html"] [unique_id "amtGHPQ0jhM67rG8eSXs2wAAAEU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576540800/request_format~html/cat_ids~103
[Thu Jul 30 13:39:56.616182 2026] [core:error] [pid 3272329:tid 3272329] (13)Permission denied: [client 216.73.216.199:57593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/objects_partial
[Thu Jul 30 13:39:57.137127 2026] [security2:error] [pid 3272097:tid 3272097] [client 85.208.96.207:63228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7167.0.html"] [unique_id "amtGHeBOQCC4zkEQCt3LfgAAAA4"]
[Thu Jul 30 13:39:57.345989 2026] [authz_core:error] [pid 3282781:tid 3282781] [client 66.249.66.34:48681] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:39:57.348725 2026] [authz_core:error] [pid 3282781:tid 3282781] [client 66.249.66.34:48681] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:39:57.490951 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/assets/js/index.php8
[Thu Jul 30 13:39:57.491006 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/assets/js/index.php7
[Thu Jul 30 13:39:57.491041 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/assets/js/index.php5
[Thu Jul 30 13:39:57.491369 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/assets/js/index.phtml
[Thu Jul 30 13:39:57.608583 2026] [ssl:error] [pid 3290829:tid 3290829] (EAI 2)Name or service not known: [client 144.76.19.72:43310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:57.608610 2026] [ssl:error] [pid 3290829:tid 3290829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:57.663304 2026] [ssl:error] [pid 3278391:tid 3278391] (EAI 2)Name or service not known: [client 144.76.19.72:43316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:39:57.663332 2026] [ssl:error] [pid 3278391:tid 3278391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:39:58.471311 2026] [lsapi:warn] [pid 3290909:tid 3290909] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:39:59.631180 2026] [core:error] [pid 3278391:tid 3278391] [client 20.104.22.47:56440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:39:59.631204 2026] [core:error] [pid 3278391:tid 3278391] [client 20.104.22.47:56440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:39:59.987869 2026] [lsapi:warn] [pid 3282571:tid 3282571] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:00.004993 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/index.php8
[Thu Jul 30 13:40:00.005039 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/index.php7
[Thu Jul 30 13:40:00.005081 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/index.php5
[Thu Jul 30 13:40:00.005330 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/plugins/woocommerce/index.phtml
[Thu Jul 30 13:40:00.051396 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:00.103318 2026] [access_compat:error] [pid 3283339:tid 3283339] [client 202.88.254.53:52144] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:00.501549 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 106.222.248.251:6688] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:00.766629 2026] [ssl:error] [pid 3278197:tid 3278197] (EAI 2)Name or service not known: [client 144.76.19.72:36174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:00.766675 2026] [ssl:error] [pid 3278197:tid 3278197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:00.846885 2026] [ssl:error] [pid 3272097:tid 3272097] (EAI 2)Name or service not known: [client 144.76.19.72:36178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:00.846923 2026] [ssl:error] [pid 3272097:tid 3272097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:01.579718 2026] [ssl:error] [pid 3267536:tid 3267536] (70014)End of file found: [client 216.73.216.199:3128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:01.752401 2026] [security2:error] [pid 3272097:tid 3272097] [client 185.191.171.14:51166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/jerry-hoover-obituary"] [unique_id "amtGIeBOQCC4zkEQCt3LgQAAAA4"]
[Thu Jul 30 13:40:01.978937 2026] [lsapi:warn] [pid 3283468:tid 3283468] [client 51.20.56.134:53167] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:40:02.603745 2026] [core:error] [pid 3285998:tid 3285998] [client 20.104.22.47:56411] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:02.603776 2026] [core:error] [pid 3285998:tid 3285998] [client 20.104.22.47:56411] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:02.699332 2026] [security2:error] [pid 3266260:tid 3266260] [client 82.156.88.97:43526] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ziltdesign.be"] [uri "/"] [unique_id "amtGIk7wPfz3XrjZjrs4HgAAACM"]
[Thu Jul 30 13:40:02.772096 2026] [authz_core:error] [pid 3283468:tid 3283468] [client 34.181.147.239:52640] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 13:40:02.774785 2026] [authz_core:error] [pid 3283468:tid 3283468] [client 34.181.147.239:52640] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 13:40:03.185313 2026] [lsapi:warn] [pid 3285998:tid 3285998] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:03.934107 2026] [ssl:error] [pid 3278305:tid 3278305] (EAI 2)Name or service not known: [client 144.76.19.72:36180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:03.934150 2026] [ssl:error] [pid 3278305:tid 3278305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:04.018959 2026] [ssl:error] [pid 3278391:tid 3278391] (EAI 2)Name or service not known: [client 144.76.19.72:36188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:04.018994 2026] [ssl:error] [pid 3278391:tid 3278391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:05.045965 2026] [core:error] [pid 3286183:tid 3286183] [client 20.104.22.47:56447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:05.045992 2026] [core:error] [pid 3286183:tid 3286183] [client 20.104.22.47:56447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:05.822608 2026] [core:error] [pid 3267536:tid 3267536] (13)Permission denied: [client 216.73.216.199:61472] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/create_default_featurelist
[Thu Jul 30 13:40:06.666706 2026] [access_compat:error] [pid 3278391:tid 3278391] [client 202.88.254.53:52420] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:07.088503 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:36190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:07.088541 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:07.150713 2026] [ssl:error] [pid 3290909:tid 3290909] (EAI 2)Name or service not known: [client 144.76.19.72:36204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:07.150753 2026] [ssl:error] [pid 3290909:tid 3290909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:07.331637 2026] [ssl:error] [pid 3267536:tid 3267536] (70014)End of file found: [client 216.73.216.199:61472] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:09.010540 2026] [lsapi:warn] [pid 3286099:tid 3286099] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:09.504119 2026] [cgi:error] [pid 3283337:tid 3283337] [client 216.73.216.199:36886] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/https-proxy-snif.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:40:09.504172 2026] [cgi:error] [pid 3283337:tid 3283337] [client 216.73.216.199:36886] End of script output before headers: https-proxy-snif.pl
[Thu Jul 30 13:40:10.019355 2026] [core:error] [pid 3285998:tid 3285998] [client 20.104.22.47:56387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:10.019381 2026] [core:error] [pid 3285998:tid 3285998] [client 20.104.22.47:56387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:10.104295 2026] [security2:error] [pid 3278305:tid 3278305] [client 116.101.136.128:49134] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGKkqn1TCdgoCAcPneOgAAABw"]
[Thu Jul 30 13:40:10.104352 2026] [security2:error] [pid 3278305:tid 3278305] [client 116.101.136.128:49134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGKkqn1TCdgoCAcPneOgAAABw"]
[Thu Jul 30 13:40:10.104677 2026] [security2:error] [pid 3278305:tid 3278305] [client 116.101.136.128:49134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGKkqn1TCdgoCAcPneOgAAABw"]
[Thu Jul 30 13:40:10.163627 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/includes/index.php8
[Thu Jul 30 13:40:10.163674 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/includes/index.php7
[Thu Jul 30 13:40:10.163700 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/includes/index.php5
[Thu Jul 30 13:40:10.163925 2026] [access_compat:error] [pid 3267985:tid 3267985] [client 85.204.70.104:41914] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/includes/index.phtml
[Thu Jul 30 13:40:10.184610 2026] [cgi:error] [pid 3264151:tid 3264151] [client 216.73.216.199:11157] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Thread-Queue/examples/queue.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:40:10.184658 2026] [cgi:error] [pid 3264151:tid 3264151] [client 216.73.216.199:11157] End of script output before headers: queue.pl
[Thu Jul 30 13:40:10.206783 2026] [ssl:error] [pid 3283337:tid 3283337] (EAI 2)Name or service not known: [client 144.76.19.72:45778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:10.206811 2026] [ssl:error] [pid 3283337:tid 3283337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:10.259844 2026] [ssl:error] [pid 3272329:tid 3272329] (EAI 2)Name or service not known: [client 144.76.19.72:45784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:10.259871 2026] [ssl:error] [pid 3272329:tid 3272329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:10.665460 2026] [lsapi:warn] [pid 3281847:tid 3281847] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:10.979160 2026] [access_compat:error] [pid 3285998:tid 3285998] [client 106.222.248.251:33125] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:10.980681 2026] [lsapi:warn] [pid 3272329:tid 3272329] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:11.462806 2026] [access_compat:error] [pid 3268114:tid 3268114] [client 45.158.164.139:37360] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:40:11.700663 2026] [core:error] [pid 3255508:tid 3255508] [client 20.104.22.47:11958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:11.700687 2026] [core:error] [pid 3255508:tid 3255508] [client 20.104.22.47:11958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:11.865451 2026] [ssl:error] [pid 3286100:tid 3286100] (70014)End of file found: [client 216.73.216.199:15201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:12.773870 2026] [access_compat:error] [pid 3266260:tid 3266260] [client 202.88.254.53:52662] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:13.158420 2026] [security2:error] [pid 3290745:tid 3290745] [client 110.249.201.67:29352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/robots.txt"] [unique_id "amtGLSjvrO30xA9Ceqs-3AAAAA0"]
[Thu Jul 30 13:40:13.313558 2026] [ssl:error] [pid 3267536:tid 3267536] (EAI 2)Name or service not known: [client 144.76.19.72:45792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:13.313591 2026] [ssl:error] [pid 3267536:tid 3267536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:13.366225 2026] [ssl:error] [pid 3286183:tid 3286183] (EAI 2)Name or service not known: [client 144.76.19.72:45800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:13.366254 2026] [ssl:error] [pid 3286183:tid 3286183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:13.479768 2026] [security2:error] [pid 3283337:tid 3283337] [client 5.62.147.12:55986] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGLWtpcJ-h_yFR2PJ-oQAAAEM"]
[Thu Jul 30 13:40:13.479819 2026] [security2:error] [pid 3283337:tid 3283337] [client 5.62.147.12:55986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGLWtpcJ-h_yFR2PJ-oQAAAEM"]
[Thu Jul 30 13:40:13.480123 2026] [security2:error] [pid 3283337:tid 3283337] [client 5.62.147.12:55986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGLWtpcJ-h_yFR2PJ-oQAAAEM"]
[Thu Jul 30 13:40:13.763933 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:15.351865 2026] [access_compat:error] [pid 3291817:tid 3291817] [client 85.204.70.104:52496] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/upgrade/index.php8
[Thu Jul 30 13:40:15.351910 2026] [access_compat:error] [pid 3291817:tid 3291817] [client 85.204.70.104:52496] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/upgrade/index.php7
[Thu Jul 30 13:40:15.351936 2026] [access_compat:error] [pid 3291817:tid 3291817] [client 85.204.70.104:52496] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/upgrade/index.php5
[Thu Jul 30 13:40:15.352169 2026] [access_compat:error] [pid 3291817:tid 3291817] [client 85.204.70.104:52496] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/upgrade/index.phtml
[Thu Jul 30 13:40:15.483348 2026] [core:error] [pid 3286183:tid 3286183] [client 20.104.22.47:56420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:15.483375 2026] [core:error] [pid 3286183:tid 3286183] [client 20.104.22.47:56420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:16.424399 2026] [ssl:error] [pid 3286183:tid 3286183] (EAI 2)Name or service not known: [client 144.76.19.72:45806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:16.424424 2026] [ssl:error] [pid 3286183:tid 3286183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:16.482169 2026] [ssl:error] [pid 3285998:tid 3285998] (EAI 2)Name or service not known: [client 144.76.19.72:45810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:16.482201 2026] [ssl:error] [pid 3285998:tid 3285998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:17.416634 2026] [core:error] [pid 3288393:tid 3288393] [client 20.104.22.47:56431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:17.416664 2026] [core:error] [pid 3288393:tid 3288393] [client 20.104.22.47:56431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:19.575701 2026] [ssl:error] [pid 3268116:tid 3268116] (EAI 2)Name or service not known: [client 144.76.19.72:45822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:19.575767 2026] [ssl:error] [pid 3268116:tid 3268116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:19.584567 2026] [lsapi:warn] [pid 3278391:tid 3278391] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:19.607653 2026] [access_compat:error] [pid 3290908:tid 3290908] [client 202.88.254.53:52970] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:19.635548 2026] [ssl:error] [pid 3270949:tid 3270949] (EAI 2)Name or service not known: [client 144.76.19.72:50316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:19.635580 2026] [ssl:error] [pid 3270949:tid 3270949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:20.870907 2026] [security2:error] [pid 3281847:tid 3281847] [client 103.181.75.135:56118] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGNG4kz_Jk7JQGkf0d5AAAABI"]
[Thu Jul 30 13:40:20.870954 2026] [security2:error] [pid 3281847:tid 3281847] [client 103.181.75.135:56118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGNG4kz_Jk7JQGkf0d5AAAABI"]
[Thu Jul 30 13:40:20.871291 2026] [security2:error] [pid 3281847:tid 3281847] [client 103.181.75.135:56118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGNG4kz_Jk7JQGkf0d5AAAABI"]
[Thu Jul 30 13:40:21.071898 2026] [security2:error] [pid 3290270:tid 3290270] [client 85.208.96.208:10460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4735.0/prev_next,prev.html"] [unique_id "amtGNXlqFtlSPygsF102KwAAAAw"]
[Thu Jul 30 13:40:21.298053 2026] [lsapi:warn] [pid 3290909:tid 3290909] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:21.894572 2026] [lsapi:warn] [pid 3264151:tid 3264151] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:22.107301 2026] [core:error] [pid 3255508:tid 3255508] (13)Permission denied: [client 216.73.216.199:49099] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu6/firmware_node/eject
[Thu Jul 30 13:40:22.180578 2026] [access_compat:error] [pid 3286100:tid 3286100] [client 106.222.248.251:14053] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:22.407604 2026] [ssl:error] [pid 3255508:tid 3255508] (70014)End of file found: [client 216.73.216.199:49099] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:22.687537 2026] [ssl:error] [pid 3282687:tid 3282687] (EAI 2)Name or service not known: [client 144.76.19.72:50324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:22.687578 2026] [ssl:error] [pid 3282687:tid 3282687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:22.742685 2026] [ssl:error] [pid 3272097:tid 3272097] (EAI 2)Name or service not known: [client 144.76.19.72:50340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:22.742727 2026] [ssl:error] [pid 3272097:tid 3272097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:23.145916 2026] [cgi:error] [pid 3283223:tid 3283223] [client 216.73.216.199:1106] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-Thread-Queue/examples/queue.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:40:23.146003 2026] [cgi:error] [pid 3283223:tid 3283223] [client 216.73.216.199:1106] End of script output before headers: queue.pl
[Thu Jul 30 13:40:23.949861 2026] [core:error] [pid 3291816:tid 3291816] [client 20.104.22.47:12102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:23.949892 2026] [core:error] [pid 3291816:tid 3291816] [client 20.104.22.47:12102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:24.434202 2026] [lsapi:warn] [pid 3288091:tid 3288091] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:25.264028 2026] [lsapi:warn] [pid 3283339:tid 3283339] [client 104.143.238.185:32634] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.yahoo.co.uk/
[Thu Jul 30 13:40:25.264103 2026] [lsapi:warn] [pid 3283339:tid 3283339] [client 104.143.238.185:32634] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.yahoo.co.uk/
[Thu Jul 30 13:40:25.414913 2026] [core:error] [pid 3282781:tid 3282781] (13)Permission denied: [client 216.73.216.199:51644] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/run_plugin_lifecycle
[Thu Jul 30 13:40:25.693081 2026] [access_compat:error] [pid 3282687:tid 3282687] [client 202.88.254.53:53226] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:25.799171 2026] [ssl:error] [pid 3286099:tid 3286099] (EAI 2)Name or service not known: [client 144.76.19.72:50350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:25.799212 2026] [ssl:error] [pid 3286099:tid 3286099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:25.852294 2026] [ssl:error] [pid 3270400:tid 3270400] (EAI 2)Name or service not known: [client 144.76.19.72:50362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:25.852327 2026] [ssl:error] [pid 3270400:tid 3270400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:25.866297 2026] [lsapi:warn] [pid 3268114:tid 3268114] [client 216.73.217.172:55182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:40:25.866337 2026] [lsapi:warn] [pid 3268114:tid 3268114] [client 216.73.217.172:55182] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:40:27.358082 2026] [core:error] [pid 3270400:tid 3270400] [client 20.104.22.47:12119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:27.358106 2026] [core:error] [pid 3270400:tid 3270400] [client 20.104.22.47:12119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:27.443687 2026] [authz_core:error] [pid 3283339:tid 3283339] [client 20.104.22.47:11934] AH01630: client denied by server configuration: /home/wwwhighc/public_html/dev/php.ini
[Thu Jul 30 13:40:27.530901 2026] [ssl:error] [pid 3282781:tid 3282781] (70014)End of file found: [client 216.73.216.199:51644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:28.911218 2026] [ssl:error] [pid 3268116:tid 3268116] (EAI 2)Name or service not known: [client 144.76.19.72:50372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:28.911242 2026] [ssl:error] [pid 3268116:tid 3268116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:28.967539 2026] [ssl:error] [pid 3263005:tid 3263005] (EAI 2)Name or service not known: [client 144.76.19.72:50382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:28.967571 2026] [ssl:error] [pid 3263005:tid 3263005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:29.640369 2026] [core:error] [pid 3290828:tid 3290828] (13)Permission denied: [client 216.73.216.199:24020] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-64/objects_partial
[Thu Jul 30 13:40:29.746350 2026] [core:error] [pid 3290270:tid 3290270] [client 20.104.22.47:12130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:29.746376 2026] [core:error] [pid 3290270:tid 3290270] [client 20.104.22.47:12130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:29.950824 2026] [core:error] [pid 3290828:tid 3290828] (13)Permission denied: [client 216.73.216.199:24020] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCP/objects_partial
[Thu Jul 30 13:40:30.208861 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:31.962973 2026] [lsapi:warn] [pid 3290270:tid 3290270] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:32.025536 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:48852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:32.025568 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:32.076766 2026] [ssl:error] [pid 3291816:tid 3291816] (EAI 2)Name or service not known: [client 144.76.19.72:48864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:32.076795 2026] [ssl:error] [pid 3291816:tid 3291816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:32.193661 2026] [access_compat:error] [pid 3276729:tid 3276729] [client 106.222.248.251:16778] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:32.594794 2026] [lsapi:warn] [pid 3272097:tid 3272097] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:35.015187 2026] [lsapi:warn] [pid 3291817:tid 3291817] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:35.134032 2026] [ssl:error] [pid 3258907:tid 3258907] (EAI 2)Name or service not known: [client 144.76.19.72:48880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:35.134060 2026] [ssl:error] [pid 3258907:tid 3258907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:35.188518 2026] [ssl:error] [pid 3270400:tid 3270400] (EAI 2)Name or service not known: [client 144.76.19.72:48886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:35.188548 2026] [ssl:error] [pid 3270400:tid 3270400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:35.788708 2026] [core:error] [pid 3283223:tid 3283223] [client 20.104.22.47:56427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:35.788739 2026] [core:error] [pid 3283223:tid 3283223] [client 20.104.22.47:56427] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:38.247549 2026] [ssl:error] [pid 3282571:tid 3282571] (EAI 2)Name or service not known: [client 144.76.19.72:48896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:38.247591 2026] [ssl:error] [pid 3282571:tid 3282571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:38.300462 2026] [ssl:error] [pid 3288091:tid 3288091] (EAI 2)Name or service not known: [client 144.76.19.72:48906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:38.300531 2026] [ssl:error] [pid 3288091:tid 3288091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:40.796662 2026] [lsapi:warn] [pid 3290270:tid 3290270] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:41.309657 2026] [lsapi:warn] [pid 3286183:tid 3286183] [client 216.73.216.199:63903] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 13:40:41.309690 2026] [lsapi:error] [pid 3286183:tid 3286183] [client 216.73.216.199:63903] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeObject.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 13:40:41.379074 2026] [ssl:error] [pid 3291817:tid 3291817] (EAI 2)Name or service not known: [client 144.76.19.72:45746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:41.379130 2026] [ssl:error] [pid 3291817:tid 3291817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:41.432527 2026] [ssl:error] [pid 3266260:tid 3266260] (EAI 2)Name or service not known: [client 144.76.19.72:45754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:41.432558 2026] [ssl:error] [pid 3266260:tid 3266260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:41.483244 2026] [core:error] [pid 3282687:tid 3282687] [client 20.104.22.47:11954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:41.483267 2026] [core:error] [pid 3282687:tid 3282687] [client 20.104.22.47:11954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:42.348382 2026] [access_compat:error] [pid 3290270:tid 3290270] [client 106.222.248.251:7938] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:42.527114 2026] [lsapi:warn] [pid 3283337:tid 3283337] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:42.901118 2026] [ssl:error] [pid 3282687:tid 3282687] (70014)End of file found: [client 216.73.216.199:27453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:43.381961 2026] [access_compat:error] [pid 3255508:tid 3255508] [client 202.88.254.53:54370] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:43.871607 2026] [core:error] [pid 3291752:tid 3291752] [client 20.104.22.47:56420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:43.871638 2026] [core:error] [pid 3291752:tid 3291752] [client 20.104.22.47:56420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:43.923121 2026] [lsapi:warn] [pid 3266260:tid 3266260] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:44.561467 2026] [ssl:error] [pid 3264151:tid 3264151] (EAI 2)Name or service not known: [client 144.76.19.72:45770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:44.561506 2026] [ssl:error] [pid 3264151:tid 3264151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:44.636511 2026] [security2:error] [pid 3278391:tid 3278391] [client 216.73.216.199:55887] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/xmlreader.ini"] [unique_id "amtGTNInF-SoUylMZCbMkAAAADI"]
[Thu Jul 30 13:40:44.636802 2026] [security2:error] [pid 3278391:tid 3278391] [client 216.73.216.199:55887] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/xmlreader.ini"] [unique_id "amtGTNInF-SoUylMZCbMkAAAADI"]
[Thu Jul 30 13:40:44.637024 2026] [security2:error] [pid 3278391:tid 3278391] [client 216.73.216.199:55887] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/xmlreader.ini"] [unique_id "amtGTNInF-SoUylMZCbMkAAAADI"]
[Thu Jul 30 13:40:44.805620 2026] [ssl:error] [pid 3281847:tid 3281847] (EAI 2)Name or service not known: [client 144.76.19.72:45772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:44.805649 2026] [ssl:error] [pid 3281847:tid 3281847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:45.681555 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:46.455597 2026] [core:error] [pid 3291752:tid 3291752] [client 20.104.22.47:12132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:46.455640 2026] [core:error] [pid 3291752:tid 3291752] [client 20.104.22.47:12132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:47.740799 2026] [core:error] [pid 3272997:tid 3272997] [client 20.104.22.47:56410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:47.740825 2026] [core:error] [pid 3272997:tid 3272997] [client 20.104.22.47:56410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:47.743454 2026] [core:error] [pid 3291752:tid 3291752] (13)Permission denied: [client 216.73.216.199:44477] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty6/subsystem/ttyS3/closing_wait
[Thu Jul 30 13:40:47.861941 2026] [ssl:error] [pid 3290745:tid 3290745] (EAI 2)Name or service not known: [client 144.76.19.72:45786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:47.861974 2026] [ssl:error] [pid 3290745:tid 3290745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:47.915454 2026] [ssl:error] [pid 3295391:tid 3295391] (EAI 2)Name or service not known: [client 144.76.19.72:45796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:47.915491 2026] [ssl:error] [pid 3295391:tid 3295391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:48.048784 2026] [core:error] [pid 3291752:tid 3291752] (13)Permission denied: [client 216.73.216.199:44477] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/db/nscd/passwd
[Thu Jul 30 13:40:50.971017 2026] [ssl:error] [pid 3278391:tid 3278391] (EAI 2)Name or service not known: [client 144.76.19.72:35302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:50.971052 2026] [ssl:error] [pid 3278391:tid 3278391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:51.026862 2026] [ssl:error] [pid 3290270:tid 3290270] (EAI 2)Name or service not known: [client 144.76.19.72:35310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:51.026897 2026] [ssl:error] [pid 3290270:tid 3290270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:51.355109 2026] [lsapi:warn] [pid 3267536:tid 3267536] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:51.657159 2026] [security2:error] [pid 3295279:tid 3295279] [client 51.68.236.92:30035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/robots.txt"] [unique_id "amtGU3MOKHaQfyq8XnwVDAAAABg"]
[Thu Jul 30 13:40:51.867588 2026] [core:error] [pid 3281483:tid 3281483] [client 20.104.22.47:11916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:51.867630 2026] [core:error] [pid 3281483:tid 3281483] [client 20.104.22.47:11916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:52.417605 2026] [access_compat:error] [pid 3290270:tid 3290270] [client 106.222.248.251:10982] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:40:52.587326 2026] [ssl:error] [pid 3295386:tid 3295386] (70014)End of file found: [client 216.73.216.199:27117] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:53.155834 2026] [lsapi:warn] [pid 3285998:tid 3285998] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:53.192884 2026] [ssl:error] [pid 3291752:tid 3291752] (70014)End of file found: [client 216.73.216.199:44477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:54.109698 2026] [ssl:error] [pid 3295279:tid 3295279] (EAI 2)Name or service not known: [client 144.76.19.72:35318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:54.109744 2026] [ssl:error] [pid 3295279:tid 3295279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:54.166099 2026] [ssl:error] [pid 3295184:tid 3295184] (EAI 2)Name or service not known: [client 144.76.19.72:35334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:54.166136 2026] [ssl:error] [pid 3295184:tid 3295184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:54.315124 2026] [lsapi:warn] [pid 3270948:tid 3270948] [client 2401:4900:1c82:70ff:7dd3:7762:4760:f038:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:55.106699 2026] [core:error] [pid 3295384:tid 3295384] [client 20.104.22.47:11931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:55.106726 2026] [core:error] [pid 3295384:tid 3295384] [client 20.104.22.47:11931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:56.112957 2026] [security2:error] [pid 3270948:tid 3270948] [client 45.148.10.120:60132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amtGWDZbORmKashVD3oeuAAAADM"]
[Thu Jul 30 13:40:56.113141 2026] [security2:error] [pid 3270948:tid 3270948] [client 45.148.10.120:60132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amtGWDZbORmKashVD3oeuAAAADM"]
[Thu Jul 30 13:40:56.113362 2026] [security2:error] [pid 3270948:tid 3270948] [client 45.148.10.120:60132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hbsanorth.co.uk"] [uri "/.env"] [unique_id "amtGWDZbORmKashVD3oeuAAAADM"]
[Thu Jul 30 13:40:56.248185 2026] [lsapi:warn] [pid 3290910:tid 3290910] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:40:56.860891 2026] [core:error] [pid 3295391:tid 3295391] [client 20.104.22.47:56392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:56.860914 2026] [core:error] [pid 3295391:tid 3295391] [client 20.104.22.47:56392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:57.256580 2026] [ssl:error] [pid 3258098:tid 3258098] (EAI 2)Name or service not known: [client 144.76.19.72:35340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:57.256611 2026] [ssl:error] [pid 3258098:tid 3258098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:57.309654 2026] [ssl:error] [pid 3295280:tid 3295280] (EAI 2)Name or service not known: [client 144.76.19.72:35352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:40:57.309688 2026] [ssl:error] [pid 3295280:tid 3295280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:40:58.334255 2026] [ssl:error] [pid 3281847:tid 3281847] (70014)End of file found: [client 216.73.216.199:57314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:40:58.684710 2026] [core:error] [pid 3255508:tid 3255508] [client 20.104.22.47:11957] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:58.684739 2026] [core:error] [pid 3255508:tid 3255508] [client 20.104.22.47:11957] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:40:59.208779 2026] [security2:error] [pid 3290270:tid 3290270] [client 43.166.255.102:35210] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.islay.me"] [uri "/"] [unique_id "amtGW3lqFtlSPygsF102OgAAAAw"]
[Thu Jul 30 13:40:59.543792 2026] [core:error] [pid 3295386:tid 3295386] (13)Permission denied: [client 216.73.216.199:50647] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty62/subsystem/ttyS3/uartclk
[Thu Jul 30 13:41:00.367961 2026] [ssl:error] [pid 3282687:tid 3282687] (EAI 2)Name or service not known: [client 144.76.19.72:42458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:00.367986 2026] [ssl:error] [pid 3282687:tid 3282687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:00.423866 2026] [ssl:error] [pid 3290910:tid 3290910] (EAI 2)Name or service not known: [client 144.76.19.72:42466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:00.423897 2026] [ssl:error] [pid 3290910:tid 3290910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:00.554626 2026] [core:error] [pid 3255508:tid 3255508] [client 20.104.22.47:61479] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:00.554650 2026] [core:error] [pid 3255508:tid 3255508] [client 20.104.22.47:61479] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:01.075690 2026] [ssl:error] [pid 3295386:tid 3295386] (5)Input/output error: [client 216.73.216.199:50647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:01.376289 2026] [core:error] [pid 3295280:tid 3295280] (13)Permission denied: [client 216.73.216.199:35341] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/rhn/up2date
[Thu Jul 30 13:41:01.678438 2026] [ssl:error] [pid 3295280:tid 3295280] (70014)End of file found: [client 216.73.216.199:35341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:02.182180 2026] [security2:error] [pid 3295184:tid 3295184] [client 185.191.171.11:58868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/is-family-feud-cancelled"] [unique_id "amtGXmizljUtyigOMfYrbwAAAAg"]
[Thu Jul 30 13:41:02.259170 2026] [lsapi:warn] [pid 3291816:tid 3291816] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:02.508586 2026] [core:error] [pid 3295387:tid 3295387] [client 20.104.22.47:56395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:02.508609 2026] [core:error] [pid 3295387:tid 3295387] [client 20.104.22.47:56395] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:03.481311 2026] [ssl:error] [pid 3295184:tid 3295184] (EAI 2)Name or service not known: [client 144.76.19.72:42482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:03.481342 2026] [ssl:error] [pid 3295184:tid 3295184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:03.570870 2026] [ssl:error] [pid 3277583:tid 3277583] (EAI 2)Name or service not known: [client 144.76.19.72:42484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:03.570900 2026] [ssl:error] [pid 3277583:tid 3277583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:03.852247 2026] [lsapi:warn] [pid 3295384:tid 3295384] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:04.088399 2026] [security2:error] [pid 3295185:tid 3295185] [client 3.224.104.67:18246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2025/11/Anti-Modern-Slavery-Statement.pdf"] [unique_id "amtGYGjv4gClld9BntGKGQAAAA4"]
[Thu Jul 30 13:41:04.574341 2026] [core:error] [pid 3295391:tid 3295391] [client 20.104.22.47:56387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:04.574371 2026] [core:error] [pid 3295391:tid 3295391] [client 20.104.22.47:56387] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:04.947355 2026] [access_compat:error] [pid 3285998:tid 3285998] [client 202.88.254.53:55697] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:41:05.303905 2026] [autoindex:error] [pid 3290270:tid 3290270] (13)Permission denied: [client 216.73.216.199:22118] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/home/cssystem/
[Thu Jul 30 13:41:06.200779 2026] [core:error] [pid 3290270:tid 3290270] (13)Permission denied: [client 216.73.216.199:22118] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/pci/drivers/ata_generic/bind
[Thu Jul 30 13:41:06.523329 2026] [cgi:error] [pid 3290270:tid 3290270] [client 216.73.216.199:22118] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-HTTP-Tiny/eg/mirror.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 13:41:06.523379 2026] [cgi:error] [pid 3290270:tid 3290270] [client 216.73.216.199:22118] End of script output before headers: mirror.pl
[Thu Jul 30 13:41:06.632501 2026] [ssl:error] [pid 3288091:tid 3288091] (EAI 2)Name or service not known: [client 144.76.19.72:42490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:06.632526 2026] [ssl:error] [pid 3288091:tid 3288091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:06.691445 2026] [ssl:error] [pid 3288091:tid 3288091] (EAI 2)Name or service not known: [client 144.76.19.72:42500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:06.691469 2026] [ssl:error] [pid 3288091:tid 3288091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:06.889227 2026] [lsapi:warn] [pid 3288091:tid 3288091] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:07.107280 2026] [core:error] [pid 3295280:tid 3295280] (13)Permission denied: [client 216.73.216.199:64923] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS2/port
[Thu Jul 30 13:41:07.379171 2026] [security2:error] [pid 3297634:tid 3297634] [client 85.208.96.196:43660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8505.0/prev_next,next.html"] [unique_id "amtGY5WoXZDZgOggM6y0MgAAAAI"]
[Thu Jul 30 13:41:07.422428 2026] [ssl:error] [pid 3295280:tid 3295280] (70014)End of file found: [client 216.73.216.199:64923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:08.001171 2026] [core:error] [pid 3295386:tid 3295386] [client 20.104.22.47:56406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:08.001198 2026] [core:error] [pid 3295386:tid 3295386] [client 20.104.22.47:56406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:08.029180 2026] [ssl:error] [pid 3295389:tid 3295389] (70014)End of file found: [client 216.73.216.199:63036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:08.802345 2026] [security2:error] [pid 3295386:tid 3295386] [client 163.7.14.114:52551] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGZPKLX3LNLZ652VbL5wAAACA"]
[Thu Jul 30 13:41:08.802394 2026] [security2:error] [pid 3295386:tid 3295386] [client 163.7.14.114:52551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGZPKLX3LNLZ652VbL5wAAACA"]
[Thu Jul 30 13:41:08.802635 2026] [security2:error] [pid 3295386:tid 3295386] [client 163.7.14.114:52551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGZPKLX3LNLZ652VbL5wAAACA"]
[Thu Jul 30 13:41:09.743665 2026] [ssl:error] [pid 3295386:tid 3295386] (EAI 2)Name or service not known: [client 144.76.19.72:34238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:09.743699 2026] [ssl:error] [pid 3295386:tid 3295386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:09.802911 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:34240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:09.802937 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:09.806525 2026] [access_compat:error] [pid 3298067:tid 3298067] [client 45.158.164.139:37266] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:41:09.853253 2026] [core:error] [pid 3268116:tid 3268116] (13)Permission denied: [client 216.73.216.199:9934] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nfit/sections/__verbose
[Thu Jul 30 13:41:09.940128 2026] [security2:error] [pid 3298069:tid 3298069] [client 43.153.26.165:41704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sharonduggal.co.uk"] [uri "/"] [unique_id "amtGZYL0B502BoU10yqAKAAAACk"]
[Thu Jul 30 13:41:10.669634 2026] [core:error] [pid 3298068:tid 3298068] [client 20.104.22.47:11911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:10.669667 2026] [core:error] [pid 3298068:tid 3298068] [client 20.104.22.47:11911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:11.072344 2026] [ssl:error] [pid 3268116:tid 3268116] (70014)End of file found: [client 216.73.216.199:9934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:12.795421 2026] [lsapi:warn] [pid 3298067:tid 3298067] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:12.860127 2026] [ssl:error] [pid 3295386:tid 3295386] (EAI 2)Name or service not known: [client 144.76.19.72:34254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:12.860151 2026] [ssl:error] [pid 3295386:tid 3295386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:12.912972 2026] [ssl:error] [pid 3270948:tid 3270948] (EAI 2)Name or service not known: [client 144.76.19.72:34270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:12.913003 2026] [ssl:error] [pid 3270948:tid 3270948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:13.188535 2026] [core:error] [pid 3297976:tid 3297976] [client 20.104.22.47:12107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:13.188561 2026] [core:error] [pid 3297976:tid 3297976] [client 20.104.22.47:12107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:13.783818 2026] [ssl:error] [pid 3291752:tid 3291752] (70014)End of file found: [client 216.73.216.199:45841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:14.322698 2026] [lsapi:warn] [pid 3276730:tid 3276730] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:14.891468 2026] [access_compat:error] [pid 3255508:tid 3255508] [client 140.248.40.46:13303] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:41:14.924117 2026] [access_compat:error] [pid 3255508:tid 3255508] [client 140.248.40.46:13303] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:41:15.276193 2026] [core:error] [pid 3297976:tid 3297976] [client 20.104.22.47:12127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:15.276217 2026] [core:error] [pid 3297976:tid 3297976] [client 20.104.22.47:12127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:15.295109 2026] [core:error] [pid 3291816:tid 3291816] (13)Permission denied: [client 216.73.216.199:24448] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/logrotate.d/named
[Thu Jul 30 13:41:15.903859 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 202.88.254.53:56238] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:41:15.994877 2026] [ssl:error] [pid 3297975:tid 3297975] (EAI 2)Name or service not known: [client 144.76.19.72:34284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:15.994930 2026] [ssl:error] [pid 3297975:tid 3297975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:16.050560 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:34294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:16.050584 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:16.501436 2026] [access_compat:error] [pid 3295384:tid 3295384] [client 45.158.164.139:37812] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:41:16.893010 2026] [access_compat:error] [pid 3282571:tid 3282571] [client 45.158.164.139:37834] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:41:17.497277 2026] [lsapi:warn] [pid 3298209:tid 3298209] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:17.706669 2026] [core:error] [pid 3286100:tid 3286100] [client 20.104.22.47:11920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:17.706696 2026] [core:error] [pid 3286100:tid 3286100] [client 20.104.22.47:11920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:17.762703 2026] [ssl:error] [pid 3291816:tid 3291816] (70014)End of file found: [client 216.73.216.199:24448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:18.443239 2026] [security2:error] [pid 3290910:tid 3290910] [client 114.119.135.136:45209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~104"] [unique_id "amtGbgXpsy0CaLCoLm5SmgAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~104
[Thu Jul 30 13:41:19.104643 2026] [ssl:error] [pid 3299023:tid 3299023] (EAI 2)Name or service not known: [client 144.76.19.72:34308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:19.104686 2026] [ssl:error] [pid 3299023:tid 3299023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:19.157937 2026] [ssl:error] [pid 3297975:tid 3297975] (EAI 2)Name or service not known: [client 144.76.19.72:34312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:19.157962 2026] [ssl:error] [pid 3297975:tid 3297975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:19.260625 2026] [security2:error] [pid 3297634:tid 3297634] [client 159.69.189.110:46886] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtGb5WoXZDZgOggM6y0OQAAAAI"]
[Thu Jul 30 13:41:20.053181 2026] [security2:error] [pid 3295384:tid 3295384] [client 114.119.135.136:45219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~104"] [unique_id "amtGcCU90dA4AeMhRHL8_QAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~104
[Thu Jul 30 13:41:20.182704 2026] [ssl:error] [pid 3297976:tid 3297976] (70014)End of file found: [client 216.73.216.199:13537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:20.556578 2026] [security2:error] [pid 3272329:tid 3272329] [client 94.154.43.179:32568] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "vain.band"] [uri "/.env"] [unique_id "amtGcDXY1n_oiuPbkvRHGgAAADc"]
[Thu Jul 30 13:41:20.556772 2026] [security2:error] [pid 3272329:tid 3272329] [client 94.154.43.179:32568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "vain.band"] [uri "/.env"] [unique_id "amtGcDXY1n_oiuPbkvRHGgAAADc"]
[Thu Jul 30 13:41:20.556967 2026] [security2:error] [pid 3272329:tid 3272329] [client 94.154.43.179:32568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "vain.band"] [uri "/403.shtml"] [unique_id "amtGcDXY1n_oiuPbkvRHGgAAADc"]
[Thu Jul 30 13:41:21.040913 2026] [security2:error] [pid 3268116:tid 3268116] [client 43.153.76.247:50668] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.co.uk"] [uri "/"] [unique_id "amtGcSlSZG5UxNj4jjjkygAAAC4"]
[Thu Jul 30 13:41:21.044001 2026] [authz_core:error] [pid 3268116:tid 3268116] [client 43.153.76.247:50668] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:41:21.049991 2026] [authz_core:error] [pid 3268116:tid 3268116] [client 43.153.76.247:50668] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:41:21.268536 2026] [core:error] [pid 3297634:tid 3297634] [client 20.104.22.47:12106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:21.268560 2026] [core:error] [pid 3297634:tid 3297634] [client 20.104.22.47:12106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:21.991597 2026] [core:error] [pid 3290910:tid 3290910] (13)Permission denied: [client 216.73.216.199:17351] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/named/kess2012.org.db
[Thu Jul 30 13:41:22.217915 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:49986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:22.217946 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:22.275172 2026] [ssl:error] [pid 3297634:tid 3297634] (EAI 2)Name or service not known: [client 144.76.19.72:49988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:22.275206 2026] [ssl:error] [pid 3297634:tid 3297634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:23.039709 2026] [security2:error] [pid 3297975:tid 3297975] [client 5.192.35.191:43060] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGcztHDBWj_Bm_wip47QAAAA0"]
[Thu Jul 30 13:41:23.039757 2026] [security2:error] [pid 3297975:tid 3297975] [client 5.192.35.191:43060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGcztHDBWj_Bm_wip47QAAAA0"]
[Thu Jul 30 13:41:23.040045 2026] [security2:error] [pid 3297975:tid 3297975] [client 5.192.35.191:43060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGcztHDBWj_Bm_wip47QAAAA0"]
[Thu Jul 30 13:41:23.398174 2026] [lsapi:warn] [pid 3272997:tid 3272997] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:23.799004 2026] [ssl:error] [pid 3290910:tid 3290910] (70014)End of file found: [client 216.73.216.199:17351] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:24.932166 2026] [lsapi:warn] [pid 3277583:tid 3277583] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:25.053751 2026] [core:error] [pid 3295386:tid 3295386] [client 20.104.22.47:11914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:25.053778 2026] [core:error] [pid 3295386:tid 3295386] [client 20.104.22.47:11914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:25.333746 2026] [ssl:error] [pid 3297634:tid 3297634] (EAI 2)Name or service not known: [client 144.76.19.72:49990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:25.333777 2026] [ssl:error] [pid 3297634:tid 3297634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:25.388016 2026] [ssl:error] [pid 3268116:tid 3268116] (EAI 2)Name or service not known: [client 144.76.19.72:50000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:25.388044 2026] [ssl:error] [pid 3268116:tid 3268116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:25.721010 2026] [security2:error] [pid 3297976:tid 3297976] [client 94.154.43.177:33740] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "clarepillinger.co.uk"] [uri "/.env"] [unique_id "amtGdT63C0EVtPHvpWGEPgAAAA8"]
[Thu Jul 30 13:41:25.721204 2026] [security2:error] [pid 3297976:tid 3297976] [client 94.154.43.177:33740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "clarepillinger.co.uk"] [uri "/.env"] [unique_id "amtGdT63C0EVtPHvpWGEPgAAAA8"]
[Thu Jul 30 13:41:25.721384 2026] [security2:error] [pid 3297976:tid 3297976] [client 94.154.43.177:33740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "clarepillinger.co.uk"] [uri "/403.shtml"] [unique_id "amtGdT63C0EVtPHvpWGEPgAAAA8"]
[Thu Jul 30 13:41:27.712503 2026] [ssl:error] [pid 3268116:tid 3268116] (70014)End of file found: [client 216.73.216.199:36241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:28.187701 2026] [lsapi:warn] [pid 3295276:tid 3295276] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:28.447537 2026] [ssl:error] [pid 3295386:tid 3295386] (EAI 2)Name or service not known: [client 144.76.19.72:50016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:28.447564 2026] [ssl:error] [pid 3295386:tid 3295386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:28.512608 2026] [ssl:error] [pid 3298070:tid 3298070] (EAI 2)Name or service not known: [client 144.76.19.72:50032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:28.512643 2026] [ssl:error] [pid 3298070:tid 3298070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:29.829234 2026] [core:error] [pid 3285998:tid 3285998] (13)Permission denied: [client 216.73.216.199:64571] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty31/subsystem/ttyS3/uartclk
[Thu Jul 30 13:41:30.431535 2026] [core:error] [pid 3285998:tid 3285998] (13)Permission denied: [client 216.73.216.199:64571] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/8250/uevent
[Thu Jul 30 13:41:30.734520 2026] [ssl:error] [pid 3285998:tid 3285998] (70014)End of file found: [client 216.73.216.199:64571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:30.951794 2026] [access_compat:error] [pid 3298069:tid 3298069] [client 202.88.254.53:56776] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:41:31.570194 2026] [ssl:error] [pid 3300333:tid 3300333] (EAI 2)Name or service not known: [client 144.76.19.72:27880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:31.570235 2026] [ssl:error] [pid 3300333:tid 3300333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:31.633748 2026] [ssl:error] [pid 3291816:tid 3291816] (EAI 2)Name or service not known: [client 144.76.19.72:27882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:31.633776 2026] [ssl:error] [pid 3291816:tid 3291816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:31.641460 2026] [ssl:error] [pid 3298070:tid 3298070] (70014)End of file found: [client 216.73.216.199:19034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:31.863933 2026] [core:error] [pid 3295385:tid 3295385] [client 20.104.22.47:11908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:31.863974 2026] [core:error] [pid 3295385:tid 3295385] [client 20.104.22.47:11908] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:33.058312 2026] [ssl:error] [pid 3297874:tid 3297874] (70014)End of file found: [client 216.73.216.199:51237] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:33.300523 2026] [core:error] [pid 3295385:tid 3295385] [client 20.104.22.47:11931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:33.300549 2026] [core:error] [pid 3295385:tid 3295385] [client 20.104.22.47:11931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:33.513910 2026] [security2:error] [pid 3295391:tid 3295391] [client 43.130.174.37:46550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chrisdyble.com"] [uri "/"] [unique_id "amtGfYVQuUz9jFNWmOsuUwAAACg"]
[Thu Jul 30 13:41:33.646486 2026] [authz_core:error] [pid 3281483:tid 3281483] [client 192.36.109.70:60033] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 13:41:33.976138 2026] [lsapi:warn] [pid 3299023:tid 3299023] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:34.685465 2026] [ssl:error] [pid 3281483:tid 3281483] (EAI 2)Name or service not known: [client 144.76.19.72:27886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:34.685500 2026] [ssl:error] [pid 3281483:tid 3281483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:34.741093 2026] [ssl:error] [pid 3300333:tid 3300333] (EAI 2)Name or service not known: [client 144.76.19.72:27896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:34.741117 2026] [ssl:error] [pid 3300333:tid 3300333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:35.527626 2026] [lsapi:warn] [pid 3291817:tid 3291817] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:35.892093 2026] [core:error] [pid 3295391:tid 3295391] [client 20.104.22.47:12101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:35.892119 2026] [core:error] [pid 3295391:tid 3295391] [client 20.104.22.47:12101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:36.058798 2026] [security2:error] [pid 3295387:tid 3295387] [client 85.208.96.197:12380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3936.0/prev_next,next.html"] [unique_id "amtGgPfVjZsYSEi_2z-f5wAAACE"]
[Thu Jul 30 13:41:37.697320 2026] [authz_core:error] [pid 3295083:tid 3295083] [client 66.249.66.34:42885] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:41:37.700078 2026] [authz_core:error] [pid 3295083:tid 3295083] [client 66.249.66.34:42885] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:41:37.798776 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:27906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:37.798808 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:37.877602 2026] [ssl:error] [pid 3295387:tid 3295387] (EAI 2)Name or service not known: [client 144.76.19.72:27914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:37.877638 2026] [ssl:error] [pid 3295387:tid 3295387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:38.116630 2026] [core:error] [pid 3298070:tid 3298070] [client 20.104.22.47:11928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:38.116651 2026] [core:error] [pid 3298070:tid 3298070] [client 20.104.22.47:11928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:38.543564 2026] [authz_core:error] [pid 3295185:tid 3295185] [client 20.193.250.173:53194] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 13:41:38.824113 2026] [lsapi:warn] [pid 3282781:tid 3282781] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:39.241437 2026] [core:error] [pid 3286183:tid 3286183] [client 20.104.22.47:11924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:39.241461 2026] [core:error] [pid 3286183:tid 3286183] [client 20.104.22.47:11924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:40.418524 2026] [rewrite:error] [pid 3268116:tid 3268116] [client 74.7.175.184:55554] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/robots.txt
[Thu Jul 30 13:41:40.418687 2026] [rewrite:error] [pid 3268116:tid 3268116] [client 74.7.175.184:55554] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 13:41:40.580536 2026] [core:error] [pid 3298070:tid 3298070] [client 20.104.22.47:12120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:40.580563 2026] [core:error] [pid 3298070:tid 3298070] [client 20.104.22.47:12120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:40.862520 2026] [access_compat:error] [pid 3291752:tid 3291752] [client 202.88.254.53:57320] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:41:40.933514 2026] [ssl:error] [pid 3295386:tid 3295386] (EAI 2)Name or service not known: [client 144.76.19.72:18106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:40.933545 2026] [ssl:error] [pid 3295386:tid 3295386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:40.987237 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:18112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:40.987282 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:42.755612 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 52.238.199.152:31080] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 13:41:43.428160 2026] [core:error] [pid 3281847:tid 3281847] [client 20.104.22.47:12115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:43.428182 2026] [core:error] [pid 3281847:tid 3281847] [client 20.104.22.47:12115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:44.042138 2026] [ssl:error] [pid 3295276:tid 3295276] (EAI 2)Name or service not known: [client 144.76.19.72:18116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:44.042173 2026] [ssl:error] [pid 3295276:tid 3295276] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:44.097527 2026] [ssl:error] [pid 3281847:tid 3281847] (EAI 2)Name or service not known: [client 144.76.19.72:18130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:44.097556 2026] [ssl:error] [pid 3281847:tid 3281847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:44.357175 2026] [ssl:error] [pid 3295185:tid 3295185] (70014)End of file found: [client 216.73.216.199:5037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:44.534160 2026] [lsapi:warn] [pid 3299023:tid 3299023] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:44.622852 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 52.238.199.152:31080] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/ID3/error_log
[Thu Jul 30 13:41:44.959660 2026] [ssl:error] [pid 3295279:tid 3295279] (70014)End of file found: [client 216.73.216.199:41954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:46.236690 2026] [lsapi:warn] [pid 3297874:tid 3297874] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:46.480461 2026] [core:error] [pid 3270949:tid 3270949] [client 20.104.22.47:12104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:46.480497 2026] [core:error] [pid 3270949:tid 3270949] [client 20.104.22.47:12104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:46.876844 2026] [ssl:error] [pid 3298067:tid 3298067] (70014)End of file found: [client 216.73.216.199:51716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:47.149621 2026] [ssl:error] [pid 3297634:tid 3297634] (EAI 2)Name or service not known: [client 144.76.19.72:18132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:47.149649 2026] [ssl:error] [pid 3297634:tid 3297634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:47.202524 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:18146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:47.202557 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:48.394359 2026] [security2:error] [pid 3295387:tid 3295387] [client 85.208.96.203:14420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.5250.html"] [unique_id "amtGjPfVjZsYSEi_2z-f6wAAACE"]
[Thu Jul 30 13:41:48.405990 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 34.227.162.212:38252] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/09/wedding2.jpg
[Thu Jul 30 13:41:48.406113 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 34.227.162.212:38252] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:41:48.845939 2026] [authz_core:error] [pid 3270948:tid 3270948] [client 66.249.66.33:60255] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:41:48.848632 2026] [authz_core:error] [pid 3270948:tid 3270948] [client 66.249.66.33:60255] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:41:49.496051 2026] [lsapi:warn] [pid 3298209:tid 3298209] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:49.677204 2026] [core:error] [pid 3298069:tid 3298069] [client 20.104.22.47:56425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:49.677227 2026] [core:error] [pid 3298069:tid 3298069] [client 20.104.22.47:56425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:49.851803 2026] [authz_core:error] [pid 3255508:tid 3255508] [client 66.249.66.33:54095] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:41:49.854492 2026] [authz_core:error] [pid 3255508:tid 3255508] [client 66.249.66.33:54095] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:41:50.281486 2026] [ssl:error] [pid 3298069:tid 3298069] (EAI 2)Name or service not known: [client 144.76.19.72:28482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:50.281531 2026] [ssl:error] [pid 3298069:tid 3298069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:50.337715 2026] [ssl:error] [pid 3281483:tid 3281483] (EAI 2)Name or service not known: [client 144.76.19.72:28488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:50.337746 2026] [ssl:error] [pid 3281483:tid 3281483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:50.992320 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 52.238.199.152:31080] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-admin/includes/error_log
[Thu Jul 30 13:41:52.146083 2026] [ssl:error] [pid 3272997:tid 3272997] (70014)End of file found: [client 216.73.216.199:31843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:52.214717 2026] [authz_core:error] [pid 3268114:tid 3268114] [client 20.193.250.173:54451] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 13:41:52.442435 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 52.238.199.152:31080] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/error_log
[Thu Jul 30 13:41:53.156922 2026] [core:error] [pid 3285998:tid 3285998] [client 20.104.22.47:56391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:53.156950 2026] [core:error] [pid 3285998:tid 3285998] [client 20.104.22.47:56391] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:41:53.394646 2026] [ssl:error] [pid 3295083:tid 3295083] (EAI 2)Name or service not known: [client 144.76.19.72:28500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:53.394676 2026] [ssl:error] [pid 3295083:tid 3295083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:53.448126 2026] [ssl:error] [pid 3270948:tid 3270948] (EAI 2)Name or service not known: [client 144.76.19.72:28510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:53.448152 2026] [ssl:error] [pid 3270948:tid 3270948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:54.451543 2026] [access_compat:error] [pid 3295184:tid 3295184] [client 202.88.254.53:57878] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:41:55.101561 2026] [lsapi:warn] [pid 3290270:tid 3290270] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:55.407011 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 52.238.199.152:31080] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/PHPMailer/error_log
[Thu Jul 30 13:41:55.633971 2026] [ssl:error] [pid 3291816:tid 3291816] (70014)End of file found: [client 216.73.216.199:63324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:41:56.501441 2026] [ssl:error] [pid 3295279:tid 3295279] (EAI 2)Name or service not known: [client 144.76.19.72:28514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:56.501469 2026] [ssl:error] [pid 3295279:tid 3295279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:56.556509 2026] [ssl:error] [pid 3270948:tid 3270948] (EAI 2)Name or service not known: [client 144.76.19.72:28526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:56.556545 2026] [ssl:error] [pid 3270948:tid 3270948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:56.947204 2026] [lsapi:warn] [pid 3290270:tid 3290270] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:41:58.941836 2026] [core:error] [pid 3295280:tid 3295280] (13)Permission denied: [client 216.73.216.199:27388] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS2/custom_divisor
[Thu Jul 30 13:41:59.611297 2026] [ssl:error] [pid 3298070:tid 3298070] (EAI 2)Name or service not known: [client 144.76.19.72:59420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:59.611325 2026] [ssl:error] [pid 3298070:tid 3298070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:59.666005 2026] [ssl:error] [pid 3290270:tid 3290270] (EAI 2)Name or service not known: [client 144.76.19.72:59436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:41:59.666034 2026] [ssl:error] [pid 3290270:tid 3290270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:41:59.845045 2026] [core:error] [pid 3295280:tid 3295280] (13)Permission denied: [client 216.73.216.199:27388] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS2/custom_divisor
[Thu Jul 30 13:42:00.087260 2026] [lsapi:warn] [pid 3264151:tid 3264151] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:00.601614 2026] [access_compat:error] [pid 3272997:tid 3272997] [client 202.88.254.53:58160] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:42:01.124345 2026] [security2:error] [pid 3298069:tid 3298069] [client 124.221.140.98:36262] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "amtGmYL0B502BoU10yqAOwAAACk"]
[Thu Jul 30 13:42:01.349907 2026] [ssl:error] [pid 3295280:tid 3295280] (70014)End of file found: [client 216.73.216.199:27388] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:01.588194 2026] [security2:error] [pid 3285998:tid 3285998] [client 51.68.111.202:28071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amtGmd8JIiWQ0gJQo-CqdAAAAAE"]
[Thu Jul 30 13:42:01.665580 2026] [security2:error] [pid 3298067:tid 3298067] [client 85.208.96.196:27010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8036.0.html"] [unique_id "amtGmbQvUrVHsK-Ms8kcRQAAACQ"]
[Thu Jul 30 13:42:01.705144 2026] [lsapi:warn] [pid 3298069:tid 3298069] [client 124.221.140.98:36262] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:42:01.757362 2026] [security2:error] [pid 3264151:tid 3264151] [client 51.68.111.202:11059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtGmR2PRcaaqGyO9eUcswAAAD8"]
[Thu Jul 30 13:42:01.848678 2026] [ssl:error] [pid 3286183:tid 3286183] (70014)End of file found: [client 216.73.216.199:32849] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:01.856694 2026] [security2:error] [pid 3290910:tid 3290910] [client 51.68.111.202:19751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amtGmQXpsy0CaLCoLm5SrwAAABU"]
[Thu Jul 30 13:42:02.525449 2026] [security2:error] [pid 3291816:tid 3291816] [client 51.68.111.202:17899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amtGmkbO5q1r0bfLVueuMgAAAAo"]
[Thu Jul 30 13:42:02.554600 2026] [core:error] [pid 3278391:tid 3278391] (13)Permission denied: [client 216.73.216.199:33811] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/cpu/devices/cpu4/driver/uevent
[Thu Jul 30 13:42:02.598216 2026] [security2:error] [pid 3297976:tid 3297976] [client 85.208.96.197:21602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/famous-leo-woman-pisces-man-couples"] [unique_id "amtGmj63C0EVtPHvpWGESQAAAA8"]
[Thu Jul 30 13:42:02.727215 2026] [ssl:error] [pid 3298069:tid 3298069] (EAI 2)Name or service not known: [client 144.76.19.72:59448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:02.727245 2026] [ssl:error] [pid 3298069:tid 3298069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:02.784522 2026] [ssl:error] [pid 3282687:tid 3282687] (EAI 2)Name or service not known: [client 144.76.19.72:59464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:02.784552 2026] [ssl:error] [pid 3282687:tid 3282687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:02.855502 2026] [ssl:error] [pid 3278391:tid 3278391] (70014)End of file found: [client 216.73.216.199:33811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:03.173531 2026] [core:error] [pid 3297976:tid 3297976] [client 20.104.22.47:11910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:03.173564 2026] [core:error] [pid 3297976:tid 3297976] [client 20.104.22.47:11910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:03.601881 2026] [security2:error] [pid 3270949:tid 3270949] [client 43.133.196.7:17725] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGm2tQOl6yOcXxAVMxmwAAADU"]
[Thu Jul 30 13:42:03.601926 2026] [security2:error] [pid 3270949:tid 3270949] [client 43.133.196.7:17725] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGm2tQOl6yOcXxAVMxmwAAADU"]
[Thu Jul 30 13:42:03.602152 2026] [security2:error] [pid 3270949:tid 3270949] [client 43.133.196.7:17725] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGm2tQOl6yOcXxAVMxmwAAADU"]
[Thu Jul 30 13:42:05.691465 2026] [lsapi:warn] [pid 3304068:tid 3304068] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:05.841300 2026] [ssl:error] [pid 3304073:tid 3304073] (EAI 2)Name or service not known: [client 144.76.19.72:59480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:05.841343 2026] [ssl:error] [pid 3304073:tid 3304073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:05.894592 2026] [ssl:error] [pid 3264151:tid 3264151] (EAI 2)Name or service not known: [client 144.76.19.72:59494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:05.894628 2026] [ssl:error] [pid 3264151:tid 3264151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:06.948054 2026] [security2:error] [pid 3300453:tid 3300453] [client 85.208.96.200:31044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/robots.txt"] [unique_id "amtGnh06o72BnO9Ls_1W5QAAABw"]
[Thu Jul 30 13:42:07.357827 2026] [access_compat:error] [pid 3304070:tid 3304070] [client 202.88.254.53:58440] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:42:07.365160 2026] [security2:error] [pid 3300453:tid 3300453] [client 185.191.171.5:10706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/images.html"] [unique_id "amtGnx06o72BnO9Ls_1W5gAAABw"]
[Thu Jul 30 13:42:07.553397 2026] [lsapi:warn] [pid 3303852:tid 3303852] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:08.154970 2026] [core:error] [pid 3304068:tid 3304068] [client 20.104.22.47:11915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:08.154996 2026] [core:error] [pid 3304068:tid 3304068] [client 20.104.22.47:11915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:08.426618 2026] [security2:error] [pid 3300453:tid 3300453] [client 101.47.25.40:43163] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGoB06o72BnO9Ls_1W5wAAABw"]
[Thu Jul 30 13:42:08.426667 2026] [security2:error] [pid 3300453:tid 3300453] [client 101.47.25.40:43163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGoB06o72BnO9Ls_1W5wAAABw"]
[Thu Jul 30 13:42:08.426930 2026] [security2:error] [pid 3300453:tid 3300453] [client 101.47.25.40:43163] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGoB06o72BnO9Ls_1W5wAAABw"]
[Thu Jul 30 13:42:08.881381 2026] [ssl:error] [pid 3290270:tid 3290270] (70014)End of file found: [client 216.73.216.199:5582] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:08.951723 2026] [ssl:error] [pid 3303852:tid 3303852] (EAI 2)Name or service not known: [client 144.76.19.72:59506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:08.951757 2026] [ssl:error] [pid 3303852:tid 3303852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:09.007768 2026] [ssl:error] [pid 3303956:tid 3303956] (EAI 2)Name or service not known: [client 144.76.19.72:59514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:09.007813 2026] [ssl:error] [pid 3303956:tid 3303956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:09.602252 2026] [authz_core:error] [pid 3295280:tid 3295280] [client 52.238.199.152:53120] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/IXR/error_log
[Thu Jul 30 13:42:10.294463 2026] [authz_core:error] [pid 3298209:tid 3298209] [client 20.193.250.173:63107] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 13:42:10.688311 2026] [core:error] [pid 3291816:tid 3291816] (13)Permission denied: [client 216.73.216.199:54604] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:65/iomem_base
[Thu Jul 30 13:42:10.728624 2026] [lsapi:warn] [pid 3278391:tid 3278391] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:11.284963 2026] [ssl:error] [pid 3291816:tid 3291816] (70014)End of file found: [client 216.73.216.199:54604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:12.101191 2026] [ssl:error] [pid 3303955:tid 3303955] (EAI 2)Name or service not known: [client 144.76.19.72:32792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:12.101223 2026] [ssl:error] [pid 3303955:tid 3303955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:12.155006 2026] [ssl:error] [pid 3281483:tid 3281483] (EAI 2)Name or service not known: [client 144.76.19.72:32800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:12.155032 2026] [ssl:error] [pid 3281483:tid 3281483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:12.842433 2026] [security2:error] [pid 3303956:tid 3303956] [client 101.47.25.40:53787] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGpO4u26WsfQjcwLKiwQAAAB4"]
[Thu Jul 30 13:42:12.842487 2026] [security2:error] [pid 3303956:tid 3303956] [client 101.47.25.40:53787] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtGpO4u26WsfQjcwLKiwQAAAB4"]
[Thu Jul 30 13:42:12.842746 2026] [security2:error] [pid 3303956:tid 3303956] [client 101.47.25.40:53787] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtGpO4u26WsfQjcwLKiwQAAAB4"]
[Thu Jul 30 13:42:13.095588 2026] [ssl:error] [pid 3255508:tid 3255508] (70014)End of file found: [client 216.73.216.199:5294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:13.415753 2026] [access_compat:error] [pid 3291817:tid 3291817] [client 202.88.254.53:58727] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:42:13.980673 2026] [core:error] [pid 3303955:tid 3303955] [client 20.104.22.47:12137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:13.980699 2026] [core:error] [pid 3303955:tid 3303955] [client 20.104.22.47:12137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:14.266707 2026] [ssl:error] [pid 3305067:tid 3305067] (70014)End of file found: [client 216.73.216.199:25098] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:14.732282 2026] [access_compat:error] [pid 3298068:tid 3298068] [client 172.202.95.21:37970] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:42:15.258507 2026] [ssl:error] [pid 3295184:tid 3295184] (EAI 2)Name or service not known: [client 144.76.19.72:32812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:15.258533 2026] [ssl:error] [pid 3295184:tid 3295184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:15.311497 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:32824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:15.311525 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:15.563851 2026] [ssl:error] [pid 3295185:tid 3295185] (70014)End of file found: [client 216.73.216.199:61097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:16.292223 2026] [lsapi:warn] [pid 3295386:tid 3295386] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:17.071257 2026] [ssl:error] [pid 3285998:tid 3285998] (70014)End of file found: [client 216.73.216.199:29922] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:17.726834 2026] [authz_core:error] [pid 3268114:tid 3268114] [client 20.193.250.173:50811] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 13:42:18.163203 2026] [lsapi:warn] [pid 3295280:tid 3295280] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:18.369531 2026] [ssl:error] [pid 3264151:tid 3264151] (EAI 2)Name or service not known: [client 144.76.19.72:32836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:18.369561 2026] [ssl:error] [pid 3264151:tid 3264151] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:18.425615 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:32850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:18.425657 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:19.378784 2026] [access_compat:error] [pid 3264151:tid 3264151] [client 202.88.254.53:59003] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:42:19.531871 2026] [security2:error] [pid 3304070:tid 3304070] [client 43.157.20.63:56538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.abc-dyslexia.com"] [uri "/"] [unique_id "amtGqyrPoBogVNOnwjHsmAAAACU"]
[Thu Jul 30 13:42:19.674042 2026] [ssl:error] [pid 3278391:tid 3278391] (70014)End of file found: [client 216.73.216.199:20106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:42:19.836356 2026] [access_compat:error] [pid 3295387:tid 3295387] [client 45.158.164.139:38150] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:42:20.294458 2026] [security2:error] [pid 3282781:tid 3282781] [client 20.171.55.167:9139] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thelambproductions.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtGrFRRbCmegJen0Kvi_gAAADA"]
[Thu Jul 30 13:42:20.294681 2026] [security2:error] [pid 3282781:tid 3282781] [client 20.171.55.167:9139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thelambproductions.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtGrFRRbCmegJen0Kvi_gAAADA"]
[Thu Jul 30 13:42:20.294919 2026] [security2:error] [pid 3282781:tid 3282781] [client 20.171.55.167:9139] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thelambproductions.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtGrFRRbCmegJen0Kvi_gAAADA"]
[Thu Jul 30 13:42:21.438028 2026] [lsapi:warn] [pid 3305826:tid 3305826] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:21.477661 2026] [ssl:error] [pid 3295387:tid 3295387] (EAI 2)Name or service not known: [client 144.76.19.72:64952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:21.477699 2026] [ssl:error] [pid 3295387:tid 3295387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:21.529155 2026] [ssl:error] [pid 3290270:tid 3290270] (EAI 2)Name or service not known: [client 144.76.19.72:64958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:21.529183 2026] [ssl:error] [pid 3290270:tid 3290270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:24.617809 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:64970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:24.617855 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:24.672502 2026] [ssl:error] [pid 3295391:tid 3295391] (EAI 2)Name or service not known: [client 144.76.19.72:64980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:24.672529 2026] [ssl:error] [pid 3295391:tid 3295391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:26.563719 2026] [cgi:error] [pid 3286100:tid 3286100] [client 20.9.63.139:5109] AH02812: stderr from /home/davidebell/public_html/bashforthbell.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:42:26.848862 2026] [lsapi:warn] [pid 3305941:tid 3305941] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:27.727630 2026] [ssl:error] [pid 3291817:tid 3291817] (EAI 2)Name or service not known: [client 144.76.19.72:64996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:27.727660 2026] [ssl:error] [pid 3291817:tid 3291817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:27.783156 2026] [ssl:error] [pid 3298209:tid 3298209] (EAI 2)Name or service not known: [client 144.76.19.72:65012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:27.783193 2026] [ssl:error] [pid 3298209:tid 3298209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:28.065494 2026] [authz_core:error] [pid 3305939:tid 3305939] [client 216.73.216.199:18220] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 13:42:28.826626 2026] [lsapi:warn] [pid 3305941:tid 3305941] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:30.624735 2026] [access_compat:error] [pid 3291816:tid 3291816] [client 202.88.254.53:59554] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:42:30.840546 2026] [ssl:error] [pid 3255508:tid 3255508] (EAI 2)Name or service not known: [client 144.76.19.72:49558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:30.840575 2026] [ssl:error] [pid 3255508:tid 3255508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:30.898604 2026] [ssl:error] [pid 3305941:tid 3305941] (EAI 2)Name or service not known: [client 144.76.19.72:49572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:30.898639 2026] [ssl:error] [pid 3305941:tid 3305941] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:31.016825 2026] [core:error] [pid 3303129:tid 3303129] [client 66.249.66.8:58277] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:31.016874 2026] [core:error] [pid 3303129:tid 3303129] [client 66.249.66.8:58277] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:31.214228 2026] [core:error] [pid 3258907:tid 3258907] [client 20.104.22.47:56428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:31.214260 2026] [core:error] [pid 3258907:tid 3258907] [client 20.104.22.47:56428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:31.641117 2026] [authz_core:error] [pid 3286100:tid 3286100] [client 20.9.63.139:5109] AH01630: client denied by server configuration: /home/davidebell/public_html/bashforthbell.co.uk/php.ini
[Thu Jul 30 13:42:31.977421 2026] [lsapi:warn] [pid 3255508:tid 3255508] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:33.693622 2026] [core:error] [pid 3298069:tid 3298069] [client 20.104.22.47:12104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:33.693646 2026] [core:error] [pid 3298069:tid 3298069] [client 20.104.22.47:12104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:33.956417 2026] [ssl:error] [pid 3305826:tid 3305826] (EAI 2)Name or service not known: [client 144.76.19.72:49576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:33.956446 2026] [ssl:error] [pid 3305826:tid 3305826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:34.013643 2026] [ssl:error] [pid 3306061:tid 3306061] (EAI 2)Name or service not known: [client 144.76.19.72:49592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:34.013682 2026] [ssl:error] [pid 3306061:tid 3306061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:34.839320 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 66.249.66.33:40325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:42:34.841970 2026] [authz_core:error] [pid 3288091:tid 3288091] [client 66.249.66.33:40325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:42:35.884616 2026] [core:error] [pid 3305711:tid 3305711] [client 20.104.22.47:56384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:35.884644 2026] [core:error] [pid 3305711:tid 3305711] [client 20.104.22.47:56384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:37.066532 2026] [ssl:error] [pid 3306061:tid 3306061] (EAI 2)Name or service not known: [client 144.76.19.72:49598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:37.066567 2026] [ssl:error] [pid 3306061:tid 3306061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:37.123277 2026] [ssl:error] [pid 3291816:tid 3291816] (EAI 2)Name or service not known: [client 144.76.19.72:49606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:37.123302 2026] [ssl:error] [pid 3291816:tid 3291816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:37.431884 2026] [lsapi:warn] [pid 3304073:tid 3304073] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:38.446134 2026] [security2:error] [pid 3306063:tid 3306063] [client 45.148.10.67:60832] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.git/config"] [unique_id "amtGvrJSri_pHFUJ-YsNzQAAAEA"]
[Thu Jul 30 13:42:38.446312 2026] [security2:error] [pid 3306063:tid 3306063] [client 45.148.10.67:60832] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.git/config"] [unique_id "amtGvrJSri_pHFUJ-YsNzQAAAEA"]
[Thu Jul 30 13:42:38.446506 2026] [security2:error] [pid 3306063:tid 3306063] [client 45.148.10.67:60832] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.git/config"] [unique_id "amtGvrJSri_pHFUJ-YsNzQAAAEA"]
[Thu Jul 30 13:42:39.537284 2026] [lsapi:warn] [pid 3305939:tid 3305939] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:39.954222 2026] [cgi:error] [pid 3255508:tid 3255508] [client 45.148.10.67:43844] AH02812: stderr from /home/quantumc/public_html/quantum.com.mt/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:42:40.176406 2026] [ssl:error] [pid 3304070:tid 3304070] (EAI 2)Name or service not known: [client 144.76.19.72:27102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:40.176438 2026] [ssl:error] [pid 3304070:tid 3304070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:40.228560 2026] [core:error] [pid 3282781:tid 3282781] [client 20.104.22.47:12129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:40.228603 2026] [core:error] [pid 3282781:tid 3282781] [client 20.104.22.47:12129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:40.229736 2026] [ssl:error] [pid 3305711:tid 3305711] (EAI 2)Name or service not known: [client 144.76.19.72:27108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:40.229761 2026] [ssl:error] [pid 3305711:tid 3305711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:41.493858 2026] [security2:error] [pid 3282781:tid 3282781] [client 114.119.142.20:60495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~103"] [unique_id "amtGwVRRbCmegJen0KvjDgAAADA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E16-12-2019
[Thu Jul 30 13:42:41.578586 2026] [access_compat:error] [pid 3305939:tid 3305939] [client 202.88.254.53:60100] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:42:42.159850 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env"] [unique_id "amtGwvu99sbUiIwQfTwg4wAAAAs"]
[Thu Jul 30 13:42:42.160018 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env"] [unique_id "amtGwvu99sbUiIwQfTwg4wAAAAs"]
[Thu Jul 30 13:42:42.160241 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env"] [unique_id "amtGwvu99sbUiIwQfTwg4wAAAAs"]
[Thu Jul 30 13:42:42.298013 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/portal/.env"] [unique_id "amtGwvu99sbUiIwQfTwg5gAAAAs"]
[Thu Jul 30 13:42:42.298236 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/portal/.env"] [unique_id "amtGwvu99sbUiIwQfTwg5gAAAAs"]
[Thu Jul 30 13:42:42.298469 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/portal/.env"] [unique_id "amtGwvu99sbUiIwQfTwg5gAAAAs"]
[Thu Jul 30 13:42:42.349210 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/env/.env"] [unique_id "amtGwvu99sbUiIwQfTwg5wAAAAs"]
[Thu Jul 30 13:42:42.349393 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/env/.env"] [unique_id "amtGwvu99sbUiIwQfTwg5wAAAAs"]
[Thu Jul 30 13:42:42.349645 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/env/.env"] [unique_id "amtGwvu99sbUiIwQfTwg5wAAAAs"]
[Thu Jul 30 13:42:42.401089 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/api/.env"] [unique_id "amtGwvu99sbUiIwQfTwg6AAAAAs"]
[Thu Jul 30 13:42:42.401277 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/api/.env"] [unique_id "amtGwvu99sbUiIwQfTwg6AAAAAs"]
[Thu Jul 30 13:42:42.401531 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/api/.env"] [unique_id "amtGwvu99sbUiIwQfTwg6AAAAAs"]
[Thu Jul 30 13:42:42.450695 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/app/.env"] [unique_id "amtGwvu99sbUiIwQfTwg6QAAAAs"]
[Thu Jul 30 13:42:42.450882 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/app/.env"] [unique_id "amtGwvu99sbUiIwQfTwg6QAAAAs"]
[Thu Jul 30 13:42:42.451117 2026] [security2:error] [pid 3305711:tid 3305711] [client 45.148.10.67:43870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/app/.env"] [unique_id "amtGwvu99sbUiIwQfTwg6QAAAAs"]
[Thu Jul 30 13:42:42.576982 2026] [lsapi:warn] [pid 3282781:tid 3282781] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:42.814255 2026] [security2:error] [pid 3298069:tid 3298069] [client 114.119.142.20:60501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~103"] [unique_id "amtGwoL0B502BoU10yqATgAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E16-12-2019
[Thu Jul 30 13:42:43.288419 2026] [ssl:error] [pid 3295083:tid 3295083] (EAI 2)Name or service not known: [client 144.76.19.72:27110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:43.288459 2026] [ssl:error] [pid 3295083:tid 3295083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:43.343914 2026] [ssl:error] [pid 3305940:tid 3305940] (EAI 2)Name or service not known: [client 144.76.19.72:27118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:43.343950 2026] [ssl:error] [pid 3305940:tid 3305940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:43.837655 2026] [core:error] [pid 3295083:tid 3295083] [client 20.104.22.47:12101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:43.837677 2026] [core:error] [pid 3295083:tid 3295083] [client 20.104.22.47:12101] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:44.157197 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/dev/.env"] [unique_id "amtGxIoElQgxeIv3zqEyCAAAAD0"]
[Thu Jul 30 13:42:44.157383 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/dev/.env"] [unique_id "amtGxIoElQgxeIv3zqEyCAAAAD0"]
[Thu Jul 30 13:42:44.157609 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/dev/.env"] [unique_id "amtGxIoElQgxeIv3zqEyCAAAAD0"]
[Thu Jul 30 13:42:44.189841 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/new/.env"] [unique_id "amtGxIoElQgxeIv3zqEyCQAAAD0"]
[Thu Jul 30 13:42:44.190020 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/new/.env"] [unique_id "amtGxIoElQgxeIv3zqEyCQAAAD0"]
[Thu Jul 30 13:42:44.190255 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/new/.env"] [unique_id "amtGxIoElQgxeIv3zqEyCQAAAD0"]
[Thu Jul 30 13:42:44.227158 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/new/.env.local"] [unique_id "amtGxIoElQgxeIv3zqEyCgAAAD0"]
[Thu Jul 30 13:42:44.227329 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/new/.env.local"] [unique_id "amtGxIoElQgxeIv3zqEyCgAAAD0"]
[Thu Jul 30 13:42:44.227544 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/new/.env.local"] [unique_id "amtGxIoElQgxeIv3zqEyCgAAAD0"]
[Thu Jul 30 13:42:44.249941 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/new/.env.production"] [unique_id "amtGxIoElQgxeIv3zqEyCwAAAD0"]
[Thu Jul 30 13:42:44.250147 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/new/.env.production"] [unique_id "amtGxIoElQgxeIv3zqEyCwAAAD0"]
[Thu Jul 30 13:42:44.250389 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/new/.env.production"] [unique_id "amtGxIoElQgxeIv3zqEyCwAAAD0"]
[Thu Jul 30 13:42:44.288103 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/new/.env.staging"] [unique_id "amtGxIoElQgxeIv3zqEyDAAAAD0"]
[Thu Jul 30 13:42:44.288293 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/new/.env.staging"] [unique_id "amtGxIoElQgxeIv3zqEyDAAAAD0"]
[Thu Jul 30 13:42:44.288522 2026] [security2:error] [pid 3306061:tid 3306061] [client 45.148.10.67:43906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/new/.env.staging"] [unique_id "amtGxIoElQgxeIv3zqEyDAAAAD0"]
[Thu Jul 30 13:42:46.396729 2026] [ssl:error] [pid 3298067:tid 3298067] (EAI 2)Name or service not known: [client 144.76.19.72:27122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:46.396764 2026] [ssl:error] [pid 3298067:tid 3298067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:46.450138 2026] [ssl:error] [pid 3306060:tid 3306060] (EAI 2)Name or service not known: [client 144.76.19.72:27130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:46.450174 2026] [ssl:error] [pid 3306060:tid 3306060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:47.264938 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/awstats/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bQAAABQ"]
[Thu Jul 30 13:42:47.265148 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/awstats/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bQAAABQ"]
[Thu Jul 30 13:42:47.265367 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/awstats/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bQAAABQ"]
[Thu Jul 30 13:42:47.295307 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/conf/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bgAAABQ"]
[Thu Jul 30 13:42:47.295448 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/conf/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bgAAABQ"]
[Thu Jul 30 13:42:47.295650 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/conf/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bgAAABQ"]
[Thu Jul 30 13:42:47.330583 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/cron/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bwAAABQ"]
[Thu Jul 30 13:42:47.330764 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/cron/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bwAAABQ"]
[Thu Jul 30 13:42:47.330990 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/cron/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6bwAAABQ"]
[Thu Jul 30 13:42:47.348553 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/www/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cAAAABQ"]
[Thu Jul 30 13:42:47.348727 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/www/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cAAAABQ"]
[Thu Jul 30 13:42:47.348936 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/www/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cAAAABQ"]
[Thu Jul 30 13:42:47.370240 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/docker/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cQAAABQ"]
[Thu Jul 30 13:42:47.370422 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/docker/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cQAAABQ"]
[Thu Jul 30 13:42:47.370673 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/docker/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cQAAABQ"]
[Thu Jul 30 13:42:47.393311 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/docker/app/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cgAAABQ"]
[Thu Jul 30 13:42:47.393502 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/docker/app/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cgAAABQ"]
[Thu Jul 30 13:42:47.393706 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/docker/app/.env"] [unique_id "amtGxyT1HNqeB6ZU4sg6cgAAABQ"]
[Thu Jul 30 13:42:47.425920 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.quantum.com.mt"] [uri "/env.backup"] [unique_id "amtGxyT1HNqeB6ZU4sg6cwAAABQ"]
[Thu Jul 30 13:42:47.426197 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/env.backup"] [unique_id "amtGxyT1HNqeB6ZU4sg6cwAAABQ"]
[Thu Jul 30 13:42:47.426444 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:52582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/env.backup"] [unique_id "amtGxyT1HNqeB6ZU4sg6cwAAABQ"]
[Thu Jul 30 13:42:48.023300 2026] [lsapi:warn] [pid 3290910:tid 3290910] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:48.139034 2026] [core:error] [pid 3298067:tid 3298067] [client 20.104.22.47:56399] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:48.139058 2026] [core:error] [pid 3298067:tid 3298067] [client 20.104.22.47:56399] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:49.507222 2026] [ssl:error] [pid 3290270:tid 3290270] (EAI 2)Name or service not known: [client 144.76.19.72:27132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:49.507261 2026] [ssl:error] [pid 3290270:tid 3290270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:49.572920 2026] [ssl:error] [pid 3298067:tid 3298067] (EAI 2)Name or service not known: [client 144.76.19.72:18218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:49.572968 2026] [ssl:error] [pid 3298067:tid 3298067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:49.911641 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.vscode/.env"] [unique_id "amtGyXznmNgzRnlUprjHawAAAB8"]
[Thu Jul 30 13:42:49.911822 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.vscode/.env"] [unique_id "amtGyXznmNgzRnlUprjHawAAAB8"]
[Thu Jul 30 13:42:49.912077 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.vscode/.env"] [unique_id "amtGyXznmNgzRnlUprjHawAAAB8"]
[Thu Jul 30 13:42:49.953441 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/js/.env"] [unique_id "amtGyXznmNgzRnlUprjHbAAAAB8"]
[Thu Jul 30 13:42:49.953640 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/js/.env"] [unique_id "amtGyXznmNgzRnlUprjHbAAAAB8"]
[Thu Jul 30 13:42:49.953852 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/js/.env"] [unique_id "amtGyXznmNgzRnlUprjHbAAAAB8"]
[Thu Jul 30 13:42:49.982880 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/laravel/.env"] [unique_id "amtGyXznmNgzRnlUprjHbQAAAB8"]
[Thu Jul 30 13:42:49.983095 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/laravel/.env"] [unique_id "amtGyXznmNgzRnlUprjHbQAAAB8"]
[Thu Jul 30 13:42:49.983311 2026] [security2:error] [pid 3295385:tid 3295385] [client 45.148.10.67:52584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/laravel/.env"] [unique_id "amtGyXznmNgzRnlUprjHbQAAAB8"]
[Thu Jul 30 13:42:50.200688 2026] [lsapi:warn] [pid 3290910:tid 3290910] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:51.796532 2026] [access_compat:error] [pid 3266260:tid 3266260] [client 202.88.254.53:60647] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:42:52.581618 2026] [core:error] [pid 3305941:tid 3305941] [client 20.104.22.47:12126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:52.581640 2026] [core:error] [pid 3305941:tid 3305941] [client 20.104.22.47:12126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:52.643710 2026] [ssl:error] [pid 3288091:tid 3288091] (EAI 2)Name or service not known: [client 144.76.19.72:18234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:52.643733 2026] [ssl:error] [pid 3288091:tid 3288091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:52.696439 2026] [ssl:error] [pid 3290910:tid 3290910] (EAI 2)Name or service not known: [client 144.76.19.72:18244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:52.696469 2026] [ssl:error] [pid 3290910:tid 3290910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:52.795964 2026] [security2:error] [pid 3305067:tid 3305067] [client 45.148.10.67:52586] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/laravel/core/.env"] [unique_id "amtGzBj4hoTXzMdU0AzrJwAAAC4"]
[Thu Jul 30 13:42:52.796166 2026] [security2:error] [pid 3305067:tid 3305067] [client 45.148.10.67:52586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/laravel/core/.env"] [unique_id "amtGzBj4hoTXzMdU0AzrJwAAAC4"]
[Thu Jul 30 13:42:52.796374 2026] [security2:error] [pid 3305067:tid 3305067] [client 45.148.10.67:52586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/laravel/core/.env"] [unique_id "amtGzBj4hoTXzMdU0AzrJwAAAC4"]
[Thu Jul 30 13:42:52.817038 2026] [security2:error] [pid 3305067:tid 3305067] [client 45.148.10.67:52586] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/mail/.env"] [unique_id "amtGzBj4hoTXzMdU0AzrKAAAAC4"]
[Thu Jul 30 13:42:52.817233 2026] [security2:error] [pid 3305067:tid 3305067] [client 45.148.10.67:52586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/mail/.env"] [unique_id "amtGzBj4hoTXzMdU0AzrKAAAAC4"]
[Thu Jul 30 13:42:52.817452 2026] [security2:error] [pid 3305067:tid 3305067] [client 45.148.10.67:52586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/mail/.env"] [unique_id "amtGzBj4hoTXzMdU0AzrKAAAAC4"]
[Thu Jul 30 13:42:53.192681 2026] [lsapi:warn] [pid 3303852:tid 3303852] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:53.368876 2026] [security2:error] [pid 3304070:tid 3304070] [client 43.135.142.7:42598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtGzSrPoBogVNOnwjHsogAAACU"]
[Thu Jul 30 13:42:54.338896 2026] [security2:error] [pid 3305825:tid 3305825] [client 45.148.10.67:52588] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/mailer/.env"] [unique_id "amtGzt_Gbucd-mMaGcHVMwAAABk"]
[Thu Jul 30 13:42:54.339037 2026] [security2:error] [pid 3305825:tid 3305825] [client 45.148.10.67:52588] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/mailer/.env"] [unique_id "amtGzt_Gbucd-mMaGcHVMwAAABk"]
[Thu Jul 30 13:42:54.339248 2026] [security2:error] [pid 3305825:tid 3305825] [client 45.148.10.67:52588] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/mailer/.env"] [unique_id "amtGzt_Gbucd-mMaGcHVMwAAABk"]
[Thu Jul 30 13:42:54.699903 2026] [access_compat:error] [pid 3306059:tid 3306059] [client 45.158.164.139:51294] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:42:55.205679 2026] [core:error] [pid 3305939:tid 3305939] [client 20.104.22.47:11951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:55.205706 2026] [core:error] [pid 3305939:tid 3305939] [client 20.104.22.47:11951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:55.214011 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/nginx/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dAAAABQ"]
[Thu Jul 30 13:42:55.214192 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/nginx/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dAAAABQ"]
[Thu Jul 30 13:42:55.214388 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/nginx/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dAAAABQ"]
[Thu Jul 30 13:42:55.243255 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/public/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dQAAABQ"]
[Thu Jul 30 13:42:55.243446 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/public/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dQAAABQ"]
[Thu Jul 30 13:42:55.243665 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/public/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dQAAABQ"]
[Thu Jul 30 13:42:55.272960 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/site/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dgAAABQ"]
[Thu Jul 30 13:42:55.273151 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/site/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dgAAABQ"]
[Thu Jul 30 13:42:55.273357 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/site/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dgAAABQ"]
[Thu Jul 30 13:42:55.317417 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/xampp/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dwAAABQ"]
[Thu Jul 30 13:42:55.317597 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/xampp/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dwAAABQ"]
[Thu Jul 30 13:42:55.317785 2026] [security2:error] [pid 3303955:tid 3303955] [client 45.148.10.67:46008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/xampp/.env"] [unique_id "amtGzyT1HNqeB6ZU4sg6dwAAABQ"]
[Thu Jul 30 13:42:55.708250 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/main/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRAAAABM"]
[Thu Jul 30 13:42:55.708441 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/main/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRAAAABM"]
[Thu Jul 30 13:42:55.708677 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/main/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRAAAABM"]
[Thu Jul 30 13:42:55.746588 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/node_modules/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRQAAABM"]
[Thu Jul 30 13:42:55.746767 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/node_modules/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRQAAABM"]
[Thu Jul 30 13:42:55.746958 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/node_modules/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRQAAABM"]
[Thu Jul 30 13:42:55.749766 2026] [ssl:error] [pid 3306061:tid 3306061] (EAI 2)Name or service not known: [client 144.76.19.72:18256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:55.749785 2026] [ssl:error] [pid 3306061:tid 3306061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:55.783016 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/kyc/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRgAAABM"]
[Thu Jul 30 13:42:55.783178 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/kyc/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRgAAABM"]
[Thu Jul 30 13:42:55.783360 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/kyc/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRgAAABM"]
[Thu Jul 30 13:42:55.793519 2026] [access_compat:error] [pid 3298070:tid 3298070] [client 45.158.164.139:48700] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:42:55.804527 2026] [ssl:error] [pid 3306063:tid 3306063] (EAI 2)Name or service not known: [client 144.76.19.72:18264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:55.804562 2026] [ssl:error] [pid 3306063:tid 3306063] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:55.825141 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/admin/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRwAAABM"]
[Thu Jul 30 13:42:55.825315 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/admin/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRwAAABM"]
[Thu Jul 30 13:42:55.825533 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/admin/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvRwAAABM"]
[Thu Jul 30 13:42:55.890140 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/prod/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvSAAAABM"]
[Thu Jul 30 13:42:55.890322 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/prod/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvSAAAABM"]
[Thu Jul 30 13:42:55.890528 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/prod/.env"] [unique_id "amtGz8sJEpUOh-TvG0uvSAAAABM"]
[Thu Jul 30 13:42:55.941781 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env.bak"] [unique_id "amtGz8sJEpUOh-TvG0uvSQAAABM"]
[Thu Jul 30 13:42:55.941919 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env.bak"] [unique_id "amtGz8sJEpUOh-TvG0uvSQAAABM"]
[Thu Jul 30 13:42:55.942129 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env.bak"] [unique_id "amtGz8sJEpUOh-TvG0uvSQAAABM"]
[Thu Jul 30 13:42:56.239403 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/website/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTQAAABM"]
[Thu Jul 30 13:42:56.239599 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/website/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTQAAABM"]
[Thu Jul 30 13:42:56.239814 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/website/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTQAAABM"]
[Thu Jul 30 13:42:56.333012 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/development/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTgAAABM"]
[Thu Jul 30 13:42:56.333224 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/development/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTgAAABM"]
[Thu Jul 30 13:42:56.333431 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/development/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTgAAABM"]
[Thu Jul 30 13:42:56.371221 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/backend/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTwAAABM"]
[Thu Jul 30 13:42:56.371348 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/backend/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTwAAABM"]
[Thu Jul 30 13:42:56.371561 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/backend/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvTwAAABM"]
[Thu Jul 30 13:42:56.436837 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/api/shared/config/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvUAAAABM"]
[Thu Jul 30 13:42:56.437035 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/api/shared/config/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvUAAAABM"]
[Thu Jul 30 13:42:56.437254 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/api/shared/config/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvUAAAABM"]
[Thu Jul 30 13:42:56.518680 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/api/shared/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvUQAAABM"]
[Thu Jul 30 13:42:56.518868 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/api/shared/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvUQAAABM"]
[Thu Jul 30 13:42:56.519093 2026] [security2:error] [pid 3290908:tid 3290908] [client 45.148.10.67:46024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/api/shared/.env"] [unique_id "amtG0MsJEpUOh-TvG0uvUQAAABM"]
[Thu Jul 30 13:42:56.833939 2026] [core:error] [pid 3303852:tid 3303852] [client 20.104.22.47:56412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:56.833966 2026] [core:error] [pid 3303852:tid 3303852] [client 20.104.22.47:56412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:42:56.908927 2026] [security2:error] [pid 3306063:tid 3306063] [client 43.135.142.7:40532] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtG0LJSri_pHFUJ-YsN0gAAAEA"], referer: http://www.apotheekcandidejacobs.be
[Thu Jul 30 13:42:56.967758 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/node/.env_example"] [unique_id "amtG0Gjv4gClld9BntGKQwAAAA4"]
[Thu Jul 30 13:42:56.967887 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/node/.env_example"] [unique_id "amtG0Gjv4gClld9BntGKQwAAAA4"]
[Thu Jul 30 13:42:56.968093 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/node/.env_example"] [unique_id "amtG0Gjv4gClld9BntGKQwAAAA4"]
[Thu Jul 30 13:42:57.482053 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env.production.local"] [unique_id "amtG0Wjv4gClld9BntGKRAAAAA4"]
[Thu Jul 30 13:42:57.482241 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env.production.local"] [unique_id "amtG0Wjv4gClld9BntGKRAAAAA4"]
[Thu Jul 30 13:42:57.482459 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env.production.local"] [unique_id "amtG0Wjv4gClld9BntGKRAAAAA4"]
[Thu Jul 30 13:42:57.695938 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env.local"] [unique_id "amtG0Wjv4gClld9BntGKRQAAAA4"]
[Thu Jul 30 13:42:57.696140 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env.local"] [unique_id "amtG0Wjv4gClld9BntGKRQAAAA4"]
[Thu Jul 30 13:42:57.696360 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env.local"] [unique_id "amtG0Wjv4gClld9BntGKRQAAAA4"]
[Thu Jul 30 13:42:57.775889 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env.example"] [unique_id "amtG0Wjv4gClld9BntGKRgAAAA4"]
[Thu Jul 30 13:42:57.776034 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env.example"] [unique_id "amtG0Wjv4gClld9BntGKRgAAAA4"]
[Thu Jul 30 13:42:57.776266 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env.example"] [unique_id "amtG0Wjv4gClld9BntGKRgAAAA4"]
[Thu Jul 30 13:42:57.890526 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env.stage"] [unique_id "amtG0Wjv4gClld9BntGKRwAAAA4"]
[Thu Jul 30 13:42:57.890708 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env.stage"] [unique_id "amtG0Wjv4gClld9BntGKRwAAAA4"]
[Thu Jul 30 13:42:57.890926 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env.stage"] [unique_id "amtG0Wjv4gClld9BntGKRwAAAA4"]
[Thu Jul 30 13:42:58.117738 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env.old"] [unique_id "amtG0mjv4gClld9BntGKSQAAAA4"]
[Thu Jul 30 13:42:58.117928 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env.old"] [unique_id "amtG0mjv4gClld9BntGKSQAAAA4"]
[Thu Jul 30 13:42:58.118141 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env.old"] [unique_id "amtG0mjv4gClld9BntGKSQAAAA4"]
[Thu Jul 30 13:42:58.210524 2026] [security2:error] [pid 3266260:tid 3266260] [client 85.208.96.207:40388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5931.0.html"] [unique_id "amtG0k7wPfz3XrjZjrs4LAAAACM"]
[Thu Jul 30 13:42:58.222623 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env_sample"] [unique_id "amtG0mjv4gClld9BntGKSgAAAA4"]
[Thu Jul 30 13:42:58.222810 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env_sample"] [unique_id "amtG0mjv4gClld9BntGKSgAAAA4"]
[Thu Jul 30 13:42:58.223027 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env_sample"] [unique_id "amtG0mjv4gClld9BntGKSgAAAA4"]
[Thu Jul 30 13:42:58.509638 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/.env.prod"] [unique_id "amtG0mjv4gClld9BntGKTAAAAA4"]
[Thu Jul 30 13:42:58.509825 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/.env.prod"] [unique_id "amtG0mjv4gClld9BntGKTAAAAA4"]
[Thu Jul 30 13:42:58.510062 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/.env.prod"] [unique_id "amtG0mjv4gClld9BntGKTAAAAA4"]
[Thu Jul 30 13:42:58.628543 2026] [lsapi:warn] [pid 3295083:tid 3295083] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:42:58.659266 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/crm/.env"] [unique_id "amtG0mjv4gClld9BntGKTQAAAA4"]
[Thu Jul 30 13:42:58.659446 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/crm/.env"] [unique_id "amtG0mjv4gClld9BntGKTQAAAA4"]
[Thu Jul 30 13:42:58.659678 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/crm/.env"] [unique_id "amtG0mjv4gClld9BntGKTQAAAA4"]
[Thu Jul 30 13:42:58.876996 2026] [ssl:error] [pid 3295184:tid 3295184] (EAI 2)Name or service not known: [client 144.76.19.72:18266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:58.877042 2026] [ssl:error] [pid 3295184:tid 3295184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:58.933485 2026] [ssl:error] [pid 3272997:tid 3272997] (EAI 2)Name or service not known: [client 144.76.19.72:18274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:42:58.933510 2026] [ssl:error] [pid 3272997:tid 3272997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:42:58.934918 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/local/.env"] [unique_id "amtG0mjv4gClld9BntGKTgAAAA4"]
[Thu Jul 30 13:42:58.935133 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/local/.env"] [unique_id "amtG0mjv4gClld9BntGKTgAAAA4"]
[Thu Jul 30 13:42:58.935349 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/local/.env"] [unique_id "amtG0mjv4gClld9BntGKTgAAAA4"]
[Thu Jul 30 13:42:59.055547 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/core/.env"] [unique_id "amtG02jv4gClld9BntGKTwAAAA4"]
[Thu Jul 30 13:42:59.055733 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/core/.env"] [unique_id "amtG02jv4gClld9BntGKTwAAAA4"]
[Thu Jul 30 13:42:59.055949 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/core/.env"] [unique_id "amtG02jv4gClld9BntGKTwAAAA4"]
[Thu Jul 30 13:42:59.210388 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/apps/.env"] [unique_id "amtG02jv4gClld9BntGKUAAAAA4"]
[Thu Jul 30 13:42:59.210600 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/apps/.env"] [unique_id "amtG02jv4gClld9BntGKUAAAAA4"]
[Thu Jul 30 13:42:59.210828 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:46032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/apps/.env"] [unique_id "amtG02jv4gClld9BntGKUAAAAA4"]
[Thu Jul 30 13:42:59.913669 2026] [security2:error] [pid 3291752:tid 3291752] [client 45.148.10.67:46048] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/application/.env"] [unique_id "amtG00EBhJqf2zLDjnbOrAAAAAA"]
[Thu Jul 30 13:42:59.913855 2026] [security2:error] [pid 3291752:tid 3291752] [client 45.148.10.67:46048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/application/.env"] [unique_id "amtG00EBhJqf2zLDjnbOrAAAAAA"]
[Thu Jul 30 13:42:59.914085 2026] [security2:error] [pid 3291752:tid 3291752] [client 45.148.10.67:46048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/application/.env"] [unique_id "amtG00EBhJqf2zLDjnbOrAAAAAA"]
[Thu Jul 30 13:43:00.350184 2026] [security2:error] [pid 3295184:tid 3295184] [client 45.148.10.67:46054] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/web/.env"] [unique_id "amtG1GizljUtyigOMfYsJwAAAAg"]
[Thu Jul 30 13:43:00.350348 2026] [security2:error] [pid 3295184:tid 3295184] [client 45.148.10.67:46054] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/web/.env"] [unique_id "amtG1GizljUtyigOMfYsJwAAAAg"]
[Thu Jul 30 13:43:00.350559 2026] [security2:error] [pid 3295184:tid 3295184] [client 45.148.10.67:46054] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/web/.env"] [unique_id "amtG1GizljUtyigOMfYsJwAAAAg"]
[Thu Jul 30 13:43:00.531226 2026] [security2:error] [pid 3295184:tid 3295184] [client 45.148.10.67:46054] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/wp-config.php.bak"] [unique_id "amtG1GizljUtyigOMfYsKQAAAAg"]
[Thu Jul 30 13:43:00.531410 2026] [security2:error] [pid 3295184:tid 3295184] [client 45.148.10.67:46054] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/wp-config.php.bak"] [unique_id "amtG1GizljUtyigOMfYsKQAAAAg"]
[Thu Jul 30 13:43:00.531647 2026] [security2:error] [pid 3295184:tid 3295184] [client 45.148.10.67:46054] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/wp-config.php.bak"] [unique_id "amtG1GizljUtyigOMfYsKQAAAAg"]
[Thu Jul 30 13:43:00.881376 2026] [lsapi:warn] [pid 3290910:tid 3290910] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:01.981779 2026] [security2:error] [pid 3303852:tid 3303852] [client 170.106.35.187:56376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanhill.co.uk"] [uri "/"] [unique_id "amtG1WVyR2I7g0VhrHXIzAAAAA0"]
[Thu Jul 30 13:43:01.990112 2026] [ssl:error] [pid 3304072:tid 3304072] (EAI 2)Name or service not known: [client 144.76.19.72:43520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:01.990142 2026] [ssl:error] [pid 3304072:tid 3304072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:02.041998 2026] [ssl:error] [pid 3276728:tid 3276728] (EAI 2)Name or service not known: [client 144.76.19.72:43522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:02.042022 2026] [ssl:error] [pid 3276728:tid 3276728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:02.662456 2026] [access_compat:error] [pid 3298209:tid 3298209] [client 202.88.254.53:61189] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:02.983004 2026] [security2:error] [pid 3302702:tid 3302702] [client 185.191.171.3:64308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/sourdough-jack-copycat"] [unique_id "amtG1heqsYLQ23NcnRnuMQAAAAQ"]
[Thu Jul 30 13:43:03.637364 2026] [security2:error] [pid 3276728:tid 3276728] [client 170.106.35.187:57024] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amtG1zH3uSPICOxJdd_1EQAAABY"], referer: http://jonathanhill.co.uk
[Thu Jul 30 13:43:03.810852 2026] [security2:error] [pid 3291816:tid 3291816] [client 74.7.242.9:39690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns-earth.com"] [uri "/"] [unique_id "amtG10bO5q1r0bfLVueupAAAAAo"]
[Thu Jul 30 13:43:03.858239 2026] [lsapi:warn] [pid 3282781:tid 3282781] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:04.257856 2026] [security2:error] [pid 3305825:tid 3305825] [client 45.148.10.67:46078] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.quantum.com.mt"] [uri "/storage/logs/laravel.log"] [unique_id "amtG2N_Gbucd-mMaGcHVOgAAABk"]
[Thu Jul 30 13:43:04.258135 2026] [security2:error] [pid 3305825:tid 3305825] [client 45.148.10.67:46078] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/storage/logs/laravel.log"] [unique_id "amtG2N_Gbucd-mMaGcHVOgAAABk"]
[Thu Jul 30 13:43:04.258351 2026] [security2:error] [pid 3305825:tid 3305825] [client 45.148.10.67:46078] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/storage/logs/laravel.log"] [unique_id "amtG2N_Gbucd-mMaGcHVOgAAABk"]
[Thu Jul 30 13:43:05.095312 2026] [ssl:error] [pid 3305942:tid 3305942] (EAI 2)Name or service not known: [client 144.76.19.72:43534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:05.095344 2026] [ssl:error] [pid 3305942:tid 3305942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:05.148871 2026] [ssl:error] [pid 3297976:tid 3297976] (EAI 2)Name or service not known: [client 144.76.19.72:43548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:05.148901 2026] [ssl:error] [pid 3297976:tid 3297976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:05.785284 2026] [core:error] [pid 3305067:tid 3305067] [client 20.104.22.47:11920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:05.785309 2026] [core:error] [pid 3305067:tid 3305067] [client 20.104.22.47:11920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:08.001377 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:41796] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/app/config/parameters.yml"] [unique_id "amtG3Gjv4gClld9BntGKVgAAAA4"]
[Thu Jul 30 13:43:08.001576 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:41796] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/app/config/parameters.yml"] [unique_id "amtG3Gjv4gClld9BntGKVgAAAA4"]
[Thu Jul 30 13:43:08.001821 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:41796] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/app/config/parameters.yml"] [unique_id "amtG3Gjv4gClld9BntGKVgAAAA4"]
[Thu Jul 30 13:43:08.062997 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:41796] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/config/parameters.yml"] [unique_id "amtG3Gjv4gClld9BntGKVwAAAA4"]
[Thu Jul 30 13:43:08.063203 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:41796] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/config/parameters.yml"] [unique_id "amtG3Gjv4gClld9BntGKVwAAAA4"]
[Thu Jul 30 13:43:08.063426 2026] [security2:error] [pid 3295185:tid 3295185] [client 45.148.10.67:41796] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/config/parameters.yml"] [unique_id "amtG3Gjv4gClld9BntGKVwAAAA4"]
[Thu Jul 30 13:43:08.204814 2026] [ssl:error] [pid 3276728:tid 3276728] (EAI 2)Name or service not known: [client 144.76.19.72:43564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:08.204841 2026] [ssl:error] [pid 3276728:tid 3276728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:08.260425 2026] [ssl:error] [pid 3306063:tid 3306063] (EAI 2)Name or service not known: [client 144.76.19.72:43570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:08.260450 2026] [ssl:error] [pid 3306063:tid 3306063] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:08.891376 2026] [security2:error] [pid 3268114:tid 3268114] [client 45.148.10.67:41816] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /api/config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.quantum.com.mt"] [uri "/api/config/config.yml"] [unique_id "amtG3B1S3LStCQ9NMFBGdQAAACY"]
[Thu Jul 30 13:43:08.891587 2026] [security2:error] [pid 3268114:tid 3268114] [client 45.148.10.67:41816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.quantum.com.mt"] [uri "/api/config/config.yml"] [unique_id "amtG3B1S3LStCQ9NMFBGdQAAACY"]
[Thu Jul 30 13:43:08.891802 2026] [security2:error] [pid 3268114:tid 3268114] [client 45.148.10.67:41816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.quantum.com.mt"] [uri "/api/config/config.yml"] [unique_id "amtG3B1S3LStCQ9NMFBGdQAAACY"]
[Thu Jul 30 13:43:09.233116 2026] [lsapi:warn] [pid 3306063:tid 3306063] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:09.713323 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/as.php
[Thu Jul 30 13:43:09.713412 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:09.798812 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/k.php
[Thu Jul 30 13:43:09.798865 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:09.884052 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/system_log.php
[Thu Jul 30 13:43:09.884123 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:09.973461 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/x.php
[Thu Jul 30 13:43:09.973525 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.058846 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/autoload_classmap.php
[Thu Jul 30 13:43:10.058902 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.144105 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/hosty.php
[Thu Jul 30 13:43:10.144160 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.229282 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/test1.php
[Thu Jul 30 13:43:10.229330 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.315524 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/zwso.php
[Thu Jul 30 13:43:10.315574 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.400727 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/fpwch.php
[Thu Jul 30 13:43:10.400781 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.488581 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/mini
[Thu Jul 30 13:43:10.488741 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:10.574651 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-blog-header.php
[Thu Jul 30 13:43:10.574706 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.660101 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/about
[Thu Jul 30 13:43:10.660223 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:10.745512 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/function
[Thu Jul 30 13:43:10.745639 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:10.830908 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-signin.php
[Thu Jul 30 13:43:10.830961 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:10.917390 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/f35.php
[Thu Jul 30 13:43:10.917447 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.003615 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/gg.php
[Thu Jul 30 13:43:11.003682 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.088920 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/class.php
[Thu Jul 30 13:43:11.088971 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.174216 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/flower.php
[Thu Jul 30 13:43:11.174269 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.259631 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/motu.php
[Thu Jul 30 13:43:11.259686 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.317555 2026] [ssl:error] [pid 3295279:tid 3295279] (EAI 2)Name or service not known: [client 144.76.19.72:39900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:11.317591 2026] [ssl:error] [pid 3295279:tid 3295279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:11.345016 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/404.php
[Thu Jul 30 13:43:11.345085 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.374480 2026] [ssl:error] [pid 3295083:tid 3295083] (EAI 2)Name or service not known: [client 144.76.19.72:39910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:11.374505 2026] [ssl:error] [pid 3295083:tid 3295083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:11.436193 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/lite.php
[Thu Jul 30 13:43:11.436244 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.495567 2026] [lsapi:warn] [pid 3297976:tid 3297976] [client 86.172.49.134:52029] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 13:43:11.495612 2026] [lsapi:warn] [pid 3297976:tid 3297976] [client 86.172.49.134:52029] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 13:43:11.526468 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/lock360.php
[Thu Jul 30 13:43:11.526531 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.585972 2026] [lsapi:warn] [pid 3282781:tid 3282781] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:11.611961 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 13:43:11.612087 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:11.697389 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-links-opml.php
[Thu Jul 30 13:43:11.697446 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.798806 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/.alf.php
[Thu Jul 30 13:43:11.798862 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.884529 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ws.php
[Thu Jul 30 13:43:11.884584 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:11.951446 2026] [security2:error] [pid 3305825:tid 3305825] [client 47.236.118.12:57237] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG39_Gbucd-mMaGcHVPgAAABk"]
[Thu Jul 30 13:43:11.951512 2026] [security2:error] [pid 3305825:tid 3305825] [client 47.236.118.12:57237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG39_Gbucd-mMaGcHVPgAAABk"]
[Thu Jul 30 13:43:11.951778 2026] [security2:error] [pid 3305825:tid 3305825] [client 47.236.118.12:57237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtG39_Gbucd-mMaGcHVPgAAABk"]
[Thu Jul 30 13:43:11.969846 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/css
[Thu Jul 30 13:43:11.969968 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:12.055179 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ioxi-o.php
[Thu Jul 30 13:43:12.055236 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.143654 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ws54.php
[Thu Jul 30 13:43:12.143710 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.228954 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/155.php
[Thu Jul 30 13:43:12.229007 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.317644 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 13:43:12.317762 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:12.404222 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xmlrpc.php
[Thu Jul 30 13:43:12.404279 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.489626 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/tinyfilemanager.php
[Thu Jul 30 13:43:12.489685 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.574849 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/hplfuns.php
[Thu Jul 30 13:43:12.574903 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.660126 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/bthil.php
[Thu Jul 30 13:43:12.660188 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.749640 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/cv.php
[Thu Jul 30 13:43:12.749696 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.835025 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/sf.php
[Thu Jul 30 13:43:12.835093 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:12.920339 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content.php
[Thu Jul 30 13:43:12.920397 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:13.005645 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/.bod
[Thu Jul 30 13:43:13.005770 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:13.090942 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/txets.php
[Thu Jul 30 13:43:13.090995 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:13.176383 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wk
[Thu Jul 30 13:43:13.176512 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:13.261685 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/222.php
[Thu Jul 30 13:43:13.261738 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:13.346977 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/new.php
[Thu Jul 30 13:43:13.347031 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:13.432542 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 13:43:13.432663 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:13.521354 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/.trash7206
[Thu Jul 30 13:43:13.521497 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:13.606863 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/classwithtostring.php
[Thu Jul 30 13:43:13.606920 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:13.641579 2026] [core:error] [pid 3305067:tid 3305067] [client 20.104.22.47:56385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:13.641604 2026] [core:error] [pid 3305067:tid 3305067] [client 20.104.22.47:56385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:13.696902 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/error.php
[Thu Jul 30 13:43:13.696957 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:13.782672 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/a7.php
[Thu Jul 30 13:43:13.782727 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 13:43:13.879651 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 13:43:13.879769 2026] [access_compat:error] [pid 3295278:tid 3295278] [client 20.104.16.169:28770] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 13:43:13.995735 2026] [access_compat:error] [pid 3298209:tid 3298209] [client 202.88.254.53:61738] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:14.430523 2026] [ssl:error] [pid 3295279:tid 3295279] (EAI 2)Name or service not known: [client 144.76.19.72:39920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:14.430552 2026] [ssl:error] [pid 3295279:tid 3295279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:14.454292 2026] [lsapi:warn] [pid 3286100:tid 3286100] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:14.485581 2026] [ssl:error] [pid 3306059:tid 3306059] (EAI 2)Name or service not known: [client 144.76.19.72:39936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:14.485616 2026] [ssl:error] [pid 3306059:tid 3306059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:16.171572 2026] [security2:error] [pid 3305825:tid 3305825] [client 102.32.224.170:59148] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG5N_Gbucd-mMaGcHVQAAAABk"]
[Thu Jul 30 13:43:16.171635 2026] [security2:error] [pid 3305825:tid 3305825] [client 102.32.224.170:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG5N_Gbucd-mMaGcHVQAAAABk"]
[Thu Jul 30 13:43:16.171875 2026] [security2:error] [pid 3305825:tid 3305825] [client 102.32.224.170:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtG5N_Gbucd-mMaGcHVQAAAABk"]
[Thu Jul 30 13:43:17.131496 2026] [security2:error] [pid 3304070:tid 3304070] [client 43.163.80.48:54766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/zlibwapi.dll"] [unique_id "amtG5SrPoBogVNOnwjHsqQAAACU"]
[Thu Jul 30 13:43:17.131609 2026] [security2:error] [pid 3304070:tid 3304070] [client 43.163.80.48:54766] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dll"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/zlibwapi.dll"] [unique_id "amtG5SrPoBogVNOnwjHsqQAAACU"]
[Thu Jul 30 13:43:17.131933 2026] [security2:error] [pid 3304070:tid 3304070] [client 43.163.80.48:54766] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/zlibwapi.dll"] [unique_id "amtG5SrPoBogVNOnwjHsqQAAACU"]
[Thu Jul 30 13:43:17.132147 2026] [security2:error] [pid 3304070:tid 3304070] [client 43.163.80.48:54766] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 8 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/zlibwapi.dll"] [unique_id "amtG5SrPoBogVNOnwjHsqQAAACU"]
[Thu Jul 30 13:43:17.173130 2026] [core:error] [pid 3295185:tid 3295185] [client 20.104.22.47:56441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:17.173157 2026] [core:error] [pid 3295185:tid 3295185] [client 20.104.22.47:56441] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:17.543711 2026] [ssl:error] [pid 3295279:tid 3295279] (EAI 2)Name or service not known: [client 144.76.19.72:39940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:17.543738 2026] [ssl:error] [pid 3295279:tid 3295279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:17.597546 2026] [ssl:error] [pid 3306058:tid 3306058] (EAI 2)Name or service not known: [client 144.76.19.72:39952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:17.597580 2026] [ssl:error] [pid 3306058:tid 3306058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:19.826772 2026] [lsapi:warn] [pid 3311137:tid 3311137] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:19.874333 2026] [ssl:error] [pid 3290908:tid 3290908] (70014)End of file found: [client 216.73.216.199:49783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:43:20.141637 2026] [access_compat:error] [pid 3304070:tid 3304070] [client 202.88.254.53:62012] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:20.372439 2026] [security2:error] [pid 3306059:tid 3306059] [client 74.7.227.190:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/"] [unique_id "amtG6KjYmG6lk03I0UFKdAAAADo"]
[Thu Jul 30 13:43:20.651412 2026] [ssl:error] [pid 3311137:tid 3311137] (EAI 2)Name or service not known: [client 144.76.19.72:36754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:20.651446 2026] [ssl:error] [pid 3311137:tid 3311137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:20.666327 2026] [access_compat:error] [pid 3298067:tid 3298067] [client 45.158.164.139:39918] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:43:20.706106 2026] [ssl:error] [pid 3311137:tid 3311137] (EAI 2)Name or service not known: [client 144.76.19.72:36768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:20.706130 2026] [ssl:error] [pid 3311137:tid 3311137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:20.845841 2026] [authz_core:error] [pid 3311137:tid 3311137] [client 66.249.66.34:54156] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:43:20.848512 2026] [authz_core:error] [pid 3311137:tid 3311137] [client 66.249.66.34:54156] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:43:20.949604 2026] [security2:error] [pid 3286100:tid 3286100] [client 186.23.28.25:14738] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG6BwNjZze97jI_VRYeQAAAAY"]
[Thu Jul 30 13:43:20.949656 2026] [security2:error] [pid 3286100:tid 3286100] [client 186.23.28.25:14738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG6BwNjZze97jI_VRYeQAAAAY"]
[Thu Jul 30 13:43:20.949913 2026] [security2:error] [pid 3286100:tid 3286100] [client 186.23.28.25:14738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtG6BwNjZze97jI_VRYeQAAAAY"]
[Thu Jul 30 13:43:21.709715 2026] [security2:error] [pid 3304072:tid 3304072] [client 43.165.65.117:51082] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "amtG6WWtHNnZzK8ms8GTNQAAACw"]
[Thu Jul 30 13:43:22.248003 2026] [lsapi:warn] [pid 3298070:tid 3298070] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:23.098247 2026] [core:error] [pid 3312228:tid 3312228] [client 20.104.22.47:11906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:23.098283 2026] [core:error] [pid 3312228:tid 3312228] [client 20.104.22.47:11906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:23.760710 2026] [ssl:error] [pid 3298067:tid 3298067] (EAI 2)Name or service not known: [client 144.76.19.72:36784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:23.760758 2026] [ssl:error] [pid 3298067:tid 3298067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:23.819578 2026] [ssl:error] [pid 3288091:tid 3288091] (EAI 2)Name or service not known: [client 144.76.19.72:36796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:23.819607 2026] [ssl:error] [pid 3288091:tid 3288091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:25.085142 2026] [lsapi:warn] [pid 3305067:tid 3305067] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:26.090572 2026] [access_compat:error] [pid 3303955:tid 3303955] [client 202.88.254.53:62289] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:26.872637 2026] [ssl:error] [pid 3305939:tid 3305939] (EAI 2)Name or service not known: [client 144.76.19.72:36800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:26.872674 2026] [ssl:error] [pid 3305939:tid 3305939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:26.927504 2026] [ssl:error] [pid 3298209:tid 3298209] (EAI 2)Name or service not known: [client 144.76.19.72:36804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:26.927532 2026] [ssl:error] [pid 3298209:tid 3298209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:29.998881 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:44650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:29.998922 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:30.053707 2026] [ssl:error] [pid 3305942:tid 3305942] (EAI 2)Name or service not known: [client 144.76.19.72:44662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:30.053734 2026] [ssl:error] [pid 3305942:tid 3305942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:30.460866 2026] [lsapi:warn] [pid 3305067:tid 3305067] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:32.329461 2026] [access_compat:error] [pid 3295083:tid 3295083] [client 202.88.254.53:62542] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:32.450801 2026] [security2:error] [pid 3311137:tid 3311137] [client 8.216.48.42:17101] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG9OF-k_Ly67_tG1gVsgAAAAw"]
[Thu Jul 30 13:43:32.450852 2026] [security2:error] [pid 3311137:tid 3311137] [client 8.216.48.42:17101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG9OF-k_Ly67_tG1gVsgAAAAw"]
[Thu Jul 30 13:43:32.451188 2026] [security2:error] [pid 3311137:tid 3311137] [client 8.216.48.42:17101] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtG9OF-k_Ly67_tG1gVsgAAAAw"]
[Thu Jul 30 13:43:32.761849 2026] [cgi:error] [pid 3276728:tid 3276728] [client 20.9.4.9:43109] AH02812: stderr from /home/robincou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:43:32.920759 2026] [lsapi:warn] [pid 3306062:tid 3306062] [client 86.172.49.134:52052] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 13:43:32.920799 2026] [lsapi:warn] [pid 3306062:tid 3306062] [client 86.172.49.134:52052] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/vacancies/
[Thu Jul 30 13:43:32.971040 2026] [lsapi:warn] [pid 3270948:tid 3270948] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:33.284746 2026] [ssl:error] [pid 3295083:tid 3295083] (EAI 2)Name or service not known: [client 144.76.19.72:44668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:33.284769 2026] [ssl:error] [pid 3295083:tid 3295083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:33.612118 2026] [ssl:error] [pid 3312155:tid 3312155] (EAI 2)Name or service not known: [client 144.76.19.72:44678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:33.612149 2026] [ssl:error] [pid 3312155:tid 3312155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:34.963917 2026] [authz_core:error] [pid 3276728:tid 3276728] [client 20.9.4.9:43109] AH01630: client denied by server configuration: /home/robincou/public_html/php.ini
[Thu Jul 30 13:43:35.056628 2026] [core:error] [pid 3303852:tid 3303852] [client 20.104.22.47:12131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:35.056653 2026] [core:error] [pid 3303852:tid 3303852] [client 20.104.22.47:12131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:35.745774 2026] [lsapi:warn] [pid 3295184:tid 3295184] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:36.186101 2026] [security2:error] [pid 3303852:tid 3303852] [client 168.196.57.101:45149] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG-GVyR2I7g0VhrHXI2QAAAA0"]
[Thu Jul 30 13:43:36.186150 2026] [security2:error] [pid 3303852:tid 3303852] [client 168.196.57.101:45149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG-GVyR2I7g0VhrHXI2QAAAA0"]
[Thu Jul 30 13:43:36.186419 2026] [security2:error] [pid 3303852:tid 3303852] [client 168.196.57.101:45149] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtG-GVyR2I7g0VhrHXI2QAAAA0"]
[Thu Jul 30 13:43:36.300671 2026] [security2:error] [pid 3298070:tid 3298070] [client 185.191.171.5:56182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,368.0.html"] [unique_id "amtG-GvDaGv8iF1s3S1uNwAAACo"]
[Thu Jul 30 13:43:36.511645 2026] [core:error] [pid 3266260:tid 3266260] [client 20.104.22.47:12097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:36.511671 2026] [core:error] [pid 3266260:tid 3266260] [client 20.104.22.47:12097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:36.668267 2026] [ssl:error] [pid 3313545:tid 3313545] (EAI 2)Name or service not known: [client 144.76.19.72:44688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:36.668302 2026] [ssl:error] [pid 3313545:tid 3313545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:36.687699 2026] [authz_core:error] [pid 3295279:tid 3295279] [client 66.249.66.33:51268] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:43:36.690386 2026] [authz_core:error] [pid 3295279:tid 3295279] [client 66.249.66.33:51268] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:43:36.724577 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:44698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:36.724612 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:38.325033 2026] [access_compat:error] [pid 3298070:tid 3298070] [client 202.88.254.53:62849] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:39.781468 2026] [ssl:error] [pid 3298067:tid 3298067] (EAI 2)Name or service not known: [client 144.76.19.72:30532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:39.781508 2026] [ssl:error] [pid 3298067:tid 3298067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:40.825633 2026] [ssl:error] [pid 3314203:tid 3314203] (EAI 2)Name or service not known: [client 144.76.19.72:30542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:40.825661 2026] [ssl:error] [pid 3314203:tid 3314203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:41.029994 2026] [lsapi:warn] [pid 3305067:tid 3305067] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:41.160390 2026] [security2:error] [pid 3298067:tid 3298067] [client 102.91.99.46:423] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG_bQvUrVHsK-Ms8kcYQAAACQ"]
[Thu Jul 30 13:43:41.160438 2026] [security2:error] [pid 3298067:tid 3298067] [client 102.91.99.46:423] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtG_bQvUrVHsK-Ms8kcYQAAACQ"]
[Thu Jul 30 13:43:41.160681 2026] [security2:error] [pid 3298067:tid 3298067] [client 102.91.99.46:423] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtG_bQvUrVHsK-Ms8kcYQAAACQ"]
[Thu Jul 30 13:43:43.302378 2026] [lsapi:warn] [pid 3303852:tid 3303852] [client 86.172.49.134:52059] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 13:43:43.302447 2026] [lsapi:warn] [pid 3303852:tid 3303852] [client 86.172.49.134:52059] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 13:43:43.603126 2026] [lsapi:warn] [pid 3295184:tid 3295184] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:43.915484 2026] [ssl:error] [pid 3313545:tid 3313545] (EAI 2)Name or service not known: [client 144.76.19.72:30558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:43.915510 2026] [ssl:error] [pid 3313545:tid 3313545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:43.966971 2026] [ssl:error] [pid 3314203:tid 3314203] (EAI 2)Name or service not known: [client 144.76.19.72:30570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:43.967000 2026] [ssl:error] [pid 3314203:tid 3314203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:44.447790 2026] [access_compat:error] [pid 3313545:tid 3313545] [client 202.88.254.53:63111] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:45.333118 2026] [core:error] [pid 3291816:tid 3291816] [client 20.104.22.47:12123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:45.333145 2026] [core:error] [pid 3291816:tid 3291816] [client 20.104.22.47:12123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:46.255208 2026] [security2:error] [pid 3313543:tid 3313543] [client 47.128.24.234:63704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amtHArpfaBvd9S9uqsX-KAAAABM"]
[Thu Jul 30 13:43:46.352012 2026] [lsapi:warn] [pid 3295185:tid 3295185] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:47.021644 2026] [ssl:error] [pid 3291816:tid 3291816] (EAI 2)Name or service not known: [client 144.76.19.72:30578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:47.021672 2026] [ssl:error] [pid 3291816:tid 3291816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:47.074678 2026] [ssl:error] [pid 3295185:tid 3295185] (EAI 2)Name or service not known: [client 144.76.19.72:30592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:47.074718 2026] [ssl:error] [pid 3295185:tid 3295185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:50.101119 2026] [access_compat:error] [pid 3313543:tid 3313543] [client 202.88.254.53:63405] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:43:50.166574 2026] [ssl:error] [pid 3263005:tid 3263005] (EAI 2)Name or service not known: [client 144.76.19.72:56482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:50.166603 2026] [ssl:error] [pid 3263005:tid 3263005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:50.222306 2026] [ssl:error] [pid 3314830:tid 3314830] (EAI 2)Name or service not known: [client 144.76.19.72:56490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:50.222351 2026] [ssl:error] [pid 3314830:tid 3314830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:51.635624 2026] [lsapi:warn] [pid 3295385:tid 3295385] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:52.202361 2026] [authz_core:error] [pid 3312155:tid 3312155] [client 66.249.66.33:65299] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:43:52.205126 2026] [authz_core:error] [pid 3312155:tid 3312155] [client 66.249.66.33:65299] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:43:53.279212 2026] [ssl:error] [pid 3268114:tid 3268114] (EAI 2)Name or service not known: [client 144.76.19.72:56504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:53.279242 2026] [ssl:error] [pid 3268114:tid 3268114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:53.333786 2026] [ssl:error] [pid 3314830:tid 3314830] (EAI 2)Name or service not known: [client 144.76.19.72:56508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:53.333810 2026] [ssl:error] [pid 3314830:tid 3314830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:54.239090 2026] [lsapi:warn] [pid 3314830:tid 3314830] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:55.924806 2026] [core:error] [pid 3276728:tid 3276728] [client 20.104.22.47:12097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:55.924829 2026] [core:error] [pid 3276728:tid 3276728] [client 20.104.22.47:12097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:43:56.389952 2026] [ssl:error] [pid 3314830:tid 3314830] (EAI 2)Name or service not known: [client 144.76.19.72:56516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:56.389980 2026] [ssl:error] [pid 3314830:tid 3314830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:56.446707 2026] [ssl:error] [pid 3306061:tid 3306061] (EAI 2)Name or service not known: [client 144.76.19.72:56518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:56.446739 2026] [ssl:error] [pid 3306061:tid 3306061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:56.951110 2026] [lsapi:warn] [pid 3298067:tid 3298067] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:43:59.500156 2026] [ssl:error] [pid 3305067:tid 3305067] (EAI 2)Name or service not known: [client 144.76.19.72:56530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:59.500190 2026] [ssl:error] [pid 3305067:tid 3305067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:43:59.554627 2026] [ssl:error] [pid 3312229:tid 3312229] (EAI 2)Name or service not known: [client 144.76.19.72:21376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:43:59.554668 2026] [ssl:error] [pid 3312229:tid 3312229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:01.435038 2026] [access_compat:error] [pid 3295279:tid 3295279] [client 202.88.254.53:63968] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:44:02.249173 2026] [lsapi:warn] [pid 3314203:tid 3314203] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:02.632109 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:21378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:02.632152 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:02.690304 2026] [ssl:error] [pid 3313430:tid 3313430] (EAI 2)Name or service not known: [client 144.76.19.72:21382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:02.690336 2026] [ssl:error] [pid 3313430:tid 3313430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:03.075061 2026] [core:error] [pid 3263005:tid 3263005] [client 20.104.22.47:12133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:03.075101 2026] [core:error] [pid 3263005:tid 3263005] [client 20.104.22.47:12133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:03.484217 2026] [security2:error] [pid 3306062:tid 3306062] [client 185.191.171.6:33046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/12x40-tiny-house-floor-plan"] [unique_id "amtHE2nasikz7k8pdRNragAAAD4"]
[Thu Jul 30 13:44:04.823111 2026] [lsapi:warn] [pid 3306061:tid 3306061] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:04.974724 2026] [ssl:error] [pid 3305942:tid 3305942] (70014)End of file found: [client 216.73.216.199:32870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:44:05.208992 2026] [security2:error] [pid 3312155:tid 3312155] [client 114.119.155.144:37929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~30,18/request_format~html"] [unique_id "amtHFeLxAwEw167sSPXggAAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 13:44:05.259169 2026] [core:error] [pid 3276728:tid 3276728] [client 20.104.22.47:54664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:05.259201 2026] [core:error] [pid 3276728:tid 3276728] [client 20.104.22.47:54664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:05.747156 2026] [ssl:error] [pid 3306061:tid 3306061] (EAI 2)Name or service not known: [client 144.76.19.72:21392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:05.747188 2026] [ssl:error] [pid 3306061:tid 3306061] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:05.800130 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:21406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:05.800160 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:06.320883 2026] [security2:error] [pid 3312155:tid 3312155] [client 114.119.155.144:37937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~30,18/request_format~html"] [unique_id "amtHFuLxAwEw167sSPXggQAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 13:44:07.605338 2026] [lsapi:warn] [pid 3305711:tid 3305711] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:08.246437 2026] [security2:error] [pid 3312155:tid 3312155] [client 43.159.136.201:45558] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mjs-services.com"] [uri "/"] [unique_id "amtHGOLxAwEw167sSPXgggAAABE"]
[Thu Jul 30 13:44:08.851661 2026] [core:error] [pid 3295387:tid 3295387] [client 20.104.22.47:11921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:08.851687 2026] [core:error] [pid 3295387:tid 3295387] [client 20.104.22.47:11921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:08.857021 2026] [ssl:error] [pid 3306060:tid 3306060] (EAI 2)Name or service not known: [client 144.76.19.72:21412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:08.857059 2026] [ssl:error] [pid 3306060:tid 3306060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:08.913207 2026] [ssl:error] [pid 3305711:tid 3305711] (EAI 2)Name or service not known: [client 144.76.19.72:21416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:08.913230 2026] [ssl:error] [pid 3305711:tid 3305711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:10.369740 2026] [ssl:error] [pid 3302702:tid 3302702] (70014)End of file found: [client 216.73.216.199:38441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:44:10.502396 2026] [security2:error] [pid 3291752:tid 3291752] [client 43.159.136.201:40266] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mjs-services.com"] [uri "/"] [unique_id "amtHGkEBhJqf2zLDjnbOwwAAAAA"], referer: http://mjs-services.com
[Thu Jul 30 13:44:10.657163 2026] [cgi:error] [pid 3305067:tid 3305067] [client 20.48.234.177:39176] AH02812: stderr from /home/wwwhighc/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:44:11.103962 2026] [security2:error] [pid 3305942:tid 3305942] [client 38.224.238.219:57744] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHG9awAoOnq4-W9Bxq3AAAADc"]
[Thu Jul 30 13:44:11.104014 2026] [security2:error] [pid 3305942:tid 3305942] [client 38.224.238.219:57744] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHG9awAoOnq4-W9Bxq3AAAADc"]
[Thu Jul 30 13:44:11.104288 2026] [security2:error] [pid 3305942:tid 3305942] [client 38.224.238.219:57744] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHG9awAoOnq4-W9Bxq3AAAADc"]
[Thu Jul 30 13:44:11.461054 2026] [access_compat:error] [pid 3295083:tid 3295083] [client 202.88.254.53:64518] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:44:11.967780 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:56266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:11.967810 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:12.027451 2026] [ssl:error] [pid 3306060:tid 3306060] (EAI 2)Name or service not known: [client 144.76.19.72:56280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:12.027508 2026] [ssl:error] [pid 3306060:tid 3306060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:12.947875 2026] [security2:error] [pid 3314830:tid 3314830] [client 185.191.171.13:26632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amtHHF3X7KaUSpzqw3VggwAAAB4"]
[Thu Jul 30 13:44:13.068282 2026] [lsapi:warn] [pid 3286100:tid 3286100] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:13.492297 2026] [security2:error] [pid 3306059:tid 3306059] [client 14.191.108.153:10681] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHHajYmG6lk03I0UFKhQAAADo"]
[Thu Jul 30 13:44:13.492371 2026] [security2:error] [pid 3306059:tid 3306059] [client 14.191.108.153:10681] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHHajYmG6lk03I0UFKhQAAADo"]
[Thu Jul 30 13:44:13.492764 2026] [security2:error] [pid 3306059:tid 3306059] [client 14.191.108.153:10681] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHHajYmG6lk03I0UFKhQAAADo"]
[Thu Jul 30 13:44:13.771155 2026] [security2:error] [pid 3316976:tid 3316976] [client 85.208.96.206:24548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bes-systems.co.uk"] [uri "/index.htm"] [unique_id "amtHHbFuCV2Qy5u6GE38MgAAAAo"]
[Thu Jul 30 13:44:13.781759 2026] [access_compat:error] [pid 3306059:tid 3306059] [client 45.158.164.139:33342] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:44:15.083616 2026] [ssl:error] [pid 3312229:tid 3312229] (EAI 2)Name or service not known: [client 144.76.19.72:56300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:15.083649 2026] [ssl:error] [pid 3312229:tid 3312229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:15.136508 2026] [ssl:error] [pid 3306060:tid 3306060] (EAI 2)Name or service not known: [client 144.76.19.72:56316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:15.136538 2026] [ssl:error] [pid 3306060:tid 3306060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:15.438140 2026] [lsapi:warn] [pid 3312229:tid 3312229] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:16.667617 2026] [core:error] [pid 3295385:tid 3295385] [client 20.104.22.47:56397] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:16.667644 2026] [core:error] [pid 3295385:tid 3295385] [client 20.104.22.47:56397] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:17.313736 2026] [security2:error] [pid 3318011:tid 3318011] [client 14.191.41.151:15604] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHIfE4hKIT9ofrOZJUKgAAABg"]
[Thu Jul 30 13:44:17.313784 2026] [security2:error] [pid 3318011:tid 3318011] [client 14.191.41.151:15604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHIfE4hKIT9ofrOZJUKgAAABg"]
[Thu Jul 30 13:44:17.314053 2026] [security2:error] [pid 3318011:tid 3318011] [client 14.191.41.151:15604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHIfE4hKIT9ofrOZJUKgAAABg"]
[Thu Jul 30 13:44:18.192430 2026] [ssl:error] [pid 3291752:tid 3291752] (EAI 2)Name or service not known: [client 144.76.19.72:56330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:18.192466 2026] [ssl:error] [pid 3291752:tid 3291752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:18.207171 2026] [lsapi:warn] [pid 3276728:tid 3276728] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:18.250530 2026] [ssl:error] [pid 3318122:tid 3318122] (EAI 2)Name or service not known: [client 144.76.19.72:56338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:18.250573 2026] [ssl:error] [pid 3318122:tid 3318122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:21.339296 2026] [ssl:error] [pid 3317728:tid 3317728] (EAI 2)Name or service not known: [client 144.76.19.72:65362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:21.339345 2026] [ssl:error] [pid 3317728:tid 3317728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:21.397340 2026] [ssl:error] [pid 3318122:tid 3318122] (EAI 2)Name or service not known: [client 144.76.19.72:65370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:21.397377 2026] [ssl:error] [pid 3318122:tid 3318122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:21.606222 2026] [access_compat:error] [pid 3295387:tid 3295387] [client 202.88.254.53:65064] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:44:22.152790 2026] [access_compat:error] [pid 3317728:tid 3317728] [client 45.158.164.139:60408] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:44:23.653002 2026] [lsapi:warn] [pid 3317728:tid 3317728] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:24.521445 2026] [ssl:error] [pid 3316976:tid 3316976] (EAI 2)Name or service not known: [client 144.76.19.72:65382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:24.521498 2026] [ssl:error] [pid 3316976:tid 3316976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:24.577894 2026] [ssl:error] [pid 3282781:tid 3282781] (EAI 2)Name or service not known: [client 144.76.19.72:65386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:24.577924 2026] [ssl:error] [pid 3282781:tid 3282781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:25.501291 2026] [ssl:error] [pid 3314830:tid 3314830] (70014)End of file found: [client 216.73.216.199:55258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:44:25.763643 2026] [security2:error] [pid 3263005:tid 3263005] [client 23.154.136.246:21480] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.justaccessories.co.uk.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtHKd3t5WQcFbo2XrzALwAAAB0"]
[Thu Jul 30 13:44:25.763924 2026] [security2:error] [pid 3263005:tid 3263005] [client 23.154.136.246:21480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.justaccessories.co.uk.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtHKd3t5WQcFbo2XrzALwAAAB0"]
[Thu Jul 30 13:44:25.764174 2026] [security2:error] [pid 3263005:tid 3263005] [client 23.154.136.246:21480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.justaccessories.co.uk.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtHKd3t5WQcFbo2XrzALwAAAB0"]
[Thu Jul 30 13:44:25.852541 2026] [security2:error] [pid 3263005:tid 3263005] [client 23.154.136.246:21480] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.justaccessories.co.uk.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtHKd3t5WQcFbo2XrzAMAAAAB0"]
[Thu Jul 30 13:44:25.852836 2026] [security2:error] [pid 3263005:tid 3263005] [client 23.154.136.246:21480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.justaccessories.co.uk.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtHKd3t5WQcFbo2XrzAMAAAAB0"]
[Thu Jul 30 13:44:25.853059 2026] [security2:error] [pid 3263005:tid 3263005] [client 23.154.136.246:21480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.justaccessories.co.uk.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtHKd3t5WQcFbo2XrzAMAAAAB0"]
[Thu Jul 30 13:44:26.042139 2026] [lsapi:warn] [pid 3295083:tid 3295083] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:27.544963 2026] [lsapi:warn] [pid 3295387:tid 3295387] [client 185.217.71.197:65243] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:44:27.635358 2026] [ssl:error] [pid 3295387:tid 3295387] (EAI 2)Name or service not known: [client 144.76.19.72:65400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:27.635386 2026] [ssl:error] [pid 3295387:tid 3295387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:27.691499 2026] [ssl:error] [pid 3295387:tid 3295387] (EAI 2)Name or service not known: [client 144.76.19.72:65408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:27.691540 2026] [ssl:error] [pid 3295387:tid 3295387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:28.931125 2026] [lsapi:warn] [pid 3318124:tid 3318124] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:29.114345 2026] [core:error] [pid 3306061:tid 3306061] [client 20.104.22.47:12113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:29.114371 2026] [core:error] [pid 3306061:tid 3306061] [client 20.104.22.47:12113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:30.746559 2026] [ssl:error] [pid 3317636:tid 3317636] (EAI 2)Name or service not known: [client 144.76.19.72:34304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:30.746589 2026] [ssl:error] [pid 3317636:tid 3317636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:30.803298 2026] [ssl:error] [pid 3308262:tid 3308262] (EAI 2)Name or service not known: [client 144.76.19.72:34320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:30.803337 2026] [ssl:error] [pid 3308262:tid 3308262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:31.204399 2026] [access_compat:error] [pid 3313430:tid 3313430] [client 202.88.254.53:49224] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:44:32.392743 2026] [core:error] [pid 3311344:tid 3311344] [client 20.104.22.47:11904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:32.392774 2026] [core:error] [pid 3311344:tid 3311344] [client 20.104.22.47:11904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:33.861882 2026] [ssl:error] [pid 3311926:tid 3311926] (EAI 2)Name or service not known: [client 144.76.19.72:34326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:33.861916 2026] [ssl:error] [pid 3311926:tid 3311926] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:33.915079 2026] [ssl:error] [pid 3263005:tid 3263005] (EAI 2)Name or service not known: [client 144.76.19.72:34334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:33.915107 2026] [ssl:error] [pid 3263005:tid 3263005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:34.240989 2026] [lsapi:warn] [pid 3316976:tid 3316976] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:36.445285 2026] [lsapi:warn] [pid 3263005:tid 3263005] [client 51.20.63.105:54478] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 13:44:36.703015 2026] [lsapi:warn] [pid 3317728:tid 3317728] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:36.854141 2026] [core:error] [pid 3313543:tid 3313543] [client 20.104.22.47:11953] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:36.854165 2026] [core:error] [pid 3313543:tid 3313543] [client 20.104.22.47:11953] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:36.986635 2026] [ssl:error] [pid 3295387:tid 3295387] (EAI 2)Name or service not known: [client 144.76.19.72:34336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:36.986670 2026] [ssl:error] [pid 3295387:tid 3295387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:37.044580 2026] [ssl:error] [pid 3318012:tid 3318012] (EAI 2)Name or service not known: [client 144.76.19.72:34340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:37.044611 2026] [ssl:error] [pid 3318012:tid 3318012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:38.043500 2026] [cgi:error] [pid 3298070:tid 3298070] [client 199.45.154.152:40584] AH02812: stderr from /home/dennoreu/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://dennor.eu:80/cgi-bin
[Thu Jul 30 13:44:39.623653 2026] [lsapi:warn] [pid 3317636:tid 3317636] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:40.099234 2026] [ssl:error] [pid 3305711:tid 3305711] (EAI 2)Name or service not known: [client 144.76.19.72:50994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:40.099265 2026] [ssl:error] [pid 3305711:tid 3305711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:40.146744 2026] [core:error] [pid 3312229:tid 3312229] [client 20.104.22.47:56423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:40.146766 2026] [core:error] [pid 3312229:tid 3312229] [client 20.104.22.47:56423] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:40.153456 2026] [ssl:error] [pid 3305942:tid 3305942] (EAI 2)Name or service not known: [client 144.76.19.72:50998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:40.153485 2026] [ssl:error] [pid 3305942:tid 3305942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:40.522207 2026] [access_compat:error] [pid 3305067:tid 3305067] [client 202.88.254.53:49767] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:44:41.490875 2026] [core:error] [pid 3295184:tid 3295184] [client 20.104.22.47:11948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:41.490897 2026] [core:error] [pid 3295184:tid 3295184] [client 20.104.22.47:11948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:43.208502 2026] [ssl:error] [pid 3314203:tid 3314203] (EAI 2)Name or service not known: [client 144.76.19.72:51010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:43.208531 2026] [ssl:error] [pid 3314203:tid 3314203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:43.264594 2026] [ssl:error] [pid 3263005:tid 3263005] (EAI 2)Name or service not known: [client 144.76.19.72:51018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:43.264619 2026] [ssl:error] [pid 3263005:tid 3263005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:44.635950 2026] [authz_core:error] [pid 3318122:tid 3318122] [client 66.249.66.34:56717] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:44:44.638686 2026] [authz_core:error] [pid 3318122:tid 3318122] [client 66.249.66.34:56717] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:44:44.817214 2026] [lsapi:warn] [pid 3312229:tid 3312229] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:45.381356 2026] [core:error] [pid 3298070:tid 3298070] [client 20.104.22.47:56440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:45.381379 2026] [core:error] [pid 3298070:tid 3298070] [client 20.104.22.47:56440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:46.321810 2026] [ssl:error] [pid 3276728:tid 3276728] (EAI 2)Name or service not known: [client 144.76.19.72:51034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:46.321846 2026] [ssl:error] [pid 3276728:tid 3276728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:46.373619 2026] [ssl:error] [pid 3319738:tid 3319738] (EAI 2)Name or service not known: [client 144.76.19.72:51038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:46.373649 2026] [ssl:error] [pid 3319738:tid 3319738] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:47.288944 2026] [lsapi:warn] [pid 3311926:tid 3311926] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:49.433495 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:51048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:49.433530 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:49.488687 2026] [ssl:error] [pid 3295385:tid 3295385] (EAI 2)Name or service not known: [client 144.76.19.72:51056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:49.488732 2026] [ssl:error] [pid 3295385:tid 3295385] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:49.728461 2026] [access_compat:error] [pid 3319738:tid 3319738] [client 202.88.254.53:50313] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:44:50.194118 2026] [lsapi:warn] [pid 3295385:tid 3295385] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:50.393145 2026] [security2:error] [pid 3318439:tid 3318439] [client 85.208.96.194:60810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5175.0/prev_next,next.html"] [unique_id "amtHQv77N66HApfzFpbG5QAAACk"]
[Thu Jul 30 13:44:51.290492 2026] [core:error] [pid 3282781:tid 3282781] [client 20.104.22.47:56420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:51.290521 2026] [core:error] [pid 3282781:tid 3282781] [client 20.104.22.47:56420] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:52.546172 2026] [ssl:error] [pid 3321970:tid 3321970] (EAI 2)Name or service not known: [client 144.76.19.72:33848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:52.546211 2026] [ssl:error] [pid 3321970:tid 3321970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:52.600150 2026] [ssl:error] [pid 3304072:tid 3304072] (EAI 2)Name or service not known: [client 144.76.19.72:33860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:52.600183 2026] [ssl:error] [pid 3304072:tid 3304072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:55.596162 2026] [lsapi:warn] [pid 3321593:tid 3321593] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:55.656087 2026] [ssl:error] [pid 3318011:tid 3318011] (EAI 2)Name or service not known: [client 144.76.19.72:33870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:55.656122 2026] [ssl:error] [pid 3318011:tid 3318011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:55.714286 2026] [ssl:error] [pid 3318125:tid 3318125] (EAI 2)Name or service not known: [client 144.76.19.72:33876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:55.714315 2026] [ssl:error] [pid 3318125:tid 3318125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:57.864785 2026] [core:error] [pid 3306061:tid 3306061] [client 20.104.22.47:11944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:57.864812 2026] [core:error] [pid 3306061:tid 3306061] [client 20.104.22.47:11944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:44:57.902920 2026] [lsapi:warn] [pid 3313543:tid 3313543] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:44:58.165882 2026] [security2:error] [pid 3316976:tid 3316976] [client 103.67.163.43:54109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "4k-monitors.co.uk"] [uri "/.env"] [unique_id "amtHSrFuCV2Qy5u6GE38kwAAAAo"]
[Thu Jul 30 13:44:58.166102 2026] [security2:error] [pid 3316976:tid 3316976] [client 103.67.163.43:54109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "4k-monitors.co.uk"] [uri "/.env"] [unique_id "amtHSrFuCV2Qy5u6GE38kwAAAAo"]
[Thu Jul 30 13:44:58.769018 2026] [ssl:error] [pid 3318125:tid 3318125] (EAI 2)Name or service not known: [client 144.76.19.72:33884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:58.769049 2026] [ssl:error] [pid 3318125:tid 3318125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:44:58.778712 2026] [security2:error] [pid 3316976:tid 3316976] [client 103.67.163.43:54109] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "4k-monitors.co.uk"] [uri "/index.php"] [unique_id "amtHSrFuCV2Qy5u6GE38kwAAAAo"]
[Thu Jul 30 13:44:58.781859 2026] [access_compat:error] [pid 3314931:tid 3314931] [client 202.88.254.53:50852] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:44:58.821841 2026] [ssl:error] [pid 3305942:tid 3305942] (EAI 2)Name or service not known: [client 144.76.19.72:33894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:44:58.821874 2026] [ssl:error] [pid 3305942:tid 3305942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:00.778747 2026] [lsapi:warn] [pid 3313543:tid 3313543] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:01.875815 2026] [ssl:error] [pid 3317728:tid 3317728] (EAI 2)Name or service not known: [client 144.76.19.72:56776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:01.875846 2026] [ssl:error] [pid 3317728:tid 3317728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:01.906252 2026] [core:error] [pid 3318122:tid 3318122] [client 20.104.22.47:11932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:01.906281 2026] [core:error] [pid 3318122:tid 3318122] [client 20.104.22.47:11932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:01.928869 2026] [ssl:error] [pid 3313543:tid 3313543] (EAI 2)Name or service not known: [client 144.76.19.72:56782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:01.928903 2026] [ssl:error] [pid 3313543:tid 3313543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:02.587985 2026] [security2:error] [pid 3311926:tid 3311926] [client 43.153.48.240:56330] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtHTqUTMYcADYb7PXIkmwAAAA8"]
[Thu Jul 30 13:45:02.642404 2026] [security2:error] [pid 3270948:tid 3270948] [client 186.54.254.74:47254] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHTjZbORmKashVD3ofUQAAADM"]
[Thu Jul 30 13:45:02.642454 2026] [security2:error] [pid 3270948:tid 3270948] [client 186.54.254.74:47254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHTjZbORmKashVD3ofUQAAADM"]
[Thu Jul 30 13:45:02.642725 2026] [security2:error] [pid 3270948:tid 3270948] [client 186.54.254.74:47254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHTjZbORmKashVD3ofUQAAADM"]
[Thu Jul 30 13:45:03.139576 2026] [security2:error] [pid 3317891:tid 3317891] [client 103.67.163.43:53285] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "4k-monitors.co.uk"] [uri "/.env"] [unique_id "amtHT-w6BodlEaU2eIDscQAAABU"]
[Thu Jul 30 13:45:03.139796 2026] [security2:error] [pid 3317891:tid 3317891] [client 103.67.163.43:53285] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "4k-monitors.co.uk"] [uri "/.env"] [unique_id "amtHT-w6BodlEaU2eIDscQAAABU"]
[Thu Jul 30 13:45:03.250280 2026] [security2:error] [pid 3317891:tid 3317891] [client 103.67.163.43:53285] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "4k-monitors.co.uk"] [uri "/index.php"] [unique_id "amtHT-w6BodlEaU2eIDscQAAABU"]
[Thu Jul 30 13:45:04.047740 2026] [security2:error] [pid 3317891:tid 3317891] [client 185.191.171.9:62474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/list-of-baking-puns"] [unique_id "amtHUOw6BodlEaU2eIDscgAAABU"]
[Thu Jul 30 13:45:04.172914 2026] [security2:error] [pid 3318122:tid 3318122] [client 43.153.48.240:59552] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtHUJozjqpV2eN9WhyKQAAAACM"], referer: http://raidersofthegamecupboard.co.uk
[Thu Jul 30 13:45:04.206398 2026] [autoindex:error] [pid 3304068:tid 3304068] [client 158.158.76.106:12407] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 13:45:04.625283 2026] [autoindex:error] [pid 3304068:tid 3304068] [client 158.158.76.106:12407] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 13:45:04.647206 2026] [security2:error] [pid 3323486:tid 3323486] [client 114.119.134.224:57515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "taylorshouse.com"] [uri "/home/privacy-policy/"] [unique_id "amtHUAwCNn_tNgPTj7U-qQAAAAs"]
[Thu Jul 30 13:45:04.756375 2026] [security2:error] [pid 3314830:tid 3314830] [client 77.223.252.114:1332] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHUF3X7KaUSpzqw3VgkgAAAB4"]
[Thu Jul 30 13:45:04.756435 2026] [security2:error] [pid 3314830:tid 3314830] [client 77.223.252.114:1332] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHUF3X7KaUSpzqw3VgkgAAAB4"]
[Thu Jul 30 13:45:04.756704 2026] [security2:error] [pid 3314830:tid 3314830] [client 77.223.252.114:1332] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHUF3X7KaUSpzqw3VgkgAAAB4"]
[Thu Jul 30 13:45:04.982583 2026] [ssl:error] [pid 3318122:tid 3318122] (EAI 2)Name or service not known: [client 144.76.19.72:56796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:04.982611 2026] [ssl:error] [pid 3318122:tid 3318122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:05.036886 2026] [ssl:error] [pid 3323486:tid 3323486] (EAI 2)Name or service not known: [client 144.76.19.72:56810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:05.036918 2026] [ssl:error] [pid 3323486:tid 3323486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:06.203126 2026] [lsapi:warn] [pid 3318125:tid 3318125] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:06.408269 2026] [security2:error] [pid 3276728:tid 3276728] [client 103.67.163.43:52721] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "4k-monitors.co.uk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amtHUjH3uSPICOxJdd_1kgAAABY"]
[Thu Jul 30 13:45:06.408350 2026] [security2:error] [pid 3276728:tid 3276728] [client 103.67.163.43:52721] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "4k-monitors.co.uk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amtHUjH3uSPICOxJdd_1kgAAABY"]
[Thu Jul 30 13:45:06.408664 2026] [security2:error] [pid 3276728:tid 3276728] [client 103.67.163.43:52721] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "4k-monitors.co.uk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amtHUjH3uSPICOxJdd_1kgAAABY"]
[Thu Jul 30 13:45:06.534760 2026] [security2:error] [pid 3276728:tid 3276728] [client 103.67.163.43:52721] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 7 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request Containing Content, but Missing Content-Type header"] [tag "event-correlation"] [hostname "4k-monitors.co.uk"] [uri "/index.php"] [unique_id "amtHUjH3uSPICOxJdd_1kgAAABY"]
[Thu Jul 30 13:45:06.578645 2026] [core:error] [pid 3313430:tid 3313430] [client 20.104.22.47:56418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:06.578673 2026] [core:error] [pid 3313430:tid 3313430] [client 20.104.22.47:56418] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:07.813721 2026] [access_compat:error] [pid 3295083:tid 3295083] [client 202.88.254.53:51394] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:45:08.093427 2026] [ssl:error] [pid 3323892:tid 3323892] (EAI 2)Name or service not known: [client 144.76.19.72:56812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:08.093513 2026] [ssl:error] [pid 3323892:tid 3323892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:08.149718 2026] [ssl:error] [pid 3323894:tid 3323894] (EAI 2)Name or service not known: [client 144.76.19.72:56818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:08.149755 2026] [ssl:error] [pid 3323894:tid 3323894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:08.613771 2026] [lsapi:warn] [pid 3270948:tid 3270948] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:09.167298 2026] [autoindex:error] [pid 3304068:tid 3304068] [client 158.158.76.106:12407] AH01276: Cannot serve directory /home/baketast/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 13:45:11.233542 2026] [ssl:error] [pid 3319535:tid 3319535] (EAI 2)Name or service not known: [client 144.76.19.72:51292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:11.233584 2026] [ssl:error] [pid 3319535:tid 3319535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:11.288319 2026] [ssl:error] [pid 3318439:tid 3318439] (EAI 2)Name or service not known: [client 144.76.19.72:51308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:11.288363 2026] [ssl:error] [pid 3318439:tid 3318439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:11.418766 2026] [lsapi:warn] [pid 3318125:tid 3318125] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:12.351483 2026] [security2:error] [pid 3324302:tid 3324302] [client 43.164.196.47:47886] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chateausaintjeannet.org"] [uri "/"] [unique_id "amtHWCIr_Abm5RYPCd8rmQAAACQ"]
[Thu Jul 30 13:45:14.347980 2026] [ssl:error] [pid 3308361:tid 3308361] (EAI 2)Name or service not known: [client 144.76.19.72:51316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:14.348014 2026] [ssl:error] [pid 3308361:tid 3308361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:14.406027 2026] [ssl:error] [pid 3317728:tid 3317728] (EAI 2)Name or service not known: [client 144.76.19.72:51332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:14.406056 2026] [ssl:error] [pid 3317728:tid 3317728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:15.936668 2026] [core:error] [pid 3305942:tid 3305942] [client 20.104.22.47:56428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:15.936697 2026] [core:error] [pid 3305942:tid 3305942] [client 20.104.22.47:56428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:16.796419 2026] [lsapi:warn] [pid 3295184:tid 3295184] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:16.896724 2026] [access_compat:error] [pid 3311926:tid 3311926] [client 202.88.254.53:51936] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:45:17.461989 2026] [ssl:error] [pid 3305942:tid 3305942] (EAI 2)Name or service not known: [client 144.76.19.72:51336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:17.462017 2026] [ssl:error] [pid 3305942:tid 3305942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:17.516569 2026] [ssl:error] [pid 3314830:tid 3314830] (EAI 2)Name or service not known: [client 144.76.19.72:51350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:17.516604 2026] [ssl:error] [pid 3314830:tid 3314830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:19.208562 2026] [lsapi:warn] [pid 3323821:tid 3323821] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:20.571570 2026] [ssl:error] [pid 3318125:tid 3318125] (EAI 2)Name or service not known: [client 144.76.19.72:57634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:20.571608 2026] [ssl:error] [pid 3318125:tid 3318125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:20.624174 2026] [ssl:error] [pid 3263005:tid 3263005] (EAI 2)Name or service not known: [client 144.76.19.72:57636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:20.624202 2026] [ssl:error] [pid 3263005:tid 3263005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:22.123875 2026] [lsapi:warn] [pid 3323892:tid 3323892] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:22.783225 2026] [access_compat:error] [pid 3306062:tid 3306062] [client 3.22.120.27:56552] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 13:45:22.783329 2026] [access_compat:error] [pid 3306062:tid 3306062] [client 3.22.120.27:56552] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:45:23.164594 2026] [access_compat:error] [pid 3323893:tid 3323893] [client 3.22.120.27:56562] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 13:45:23.164709 2026] [access_compat:error] [pid 3323893:tid 3323893] [client 3.22.120.27:56562] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:45:23.681392 2026] [ssl:error] [pid 3323486:tid 3323486] (EAI 2)Name or service not known: [client 144.76.19.72:57648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:23.681419 2026] [ssl:error] [pid 3323486:tid 3323486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:23.738681 2026] [ssl:error] [pid 3295083:tid 3295083] (EAI 2)Name or service not known: [client 144.76.19.72:57650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:23.738710 2026] [ssl:error] [pid 3295083:tid 3295083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:24.878058 2026] [access_compat:error] [pid 3295083:tid 3295083] [client 3.22.120.27:46070] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 13:45:24.878181 2026] [access_compat:error] [pid 3295083:tid 3295083] [client 3.22.120.27:46070] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:45:25.196681 2026] [access_compat:error] [pid 3308361:tid 3308361] [client 3.22.120.27:49734] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 13:45:25.196781 2026] [access_compat:error] [pid 3308361:tid 3308361] [client 3.22.120.27:49734] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:45:26.198500 2026] [access_compat:error] [pid 3323892:tid 3323892] [client 202.88.254.53:52476] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:45:26.637720 2026] [access_compat:error] [pid 3306061:tid 3306061] [client 45.158.164.139:45454] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:45:26.795288 2026] [ssl:error] [pid 3308262:tid 3308262] (EAI 2)Name or service not known: [client 144.76.19.72:57658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:26.795317 2026] [ssl:error] [pid 3308262:tid 3308262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:26.847112 2026] [ssl:error] [pid 3286100:tid 3286100] (EAI 2)Name or service not known: [client 144.76.19.72:57662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:26.847139 2026] [ssl:error] [pid 3286100:tid 3286100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:26.951793 2026] [security2:error] [pid 3276728:tid 3276728] [client 43.166.226.57:48082] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.leaccess.co.uk"] [uri "/"] [unique_id "amtHZjH3uSPICOxJdd_1mQAAABY"]
[Thu Jul 30 13:45:27.343461 2026] [lsapi:warn] [pid 3323821:tid 3323821] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:29.084296 2026] [security2:error] [pid 3306061:tid 3306061] [client 114.119.157.183:38059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~30,17,15/request_format~html"] [unique_id "amtHaYoElQgxeIv3zqEyawAAAD0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~30,102,17,15/request_format~html
[Thu Jul 30 13:45:29.902168 2026] [lsapi:warn] [pid 3313545:tid 3313545] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:29.902569 2026] [ssl:error] [pid 3311344:tid 3311344] (EAI 2)Name or service not known: [client 144.76.19.72:19020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:29.902605 2026] [ssl:error] [pid 3311344:tid 3311344] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:29.923757 2026] [core:error] [pid 3323486:tid 3323486] [client 20.104.22.47:11916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:29.923785 2026] [core:error] [pid 3323486:tid 3323486] [client 20.104.22.47:11916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:29.955030 2026] [ssl:error] [pid 3308361:tid 3308361] (EAI 2)Name or service not known: [client 144.76.19.72:19024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:29.955054 2026] [ssl:error] [pid 3308361:tid 3308361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:30.183249 2026] [security2:error] [pid 3314830:tid 3314830] [client 114.119.157.183:36657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~30,17,15/request_format~html"] [unique_id "amtHal3X7KaUSpzqw3VgmQAAAB4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~30,102,17,15/request_format~html
[Thu Jul 30 13:45:32.733943 2026] [lsapi:warn] [pid 3295083:tid 3295083] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:32.806109 2026] [access_compat:error] [pid 3314830:tid 3314830] [client 45.158.164.139:35466] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:45:33.012773 2026] [ssl:error] [pid 3305067:tid 3305067] (EAI 2)Name or service not known: [client 144.76.19.72:19036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:33.012804 2026] [ssl:error] [pid 3305067:tid 3305067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:33.068091 2026] [ssl:error] [pid 3311344:tid 3311344] (EAI 2)Name or service not known: [client 144.76.19.72:19042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:33.068123 2026] [ssl:error] [pid 3311344:tid 3311344] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:35.303735 2026] [access_compat:error] [pid 3318125:tid 3318125] [client 202.88.254.53:53017] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:45:36.515799 2026] [ssl:error] [pid 3324302:tid 3324302] (EAI 2)Name or service not known: [client 144.76.19.72:19044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:36.515826 2026] [ssl:error] [pid 3324302:tid 3324302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:36.735665 2026] [ssl:error] [pid 3323486:tid 3323486] (EAI 2)Name or service not known: [client 144.76.19.72:19052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:36.735698 2026] [ssl:error] [pid 3323486:tid 3323486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:36.992979 2026] [security2:error] [pid 3321593:tid 3321593] [client 176.31.139.31:20562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/the-3-ms-of-mission/"] [unique_id "amtHcFvJf8-32VAU7xOd7gAAAAM"]
[Thu Jul 30 13:45:37.933223 2026] [lsapi:warn] [pid 3316976:tid 3316976] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:39.793999 2026] [ssl:error] [pid 3276728:tid 3276728] (EAI 2)Name or service not known: [client 144.76.19.72:24444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:39.794031 2026] [ssl:error] [pid 3276728:tid 3276728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:39.853890 2026] [ssl:error] [pid 3314203:tid 3314203] (EAI 2)Name or service not known: [client 144.76.19.72:24460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:39.853923 2026] [ssl:error] [pid 3314203:tid 3314203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:40.545422 2026] [lsapi:warn] [pid 3327070:tid 3327070] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:42.905481 2026] [ssl:error] [pid 3323892:tid 3323892] (EAI 2)Name or service not known: [client 144.76.19.72:24466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:42.905516 2026] [ssl:error] [pid 3323892:tid 3323892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:42.957148 2026] [ssl:error] [pid 3276728:tid 3276728] (EAI 2)Name or service not known: [client 144.76.19.72:24480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:42.957180 2026] [ssl:error] [pid 3276728:tid 3276728] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:43.393328 2026] [lsapi:warn] [pid 3317728:tid 3317728] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:43.811218 2026] [security2:error] [pid 3305942:tid 3305942] [client 198.244.240.88:20114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.theovertones.co.uk"] [uri "/robots.txt"] [unique_id "amtHd9awAoOnq4-W9BxrCAAAADc"]
[Thu Jul 30 13:45:44.489734 2026] [access_compat:error] [pid 3305067:tid 3305067] [client 202.88.254.53:53589] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:45:44.837984 2026] [security2:error] [pid 3311344:tid 3311344] [client 51.195.183.1:55924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.theovertones.co.uk"] [uri "/"] [unique_id "amtHeNpoS7q-DCas2G-VygAAABA"]
[Thu Jul 30 13:45:46.045332 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:24490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:46.045373 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:46.102808 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:24492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:46.102836 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:46.431572 2026] [security2:error] [pid 3311344:tid 3311344] [client 74.7.227.184:38862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "downloads.ppcl.com"] [uri "/"] [unique_id "amtHetpoS7q-DCas2G-VywAAABA"]
[Thu Jul 30 13:45:48.491217 2026] [lsapi:warn] [pid 3321970:tid 3321970] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:49.159517 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:24502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:49.159544 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:49.213723 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:24514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:49.213749 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:51.196531 2026] [lsapi:warn] [pid 3328384:tid 3328384] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:51.473117 2026] [authz_core:error] [pid 3313545:tid 3313545] [client 66.249.66.35:46807] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:45:51.475876 2026] [authz_core:error] [pid 3313545:tid 3313545] [client 66.249.66.35:46807] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:45:52.267734 2026] [ssl:error] [pid 3323486:tid 3323486] (EAI 2)Name or service not known: [client 144.76.19.72:44914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:52.267761 2026] [ssl:error] [pid 3323486:tid 3323486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:52.320875 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:44924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:52.320902 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:53.048926 2026] [security2:error] [pid 3311344:tid 3311344] [client 43.159.143.139:39468] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amtHgdpoS7q-DCas2G-VzgAAABA"]
[Thu Jul 30 13:45:53.631787 2026] [access_compat:error] [pid 3328610:tid 3328610] [client 202.88.254.53:54287] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:45:54.089870 2026] [lsapi:warn] [pid 3328491:tid 3328491] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:45:54.990642 2026] [core:error] [pid 3323726:tid 3323726] [client 20.104.22.47:11967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:54.990669 2026] [core:error] [pid 3323726:tid 3323726] [client 20.104.22.47:11967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:45:55.373948 2026] [ssl:error] [pid 3328607:tid 3328607] (EAI 2)Name or service not known: [client 144.76.19.72:44930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:55.373977 2026] [ssl:error] [pid 3328607:tid 3328607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:55.427544 2026] [ssl:error] [pid 3304072:tid 3304072] (EAI 2)Name or service not known: [client 144.76.19.72:44944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:55.427587 2026] [ssl:error] [pid 3304072:tid 3304072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:58.488513 2026] [ssl:error] [pid 3282781:tid 3282781] (EAI 2)Name or service not known: [client 144.76.19.72:44948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:58.488539 2026] [ssl:error] [pid 3282781:tid 3282781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:58.542761 2026] [ssl:error] [pid 3321593:tid 3321593] (EAI 2)Name or service not known: [client 144.76.19.72:44950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:45:58.542793 2026] [ssl:error] [pid 3321593:tid 3321593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:45:59.048492 2026] [lsapi:warn] [pid 3328610:tid 3328610] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:01.275370 2026] [ssl:error] [pid 3327070:tid 3327070] (70014)End of file found: [client 216.73.216.199:15092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:46:01.598507 2026] [ssl:error] [pid 3282781:tid 3282781] (EAI 2)Name or service not known: [client 144.76.19.72:63808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:01.598535 2026] [ssl:error] [pid 3282781:tid 3282781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:01.660603 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:63816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:01.660632 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:01.797360 2026] [lsapi:warn] [pid 3318125:tid 3318125] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:03.212510 2026] [access_compat:error] [pid 3321593:tid 3321593] [client 202.88.254.53:54946] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:46:03.585654 2026] [core:error] [pid 3313545:tid 3313545] [client 93.123.109.164:25516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:03.585676 2026] [core:error] [pid 3313545:tid 3313545] [client 93.123.109.164:25516] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:03.786840 2026] [core:error] [pid 3311926:tid 3311926] [client 93.123.109.164:25528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:03.786868 2026] [core:error] [pid 3311926:tid 3311926] [client 93.123.109.164:25528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:04.714270 2026] [ssl:error] [pid 3295184:tid 3295184] (EAI 2)Name or service not known: [client 144.76.19.72:63832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:04.714301 2026] [ssl:error] [pid 3295184:tid 3295184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:04.743113 2026] [lsapi:warn] [pid 3313545:tid 3313545] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:04.756214 2026] [security2:error] [pid 3318123:tid 3318123] [client 185.191.171.12:57132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/initialized-capital-stock"] [unique_id "amtHjJnJiWEu_WFctm3hjgAAACU"]
[Thu Jul 30 13:46:04.766466 2026] [ssl:error] [pid 3295083:tid 3295083] (EAI 2)Name or service not known: [client 144.76.19.72:63836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:04.766497 2026] [ssl:error] [pid 3295083:tid 3295083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:07.818298 2026] [ssl:error] [pid 3324302:tid 3324302] (EAI 2)Name or service not known: [client 144.76.19.72:63850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:07.818326 2026] [ssl:error] [pid 3324302:tid 3324302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:07.872393 2026] [ssl:error] [pid 3316976:tid 3316976] (EAI 2)Name or service not known: [client 144.76.19.72:63856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:07.872417 2026] [ssl:error] [pid 3316976:tid 3316976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:09.042550 2026] [security2:error] [pid 3313545:tid 3313545] [client 43.130.78.203:57396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/aanbod/"] [unique_id "amtHkUwmQW0KwocWYHXpuwAAABs"]
[Thu Jul 30 13:46:09.618890 2026] [lsapi:warn] [pid 3263005:tid 3263005] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:10.684948 2026] [security2:error] [pid 3308363:tid 3308363] [client 47.128.24.7:62408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amtHkogooirW7iHdcKmXsQAAAAk"]
[Thu Jul 30 13:46:10.938496 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:25380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:10.938528 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:10.991025 2026] [ssl:error] [pid 3328384:tid 3328384] (EAI 2)Name or service not known: [client 144.76.19.72:25390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:10.991061 2026] [ssl:error] [pid 3328384:tid 3328384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:12.426246 2026] [lsapi:warn] [pid 3304072:tid 3304072] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:12.939554 2026] [access_compat:error] [pid 3328491:tid 3328491] [client 202.88.254.53:55532] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:46:14.050043 2026] [ssl:error] [pid 3330862:tid 3330862] (EAI 2)Name or service not known: [client 144.76.19.72:25394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:14.050099 2026] [ssl:error] [pid 3330862:tid 3330862] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:14.105516 2026] [ssl:error] [pid 3305942:tid 3305942] (EAI 2)Name or service not known: [client 144.76.19.72:25408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:14.105542 2026] [ssl:error] [pid 3305942:tid 3305942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:15.354107 2026] [lsapi:warn] [pid 3323892:tid 3323892] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:15.970695 2026] [cgi:error] [pid 3311926:tid 3311926] [client 68.221.186.136:5953] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:46:16.382032 2026] [cgi:error] [pid 3311926:tid 3311926] [client 68.221.186.136:5953] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:46:17.191298 2026] [ssl:error] [pid 3327070:tid 3327070] (EAI 2)Name or service not known: [client 144.76.19.72:25424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:17.191347 2026] [ssl:error] [pid 3327070:tid 3327070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:17.246575 2026] [ssl:error] [pid 3326958:tid 3326958] (EAI 2)Name or service not known: [client 144.76.19.72:25430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:17.246603 2026] [ssl:error] [pid 3326958:tid 3326958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:18.867936 2026] [security2:error] [pid 3313545:tid 3313545] [client 8.210.121.101:50185] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHmkwmQW0KwocWYHXpvgAAABs"]
[Thu Jul 30 13:46:18.867983 2026] [security2:error] [pid 3313545:tid 3313545] [client 8.210.121.101:50185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHmkwmQW0KwocWYHXpvgAAABs"]
[Thu Jul 30 13:46:18.868246 2026] [security2:error] [pid 3313545:tid 3313545] [client 8.210.121.101:50185] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHmkwmQW0KwocWYHXpvgAAABs"]
[Thu Jul 30 13:46:20.158221 2026] [lsapi:warn] [pid 3330965:tid 3330965] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:20.304661 2026] [ssl:error] [pid 3323892:tid 3323892] (EAI 2)Name or service not known: [client 144.76.19.72:39206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:20.304687 2026] [ssl:error] [pid 3323892:tid 3323892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:20.357577 2026] [ssl:error] [pid 3328490:tid 3328490] (EAI 2)Name or service not known: [client 144.76.19.72:39210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:20.357615 2026] [ssl:error] [pid 3328490:tid 3328490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:20.545940 2026] [security2:error] [pid 3323821:tid 3323821] [client 86.99.7.55:32978] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHnKPha1l3efzEE0tjrwAAABg"]
[Thu Jul 30 13:46:20.545989 2026] [security2:error] [pid 3323821:tid 3323821] [client 86.99.7.55:32978] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHnKPha1l3efzEE0tjrwAAABg"]
[Thu Jul 30 13:46:20.546237 2026] [security2:error] [pid 3323821:tid 3323821] [client 86.99.7.55:32978] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHnKPha1l3efzEE0tjrwAAABg"]
[Thu Jul 30 13:46:23.065111 2026] [lsapi:warn] [pid 3323821:tid 3323821] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:23.414402 2026] [ssl:error] [pid 3306059:tid 3306059] (EAI 2)Name or service not known: [client 144.76.19.72:39224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:23.414439 2026] [ssl:error] [pid 3306059:tid 3306059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:23.470868 2026] [ssl:error] [pid 3330967:tid 3330967] (EAI 2)Name or service not known: [client 144.76.19.72:39232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:23.470906 2026] [ssl:error] [pid 3330967:tid 3330967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:25.157711 2026] [access_compat:error] [pid 3295184:tid 3295184] [client 202.88.254.53:56093] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:46:26.035937 2026] [lsapi:warn] [pid 3311926:tid 3311926] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:26.571504 2026] [ssl:error] [pid 3316976:tid 3316976] (EAI 2)Name or service not known: [client 144.76.19.72:39242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:26.571532 2026] [ssl:error] [pid 3316976:tid 3316976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:26.626779 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:39250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:26.626815 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:28.835332 2026] [security2:error] [pid 3330754:tid 3330754] [client 39.34.216.134:44423] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHpDnJmIy42_1b9C37ewAAAAs"]
[Thu Jul 30 13:46:28.835380 2026] [security2:error] [pid 3330754:tid 3330754] [client 39.34.216.134:44423] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHpDnJmIy42_1b9C37ewAAAAs"]
[Thu Jul 30 13:46:28.835637 2026] [security2:error] [pid 3330754:tid 3330754] [client 39.34.216.134:44423] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHpDnJmIy42_1b9C37ewAAAAs"]
[Thu Jul 30 13:46:29.735057 2026] [ssl:error] [pid 3330862:tid 3330862] (EAI 2)Name or service not known: [client 144.76.19.72:20858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:29.735106 2026] [ssl:error] [pid 3330862:tid 3330862] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:29.786552 2026] [ssl:error] [pid 3331849:tid 3331849] (EAI 2)Name or service not known: [client 144.76.19.72:20872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:29.786583 2026] [ssl:error] [pid 3331849:tid 3331849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:30.704170 2026] [lsapi:warn] [pid 3321970:tid 3321970] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:31.580900 2026] [ssl:error] [pid 3328607:tid 3328607] (70014)End of file found: [client 216.73.216.199:60825] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:46:32.893438 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:20880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:32.893466 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:32.949367 2026] [ssl:error] [pid 3328608:tid 3328608] (EAI 2)Name or service not known: [client 144.76.19.72:20886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:32.949394 2026] [ssl:error] [pid 3328608:tid 3328608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:33.666206 2026] [lsapi:warn] [pid 3331849:tid 3331849] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:34.327008 2026] [access_compat:error] [pid 3282781:tid 3282781] [client 202.88.254.53:56647] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:46:34.799744 2026] [access_compat:error] [pid 3331849:tid 3331849] [client 45.158.164.139:33638] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:46:36.003905 2026] [ssl:error] [pid 3323892:tid 3323892] (EAI 2)Name or service not known: [client 144.76.19.72:20888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:36.003930 2026] [ssl:error] [pid 3323892:tid 3323892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:36.099456 2026] [ssl:error] [pid 3328384:tid 3328384] (EAI 2)Name or service not known: [client 144.76.19.72:20892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:36.099494 2026] [ssl:error] [pid 3328384:tid 3328384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:36.605473 2026] [lsapi:warn] [pid 3326958:tid 3326958] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:37.062689 2026] [cgi:error] [pid 3318123:tid 3318123] [client 66.132.195.86:49420] AH02812: stderr from /home/liberat/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://www.liberator-no-email.com:80/cgi-bin
[Thu Jul 30 13:46:39.159680 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:20900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:39.159707 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:39.212907 2026] [ssl:error] [pid 3328384:tid 3328384] (EAI 2)Name or service not known: [client 144.76.19.72:20914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:39.212934 2026] [ssl:error] [pid 3328384:tid 3328384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:41.265108 2026] [lsapi:warn] [pid 3330965:tid 3330965] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:42.269883 2026] [ssl:error] [pid 3332014:tid 3332014] (EAI 2)Name or service not known: [client 144.76.19.72:36340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:42.269919 2026] [ssl:error] [pid 3332014:tid 3332014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:42.323133 2026] [ssl:error] [pid 3263005:tid 3263005] (EAI 2)Name or service not known: [client 144.76.19.72:36356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:42.323157 2026] [ssl:error] [pid 3263005:tid 3263005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:42.746575 2026] [security2:error] [pid 3313545:tid 3313545] [client 114.119.136.185:27745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.com"] [uri "/robots.txt"] [unique_id "amtHskwmQW0KwocWYHXpyAAAABs"], referer: http://jonathanmeyerart.com/robots.txt
[Thu Jul 30 13:46:43.238939 2026] [security2:error] [pid 3306059:tid 3306059] [client 114.119.132.202:63771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/testimonials"] [unique_id "amtHs6jYmG6lk03I0UFK4wAAADo"], referer: https://www.pamporovoexpress.com/accommodation-pamporovo
[Thu Jul 30 13:46:43.670110 2026] [core:error] [pid 3330965:tid 3330965] [client 20.104.22.47:56413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:46:43.670137 2026] [core:error] [pid 3330965:tid 3330965] [client 20.104.22.47:56413] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:46:44.327585 2026] [lsapi:warn] [pid 3311344:tid 3311344] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:45.382954 2026] [ssl:error] [pid 3282781:tid 3282781] (EAI 2)Name or service not known: [client 144.76.19.72:36360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:45.382984 2026] [ssl:error] [pid 3282781:tid 3282781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:45.434906 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:36366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:45.434934 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:45.700282 2026] [access_compat:error] [pid 3321970:tid 3321970] [client 202.88.254.53:57204] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:46:47.245840 2026] [lsapi:warn] [pid 3270948:tid 3270948] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:48.491357 2026] [ssl:error] [pid 3270948:tid 3270948] (EAI 2)Name or service not known: [client 144.76.19.72:36376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:48.491386 2026] [ssl:error] [pid 3270948:tid 3270948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:48.549561 2026] [ssl:error] [pid 3330862:tid 3330862] (EAI 2)Name or service not known: [client 144.76.19.72:36388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:48.549585 2026] [ssl:error] [pid 3330862:tid 3330862] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:51.619708 2026] [ssl:error] [pid 3330862:tid 3330862] (EAI 2)Name or service not known: [client 144.76.19.72:54768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:51.619746 2026] [ssl:error] [pid 3330862:tid 3330862] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:51.672676 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:54784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:51.672709 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:51.730173 2026] [security2:error] [pid 3295083:tid 3295083] [client 114.119.132.171:39853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~30,104,14/request_format~html"] [unique_id "amtHu0x0GNQsYC8Med91mAAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~30,104,103,14/request_format~html
[Thu Jul 30 13:46:51.850230 2026] [lsapi:warn] [pid 3328491:tid 3328491] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:52.208042 2026] [access_compat:error] [pid 3328609:tid 3328609] [client 45.158.164.139:44522] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:46:52.335868 2026] [access_compat:error] [pid 3330964:tid 3330964] [client 172.202.95.21:30858] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 13:46:52.339157 2026] [access_compat:error] [pid 3330964:tid 3330964] [client 172.202.95.21:30858] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/wc-logs/
[Thu Jul 30 13:46:53.126277 2026] [security2:error] [pid 3306062:tid 3306062] [client 114.119.132.171:39863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~30,104,14/request_format~html"] [unique_id "amtHvWnasikz7k8pdRNryQAAAD4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~30,104,103,14/request_format~html
[Thu Jul 30 13:46:54.101795 2026] [core:error] [pid 3316976:tid 3316976] [client 93.123.109.164:25132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wp/
[Thu Jul 30 13:46:54.101823 2026] [core:error] [pid 3316976:tid 3316976] [client 93.123.109.164:25132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wp/
[Thu Jul 30 13:46:54.250029 2026] [core:error] [pid 3295083:tid 3295083] [client 93.123.109.164:25148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wp/
[Thu Jul 30 13:46:54.250055 2026] [core:error] [pid 3295083:tid 3295083] [client 93.123.109.164:25148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wp/
[Thu Jul 30 13:46:54.461258 2026] [core:error] [pid 3330862:tid 3330862] [client 93.123.109.164:25182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wordpress/
[Thu Jul 30 13:46:54.461285 2026] [core:error] [pid 3330862:tid 3330862] [client 93.123.109.164:25182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wordpress/
[Thu Jul 30 13:46:54.622004 2026] [core:error] [pid 3321970:tid 3321970] [client 93.123.109.164:25200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wordpress/
[Thu Jul 30 13:46:54.622029 2026] [core:error] [pid 3321970:tid 3321970] [client 93.123.109.164:25200] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/wordpress/
[Thu Jul 30 13:46:54.726296 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:54804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:54.726320 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:54.778230 2026] [ssl:error] [pid 3313545:tid 3313545] (EAI 2)Name or service not known: [client 144.76.19.72:54816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:54.778255 2026] [ssl:error] [pid 3313545:tid 3313545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:54.888821 2026] [core:error] [pid 3316976:tid 3316976] [client 93.123.109.164:25226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/blog/
[Thu Jul 30 13:46:54.888845 2026] [core:error] [pid 3316976:tid 3316976] [client 93.123.109.164:25226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/blog/
[Thu Jul 30 13:46:54.958170 2026] [lsapi:warn] [pid 3308363:tid 3308363] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:55.079502 2026] [core:error] [pid 3321970:tid 3321970] [client 93.123.109.164:25248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/blog/
[Thu Jul 30 13:46:55.079524 2026] [core:error] [pid 3321970:tid 3321970] [client 93.123.109.164:25248] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/blog/
[Thu Jul 30 13:46:55.308631 2026] [core:error] [pid 3332360:tid 3332360] [client 93.123.109.164:25278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/old/
[Thu Jul 30 13:46:55.308658 2026] [core:error] [pid 3332360:tid 3332360] [client 93.123.109.164:25278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/old/
[Thu Jul 30 13:46:55.482510 2026] [core:error] [pid 3295083:tid 3295083] [client 93.123.109.164:25302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/old/
[Thu Jul 30 13:46:55.482538 2026] [core:error] [pid 3295083:tid 3295083] [client 93.123.109.164:25302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/old/
[Thu Jul 30 13:46:55.729900 2026] [core:error] [pid 3306059:tid 3306059] [client 93.123.109.164:25328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/test/
[Thu Jul 30 13:46:55.729927 2026] [core:error] [pid 3306059:tid 3306059] [client 93.123.109.164:25328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/test/
[Thu Jul 30 13:46:55.869955 2026] [core:error] [pid 3308363:tid 3308363] [client 93.123.109.164:25340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/test/
[Thu Jul 30 13:46:55.869989 2026] [core:error] [pid 3308363:tid 3308363] [client 93.123.109.164:25340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/test/
[Thu Jul 30 13:46:56.092234 2026] [core:error] [pid 3306059:tid 3306059] [client 93.123.109.164:25372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/dev/
[Thu Jul 30 13:46:56.092276 2026] [core:error] [pid 3306059:tid 3306059] [client 93.123.109.164:25372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/dev/
[Thu Jul 30 13:46:56.254582 2026] [core:error] [pid 3328609:tid 3328609] [client 93.123.109.164:25384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/dev/
[Thu Jul 30 13:46:56.254605 2026] [core:error] [pid 3328609:tid 3328609] [client 93.123.109.164:25384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/dev/
[Thu Jul 30 13:46:56.387343 2026] [security2:error] [pid 3328609:tid 3328609] [client 198.244.242.23:37414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "michael-boffey.co.uk"] [uri "/image-41.php"] [unique_id "amtHwHeVeaYjZapzagSdSgAAABc"]
[Thu Jul 30 13:46:56.462867 2026] [core:error] [pid 3328609:tid 3328609] [client 93.123.109.164:25404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/backup/
[Thu Jul 30 13:46:56.462893 2026] [core:error] [pid 3328609:tid 3328609] [client 93.123.109.164:25404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/backup/
[Thu Jul 30 13:46:56.624310 2026] [core:error] [pid 3332360:tid 3332360] [client 93.123.109.164:25428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/backup/
[Thu Jul 30 13:46:56.624333 2026] [core:error] [pid 3332360:tid 3332360] [client 93.123.109.164:25428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/backup/
[Thu Jul 30 13:46:56.801341 2026] [ssl:error] [pid 3328491:tid 3328491] (70014)End of file found: [client 216.73.216.199:53086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:46:56.930341 2026] [core:error] [pid 3332360:tid 3332360] [client 93.123.109.164:25448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/staging/
[Thu Jul 30 13:46:56.930372 2026] [core:error] [pid 3332360:tid 3332360] [client 93.123.109.164:25448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/staging/
[Thu Jul 30 13:46:57.055329 2026] [core:error] [pid 3331286:tid 3331286] [client 93.123.109.164:25456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/staging/
[Thu Jul 30 13:46:57.055352 2026] [core:error] [pid 3331286:tid 3331286] [client 93.123.109.164:25456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/staging/
[Thu Jul 30 13:46:57.288410 2026] [core:error] [pid 3331286:tid 3331286] [client 93.123.109.164:25486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:57.288434 2026] [core:error] [pid 3331286:tid 3331286] [client 93.123.109.164:25486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:57.443026 2026] [core:error] [pid 3321593:tid 3321593] [client 93.123.109.164:25506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:57.443052 2026] [core:error] [pid 3321593:tid 3321593] [client 93.123.109.164:25506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/
[Thu Jul 30 13:46:57.832197 2026] [lsapi:warn] [pid 3336204:tid 3336204] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:46:57.957974 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:54824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:57.958002 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:57.987721 2026] [access_compat:error] [pid 3331286:tid 3331286] [client 202.88.254.53:57756] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:46:58.162004 2026] [core:error] [pid 3317729:tid 3317729] [client 20.104.22.47:56432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:46:58.162033 2026] [core:error] [pid 3317729:tid 3317729] [client 20.104.22.47:56432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:46:58.376522 2026] [ssl:error] [pid 3336204:tid 3336204] (EAI 2)Name or service not known: [client 144.76.19.72:54834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:46:58.376552 2026] [ssl:error] [pid 3336204:tid 3336204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:46:58.539901 2026] [authz_core:error] [pid 3328384:tid 3328384] [client 66.249.66.34:38470] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:46:58.542814 2026] [authz_core:error] [pid 3328384:tid 3328384] [client 66.249.66.34:38470] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:47:00.522378 2026] [security2:error] [pid 3317891:tid 3317891] [client 51.68.111.240:29985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "healthkinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amtHxOw6BodlEaU2eIDtKgAAABU"]
[Thu Jul 30 13:47:01.481030 2026] [ssl:error] [pid 3317729:tid 3317729] (EAI 2)Name or service not known: [client 144.76.19.72:51276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:01.481083 2026] [ssl:error] [pid 3317729:tid 3317729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:01.535616 2026] [ssl:error] [pid 3336415:tid 3336415] (EAI 2)Name or service not known: [client 144.76.19.72:51286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:01.535645 2026] [ssl:error] [pid 3336415:tid 3336415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:02.406132 2026] [lsapi:warn] [pid 3332014:tid 3332014] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:03.609622 2026] [access_compat:error] [pid 3323892:tid 3323892] [client 202.88.254.53:57468] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:47:04.641446 2026] [ssl:error] [pid 3295083:tid 3295083] (EAI 2)Name or service not known: [client 144.76.19.72:51298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:04.641482 2026] [ssl:error] [pid 3295083:tid 3295083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:04.695820 2026] [ssl:error] [pid 3323821:tid 3323821] (EAI 2)Name or service not known: [client 144.76.19.72:51300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:04.695861 2026] [ssl:error] [pid 3323821:tid 3323821] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:05.246913 2026] [security2:error] [pid 3311344:tid 3311344] [client 85.208.96.206:19902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/gamebase-emulator-premium-apk"] [unique_id "amtHydpoS7q-DCas2G-V7AAAABA"]
[Thu Jul 30 13:47:05.624114 2026] [lsapi:warn] [pid 3295083:tid 3295083] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:05.939434 2026] [security2:error] [pid 3331849:tid 3331849] [client 101.47.25.155:47607] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHyXlbktvGdxLKOZ6hKwAAAB4"]
[Thu Jul 30 13:47:05.939492 2026] [security2:error] [pid 3331849:tid 3331849] [client 101.47.25.155:47607] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHyXlbktvGdxLKOZ6hKwAAAB4"]
[Thu Jul 30 13:47:05.939780 2026] [security2:error] [pid 3331849:tid 3331849] [client 101.47.25.155:47607] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHyXlbktvGdxLKOZ6hKwAAAB4"]
[Thu Jul 30 13:47:07.749173 2026] [ssl:error] [pid 3336204:tid 3336204] (EAI 2)Name or service not known: [client 144.76.19.72:51312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:07.749200 2026] [ssl:error] [pid 3336204:tid 3336204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:07.806425 2026] [ssl:error] [pid 3323726:tid 3323726] (EAI 2)Name or service not known: [client 144.76.19.72:51316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:07.806463 2026] [ssl:error] [pid 3323726:tid 3323726] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:08.437116 2026] [lsapi:warn] [pid 3332014:tid 3332014] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:08.767589 2026] [security2:error] [pid 3336204:tid 3336204] [client 110.249.202.24:59910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/about.html"] [unique_id "amtHzEIxiG8EWfXVLqYIaQAAAAA"]
[Thu Jul 30 13:47:10.920607 2026] [ssl:error] [pid 3332014:tid 3332014] (EAI 2)Name or service not known: [client 144.76.19.72:52194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:10.920636 2026] [ssl:error] [pid 3332014:tid 3332014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:10.979826 2026] [ssl:error] [pid 3317891:tid 3317891] (EAI 2)Name or service not known: [client 144.76.19.72:52196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:10.979870 2026] [ssl:error] [pid 3317891:tid 3317891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:11.174040 2026] [access_compat:error] [pid 3295083:tid 3295083] [client 202.88.254.53:58313] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:47:11.545094 2026] [security2:error] [pid 3336417:tid 3336417] [client 101.47.18.186:48449] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHz_Go1ZQJblblljdcewAAAA8"]
[Thu Jul 30 13:47:11.545140 2026] [security2:error] [pid 3336417:tid 3336417] [client 101.47.18.186:48449] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtHz_Go1ZQJblblljdcewAAAA8"]
[Thu Jul 30 13:47:11.545388 2026] [security2:error] [pid 3336417:tid 3336417] [client 101.47.18.186:48449] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtHz_Go1ZQJblblljdcewAAAA8"]
[Thu Jul 30 13:47:12.114302 2026] [ssl:error] [pid 3328491:tid 3328491] (70014)End of file found: [client 216.73.216.199:65282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:47:12.979954 2026] [lsapi:warn] [pid 3328384:tid 3328384] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:14.034739 2026] [ssl:error] [pid 3332014:tid 3332014] (EAI 2)Name or service not known: [client 144.76.19.72:52200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:14.034767 2026] [ssl:error] [pid 3332014:tid 3332014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:14.085134 2026] [access_compat:error] [pid 3336789:tid 3336789] [client 2.189.5.162:35444] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:47:14.090493 2026] [ssl:error] [pid 3328384:tid 3328384] (EAI 2)Name or service not known: [client 144.76.19.72:52208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:14.090519 2026] [ssl:error] [pid 3328384:tid 3328384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:16.223177 2026] [lsapi:warn] [pid 3336789:tid 3336789] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:17.145602 2026] [ssl:error] [pid 3336314:tid 3336314] (EAI 2)Name or service not known: [client 144.76.19.72:52220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:17.145633 2026] [ssl:error] [pid 3336314:tid 3336314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:17.203543 2026] [ssl:error] [pid 3321970:tid 3321970] (EAI 2)Name or service not known: [client 144.76.19.72:52230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:17.203570 2026] [ssl:error] [pid 3321970:tid 3321970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:17.461578 2026] [access_compat:error] [pid 3263005:tid 3263005] [client 202.88.254.53:58494] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:47:19.048249 2026] [lsapi:warn] [pid 3323892:tid 3323892] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:20.217846 2026] [security2:error] [pid 3317729:tid 3317729] [client 101.47.18.186:25419] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtH2KKRYzJH9KtH-5U3UAAAAA0"]
[Thu Jul 30 13:47:20.217895 2026] [security2:error] [pid 3317729:tid 3317729] [client 101.47.18.186:25419] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtH2KKRYzJH9KtH-5U3UAAAAA0"]
[Thu Jul 30 13:47:20.218172 2026] [security2:error] [pid 3317729:tid 3317729] [client 101.47.18.186:25419] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtH2KKRYzJH9KtH-5U3UAAAAA0"]
[Thu Jul 30 13:47:20.261181 2026] [ssl:error] [pid 3321970:tid 3321970] (EAI 2)Name or service not known: [client 144.76.19.72:25722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:20.261204 2026] [ssl:error] [pid 3321970:tid 3321970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:20.315354 2026] [ssl:error] [pid 3336917:tid 3336917] (EAI 2)Name or service not known: [client 144.76.19.72:25724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:20.315386 2026] [ssl:error] [pid 3336917:tid 3336917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:21.827786 2026] [authz_core:error] [pid 3336917:tid 3336917] [client 66.249.66.34:63396] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:47:21.830566 2026] [authz_core:error] [pid 3336917:tid 3336917] [client 66.249.66.34:63396] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:47:23.456457 2026] [ssl:error] [pid 3336312:tid 3336312] (EAI 2)Name or service not known: [client 144.76.19.72:25742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:23.456500 2026] [ssl:error] [pid 3336312:tid 3336312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:23.508132 2026] [ssl:error] [pid 3332014:tid 3332014] (EAI 2)Name or service not known: [client 144.76.19.72:25750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:23.508153 2026] [ssl:error] [pid 3332014:tid 3332014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:23.670433 2026] [lsapi:warn] [pid 3336204:tid 3336204] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:23.773283 2026] [autoindex:error] [pid 3317891:tid 3317891] [client 172.202.98.196:48350] AH01276: Cannot serve directory /home/quantumc/abcpress.com.mt/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 13:47:25.715265 2026] [authz_core:error] [pid 3336917:tid 3336917] [client 66.249.66.34:63396] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:47:25.717918 2026] [authz_core:error] [pid 3336917:tid 3336917] [client 66.249.66.34:63396] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:47:25.754993 2026] [access_compat:error] [pid 3328609:tid 3328609] [client 202.88.254.53:58862] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:47:26.564686 2026] [ssl:error] [pid 3336417:tid 3336417] (EAI 2)Name or service not known: [client 144.76.19.72:25760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:26.564723 2026] [ssl:error] [pid 3336417:tid 3336417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:26.618501 2026] [ssl:error] [pid 3336204:tid 3336204] (EAI 2)Name or service not known: [client 144.76.19.72:25770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:26.618528 2026] [ssl:error] [pid 3336204:tid 3336204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:27.045631 2026] [ssl:error] [pid 3323726:tid 3323726] (70014)End of file found: [client 216.73.216.199:26845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:47:28.262273 2026] [cgi:error] [pid 3317891:tid 3317891] [client 172.202.98.196:48350] AH02812: stderr from /home/quantumc/abcpress.com.mt/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:47:28.674211 2026] [lsapi:warn] [pid 3317729:tid 3317729] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:29.506451 2026] [security2:error] [pid 3339485:tid 3339485] [client 170.106.35.187:44008] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.com"] [uri "/"] [unique_id "amtH4e1PZzqaYPyd-fFVKQAAACY"]
[Thu Jul 30 13:47:29.509707 2026] [authz_core:error] [pid 3339485:tid 3339485] [client 170.106.35.187:44008] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:47:29.516041 2026] [authz_core:error] [pid 3339485:tid 3339485] [client 170.106.35.187:44008] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:47:29.562676 2026] [security2:error] [pid 3331849:tid 3331849] [client 106.52.49.148:41384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "amtH4XlbktvGdxLKOZ6hRgAAAB4"]
[Thu Jul 30 13:47:29.621532 2026] [lsapi:warn] [pid 3330862:tid 3330862] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:29.675507 2026] [ssl:error] [pid 3321970:tid 3321970] (EAI 2)Name or service not known: [client 144.76.19.72:55328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:29.675534 2026] [ssl:error] [pid 3321970:tid 3321970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:29.735518 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:55340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:29.735547 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:31.217161 2026] [security2:error] [pid 3339129:tid 3339129] [client 106.52.49.148:34466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtH40Zx4Sbl6duGQG-j8AAAABg"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 13:47:31.218974 2026] [authz_core:error] [pid 3339129:tid 3339129] [client 106.52.49.148:34466] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 13:47:31.221639 2026] [authz_core:error] [pid 3339129:tid 3339129] [client 106.52.49.148:34466] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 13:47:32.740843 2026] [access_compat:error] [pid 3270948:tid 3270948] [client 202.88.254.53:59033] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:47:32.800586 2026] [ssl:error] [pid 3328609:tid 3328609] (EAI 2)Name or service not known: [client 144.76.19.72:55350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:32.800626 2026] [ssl:error] [pid 3328609:tid 3328609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:32.856990 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:55354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:32.857017 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:34.227492 2026] [lsapi:warn] [pid 3339009:tid 3339009] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:35.913672 2026] [ssl:error] [pid 3339486:tid 3339486] (EAI 2)Name or service not known: [client 144.76.19.72:55362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:35.913705 2026] [ssl:error] [pid 3339486:tid 3339486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:35.967003 2026] [ssl:error] [pid 3336312:tid 3336312] (EAI 2)Name or service not known: [client 144.76.19.72:55372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:35.967027 2026] [ssl:error] [pid 3336312:tid 3336312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:38.632230 2026] [lsapi:warn] [pid 3323892:tid 3323892] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:39.108417 2026] [ssl:error] [pid 3328384:tid 3328384] (EAI 2)Name or service not known: [client 144.76.19.72:55386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:39.108456 2026] [ssl:error] [pid 3328384:tid 3328384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:39.164997 2026] [ssl:error] [pid 3317729:tid 3317729] (EAI 2)Name or service not known: [client 144.76.19.72:55396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:39.165027 2026] [ssl:error] [pid 3317729:tid 3317729] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:40.241331 2026] [lsapi:warn] [pid 3339130:tid 3339130] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:42.066570 2026] [access_compat:error] [pid 3316976:tid 3316976] [client 202.88.254.53:59422] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:47:42.217730 2026] [ssl:error] [pid 3336917:tid 3336917] (EAI 2)Name or service not known: [client 144.76.19.72:37118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:42.217758 2026] [ssl:error] [pid 3336917:tid 3336917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:42.274665 2026] [ssl:error] [pid 3339485:tid 3339485] (EAI 2)Name or service not known: [client 144.76.19.72:37134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:42.274700 2026] [ssl:error] [pid 3339485:tid 3339485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:42.522860 2026] [access_compat:error] [pid 3340642:tid 3340642] [client 45.158.164.139:46496] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:47:44.782634 2026] [lsapi:warn] [pid 3336917:tid 3336917] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:45.330335 2026] [ssl:error] [pid 3339129:tid 3339129] (EAI 2)Name or service not known: [client 144.76.19.72:37146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:45.330370 2026] [ssl:error] [pid 3339129:tid 3339129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:45.382229 2026] [ssl:error] [pid 3328491:tid 3328491] (EAI 2)Name or service not known: [client 144.76.19.72:37162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:45.382263 2026] [ssl:error] [pid 3328491:tid 3328491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:47.911207 2026] [core:crit] [pid 3340744:tid 3340744] (13)Permission denied: [client 40.77.167.24:55571] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 13:47:48.379857 2026] [ssl:error] [pid 3328384:tid 3328384] (70014)End of file found: [client 216.73.216.199:20634] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:47:48.445301 2026] [ssl:error] [pid 3331849:tid 3331849] (EAI 2)Name or service not known: [client 144.76.19.72:37176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:48.445330 2026] [ssl:error] [pid 3331849:tid 3331849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:48.506230 2026] [ssl:error] [pid 3313545:tid 3313545] (EAI 2)Name or service not known: [client 144.76.19.72:37188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:48.506262 2026] [ssl:error] [pid 3313545:tid 3313545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:48.709958 2026] [authz_core:error] [pid 3323726:tid 3323726] [client 66.249.66.33:52437] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:47:48.712621 2026] [authz_core:error] [pid 3323726:tid 3323726] [client 66.249.66.33:52437] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:47:49.423425 2026] [security2:error] [pid 3263005:tid 3263005] [client 43.157.153.236:41176] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amtH9d3t5WQcFbo2XrzAxQAAAB0"]
[Thu Jul 30 13:47:49.441733 2026] [lsapi:warn] [pid 3328491:tid 3328491] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:50.904133 2026] [lsapi:warn] [pid 3340746:tid 3340746] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:51.560825 2026] [ssl:error] [pid 3328609:tid 3328609] (EAI 2)Name or service not known: [client 144.76.19.72:62602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:51.560857 2026] [ssl:error] [pid 3328609:tid 3328609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:51.613499 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:62608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:51.613527 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:52.048044 2026] [security2:error] [pid 3316976:tid 3316976] [client 47.128.125.117:16434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtH-LFuCV2Qy5u6GE38vgAAAAo"]
[Thu Jul 30 13:47:52.259316 2026] [security2:error] [pid 3308363:tid 3308363] [client 85.208.96.204:54208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1026.0.html"] [unique_id "amtH-IgooirW7iHdcKmX2AAAAAk"]
[Thu Jul 30 13:47:54.666677 2026] [ssl:error] [pid 3336312:tid 3336312] (EAI 2)Name or service not known: [client 144.76.19.72:62616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:54.666709 2026] [ssl:error] [pid 3336312:tid 3336312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:54.721299 2026] [ssl:error] [pid 3316976:tid 3316976] (EAI 2)Name or service not known: [client 144.76.19.72:62622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:54.721327 2026] [ssl:error] [pid 3316976:tid 3316976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:55.391400 2026] [lsapi:warn] [pid 3316976:tid 3316976] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:47:55.482649 2026] [core:error] [pid 3318125:tid 3318125] [client 178.20.45.159:53748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/#comment-133978
[Thu Jul 30 13:47:55.482680 2026] [core:error] [pid 3318125:tid 3318125] [client 178.20.45.159:53748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/#comment-133978
[Thu Jul 30 13:47:55.617160 2026] [core:crit] [pid 3318125:tid 3318125] (13)Permission denied: [client 178.20.45.159:63706] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/
[Thu Jul 30 13:47:57.158437 2026] [access_compat:error] [pid 3338789:tid 3338789] [client 202.88.254.53:59990] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:47:57.708968 2026] [access_compat:error] [pid 3332014:tid 3332014] [client 129.28.84.30:52818] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 13:47:57.798112 2026] [ssl:error] [pid 3340744:tid 3340744] (EAI 2)Name or service not known: [client 144.76.19.72:62628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:57.798160 2026] [ssl:error] [pid 3340744:tid 3340744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:47:57.854673 2026] [ssl:error] [pid 3328609:tid 3328609] (EAI 2)Name or service not known: [client 144.76.19.72:62640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:47:57.854704 2026] [ssl:error] [pid 3328609:tid 3328609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:00.911903 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:36110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:00.911932 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:00.967510 2026] [ssl:error] [pid 3339129:tid 3339129] (EAI 2)Name or service not known: [client 144.76.19.72:36126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:00.967543 2026] [ssl:error] [pid 3339129:tid 3339129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:01.503132 2026] [lsapi:warn] [pid 3308363:tid 3308363] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:03.693230 2026] [ssl:error] [pid 3339486:tid 3339486] (70014)End of file found: [client 216.73.216.199:4647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:48:04.022277 2026] [ssl:error] [pid 3323726:tid 3323726] (EAI 2)Name or service not known: [client 144.76.19.72:36136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:04.022309 2026] [ssl:error] [pid 3323726:tid 3323726] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:04.076556 2026] [ssl:error] [pid 3338789:tid 3338789] (EAI 2)Name or service not known: [client 144.76.19.72:36142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:04.076584 2026] [ssl:error] [pid 3338789:tid 3338789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:04.113630 2026] [access_compat:error] [pid 3339009:tid 3339009] [client 202.88.254.53:60183] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:48:04.193199 2026] [lsapi:warn] [pid 3336314:tid 3336314] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:05.745019 2026] [security2:error] [pid 3340745:tid 3340745] [client 85.208.96.195:61438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/are-any-dmv-open-on-saturday-in-ny"] [unique_id "amtIBbmXoQioP2aHXSZEeAAAACw"]
[Thu Jul 30 13:48:05.957236 2026] [lsapi:warn] [pid 3328491:tid 3328491] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:06.463570 2026] [security2:error] [pid 3318123:tid 3318123] [client 49.51.160.212:56781] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIBpnJiWEu_WFctm3iHgAAACU"]
[Thu Jul 30 13:48:06.463622 2026] [security2:error] [pid 3318123:tid 3318123] [client 49.51.160.212:56781] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIBpnJiWEu_WFctm3iHgAAACU"]
[Thu Jul 30 13:48:06.463872 2026] [security2:error] [pid 3318123:tid 3318123] [client 49.51.160.212:56781] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIBpnJiWEu_WFctm3iHgAAACU"]
[Thu Jul 30 13:48:06.467241 2026] [cgi:error] [pid 3308363:tid 3308363] [client 20.63.10.215:48647] AH02811: stderr from /home/aurorav/public_html/auroravation.com/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:48:07.131109 2026] [ssl:error] [pid 3343299:tid 3343299] (EAI 2)Name or service not known: [client 144.76.19.72:36154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:07.131144 2026] [ssl:error] [pid 3343299:tid 3343299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:07.185778 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:36156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:07.185809 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:08.101408 2026] [security2:error] [pid 3339129:tid 3339129] [client 43.130.115.146:58581] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtICEZx4Sbl6duGQG-j-AAAABg"]
[Thu Jul 30 13:48:08.101459 2026] [security2:error] [pid 3339129:tid 3339129] [client 43.130.115.146:58581] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtICEZx4Sbl6duGQG-j-AAAABg"]
[Thu Jul 30 13:48:08.101764 2026] [security2:error] [pid 3339129:tid 3339129] [client 43.130.115.146:58581] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtICEZx4Sbl6duGQG-j-AAAABg"]
[Thu Jul 30 13:48:09.292611 2026] [access_compat:error] [pid 3340643:tid 3340643] [client 45.158.164.139:46338] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:48:09.588205 2026] [security2:error] [pid 3343299:tid 3343299] [client 185.191.171.14:35832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg433/"] [unique_id "amtICQN72mv1FZ10u00wnwAAAAA"]
[Thu Jul 30 13:48:10.240649 2026] [ssl:error] [pid 3339486:tid 3339486] (EAI 2)Name or service not known: [client 144.76.19.72:51090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:10.240695 2026] [ssl:error] [pid 3339486:tid 3339486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:10.340841 2026] [ssl:error] [pid 3326958:tid 3326958] (EAI 2)Name or service not known: [client 144.76.19.72:51096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:10.340871 2026] [ssl:error] [pid 3326958:tid 3326958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:10.445145 2026] [security2:error] [pid 3313545:tid 3313545] [client 43.130.115.146:30357] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtICkwmQW0KwocWYHXp4wAAABs"]
[Thu Jul 30 13:48:10.445195 2026] [security2:error] [pid 3313545:tid 3313545] [client 43.130.115.146:30357] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtICkwmQW0KwocWYHXp4wAAABs"]
[Thu Jul 30 13:48:10.445445 2026] [security2:error] [pid 3313545:tid 3313545] [client 43.130.115.146:30357] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtICkwmQW0KwocWYHXp4wAAABs"]
[Thu Jul 30 13:48:11.458569 2026] [lsapi:warn] [pid 3340539:tid 3340539] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:12.126821 2026] [lsapi:warn] [pid 3338789:tid 3338789] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:13.239281 2026] [lsapi:warn] [pid 3343927:tid 3343927] [client 86.172.49.134:56529] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 13:48:13.239335 2026] [lsapi:warn] [pid 3343927:tid 3343927] [client 86.172.49.134:56529] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 13:48:13.395489 2026] [ssl:error] [pid 3343299:tid 3343299] (EAI 2)Name or service not known: [client 144.76.19.72:51106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:13.395520 2026] [ssl:error] [pid 3343299:tid 3343299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:13.448370 2026] [ssl:error] [pid 3318125:tid 3318125] (EAI 2)Name or service not known: [client 144.76.19.72:51114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:13.448401 2026] [ssl:error] [pid 3318125:tid 3318125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:13.622296 2026] [core:error] [pid 3344025:tid 3344025] [client 66.249.66.8:41456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:48:13.622342 2026] [core:error] [pid 3344025:tid 3344025] [client 66.249.66.8:41456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:48:15.687792 2026] [security2:error] [pid 3314931:tid 3314931] [client 114.119.146.111:42055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~19,18/request_format~html"] [unique_id "amtIDzs1-4EFsmq4VwkIlAAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E19
[Thu Jul 30 13:48:16.518222 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:51120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:16.518248 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:16.525735 2026] [lsapi:warn] [pid 3344367:tid 3344367] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:16.575546 2026] [ssl:error] [pid 3308363:tid 3308363] (EAI 2)Name or service not known: [client 144.76.19.72:51130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:16.575570 2026] [ssl:error] [pid 3308363:tid 3308363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:16.657625 2026] [access_compat:error] [pid 3340744:tid 3340744] [client 202.88.254.53:60553] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:48:17.321600 2026] [security2:error] [pid 3332014:tid 3332014] [client 114.119.146.111:42063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~19,18/request_format~html"] [unique_id "amtIEVMmzyPvN0vGpnVKlwAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E19
[Thu Jul 30 13:48:19.633865 2026] [ssl:error] [pid 3342594:tid 3342594] (EAI 2)Name or service not known: [client 144.76.19.72:22256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:19.633900 2026] [ssl:error] [pid 3342594:tid 3342594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:19.697557 2026] [ssl:error] [pid 3313545:tid 3313545] (EAI 2)Name or service not known: [client 144.76.19.72:22262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:19.697590 2026] [ssl:error] [pid 3313545:tid 3313545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:22.716220 2026] [lsapi:warn] [pid 3336789:tid 3336789] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:22.764829 2026] [ssl:error] [pid 3340745:tid 3340745] (EAI 2)Name or service not known: [client 144.76.19.72:22276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:22.764875 2026] [ssl:error] [pid 3340745:tid 3340745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:22.819694 2026] [ssl:error] [pid 3313545:tid 3313545] (EAI 2)Name or service not known: [client 144.76.19.72:22286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:22.819735 2026] [ssl:error] [pid 3313545:tid 3313545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:23.172844 2026] [lsapi:warn] [pid 3344025:tid 3344025] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:23.700552 2026] [ssl:error] [pid 3342399:tid 3342399] (70014)End of file found: [client 216.73.216.199:42088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:48:24.728263 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/as.php
[Thu Jul 30 13:48:24.728322 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:24.813495 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/k.php
[Thu Jul 30 13:48:24.813562 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:24.898718 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/system_log.php
[Thu Jul 30 13:48:24.898772 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:24.983870 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 13:48:24.983927 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.069263 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/autoload_classmap.php
[Thu Jul 30 13:48:25.069316 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.155653 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hosty.php
[Thu Jul 30 13:48:25.155709 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.240972 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/test1.php
[Thu Jul 30 13:48:25.241025 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.335312 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zwso.php
[Thu Jul 30 13:48:25.335365 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.420477 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fpwch.php
[Thu Jul 30 13:48:25.420532 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.505593 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mini
[Thu Jul 30 13:48:25.533861 2026] [access_compat:error] [pid 3340539:tid 3340539] [client 202.88.254.53:61114] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:48:25.593595 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blog-header.php
[Thu Jul 30 13:48:25.593662 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.694661 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about
[Thu Jul 30 13:48:25.788596 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/function
[Thu Jul 30 13:48:25.877352 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-signin.php
[Thu Jul 30 13:48:25.877405 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:25.879699 2026] [ssl:error] [pid 3339009:tid 3339009] (EAI 2)Name or service not known: [client 144.76.19.72:22294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:25.879733 2026] [ssl:error] [pid 3339009:tid 3339009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:25.933595 2026] [ssl:error] [pid 3344481:tid 3344481] (EAI 2)Name or service not known: [client 144.76.19.72:22296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:25.933633 2026] [ssl:error] [pid 3344481:tid 3344481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:25.962530 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 13:48:25.962583 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.007201 2026] [security2:error] [pid 3336312:tid 3336312] [client 167.114.47.75:55784] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amtIGhHmFZvgq1e3o2STdwAAAAY"]
[Thu Jul 30 13:48:26.047877 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gg.php
[Thu Jul 30 13:48:26.047933 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.148950 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class.php
[Thu Jul 30 13:48:26.149004 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.237399 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/flower.php
[Thu Jul 30 13:48:26.237452 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.323613 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/motu.php
[Thu Jul 30 13:48:26.323667 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.408827 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 13:48:26.408878 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.494080 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lite.php
[Thu Jul 30 13:48:26.494135 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.579807 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lock360.php
[Thu Jul 30 13:48:26.579860 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.665151 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 13:48:26.761846 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-links-opml.php
[Thu Jul 30 13:48:26.761898 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.847551 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.alf.php
[Thu Jul 30 13:48:26.847601 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:26.932873 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ws.php
[Thu Jul 30 13:48:26.932927 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.018477 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css
[Thu Jul 30 13:48:27.053528 2026] [lsapi:warn] [pid 3332014:tid 3332014] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:27.103806 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ioxi-o.php
[Thu Jul 30 13:48:27.103866 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.189763 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ws54.php
[Thu Jul 30 13:48:27.189828 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.282331 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/155.php
[Thu Jul 30 13:48:27.282390 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.367798 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 13:48:27.453104 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xmlrpc.php
[Thu Jul 30 13:48:27.453157 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.538638 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tinyfilemanager.php
[Thu Jul 30 13:48:27.538727 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.644753 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hplfuns.php
[Thu Jul 30 13:48:27.644803 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.732964 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bthil.php
[Thu Jul 30 13:48:27.733016 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.818045 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cv.php
[Thu Jul 30 13:48:27.818113 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.905906 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sf.php
[Thu Jul 30 13:48:27.905972 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:27.991807 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content.php
[Thu Jul 30 13:48:27.991871 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:28.082117 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.bod
[Thu Jul 30 13:48:28.167439 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/txets.php
[Thu Jul 30 13:48:28.167500 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:28.252483 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wk
[Thu Jul 30 13:48:28.337665 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/222.php
[Thu Jul 30 13:48:28.337717 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:28.428638 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/new.php
[Thu Jul 30 13:48:28.428690 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:28.522626 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 13:48:28.608059 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.trash7206
[Thu Jul 30 13:48:28.693451 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 13:48:28.693507 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:28.778776 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/error.php
[Thu Jul 30 13:48:28.778825 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:28.864034 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a7.php
[Thu Jul 30 13:48:28.864098 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 13:48:28.949280 2026] [access_compat:error] [pid 3340747:tid 3340747] [client 20.104.16.169:1880] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 13:48:28.994717 2026] [ssl:error] [pid 3328490:tid 3328490] (EAI 2)Name or service not known: [client 144.76.19.72:22298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:28.994762 2026] [ssl:error] [pid 3328490:tid 3328490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:29.046176 2026] [ssl:error] [pid 3336917:tid 3336917] (EAI 2)Name or service not known: [client 144.76.19.72:22314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:29.046211 2026] [ssl:error] [pid 3336917:tid 3336917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:30.681192 2026] [lsapi:warn] [pid 3306062:tid 3306062] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:31.810564 2026] [access_compat:error] [pid 3342399:tid 3342399] [client 202.88.254.53:61385] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:48:32.123704 2026] [ssl:error] [pid 3345859:tid 3345859] (EAI 2)Name or service not known: [client 144.76.19.72:55854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:32.123757 2026] [ssl:error] [pid 3345859:tid 3345859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:32.196121 2026] [ssl:error] [pid 3317891:tid 3317891] (EAI 2)Name or service not known: [client 144.76.19.72:55856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:32.196160 2026] [ssl:error] [pid 3317891:tid 3317891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:33.307125 2026] [lsapi:warn] [pid 3345859:tid 3345859] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:33.891649 2026] [ssl:error] [pid 3318123:tid 3318123] (70014)End of file found: [client 216.73.216.199:4986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:48:35.254733 2026] [ssl:error] [pid 3344026:tid 3344026] (EAI 2)Name or service not known: [client 144.76.19.72:55868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:35.254791 2026] [ssl:error] [pid 3344026:tid 3344026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:35.307177 2026] [ssl:error] [pid 3340744:tid 3340744] (EAI 2)Name or service not known: [client 144.76.19.72:55884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:35.307210 2026] [ssl:error] [pid 3340744:tid 3340744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:37.105852 2026] [access_compat:error] [pid 3336419:tid 3336419] [client 202.88.254.53:61675] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:48:37.868645 2026] [lsapi:warn] [pid 3344482:tid 3344482] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:38.362176 2026] [ssl:error] [pid 3340747:tid 3340747] (EAI 2)Name or service not known: [client 144.76.19.72:55890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:38.362210 2026] [ssl:error] [pid 3340747:tid 3340747] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:38.418484 2026] [ssl:error] [pid 3340643:tid 3340643] (EAI 2)Name or service not known: [client 144.76.19.72:55902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:38.418515 2026] [ssl:error] [pid 3340643:tid 3340643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:41.336524 2026] [lsapi:warn] [pid 3344026:tid 3344026] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:41.475296 2026] [ssl:error] [pid 3343404:tid 3343404] (EAI 2)Name or service not known: [client 144.76.19.72:23294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:41.475343 2026] [ssl:error] [pid 3343404:tid 3343404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:41.639418 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:23304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:41.639446 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:43.162770 2026] [access_compat:error] [pid 3336312:tid 3336312] [client 202.88.254.53:61917] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:48:43.780685 2026] [access_compat:error] [pid 3343927:tid 3343927] [client 45.158.164.139:50272] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:48:43.924163 2026] [lsapi:warn] [pid 3344026:tid 3344026] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:44.696773 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:23320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:44.696804 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:44.760586 2026] [ssl:error] [pid 3340744:tid 3340744] (EAI 2)Name or service not known: [client 144.76.19.72:23328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:44.760629 2026] [ssl:error] [pid 3340744:tid 3340744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:47.824517 2026] [ssl:error] [pid 3318125:tid 3318125] (EAI 2)Name or service not known: [client 144.76.19.72:23344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:47.824550 2026] [ssl:error] [pid 3318125:tid 3318125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:47.880170 2026] [ssl:error] [pid 3343927:tid 3343927] (EAI 2)Name or service not known: [client 144.76.19.72:23356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:47.880203 2026] [ssl:error] [pid 3343927:tid 3343927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:48.438353 2026] [lsapi:warn] [pid 3306062:tid 3306062] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:48.706584 2026] [ssl:error] [pid 3342594:tid 3342594] (70014)End of file found: [client 216.73.216.199:59441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:48:49.011130 2026] [access_compat:error] [pid 3336916:tid 3336916] [client 202.88.254.53:62232] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:48:50.934830 2026] [ssl:error] [pid 3347742:tid 3347742] (EAI 2)Name or service not known: [client 144.76.19.72:55198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:50.934865 2026] [ssl:error] [pid 3347742:tid 3347742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:51.007603 2026] [ssl:error] [pid 3344482:tid 3344482] (EAI 2)Name or service not known: [client 144.76.19.72:55202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:51.007641 2026] [ssl:error] [pid 3344482:tid 3344482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:51.950189 2026] [lsapi:warn] [pid 3316976:tid 3316976] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:54.083209 2026] [ssl:error] [pid 3340539:tid 3340539] (EAI 2)Name or service not known: [client 144.76.19.72:55204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:54.083254 2026] [ssl:error] [pid 3340539:tid 3340539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:54.139458 2026] [ssl:error] [pid 3331849:tid 3331849] (EAI 2)Name or service not known: [client 144.76.19.72:55214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:54.139495 2026] [ssl:error] [pid 3331849:tid 3331849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:54.534623 2026] [lsapi:warn] [pid 3342594:tid 3342594] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:55.860388 2026] [authz_core:error] [pid 3336789:tid 3336789] [client 52.238.199.152:18433] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/ID3/error_log
[Thu Jul 30 13:48:57.199207 2026] [ssl:error] [pid 3342594:tid 3342594] (EAI 2)Name or service not known: [client 144.76.19.72:55230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:57.199239 2026] [ssl:error] [pid 3342594:tid 3342594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:57.253806 2026] [ssl:error] [pid 3326958:tid 3326958] (EAI 2)Name or service not known: [client 144.76.19.72:55242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:48:57.253835 2026] [ssl:error] [pid 3326958:tid 3326958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:48:58.097915 2026] [cgi:error] [pid 3344026:tid 3344026] [client 51.120.70.186:41572] AH02812: stderr from /home/ditchfes/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:48:59.030264 2026] [lsapi:warn] [pid 3331849:tid 3331849] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:48:59.124363 2026] [security2:error] [pid 3347742:tid 3347742] [client 185.191.171.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2016/04/07/young-reuben-secures-3rd-in-tour-of-tesco-youth-series/"] [unique_id "amtIO4-mEYHOH6HlvixXjAAAAAA"]
[Thu Jul 30 13:49:00.014820 2026] [access_compat:error] [pid 3348604:tid 3348604] [client 202.88.254.53:62797] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:49:00.247816 2026] [security2:error] [pid 3348703:tid 3348703] [client 110.249.202.142:23390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amtIPHRn_dsWMPWyFdn9IgAAABQ"]
[Thu Jul 30 13:49:00.324541 2026] [ssl:error] [pid 3347742:tid 3347742] (EAI 2)Name or service not known: [client 144.76.19.72:43044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:00.324567 2026] [ssl:error] [pid 3347742:tid 3347742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:00.421792 2026] [ssl:error] [pid 3331849:tid 3331849] (EAI 2)Name or service not known: [client 144.76.19.72:43054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:00.421834 2026] [ssl:error] [pid 3331849:tid 3331849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:02.184125 2026] [authz_core:error] [pid 3336789:tid 3336789] [client 52.238.199.152:18433] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-admin/includes/error_log
[Thu Jul 30 13:49:02.545848 2026] [lsapi:warn] [pid 3340539:tid 3340539] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:03.475721 2026] [ssl:error] [pid 3348703:tid 3348703] (EAI 2)Name or service not known: [client 144.76.19.72:43068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:03.475759 2026] [ssl:error] [pid 3348703:tid 3348703] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:03.492766 2026] [security2:error] [pid 3348815:tid 3348815] [client 175.27.171.245:38486] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.innerspacer.co.uk"] [uri "/"] [unique_id "amtIP15o__TegmW015KJKwAAACY"]
[Thu Jul 30 13:49:03.530704 2026] [ssl:error] [pid 3318125:tid 3318125] (EAI 2)Name or service not known: [client 144.76.19.72:43070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:03.530732 2026] [ssl:error] [pid 3318125:tid 3318125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:03.558182 2026] [authz_core:error] [pid 3336789:tid 3336789] [client 52.238.199.152:18433] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/error_log
[Thu Jul 30 13:49:03.711102 2026] [ssl:error] [pid 3348282:tid 3348282] (70014)End of file found: [client 216.73.216.199:65513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:49:05.179984 2026] [lsapi:warn] [pid 3314931:tid 3314931] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:06.173037 2026] [security2:error] [pid 3326958:tid 3326958] [client 105.246.242.139:57578] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIQoYPDEz5P-c8n6Q5rwAAAAE"]
[Thu Jul 30 13:49:06.173103 2026] [security2:error] [pid 3326958:tid 3326958] [client 105.246.242.139:57578] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIQoYPDEz5P-c8n6Q5rwAAAAE"]
[Thu Jul 30 13:49:06.173356 2026] [security2:error] [pid 3326958:tid 3326958] [client 105.246.242.139:57578] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIQoYPDEz5P-c8n6Q5rwAAAAE"]
[Thu Jul 30 13:49:06.216161 2026] [security2:error] [pid 3348604:tid 3348604] [client 185.191.171.17:28486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/ark-best-way-to-destroy-wood-foundation"] [unique_id "amtIQrna7K6NF6ctEweQeAAAAAs"]
[Thu Jul 30 13:49:06.588097 2026] [ssl:error] [pid 3344481:tid 3344481] (EAI 2)Name or service not known: [client 144.76.19.72:43080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:06.588128 2026] [ssl:error] [pid 3344481:tid 3344481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:06.642276 2026] [authz_core:error] [pid 3338789:tid 3338789] [client 66.249.66.33:59746] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:49:06.644938 2026] [authz_core:error] [pid 3338789:tid 3338789] [client 66.249.66.33:59746] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:49:06.645243 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:43090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:06.645266 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:06.761528 2026] [security2:error] [pid 3345859:tid 3345859] [client 185.191.171.13:22084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1992.0/prev_next,prev.html"] [unique_id "amtIQsI802NEOfPqHHQUAwAAAAg"]
[Thu Jul 30 13:49:08.680410 2026] [security2:error] [pid 3336419:tid 3336419] [client 74.7.227.170:33164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "acthoroughbreds.com"] [uri "/"] [unique_id "amtIRD8MUbtkAZLHHhYBdwAAABM"]
[Thu Jul 30 13:49:09.701216 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:39262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:09.701252 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:09.755898 2026] [ssl:error] [pid 3348814:tid 3348814] (EAI 2)Name or service not known: [client 144.76.19.72:39276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:09.755928 2026] [ssl:error] [pid 3348814:tid 3348814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:09.787461 2026] [lsapi:warn] [pid 3348704:tid 3348704] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:10.489548 2026] [access_compat:error] [pid 3344025:tid 3344025] [client 202.88.254.53:63348] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:49:10.507927 2026] [security2:error] [pid 3344026:tid 3344026] [client 183.171.64.24:54904] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIRj6Esf50ceJ50Gdh9AAAABk"]
[Thu Jul 30 13:49:10.507982 2026] [security2:error] [pid 3344026:tid 3344026] [client 183.171.64.24:54904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIRj6Esf50ceJ50Gdh9AAAABk"]
[Thu Jul 30 13:49:10.508276 2026] [security2:error] [pid 3344026:tid 3344026] [client 183.171.64.24:54904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIRj6Esf50ceJ50Gdh9AAAABk"]
[Thu Jul 30 13:49:10.578720 2026] [authz_core:error] [pid 3338789:tid 3338789] [client 66.249.66.33:59746] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:49:10.581415 2026] [authz_core:error] [pid 3338789:tid 3338789] [client 66.249.66.33:59746] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:49:10.755785 2026] [security2:error] [pid 3348282:tid 3348282] [client 94.154.43.184:53034] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "wildduckdesigns.co.uk"] [uri "/.env"] [unique_id "amtIRhJKwLgLPSn5nl1ouwAAAAk"]
[Thu Jul 30 13:49:10.755980 2026] [security2:error] [pid 3348282:tid 3348282] [client 94.154.43.184:53034] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wildduckdesigns.co.uk"] [uri "/.env"] [unique_id "amtIRhJKwLgLPSn5nl1ouwAAAAk"]
[Thu Jul 30 13:49:10.756216 2026] [security2:error] [pid 3348282:tid 3348282] [client 94.154.43.184:53034] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "wildduckdesigns.co.uk"] [uri "/.env"] [unique_id "amtIRhJKwLgLPSn5nl1ouwAAAAk"]
[Thu Jul 30 13:49:12.563530 2026] [security2:error] [pid 3340539:tid 3340539] [client 185.191.171.16:46206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1664.0/prev_next,next.html"] [unique_id "amtISDIxL_Jw0HH2WRL_dAAAAAM"]
[Thu Jul 30 13:49:12.851603 2026] [ssl:error] [pid 3348814:tid 3348814] (EAI 2)Name or service not known: [client 144.76.19.72:39290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:12.851633 2026] [ssl:error] [pid 3348814:tid 3348814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:12.906408 2026] [ssl:error] [pid 3330964:tid 3330964] (EAI 2)Name or service not known: [client 144.76.19.72:39302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:12.906451 2026] [ssl:error] [pid 3330964:tid 3330964] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:13.211355 2026] [lsapi:warn] [pid 3348604:tid 3348604] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:14.286949 2026] [security2:error] [pid 3332014:tid 3332014] [client 160.238.226.70:39679] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtISlMmzyPvN0vGpnVKqgAAACo"]
[Thu Jul 30 13:49:14.287014 2026] [security2:error] [pid 3332014:tid 3332014] [client 160.238.226.70:39679] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtISlMmzyPvN0vGpnVKqgAAACo"]
[Thu Jul 30 13:49:14.287293 2026] [security2:error] [pid 3332014:tid 3332014] [client 160.238.226.70:39679] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtISlMmzyPvN0vGpnVKqgAAACo"]
[Thu Jul 30 13:49:15.831005 2026] [lsapi:warn] [pid 3312155:tid 3312155] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:15.893280 2026] [security2:error] [pid 3340539:tid 3340539] [client 94.154.43.178:33176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wildduckdesigns.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtISzIxL_Jw0HH2WRL_dwAAAAM"]
[Thu Jul 30 13:49:15.893482 2026] [security2:error] [pid 3340539:tid 3340539] [client 94.154.43.178:33176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wildduckdesigns.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtISzIxL_Jw0HH2WRL_dwAAAAM"]
[Thu Jul 30 13:49:15.893705 2026] [security2:error] [pid 3340539:tid 3340539] [client 94.154.43.178:33176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wildduckdesigns.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtISzIxL_Jw0HH2WRL_dwAAAAM"]
[Thu Jul 30 13:49:15.964526 2026] [ssl:error] [pid 3344025:tid 3344025] (EAI 2)Name or service not known: [client 144.76.19.72:39312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:15.964570 2026] [ssl:error] [pid 3344025:tid 3344025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:16.016487 2026] [ssl:error] [pid 3348703:tid 3348703] (EAI 2)Name or service not known: [client 144.76.19.72:39328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:16.016514 2026] [ssl:error] [pid 3348703:tid 3348703] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:18.504411 2026] [authz_core:error] [pid 3348704:tid 3348704] [client 52.238.199.152:47251] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/IXR/error_log
[Thu Jul 30 13:49:19.040359 2026] [security2:error] [pid 3350312:tid 3350312] [client 23.154.136.143:53568] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtIT4ef_h8eOet1tbnfsQAAAC8"]
[Thu Jul 30 13:49:19.040646 2026] [security2:error] [pid 3350312:tid 3350312] [client 23.154.136.143:53568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtIT4ef_h8eOet1tbnfsQAAAC8"]
[Thu Jul 30 13:49:19.040901 2026] [security2:error] [pid 3350312:tid 3350312] [client 23.154.136.143:53568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtIT4ef_h8eOet1tbnfsQAAAC8"]
[Thu Jul 30 13:49:19.099507 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:39338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:19.099540 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:19.127860 2026] [security2:error] [pid 3350312:tid 3350312] [client 23.154.136.143:53568] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtIT4ef_h8eOet1tbnfsgAAAC8"]
[Thu Jul 30 13:49:19.128182 2026] [security2:error] [pid 3350312:tid 3350312] [client 23.154.136.143:53568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtIT4ef_h8eOet1tbnfsgAAAC8"]
[Thu Jul 30 13:49:19.128415 2026] [security2:error] [pid 3350312:tid 3350312] [client 23.154.136.143:53568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtIT4ef_h8eOet1tbnfsgAAAC8"]
[Thu Jul 30 13:49:19.155934 2026] [ssl:error] [pid 3348817:tid 3348817] (EAI 2)Name or service not known: [client 144.76.19.72:39342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:19.155968 2026] [ssl:error] [pid 3348817:tid 3348817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:20.370986 2026] [lsapi:warn] [pid 3348817:tid 3348817] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:20.520104 2026] [access_compat:error] [pid 3339009:tid 3339009] [client 202.88.254.53:63898] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:49:22.252245 2026] [ssl:error] [pid 3338789:tid 3338789] (EAI 2)Name or service not known: [client 144.76.19.72:61924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:22.252275 2026] [ssl:error] [pid 3338789:tid 3338789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:22.308505 2026] [ssl:error] [pid 3344482:tid 3344482] (EAI 2)Name or service not known: [client 144.76.19.72:61940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:22.308535 2026] [ssl:error] [pid 3344482:tid 3344482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:23.861329 2026] [lsapi:warn] [pid 3350310:tid 3350310] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:24.037493 2026] [core:error] [pid 3306062:tid 3306062] (13)Permission denied: [client 216.73.216.199:55947] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/objs_per_slab
[Thu Jul 30 13:49:25.365563 2026] [ssl:error] [pid 3343927:tid 3343927] (EAI 2)Name or service not known: [client 144.76.19.72:61950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:25.365608 2026] [ssl:error] [pid 3343927:tid 3343927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:25.421205 2026] [ssl:error] [pid 3348817:tid 3348817] (EAI 2)Name or service not known: [client 144.76.19.72:61964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:25.421232 2026] [ssl:error] [pid 3348817:tid 3348817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:26.356304 2026] [lsapi:warn] [pid 3348817:tid 3348817] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:26.616986 2026] [security2:error] [pid 3336789:tid 3336789] [client 148.251.46.181:41654] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtIVoLhnWl8PfED5hHyxQAAABY"]
[Thu Jul 30 13:49:28.531178 2026] [ssl:error] [pid 3316976:tid 3316976] (EAI 2)Name or service not known: [client 144.76.19.72:61970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:28.531233 2026] [ssl:error] [pid 3316976:tid 3316976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:28.596505 2026] [ssl:error] [pid 3339009:tid 3339009] (EAI 2)Name or service not known: [client 144.76.19.72:61986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:28.596535 2026] [ssl:error] [pid 3339009:tid 3339009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:28.924485 2026] [access_compat:error] [pid 3318125:tid 3318125] [client 45.158.164.139:46184] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:49:29.248795 2026] [lsapi:warn] [pid 3348703:tid 3348703] [client 135.232.19.14:10368] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:49:29.248837 2026] [lsapi:warn] [pid 3348703:tid 3348703] [client 135.232.19.14:10368] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:49:30.404083 2026] [access_compat:error] [pid 3332014:tid 3332014] [client 202.88.254.53:64458] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:49:30.966283 2026] [lsapi:warn] [pid 3318125:tid 3318125] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:31.653959 2026] [ssl:error] [pid 3328490:tid 3328490] (EAI 2)Name or service not known: [client 144.76.19.72:49988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:31.653984 2026] [ssl:error] [pid 3328490:tid 3328490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:31.709687 2026] [ssl:error] [pid 3312155:tid 3312155] (EAI 2)Name or service not known: [client 144.76.19.72:49996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:31.709725 2026] [ssl:error] [pid 3312155:tid 3312155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:33.256348 2026] [authz_core:error] [pid 3344481:tid 3344481] [client 66.249.66.34:48128] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:49:33.259012 2026] [authz_core:error] [pid 3344481:tid 3344481] [client 66.249.66.34:48128] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:49:34.039549 2026] [core:error] [pid 3306062:tid 3306062] (13)Permission denied: [client 216.73.216.199:55947] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/nft_log/uevent
[Thu Jul 30 13:49:34.582322 2026] [lsapi:warn] [pid 3348816:tid 3348816] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:34.618370 2026] [security2:error] [pid 3352210:tid 3352210] [client 43.165.186.188:38148] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "amtIXl9mgTM9k2I-2uKr7gAAADE"]
[Thu Jul 30 13:49:34.693950 2026] [authz_core:error] [pid 3326958:tid 3326958] [client 66.249.66.33:36814] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:49:34.696647 2026] [authz_core:error] [pid 3326958:tid 3326958] [client 66.249.66.33:36814] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:49:35.016965 2026] [ssl:error] [pid 3332014:tid 3332014] (EAI 2)Name or service not known: [client 144.76.19.72:50010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:35.016994 2026] [ssl:error] [pid 3332014:tid 3332014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:35.165868 2026] [ssl:error] [pid 3352543:tid 3352543] (EAI 2)Name or service not known: [client 144.76.19.72:50026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:35.165913 2026] [ssl:error] [pid 3352543:tid 3352543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:35.195385 2026] [security2:error] [pid 3352543:tid 3352543] [client 185.191.171.4:42360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6608.0.html"] [unique_id "amtIX74pr5xXZsKccI_gXwAAADU"]
[Thu Jul 30 13:49:35.328901 2026] [security2:error] [pid 3352432:tid 3352432] [client 47.128.50.203:41666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kingston1010.org.uk"] [uri "/robots.txt"] [unique_id "amtIX46Qfq7ghJEfcmV5rQAAADM"]
[Thu Jul 30 13:49:36.951776 2026] [security2:error] [pid 3352432:tid 3352432] [client 43.165.186.188:46098] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amtIYI6Qfq7ghJEfcmV5rgAAADM"], referer: http://the-pryors.co.uk
[Thu Jul 30 13:49:36.953838 2026] [lsapi:warn] [pid 3352542:tid 3352542] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:38.061291 2026] [core:error] [pid 3352100:tid 3352100] [client 66.249.66.45:46846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:49:38.061332 2026] [core:error] [pid 3352100:tid 3352100] [client 66.249.66.45:46846] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:49:38.224681 2026] [ssl:error] [pid 3348816:tid 3348816] (EAI 2)Name or service not known: [client 144.76.19.72:50038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:38.224722 2026] [ssl:error] [pid 3348816:tid 3348816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:38.282717 2026] [ssl:error] [pid 3348604:tid 3348604] (EAI 2)Name or service not known: [client 144.76.19.72:50048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:38.282754 2026] [ssl:error] [pid 3348604:tid 3348604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:39.002001 2026] [security2:error] [pid 3340643:tid 3340643] [client 114.119.155.144:54587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~17,15/request_format~html"] [unique_id "amtIY_5ZWLZSI525MLHBnAAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E17
[Thu Jul 30 13:49:40.169635 2026] [access_compat:error] [pid 3348604:tid 3348604] [client 202.88.254.53:65001] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:49:40.267017 2026] [security2:error] [pid 3348704:tid 3348704] [client 4.201.104.113:20012] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "floc.co.uk"] [uri "/wp-config.php"] [unique_id "amtIZPSrrqLjereuKiSOPQAAAB0"]
[Thu Jul 30 13:49:40.267235 2026] [security2:error] [pid 3348704:tid 3348704] [client 4.201.104.113:20012] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "floc.co.uk"] [uri "/wp-config.php"] [unique_id "amtIZPSrrqLjereuKiSOPQAAAB0"]
[Thu Jul 30 13:49:40.382179 2026] [security2:error] [pid 3348704:tid 3348704] [client 4.201.104.113:20012] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "floc.co.uk"] [uri "/index.php"] [unique_id "amtIZPSrrqLjereuKiSOPQAAAB0"]
[Thu Jul 30 13:49:40.507244 2026] [security2:error] [pid 3350310:tid 3350310] [client 185.191.171.10:63060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4426.0/prev_next,prev.html"] [unique_id "amtIZGSECeiy8zh2C-cF7gAAAC4"]
[Thu Jul 30 13:49:40.884254 2026] [security2:error] [pid 3350210:tid 3350210] [client 114.119.155.144:54597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~17,15/request_format~html"] [unique_id "amtIZAgGaNN53WkTy9GuvgAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E17
[Thu Jul 30 13:49:41.340818 2026] [ssl:error] [pid 3348704:tid 3348704] (EAI 2)Name or service not known: [client 144.76.19.72:51326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:41.340850 2026] [ssl:error] [pid 3348704:tid 3348704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:41.394518 2026] [ssl:error] [pid 3328609:tid 3328609] (EAI 2)Name or service not known: [client 144.76.19.72:51330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:41.394547 2026] [ssl:error] [pid 3328609:tid 3328609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:41.583105 2026] [lsapi:warn] [pid 3332014:tid 3332014] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:44.451457 2026] [ssl:error] [pid 3331849:tid 3331849] (EAI 2)Name or service not known: [client 144.76.19.72:51346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:44.451498 2026] [ssl:error] [pid 3331849:tid 3331849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:44.503406 2026] [ssl:error] [pid 3336419:tid 3336419] (EAI 2)Name or service not known: [client 144.76.19.72:51362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:44.503445 2026] [ssl:error] [pid 3336419:tid 3336419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:45.205426 2026] [lsapi:warn] [pid 3328609:tid 3328609] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:47.163622 2026] [authz_core:error] [pid 3344481:tid 3344481] [client 66.249.66.34:48128] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:49:47.166437 2026] [authz_core:error] [pid 3344481:tid 3344481] [client 66.249.66.34:48128] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:49:47.544575 2026] [lsapi:warn] [pid 3352211:tid 3352211] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:47.555558 2026] [ssl:error] [pid 3342399:tid 3342399] (EAI 2)Name or service not known: [client 144.76.19.72:51366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:47.555588 2026] [ssl:error] [pid 3342399:tid 3342399] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:47.611708 2026] [ssl:error] [pid 3352543:tid 3352543] (EAI 2)Name or service not known: [client 144.76.19.72:51368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:47.611738 2026] [ssl:error] [pid 3352543:tid 3352543] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:50.666728 2026] [ssl:error] [pid 3340539:tid 3340539] (EAI 2)Name or service not known: [client 144.76.19.72:55050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:50.666759 2026] [ssl:error] [pid 3340539:tid 3340539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:50.721207 2026] [ssl:error] [pid 3343927:tid 3343927] (EAI 2)Name or service not known: [client 144.76.19.72:55054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:50.721238 2026] [ssl:error] [pid 3343927:tid 3343927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:50.875486 2026] [access_compat:error] [pid 3352208:tid 3352208] [client 202.88.254.53:49161] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:49:51.335583 2026] [access_compat:error] [pid 3348604:tid 3348604] [client 45.158.164.139:53290] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:49:52.154790 2026] [lsapi:warn] [pid 3352101:tid 3352101] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:53.814505 2026] [ssl:error] [pid 3340643:tid 3340643] (EAI 2)Name or service not known: [client 144.76.19.72:55068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:53.814537 2026] [ssl:error] [pid 3340643:tid 3340643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:53.870759 2026] [ssl:error] [pid 3336916:tid 3336916] (EAI 2)Name or service not known: [client 144.76.19.72:55072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:53.870796 2026] [ssl:error] [pid 3336916:tid 3336916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:54.050640 2026] [ssl:error] [pid 3306062:tid 3306062] (70014)End of file found: [client 216.73.216.199:55947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:49:55.861953 2026] [lsapi:warn] [pid 3316976:tid 3316976] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:49:56.443640 2026] [security2:error] [pid 3348704:tid 3348704] [client 43.157.95.131:39154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtIdPSrrqLjereuKiSOQAAAAB0"]
[Thu Jul 30 13:49:56.925449 2026] [ssl:error] [pid 3328609:tid 3328609] (EAI 2)Name or service not known: [client 144.76.19.72:55080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:56.925491 2026] [ssl:error] [pid 3328609:tid 3328609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:56.977814 2026] [ssl:error] [pid 3352211:tid 3352211] (EAI 2)Name or service not known: [client 144.76.19.72:55084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:49:56.977854 2026] [ssl:error] [pid 3352211:tid 3352211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:49:58.026859 2026] [security2:error] [pid 3328609:tid 3328609] [client 43.157.95.131:47964] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtIdneVeaYjZapzagSduAAAABc"], referer: http://baketastic.co.uk
[Thu Jul 30 13:49:58.179275 2026] [lsapi:warn] [pid 3340539:tid 3340539] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:00.056174 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:45820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:00.056213 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:00.115343 2026] [ssl:error] [pid 3352432:tid 3352432] (EAI 2)Name or service not known: [client 144.76.19.72:45828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:00.115382 2026] [ssl:error] [pid 3352432:tid 3352432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:01.793852 2026] [access_compat:error] [pid 3348704:tid 3348704] [client 202.88.254.53:49716] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:02.704121 2026] [lsapi:warn] [pid 3336789:tid 3336789] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:03.172104 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:45842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:03.172135 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:03.226601 2026] [ssl:error] [pid 3339129:tid 3339129] (EAI 2)Name or service not known: [client 144.76.19.72:45858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:03.226630 2026] [ssl:error] [pid 3339129:tid 3339129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:04.171936 2026] [cgi:error] [pid 3352017:tid 3352017] [client 52.238.192.78:1630] AH02812: stderr from /home/davidebell/public_html/localdonuts.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:50:04.272619 2026] [ssl:error] [pid 3331849:tid 3331849] (70014)End of file found: [client 216.73.216.199:56137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:50:06.112448 2026] [security2:error] [pid 3352432:tid 3352432] [client 85.208.98.16:53400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/white-sox-spring-training-jersey-2016-k.html"] [unique_id "amtIfo6Qfq7ghJEfcmV5tQAAADM"]
[Thu Jul 30 13:50:06.319473 2026] [ssl:error] [pid 3347742:tid 3347742] (EAI 2)Name or service not known: [client 144.76.19.72:45868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:06.319511 2026] [ssl:error] [pid 3347742:tid 3347742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:06.374153 2026] [ssl:error] [pid 3312229:tid 3312229] (EAI 2)Name or service not known: [client 144.76.19.72:45878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:06.374182 2026] [ssl:error] [pid 3312229:tid 3312229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:06.519581 2026] [lsapi:warn] [pid 3355643:tid 3355643] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:06.730281 2026] [security2:error] [pid 3352209:tid 3352209] [client 185.191.171.14:35922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/lebron-james-career-win-loss-record"] [unique_id "amtIfsMbteHt0VOpkPYjEgAAADA"]
[Thu Jul 30 13:50:08.064953 2026] [access_compat:error] [pid 3347742:tid 3347742] [client 202.88.254.53:49985] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:08.776125 2026] [lsapi:warn] [pid 3336419:tid 3336419] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:09.454035 2026] [ssl:error] [pid 3347742:tid 3347742] (EAI 2)Name or service not known: [client 144.76.19.72:45884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:09.454079 2026] [ssl:error] [pid 3347742:tid 3347742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:09.474456 2026] [security2:error] [pid 3344481:tid 3344481] [client 43.106.13.94:44567] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIgSnwKYWwnjlUOZSTpAAAACM"]
[Thu Jul 30 13:50:09.474532 2026] [security2:error] [pid 3344481:tid 3344481] [client 43.106.13.94:44567] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIgSnwKYWwnjlUOZSTpAAAACM"]
[Thu Jul 30 13:50:09.474802 2026] [security2:error] [pid 3344481:tid 3344481] [client 43.106.13.94:44567] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIgSnwKYWwnjlUOZSTpAAAACM"]
[Thu Jul 30 13:50:09.508274 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:45896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:09.508312 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:11.488337 2026] [security2:error] [pid 3330964:tid 3330964] [client 37.238.55.245:57953] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIgxCayw4PwsiLyZuYAgAAACE"]
[Thu Jul 30 13:50:11.488385 2026] [security2:error] [pid 3330964:tid 3330964] [client 37.238.55.245:57953] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIgxCayw4PwsiLyZuYAgAAACE"]
[Thu Jul 30 13:50:11.488635 2026] [security2:error] [pid 3330964:tid 3330964] [client 37.238.55.245:57953] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIgxCayw4PwsiLyZuYAgAAACE"]
[Thu Jul 30 13:50:12.565820 2026] [ssl:error] [pid 3339129:tid 3339129] (EAI 2)Name or service not known: [client 144.76.19.72:41186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:12.565865 2026] [ssl:error] [pid 3339129:tid 3339129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:12.623510 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:41194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:12.623537 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:13.261213 2026] [lsapi:warn] [pid 3336916:tid 3336916] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:13.452689 2026] [access_compat:error] [pid 3352101:tid 3352101] [client 202.88.254.53:50264] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:14.408768 2026] [security2:error] [pid 3336789:tid 3336789] [client 156.199.17.194:59382] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIhoLhnWl8PfED5hHy1wAAABY"]
[Thu Jul 30 13:50:14.408818 2026] [security2:error] [pid 3336789:tid 3336789] [client 156.199.17.194:59382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIhoLhnWl8PfED5hHy1wAAABY"]
[Thu Jul 30 13:50:14.409091 2026] [security2:error] [pid 3336789:tid 3336789] [client 156.199.17.194:59382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIhoLhnWl8PfED5hHy1wAAABY"]
[Thu Jul 30 13:50:15.684503 2026] [ssl:error] [pid 3312155:tid 3312155] (EAI 2)Name or service not known: [client 144.76.19.72:41202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:15.684532 2026] [ssl:error] [pid 3312155:tid 3312155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:15.739750 2026] [ssl:error] [pid 3336419:tid 3336419] (EAI 2)Name or service not known: [client 144.76.19.72:41206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:15.739777 2026] [ssl:error] [pid 3336419:tid 3336419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:17.241117 2026] [lsapi:warn] [pid 3340539:tid 3340539] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:18.798617 2026] [ssl:error] [pid 3312155:tid 3312155] (EAI 2)Name or service not known: [client 144.76.19.72:41212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:18.798643 2026] [ssl:error] [pid 3312155:tid 3312155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:18.854619 2026] [ssl:error] [pid 3343927:tid 3343927] (EAI 2)Name or service not known: [client 144.76.19.72:41228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:18.854640 2026] [ssl:error] [pid 3343927:tid 3343927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:19.417281 2026] [lsapi:warn] [pid 3312155:tid 3312155] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:19.607710 2026] [access_compat:error] [pid 3357197:tid 3357197] [client 202.88.254.53:50517] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:21.767189 2026] [security2:error] [pid 3348816:tid 3348816] [client 43.157.22.57:54020] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtIjeoRRwudNO2kOoWEfQAAACc"]
[Thu Jul 30 13:50:21.910950 2026] [ssl:error] [pid 3357196:tid 3357196] (EAI 2)Name or service not known: [client 144.76.19.72:28066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:21.910981 2026] [ssl:error] [pid 3357196:tid 3357196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:21.967584 2026] [ssl:error] [pid 3352101:tid 3352101] (EAI 2)Name or service not known: [client 144.76.19.72:28076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:21.967619 2026] [ssl:error] [pid 3352101:tid 3352101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:22.533985 2026] [security2:error] [pid 3348282:tid 3348282] [client 43.157.22.57:59796] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtIjhJKwLgLPSn5nl1o1gAAAAk"], referer: http://hornsey-town-hall.org.uk
[Thu Jul 30 13:50:24.032714 2026] [lsapi:warn] [pid 3338789:tid 3338789] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:25.024459 2026] [ssl:error] [pid 3344481:tid 3344481] (EAI 2)Name or service not known: [client 144.76.19.72:28078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:25.024514 2026] [ssl:error] [pid 3344481:tid 3344481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:25.082390 2026] [ssl:error] [pid 3344482:tid 3344482] (EAI 2)Name or service not known: [client 144.76.19.72:28086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:25.082419 2026] [ssl:error] [pid 3344482:tid 3344482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:25.870294 2026] [access_compat:error] [pid 3350312:tid 3350312] [client 202.88.254.53:50807] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:27.869551 2026] [lsapi:warn] [pid 3306062:tid 3306062] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:28.141711 2026] [ssl:error] [pid 3357197:tid 3357197] (EAI 2)Name or service not known: [client 144.76.19.72:28098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:28.141749 2026] [ssl:error] [pid 3357197:tid 3357197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:28.198501 2026] [ssl:error] [pid 3336916:tid 3336916] (EAI 2)Name or service not known: [client 144.76.19.72:28104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:28.198532 2026] [ssl:error] [pid 3336916:tid 3336916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:29.985955 2026] [lsapi:warn] [pid 3318125:tid 3318125] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:31.250512 2026] [ssl:error] [pid 3332014:tid 3332014] (EAI 2)Name or service not known: [client 144.76.19.72:27056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:31.250541 2026] [ssl:error] [pid 3332014:tid 3332014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:31.308496 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:27058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:31.308521 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:31.582205 2026] [ssl:error] [pid 3348704:tid 3348704] [client 13.219.121.241:44501] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname theovertones.co.uk provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 13:50:31.952818 2026] [access_compat:error] [pid 3316976:tid 3316976] [client 202.88.254.53:51053] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:33.964364 2026] [authz_core:error] [pid 3336419:tid 3336419] [client 66.249.66.33:40406] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:50:33.967136 2026] [authz_core:error] [pid 3336419:tid 3336419] [client 66.249.66.33:40406] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:50:34.393868 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:27070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:34.393911 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:34.446780 2026] [ssl:error] [pid 3336916:tid 3336916] (EAI 2)Name or service not known: [client 144.76.19.72:27072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:34.446822 2026] [ssl:error] [pid 3336916:tid 3336916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:34.632108 2026] [lsapi:warn] [pid 3355643:tid 3355643] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:36.750852 2026] [authz_core:error] [pid 3352209:tid 3352209] [client 20.63.98.115:62126] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-admin/maint/error_log
[Thu Jul 30 13:50:37.501882 2026] [ssl:error] [pid 3343404:tid 3343404] (EAI 2)Name or service not known: [client 144.76.19.72:27082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:37.501909 2026] [ssl:error] [pid 3343404:tid 3343404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:37.558507 2026] [ssl:error] [pid 3352208:tid 3352208] (EAI 2)Name or service not known: [client 144.76.19.72:27096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:37.558542 2026] [ssl:error] [pid 3352208:tid 3352208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:38.501211 2026] [lsapi:warn] [pid 3316976:tid 3316976] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:39.073670 2026] [ssl:error] [pid 3350210:tid 3350210] (70014)End of file found: [client 216.73.216.199:64285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:50:39.428688 2026] [access_compat:error] [pid 3330964:tid 3330964] [client 202.88.254.53:51363] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:40.278437 2026] [security2:error] [pid 3314931:tid 3314931] [client 47.128.34.228:49328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amtIoDs1-4EFsmq4VwkJFAAAACA"]
[Thu Jul 30 13:50:40.594817 2026] [lsapi:warn] [pid 3336916:tid 3336916] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:40.611888 2026] [ssl:error] [pid 3336419:tid 3336419] (EAI 2)Name or service not known: [client 144.76.19.72:48454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:40.611909 2026] [ssl:error] [pid 3336419:tid 3336419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:40.668654 2026] [ssl:error] [pid 3316976:tid 3316976] (EAI 2)Name or service not known: [client 144.76.19.72:48468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:40.668695 2026] [ssl:error] [pid 3316976:tid 3316976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:43.079500 2026] [security2:error] [pid 3314931:tid 3314931] [client 47.128.34.228:52204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amtIozs1-4EFsmq4VwkJFQAAACA"]
[Thu Jul 30 13:50:43.741497 2026] [ssl:error] [pid 3357196:tid 3357196] (EAI 2)Name or service not known: [client 144.76.19.72:48472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:43.741546 2026] [ssl:error] [pid 3357196:tid 3357196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:43.798361 2026] [ssl:error] [pid 3352432:tid 3352432] (EAI 2)Name or service not known: [client 144.76.19.72:48474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:43.798385 2026] [ssl:error] [pid 3352432:tid 3352432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:45.213798 2026] [lsapi:warn] [pid 3352208:tid 3352208] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:45.512633 2026] [access_compat:error] [pid 3352209:tid 3352209] [client 202.88.254.53:51606] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:46.798320 2026] [access_compat:error] [pid 3348816:tid 3348816] [client 45.158.164.139:43768] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:50:46.853533 2026] [ssl:error] [pid 3350312:tid 3350312] (EAI 2)Name or service not known: [client 144.76.19.72:48490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:46.853576 2026] [ssl:error] [pid 3350312:tid 3350312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:46.916770 2026] [ssl:error] [pid 3336419:tid 3336419] (EAI 2)Name or service not known: [client 144.76.19.72:48500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:46.916802 2026] [ssl:error] [pid 3336419:tid 3336419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:49.164040 2026] [lsapi:warn] [pid 3332014:tid 3332014] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:49.288142 2026] [ssl:error] [pid 3348816:tid 3348816] (70014)End of file found: [client 216.73.216.199:43886] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:50:49.970340 2026] [ssl:error] [pid 3316976:tid 3316976] (EAI 2)Name or service not known: [client 144.76.19.72:61590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:49.970375 2026] [ssl:error] [pid 3316976:tid 3316976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:50.032575 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:61598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:50.032599 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:51.196326 2026] [lsapi:warn] [pid 3316976:tid 3316976] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:52.469396 2026] [access_compat:error] [pid 3316976:tid 3316976] [client 202.88.254.53:51919] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:50:52.641061 2026] [security2:error] [pid 3314931:tid 3314931] [client 114.119.135.193:64189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blow-hairstudio.co.uk"] [uri "/robots.txt"] [unique_id "amtIrDs1-4EFsmq4VwkJGwAAACA"], referer: http://blow-hairstudio.co.uk/robots.txt
[Thu Jul 30 13:50:52.947741 2026] [access_compat:error] [pid 3343927:tid 3343927] [client 45.158.164.139:44960] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:50:53.206997 2026] [ssl:error] [pid 3343404:tid 3343404] (EAI 2)Name or service not known: [client 144.76.19.72:61602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:53.207041 2026] [ssl:error] [pid 3343404:tid 3343404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:53.260416 2026] [ssl:error] [pid 3343404:tid 3343404] (EAI 2)Name or service not known: [client 144.76.19.72:61610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:53.260440 2026] [ssl:error] [pid 3343404:tid 3343404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:55.774796 2026] [lsapi:warn] [pid 3352211:tid 3352211] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:50:56.312414 2026] [ssl:error] [pid 3355643:tid 3355643] (EAI 2)Name or service not known: [client 144.76.19.72:61618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:56.312452 2026] [ssl:error] [pid 3355643:tid 3355643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:56.364670 2026] [ssl:error] [pid 3360840:tid 3360840] (EAI 2)Name or service not known: [client 144.76.19.72:61620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:56.364702 2026] [ssl:error] [pid 3360840:tid 3360840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:59.015813 2026] [authz_core:error] [pid 3306062:tid 3306062] [client 20.63.98.115:54910] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 13:50:59.263861 2026] [ssl:error] [pid 3343404:tid 3343404] (70014)End of file found: [client 216.73.216.199:24342] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:50:59.418522 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:61628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:59.418549 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:59.472819 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:61642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:50:59.472845 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:50:59.846777 2026] [lsapi:warn] [pid 3360613:tid 3360613] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:01.827198 2026] [lsapi:warn] [pid 3336916:tid 3336916] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:02.529581 2026] [ssl:error] [pid 3336916:tid 3336916] (EAI 2)Name or service not known: [client 144.76.19.72:57572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:02.529608 2026] [ssl:error] [pid 3336916:tid 3336916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:02.584441 2026] [ssl:error] [pid 3360613:tid 3360613] (EAI 2)Name or service not known: [client 144.76.19.72:57574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:02.584482 2026] [ssl:error] [pid 3360613:tid 3360613] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:02.941684 2026] [security2:error] [pid 3360613:tid 3360613] [client 114.119.135.136:23849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14/request_format~html"] [unique_id "amtItgQS1LdCY59ASQ2jsQAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14,103/request_format~html
[Thu Jul 30 13:51:04.241063 2026] [authz_core:error] [pid 3316976:tid 3316976] [client 66.249.66.35:62224] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:51:04.243752 2026] [authz_core:error] [pid 3316976:tid 3316976] [client 66.249.66.35:62224] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:51:04.412744 2026] [security2:error] [pid 3357197:tid 3357197] [client 94.154.43.229:48692] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amtIuJ7lg5S7yRaV3BQiEgAAAAw"]
[Thu Jul 30 13:51:04.413130 2026] [security2:error] [pid 3357197:tid 3357197] [client 94.154.43.229:48692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amtIuJ7lg5S7yRaV3BQiEgAAAAw"]
[Thu Jul 30 13:51:04.413518 2026] [security2:error] [pid 3357197:tid 3357197] [client 94.154.43.229:48692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "inrc.org.uk"] [uri "/.env"] [unique_id "amtIuJ7lg5S7yRaV3BQiEgAAAAw"]
[Thu Jul 30 13:51:04.617229 2026] [security2:error] [pid 3336916:tid 3336916] [client 114.119.135.136:23853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14/request_format~html"] [unique_id "amtIuBbKVEMtLP4XeIi46gAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14,103/request_format~html
[Thu Jul 30 13:51:04.880124 2026] [access_compat:error] [pid 3360613:tid 3360613] [client 202.88.254.53:52478] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:51:05.686455 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:57578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:05.686495 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:05.738500 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:57584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:05.738529 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:05.838664 2026] [security2:error] [pid 3348282:tid 3348282] [client 186.32.37.67:45850] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIuRJKwLgLPSn5nl1o5AAAAAk"]
[Thu Jul 30 13:51:05.838715 2026] [security2:error] [pid 3348282:tid 3348282] [client 186.32.37.67:45850] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIuRJKwLgLPSn5nl1o5AAAAAk"]
[Thu Jul 30 13:51:05.838962 2026] [security2:error] [pid 3348282:tid 3348282] [client 186.32.37.67:45850] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIuRJKwLgLPSn5nl1o5AAAAAk"]
[Thu Jul 30 13:51:06.431949 2026] [lsapi:warn] [pid 3340539:tid 3340539] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:07.343284 2026] [authz_core:error] [pid 3362200:tid 3362200] [client 66.249.66.34:48684] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:51:07.346040 2026] [authz_core:error] [pid 3362200:tid 3362200] [client 66.249.66.34:48684] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:51:07.975914 2026] [security2:error] [pid 3360839:tid 3360839] [client 185.191.171.12:18626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/taco-tuesday-san-francisco-2021"] [unique_id "amtIuzLk4JzJKHmya_pJEwAAABQ"]
[Thu Jul 30 13:51:08.814514 2026] [ssl:error] [pid 3361623:tid 3361623] (EAI 2)Name or service not known: [client 144.76.19.72:57588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:08.814559 2026] [ssl:error] [pid 3361623:tid 3361623] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:08.887975 2026] [ssl:error] [pid 3361517:tid 3361517] (EAI 2)Name or service not known: [client 144.76.19.72:57592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:08.888025 2026] [ssl:error] [pid 3361517:tid 3361517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:10.522592 2026] [lsapi:warn] [pid 3330964:tid 3330964] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:10.668698 2026] [security2:error] [pid 3306062:tid 3306062] [client 122.55.231.5:38509] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIvmnasikz7k8pdRNsEwAAAD4"]
[Thu Jul 30 13:51:10.668748 2026] [security2:error] [pid 3306062:tid 3306062] [client 122.55.231.5:38509] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIvmnasikz7k8pdRNsEwAAAD4"]
[Thu Jul 30 13:51:10.668997 2026] [security2:error] [pid 3306062:tid 3306062] [client 122.55.231.5:38509] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIvmnasikz7k8pdRNsEwAAAD4"]
[Thu Jul 30 13:51:10.973339 2026] [access_compat:error] [pid 3352101:tid 3352101] [client 202.88.254.53:52764] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:51:11.972672 2026] [ssl:error] [pid 3352209:tid 3352209] (EAI 2)Name or service not known: [client 144.76.19.72:49822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:11.972721 2026] [ssl:error] [pid 3352209:tid 3352209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:12.027526 2026] [ssl:error] [pid 3306062:tid 3306062] (EAI 2)Name or service not known: [client 144.76.19.72:49834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:12.027557 2026] [ssl:error] [pid 3306062:tid 3306062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:12.446106 2026] [lsapi:warn] [pid 3343927:tid 3343927] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:13.857300 2026] [security2:error] [pid 3352211:tid 3352211] [client 170.0.70.145:8404] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIwbl1GQbs11Gumqfd5AAAADI"]
[Thu Jul 30 13:51:13.857347 2026] [security2:error] [pid 3352211:tid 3352211] [client 170.0.70.145:8404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtIwbl1GQbs11Gumqfd5AAAADI"]
[Thu Jul 30 13:51:13.857619 2026] [security2:error] [pid 3352211:tid 3352211] [client 170.0.70.145:8404] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtIwbl1GQbs11Gumqfd5AAAADI"]
[Thu Jul 30 13:51:15.103573 2026] [ssl:error] [pid 3352211:tid 3352211] (EAI 2)Name or service not known: [client 144.76.19.72:49840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:15.103602 2026] [ssl:error] [pid 3352211:tid 3352211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:15.178422 2026] [ssl:error] [pid 3361624:tid 3361624] (EAI 2)Name or service not known: [client 144.76.19.72:49842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:15.178457 2026] [ssl:error] [pid 3361624:tid 3361624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:16.467656 2026] [access_compat:error] [pid 3352211:tid 3352211] [client 202.88.254.53:53050] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:51:16.792908 2026] [security2:error] [pid 3340539:tid 3340539] [client 43.167.245.18:44954] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtIxDIxL_Jw0HH2WRL_nwAAAAM"], referer: http://www.rock-ola.co.uk
[Thu Jul 30 13:51:17.017213 2026] [core:crit] [pid 3328609:tid 3328609] (13)Permission denied: [client 52.167.144.19:4943] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 13:51:17.079703 2026] [lsapi:warn] [pid 3361762:tid 3361762] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:18.232518 2026] [ssl:error] [pid 3340539:tid 3340539] (EAI 2)Name or service not known: [client 144.76.19.72:49850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:18.232548 2026] [ssl:error] [pid 3340539:tid 3340539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:18.286711 2026] [ssl:error] [pid 3361232:tid 3361232] (EAI 2)Name or service not known: [client 144.76.19.72:49864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:18.286744 2026] [ssl:error] [pid 3361232:tid 3361232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:19.879684 2026] [security2:error] [pid 3340539:tid 3340539] [client 43.167.245.18:43926] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtIxzIxL_Jw0HH2WRL_oAAAAAM"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 13:51:21.300795 2026] [lsapi:warn] [pid 3348604:tid 3348604] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:21.341792 2026] [ssl:error] [pid 3340539:tid 3340539] (EAI 2)Name or service not known: [client 144.76.19.72:35572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:21.341824 2026] [ssl:error] [pid 3340539:tid 3340539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:21.398462 2026] [ssl:error] [pid 3340539:tid 3340539] (EAI 2)Name or service not known: [client 144.76.19.72:35576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:21.398495 2026] [ssl:error] [pid 3340539:tid 3340539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:23.001905 2026] [lsapi:warn] [pid 3328609:tid 3328609] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:24.454033 2026] [ssl:error] [pid 3363846:tid 3363846] (EAI 2)Name or service not known: [client 144.76.19.72:35588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:24.454086 2026] [ssl:error] [pid 3363846:tid 3363846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:24.510456 2026] [ssl:error] [pid 3360838:tid 3360838] (EAI 2)Name or service not known: [client 144.76.19.72:35602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:24.510503 2026] [ssl:error] [pid 3360838:tid 3360838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:25.104866 2026] [security2:error] [pid 3363843:tid 3363843] [client 43.165.197.116:39658] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highcleresyndicates.co.uk"] [uri "/"] [unique_id "amtIzfVSFkR81Rf5NuiE1AAAADo"]
[Thu Jul 30 13:51:25.438804 2026] [access_compat:error] [pid 3362200:tid 3362200] [client 167.94.146.61:26310] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:51:27.573177 2026] [ssl:error] [pid 3360838:tid 3360838] (EAI 2)Name or service not known: [client 144.76.19.72:35616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:27.573207 2026] [ssl:error] [pid 3360838:tid 3360838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:27.643283 2026] [access_compat:error] [pid 3360840:tid 3360840] [client 202.88.254.53:53651] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:51:27.655821 2026] [ssl:error] [pid 3360722:tid 3360722] (EAI 2)Name or service not known: [client 144.76.19.72:35622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:27.655867 2026] [ssl:error] [pid 3360722:tid 3360722] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:27.672827 2026] [lsapi:warn] [pid 3314931:tid 3314931] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:30.708855 2026] [ssl:error] [pid 3363730:tid 3363730] (EAI 2)Name or service not known: [client 144.76.19.72:54050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:30.708889 2026] [ssl:error] [pid 3363730:tid 3363730] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:30.766458 2026] [ssl:error] [pid 3359970:tid 3359970] (EAI 2)Name or service not known: [client 144.76.19.72:54060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:30.766501 2026] [ssl:error] [pid 3359970:tid 3359970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:31.719536 2026] [lsapi:warn] [pid 3352542:tid 3352542] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:32.304149 2026] [lsapi:warn] [pid 3363844:tid 3363844] [client 45.158.164.139:41250] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:51:32.304189 2026] [lsapi:warn] [pid 3363844:tid 3363844] [client 45.158.164.139:41250] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:51:32.306613 2026] [lsapi:warn] [pid 3363839:tid 3363839] [client 74.248.20.32:40891] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:51:32.306657 2026] [lsapi:warn] [pid 3363839:tid 3363839] [client 74.248.20.32:40891] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:51:33.589625 2026] [lsapi:warn] [pid 3343927:tid 3343927] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:33.824651 2026] [ssl:error] [pid 3363839:tid 3363839] (EAI 2)Name or service not known: [client 144.76.19.72:54066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:33.824684 2026] [ssl:error] [pid 3363839:tid 3363839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:33.881087 2026] [ssl:error] [pid 3361623:tid 3361623] (EAI 2)Name or service not known: [client 144.76.19.72:54074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:33.881114 2026] [ssl:error] [pid 3361623:tid 3361623] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:35.266250 2026] [security2:error] [pid 3352542:tid 3352542] [client 49.233.45.47:44134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amtI153FCLojdEC1JtAbcwAAADQ"]
[Thu Jul 30 13:51:36.934206 2026] [ssl:error] [pid 3361764:tid 3361764] (EAI 2)Name or service not known: [client 144.76.19.72:54082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:36.934241 2026] [ssl:error] [pid 3361764:tid 3361764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:36.989533 2026] [ssl:error] [pid 3363840:tid 3363840] (EAI 2)Name or service not known: [client 144.76.19.72:54086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:36.989563 2026] [ssl:error] [pid 3363840:tid 3363840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:38.227127 2026] [lsapi:warn] [pid 3361764:tid 3361764] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:38.370043 2026] [access_compat:error] [pid 3363840:tid 3363840] [client 202.88.254.53:54377] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:51:40.070662 2026] [ssl:error] [pid 3340539:tid 3340539] (EAI 2)Name or service not known: [client 144.76.19.72:43702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:40.070704 2026] [ssl:error] [pid 3340539:tid 3340539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:40.128558 2026] [ssl:error] [pid 3352101:tid 3352101] (EAI 2)Name or service not known: [client 144.76.19.72:43716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:40.128588 2026] [ssl:error] [pid 3352101:tid 3352101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:42.404113 2026] [lsapi:warn] [pid 3352211:tid 3352211] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:43.185437 2026] [ssl:error] [pid 3362627:tid 3362627] (EAI 2)Name or service not known: [client 144.76.19.72:43732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:43.185480 2026] [ssl:error] [pid 3362627:tid 3362627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:43.240993 2026] [ssl:error] [pid 3365935:tid 3365935] (EAI 2)Name or service not known: [client 144.76.19.72:43744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:43.241035 2026] [ssl:error] [pid 3365935:tid 3365935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:44.127127 2026] [lsapi:warn] [pid 3360837:tid 3360837] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:45.848982 2026] [ssl:error] [pid 3340539:tid 3340539] (70014)End of file found: [client 216.73.216.199:45989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:51:46.295880 2026] [ssl:error] [pid 3363842:tid 3363842] (EAI 2)Name or service not known: [client 144.76.19.72:43758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:46.295910 2026] [ssl:error] [pid 3363842:tid 3363842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:46.347809 2026] [ssl:error] [pid 3352211:tid 3352211] (EAI 2)Name or service not known: [client 144.76.19.72:43762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:46.347835 2026] [ssl:error] [pid 3352211:tid 3352211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:46.455499 2026] [security2:error] [pid 3361764:tid 3361764] [client 43.130.111.40:36010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.webstersltd.com"] [uri "/"] [unique_id "amtI4i1GYGM-5C9hHaAzJQAAACY"]
[Thu Jul 30 13:51:47.339199 2026] [security2:error] [pid 3350312:tid 3350312] [client 43.130.111.40:37726] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.webstersltd.com"] [uri "/"] [unique_id "amtI44ef_h8eOet1tbnf7gAAAC8"], referer: http://www.webstersltd.com
[Thu Jul 30 13:51:48.225247 2026] [security2:error] [pid 3357197:tid 3357197] [client 51.68.107.161:12979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amtI5J7lg5S7yRaV3BQiHgAAAAw"]
[Thu Jul 30 13:51:48.461380 2026] [cgi:error] [pid 3361232:tid 3361232] [client 194.9.110.170:41335] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:51:48.544751 2026] [access_compat:error] [pid 3348604:tid 3348604] [client 202.88.254.53:55047] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:51:48.857113 2026] [lsapi:warn] [pid 3352211:tid 3352211] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:49.401237 2026] [ssl:error] [pid 3363838:tid 3363838] (EAI 2)Name or service not known: [client 144.76.19.72:43774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:49.401271 2026] [ssl:error] [pid 3363838:tid 3363838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:49.457586 2026] [ssl:error] [pid 3336419:tid 3336419] (EAI 2)Name or service not known: [client 144.76.19.72:43786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:49.457613 2026] [ssl:error] [pid 3336419:tid 3336419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:52.513808 2026] [ssl:error] [pid 3314931:tid 3314931] (EAI 2)Name or service not known: [client 144.76.19.72:26284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:52.513832 2026] [ssl:error] [pid 3314931:tid 3314931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:52.568488 2026] [ssl:error] [pid 3366813:tid 3366813] (EAI 2)Name or service not known: [client 144.76.19.72:26292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:52.568515 2026] [ssl:error] [pid 3366813:tid 3366813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:53.039977 2026] [lsapi:warn] [pid 3314931:tid 3314931] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:54.762189 2026] [lsapi:warn] [pid 3363733:tid 3363733] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:51:55.626774 2026] [ssl:error] [pid 3361232:tid 3361232] (EAI 2)Name or service not known: [client 144.76.19.72:26308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:55.626805 2026] [ssl:error] [pid 3361232:tid 3361232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:55.679546 2026] [ssl:error] [pid 3336916:tid 3336916] (EAI 2)Name or service not known: [client 144.76.19.72:26314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:55.679567 2026] [ssl:error] [pid 3336916:tid 3336916] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:56.044655 2026] [ssl:error] [pid 3362200:tid 3362200] (70014)End of file found: [client 216.73.216.199:42498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:51:58.551776 2026] [access_compat:error] [pid 3363733:tid 3363733] [client 202.88.254.53:55609] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:51:58.737516 2026] [ssl:error] [pid 3361036:tid 3361036] (EAI 2)Name or service not known: [client 144.76.19.72:26320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:58.737548 2026] [ssl:error] [pid 3361036:tid 3361036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:58.792329 2026] [ssl:error] [pid 3366812:tid 3366812] (EAI 2)Name or service not known: [client 144.76.19.72:26322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:51:58.792368 2026] [ssl:error] [pid 3366812:tid 3366812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:51:59.047929 2026] [access_compat:error] [pid 3348282:tid 3348282] [client 45.158.164.139:44874] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:51:59.443208 2026] [lsapi:warn] [pid 3366812:tid 3366812] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:01.847757 2026] [ssl:error] [pid 3336419:tid 3336419] (EAI 2)Name or service not known: [client 144.76.19.72:44728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:01.847784 2026] [ssl:error] [pid 3336419:tid 3336419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:01.900664 2026] [ssl:error] [pid 3362200:tid 3362200] (EAI 2)Name or service not known: [client 144.76.19.72:44742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:01.900699 2026] [ssl:error] [pid 3362200:tid 3362200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:01.914841 2026] [core:error] [pid 3360838:tid 3360838] [client 102.203.33.6:60187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:52:01.914865 2026] [core:error] [pid 3360838:tid 3360838] [client 102.203.33.6:60187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:52:03.647851 2026] [lsapi:warn] [pid 3359970:tid 3359970] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:04.249544 2026] [access_compat:error] [pid 3336419:tid 3336419] [client 45.158.164.139:41532] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:52:04.540261 2026] [security2:error] [pid 3363617:tid 3363617] [client 190.106.210.125:17313] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtI9DmQ_4KSS0CanI1DbgAAAAg"]
[Thu Jul 30 13:52:04.540310 2026] [security2:error] [pid 3363617:tid 3363617] [client 190.106.210.125:17313] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtI9DmQ_4KSS0CanI1DbgAAAAg"]
[Thu Jul 30 13:52:04.540581 2026] [security2:error] [pid 3363617:tid 3363617] [client 190.106.210.125:17313] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtI9DmQ_4KSS0CanI1DbgAAAAg"]
[Thu Jul 30 13:52:04.958953 2026] [ssl:error] [pid 3363839:tid 3363839] (EAI 2)Name or service not known: [client 144.76.19.72:44752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:04.958978 2026] [ssl:error] [pid 3363839:tid 3363839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:05.010144 2026] [ssl:error] [pid 3363846:tid 3363846] (EAI 2)Name or service not known: [client 144.76.19.72:44754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:05.010166 2026] [ssl:error] [pid 3363846:tid 3363846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:05.340122 2026] [lsapi:warn] [pid 3363617:tid 3363617] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:06.061506 2026] [ssl:error] [pid 3348814:tid 3348814] (70014)End of file found: [client 216.73.216.199:38358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:52:06.232776 2026] [security2:error] [pid 3352101:tid 3352101] [client 43.134.56.214:43684] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amtI9qhHIyZDZJ5LJlrjVgAAABU"]
[Thu Jul 30 13:52:06.983564 2026] [security2:error] [pid 3363617:tid 3363617] [client 124.156.107.40:44877] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtI9jmQ_4KSS0CanI1DcAAAAAg"]
[Thu Jul 30 13:52:06.983608 2026] [security2:error] [pid 3363617:tid 3363617] [client 124.156.107.40:44877] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtI9jmQ_4KSS0CanI1DcAAAAAg"]
[Thu Jul 30 13:52:06.983841 2026] [security2:error] [pid 3363617:tid 3363617] [client 124.156.107.40:44877] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtI9jmQ_4KSS0CanI1DcAAAAAg"]
[Thu Jul 30 13:52:07.465735 2026] [security2:error] [pid 3350312:tid 3350312] [client 43.134.56.214:33638] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amtI94ef_h8eOet1tbnf8wAAAC8"], referer: http://www.glottalstop.co.uk
[Thu Jul 30 13:52:07.899742 2026] [access_compat:error] [pid 3352101:tid 3352101] [client 202.88.254.53:56170] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:52:08.067449 2026] [ssl:error] [pid 3363839:tid 3363839] (EAI 2)Name or service not known: [client 144.76.19.72:44766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:08.067484 2026] [ssl:error] [pid 3363839:tid 3363839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:08.123352 2026] [ssl:error] [pid 3363617:tid 3363617] (EAI 2)Name or service not known: [client 144.76.19.72:44774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:08.123383 2026] [ssl:error] [pid 3363617:tid 3363617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:08.789749 2026] [security2:error] [pid 3366813:tid 3366813] [client 85.208.96.211:32664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/1881-baker-st,-seaside,-ca-93955"] [unique_id "amtI-G3_2GimdPjyCx5ltgAAABY"]
[Thu Jul 30 13:52:09.358226 2026] [security2:error] [pid 3360839:tid 3360839] [client 85.208.96.207:38268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1869.0/prev_next,next.html"] [unique_id "amtI-TLk4JzJKHmya_pJWAAAABQ"]
[Thu Jul 30 13:52:09.369166 2026] [security2:error] [pid 3357197:tid 3357197] [client 85.208.96.201:64788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amtI-Z7lg5S7yRaV3BQiJwAAAAw"]
[Thu Jul 30 13:52:10.853949 2026] [security2:error] [pid 3361761:tid 3361761] [client 124.156.107.40:11561] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtI-hexwUnxhYje5Tsh4AAAACM"]
[Thu Jul 30 13:52:10.853993 2026] [security2:error] [pid 3361761:tid 3361761] [client 124.156.107.40:11561] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtI-hexwUnxhYje5Tsh4AAAACM"]
[Thu Jul 30 13:52:10.854247 2026] [security2:error] [pid 3361761:tid 3361761] [client 124.156.107.40:11561] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtI-hexwUnxhYje5Tsh4AAAACM"]
[Thu Jul 30 13:52:10.918568 2026] [security2:error] [pid 3366724:tid 3366724] [client 170.106.113.235:56898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "techsuccess.uk"] [uri "/"] [unique_id "amtI-r4Zqb-VNMELu3LccQAAAAI"]
[Thu Jul 30 13:52:16.298976 2026] [lsapi:error] [pid 3361761:tid 3361761] [client 177.55.92.139:0] [host revoracing.org.uk] Request retrieving failed. Reason: unknown, On: request body, Source: client, Where: unknown
[Thu Jul 30 13:52:16.299000 2026] [lsapi:error] [pid 3361761:tid 3361761] [client 177.55.92.139:0] [host revoracing.org.uk] In order to get more info about fail reason try to change LogLevel to Info in httpd.conf and restart Apache
[Thu Jul 30 13:52:16.299006 2026] [lsapi:error] [pid 3361761:tid 3361761] [client 177.55.92.139:0] [host revoracing.org.uk] Client error on sending request(POST /xmlrpc.php HTTP/1.1); uri(/xmlrpc.php) content-length(712): user_get_body(tmpstackbuf, 16384): read from client failed
[Thu Jul 30 13:52:16.397628 2026] [ssl:error] [pid 3359970:tid 3359970] (70014)End of file found: [client 216.73.216.199:9508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:52:16.508270 2026] [ssl:error] [pid 3361036:tid 3361036] (EAI 2)Name or service not known: [client 144.76.19.72:26104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:16.508307 2026] [ssl:error] [pid 3361036:tid 3361036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:16.636346 2026] [security2:error] [pid 3368104:tid 3368104] [client 74.7.227.156:37836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "securitiesfinance.co.uk"] [uri "/"] [unique_id "amtJAOQ3AXdOINkEvvkxgwAAAEE"]
[Thu Jul 30 13:52:16.763178 2026] [lsapi:warn] [pid 3368112:tid 3368112] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:16.991689 2026] [ssl:error] [pid 3361036:tid 3361036] (EAI 2)Name or service not known: [client 144.76.19.72:26120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:16.991725 2026] [ssl:error] [pid 3361036:tid 3361036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:17.052731 2026] [lsapi:warn] [pid 3352101:tid 3352101] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:17.332788 2026] [access_compat:error] [pid 3361036:tid 3361036] [client 202.88.254.53:56732] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:52:20.045104 2026] [ssl:error] [pid 3368078:tid 3368078] (EAI 2)Name or service not known: [client 144.76.19.72:60514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:20.045163 2026] [ssl:error] [pid 3368078:tid 3368078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:20.100694 2026] [ssl:error] [pid 3368084:tid 3368084] (EAI 2)Name or service not known: [client 144.76.19.72:60516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:20.100730 2026] [ssl:error] [pid 3368084:tid 3368084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:21.248390 2026] [lsapi:warn] [pid 3366813:tid 3366813] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:22.125979 2026] [ssl:error] [pid 3368078:tid 3368078] (70014)End of file found: [client 216.73.216.199:24692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:52:23.157032 2026] [ssl:error] [pid 3368079:tid 3368079] (EAI 2)Name or service not known: [client 144.76.19.72:60520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:23.157082 2026] [ssl:error] [pid 3368079:tid 3368079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:23.212026 2026] [ssl:error] [pid 3361036:tid 3361036] (EAI 2)Name or service not known: [client 144.76.19.72:60534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:23.212059 2026] [ssl:error] [pid 3361036:tid 3361036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:24.266055 2026] [cgi:error] [pid 3368264:tid 3368264] [client 20.104.22.47:22542] AH02812: stderr from /home/wmsfirea/public_html/wmsfirearmstraining.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:52:24.919442 2026] [lsapi:warn] [pid 3368002:tid 3368002] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:26.266449 2026] [ssl:error] [pid 3343404:tid 3343404] (EAI 2)Name or service not known: [client 144.76.19.72:60540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:26.266491 2026] [ssl:error] [pid 3343404:tid 3343404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:26.320795 2026] [access_compat:error] [pid 3361761:tid 3361761] [client 202.88.254.53:57283] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:52:26.320927 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:60556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:26.320964 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:26.499336 2026] [security2:error] [pid 3368265:tid 3368265] [client 114.119.132.171:23971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14,103/request_format~html"] [unique_id "amtJCijA0jY0WQmIA1ghwAAAAFA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14/request_format~html
[Thu Jul 30 13:52:26.517330 2026] [lsapi:warn] [pid 3361232:tid 3361232] [client 2001:4958:4042:ac01:1599:56a:c95c:2e4d:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:28.601979 2026] [security2:error] [pid 3368111:tid 3368111] [client 114.119.132.171:24767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14,103/request_format~html"] [unique_id "amtJDBFeqqLpjfCTvYYkPAAAAEg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~15,17,14/request_format~html
[Thu Jul 30 13:52:29.379565 2026] [ssl:error] [pid 3368116:tid 3368116] (EAI 2)Name or service not known: [client 144.76.19.72:60564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:29.379613 2026] [ssl:error] [pid 3368116:tid 3368116] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:29.434549 2026] [ssl:error] [pid 3348814:tid 3348814] (EAI 2)Name or service not known: [client 144.76.19.72:60566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:29.434583 2026] [ssl:error] [pid 3348814:tid 3348814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:31.007476 2026] [security2:error] [pid 3363838:tid 3363838] [client 43.166.132.142:48378] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.fr"] [uri "/"] [unique_id "amtJD6fyPdc0ZgYsBVUiKQAAADU"]
[Thu Jul 30 13:52:31.247561 2026] [lsapi:warn] [pid 3352209:tid 3352209] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:32.151217 2026] [ssl:error] [pid 3368116:tid 3368116] (70014)End of file found: [client 216.73.216.199:54532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:52:32.375202 2026] [security2:error] [pid 3361762:tid 3361762] [client 43.166.132.142:56494] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtJEKUjYgT330-Lj0IdPwAAACQ"], referer: http://www.orgent.fr
[Thu Jul 30 13:52:32.489133 2026] [ssl:error] [pid 3368265:tid 3368265] (EAI 2)Name or service not known: [client 144.76.19.72:60518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:32.489166 2026] [ssl:error] [pid 3368265:tid 3368265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:32.545113 2026] [ssl:error] [pid 3363846:tid 3363846] (EAI 2)Name or service not known: [client 144.76.19.72:60522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:32.545140 2026] [ssl:error] [pid 3363846:tid 3363846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:32.688045 2026] [authz_core:error] [pid 3350312:tid 3350312] [client 66.249.66.34:47317] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:52:32.690708 2026] [authz_core:error] [pid 3350312:tid 3350312] [client 66.249.66.34:47317] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:52:35.494390 2026] [access_compat:error] [pid 3352542:tid 3352542] [client 202.88.254.53:57832] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:52:35.527172 2026] [lsapi:warn] [pid 3360838:tid 3360838] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:35.606450 2026] [ssl:error] [pid 3363846:tid 3363846] (EAI 2)Name or service not known: [client 144.76.19.72:60536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:35.606484 2026] [ssl:error] [pid 3363846:tid 3363846] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:35.659186 2026] [ssl:error] [pid 3368115:tid 3368115] (EAI 2)Name or service not known: [client 144.76.19.72:60548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:35.659215 2026] [ssl:error] [pid 3368115:tid 3368115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:38.723235 2026] [ssl:error] [pid 3361761:tid 3361761] (EAI 2)Name or service not known: [client 144.76.19.72:60558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:38.723272 2026] [ssl:error] [pid 3361761:tid 3361761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:38.781010 2026] [ssl:error] [pid 3363838:tid 3363838] (EAI 2)Name or service not known: [client 144.76.19.72:60560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:38.781045 2026] [ssl:error] [pid 3363838:tid 3363838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:41.694266 2026] [ssl:error] [pid 3368106:tid 3368106] (70014)End of file found: [client 216.73.216.199:1617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:52:41.823864 2026] [lsapi:warn] [pid 3348604:tid 3348604] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:41.837571 2026] [ssl:error] [pid 3363838:tid 3363838] (EAI 2)Name or service not known: [client 144.76.19.72:63358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:41.837603 2026] [ssl:error] [pid 3363838:tid 3363838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:41.891537 2026] [ssl:error] [pid 3368264:tid 3368264] (EAI 2)Name or service not known: [client 144.76.19.72:63366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:41.891575 2026] [ssl:error] [pid 3368264:tid 3368264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:42.687341 2026] [security2:error] [pid 3368111:tid 3368111] [client 47.128.25.8:31522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hatch-works.com"] [uri "/robots.txt"] [unique_id "amtJGhFeqqLpjfCTvYYkPwAAAEg"]
[Thu Jul 30 13:52:44.685429 2026] [access_compat:error] [pid 3348604:tid 3348604] [client 202.88.254.53:58376] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:52:44.945440 2026] [ssl:error] [pid 3368077:tid 3368077] (EAI 2)Name or service not known: [client 144.76.19.72:63378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:44.945488 2026] [ssl:error] [pid 3368077:tid 3368077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:45.001730 2026] [ssl:error] [pid 3368105:tid 3368105] (EAI 2)Name or service not known: [client 144.76.19.72:63384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:45.001763 2026] [ssl:error] [pid 3368105:tid 3368105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:46.115887 2026] [lsapi:warn] [pid 3318123:tid 3318123] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:48.074633 2026] [ssl:error] [pid 3350312:tid 3350312] (EAI 2)Name or service not known: [client 144.76.19.72:63404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:48.074668 2026] [ssl:error] [pid 3350312:tid 3350312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:48.133500 2026] [ssl:error] [pid 3352209:tid 3352209] (EAI 2)Name or service not known: [client 144.76.19.72:63412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:48.133525 2026] [ssl:error] [pid 3352209:tid 3352209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:51.195163 2026] [ssl:error] [pid 3352100:tid 3352100] (EAI 2)Name or service not known: [client 144.76.19.72:41242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:51.195197 2026] [ssl:error] [pid 3352100:tid 3352100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:51.251582 2026] [ssl:error] [pid 3352542:tid 3352542] (EAI 2)Name or service not known: [client 144.76.19.72:41248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:51.251630 2026] [ssl:error] [pid 3352542:tid 3352542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:52.388356 2026] [lsapi:warn] [pid 3348604:tid 3348604] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:53.765447 2026] [access_compat:error] [pid 3368077:tid 3368077] [client 202.88.254.53:58912] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:52:54.089670 2026] [authz_core:error] [pid 3328609:tid 3328609] [client 80.225.239.192:51249] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 13:52:54.089716 2026] [authz_core:error] [pid 3328609:tid 3328609] [client 80.225.239.192:51249] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 13:52:54.314485 2026] [ssl:error] [pid 3352542:tid 3352542] (EAI 2)Name or service not known: [client 144.76.19.72:41254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:54.314508 2026] [ssl:error] [pid 3352542:tid 3352542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:54.370572 2026] [ssl:error] [pid 3352211:tid 3352211] (EAI 2)Name or service not known: [client 144.76.19.72:41258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:54.370598 2026] [ssl:error] [pid 3352211:tid 3352211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:55.628554 2026] [security2:error] [pid 3328609:tid 3328609] [client 43.134.91.35:34044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/"] [unique_id "amtJJ3eVeaYjZapzagSd3QAAABc"]
[Thu Jul 30 13:52:56.758280 2026] [lsapi:warn] [pid 3361762:tid 3361762] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:52:57.424438 2026] [ssl:error] [pid 3368264:tid 3368264] (EAI 2)Name or service not known: [client 144.76.19.72:41262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:57.424500 2026] [ssl:error] [pid 3368264:tid 3368264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:52:57.480410 2026] [ssl:error] [pid 3368106:tid 3368106] (EAI 2)Name or service not known: [client 144.76.19.72:41272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:52:57.480450 2026] [ssl:error] [pid 3368106:tid 3368106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:00.534721 2026] [ssl:error] [pid 3368075:tid 3368075] (EAI 2)Name or service not known: [client 144.76.19.72:30146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:00.534781 2026] [ssl:error] [pid 3368075:tid 3368075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:00.588043 2026] [ssl:error] [pid 3368077:tid 3368077] (EAI 2)Name or service not known: [client 144.76.19.72:30158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:00.588109 2026] [ssl:error] [pid 3368077:tid 3368077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:02.871902 2026] [access_compat:error] [pid 3332014:tid 3332014] [client 202.88.254.53:59457] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:53:03.007917 2026] [lsapi:warn] [pid 3368081:tid 3368081] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:03.389021 2026] [access_compat:error] [pid 3368074:tid 3368074] [client 45.158.164.139:58710] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:53:03.678787 2026] [ssl:error] [pid 3328609:tid 3328609] (EAI 2)Name or service not known: [client 144.76.19.72:30170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:03.678814 2026] [ssl:error] [pid 3328609:tid 3328609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:03.732608 2026] [ssl:error] [pid 3368001:tid 3368001] (EAI 2)Name or service not known: [client 144.76.19.72:30180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:03.732640 2026] [ssl:error] [pid 3368001:tid 3368001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:06.787394 2026] [ssl:error] [pid 3368051:tid 3368051] (EAI 2)Name or service not known: [client 144.76.19.72:30192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:06.787430 2026] [ssl:error] [pid 3368051:tid 3368051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:06.842724 2026] [ssl:error] [pid 3352211:tid 3352211] (EAI 2)Name or service not known: [client 144.76.19.72:30198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:06.842752 2026] [ssl:error] [pid 3352211:tid 3352211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:07.504865 2026] [lsapi:warn] [pid 3368104:tid 3368104] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:08.132317 2026] [ssl:error] [pid 3368050:tid 3368050] (70014)End of file found: [client 216.73.216.199:43808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:53:09.315920 2026] [security2:error] [pid 3368115:tid 3368115] [client 185.191.171.2:39242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/how-to-become-a-cult-specialist"] [unique_id "amtJNYyphdJUNw1iQJsbdgAAAEw"]
[Thu Jul 30 13:53:09.895838 2026] [ssl:error] [pid 3363733:tid 3363733] (EAI 2)Name or service not known: [client 144.76.19.72:21948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:09.895879 2026] [ssl:error] [pid 3363733:tid 3363733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:09.949729 2026] [ssl:error] [pid 3352542:tid 3352542] (EAI 2)Name or service not known: [client 144.76.19.72:21958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:09.949773 2026] [ssl:error] [pid 3352542:tid 3352542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:11.894620 2026] [security2:error] [pid 3368081:tid 3368081] [client 74.208.186.159:46054] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "unclaimedassets.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtJN78o3bhFhu8V5zK06AAAAD4"]
[Thu Jul 30 13:53:11.945271 2026] [access_compat:error] [pid 3352542:tid 3352542] [client 202.88.254.53:59997] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:53:12.407957 2026] [lsapi:warn] [pid 3368081:tid 3368081] [client 74.208.186.159:46054] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:13.004550 2026] [ssl:error] [pid 3361036:tid 3361036] (EAI 2)Name or service not known: [client 144.76.19.72:21962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:13.004588 2026] [ssl:error] [pid 3361036:tid 3361036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:13.062500 2026] [ssl:error] [pid 3368106:tid 3368106] (EAI 2)Name or service not known: [client 144.76.19.72:21972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:13.062546 2026] [ssl:error] [pid 3368106:tid 3368106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:13.618151 2026] [lsapi:warn] [pid 3361036:tid 3361036] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:13.805242 2026] [security2:error] [pid 3368081:tid 3368081] [client 47.128.54.222:55242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.yorkguitarworkshop.co.uk"] [uri "/robots.txt"] [unique_id "amtJOb8o3bhFhu8V5zK06QAAAD4"]
[Thu Jul 30 13:53:14.350408 2026] [access_compat:error] [pid 3368049:tid 3368049] [client 45.158.164.139:56122] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:53:14.578741 2026] [security2:error] [pid 3352211:tid 3352211] [client 43.166.237.57:33882] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/saveshrine/"] [unique_id "amtJOrl1GQbs11GumqfeAgAAADI"]
[Thu Jul 30 13:53:16.695708 2026] [ssl:error] [pid 3370737:tid 3370737] (EAI 2)Name or service not known: [client 144.76.19.72:21980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:16.695745 2026] [ssl:error] [pid 3370737:tid 3370737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:16.772685 2026] [ssl:error] [pid 3370737:tid 3370737] (EAI 2)Name or service not known: [client 144.76.19.72:21994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:16.772711 2026] [ssl:error] [pid 3370737:tid 3370737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:18.104143 2026] [lsapi:warn] [pid 3368049:tid 3368049] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:18.438259 2026] [security2:error] [pid 3370769:tid 3370769] [client 95.228.172.173:60484] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amtJPtHE5zm_MQbLzQ6S9AAAAAw"]
[Thu Jul 30 13:53:19.830009 2026] [ssl:error] [pid 3352542:tid 3352542] (EAI 2)Name or service not known: [client 144.76.19.72:22550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:19.830049 2026] [ssl:error] [pid 3352542:tid 3352542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:19.884683 2026] [ssl:error] [pid 3370769:tid 3370769] (EAI 2)Name or service not known: [client 144.76.19.72:22562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:19.884732 2026] [ssl:error] [pid 3370769:tid 3370769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:21.166964 2026] [access_compat:error] [pid 3370808:tid 3370808] [client 202.88.254.53:60542] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:53:22.663304 2026] [security2:error] [pid 3370804:tid 3370804] [client 49.232.104.223:35416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.soul-connections.net"] [uri "/"] [unique_id "amtJQpCpogEslt82dVUPuwAAABs"]
[Thu Jul 30 13:53:22.958086 2026] [ssl:error] [pid 3348814:tid 3348814] (EAI 2)Name or service not known: [client 144.76.19.72:22564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:22.958158 2026] [ssl:error] [pid 3348814:tid 3348814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:23.014642 2026] [ssl:error] [pid 3370704:tid 3370704] (EAI 2)Name or service not known: [client 144.76.19.72:22570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:23.014681 2026] [ssl:error] [pid 3370704:tid 3370704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:23.733260 2026] [security2:error] [pid 3368106:tid 3368106] [client 74.7.227.156:55404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "securitiesfinance.co.uk"] [uri "/"] [unique_id "amtJQzp3Bxl7hViULs1O-wAAAEM"]
[Thu Jul 30 13:53:24.169126 2026] [lsapi:warn] [pid 3352211:tid 3352211] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:25.407194 2026] [security2:error] [pid 3370808:tid 3370808] [client 43.153.36.110:42688] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "familyjames.com"] [uri "/"] [unique_id "amtJRRO59l-A8ewawnG2FQAAAB4"]
[Thu Jul 30 13:53:27.068597 2026] [ssl:error] [pid 3371110:tid 3371110] (EAI 2)Name or service not known: [client 144.76.19.72:22578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:27.068664 2026] [ssl:error] [pid 3371110:tid 3371110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:27.765814 2026] [ssl:error] [pid 3370769:tid 3370769] (EAI 2)Name or service not known: [client 144.76.19.72:22590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:27.765857 2026] [ssl:error] [pid 3370769:tid 3370769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:28.213724 2026] [security2:error] [pid 3368051:tid 3368051] [client 93.117.48.61:48142] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJSPVhVrQAbOdxmuSJUQAAACs"]
[Thu Jul 30 13:53:28.213774 2026] [security2:error] [pid 3368051:tid 3368051] [client 93.117.48.61:48142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJSPVhVrQAbOdxmuSJUQAAACs"]
[Thu Jul 30 13:53:28.214021 2026] [security2:error] [pid 3368051:tid 3368051] [client 93.117.48.61:48142] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJSPVhVrQAbOdxmuSJUQAAACs"]
[Thu Jul 30 13:53:28.603103 2026] [security2:error] [pid 3371069:tid 3371069] [client 4.201.104.113:20060] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "refraction.co.uk"] [uri "/wp-config.php"] [unique_id "amtJSNmrXOpmtpZlI2Sd4AAAABo"]
[Thu Jul 30 13:53:28.603329 2026] [security2:error] [pid 3371069:tid 3371069] [client 4.201.104.113:20060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "refraction.co.uk"] [uri "/wp-config.php"] [unique_id "amtJSNmrXOpmtpZlI2Sd4AAAABo"]
[Thu Jul 30 13:53:28.603589 2026] [security2:error] [pid 3371069:tid 3371069] [client 4.201.104.113:20060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "refraction.co.uk"] [uri "/wp-config.php"] [unique_id "amtJSNmrXOpmtpZlI2Sd4AAAABo"]
[Thu Jul 30 13:53:28.756518 2026] [lsapi:warn] [pid 3368264:tid 3368264] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:30.222102 2026] [ssl:error] [pid 3371174:tid 3371174] (70014)End of file found: [client 216.73.216.199:2696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:53:30.658893 2026] [access_compat:error] [pid 3371175:tid 3371175] [client 202.88.254.53:61081] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:53:30.823616 2026] [ssl:error] [pid 3360839:tid 3360839] (EAI 2)Name or service not known: [client 144.76.19.72:43958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:30.823662 2026] [ssl:error] [pid 3360839:tid 3360839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:30.882543 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:43974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:30.882575 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:30.924830 2026] [authz_core:error] [pid 3361036:tid 3361036] [client 20.203.135.57:10126] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/l10n/error_log
[Thu Jul 30 13:53:33.313602 2026] [security2:error] [pid 3368116:tid 3368116] [client 101.47.26.174:61351] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJTWKS3mBSdmTkGVtRpwAAAE0"]
[Thu Jul 30 13:53:33.313657 2026] [security2:error] [pid 3368116:tid 3368116] [client 101.47.26.174:61351] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJTWKS3mBSdmTkGVtRpwAAAE0"]
[Thu Jul 30 13:53:33.313936 2026] [security2:error] [pid 3368116:tid 3368116] [client 101.47.26.174:61351] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJTWKS3mBSdmTkGVtRpwAAAE0"]
[Thu Jul 30 13:53:33.938830 2026] [ssl:error] [pid 3352100:tid 3352100] (EAI 2)Name or service not known: [client 144.76.19.72:43988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:33.938864 2026] [ssl:error] [pid 3352100:tid 3352100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:33.990767 2026] [ssl:error] [pid 3370810:tid 3370810] (EAI 2)Name or service not known: [client 144.76.19.72:44002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:33.990814 2026] [ssl:error] [pid 3370810:tid 3370810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:34.714230 2026] [lsapi:warn] [pid 3368051:tid 3368051] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:34.906578 2026] [authz_core:error] [pid 3371109:tid 3371109] [client 66.249.66.33:45454] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:53:34.909460 2026] [authz_core:error] [pid 3371109:tid 3371109] [client 66.249.66.33:45454] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:53:37.045229 2026] [ssl:error] [pid 3368051:tid 3368051] (EAI 2)Name or service not known: [client 144.76.19.72:44014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:37.045271 2026] [ssl:error] [pid 3368051:tid 3368051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:37.100705 2026] [ssl:error] [pid 3371172:tid 3371172] (EAI 2)Name or service not known: [client 144.76.19.72:44022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:37.100757 2026] [ssl:error] [pid 3371172:tid 3371172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:37.817613 2026] [security2:error] [pid 3352211:tid 3352211] [client 101.47.26.174:50839] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJUbl1GQbs11GumqfeCgAAADI"]
[Thu Jul 30 13:53:37.817667 2026] [security2:error] [pid 3352211:tid 3352211] [client 101.47.26.174:50839] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJUbl1GQbs11GumqfeCgAAADI"]
[Thu Jul 30 13:53:37.817940 2026] [security2:error] [pid 3352211:tid 3352211] [client 101.47.26.174:50839] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJUbl1GQbs11GumqfeCgAAADI"]
[Thu Jul 30 13:53:39.364150 2026] [lsapi:warn] [pid 3370738:tid 3370738] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:40.157550 2026] [ssl:error] [pid 3360839:tid 3360839] (EAI 2)Name or service not known: [client 144.76.19.72:37272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:40.157589 2026] [ssl:error] [pid 3360839:tid 3360839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:40.211626 2026] [ssl:error] [pid 3370805:tid 3370805] (EAI 2)Name or service not known: [client 144.76.19.72:37286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:40.211670 2026] [ssl:error] [pid 3370805:tid 3370805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:40.514706 2026] [access_compat:error] [pid 3368111:tid 3368111] [client 202.88.254.53:61625] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:53:41.375254 2026] [security2:error] [pid 3368049:tid 3368049] [client 185.191.171.1:53164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6424.0/prev_next,prev.html"] [unique_id "amtJVdDlwPc1C92J_4NIXAAAACI"]
[Thu Jul 30 13:53:43.265817 2026] [ssl:error] [pid 3336419:tid 3336419] (EAI 2)Name or service not known: [client 144.76.19.72:37298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:43.265858 2026] [ssl:error] [pid 3336419:tid 3336419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:43.318932 2026] [ssl:error] [pid 3370737:tid 3370737] (EAI 2)Name or service not known: [client 144.76.19.72:37306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:43.318969 2026] [ssl:error] [pid 3370737:tid 3370737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:44.730388 2026] [security2:error] [pid 3363733:tid 3363733] [client 43.157.181.189:34768] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "amtJWGM44WqfBs2GoBrstQAAADE"]
[Thu Jul 30 13:53:45.340086 2026] [lsapi:warn] [pid 3336419:tid 3336419] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:45.382935 2026] [security2:error] [pid 3370737:tid 3370737] [client 185.191.171.13:40146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9383.0.html"] [unique_id "amtJWURH7J5XDYCras3QhwAAAAQ"]
[Thu Jul 30 13:53:46.323851 2026] [security2:error] [pid 3370802:tid 3370802] [client 43.157.181.189:36788] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amtJWouccOfwBozY7mqOgwAAABk"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 13:53:46.373033 2026] [ssl:error] [pid 3368081:tid 3368081] (EAI 2)Name or service not known: [client 144.76.19.72:37312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:46.373108 2026] [ssl:error] [pid 3368081:tid 3368081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:46.425741 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:37316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:46.425786 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:46.792230 2026] [security2:error] [pid 3371112:tid 3371112] [client 43.135.115.233:59074] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "m.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtJWmtqK2rqRL5fQ8w9kAAAACo"]
[Thu Jul 30 13:53:48.827847 2026] [security2:error] [pid 3368081:tid 3368081] [client 82.156.88.97:48932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spurr.org.uk"] [uri "/"] [unique_id "amtJXL8o3bhFhu8V5zK07wAAAD4"]
[Thu Jul 30 13:53:49.479869 2026] [ssl:error] [pid 3370704:tid 3370704] (EAI 2)Name or service not known: [client 144.76.19.72:37324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:49.479934 2026] [ssl:error] [pid 3370704:tid 3370704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:49.534482 2026] [ssl:error] [pid 3371108:tid 3371108] (EAI 2)Name or service not known: [client 144.76.19.72:37330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:49.534516 2026] [ssl:error] [pid 3371108:tid 3371108] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:49.920380 2026] [security2:error] [pid 3371173:tid 3371173] [client 114.119.157.183:30205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~14/request_format~html"] [unique_id "amtJXcaGoguinSrzeknezwAAADA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~14,102/request_format~html
[Thu Jul 30 13:53:50.000273 2026] [lsapi:warn] [pid 3348282:tid 3348282] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:51.044177 2026] [access_compat:error] [pid 3371110:tid 3371110] [client 202.88.254.53:62176] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:53:51.445258 2026] [security2:error] [pid 3368220:tid 3368220] [client 114.119.157.183:40093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~14/request_format~html"] [unique_id "amtJX7CkzpS9Y5bR72fkFQAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~14,102/request_format~html
[Thu Jul 30 13:53:52.595164 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:36424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:52.595198 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:52.647028 2026] [ssl:error] [pid 3361762:tid 3361762] (EAI 2)Name or service not known: [client 144.76.19.72:36438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:52.647094 2026] [ssl:error] [pid 3361762:tid 3361762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:54.210775 2026] [security2:error] [pid 3370801:tid 3370801] [client 74.7.243.237:37704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hengerdebahn.newtronicmedia.com"] [uri "/"] [unique_id "amtJYi_5WhcuwnDdduLN4wAAABY"]
[Thu Jul 30 13:53:55.720744 2026] [ssl:error] [pid 3370704:tid 3370704] (EAI 2)Name or service not known: [client 144.76.19.72:36450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:55.720804 2026] [ssl:error] [pid 3370704:tid 3370704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:55.811169 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:36454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:55.811218 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:55.919569 2026] [lsapi:warn] [pid 3348282:tid 3348282] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:53:58.867939 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:36462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:58.867973 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:53:58.922584 2026] [ssl:error] [pid 3368049:tid 3368049] (EAI 2)Name or service not known: [client 144.76.19.72:36464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:53:58.922622 2026] [ssl:error] [pid 3368049:tid 3368049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:00.654681 2026] [lsapi:warn] [pid 3368048:tid 3368048] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:01.573407 2026] [authz_core:error] [pid 3360839:tid 3360839] [client 34.26.133.180:56684] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 13:54:01.978014 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:38172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:01.978046 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:02.033841 2026] [ssl:error] [pid 3370801:tid 3370801] (EAI 2)Name or service not known: [client 144.76.19.72:38188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:02.033875 2026] [ssl:error] [pid 3370801:tid 3370801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:02.055167 2026] [access_compat:error] [pid 3371108:tid 3371108] [client 202.88.254.53:62705] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:05.093689 2026] [ssl:error] [pid 3370704:tid 3370704] (EAI 2)Name or service not known: [client 144.76.19.72:38198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:05.093731 2026] [ssl:error] [pid 3370704:tid 3370704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:05.151285 2026] [ssl:error] [pid 3368075:tid 3368075] (EAI 2)Name or service not known: [client 144.76.19.72:38208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:05.151312 2026] [ssl:error] [pid 3368075:tid 3368075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:05.291105 2026] [security2:error] [pid 3370704:tid 3370704] [client 43.131.32.36:32960] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "halmanninvestments.com"] [uri "/"] [unique_id "amtJbX4I-KdxEz55Bu3QEQAAAAM"]
[Thu Jul 30 13:54:06.488434 2026] [lsapi:warn] [pid 3371173:tid 3371173] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:08.247133 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:38212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:08.247179 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:08.303720 2026] [ssl:error] [pid 3373265:tid 3373265] (EAI 2)Name or service not known: [client 144.76.19.72:38228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:08.303773 2026] [ssl:error] [pid 3373265:tid 3373265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:09.904562 2026] [security2:error] [pid 3348282:tid 3348282] [client 185.191.171.2:52954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/william-hockey-column"] [unique_id "amtJcRJKwLgLPSn5nl1pRQAAAAk"]
[Thu Jul 30 13:54:11.278128 2026] [lsapi:warn] [pid 3318123:tid 3318123] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:11.361118 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:43782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:11.361163 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:11.416844 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:43786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:11.416887 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:13.241401 2026] [access_compat:error] [pid 3371174:tid 3371174] [client 202.88.254.53:63257] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:13.688089 2026] [access_compat:error] [pid 3370769:tid 3370769] [client 45.158.164.139:52130] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:54:14.320613 2026] [security2:error] [pid 3372506:tid 3372506] [client 74.7.227.156:35616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "securitiesfinance.co.uk"] [uri "/goods.php"] [unique_id "amtJdsDM9Pzpe_5lnFdFxAAAAAs"]
[Thu Jul 30 13:54:14.471917 2026] [ssl:error] [pid 3370801:tid 3370801] (EAI 2)Name or service not known: [client 144.76.19.72:43788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:14.471948 2026] [ssl:error] [pid 3370801:tid 3370801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:14.527230 2026] [ssl:error] [pid 3373202:tid 3373202] (EAI 2)Name or service not known: [client 144.76.19.72:43790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:14.527264 2026] [ssl:error] [pid 3373202:tid 3373202] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:14.908705 2026] [lsapi:warn] [pid 3328609:tid 3328609] [client 107.191.47.131:56650] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:54:14.908744 2026] [lsapi:warn] [pid 3328609:tid 3328609] [client 107.191.47.131:56650] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 13:54:15.028624 2026] [ssl:error] [pid 3368001:tid 3368001] (70014)End of file found: [client 216.73.216.199:26956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:54:15.767742 2026] [security2:error] [pid 3370801:tid 3370801] [client 43.106.13.141:48679] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJdy_5WhcuwnDdduLOSwAAABY"]
[Thu Jul 30 13:54:15.767791 2026] [security2:error] [pid 3370801:tid 3370801] [client 43.106.13.141:48679] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJdy_5WhcuwnDdduLOSwAAABY"]
[Thu Jul 30 13:54:15.768058 2026] [security2:error] [pid 3370801:tid 3370801] [client 43.106.13.141:48679] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJdy_5WhcuwnDdduLOSwAAABY"]
[Thu Jul 30 13:54:17.041951 2026] [lsapi:warn] [pid 3328609:tid 3328609] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:17.580440 2026] [ssl:error] [pid 3370801:tid 3370801] (EAI 2)Name or service not known: [client 144.76.19.72:43798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:17.580482 2026] [ssl:error] [pid 3370801:tid 3370801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:17.633315 2026] [ssl:error] [pid 3363733:tid 3363733] (EAI 2)Name or service not known: [client 144.76.19.72:43802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:17.633345 2026] [ssl:error] [pid 3363733:tid 3363733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:19.830379 2026] [access_compat:error] [pid 3352211:tid 3352211] [client 202.88.254.53:63494] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:20.282107 2026] [security2:error] [pid 3328609:tid 3328609] [client 43.106.13.141:45611] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJfHeVeaYjZapzagSd8wAAABc"]
[Thu Jul 30 13:54:20.282177 2026] [security2:error] [pid 3328609:tid 3328609] [client 43.106.13.141:45611] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJfHeVeaYjZapzagSd8wAAABc"]
[Thu Jul 30 13:54:20.282429 2026] [security2:error] [pid 3328609:tid 3328609] [client 43.106.13.141:45611] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJfHeVeaYjZapzagSd8wAAABc"]
[Thu Jul 30 13:54:20.657728 2026] [security2:error] [pid 3363733:tid 3363733] [client 85.208.96.193:16540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3213.0/prev_next,next.html"] [unique_id "amtJfGM44WqfBs2GoBrswAAAADE"]
[Thu Jul 30 13:54:20.692443 2026] [ssl:error] [pid 3368001:tid 3368001] (EAI 2)Name or service not known: [client 144.76.19.72:25212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:20.692478 2026] [ssl:error] [pid 3368001:tid 3368001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:20.745162 2026] [ssl:error] [pid 3371174:tid 3371174] (EAI 2)Name or service not known: [client 144.76.19.72:25216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:20.745193 2026] [ssl:error] [pid 3371174:tid 3371174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:21.931557 2026] [lsapi:warn] [pid 3371173:tid 3371173] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:23.683273 2026] [access_compat:error] [pid 3360839:tid 3360839] [client 45.158.164.139:52840] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:54:23.807599 2026] [ssl:error] [pid 3368048:tid 3368048] (EAI 2)Name or service not known: [client 144.76.19.72:25230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:23.807636 2026] [ssl:error] [pid 3368048:tid 3368048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:23.861167 2026] [ssl:error] [pid 3361762:tid 3361762] (EAI 2)Name or service not known: [client 144.76.19.72:25240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:23.861189 2026] [ssl:error] [pid 3361762:tid 3361762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:24.520735 2026] [security2:error] [pid 3370737:tid 3370737] [client 43.165.174.53:39216] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wartypig.com"] [uri "/"] [unique_id "amtJgERH7J5XDYCras3QkQAAAAQ"]
[Thu Jul 30 13:54:25.452788 2026] [access_compat:error] [pid 3361762:tid 3361762] [client 202.88.254.53:63798] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:25.548644 2026] [ssl:error] [pid 3372441:tid 3372441] (70014)End of file found: [client 216.73.216.199:45285] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:54:26.938729 2026] [ssl:error] [pid 3368081:tid 3368081] (EAI 2)Name or service not known: [client 144.76.19.72:25252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:26.938770 2026] [ssl:error] [pid 3368081:tid 3368081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:26.994626 2026] [ssl:error] [pid 3370769:tid 3370769] (EAI 2)Name or service not known: [client 144.76.19.72:25264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:26.994661 2026] [ssl:error] [pid 3370769:tid 3370769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:27.667854 2026] [security2:error] [pid 3370737:tid 3370737] [client 43.157.181.189:39194] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtJg0RH7J5XDYCras3QkwAAAAQ"], referer: http://www.banskoexpress.co.uk
[Thu Jul 30 13:54:27.739395 2026] [lsapi:warn] [pid 3371110:tid 3371110] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:29.114968 2026] [security2:error] [pid 3352211:tid 3352211] [client 43.157.181.189:33798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtJhbl1GQbs11GumqfeGgAAADI"], referer: http://www.banskoexpress.com
[Thu Jul 30 13:54:29.512456 2026] [authz_core:error] [pid 3371174:tid 3371174] [client 66.249.66.33:59073] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:54:29.515241 2026] [authz_core:error] [pid 3371174:tid 3371174] [client 66.249.66.33:59073] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:54:30.050887 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:43534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:30.050941 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:30.109376 2026] [ssl:error] [pid 3372508:tid 3372508] (EAI 2)Name or service not known: [client 144.76.19.72:43540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:30.109423 2026] [ssl:error] [pid 3372508:tid 3372508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:31.599331 2026] [access_compat:error] [pid 3352101:tid 3352101] [client 202.88.254.53:64018] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:32.540800 2026] [lsapi:warn] [pid 3352211:tid 3352211] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:33.167535 2026] [ssl:error] [pid 3374664:tid 3374664] (EAI 2)Name or service not known: [client 144.76.19.72:43554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:33.167565 2026] [ssl:error] [pid 3374664:tid 3374664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:33.222483 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:43556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:33.222512 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:33.516492 2026] [security2:error] [pid 3373265:tid 3373265] [client 74.7.242.63:58510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtJiVw_zU8HI3SSjXbh8AAAAB4"]
[Thu Jul 30 13:54:36.280165 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:43568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:36.280212 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:36.471216 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:43580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:36.471252 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:38.259777 2026] [security2:error] [pid 3371112:tid 3371112] [client 116.202.23.152:33178] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtJjmtqK2rqRL5fQ8w9nwAAACo"]
[Thu Jul 30 13:54:38.351119 2026] [lsapi:warn] [pid 3370801:tid 3370801] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:38.429911 2026] [access_compat:error] [pid 3371110:tid 3371110] [client 202.88.254.53:64336] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:38.656937 2026] [security2:error] [pid 3368048:tid 3368048] [client 47.128.50.22:33364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kingston1010.org.uk"] [uri "/robots.txt"] [unique_id "amtJjvn5Kg8kPbFetdyjZwAAACA"]
[Thu Jul 30 13:54:39.529470 2026] [ssl:error] [pid 3375326:tid 3375326] (EAI 2)Name or service not known: [client 144.76.19.72:43584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:39.529500 2026] [ssl:error] [pid 3375326:tid 3375326] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:39.582908 2026] [ssl:error] [pid 3368050:tid 3368050] (EAI 2)Name or service not known: [client 144.76.19.72:58876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:39.582939 2026] [ssl:error] [pid 3368050:tid 3368050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:40.302904 2026] [security2:error] [pid 3370704:tid 3370704] [client 82.156.116.86:48710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hatch-works.com"] [uri "/"] [unique_id "amtJkH4I-KdxEz55Bu3QGgAAAAM"]
[Thu Jul 30 13:54:40.767423 2026] [authz_core:error] [pid 3371112:tid 3371112] [client 66.249.66.33:49121] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:54:40.770140 2026] [authz_core:error] [pid 3371112:tid 3371112] [client 66.249.66.33:49121] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:54:42.665688 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:58890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:42.665744 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:42.717517 2026] [ssl:error] [pid 3368050:tid 3368050] (EAI 2)Name or service not known: [client 144.76.19.72:58900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:42.717545 2026] [ssl:error] [pid 3368050:tid 3368050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:43.176566 2026] [lsapi:warn] [pid 3350310:tid 3350310] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:43.479044 2026] [security2:error] [pid 3370704:tid 3370704] [client 94.154.43.177:63600] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/.env"] [unique_id "amtJk34I-KdxEz55Bu3QGwAAAAM"]
[Thu Jul 30 13:54:43.479318 2026] [security2:error] [pid 3370704:tid 3370704] [client 94.154.43.177:63600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/.env"] [unique_id "amtJk34I-KdxEz55Bu3QGwAAAAM"]
[Thu Jul 30 13:54:44.607409 2026] [access_compat:error] [pid 3371173:tid 3371173] [client 202.88.254.53:64567] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:44.817513 2026] [security2:error] [pid 3370704:tid 3370704] [client 94.154.43.177:63600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtJk34I-KdxEz55Bu3QGwAAAAM"]
[Thu Jul 30 13:54:45.775520 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:58906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:45.775550 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:45.831900 2026] [ssl:error] [pid 3352101:tid 3352101] (EAI 2)Name or service not known: [client 144.76.19.72:58918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:45.831930 2026] [ssl:error] [pid 3352101:tid 3352101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:46.400424 2026] [security2:error] [pid 3370704:tid 3370704] [client 85.208.96.194:51496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webstersltd.com"] [uri "/home-it-services.html"] [unique_id "amtJln4I-KdxEz55Bu3QHAAAAAM"]
[Thu Jul 30 13:54:48.888863 2026] [ssl:error] [pid 3368001:tid 3368001] (EAI 2)Name or service not known: [client 144.76.19.72:58926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:48.888896 2026] [ssl:error] [pid 3368001:tid 3368001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:48.918641 2026] [lsapi:warn] [pid 3370704:tid 3370704] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:48.945110 2026] [ssl:error] [pid 3373267:tid 3373267] (EAI 2)Name or service not known: [client 144.76.19.72:58942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:48.945149 2026] [ssl:error] [pid 3373267:tid 3373267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:50.845982 2026] [security2:error] [pid 3370801:tid 3370801] [client 47.128.98.73:39408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amtJmi_5WhcuwnDdduLOVQAAABY"]
[Thu Jul 30 13:54:52.000115 2026] [ssl:error] [pid 3368048:tid 3368048] (EAI 2)Name or service not known: [client 144.76.19.72:53998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:52.000142 2026] [ssl:error] [pid 3368048:tid 3368048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:52.056456 2026] [ssl:error] [pid 3368001:tid 3368001] (EAI 2)Name or service not known: [client 144.76.19.72:54008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:52.056491 2026] [ssl:error] [pid 3368001:tid 3368001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:52.773604 2026] [security2:error] [pid 3361036:tid 3361036] [client 43.157.191.20:35834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.loca.co.uk"] [uri "/"] [unique_id "amtJnLOoYHE9F1_9H41iNgAAABg"]
[Thu Jul 30 13:54:52.934446 2026] [access_compat:error] [pid 3350310:tid 3350310] [client 202.88.254.53:64903] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:53.785569 2026] [lsapi:warn] [pid 3370704:tid 3370704] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:54:54.892137 2026] [security2:error] [pid 3372386:tid 3372386] [client 94.154.43.183:54688] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amtJnuWtb4b4cKZ6fMV9dQAAAAA"]
[Thu Jul 30 13:54:54.892335 2026] [security2:error] [pid 3372386:tid 3372386] [client 94.154.43.183:54688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amtJnuWtb4b4cKZ6fMV9dQAAAAA"]
[Thu Jul 30 13:54:54.892560 2026] [security2:error] [pid 3372386:tid 3372386] [client 94.154.43.183:54688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "freakorgeek.com"] [uri "/.env"] [unique_id "amtJnuWtb4b4cKZ6fMV9dQAAAAA"]
[Thu Jul 30 13:54:55.109686 2026] [ssl:error] [pid 3371110:tid 3371110] (EAI 2)Name or service not known: [client 144.76.19.72:54024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:55.109714 2026] [ssl:error] [pid 3371110:tid 3371110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:55.164396 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:54030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:55.164429 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:58.223652 2026] [ssl:error] [pid 3370769:tid 3370769] (EAI 2)Name or service not known: [client 144.76.19.72:54036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:58.223697 2026] [ssl:error] [pid 3370769:tid 3370769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:58.276716 2026] [ssl:error] [pid 3371171:tid 3371171] (EAI 2)Name or service not known: [client 144.76.19.72:54040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:54:58.276745 2026] [ssl:error] [pid 3371171:tid 3371171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:54:58.812681 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 13:54:58.812792 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 13:54:58.812960 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 13:54:58.813164 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 13:54:58.813234 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 13:54:58.813399 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 13:54:58.813580 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 13:54:58.813650 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 13:54:58.813815 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 13:54:58.813938 2026] [authz_core:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 13:54:58.814001 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 13:54:58.814083 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 13:54:58.814250 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 13:54:58.814421 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 13:54:58.814498 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 13:54:58.814682 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 13:54:58.814853 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 13:54:58.814923 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 13:54:58.815097 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 13:54:58.815952 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 13:54:58.816021 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 13:54:58.816197 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 13:54:58.816381 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 13:54:58.816449 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 13:54:58.816619 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 13:54:58.817146 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 13:54:58.817218 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 13:54:58.817385 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 13:54:58.817557 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 13:54:58.817627 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 13:54:58.817792 2026] [access_compat:error] [pid 3373202:tid 3373202] [client 158.173.77.180:34335] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 13:54:59.069538 2026] [access_compat:error] [pid 3371173:tid 3371173] [client 202.88.254.53:65110] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:54:59.528281 2026] [lsapi:warn] [pid 3375157:tid 3375157] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:01.445587 2026] [security2:error] [pid 3350310:tid 3350310] [client 74.7.241.22:45002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiology-in-london.co.uk.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtJpWSECeiy8zh2C-cF9gAAAC4"]
[Thu Jul 30 13:55:01.581445 2026] [ssl:error] [pid 3350310:tid 3350310] (EAI 2)Name or service not known: [client 144.76.19.72:57720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:01.581497 2026] [ssl:error] [pid 3350310:tid 3350310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:01.635644 2026] [ssl:error] [pid 3350310:tid 3350310] (EAI 2)Name or service not known: [client 144.76.19.72:57732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:01.635670 2026] [ssl:error] [pid 3350310:tid 3350310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:04.319334 2026] [lsapi:warn] [pid 3373265:tid 3373265] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:04.689146 2026] [ssl:error] [pid 3371112:tid 3371112] (EAI 2)Name or service not known: [client 144.76.19.72:57740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:04.689178 2026] [ssl:error] [pid 3371112:tid 3371112] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:04.742499 2026] [ssl:error] [pid 3318123:tid 3318123] (EAI 2)Name or service not known: [client 144.76.19.72:57752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:04.742527 2026] [ssl:error] [pid 3318123:tid 3318123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:07.736322 2026] [security2:error] [pid 3376937:tid 3376937] [client 92.222.108.124:23950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/sitemap_b.html"] [unique_id "amtJqwVEMpg8dptab2NgLQAAADI"]
[Thu Jul 30 13:55:07.800256 2026] [ssl:error] [pid 3376939:tid 3376939] (EAI 2)Name or service not known: [client 144.76.19.72:57768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:07.800283 2026] [ssl:error] [pid 3376939:tid 3376939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:07.856759 2026] [ssl:error] [pid 3352101:tid 3352101] (EAI 2)Name or service not known: [client 144.76.19.72:57784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:07.856790 2026] [ssl:error] [pid 3352101:tid 3352101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:08.257158 2026] [access_compat:error] [pid 3376716:tid 3376716] [client 202.88.254.53:65445] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:55:09.779492 2026] [cgi:error] [pid 3368113:tid 3368113] [client 47.128.117.238:48126] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:55:10.096896 2026] [lsapi:warn] [pid 3370801:tid 3370801] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:10.517388 2026] [security2:error] [pid 3376936:tid 3376936] [client 185.191.171.3:38138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/east-peoria-police-scanner"] [unique_id "amtJrvxgsgfg3BqIdSAh7AAAACM"]
[Thu Jul 30 13:55:10.911571 2026] [ssl:error] [pid 3373267:tid 3373267] (EAI 2)Name or service not known: [client 144.76.19.72:40764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:10.911605 2026] [ssl:error] [pid 3373267:tid 3373267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:10.965939 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:40780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:10.965964 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:11.548290 2026] [security2:error] [pid 3372506:tid 3372506] [client 43.157.82.252:57004] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amtJr8DM9Pzpe_5lnFdGMgAAAAs"]
[Thu Jul 30 13:55:11.820485 2026] [lsapi:warn] [pid 3372507:tid 3372507] [client 209.42.22.206:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:12.292542 2026] [security2:error] [pid 3375408:tid 3375408] [client 38.236.53.57:55364] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJsLj9X-Q6ji5_Dn9aLAAAACw"]
[Thu Jul 30 13:55:12.292591 2026] [security2:error] [pid 3375408:tid 3375408] [client 38.236.53.57:55364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJsLj9X-Q6ji5_Dn9aLAAAACw"]
[Thu Jul 30 13:55:12.292839 2026] [security2:error] [pid 3375408:tid 3375408] [client 38.236.53.57:55364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJsLj9X-Q6ji5_Dn9aLAAAACw"]
[Thu Jul 30 13:55:13.501910 2026] [security2:error] [pid 3376781:tid 3376781] [client 114.119.142.20:29399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~14,103,19/request_format~html"] [unique_id "amtJsclvpVgZMjiTv0K_LQAAACI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~14,103,19/request_format~html
[Thu Jul 30 13:55:14.020902 2026] [ssl:error] [pid 3368117:tid 3368117] (EAI 2)Name or service not known: [client 144.76.19.72:40784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:14.020954 2026] [ssl:error] [pid 3368117:tid 3368117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:14.077800 2026] [ssl:error] [pid 3372507:tid 3372507] (EAI 2)Name or service not known: [client 144.76.19.72:40798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:14.077836 2026] [ssl:error] [pid 3372507:tid 3372507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:14.915048 2026] [lsapi:warn] [pid 3352101:tid 3352101] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:14.943654 2026] [security2:error] [pid 3376716:tid 3376716] [client 114.119.142.20:29413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~14,103,19/request_format~html"] [unique_id "amtJsjSPEGBW8pVF5CKJZgAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~14,103,19/request_format~html
[Thu Jul 30 13:55:15.763225 2026] [security2:error] [pid 3376939:tid 3376939] [client 163.7.14.106:20265] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJs7Cd2j_rdEwZV05R0QAAADY"]
[Thu Jul 30 13:55:15.763275 2026] [security2:error] [pid 3376939:tid 3376939] [client 163.7.14.106:20265] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJs7Cd2j_rdEwZV05R0QAAADY"]
[Thu Jul 30 13:55:15.763553 2026] [security2:error] [pid 3376939:tid 3376939] [client 163.7.14.106:20265] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJs7Cd2j_rdEwZV05R0QAAADY"]
[Thu Jul 30 13:55:16.008802 2026] [cgi:error] [pid 3373267:tid 3373267] [client 103.117.14.201:53056] AH02812: stderr from /home/printmyc/codeworks.uk/cgi-bin/: attempt to invoke directory as script, referer: http://codeworks.uk
[Thu Jul 30 13:55:17.133529 2026] [ssl:error] [pid 3370810:tid 3370810] (EAI 2)Name or service not known: [client 144.76.19.72:40822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:17.133562 2026] [ssl:error] [pid 3370810:tid 3370810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:17.191631 2026] [ssl:error] [pid 3371175:tid 3371175] (EAI 2)Name or service not known: [client 144.76.19.72:40830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:17.191672 2026] [ssl:error] [pid 3371175:tid 3371175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:18.975866 2026] [security2:error] [pid 3372386:tid 3372386] [client 163.7.14.106:48205] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJtuWtb4b4cKZ6fMV93gAAAAA"]
[Thu Jul 30 13:55:18.975918 2026] [security2:error] [pid 3372386:tid 3372386] [client 163.7.14.106:48205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJtuWtb4b4cKZ6fMV93gAAAAA"]
[Thu Jul 30 13:55:18.976175 2026] [security2:error] [pid 3372386:tid 3372386] [client 163.7.14.106:48205] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJtuWtb4b4cKZ6fMV93gAAAAA"]
[Thu Jul 30 13:55:20.246358 2026] [ssl:error] [pid 3372506:tid 3372506] (EAI 2)Name or service not known: [client 144.76.19.72:48866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:20.246392 2026] [ssl:error] [pid 3372506:tid 3372506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:20.300722 2026] [ssl:error] [pid 3336416:tid 3336416] (EAI 2)Name or service not known: [client 144.76.19.72:48878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:20.300756 2026] [ssl:error] [pid 3336416:tid 3336416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:20.663905 2026] [lsapi:warn] [pid 3376716:tid 3376716] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:21.882491 2026] [core:error] [pid 3376716:tid 3376716] [client 66.249.66.8:42064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:55:21.882522 2026] [core:error] [pid 3376716:tid 3376716] [client 66.249.66.8:42064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:55:23.355288 2026] [ssl:error] [pid 3373268:tid 3373268] (EAI 2)Name or service not known: [client 144.76.19.72:48888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:23.355325 2026] [ssl:error] [pid 3373268:tid 3373268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:23.410437 2026] [ssl:error] [pid 3363733:tid 3363733] (EAI 2)Name or service not known: [client 144.76.19.72:48894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:23.410478 2026] [ssl:error] [pid 3363733:tid 3363733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:24.218412 2026] [access_compat:error] [pid 3378271:tid 3378271] [client 202.88.254.53:49613] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:55:24.298440 2026] [authz_core:error] [pid 3378272:tid 3378272] [client 66.249.66.34:54916] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:55:24.301122 2026] [authz_core:error] [pid 3378272:tid 3378272] [client 66.249.66.34:54916] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:55:24.703291 2026] [access_compat:error] [pid 3375594:tid 3375594] [client 45.158.164.139:39806] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:55:25.592192 2026] [lsapi:warn] [pid 3368001:tid 3368001] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:26.267691 2026] [lsapi:warn] [pid 3372386:tid 3372386] [client 45.158.164.139:39820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:55:26.267750 2026] [lsapi:warn] [pid 3372386:tid 3372386] [client 45.158.164.139:39820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:55:26.269817 2026] [lsapi:warn] [pid 3378214:tid 3378214] [client 89.197.16.98:42084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:55:26.269860 2026] [lsapi:warn] [pid 3378214:tid 3378214] [client 89.197.16.98:42084] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:55:26.465864 2026] [ssl:error] [pid 3376716:tid 3376716] (EAI 2)Name or service not known: [client 144.76.19.72:48898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:26.465918 2026] [ssl:error] [pid 3376716:tid 3376716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:26.522205 2026] [ssl:error] [pid 3350310:tid 3350310] (EAI 2)Name or service not known: [client 144.76.19.72:48912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:26.522243 2026] [ssl:error] [pid 3350310:tid 3350310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:29.579948 2026] [ssl:error] [pid 3361036:tid 3361036] (EAI 2)Name or service not known: [client 144.76.19.72:28914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:29.579991 2026] [ssl:error] [pid 3361036:tid 3361036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:29.633045 2026] [ssl:error] [pid 3370770:tid 3370770] (EAI 2)Name or service not known: [client 144.76.19.72:28920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:29.633092 2026] [ssl:error] [pid 3370770:tid 3370770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:31.208220 2026] [lsapi:warn] [pid 3376780:tid 3376780] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:32.325693 2026] [access_compat:error] [pid 3376780:tid 3376780] [client 45.158.164.139:36230] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:55:32.707601 2026] [ssl:error] [pid 3361762:tid 3361762] (EAI 2)Name or service not known: [client 144.76.19.72:28926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:32.707649 2026] [ssl:error] [pid 3361762:tid 3361762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:32.762796 2026] [ssl:error] [pid 3361762:tid 3361762] (EAI 2)Name or service not known: [client 144.76.19.72:28932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:32.762824 2026] [ssl:error] [pid 3361762:tid 3361762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:33.292102 2026] [security2:error] [pid 3378888:tid 3378888] [client 114.119.151.126:34913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/media/15071090324f4500b2efa494.11293161.jpeg"] [unique_id "amtJxYHOVSVPgNr9Cz-bggAAABY"], referer: http://jonathanmeyerart.co.uk/section/26/Field_notes
[Thu Jul 30 13:55:35.820001 2026] [ssl:error] [pid 3370737:tid 3370737] (EAI 2)Name or service not known: [client 144.76.19.72:28938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:35.820029 2026] [ssl:error] [pid 3370737:tid 3370737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:35.872299 2026] [ssl:error] [pid 3378888:tid 3378888] (EAI 2)Name or service not known: [client 144.76.19.72:28942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:35.872335 2026] [ssl:error] [pid 3378888:tid 3378888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:36.224700 2026] [lsapi:warn] [pid 3372508:tid 3372508] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:38.928607 2026] [ssl:error] [pid 3376781:tid 3376781] (EAI 2)Name or service not known: [client 144.76.19.72:28948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:38.928649 2026] [ssl:error] [pid 3376781:tid 3376781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:38.989666 2026] [ssl:error] [pid 3378272:tid 3378272] (EAI 2)Name or service not known: [client 144.76.19.72:28958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:38.989718 2026] [ssl:error] [pid 3378272:tid 3378272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:39.492998 2026] [authz_core:error] [pid 3374605:tid 3374605] [client 66.132.172.134:6428] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:55:39.499593 2026] [authz_core:error] [pid 3374605:tid 3374605] [client 66.132.172.134:6428] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:55:39.507488 2026] [access_compat:error] [pid 3328609:tid 3328609] [client 202.88.254.53:50172] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:55:40.581555 2026] [core:error] [pid 3370810:tid 3370810] (13)Permission denied: [client 216.73.216.199:24221] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/flags
[Thu Jul 30 13:55:41.387447 2026] [security2:error] [pid 3378214:tid 3378214] [client 74.7.242.14:52130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.warform.freakorgeek.com"] [uri "/"] [unique_id "amtJzXKDXarCoNq1hYZjLAAAAAM"]
[Thu Jul 30 13:55:41.895003 2026] [lsapi:warn] [pid 3368113:tid 3368113] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:42.048390 2026] [ssl:error] [pid 3372508:tid 3372508] (EAI 2)Name or service not known: [client 144.76.19.72:57058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:42.048418 2026] [ssl:error] [pid 3372508:tid 3372508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:42.103971 2026] [ssl:error] [pid 3361036:tid 3361036] (EAI 2)Name or service not known: [client 144.76.19.72:57072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:42.104004 2026] [ssl:error] [pid 3361036:tid 3361036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:45.155444 2026] [ssl:error] [pid 3372508:tid 3372508] (EAI 2)Name or service not known: [client 144.76.19.72:57074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:45.155487 2026] [ssl:error] [pid 3372508:tid 3372508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:45.207209 2026] [ssl:error] [pid 3379472:tid 3379472] (EAI 2)Name or service not known: [client 144.76.19.72:57078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:45.207246 2026] [ssl:error] [pid 3379472:tid 3379472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:45.578837 2026] [access_compat:error] [pid 3378887:tid 3378887] [client 202.88.254.53:50395] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:55:46.844356 2026] [lsapi:warn] [pid 3368117:tid 3368117] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:48.317701 2026] [ssl:error] [pid 3350310:tid 3350310] (EAI 2)Name or service not known: [client 144.76.19.72:57080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:48.317728 2026] [ssl:error] [pid 3350310:tid 3350310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:48.740244 2026] [ssl:error] [pid 3368001:tid 3368001] (EAI 2)Name or service not known: [client 144.76.19.72:57086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:48.740289 2026] [ssl:error] [pid 3368001:tid 3368001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:51.797960 2026] [ssl:error] [pid 3368001:tid 3368001] (EAI 2)Name or service not known: [client 144.76.19.72:44760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:51.797992 2026] [ssl:error] [pid 3368001:tid 3368001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:51.854493 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:44770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:51.854526 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:52.475390 2026] [lsapi:warn] [pid 3368001:tid 3368001] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:53.798605 2026] [access_compat:error] [pid 3361036:tid 3361036] [client 202.88.254.53:50719] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:55:54.943428 2026] [ssl:error] [pid 3380038:tid 3380038] (EAI 2)Name or service not known: [client 144.76.19.72:44786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:54.943458 2026] [ssl:error] [pid 3380038:tid 3380038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:54.998129 2026] [ssl:error] [pid 3378271:tid 3378271] (EAI 2)Name or service not known: [client 144.76.19.72:44790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:54.998165 2026] [ssl:error] [pid 3378271:tid 3378271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:55.817158 2026] [security2:error] [pid 3336416:tid 3336416] [client 43.130.12.43:37790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.com"] [uri "/"] [unique_id "amtJ23U7sGkMubWgCyF-vQAAAA4"]
[Thu Jul 30 13:55:55.949496 2026] [authz_core:error] [pid 3379839:tid 3379839] [client 66.249.66.33:57108] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:55:55.952155 2026] [authz_core:error] [pid 3379839:tid 3379839] [client 66.249.66.33:57108] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:55:56.799689 2026] [security2:error] [pid 3378393:tid 3378393] [client 47.128.61.140:42138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amtJ3EJJYtXpph5E8e2UwgAAAA8"]
[Thu Jul 30 13:55:57.173154 2026] [security2:error] [pid 3370769:tid 3370769] [client 43.130.12.43:59386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtJ3dHE5zm_MQbLzQ6TPAAAAAw"], referer: http://www.spamp.com
[Thu Jul 30 13:55:57.581757 2026] [lsapi:warn] [pid 3378830:tid 3378830] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:57.821124 2026] [lsapi:warn] [pid 3378393:tid 3378393] [client 77.223.141.12:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:55:58.057146 2026] [ssl:error] [pid 3348816:tid 3348816] (EAI 2)Name or service not known: [client 144.76.19.72:44800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:58.057176 2026] [ssl:error] [pid 3348816:tid 3348816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:58.115089 2026] [ssl:error] [pid 3380271:tid 3380271] (EAI 2)Name or service not known: [client 144.76.19.72:44812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:55:58.115136 2026] [ssl:error] [pid 3380271:tid 3380271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:55:59.386739 2026] [cgi:error] [pid 3376781:tid 3376781] [client 20.215.191.139:11510] AH02811: stderr from /home/abcdysle/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:55:59.727336 2026] [cgi:error] [pid 3376781:tid 3376781] [client 20.215.191.139:11510] AH02811: stderr from /home/abcdysle/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 13:56:00.034795 2026] [access_compat:error] [pid 3380038:tid 3380038] [client 202.88.254.53:50970] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:56:01.170656 2026] [ssl:error] [pid 3379839:tid 3379839] (EAI 2)Name or service not known: [client 144.76.19.72:47376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:01.170694 2026] [ssl:error] [pid 3379839:tid 3379839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:01.225285 2026] [ssl:error] [pid 3379472:tid 3379472] (EAI 2)Name or service not known: [client 144.76.19.72:47382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:01.225311 2026] [ssl:error] [pid 3379472:tid 3379472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:02.339755 2026] [authz_core:error] [pid 3379472:tid 3379472] [client 66.132.172.134:34058] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 13:56:02.345692 2026] [authz_core:error] [pid 3379472:tid 3379472] [client 66.132.172.134:34058] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 13:56:03.063356 2026] [lsapi:warn] [pid 3378214:tid 3378214] [client 177.55.92.139:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:56:03.321339 2026] [security2:error] [pid 3328609:tid 3328609] [client 43.157.52.37:49932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtJ43eVeaYjZapzagSeQgAAABc"]
[Thu Jul 30 13:56:03.503494 2026] [authz_core:error] [pid 3379472:tid 3379472] [client 66.132.172.134:34058] AH01630: client denied by server configuration: /home/winterb/public_html/suitecrm/error_log, referer: http://mail.dbstart.com:80/suitecrm
[Thu Jul 30 13:56:04.313127 2026] [ssl:error] [pid 3379899:tid 3379899] (EAI 2)Name or service not known: [client 144.76.19.72:47394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:04.313174 2026] [ssl:error] [pid 3379899:tid 3379899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:04.366416 2026] [ssl:error] [pid 3372506:tid 3372506] (EAI 2)Name or service not known: [client 144.76.19.72:47406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:04.366447 2026] [ssl:error] [pid 3372506:tid 3372506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:04.888700 2026] [access_compat:error] [pid 3360839:tid 3360839] [client 51.116.238.8:15685] AH01797: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:56:05.589424 2026] [ssl:error] [pid 3370810:tid 3370810] (70014)End of file found: [client 216.73.216.199:24221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:56:06.151142 2026] [authz_core:error] [pid 3379472:tid 3379472] [client 66.132.172.134:34058] AH01630: client denied by server configuration: /home/winterb/public_html/site/error_log, referer: http://mail.dbstart.com:80/site
[Thu Jul 30 13:56:06.236809 2026] [authz_core:error] [pid 3374664:tid 3374664] [client 51.116.238.8:15645] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 13:56:06.908811 2026] [access_compat:error] [pid 3372508:tid 3372508] [client 202.88.254.53:51273] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:56:06.909884 2026] [access_compat:error] [pid 3374664:tid 3374664] [client 51.116.238.8:15645] AH01797: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 13:56:07.426624 2026] [ssl:error] [pid 3376936:tid 3376936] (EAI 2)Name or service not known: [client 144.76.19.72:47410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:07.426662 2026] [ssl:error] [pid 3376936:tid 3376936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:07.482958 2026] [ssl:error] [pid 3378888:tid 3378888] (EAI 2)Name or service not known: [client 144.76.19.72:47422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:07.482991 2026] [ssl:error] [pid 3378888:tid 3378888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:08.175093 2026] [lsapi:warn] [pid 3378887:tid 3378887] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:56:10.537809 2026] [ssl:error] [pid 3378887:tid 3378887] (EAI 2)Name or service not known: [client 144.76.19.72:44310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:10.537849 2026] [ssl:error] [pid 3378887:tid 3378887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:10.599982 2026] [ssl:error] [pid 3378271:tid 3378271] (EAI 2)Name or service not known: [client 144.76.19.72:44324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:10.600010 2026] [ssl:error] [pid 3378271:tid 3378271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:10.727367 2026] [autoindex:error] [pid 3379472:tid 3379472] [client 66.132.172.134:34058] AH01276: Cannot serve directory /home/winterb/public_html/drupal0/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive, referer: http://mail.dbstart.com:80/drupal0
[Thu Jul 30 13:56:11.808547 2026] [security2:error] [pid 3352101:tid 3352101] [client 94.154.43.179:40606] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "moodle.prosperon.co.uk"] [uri "/.env"] [unique_id "amtJ66hHIyZDZJ5LJlrkHQAAABU"]
[Thu Jul 30 13:56:11.808739 2026] [security2:error] [pid 3352101:tid 3352101] [client 94.154.43.179:40606] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "moodle.prosperon.co.uk"] [uri "/.env"] [unique_id "amtJ66hHIyZDZJ5LJlrkHQAAABU"]
[Thu Jul 30 13:56:11.808930 2026] [security2:error] [pid 3352101:tid 3352101] [client 94.154.43.179:40606] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "moodle.prosperon.co.uk"] [uri "/.env"] [unique_id "amtJ66hHIyZDZJ5LJlrkHQAAABU"]
[Thu Jul 30 13:56:11.896189 2026] [security2:error] [pid 3378271:tid 3378271] [client 85.208.96.206:26936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/daniel-louisy-married"] [unique_id "amtJ6138sgF-Byz6sXOW0gAAAAY"]
[Thu Jul 30 13:56:13.165953 2026] [access_compat:error] [pid 3352101:tid 3352101] [client 202.88.254.53:51531] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:56:13.534805 2026] [security2:error] [pid 3372441:tid 3372441] [client 47.128.117.76:30438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amtJ7dn4Rrn3TQl7vk99bQAAAAU"]
[Thu Jul 30 13:56:13.658089 2026] [ssl:error] [pid 3378887:tid 3378887] (EAI 2)Name or service not known: [client 144.76.19.72:44330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:13.658118 2026] [ssl:error] [pid 3378887:tid 3378887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:13.712320 2026] [ssl:error] [pid 3370770:tid 3370770] (EAI 2)Name or service not known: [client 144.76.19.72:44338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:13.712356 2026] [ssl:error] [pid 3370770:tid 3370770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:13.785231 2026] [security2:error] [pid 3372508:tid 3372508] [client 110.249.201.14:61348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amtJ7YsenDbomgM0p9depAAAABA"]
[Thu Jul 30 13:56:16.769491 2026] [ssl:error] [pid 3374664:tid 3374664] (EAI 2)Name or service not known: [client 144.76.19.72:44344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:16.769518 2026] [ssl:error] [pid 3374664:tid 3374664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:16.826499 2026] [ssl:error] [pid 3378888:tid 3378888] (EAI 2)Name or service not known: [client 144.76.19.72:44358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:16.826526 2026] [ssl:error] [pid 3378888:tid 3378888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:18.940352 2026] [lsapi:warn] [pid 3361036:tid 3361036] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:56:19.818611 2026] [access_compat:error] [pid 3372506:tid 3372506] [client 202.88.254.53:51828] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:56:20.160413 2026] [ssl:error] [pid 3382059:tid 3382059] (EAI 2)Name or service not known: [client 144.76.19.72:51092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:20.160446 2026] [ssl:error] [pid 3382059:tid 3382059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:20.446202 2026] [ssl:error] [pid 3382122:tid 3382122] (EAI 2)Name or service not known: [client 144.76.19.72:51108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:20.446243 2026] [ssl:error] [pid 3382122:tid 3382122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:20.549562 2026] [security2:error] [pid 3382123:tid 3382123] [client 74.7.227.156:51188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "securitiesfinance.co.uk"] [uri "/"] [unique_id "amtJ9HsNGLO77WBfIofzgQAAADI"]
[Thu Jul 30 13:56:20.835394 2026] [security2:error] [pid 3382122:tid 3382122] [client 43.130.233.11:63621] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJ9MUQVOENHH95vvRIoAAAAC8"]
[Thu Jul 30 13:56:20.835449 2026] [security2:error] [pid 3382122:tid 3382122] [client 43.130.233.11:63621] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJ9MUQVOENHH95vvRIoAAAAC8"]
[Thu Jul 30 13:56:20.835823 2026] [security2:error] [pid 3382122:tid 3382122] [client 43.130.233.11:63621] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJ9MUQVOENHH95vvRIoAAAAC8"]
[Thu Jul 30 13:56:23.500661 2026] [ssl:error] [pid 3372441:tid 3372441] (EAI 2)Name or service not known: [client 144.76.19.72:51118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:23.500705 2026] [ssl:error] [pid 3372441:tid 3372441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:23.555420 2026] [ssl:error] [pid 3372508:tid 3372508] (EAI 2)Name or service not known: [client 144.76.19.72:51124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:23.555447 2026] [ssl:error] [pid 3372508:tid 3372508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:23.889798 2026] [security2:error] [pid 3382193:tid 3382193] [client 102.157.50.186:42790] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJ90hixUP3lBGH3cO8vQAAADs"]
[Thu Jul 30 13:56:23.889861 2026] [security2:error] [pid 3382193:tid 3382193] [client 102.157.50.186:42790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtJ90hixUP3lBGH3cO8vQAAADs"]
[Thu Jul 30 13:56:23.890197 2026] [security2:error] [pid 3382193:tid 3382193] [client 102.157.50.186:42790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtJ90hixUP3lBGH3cO8vQAAADs"]
[Thu Jul 30 13:56:26.608629 2026] [ssl:error] [pid 3382187:tid 3382187] (EAI 2)Name or service not known: [client 144.76.19.72:51128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:26.608667 2026] [ssl:error] [pid 3382187:tid 3382187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:26.665708 2026] [ssl:error] [pid 3380038:tid 3380038] (EAI 2)Name or service not known: [client 144.76.19.72:51142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:26.665740 2026] [ssl:error] [pid 3380038:tid 3380038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:29.439602 2026] [lsapi:warn] [pid 3381783:tid 3381783] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:56:29.719346 2026] [ssl:error] [pid 3382120:tid 3382120] (EAI 2)Name or service not known: [client 144.76.19.72:27268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:29.719385 2026] [ssl:error] [pid 3382120:tid 3382120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:29.776046 2026] [ssl:error] [pid 3381784:tid 3381784] (EAI 2)Name or service not known: [client 144.76.19.72:27276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:29.776122 2026] [ssl:error] [pid 3381784:tid 3381784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:30.292048 2026] [security2:error] [pid 3378271:tid 3378271] [client 178.105.14.254:43180] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtJ_l38sgF-Byz6sXOXnQAAAAY"]
[Thu Jul 30 13:56:30.292237 2026] [security2:error] [pid 3378271:tid 3378271] [client 178.105.14.254:43180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtJ_l38sgF-Byz6sXOXnQAAAAY"]
[Thu Jul 30 13:56:30.292515 2026] [security2:error] [pid 3378271:tid 3378271] [client 178.105.14.254:43180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtJ_l38sgF-Byz6sXOXnQAAAAY"]
[Thu Jul 30 13:56:30.863912 2026] [access_compat:error] [pid 3379472:tid 3379472] [client 202.88.254.53:52374] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:56:31.310645 2026] [access_compat:error] [pid 3380104:tid 3380104] [client 45.158.164.139:43592] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:56:32.717788 2026] [security2:error] [pid 3372506:tid 3372506] [client 182.62.228.49:54132] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKAMDM9Pzpe_5lnFdGSwAAAAs"]
[Thu Jul 30 13:56:32.717848 2026] [security2:error] [pid 3372506:tid 3372506] [client 182.62.228.49:54132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKAMDM9Pzpe_5lnFdGSwAAAAs"]
[Thu Jul 30 13:56:32.718142 2026] [security2:error] [pid 3372506:tid 3372506] [client 182.62.228.49:54132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKAMDM9Pzpe_5lnFdGSwAAAAs"]
[Thu Jul 30 13:56:32.836004 2026] [ssl:error] [pid 3363733:tid 3363733] (EAI 2)Name or service not known: [client 144.76.19.72:27284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:32.836038 2026] [ssl:error] [pid 3363733:tid 3363733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:32.890760 2026] [ssl:error] [pid 3379899:tid 3379899] (EAI 2)Name or service not known: [client 144.76.19.72:27296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:32.890790 2026] [ssl:error] [pid 3379899:tid 3379899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:35.944326 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:27312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:35.944357 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:36.001924 2026] [ssl:error] [pid 3382186:tid 3382186] (EAI 2)Name or service not known: [client 144.76.19.72:27322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:36.001957 2026] [ssl:error] [pid 3382186:tid 3382186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:37.276969 2026] [security2:error] [pid 3378271:tid 3378271] [client 114.119.146.111:32491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~104,14/request_format~html"] [unique_id "amtKBV38sgF-Byz6sXOXnwAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E104
[Thu Jul 30 13:56:38.861825 2026] [security2:error] [pid 3374664:tid 3374664] [client 114.119.146.111:32493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~104,14/request_format~html"] [unique_id "amtKBneHkevsRIs5r9KaWgAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E104
[Thu Jul 30 13:56:39.092532 2026] [ssl:error] [pid 3370737:tid 3370737] (EAI 2)Name or service not known: [client 144.76.19.72:27326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:39.092573 2026] [ssl:error] [pid 3370737:tid 3370737] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:39.146777 2026] [ssl:error] [pid 3352101:tid 3352101] (EAI 2)Name or service not known: [client 144.76.19.72:27342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:39.146801 2026] [ssl:error] [pid 3352101:tid 3352101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:40.255671 2026] [lsapi:warn] [pid 3383323:tid 3383323] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:56:42.104242 2026] [access_compat:error] [pid 3382121:tid 3382121] [client 202.88.254.53:52928] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:56:42.200570 2026] [ssl:error] [pid 3382059:tid 3382059] (EAI 2)Name or service not known: [client 144.76.19.72:39772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:42.200598 2026] [ssl:error] [pid 3382059:tid 3382059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:42.256522 2026] [ssl:error] [pid 3372441:tid 3372441] (EAI 2)Name or service not known: [client 144.76.19.72:39782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:42.256548 2026] [ssl:error] [pid 3372441:tid 3372441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:42.496237 2026] [access_compat:error] [pid 3363733:tid 3363733] [client 45.158.164.139:60792] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:56:45.309620 2026] [ssl:error] [pid 3360839:tid 3360839] (EAI 2)Name or service not known: [client 144.76.19.72:39796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:45.309655 2026] [ssl:error] [pid 3360839:tid 3360839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:45.364277 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:39798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:45.364327 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:48.424656 2026] [ssl:error] [pid 3382187:tid 3382187] (EAI 2)Name or service not known: [client 144.76.19.72:39802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:48.424684 2026] [ssl:error] [pid 3382187:tid 3382187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:48.479261 2026] [ssl:error] [pid 3382121:tid 3382121] (EAI 2)Name or service not known: [client 144.76.19.72:39818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:48.479297 2026] [ssl:error] [pid 3382121:tid 3382121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:49.847565 2026] [authz_core:error] [pid 3383001:tid 3383001] [client 66.249.66.34:62037] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:56:49.850216 2026] [authz_core:error] [pid 3383001:tid 3383001] [client 66.249.66.34:62037] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:56:50.823812 2026] [ssl:error] [pid 3374664:tid 3374664] (70014)End of file found: [client 216.73.216.199:26887] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:56:50.854113 2026] [lsapi:warn] [pid 3376936:tid 3376936] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:56:51.531868 2026] [ssl:error] [pid 3380038:tid 3380038] (EAI 2)Name or service not known: [client 144.76.19.72:18442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:51.531901 2026] [ssl:error] [pid 3380038:tid 3380038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:51.583428 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:18444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:51.583478 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:52.486207 2026] [access_compat:error] [pid 3360839:tid 3360839] [client 202.88.254.53:53469] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:56:54.637593 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:18458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:54.637627 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:54.691170 2026] [ssl:error] [pid 3384296:tid 3384296] (EAI 2)Name or service not known: [client 144.76.19.72:18468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:54.691213 2026] [ssl:error] [pid 3384296:tid 3384296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:57.749310 2026] [ssl:error] [pid 3348816:tid 3348816] (EAI 2)Name or service not known: [client 144.76.19.72:18476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:57.749351 2026] [ssl:error] [pid 3348816:tid 3348816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:56:57.807154 2026] [ssl:error] [pid 3360839:tid 3360839] (EAI 2)Name or service not known: [client 144.76.19.72:18484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:56:57.807184 2026] [ssl:error] [pid 3360839:tid 3360839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:00.817822 2026] [ssl:error] [pid 3372386:tid 3372386] (70014)End of file found: [client 216.73.216.199:14116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:57:00.868511 2026] [ssl:error] [pid 3376780:tid 3376780] (EAI 2)Name or service not known: [client 144.76.19.72:42470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:00.868554 2026] [ssl:error] [pid 3376780:tid 3376780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:00.921766 2026] [ssl:error] [pid 3379900:tid 3379900] (EAI 2)Name or service not known: [client 144.76.19.72:42486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:00.921798 2026] [ssl:error] [pid 3379900:tid 3379900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:01.375338 2026] [security2:error] [pid 3376780:tid 3376780] [client 74.7.243.241:50326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/wp-sitemap.xml"] [unique_id "amtKHZewy8isHcSWZtGqzAAAABk"]
[Thu Jul 30 13:57:01.537271 2026] [lsapi:warn] [pid 3379900:tid 3379900] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:57:01.718434 2026] [lsapi:warn] [pid 3372440:tid 3372440] [client 199.16.129.132:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:57:02.298636 2026] [access_compat:error] [pid 3372508:tid 3372508] [client 202.88.254.53:54161] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:57:03.979233 2026] [ssl:error] [pid 3382190:tid 3382190] (EAI 2)Name or service not known: [client 144.76.19.72:42488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:03.979263 2026] [ssl:error] [pid 3382190:tid 3382190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:04.038455 2026] [ssl:error] [pid 3350310:tid 3350310] (EAI 2)Name or service not known: [client 144.76.19.72:42490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:04.038497 2026] [ssl:error] [pid 3350310:tid 3350310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:07.093663 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:42494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:07.093712 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:07.149874 2026] [ssl:error] [pid 3376936:tid 3376936] (EAI 2)Name or service not known: [client 144.76.19.72:42508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:07.149910 2026] [ssl:error] [pid 3376936:tid 3376936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:10.221983 2026] [ssl:error] [pid 3381784:tid 3381784] (EAI 2)Name or service not known: [client 144.76.19.72:26130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:10.222028 2026] [ssl:error] [pid 3381784:tid 3381784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:10.273942 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:26144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:10.273995 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:12.111569 2026] [access_compat:error] [pid 3378272:tid 3378272] [client 202.88.254.53:54830] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:57:12.148083 2026] [lsapi:warn] [pid 3360839:tid 3360839] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:57:12.391044 2026] [core:error] [pid 3382190:tid 3382190] [client 66.249.66.167:60145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:57:12.391088 2026] [core:error] [pid 3382190:tid 3382190] [client 66.249.66.167:60145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:57:12.393183 2026] [security2:error] [pid 3368113:tid 3368113] [client 185.191.171.6:59010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/grill-225-charleston-dress-code"] [unique_id "amtKKF959vm92YAMpLt6eAAAAEo"]
[Thu Jul 30 13:57:13.329551 2026] [ssl:error] [pid 3372506:tid 3372506] (EAI 2)Name or service not known: [client 144.76.19.72:26158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:13.329589 2026] [ssl:error] [pid 3372506:tid 3372506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:13.382799 2026] [ssl:error] [pid 3381783:tid 3381783] (EAI 2)Name or service not known: [client 144.76.19.72:26170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:13.382836 2026] [ssl:error] [pid 3381783:tid 3381783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:13.390531 2026] [security2:error] [pid 3372386:tid 3372386] [client 85.208.96.203:24388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.840.html"] [unique_id "amtKKeWtb4b4cKZ6fMV-lAAAAAA"]
[Thu Jul 30 13:57:16.441785 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:26182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:16.441827 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:16.495009 2026] [ssl:error] [pid 3382123:tid 3382123] (EAI 2)Name or service not known: [client 144.76.19.72:26194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:16.495047 2026] [ssl:error] [pid 3382123:tid 3382123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:18.514477 2026] [security2:error] [pid 3380104:tid 3380104] [client 186.78.216.236:51502] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKLt9SPtxEt13ltgjniAAAACg"]
[Thu Jul 30 13:57:18.514527 2026] [security2:error] [pid 3380104:tid 3380104] [client 186.78.216.236:51502] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKLt9SPtxEt13ltgjniAAAACg"]
[Thu Jul 30 13:57:18.514790 2026] [security2:error] [pid 3380104:tid 3380104] [client 186.78.216.236:51502] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKLt9SPtxEt13ltgjniAAAACg"]
[Thu Jul 30 13:57:19.552551 2026] [ssl:error] [pid 3372506:tid 3372506] (EAI 2)Name or service not known: [client 144.76.19.72:26206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:19.552601 2026] [ssl:error] [pid 3372506:tid 3372506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:19.610330 2026] [ssl:error] [pid 3382123:tid 3382123] (EAI 2)Name or service not known: [client 144.76.19.72:40854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:19.610359 2026] [ssl:error] [pid 3382123:tid 3382123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:21.436651 2026] [access_compat:error] [pid 3372440:tid 3372440] [client 202.88.254.53:55418] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:57:22.570489 2026] [security2:error] [pid 3372506:tid 3372506] [client 110.54.172.172:17551] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKMsDM9Pzpe_5lnFdGYwAAAAs"]
[Thu Jul 30 13:57:22.570541 2026] [security2:error] [pid 3372506:tid 3372506] [client 110.54.172.172:17551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKMsDM9Pzpe_5lnFdGYwAAAAs"]
[Thu Jul 30 13:57:22.570796 2026] [security2:error] [pid 3372506:tid 3372506] [client 110.54.172.172:17551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKMsDM9Pzpe_5lnFdGYwAAAAs"]
[Thu Jul 30 13:57:22.664412 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:40856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:22.664445 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:22.719680 2026] [ssl:error] [pid 3384166:tid 3384166] (EAI 2)Name or service not known: [client 144.76.19.72:40872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:22.719710 2026] [ssl:error] [pid 3384166:tid 3384166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:22.809439 2026] [lsapi:warn] [pid 3370810:tid 3370810] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:57:25.772048 2026] [ssl:error] [pid 3382190:tid 3382190] (EAI 2)Name or service not known: [client 144.76.19.72:40878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:25.772085 2026] [ssl:error] [pid 3382190:tid 3382190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:25.826058 2026] [ssl:error] [pid 3381784:tid 3381784] (EAI 2)Name or service not known: [client 144.76.19.72:40892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:25.826108 2026] [ssl:error] [pid 3381784:tid 3381784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:25.949652 2026] [security2:error] [pid 3348816:tid 3348816] [client 52.21.62.139:4634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/one-to-one-private-clients/"] [unique_id "amtKNeoRRwudNO2kOoWEngAAACc"]
[Thu Jul 30 13:57:28.882498 2026] [ssl:error] [pid 3370770:tid 3370770] (EAI 2)Name or service not known: [client 144.76.19.72:40896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:28.882533 2026] [ssl:error] [pid 3370770:tid 3370770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:28.936567 2026] [ssl:error] [pid 3382190:tid 3382190] (EAI 2)Name or service not known: [client 144.76.19.72:40898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:28.936589 2026] [ssl:error] [pid 3382190:tid 3382190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:30.415125 2026] [security2:error] [pid 3378272:tid 3378272] [client 23.154.136.246:54856] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace.com.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtKOqZQUI0x_1I8Jg5RlQAAAAg"]
[Thu Jul 30 13:57:30.415411 2026] [security2:error] [pid 3378272:tid 3378272] [client 23.154.136.246:54856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace.com.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtKOqZQUI0x_1I8Jg5RlQAAAAg"]
[Thu Jul 30 13:57:30.415640 2026] [security2:error] [pid 3378272:tid 3378272] [client 23.154.136.246:54856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "nativespace.com.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtKOqZQUI0x_1I8Jg5RlQAAAAg"]
[Thu Jul 30 13:57:30.502652 2026] [security2:error] [pid 3378272:tid 3378272] [client 23.154.136.246:54856] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace.com.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtKOqZQUI0x_1I8Jg5RlgAAAAg"]
[Thu Jul 30 13:57:30.502932 2026] [security2:error] [pid 3378272:tid 3378272] [client 23.154.136.246:54856] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace.com.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtKOqZQUI0x_1I8Jg5RlgAAAAg"]
[Thu Jul 30 13:57:30.503224 2026] [security2:error] [pid 3378272:tid 3378272] [client 23.154.136.246:54856] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "nativespace.com.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtKOqZQUI0x_1I8Jg5RlgAAAAg"]
[Thu Jul 30 13:57:30.720168 2026] [access_compat:error] [pid 3382122:tid 3382122] [client 202.88.254.53:55968] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:57:30.891398 2026] [security2:error] [pid 3381784:tid 3381784] [client 84.54.71.156:23270] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKOu0OhhCPhS5nof8WMQAAABI"]
[Thu Jul 30 13:57:30.891451 2026] [security2:error] [pid 3381784:tid 3381784] [client 84.54.71.156:23270] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKOu0OhhCPhS5nof8WMQAAABI"]
[Thu Jul 30 13:57:30.891721 2026] [security2:error] [pid 3381784:tid 3381784] [client 84.54.71.156:23270] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKOu0OhhCPhS5nof8WMQAAABI"]
[Thu Jul 30 13:57:32.044953 2026] [ssl:error] [pid 3382123:tid 3382123] (EAI 2)Name or service not known: [client 144.76.19.72:49540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:32.044985 2026] [ssl:error] [pid 3382123:tid 3382123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:32.104634 2026] [ssl:error] [pid 3383400:tid 3383400] (EAI 2)Name or service not known: [client 144.76.19.72:49548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:32.104667 2026] [ssl:error] [pid 3383400:tid 3383400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:33.426336 2026] [lsapi:warn] [pid 3383323:tid 3383323] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:57:33.853726 2026] [cgi:error] [pid 3382190:tid 3382190] [client 87.199.196.181:64895] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/blog/
[Thu Jul 30 13:57:35.209706 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:49562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:35.209754 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:35.295135 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:49570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:35.295162 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:36.200354 2026] [core:error] [pid 3368109:tid 3368109] (13)Permission denied: [client 216.73.216.199:31078] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/log/secure
[Thu Jul 30 13:57:37.730941 2026] [access_compat:error] [pid 3348282:tid 3348282] [client 54.210.68.187:39008] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2011/01/test-card.png
[Thu Jul 30 13:57:37.731055 2026] [access_compat:error] [pid 3348282:tid 3348282] [client 54.210.68.187:39008] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:57:38.364085 2026] [ssl:error] [pid 3378272:tid 3378272] (EAI 2)Name or service not known: [client 144.76.19.72:49578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:38.364114 2026] [ssl:error] [pid 3378272:tid 3378272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:38.418373 2026] [ssl:error] [pid 3384296:tid 3384296] (EAI 2)Name or service not known: [client 144.76.19.72:49586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:38.418399 2026] [ssl:error] [pid 3384296:tid 3384296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:39.319841 2026] [security2:error] [pid 3373135:tid 3373135] [client 31.186.11.22:35360] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "mjs-services.com"] [uri "/xmlrpc.php"] [unique_id "amtKQ6IUSQsD4e7OWVrfQgAAABM"]
[Thu Jul 30 13:57:39.935692 2026] [access_compat:error] [pid 3384296:tid 3384296] [client 202.88.254.53:56504] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:57:40.447617 2026] [access_compat:error] [pid 3371173:tid 3371173] [client 45.158.164.139:53808] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:57:41.471583 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:25568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:41.471617 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:41.527903 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:25582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:41.527938 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:41.955195 2026] [authz_core:error] [pid 3386775:tid 3386775] [client 66.249.66.34:44515] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:57:41.957896 2026] [authz_core:error] [pid 3386775:tid 3386775] [client 66.249.66.34:44515] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:57:42.619779 2026] [security2:error] [pid 3372440:tid 3372440] [client 85.208.96.212:42588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.795.html"] [unique_id "amtKRuffFQ6gdyP2sLwGrQAAAAI"]
[Thu Jul 30 13:57:44.091381 2026] [lsapi:warn] [pid 3386417:tid 3386417] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:57:44.603088 2026] [ssl:error] [pid 3352101:tid 3352101] (EAI 2)Name or service not known: [client 144.76.19.72:25586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:44.603128 2026] [ssl:error] [pid 3352101:tid 3352101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:44.658948 2026] [ssl:error] [pid 3380104:tid 3380104] (EAI 2)Name or service not known: [client 144.76.19.72:25598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:44.658984 2026] [ssl:error] [pid 3380104:tid 3380104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:47.718267 2026] [ssl:error] [pid 3386417:tid 3386417] (EAI 2)Name or service not known: [client 144.76.19.72:25610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:47.718306 2026] [ssl:error] [pid 3386417:tid 3386417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:47.770622 2026] [ssl:error] [pid 3372440:tid 3372440] (EAI 2)Name or service not known: [client 144.76.19.72:25612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:47.770661 2026] [ssl:error] [pid 3372440:tid 3372440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:49.188489 2026] [access_compat:error] [pid 3368113:tid 3368113] [client 202.88.254.53:57057] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:57:50.827660 2026] [ssl:error] [pid 3348282:tid 3348282] (EAI 2)Name or service not known: [client 144.76.19.72:38526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:50.827690 2026] [ssl:error] [pid 3348282:tid 3348282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:50.885250 2026] [ssl:error] [pid 3372441:tid 3372441] (EAI 2)Name or service not known: [client 144.76.19.72:38540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:50.885280 2026] [ssl:error] [pid 3372441:tid 3372441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:51.202134 2026] [ssl:error] [pid 3368109:tid 3368109] (70014)End of file found: [client 216.73.216.199:31078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:57:51.429537 2026] [access_compat:error] [pid 3372386:tid 3372386] [client 45.158.164.139:36954] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:57:52.269672 2026] [authz_core:error] [pid 3383400:tid 3383400] [client 66.249.66.33:47850] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:57:52.272378 2026] [authz_core:error] [pid 3383400:tid 3383400] [client 66.249.66.33:47850] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:57:53.959560 2026] [ssl:error] [pid 3368113:tid 3368113] (EAI 2)Name or service not known: [client 144.76.19.72:38542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:53.959602 2026] [ssl:error] [pid 3368113:tid 3368113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:54.014344 2026] [ssl:error] [pid 3382193:tid 3382193] (EAI 2)Name or service not known: [client 144.76.19.72:38552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:54.014378 2026] [ssl:error] [pid 3382193:tid 3382193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:54.703040 2026] [lsapi:warn] [pid 3387425:tid 3387425] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:57:56.217940 2026] [security2:error] [pid 3382123:tid 3382123] [client 43.153.26.165:48998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtKVHsNGLO77WBfIofzmgAAADI"]
[Thu Jul 30 13:57:57.068155 2026] [ssl:error] [pid 3368001:tid 3368001] (EAI 2)Name or service not known: [client 144.76.19.72:38562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:57.068192 2026] [ssl:error] [pid 3368001:tid 3368001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:57.121695 2026] [ssl:error] [pid 3387426:tid 3387426] (EAI 2)Name or service not known: [client 144.76.19.72:38576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:57:57.121733 2026] [ssl:error] [pid 3387426:tid 3387426] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:57:57.576802 2026] [security2:error] [pid 3384092:tid 3384092] [client 43.153.26.165:52202] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtKVT9zJZaLedVTd5F8CQAAAAQ"], referer: http://www.saturnsports.co.uk
[Thu Jul 30 13:57:58.433588 2026] [access_compat:error] [pid 3361762:tid 3361762] [client 202.88.254.53:57598] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:57:58.789249 2026] [security2:error] [pid 3384092:tid 3384092] [client 35.234.37.132:36774] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.shelterforum.info"] [uri "/xmlrpc.php"] [unique_id "amtKVj9zJZaLedVTd5F8CgAAAAQ"]
[Thu Jul 30 13:58:00.177057 2026] [ssl:error] [pid 3386347:tid 3386347] (EAI 2)Name or service not known: [client 144.76.19.72:20372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:00.177111 2026] [ssl:error] [pid 3386347:tid 3386347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:00.231972 2026] [ssl:error] [pid 3368109:tid 3368109] (EAI 2)Name or service not known: [client 144.76.19.72:20388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:00.232042 2026] [ssl:error] [pid 3368109:tid 3368109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:00.652833 2026] [security2:error] [pid 3387426:tid 3387426] [client 114.119.155.144:31517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~103,30,19/request_format~html"] [unique_id "amtKWClFJcltBZ60nCYefgAAADM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~103,30/request_format~html
[Thu Jul 30 13:58:02.121014 2026] [security2:error] [pid 3380104:tid 3380104] [client 114.119.155.144:31529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~103,30,19/request_format~html"] [unique_id "amtKWt9SPtxEt13ltgjn0wAAACg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/cat_ids~103,30/request_format~html
[Thu Jul 30 13:58:03.287938 2026] [ssl:error] [pid 3379472:tid 3379472] (EAI 2)Name or service not known: [client 144.76.19.72:20394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:03.287988 2026] [ssl:error] [pid 3379472:tid 3379472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:03.345946 2026] [ssl:error] [pid 3372440:tid 3372440] (EAI 2)Name or service not known: [client 144.76.19.72:20406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:03.345991 2026] [ssl:error] [pid 3372440:tid 3372440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:05.403083 2026] [lsapi:warn] [pid 3387426:tid 3387426] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:58:06.210907 2026] [ssl:error] [pid 3386417:tid 3386417] (70014)End of file found: [client 216.73.216.199:50355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:58:06.400566 2026] [ssl:error] [pid 3382123:tid 3382123] (EAI 2)Name or service not known: [client 144.76.19.72:20412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:06.400601 2026] [ssl:error] [pid 3382123:tid 3382123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:06.456582 2026] [ssl:error] [pid 3387380:tid 3387380] (EAI 2)Name or service not known: [client 144.76.19.72:20418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:06.456638 2026] [ssl:error] [pid 3387380:tid 3387380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:07.961405 2026] [access_compat:error] [pid 3387427:tid 3387427] [client 202.88.254.53:58129] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:58:09.512717 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:20420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:09.512767 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:09.567840 2026] [ssl:error] [pid 3380104:tid 3380104] (EAI 2)Name or service not known: [client 144.76.19.72:23586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:09.567879 2026] [ssl:error] [pid 3380104:tid 3380104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:10.572923 2026] [authz_core:error] [pid 3368113:tid 3368113] [client 66.249.66.35:44586] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:58:10.575594 2026] [authz_core:error] [pid 3368113:tid 3368113] [client 66.249.66.35:44586] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:58:12.627565 2026] [ssl:error] [pid 3387427:tid 3387427] (EAI 2)Name or service not known: [client 144.76.19.72:23590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:12.627598 2026] [ssl:error] [pid 3387427:tid 3387427] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:12.691804 2026] [ssl:error] [pid 3387379:tid 3387379] (EAI 2)Name or service not known: [client 144.76.19.72:23600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:12.691855 2026] [ssl:error] [pid 3387379:tid 3387379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:13.469716 2026] [security2:error] [pid 3361762:tid 3361762] [client 185.191.171.8:34798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/john-dorrance-estate"] [unique_id "amtKZaUjYgT330-Lj0IeXAAAACQ"]
[Thu Jul 30 13:58:15.749684 2026] [ssl:error] [pid 3372506:tid 3372506] (EAI 2)Name or service not known: [client 144.76.19.72:23610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:15.749718 2026] [ssl:error] [pid 3372506:tid 3372506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:15.803632 2026] [ssl:error] [pid 3368113:tid 3368113] (EAI 2)Name or service not known: [client 144.76.19.72:23612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:15.803668 2026] [ssl:error] [pid 3368113:tid 3368113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:16.017140 2026] [lsapi:warn] [pid 3386775:tid 3386775] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:58:17.109025 2026] [access_compat:error] [pid 3368113:tid 3368113] [client 202.88.254.53:58670] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:58:18.333809 2026] [access_compat:error] [pid 3378272:tid 3378272] [client 145.223.130.132:36842] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/category
[Thu Jul 30 13:58:18.333935 2026] [access_compat:error] [pid 3378272:tid 3378272] [client 145.223.130.132:36842] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:58:18.884117 2026] [ssl:error] [pid 3361762:tid 3361762] (EAI 2)Name or service not known: [client 144.76.19.72:23618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:18.884162 2026] [ssl:error] [pid 3361762:tid 3361762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:18.937051 2026] [ssl:error] [pid 3383400:tid 3383400] (EAI 2)Name or service not known: [client 144.76.19.72:23624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:18.937095 2026] [ssl:error] [pid 3383400:tid 3383400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:19.410216 2026] [authz_core:error] [pid 3374605:tid 3374605] [client 66.249.66.34:56702] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:58:19.412985 2026] [authz_core:error] [pid 3374605:tid 3374605] [client 66.249.66.34:56702] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:58:21.821350 2026] [cgi:error] [pid 3376939:tid 3376939] [client 4.223.67.9:50170] AH02812: stderr from /home/chateaus/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 13:58:21.997787 2026] [ssl:error] [pid 3384771:tid 3384771] (EAI 2)Name or service not known: [client 144.76.19.72:24754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:21.997835 2026] [ssl:error] [pid 3384771:tid 3384771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:22.053948 2026] [ssl:error] [pid 3372441:tid 3372441] (EAI 2)Name or service not known: [client 144.76.19.72:24762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:22.053986 2026] [ssl:error] [pid 3372441:tid 3372441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:25.112730 2026] [ssl:error] [pid 3350310:tid 3350310] (EAI 2)Name or service not known: [client 144.76.19.72:24766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:25.112782 2026] [ssl:error] [pid 3350310:tid 3350310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:25.170506 2026] [ssl:error] [pid 3387426:tid 3387426] (EAI 2)Name or service not known: [client 144.76.19.72:24776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:25.170538 2026] [ssl:error] [pid 3387426:tid 3387426] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:26.121447 2026] [access_compat:error] [pid 3387426:tid 3387426] [client 202.88.254.53:59208] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:58:26.156351 2026] [security2:error] [pid 3387424:tid 3387424] [client 47.83.122.58:10985] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKcgsdeSh6s5jaiq-QHwAAACo"]
[Thu Jul 30 13:58:26.156427 2026] [security2:error] [pid 3387424:tid 3387424] [client 47.83.122.58:10985] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKcgsdeSh6s5jaiq-QHwAAACo"]
[Thu Jul 30 13:58:26.156748 2026] [security2:error] [pid 3387424:tid 3387424] [client 47.83.122.58:10985] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKcgsdeSh6s5jaiq-QHwAAACo"]
[Thu Jul 30 13:58:26.621129 2026] [lsapi:warn] [pid 3370770:tid 3370770] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:58:27.922695 2026] [authz_core:error] [pid 3368109:tid 3368109] [client 66.249.66.33:59902] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:58:27.925748 2026] [authz_core:error] [pid 3368109:tid 3368109] [client 66.249.66.33:59902] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:58:28.225548 2026] [ssl:error] [pid 3384771:tid 3384771] (EAI 2)Name or service not known: [client 144.76.19.72:24778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:28.225582 2026] [ssl:error] [pid 3384771:tid 3384771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:28.282834 2026] [ssl:error] [pid 3382122:tid 3382122] (EAI 2)Name or service not known: [client 144.76.19.72:24790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:28.282864 2026] [ssl:error] [pid 3382122:tid 3382122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:28.948898 2026] [security2:error] [pid 3384771:tid 3384771] [client 200.150.252.104:42635] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKdM1X4jPq5O_m9-IkQgAAAAM"]
[Thu Jul 30 13:58:28.948948 2026] [security2:error] [pid 3384771:tid 3384771] [client 200.150.252.104:42635] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKdM1X4jPq5O_m9-IkQgAAAAM"]
[Thu Jul 30 13:58:28.949220 2026] [security2:error] [pid 3384771:tid 3384771] [client 200.150.252.104:42635] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKdM1X4jPq5O_m9-IkQgAAAAM"]
[Thu Jul 30 13:58:31.336673 2026] [ssl:error] [pid 3387427:tid 3387427] (EAI 2)Name or service not known: [client 144.76.19.72:60754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:31.336711 2026] [ssl:error] [pid 3387427:tid 3387427] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:31.391495 2026] [ssl:error] [pid 3382122:tid 3382122] (EAI 2)Name or service not known: [client 144.76.19.72:60768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:31.391530 2026] [ssl:error] [pid 3382122:tid 3382122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:31.417829 2026] [core:error] [pid 3386775:tid 3386775] (13)Permission denied: [client 216.73.216.199:32371] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/cpu_slabs
[Thu Jul 30 13:58:33.356186 2026] [security2:error] [pid 3381993:tid 3381993] [client 14.191.129.157:2937] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKeS8aqE3fPHhOf8efhQAAACY"]
[Thu Jul 30 13:58:33.356238 2026] [security2:error] [pid 3381993:tid 3381993] [client 14.191.129.157:2937] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKeS8aqE3fPHhOf8efhQAAACY"]
[Thu Jul 30 13:58:33.356545 2026] [security2:error] [pid 3381993:tid 3381993] [client 14.191.129.157:2937] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKeS8aqE3fPHhOf8efhQAAACY"]
[Thu Jul 30 13:58:34.446113 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:60772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:34.446145 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:34.502039 2026] [ssl:error] [pid 3352101:tid 3352101] (EAI 2)Name or service not known: [client 144.76.19.72:60780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:34.502113 2026] [ssl:error] [pid 3352101:tid 3352101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:35.060815 2026] [access_compat:error] [pid 3361762:tid 3361762] [client 202.88.254.53:59736] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:58:37.263445 2026] [lsapi:warn] [pid 3378888:tid 3378888] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:58:37.559644 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:60796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:37.559676 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:37.612904 2026] [ssl:error] [pid 3372506:tid 3372506] (EAI 2)Name or service not known: [client 144.76.19.72:60806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:37.612942 2026] [ssl:error] [pid 3372506:tid 3372506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:40.671243 2026] [ssl:error] [pid 3389762:tid 3389762] (EAI 2)Name or service not known: [client 144.76.19.72:37288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:40.671299 2026] [ssl:error] [pid 3389762:tid 3389762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:40.723157 2026] [ssl:error] [pid 3387424:tid 3387424] (EAI 2)Name or service not known: [client 144.76.19.72:37296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:40.723196 2026] [ssl:error] [pid 3387424:tid 3387424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:41.229907 2026] [ssl:error] [pid 3386775:tid 3386775] (70014)End of file found: [client 216.73.216.199:32371] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:58:42.366114 2026] [authz_core:error] [pid 3387379:tid 3387379] [client 66.249.66.33:62947] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:58:42.368779 2026] [authz_core:error] [pid 3387379:tid 3387379] [client 66.249.66.33:62947] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:58:43.223706 2026] [authz_core:error] [pid 3370810:tid 3370810] [client 66.249.66.33:58403] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:58:43.226396 2026] [authz_core:error] [pid 3370810:tid 3370810] [client 66.249.66.33:58403] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:58:43.780515 2026] [ssl:error] [pid 3380038:tid 3380038] (EAI 2)Name or service not known: [client 144.76.19.72:37308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:43.780548 2026] [ssl:error] [pid 3380038:tid 3380038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:43.836491 2026] [ssl:error] [pid 3384296:tid 3384296] (EAI 2)Name or service not known: [client 144.76.19.72:37310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:43.836517 2026] [ssl:error] [pid 3384296:tid 3384296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:44.249385 2026] [access_compat:error] [pid 3378272:tid 3378272] [client 202.88.254.53:60268] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:58:44.793878 2026] [access_compat:error] [pid 3372386:tid 3372386] [client 45.158.164.139:36516] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:58:46.645134 2026] [ssl:error] [pid 3389658:tid 3389658] (70014)End of file found: [client 216.73.216.199:31687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:58:46.891588 2026] [ssl:error] [pid 3350310:tid 3350310] (EAI 2)Name or service not known: [client 144.76.19.72:37318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:46.891625 2026] [ssl:error] [pid 3350310:tid 3350310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:46.945222 2026] [ssl:error] [pid 3387379:tid 3387379] (EAI 2)Name or service not known: [client 144.76.19.72:37330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:46.945247 2026] [ssl:error] [pid 3387379:tid 3387379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:47.433596 2026] [authz_core:error] [pid 3388884:tid 3388884] [client 4.232.188.49:64963] AH01630: client denied by server configuration: /home/rediscov/public_html/tripodhome.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 13:58:47.844526 2026] [lsapi:warn] [pid 3370810:tid 3370810] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:58:50.011693 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:39744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:50.011729 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:50.064443 2026] [ssl:error] [pid 3384296:tid 3384296] (EAI 2)Name or service not known: [client 144.76.19.72:39760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:50.064485 2026] [ssl:error] [pid 3384296:tid 3384296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:50.641972 2026] [security2:error] [pid 3372441:tid 3372441] [client 43.167.232.38:59620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnstopwatches.com"] [uri "/"] [unique_id "amtKitn4Rrn3TQl7vk99ngAAAAU"]
[Thu Jul 30 13:58:51.189569 2026] [access_compat:error] [pid 3389657:tid 3389657] [client 195.96.139.129:60421] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 13:58:51.189665 2026] [access_compat:error] [pid 3389657:tid 3389657] [client 195.96.139.129:60421] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 13:58:52.162507 2026] [ssl:error] [pid 3390390:tid 3390390] (70014)End of file found: [client 216.73.216.199:53383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:58:52.357779 2026] [security2:error] [pid 3389658:tid 3389658] [client 188.166.244.214:51042] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amtKjPpX7iET6LZ0f5xLzwAAABM"]
[Thu Jul 30 13:58:53.202430 2026] [ssl:error] [pid 3382190:tid 3382190] (EAI 2)Name or service not known: [client 144.76.19.72:39766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:53.202471 2026] [ssl:error] [pid 3382190:tid 3382190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:53.257044 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:39778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:53.257084 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:53.464700 2026] [access_compat:error] [pid 3390391:tid 3390391] [client 202.88.254.53:60804] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:58:54.161351 2026] [security2:error] [pid 3381715:tid 3381715] [client 1.13.158.23:54956] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amtKjiqEq_rKugwjUXLn0QAAAA4"]
[Thu Jul 30 13:58:56.344956 2026] [ssl:error] [pid 3387379:tid 3387379] (EAI 2)Name or service not known: [client 144.76.19.72:39780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:56.345003 2026] [ssl:error] [pid 3387379:tid 3387379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:56.402137 2026] [ssl:error] [pid 3384771:tid 3384771] (EAI 2)Name or service not known: [client 144.76.19.72:39796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:56.402169 2026] [ssl:error] [pid 3384771:tid 3384771] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:56.454882 2026] [security2:error] [pid 3370810:tid 3370810] [client 1.13.158.23:57708] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amtKkARPPJvsijLZzl24PQAAACE"]
[Thu Jul 30 13:58:58.511935 2026] [lsapi:warn] [pid 3389922:tid 3389922] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:58:59.501149 2026] [ssl:error] [pid 3390504:tid 3390504] (EAI 2)Name or service not known: [client 144.76.19.72:39804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:59.501182 2026] [ssl:error] [pid 3390504:tid 3390504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:58:59.554657 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:23168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:58:59.554691 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:00.080416 2026] [authz_core:error] [pid 3387380:tid 3387380] [client 66.249.66.33:51189] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:59:00.083086 2026] [authz_core:error] [pid 3387380:tid 3387380] [client 66.249.66.33:51189] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:59:00.790999 2026] [access_compat:error] [pid 3382120:tid 3382120] [client 45.158.164.139:42624] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 13:59:01.675613 2026] [core:error] [pid 3380038:tid 3380038] [client 66.249.66.71:52093] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:59:01.675654 2026] [core:error] [pid 3380038:tid 3380038] [client 66.249.66.71:52093] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 13:59:02.161497 2026] [ssl:error] [pid 3389658:tid 3389658] (70014)End of file found: [client 216.73.216.199:1734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:59:02.613902 2026] [ssl:error] [pid 3382190:tid 3382190] (EAI 2)Name or service not known: [client 144.76.19.72:23172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:02.613940 2026] [ssl:error] [pid 3382190:tid 3382190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:02.669863 2026] [ssl:error] [pid 3390328:tid 3390328] (EAI 2)Name or service not known: [client 144.76.19.72:23180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:02.669895 2026] [ssl:error] [pid 3390328:tid 3390328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:03.159478 2026] [access_compat:error] [pid 3390254:tid 3390254] [client 202.88.254.53:61338] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:05.584890 2026] [access_compat:error] [pid 3378272:tid 3378272] [client 89.45.53.3:47096] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:59:05.730712 2026] [ssl:error] [pid 3384296:tid 3384296] (EAI 2)Name or service not known: [client 144.76.19.72:23192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:05.730751 2026] [ssl:error] [pid 3384296:tid 3384296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:05.784992 2026] [ssl:error] [pid 3382190:tid 3382190] (EAI 2)Name or service not known: [client 144.76.19.72:23196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:05.785019 2026] [ssl:error] [pid 3382190:tid 3382190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:06.202168 2026] [access_compat:error] [pid 3384296:tid 3384296] [client 89.45.53.30:46000] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:59:06.341635 2026] [access_compat:error] [pid 3382878:tid 3382878] [client 2.189.5.142:49474] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:59:06.945420 2026] [access_compat:error] [pid 3382878:tid 3382878] [client 2.189.5.218:55454] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 13:59:09.075795 2026] [ssl:error] [pid 3389658:tid 3389658] (EAI 2)Name or service not known: [client 144.76.19.72:23206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:09.075835 2026] [ssl:error] [pid 3389658:tid 3389658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:09.130108 2026] [lsapi:warn] [pid 3390254:tid 3390254] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:59:09.133150 2026] [ssl:error] [pid 3389658:tid 3389658] (EAI 2)Name or service not known: [client 144.76.19.72:23210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:09.133173 2026] [ssl:error] [pid 3389658:tid 3389658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:09.370505 2026] [authz_core:error] [pid 3388988:tid 3388988] [client 74.248.20.32:19398] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/SimplePie/error_log
[Thu Jul 30 13:59:10.211717 2026] [core:crit] [pid 3390328:tid 3390328] (13)Permission denied: [client 52.167.144.221:46226] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 13:59:10.475821 2026] [authz_core:error] [pid 3387424:tid 3387424] [client 192.71.12.156:56505] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 13:59:10.475866 2026] [authz_core:error] [pid 3387424:tid 3387424] [client 192.71.12.156:56505] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 13:59:12.191132 2026] [ssl:error] [pid 3380038:tid 3380038] (EAI 2)Name or service not known: [client 144.76.19.72:29646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:12.191162 2026] [ssl:error] [pid 3380038:tid 3380038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:12.242664 2026] [ssl:error] [pid 3391636:tid 3391636] (EAI 2)Name or service not known: [client 144.76.19.72:29648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:12.242694 2026] [ssl:error] [pid 3391636:tid 3391636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:12.933869 2026] [access_compat:error] [pid 3391690:tid 3391690] [client 202.88.254.53:61873] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:13.953923 2026] [security2:error] [pid 3391739:tid 3391739] [client 185.191.171.10:25636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/jermaine-jones-vsim-pre-quiz-quizlet"] [unique_id "amtKocNzppgeO6H1p0jdDgAAAD4"]
[Thu Jul 30 13:59:15.303575 2026] [ssl:error] [pid 3382122:tid 3382122] (EAI 2)Name or service not known: [client 144.76.19.72:29658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:15.303606 2026] [ssl:error] [pid 3382122:tid 3382122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:15.359094 2026] [ssl:error] [pid 3391735:tid 3391735] (EAI 2)Name or service not known: [client 144.76.19.72:29668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:15.359129 2026] [ssl:error] [pid 3391735:tid 3391735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:16.969324 2026] [ssl:error] [pid 3391637:tid 3391637] (70014)End of file found: [client 216.73.216.199:45550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 13:59:18.417515 2026] [ssl:error] [pid 3390328:tid 3390328] (EAI 2)Name or service not known: [client 144.76.19.72:29684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:18.417543 2026] [ssl:error] [pid 3390328:tid 3390328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:18.471782 2026] [ssl:error] [pid 3389590:tid 3389590] (EAI 2)Name or service not known: [client 144.76.19.72:29686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:18.471825 2026] [ssl:error] [pid 3389590:tid 3389590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:19.443169 2026] [security2:error] [pid 3384166:tid 3384166] [client 101.47.18.8:23161] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKp3H86EhCN41sgkOZAwAAAB4"]
[Thu Jul 30 13:59:19.443215 2026] [security2:error] [pid 3384166:tid 3384166] [client 101.47.18.8:23161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKp3H86EhCN41sgkOZAwAAAB4"]
[Thu Jul 30 13:59:19.443483 2026] [security2:error] [pid 3384166:tid 3384166] [client 101.47.18.8:23161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKp3H86EhCN41sgkOZAwAAAB4"]
[Thu Jul 30 13:59:19.770139 2026] [lsapi:warn] [pid 3391735:tid 3391735] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:59:21.493876 2026] [security2:error] [pid 3380104:tid 3380104] [client 23.154.136.246:54986] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns-neso.com.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtKqd9SPtxEt13ltgjn7QAAACg"]
[Thu Jul 30 13:59:21.494170 2026] [security2:error] [pid 3380104:tid 3380104] [client 23.154.136.246:54986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-neso.com.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtKqd9SPtxEt13ltgjn7QAAACg"]
[Thu Jul 30 13:59:21.494400 2026] [security2:error] [pid 3380104:tid 3380104] [client 23.154.136.246:54986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns-neso.com.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtKqd9SPtxEt13ltgjn7QAAACg"]
[Thu Jul 30 13:59:21.529518 2026] [ssl:error] [pid 3388884:tid 3388884] (EAI 2)Name or service not known: [client 144.76.19.72:37222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:21.529555 2026] [ssl:error] [pid 3388884:tid 3388884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:21.581775 2026] [security2:error] [pid 3380104:tid 3380104] [client 23.154.136.246:54986] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns-neso.com.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtKqd9SPtxEt13ltgjn7gAAACg"]
[Thu Jul 30 13:59:21.582041 2026] [security2:error] [pid 3380104:tid 3380104] [client 23.154.136.246:54986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-neso.com.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtKqd9SPtxEt13ltgjn7gAAACg"]
[Thu Jul 30 13:59:21.582271 2026] [security2:error] [pid 3380104:tid 3380104] [client 23.154.136.246:54986] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns-neso.com.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtKqd9SPtxEt13ltgjn7gAAACg"]
[Thu Jul 30 13:59:21.582623 2026] [ssl:error] [pid 3368109:tid 3368109] (EAI 2)Name or service not known: [client 144.76.19.72:37228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:21.582644 2026] [ssl:error] [pid 3368109:tid 3368109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:21.609925 2026] [security2:error] [pid 3390392:tid 3390392] [client 186.122.108.63:52100] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKqadsfohzhBn0WV8ODgAAADo"]
[Thu Jul 30 13:59:21.609983 2026] [security2:error] [pid 3390392:tid 3390392] [client 186.122.108.63:52100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKqadsfohzhBn0WV8ODgAAADo"]
[Thu Jul 30 13:59:21.610289 2026] [security2:error] [pid 3390392:tid 3390392] [client 186.122.108.63:52100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKqadsfohzhBn0WV8ODgAAADo"]
[Thu Jul 30 13:59:23.514668 2026] [access_compat:error] [pid 3372506:tid 3372506] [client 202.88.254.53:62433] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:24.256672 2026] [security2:error] [pid 3389658:tid 3389658] [client 114.119.157.183:45283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~103,15/request_format~html"] [unique_id "amtKrPpX7iET6LZ0f5xL5wAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E103
[Thu Jul 30 13:59:24.657765 2026] [ssl:error] [pid 3390327:tid 3390327] (EAI 2)Name or service not known: [client 144.76.19.72:37230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:24.657812 2026] [ssl:error] [pid 3390327:tid 3390327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:24.716629 2026] [ssl:error] [pid 3390327:tid 3390327] (EAI 2)Name or service not known: [client 144.76.19.72:37242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:24.716652 2026] [ssl:error] [pid 3390327:tid 3390327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:26.384538 2026] [security2:error] [pid 3390328:tid 3390328] [client 114.119.157.183:45285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/cat_ids~103,15/request_format~html"] [unique_id "amtKrlaV_ZeR5M-oDAyUcAAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1576454400/request_format%7Ehtml/cat_ids%7E103
[Thu Jul 30 13:59:26.733752 2026] [security2:error] [pid 3388884:tid 3388884] [client 186.10.141.126:2798] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKrgnUn1ksv4RPvzv7hAAAAAo"]
[Thu Jul 30 13:59:26.733807 2026] [security2:error] [pid 3388884:tid 3388884] [client 186.10.141.126:2798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtKrgnUn1ksv4RPvzv7hAAAAAo"]
[Thu Jul 30 13:59:26.734091 2026] [security2:error] [pid 3388884:tid 3388884] [client 186.10.141.126:2798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtKrgnUn1ksv4RPvzv7hAAAAAo"]
[Thu Jul 30 13:59:26.772034 2026] [lsapi:warn] [pid 3381993:tid 3381993] [client 65.109.124.116:52481] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 13:59:26.772096 2026] [lsapi:warn] [pid 3381993:tid 3381993] [client 65.109.124.116:52481] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 13:59:27.775018 2026] [ssl:error] [pid 3391735:tid 3391735] (EAI 2)Name or service not known: [client 144.76.19.72:37244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:27.775051 2026] [ssl:error] [pid 3391735:tid 3391735] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:27.831667 2026] [ssl:error] [pid 3374605:tid 3374605] (EAI 2)Name or service not known: [client 144.76.19.72:37248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:27.831692 2026] [ssl:error] [pid 3374605:tid 3374605] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:29.718550 2026] [access_compat:error] [pid 3371171:tid 3371171] [client 192.175.111.246:11613] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 13:59:30.417006 2026] [lsapi:warn] [pid 3391735:tid 3391735] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:59:30.891617 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:60192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:30.891655 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:30.945291 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:60208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:30.945341 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:34.042552 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:60210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:34.042583 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:34.094599 2026] [ssl:error] [pid 3389657:tid 3389657] (EAI 2)Name or service not known: [client 144.76.19.72:60226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:34.094641 2026] [ssl:error] [pid 3389657:tid 3389657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:34.525474 2026] [access_compat:error] [pid 3389657:tid 3389657] [client 202.88.254.53:62965] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:37.168234 2026] [ssl:error] [pid 3371171:tid 3371171] (EAI 2)Name or service not known: [client 144.76.19.72:60236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:37.168281 2026] [ssl:error] [pid 3371171:tid 3371171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:37.225440 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:60240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:37.225483 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:38.948559 2026] [authz_core:error] [pid 3387426:tid 3387426] [client 172.202.44.182:23439] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-admin/includes/error_log
[Thu Jul 30 13:59:40.284028 2026] [ssl:error] [pid 3378888:tid 3378888] (EAI 2)Name or service not known: [client 144.76.19.72:24034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:40.284054 2026] [ssl:error] [pid 3378888:tid 3378888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:40.335289 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:24038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:40.335314 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:40.609962 2026] [access_compat:error] [pid 3389658:tid 3389658] [client 202.88.254.53:63187] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:41.072950 2026] [lsapi:warn] [pid 3368109:tid 3368109] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:59:41.981772 2026] [authz_core:error] [pid 3382878:tid 3382878] [client 66.249.66.33:59696] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 13:59:41.984428 2026] [authz_core:error] [pid 3382878:tid 3382878] [client 66.249.66.33:59696] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 13:59:43.392609 2026] [ssl:error] [pid 3368109:tid 3368109] (EAI 2)Name or service not known: [client 144.76.19.72:24048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:43.392638 2026] [ssl:error] [pid 3368109:tid 3368109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:43.449286 2026] [ssl:error] [pid 3389658:tid 3389658] (EAI 2)Name or service not known: [client 144.76.19.72:24060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:43.449323 2026] [ssl:error] [pid 3389658:tid 3389658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:44.494142 2026] [security2:error] [pid 3387424:tid 3387424] [client 185.191.171.5:64004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,328.0/prev_next,next.html"] [unique_id "amtKwAsdeSh6s5jaiq-QUQAAACo"]
[Thu Jul 30 13:59:46.207300 2026] [access_compat:error] [pid 3393326:tid 3393326] [client 202.88.254.53:63506] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:46.504287 2026] [ssl:error] [pid 3392897:tid 3392897] (EAI 2)Name or service not known: [client 144.76.19.72:24068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:46.504326 2026] [ssl:error] [pid 3392897:tid 3392897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:46.557780 2026] [ssl:error] [pid 3387424:tid 3387424] (EAI 2)Name or service not known: [client 144.76.19.72:24082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:46.557815 2026] [ssl:error] [pid 3387424:tid 3387424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:46.745990 2026] [access_compat:error] [pid 3387424:tid 3387424] [client 45.158.164.139:45696] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 13:59:49.612272 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:54274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:49.612309 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:49.670557 2026] [ssl:error] [pid 3382878:tid 3382878] (EAI 2)Name or service not known: [client 144.76.19.72:54284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:49.670593 2026] [ssl:error] [pid 3382878:tid 3382878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:50.277710 2026] [core:error] [pid 3371173:tid 3371173] [client 62.60.130.228:49380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.277735 2026] [core:error] [pid 3371173:tid 3371173] [client 62.60.130.228:49380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.463266 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:59460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.463293 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:59460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.612556 2026] [core:error] [pid 3389921:tid 3389921] [client 62.60.130.228:65288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.612585 2026] [core:error] [pid 3389921:tid 3389921] [client 62.60.130.228:65288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.792129 2026] [core:error] [pid 3381993:tid 3381993] [client 62.60.130.228:65470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.792151 2026] [core:error] [pid 3381993:tid 3381993] [client 62.60.130.228:65470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.987466 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:49296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:50.987487 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:49296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.237486 2026] [core:error] [pid 3371171:tid 3371171] [client 62.60.130.228:52216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.237513 2026] [core:error] [pid 3371171:tid 3371171] [client 62.60.130.228:52216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.354450 2026] [core:error] [pid 3389922:tid 3389922] [client 62.60.130.228:52330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.354480 2026] [core:error] [pid 3389922:tid 3389922] [client 62.60.130.228:52330] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.530664 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:51730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.530692 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:51730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.695764 2026] [core:error] [pid 3392897:tid 3392897] [client 62.60.130.228:51875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.695791 2026] [core:error] [pid 3392897:tid 3392897] [client 62.60.130.228:51875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.719120 2026] [lsapi:warn] [pid 3382122:tid 3382122] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 13:59:51.856483 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:52009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:51.856505 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:52009] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.038466 2026] [core:error] [pid 3387330:tid 3387330] [client 62.60.130.228:52134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.038493 2026] [core:error] [pid 3387330:tid 3387330] [client 62.60.130.228:52134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.267543 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:52339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.267572 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:52339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.489223 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:49643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.489247 2026] [core:error] [pid 3378272:tid 3378272] [client 62.60.130.228:49643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.660678 2026] [core:error] [pid 3372440:tid 3372440] [client 62.60.130.228:49801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.660703 2026] [core:error] [pid 3372440:tid 3372440] [client 62.60.130.228:49801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 13:59:52.726375 2026] [ssl:error] [pid 3378888:tid 3378888] (EAI 2)Name or service not known: [client 144.76.19.72:54290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:52.726399 2026] [ssl:error] [pid 3378888:tid 3378888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:52.777873 2026] [ssl:error] [pid 3391733:tid 3391733] (EAI 2)Name or service not known: [client 144.76.19.72:54304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:52.777921 2026] [ssl:error] [pid 3391733:tid 3391733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:52.888663 2026] [access_compat:error] [pid 3382193:tid 3382193] [client 202.88.254.53:63751] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:53.295560 2026] [security2:error] [pid 3372440:tid 3372440] [client 43.153.7.191:55416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "holistic-clear.co.uk"] [uri "/"] [unique_id "amtKyeffFQ6gdyP2sLwGzQAAAAI"]
[Thu Jul 30 13:59:54.653615 2026] [security2:error] [pid 3391733:tid 3391733] [client 114.119.137.67:38139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "localhero.org.uk"] [uri "/robots.txt"] [unique_id "amtKyt01uh4wXQ1nZiZHFgAAACk"], referer: https://localhero.org.uk/robots.txt
[Thu Jul 30 13:59:54.685771 2026] [security2:error] [pid 3393326:tid 3393326] [client 43.153.7.191:60930] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtKyvSFwiP-W9v8px8EvQAAAB0"], referer: http://holistic-clear.co.uk
[Thu Jul 30 13:59:54.687660 2026] [authz_core:error] [pid 3393326:tid 3393326] [client 43.153.7.191:60930] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://holistic-clear.co.uk
[Thu Jul 30 13:59:54.690310 2026] [authz_core:error] [pid 3393326:tid 3393326] [client 43.153.7.191:60930] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://holistic-clear.co.uk
[Thu Jul 30 13:59:55.500768 2026] [cgi:error] [pid 3384092:tid 3384092] [client 147.161.144.170:53946] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 13:59:55.833585 2026] [ssl:error] [pid 3391689:tid 3391689] (EAI 2)Name or service not known: [client 144.76.19.72:54310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:55.833620 2026] [ssl:error] [pid 3391689:tid 3391689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:55.892685 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:54316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:55.892716 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:57.770375 2026] [security2:error] [pid 3391689:tid 3391689] [client 47.128.53.244:38436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "plastic-sheeting.org"] [uri "/robots.txt"] [unique_id "amtKzRSSrs19c5E0T-hzxQAAABU"]
[Thu Jul 30 13:59:58.277623 2026] [access_compat:error] [pid 3391735:tid 3391735] [client 202.88.254.53:64053] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 13:59:58.969158 2026] [ssl:error] [pid 3391740:tid 3391740] (EAI 2)Name or service not known: [client 144.76.19.72:54332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:58.969205 2026] [ssl:error] [pid 3391740:tid 3391740] AH01941: stapling_renew_response: responder error
[Thu Jul 30 13:59:59.022530 2026] [ssl:error] [pid 3380038:tid 3380038] (EAI 2)Name or service not known: [client 144.76.19.72:54342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 13:59:59.022562 2026] [ssl:error] [pid 3380038:tid 3380038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:01.544588 2026] [security2:error] [pid 3387330:tid 3387330] [client 114.119.136.164:52149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amtK0aX72v2WYjYFjzZ6YAAAABc"], referer: http://first-grade.co.uk/robots.txt
[Thu Jul 30 14:00:01.991957 2026] [ssl:error] [pid 3388988:tid 3388988] (70014)End of file found: [client 216.73.216.199:62840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:00:02.078515 2026] [ssl:error] [pid 3387424:tid 3387424] (EAI 2)Name or service not known: [client 144.76.19.72:30696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:02.078543 2026] [ssl:error] [pid 3387424:tid 3387424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:02.133604 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:30706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:02.133635 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:02.393111 2026] [lsapi:warn] [pid 3370770:tid 3370770] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:00:02.481431 2026] [security2:error] [pid 3380038:tid 3380038] [client 114.119.136.164:36719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/403.shtml"] [unique_id "amtK0uNuzvoTyXJUwwIChgAAACA"], referer: http://first-grade.co.uk/robots.txt
[Thu Jul 30 14:00:04.572981 2026] [access_compat:error] [pid 3372506:tid 3372506] [client 202.88.254.53:64255] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:00:05.203542 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:30712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:05.203577 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:05.269796 2026] [ssl:error] [pid 3391692:tid 3391692] (EAI 2)Name or service not known: [client 144.76.19.72:30718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:05.269829 2026] [ssl:error] [pid 3391692:tid 3391692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:06.396921 2026] [access_compat:error] [pid 3370770:tid 3370770] [client 45.158.164.139:39794] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:00:08.363059 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:30734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:08.363105 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:08.421617 2026] [ssl:error] [pid 3378888:tid 3378888] (EAI 2)Name or service not known: [client 144.76.19.72:30740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:08.421644 2026] [ssl:error] [pid 3378888:tid 3378888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:11.068752 2026] [authz_core:error] [pid 3387426:tid 3387426] [client 172.202.44.182:23439] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:00:11.547290 2026] [ssl:error] [pid 3391732:tid 3391732] (EAI 2)Name or service not known: [client 144.76.19.72:38972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:11.547323 2026] [ssl:error] [pid 3391732:tid 3391732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:11.565975 2026] [access_compat:error] [pid 3389921:tid 3389921] [client 202.88.254.53:64624] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:00:11.605282 2026] [ssl:error] [pid 3372506:tid 3372506] (EAI 2)Name or service not known: [client 144.76.19.72:38988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:11.605309 2026] [ssl:error] [pid 3372506:tid 3372506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:13.092032 2026] [lsapi:warn] [pid 3387424:tid 3387424] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:00:13.146423 2026] [security2:error] [pid 3378888:tid 3378888] [client 177.117.222.35:38726] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtK3YHOVSVPgNr9Cz-cLQAAABY"]
[Thu Jul 30 14:00:13.146487 2026] [security2:error] [pid 3378888:tid 3378888] [client 177.117.222.35:38726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtK3YHOVSVPgNr9Cz-cLQAAABY"]
[Thu Jul 30 14:00:13.146756 2026] [security2:error] [pid 3378888:tid 3378888] [client 177.117.222.35:38726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtK3YHOVSVPgNr9Cz-cLQAAABY"]
[Thu Jul 30 14:00:14.376230 2026] [security2:error] [pid 3388988:tid 3388988] [client 185.191.171.19:35722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/kelly-piper-cause-of-death"] [unique_id "amtK3kluSw4an1-waCrwzQAAAAk"]
[Thu Jul 30 14:00:14.462642 2026] [security2:error] [pid 3388988:tid 3388988] [client 49.233.45.47:41636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtK3kluSw4an1-waCrwzgAAAAk"], referer: http://www.banskoexpress.net
[Thu Jul 30 14:00:14.684560 2026] [ssl:error] [pid 3388988:tid 3388988] (EAI 2)Name or service not known: [client 144.76.19.72:38992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:14.684594 2026] [ssl:error] [pid 3388988:tid 3388988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:14.762890 2026] [ssl:error] [pid 3394809:tid 3394809] (EAI 2)Name or service not known: [client 144.76.19.72:38996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:14.762925 2026] [ssl:error] [pid 3394809:tid 3394809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:14.971843 2026] [lsapi:warn] [pid 3384771:tid 3384771] [client 145.14.10.40:55830] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:00:14.971887 2026] [lsapi:warn] [pid 3384771:tid 3384771] [client 145.14.10.40:55830] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:00:15.122740 2026] [security2:error] [pid 3394810:tid 3394810] [client 85.208.96.197:22090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9387.0.html"] [unique_id "amtK3yxsX5eYJ6tq9D2qMwAAAA4"]
[Thu Jul 30 14:00:15.294176 2026] [security2:error] [pid 3386775:tid 3386775] [client 101.47.24.26:50981] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtK39G6CuEZHFTsq5sU5wAAACM"]
[Thu Jul 30 14:00:15.294220 2026] [security2:error] [pid 3386775:tid 3386775] [client 101.47.24.26:50981] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtK39G6CuEZHFTsq5sU5wAAACM"]
[Thu Jul 30 14:00:15.294482 2026] [security2:error] [pid 3386775:tid 3386775] [client 101.47.24.26:50981] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtK39G6CuEZHFTsq5sU5wAAACM"]
[Thu Jul 30 14:00:16.986785 2026] [security2:error] [pid 3391732:tid 3391732] [client 216.73.216.199:28586] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/plesk-lmlib.conf"] [unique_id "amtK4JuZXVEAHb_PcXYiDAAAACU"]
[Thu Jul 30 14:00:16.987023 2026] [security2:error] [pid 3391732:tid 3391732] [client 216.73.216.199:28586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/plesk-lmlib.conf"] [unique_id "amtK4JuZXVEAHb_PcXYiDAAAACU"]
[Thu Jul 30 14:00:16.987263 2026] [security2:error] [pid 3391732:tid 3391732] [client 216.73.216.199:28586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/plesk-lmlib.conf"] [unique_id "amtK4JuZXVEAHb_PcXYiDAAAACU"]
[Thu Jul 30 14:00:17.530704 2026] [security2:error] [pid 3389921:tid 3389921] [client 101.47.24.26:13533] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtK4TW-x4QBeXeWhTTZ8gAAABo"]
[Thu Jul 30 14:00:17.530762 2026] [security2:error] [pid 3389921:tid 3389921] [client 101.47.24.26:13533] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtK4TW-x4QBeXeWhTTZ8gAAABo"]
[Thu Jul 30 14:00:17.531026 2026] [security2:error] [pid 3389921:tid 3389921] [client 101.47.24.26:13533] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtK4TW-x4QBeXeWhTTZ8gAAABo"]
[Thu Jul 30 14:00:17.821136 2026] [ssl:error] [pid 3371173:tid 3371173] (EAI 2)Name or service not known: [client 144.76.19.72:38998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:17.821164 2026] [ssl:error] [pid 3371173:tid 3371173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:17.879632 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:39012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:17.879663 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:20.936585 2026] [ssl:error] [pid 3368113:tid 3368113] (EAI 2)Name or service not known: [client 144.76.19.72:52234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:20.936615 2026] [ssl:error] [pid 3368113:tid 3368113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:20.991652 2026] [ssl:error] [pid 3394959:tid 3394959] (EAI 2)Name or service not known: [client 144.76.19.72:52248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:20.991686 2026] [ssl:error] [pid 3394959:tid 3394959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:23.761552 2026] [lsapi:warn] [pid 3394810:tid 3394810] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:00:24.045970 2026] [ssl:error] [pid 3394959:tid 3394959] (EAI 2)Name or service not known: [client 144.76.19.72:52264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:24.045996 2026] [ssl:error] [pid 3394959:tid 3394959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:24.100473 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:52266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:24.100521 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:25.977662 2026] [access_compat:error] [pid 3386775:tid 3386775] [client 202.88.254.53:65169] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:00:26.988866 2026] [ssl:error] [pid 3391732:tid 3391732] (70014)End of file found: [client 216.73.216.199:28586] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:00:27.141245 2026] [access_compat:error] [pid 3394810:tid 3394810] [client 202.88.254.53:65249] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:00:27.156863 2026] [ssl:error] [pid 3390328:tid 3390328] (EAI 2)Name or service not known: [client 144.76.19.72:52282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:27.156891 2026] [ssl:error] [pid 3390328:tid 3390328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:27.211297 2026] [ssl:error] [pid 3394869:tid 3394869] (EAI 2)Name or service not known: [client 144.76.19.72:52296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:27.211335 2026] [ssl:error] [pid 3394869:tid 3394869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:30.294154 2026] [ssl:error] [pid 3387330:tid 3387330] (EAI 2)Name or service not known: [client 144.76.19.72:18822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:30.294262 2026] [ssl:error] [pid 3387330:tid 3387330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:30.348772 2026] [ssl:error] [pid 3394869:tid 3394869] (EAI 2)Name or service not known: [client 144.76.19.72:18834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:30.348807 2026] [ssl:error] [pid 3394869:tid 3394869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:31.650121 2026] [authz_core:error] [pid 3384092:tid 3384092] [client 66.249.66.35:62892] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:00:31.652784 2026] [authz_core:error] [pid 3384092:tid 3384092] [client 66.249.66.35:62892] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:00:33.403643 2026] [ssl:error] [pid 3390327:tid 3390327] (EAI 2)Name or service not known: [client 144.76.19.72:18842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:33.403674 2026] [ssl:error] [pid 3390327:tid 3390327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:33.458543 2026] [ssl:error] [pid 3370770:tid 3370770] (EAI 2)Name or service not known: [client 144.76.19.72:18846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:33.458573 2026] [ssl:error] [pid 3370770:tid 3370770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:34.459271 2026] [lsapi:warn] [pid 3394751:tid 3394751] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:00:36.112049 2026] [security2:error] [pid 3394867:tid 3394867] [client 94.154.43.184:43816] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.kinesiologymerseyside.kinesiologylondon.co.uk"] [uri "/.env"] [unique_id "amtK9HaygG7JviKTvGsc6wAAABE"]
[Thu Jul 30 14:00:36.112265 2026] [security2:error] [pid 3394867:tid 3394867] [client 94.154.43.184:43816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.kinesiologymerseyside.kinesiologylondon.co.uk"] [uri "/.env"] [unique_id "amtK9HaygG7JviKTvGsc6wAAABE"]
[Thu Jul 30 14:00:36.112474 2026] [security2:error] [pid 3394867:tid 3394867] [client 94.154.43.184:43816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.kinesiologymerseyside.kinesiologylondon.co.uk"] [uri "/403.shtml"] [unique_id "amtK9HaygG7JviKTvGsc6wAAABE"]
[Thu Jul 30 14:00:36.515532 2026] [ssl:error] [pid 3394751:tid 3394751] (EAI 2)Name or service not known: [client 144.76.19.72:18852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:36.515571 2026] [ssl:error] [pid 3394751:tid 3394751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:36.576539 2026] [ssl:error] [pid 3370770:tid 3370770] (EAI 2)Name or service not known: [client 144.76.19.72:18862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:36.576572 2026] [ssl:error] [pid 3370770:tid 3370770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:37.181844 2026] [security2:error] [pid 3374665:tid 3374665] [client 114.119.150.227:60065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mjs-services.com"] [uri "/robots.txt"] [unique_id "amtK9bCc00EAGM02PVkKrgAAABs"], referer: http://www.mjs-services.com/robots.txt
[Thu Jul 30 14:00:37.504203 2026] [security2:error] [pid 3384771:tid 3384771] [client 185.191.171.14:32214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5262.0/prev_next,prev.html"] [unique_id "amtK9c1X4jPq5O_m9-IkZwAAAAM"]
[Thu Jul 30 14:00:39.119651 2026] [security2:error] [pid 3393326:tid 3393326] [client 114.119.150.227:60067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mjs-services.com"] [uri "/robots.txt"] [unique_id "amtK9_SFwiP-W9v8px8EzgAAAB0"], referer: http://www.mjs-services.com/robots.txt
[Thu Jul 30 14:00:39.664304 2026] [ssl:error] [pid 3390327:tid 3390327] (EAI 2)Name or service not known: [client 144.76.19.72:47598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:39.664335 2026] [ssl:error] [pid 3390327:tid 3390327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:39.721708 2026] [ssl:error] [pid 3390327:tid 3390327] (EAI 2)Name or service not known: [client 144.76.19.72:47602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:39.721732 2026] [ssl:error] [pid 3390327:tid 3390327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:41.345487 2026] [access_compat:error] [pid 3393326:tid 3393326] [client 202.88.254.53:49328] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:00:42.778528 2026] [ssl:error] [pid 3368109:tid 3368109] (EAI 2)Name or service not known: [client 144.76.19.72:47610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:42.778571 2026] [ssl:error] [pid 3368109:tid 3368109] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:42.830260 2026] [ssl:error] [pid 3368113:tid 3368113] (EAI 2)Name or service not known: [client 144.76.19.72:47612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:42.830287 2026] [ssl:error] [pid 3368113:tid 3368113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:45.198519 2026] [lsapi:warn] [pid 3382193:tid 3382193] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:00:45.886411 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:47616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:45.886450 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:45.946570 2026] [ssl:error] [pid 3394809:tid 3394809] (EAI 2)Name or service not known: [client 144.76.19.72:47628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:45.946602 2026] [ssl:error] [pid 3394809:tid 3394809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:47.337175 2026] [security2:error] [pid 3387426:tid 3387426] [client 47.128.56.63:57332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "amtK_ylFJcltBZ60nCYfAgAAADM"]
[Thu Jul 30 14:00:47.359508 2026] [access_compat:error] [pid 3388988:tid 3388988] [client 202.88.254.53:49535] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:00:47.609350 2026] [security2:error] [pid 3384092:tid 3384092] [client 114.119.157.183:61791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575936000/request_format~html/cat_ids~102"] [unique_id "amtK_z9zJZaLedVTd5F8NwAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575936000/request_format~html
[Thu Jul 30 14:00:47.924287 2026] [access_compat:error] [pid 3395813:tid 3395813] [client 45.158.164.139:50246] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:00:48.722558 2026] [security2:error] [pid 3393326:tid 3393326] [client 114.119.157.183:61805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575936000/request_format~html/cat_ids~102"] [unique_id "amtLAPSFwiP-W9v8px8E0wAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575936000/request_format~html
[Thu Jul 30 14:00:49.002289 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:47638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:49.002321 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:49.058089 2026] [ssl:error] [pid 3378272:tid 3378272] (EAI 2)Name or service not known: [client 144.76.19.72:47642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:49.058121 2026] [ssl:error] [pid 3378272:tid 3378272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:49.200567 2026] [security2:error] [pid 3395903:tid 3395903] [client 47.128.56.63:59076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "amtLATvxHuwR8-RNgr9vxwAAACI"]
[Thu Jul 30 14:00:51.995706 2026] [ssl:error] [pid 3391732:tid 3391732] (70014)End of file found: [client 216.73.216.199:2050] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:00:52.112197 2026] [ssl:error] [pid 3390328:tid 3390328] (EAI 2)Name or service not known: [client 144.76.19.72:36980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:52.112224 2026] [ssl:error] [pid 3390328:tid 3390328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:52.167883 2026] [ssl:error] [pid 3371171:tid 3371171] (EAI 2)Name or service not known: [client 144.76.19.72:36994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:52.167909 2026] [ssl:error] [pid 3371171:tid 3371171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:55.226545 2026] [ssl:error] [pid 3380104:tid 3380104] (EAI 2)Name or service not known: [client 144.76.19.72:36998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:55.226577 2026] [ssl:error] [pid 3380104:tid 3380104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:55.279593 2026] [ssl:error] [pid 3390392:tid 3390392] (EAI 2)Name or service not known: [client 144.76.19.72:37004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:55.279636 2026] [ssl:error] [pid 3390392:tid 3390392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:55.808846 2026] [lsapi:warn] [pid 3390392:tid 3390392] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:00:57.098886 2026] [access_compat:error] [pid 3396691:tid 3396691] [client 202.88.254.53:49887] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:00:58.109229 2026] [security2:error] [pid 3389657:tid 3389657] [client 43.153.71.132:39188] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.fast-hosting.co.uk"] [uri "/"] [unique_id "amtLCkFhoSusrk4URBKYcgAAABI"]
[Thu Jul 30 14:00:58.333442 2026] [ssl:error] [pid 3388884:tid 3388884] (EAI 2)Name or service not known: [client 144.76.19.72:37018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:58.333479 2026] [ssl:error] [pid 3388884:tid 3388884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:00:58.387612 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:37034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:00:58.387644 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:01.446179 2026] [ssl:error] [pid 3395860:tid 3395860] (EAI 2)Name or service not known: [client 144.76.19.72:47022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:01.446225 2026] [ssl:error] [pid 3395860:tid 3395860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:01.502415 2026] [ssl:error] [pid 3395813:tid 3395813] (EAI 2)Name or service not known: [client 144.76.19.72:47034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:01.502443 2026] [ssl:error] [pid 3395813:tid 3395813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:03.139194 2026] [access_compat:error] [pid 3395860:tid 3395860] [client 202.88.254.53:50099] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:01:04.576535 2026] [ssl:error] [pid 3396691:tid 3396691] (EAI 2)Name or service not known: [client 144.76.19.72:47048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:04.576575 2026] [ssl:error] [pid 3396691:tid 3396691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:04.631297 2026] [ssl:error] [pid 3382120:tid 3382120] (EAI 2)Name or service not known: [client 144.76.19.72:47052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:04.631327 2026] [ssl:error] [pid 3382120:tid 3382120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:06.478918 2026] [lsapi:warn] [pid 3395566:tid 3395566] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:01:07.686090 2026] [ssl:error] [pid 3390392:tid 3390392] (EAI 2)Name or service not known: [client 144.76.19.72:47060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:07.686118 2026] [ssl:error] [pid 3390392:tid 3390392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:07.738438 2026] [ssl:error] [pid 3396745:tid 3396745] (EAI 2)Name or service not known: [client 144.76.19.72:47074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:07.738481 2026] [ssl:error] [pid 3396745:tid 3396745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:08.898706 2026] [access_compat:error] [pid 3368113:tid 3368113] [client 45.158.164.139:53292] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:01:10.796568 2026] [ssl:error] [pid 3394269:tid 3394269] (EAI 2)Name or service not known: [client 144.76.19.72:47830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:10.796600 2026] [ssl:error] [pid 3394269:tid 3394269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:10.851075 2026] [ssl:error] [pid 3385748:tid 3385748] (EAI 2)Name or service not known: [client 144.76.19.72:47846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:10.851110 2026] [ssl:error] [pid 3385748:tid 3385748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:11.999770 2026] [ssl:error] [pid 3387424:tid 3387424] (70014)End of file found: [client 216.73.216.199:28604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:01:13.031437 2026] [access_compat:error] [pid 3391740:tid 3391740] [client 202.88.254.53:50455] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:01:13.907434 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:47862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:13.907485 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:13.961162 2026] [ssl:error] [pid 3396745:tid 3396745] (EAI 2)Name or service not known: [client 144.76.19.72:47868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:13.961207 2026] [ssl:error] [pid 3396745:tid 3396745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:14.112541 2026] [authz_core:error] [pid 3395904:tid 3395904] [client 20.104.16.169:51268] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/l10n/error_log
[Thu Jul 30 14:01:14.858757 2026] [security2:error] [pid 3391736:tid 3391736] [client 185.191.171.3:43442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/are-davis-derringer-barrels-interchangeable"] [unique_id "amtLGsUFa8wWY9flO8znpQAAADk"]
[Thu Jul 30 14:01:15.171709 2026] [access_compat:error] [pid 3380104:tid 3380104] [client 20.215.191.139:37938] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.tmb
[Thu Jul 30 14:01:15.205283 2026] [access_compat:error] [pid 3380104:tid 3380104] [client 20.215.191.139:37938] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.tmb
[Thu Jul 30 14:01:15.238727 2026] [access_compat:error] [pid 3380104:tid 3380104] [client 20.215.191.139:37938] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.tmb
[Thu Jul 30 14:01:15.302694 2026] [access_compat:error] [pid 3380104:tid 3380104] [client 20.215.191.139:37938] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.tmb
[Thu Jul 30 14:01:15.337433 2026] [access_compat:error] [pid 3380104:tid 3380104] [client 20.215.191.139:37938] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.tmb
[Thu Jul 30 14:01:15.370772 2026] [access_compat:error] [pid 3380104:tid 3380104] [client 20.215.191.139:37938] AH01797: client denied by server configuration: /home/winterb/public_html/drupal1/.well-known/.well-known
[Thu Jul 30 14:01:17.016095 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:47872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:17.016124 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:17.103478 2026] [ssl:error] [pid 3382120:tid 3382120] (EAI 2)Name or service not known: [client 144.76.19.72:47882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:17.103503 2026] [ssl:error] [pid 3382120:tid 3382120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:17.127119 2026] [lsapi:warn] [pid 3384092:tid 3384092] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:01:17.407019 2026] [ssl:error] [pid 3396744:tid 3396744] (70014)End of file found: [client 216.73.216.199:61073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:01:19.116635 2026] [access_compat:error] [pid 3384166:tid 3384166] [client 202.88.254.53:50682] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:01:20.198808 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:56814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:20.198842 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:20.254279 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:56830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:20.254308 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:20.808669 2026] [ssl:error] [pid 3384092:tid 3384092] (70014)End of file found: [client 216.73.216.199:39426] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:01:22.769854 2026] [authz_core:error] [pid 3389922:tid 3389922] [client 66.249.66.33:41296] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:01:22.772693 2026] [authz_core:error] [pid 3389922:tid 3389922] [client 66.249.66.33:41296] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:01:23.352516 2026] [ssl:error] [pid 3391636:tid 3391636] (EAI 2)Name or service not known: [client 144.76.19.72:56842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:23.352549 2026] [ssl:error] [pid 3391636:tid 3391636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:23.410498 2026] [ssl:error] [pid 3386417:tid 3386417] (EAI 2)Name or service not known: [client 144.76.19.72:56854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:23.410524 2026] [ssl:error] [pid 3386417:tid 3386417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:23.923622 2026] [security2:error] [pid 3380038:tid 3380038] [client 210.6.212.178:43598] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLI-NuzvoTyXJUwwICngAAACA"]
[Thu Jul 30 14:01:23.923668 2026] [security2:error] [pid 3380038:tid 3380038] [client 210.6.212.178:43598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLI-NuzvoTyXJUwwICngAAACA"]
[Thu Jul 30 14:01:23.923938 2026] [security2:error] [pid 3380038:tid 3380038] [client 210.6.212.178:43598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLI-NuzvoTyXJUwwICngAAACA"]
[Thu Jul 30 14:01:25.926751 2026] [security2:error] [pid 3371171:tid 3371171] [client 8.209.208.249:20647] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLJbjSa_6d1LMVapbfSgAAAC0"]
[Thu Jul 30 14:01:25.926816 2026] [security2:error] [pid 3371171:tid 3371171] [client 8.209.208.249:20647] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLJbjSa_6d1LMVapbfSgAAAC0"]
[Thu Jul 30 14:01:25.927099 2026] [security2:error] [pid 3371171:tid 3371171] [client 8.209.208.249:20647] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLJbjSa_6d1LMVapbfSgAAAC0"]
[Thu Jul 30 14:01:26.465480 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:56870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:26.465524 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:26.518543 2026] [ssl:error] [pid 3391636:tid 3391636] (EAI 2)Name or service not known: [client 144.76.19.72:56882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:26.518574 2026] [ssl:error] [pid 3391636:tid 3391636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:27.635731 2026] [access_compat:error] [pid 3382878:tid 3382878] [client 202.88.254.53:51028] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:01:27.781256 2026] [lsapi:warn] [pid 3394870:tid 3394870] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:01:29.570607 2026] [ssl:error] [pid 3394870:tid 3394870] (EAI 2)Name or service not known: [client 144.76.19.72:29312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:29.570638 2026] [ssl:error] [pid 3394870:tid 3394870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:29.626659 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:29322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:29.626692 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:30.775628 2026] [security2:error] [pid 3395566:tid 3395566] [client 8.209.208.249:52725] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLKhMEHzSNEp3H_tudFgAAAAs"]
[Thu Jul 30 14:01:30.775680 2026] [security2:error] [pid 3395566:tid 3395566] [client 8.209.208.249:52725] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLKhMEHzSNEp3H_tudFgAAAAs"]
[Thu Jul 30 14:01:30.775959 2026] [security2:error] [pid 3395566:tid 3395566] [client 8.209.208.249:52725] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLKhMEHzSNEp3H_tudFgAAAAs"]
[Thu Jul 30 14:01:31.134026 2026] [ssl:error] [pid 3396691:tid 3396691] (70014)End of file found: [client 216.73.216.199:25326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:01:31.470336 2026] [authz_core:error] [pid 3394869:tid 3394869] [client 66.249.66.33:62677] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:01:31.472982 2026] [authz_core:error] [pid 3394869:tid 3394869] [client 66.249.66.33:62677] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:01:32.681576 2026] [ssl:error] [pid 3396744:tid 3396744] (EAI 2)Name or service not known: [client 144.76.19.72:29328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:32.681610 2026] [ssl:error] [pid 3396744:tid 3396744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:32.739270 2026] [ssl:error] [pid 3392897:tid 3392897] (EAI 2)Name or service not known: [client 144.76.19.72:29330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:32.739303 2026] [ssl:error] [pid 3392897:tid 3392897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:35.803514 2026] [ssl:error] [pid 3380104:tid 3380104] (EAI 2)Name or service not known: [client 144.76.19.72:29338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:35.803550 2026] [ssl:error] [pid 3380104:tid 3380104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:35.857998 2026] [ssl:error] [pid 3397364:tid 3397364] (EAI 2)Name or service not known: [client 144.76.19.72:29342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:35.858034 2026] [ssl:error] [pid 3397364:tid 3397364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:38.429768 2026] [lsapi:warn] [pid 3380038:tid 3380038] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:01:38.933178 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:29346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:38.933216 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:38.995991 2026] [ssl:error] [pid 3390328:tid 3390328] (EAI 2)Name or service not known: [client 144.76.19.72:29356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:38.996021 2026] [ssl:error] [pid 3390328:tid 3390328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:41.318974 2026] [ssl:error] [pid 3386417:tid 3386417] (70014)End of file found: [client 216.73.216.199:2440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:01:41.551621 2026] [access_compat:error] [pid 3371171:tid 3371171] [client 202.88.254.53:51601] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:01:42.080543 2026] [ssl:error] [pid 3389845:tid 3389845] (EAI 2)Name or service not known: [client 144.76.19.72:44370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:42.080575 2026] [ssl:error] [pid 3389845:tid 3389845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:42.135337 2026] [ssl:error] [pid 3397364:tid 3397364] (EAI 2)Name or service not known: [client 144.76.19.72:44384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:42.135367 2026] [ssl:error] [pid 3397364:tid 3397364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:45.188993 2026] [ssl:error] [pid 3394809:tid 3394809] (EAI 2)Name or service not known: [client 144.76.19.72:44398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:45.189030 2026] [ssl:error] [pid 3394809:tid 3394809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:45.240139 2026] [ssl:error] [pid 3397364:tid 3397364] (EAI 2)Name or service not known: [client 144.76.19.72:44402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:45.240164 2026] [ssl:error] [pid 3397364:tid 3397364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:46.483644 2026] [security2:error] [pid 3391736:tid 3391736] [client 170.106.11.141:41036] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amtLOsUFa8wWY9flO8zoWwAAADk"]
[Thu Jul 30 14:01:47.618030 2026] [access_compat:error] [pid 3398121:tid 3398121] [client 202.88.254.53:51854] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:01:47.791434 2026] [security2:error] [pid 3386417:tid 3386417] [client 170.106.11.141:39262] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amtLO7hYOz3RmNtLVYjgfgAAABk"], referer: http://www.wmsfirearmstraining.com
[Thu Jul 30 14:01:48.144660 2026] [access_compat:error] [pid 3391736:tid 3391736] [client 45.158.164.139:33746] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:01:48.294918 2026] [ssl:error] [pid 3371171:tid 3371171] (EAI 2)Name or service not known: [client 144.76.19.72:44404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:48.294944 2026] [ssl:error] [pid 3371171:tid 3371171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:48.353992 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:44416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:48.354031 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:49.056717 2026] [lsapi:warn] [pid 3397364:tid 3397364] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:01:49.547469 2026] [security2:error] [pid 3396691:tid 3396691] [client 43.157.179.227:44628] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "amtLPa64KVtd72HzHDsZ2AAAAAU"]
[Thu Jul 30 14:01:51.055300 2026] [security2:error] [pid 3382120:tid 3382120] [client 43.157.179.227:46744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtLPxmnewBvVr2RYqQ76AAAACs"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 14:01:51.103340 2026] [cgi:error] [pid 3382120:tid 3382120] [client 43.157.179.227:46744] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 14:01:51.406427 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:35062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:51.406468 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:51.462489 2026] [ssl:error] [pid 3387424:tid 3387424] (EAI 2)Name or service not known: [client 144.76.19.72:35064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:51.462514 2026] [ssl:error] [pid 3387424:tid 3387424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:54.035747 2026] [access_compat:error] [pid 3380038:tid 3380038] [client 202.88.254.53:52142] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:01:54.518465 2026] [ssl:error] [pid 3394869:tid 3394869] (EAI 2)Name or service not known: [client 144.76.19.72:35080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:54.518495 2026] [ssl:error] [pid 3394869:tid 3394869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:54.570019 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:35084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:54.570048 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:57.646125 2026] [ssl:error] [pid 3398121:tid 3398121] (EAI 2)Name or service not known: [client 144.76.19.72:35102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:57.646198 2026] [ssl:error] [pid 3398121:tid 3398121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:57.703129 2026] [ssl:error] [pid 3394809:tid 3394809] (EAI 2)Name or service not known: [client 144.76.19.72:35106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:01:57.703154 2026] [ssl:error] [pid 3394809:tid 3394809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:01:58.135740 2026] [security2:error] [pid 3392897:tid 3392897] [client 43.134.236.36:45942] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ericashmore.org"] [uri "/"] [unique_id "amtLRs7BzpVGghqKkALR0QAAADg"]
[Thu Jul 30 14:01:59.701214 2026] [lsapi:warn] [pid 3398121:tid 3398121] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:02:00.252697 2026] [access_compat:error] [pid 3380038:tid 3380038] [client 202.88.254.53:52425] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:02:00.754729 2026] [ssl:error] [pid 3398121:tid 3398121] (EAI 2)Name or service not known: [client 144.76.19.72:42550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:00.754763 2026] [ssl:error] [pid 3398121:tid 3398121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:00.812611 2026] [ssl:error] [pid 3394809:tid 3394809] (EAI 2)Name or service not known: [client 144.76.19.72:42554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:00.812636 2026] [ssl:error] [pid 3394809:tid 3394809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:03.869889 2026] [ssl:error] [pid 3380104:tid 3380104] (EAI 2)Name or service not known: [client 144.76.19.72:42562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:03.869922 2026] [ssl:error] [pid 3380104:tid 3380104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:03.926523 2026] [ssl:error] [pid 3382878:tid 3382878] (EAI 2)Name or service not known: [client 144.76.19.72:42572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:03.926551 2026] [ssl:error] [pid 3382878:tid 3382878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:05.993863 2026] [access_compat:error] [pid 3380038:tid 3380038] [client 202.88.254.53:52704] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:02:06.984041 2026] [ssl:error] [pid 3368113:tid 3368113] (EAI 2)Name or service not known: [client 144.76.19.72:42576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:06.984082 2026] [ssl:error] [pid 3368113:tid 3368113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:07.038408 2026] [ssl:error] [pid 3394870:tid 3394870] (EAI 2)Name or service not known: [client 144.76.19.72:42592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:07.038436 2026] [ssl:error] [pid 3394870:tid 3394870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:10.095541 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:51450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:10.095587 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:10.143527 2026] [security2:error] [pid 3382878:tid 3382878] [client 43.164.197.117:33986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/Saves/Terranigma - Copy.srm"] [unique_id "amtLUijgh1RnSHDpZcTQ0wAAAAw"]
[Thu Jul 30 14:02:10.150209 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:51456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:10.150230 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:10.281573 2026] [lsapi:warn] [pid 3400902:tid 3400902] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:02:10.606338 2026] [access_compat:error] [pid 3397364:tid 3397364] [client 45.158.164.139:42838] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:02:11.622225 2026] [security2:error] [pid 3394869:tid 3394869] [client 114.119.158.38:36993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/request_format~html/cat_ids~103"] [unique_id "amtLU9cs3dYDV4VZ_h-ZpgAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E9-12-2019
[Thu Jul 30 14:02:12.016626 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 202.88.254.53:53005] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:02:13.226247 2026] [ssl:error] [pid 3391636:tid 3391636] (EAI 2)Name or service not known: [client 144.76.19.72:51458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:13.226280 2026] [ssl:error] [pid 3391636:tid 3391636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:13.279498 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:51474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:13.279530 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:13.423965 2026] [security2:error] [pid 3400769:tid 3400769] [client 114.119.158.38:37001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/request_format~html/cat_ids~103"] [unique_id "amtLVR-je0eVQRFVN4_HHQAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E9-12-2019
[Thu Jul 30 14:02:13.953960 2026] [security2:error] [pid 3374665:tid 3374665] [client 5.76.161.42:53546] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLVbCc00EAGM02PVkLLQAAABs"]
[Thu Jul 30 14:02:13.954019 2026] [security2:error] [pid 3374665:tid 3374665] [client 5.76.161.42:53546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLVbCc00EAGM02PVkLLQAAABs"]
[Thu Jul 30 14:02:13.954294 2026] [security2:error] [pid 3374665:tid 3374665] [client 5.76.161.42:53546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLVbCc00EAGM02PVkLLQAAABs"]
[Thu Jul 30 14:02:16.342565 2026] [ssl:error] [pid 3400953:tid 3400953] (EAI 2)Name or service not known: [client 144.76.19.72:51486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:16.342596 2026] [ssl:error] [pid 3400953:tid 3400953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:16.394670 2026] [ssl:error] [pid 3381783:tid 3381783] (EAI 2)Name or service not known: [client 144.76.19.72:51496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:16.394711 2026] [ssl:error] [pid 3381783:tid 3381783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:16.467194 2026] [security2:error] [pid 3401253:tid 3401253] [client 185.191.171.8:55498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/abc-mouse-stuck-on-yellow-screen-ipad"] [unique_id "amtLWMJwlYAQIQVxrd_a_AAAABY"]
[Thu Jul 30 14:02:17.517083 2026] [access_compat:error] [pid 3400222:tid 3400222] [client 202.88.254.53:53283] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:02:17.716046 2026] [security2:error] [pid 3394867:tid 3394867] [client 77.31.72.110:41106] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLWXaygG7JviKTvGsdaQAAABE"]
[Thu Jul 30 14:02:17.716106 2026] [security2:error] [pid 3394867:tid 3394867] [client 77.31.72.110:41106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLWXaygG7JviKTvGsdaQAAABE"]
[Thu Jul 30 14:02:17.716376 2026] [security2:error] [pid 3394867:tid 3394867] [client 77.31.72.110:41106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLWXaygG7JviKTvGsdaQAAABE"]
[Thu Jul 30 14:02:19.449276 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:51506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:19.449311 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:19.503568 2026] [ssl:error] [pid 3387424:tid 3387424] (EAI 2)Name or service not known: [client 144.76.19.72:51508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:19.503595 2026] [ssl:error] [pid 3387424:tid 3387424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:20.928120 2026] [lsapi:warn] [pid 3394269:tid 3394269] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:02:21.140690 2026] [security2:error] [pid 3397364:tid 3397364] [client 74.7.241.45:56054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "marcwhiffen.co.uk"] [uri "/"] [unique_id "amtLXcIJl8C0Q4Bd_EOfNAAAAAk"]
[Thu Jul 30 14:02:22.556494 2026] [ssl:error] [pid 3392897:tid 3392897] (EAI 2)Name or service not known: [client 144.76.19.72:53478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:22.556520 2026] [ssl:error] [pid 3392897:tid 3392897] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:22.611301 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:53490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:22.611327 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:23.035106 2026] [security2:error] [pid 3386347:tid 3386347] [client 190.55.57.197:47100] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLX3M5Fe1-liNsrkeIRAAAABA"]
[Thu Jul 30 14:02:23.035164 2026] [security2:error] [pid 3386347:tid 3386347] [client 190.55.57.197:47100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLX3M5Fe1-liNsrkeIRAAAABA"]
[Thu Jul 30 14:02:23.035409 2026] [security2:error] [pid 3386347:tid 3386347] [client 190.55.57.197:47100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLX3M5Fe1-liNsrkeIRAAAABA"]
[Thu Jul 30 14:02:25.675471 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:53506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:25.675503 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:25.734537 2026] [ssl:error] [pid 3400222:tid 3400222] (EAI 2)Name or service not known: [client 144.76.19.72:53522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:25.734571 2026] [ssl:error] [pid 3400222:tid 3400222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:27.740218 2026] [security2:error] [pid 3401417:tid 3401417] [client 213.160.71.18:54946] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtLY8RakIGaIG7XSIH70wAAABc"]
[Thu Jul 30 14:02:28.411059 2026] [access_compat:error] [pid 3398121:tid 3398121] [client 202.88.254.53:53963] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:02:28.790510 2026] [ssl:error] [pid 3396744:tid 3396744] (EAI 2)Name or service not known: [client 144.76.19.72:53530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:28.790536 2026] [ssl:error] [pid 3396744:tid 3396744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:28.843439 2026] [ssl:error] [pid 3394869:tid 3394869] (EAI 2)Name or service not known: [client 144.76.19.72:53536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:28.843473 2026] [ssl:error] [pid 3394869:tid 3394869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:31.023171 2026] [security2:error] [pid 3394269:tid 3394269] [client 43.130.9.111:44340] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.barbaramatarrese.com"] [uri "/"] [unique_id "amtLZ-pz0E8PnfH1tOU9HgAAAAI"]
[Thu Jul 30 14:02:32.295034 2026] [ssl:error] [pid 3402464:tid 3402464] (EAI 2)Name or service not known: [client 144.76.19.72:58380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:32.295083 2026] [ssl:error] [pid 3402464:tid 3402464] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:32.347219 2026] [ssl:error] [pid 3402466:tid 3402466] (EAI 2)Name or service not known: [client 144.76.19.72:58388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:32.347256 2026] [ssl:error] [pid 3402466:tid 3402466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:35.404509 2026] [ssl:error] [pid 3396745:tid 3396745] (EAI 2)Name or service not known: [client 144.76.19.72:58396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:35.404538 2026] [ssl:error] [pid 3396745:tid 3396745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:35.461871 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:58412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:35.461901 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:37.416498 2026] [security2:error] [pid 3386347:tid 3386347] [client 43.159.34.167:44568] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "holistic-clear.co.uk"] [uri "/"] [unique_id "amtLbXM5Fe1-liNsrkeITAAAABA"]
[Thu Jul 30 14:02:38.516389 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:58414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:38.516416 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:38.570811 2026] [ssl:error] [pid 3394870:tid 3394870] (EAI 2)Name or service not known: [client 144.76.19.72:58420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:38.570839 2026] [ssl:error] [pid 3394870:tid 3394870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:38.676700 2026] [access_compat:error] [pid 3396745:tid 3396745] [client 202.88.254.53:54658] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:02:38.878422 2026] [security2:error] [pid 3398120:tid 3398120] [client 43.159.34.167:44898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtLbrO3DqIufoZDo1hREgAAACc"], referer: http://holistic-clear.co.uk
[Thu Jul 30 14:02:38.880270 2026] [authz_core:error] [pid 3398120:tid 3398120] [client 43.159.34.167:44898] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://holistic-clear.co.uk
[Thu Jul 30 14:02:38.882898 2026] [authz_core:error] [pid 3398120:tid 3398120] [client 43.159.34.167:44898] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://holistic-clear.co.uk
[Thu Jul 30 14:02:39.774489 2026] [authz_core:error] [pid 3402408:tid 3402408] [client 66.249.66.33:38813] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:02:39.777170 2026] [authz_core:error] [pid 3402408:tid 3402408] [client 66.249.66.33:38813] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:02:41.629904 2026] [ssl:error] [pid 3395904:tid 3395904] (EAI 2)Name or service not known: [client 144.76.19.72:55202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:41.629941 2026] [ssl:error] [pid 3395904:tid 3395904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:41.687340 2026] [ssl:error] [pid 3391732:tid 3391732] (EAI 2)Name or service not known: [client 144.76.19.72:55204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:41.687372 2026] [ssl:error] [pid 3391732:tid 3391732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:42.738904 2026] [security2:error] [pid 3395904:tid 3395904] [client 43.155.157.239:59876] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amtLchPiI5ZjbU46t2_OZQAAACY"]
[Thu Jul 30 14:02:42.973693 2026] [security2:error] [pid 3391736:tid 3391736] [client 129.226.146.146:51508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amtLcsUFa8wWY9flO8zobAAAADk"]
[Thu Jul 30 14:02:44.744746 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:55220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:44.744772 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:44.797836 2026] [ssl:error] [pid 3401253:tid 3401253] (EAI 2)Name or service not known: [client 144.76.19.72:55224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:44.797864 2026] [ssl:error] [pid 3401253:tid 3401253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:44.936016 2026] [security2:error] [pid 3395904:tid 3395904] [client 43.164.0.21:41386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amtLdBPiI5ZjbU46t2_OZwAAACY"]
[Thu Jul 30 14:02:46.413550 2026] [security2:error] [pid 3401253:tid 3401253] [client 129.226.146.146:46732] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtLdsJwlYAQIQVxrd_bBAAAABY"], referer: http://retrodisco.co.uk
[Thu Jul 30 14:02:47.870172 2026] [ssl:error] [pid 3386417:tid 3386417] (EAI 2)Name or service not known: [client 144.76.19.72:55230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:47.870239 2026] [ssl:error] [pid 3386417:tid 3386417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:47.926215 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:55238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:47.926245 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:47.951755 2026] [security2:error] [pid 3387424:tid 3387424] [client 175.27.171.245:48710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "amtLdwsdeSh6s5jaiq-Q8wAAACo"]
[Thu Jul 30 14:02:48.588905 2026] [access_compat:error] [pid 3396691:tid 3396691] [client 202.88.254.53:55268] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:02:49.034393 2026] [access_compat:error] [pid 3389922:tid 3389922] [client 45.158.164.139:56462] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:02:50.979643 2026] [ssl:error] [pid 3394869:tid 3394869] (EAI 2)Name or service not known: [client 144.76.19.72:59358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:50.979674 2026] [ssl:error] [pid 3394869:tid 3394869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:51.035508 2026] [ssl:error] [pid 3402408:tid 3402408] (EAI 2)Name or service not known: [client 144.76.19.72:59364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:51.035541 2026] [ssl:error] [pid 3402408:tid 3402408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:54.089348 2026] [ssl:error] [pid 3396691:tid 3396691] (EAI 2)Name or service not known: [client 144.76.19.72:59368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:54.089376 2026] [ssl:error] [pid 3396691:tid 3396691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:54.160832 2026] [ssl:error] [pid 3371171:tid 3371171] (EAI 2)Name or service not known: [client 144.76.19.72:59380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:54.160857 2026] [ssl:error] [pid 3371171:tid 3371171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:56.097111 2026] [security2:error] [pid 3392897:tid 3392897] [client 74.7.241.45:60968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "yourpartyyourway.com"] [uri "/"] [unique_id "amtLgM7BzpVGghqKkALR4wAAADg"]
[Thu Jul 30 14:02:57.247232 2026] [ssl:error] [pid 3394870:tid 3394870] (EAI 2)Name or service not known: [client 144.76.19.72:59392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:57.247266 2026] [ssl:error] [pid 3394870:tid 3394870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:57.332547 2026] [ssl:error] [pid 3400222:tid 3400222] (EAI 2)Name or service not known: [client 144.76.19.72:59408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:02:57.332579 2026] [ssl:error] [pid 3400222:tid 3400222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:02:57.882311 2026] [access_compat:error] [pid 3394870:tid 3394870] [client 202.88.254.53:55658] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:03:00.386130 2026] [ssl:error] [pid 3396745:tid 3396745] (EAI 2)Name or service not known: [client 144.76.19.72:61006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:00.386163 2026] [ssl:error] [pid 3396745:tid 3396745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:00.438941 2026] [ssl:error] [pid 3394269:tid 3394269] (EAI 2)Name or service not known: [client 144.76.19.72:61020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:00.438973 2026] [ssl:error] [pid 3394269:tid 3394269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:03.502484 2026] [ssl:error] [pid 3402408:tid 3402408] (EAI 2)Name or service not known: [client 144.76.19.72:61024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:03.502515 2026] [ssl:error] [pid 3402408:tid 3402408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:03.555610 2026] [ssl:error] [pid 3368113:tid 3368113] (EAI 2)Name or service not known: [client 144.76.19.72:61036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:03.555638 2026] [ssl:error] [pid 3368113:tid 3368113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:05.336632 2026] [security2:error] [pid 3371171:tid 3371171] [client 43.134.94.96:43198] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amtLibjSa_6d1LMVapbfxQAAAC0"]
[Thu Jul 30 14:03:05.494592 2026] [security2:error] [pid 3394870:tid 3394870] [client 74.7.227.156:58710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "securitiesfinance.co.uk"] [uri "/"] [unique_id "amtLiT2k6d7jGtQhtZ9fCwAAACE"]
[Thu Jul 30 14:03:05.937956 2026] [security2:error] [pid 3368113:tid 3368113] [client 43.134.94.96:44130] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amtLiV959vm92YAMpLt7KwAAAEo"]
[Thu Jul 30 14:03:06.607246 2026] [ssl:error] [pid 3396691:tid 3396691] (EAI 2)Name or service not known: [client 144.76.19.72:61046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:06.607278 2026] [ssl:error] [pid 3396691:tid 3396691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:06.662662 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:61054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:06.662689 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:07.268060 2026] [security2:error] [pid 3384092:tid 3384092] [client 43.134.94.96:45620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amtLiz9zJZaLedVTd5F82AAAAAQ"]
[Thu Jul 30 14:03:09.653573 2026] [security2:error] [pid 3387424:tid 3387424] [client 43.134.94.96:48126] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/"] [unique_id "amtLjQsdeSh6s5jaiq-Q-AAAACo"]
[Thu Jul 30 14:03:09.720032 2026] [ssl:error] [pid 3402466:tid 3402466] (EAI 2)Name or service not known: [client 144.76.19.72:44712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:09.720059 2026] [ssl:error] [pid 3402466:tid 3402466] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:09.736422 2026] [security2:error] [pid 3404301:tid 3404301] [client 43.134.94.96:48298] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtLjT82nhozZO71GlhurQAAAAg"], referer: http://swingaddiction.co.uk
[Thu Jul 30 14:03:09.774537 2026] [ssl:error] [pid 3404302:tid 3404302] (EAI 2)Name or service not known: [client 144.76.19.72:44724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:09.774572 2026] [ssl:error] [pid 3404302:tid 3404302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:09.787973 2026] [cgi:error] [pid 3404301:tid 3404301] [client 43.134.94.96:48298] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://swingaddiction.co.uk
[Thu Jul 30 14:03:11.532797 2026] [security2:error] [pid 3384092:tid 3384092] [client 43.134.94.96:50376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtLjz9zJZaLedVTd5F83AAAAAQ"], referer: http://all4s.co.uk
[Thu Jul 30 14:03:12.307123 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 45.158.164.139:53626] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:03:12.831122 2026] [ssl:error] [pid 3395813:tid 3395813] (EAI 2)Name or service not known: [client 144.76.19.72:44732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:12.831153 2026] [ssl:error] [pid 3395813:tid 3395813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:12.885062 2026] [ssl:error] [pid 3402246:tid 3402246] (EAI 2)Name or service not known: [client 144.76.19.72:44748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:12.885110 2026] [ssl:error] [pid 3402246:tid 3402246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:15.206063 2026] [security2:error] [pid 3395813:tid 3395813] [client 114.119.132.104:49625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.pamporovoexpress.com"] [uri "/faq"] [unique_id "amtLk2xxRwzCffhaGB7MkwAAABQ"], referer: https://www.pamporovoexpress.com/accommodation-pamporovo
[Thu Jul 30 14:03:15.938932 2026] [ssl:error] [pid 3396745:tid 3396745] (EAI 2)Name or service not known: [client 144.76.19.72:44764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:15.938962 2026] [ssl:error] [pid 3396745:tid 3396745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:15.993508 2026] [ssl:error] [pid 3374665:tid 3374665] (EAI 2)Name or service not known: [client 144.76.19.72:44776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:15.993540 2026] [ssl:error] [pid 3374665:tid 3374665] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:16.940088 2026] [security2:error] [pid 3400953:tid 3400953] [client 85.208.96.203:59120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/julian-and-mercedes-ramirez"] [unique_id "amtLlLkURAqtbgpd2qCIpgAAAAs"]
[Thu Jul 30 14:03:19.049635 2026] [ssl:error] [pid 3404302:tid 3404302] (EAI 2)Name or service not known: [client 144.76.19.72:44782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:19.049662 2026] [ssl:error] [pid 3404302:tid 3404302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:19.105538 2026] [ssl:error] [pid 3401253:tid 3401253] (EAI 2)Name or service not known: [client 144.76.19.72:44794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:19.105562 2026] [ssl:error] [pid 3401253:tid 3401253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:20.092428 2026] [security2:error] [pid 3394870:tid 3394870] [client 43.157.149.188:37628] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amtLmD2k6d7jGtQhtZ9fEQAAACE"]
[Thu Jul 30 14:03:20.412361 2026] [security2:error] [pid 3389921:tid 3389921] [client 43.164.0.21:38870] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtLmDW-x4QBeXeWhTTaKgAAABo"]
[Thu Jul 30 14:03:22.178755 2026] [ssl:error] [pid 3391732:tid 3391732] (EAI 2)Name or service not known: [client 144.76.19.72:43122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:22.178801 2026] [ssl:error] [pid 3391732:tid 3391732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:22.239571 2026] [ssl:error] [pid 3404159:tid 3404159] (EAI 2)Name or service not known: [client 144.76.19.72:43128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:22.239603 2026] [ssl:error] [pid 3404159:tid 3404159] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:22.586863 2026] [security2:error] [pid 3404159:tid 3404159] [client 45.6.245.11:58794] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLmnnixp7bH62rJf_auQAAAAE"]
[Thu Jul 30 14:03:22.586916 2026] [security2:error] [pid 3404159:tid 3404159] [client 45.6.245.11:58794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLmnnixp7bH62rJf_auQAAAAE"]
[Thu Jul 30 14:03:22.587216 2026] [security2:error] [pid 3404159:tid 3404159] [client 45.6.245.11:58794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLmnnixp7bH62rJf_auQAAAAE"]
[Thu Jul 30 14:03:23.843048 2026] [security2:error] [pid 3391732:tid 3391732] [client 43.164.0.21:38136] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtLm5uZXVEAHb_PcXYiZQAAACU"], referer: http://apotheekcandidejacobs.be
[Thu Jul 30 14:03:24.879860 2026] [security2:error] [pid 3398121:tid 3398121] [client 49.51.166.228:53872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "amtLnMy1Smuam4xb-rENAwAAACk"]
[Thu Jul 30 14:03:25.233375 2026] [security2:error] [pid 3391736:tid 3391736] [client 47.128.22.66:14256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spamp.com"] [uri "/robots.txt"] [unique_id "amtLncUFa8wWY9flO8zoeAAAADk"]
[Thu Jul 30 14:03:25.296980 2026] [ssl:error] [pid 3395904:tid 3395904] (EAI 2)Name or service not known: [client 144.76.19.72:43138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:25.297007 2026] [ssl:error] [pid 3395904:tid 3395904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:25.351128 2026] [ssl:error] [pid 3404849:tid 3404849] (EAI 2)Name or service not known: [client 144.76.19.72:43140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:25.351160 2026] [ssl:error] [pid 3404849:tid 3404849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:26.945354 2026] [security2:error] [pid 3404849:tid 3404849] [client 43.133.220.37:45150] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wurlitzer.co.uk"] [uri "/"] [unique_id "amtLnm0focA9VcirgsZD7wAAAA0"]
[Thu Jul 30 14:03:27.057362 2026] [security2:error] [pid 3391732:tid 3391732] [client 43.165.170.119:56020] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanhill.co.uk"] [uri "/"] [unique_id "amtLn5uZXVEAHb_PcXYiZwAAACU"]
[Thu Jul 30 14:03:28.408485 2026] [ssl:error] [pid 3391732:tid 3391732] (EAI 2)Name or service not known: [client 144.76.19.72:43146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:28.408513 2026] [ssl:error] [pid 3391732:tid 3391732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:28.465296 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:43160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:28.465328 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:28.489997 2026] [security2:error] [pid 3374665:tid 3374665] [client 41.157.211.84:43430] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLoLCc00EAGM02PVkLRgAAABs"]
[Thu Jul 30 14:03:28.490050 2026] [security2:error] [pid 3374665:tid 3374665] [client 41.157.211.84:43430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLoLCc00EAGM02PVkLRgAAABs"]
[Thu Jul 30 14:03:28.490287 2026] [security2:error] [pid 3374665:tid 3374665] [client 41.157.211.84:43430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLoLCc00EAGM02PVkLRgAAABs"]
[Thu Jul 30 14:03:29.402872 2026] [security2:error] [pid 3402466:tid 3402466] [client 43.133.220.37:43444] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtLoezU2xSM-im9NdbwIAAAADA"], referer: http://wurlitzer.co.uk
[Thu Jul 30 14:03:30.089874 2026] [security2:error] [pid 3404302:tid 3404302] [client 43.165.170.119:59260] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amtLolr2OudMy5mIiFT91gAAAAw"], referer: http://jonathanhill.co.uk
[Thu Jul 30 14:03:30.723832 2026] [security2:error] [pid 3391732:tid 3391732] [client 43.155.140.157:52860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amtLopuZXVEAHb_PcXYiagAAACU"]
[Thu Jul 30 14:03:31.524715 2026] [ssl:error] [pid 3387424:tid 3387424] (EAI 2)Name or service not known: [client 144.76.19.72:40304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:31.524744 2026] [ssl:error] [pid 3387424:tid 3387424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:31.577627 2026] [ssl:error] [pid 3404302:tid 3404302] (EAI 2)Name or service not known: [client 144.76.19.72:40318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:31.577653 2026] [ssl:error] [pid 3404302:tid 3404302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:31.639026 2026] [ssl:error] [pid 3402463:tid 3402463] (70014)End of file found: [client 216.73.216.199:15525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:03:33.598835 2026] [security2:error] [pid 3368113:tid 3368113] [client 129.226.146.146:45506] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtLpV959vm92YAMpLt7NAAAAEo"]
[Thu Jul 30 14:03:34.096874 2026] [security2:error] [pid 3405413:tid 3405413] [client 43.155.140.157:52086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amtLpsPS34jQGUo3S5aSMAAAABg"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 14:03:34.636622 2026] [ssl:error] [pid 3405414:tid 3405414] (EAI 2)Name or service not known: [client 144.76.19.72:40324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:34.636662 2026] [ssl:error] [pid 3405414:tid 3405414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:34.690125 2026] [ssl:error] [pid 3396745:tid 3396745] (EAI 2)Name or service not known: [client 144.76.19.72:40332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:34.690152 2026] [ssl:error] [pid 3396745:tid 3396745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:34.714782 2026] [lsapi:warn] [pid 3405413:tid 3405413] [client 43.155.140.157:52086] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 14:03:34.714821 2026] [lsapi:warn] [pid 3405413:tid 3405413] [client 43.155.140.157:52086] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 14:03:35.101557 2026] [security2:error] [pid 3400902:tid 3400902] [client 114.119.142.20:62177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/request_format~html"] [unique_id "amtLp7I5-xXS3Cy7mJHg2AAAAAo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E8-12-2019
[Thu Jul 30 14:03:35.413835 2026] [security2:error] [pid 3391732:tid 3391732] [client 43.165.186.188:44750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "greenduckgallery.co.uk"] [uri "/"] [unique_id "amtLp5uZXVEAHb_PcXYibgAAACU"]
[Thu Jul 30 14:03:35.448160 2026] [security2:error] [pid 3405414:tid 3405414] [client 43.167.232.38:59624] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtLp3DvlWybROvayHIcTAAAABw"]
[Thu Jul 30 14:03:35.559274 2026] [security2:error] [pid 3396745:tid 3396745] [client 43.128.149.102:57068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "secretbluestone.co.uk"] [uri "/"] [unique_id "amtLpxNQjGBFyXId4BO1uwAAAA4"]
[Thu Jul 30 14:03:36.162822 2026] [security2:error] [pid 3386417:tid 3386417] [client 114.119.142.20:62189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/request_format~html"] [unique_id "amtLqLhYOz3RmNtLVYjhWQAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E8-12-2019
[Thu Jul 30 14:03:36.468772 2026] [security2:error] [pid 3391732:tid 3391732] [client 177.86.6.54:39003] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLqJuZXVEAHb_PcXYibwAAACU"]
[Thu Jul 30 14:03:36.468840 2026] [security2:error] [pid 3391732:tid 3391732] [client 177.86.6.54:39003] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtLqJuZXVEAHb_PcXYibwAAACU"]
[Thu Jul 30 14:03:36.469104 2026] [security2:error] [pid 3391732:tid 3391732] [client 177.86.6.54:39003] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtLqJuZXVEAHb_PcXYibwAAACU"]
[Thu Jul 30 14:03:36.842801 2026] [security2:error] [pid 3374665:tid 3374665] [client 43.153.54.138:56742] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtLqLCc00EAGM02PVkLSAAAABs"]
[Thu Jul 30 14:03:37.746954 2026] [ssl:error] [pid 3391732:tid 3391732] (EAI 2)Name or service not known: [client 144.76.19.72:40346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:37.746986 2026] [ssl:error] [pid 3391732:tid 3391732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:37.807302 2026] [ssl:error] [pid 3404301:tid 3404301] (EAI 2)Name or service not known: [client 144.76.19.72:40348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:37.807337 2026] [ssl:error] [pid 3404301:tid 3404301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:38.136075 2026] [security2:error] [pid 3386417:tid 3386417] [client 43.153.54.138:57858] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtLqrhYOz3RmNtLVYjhWgAAABk"], referer: http://somethingweb.co.uk
[Thu Jul 30 14:03:38.512219 2026] [security2:error] [pid 3394867:tid 3394867] [client 43.153.54.138:48408] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtLqnaygG7JviKTvGsdhAAAABE"], referer: http://mwdesign.me.uk
[Thu Jul 30 14:03:38.704093 2026] [security2:error] [pid 3401417:tid 3401417] [client 139.155.126.16:47708] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amtLqsRakIGaIG7XSIH8qQAAABc"]
[Thu Jul 30 14:03:38.991774 2026] [security2:error] [pid 3386417:tid 3386417] [client 43.133.60.94:44010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saliency.co.uk"] [uri "/"] [unique_id "amtLqrhYOz3RmNtLVYjhWwAAABk"]
[Thu Jul 30 14:03:39.047411 2026] [security2:error] [pid 3374665:tid 3374665] [client 43.165.125.66:45058] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "amtLq7Cc00EAGM02PVkLSgAAABs"]
[Thu Jul 30 14:03:39.056970 2026] [security2:error] [pid 3404301:tid 3404301] [client 43.167.232.38:45622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtLqz82nhozZO71GlhuswAAAAg"], referer: http://hornsey-town-hall.org.uk
[Thu Jul 30 14:03:39.510524 2026] [security2:error] [pid 3395904:tid 3395904] [client 43.159.139.164:46058] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tyredandmotional.co.uk"] [uri "/"] [unique_id "amtLqxPiI5ZjbU46t2_OewAAACY"]
[Thu Jul 30 14:03:39.674925 2026] [security2:error] [pid 3401417:tid 3401417] [client 43.157.156.190:40374] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amtLq8RakIGaIG7XSIH8qgAAABc"], referer: http://peterboroughdiocesanregistry.co.uk
[Thu Jul 30 14:03:40.859535 2026] [ssl:error] [pid 3398121:tid 3398121] (EAI 2)Name or service not known: [client 144.76.19.72:64848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:40.859567 2026] [ssl:error] [pid 3398121:tid 3398121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:40.918613 2026] [ssl:error] [pid 3405470:tid 3405470] (EAI 2)Name or service not known: [client 144.76.19.72:64858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:40.918647 2026] [ssl:error] [pid 3405470:tid 3405470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:41.083788 2026] [security2:error] [pid 3386347:tid 3386347] [client 43.153.54.138:50306] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtLrXM5Fe1-liNsrkeIYQAAABA"], referer: http://mwdesign.me.uk
[Thu Jul 30 14:03:42.244942 2026] [security2:error] [pid 3374665:tid 3374665] [client 43.159.139.164:48526] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amtLrrCc00EAGM02PVkLTAAAABs"], referer: http://tyredandmotional.co.uk
[Thu Jul 30 14:03:42.732671 2026] [security2:error] [pid 3405470:tid 3405470] [client 43.128.149.102:35226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "marcwhiffen.co.uk"] [uri "/"] [unique_id "amtLrmow550v8v--JbwMAwAAACg"]
[Thu Jul 30 14:03:42.733521 2026] [authz_core:error] [pid 3405470:tid 3405470] [client 43.128.149.102:35226] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 14:03:43.972673 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:64870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:43.972703 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:44.028636 2026] [ssl:error] [pid 3368113:tid 3368113] (EAI 2)Name or service not known: [client 144.76.19.72:64872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:44.028666 2026] [ssl:error] [pid 3368113:tid 3368113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:45.063134 2026] [security2:error] [pid 3394867:tid 3394867] [client 43.134.93.164:57764] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtLsXaygG7JviKTvGsdiAAAABE"]
[Thu Jul 30 14:03:45.289687 2026] [security2:error] [pid 3402463:tid 3402463] [client 43.156.37.91:53832] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtLsdacryHj1UHXdgGuwgAAACw"]
[Thu Jul 30 14:03:45.309965 2026] [security2:error] [pid 3368113:tid 3368113] [client 175.27.136.83:53612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amtLsV959vm92YAMpLt7NwAAAEo"]
[Thu Jul 30 14:03:45.755838 2026] [security2:error] [pid 3397364:tid 3397364] [client 43.134.62.67:47504] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtLscIJl8C0Q4Bd_EOfRwAAAAk"]
[Thu Jul 30 14:03:46.504236 2026] [security2:error] [pid 3394867:tid 3394867] [client 43.156.37.91:55678] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtLsnaygG7JviKTvGsdiQAAABE"], referer: http://rogersbarbershopltd.co.uk
[Thu Jul 30 14:03:46.752599 2026] [security2:error] [pid 3384166:tid 3384166] [client 43.161.233.190:43848] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amtLsnH86EhCN41sgkOahwAAAB4"]
[Thu Jul 30 14:03:47.067549 2026] [security2:error] [pid 3395904:tid 3395904] [client 43.134.93.164:59810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bes-systems.co.uk"] [uri "/"] [unique_id "amtLsxPiI5ZjbU46t2_OfwAAACY"]
[Thu Jul 30 14:03:47.096647 2026] [ssl:error] [pid 3405082:tid 3405082] (EAI 2)Name or service not known: [client 144.76.19.72:64876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:47.096692 2026] [ssl:error] [pid 3405082:tid 3405082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:47.150549 2026] [ssl:error] [pid 3394269:tid 3394269] (EAI 2)Name or service not known: [client 144.76.19.72:64892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:47.150578 2026] [ssl:error] [pid 3394269:tid 3394269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:47.243021 2026] [security2:error] [pid 3368113:tid 3368113] [client 43.134.93.164:34186] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtLs1959vm92YAMpLt7OAAAAEo"], referer: http://unclaimedassets.co.uk
[Thu Jul 30 14:03:48.221570 2026] [security2:error] [pid 3387424:tid 3387424] [client 54.156.248.117:17615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/downloads/solarwinds-log-manager-for-orion-trial/"] [unique_id "amtLtAsdeSh6s5jaiq-RBAAAACo"]
[Thu Jul 30 14:03:48.797537 2026] [security2:error] [pid 3394269:tid 3394269] [client 43.134.62.67:60486] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtLtOpz0E8PnfH1tOU9MQAAAAI"], referer: http://raidersofthegamecupboard.co.uk
[Thu Jul 30 14:03:49.596032 2026] [security2:error] [pid 3402463:tid 3402463] [client 43.134.93.164:36906] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtLtdacryHj1UHXdgGuxAAAACw"], referer: http://bes-systems.co.uk
[Thu Jul 30 14:03:50.212581 2026] [ssl:error] [pid 3395903:tid 3395903] (EAI 2)Name or service not known: [client 144.76.19.72:60970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:50.212626 2026] [ssl:error] [pid 3395903:tid 3395903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:50.266807 2026] [ssl:error] [pid 3384166:tid 3384166] (EAI 2)Name or service not known: [client 144.76.19.72:60980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:50.266834 2026] [ssl:error] [pid 3384166:tid 3384166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:50.475178 2026] [security2:error] [pid 3405860:tid 3405860] [client 43.130.101.151:45780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "islay.me"] [uri "/"] [unique_id "amtLttY6EJm-9U2Z1Kg7EQAAADM"]
[Thu Jul 30 14:03:51.140292 2026] [security2:error] [pid 3404849:tid 3404849] [client 43.153.71.12:38622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amtLt20focA9VcirgsZD9gAAAA0"]
[Thu Jul 30 14:03:52.190483 2026] [security2:error] [pid 3389922:tid 3389922] [client 98.84.200.43:51297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/products/solarwinds-database-performance-analyzer/"] [unique_id "amtLuOO-WfI2uJy4ZXF3gwAAAB8"]
[Thu Jul 30 14:03:53.082860 2026] [security2:error] [pid 3404849:tid 3404849] [client 43.160.219.206:57068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "amtLuW0focA9VcirgsZD9wAAAA0"]
[Thu Jul 30 14:03:53.329441 2026] [ssl:error] [pid 3404302:tid 3404302] (EAI 2)Name or service not known: [client 144.76.19.72:60990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:53.329488 2026] [ssl:error] [pid 3404302:tid 3404302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:53.385342 2026] [ssl:error] [pid 3400902:tid 3400902] (EAI 2)Name or service not known: [client 144.76.19.72:60998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:53.385384 2026] [ssl:error] [pid 3400902:tid 3400902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:53.553534 2026] [access_compat:error] [pid 3405471:tid 3405471] [client 45.158.164.139:38810] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:03:54.976706 2026] [security2:error] [pid 3406375:tid 3406375] [client 49.51.52.250:45258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amtLutnR9loTAey_HIVXHgAAAAU"]
[Thu Jul 30 14:03:55.144268 2026] [security2:error] [pid 3394867:tid 3394867] [client 43.133.187.11:46834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amtLu3aygG7JviKTvGsdjwAAABE"]
[Thu Jul 30 14:03:55.273045 2026] [security2:error] [pid 3405860:tid 3405860] [client 43.133.187.11:47072] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.co.uk"] [uri "/"] [unique_id "amtLu9Y6EJm-9U2Z1Kg7FAAAADM"]
[Thu Jul 30 14:03:55.974418 2026] [security2:error] [pid 3405248:tid 3405248] [client 23.20.178.124:42045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/downloads/netbrain-integrated-edition-trial/"] [unique_id "amtLuzKxh_YwJMwOThAO4AAAABI"]
[Thu Jul 30 14:03:56.442141 2026] [ssl:error] [pid 3405471:tid 3405471] (EAI 2)Name or service not known: [client 144.76.19.72:61012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:56.442174 2026] [ssl:error] [pid 3405471:tid 3405471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:56.495619 2026] [ssl:error] [pid 3404744:tid 3404744] (EAI 2)Name or service not known: [client 144.76.19.72:61022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:56.495650 2026] [ssl:error] [pid 3404744:tid 3404744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:56.674594 2026] [security2:error] [pid 3391732:tid 3391732] [client 43.160.219.206:48350] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amtLvJuZXVEAHb_PcXYicwAAACU"], referer: http://the-pryors.co.uk
[Thu Jul 30 14:03:57.592160 2026] [security2:error] [pid 3386347:tid 3386347] [client 94.154.43.229:30760] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtLvXM5Fe1-liNsrkeIZwAAABA"]
[Thu Jul 30 14:03:57.592354 2026] [security2:error] [pid 3386347:tid 3386347] [client 94.154.43.229:30760] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtLvXM5Fe1-liNsrkeIZwAAABA"]
[Thu Jul 30 14:03:57.592576 2026] [security2:error] [pid 3386347:tid 3386347] [client 94.154.43.229:30760] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtLvXM5Fe1-liNsrkeIZwAAABA"]
[Thu Jul 30 14:03:57.690566 2026] [security2:error] [pid 3406819:tid 3406819] [client 43.133.187.11:49472] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtLvQ0v02Z7iwHY2esNtgAAAAY"], referer: http://jasperandtroy.co.uk
[Thu Jul 30 14:03:57.985123 2026] [security2:error] [pid 3405472:tid 3405472] [client 94.154.43.183:22716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "randomlearner.org.uk"] [uri "/.env"] [unique_id "amtLvem4xodOMe8UqrhgAwAAAC4"]
[Thu Jul 30 14:03:57.985320 2026] [security2:error] [pid 3405472:tid 3405472] [client 94.154.43.183:22716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "randomlearner.org.uk"] [uri "/.env"] [unique_id "amtLvem4xodOMe8UqrhgAwAAAC4"]
[Thu Jul 30 14:03:57.985592 2026] [security2:error] [pid 3405472:tid 3405472] [client 94.154.43.183:22716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "randomlearner.org.uk"] [uri "/.env"] [unique_id "amtLvem4xodOMe8UqrhgAwAAAC4"]
[Thu Jul 30 14:03:58.546557 2026] [core:error] [pid 3405860:tid 3405860] [client 66.249.66.45:61815] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:03:58.546585 2026] [core:error] [pid 3405860:tid 3405860] [client 66.249.66.45:61815] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:03:58.702010 2026] [security2:error] [pid 3405472:tid 3405472] [client 43.166.226.57:58756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/"] [unique_id "amtLvum4xodOMe8UqrhgBAAAAC4"]
[Thu Jul 30 14:03:59.551190 2026] [ssl:error] [pid 3401253:tid 3401253] (EAI 2)Name or service not known: [client 144.76.19.72:61042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:59.551221 2026] [ssl:error] [pid 3401253:tid 3401253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:03:59.602425 2026] [ssl:error] [pid 3387424:tid 3387424] (EAI 2)Name or service not known: [client 144.76.19.72:52628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:03:59.602462 2026] [ssl:error] [pid 3387424:tid 3387424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:00.570796 2026] [security2:error] [pid 3404159:tid 3404159] [client 43.166.226.57:60444] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtLwHnixp7bH62rJf_awgAAAAE"], referer: http://clarepillinger.co.uk
[Thu Jul 30 14:04:02.084671 2026] [ssl:error] [pid 3394870:tid 3394870] (70014)End of file found: [client 216.73.216.199:19139] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:04:02.298118 2026] [security2:error] [pid 3400953:tid 3400953] [client 49.51.233.46:45146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "amtLwrkURAqtbgpd2qCI1QAAAAs"]
[Thu Jul 30 14:04:02.656618 2026] [ssl:error] [pid 3404301:tid 3404301] (EAI 2)Name or service not known: [client 144.76.19.72:52642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:02.656646 2026] [ssl:error] [pid 3404301:tid 3404301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:02.712148 2026] [ssl:error] [pid 3405357:tid 3405357] (EAI 2)Name or service not known: [client 144.76.19.72:52652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:02.712188 2026] [ssl:error] [pid 3405357:tid 3405357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:05.767636 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:52654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:05.767665 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:05.821984 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:52656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:05.822019 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:06.572598 2026] [security2:error] [pid 3397364:tid 3397364] [client 43.163.206.70:49464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "cssystems.co.uk"] [uri "/"] [unique_id "amtLxsIJl8C0Q4Bd_EOfTQAAAAk"], referer: http://cssystems.co.uk
[Thu Jul 30 14:04:06.998629 2026] [security2:error] [pid 3389921:tid 3389921] [client 43.165.167.72:53294] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtLxjW-x4QBeXeWhTTaQwAAABo"]
[Thu Jul 30 14:04:07.004617 2026] [security2:error] [pid 3386775:tid 3386775] [client 43.133.187.11:58574] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "amtLx9G6CuEZHFTsq5sWSwAAACM"]
[Thu Jul 30 14:04:08.179547 2026] [security2:error] [pid 3395904:tid 3395904] [client 43.157.172.39:42318] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtLyBPiI5ZjbU46t2_OhAAAACY"], referer: http://banskoexpresstransfers.co.uk
[Thu Jul 30 14:04:08.789269 2026] [security2:error] [pid 3386775:tid 3386775] [client 49.51.73.183:36720] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/"] [unique_id "amtLyNG6CuEZHFTsq5sWTAAAACM"]
[Thu Jul 30 14:04:08.843223 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.152.72.247:35168] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "p2studio.co.uk"] [uri "/"] [unique_id "amtLyOmHZwuO5n5uynCKmwAAAA8"]
[Thu Jul 30 14:04:08.875501 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:52670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:08.875530 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:08.929852 2026] [ssl:error] [pid 3384092:tid 3384092] (EAI 2)Name or service not known: [client 144.76.19.72:52686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:08.929888 2026] [ssl:error] [pid 3384092:tid 3384092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:09.456046 2026] [security2:error] [pid 3361762:tid 3361762] [client 43.157.172.39:56412] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtLyaUjYgT330-Lj0IenwAAACQ"], referer: http://www.banskoexpress.com
[Thu Jul 30 14:04:09.503764 2026] [security2:error] [pid 3384092:tid 3384092] [client 43.133.187.11:33286] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amtLyT9zJZaLedVTd5F87gAAAAQ"], referer: http://thesilkshed.co.uk
[Thu Jul 30 14:04:09.889865 2026] [security2:error] [pid 3395904:tid 3395904] [client 43.165.167.72:49626] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtLyRPiI5ZjbU46t2_OhQAAACY"], referer: http://staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 14:04:10.950782 2026] [security2:error] [pid 3384092:tid 3384092] [client 49.51.73.183:38158] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtLyj9zJZaLedVTd5F87wAAAAQ"], referer: http://theislipgarage.co.uk
[Thu Jul 30 14:04:11.244884 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.130.106.18:45598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "localhero.org.uk"] [uri "/"] [unique_id "amtLy-mHZwuO5n5uynCKnQAAAA8"]
[Thu Jul 30 14:04:12.015396 2026] [security2:error] [pid 3395903:tid 3395903] [client 43.135.140.225:40790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.org.uk"] [uri "/"] [unique_id "amtLzDvxHuwR8-RNgr9wUgAAACI"]
[Thu Jul 30 14:04:12.106578 2026] [ssl:error] [pid 3394870:tid 3394870] (EAI 2)Name or service not known: [client 144.76.19.72:23486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:12.106604 2026] [ssl:error] [pid 3394870:tid 3394870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:12.164353 2026] [ssl:error] [pid 3405471:tid 3405471] (EAI 2)Name or service not known: [client 144.76.19.72:23502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:12.164379 2026] [ssl:error] [pid 3405471:tid 3405471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:13.731853 2026] [security2:error] [pid 3387425:tid 3387425] [client 43.133.139.6:59006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "junglejacks.co.uk"] [uri "/"] [unique_id "amtLzVvYFVpQVe__AQ29IgAAADE"]
[Thu Jul 30 14:04:14.177132 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.135.140.225:42428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amtLzumHZwuO5n5uynCKngAAAA8"], referer: http://shelterforum.org.uk
[Thu Jul 30 14:04:14.460305 2026] [access_compat:error] [pid 3402463:tid 3402463] [client 45.158.164.139:52708] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:04:14.976991 2026] [security2:error] [pid 3384092:tid 3384092] [client 43.135.145.117:59422] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "randomlearner.org.uk"] [uri "/"] [unique_id "amtLzj9zJZaLedVTd5F88QAAAAQ"]
[Thu Jul 30 14:04:15.222575 2026] [ssl:error] [pid 3391732:tid 3391732] (EAI 2)Name or service not known: [client 144.76.19.72:23504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:15.222609 2026] [ssl:error] [pid 3391732:tid 3391732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:15.275793 2026] [ssl:error] [pid 3398121:tid 3398121] (EAI 2)Name or service not known: [client 144.76.19.72:23514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:15.275821 2026] [ssl:error] [pid 3398121:tid 3398121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:15.529543 2026] [security2:error] [pid 3394870:tid 3394870] [client 44.205.192.249:61556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/halifax-building-society-dormant-accounts/"] [unique_id "amtLzz2k6d7jGtQhtZ9fIgAAACE"]
[Thu Jul 30 14:04:16.883605 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.133.139.6:33788] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amtL0OmHZwuO5n5uynCKnwAAAA8"], referer: http://junglejacks.co.uk
[Thu Jul 30 14:04:16.965582 2026] [security2:error] [pid 3400902:tid 3400902] [client 49.51.233.46:56292] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "fast-hosting.co.uk"] [uri "/"] [unique_id "amtL0LI5-xXS3Cy7mJHhPgAAAAo"]
[Thu Jul 30 14:04:17.355607 2026] [security2:error] [pid 3397364:tid 3397364] [client 185.191.171.16:58108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/big-comfy-couch-actress-death"] [unique_id "amtL0cIJl8C0Q4Bd_EOfUAAAAAk"]
[Thu Jul 30 14:04:18.359910 2026] [ssl:error] [pid 3396745:tid 3396745] (EAI 2)Name or service not known: [client 144.76.19.72:23530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:18.359956 2026] [ssl:error] [pid 3396745:tid 3396745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:18.411445 2026] [ssl:error] [pid 3397364:tid 3397364] (EAI 2)Name or service not known: [client 144.76.19.72:23540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:18.411477 2026] [ssl:error] [pid 3397364:tid 3397364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:18.822766 2026] [security2:error] [pid 3398121:tid 3398121] [client 43.158.91.71:47982] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amtL0sy1Smuam4xb-rENEQAAACk"]
[Thu Jul 30 14:04:19.293922 2026] [security2:error] [pid 3405082:tid 3405082] [client 98.82.38.120:52262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/search/page/3/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies"] [unique_id "amtL0-mHZwuO5n5uynCKoAAAAA8"]
[Thu Jul 30 14:04:19.844100 2026] [authz_core:error] [pid 3395903:tid 3395903] [client 66.249.66.34:49120] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:04:19.846766 2026] [authz_core:error] [pid 3395903:tid 3395903] [client 66.249.66.34:49120] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:04:21.467548 2026] [ssl:error] [pid 3405471:tid 3405471] (EAI 2)Name or service not known: [client 144.76.19.72:62816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:21.467577 2026] [ssl:error] [pid 3405471:tid 3405471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:21.521519 2026] [ssl:error] [pid 3406375:tid 3406375] (EAI 2)Name or service not known: [client 144.76.19.72:62828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:21.521553 2026] [ssl:error] [pid 3406375:tid 3406375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:22.008207 2026] [security2:error] [pid 3405471:tid 3405471] [client 43.134.56.214:38734] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.co.uk"] [uri "/"] [unique_id "amtL1jlLKwcPJTrsL8J0PwAAACs"]
[Thu Jul 30 14:04:23.384677 2026] [security2:error] [pid 3408417:tid 3408417] [client 52.73.142.41:49299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/search/page/3/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies"] [unique_id "amtL14L8_yXIjmDir-ADqgAAACY"]
[Thu Jul 30 14:04:23.560949 2026] [security2:error] [pid 3371171:tid 3371171] [client 129.226.193.111:37440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtL17jSa_6d1LMVapbgPgAAAC0"]
[Thu Jul 30 14:04:23.896734 2026] [security2:error] [pid 3408415:tid 3408415] [client 43.134.56.214:58220] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtL1xz-UNb2axbQ_2m0PgAAACQ"], referer: http://saturnsports.co.uk
[Thu Jul 30 14:04:24.573830 2026] [ssl:error] [pid 3405357:tid 3405357] (EAI 2)Name or service not known: [client 144.76.19.72:62830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:24.573864 2026] [ssl:error] [pid 3405357:tid 3405357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:24.625306 2026] [ssl:error] [pid 3394269:tid 3394269] (EAI 2)Name or service not known: [client 144.76.19.72:62838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:24.625330 2026] [ssl:error] [pid 3394269:tid 3394269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:24.927313 2026] [security2:error] [pid 3371171:tid 3371171] [client 43.155.129.131:55204] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/class-wp-ability-categories-registry.php"] [unique_id "amtL2LjSa_6d1LMVapbgPwAAAC0"]
[Thu Jul 30 14:04:25.077631 2026] [security2:error] [pid 3408460:tid 3408460] [client 43.135.144.126:36716] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amtL2Vv3Al_fq4UdnOeRbgAAACc"]
[Thu Jul 30 14:04:25.340466 2026] [security2:error] [pid 3408467:tid 3408467] [client 49.51.183.220:57312] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtL2ZedtGSkKx0X0srI3AAAADY"]
[Thu Jul 30 14:04:26.070551 2026] [security2:error] [pid 3408415:tid 3408415] [client 129.226.193.111:32954] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtL2hz-UNb2axbQ_2m0PwAAACQ"], referer: http://beechhouseselfcatering.co.uk
[Thu Jul 30 14:04:26.721780 2026] [security2:error] [pid 3395903:tid 3395903] [client 108.246.75.125:45496] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtL2jvxHuwR8-RNgr9wWAAAACI"]
[Thu Jul 30 14:04:26.721861 2026] [security2:error] [pid 3395903:tid 3395903] [client 108.246.75.125:45496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtL2jvxHuwR8-RNgr9wWAAAACI"]
[Thu Jul 30 14:04:26.722119 2026] [security2:error] [pid 3395903:tid 3395903] [client 108.246.75.125:45496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtL2jvxHuwR8-RNgr9wWAAAACI"]
[Thu Jul 30 14:04:27.536979 2026] [security2:error] [pid 3408062:tid 3408062] [client 170.106.113.159:55716] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sharonduggal.co.uk"] [uri "/"] [unique_id "amtL2yviTpVyy2rrdN66iAAAAAE"]
[Thu Jul 30 14:04:27.682031 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:62844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:27.682084 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:27.716417 2026] [security2:error] [pid 3408467:tid 3408467] [client 43.134.56.214:46848] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amtL25edtGSkKx0X0srI3QAAADY"]
[Thu Jul 30 14:04:27.738942 2026] [ssl:error] [pid 3395903:tid 3395903] (EAI 2)Name or service not known: [client 144.76.19.72:62854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:27.738967 2026] [ssl:error] [pid 3395903:tid 3395903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:27.757243 2026] [security2:error] [pid 3405082:tid 3405082] [client 185.191.171.6:17924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,615.0/prev_next,prev.html"] [unique_id "amtL2-mHZwuO5n5uynCKogAAAA8"]
[Thu Jul 30 14:04:28.530665 2026] [security2:error] [pid 3402408:tid 3402408] [client 49.51.183.220:44964] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtL3LSxhoNpuqRv1ibr2QAAACA"], referer: http://tompalmer.co.uk
[Thu Jul 30 14:04:29.258669 2026] [security2:error] [pid 3372386:tid 3372386] [client 91.237.150.23:36266] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtL3eWtb4b4cKZ6fMV-wwAAAAA"]
[Thu Jul 30 14:04:29.258723 2026] [security2:error] [pid 3372386:tid 3372386] [client 91.237.150.23:36266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtL3eWtb4b4cKZ6fMV-wwAAAAA"]
[Thu Jul 30 14:04:29.258972 2026] [security2:error] [pid 3372386:tid 3372386] [client 91.237.150.23:36266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtL3eWtb4b4cKZ6fMV-wwAAAAA"]
[Thu Jul 30 14:04:29.294089 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.134.56.214:37970] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtL3emHZwuO5n5uynCKowAAAA8"], referer: http://spampmusic.co.uk
[Thu Jul 30 14:04:29.904932 2026] [security2:error] [pid 3387425:tid 3387425] [client 43.153.119.119:37400] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amtL3VvYFVpQVe__AQ29JwAAADE"]
[Thu Jul 30 14:04:29.983875 2026] [security2:error] [pid 3395903:tid 3395903] [client 43.153.119.119:37538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amtL3TvxHuwR8-RNgr9wWgAAACI"]
[Thu Jul 30 14:04:30.043744 2026] [security2:error] [pid 3394867:tid 3394867] [client 43.156.79.172:33590] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "asian-kitchen.co.uk"] [uri "/"] [unique_id "amtL3naygG7JviKTvGsdmgAAABE"]
[Thu Jul 30 14:04:30.792080 2026] [ssl:error] [pid 3408357:tid 3408357] (EAI 2)Name or service not known: [client 144.76.19.72:52636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:30.792119 2026] [ssl:error] [pid 3408357:tid 3408357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:30.848575 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:52650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:30.848607 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:30.938306 2026] [security2:error] [pid 3404301:tid 3404301] [client 43.157.22.57:47588] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtL3j82nhozZO71GlhuwgAAAAg"]
[Thu Jul 30 14:04:31.280904 2026] [security2:error] [pid 3395903:tid 3395903] [client 43.165.2.110:34468] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.co.uk"] [uri "/"] [unique_id "amtL3zvxHuwR8-RNgr9wWwAAACI"]
[Thu Jul 30 14:04:32.066179 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.153.119.119:37110] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtL4OmHZwuO5n5uynCKpAAAAA8"], referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 14:04:32.068008 2026] [authz_core:error] [pid 3405082:tid 3405082] [client 43.153.119.119:37110] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 14:04:32.070672 2026] [authz_core:error] [pid 3405082:tid 3405082] [client 43.153.119.119:37110] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 14:04:32.085340 2026] [security2:error] [pid 3389922:tid 3389922] [client 43.153.119.119:37152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtL4OO-WfI2uJy4ZXF3jAAAAB8"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 14:04:32.087327 2026] [authz_core:error] [pid 3389922:tid 3389922] [client 43.153.119.119:37152] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 14:04:32.090085 2026] [authz_core:error] [pid 3389922:tid 3389922] [client 43.153.119.119:37152] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 14:04:32.378833 2026] [security2:error] [pid 3408466:tid 3408466] [client 43.130.139.177:42396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchellphotography.co.uk"] [uri "/"] [unique_id "amtL4JeNHwRHqdzRkMHbZQAAADU"]
[Thu Jul 30 14:04:32.427212 2026] [security2:error] [pid 3384092:tid 3384092] [client 43.131.26.226:36178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtL4D9zJZaLedVTd5F89wAAAAQ"]
[Thu Jul 30 14:04:32.529213 2026] [security2:error] [pid 3395903:tid 3395903] [client 43.131.26.226:36380] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.fr"] [uri "/"] [unique_id "amtL4DvxHuwR8-RNgr9wXAAAACI"]
[Thu Jul 30 14:04:32.598960 2026] [security2:error] [pid 3394269:tid 3394269] [client 43.153.36.110:39850] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "innerspacer.co.uk"] [uri "/"] [unique_id "amtL4Opz0E8PnfH1tOU9aAAAAAI"]
[Thu Jul 30 14:04:33.401762 2026] [security2:error] [pid 3408062:tid 3408062] [client 43.157.22.57:55014] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtL4SviTpVyy2rrdN66iwAAAAE"], referer: http://baketastic.co.uk
[Thu Jul 30 14:04:33.496131 2026] [security2:error] [pid 3386775:tid 3386775] [client 43.130.3.122:45938] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amtL4dG6CuEZHFTsq5sWVAAAACM"]
[Thu Jul 30 14:04:33.939583 2026] [ssl:error] [pid 3400902:tid 3400902] (EAI 2)Name or service not known: [client 144.76.19.72:52658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:33.939614 2026] [ssl:error] [pid 3400902:tid 3400902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:33.944093 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.131.26.226:35854] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtL4emHZwuO5n5uynCKpQAAAA8"], referer: http://orgent.eu
[Thu Jul 30 14:04:33.992738 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:52668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:33.992771 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:34.030956 2026] [security2:error] [pid 3387425:tid 3387425] [client 43.131.26.226:35912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtL4lvYFVpQVe__AQ29KQAAADE"], referer: http://orgent.fr
[Thu Jul 30 14:04:34.265251 2026] [security2:error] [pid 3390327:tid 3390327] [client 43.131.32.36:41314] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spurr.org.uk"] [uri "/"] [unique_id "amtL4m5YtyeXchu3PmT3SAAAADI"]
[Thu Jul 30 14:04:34.479405 2026] [security2:error] [pid 3401253:tid 3401253] [client 102.210.25.165:60952] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtL4sJwlYAQIQVxrd_bgAAAABY"]
[Thu Jul 30 14:04:34.479479 2026] [security2:error] [pid 3401253:tid 3401253] [client 102.210.25.165:60952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtL4sJwlYAQIQVxrd_bgAAAABY"]
[Thu Jul 30 14:04:34.479804 2026] [security2:error] [pid 3401253:tid 3401253] [client 102.210.25.165:60952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtL4sJwlYAQIQVxrd_bgAAAABY"]
[Thu Jul 30 14:04:34.593803 2026] [security2:error] [pid 3404744:tid 3404744] [client 43.130.16.140:51048] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amtL4tiTihwb1_4WywN8DwAAAAc"]
[Thu Jul 30 14:04:34.992400 2026] [security2:error] [pid 3408467:tid 3408467] [client 43.131.26.226:38896] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amtL4pedtGSkKx0X0srI4QAAADY"]
[Thu Jul 30 14:04:35.745318 2026] [authz_core:error] [pid 3389922:tid 3389922] [client 66.249.66.33:40287] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:04:35.748058 2026] [authz_core:error] [pid 3389922:tid 3389922] [client 66.249.66.33:40287] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:04:35.815555 2026] [security2:error] [pid 3408467:tid 3408467] [client 43.156.228.27:44232] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "amtL45edtGSkKx0X0srI4gAAADY"]
[Thu Jul 30 14:04:35.950440 2026] [security2:error] [pid 3401253:tid 3401253] [client 43.159.152.187:43086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "refraction.co.uk"] [uri "/"] [unique_id "amtL48JwlYAQIQVxrd_bggAAABY"]
[Thu Jul 30 14:04:37.046446 2026] [ssl:error] [pid 3408467:tid 3408467] (EAI 2)Name or service not known: [client 144.76.19.72:52684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:37.046501 2026] [ssl:error] [pid 3408467:tid 3408467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:37.103170 2026] [ssl:error] [pid 3394867:tid 3394867] (EAI 2)Name or service not known: [client 144.76.19.72:52700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:37.103227 2026] [ssl:error] [pid 3394867:tid 3394867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:38.896105 2026] [security2:error] [pid 3389921:tid 3389921] [client 85.208.96.204:64522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,959.0/prev_next,next.html"] [unique_id "amtL5jW-x4QBeXeWhTTaSwAAABo"]
[Thu Jul 30 14:04:39.513558 2026] [security2:error] [pid 3408467:tid 3408467] [client 43.130.9.111:50416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtL55edtGSkKx0X0srI5AAAADY"]
[Thu Jul 30 14:04:39.969294 2026] [security2:error] [pid 3408461:tid 3408461] [client 43.130.9.111:51424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sewyork.co.uk"] [uri "/"] [unique_id "amtL5wQauw0GrNIUd9S86QAAACg"]
[Thu Jul 30 14:04:40.339261 2026] [security2:error] [pid 3371171:tid 3371171] [client 43.157.95.131:47856] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtL6LjSa_6d1LMVapbgQwAAAC0"]
[Thu Jul 30 14:04:40.340740 2026] [ssl:error] [pid 3406375:tid 3406375] (EAI 2)Name or service not known: [client 144.76.19.72:28346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:40.340770 2026] [ssl:error] [pid 3406375:tid 3406375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:40.395633 2026] [ssl:error] [pid 3409395:tid 3409395] (EAI 2)Name or service not known: [client 144.76.19.72:28362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:40.395678 2026] [ssl:error] [pid 3409395:tid 3409395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:40.887790 2026] [security2:error] [pid 3394269:tid 3394269] [client 43.131.45.213:45210] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtL6Opz0E8PnfH1tOU9awAAAAI"], referer: http://rock-ola.co.uk
[Thu Jul 30 14:04:41.923637 2026] [security2:error] [pid 3394870:tid 3394870] [client 170.106.35.187:59744] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "amtL6T2k6d7jGtQhtZ9fKAAAACE"]
[Thu Jul 30 14:04:42.960283 2026] [security2:error] [pid 3404744:tid 3404744] [client 43.157.95.131:58068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtL6tiTihwb1_4WywN8EgAAAAc"], referer: http://maisongerlyn.be
[Thu Jul 30 14:04:42.974674 2026] [security2:error] [pid 3409452:tid 3409452] [client 43.131.45.213:55174] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtL6kpJ8TE4hy3wSJF5eAAAACs"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 14:04:43.372805 2026] [security2:error] [pid 3408461:tid 3408461] [client 43.130.9.111:60802] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtL6wQauw0GrNIUd9S87AAAACg"], referer: http://prosperon.co.uk
[Thu Jul 30 14:04:43.451057 2026] [ssl:error] [pid 3386347:tid 3386347] (EAI 2)Name or service not known: [client 144.76.19.72:28366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:43.451124 2026] [ssl:error] [pid 3386347:tid 3386347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:43.507049 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:28382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:43.507100 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:44.127857 2026] [security2:error] [pid 3408464:tid 3408464] [client 43.130.57.76:49902] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tripodhome.co.uk"] [uri "/"] [unique_id "amtL7B_0edwS_slxEiyU0AAAADM"]
[Thu Jul 30 14:04:46.558925 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:28396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:46.558967 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:46.612347 2026] [ssl:error] [pid 3408356:tid 3408356] (EAI 2)Name or service not known: [client 144.76.19.72:28412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:46.612387 2026] [ssl:error] [pid 3408356:tid 3408356] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:47.536146 2026] [security2:error] [pid 3408357:tid 3408357] [client 43.130.40.120:53986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtL7-0Dnky2rPETB61wrQAAABs"]
[Thu Jul 30 14:04:48.701599 2026] [security2:error] [pid 3409344:tid 3409344] [client 43.161.217.205:39142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amtL8ALL73wWahOlSRTyegAAAAQ"]
[Thu Jul 30 14:04:49.666598 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:42608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:49.666648 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:49.727520 2026] [ssl:error] [pid 3404744:tid 3404744] (EAI 2)Name or service not known: [client 144.76.19.72:42612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:49.727549 2026] [ssl:error] [pid 3404744:tid 3404744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:50.117812 2026] [security2:error] [pid 3409450:tid 3409450] [client 43.135.133.241:38990] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "inrc.org.uk"] [uri "/"] [unique_id "amtL8rrEIFbE4xHm1y3ssgAAACU"]
[Thu Jul 30 14:04:51.849848 2026] [security2:error] [pid 3404744:tid 3404744] [client 43.161.217.205:52998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amtL89iTihwb1_4WywN8FQAAAAc"], referer: http://hazardous-materials.co.uk
[Thu Jul 30 14:04:52.311839 2026] [security2:error] [pid 3408357:tid 3408357] [client 43.130.40.120:57446] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtL9O0Dnky2rPETB61wrwAAABs"]
[Thu Jul 30 14:04:52.583365 2026] [security2:error] [pid 3408415:tid 3408415] [client 43.130.40.120:57622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtL9Bz-UNb2axbQ_2m0pgAAACQ"]
[Thu Jul 30 14:04:52.584995 2026] [authz_core:error] [pid 3408415:tid 3408415] [client 43.130.40.120:57622] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:04:52.586742 2026] [authz_core:error] [pid 3408415:tid 3408415] [client 43.130.40.120:57622] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:04:52.781284 2026] [ssl:error] [pid 3402465:tid 3402465] (EAI 2)Name or service not known: [client 144.76.19.72:42624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:52.781324 2026] [ssl:error] [pid 3402465:tid 3402465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:52.832721 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:42630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:52.832752 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:52.917849 2026] [security2:error] [pid 3408466:tid 3408466] [client 43.135.134.127:60710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "render-farm.co.uk"] [uri "/"] [unique_id "amtL9JeNHwRHqdzRkMHbzQAAADU"]
[Thu Jul 30 14:04:53.299828 2026] [security2:error] [pid 3405248:tid 3405248] [client 43.166.247.82:57552] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.co.uk"] [uri "/"] [unique_id "amtL9TKxh_YwJMwOThAPTgAAABI"]
[Thu Jul 30 14:04:53.302968 2026] [authz_core:error] [pid 3405248:tid 3405248] [client 43.166.247.82:57552] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:04:53.308929 2026] [authz_core:error] [pid 3405248:tid 3405248] [client 43.166.247.82:57552] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:04:53.527999 2026] [security2:error] [pid 3408357:tid 3408357] [client 43.166.136.24:36138] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mcgarvey.co.uk"] [uri "/"] [unique_id "amtL9e0Dnky2rPETB61wsAAAABs"]
[Thu Jul 30 14:04:53.609840 2026] [security2:error] [pid 3408465:tid 3408465] [client 43.166.247.82:57998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amtL9ew63Rj48T-vgP3OYAAAADQ"]
[Thu Jul 30 14:04:54.442398 2026] [security2:error] [pid 3390327:tid 3390327] [client 49.51.245.241:33834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amtL9m5YtyeXchu3PmT3TQAAADI"]
[Thu Jul 30 14:04:55.174879 2026] [security2:error] [pid 3408461:tid 3408461] [client 43.130.40.120:52496] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtL9wQauw0GrNIUd9S87wAAACg"], referer: http://blow-hairstudio.co.uk
[Thu Jul 30 14:04:55.461374 2026] [security2:error] [pid 3409453:tid 3409453] [client 43.130.40.120:60360] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.be"] [uri "/"] [unique_id "amtL9wmwS7EqQjoDhg681QAAAC4"]
[Thu Jul 30 14:04:55.907316 2026] [ssl:error] [pid 3394269:tid 3394269] (EAI 2)Name or service not known: [client 144.76.19.72:42642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:55.907354 2026] [ssl:error] [pid 3394269:tid 3394269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:55.960486 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:42654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:55.960514 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:56.796284 2026] [security2:error] [pid 3408461:tid 3408461] [client 85.208.96.210:14884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11551.0.html"] [unique_id "amtL-AQauw0GrNIUd9S88QAAACg"]
[Thu Jul 30 14:04:57.578187 2026] [core:error] [pid 3405469:tid 3405469] (13)Permission denied: [client 216.73.216.199:50682] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS3/uartclk
[Thu Jul 30 14:04:57.944772 2026] [security2:error] [pid 3408461:tid 3408461] [client 43.130.40.120:54828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtL-QQauw0GrNIUd9S88gAAACg"], referer: http://orgent.be
[Thu Jul 30 14:04:59.015514 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:42664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:59.015547 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:59.067121 2026] [ssl:error] [pid 3386347:tid 3386347] (EAI 2)Name or service not known: [client 144.76.19.72:42678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:04:59.067155 2026] [ssl:error] [pid 3386347:tid 3386347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:04:59.091658 2026] [security2:error] [pid 3386775:tid 3386775] [client 114.119.132.171:26549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17/request_format~html"] [unique_id "amtL-9G6CuEZHFTsq5sWXAAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17,18/request_format~html
[Thu Jul 30 14:05:00.602167 2026] [security2:error] [pid 3386347:tid 3386347] [client 114.119.132.171:26561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17/request_format~html"] [unique_id "amtL_HM5Fe1-liNsrkeIdQAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17,18/request_format~html
[Thu Jul 30 14:05:01.501234 2026] [security2:error] [pid 3394867:tid 3394867] [client 43.159.144.16:48106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtL_XaygG7JviKTvGsdpwAAABE"], referer: http://banskoexpress.co.uk
[Thu Jul 30 14:05:01.878969 2026] [security2:error] [pid 3408305:tid 3408305] [client 43.132.214.228:55856] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "amtL_SMAhM_IJqLM3RXrJwAAAA0"]
[Thu Jul 30 14:05:02.121751 2026] [ssl:error] [pid 3408467:tid 3408467] (EAI 2)Name or service not known: [client 144.76.19.72:50614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:02.121781 2026] [ssl:error] [pid 3408467:tid 3408467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:02.181283 2026] [ssl:error] [pid 3386347:tid 3386347] (EAI 2)Name or service not known: [client 144.76.19.72:50620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:02.181315 2026] [ssl:error] [pid 3386347:tid 3386347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:02.583025 2026] [core:error] [pid 3405469:tid 3405469] (13)Permission denied: [client 216.73.216.199:50682] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS3/uartclk
[Thu Jul 30 14:05:02.632255 2026] [security2:error] [pid 3410434:tid 3410434] [client 185.191.171.2:12600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9639.0.html"] [unique_id "amtL_os5jlhFOCKFmIuEkgAAACY"]
[Thu Jul 30 14:05:02.768530 2026] [authz_core:error] [pid 3390327:tid 3390327] [client 199.45.155.109:46070] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:05:02.782681 2026] [authz_core:error] [pid 3390327:tid 3390327] [client 199.45.155.109:46070] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:05:03.746357 2026] [security2:error] [pid 3410766:tid 3410766] [client 43.153.26.165:36386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "craft-buddies.co.uk"] [uri "/"] [unique_id "amtL_8obxqLgzyKa4Q0ZeQAAADM"]
[Thu Jul 30 14:05:04.048917 2026] [security2:error] [pid 3406375:tid 3406375] [client 43.159.144.16:36692] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtMANnR9loTAey_HIVXLwAAAAU"], referer: http://www.banskoexpress.com
[Thu Jul 30 14:05:04.170214 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/geju.php
[Thu Jul 30 14:05:04.170265 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:04.282582 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.311625 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp.php
[Thu Jul 30 14:05:04.311676 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:04.397542 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aaa.php
[Thu Jul 30 14:05:04.397593 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:04.461570 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/hoot.php
[Thu Jul 30 14:05:04.461622 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:04.490459 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about.php
[Thu Jul 30 14:05:04.490510 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:04.522176 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin.php
[Thu Jul 30 14:05:04.522237 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:04.553757 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.633873 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.662487 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.691726 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.720403 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.753332 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.781845 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.841510 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/content.php
[Thu Jul 30 14:05:04.841560 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:04.874576 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.903540 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:04.933439 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:05.054230 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:05.143114 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:05.173342 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:05.238248 2026] [ssl:error] [pid 3410826:tid 3410826] (EAI 2)Name or service not known: [client 144.76.19.72:50626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:05.238305 2026] [ssl:error] [pid 3410826:tid 3410826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:05.261621 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.291254 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.296581 2026] [ssl:error] [pid 3391736:tid 3391736] (EAI 2)Name or service not known: [client 144.76.19.72:50640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:05.296623 2026] [ssl:error] [pid 3391736:tid 3391736] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:05.431522 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.493737 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.569328 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:05.597993 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:05.628756 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/about.php
[Thu Jul 30 14:05:05.628822 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:05.657479 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.716164 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.745489 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/img
[Thu Jul 30 14:05:05.758938 2026] [security2:error] [pid 3408415:tid 3408415] [client 43.130.102.223:48630] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtMARz-UNb2axbQ_2m0ugAAACQ"]
[Thu Jul 30 14:05:05.781967 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:05.811222 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.843641 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes.bak
[Thu Jul 30 14:05:05.872667 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:05.908883 2026] [security2:error] [pid 3410826:tid 3410826] [client 170.106.160.90:54134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amtMAe3nXl-wRa9SxuEUoAAAADg"]
[Thu Jul 30 14:05:05.934474 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:06.049949 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:06.063395 2026] [security2:error] [pid 3406375:tid 3406375] [client 43.132.214.228:33456] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtMAtnR9loTAey_HIVXMAAAAAU"], referer: http://purple-childcare.co.uk
[Thu Jul 30 14:05:06.103056 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:05:06.179678 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:06.327937 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:06.357883 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:06.430612 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:06.459688 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:06.489763 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:06.518086 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images/about.php
[Thu Jul 30 14:05:06.518136 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:06.590212 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:06.620409 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:06.697919 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:06.727285 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cgi-bin/about.php
[Thu Jul 30 14:05:06.727351 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:06.757631 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:06.786205 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:06.867901 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:06.923862 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:06.999021 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:05:07.079334 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/cloud.php
[Thu Jul 30 14:05:07.079395 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:07.088077 2026] [security2:error] [pid 3410891:tid 3410891] [client 3.211.181.86:4728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/defenders-trio/"] [unique_id "amtMA-PvFN8NkirjtcyEGwAAAD4"]
[Thu Jul 30 14:05:07.108310 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.183120 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cloud.php
[Thu Jul 30 14:05:07.183170 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:07.211639 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cgi-bin/cloud.php
[Thu Jul 30 14:05:07.211693 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:07.275496 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:07.307668 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/css
[Thu Jul 30 14:05:07.341481 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.370567 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/img
[Thu Jul 30 14:05:07.412177 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.545925 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.574813 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/avaa.php
[Thu Jul 30 14:05:07.574883 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:07.666586 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images/cloud.php
[Thu Jul 30 14:05:07.666640 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:07.697122 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.728578 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:07.758516 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.787088 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.816166 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.846565 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:07.920285 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/updates.php
[Thu Jul 30 14:05:07.920332 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:07.950724 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/libraries/legacy
[Thu Jul 30 14:05:08.022285 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/libraries/phpmailer/updates.php
[Thu Jul 30 14:05:08.022380 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:08.050941 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/libraries/vendor
[Thu Jul 30 14:05:08.117215 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/alfa-rex.php7
[Thu Jul 30 14:05:08.117265 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:08.171279 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/alfanew.php
[Thu Jul 30 14:05:08.171361 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:08.200205 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:08.230373 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:08.255231 2026] [security2:error] [pid 3408356:tid 3408356] [client 43.130.102.223:53382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amtMBKZUFe4snzUmAb5FUwAAABk"], referer: http://berehap.be
[Thu Jul 30 14:05:08.292785 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-p.php7
[Thu Jul 30 14:05:08.292833 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:05:08.298855 2026] [security2:error] [pid 3405248:tid 3405248] [client 150.109.10.41:35244] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "amtMBDKxh_YwJMwOThAPUgAAABI"]
[Thu Jul 30 14:05:08.321559 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 14:05:08.350612 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 14:05:08.351219 2026] [ssl:error] [pid 3371171:tid 3371171] (EAI 2)Name or service not known: [client 144.76.19.72:50648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:08.351266 2026] [ssl:error] [pid 3371171:tid 3371171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:08.380394 2026] [access_compat:error] [pid 3408305:tid 3408305] [client 20.203.148.31:1686] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 14:05:08.407413 2026] [ssl:error] [pid 3410433:tid 3410433] (EAI 2)Name or service not known: [client 144.76.19.72:50650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:08.407442 2026] [ssl:error] [pid 3410433:tid 3410433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:09.457910 2026] [security2:error] [pid 3410433:tid 3410433] [client 43.166.244.251:56162] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "leaccess.co.uk"] [uri "/"] [unique_id "amtMBdLFBp6lrTtAtnSNeAAAACE"]
[Thu Jul 30 14:05:09.491801 2026] [security2:error] [pid 3398121:tid 3398121] [client 43.135.134.127:47096] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amtMBcy1Smuam4xb-rENHgAAACk"]
[Thu Jul 30 14:05:10.614689 2026] [security2:error] [pid 3408412:tid 3408412] [client 150.109.10.41:37442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtMBltJ-LwOL135vD6cAAAAABw"], referer: http://spamp.co.uk
[Thu Jul 30 14:05:10.919945 2026] [security2:error] [pid 3410826:tid 3410826] [client 23.21.148.226:14719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/free-reads/black-op-web/"] [unique_id "amtMBu3nXl-wRa9SxuEUogAAADg"]
[Thu Jul 30 14:05:11.202436 2026] [security2:error] [pid 3410371:tid 3410371] [client 43.130.102.223:56144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtMBw00eQd_77GfQ7EBxwAAABg"], referer: https://www.berehap.be/
[Thu Jul 30 14:05:11.464164 2026] [ssl:error] [pid 3409450:tid 3409450] (EAI 2)Name or service not known: [client 144.76.19.72:56758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:11.464212 2026] [ssl:error] [pid 3409450:tid 3409450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:11.519290 2026] [ssl:error] [pid 3386347:tid 3386347] (EAI 2)Name or service not known: [client 144.76.19.72:56770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:11.519325 2026] [ssl:error] [pid 3386347:tid 3386347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:11.574676 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:05:11.604651 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 14:05:11.604705 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:11.635244 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 14:05:11.635300 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:11.709041 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/66.php
[Thu Jul 30 14:05:11.709104 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:11.809496 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-edit.php
[Thu Jul 30 14:05:11.809544 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:11.840598 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 14:05:11.840641 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:11.870264 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/bgymj.php
[Thu Jul 30 14:05:11.870304 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:11.935289 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ah25.php
[Thu Jul 30 14:05:11.935332 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:11.965138 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/main.php
[Thu Jul 30 14:05:11.965183 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.000328 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/new4.php
[Thu Jul 30 14:05:12.000372 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.184387 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 14:05:12.184434 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.286344 2026] [security2:error] [pid 3397364:tid 3397364] [client 43.135.134.127:46600] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amtMCMIJl8C0Q4Bd_EOfYgAAAAk"], referer: http://glottalstop.co.uk
[Thu Jul 30 14:05:12.323640 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 14:05:12.323685 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.355036 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/a2.php
[Thu Jul 30 14:05:12.355096 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.384862 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:05:12.414572 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/0.php
[Thu Jul 30 14:05:12.414614 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.458259 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 14:05:12.458304 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.562155 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/plss3.php
[Thu Jul 30 14:05:12.562198 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.666016 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 14:05:12.666082 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.704143 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 14:05:12.704188 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.852198 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/aq.php
[Thu Jul 30 14:05:12.852242 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.882764 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:05:12.913360 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 14:05:12.913418 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:12.944570 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/public
[Thu Jul 30 14:05:13.056426 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wsd.php
[Thu Jul 30 14:05:13.056491 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.087400 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/gecko-litespeed.php
[Thu Jul 30 14:05:13.087469 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.117353 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/nw.php
[Thu Jul 30 14:05:13.117405 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.147338 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:05:13.269705 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-the.php
[Thu Jul 30 14:05:13.269760 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.366647 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/myfile.php
[Thu Jul 30 14:05:13.366695 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.397850 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 14:05:13.397904 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.428038 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 14:05:13.428099 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.457912 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/fs.php
[Thu Jul 30 14:05:13.457964 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.488270 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ff.php
[Thu Jul 30 14:05:13.488338 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.533077 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/axx.php
[Thu Jul 30 14:05:13.533138 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.563000 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-access.php
[Thu Jul 30 14:05:13.563051 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.592876 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/Sanskrit.php
[Thu Jul 30 14:05:13.592930 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.641176 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 14:05:13.641240 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.698623 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins.php
[Thu Jul 30 14:05:13.698681 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.730960 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/style.php
[Thu Jul 30 14:05:13.731019 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.761354 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-act.php
[Thu Jul 30 14:05:13.761446 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.924293 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:05:13.963812 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 14:05:13.963861 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:13.994050 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:05:14.023965 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ms.php
[Thu Jul 30 14:05:14.024018 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.054059 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 14:05:14.054120 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.105797 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/06.php
[Thu Jul 30 14:05:14.105882 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.310321 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 14:05:14.310400 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.340590 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ol.php
[Thu Jul 30 14:05:14.340669 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.374489 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/X57.php
[Thu Jul 30 14:05:14.374574 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.422540 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/file59.php
[Thu Jul 30 14:05:14.422633 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.575627 2026] [ssl:error] [pid 3397364:tid 3397364] (EAI 2)Name or service not known: [client 144.76.19.72:56786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:14.575672 2026] [ssl:error] [pid 3397364:tid 3397364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:14.617277 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/vx.php
[Thu Jul 30 14:05:14.617335 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.627650 2026] [ssl:error] [pid 3410273:tid 3410273] (EAI 2)Name or service not known: [client 144.76.19.72:56790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:14.627690 2026] [ssl:error] [pid 3410273:tid 3410273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:14.647618 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/prv8.php
[Thu Jul 30 14:05:14.647675 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.687975 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/166.php
[Thu Jul 30 14:05:14.688062 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.718093 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/we.php
[Thu Jul 30 14:05:14.718152 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.748179 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:05:14.778233 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:05:14.810217 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/a1vx.php
[Thu Jul 30 14:05:14.810272 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.840409 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 14:05:14.840477 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.870158 2026] [security2:error] [pid 3410766:tid 3410766] [client 150.109.10.41:40900] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtMCsobxqLgzyKa4Q0ZfQAAADM"], referer: http://spamp.com/
[Thu Jul 30 14:05:14.870362 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/666.php
[Thu Jul 30 14:05:14.870416 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.900792 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/cu.php
[Thu Jul 30 14:05:14.900868 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.930957 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/re.php
[Thu Jul 30 14:05:14.931047 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:14.966123 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:05:15.015903 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:05:15.056083 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/kj.php
[Thu Jul 30 14:05:15.056982 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.088653 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:05:15.137370 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/styll.php
[Thu Jul 30 14:05:15.137431 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.190893 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 14:05:15.190949 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.223676 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/aw.php
[Thu Jul 30 14:05:15.223735 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.248772 2026] [security2:error] [pid 3405248:tid 3405248] [client 3.224.205.25:41697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/the-twickenham-trials/"] [unique_id "amtMCzKxh_YwJMwOThAPVQAAABI"]
[Thu Jul 30 14:05:15.267388 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/xqq.php
[Thu Jul 30 14:05:15.267446 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.271573 2026] [security2:error] [pid 3402465:tid 3402465] [client 49.51.178.45:53092] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highcleresyndicates.co.uk"] [uri "/"] [unique_id "amtMCy-BftzBZM0Wn2IRKAAAAC8"]
[Thu Jul 30 14:05:15.302023 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:05:15.348026 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-update.php
[Thu Jul 30 14:05:15.348091 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.378234 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 14:05:15.378297 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.413291 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/opts.php
[Thu Jul 30 14:05:15.413346 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.579859 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/manager.php
[Thu Jul 30 14:05:15.579915 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.609967 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:05:15.851994 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/8xyz.php
[Thu Jul 30 14:05:15.852039 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.895140 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 14:05:15.895188 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.924919 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/gifclass.php
[Thu Jul 30 14:05:15.924958 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.957872 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ws60.php
[Thu Jul 30 14:05:15.957915 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:15.987657 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/ff1.php
[Thu Jul 30 14:05:15.987703 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:16.033799 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/init.php
[Thu Jul 30 14:05:16.033846 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:16.067230 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/grsiuk.php
[Thu Jul 30 14:05:16.067275 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:16.260002 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/admin.php
[Thu Jul 30 14:05:16.260040 2026] [access_compat:error] [pid 3394269:tid 3394269] [client 20.203.221.142:16577] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:05:16.573738 2026] [access_compat:error] [pid 3400902:tid 3400902] [client 45.158.164.139:47690] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:05:17.681798 2026] [ssl:error] [pid 3408412:tid 3408412] (EAI 2)Name or service not known: [client 144.76.19.72:56806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:17.681860 2026] [ssl:error] [pid 3408412:tid 3408412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:17.735871 2026] [ssl:error] [pid 3408461:tid 3408461] (EAI 2)Name or service not known: [client 144.76.19.72:56810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:17.735923 2026] [ssl:error] [pid 3408461:tid 3408461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:18.751804 2026] [security2:error] [pid 3386775:tid 3386775] [client 185.191.171.11:53076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/jack-armstrong-obituary"] [unique_id "amtMDtG6CuEZHFTsq5sWYwAAACM"]
[Thu Jul 30 14:05:19.304410 2026] [security2:error] [pid 3405248:tid 3405248] [client 98.84.70.201:24769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/tag/premier-league-reading-stars/"] [unique_id "amtMDzKxh_YwJMwOThAPVwAAABI"]
[Thu Jul 30 14:05:20.791051 2026] [ssl:error] [pid 3408356:tid 3408356] (EAI 2)Name or service not known: [client 144.76.19.72:39054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:20.791109 2026] [ssl:error] [pid 3408356:tid 3408356] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:20.852575 2026] [ssl:error] [pid 3404744:tid 3404744] (EAI 2)Name or service not known: [client 144.76.19.72:39058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:20.852607 2026] [ssl:error] [pid 3404744:tid 3404744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:23.910522 2026] [ssl:error] [pid 3394269:tid 3394269] (EAI 2)Name or service not known: [client 144.76.19.72:39074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:23.910554 2026] [ssl:error] [pid 3394269:tid 3394269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:23.968566 2026] [ssl:error] [pid 3410825:tid 3410825] (EAI 2)Name or service not known: [client 144.76.19.72:39078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:23.968608 2026] [ssl:error] [pid 3410825:tid 3410825] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:24.081913 2026] [security2:error] [pid 3410888:tid 3410888] [client 54.83.56.1:16117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/italian-d-day-dog/"] [unique_id "amtMFDpX6RIcSJvTm4PChwAAADw"]
[Thu Jul 30 14:05:24.325138 2026] [security2:error] [pid 3394269:tid 3394269] [client 43.166.239.145:38680] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "amtMFOpz0E8PnfH1tOU96gAAAAI"]
[Thu Jul 30 14:05:27.071966 2026] [ssl:error] [pid 3410273:tid 3410273] (EAI 2)Name or service not known: [client 144.76.19.72:39086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:27.072028 2026] [ssl:error] [pid 3410273:tid 3410273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:27.125346 2026] [ssl:error] [pid 3400902:tid 3400902] (EAI 2)Name or service not known: [client 144.76.19.72:39102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:27.125393 2026] [ssl:error] [pid 3400902:tid 3400902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:27.482041 2026] [security2:error] [pid 3389922:tid 3389922] [client 35.169.102.85:30717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/rugby-academy/rugby-academy-2/"] [unique_id "amtMF-O-WfI2uJy4ZXF3nQAAAB8"]
[Thu Jul 30 14:05:27.588146 2026] [core:error] [pid 3405469:tid 3405469] (13)Permission denied: [client 216.73.216.199:50682] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS3/uartclk
[Thu Jul 30 14:05:30.215001 2026] [ssl:error] [pid 3404302:tid 3404302] (EAI 2)Name or service not known: [client 144.76.19.72:34878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:30.215036 2026] [ssl:error] [pid 3404302:tid 3404302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:30.269822 2026] [ssl:error] [pid 3410889:tid 3410889] (EAI 2)Name or service not known: [client 144.76.19.72:34888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:30.269879 2026] [ssl:error] [pid 3410889:tid 3410889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:31.133481 2026] [security2:error] [pid 3402408:tid 3402408] [client 18.211.39.188:48078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/angel-of-grasmere/sheep/"] [unique_id "amtMG7SxhoNpuqRv1ibr6QAAACA"]
[Thu Jul 30 14:05:32.875605 2026] [ssl:error] [pid 3402408:tid 3402408] (70014)End of file found: [client 216.73.216.199:38531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:05:33.327753 2026] [ssl:error] [pid 3410434:tid 3410434] (EAI 2)Name or service not known: [client 144.76.19.72:34904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:33.327794 2026] [ssl:error] [pid 3410434:tid 3410434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:33.380548 2026] [ssl:error] [pid 3412227:tid 3412227] (EAI 2)Name or service not known: [client 144.76.19.72:34920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:33.380584 2026] [ssl:error] [pid 3412227:tid 3412227] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:34.815522 2026] [security2:error] [pid 3386775:tid 3386775] [client 34.225.24.180:33878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/british-fell-running-champion-angela-mudge/"] [unique_id "amtMHtG6CuEZHFTsq5sWaQAAACM"]
[Thu Jul 30 14:05:36.436554 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:34922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:36.436591 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:36.488124 2026] [ssl:error] [pid 3410892:tid 3410892] (EAI 2)Name or service not known: [client 144.76.19.72:34924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:36.488171 2026] [ssl:error] [pid 3410892:tid 3410892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:38.333078 2026] [ssl:error] [pid 3412227:tid 3412227] (EAI 2)Name or service not known: [client 192.175.111.247:11698] AH01972: could not resolve address of OCSP responder r3.o.lencr.org
[Thu Jul 30 14:05:38.333121 2026] [ssl:error] [pid 3412227:tid 3412227] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:38.916540 2026] [security2:error] [pid 3410892:tid 3410892] [client 3.224.104.67:29700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/meet-me/edinburgh/"] [unique_id "amtMIkwFTD22d2kMu_CKYgAAAD8"]
[Thu Jul 30 14:05:38.939727 2026] [security2:error] [pid 3387425:tid 3387425] [client 42.104.217.5:59015] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMIlvYFVpQVe__AQ29OgAAADE"]
[Thu Jul 30 14:05:38.939777 2026] [security2:error] [pid 3387425:tid 3387425] [client 42.104.217.5:59015] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMIlvYFVpQVe__AQ29OgAAADE"]
[Thu Jul 30 14:05:38.940059 2026] [security2:error] [pid 3387425:tid 3387425] [client 42.104.217.5:59015] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMIlvYFVpQVe__AQ29OgAAADE"]
[Thu Jul 30 14:05:39.617540 2026] [ssl:error] [pid 3405082:tid 3405082] (EAI 2)Name or service not known: [client 144.76.19.72:21648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:39.617573 2026] [ssl:error] [pid 3405082:tid 3405082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:39.669438 2026] [ssl:error] [pid 3410826:tid 3410826] (EAI 2)Name or service not known: [client 144.76.19.72:21652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:39.669486 2026] [ssl:error] [pid 3410826:tid 3410826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:40.385916 2026] [authz_core:error] [pid 3389921:tid 3389921] [client 199.45.155.109:38382] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:05:40.394558 2026] [authz_core:error] [pid 3389921:tid 3389921] [client 199.45.155.109:38382] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:05:41.191757 2026] [security2:error] [pid 3410887:tid 3410887] [client 43.157.22.109:45456] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "amtMJSXPeN3-lnBdsh6g6QAAADs"]
[Thu Jul 30 14:05:41.355468 2026] [security2:error] [pid 3410889:tid 3410889] [client 82.208.113.121:12273] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMJRiPsFeMy6F1mdzGowAAAD0"]
[Thu Jul 30 14:05:41.355518 2026] [security2:error] [pid 3410889:tid 3410889] [client 82.208.113.121:12273] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMJRiPsFeMy6F1mdzGowAAAD0"]
[Thu Jul 30 14:05:41.355761 2026] [security2:error] [pid 3410889:tid 3410889] [client 82.208.113.121:12273] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMJRiPsFeMy6F1mdzGowAAAD0"]
[Thu Jul 30 14:05:41.875840 2026] [security2:error] [pid 3401253:tid 3401253] [client 74.7.227.8:59878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.clucasdesign.com"] [uri "/"] [unique_id "amtMJcJwlYAQIQVxrd_bhAAAABY"]
[Thu Jul 30 14:05:41.911367 2026] [security2:error] [pid 3395903:tid 3395903] [client 43.157.22.109:46530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtMJTvxHuwR8-RNgr9w0QAAACI"], referer: http://www.all4s.co.uk
[Thu Jul 30 14:05:42.515009 2026] [security2:error] [pid 3405357:tid 3405357] [client 47.128.44.240:47538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dev.ppcl.com"] [uri "/robots.txt"] [unique_id "amtMJumXWMRt5tePmnPQHwAAABM"]
[Thu Jul 30 14:05:42.725601 2026] [ssl:error] [pid 3412225:tid 3412225] (EAI 2)Name or service not known: [client 144.76.19.72:21668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:42.725639 2026] [ssl:error] [pid 3412225:tid 3412225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:42.779140 2026] [ssl:error] [pid 3402408:tid 3402408] (EAI 2)Name or service not known: [client 144.76.19.72:21672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:42.779166 2026] [ssl:error] [pid 3402408:tid 3402408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:42.877602 2026] [security2:error] [pid 3410887:tid 3410887] [client 98.84.200.43:6857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/historical-fiction-author-visits/deuog73xuaaf_wr/"] [unique_id "amtMJiXPeN3-lnBdsh6g6gAAADs"]
[Thu Jul 30 14:05:43.170918 2026] [ssl:error] [pid 3410824:tid 3410824] (70014)End of file found: [client 216.73.216.199:38322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:05:43.715934 2026] [security2:error] [pid 3401253:tid 3401253] [client 170.106.161.78:40076] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "loca.co.uk"] [uri "/"] [unique_id "amtMJ8JwlYAQIQVxrd_bhQAAABY"]
[Thu Jul 30 14:05:43.975555 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.166.240.231:52582] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "epmsonline.co.uk"] [uri "/"] [unique_id "amtMJ-3nXl-wRa9SxuEUrgAAADg"]
[Thu Jul 30 14:05:44.546561 2026] [lsapi:warn] [pid 3410826:tid 3410826] [client 43.166.240.231:52582] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:05:44.856465 2026] [security2:error] [pid 3405469:tid 3405469] [client 103.151.46.118:38504] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMKJm3qRr65dhd7zYDbwAAAB0"]
[Thu Jul 30 14:05:44.856528 2026] [security2:error] [pid 3405469:tid 3405469] [client 103.151.46.118:38504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMKJm3qRr65dhd7zYDbwAAAB0"]
[Thu Jul 30 14:05:44.856792 2026] [security2:error] [pid 3405469:tid 3405469] [client 103.151.46.118:38504] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMKJm3qRr65dhd7zYDbwAAAB0"]
[Thu Jul 30 14:05:45.837417 2026] [ssl:error] [pid 3406375:tid 3406375] (EAI 2)Name or service not known: [client 144.76.19.72:21676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:45.837459 2026] [ssl:error] [pid 3406375:tid 3406375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:45.895505 2026] [ssl:error] [pid 3412225:tid 3412225] (EAI 2)Name or service not known: [client 144.76.19.72:21680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:45.895537 2026] [ssl:error] [pid 3412225:tid 3412225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:46.364226 2026] [authz_core:error] [pid 3405248:tid 3405248] [client 199.45.155.109:42730] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/error_log, referer: https://www.dbstart.com:443/vtigercrm
[Thu Jul 30 14:05:46.660996 2026] [security2:error] [pid 3410433:tid 3410433] [client 43.157.22.109:54840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "amtMKtLFBp6lrTtAtnSN4gAAACE"]
[Thu Jul 30 14:05:46.847116 2026] [security2:error] [pid 3410434:tid 3410434] [client 44.205.192.249:59343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/meet-me/millom/"] [unique_id "amtMKos5jlhFOCKFmIuEowAAACY"]
[Thu Jul 30 14:05:47.326877 2026] [security2:error] [pid 3406375:tid 3406375] [client 43.157.22.109:53912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtMK9nR9loTAey_HIVXbgAAAAU"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 14:05:47.328793 2026] [authz_core:error] [pid 3406375:tid 3406375] [client 43.157.22.109:53912] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 14:05:47.331488 2026] [authz_core:error] [pid 3406375:tid 3406375] [client 43.157.22.109:53912] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 14:05:48.740041 2026] [autoindex:error] [pid 3405248:tid 3405248] [client 199.45.155.109:42730] AH01276: Cannot serve directory /home/winterb/public_html/drupal2/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive, referer: https://www.dbstart.com:443/drupal2
[Thu Jul 30 14:05:48.953191 2026] [ssl:error] [pid 3410433:tid 3410433] (EAI 2)Name or service not known: [client 144.76.19.72:21696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:48.953223 2026] [ssl:error] [pid 3410433:tid 3410433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:49.006264 2026] [ssl:error] [pid 3410826:tid 3410826] (EAI 2)Name or service not known: [client 144.76.19.72:21708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:49.006292 2026] [ssl:error] [pid 3410826:tid 3410826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:50.099808 2026] [security2:error] [pid 3408415:tid 3408415] [client 43.166.240.231:56668] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "techsuccess.uk"] [uri "/"] [unique_id "amtMLhz-UNb2axbQ_2m0xAAAACQ"]
[Thu Jul 30 14:05:50.510478 2026] [security2:error] [pid 3410826:tid 3410826] [client 51.68.236.91:15833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "banskoexpress.com"] [uri "/robots.txt"] [unique_id "amtMLu3nXl-wRa9SxuEUsAAAADg"]
[Thu Jul 30 14:05:50.603894 2026] [security2:error] [pid 3410889:tid 3410889] [client 51.68.236.91:29609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amtMLhiPsFeMy6F1mdzGpQAAAD0"]
[Thu Jul 30 14:05:50.760790 2026] [security2:error] [pid 3410887:tid 3410887] [client 51.68.236.91:29775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amtMLiXPeN3-lnBdsh6g7QAAADs"]
[Thu Jul 30 14:05:50.784394 2026] [cgi:error] [pid 3405248:tid 3405248] [client 199.45.155.109:42730] AH02812: stderr from /home/winterb/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://www.dbstart.com:443/cgi-bin
[Thu Jul 30 14:05:51.192060 2026] [security2:error] [pid 3402463:tid 3402463] [client 52.204.253.129:41963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/home/euroe-2016-and-the-battle-of-the-somme/"] [unique_id "amtML9acryHj1UHXdgGu3AAAACw"]
[Thu Jul 30 14:05:52.058249 2026] [ssl:error] [pid 3408413:tid 3408413] (EAI 2)Name or service not known: [client 144.76.19.72:60110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:52.058289 2026] [ssl:error] [pid 3408413:tid 3408413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:52.112219 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:60120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:52.112265 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:52.638305 2026] [cgi:error] [pid 3411965:tid 3411965] [client 172.213.208.20:11728] AH02812: stderr from /home/davidebell/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:05:53.366607 2026] [ssl:error] [pid 3405469:tid 3405469] (70014)End of file found: [client 216.73.216.199:21050] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:05:54.757385 2026] [security2:error] [pid 3411886:tid 3411886] [client 52.203.65.83:27540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/about-tom/"] [unique_id "amtMMmFxr_MS-c4By9LwRQAAAAQ"]
[Thu Jul 30 14:05:55.165375 2026] [ssl:error] [pid 3410889:tid 3410889] (EAI 2)Name or service not known: [client 144.76.19.72:60130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:55.165406 2026] [ssl:error] [pid 3410889:tid 3410889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:55.222576 2026] [ssl:error] [pid 3410433:tid 3410433] (EAI 2)Name or service not known: [client 144.76.19.72:60136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:55.222606 2026] [ssl:error] [pid 3410433:tid 3410433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:58.278207 2026] [ssl:error] [pid 3410434:tid 3410434] (EAI 2)Name or service not known: [client 144.76.19.72:60142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:58.278237 2026] [ssl:error] [pid 3410434:tid 3410434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:58.332576 2026] [ssl:error] [pid 3402463:tid 3402463] (EAI 2)Name or service not known: [client 144.76.19.72:60146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:05:58.332623 2026] [ssl:error] [pid 3402463:tid 3402463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:05:58.509784 2026] [authz_core:error] [pid 3405248:tid 3405248] [client 199.45.155.109:42730] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/error_log, referer: https://www.dbstart.com:443/wordpress0
[Thu Jul 30 14:06:00.532839 2026] [security2:error] [pid 3386775:tid 3386775] [client 119.28.177.175:33080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtMONG6CuEZHFTsq5sWcAAAACM"]
[Thu Jul 30 14:06:01.413118 2026] [ssl:error] [pid 3410895:tid 3410895] (EAI 2)Name or service not known: [client 144.76.19.72:56154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:01.413179 2026] [ssl:error] [pid 3410895:tid 3410895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:01.469416 2026] [ssl:error] [pid 3412225:tid 3412225] (EAI 2)Name or service not known: [client 144.76.19.72:56164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:01.469442 2026] [ssl:error] [pid 3412225:tid 3412225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:02.951939 2026] [authz_core:error] [pid 3405248:tid 3405248] [client 199.45.155.109:42730] AH01630: client denied by server configuration: /home/winterb/public_html/naomiwinter/error_log, referer: https://www.dbstart.com:443/naomiwinter
[Thu Jul 30 14:06:04.523664 2026] [ssl:error] [pid 3387425:tid 3387425] (EAI 2)Name or service not known: [client 144.76.19.72:56174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:04.523697 2026] [ssl:error] [pid 3387425:tid 3387425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:04.578438 2026] [ssl:error] [pid 3408413:tid 3408413] (EAI 2)Name or service not known: [client 144.76.19.72:56178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:04.578476 2026] [ssl:error] [pid 3408413:tid 3408413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:06.992436 2026] [security2:error] [pid 3408415:tid 3408415] [client 35.171.117.160:9416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/B.13-Italy-2009-Earthquake.pdf"] [unique_id "amtMPhz-UNb2axbQ_2m0ywAAACQ"]
[Thu Jul 30 14:06:07.015220 2026] [security2:error] [pid 3408062:tid 3408062] [client 54.88.84.219:11611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/CCCM/vol3/ch2/B.4-Iraq-2017-Conflict.pdf"] [unique_id "amtMPyviTpVyy2rrdN66_gAAAAE"]
[Thu Jul 30 14:06:07.634466 2026] [ssl:error] [pid 3410889:tid 3410889] (EAI 2)Name or service not known: [client 144.76.19.72:56194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:07.634518 2026] [ssl:error] [pid 3410889:tid 3410889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:07.688079 2026] [ssl:error] [pid 3408415:tid 3408415] (EAI 2)Name or service not known: [client 144.76.19.72:56200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:07.688117 2026] [ssl:error] [pid 3408415:tid 3408415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:10.745910 2026] [ssl:error] [pid 3414052:tid 3414052] (EAI 2)Name or service not known: [client 144.76.19.72:34370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:10.745953 2026] [ssl:error] [pid 3414052:tid 3414052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:10.799193 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:34382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:10.799215 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:11.041118 2026] [security2:error] [pid 3389922:tid 3389922] [client 3.232.39.98:51985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/CCCM/vol1/Yemen-2009-2013-Conflict.pdf"] [unique_id "amtMQ-O-WfI2uJy4ZXF3tAAAAB8"]
[Thu Jul 30 14:06:11.445422 2026] [security2:error] [pid 3410433:tid 3410433] [client 34.234.197.175:22070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/images.html"] [unique_id "amtMQ9LFBp6lrTtAtnSN7QAAACE"]
[Thu Jul 30 14:06:13.258575 2026] [authz_core:error] [pid 3412225:tid 3412225] [client 66.249.66.33:43885] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:06:13.261336 2026] [authz_core:error] [pid 3412225:tid 3412225] [client 66.249.66.33:43885] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:06:13.854372 2026] [ssl:error] [pid 3409451:tid 3409451] (EAI 2)Name or service not known: [client 144.76.19.72:34388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:13.854403 2026] [ssl:error] [pid 3409451:tid 3409451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:13.910798 2026] [ssl:error] [pid 3413277:tid 3413277] (EAI 2)Name or service not known: [client 144.76.19.72:34396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:13.910825 2026] [ssl:error] [pid 3413277:tid 3413277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:13.933466 2026] [security2:error] [pid 3402463:tid 3402463] [client 43.135.138.128:59462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tompalmer.co.uk"] [uri "/"] [unique_id "amtMRdacryHj1UHXdgGu8wAAACw"]
[Thu Jul 30 14:06:14.445083 2026] [authz_core:error] [pid 3404744:tid 3404744] [client 66.249.66.33:36139] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:06:14.447758 2026] [authz_core:error] [pid 3404744:tid 3404744] [client 66.249.66.33:36139] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:06:14.917241 2026] [security2:error] [pid 3413277:tid 3413277] [client 34.225.24.180:15980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/tshelter-8designs/index.html"] [unique_id "amtMRpWyFzBVd0-jOQIUfAAAAAI"]
[Thu Jul 30 14:06:15.557421 2026] [security2:error] [pid 3372386:tid 3372386] [client 52.0.218.219:61967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/B.16-Pakistan-2005-Earthquake.pdf"] [unique_id "amtMR-Wtb4b4cKZ6fMV_KQAAAAA"]
[Thu Jul 30 14:06:16.076429 2026] [security2:error] [pid 3402463:tid 3402463] [client 43.135.138.128:50388] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtMSNacryHj1UHXdgGu9AAAACw"], referer: http://www.tompalmer.co.uk
[Thu Jul 30 14:06:16.545371 2026] [authz_core:error] [pid 3408415:tid 3408415] [client 89.124.90.120:56683] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:06:16.548015 2026] [authz_core:error] [pid 3408415:tid 3408415] [client 89.124.90.120:56683] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:06:16.963118 2026] [ssl:error] [pid 3372386:tid 3372386] (EAI 2)Name or service not known: [client 144.76.19.72:34410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:16.963145 2026] [ssl:error] [pid 3372386:tid 3372386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:17.014246 2026] [ssl:error] [pid 3398121:tid 3398121] (EAI 2)Name or service not known: [client 144.76.19.72:34412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:17.014271 2026] [ssl:error] [pid 3398121:tid 3398121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:17.350438 2026] [access_compat:error] [pid 3413277:tid 3413277] [client 45.158.164.139:53282] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:06:17.373301 2026] [authz_core:error] [pid 3409394:tid 3409394] [client 65.109.124.116:39362] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:06:17.379345 2026] [authz_core:error] [pid 3409394:tid 3409394] [client 65.109.124.116:39362] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:06:18.183442 2026] [ssl:error] [pid 3401253:tid 3401253] (70014)End of file found: [client 216.73.216.199:63317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:06:18.910199 2026] [security2:error] [pid 3389922:tid 3389922] [client 54.80.73.122:4999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects9/A.9-Nigeria-SP9.pdf"] [unique_id "amtMSuO-WfI2uJy4ZXF3ugAAAB8"]
[Thu Jul 30 14:06:19.903174 2026] [security2:error] [pid 3405082:tid 3405082] [client 185.191.171.15:32384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/evidence-board-destiny-2-requires-access-to-weekly-missions"] [unique_id "amtMS-mHZwuO5n5uynCK4AAAAA8"]
[Thu Jul 30 14:06:20.002354 2026] [security2:error] [pid 3414091:tid 3414091] [client 44.218.170.184:43489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects8/ref/A16-ukraine180821.pdf"] [unique_id "amtMTIrQI4pEdtd8EtQRpwAAABA"]
[Thu Jul 30 14:06:20.071984 2026] [ssl:error] [pid 3408415:tid 3408415] (EAI 2)Name or service not known: [client 144.76.19.72:49536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:20.072019 2026] [ssl:error] [pid 3408415:tid 3408415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:20.127532 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:49542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:20.127559 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:22.081810 2026] [security2:error] [pid 3397364:tid 3397364] [client 114.119.144.31:50059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17,18/request_format~html"] [unique_id "amtMTsIJl8C0Q4Bd_EOgIQAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17/request_format~html
[Thu Jul 30 14:06:23.160280 2026] [security2:error] [pid 3410692:tid 3410692] [client 52.2.83.227:26049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects9/A.25-Jordan-SP9.pdf"] [unique_id "amtMT3dE0QOZdgyqk6ccmAAAACs"]
[Thu Jul 30 14:06:23.182277 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:49544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:23.182308 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:23.233787 2026] [ssl:error] [pid 3397364:tid 3397364] (EAI 2)Name or service not known: [client 144.76.19.72:49554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:23.233820 2026] [ssl:error] [pid 3397364:tid 3397364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:23.579623 2026] [security2:error] [pid 3397364:tid 3397364] [client 114.119.144.31:50075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17,18/request_format~html"] [unique_id "amtMT8IJl8C0Q4Bd_EOgIgAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17/request_format~html
[Thu Jul 30 14:06:24.456059 2026] [security2:error] [pid 3409453:tid 3409453] [client 119.28.15.90:51531] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMUAmwS7EqQjoDhg683gAAAC4"]
[Thu Jul 30 14:06:24.456118 2026] [security2:error] [pid 3409453:tid 3409453] [client 119.28.15.90:51531] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMUAmwS7EqQjoDhg683gAAAC4"]
[Thu Jul 30 14:06:24.456366 2026] [security2:error] [pid 3409453:tid 3409453] [client 119.28.15.90:51531] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMUAmwS7EqQjoDhg683gAAAC4"]
[Thu Jul 30 14:06:24.955892 2026] [security2:error] [pid 3414561:tid 3414561] [client 43.157.149.188:39476] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tompalmer.co.uk"] [uri "/"] [unique_id "amtMUCR2IbSWUcQHPKPANwAAAAA"]
[Thu Jul 30 14:06:26.290317 2026] [ssl:error] [pid 3404744:tid 3404744] (EAI 2)Name or service not known: [client 144.76.19.72:49562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:26.290346 2026] [ssl:error] [pid 3404744:tid 3404744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:26.345006 2026] [ssl:error] [pid 3405357:tid 3405357] (EAI 2)Name or service not known: [client 144.76.19.72:49564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:26.345029 2026] [ssl:error] [pid 3405357:tid 3405357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:26.919497 2026] [security2:error] [pid 3410895:tid 3410895] [client 119.28.15.90:30225] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMUlqPVDAWRV4OaKjbUAAAAEI"]
[Thu Jul 30 14:06:26.919547 2026] [security2:error] [pid 3410895:tid 3410895] [client 119.28.15.90:30225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMUlqPVDAWRV4OaKjbUAAAAEI"]
[Thu Jul 30 14:06:26.919784 2026] [security2:error] [pid 3410895:tid 3410895] [client 119.28.15.90:30225] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMUlqPVDAWRV4OaKjbUAAAAEI"]
[Thu Jul 30 14:06:27.527213 2026] [security2:error] [pid 3409451:tid 3409451] [client 43.157.149.188:41930] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtMU2JCwvQo-GkJljFx9wAAACo"], referer: http://www.tompalmer.co.uk
[Thu Jul 30 14:06:28.385144 2026] [ssl:error] [pid 3410889:tid 3410889] (70014)End of file found: [client 216.73.216.199:36938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:06:29.404242 2026] [ssl:error] [pid 3414711:tid 3414711] (EAI 2)Name or service not known: [client 144.76.19.72:49566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:29.404283 2026] [ssl:error] [pid 3414711:tid 3414711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:29.460531 2026] [ssl:error] [pid 3402408:tid 3402408] (EAI 2)Name or service not known: [client 144.76.19.72:49572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:29.460596 2026] [ssl:error] [pid 3402408:tid 3402408] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:30.802960 2026] [security2:error] [pid 3389921:tid 3389921] [client 43.164.197.117:44636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtMVjW-x4QBeXeWhTTadQAAABo"]
[Thu Jul 30 14:06:31.020345 2026] [security2:error] [pid 3410892:tid 3410892] [client 43.138.68.113:46610] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.marcwhiffen.co.uk"] [uri "/"] [unique_id "amtMV0wFTD22d2kMu_CKcAAAAD8"]
[Thu Jul 30 14:06:31.021153 2026] [authz_core:error] [pid 3410892:tid 3410892] [client 43.138.68.113:46610] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 14:06:31.307439 2026] [security2:error] [pid 3398121:tid 3398121] [client 43.157.148.38:47120] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.co.uk"] [uri "/"] [unique_id "amtMV8y1Smuam4xb-rENlAAAACk"]
[Thu Jul 30 14:06:32.469788 2026] [security2:error] [pid 3408467:tid 3408467] [client 43.157.148.38:48772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtMWJedtGSkKx0X0srJWQAAADY"], referer: http://www.spamp.co.uk
[Thu Jul 30 14:06:32.517486 2026] [ssl:error] [pid 3398121:tid 3398121] (EAI 2)Name or service not known: [client 144.76.19.72:64658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:32.517510 2026] [ssl:error] [pid 3398121:tid 3398121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:32.573411 2026] [ssl:error] [pid 3387425:tid 3387425] (EAI 2)Name or service not known: [client 144.76.19.72:64668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:32.573446 2026] [ssl:error] [pid 3387425:tid 3387425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:33.387989 2026] [security2:error] [pid 3387425:tid 3387425] [client 43.164.197.117:49064] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtMWVvYFVpQVe__AQ29RQAAADE"], referer: http://www.beechhouseselfcatering.co.uk
[Thu Jul 30 14:06:33.418406 2026] [authz_core:error] [pid 3410892:tid 3410892] [client 212.34.128.179:60855] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log, referer: http://lisichka.co.uk/
[Thu Jul 30 14:06:33.419173 2026] [authz_core:error] [pid 3410892:tid 3410892] [client 212.34.128.179:60855] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini, referer: http://lisichka.co.uk/
[Thu Jul 30 14:06:34.860623 2026] [security2:error] [pid 3414052:tid 3414052] [client 43.157.148.38:40286] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtMWnd1MdSIw8-Oje1YlQAAAAw"], referer: http://spamp.com/
[Thu Jul 30 14:06:35.651097 2026] [ssl:error] [pid 3405082:tid 3405082] (EAI 2)Name or service not known: [client 144.76.19.72:64680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:35.651135 2026] [ssl:error] [pid 3405082:tid 3405082] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:35.705719 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:64692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:35.705748 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:36.265746 2026] [security2:error] [pid 3405082:tid 3405082] [client 43.164.197.117:51376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.firstclassbkltd.co.uk"] [uri "/"] [unique_id "amtMXOmHZwuO5n5uynCK5gAAAA8"]
[Thu Jul 30 14:06:38.376482 2026] [ssl:error] [pid 3410892:tid 3410892] (70014)End of file found: [client 216.73.216.199:53276] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:06:38.605804 2026] [security2:error] [pid 3404744:tid 3404744] [client 43.134.15.174:52144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amtMXtiTihwb1_4WywN8aAAAAAc"]
[Thu Jul 30 14:06:38.757772 2026] [ssl:error] [pid 3409450:tid 3409450] (EAI 2)Name or service not known: [client 144.76.19.72:64704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:38.757808 2026] [ssl:error] [pid 3409450:tid 3409450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:38.813529 2026] [ssl:error] [pid 3410692:tid 3410692] (EAI 2)Name or service not known: [client 144.76.19.72:64714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:38.813563 2026] [ssl:error] [pid 3410692:tid 3410692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:40.516416 2026] [security2:error] [pid 3396745:tid 3396745] [client 43.134.15.174:42500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amtMYBNQjGBFyXId4BO2JwAAAA4"], referer: http://www.hazardous-materials.co.uk
[Thu Jul 30 14:06:41.867146 2026] [ssl:error] [pid 3387425:tid 3387425] (EAI 2)Name or service not known: [client 144.76.19.72:64580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:41.867188 2026] [ssl:error] [pid 3387425:tid 3387425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:41.920671 2026] [ssl:error] [pid 3414091:tid 3414091] (EAI 2)Name or service not known: [client 144.76.19.72:64588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:41.920718 2026] [ssl:error] [pid 3414091:tid 3414091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:42.247661 2026] [core:error] [pid 3389922:tid 3389922] [client 66.249.66.8:35251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:06:42.247689 2026] [core:error] [pid 3389922:tid 3389922] [client 66.249.66.8:35251] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:06:42.600788 2026] [security2:error] [pid 3409451:tid 3409451] [client 43.157.95.131:44006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amtMYmJCwvQo-GkJljFx_gAAACo"]
[Thu Jul 30 14:06:43.989581 2026] [security2:error] [pid 3414091:tid 3414091] [client 43.157.95.131:53232] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amtMY4rQI4pEdtd8EtQRsQAAABA"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 14:06:44.169176 2026] [security2:error] [pid 3409451:tid 3409451] [client 43.157.95.131:45624] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtMZGJCwvQo-GkJljFx_wAAACo"]
[Thu Jul 30 14:06:44.977266 2026] [ssl:error] [pid 3408415:tid 3408415] (EAI 2)Name or service not known: [client 144.76.19.72:64594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:44.977298 2026] [ssl:error] [pid 3408415:tid 3408415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:45.030359 2026] [ssl:error] [pid 3414612:tid 3414612] (EAI 2)Name or service not known: [client 144.76.19.72:64600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:45.030400 2026] [ssl:error] [pid 3414612:tid 3414612] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:45.570086 2026] [security2:error] [pid 3401253:tid 3401253] [client 43.157.95.131:55102] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtMZcJwlYAQIQVxrd_blgAAABY"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 14:06:46.295338 2026] [security2:error] [pid 3411965:tid 3411965] [client 43.157.95.131:56250] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtMZu4dVOlkytoztlkmywAAAAg"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 14:06:48.746916 2026] [ssl:error] [pid 3409451:tid 3409451] (EAI 2)Name or service not known: [client 144.76.19.72:64602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:48.746944 2026] [ssl:error] [pid 3409451:tid 3409451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:48.909584 2026] [ssl:error] [pid 3415236:tid 3415236] (EAI 2)Name or service not known: [client 144.76.19.72:64618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:48.909619 2026] [ssl:error] [pid 3415236:tid 3415236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:50.483334 2026] [security2:error] [pid 3387425:tid 3387425] [client 43.155.162.41:37334] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.quantum.com.mt"] [uri "/"] [unique_id "amtMalvYFVpQVe__AQ29SgAAADE"]
[Thu Jul 30 14:06:51.903777 2026] [security2:error] [pid 3410692:tid 3410692] [client 43.164.131.148:39726] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtMa3dE0QOZdgyqk6ccoAAAACs"]
[Thu Jul 30 14:06:51.968349 2026] [ssl:error] [pid 3387425:tid 3387425] (EAI 2)Name or service not known: [client 144.76.19.72:32814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:51.968377 2026] [ssl:error] [pid 3387425:tid 3387425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:52.025968 2026] [ssl:error] [pid 3414981:tid 3414981] (EAI 2)Name or service not known: [client 144.76.19.72:32820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:52.026003 2026] [ssl:error] [pid 3414981:tid 3414981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:53.040287 2026] [security2:error] [pid 3409451:tid 3409451] [client 43.156.228.27:59146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amtMbWJCwvQo-GkJljFyAgAAACo"]
[Thu Jul 30 14:06:54.770818 2026] [security2:error] [pid 3387425:tid 3387425] [client 43.164.131.148:38894] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtMblvYFVpQVe__AQ29SwAAADE"], referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 14:06:55.084639 2026] [ssl:error] [pid 3389922:tid 3389922] (EAI 2)Name or service not known: [client 144.76.19.72:32834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:55.084674 2026] [ssl:error] [pid 3389922:tid 3389922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:55.140435 2026] [ssl:error] [pid 3409451:tid 3409451] (EAI 2)Name or service not known: [client 144.76.19.72:32850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:55.140476 2026] [ssl:error] [pid 3409451:tid 3409451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:55.422600 2026] [security2:error] [pid 3410895:tid 3410895] [client 185.191.171.17:19232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5451.0/prev_next,prev.html"] [unique_id "amtMb1qPVDAWRV4OaKjbWQAAAEI"]
[Thu Jul 30 14:06:56.659242 2026] [security2:error] [pid 3387425:tid 3387425] [client 43.157.168.43:48116] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtMcFvYFVpQVe__AQ29TAAAADE"]
[Thu Jul 30 14:06:57.121232 2026] [security2:error] [pid 3410895:tid 3410895] [client 43.155.162.41:49300] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.co.uk"] [uri "/"] [unique_id "amtMcVqPVDAWRV4OaKjbWgAAAEI"]
[Thu Jul 30 14:06:57.312051 2026] [security2:error] [pid 3413621:tid 3413621] [client 47.254.47.156:42486] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.michael-boffey.co.uk"] [uri "/"] [unique_id "amtMcVNeoWXmKDAb0N8vUwAAAAY"]
[Thu Jul 30 14:06:57.531113 2026] [security2:error] [pid 3408415:tid 3408415] [client 114.119.155.205:32771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2008/ref/D5-Guatamala.pdf"] [unique_id "amtMcRz-UNb2axbQ_2m02QAAACQ"]
[Thu Jul 30 14:06:58.194926 2026] [ssl:error] [pid 3409451:tid 3409451] (EAI 2)Name or service not known: [client 144.76.19.72:32858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:58.194961 2026] [ssl:error] [pid 3409451:tid 3409451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:58.250485 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:32866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:06:58.250519 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:06:58.437440 2026] [security2:error] [pid 3408415:tid 3408415] [client 114.119.150.101:55785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/wp-content/uploads/2011/06/third.jpg"] [unique_id "amtMchz-UNb2axbQ_2m02gAAACQ"], referer: http://www.localhero.org.uk/category/artwork/digital-concept-gallery/page/6?ak_action=reject_mobile
[Thu Jul 30 14:06:58.541803 2026] [security2:error] [pid 3396745:tid 3396745] [client 43.155.162.41:57708] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtMchNQjGBFyXId4BO2KwAAAA4"], referer: http://www.spampmusic.co.uk
[Thu Jul 30 14:07:00.656105 2026] [access_compat:error] [pid 3404744:tid 3404744] [client 45.158.164.234:39020] AH01797: client denied by server configuration: /home/nspandor/public_html/404.shtml
[Thu Jul 30 14:07:01.306853 2026] [ssl:error] [pid 3400953:tid 3400953] (EAI 2)Name or service not known: [client 144.76.19.72:37346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:01.306888 2026] [ssl:error] [pid 3400953:tid 3400953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:01.363704 2026] [ssl:error] [pid 3414561:tid 3414561] (EAI 2)Name or service not known: [client 144.76.19.72:37358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:01.363754 2026] [ssl:error] [pid 3414561:tid 3414561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:01.980718 2026] [security2:error] [pid 3396745:tid 3396745] [client 43.134.91.35:53596] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.co.uk"] [uri "/"] [unique_id "amtMdRNQjGBFyXId4BO2LgAAAA4"]
[Thu Jul 30 14:07:02.620233 2026] [security2:error] [pid 3396745:tid 3396745] [client 85.208.96.210:53188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amtMdhNQjGBFyXId4BO2LwAAAA4"]
[Thu Jul 30 14:07:03.378935 2026] [ssl:error] [pid 3411965:tid 3411965] (70014)End of file found: [client 216.73.216.199:47209] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:07:03.759085 2026] [security2:error] [pid 3389922:tid 3389922] [client 185.191.171.11:54570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/category/pechakucha/"] [unique_id "amtMd-O-WfI2uJy4ZXF3ygAAAB8"]
[Thu Jul 30 14:07:04.422333 2026] [ssl:error] [pid 3415945:tid 3415945] (EAI 2)Name or service not known: [client 144.76.19.72:37370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:04.422364 2026] [ssl:error] [pid 3415945:tid 3415945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:04.445078 2026] [security2:error] [pid 3416090:tid 3416090] [client 43.157.179.227:55972] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amtMeCBngs2NyYnr63YJnwAAACA"]
[Thu Jul 30 14:07:04.480233 2026] [ssl:error] [pid 3416093:tid 3416093] (EAI 2)Name or service not known: [client 144.76.19.72:37372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:04.480272 2026] [ssl:error] [pid 3416093:tid 3416093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:04.828374 2026] [security2:error] [pid 3416097:tid 3416097] [client 43.157.179.227:56690] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sewyork.co.uk"] [uri "/"] [unique_id "amtMeMZL-VUzKwzoXK5CrgAAADA"]
[Thu Jul 30 14:07:07.549240 2026] [security2:error] [pid 3416095:tid 3416095] [client 43.157.168.43:34166] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amtMe3kUWjYEHzLF1PJDVAAAAC4"]
[Thu Jul 30 14:07:07.553928 2026] [ssl:error] [pid 3416094:tid 3416094] (EAI 2)Name or service not known: [client 144.76.19.72:37384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:07.553965 2026] [ssl:error] [pid 3416094:tid 3416094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:07.605718 2026] [ssl:error] [pid 3411886:tid 3411886] (EAI 2)Name or service not known: [client 144.76.19.72:37398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:07.605756 2026] [ssl:error] [pid 3411886:tid 3411886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:08.525516 2026] [security2:error] [pid 3397364:tid 3397364] [client 43.156.232.154:43246] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amtMfMIJl8C0Q4Bd_EOgLQAAAAk"]
[Thu Jul 30 14:07:08.961218 2026] [security2:error] [pid 3416049:tid 3416049] [client 43.157.168.43:58286] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amtMfIQasOMDxjIXdgvhSgAAABg"], referer: http://www.glottalstop.co.uk
[Thu Jul 30 14:07:09.118900 2026] [security2:error] [pid 3416097:tid 3416097] [client 52.4.229.9:43878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMfcZL-VUzKwzoXK5CsgAAADA"]
[Thu Jul 30 14:07:09.169883 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.157.179.227:48846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtMfe3nXl-wRa9SxuEUxQAAADg"], referer: http://www.prosperon.co.uk
[Thu Jul 30 14:07:09.327263 2026] [security2:error] [pid 3400953:tid 3400953] [client 43.157.50.58:35474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtMfbkURAqtbgpd2qCJdQAAAAs"]
[Thu Jul 30 14:07:09.457486 2026] [security2:error] [pid 3386775:tid 3386775] [client 23.21.148.226:18838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMfdG6CuEZHFTsq5sWcgAAACM"]
[Thu Jul 30 14:07:10.266360 2026] [security2:error] [pid 3411886:tid 3411886] [client 43.157.50.58:36910] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtMfmFxr_MS-c4By9LwigAAAAQ"], referer: http://www.rogersbarbershopltd.co.uk
[Thu Jul 30 14:07:10.660931 2026] [ssl:error] [pid 3400953:tid 3400953] (EAI 2)Name or service not known: [client 144.76.19.72:37800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:10.660981 2026] [ssl:error] [pid 3400953:tid 3400953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:10.715049 2026] [ssl:error] [pid 3415945:tid 3415945] (EAI 2)Name or service not known: [client 144.76.19.72:37814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:10.715085 2026] [ssl:error] [pid 3415945:tid 3415945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:10.859326 2026] [security2:error] [pid 3404744:tid 3404744] [client 43.156.232.154:40704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amtMftiTihwb1_4WywN8dgAAAAc"], referer: http://www.mwdesign.me.uk
[Thu Jul 30 14:07:13.768541 2026] [ssl:error] [pid 3411886:tid 3411886] (EAI 2)Name or service not known: [client 144.76.19.72:37830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:13.768570 2026] [ssl:error] [pid 3411886:tid 3411886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:13.824404 2026] [ssl:error] [pid 3409450:tid 3409450] (EAI 2)Name or service not known: [client 144.76.19.72:37838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:13.824435 2026] [ssl:error] [pid 3409450:tid 3409450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:15.062339 2026] [security2:error] [pid 3396745:tid 3396745] [client 47.243.240.170:47519] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMgxNQjGBFyXId4BO2NQAAAA4"]
[Thu Jul 30 14:07:15.062408 2026] [security2:error] [pid 3396745:tid 3396745] [client 47.243.240.170:47519] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMgxNQjGBFyXId4BO2NQAAAA4"]
[Thu Jul 30 14:07:15.062674 2026] [security2:error] [pid 3396745:tid 3396745] [client 47.243.240.170:47519] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMgxNQjGBFyXId4BO2NQAAAA4"]
[Thu Jul 30 14:07:16.885494 2026] [ssl:error] [pid 3414052:tid 3414052] (EAI 2)Name or service not known: [client 144.76.19.72:37858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:16.885522 2026] [ssl:error] [pid 3414052:tid 3414052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:16.941210 2026] [ssl:error] [pid 3397364:tid 3397364] (EAI 2)Name or service not known: [client 144.76.19.72:37872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:16.941239 2026] [ssl:error] [pid 3397364:tid 3397364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:17.816191 2026] [authz_core:error] [pid 3416733:tid 3416733] [client 85.203.23.23:51365] AH01630: client denied by server configuration: /home/markmitc/recklesselectricity.com/error_log
[Thu Jul 30 14:07:18.100205 2026] [security2:error] [pid 3413621:tid 3413621] [client 190.133.95.127:45006] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMhlNeoWXmKDAb0N8vWQAAAAY"]
[Thu Jul 30 14:07:18.100269 2026] [security2:error] [pid 3413621:tid 3413621] [client 190.133.95.127:45006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMhlNeoWXmKDAb0N8vWQAAAAY"]
[Thu Jul 30 14:07:18.100616 2026] [security2:error] [pid 3413621:tid 3413621] [client 190.133.95.127:45006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMhlNeoWXmKDAb0N8vWQAAAAY"]
[Thu Jul 30 14:07:18.392440 2026] [ssl:error] [pid 3414981:tid 3414981] (70014)End of file found: [client 216.73.216.199:12583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:07:18.503079 2026] [security2:error] [pid 3401253:tid 3401253] [client 51.68.111.204:27857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtMhsJwlYAQIQVxrd_boAAAABY"]
[Thu Jul 30 14:07:18.589278 2026] [security2:error] [pid 3416733:tid 3416733] [client 51.68.111.204:22857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtMhmWuoSUIJESSAo0y2gAAABw"]
[Thu Jul 30 14:07:18.685102 2026] [security2:error] [pid 3413277:tid 3413277] [client 51.68.111.204:13867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtMhpWyFzBVd0-jOQIUvQAAAAI"]
[Thu Jul 30 14:07:19.780236 2026] [security2:error] [pid 3416097:tid 3416097] [client 114.119.140.102:20051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-456.xml"] [unique_id "amtMh8ZL-VUzKwzoXK5CtgAAADA"]
[Thu Jul 30 14:07:19.800815 2026] [security2:error] [pid 3415123:tid 3415123] [client 43.135.36.201:42430] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtMhwgAEKtdgXG8OQ10hwAAABs"]
[Thu Jul 30 14:07:19.993515 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:21062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:19.993543 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:20.052514 2026] [ssl:error] [pid 3401253:tid 3401253] (EAI 2)Name or service not known: [client 144.76.19.72:21078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:20.052549 2026] [ssl:error] [pid 3401253:tid 3401253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:20.412146 2026] [security2:error] [pid 3389922:tid 3389922] [client 185.191.171.12:10266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/fazbear-ultimate-pill-pack-remastered-chasing-npcs"] [unique_id "amtMiOO-WfI2uJy4ZXF30gAAAB8"]
[Thu Jul 30 14:07:21.478841 2026] [security2:error] [pid 3416091:tid 3416091] [client 43.135.36.201:43620] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtMiSICGqChih4dTXkgXAAAACI"], referer: http://www.staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 14:07:22.623638 2026] [security2:error] [pid 3400953:tid 3400953] [client 160.250.8.210:56508] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMirkURAqtbgpd2qCJeQAAAAs"]
[Thu Jul 30 14:07:22.623688 2026] [security2:error] [pid 3400953:tid 3400953] [client 160.250.8.210:56508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMirkURAqtbgpd2qCJeQAAAAs"]
[Thu Jul 30 14:07:22.623955 2026] [security2:error] [pid 3400953:tid 3400953] [client 160.250.8.210:56508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMirkURAqtbgpd2qCJeQAAAAs"]
[Thu Jul 30 14:07:23.110211 2026] [ssl:error] [pid 3414561:tid 3414561] (EAI 2)Name or service not known: [client 144.76.19.72:21094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:23.110239 2026] [ssl:error] [pid 3414561:tid 3414561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:23.166670 2026] [ssl:error] [pid 3415123:tid 3415123] (EAI 2)Name or service not known: [client 144.76.19.72:21102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:23.166725 2026] [ssl:error] [pid 3415123:tid 3415123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:23.236950 2026] [security2:error] [pid 3389921:tid 3389921] [client 43.135.36.201:44072] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtMizW-x4QBeXeWhTTa1QAAABo"], referer: https://www.staffordshirephoenixrifleandpistolclub.co.uk/
[Thu Jul 30 14:07:26.024888 2026] [security2:error] [pid 3410895:tid 3410895] [client 43.165.126.130:38502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.render-farm.co.uk"] [uri "/"] [unique_id "amtMjlqPVDAWRV4OaKjbYQAAAEI"]
[Thu Jul 30 14:07:26.223461 2026] [ssl:error] [pid 3414561:tid 3414561] (EAI 2)Name or service not known: [client 144.76.19.72:21116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:26.223487 2026] [ssl:error] [pid 3414561:tid 3414561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:26.280489 2026] [ssl:error] [pid 3416094:tid 3416094] (EAI 2)Name or service not known: [client 144.76.19.72:21120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:26.280517 2026] [ssl:error] [pid 3416094:tid 3416094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:26.785762 2026] [security2:error] [pid 3386775:tid 3386775] [client 43.165.167.72:56410] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtMjtG6CuEZHFTsq5sWeQAAACM"]
[Thu Jul 30 14:07:26.787387 2026] [authz_core:error] [pid 3386775:tid 3386775] [client 43.165.167.72:56410] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:07:26.789172 2026] [authz_core:error] [pid 3386775:tid 3386775] [client 43.165.167.72:56410] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:07:27.092008 2026] [security2:error] [pid 3410895:tid 3410895] [client 43.165.167.72:56734] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtMj1qPVDAWRV4OaKjbYgAAAEI"]
[Thu Jul 30 14:07:27.458873 2026] [security2:error] [pid 3414052:tid 3414052] [client 101.33.81.73:40082] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.innerspacer.co.uk"] [uri "/"] [unique_id "amtMj3d1MdSIw8-Oje1YpwAAAAw"]
[Thu Jul 30 14:07:28.353359 2026] [security2:error] [pid 3414561:tid 3414561] [client 43.167.232.38:39370] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "amtMkCR2IbSWUcQHPKPATgAAAAA"]
[Thu Jul 30 14:07:28.602344 2026] [ssl:error] [pid 3401253:tid 3401253] (70014)End of file found: [client 216.73.216.199:25617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:07:29.335376 2026] [ssl:error] [pid 3416094:tid 3416094] (EAI 2)Name or service not known: [client 144.76.19.72:21124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:29.335413 2026] [ssl:error] [pid 3416094:tid 3416094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:29.391397 2026] [ssl:error] [pid 3387425:tid 3387425] (EAI 2)Name or service not known: [client 144.76.19.72:21132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:29.391429 2026] [ssl:error] [pid 3387425:tid 3387425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:29.508936 2026] [security2:error] [pid 3402463:tid 3402463] [client 85.208.96.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2021/04/"] [unique_id "amtMkdacryHj1UHXdgGvCQAAACw"]
[Thu Jul 30 14:07:29.517218 2026] [security2:error] [pid 3410895:tid 3410895] [client 114.119.159.19:26753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/recycled-teak-wood-mirror"] [unique_id "amtMkVqPVDAWRV4OaKjbYwAAAEI"], referer: https://tripodhome.co.uk/product-category/gift
[Thu Jul 30 14:07:29.944841 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.165.167.72:54344] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtMke3nXl-wRa9SxuEVLQAAADg"], referer: http://www.blow-hairstudio.co.uk
[Thu Jul 30 14:07:30.614535 2026] [security2:error] [pid 3416094:tid 3416094] [client 43.165.167.72:60154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.be"] [uri "/"] [unique_id "amtMktB7-_H2HdwkfQ9g6gAAAC0"]
[Thu Jul 30 14:07:31.345530 2026] [authz_core:error] [pid 3416090:tid 3416090] [client 66.249.66.35:64630] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:07:31.348366 2026] [authz_core:error] [pid 3416090:tid 3416090] [client 66.249.66.35:64630] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:07:32.447347 2026] [ssl:error] [pid 3410895:tid 3410895] (EAI 2)Name or service not known: [client 144.76.19.72:24962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:32.447389 2026] [ssl:error] [pid 3410895:tid 3410895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:32.505024 2026] [ssl:error] [pid 3416051:tid 3416051] (EAI 2)Name or service not known: [client 144.76.19.72:24964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:32.505076 2026] [ssl:error] [pid 3416051:tid 3416051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:33.285504 2026] [security2:error] [pid 3415024:tid 3415024] [client 43.165.167.72:56622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtMldHSeEY83XBEXiaBQQAAABk"], referer: http://www.orgent.be
[Thu Jul 30 14:07:34.811230 2026] [security2:error] [pid 3415024:tid 3415024] [client 185.191.171.19:10848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1869.0/prev_next,next.html"] [unique_id "amtMltHSeEY83XBEXiaBQgAAABk"]
[Thu Jul 30 14:07:35.381242 2026] [access_compat:error] [pid 3414052:tid 3414052] [client 45.158.164.139:41486] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:07:35.878692 2026] [security2:error] [pid 3416090:tid 3416090] [client 43.134.236.36:54948] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amtMlyBngs2NyYnr63YJqQAAACA"]
[Thu Jul 30 14:07:36.114595 2026] [ssl:error] [pid 3412178:tid 3412178] (EAI 2)Name or service not known: [client 144.76.19.72:24976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:36.114628 2026] [ssl:error] [pid 3412178:tid 3412178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:36.142951 2026] [security2:error] [pid 3412178:tid 3412178] [client 43.164.131.148:57216] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amtMmGY1M8pciytek1p7CwAAAAo"]
[Thu Jul 30 14:07:36.292633 2026] [ssl:error] [pid 3416090:tid 3416090] (EAI 2)Name or service not known: [client 144.76.19.72:24986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:36.292685 2026] [ssl:error] [pid 3416090:tid 3416090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:37.052047 2026] [security2:error] [pid 3416094:tid 3416094] [client 43.164.131.148:58146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amtMmdB7-_H2HdwkfQ9g8AAAAC0"]
[Thu Jul 30 14:07:37.235932 2026] [security2:error] [pid 3417589:tid 3417589] [client 43.167.232.38:46408] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.marcwhiffen.co.uk"] [uri "/"] [unique_id "amtMmaFtyS7GB8Kfwc6uugAAACk"]
[Thu Jul 30 14:07:37.236846 2026] [authz_core:error] [pid 3417589:tid 3417589] [client 43.167.232.38:46408] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 14:07:37.302969 2026] [security2:error] [pid 3417590:tid 3417590] [client 49.51.47.100:38802] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "amtMmQSoC92CCahGoh4lUgAAADA"]
[Thu Jul 30 14:07:38.268744 2026] [security2:error] [pid 3389921:tid 3389921] [client 43.164.131.148:55582] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtMmjW-x4QBeXeWhTTa2wAAABo"], referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 14:07:38.270679 2026] [authz_core:error] [pid 3389921:tid 3389921] [client 43.164.131.148:55582] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 14:07:38.273348 2026] [authz_core:error] [pid 3389921:tid 3389921] [client 43.164.131.148:55582] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 14:07:38.469112 2026] [security2:error] [pid 3413277:tid 3413277] [client 49.51.47.100:40482] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amtMmpWyFzBVd0-jOQIUwwAAAAI"]
[Thu Jul 30 14:07:38.837480 2026] [security2:error] [pid 3411965:tid 3411965] [client 49.51.47.100:41050] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amtMmu4dVOlkytoztlkm2gAAAAg"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 14:07:39.351704 2026] [ssl:error] [pid 3410895:tid 3410895] (EAI 2)Name or service not known: [client 144.76.19.72:24990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:39.351734 2026] [ssl:error] [pid 3410895:tid 3410895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:39.409520 2026] [ssl:error] [pid 3417646:tid 3417646] (EAI 2)Name or service not known: [client 144.76.19.72:25002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:39.409555 2026] [ssl:error] [pid 3417646:tid 3417646] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:40.289501 2026] [security2:error] [pid 3417647:tid 3417647] [client 43.164.131.148:57524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtMnEkKsWnEcRDtoJA3lQAAADU"], referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 14:07:40.291486 2026] [authz_core:error] [pid 3417647:tid 3417647] [client 43.164.131.148:57524] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 14:07:40.295140 2026] [authz_core:error] [pid 3417647:tid 3417647] [client 43.164.131.148:57524] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 14:07:40.316880 2026] [security2:error] [pid 3410895:tid 3410895] [client 49.51.47.100:42328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "amtMnFqPVDAWRV4OaKjbaAAAAEI"]
[Thu Jul 30 14:07:42.480480 2026] [ssl:error] [pid 3410895:tid 3410895] (EAI 2)Name or service not known: [client 144.76.19.72:25072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:42.480521 2026] [ssl:error] [pid 3410895:tid 3410895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:42.534792 2026] [ssl:error] [pid 3411886:tid 3411886] (EAI 2)Name or service not known: [client 144.76.19.72:25076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:42.534821 2026] [ssl:error] [pid 3411886:tid 3411886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:42.576097 2026] [security2:error] [pid 3405248:tid 3405248] [client 49.51.47.100:44754] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtMnjKxh_YwJMwOThAPogAAABI"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 14:07:42.617671 2026] [cgi:error] [pid 3405248:tid 3405248] [client 49.51.47.100:44754] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 14:07:44.599266 2026] [ssl:error] [pid 3416051:tid 3416051] (70014)End of file found: [client 216.73.216.199:53306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:07:45.543601 2026] [security2:error] [pid 3416091:tid 3416091] [client 43.153.123.4:49358] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtMoSICGqChih4dTXkgaAAAACI"]
[Thu Jul 30 14:07:45.593114 2026] [ssl:error] [pid 3416095:tid 3416095] (EAI 2)Name or service not known: [client 144.76.19.72:25082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:45.593149 2026] [ssl:error] [pid 3416095:tid 3416095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:45.647816 2026] [ssl:error] [pid 3409394:tid 3409394] (EAI 2)Name or service not known: [client 144.76.19.72:25086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:45.647861 2026] [ssl:error] [pid 3409394:tid 3409394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:45.718364 2026] [security2:error] [pid 3417650:tid 3417650] [client 49.51.38.193:45704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amtMoQRp1AOnqQj_Xo79RAAAADc"]
[Thu Jul 30 14:07:47.052107 2026] [security2:error] [pid 3413277:tid 3413277] [client 43.167.241.46:42590] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.greenduckgallery.co.uk"] [uri "/"] [unique_id "amtMo5WyFzBVd0-jOQIUxwAAAAI"]
[Thu Jul 30 14:07:47.275468 2026] [authz_core:error] [pid 3416091:tid 3416091] [client 66.249.66.33:58867] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:07:47.278137 2026] [authz_core:error] [pid 3416091:tid 3416091] [client 66.249.66.33:58867] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:07:47.982675 2026] [security2:error] [pid 3416095:tid 3416095] [client 43.153.123.4:41832] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtMo3kUWjYEHzLF1PJDYQAAAC4"], referer: http://www.hornsey-town-hall.org.uk
[Thu Jul 30 14:07:48.005697 2026] [core:error] [pid 3414561:tid 3414561] [client 66.249.66.8:40828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:07:48.005726 2026] [core:error] [pid 3414561:tid 3414561] [client 66.249.66.8:40828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:07:48.702417 2026] [ssl:error] [pid 3418111:tid 3418111] (EAI 2)Name or service not known: [client 144.76.19.72:25100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:48.702459 2026] [ssl:error] [pid 3418111:tid 3418111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:48.757310 2026] [ssl:error] [pid 3411965:tid 3411965] (EAI 2)Name or service not known: [client 144.76.19.72:25104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:48.757347 2026] [ssl:error] [pid 3411965:tid 3411965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:49.393324 2026] [security2:error] [pid 3401253:tid 3401253] [client 74.7.241.50:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.revoracing.org.uk"] [uri "/"] [unique_id "amtMpcJwlYAQIQVxrd_bqwAAABY"]
[Thu Jul 30 14:07:50.064948 2026] [security2:error] [pid 3386775:tid 3386775] [client 43.156.41.180:59084] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtMptG6CuEZHFTsq5sWuwAAACM"], referer: http://www.banskoexpresstransfers.co.uk
[Thu Jul 30 14:07:50.979160 2026] [security2:error] [pid 3401253:tid 3401253] [client 43.153.123.4:44608] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtMpsJwlYAQIQVxrd_brAAAABY"], referer: https://www.hornsey-town-hall.org.uk/
[Thu Jul 30 14:07:51.136258 2026] [security2:error] [pid 3411965:tid 3411965] [client 114.119.155.144:58629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17,103/request_format~html"] [unique_id "amtMp-4dVOlkytoztlkm4gAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17/request_format~html
[Thu Jul 30 14:07:51.367773 2026] [security2:error] [pid 3396745:tid 3396745] [client 43.156.41.180:37348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtMpxNQjGBFyXId4BO2QQAAAA4"], referer: http://www.banskoexpress.com
[Thu Jul 30 14:07:51.810985 2026] [ssl:error] [pid 3416049:tid 3416049] (EAI 2)Name or service not known: [client 144.76.19.72:30840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:51.811035 2026] [ssl:error] [pid 3416049:tid 3416049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:51.864284 2026] [ssl:error] [pid 3416002:tid 3416002] (EAI 2)Name or service not known: [client 144.76.19.72:30848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:51.864320 2026] [ssl:error] [pid 3416002:tid 3416002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:52.210042 2026] [security2:error] [pid 3416049:tid 3416049] [client 49.51.47.100:52804] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtMqIQasOMDxjIXdgvhVgAAABg"]
[Thu Jul 30 14:07:53.823782 2026] [security2:error] [pid 3417590:tid 3417590] [client 114.119.155.144:58635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17,103/request_format~html"] [unique_id "amtMqQSoC92CCahGoh4lVwAAADA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~15,17/request_format~html
[Thu Jul 30 14:07:54.135871 2026] [security2:error] [pid 3417653:tid 3417653] [client 74.7.243.224:55140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "elhassanartist.com"] [uri "/"] [unique_id "amtMqhaLw_8XyveUmm-9WgAAADo"], referer: https://sergechel.info
[Thu Jul 30 14:07:54.922805 2026] [ssl:error] [pid 3416094:tid 3416094] (EAI 2)Name or service not known: [client 144.76.19.72:30872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:54.922841 2026] [ssl:error] [pid 3416094:tid 3416094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:54.977538 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:30874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:54.977579 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:55.392440 2026] [security2:error] [pid 3409451:tid 3409451] [client 3.212.86.97:52408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "josephashmore.org"] [uri "/robots.txt"] [unique_id "amtMq2JCwvQo-GkJljFyEQAAACo"]
[Thu Jul 30 14:07:55.880351 2026] [security2:error] [pid 3417654:tid 3417654] [client 170.106.140.110:48866] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchellphotography.co.uk"] [uri "/"] [unique_id "amtMq-4M_fUC5LCpGftN1QAAADs"]
[Thu Jul 30 14:07:56.085213 2026] [security2:error] [pid 3415945:tid 3415945] [client 49.51.47.100:44854] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtMrJDcm6bILF7ar_U6igAAAA0"], referer: http://www.retrodisco.co.uk
[Thu Jul 30 14:07:57.537178 2026] [security2:error] [pid 3389921:tid 3389921] [client 43.131.36.84:49786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtMrTW-x4QBeXeWhTTa5QAAABo"]
[Thu Jul 30 14:07:57.895224 2026] [security2:error] [pid 3397364:tid 3397364] [client 3.225.9.97:15882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "josephashmore.org"] [uri "/working/dadaab/11-08-12-draft2-maintaining%20your%20tent.pdf"] [unique_id "amtMrcIJl8C0Q4Bd_EOgZQAAAAk"]
[Thu Jul 30 14:07:58.032880 2026] [ssl:error] [pid 3413621:tid 3413621] (EAI 2)Name or service not known: [client 144.76.19.72:30898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:58.032919 2026] [ssl:error] [pid 3413621:tid 3413621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:58.089236 2026] [ssl:error] [pid 3416049:tid 3416049] (EAI 2)Name or service not known: [client 144.76.19.72:30908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:07:58.089257 2026] [ssl:error] [pid 3416049:tid 3416049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:07:58.557994 2026] [security2:error] [pid 3416095:tid 3416095] [client 43.131.36.84:37830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtMrnkUWjYEHzLF1PJDZAAAAC4"], referer: http://www.saturnsports.co.uk
[Thu Jul 30 14:07:59.137200 2026] [security2:error] [pid 3417649:tid 3417649] [client 114.119.141.139:35981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/section/26/65"] [unique_id "amtMr0Z_NK5gGxN-YlWG5AAAADY"], referer: http://www.jonathanmeyerart.com/section/26/62
[Thu Jul 30 14:08:01.142887 2026] [ssl:error] [pid 3418111:tid 3418111] (EAI 2)Name or service not known: [client 144.76.19.72:48300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:01.142919 2026] [ssl:error] [pid 3418111:tid 3418111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:01.197515 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:48302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:01.197548 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:03.070652 2026] [security2:error] [pid 3416094:tid 3416094] [client 49.51.253.26:35790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amtMs9B7-_H2HdwkfQ9g-gAAAC0"]
[Thu Jul 30 14:08:04.252763 2026] [ssl:error] [pid 3405248:tid 3405248] (EAI 2)Name or service not known: [client 144.76.19.72:48310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:04.252794 2026] [ssl:error] [pid 3405248:tid 3405248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:04.309951 2026] [ssl:error] [pid 3418111:tid 3418111] (EAI 2)Name or service not known: [client 144.76.19.72:48320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:04.309981 2026] [ssl:error] [pid 3418111:tid 3418111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:04.496113 2026] [security2:error] [pid 3410826:tid 3410826] [client 85.208.96.212:19794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amtMtO3nXl-wRa9SxuEVNgAAADg"]
[Thu Jul 30 14:08:04.934531 2026] [security2:error] [pid 3416094:tid 3416094] [client 85.208.96.195:18718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4445.0/prev_next,prev.html"] [unique_id "amtMtNB7-_H2HdwkfQ9g-wAAAC0"]
[Thu Jul 30 14:08:05.850332 2026] [authz_core:error] [pid 3411965:tid 3411965] [client 66.249.66.33:35865] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:08:05.852997 2026] [authz_core:error] [pid 3411965:tid 3411965] [client 66.249.66.33:35865] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:08:06.226331 2026] [security2:error] [pid 3409451:tid 3409451] [client 23.150.248.144:43936] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.ns-neso.com.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtMtmJCwvQo-GkJljFyFwAAACo"]
[Thu Jul 30 14:08:06.226627 2026] [security2:error] [pid 3409451:tid 3409451] [client 23.150.248.144:43936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ns-neso.com.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtMtmJCwvQo-GkJljFyFwAAACo"]
[Thu Jul 30 14:08:06.226856 2026] [security2:error] [pid 3409451:tid 3409451] [client 23.150.248.144:43936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.ns-neso.com.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtMtmJCwvQo-GkJljFyFwAAACo"]
[Thu Jul 30 14:08:06.346746 2026] [security2:error] [pid 3409451:tid 3409451] [client 23.150.248.144:43936] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.ns-neso.com.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtMtmJCwvQo-GkJljFyGAAAACo"]
[Thu Jul 30 14:08:06.347022 2026] [security2:error] [pid 3409451:tid 3409451] [client 23.150.248.144:43936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ns-neso.com.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtMtmJCwvQo-GkJljFyGAAAACo"]
[Thu Jul 30 14:08:06.347241 2026] [security2:error] [pid 3409451:tid 3409451] [client 23.150.248.144:43936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.ns-neso.com.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtMtmJCwvQo-GkJljFyGAAAACo"]
[Thu Jul 30 14:08:06.719651 2026] [security2:error] [pid 3396745:tid 3396745] [client 114.119.156.124:60763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "davidebell.com"] [uri "/robots.txt"] [unique_id "amtMthNQjGBFyXId4BO2fgAAAA4"], referer: http://davidebell.com/robots.txt
[Thu Jul 30 14:08:06.973706 2026] [authz_core:error] [pid 3416094:tid 3416094] [client 87.199.207.10:62369] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:08:06.976366 2026] [authz_core:error] [pid 3416094:tid 3416094] [client 87.199.207.10:62369] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:08:07.365465 2026] [ssl:error] [pid 3416091:tid 3416091] (EAI 2)Name or service not known: [client 144.76.19.72:48324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:07.365503 2026] [ssl:error] [pid 3416091:tid 3416091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:07.421743 2026] [ssl:error] [pid 3417650:tid 3417650] (EAI 2)Name or service not known: [client 144.76.19.72:48338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:07.421777 2026] [ssl:error] [pid 3417650:tid 3417650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:07.839287 2026] [authz_core:error] [pid 3416091:tid 3416091] [client 89.124.87.116:60663] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:08:07.841921 2026] [authz_core:error] [pid 3416091:tid 3416091] [client 89.124.87.116:60663] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:08:08.693616 2026] [security2:error] [pid 3414981:tid 3414981] [client 52.204.253.129:21677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtMuDoKIhAJQslSIHz7KAAAAAE"]
[Thu Jul 30 14:08:08.714723 2026] [security2:error] [pid 3417649:tid 3417649] [client 43.165.7.132:42608] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtMuEZ_NK5gGxN-YlWG5wAAADY"], referer: http://www.rock-ola.co.uk
[Thu Jul 30 14:08:09.109299 2026] [security2:error] [pid 3409450:tid 3409450] [client 47.238.249.252:46863] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMubrEIFbE4xHm1y3tVwAAACU"]
[Thu Jul 30 14:08:09.109352 2026] [security2:error] [pid 3409450:tid 3409450] [client 47.238.249.252:46863] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMubrEIFbE4xHm1y3tVwAAACU"]
[Thu Jul 30 14:08:09.109619 2026] [security2:error] [pid 3409450:tid 3409450] [client 47.238.249.252:46863] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMubrEIFbE4xHm1y3tVwAAACU"]
[Thu Jul 30 14:08:09.771273 2026] [security2:error] [pid 3416091:tid 3416091] [client 43.130.39.254:34156] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtMuSICGqChih4dTXkgqwAAACI"]
[Thu Jul 30 14:08:10.122688 2026] [security2:error] [pid 3415024:tid 3415024] [client 43.135.185.59:46296] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtMutHSeEY83XBEXiaBmgAAABk"]
[Thu Jul 30 14:08:10.249081 2026] [security2:error] [pid 3417649:tid 3417649] [client 43.165.7.132:42234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtMukZ_NK5gGxN-YlWG6AAAADY"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 14:08:10.262813 2026] [security2:error] [pid 3418111:tid 3418111] [client 62.84.185.55:6660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hornsey-town-hall.org.uk"] [uri "/robots.txt"] [unique_id "amtMurDnaHG4V9SI4EuaBgAAAAc"]
[Thu Jul 30 14:08:10.478337 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:24116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:10.478368 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:10.531465 2026] [ssl:error] [pid 3411886:tid 3411886] (EAI 2)Name or service not known: [client 144.76.19.72:24120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:10.531505 2026] [ssl:error] [pid 3411886:tid 3411886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:11.642794 2026] [security2:error] [pid 3416002:tid 3416002] [client 47.239.23.80:36937] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMuwiMfwrLBZU_uQISUQAAAA8"]
[Thu Jul 30 14:08:11.642849 2026] [security2:error] [pid 3416002:tid 3416002] [client 47.239.23.80:36937] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMuwiMfwrLBZU_uQISUQAAAA8"]
[Thu Jul 30 14:08:11.643095 2026] [security2:error] [pid 3416002:tid 3416002] [client 47.239.23.80:36937] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMuwiMfwrLBZU_uQISUQAAAA8"]
[Thu Jul 30 14:08:12.237419 2026] [security2:error] [pid 3418111:tid 3418111] [client 43.134.94.96:46982] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/"] [unique_id "amtMvLDnaHG4V9SI4EuaBwAAAAc"]
[Thu Jul 30 14:08:12.469803 2026] [security2:error] [pid 3386775:tid 3386775] [client 43.130.39.254:58184] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtMvNG6CuEZHFTsq5sWwgAAACM"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 14:08:12.901841 2026] [security2:error] [pid 3418734:tid 3418734] [client 43.131.23.154:53152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/"] [unique_id "amtMvDIhvEQrCHn3Ks8IBAAAAAs"]
[Thu Jul 30 14:08:13.452391 2026] [security2:error] [pid 3417535:tid 3417535] [client 43.130.39.254:37994] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "amtMvdJPTUDkFw7i29V8CQAAABw"]
[Thu Jul 30 14:08:13.585724 2026] [ssl:error] [pid 3416002:tid 3416002] (EAI 2)Name or service not known: [client 144.76.19.72:24132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:13.585756 2026] [ssl:error] [pid 3416002:tid 3416002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:13.599329 2026] [security2:error] [pid 3416006:tid 3416006] [client 43.135.185.59:60134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtMvf_tHc8PHKfbSTBynQAAABE"], referer: http://www.apotheekcandidejacobs.be
[Thu Jul 30 14:08:13.641883 2026] [ssl:error] [pid 3416050:tid 3416050] (EAI 2)Name or service not known: [client 144.76.19.72:24138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:13.641920 2026] [ssl:error] [pid 3416050:tid 3416050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:13.745015 2026] [security2:error] [pid 3396745:tid 3396745] [client 43.131.23.154:53986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtMvRNQjGBFyXId4BO2gAAAAA4"], referer: http://www.theislipgarage.co.uk
[Thu Jul 30 14:08:13.942312 2026] [security2:error] [pid 3414052:tid 3414052] [client 43.130.91.95:43588] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amtMvXd1MdSIw8-Oje1YuQAAAAw"]
[Thu Jul 30 14:08:14.130756 2026] [security2:error] [pid 3414711:tid 3414711] [client 43.134.94.96:48326] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtMvvQgi5BxXc77UJVrCwAAABU"], referer: http://www.clarepillinger.co.uk
[Thu Jul 30 14:08:14.342087 2026] [security2:error] [pid 3416051:tid 3416051] [client 43.166.251.233:58196] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/"] [unique_id "amtMvoxkYgMj5iXgs4grugAAAB4"]
[Thu Jul 30 14:08:14.387393 2026] [security2:error] [pid 3389921:tid 3389921] [client 34.225.87.80:36656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtMvjW-x4QBeXeWhTTa6gAAABo"]
[Thu Jul 30 14:08:14.874189 2026] [security2:error] [pid 3414091:tid 3414091] [client 47.239.23.80:16027] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMvorQI4pEdtd8EtQRwQAAABA"]
[Thu Jul 30 14:08:14.874237 2026] [security2:error] [pid 3414091:tid 3414091] [client 47.239.23.80:16027] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtMvorQI4pEdtd8EtQRwQAAABA"]
[Thu Jul 30 14:08:14.874530 2026] [security2:error] [pid 3414091:tid 3414091] [client 47.239.23.80:16027] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtMvorQI4pEdtd8EtQRwQAAABA"]
[Thu Jul 30 14:08:15.446802 2026] [security2:error] [pid 3412178:tid 3412178] [client 129.226.146.146:39894] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.co.uk"] [uri "/"] [unique_id "amtMv2Y1M8pciytek1p7HAAAAAo"]
[Thu Jul 30 14:08:15.449912 2026] [authz_core:error] [pid 3412178:tid 3412178] [client 129.226.146.146:39894] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:08:15.455796 2026] [authz_core:error] [pid 3412178:tid 3412178] [client 129.226.146.146:39894] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:08:15.803824 2026] [security2:error] [pid 3401253:tid 3401253] [client 43.166.251.233:59654] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amtMv8JwlYAQIQVxrd_bsgAAABY"], referer: http://www.thesilkshed.co.uk
[Thu Jul 30 14:08:16.157541 2026] [security2:error] [pid 3416051:tid 3416051] [client 129.226.146.146:40540] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amtMwIxkYgMj5iXgs4gruwAAAB4"]
[Thu Jul 30 14:08:16.645299 2026] [security2:error] [pid 3411886:tid 3411886] [client 34.239.85.139:64526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtMwGFxr_MS-c4By9LwoAAAAAQ"]
[Thu Jul 30 14:08:16.718616 2026] [ssl:error] [pid 3414052:tid 3414052] (EAI 2)Name or service not known: [client 144.76.19.72:24150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:16.718653 2026] [ssl:error] [pid 3414052:tid 3414052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:16.774514 2026] [ssl:error] [pid 3412178:tid 3412178] (EAI 2)Name or service not known: [client 144.76.19.72:24154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:16.774537 2026] [ssl:error] [pid 3412178:tid 3412178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:17.447811 2026] [security2:error] [pid 3402463:tid 3402463] [client 43.135.130.202:38898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "amtMwdacryHj1UHXdgGvRQAAACw"]
[Thu Jul 30 14:08:18.752262 2026] [security2:error] [pid 3413621:tid 3413621] [client 43.157.46.118:60740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thatwall.com"] [uri "/"] [unique_id "amtMwlNeoWXmKDAb0N8vowAAAAY"]
[Thu Jul 30 14:08:19.852919 2026] [ssl:error] [pid 3417589:tid 3417589] (EAI 2)Name or service not known: [client 144.76.19.72:57126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:19.852976 2026] [ssl:error] [pid 3417589:tid 3417589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:19.907027 2026] [ssl:error] [pid 3410826:tid 3410826] (EAI 2)Name or service not known: [client 144.76.19.72:57134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:19.907049 2026] [ssl:error] [pid 3410826:tid 3410826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:20.376778 2026] [security2:error] [pid 3405248:tid 3405248] [client 170.106.179.68:59414] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highcleresyndicates.co.uk"] [uri "/"] [unique_id "amtMxDKxh_YwJMwOThAPrAAAABI"]
[Thu Jul 30 14:08:20.759906 2026] [security2:error] [pid 3417589:tid 3417589] [client 54.235.191.179:6896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtMxKFtyS7GB8Kfwc6uyAAAACk"]
[Thu Jul 30 14:08:21.359337 2026] [security2:error] [pid 3410826:tid 3410826] [client 85.208.96.207:14610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/def-leppard-drummer-death"] [unique_id "amtMxe3nXl-wRa9SxuEVPQAAADg"]
[Thu Jul 30 14:08:21.372734 2026] [security2:error] [pid 3400222:tid 3400222] [client 43.153.113.127:56002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sharonduggal.co.uk"] [uri "/"] [unique_id "amtMxaEXemDmYbcgd1uXeAAAAAM"]
[Thu Jul 30 14:08:21.627658 2026] [security2:error] [pid 3395813:tid 3395813] [client 170.106.37.134:46482] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.eu"] [uri "/"] [unique_id "amtMxWxxRwzCffhaGB7MlQAAABQ"]
[Thu Jul 30 14:08:21.863095 2026] [security2:error] [pid 3405248:tid 3405248] [client 170.106.37.134:46658] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.fr"] [uri "/"] [unique_id "amtMxTKxh_YwJMwOThAPrQAAABI"]
[Thu Jul 30 14:08:22.657907 2026] [security2:error] [pid 3408415:tid 3408415] [client 1.14.110.85:47964] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.newtronicmedia.com"] [uri "/"] [unique_id "amtMxhz-UNb2axbQ_2m1MwAAACQ"]
[Thu Jul 30 14:08:22.961568 2026] [ssl:error] [pid 3417535:tid 3417535] (EAI 2)Name or service not known: [client 144.76.19.72:57150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:22.961601 2026] [ssl:error] [pid 3417535:tid 3417535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:23.014502 2026] [ssl:error] [pid 3400222:tid 3400222] (EAI 2)Name or service not known: [client 144.76.19.72:57164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:23.014533 2026] [ssl:error] [pid 3400222:tid 3400222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:23.607872 2026] [security2:error] [pid 3417589:tid 3417589] [client 43.166.142.76:44998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.akoptimize.co.uk"] [uri "/"] [unique_id "amtMx6FtyS7GB8Kfwc6uygAAACk"]
[Thu Jul 30 14:08:23.714485 2026] [security2:error] [pid 3408415:tid 3408415] [client 23.154.136.246:29538] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns2.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtMxxz-UNb2axbQ_2m1NAAAACQ"]
[Thu Jul 30 14:08:23.714821 2026] [security2:error] [pid 3408415:tid 3408415] [client 23.154.136.246:29538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtMxxz-UNb2axbQ_2m1NAAAACQ"]
[Thu Jul 30 14:08:23.715042 2026] [security2:error] [pid 3408415:tid 3408415] [client 23.154.136.246:29538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns2.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtMxxz-UNb2axbQ_2m1NAAAACQ"]
[Thu Jul 30 14:08:23.977384 2026] [security2:error] [pid 3405248:tid 3405248] [client 23.154.136.246:29546] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns2.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtMxzKxh_YwJMwOThAPrgAAABI"]
[Thu Jul 30 14:08:23.977680 2026] [security2:error] [pid 3405248:tid 3405248] [client 23.154.136.246:29546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns2.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtMxzKxh_YwJMwOThAPrgAAABI"]
[Thu Jul 30 14:08:23.977886 2026] [security2:error] [pid 3405248:tid 3405248] [client 23.154.136.246:29546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns2.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtMxzKxh_YwJMwOThAPrgAAABI"]
[Thu Jul 30 14:08:24.440120 2026] [security2:error] [pid 3414091:tid 3414091] [client 170.106.37.134:45694] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtMyIrQI4pEdtd8EtQRxwAAABA"], referer: http://www.orgent.fr
[Thu Jul 30 14:08:24.442377 2026] [security2:error] [pid 3416051:tid 3416051] [client 170.106.37.134:45724] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtMyIxkYgMj5iXgs4grvQAAAB4"], referer: http://www.orgent.eu
[Thu Jul 30 14:08:25.946886 2026] [security2:error] [pid 3418111:tid 3418111] [client 43.157.52.37:50186] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amtMybDnaHG4V9SI4EuaDAAAAAc"]
[Thu Jul 30 14:08:26.069974 2026] [ssl:error] [pid 3417589:tid 3417589] (EAI 2)Name or service not known: [client 144.76.19.72:57176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:26.070001 2026] [ssl:error] [pid 3417589:tid 3417589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:26.127520 2026] [ssl:error] [pid 3409451:tid 3409451] (EAI 2)Name or service not known: [client 144.76.19.72:57182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:26.127553 2026] [ssl:error] [pid 3409451:tid 3409451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:26.233739 2026] [security2:error] [pid 3412178:tid 3412178] [client 43.130.47.33:58308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "amtMymY1M8pciytek1p7IgAAAAo"]
[Thu Jul 30 14:08:26.440646 2026] [core:error] [pid 3409451:tid 3409451] [client 193.47.62.168:56550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:08:26.440683 2026] [core:error] [pid 3409451:tid 3409451] [client 193.47.62.168:56550] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:08:26.618613 2026] [lsapi:warn] [pid 3414091:tid 3414091] [client 45.158.164.139:40314] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:08:26.618651 2026] [lsapi:warn] [pid 3414091:tid 3414091] [client 45.158.164.139:40314] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:08:26.631267 2026] [lsapi:warn] [pid 3417535:tid 3417535] [client 66.249.93.162:36345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:08:26.631304 2026] [lsapi:warn] [pid 3417535:tid 3417535] [client 66.249.93.162:36345] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:08:26.805115 2026] [lsapi:warn] [pid 3412178:tid 3412178] [client 43.130.47.33:58308] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:08:26.923625 2026] [lsapi:warn] [pid 3408415:tid 3408415] [client 45.158.164.139:40326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:08:26.923670 2026] [lsapi:warn] [pid 3408415:tid 3408415] [client 45.158.164.139:40326] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:08:26.925765 2026] [lsapi:warn] [pid 3416002:tid 3416002] [client 66.249.93.162:65172] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:08:26.925808 2026] [lsapi:warn] [pid 3416002:tid 3416002] [client 66.249.93.162:65172] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:08:27.548790 2026] [security2:error] [pid 3408415:tid 3408415] [client 170.106.180.246:45306] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amtMyxz-UNb2axbQ_2m1NwAAACQ"]
[Thu Jul 30 14:08:27.803109 2026] [security2:error] [pid 3417589:tid 3417589] [client 43.164.194.198:47444] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amtMy6FtyS7GB8Kfwc6uzAAAACk"], referer: http://www.peterboroughdiocesanregistry.co.uk
[Thu Jul 30 14:08:28.468406 2026] [security2:error] [pid 3417589:tid 3417589] [client 49.51.253.26:58596] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theovertones.co.uk"] [uri "/"] [unique_id "amtMzKFtyS7GB8Kfwc6uzQAAACk"]
[Thu Jul 30 14:08:29.227158 2026] [ssl:error] [pid 3409451:tid 3409451] (EAI 2)Name or service not known: [client 144.76.19.72:57194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:29.227190 2026] [ssl:error] [pid 3409451:tid 3409451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:29.280178 2026] [ssl:error] [pid 3417654:tid 3417654] (EAI 2)Name or service not known: [client 144.76.19.72:57208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:29.280214 2026] [ssl:error] [pid 3417654:tid 3417654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:29.404931 2026] [security2:error] [pid 3411886:tid 3411886] [client 43.131.39.179:34454] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.baketastic.co.uk"] [uri "/"] [unique_id "amtMzWFxr_MS-c4By9LwpQAAAAQ"]
[Thu Jul 30 14:08:30.516481 2026] [security2:error] [pid 3411886:tid 3411886] [client 43.130.47.33:33786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.techsuccess.uk"] [uri "/"] [unique_id "amtMzmFxr_MS-c4By9LwpwAAAAQ"]
[Thu Jul 30 14:08:30.851252 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 14:08:30.851390 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 14:08:30.851622 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 14:08:30.851811 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 14:08:30.851900 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 14:08:30.852096 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 14:08:30.852269 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 14:08:30.852344 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 14:08:30.852536 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 14:08:30.852665 2026] [authz_core:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 14:08:30.852721 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 14:08:30.852795 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 14:08:30.852977 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 14:08:30.853156 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 14:08:30.853231 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 14:08:30.853414 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 14:08:30.853589 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 14:08:30.853665 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 14:08:30.853847 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 14:08:30.854768 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 14:08:30.854844 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 14:08:30.855027 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 14:08:30.855229 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 14:08:30.855304 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 14:08:30.855501 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 14:08:30.856048 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 14:08:30.856157 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 14:08:30.856344 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 14:08:30.856525 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 14:08:30.856600 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 14:08:30.856782 2026] [access_compat:error] [pid 3420379:tid 3420379] [client 94.154.43.188:19236] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 14:08:32.037442 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.131.39.179:53356] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtM0O3nXl-wRa9SxuEVQAAAADg"], referer: http://www.baketastic.co.uk
[Thu Jul 30 14:08:32.109533 2026] [authz_core:error] [pid 3420379:tid 3420379] [client 66.249.66.33:55225] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:08:32.112203 2026] [authz_core:error] [pid 3420379:tid 3420379] [client 66.249.66.33:55225] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:08:32.333566 2026] [ssl:error] [pid 3410434:tid 3410434] (EAI 2)Name or service not known: [client 144.76.19.72:26680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:32.333590 2026] [ssl:error] [pid 3410434:tid 3410434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:32.385703 2026] [ssl:error] [pid 3411886:tid 3411886] (EAI 2)Name or service not known: [client 144.76.19.72:26686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:32.385735 2026] [ssl:error] [pid 3411886:tid 3411886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:32.582319 2026] [security2:error] [pid 3414711:tid 3414711] [client 43.166.238.12:42576] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.3dworkstation.co.uk"] [uri "/"] [unique_id "amtM0PQgi5BxXc77UJVrEgAAABU"]
[Thu Jul 30 14:08:34.019409 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amtM0tJPTUDkFw7i29V8DwAAABw"]
[Thu Jul 30 14:08:34.019581 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amtM0tJPTUDkFw7i29V8DwAAABw"]
[Thu Jul 30 14:08:34.019710 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amtM0tJPTUDkFw7i29V8DwAAABw"]
[Thu Jul 30 14:08:34.023142 2026] [security2:error] [pid 3402463:tid 3402463] [client 185.213.175.168:55542] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amtM0tacryHj1UHXdgGvTAAAACw"]
[Thu Jul 30 14:08:34.023269 2026] [security2:error] [pid 3402463:tid 3402463] [client 185.213.175.168:55542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amtM0tacryHj1UHXdgGvTAAAACw"]
[Thu Jul 30 14:08:34.023381 2026] [security2:error] [pid 3402463:tid 3402463] [client 185.213.175.168:55542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amtM0tacryHj1UHXdgGvTAAAACw"]
[Thu Jul 30 14:08:34.082598 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtM0tJPTUDkFw7i29V8EAAAABw"]
[Thu Jul 30 14:08:34.082750 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtM0tJPTUDkFw7i29V8EAAAABw"]
[Thu Jul 30 14:08:34.082877 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtM0tJPTUDkFw7i29V8EAAAABw"]
[Thu Jul 30 14:08:34.131786 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amtM0tJPTUDkFw7i29V8EQAAABw"]
[Thu Jul 30 14:08:34.131975 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amtM0tJPTUDkFw7i29V8EQAAABw"]
[Thu Jul 30 14:08:34.132123 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amtM0tJPTUDkFw7i29V8EQAAABw"]
[Thu Jul 30 14:08:34.419688 2026] [security2:error] [pid 3414711:tid 3414711] [client 185.213.175.168:55592] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtM0vQgi5BxXc77UJVrEwAAABU"]
[Thu Jul 30 14:08:34.419895 2026] [security2:error] [pid 3414711:tid 3414711] [client 185.213.175.168:55592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtM0vQgi5BxXc77UJVrEwAAABU"]
[Thu Jul 30 14:08:34.420046 2026] [security2:error] [pid 3414711:tid 3414711] [client 185.213.175.168:55592] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtM0vQgi5BxXc77UJVrEwAAABU"]
[Thu Jul 30 14:08:34.709164 2026] [security2:error] [pid 3402463:tid 3402463] [client 185.213.175.168:55542] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amtM0tacryHj1UHXdgGvTgAAACw"]
[Thu Jul 30 14:08:34.709353 2026] [security2:error] [pid 3402463:tid 3402463] [client 185.213.175.168:55542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amtM0tacryHj1UHXdgGvTgAAACw"]
[Thu Jul 30 14:08:34.709498 2026] [security2:error] [pid 3402463:tid 3402463] [client 185.213.175.168:55542] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amtM0tacryHj1UHXdgGvTgAAACw"]
[Thu Jul 30 14:08:34.737195 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amtM0tJPTUDkFw7i29V8EgAAABw"]
[Thu Jul 30 14:08:34.737414 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amtM0tJPTUDkFw7i29V8EgAAABw"]
[Thu Jul 30 14:08:34.737551 2026] [security2:error] [pid 3417535:tid 3417535] [client 185.213.175.168:55538] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amtM0tJPTUDkFw7i29V8EgAAABw"]
[Thu Jul 30 14:08:34.772103 2026] [security2:error] [pid 3414711:tid 3414711] [client 185.213.175.168:55592] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amtM0vQgi5BxXc77UJVrFAAAABU"]
[Thu Jul 30 14:08:34.772290 2026] [security2:error] [pid 3414711:tid 3414711] [client 185.213.175.168:55592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amtM0vQgi5BxXc77UJVrFAAAABU"]
[Thu Jul 30 14:08:34.772413 2026] [security2:error] [pid 3414711:tid 3414711] [client 185.213.175.168:55592] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amtM0vQgi5BxXc77UJVrFAAAABU"]
[Thu Jul 30 14:08:35.443610 2026] [ssl:error] [pid 3414091:tid 3414091] (EAI 2)Name or service not known: [client 144.76.19.72:26690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:35.443645 2026] [ssl:error] [pid 3414091:tid 3414091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:35.496865 2026] [ssl:error] [pid 3420262:tid 3420262] (EAI 2)Name or service not known: [client 144.76.19.72:26706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:35.496897 2026] [ssl:error] [pid 3420262:tid 3420262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:38.548992 2026] [ssl:error] [pid 3395813:tid 3395813] (EAI 2)Name or service not known: [client 144.76.19.72:26710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:38.549040 2026] [ssl:error] [pid 3395813:tid 3395813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:38.601732 2026] [ssl:error] [pid 3417647:tid 3417647] (EAI 2)Name or service not known: [client 144.76.19.72:26718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:38.601767 2026] [ssl:error] [pid 3417647:tid 3417647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:39.376673 2026] [security2:error] [pid 3401253:tid 3401253] [client 43.166.238.12:48590] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtM18JwlYAQIQVxrd_buAAAABY"]
[Thu Jul 30 14:08:39.956323 2026] [security2:error] [pid 3395813:tid 3395813] [client 43.130.40.120:43764] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtM12xxRwzCffhaGB7MoQAAABQ"]
[Thu Jul 30 14:08:40.258949 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 45.158.164.139:48120] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:08:40.540762 2026] [access_compat:error] [pid 3401253:tid 3401253] [client 45.158.164.139:48136] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:08:41.552434 2026] [security2:error] [pid 3418111:tid 3418111] [client 43.166.238.12:55992] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtM2bDnaHG4V9SI4EuaEAAAAAc"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 14:08:41.657314 2026] [ssl:error] [pid 3401253:tid 3401253] (EAI 2)Name or service not known: [client 144.76.19.72:34102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:41.657340 2026] [ssl:error] [pid 3401253:tid 3401253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:41.712671 2026] [ssl:error] [pid 3420727:tid 3420727] (EAI 2)Name or service not known: [client 144.76.19.72:34118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:41.712736 2026] [ssl:error] [pid 3420727:tid 3420727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:42.189269 2026] [security2:error] [pid 3414052:tid 3414052] [client 43.159.143.187:36772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtM2nd1MdSIw8-Oje1YwwAAAAw"]
[Thu Jul 30 14:08:42.942821 2026] [security2:error] [pid 3417588:tid 3417588] [client 170.106.180.153:37376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amtM2sBpOa9LiuRwEw2LIgAAACc"]
[Thu Jul 30 14:08:43.081806 2026] [security2:error] [pid 3417535:tid 3417535] [client 43.130.40.120:45872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/aanbod/"] [unique_id "amtM29JPTUDkFw7i29V8FQAAABw"], referer: https://apotheekcandidejacobs.be/?p=283
[Thu Jul 30 14:08:44.769493 2026] [ssl:error] [pid 3420764:tid 3420764] (EAI 2)Name or service not known: [client 144.76.19.72:34124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:44.769535 2026] [ssl:error] [pid 3420764:tid 3420764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:44.826875 2026] [ssl:error] [pid 3418111:tid 3418111] (EAI 2)Name or service not known: [client 144.76.19.72:34140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:44.826907 2026] [ssl:error] [pid 3418111:tid 3418111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:46.853550 2026] [security2:error] [pid 3420764:tid 3420764] [client 43.166.131.228:53560] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.org.uk"] [uri "/"] [unique_id "amtM3sYtJnKDb8DW-raZYgAAABk"]
[Thu Jul 30 14:08:46.984183 2026] [security2:error] [pid 3412178:tid 3412178] [client 170.106.180.139:53824] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.loca.co.uk"] [uri "/"] [unique_id "amtM3mY1M8pciytek1p7LAAAAAo"]
[Thu Jul 30 14:08:47.004487 2026] [security2:error] [pid 3418734:tid 3418734] [client 170.106.11.6:38592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amtM3zIhvEQrCHn3Ks8IEgAAAAs"]
[Thu Jul 30 14:08:47.882808 2026] [ssl:error] [pid 3418111:tid 3418111] (EAI 2)Name or service not known: [client 144.76.19.72:34154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:47.882837 2026] [ssl:error] [pid 3418111:tid 3418111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:48.005714 2026] [ssl:error] [pid 3408415:tid 3408415] (EAI 2)Name or service not known: [client 144.76.19.72:34168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:48.005755 2026] [ssl:error] [pid 3408415:tid 3408415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:48.056001 2026] [security2:error] [pid 3420764:tid 3420764] [client 101.33.80.42:32794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtM4MYtJnKDb8DW-raZYwAAABk"], referer: http://www.banskoexpress.co.uk
[Thu Jul 30 14:08:48.178441 2026] [security2:error] [pid 3418734:tid 3418734] [client 43.157.46.118:54950] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.cssystems.co.uk"] [uri "/"] [unique_id "amtM4DIhvEQrCHn3Ks8IEwAAAAs"], referer: http://www.cssystems.co.uk
[Thu Jul 30 14:08:49.048466 2026] [security2:error] [pid 3420595:tid 3420595] [client 43.166.131.228:55258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amtM4e6k8FwlnbxB54xcZQAAAAk"], referer: http://www.shelterforum.org.uk
[Thu Jul 30 14:08:49.303117 2026] [security2:error] [pid 3411886:tid 3411886] [client 49.234.192.248:33114] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amtM4WFxr_MS-c4By9LwrgAAAAQ"]
[Thu Jul 30 14:08:50.381899 2026] [lsapi:warn] [pid 3420645:tid 3420645] [client 216.73.216.199:4226] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 14:08:50.381938 2026] [lsapi:error] [pid 3420645:tid 3420645] [client 216.73.216.199:4226] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeCData.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 14:08:50.610052 2026] [security2:error] [pid 3410826:tid 3410826] [client 101.33.80.42:51256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtM4u3nXl-wRa9SxuEVRQAAADg"], referer: http://www.banskoexpress.com
[Thu Jul 30 14:08:51.016979 2026] [security2:error] [pid 3418734:tid 3418734] [client 101.32.49.171:56788] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.p2studio.co.uk"] [uri "/"] [unique_id "amtM4zIhvEQrCHn3Ks8IFAAAAAs"]
[Thu Jul 30 14:08:51.079122 2026] [ssl:error] [pid 3408415:tid 3408415] (EAI 2)Name or service not known: [client 144.76.19.72:28576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:51.079160 2026] [ssl:error] [pid 3408415:tid 3408415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:51.135211 2026] [ssl:error] [pid 3416091:tid 3416091] (EAI 2)Name or service not known: [client 144.76.19.72:28588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:51.135256 2026] [ssl:error] [pid 3416091:tid 3416091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:52.092197 2026] [access_compat:error] [pid 3416091:tid 3416091] [client 47.236.96.46:20270] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/11/markking.jpg
[Thu Jul 30 14:08:52.092321 2026] [access_compat:error] [pid 3416091:tid 3416091] [client 47.236.96.46:20270] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:08:54.193003 2026] [ssl:error] [pid 3417649:tid 3417649] (EAI 2)Name or service not known: [client 144.76.19.72:28596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:54.193037 2026] [ssl:error] [pid 3417649:tid 3417649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:54.246811 2026] [ssl:error] [pid 3409451:tid 3409451] (EAI 2)Name or service not known: [client 144.76.19.72:28606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:54.246845 2026] [ssl:error] [pid 3409451:tid 3409451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:54.381543 2026] [security2:error] [pid 3416051:tid 3416051] [client 43.166.250.187:52106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amtM5oxkYgMj5iXgs4grwgAAAB4"]
[Thu Jul 30 14:08:54.757393 2026] [security2:error] [pid 3416050:tid 3416050] [client 43.166.244.66:37268] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.refraction.co.uk"] [uri "/"] [unique_id "amtM5kd55HPrZUJpH_99ZAAAAB0"]
[Thu Jul 30 14:08:55.953743 2026] [security2:error] [pid 3417589:tid 3417589] [client 49.234.192.248:39814] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtM56FtyS7GB8Kfwc6u1gAAACk"], referer: http://spampmusic.co.uk
[Thu Jul 30 14:08:56.116859 2026] [security2:error] [pid 3389921:tid 3389921] [client 170.106.180.139:33994] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.leaccess.co.uk"] [uri "/"] [unique_id "amtM6DW-x4QBeXeWhTTa9AAAABo"]
[Thu Jul 30 14:08:56.433919 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 14:08:56.434022 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 14:08:56.434197 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 14:08:56.434362 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 14:08:56.434427 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 14:08:56.434595 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 14:08:56.434747 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 14:08:56.434812 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 14:08:56.434969 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 14:08:56.435092 2026] [authz_core:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 14:08:56.435144 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 14:08:56.435208 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 14:08:56.435364 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 14:08:56.435520 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 14:08:56.435584 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 14:08:56.435739 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 14:08:56.435884 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 14:08:56.435948 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 14:08:56.436115 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 14:08:56.436895 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 14:08:56.436972 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 14:08:56.437136 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 14:08:56.437299 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 14:08:56.437363 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 14:08:56.437524 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 14:08:56.437993 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 14:08:56.438058 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 14:08:56.438227 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 14:08:56.438376 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 14:08:56.438440 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 14:08:56.438602 2026] [access_compat:error] [pid 3416049:tid 3416049] [client 157.55.39.53:19203] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 14:08:56.657412 2026] [security2:error] [pid 3420644:tid 3420644] [client 85.208.96.210:65012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10541.0.html"] [unique_id "amtM6ECgkAnYhycbzpXjTQAAAA4"]
[Thu Jul 30 14:08:57.300604 2026] [ssl:error] [pid 3417480:tid 3417480] (EAI 2)Name or service not known: [client 144.76.19.72:28616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:57.300658 2026] [ssl:error] [pid 3417480:tid 3417480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:08:57.355616 2026] [ssl:error] [pid 3420644:tid 3420644] (EAI 2)Name or service not known: [client 144.76.19.72:28626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:08:57.355658 2026] [ssl:error] [pid 3420644:tid 3420644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:00.055326 2026] [security2:error] [pid 3420595:tid 3420595] [client 43.166.131.228:35802] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amtM7O6k8FwlnbxB54xcaAAAAAk"]
[Thu Jul 30 14:09:00.177542 2026] [security2:error] [pid 3421717:tid 3421717] [client 43.157.46.118:60190] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.inrc.org.uk"] [uri "/"] [unique_id "amtM7Iww4sQjw4ALdgzwDwAAABU"]
[Thu Jul 30 14:09:00.408211 2026] [security2:error] [pid 3389921:tid 3389921] [client 49.51.52.250:42544] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amtM7DW-x4QBeXeWhTTa9wAAABo"]
[Thu Jul 30 14:09:00.410543 2026] [ssl:error] [pid 3415945:tid 3415945] (EAI 2)Name or service not known: [client 144.76.19.72:20158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:00.410573 2026] [ssl:error] [pid 3415945:tid 3415945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:00.466304 2026] [ssl:error] [pid 3416002:tid 3416002] (EAI 2)Name or service not known: [client 144.76.19.72:20164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:00.466341 2026] [ssl:error] [pid 3416002:tid 3416002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:02.028888 2026] [security2:error] [pid 3417480:tid 3417480] [client 43.153.62.161:44296] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "amtM7pkkvZ2z8iK_cxUVHQAAABs"]
[Thu Jul 30 14:09:02.623883 2026] [security2:error] [pid 3416096:tid 3416096] [client 43.140.247.223:54510] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtM7syMqILhVc14qlhs1QAAAC8"]
[Thu Jul 30 14:09:03.523101 2026] [ssl:error] [pid 3417535:tid 3417535] (EAI 2)Name or service not known: [client 144.76.19.72:20166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:03.523137 2026] [ssl:error] [pid 3417535:tid 3417535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:03.578938 2026] [ssl:error] [pid 3420644:tid 3420644] (EAI 2)Name or service not known: [client 144.76.19.72:20168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:03.578962 2026] [ssl:error] [pid 3420644:tid 3420644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:04.460521 2026] [security2:error] [pid 3417535:tid 3417535] [client 150.109.119.38:47900] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.fast-hosting.co.uk"] [uri "/"] [unique_id "amtM8NJPTUDkFw7i29V8NgAAABw"]
[Thu Jul 30 14:09:05.328237 2026] [security2:error] [pid 3421956:tid 3421956] [client 43.140.247.223:42040] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtM8TzDVvakFg40wT1WKQAAACs"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 14:09:06.184787 2026] [security2:error] [pid 3416049:tid 3416049] [client 170.106.107.87:47790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.parallel-coordinates.co.uk"] [uri "/"] [unique_id "amtM8oQasOMDxjIXdgvhdAAAABg"]
[Thu Jul 30 14:09:06.637528 2026] [ssl:error] [pid 3417535:tid 3417535] (EAI 2)Name or service not known: [client 144.76.19.72:20176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:06.637561 2026] [ssl:error] [pid 3417535:tid 3417535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:06.690357 2026] [ssl:error] [pid 3420727:tid 3420727] (EAI 2)Name or service not known: [client 144.76.19.72:20186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:06.690391 2026] [ssl:error] [pid 3420727:tid 3420727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:06.893286 2026] [security2:error] [pid 3418734:tid 3418734] [client 43.130.150.80:60690] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ziltdesign.be"] [uri "/"] [unique_id "amtM8jIhvEQrCHn3Ks8IGQAAAAs"]
[Thu Jul 30 14:09:07.391854 2026] [security2:error] [pid 3414981:tid 3414981] [client 43.153.102.138:45390] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tripodhome.co.uk"] [uri "/"] [unique_id "amtM8zoKIhAJQslSIHz7LAAAAAE"]
[Thu Jul 30 14:09:07.655622 2026] [security2:error] [pid 3420727:tid 3420727] [client 43.135.138.128:45794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "amtM88AJ6Zb_8ppZjJjyNAAAABc"]
[Thu Jul 30 14:09:08.977433 2026] [security2:error] [pid 3416002:tid 3416002] [client 129.226.193.111:38260] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amtM9AiMfwrLBZU_uQISXwAAAA8"]
[Thu Jul 30 14:09:09.743720 2026] [ssl:error] [pid 3414981:tid 3414981] (EAI 2)Name or service not known: [client 144.76.19.72:53740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:09.743755 2026] [ssl:error] [pid 3414981:tid 3414981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:09.796935 2026] [ssl:error] [pid 3421904:tid 3421904] (EAI 2)Name or service not known: [client 144.76.19.72:53754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:09.796971 2026] [ssl:error] [pid 3421904:tid 3421904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:10.617672 2026] [security2:error] [pid 3414981:tid 3414981] [client 34.192.67.98:45849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "magic-cookie.co.uk"] [uri "/jargon/jarg431/"] [unique_id "amtM9joKIhAJQslSIHz7LQAAAAE"]
[Thu Jul 30 14:09:10.943234 2026] [ssl:error] [pid 3420595:tid 3420595] (70014)End of file found: [client 216.73.216.199:53025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:09:10.980748 2026] [authz_core:error] [pid 3417649:tid 3417649] [client 66.249.66.33:57270] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:09:10.983390 2026] [authz_core:error] [pid 3417649:tid 3417649] [client 66.249.66.33:57270] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:09:12.891091 2026] [ssl:error] [pid 3416051:tid 3416051] (EAI 2)Name or service not known: [client 144.76.19.72:53770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:12.891137 2026] [ssl:error] [pid 3416051:tid 3416051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:12.944094 2026] [ssl:error] [pid 3412178:tid 3412178] (EAI 2)Name or service not known: [client 144.76.19.72:53784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:12.944130 2026] [ssl:error] [pid 3412178:tid 3412178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:15.996969 2026] [ssl:error] [pid 3416049:tid 3416049] (EAI 2)Name or service not known: [client 144.76.19.72:53788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:15.997001 2026] [ssl:error] [pid 3416049:tid 3416049] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:16.052893 2026] [ssl:error] [pid 3417654:tid 3417654] (EAI 2)Name or service not known: [client 144.76.19.72:53794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:16.052925 2026] [ssl:error] [pid 3417654:tid 3417654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:17.156500 2026] [security2:error] [pid 3416049:tid 3416049] [client 43.159.143.187:44928] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amtM_YQasOMDxjIXdgvhdwAAABg"]
[Thu Jul 30 14:09:18.192099 2026] [security2:error] [pid 3421958:tid 3421958] [client 101.32.49.171:45830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sarahwiseman.co.uk"] [uri "/"] [unique_id "amtM_tZVF0oreZAk71v9RAAAADE"]
[Thu Jul 30 14:09:18.676018 2026] [security2:error] [pid 3413399:tid 3413399] [client 43.159.143.187:46436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amtM_od6vpXfl60osUDaLgAAAAU"], referer: http://www.berehap.be
[Thu Jul 30 14:09:19.109200 2026] [ssl:error] [pid 3421903:tid 3421903] (EAI 2)Name or service not known: [client 144.76.19.72:53806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:19.109236 2026] [ssl:error] [pid 3421903:tid 3421903] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:19.164728 2026] [ssl:error] [pid 3417650:tid 3417650] (EAI 2)Name or service not known: [client 144.76.19.72:53812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:19.164764 2026] [ssl:error] [pid 3417650:tid 3417650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:20.692862 2026] [security2:error] [pid 3413399:tid 3413399] [client 85.208.96.208:36708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4513.0/prev_next,next.html"] [unique_id "amtNAId6vpXfl60osUDaLwAAAAU"]
[Thu Jul 30 14:09:21.137707 2026] [ssl:error] [pid 3416002:tid 3416002] (70014)End of file found: [client 216.73.216.199:46582] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:09:21.286038 2026] [security2:error] [pid 3417589:tid 3417589] [client 43.159.143.187:49386] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtNAaFtyS7GB8Kfwc6u3QAAACk"], referer: https://www.berehap.be/
[Thu Jul 30 14:09:21.329817 2026] [security2:error] [pid 3421718:tid 3421718] [client 43.159.62.129:52106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtNARRHmW9O4vKjtek4cAAAACI"]
[Thu Jul 30 14:09:21.331890 2026] [security2:error] [pid 3410826:tid 3410826] [client 51.68.236.92:15623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "londonkinesiology.com"] [uri "/robots.txt"] [unique_id "amtNAe3nXl-wRa9SxuEVUAAAADg"]
[Thu Jul 30 14:09:21.798719 2026] [security2:error] [pid 3422670:tid 3422670] [client 101.32.49.171:47874] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amtNAZnnQ13IFmxUHgDjUQAAAAs"], referer: http://www.sarahwiseman.co.uk
[Thu Jul 30 14:09:22.011490 2026] [security2:error] [pid 3421717:tid 3421717] [client 49.51.180.2:43164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.islay.me"] [uri "/"] [unique_id "amtNAoww4sQjw4ALdgzwFQAAABU"]
[Thu Jul 30 14:09:22.220786 2026] [ssl:error] [pid 3400222:tid 3400222] (EAI 2)Name or service not known: [client 144.76.19.72:53972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:22.220816 2026] [ssl:error] [pid 3400222:tid 3400222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:22.276787 2026] [ssl:error] [pid 3421957:tid 3421957] (EAI 2)Name or service not known: [client 144.76.19.72:53982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:22.276818 2026] [ssl:error] [pid 3421957:tid 3421957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:22.445212 2026] [security2:error] [pid 3421903:tid 3421903] [client 185.191.171.14:46112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6957.0.html"] [unique_id "amtNAsZW6QZFFzAHH_lO2AAAACY"]
[Thu Jul 30 14:09:23.085526 2026] [security2:error] [pid 3421718:tid 3421718] [client 185.191.171.8:47922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/which-user-role-can-activate-projects-in-a-xero-organisation%3F"] [unique_id "amtNAxRHmW9O4vKjtek4cQAAACI"]
[Thu Jul 30 14:09:25.355213 2026] [ssl:error] [pid 3413621:tid 3413621] (EAI 2)Name or service not known: [client 144.76.19.72:53988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:25.355259 2026] [ssl:error] [pid 3413621:tid 3413621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:25.410566 2026] [ssl:error] [pid 3420595:tid 3420595] (EAI 2)Name or service not known: [client 144.76.19.72:53990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:25.410600 2026] [ssl:error] [pid 3420595:tid 3420595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:27.157993 2026] [security2:error] [pid 3417589:tid 3417589] [client 85.208.96.194:24122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/robots.txt"] [unique_id "amtNB6FtyS7GB8Kfwc6u3wAAACk"]
[Thu Jul 30 14:09:27.749322 2026] [security2:error] [pid 3417654:tid 3417654] [client 170.106.15.3:37548] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.co.uk"] [uri "/"] [unique_id "amtNB-4M_fUC5LCpGftN-gAAADs"]
[Thu Jul 30 14:09:28.467369 2026] [ssl:error] [pid 3420379:tid 3420379] (EAI 2)Name or service not known: [client 144.76.19.72:53996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:28.467400 2026] [ssl:error] [pid 3420379:tid 3420379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:28.522636 2026] [ssl:error] [pid 3417589:tid 3417589] (EAI 2)Name or service not known: [client 144.76.19.72:53998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:28.522672 2026] [ssl:error] [pid 3417589:tid 3417589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:30.775327 2026] [security2:error] [pid 3421903:tid 3421903] [client 23.150.152.113:60568] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtNCsZW6QZFFzAHH_lO2gAAACY"]
[Thu Jul 30 14:09:30.775623 2026] [security2:error] [pid 3421903:tid 3421903] [client 23.150.152.113:60568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtNCsZW6QZFFzAHH_lO2gAAACY"]
[Thu Jul 30 14:09:30.775855 2026] [security2:error] [pid 3421903:tid 3421903] [client 23.150.152.113:60568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtNCsZW6QZFFzAHH_lO2gAAACY"]
[Thu Jul 30 14:09:30.920522 2026] [security2:error] [pid 3421903:tid 3421903] [client 23.150.152.113:60568] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtNCsZW6QZFFzAHH_lO2wAAACY"]
[Thu Jul 30 14:09:30.920797 2026] [security2:error] [pid 3421903:tid 3421903] [client 23.150.152.113:60568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtNCsZW6QZFFzAHH_lO2wAAACY"]
[Thu Jul 30 14:09:30.921019 2026] [security2:error] [pid 3421903:tid 3421903] [client 23.150.152.113:60568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtNCsZW6QZFFzAHH_lO2wAAACY"]
[Thu Jul 30 14:09:31.162303 2026] [ssl:error] [pid 3416002:tid 3416002] (70014)End of file found: [client 216.73.216.199:17508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:09:31.580593 2026] [ssl:error] [pid 3386775:tid 3386775] (EAI 2)Name or service not known: [client 144.76.19.72:21530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:31.580618 2026] [ssl:error] [pid 3386775:tid 3386775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:31.635516 2026] [ssl:error] [pid 3418111:tid 3418111] (EAI 2)Name or service not known: [client 144.76.19.72:21532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:31.635545 2026] [ssl:error] [pid 3418111:tid 3418111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:32.311045 2026] [security2:error] [pid 3417535:tid 3417535] [client 74.244.85.216:39269] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNDNJPTUDkFw7i29V8PQAAABw"]
[Thu Jul 30 14:09:32.311106 2026] [security2:error] [pid 3417535:tid 3417535] [client 74.244.85.216:39269] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNDNJPTUDkFw7i29V8PQAAABw"]
[Thu Jul 30 14:09:32.311334 2026] [security2:error] [pid 3417535:tid 3417535] [client 74.244.85.216:39269] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNDNJPTUDkFw7i29V8PQAAABw"]
[Thu Jul 30 14:09:34.693470 2026] [ssl:error] [pid 3395813:tid 3395813] (EAI 2)Name or service not known: [client 144.76.19.72:21548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:34.693501 2026] [ssl:error] [pid 3395813:tid 3395813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:34.748348 2026] [ssl:error] [pid 3420644:tid 3420644] (EAI 2)Name or service not known: [client 144.76.19.72:21552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:34.748383 2026] [ssl:error] [pid 3420644:tid 3420644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:35.212337 2026] [security2:error] [pid 3423958:tid 3423958] [client 85.208.96.207:12354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2873.0/prev_next,next.html"] [unique_id "amtNDyc4Bz9NUys3tnOqkwAAAAg"]
[Thu Jul 30 14:09:36.189342 2026] [security2:error] [pid 3400222:tid 3400222] [client 49.51.252.146:59584] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spurr.org.uk"] [uri "/"] [unique_id "amtNEKEXemDmYbcgd1uX5AAAAAM"]
[Thu Jul 30 14:09:36.206323 2026] [security2:error] [pid 3417589:tid 3417589] [client 217.201.253.29:53453] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNEKFtyS7GB8Kfwc6u4wAAACk"]
[Thu Jul 30 14:09:36.206369 2026] [security2:error] [pid 3417589:tid 3417589] [client 217.201.253.29:53453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNEKFtyS7GB8Kfwc6u4wAAACk"]
[Thu Jul 30 14:09:36.206620 2026] [security2:error] [pid 3417589:tid 3417589] [client 217.201.253.29:53453] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNEKFtyS7GB8Kfwc6u4wAAACk"]
[Thu Jul 30 14:09:36.286092 2026] [core:error] [pid 3420595:tid 3420595] [client 66.249.66.71:63146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:09:36.286119 2026] [core:error] [pid 3420595:tid 3420595] [client 66.249.66.71:63146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:09:37.803474 2026] [ssl:error] [pid 3412178:tid 3412178] (EAI 2)Name or service not known: [client 144.76.19.72:21554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:37.803518 2026] [ssl:error] [pid 3412178:tid 3412178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:37.862486 2026] [ssl:error] [pid 3421957:tid 3421957] (EAI 2)Name or service not known: [client 144.76.19.72:21566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:37.862517 2026] [ssl:error] [pid 3421957:tid 3421957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:37.999613 2026] [security2:error] [pid 3416096:tid 3416096] [client 43.166.244.251:52378] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.craft-buddies.co.uk"] [uri "/"] [unique_id "amtNEcyMqILhVc14qlhs4AAAAC8"]
[Thu Jul 30 14:09:39.873079 2026] [core:crit] [pid 3414091:tid 3414091] (13)Permission denied: [client 40.77.167.55:4730] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:09:40.919903 2026] [ssl:error] [pid 3420644:tid 3420644] (EAI 2)Name or service not known: [client 144.76.19.72:60414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:40.919946 2026] [ssl:error] [pid 3420644:tid 3420644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:40.976595 2026] [ssl:error] [pid 3421717:tid 3421717] (EAI 2)Name or service not known: [client 144.76.19.72:60422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:40.976638 2026] [ssl:error] [pid 3421717:tid 3421717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:41.163928 2026] [ssl:error] [pid 3416006:tid 3416006] (70014)End of file found: [client 216.73.216.199:40778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:09:44.031774 2026] [ssl:error] [pid 3420644:tid 3420644] (EAI 2)Name or service not known: [client 144.76.19.72:60434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:44.031803 2026] [ssl:error] [pid 3420644:tid 3420644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:44.090510 2026] [ssl:error] [pid 3410433:tid 3410433] (EAI 2)Name or service not known: [client 144.76.19.72:60448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:44.090542 2026] [ssl:error] [pid 3410433:tid 3410433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:44.466149 2026] [core:crit] [pid 3413621:tid 3413621] (13)Permission denied: [client 40.77.167.51:1077] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:09:46.115865 2026] [security2:error] [pid 3416090:tid 3416090] [client 43.162.103.213:35798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtNGiBngs2NyYnr63YKcAAAACA"]
[Thu Jul 30 14:09:47.149001 2026] [ssl:error] [pid 3423958:tid 3423958] (EAI 2)Name or service not known: [client 144.76.19.72:60450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:47.149039 2026] [ssl:error] [pid 3423958:tid 3423958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:47.295455 2026] [ssl:error] [pid 3395813:tid 3395813] (EAI 2)Name or service not known: [client 144.76.19.72:60456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:47.295480 2026] [ssl:error] [pid 3395813:tid 3395813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:48.531521 2026] [authz_core:error] [pid 3395813:tid 3395813] [client 103.117.14.201:0] AH01630: client denied by server configuration: /home/kikikend/liveinhopedieincaergwrle.co.uk/php.ini
[Thu Jul 30 14:09:48.755307 2026] [security2:error] [pid 3414981:tid 3414981] [client 57.141.0.51:27752] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.jeansandcasual.devwebsitehub.com"] [uri "/wp-config.php"] [unique_id "amtNHDoKIhAJQslSIHz7kwAAAAE"]
[Thu Jul 30 14:09:48.755601 2026] [security2:error] [pid 3414981:tid 3414981] [client 57.141.0.51:27752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jeansandcasual.devwebsitehub.com"] [uri "/wp-config.php"] [unique_id "amtNHDoKIhAJQslSIHz7kwAAAAE"]
[Thu Jul 30 14:09:48.755865 2026] [security2:error] [pid 3414981:tid 3414981] [client 57.141.0.51:27752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.jeansandcasual.devwebsitehub.com"] [uri "/wp-config.php"] [unique_id "amtNHDoKIhAJQslSIHz7kwAAAAE"]
[Thu Jul 30 14:09:48.763150 2026] [authz_core:error] [pid 3395813:tid 3395813] [client 103.117.14.201:0] AH01630: client denied by server configuration: /home/kikikend/liveinhopedieincaergwrle.co.uk/php.ini, referer: http://liveinhopedieincaergwrle.co.uk
[Thu Jul 30 14:09:49.002744 2026] [cgi:error] [pid 3395813:tid 3395813] [client 103.117.14.201:0] AH02812: stderr from /home/kikikend/liveinhopedieincaergwrle.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://liveinhopedieincaergwrle.co.uk
[Thu Jul 30 14:09:49.435765 2026] [authz_core:error] [pid 3417654:tid 3417654] [client 103.117.14.201:0] AH01630: client denied by server configuration: /home/kikikend/liveinhopedieincaergwrle.co.uk/php.ini, referer: http://liveinhopedieincaergwrle.co.uk
[Thu Jul 30 14:09:49.665923 2026] [authz_core:error] [pid 3395813:tid 3395813] [client 103.117.14.201:0] AH01630: client denied by server configuration: /home/kikikend/liveinhopedieincaergwrle.co.uk/php.ini, referer: http://liveinhopedieincaergwrle.co.uk
[Thu Jul 30 14:09:49.761879 2026] [security2:error] [pid 3424776:tid 3424776] [client 43.162.103.213:37002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtNHexBVrTHMmQckf7g3QAAABs"], referer: http://www.purple-childcare.co.uk
[Thu Jul 30 14:09:49.904115 2026] [authz_core:error] [pid 3395813:tid 3395813] [client 103.117.14.201:0] AH01630: client denied by server configuration: /home/kikikend/liveinhopedieincaergwrle.co.uk/php.ini, referer: http://liveinhopedieincaergwrle.co.uk
[Thu Jul 30 14:09:50.351481 2026] [ssl:error] [pid 3420727:tid 3420727] (EAI 2)Name or service not known: [client 144.76.19.72:38826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:50.351511 2026] [ssl:error] [pid 3420727:tid 3420727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:50.408709 2026] [ssl:error] [pid 3421956:tid 3421956] (EAI 2)Name or service not known: [client 144.76.19.72:38836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:50.408744 2026] [ssl:error] [pid 3421956:tid 3421956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:52.366829 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.134.68.29:47188] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtNIO3nXl-wRa9SxuEVuwAAADg"]
[Thu Jul 30 14:09:52.926431 2026] [access_compat:error] [pid 3417650:tid 3417650] [client 45.158.164.139:46512] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:09:53.473561 2026] [ssl:error] [pid 3416094:tid 3416094] (EAI 2)Name or service not known: [client 144.76.19.72:38852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:53.473586 2026] [ssl:error] [pid 3416094:tid 3416094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:53.526593 2026] [ssl:error] [pid 3425267:tid 3425267] (EAI 2)Name or service not known: [client 144.76.19.72:38856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:53.526635 2026] [ssl:error] [pid 3425267:tid 3425267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:55.247213 2026] [authz_core:error] [pid 3414091:tid 3414091] [client 66.249.66.33:49391] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:09:55.249865 2026] [authz_core:error] [pid 3414091:tid 3414091] [client 66.249.66.33:49391] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:09:55.388627 2026] [security2:error] [pid 3425335:tid 3425335] [client 43.134.68.29:49918] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtNI2EyXCkZDDEU1Cf1LwAAADI"], referer: http://www.1stcolsterworthscouts.org.uk
[Thu Jul 30 14:09:55.977855 2026] [cgi:error] [pid 3421957:tid 3421957] [client 20.100.203.84:25156] AH02811: stderr from /home/freakorg/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:09:56.274488 2026] [cgi:error] [pid 3421957:tid 3421957] [client 20.100.203.84:25156] AH02811: stderr from /home/freakorg/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:09:56.599469 2026] [ssl:error] [pid 3417535:tid 3417535] (EAI 2)Name or service not known: [client 144.76.19.72:38864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:56.599515 2026] [ssl:error] [pid 3417535:tid 3417535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:56.653608 2026] [ssl:error] [pid 3422670:tid 3422670] (EAI 2)Name or service not known: [client 144.76.19.72:38876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:56.653638 2026] [ssl:error] [pid 3422670:tid 3422670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:57.744190 2026] [security2:error] [pid 3425335:tid 3425335] [client 144.172.94.198:50358] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env"] [unique_id "amtNJWEyXCkZDDEU1Cf1MAAAADI"]
[Thu Jul 30 14:09:57.744377 2026] [security2:error] [pid 3425335:tid 3425335] [client 144.172.94.198:50358] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env"] [unique_id "amtNJWEyXCkZDDEU1Cf1MAAAADI"]
[Thu Jul 30 14:09:58.175190 2026] [lsapi:warn] [pid 3425266:tid 3425266] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:09:58.189199 2026] [authz_core:error] [pid 3414091:tid 3414091] [client 66.249.66.33:49391] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:09:58.191842 2026] [authz_core:error] [pid 3414091:tid 3414091] [client 66.249.66.33:49391] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:09:58.232389 2026] [security2:error] [pid 3425335:tid 3425335] [client 144.172.94.198:50358] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNJWEyXCkZDDEU1Cf1MAAAADI"]
[Thu Jul 30 14:09:59.081465 2026] [security2:error] [pid 3425341:tid 3425341] [client 144.172.94.198:51925] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.backup"] [unique_id "amtNJ8Jo3vXrjZhlADpKGAAAADk"]
[Thu Jul 30 14:09:59.081657 2026] [security2:error] [pid 3425341:tid 3425341] [client 144.172.94.198:51925] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.backup"] [unique_id "amtNJ8Jo3vXrjZhlADpKGAAAADk"]
[Thu Jul 30 14:09:59.570434 2026] [security2:error] [pid 3425341:tid 3425341] [client 144.172.94.198:51925] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNJ8Jo3vXrjZhlADpKGAAAADk"]
[Thu Jul 30 14:09:59.708806 2026] [ssl:error] [pid 3421958:tid 3421958] (EAI 2)Name or service not known: [client 144.76.19.72:29806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:59.708843 2026] [ssl:error] [pid 3421958:tid 3421958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:09:59.765181 2026] [ssl:error] [pid 3420727:tid 3420727] (EAI 2)Name or service not known: [client 144.76.19.72:29822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:09:59.765211 2026] [ssl:error] [pid 3420727:tid 3420727] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:00.443894 2026] [security2:error] [pid 3425335:tid 3425335] [client 144.172.94.198:53445] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.local"] [unique_id "amtNKGEyXCkZDDEU1Cf1MQAAADI"]
[Thu Jul 30 14:10:00.444094 2026] [security2:error] [pid 3425335:tid 3425335] [client 144.172.94.198:53445] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.local"] [unique_id "amtNKGEyXCkZDDEU1Cf1MQAAADI"]
[Thu Jul 30 14:10:00.894635 2026] [authz_core:error] [pid 3414091:tid 3414091] [client 66.249.66.33:49391] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:10:00.897274 2026] [authz_core:error] [pid 3414091:tid 3414091] [client 66.249.66.33:49391] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:10:00.956585 2026] [security2:error] [pid 3425335:tid 3425335] [client 144.172.94.198:53445] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNKGEyXCkZDDEU1Cf1MQAAADI"]
[Thu Jul 30 14:10:01.492988 2026] [security2:error] [pid 3417590:tid 3417590] [client 144.172.94.198:54853] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.bak"] [unique_id "amtNKQSoC92CCahGoh4lywAAADA"]
[Thu Jul 30 14:10:01.493200 2026] [security2:error] [pid 3417590:tid 3417590] [client 144.172.94.198:54853] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.bak"] [unique_id "amtNKQSoC92CCahGoh4lywAAADA"]
[Thu Jul 30 14:10:02.030912 2026] [security2:error] [pid 3417590:tid 3417590] [client 144.172.94.198:54853] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNKQSoC92CCahGoh4lywAAADA"]
[Thu Jul 30 14:10:02.886580 2026] [ssl:error] [pid 3420645:tid 3420645] (EAI 2)Name or service not known: [client 144.76.19.72:29824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:02.886620 2026] [ssl:error] [pid 3420645:tid 3420645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:02.947523 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:29838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:02.947547 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:04.122343 2026] [security2:error] [pid 3420645:tid 3420645] [client 144.172.94.198:56331] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.old"] [unique_id "amtNLAg2WA6NsTzI5cYXywAAABM"]
[Thu Jul 30 14:10:04.122522 2026] [security2:error] [pid 3420645:tid 3420645] [client 144.172.94.198:56331] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.old"] [unique_id "amtNLAg2WA6NsTzI5cYXywAAABM"]
[Thu Jul 30 14:10:04.633442 2026] [security2:error] [pid 3420645:tid 3420645] [client 144.172.94.198:56331] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNLAg2WA6NsTzI5cYXywAAABM"]
[Thu Jul 30 14:10:05.331359 2026] [security2:error] [pid 3410826:tid 3410826] [client 186.17.50.204:51294] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,55.0.html"] [unique_id "amtNLe3nXl-wRa9SxuEVwAAAADg"]
[Thu Jul 30 14:10:05.331402 2026] [security2:error] [pid 3410826:tid 3410826] [client 186.17.50.204:51294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,55.0.html"] [unique_id "amtNLe3nXl-wRa9SxuEVwAAAADg"]
[Thu Jul 30 14:10:05.331638 2026] [security2:error] [pid 3410826:tid 3410826] [client 186.17.50.204:51294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNLe3nXl-wRa9SxuEVwAAAADg"]
[Thu Jul 30 14:10:05.846085 2026] [security2:error] [pid 3425341:tid 3425341] [client 144.172.94.198:57429] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/backup/.env"] [unique_id "amtNLcJo3vXrjZhlADpKGQAAADk"]
[Thu Jul 30 14:10:05.846267 2026] [security2:error] [pid 3425341:tid 3425341] [client 144.172.94.198:57429] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/backup/.env"] [unique_id "amtNLcJo3vXrjZhlADpKGQAAADk"]
[Thu Jul 30 14:10:06.002410 2026] [ssl:error] [pid 3417535:tid 3417535] (EAI 2)Name or service not known: [client 144.76.19.72:29854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:06.002440 2026] [ssl:error] [pid 3417535:tid 3417535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:06.061512 2026] [ssl:error] [pid 3414091:tid 3414091] (EAI 2)Name or service not known: [client 144.76.19.72:29858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:06.061538 2026] [ssl:error] [pid 3414091:tid 3414091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:06.354995 2026] [security2:error] [pid 3425341:tid 3425341] [client 144.172.94.198:57429] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNLcJo3vXrjZhlADpKGQAAADk"]
[Thu Jul 30 14:10:07.005317 2026] [security2:error] [pid 3425345:tid 3425345] [client 54.197.82.195:45930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtNL2d_AdilD8RqFRNhLAAAAD0"]
[Thu Jul 30 14:10:08.119756 2026] [lsapi:warn] [pid 3425344:tid 3425344] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:10:08.662819 2026] [security2:error] [pid 3421903:tid 3421903] [client 185.84.106.166:32808] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,55.0.html"] [unique_id "amtNMMZW6QZFFzAHH_lO5gAAACY"]
[Thu Jul 30 14:10:08.662868 2026] [security2:error] [pid 3421903:tid 3421903] [client 185.84.106.166:32808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,55.0.html"] [unique_id "amtNMMZW6QZFFzAHH_lO5gAAACY"]
[Thu Jul 30 14:10:08.663123 2026] [security2:error] [pid 3421903:tid 3421903] [client 185.84.106.166:32808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNMMZW6QZFFzAHH_lO5gAAACY"]
[Thu Jul 30 14:10:09.116168 2026] [ssl:error] [pid 3421956:tid 3421956] (EAI 2)Name or service not known: [client 144.76.19.72:29870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:09.116193 2026] [ssl:error] [pid 3421956:tid 3421956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:09.170849 2026] [ssl:error] [pid 3416094:tid 3416094] (EAI 2)Name or service not known: [client 144.76.19.72:29872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:09.170883 2026] [ssl:error] [pid 3416094:tid 3416094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:11.268560 2026] [security2:error] [pid 3421958:tid 3421958] [client 34.234.197.175:36070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtNM9ZVF0oreZAk71v9UgAAADE"]
[Thu Jul 30 14:10:12.225615 2026] [ssl:error] [pid 3417654:tid 3417654] (EAI 2)Name or service not known: [client 144.76.19.72:59272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:12.225640 2026] [ssl:error] [pid 3417654:tid 3417654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:12.283224 2026] [ssl:error] [pid 3410826:tid 3410826] (EAI 2)Name or service not known: [client 144.76.19.72:59282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:12.283253 2026] [ssl:error] [pid 3410826:tid 3410826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:13.286822 2026] [security2:error] [pid 3421717:tid 3421717] [client 144.172.94.198:62928] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env"] [unique_id "amtNNYww4sQjw4ALdgzwJwAAABU"]
[Thu Jul 30 14:10:13.287012 2026] [security2:error] [pid 3421717:tid 3421717] [client 144.172.94.198:62928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env"] [unique_id "amtNNYww4sQjw4ALdgzwJwAAABU"]
[Thu Jul 30 14:10:13.780789 2026] [security2:error] [pid 3421717:tid 3421717] [client 144.172.94.198:62928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNNYww4sQjw4ALdgzwJwAAABU"]
[Thu Jul 30 14:10:14.431016 2026] [security2:error] [pid 3417590:tid 3417590] [client 144.172.94.198:64125] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.backup"] [unique_id "amtNNgSoC92CCahGoh4lzgAAADA"]
[Thu Jul 30 14:10:14.431227 2026] [security2:error] [pid 3417590:tid 3417590] [client 144.172.94.198:64125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.backup"] [unique_id "amtNNgSoC92CCahGoh4lzgAAADA"]
[Thu Jul 30 14:10:14.488877 2026] [security2:error] [pid 3417654:tid 3417654] [client 175.100.59.117:51171] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,55.0.html"] [unique_id "amtNNu4M_fUC5LCpGftOQgAAADs"]
[Thu Jul 30 14:10:14.488927 2026] [security2:error] [pid 3417654:tid 3417654] [client 175.100.59.117:51171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,55.0.html"] [unique_id "amtNNu4M_fUC5LCpGftOQgAAADs"]
[Thu Jul 30 14:10:14.489166 2026] [security2:error] [pid 3417654:tid 3417654] [client 175.100.59.117:51171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNNu4M_fUC5LCpGftOQgAAADs"]
[Thu Jul 30 14:10:14.923380 2026] [security2:error] [pid 3417590:tid 3417590] [client 144.172.94.198:64125] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNNgSoC92CCahGoh4lzgAAADA"]
[Thu Jul 30 14:10:15.341375 2026] [ssl:error] [pid 3421956:tid 3421956] (EAI 2)Name or service not known: [client 144.76.19.72:59294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:15.341410 2026] [ssl:error] [pid 3421956:tid 3421956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:15.396539 2026] [ssl:error] [pid 3417589:tid 3417589] (EAI 2)Name or service not known: [client 144.76.19.72:59300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:15.396571 2026] [ssl:error] [pid 3417589:tid 3417589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:15.479515 2026] [security2:error] [pid 3416002:tid 3416002] [client 144.172.94.198:65238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.local"] [unique_id "amtNNwiMfwrLBZU_uQISsQAAAA8"]
[Thu Jul 30 14:10:15.479716 2026] [security2:error] [pid 3416002:tid 3416002] [client 144.172.94.198:65238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.local"] [unique_id "amtNNwiMfwrLBZU_uQISsQAAAA8"]
[Thu Jul 30 14:10:15.974965 2026] [security2:error] [pid 3416002:tid 3416002] [client 144.172.94.198:65238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNNwiMfwrLBZU_uQISsQAAAA8"]
[Thu Jul 30 14:10:16.503897 2026] [security2:error] [pid 3416094:tid 3416094] [client 144.172.94.198:49894] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.bak"] [unique_id "amtNONB7-_H2HdwkfQ9hsgAAAC0"]
[Thu Jul 30 14:10:16.504104 2026] [security2:error] [pid 3416094:tid 3416094] [client 144.172.94.198:49894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.bak"] [unique_id "amtNONB7-_H2HdwkfQ9hsgAAAC0"]
[Thu Jul 30 14:10:17.021209 2026] [security2:error] [pid 3416094:tid 3416094] [client 144.172.94.198:49894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNONB7-_H2HdwkfQ9hsgAAAC0"]
[Thu Jul 30 14:10:17.503990 2026] [security2:error] [pid 3425345:tid 3425345] [client 144.172.94.198:50834] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env.old"] [unique_id "amtNOWd_AdilD8RqFRNhMQAAAD0"]
[Thu Jul 30 14:10:17.504179 2026] [security2:error] [pid 3425345:tid 3425345] [client 144.172.94.198:50834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env.old"] [unique_id "amtNOWd_AdilD8RqFRNhMQAAAD0"]
[Thu Jul 30 14:10:17.999928 2026] [security2:error] [pid 3425345:tid 3425345] [client 144.172.94.198:50834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNOWd_AdilD8RqFRNhMQAAAD0"]
[Thu Jul 30 14:10:18.454869 2026] [ssl:error] [pid 3416002:tid 3416002] (EAI 2)Name or service not known: [client 144.76.19.72:59302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:18.454916 2026] [ssl:error] [pid 3416002:tid 3416002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:18.511293 2026] [ssl:error] [pid 3424038:tid 3424038] (EAI 2)Name or service not known: [client 144.76.19.72:59318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:18.511336 2026] [ssl:error] [pid 3424038:tid 3424038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:18.658588 2026] [lsapi:warn] [pid 3425269:tid 3425269] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:10:19.855981 2026] [security2:error] [pid 3410826:tid 3410826] [client 144.172.94.198:51686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/backup/.env"] [unique_id "amtNO-3nXl-wRa9SxuEVwwAAADg"]
[Thu Jul 30 14:10:19.856203 2026] [security2:error] [pid 3410826:tid 3410826] [client 144.172.94.198:51686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/backup/.env"] [unique_id "amtNO-3nXl-wRa9SxuEVwwAAADg"]
[Thu Jul 30 14:10:20.341604 2026] [security2:error] [pid 3410826:tid 3410826] [client 144.172.94.198:51686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtNO-3nXl-wRa9SxuEVwwAAADg"]
[Thu Jul 30 14:10:21.565314 2026] [ssl:error] [pid 3416090:tid 3416090] (EAI 2)Name or service not known: [client 144.76.19.72:42060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:21.565348 2026] [ssl:error] [pid 3416090:tid 3416090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:21.622711 2026] [ssl:error] [pid 3401253:tid 3401253] (EAI 2)Name or service not known: [client 144.76.19.72:42068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:21.622744 2026] [ssl:error] [pid 3401253:tid 3401253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:24.138207 2026] [security2:error] [pid 3421958:tid 3421958] [client 185.191.171.14:36858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/sabrina-kouider-children"] [unique_id "amtNQNZVF0oreZAk71v9VwAAADE"]
[Thu Jul 30 14:10:24.678841 2026] [ssl:error] [pid 3417654:tid 3417654] (EAI 2)Name or service not known: [client 144.76.19.72:42076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:24.678869 2026] [ssl:error] [pid 3417654:tid 3417654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:24.735047 2026] [ssl:error] [pid 3426824:tid 3426824] (EAI 2)Name or service not known: [client 144.76.19.72:42086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:24.735105 2026] [ssl:error] [pid 3426824:tid 3426824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:25.763326 2026] [security2:error] [pid 3389921:tid 3389921] [client 129.226.193.111:43416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wildduckdesigns.co.uk"] [uri "/"] [unique_id "amtNQTW-x4QBeXeWhTTbUAAAABo"]
[Thu Jul 30 14:10:25.954364 2026] [security2:error] [pid 3426824:tid 3426824] [client 43.159.145.153:58502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.maisongerlyn.be"] [uri "/"] [unique_id "amtNQS89bQYWivpZkYhy_AAAAAs"]
[Thu Jul 30 14:10:26.203137 2026] [security2:error] [pid 3418111:tid 3418111] [client 129.226.193.111:44086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.co.uk"] [uri "/"] [unique_id "amtNQrDnaHG4V9SI4EuaYwAAAAc"]
[Thu Jul 30 14:10:27.788953 2026] [ssl:error] [pid 3416006:tid 3416006] (EAI 2)Name or service not known: [client 144.76.19.72:42088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:27.788992 2026] [ssl:error] [pid 3416006:tid 3416006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:27.840647 2026] [ssl:error] [pid 3418111:tid 3418111] (EAI 2)Name or service not known: [client 144.76.19.72:42100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:27.840678 2026] [ssl:error] [pid 3418111:tid 3418111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:27.910295 2026] [security2:error] [pid 3420262:tid 3420262] [client 129.226.193.111:45164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtNQz-RLDcNQk1ATgKaIAAAAAI"], referer: http://www.jasperandtroy.co.uk
[Thu Jul 30 14:10:29.253365 2026] [lsapi:warn] [pid 3421956:tid 3421956] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:10:30.894495 2026] [ssl:error] [pid 3417589:tid 3417589] (EAI 2)Name or service not known: [client 144.76.19.72:62616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:30.894522 2026] [ssl:error] [pid 3417589:tid 3417589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:30.947587 2026] [ssl:error] [pid 3425195:tid 3425195] (EAI 2)Name or service not known: [client 144.76.19.72:62624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:30.947624 2026] [ssl:error] [pid 3425195:tid 3425195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:31.202130 2026] [security2:error] [pid 3421956:tid 3421956] [client 43.159.145.153:37160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtNRzzDVvakFg40wT1WRwAAACs"], referer: http://www.maisongerlyn.be
[Thu Jul 30 14:10:34.039980 2026] [ssl:error] [pid 3421718:tid 3421718] (EAI 2)Name or service not known: [client 144.76.19.72:62632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:34.040025 2026] [ssl:error] [pid 3421718:tid 3421718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:34.095468 2026] [ssl:error] [pid 3420645:tid 3420645] (EAI 2)Name or service not known: [client 144.76.19.72:62644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:34.095492 2026] [ssl:error] [pid 3420645:tid 3420645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:34.586021 2026] [security2:error] [pid 3420645:tid 3420645] [client 114.119.144.31:33079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~14,19/request_format~html"] [unique_id "amtNSgg2WA6NsTzI5cYX1QAAABM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/request_format~html/cat_ids~14
[Thu Jul 30 14:10:35.635044 2026] [security2:error] [pid 3417589:tid 3417589] [client 114.119.144.31:33087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~14,19/request_format~html"] [unique_id "amtNS6FtyS7GB8Kfwc6vWgAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/request_format~html/cat_ids~14
[Thu Jul 30 14:10:37.153114 2026] [ssl:error] [pid 3416090:tid 3416090] (EAI 2)Name or service not known: [client 144.76.19.72:62658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:37.153149 2026] [ssl:error] [pid 3416090:tid 3416090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:37.208897 2026] [ssl:error] [pid 3416006:tid 3416006] (EAI 2)Name or service not known: [client 144.76.19.72:62664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:37.208931 2026] [ssl:error] [pid 3416006:tid 3416006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:39.771815 2026] [lsapi:warn] [pid 3425129:tid 3425129] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:10:40.073946 2026] [core:crit] [pid 3420595:tid 3420595] (13)Permission denied: [client 40.77.167.51:12398] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:10:40.261421 2026] [ssl:error] [pid 3426824:tid 3426824] (EAI 2)Name or service not known: [client 144.76.19.72:20636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:40.261460 2026] [ssl:error] [pid 3426824:tid 3426824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:40.314679 2026] [ssl:error] [pid 3401253:tid 3401253] (EAI 2)Name or service not known: [client 144.76.19.72:20642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:40.314708 2026] [ssl:error] [pid 3401253:tid 3401253] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:41.867045 2026] [ssl:error] [pid 3425345:tid 3425345] (70014)End of file found: [client 216.73.216.199:16759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:10:43.371192 2026] [ssl:error] [pid 3426824:tid 3426824] (EAI 2)Name or service not known: [client 144.76.19.72:20656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:43.371220 2026] [ssl:error] [pid 3426824:tid 3426824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:43.422163 2026] [ssl:error] [pid 3426824:tid 3426824] (EAI 2)Name or service not known: [client 144.76.19.72:20662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:43.422190 2026] [ssl:error] [pid 3426824:tid 3426824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:46.475569 2026] [ssl:error] [pid 3425266:tid 3425266] (EAI 2)Name or service not known: [client 144.76.19.72:20670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:46.475609 2026] [ssl:error] [pid 3425266:tid 3425266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:46.533376 2026] [ssl:error] [pid 3425268:tid 3425268] (EAI 2)Name or service not known: [client 144.76.19.72:20686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:46.533410 2026] [ssl:error] [pid 3425268:tid 3425268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:51.543489 2026] [ssl:error] [pid 3423958:tid 3423958] (EAI 2)Name or service not known: [client 144.76.19.72:20120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:51.543522 2026] [ssl:error] [pid 3423958:tid 3423958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:52.424267 2026] [lsapi:warn] [pid 3416090:tid 3416090] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:10:53.222223 2026] [ssl:error] [pid 3428085:tid 3428085] (EAI 2)Name or service not known: [client 144.76.19.72:20136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:53.222268 2026] [ssl:error] [pid 3428085:tid 3428085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:54.567389 2026] [access_compat:error] [pid 3389921:tid 3389921] [client 23.154.136.246:61872] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 14:10:54.654295 2026] [access_compat:error] [pid 3389921:tid 3389921] [client 23.154.136.246:61872] AH01797: client denied by server configuration: /home/nspandor/public_html/htdocs
[Thu Jul 30 14:10:56.275275 2026] [ssl:error] [pid 3428186:tid 3428186] (EAI 2)Name or service not known: [client 144.76.19.72:20144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:56.275311 2026] [ssl:error] [pid 3428186:tid 3428186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:56.328667 2026] [ssl:error] [pid 3421958:tid 3421958] (EAI 2)Name or service not known: [client 144.76.19.72:20158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:56.328708 2026] [ssl:error] [pid 3421958:tid 3421958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:59.383694 2026] [ssl:error] [pid 3428080:tid 3428080] (EAI 2)Name or service not known: [client 144.76.19.72:20172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:59.383730 2026] [ssl:error] [pid 3428080:tid 3428080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:10:59.440135 2026] [ssl:error] [pid 3428224:tid 3428224] (EAI 2)Name or service not known: [client 144.76.19.72:20188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:10:59.440174 2026] [ssl:error] [pid 3428224:tid 3428224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:00.908709 2026] [lsapi:warn] [pid 3425195:tid 3425195] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:11:02.497306 2026] [ssl:error] [pid 3421718:tid 3421718] (EAI 2)Name or service not known: [client 144.76.19.72:46044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:02.497337 2026] [ssl:error] [pid 3421718:tid 3421718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:02.557798 2026] [ssl:error] [pid 3416090:tid 3416090] (EAI 2)Name or service not known: [client 144.76.19.72:46054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:02.557829 2026] [ssl:error] [pid 3416090:tid 3416090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:05.611049 2026] [ssl:error] [pid 3420262:tid 3420262] (EAI 2)Name or service not known: [client 144.76.19.72:46068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:05.611089 2026] [ssl:error] [pid 3420262:tid 3420262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:05.674974 2026] [ssl:error] [pid 3416006:tid 3416006] (EAI 2)Name or service not known: [client 144.76.19.72:46074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:05.675006 2026] [ssl:error] [pid 3416006:tid 3416006] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:07.003931 2026] [access_compat:error] [pid 3421958:tid 3421958] [client 45.158.164.139:50204] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:11:08.112025 2026] [security2:error] [pid 3420262:tid 3420262] [client 43.153.74.75:38676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "m.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtNbD-RLDcNQk1ATgKaKwAAAAI"]
[Thu Jul 30 14:11:08.729880 2026] [ssl:error] [pid 3427990:tid 3427990] (EAI 2)Name or service not known: [client 144.76.19.72:46078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:08.729916 2026] [ssl:error] [pid 3427990:tid 3427990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:08.782998 2026] [ssl:error] [pid 3416094:tid 3416094] (EAI 2)Name or service not known: [client 144.76.19.72:46086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:08.783028 2026] [ssl:error] [pid 3416094:tid 3416094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:11.462841 2026] [lsapi:warn] [pid 3416094:tid 3416094] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:11:11.856338 2026] [ssl:error] [pid 3425129:tid 3425129] (EAI 2)Name or service not known: [client 144.76.19.72:38500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:11.856379 2026] [ssl:error] [pid 3425129:tid 3425129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:11.912560 2026] [ssl:error] [pid 3416002:tid 3416002] (EAI 2)Name or service not known: [client 144.76.19.72:38506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:11.912592 2026] [ssl:error] [pid 3416002:tid 3416002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:15.007112 2026] [ssl:error] [pid 3417650:tid 3417650] (EAI 2)Name or service not known: [client 144.76.19.72:38524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:15.007146 2026] [ssl:error] [pid 3417650:tid 3417650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:15.064829 2026] [ssl:error] [pid 3428081:tid 3428081] (EAI 2)Name or service not known: [client 144.76.19.72:38526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:15.064873 2026] [ssl:error] [pid 3428081:tid 3428081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:15.950322 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.130.248.172:57233] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNc-3nXl-wRa9SxuEV1QAAADg"]
[Thu Jul 30 14:11:15.950373 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.130.248.172:57233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNc-3nXl-wRa9SxuEV1QAAADg"]
[Thu Jul 30 14:11:15.950624 2026] [security2:error] [pid 3410826:tid 3410826] [client 43.130.248.172:57233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNc-3nXl-wRa9SxuEV1QAAADg"]
[Thu Jul 30 14:11:18.114123 2026] [security2:error] [pid 3417589:tid 3417589] [client 176.234.228.23:43370] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNdqFtyS7GB8Kfwc6vZAAAACk"]
[Thu Jul 30 14:11:18.114189 2026] [security2:error] [pid 3417589:tid 3417589] [client 176.234.228.23:43370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNdqFtyS7GB8Kfwc6vZAAAACk"]
[Thu Jul 30 14:11:18.114420 2026] [security2:error] [pid 3417589:tid 3417589] [client 176.234.228.23:43370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNdqFtyS7GB8Kfwc6vZAAAACk"]
[Thu Jul 30 14:11:18.157283 2026] [ssl:error] [pid 3417650:tid 3417650] (EAI 2)Name or service not known: [client 144.76.19.72:38540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:18.157309 2026] [ssl:error] [pid 3417650:tid 3417650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:18.297190 2026] [ssl:error] [pid 3417590:tid 3417590] (EAI 2)Name or service not known: [client 144.76.19.72:38546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:18.297237 2026] [ssl:error] [pid 3417590:tid 3417590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:18.354285 2026] [cgi:error] [pid 3427797:tid 3427797] [client 135.225.181.160:16704] AH02812: stderr from /home/gplorg/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:11:19.211425 2026] [core:error] [pid 3410826:tid 3410826] [client 66.249.66.8:60956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:11:19.211457 2026] [core:error] [pid 3410826:tid 3410826] [client 66.249.66.8:60956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:11:21.351830 2026] [ssl:error] [pid 3428086:tid 3428086] (EAI 2)Name or service not known: [client 144.76.19.72:33090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:21.351872 2026] [ssl:error] [pid 3428086:tid 3428086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:21.389027 2026] [access_compat:error] [pid 3421958:tid 3421958] [client 2.189.5.142:35638] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:11:21.406478 2026] [ssl:error] [pid 3417650:tid 3417650] (EAI 2)Name or service not known: [client 144.76.19.72:33100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:21.406509 2026] [ssl:error] [pid 3417650:tid 3417650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:21.502961 2026] [access_compat:error] [pid 3425338:tid 3425338] [client 2.189.5.162:47558] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:11:22.002736 2026] [lsapi:warn] [pid 3427749:tid 3427749] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:11:22.372825 2026] [security2:error] [pid 3416094:tid 3416094] [client 103.125.31.155:38474] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNetB7-_H2HdwkfQ9hxQAAAC0"]
[Thu Jul 30 14:11:22.372875 2026] [security2:error] [pid 3416094:tid 3416094] [client 103.125.31.155:38474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNetB7-_H2HdwkfQ9hxQAAAC0"]
[Thu Jul 30 14:11:22.373128 2026] [security2:error] [pid 3416094:tid 3416094] [client 103.125.31.155:38474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNetB7-_H2HdwkfQ9hxQAAAC0"]
[Thu Jul 30 14:11:23.479879 2026] [security2:error] [pid 3425266:tid 3425266] [client 185.191.171.8:19332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1409.0/prev_next,next.html"] [unique_id "amtNew740Hjq745eHoRDPgAAACE"]
[Thu Jul 30 14:11:23.645939 2026] [security2:error] [pid 3427749:tid 3427749] [client 101.33.55.204:55340] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "junglejacks.co.uk"] [uri "/"] [unique_id "amtNewLkdOLf0ztkvZx9pgAAABg"]
[Thu Jul 30 14:11:24.461219 2026] [ssl:error] [pid 3424775:tid 3424775] (EAI 2)Name or service not known: [client 144.76.19.72:33104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:24.461258 2026] [ssl:error] [pid 3424775:tid 3424775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:24.516118 2026] [ssl:error] [pid 3410826:tid 3410826] (EAI 2)Name or service not known: [client 144.76.19.72:33108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:24.516143 2026] [ssl:error] [pid 3410826:tid 3410826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:24.609652 2026] [security2:error] [pid 3417650:tid 3417650] [client 185.191.171.8:56038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/andy-samberg-teeth"] [unique_id "amtNfARp1AOnqQj_Xo79oQAAADc"]
[Thu Jul 30 14:11:27.077011 2026] [core:error] [pid 3425129:tid 3425129] (13)Permission denied: [client 216.73.216.199:45233] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_async_pf/validate
[Thu Jul 30 14:11:27.161361 2026] [security2:error] [pid 3427990:tid 3427990] [client 101.33.55.204:56968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amtNf3Ul2E6Shosfath_JwAAACo"], referer: http://junglejacks.co.uk
[Thu Jul 30 14:11:27.572274 2026] [ssl:error] [pid 3425266:tid 3425266] (EAI 2)Name or service not known: [client 144.76.19.72:33114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:27.572305 2026] [ssl:error] [pid 3425266:tid 3425266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:27.626744 2026] [ssl:error] [pid 3428222:tid 3428222] (EAI 2)Name or service not known: [client 144.76.19.72:33118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:27.626780 2026] [ssl:error] [pid 3428222:tid 3428222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:30.681950 2026] [ssl:error] [pid 3421957:tid 3421957] (EAI 2)Name or service not known: [client 144.76.19.72:64804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:30.681984 2026] [ssl:error] [pid 3421957:tid 3421957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:30.737709 2026] [ssl:error] [pid 3425195:tid 3425195] (EAI 2)Name or service not known: [client 144.76.19.72:64814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:30.737734 2026] [ssl:error] [pid 3425195:tid 3425195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:32.393292 2026] [access_compat:error] [pid 3428159:tid 3428159] [client 51.116.238.8:15232] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 14:11:32.396041 2026] [access_compat:error] [pid 3428159:tid 3428159] [client 51.116.238.8:15232] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/wc-logs/
[Thu Jul 30 14:11:32.634964 2026] [lsapi:warn] [pid 3421956:tid 3421956] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:11:33.797264 2026] [ssl:error] [pid 3428159:tid 3428159] (EAI 2)Name or service not known: [client 144.76.19.72:64816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:33.797305 2026] [ssl:error] [pid 3428159:tid 3428159] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:33.851105 2026] [ssl:error] [pid 3414981:tid 3414981] (EAI 2)Name or service not known: [client 144.76.19.72:64830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:33.851157 2026] [ssl:error] [pid 3414981:tid 3414981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:34.363253 2026] [security2:error] [pid 3425195:tid 3425195] [client 138.204.87.173:47493] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNhuQ4DE2U-5-yZpsXxgAAAB0"]
[Thu Jul 30 14:11:34.363307 2026] [security2:error] [pid 3425195:tid 3425195] [client 138.204.87.173:47493] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNhuQ4DE2U-5-yZpsXxgAAAB0"]
[Thu Jul 30 14:11:34.363617 2026] [security2:error] [pid 3425195:tid 3425195] [client 138.204.87.173:47493] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNhuQ4DE2U-5-yZpsXxgAAAB0"]
[Thu Jul 30 14:11:36.294764 2026] [security2:error] [pid 3428185:tid 3428185] [client 43.167.195.208:48477] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNiLUIwgWw5BG3ROji7QAAAEc"]
[Thu Jul 30 14:11:36.294816 2026] [security2:error] [pid 3428185:tid 3428185] [client 43.167.195.208:48477] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNiLUIwgWw5BG3ROji7QAAAEc"]
[Thu Jul 30 14:11:36.295115 2026] [security2:error] [pid 3428185:tid 3428185] [client 43.167.195.208:48477] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNiLUIwgWw5BG3ROji7QAAAEc"]
[Thu Jul 30 14:11:36.905634 2026] [ssl:error] [pid 3428084:tid 3428084] (EAI 2)Name or service not known: [client 144.76.19.72:64838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:36.905671 2026] [ssl:error] [pid 3428084:tid 3428084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:36.959339 2026] [ssl:error] [pid 3428185:tid 3428185] (EAI 2)Name or service not known: [client 144.76.19.72:64848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:36.959375 2026] [ssl:error] [pid 3428185:tid 3428185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:37.498125 2026] [core:error] [pid 3421957:tid 3421957] (13)Permission denied: [client 216.73.216.199:25849] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/intel_rapl_common/sections/__jump_table
[Thu Jul 30 14:11:40.016479 2026] [ssl:error] [pid 3417590:tid 3417590] (EAI 2)Name or service not known: [client 144.76.19.72:23264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:40.016507 2026] [ssl:error] [pid 3417590:tid 3417590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:40.069737 2026] [ssl:error] [pid 3421958:tid 3421958] (EAI 2)Name or service not known: [client 144.76.19.72:23276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:40.069760 2026] [ssl:error] [pid 3421958:tid 3421958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:40.101042 2026] [security2:error] [pid 3427990:tid 3427990] [client 43.167.195.208:53125] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNjHUl2E6Shosfath_LQAAACo"]
[Thu Jul 30 14:11:40.101102 2026] [security2:error] [pid 3427990:tid 3427990] [client 43.167.195.208:53125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNjHUl2E6Shosfath_LQAAACo"]
[Thu Jul 30 14:11:40.101360 2026] [security2:error] [pid 3427990:tid 3427990] [client 43.167.195.208:53125] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNjHUl2E6Shosfath_LQAAACo"]
[Thu Jul 30 14:11:41.701613 2026] [security2:error] [pid 3424697:tid 3424697] [client 45.148.10.120:53752] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amtNjSpdo_8uhZtufaw68QAAAA0"]
[Thu Jul 30 14:11:41.701809 2026] [security2:error] [pid 3424697:tid 3424697] [client 45.148.10.120:53752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amtNjSpdo_8uhZtufaw68QAAAA0"]
[Thu Jul 30 14:11:41.702010 2026] [security2:error] [pid 3424697:tid 3424697] [client 45.148.10.120:53752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amtNjSpdo_8uhZtufaw68QAAAA0"]
[Thu Jul 30 14:11:42.307268 2026] [ssl:error] [pid 3421957:tid 3421957] (70014)End of file found: [client 216.73.216.199:25849] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:11:43.126163 2026] [ssl:error] [pid 3421958:tid 3421958] (EAI 2)Name or service not known: [client 144.76.19.72:23290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:43.126220 2026] [ssl:error] [pid 3421958:tid 3421958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:43.178358 2026] [ssl:error] [pid 3428080:tid 3428080] (EAI 2)Name or service not known: [client 144.76.19.72:23292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:43.178394 2026] [ssl:error] [pid 3428080:tid 3428080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:43.307544 2026] [lsapi:warn] [pid 3427990:tid 3427990] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:11:46.265578 2026] [ssl:error] [pid 3430068:tid 3430068] (EAI 2)Name or service not known: [client 144.76.19.72:23318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:46.265613 2026] [ssl:error] [pid 3430068:tid 3430068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:46.321892 2026] [ssl:error] [pid 3430025:tid 3430025] (EAI 2)Name or service not known: [client 144.76.19.72:23324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:46.321922 2026] [ssl:error] [pid 3430025:tid 3430025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:46.994923 2026] [security2:error] [pid 3428085:tid 3428085] [client 85.208.96.205:20954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/robots.txt"] [unique_id "amtNkre_KwMGlLekGRuDuQAAAEM"]
[Thu Jul 30 14:11:46.995252 2026] [access_compat:error] [pid 3428085:tid 3428085] [client 85.208.96.205:20954] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:11:47.295106 2026] [security2:error] [pid 3430068:tid 3430068] [client 85.208.96.201:27988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/fake-one-pound-coins-part-one/comment-page-1/"] [unique_id "amtNk9zLR5zYtk-ET-nkAgAAAA8"]
[Thu Jul 30 14:11:47.295429 2026] [access_compat:error] [pid 3430068:tid 3430068] [client 85.208.96.201:27988] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:11:49.374376 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:23340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:49.374431 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:49.429293 2026] [ssl:error] [pid 3389921:tid 3389921] (EAI 2)Name or service not known: [client 144.76.19.72:23342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:49.429330 2026] [ssl:error] [pid 3389921:tid 3389921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:49.936519 2026] [security2:error] [pid 3410826:tid 3410826] [client 51.68.111.238:10517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amtNle3nXl-wRa9SxuEV4QAAADg"]
[Thu Jul 30 14:11:50.052164 2026] [authz_core:error] [pid 3430068:tid 3430068] [client 66.249.66.33:62332] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:11:50.054815 2026] [authz_core:error] [pid 3430068:tid 3430068] [client 66.249.66.33:62332] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:11:52.814578 2026] [ssl:error] [pid 3430515:tid 3430515] (EAI 2)Name or service not known: [client 144.76.19.72:61516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:52.814609 2026] [ssl:error] [pid 3430515:tid 3430515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:53.486754 2026] [ssl:error] [pid 3429586:tid 3429586] (EAI 2)Name or service not known: [client 144.76.19.72:61522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:53.486802 2026] [ssl:error] [pid 3429586:tid 3429586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:53.536868 2026] [authz_core:error] [pid 3410826:tid 3410826] [client 51.116.238.8:15322] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 14:11:53.922664 2026] [lsapi:warn] [pid 3430549:tid 3430549] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:11:56.273347 2026] [core:crit] [pid 3427749:tid 3427749] (13)Permission denied: [client 40.77.167.55:14155] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:11:56.541991 2026] [ssl:error] [pid 3430640:tid 3430640] (EAI 2)Name or service not known: [client 144.76.19.72:61524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:56.542027 2026] [ssl:error] [pid 3430640:tid 3430640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:56.600944 2026] [ssl:error] [pid 3430681:tid 3430681] (EAI 2)Name or service not known: [client 144.76.19.72:61538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:56.601005 2026] [ssl:error] [pid 3430681:tid 3430681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:59.103540 2026] [security2:error] [pid 3430640:tid 3430640] [client 114.119.132.171:60575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~104,30/request_format~html"] [unique_id "amtNnwkvlLYVXNiIAc0ShgAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/request_format~html/cat_ids~104
[Thu Jul 30 14:11:59.656744 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:30362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:59.656780 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:11:59.712696 2026] [ssl:error] [pid 3430067:tid 3430067] (EAI 2)Name or service not known: [client 144.76.19.72:30368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:11:59.712729 2026] [ssl:error] [pid 3430067:tid 3430067] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:00.102465 2026] [security2:error] [pid 3430067:tid 3430067] [client 114.119.132.171:60587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~104,30/request_format~html"] [unique_id "amtNoAlP6zBoKRTCU5W_4QAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/request_format~html/cat_ids~104
[Thu Jul 30 14:12:02.331305 2026] [core:error] [pid 3417590:tid 3417590] (13)Permission denied: [client 216.73.216.199:10103] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/uts_namespace/alloc_calls
[Thu Jul 30 14:12:02.770224 2026] [ssl:error] [pid 3425195:tid 3425195] (EAI 2)Name or service not known: [client 144.76.19.72:30382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:02.770250 2026] [ssl:error] [pid 3425195:tid 3425195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:02.827970 2026] [ssl:error] [pid 3414981:tid 3414981] (EAI 2)Name or service not known: [client 144.76.19.72:30384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:02.827999 2026] [ssl:error] [pid 3414981:tid 3414981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:04.095963 2026] [authz_core:error] [pid 3414981:tid 3414981] [client 66.249.66.33:36791] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:12:04.098621 2026] [authz_core:error] [pid 3414981:tid 3414981] [client 66.249.66.33:36791] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:12:04.440864 2026] [security2:error] [pid 3426824:tid 3426824] [client 63.32.193.127:33324] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtNpC89bQYWivpZkYhzKgAAAAs"]
[Thu Jul 30 14:12:04.596219 2026] [lsapi:warn] [pid 3430025:tid 3430025] [client 103.164.161.6:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:12:05.884629 2026] [ssl:error] [pid 3425267:tid 3425267] (EAI 2)Name or service not known: [client 144.76.19.72:30398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:05.884667 2026] [ssl:error] [pid 3425267:tid 3425267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:05.939009 2026] [ssl:error] [pid 3426824:tid 3426824] (EAI 2)Name or service not known: [client 144.76.19.72:30408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:05.939035 2026] [ssl:error] [pid 3426824:tid 3426824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:06.650048 2026] [security2:error] [pid 3427749:tid 3427749] [client 43.157.22.109:37706] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/Saves/Terranigma_(Fr).srm"] [unique_id "amtNpgLkdOLf0ztkvZx9tgAAABg"]
[Thu Jul 30 14:12:08.554647 2026] [access_compat:error] [pid 3427749:tid 3427749] [client 45.158.164.139:41114] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:12:08.994757 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:30414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:08.994792 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:09.046391 2026] [ssl:error] [pid 3430025:tid 3430025] (EAI 2)Name or service not known: [client 144.76.19.72:30416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:09.046419 2026] [ssl:error] [pid 3430025:tid 3430025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:12.098347 2026] [ssl:error] [pid 3425129:tid 3425129] (EAI 2)Name or service not known: [client 144.76.19.72:30574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:12.098383 2026] [ssl:error] [pid 3425129:tid 3425129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:12.152762 2026] [ssl:error] [pid 3430516:tid 3430516] (EAI 2)Name or service not known: [client 144.76.19.72:30578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:12.152810 2026] [ssl:error] [pid 3430516:tid 3430516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:14.591503 2026] [security2:error] [pid 3430546:tid 3430546] [client 74.7.241.10:48618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "amtNrjKjHwXYdl_aMjR2GgAAABU"]
[Thu Jul 30 14:12:15.208790 2026] [ssl:error] [pid 3428084:tid 3428084] (EAI 2)Name or service not known: [client 144.76.19.72:30586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:15.208820 2026] [ssl:error] [pid 3428084:tid 3428084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:15.264977 2026] [ssl:error] [pid 3424775:tid 3424775] (EAI 2)Name or service not known: [client 144.76.19.72:30596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:15.265013 2026] [ssl:error] [pid 3424775:tid 3424775] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:17.337735 2026] [ssl:error] [pid 3417590:tid 3417590] (70014)End of file found: [client 216.73.216.199:10103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:18.322377 2026] [ssl:error] [pid 3430549:tid 3430549] (EAI 2)Name or service not known: [client 144.76.19.72:30610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:18.322417 2026] [ssl:error] [pid 3430549:tid 3430549] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:18.432381 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:30622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:18.432414 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:21.503962 2026] [ssl:error] [pid 3427748:tid 3427748] (EAI 2)Name or service not known: [client 144.76.19.72:62862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:21.504015 2026] [ssl:error] [pid 3427748:tid 3427748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:21.560519 2026] [ssl:error] [pid 3420595:tid 3420595] (EAI 2)Name or service not known: [client 144.76.19.72:62874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:21.560552 2026] [ssl:error] [pid 3420595:tid 3420595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:22.237555 2026] [security2:error] [pid 3427749:tid 3427749] [client 74.7.227.148:45692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.evtech.uk"] [uri "/"] [unique_id "amtNtgLkdOLf0ztkvZx9ugAAABg"]
[Thu Jul 30 14:12:24.617899 2026] [ssl:error] [pid 3430546:tid 3430546] (EAI 2)Name or service not known: [client 144.76.19.72:62890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:24.617950 2026] [ssl:error] [pid 3430546:tid 3430546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:24.669994 2026] [ssl:error] [pid 3430550:tid 3430550] (EAI 2)Name or service not known: [client 144.76.19.72:62896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:24.670031 2026] [ssl:error] [pid 3430550:tid 3430550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:24.692709 2026] [security2:error] [pid 3425129:tid 3425129] [client 212.58.103.176:1944] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNuC029ykSJjVJdGf_BgAAAAQ"]
[Thu Jul 30 14:12:24.692772 2026] [security2:error] [pid 3425129:tid 3425129] [client 212.58.103.176:1944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtNuC029ykSJjVJdGf_BgAAAAQ"]
[Thu Jul 30 14:12:24.693054 2026] [security2:error] [pid 3425129:tid 3425129] [client 212.58.103.176:1944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtNuC029ykSJjVJdGf_BgAAAAQ"]
[Thu Jul 30 14:12:25.052352 2026] [security2:error] [pid 3430546:tid 3430546] [client 185.191.171.3:27342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/dr-paul-robertson-marine-biologist"] [unique_id "amtNuTKjHwXYdl_aMjR2HwAAABU"]
[Thu Jul 30 14:12:27.498175 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:1293] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:27.724720 2026] [ssl:error] [pid 3427748:tid 3427748] (EAI 2)Name or service not known: [client 144.76.19.72:62910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:27.724751 2026] [ssl:error] [pid 3427748:tid 3427748] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:27.780146 2026] [ssl:error] [pid 3430515:tid 3430515] (EAI 2)Name or service not known: [client 144.76.19.72:62918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:27.780174 2026] [ssl:error] [pid 3430515:tid 3430515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:28.918327 2026] [security2:error] [pid 3425266:tid 3425266] [client 51.210.190.32:33024] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtNvA740Hjq745eHoRDXwAAACE"]
[Thu Jul 30 14:12:30.836515 2026] [ssl:error] [pid 3417535:tid 3417535] (EAI 2)Name or service not known: [client 144.76.19.72:32884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:30.836544 2026] [ssl:error] [pid 3417535:tid 3417535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:30.895388 2026] [ssl:error] [pid 3426824:tid 3426824] (EAI 2)Name or service not known: [client 144.76.19.72:32894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:30.895423 2026] [ssl:error] [pid 3426824:tid 3426824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:33.192834 2026] [security2:error] [pid 3430025:tid 3430025] [client 47.128.36.159:18328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kinesiology-in-london.co.uk"] [uri "/robots.txt"] [unique_id "amtNwZKb_Go12LFfMRG3QwAAAAY"]
[Thu Jul 30 14:12:33.351828 2026] [security2:error] [pid 3426824:tid 3426824] [client 44.217.255.167:64150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spamp.com"] [uri "/"] [unique_id "amtNwS89bQYWivpZkYhzMgAAAAs"]
[Thu Jul 30 14:12:33.392591 2026] [ssl:error] [pid 3431919:tid 3431919] (70014)End of file found: [client 216.73.216.199:58389] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:33.523372 2026] [security2:error] [pid 3421957:tid 3421957] [client 23.150.248.144:47352] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "autodiscover.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtNwdGwdSWxm1q4nSiIlgAAAC4"]
[Thu Jul 30 14:12:33.523665 2026] [security2:error] [pid 3421957:tid 3421957] [client 23.150.248.144:47352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtNwdGwdSWxm1q4nSiIlgAAAC4"]
[Thu Jul 30 14:12:33.555499 2026] [security2:error] [pid 3421957:tid 3421957] [client 23.150.248.144:47352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "autodiscover.ns-narvi.com"] [uri "/403.shtml"] [unique_id "amtNwdGwdSWxm1q4nSiIlgAAAC4"]
[Thu Jul 30 14:12:33.878012 2026] [ssl:error] [pid 3430516:tid 3430516] (70014)End of file found: [client 216.73.216.199:56918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:33.950160 2026] [ssl:error] [pid 3430025:tid 3430025] (EAI 2)Name or service not known: [client 144.76.19.72:32908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:33.950188 2026] [ssl:error] [pid 3430025:tid 3430025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:34.006599 2026] [ssl:error] [pid 3430068:tid 3430068] (EAI 2)Name or service not known: [client 144.76.19.72:32924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:34.006629 2026] [ssl:error] [pid 3430068:tid 3430068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:34.280687 2026] [security2:error] [pid 3430547:tid 3430547] [client 23.150.248.144:47354] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "autodiscover.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtNwnXYQz3JSfFx4lxgzwAAABY"]
[Thu Jul 30 14:12:34.280993 2026] [security2:error] [pid 3430547:tid 3430547] [client 23.150.248.144:47354] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtNwnXYQz3JSfFx4lxgzwAAABY"]
[Thu Jul 30 14:12:34.306264 2026] [security2:error] [pid 3430547:tid 3430547] [client 23.150.248.144:47354] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "autodiscover.ns-narvi.com"] [uri "/403.shtml"] [unique_id "amtNwnXYQz3JSfFx4lxgzwAAABY"]
[Thu Jul 30 14:12:37.063979 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:32936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:37.064007 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:37.121358 2026] [ssl:error] [pid 3424697:tid 3424697] (EAI 2)Name or service not known: [client 144.76.19.72:32942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:37.121397 2026] [ssl:error] [pid 3424697:tid 3424697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:38.751173 2026] [ssl:error] [pid 3427748:tid 3427748] [client 97.106.43.123:40751] AH02032: Hostname kinesiologylondon.co.uk provided via SNI and hostname www.kinesiology-in-london.co.uk provided via HTTP have no compatible SSL setup for policy 'secure', referer: https://www.kinesiology-in-london.co.uk/robots.txt
[Thu Jul 30 14:12:39.400790 2026] [ssl:error] [pid 3429586:tid 3429586] (70014)End of file found: [client 216.73.216.199:4284] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:39.699306 2026] [ssl:error] [pid 3423958:tid 3423958] (70014)End of file found: [client 216.73.216.199:1153] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:40.179947 2026] [ssl:error] [pid 3427991:tid 3427991] (EAI 2)Name or service not known: [client 144.76.19.72:53634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:40.179974 2026] [ssl:error] [pid 3427991:tid 3427991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:40.237367 2026] [ssl:error] [pid 3420645:tid 3420645] (EAI 2)Name or service not known: [client 144.76.19.72:53638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:40.237394 2026] [ssl:error] [pid 3420645:tid 3420645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:43.307582 2026] [ssl:error] [pid 3430550:tid 3430550] (EAI 2)Name or service not known: [client 144.76.19.72:53654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:43.307612 2026] [ssl:error] [pid 3430550:tid 3430550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:43.362604 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:53664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:43.362628 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:46.446572 2026] [ssl:error] [pid 3417590:tid 3417590] (EAI 2)Name or service not known: [client 144.76.19.72:53676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:46.446600 2026] [ssl:error] [pid 3417590:tid 3417590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:46.499398 2026] [ssl:error] [pid 3430068:tid 3430068] (EAI 2)Name or service not known: [client 144.76.19.72:53692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:46.499426 2026] [ssl:error] [pid 3430068:tid 3430068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:46.972659 2026] [ssl:error] [pid 3428084:tid 3428084] (70014)End of file found: [client 216.73.216.199:44942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:47.081216 2026] [ssl:error] [pid 3428032:tid 3428032] (70014)End of file found: [client 216.73.216.199:55207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:47.356474 2026] [ssl:error] [pid 3427749:tid 3427749] (70014)End of file found: [client 216.73.216.199:15421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:49.554804 2026] [ssl:error] [pid 3420645:tid 3420645] (EAI 2)Name or service not known: [client 144.76.19.72:44552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:49.554833 2026] [ssl:error] [pid 3420645:tid 3420645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:49.609519 2026] [ssl:error] [pid 3410826:tid 3410826] (EAI 2)Name or service not known: [client 144.76.19.72:44556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:49.609546 2026] [ssl:error] [pid 3410826:tid 3410826] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:52.579500 2026] [security2:error] [pid 3424697:tid 3424697] [client 216.73.216.199:51145] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cagefsctl.log"] [unique_id "amtN1Cpdo_8uhZtufaw7ZwAAAA0"]
[Thu Jul 30 14:12:52.579785 2026] [security2:error] [pid 3424697:tid 3424697] [client 216.73.216.199:51145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cagefsctl.log"] [unique_id "amtN1Cpdo_8uhZtufaw7ZwAAAA0"]
[Thu Jul 30 14:12:52.580001 2026] [security2:error] [pid 3424697:tid 3424697] [client 216.73.216.199:51145] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cagefsctl.log"] [unique_id "amtN1Cpdo_8uhZtufaw7ZwAAAA0"]
[Thu Jul 30 14:12:52.670504 2026] [ssl:error] [pid 3428086:tid 3428086] (EAI 2)Name or service not known: [client 144.76.19.72:44568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:52.670527 2026] [ssl:error] [pid 3428086:tid 3428086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:52.724728 2026] [ssl:error] [pid 3425266:tid 3425266] (EAI 2)Name or service not known: [client 144.76.19.72:44584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:52.724753 2026] [ssl:error] [pid 3425266:tid 3425266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:53.080939 2026] [ssl:error] [pid 3417650:tid 3417650] (70014)End of file found: [client 216.73.216.199:60932] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:53.983273 2026] [core:error] [pid 3424697:tid 3424697] (13)Permission denied: [client 216.73.216.199:51145] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sbin/lfd
[Thu Jul 30 14:12:54.284477 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:51145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:55.489355 2026] [security2:error] [pid 3428032:tid 3428032] [client 216.73.216.199:20813] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/psa/php_versions.d/alt-php72-fastcgi.conf"] [unique_id "amtN13i4B84Guvynv2XE1wAAADI"]
[Thu Jul 30 14:12:55.489651 2026] [security2:error] [pid 3428032:tid 3428032] [client 216.73.216.199:20813] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/psa/php_versions.d/alt-php72-fastcgi.conf"] [unique_id "amtN13i4B84Guvynv2XE1wAAADI"]
[Thu Jul 30 14:12:55.489865 2026] [security2:error] [pid 3428032:tid 3428032] [client 216.73.216.199:20813] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/psa/php_versions.d/alt-php72-fastcgi.conf"] [unique_id "amtN13i4B84Guvynv2XE1wAAADI"]
[Thu Jul 30 14:12:55.667342 2026] [security2:error] [pid 3410826:tid 3410826] [client 185.191.171.6:19028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.765.html"] [unique_id "amtN1-3nXl-wRa9SxuEV-QAAADg"]
[Thu Jul 30 14:12:55.794419 2026] [ssl:error] [pid 3428086:tid 3428086] (EAI 2)Name or service not known: [client 144.76.19.72:44588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:55.794457 2026] [ssl:error] [pid 3428086:tid 3428086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:55.847318 2026] [ssl:error] [pid 3426550:tid 3426550] (EAI 2)Name or service not known: [client 144.76.19.72:44602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:55.847345 2026] [ssl:error] [pid 3426550:tid 3426550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:57.598336 2026] [ssl:error] [pid 3428032:tid 3428032] (70014)End of file found: [client 216.73.216.199:20813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:12:58.900179 2026] [ssl:error] [pid 3430025:tid 3430025] (EAI 2)Name or service not known: [client 144.76.19.72:44604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:58.900208 2026] [ssl:error] [pid 3430025:tid 3430025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:58.952418 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:44616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:12:58.952456 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:12:59.100147 2026] [core:error] [pid 3425344:tid 3425344] (13)Permission denied: [client 216.73.216.199:30321] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/store_user
[Thu Jul 30 14:12:59.719650 2026] [ssl:error] [pid 3425344:tid 3425344] (70014)End of file found: [client 216.73.216.199:30321] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:00.642354 2026] [ssl:error] [pid 3430025:tid 3430025] (70014)End of file found: [client 216.73.216.199:41740] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:02.008722 2026] [ssl:error] [pid 3426824:tid 3426824] (EAI 2)Name or service not known: [client 144.76.19.72:40742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:02.008751 2026] [ssl:error] [pid 3426824:tid 3426824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:02.068511 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:40746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:02.068537 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:02.957078 2026] [ssl:error] [pid 3402463:tid 3402463] (70014)End of file found: [client 216.73.216.199:4995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:05.120088 2026] [ssl:error] [pid 3425344:tid 3425344] (EAI 2)Name or service not known: [client 144.76.19.72:40758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:05.120121 2026] [ssl:error] [pid 3425344:tid 3425344] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:05.173162 2026] [ssl:error] [pid 3432062:tid 3432062] (EAI 2)Name or service not known: [client 144.76.19.72:40762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:05.173193 2026] [ssl:error] [pid 3432062:tid 3432062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:08.275182 2026] [ssl:error] [pid 3434415:tid 3434415] (EAI 2)Name or service not known: [client 144.76.19.72:40774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:08.275217 2026] [ssl:error] [pid 3434415:tid 3434415] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:08.327012 2026] [access_compat:error] [pid 3424697:tid 3424697] [client 45.158.164.139:34962] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:13:08.328487 2026] [ssl:error] [pid 3421957:tid 3421957] (EAI 2)Name or service not known: [client 144.76.19.72:40784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:08.328509 2026] [ssl:error] [pid 3421957:tid 3421957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:09.121908 2026] [ssl:error] [pid 3434415:tid 3434415] (70014)End of file found: [client 216.73.216.199:12548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:09.434243 2026] [ssl:error] [pid 3402463:tid 3402463] (70014)End of file found: [client 216.73.216.199:37160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:10.618726 2026] [access_compat:error] [pid 3428080:tid 3428080] [client 45.158.164.139:55280] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:13:11.382896 2026] [ssl:error] [pid 3427990:tid 3427990] (EAI 2)Name or service not known: [client 144.76.19.72:46698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:11.382923 2026] [ssl:error] [pid 3427990:tid 3427990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:11.434406 2026] [ssl:error] [pid 3427991:tid 3427991] (EAI 2)Name or service not known: [client 144.76.19.72:46702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:11.434430 2026] [ssl:error] [pid 3427991:tid 3427991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:13.129946 2026] [security2:error] [pid 3424697:tid 3424697] [client 216.73.216.199:52894] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-mbstring.ini"] [unique_id "amtN6Spdo_8uhZtufaw7fQAAAA0"]
[Thu Jul 30 14:13:13.130269 2026] [security2:error] [pid 3424697:tid 3424697] [client 216.73.216.199:52894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-mbstring.ini"] [unique_id "amtN6Spdo_8uhZtufaw7fQAAAA0"]
[Thu Jul 30 14:13:13.130508 2026] [security2:error] [pid 3424697:tid 3424697] [client 216.73.216.199:52894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-mbstring.ini"] [unique_id "amtN6Spdo_8uhZtufaw7fQAAAA0"]
[Thu Jul 30 14:13:14.000764 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:52894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:14.936650 2026] [ssl:error] [pid 3441180:tid 3441180] (EAI 2)Name or service not known: [client 144.76.19.72:46704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:14.936682 2026] [ssl:error] [pid 3441180:tid 3441180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:15.212435 2026] [ssl:error] [pid 3441516:tid 3441516] (70014)End of file found: [client 216.73.216.199:1106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:15.558251 2026] [ssl:error] [pid 3444017:tid 3444017] (EAI 2)Name or service not known: [client 144.76.19.72:46720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:15.558285 2026] [ssl:error] [pid 3444017:tid 3444017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:15.602142 2026] [ssl:error] [pid 3428159:tid 3428159] (70014)End of file found: [client 216.73.216.199:17283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:17.797628 2026] [lsapi:warn] [pid 3426824:tid 3426824] [client 207.58.142.67:48881] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:13:18.330848 2026] [security2:error] [pid 3413399:tid 3413399] [client 47.84.89.204:45663] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtN7od6vpXfl60osUDapQAAAAU"]
[Thu Jul 30 14:13:18.330898 2026] [security2:error] [pid 3413399:tid 3413399] [client 47.84.89.204:45663] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtN7od6vpXfl60osUDapQAAAAU"]
[Thu Jul 30 14:13:18.331153 2026] [security2:error] [pid 3413399:tid 3413399] [client 47.84.89.204:45663] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtN7od6vpXfl60osUDapQAAAAU"]
[Thu Jul 30 14:13:18.612462 2026] [ssl:error] [pid 3444893:tid 3444893] (EAI 2)Name or service not known: [client 144.76.19.72:46724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:18.612503 2026] [ssl:error] [pid 3444893:tid 3444893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:18.665961 2026] [ssl:error] [pid 3444894:tid 3444894] (EAI 2)Name or service not known: [client 144.76.19.72:46734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:18.665995 2026] [ssl:error] [pid 3444894:tid 3444894] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:19.164383 2026] [ssl:error] [pid 3430515:tid 3430515] (70014)End of file found: [client 216.73.216.199:52559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:20.618536 2026] [security2:error] [pid 3425195:tid 3425195] [client 77.222.107.152:63732] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtN8OQ4DE2U-5-yZpsYEQAAAB0"]
[Thu Jul 30 14:13:20.618587 2026] [security2:error] [pid 3425195:tid 3425195] [client 77.222.107.152:63732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtN8OQ4DE2U-5-yZpsYEQAAAB0"]
[Thu Jul 30 14:13:20.618833 2026] [security2:error] [pid 3425195:tid 3425195] [client 77.222.107.152:63732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtN8OQ4DE2U-5-yZpsYEQAAAB0"]
[Thu Jul 30 14:13:21.162399 2026] [core:error] [pid 3427990:tid 3427990] [client 66.249.66.8:50150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:13:21.162429 2026] [core:error] [pid 3427990:tid 3427990] [client 66.249.66.8:50150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:13:21.577273 2026] [ssl:error] [pid 3444301:tid 3444301] (70014)End of file found: [client 216.73.216.199:35398] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:21.728982 2026] [ssl:error] [pid 3445207:tid 3445207] (EAI 2)Name or service not known: [client 144.76.19.72:25290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:21.729025 2026] [ssl:error] [pid 3445207:tid 3445207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:21.787961 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:25300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:21.787999 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:21.971907 2026] [security2:error] [pid 3445209:tid 3445209] [client 114.119.146.111:58489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~103,15/request_format~html"] [unique_id "amtN8dWcRg625MYtOWxWfQAAADs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~103,15/request_format~html
[Thu Jul 30 14:13:23.287620 2026] [security2:error] [pid 3441515:tid 3441515] [client 85.208.96.202:43558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3138.0.html"] [unique_id "amtN8_O7MO1fvNNyXbl08AAAABI"]
[Thu Jul 30 14:13:23.613567 2026] [security2:error] [pid 3427991:tid 3427991] [client 114.119.146.111:58503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575849600/cat_ids~103,15/request_format~html"] [unique_id "amtN88-M5FvSNjpoeLhPlwAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575849600/cat_ids~103,15/request_format~html
[Thu Jul 30 14:13:24.847299 2026] [ssl:error] [pid 3444890:tid 3444890] (EAI 2)Name or service not known: [client 144.76.19.72:25302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:24.847332 2026] [ssl:error] [pid 3444890:tid 3444890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:24.900223 2026] [ssl:error] [pid 3445207:tid 3445207] (EAI 2)Name or service not known: [client 144.76.19.72:25304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:24.900248 2026] [ssl:error] [pid 3445207:tid 3445207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:24.952657 2026] [core:error] [pid 3425195:tid 3425195] (13)Permission denied: [client 216.73.216.199:60758] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/total_objects
[Thu Jul 30 14:13:25.501213 2026] [security2:error] [pid 3445209:tid 3445209] [client 178.234.28.237:51536] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtN9dWcRg625MYtOWxWfgAAADs"]
[Thu Jul 30 14:13:25.501280 2026] [security2:error] [pid 3445209:tid 3445209] [client 178.234.28.237:51536] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtN9dWcRg625MYtOWxWfgAAADs"]
[Thu Jul 30 14:13:25.501562 2026] [security2:error] [pid 3445209:tid 3445209] [client 178.234.28.237:51536] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtN9dWcRg625MYtOWxWfgAAADs"]
[Thu Jul 30 14:13:25.557905 2026] [security2:error] [pid 3433143:tid 3433143] [client 216.73.216.199:34256] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/pdo_sqlite.ini"] [unique_id "amtN9XRmRfnPAvZu4nZlggAAABA"]
[Thu Jul 30 14:13:25.558208 2026] [security2:error] [pid 3433143:tid 3433143] [client 216.73.216.199:34256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/pdo_sqlite.ini"] [unique_id "amtN9XRmRfnPAvZu4nZlggAAABA"]
[Thu Jul 30 14:13:25.558426 2026] [security2:error] [pid 3433143:tid 3433143] [client 216.73.216.199:34256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.std/pdo_sqlite.ini"] [unique_id "amtN9XRmRfnPAvZu4nZlggAAABA"]
[Thu Jul 30 14:13:25.859182 2026] [security2:error] [pid 3445202:tid 3445202] [client 185.191.171.1:54452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/disadvantages-of-observation-analysis-in-sport"] [unique_id "amtN9dZCuT1Be4i-JVC3swAAADQ"]
[Thu Jul 30 14:13:26.348605 2026] [security2:error] [pid 3413399:tid 3413399] [client 94.154.43.188:40962] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amtN9od6vpXfl60osUDaqQAAAAU"]
[Thu Jul 30 14:13:26.348800 2026] [security2:error] [pid 3413399:tid 3413399] [client 94.154.43.188:40962] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amtN9od6vpXfl60osUDaqQAAAAU"]
[Thu Jul 30 14:13:26.349013 2026] [security2:error] [pid 3413399:tid 3413399] [client 94.154.43.188:40962] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amtN9od6vpXfl60osUDaqQAAAAU"]
[Thu Jul 30 14:13:26.458270 2026] [ssl:error] [pid 3433143:tid 3433143] (70014)End of file found: [client 216.73.216.199:34256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:26.797489 2026] [security2:error] [pid 3444890:tid 3444890] [client 94.154.43.185:45908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tripodhome.co.uk"] [uri "/.env"] [unique_id "amtN9kmpxI3x3Xj8rk0GrgAAACY"]
[Thu Jul 30 14:13:26.797678 2026] [security2:error] [pid 3444890:tid 3444890] [client 94.154.43.185:45908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tripodhome.co.uk"] [uri "/.env"] [unique_id "amtN9kmpxI3x3Xj8rk0GrgAAACY"]
[Thu Jul 30 14:13:27.059962 2026] [ssl:error] [pid 3425195:tid 3425195] (70014)End of file found: [client 216.73.216.199:60758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:27.065741 2026] [security2:error] [pid 3445207:tid 3445207] [client 94.154.43.184:29608] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.tripodhome.rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amtN9xV7cn_Es8sOaYFSoAAAADk"]
[Thu Jul 30 14:13:27.065956 2026] [security2:error] [pid 3445207:tid 3445207] [client 94.154.43.184:29608] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tripodhome.rediscoveredgarden.co.uk"] [uri "/.env"] [unique_id "amtN9xV7cn_Es8sOaYFSoAAAADk"]
[Thu Jul 30 14:13:27.150374 2026] [security2:error] [pid 3445207:tid 3445207] [client 94.154.43.184:29608] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.tripodhome.rediscoveredgarden.co.uk"] [uri "/index.php"] [unique_id "amtN9xV7cn_Es8sOaYFSoAAAADk"]
[Thu Jul 30 14:13:27.372624 2026] [security2:error] [pid 3444890:tid 3444890] [client 94.154.43.185:45908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "tripodhome.co.uk"] [uri "/index.php"] [unique_id "amtN9kmpxI3x3Xj8rk0GrgAAACY"]
[Thu Jul 30 14:13:27.977829 2026] [ssl:error] [pid 3402463:tid 3402463] (EAI 2)Name or service not known: [client 144.76.19.72:25308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:27.977863 2026] [ssl:error] [pid 3402463:tid 3402463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:28.030480 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:25314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:28.030508 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:28.565559 2026] [core:error] [pid 3445209:tid 3445209] (13)Permission denied: [client 216.73.216.199:64852] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/transfermysqlusers
[Thu Jul 30 14:13:29.167272 2026] [ssl:error] [pid 3445209:tid 3445209] (70014)End of file found: [client 216.73.216.199:64852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:30.349603 2026] [security2:error] [pid 3425337:tid 3425337] [client 47.128.24.63:30254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amtN-mH0e8PhjUxT7yRdzwAAADM"]
[Thu Jul 30 14:13:31.084173 2026] [ssl:error] [pid 3444301:tid 3444301] (EAI 2)Name or service not known: [client 144.76.19.72:37064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:31.084207 2026] [ssl:error] [pid 3444301:tid 3444301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:31.139023 2026] [ssl:error] [pid 3445218:tid 3445218] (EAI 2)Name or service not known: [client 144.76.19.72:37068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:31.139081 2026] [ssl:error] [pid 3445218:tid 3445218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:31.513143 2026] [security2:error] [pid 3430025:tid 3430025] [client 170.106.15.3:60696] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "45.158.164.139"] [uri "/"] [unique_id "amtN-5Kb_Go12LFfMRG3UgAAAAY"]
[Thu Jul 30 14:13:32.198943 2026] [core:error] [pid 3428084:tid 3428084] (13)Permission denied: [client 216.73.216.199:28492] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/python-cllib/detector.py
[Thu Jul 30 14:13:32.321909 2026] [security2:error] [pid 3445211:tid 3445211] [client 74.7.227.14:34110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/"] [unique_id "amtN_HRO5nq-MKhBvZJvAwAAAD8"]
[Thu Jul 30 14:13:34.193614 2026] [ssl:error] [pid 3430025:tid 3430025] (EAI 2)Name or service not known: [client 144.76.19.72:37082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:34.193645 2026] [ssl:error] [pid 3430025:tid 3430025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:34.248214 2026] [ssl:error] [pid 3431884:tid 3431884] (EAI 2)Name or service not known: [client 144.76.19.72:37084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:34.248248 2026] [ssl:error] [pid 3431884:tid 3431884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:35.538666 2026] [core:error] [pid 3441515:tid 3441515] (13)Permission denied: [client 216.73.216.199:24100] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/partial
[Thu Jul 30 14:13:37.304757 2026] [ssl:error] [pid 3445211:tid 3445211] (EAI 2)Name or service not known: [client 144.76.19.72:37088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:37.304792 2026] [ssl:error] [pid 3445211:tid 3445211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:37.362525 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:37092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:37.362556 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:37.646590 2026] [ssl:error] [pid 3441515:tid 3441515] (70014)End of file found: [client 216.73.216.199:24100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:40.417458 2026] [ssl:error] [pid 3444301:tid 3444301] (EAI 2)Name or service not known: [client 144.76.19.72:36830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:40.417487 2026] [ssl:error] [pid 3444301:tid 3444301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:40.472406 2026] [ssl:error] [pid 3425195:tid 3425195] (EAI 2)Name or service not known: [client 144.76.19.72:36842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:40.472432 2026] [ssl:error] [pid 3425195:tid 3425195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:40.656083 2026] [ssl:error] [pid 3428084:tid 3428084] (70014)End of file found: [client 216.73.216.199:28492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:42.768728 2026] [ssl:error] [pid 3444887:tid 3444887] (70014)End of file found: [client 216.73.216.199:1778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:43.165285 2026] [security2:error] [pid 3417590:tid 3417590] [client 74.7.227.156:54284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "securitiesfinance.co.uk"] [uri "/"] [unique_id "amtOBwSoC92CCahGoh4naQAAADA"]
[Thu Jul 30 14:13:43.257003 2026] [core:error] [pid 3427749:tid 3427749] (13)Permission denied: [client 216.73.216.199:32718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/RAW/objects_partial
[Thu Jul 30 14:13:43.524364 2026] [ssl:error] [pid 3420644:tid 3420644] (EAI 2)Name or service not known: [client 144.76.19.72:36848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:43.524389 2026] [ssl:error] [pid 3420644:tid 3420644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:43.577024 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:36856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:43.577049 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:43.671754 2026] [core:error] [pid 3427749:tid 3427749] (13)Permission denied: [client 216.73.216.199:32718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-State/objects_partial
[Thu Jul 30 14:13:44.000619 2026] [cgi:error] [pid 3427749:tid 3427749] [client 216.73.216.199:32718] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-Thread-Queue/examples/callback.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:13:44.000679 2026] [cgi:error] [pid 3427749:tid 3427749] [client 216.73.216.199:32718] End of script output before headers: callback.pl
[Thu Jul 30 14:13:46.632775 2026] [ssl:error] [pid 3444891:tid 3444891] (EAI 2)Name or service not known: [client 144.76.19.72:36868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:46.632828 2026] [ssl:error] [pid 3444891:tid 3444891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:46.686222 2026] [ssl:error] [pid 3445211:tid 3445211] (EAI 2)Name or service not known: [client 144.76.19.72:36878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:46.686251 2026] [ssl:error] [pid 3445211:tid 3445211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:47.671837 2026] [security2:error] [pid 3445206:tid 3445206] [client 43.130.154.56:41846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/class-wp-ability.php"] [unique_id "amtOC-afLLNCThgIMe2yIgAAADY"]
[Thu Jul 30 14:13:49.739563 2026] [ssl:error] [pid 3430546:tid 3430546] (EAI 2)Name or service not known: [client 144.76.19.72:18210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:49.739608 2026] [ssl:error] [pid 3430546:tid 3430546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:49.799668 2026] [ssl:error] [pid 3444893:tid 3444893] (EAI 2)Name or service not known: [client 144.76.19.72:18214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:49.799692 2026] [ssl:error] [pid 3444893:tid 3444893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:51.241879 2026] [cgi:error] [pid 3445210:tid 3445210] [client 216.73.216.199:42612] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-Algorithm-Diff/cdiff.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:13:51.241933 2026] [cgi:error] [pid 3445210:tid 3445210] [client 216.73.216.199:42612] End of script output before headers: cdiff.pl
[Thu Jul 30 14:13:52.855754 2026] [ssl:error] [pid 3417650:tid 3417650] (EAI 2)Name or service not known: [client 144.76.19.72:18230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:52.855781 2026] [ssl:error] [pid 3417650:tid 3417650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:52.909273 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:18232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:52.909308 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:54.000921 2026] [cgi:error] [pid 3430546:tid 3430546] [client 216.73.216.199:11431] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-Algorithm-Diff/htmldiff.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:13:54.000979 2026] [cgi:error] [pid 3430546:tid 3430546] [client 216.73.216.199:11431] End of script output before headers: htmldiff.pl
[Thu Jul 30 14:13:55.134421 2026] [ssl:error] [pid 3428159:tid 3428159] (70014)End of file found: [client 216.73.216.199:20076] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:13:55.963846 2026] [ssl:error] [pid 3445213:tid 3445213] (EAI 2)Name or service not known: [client 144.76.19.72:18240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:55.963879 2026] [ssl:error] [pid 3445213:tid 3445213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:56.017206 2026] [ssl:error] [pid 3428032:tid 3428032] (EAI 2)Name or service not known: [client 144.76.19.72:18252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:56.017232 2026] [ssl:error] [pid 3428032:tid 3428032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:59.072593 2026] [ssl:error] [pid 3417650:tid 3417650] (EAI 2)Name or service not known: [client 144.76.19.72:18264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:59.072624 2026] [ssl:error] [pid 3417650:tid 3417650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:13:59.131578 2026] [ssl:error] [pid 3428086:tid 3428086] (EAI 2)Name or service not known: [client 144.76.19.72:18268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:13:59.131761 2026] [ssl:error] [pid 3428086:tid 3428086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:01.457879 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:47680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:02.200166 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:50434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:02.200206 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:02.255143 2026] [ssl:error] [pid 3430381:tid 3430381] (EAI 2)Name or service not known: [client 144.76.19.72:50438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:02.255180 2026] [ssl:error] [pid 3430381:tid 3430381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:05.308717 2026] [ssl:error] [pid 3445218:tid 3445218] (EAI 2)Name or service not known: [client 144.76.19.72:50444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:05.308745 2026] [ssl:error] [pid 3445218:tid 3445218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:05.363196 2026] [ssl:error] [pid 3430381:tid 3430381] (EAI 2)Name or service not known: [client 144.76.19.72:50446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:05.363244 2026] [ssl:error] [pid 3430381:tid 3430381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:06.902580 2026] [ssl:error] [pid 3444890:tid 3444890] (70014)End of file found: [client 216.73.216.199:43093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:08.417089 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:50460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:08.417120 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:09.001017 2026] [ssl:error] [pid 3444893:tid 3444893] (EAI 2)Name or service not known: [client 144.76.19.72:50468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:09.001048 2026] [ssl:error] [pid 3444893:tid 3444893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:12.056703 2026] [access_compat:error] [pid 3458136:tid 3458136] [client 45.158.164.139:35864] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:14:12.060174 2026] [ssl:error] [pid 3444890:tid 3444890] (EAI 2)Name or service not known: [client 144.76.19.72:30182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:12.060197 2026] [ssl:error] [pid 3444890:tid 3444890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:12.115997 2026] [ssl:error] [pid 3444890:tid 3444890] (EAI 2)Name or service not known: [client 144.76.19.72:30186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:12.116027 2026] [ssl:error] [pid 3444890:tid 3444890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:14.709901 2026] [lsapi:warn] [pid 3445208:tid 3445208] [client 9.160.34.144:29210] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:14:14.709946 2026] [lsapi:warn] [pid 3445208:tid 3445208] [client 9.160.34.144:29210] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:14:15.170854 2026] [ssl:error] [pid 3444588:tid 3444588] (EAI 2)Name or service not known: [client 144.76.19.72:30190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:15.170890 2026] [ssl:error] [pid 3444588:tid 3444588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:15.203329 2026] [lsapi:warn] [pid 3458177:tid 3458177] [client 9.160.34.159:40620] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:14:15.203366 2026] [lsapi:warn] [pid 3458177:tid 3458177] [client 9.160.34.159:40620] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:14:15.227525 2026] [ssl:error] [pid 3424697:tid 3424697] (EAI 2)Name or service not known: [client 144.76.19.72:30202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:15.227564 2026] [ssl:error] [pid 3424697:tid 3424697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:15.299269 2026] [security2:error] [pid 3441515:tid 3441515] [client 47.128.56.159:60502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blow-hairstudio.co.uk"] [uri "/robots.txt"] [unique_id "amtOJ_O7MO1fvNNyXbl1BgAAABI"]
[Thu Jul 30 14:14:15.506730 2026] [ssl:error] [pid 3427991:tid 3427991] (70014)End of file found: [client 216.73.216.199:5273] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:15.728704 2026] [lsapi:warn] [pid 3458177:tid 3458177] [client 9.160.34.159:40620] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:14:15.728736 2026] [lsapi:warn] [pid 3458177:tid 3458177] [client 9.160.34.159:40620] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:14:18.284685 2026] [ssl:error] [pid 3445210:tid 3445210] (EAI 2)Name or service not known: [client 144.76.19.72:30214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:18.284727 2026] [ssl:error] [pid 3445210:tid 3445210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:18.350521 2026] [ssl:error] [pid 3441180:tid 3441180] (EAI 2)Name or service not known: [client 144.76.19.72:30228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:18.350552 2026] [ssl:error] [pid 3441180:tid 3441180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:19.970176 2026] [security2:error] [pid 3444891:tid 3444891] [client 43.134.56.214:54762] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.org.uk"] [uri "/"] [unique_id "amtOK83Q9oQM5pp3xtKZ6QAAACc"]
[Thu Jul 30 14:14:21.057756 2026] [security2:error] [pid 3444301:tid 3444301] [client 43.134.56.214:55342] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amtOLdMQvn0K_SY3GSwLOAAAABk"], referer: http://shelterforum.org.uk
[Thu Jul 30 14:14:21.343757 2026] [security2:error] [pid 3445208:tid 3445208] [client 43.135.139.165:39134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "broadbentandsmith.com"] [uri "/"] [unique_id "amtOLeXeRZsZvmoKujDuQQAAADo"]
[Thu Jul 30 14:14:21.407576 2026] [ssl:error] [pid 3458136:tid 3458136] (EAI 2)Name or service not known: [client 144.76.19.72:32924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:21.407606 2026] [ssl:error] [pid 3458136:tid 3458136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:21.465499 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:32936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:21.465526 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:21.841829 2026] [core:error] [pid 3444887:tid 3444887] [client 216.73.216.199:17181] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/root/opt/alt/python311/lib64/python3.11/%(docloc)s)
[Thu Jul 30 14:14:22.516805 2026] [security2:error] [pid 3444590:tid 3444590] [client 43.135.139.165:47978] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "broadbentandsmith.com"] [uri "/"] [unique_id "amtOLmBEcLrob7hhvxWjmgAAAB8"], referer: http://broadbentandsmith.com
[Thu Jul 30 14:14:22.687931 2026] [core:error] [pid 3458136:tid 3458136] [client 66.249.66.8:41819] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:14:22.687956 2026] [core:error] [pid 3458136:tid 3458136] [client 66.249.66.8:41819] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:14:24.521847 2026] [ssl:error] [pid 3458183:tid 3458183] (EAI 2)Name or service not known: [client 144.76.19.72:32952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:24.521887 2026] [ssl:error] [pid 3458183:tid 3458183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:24.576605 2026] [ssl:error] [pid 3427991:tid 3427991] (EAI 2)Name or service not known: [client 144.76.19.72:32968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:24.576634 2026] [ssl:error] [pid 3427991:tid 3427991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:27.372249 2026] [security2:error] [pid 3417590:tid 3417590] [client 85.208.96.208:33296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/scurati,-m-terzo-volume-quando-esce"] [unique_id "amtOMwSoC92CCahGoh4negAAADA"]
[Thu Jul 30 14:14:27.630397 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:32988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:27.630435 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:27.688149 2026] [ssl:error] [pid 3458178:tid 3458178] (EAI 2)Name or service not known: [client 144.76.19.72:33000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:27.688195 2026] [ssl:error] [pid 3458178:tid 3458178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:30.640892 2026] [security2:error] [pid 3459071:tid 3459071] [client 23.154.136.143:62904] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "justaccessories.co.uk.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtONhxjnBc_s6zDev3xIwAAAA8"]
[Thu Jul 30 14:14:30.641274 2026] [security2:error] [pid 3459071:tid 3459071] [client 23.154.136.143:62904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "justaccessories.co.uk.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtONhxjnBc_s6zDev3xIwAAAA8"]
[Thu Jul 30 14:14:30.641588 2026] [security2:error] [pid 3459071:tid 3459071] [client 23.154.136.143:62904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "justaccessories.co.uk.ns-narvi.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtONhxjnBc_s6zDev3xIwAAAA8"]
[Thu Jul 30 14:14:30.730763 2026] [security2:error] [pid 3459071:tid 3459071] [client 23.154.136.143:62904] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "justaccessories.co.uk.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtONhxjnBc_s6zDev3xJAAAAA8"]
[Thu Jul 30 14:14:30.731029 2026] [security2:error] [pid 3459071:tid 3459071] [client 23.154.136.143:62904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "justaccessories.co.uk.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtONhxjnBc_s6zDev3xJAAAAA8"]
[Thu Jul 30 14:14:30.731270 2026] [security2:error] [pid 3459071:tid 3459071] [client 23.154.136.143:62904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "justaccessories.co.uk.ns-narvi.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtONhxjnBc_s6zDev3xJAAAAA8"]
[Thu Jul 30 14:14:30.743504 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:35018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:30.743532 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:30.796308 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:35032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:30.796338 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:33.852602 2026] [ssl:error] [pid 3458178:tid 3458178] (EAI 2)Name or service not known: [client 144.76.19.72:35046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:33.852637 2026] [ssl:error] [pid 3458178:tid 3458178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:33.925460 2026] [ssl:error] [pid 3459110:tid 3459110] (EAI 2)Name or service not known: [client 144.76.19.72:35060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:33.925501 2026] [ssl:error] [pid 3459110:tid 3459110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:34.026153 2026] [authz_core:error] [pid 3444590:tid 3444590] [client 216.73.216.199:26285] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 14:14:36.979903 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:35074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:36.979940 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:37.036572 2026] [ssl:error] [pid 3458132:tid 3458132] (EAI 2)Name or service not known: [client 144.76.19.72:35082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:37.036605 2026] [ssl:error] [pid 3458132:tid 3458132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:37.844580 2026] [ssl:error] [pid 3458134:tid 3458134] (70014)End of file found: [client 216.73.216.199:43482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:38.141857 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:48881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:38.747233 2026] [ssl:error] [pid 3428159:tid 3428159] (70014)End of file found: [client 216.73.216.199:7931] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:40.090389 2026] [ssl:error] [pid 3459112:tid 3459112] (EAI 2)Name or service not known: [client 144.76.19.72:41334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:40.090427 2026] [ssl:error] [pid 3459112:tid 3459112] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:40.144242 2026] [ssl:error] [pid 3459329:tid 3459329] (EAI 2)Name or service not known: [client 144.76.19.72:41338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:40.144277 2026] [ssl:error] [pid 3459329:tid 3459329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:43.202453 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:41366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:43.202481 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:43.257981 2026] [ssl:error] [pid 3429586:tid 3429586] (EAI 2)Name or service not known: [client 144.76.19.72:41374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:43.258010 2026] [ssl:error] [pid 3429586:tid 3429586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:45.152565 2026] [ssl:error] [pid 3459071:tid 3459071] (70014)End of file found: [client 216.73.216.199:42989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:45.519628 2026] [security2:error] [pid 3458134:tid 3458134] [client 114.119.142.20:52311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/request_format~html"] [unique_id "amtORQIBD28r5Yal4_yiUQAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E9-12-2019
[Thu Jul 30 14:14:46.387081 2026] [security2:error] [pid 3430546:tid 3430546] [client 216.73.216.199:22259] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/l.v.e-manager/cl.python/yum_cache.dat"] [unique_id "amtORjKjHwXYdl_aMjR2TAAAABU"]
[Thu Jul 30 14:14:46.387372 2026] [security2:error] [pid 3430546:tid 3430546] [client 216.73.216.199:22259] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/l.v.e-manager/cl.python/yum_cache.dat"] [unique_id "amtORjKjHwXYdl_aMjR2TAAAABU"]
[Thu Jul 30 14:14:46.387605 2026] [security2:error] [pid 3430546:tid 3430546] [client 216.73.216.199:22259] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/l.v.e-manager/cl.python/yum_cache.dat"] [unique_id "amtORjKjHwXYdl_aMjR2TAAAABU"]
[Thu Jul 30 14:14:46.394717 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:41390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:46.394747 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:46.447617 2026] [ssl:error] [pid 3445218:tid 3445218] (EAI 2)Name or service not known: [client 144.76.19.72:41400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:46.447644 2026] [ssl:error] [pid 3445218:tid 3445218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:46.547250 2026] [security2:error] [pid 3428159:tid 3428159] [client 114.119.142.20:52323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/request_format~html"] [unique_id "amtORosrSsYwrB7miHVpcAAAAEY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E9-12-2019
[Thu Jul 30 14:14:46.687396 2026] [ssl:error] [pid 3430546:tid 3430546] (70014)End of file found: [client 216.73.216.199:22259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:47.069195 2026] [access_compat:error] [pid 3445202:tid 3445202] [client 103.59.153.118:54329] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:14:47.769274 2026] [access_compat:error] [pid 3459786:tid 3459786] [client 45.158.164.139:40790] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:14:47.782645 2026] [security2:error] [pid 3424697:tid 3424697] [client 37.237.112.200:44961] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtORypdo_8uhZtufaw7sQAAAA0"]
[Thu Jul 30 14:14:47.782696 2026] [security2:error] [pid 3424697:tid 3424697] [client 37.237.112.200:44961] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtORypdo_8uhZtufaw7sQAAAA0"]
[Thu Jul 30 14:14:47.782958 2026] [security2:error] [pid 3424697:tid 3424697] [client 37.237.112.200:44961] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtORypdo_8uhZtufaw7sQAAAA0"]
[Thu Jul 30 14:14:48.835417 2026] [core:error] [pid 3417590:tid 3417590] (13)Permission denied: [client 216.73.216.199:39895] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu7/crash_notes
[Thu Jul 30 14:14:49.503062 2026] [ssl:error] [pid 3459835:tid 3459835] (EAI 2)Name or service not known: [client 144.76.19.72:41440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:49.503133 2026] [ssl:error] [pid 3459835:tid 3459835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:49.561609 2026] [ssl:error] [pid 3459836:tid 3459836] (EAI 2)Name or service not known: [client 144.76.19.72:24556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:49.561651 2026] [ssl:error] [pid 3459836:tid 3459836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:50.375467 2026] [ssl:error] [pid 3417590:tid 3417590] (70014)End of file found: [client 216.73.216.199:39895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:51.905063 2026] [security2:error] [pid 3458177:tid 3458177] [client 47.254.178.202:54095] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOS7B5ypwexU5DFGmLhwAAAAo"]
[Thu Jul 30 14:14:51.905125 2026] [security2:error] [pid 3458177:tid 3458177] [client 47.254.178.202:54095] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOS7B5ypwexU5DFGmLhwAAAAo"]
[Thu Jul 30 14:14:51.905403 2026] [security2:error] [pid 3458177:tid 3458177] [client 47.254.178.202:54095] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOS7B5ypwexU5DFGmLhwAAAAo"]
[Thu Jul 30 14:14:52.149381 2026] [ssl:error] [pid 3459071:tid 3459071] (70014)End of file found: [client 216.73.216.199:16552] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:52.618502 2026] [ssl:error] [pid 3458176:tid 3458176] (EAI 2)Name or service not known: [client 144.76.19.72:24572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:52.618535 2026] [ssl:error] [pid 3458176:tid 3458176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:52.655221 2026] [ssl:error] [pid 3459837:tid 3459837] (70014)End of file found: [client 216.73.216.199:40331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:52.670174 2026] [ssl:error] [pid 3430546:tid 3430546] (EAI 2)Name or service not known: [client 144.76.19.72:24582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:52.670193 2026] [ssl:error] [pid 3430546:tid 3430546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:54.703626 2026] [security2:error] [pid 3459715:tid 3459715] [client 103.221.249.25:59814] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtOTvdoHJjNoOL46AhpHgAAAAU"]
[Thu Jul 30 14:14:54.744643 2026] [security2:error] [pid 3458176:tid 3458176] [client 47.254.178.202:53099] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOTstR8xrrLNHAtazgiQAAAAk"]
[Thu Jul 30 14:14:54.744690 2026] [security2:error] [pid 3458176:tid 3458176] [client 47.254.178.202:53099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOTstR8xrrLNHAtazgiQAAAAk"]
[Thu Jul 30 14:14:54.744963 2026] [security2:error] [pid 3458176:tid 3458176] [client 47.254.178.202:53099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOTstR8xrrLNHAtazgiQAAAAk"]
[Thu Jul 30 14:14:54.791406 2026] [access_compat:error] [pid 3459924:tid 3459924] [client 103.59.153.118:54830] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:14:55.726492 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:24592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:55.726525 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:55.784113 2026] [ssl:error] [pid 3459834:tid 3459834] (EAI 2)Name or service not known: [client 144.76.19.72:24596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:55.784143 2026] [ssl:error] [pid 3459834:tid 3459834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:56.366825 2026] [ssl:error] [pid 3458024:tid 3458024] (70014)End of file found: [client 216.73.216.199:48511] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:57.499582 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:38349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:58.107798 2026] [ssl:error] [pid 3459835:tid 3459835] (70014)End of file found: [client 216.73.216.199:27591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:14:58.842260 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:24598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:58.842286 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:58.896541 2026] [ssl:error] [pid 3430546:tid 3430546] (EAI 2)Name or service not known: [client 144.76.19.72:24612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:14:58.896571 2026] [ssl:error] [pid 3430546:tid 3430546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:14:59.041645 2026] [security2:error] [pid 3459834:tid 3459834] [client 43.164.196.47:45988] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hatch-works.com"] [uri "/"] [unique_id "amtOU0_8A7uTw5z3HyxZfAAAACE"]
[Thu Jul 30 14:15:00.342025 2026] [security2:error] [pid 3459834:tid 3459834] [client 43.164.196.47:47322] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hatch-works.com"] [uri "/"] [unique_id "amtOVE_8A7uTw5z3HyxZfgAAACE"], referer: http://www.hatch-works.com
[Thu Jul 30 14:15:01.750354 2026] [ssl:error] [pid 3428159:tid 3428159] (70014)End of file found: [client 216.73.216.199:52481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:02.024597 2026] [ssl:error] [pid 3424697:tid 3424697] (EAI 2)Name or service not known: [client 144.76.19.72:44378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:02.024630 2026] [ssl:error] [pid 3424697:tid 3424697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:02.078582 2026] [ssl:error] [pid 3444591:tid 3444591] (EAI 2)Name or service not known: [client 144.76.19.72:44386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:02.078617 2026] [ssl:error] [pid 3444591:tid 3444591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:02.936411 2026] [ssl:error] [pid 3460617:tid 3460617] (70014)End of file found: [client 216.73.216.199:10671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:04.260886 2026] [core:error] [pid 3460618:tid 3460618] (13)Permission denied: [client 216.73.216.199:8921] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/cpu_partial
[Thu Jul 30 14:15:04.572600 2026] [ssl:error] [pid 3460618:tid 3460618] (70014)End of file found: [client 216.73.216.199:8921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:05.135022 2026] [ssl:error] [pid 3441516:tid 3441516] (EAI 2)Name or service not known: [client 144.76.19.72:44394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:05.135055 2026] [ssl:error] [pid 3441516:tid 3441516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:05.186648 2026] [ssl:error] [pid 3458178:tid 3458178] (EAI 2)Name or service not known: [client 144.76.19.72:44396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:05.186678 2026] [ssl:error] [pid 3458178:tid 3458178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:05.416535 2026] [access_compat:error] [pid 3459113:tid 3459113] [client 103.59.153.118:55295] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:05.860607 2026] [core:error] [pid 3445202:tid 3445202] (13)Permission denied: [client 216.73.216.199:16232] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/scsi_mod/uevent
[Thu Jul 30 14:15:06.161851 2026] [security2:error] [pid 3445202:tid 3445202] [client 216.73.216.199:16232] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/debuginfo-install.conf"] [unique_id "amtOWtZCuT1Be4i-JVC3zQAAADQ"]
[Thu Jul 30 14:15:06.162148 2026] [security2:error] [pid 3445202:tid 3445202] [client 216.73.216.199:16232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/debuginfo-install.conf"] [unique_id "amtOWtZCuT1Be4i-JVC3zQAAADQ"]
[Thu Jul 30 14:15:06.162362 2026] [security2:error] [pid 3445202:tid 3445202] [client 216.73.216.199:16232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/debuginfo-install.conf"] [unique_id "amtOWtZCuT1Be4i-JVC3zQAAADQ"]
[Thu Jul 30 14:15:06.462843 2026] [core:error] [pid 3445202:tid 3445202] (13)Permission denied: [client 216.73.216.199:16232] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/uhci_urb_priv/objects_partial
[Thu Jul 30 14:15:06.763869 2026] [core:error] [pid 3445202:tid 3445202] (13)Permission denied: [client 216.73.216.199:16232] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-2/trace
[Thu Jul 30 14:15:07.365685 2026] [core:error] [pid 3445202:tid 3445202] (13)Permission denied: [client 216.73.216.199:16232] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/hwcache_align
[Thu Jul 30 14:15:07.925990 2026] [security2:error] [pid 3459070:tid 3459070] [client 137.59.223.47:42094] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOW4a_AOFs2iZTuQ2D_gAAAAw"]
[Thu Jul 30 14:15:07.926059 2026] [security2:error] [pid 3459070:tid 3459070] [client 137.59.223.47:42094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOW4a_AOFs2iZTuQ2D_gAAAAw"]
[Thu Jul 30 14:15:07.926358 2026] [security2:error] [pid 3459070:tid 3459070] [client 137.59.223.47:42094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOW4a_AOFs2iZTuQ2D_gAAAAw"]
[Thu Jul 30 14:15:08.241559 2026] [ssl:error] [pid 3460476:tid 3460476] (EAI 2)Name or service not known: [client 144.76.19.72:44404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:08.241595 2026] [ssl:error] [pid 3460476:tid 3460476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:08.302060 2026] [ssl:error] [pid 3460945:tid 3460945] (EAI 2)Name or service not known: [client 144.76.19.72:44408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:08.302128 2026] [ssl:error] [pid 3460945:tid 3460945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:08.647221 2026] [access_compat:error] [pid 3461039:tid 3461039] [client 43.153.74.75:48176] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 14:15:09.798036 2026] [core:error] [pid 3445202:tid 3445202] (13)Permission denied: [client 216.73.216.199:16232] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/md_mod/parameters/create_on_open
[Thu Jul 30 14:15:10.097478 2026] [core:error] [pid 3445202:tid 3445202] (13)Permission denied: [client 216.73.216.199:16232] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_transaction_s/total_objects
[Thu Jul 30 14:15:11.006371 2026] [ssl:error] [pid 3445202:tid 3445202] (70014)End of file found: [client 216.73.216.199:16232] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:11.414096 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:29832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:11.414130 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:11.472514 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:29838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:11.472545 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:12.105379 2026] [ssl:error] [pid 3444591:tid 3444591] (70014)End of file found: [client 216.73.216.199:8198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:12.183606 2026] [ssl:error] [pid 3441516:tid 3441516] (70014)End of file found: [client 216.73.216.199:48886] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:12.482169 2026] [access_compat:error] [pid 3461324:tid 3461324] [client 103.59.153.118:55564] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:13.293307 2026] [security2:error] [pid 3460617:tid 3460617] [client 208.84.102.195:50724] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/.git/HEAD"] [unique_id "amtOYfWn6cPfOsRyXyLW0gAAACk"]
[Thu Jul 30 14:15:13.293511 2026] [security2:error] [pid 3460617:tid 3460617] [client 208.84.102.195:50724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/.git/HEAD"] [unique_id "amtOYfWn6cPfOsRyXyLW0gAAACk"]
[Thu Jul 30 14:15:13.866310 2026] [security2:error] [pid 3461398:tid 3461398] [client 208.84.102.195:50748] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/.git/config"] [unique_id "amtOYenoxsknW15sdB_vHQAAADg"]
[Thu Jul 30 14:15:13.866562 2026] [security2:error] [pid 3461398:tid 3461398] [client 208.84.102.195:50748] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/.git/config"] [unique_id "amtOYenoxsknW15sdB_vHQAAADg"]
[Thu Jul 30 14:15:13.943955 2026] [security2:error] [pid 3459786:tid 3459786] [client 177.138.219.191:38444] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOYZ6ymGDUMMYmL_WF0gAAAAg"]
[Thu Jul 30 14:15:13.944005 2026] [security2:error] [pid 3459786:tid 3459786] [client 177.138.219.191:38444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOYZ6ymGDUMMYmL_WF0gAAAAg"]
[Thu Jul 30 14:15:13.944299 2026] [security2:error] [pid 3459786:tid 3459786] [client 177.138.219.191:38444] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOYZ6ymGDUMMYmL_WF0gAAAAg"]
[Thu Jul 30 14:15:13.955297 2026] [security2:error] [pid 3461400:tid 3461400] [client 208.84.102.195:50784] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/.env.production"] [unique_id "amtOYdrXZQM_sqxXfZwLJgAAADs"]
[Thu Jul 30 14:15:13.955545 2026] [security2:error] [pid 3461400:tid 3461400] [client 208.84.102.195:50784] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/.env.production"] [unique_id "amtOYdrXZQM_sqxXfZwLJgAAADs"]
[Thu Jul 30 14:15:13.959646 2026] [security2:error] [pid 3461399:tid 3461399] [client 208.84.102.195:50810] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/api/.env"] [unique_id "amtOYXbwqN9grkt_VpntwQAAADk"]
[Thu Jul 30 14:15:13.959829 2026] [security2:error] [pid 3461399:tid 3461399] [client 208.84.102.195:50810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/api/.env"] [unique_id "amtOYXbwqN9grkt_VpntwQAAADk"]
[Thu Jul 30 14:15:14.195320 2026] [security2:error] [pid 3459113:tid 3459113] [client 208.84.102.195:50798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/backend/.env"] [unique_id "amtOYvv9ioe2O_VbyM4yVAAAABw"]
[Thu Jul 30 14:15:14.195595 2026] [security2:error] [pid 3459113:tid 3459113] [client 208.84.102.195:50798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/backend/.env"] [unique_id "amtOYvv9ioe2O_VbyM4yVAAAABw"]
[Thu Jul 30 14:15:14.233322 2026] [security2:error] [pid 3441515:tid 3441515] [client 208.84.102.195:50768] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/.env.local"] [unique_id "amtOYvO7MO1fvNNyXbl1RAAAABI"]
[Thu Jul 30 14:15:14.233534 2026] [security2:error] [pid 3441515:tid 3441515] [client 208.84.102.195:50768] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/.env.local"] [unique_id "amtOYvO7MO1fvNNyXbl1RAAAABI"]
[Thu Jul 30 14:15:14.380412 2026] [security2:error] [pid 3461397:tid 3461397] [client 208.84.102.195:50788] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/.env.development"] [unique_id "amtOYosdL5YHcIzMH1poKwAAADc"]
[Thu Jul 30 14:15:14.380637 2026] [security2:error] [pid 3461397:tid 3461397] [client 208.84.102.195:50788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/.env.development"] [unique_id "amtOYosdL5YHcIzMH1poKwAAADc"]
[Thu Jul 30 14:15:14.388269 2026] [security2:error] [pid 3461038:tid 3461038] [client 208.84.102.195:50758] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "berehap.be"] [uri "/.env"] [unique_id "amtOYoCmjRaYCSNJ_gRJBAAAADE"]
[Thu Jul 30 14:15:14.388486 2026] [security2:error] [pid 3461038:tid 3461038] [client 208.84.102.195:50758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "berehap.be"] [uri "/.env"] [unique_id "amtOYoCmjRaYCSNJ_gRJBAAAADE"]
[Thu Jul 30 14:15:14.718378 2026] [security2:error] [pid 3460617:tid 3460617] [client 208.84.102.195:50724] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYfWn6cPfOsRyXyLW0gAAACk"]
[Thu Jul 30 14:15:15.075086 2026] [access_compat:error] [pid 3461481:tid 3461481] [client 45.158.164.139:37128] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:15:15.105327 2026] [ssl:error] [pid 3461485:tid 3461485] (EAI 2)Name or service not known: [client 144.76.19.72:29852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:15.105374 2026] [ssl:error] [pid 3461485:tid 3461485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:15.731464 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:29868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:15.731497 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:15.796321 2026] [security2:error] [pid 3461398:tid 3461398] [client 208.84.102.195:50748] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYenoxsknW15sdB_vHQAAADg"]
[Thu Jul 30 14:15:16.110781 2026] [security2:error] [pid 3461400:tid 3461400] [client 208.84.102.195:50784] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYdrXZQM_sqxXfZwLJgAAADs"]
[Thu Jul 30 14:15:16.377038 2026] [access_compat:error] [pid 3461480:tid 3461480] [client 103.59.153.118:55740] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:17.021047 2026] [security2:error] [pid 3461399:tid 3461399] [client 208.84.102.195:50810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYXbwqN9grkt_VpntwQAAADk"]
[Thu Jul 30 14:15:17.231525 2026] [security2:error] [pid 3461397:tid 3461397] [client 208.84.102.195:50788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYosdL5YHcIzMH1poKwAAADc"]
[Thu Jul 30 14:15:17.379295 2026] [security2:error] [pid 3459113:tid 3459113] [client 208.84.102.195:50798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYvv9ioe2O_VbyM4yVAAAABw"]
[Thu Jul 30 14:15:18.071344 2026] [security2:error] [pid 3461038:tid 3461038] [client 208.84.102.195:50758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYoCmjRaYCSNJ_gRJBAAAADE"]
[Thu Jul 30 14:15:18.126644 2026] [security2:error] [pid 3441516:tid 3441516] [client 5.29.22.44:2375] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOZp9t377jcqNJQpJDeQAAABM"]
[Thu Jul 30 14:15:18.126697 2026] [security2:error] [pid 3441516:tid 3441516] [client 5.29.22.44:2375] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOZp9t377jcqNJQpJDeQAAABM"]
[Thu Jul 30 14:15:18.126976 2026] [security2:error] [pid 3441516:tid 3441516] [client 5.29.22.44:2375] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOZp9t377jcqNJQpJDeQAAABM"]
[Thu Jul 30 14:15:18.225271 2026] [security2:error] [pid 3441515:tid 3441515] [client 208.84.102.195:50768] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "berehap.be"] [uri "/index.php"] [unique_id "amtOYvO7MO1fvNNyXbl1RAAAABI"]
[Thu Jul 30 14:15:18.267194 2026] [core:error] [pid 3445216:tid 3445216] (13)Permission denied: [client 216.73.216.199:11698] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_inode/usersize
[Thu Jul 30 14:15:18.563967 2026] [core:error] [pid 3445216:tid 3445216] (13)Permission denied: [client 216.73.216.199:11698] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/RAWv6/cpu_partial
[Thu Jul 30 14:15:18.790643 2026] [ssl:error] [pid 3445202:tid 3445202] (EAI 2)Name or service not known: [client 144.76.19.72:29874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:18.790678 2026] [ssl:error] [pid 3445202:tid 3445202] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:18.848517 2026] [ssl:error] [pid 3441516:tid 3441516] (EAI 2)Name or service not known: [client 144.76.19.72:29878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:18.848545 2026] [ssl:error] [pid 3441516:tid 3441516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:18.866210 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:11698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:19.373379 2026] [ssl:error] [pid 3461656:tid 3461656] (70014)End of file found: [client 216.73.216.199:18952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:21.277544 2026] [ssl:error] [pid 3441516:tid 3441516] (70014)End of file found: [client 216.73.216.199:46515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:21.716670 2026] [security2:error] [pid 3461612:tid 3461612] [client 85.208.96.207:27654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11270.0/prev_next,prev.html"] [unique_id "amtOaQv8eBSCyvyqai8edgAAAEQ"]
[Thu Jul 30 14:15:21.903633 2026] [ssl:error] [pid 3460476:tid 3460476] (EAI 2)Name or service not known: [client 144.76.19.72:50576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:21.903666 2026] [ssl:error] [pid 3460476:tid 3460476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:21.961576 2026] [ssl:error] [pid 3461037:tid 3461037] (EAI 2)Name or service not known: [client 144.76.19.72:50592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:21.961607 2026] [ssl:error] [pid 3461037:tid 3461037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:23.065988 2026] [access_compat:error] [pid 3459018:tid 3459018] [client 103.59.153.118:56018] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:24.618397 2026] [ssl:error] [pid 3458176:tid 3458176] (70014)End of file found: [client 216.73.216.199:31538] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:24.912718 2026] [ssl:error] [pid 3459018:tid 3459018] (70014)End of file found: [client 216.73.216.199:61861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:25.018616 2026] [ssl:error] [pid 3461483:tid 3461483] (EAI 2)Name or service not known: [client 144.76.19.72:50598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:25.018654 2026] [ssl:error] [pid 3461483:tid 3461483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:25.072427 2026] [ssl:error] [pid 3460476:tid 3460476] (EAI 2)Name or service not known: [client 144.76.19.72:50600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:25.072463 2026] [ssl:error] [pid 3460476:tid 3460476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:25.520143 2026] [ssl:error] [pid 3460617:tid 3460617] (70014)End of file found: [client 216.73.216.199:4654] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:26.729667 2026] [access_compat:error] [pid 3460615:tid 3460615] [client 103.59.153.118:56183] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:27.140082 2026] [cgi:error] [pid 3461479:tid 3461479] [client 74.248.33.8:39513] AH02812: stderr from /home/davidebell/public_html/kirstybashforth.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:15:27.620134 2026] [security2:error] [pid 3459113:tid 3459113] [client 45.148.10.120:46160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.theovertones.ditchfest.com"] [uri "/.env"] [unique_id "amtOb_v9ioe2O_VbyM4yWwAAABw"]
[Thu Jul 30 14:15:27.620299 2026] [security2:error] [pid 3459113:tid 3459113] [client 45.148.10.120:46160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.theovertones.ditchfest.com"] [uri "/.env"] [unique_id "amtOb_v9ioe2O_VbyM4yWwAAABw"]
[Thu Jul 30 14:15:27.620519 2026] [security2:error] [pid 3459113:tid 3459113] [client 45.148.10.120:46160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.theovertones.ditchfest.com"] [uri "/.env"] [unique_id "amtOb_v9ioe2O_VbyM4yWwAAABw"]
[Thu Jul 30 14:15:28.124740 2026] [ssl:error] [pid 3461397:tid 3461397] (EAI 2)Name or service not known: [client 144.76.19.72:50602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:28.124782 2026] [ssl:error] [pid 3461397:tid 3461397] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:28.179392 2026] [ssl:error] [pid 3430546:tid 3430546] (EAI 2)Name or service not known: [client 144.76.19.72:50612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:28.179424 2026] [ssl:error] [pid 3430546:tid 3430546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:28.342169 2026] [security2:error] [pid 3461399:tid 3461399] [client 185.191.171.15:47316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/mobile-homes-for-rent-chino,-ca"] [unique_id "amtOcHbwqN9grkt_VpntxQAAADk"]
[Thu Jul 30 14:15:29.010861 2026] [security2:error] [pid 3458177:tid 3458177] [client 43.157.188.74:34254] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-london.com"] [uri "/"] [unique_id "amtOcbB5ypwexU5DFGmL8AAAAAo"]
[Thu Jul 30 14:15:30.004402 2026] [ssl:error] [pid 3461036:tid 3461036] (70014)End of file found: [client 216.73.216.199:6887] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:30.231235 2026] [ssl:error] [pid 3459071:tid 3459071] (70014)End of file found: [client 216.73.216.199:46448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:30.494766 2026] [security2:error] [pid 3461478:tid 3461478] [client 43.157.188.74:35756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtOcic20J9v2vfYupVYMAAAADw"], referer: http://www.kinesiology-london.com
[Thu Jul 30 14:15:30.496565 2026] [authz_core:error] [pid 3461478:tid 3461478] [client 43.157.188.74:35756] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-london.com
[Thu Jul 30 14:15:30.499219 2026] [authz_core:error] [pid 3461478:tid 3461478] [client 43.157.188.74:35756] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-london.com
[Thu Jul 30 14:15:30.838601 2026] [ssl:error] [pid 3441515:tid 3441515] (70014)End of file found: [client 216.73.216.199:1183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:31.232574 2026] [ssl:error] [pid 3461399:tid 3461399] (EAI 2)Name or service not known: [client 144.76.19.72:49396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:31.232612 2026] [ssl:error] [pid 3461399:tid 3461399] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:31.285920 2026] [ssl:error] [pid 3459329:tid 3459329] (EAI 2)Name or service not known: [client 144.76.19.72:49404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:31.285951 2026] [ssl:error] [pid 3459329:tid 3459329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:31.587696 2026] [security2:error] [pid 3445216:tid 3445216] [client 198.244.183.36:56566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "devwebsitehub.com"] [uri "/shopdetail/IEQVX2752.html"] [unique_id "amtOc5rRCg_OX09OlWoOOAAAAEc"]
[Thu Jul 30 14:15:33.476174 2026] [access_compat:error] [pid 3458176:tid 3458176] [client 103.59.153.118:56452] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:33.790967 2026] [security2:error] [pid 3459715:tid 3459715] [client 47.128.24.244:26022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amtOdfdoHJjNoOL46AhpMAAAAAU"]
[Thu Jul 30 14:15:34.342509 2026] [ssl:error] [pid 3458178:tid 3458178] (EAI 2)Name or service not known: [client 144.76.19.72:49416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:34.342544 2026] [ssl:error] [pid 3458178:tid 3458178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:34.396887 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:49422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:34.396918 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:35.349606 2026] [ssl:error] [pid 3461037:tid 3461037] (70014)End of file found: [client 216.73.216.199:2042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:35.758630 2026] [ssl:error] [pid 3461039:tid 3461039] (70014)End of file found: [client 216.73.216.199:25772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:35.933676 2026] [authz_core:error] [pid 3444591:tid 3444591] [client 195.32.105.134:63624] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:15:36.248307 2026] [ssl:error] [pid 3430546:tid 3430546] (70014)End of file found: [client 216.73.216.199:18283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:37.445592 2026] [access_compat:error] [pid 3458180:tid 3458180] [client 103.59.153.118:56629] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:37.455546 2026] [ssl:error] [pid 3461478:tid 3461478] (EAI 2)Name or service not known: [client 144.76.19.72:49428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:37.455582 2026] [ssl:error] [pid 3461478:tid 3461478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:37.511049 2026] [ssl:error] [pid 3461399:tid 3461399] (EAI 2)Name or service not known: [client 144.76.19.72:49430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:37.511089 2026] [ssl:error] [pid 3461399:tid 3461399] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:40.075204 2026] [security2:error] [pid 3461478:tid 3461478] [client 129.211.172.249:58616] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thelambproductions.com"] [uri "/"] [unique_id "amtOfCc20J9v2vfYupVYNgAAADw"]
[Thu Jul 30 14:15:40.568225 2026] [ssl:error] [pid 3458176:tid 3458176] (EAI 2)Name or service not known: [client 144.76.19.72:29088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:40.568254 2026] [ssl:error] [pid 3458176:tid 3458176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:40.673573 2026] [ssl:error] [pid 3462848:tid 3462848] (EAI 2)Name or service not known: [client 144.76.19.72:29094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:40.673604 2026] [ssl:error] [pid 3462848:tid 3462848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:40.797897 2026] [ssl:error] [pid 3459715:tid 3459715] (70014)End of file found: [client 216.73.216.199:59463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:41.488989 2026] [ssl:error] [pid 3427749:tid 3427749] (70014)End of file found: [client 216.73.216.199:29273] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:41.822314 2026] [authz_core:error] [pid 3461478:tid 3461478] [client 66.249.66.34:54312] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:15:41.825049 2026] [authz_core:error] [pid 3461478:tid 3461478] [client 66.249.66.34:54312] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:15:41.980123 2026] [ssl:error] [pid 3445202:tid 3445202] (70014)End of file found: [client 216.73.216.199:2092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:43.737176 2026] [ssl:error] [pid 3458180:tid 3458180] (EAI 2)Name or service not known: [client 144.76.19.72:29110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:43.737212 2026] [ssl:error] [pid 3458180:tid 3458180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:43.798563 2026] [ssl:error] [pid 3428159:tid 3428159] (EAI 2)Name or service not known: [client 144.76.19.72:29118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:43.798593 2026] [ssl:error] [pid 3428159:tid 3428159] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:44.147589 2026] [access_compat:error] [pid 3462012:tid 3462012] [client 103.59.153.118:56901] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:44.583638 2026] [access_compat:error] [pid 3458182:tid 3458182] [client 51.120.79.193:16144] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 14:15:44.879093 2026] [access_compat:error] [pid 3458182:tid 3458182] [client 51.120.79.193:16144] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 14:15:44.897838 2026] [access_compat:error] [pid 3458182:tid 3458182] [client 51.120.79.193:16144] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 14:15:44.899358 2026] [access_compat:error] [pid 3458182:tid 3458182] [client 51.120.79.193:16144] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 14:15:45.011201 2026] [security2:error] [pid 3461399:tid 3461399] [client 185.191.171.1:29690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9263.0/prev_next,prev.html"] [unique_id "amtOgXbwqN9grkt_VpntzAAAADk"]
[Thu Jul 30 14:15:45.765144 2026] [security2:error] [pid 3461399:tid 3461399] [client 114.119.151.128:56865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.oliviamarjorie.com"] [uri "/robots.txt"] [unique_id "amtOgXbwqN9grkt_VpntzQAAADk"], referer: http://www.oliviamarjorie.com/robots.txt
[Thu Jul 30 14:15:46.875152 2026] [ssl:error] [pid 3462012:tid 3462012] (EAI 2)Name or service not known: [client 144.76.19.72:29132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:46.875200 2026] [ssl:error] [pid 3462012:tid 3462012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:46.928580 2026] [ssl:error] [pid 3461037:tid 3461037] (EAI 2)Name or service not known: [client 144.76.19.72:29144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:46.928611 2026] [ssl:error] [pid 3461037:tid 3461037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:47.529061 2026] [ssl:error] [pid 3445218:tid 3445218] (70014)End of file found: [client 216.73.216.199:16718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:48.104383 2026] [access_compat:error] [pid 3459071:tid 3459071] [client 103.59.153.118:57080] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:48.435474 2026] [ssl:error] [pid 3427749:tid 3427749] (70014)End of file found: [client 216.73.216.199:54949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:48.607848 2026] [access_compat:error] [pid 3461037:tid 3461037] [client 45.158.164.139:59196] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:15:48.935260 2026] [ssl:error] [pid 3458080:tid 3458080] (70014)End of file found: [client 216.73.216.199:9843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:49.986246 2026] [ssl:error] [pid 3461243:tid 3461243] (EAI 2)Name or service not known: [client 144.76.19.72:48640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:49.986275 2026] [ssl:error] [pid 3461243:tid 3461243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:50.042662 2026] [ssl:error] [pid 3461037:tid 3461037] (EAI 2)Name or service not known: [client 144.76.19.72:48652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:50.042688 2026] [ssl:error] [pid 3461037:tid 3461037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:53.097667 2026] [ssl:error] [pid 3461484:tid 3461484] (EAI 2)Name or service not known: [client 144.76.19.72:48658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:53.097704 2026] [ssl:error] [pid 3461484:tid 3461484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:53.149930 2026] [ssl:error] [pid 3459715:tid 3459715] (EAI 2)Name or service not known: [client 144.76.19.72:48660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:53.149969 2026] [ssl:error] [pid 3459715:tid 3459715] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:55.106161 2026] [authz_core:error] [pid 3458182:tid 3458182] [client 51.120.79.193:16144] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:15:55.723923 2026] [core:error] [pid 3458080:tid 3458080] [client 66.249.66.8:47596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:15:55.723955 2026] [core:error] [pid 3458080:tid 3458080] [client 66.249.66.8:47596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:15:56.206552 2026] [ssl:error] [pid 3460405:tid 3460405] (EAI 2)Name or service not known: [client 144.76.19.72:48664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:56.206587 2026] [ssl:error] [pid 3460405:tid 3460405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:56.261601 2026] [ssl:error] [pid 3444590:tid 3444590] (EAI 2)Name or service not known: [client 144.76.19.72:48680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:56.261643 2026] [ssl:error] [pid 3444590:tid 3444590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:56.878198 2026] [ssl:error] [pid 3461400:tid 3461400] (70014)End of file found: [client 216.73.216.199:1200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:15:57.693187 2026] [security2:error] [pid 3459835:tid 3459835] [client 47.128.27.72:16392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/robots.txt"] [unique_id "amtOjevoEsGFBoFW-Oqx0gAAACI"]
[Thu Jul 30 14:15:57.693725 2026] [core:error] [pid 3459835:tid 3459835] [client 47.128.27.72:16392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:15:58.737087 2026] [access_compat:error] [pid 3441515:tid 3441515] [client 103.59.153.118:57537] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:15:59.198077 2026] [core:error] [pid 3459837:tid 3459837] (13)Permission denied: [client 216.73.216.199:57456] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS1/line
[Thu Jul 30 14:15:59.322982 2026] [ssl:error] [pid 3461658:tid 3461658] (EAI 2)Name or service not known: [client 144.76.19.72:48694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:59.323010 2026] [ssl:error] [pid 3461658:tid 3461658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:59.381323 2026] [ssl:error] [pid 3458080:tid 3458080] (EAI 2)Name or service not known: [client 144.76.19.72:48708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:15:59.381358 2026] [ssl:error] [pid 3458080:tid 3458080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:15:59.496477 2026] [ssl:error] [pid 3459071:tid 3459071] (70014)End of file found: [client 216.73.216.199:65474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:00.712261 2026] [core:error] [pid 3459837:tid 3459837] (13)Permission denied: [client 216.73.216.199:57456] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/sections/__kcrctab
[Thu Jul 30 14:16:02.223555 2026] [ssl:error] [pid 3459837:tid 3459837] (70014)End of file found: [client 216.73.216.199:57456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:02.447744 2026] [ssl:error] [pid 3459835:tid 3459835] (EAI 2)Name or service not known: [client 144.76.19.72:18782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:02.447775 2026] [ssl:error] [pid 3459835:tid 3459835] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:02.503596 2026] [ssl:error] [pid 3461036:tid 3461036] (EAI 2)Name or service not known: [client 144.76.19.72:18792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:02.503635 2026] [ssl:error] [pid 3461036:tid 3461036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:02.817421 2026] [cgi:error] [pid 3458135:tid 3458135] [client 51.120.79.193:15682] AH02812: stderr from /home/shelterf/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:16:03.438432 2026] [core:error] [pid 3460405:tid 3460405] (13)Permission denied: [client 216.73.216.199:50026] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS2/flags
[Thu Jul 30 14:16:03.732769 2026] [authz_core:error] [pid 3458135:tid 3458135] [client 51.120.79.193:15682] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/l10n/error_log
[Thu Jul 30 14:16:03.739260 2026] [core:error] [pid 3460405:tid 3460405] (13)Permission denied: [client 216.73.216.199:50026] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS2/flags
[Thu Jul 30 14:16:03.763984 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 51.120.79.193:15682] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 14:16:03.764024 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 51.120.79.193:15682] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 14:16:03.766564 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 51.120.79.193:15682] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 14:16:03.767589 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 51.120.79.193:15682] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 14:16:04.043129 2026] [autoindex:error] [pid 3460405:tid 3460405] (13)Permission denied: [client 216.73.216.199:50026] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/sudo/
[Thu Jul 30 14:16:04.342686 2026] [ssl:error] [pid 3460405:tid 3460405] (70014)End of file found: [client 216.73.216.199:50026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:04.838367 2026] [core:error] [pid 3460614:tid 3460614] (13)Permission denied: [client 216.73.216.199:11210] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_net/drivers/virtio:virtio_net/unbind
[Thu Jul 30 14:16:05.353962 2026] [access_compat:error] [pid 3458080:tid 3458080] [client 103.59.153.118:57812] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:05.555471 2026] [ssl:error] [pid 3460614:tid 3460614] (70014)End of file found: [client 216.73.216.199:11210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:05.556509 2026] [ssl:error] [pid 3461478:tid 3461478] (EAI 2)Name or service not known: [client 144.76.19.72:18796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:05.556534 2026] [ssl:error] [pid 3461478:tid 3461478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:05.608631 2026] [ssl:error] [pid 3461243:tid 3461243] (EAI 2)Name or service not known: [client 144.76.19.72:18802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:05.608668 2026] [ssl:error] [pid 3461243:tid 3461243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:07.803212 2026] [authz_core:error] [pid 3458135:tid 3458135] [client 51.120.79.193:15682] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 14:16:08.664267 2026] [ssl:error] [pid 3460478:tid 3460478] (EAI 2)Name or service not known: [client 144.76.19.72:18806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:08.664303 2026] [ssl:error] [pid 3460478:tid 3460478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:08.720911 2026] [ssl:error] [pid 3444891:tid 3444891] (EAI 2)Name or service not known: [client 144.76.19.72:18812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:08.720948 2026] [ssl:error] [pid 3444891:tid 3444891] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:09.428180 2026] [access_compat:error] [pid 3459113:tid 3459113] [client 103.59.153.118:58001] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:09.606184 2026] [security2:error] [pid 3461399:tid 3461399] [client 43.166.136.202:60886] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amtOmXbwqN9grkt_Vpnt1gAAADk"]
[Thu Jul 30 14:16:09.987545 2026] [security2:error] [pid 3461037:tid 3461037] [client 114.119.132.171:64815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~30,104,103/request_format~html"] [unique_id "amtOmcV-oeTG3pYvZIcgxAAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~30,104/request_format~html
[Thu Jul 30 14:16:10.093268 2026] [core:error] [pid 3427749:tid 3427749] (13)Permission denied: [client 216.73.216.199:52788] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:09/physical_node/resource4
[Thu Jul 30 14:16:11.357670 2026] [security2:error] [pid 3460614:tid 3460614] [client 114.119.132.171:64817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~30,104,103/request_format~html"] [unique_id "amtOmwDlGH8QnuiYmOpooQAAACY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~30,104/request_format~html
[Thu Jul 30 14:16:11.775560 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:39236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:11.775595 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:11.831759 2026] [ssl:error] [pid 3460405:tid 3460405] (EAI 2)Name or service not known: [client 144.76.19.72:39242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:11.831789 2026] [ssl:error] [pid 3460405:tid 3460405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:12.502332 2026] [core:error] [pid 3427749:tid 3427749] (13)Permission denied: [client 216.73.216.199:52788] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/device/driver/unbind
[Thu Jul 30 14:16:13.404044 2026] [core:error] [pid 3427749:tid 3427749] (13)Permission denied: [client 216.73.216.199:52788] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:47/subsystem/ttyS0/closing_wait
[Thu Jul 30 14:16:14.889559 2026] [ssl:error] [pid 3441515:tid 3441515] (EAI 2)Name or service not known: [client 144.76.19.72:39246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:14.889592 2026] [ssl:error] [pid 3441515:tid 3441515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:14.942819 2026] [ssl:error] [pid 3458178:tid 3458178] (EAI 2)Name or service not known: [client 144.76.19.72:39256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:14.942852 2026] [ssl:error] [pid 3458178:tid 3458178] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:15.337815 2026] [access_compat:error] [pid 3461037:tid 3461037] [client 45.158.164.139:53526] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:16:15.372153 2026] [core:error] [pid 3427749:tid 3427749] (13)Permission denied: [client 216.73.216.199:11986] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/line
[Thu Jul 30 14:16:16.093015 2026] [access_compat:error] [pid 3458178:tid 3458178] [client 103.59.153.118:58279] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:16.275142 2026] [ssl:error] [pid 3427749:tid 3427749] (70014)End of file found: [client 216.73.216.199:11986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:17.481214 2026] [ssl:error] [pid 3458182:tid 3458182] (70014)End of file found: [client 216.73.216.199:52391] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:17.992613 2026] [ssl:error] [pid 3459070:tid 3459070] (70014)End of file found: [client 216.73.216.199:10493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:18.013122 2026] [ssl:error] [pid 3461482:tid 3461482] (EAI 2)Name or service not known: [client 144.76.19.72:39262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:18.013156 2026] [ssl:error] [pid 3461482:tid 3461482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:18.067620 2026] [ssl:error] [pid 3460476:tid 3460476] (EAI 2)Name or service not known: [client 144.76.19.72:39276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:18.067647 2026] [ssl:error] [pid 3460476:tid 3460476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:20.038836 2026] [access_compat:error] [pid 3464627:tid 3464627] [client 103.59.153.118:58464] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:21.143038 2026] [ssl:error] [pid 3444590:tid 3444590] (EAI 2)Name or service not known: [client 144.76.19.72:32842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:21.143095 2026] [ssl:error] [pid 3444590:tid 3444590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:21.194988 2026] [ssl:error] [pid 3464625:tid 3464625] (EAI 2)Name or service not known: [client 144.76.19.72:32848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:21.195021 2026] [ssl:error] [pid 3464625:tid 3464625] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:21.632798 2026] [ssl:error] [pid 3464626:tid 3464626] (70014)End of file found: [client 216.73.216.199:25318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:22.660316 2026] [security2:error] [pid 3461482:tid 3461482] [client 43.135.140.225:35828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-json/wp/v2/pages/283"] [unique_id "amtOpjFrWtRJ13j1THLzqAAAAEA"]
[Thu Jul 30 14:16:24.250900 2026] [ssl:error] [pid 3461656:tid 3461656] (EAI 2)Name or service not known: [client 144.76.19.72:32864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:24.250934 2026] [ssl:error] [pid 3461656:tid 3461656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:24.306503 2026] [ssl:error] [pid 3458182:tid 3458182] (EAI 2)Name or service not known: [client 144.76.19.72:32868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:24.306536 2026] [ssl:error] [pid 3458182:tid 3458182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:24.443506 2026] [ssl:error] [pid 3441516:tid 3441516] (70014)End of file found: [client 216.73.216.199:8757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:24.745130 2026] [ssl:error] [pid 3464585:tid 3464585] (70014)End of file found: [client 216.73.216.199:19959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:25.239717 2026] [cgi:error] [pid 3458178:tid 3458178] [client 199.45.155.103:38356] AH02812: stderr from /home/nssun/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://ns-sun.com:443/cgi-bin
[Thu Jul 30 14:16:27.363172 2026] [ssl:error] [pid 3430546:tid 3430546] (EAI 2)Name or service not known: [client 144.76.19.72:32880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:27.363205 2026] [ssl:error] [pid 3430546:tid 3430546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:27.421213 2026] [ssl:error] [pid 3461484:tid 3461484] (EAI 2)Name or service not known: [client 144.76.19.72:32896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:27.421241 2026] [ssl:error] [pid 3461484:tid 3461484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:28.071277 2026] [ssl:error] [pid 3461482:tid 3461482] (70014)End of file found: [client 216.73.216.199:52698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:29.014016 2026] [security2:error] [pid 3464625:tid 3464625] [client 85.208.96.194:50636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/vintage-lane-furniture-serial-number-lookup"] [unique_id "amtOrTdc1gjnBIkJW9gZdAAAAAk"]
[Thu Jul 30 14:16:30.477719 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:57754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:30.477756 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:30.536079 2026] [ssl:error] [pid 3430381:tid 3430381] (EAI 2)Name or service not known: [client 144.76.19.72:57770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:30.536110 2026] [ssl:error] [pid 3430381:tid 3430381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:30.681138 2026] [access_compat:error] [pid 3465321:tid 3465321] [client 103.59.153.118:58923] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:30.810932 2026] [core:error] [pid 3464625:tid 3464625] (13)Permission denied: [client 216.73.216.199:18936] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty35/subsystem/ttyS2/close_delay
[Thu Jul 30 14:16:31.730779 2026] [core:error] [pid 3464625:tid 3464625] (13)Permission denied: [client 216.73.216.199:18936] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS2/closing_wait
[Thu Jul 30 14:16:32.036199 2026] [ssl:error] [pid 3464625:tid 3464625] (70014)End of file found: [client 216.73.216.199:18936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:32.340057 2026] [ssl:error] [pid 3465450:tid 3465450] (70014)End of file found: [client 216.73.216.199:28524] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:33.436559 2026] [ssl:error] [pid 3464624:tid 3464624] (70014)End of file found: [client 216.73.216.199:53274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:33.591555 2026] [ssl:error] [pid 3458180:tid 3458180] (EAI 2)Name or service not known: [client 144.76.19.72:57782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:33.591586 2026] [ssl:error] [pid 3458180:tid 3458180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:33.645702 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:57794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:33.645737 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:33.818992 2026] [authz_core:error] [pid 3461036:tid 3461036] [client 66.249.66.35:48109] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:16:33.821670 2026] [authz_core:error] [pid 3461036:tid 3461036] [client 66.249.66.35:48109] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:16:36.702329 2026] [ssl:error] [pid 3464626:tid 3464626] (EAI 2)Name or service not known: [client 144.76.19.72:57800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:36.702367 2026] [ssl:error] [pid 3464626:tid 3464626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:36.754460 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:57812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:36.754491 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:36.901466 2026] [security2:error] [pid 3460945:tid 3460945] [client 43.166.131.228:55830] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chateausaintjeannet.com"] [uri "/"] [unique_id "amtOtCPGw9OKeiukebOJrwAAACs"]
[Thu Jul 30 14:16:37.368568 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 103.59.153.118:59203] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:37.989618 2026] [security2:error] [pid 3460945:tid 3460945] [client 43.166.131.228:36152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chateausaintjeannet.com"] [uri "/"] [unique_id "amtOtSPGw9OKeiukebOJsAAAACs"], referer: http://chateausaintjeannet.com
[Thu Jul 30 14:16:38.075390 2026] [ssl:error] [pid 3461484:tid 3461484] (70014)End of file found: [client 216.73.216.199:15605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:38.682933 2026] [security2:error] [pid 3461658:tid 3461658] [client 216.73.216.199:38659] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/gd.ini"] [unique_id "amtOtkTiTIeYg96GMFB9rQAAAEk"]
[Thu Jul 30 14:16:38.683255 2026] [security2:error] [pid 3461658:tid 3461658] [client 216.73.216.199:38659] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/gd.ini"] [unique_id "amtOtkTiTIeYg96GMFB9rQAAAEk"]
[Thu Jul 30 14:16:38.683494 2026] [security2:error] [pid 3461658:tid 3461658] [client 216.73.216.199:38659] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/gd.ini"] [unique_id "amtOtkTiTIeYg96GMFB9rQAAAEk"]
[Thu Jul 30 14:16:38.978592 2026] [core:error] [pid 3458135:tid 3458135] (13)Permission denied: [client 216.73.216.199:49121] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS2/iomem_base
[Thu Jul 30 14:16:39.812165 2026] [ssl:error] [pid 3460405:tid 3460405] (EAI 2)Name or service not known: [client 144.76.19.72:23766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:39.812196 2026] [ssl:error] [pid 3460405:tid 3460405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:39.866591 2026] [ssl:error] [pid 3464626:tid 3464626] (EAI 2)Name or service not known: [client 144.76.19.72:23782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:39.866622 2026] [ssl:error] [pid 3464626:tid 3464626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:39.883164 2026] [ssl:error] [pid 3458135:tid 3458135] (70014)End of file found: [client 216.73.216.199:49121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:39.999530 2026] [security2:error] [pid 3464625:tid 3464625] [client 44.215.61.66:63340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtOtzdc1gjnBIkJW9gZfwAAAAk"]
[Thu Jul 30 14:16:40.492017 2026] [ssl:error] [pid 3461658:tid 3461658] (70014)End of file found: [client 216.73.216.199:38659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:40.764789 2026] [security2:error] [pid 3461324:tid 3461324] [client 43.166.131.228:37348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "amtOuDFuH2zLMh8ZU0L_pwAAADU"], referer: https://chateausaintjeannet.com/
[Thu Jul 30 14:16:41.422237 2026] [access_compat:error] [pid 3465450:tid 3465450] [client 103.59.153.118:59392] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:41.643089 2026] [ssl:error] [pid 3459071:tid 3459071] (70014)End of file found: [client 216.73.216.199:52503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:42.161235 2026] [ssl:error] [pid 3460945:tid 3460945] (70014)End of file found: [client 216.73.216.199:15046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:42.477384 2026] [ssl:error] [pid 3461036:tid 3461036] (70014)End of file found: [client 216.73.216.199:52413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:42.932498 2026] [ssl:error] [pid 3461399:tid 3461399] (EAI 2)Name or service not known: [client 144.76.19.72:23788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:42.932528 2026] [ssl:error] [pid 3461399:tid 3461399] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:42.987172 2026] [ssl:error] [pid 3464585:tid 3464585] (EAI 2)Name or service not known: [client 144.76.19.72:23790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:42.987203 2026] [ssl:error] [pid 3464585:tid 3464585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:43.304824 2026] [security2:error] [pid 3459113:tid 3459113] [client 103.78.255.43:49836] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOu_v9ioe2O_VbyM4yrgAAABw"]
[Thu Jul 30 14:16:43.304877 2026] [security2:error] [pid 3459113:tid 3459113] [client 103.78.255.43:49836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOu_v9ioe2O_VbyM4yrgAAABw"]
[Thu Jul 30 14:16:43.305155 2026] [security2:error] [pid 3459113:tid 3459113] [client 103.78.255.43:49836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOu_v9ioe2O_VbyM4yrgAAABw"]
[Thu Jul 30 14:16:44.983606 2026] [authz_core:error] [pid 3464625:tid 3464625] [client 4.225.203.146:18545] AH01630: client denied by server configuration: /home/elhassan/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:16:45.429928 2026] [security2:error] [pid 3444590:tid 3444590] [client 162.62.52.230:27387] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOvWBEcLrob7hhvxWjwAAAAB8"]
[Thu Jul 30 14:16:45.429992 2026] [security2:error] [pid 3444590:tid 3444590] [client 162.62.52.230:27387] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOvWBEcLrob7hhvxWjwAAAAB8"]
[Thu Jul 30 14:16:45.430264 2026] [security2:error] [pid 3444590:tid 3444590] [client 162.62.52.230:27387] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOvWBEcLrob7hhvxWjwAAAAB8"]
[Thu Jul 30 14:16:46.089618 2026] [ssl:error] [pid 3461324:tid 3461324] (EAI 2)Name or service not known: [client 144.76.19.72:23800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:46.089665 2026] [ssl:error] [pid 3461324:tid 3461324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:46.145057 2026] [ssl:error] [pid 3461658:tid 3461658] (EAI 2)Name or service not known: [client 144.76.19.72:23806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:46.145101 2026] [ssl:error] [pid 3461658:tid 3461658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:47.466938 2026] [ssl:error] [pid 3458178:tid 3458178] (70014)End of file found: [client 216.73.216.199:19640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:47.982733 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:44807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:48.068611 2026] [access_compat:error] [pid 3459071:tid 3459071] [client 103.59.153.118:59667] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:48.280347 2026] [ssl:error] [pid 3459070:tid 3459070] (70014)End of file found: [client 216.73.216.199:45637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:48.641756 2026] [access_compat:error] [pid 3465575:tid 3465575] [client 45.158.164.139:35102] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:16:49.253900 2026] [ssl:error] [pid 3465321:tid 3465321] (EAI 2)Name or service not known: [client 144.76.19.72:23820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:49.253940 2026] [ssl:error] [pid 3465321:tid 3465321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:49.309499 2026] [ssl:error] [pid 3430381:tid 3430381] (EAI 2)Name or service not known: [client 144.76.19.72:23828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:49.309530 2026] [ssl:error] [pid 3430381:tid 3430381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:49.485637 2026] [security2:error] [pid 3461036:tid 3461036] [client 162.62.52.230:51615] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOwS2Tpx5J9noRqrb4qQAAAC0"]
[Thu Jul 30 14:16:49.485690 2026] [security2:error] [pid 3461036:tid 3461036] [client 162.62.52.230:51615] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtOwS2Tpx5J9noRqrb4qQAAAC0"]
[Thu Jul 30 14:16:49.485924 2026] [security2:error] [pid 3461036:tid 3461036] [client 162.62.52.230:51615] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtOwS2Tpx5J9noRqrb4qQAAAC0"]
[Thu Jul 30 14:16:50.594205 2026] [security2:error] [pid 3460614:tid 3460614] [client 45.148.10.120:37510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtOwgDlGH8QnuiYmOposwAAACY"]
[Thu Jul 30 14:16:50.594395 2026] [security2:error] [pid 3460614:tid 3460614] [client 45.148.10.120:37510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtOwgDlGH8QnuiYmOposwAAACY"]
[Thu Jul 30 14:16:50.594802 2026] [security2:error] [pid 3460614:tid 3460614] [client 45.148.10.120:37510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstrainingorg.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtOwgDlGH8QnuiYmOposwAAACY"]
[Thu Jul 30 14:16:52.086605 2026] [access_compat:error] [pid 3459113:tid 3459113] [client 103.59.153.118:59849] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:16:52.415595 2026] [ssl:error] [pid 3465576:tid 3465576] (EAI 2)Name or service not known: [client 144.76.19.72:28282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:52.415626 2026] [ssl:error] [pid 3465576:tid 3465576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:52.473670 2026] [ssl:error] [pid 3461036:tid 3461036] (EAI 2)Name or service not known: [client 144.76.19.72:28286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:52.473695 2026] [ssl:error] [pid 3461036:tid 3461036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:52.832303 2026] [ssl:error] [pid 3461036:tid 3461036] (70014)End of file found: [client 216.73.216.199:64423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:52.835049 2026] [authz_core:error] [pid 3464625:tid 3464625] [client 4.225.203.146:18545] AH01630: client denied by server configuration: /home/elhassan/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:16:53.827566 2026] [ssl:error] [pid 3458178:tid 3458178] (70014)End of file found: [client 216.73.216.199:45077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:54.128795 2026] [ssl:error] [pid 3460614:tid 3460614] (70014)End of file found: [client 216.73.216.199:20617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:55.563110 2026] [ssl:error] [pid 3424697:tid 3424697] (EAI 2)Name or service not known: [client 144.76.19.72:28302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:55.563155 2026] [ssl:error] [pid 3424697:tid 3424697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:55.620894 2026] [ssl:error] [pid 3461243:tid 3461243] (EAI 2)Name or service not known: [client 144.76.19.72:28304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:55.620928 2026] [ssl:error] [pid 3461243:tid 3461243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:56.757661 2026] [security2:error] [pid 3458180:tid 3458180] [client 20.171.55.167:2765] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "beechhouseselfcatering.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtOyDAcwCVnO7TC_AwLQgAAABA"]
[Thu Jul 30 14:16:56.757869 2026] [security2:error] [pid 3458180:tid 3458180] [client 20.171.55.167:2765] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "beechhouseselfcatering.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtOyDAcwCVnO7TC_AwLQgAAABA"]
[Thu Jul 30 14:16:56.808611 2026] [security2:error] [pid 3458180:tid 3458180] [client 20.171.55.167:2765] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "beechhouseselfcatering.co.uk"] [uri "/index.php"] [unique_id "amtOyDAcwCVnO7TC_AwLQgAAABA"]
[Thu Jul 30 14:16:56.985648 2026] [authz_core:error] [pid 3464625:tid 3464625] [client 4.225.203.146:18545] AH01630: client denied by server configuration: /home/elhassan/public_html/wp-admin/maint/error_log
[Thu Jul 30 14:16:58.248078 2026] [ssl:error] [pid 3445208:tid 3445208] (70014)End of file found: [client 216.73.216.199:60065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:16:58.674310 2026] [ssl:error] [pid 3441516:tid 3441516] (EAI 2)Name or service not known: [client 144.76.19.72:28312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:58.674339 2026] [ssl:error] [pid 3441516:tid 3441516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:58.728666 2026] [ssl:error] [pid 3464584:tid 3464584] (EAI 2)Name or service not known: [client 144.76.19.72:28314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:16:58.728700 2026] [ssl:error] [pid 3464584:tid 3464584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:16:59.939937 2026] [security2:error] [pid 3458178:tid 3458178] [client 43.152.72.247:39812] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amtOy8Y-hj8feq2ocDQBHwAAAAs"]
[Thu Jul 30 14:17:01.389530 2026] [ssl:error] [pid 3460945:tid 3460945] (70014)End of file found: [client 216.73.216.199:50656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:01.493984 2026] [security2:error] [pid 3458180:tid 3458180] [client 43.152.72.247:59354] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "banskoexpress.com"] [uri "/"] [unique_id "amtOzTAcwCVnO7TC_AwLTgAAABA"], referer: http://banskoexpress.com
[Thu Jul 30 14:17:01.784108 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:49136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:01.784143 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:01.815599 2026] [authz_core:error] [pid 3459836:tid 3459836] [client 66.249.66.33:60926] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:17:01.818243 2026] [authz_core:error] [pid 3459836:tid 3459836] [client 66.249.66.33:60926] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:17:01.841508 2026] [ssl:error] [pid 3467069:tid 3467069] (EAI 2)Name or service not known: [client 144.76.19.72:49148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:01.841542 2026] [ssl:error] [pid 3467069:tid 3467069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:01.991994 2026] [ssl:error] [pid 3465577:tid 3465577] (70014)End of file found: [client 216.73.216.199:28829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:02.721621 2026] [access_compat:error] [pid 3464624:tid 3464624] [client 103.59.153.118:60309] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:03.493630 2026] [security2:error] [pid 3427991:tid 3427991] [client 43.152.72.247:60320] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtOz8-M5FvSNjpoeLhQHwAAAC8"], referer: https://banskoexpress.com/
[Thu Jul 30 14:17:03.688161 2026] [ssl:error] [pid 3461038:tid 3461038] (70014)End of file found: [client 216.73.216.199:27082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:04.898247 2026] [ssl:error] [pid 3461325:tid 3461325] (EAI 2)Name or service not known: [client 144.76.19.72:49158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:04.898291 2026] [ssl:error] [pid 3461325:tid 3461325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:04.951566 2026] [ssl:error] [pid 3461400:tid 3461400] (EAI 2)Name or service not known: [client 144.76.19.72:49170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:04.951601 2026] [ssl:error] [pid 3461400:tid 3461400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:05.825301 2026] [security2:error] [pid 3461243:tid 3461243] [client 114.119.135.233:34929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsr/wp-content/uploads/2018/10/HuntersStalkers-Hero-1.jpg"] [unique_id "amtO0cGS76CnnafRlez5DAAAADM"], referer: https://www.wmsfirearmstraining.com/news/south-africa-winter-training-book-ahead/activities/wms-bespoke-days-for-hunters-and-stalkers/
[Thu Jul 30 14:17:06.713544 2026] [ssl:error] [pid 3459070:tid 3459070] (70014)End of file found: [client 216.73.216.199:9231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:07.301423 2026] [ssl:error] [pid 3465450:tid 3465450] (70014)End of file found: [client 216.73.216.199:5493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:08.010601 2026] [ssl:error] [pid 3461324:tid 3461324] (EAI 2)Name or service not known: [client 144.76.19.72:49174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:08.010635 2026] [ssl:error] [pid 3461324:tid 3461324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:08.065024 2026] [ssl:error] [pid 3458180:tid 3458180] (EAI 2)Name or service not known: [client 144.76.19.72:49186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:08.065057 2026] [ssl:error] [pid 3458180:tid 3458180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:08.239747 2026] [authz_core:error] [pid 3444590:tid 3444590] [client 212.90.61.137:35148] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:17:09.149987 2026] [ssl:error] [pid 3464624:tid 3464624] (70014)End of file found: [client 216.73.216.199:6231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:09.371846 2026] [access_compat:error] [pid 3459018:tid 3459018] [client 103.59.153.118:60595] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:11.157475 2026] [ssl:error] [pid 3467069:tid 3467069] (EAI 2)Name or service not known: [client 144.76.19.72:55738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:11.157519 2026] [ssl:error] [pid 3467069:tid 3467069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:11.210587 2026] [ssl:error] [pid 3430381:tid 3430381] (EAI 2)Name or service not known: [client 144.76.19.72:55746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:11.210642 2026] [ssl:error] [pid 3430381:tid 3430381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:12.961569 2026] [security2:error] [pid 3427749:tid 3427749] [client 43.131.39.179:57334] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/"] [unique_id "amtO2ALkdOLf0ztkvZx-uQAAABg"]
[Thu Jul 30 14:17:13.490571 2026] [security2:error] [pid 3430381:tid 3430381] [client 43.131.39.179:57702] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtO2exmz91bQAgfP7-wYwAAAAI"], referer: http://www.theislipgarage.co.uk
[Thu Jul 30 14:17:13.499529 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 103.59.153.118:60784] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:13.791816 2026] [authz_core:error] [pid 3464585:tid 3464585] [client 216.73.216.199:6674] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 14:17:14.265266 2026] [ssl:error] [pid 3465577:tid 3465577] (EAI 2)Name or service not known: [client 144.76.19.72:55756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:14.265298 2026] [ssl:error] [pid 3465577:tid 3465577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:14.320791 2026] [ssl:error] [pid 3461398:tid 3461398] (EAI 2)Name or service not known: [client 144.76.19.72:55758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:14.320823 2026] [ssl:error] [pid 3461398:tid 3461398] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:14.872387 2026] [security2:error] [pid 3461324:tid 3461324] [client 103.244.249.254:31005] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtO2jFuH2zLMh8ZU0L_wwAAADU"]
[Thu Jul 30 14:17:14.872434 2026] [security2:error] [pid 3461324:tid 3461324] [client 103.244.249.254:31005] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtO2jFuH2zLMh8ZU0L_wwAAADU"]
[Thu Jul 30 14:17:14.872758 2026] [security2:error] [pid 3461324:tid 3461324] [client 103.244.249.254:31005] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtO2jFuH2zLMh8ZU0L_wwAAADU"]
[Thu Jul 30 14:17:15.783371 2026] [security2:error] [pid 3461036:tid 3461036] [client 114.119.135.143:33045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spurr.org.uk"] [uri "/robots.txt"] [unique_id "amtO2y2Tpx5J9noRqrb4sQAAAC0"], referer: https://spurr.org.uk/robots.txt
[Thu Jul 30 14:17:16.001129 2026] [ssl:error] [pid 3465577:tid 3465577] (70014)End of file found: [client 216.73.216.199:33631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:16.141902 2026] [authz_core:error] [pid 3461482:tid 3461482] [client 169.58.39.192:55251] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 14:17:16.919777 2026] [ssl:error] [pid 3445208:tid 3445208] (70014)End of file found: [client 216.73.216.199:5685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:17.379155 2026] [ssl:error] [pid 3467764:tid 3467764] (EAI 2)Name or service not known: [client 144.76.19.72:55760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:17.379191 2026] [ssl:error] [pid 3467764:tid 3467764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:17.436939 2026] [ssl:error] [pid 3461482:tid 3461482] (EAI 2)Name or service not known: [client 144.76.19.72:55776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:17.436969 2026] [ssl:error] [pid 3461482:tid 3461482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:19.049470 2026] [authz_core:error] [pid 3430381:tid 3430381] [client 169.58.39.192:56842] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 14:17:19.225569 2026] [security2:error] [pid 3461325:tid 3461325] [client 187.190.15.154:17091] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtO3975tSUOCl94_bm3wgAAADY"]
[Thu Jul 30 14:17:19.225615 2026] [security2:error] [pid 3461325:tid 3461325] [client 187.190.15.154:17091] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtO3975tSUOCl94_bm3wgAAADY"]
[Thu Jul 30 14:17:19.225904 2026] [security2:error] [pid 3461325:tid 3461325] [client 187.190.15.154:17091] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtO3975tSUOCl94_bm3wgAAADY"]
[Thu Jul 30 14:17:20.099660 2026] [access_compat:error] [pid 3465575:tid 3465575] [client 103.59.153.118:61063] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:20.498580 2026] [ssl:error] [pid 3459113:tid 3459113] (EAI 2)Name or service not known: [client 144.76.19.72:65516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:20.498628 2026] [ssl:error] [pid 3459113:tid 3459113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:20.555391 2026] [ssl:error] [pid 3460614:tid 3460614] (EAI 2)Name or service not known: [client 144.76.19.72:65532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:20.555433 2026] [ssl:error] [pid 3460614:tid 3460614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:22.601035 2026] [core:error] [pid 3467670:tid 3467670] (13)Permission denied: [client 216.73.216.199:52102] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty52/subsystem/ttyS3/flags
[Thu Jul 30 14:17:23.303177 2026] [ssl:error] [pid 3441515:tid 3441515] (70014)End of file found: [client 216.73.216.199:59963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:23.611503 2026] [ssl:error] [pid 3444590:tid 3444590] (EAI 2)Name or service not known: [client 144.76.19.72:18008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:23.611534 2026] [ssl:error] [pid 3444590:tid 3444590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:23.706338 2026] [ssl:error] [pid 3459071:tid 3459071] (EAI 2)Name or service not known: [client 144.76.19.72:18010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:23.706382 2026] [ssl:error] [pid 3459071:tid 3459071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:23.724442 2026] [security2:error] [pid 3427749:tid 3427749] [client 34.192.125.239:26307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/"] [unique_id "amtO4wLkdOLf0ztkvZx-wAAAABg"]
[Thu Jul 30 14:17:23.787582 2026] [security2:error] [pid 3461038:tid 3461038] [client 41.201.81.84:52150] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtO44CmjRaYCSNJ_gRJNQAAADE"]
[Thu Jul 30 14:17:23.787629 2026] [security2:error] [pid 3461038:tid 3461038] [client 41.201.81.84:52150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtO44CmjRaYCSNJ_gRJNQAAADE"]
[Thu Jul 30 14:17:23.787911 2026] [security2:error] [pid 3461038:tid 3461038] [client 41.201.81.84:52150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtO44CmjRaYCSNJ_gRJNQAAADE"]
[Thu Jul 30 14:17:24.269032 2026] [access_compat:error] [pid 3444590:tid 3444590] [client 103.59.153.118:61254] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:25.114423 2026] [ssl:error] [pid 3467670:tid 3467670] (70014)End of file found: [client 216.73.216.199:52102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:25.722384 2026] [ssl:error] [pid 3459836:tid 3459836] (70014)End of file found: [client 216.73.216.199:52196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:26.761336 2026] [ssl:error] [pid 3468205:tid 3468205] (EAI 2)Name or service not known: [client 144.76.19.72:18018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:26.761370 2026] [ssl:error] [pid 3468205:tid 3468205] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:26.817479 2026] [ssl:error] [pid 3464624:tid 3464624] (EAI 2)Name or service not known: [client 144.76.19.72:18026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:26.817518 2026] [ssl:error] [pid 3464624:tid 3464624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:27.870892 2026] [security2:error] [pid 3465450:tid 3465450] [client 38.192.105.17:35430] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amtO57_JsU4_tr1FYFFXKAAAAA4"]
[Thu Jul 30 14:17:28.569364 2026] [access_compat:error] [pid 3467109:tid 3467109] [client 45.158.164.139:48612] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:17:29.876568 2026] [ssl:error] [pid 3467069:tid 3467069] (EAI 2)Name or service not known: [client 144.76.19.72:56794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:29.876607 2026] [ssl:error] [pid 3467069:tid 3467069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:29.934132 2026] [ssl:error] [pid 3461398:tid 3461398] (EAI 2)Name or service not known: [client 144.76.19.72:56808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:29.934160 2026] [ssl:error] [pid 3461398:tid 3461398] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:31.033057 2026] [security2:error] [pid 3465576:tid 3465576] [client 185.191.171.12:35298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/tampa-general-hospital-billing-department"] [unique_id "amtO6xFRnXAaf1Z5xjpAbQAAABk"]
[Thu Jul 30 14:17:31.158214 2026] [ssl:error] [pid 3464624:tid 3464624] (70014)End of file found: [client 216.73.216.199:52560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:31.872001 2026] [lsapi:warn] [pid 3467109:tid 3467109] [client 198.38.94.67:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:17:32.969088 2026] [ssl:error] [pid 3468205:tid 3468205] (70014)End of file found: [client 216.73.216.199:25493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:33.028289 2026] [ssl:error] [pid 3459836:tid 3459836] (EAI 2)Name or service not known: [client 144.76.19.72:56818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:33.028324 2026] [ssl:error] [pid 3459836:tid 3459836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:33.082993 2026] [ssl:error] [pid 3458135:tid 3458135] (EAI 2)Name or service not known: [client 144.76.19.72:56822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:33.083031 2026] [ssl:error] [pid 3458135:tid 3458135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:33.476834 2026] [ssl:error] [pid 3460945:tid 3460945] (70014)End of file found: [client 216.73.216.199:15644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:34.119687 2026] [security2:error] [pid 3461324:tid 3461324] [client 114.119.135.136:43913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14/request_format~html"] [unique_id "amtO7jFuH2zLMh8ZU0L_yAAAADU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,19/request_format~html
[Thu Jul 30 14:17:34.314630 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/, referer: http://ns-pandora.com
[Thu Jul 30 14:17:34.361418 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/app, referer: http://ns-pandora.com/app/libs/fileman/fileman_callback.html
[Thu Jul 30 14:17:34.399532 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admin, referer: http://ns-pandora.com/admin/assets/plugins/ckeditor/plugins/fileman/
[Thu Jul 30 14:17:34.435941 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/fileman, referer: http://ns-pandora.com/fileman/index.html
[Thu Jul 30 14:17:34.493339 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/lib, referer: http://ns-pandora.com/lib/fileman/index.html
[Thu Jul 30 14:17:34.516094 2026] [security2:error] [pid 3467670:tid 3467670] [client 44.223.115.10:41563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/category/asia/"] [unique_id "amtO7kSBhOaOGkR0-2UbpQAAABY"]
[Thu Jul 30 14:17:34.530679 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/assets, referer: http://ns-pandora.com/assets/fileman/dev.html
[Thu Jul 30 14:17:34.568895 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/RoxyFileman, referer: http://ns-pandora.com/RoxyFileman/index.html
[Thu Jul 30 14:17:34.605083 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/system, referer: http://ns-pandora.com/system/fileman/dev.html
[Thu Jul 30 14:17:34.643146 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/editor, referer: http://ns-pandora.com/editor/assetmanager/style.css
[Thu Jul 30 14:17:34.680093 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/LiveEditor, referer: http://ns-pandora.com/LiveEditor/assetmanager/asset.aspx
[Thu Jul 30 14:17:34.724330 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/LiveEditor, referer: http://ns-pandora.com/LiveEditor/assetmanager/asset.asp
[Thu Jul 30 14:17:34.760422 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/assetmanager, referer: http://ns-pandora.com/assetmanager/style.css
[Thu Jul 30 14:17:34.800773 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/webadmin, referer: http://ns-pandora.com/webadmin/editor/assetmanager/style.css
[Thu Jul 30 14:17:34.836917 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/webadmin, referer: http://ns-pandora.com/webadmin/assetmanager/style.css
[Thu Jul 30 14:17:34.875740 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/siteadmin, referer: http://ns-pandora.com/siteadmin/assetmanager/style.css
[Thu Jul 30 14:17:34.926492 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/webmaster, referer: http://ns-pandora.com/webmaster/assetmanager/style.css
[Thu Jul 30 14:17:34.969886 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admincp, referer: http://ns-pandora.com/admincp/assetmanager/style.css
[Thu Jul 30 14:17:35.008693 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/assetmanager, referer: http://ns-pandora.com/assetmanager/i_upload_object_FSO.asp
[Thu Jul 30 14:17:35.009475 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 103.59.153.118:61722] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:35.051455 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/editor, referer: http://ns-pandora.com/editor/assetmanager/i_upload_object_FSO.asp
[Thu Jul 30 14:17:35.089741 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/editor, referer: http://ns-pandora.com/editor/assetmanager/asset.asp
[Thu Jul 30 14:17:35.128794 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admin, referer: http://ns-pandora.com/admin/assetmanager/i_upload_object_FSO.asp
[Thu Jul 30 14:17:35.189538 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/_admin, referer: http://ns-pandora.com/_admin/assetmanager/i_upload_object_FSO.asp
[Thu Jul 30 14:17:35.228517 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/_admin, referer: http://ns-pandora.com/_admin/assetmanager/asset.asp
[Thu Jul 30 14:17:35.271485 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/editor, referer: http://ns-pandora.com/editor/assetmanager/asset.aspx
[Thu Jul 30 14:17:35.307594 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admin, referer: http://ns-pandora.com/admin/editor/assetmanager/asset.asp
[Thu Jul 30 14:17:35.354492 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admin, referer: http://ns-pandora.com/admin/editor/assetmanager/style.css
[Thu Jul 30 14:17:35.399211 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admin, referer: http://ns-pandora.com/admin/editor/assetmanager/asset.aspx
[Thu Jul 30 14:17:35.435502 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/js, referer: http://ns-pandora.com/js/editor/assetmanager/style.css
[Thu Jul 30 14:17:35.471626 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/includes, referer: http://ns-pandora.com/includes/editor/assetmanager/style.css
[Thu Jul 30 14:17:35.508296 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/LiveEditor, referer: http://ns-pandora.com/LiveEditor/assetmanager/
[Thu Jul 30 14:17:35.546101 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/fileman, referer: http://ns-pandora.com/fileman/dev.html
[Thu Jul 30 14:17:35.600534 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/content, referer: http://ns-pandora.com/content/fileman/dev.html
[Thu Jul 30 14:17:35.636509 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/lib, referer: http://ns-pandora.com/lib/roxy_fileman/dev.html
[Thu Jul 30 14:17:35.676494 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/plugins, referer: http://ns-pandora.com/plugins/fileman/dev.html
[Thu Jul 30 14:17:35.715050 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admin, referer: http://ns-pandora.com/admin/js/fileman/dev.html
[Thu Jul 30 14:17:35.753286 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/Content, referer: http://ns-pandora.com/Content/Roxy_Fileman/dev.html
[Thu Jul 30 14:17:35.789926 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/Content, referer: http://ns-pandora.com/Content/filemanager/dev.html
[Thu Jul 30 14:17:35.831390 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/panel, referer: http://ns-pandora.com/panel/fileman/dev.html
[Thu Jul 30 14:17:35.844874 2026] [security2:error] [pid 3424697:tid 3424697] [client 114.119.135.136:43919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14/request_format~html"] [unique_id "amtO7ypdo_8uhZtufaw7_wAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,19/request_format~html
[Thu Jul 30 14:17:35.867647 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/mypanel, referer: http://ns-pandora.com/mypanel/fileman/dev.html
[Thu Jul 30 14:17:35.904616 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/myadmin, referer: http://ns-pandora.com/myadmin/fileman/dev.html
[Thu Jul 30 14:17:35.942806 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/admin, referer: http://ns-pandora.com/admin/fileman/dev.html
[Thu Jul 30 14:17:35.978941 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/js, referer: http://ns-pandora.com/js/fileman/dev.html
[Thu Jul 30 14:17:36.017423 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/scripts, referer: http://ns-pandora.com/scripts/fileman/dev.html
[Thu Jul 30 14:17:36.053796 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/lib, referer: http://ns-pandora.com/lib/fileman/dev.html
[Thu Jul 30 14:17:36.089641 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/editor, referer: http://ns-pandora.com/editor/fileman/dev.html
[Thu Jul 30 14:17:36.131242 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/vendor, referer: http://ns-pandora.com/vendor/fileman/dev.html
[Thu Jul 30 14:17:36.167643 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/vendors, referer: http://ns-pandora.com/vendors/fileman/dev.html
[Thu Jul 30 14:17:36.206339 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/uploadTester.asp, referer: http://ns-pandora.com/uploadTester.asp
[Thu Jul 30 14:17:36.242545 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/fileman, referer: http://ns-pandora.com/fileman/dev.html
[Thu Jul 30 14:17:36.278559 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/Telerik.Web.UI.DialogHandler.aspx, referer: http://ns-pandora.com/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.317754 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/App_Master, referer: http://ns-pandora.com/App_Master/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.356834 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/common, referer: http://ns-pandora.com/common/admin/PhotoGallery2/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.392934 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/dashboard, referer: http://ns-pandora.com/dashboard/UserControl/CMS/Page/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.429089 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/cms, referer: http://ns-pandora.com/cms/portlets/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.432965 2026] [ssl:error] [pid 3468836:tid 3468836] (EAI 2)Name or service not known: [client 144.76.19.72:56824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:36.432999 2026] [ssl:error] [pid 3468836:tid 3468836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:36.465402 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/common, referer: http://ns-pandora.com/common/admin/Calendar/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.505306 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/DesktopModules, referer: http://ns-pandora.com/DesktopModules/TNComments/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.542091 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/Modules, referer: http://ns-pandora.com/Modules/CMS/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.582041 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/DesktopModules, referer: http://ns-pandora.com/DesktopModules/TelerikWebUI/RadEditorProvider/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.618539 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/Providers, referer: http://ns-pandora.com/Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.654815 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/DesktopModules, referer: http://ns-pandora.com/DesktopModules/Admin/RadEditorProvider/DialogHandler.aspx
[Thu Jul 30 14:17:36.690756 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/DesktopModules, referer: http://ns-pandora.com/DesktopModules/dnnWerk.RadEditorProvider/DialogHandler.aspx
[Thu Jul 30 14:17:36.727062 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/common, referer: http://ns-pandora.com/common/admin/Jobs2/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.763322 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/Telerik.Web.UI.DialogHandler.aspx, referer: http://ns-pandora.com/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.804985 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/Components, referer: http://ns-pandora.com/Components/General/Admin/UserControl/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:36.851966 2026] [access_compat:error] [pid 3464626:tid 3464626] [client 64.89.162.203:49975] AH01797: client denied by server configuration: /home/nspandor/public_html/_controls, referer: http://ns-pandora.com/_controls/responsive/Telerik.Web.UI.DialogHandler.aspx
[Thu Jul 30 14:17:37.022418 2026] [ssl:error] [pid 3464624:tid 3464624] (EAI 2)Name or service not known: [client 144.76.19.72:56834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:37.022457 2026] [ssl:error] [pid 3464624:tid 3464624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:38.904521 2026] [ssl:error] [pid 3468881:tid 3468881] (70014)End of file found: [client 216.73.216.199:62978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:39.613216 2026] [ssl:error] [pid 3461036:tid 3461036] (5)Input/output error: [client 216.73.216.199:57457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:40.077678 2026] [ssl:error] [pid 3468874:tid 3468874] (EAI 2)Name or service not known: [client 144.76.19.72:38290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:40.077717 2026] [ssl:error] [pid 3468874:tid 3468874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:40.134061 2026] [ssl:error] [pid 3464585:tid 3464585] (EAI 2)Name or service not known: [client 144.76.19.72:38302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:40.134111 2026] [ssl:error] [pid 3464585:tid 3464585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:40.516602 2026] [ssl:error] [pid 3468453:tid 3468453] (70014)End of file found: [client 216.73.216.199:18192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:43.192782 2026] [ssl:error] [pid 3467670:tid 3467670] (EAI 2)Name or service not known: [client 144.76.19.72:38316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:43.192817 2026] [ssl:error] [pid 3467670:tid 3467670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:43.249147 2026] [ssl:error] [pid 3468251:tid 3468251] (EAI 2)Name or service not known: [client 144.76.19.72:38324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:43.249178 2026] [ssl:error] [pid 3468251:tid 3468251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:44.314321 2026] [ssl:error] [pid 3430381:tid 3430381] (70014)End of file found: [client 216.73.216.199:18596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:44.738720 2026] [access_compat:error] [pid 3461325:tid 3461325] [client 91.92.241.196:7100] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:17:45.005616 2026] [access_compat:error] [pid 3468880:tid 3468880] [client 91.92.241.196:23320] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:17:45.614206 2026] [access_compat:error] [pid 3468721:tid 3468721] [client 103.59.153.118:62194] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:46.308740 2026] [ssl:error] [pid 3468875:tid 3468875] (EAI 2)Name or service not known: [client 144.76.19.72:38330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:46.308768 2026] [ssl:error] [pid 3468875:tid 3468875] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:46.362124 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:38342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:46.362157 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:48.678197 2026] [core:error] [pid 3464626:tid 3464626] (13)Permission denied: [client 216.73.216.199:18655] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/virtio_console/uevent
[Thu Jul 30 14:17:49.415462 2026] [ssl:error] [pid 3468453:tid 3468453] (EAI 2)Name or service not known: [client 144.76.19.72:38344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:49.415495 2026] [ssl:error] [pid 3468453:tid 3468453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:49.478491 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:38360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:49.478519 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:49.881279 2026] [ssl:error] [pid 3464626:tid 3464626] (70014)End of file found: [client 216.73.216.199:18655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:51.088910 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:37752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:51.394582 2026] [ssl:error] [pid 3459018:tid 3459018] (70014)End of file found: [client 216.73.216.199:24569] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:52.313727 2026] [access_compat:error] [pid 3468880:tid 3468880] [client 103.59.153.118:62477] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:52.533563 2026] [ssl:error] [pid 3467069:tid 3467069] (EAI 2)Name or service not known: [client 144.76.19.72:38410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:52.533590 2026] [ssl:error] [pid 3467069:tid 3467069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:52.590626 2026] [ssl:error] [pid 3459836:tid 3459836] (EAI 2)Name or service not known: [client 144.76.19.72:38416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:52.590654 2026] [ssl:error] [pid 3459836:tid 3459836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:52.823563 2026] [access_compat:error] [pid 3468721:tid 3468721] [client 45.158.164.139:57374] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:17:55.645409 2026] [ssl:error] [pid 3469048:tid 3469048] (EAI 2)Name or service not known: [client 144.76.19.72:38422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:55.645450 2026] [ssl:error] [pid 3469048:tid 3469048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:55.698792 2026] [ssl:error] [pid 3459071:tid 3459071] (EAI 2)Name or service not known: [client 144.76.19.72:38428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:55.698817 2026] [ssl:error] [pid 3459071:tid 3459071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:56.185734 2026] [security2:error] [pid 3468874:tid 3468874] [client 47.128.23.253:10930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amtPBJRuJaOzQyRTlkzyzAAAACw"]
[Thu Jul 30 14:17:56.331668 2026] [access_compat:error] [pid 3424697:tid 3424697] [client 103.59.153.118:62665] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:17:57.206901 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFQAAAB8"]
[Thu Jul 30 14:17:57.207136 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFQAAAB8"]
[Thu Jul 30 14:17:57.207385 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFQAAAB8"]
[Thu Jul 30 14:17:57.222845 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/api/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFgAAAB8"]
[Thu Jul 30 14:17:57.222993 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/api/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFgAAAB8"]
[Thu Jul 30 14:17:57.223186 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/api/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFgAAAB8"]
[Thu Jul 30 14:17:57.238663 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/backend/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFwAAAB8"]
[Thu Jul 30 14:17:57.238820 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/backend/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFwAAAB8"]
[Thu Jul 30 14:17:57.239000 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/backend/.env"] [unique_id "amtPBWBEcLrob7hhvxWkFwAAAB8"]
[Thu Jul 30 14:17:57.270804 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/admin/.env"] [unique_id "amtPBWBEcLrob7hhvxWkGQAAAB8"]
[Thu Jul 30 14:17:57.270939 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/admin/.env"] [unique_id "amtPBWBEcLrob7hhvxWkGQAAAB8"]
[Thu Jul 30 14:17:57.271118 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/admin/.env"] [unique_id "amtPBWBEcLrob7hhvxWkGQAAAB8"]
[Thu Jul 30 14:17:57.302340 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/laravel/.env"] [unique_id "amtPBWBEcLrob7hhvxWkGwAAAB8"]
[Thu Jul 30 14:17:57.302483 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/laravel/.env"] [unique_id "amtPBWBEcLrob7hhvxWkGwAAAB8"]
[Thu Jul 30 14:17:57.302665 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/laravel/.env"] [unique_id "amtPBWBEcLrob7hhvxWkGwAAAB8"]
[Thu Jul 30 14:17:57.318101 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/core/.env"] [unique_id "amtPBWBEcLrob7hhvxWkHAAAAB8"]
[Thu Jul 30 14:17:57.318245 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/core/.env"] [unique_id "amtPBWBEcLrob7hhvxWkHAAAAB8"]
[Thu Jul 30 14:17:57.318423 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/core/.env"] [unique_id "amtPBWBEcLrob7hhvxWkHAAAAB8"]
[Thu Jul 30 14:17:57.350683 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/.env.example"] [unique_id "amtPBWBEcLrob7hhvxWkHgAAAB8"]
[Thu Jul 30 14:17:57.350832 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/.env.example"] [unique_id "amtPBWBEcLrob7hhvxWkHgAAAB8"]
[Thu Jul 30 14:17:57.351025 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/.env.example"] [unique_id "amtPBWBEcLrob7hhvxWkHgAAAB8"]
[Thu Jul 30 14:17:57.366686 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/app/.env"] [unique_id "amtPBWBEcLrob7hhvxWkHwAAAB8"]
[Thu Jul 30 14:17:57.366847 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/app/.env"] [unique_id "amtPBWBEcLrob7hhvxWkHwAAAB8"]
[Thu Jul 30 14:17:57.367034 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/app/.env"] [unique_id "amtPBWBEcLrob7hhvxWkHwAAAB8"]
[Thu Jul 30 14:17:57.382811 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/dev/.env"] [unique_id "amtPBWBEcLrob7hhvxWkIAAAAB8"]
[Thu Jul 30 14:17:57.382972 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/dev/.env"] [unique_id "amtPBWBEcLrob7hhvxWkIAAAAB8"]
[Thu Jul 30 14:17:57.383180 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/dev/.env"] [unique_id "amtPBWBEcLrob7hhvxWkIAAAAB8"]
[Thu Jul 30 14:17:57.433748 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/server/.env"] [unique_id "amtPBWBEcLrob7hhvxWkIgAAAB8"]
[Thu Jul 30 14:17:57.433919 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/server/.env"] [unique_id "amtPBWBEcLrob7hhvxWkIgAAAB8"]
[Thu Jul 30 14:17:57.434130 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/server/.env"] [unique_id "amtPBWBEcLrob7hhvxWkIgAAAB8"]
[Thu Jul 30 14:17:57.449840 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/.env.save"] [unique_id "amtPBWBEcLrob7hhvxWkIwAAAB8"]
[Thu Jul 30 14:17:57.450025 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/.env.save"] [unique_id "amtPBWBEcLrob7hhvxWkIwAAAB8"]
[Thu Jul 30 14:17:57.450243 2026] [security2:error] [pid 3444590:tid 3444590] [client 185.93.89.167:21551] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/.env.save"] [unique_id "amtPBWBEcLrob7hhvxWkIwAAAB8"]
[Thu Jul 30 14:17:57.762521 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM4gAAADI"]
[Thu Jul 30 14:17:57.762708 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM4gAAADI"]
[Thu Jul 30 14:17:57.762851 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM4gAAADI"]
[Thu Jul 30 14:17:57.781877 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/api/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM4wAAADI"]
[Thu Jul 30 14:17:57.782088 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/api/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM4wAAADI"]
[Thu Jul 30 14:17:57.782247 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM4wAAADI"]
[Thu Jul 30 14:17:57.801172 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/backend/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM5AAAADI"]
[Thu Jul 30 14:17:57.801364 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/backend/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM5AAAADI"]
[Thu Jul 30 14:17:57.801535 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM5AAAADI"]
[Thu Jul 30 14:17:57.839844 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/admin/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM5gAAADI"]
[Thu Jul 30 14:17:57.840000 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/admin/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM5gAAADI"]
[Thu Jul 30 14:17:57.840147 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM5gAAADI"]
[Thu Jul 30 14:17:57.878314 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/laravel/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM6AAAADI"]
[Thu Jul 30 14:17:57.878498 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/laravel/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM6AAAADI"]
[Thu Jul 30 14:17:57.878645 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM6AAAADI"]
[Thu Jul 30 14:17:57.897482 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/core/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM6QAAADI"]
[Thu Jul 30 14:17:57.897655 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/core/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM6QAAADI"]
[Thu Jul 30 14:17:57.897807 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM6QAAADI"]
[Thu Jul 30 14:17:57.935882 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/.env.example"] [unique_id "amtPBUv-LTrtyBcE2VOM6wAAADI"]
[Thu Jul 30 14:17:57.936060 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/.env.example"] [unique_id "amtPBUv-LTrtyBcE2VOM6wAAADI"]
[Thu Jul 30 14:17:57.936223 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM6wAAADI"]
[Thu Jul 30 14:17:57.955237 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/app/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM7AAAADI"]
[Thu Jul 30 14:17:57.955425 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/app/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM7AAAADI"]
[Thu Jul 30 14:17:57.955594 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM7AAAADI"]
[Thu Jul 30 14:17:57.981412 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/dev/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM7QAAADI"]
[Thu Jul 30 14:17:57.981635 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/dev/.env"] [unique_id "amtPBUv-LTrtyBcE2VOM7QAAADI"]
[Thu Jul 30 14:17:57.981795 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBUv-LTrtyBcE2VOM7QAAADI"]
[Thu Jul 30 14:17:58.020384 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/server/.env"] [unique_id "amtPBkv-LTrtyBcE2VOM7wAAADI"]
[Thu Jul 30 14:17:58.020563 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/server/.env"] [unique_id "amtPBkv-LTrtyBcE2VOM7wAAADI"]
[Thu Jul 30 14:17:58.020704 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBkv-LTrtyBcE2VOM7wAAADI"]
[Thu Jul 30 14:17:58.039548 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/.env.save"] [unique_id "amtPBkv-LTrtyBcE2VOM8AAAADI"]
[Thu Jul 30 14:17:58.039711 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/.env.save"] [unique_id "amtPBkv-LTrtyBcE2VOM8AAAADI"]
[Thu Jul 30 14:17:58.039846 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBkv-LTrtyBcE2VOM8AAAADI"]
[Thu Jul 30 14:17:58.077610 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "webstersltd.com"] [uri "/staging/.env"] [unique_id "amtPBkv-LTrtyBcE2VOM8gAAADI"]
[Thu Jul 30 14:17:58.077753 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webstersltd.com"] [uri "/staging/.env"] [unique_id "amtPBkv-LTrtyBcE2VOM8gAAADI"]
[Thu Jul 30 14:17:58.077883 2026] [security2:error] [pid 3468878:tid 3468878] [client 185.93.89.167:25857] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "webstersltd.com"] [uri "/403.shtml"] [unique_id "amtPBkv-LTrtyBcE2VOM8gAAADI"]
[Thu Jul 30 14:17:58.655718 2026] [ssl:error] [pid 3464625:tid 3464625] (70014)End of file found: [client 216.73.216.199:42919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:17:58.756324 2026] [ssl:error] [pid 3469048:tid 3469048] (EAI 2)Name or service not known: [client 144.76.19.72:38436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:58.756347 2026] [ssl:error] [pid 3469048:tid 3469048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:58.812728 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:38442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:17:58.812756 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:17:59.564763 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:1507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:00.764812 2026] [ssl:error] [pid 3469957:tid 3469957] (70014)End of file found: [client 216.73.216.199:39442] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:01.784899 2026] [core:error] [pid 3458178:tid 3458178] [client 216.73.216.199:4495] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/usr/lib/python3.6/site-packages/setuptools/%s)
[Thu Jul 30 14:18:01.866491 2026] [ssl:error] [pid 3458135:tid 3458135] (EAI 2)Name or service not known: [client 144.76.19.72:43428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:01.866522 2026] [ssl:error] [pid 3458135:tid 3458135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:01.919412 2026] [ssl:error] [pid 3461400:tid 3461400] (EAI 2)Name or service not known: [client 144.76.19.72:43438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:01.919450 2026] [ssl:error] [pid 3461400:tid 3461400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:02.300935 2026] [ssl:error] [pid 3469048:tid 3469048] (70014)End of file found: [client 216.73.216.199:37847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:02.581234 2026] [ssl:error] [pid 3465577:tid 3465577] (70014)End of file found: [client 216.73.216.199:4590] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:02.930399 2026] [access_compat:error] [pid 3468877:tid 3468877] [client 103.59.153.118:62944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:03.297347 2026] [ssl:error] [pid 3468880:tid 3468880] (70014)End of file found: [client 216.73.216.199:4787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:03.681835 2026] [proxy_http:error] [pid 3458180:tid 3458180] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:57288] AH01110: error reading response
[Thu Jul 30 14:18:03.777957 2026] [proxy_http:error] [pid 3424697:tid 3424697] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:53999] AH01110: error reading response
[Thu Jul 30 14:18:04.975951 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:43450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:04.975977 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:05.030319 2026] [ssl:error] [pid 3468251:tid 3468251] (EAI 2)Name or service not known: [client 144.76.19.72:43454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:05.030346 2026] [ssl:error] [pid 3468251:tid 3468251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:05.305427 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:18:05.305476 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:18:06.500280 2026] [security2:error] [pid 3468877:tid 3468877] [client 94.154.43.229:45014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "shelterprojects.org"] [uri "/.env"] [unique_id "amtPDre4TtlyOY16ljNSlQAAADA"]
[Thu Jul 30 14:18:06.500498 2026] [security2:error] [pid 3468877:tid 3468877] [client 94.154.43.229:45014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shelterprojects.org"] [uri "/.env"] [unique_id "amtPDre4TtlyOY16ljNSlQAAADA"]
[Thu Jul 30 14:18:06.500704 2026] [security2:error] [pid 3468877:tid 3468877] [client 94.154.43.229:45014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "shelterprojects.org"] [uri "/.env"] [unique_id "amtPDre4TtlyOY16ljNSlQAAADA"]
[Thu Jul 30 14:18:07.018273 2026] [access_compat:error] [pid 3467764:tid 3467764] [client 103.59.153.118:63133] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:07.305316 2026] [security2:error] [pid 3469957:tid 3469957] [client 94.154.43.184:30350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtPD2xc6hIkXuhho-rZVgAAAAU"]
[Thu Jul 30 14:18:07.305516 2026] [security2:error] [pid 3469957:tid 3469957] [client 94.154.43.184:30350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtPD2xc6hIkXuhho-rZVgAAAAU"]
[Thu Jul 30 14:18:07.305760 2026] [security2:error] [pid 3469957:tid 3469957] [client 94.154.43.184:30350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtPD2xc6hIkXuhho-rZVgAAAAU"]
[Thu Jul 30 14:18:07.728775 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:1772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:08.036923 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:28996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:08.083110 2026] [ssl:error] [pid 3469957:tid 3469957] (EAI 2)Name or service not known: [client 144.76.19.72:43464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:08.083154 2026] [ssl:error] [pid 3469957:tid 3469957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:08.134498 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:43476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:08.134521 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:08.426804 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:18:08.426841 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:18:08.667868 2026] [ssl:error] [pid 3458180:tid 3458180] (70014)End of file found: [client 216.73.216.199:13946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:10.247577 2026] [security2:error] [pid 3468251:tid 3468251] [client 170.81.144.196:50170] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPEkvgmL4R49zm5-6WfAAAAB0"]
[Thu Jul 30 14:18:10.247629 2026] [security2:error] [pid 3468251:tid 3468251] [client 170.81.144.196:50170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPEkvgmL4R49zm5-6WfAAAAB0"]
[Thu Jul 30 14:18:10.247899 2026] [security2:error] [pid 3468251:tid 3468251] [client 170.81.144.196:50170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPEkvgmL4R49zm5-6WfAAAAB0"]
[Thu Jul 30 14:18:11.034667 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:18:11.034704 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:18:11.193638 2026] [ssl:error] [pid 3424697:tid 3424697] (EAI 2)Name or service not known: [client 144.76.19.72:35802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:11.193684 2026] [ssl:error] [pid 3424697:tid 3424697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:11.248032 2026] [ssl:error] [pid 3461400:tid 3461400] (EAI 2)Name or service not known: [client 144.76.19.72:35806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:11.248061 2026] [ssl:error] [pid 3461400:tid 3461400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:13.173760 2026] [ssl:error] [pid 3428159:tid 3428159] (70014)End of file found: [client 216.73.216.199:49526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:13.462457 2026] [ssl:error] [pid 3427797:tid 3427797] (70014)End of file found: [client 216.73.216.199:31074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:13.769327 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:18:13.769362 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:18:14.305534 2026] [ssl:error] [pid 3461324:tid 3461324] (EAI 2)Name or service not known: [client 144.76.19.72:35822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:14.305566 2026] [ssl:error] [pid 3461324:tid 3461324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:14.306932 2026] [security2:error] [pid 3465575:tid 3465575] [client 43.133.209.112:23371] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPFi1M89P2MRc14KXDOQAAABc"]
[Thu Jul 30 14:18:14.306975 2026] [security2:error] [pid 3465575:tid 3465575] [client 43.133.209.112:23371] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPFi1M89P2MRc14KXDOQAAABc"]
[Thu Jul 30 14:18:14.307257 2026] [security2:error] [pid 3465575:tid 3465575] [client 43.133.209.112:23371] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPFi1M89P2MRc14KXDOQAAABc"]
[Thu Jul 30 14:18:14.362909 2026] [ssl:error] [pid 3468875:tid 3468875] (EAI 2)Name or service not known: [client 144.76.19.72:35824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:14.362933 2026] [ssl:error] [pid 3468875:tid 3468875] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:14.479101 2026] [core:error] [pid 3467764:tid 3467764] (13)Permission denied: [client 216.73.216.199:46200] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_da_state/objects_partial
[Thu Jul 30 14:18:15.081400 2026] [ssl:error] [pid 3467764:tid 3467764] (70014)End of file found: [client 216.73.216.199:46200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:17.351650 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:18:17.351686 2026] [lsapi:warn] [pid 3468250:tid 3468250] [client 89.149.193.149:41674] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:18:17.452246 2026] [ssl:error] [pid 3468875:tid 3468875] (EAI 2)Name or service not known: [client 144.76.19.72:35836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:17.452287 2026] [ssl:error] [pid 3468875:tid 3468875] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:17.546844 2026] [ssl:error] [pid 3461324:tid 3461324] (EAI 2)Name or service not known: [client 144.76.19.72:35844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:17.546872 2026] [ssl:error] [pid 3461324:tid 3461324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:17.814740 2026] [access_compat:error] [pid 3468878:tid 3468878] [client 103.59.153.118:63607] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:18.694690 2026] [ssl:error] [pid 3468880:tid 3468880] (70014)End of file found: [client 216.73.216.199:55259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:18.695308 2026] [security2:error] [pid 3461400:tid 3461400] [client 43.133.209.112:30297] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPGtrXZQM_sqxXfZwL7QAAADs"]
[Thu Jul 30 14:18:18.695349 2026] [security2:error] [pid 3461400:tid 3461400] [client 43.133.209.112:30297] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPGtrXZQM_sqxXfZwL7QAAADs"]
[Thu Jul 30 14:18:18.695589 2026] [security2:error] [pid 3461400:tid 3461400] [client 43.133.209.112:30297] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPGtrXZQM_sqxXfZwL7QAAADs"]
[Thu Jul 30 14:18:19.226330 2026] [ssl:error] [pid 3458135:tid 3458135] (70014)End of file found: [client 216.73.216.199:47520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:20.416190 2026] [ssl:error] [pid 3468876:tid 3468876] (70014)End of file found: [client 216.73.216.199:10323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:20.603880 2026] [ssl:error] [pid 3465577:tid 3465577] (EAI 2)Name or service not known: [client 144.76.19.72:28380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:20.603912 2026] [ssl:error] [pid 3465577:tid 3465577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:20.654954 2026] [ssl:error] [pid 3461324:tid 3461324] (EAI 2)Name or service not known: [client 144.76.19.72:28396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:20.654988 2026] [ssl:error] [pid 3461324:tid 3461324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:23.614839 2026] [authz_core:error] [pid 3424697:tid 3424697] [client 169.58.39.192:55240] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 14:18:23.710489 2026] [ssl:error] [pid 3460614:tid 3460614] (EAI 2)Name or service not known: [client 144.76.19.72:28400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:23.710519 2026] [ssl:error] [pid 3460614:tid 3460614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:23.765344 2026] [ssl:error] [pid 3468250:tid 3468250] (EAI 2)Name or service not known: [client 144.76.19.72:28402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:23.765379 2026] [ssl:error] [pid 3468250:tid 3468250] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:24.493252 2026] [access_compat:error] [pid 3467764:tid 3467764] [client 103.59.153.118:63890] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:25.043338 2026] [ssl:error] [pid 3468453:tid 3468453] (70014)End of file found: [client 216.73.216.199:18014] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:25.081482 2026] [authz_core:error] [pid 3465577:tid 3465577] [client 65.109.124.116:38145] AH01630: client denied by server configuration: /home/winterb/public_html/nortonnews/error_log
[Thu Jul 30 14:18:25.538176 2026] [ssl:error] [pid 3427797:tid 3427797] (70014)End of file found: [client 216.73.216.199:11454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:25.832838 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:17624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:26.123765 2026] [authz_core:error] [pid 3461038:tid 3461038] [client 169.58.39.192:56311] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 14:18:26.819390 2026] [ssl:error] [pid 3460614:tid 3460614] (EAI 2)Name or service not known: [client 144.76.19.72:28412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:26.819420 2026] [ssl:error] [pid 3460614:tid 3460614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:26.878559 2026] [ssl:error] [pid 3465575:tid 3465575] (EAI 2)Name or service not known: [client 144.76.19.72:28426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:26.878592 2026] [ssl:error] [pid 3465575:tid 3465575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:28.365985 2026] [access_compat:error] [pid 3465575:tid 3465575] [client 103.59.153.118:64074] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:29.934089 2026] [ssl:error] [pid 3441516:tid 3441516] (EAI 2)Name or service not known: [client 144.76.19.72:57944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:29.934139 2026] [ssl:error] [pid 3441516:tid 3441516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:29.988956 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:57946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:29.988988 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:30.913367 2026] [access_compat:error] [pid 3468877:tid 3468877] [client 45.158.164.139:43248] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:18:31.509717 2026] [ssl:error] [pid 3464626:tid 3464626] (70014)End of file found: [client 216.73.216.199:22210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:31.556032 2026] [security2:error] [pid 3427797:tid 3427797] [client 185.191.171.8:34318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/lego-dc-super-villains-star-labs-red-brick"] [unique_id "amtPJ9gFkRgyA50rwMCtiwAAAB4"]
[Thu Jul 30 14:18:31.811013 2026] [ssl:error] [pid 3460945:tid 3460945] (70014)End of file found: [client 216.73.216.199:47403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:32.727086 2026] [core:error] [pid 3468876:tid 3468876] (13)Permission denied: [client 216.73.216.199:58678] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory258/node0/compact
[Thu Jul 30 14:18:33.027822 2026] [ssl:error] [pid 3468876:tid 3468876] (70014)End of file found: [client 216.73.216.199:58678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:33.045270 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:57958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:33.045296 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:33.098333 2026] [ssl:error] [pid 3441515:tid 3441515] (EAI 2)Name or service not known: [client 144.76.19.72:57966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:33.098362 2026] [ssl:error] [pid 3441515:tid 3441515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:34.989783 2026] [access_compat:error] [pid 3458135:tid 3458135] [client 103.59.153.118:64354] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:35.242294 2026] [authz_core:error] [pid 3465575:tid 3465575] [client 66.249.66.33:43065] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:18:35.244980 2026] [authz_core:error] [pid 3465575:tid 3465575] [client 66.249.66.33:43065] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:18:36.857327 2026] [core:error] [pid 3459018:tid 3459018] (13)Permission denied: [client 216.73.216.199:10685] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu1/subsystem/drivers_probe
[Thu Jul 30 14:18:36.934811 2026] [ssl:error] [pid 3471213:tid 3471213] (EAI 2)Name or service not known: [client 144.76.19.72:57970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:36.934842 2026] [ssl:error] [pid 3471213:tid 3471213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:36.997800 2026] [ssl:error] [pid 3441516:tid 3441516] (EAI 2)Name or service not known: [client 144.76.19.72:57986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:36.997826 2026] [ssl:error] [pid 3441516:tid 3441516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:37.131650 2026] [access_compat:error] [pid 3458180:tid 3458180] [client 43.163.112.239:34302] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:18:37.869665 2026] [ssl:error] [pid 3459018:tid 3459018] (70014)End of file found: [client 216.73.216.199:10685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:37.983115 2026] [security2:error] [pid 3468880:tid 3468880] [client 51.68.111.204:22689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "wurlitzer.co.uk"] [uri "/robots.txt"] [unique_id "amtPLdEYE2ybDlFEVMhS6wAAADc"]
[Thu Jul 30 14:18:38.432772 2026] [security2:error] [pid 3468876:tid 3468876] [client 51.68.111.204:26795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/robots.txt"] [unique_id "amtPLoKPtME2RCqpMpw1twAAAC8"]
[Thu Jul 30 14:18:38.823816 2026] [cgi:error] [pid 3471164:tid 3471164] [client 20.9.63.139:3840] AH02812: stderr from /home/davidebell/public_html/bashforthbell.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:18:39.234624 2026] [access_compat:error] [pid 3460945:tid 3460945] [client 103.59.153.118:64551] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:40.052184 2026] [ssl:error] [pid 3469957:tid 3469957] (EAI 2)Name or service not known: [client 144.76.19.72:24894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:40.052215 2026] [ssl:error] [pid 3469957:tid 3469957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:40.106958 2026] [ssl:error] [pid 3460614:tid 3460614] (EAI 2)Name or service not known: [client 144.76.19.72:24908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:40.106988 2026] [ssl:error] [pid 3460614:tid 3460614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:40.879595 2026] [core:error] [pid 3468453:tid 3468453] (13)Permission denied: [client 216.73.216.199:7317] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory217/node0/compact
[Thu Jul 30 14:18:41.120591 2026] [authz_core:error] [pid 3471164:tid 3471164] [client 20.9.63.139:3840] AH01630: client denied by server configuration: /home/davidebell/public_html/bashforthbell.co.uk/php.ini
[Thu Jul 30 14:18:41.783481 2026] [ssl:error] [pid 3468453:tid 3468453] (70014)End of file found: [client 216.73.216.199:7317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:42.088761 2026] [core:error] [pid 3424697:tid 3424697] (13)Permission denied: [client 216.73.216.199:21734] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory140/node0/compact
[Thu Jul 30 14:18:42.389355 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:21734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:43.158791 2026] [ssl:error] [pid 3468876:tid 3468876] (EAI 2)Name or service not known: [client 144.76.19.72:24910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:43.158837 2026] [ssl:error] [pid 3468876:tid 3468876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:43.162404 2026] [authz_core:error] [pid 3471213:tid 3471213] [client 66.249.66.33:39299] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:18:43.165045 2026] [authz_core:error] [pid 3471213:tid 3471213] [client 66.249.66.33:39299] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:18:43.214831 2026] [ssl:error] [pid 3441516:tid 3441516] (EAI 2)Name or service not known: [client 144.76.19.72:24922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:43.214855 2026] [ssl:error] [pid 3441516:tid 3441516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:43.893522 2026] [core:error] [pid 3445216:tid 3445216] (13)Permission denied: [client 216.73.216.199:1482] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory102/node0/compact
[Thu Jul 30 14:18:44.498273 2026] [core:error] [pid 3445216:tid 3445216] (13)Permission denied: [client 216.73.216.199:1482] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory200/node0/compact
[Thu Jul 30 14:18:46.272305 2026] [ssl:error] [pid 3468878:tid 3468878] (EAI 2)Name or service not known: [client 144.76.19.72:24926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:46.272337 2026] [ssl:error] [pid 3468878:tid 3468878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:46.316008 2026] [core:error] [pid 3445216:tid 3445216] (13)Permission denied: [client 216.73.216.199:1482] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory16/node0/compact
[Thu Jul 30 14:18:46.330018 2026] [ssl:error] [pid 3468875:tid 3468875] (EAI 2)Name or service not known: [client 144.76.19.72:24936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:46.330044 2026] [ssl:error] [pid 3468875:tid 3468875] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:46.917903 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:1482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:47.967504 2026] [security2:error] [pid 3427749:tid 3427749] [client 185.125.27.60:39958] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "dawnrobinson.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtPNwLkdOLf0ztkvZx-1wAAABg"]
[Thu Jul 30 14:18:49.386754 2026] [ssl:error] [pid 3424697:tid 3424697] (EAI 2)Name or service not known: [client 144.76.19.72:24952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:49.386781 2026] [ssl:error] [pid 3424697:tid 3424697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:49.419232 2026] [cgi:error] [pid 3465575:tid 3465575] [client 216.73.216.199:54099] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/scripts/safetybits.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:18:49.419287 2026] [cgi:error] [pid 3465575:tid 3465575] [client 216.73.216.199:54099] End of script output before headers: safetybits.pl
[Thu Jul 30 14:18:49.438083 2026] [ssl:error] [pid 3468875:tid 3468875] (EAI 2)Name or service not known: [client 144.76.19.72:24954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:49.438105 2026] [ssl:error] [pid 3468875:tid 3468875] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:49.628713 2026] [core:error] [pid 3461324:tid 3461324] (13)Permission denied: [client 216.73.216.199:62179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory164/node0/compact
[Thu Jul 30 14:18:49.896170 2026] [access_compat:error] [pid 3441516:tid 3441516] [client 103.59.153.118:65015] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:50.231566 2026] [core:error] [pid 3461324:tid 3461324] (13)Permission denied: [client 216.73.216.199:62179] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/alloc_calls
[Thu Jul 30 14:18:51.736029 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:62179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:52.224705 2026] [core:error] [pid 3471668:tid 3471668] (13)Permission denied: [client 216.73.216.199:23548] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libnvdimm/sections/__bug_table
[Thu Jul 30 14:18:52.496587 2026] [ssl:error] [pid 3465575:tid 3465575] (EAI 2)Name or service not known: [client 144.76.19.72:53032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:52.496617 2026] [ssl:error] [pid 3465575:tid 3465575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:52.549651 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:53048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:52.549684 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:54.451141 2026] [ssl:error] [pid 3471214:tid 3471214] (70014)End of file found: [client 216.73.216.199:64991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:55.133344 2026] [security2:error] [pid 3468251:tid 3468251] [client 47.254.47.156:38810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "londonkinesiology.com"] [uri "/"] [unique_id "amtPP0vgmL4R49zm5-6WigAAAB0"]
[Thu Jul 30 14:18:55.623883 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:53062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:55.623916 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:55.676925 2026] [ssl:error] [pid 3468878:tid 3468878] (EAI 2)Name or service not known: [client 144.76.19.72:53064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:55.676947 2026] [ssl:error] [pid 3468878:tid 3468878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:55.957181 2026] [core:error] [pid 3471940:tid 3471940] (13)Permission denied: [client 216.73.216.199:26192] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/total_objects
[Thu Jul 30 14:18:56.289616 2026] [security2:error] [pid 3468453:tid 3468453] [client 114.119.157.183:23605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,19/request_format~html"] [unique_id "amtPQIwfn7rYZBp6TcEbkQAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14/request_format~html
[Thu Jul 30 14:18:56.548652 2026] [access_compat:error] [pid 3441515:tid 3441515] [client 103.59.153.118:65294] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:18:57.048099 2026] [access_compat:error] [pid 3459018:tid 3459018] [client 45.158.164.139:40766] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:18:57.666498 2026] [security2:error] [pid 3468880:tid 3468880] [client 47.254.47.156:51142] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtPQdEYE2ybDlFEVMhS8wAAADc"], referer: http://londonkinesiology.com
[Thu Jul 30 14:18:57.668412 2026] [authz_core:error] [pid 3468880:tid 3468880] [client 47.254.47.156:51142] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://londonkinesiology.com
[Thu Jul 30 14:18:57.671076 2026] [authz_core:error] [pid 3468880:tid 3468880] [client 47.254.47.156:51142] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://londonkinesiology.com
[Thu Jul 30 14:18:57.743264 2026] [security2:error] [pid 3461324:tid 3461324] [client 114.119.157.183:23621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,19/request_format~html"] [unique_id "amtPQTFuH2zLMh8ZU0L_6gAAADU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14/request_format~html
[Thu Jul 30 14:18:58.729214 2026] [ssl:error] [pid 3465576:tid 3465576] (EAI 2)Name or service not known: [client 144.76.19.72:53078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:58.729246 2026] [ssl:error] [pid 3465576:tid 3465576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:58.784710 2026] [ssl:error] [pid 3445208:tid 3445208] (EAI 2)Name or service not known: [client 144.76.19.72:53082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:18:58.784735 2026] [ssl:error] [pid 3445208:tid 3445208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:18:59.471627 2026] [ssl:error] [pid 3460945:tid 3460945] (70014)End of file found: [client 216.73.216.199:58387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:18:59.661025 2026] [ssl:error] [pid 3471940:tid 3471940] (70014)End of file found: [client 216.73.216.199:26192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:00.475027 2026] [ssl:error] [pid 3427797:tid 3427797] (70014)End of file found: [client 216.73.216.199:51755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:00.585601 2026] [access_compat:error] [pid 3471669:tid 3471669] [client 103.59.153.118:65477] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:01.839225 2026] [ssl:error] [pid 3465577:tid 3465577] (EAI 2)Name or service not known: [client 144.76.19.72:25926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:01.839253 2026] [ssl:error] [pid 3465577:tid 3465577] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:01.892215 2026] [ssl:error] [pid 3444591:tid 3444591] (EAI 2)Name or service not known: [client 144.76.19.72:25936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:01.892247 2026] [ssl:error] [pid 3444591:tid 3444591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:04.874354 2026] [security2:error] [pid 3468875:tid 3468875] [client 74.7.227.147:43446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "devwebsitehub.com"] [uri "/"] [unique_id "amtPSA-w8CispUmm-waI9wAAAC4"], referer: https://www.pudhe.com
[Thu Jul 30 14:19:04.947265 2026] [ssl:error] [pid 3461400:tid 3461400] (EAI 2)Name or service not known: [client 144.76.19.72:25940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:04.947290 2026] [ssl:error] [pid 3461400:tid 3461400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:05.000433 2026] [ssl:error] [pid 3441516:tid 3441516] (EAI 2)Name or service not known: [client 144.76.19.72:25944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:05.000463 2026] [ssl:error] [pid 3441516:tid 3441516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:06.053364 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:62689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:06.685167 2026] [security2:error] [pid 3467069:tid 3467069] [client 47.128.126.5:19722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dawnrobinson.co.uk"] [uri "/robots.txt"] [unique_id "amtPSsibnnNgmnEA4iO4DQAAAAA"]
[Thu Jul 30 14:19:07.237259 2026] [access_compat:error] [pid 3468880:tid 3468880] [client 103.59.153.118:49376] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:07.571389 2026] [ssl:error] [pid 3469957:tid 3469957] (70014)End of file found: [client 216.73.216.199:15775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:08.044385 2026] [security2:error] [pid 3468453:tid 3468453] [client 43.157.153.236:47124] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.elhassanartist.com"] [uri "/"] [unique_id "amtPTIwfn7rYZBp6TcEblQAAACE"]
[Thu Jul 30 14:19:08.055206 2026] [ssl:error] [pid 3468876:tid 3468876] (EAI 2)Name or service not known: [client 144.76.19.72:25960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:08.055229 2026] [ssl:error] [pid 3468876:tid 3468876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:08.106800 2026] [ssl:error] [pid 3471940:tid 3471940] (EAI 2)Name or service not known: [client 144.76.19.72:25968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:08.106831 2026] [ssl:error] [pid 3471940:tid 3471940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:09.256543 2026] [security2:error] [pid 3471214:tid 3471214] [client 47.77.237.169:40503] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPTRuA4wCjtP1XuEstJwAAAAg"]
[Thu Jul 30 14:19:09.256602 2026] [security2:error] [pid 3471214:tid 3471214] [client 47.77.237.169:40503] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPTRuA4wCjtP1XuEstJwAAAAg"]
[Thu Jul 30 14:19:09.256852 2026] [security2:error] [pid 3471214:tid 3471214] [client 47.77.237.169:40503] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPTRuA4wCjtP1XuEstJwAAAAg"]
[Thu Jul 30 14:19:09.593264 2026] [security2:error] [pid 3441516:tid 3441516] [client 43.157.153.236:48220] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "elhassanartist.com"] [uri "/"] [unique_id "amtPTZ9t377jcqNJQpJENwAAABM"], referer: http://www.elhassanartist.com
[Thu Jul 30 14:19:11.162656 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:22510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:11.162682 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:11.220915 2026] [ssl:error] [pid 3459113:tid 3459113] (EAI 2)Name or service not known: [client 144.76.19.72:22526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:11.220943 2026] [ssl:error] [pid 3459113:tid 3459113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:11.298937 2026] [access_compat:error] [pid 3468453:tid 3468453] [client 103.59.153.118:49560] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:11.642312 2026] [security2:error] [pid 3468878:tid 3468878] [client 167.56.220.6:59920] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPT0v-LTrtyBcE2VONBgAAADI"]
[Thu Jul 30 14:19:11.642360 2026] [security2:error] [pid 3468878:tid 3468878] [client 167.56.220.6:59920] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPT0v-LTrtyBcE2VONBgAAADI"]
[Thu Jul 30 14:19:11.642620 2026] [security2:error] [pid 3468878:tid 3468878] [client 167.56.220.6:59920] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPT0v-LTrtyBcE2VONBgAAADI"]
[Thu Jul 30 14:19:11.770873 2026] [ssl:error] [pid 3441516:tid 3441516] (70014)End of file found: [client 216.73.216.199:52925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:12.076915 2026] [ssl:error] [pid 3472867:tid 3472867] (70014)End of file found: [client 216.73.216.199:39732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:12.377841 2026] [ssl:error] [pid 3471668:tid 3471668] (70014)End of file found: [client 216.73.216.199:60598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:14.269105 2026] [security2:error] [pid 3459113:tid 3459113] [client 85.208.96.195:18838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amtPUvv9ioe2O_VbyM4zJAAAABw"]
[Thu Jul 30 14:19:14.277123 2026] [ssl:error] [pid 3461400:tid 3461400] (EAI 2)Name or service not known: [client 144.76.19.72:22542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:14.277150 2026] [ssl:error] [pid 3461400:tid 3461400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:14.333772 2026] [ssl:error] [pid 3473145:tid 3473145] (EAI 2)Name or service not known: [client 144.76.19.72:22558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:14.333809 2026] [ssl:error] [pid 3473145:tid 3473145] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:14.767494 2026] [security2:error] [pid 3461400:tid 3461400] [client 185.191.171.2:40976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/afternoon-tea"] [unique_id "amtPUtrXZQM_sqxXfZwMAgAAADs"]
[Thu Jul 30 14:19:14.839591 2026] [security2:error] [pid 3473145:tid 3473145] [client 98.83.8.142:30865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2019/05/a3-poster-2019-213x300.png"] [unique_id "amtPUnvipcyFXBJzurD0fwAAAA8"]
[Thu Jul 30 14:19:15.694430 2026] [security2:error] [pid 3471213:tid 3471213] [client 14.191.236.71:14266] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPU68TgIfS6E0gYITqqwAAAAI"]
[Thu Jul 30 14:19:15.694499 2026] [security2:error] [pid 3471213:tid 3471213] [client 14.191.236.71:14266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPU68TgIfS6E0gYITqqwAAAAI"]
[Thu Jul 30 14:19:15.694741 2026] [security2:error] [pid 3471213:tid 3471213] [client 14.191.236.71:14266] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPU68TgIfS6E0gYITqqwAAAAI"]
[Thu Jul 30 14:19:17.391732 2026] [ssl:error] [pid 3468876:tid 3468876] (EAI 2)Name or service not known: [client 144.76.19.72:22574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:17.391760 2026] [ssl:error] [pid 3468876:tid 3468876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:17.448743 2026] [ssl:error] [pid 3468453:tid 3468453] (EAI 2)Name or service not known: [client 144.76.19.72:22576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:17.448772 2026] [ssl:error] [pid 3468453:tid 3468453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:17.564191 2026] [security2:error] [pid 3427797:tid 3427797] [client 114.119.146.251:60025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hatch-works.com"] [uri "/robots.txt"] [unique_id "amtPVdgFkRgyA50rwMCt-wAAAB4"], referer: https://hatch-works.com/robots.txt
[Thu Jul 30 14:19:19.002089 2026] [ssl:error] [pid 3473145:tid 3473145] (70014)End of file found: [client 216.73.216.199:37636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:19.190968 2026] [security2:error] [pid 3471668:tid 3471668] [client 54.83.180.239:12066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2019/02/Dyp73TMXgAEguEU-300x220.jpg"] [unique_id "amtPV9Boka4qJzZIw24QZQAAAAk"]
[Thu Jul 30 14:19:19.277970 2026] [access_compat:error] [pid 3465577:tid 3465577] [client 51.120.79.193:16181] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 14:19:19.278018 2026] [access_compat:error] [pid 3465577:tid 3465577] [client 51.120.79.193:16181] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 14:19:19.280561 2026] [access_compat:error] [pid 3465577:tid 3465577] [client 51.120.79.193:16181] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 14:19:19.281596 2026] [access_compat:error] [pid 3465577:tid 3465577] [client 51.120.79.193:16181] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 14:19:19.932208 2026] [ssl:error] [pid 3427797:tid 3427797] (70014)End of file found: [client 216.73.216.199:11833] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:20.506869 2026] [ssl:error] [pid 3468453:tid 3468453] (EAI 2)Name or service not known: [client 144.76.19.72:64066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:20.506898 2026] [ssl:error] [pid 3468453:tid 3468453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:20.564168 2026] [ssl:error] [pid 3468876:tid 3468876] (EAI 2)Name or service not known: [client 144.76.19.72:64070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:20.564198 2026] [ssl:error] [pid 3468876:tid 3468876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:21.132764 2026] [ssl:error] [pid 3471213:tid 3471213] (70014)End of file found: [client 216.73.216.199:8266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:22.005529 2026] [access_compat:error] [pid 3467108:tid 3467108] [client 103.59.153.118:50040] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:23.468676 2026] [security2:error] [pid 3427749:tid 3427749] [client 54.84.147.79:33694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2024/09/6-Easedale-Tarn-400x400.jpg"] [unique_id "amtPWwLkdOLf0ztkvZx_RgAAABg"]
[Thu Jul 30 14:19:23.622052 2026] [ssl:error] [pid 3461324:tid 3461324] (EAI 2)Name or service not known: [client 144.76.19.72:64076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:23.622102 2026] [ssl:error] [pid 3461324:tid 3461324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:23.676242 2026] [ssl:error] [pid 3468875:tid 3468875] (EAI 2)Name or service not known: [client 144.76.19.72:64082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:23.676273 2026] [ssl:error] [pid 3468875:tid 3468875] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:26.252357 2026] [ssl:error] [pid 3461400:tid 3461400] (70014)End of file found: [client 216.73.216.199:13814] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:26.729988 2026] [ssl:error] [pid 3427749:tid 3427749] (EAI 2)Name or service not known: [client 144.76.19.72:64096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:26.730017 2026] [ssl:error] [pid 3427749:tid 3427749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:26.784572 2026] [ssl:error] [pid 3473145:tid 3473145] (EAI 2)Name or service not known: [client 144.76.19.72:64102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:26.784597 2026] [ssl:error] [pid 3473145:tid 3473145] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:27.459228 2026] [ssl:error] [pid 3468878:tid 3468878] (70014)End of file found: [client 216.73.216.199:59758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:27.764682 2026] [core:error] [pid 3445208:tid 3445208] (13)Permission denied: [client 216.73.216.199:12418] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS2/custom_divisor
[Thu Jul 30 14:19:28.567749 2026] [security2:error] [pid 3467108:tid 3467108] [client 52.71.218.25:16811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtPYElU3DTBqZJs5wX_WQAAAAY"]
[Thu Jul 30 14:19:28.681886 2026] [access_compat:error] [pid 3424697:tid 3424697] [client 103.59.153.118:50324] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:28.991111 2026] [ssl:error] [pid 3445208:tid 3445208] (70014)End of file found: [client 216.73.216.199:12418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:29.374949 2026] [authz_core:error] [pid 3465577:tid 3465577] [client 51.120.79.193:16181] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:19:29.682266 2026] [security2:error] [pid 3473144:tid 3473144] [client 94.154.43.184:36960] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.com"] [uri "/.env"] [unique_id "amtPYa7wHx_IjJ9qU4cAmwAAAAw"]
[Thu Jul 30 14:19:29.682473 2026] [security2:error] [pid 3473144:tid 3473144] [client 94.154.43.184:36960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/.env"] [unique_id "amtPYa7wHx_IjJ9qU4cAmwAAAAw"]
[Thu Jul 30 14:19:29.865416 2026] [ssl:error] [pid 3469957:tid 3469957] (EAI 2)Name or service not known: [client 144.76.19.72:61398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:29.865463 2026] [ssl:error] [pid 3469957:tid 3469957] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:29.918326 2026] [ssl:error] [pid 3473859:tid 3473859] (EAI 2)Name or service not known: [client 144.76.19.72:61404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:29.918351 2026] [ssl:error] [pid 3473859:tid 3473859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:30.385699 2026] [security2:error] [pid 3473144:tid 3473144] [client 94.154.43.184:36960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amtPYa7wHx_IjJ9qU4cAmwAAAAw"]
[Thu Jul 30 14:19:31.442325 2026] [security2:error] [pid 3474077:tid 3474077] [client 94.154.43.183:54212] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.spamp.spamp.co.uk"] [uri "/.env"] [unique_id "amtPY4FV1Eo0GHvc-nEUYAAAABU"]
[Thu Jul 30 14:19:31.442584 2026] [security2:error] [pid 3474077:tid 3474077] [client 94.154.43.183:54212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.spamp.spamp.co.uk"] [uri "/.env"] [unique_id "amtPY4FV1Eo0GHvc-nEUYAAAABU"]
[Thu Jul 30 14:19:31.508298 2026] [access_compat:error] [pid 3474034:tid 3474034] [client 45.158.164.139:37172] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:19:31.641776 2026] [security2:error] [pid 3474077:tid 3474077] [client 94.154.43.183:54212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.spamp.spamp.co.uk"] [uri "/index.php"] [unique_id "amtPY4FV1Eo0GHvc-nEUYAAAABU"]
[Thu Jul 30 14:19:31.731620 2026] [security2:error] [pid 3472867:tid 3472867] [client 34.225.243.131:54525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2019/02/Dyp73TMXgAEguEU-768x564.jpg"] [unique_id "amtPY5W0klGT3YvioUG8tQAAAAc"]
[Thu Jul 30 14:19:31.975008 2026] [security2:error] [pid 3427797:tid 3427797] [client 85.208.96.207:59912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/cough-medicine-safe-for-liver-disease"] [unique_id "amtPY9gFkRgyA50rwMCt_gAAAB4"]
[Thu Jul 30 14:19:32.596341 2026] [access_compat:error] [pid 3441516:tid 3441516] [client 103.59.153.118:50506] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:32.976405 2026] [ssl:error] [pid 3474034:tid 3474034] (EAI 2)Name or service not known: [client 144.76.19.72:61418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:32.976449 2026] [ssl:error] [pid 3474034:tid 3474034] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:33.035451 2026] [ssl:error] [pid 3468876:tid 3468876] (EAI 2)Name or service not known: [client 144.76.19.72:61424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:33.035478 2026] [ssl:error] [pid 3468876:tid 3468876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:33.512209 2026] [ssl:error] [pid 3461400:tid 3461400] (70014)End of file found: [client 216.73.216.199:45194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:33.822078 2026] [ssl:error] [pid 3474133:tid 3474133] (70014)End of file found: [client 216.73.216.199:14722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:37.294408 2026] [cgi:error] [pid 3445216:tid 3445216] [client 51.120.79.193:16225] AH02812: stderr from /home/shelterf/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:19:38.005760 2026] [authz_core:error] [pid 3445216:tid 3445216] [client 51.120.79.193:16225] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/l10n/error_log
[Thu Jul 30 14:19:38.039452 2026] [access_compat:error] [pid 3445216:tid 3445216] [client 51.120.79.193:16225] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-restore/
[Thu Jul 30 14:19:38.039495 2026] [access_compat:error] [pid 3445216:tid 3445216] [client 51.120.79.193:16225] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-temp/
[Thu Jul 30 14:19:38.042045 2026] [access_compat:error] [pid 3445216:tid 3445216] [client 51.120.79.193:16225] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup/
[Thu Jul 30 14:19:38.043081 2026] [access_compat:error] [pid 3445216:tid 3445216] [client 51.120.79.193:16225] AH01797: client denied by server configuration: /home/shelterf/public_html/wp-content/uploads/backwpup-706b5c-logs/
[Thu Jul 30 14:19:38.056573 2026] [ssl:error] [pid 3474034:tid 3474034] (70014)End of file found: [client 216.73.216.199:27956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:39.054997 2026] [security2:error] [pid 3474077:tid 3474077] [client 91.92.47.4:56838] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/wp-config.php"] [unique_id "amtPa4FV1Eo0GHvc-nEUZQAAABU"]
[Thu Jul 30 14:19:39.055212 2026] [security2:error] [pid 3474077:tid 3474077] [client 91.92.47.4:56838] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/wp-config.php"] [unique_id "amtPa4FV1Eo0GHvc-nEUZQAAABU"]
[Thu Jul 30 14:19:39.062025 2026] [security2:error] [pid 3474077:tid 3474077] [client 91.92.47.4:56838] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtPa4FV1Eo0GHvc-nEUZQAAABU"]
[Thu Jul 30 14:19:39.066907 2026] [security2:error] [pid 3468876:tid 3468876] [client 91.92.47.4:56194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/backend/.env"] [unique_id "amtPa4KPtME2RCqpMpw1xQAAAC8"]
[Thu Jul 30 14:19:39.067345 2026] [security2:error] [pid 3468876:tid 3468876] [client 91.92.47.4:56194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/backend/.env"] [unique_id "amtPa4KPtME2RCqpMpw1xQAAAC8"]
[Thu Jul 30 14:19:39.073913 2026] [security2:error] [pid 3468876:tid 3468876] [client 91.92.47.4:56194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtPa4KPtME2RCqpMpw1xQAAAC8"]
[Thu Jul 30 14:19:39.086299 2026] [security2:error] [pid 3445208:tid 3445208] [client 91.92.47.4:56216] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/core/.env"] [unique_id "amtPa-XeRZsZvmoKujDu4gAAADo"]
[Thu Jul 30 14:19:39.086441 2026] [security2:error] [pid 3445208:tid 3445208] [client 91.92.47.4:56216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/core/.env"] [unique_id "amtPa-XeRZsZvmoKujDu4gAAADo"]
[Thu Jul 30 14:19:39.088053 2026] [security2:error] [pid 3473144:tid 3473144] [client 91.92.47.4:56500] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/web/.env"] [unique_id "amtPa67wHx_IjJ9qU4cAngAAAAw"]
[Thu Jul 30 14:19:39.088293 2026] [security2:error] [pid 3473144:tid 3473144] [client 91.92.47.4:56500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/web/.env"] [unique_id "amtPa67wHx_IjJ9qU4cAngAAAAw"]
[Thu Jul 30 14:19:39.092788 2026] [security2:error] [pid 3445208:tid 3445208] [client 91.92.47.4:56216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtPa-XeRZsZvmoKujDu4gAAADo"]
[Thu Jul 30 14:19:39.094128 2026] [security2:error] [pid 3473144:tid 3473144] [client 91.92.47.4:56500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtPa67wHx_IjJ9qU4cAngAAAAw"]
[Thu Jul 30 14:19:39.111972 2026] [security2:error] [pid 3467069:tid 3467069] [client 91.92.47.4:56452] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env"] [unique_id "amtPa8ibnnNgmnEA4iO4FQAAAAA"]
[Thu Jul 30 14:19:39.112161 2026] [security2:error] [pid 3467069:tid 3467069] [client 91.92.47.4:56452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env"] [unique_id "amtPa8ibnnNgmnEA4iO4FQAAAAA"]
[Thu Jul 30 14:19:39.113618 2026] [security2:error] [pid 3468880:tid 3468880] [client 91.92.47.4:56232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/site/.env"] [unique_id "amtPa9EYE2ybDlFEVMhS_gAAADc"]
[Thu Jul 30 14:19:39.113758 2026] [security2:error] [pid 3468880:tid 3468880] [client 91.92.47.4:56232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/site/.env"] [unique_id "amtPa9EYE2ybDlFEVMhS_gAAADc"]
[Thu Jul 30 14:19:39.117848 2026] [security2:error] [pid 3467069:tid 3467069] [client 91.92.47.4:56452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtPa8ibnnNgmnEA4iO4FQAAAAA"]
[Thu Jul 30 14:19:39.119479 2026] [security2:error] [pid 3468880:tid 3468880] [client 91.92.47.4:56232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtPa9EYE2ybDlFEVMhS_gAAADc"]
[Thu Jul 30 14:19:39.996786 2026] [security2:error] [pid 3474390:tid 3474390] [client 18.210.58.238:43953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2024/07/9C20ACAA-098A-4A6A-8E2D-10079E2AD9A4-1024x768.jpeg"] [unique_id "amtPa4dsfz5BY14oM_qZwAAAAC0"]
[Thu Jul 30 14:19:40.265462 2026] [core:error] [pid 3427797:tid 3427797] [client 66.249.66.199:35983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:19:40.265489 2026] [core:error] [pid 3427797:tid 3427797] [client 66.249.66.199:35983] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:19:40.776719 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:61440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:40.776754 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:41.161217 2026] [security2:error] [pid 3473095:tid 3473095] [client 91.92.47.4:56236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.swp"] [unique_id "amtPbQ56AsKbuNigHjM5SgAAAAo"]
[Thu Jul 30 14:19:41.161416 2026] [security2:error] [pid 3473095:tid 3473095] [client 91.92.47.4:56236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/.env.swp"] [unique_id "amtPbQ56AsKbuNigHjM5SgAAAAo"]
[Thu Jul 30 14:19:41.170922 2026] [security2:error] [pid 3473095:tid 3473095] [client 91.92.47.4:56236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtPbQ56AsKbuNigHjM5SgAAAAo"]
[Thu Jul 30 14:19:41.420946 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:46700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:41.420971 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:41.713585 2026] [ssl:error] [pid 3474444:tid 3474444] (70014)End of file found: [client 216.73.216.199:4654] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:41.929235 2026] [authz_core:error] [pid 3445216:tid 3445216] [client 51.120.79.193:16225] AH01630: client denied by server configuration: /home/shelterf/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 14:19:42.136021 2026] [security2:error] [pid 3474450:tid 3474450] [client 34.194.165.45:22303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/21247"] [unique_id "amtPbsAfLI45RqX2qMrluwAAAEg"]
[Thu Jul 30 14:19:42.595631 2026] [security2:error] [pid 3474078:tid 3474078] [client 45.148.10.120:56728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amtPbtQnqxpOpU5Ao50_1AAAABY"]
[Thu Jul 30 14:19:42.595822 2026] [security2:error] [pid 3474078:tid 3474078] [client 45.148.10.120:56728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amtPbtQnqxpOpU5Ao50_1AAAABY"]
[Thu Jul 30 14:19:42.596052 2026] [security2:error] [pid 3474078:tid 3474078] [client 45.148.10.120:56728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hbsanorth.butteredcat.com"] [uri "/.env"] [unique_id "amtPbtQnqxpOpU5Ao50_1AAAABY"]
[Thu Jul 30 14:19:42.719892 2026] [ssl:error] [pid 3474449:tid 3474449] (70014)End of file found: [client 216.73.216.199:3124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:43.315425 2026] [ssl:error] [pid 3474453:tid 3474453] (70014)End of file found: [client 216.73.216.199:61205] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:43.360330 2026] [access_compat:error] [pid 3474445:tid 3474445] [client 103.59.153.118:50977] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:44.473747 2026] [ssl:error] [pid 3474452:tid 3474452] (EAI 2)Name or service not known: [client 144.76.19.72:46706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:44.473777 2026] [ssl:error] [pid 3474452:tid 3474452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:44.528183 2026] [ssl:error] [pid 3474394:tid 3474394] (EAI 2)Name or service not known: [client 144.76.19.72:46718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:44.528217 2026] [ssl:error] [pid 3474394:tid 3474394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:46.392320 2026] [authz_core:error] [pid 3474135:tid 3474135] [client 169.58.39.192:62366] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 14:19:47.139396 2026] [ssl:error] [pid 3458180:tid 3458180] (70014)End of file found: [client 216.73.216.199:1190] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:47.583957 2026] [ssl:error] [pid 3474318:tid 3474318] (EAI 2)Name or service not known: [client 144.76.19.72:46734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:47.584001 2026] [ssl:error] [pid 3474318:tid 3474318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:47.639511 2026] [ssl:error] [pid 3460614:tid 3460614] (EAI 2)Name or service not known: [client 144.76.19.72:46740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:47.639542 2026] [ssl:error] [pid 3460614:tid 3460614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:47.962618 2026] [ssl:error] [pid 3474452:tid 3474452] (70014)End of file found: [client 216.73.216.199:45549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:48.228886 2026] [core:error] [pid 3465577:tid 3465577] (13)Permission denied: [client 216.73.216.199:60755] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty55/subsystem/ttyS1/flags
[Thu Jul 30 14:19:48.529477 2026] [ssl:error] [pid 3465577:tid 3465577] (70014)End of file found: [client 216.73.216.199:60755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:49.031803 2026] [core:error] [pid 3468453:tid 3468453] (13)Permission denied: [client 216.73.216.199:43784] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/store_user
[Thu Jul 30 14:19:49.098806 2026] [authz_core:error] [pid 3474034:tid 3474034] [client 169.58.39.192:63522] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 14:19:49.757776 2026] [ssl:error] [pid 3468453:tid 3468453] (70014)End of file found: [client 216.73.216.199:43784] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:50.697866 2026] [ssl:error] [pid 3474133:tid 3474133] (EAI 2)Name or service not known: [client 144.76.19.72:51978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:50.697907 2026] [ssl:error] [pid 3474133:tid 3474133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:50.762543 2026] [ssl:error] [pid 3474317:tid 3474317] (EAI 2)Name or service not known: [client 144.76.19.72:51982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:50.762573 2026] [ssl:error] [pid 3474317:tid 3474317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:50.990415 2026] [authz_core:error] [pid 3474451:tid 3474451] [client 66.249.66.33:60851] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:19:50.993094 2026] [authz_core:error] [pid 3474451:tid 3474451] [client 66.249.66.33:60851] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:19:52.284559 2026] [authz_core:error] [pid 3468876:tid 3468876] [client 169.58.39.192:65001] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 14:19:53.819117 2026] [ssl:error] [pid 3474395:tid 3474395] (EAI 2)Name or service not known: [client 144.76.19.72:51988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:53.819147 2026] [ssl:error] [pid 3474395:tid 3474395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:53.875563 2026] [ssl:error] [pid 3474448:tid 3474448] (EAI 2)Name or service not known: [client 144.76.19.72:51998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:53.875592 2026] [ssl:error] [pid 3474448:tid 3474448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:54.032517 2026] [access_compat:error] [pid 3474034:tid 3474034] [client 103.59.153.118:51442] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:19:54.617861 2026] [ssl:error] [pid 3461400:tid 3461400] (70014)End of file found: [client 216.73.216.199:6372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:55.434891 2026] [authz_core:error] [pid 3474317:tid 3474317] [client 152.58.78.221:4865] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:19:55.942516 2026] [authz_core:error] [pid 3424697:tid 3424697] [client 169.58.39.192:50674] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 14:19:56.829798 2026] [ssl:error] [pid 3474453:tid 3474453] (70014)End of file found: [client 216.73.216.199:52342] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:19:56.930640 2026] [ssl:error] [pid 3471164:tid 3471164] (EAI 2)Name or service not known: [client 144.76.19.72:52010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:56.930683 2026] [ssl:error] [pid 3471164:tid 3471164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:56.982395 2026] [ssl:error] [pid 3468453:tid 3468453] (EAI 2)Name or service not known: [client 144.76.19.72:52018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:19:56.982427 2026] [ssl:error] [pid 3468453:tid 3468453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:19:56.988389 2026] [cgi:error] [pid 3471214:tid 3471214] [client 51.120.70.186:59256] AH02812: stderr from /home/iapibcom/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:19:58.343273 2026] [ssl:error] [pid 3468251:tid 3468251] (70014)End of file found: [client 216.73.216.199:64039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:00.073647 2026] [ssl:error] [pid 3474442:tid 3474442] (70014)End of file found: [client 216.73.216.199:33349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:00.089100 2026] [ssl:error] [pid 3474449:tid 3474449] (EAI 2)Name or service not known: [client 144.76.19.72:55940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:00.089132 2026] [ssl:error] [pid 3474449:tid 3474449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:00.145725 2026] [ssl:error] [pid 3474352:tid 3474352] (EAI 2)Name or service not known: [client 144.76.19.72:55948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:00.145759 2026] [ssl:error] [pid 3474352:tid 3474352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:00.690603 2026] [access_compat:error] [pid 3474443:tid 3474443] [client 103.59.153.118:51724] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:01.246952 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 45.158.164.139:52950] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:20:02.154736 2026] [security2:error] [pid 3474034:tid 3474034] [client 14.230.231.16:36019] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPgvruLURkHpEhrC2ZRwAAABQ"]
[Thu Jul 30 14:20:02.154804 2026] [security2:error] [pid 3474034:tid 3474034] [client 14.230.231.16:36019] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPgvruLURkHpEhrC2ZRwAAABQ"]
[Thu Jul 30 14:20:02.155099 2026] [security2:error] [pid 3474034:tid 3474034] [client 14.230.231.16:36019] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPgvruLURkHpEhrC2ZRwAAABQ"]
[Thu Jul 30 14:20:02.162917 2026] [ssl:error] [pid 3471164:tid 3471164] (70014)End of file found: [client 216.73.216.199:52316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:03.216705 2026] [ssl:error] [pid 3474317:tid 3474317] (EAI 2)Name or service not known: [client 144.76.19.72:55964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:03.216738 2026] [ssl:error] [pid 3474317:tid 3474317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:03.274216 2026] [ssl:error] [pid 3468876:tid 3468876] (EAI 2)Name or service not known: [client 144.76.19.72:55966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:03.274246 2026] [ssl:error] [pid 3468876:tid 3468876] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:03.661054 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:42744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:04.707266 2026] [access_compat:error] [pid 3468880:tid 3468880] [client 103.59.153.118:51915] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:05.592983 2026] [ssl:error] [pid 3474317:tid 3474317] (70014)End of file found: [client 216.73.216.199:1529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:06.329683 2026] [ssl:error] [pid 3444591:tid 3444591] (EAI 2)Name or service not known: [client 144.76.19.72:55982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:06.329708 2026] [ssl:error] [pid 3444591:tid 3444591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:06.385828 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:55992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:06.385863 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:07.605979 2026] [core:error] [pid 3473145:tid 3473145] (13)Permission denied: [client 216.73.216.199:26967] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sgpool-128/store_user
[Thu Jul 30 14:20:08.302904 2026] [ssl:error] [pid 3473145:tid 3473145] (70014)End of file found: [client 216.73.216.199:26967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:08.593121 2026] [security2:error] [pid 3472867:tid 3472867] [client 154.84.165.109:52702] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPiJW0klGT3YvioUG8vAAAAAc"]
[Thu Jul 30 14:20:08.593182 2026] [security2:error] [pid 3472867:tid 3472867] [client 154.84.165.109:52702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPiJW0klGT3YvioUG8vAAAAAc"]
[Thu Jul 30 14:20:08.593465 2026] [security2:error] [pid 3472867:tid 3472867] [client 154.84.165.109:52702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPiJW0klGT3YvioUG8vAAAAAc"]
[Thu Jul 30 14:20:09.284367 2026] [cgi:error] [pid 3474353:tid 3474353] [client 87.58.197.201:57978] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:20:09.284711 2026] [core:error] [pid 3474353:tid 3474353] [client 87.58.197.201:57978] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:09.442394 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:56002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:09.442428 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:09.497168 2026] [ssl:error] [pid 3474447:tid 3474447] (EAI 2)Name or service not known: [client 144.76.19.72:56004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:09.497207 2026] [ssl:error] [pid 3474447:tid 3474447] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:11.014997 2026] [core:error] [pid 3471164:tid 3471164] (13)Permission denied: [client 216.73.216.199:39311] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS1/line
[Thu Jul 30 14:20:11.298766 2026] [access_compat:error] [pid 3461324:tid 3461324] [client 103.59.153.118:52200] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:11.617363 2026] [ssl:error] [pid 3471164:tid 3471164] (70014)End of file found: [client 216.73.216.199:39311] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:12.559698 2026] [ssl:error] [pid 3474351:tid 3474351] (EAI 2)Name or service not known: [client 144.76.19.72:50392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:12.559739 2026] [ssl:error] [pid 3474351:tid 3474351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:12.614303 2026] [ssl:error] [pid 3474317:tid 3474317] (EAI 2)Name or service not known: [client 144.76.19.72:50394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:12.614332 2026] [ssl:error] [pid 3474317:tid 3474317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:12.889077 2026] [security2:error] [pid 3468251:tid 3468251] [client 190.112.110.57:36644] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPjEvgmL4R49zm5-6XBAAAAB0"]
[Thu Jul 30 14:20:12.889130 2026] [security2:error] [pid 3468251:tid 3468251] [client 190.112.110.57:36644] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPjEvgmL4R49zm5-6XBAAAAB0"]
[Thu Jul 30 14:20:12.889422 2026] [security2:error] [pid 3468251:tid 3468251] [client 190.112.110.57:36644] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPjEvgmL4R49zm5-6XBAAAAB0"]
[Thu Jul 30 14:20:13.419098 2026] [ssl:error] [pid 3424697:tid 3424697] (70014)End of file found: [client 216.73.216.199:2189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:13.913558 2026] [security2:error] [pid 3468880:tid 3468880] [client 47.128.24.87:59422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amtPjdEYE2ybDlFEVMhTEAAAADc"]
[Thu Jul 30 14:20:15.375091 2026] [access_compat:error] [pid 3474391:tid 3474391] [client 103.59.153.118:52394] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:15.667706 2026] [ssl:error] [pid 3474452:tid 3474452] (EAI 2)Name or service not known: [client 144.76.19.72:50404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:15.667744 2026] [ssl:error] [pid 3474452:tid 3474452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:15.720775 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:50410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:15.720808 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:15.756612 2026] [core:error] [pid 3468251:tid 3468251] (13)Permission denied: [client 216.73.216.199:44595] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/vm_area_struct/hwcache_align
[Thu Jul 30 14:20:17.406127 2026] [core:error] [pid 3468251:tid 3468251] (13)Permission denied: [client 216.73.216.199:44595] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory169/node0/compact
[Thu Jul 30 14:20:17.706490 2026] [ssl:error] [pid 3468251:tid 3468251] (70014)End of file found: [client 216.73.216.199:44595] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:18.307777 2026] [ssl:error] [pid 3473145:tid 3473145] (70014)End of file found: [client 216.73.216.199:65351] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:18.776464 2026] [ssl:error] [pid 3474441:tid 3474441] (EAI 2)Name or service not known: [client 144.76.19.72:50412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:18.776500 2026] [ssl:error] [pid 3474441:tid 3474441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:18.795842 2026] [ssl:error] [pid 3474352:tid 3474352] (70014)End of file found: [client 216.73.216.199:39669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:18.834606 2026] [ssl:error] [pid 3441515:tid 3441515] (EAI 2)Name or service not known: [client 144.76.19.72:50416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:18.834631 2026] [ssl:error] [pid 3441515:tid 3441515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:19.524105 2026] [core:error] [pid 3474353:tid 3474353] [client 74.248.33.8:9112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:19.524129 2026] [core:error] [pid 3474353:tid 3474353] [client 74.248.33.8:9112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:19.788253 2026] [security2:error] [pid 3474441:tid 3474441] [client 114.119.146.111:41663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18/request_format~html"] [unique_id "amtPkwQfZjCmupoxHvbs9gAAAD4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18,103/request_format~html
[Thu Jul 30 14:20:20.259161 2026] [access_compat:error] [pid 3474318:tid 3474318] [client 74.248.33.8:21926] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/term.php
[Thu Jul 30 14:20:20.259522 2026] [core:error] [pid 3474318:tid 3474318] [client 74.248.33.8:21926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:20.632870 2026] [access_compat:error] [pid 3474390:tid 3474390] [client 74.248.33.8:21937] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ioxi-o.php
[Thu Jul 30 14:20:20.633207 2026] [core:error] [pid 3474390:tid 3474390] [client 74.248.33.8:21937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:20.907768 2026] [security2:error] [pid 3474318:tid 3474318] [client 114.119.146.111:65375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18/request_format~html"] [unique_id "amtPlHrYB17i5VdOg8DF_AAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18,103/request_format~html
[Thu Jul 30 14:20:20.991953 2026] [access_compat:error] [pid 3441515:tid 3441515] [client 74.248.33.8:21896] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/1.php
[Thu Jul 30 14:20:20.992344 2026] [core:error] [pid 3441515:tid 3441515] [client 74.248.33.8:21896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:21.433524 2026] [access_compat:error] [pid 3474390:tid 3474390] [client 74.248.33.8:21889] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/alfa.php
[Thu Jul 30 14:20:21.433846 2026] [core:error] [pid 3474390:tid 3474390] [client 74.248.33.8:21889] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:21.890137 2026] [ssl:error] [pid 3445216:tid 3445216] (EAI 2)Name or service not known: [client 144.76.19.72:53106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:21.890168 2026] [ssl:error] [pid 3445216:tid 3445216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:21.943080 2026] [ssl:error] [pid 3474439:tid 3474439] (EAI 2)Name or service not known: [client 144.76.19.72:53112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:21.943122 2026] [ssl:error] [pid 3474439:tid 3474439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:22.445296 2026] [core:error] [pid 3468878:tid 3468878] [client 74.248.33.8:9130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:22.445322 2026] [core:error] [pid 3468878:tid 3468878] [client 74.248.33.8:9130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:23.002474 2026] [access_compat:error] [pid 3474453:tid 3474453] [client 74.248.33.8:21950] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/elp.php
[Thu Jul 30 14:20:23.002829 2026] [core:error] [pid 3474453:tid 3474453] [client 74.248.33.8:21950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:23.305805 2026] [access_compat:error] [pid 3471213:tid 3471213] [client 74.248.33.8:18951] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/classwithtostring.php
[Thu Jul 30 14:20:23.306190 2026] [core:error] [pid 3471213:tid 3471213] [client 74.248.33.8:18951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:23.576508 2026] [security2:error] [pid 3441515:tid 3441515] [client 43.166.136.24:33990] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amtPl_O7MO1fvNNyXbl2EAAAABI"]
[Thu Jul 30 14:20:24.058349 2026] [access_compat:error] [pid 3467764:tid 3467764] [client 74.248.33.8:18968] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/666.php
[Thu Jul 30 14:20:24.058720 2026] [core:error] [pid 3467764:tid 3467764] [client 74.248.33.8:18968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:24.652227 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:46051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:24.999939 2026] [ssl:error] [pid 3471213:tid 3471213] (EAI 2)Name or service not known: [client 144.76.19.72:53114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:24.999973 2026] [ssl:error] [pid 3471213:tid 3471213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:25.053542 2026] [ssl:error] [pid 3474453:tid 3474453] (EAI 2)Name or service not known: [client 144.76.19.72:53126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:25.053582 2026] [ssl:error] [pid 3474453:tid 3474453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:25.087507 2026] [core:error] [pid 3474351:tid 3474351] [client 74.248.33.8:22329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:25.087533 2026] [core:error] [pid 3474351:tid 3474351] [client 74.248.33.8:22329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:25.566952 2026] [ssl:error] [pid 3473145:tid 3473145] (70014)End of file found: [client 216.73.216.199:64653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:26.075896 2026] [access_compat:error] [pid 3474077:tid 3474077] [client 103.59.153.118:52874] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:26.671445 2026] [access_compat:error] [pid 3474443:tid 3474443] [client 74.248.33.8:31483] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws54.php
[Thu Jul 30 14:20:26.671802 2026] [core:error] [pid 3474443:tid 3474443] [client 74.248.33.8:31483] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:28.107022 2026] [ssl:error] [pid 3474443:tid 3474443] (EAI 2)Name or service not known: [client 144.76.19.72:53130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:28.107076 2026] [ssl:error] [pid 3474443:tid 3474443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:28.161653 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:53140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:28.161683 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:29.482167 2026] [ssl:error] [pid 3473859:tid 3473859] (70014)End of file found: [client 216.73.216.199:63417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:30.258668 2026] [access_compat:error] [pid 3474394:tid 3474394] [client 74.248.33.8:31428] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/deepseek_d.php
[Thu Jul 30 14:20:30.259025 2026] [core:error] [pid 3474394:tid 3474394] [client 74.248.33.8:31428] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:31.138338 2026] [security2:error] [pid 3461324:tid 3461324] [client 43.159.148.221:58150] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "cssystems.co.uk"] [uri "/"] [unique_id "amtPnzFuH2zLMh8ZU0IAEQAAADU"], referer: http://cssystems.co.uk
[Thu Jul 30 14:20:31.213561 2026] [ssl:error] [pid 3474394:tid 3474394] (EAI 2)Name or service not known: [client 144.76.19.72:30370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:31.213592 2026] [ssl:error] [pid 3474394:tid 3474394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:31.269378 2026] [ssl:error] [pid 3474351:tid 3474351] (EAI 2)Name or service not known: [client 144.76.19.72:30382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:31.269409 2026] [ssl:error] [pid 3474351:tid 3474351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:32.001393 2026] [security2:error] [pid 3441515:tid 3441515] [client 43.135.186.135:37824] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mcgarvey.co.uk"] [uri "/"] [unique_id "amtPoPO7MO1fvNNyXbl2FAAAABI"]
[Thu Jul 30 14:20:32.058494 2026] [core:error] [pid 3474443:tid 3474443] [client 74.248.33.8:22225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:32.058525 2026] [core:error] [pid 3474443:tid 3474443] [client 74.248.33.8:22225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:32.242036 2026] [security2:error] [pid 3459018:tid 3459018] [client 43.134.91.35:47512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "liberator-no-email.com"] [uri "/"] [unique_id "amtPoIury_KXhAr3ZAQvQgAAAAM"]
[Thu Jul 30 14:20:32.526149 2026] [security2:error] [pid 3474351:tid 3474351] [client 185.191.171.14:26776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/gardner-ma-police-chief-placed-on-leave"] [unique_id "amtPoKf7QSskcezMF_G8KgAAACc"]
[Thu Jul 30 14:20:32.733633 2026] [access_compat:error] [pid 3471213:tid 3471213] [client 103.59.153.118:53167] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:33.143137 2026] [access_compat:error] [pid 3474392:tid 3474392] [client 74.248.33.8:22216] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/nw.php
[Thu Jul 30 14:20:33.143500 2026] [core:error] [pid 3474392:tid 3474392] [client 74.248.33.8:22216] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:33.399853 2026] [ssl:error] [pid 3474034:tid 3474034] (70014)End of file found: [client 216.73.216.199:28331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:34.328219 2026] [ssl:error] [pid 3474392:tid 3474392] (EAI 2)Name or service not known: [client 144.76.19.72:30386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:34.328259 2026] [ssl:error] [pid 3474392:tid 3474392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:34.387483 2026] [ssl:error] [pid 3471213:tid 3471213] (EAI 2)Name or service not known: [client 144.76.19.72:30398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:34.387506 2026] [ssl:error] [pid 3471213:tid 3471213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:35.502656 2026] [core:error] [pid 3461324:tid 3461324] (13)Permission denied: [client 216.73.216.199:37708] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu7/driver/unbind
[Thu Jul 30 14:20:35.584664 2026] [access_compat:error] [pid 3473145:tid 3473145] [client 74.248.33.8:22257] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xleet.php
[Thu Jul 30 14:20:35.585004 2026] [core:error] [pid 3473145:tid 3473145] [client 74.248.33.8:22257] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:35.807362 2026] [ssl:error] [pid 3461324:tid 3461324] (70014)End of file found: [client 216.73.216.199:37708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:36.674420 2026] [access_compat:error] [pid 3467764:tid 3467764] [client 103.59.153.118:53365] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:36.714466 2026] [ssl:error] [pid 3471164:tid 3471164] (70014)End of file found: [client 216.73.216.199:43290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:37.444514 2026] [ssl:error] [pid 3474077:tid 3474077] (EAI 2)Name or service not known: [client 144.76.19.72:30402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:37.444554 2026] [ssl:error] [pid 3474077:tid 3474077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:37.500931 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:30418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:37.500969 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:37.558533 2026] [access_compat:error] [pid 3473859:tid 3473859] [client 74.248.33.8:31438] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp.php
[Thu Jul 30 14:20:37.558867 2026] [core:error] [pid 3473859:tid 3473859] [client 74.248.33.8:31438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:37.822648 2026] [access_compat:error] [pid 3472867:tid 3472867] [client 74.248.33.8:22271] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/155.php
[Thu Jul 30 14:20:37.822976 2026] [core:error] [pid 3472867:tid 3472867] [client 74.248.33.8:22271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:38.287626 2026] [access_compat:error] [pid 3472867:tid 3472867] [client 74.248.33.8:31424] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/96i.php
[Thu Jul 30 14:20:38.287952 2026] [core:error] [pid 3472867:tid 3472867] [client 74.248.33.8:31424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:38.602958 2026] [access_compat:error] [pid 3474133:tid 3474133] [client 74.248.33.8:16511] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/as.php
[Thu Jul 30 14:20:38.603315 2026] [core:error] [pid 3474133:tid 3474133] [client 74.248.33.8:16511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:39.123136 2026] [ssl:error] [pid 3477011:tid 3477011] (70014)End of file found: [client 216.73.216.199:21007] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:39.953766 2026] [access_compat:error] [pid 3427797:tid 3427797] [client 45.158.164.139:45132] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:20:40.498820 2026] [access_compat:error] [pid 3472867:tid 3472867] [client 74.248.33.8:16509] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/min.php
[Thu Jul 30 14:20:40.499183 2026] [core:error] [pid 3472867:tid 3472867] [client 74.248.33.8:16509] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:40.822058 2026] [ssl:error] [pid 3477090:tid 3477090] (EAI 2)Name or service not known: [client 144.76.19.72:46722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:40.822110 2026] [ssl:error] [pid 3477090:tid 3477090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:40.878693 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:46736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:40.878732 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:41.294517 2026] [access_compat:error] [pid 3477093:tid 3477093] [client 74.248.33.8:22447] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/php8.php
[Thu Jul 30 14:20:41.294860 2026] [core:error] [pid 3477093:tid 3477093] [client 74.248.33.8:22447] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:41.533921 2026] [ssl:error] [pid 3477090:tid 3477090] (70014)End of file found: [client 216.73.216.199:13609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:43.313671 2026] [access_compat:error] [pid 3477140:tid 3477140] [client 103.59.153.118:53705] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:43.315328 2026] [core:error] [pid 3477145:tid 3477145] [client 74.248.33.8:24893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:43.315364 2026] [core:error] [pid 3477145:tid 3477145] [client 74.248.33.8:24893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:43.636877 2026] [ssl:error] [pid 3471213:tid 3471213] (70014)End of file found: [client 216.73.216.199:63376] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:43.954265 2026] [ssl:error] [pid 3474077:tid 3474077] (EAI 2)Name or service not known: [client 144.76.19.72:46742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:43.954296 2026] [ssl:error] [pid 3474077:tid 3474077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:44.011561 2026] [ssl:error] [pid 3473859:tid 3473859] (EAI 2)Name or service not known: [client 144.76.19.72:46756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:44.011596 2026] [ssl:error] [pid 3473859:tid 3473859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:44.840979 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:62888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:47.032535 2026] [access_compat:error] [pid 3477093:tid 3477093] [client 74.248.33.8:24883] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/222.php
[Thu Jul 30 14:20:47.032870 2026] [core:error] [pid 3477093:tid 3477093] [client 74.248.33.8:24883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:47.067798 2026] [ssl:error] [pid 3474318:tid 3474318] (EAI 2)Name or service not known: [client 144.76.19.72:46760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:47.067830 2026] [ssl:error] [pid 3474318:tid 3474318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:47.119445 2026] [ssl:error] [pid 3444591:tid 3444591] (EAI 2)Name or service not known: [client 144.76.19.72:46764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:47.119475 2026] [ssl:error] [pid 3444591:tid 3444591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:47.362851 2026] [access_compat:error] [pid 3477145:tid 3477145] [client 103.59.153.118:54077] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:47.801995 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:36879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:47.802016 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:36879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:48.180580 2026] [security2:error] [pid 3477452:tid 3477452] [client 8.216.48.12:36381] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPsBzx_PpOST851bWtWAAAAB8"]
[Thu Jul 30 14:20:48.180636 2026] [security2:error] [pid 3477452:tid 3477452] [client 8.216.48.12:36381] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPsBzx_PpOST851bWtWAAAAB8"]
[Thu Jul 30 14:20:48.180953 2026] [security2:error] [pid 3477452:tid 3477452] [client 8.216.48.12:36381] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPsBzx_PpOST851bWtWAAAAB8"]
[Thu Jul 30 14:20:48.938280 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 74.248.33.8:22407] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/info.php
[Thu Jul 30 14:20:48.938619 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:22407] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:49.057459 2026] [ssl:error] [pid 3471164:tid 3471164] (70014)End of file found: [client 216.73.216.199:59072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:49.557523 2026] [ssl:error] [pid 3471213:tid 3471213] (70014)End of file found: [client 216.73.216.199:38919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:50.048597 2026] [security2:error] [pid 3477092:tid 3477092] [client 8.218.1.15:47875] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPsqV2pLEsoImxHIQv_wAAAAk"]
[Thu Jul 30 14:20:50.048647 2026] [security2:error] [pid 3477092:tid 3477092] [client 8.218.1.15:47875] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPsqV2pLEsoImxHIQv_wAAAAk"]
[Thu Jul 30 14:20:50.048920 2026] [security2:error] [pid 3477092:tid 3477092] [client 8.218.1.15:47875] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPsqV2pLEsoImxHIQv_wAAAAk"]
[Thu Jul 30 14:20:50.171209 2026] [ssl:error] [pid 3477499:tid 3477499] (EAI 2)Name or service not known: [client 144.76.19.72:37656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:50.171254 2026] [ssl:error] [pid 3477499:tid 3477499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:50.244057 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:37666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:50.244096 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:50.563154 2026] [access_compat:error] [pid 3477054:tid 3477054] [client 74.248.33.8:36888] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a.php
[Thu Jul 30 14:20:50.563519 2026] [core:error] [pid 3477054:tid 3477054] [client 74.248.33.8:36888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:50.869547 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:26147] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:51.537857 2026] [security2:error] [pid 3477539:tid 3477539] [client 111.230.233.46:49184] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "amtPs-BA-_uZ1fDYpSFjHgAAAC8"]
[Thu Jul 30 14:20:52.006296 2026] [authz_core:error] [pid 3477054:tid 3477054] [client 169.58.39.192:61496] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 14:20:52.209701 2026] [access_compat:error] [pid 3477140:tid 3477140] [client 47.128.120.212:36642] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/street-kings
[Thu Jul 30 14:20:52.209814 2026] [access_compat:error] [pid 3477140:tid 3477140] [client 47.128.120.212:36642] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:20:52.815287 2026] [security2:error] [pid 3474133:tid 3474133] [client 8.218.1.15:61223] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPtNM0w2RBTaVwiQdrAwAAABw"]
[Thu Jul 30 14:20:52.815338 2026] [security2:error] [pid 3474133:tid 3474133] [client 8.218.1.15:61223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPtNM0w2RBTaVwiQdrAwAAABw"]
[Thu Jul 30 14:20:52.815603 2026] [security2:error] [pid 3474133:tid 3474133] [client 8.218.1.15:61223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPtNM0w2RBTaVwiQdrAwAAABw"]
[Thu Jul 30 14:20:53.301852 2026] [ssl:error] [pid 3477141:tid 3477141] (EAI 2)Name or service not known: [client 144.76.19.72:37670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:53.301887 2026] [ssl:error] [pid 3477141:tid 3477141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:53.358342 2026] [ssl:error] [pid 3477534:tid 3477534] (EAI 2)Name or service not known: [client 144.76.19.72:37680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:53.358376 2026] [ssl:error] [pid 3477534:tid 3477534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:54.387095 2026] [ssl:error] [pid 3477141:tid 3477141] (70014)End of file found: [client 216.73.216.199:24039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:54.390631 2026] [access_compat:error] [pid 3477537:tid 3477537] [client 74.248.33.8:22260] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/chosen.php
[Thu Jul 30 14:20:54.391062 2026] [core:error] [pid 3477537:tid 3477537] [client 74.248.33.8:22260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:54.445690 2026] [authz_core:error] [pid 3477091:tid 3477091] [client 169.58.39.192:62960] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 14:20:56.410631 2026] [ssl:error] [pid 3474133:tid 3474133] (EAI 2)Name or service not known: [client 144.76.19.72:37686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:56.410661 2026] [ssl:error] [pid 3474133:tid 3474133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:56.472600 2026] [ssl:error] [pid 3477093:tid 3477093] (EAI 2)Name or service not known: [client 144.76.19.72:37688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:56.472634 2026] [ssl:error] [pid 3477093:tid 3477093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:56.600339 2026] [authz_core:error] [pid 3477500:tid 3477500] [client 169.58.39.192:63995] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 14:20:56.606772 2026] [ssl:error] [pid 3441515:tid 3441515] (70014)End of file found: [client 216.73.216.199:17096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:57.517863 2026] [ssl:error] [pid 3474453:tid 3474453] (70014)End of file found: [client 216.73.216.199:20743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:20:57.962597 2026] [access_compat:error] [pid 3445216:tid 3445216] [client 103.59.153.118:54762] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:20:58.557582 2026] [core:error] [pid 3477140:tid 3477140] [client 74.248.33.8:50028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:58.557608 2026] [core:error] [pid 3477140:tid 3477140] [client 74.248.33.8:50028] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:20:59.024399 2026] [authz_core:error] [pid 3477500:tid 3477500] [client 169.58.39.192:65083] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 14:20:59.528000 2026] [ssl:error] [pid 3474395:tid 3474395] (EAI 2)Name or service not known: [client 144.76.19.72:37704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:59.528032 2026] [ssl:error] [pid 3474395:tid 3474395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:20:59.582481 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:43902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:20:59.582505 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:00.248549 2026] [ssl:error] [pid 3477141:tid 3477141] (70014)End of file found: [client 216.73.216.199:51485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:02.523938 2026] [security2:error] [pid 3477539:tid 3477539] [client 43.138.68.113:40964] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "amtPvuBA-_uZ1fDYpSFjIQAAAC8"]
[Thu Jul 30 14:21:02.642738 2026] [ssl:error] [pid 3477395:tid 3477395] (EAI 2)Name or service not known: [client 144.76.19.72:43908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:02.642780 2026] [ssl:error] [pid 3477395:tid 3477395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:02.697537 2026] [ssl:error] [pid 3441515:tid 3441515] (EAI 2)Name or service not known: [client 144.76.19.72:43912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:02.697570 2026] [ssl:error] [pid 3441515:tid 3441515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:03.342829 2026] [core:error] [pid 3478076:tid 3478076] [client 191.232.199.39:36358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:03.342857 2026] [core:error] [pid 3478076:tid 3478076] [client 191.232.199.39:36358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:03.960735 2026] [security2:error] [pid 3477093:tid 3477093] [client 51.68.236.92:16573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.nigelmassey.com"] [uri "/robots.txt"] [unique_id "amtPv7VKRgMESMDkB3QFEgAAAAo"]
[Thu Jul 30 14:21:04.440427 2026] [cgi:error] [pid 3474395:tid 3474395] [client 66.132.186.174:57290] AH02812: stderr from /home/islay/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://www.islay.me:80/cgi-bin
[Thu Jul 30 14:21:04.605053 2026] [access_compat:error] [pid 3477539:tid 3477539] [client 103.59.153.118:55068] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:04.638868 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 191.232.199.39:25123] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/php8.php
[Thu Jul 30 14:21:04.639218 2026] [core:error] [pid 3477500:tid 3477500] [client 191.232.199.39:25123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:05.109703 2026] [access_compat:error] [pid 3477145:tid 3477145] [client 45.158.164.139:47936] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:21:05.497624 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 74.248.33.8:13903] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/vx.php
[Thu Jul 30 14:21:05.497975 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:13903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:05.750909 2026] [ssl:error] [pid 3477054:tid 3477054] (EAI 2)Name or service not known: [client 144.76.19.72:43926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:05.750953 2026] [ssl:error] [pid 3477054:tid 3477054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:05.752941 2026] [core:error] [pid 3477140:tid 3477140] [client 191.232.199.39:25107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:05.752962 2026] [core:error] [pid 3477140:tid 3477140] [client 191.232.199.39:25107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:05.806696 2026] [ssl:error] [pid 3478134:tid 3478134] (EAI 2)Name or service not known: [client 144.76.19.72:43940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:05.806735 2026] [ssl:error] [pid 3478134:tid 3478134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:05.909541 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:47848] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:06.931532 2026] [ssl:error] [pid 3477499:tid 3477499] (70014)End of file found: [client 216.73.216.199:45447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:07.532383 2026] [ssl:error] [pid 3477497:tid 3477497] (70014)End of file found: [client 216.73.216.199:48265] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:07.746810 2026] [core:error] [pid 3477500:tid 3477500] [client 74.248.33.8:36889] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:07.746838 2026] [core:error] [pid 3477500:tid 3477500] [client 74.248.33.8:36889] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:07.778975 2026] [authz_core:error] [pid 3465575:tid 3465575] [client 24.199.127.101:58600] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 14:21:08.180588 2026] [access_compat:error] [pid 3474444:tid 3474444] [client 74.248.33.8:49995] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wap.php
[Thu Jul 30 14:21:08.180927 2026] [core:error] [pid 3474444:tid 3474444] [client 74.248.33.8:49995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:08.655345 2026] [authz_core:error] [pid 3477500:tid 3477500] [client 24.199.127.101:46046] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 14:21:08.661976 2026] [access_compat:error] [pid 3474439:tid 3474439] [client 103.59.153.118:55272] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:08.859521 2026] [ssl:error] [pid 3474444:tid 3474444] (EAI 2)Name or service not known: [client 144.76.19.72:43942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:08.859553 2026] [ssl:error] [pid 3474444:tid 3474444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:08.876129 2026] [access_compat:error] [pid 3474318:tid 3474318] [client 191.232.199.39:24884] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/lite.php
[Thu Jul 30 14:21:08.876500 2026] [core:error] [pid 3474318:tid 3474318] [client 191.232.199.39:24884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:08.912961 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:43958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:08.912992 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:09.944110 2026] [access_compat:error] [pid 3474077:tid 3474077] [client 191.232.199.39:24850] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/term.php
[Thu Jul 30 14:21:09.944484 2026] [core:error] [pid 3474077:tid 3474077] [client 191.232.199.39:24850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:11.082618 2026] [authz_core:error] [pid 3477144:tid 3477144] [client 74.208.150.73:59036] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 14:21:11.082680 2026] [authz_core:error] [pid 3477144:tid 3477144] [client 74.208.150.73:59036] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 14:21:11.103989 2026] [access_compat:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25148] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/config.php
[Thu Jul 30 14:21:11.104326 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:11.969372 2026] [ssl:error] [pid 3477395:tid 3477395] (EAI 2)Name or service not known: [client 144.76.19.72:62306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:11.969420 2026] [ssl:error] [pid 3477395:tid 3477395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:12.034159 2026] [ssl:error] [pid 3477451:tid 3477451] (EAI 2)Name or service not known: [client 144.76.19.72:62316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:12.034191 2026] [ssl:error] [pid 3477451:tid 3477451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:12.145644 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:24838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:12.145688 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:24838] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:12.168731 2026] [security2:error] [pid 3478076:tid 3478076] [client 43.165.127.225:39446] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtPyJG0YGyE7av4tSi0qwAAAAU"]
[Thu Jul 30 14:21:12.454723 2026] [authz_core:error] [pid 3459018:tid 3459018] [client 66.249.66.34:45588] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:21:12.457700 2026] [authz_core:error] [pid 3459018:tid 3459018] [client 66.249.66.34:45588] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:21:13.175629 2026] [access_compat:error] [pid 3477451:tid 3477451] [client 191.232.199.39:25226] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-good.php
[Thu Jul 30 14:21:13.175967 2026] [core:error] [pid 3477451:tid 3477451] [client 191.232.199.39:25226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:13.315802 2026] [security2:error] [pid 3477091:tid 3477091] [client 43.165.127.225:50832] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amtPyc1S2YXgTMSU0R3r-wAAAAg"], referer: http://berehap.be
[Thu Jul 30 14:21:13.883187 2026] [ssl:error] [pid 3477533:tid 3477533] (70014)End of file found: [client 216.73.216.199:15972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:14.134180 2026] [security2:error] [pid 3477054:tid 3477054] [client 47.84.59.195:46559] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPyjfKgmFfm50A8yA6HgAAAAQ"]
[Thu Jul 30 14:21:14.134229 2026] [security2:error] [pid 3477054:tid 3477054] [client 47.84.59.195:46559] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPyjfKgmFfm50A8yA6HgAAAAQ"]
[Thu Jul 30 14:21:14.134507 2026] [security2:error] [pid 3477054:tid 3477054] [client 47.84.59.195:46559] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPyjfKgmFfm50A8yA6HgAAAAQ"]
[Thu Jul 30 14:21:14.239627 2026] [core:error] [pid 3477499:tid 3477499] [client 191.232.199.39:24894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:14.239651 2026] [core:error] [pid 3477499:tid 3477499] [client 191.232.199.39:24894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:14.579812 2026] [ssl:error] [pid 3473859:tid 3473859] (70014)End of file found: [client 216.73.216.199:46494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:15.108928 2026] [ssl:error] [pid 3477091:tid 3477091] (EAI 2)Name or service not known: [client 144.76.19.72:62320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:15.108982 2026] [ssl:error] [pid 3477091:tid 3477091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:15.201743 2026] [ssl:error] [pid 3477011:tid 3477011] (EAI 2)Name or service not known: [client 144.76.19.72:62336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:15.201782 2026] [ssl:error] [pid 3477011:tid 3477011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:15.285785 2026] [access_compat:error] [pid 3474448:tid 3474448] [client 103.59.153.118:55568] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:15.485769 2026] [security2:error] [pid 3468251:tid 3468251] [client 43.165.127.225:52010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtPy0vgmL4R49zm5-6XEgAAAB0"], referer: https://www.berehap.be/
[Thu Jul 30 14:21:15.620088 2026] [core:error] [pid 3474439:tid 3474439] [client 74.248.33.8:50002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:15.620115 2026] [core:error] [pid 3474439:tid 3474439] [client 74.248.33.8:50002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:15.981338 2026] [access_compat:error] [pid 3477011:tid 3477011] [client 74.248.33.8:36882] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bgymj.php
[Thu Jul 30 14:21:15.981707 2026] [core:error] [pid 3477011:tid 3477011] [client 74.248.33.8:36882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:16.500023 2026] [access_compat:error] [pid 3477451:tid 3477451] [client 74.248.33.8:13911] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aa.php
[Thu Jul 30 14:21:16.500372 2026] [core:error] [pid 3477451:tid 3477451] [client 74.248.33.8:13911] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:16.774332 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 74.248.33.8:13925] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-mail.php
[Thu Jul 30 14:21:16.774706 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:13925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:17.295882 2026] [security2:error] [pid 3474441:tid 3474441] [client 85.128.143.125:53340] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amtPzQQfZjCmupoxHvbtCAAAAD4"]
[Thu Jul 30 14:21:17.460695 2026] [access_compat:error] [pid 3477451:tid 3477451] [client 74.248.33.8:14852] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bolt.php
[Thu Jul 30 14:21:17.461028 2026] [core:error] [pid 3477451:tid 3477451] [client 74.248.33.8:14852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:17.647325 2026] [ssl:error] [pid 3474448:tid 3474448] (70014)End of file found: [client 216.73.216.199:64821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:17.902742 2026] [security2:error] [pid 3477054:tid 3477054] [client 43.164.133.138:42116] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtPzTfKgmFfm50A8yA6IQAAAAQ"]
[Thu Jul 30 14:21:18.146785 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:2348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:18.258405 2026] [ssl:error] [pid 3474395:tid 3474395] (EAI 2)Name or service not known: [client 144.76.19.72:62342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:18.258442 2026] [ssl:error] [pid 3474395:tid 3474395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:18.311316 2026] [ssl:error] [pid 3477011:tid 3477011] (EAI 2)Name or service not known: [client 144.76.19.72:62350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:18.311355 2026] [ssl:error] [pid 3477011:tid 3477011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:18.365640 2026] [security2:error] [pid 3477054:tid 3477054] [client 43.153.9.106:28725] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPzjfKgmFfm50A8yA6IgAAAAQ"]
[Thu Jul 30 14:21:18.365692 2026] [security2:error] [pid 3477054:tid 3477054] [client 43.153.9.106:28725] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtPzjfKgmFfm50A8yA6IgAAAAQ"]
[Thu Jul 30 14:21:18.365941 2026] [security2:error] [pid 3477054:tid 3477054] [client 43.153.9.106:28725] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtPzjfKgmFfm50A8yA6IgAAAAQ"]
[Thu Jul 30 14:21:18.578126 2026] [ssl:error] [pid 3477147:tid 3477147] (70014)End of file found: [client 216.73.216.199:5963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:18.726639 2026] [access_compat:error] [pid 3474439:tid 3474439] [client 191.232.199.39:25278] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/abcd.php
[Thu Jul 30 14:21:18.726984 2026] [core:error] [pid 3474439:tid 3474439] [client 191.232.199.39:25278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:19.315715 2026] [access_compat:error] [pid 3477011:tid 3477011] [client 103.59.153.118:55767] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:19.732613 2026] [access_compat:error] [pid 3477146:tid 3477146] [client 191.232.199.39:24856] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/x.php
[Thu Jul 30 14:21:19.732954 2026] [core:error] [pid 3477146:tid 3477146] [client 191.232.199.39:24856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:19.751844 2026] [security2:error] [pid 3477451:tid 3477451] [client 43.164.133.138:36388] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtPz0rWfwp52JPsTVDDhAAAABs"], referer: http://beechhouseselfcatering.co.uk
[Thu Jul 30 14:21:20.268511 2026] [ssl:error] [pid 3465575:tid 3465575] (70014)End of file found: [client 216.73.216.199:59962] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:20.653603 2026] [core:error] [pid 3471213:tid 3471213] [client 191.232.199.39:24876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:20.653639 2026] [core:error] [pid 3471213:tid 3471213] [client 191.232.199.39:24876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:20.762137 2026] [ssl:error] [pid 3477395:tid 3477395] (70014)End of file found: [client 216.73.216.199:51583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:21.170837 2026] [ssl:error] [pid 3477146:tid 3477146] (70014)End of file found: [client 216.73.216.199:63488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:21.366510 2026] [ssl:error] [pid 3477499:tid 3477499] (EAI 2)Name or service not known: [client 144.76.19.72:22252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:21.366541 2026] [ssl:error] [pid 3477499:tid 3477499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:21.419667 2026] [ssl:error] [pid 3477539:tid 3477539] (EAI 2)Name or service not known: [client 144.76.19.72:22266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:21.419705 2026] [ssl:error] [pid 3477539:tid 3477539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:21.962078 2026] [access_compat:error] [pid 3471213:tid 3471213] [client 74.248.33.8:24864] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bthil.php
[Thu Jul 30 14:21:21.962407 2026] [core:error] [pid 3471213:tid 3471213] [client 74.248.33.8:24864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:22.466608 2026] [access_compat:error] [pid 3471164:tid 3471164] [client 191.232.199.39:25094] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-access.php
[Thu Jul 30 14:21:22.466944 2026] [core:error] [pid 3471164:tid 3471164] [client 191.232.199.39:25094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:23.490265 2026] [security2:error] [pid 3474448:tid 3474448] [client 43.153.9.106:34759] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtP0-pO35JreiO-vLBovQAAAEU"]
[Thu Jul 30 14:21:23.490313 2026] [security2:error] [pid 3474448:tid 3474448] [client 43.153.9.106:34759] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtP0-pO35JreiO-vLBovQAAAEU"]
[Thu Jul 30 14:21:23.490593 2026] [security2:error] [pid 3474448:tid 3474448] [client 43.153.9.106:34759] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtP0-pO35JreiO-vLBovQAAAEU"]
[Thu Jul 30 14:21:23.508563 2026] [core:error] [pid 3473859:tid 3473859] [client 191.232.199.39:24881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:23.508586 2026] [core:error] [pid 3473859:tid 3473859] [client 191.232.199.39:24881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:23.903259 2026] [cgi:error] [pid 3477093:tid 3477093] [client 74.248.33.8:24847] AH02812: stderr from /home/thepryor/public_html/dev2/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:21:23.903742 2026] [core:error] [pid 3477093:tid 3477093] [client 74.248.33.8:24847] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:24.260630 2026] [access_compat:error] [pid 3445216:tid 3445216] [client 74.248.33.8:14880] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/x.php
[Thu Jul 30 14:21:24.260995 2026] [core:error] [pid 3445216:tid 3445216] [client 74.248.33.8:14880] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:24.471896 2026] [ssl:error] [pid 3473859:tid 3473859] (EAI 2)Name or service not known: [client 144.76.19.72:22278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:24.471920 2026] [ssl:error] [pid 3473859:tid 3473859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:24.499715 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 191.232.199.39:24868] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/filemanager.php
[Thu Jul 30 14:21:24.500031 2026] [core:error] [pid 3477500:tid 3477500] [client 191.232.199.39:24868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:24.527704 2026] [ssl:error] [pid 3474077:tid 3474077] (EAI 2)Name or service not known: [client 144.76.19.72:22292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:24.527736 2026] [ssl:error] [pid 3474077:tid 3474077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:25.206519 2026] [security2:error] [pid 3474448:tid 3474448] [client 43.156.36.169:38136] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "innerspacer.co.uk"] [uri "/"] [unique_id "amtP1epO35JreiO-vLBovwAAAEU"]
[Thu Jul 30 14:21:25.398717 2026] [core:error] [pid 3474077:tid 3474077] [client 74.248.33.8:13888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:25.398747 2026] [core:error] [pid 3474077:tid 3474077] [client 74.248.33.8:13888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:25.554770 2026] [core:error] [pid 3477011:tid 3477011] [client 191.232.199.39:25271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:25.554796 2026] [core:error] [pid 3477011:tid 3477011] [client 191.232.199.39:25271] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:26.432602 2026] [access_compat:error] [pid 3474077:tid 3474077] [client 191.232.199.39:25231] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/bthil.php
[Thu Jul 30 14:21:26.432980 2026] [core:error] [pid 3474077:tid 3474077] [client 191.232.199.39:25231] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:27.581637 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:22300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:27.581673 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:27.596331 2026] [access_compat:error] [pid 3477537:tid 3477537] [client 191.232.199.39:25315] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/xmlrpc.php
[Thu Jul 30 14:21:27.596690 2026] [core:error] [pid 3477537:tid 3477537] [client 191.232.199.39:25315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:27.614690 2026] [authz_core:error] [pid 3477395:tid 3477395] [client 66.249.66.33:48911] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:21:27.617338 2026] [authz_core:error] [pid 3477395:tid 3477395] [client 66.249.66.33:48911] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:21:27.635467 2026] [ssl:error] [pid 3477451:tid 3477451] (EAI 2)Name or service not known: [client 144.76.19.72:22306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:27.635489 2026] [ssl:error] [pid 3477451:tid 3477451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:28.519101 2026] [core:error] [pid 3477499:tid 3477499] [client 191.232.199.39:25258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:28.519132 2026] [core:error] [pid 3477499:tid 3477499] [client 191.232.199.39:25258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:28.557595 2026] [access_compat:error] [pid 3477537:tid 3477537] [client 74.248.33.8:13891] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aaa.php
[Thu Jul 30 14:21:28.557926 2026] [core:error] [pid 3477537:tid 3477537] [client 74.248.33.8:13891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:29.939348 2026] [access_compat:error] [pid 3477539:tid 3477539] [client 191.232.199.39:25301] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/cv.php
[Thu Jul 30 14:21:29.939680 2026] [core:error] [pid 3477539:tid 3477539] [client 191.232.199.39:25301] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:29.971844 2026] [access_compat:error] [pid 3477537:tid 3477537] [client 103.59.153.118:56251] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:29.991012 2026] [security2:error] [pid 3477497:tid 3477497] [client 49.51.141.76:56240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amtP2bh_-JBYTMk7RknfhgAAACE"]
[Thu Jul 30 14:21:30.602885 2026] [core:error] [pid 3477091:tid 3477091] [client 191.232.199.39:25331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:30.602911 2026] [core:error] [pid 3477091:tid 3477091] [client 191.232.199.39:25331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:30.689549 2026] [ssl:error] [pid 3467764:tid 3467764] (EAI 2)Name or service not known: [client 144.76.19.72:41326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:30.689584 2026] [ssl:error] [pid 3467764:tid 3467764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:30.746614 2026] [ssl:error] [pid 3477497:tid 3477497] (EAI 2)Name or service not known: [client 144.76.19.72:41342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:30.746654 2026] [ssl:error] [pid 3477497:tid 3477497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:31.455941 2026] [access_compat:error] [pid 3477147:tid 3477147] [client 191.232.199.39:25288] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/css.php
[Thu Jul 30 14:21:31.456293 2026] [core:error] [pid 3477147:tid 3477147] [client 191.232.199.39:25288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:31.623162 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 74.248.33.8:50022] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/abcd.php
[Thu Jul 30 14:21:31.623518 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:50022] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:32.038348 2026] [ssl:error] [pid 3445216:tid 3445216] (70014)End of file found: [client 216.73.216.199:53393] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:32.334137 2026] [ssl:error] [pid 3471164:tid 3471164] (70014)End of file found: [client 216.73.216.199:33803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:32.555293 2026] [core:error] [pid 3477091:tid 3477091] [client 191.232.199.39:24843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:32.555320 2026] [core:error] [pid 3477091:tid 3477091] [client 191.232.199.39:24843] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:32.937471 2026] [ssl:error] [pid 3474395:tid 3474395] (70014)End of file found: [client 216.73.216.199:10045] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:32.952585 2026] [access_compat:error] [pid 3465575:tid 3465575] [client 74.248.33.8:8950] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-good.php
[Thu Jul 30 14:21:32.952938 2026] [core:error] [pid 3465575:tid 3465575] [client 74.248.33.8:8950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:33.023648 2026] [security2:error] [pid 3474318:tid 3474318] [client 185.191.171.15:28916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/craigslist-austin-cars-by-owner"] [unique_id "amtP3XrYB17i5VdOg8DGDgAAACQ"]
[Thu Jul 30 14:21:33.379642 2026] [access_compat:error] [pid 3477395:tid 3477395] [client 191.232.199.39:25244] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/core.php
[Thu Jul 30 14:21:33.380051 2026] [core:error] [pid 3477395:tid 3477395] [client 191.232.199.39:25244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:33.586534 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 74.248.33.8:8947] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/simple.php
[Thu Jul 30 14:21:33.586898 2026] [core:error] [pid 3477500:tid 3477500] [client 74.248.33.8:8947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:33.802422 2026] [ssl:error] [pid 3477539:tid 3477539] (EAI 2)Name or service not known: [client 144.76.19.72:41358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:33.802466 2026] [ssl:error] [pid 3477539:tid 3477539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:33.855207 2026] [ssl:error] [pid 3474318:tid 3474318] (EAI 2)Name or service not known: [client 144.76.19.72:41370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:33.855253 2026] [ssl:error] [pid 3474318:tid 3474318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:34.287238 2026] [core:error] [pid 3479987:tid 3479987] [client 74.248.33.8:14891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:34.287284 2026] [core:error] [pid 3479987:tid 3479987] [client 74.248.33.8:14891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:34.881850 2026] [access_compat:error] [pid 3474441:tid 3474441] [client 74.248.33.8:22551] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/u.php
[Thu Jul 30 14:21:34.882205 2026] [core:error] [pid 3474441:tid 3474441] [client 74.248.33.8:22551] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:35.518757 2026] [core:error] [pid 3477497:tid 3477497] [client 74.248.33.8:8667] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:35.518786 2026] [core:error] [pid 3477497:tid 3477497] [client 74.248.33.8:8667] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:35.679404 2026] [authz_core:error] [pid 3477536:tid 3477536] [client 20.63.98.115:1390] AH01630: client denied by server configuration: /home/junglej/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 14:21:36.126215 2026] [security2:error] [pid 3477540:tid 3477540] [client 85.208.96.203:30140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtP4CD_oloq6Tle0BHpOAAAADQ"]
[Thu Jul 30 14:21:36.329697 2026] [core:error] [pid 3473859:tid 3473859] [client 191.232.199.39:24844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:36.329729 2026] [core:error] [pid 3473859:tid 3473859] [client 191.232.199.39:24844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:36.708591 2026] [access_compat:error] [pid 3477497:tid 3477497] [client 103.59.153.118:56544] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:36.837522 2026] [security2:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clientseodata.com"] [uri "/"] [unique_id "amtP4OhN6rIXdWv3Qn5giAAAACU"]
[Thu Jul 30 14:21:36.838802 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 14:21:36.838898 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 14:21:36.839114 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 14:21:36.839291 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 14:21:36.839357 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 14:21:36.839523 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 14:21:36.839676 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 14:21:36.839741 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 14:21:36.839898 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 14:21:36.840078 2026] [authz_core:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 14:21:36.840138 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 14:21:36.840205 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 14:21:36.840366 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 14:21:36.840533 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 14:21:36.840598 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 14:21:36.840754 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 14:21:36.840901 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 14:21:36.840965 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 14:21:36.841167 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 14:21:36.841963 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 14:21:36.842044 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 14:21:36.842245 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 14:21:36.842422 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 14:21:36.842497 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 14:21:36.842654 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 14:21:36.843186 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 14:21:36.843255 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 14:21:36.843412 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 14:21:36.843579 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 14:21:36.843643 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 14:21:36.843798 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 43.133.60.94:37828] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 14:21:36.911636 2026] [ssl:error] [pid 3474133:tid 3474133] (EAI 2)Name or service not known: [client 144.76.19.72:41382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:36.911669 2026] [ssl:error] [pid 3474133:tid 3474133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:36.967227 2026] [ssl:error] [pid 3477537:tid 3477537] (EAI 2)Name or service not known: [client 144.76.19.72:41394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:36.967264 2026] [ssl:error] [pid 3477537:tid 3477537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:37.049443 2026] [core:error] [pid 3477395:tid 3477395] [client 191.232.199.39:24854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:37.049469 2026] [core:error] [pid 3477395:tid 3477395] [client 191.232.199.39:24854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:37.175784 2026] [security2:error] [pid 3474448:tid 3474448] [client 85.208.96.209:12754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/pages/code-of-conduct.php"] [unique_id "amtP4epO35JreiO-vLBowwAAAEU"]
[Thu Jul 30 14:21:37.648531 2026] [access_compat:error] [pid 3477092:tid 3477092] [client 74.248.33.8:39123] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/h.php
[Thu Jul 30 14:21:37.648962 2026] [core:error] [pid 3477092:tid 3477092] [client 74.248.33.8:39123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:37.927193 2026] [core:error] [pid 3473859:tid 3473859] [client 191.232.199.39:25247] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:37.927218 2026] [core:error] [pid 3473859:tid 3473859] [client 191.232.199.39:25247] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:38.084990 2026] [ssl:error] [pid 3477395:tid 3477395] (70014)End of file found: [client 216.73.216.199:55482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:38.417984 2026] [access_compat:error] [pid 3474318:tid 3474318] [client 74.248.33.8:8669] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ms-edit.php
[Thu Jul 30 14:21:38.418357 2026] [core:error] [pid 3474318:tid 3474318] [client 74.248.33.8:8669] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:38.599902 2026] [ssl:error] [pid 3477498:tid 3477498] (70014)End of file found: [client 216.73.216.199:28173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:38.861505 2026] [access_compat:error] [pid 3471164:tid 3471164] [client 191.232.199.39:25306] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/ahax.php
[Thu Jul 30 14:21:38.861832 2026] [core:error] [pid 3471164:tid 3471164] [client 191.232.199.39:25306] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:39.102234 2026] [ssl:error] [pid 3477092:tid 3477092] (70014)End of file found: [client 216.73.216.199:50019] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:39.145518 2026] [access_compat:error] [pid 3474318:tid 3474318] [client 74.248.33.8:39113] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a7.php
[Thu Jul 30 14:21:39.145845 2026] [core:error] [pid 3474318:tid 3474318] [client 74.248.33.8:39113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:39.949992 2026] [access_compat:error] [pid 3467764:tid 3467764] [client 191.232.199.39:25262] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/zoom1.php
[Thu Jul 30 14:21:39.950343 2026] [core:error] [pid 3467764:tid 3467764] [client 191.232.199.39:25262] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:40.022858 2026] [ssl:error] [pid 3471213:tid 3471213] (EAI 2)Name or service not known: [client 144.76.19.72:36844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:40.022885 2026] [ssl:error] [pid 3471213:tid 3471213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:40.074384 2026] [ssl:error] [pid 3474391:tid 3474391] (EAI 2)Name or service not known: [client 144.76.19.72:36850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:40.074458 2026] [ssl:error] [pid 3474391:tid 3474391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:40.637741 2026] [authz_core:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 14:21:40.697271 2026] [access_compat:error] [pid 3468251:tid 3468251] [client 103.59.153.118:56741] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:40.875934 2026] [authz_core:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log, referer: https://mail.spampman.co.uk:443/thestringman.co.uk
[Thu Jul 30 14:21:41.257786 2026] [access_compat:error] [pid 3467764:tid 3467764] [client 74.248.33.8:22577] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/manager.php
[Thu Jul 30 14:21:41.258136 2026] [core:error] [pid 3467764:tid 3467764] [client 74.248.33.8:22577] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:41.664848 2026] [security2:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.spampman.co.uk"] [uri "/spamp.com"] [unique_id "amtP5ZrRCg_OX09OlWoPAgAAAEc"]
[Thu Jul 30 14:21:41.665131 2026] [security2:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.spampman.co.uk"] [uri "/spamp.com"] [unique_id "amtP5ZrRCg_OX09OlWoPAgAAAEc"]
[Thu Jul 30 14:21:41.665367 2026] [security2:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.spampman.co.uk"] [uri "/spamp.com"] [unique_id "amtP5ZrRCg_OX09OlWoPAgAAAEc"]
[Thu Jul 30 14:21:41.724463 2026] [access_compat:error] [pid 3467764:tid 3467764] [client 45.158.164.139:49596] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:21:41.920810 2026] [cgi:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://mail.spampman.co.uk:443/cgi-bin
[Thu Jul 30 14:21:42.070520 2026] [access_compat:error] [pid 3477146:tid 3477146] [client 74.248.33.8:8226] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/w1.php
[Thu Jul 30 14:21:42.070841 2026] [core:error] [pid 3477146:tid 3477146] [client 74.248.33.8:8226] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:42.134672 2026] [access_compat:error] [pid 3477091:tid 3477091] [client 191.232.199.39:25302] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/txets.php
[Thu Jul 30 14:21:42.135014 2026] [core:error] [pid 3477091:tid 3477091] [client 191.232.199.39:25302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:42.353241 2026] [core:error] [pid 3474444:tid 3474444] [client 74.248.33.8:18549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:42.353269 2026] [core:error] [pid 3474444:tid 3474444] [client 74.248.33.8:18549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:42.676933 2026] [core:error] [pid 3474444:tid 3474444] [client 74.248.33.8:39109] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:42.676962 2026] [core:error] [pid 3474444:tid 3474444] [client 74.248.33.8:39109] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:43.113051 2026] [authz_core:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log, referer: https://mail.spampman.co.uk:443/lisichka.co.uk
[Thu Jul 30 14:21:43.113919 2026] [authz_core:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini, referer: https://mail.spampman.co.uk:443/lisichka.co.uk
[Thu Jul 30 14:21:43.129382 2026] [ssl:error] [pid 3474391:tid 3474391] (EAI 2)Name or service not known: [client 144.76.19.72:36866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:43.129406 2026] [ssl:error] [pid 3474391:tid 3474391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:43.182334 2026] [ssl:error] [pid 3477091:tid 3477091] (EAI 2)Name or service not known: [client 144.76.19.72:36874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:43.182362 2026] [ssl:error] [pid 3477091:tid 3477091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:43.652251 2026] [ssl:error] [pid 3474441:tid 3474441] (70014)End of file found: [client 216.73.216.199:25715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:43.725006 2026] [core:error] [pid 3467764:tid 3467764] [client 191.232.199.39:25340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:43.725030 2026] [core:error] [pid 3467764:tid 3467764] [client 191.232.199.39:25340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:43.813861 2026] [security2:error] [pid 3474391:tid 3474391] [client 114.119.158.38:25853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18,103/request_format~html"] [unique_id "amtP55kaku4YSgVs5htskgAAADE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18/request_format~html
[Thu Jul 30 14:21:43.938938 2026] [ssl:error] [pid 3477395:tid 3477395] (70014)End of file found: [client 216.73.216.199:1442] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:44.525276 2026] [ssl:error] [pid 3479987:tid 3479987] (70014)End of file found: [client 216.73.216.199:2708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:44.951862 2026] [security2:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.spampman.co.uk"] [uri "/eraten.com"] [unique_id "amtP6JrRCg_OX09OlWoPDwAAAEc"]
[Thu Jul 30 14:21:44.952133 2026] [security2:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.spampman.co.uk"] [uri "/eraten.com"] [unique_id "amtP6JrRCg_OX09OlWoPDwAAAEc"]
[Thu Jul 30 14:21:44.952367 2026] [security2:error] [pid 3445216:tid 3445216] [client 167.94.146.59:56684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.spampman.co.uk"] [uri "/eraten.com"] [unique_id "amtP6JrRCg_OX09OlWoPDwAAAEc"]
[Thu Jul 30 14:21:45.034224 2026] [security2:error] [pid 3477537:tid 3477537] [client 114.119.158.38:25857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18,103/request_format~html"] [unique_id "amtP6ecsvl1gqFjopfW2jgAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14,18/request_format~html
[Thu Jul 30 14:21:45.040553 2026] [access_compat:error] [pid 3477498:tid 3477498] [client 74.248.33.8:8674] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/default.php
[Thu Jul 30 14:21:45.040902 2026] [core:error] [pid 3477498:tid 3477498] [client 74.248.33.8:8674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:45.378048 2026] [core:error] [pid 3478076:tid 3478076] [client 191.232.199.39:25275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:45.378086 2026] [core:error] [pid 3478076:tid 3478076] [client 191.232.199.39:25275] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:45.399310 2026] [cgi:error] [pid 3477498:tid 3477498] [client 194.9.110.170:8305] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:21:45.725420 2026] [access_compat:error] [pid 3471213:tid 3471213] [client 74.248.33.8:18499] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/i.php
[Thu Jul 30 14:21:45.725811 2026] [core:error] [pid 3471213:tid 3471213] [client 74.248.33.8:18499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:46.238863 2026] [ssl:error] [pid 3480462:tid 3480462] (EAI 2)Name or service not known: [client 144.76.19.72:36890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:46.238903 2026] [ssl:error] [pid 3480462:tid 3480462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:46.296596 2026] [ssl:error] [pid 3474444:tid 3474444] (EAI 2)Name or service not known: [client 144.76.19.72:36894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:46.296626 2026] [ssl:error] [pid 3474444:tid 3474444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:46.882481 2026] [core:error] [pid 3471213:tid 3471213] [client 74.248.33.8:39132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:46.882509 2026] [core:error] [pid 3471213:tid 3471213] [client 74.248.33.8:39132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:47.063924 2026] [security2:error] [pid 3468251:tid 3468251] [client 100.28.133.214:56841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/wp/v2/media/40205"] [unique_id "amtP60vgmL4R49zm5-6XGwAAAB0"]
[Thu Jul 30 14:21:47.337680 2026] [access_compat:error] [pid 3477092:tid 3477092] [client 103.59.153.118:57039] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:47.554666 2026] [core:error] [pid 3465575:tid 3465575] [client 191.232.199.39:24835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:47.554693 2026] [core:error] [pid 3465575:tid 3465575] [client 191.232.199.39:24835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:48.520468 2026] [core:error] [pid 3472867:tid 3472867] [client 191.232.199.39:25233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:48.520494 2026] [core:error] [pid 3472867:tid 3472867] [client 191.232.199.39:25233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:49.056989 2026] [core:error] [pid 3477499:tid 3477499] (13)Permission denied: [client 216.73.216.199:8327] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory145/subsystem/uevent
[Thu Jul 30 14:21:49.350343 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:36902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:49.350368 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:49.400305 2026] [core:error] [pid 3468251:tid 3468251] [client 74.248.33.8:8699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:49.400329 2026] [core:error] [pid 3468251:tid 3468251] [client 74.248.33.8:8699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:49.403519 2026] [ssl:error] [pid 3480573:tid 3480573] (EAI 2)Name or service not known: [client 144.76.19.72:36914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:49.403553 2026] [ssl:error] [pid 3480573:tid 3480573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:49.454627 2026] [ssl:error] [pid 3474391:tid 3474391] (70014)End of file found: [client 216.73.216.199:47628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:49.759283 2026] [ssl:error] [pid 3477499:tid 3477499] (70014)End of file found: [client 216.73.216.199:8327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:49.840737 2026] [core:error] [pid 3474453:tid 3474453] [client 191.232.199.39:25232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:49.840762 2026] [core:error] [pid 3474453:tid 3474453] [client 191.232.199.39:25232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:50.715313 2026] [access_compat:error] [pid 3480574:tid 3480574] [client 191.232.199.39:25147] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/radio.php
[Thu Jul 30 14:21:50.715689 2026] [core:error] [pid 3480574:tid 3480574] [client 191.232.199.39:25147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:50.958833 2026] [core:error] [pid 3477535:tid 3477535] (13)Permission denied: [client 216.73.216.199:47004] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty43/subsystem/ttyS1/flags
[Thu Jul 30 14:21:51.374835 2026] [access_compat:error] [pid 3474318:tid 3474318] [client 103.59.153.118:57234] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:21:51.866457 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:47004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:52.116815 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:27381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:52.116840 2026] [core:error] [pid 3444591:tid 3444591] [client 74.248.33.8:27381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:52.482109 2026] [ssl:error] [pid 3477534:tid 3477534] (EAI 2)Name or service not known: [client 144.76.19.72:46786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:52.482144 2026] [ssl:error] [pid 3477534:tid 3477534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:52.538021 2026] [ssl:error] [pid 3477498:tid 3477498] (EAI 2)Name or service not known: [client 144.76.19.72:46792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:52.538059 2026] [ssl:error] [pid 3477498:tid 3477498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:52.868015 2026] [core:error] [pid 3472867:tid 3472867] [client 191.232.199.39:24855] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:52.868042 2026] [core:error] [pid 3472867:tid 3472867] [client 191.232.199.39:24855] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:53.647451 2026] [access_compat:error] [pid 3477536:tid 3477536] [client 74.248.33.8:39147] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/gecko-new.php
[Thu Jul 30 14:21:53.647773 2026] [core:error] [pid 3477536:tid 3477536] [client 74.248.33.8:39147] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:53.652237 2026] [access_compat:error] [pid 3473859:tid 3473859] [client 191.232.199.39:25323] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/t.php
[Thu Jul 30 14:21:53.652551 2026] [core:error] [pid 3473859:tid 3473859] [client 191.232.199.39:25323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:54.624327 2026] [access_compat:error] [pid 3477143:tid 3477143] [client 74.248.33.8:27356] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/NewFile.php
[Thu Jul 30 14:21:54.624672 2026] [core:error] [pid 3477143:tid 3477143] [client 74.248.33.8:27356] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:54.769920 2026] [access_compat:error] [pid 3477533:tid 3477533] [client 191.232.199.39:25319] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/i.php
[Thu Jul 30 14:21:54.770262 2026] [core:error] [pid 3477533:tid 3477533] [client 191.232.199.39:25319] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:55.593208 2026] [ssl:error] [pid 3477144:tid 3477144] (EAI 2)Name or service not known: [client 144.76.19.72:46796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:55.593242 2026] [ssl:error] [pid 3477144:tid 3477144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:55.595756 2026] [access_compat:error] [pid 3477147:tid 3477147] [client 74.248.33.8:39134] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-Blogs.php
[Thu Jul 30 14:21:55.596110 2026] [core:error] [pid 3477147:tid 3477147] [client 74.248.33.8:39134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:55.647877 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:46804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:55.647907 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:55.781756 2026] [ssl:error] [pid 3474448:tid 3474448] (70014)End of file found: [client 216.73.216.199:20526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:56.002188 2026] [access_compat:error] [pid 3477143:tid 3477143] [client 191.232.199.39:25283] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/deepseek_d.php
[Thu Jul 30 14:21:56.002541 2026] [core:error] [pid 3477143:tid 3477143] [client 191.232.199.39:25283] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:56.527623 2026] [core:error] [pid 3477142:tid 3477142] [client 74.248.33.8:22559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:56.527650 2026] [core:error] [pid 3477142:tid 3477142] [client 74.248.33.8:22559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:56.859607 2026] [core:error] [pid 3477092:tid 3477092] [client 191.232.199.39:24971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:56.859640 2026] [core:error] [pid 3477092:tid 3477092] [client 191.232.199.39:24971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:56.985667 2026] [ssl:error] [pid 3477451:tid 3477451] (70014)End of file found: [client 216.73.216.199:61461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:57.007186 2026] [core:error] [pid 3477499:tid 3477499] [client 74.248.33.8:27354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:57.007208 2026] [core:error] [pid 3477499:tid 3477499] [client 74.248.33.8:27354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:57.201208 2026] [access_compat:error] [pid 3477537:tid 3477537] [client 74.248.33.8:22536] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/cv.php
[Thu Jul 30 14:21:57.201553 2026] [core:error] [pid 3477537:tid 3477537] [client 74.248.33.8:22536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:57.479082 2026] [ssl:error] [pid 3477142:tid 3477142] (70014)End of file found: [client 216.73.216.199:56003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:21:57.660750 2026] [access_compat:error] [pid 3474391:tid 3474391] [client 191.232.199.39:25326] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/.well-known/acme-challenge/file.php
[Thu Jul 30 14:21:57.661112 2026] [core:error] [pid 3474391:tid 3474391] [client 191.232.199.39:25326] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:58.251737 2026] [core:error] [pid 3477535:tid 3477535] [client 74.248.33.8:8755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:58.251765 2026] [core:error] [pid 3477535:tid 3477535] [client 74.248.33.8:8755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:58.705656 2026] [ssl:error] [pid 3474391:tid 3474391] (EAI 2)Name or service not known: [client 144.76.19.72:46814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:58.705680 2026] [ssl:error] [pid 3474391:tid 3474391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:58.760329 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:46828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:21:58.760358 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:21:59.060223 2026] [core:error] [pid 3465575:tid 3465575] [client 191.232.199.39:25228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:59.060252 2026] [core:error] [pid 3465575:tid 3465575] [client 191.232.199.39:25228] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:59.178445 2026] [core:error] [pid 3474395:tid 3474395] [client 74.248.33.8:20265] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:59.178468 2026] [core:error] [pid 3474395:tid 3474395] [client 74.248.33.8:20265] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:21:59.484613 2026] [security2:error] [pid 3477534:tid 3477534] [client 80.94.92.167:55914] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "iapib.com"] [uri "/.svn/wc.db"] [unique_id "amtP90l3EpvjZwf_yjWnXAAAACc"]
[Thu Jul 30 14:21:59.484763 2026] [security2:error] [pid 3477534:tid 3477534] [client 80.94.92.167:55914] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "iapib.com"] [uri "/.svn/wc.db"] [unique_id "amtP90l3EpvjZwf_yjWnXAAAACc"]
[Thu Jul 30 14:21:59.484910 2026] [security2:error] [pid 3477534:tid 3477534] [client 80.94.92.167:55914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iapib.com"] [uri "/.svn/wc.db"] [unique_id "amtP90l3EpvjZwf_yjWnXAAAACc"]
[Thu Jul 30 14:21:59.485142 2026] [security2:error] [pid 3477534:tid 3477534] [client 80.94.92.167:55914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "iapib.com"] [uri "/.svn/wc.db"] [unique_id "amtP90l3EpvjZwf_yjWnXAAAACc"]
[Thu Jul 30 14:21:59.544653 2026] [access_compat:error] [pid 3474390:tid 3474390] [client 74.248.33.8:27379] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws83.php
[Thu Jul 30 14:21:59.544984 2026] [core:error] [pid 3474390:tid 3474390] [client 74.248.33.8:27379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:00.265372 2026] [core:error] [pid 3465575:tid 3465575] [client 191.232.199.39:24974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:00.265401 2026] [core:error] [pid 3465575:tid 3465575] [client 191.232.199.39:24974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:00.969084 2026] [access_compat:error] [pid 3474391:tid 3474391] [client 74.248.33.8:8220] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/atex1.php
[Thu Jul 30 14:22:00.969411 2026] [core:error] [pid 3474391:tid 3474391] [client 74.248.33.8:8220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:01.104606 2026] [ssl:error] [pid 3474441:tid 3474441] (70014)End of file found: [client 216.73.216.199:13970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:01.437249 2026] [core:error] [pid 3474318:tid 3474318] [client 191.232.199.39:25013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:01.437275 2026] [core:error] [pid 3474318:tid 3474318] [client 191.232.199.39:25013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:01.621558 2026] [security2:error] [pid 3474452:tid 3474452] [client 101.32.49.171:34152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amtP-ZxZ5_-0ppNehs3P_QAAAEo"]
[Thu Jul 30 14:22:01.824622 2026] [ssl:error] [pid 3477534:tid 3477534] (EAI 2)Name or service not known: [client 144.76.19.72:52810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:01.824659 2026] [ssl:error] [pid 3477534:tid 3477534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:01.881491 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:52826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:01.881525 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:02.063606 2026] [access_compat:error] [pid 3480574:tid 3480574] [client 103.59.153.118:57719] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:02.226493 2026] [access_compat:error] [pid 3465575:tid 3465575] [client 191.232.199.39:24723] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/bgymj.php
[Thu Jul 30 14:22:02.226818 2026] [core:error] [pid 3465575:tid 3465575] [client 191.232.199.39:24723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:03.036533 2026] [ssl:error] [pid 3474318:tid 3474318] (70014)End of file found: [client 216.73.216.199:38703] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:03.489704 2026] [core:error] [pid 3477146:tid 3477146] [client 191.232.199.39:24726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:03.489734 2026] [core:error] [pid 3477146:tid 3477146] [client 191.232.199.39:24726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:03.561267 2026] [access_compat:error] [pid 3480462:tid 3480462] [client 74.248.33.8:30045] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/class-t.api.php
[Thu Jul 30 14:22:03.561603 2026] [core:error] [pid 3480462:tid 3480462] [client 74.248.33.8:30045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:03.638976 2026] [ssl:error] [pid 3477536:tid 3477536] (70014)End of file found: [client 216.73.216.199:2133] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:03.776989 2026] [security2:error] [pid 3474077:tid 3474077] [client 94.154.43.183:19604] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.glottalstop.ditchfest.com"] [uri "/.env"] [unique_id "amtP-4FV1Eo0GHvc-nEUkwAAABU"]
[Thu Jul 30 14:22:03.777203 2026] [security2:error] [pid 3474077:tid 3474077] [client 94.154.43.183:19604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.glottalstop.ditchfest.com"] [uri "/.env"] [unique_id "amtP-4FV1Eo0GHvc-nEUkwAAABU"]
[Thu Jul 30 14:22:03.777416 2026] [security2:error] [pid 3474077:tid 3474077] [client 94.154.43.183:19604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.glottalstop.ditchfest.com"] [uri "/.env"] [unique_id "amtP-4FV1Eo0GHvc-nEUkwAAABU"]
[Thu Jul 30 14:22:04.445812 2026] [core:error] [pid 3477533:tid 3477533] [client 191.232.199.39:25001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:04.445842 2026] [core:error] [pid 3477533:tid 3477533] [client 191.232.199.39:25001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:04.577264 2026] [security2:error] [pid 3480462:tid 3480462] [client 43.165.167.72:35854] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "lucynaden.com"] [uri "/"] [unique_id "amtP_JqDENz_zobS5TTa0AAAAAo"]
[Thu Jul 30 14:22:04.869052 2026] [security2:error] [pid 3477535:tid 3477535] [client 94.154.43.179:60056] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.naomiwinter.dbstart.co.uk"] [uri "/.env"] [unique_id "amtP_L3_9qQy-oYyKARdZwAAACo"]
[Thu Jul 30 14:22:04.869276 2026] [security2:error] [pid 3477535:tid 3477535] [client 94.154.43.179:60056] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.naomiwinter.dbstart.co.uk"] [uri "/.env"] [unique_id "amtP_L3_9qQy-oYyKARdZwAAACo"]
[Thu Jul 30 14:22:04.869384 2026] [security2:error] [pid 3477535:tid 3477535] [client 94.154.43.179:60056] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.naomiwinter.dbstart.co.uk"] [uri "/.env"] [unique_id "amtP_L3_9qQy-oYyKARdZwAAACo"]
[Thu Jul 30 14:22:04.979193 2026] [ssl:error] [pid 3473859:tid 3473859] (EAI 2)Name or service not known: [client 144.76.19.72:52838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:04.979221 2026] [ssl:error] [pid 3473859:tid 3473859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:05.035342 2026] [ssl:error] [pid 3477499:tid 3477499] (EAI 2)Name or service not known: [client 144.76.19.72:52846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:05.035372 2026] [ssl:error] [pid 3477499:tid 3477499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:05.175322 2026] [access_compat:error] [pid 3477146:tid 3477146] [client 191.232.199.39:24760] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-load.php
[Thu Jul 30 14:22:05.175661 2026] [core:error] [pid 3477146:tid 3477146] [client 191.232.199.39:24760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:05.978671 2026] [core:error] [pid 3480462:tid 3480462] [client 191.232.199.39:24738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:05.978700 2026] [core:error] [pid 3480462:tid 3480462] [client 191.232.199.39:24738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:07.236234 2026] [access_compat:error] [pid 3477395:tid 3477395] [client 191.232.199.39:24704] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/a.php
[Thu Jul 30 14:22:07.236575 2026] [core:error] [pid 3477395:tid 3477395] [client 191.232.199.39:24704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:07.599303 2026] [access_compat:error] [pid 3477539:tid 3477539] [client 74.248.33.8:23061] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/w.php
[Thu Jul 30 14:22:07.599674 2026] [core:error] [pid 3477539:tid 3477539] [client 74.248.33.8:23061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:08.038647 2026] [access_compat:error] [pid 3477091:tid 3477091] [client 74.248.33.8:30019] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/archive.php
[Thu Jul 30 14:22:08.038968 2026] [core:error] [pid 3477091:tid 3477091] [client 74.248.33.8:30019] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:08.128607 2026] [ssl:error] [pid 3480331:tid 3480331] (EAI 2)Name or service not known: [client 144.76.19.72:52858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:08.128638 2026] [ssl:error] [pid 3480331:tid 3480331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:08.182389 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:52864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:08.182425 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:08.448575 2026] [access_compat:error] [pid 3479987:tid 3479987] [client 74.248.33.8:8729] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bless.php
[Thu Jul 30 14:22:08.448930 2026] [core:error] [pid 3479987:tid 3479987] [client 74.248.33.8:8729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:08.725246 2026] [access_compat:error] [pid 3477146:tid 3477146] [client 103.59.153.118:58012] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:08.751326 2026] [access_compat:error] [pid 3480462:tid 3480462] [client 191.232.199.39:24745] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/u.php
[Thu Jul 30 14:22:08.751655 2026] [core:error] [pid 3480462:tid 3480462] [client 191.232.199.39:24745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:09.253429 2026] [access_compat:error] [pid 3474318:tid 3474318] [client 45.158.164.139:48546] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:22:09.674810 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 191.232.199.39:24721] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/r.php
[Thu Jul 30 14:22:09.675173 2026] [core:error] [pid 3477535:tid 3477535] [client 191.232.199.39:24721] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:10.169508 2026] [core:error] [pid 3474453:tid 3474453] (13)Permission denied: [client 216.73.216.199:21116] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory150/subsystem/uevent
[Thu Jul 30 14:22:10.510008 2026] [access_compat:error] [pid 3477091:tid 3477091] [client 191.232.199.39:24754] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-blog.php
[Thu Jul 30 14:22:10.510355 2026] [core:error] [pid 3477091:tid 3477091] [client 191.232.199.39:24754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:10.772515 2026] [ssl:error] [pid 3474453:tid 3474453] (70014)End of file found: [client 216.73.216.199:21116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:11.069744 2026] [access_compat:error] [pid 3477395:tid 3477395] [client 74.248.33.8:23094] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sagax1.php
[Thu Jul 30 14:22:11.070109 2026] [core:error] [pid 3477395:tid 3477395] [client 74.248.33.8:23094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:11.236266 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:44548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:11.236296 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:11.267709 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:39947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:11.292516 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:44556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:11.292546 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:11.617769 2026] [access_compat:error] [pid 3474395:tid 3474395] [client 191.232.199.39:25334] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/xxx.php
[Thu Jul 30 14:22:11.618146 2026] [core:error] [pid 3474395:tid 3474395] [client 191.232.199.39:25334] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:11.680745 2026] [access_compat:error] [pid 3477498:tid 3477498] [client 74.248.33.8:30048] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wpc.php
[Thu Jul 30 14:22:11.681110 2026] [core:error] [pid 3477498:tid 3477498] [client 74.248.33.8:30048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:11.998481 2026] [ssl:error] [pid 3427797:tid 3427797] (70014)End of file found: [client 216.73.216.199:48921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:12.270659 2026] [access_compat:error] [pid 3477091:tid 3477091] [client 74.248.33.8:36458] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fone1.php
[Thu Jul 30 14:22:12.270977 2026] [core:error] [pid 3477091:tid 3477091] [client 74.248.33.8:36458] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:12.565573 2026] [core:error] [pid 3468877:tid 3468877] [client 191.232.199.39:24748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:12.565594 2026] [core:error] [pid 3468877:tid 3468877] [client 191.232.199.39:24748] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:12.672910 2026] [core:error] [pid 3477498:tid 3477498] [client 66.249.66.199:36487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:12.672937 2026] [core:error] [pid 3477498:tid 3477498] [client 66.249.66.199:36487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:12.746762 2026] [access_compat:error] [pid 3477540:tid 3477540] [client 103.59.153.118:58207] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:13.070376 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 74.248.33.8:22646] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ncx.php
[Thu Jul 30 14:22:13.070730 2026] [core:error] [pid 3477500:tid 3477500] [client 74.248.33.8:22646] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:13.813384 2026] [security2:error] [pid 3468251:tid 3468251] [client 129.226.157.90:51745] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQBUvgmL4R49zm5-6XJQAAAB0"]
[Thu Jul 30 14:22:13.813444 2026] [security2:error] [pid 3468251:tid 3468251] [client 129.226.157.90:51745] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQBUvgmL4R49zm5-6XJQAAAB0"]
[Thu Jul 30 14:22:13.813672 2026] [security2:error] [pid 3468251:tid 3468251] [client 129.226.157.90:51745] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQBUvgmL4R49zm5-6XJQAAAB0"]
[Thu Jul 30 14:22:13.976300 2026] [core:error] [pid 3474395:tid 3474395] [client 74.248.33.8:22642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:13.976330 2026] [core:error] [pid 3474395:tid 3474395] [client 74.248.33.8:22642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:14.345327 2026] [ssl:error] [pid 3477500:tid 3477500] (EAI 2)Name or service not known: [client 144.76.19.72:44566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:14.345363 2026] [ssl:error] [pid 3477500:tid 3477500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:14.400366 2026] [ssl:error] [pid 3468251:tid 3468251] (EAI 2)Name or service not known: [client 144.76.19.72:44578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:14.400421 2026] [ssl:error] [pid 3468251:tid 3468251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:15.020567 2026] [core:error] [pid 3480950:tid 3480950] [client 191.232.199.39:24720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:15.020598 2026] [core:error] [pid 3480950:tid 3480950] [client 191.232.199.39:24720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:15.999482 2026] [security2:error] [pid 3477144:tid 3477144] [client 43.133.189.185:64683] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQBzr3s2W0oOwhV6WAegAAABA"]
[Thu Jul 30 14:22:15.999534 2026] [security2:error] [pid 3477144:tid 3477144] [client 43.133.189.185:64683] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQBzr3s2W0oOwhV6WAegAAABA"]
[Thu Jul 30 14:22:15.999777 2026] [security2:error] [pid 3477144:tid 3477144] [client 43.133.189.185:64683] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQBzr3s2W0oOwhV6WAegAAABA"]
[Thu Jul 30 14:22:16.209955 2026] [access_compat:error] [pid 3474448:tid 3474448] [client 191.232.199.39:25294] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/tool.php
[Thu Jul 30 14:22:16.210508 2026] [core:error] [pid 3474448:tid 3474448] [client 191.232.199.39:25294] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:16.531147 2026] [ssl:error] [pid 3477497:tid 3477497] (70014)End of file found: [client 216.73.216.199:62858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:16.687040 2026] [access_compat:error] [pid 3477092:tid 3477092] [client 74.248.33.8:36432] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wso.php
[Thu Jul 30 14:22:16.687458 2026] [core:error] [pid 3477092:tid 3477092] [client 74.248.33.8:36432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:17.139045 2026] [access_compat:error] [pid 3468251:tid 3468251] [client 191.232.199.39:25307] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-content.php
[Thu Jul 30 14:22:17.139419 2026] [core:error] [pid 3468251:tid 3468251] [client 191.232.199.39:25307] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:17.455536 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:44588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:17.455570 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:17.471672 2026] [core:error] [pid 3477535:tid 3477535] [client 74.248.33.8:25123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:17.471697 2026] [core:error] [pid 3477535:tid 3477535] [client 74.248.33.8:25123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:17.509064 2026] [ssl:error] [pid 3477539:tid 3477539] (EAI 2)Name or service not known: [client 144.76.19.72:44602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:17.509105 2026] [ssl:error] [pid 3477539:tid 3477539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:17.657321 2026] [access_compat:error] [pid 3427797:tid 3427797] [client 74.248.33.8:36473] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/k.php
[Thu Jul 30 14:22:17.657765 2026] [core:error] [pid 3427797:tid 3427797] [client 74.248.33.8:36473] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:17.735270 2026] [ssl:error] [pid 3444591:tid 3444591] (70014)End of file found: [client 216.73.216.199:39453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:18.221328 2026] [ssl:error] [pid 3474444:tid 3474444] (70014)End of file found: [client 216.73.216.199:53560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:19.036968 2026] [access_compat:error] [pid 3479987:tid 3479987] [client 191.232.199.39:24836] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/k.php
[Thu Jul 30 14:22:19.037348 2026] [core:error] [pid 3479987:tid 3479987] [client 191.232.199.39:24836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:19.373991 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 103.59.153.118:58503] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:19.832525 2026] [security2:error] [pid 3477144:tid 3477144] [client 43.133.189.185:33095] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQCzr3s2W0oOwhV6WAfAAAABA"]
[Thu Jul 30 14:22:19.832590 2026] [security2:error] [pid 3477144:tid 3477144] [client 43.133.189.185:33095] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQCzr3s2W0oOwhV6WAfAAAABA"]
[Thu Jul 30 14:22:19.832824 2026] [security2:error] [pid 3477144:tid 3477144] [client 43.133.189.185:33095] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQCzr3s2W0oOwhV6WAfAAAABA"]
[Thu Jul 30 14:22:20.565363 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:36056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:20.565397 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:20.619860 2026] [ssl:error] [pid 3477537:tid 3477537] (EAI 2)Name or service not known: [client 144.76.19.72:36060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:20.619894 2026] [ssl:error] [pid 3477537:tid 3477537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:20.753447 2026] [access_compat:error] [pid 3477092:tid 3477092] [client 191.232.199.39:25332] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/root.php
[Thu Jul 30 14:22:20.753786 2026] [core:error] [pid 3477092:tid 3477092] [client 191.232.199.39:25332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:21.795260 2026] [access_compat:error] [pid 3477144:tid 3477144] [client 191.232.199.39:25225] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/ws.php
[Thu Jul 30 14:22:21.795632 2026] [core:error] [pid 3477144:tid 3477144] [client 191.232.199.39:25225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:21.807631 2026] [access_compat:error] [pid 3474452:tid 3474452] [client 74.248.33.8:23099] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-blink.php
[Thu Jul 30 14:22:21.807944 2026] [core:error] [pid 3474452:tid 3474452] [client 74.248.33.8:23099] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:22.622507 2026] [core:error] [pid 3477144:tid 3477144] [client 74.248.33.8:25121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:22.622534 2026] [core:error] [pid 3477144:tid 3477144] [client 74.248.33.8:25121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:22.792513 2026] [access_compat:error] [pid 3474452:tid 3474452] [client 191.232.199.39:25336] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/p.php
[Thu Jul 30 14:22:22.792849 2026] [core:error] [pid 3474452:tid 3474452] [client 191.232.199.39:25336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:23.429266 2026] [access_compat:error] [pid 3477395:tid 3477395] [client 103.59.153.118:58703] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:23.483654 2026] [ssl:error] [pid 3477537:tid 3477537] (70014)End of file found: [client 216.73.216.199:17990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:23.588861 2026] [access_compat:error] [pid 3474444:tid 3474444] [client 191.232.199.39:25287] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/elp.php
[Thu Jul 30 14:22:23.589187 2026] [core:error] [pid 3474444:tid 3474444] [client 191.232.199.39:25287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:23.590564 2026] [security2:error] [pid 3468877:tid 3468877] [client 43.135.139.165:48134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bes-systems.co.uk"] [uri "/"] [unique_id "amtQD7e4TtlyOY16ljNSvAAAADA"]
[Thu Jul 30 14:22:23.941499 2026] [ssl:error] [pid 3474448:tid 3474448] (EAI 2)Name or service not known: [client 144.76.19.72:36074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:23.941522 2026] [ssl:error] [pid 3474448:tid 3474448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:24.916672 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:36084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:24.916702 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:24.990361 2026] [core:error] [pid 3480950:tid 3480950] (13)Permission denied: [client 216.73.216.199:30142] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory42/subsystem/uevent
[Thu Jul 30 14:22:25.165788 2026] [access_compat:error] [pid 3482065:tid 3482065] [client 191.232.199.39:25325] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/a1.php
[Thu Jul 30 14:22:25.166239 2026] [core:error] [pid 3482065:tid 3482065] [client 191.232.199.39:25325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:25.291836 2026] [ssl:error] [pid 3480950:tid 3480950] (70014)End of file found: [client 216.73.216.199:30142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:25.593708 2026] [ssl:error] [pid 3482064:tid 3482064] (70014)End of file found: [client 216.73.216.199:41697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:25.859290 2026] [security2:error] [pid 3474390:tid 3474390] [client 43.135.139.165:57150] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtQEYdsfz5BY14oM_qZ7AAAAC0"], referer: http://bes-systems.co.uk
[Thu Jul 30 14:22:26.191766 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:26.191796 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:26.559840 2026] [authz_core:error] [pid 3474390:tid 3474390] [client 62.254.36.132:39498] AH01630: client denied by server configuration: /home/winterb/public_html/naomiwinter/error_log
[Thu Jul 30 14:22:26.955152 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:26.955177 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:27.034576 2026] [authz_core:error] [pid 3482118:tid 3482118] [client 66.249.66.35:36714] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:22:27.037245 2026] [authz_core:error] [pid 3482118:tid 3482118] [client 66.249.66.35:36714] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:22:27.569776 2026] [core:error] [pid 3482120:tid 3482120] [client 74.248.33.8:23056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:27.569825 2026] [core:error] [pid 3482120:tid 3482120] [client 74.248.33.8:23056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:27.861687 2026] [core:error] [pid 3482125:tid 3482125] [client 74.248.33.8:23448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:27.861737 2026] [core:error] [pid 3482125:tid 3482125] [client 74.248.33.8:23448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:27.969922 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:36088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:27.969963 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:28.024483 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:36102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:28.024519 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:28.244843 2026] [autoindex:error] [pid 3482065:tid 3482065] [client 65.109.124.116:41587] AH01276: Cannot serve directory /home/winterb/public_html/drupal0/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:22:28.820269 2026] [core:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:28.820312 2026] [core:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25217] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:28.893122 2026] [core:error] [pid 3471213:tid 3471213] (13)Permission denied: [client 216.73.216.199:43000] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/device/driver/uevent
[Thu Jul 30 14:22:28.994643 2026] [core:error] [pid 3471213:tid 3471213] (13)Permission denied: [client 216.73.216.199:43000] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory62/subsystem/uevent
[Thu Jul 30 14:22:29.295218 2026] [core:error] [pid 3471213:tid 3471213] (13)Permission denied: [client 216.73.216.199:43000] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/subsystem/drivers/ac/bind
[Thu Jul 30 14:22:29.597042 2026] [ssl:error] [pid 3471213:tid 3471213] (70014)End of file found: [client 216.73.216.199:43000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:29.639416 2026] [core:error] [pid 3427797:tid 3427797] [client 191.232.199.39:28879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:29.639449 2026] [core:error] [pid 3427797:tid 3427797] [client 191.232.199.39:28879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:30.360513 2026] [core:error] [pid 3459018:tid 3459018] [client 191.232.199.39:25309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:30.360547 2026] [core:error] [pid 3459018:tid 3459018] [client 191.232.199.39:25309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:30.685317 2026] [ssl:error] [pid 3477537:tid 3477537] (70014)End of file found: [client 216.73.216.199:65385] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:30.992285 2026] [ssl:error] [pid 3477144:tid 3477144] (70014)End of file found: [client 216.73.216.199:17001] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:31.111266 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:22472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:31.111303 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:31.168652 2026] [ssl:error] [pid 3474452:tid 3474452] (EAI 2)Name or service not known: [client 144.76.19.72:22478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:31.168694 2026] [ssl:error] [pid 3474452:tid 3474452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:31.759568 2026] [core:error] [pid 3481995:tid 3481995] [client 191.232.199.39:25259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:31.759604 2026] [core:error] [pid 3481995:tid 3481995] [client 191.232.199.39:25259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:32.661789 2026] [access_compat:error] [pid 3461324:tid 3461324] [client 74.248.33.8:8600] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ww5.php
[Thu Jul 30 14:22:32.662181 2026] [core:error] [pid 3461324:tid 3461324] [client 74.248.33.8:8600] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:33.509224 2026] [access_compat:error] [pid 3459018:tid 3459018] [client 74.248.33.8:23113] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/2.php
[Thu Jul 30 14:22:33.509559 2026] [core:error] [pid 3459018:tid 3459018] [client 74.248.33.8:23113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:33.557613 2026] [security2:error] [pid 3482064:tid 3482064] [client 185.191.171.5:54950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/goodbye-message-to-a-brother-who-passed-away"] [unique_id "amtQGRTh0JAoYJ6c7zaYZQAAAA8"]
[Thu Jul 30 14:22:33.679317 2026] [core:error] [pid 3480950:tid 3480950] [client 191.232.199.39:24834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:33.679343 2026] [core:error] [pid 3480950:tid 3480950] [client 191.232.199.39:24834] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:34.080478 2026] [access_compat:error] [pid 3477498:tid 3477498] [client 103.59.153.118:59188] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:34.223603 2026] [ssl:error] [pid 3481995:tid 3481995] (EAI 2)Name or service not known: [client 144.76.19.72:22484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:34.223636 2026] [ssl:error] [pid 3481995:tid 3481995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:34.280242 2026] [ssl:error] [pid 3474390:tid 3474390] (EAI 2)Name or service not known: [client 144.76.19.72:22490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:34.280272 2026] [ssl:error] [pid 3474390:tid 3474390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:34.290745 2026] [core:error] [pid 3477091:tid 3477091] [client 74.248.33.8:22653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:34.290775 2026] [core:error] [pid 3477091:tid 3477091] [client 74.248.33.8:22653] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:34.748082 2026] [core:error] [pid 3477500:tid 3477500] [client 191.232.199.39:25209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:34.748115 2026] [core:error] [pid 3477500:tid 3477500] [client 191.232.199.39:25209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:35.010750 2026] [ssl:error] [pid 3482122:tid 3482122] (70014)End of file found: [client 216.73.216.199:34670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:35.407479 2026] [access_compat:error] [pid 3474318:tid 3474318] [client 74.248.33.8:30029] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/atomlib.php
[Thu Jul 30 14:22:35.407796 2026] [core:error] [pid 3474318:tid 3474318] [client 74.248.33.8:30029] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:35.738923 2026] [access_compat:error] [pid 3477534:tid 3477534] [client 74.248.33.8:23116] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/rip.php
[Thu Jul 30 14:22:35.739286 2026] [core:error] [pid 3477534:tid 3477534] [client 74.248.33.8:23116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:35.958804 2026] [access_compat:error] [pid 3482125:tid 3482125] [client 74.248.33.8:23475] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/p.php
[Thu Jul 30 14:22:35.959163 2026] [core:error] [pid 3482125:tid 3482125] [client 74.248.33.8:23475] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:35.965919 2026] [core:error] [pid 3481995:tid 3481995] [client 191.232.199.39:25583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:35.965942 2026] [core:error] [pid 3481995:tid 3481995] [client 191.232.199.39:25583] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:36.122443 2026] [core:error] [pid 3482118:tid 3482118] (13)Permission denied: [client 216.73.216.199:39132] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty52/subsystem/ttyS2/flags
[Thu Jul 30 14:22:36.221996 2026] [ssl:error] [pid 3482118:tid 3482118] (70014)End of file found: [client 216.73.216.199:39132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:36.352100 2026] [access_compat:error] [pid 3479987:tid 3479987] [client 74.248.33.8:22655] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/php.php
[Thu Jul 30 14:22:36.352535 2026] [core:error] [pid 3479987:tid 3479987] [client 74.248.33.8:22655] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:36.520939 2026] [ssl:error] [pid 3474318:tid 3474318] (70014)End of file found: [client 216.73.216.199:18916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:37.096490 2026] [access_compat:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25211] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/files.php
[Thu Jul 30 14:22:37.096838 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:37.337040 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:22500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:37.337144 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:37.390207 2026] [ssl:error] [pid 3480950:tid 3480950] (EAI 2)Name or service not known: [client 144.76.19.72:22514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:37.390249 2026] [ssl:error] [pid 3480950:tid 3480950] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:37.922451 2026] [access_compat:error] [pid 3477499:tid 3477499] [client 191.232.199.39:25172] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/o.php
[Thu Jul 30 14:22:37.922842 2026] [core:error] [pid 3477499:tid 3477499] [client 191.232.199.39:25172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:38.006430 2026] [access_compat:error] [pid 3482121:tid 3482121] [client 74.248.33.8:23426] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/inputs.php
[Thu Jul 30 14:22:38.006794 2026] [core:error] [pid 3482121:tid 3482121] [client 74.248.33.8:23426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:39.886369 2026] [access_compat:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25551] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/file2.php
[Thu Jul 30 14:22:39.886717 2026] [core:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25551] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:40.367999 2026] [ssl:error] [pid 3468251:tid 3468251] (70014)End of file found: [client 216.73.216.199:49571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:40.444810 2026] [ssl:error] [pid 3482125:tid 3482125] (EAI 2)Name or service not known: [client 144.76.19.72:54688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:40.444845 2026] [ssl:error] [pid 3482125:tid 3482125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:40.501139 2026] [ssl:error] [pid 3477498:tid 3477498] (EAI 2)Name or service not known: [client 144.76.19.72:54704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:40.501165 2026] [ssl:error] [pid 3477498:tid 3477498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:40.713279 2026] [access_compat:error] [pid 3480950:tid 3480950] [client 103.59.153.118:59478] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:40.722757 2026] [access_compat:error] [pid 3474077:tid 3474077] [client 191.232.199.39:25230] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/.well-known/gecko-litespeed.php
[Thu Jul 30 14:22:40.723203 2026] [core:error] [pid 3474077:tid 3474077] [client 191.232.199.39:25230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:40.980045 2026] [core:error] [pid 3482121:tid 3482121] [client 74.248.33.8:36425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:40.980085 2026] [core:error] [pid 3482121:tid 3482121] [client 74.248.33.8:36425] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:41.573134 2026] [ssl:error] [pid 3477498:tid 3477498] (70014)End of file found: [client 216.73.216.199:47068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:41.598808 2026] [core:error] [pid 3482125:tid 3482125] [client 74.248.33.8:8614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:41.598835 2026] [core:error] [pid 3482125:tid 3482125] [client 74.248.33.8:8614] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:41.880899 2026] [ssl:error] [pid 3482121:tid 3482121] (70014)End of file found: [client 216.73.216.199:29772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:42.043941 2026] [access_compat:error] [pid 3477142:tid 3477142] [client 74.248.33.8:23478] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file.php
[Thu Jul 30 14:22:42.044269 2026] [core:error] [pid 3477142:tid 3477142] [client 74.248.33.8:23478] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:42.116406 2026] [authz_core:error] [pid 3482122:tid 3482122] [client 66.249.66.34:55226] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:22:42.119061 2026] [authz_core:error] [pid 3482122:tid 3482122] [client 66.249.66.34:55226] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:22:42.158864 2026] [access_compat:error] [pid 3482119:tid 3482119] [client 191.232.199.39:25210] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/xda.php
[Thu Jul 30 14:22:42.159227 2026] [core:error] [pid 3482119:tid 3482119] [client 191.232.199.39:25210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:42.404922 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 74.248.33.8:23452] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/adminfuns.php
[Thu Jul 30 14:22:42.405277 2026] [core:error] [pid 3477500:tid 3477500] [client 74.248.33.8:23452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:42.935162 2026] [access_compat:error] [pid 3474441:tid 3474441] [client 191.232.199.39:25175] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/theme.php
[Thu Jul 30 14:22:42.935507 2026] [core:error] [pid 3474441:tid 3474441] [client 191.232.199.39:25175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:43.557622 2026] [ssl:error] [pid 3482066:tid 3482066] (EAI 2)Name or service not known: [client 144.76.19.72:54712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:43.557675 2026] [ssl:error] [pid 3482066:tid 3482066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:43.615969 2026] [ssl:error] [pid 3474441:tid 3474441] (EAI 2)Name or service not known: [client 144.76.19.72:54716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:43.615998 2026] [ssl:error] [pid 3474441:tid 3474441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:43.725174 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 191.232.199.39:25158] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/classwithtostring.php
[Thu Jul 30 14:22:43.725515 2026] [core:error] [pid 3477500:tid 3477500] [client 191.232.199.39:25158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:44.041293 2026] [access_compat:error] [pid 3465575:tid 3465575] [client 45.158.164.139:37154] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:22:44.761338 2026] [access_compat:error] [pid 3482066:tid 3482066] [client 103.59.153.118:59679] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:44.941707 2026] [access_compat:error] [pid 3474441:tid 3474441] [client 191.232.199.39:29318] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/news.php
[Thu Jul 30 14:22:44.942043 2026] [core:error] [pid 3474441:tid 3474441] [client 191.232.199.39:29318] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:45.639123 2026] [security2:error] [pid 3477091:tid 3477091] [client 94.154.43.186:28352] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glottalstop.co.uk"] [uri "/.env"] [unique_id "amtQJc1S2YXgTMSU0R3sHQAAAAg"]
[Thu Jul 30 14:22:45.639317 2026] [security2:error] [pid 3477091:tid 3477091] [client 94.154.43.186:28352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glottalstop.co.uk"] [uri "/.env"] [unique_id "amtQJc1S2YXgTMSU0R3sHQAAAAg"]
[Thu Jul 30 14:22:45.639540 2026] [security2:error] [pid 3477091:tid 3477091] [client 94.154.43.186:28352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glottalstop.co.uk"] [uri "/.env"] [unique_id "amtQJc1S2YXgTMSU0R3sHQAAAAg"]
[Thu Jul 30 14:22:45.912739 2026] [ssl:error] [pid 3477536:tid 3477536] (70014)End of file found: [client 216.73.216.199:22150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:46.102707 2026] [core:error] [pid 3477499:tid 3477499] [client 191.232.199.39:25156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:46.102739 2026] [core:error] [pid 3477499:tid 3477499] [client 191.232.199.39:25156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:46.674556 2026] [ssl:error] [pid 3482065:tid 3482065] (EAI 2)Name or service not known: [client 144.76.19.72:54730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:46.674589 2026] [ssl:error] [pid 3482065:tid 3482065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:46.731279 2026] [ssl:error] [pid 3474395:tid 3474395] (EAI 2)Name or service not known: [client 144.76.19.72:54744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:46.731305 2026] [ssl:error] [pid 3474395:tid 3474395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:46.816293 2026] [access_compat:error] [pid 3477500:tid 3477500] [client 74.248.33.8:36434] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/404.php
[Thu Jul 30 14:22:46.816638 2026] [core:error] [pid 3477500:tid 3477500] [client 74.248.33.8:36434] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:47.006564 2026] [core:error] [pid 3477497:tid 3477497] [client 191.232.199.39:29351] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:47.006588 2026] [core:error] [pid 3477497:tid 3477497] [client 191.232.199.39:29351] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:47.120038 2026] [ssl:error] [pid 3477534:tid 3477534] (70014)End of file found: [client 216.73.216.199:46594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:47.723898 2026] [ssl:error] [pid 3477499:tid 3477499] (70014)End of file found: [client 216.73.216.199:64664] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:48.795542 2026] [core:error] [pid 3482118:tid 3482118] [client 191.232.199.39:47611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:48.795573 2026] [core:error] [pid 3482118:tid 3482118] [client 191.232.199.39:47611] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:49.751275 2026] [core:error] [pid 3481995:tid 3481995] [client 191.232.199.39:25166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:49.751313 2026] [core:error] [pid 3481995:tid 3481995] [client 191.232.199.39:25166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:49.832771 2026] [core:error] [pid 3465575:tid 3465575] [client 74.248.33.8:23477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:49.832799 2026] [core:error] [pid 3465575:tid 3465575] [client 74.248.33.8:23477] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:50.707684 2026] [ssl:error] [pid 3482123:tid 3482123] (EAI 2)Name or service not known: [client 144.76.19.72:20656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:50.707722 2026] [ssl:error] [pid 3482123:tid 3482123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:50.752590 2026] [core:error] [pid 3477142:tid 3477142] (13)Permission denied: [client 216.73.216.199:34377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/ssl/private/ftpd-ca.pem
[Thu Jul 30 14:22:50.760412 2026] [ssl:error] [pid 3483318:tid 3483318] (EAI 2)Name or service not known: [client 144.76.19.72:20662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:50.760449 2026] [ssl:error] [pid 3483318:tid 3483318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:50.768524 2026] [access_compat:error] [pid 3482118:tid 3482118] [client 191.232.199.39:29325] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/lock360.php
[Thu Jul 30 14:22:50.768847 2026] [core:error] [pid 3482118:tid 3482118] [client 191.232.199.39:29325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:51.433339 2026] [access_compat:error] [pid 3482121:tid 3482121] [client 103.59.153.118:59976] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:52.259153 2026] [ssl:error] [pid 3482066:tid 3482066] (70014)End of file found: [client 216.73.216.199:46927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:52.273757 2026] [access_compat:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25181] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-conflg.php
[Thu Jul 30 14:22:52.274115 2026] [core:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25181] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:53.167087 2026] [ssl:error] [pid 3477142:tid 3477142] (70014)End of file found: [client 216.73.216.199:34377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:53.816110 2026] [ssl:error] [pid 3477144:tid 3477144] (EAI 2)Name or service not known: [client 144.76.19.72:20676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:53.816145 2026] [ssl:error] [pid 3477144:tid 3477144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:53.872291 2026] [ssl:error] [pid 3483318:tid 3483318] (EAI 2)Name or service not known: [client 144.76.19.72:20680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:53.872323 2026] [ssl:error] [pid 3483318:tid 3483318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:54.214328 2026] [access_compat:error] [pid 3482064:tid 3482064] [client 191.232.199.39:25185] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/123.php
[Thu Jul 30 14:22:54.214679 2026] [core:error] [pid 3482064:tid 3482064] [client 191.232.199.39:25185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:55.231998 2026] [access_compat:error] [pid 3482064:tid 3482064] [client 191.232.199.39:25559] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/yanz.php
[Thu Jul 30 14:22:55.232345 2026] [core:error] [pid 3482064:tid 3482064] [client 191.232.199.39:25559] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:55.369330 2026] [access_compat:error] [pid 3481996:tid 3481996] [client 103.59.153.118:60174] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:22:55.876679 2026] [ssl:error] [pid 3444591:tid 3444591] (70014)End of file found: [client 216.73.216.199:33040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:56.238816 2026] [access_compat:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25546] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/autoload_classmap.php
[Thu Jul 30 14:22:56.239176 2026] [core:error] [pid 3477540:tid 3477540] [client 191.232.199.39:25546] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:56.360567 2026] [lsapi:warn] [pid 3482065:tid 3482065] [client 162.120.188.145:36439] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 14:22:56.360614 2026] [lsapi:warn] [pid 3482065:tid 3482065] [client 162.120.188.145:36439] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 14:22:56.926884 2026] [ssl:error] [pid 3477540:tid 3477540] (EAI 2)Name or service not known: [client 144.76.19.72:20690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:56.926918 2026] [ssl:error] [pid 3477540:tid 3477540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:56.982245 2026] [ssl:error] [pid 3483872:tid 3483872] (EAI 2)Name or service not known: [client 144.76.19.72:20706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:22:56.982290 2026] [ssl:error] [pid 3483872:tid 3483872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:22:57.000850 2026] [access_compat:error] [pid 3474390:tid 3474390] [client 191.232.199.39:25564] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/bi.php
[Thu Jul 30 14:22:57.001223 2026] [core:error] [pid 3474390:tid 3474390] [client 191.232.199.39:25564] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:57.552898 2026] [authz_core:error] [pid 3477540:tid 3477540] [client 66.249.66.33:55334] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:22:57.555598 2026] [authz_core:error] [pid 3477540:tid 3477540] [client 66.249.66.33:55334] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:22:57.689216 2026] [lsapi:error] [pid 3481995:tid 3481995] [client 216.73.216.199:16981] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Php.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Php.php on line 8\n
[Thu Jul 30 14:22:58.175080 2026] [core:error] [pid 3474318:tid 3474318] (13)Permission denied: [client 216.73.216.199:4590] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS1/custom_divisor
[Thu Jul 30 14:22:58.185476 2026] [access_compat:error] [pid 3483872:tid 3483872] [client 191.232.199.39:25197] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/cc.php
[Thu Jul 30 14:22:58.185894 2026] [core:error] [pid 3483872:tid 3483872] [client 191.232.199.39:25197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:58.288935 2026] [ssl:error] [pid 3474318:tid 3474318] (70014)End of file found: [client 216.73.216.199:4590] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:58.783905 2026] [ssl:error] [pid 3483902:tid 3483902] (70014)End of file found: [client 216.73.216.199:8919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:22:59.280765 2026] [core:error] [pid 3483903:tid 3483903] [client 191.232.199.39:25098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:22:59.280812 2026] [core:error] [pid 3483903:tid 3483903] [client 191.232.199.39:25098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:00.036208 2026] [ssl:error] [pid 3477142:tid 3477142] (EAI 2)Name or service not known: [client 144.76.19.72:23204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:00.036249 2026] [ssl:error] [pid 3477142:tid 3477142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:00.092732 2026] [ssl:error] [pid 3461324:tid 3461324] (EAI 2)Name or service not known: [client 144.76.19.72:23212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:00.092764 2026] [ssl:error] [pid 3461324:tid 3461324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:00.400666 2026] [core:error] [pid 3482119:tid 3482119] [client 191.232.199.39:25220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:00.400693 2026] [core:error] [pid 3482119:tid 3482119] [client 191.232.199.39:25220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:01.465786 2026] [access_compat:error] [pid 3483318:tid 3483318] [client 191.232.199.39:25229] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/disagraeosc.php
[Thu Jul 30 14:23:01.466353 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:25229] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:02.505533 2026] [ssl:error] [pid 3482125:tid 3482125] (70014)End of file found: [client 216.73.216.199:43611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:03.164765 2026] [ssl:error] [pid 3477540:tid 3477540] (EAI 2)Name or service not known: [client 144.76.19.72:23226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:03.164809 2026] [ssl:error] [pid 3477540:tid 3477540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:03.216536 2026] [ssl:error] [pid 3482121:tid 3482121] (EAI 2)Name or service not known: [client 144.76.19.72:23242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:03.216573 2026] [ssl:error] [pid 3482121:tid 3482121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:03.609294 2026] [security2:error] [pid 3427797:tid 3427797] [client 185.191.171.13:59536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/robots.txt"] [unique_id "amtQN9gFkRgyA50rwMCvKAAAAB4"]
[Thu Jul 30 14:23:03.609858 2026] [core:error] [pid 3427797:tid 3427797] [client 185.191.171.13:59536] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:04.014574 2026] [ssl:error] [pid 3482064:tid 3482064] (70014)End of file found: [client 216.73.216.199:56981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:04.138272 2026] [security2:error] [pid 3479987:tid 3479987] [client 85.208.96.194:58868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/author/simonk/page/6/"] [unique_id "amtQOLvO3i1cXA-6ysnpcwAAAAs"]
[Thu Jul 30 14:23:04.138800 2026] [core:error] [pid 3479987:tid 3479987] [client 85.208.96.194:58868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:04.463414 2026] [access_compat:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25238] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-logs.php
[Thu Jul 30 14:23:04.463733 2026] [core:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:05.248190 2026] [core:error] [pid 3482121:tid 3482121] [client 191.232.199.39:24862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:05.248221 2026] [core:error] [pid 3482121:tid 3482121] [client 191.232.199.39:24862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:05.341943 2026] [authz_core:error] [pid 3482123:tid 3482123] [client 66.249.66.33:36974] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:23:05.344611 2026] [authz_core:error] [pid 3482123:tid 3482123] [client 66.249.66.33:36974] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:23:05.524335 2026] [security2:error] [pid 3482065:tid 3482065] [client 43.159.135.203:56146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/HexEdit.dll"] [unique_id "amtQOVxM9tkXRfuBkNhqQwAAABE"]
[Thu Jul 30 14:23:05.524449 2026] [security2:error] [pid 3482065:tid 3482065] [client 43.159.135.203:56146] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dll"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/HexEdit.dll"] [unique_id "amtQOVxM9tkXRfuBkNhqQwAAABE"]
[Thu Jul 30 14:23:05.524715 2026] [security2:error] [pid 3482065:tid 3482065] [client 43.159.135.203:56146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/HexEdit.dll"] [unique_id "amtQOVxM9tkXRfuBkNhqQwAAABE"]
[Thu Jul 30 14:23:05.524903 2026] [security2:error] [pid 3482065:tid 3482065] [client 43.159.135.203:56146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 8 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/HexEdit.dll"] [unique_id "amtQOVxM9tkXRfuBkNhqQwAAABE"]
[Thu Jul 30 14:23:05.970327 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 103.59.153.118:60662] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:05.980256 2026] [security2:error] [pid 3482119:tid 3482119] [client 216.73.216.199:3494] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/cagefs.log"] [unique_id "amtQObICQvu0uEkxpiOQaAAAABQ"]
[Thu Jul 30 14:23:05.980520 2026] [security2:error] [pid 3482119:tid 3482119] [client 216.73.216.199:3494] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/cagefs.log"] [unique_id "amtQObICQvu0uEkxpiOQaAAAABQ"]
[Thu Jul 30 14:23:05.980718 2026] [security2:error] [pid 3482119:tid 3482119] [client 216.73.216.199:3494] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/cagefs.log"] [unique_id "amtQObICQvu0uEkxpiOQaAAAABQ"]
[Thu Jul 30 14:23:06.245677 2026] [access_compat:error] [pid 3483902:tid 3483902] [client 191.232.199.39:25089] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/system_log.php
[Thu Jul 30 14:23:06.246006 2026] [core:error] [pid 3483902:tid 3483902] [client 191.232.199.39:25089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:06.291617 2026] [ssl:error] [pid 3484204:tid 3484204] (EAI 2)Name or service not known: [client 144.76.19.72:23256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:06.291680 2026] [ssl:error] [pid 3484204:tid 3484204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:06.349631 2026] [ssl:error] [pid 3484204:tid 3484204] (EAI 2)Name or service not known: [client 144.76.19.72:23260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:06.349661 2026] [ssl:error] [pid 3484204:tid 3484204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:06.401104 2026] [ssl:error] [pid 3482119:tid 3482119] (70014)End of file found: [client 216.73.216.199:3494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:06.647228 2026] [security2:error] [pid 3468837:tid 3468837] [client 114.119.135.136:28081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/request_format~html/cat_ids~30"] [unique_id "amtQOii1praDaFSDOTYSggAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575676800/request_format~html
[Thu Jul 30 14:23:07.131106 2026] [access_compat:error] [pid 3483902:tid 3483902] [client 191.232.199.39:25270] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/24.php
[Thu Jul 30 14:23:07.131449 2026] [core:error] [pid 3483902:tid 3483902] [client 191.232.199.39:25270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:07.299531 2026] [ssl:error] [pid 3483871:tid 3483871] (70014)End of file found: [client 216.73.216.199:45370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:07.906176 2026] [ssl:error] [pid 3468837:tid 3468837] (70014)End of file found: [client 216.73.216.199:7312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:08.038288 2026] [security2:error] [pid 3474318:tid 3474318] [client 114.119.135.136:28097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/request_format~html/cat_ids~30"] [unique_id "amtQPHrYB17i5VdOg8DGOAAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575676800/request_format~html
[Thu Jul 30 14:23:08.326577 2026] [core:error] [pid 3484278:tid 3484278] [client 191.232.199.39:25128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:08.326620 2026] [core:error] [pid 3484278:tid 3484278] [client 191.232.199.39:25128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:09.274511 2026] [core:error] [pid 3484236:tid 3484236] [client 191.232.199.39:36366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:09.274536 2026] [core:error] [pid 3484236:tid 3484236] [client 191.232.199.39:36366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:09.405400 2026] [ssl:error] [pid 3483902:tid 3483902] (EAI 2)Name or service not known: [client 144.76.19.72:23272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:09.405452 2026] [ssl:error] [pid 3483902:tid 3483902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:09.463081 2026] [ssl:error] [pid 3482064:tid 3482064] (EAI 2)Name or service not known: [client 144.76.19.72:23286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:09.463115 2026] [ssl:error] [pid 3482064:tid 3482064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:10.512377 2026] [core:error] [pid 3482064:tid 3482064] [client 191.232.199.39:25218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:10.512403 2026] [core:error] [pid 3482064:tid 3482064] [client 191.232.199.39:25218] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:11.703085 2026] [core:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:11.703115 2026] [core:error] [pid 3482123:tid 3482123] [client 191.232.199.39:25118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:11.942205 2026] [security2:error] [pid 3477536:tid 3477536] [client 179.165.19.136:59998] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQP1j3q6zedNeb0tc8jwAAACs"]
[Thu Jul 30 14:23:11.942264 2026] [security2:error] [pid 3477536:tid 3477536] [client 179.165.19.136:59998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQP1j3q6zedNeb0tc8jwAAACs"]
[Thu Jul 30 14:23:11.942556 2026] [security2:error] [pid 3477536:tid 3477536] [client 179.165.19.136:59998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQP1j3q6zedNeb0tc8jwAAACs"]
[Thu Jul 30 14:23:12.378530 2026] [core:error] [pid 3484459:tid 3484459] [client 191.232.199.39:52534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:12.378574 2026] [core:error] [pid 3484459:tid 3484459] [client 191.232.199.39:52534] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:12.635429 2026] [access_compat:error] [pid 3482123:tid 3482123] [client 103.59.153.118:60956] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:13.112332 2026] [ssl:error] [pid 3484495:tid 3484495] (EAI 2)Name or service not known: [client 144.76.19.72:51312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:13.112377 2026] [ssl:error] [pid 3484495:tid 3484495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:13.208684 2026] [ssl:error] [pid 3484496:tid 3484496] (70014)End of file found: [client 216.73.216.199:37480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:13.342620 2026] [ssl:error] [pid 3482119:tid 3482119] (70014)End of file found: [client 216.73.216.199:37403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:13.781576 2026] [access_compat:error] [pid 3477092:tid 3477092] [client 45.158.164.139:36124] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:23:13.963502 2026] [access_compat:error] [pid 3468877:tid 3468877] [client 191.232.199.39:52507] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/num.php
[Thu Jul 30 14:23:13.963838 2026] [core:error] [pid 3468877:tid 3468877] [client 191.232.199.39:52507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:14.228695 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:51324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:14.228728 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:14.240195 2026] [ssl:error] [pid 3482123:tid 3482123] (70014)End of file found: [client 216.73.216.199:29186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:15.109048 2026] [core:error] [pid 3484537:tid 3484537] [client 191.232.199.39:36354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:15.109104 2026] [core:error] [pid 3484537:tid 3484537] [client 191.232.199.39:36354] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:16.559561 2026] [access_compat:error] [pid 3484540:tid 3484540] [client 103.59.153.118:61148] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:16.951696 2026] [core:error] [pid 3484537:tid 3484537] [client 191.232.199.39:25141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:16.951726 2026] [core:error] [pid 3484537:tid 3484537] [client 191.232.199.39:25141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:17.284893 2026] [ssl:error] [pid 3477497:tid 3477497] (EAI 2)Name or service not known: [client 144.76.19.72:51332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:17.284929 2026] [ssl:error] [pid 3477497:tid 3477497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:17.337734 2026] [ssl:error] [pid 3484278:tid 3484278] (EAI 2)Name or service not known: [client 144.76.19.72:51348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:17.337767 2026] [ssl:error] [pid 3484278:tid 3484278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:18.453699 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:47801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:18.453734 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:47801] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:19.031696 2026] [ssl:error] [pid 3484718:tid 3484718] (70014)End of file found: [client 216.73.216.199:32951] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:19.503902 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:47806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:19.503926 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:47806] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:19.724193 2026] [cgi:error] [pid 3477092:tid 3477092] [client 20.104.22.47:25306] AH02812: stderr from /home/hugoashmore/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:23:19.822823 2026] [core:error] [pid 3484539:tid 3484539] [client 66.249.66.45:42310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:19.822876 2026] [core:error] [pid 3484539:tid 3484539] [client 66.249.66.45:42310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:19.970014 2026] [ssl:error] [pid 3477142:tid 3477142] (70014)End of file found: [client 216.73.216.199:30952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:20.270979 2026] [ssl:error] [pid 3484495:tid 3484495] (70014)End of file found: [client 216.73.216.199:63978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:20.381109 2026] [security2:error] [pid 3484719:tid 3484719] [client 131.226.103.13:36754] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQSJDl1f_WIMMWeNs0twAAAD8"]
[Thu Jul 30 14:23:20.381155 2026] [security2:error] [pid 3484719:tid 3484719] [client 131.226.103.13:36754] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQSJDl1f_WIMMWeNs0twAAAD8"]
[Thu Jul 30 14:23:20.381448 2026] [security2:error] [pid 3484719:tid 3484719] [client 131.226.103.13:36754] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQSJDl1f_WIMMWeNs0twAAAD8"]
[Thu Jul 30 14:23:20.394734 2026] [ssl:error] [pid 3484539:tid 3484539] (EAI 2)Name or service not known: [client 144.76.19.72:26678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:20.394761 2026] [ssl:error] [pid 3484539:tid 3484539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:20.451289 2026] [ssl:error] [pid 3444591:tid 3444591] (EAI 2)Name or service not known: [client 144.76.19.72:26684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:20.451320 2026] [ssl:error] [pid 3444591:tid 3444591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:20.489185 2026] [access_compat:error] [pid 3483318:tid 3483318] [client 191.232.199.39:25092] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/gifclass.php
[Thu Jul 30 14:23:20.489503 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:25092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:21.028718 2026] [security2:error] [pid 3444591:tid 3444591] [client 43.161.234.148:38278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amtQSTxooV55xvHpAdTgMwAAACA"]
[Thu Jul 30 14:23:21.235622 2026] [core:error] [pid 3484539:tid 3484539] [client 191.232.199.39:25095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:21.235644 2026] [core:error] [pid 3484539:tid 3484539] [client 191.232.199.39:25095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:22.072235 2026] [core:error] [pid 3477535:tid 3477535] [client 191.232.199.39:25138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:22.072263 2026] [core:error] [pid 3477535:tid 3477535] [client 191.232.199.39:25138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:23.176519 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 103.59.153.118:61447] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:23.525466 2026] [ssl:error] [pid 3484278:tid 3484278] (EAI 2)Name or service not known: [client 144.76.19.72:26692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:23.525497 2026] [ssl:error] [pid 3484278:tid 3484278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:23.582558 2026] [ssl:error] [pid 3484278:tid 3484278] (EAI 2)Name or service not known: [client 144.76.19.72:26694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:23.582586 2026] [ssl:error] [pid 3484278:tid 3484278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:24.381669 2026] [ssl:error] [pid 3484537:tid 3484537] (70014)End of file found: [client 216.73.216.199:50939] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:24.597462 2026] [authz_core:error] [pid 3459018:tid 3459018] [client 66.249.66.34:54723] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:23:24.600128 2026] [authz_core:error] [pid 3459018:tid 3459018] [client 66.249.66.34:54723] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:23:25.288211 2026] [ssl:error] [pid 3477142:tid 3477142] (70014)End of file found: [client 216.73.216.199:8136] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:25.532527 2026] [core:error] [pid 3484539:tid 3484539] [client 191.232.199.39:47788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:25.532554 2026] [core:error] [pid 3484539:tid 3484539] [client 191.232.199.39:47788] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:25.590414 2026] [ssl:error] [pid 3484495:tid 3484495] (70014)End of file found: [client 216.73.216.199:41367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:26.494573 2026] [access_compat:error] [pid 3484542:tid 3484542] [client 191.232.199.39:46333] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-cron.php
[Thu Jul 30 14:23:26.495034 2026] [core:error] [pid 3484542:tid 3484542] [client 191.232.199.39:46333] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:26.637126 2026] [ssl:error] [pid 3483902:tid 3483902] (EAI 2)Name or service not known: [client 144.76.19.72:26710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:26.637160 2026] [ssl:error] [pid 3483902:tid 3483902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:26.654233 2026] [security2:error] [pid 3484543:tid 3484543] [client 2.132.82.181:26937] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQTkLsVQy342i_zyxzKwAAADw"]
[Thu Jul 30 14:23:26.654280 2026] [security2:error] [pid 3484543:tid 3484543] [client 2.132.82.181:26937] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQTkLsVQy342i_zyxzKwAAADw"]
[Thu Jul 30 14:23:26.654563 2026] [security2:error] [pid 3484543:tid 3484543] [client 2.132.82.181:26937] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQTkLsVQy342i_zyxzKwAAADw"]
[Thu Jul 30 14:23:26.692995 2026] [ssl:error] [pid 3484280:tid 3484280] (EAI 2)Name or service not known: [client 144.76.19.72:26714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:26.693028 2026] [ssl:error] [pid 3484280:tid 3484280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:27.259933 2026] [access_compat:error] [pid 3484541:tid 3484541] [client 103.59.153.118:61647] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:27.538840 2026] [access_compat:error] [pid 3484539:tid 3484539] [client 191.232.199.39:46288] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/wp-block.php
[Thu Jul 30 14:23:27.539187 2026] [core:error] [pid 3484539:tid 3484539] [client 191.232.199.39:46288] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:28.706918 2026] [core:error] [pid 3484539:tid 3484539] [client 191.232.199.39:47794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:28.706943 2026] [core:error] [pid 3484539:tid 3484539] [client 191.232.199.39:47794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:29.467240 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:47786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:29.467266 2026] [core:error] [pid 3483318:tid 3483318] [client 191.232.199.39:47786] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:23:29.607483 2026] [authz_core:error] [pid 3484236:tid 3484236] [client 66.249.66.33:50159] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:23:29.610194 2026] [authz_core:error] [pid 3484236:tid 3484236] [client 66.249.66.33:50159] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:23:29.748786 2026] [ssl:error] [pid 3484540:tid 3484540] (EAI 2)Name or service not known: [client 144.76.19.72:48028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:29.748822 2026] [ssl:error] [pid 3484540:tid 3484540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:29.804896 2026] [ssl:error] [pid 3459018:tid 3459018] (EAI 2)Name or service not known: [client 144.76.19.72:48034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:29.804926 2026] [ssl:error] [pid 3459018:tid 3459018] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:29.813972 2026] [ssl:error] [pid 3484542:tid 3484542] (70014)End of file found: [client 216.73.216.199:42092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:30.724861 2026] [ssl:error] [pid 3484756:tid 3484756] (70014)End of file found: [client 216.73.216.199:28502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:31.017871 2026] [ssl:error] [pid 3484496:tid 3484496] (70014)End of file found: [client 216.73.216.199:56843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:32.858372 2026] [ssl:error] [pid 3444591:tid 3444591] (EAI 2)Name or service not known: [client 144.76.19.72:48050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:32.858402 2026] [ssl:error] [pid 3444591:tid 3444591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:32.914417 2026] [ssl:error] [pid 3484204:tid 3484204] (EAI 2)Name or service not known: [client 144.76.19.72:48060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:32.914453 2026] [ssl:error] [pid 3484204:tid 3484204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:33.986024 2026] [ssl:error] [pid 3484204:tid 3484204] (70014)End of file found: [client 216.73.216.199:53007] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:34.040885 2026] [security2:error] [pid 3483872:tid 3483872] [client 85.208.96.205:52854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/john-battaglia-surviving-daughter-illness"] [unique_id "amtQVoDG7nIqPx1mM8bfVQAAAAo"]
[Thu Jul 30 14:23:34.807947 2026] [core:error] [pid 3484278:tid 3484278] (13)Permission denied: [client 216.73.216.199:2322] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/port
[Thu Jul 30 14:23:35.969813 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:48072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:35.969844 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:36.024714 2026] [ssl:error] [pid 3477536:tid 3477536] (EAI 2)Name or service not known: [client 144.76.19.72:48082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:36.024746 2026] [ssl:error] [pid 3477536:tid 3477536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:36.319061 2026] [core:error] [pid 3484278:tid 3484278] (13)Permission denied: [client 216.73.216.199:2322] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/fswknowledge.store.db
[Thu Jul 30 14:23:37.878865 2026] [access_compat:error] [pid 3484756:tid 3484756] [client 103.59.153.118:62135] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:39.027672 2026] [ssl:error] [pid 3484278:tid 3484278] (70014)End of file found: [client 216.73.216.199:2322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:39.106800 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:48094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:39.106835 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:39.159713 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:48102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:39.159743 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:42.034904 2026] [ssl:error] [pid 3484755:tid 3484755] (70014)End of file found: [client 216.73.216.199:45258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:42.218220 2026] [ssl:error] [pid 3485566:tid 3485566] (EAI 2)Name or service not known: [client 144.76.19.72:20600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:42.218256 2026] [ssl:error] [pid 3485566:tid 3485566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:42.278902 2026] [ssl:error] [pid 3484676:tid 3484676] (EAI 2)Name or service not known: [client 144.76.19.72:20608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:42.278928 2026] [ssl:error] [pid 3484676:tid 3484676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:42.340418 2026] [ssl:error] [pid 3484543:tid 3484543] (70014)End of file found: [client 216.73.216.199:64148] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:44.502298 2026] [access_compat:error] [pid 3485566:tid 3485566] [client 103.59.153.118:62431] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:44.750379 2026] [ssl:error] [pid 3484281:tid 3484281] (70014)End of file found: [client 216.73.216.199:54803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:45.337090 2026] [ssl:error] [pid 3485410:tid 3485410] (EAI 2)Name or service not known: [client 144.76.19.72:20620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:45.337121 2026] [ssl:error] [pid 3485410:tid 3485410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:45.392968 2026] [ssl:error] [pid 3484753:tid 3484753] (EAI 2)Name or service not known: [client 144.76.19.72:20622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:45.393010 2026] [ssl:error] [pid 3484753:tid 3484753] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:46.311196 2026] [security2:error] [pid 3483318:tid 3483318] [client 146.56.197.150:48132] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wartypig.com"] [uri "/"] [unique_id "amtQYrJ2HBrawRYGaFRyhgAAAAA"]
[Thu Jul 30 14:23:47.346744 2026] [core:error] [pid 3477142:tid 3477142] (13)Permission denied: [client 216.73.216.199:15031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ata_generic/drivers/pci:ata_generic/uevent
[Thu Jul 30 14:23:47.651819 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 45.158.164.139:38572] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:23:48.364277 2026] [ssl:error] [pid 3477142:tid 3477142] (70014)End of file found: [client 216.73.216.199:15031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:48.448533 2026] [ssl:error] [pid 3485566:tid 3485566] (EAI 2)Name or service not known: [client 144.76.19.72:20626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:48.448560 2026] [ssl:error] [pid 3485566:tid 3485566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:48.502826 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:20642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:48.502860 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:48.508632 2026] [access_compat:error] [pid 3483837:tid 3483837] [client 103.59.153.118:62627] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:50.170529 2026] [ssl:error] [pid 3479987:tid 3479987] (70014)End of file found: [client 216.73.216.199:49776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:51.374110 2026] [core:error] [pid 3484755:tid 3484755] (13)Permission denied: [client 216.73.216.199:57624] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS2/irq
[Thu Jul 30 14:23:51.558386 2026] [ssl:error] [pid 3482123:tid 3482123] (EAI 2)Name or service not known: [client 144.76.19.72:32964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:51.558415 2026] [ssl:error] [pid 3482123:tid 3482123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:51.612816 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:32966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:51.612842 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:51.976670 2026] [ssl:error] [pid 3484755:tid 3484755] (70014)End of file found: [client 216.73.216.199:57624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:23:53.209277 2026] [security2:error] [pid 3484495:tid 3484495] [client 43.166.1.243:45700] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/"] [unique_id "amtQadl2YExV2WF8E9xcmAAAADI"]
[Thu Jul 30 14:23:53.462208 2026] [security2:error] [pid 3484753:tid 3484753] [client 43.153.27.244:43708] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/fantastico_fileslist.txt"] [unique_id "amtQaSp1OT1JOhqUYTTBYQAAAEA"]
[Thu Jul 30 14:23:54.634086 2026] [security2:error] [pid 3484754:tid 3484754] [client 43.166.1.243:46436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtQapRhDxVeuNZxaq-ibQAAAEI"], referer: http://all4s.co.uk
[Thu Jul 30 14:23:54.669475 2026] [ssl:error] [pid 3484495:tid 3484495] (EAI 2)Name or service not known: [client 144.76.19.72:32978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:54.669499 2026] [ssl:error] [pid 3484495:tid 3484495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:54.725702 2026] [ssl:error] [pid 3477142:tid 3477142] (EAI 2)Name or service not known: [client 144.76.19.72:32984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:54.725726 2026] [ssl:error] [pid 3477142:tid 3477142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:55.147003 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 103.59.153.118:62922] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:23:56.686719 2026] [security2:error] [pid 3477144:tid 3477144] [client 43.165.65.117:50424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtQbDr3s2W0oOwhV6WA3gAAABA"], referer: http://www.banskoexpresstransfers.co.uk
[Thu Jul 30 14:23:57.709493 2026] [security2:error] [pid 3484718:tid 3484718] [client 43.165.65.117:41310] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtQbS-vThkk6iCKiBr0EQAAAD0"], referer: http://www.banskoexpress.com
[Thu Jul 30 14:23:57.782339 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:32994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:57.782363 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:57.838331 2026] [ssl:error] [pid 3477540:tid 3477540] (EAI 2)Name or service not known: [client 144.76.19.72:33004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:23:57.838357 2026] [ssl:error] [pid 3477540:tid 3477540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:23:59.232868 2026] [access_compat:error] [pid 3485410:tid 3485410] [client 103.59.153.118:63123] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:00.018603 2026] [cgi:error] [pid 3484495:tid 3484495] [client 20.104.22.47:26707] AH02812: stderr from /home/websters/public_html/itsupportinayrshire.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:24:00.410258 2026] [ssl:error] [pid 3484541:tid 3484541] (70014)End of file found: [client 216.73.216.199:46878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:00.945880 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:55534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:00.945921 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:01.003537 2026] [ssl:error] [pid 3485363:tid 3485363] (EAI 2)Name or service not known: [client 144.76.19.72:55542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:01.003573 2026] [ssl:error] [pid 3485363:tid 3485363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:03.126041 2026] [security2:error] [pid 3483872:tid 3483872] [client 150.5.132.65:12713] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQc4DG7nIqPx1mM8bfXgAAAAo"]
[Thu Jul 30 14:24:03.126100 2026] [security2:error] [pid 3483872:tid 3483872] [client 150.5.132.65:12713] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQc4DG7nIqPx1mM8bfXgAAAAo"]
[Thu Jul 30 14:24:03.126366 2026] [security2:error] [pid 3483872:tid 3483872] [client 150.5.132.65:12713] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQc4DG7nIqPx1mM8bfXgAAAAo"]
[Thu Jul 30 14:24:03.869748 2026] [authz_core:error] [pid 3484537:tid 3484537] [client 217.76.50.173:49154] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:24:04.060270 2026] [ssl:error] [pid 3483837:tid 3483837] (EAI 2)Name or service not known: [client 144.76.19.72:55552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:04.060305 2026] [ssl:error] [pid 3483837:tid 3483837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:04.116178 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:55566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:04.116201 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:04.825976 2026] [core:error] [pid 3486071:tid 3486071] (13)Permission denied: [client 216.73.216.199:61110] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory54/subsystem/uevent
[Thu Jul 30 14:24:05.235763 2026] [security2:error] [pid 3483318:tid 3483318] [client 103.155.118.169:58988] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQdbJ2HBrawRYGaFRyjAAAAAA"]
[Thu Jul 30 14:24:05.235810 2026] [security2:error] [pid 3483318:tid 3483318] [client 103.155.118.169:58988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQdbJ2HBrawRYGaFRyjAAAAAA"]
[Thu Jul 30 14:24:05.236053 2026] [security2:error] [pid 3483318:tid 3483318] [client 103.155.118.169:58988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQdbJ2HBrawRYGaFRyjAAAAAA"]
[Thu Jul 30 14:24:06.296137 2026] [cgi:error] [pid 3477540:tid 3477540] [client 51.120.70.186:28346] AH02812: stderr from /home/islay/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:24:06.932665 2026] [ssl:error] [pid 3486071:tid 3486071] (70014)End of file found: [client 216.73.216.199:61110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:07.175371 2026] [ssl:error] [pid 3484496:tid 3484496] (EAI 2)Name or service not known: [client 144.76.19.72:55574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:07.175457 2026] [ssl:error] [pid 3484496:tid 3484496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:07.233900 2026] [ssl:error] [pid 3477536:tid 3477536] (EAI 2)Name or service not known: [client 144.76.19.72:55584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:07.233925 2026] [ssl:error] [pid 3477536:tid 3477536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:07.841248 2026] [ssl:error] [pid 3484541:tid 3484541] (70014)End of file found: [client 216.73.216.199:5014] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:08.338580 2026] [ssl:error] [pid 3486160:tid 3486160] (70014)End of file found: [client 216.73.216.199:49157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:09.282925 2026] [security2:error] [pid 3482121:tid 3482121] [client 74.7.227.190:56808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtQeVxgB1RWXM4aWMd-_wAAABw"]
[Thu Jul 30 14:24:09.937315 2026] [access_compat:error] [pid 3484753:tid 3484753] [client 103.59.153.118:63628] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:10.296478 2026] [ssl:error] [pid 3486782:tid 3486782] (EAI 2)Name or service not known: [client 144.76.19.72:56006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:10.296524 2026] [ssl:error] [pid 3486782:tid 3486782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:10.350100 2026] [ssl:error] [pid 3483902:tid 3483902] (EAI 2)Name or service not known: [client 144.76.19.72:56022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:10.350129 2026] [ssl:error] [pid 3483902:tid 3483902] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:12.257620 2026] [core:error] [pid 3468877:tid 3468877] (13)Permission denied: [client 216.73.216.199:18297] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/vmap_area/destroy_by_rcu
[Thu Jul 30 14:24:13.425605 2026] [ssl:error] [pid 3482123:tid 3482123] (EAI 2)Name or service not known: [client 144.76.19.72:56028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:13.425642 2026] [ssl:error] [pid 3482123:tid 3482123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:13.481348 2026] [ssl:error] [pid 3486402:tid 3486402] (EAI 2)Name or service not known: [client 144.76.19.72:56032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:13.481387 2026] [ssl:error] [pid 3486402:tid 3486402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:16.272883 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:18297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:16.298139 2026] [core:error] [pid 3486402:tid 3486402] [client 57.141.0.13:52264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:24:16.298163 2026] [core:error] [pid 3486402:tid 3486402] [client 57.141.0.13:52264] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:24:16.534770 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:56040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:16.534802 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:16.589390 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:56044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:16.589425 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:16.612428 2026] [access_compat:error] [pid 3484496:tid 3484496] [client 103.59.153.118:63931] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:16.712424 2026] [security2:error] [pid 3484204:tid 3484204] [client 43.140.37.167:35152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclereracing.com"] [uri "/"] [unique_id "amtQgMY7MQevNTYeiayXcwAAAAw"]
[Thu Jul 30 14:24:17.234960 2026] [access_compat:error] [pid 3444591:tid 3444591] [client 45.158.164.139:37658] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:24:17.920991 2026] [security2:error] [pid 3484753:tid 3484753] [client 170.106.161.78:35840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amtQgSp1OT1JOhqUYTTBbAAAAEA"]
[Thu Jul 30 14:24:19.647808 2026] [ssl:error] [pid 3483837:tid 3483837] (EAI 2)Name or service not known: [client 144.76.19.72:59954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:19.647844 2026] [ssl:error] [pid 3483837:tid 3483837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:19.703420 2026] [ssl:error] [pid 3484204:tid 3484204] (EAI 2)Name or service not known: [client 144.76.19.72:59962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:19.703464 2026] [ssl:error] [pid 3484204:tid 3484204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:20.632517 2026] [access_compat:error] [pid 3484281:tid 3484281] [client 103.59.153.118:64134] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:21.391447 2026] [ssl:error] [pid 3477092:tid 3477092] (70014)End of file found: [client 216.73.216.199:39532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:21.858174 2026] [authz_core:error] [pid 3486401:tid 3486401] [client 66.249.66.33:49488] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:24:21.860826 2026] [authz_core:error] [pid 3486401:tid 3486401] [client 66.249.66.33:49488] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:24:22.943780 2026] [ssl:error] [pid 3484496:tid 3484496] (EAI 2)Name or service not known: [client 144.76.19.72:59964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:22.943809 2026] [ssl:error] [pid 3484496:tid 3484496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:23.009783 2026] [ssl:error] [pid 3487266:tid 3487266] (EAI 2)Name or service not known: [client 144.76.19.72:59976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:23.009825 2026] [ssl:error] [pid 3487266:tid 3487266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:23.500806 2026] [core:error] [pid 3477091:tid 3477091] (13)Permission denied: [client 216.73.216.199:28620] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory113/subsystem/uevent
[Thu Jul 30 14:24:24.165295 2026] [ssl:error] [pid 3477091:tid 3477091] (70014)End of file found: [client 216.73.216.199:28620] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:25.068603 2026] [access_compat:error] [pid 3487340:tid 3487340] [client 106.127.136.190:16412] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-comments-post.php
[Thu Jul 30 14:24:25.068706 2026] [access_compat:error] [pid 3487340:tid 3487340] [client 106.127.136.190:16412] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:24:25.206781 2026] [security2:error] [pid 3472867:tid 3472867] [client 170.106.113.235:34194] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-earth.com"] [uri "/"] [unique_id "amtQiZW0klGT3YvioUG9DQAAAAc"]
[Thu Jul 30 14:24:26.063648 2026] [ssl:error] [pid 3474318:tid 3474318] (EAI 2)Name or service not known: [client 144.76.19.72:59988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:26.063681 2026] [ssl:error] [pid 3474318:tid 3474318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:26.116791 2026] [ssl:error] [pid 3484719:tid 3484719] (EAI 2)Name or service not known: [client 144.76.19.72:59994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:26.116831 2026] [ssl:error] [pid 3484719:tid 3484719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:27.109472 2026] [ssl:error] [pid 3484871:tid 3484871] (70014)End of file found: [client 216.73.216.199:5954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:27.284545 2026] [access_compat:error] [pid 3484719:tid 3484719] [client 103.59.153.118:64441] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:27.524514 2026] [security2:error] [pid 3486401:tid 3486401] [client 74.7.241.18:34236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amtQi28WE6iWXyUvAWO8VgAAAEE"]
[Thu Jul 30 14:24:28.441987 2026] [authz_core:error] [pid 3484719:tid 3484719] [client 66.249.66.34:36089] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:24:28.445949 2026] [authz_core:error] [pid 3484719:tid 3484719] [client 66.249.66.34:36089] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:24:29.177183 2026] [ssl:error] [pid 3484495:tid 3484495] (EAI 2)Name or service not known: [client 144.76.19.72:59998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:29.177213 2026] [ssl:error] [pid 3484495:tid 3484495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:29.236729 2026] [ssl:error] [pid 3487377:tid 3487377] (EAI 2)Name or service not known: [client 144.76.19.72:60002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:29.236761 2026] [ssl:error] [pid 3487377:tid 3487377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:30.117552 2026] [ssl:error] [pid 3484496:tid 3484496] (70014)End of file found: [client 216.73.216.199:25320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:30.828849 2026] [security2:error] [pid 3481996:tid 3481996] [client 114.119.146.111:29657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/request_format~html"] [unique_id "amtQjhrdqof9ki9nzAfR_gAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E8-12-2019
[Thu Jul 30 14:24:31.304189 2026] [access_compat:error] [pid 3486401:tid 3486401] [client 103.59.153.118:64646] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:31.833020 2026] [security2:error] [pid 3486071:tid 3486071] [client 114.119.146.111:29661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/request_format~html"] [unique_id "amtQj26Mu9trlXs21-PfRgAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E8-12-2019
[Thu Jul 30 14:24:32.294194 2026] [ssl:error] [pid 3486691:tid 3486691] (EAI 2)Name or service not known: [client 144.76.19.72:29898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:32.294241 2026] [ssl:error] [pid 3486691:tid 3486691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:32.350125 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:29900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:32.350154 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:32.524220 2026] [ssl:error] [pid 3477092:tid 3477092] (70014)End of file found: [client 216.73.216.199:49066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:32.945932 2026] [security2:error] [pid 3483902:tid 3483902] [client 20.171.55.167:9027] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.auroravation.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtQkBYmsgKYtlQnafQrjQAAABY"]
[Thu Jul 30 14:24:32.946249 2026] [security2:error] [pid 3483902:tid 3483902] [client 20.171.55.167:9027] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.auroravation.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtQkBYmsgKYtlQnafQrjQAAABY"]
[Thu Jul 30 14:24:32.972637 2026] [security2:error] [pid 3483902:tid 3483902] [client 20.171.55.167:9027] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.auroravation.co.uk"] [uri "/403.shtml"] [unique_id "amtQkBYmsgKYtlQnafQrjQAAABY"]
[Thu Jul 30 14:24:34.748971 2026] [security2:error] [pid 3484871:tid 3484871] [client 185.191.171.8:12574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/steve-hickmott-chelsea"] [unique_id "amtQkjKNluJ_AD5Zo78a9QAAAEU"]
[Thu Jul 30 14:24:35.402625 2026] [ssl:error] [pid 3486782:tid 3486782] (EAI 2)Name or service not known: [client 144.76.19.72:29902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:35.402654 2026] [ssl:error] [pid 3486782:tid 3486782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:35.449736 2026] [ssl:error] [pid 3486160:tid 3486160] (70014)End of file found: [client 216.73.216.199:8421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:35.458376 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:29914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:35.458400 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:36.050835 2026] [core:error] [pid 3477535:tid 3477535] (13)Permission denied: [client 216.73.216.199:40591] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/spool/exim/db/misc.lockfile
[Thu Jul 30 14:24:38.158331 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:40591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:38.513373 2026] [ssl:error] [pid 3487376:tid 3487376] (EAI 2)Name or service not known: [client 144.76.19.72:29930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:38.513413 2026] [ssl:error] [pid 3487376:tid 3487376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:38.567037 2026] [ssl:error] [pid 3484495:tid 3484495] (EAI 2)Name or service not known: [client 144.76.19.72:29944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:38.567065 2026] [ssl:error] [pid 3484495:tid 3484495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:39.968689 2026] [core:error] [pid 3484719:tid 3484719] (13)Permission denied: [client 216.73.216.199:48637] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/subsystem/drivers/button/uevent
[Thu Jul 30 14:24:40.570687 2026] [core:error] [pid 3484719:tid 3484719] (13)Permission denied: [client 216.73.216.199:48637] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty24/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 14:24:40.871859 2026] [ssl:error] [pid 3484719:tid 3484719] (70014)End of file found: [client 216.73.216.199:48637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:41.098642 2026] [lsapi:warn] [pid 3486071:tid 3486071] [client 72.167.132.114:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:24:41.370303 2026] [ssl:error] [pid 3484278:tid 3484278] (70014)End of file found: [client 216.73.216.199:40401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:41.620682 2026] [ssl:error] [pid 3484204:tid 3484204] (EAI 2)Name or service not known: [client 144.76.19.72:35180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:41.620713 2026] [ssl:error] [pid 3484204:tid 3484204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:41.676870 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:35196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:41.676894 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:41.993034 2026] [access_compat:error] [pid 3484871:tid 3484871] [client 103.59.153.118:65141] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:43.486318 2026] [ssl:error] [pid 3477540:tid 3477540] (70014)End of file found: [client 216.73.216.199:46947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:44.748426 2026] [ssl:error] [pid 3477144:tid 3477144] (EAI 2)Name or service not known: [client 144.76.19.72:35206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:44.748466 2026] [ssl:error] [pid 3477144:tid 3477144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:44.760710 2026] [security2:error] [pid 3484204:tid 3484204] [client 198.11.177.243:59062] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "amtQnMY7MQevNTYeiayXfgAAAAw"]
[Thu Jul 30 14:24:44.801173 2026] [ssl:error] [pid 3484904:tid 3484904] (EAI 2)Name or service not known: [client 144.76.19.72:35212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:44.801198 2026] [ssl:error] [pid 3484904:tid 3484904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:46.294290 2026] [ssl:error] [pid 3481996:tid 3481996] (70014)End of file found: [client 216.73.216.199:34051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:46.666130 2026] [security2:error] [pid 3483902:tid 3483902] [client 47.128.52.49:52188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/robots.txt"] [unique_id "amtQnhYmsgKYtlQnafQrlQAAABY"]
[Thu Jul 30 14:24:46.916604 2026] [security2:error] [pid 3486160:tid 3486160] [client 72.146.16.10:61159] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ditchlingfair.com"] [uri "/wp-config.php"] [unique_id "amtQnn76pvyRaZrN6nCGhAAAABg"]
[Thu Jul 30 14:24:46.916718 2026] [security2:error] [pid 3486160:tid 3486160] [client 72.146.16.10:61159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ditchlingfair.com"] [uri "/wp-config.php"] [unique_id "amtQnn76pvyRaZrN6nCGhAAAABg"]
[Thu Jul 30 14:24:46.916910 2026] [security2:error] [pid 3486160:tid 3486160] [client 72.146.16.10:61159] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ditchlingfair.com"] [uri "/wp-config.php"] [unique_id "amtQnn76pvyRaZrN6nCGhAAAABg"]
[Thu Jul 30 14:24:47.805911 2026] [ssl:error] [pid 3484278:tid 3484278] (70014)End of file found: [client 216.73.216.199:27181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:47.853869 2026] [ssl:error] [pid 3484541:tid 3484541] (EAI 2)Name or service not known: [client 144.76.19.72:35216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:47.853900 2026] [ssl:error] [pid 3484541:tid 3484541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:47.908866 2026] [ssl:error] [pid 3487340:tid 3487340] (EAI 2)Name or service not known: [client 144.76.19.72:35222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:47.908904 2026] [ssl:error] [pid 3487340:tid 3487340] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:48.644892 2026] [access_compat:error] [pid 3488794:tid 3488794] [client 103.59.153.118:65433] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:48.912506 2026] [ssl:error] [pid 3488795:tid 3488795] (70014)End of file found: [client 216.73.216.199:46206] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:50.462950 2026] [security2:error] [pid 3477498:tid 3477498] [client 85.208.96.209:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/robots.txt"] [unique_id "amtQoufSm6QpJSPiQw36lwAAACI"]
[Thu Jul 30 14:24:50.963943 2026] [ssl:error] [pid 3488690:tid 3488690] (EAI 2)Name or service not known: [client 144.76.19.72:44884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:50.963973 2026] [ssl:error] [pid 3488690:tid 3488690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:51.017484 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:44890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:51.017527 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:51.711781 2026] [security2:error] [pid 3477092:tid 3477092] [client 185.191.171.10:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2016/05/26/fast-times-in-buckfastleigh-on-the-s410/"] [unique_id "amtQo6V2pLEsoImxHIQwvQAAAAk"]
[Thu Jul 30 14:24:52.644185 2026] [access_compat:error] [pid 3481996:tid 3481996] [client 103.59.153.118:49247] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:52.917381 2026] [security2:error] [pid 3484718:tid 3484718] [client 72.146.16.10:61067] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ditchlingfair.com"] [uri "/var/log/error.log"] [unique_id "amtQpC-vThkk6iCKiBr0XAAAAD0"]
[Thu Jul 30 14:24:52.917550 2026] [security2:error] [pid 3484718:tid 3484718] [client 72.146.16.10:61067] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ditchlingfair.com"] [uri "/var/log/error.log"] [unique_id "amtQpC-vThkk6iCKiBr0XAAAAD0"]
[Thu Jul 30 14:24:52.917706 2026] [security2:error] [pid 3484718:tid 3484718] [client 72.146.16.10:61067] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ditchlingfair.com"] [uri "/var/log/error.log"] [unique_id "amtQpC-vThkk6iCKiBr0XAAAAD0"]
[Thu Jul 30 14:24:53.262879 2026] [ssl:error] [pid 3479987:tid 3479987] (70014)End of file found: [client 216.73.216.199:8571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:53.835778 2026] [access_compat:error] [pid 3484756:tid 3484756] [client 20.215.216.94:58389] AH01797: client denied by server configuration: /home/tompalm/public_html/wp-content/uploads/dlm_uploads/
[Thu Jul 30 14:24:54.072764 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:44906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:54.072797 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:54.127516 2026] [ssl:error] [pid 3484719:tid 3484719] (EAI 2)Name or service not known: [client 144.76.19.72:44910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:54.127546 2026] [ssl:error] [pid 3484719:tid 3484719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:55.573478 2026] [access_compat:error] [pid 3485410:tid 3485410] [client 45.158.164.139:43422] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:24:55.967394 2026] [ssl:error] [pid 3483318:tid 3483318] (70014)End of file found: [client 216.73.216.199:46588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:57.182562 2026] [ssl:error] [pid 3482123:tid 3482123] (EAI 2)Name or service not known: [client 144.76.19.72:44922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:57.182594 2026] [ssl:error] [pid 3482123:tid 3482123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:57.236717 2026] [ssl:error] [pid 3484495:tid 3484495] (EAI 2)Name or service not known: [client 144.76.19.72:44938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:24:57.236749 2026] [ssl:error] [pid 3484495:tid 3484495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:24:58.074457 2026] [ssl:error] [pid 3488795:tid 3488795] (70014)End of file found: [client 216.73.216.199:43401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:24:59.309796 2026] [access_compat:error] [pid 3484204:tid 3484204] [client 103.59.153.118:49549] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:24:59.884814 2026] [ssl:error] [pid 3484495:tid 3484495] (70014)End of file found: [client 216.73.216.199:59350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:00.293487 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:63084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:00.293521 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:00.346514 2026] [ssl:error] [pid 3444591:tid 3444591] (EAI 2)Name or service not known: [client 144.76.19.72:63098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:00.346548 2026] [ssl:error] [pid 3444591:tid 3444591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:00.997933 2026] [security2:error] [pid 3444591:tid 3444591] [client 51.235.109.116:61524] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQrDxooV55xvHpAdTglAAAACA"]
[Thu Jul 30 14:25:00.997987 2026] [security2:error] [pid 3444591:tid 3444591] [client 51.235.109.116:61524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQrDxooV55xvHpAdTglAAAACA"]
[Thu Jul 30 14:25:00.998255 2026] [security2:error] [pid 3444591:tid 3444591] [client 51.235.109.116:61524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQrDxooV55xvHpAdTglAAAACA"]
[Thu Jul 30 14:25:02.686628 2026] [security2:error] [pid 3485410:tid 3485410] [client 146.56.199.139:43210] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ogsoil.com"] [uri "/"] [unique_id "amtQro0CwpH1dDePVTRnagAAADk"]
[Thu Jul 30 14:25:02.692666 2026] [access_compat:error] [pid 3479987:tid 3479987] [client 74.7.228.39:38222] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 14:25:03.366992 2026] [ssl:error] [pid 3477144:tid 3477144] (70014)End of file found: [client 216.73.216.199:53090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:03.368973 2026] [access_compat:error] [pid 3477540:tid 3477540] [client 103.59.153.118:49765] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:03.400002 2026] [ssl:error] [pid 3477498:tid 3477498] (EAI 2)Name or service not known: [client 144.76.19.72:63104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:03.400026 2026] [ssl:error] [pid 3477498:tid 3477498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:03.454413 2026] [ssl:error] [pid 3484537:tid 3484537] (EAI 2)Name or service not known: [client 144.76.19.72:63110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:03.454461 2026] [ssl:error] [pid 3484537:tid 3484537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:03.850177 2026] [ssl:error] [pid 3488795:tid 3488795] (70014)End of file found: [client 216.73.216.199:6505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:04.453310 2026] [security2:error] [pid 3486691:tid 3486691] [client 102.217.242.254:60206] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQsM8steiyOrt5fDdS4gAAAEo"]
[Thu Jul 30 14:25:04.453356 2026] [security2:error] [pid 3486691:tid 3486691] [client 102.217.242.254:60206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQsM8steiyOrt5fDdS4gAAAEo"]
[Thu Jul 30 14:25:04.453602 2026] [security2:error] [pid 3486691:tid 3486691] [client 102.217.242.254:60206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQsM8steiyOrt5fDdS4gAAAEo"]
[Thu Jul 30 14:25:05.172208 2026] [security2:error] [pid 3486401:tid 3486401] [client 20.171.55.167:4634] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bes-systems.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtQsW8WE6iWXyUvAWO9GwAAAEE"]
[Thu Jul 30 14:25:05.172456 2026] [security2:error] [pid 3486401:tid 3486401] [client 20.171.55.167:4634] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bes-systems.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtQsW8WE6iWXyUvAWO9GwAAAEE"]
[Thu Jul 30 14:25:05.172719 2026] [security2:error] [pid 3486401:tid 3486401] [client 20.171.55.167:4634] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bes-systems.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtQsW8WE6iWXyUvAWO9GwAAAEE"]
[Thu Jul 30 14:25:05.354387 2026] [core:error] [pid 3486691:tid 3486691] (13)Permission denied: [client 216.73.216.199:19281] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 14:25:06.374153 2026] [core:error] [pid 3486691:tid 3486691] (13)Permission denied: [client 216.73.216.199:19281] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:27/subsystem/ttyS0/line
[Thu Jul 30 14:25:06.511004 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:63126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:06.511033 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:06.566924 2026] [ssl:error] [pid 3488794:tid 3488794] (EAI 2)Name or service not known: [client 144.76.19.72:63130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:06.566957 2026] [ssl:error] [pid 3488794:tid 3488794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:06.674322 2026] [access_compat:error] [pid 3486782:tid 3486782] [client 31.204.8.88:43807] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/street-kings
[Thu Jul 30 14:25:06.674420 2026] [access_compat:error] [pid 3486782:tid 3486782] [client 31.204.8.88:43807] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:25:07.442743 2026] [access_compat:error] [pid 3486782:tid 3486782] [client 31.204.8.88:43807] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/favicon.ico, referer: https://blog.alism.com/street-kings/
[Thu Jul 30 14:25:07.442838 2026] [access_compat:error] [pid 3486782:tid 3486782] [client 31.204.8.88:43807] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/street-kings/
[Thu Jul 30 14:25:08.349882 2026] [security2:error] [pid 3483900:tid 3483900] [client 5.29.14.20:8210] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQtFz-IL0PPNfVcoiPugAAAA4"]
[Thu Jul 30 14:25:08.349943 2026] [security2:error] [pid 3483900:tid 3483900] [client 5.29.14.20:8210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtQtFz-IL0PPNfVcoiPugAAAA4"]
[Thu Jul 30 14:25:08.350220 2026] [security2:error] [pid 3483900:tid 3483900] [client 5.29.14.20:8210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtQtFz-IL0PPNfVcoiPugAAAA4"]
[Thu Jul 30 14:25:09.625452 2026] [ssl:error] [pid 3468837:tid 3468837] (EAI 2)Name or service not known: [client 144.76.19.72:45302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:09.625500 2026] [ssl:error] [pid 3468837:tid 3468837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:09.679757 2026] [ssl:error] [pid 3482065:tid 3482065] (EAI 2)Name or service not known: [client 144.76.19.72:45314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:09.679785 2026] [ssl:error] [pid 3482065:tid 3482065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:10.538946 2026] [ssl:error] [pid 3477144:tid 3477144] (70014)End of file found: [client 216.73.216.199:20206] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:10.824246 2026] [cgi:error] [pid 3484905:tid 3484905] [client 72.146.16.10:61117] AH02811: stderr from /home/ditchfes/public_html/ditchlingfair.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 14:25:10.834978 2026] [ssl:error] [pid 3484719:tid 3484719] (70014)End of file found: [client 216.73.216.199:9352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:10.928920 2026] [authz_core:error] [pid 3484905:tid 3484905] [client 72.146.16.10:61117] AH01630: client denied by server configuration: /home/ditchfes/public_html/ditchlingfair.com/php.ini
[Thu Jul 30 14:25:11.366627 2026] [authz_core:error] [pid 3461324:tid 3461324] [client 52.167.144.233:46365] AH01630: client denied by server configuration: /home/edbear/public_html/wp-admin__7af9720/maint/error_log
[Thu Jul 30 14:25:11.437177 2026] [ssl:error] [pid 3483902:tid 3483902] (70014)End of file found: [client 216.73.216.199:42250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:11.749537 2026] [lsapi:warn] [pid 3484236:tid 3484236] [client 66.249.79.198:45622] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:25:12.577357 2026] [authz_core:error] [pid 3484756:tid 3484756] [client 20.215.216.94:58389] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:25:12.732956 2026] [ssl:error] [pid 3484496:tid 3484496] (EAI 2)Name or service not known: [client 144.76.19.72:45326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:12.732984 2026] [ssl:error] [pid 3484496:tid 3484496] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:12.787378 2026] [ssl:error] [pid 3484278:tid 3484278] (EAI 2)Name or service not known: [client 144.76.19.72:45330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:12.787404 2026] [ssl:error] [pid 3484278:tid 3484278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:14.031571 2026] [access_compat:error] [pid 3484871:tid 3484871] [client 103.59.153.118:50266] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:15.714642 2026] [security2:error] [pid 3484537:tid 3484537] [client 51.68.111.244:25835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amtQu7jFYGzv0ULYKioycgAAADY"]
[Thu Jul 30 14:25:15.843500 2026] [ssl:error] [pid 3474441:tid 3474441] (EAI 2)Name or service not known: [client 144.76.19.72:45334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:15.843538 2026] [ssl:error] [pid 3474441:tid 3474441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:15.896412 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:45336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:15.896453 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:17.458338 2026] [ssl:error] [pid 3487376:tid 3487376] (70014)End of file found: [client 216.73.216.199:21745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:18.956304 2026] [ssl:error] [pid 3484458:tid 3484458] (EAI 2)Name or service not known: [client 144.76.19.72:45352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:18.956339 2026] [ssl:error] [pid 3484458:tid 3484458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:19.011518 2026] [ssl:error] [pid 3488794:tid 3488794] (EAI 2)Name or service not known: [client 144.76.19.72:45360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:19.011545 2026] [ssl:error] [pid 3488794:tid 3488794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:19.870878 2026] [ssl:error] [pid 3484676:tid 3484676] (70014)End of file found: [client 216.73.216.199:56528] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:20.171781 2026] [ssl:error] [pid 3484493:tid 3484493] (70014)End of file found: [client 216.73.216.199:51489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:20.636544 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 103.59.153.118:50559] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:21.172206 2026] [access_compat:error] [pid 3477498:tid 3477498] [client 45.158.164.139:46110] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:25:22.095553 2026] [ssl:error] [pid 3488794:tid 3488794] (EAI 2)Name or service not known: [client 144.76.19.72:22382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:22.095587 2026] [ssl:error] [pid 3488794:tid 3488794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:22.146718 2026] [security2:error] [pid 3483871:tid 3483871] [client 185.191.171.8:40640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4549.0/prev_next,prev.html"] [unique_id "amtQwiEzNmnIjSDic7bVMgAAAAQ"]
[Thu Jul 30 14:25:22.152487 2026] [ssl:error] [pid 3484278:tid 3484278] (EAI 2)Name or service not known: [client 144.76.19.72:22392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:22.152519 2026] [ssl:error] [pid 3484278:tid 3484278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:24.084877 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:18425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:24.472301 2026] [core:crit] [pid 3487376:tid 3487376] (13)Permission denied: [client 40.77.167.241:60322] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:25:24.600420 2026] [access_compat:error] [pid 3484871:tid 3484871] [client 103.59.153.118:50756] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:24.797830 2026] [security2:error] [pid 3486691:tid 3486691] [client 37.67.109.207:29424] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pages/view/../../pages/41/Shop/Dungyn_288/page:31"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "jonathanmeyerart.com"] [uri "/pages/41/Shop/Dungyn_288/page:31"] [unique_id "amtQxM8steiyOrt5fDdS8AAAAEo"]
[Thu Jul 30 14:25:24.798044 2026] [security2:error] [pid 3486691:tid 3486691] [client 37.67.109.207:29424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jonathanmeyerart.com"] [uri "/pages/41/Shop/Dungyn_288/page:31"] [unique_id "amtQxM8steiyOrt5fDdS8AAAAEo"]
[Thu Jul 30 14:25:25.208456 2026] [ssl:error] [pid 3481995:tid 3481995] (EAI 2)Name or service not known: [client 144.76.19.72:22394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:25.208486 2026] [ssl:error] [pid 3481995:tid 3481995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:25.264223 2026] [ssl:error] [pid 3483871:tid 3483871] (EAI 2)Name or service not known: [client 144.76.19.72:22406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:25.264258 2026] [ssl:error] [pid 3483871:tid 3483871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:25.305836 2026] [security2:error] [pid 3486691:tid 3486691] [client 37.67.109.207:29424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "jonathanmeyerart.com"] [uri "/index.php"] [unique_id "amtQxM8steiyOrt5fDdS8AAAAEo"]
[Thu Jul 30 14:25:25.507386 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.tmb
[Thu Jul 30 14:25:25.541906 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.tmb
[Thu Jul 30 14:25:25.633055 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.tmb
[Thu Jul 30 14:25:25.717595 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.tmb
[Thu Jul 30 14:25:25.751907 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.tmb
[Thu Jul 30 14:25:25.786195 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/.well-known
[Thu Jul 30 14:25:25.894485 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/991176.php
[Thu Jul 30 14:25:25.894536 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:25.930229 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/adminfuns.php
[Thu Jul 30 14:25:25.930277 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:25.966243 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/atomlib.php
[Thu Jul 30 14:25:25.966295 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.002374 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/classsmtps.php
[Thu Jul 30 14:25:26.002440 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.037212 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/content.php
[Thu Jul 30 14:25:26.037262 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.079327 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/doc.php
[Thu Jul 30 14:25:26.079380 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.115409 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:26.202549 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/fond.php
[Thu Jul 30 14:25:26.202604 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.237742 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/install.php
[Thu Jul 30 14:25:26.237808 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.273861 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/license.php
[Thu Jul 30 14:25:26.273917 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.308738 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/mariju.php
[Thu Jul 30 14:25:26.308790 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.374335 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/moon.php
[Thu Jul 30 14:25:26.374389 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.409141 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/plugins.php
[Thu Jul 30 14:25:26.409192 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.493685 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/sx.php
[Thu Jul 30 14:25:26.493789 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.528220 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/acme-challenge/wp-login.php
[Thu Jul 30 14:25:26.528276 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.595409 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/amaxx.php
[Thu Jul 30 14:25:26.595475 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.630041 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/bek.php
[Thu Jul 30 14:25:26.630128 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.665020 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/caches.php.suspected
[Thu Jul 30 14:25:26.742743 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/class.api.php
[Thu Jul 30 14:25:26.742791 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.777111 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/cong.php
[Thu Jul 30 14:25:26.777162 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.815126 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/content.php
[Thu Jul 30 14:25:26.815177 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.887781 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/cwianpri.php
[Thu Jul 30 14:25:26.887831 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.922623 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/elp.php
[Thu Jul 30 14:25:26.922710 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:26.990836 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.well-known/kwggvpup.php
[Thu Jul 30 14:25:26.990886 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 14:25:27.026057 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.029661 2026] [authz_core:error] [pid 3461324:tid 3461324] [client 34.181.147.239:57360] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:25:27.032405 2026] [authz_core:error] [pid 3461324:tid 3461324] [client 34.181.147.239:57360] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:25:27.064535 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.099767 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.134599 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.243197 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.303781 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.340370 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.440311 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.476605 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.547456 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.585451 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.645005 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.679842 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.716427 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.803417 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.866149 2026] [authz_core:error] [pid 3461324:tid 3461324] [client 34.181.147.239:57360] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:25:27.868797 2026] [authz_core:error] [pid 3461324:tid 3461324] [client 34.181.147.239:57360] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:25:27.917670 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.957326 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.992647 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:27.999337 2026] [ssl:error] [pid 3472867:tid 3472867] (70014)End of file found: [client 216.73.216.199:22366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:28.029597 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.060519 2026] [authz_core:error] [pid 3461324:tid 3461324] [client 34.181.147.239:57360] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:25:28.063178 2026] [authz_core:error] [pid 3461324:tid 3461324] [client 34.181.147.239:57360] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:25:28.098528 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.174098 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.209412 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.244752 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.280428 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.321914 2026] [ssl:error] [pid 3486402:tid 3486402] (EAI 2)Name or service not known: [client 144.76.19.72:22412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:28.321951 2026] [ssl:error] [pid 3486402:tid 3486402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:28.359959 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.379465 2026] [ssl:error] [pid 3481995:tid 3481995] (EAI 2)Name or service not known: [client 144.76.19.72:22414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:28.379496 2026] [ssl:error] [pid 3481995:tid 3481995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:28.395263 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.430695 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.472974 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.510055 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.545208 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.630424 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.665582 2026] [access_compat:error] [pid 3484754:tid 3484754] [client 20.91.199.21:37590] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.shtml
[Thu Jul 30 14:25:28.852957 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "amtQyOfSm6QpJSPiQw36pwAAACI"]
[Thu Jul 30 14:25:28.853146 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "amtQyOfSm6QpJSPiQw36pwAAACI"]
[Thu Jul 30 14:25:28.853363 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.git/HEAD"] [unique_id "amtQyOfSm6QpJSPiQw36pwAAACI"]
[Thu Jul 30 14:25:28.855425 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtQyH76pvyRaZrN6nCGjAAAABg"]
[Thu Jul 30 14:25:28.855634 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtQyH76pvyRaZrN6nCGjAAAABg"]
[Thu Jul 30 14:25:28.855820 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtQyH76pvyRaZrN6nCGjAAAABg"]
[Thu Jul 30 14:25:28.866134 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/backup.sql"] [unique_id "amtQyGpP2G5rbO7-4NBGvgAAAEg"]
[Thu Jul 30 14:25:28.866343 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/backup.sql"] [unique_id "amtQyGpP2G5rbO7-4NBGvgAAAEg"]
[Thu Jul 30 14:25:28.866549 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/backup.sql"] [unique_id "amtQyGpP2G5rbO7-4NBGvgAAAEg"]
[Thu Jul 30 14:25:28.878311 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "amtQyOfSm6QpJSPiQw36qAAAACI"]
[Thu Jul 30 14:25:28.878474 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "amtQyOfSm6QpJSPiQw36qAAAACI"]
[Thu Jul 30 14:25:28.878673 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/api/.env"] [unique_id "amtQyOfSm6QpJSPiQw36qAAAACI"]
[Thu Jul 30 14:25:28.882059 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/database.sql"] [unique_id "amtQyH76pvyRaZrN6nCGjQAAABg"]
[Thu Jul 30 14:25:28.882266 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/database.sql"] [unique_id "amtQyH76pvyRaZrN6nCGjQAAABg"]
[Thu Jul 30 14:25:28.882470 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/database.sql"] [unique_id "amtQyH76pvyRaZrN6nCGjQAAABg"]
[Thu Jul 30 14:25:28.899158 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/database_backup.sql"] [unique_id "amtQyGpP2G5rbO7-4NBGvwAAAEg"]
[Thu Jul 30 14:25:28.899329 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/database_backup.sql"] [unique_id "amtQyGpP2G5rbO7-4NBGvwAAAEg"]
[Thu Jul 30 14:25:28.899528 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/database_backup.sql"] [unique_id "amtQyGpP2G5rbO7-4NBGvwAAAEg"]
[Thu Jul 30 14:25:28.899628 2026] [security2:error] [pid 3481995:tid 3481995] [client 81.171.74.60:47642] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtQyPeOCCxDwcphblSDBAAAAAU"]
[Thu Jul 30 14:25:28.899744 2026] [security2:error] [pid 3481995:tid 3481995] [client 81.171.74.60:47642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtQyPeOCCxDwcphblSDBAAAAAU"]
[Thu Jul 30 14:25:28.899916 2026] [security2:error] [pid 3481995:tid 3481995] [client 81.171.74.60:47642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtQyPeOCCxDwcphblSDBAAAAAU"]
[Thu Jul 30 14:25:28.903396 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php"] [unique_id "amtQyOfSm6QpJSPiQw36qQAAACI"]
[Thu Jul 30 14:25:28.903516 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php"] [unique_id "amtQyOfSm6QpJSPiQw36qQAAACI"]
[Thu Jul 30 14:25:28.903693 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/wp-config.php"] [unique_id "amtQyOfSm6QpJSPiQw36qQAAACI"]
[Thu Jul 30 14:25:28.924454 2026] [security2:error] [pid 3481995:tid 3481995] [client 81.171.74.60:47642] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtQyPeOCCxDwcphblSDBQAAAAU"]
[Thu Jul 30 14:25:28.924566 2026] [security2:error] [pid 3481995:tid 3481995] [client 81.171.74.60:47642] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtQyPeOCCxDwcphblSDBQAAAAU"]
[Thu Jul 30 14:25:28.924678 2026] [security2:error] [pid 3481995:tid 3481995] [client 81.171.74.60:47642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtQyPeOCCxDwcphblSDBQAAAAU"]
[Thu Jul 30 14:25:28.924863 2026] [security2:error] [pid 3481995:tid 3481995] [client 81.171.74.60:47642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtQyPeOCCxDwcphblSDBQAAAAU"]
[Thu Jul 30 14:25:28.959381 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/_vti_pvt/service.pwd"] [unique_id "amtQyH76pvyRaZrN6nCGkAAAABg"]
[Thu Jul 30 14:25:28.959575 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/_vti_pvt/service.pwd"] [unique_id "amtQyH76pvyRaZrN6nCGkAAAABg"]
[Thu Jul 30 14:25:28.959770 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/_vti_pvt/service.pwd"] [unique_id "amtQyH76pvyRaZrN6nCGkAAAABg"]
[Thu Jul 30 14:25:28.985286 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "amtQyH76pvyRaZrN6nCGkQAAABg"]
[Thu Jul 30 14:25:28.985427 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "amtQyH76pvyRaZrN6nCGkQAAABg"]
[Thu Jul 30 14:25:28.985609 2026] [security2:error] [pid 3486160:tid 3486160] [client 81.171.74.60:47652] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/.env.production"] [unique_id "amtQyH76pvyRaZrN6nCGkQAAABg"]
[Thu Jul 30 14:25:29.000002 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/etc/ssl/private/server.key"] [unique_id "amtQyOfSm6QpJSPiQw36rQAAACI"]
[Thu Jul 30 14:25:29.000119 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/server.key"] [unique_id "amtQyGpP2G5rbO7-4NBGwwAAAEg"]
[Thu Jul 30 14:25:29.000201 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/etc/ssl/private/server.key"] [unique_id "amtQyOfSm6QpJSPiQw36rQAAACI"]
[Thu Jul 30 14:25:29.000302 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/server.key"] [unique_id "amtQyGpP2G5rbO7-4NBGwwAAAEg"]
[Thu Jul 30 14:25:29.000388 2026] [security2:error] [pid 3477498:tid 3477498] [client 81.171.74.60:47670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/etc/ssl/private/server.key"] [unique_id "amtQyOfSm6QpJSPiQw36rQAAACI"]
[Thu Jul 30 14:25:29.000508 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/server.key"] [unique_id "amtQyGpP2G5rbO7-4NBGwwAAAEg"]
[Thu Jul 30 14:25:29.050559 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/dump.sql"] [unique_id "amtQyWpP2G5rbO7-4NBGxQAAAEg"]
[Thu Jul 30 14:25:29.050741 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/dump.sql"] [unique_id "amtQyWpP2G5rbO7-4NBGxQAAAEg"]
[Thu Jul 30 14:25:29.050915 2026] [security2:error] [pid 3486402:tid 3486402] [client 81.171.74.60:47668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "buildingconversations.secretbluestone.co.uk"] [uri "/dump.sql"] [unique_id "amtQyWpP2G5rbO7-4NBGxQAAAEg"]
[Thu Jul 30 14:25:29.524970 2026] [security2:error] [pid 3474441:tid 3474441] [client 185.191.171.8:24894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2422.0/prev_next,next.html"] [unique_id "amtQyQQfZjCmupoxHvbtcAAAAD4"]
[Thu Jul 30 14:25:29.801108 2026] [ssl:error] [pid 3483902:tid 3483902] (70014)End of file found: [client 216.73.216.199:27406] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:31.303719 2026] [access_compat:error] [pid 3484279:tid 3484279] [client 103.59.153.118:51051] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:31.432736 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:39576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:31.432773 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:31.489552 2026] [ssl:error] [pid 3486160:tid 3486160] (EAI 2)Name or service not known: [client 144.76.19.72:39584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:31.489592 2026] [ssl:error] [pid 3486160:tid 3486160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:34.607505 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:39588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:34.607544 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:34.664016 2026] [ssl:error] [pid 3487376:tid 3487376] (EAI 2)Name or service not known: [client 144.76.19.72:39598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:34.664047 2026] [ssl:error] [pid 3487376:tid 3487376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:35.231343 2026] [access_compat:error] [pid 3482125:tid 3482125] [client 103.59.153.118:51249] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:35.879084 2026] [security2:error] [pid 3486160:tid 3486160] [client 85.208.96.206:18524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/skip-and-shannon:-undisputed"] [unique_id "amtQz376pvyRaZrN6nCGlgAAABg"]
[Thu Jul 30 14:25:36.107317 2026] [security2:error] [pid 3484871:tid 3484871] [client 43.134.100.175:55610] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.co.uk"] [uri "/"] [unique_id "amtQ0DKNluJ_AD5Zo78bBQAAAEU"]
[Thu Jul 30 14:25:37.608164 2026] [security2:error] [pid 3461324:tid 3461324] [client 43.134.100.175:57218] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtQ0TFuH2zLMh8ZU0IAagAAADU"], referer: http://jasperandtroy.co.uk
[Thu Jul 30 14:25:37.722404 2026] [ssl:error] [pid 3486691:tid 3486691] (EAI 2)Name or service not known: [client 144.76.19.72:39604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:37.722444 2026] [ssl:error] [pid 3486691:tid 3486691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:37.775697 2026] [ssl:error] [pid 3486329:tid 3486329] (EAI 2)Name or service not known: [client 144.76.19.72:39610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:37.775733 2026] [ssl:error] [pid 3486329:tid 3486329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:40.555223 2026] [ssl:error] [pid 3484904:tid 3484904] (70014)End of file found: [client 216.73.216.199:8687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:40.831207 2026] [ssl:error] [pid 3477144:tid 3477144] (EAI 2)Name or service not known: [client 144.76.19.72:60074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:40.831234 2026] [ssl:error] [pid 3477144:tid 3477144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:40.885406 2026] [ssl:error] [pid 3483900:tid 3483900] (EAI 2)Name or service not known: [client 144.76.19.72:60082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:40.885451 2026] [ssl:error] [pid 3483900:tid 3483900] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:40.929733 2026] [security2:error] [pid 3482124:tid 3482124] [client 43.134.15.174:53786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewvenables.com"] [uri "/"] [unique_id "amtQ1InI_FWZ-kIA0xoy2QAAACg"]
[Thu Jul 30 14:25:41.463760 2026] [core:error] [pid 3484871:tid 3484871] (13)Permission denied: [client 216.73.216.199:32419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty50/subsystem/ttyS2/device/driver/unbind
[Thu Jul 30 14:25:41.701585 2026] [security2:error] [pid 3484459:tid 3484459] [client 43.134.15.174:42210] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewvenables.com"] [uri "/"] [unique_id "amtQ1YlP7IPz6daCZUggVAAAACw"], referer: http://www.andrewvenables.com
[Thu Jul 30 14:25:42.119730 2026] [security2:error] [pid 3486402:tid 3486402] [client 194.147.114.175:41734] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "kinesiologylondon.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtQ1mpP2G5rbO7-4NBGygAAAEg"]
[Thu Jul 30 14:25:42.937785 2026] [access_compat:error] [pid 3472867:tid 3472867] [client 51.103.154.47:39095] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:25:42.974544 2026] [core:error] [pid 3484871:tid 3484871] (13)Permission denied: [client 216.73.216.199:32419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty3/subsystem/ttyS0/closing_wait
[Thu Jul 30 14:25:43.943060 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:60094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:43.943106 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:43.994493 2026] [ssl:error] [pid 3484493:tid 3484493] (EAI 2)Name or service not known: [client 144.76.19.72:60106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:43.994528 2026] [ssl:error] [pid 3484493:tid 3484493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:44.780379 2026] [core:error] [pid 3484871:tid 3484871] (13)Permission denied: [client 216.73.216.199:32419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/189:1/driver/unbind
[Thu Jul 30 14:25:45.385741 2026] [ssl:error] [pid 3484871:tid 3484871] (70014)End of file found: [client 216.73.216.199:32419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:45.855842 2026] [access_compat:error] [pid 3482125:tid 3482125] [client 103.59.153.118:51745] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:46.899626 2026] [ssl:error] [pid 3474390:tid 3474390] (70014)End of file found: [client 216.73.216.199:19974] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:47.085158 2026] [ssl:error] [pid 3468251:tid 3468251] (EAI 2)Name or service not known: [client 144.76.19.72:60108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:47.085184 2026] [ssl:error] [pid 3468251:tid 3468251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:47.138619 2026] [ssl:error] [pid 3484493:tid 3484493] (EAI 2)Name or service not known: [client 144.76.19.72:60122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:47.138656 2026] [ssl:error] [pid 3484493:tid 3484493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:50.232372 2026] [core:error] [pid 3477535:tid 3477535] (13)Permission denied: [client 216.73.216.199:51866] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/firstclassbkltd.co.uk.db
[Thu Jul 30 14:25:50.245125 2026] [ssl:error] [pid 3477540:tid 3477540] (EAI 2)Name or service not known: [client 144.76.19.72:47532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:50.245149 2026] [ssl:error] [pid 3477540:tid 3477540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:50.300696 2026] [ssl:error] [pid 3484459:tid 3484459] (EAI 2)Name or service not known: [client 144.76.19.72:47544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:50.300729 2026] [ssl:error] [pid 3484459:tid 3484459] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:50.834748 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:51866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:51.738733 2026] [core:error] [pid 3472867:tid 3472867] (13)Permission denied: [client 216.73.216.199:10845] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty58/subsystem/ttyS0/flags
[Thu Jul 30 14:25:52.039808 2026] [core:error] [pid 3472867:tid 3472867] (13)Permission denied: [client 216.73.216.199:10845] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS0/custom_divisor
[Thu Jul 30 14:25:52.487177 2026] [access_compat:error] [pid 3484904:tid 3484904] [client 103.59.153.118:52039] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:53.595020 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:47554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:53.595052 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:53.650782 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:47562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:53.650807 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:54.449466 2026] [ssl:error] [pid 3477540:tid 3477540] (70014)End of file found: [client 216.73.216.199:45257] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:54.482385 2026] [security2:error] [pid 3427797:tid 3427797] [client 114.119.142.20:57539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/cat_ids~30,17/request_format~html"] [unique_id "amtQ4tgFkRgyA50rwMCvcgAAAB4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575676800/request_format~html/cat_ids~30
[Thu Jul 30 14:25:55.051395 2026] [ssl:error] [pid 3472867:tid 3472867] (70014)End of file found: [client 216.73.216.199:10845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:55.707373 2026] [access_compat:error] [pid 3484279:tid 3484279] [client 47.236.199.168:16320] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2009/05/angels-and-demons.jpg
[Thu Jul 30 14:25:55.707501 2026] [access_compat:error] [pid 3484279:tid 3484279] [client 47.236.199.168:16320] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:25:56.067782 2026] [security2:error] [pid 3492163:tid 3492163] [client 114.119.142.20:57543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/cat_ids~30,17/request_format~html"] [unique_id "amtQ5N00gTcCuEg8qJkqmgAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575676800/request_format~html/cat_ids~30
[Thu Jul 30 14:25:56.463530 2026] [access_compat:error] [pid 3492201:tid 3492201] [client 45.158.164.139:51940] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:25:56.545618 2026] [access_compat:error] [pid 3483318:tid 3483318] [client 103.59.153.118:52239] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:25:56.556584 2026] [ssl:error] [pid 3427797:tid 3427797] (70014)End of file found: [client 216.73.216.199:18648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:25:56.721963 2026] [ssl:error] [pid 3482124:tid 3482124] (EAI 2)Name or service not known: [client 144.76.19.72:47576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:56.722010 2026] [ssl:error] [pid 3482124:tid 3482124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:56.745135 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 189.104.95.47:27570] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/08/mobile-devices.jpg
[Thu Jul 30 14:25:56.745243 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 189.104.95.47:27570] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:25:56.779564 2026] [ssl:error] [pid 3486160:tid 3486160] (EAI 2)Name or service not known: [client 144.76.19.72:47582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:56.779603 2026] [ssl:error] [pid 3486160:tid 3486160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:56.864765 2026] [security2:error] [pid 3484281:tid 3484281] [client 85.208.96.205:60028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.3435.html"] [unique_id "amtQ5Lv_7unqqACsuopQIAAAAB8"]
[Thu Jul 30 14:25:59.838569 2026] [ssl:error] [pid 3482118:tid 3482118] (EAI 2)Name or service not known: [client 144.76.19.72:30676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:59.838616 2026] [ssl:error] [pid 3482118:tid 3482118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:25:59.896358 2026] [ssl:error] [pid 3492119:tid 3492119] (EAI 2)Name or service not known: [client 144.76.19.72:30680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:25:59.896392 2026] [ssl:error] [pid 3492119:tid 3492119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:00.778694 2026] [core:error] [pid 3482125:tid 3482125] (13)Permission denied: [client 216.73.216.199:62043] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/trueuserowners
[Thu Jul 30 14:26:01.084781 2026] [core:crit] [pid 3482125:tid 3482125] (13)Permission denied: [client 216.73.216.199:62043] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/conf.d/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/conf.d/' is executable
[Thu Jul 30 14:26:01.089198 2026] [core:crit] [pid 3482125:tid 3482125] (13)Permission denied: [client 216.73.216.199:62043] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/custom.etc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/custom.etc/' is executable
[Thu Jul 30 14:26:01.091245 2026] [core:crit] [pid 3482125:tid 3482125] (13)Permission denied: [client 216.73.216.199:62043] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/exclude.d/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/exclude.d/' is executable
[Thu Jul 30 14:26:01.104248 2026] [core:crit] [pid 3482125:tid 3482125] (13)Permission denied: [client 216.73.216.199:62043] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/exclude/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/exclude/' is executable
[Thu Jul 30 14:26:02.949151 2026] [ssl:error] [pid 3474441:tid 3474441] (EAI 2)Name or service not known: [client 144.76.19.72:30696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:02.949181 2026] [ssl:error] [pid 3474441:tid 3474441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:03.000546 2026] [ssl:error] [pid 3483318:tid 3483318] (EAI 2)Name or service not known: [client 144.76.19.72:30710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:03.000574 2026] [ssl:error] [pid 3483318:tid 3483318] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:03.187379 2026] [ssl:error] [pid 3482125:tid 3482125] (70014)End of file found: [client 216.73.216.199:62043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:03.217327 2026] [access_compat:error] [pid 3477540:tid 3477540] [client 103.59.153.118:52540] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:05.292139 2026] [ssl:error] [pid 3489338:tid 3489338] (70014)End of file found: [client 216.73.216.199:60720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:06.054161 2026] [ssl:error] [pid 3492562:tid 3492562] (EAI 2)Name or service not known: [client 144.76.19.72:30714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:06.054208 2026] [ssl:error] [pid 3492562:tid 3492562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:06.109183 2026] [ssl:error] [pid 3492563:tid 3492563] (EAI 2)Name or service not known: [client 144.76.19.72:30722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:06.109222 2026] [ssl:error] [pid 3492563:tid 3492563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:07.263192 2026] [access_compat:error] [pid 3488794:tid 3488794] [client 103.59.153.118:52737] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:07.564720 2026] [authz_core:error] [pid 3482118:tid 3482118] [client 66.249.66.33:36533] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:26:07.567450 2026] [authz_core:error] [pid 3482118:tid 3482118] [client 66.249.66.33:36533] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:26:09.166189 2026] [ssl:error] [pid 3492561:tid 3492561] (EAI 2)Name or service not known: [client 144.76.19.72:30734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:09.166237 2026] [ssl:error] [pid 3492561:tid 3492561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:09.222746 2026] [ssl:error] [pid 3484904:tid 3484904] (EAI 2)Name or service not known: [client 144.76.19.72:30744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:09.222790 2026] [ssl:error] [pid 3484904:tid 3484904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:09.271176 2026] [security2:error] [pid 3427797:tid 3427797] [client 163.61.60.30:41084] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "berehap.be"] [uri "/xmlrpc.php"] [unique_id "amtQ8dgFkRgyA50rwMCvdgAAAB4"]
[Thu Jul 30 14:26:09.674632 2026] [ssl:error] [pid 3492498:tid 3492498] (70014)End of file found: [client 216.73.216.199:26828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:10.577926 2026] [core:error] [pid 3481995:tid 3481995] (13)Permission denied: [client 216.73.216.199:11649] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/anon_vma_chain/cpu_slabs
[Thu Jul 30 14:26:12.276280 2026] [ssl:error] [pid 3492674:tid 3492674] (EAI 2)Name or service not known: [client 144.76.19.72:61532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:12.276314 2026] [ssl:error] [pid 3492674:tid 3492674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:12.333379 2026] [ssl:error] [pid 3492564:tid 3492564] (EAI 2)Name or service not known: [client 144.76.19.72:61542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:12.333410 2026] [ssl:error] [pid 3492564:tid 3492564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:14.496662 2026] [ssl:error] [pid 3481995:tid 3481995] (70014)End of file found: [client 216.73.216.199:11649] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:15.386946 2026] [ssl:error] [pid 3486691:tid 3486691] (EAI 2)Name or service not known: [client 144.76.19.72:61556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:15.386976 2026] [ssl:error] [pid 3486691:tid 3486691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:15.443211 2026] [ssl:error] [pid 3486160:tid 3486160] (EAI 2)Name or service not known: [client 144.76.19.72:61564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:15.443242 2026] [ssl:error] [pid 3486160:tid 3486160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:16.006464 2026] [ssl:error] [pid 3484459:tid 3484459] (70014)End of file found: [client 216.73.216.199:35405] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:17.512900 2026] [ssl:error] [pid 3484281:tid 3484281] (70014)End of file found: [client 216.73.216.199:1325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:17.943959 2026] [access_compat:error] [pid 3492498:tid 3492498] [client 103.59.153.118:53235] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:18.496075 2026] [ssl:error] [pid 3486160:tid 3486160] (EAI 2)Name or service not known: [client 144.76.19.72:61572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:18.496103 2026] [ssl:error] [pid 3486160:tid 3486160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:18.552011 2026] [ssl:error] [pid 3484400:tid 3484400] (EAI 2)Name or service not known: [client 144.76.19.72:61576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:18.552048 2026] [ssl:error] [pid 3484400:tid 3484400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:19.916850 2026] [ssl:error] [pid 3493046:tid 3493046] (70014)End of file found: [client 216.73.216.199:14403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:21.422805 2026] [ssl:error] [pid 3484458:tid 3484458] (70014)End of file found: [client 216.73.216.199:43976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:21.607627 2026] [ssl:error] [pid 3482124:tid 3482124] (EAI 2)Name or service not known: [client 144.76.19.72:33092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:21.607659 2026] [ssl:error] [pid 3482124:tid 3482124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:21.660556 2026] [ssl:error] [pid 3492526:tid 3492526] (EAI 2)Name or service not known: [client 144.76.19.72:33108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:21.660590 2026] [ssl:error] [pid 3492526:tid 3492526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:24.652495 2026] [access_compat:error] [pid 3482124:tid 3482124] [client 103.59.153.118:53537] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:24.718459 2026] [ssl:error] [pid 3486160:tid 3486160] (EAI 2)Name or service not known: [client 144.76.19.72:33114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:24.718493 2026] [ssl:error] [pid 3486160:tid 3486160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:24.774480 2026] [ssl:error] [pid 3486691:tid 3486691] (EAI 2)Name or service not known: [client 144.76.19.72:33122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:24.774506 2026] [ssl:error] [pid 3486691:tid 3486691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:25.103713 2026] [core:error] [pid 3477092:tid 3477092] [client 66.249.66.8:54919] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:26:25.103740 2026] [core:error] [pid 3477092:tid 3477092] [client 66.249.66.8:54919] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:26:25.220743 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 45.158.164.139:50186] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:26:26.226918 2026] [security2:error] [pid 3492202:tid 3492202] [client 43.165.7.74:38024] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtRAr0xpEVjvfNvavkrjgAAAAw"]
[Thu Jul 30 14:26:27.827835 2026] [ssl:error] [pid 3484281:tid 3484281] (EAI 2)Name or service not known: [client 144.76.19.72:33138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:27.827875 2026] [ssl:error] [pid 3484281:tid 3484281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:27.882290 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:33140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:27.882315 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:28.562602 2026] [access_compat:error] [pid 3477540:tid 3477540] [client 103.59.153.118:53823] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:30.961119 2026] [ssl:error] [pid 3477092:tid 3477092] (EAI 2)Name or service not known: [client 144.76.19.72:56080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:30.961159 2026] [ssl:error] [pid 3477092:tid 3477092] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:31.017603 2026] [ssl:error] [pid 3482124:tid 3482124] (EAI 2)Name or service not known: [client 144.76.19.72:56092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:31.017633 2026] [ssl:error] [pid 3482124:tid 3482124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:32.881320 2026] [core:error] [pid 3492526:tid 3492526] (13)Permission denied: [client 216.73.216.199:2601] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty54/subsystem/ttyS2/uartclk
[Thu Jul 30 14:26:32.978423 2026] [security2:error] [pid 3492564:tid 3492564] [client 49.232.104.223:32916] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kirmond.com"] [uri "/"] [unique_id "amtRCIzbTIa8wMRux2uY7gAAABo"]
[Thu Jul 30 14:26:32.981303 2026] [authz_core:error] [pid 3492564:tid 3492564] [client 49.232.104.223:32916] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 14:26:33.459521 2026] [access_compat:error] [pid 3492564:tid 3492564] [client 5.127.0.38:46358] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:26:33.979244 2026] [security2:error] [pid 3493763:tid 3493763] [client 106.52.49.148:58164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sharonduggal.co.uk"] [uri "/"] [unique_id "amtRCZ7WER7z0Nc-PX4m3AAAAA4"]
[Thu Jul 30 14:26:34.068820 2026] [security2:error] [pid 3492199:tid 3492199] [client 47.245.132.119:25899] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRCjZvmoc3shX--AI0PQAAAAQ"]
[Thu Jul 30 14:26:34.068869 2026] [security2:error] [pid 3492199:tid 3492199] [client 47.245.132.119:25899] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRCjZvmoc3shX--AI0PQAAAAQ"]
[Thu Jul 30 14:26:34.069135 2026] [security2:error] [pid 3492199:tid 3492199] [client 47.245.132.119:25899] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRCjZvmoc3shX--AI0PQAAAAQ"]
[Thu Jul 30 14:26:34.072555 2026] [ssl:error] [pid 3481995:tid 3481995] (EAI 2)Name or service not known: [client 144.76.19.72:56094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:34.072577 2026] [ssl:error] [pid 3481995:tid 3481995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:34.092827 2026] [core:error] [pid 3492526:tid 3492526] (13)Permission denied: [client 216.73.216.199:2601] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/dnsltd.com.mt.db
[Thu Jul 30 14:26:34.125287 2026] [ssl:error] [pid 3493680:tid 3493680] (EAI 2)Name or service not known: [client 144.76.19.72:56098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:34.125322 2026] [ssl:error] [pid 3493680:tid 3493680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:35.279925 2026] [access_compat:error] [pid 3493842:tid 3493842] [client 103.59.153.118:54292] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:35.484467 2026] [cgi:error] [pid 3482064:tid 3482064] [client 66.249.66.196:51986] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:26:36.544231 2026] [security2:error] [pid 3493911:tid 3493911] [client 185.191.171.7:63946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/top-10-towed-artillery-gun-in-the-world"] [unique_id "amtRDP1eMlbGF6rCgUZgegAAAC0"]
[Thu Jul 30 14:26:36.801443 2026] [core:error] [pid 3484676:tid 3484676] (13)Permission denied: [client 216.73.216.199:8279] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS0/custom_divisor
[Thu Jul 30 14:26:37.180391 2026] [ssl:error] [pid 3474441:tid 3474441] (EAI 2)Name or service not known: [client 144.76.19.72:56104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:37.180441 2026] [ssl:error] [pid 3474441:tid 3474441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:37.233617 2026] [ssl:error] [pid 3492563:tid 3492563] (EAI 2)Name or service not known: [client 144.76.19.72:56120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:37.233648 2026] [ssl:error] [pid 3492563:tid 3492563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:37.916559 2026] [security2:error] [pid 3479987:tid 3479987] [client 94.154.43.187:48718] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kirmond.com"] [uri "/.env"] [unique_id "amtRDbvO3i1cXA-6ysnqewAAAAs"]
[Thu Jul 30 14:26:37.916729 2026] [security2:error] [pid 3479987:tid 3479987] [client 94.154.43.187:48718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kirmond.com"] [uri "/.env"] [unique_id "amtRDbvO3i1cXA-6ysnqewAAAAs"]
[Thu Jul 30 14:26:37.916903 2026] [security2:error] [pid 3479987:tid 3479987] [client 94.154.43.187:48718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kirmond.com"] [uri "/.env"] [unique_id "amtRDbvO3i1cXA-6ysnqewAAAAs"]
[Thu Jul 30 14:26:37.943207 2026] [security2:error] [pid 3488794:tid 3488794] [client 94.154.43.187:48734] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.com"] [uri "/.env"] [unique_id "amtRDWdbbaWwDdHp4FIN7gAAABw"]
[Thu Jul 30 14:26:37.943357 2026] [security2:error] [pid 3488794:tid 3488794] [client 94.154.43.187:48734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.com"] [uri "/.env"] [unique_id "amtRDWdbbaWwDdHp4FIN7gAAABw"]
[Thu Jul 30 14:26:37.943545 2026] [security2:error] [pid 3488794:tid 3488794] [client 94.154.43.187:48734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.com"] [uri "/.env"] [unique_id "amtRDWdbbaWwDdHp4FIN7gAAABw"]
[Thu Jul 30 14:26:37.960798 2026] [security2:error] [pid 3493912:tid 3493912] [client 191.240.129.90:2827] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRDcEMfFeUaFGoyvDpxwAAAC8"]
[Thu Jul 30 14:26:37.960850 2026] [security2:error] [pid 3493912:tid 3493912] [client 191.240.129.90:2827] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRDcEMfFeUaFGoyvDpxwAAAC8"]
[Thu Jul 30 14:26:37.961119 2026] [security2:error] [pid 3493912:tid 3493912] [client 191.240.129.90:2827] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRDcEMfFeUaFGoyvDpxwAAAC8"]
[Thu Jul 30 14:26:37.977314 2026] [security2:error] [pid 3474441:tid 3474441] [client 94.154.43.184:57460] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.com"] [uri "/.env"] [unique_id "amtRDQQfZjCmupoxHvbt4AAAAD4"]
[Thu Jul 30 14:26:37.977563 2026] [security2:error] [pid 3474441:tid 3474441] [client 94.154.43.184:57460] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.com"] [uri "/.env"] [unique_id "amtRDQQfZjCmupoxHvbt4AAAAD4"]
[Thu Jul 30 14:26:37.977827 2026] [security2:error] [pid 3474441:tid 3474441] [client 94.154.43.184:57460] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.com"] [uri "/.env"] [unique_id "amtRDQQfZjCmupoxHvbt4AAAAD4"]
[Thu Jul 30 14:26:38.882338 2026] [security2:error] [pid 3477144:tid 3477144] [client 94.154.43.185:38418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/.env"] [unique_id "amtRDjr3s2W0oOwhV6WBFAAAABA"]
[Thu Jul 30 14:26:38.882545 2026] [security2:error] [pid 3477144:tid 3477144] [client 94.154.43.185:38418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/.env"] [unique_id "amtRDjr3s2W0oOwhV6WBFAAAABA"]
[Thu Jul 30 14:26:38.882779 2026] [security2:error] [pid 3477144:tid 3477144] [client 94.154.43.185:38418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/.env"] [unique_id "amtRDjr3s2W0oOwhV6WBFAAAABA"]
[Thu Jul 30 14:26:39.165498 2026] [access_compat:error] [pid 3493908:tid 3493908] [client 103.59.153.118:54563] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:39.297806 2026] [security2:error] [pid 3477535:tid 3477535] [client 94.154.43.178:22740] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/.env"] [unique_id "amtRD73_9qQy-oYyKARezwAAACo"]
[Thu Jul 30 14:26:39.297995 2026] [security2:error] [pid 3477535:tid 3477535] [client 94.154.43.178:22740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/.env"] [unique_id "amtRD73_9qQy-oYyKARezwAAACo"]
[Thu Jul 30 14:26:39.298211 2026] [security2:error] [pid 3477535:tid 3477535] [client 94.154.43.178:22740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/.env"] [unique_id "amtRD73_9qQy-oYyKARezwAAACo"]
[Thu Jul 30 14:26:39.393117 2026] [security2:error] [pid 3492200:tid 3492200] [client 94.154.43.186:41440] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kirmond.co.uk"] [uri "/.env"] [unique_id "amtRDxjme8ANLljS3IvYNAAAAAg"]
[Thu Jul 30 14:26:39.393310 2026] [security2:error] [pid 3492200:tid 3492200] [client 94.154.43.186:41440] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kirmond.co.uk"] [uri "/.env"] [unique_id "amtRDxjme8ANLljS3IvYNAAAAAg"]
[Thu Jul 30 14:26:39.393541 2026] [security2:error] [pid 3492200:tid 3492200] [client 94.154.43.186:41440] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kirmond.co.uk"] [uri "/.env"] [unique_id "amtRDxjme8ANLljS3IvYNAAAAAg"]
[Thu Jul 30 14:26:39.975653 2026] [security2:error] [pid 3481995:tid 3481995] [client 170.106.113.159:34862] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amtRD_eOCCxDwcphblSDLgAAAAU"]
[Thu Jul 30 14:26:40.291852 2026] [ssl:error] [pid 3492201:tid 3492201] (EAI 2)Name or service not known: [client 144.76.19.72:20988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:40.291885 2026] [ssl:error] [pid 3492201:tid 3492201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:40.343941 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:20990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:40.343970 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:41.507643 2026] [ssl:error] [pid 3484676:tid 3484676] (70014)End of file found: [client 216.73.216.199:8279] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:42.249871 2026] [security2:error] [pid 3481995:tid 3481995] [client 184.66.96.143:38690] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtREveOCCxDwcphblSDLwAAAAU"]
[Thu Jul 30 14:26:42.249920 2026] [security2:error] [pid 3481995:tid 3481995] [client 184.66.96.143:38690] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtREveOCCxDwcphblSDLwAAAAU"]
[Thu Jul 30 14:26:42.250167 2026] [security2:error] [pid 3481995:tid 3481995] [client 184.66.96.143:38690] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtREveOCCxDwcphblSDLwAAAAU"]
[Thu Jul 30 14:26:43.396214 2026] [ssl:error] [pid 3493762:tid 3493762] (EAI 2)Name or service not known: [client 144.76.19.72:20996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:43.396247 2026] [ssl:error] [pid 3493762:tid 3493762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:43.453482 2026] [ssl:error] [pid 3492525:tid 3492525] (EAI 2)Name or service not known: [client 144.76.19.72:21012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:43.453511 2026] [ssl:error] [pid 3492525:tid 3492525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:45.721153 2026] [core:error] [pid 3486160:tid 3486160] (13)Permission denied: [client 216.73.216.199:47672] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/abcprint.com.mt.db
[Thu Jul 30 14:26:46.583007 2026] [ssl:error] [pid 3482124:tid 3482124] (EAI 2)Name or service not known: [client 144.76.19.72:21024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:46.583060 2026] [ssl:error] [pid 3482124:tid 3482124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:46.640520 2026] [ssl:error] [pid 3477144:tid 3477144] (EAI 2)Name or service not known: [client 144.76.19.72:21026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:46.640556 2026] [ssl:error] [pid 3477144:tid 3477144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:47.829320 2026] [ssl:error] [pid 3486160:tid 3486160] (70014)End of file found: [client 216.73.216.199:47672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:49.700567 2026] [ssl:error] [pid 3493914:tid 3493914] (EAI 2)Name or service not known: [client 144.76.19.72:50638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:49.700603 2026] [ssl:error] [pid 3493914:tid 3493914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:49.753741 2026] [ssl:error] [pid 3493763:tid 3493763] (EAI 2)Name or service not known: [client 144.76.19.72:50648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:49.753770 2026] [ssl:error] [pid 3493763:tid 3493763] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:49.793078 2026] [access_compat:error] [pid 3482124:tid 3482124] [client 103.59.153.118:55130] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:49.838958 2026] [authz_core:error] [pid 3493842:tid 3493842] [client 66.249.66.33:44014] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:26:49.841863 2026] [authz_core:error] [pid 3493842:tid 3493842] [client 66.249.66.33:44014] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:26:50.887220 2026] [core:error] [pid 3494710:tid 3494710] (13)Permission denied: [client 216.73.216.199:1680] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-16/slab_size
[Thu Jul 30 14:26:51.194520 2026] [authz_core:error] [pid 3493842:tid 3493842] [client 66.249.66.33:44014] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:26:51.197279 2026] [authz_core:error] [pid 3493842:tid 3493842] [client 66.249.66.33:44014] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:26:51.490479 2026] [ssl:error] [pid 3494710:tid 3494710] (70014)End of file found: [client 216.73.216.199:1680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:52.808104 2026] [ssl:error] [pid 3493762:tid 3493762] (EAI 2)Name or service not known: [client 144.76.19.72:50658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:52.808160 2026] [ssl:error] [pid 3493762:tid 3493762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:52.863924 2026] [ssl:error] [pid 3492201:tid 3492201] (EAI 2)Name or service not known: [client 144.76.19.72:50668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:52.863949 2026] [ssl:error] [pid 3492201:tid 3492201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:52.990707 2026] [core:error] [pid 3493913:tid 3493913] (13)Permission denied: [client 216.73.216.199:63807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS3/uartclk
[Thu Jul 30 14:26:53.147089 2026] [security2:error] [pid 3482118:tid 3482118] [client 45.148.10.120:57390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amtRHWNqu9cXUHDSDh_akgAAABM"]
[Thu Jul 30 14:26:53.147220 2026] [security2:error] [pid 3482118:tid 3482118] [client 45.148.10.120:57390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amtRHWNqu9cXUHDSDh_akgAAABM"]
[Thu Jul 30 14:26:53.147414 2026] [security2:error] [pid 3482118:tid 3482118] [client 45.148.10.120:57390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ziltdesign.be"] [uri "/.env"] [unique_id "amtRHWNqu9cXUHDSDh_akgAAABM"]
[Thu Jul 30 14:26:53.291663 2026] [ssl:error] [pid 3493913:tid 3493913] (70014)End of file found: [client 216.73.216.199:63807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:53.898261 2026] [core:error] [pid 3492525:tid 3492525] (13)Permission denied: [client 216.73.216.199:48290] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS2/port
[Thu Jul 30 14:26:54.500111 2026] [ssl:error] [pid 3492525:tid 3492525] (70014)End of file found: [client 216.73.216.199:48290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:26:55.917280 2026] [ssl:error] [pid 3493910:tid 3493910] (EAI 2)Name or service not known: [client 144.76.19.72:50682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:55.917313 2026] [ssl:error] [pid 3493910:tid 3493910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:55.974858 2026] [ssl:error] [pid 3492526:tid 3492526] (EAI 2)Name or service not known: [client 144.76.19.72:50684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:55.974892 2026] [ssl:error] [pid 3492526:tid 3492526] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:56.447718 2026] [access_compat:error] [pid 3488794:tid 3488794] [client 103.59.153.118:55432] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:26:57.531576 2026] [core:error] [pid 3477144:tid 3477144] (13)Permission denied: [client 216.73.216.199:3478] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/millrosetelecom.co.uk.db
[Thu Jul 30 14:26:59.028684 2026] [ssl:error] [pid 3493913:tid 3493913] (EAI 2)Name or service not known: [client 144.76.19.72:50700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:59.028724 2026] [ssl:error] [pid 3493913:tid 3493913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:59.080475 2026] [ssl:error] [pid 3488794:tid 3488794] (EAI 2)Name or service not known: [client 144.76.19.72:50704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:26:59.080502 2026] [ssl:error] [pid 3488794:tid 3488794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:26:59.338391 2026] [core:error] [pid 3477144:tid 3477144] (13)Permission denied: [client 216.73.216.199:3478] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/secure-20260719
[Thu Jul 30 14:26:59.648110 2026] [core:error] [pid 3477144:tid 3477144] (13)Permission denied: [client 216.73.216.199:3478] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory122/subsystem/uevent
[Thu Jul 30 14:26:59.841124 2026] [security2:error] [pid 3481995:tid 3481995] [client 162.62.213.187:57154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "amtRI_eOCCxDwcphblSDNwAAAAU"]
[Thu Jul 30 14:26:59.970643 2026] [authz_core:error] [pid 3492119:tid 3492119] [client 51.103.154.47:60109] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:27:00.372118 2026] [access_compat:error] [pid 3484459:tid 3484459] [client 45.158.164.139:35778] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:27:00.388529 2026] [access_compat:error] [pid 3477535:tid 3477535] [client 103.59.153.118:55626] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:00.748978 2026] [ssl:error] [pid 3492200:tid 3492200] (70014)End of file found: [client 216.73.216.199:35320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:02.180606 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:48182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:02.180639 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:02.235704 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:48198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:02.235749 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:02.356673 2026] [ssl:error] [pid 3477144:tid 3477144] (70014)End of file found: [client 216.73.216.199:3478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:02.534473 2026] [security2:error] [pid 3493907:tid 3493907] [client 92.222.108.115:57316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/seminole-hard-rock-employee-benefits"] [unique_id "amtRJnumOqTlKa5wZdaABgAAACQ"]
[Thu Jul 30 14:27:02.655990 2026] [core:error] [pid 3482124:tid 3482124] (13)Permission denied: [client 216.73.216.199:18197] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/slab_size
[Thu Jul 30 14:27:02.957084 2026] [core:error] [pid 3482124:tid 3482124] (13)Permission denied: [client 216.73.216.199:18197] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/bin/chsh
[Thu Jul 30 14:27:04.462267 2026] [ssl:error] [pid 3482124:tid 3482124] (70014)End of file found: [client 216.73.216.199:18197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:04.618523 2026] [security2:error] [pid 3495551:tid 3495551] [client 150.5.132.73:39207] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRKCsudPK35-Lc4JunDgAAAAI"]
[Thu Jul 30 14:27:04.618578 2026] [security2:error] [pid 3495551:tid 3495551] [client 150.5.132.73:39207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRKCsudPK35-Lc4JunDgAAAAI"]
[Thu Jul 30 14:27:04.618895 2026] [security2:error] [pid 3495551:tid 3495551] [client 150.5.132.73:39207] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRKCsudPK35-Lc4JunDgAAAAI"]
[Thu Jul 30 14:27:05.308503 2026] [ssl:error] [pid 3492561:tid 3492561] (EAI 2)Name or service not known: [client 144.76.19.72:48200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:05.308543 2026] [ssl:error] [pid 3492561:tid 3492561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:05.364509 2026] [ssl:error] [pid 3492561:tid 3492561] (EAI 2)Name or service not known: [client 144.76.19.72:48202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:05.364535 2026] [ssl:error] [pid 3492561:tid 3492561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:05.614050 2026] [security2:error] [pid 3492561:tid 3492561] [client 85.208.96.199:27458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1228.0/prev_next,next.html"] [unique_id "amtRKYTM89VW_R7fnrXorQAAABQ"]
[Thu Jul 30 14:27:07.116327 2026] [access_compat:error] [pid 3495551:tid 3495551] [client 103.59.153.118:55931] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:07.320020 2026] [security2:error] [pid 3493911:tid 3493911] [client 114.119.135.233:51735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2022/04/WMS-HQ-Wales-5-1.jpg"] [unique_id "amtRK_1eMlbGF6rCgUZghgAAAC0"], referer: https://www.wmsfirearmstraining.com/sitemap.xml
[Thu Jul 30 14:27:08.421166 2026] [ssl:error] [pid 3495803:tid 3495803] (EAI 2)Name or service not known: [client 144.76.19.72:48218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:08.421211 2026] [ssl:error] [pid 3495803:tid 3495803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:10.196884 2026] [security2:error] [pid 3493908:tid 3493908] [client 187.139.227.66:52890] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRLvmD4ZWoG3DjZtBQqAAAACY"]
[Thu Jul 30 14:27:10.196937 2026] [security2:error] [pid 3493908:tid 3493908] [client 187.139.227.66:52890] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRLvmD4ZWoG3DjZtBQqAAAACY"]
[Thu Jul 30 14:27:10.197211 2026] [security2:error] [pid 3493908:tid 3493908] [client 187.139.227.66:52890] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRLvmD4ZWoG3DjZtBQqAAAACY"]
[Thu Jul 30 14:27:11.338382 2026] [security2:error] [pid 3492526:tid 3492526] [client 49.51.243.95:42870] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.co.uk"] [uri "/"] [unique_id "amtRLyggJAtxoRwJWdgPvwAAABI"]
[Thu Jul 30 14:27:11.341650 2026] [authz_core:error] [pid 3492526:tid 3492526] [client 49.51.243.95:42870] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:27:11.348033 2026] [authz_core:error] [pid 3492526:tid 3492526] [client 49.51.243.95:42870] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:27:11.396134 2026] [ssl:error] [pid 3492564:tid 3492564] (70014)End of file found: [client 216.73.216.199:20861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:13.504382 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:42302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:13.736005 2026] [ssl:error] [pid 3477142:tid 3477142] (EAI 2)Name or service not known: [client 144.76.19.72:48220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:13.736039 2026] [ssl:error] [pid 3477142:tid 3477142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:14.267134 2026] [security2:error] [pid 3493841:tid 3493841] [client 213.139.63.48:47958] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRMrW9QTvZ4_f5pAjfmQAAABY"]
[Thu Jul 30 14:27:14.267184 2026] [security2:error] [pid 3493841:tid 3493841] [client 213.139.63.48:47958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRMrW9QTvZ4_f5pAjfmQAAABY"]
[Thu Jul 30 14:27:14.267427 2026] [security2:error] [pid 3493841:tid 3493841] [client 213.139.63.48:47958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRMrW9QTvZ4_f5pAjfmQAAABY"]
[Thu Jul 30 14:27:15.002923 2026] [access_compat:error] [pid 3493913:tid 3493913] [client 103.59.153.118:56120] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:15.915153 2026] [core:error] [pid 3488794:tid 3488794] (13)Permission denied: [client 216.73.216.199:13345] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS3/uartclk
[Thu Jul 30 14:27:16.826929 2026] [ssl:error] [pid 3493911:tid 3493911] (EAI 2)Name or service not known: [client 144.76.19.72:23500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:16.826979 2026] [ssl:error] [pid 3493911:tid 3493911] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:16.882049 2026] [ssl:error] [pid 3481995:tid 3481995] (EAI 2)Name or service not known: [client 144.76.19.72:23502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:16.882098 2026] [ssl:error] [pid 3481995:tid 3481995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:17.132828 2026] [ssl:error] [pid 3488794:tid 3488794] (70014)End of file found: [client 216.73.216.199:13345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:17.550963 2026] [security2:error] [pid 3495920:tid 3495920] [client 114.119.158.38:46333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/cat_ids~15,14/request_format~html"] [unique_id "amtRNWWXLTmWHFz9aDIFRgAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14/request_format~html
[Thu Jul 30 14:27:17.629977 2026] [ssl:error] [pid 3492564:tid 3492564] (70014)End of file found: [client 216.73.216.199:13757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:19.075186 2026] [authz_core:error] [pid 3481995:tid 3481995] [client 199.45.154.113:37578] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:27:19.083096 2026] [authz_core:error] [pid 3481995:tid 3481995] [client 199.45.154.113:37578] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:27:19.186680 2026] [security2:error] [pid 3492561:tid 3492561] [client 114.119.158.38:29345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575676800/cat_ids~15,14/request_format~html"] [unique_id "amtRN4TM89VW_R7fnrXosgAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575763200/cat_ids~15,14/request_format~html
[Thu Jul 30 14:27:19.979098 2026] [ssl:error] [pid 3484756:tid 3484756] (EAI 2)Name or service not known: [client 144.76.19.72:53580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:19.979134 2026] [ssl:error] [pid 3484756:tid 3484756] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:20.035384 2026] [ssl:error] [pid 3482118:tid 3482118] (EAI 2)Name or service not known: [client 144.76.19.72:53592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:20.035411 2026] [ssl:error] [pid 3482118:tid 3482118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:21.395846 2026] [security2:error] [pid 3492562:tid 3492562] [client 162.14.66.219:48422] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amtROfHKlpPXtJ-i_VQvUwAAABc"]
[Thu Jul 30 14:27:21.667546 2026] [access_compat:error] [pid 3492199:tid 3492199] [client 103.59.153.118:56614] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:23.100656 2026] [ssl:error] [pid 3496022:tid 3496022] (EAI 2)Name or service not known: [client 144.76.19.72:53606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:23.100708 2026] [ssl:error] [pid 3496022:tid 3496022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:23.154595 2026] [ssl:error] [pid 3495967:tid 3495967] (EAI 2)Name or service not known: [client 144.76.19.72:53610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:23.154630 2026] [ssl:error] [pid 3495967:tid 3495967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:23.506046 2026] [security2:error] [pid 3427797:tid 3427797] [client 185.191.171.7:60248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2642.0/prev_next,next.html"] [unique_id "amtRO9gFkRgyA50rwMCv-gAAAB4"]
[Thu Jul 30 14:27:23.566820 2026] [ssl:error] [pid 3495551:tid 3495551] (70014)End of file found: [client 216.73.216.199:20492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:24.168109 2026] [ssl:error] [pid 3496037:tid 3496037] (70014)End of file found: [client 216.73.216.199:60525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:24.295578 2026] [security2:error] [pid 3482124:tid 3482124] [client 94.154.43.183:47124] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/.env"] [unique_id "amtRPInI_FWZ-kIA0xoy_wAAACg"]
[Thu Jul 30 14:27:24.295771 2026] [security2:error] [pid 3482124:tid 3482124] [client 94.154.43.183:47124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/.env"] [unique_id "amtRPInI_FWZ-kIA0xoy_wAAACg"]
[Thu Jul 30 14:27:24.548352 2026] [security2:error] [pid 3482124:tid 3482124] [client 94.154.43.183:47124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/index.php"] [unique_id "amtRPInI_FWZ-kIA0xoy_wAAACg"]
[Thu Jul 30 14:27:24.900199 2026] [security2:error] [pid 3488794:tid 3488794] [client 23.150.152.113:47732] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtRPGdbbaWwDdHp4FIOAwAAABw"]
[Thu Jul 30 14:27:24.900507 2026] [security2:error] [pid 3488794:tid 3488794] [client 23.150.152.113:47732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtRPGdbbaWwDdHp4FIOAwAAABw"]
[Thu Jul 30 14:27:24.901095 2026] [security2:error] [pid 3488794:tid 3488794] [client 23.150.152.113:47732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtRPGdbbaWwDdHp4FIOAwAAABw"]
[Thu Jul 30 14:27:25.040243 2026] [security2:error] [pid 3488794:tid 3488794] [client 23.150.152.113:47732] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtRPWdbbaWwDdHp4FIOBAAAABw"]
[Thu Jul 30 14:27:25.040518 2026] [security2:error] [pid 3488794:tid 3488794] [client 23.150.152.113:47732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtRPWdbbaWwDdHp4FIOBAAAABw"]
[Thu Jul 30 14:27:25.041056 2026] [security2:error] [pid 3488794:tid 3488794] [client 23.150.152.113:47732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtRPWdbbaWwDdHp4FIOBAAAABw"]
[Thu Jul 30 14:27:25.076885 2026] [ssl:error] [pid 3495967:tid 3495967] (70014)End of file found: [client 216.73.216.199:1582] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:26.210762 2026] [ssl:error] [pid 3493844:tid 3493844] (EAI 2)Name or service not known: [client 144.76.19.72:53618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:26.210800 2026] [ssl:error] [pid 3493844:tid 3493844] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:26.264031 2026] [ssl:error] [pid 3427797:tid 3427797] (EAI 2)Name or service not known: [client 144.76.19.72:53630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:26.264062 2026] [ssl:error] [pid 3427797:tid 3427797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:28.332768 2026] [access_compat:error] [pid 3492561:tid 3492561] [client 103.59.153.118:56921] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:28.882369 2026] [access_compat:error] [pid 3493910:tid 3493910] [client 45.158.164.139:48316] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:27:29.202384 2026] [security2:error] [pid 3495973:tid 3495973] [client 43.159.132.207:58246] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wurlitzer.co.uk"] [uri "/"] [unique_id "amtRQUft4lDFoqwWlYieRgAAADs"]
[Thu Jul 30 14:27:29.321472 2026] [ssl:error] [pid 3493908:tid 3493908] (EAI 2)Name or service not known: [client 144.76.19.72:53644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:29.321521 2026] [ssl:error] [pid 3493908:tid 3493908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:29.376934 2026] [ssl:error] [pid 3492564:tid 3492564] (EAI 2)Name or service not known: [client 144.76.19.72:53646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:29.376970 2026] [ssl:error] [pid 3492564:tid 3492564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:30.418568 2026] [core:crit] [pid 3493908:tid 3493908] (13)Permission denied: [client 52.167.144.158:1476] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:27:30.515343 2026] [security2:error] [pid 3484459:tid 3484459] [client 43.159.132.207:34206] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtRQolP7IPz6daCZUggfAAAACw"], referer: http://wurlitzer.co.uk
[Thu Jul 30 14:27:30.994556 2026] [ssl:error] [pid 3496027:tid 3496027] (70014)End of file found: [client 216.73.216.199:23604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:31.416679 2026] [ssl:error] [pid 3482124:tid 3482124] (70014)End of file found: [client 216.73.216.199:4711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:32.351571 2026] [access_compat:error] [pid 3492561:tid 3492561] [client 103.59.153.118:57117] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:32.435594 2026] [ssl:error] [pid 3482064:tid 3482064] (EAI 2)Name or service not known: [client 144.76.19.72:37176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:32.435629 2026] [ssl:error] [pid 3482064:tid 3482064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:32.494241 2026] [ssl:error] [pid 3496033:tid 3496033] (EAI 2)Name or service not known: [client 144.76.19.72:37188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:32.494287 2026] [ssl:error] [pid 3496033:tid 3496033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:33.546857 2026] [core:error] [pid 3496021:tid 3496021] (13)Permission denied: [client 216.73.216.199:58731] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS3/iomem_base
[Thu Jul 30 14:27:34.459426 2026] [core:error] [pid 3496021:tid 3496021] (13)Permission denied: [client 216.73.216.199:58731] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS2/port
[Thu Jul 30 14:27:35.552223 2026] [ssl:error] [pid 3477142:tid 3477142] (EAI 2)Name or service not known: [client 144.76.19.72:37202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:35.552257 2026] [ssl:error] [pid 3477142:tid 3477142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:35.609592 2026] [ssl:error] [pid 3495865:tid 3495865] (EAI 2)Name or service not known: [client 144.76.19.72:37216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:35.609628 2026] [ssl:error] [pid 3495865:tid 3495865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:36.934196 2026] [security2:error] [pid 3427797:tid 3427797] [client 185.191.171.11:46942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/do-the-wards-still-run-magnolia-house-2020"] [unique_id "amtRSNgFkRgyA50rwMCwAQAAAB4"]
[Thu Jul 30 14:27:38.390963 2026] [core:error] [pid 3495803:tid 3495803] (13)Permission denied: [client 216.73.216.199:7330] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/dax/uevent
[Thu Jul 30 14:27:38.666677 2026] [ssl:error] [pid 3492202:tid 3492202] (EAI 2)Name or service not known: [client 144.76.19.72:37230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:38.666735 2026] [ssl:error] [pid 3492202:tid 3492202] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:38.693155 2026] [ssl:error] [pid 3495803:tid 3495803] (70014)End of file found: [client 216.73.216.199:7330] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:38.721528 2026] [ssl:error] [pid 3493909:tid 3493909] (EAI 2)Name or service not known: [client 144.76.19.72:37240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:38.721561 2026] [ssl:error] [pid 3493909:tid 3493909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:39.009682 2026] [access_compat:error] [pid 3492199:tid 3492199] [client 103.59.153.118:57427] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:39.717945 2026] [security2:error] [pid 3493842:tid 3493842] [client 74.7.227.141:39914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.andrewvenables.com"] [uri "/"] [unique_id "amtRSzZ58l0yFXeY8-hICwAAACA"]
[Thu Jul 30 14:27:40.800712 2026] [core:error] [pid 3496021:tid 3496021] (13)Permission denied: [client 216.73.216.199:58731] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/ssh/ssh_host_ed25519_key
[Thu Jul 30 14:27:41.101281 2026] [core:error] [pid 3496021:tid 3496021] (13)Permission denied: [client 216.73.216.199:58731] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS0/uartclk
[Thu Jul 30 14:27:41.796601 2026] [ssl:error] [pid 3493909:tid 3493909] (EAI 2)Name or service not known: [client 144.76.19.72:35086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:41.796643 2026] [ssl:error] [pid 3493909:tid 3493909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:41.848352 2026] [ssl:error] [pid 3481995:tid 3481995] (EAI 2)Name or service not known: [client 144.76.19.72:35090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:41.848381 2026] [ssl:error] [pid 3481995:tid 3481995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:43.035607 2026] [access_compat:error] [pid 3496025:tid 3496025] [client 103.59.153.118:57616] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:43.209170 2026] [ssl:error] [pid 3496021:tid 3496021] (70014)End of file found: [client 216.73.216.199:58731] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:44.902872 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:35096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:44.902909 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:44.960483 2026] [ssl:error] [pid 3495974:tid 3495974] (EAI 2)Name or service not known: [client 144.76.19.72:35112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:44.960518 2026] [ssl:error] [pid 3495974:tid 3495974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:45.015125 2026] [core:error] [pid 3481995:tid 3481995] (13)Permission denied: [client 216.73.216.199:10560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/subsystem/ttyS1/uartclk
[Thu Jul 30 14:27:45.315916 2026] [core:error] [pid 3481995:tid 3481995] (13)Permission denied: [client 216.73.216.199:10560] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/subsystem/ttyS3/uartclk
[Thu Jul 30 14:27:45.729782 2026] [security2:error] [pid 3496033:tid 3496033] [client 43.130.34.74:43696] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtRUYLQ9j_F-o78QXKLdgAAAE0"]
[Thu Jul 30 14:27:46.830976 2026] [security2:error] [pid 3496024:tid 3496024] [client 43.130.34.74:48618] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtRUmogIjHXVnmydmW_UQAAAEM"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 14:27:48.016466 2026] [ssl:error] [pid 3493907:tid 3493907] (EAI 2)Name or service not known: [client 144.76.19.72:35116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:48.016502 2026] [ssl:error] [pid 3493907:tid 3493907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:48.073980 2026] [ssl:error] [pid 3493842:tid 3493842] (EAI 2)Name or service not known: [client 144.76.19.72:35124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:48.074013 2026] [ssl:error] [pid 3493842:tid 3493842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:48.387960 2026] [authz_core:error] [pid 3496037:tid 3496037] [client 199.45.154.113:43008] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:27:48.395760 2026] [authz_core:error] [pid 3496037:tid 3496037] [client 199.45.154.113:43008] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:27:49.234051 2026] [ssl:error] [pid 3481995:tid 3481995] (70014)End of file found: [client 216.73.216.199:10560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:49.836414 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:13268] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:10/subsystem/drivers_probe
[Thu Jul 30 14:27:51.135241 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:44072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:51.135291 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:51.190048 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:44082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:51.190092 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:52.029452 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:13268] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty24/subsystem/ttyS3/uartclk
[Thu Jul 30 14:27:53.542448 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:13268] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS1/uartclk
[Thu Jul 30 14:27:53.596795 2026] [access_compat:error] [pid 3482064:tid 3482064] [client 103.59.153.118:58112] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:27:53.843493 2026] [ssl:error] [pid 3493910:tid 3493910] (70014)End of file found: [client 216.73.216.199:13268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:27:54.246259 2026] [ssl:error] [pid 3496023:tid 3496023] (EAI 2)Name or service not known: [client 144.76.19.72:44086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:54.246312 2026] [ssl:error] [pid 3496023:tid 3496023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:54.302694 2026] [ssl:error] [pid 3493909:tid 3493909] (EAI 2)Name or service not known: [client 144.76.19.72:44102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:54.302729 2026] [ssl:error] [pid 3493909:tid 3493909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:57.356593 2026] [ssl:error] [pid 3493908:tid 3493908] (EAI 2)Name or service not known: [client 144.76.19.72:44118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:57.356630 2026] [ssl:error] [pid 3493908:tid 3493908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:27:57.410583 2026] [ssl:error] [pid 3496037:tid 3496037] (EAI 2)Name or service not known: [client 144.76.19.72:44132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:27:57.410619 2026] [ssl:error] [pid 3496037:tid 3496037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:00.267872 2026] [access_compat:error] [pid 3495970:tid 3495970] [client 103.59.153.118:58425] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:00.467452 2026] [ssl:error] [pid 3493910:tid 3493910] (EAI 2)Name or service not known: [client 144.76.19.72:49080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:00.467507 2026] [ssl:error] [pid 3493910:tid 3493910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:00.524091 2026] [ssl:error] [pid 3482064:tid 3482064] (EAI 2)Name or service not known: [client 144.76.19.72:49090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:00.524127 2026] [ssl:error] [pid 3482064:tid 3482064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:00.545355 2026] [ssl:error] [pid 3496022:tid 3496022] (5)Input/output error: [client 216.73.216.199:38901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:01.373131 2026] [ssl:error] [pid 3484871:tid 3484871] (70014)End of file found: [client 216.73.216.199:34398] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:01.872422 2026] [core:error] [pid 3493908:tid 3493908] (13)Permission denied: [client 216.73.216.199:38626] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/sanity_checks
[Thu Jul 30 14:28:01.976850 2026] [autoindex:error] [pid 3493908:tid 3493908] (13)Permission denied: [client 216.73.216.199:38626] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/bewustbe/
[Thu Jul 30 14:28:02.276521 2026] [core:error] [pid 3493908:tid 3493908] (13)Permission denied: [client 216.73.216.199:38626] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS3/iomem_base
[Thu Jul 30 14:28:03.580503 2026] [ssl:error] [pid 3495865:tid 3495865] (EAI 2)Name or service not known: [client 144.76.19.72:49104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:03.580531 2026] [ssl:error] [pid 3495865:tid 3495865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:03.633295 2026] [ssl:error] [pid 3496027:tid 3496027] (EAI 2)Name or service not known: [client 144.76.19.72:49114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:03.633334 2026] [ssl:error] [pid 3496027:tid 3496027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:03.789660 2026] [core:error] [pid 3493908:tid 3493908] (13)Permission denied: [client 216.73.216.199:38626] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS3/closing_wait
[Thu Jul 30 14:28:04.299298 2026] [access_compat:error] [pid 3493913:tid 3493913] [client 103.59.153.118:58617] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:05.588616 2026] [ssl:error] [pid 3493908:tid 3493908] (70014)End of file found: [client 216.73.216.199:38626] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:06.487164 2026] [core:error] [pid 3493762:tid 3493762] (13)Permission denied: [client 216.73.216.199:8755] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/subsystem/ttyS0/iomem_base
[Thu Jul 30 14:28:06.687874 2026] [ssl:error] [pid 3495918:tid 3495918] (EAI 2)Name or service not known: [client 144.76.19.72:49124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:06.687906 2026] [ssl:error] [pid 3495918:tid 3495918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:06.740996 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:49134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:06.741048 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:06.788308 2026] [ssl:error] [pid 3493762:tid 3493762] (70014)End of file found: [client 216.73.216.199:8755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:07.394266 2026] [ssl:error] [pid 3498931:tid 3498931] (70014)End of file found: [client 216.73.216.199:44107] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:07.475405 2026] [security2:error] [pid 3493910:tid 3493910] [client 163.7.16.153:19271] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRZ9o5hXnv8SIjrEFeGAAAACs"]
[Thu Jul 30 14:28:07.475462 2026] [security2:error] [pid 3493910:tid 3493910] [client 163.7.16.153:19271] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRZ9o5hXnv8SIjrEFeGAAAACs"]
[Thu Jul 30 14:28:07.475703 2026] [security2:error] [pid 3493910:tid 3493910] [client 163.7.16.153:19271] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRZ9o5hXnv8SIjrEFeGAAAACs"]
[Thu Jul 30 14:28:09.241333 2026] [cgi:error] [pid 3499028:tid 3499028] [client 68.67.112.136:47296] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:28:09.795035 2026] [ssl:error] [pid 3496032:tid 3496032] (EAI 2)Name or service not known: [client 144.76.19.72:47328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:09.795079 2026] [ssl:error] [pid 3496032:tid 3496032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:09.854017 2026] [ssl:error] [pid 3496024:tid 3496024] (EAI 2)Name or service not known: [client 144.76.19.72:47332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:09.854053 2026] [ssl:error] [pid 3496024:tid 3496024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:10.791703 2026] [security2:error] [pid 3481995:tid 3481995] [client 43.153.107.22:60688] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.co.uk"] [uri "/"] [unique_id "amtRaveOCCxDwcphblSDyQAAAAU"]
[Thu Jul 30 14:28:10.867524 2026] [security2:error] [pid 3496022:tid 3496022] [client 103.150.19.217:38020] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRanRbRsJp8vebcPSNugAAAEA"]
[Thu Jul 30 14:28:10.867573 2026] [security2:error] [pid 3496022:tid 3496022] [client 103.150.19.217:38020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRanRbRsJp8vebcPSNugAAAEA"]
[Thu Jul 30 14:28:10.867816 2026] [security2:error] [pid 3496022:tid 3496022] [client 103.150.19.217:38020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRanRbRsJp8vebcPSNugAAAEA"]
[Thu Jul 30 14:28:12.206733 2026] [core:error] [pid 3496020:tid 3496020] (13)Permission denied: [client 216.73.216.199:11040] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/drm_shmem_helper/sections/__ksymtab
[Thu Jul 30 14:28:12.910942 2026] [ssl:error] [pid 3496027:tid 3496027] (EAI 2)Name or service not known: [client 144.76.19.72:47340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:12.910969 2026] [ssl:error] [pid 3496027:tid 3496027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:12.963774 2026] [ssl:error] [pid 3496033:tid 3496033] (EAI 2)Name or service not known: [client 144.76.19.72:47354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:12.963799 2026] [ssl:error] [pid 3496033:tid 3496033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:13.468856 2026] [access_compat:error] [pid 3498931:tid 3498931] [client 45.158.164.139:40444] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:28:14.312916 2026] [ssl:error] [pid 3496020:tid 3496020] (70014)End of file found: [client 216.73.216.199:11040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:14.644156 2026] [security2:error] [pid 3496027:tid 3496027] [client 82.197.48.6:15222] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRbnRxeA9wytZRZdtcRwAAAEg"]
[Thu Jul 30 14:28:14.644219 2026] [security2:error] [pid 3496027:tid 3496027] [client 82.197.48.6:15222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRbnRxeA9wytZRZdtcRwAAAEg"]
[Thu Jul 30 14:28:14.644460 2026] [security2:error] [pid 3496027:tid 3496027] [client 82.197.48.6:15222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRbnRxeA9wytZRZdtcRwAAAEg"]
[Thu Jul 30 14:28:15.020599 2026] [access_compat:error] [pid 3484871:tid 3484871] [client 103.59.153.118:59112] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:16.028791 2026] [ssl:error] [pid 3493913:tid 3493913] (EAI 2)Name or service not known: [client 144.76.19.72:47364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:16.028819 2026] [ssl:error] [pid 3493913:tid 3493913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:16.087365 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:47380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:16.087397 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:17.269047 2026] [security2:error] [pid 3482064:tid 3482064] [client 43.134.38.171:58160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kirstybashforth.com"] [uri "/"] [unique_id "amtRcRTh0JAoYJ6c7zaZXAAAAA8"]
[Thu Jul 30 14:28:18.227899 2026] [ssl:error] [pid 3495973:tid 3495973] (70014)End of file found: [client 216.73.216.199:5092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:19.162062 2026] [ssl:error] [pid 3499322:tid 3499322] (EAI 2)Name or service not known: [client 144.76.19.72:47396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:19.162136 2026] [ssl:error] [pid 3499322:tid 3499322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:19.218856 2026] [ssl:error] [pid 3492564:tid 3492564] (EAI 2)Name or service not known: [client 144.76.19.72:47400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:19.218908 2026] [ssl:error] [pid 3492564:tid 3492564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:19.538459 2026] [security2:error] [pid 3493907:tid 3493907] [client 170.106.180.153:47220] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtRc3umOqTlKa5wZdaAiwAAACQ"]
[Thu Jul 30 14:28:19.540267 2026] [authz_core:error] [pid 3493907:tid 3493907] [client 170.106.180.153:47220] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:28:19.542039 2026] [authz_core:error] [pid 3493907:tid 3493907] [client 170.106.180.153:47220] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:28:20.850824 2026] [ssl:error] [pid 3493762:tid 3493762] (70014)End of file found: [client 216.73.216.199:21440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:22.275802 2026] [ssl:error] [pid 3485409:tid 3485409] (EAI 2)Name or service not known: [client 144.76.19.72:57950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:22.275853 2026] [ssl:error] [pid 3485409:tid 3485409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:22.327933 2026] [ssl:error] [pid 3495865:tid 3495865] (EAI 2)Name or service not known: [client 144.76.19.72:57966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:22.327983 2026] [ssl:error] [pid 3495865:tid 3495865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:23.556019 2026] [ssl:error] [pid 3482064:tid 3482064] (70014)End of file found: [client 216.73.216.199:11558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:24.058687 2026] [ssl:error] [pid 3496020:tid 3496020] (70014)End of file found: [client 216.73.216.199:46850] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:25.385183 2026] [ssl:error] [pid 3481995:tid 3481995] (EAI 2)Name or service not known: [client 144.76.19.72:57978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:25.385230 2026] [ssl:error] [pid 3481995:tid 3481995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:25.440123 2026] [ssl:error] [pid 3492564:tid 3492564] (EAI 2)Name or service not known: [client 144.76.19.72:57982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:25.440156 2026] [ssl:error] [pid 3492564:tid 3492564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:25.666827 2026] [access_compat:error] [pid 3495973:tid 3495973] [client 103.59.153.118:59606] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:26.173168 2026] [ssl:error] [pid 3481995:tid 3481995] (70014)End of file found: [client 216.73.216.199:32496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:28.368396 2026] [security2:error] [pid 3496032:tid 3496032] [client 23.150.152.113:59786] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtRfMS8cmjmYA3z_qIiQgAAAEw"]
[Thu Jul 30 14:28:28.368707 2026] [security2:error] [pid 3496032:tid 3496032] [client 23.150.152.113:59786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/admin/data/system/cluster.dat"] [unique_id "amtRfMS8cmjmYA3z_qIiQgAAAEw"]
[Thu Jul 30 14:28:28.368910 2026] [security2:error] [pid 3496032:tid 3496032] [client 23.150.152.113:59786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtRfMS8cmjmYA3z_qIiQgAAAEw"]
[Thu Jul 30 14:28:28.495540 2026] [ssl:error] [pid 3492563:tid 3492563] (EAI 2)Name or service not known: [client 144.76.19.72:57998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:28.495569 2026] [ssl:error] [pid 3492563:tid 3492563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:28.548337 2026] [ssl:error] [pid 3495416:tid 3495416] (EAI 2)Name or service not known: [client 144.76.19.72:58014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:28.548372 2026] [ssl:error] [pid 3495416:tid 3495416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:28.803157 2026] [security2:error] [pid 3499322:tid 3499322] [client 23.150.152.113:59802] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtRfCBtv3fRDscjKGO_BAAAAAM"]
[Thu Jul 30 14:28:28.803450 2026] [security2:error] [pid 3499322:tid 3499322] [client 23.150.152.113:59802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/htdocs/admin/data/system/cluster.dat"] [unique_id "amtRfCBtv3fRDscjKGO_BAAAAAM"]
[Thu Jul 30 14:28:28.803679 2026] [security2:error] [pid 3499322:tid 3499322] [client 23.150.152.113:59802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mail.nativespace-pandora.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amtRfCBtv3fRDscjKGO_BAAAAAM"]
[Thu Jul 30 14:28:29.889589 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:21436] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:30.792781 2026] [core:error] [pid 3499322:tid 3499322] (13)Permission denied: [client 216.73.216.199:9045] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup2/device/subsystem/uevent
[Thu Jul 30 14:28:31.614849 2026] [ssl:error] [pid 3482064:tid 3482064] (EAI 2)Name or service not known: [client 144.76.19.72:32442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:31.614879 2026] [ssl:error] [pid 3482064:tid 3482064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:31.669192 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:32458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:31.669223 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:32.347953 2026] [access_compat:error] [pid 3498931:tid 3498931] [client 103.59.153.118:59912] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:32.898110 2026] [access_compat:error] [pid 3499794:tid 3499794] [client 45.158.164.139:35364] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:28:34.296549 2026] [ssl:error] [pid 3498931:tid 3498931] (70014)End of file found: [client 216.73.216.199:57775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:34.706256 2026] [ssl:error] [pid 3499322:tid 3499322] (70014)End of file found: [client 216.73.216.199:9045] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:34.795013 2026] [ssl:error] [pid 3493908:tid 3493908] (EAI 2)Name or service not known: [client 144.76.19.72:32470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:34.795045 2026] [ssl:error] [pid 3493908:tid 3493908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:34.895355 2026] [ssl:error] [pid 3500248:tid 3500248] (EAI 2)Name or service not known: [client 144.76.19.72:32474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:34.895397 2026] [ssl:error] [pid 3500248:tid 3500248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:36.225984 2026] [core:error] [pid 3500249:tid 3500249] (13)Permission denied: [client 216.73.216.199:43749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_io_end/objs_per_slab
[Thu Jul 30 14:28:36.362710 2026] [access_compat:error] [pid 3477142:tid 3477142] [client 103.59.153.118:60107] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:37.953204 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:32480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:37.953237 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:38.010395 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:32482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:38.010419 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:38.433223 2026] [security2:error] [pid 3493908:tid 3493908] [client 185.191.171.11:45166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/2008-whizzer-motorbike"] [unique_id "amtRhvmD4ZWoG3DjZtBQ0AAAACY"]
[Thu Jul 30 14:28:38.949315 2026] [core:error] [pid 3500249:tid 3500249] (13)Permission denied: [client 216.73.216.199:43749] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/epccompare.com.db
[Thu Jul 30 14:28:40.295355 2026] [security2:error] [pid 3485409:tid 3485409] [client 185.191.171.12:43630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9377.0/prev_next,next.html"] [unique_id "amtRiH8wkGGn22XXGkXTUgAAADc"]
[Thu Jul 30 14:28:40.635755 2026] [security2:error] [pid 3500609:tid 3500609] [client 114.119.157.183:23847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575590400/request_format~html"] [unique_id "amtRiFxcokFNs9xAJsqm8wAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575590400/cat_ids~14/request_format~html
[Thu Jul 30 14:28:40.741541 2026] [ssl:error] [pid 3500249:tid 3500249] (70014)End of file found: [client 216.73.216.199:43749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:41.069517 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:43486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:41.069565 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:41.122779 2026] [ssl:error] [pid 3485409:tid 3485409] (EAI 2)Name or service not known: [client 144.76.19.72:43490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:41.122823 2026] [ssl:error] [pid 3485409:tid 3485409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:41.455358 2026] [authz_core:error] [pid 3484871:tid 3484871] [client 66.249.66.34:44714] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:28:41.458201 2026] [authz_core:error] [pid 3484871:tid 3484871] [client 66.249.66.34:44714] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:28:41.753100 2026] [security2:error] [pid 3493909:tid 3493909] [client 114.119.157.183:23849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575590400/request_format~html"] [unique_id "amtRiQkk_tlMX8auI_0GGwAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575590400/cat_ids~14/request_format~html
[Thu Jul 30 14:28:42.845034 2026] [ssl:error] [pid 3493908:tid 3493908] (70014)End of file found: [client 216.73.216.199:53059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:43.047162 2026] [access_compat:error] [pid 3495625:tid 3495625] [client 103.59.153.118:60413] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:43.874231 2026] [security2:error] [pid 3477540:tid 3477540] [client 185.191.171.8:62958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4491.0.html"] [unique_id "amtRiyD_oloq6Tle0BHrJgAAADQ"]
[Thu Jul 30 14:28:44.179040 2026] [ssl:error] [pid 3496032:tid 3496032] (EAI 2)Name or service not known: [client 144.76.19.72:43504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:44.179088 2026] [ssl:error] [pid 3496032:tid 3496032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:44.231845 2026] [ssl:error] [pid 3493910:tid 3493910] (EAI 2)Name or service not known: [client 144.76.19.72:43512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:44.231874 2026] [ssl:error] [pid 3493910:tid 3493910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:44.965627 2026] [security2:error] [pid 3477535:tid 3477535] [client 43.130.67.33:54796] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "inrc.org.uk"] [uri "/"] [unique_id "amtRjL3_9qQy-oYyKARfAQAAACo"]
[Thu Jul 30 14:28:46.264484 2026] [security2:error] [pid 3492564:tid 3492564] [client 185.191.171.10:33608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9375.0.html"] [unique_id "amtRjozbTIa8wMRux2uZsAAAABo"]
[Thu Jul 30 14:28:46.763117 2026] [ssl:error] [pid 3493907:tid 3493907] (70014)End of file found: [client 216.73.216.199:12370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:46.994583 2026] [access_compat:error] [pid 3496037:tid 3496037] [client 103.59.153.118:60607] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:47.284147 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:43524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:47.284179 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:47.339726 2026] [ssl:error] [pid 3495416:tid 3495416] (EAI 2)Name or service not known: [client 144.76.19.72:43540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:47.339752 2026] [ssl:error] [pid 3495416:tid 3495416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:47.967006 2026] [ssl:error] [pid 3493762:tid 3493762] (70014)End of file found: [client 216.73.216.199:64737] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:49.787561 2026] [security2:error] [pid 3500609:tid 3500609] [client 74.7.227.156:51460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "securitiesfinance.co.uk"] [uri "/"] [unique_id "amtRkVxcokFNs9xAJsqm9gAAABQ"]
[Thu Jul 30 14:28:50.074153 2026] [ssl:error] [pid 3496032:tid 3496032] (70014)End of file found: [client 216.73.216.199:56655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:50.398485 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:58350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:50.398513 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:50.452716 2026] [ssl:error] [pid 3492563:tid 3492563] (EAI 2)Name or service not known: [client 144.76.19.72:58352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:50.452740 2026] [ssl:error] [pid 3492563:tid 3492563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:52.404393 2026] [ssl:error] [pid 3500249:tid 3500249] (70014)End of file found: [client 216.73.216.199:28523] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:53.640298 2026] [ssl:error] [pid 3492564:tid 3492564] (EAI 2)Name or service not known: [client 144.76.19.72:58364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:53.640357 2026] [ssl:error] [pid 3492564:tid 3492564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:53.691528 2026] [ssl:error] [pid 3495416:tid 3495416] (EAI 2)Name or service not known: [client 144.76.19.72:58378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:53.691563 2026] [ssl:error] [pid 3495416:tid 3495416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:54.424304 2026] [security2:error] [pid 3493908:tid 3493908] [client 85.208.98.16:56586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/argan-sa%C3%A7-spreyi-k.html"] [unique_id "amtRlvmD4ZWoG3DjZtBQ2wAAACY"]
[Thu Jul 30 14:28:54.821315 2026] [core:error] [pid 3493907:tid 3493907] (13)Permission denied: [client 216.73.216.199:4996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dax_cache/slab_size
[Thu Jul 30 14:28:55.423556 2026] [core:error] [pid 3496027:tid 3496027] (13)Permission denied: [client 216.73.216.199:62061] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/physical_node/driver/bind
[Thu Jul 30 14:28:56.627084 2026] [ssl:error] [pid 3496027:tid 3496027] (70014)End of file found: [client 216.73.216.199:62061] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:56.745900 2026] [ssl:error] [pid 3495973:tid 3495973] (EAI 2)Name or service not known: [client 144.76.19.72:58382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:56.745933 2026] [ssl:error] [pid 3495973:tid 3495973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:56.802021 2026] [ssl:error] [pid 3499794:tid 3499794] (EAI 2)Name or service not known: [client 144.76.19.72:58396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:56.802052 2026] [ssl:error] [pid 3499794:tid 3499794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:57.529758 2026] [core:error] [pid 3493907:tid 3493907] (13)Permission denied: [client 216.73.216.199:4996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/keyboard/uevent
[Thu Jul 30 14:28:57.660711 2026] [access_compat:error] [pid 3484676:tid 3484676] [client 103.59.153.118:61104] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:28:58.068177 2026] [access_compat:error] [pid 3500248:tid 3500248] [client 5.127.0.46:56290] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:28:58.733231 2026] [core:error] [pid 3493907:tid 3493907] (13)Permission denied: [client 216.73.216.199:4996] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/perf_event/usersize
[Thu Jul 30 14:28:59.034357 2026] [ssl:error] [pid 3493907:tid 3493907] (70014)End of file found: [client 216.73.216.199:4996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:28:59.867460 2026] [ssl:error] [pid 3499028:tid 3499028] (EAI 2)Name or service not known: [client 144.76.19.72:34156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:59.867518 2026] [ssl:error] [pid 3499028:tid 3499028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:59.925045 2026] [ssl:error] [pid 3496025:tid 3496025] (EAI 2)Name or service not known: [client 144.76.19.72:34162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:28:59.925091 2026] [ssl:error] [pid 3496025:tid 3496025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:28:59.932510 2026] [ssl:error] [pid 3496020:tid 3496020] (70014)End of file found: [client 216.73.216.199:57875] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:02.538387 2026] [security2:error] [pid 3479987:tid 3479987] [client 114.119.145.116:61823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "karenthomasjewellery.co.uk"] [uri "/robots.txt"] [unique_id "amtRnrvO3i1cXA-6ysnrBgAAAAs"], referer: https://karenthomasjewellery.co.uk/robots.txt
[Thu Jul 30 14:29:02.944401 2026] [core:error] [pid 3472867:tid 3472867] (13)Permission denied: [client 216.73.216.199:53905] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/446294.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.e1f75d74.tmp
[Thu Jul 30 14:29:02.984559 2026] [ssl:error] [pid 3496189:tid 3496189] (EAI 2)Name or service not known: [client 144.76.19.72:34178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:02.984586 2026] [ssl:error] [pid 3496189:tid 3496189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:03.042375 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:34182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:03.042407 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:03.173523 2026] [security2:error] [pid 3501372:tid 3501372] [client 114.119.145.116:49475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "karenthomasjewellery.co.uk"] [uri "/403.shtml"] [unique_id "amtRn-GJ2369fqJLHbGSogAAAA4"], referer: https://karenthomasjewellery.co.uk/robots.txt
[Thu Jul 30 14:29:03.546794 2026] [ssl:error] [pid 3472867:tid 3472867] (70014)End of file found: [client 216.73.216.199:53905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:04.305992 2026] [access_compat:error] [pid 3501372:tid 3501372] [client 103.59.153.118:61410] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:04.362858 2026] [core:error] [pid 3502127:tid 3502127] (13)Permission denied: [client 216.73.216.199:38342] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/627092.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.cccf0fc6.tmp
[Thu Jul 30 14:29:04.754745 2026] [ssl:error] [pid 3502127:tid 3502127] (70014)End of file found: [client 216.73.216.199:38342] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:05.238727 2026] [ssl:error] [pid 3492200:tid 3492200] (70014)End of file found: [client 216.73.216.199:65534] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:06.096343 2026] [ssl:error] [pid 3496020:tid 3496020] (EAI 2)Name or service not known: [client 144.76.19.72:34186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:06.096380 2026] [ssl:error] [pid 3496020:tid 3496020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:06.147806 2026] [ssl:error] [pid 3496022:tid 3496022] (EAI 2)Name or service not known: [client 144.76.19.72:34188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:06.147838 2026] [ssl:error] [pid 3496022:tid 3496022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:06.983270 2026] [security2:error] [pid 3495971:tid 3495971] [client 176.144.233.253:46148] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRokzi0eCC6FitsfSBdAAAADk"]
[Thu Jul 30 14:29:06.983334 2026] [security2:error] [pid 3495971:tid 3495971] [client 176.144.233.253:46148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRokzi0eCC6FitsfSBdAAAADk"]
[Thu Jul 30 14:29:06.983651 2026] [security2:error] [pid 3495971:tid 3495971] [client 176.144.233.253:46148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRokzi0eCC6FitsfSBdAAAADk"]
[Thu Jul 30 14:29:08.267584 2026] [access_compat:error] [pid 3495971:tid 3495971] [client 103.59.153.118:61597] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:08.591544 2026] [security2:error] [pid 3493762:tid 3493762] [client 163.7.6.172:12631] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRpIxkIT_r-Htm98vZcgAAAAY"]
[Thu Jul 30 14:29:08.591596 2026] [security2:error] [pid 3493762:tid 3493762] [client 163.7.6.172:12631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRpIxkIT_r-Htm98vZcgAAAAY"]
[Thu Jul 30 14:29:08.591860 2026] [security2:error] [pid 3493762:tid 3493762] [client 163.7.6.172:12631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRpIxkIT_r-Htm98vZcgAAAAY"]
[Thu Jul 30 14:29:08.856145 2026] [core:error] [pid 3484676:tid 3484676] (13)Permission denied: [client 216.73.216.199:54209] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/uts_namespace/usersize
[Thu Jul 30 14:29:09.200787 2026] [ssl:error] [pid 3496037:tid 3496037] (EAI 2)Name or service not known: [client 144.76.19.72:34200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:09.200819 2026] [ssl:error] [pid 3496037:tid 3496037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:09.258748 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:34206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:09.258778 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:09.568278 2026] [ssl:error] [pid 3484676:tid 3484676] (70014)End of file found: [client 216.73.216.199:54209] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:10.471606 2026] [ssl:error] [pid 3502127:tid 3502127] (70014)End of file found: [client 216.73.216.199:52282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:10.979469 2026] [ssl:error] [pid 3492564:tid 3492564] (70014)End of file found: [client 216.73.216.199:29438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:12.311653 2026] [ssl:error] [pid 3496033:tid 3496033] (EAI 2)Name or service not known: [client 144.76.19.72:26700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:12.311681 2026] [ssl:error] [pid 3496033:tid 3496033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:12.363018 2026] [ssl:error] [pid 3495918:tid 3495918] (EAI 2)Name or service not known: [client 144.76.19.72:26708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:12.363041 2026] [ssl:error] [pid 3495918:tid 3495918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:13.748479 2026] [security2:error] [pid 3496032:tid 3496032] [client 163.7.6.172:22997] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRqcS8cmjmYA3z_qIiuAAAAEw"]
[Thu Jul 30 14:29:13.748532 2026] [security2:error] [pid 3496032:tid 3496032] [client 163.7.6.172:22997] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtRqcS8cmjmYA3z_qIiuAAAAEw"]
[Thu Jul 30 14:29:13.748798 2026] [security2:error] [pid 3496032:tid 3496032] [client 163.7.6.172:22997] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtRqcS8cmjmYA3z_qIiuAAAAEw"]
[Thu Jul 30 14:29:15.414696 2026] [ssl:error] [pid 3495973:tid 3495973] (EAI 2)Name or service not known: [client 144.76.19.72:26722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:15.414724 2026] [ssl:error] [pid 3495973:tid 3495973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:15.470856 2026] [ssl:error] [pid 3498931:tid 3498931] (EAI 2)Name or service not known: [client 144.76.19.72:26728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:15.470915 2026] [ssl:error] [pid 3498931:tid 3498931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:15.891885 2026] [security2:error] [pid 3499840:tid 3499840] [client 216.73.216.199:16437] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/dracut.conf.d/01-microcode.conf"] [unique_id "amtRq4zV8BeLTIclZLBZKAAAAAo"]
[Thu Jul 30 14:29:15.892182 2026] [security2:error] [pid 3499840:tid 3499840] [client 216.73.216.199:16437] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/dracut.conf.d/01-microcode.conf"] [unique_id "amtRq4zV8BeLTIclZLBZKAAAAAo"]
[Thu Jul 30 14:29:15.892386 2026] [security2:error] [pid 3499840:tid 3499840] [client 216.73.216.199:16437] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/dracut/dracut.conf.d/01-microcode.conf"] [unique_id "amtRq4zV8BeLTIclZLBZKAAAAAo"]
[Thu Jul 30 14:29:16.193928 2026] [ssl:error] [pid 3499840:tid 3499840] (70014)End of file found: [client 216.73.216.199:16437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:16.701748 2026] [core:error] [pid 3492564:tid 3492564] (13)Permission denied: [client 216.73.216.199:8459] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/event_source/drivers_probe
[Thu Jul 30 14:29:17.100227 2026] [ssl:error] [pid 3492564:tid 3492564] (70014)End of file found: [client 216.73.216.199:8459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:18.529600 2026] [ssl:error] [pid 3502499:tid 3502499] (EAI 2)Name or service not known: [client 144.76.19.72:26742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:18.529642 2026] [ssl:error] [pid 3502499:tid 3502499] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:18.533646 2026] [security2:error] [pid 3468877:tid 3468877] [client 49.51.253.83:57442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mjs-services.com"] [uri "/"] [unique_id "amtRrre4TtlyOY16ljNVMAAAADA"]
[Thu Jul 30 14:29:18.587613 2026] [ssl:error] [pid 3496037:tid 3496037] (EAI 2)Name or service not known: [client 144.76.19.72:26754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:18.587644 2026] [ssl:error] [pid 3496037:tid 3496037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:18.605027 2026] [core:error] [pid 3496025:tid 3496025] (13)Permission denied: [client 216.73.216.199:20251] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/slabs
[Thu Jul 30 14:29:18.856553 2026] [access_compat:error] [pid 3492200:tid 3492200] [client 103.59.153.118:62092] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:18.906316 2026] [ssl:error] [pid 3496025:tid 3496025] (70014)End of file found: [client 216.73.216.199:20251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:20.191542 2026] [security2:error] [pid 3502127:tid 3502127] [client 49.51.253.83:44992] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mjs-services.com"] [uri "/"] [unique_id "amtRsFz_Mpq_NAwXABFiAwAAAAQ"], referer: http://www.mjs-services.com
[Thu Jul 30 14:29:21.096491 2026] [ssl:error] [pid 3502818:tid 3502818] (70014)End of file found: [client 216.73.216.199:62579] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:21.394959 2026] [ssl:error] [pid 3495625:tid 3495625] (70014)End of file found: [client 216.73.216.199:35243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:21.644526 2026] [ssl:error] [pid 3499840:tid 3499840] (EAI 2)Name or service not known: [client 144.76.19.72:60958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:21.644572 2026] [ssl:error] [pid 3499840:tid 3499840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:21.697955 2026] [ssl:error] [pid 3500248:tid 3500248] (EAI 2)Name or service not known: [client 144.76.19.72:60960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:21.698001 2026] [ssl:error] [pid 3500248:tid 3500248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:21.877748 2026] [access_compat:error] [pid 3479987:tid 3479987] [client 45.158.164.139:47756] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:29:22.106601 2026] [ssl:error] [pid 3496022:tid 3496022] (70014)End of file found: [client 216.73.216.199:35934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:24.759492 2026] [ssl:error] [pid 3496025:tid 3496025] (EAI 2)Name or service not known: [client 144.76.19.72:60964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:24.759524 2026] [ssl:error] [pid 3496025:tid 3496025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:24.813563 2026] [ssl:error] [pid 3496032:tid 3496032] (EAI 2)Name or service not known: [client 144.76.19.72:60966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:24.813590 2026] [ssl:error] [pid 3496032:tid 3496032] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:25.497673 2026] [access_compat:error] [pid 3493908:tid 3493908] [client 103.59.153.118:62398] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:26.529003 2026] [ssl:error] [pid 3493909:tid 3493909] (70014)End of file found: [client 216.73.216.199:21245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:27.416270 2026] [ssl:error] [pid 3492200:tid 3492200] (70014)End of file found: [client 216.73.216.199:34611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:27.829972 2026] [ssl:error] [pid 3495416:tid 3495416] (70014)End of file found: [client 216.73.216.199:37080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:27.894967 2026] [ssl:error] [pid 3477540:tid 3477540] (EAI 2)Name or service not known: [client 144.76.19.72:60978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:27.895006 2026] [ssl:error] [pid 3477540:tid 3477540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:27.946348 2026] [ssl:error] [pid 3499840:tid 3499840] (EAI 2)Name or service not known: [client 144.76.19.72:60992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:27.946374 2026] [ssl:error] [pid 3499840:tid 3499840] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:29.562936 2026] [access_compat:error] [pid 3493908:tid 3493908] [client 103.59.153.118:62591] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:31.013531 2026] [ssl:error] [pid 3501372:tid 3501372] (EAI 2)Name or service not known: [client 144.76.19.72:42980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:31.013569 2026] [ssl:error] [pid 3501372:tid 3501372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:31.079721 2026] [ssl:error] [pid 3477535:tid 3477535] (EAI 2)Name or service not known: [client 144.76.19.72:42992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:31.079748 2026] [ssl:error] [pid 3477535:tid 3477535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:32.655032 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:36423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:33.137400 2026] [core:error] [pid 3499840:tid 3499840] (13)Permission denied: [client 216.73.216.199:16583] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/spurious/uevent
[Thu Jul 30 14:29:33.854761 2026] [ssl:error] [pid 3499840:tid 3499840] (70014)End of file found: [client 216.73.216.199:16583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:34.134381 2026] [ssl:error] [pid 3501372:tid 3501372] (EAI 2)Name or service not known: [client 144.76.19.72:42998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:34.134408 2026] [ssl:error] [pid 3501372:tid 3501372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:34.187086 2026] [ssl:error] [pid 3496189:tid 3496189] (EAI 2)Name or service not known: [client 144.76.19.72:43008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:34.187117 2026] [ssl:error] [pid 3496189:tid 3496189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:35.672481 2026] [ssl:error] [pid 3495416:tid 3495416] (70014)End of file found: [client 216.73.216.199:59060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:36.245007 2026] [access_compat:error] [pid 3493907:tid 3493907] [client 103.59.153.118:62899] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:36.744049 2026] [access_compat:error] [pid 3502127:tid 3502127] [client 45.158.164.139:41282] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:29:37.243590 2026] [ssl:error] [pid 3500249:tid 3500249] (EAI 2)Name or service not known: [client 144.76.19.72:43022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:37.243634 2026] [ssl:error] [pid 3500249:tid 3500249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:37.300665 2026] [ssl:error] [pid 3484676:tid 3484676] (EAI 2)Name or service not known: [client 144.76.19.72:43034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:37.300709 2026] [ssl:error] [pid 3484676:tid 3484676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:38.954364 2026] [security2:error] [pid 3468877:tid 3468877] [client 85.208.96.195:21456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/citrus-county-court-schedule"] [unique_id "amtRwre4TtlyOY16ljNVNgAAADA"]
[Thu Jul 30 14:29:39.282929 2026] [ssl:error] [pid 3493907:tid 3493907] (70014)End of file found: [client 216.73.216.199:34051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:39.885227 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:29522] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:40.195396 2026] [access_compat:error] [pid 3504281:tid 3504281] [client 103.59.153.118:63090] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:40.353528 2026] [ssl:error] [pid 3493913:tid 3493913] (EAI 2)Name or service not known: [client 144.76.19.72:46694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:40.353559 2026] [ssl:error] [pid 3493913:tid 3493913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:40.408641 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:46698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:40.408672 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:40.988711 2026] [ssl:error] [pid 3495971:tid 3495971] (70014)End of file found: [client 216.73.216.199:45242] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:43.460587 2026] [ssl:error] [pid 3500494:tid 3500494] (EAI 2)Name or service not known: [client 144.76.19.72:46702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:43.460621 2026] [ssl:error] [pid 3500494:tid 3500494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:43.514514 2026] [ssl:error] [pid 3500494:tid 3500494] (EAI 2)Name or service not known: [client 144.76.19.72:46716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:43.514540 2026] [ssl:error] [pid 3500494:tid 3500494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:45.311662 2026] [ssl:error] [pid 3485409:tid 3485409] (70014)End of file found: [client 216.73.216.199:64187] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:45.810952 2026] [lsapi:warn] [pid 3504584:tid 3504584] [client 77.68.84.233:54991] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:29:46.074976 2026] [security2:error] [pid 3496189:tid 3496189] [client 185.191.171.1:17446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8070.0/prev_next,prev.html"] [unique_id "amtRyipQDZoMKZ6EuBvJxQAAAB8"]
[Thu Jul 30 14:29:46.127522 2026] [lsapi:warn] [pid 3504583:tid 3504583] [client 77.68.84.233:55019] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:29:46.372389 2026] [lsapi:warn] [pid 3499840:tid 3499840] [client 77.68.84.233:55033] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:29:46.569830 2026] [ssl:error] [pid 3496037:tid 3496037] (EAI 2)Name or service not known: [client 144.76.19.72:46726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:46.569870 2026] [ssl:error] [pid 3496037:tid 3496037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:46.625647 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:46730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:46.625685 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:46.813384 2026] [ssl:error] [pid 3499028:tid 3499028] (70014)End of file found: [client 216.73.216.199:3600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:48.018029 2026] [ssl:error] [pid 3502818:tid 3502818] (70014)End of file found: [client 216.73.216.199:43871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:49.678665 2026] [security2:error] [pid 3477535:tid 3477535] [client 198.11.177.243:41344] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amtRzb3_9qQy-oYyKARfdwAAACo"]
[Thu Jul 30 14:29:49.682347 2026] [ssl:error] [pid 3492563:tid 3492563] (EAI 2)Name or service not known: [client 144.76.19.72:52444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:49.682368 2026] [ssl:error] [pid 3492563:tid 3492563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:49.757051 2026] [ssl:error] [pid 3493842:tid 3493842] (EAI 2)Name or service not known: [client 144.76.19.72:52450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:49.757093 2026] [ssl:error] [pid 3493842:tid 3493842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:50.886160 2026] [access_compat:error] [pid 3504582:tid 3504582] [client 103.59.153.118:63589] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:29:51.338298 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:35378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:52.136821 2026] [ssl:error] [pid 3500248:tid 3500248] (70014)End of file found: [client 216.73.216.199:44482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:52.689816 2026] [security2:error] [pid 3493907:tid 3493907] [client 198.11.177.243:41346] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtR0HumOqTlKa5wZdaAvwAAACQ"], referer: https://spampmusic.co.uk
[Thu Jul 30 14:29:52.815245 2026] [ssl:error] [pid 3496189:tid 3496189] (EAI 2)Name or service not known: [client 144.76.19.72:52456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:52.815286 2026] [ssl:error] [pid 3496189:tid 3496189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:52.915529 2026] [ssl:error] [pid 3495416:tid 3495416] (EAI 2)Name or service not known: [client 144.76.19.72:52470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:52.915557 2026] [ssl:error] [pid 3495416:tid 3495416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:53.542402 2026] [security2:error] [pid 3495416:tid 3495416] [client 119.28.177.175:46328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amtR0WZC4NCV6NFAWUE_XQAAAAA"]
[Thu Jul 30 14:29:54.041985 2026] [core:error] [pid 3498931:tid 3498931] (13)Permission denied: [client 216.73.216.199:64557] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/email_send_limits
[Thu Jul 30 14:29:54.644519 2026] [ssl:error] [pid 3498931:tid 3498931] (70014)End of file found: [client 216.73.216.199:64557] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:55.352793 2026] [security2:error] [pid 3496022:tid 3496022] [client 129.204.188.64:57548] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-atrox-killers.net"] [uri "/"] [unique_id "amtR03RbRsJp8vebcPSOmQAAAEA"]
[Thu Jul 30 14:29:55.969098 2026] [ssl:error] [pid 3495416:tid 3495416] (EAI 2)Name or service not known: [client 144.76.19.72:52484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:55.969131 2026] [ssl:error] [pid 3495416:tid 3495416] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:56.031793 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:52496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:56.031838 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:56.360280 2026] [cgi:error] [pid 3499322:tid 3499322] [client 136.226.167.4:58687] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:29:56.660607 2026] [authz_core:error] [pid 3495416:tid 3495416] [client 66.249.66.34:43500] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:29:56.661776 2026] [ssl:error] [pid 3496022:tid 3496022] (70014)End of file found: [client 216.73.216.199:18556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:29:56.663396 2026] [authz_core:error] [pid 3495416:tid 3495416] [client 66.249.66.34:43500] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:29:59.087617 2026] [ssl:error] [pid 3504582:tid 3504582] (EAI 2)Name or service not known: [client 144.76.19.72:52500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:59.087665 2026] [ssl:error] [pid 3504582:tid 3504582] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:59.143702 2026] [ssl:error] [pid 3496189:tid 3496189] (EAI 2)Name or service not known: [client 144.76.19.72:52510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:29:59.143726 2026] [ssl:error] [pid 3496189:tid 3496189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:29:59.492361 2026] [ssl:error] [pid 3493910:tid 3493910] (70014)End of file found: [client 216.73.216.199:44704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:00.410088 2026] [ssl:error] [pid 3496189:tid 3496189] (70014)End of file found: [client 216.73.216.199:57586] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:01.471684 2026] [access_compat:error] [pid 3492563:tid 3492563] [client 103.59.153.118:64090] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:02.115449 2026] [ssl:error] [pid 3504582:tid 3504582] (70014)End of file found: [client 216.73.216.199:65440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:02.201342 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:48366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:02.201379 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:02.257311 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:48376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:02.257360 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:02.628434 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:02.628553 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:03.043399 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:03.043522 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:03.466525 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:03.466654 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:03.945949 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:03.946096 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:04.405035 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:04.405176 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:04.595848 2026] [security2:error] [pid 3496022:tid 3496022] [client 114.119.132.171:60183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575590400/cat_ids~14/request_format~html"] [unique_id "amtR3HRbRsJp8vebcPSOnQAAAEA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575504000/request_format~html/cat_ids~14
[Thu Jul 30 14:30:04.642376 2026] [security2:error] [pid 3496024:tid 3496024] [client 177.223.92.218:14851] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtR3GogIjHXVnmydmXADgAAAEM"]
[Thu Jul 30 14:30:04.642456 2026] [security2:error] [pid 3496024:tid 3496024] [client 177.223.92.218:14851] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtR3GogIjHXVnmydmXADgAAAEM"]
[Thu Jul 30 14:30:04.642820 2026] [security2:error] [pid 3496024:tid 3496024] [client 177.223.92.218:14851] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtR3GogIjHXVnmydmXADgAAAEM"]
[Thu Jul 30 14:30:04.831308 2026] [ssl:error] [pid 3500494:tid 3500494] (70014)End of file found: [client 216.73.216.199:2675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:04.836053 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:04.836197 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:05.258924 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:05.259061 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:05.313586 2026] [ssl:error] [pid 3504535:tid 3504535] (EAI 2)Name or service not known: [client 144.76.19.72:48386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:05.313616 2026] [ssl:error] [pid 3504535:tid 3504535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:05.369985 2026] [ssl:error] [pid 3493910:tid 3493910] (EAI 2)Name or service not known: [client 144.76.19.72:48396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:05.370034 2026] [ssl:error] [pid 3493910:tid 3493910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:05.674774 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:05.674899 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:05.737148 2026] [ssl:error] [pid 3479987:tid 3479987] (70014)End of file found: [client 216.73.216.199:41375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:06.099090 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:06.099207 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:06.558315 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:06.558475 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:06.986683 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:06.986800 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:06.993852 2026] [lsapi:warn] [pid 3492200:tid 3492200] [client 178.156.229.171:52778] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:30:06.993914 2026] [lsapi:warn] [pid 3492200:tid 3492200] [client 178.156.229.171:52778] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:30:07.077629 2026] [security2:error] [pid 3496027:tid 3496027] [client 114.119.132.171:60197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575590400/cat_ids~14/request_format~html"] [unique_id "amtR33RxeA9wytZRZdtctQAAAEg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575504000/request_format~html/cat_ids~14
[Thu Jul 30 14:30:07.441374 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:07.441490 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:07.458589 2026] [security2:error] [pid 3504582:tid 3504582] [client 47.86.2.155:50043] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtR3zQhicyw0HRiipsp3wAAABg"]
[Thu Jul 30 14:30:07.458659 2026] [security2:error] [pid 3504582:tid 3504582] [client 47.86.2.155:50043] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtR3zQhicyw0HRiipsp3wAAABg"]
[Thu Jul 30 14:30:07.459003 2026] [security2:error] [pid 3504582:tid 3504582] [client 47.86.2.155:50043] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtR3zQhicyw0HRiipsp3wAAABg"]
[Thu Jul 30 14:30:07.914079 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:07.914189 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:07.953058 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:25242] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:08.302213 2026] [access_compat:error] [pid 3495416:tid 3495416] [client 103.59.153.118:64405] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:08.391113 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:08.391226 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:08.445053 2026] [ssl:error] [pid 3504535:tid 3504535] (EAI 2)Name or service not known: [client 144.76.19.72:48408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:08.445110 2026] [ssl:error] [pid 3504535:tid 3504535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:08.500838 2026] [ssl:error] [pid 3500248:tid 3500248] (EAI 2)Name or service not known: [client 144.76.19.72:48422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:08.500867 2026] [ssl:error] [pid 3500248:tid 3500248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:08.826923 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:08.827039 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:09.257720 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:09.257830 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:09.688207 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:09.688318 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:10.112119 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:10.112235 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:10.365090 2026] [ssl:error] [pid 3503352:tid 3503352] (70014)End of file found: [client 216.73.216.199:20452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:10.532160 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:10.532281 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:10.964317 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:10.964453 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:11.154968 2026] [ssl:error] [pid 3495918:tid 3495918] (70014)End of file found: [client 216.73.216.199:27548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:11.396992 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:11.397123 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:11.513808 2026] [security2:error] [pid 3496024:tid 3496024] [client 47.86.2.155:54415] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtR42ogIjHXVnmydmXADwAAAEM"]
[Thu Jul 30 14:30:11.513856 2026] [security2:error] [pid 3496024:tid 3496024] [client 47.86.2.155:54415] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtR42ogIjHXVnmydmXADwAAAEM"]
[Thu Jul 30 14:30:11.514105 2026] [security2:error] [pid 3496024:tid 3496024] [client 47.86.2.155:54415] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtR42ogIjHXVnmydmXADwAAAEM"]
[Thu Jul 30 14:30:11.556013 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:29774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:11.556102 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:11.607345 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:29776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:11.607370 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:11.856884 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:11.857020 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:12.258336 2026] [access_compat:error] [pid 3495973:tid 3495973] [client 103.59.153.118:64596] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:12.293058 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:12.293194 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:12.723892 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:12.724008 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:13.154274 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:13.154385 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:13.262033 2026] [ssl:error] [pid 3502264:tid 3502264] (70014)End of file found: [client 216.73.216.199:38095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:13.571018 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:13.571147 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:14.003964 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:14.004109 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:14.432459 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:14.432567 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:14.681713 2026] [ssl:error] [pid 3496027:tid 3496027] (EAI 2)Name or service not known: [client 144.76.19.72:29786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:14.681747 2026] [ssl:error] [pid 3496027:tid 3496027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:14.734938 2026] [ssl:error] [pid 3496027:tid 3496027] (EAI 2)Name or service not known: [client 144.76.19.72:29792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:14.734964 2026] [ssl:error] [pid 3496027:tid 3496027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:14.854152 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:14.854272 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:15.272636 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:15.272747 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:15.700262 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:15.700374 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:16.117557 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:16.117696 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:16.683839 2026] [ssl:error] [pid 3506248:tid 3506248] (70014)End of file found: [client 216.73.216.199:1170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:16.700680 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:16.700801 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:17.129845 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:17.129997 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:17.554397 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:17.554515 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:17.594709 2026] [ssl:error] [pid 3477535:tid 3477535] (70014)End of file found: [client 216.73.216.199:18813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:17.792505 2026] [ssl:error] [pid 3506461:tid 3506461] (EAI 2)Name or service not known: [client 144.76.19.72:29802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:17.792547 2026] [ssl:error] [pid 3506461:tid 3506461] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:17.847889 2026] [ssl:error] [pid 3503352:tid 3503352] (EAI 2)Name or service not known: [client 144.76.19.72:29808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:17.847923 2026] [ssl:error] [pid 3503352:tid 3503352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:17.974518 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:17.974630 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:18.333581 2026] [lsapi:warn] [pid 3503352:tid 3503352] [client 5.161.103.15:60478] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:30:18.333625 2026] [lsapi:warn] [pid 3503352:tid 3503352] [client 5.161.103.15:60478] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:30:18.385838 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:18.385952 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:18.801445 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:18.801553 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:19.091207 2026] [ssl:error] [pid 3502264:tid 3502264] (70014)End of file found: [client 216.73.216.199:27474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:19.209021 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:19.209144 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:19.751333 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:19.751452 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:20.193413 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:20.193530 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:20.658160 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:20.658268 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:20.906693 2026] [ssl:error] [pid 3493842:tid 3493842] (EAI 2)Name or service not known: [client 144.76.19.72:20064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:20.906723 2026] [ssl:error] [pid 3493842:tid 3493842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:20.961491 2026] [ssl:error] [pid 3496022:tid 3496022] (EAI 2)Name or service not known: [client 144.76.19.72:20070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:20.961520 2026] [ssl:error] [pid 3496022:tid 3496022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:21.086001 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:21.086139 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:21.537316 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:21.537424 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:21.955483 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:21.955599 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:22.086854 2026] [ssl:error] [pid 3506248:tid 3506248] (70014)End of file found: [client 216.73.216.199:4847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:22.301734 2026] [ssl:error] [pid 3500494:tid 3500494] (70014)End of file found: [client 216.73.216.199:3062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:22.369764 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:22.369875 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:22.797483 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:22.797603 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:22.805777 2026] [core:error] [pid 3502818:tid 3502818] (13)Permission denied: [client 216.73.216.199:40812] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty35/subsystem/ttyS3/closing_wait
[Thu Jul 30 14:30:22.889306 2026] [access_compat:error] [pid 3504534:tid 3504534] [client 103.59.153.118:65098] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:23.108832 2026] [ssl:error] [pid 3502818:tid 3502818] (70014)End of file found: [client 216.73.216.199:40812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:23.345035 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:23.345158 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:23.758906 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:23.759019 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:24.018364 2026] [ssl:error] [pid 3506878:tid 3506878] (EAI 2)Name or service not known: [client 144.76.19.72:20078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:24.018407 2026] [ssl:error] [pid 3506878:tid 3506878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:24.070801 2026] [ssl:error] [pid 3506175:tid 3506175] (EAI 2)Name or service not known: [client 144.76.19.72:20086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:24.070833 2026] [ssl:error] [pid 3506175:tid 3506175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:24.218310 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:24.218432 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63914] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:24.947373 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:24.947488 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:25.390892 2026] [access_compat:error] [pid 3500248:tid 3500248] [client 45.158.164.139:59562] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:30:25.391160 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:25.391271 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:25.816451 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:25.816571 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:26.245154 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:26.245269 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:26.668848 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:26.668967 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:26.773512 2026] [security2:error] [pid 3493908:tid 3493908] [client 85.208.98.31:35952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "clarepillinger.co.uk"] [uri "/bebek-deterjan%C4%B1-dalan-k.html"] [unique_id "amtR8vmD4ZWoG3DjZtBRVgAAACY"]
[Thu Jul 30 14:30:27.099143 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:27.099255 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:27.124316 2026] [ssl:error] [pid 3503352:tid 3503352] (EAI 2)Name or service not known: [client 144.76.19.72:20092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:27.124344 2026] [ssl:error] [pid 3503352:tid 3503352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:27.177219 2026] [ssl:error] [pid 3499322:tid 3499322] (EAI 2)Name or service not known: [client 144.76.19.72:20096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:27.177250 2026] [ssl:error] [pid 3499322:tid 3499322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:27.509151 2026] [core:error] [pid 3492563:tid 3492563] (13)Permission denied: [client 216.73.216.199:35705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/thermal/cooling_device6/device/eject
[Thu Jul 30 14:30:27.538344 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:27.538473 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:27.982940 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:27.983048 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:28.449522 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:28.449634 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:28.907362 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:28.907483 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:29.333416 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:29.333536 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:29.771174 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:29.771281 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:30.228026 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:30.228150 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:30.233354 2026] [ssl:error] [pid 3506955:tid 3506955] (EAI 2)Name or service not known: [client 144.76.19.72:48464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:30.233380 2026] [ssl:error] [pid 3506955:tid 3506955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:30.288510 2026] [ssl:error] [pid 3502264:tid 3502264] (EAI 2)Name or service not known: [client 144.76.19.72:48480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:30.288547 2026] [ssl:error] [pid 3502264:tid 3502264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:30.653830 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:30.653940 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:31.080906 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:31.081077 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:31.528449 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:31.528560 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:31.956496 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:31.956607 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:32.393906 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:32.394015 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:32.759485 2026] [core:error] [pid 3492563:tid 3492563] (13)Permission denied: [client 216.73.216.199:35705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sbin/modsec-sdbm-util
[Thu Jul 30 14:30:32.824294 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:32.824403 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:33.237598 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:33.237707 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:33.344850 2026] [ssl:error] [pid 3493907:tid 3493907] (EAI 2)Name or service not known: [client 144.76.19.72:48490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:33.344877 2026] [ssl:error] [pid 3493907:tid 3493907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:33.404491 2026] [ssl:error] [pid 3495973:tid 3495973] (EAI 2)Name or service not known: [client 144.76.19.72:48496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:33.404521 2026] [ssl:error] [pid 3495973:tid 3495973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:33.635691 2026] [access_compat:error] [pid 3502264:tid 3502264] [client 103.59.153.118:49213] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:33.895391 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:33.895512 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:34.468012 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:34.468133 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:34.936959 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:34.937083 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:35.366717 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:35.366831 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:35.852774 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:35.852888 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:36.272538 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:36.272651 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:36.456579 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:48512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:36.456608 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:36.512792 2026] [ssl:error] [pid 3500248:tid 3500248] (EAI 2)Name or service not known: [client 144.76.19.72:48528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:36.512820 2026] [ssl:error] [pid 3500248:tid 3500248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:36.837816 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:36.837923 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:37.249614 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:37.249731 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:37.268843 2026] [core:error] [pid 3492563:tid 3492563] (13)Permission denied: [client 216.73.216.199:35705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/xz_dec/uevent
[Thu Jul 30 14:30:37.695079 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:37.695189 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:37.816100 2026] [authz_core:error] [pid 3506529:tid 3506529] [client 66.249.66.34:62887] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:30:37.818744 2026] [authz_core:error] [pid 3506529:tid 3506529] [client 66.249.66.34:62887] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:30:37.886207 2026] [security2:error] [pid 3492563:tid 3492563] [client 216.73.216.199:35705] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/virtual-host/tuned.conf"] [unique_id "amtR_cf1qe6osKy0tQMyfQAAABk"]
[Thu Jul 30 14:30:37.886446 2026] [security2:error] [pid 3492563:tid 3492563] [client 216.73.216.199:35705] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/virtual-host/tuned.conf"] [unique_id "amtR_cf1qe6osKy0tQMyfQAAABk"]
[Thu Jul 30 14:30:37.886655 2026] [security2:error] [pid 3492563:tid 3492563] [client 216.73.216.199:35705] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/virtual-host/tuned.conf"] [unique_id "amtR_cf1qe6osKy0tQMyfQAAABk"]
[Thu Jul 30 14:30:38.121713 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:38.121827 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:38.544290 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:38.544422 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:38.989417 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:38.989537 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:39.416787 2026] [security2:error] [pid 3495971:tid 3495971] [client 85.208.96.197:41708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/why-did-lindsay-and-severide-break-up"] [unique_id "amtR_0zi0eCC6FitsfSB4AAAADk"]
[Thu Jul 30 14:30:39.457558 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:39.457669 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:39.567124 2026] [ssl:error] [pid 3504476:tid 3504476] (EAI 2)Name or service not known: [client 144.76.19.72:26188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:39.567158 2026] [ssl:error] [pid 3504476:tid 3504476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:39.618825 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:26198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:39.618859 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:39.699630 2026] [core:error] [pid 3492563:tid 3492563] (13)Permission denied: [client 216.73.216.199:35705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS1/uartclk
[Thu Jul 30 14:30:39.935372 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:39.935495 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:40.000004 2026] [core:error] [pid 3492563:tid 3492563] (13)Permission denied: [client 216.73.216.199:35705] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS1/uartclk
[Thu Jul 30 14:30:40.343259 2026] [access_compat:error] [pid 3495416:tid 3495416] [client 103.59.153.118:49520] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:40.351325 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:40.351438 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:40.434365 2026] [access_compat:error] [pid 3484676:tid 3484676] [client 172.202.95.21:30673] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:30:40.573012 2026] [authz_core:error] [pid 3495971:tid 3495971] [client 66.249.66.35:59136] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:30:40.575674 2026] [authz_core:error] [pid 3495971:tid 3495971] [client 66.249.66.35:59136] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:30:40.604325 2026] [ssl:error] [pid 3492563:tid 3492563] (70014)End of file found: [client 216.73.216.199:35705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:40.847871 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:40.847981 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:40.855373 2026] [access_compat:error] [pid 3493908:tid 3493908] [client 45.158.164.139:50662] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:30:41.278874 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:41.278996 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:41.327588 2026] [security2:error] [pid 3484871:tid 3484871] [client 43.163.206.70:48858] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amtSATKNluJ_AD5Zo78cLQAAAEU"]
[Thu Jul 30 14:30:41.772347 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:41.772466 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:42.007051 2026] [core:error] [pid 3496189:tid 3496189] (13)Permission denied: [client 216.73.216.199:4755] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty52/subsystem/ttyS3/device/driver/unbind
[Thu Jul 30 14:30:42.202962 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:42.203083 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:42.334320 2026] [security2:error] [pid 3496037:tid 3496037] [client 8.211.147.253:35267] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSAj3NgfHvIdHYvej1sQAAAFA"]
[Thu Jul 30 14:30:42.334384 2026] [security2:error] [pid 3496037:tid 3496037] [client 8.211.147.253:35267] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSAj3NgfHvIdHYvej1sQAAAFA"]
[Thu Jul 30 14:30:42.334652 2026] [security2:error] [pid 3496037:tid 3496037] [client 8.211.147.253:35267] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSAj3NgfHvIdHYvej1sQAAAFA"]
[Thu Jul 30 14:30:42.648151 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:42.648274 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:42.700192 2026] [ssl:error] [pid 3504281:tid 3504281] (EAI 2)Name or service not known: [client 144.76.19.72:26212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:42.700244 2026] [ssl:error] [pid 3504281:tid 3504281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:42.789951 2026] [ssl:error] [pid 3506529:tid 3506529] (EAI 2)Name or service not known: [client 144.76.19.72:26214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:42.789980 2026] [ssl:error] [pid 3506529:tid 3506529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:43.077462 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:43.077571 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:43.601671 2026] [security2:error] [pid 3506175:tid 3506175] [client 43.156.228.27:37812] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sharonduggal.co.uk"] [uri "/"] [unique_id "amtSAzs2z7N_MZoXGMQdMQAAAB4"]
[Thu Jul 30 14:30:43.608110 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:43.608216 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:43.676673 2026] [security2:error] [pid 3504281:tid 3504281] [client 43.163.206.70:53866] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amtSA8ADwFKWhb-Y2m9wGwAAAAk"], referer: http://www.mwdesign.me.uk
[Thu Jul 30 14:30:43.927268 2026] [ssl:error] [pid 3496027:tid 3496027] (70014)End of file found: [client 216.73.216.199:28654] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:44.024959 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:44.025121 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:44.106193 2026] [security2:error] [pid 3498931:tid 3498931] [client 90.50.171.252:50116] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSBIZXAZUQjtbBy5m2eQAAAAE"]
[Thu Jul 30 14:30:44.106246 2026] [security2:error] [pid 3498931:tid 3498931] [client 90.50.171.252:50116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSBIZXAZUQjtbBy5m2eQAAAAE"]
[Thu Jul 30 14:30:44.106530 2026] [security2:error] [pid 3498931:tid 3498931] [client 90.50.171.252:50116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSBIZXAZUQjtbBy5m2eQAAAAE"]
[Thu Jul 30 14:30:44.242287 2026] [access_compat:error] [pid 3502818:tid 3502818] [client 103.59.153.118:49720] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:44.492000 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:44.492125 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:44.914324 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:44.914450 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:45.342483 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:45.342592 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:45.733444 2026] [ssl:error] [pid 3496189:tid 3496189] (70014)End of file found: [client 216.73.216.199:4755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:45.763583 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:45.763696 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:45.844375 2026] [ssl:error] [pid 3506175:tid 3506175] (EAI 2)Name or service not known: [client 144.76.19.72:26226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:45.844406 2026] [ssl:error] [pid 3506175:tid 3506175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:45.899835 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:26232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:45.899863 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:46.207613 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:46.207724 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:46.387019 2026] [security2:error] [pid 3499028:tid 3499028] [client 100.2.109.43:56380] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSBlt9zi8jenpEZ8GcWwAAAAI"]
[Thu Jul 30 14:30:46.387095 2026] [security2:error] [pid 3499028:tid 3499028] [client 100.2.109.43:56380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSBlt9zi8jenpEZ8GcWwAAAAI"]
[Thu Jul 30 14:30:46.387384 2026] [security2:error] [pid 3499028:tid 3499028] [client 100.2.109.43:56380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSBlt9zi8jenpEZ8GcWwAAAAI"]
[Thu Jul 30 14:30:46.741621 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:46.741732 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:47.167160 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:47.167271 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:47.604096 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:47.604206 2026] [cgi:error] [pid 3504944:tid 3504944] [client 20.197.178.120:63931] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:48.447248 2026] [ssl:error] [pid 3506175:tid 3506175] (70014)End of file found: [client 216.73.216.199:21618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:48.588172 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:48.588288 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:48.951913 2026] [ssl:error] [pid 3495973:tid 3495973] (EAI 2)Name or service not known: [client 144.76.19.72:26236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:48.951941 2026] [ssl:error] [pid 3495973:tid 3495973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:49.002957 2026] [ssl:error] [pid 3496020:tid 3496020] (EAI 2)Name or service not known: [client 144.76.19.72:26252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:49.002999 2026] [ssl:error] [pid 3496020:tid 3496020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:49.097206 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:49.097322 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:49.515723 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:49.515835 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:50.018661 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:50.018786 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:50.249959 2026] [ssl:error] [pid 3504944:tid 3504944] (70014)End of file found: [client 216.73.216.199:64785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:50.432702 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:50.432813 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:50.869153 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:50.869273 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:51.451842 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:51.451960 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:51.622344 2026] [core:error] [pid 3493908:tid 3493908] (13)Permission denied: [client 216.73.216.199:41363] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 14:30:51.923390 2026] [core:error] [pid 3493908:tid 3493908] (13)Permission denied: [client 216.73.216.199:41363] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty58/subsystem/ttyS2/uartclk
[Thu Jul 30 14:30:51.948825 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:51.948940 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:52.411303 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:52.411424 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:52.586470 2026] [ssl:error] [pid 3503352:tid 3503352] (EAI 2)Name or service not known: [client 144.76.19.72:50128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:52.586500 2026] [ssl:error] [pid 3503352:tid 3503352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:52.645623 2026] [ssl:error] [pid 3496024:tid 3496024] (EAI 2)Name or service not known: [client 144.76.19.72:50138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:52.645651 2026] [ssl:error] [pid 3496024:tid 3496024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:52.711940 2026] [lsapi:warn] [pid 3506955:tid 3506955] [client 45.158.164.139:33858] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:30:52.711984 2026] [lsapi:warn] [pid 3506955:tid 3506955] [client 45.158.164.139:33858] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:30:52.714040 2026] [lsapi:warn] [pid 3496189:tid 3496189] [client 89.197.16.98:43157] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:30:52.714090 2026] [lsapi:warn] [pid 3496189:tid 3496189] [client 89.197.16.98:43157] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:30:52.863846 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:52.863958 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:53.521089 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:53.521210 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:53.570541 2026] [security2:error] [pid 3503352:tid 3503352] [client 185.191.171.6:49052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,132.0/prev_next,prev.html"] [unique_id "amtSDbbq7Cusx-aFhRNaXgAAAAU"]
[Thu Jul 30 14:30:53.942789 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:53.942900 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:54.558276 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:54.558387 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:54.877942 2026] [access_compat:error] [pid 3496024:tid 3496024] [client 103.59.153.118:50222] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:30:55.035508 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:55.035663 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:55.234932 2026] [ssl:error] [pid 3493908:tid 3493908] (70014)End of file found: [client 216.73.216.199:41363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:55.453413 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:55.453534 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:55.727838 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:50144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:55.727866 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:55.783540 2026] [ssl:error] [pid 3486401:tid 3486401] (EAI 2)Name or service not known: [client 144.76.19.72:50150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:55.783576 2026] [ssl:error] [pid 3486401:tid 3486401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:55.838814 2026] [security2:error] [pid 3484871:tid 3484871] [client 216.73.216.199:55906] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/gssproxy/24-nfs-server.conf"] [unique_id "amtSDzKNluJ_AD5Zo78cMQAAAEU"]
[Thu Jul 30 14:30:55.839077 2026] [security2:error] [pid 3484871:tid 3484871] [client 216.73.216.199:55906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/gssproxy/24-nfs-server.conf"] [unique_id "amtSDzKNluJ_AD5Zo78cMQAAAEU"]
[Thu Jul 30 14:30:55.839297 2026] [security2:error] [pid 3484871:tid 3484871] [client 216.73.216.199:55906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/gssproxy/24-nfs-server.conf"] [unique_id "amtSDzKNluJ_AD5Zo78cMQAAAEU"]
[Thu Jul 30 14:30:56.138258 2026] [ssl:error] [pid 3484871:tid 3484871] (70014)End of file found: [client 216.73.216.199:55906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:56.149909 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:56.150026 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:56.573826 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:56.573938 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:57.010690 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:57.010807 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:57.433565 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:57.433677 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:57.887164 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:57.887276 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:57.948490 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:36004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:30:58.299313 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:58.299424 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:58.789593 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:58.789702 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:58.837940 2026] [ssl:error] [pid 3495973:tid 3495973] (EAI 2)Name or service not known: [client 144.76.19.72:50152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:58.837969 2026] [ssl:error] [pid 3495973:tid 3495973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:58.892620 2026] [ssl:error] [pid 3495971:tid 3495971] (EAI 2)Name or service not known: [client 144.76.19.72:50154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:30:58.892646 2026] [ssl:error] [pid 3495971:tid 3495971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:30:58.910745 2026] [security2:error] [pid 3493762:tid 3493762] [client 43.166.136.24:58296] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.parallel-coordinates.co.uk"] [uri "/"] [unique_id "amtSEoxkIT_r-Htm98vZyQAAAAY"]
[Thu Jul 30 14:30:59.316237 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:59.316353 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:30:59.759404 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:30:59.759526 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:00.310521 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:00.310632 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:00.954552 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:00.954667 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:01.497517 2026] [access_compat:error] [pid 3504476:tid 3504476] [client 103.59.153.118:50527] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:01.581573 2026] [core:error] [pid 3506530:tid 3506530] (13)Permission denied: [client 216.73.216.199:1849] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/kgdbts/uevent
[Thu Jul 30 14:31:01.716765 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:01.716881 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:01.845635 2026] [lsapi:warn] [pid 3493908:tid 3493908] [client 185.65.133.110:51458] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:31:01.845676 2026] [lsapi:warn] [pid 3493908:tid 3493908] [client 185.65.133.110:51458] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:31:01.930644 2026] [security2:error] [pid 3504534:tid 3504534] [client 187.184.8.177:51628] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSFdmqXsUjvHFmOSzpXAAAAA8"]
[Thu Jul 30 14:31:01.930691 2026] [security2:error] [pid 3504534:tid 3504534] [client 187.184.8.177:51628] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSFdmqXsUjvHFmOSzpXAAAAA8"]
[Thu Jul 30 14:31:01.930934 2026] [security2:error] [pid 3504534:tid 3504534] [client 187.184.8.177:51628] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSFdmqXsUjvHFmOSzpXAAAAA8"]
[Thu Jul 30 14:31:01.945811 2026] [ssl:error] [pid 3496024:tid 3496024] (EAI 2)Name or service not known: [client 144.76.19.72:28158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:01.945834 2026] [ssl:error] [pid 3496024:tid 3496024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:01.998527 2026] [ssl:error] [pid 3506175:tid 3506175] (EAI 2)Name or service not known: [client 144.76.19.72:28168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:01.998552 2026] [ssl:error] [pid 3506175:tid 3506175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:02.306879 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:02.307659 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:02.720539 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:02.720659 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:03.143314 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:03.143435 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:03.563565 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:03.563674 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:03.808474 2026] [security2:error] [pid 3496189:tid 3496189] [client 150.5.133.173:57317] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSFypQDZoMKZ6EuBvJ5QAAAB8"]
[Thu Jul 30 14:31:03.808527 2026] [security2:error] [pid 3496189:tid 3496189] [client 150.5.133.173:57317] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSFypQDZoMKZ6EuBvJ5QAAAB8"]
[Thu Jul 30 14:31:03.808768 2026] [security2:error] [pid 3496189:tid 3496189] [client 150.5.133.173:57317] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSFypQDZoMKZ6EuBvJ5QAAAB8"]
[Thu Jul 30 14:31:04.015148 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:04.015275 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:04.152255 2026] [authz_core:error] [pid 3479987:tid 3479987] [client 158.94.208.8:57642] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:31:04.154936 2026] [authz_core:error] [pid 3479987:tid 3479987] [client 158.94.208.8:57642] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:31:04.591111 2026] [authz_core:error] [pid 3493910:tid 3493910] [client 158.94.208.8:57683] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:04.593730 2026] [authz_core:error] [pid 3493910:tid 3493910] [client 158.94.208.8:57683] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:04.618997 2026] [security2:error] [pid 3484871:tid 3484871] [client 85.208.96.199:61846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1790.0/prev_next,next.html"] [unique_id "amtSGDKNluJ_AD5Zo78cNAAAAEU"]
[Thu Jul 30 14:31:04.654396 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:04.654534 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:04.905850 2026] [ssl:error] [pid 3506530:tid 3506530] (70014)End of file found: [client 216.73.216.199:1849] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:05.074600 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:05.074714 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:05.130521 2026] [ssl:error] [pid 3492563:tid 3492563] (EAI 2)Name or service not known: [client 144.76.19.72:28178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:05.130546 2026] [ssl:error] [pid 3492563:tid 3492563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:05.183228 2026] [ssl:error] [pid 3496189:tid 3496189] (EAI 2)Name or service not known: [client 144.76.19.72:28184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:05.183252 2026] [ssl:error] [pid 3496189:tid 3496189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:05.486737 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:05.486848 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:05.544385 2026] [access_compat:error] [pid 3493908:tid 3493908] [client 103.59.153.118:50721] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:06.106406 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:06.106535 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:06.521529 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:06.521639 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:06.897743 2026] [authz_core:error] [pid 3486401:tid 3486401] [client 158.94.208.8:57931] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:06.900390 2026] [authz_core:error] [pid 3486401:tid 3486401] [client 158.94.208.8:57931] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:06.932289 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:06.932401 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:07.349146 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:07.349262 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:07.762088 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:07.762200 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:08.200251 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:08.200362 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:08.231645 2026] [core:error] [pid 3504281:tid 3504281] (13)Permission denied: [client 216.73.216.199:22639] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty49/subsystem/ttyS1/uartclk
[Thu Jul 30 14:31:08.235471 2026] [ssl:error] [pid 3506878:tid 3506878] (EAI 2)Name or service not known: [client 144.76.19.72:28188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:08.235494 2026] [ssl:error] [pid 3506878:tid 3506878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:08.291665 2026] [ssl:error] [pid 3486401:tid 3486401] (EAI 2)Name or service not known: [client 144.76.19.72:28198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:08.291697 2026] [ssl:error] [pid 3486401:tid 3486401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:08.531851 2026] [ssl:error] [pid 3504281:tid 3504281] (70014)End of file found: [client 216.73.216.199:22639] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:08.636219 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:08.636344 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:08.810664 2026] [security2:error] [pid 3496027:tid 3496027] [client 150.5.133.173:53451] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSHHRxeA9wytZRZdtc0AAAAEg"]
[Thu Jul 30 14:31:08.810710 2026] [security2:error] [pid 3496027:tid 3496027] [client 150.5.133.173:53451] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSHHRxeA9wytZRZdtc0AAAAEg"]
[Thu Jul 30 14:31:08.810934 2026] [security2:error] [pid 3496027:tid 3496027] [client 150.5.133.173:53451] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSHHRxeA9wytZRZdtc0AAAAEg"]
[Thu Jul 30 14:31:09.116564 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:09.116681 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:09.177094 2026] [authz_core:error] [pid 3506878:tid 3506878] [client 158.94.208.8:58155] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:09.179719 2026] [authz_core:error] [pid 3506878:tid 3506878] [client 158.94.208.8:58155] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:09.585131 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:09.585246 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:09.736715 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:24455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS3/uartclk
[Thu Jul 30 14:31:10.104164 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:10.104293 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:10.518820 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:10.518932 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:11.190245 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:11.190358 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:11.350051 2026] [ssl:error] [pid 3508131:tid 3508131] (EAI 2)Name or service not known: [client 144.76.19.72:62470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:11.350093 2026] [ssl:error] [pid 3508131:tid 3508131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:11.407203 2026] [ssl:error] [pid 3493842:tid 3493842] (EAI 2)Name or service not known: [client 144.76.19.72:62476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:11.407231 2026] [ssl:error] [pid 3493842:tid 3493842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:11.734728 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:11.734839 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:11.875959 2026] [authz_core:error] [pid 3493908:tid 3493908] [client 158.94.208.8:58407] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:11.878618 2026] [authz_core:error] [pid 3493908:tid 3493908] [client 158.94.208.8:58407] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:12.148383 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:24455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/acpi/drivers/hardware_error_device/uevent
[Thu Jul 30 14:31:12.160051 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:12.160173 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:12.190485 2026] [access_compat:error] [pid 3496022:tid 3496022] [client 103.59.153.118:51028] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:12.599712 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:12.599832 2026] [cgi:error] [pid 3484676:tid 3484676] [client 20.197.178.120:63453] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:13.354833 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:24455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS3/irq
[Thu Jul 30 14:31:13.359652 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:13.359762 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:13.801380 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:13.801501 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:14.210788 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:14.210898 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:14.256584 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:24455] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 14:31:14.461644 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:62484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:14.461673 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:14.513280 2026] [ssl:error] [pid 3500248:tid 3500248] (EAI 2)Name or service not known: [client 144.76.19.72:62498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:14.513305 2026] [ssl:error] [pid 3500248:tid 3500248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:14.624417 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:14.624531 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:15.048968 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:15.049107 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:15.473469 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:15.473581 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:15.669486 2026] [cgi:error] [pid 3500248:tid 3500248] [client 158.94.208.8:58737] AH02812: stderr from /home/healthki/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:15.910322 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:15.910445 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:16.063231 2026] [ssl:error] [pid 3493910:tid 3493910] (70014)End of file found: [client 216.73.216.199:24455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:16.224863 2026] [access_compat:error] [pid 3493913:tid 3493913] [client 103.59.153.118:51218] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:16.337724 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:16.337834 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:16.761858 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:16.761969 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:16.771188 2026] [ssl:error] [pid 3495973:tid 3495973] (70014)End of file found: [client 216.73.216.199:61655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:16.973000 2026] [ssl:error] [pid 3504535:tid 3504535] (70014)End of file found: [client 216.73.216.199:48963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:17.333369 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:17.333491 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:17.569742 2026] [ssl:error] [pid 3496024:tid 3496024] (EAI 2)Name or service not known: [client 144.76.19.72:62504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:17.569773 2026] [ssl:error] [pid 3496024:tid 3496024] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:17.649232 2026] [authz_core:error] [pid 3496027:tid 3496027] [client 158.94.208.8:58916] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/wp-pass.php
[Thu Jul 30 14:31:17.652010 2026] [authz_core:error] [pid 3496027:tid 3496027] [client 158.94.208.8:58916] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/wp-pass.php
[Thu Jul 30 14:31:17.706015 2026] [ssl:error] [pid 3500248:tid 3500248] (EAI 2)Name or service not known: [client 144.76.19.72:62512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:17.706037 2026] [ssl:error] [pid 3500248:tid 3500248] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:17.755914 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:17.756058 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:18.342570 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:18.342683 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:19.018476 2026] [core:error] [pid 3510513:tid 3510513] [client 66.249.66.8:45761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:31:19.018523 2026] [core:error] [pid 3510513:tid 3510513] [client 66.249.66.8:45761] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:31:19.052820 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 14:31:19.052934 2026] [cgi:error] [pid 3506955:tid 3506955] [client 20.197.178.120:63892] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 14:31:19.082561 2026] [security2:error] [pid 3506878:tid 3506878] [client 47.128.98.9:46586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amtSJx6lukscO2H8n4NZ6wAAABI"]
[Thu Jul 30 14:31:20.781742 2026] [ssl:error] [pid 3506878:tid 3506878] (EAI 2)Name or service not known: [client 144.76.19.72:31436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:20.781787 2026] [ssl:error] [pid 3506878:tid 3506878] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:20.835975 2026] [ssl:error] [pid 3510562:tid 3510562] (EAI 2)Name or service not known: [client 144.76.19.72:31452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:20.836014 2026] [ssl:error] [pid 3510562:tid 3510562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:21.380736 2026] [core:error] [pid 3510565:tid 3510565] (13)Permission denied: [client 216.73.216.199:52776] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu6/driver/cpu1/subsystem/uevent
[Thu Jul 30 14:31:22.249907 2026] [ssl:error] [pid 3510565:tid 3510565] (5)Input/output error: [client 216.73.216.199:52776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:22.738354 2026] [ssl:error] [pid 3496022:tid 3496022] (70014)End of file found: [client 216.73.216.199:30786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:23.030232 2026] [core:error] [pid 3502264:tid 3502264] (13)Permission denied: [client 216.73.216.199:63808] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nfit/sections/__ksymtab
[Thu Jul 30 14:31:23.701249 2026] [authz_core:error] [pid 3502127:tid 3502127] [client 158.94.208.8:59500] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:23.890649 2026] [ssl:error] [pid 3510564:tid 3510564] (EAI 2)Name or service not known: [client 144.76.19.72:31458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:23.890684 2026] [ssl:error] [pid 3510564:tid 3510564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:23.945736 2026] [ssl:error] [pid 3510514:tid 3510514] (EAI 2)Name or service not known: [client 144.76.19.72:31460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:23.945770 2026] [ssl:error] [pid 3510514:tid 3510514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:24.955692 2026] [ssl:error] [pid 3502264:tid 3502264] (70014)End of file found: [client 216.73.216.199:63808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:27.014845 2026] [access_compat:error] [pid 3493913:tid 3493913] [client 103.59.153.118:51723] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:27.085837 2026] [ssl:error] [pid 3506955:tid 3506955] (EAI 2)Name or service not known: [client 144.76.19.72:31474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:27.085867 2026] [ssl:error] [pid 3506955:tid 3506955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:27.099345 2026] [access_compat:error] [pid 3502264:tid 3502264] [client 45.158.164.139:58618] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:31:27.138862 2026] [ssl:error] [pid 3504281:tid 3504281] (EAI 2)Name or service not known: [client 144.76.19.72:31482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:27.138891 2026] [ssl:error] [pid 3504281:tid 3504281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:27.145977 2026] [ssl:error] [pid 3503480:tid 3503480] (70014)End of file found: [client 216.73.216.199:5460] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:27.637639 2026] [ssl:error] [pid 3484676:tid 3484676] (70014)End of file found: [client 216.73.216.199:62023] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:28.045049 2026] [proxy_http:error] [pid 3505743:tid 3505743] (70008)Partial results are valid but processing is incomplete: [client 173.252.82.2:37504] AH01110: error reading response
[Thu Jul 30 14:31:28.090730 2026] [security2:error] [pid 3502264:tid 3502264] [client 114.119.132.171:27179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575504000/request_format~html/cat_ids~19"] [unique_id "amtSMA8MqATjs9zizbaUmQAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~5-12-2019
[Thu Jul 30 14:31:28.349202 2026] [ssl:error] [pid 3484871:tid 3484871] (70014)End of file found: [client 216.73.216.199:45717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:28.854380 2026] [security2:error] [pid 3479987:tid 3479987] [client 158.94.208.8:59979] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-config.php"] [unique_id "amtSMLvO3i1cXA-6ysnrMQAAAAs"], referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:28.854633 2026] [security2:error] [pid 3479987:tid 3479987] [client 158.94.208.8:59979] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-config.php"] [unique_id "amtSMLvO3i1cXA-6ysnrMQAAAAs"], referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:28.854848 2026] [security2:error] [pid 3479987:tid 3479987] [client 158.94.208.8:59979] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-config.php"] [unique_id "amtSMLvO3i1cXA-6ysnrMQAAAAs"], referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:29.654645 2026] [security2:error] [pid 3479987:tid 3479987] [client 114.119.132.171:27189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575504000/request_format~html/cat_ids~19"] [unique_id "amtSMbvO3i1cXA-6ysnrMgAAAAs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~5-12-2019
[Thu Jul 30 14:31:30.195750 2026] [ssl:error] [pid 3493907:tid 3493907] (EAI 2)Name or service not known: [client 144.76.19.72:49062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:30.195786 2026] [ssl:error] [pid 3493907:tid 3493907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:30.251816 2026] [ssl:error] [pid 3505743:tid 3505743] (EAI 2)Name or service not known: [client 144.76.19.72:49064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:30.251858 2026] [ssl:error] [pid 3505743:tid 3505743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:32.465545 2026] [ssl:error] [pid 3496189:tid 3496189] (70014)End of file found: [client 216.73.216.199:49961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:33.324184 2026] [ssl:error] [pid 3503480:tid 3503480] (EAI 2)Name or service not known: [client 144.76.19.72:49074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:33.324224 2026] [ssl:error] [pid 3503480:tid 3503480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:33.379011 2026] [ssl:error] [pid 3506175:tid 3506175] (EAI 2)Name or service not known: [client 144.76.19.72:49090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:33.379044 2026] [ssl:error] [pid 3506175:tid 3506175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:33.473441 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:9908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:33.973668 2026] [ssl:error] [pid 3506175:tid 3506175] (70014)End of file found: [client 216.73.216.199:35348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:36.432632 2026] [ssl:error] [pid 3472867:tid 3472867] (EAI 2)Name or service not known: [client 144.76.19.72:49108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:36.432679 2026] [ssl:error] [pid 3472867:tid 3472867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:36.485738 2026] [ssl:error] [pid 3510563:tid 3510563] (EAI 2)Name or service not known: [client 144.76.19.72:49112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:36.485776 2026] [ssl:error] [pid 3510563:tid 3510563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:37.603657 2026] [access_compat:error] [pid 3504476:tid 3504476] [client 103.59.153.118:52221] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:38.142037 2026] [access_compat:error] [pid 3506249:tid 3506249] [client 2.189.5.162:56146] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:31:38.591250 2026] [ssl:error] [pid 3493908:tid 3493908] (70014)End of file found: [client 216.73.216.199:1694] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:39.175110 2026] [authz_core:error] [pid 3506249:tid 3506249] [client 191.232.199.39:43062] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:31:39.494710 2026] [ssl:error] [pid 3510564:tid 3510564] (70014)End of file found: [client 216.73.216.199:64928] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:39.538849 2026] [ssl:error] [pid 3500494:tid 3500494] (EAI 2)Name or service not known: [client 144.76.19.72:49128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:39.538892 2026] [ssl:error] [pid 3500494:tid 3500494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:39.590492 2026] [ssl:error] [pid 3506175:tid 3506175] (EAI 2)Name or service not known: [client 144.76.19.72:24570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:39.590526 2026] [ssl:error] [pid 3506175:tid 3506175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:39.816919 2026] [security2:error] [pid 3472867:tid 3472867] [client 185.191.171.1:59450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/wisconsin-state-fair-tickets-2022"] [unique_id "amtSO5W0klGT3YvioUG-pwAAAAc"]
[Thu Jul 30 14:31:40.401574 2026] [ssl:error] [pid 3468877:tid 3468877] (70014)End of file found: [client 216.73.216.199:22148] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:41.877952 2026] [authz_core:error] [pid 3493910:tid 3493910] [client 66.249.66.35:51152] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:31:41.880746 2026] [authz_core:error] [pid 3493910:tid 3493910] [client 66.249.66.35:51152] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:31:42.642528 2026] [ssl:error] [pid 3502264:tid 3502264] (EAI 2)Name or service not known: [client 144.76.19.72:24580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:42.642558 2026] [ssl:error] [pid 3502264:tid 3502264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:42.698873 2026] [ssl:error] [pid 3510565:tid 3510565] (EAI 2)Name or service not known: [client 144.76.19.72:24586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:42.698916 2026] [ssl:error] [pid 3510565:tid 3510565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:43.373268 2026] [security2:error] [pid 3506955:tid 3506955] [client 158.94.208.8:61393] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amtSP1KRrhoCC5qQIWKi5wAAACk"], referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:43.373611 2026] [security2:error] [pid 3506955:tid 3506955] [client 158.94.208.8:61393] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amtSP1KRrhoCC5qQIWKi5wAAACk"], referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:43.373816 2026] [security2:error] [pid 3506955:tid 3506955] [client 158.94.208.8:61393] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/pre_update_backup.sql"] [unique_id "amtSP1KRrhoCC5qQIWKi5wAAACk"], referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 14:31:43.902274 2026] [ssl:error] [pid 3510563:tid 3510563] (70014)End of file found: [client 216.73.216.199:22420] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:44.210699 2026] [access_compat:error] [pid 3496022:tid 3496022] [client 103.59.153.118:52527] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:44.745554 2026] [access_compat:error] [pid 3496189:tid 3496189] [client 45.158.164.139:52876] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:31:45.220334 2026] [ssl:error] [pid 3504281:tid 3504281] (70014)End of file found: [client 216.73.216.199:25356] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:45.757221 2026] [ssl:error] [pid 3510514:tid 3510514] (EAI 2)Name or service not known: [client 144.76.19.72:24598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:45.757256 2026] [ssl:error] [pid 3510514:tid 3510514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:45.812751 2026] [ssl:error] [pid 3493908:tid 3493908] (EAI 2)Name or service not known: [client 144.76.19.72:24602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:45.812785 2026] [ssl:error] [pid 3493908:tid 3493908] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:46.419018 2026] [ssl:error] [pid 3508257:tid 3508257] (70014)End of file found: [client 216.73.216.199:43466] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:48.213684 2026] [access_compat:error] [pid 3510565:tid 3510565] [client 103.59.153.118:52720] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:48.363414 2026] [lsapi:warn] [pid 3506249:tid 3506249] [client 45.158.164.139:52880] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:31:48.363472 2026] [lsapi:warn] [pid 3506249:tid 3506249] [client 45.158.164.139:52880] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:31:48.868558 2026] [ssl:error] [pid 3493842:tid 3493842] (EAI 2)Name or service not known: [client 144.76.19.72:24606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:48.868584 2026] [ssl:error] [pid 3493842:tid 3493842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:48.922500 2026] [ssl:error] [pid 3493907:tid 3493907] (EAI 2)Name or service not known: [client 144.76.19.72:24610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:48.922528 2026] [ssl:error] [pid 3493907:tid 3493907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:49.338755 2026] [ssl:error] [pid 3492563:tid 3492563] (70014)End of file found: [client 216.73.216.199:36325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:50.961417 2026] [ssl:error] [pid 3502818:tid 3502818] (70014)End of file found: [client 216.73.216.199:28207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:51.747799 2026] [ssl:error] [pid 3506175:tid 3506175] (70014)End of file found: [client 216.73.216.199:47545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:51.979530 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:20098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:51.979573 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:52.033136 2026] [ssl:error] [pid 3506955:tid 3506955] (EAI 2)Name or service not known: [client 144.76.19.72:20104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:52.033181 2026] [ssl:error] [pid 3506955:tid 3506955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:52.599414 2026] [security2:error] [pid 3506955:tid 3506955] [client 43.166.242.189:33074] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "refraction.co.uk"] [uri "/"] [unique_id "amtSSFKRrhoCC5qQIWKi6gAAACk"]
[Thu Jul 30 14:31:53.868338 2026] [authz_core:error] [pid 3503480:tid 3503480] [client 20.104.16.169:38007] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:31:54.942267 2026] [ssl:error] [pid 3510565:tid 3510565] (70014)End of file found: [client 216.73.216.199:15721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:31:55.136186 2026] [ssl:error] [pid 3512322:tid 3512322] (EAI 2)Name or service not known: [client 144.76.19.72:20120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:55.136237 2026] [ssl:error] [pid 3512322:tid 3512322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:55.191185 2026] [ssl:error] [pid 3506249:tid 3506249] (EAI 2)Name or service not known: [client 144.76.19.72:20122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:55.191224 2026] [ssl:error] [pid 3506249:tid 3506249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:55.957232 2026] [security2:error] [pid 3504535:tid 3504535] [client 85.208.96.206:51582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4378.0.html"] [unique_id "amtSSyHfibaCfr3oT9kjwAAAABc"]
[Thu Jul 30 14:31:58.282904 2026] [ssl:error] [pid 3512441:tid 3512441] (EAI 2)Name or service not known: [client 144.76.19.72:20130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:58.282971 2026] [ssl:error] [pid 3512441:tid 3512441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:58.339522 2026] [ssl:error] [pid 3510514:tid 3510514] (EAI 2)Name or service not known: [client 144.76.19.72:20140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:31:58.339553 2026] [ssl:error] [pid 3510514:tid 3510514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:31:58.907620 2026] [access_compat:error] [pid 3504534:tid 3504534] [client 103.59.153.118:53215] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:31:59.891313 2026] [security2:error] [pid 3502818:tid 3502818] [client 43.157.168.43:50482] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/terranigma/geiger/Logs/"] [unique_id "amtST9HODcYb5ssoAb5btwAAABE"]
[Thu Jul 30 14:32:00.362628 2026] [ssl:error] [pid 3484871:tid 3484871] (70014)End of file found: [client 216.73.216.199:1306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:01.391938 2026] [ssl:error] [pid 3512483:tid 3512483] (EAI 2)Name or service not known: [client 144.76.19.72:36478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:01.391974 2026] [ssl:error] [pid 3512483:tid 3512483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:01.447285 2026] [ssl:error] [pid 3504476:tid 3504476] (EAI 2)Name or service not known: [client 144.76.19.72:36488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:01.447316 2026] [ssl:error] [pid 3504476:tid 3504476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:02.603514 2026] [ssl:error] [pid 3505743:tid 3505743] (70014)End of file found: [client 216.73.216.199:56940] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:02.827508 2026] [core:error] [pid 3512483:tid 3512483] [client 57.141.0.34:63588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:32:02.827533 2026] [core:error] [pid 3512483:tid 3512483] [client 57.141.0.34:63588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:32:04.499254 2026] [ssl:error] [pid 3512484:tid 3512484] (EAI 2)Name or service not known: [client 144.76.19.72:36492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:04.499287 2026] [ssl:error] [pid 3512484:tid 3512484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:04.554974 2026] [ssl:error] [pid 3511288:tid 3511288] (EAI 2)Name or service not known: [client 144.76.19.72:36500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:04.555004 2026] [ssl:error] [pid 3511288:tid 3511288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:05.211220 2026] [ssl:error] [pid 3496189:tid 3496189] (70014)End of file found: [client 216.73.216.199:40536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:05.511458 2026] [authz_core:error] [pid 3493908:tid 3493908] [client 5.135.229.111:51001] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 14:32:05.511508 2026] [authz_core:error] [pid 3493908:tid 3493908] [client 5.135.229.111:51001] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 14:32:06.113787 2026] [ssl:error] [pid 3510468:tid 3510468] (70014)End of file found: [client 216.73.216.199:63367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:07.611821 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:36510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:07.611853 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:07.664807 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:36518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:07.664841 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:08.127231 2026] [ssl:error] [pid 3510565:tid 3510565] (70014)End of file found: [client 216.73.216.199:12495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:09.664993 2026] [access_compat:error] [pid 3472867:tid 3472867] [client 103.59.153.118:53807] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:32:10.536019 2026] [ssl:error] [pid 3506955:tid 3506955] (70014)End of file found: [client 216.73.216.199:32003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:10.717330 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:24404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:10.717365 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:10.773207 2026] [ssl:error] [pid 3510563:tid 3510563] (EAI 2)Name or service not known: [client 144.76.19.72:24410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:10.773239 2026] [ssl:error] [pid 3510563:tid 3510563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:11.226961 2026] [security2:error] [pid 3510563:tid 3510563] [client 47.245.137.150:33211] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSWyJOxHr_JdHNe7_i4AAAAAY"]
[Thu Jul 30 14:32:11.227032 2026] [security2:error] [pid 3510563:tid 3510563] [client 47.245.137.150:33211] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSWyJOxHr_JdHNe7_i4AAAAAY"]
[Thu Jul 30 14:32:11.227309 2026] [security2:error] [pid 3510563:tid 3510563] [client 47.245.137.150:33211] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSWyJOxHr_JdHNe7_i4AAAAAY"]
[Thu Jul 30 14:32:13.360106 2026] [ssl:error] [pid 3479987:tid 3479987] (5)Input/output error: [client 216.73.216.199:38418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:13.828198 2026] [ssl:error] [pid 3512483:tid 3512483] (EAI 2)Name or service not known: [client 144.76.19.72:24418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:13.828250 2026] [ssl:error] [pid 3512483:tid 3512483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:13.881085 2026] [ssl:error] [pid 3510563:tid 3510563] (EAI 2)Name or service not known: [client 144.76.19.72:24430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:13.881111 2026] [ssl:error] [pid 3510563:tid 3510563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:16.940798 2026] [ssl:error] [pid 3504534:tid 3504534] (EAI 2)Name or service not known: [client 144.76.19.72:24438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:16.940867 2026] [ssl:error] [pid 3504534:tid 3504534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:16.994520 2026] [ssl:error] [pid 3484871:tid 3484871] (EAI 2)Name or service not known: [client 144.76.19.72:24440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:16.994550 2026] [ssl:error] [pid 3484871:tid 3484871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:18.991774 2026] [authz_core:error] [pid 3512291:tid 3512291] [client 217.76.50.173:49765] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/error_log
[Thu Jul 30 14:32:19.088746 2026] [core:error] [pid 3506175:tid 3506175] (13)Permission denied: [client 216.73.216.199:59421] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:60/subsystem/ttyS0/custom_divisor
[Thu Jul 30 14:32:19.994188 2026] [core:error] [pid 3506175:tid 3506175] (13)Permission denied: [client 216.73.216.199:59421] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:41/subsystem/ttyS1/iomem_base
[Thu Jul 30 14:32:20.046333 2026] [ssl:error] [pid 3510514:tid 3510514] (EAI 2)Name or service not known: [client 144.76.19.72:47098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:20.046372 2026] [ssl:error] [pid 3510514:tid 3510514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:20.097407 2026] [ssl:error] [pid 3504476:tid 3504476] (EAI 2)Name or service not known: [client 144.76.19.72:47102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:20.097450 2026] [ssl:error] [pid 3504476:tid 3504476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:20.432460 2026] [access_compat:error] [pid 3500609:tid 3500609] [client 103.59.153.118:54542] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:32:23.153847 2026] [ssl:error] [pid 3504281:tid 3504281] (EAI 2)Name or service not known: [client 144.76.19.72:47114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:23.153873 2026] [ssl:error] [pid 3504281:tid 3504281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:23.208405 2026] [ssl:error] [pid 3511288:tid 3511288] (EAI 2)Name or service not known: [client 144.76.19.72:47120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:23.208444 2026] [ssl:error] [pid 3511288:tid 3511288] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:24.737141 2026] [security2:error] [pid 3504534:tid 3504534] [client 223.123.38.95:57059] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSaNmqXsUjvHFmOSzpqwAAAA8"]
[Thu Jul 30 14:32:24.737191 2026] [security2:error] [pid 3504534:tid 3504534] [client 223.123.38.95:57059] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSaNmqXsUjvHFmOSzpqwAAAA8"]
[Thu Jul 30 14:32:24.737485 2026] [security2:error] [pid 3504534:tid 3504534] [client 223.123.38.95:57059] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSaNmqXsUjvHFmOSzpqwAAAA8"]
[Thu Jul 30 14:32:24.950267 2026] [security2:error] [pid 3496189:tid 3496189] [client 43.161.224.78:50864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amtSaCpQDZoMKZ6EuBvKVgAAAB8"]
[Thu Jul 30 14:32:25.549217 2026] [authz_core:error] [pid 3513482:tid 3513482] [client 144.172.105.5:54802] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:32:25.551926 2026] [authz_core:error] [pid 3513482:tid 3513482] [client 144.172.105.5:54802] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:32:26.263112 2026] [ssl:error] [pid 3504534:tid 3504534] (EAI 2)Name or service not known: [client 144.76.19.72:47136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:26.263160 2026] [ssl:error] [pid 3504534:tid 3504534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:26.316390 2026] [ssl:error] [pid 3510562:tid 3510562] (EAI 2)Name or service not known: [client 144.76.19.72:47144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:26.316436 2026] [ssl:error] [pid 3510562:tid 3510562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:27.064449 2026] [access_compat:error] [pid 3479987:tid 3479987] [client 103.59.153.118:54914] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:32:28.151186 2026] [authz_core:error] [pid 3513550:tid 3513550] [client 66.249.66.33:50957] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:32:28.156359 2026] [authz_core:error] [pid 3513550:tid 3513550] [client 66.249.66.33:50957] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:32:28.271873 2026] [core:error] [pid 3512381:tid 3512381] (13)Permission denied: [client 216.73.216.199:52542] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS0/line
[Thu Jul 30 14:32:28.522913 2026] [security2:error] [pid 3504534:tid 3504534] [client 144.172.105.5:54806] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-config.php"] [unique_id "amtSbNmqXsUjvHFmOSzprgAAAA8"]
[Thu Jul 30 14:32:28.523109 2026] [security2:error] [pid 3504534:tid 3504534] [client 144.172.105.5:54806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-config.php"] [unique_id "amtSbNmqXsUjvHFmOSzprgAAAA8"]
[Thu Jul 30 14:32:28.523318 2026] [security2:error] [pid 3504534:tid 3504534] [client 144.172.105.5:54806] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-config.php"] [unique_id "amtSbNmqXsUjvHFmOSzprgAAAA8"]
[Thu Jul 30 14:32:28.685706 2026] [security2:error] [pid 3479987:tid 3479987] [client 43.153.107.22:45022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tartanbag.com"] [uri "/"] [unique_id "amtSbLvO3i1cXA-6ysnrRwAAAAs"]
[Thu Jul 30 14:32:28.859975 2026] [security2:error] [pid 3506249:tid 3506249] [client 43.161.224.78:50474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtSbEhEu4R8gqKzl4NmiwAAACM"], referer: http://retrodisco.co.uk
[Thu Jul 30 14:32:29.419618 2026] [ssl:error] [pid 3513654:tid 3513654] (EAI 2)Name or service not known: [client 144.76.19.72:47156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:29.419671 2026] [ssl:error] [pid 3513654:tid 3513654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:29.473375 2026] [ssl:error] [pid 3513653:tid 3513653] (EAI 2)Name or service not known: [client 144.76.19.72:47162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:29.473403 2026] [ssl:error] [pid 3513653:tid 3513653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:30.963196 2026] [access_compat:error] [pid 3499841:tid 3499841] [client 103.59.153.118:55108] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:32:32.449641 2026] [security2:error] [pid 3500609:tid 3500609] [client 103.80.3.8:38502] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtScFxcokFNs9xAJsqnIAAAABQ"]
[Thu Jul 30 14:32:32.449691 2026] [security2:error] [pid 3500609:tid 3500609] [client 103.80.3.8:38502] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtScFxcokFNs9xAJsqnIAAAABQ"]
[Thu Jul 30 14:32:32.449959 2026] [security2:error] [pid 3500609:tid 3500609] [client 103.80.3.8:38502] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtScFxcokFNs9xAJsqnIAAAABQ"]
[Thu Jul 30 14:32:32.492242 2026] [core:error] [pid 3512381:tid 3512381] (13)Permission denied: [client 216.73.216.199:52542] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS0/irq
[Thu Jul 30 14:32:32.531735 2026] [ssl:error] [pid 3504281:tid 3504281] (EAI 2)Name or service not known: [client 144.76.19.72:58422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:32.531765 2026] [ssl:error] [pid 3504281:tid 3504281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:32.589099 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:58432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:32.589131 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:33.094459 2026] [ssl:error] [pid 3512381:tid 3512381] (70014)End of file found: [client 216.73.216.199:52542] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:33.261394 2026] [access_compat:error] [pid 3510562:tid 3510562] [client 45.158.164.139:44086] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:32:35.046892 2026] [ssl:error] [pid 3500609:tid 3500609] (70014)End of file found: [client 216.73.216.199:15467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:35.646875 2026] [ssl:error] [pid 3495867:tid 3495867] (EAI 2)Name or service not known: [client 144.76.19.72:58442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:35.646915 2026] [ssl:error] [pid 3495867:tid 3495867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:35.699285 2026] [ssl:error] [pid 3513550:tid 3513550] (EAI 2)Name or service not known: [client 144.76.19.72:58450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:35.699324 2026] [ssl:error] [pid 3513550:tid 3513550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:35.755348 2026] [ssl:error] [pid 3511288:tid 3511288] (70014)End of file found: [client 216.73.216.199:28444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:35.846360 2026] [cgi:error] [pid 3504281:tid 3504281] [client 144.172.105.5:54808] AH02812: stderr from /home/healthki/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:32:36.256813 2026] [core:error] [pid 3504534:tid 3504534] (13)Permission denied: [client 216.73.216.199:57612] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS3/irq
[Thu Jul 30 14:32:38.177054 2026] [core:error] [pid 3504534:tid 3504534] (13)Permission denied: [client 216.73.216.199:57612] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty16/subsystem/ttyS1/uartclk
[Thu Jul 30 14:32:38.755812 2026] [ssl:error] [pid 3512441:tid 3512441] (EAI 2)Name or service not known: [client 144.76.19.72:58466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:38.755839 2026] [ssl:error] [pid 3512441:tid 3512441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:38.785439 2026] [ssl:error] [pid 3504534:tid 3504534] (70014)End of file found: [client 216.73.216.199:57612] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:38.809261 2026] [ssl:error] [pid 3513191:tid 3513191] (EAI 2)Name or service not known: [client 144.76.19.72:58472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:38.809293 2026] [ssl:error] [pid 3513191:tid 3513191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:39.239907 2026] [authz_core:error] [pid 3496189:tid 3496189] [client 66.249.66.34:42046] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:32:39.242660 2026] [authz_core:error] [pid 3496189:tid 3496189] [client 66.249.66.34:42046] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:32:40.283360 2026] [security2:error] [pid 3512323:tid 3512323] [client 85.208.96.212:23798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/phillis-wheatley-on-recollection-summary"] [unique_id "amtSeBnqrQL1P30_9DydIAAAABI"]
[Thu Jul 30 14:32:40.564733 2026] [authz_core:error] [pid 3513592:tid 3513592] [client 191.232.199.39:38633] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:32:40.893744 2026] [ssl:error] [pid 3512381:tid 3512381] (70014)End of file found: [client 216.73.216.199:50055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:41.121642 2026] [security2:error] [pid 3495867:tid 3495867] [client 185.191.171.1:58596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3726.0/prev_next,next.html"] [unique_id "amtSeXWLcYMOJrlEZjYrFQAAABU"]
[Thu Jul 30 14:32:41.719137 2026] [access_compat:error] [pid 3503480:tid 3503480] [client 103.59.153.118:55616] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:32:41.866052 2026] [ssl:error] [pid 3479987:tid 3479987] (EAI 2)Name or service not known: [client 144.76.19.72:18906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:41.866097 2026] [ssl:error] [pid 3479987:tid 3479987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:41.917560 2026] [ssl:error] [pid 3495867:tid 3495867] (EAI 2)Name or service not known: [client 144.76.19.72:18922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:41.917590 2026] [ssl:error] [pid 3495867:tid 3495867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:42.105521 2026] [core:error] [pid 3511288:tid 3511288] (13)Permission denied: [client 216.73.216.199:29219] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty24/subsystem/ttyS0/uartclk
[Thu Jul 30 14:32:42.456823 2026] [authz_core:error] [pid 3504281:tid 3504281] [client 144.172.105.5:54808] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/error_log
[Thu Jul 30 14:32:44.212796 2026] [ssl:error] [pid 3511288:tid 3511288] (70014)End of file found: [client 216.73.216.199:29219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:44.971789 2026] [ssl:error] [pid 3504476:tid 3504476] (EAI 2)Name or service not known: [client 144.76.19.72:18936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:44.971817 2026] [ssl:error] [pid 3504476:tid 3504476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:45.025882 2026] [ssl:error] [pid 3504534:tid 3504534] (EAI 2)Name or service not known: [client 144.76.19.72:18940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:45.025908 2026] [ssl:error] [pid 3504534:tid 3504534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:45.553182 2026] [security2:error] [pid 3496189:tid 3496189] [client 85.208.96.195:62322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1864.0.html"] [unique_id "amtSfSpQDZoMKZ6EuBvKZQAAAB8"]
[Thu Jul 30 14:32:47.027817 2026] [core:error] [pid 3513593:tid 3513593] (13)Permission denied: [client 216.73.216.199:7157] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:55/subsystem/ttyS3/irq
[Thu Jul 30 14:32:48.080380 2026] [ssl:error] [pid 3513191:tid 3513191] (EAI 2)Name or service not known: [client 144.76.19.72:18952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:48.080417 2026] [ssl:error] [pid 3513191:tid 3513191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:48.134793 2026] [ssl:error] [pid 3513592:tid 3513592] (EAI 2)Name or service not known: [client 144.76.19.72:18966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:48.134825 2026] [ssl:error] [pid 3513592:tid 3513592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:48.399074 2026] [access_compat:error] [pid 3513482:tid 3513482] [client 103.59.153.118:55920] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:32:48.434199 2026] [core:error] [pid 3513593:tid 3513593] (13)Permission denied: [client 216.73.216.199:7157] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/poison
[Thu Jul 30 14:32:48.928087 2026] [proxy_http:error] [pid 3512323:tid 3512323] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:37184] AH01110: error reading response
[Thu Jul 30 14:32:48.929107 2026] [access_compat:error] [pid 3496189:tid 3496189] [client 45.158.164.139:39626] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:32:49.020901 2026] [proxy_http:error] [pid 3492200:tid 3492200] (70008)Partial results are valid but processing is incomplete: [client 138.246.253.24:56263] AH01110: error reading response
[Thu Jul 30 14:32:50.540662 2026] [ssl:error] [pid 3513593:tid 3513593] (70014)End of file found: [client 216.73.216.199:7157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:50.841553 2026] [core:error] [pid 3506530:tid 3506530] (13)Permission denied: [client 216.73.216.199:23437] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 14:32:51.189530 2026] [ssl:error] [pid 3493907:tid 3493907] (EAI 2)Name or service not known: [client 144.76.19.72:26980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:51.189555 2026] [ssl:error] [pid 3493907:tid 3493907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:51.245650 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:26988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:51.245672 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:51.571910 2026] [security2:error] [pid 3496189:tid 3496189] [client 114.119.142.20:29121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575504000/request_format~html/cat_ids~17"] [unique_id "amtSgypQDZoMKZ6EuBvKcAAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~5-12-2019
[Thu Jul 30 14:32:52.395998 2026] [access_compat:error] [pid 3513655:tid 3513655] [client 103.59.153.118:56114] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:32:53.035346 2026] [core:error] [pid 3506530:tid 3506530] (13)Permission denied: [client 216.73.216.199:23437] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS3/port
[Thu Jul 30 14:32:53.517125 2026] [security2:error] [pid 3512291:tid 3512291] [client 114.119.142.20:29135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575504000/request_format~html/cat_ids~17"] [unique_id "amtShdEmI-ysVr5z0EhCjQAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~5-12-2019
[Thu Jul 30 14:32:54.382185 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:26990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:54.382229 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:54.434633 2026] [ssl:error] [pid 3514767:tid 3514767] (EAI 2)Name or service not known: [client 144.76.19.72:26998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:54.434665 2026] [ssl:error] [pid 3514767:tid 3514767] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:54.749812 2026] [core:error] [pid 3508257:tid 3508257] (13)Permission denied: [client 216.73.216.199:34313] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/subsystem/ttyS0/uartclk
[Thu Jul 30 14:32:55.351511 2026] [security2:error] [pid 3508257:tid 3508257] [client 216.73.216.199:34313] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs-plugins/cpanel-cagefs/exclude_mounts.conf"] [unique_id "amtSh9fKkceONMkwXS48OAAAABs"]
[Thu Jul 30 14:32:55.351798 2026] [security2:error] [pid 3508257:tid 3508257] [client 216.73.216.199:34313] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs-plugins/cpanel-cagefs/exclude_mounts.conf"] [unique_id "amtSh9fKkceONMkwXS48OAAAABs"]
[Thu Jul 30 14:32:55.352003 2026] [security2:error] [pid 3508257:tid 3508257] [client 216.73.216.199:34313] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs-plugins/cpanel-cagefs/exclude_mounts.conf"] [unique_id "amtSh9fKkceONMkwXS48OAAAABs"]
[Thu Jul 30 14:32:56.562769 2026] [ssl:error] [pid 3506530:tid 3506530] (70014)End of file found: [client 216.73.216.199:23437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:57.492489 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:27002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:57.492529 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:57.550114 2026] [ssl:error] [pid 3513482:tid 3513482] (EAI 2)Name or service not known: [client 144.76.19.72:27016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:32:57.550156 2026] [ssl:error] [pid 3513482:tid 3513482] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:32:58.062851 2026] [ssl:error] [pid 3508257:tid 3508257] (70014)End of file found: [client 216.73.216.199:34313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:58.369135 2026] [core:error] [pid 3492200:tid 3492200] (13)Permission denied: [client 216.73.216.199:30922] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/firmware/acpi/tables/WAET
[Thu Jul 30 14:32:58.970923 2026] [ssl:error] [pid 3492200:tid 3492200] (70014)End of file found: [client 216.73.216.199:30922] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:32:59.027959 2026] [access_compat:error] [pid 3512441:tid 3512441] [client 103.59.153.118:56412] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:00.608740 2026] [ssl:error] [pid 3514833:tid 3514833] (EAI 2)Name or service not known: [client 144.76.19.72:25646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:00.608771 2026] [ssl:error] [pid 3514833:tid 3514833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:00.666618 2026] [ssl:error] [pid 3514691:tid 3514691] (EAI 2)Name or service not known: [client 144.76.19.72:25652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:00.666647 2026] [ssl:error] [pid 3514691:tid 3514691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:01.170130 2026] [authz_core:error] [pid 3514691:tid 3514691] [client 66.249.66.35:64213] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:33:01.172784 2026] [authz_core:error] [pid 3514691:tid 3514691] [client 66.249.66.35:64213] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:33:01.978037 2026] [core:error] [pid 3511288:tid 3511288] (13)Permission denied: [client 216.73.216.199:63614] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS3/irq
[Thu Jul 30 14:33:03.027510 2026] [access_compat:error] [pid 3515171:tid 3515171] [client 103.59.153.118:56602] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:03.181854 2026] [ssl:error] [pid 3511288:tid 3511288] (70014)End of file found: [client 216.73.216.199:63614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:03.726587 2026] [ssl:error] [pid 3496189:tid 3496189] (EAI 2)Name or service not known: [client 144.76.19.72:25666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:03.726615 2026] [ssl:error] [pid 3496189:tid 3496189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:03.779464 2026] [ssl:error] [pid 3510513:tid 3510513] (EAI 2)Name or service not known: [client 144.76.19.72:25678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:03.779503 2026] [ssl:error] [pid 3510513:tid 3510513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:06.394469 2026] [core:error] [pid 3513191:tid 3513191] (13)Permission denied: [client 216.73.216.199:2046] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:34/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 14:33:06.860750 2026] [ssl:error] [pid 3468877:tid 3468877] (EAI 2)Name or service not known: [client 144.76.19.72:25690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:06.860799 2026] [ssl:error] [pid 3468877:tid 3468877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:06.919543 2026] [ssl:error] [pid 3514631:tid 3514631] (EAI 2)Name or service not known: [client 144.76.19.72:25706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:06.919572 2026] [ssl:error] [pid 3514631:tid 3514631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:08.803195 2026] [security2:error] [pid 3512441:tid 3512441] [client 185.191.171.10:55060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/11/18/exchange-and-sharepoint-online/"] [unique_id "amtSlCjBLNATaLfNa55GgAAAACE"]
[Thu Jul 30 14:33:09.976897 2026] [ssl:error] [pid 3510468:tid 3510468] (EAI 2)Name or service not known: [client 144.76.19.72:35656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:09.976944 2026] [ssl:error] [pid 3510468:tid 3510468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:10.032037 2026] [ssl:error] [pid 3512441:tid 3512441] (EAI 2)Name or service not known: [client 144.76.19.72:35668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:10.032078 2026] [ssl:error] [pid 3512441:tid 3512441] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:10.491573 2026] [security2:error] [pid 3510468:tid 3510468] [client 43.134.91.35:54174] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/"] [unique_id "amtSlsWrE9IK04rHDAvrXAAAAAA"]
[Thu Jul 30 14:33:10.617007 2026] [authz_core:error] [pid 3513593:tid 3513593] [client 191.232.199.39:12376] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-admin/maint/error_log
[Thu Jul 30 14:33:11.210775 2026] [ssl:error] [pid 3513191:tid 3513191] (70014)End of file found: [client 216.73.216.199:2046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:12.410247 2026] [core:error] [pid 3514692:tid 3514692] (13)Permission denied: [client 216.73.216.199:38856] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/last_check_dttm.json
[Thu Jul 30 14:33:13.086955 2026] [ssl:error] [pid 3512322:tid 3512322] (EAI 2)Name or service not known: [client 144.76.19.72:35682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:13.086981 2026] [ssl:error] [pid 3512322:tid 3512322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:13.144519 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:35688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:13.144549 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:13.159193 2026] [security2:error] [pid 3513482:tid 3513482] [client 2.83.63.168:49802] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSmeEcOsmBDG3O8UKIGQAAAAI"]
[Thu Jul 30 14:33:13.159250 2026] [security2:error] [pid 3513482:tid 3513482] [client 2.83.63.168:49802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSmeEcOsmBDG3O8UKIGQAAAAI"]
[Thu Jul 30 14:33:13.159503 2026] [security2:error] [pid 3513482:tid 3513482] [client 2.83.63.168:49802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSmeEcOsmBDG3O8UKIGQAAAAI"]
[Thu Jul 30 14:33:13.699476 2026] [access_compat:error] [pid 3496189:tid 3496189] [client 103.59.153.118:57099] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:14.221750 2026] [ssl:error] [pid 3515172:tid 3515172] (70014)End of file found: [client 216.73.216.199:42218] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:15.727465 2026] [core:error] [pid 3514692:tid 3514692] (13)Permission denied: [client 216.73.216.199:38856] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/device/subsystem/drivers/clk-lpss-atom/unbind
[Thu Jul 30 14:33:16.199506 2026] [ssl:error] [pid 3506530:tid 3506530] (EAI 2)Name or service not known: [client 144.76.19.72:35698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:16.199547 2026] [ssl:error] [pid 3506530:tid 3506530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:16.257338 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:35714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:16.257367 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:18.136085 2026] [ssl:error] [pid 3514692:tid 3514692] (70014)End of file found: [client 216.73.216.199:38856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:18.629276 2026] [ssl:error] [pid 3514766:tid 3514766] (70014)End of file found: [client 216.73.216.199:49605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:19.313179 2026] [ssl:error] [pid 3515967:tid 3515967] (EAI 2)Name or service not known: [client 144.76.19.72:35716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:19.313230 2026] [ssl:error] [pid 3515967:tid 3515967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:19.372085 2026] [ssl:error] [pid 3513653:tid 3513653] (EAI 2)Name or service not known: [client 144.76.19.72:35732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:19.372116 2026] [ssl:error] [pid 3513653:tid 3513653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:20.331736 2026] [access_compat:error] [pid 3513653:tid 3513653] [client 103.59.153.118:57401] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:21.160521 2026] [core:error] [pid 3513593:tid 3513593] (13)Permission denied: [client 216.73.216.199:64437] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS0/irq
[Thu Jul 30 14:33:22.428347 2026] [ssl:error] [pid 3513653:tid 3513653] (EAI 2)Name or service not known: [client 144.76.19.72:57826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:22.428377 2026] [ssl:error] [pid 3513653:tid 3513653] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:22.481662 2026] [ssl:error] [pid 3515172:tid 3515172] (EAI 2)Name or service not known: [client 144.76.19.72:57842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:22.481693 2026] [ssl:error] [pid 3515172:tid 3515172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:23.887218 2026] [security2:error] [pid 3493910:tid 3493910] [client 74.7.227.33:41598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "positivelydisruptive.co.uk"] [uri "/sitemap.html"] [unique_id "amtSo9o5hXnv8SIjrEFehAAAACs"]
[Thu Jul 30 14:33:24.264734 2026] [security2:error] [pid 3512322:tid 3512322] [client 43.164.190.124:36958] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.org"] [uri "/"] [unique_id "amtSpF6XDKwV1jtEHFmoQQAAAAo"]
[Thu Jul 30 14:33:24.334388 2026] [access_compat:error] [pid 3514827:tid 3514827] [client 103.59.153.118:57596] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:25.575226 2026] [ssl:error] [pid 3504281:tid 3504281] (EAI 2)Name or service not known: [client 144.76.19.72:57856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:25.575264 2026] [ssl:error] [pid 3504281:tid 3504281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:25.630046 2026] [ssl:error] [pid 3514766:tid 3514766] (EAI 2)Name or service not known: [client 144.76.19.72:57860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:25.630099 2026] [ssl:error] [pid 3514766:tid 3514766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:26.881200 2026] [ssl:error] [pid 3515172:tid 3515172] (70014)End of file found: [client 216.73.216.199:46247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:26.908087 2026] [authz_core:error] [pid 3513653:tid 3513653] [client 66.249.66.34:61503] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:33:26.910726 2026] [authz_core:error] [pid 3513653:tid 3513653] [client 66.249.66.34:61503] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:33:27.486503 2026] [ssl:error] [pid 3513593:tid 3513593] (70014)End of file found: [client 216.73.216.199:64437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:28.726267 2026] [ssl:error] [pid 3510565:tid 3510565] (EAI 2)Name or service not known: [client 144.76.19.72:57872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:28.726299 2026] [ssl:error] [pid 3510565:tid 3510565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:28.839512 2026] [ssl:error] [pid 3515094:tid 3515094] (EAI 2)Name or service not known: [client 144.76.19.72:57878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:28.839543 2026] [ssl:error] [pid 3515094:tid 3515094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:28.855772 2026] [security2:error] [pid 3514691:tid 3514691] [client 187.189.167.29:12241] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSqAJvRi6BBHU_JgDAiQAAAB4"]
[Thu Jul 30 14:33:28.855821 2026] [security2:error] [pid 3514691:tid 3514691] [client 187.189.167.29:12241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSqAJvRi6BBHU_JgDAiQAAAB4"]
[Thu Jul 30 14:33:28.856109 2026] [security2:error] [pid 3514691:tid 3514691] [client 187.189.167.29:12241] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSqAJvRi6BBHU_JgDAiQAAAB4"]
[Thu Jul 30 14:33:29.039513 2026] [authz_core:error] [pid 3499841:tid 3499841] [client 144.172.105.5:49658] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:33:29.593906 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:32087] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:55/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 14:33:30.007755 2026] [authz_core:error] [pid 3513653:tid 3513653] [client 66.249.66.34:61503] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:33:30.010417 2026] [authz_core:error] [pid 3513653:tid 3513653] [client 66.249.66.34:61503] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:33:31.401270 2026] [core:error] [pid 3493910:tid 3493910] (13)Permission denied: [client 216.73.216.199:32087] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/spool/mail/rpc
[Thu Jul 30 14:33:31.437176 2026] [authz_core:error] [pid 3499841:tid 3499841] [client 144.172.105.5:49658] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/IXR/error_log
[Thu Jul 30 14:33:31.701566 2026] [security2:error] [pid 3493910:tid 3493910] [client 216.73.216.199:32087] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/systemd/coredump.conf"] [unique_id "amtSq9o5hXnv8SIjrEFekwAAACs"]
[Thu Jul 30 14:33:31.701875 2026] [security2:error] [pid 3493910:tid 3493910] [client 216.73.216.199:32087] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/systemd/coredump.conf"] [unique_id "amtSq9o5hXnv8SIjrEFekwAAACs"]
[Thu Jul 30 14:33:31.702128 2026] [security2:error] [pid 3493910:tid 3493910] [client 216.73.216.199:32087] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/systemd/coredump.conf"] [unique_id "amtSq9o5hXnv8SIjrEFekwAAACs"]
[Thu Jul 30 14:33:31.897613 2026] [ssl:error] [pid 3512323:tid 3512323] (EAI 2)Name or service not known: [client 144.76.19.72:57676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:31.897650 2026] [ssl:error] [pid 3512323:tid 3512323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:31.949587 2026] [ssl:error] [pid 3493907:tid 3493907] (EAI 2)Name or service not known: [client 144.76.19.72:57686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:31.949611 2026] [ssl:error] [pid 3493907:tid 3493907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:33.704929 2026] [authz_core:error] [pid 3512484:tid 3512484] [client 144.172.105.5:49670] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 14:33:33.810101 2026] [ssl:error] [pid 3493910:tid 3493910] (70014)End of file found: [client 216.73.216.199:32087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:34.427059 2026] [access_compat:error] [pid 3492200:tid 3492200] [client 45.158.164.139:34094] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:33:35.006304 2026] [ssl:error] [pid 3516489:tid 3516489] (EAI 2)Name or service not known: [client 144.76.19.72:57690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:35.006340 2026] [ssl:error] [pid 3516489:tid 3516489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:35.013132 2026] [access_compat:error] [pid 3514828:tid 3514828] [client 103.59.153.118:58082] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:35.059658 2026] [ssl:error] [pid 3516554:tid 3516554] (EAI 2)Name or service not known: [client 144.76.19.72:57698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:35.059695 2026] [ssl:error] [pid 3516554:tid 3516554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:35.124520 2026] [authz_core:error] [pid 3515171:tid 3515171] [client 144.172.105.5:49678] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:33:35.378447 2026] [authz_core:error] [pid 3515171:tid 3515171] [client 144.172.105.5:49678] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 14:33:35.503639 2026] [core:error] [pid 3516555:tid 3516555] (13)Permission denied: [client 216.73.216.199:54807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 14:33:36.017895 2026] [authz_core:error] [pid 3515172:tid 3515172] [client 144.172.105.5:60512] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 14:33:36.105231 2026] [core:error] [pid 3516555:tid 3516555] (13)Permission denied: [client 216.73.216.199:54807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS0/closing_wait
[Thu Jul 30 14:33:36.706606 2026] [core:error] [pid 3516555:tid 3516555] (13)Permission denied: [client 216.73.216.199:54807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/humanimprovement.com.db
[Thu Jul 30 14:33:37.910323 2026] [ssl:error] [pid 3516552:tid 3516552] (70014)End of file found: [client 216.73.216.199:17469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:38.135134 2026] [ssl:error] [pid 3512323:tid 3512323] (EAI 2)Name or service not known: [client 144.76.19.72:57714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:38.135173 2026] [ssl:error] [pid 3512323:tid 3512323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:38.188200 2026] [ssl:error] [pid 3516436:tid 3516436] (EAI 2)Name or service not known: [client 144.76.19.72:57720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:38.188232 2026] [ssl:error] [pid 3516436:tid 3516436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:38.780514 2026] [authz_core:error] [pid 3512381:tid 3512381] [client 144.172.105.5:60514] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Auth/error_log
[Thu Jul 30 14:33:38.813939 2026] [core:error] [pid 3516555:tid 3516555] (13)Permission denied: [client 216.73.216.199:54807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/devices/device:18/eject
[Thu Jul 30 14:33:39.050907 2026] [security2:error] [pid 3516553:tid 3516553] [client 94.154.43.229:31456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.borovetsexpress.banskoexpress.com"] [uri "/.env"] [unique_id "amtSs7xrV_bKFJpSWwaMrgAAABk"]
[Thu Jul 30 14:33:39.051108 2026] [security2:error] [pid 3516553:tid 3516553] [client 94.154.43.229:31456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.borovetsexpress.banskoexpress.com"] [uri "/.env"] [unique_id "amtSs7xrV_bKFJpSWwaMrgAAABk"]
[Thu Jul 30 14:33:39.052014 2026] [security2:error] [pid 3504585:tid 3504585] [client 94.154.43.177:28350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "borovetsexpress.com"] [uri "/.env"] [unique_id "amtSs3sG9ceCxsQwT1--dQAAABw"]
[Thu Jul 30 14:33:39.052164 2026] [security2:error] [pid 3504585:tid 3504585] [client 94.154.43.177:28350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "borovetsexpress.com"] [uri "/.env"] [unique_id "amtSs3sG9ceCxsQwT1--dQAAABw"]
[Thu Jul 30 14:33:39.115691 2026] [core:error] [pid 3516555:tid 3516555] (13)Permission denied: [client 216.73.216.199:54807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/devices/device:16/eject
[Thu Jul 30 14:33:39.610277 2026] [security2:error] [pid 3516553:tid 3516553] [client 94.154.43.229:31456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.borovetsexpress.banskoexpress.com"] [uri "/index.php"] [unique_id "amtSs7xrV_bKFJpSWwaMrgAAABk"]
[Thu Jul 30 14:33:39.610955 2026] [security2:error] [pid 3504585:tid 3504585] [client 94.154.43.177:28350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "borovetsexpress.com"] [uri "/index.php"] [unique_id "amtSs3sG9ceCxsQwT1--dQAAABw"]
[Thu Jul 30 14:33:39.878714 2026] [authz_core:error] [pid 3514692:tid 3514692] [client 144.172.105.5:60520] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Exception/error_log
[Thu Jul 30 14:33:40.621236 2026] [ssl:error] [pid 3516555:tid 3516555] (70014)End of file found: [client 216.73.216.199:54807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:40.656395 2026] [security2:error] [pid 3502264:tid 3502264] [client 94.154.43.185:37320] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "pamporovoexpress.com"] [uri "/.env"] [unique_id "amtStA8MqATjs9zizbaUwAAAAA0"]
[Thu Jul 30 14:33:40.656605 2026] [security2:error] [pid 3502264:tid 3502264] [client 94.154.43.185:37320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pamporovoexpress.com"] [uri "/.env"] [unique_id "amtStA8MqATjs9zizbaUwAAAAA0"]
[Thu Jul 30 14:33:40.656799 2026] [security2:error] [pid 3502264:tid 3502264] [client 94.154.43.185:37320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "pamporovoexpress.com"] [uri "/403.shtml"] [unique_id "amtStA8MqATjs9zizbaUwAAAAA0"]
[Thu Jul 30 14:33:40.774395 2026] [security2:error] [pid 3504281:tid 3504281] [client 185.191.171.6:51134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/harbor-freight-air-hose-reel-parts"] [unique_id "amtStMADwFKWhb-Y2m9wuQAAAAk"]
[Thu Jul 30 14:33:40.810472 2026] [security2:error] [pid 3514631:tid 3514631] [client 94.154.43.178:54738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.pamporovoexpress.banskoexpress.com"] [uri "/.env"] [unique_id "amtStGmbs7jTgBUIM4h12gAAAAY"]
[Thu Jul 30 14:33:40.810666 2026] [security2:error] [pid 3514631:tid 3514631] [client 94.154.43.178:54738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pamporovoexpress.banskoexpress.com"] [uri "/.env"] [unique_id "amtStGmbs7jTgBUIM4h12gAAAAY"]
[Thu Jul 30 14:33:40.872724 2026] [security2:error] [pid 3514631:tid 3514631] [client 94.154.43.178:54738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.pamporovoexpress.banskoexpress.com"] [uri "/index.php"] [unique_id "amtStGmbs7jTgBUIM4h12gAAAAY"]
[Thu Jul 30 14:33:41.109947 2026] [ssl:error] [pid 3514767:tid 3514767] (70014)End of file found: [client 216.73.216.199:19905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:41.240921 2026] [ssl:error] [pid 3502264:tid 3502264] (EAI 2)Name or service not known: [client 144.76.19.72:58494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:41.240958 2026] [ssl:error] [pid 3502264:tid 3502264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:41.292019 2026] [ssl:error] [pid 3513593:tid 3513593] (EAI 2)Name or service not known: [client 144.76.19.72:58508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:41.292059 2026] [ssl:error] [pid 3513593:tid 3513593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:41.448607 2026] [authz_core:error] [pid 3516554:tid 3516554] [client 144.172.105.5:60556] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Exception/Http/error_log
[Thu Jul 30 14:33:43.628439 2026] [ssl:error] [pid 3514828:tid 3514828] (70014)End of file found: [client 216.73.216.199:2956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:45.738716 2026] [ssl:error] [pid 3510565:tid 3510565] (EAI 2)Name or service not known: [client 144.76.19.72:58524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:45.738745 2026] [ssl:error] [pid 3510565:tid 3510565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:46.207524 2026] [security2:error] [pid 3516555:tid 3516555] [client 85.208.96.206:60930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSuisCerQH7UAEObTM-gAAACk"]
[Thu Jul 30 14:33:46.958516 2026] [security2:error] [pid 3514767:tid 3514767] [client 47.128.28.78:20672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.alism.com"] [uri "/robots.txt"] [unique_id "amtSul4mdwJDY_byjAviCwAAAC0"]
[Thu Jul 30 14:33:47.347954 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 103.59.153.118:58569] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:47.913648 2026] [ssl:error] [pid 3517316:tid 3517316] (EAI 2)Name or service not known: [client 144.76.19.72:58534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:47.913693 2026] [ssl:error] [pid 3517316:tid 3517316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:48.032538 2026] [core:error] [pid 3517317:tid 3517317] (13)Permission denied: [client 216.73.216.199:16173] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libcrc32c/holders/xfs/uevent
[Thu Jul 30 14:33:49.624318 2026] [ssl:error] [pid 3517219:tid 3517219] (70014)End of file found: [client 216.73.216.199:48758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:49.722162 2026] [security2:error] [pid 3516553:tid 3516553] [client 31.186.11.22:59078] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amtSvbxrV_bKFJpSWwaMtQAAABk"]
[Thu Jul 30 14:33:49.924896 2026] [core:error] [pid 3512441:tid 3512441] (13)Permission denied: [client 216.73.216.199:11567] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_group/slab_size
[Thu Jul 30 14:33:50.969281 2026] [ssl:error] [pid 3514828:tid 3514828] (EAI 2)Name or service not known: [client 144.76.19.72:20676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:50.969332 2026] [ssl:error] [pid 3514828:tid 3514828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:51.022570 2026] [ssl:error] [pid 3515171:tid 3515171] (EAI 2)Name or service not known: [client 144.76.19.72:20688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:51.022603 2026] [ssl:error] [pid 3515171:tid 3515171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:51.450537 2026] [core:error] [pid 3512441:tid 3512441] (13)Permission denied: [client 216.73.216.199:11567] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/ctor
[Thu Jul 30 14:33:52.054669 2026] [ssl:error] [pid 3515172:tid 3515172] (70014)End of file found: [client 216.73.216.199:15683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:52.351490 2026] [ssl:error] [pid 3512441:tid 3512441] (70014)End of file found: [client 216.73.216.199:11567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:54.080694 2026] [ssl:error] [pid 3516489:tid 3516489] (EAI 2)Name or service not known: [client 144.76.19.72:20698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:54.080731 2026] [ssl:error] [pid 3516489:tid 3516489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:54.133646 2026] [ssl:error] [pid 3517287:tid 3517287] (EAI 2)Name or service not known: [client 144.76.19.72:20708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:54.133676 2026] [ssl:error] [pid 3517287:tid 3517287] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:54.954440 2026] [core:error] [pid 3517367:tid 3517367] (13)Permission denied: [client 216.73.216.199:22134] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_extent_status/usersize
[Thu Jul 30 14:33:55.061830 2026] [security2:error] [pid 3517367:tid 3517367] [client 216.73.216.199:22134] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_performance_tables.sql"] [unique_id "amtSw2WGK9_flFIjNHTfggAAAEk"]
[Thu Jul 30 14:33:55.062128 2026] [security2:error] [pid 3517367:tid 3517367] [client 216.73.216.199:22134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_performance_tables.sql"] [unique_id "amtSw2WGK9_flFIjNHTfggAAAEk"]
[Thu Jul 30 14:33:55.062347 2026] [security2:error] [pid 3517367:tid 3517367] [client 216.73.216.199:22134] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_performance_tables.sql"] [unique_id "amtSw2WGK9_flFIjNHTfggAAAEk"]
[Thu Jul 30 14:33:56.373706 2026] [access_compat:error] [pid 3517288:tid 3517288] [client 103.59.153.118:59059] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:33:56.877034 2026] [access_compat:error] [pid 3516553:tid 3516553] [client 45.158.164.139:37198] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:33:57.190113 2026] [ssl:error] [pid 3517219:tid 3517219] (EAI 2)Name or service not known: [client 144.76.19.72:20720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:57.190156 2026] [ssl:error] [pid 3517219:tid 3517219] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:57.259953 2026] [ssl:error] [pid 3517260:tid 3517260] (EAI 2)Name or service not known: [client 144.76.19.72:20724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:33:57.259982 2026] [ssl:error] [pid 3517260:tid 3517260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:33:57.469630 2026] [ssl:error] [pid 3517367:tid 3517367] (70014)End of file found: [client 216.73.216.199:22134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:58.096832 2026] [ssl:error] [pid 3514827:tid 3514827] (70014)End of file found: [client 216.73.216.199:43342] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:58.377731 2026] [core:error] [pid 3513593:tid 3513593] (13)Permission denied: [client 216.73.216.199:37113] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/key_jar/cache_dma
[Thu Jul 30 14:33:58.463774 2026] [authz_core:error] [pid 3486401:tid 3486401] [client 144.172.105.5:40928] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Exception/Transport/error_log
[Thu Jul 30 14:33:58.678332 2026] [core:error] [pid 3513593:tid 3513593] (13)Permission denied: [client 216.73.216.199:37113] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS3/flags
[Thu Jul 30 14:33:58.980634 2026] [security2:error] [pid 3513654:tid 3513654] [client 70.39.251.139:59918] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "sarahwiseman.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtSxiwry5q3tnygJxZuowAAACY"]
[Thu Jul 30 14:33:59.101875 2026] [authz_core:error] [pid 3516553:tid 3516553] [client 144.172.105.5:40938] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Proxy/error_log
[Thu Jul 30 14:33:59.280756 2026] [ssl:error] [pid 3513593:tid 3513593] (70014)End of file found: [client 216.73.216.199:37113] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:33:59.749387 2026] [authz_core:error] [pid 3514691:tid 3514691] [client 144.172.105.5:40952] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Response/error_log
[Thu Jul 30 14:34:00.317999 2026] [ssl:error] [pid 3517366:tid 3517366] (EAI 2)Name or service not known: [client 144.76.19.72:45634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:00.318042 2026] [ssl:error] [pid 3517366:tid 3517366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:00.371336 2026] [ssl:error] [pid 3504585:tid 3504585] (EAI 2)Name or service not known: [client 144.76.19.72:45642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:00.371368 2026] [ssl:error] [pid 3504585:tid 3504585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:00.418551 2026] [authz_core:error] [pid 3515172:tid 3515172] [client 144.172.105.5:40958] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Transport/error_log
[Thu Jul 30 14:34:00.929110 2026] [security2:error] [pid 3517286:tid 3517286] [client 144.172.105.5:40964] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/src/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtSyGP59fc7Oj4wTbAUXwAAADM"]
[Thu Jul 30 14:34:00.929272 2026] [security2:error] [pid 3517286:tid 3517286] [client 144.172.105.5:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtSyGP59fc7Oj4wTbAUXwAAADM"]
[Thu Jul 30 14:34:00.929497 2026] [security2:error] [pid 3517286:tid 3517286] [client 144.172.105.5:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtSyGP59fc7Oj4wTbAUXwAAADM"]
[Thu Jul 30 14:34:01.817086 2026] [authz_core:error] [pid 3517286:tid 3517286] [client 144.172.105.5:40964] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 14:34:02.211707 2026] [authz_core:error] [pid 3517286:tid 3517286] [client 144.172.105.5:40964] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/library/error_log
[Thu Jul 30 14:34:02.714102 2026] [authz_core:error] [pid 3512381:tid 3512381] [client 144.172.105.5:40978] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/library/SimplePie/error_log
[Thu Jul 30 14:34:03.201668 2026] [ssl:error] [pid 3517359:tid 3517359] (70014)End of file found: [client 216.73.216.199:43428] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:03.426895 2026] [ssl:error] [pid 3516436:tid 3516436] (EAI 2)Name or service not known: [client 144.76.19.72:45644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:03.426922 2026] [ssl:error] [pid 3516436:tid 3516436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:03.480045 2026] [ssl:error] [pid 3486401:tid 3486401] (EAI 2)Name or service not known: [client 144.76.19.72:45658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:03.480112 2026] [ssl:error] [pid 3486401:tid 3486401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:03.986964 2026] [security2:error] [pid 3517260:tid 3517260] [client 163.61.137.49:48694] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSy-s4Q_1wflNCgCOiGQAAAB8"]
[Thu Jul 30 14:34:03.987012 2026] [security2:error] [pid 3517260:tid 3517260] [client 163.61.137.49:48694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtSy-s4Q_1wflNCgCOiGQAAAB8"]
[Thu Jul 30 14:34:03.987264 2026] [security2:error] [pid 3517260:tid 3517260] [client 163.61.137.49:48694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtSy-s4Q_1wflNCgCOiGQAAAB8"]
[Thu Jul 30 14:34:04.105360 2026] [ssl:error] [pid 3517286:tid 3517286] (70014)End of file found: [client 216.73.216.199:37171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:04.598280 2026] [ssl:error] [pid 3514765:tid 3514765] (70014)End of file found: [client 216.73.216.199:53332] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:05.761408 2026] [security2:error] [pid 3513191:tid 3513191] [client 144.172.105.5:40990] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/library/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtSzdilUcUAiW4Wma9mRgAAABE"]
[Thu Jul 30 14:34:05.761591 2026] [security2:error] [pid 3513191:tid 3513191] [client 144.172.105.5:40990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtSzdilUcUAiW4Wma9mRgAAABE"]
[Thu Jul 30 14:34:05.761828 2026] [security2:error] [pid 3513191:tid 3513191] [client 144.172.105.5:40990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtSzdilUcUAiW4Wma9mRgAAABE"]
[Thu Jul 30 14:34:06.533692 2026] [ssl:error] [pid 3516552:tid 3516552] (EAI 2)Name or service not known: [client 144.76.19.72:45670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:06.533729 2026] [ssl:error] [pid 3516552:tid 3516552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:06.586757 2026] [ssl:error] [pid 3516436:tid 3516436] (EAI 2)Name or service not known: [client 144.76.19.72:45672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:06.586783 2026] [ssl:error] [pid 3516436:tid 3516436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:06.852529 2026] [authz_core:error] [pid 3517372:tid 3517372] [client 66.249.66.35:56082] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:34:06.855205 2026] [authz_core:error] [pid 3517372:tid 3517372] [client 66.249.66.35:56082] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:34:07.106333 2026] [access_compat:error] [pid 3515171:tid 3515171] [client 103.59.153.118:59552] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:08.552260 2026] [security2:error] [pid 3517362:tid 3517362] [client 169.224.2.100:8346] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtS0DGm06CbaFWxKJn0pQAAAEQ"]
[Thu Jul 30 14:34:08.552309 2026] [security2:error] [pid 3517362:tid 3517362] [client 169.224.2.100:8346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtS0DGm06CbaFWxKJn0pQAAAEQ"]
[Thu Jul 30 14:34:08.552540 2026] [security2:error] [pid 3517362:tid 3517362] [client 169.224.2.100:8346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtS0DGm06CbaFWxKJn0pQAAAEQ"]
[Thu Jul 30 14:34:08.939205 2026] [ssl:error] [pid 3517289:tid 3517289] (70014)End of file found: [client 216.73.216.199:41982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:09.248688 2026] [authz_core:error] [pid 3515094:tid 3515094] [client 172.202.95.21:32800] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:34:09.265397 2026] [authz_core:error] [pid 3515094:tid 3515094] [client 172.202.95.21:32800] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/mc4wp-debug-log.php
[Thu Jul 30 14:34:09.547198 2026] [ssl:error] [pid 3492200:tid 3492200] (70014)End of file found: [client 216.73.216.199:43900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:09.644569 2026] [ssl:error] [pid 3504535:tid 3504535] (EAI 2)Name or service not known: [client 144.76.19.72:39356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:09.644609 2026] [ssl:error] [pid 3504535:tid 3504535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:09.699136 2026] [ssl:error] [pid 3516555:tid 3516555] (EAI 2)Name or service not known: [client 144.76.19.72:39372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:09.699175 2026] [ssl:error] [pid 3516555:tid 3516555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:09.987045 2026] [authz_core:error] [pid 3513191:tid 3513191] [client 144.172.105.5:40990] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/src/error_log
[Thu Jul 30 14:34:10.042654 2026] [ssl:error] [pid 3502264:tid 3502264] (70014)End of file found: [client 216.73.216.199:40336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:11.588782 2026] [security2:error] [pid 3517362:tid 3517362] [client 144.172.105.5:35392] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/src/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtS0zGm06CbaFWxKJn0pwAAAEQ"]
[Thu Jul 30 14:34:11.588947 2026] [security2:error] [pid 3517362:tid 3517362] [client 144.172.105.5:35392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtS0zGm06CbaFWxKJn0pwAAAEQ"]
[Thu Jul 30 14:34:11.589195 2026] [security2:error] [pid 3517362:tid 3517362] [client 144.172.105.5:35392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtS0zGm06CbaFWxKJn0pwAAAEQ"]
[Thu Jul 30 14:34:12.767326 2026] [ssl:error] [pid 3517361:tid 3517361] (EAI 2)Name or service not known: [client 144.76.19.72:39374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:12.767363 2026] [ssl:error] [pid 3517361:tid 3517361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:12.820313 2026] [ssl:error] [pid 3517219:tid 3517219] (EAI 2)Name or service not known: [client 144.76.19.72:39384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:12.820336 2026] [ssl:error] [pid 3517219:tid 3517219] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:13.093602 2026] [security2:error] [pid 3514631:tid 3514631] [client 159.224.180.206:60070] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtS1Wmbs7jTgBUIM4h16AAAAAY"]
[Thu Jul 30 14:34:13.093653 2026] [security2:error] [pid 3514631:tid 3514631] [client 159.224.180.206:60070] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtS1Wmbs7jTgBUIM4h16AAAAAY"]
[Thu Jul 30 14:34:13.093882 2026] [security2:error] [pid 3514631:tid 3514631] [client 159.224.180.206:60070] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtS1Wmbs7jTgBUIM4h16AAAAAY"]
[Thu Jul 30 14:34:14.201532 2026] [cgi:error] [pid 3516555:tid 3516555] [client 51.120.70.186:15787] AH02812: stderr from /home/davidebell/public_html/localdonuts.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:34:14.259298 2026] [ssl:error] [pid 3517317:tid 3517317] (70014)End of file found: [client 216.73.216.199:43571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:14.652148 2026] [authz_core:error] [pid 3472867:tid 3472867] [client 144.172.105.5:35442] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/src/Cache/error_log
[Thu Jul 30 14:34:14.870754 2026] [ssl:error] [pid 3513593:tid 3513593] (70014)End of file found: [client 216.73.216.199:60004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:15.147982 2026] [security2:error] [pid 3517321:tid 3517321] [client 114.119.158.38:59343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575417600/cat_ids~14,104/request_format~html"] [unique_id "amtS11zf_kECPLUEUPbO8wAAADw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575417600/request_format~html/cat_ids~14
[Thu Jul 30 14:34:15.183264 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/011i.php
[Thu Jul 30 14:34:15.471690 2026] [ssl:error] [pid 3514766:tid 3514766] (70014)End of file found: [client 216.73.216.199:53212] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:15.838076 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/03a005685d.php
[Thu Jul 30 14:34:15.875612 2026] [ssl:error] [pid 3512322:tid 3512322] (EAI 2)Name or service not known: [client 144.76.19.72:39396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:15.875651 2026] [ssl:error] [pid 3512322:tid 3512322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:15.929691 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:39398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:15.929717 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:16.406438 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/403.php
[Thu Jul 30 14:34:16.768201 2026] [security2:error] [pid 3517259:tid 3517259] [client 114.119.158.38:59349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1575417600/cat_ids~14,104/request_format~html"] [unique_id "amtS2DCPZQautd1VavetFwAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1575417600/request_format~html/cat_ids~14
[Thu Jul 30 14:34:16.965483 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 14:34:17.548875 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 14:34:17.689560 2026] [access_compat:error] [pid 3517288:tid 3517288] [client 103.59.153.118:60038] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:18.499635 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/aafewc0k.php
[Thu Jul 30 14:34:19.031055 2026] [ssl:error] [pid 3517259:tid 3517259] (EAI 2)Name or service not known: [client 144.76.19.72:39408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:19.031100 2026] [ssl:error] [pid 3517259:tid 3517259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:19.084327 2026] [ssl:error] [pid 3517260:tid 3517260] (EAI 2)Name or service not known: [client 144.76.19.72:39420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:19.084354 2026] [ssl:error] [pid 3517260:tid 3517260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:19.118058 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/abcd.php
[Thu Jul 30 14:34:19.286143 2026] [security2:error] [pid 3506530:tid 3506530] [client 170.106.72.93:46618] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.com"] [uri "/"] [unique_id "amtS200IYRd2Fk0JDGJFGwAAACg"]
[Thu Jul 30 14:34:19.290823 2026] [authz_core:error] [pid 3506530:tid 3506530] [client 170.106.72.93:46618] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:34:19.300126 2026] [authz_core:error] [pid 3506530:tid 3506530] [client 170.106.72.93:46618] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:34:19.400832 2026] [core:error] [pid 3517259:tid 3517259] (13)Permission denied: [client 216.73.216.199:60608] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_groupinfo_1k/store_user
[Thu Jul 30 14:34:19.413692 2026] [authz_core:error] [pid 3502264:tid 3502264] [client 144.172.105.5:53218] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/SimplePie/src/HTTP/error_log
[Thu Jul 30 14:34:21.042642 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 14:34:21.323222 2026] [core:error] [pid 3517259:tid 3517259] (13)Permission denied: [client 216.73.216.199:60608] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS0/closing_wait
[Thu Jul 30 14:34:21.637703 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/albin.php
[Thu Jul 30 14:34:22.180900 2026] [ssl:error] [pid 3517289:tid 3517289] (EAI 2)Name or service not known: [client 144.76.19.72:33364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:22.180936 2026] [ssl:error] [pid 3517289:tid 3517289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:22.220644 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/amfsqvgv.php
[Thu Jul 30 14:34:22.225565 2026] [ssl:error] [pid 3517259:tid 3517259] (70014)End of file found: [client 216.73.216.199:60608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:22.272920 2026] [ssl:error] [pid 3517363:tid 3517363] (EAI 2)Name or service not known: [client 144.76.19.72:33378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:22.272952 2026] [ssl:error] [pid 3517363:tid 3517363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:22.855934 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/ant.php
[Thu Jul 30 14:34:23.505741 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/appreciators.php
[Thu Jul 30 14:34:23.803174 2026] [access_compat:error] [pid 3504281:tid 3504281] [client 103.59.153.118:59384] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:24.304564 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/archive.php
[Thu Jul 30 14:34:24.641055 2026] [core:error] [pid 3516553:tid 3516553] (13)Permission denied: [client 216.73.216.199:60955] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS0/closing_wait
[Thu Jul 30 14:34:25.188799 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 14:34:25.747930 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/atomlib.php
[Thu Jul 30 14:34:26.098777 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:33390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:26.098805 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:26.152842 2026] [ssl:error] [pid 3517362:tid 3517362] (EAI 2)Name or service not known: [client 144.76.19.72:33400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:26.152875 2026] [ssl:error] [pid 3517362:tid 3517362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:26.381976 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/autoload_classmap.php
[Thu Jul 30 14:34:26.448735 2026] [core:error] [pid 3516553:tid 3516553] (13)Permission denied: [client 216.73.216.199:60955] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf-frags/red_zone
[Thu Jul 30 14:34:26.979470 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/bb.php
[Thu Jul 30 14:34:27.049600 2026] [ssl:error] [pid 3516553:tid 3516553] (70014)End of file found: [client 216.73.216.199:60955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:27.547930 2026] [authz_core:error] [pid 3514765:tid 3514765] [client 144.172.105.5:53258] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 14:34:27.634649 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/bnm.php
[Thu Jul 30 14:34:28.315212 2026] [access_compat:error] [pid 3512381:tid 3512381] [client 20.100.187.246:43800] AH01797: client denied by server configuration: /home/thepryor/public_html/bootstrap.php
[Thu Jul 30 14:34:28.382275 2026] [access_compat:error] [pid 3517366:tid 3517366] [client 103.59.153.118:60527] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:29.210439 2026] [ssl:error] [pid 3504281:tid 3504281] (EAI 2)Name or service not known: [client 144.76.19.72:33408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:29.210464 2026] [ssl:error] [pid 3504281:tid 3504281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:29.267499 2026] [ssl:error] [pid 3518987:tid 3518987] (EAI 2)Name or service not known: [client 144.76.19.72:33414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:29.267530 2026] [ssl:error] [pid 3518987:tid 3518987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:29.422540 2026] [authz_core:error] [pid 3518989:tid 3518989] [client 144.172.105.5:39534] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 14:34:30.672268 2026] [autoindex:error] [pid 3517361:tid 3517361] (13)Permission denied: [client 216.73.216.199:51714] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/quantumc/
[Thu Jul 30 14:34:32.322820 2026] [ssl:error] [pid 3515172:tid 3515172] (EAI 2)Name or service not known: [client 144.76.19.72:51432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:32.322847 2026] [ssl:error] [pid 3515172:tid 3515172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:32.380502 2026] [ssl:error] [pid 3515094:tid 3515094] (EAI 2)Name or service not known: [client 144.76.19.72:51444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:32.380532 2026] [ssl:error] [pid 3515094:tid 3515094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:32.397538 2026] [authz_core:error] [pid 3519054:tid 3519054] [client 144.172.105.5:39600] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 14:34:33.666997 2026] [security2:error] [pid 3514828:tid 3514828] [client 85.208.98.29:34186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9604.0.html"] [unique_id "amtS6fpvFkf6nlXg7mSyhgAAAC8"]
[Thu Jul 30 14:34:34.696785 2026] [access_compat:error] [pid 3517317:tid 3517317] [client 45.158.164.139:49836] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:34:34.747269 2026] [security2:error] [pid 3514828:tid 3514828] [client 43.155.188.157:42272] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "amtS6vpvFkf6nlXg7mSyhwAAAC8"]
[Thu Jul 30 14:34:35.466695 2026] [access_compat:error] [pid 3515094:tid 3515094] [client 103.59.153.118:60846] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:35.475717 2026] [ssl:error] [pid 3516555:tid 3516555] (EAI 2)Name or service not known: [client 144.76.19.72:51452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:35.475748 2026] [ssl:error] [pid 3516555:tid 3516555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:35.529982 2026] [ssl:error] [pid 3517359:tid 3517359] (EAI 2)Name or service not known: [client 144.76.19.72:51456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:35.530016 2026] [ssl:error] [pid 3517359:tid 3517359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:36.094644 2026] [lsapi:error] [pid 3517361:tid 3517361] [client 216.73.216.199:51714] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Interface "Plesk\\Wappspector\\Matchers\\MatcherInterface" not found in /opt/cpanel/ea-wappspector/src/Matchers/Wordpress.php:11\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/Matchers/Wordpress.php on line 11\n
[Thu Jul 30 14:34:36.873531 2026] [core:error] [pid 3517363:tid 3517363] (13)Permission denied: [client 216.73.216.199:12513] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS1/iomem_base
[Thu Jul 30 14:34:38.621707 2026] [ssl:error] [pid 3514828:tid 3514828] (EAI 2)Name or service not known: [client 144.76.19.72:51470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:38.621734 2026] [ssl:error] [pid 3514828:tid 3514828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:38.676138 2026] [ssl:error] [pid 3517365:tid 3517365] (EAI 2)Name or service not known: [client 144.76.19.72:51476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:38.676170 2026] [ssl:error] [pid 3517365:tid 3517365] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:39.047626 2026] [access_compat:error] [pid 3514691:tid 3514691] [client 103.59.153.118:61017] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:41.219315 2026] [ssl:error] [pid 3514765:tid 3514765] (70014)End of file found: [client 216.73.216.199:26954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:41.260733 2026] [security2:error] [pid 3517365:tid 3517365] [client 185.191.171.3:43176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/provincetown-bathhouse"] [unique_id "amtS8aGkwQ1LPQpA3Gqg0gAAAEc"]
[Thu Jul 30 14:34:41.734861 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:23148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:41.734894 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:41.792263 2026] [ssl:error] [pid 3518988:tid 3518988] (EAI 2)Name or service not known: [client 144.76.19.72:23156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:41.792300 2026] [ssl:error] [pid 3518988:tid 3518988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:42.423791 2026] [ssl:error] [pid 3519053:tid 3519053] (70014)End of file found: [client 216.73.216.199:12699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:43.932399 2026] [core:error] [pid 3517363:tid 3517363] (13)Permission denied: [client 216.73.216.199:12513] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/usbhid/drivers/usb:usbhid/unbind
[Thu Jul 30 14:34:44.873461 2026] [ssl:error] [pid 3492200:tid 3492200] (EAI 2)Name or service not known: [client 144.76.19.72:23166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:44.873497 2026] [ssl:error] [pid 3492200:tid 3492200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:44.925153 2026] [ssl:error] [pid 3517259:tid 3517259] (EAI 2)Name or service not known: [client 144.76.19.72:23178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:44.925184 2026] [ssl:error] [pid 3517259:tid 3517259] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:47.245978 2026] [core:error] [pid 3517363:tid 3517363] (13)Permission denied: [client 216.73.216.199:12513] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS1/iomem_base
[Thu Jul 30 14:34:47.693329 2026] [authz_core:error] [pid 3518955:tid 3518955] [client 66.249.66.33:59528] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:34:47.696171 2026] [authz_core:error] [pid 3518955:tid 3518955] [client 66.249.66.33:59528] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:34:47.860882 2026] [core:error] [pid 3517363:tid 3517363] (13)Permission denied: [client 216.73.216.199:12513] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty28/subsystem/ttyS0/close_delay
[Thu Jul 30 14:34:47.980197 2026] [ssl:error] [pid 3517361:tid 3517361] (EAI 2)Name or service not known: [client 144.76.19.72:23184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:47.980226 2026] [ssl:error] [pid 3517361:tid 3517361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:48.033552 2026] [ssl:error] [pid 3518909:tid 3518909] (EAI 2)Name or service not known: [client 144.76.19.72:23196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:48.033582 2026] [ssl:error] [pid 3518909:tid 3518909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:49.234353 2026] [ssl:error] [pid 3517363:tid 3517363] (70014)End of file found: [client 216.73.216.199:12513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:49.613675 2026] [authz_core:error] [pid 3517367:tid 3517367] [client 144.172.105.5:34244] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/customize/error_log
[Thu Jul 30 14:34:49.653167 2026] [access_compat:error] [pid 3515172:tid 3515172] [client 103.59.153.118:61502] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:49.777702 2026] [security2:error] [pid 3516554:tid 3516554] [client 51.68.111.199:14461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "apotheekcandidejacobs.be"] [uri "/robots.txt"] [unique_id "amtS-V-6p3pD0OID1ISF0gAAACc"]
[Thu Jul 30 14:34:50.434568 2026] [ssl:error] [pid 3504534:tid 3504534] (70014)End of file found: [client 216.73.216.199:4766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:51.088774 2026] [ssl:error] [pid 3517316:tid 3517316] (EAI 2)Name or service not known: [client 144.76.19.72:63070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:51.088808 2026] [ssl:error] [pid 3517316:tid 3517316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:51.142422 2026] [ssl:error] [pid 3517361:tid 3517361] (EAI 2)Name or service not known: [client 144.76.19.72:63074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:51.142463 2026] [ssl:error] [pid 3517361:tid 3517361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:52.848353 2026] [core:error] [pid 3519050:tid 3519050] (13)Permission denied: [client 216.73.216.199:50568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bfq_io_cq/store_user
[Thu Jul 30 14:34:54.196545 2026] [ssl:error] [pid 3502264:tid 3502264] (EAI 2)Name or service not known: [client 144.76.19.72:63084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:54.196578 2026] [ssl:error] [pid 3502264:tid 3502264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:54.251042 2026] [ssl:error] [pid 3517359:tid 3517359] (EAI 2)Name or service not known: [client 144.76.19.72:63086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:54.251086 2026] [ssl:error] [pid 3517359:tid 3517359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:54.353559 2026] [ssl:error] [pid 3519050:tid 3519050] (70014)End of file found: [client 216.73.216.199:50568] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:54.951159 2026] [ssl:error] [pid 3517359:tid 3517359] (70014)End of file found: [client 216.73.216.199:34802] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:56.302952 2026] [access_compat:error] [pid 3504535:tid 3504535] [client 103.59.153.118:61802] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:34:57.307653 2026] [ssl:error] [pid 3516555:tid 3516555] (EAI 2)Name or service not known: [client 144.76.19.72:63102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:57.307703 2026] [ssl:error] [pid 3516555:tid 3516555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:57.365690 2026] [ssl:error] [pid 3518956:tid 3518956] (EAI 2)Name or service not known: [client 144.76.19.72:63118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:34:57.365723 2026] [ssl:error] [pid 3518956:tid 3518956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:34:58.567694 2026] [ssl:error] [pid 3519052:tid 3519052] (70014)End of file found: [client 216.73.216.199:26910] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:34:59.719499 2026] [security2:error] [pid 3518988:tid 3518988] [client 85.208.96.201:62354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1352.0/prev_next,next.html"] [unique_id "amtTA9Ucp7jS1VjdS4HX1wAAABU"]
[Thu Jul 30 14:35:00.309930 2026] [access_compat:error] [pid 3517219:tid 3517219] [client 103.59.153.118:61987] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:35:00.461135 2026] [ssl:error] [pid 3518909:tid 3518909] (EAI 2)Name or service not known: [client 144.76.19.72:64028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:00.461167 2026] [ssl:error] [pid 3518909:tid 3518909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:00.514056 2026] [ssl:error] [pid 3518988:tid 3518988] (EAI 2)Name or service not known: [client 144.76.19.72:64036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:00.514097 2026] [ssl:error] [pid 3518988:tid 3518988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:00.743476 2026] [access_compat:error] [pid 3517363:tid 3517363] [client 45.158.164.139:43100] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:35:01.580605 2026] [ssl:error] [pid 3518989:tid 3518989] (70014)End of file found: [client 216.73.216.199:58008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:02.784667 2026] [ssl:error] [pid 3514765:tid 3514765] (70014)End of file found: [client 216.73.216.199:32778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:03.567929 2026] [ssl:error] [pid 3515967:tid 3515967] (EAI 2)Name or service not known: [client 144.76.19.72:64042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:03.567981 2026] [ssl:error] [pid 3515967:tid 3515967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:03.622581 2026] [ssl:error] [pid 3512381:tid 3512381] (EAI 2)Name or service not known: [client 144.76.19.72:64054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:03.622620 2026] [ssl:error] [pid 3512381:tid 3512381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:03.986032 2026] [core:error] [pid 3518988:tid 3518988] (13)Permission denied: [client 216.73.216.199:1855] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 14:35:04.608920 2026] [authz_core:error] [pid 3519363:tid 3519363] [client 144.172.105.5:57548] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/html-api/error_log
[Thu Jul 30 14:35:04.888477 2026] [ssl:error] [pid 3518988:tid 3518988] (70014)End of file found: [client 216.73.216.199:1855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:06.681476 2026] [ssl:error] [pid 3518956:tid 3518956] (EAI 2)Name or service not known: [client 144.76.19.72:64068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:06.681514 2026] [ssl:error] [pid 3518956:tid 3518956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:06.739824 2026] [ssl:error] [pid 3516436:tid 3516436] (EAI 2)Name or service not known: [client 144.76.19.72:64070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:06.739855 2026] [ssl:error] [pid 3516436:tid 3516436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:08.266457 2026] [authz_core:error] [pid 3506530:tid 3506530] [client 144.172.105.5:49470] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/interactivity-api/error_log
[Thu Jul 30 14:35:09.793465 2026] [ssl:error] [pid 3517361:tid 3517361] (EAI 2)Name or service not known: [client 144.76.19.72:55090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:09.793507 2026] [ssl:error] [pid 3517361:tid 3517361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:09.848085 2026] [ssl:error] [pid 3519951:tid 3519951] (EAI 2)Name or service not known: [client 144.76.19.72:55106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:09.848131 2026] [ssl:error] [pid 3519951:tid 3519951] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:11.015961 2026] [access_compat:error] [pid 3517219:tid 3517219] [client 103.59.153.118:62476] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:35:11.817219 2026] [core:error] [pid 3518987:tid 3518987] (13)Permission denied: [client 216.73.216.199:21147] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/broadbentandsmith.com.db
[Thu Jul 30 14:35:12.446319 2026] [security2:error] [pid 3520037:tid 3520037] [client 43.134.15.174:38636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chrisdyble.com"] [uri "/"] [unique_id "amtTEH8KYWvmpwhqFqjrRgAAAAQ"]
[Thu Jul 30 14:35:13.451297 2026] [ssl:error] [pid 3520893:tid 3520893] (EAI 2)Name or service not known: [client 144.76.19.72:55118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:13.451341 2026] [ssl:error] [pid 3520893:tid 3520893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:13.550240 2026] [ssl:error] [pid 3503480:tid 3503480] (EAI 2)Name or service not known: [client 144.76.19.72:55130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:13.550267 2026] [ssl:error] [pid 3503480:tid 3503480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:14.828790 2026] [ssl:error] [pid 3518987:tid 3518987] (70014)End of file found: [client 216.73.216.199:21147] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:15.399712 2026] [security2:error] [pid 3517317:tid 3517317] [client 114.119.146.98:23617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.com"] [uri "/robots.txt"] [unique_id "amtTE2PrfYhYtL3cSFPMYAAAADg"], referer: https://jonathanmeyerart.com/robots.txt
[Thu Jul 30 14:35:15.735962 2026] [autoindex:error] [pid 3520930:tid 3520930] (13)Permission denied: [client 216.73.216.199:20467] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/orgent/
[Thu Jul 30 14:35:16.072792 2026] [security2:error] [pid 3520893:tid 3520893] [client 187.5.202.20:45803] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTFGq6BXCq3VBHI-7N0AAAAAs"]
[Thu Jul 30 14:35:16.072849 2026] [security2:error] [pid 3520893:tid 3520893] [client 187.5.202.20:45803] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTFGq6BXCq3VBHI-7N0AAAAAs"]
[Thu Jul 30 14:35:16.073115 2026] [security2:error] [pid 3520893:tid 3520893] [client 187.5.202.20:45803] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTFGq6BXCq3VBHI-7N0AAAAAs"]
[Thu Jul 30 14:35:16.342136 2026] [ssl:error] [pid 3520930:tid 3520930] (70014)End of file found: [client 216.73.216.199:20467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:16.602137 2026] [ssl:error] [pid 3517317:tid 3517317] (EAI 2)Name or service not known: [client 144.76.19.72:55144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:16.602176 2026] [ssl:error] [pid 3517317:tid 3517317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:16.655093 2026] [ssl:error] [pid 3518909:tid 3518909] (EAI 2)Name or service not known: [client 144.76.19.72:55158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:16.655119 2026] [ssl:error] [pid 3518909:tid 3518909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:16.943236 2026] [core:error] [pid 3520931:tid 3520931] (13)Permission denied: [client 216.73.216.199:4726] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty54/subsystem/ttyS3/uartclk
[Thu Jul 30 14:35:17.533328 2026] [autoindex:error] [pid 3520932:tid 3520932] [client 209.99.187.19:39808] AH01276: Cannot serve directory /home/winterb/public_html/drupal1/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:35:17.574438 2026] [autoindex:error] [pid 3516554:tid 3516554] [client 209.99.187.19:39818] AH01276: Cannot serve directory /home/winterb/public_html/drupal2/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:35:18.459327 2026] [access_compat:error] [pid 3517219:tid 3517219] [client 18.179.34.78:50015] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/11/markking.jpg
[Thu Jul 30 14:35:18.459439 2026] [access_compat:error] [pid 3517219:tid 3517219] [client 18.179.34.78:50015] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:35:18.751018 2026] [ssl:error] [pid 3520931:tid 3520931] (70014)End of file found: [client 216.73.216.199:4726] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:19.170300 2026] [security2:error] [pid 3520932:tid 3520932] [client 181.115.215.89:47345] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTF_wH-gREYiJGkoe2BgAAACE"]
[Thu Jul 30 14:35:19.170363 2026] [security2:error] [pid 3520932:tid 3520932] [client 181.115.215.89:47345] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTF_wH-gREYiJGkoe2BgAAACE"]
[Thu Jul 30 14:35:19.170626 2026] [security2:error] [pid 3520932:tid 3520932] [client 181.115.215.89:47345] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTF_wH-gREYiJGkoe2BgAAACE"]
[Thu Jul 30 14:35:19.726288 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:57198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:19.726329 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:19.785692 2026] [ssl:error] [pid 3518990:tid 3518990] (EAI 2)Name or service not known: [client 144.76.19.72:57200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:19.785736 2026] [ssl:error] [pid 3518990:tid 3518990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:20.041017 2026] [security2:error] [pid 3520932:tid 3520932] [client 114.119.134.146:26825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/robots.txt"] [unique_id "amtTGPwH-gREYiJGkoe2BwAAACE"], referer: https://shelterprojects.org/robots.txt
[Thu Jul 30 14:35:20.083491 2026] [ssl:error] [pid 3517366:tid 3517366] (70014)End of file found: [client 216.73.216.199:41980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:20.210739 2026] [ssl:error] [pid 3520868:tid 3520868] (70014)End of file found: [client 216.73.216.199:45698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:20.703508 2026] [ssl:error] [pid 3520991:tid 3520991] (70014)End of file found: [client 216.73.216.199:45320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:21.645767 2026] [access_compat:error] [pid 3517219:tid 3517219] [client 103.59.153.118:62960] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:35:22.840351 2026] [ssl:error] [pid 3513593:tid 3513593] (EAI 2)Name or service not known: [client 144.76.19.72:57208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:22.840399 2026] [ssl:error] [pid 3513593:tid 3513593] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:22.896733 2026] [ssl:error] [pid 3513654:tid 3513654] (EAI 2)Name or service not known: [client 144.76.19.72:57216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:22.896760 2026] [ssl:error] [pid 3513654:tid 3513654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:23.386479 2026] [security2:error] [pid 3520894:tid 3520894] [client 190.183.123.229:51574] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTG-jlkcqNXaVa6nxGlwAAAA0"]
[Thu Jul 30 14:35:23.386572 2026] [security2:error] [pid 3520894:tid 3520894] [client 190.183.123.229:51574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTG-jlkcqNXaVa6nxGlwAAAA0"]
[Thu Jul 30 14:35:23.386904 2026] [security2:error] [pid 3520894:tid 3520894] [client 190.183.123.229:51574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTG-jlkcqNXaVa6nxGlwAAAA0"]
[Thu Jul 30 14:35:24.520496 2026] [authz_core:error] [pid 3520930:tid 3520930] [client 144.172.105.5:45420] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/dist/vendor/error_log
[Thu Jul 30 14:35:25.141223 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/geju.php
[Thu Jul 30 14:35:25.290565 2026] [authz_core:error] [pid 3520930:tid 3520930] [client 144.172.105.5:45420] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/jquery/error_log
[Thu Jul 30 14:35:25.831749 2026] [authz_core:error] [pid 3520894:tid 3520894] [client 66.249.66.33:59223] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:35:25.834408 2026] [authz_core:error] [pid 3520894:tid 3520894] [client 66.249.66.33:59223] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:35:25.954293 2026] [ssl:error] [pid 3517289:tid 3517289] (EAI 2)Name or service not known: [client 144.76.19.72:57224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:25.954317 2026] [ssl:error] [pid 3517289:tid 3517289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:26.008671 2026] [ssl:error] [pid 3519050:tid 3519050] (EAI 2)Name or service not known: [client 144.76.19.72:57232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:26.008706 2026] [ssl:error] [pid 3519050:tid 3519050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:26.414732 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 14:35:26.546176 2026] [authz_core:error] [pid 3520930:tid 3520930] [client 144.172.105.5:45420] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/php.ini
[Thu Jul 30 14:35:27.042002 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/aaa.php
[Thu Jul 30 14:35:27.046304 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/lost+found/' is executable
[Thu Jul 30 14:35:27.059863 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/root/' is executable
[Thu Jul 30 14:35:27.317861 2026] [autoindex:error] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/backup/
[Thu Jul 30 14:35:27.629481 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/hoot.php
[Thu Jul 30 14:35:27.743958 2026] [ssl:error] [pid 3517372:tid 3517372] (70014)End of file found: [client 216.73.216.199:1799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:28.102797 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/boot/grub2/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/boot/grub2/' is executable
[Thu Jul 30 14:35:28.163529 2026] [ssl:error] [pid 3521146:tid 3521146] (70014)End of file found: [client 216.73.216.199:56831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:28.276322 2026] [access_compat:error] [pid 3519050:tid 3519050] [client 103.59.153.118:63263] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:35:28.349964 2026] [ssl:error] [pid 3517361:tid 3517361] (70014)End of file found: [client 216.73.216.199:34608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:28.541551 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/sudoers.d/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/sudoers.d/' is executable
[Thu Jul 30 14:35:28.545756 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/nftables/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/nftables/' is executable
[Thu Jul 30 14:35:28.547832 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/imunify-agent-proxy/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/imunify-agent-proxy/' is executable
[Thu Jul 30 14:35:28.557939 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/grub.d/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/grub.d/' is executable
[Thu Jul 30 14:35:28.557998 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/csf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/csf/' is executable
[Thu Jul 30 14:35:28.602698 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/named/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/named/' is executable
[Thu Jul 30 14:35:28.620800 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/audit/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/audit/' is executable
[Thu Jul 30 14:35:28.621702 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/sssd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/sssd/' is executable
[Thu Jul 30 14:35:28.634101 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/firewalld/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/etc/firewalld/' is executable
[Thu Jul 30 14:35:28.855875 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/home/cpmove-inrcorgu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/home/cpmove-inrcorgu/' is executable
[Thu Jul 30 14:35:28.925232 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/home/cldiaguser_01438cde81934e3b924e0/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/home/cldiaguser_01438cde81934e3b924e0/' is executable
[Thu Jul 30 14:35:29.064468 2026] [ssl:error] [pid 3514828:tid 3514828] (EAI 2)Name or service not known: [client 144.76.19.72:57236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:29.064492 2026] [ssl:error] [pid 3514828:tid 3514828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:29.117496 2026] [ssl:error] [pid 3517319:tid 3517319] (EAI 2)Name or service not known: [client 144.76.19.72:57240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:29.117522 2026] [ssl:error] [pid 3517319:tid 3517319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:29.959016 2026] [ssl:error] [pid 3512381:tid 3512381] (70014)End of file found: [client 216.73.216.199:42886] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:30.393779 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/db-cache.php
[Thu Jul 30 14:35:30.399394 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/run/web-monitoring-tool/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/run/web-monitoring-tool/' is executable
[Thu Jul 30 14:35:30.402122 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/run/pure-ftpd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/run/pure-ftpd/' is executable
[Thu Jul 30 14:35:30.403977 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/run/chkservd.services_suspend/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/run/chkservd.services_suspend/' is executable
[Thu Jul 30 14:35:30.404011 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/run/restartsrv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/run/restartsrv/' is executable
[Thu Jul 30 14:35:30.404029 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/run/chrony/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/run/chrony/' is executable
[Thu Jul 30 14:35:30.409196 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/run/rpcbind/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/run/rpcbind/' is executable
[Thu Jul 30 14:35:30.416007 2026] [core:crit] [pid 3520930:tid 3520930] (13)Permission denied: [client 144.172.105.5:45420] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/run/cryptsetup/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/run/cryptsetup/' is executable
[Thu Jul 30 14:35:30.841329 2026] [lsapi:warn] [pid 3520930:tid 3520930] [client 144.172.105.5:45420] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 14:35:30.841357 2026] [lsapi:error] [pid 3520930:tid 3520930] [client 144.172.105.5:45420] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/scripts/cleanphpsessions.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 14:35:30.964282 2026] [security2:error] [pid 3520930:tid 3520930] [client 51.195.244.234:57830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amtTIoyGx66shJuNqv_VbgAAABA"]
[Thu Jul 30 14:35:31.545869 2026] [security2:error] [pid 3521483:tid 3521483] [client 43.157.82.252:52236] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amtTIy_RHWOc9XraBLr1hgAAACI"]
[Thu Jul 30 14:35:31.780719 2026] [ssl:error] [pid 3520037:tid 3520037] (70014)End of file found: [client 216.73.216.199:64849] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:32.032299 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-bazvsbkx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-bazvsbkx/' is executable
[Thu Jul 30 14:35:32.035133 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/' is executable
[Thu Jul 30 14:35:32.036431 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-vuk0cupl/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-vuk0cupl/' is executable
[Thu Jul 30 14:35:32.044035 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-zfuqapa9/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-zfuqapa9/' is executable
[Thu Jul 30 14:35:32.044096 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/' is executable
[Thu Jul 30 14:35:32.046389 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/' is executable
[Thu Jul 30 14:35:32.049894 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-m25d8tn_/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-m25d8tn_/' is executable
[Thu Jul 30 14:35:32.053200 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-ptb93rze/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-ptb93rze/' is executable
[Thu Jul 30 14:35:32.053500 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-vs_5h8vw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-vs_5h8vw/' is executable
[Thu Jul 30 14:35:32.054760 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-urki9vq5/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-urki9vq5/' is executable
[Thu Jul 30 14:35:32.056438 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/' is executable
[Thu Jul 30 14:35:32.059483 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pm45e04g/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pm45e04g/' is executable
[Thu Jul 30 14:35:32.061755 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-o2wyv0oj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-o2wyv0oj/' is executable
[Thu Jul 30 14:35:32.063601 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-ilysblsz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-ilysblsz/' is executable
[Thu Jul 30 14:35:32.063817 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/' is executable
[Thu Jul 30 14:35:32.068891 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-bhe4auzv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-bhe4auzv/' is executable
[Thu Jul 30 14:35:32.071560 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-t0mgg3cv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-t0mgg3cv/' is executable
[Thu Jul 30 14:35:32.075021 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-6b4g6ain/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-6b4g6ain/' is executable
[Thu Jul 30 14:35:32.076036 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-xwbnb_cj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-xwbnb_cj/' is executable
[Thu Jul 30 14:35:32.076952 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pzyber_l/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pzyber_l/' is executable
[Thu Jul 30 14:35:32.077166 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-utbgbvka/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-utbgbvka/' is executable
[Thu Jul 30 14:35:32.077785 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pckpp7iz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pckpp7iz/' is executable
[Thu Jul 30 14:35:32.078013 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-q_4s1dmg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-q_4s1dmg/' is executable
[Thu Jul 30 14:35:32.079937 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/' is executable
[Thu Jul 30 14:35:32.080970 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-fb6u1ntx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-fb6u1ntx/' is executable
[Thu Jul 30 14:35:32.081915 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-bpwqiojf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-bpwqiojf/' is executable
[Thu Jul 30 14:35:32.082612 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-q2t2tbi3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-q2t2tbi3/' is executable
[Thu Jul 30 14:35:32.083796 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-ubj5lzzh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-ubj5lzzh/' is executable
[Thu Jul 30 14:35:32.084705 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pkan3sjx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-pkan3sjx/' is executable
[Thu Jul 30 14:35:32.085040 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-rysxxx39/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-rysxxx39/' is executable
[Thu Jul 30 14:35:32.086670 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-2u0lmmbu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-2u0lmmbu/' is executable
[Thu Jul 30 14:35:32.086789 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-5a2k1oi2/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-5a2k1oi2/' is executable
[Thu Jul 30 14:35:32.087039 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/' is executable
[Thu Jul 30 14:35:32.088242 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/lost+found/' is executable
[Thu Jul 30 14:35:32.089445 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-rzzc6i3o/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-rzzc6i3o/' is executable
[Thu Jul 30 14:35:32.089522 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-h1jwcnlk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-h1jwcnlk/' is executable
[Thu Jul 30 14:35:32.091484 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-_6d7rllb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-_6d7rllb/' is executable
[Thu Jul 30 14:35:32.092552 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-2wv4v5mp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-2wv4v5mp/' is executable
[Thu Jul 30 14:35:32.092689 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-wkkpuur3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-wkkpuur3/' is executable
[Thu Jul 30 14:35:32.095777 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-rjd_9s_e/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-rjd_9s_e/' is executable
[Thu Jul 30 14:35:32.103190 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-sj45mp0p/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/pymp-sj45mp0p/' is executable
[Thu Jul 30 14:35:32.103943 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/' is executable
[Thu Jul 30 14:35:32.104853 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/' is executable
[Thu Jul 30 14:35:32.753937 2026] [ssl:error] [pid 3521563:tid 3521563] (EAI 2)Name or service not known: [client 144.76.19.72:49616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:32.753974 2026] [ssl:error] [pid 3521563:tid 3521563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:32.835524 2026] [ssl:error] [pid 3520893:tid 3520893] (EAI 2)Name or service not known: [client 144.76.19.72:49628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:32.835550 2026] [ssl:error] [pid 3520893:tid 3520893] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:32.985856 2026] [ssl:error] [pid 3521563:tid 3521563] (70014)End of file found: [client 216.73.216.199:50239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:33.227758 2026] [core:crit] [pid 3521525:tid 3521525] (13)Permission denied: [client 144.172.105.5:32886] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/var/clcpapi/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/var/clcpapi/' is executable
[Thu Jul 30 14:35:33.243566 2026] [access_compat:error] [pid 3514765:tid 3514765] [client 103.59.153.118:63458] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:35:33.368299 2026] [authz_core:error] [pid 3521525:tid 3521525] [client 144.172.105.5:32886] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/thickbox/error_log
[Thu Jul 30 14:35:34.625779 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/content.php
[Thu Jul 30 14:35:35.291744 2026] [core:error] [pid 3521650:tid 3521650] (13)Permission denied: [client 216.73.216.199:49713] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS0/port
[Thu Jul 30 14:35:35.392191 2026] [ssl:error] [pid 3521650:tid 3521650] (70014)End of file found: [client 216.73.216.199:49713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:35.893321 2026] [ssl:error] [pid 3517372:tid 3517372] (EAI 2)Name or service not known: [client 144.76.19.72:49644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:35.893365 2026] [ssl:error] [pid 3517372:tid 3517372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:35.951929 2026] [ssl:error] [pid 3512381:tid 3512381] (EAI 2)Name or service not known: [client 144.76.19.72:49646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:35.951952 2026] [ssl:error] [pid 3512381:tid 3512381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:37.193591 2026] [access_compat:error] [pid 3517366:tid 3517366] [client 45.158.164.139:53320] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:35:38.145651 2026] [security2:error] [pid 3517219:tid 3517219] [client 114.119.158.38:52071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574985600/request_format~html/cat_ids~103"] [unique_id "amtTKg01IuIXOfSrHWOpRgAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E29-11-2019
[Thu Jul 30 14:35:38.292581 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/plugins/wp-conflg.php
[Thu Jul 30 14:35:38.375343 2026] [security2:error] [pid 3521560:tid 3521560] [client 198.11.177.243:53452] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highcleresyndicates.co.uk"] [uri "/"] [unique_id "amtTKuNuHw7pcrErpdeJewAAAC4"]
[Thu Jul 30 14:35:38.700607 2026] [core:error] [pid 3518990:tid 3518990] (13)Permission denied: [client 216.73.216.199:14081] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS3/device/driver/uevent
[Thu Jul 30 14:35:39.005479 2026] [ssl:error] [pid 3520037:tid 3520037] (EAI 2)Name or service not known: [client 144.76.19.72:49658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:39.005510 2026] [ssl:error] [pid 3520037:tid 3520037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:39.060347 2026] [ssl:error] [pid 3518987:tid 3518987] (EAI 2)Name or service not known: [client 144.76.19.72:49668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:39.060377 2026] [ssl:error] [pid 3518987:tid 3518987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:39.303136 2026] [ssl:error] [pid 3518990:tid 3518990] (70014)End of file found: [client 216.73.216.199:14081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:39.577149 2026] [security2:error] [pid 3520087:tid 3520087] [client 114.119.158.38:52081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574985600/request_format~html/cat_ids~103"] [unique_id "amtTKyFhuFwypRnrcagVrgAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E29-11-2019
[Thu Jul 30 14:35:40.510740 2026] [ssl:error] [pid 3517363:tid 3517363] (70014)End of file found: [client 216.73.216.199:27798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:41.725886 2026] [security2:error] [pid 3514765:tid 3514765] [client 185.191.171.13:37222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/luftwaffe-aces-still-alive"] [unique_id "amtTLTO7rdauoc7VkSNQTwAAACo"]
[Thu Jul 30 14:35:42.114154 2026] [ssl:error] [pid 3521650:tid 3521650] (EAI 2)Name or service not known: [client 144.76.19.72:34588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:42.114198 2026] [ssl:error] [pid 3521650:tid 3521650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:42.170305 2026] [ssl:error] [pid 3521561:tid 3521561] (EAI 2)Name or service not known: [client 144.76.19.72:34596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:42.170340 2026] [ssl:error] [pid 3521561:tid 3521561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:42.800472 2026] [authz_core:error] [pid 3521525:tid 3521525] [client 144.172.105.5:32886] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js0a28c1/error_log
[Thu Jul 30 14:35:42.918280 2026] [ssl:error] [pid 3517288:tid 3517288] (70014)End of file found: [client 216.73.216.199:58667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:42.956757 2026] [access_compat:error] [pid 3516553:tid 3516553] [client 103.59.153.118:63953] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:35:43.194262 2026] [authz_core:error] [pid 3521525:tid 3521525] [client 144.172.105.5:32886] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/l10n/error_log
[Thu Jul 30 14:35:45.227314 2026] [ssl:error] [pid 3521146:tid 3521146] (EAI 2)Name or service not known: [client 144.76.19.72:34612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:45.227356 2026] [ssl:error] [pid 3521146:tid 3521146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:45.285985 2026] [ssl:error] [pid 3520931:tid 3520931] (EAI 2)Name or service not known: [client 144.76.19.72:34626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:45.286020 2026] [ssl:error] [pid 3520931:tid 3520931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:45.926599 2026] [ssl:error] [pid 3517219:tid 3517219] (70014)End of file found: [client 216.73.216.199:13241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:46.104714 2026] [authz_core:error] [pid 3520868:tid 3520868] [client 144.172.105.5:41748] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 14:35:46.527567 2026] [core:error] [pid 3518990:tid 3518990] (13)Permission denied: [client 216.73.216.199:11127] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty53/subsystem/ttyS2/line
[Thu Jul 30 14:35:47.018206 2026] [authz_core:error] [pid 3504534:tid 3504534] [client 144.172.105.5:40280] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 14:35:47.130166 2026] [ssl:error] [pid 3518990:tid 3518990] (70014)End of file found: [client 216.73.216.199:11127] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:48.339820 2026] [ssl:error] [pid 3515094:tid 3515094] (EAI 2)Name or service not known: [client 144.76.19.72:34634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:48.339861 2026] [ssl:error] [pid 3515094:tid 3515094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:48.394510 2026] [ssl:error] [pid 3504534:tid 3504534] (EAI 2)Name or service not known: [client 144.76.19.72:34646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:48.394540 2026] [ssl:error] [pid 3504534:tid 3504534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:50.147801 2026] [ssl:error] [pid 3520868:tid 3520868] (70014)End of file found: [client 216.73.216.199:9451] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:51.450374 2026] [ssl:error] [pid 3517361:tid 3517361] (EAI 2)Name or service not known: [client 144.76.19.72:43726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:51.450421 2026] [ssl:error] [pid 3517361:tid 3517361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:51.504675 2026] [ssl:error] [pid 3516436:tid 3516436] (EAI 2)Name or service not known: [client 144.76.19.72:43730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:51.504706 2026] [ssl:error] [pid 3516436:tid 3516436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:52.853332 2026] [core:error] [pid 3520931:tid 3520931] (13)Permission denied: [client 216.73.216.199:64229] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty55/subsystem/ttyS1/closing_wait
[Thu Jul 30 14:35:53.596742 2026] [access_compat:error] [pid 3517317:tid 3517317] [client 103.59.153.118:64447] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:35:54.057575 2026] [ssl:error] [pid 3518955:tid 3518955] (70014)End of file found: [client 216.73.216.199:19612] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:54.583678 2026] [ssl:error] [pid 3521146:tid 3521146] (EAI 2)Name or service not known: [client 144.76.19.72:43736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:54.583711 2026] [ssl:error] [pid 3521146:tid 3521146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:54.689394 2026] [ssl:error] [pid 3521524:tid 3521524] (EAI 2)Name or service not known: [client 144.76.19.72:43744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:54.689437 2026] [ssl:error] [pid 3521524:tid 3521524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:55.480553 2026] [security2:error] [pid 3521525:tid 3521525] [client 198.244.226.166:33378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtTOwhdutUVc20fB5VRYgAAAC0"]
[Thu Jul 30 14:35:55.868636 2026] [ssl:error] [pid 3520931:tid 3520931] (70014)End of file found: [client 216.73.216.199:64229] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:35:56.520646 2026] [security2:error] [pid 3520868:tid 3520868] [client 54.38.147.20:17184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/tag/enterprise-and-regulatory-reform-act/"] [unique_id "amtTPOMAP19LKzlEZHoNpAAAAAk"]
[Thu Jul 30 14:35:57.129546 2026] [lsapi:warn] [pid 3513654:tid 3513654] [client 192.42.116.18:21401] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n, referer: epmsonline.co.uk
[Thu Jul 30 14:35:57.747378 2026] [ssl:error] [pid 3522483:tid 3522483] (EAI 2)Name or service not known: [client 144.76.19.72:43752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:57.747415 2026] [ssl:error] [pid 3522483:tid 3522483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:57.802344 2026] [ssl:error] [pid 3522484:tid 3522484] (EAI 2)Name or service not known: [client 144.76.19.72:43756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:35:57.802383 2026] [ssl:error] [pid 3522484:tid 3522484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:35:58.877840 2026] [ssl:error] [pid 3514765:tid 3514765] (70014)End of file found: [client 216.73.216.199:43276] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:00.363145 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/cloud.php
[Thu Jul 30 14:36:00.595573 2026] [access_compat:error] [pid 3518987:tid 3518987] [client 103.59.153.118:64768] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:00.857465 2026] [ssl:error] [pid 3512381:tid 3512381] (EAI 2)Name or service not known: [client 144.76.19.72:61900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:00.857494 2026] [ssl:error] [pid 3512381:tid 3512381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:00.892589 2026] [ssl:error] [pid 3512322:tid 3512322] (70014)End of file found: [client 216.73.216.199:33862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:00.911547 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:61908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:00.911578 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:01.402698 2026] [access_compat:error] [pid 3522372:tid 3522372] [client 45.158.164.139:48404] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:36:01.472337 2026] [core:error] [pid 3520037:tid 3520037] (13)Permission denied: [client 216.73.216.199:52469] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/up2date-20260705
[Thu Jul 30 14:36:01.705835 2026] [access_compat:error] [pid 3514828:tid 3514828] [client 45.158.164.139:48412] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:36:02.240553 2026] [security2:error] [pid 3521650:tid 3521650] [client 85.208.96.200:30190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/pages/gallery/days-xi-to-xx/day-xvi.php"] [unique_id "amtTQr25kJNcxjQ0sxjrrgAAADQ"]
[Thu Jul 30 14:36:02.374172 2026] [security2:error] [pid 3512381:tid 3512381] [client 85.208.98.31:39872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9604.0.html"] [unique_id "amtTQgNrEN-bc014ZsZ2cwAAABM"]
[Thu Jul 30 14:36:02.437337 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/network/cloud.php
[Thu Jul 30 14:36:03.416550 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/cloud.php
[Thu Jul 30 14:36:03.909493 2026] [ssl:error] [pid 3520037:tid 3520037] (70014)End of file found: [client 216.73.216.199:52469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:03.990539 2026] [ssl:error] [pid 3521650:tid 3521650] (EAI 2)Name or service not known: [client 144.76.19.72:61924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:03.990564 2026] [ssl:error] [pid 3521650:tid 3521650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:04.046687 2026] [ssl:error] [pid 3521525:tid 3521525] (EAI 2)Name or service not known: [client 144.76.19.72:61934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:04.046726 2026] [ssl:error] [pid 3521525:tid 3521525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:04.256491 2026] [authz_core:error] [pid 3517219:tid 3517219] [client 144.172.105.5:37076] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 14:36:04.296353 2026] [access_compat:error] [pid 3519051:tid 3519051] [client 103.59.153.118:64946] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:04.825035 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/updates.php
[Thu Jul 30 14:36:06.204950 2026] [authz_core:error] [pid 3517359:tid 3517359] [client 144.172.105.5:57630] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/search/error_log
[Thu Jul 30 14:36:06.309362 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/user/cloud.php
[Thu Jul 30 14:36:06.637085 2026] [ssl:error] [pid 3514765:tid 3514765] (70014)End of file found: [client 216.73.216.199:43469] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:06.695944 2026] [core:error] [pid 3517317:tid 3517317] [client 66.249.66.45:58959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:06.695974 2026] [core:error] [pid 3517317:tid 3517317] [client 66.249.66.45:58959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:07.103542 2026] [ssl:error] [pid 3522873:tid 3522873] (EAI 2)Name or service not known: [client 144.76.19.72:61948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:07.103578 2026] [ssl:error] [pid 3522873:tid 3522873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:07.155222 2026] [ssl:error] [pid 3521650:tid 3521650] (EAI 2)Name or service not known: [client 144.76.19.72:61954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:07.155251 2026] [ssl:error] [pid 3521650:tid 3521650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:07.551911 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/coffee/cloud.php
[Thu Jul 30 14:36:08.169155 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/images/cloud.php
[Thu Jul 30 14:36:08.829681 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/avaa.php
[Thu Jul 30 14:36:08.887670 2026] [authz_core:error] [pid 3521650:tid 3521650] [client 144.172.105.5:57658] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 14:36:10.223695 2026] [ssl:error] [pid 3517363:tid 3517363] (EAI 2)Name or service not known: [client 144.76.19.72:62118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:10.223722 2026] [ssl:error] [pid 3517363:tid 3517363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:10.279632 2026] [ssl:error] [pid 3517367:tid 3517367] (EAI 2)Name or service not known: [client 144.76.19.72:62134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:10.279674 2026] [ssl:error] [pid 3517367:tid 3517367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:10.435587 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/js/widgets/cloud.php
[Thu Jul 30 14:36:10.926446 2026] [authz_core:error] [pid 3522992:tid 3522992] [client 144.172.105.5:57702] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 14:36:11.710798 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/cloud.php
[Thu Jul 30 14:36:12.343650 2026] [authz_core:error] [pid 3517367:tid 3517367] [client 66.249.66.33:57566] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:36:12.346570 2026] [authz_core:error] [pid 3517367:tid 3517367] [client 66.249.66.33:57566] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:36:12.361845 2026] [authz_core:error] [pid 3522992:tid 3522992] [client 144.172.105.5:57702] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/namespaced/error_log
[Thu Jul 30 14:36:12.389945 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/includes/cloud.php
[Thu Jul 30 14:36:12.964746 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/css/colors/blue/cloud.php
[Thu Jul 30 14:36:13.333777 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:62152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:13.333827 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:13.388221 2026] [ssl:error] [pid 3517219:tid 3517219] (EAI 2)Name or service not known: [client 144.76.19.72:62158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:13.388265 2026] [ssl:error] [pid 3517219:tid 3517219] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:13.564658 2026] [security2:error] [pid 3520991:tid 3520991] [client 200.8.17.120:44194] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTTRmBzyjY_ktLdSn5NAAAACQ"]
[Thu Jul 30 14:36:13.564704 2026] [security2:error] [pid 3520991:tid 3520991] [client 200.8.17.120:44194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTTRmBzyjY_ktLdSn5NAAAACQ"]
[Thu Jul 30 14:36:13.564955 2026] [security2:error] [pid 3520991:tid 3520991] [client 200.8.17.120:44194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTTRmBzyjY_ktLdSn5NAAAACQ"]
[Thu Jul 30 14:36:13.608877 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/cloud.php
[Thu Jul 30 14:36:13.634367 2026] [core:error] [pid 3517317:tid 3517317] (13)Permission denied: [client 216.73.216.199:45306] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS1/closing_wait
[Thu Jul 30 14:36:13.774772 2026] [authz_core:error] [pid 3522484:tid 3522484] [client 144.172.105.5:57714] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/namespaced/Core/error_log
[Thu Jul 30 14:36:14.224049 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/updates.php
[Thu Jul 30 14:36:14.901639 2026] [access_compat:error] [pid 3520931:tid 3520931] [client 103.59.153.118:65435] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:16.221172 2026] [security2:error] [pid 3522484:tid 3522484] [client 165.0.107.216:53050] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTUBep7HJBhNVuSEYxBAAAAA0"]
[Thu Jul 30 14:36:16.221220 2026] [security2:error] [pid 3522484:tid 3522484] [client 165.0.107.216:53050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTUBep7HJBhNVuSEYxBAAAAA0"]
[Thu Jul 30 14:36:16.221497 2026] [security2:error] [pid 3522484:tid 3522484] [client 165.0.107.216:53050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTUBep7HJBhNVuSEYxBAAAAA0"]
[Thu Jul 30 14:36:16.446013 2026] [ssl:error] [pid 3521524:tid 3521524] (EAI 2)Name or service not known: [client 144.76.19.72:62162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:16.446052 2026] [ssl:error] [pid 3521524:tid 3521524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:16.499144 2026] [ssl:error] [pid 3522992:tid 3522992] (EAI 2)Name or service not known: [client 144.76.19.72:62168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:16.499176 2026] [ssl:error] [pid 3522992:tid 3522992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:17.255460 2026] [ssl:error] [pid 3517317:tid 3517317] (70014)End of file found: [client 216.73.216.199:45306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:17.732846 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/alfanew.php
[Thu Jul 30 14:36:17.938689 2026] [core:error] [pid 3517219:tid 3517219] (13)Permission denied: [client 216.73.216.199:34165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS1/closing_wait
[Thu Jul 30 14:36:18.755617 2026] [ssl:error] [pid 3512381:tid 3512381] (70014)End of file found: [client 216.73.216.199:52880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:19.057143 2026] [core:error] [pid 3517219:tid 3517219] (13)Permission denied: [client 216.73.216.199:34165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty31/subsystem/ttyS2/uartclk
[Thu Jul 30 14:36:19.198724 2026] [authz_core:error] [pid 3522372:tid 3522372] [client 144.172.105.5:34010] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/namespaced/Core/ChaCha20/error_log
[Thu Jul 30 14:36:19.554973 2026] [ssl:error] [pid 3520991:tid 3520991] (EAI 2)Name or service not known: [client 144.76.19.72:61322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:19.555035 2026] [ssl:error] [pid 3520991:tid 3520991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:19.597922 2026] [security2:error] [pid 3504534:tid 3504534] [client 186.67.84.60:51054] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTU9mqXsUjvHFmOSzp_gAAAA8"]
[Thu Jul 30 14:36:19.597969 2026] [security2:error] [pid 3504534:tid 3504534] [client 186.67.84.60:51054] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTU9mqXsUjvHFmOSzp_gAAAA8"]
[Thu Jul 30 14:36:19.598203 2026] [security2:error] [pid 3504534:tid 3504534] [client 186.67.84.60:51054] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTU9mqXsUjvHFmOSzp_gAAAA8"]
[Thu Jul 30 14:36:19.606989 2026] [ssl:error] [pid 3522992:tid 3522992] (EAI 2)Name or service not known: [client 144.76.19.72:61324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:19.607012 2026] [ssl:error] [pid 3522992:tid 3522992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:19.658393 2026] [ssl:error] [pid 3517219:tid 3517219] (70014)End of file found: [client 216.73.216.199:34165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:20.118367 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/repeater.php
[Thu Jul 30 14:36:20.129126 2026] [core:error] [pid 3522372:tid 3522372] [client 20.104.16.169:37961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:20.129150 2026] [core:error] [pid 3522372:tid 3522372] [client 20.104.16.169:37961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:20.224444 2026] [authz_core:error] [pid 3522808:tid 3522808] [client 144.172.105.5:34030] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/namespaced/Core/Curve25519/error_log
[Thu Jul 30 14:36:20.394611 2026] [core:error] [pid 3518990:tid 3518990] [client 20.104.16.169:38507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:20.394635 2026] [core:error] [pid 3518990:tid 3518990] [client 20.104.16.169:38507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:20.479231 2026] [authz_core:error] [pid 3504534:tid 3504534] [client 34.69.199.55:55888] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 14:36:20.656007 2026] [core:error] [pid 3522372:tid 3522372] [client 20.104.16.169:38517] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:20.656031 2026] [core:error] [pid 3522372:tid 3522372] [client 20.104.16.169:38517] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:20.727102 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/repeater.php
[Thu Jul 30 14:36:20.916902 2026] [core:error] [pid 3522679:tid 3522679] [client 20.104.16.169:37968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:20.916935 2026] [core:error] [pid 3522679:tid 3522679] [client 20.104.16.169:37968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.094661 2026] [core:error] [pid 3520931:tid 3520931] [client 64.31.3.126:45523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 14:36:21.094684 2026] [core:error] [pid 3520931:tid 3520931] [client 64.31.3.126:45523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/
[Thu Jul 30 14:36:21.176698 2026] [core:error] [pid 3514764:tid 3514764] [client 20.104.16.169:38470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.176720 2026] [core:error] [pid 3514764:tid 3514764] [client 20.104.16.169:38470] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.252666 2026] [authz_core:error] [pid 3514691:tid 3514691] [client 144.172.105.5:34050] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/error_log
[Thu Jul 30 14:36:21.333715 2026] [access_compat:error] [pid 3520932:tid 3520932] [client 20.215.191.139:33586] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/repeater.php
[Thu Jul 30 14:36:21.440383 2026] [core:error] [pid 3522372:tid 3522372] [client 20.104.16.169:38467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.440410 2026] [core:error] [pid 3522372:tid 3522372] [client 20.104.16.169:38467] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.731196 2026] [core:error] [pid 3520037:tid 3520037] [client 20.104.16.169:38518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.731219 2026] [core:error] [pid 3520037:tid 3520037] [client 20.104.16.169:38518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.988703 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:37966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.988725 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:37966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:21.993992 2026] [core:crit] [pid 3514691:tid 3514691] (13)Permission denied: [client 64.31.3.126:39311] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/
[Thu Jul 30 14:36:22.249971 2026] [core:error] [pid 3520931:tid 3520931] [client 20.104.16.169:38490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:22.249996 2026] [core:error] [pid 3520931:tid 3520931] [client 20.104.16.169:38490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:22.520121 2026] [core:error] [pid 3521525:tid 3521525] [client 20.104.16.169:38489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:22.520180 2026] [core:error] [pid 3521525:tid 3521525] [client 20.104.16.169:38489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:22.659975 2026] [ssl:error] [pid 3522992:tid 3522992] (EAI 2)Name or service not known: [client 144.76.19.72:61338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:22.659998 2026] [ssl:error] [pid 3522992:tid 3522992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:22.716931 2026] [ssl:error] [pid 3522484:tid 3522484] (EAI 2)Name or service not known: [client 144.76.19.72:61354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:22.716960 2026] [ssl:error] [pid 3522484:tid 3522484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:22.781028 2026] [core:error] [pid 3520931:tid 3520931] [client 20.104.16.169:38488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:22.781054 2026] [core:error] [pid 3520931:tid 3520931] [client 20.104.16.169:38488] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.074722 2026] [core:error] [pid 3521525:tid 3521525] [client 20.104.16.169:37980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.074755 2026] [core:error] [pid 3521525:tid 3521525] [client 20.104.16.169:37980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.324495 2026] [authz_core:error] [pid 3522484:tid 3522484] [client 144.172.105.5:34084] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/namespaced/Core/Poly1305/error_log
[Thu Jul 30 14:36:23.336480 2026] [core:error] [pid 3521483:tid 3521483] [client 20.104.16.169:38468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.336500 2026] [core:error] [pid 3521483:tid 3521483] [client 20.104.16.169:38468] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.635382 2026] [core:error] [pid 3521524:tid 3521524] [client 20.104.16.169:38498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.635408 2026] [core:error] [pid 3521524:tid 3521524] [client 20.104.16.169:38498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.909786 2026] [core:error] [pid 3523448:tid 3523448] [client 20.104.16.169:37965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.909845 2026] [core:error] [pid 3523448:tid 3523448] [client 20.104.16.169:37965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:23.978824 2026] [authz_core:error] [pid 3521483:tid 3521483] [client 144.172.105.5:34100] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/error_log
[Thu Jul 30 14:36:24.173159 2026] [core:error] [pid 3512381:tid 3512381] [client 20.104.16.169:37958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:24.173182 2026] [core:error] [pid 3512381:tid 3512381] [client 20.104.16.169:37958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:24.442322 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:38515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:24.442349 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:38515] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:24.741962 2026] [core:error] [pid 3517366:tid 3517366] [client 20.104.16.169:37964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:24.741987 2026] [core:error] [pid 3517366:tid 3517366] [client 20.104.16.169:37964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.036172 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:38466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.036193 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:38466] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.131753 2026] [authz_core:error] [pid 3522992:tid 3522992] [client 144.172.105.5:34108] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 14:36:25.297857 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:38491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.297877 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:38491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.541858 2026] [access_compat:error] [pid 3521483:tid 3521483] [client 103.59.153.118:49543] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:25.565137 2026] [core:error] [pid 3512381:tid 3512381] [client 20.104.16.169:38504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.565178 2026] [core:error] [pid 3512381:tid 3512381] [client 20.104.16.169:38504] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.772597 2026] [ssl:error] [pid 3517219:tid 3517219] (EAI 2)Name or service not known: [client 144.76.19.72:61364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:25.772626 2026] [ssl:error] [pid 3517219:tid 3517219] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:25.827230 2026] [ssl:error] [pid 3522992:tid 3522992] (EAI 2)Name or service not known: [client 144.76.19.72:61376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:25.827252 2026] [ssl:error] [pid 3522992:tid 3522992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:25.830020 2026] [core:error] [pid 3521650:tid 3521650] [client 20.104.16.169:38510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:25.830037 2026] [core:error] [pid 3521650:tid 3521650] [client 20.104.16.169:38510] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.112741 2026] [core:error] [pid 3523528:tid 3523528] [client 20.104.16.169:38512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.112779 2026] [core:error] [pid 3523528:tid 3523528] [client 20.104.16.169:38512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.283657 2026] [core:error] [pid 3504534:tid 3504534] (13)Permission denied: [client 216.73.216.199:20435] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty58/subsystem/ttyS2/closing_wait
[Thu Jul 30 14:36:26.372945 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:38493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.372970 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:38493] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.633879 2026] [core:error] [pid 3516555:tid 3516555] [client 20.104.16.169:38523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.633907 2026] [core:error] [pid 3516555:tid 3516555] [client 20.104.16.169:38523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.896454 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:37972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:26.896490 2026] [core:error] [pid 3517219:tid 3517219] [client 20.104.16.169:37972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.154536 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:38486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.154564 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:38486] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.456522 2026] [core:error] [pid 3521650:tid 3521650] [client 20.104.16.169:38495] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.456547 2026] [core:error] [pid 3521650:tid 3521650] [client 20.104.16.169:38495] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.737392 2026] [core:error] [pid 3523523:tid 3523523] [client 20.104.16.169:37779] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.737420 2026] [core:error] [pid 3523523:tid 3523523] [client 20.104.16.169:37779] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.999111 2026] [core:error] [pid 3521146:tid 3521146] [client 20.104.16.169:37976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:27.999133 2026] [core:error] [pid 3521146:tid 3521146] [client 20.104.16.169:37976] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:28.265592 2026] [core:error] [pid 3523562:tid 3523562] [client 20.104.16.169:38494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:28.265638 2026] [core:error] [pid 3523562:tid 3523562] [client 20.104.16.169:38494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:28.532775 2026] [core:error] [pid 3523565:tid 3523565] [client 20.104.16.169:38521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:28.532820 2026] [core:error] [pid 3523565:tid 3523565] [client 20.104.16.169:38521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:28.726584 2026] [ssl:error] [pid 3504534:tid 3504534] (70014)End of file found: [client 216.73.216.199:20435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:28.806201 2026] [core:error] [pid 3518987:tid 3518987] [client 20.104.16.169:38522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:28.806226 2026] [core:error] [pid 3518987:tid 3518987] [client 20.104.16.169:38522] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:28.894468 2026] [ssl:error] [pid 3523561:tid 3523561] (EAI 2)Name or service not known: [client 144.76.19.72:61402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:28.894503 2026] [ssl:error] [pid 3523561:tid 3523561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:28.948246 2026] [ssl:error] [pid 3512322:tid 3512322] (EAI 2)Name or service not known: [client 144.76.19.72:61414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:28.948292 2026] [ssl:error] [pid 3512322:tid 3512322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:29.093200 2026] [core:error] [pid 3512381:tid 3512381] [client 20.104.16.169:37959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:29.093226 2026] [core:error] [pid 3512381:tid 3512381] [client 20.104.16.169:37959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:29.379320 2026] [core:error] [pid 3523563:tid 3523563] [client 20.104.16.169:38511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:29.379356 2026] [core:error] [pid 3523563:tid 3523563] [client 20.104.16.169:38511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:29.651016 2026] [core:error] [pid 3523528:tid 3523528] [client 20.104.16.169:37970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:29.651043 2026] [core:error] [pid 3523528:tid 3523528] [client 20.104.16.169:37970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:29.942776 2026] [core:error] [pid 3523561:tid 3523561] [client 20.104.16.169:38518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:29.942802 2026] [core:error] [pid 3523561:tid 3523561] [client 20.104.16.169:38518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:30.212762 2026] [core:error] [pid 3520037:tid 3520037] [client 20.104.16.169:37994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:30.212803 2026] [core:error] [pid 3520037:tid 3520037] [client 20.104.16.169:37994] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:30.506009 2026] [core:error] [pid 3518987:tid 3518987] [client 20.104.16.169:38489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:30.506033 2026] [core:error] [pid 3518987:tid 3518987] [client 20.104.16.169:38489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:30.612337 2026] [core:error] [pid 3523566:tid 3523566] (13)Permission denied: [client 216.73.216.199:56129] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS1/irq
[Thu Jul 30 14:36:30.771943 2026] [core:error] [pid 3522484:tid 3522484] [client 20.104.16.169:38505] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:30.771970 2026] [core:error] [pid 3522484:tid 3522484] [client 20.104.16.169:38505] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.083912 2026] [core:error] [pid 3523561:tid 3523561] [client 20.104.16.169:38503] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.083941 2026] [core:error] [pid 3523561:tid 3523561] [client 20.104.16.169:38503] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.213916 2026] [ssl:error] [pid 3523566:tid 3523566] (70014)End of file found: [client 216.73.216.199:56129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:31.359848 2026] [core:error] [pid 3517367:tid 3517367] [client 20.104.16.169:37986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.359881 2026] [core:error] [pid 3517367:tid 3517367] [client 20.104.16.169:37986] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.519356 2026] [ssl:error] [pid 3521525:tid 3521525] (70014)End of file found: [client 216.73.216.199:61095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:31.635769 2026] [core:error] [pid 3515094:tid 3515094] [client 20.104.16.169:38501] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.635794 2026] [core:error] [pid 3515094:tid 3515094] [client 20.104.16.169:38501] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.930380 2026] [core:error] [pid 3523565:tid 3523565] [client 20.104.16.169:38525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:31.930433 2026] [core:error] [pid 3523565:tid 3523565] [client 20.104.16.169:38525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:32.001912 2026] [ssl:error] [pid 3518987:tid 3518987] (EAI 2)Name or service not known: [client 144.76.19.72:41290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:32.001938 2026] [ssl:error] [pid 3518987:tid 3518987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:32.059065 2026] [ssl:error] [pid 3515094:tid 3515094] (EAI 2)Name or service not known: [client 144.76.19.72:41300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:32.059102 2026] [ssl:error] [pid 3515094:tid 3515094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:32.170711 2026] [access_compat:error] [pid 3521562:tid 3521562] [client 103.59.153.118:49865] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:32.238894 2026] [authz_core:error] [pid 3522992:tid 3522992] [client 144.172.105.5:43584] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/AES/error_log
[Thu Jul 30 14:36:32.240641 2026] [core:error] [pid 3521524:tid 3521524] [client 20.104.16.169:38008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:32.240662 2026] [core:error] [pid 3521524:tid 3521524] [client 20.104.16.169:38008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:32.541119 2026] [core:error] [pid 3522484:tid 3522484] [client 20.104.16.169:37760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:32.541149 2026] [core:error] [pid 3522484:tid 3522484] [client 20.104.16.169:37760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:32.816165 2026] [core:error] [pid 3523565:tid 3523565] [client 20.104.16.169:38482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:32.816191 2026] [core:error] [pid 3523565:tid 3523565] [client 20.104.16.169:38482] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:33.094092 2026] [core:error] [pid 3522808:tid 3522808] [client 20.104.16.169:37770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:33.094118 2026] [core:error] [pid 3522808:tid 3522808] [client 20.104.16.169:37770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:33.352791 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:37972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:33.352820 2026] [core:error] [pid 3522992:tid 3522992] [client 20.104.16.169:37972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:36:33.643358 2026] [authz_core:error] [pid 3523562:tid 3523562] [client 144.172.105.5:43598] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/ChaCha20/error_log
[Thu Jul 30 14:36:34.685598 2026] [authz_core:error] [pid 3523560:tid 3523560] [client 144.172.105.5:43616] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/Curve25519/error_log
[Thu Jul 30 14:36:35.116421 2026] [ssl:error] [pid 3520932:tid 3520932] (EAI 2)Name or service not known: [client 144.76.19.72:41320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:35.116588 2026] [ssl:error] [pid 3520932:tid 3520932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:35.168630 2026] [ssl:error] [pid 3522484:tid 3522484] (EAI 2)Name or service not known: [client 144.76.19.72:41326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:35.168655 2026] [ssl:error] [pid 3522484:tid 3522484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:36.242374 2026] [authz_core:error] [pid 3519055:tid 3519055] [client 144.172.105.5:60910] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core/Poly1305/error_log
[Thu Jul 30 14:36:36.282022 2026] [access_compat:error] [pid 3523567:tid 3523567] [client 103.59.153.118:50066] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:37.266875 2026] [authz_core:error] [pid 3503480:tid 3503480] [client 144.172.105.5:60912] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 14:36:38.244555 2026] [ssl:error] [pid 3520037:tid 3520037] (EAI 2)Name or service not known: [client 144.76.19.72:41360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:38.244585 2026] [ssl:error] [pid 3520037:tid 3520037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:38.301946 2026] [ssl:error] [pid 3520991:tid 3520991] (EAI 2)Name or service not known: [client 144.76.19.72:41362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:38.301981 2026] [ssl:error] [pid 3520991:tid 3520991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:40.635811 2026] [core:error] [pid 3523488:tid 3523488] (13)Permission denied: [client 216.73.216.199:24682] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:15/subsystem/ttyS3/irq
[Thu Jul 30 14:36:41.357661 2026] [ssl:error] [pid 3513191:tid 3513191] (EAI 2)Name or service not known: [client 144.76.19.72:53212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:41.357694 2026] [ssl:error] [pid 3513191:tid 3513191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:41.410670 2026] [ssl:error] [pid 3521483:tid 3521483] (EAI 2)Name or service not known: [client 144.76.19.72:53220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:41.410707 2026] [ssl:error] [pid 3521483:tid 3521483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:41.473942 2026] [ssl:error] [pid 3514765:tid 3514765] (70014)End of file found: [client 216.73.216.199:15546] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:41.774163 2026] [core:error] [pid 3523488:tid 3523488] (13)Permission denied: [client 216.73.216.199:24682] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS3/closing_wait
[Thu Jul 30 14:36:41.828584 2026] [access_compat:error] [pid 3523567:tid 3523567] [client 45.158.164.139:40208] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:36:42.378306 2026] [core:crit] [pid 3523488:tid 3523488] (13)Permission denied: [client 216.73.216.199:24682] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/initramfs/log/private/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/initramfs/log/private/' is executable
[Thu Jul 30 14:36:42.503599 2026] [security2:error] [pid 3512322:tid 3512322] [client 85.208.96.201:46014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/ridgecrest,-ca-mugshots"] [unique_id "amtTal6XDKwV1jtEHFmovQAAAAo"]
[Thu Jul 30 14:36:42.935248 2026] [authz_core:error] [pid 3517370:tid 3517370] [client 144.172.105.5:60994] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core32/ChaCha20/error_log
[Thu Jul 30 14:36:43.279338 2026] [core:error] [pid 3523488:tid 3523488] (13)Permission denied: [client 216.73.216.199:24682] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS0/iomem_base
[Thu Jul 30 14:36:43.943959 2026] [authz_core:error] [pid 3523567:tid 3523567] [client 144.172.105.5:32780] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core32/Curve25519/error_log
[Thu Jul 30 14:36:44.464702 2026] [ssl:error] [pid 3517367:tid 3517367] (EAI 2)Name or service not known: [client 144.76.19.72:53226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:44.464732 2026] [ssl:error] [pid 3517367:tid 3517367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:44.519710 2026] [ssl:error] [pid 3523525:tid 3523525] (EAI 2)Name or service not known: [client 144.76.19.72:53234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:44.519740 2026] [ssl:error] [pid 3523525:tid 3523525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:44.784643 2026] [ssl:error] [pid 3523488:tid 3523488] (70014)End of file found: [client 216.73.216.199:24682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:45.086233 2026] [ssl:error] [pid 3523528:tid 3523528] (70014)End of file found: [client 216.73.216.199:8973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:45.552930 2026] [authz_core:error] [pid 3516553:tid 3516553] [client 144.172.105.5:32786] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/sodium_compat/src/Core32/Poly1305/error_log
[Thu Jul 30 14:36:46.219748 2026] [security2:error] [pid 3521483:tid 3521483] [client 66.93.12.85:41062] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "application/xhtml+xml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "sijames.com"] [uri "/"] [unique_id "amtTbi_RHWOc9XraBLr1oAAAACI"]
[Thu Jul 30 14:36:46.220682 2026] [security2:error] [pid 3521483:tid 3521483] [client 66.93.12.85:41062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sijames.com"] [uri "/"] [unique_id "amtTbi_RHWOc9XraBLr1oAAAACI"]
[Thu Jul 30 14:36:46.220937 2026] [security2:error] [pid 3521483:tid 3521483] [client 66.93.12.85:41062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "sijames.com"] [uri "/"] [unique_id "amtTbi_RHWOc9XraBLr1oAAAACI"]
[Thu Jul 30 14:36:46.934680 2026] [access_compat:error] [pid 3517367:tid 3517367] [client 103.59.153.118:50564] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:47.215959 2026] [ssl:error] [pid 3518990:tid 3518990] (70014)End of file found: [client 216.73.216.199:6981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:47.223716 2026] [access_compat:error] [pid 3522992:tid 3522992] [client 100.52.193.21:52552] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/09/3-10-to-yuma.jpg
[Thu Jul 30 14:36:47.223809 2026] [access_compat:error] [pid 3522992:tid 3522992] [client 100.52.193.21:52552] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:36:47.573589 2026] [ssl:error] [pid 3523489:tid 3523489] (EAI 2)Name or service not known: [client 144.76.19.72:53246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:47.573625 2026] [ssl:error] [pid 3523489:tid 3523489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:47.630719 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:53262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:47.630758 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:47.987677 2026] [authz_core:error] [pid 3517370:tid 3517370] [client 144.172.105.5:36454] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/theme-compat/error_log
[Thu Jul 30 14:36:50.775673 2026] [ssl:error] [pid 3520087:tid 3520087] (EAI 2)Name or service not known: [client 144.76.19.72:31746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:50.775741 2026] [ssl:error] [pid 3520087:tid 3520087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:50.829506 2026] [ssl:error] [pid 3523489:tid 3523489] (EAI 2)Name or service not known: [client 144.76.19.72:31748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:50.829540 2026] [ssl:error] [pid 3523489:tid 3523489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:50.992727 2026] [authz_core:error] [pid 3521525:tid 3521525] [client 144.172.105.5:36508] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/widgets/error_log
[Thu Jul 30 14:36:53.558511 2026] [access_compat:error] [pid 3523567:tid 3523567] [client 103.59.153.118:50861] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:53.902236 2026] [ssl:error] [pid 3519055:tid 3519055] (EAI 2)Name or service not known: [client 144.76.19.72:31760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:53.902321 2026] [ssl:error] [pid 3519055:tid 3519055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:53.960693 2026] [ssl:error] [pid 3512381:tid 3512381] (EAI 2)Name or service not known: [client 144.76.19.72:31764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:53.960731 2026] [ssl:error] [pid 3512381:tid 3512381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:55.932775 2026] [authz_core:error] [pid 3518990:tid 3518990] [client 66.249.66.33:54400] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:36:55.935467 2026] [authz_core:error] [pid 3518990:tid 3518990] [client 66.249.66.33:54400] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:36:57.017696 2026] [ssl:error] [pid 3514828:tid 3514828] (EAI 2)Name or service not known: [client 144.76.19.72:31774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:57.017726 2026] [ssl:error] [pid 3514828:tid 3514828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:57.069303 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:31786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:36:57.069352 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:36:57.487190 2026] [core:error] [pid 3503480:tid 3503480] (13)Permission denied: [client 216.73.216.199:1415] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS1/port
[Thu Jul 30 14:36:57.552432 2026] [security2:error] [pid 3516553:tid 3516553] [client 185.191.171.5:23724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8756.0.html"] [unique_id "amtTebxrV_bKFJpSWwaM9wAAABk"]
[Thu Jul 30 14:36:57.606844 2026] [access_compat:error] [pid 3523562:tid 3523562] [client 103.59.153.118:51057] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:36:58.391057 2026] [core:error] [pid 3503480:tid 3503480] (13)Permission denied: [client 216.73.216.199:1415] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS1/irq
[Thu Jul 30 14:36:59.429330 2026] [ssl:error] [pid 3503480:tid 3503480] (70014)End of file found: [client 216.73.216.199:1415] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:36:59.735048 2026] [ssl:error] [pid 3522992:tid 3522992] (70014)End of file found: [client 216.73.216.199:64299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:00.121655 2026] [ssl:error] [pid 3522483:tid 3522483] (EAI 2)Name or service not known: [client 144.76.19.72:58534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:00.121692 2026] [ssl:error] [pid 3522483:tid 3522483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:00.177413 2026] [ssl:error] [pid 3514764:tid 3514764] (EAI 2)Name or service not known: [client 144.76.19.72:58542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:00.177458 2026] [ssl:error] [pid 3514764:tid 3514764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:03.041033 2026] [core:error] [pid 3515094:tid 3515094] (13)Permission denied: [client 216.73.216.199:41693] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/spooler-20260705
[Thu Jul 30 14:37:03.238267 2026] [ssl:error] [pid 3520087:tid 3520087] (EAI 2)Name or service not known: [client 144.76.19.72:58548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:03.238314 2026] [ssl:error] [pid 3520087:tid 3520087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:03.292763 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:58564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:03.292816 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:04.210835 2026] [security2:error] [pid 3521146:tid 3521146] [client 114.119.135.136:63945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574985600/cat_ids~18,104/request_format~html"] [unique_id "amtTgPViAUpoieA2TZYsnQAAACU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574985600/request_format~html/cat_ids~18
[Thu Jul 30 14:37:04.238663 2026] [access_compat:error] [pid 3522372:tid 3522372] [client 103.59.153.118:51358] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:04.754951 2026] [access_compat:error] [pid 3517370:tid 3517370] [client 45.158.164.139:57876] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:37:05.866228 2026] [security2:error] [pid 3523528:tid 3523528] [client 114.119.135.136:63959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574985600/cat_ids~18,104/request_format~html"] [unique_id "amtTgVPbkdfhv1brqYpCUAAAACY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574985600/request_format~html/cat_ids~18
[Thu Jul 30 14:37:06.346585 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:58580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:06.346634 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:06.378948 2026] [cgi:error] [pid 3515094:tid 3515094] [client 216.73.216.199:41693] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/get_page_cert.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:37:06.378999 2026] [cgi:error] [pid 3515094:tid 3515094] [client 216.73.216.199:41693] End of script output before headers: get_page_cert.pl
[Thu Jul 30 14:37:06.402371 2026] [ssl:error] [pid 3521146:tid 3521146] (EAI 2)Name or service not known: [client 144.76.19.72:58590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:06.402402 2026] [ssl:error] [pid 3521146:tid 3521146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:07.126738 2026] [ssl:error] [pid 3521525:tid 3521525] (70014)End of file found: [client 216.73.216.199:65298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:08.272600 2026] [access_compat:error] [pid 3524764:tid 3524764] [client 103.59.153.118:51553] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:09.162012 2026] [security2:error] [pid 3524820:tid 3524820] [client 114.119.130.154:49791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "soul-connections.co.uk"] [uri "/robots.txt"] [unique_id "amtThQe8z6YB3iqcE-VZGgAAABI"], referer: https://soul-connections.co.uk/robots.txt
[Thu Jul 30 14:37:09.507844 2026] [ssl:error] [pid 3521524:tid 3521524] (EAI 2)Name or service not known: [client 144.76.19.72:58606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:09.507871 2026] [ssl:error] [pid 3521524:tid 3521524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:09.565548 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:31112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:09.565580 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:10.051873 2026] [security2:error] [pid 3512381:tid 3512381] [client 110.249.202.22:63628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.auroravation.co.uk"] [uri "/robots.txt"] [unique_id "amtThgNrEN-bc014ZsZ2jwAAABM"]
[Thu Jul 30 14:37:11.777082 2026] [core:error] [pid 3517367:tid 3517367] (13)Permission denied: [client 216.73.216.199:12850] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS1/iomem_reg_shift
[Thu Jul 30 14:37:12.079976 2026] [core:error] [pid 3517367:tid 3517367] (13)Permission denied: [client 216.73.216.199:12850] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:15/subsystem/ttyS3/port
[Thu Jul 30 14:37:12.656614 2026] [ssl:error] [pid 3520087:tid 3520087] (EAI 2)Name or service not known: [client 144.76.19.72:31124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:12.656651 2026] [ssl:error] [pid 3520087:tid 3520087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:12.681010 2026] [core:error] [pid 3517367:tid 3517367] (13)Permission denied: [client 216.73.216.199:12850] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/acpiphp/uevent
[Thu Jul 30 14:37:12.713671 2026] [ssl:error] [pid 3517370:tid 3517370] (EAI 2)Name or service not known: [client 144.76.19.72:31138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:12.713716 2026] [ssl:error] [pid 3517370:tid 3517370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:13.584906 2026] [ssl:error] [pid 3517367:tid 3517367] (70014)End of file found: [client 216.73.216.199:12850] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:14.095875 2026] [core:error] [pid 3524764:tid 3524764] (13)Permission denied: [client 216.73.216.199:56815] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfit/sections/__ksymtab_gpl
[Thu Jul 30 14:37:15.771792 2026] [ssl:error] [pid 3523561:tid 3523561] (EAI 2)Name or service not known: [client 144.76.19.72:31146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:15.771834 2026] [ssl:error] [pid 3523561:tid 3523561] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:15.827142 2026] [ssl:error] [pid 3525345:tid 3525345] (EAI 2)Name or service not known: [client 144.76.19.72:31148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:15.827184 2026] [ssl:error] [pid 3525345:tid 3525345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:15.996639 2026] [core:error] [pid 3524764:tid 3524764] (13)Permission denied: [client 216.73.216.199:56815] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS1/irq
[Thu Jul 30 14:37:16.599163 2026] [core:error] [pid 3520087:tid 3520087] (13)Permission denied: [client 216.73.216.199:30670] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty49/subsystem/ttyS1/closing_wait
[Thu Jul 30 14:37:18.881390 2026] [ssl:error] [pid 3520037:tid 3520037] (EAI 2)Name or service not known: [client 144.76.19.72:31164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:18.881422 2026] [ssl:error] [pid 3520037:tid 3520037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:18.934636 2026] [access_compat:error] [pid 3523525:tid 3523525] [client 103.59.153.118:52054] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:18.939311 2026] [ssl:error] [pid 3525436:tid 3525436] (EAI 2)Name or service not known: [client 144.76.19.72:31178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:18.939345 2026] [ssl:error] [pid 3525436:tid 3525436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:21.650388 2026] [authz_core:error] [pid 3523527:tid 3523527] [client 216.73.216.199:3103] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Response/error_log
[Thu Jul 30 14:37:21.996473 2026] [ssl:error] [pid 3517321:tid 3517321] (EAI 2)Name or service not known: [client 144.76.19.72:35236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:21.996517 2026] [ssl:error] [pid 3517321:tid 3517321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:22.055563 2026] [ssl:error] [pid 3523448:tid 3523448] (EAI 2)Name or service not known: [client 144.76.19.72:35242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:22.055598 2026] [ssl:error] [pid 3523448:tid 3523448] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:22.290914 2026] [core:error] [pid 3522873:tid 3522873] (13)Permission denied: [client 216.73.216.199:25633] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory237/subsystem/uevent
[Thu Jul 30 14:37:25.114502 2026] [ssl:error] [pid 3512381:tid 3512381] (EAI 2)Name or service not known: [client 144.76.19.72:35244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:25.114534 2026] [ssl:error] [pid 3512381:tid 3512381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:25.171908 2026] [ssl:error] [pid 3517317:tid 3517317] (EAI 2)Name or service not known: [client 144.76.19.72:35252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:25.171940 2026] [ssl:error] [pid 3517317:tid 3517317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:27.226054 2026] [security2:error] [pid 3517316:tid 3517316] [client 82.156.34.74:53308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.refraction.co.uk"] [uri "/"] [unique_id "amtTlzOszqXx5nHH3amlYwAAADc"]
[Thu Jul 30 14:37:28.243580 2026] [ssl:error] [pid 3516436:tid 3516436] (EAI 2)Name or service not known: [client 144.76.19.72:35256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:28.243620 2026] [ssl:error] [pid 3516436:tid 3516436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:28.298285 2026] [ssl:error] [pid 3518990:tid 3518990] (EAI 2)Name or service not known: [client 144.76.19.72:35272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:28.298326 2026] [ssl:error] [pid 3518990:tid 3518990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:29.228290 2026] [ssl:error] [pid 3522873:tid 3522873] (70014)End of file found: [client 216.73.216.199:25633] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:29.557205 2026] [access_compat:error] [pid 3514765:tid 3514765] [client 103.59.153.118:52552] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:29.731465 2026] [core:error] [pid 3521524:tid 3521524] (13)Permission denied: [client 216.73.216.199:15274] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/total_objects
[Thu Jul 30 14:37:30.045003 2026] [security2:error] [pid 3521146:tid 3521146] [client 74.7.243.227:36832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.europeanfundingsupport.taylorshouse.com"] [uri "/"] [unique_id "amtTmvViAUpoieA2TZYspAAAACU"]
[Thu Jul 30 14:37:31.351308 2026] [ssl:error] [pid 3525345:tid 3525345] (EAI 2)Name or service not known: [client 144.76.19.72:48092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:31.351341 2026] [ssl:error] [pid 3525345:tid 3525345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:31.408613 2026] [ssl:error] [pid 3514828:tid 3514828] (EAI 2)Name or service not known: [client 144.76.19.72:48104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:31.408640 2026] [ssl:error] [pid 3514828:tid 3514828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:34.176654 2026] [security2:error] [pid 3514764:tid 3514764] [client 150.5.134.192:26083] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTnhsibdodUwEQz2B2IQAAACM"]
[Thu Jul 30 14:37:34.176701 2026] [security2:error] [pid 3514764:tid 3514764] [client 150.5.134.192:26083] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTnhsibdodUwEQz2B2IQAAACM"]
[Thu Jul 30 14:37:34.176962 2026] [security2:error] [pid 3514764:tid 3514764] [client 150.5.134.192:26083] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTnhsibdodUwEQz2B2IQAAACM"]
[Thu Jul 30 14:37:34.463498 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:48110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:34.463545 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:34.518195 2026] [ssl:error] [pid 3524518:tid 3524518] (EAI 2)Name or service not known: [client 144.76.19.72:48114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:34.518232 2026] [ssl:error] [pid 3524518:tid 3524518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:36.186339 2026] [access_compat:error] [pid 3524518:tid 3524518] [client 103.59.153.118:52853] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:37.573569 2026] [ssl:error] [pid 3523562:tid 3523562] (EAI 2)Name or service not known: [client 144.76.19.72:48128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:37.573609 2026] [ssl:error] [pid 3523562:tid 3523562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:37.629055 2026] [ssl:error] [pid 3521525:tid 3521525] (EAI 2)Name or service not known: [client 144.76.19.72:48130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:37.629101 2026] [ssl:error] [pid 3521525:tid 3521525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:37.871177 2026] [core:error] [pid 3523488:tid 3523488] (13)Permission denied: [client 216.73.216.199:17699] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/objects
[Thu Jul 30 14:37:38.758789 2026] [security2:error] [pid 3517367:tid 3517367] [client 150.5.134.192:26831] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTomWGK9_flFIjNHTgMAAAAEk"]
[Thu Jul 30 14:37:38.758842 2026] [security2:error] [pid 3517367:tid 3517367] [client 150.5.134.192:26831] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTomWGK9_flFIjNHTgMAAAAEk"]
[Thu Jul 30 14:37:38.759151 2026] [security2:error] [pid 3517367:tid 3517367] [client 150.5.134.192:26831] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTomWGK9_flFIjNHTgMAAAAEk"]
[Thu Jul 30 14:37:40.275230 2026] [access_compat:error] [pid 3522808:tid 3522808] [client 103.59.153.118:53052] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:40.683710 2026] [ssl:error] [pid 3523525:tid 3523525] (EAI 2)Name or service not known: [client 144.76.19.72:22282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:40.683743 2026] [ssl:error] [pid 3523525:tid 3523525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:40.738528 2026] [ssl:error] [pid 3514691:tid 3514691] (EAI 2)Name or service not known: [client 144.76.19.72:22290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:40.738565 2026] [ssl:error] [pid 3514691:tid 3514691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:41.214124 2026] [ssl:error] [pid 3522992:tid 3522992] (70014)End of file found: [client 216.73.216.199:5500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:42.092666 2026] [access_compat:error] [pid 3514691:tid 3514691] [client 45.158.164.139:47010] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:37:42.123352 2026] [ssl:error] [pid 3523488:tid 3523488] (70014)End of file found: [client 216.73.216.199:17699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:42.137923 2026] [core:crit] [pid 3523567:tid 3523567] (13)Permission denied: [client 121.229.156.120:45584] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:37:43.562389 2026] [security2:error] [pid 3517317:tid 3517317] [client 185.191.171.2:35944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/north-lane-technologies-san-antonio-tx"] [unique_id "amtTp2PrfYhYtL3cSFPM2gAAADg"]
[Thu Jul 30 14:37:43.797894 2026] [ssl:error] [pid 3517316:tid 3517316] (EAI 2)Name or service not known: [client 144.76.19.72:22304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:43.797927 2026] [ssl:error] [pid 3517316:tid 3517316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:43.850910 2026] [ssl:error] [pid 3524976:tid 3524976] (EAI 2)Name or service not known: [client 144.76.19.72:22316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:43.850944 2026] [ssl:error] [pid 3524976:tid 3524976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:43.906889 2026] [security2:error] [pid 3520037:tid 3520037] [client 77.65.214.113:57520] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtTp38KYWvmpwhqFqjrugAAAAQ"]
[Thu Jul 30 14:37:45.143694 2026] [security2:error] [pid 3522808:tid 3522808] [client 85.208.98.24:39452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTqRr1E62h3a4n2D0glQAAAA4"]
[Thu Jul 30 14:37:45.735126 2026] [core:error] [pid 3520087:tid 3520087] [client 66.249.66.8:59929] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:37:45.735162 2026] [core:error] [pid 3520087:tid 3520087] [client 66.249.66.8:59929] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:37:45.742513 2026] [ssl:error] [pid 3525475:tid 3525475] (70014)End of file found: [client 216.73.216.199:48824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:46.907551 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:22330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:46.907585 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:46.953091 2026] [ssl:error] [pid 3523525:tid 3523525] (70014)End of file found: [client 216.73.216.199:52114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:37:46.963619 2026] [ssl:error] [pid 3520087:tid 3520087] (EAI 2)Name or service not known: [client 144.76.19.72:22336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:46.963645 2026] [ssl:error] [pid 3520087:tid 3520087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:50.018870 2026] [ssl:error] [pid 3518989:tid 3518989] (EAI 2)Name or service not known: [client 144.76.19.72:34496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:50.018914 2026] [ssl:error] [pid 3518989:tid 3518989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:50.073772 2026] [ssl:error] [pid 3515967:tid 3515967] (EAI 2)Name or service not known: [client 144.76.19.72:34500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:50.073803 2026] [ssl:error] [pid 3515967:tid 3515967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:50.825401 2026] [access_compat:error] [pid 3522484:tid 3522484] [client 103.59.153.118:53547] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:53.129707 2026] [ssl:error] [pid 3525436:tid 3525436] (EAI 2)Name or service not known: [client 144.76.19.72:34514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:53.129732 2026] [ssl:error] [pid 3525436:tid 3525436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:53.182563 2026] [ssl:error] [pid 3516553:tid 3516553] (EAI 2)Name or service not known: [client 144.76.19.72:34524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:53.182593 2026] [ssl:error] [pid 3516553:tid 3516553] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:56.239152 2026] [ssl:error] [pid 3522808:tid 3522808] (EAI 2)Name or service not known: [client 144.76.19.72:34532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:56.239191 2026] [ssl:error] [pid 3522808:tid 3522808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:56.295400 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:34542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:56.295444 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:57.420952 2026] [access_compat:error] [pid 3522808:tid 3522808] [client 103.59.153.118:54020] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:37:59.347521 2026] [ssl:error] [pid 3517370:tid 3517370] (EAI 2)Name or service not known: [client 144.76.19.72:34548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:59.347556 2026] [ssl:error] [pid 3517370:tid 3517370] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:59.403784 2026] [ssl:error] [pid 3517319:tid 3517319] (EAI 2)Name or service not known: [client 144.76.19.72:34560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:37:59.403822 2026] [ssl:error] [pid 3517319:tid 3517319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:37:59.869074 2026] [authz_core:error] [pid 3522873:tid 3522873] [client 66.249.66.33:36913] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:37:59.871750 2026] [authz_core:error] [pid 3522873:tid 3522873] [client 66.249.66.33:36913] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:38:00.028042 2026] [ssl:error] [pid 3523567:tid 3523567] (70014)End of file found: [client 216.73.216.199:9175] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:00.330758 2026] [ssl:error] [pid 3522992:tid 3522992] (70014)End of file found: [client 216.73.216.199:38348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:01.484029 2026] [access_compat:error] [pid 3523448:tid 3523448] [client 103.59.153.118:54296] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:02.283534 2026] [security2:error] [pid 3523488:tid 3523488] [client 78.113.132.214:56250] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTuqVB04zcK0tHytTBAwAAAAg"]
[Thu Jul 30 14:38:02.283583 2026] [security2:error] [pid 3523488:tid 3523488] [client 78.113.132.214:56250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTuqVB04zcK0tHytTBAwAAAAg"]
[Thu Jul 30 14:38:02.283827 2026] [security2:error] [pid 3523488:tid 3523488] [client 78.113.132.214:56250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTuqVB04zcK0tHytTBAwAAAAg"]
[Thu Jul 30 14:38:02.474666 2026] [ssl:error] [pid 3520087:tid 3520087] (EAI 2)Name or service not known: [client 144.76.19.72:64458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:02.474703 2026] [ssl:error] [pid 3520087:tid 3520087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:02.529472 2026] [ssl:error] [pid 3525372:tid 3525372] (EAI 2)Name or service not known: [client 144.76.19.72:64466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:02.529509 2026] [ssl:error] [pid 3525372:tid 3525372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:03.081408 2026] [security2:error] [pid 3523488:tid 3523488] [client 167.71.32.67:57498] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "blow-hairstudio.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtTu6VB04zcK0tHytTBBAAAAAg"]
[Thu Jul 30 14:38:04.353408 2026] [security2:error] [pid 3514765:tid 3514765] [client 85.208.98.29:40818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTvDO7rdauoc7VkSNQ1AAAACo"]
[Thu Jul 30 14:38:04.377353 2026] [security2:error] [pid 3517367:tid 3517367] [client 37.77.53.111:60776] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTvGWGK9_flFIjNHTgPgAAAEk"]
[Thu Jul 30 14:38:04.377405 2026] [security2:error] [pid 3517367:tid 3517367] [client 37.77.53.111:60776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTvGWGK9_flFIjNHTgPgAAAEk"]
[Thu Jul 30 14:38:04.377672 2026] [security2:error] [pid 3517367:tid 3517367] [client 37.77.53.111:60776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTvGWGK9_flFIjNHTgPgAAAEk"]
[Thu Jul 30 14:38:04.855563 2026] [authz_core:error] [pid 3525373:tid 3525373] [client 66.249.66.33:50558] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:38:04.858519 2026] [authz_core:error] [pid 3525373:tid 3525373] [client 66.249.66.33:50558] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:38:05.586948 2026] [ssl:error] [pid 3517367:tid 3517367] (EAI 2)Name or service not known: [client 144.76.19.72:64480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:05.586982 2026] [ssl:error] [pid 3517367:tid 3517367] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:05.644515 2026] [ssl:error] [pid 3523528:tid 3523528] (EAI 2)Name or service not known: [client 144.76.19.72:64486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:05.644553 2026] [ssl:error] [pid 3523528:tid 3523528] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:07.923294 2026] [core:error] [pid 3515094:tid 3515094] (13)Permission denied: [client 216.73.216.199:29528] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu1/firmware_node/eject
[Thu Jul 30 14:38:08.175463 2026] [access_compat:error] [pid 3517370:tid 3517370] [client 103.59.153.118:54691] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:08.352752 2026] [security2:error] [pid 3504534:tid 3504534] [client 192.144.148.122:40424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.oliviamarjorie.com"] [uri "/"] [unique_id "amtTwNmqXsUjvHFmOSzqgAAAAA8"]
[Thu Jul 30 14:38:08.690943 2026] [access_compat:error] [pid 3520087:tid 3520087] [client 45.158.164.139:46108] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:38:08.699276 2026] [ssl:error] [pid 3527371:tid 3527371] (EAI 2)Name or service not known: [client 144.76.19.72:64490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:08.699311 2026] [ssl:error] [pid 3527371:tid 3527371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:08.751699 2026] [ssl:error] [pid 3527371:tid 3527371] (EAI 2)Name or service not known: [client 144.76.19.72:64496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:08.751722 2026] [ssl:error] [pid 3527371:tid 3527371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:08.958882 2026] [security2:error] [pid 3504534:tid 3504534] [client 197.184.116.61:27089] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTwNmqXsUjvHFmOSzqgQAAAA8"]
[Thu Jul 30 14:38:08.958928 2026] [security2:error] [pid 3504534:tid 3504534] [client 197.184.116.61:27089] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtTwNmqXsUjvHFmOSzqgQAAAA8"]
[Thu Jul 30 14:38:08.959172 2026] [security2:error] [pid 3504534:tid 3504534] [client 197.184.116.61:27089] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTwNmqXsUjvHFmOSzqgQAAAA8"]
[Thu Jul 30 14:38:11.808525 2026] [ssl:error] [pid 3526591:tid 3526591] (EAI 2)Name or service not known: [client 144.76.19.72:46400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:11.808561 2026] [ssl:error] [pid 3526591:tid 3526591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:11.866265 2026] [ssl:error] [pid 3518990:tid 3518990] (EAI 2)Name or service not known: [client 144.76.19.72:46402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:11.866313 2026] [ssl:error] [pid 3518990:tid 3518990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:12.110731 2026] [access_compat:error] [pid 3523488:tid 3523488] [client 103.59.153.118:54921] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:14.920334 2026] [ssl:error] [pid 3520087:tid 3520087] (EAI 2)Name or service not known: [client 144.76.19.72:46414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:14.920367 2026] [ssl:error] [pid 3520087:tid 3520087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:14.976381 2026] [ssl:error] [pid 3525372:tid 3525372] (EAI 2)Name or service not known: [client 144.76.19.72:46426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:14.976410 2026] [ssl:error] [pid 3525372:tid 3525372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:18.031929 2026] [ssl:error] [pid 3527695:tid 3527695] (EAI 2)Name or service not known: [client 144.76.19.72:46440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:18.031958 2026] [ssl:error] [pid 3527695:tid 3527695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:18.086859 2026] [ssl:error] [pid 3523528:tid 3523528] (EAI 2)Name or service not known: [client 144.76.19.72:46450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:18.086885 2026] [ssl:error] [pid 3523528:tid 3523528] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:21.143524 2026] [ssl:error] [pid 3520037:tid 3520037] (EAI 2)Name or service not known: [client 144.76.19.72:33820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:21.143555 2026] [ssl:error] [pid 3520037:tid 3520037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:21.197967 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:33822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:21.198000 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:22.747549 2026] [access_compat:error] [pid 3527696:tid 3527696] [client 103.59.153.118:55432] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:23.879939 2026] [security2:error] [pid 3518990:tid 3518990] [client 94.154.43.188:18504] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bigbangburgerbar.co.uk"] [uri "/.env"] [unique_id "amtTzwLXNCY_EgprTIo1DwAAABw"]
[Thu Jul 30 14:38:23.880153 2026] [security2:error] [pid 3518990:tid 3518990] [client 94.154.43.188:18504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bigbangburgerbar.co.uk"] [uri "/.env"] [unique_id "amtTzwLXNCY_EgprTIo1DwAAABw"]
[Thu Jul 30 14:38:23.880412 2026] [security2:error] [pid 3518990:tid 3518990] [client 94.154.43.188:18504] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtTzwLXNCY_EgprTIo1DwAAABw"]
[Thu Jul 30 14:38:23.990339 2026] [security2:error] [pid 3520037:tid 3520037] [client 85.208.96.210:39032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,930.0/prev_next,next.html"] [unique_id "amtTz38KYWvmpwhqFqjrxAAAAAQ"]
[Thu Jul 30 14:38:24.251492 2026] [ssl:error] [pid 3527371:tid 3527371] (EAI 2)Name or service not known: [client 144.76.19.72:33830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:24.251528 2026] [ssl:error] [pid 3527371:tid 3527371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:24.304685 2026] [ssl:error] [pid 3518990:tid 3518990] (EAI 2)Name or service not known: [client 144.76.19.72:33832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:24.304714 2026] [ssl:error] [pid 3518990:tid 3518990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:26.606762 2026] [core:error] [pid 3521483:tid 3521483] (13)Permission denied: [client 216.73.216.199:39424] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/cpu_partial
[Thu Jul 30 14:38:26.907993 2026] [ssl:error] [pid 3521483:tid 3521483] (70014)End of file found: [client 216.73.216.199:39424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:26.929244 2026] [security2:error] [pid 3521525:tid 3521525] [client 114.119.142.20:35595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~18"] [unique_id "amtT0ghdutUVc20fB5VR-wAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~18
[Thu Jul 30 14:38:27.359768 2026] [ssl:error] [pid 3527371:tid 3527371] (EAI 2)Name or service not known: [client 144.76.19.72:33838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:27.359801 2026] [ssl:error] [pid 3527371:tid 3527371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:27.415876 2026] [ssl:error] [pid 3524976:tid 3524976] (EAI 2)Name or service not known: [client 144.76.19.72:33852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:27.415901 2026] [ssl:error] [pid 3524976:tid 3524976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:27.822444 2026] [core:error] [pid 3523567:tid 3523567] (13)Permission denied: [client 216.73.216.199:34644] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/remote_node_defrag_ratio
[Thu Jul 30 14:38:28.839247 2026] [security2:error] [pid 3521525:tid 3521525] [client 114.119.142.20:35607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~18"] [unique_id "amtT1AhdutUVc20fB5VR_AAAAC0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~18
[Thu Jul 30 14:38:29.339682 2026] [core:error] [pid 3523567:tid 3523567] (13)Permission denied: [client 216.73.216.199:34644] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/userbwlimits
[Thu Jul 30 14:38:29.372873 2026] [authz_core:error] [pid 3524976:tid 3524976] [client 65.108.120.25:59656] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:38:29.531580 2026] [access_compat:error] [pid 3514765:tid 3514765] [client 103.59.153.118:55744] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:30.472107 2026] [ssl:error] [pid 3521524:tid 3521524] (EAI 2)Name or service not known: [client 144.76.19.72:60202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:30.472137 2026] [ssl:error] [pid 3521524:tid 3521524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:30.529693 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:60204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:30.529724 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:32.360725 2026] [ssl:error] [pid 3523567:tid 3523567] (70014)End of file found: [client 216.73.216.199:34644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:33.412645 2026] [access_compat:error] [pid 3523488:tid 3523488] [client 103.59.153.118:55934] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:33.566168 2026] [core:error] [pid 3528117:tid 3528117] (13)Permission denied: [client 216.73.216.199:10465] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/partial
[Thu Jul 30 14:38:33.581773 2026] [ssl:error] [pid 3524976:tid 3524976] (EAI 2)Name or service not known: [client 144.76.19.72:60208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:33.581802 2026] [ssl:error] [pid 3524976:tid 3524976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:33.637721 2026] [ssl:error] [pid 3520037:tid 3520037] (EAI 2)Name or service not known: [client 144.76.19.72:60218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:33.637753 2026] [ssl:error] [pid 3520037:tid 3520037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:35.003949 2026] [security2:error] [pid 3524764:tid 3524764] [client 43.164.1.211:56880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "amtT25xptwtH-F7jJ5AtLwAAAAw"]
[Thu Jul 30 14:38:35.108353 2026] [core:error] [pid 3528117:tid 3528117] (13)Permission denied: [client 216.73.216.199:10465] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UNIX/validate
[Thu Jul 30 14:38:35.724361 2026] [ssl:error] [pid 3528117:tid 3528117] (70014)End of file found: [client 216.73.216.199:10465] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:36.763089 2026] [ssl:error] [pid 3524764:tid 3524764] (EAI 2)Name or service not known: [client 144.76.19.72:60228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:36.763141 2026] [ssl:error] [pid 3524764:tid 3524764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:36.819692 2026] [ssl:error] [pid 3521146:tid 3521146] (EAI 2)Name or service not known: [client 144.76.19.72:60238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:36.819730 2026] [ssl:error] [pid 3521146:tid 3521146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:39.942185 2026] [ssl:error] [pid 3521483:tid 3521483] (70014)End of file found: [client 216.73.216.199:26766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:40.055926 2026] [access_compat:error] [pid 3525372:tid 3525372] [client 103.59.153.118:56236] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:40.409217 2026] [ssl:error] [pid 3523488:tid 3523488] (EAI 2)Name or service not known: [client 144.76.19.72:53970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:40.409250 2026] [ssl:error] [pid 3523488:tid 3523488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:40.469681 2026] [ssl:error] [pid 3513592:tid 3513592] (EAI 2)Name or service not known: [client 144.76.19.72:53972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:40.469710 2026] [ssl:error] [pid 3513592:tid 3513592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:43.124281 2026] [security2:error] [pid 3524518:tid 3524518] [client 43.157.142.101:47254] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-narvi.com"] [uri "/"] [unique_id "amtT4-1f7pidJrxt5mpLMAAAAAo"]
[Thu Jul 30 14:38:43.524517 2026] [ssl:error] [pid 3526591:tid 3526591] (EAI 2)Name or service not known: [client 144.76.19.72:53974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:43.524543 2026] [ssl:error] [pid 3526591:tid 3526591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:43.563953 2026] [core:error] [pid 3523489:tid 3523489] (13)Permission denied: [client 216.73.216.199:20295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip6_dst_cache/shrink
[Thu Jul 30 14:38:43.580480 2026] [ssl:error] [pid 3520037:tid 3520037] (EAI 2)Name or service not known: [client 144.76.19.72:53982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:43.580512 2026] [ssl:error] [pid 3520037:tid 3520037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:44.177549 2026] [access_compat:error] [pid 3523448:tid 3523448] [client 103.59.153.118:56441] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:44.381373 2026] [security2:error] [pid 3528380:tid 3528380] [client 185.191.171.8:61900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/breaking-point-credits-script"] [unique_id "amtT5AWoQZaRQ-AIA3JnpwAAAB0"]
[Thu Jul 30 14:38:45.428442 2026] [ssl:error] [pid 3514828:tid 3514828] (70014)End of file found: [client 216.73.216.199:1359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:45.996502 2026] [core:error] [pid 3523489:tid 3523489] (13)Permission denied: [client 216.73.216.199:20295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_conntrack/sections/__bug_table
[Thu Jul 30 14:38:46.598643 2026] [ssl:error] [pid 3523489:tid 3523489] (70014)End of file found: [client 216.73.216.199:20295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:46.674685 2026] [ssl:error] [pid 3521483:tid 3521483] (EAI 2)Name or service not known: [client 144.76.19.72:53986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:46.674716 2026] [ssl:error] [pid 3521483:tid 3521483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:46.849182 2026] [ssl:error] [pid 3528843:tid 3528843] (EAI 2)Name or service not known: [client 144.76.19.72:53988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:46.849226 2026] [ssl:error] [pid 3528843:tid 3528843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:46.885734 2026] [access_compat:error] [pid 3528843:tid 3528843] [client 45.158.164.139:36596] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:38:47.210160 2026] [core:error] [pid 3517317:tid 3517317] (13)Permission denied: [client 216.73.216.199:61999] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_async_pf/cpu_partial
[Thu Jul 30 14:38:47.717321 2026] [access_compat:error] [pid 3520037:tid 3520037] [client 45.158.164.139:36610] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:38:49.022269 2026] [ssl:error] [pid 3517317:tid 3517317] (70014)End of file found: [client 216.73.216.199:61999] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:49.903077 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:37436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:49.903117 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:49.961853 2026] [ssl:error] [pid 3528930:tid 3528930] (EAI 2)Name or service not known: [client 144.76.19.72:37446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:49.961889 2026] [ssl:error] [pid 3528930:tid 3528930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:51.783225 2026] [ssl:error] [pid 3528933:tid 3528933] (70014)End of file found: [client 216.73.216.199:29735] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:52.296124 2026] [core:error] [pid 3514828:tid 3514828] (13)Permission denied: [client 216.73.216.199:36643] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip6_mrt_cache/aliases
[Thu Jul 30 14:38:52.797861 2026] [lsapi:warn] [pid 3523567:tid 3523567] [client 18.198.201.161:50905] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:38:53.019000 2026] [ssl:error] [pid 3523489:tid 3523489] (EAI 2)Name or service not known: [client 144.76.19.72:37450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:53.019026 2026] [ssl:error] [pid 3523489:tid 3523489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:53.071537 2026] [ssl:error] [pid 3521483:tid 3521483] (EAI 2)Name or service not known: [client 144.76.19.72:37464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:53.071560 2026] [ssl:error] [pid 3521483:tid 3521483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:54.904659 2026] [access_compat:error] [pid 3523489:tid 3523489] [client 103.59.153.118:56938] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:38:55.584702 2026] [ssl:error] [pid 3514828:tid 3514828] (70014)End of file found: [client 216.73.216.199:36643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:56.157223 2026] [ssl:error] [pid 3517317:tid 3517317] (EAI 2)Name or service not known: [client 144.76.19.72:37480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:56.157259 2026] [ssl:error] [pid 3517317:tid 3517317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:56.211968 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:37490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:56.211996 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:56.789807 2026] [ssl:error] [pid 3528842:tid 3528842] (70014)End of file found: [client 216.73.216.199:41822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:57.860038 2026] [security2:error] [pid 3525345:tid 3525345] [client 43.167.236.228:39604] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtT8aKtuS_Fp-lHh1fOZAAAAAE"]
[Thu Jul 30 14:38:58.318014 2026] [ssl:error] [pid 3528887:tid 3528887] (70014)End of file found: [client 216.73.216.199:45388] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:38:59.312937 2026] [ssl:error] [pid 3528935:tid 3528935] (EAI 2)Name or service not known: [client 144.76.19.72:37502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:59.312974 2026] [ssl:error] [pid 3528935:tid 3528935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:38:59.369580 2026] [ssl:error] [pid 3528381:tid 3528381] (EAI 2)Name or service not known: [client 144.76.19.72:37504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:38:59.369609 2026] [ssl:error] [pid 3528381:tid 3528381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:01.523681 2026] [access_compat:error] [pid 3523488:tid 3523488] [client 103.59.153.118:57248] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:01.969821 2026] [core:error] [pid 3528937:tid 3528937] (13)Permission denied: [client 216.73.216.199:41461] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tw_sock_TCPv6/objects_partial
[Thu Jul 30 14:39:02.270770 2026] [security2:error] [pid 3528937:tid 3528937] [client 216.73.216.199:41461] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/logo.dat"] [unique_id "amtT9r5Y1aQi9oSEijlsaQAAADY"]
[Thu Jul 30 14:39:02.271039 2026] [security2:error] [pid 3528937:tid 3528937] [client 216.73.216.199:41461] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/logo.dat"] [unique_id "amtT9r5Y1aQi9oSEijlsaQAAADY"]
[Thu Jul 30 14:39:02.271271 2026] [security2:error] [pid 3528937:tid 3528937] [client 216.73.216.199:41461] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/logo.dat"] [unique_id "amtT9r5Y1aQi9oSEijlsaQAAADY"]
[Thu Jul 30 14:39:02.423412 2026] [ssl:error] [pid 3527695:tid 3527695] (EAI 2)Name or service not known: [client 144.76.19.72:24234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:02.423462 2026] [ssl:error] [pid 3527695:tid 3527695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:02.476598 2026] [ssl:error] [pid 3528933:tid 3528933] (EAI 2)Name or service not known: [client 144.76.19.72:24250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:02.476638 2026] [ssl:error] [pid 3528933:tid 3528933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:02.874112 2026] [ssl:error] [pid 3528937:tid 3528937] (70014)End of file found: [client 216.73.216.199:41461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:03.781437 2026] [security2:error] [pid 3527696:tid 3527696] [client 216.73.216.199:59982] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib/sysusers.d/basic.conf"] [unique_id "amtT9wCSdrxrro40_wvBFgAAABY"]
[Thu Jul 30 14:39:03.781733 2026] [security2:error] [pid 3527696:tid 3527696] [client 216.73.216.199:59982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib/sysusers.d/basic.conf"] [unique_id "amtT9wCSdrxrro40_wvBFgAAABY"]
[Thu Jul 30 14:39:03.781955 2026] [security2:error] [pid 3527696:tid 3527696] [client 216.73.216.199:59982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/cagefs-skeleton/lib/sysusers.d/basic.conf"] [unique_id "amtT9wCSdrxrro40_wvBFgAAABY"]
[Thu Jul 30 14:39:05.453375 2026] [security2:error] [pid 3521146:tid 3521146] [client 85.208.96.206:38438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5718.0.html"] [unique_id "amtT-fViAUpoieA2TZYs3gAAACU"]
[Thu Jul 30 14:39:05.525847 2026] [access_compat:error] [pid 3528886:tid 3528886] [client 103.59.153.118:57439] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:05.534726 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:24266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:05.534753 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:05.591107 2026] [ssl:error] [pid 3528843:tid 3528843] (EAI 2)Name or service not known: [client 144.76.19.72:24282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:05.591134 2026] [ssl:error] [pid 3528843:tid 3528843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:06.514618 2026] [core:error] [pid 3527696:tid 3527696] (13)Permission denied: [client 216.73.216.199:59982] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-2k/trace
[Thu Jul 30 14:39:07.721514 2026] [ssl:error] [pid 3527696:tid 3527696] (70014)End of file found: [client 216.73.216.199:59982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:08.646530 2026] [ssl:error] [pid 3522873:tid 3522873] (EAI 2)Name or service not known: [client 144.76.19.72:24286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:08.646560 2026] [ssl:error] [pid 3522873:tid 3522873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:08.697733 2026] [ssl:error] [pid 3528381:tid 3528381] (EAI 2)Name or service not known: [client 144.76.19.72:24302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:08.697760 2026] [ssl:error] [pid 3528381:tid 3528381] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:09.326998 2026] [ssl:error] [pid 3527478:tid 3527478] (70014)End of file found: [client 216.73.216.199:65008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:09.609205 2026] [ssl:error] [pid 3528884:tid 3528884] (70014)End of file found: [client 216.73.216.199:29337] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:09.919456 2026] [ssl:error] [pid 3528885:tid 3528885] (70014)End of file found: [client 216.73.216.199:55879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:10.862814 2026] [security2:error] [pid 3525475:tid 3525475] [client 47.243.152.180:41297] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtT_gjWMEyY1Osr4LBjnAAAACk"]
[Thu Jul 30 14:39:10.862876 2026] [security2:error] [pid 3525475:tid 3525475] [client 47.243.152.180:41297] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtT_gjWMEyY1Osr4LBjnAAAACk"]
[Thu Jul 30 14:39:10.863145 2026] [security2:error] [pid 3525475:tid 3525475] [client 47.243.152.180:41297] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtT_gjWMEyY1Osr4LBjnAAAACk"]
[Thu Jul 30 14:39:11.767749 2026] [ssl:error] [pid 3520087:tid 3520087] (EAI 2)Name or service not known: [client 144.76.19.72:56610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:11.767796 2026] [ssl:error] [pid 3520087:tid 3520087] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:11.823416 2026] [ssl:error] [pid 3521146:tid 3521146] (EAI 2)Name or service not known: [client 144.76.19.72:56616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:11.823451 2026] [ssl:error] [pid 3521146:tid 3521146] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:12.173612 2026] [access_compat:error] [pid 3528117:tid 3528117] [client 103.59.153.118:57744] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:12.447407 2026] [security2:error] [pid 3530001:tid 3530001] [client 101.47.18.171:11235] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUAHnkat6iR8AWmbVa9AAAAA4"]
[Thu Jul 30 14:39:12.447477 2026] [security2:error] [pid 3530001:tid 3530001] [client 101.47.18.171:11235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUAHnkat6iR8AWmbVa9AAAAA4"]
[Thu Jul 30 14:39:12.447799 2026] [security2:error] [pid 3530001:tid 3530001] [client 101.47.18.171:11235] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUAHnkat6iR8AWmbVa9AAAAA4"]
[Thu Jul 30 14:39:12.693626 2026] [access_compat:error] [pid 3530003:tid 3530003] [client 45.158.164.139:33680] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:39:14.881345 2026] [ssl:error] [pid 3525475:tid 3525475] (EAI 2)Name or service not known: [client 144.76.19.72:56622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:14.881388 2026] [ssl:error] [pid 3525475:tid 3525475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:14.935116 2026] [ssl:error] [pid 3528936:tid 3528936] (EAI 2)Name or service not known: [client 144.76.19.72:56634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:14.935150 2026] [ssl:error] [pid 3528936:tid 3528936] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:15.033254 2026] [ssl:error] [pid 3528117:tid 3528117] (70014)End of file found: [client 216.73.216.199:4456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:15.944662 2026] [ssl:error] [pid 3530043:tid 3530043] (70014)End of file found: [client 216.73.216.199:6074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:15.982406 2026] [security2:error] [pid 3530045:tid 3530045] [client 101.47.18.171:43075] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUAzMOEb7wER912ZCd9wAAADs"]
[Thu Jul 30 14:39:15.982477 2026] [security2:error] [pid 3530045:tid 3530045] [client 101.47.18.171:43075] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUAzMOEb7wER912ZCd9wAAADs"]
[Thu Jul 30 14:39:15.982790 2026] [security2:error] [pid 3530045:tid 3530045] [client 101.47.18.171:43075] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUAzMOEb7wER912ZCd9wAAADs"]
[Thu Jul 30 14:39:16.199599 2026] [access_compat:error] [pid 3530041:tid 3530041] [client 103.59.153.118:57939] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:17.990255 2026] [ssl:error] [pid 3528842:tid 3528842] (EAI 2)Name or service not known: [client 144.76.19.72:56642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:17.990300 2026] [ssl:error] [pid 3528842:tid 3528842] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:18.046198 2026] [ssl:error] [pid 3517321:tid 3517321] (EAI 2)Name or service not known: [client 144.76.19.72:56652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:18.046236 2026] [ssl:error] [pid 3517321:tid 3517321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:18.471353 2026] [ssl:error] [pid 3523527:tid 3523527] (70014)End of file found: [client 216.73.216.199:5672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:20.578113 2026] [ssl:error] [pid 3525475:tid 3525475] (70014)End of file found: [client 216.73.216.199:1150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:20.689312 2026] [authz_core:error] [pid 3525880:tid 3525880] [client 66.249.66.34:64269] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:39:20.691168 2026] [security2:error] [pid 3528931:tid 3528931] [client 47.128.98.78:34046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amtUCAziKf9MlPkDo3EL4QAAAC4"]
[Thu Jul 30 14:39:20.691983 2026] [authz_core:error] [pid 3525880:tid 3525880] [client 66.249.66.34:64269] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:39:21.105594 2026] [ssl:error] [pid 3517321:tid 3517321] (EAI 2)Name or service not known: [client 144.76.19.72:48960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:21.105624 2026] [ssl:error] [pid 3517321:tid 3517321] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:21.158436 2026] [ssl:error] [pid 3527478:tid 3527478] (EAI 2)Name or service not known: [client 144.76.19.72:48968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:21.158464 2026] [ssl:error] [pid 3527478:tid 3527478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:21.478663 2026] [core:error] [pid 3530001:tid 3530001] (13)Permission denied: [client 216.73.216.199:32896] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-2k/shrink
[Thu Jul 30 14:39:23.607234 2026] [ssl:error] [pid 3530001:tid 3530001] (70014)End of file found: [client 216.73.216.199:32896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:24.133917 2026] [ssl:error] [pid 3528843:tid 3528843] (70014)End of file found: [client 216.73.216.199:30966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:24.217908 2026] [ssl:error] [pid 3530044:tid 3530044] (EAI 2)Name or service not known: [client 144.76.19.72:48978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:24.217937 2026] [ssl:error] [pid 3530044:tid 3530044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:24.272671 2026] [ssl:error] [pid 3525345:tid 3525345] (EAI 2)Name or service not known: [client 144.76.19.72:48994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:24.272695 2026] [ssl:error] [pid 3525345:tid 3525345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:26.826179 2026] [access_compat:error] [pid 3528930:tid 3528930] [client 103.59.153.118:58450] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:27.326263 2026] [ssl:error] [pid 3525475:tid 3525475] (EAI 2)Name or service not known: [client 144.76.19.72:49002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:27.326294 2026] [ssl:error] [pid 3525475:tid 3525475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:27.377448 2026] [ssl:error] [pid 3522873:tid 3522873] (EAI 2)Name or service not known: [client 144.76.19.72:49010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:27.377491 2026] [ssl:error] [pid 3522873:tid 3522873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:28.435396 2026] [ssl:error] [pid 3527478:tid 3527478] (70014)End of file found: [client 216.73.216.199:58980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:28.924246 2026] [ssl:error] [pid 3517317:tid 3517317] (70014)End of file found: [client 216.73.216.199:15545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:30.466931 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:63454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:30.466957 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:30.522924 2026] [ssl:error] [pid 3522992:tid 3522992] (EAI 2)Name or service not known: [client 144.76.19.72:63462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:30.522952 2026] [ssl:error] [pid 3522992:tid 3522992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:30.538287 2026] [ssl:error] [pid 3525345:tid 3525345] (70014)End of file found: [client 216.73.216.199:19736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:33.443276 2026] [access_compat:error] [pid 3504534:tid 3504534] [client 103.59.153.118:58757] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:33.579609 2026] [ssl:error] [pid 3523528:tid 3523528] (EAI 2)Name or service not known: [client 144.76.19.72:63478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:33.579640 2026] [ssl:error] [pid 3523528:tid 3523528] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:33.633569 2026] [ssl:error] [pid 3528792:tid 3528792] (EAI 2)Name or service not known: [client 144.76.19.72:63486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:33.633601 2026] [ssl:error] [pid 3528792:tid 3528792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:34.054123 2026] [authz_core:error] [pid 3529969:tid 3529969] [client 66.249.66.33:54352] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:39:34.057008 2026] [authz_core:error] [pid 3529969:tid 3529969] [client 66.249.66.33:54352] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:39:35.207498 2026] [cgi:error] [pid 3522873:tid 3522873] [client 20.151.221.234:2822] AH02812: stderr from /home/acthorou/actsa.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:39:35.671855 2026] [security2:error] [pid 3528885:tid 3528885] [client 216.73.216.199:55458] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-bcmath.ini"] [unique_id "amtUF2J0NjFkcCmu_4hHgwAAACc"]
[Thu Jul 30 14:39:35.672098 2026] [security2:error] [pid 3528885:tid 3528885] [client 216.73.216.199:55458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-bcmath.ini"] [unique_id "amtUF2J0NjFkcCmu_4hHgwAAACc"]
[Thu Jul 30 14:39:35.672304 2026] [security2:error] [pid 3528885:tid 3528885] [client 216.73.216.199:55458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-bcmath.ini"] [unique_id "amtUF2J0NjFkcCmu_4hHgwAAACc"]
[Thu Jul 30 14:39:35.973640 2026] [ssl:error] [pid 3528885:tid 3528885] (70014)End of file found: [client 216.73.216.199:55458] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:36.274329 2026] [ssl:error] [pid 3508257:tid 3508257] (70014)End of file found: [client 216.73.216.199:20878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:36.690281 2026] [ssl:error] [pid 3528930:tid 3528930] (EAI 2)Name or service not known: [client 144.76.19.72:63500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:36.690309 2026] [ssl:error] [pid 3528930:tid 3528930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:36.744709 2026] [ssl:error] [pid 3525345:tid 3525345] (EAI 2)Name or service not known: [client 144.76.19.72:63510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:36.744739 2026] [ssl:error] [pid 3525345:tid 3525345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:37.177392 2026] [ssl:error] [pid 3517321:tid 3517321] (70014)End of file found: [client 216.73.216.199:44222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:37.486078 2026] [access_compat:error] [pid 3528843:tid 3528843] [client 103.59.153.118:58959] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:38.579499 2026] [lsapi:warn] [pid 3528930:tid 3528930] [client 216.238.73.102:49660] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 14:39:38.579539 2026] [lsapi:warn] [pid 3528930:tid 3528930] [client 216.238.73.102:49660] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 14:39:39.466106 2026] [core:error] [pid 3531208:tid 3531208] (13)Permission denied: [client 216.73.216.199:21044] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/sysfillrect/sections/__kcrctab
[Thu Jul 30 14:39:39.679784 2026] [cgi:error] [pid 3531150:tid 3531150] [client 62.60.130.228:53888] AH02811: stderr from /home/spampcou/public_html/cgi-bin/cgi-bin: script not found or unable to stat, referer: www.google.com
[Thu Jul 30 14:39:39.799642 2026] [ssl:error] [pid 3528884:tid 3528884] (EAI 2)Name or service not known: [client 144.76.19.72:18646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:39.799680 2026] [ssl:error] [pid 3528884:tid 3528884] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:39.851500 2026] [ssl:error] [pid 3523567:tid 3523567] (EAI 2)Name or service not known: [client 144.76.19.72:18660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:39.851556 2026] [ssl:error] [pid 3523567:tid 3523567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:41.727047 2026] [ssl:error] [pid 3523488:tid 3523488] (70014)End of file found: [client 216.73.216.199:39981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:42.905037 2026] [ssl:error] [pid 3528885:tid 3528885] (EAI 2)Name or service not known: [client 144.76.19.72:18666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:42.905081 2026] [ssl:error] [pid 3528885:tid 3528885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:42.962712 2026] [ssl:error] [pid 3531271:tid 3531271] (EAI 2)Name or service not known: [client 144.76.19.72:18668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:42.962740 2026] [ssl:error] [pid 3531271:tid 3531271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:43.288467 2026] [core:error] [pid 3530045:tid 3530045] (13)Permission denied: [client 216.73.216.199:54651] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/inet_diag/sections/__ksymtab_strings
[Thu Jul 30 14:39:44.145729 2026] [access_compat:error] [pid 3529969:tid 3529969] [client 103.59.153.118:59266] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:44.305393 2026] [security2:error] [pid 3527696:tid 3527696] [client 47.77.229.162:53323] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUIACSdrxrro40_wvBLQAAABY"]
[Thu Jul 30 14:39:44.305456 2026] [security2:error] [pid 3527696:tid 3527696] [client 47.77.229.162:53323] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUIACSdrxrro40_wvBLQAAABY"]
[Thu Jul 30 14:39:44.305699 2026] [security2:error] [pid 3527696:tid 3527696] [client 47.77.229.162:53323] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUIACSdrxrro40_wvBLQAAABY"]
[Thu Jul 30 14:39:44.828137 2026] [security2:error] [pid 3508257:tid 3508257] [client 85.208.96.205:48406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/dream-about-water-overflowing-islam"] [unique_id "amtUINfKkceONMkwXS48YgAAABs"]
[Thu Jul 30 14:39:45.408221 2026] [ssl:error] [pid 3530045:tid 3530045] (70014)End of file found: [client 216.73.216.199:54651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:45.458581 2026] [security2:error] [pid 3529969:tid 3529969] [client 150.5.133.173:43627] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUIbja_a4SZ5rGg2xqUwAAAAk"]
[Thu Jul 30 14:39:45.458629 2026] [security2:error] [pid 3529969:tid 3529969] [client 150.5.133.173:43627] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUIbja_a4SZ5rGg2xqUwAAAAk"]
[Thu Jul 30 14:39:45.458876 2026] [security2:error] [pid 3529969:tid 3529969] [client 150.5.133.173:43627] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUIbja_a4SZ5rGg2xqUwAAAAk"]
[Thu Jul 30 14:39:46.020378 2026] [ssl:error] [pid 3523567:tid 3523567] (70014)End of file found: [client 216.73.216.199:6963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:46.021037 2026] [ssl:error] [pid 3530003:tid 3530003] (EAI 2)Name or service not known: [client 144.76.19.72:18684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:46.021075 2026] [ssl:error] [pid 3530003:tid 3530003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:46.073046 2026] [ssl:error] [pid 3514829:tid 3514829] (EAI 2)Name or service not known: [client 144.76.19.72:18692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:46.073094 2026] [ssl:error] [pid 3514829:tid 3514829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:47.161746 2026] [ssl:error] [pid 3529969:tid 3529969] (70014)End of file found: [client 216.73.216.199:38371] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:48.161513 2026] [access_compat:error] [pid 3530000:tid 3530000] [client 103.59.153.118:59461] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:48.331260 2026] [security2:error] [pid 3523488:tid 3523488] [client 150.5.133.173:60975] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUJKVB04zcK0tHytTBIgAAAAg"]
[Thu Jul 30 14:39:48.331321 2026] [security2:error] [pid 3523488:tid 3523488] [client 150.5.133.173:60975] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUJKVB04zcK0tHytTBIgAAAAg"]
[Thu Jul 30 14:39:48.331576 2026] [security2:error] [pid 3523488:tid 3523488] [client 150.5.133.173:60975] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUJKVB04zcK0tHytTBIgAAAAg"]
[Thu Jul 30 14:39:48.438794 2026] [access_compat:error] [pid 3525880:tid 3525880] [client 45.158.164.139:38464] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:39:49.131552 2026] [ssl:error] [pid 3528886:tid 3528886] (EAI 2)Name or service not known: [client 144.76.19.72:18694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:49.131586 2026] [ssl:error] [pid 3528886:tid 3528886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:49.184651 2026] [ssl:error] [pid 3528934:tid 3528934] (EAI 2)Name or service not known: [client 144.76.19.72:18700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:49.184686 2026] [ssl:error] [pid 3528934:tid 3528934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:49.953350 2026] [security2:error] [pid 3531644:tid 3531644] [client 114.119.142.20:64099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~102"] [unique_id "amtUJTfs6WCiI_DvPbhTAAAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~102
[Thu Jul 30 14:39:51.075135 2026] [security2:error] [pid 3531707:tid 3531707] [client 114.119.142.20:44475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~102"] [unique_id "amtUJ3smb0Ppac0GaPO_eQAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574812800/request_format~html/cat_ids~102
[Thu Jul 30 14:39:52.269836 2026] [ssl:error] [pid 3523567:tid 3523567] (EAI 2)Name or service not known: [client 144.76.19.72:65044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:52.269874 2026] [ssl:error] [pid 3523567:tid 3523567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:52.327579 2026] [ssl:error] [pid 3528843:tid 3528843] (EAI 2)Name or service not known: [client 144.76.19.72:65056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:52.327608 2026] [ssl:error] [pid 3528843:tid 3528843] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:53.019032 2026] [authz_core:error] [pid 3529969:tid 3529969] [client 66.249.66.35:53089] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:39:53.021690 2026] [authz_core:error] [pid 3529969:tid 3529969] [client 66.249.66.35:53089] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:39:53.306955 2026] [ssl:error] [pid 3531644:tid 3531644] (70014)End of file found: [client 216.73.216.199:47884] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:53.730935 2026] [security2:error] [pid 3530000:tid 3530000] [client 162.14.114.97:34592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "techsuccess.uk"] [uri "/"] [unique_id "amtUKdbsqGD8gCwoYE9zOQAAAAw"]
[Thu Jul 30 14:39:53.800418 2026] [ssl:error] [pid 3525345:tid 3525345] (70014)End of file found: [client 216.73.216.199:48447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:55.161775 2026] [ssl:error] [pid 3531207:tid 3531207] (70014)End of file found: [client 216.73.216.199:55869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:39:55.387735 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:65068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:55.387763 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:55.440061 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:65078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:55.440100 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:55.661278 2026] [cgi:error] [pid 3528843:tid 3528843] [client 112.86.225.24:51890] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:39:57.476385 2026] [security2:error] [pid 3530003:tid 3530003] [client 43.136.86.241:40730] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtULUEC3ph1se5cYlY_ZwAAABo"], referer: http://www.banskoexpresstransfers.com
[Thu Jul 30 14:39:58.495231 2026] [ssl:error] [pid 3532070:tid 3532070] (EAI 2)Name or service not known: [client 144.76.19.72:65094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:58.495281 2026] [ssl:error] [pid 3532070:tid 3532070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:58.549300 2026] [ssl:error] [pid 3531929:tid 3531929] (EAI 2)Name or service not known: [client 144.76.19.72:65106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:39:58.549334 2026] [ssl:error] [pid 3531929:tid 3531929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:39:58.818629 2026] [access_compat:error] [pid 3521483:tid 3521483] [client 103.59.153.118:59959] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:39:59.752765 2026] [ssl:error] [pid 3529969:tid 3529969] (70014)End of file found: [client 216.73.216.199:27461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:01.603528 2026] [ssl:error] [pid 3530003:tid 3530003] (EAI 2)Name or service not known: [client 144.76.19.72:50548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:01.603559 2026] [ssl:error] [pid 3530003:tid 3530003] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:01.660612 2026] [ssl:error] [pid 3515967:tid 3515967] (EAI 2)Name or service not known: [client 144.76.19.72:50554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:01.660646 2026] [ssl:error] [pid 3515967:tid 3515967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:03.597903 2026] [security2:error] [pid 3528937:tid 3528937] [client 43.136.86.241:38630] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtUM75Y1aQi9oSEijlseQAAADY"], referer: http://www.banskoexpress.com
[Thu Jul 30 14:40:04.714678 2026] [ssl:error] [pid 3525345:tid 3525345] (EAI 2)Name or service not known: [client 144.76.19.72:50562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:04.714711 2026] [ssl:error] [pid 3525345:tid 3525345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:04.768707 2026] [ssl:error] [pid 3531779:tid 3531779] (EAI 2)Name or service not known: [client 144.76.19.72:50574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:04.768742 2026] [ssl:error] [pid 3531779:tid 3531779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:05.543036 2026] [access_compat:error] [pid 3528381:tid 3528381] [client 103.59.153.118:60271] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:05.963863 2026] [ssl:error] [pid 3528117:tid 3528117] (70014)End of file found: [client 216.73.216.199:31979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:06.465998 2026] [ssl:error] [pid 3521483:tid 3521483] (70014)End of file found: [client 216.73.216.199:52640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:07.168243 2026] [ssl:error] [pid 3522873:tid 3522873] (70014)End of file found: [client 216.73.216.199:51183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:07.826693 2026] [ssl:error] [pid 3530046:tid 3530046] (EAI 2)Name or service not known: [client 144.76.19.72:50582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:07.826733 2026] [ssl:error] [pid 3530046:tid 3530046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:07.884350 2026] [ssl:error] [pid 3531150:tid 3531150] (EAI 2)Name or service not known: [client 144.76.19.72:50592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:07.884381 2026] [ssl:error] [pid 3531150:tid 3531150] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:08.197363 2026] [security2:error] [pid 3528934:tid 3528934] [client 185.191.171.10:18198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/edge_foros_temas.asp"] [unique_id "amtUODlUIwSX98LV7ZvMYwAAADM"]
[Thu Jul 30 14:40:08.278868 2026] [access_compat:error] [pid 3531777:tid 3531777] [client 85.214.61.34:38918] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xmlrpc.php
[Thu Jul 30 14:40:09.570211 2026] [access_compat:error] [pid 3530046:tid 3530046] [client 103.59.153.118:60470] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:10.275663 2026] [security2:error] [pid 3531776:tid 3531776] [client 114.119.132.170:29437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.spurr.org.uk"] [uri "/robots.txt"] [unique_id "amtUOss8PTpaZOTZVgyfpAAAAB0"], referer: https://www.spurr.org.uk/robots.txt
[Thu Jul 30 14:40:10.942636 2026] [ssl:error] [pid 3531708:tid 3531708] (EAI 2)Name or service not known: [client 144.76.19.72:59718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:10.942673 2026] [ssl:error] [pid 3531708:tid 3531708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:11.008508 2026] [ssl:error] [pid 3528935:tid 3528935] (EAI 2)Name or service not known: [client 144.76.19.72:59720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:11.008535 2026] [ssl:error] [pid 3528935:tid 3528935] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:11.717623 2026] [ssl:error] [pid 3530001:tid 3530001] (70014)End of file found: [client 216.73.216.199:34111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:12.517988 2026] [core:error] [pid 3528117:tid 3528117] (13)Permission denied: [client 216.73.216.199:6109] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS2/flags
[Thu Jul 30 14:40:13.835655 2026] [ssl:error] [pid 3531778:tid 3531778] (70014)End of file found: [client 216.73.216.199:2047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:14.065877 2026] [ssl:error] [pid 3527696:tid 3527696] (EAI 2)Name or service not known: [client 144.76.19.72:59730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:14.065917 2026] [ssl:error] [pid 3527696:tid 3527696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:14.123814 2026] [ssl:error] [pid 3528056:tid 3528056] (EAI 2)Name or service not known: [client 144.76.19.72:59734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:14.123845 2026] [ssl:error] [pid 3528056:tid 3528056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:14.136641 2026] [ssl:error] [pid 3528117:tid 3528117] (70014)End of file found: [client 216.73.216.199:6109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:14.662809 2026] [security2:error] [pid 3527696:tid 3527696] [client 43.106.18.114:61587] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUPgCSdrxrro40_wvBNAAAABY"]
[Thu Jul 30 14:40:14.662863 2026] [security2:error] [pid 3527696:tid 3527696] [client 43.106.18.114:61587] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUPgCSdrxrro40_wvBNAAAABY"]
[Thu Jul 30 14:40:14.663133 2026] [security2:error] [pid 3527696:tid 3527696] [client 43.106.18.114:61587] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUPgCSdrxrro40_wvBNAAAABY"]
[Thu Jul 30 14:40:16.231524 2026] [access_compat:error] [pid 3525345:tid 3525345] [client 103.59.153.118:60779] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:16.784573 2026] [access_compat:error] [pid 3530046:tid 3530046] [client 45.158.164.139:37300] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:40:16.872222 2026] [security2:error] [pid 3531779:tid 3531779] [client 37.17.145.19:7243] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUQIEJXu-Q1iINgC7XQgAAAC8"]
[Thu Jul 30 14:40:16.872275 2026] [security2:error] [pid 3531779:tid 3531779] [client 37.17.145.19:7243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUQIEJXu-Q1iINgC7XQgAAAC8"]
[Thu Jul 30 14:40:16.872556 2026] [security2:error] [pid 3531779:tid 3531779] [client 37.17.145.19:7243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUQIEJXu-Q1iINgC7XQgAAAC8"]
[Thu Jul 30 14:40:17.180581 2026] [ssl:error] [pid 3531779:tid 3531779] (EAI 2)Name or service not known: [client 144.76.19.72:59740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:17.180613 2026] [ssl:error] [pid 3531779:tid 3531779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:17.236538 2026] [ssl:error] [pid 3531779:tid 3531779] (EAI 2)Name or service not known: [client 144.76.19.72:59750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:17.236564 2026] [ssl:error] [pid 3531779:tid 3531779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:17.458649 2026] [ssl:error] [pid 3529970:tid 3529970] (70014)End of file found: [client 216.73.216.199:56498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:19.172590 2026] [ssl:error] [pid 3522873:tid 3522873] (70014)End of file found: [client 216.73.216.199:24286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:20.042007 2026] [security2:error] [pid 3530043:tid 3530043] [client 176.28.176.229:14434] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtURF_7vTOFsFz-Z_iPPAAAADc"]
[Thu Jul 30 14:40:20.042061 2026] [security2:error] [pid 3530043:tid 3530043] [client 176.28.176.229:14434] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtURF_7vTOFsFz-Z_iPPAAAADc"]
[Thu Jul 30 14:40:20.042336 2026] [security2:error] [pid 3530043:tid 3530043] [client 176.28.176.229:14434] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtURF_7vTOFsFz-Z_iPPAAAADc"]
[Thu Jul 30 14:40:20.241207 2026] [access_compat:error] [pid 3532899:tid 3532899] [client 103.59.153.118:60973] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:20.334555 2026] [ssl:error] [pid 3528117:tid 3528117] (EAI 2)Name or service not known: [client 144.76.19.72:28570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:20.334593 2026] [ssl:error] [pid 3528117:tid 3528117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:20.388051 2026] [ssl:error] [pid 3525345:tid 3525345] (EAI 2)Name or service not known: [client 144.76.19.72:28576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:20.388098 2026] [ssl:error] [pid 3525345:tid 3525345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:20.580879 2026] [security2:error] [pid 3530046:tid 3530046] [client 74.7.242.15:52250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.nortonnews.dbstart.co.uk"] [uri "/"] [unique_id "amtURGir08nz4Vt9vMOvMgAAAD0"]
[Thu Jul 30 14:40:21.117504 2026] [ssl:error] [pid 3531778:tid 3531778] (70014)End of file found: [client 216.73.216.199:1572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:22.691115 2026] [security2:error] [pid 3528932:tid 3528932] [client 114.119.167.129:43463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/wp-content/uploads/2011/06/craigrousseau_miscellaneous_stuffimage1-432x200.jpg"] [unique_id "amtURhEb0SG70FXSUXnYPgAAADA"], referer: http://www.localhero.org.uk/wp-content/uploads/2011/06/craigrousseau_miscellaneous_stuffimage1-432x200.jpg
[Thu Jul 30 14:40:23.330377 2026] [ssl:error] [pid 3528930:tid 3528930] (70014)End of file found: [client 216.73.216.199:41571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:23.483377 2026] [ssl:error] [pid 3530043:tid 3530043] (EAI 2)Name or service not known: [client 144.76.19.72:28592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:23.483415 2026] [ssl:error] [pid 3530043:tid 3530043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:23.538274 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:28596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:23.538301 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:24.233360 2026] [ssl:error] [pid 3530046:tid 3530046] (70014)End of file found: [client 216.73.216.199:16898] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:25.453239 2026] [ssl:error] [pid 3514829:tid 3514829] (70014)End of file found: [client 216.73.216.199:30581] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:25.751458 2026] [security2:error] [pid 3528931:tid 3528931] [client 114.119.135.232:38439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2008/ref/B11-Srilanka-tsunami.pdf"] [unique_id "amtUSQziKf9MlPkDo3EMIQAAAC4"]
[Thu Jul 30 14:40:26.618581 2026] [ssl:error] [pid 3531777:tid 3531777] (EAI 2)Name or service not known: [client 144.76.19.72:28608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:26.618627 2026] [ssl:error] [pid 3531777:tid 3531777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:26.673500 2026] [ssl:error] [pid 3532899:tid 3532899] (EAI 2)Name or service not known: [client 144.76.19.72:28612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:26.673531 2026] [ssl:error] [pid 3532899:tid 3532899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:26.911989 2026] [security2:error] [pid 3528885:tid 3528885] [client 85.208.96.200:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2025/10/"] [unique_id "amtUSmJ0NjFkcCmu_4hHjgAAACc"]
[Thu Jul 30 14:40:29.731688 2026] [ssl:error] [pid 3532899:tid 3532899] (EAI 2)Name or service not known: [client 144.76.19.72:33344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:29.731721 2026] [ssl:error] [pid 3532899:tid 3532899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:29.784938 2026] [ssl:error] [pid 3531207:tid 3531207] (EAI 2)Name or service not known: [client 144.76.19.72:33358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:29.784972 2026] [ssl:error] [pid 3531207:tid 3531207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:30.305102 2026] [ssl:error] [pid 3531779:tid 3531779] (70014)End of file found: [client 216.73.216.199:15636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:30.339699 2026] [security2:error] [pid 3532899:tid 3532899] [client 106.54.62.156:43914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.magic-cookie.co.uk"] [uri "/"] [unique_id "amtUTmSwDpbh-8ZL72bH2gAAAAs"]
[Thu Jul 30 14:40:30.889122 2026] [access_compat:error] [pid 3533260:tid 3533260] [client 103.59.153.118:61481] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:31.208227 2026] [ssl:error] [pid 3531207:tid 3531207] (70014)End of file found: [client 216.73.216.199:30537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:32.841897 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:33370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:32.841931 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:32.899495 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:33386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:32.899519 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:34.242444 2026] [ssl:error] [pid 3528930:tid 3528930] (70014)End of file found: [client 216.73.216.199:45985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:35.657238 2026] [ssl:error] [pid 3527696:tid 3527696] (70014)End of file found: [client 216.73.216.199:21147] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:35.984147 2026] [ssl:error] [pid 3531779:tid 3531779] (EAI 2)Name or service not known: [client 144.76.19.72:33396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:35.984172 2026] [ssl:error] [pid 3531779:tid 3531779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:36.039327 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:33398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:36.039355 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:36.559669 2026] [core:error] [pid 3531779:tid 3531779] (13)Permission denied: [client 216.73.216.199:1994] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/align
[Thu Jul 30 14:40:36.667628 2026] [lsapi:warn] [pid 3531777:tid 3531777] [client 45.158.164.139:37206] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:40:36.667674 2026] [lsapi:warn] [pid 3531777:tid 3531777] [client 45.158.164.139:37206] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:40:37.524913 2026] [access_compat:error] [pid 3531777:tid 3531777] [client 103.59.153.118:61786] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:37.665657 2026] [security2:error] [pid 3530000:tid 3530000] [client 185.191.171.11:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2016/02/21/south-west-womens-race-day/"] [unique_id "amtUVdbsqGD8gCwoYE9zQwAAAAw"]
[Thu Jul 30 14:40:39.095870 2026] [ssl:error] [pid 3530000:tid 3530000] (EAI 2)Name or service not known: [client 144.76.19.72:33404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:39.095928 2026] [ssl:error] [pid 3530000:tid 3530000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:39.153411 2026] [ssl:error] [pid 3525345:tid 3525345] (EAI 2)Name or service not known: [client 144.76.19.72:33408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:39.153444 2026] [ssl:error] [pid 3525345:tid 3525345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:39.406851 2026] [ssl:error] [pid 3531779:tid 3531779] (70014)End of file found: [client 216.73.216.199:1994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:40.922921 2026] [ssl:error] [pid 3525345:tid 3525345] (70014)End of file found: [client 216.73.216.199:60698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:41.418843 2026] [ssl:error] [pid 3530046:tid 3530046] (70014)End of file found: [client 216.73.216.199:40470] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:41.583975 2026] [access_compat:error] [pid 3515967:tid 3515967] [client 103.59.153.118:61981] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:42.209323 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:32260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:42.209355 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:42.268311 2026] [ssl:error] [pid 3528934:tid 3528934] (EAI 2)Name or service not known: [client 144.76.19.72:32274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:42.268342 2026] [ssl:error] [pid 3528934:tid 3528934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:43.802792 2026] [ssl:error] [pid 3531270:tid 3531270] (70014)End of file found: [client 216.73.216.199:17361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:44.251482 2026] [ssl:error] [pid 3533823:tid 3533823] (70014)End of file found: [client 216.73.216.199:15146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:44.837379 2026] [ssl:error] [pid 3528885:tid 3528885] (70014)End of file found: [client 216.73.216.199:63165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:45.306800 2026] [security2:error] [pid 3531271:tid 3531271] [client 85.208.96.209:53054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/what-to-say-to-a-priest-who-is-leaving"] [unique_id "amtUXSUdlfuZyW7Kf-qE2gAAACE"]
[Thu Jul 30 14:40:45.325869 2026] [ssl:error] [pid 3532940:tid 3532940] (EAI 2)Name or service not known: [client 144.76.19.72:32278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:45.325893 2026] [ssl:error] [pid 3532940:tid 3532940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:45.382110 2026] [ssl:error] [pid 3533525:tid 3533525] (EAI 2)Name or service not known: [client 144.76.19.72:32280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:45.382138 2026] [ssl:error] [pid 3533525:tid 3533525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:45.830498 2026] [security2:error] [pid 3533260:tid 3533260] [client 34.88.64.134:57172] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtUXcazcuDsd5_KuYf7kgAAAAI"]
[Thu Jul 30 14:40:46.196152 2026] [cgi:error] [pid 3531777:tid 3531777] [client 62.60.130.228:63774] AH02811: stderr from /home/spampcou/public_html/cgi-bin/cgi-bin: script not found or unable to stat, referer: www.google.com
[Thu Jul 30 14:40:47.402974 2026] [security2:error] [pid 3528934:tid 3528934] [client 94.154.43.178:55802] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "baketastic.co.uk"] [uri "/.env"] [unique_id "amtUXzlUIwSX98LV7ZvMcAAAADM"]
[Thu Jul 30 14:40:47.403143 2026] [security2:error] [pid 3528934:tid 3528934] [client 94.154.43.178:55802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "baketastic.co.uk"] [uri "/.env"] [unique_id "amtUXzlUIwSX98LV7ZvMcAAAADM"]
[Thu Jul 30 14:40:47.860054 2026] [cgi:error] [pid 3530001:tid 3530001] [client 62.60.130.228:63788] AH02811: stderr from /home/spampcou/public_html/cgi-bin/cgi-bin: script not found or unable to stat, referer: www.google.com
[Thu Jul 30 14:40:48.267672 2026] [access_compat:error] [pid 3533260:tid 3533260] [client 103.59.153.118:62292] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:48.434706 2026] [ssl:error] [pid 3533788:tid 3533788] (EAI 2)Name or service not known: [client 144.76.19.72:32284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:48.434736 2026] [ssl:error] [pid 3533788:tid 3533788] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:48.491259 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:32288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:48.491295 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:48.609450 2026] [security2:error] [pid 3528934:tid 3528934] [client 94.154.43.178:55802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "baketastic.co.uk"] [uri "/index.php"] [unique_id "amtUXzlUIwSX98LV7ZvMcAAAADM"]
[Thu Jul 30 14:40:49.513042 2026] [cgi:error] [pid 3531271:tid 3531271] [client 62.60.130.228:59458] AH02811: stderr from /home/spampcou/public_html/cgi-bin/cgi-bin: script not found or unable to stat, referer: www.google.com
[Thu Jul 30 14:40:49.670866 2026] [ssl:error] [pid 3523527:tid 3523527] (70014)End of file found: [client 216.73.216.199:34448] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:50.907324 2026] [access_compat:error] [pid 3532938:tid 3532938] [client 45.158.164.139:40452] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:40:51.174690 2026] [ssl:error] [pid 3528934:tid 3528934] (70014)End of file found: [client 216.73.216.199:46161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:51.545794 2026] [ssl:error] [pid 3531779:tid 3531779] (EAI 2)Name or service not known: [client 144.76.19.72:29586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:51.545821 2026] [ssl:error] [pid 3531779:tid 3531779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:51.601587 2026] [ssl:error] [pid 3532937:tid 3532937] (EAI 2)Name or service not known: [client 144.76.19.72:29592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:51.601619 2026] [ssl:error] [pid 3532937:tid 3532937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:52.073870 2026] [ssl:error] [pid 3531270:tid 3531270] (70014)End of file found: [client 216.73.216.199:32589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:52.289117 2026] [access_compat:error] [pid 3514765:tid 3514765] [client 103.59.153.118:62492] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:40:53.287887 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:40:54.235324 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:40:54.662497 2026] [ssl:error] [pid 3531779:tid 3531779] (EAI 2)Name or service not known: [client 144.76.19.72:29608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:54.662526 2026] [ssl:error] [pid 3531779:tid 3531779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:54.720533 2026] [ssl:error] [pid 3529970:tid 3529970] (EAI 2)Name or service not known: [client 144.76.19.72:29614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:54.720567 2026] [ssl:error] [pid 3529970:tid 3529970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:55.108541 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:40:55.987125 2026] [ssl:error] [pid 3532940:tid 3532940] (70014)End of file found: [client 216.73.216.199:46774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:56.480580 2026] [ssl:error] [pid 3532899:tid 3532899] (70014)End of file found: [client 216.73.216.199:32033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:56.685832 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:40:57.779229 2026] [ssl:error] [pid 3531929:tid 3531929] (EAI 2)Name or service not known: [client 144.76.19.72:29620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:57.779279 2026] [ssl:error] [pid 3531929:tid 3531929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:57.837593 2026] [ssl:error] [pid 3534395:tid 3534395] (EAI 2)Name or service not known: [client 144.76.19.72:29624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:40:57.837624 2026] [ssl:error] [pid 3534395:tid 3534395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:40:58.396999 2026] [ssl:error] [pid 3530043:tid 3530043] (70014)End of file found: [client 216.73.216.199:55678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:40:58.588784 2026] [security2:error] [pid 3529969:tid 3529969] [client 74.7.227.33:51786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "positivelydisruptive.co.uk"] [uri "/sitemap.xml"] [unique_id "amtUarja_a4SZ5rGg2xqaQAAAAk"]
[Thu Jul 30 14:41:00.893395 2026] [ssl:error] [pid 3532939:tid 3532939] (EAI 2)Name or service not known: [client 144.76.19.72:31794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:00.893443 2026] [ssl:error] [pid 3532939:tid 3532939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:00.947411 2026] [ssl:error] [pid 3531778:tid 3531778] (EAI 2)Name or service not known: [client 144.76.19.72:31802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:00.947464 2026] [ssl:error] [pid 3531778:tid 3531778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:01.044985 2026] [cgi:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH02812: stderr from /home/erskinen/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:41:01.492221 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:01.849946 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:02.278867 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:02.331550 2026] [ssl:error] [pid 3532863:tid 3532863] (70014)End of file found: [client 216.73.216.199:38364] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:02.624518 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:02.907143 2026] [access_compat:error] [pid 3533616:tid 3533616] [client 103.59.153.118:62992] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:41:03.074051 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:03.345756 2026] [security2:error] [pid 3532899:tid 3532899] [client 43.165.198.5:51004] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.baketastic.co.uk"] [uri "/"] [unique_id "amtUb2SwDpbh-8ZL72bH4wAAAAs"]
[Thu Jul 30 14:41:04.025984 2026] [ssl:error] [pid 3530000:tid 3530000] (EAI 2)Name or service not known: [client 144.76.19.72:31814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:04.026030 2026] [ssl:error] [pid 3530000:tid 3530000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:04.079592 2026] [ssl:error] [pid 3528117:tid 3528117] (EAI 2)Name or service not known: [client 144.76.19.72:31828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:04.079625 2026] [ssl:error] [pid 3528117:tid 3528117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:05.067396 2026] [core:error] [pid 3532938:tid 3532938] (13)Permission denied: [client 216.73.216.199:24326] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS0/device/driver/bind
[Thu Jul 30 14:41:05.597876 2026] [security2:error] [pid 3528117:tid 3528117] [client 43.165.198.5:59238] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtUcRx887GgWa32olR1twAAABg"], referer: http://www.baketastic.co.uk
[Thu Jul 30 14:41:06.430130 2026] [security2:error] [pid 3514765:tid 3514765] [client 43.161.251.162:44808] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highbrightness.com"] [uri "/"] [unique_id "amtUcjO7rdauoc7VkSNRPwAAACo"]
[Thu Jul 30 14:41:06.520661 2026] [security2:error] [pid 3534342:tid 3534342] [client 161.10.101.165:33764] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUcqNzvBFI5-WWLEgesgAAADY"]
[Thu Jul 30 14:41:06.520726 2026] [security2:error] [pid 3534342:tid 3534342] [client 161.10.101.165:33764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUcqNzvBFI5-WWLEgesgAAADY"]
[Thu Jul 30 14:41:06.520988 2026] [security2:error] [pid 3534342:tid 3534342] [client 161.10.101.165:33764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUcqNzvBFI5-WWLEgesgAAADY"]
[Thu Jul 30 14:41:06.574226 2026] [ssl:error] [pid 3532938:tid 3532938] (70014)End of file found: [client 216.73.216.199:24326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:06.882150 2026] [ssl:error] [pid 3529585:tid 3529585] (70014)End of file found: [client 216.73.216.199:51705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:07.149499 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:31842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:07.149528 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:07.207155 2026] [ssl:error] [pid 3530046:tid 3530046] (EAI 2)Name or service not known: [client 144.76.19.72:31850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:07.207182 2026] [ssl:error] [pid 3530046:tid 3530046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:07.218140 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/011i.php
[Thu Jul 30 14:41:07.218198 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.248121 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/03a005685d.php
[Thu Jul 30 14:41:07.248172 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.278021 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.php
[Thu Jul 30 14:41:07.278087 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.309015 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 14:41:07.309061 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.338586 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aa.php
[Thu Jul 30 14:41:07.338635 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.418622 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aafewc0k.php
[Thu Jul 30 14:41:07.418678 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.447947 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/abcd.php
[Thu Jul 30 14:41:07.447996 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.477516 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 14:41:07.477565 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.506593 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 14:41:07.506642 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.535886 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminfuns.php
[Thu Jul 30 14:41:07.535936 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.565114 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/albin.php
[Thu Jul 30 14:41:07.565170 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.594202 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/amfsqvgv.php
[Thu Jul 30 14:41:07.594251 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.660391 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ant.php
[Thu Jul 30 14:41:07.660453 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.693064 2026] [ssl:error] [pid 3530046:tid 3530046] (70014)End of file found: [client 216.73.216.199:23722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:07.699526 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/appreciators.php
[Thu Jul 30 14:41:07.699574 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.728596 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/archive.php
[Thu Jul 30 14:41:07.728644 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.757541 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/as.php
[Thu Jul 30 14:41:07.757589 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.787090 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/atomlib.php
[Thu Jul 30 14:41:07.787139 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.816353 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/autoload_classmap.php
[Thu Jul 30 14:41:07.816403 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.845300 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bb.php
[Thu Jul 30 14:41:07.845347 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.908959 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bnm.php
[Thu Jul 30 14:41:07.909011 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.938253 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bootstrap.php
[Thu Jul 30 14:41:07.938300 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.967341 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/buy.php
[Thu Jul 30 14:41:07.967388 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:07.996251 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/chosen.php
[Thu Jul 30 14:41:07.996301 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.025520 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class-wp-image.php
[Thu Jul 30 14:41:08.025574 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.054661 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classsmtps.php
[Thu Jul 30 14:41:08.054710 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.089148 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 14:41:08.089199 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.127996 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/config.php
[Thu Jul 30 14:41:08.128053 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.185229 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/core.php
[Thu Jul 30 14:41:08.185279 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.217381 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css.php
[Thu Jul 30 14:41:08.217437 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.246520 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/database.php
[Thu Jul 30 14:41:08.246564 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.291051 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/db.php
[Thu Jul 30 14:41:08.291120 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.320160 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/default.php
[Thu Jul 30 14:41:08.320213 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.356020 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dropdown.php
[Thu Jul 30 14:41:08.356090 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.385321 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/edit.php
[Thu Jul 30 14:41:08.385371 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.451562 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 14:41:08.451615 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.481476 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f7.php
[Thu Jul 30 14:41:08.481526 2026] [access_compat:error] [pid 3528885:tid 3528885] [client 68.221.186.136:24316] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 14:41:08.580528 2026] [security2:error] [pid 3531929:tid 3531929] [client 47.251.28.243:61635] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUdBxMoDyiRYj0J39w3AAAAA0"]
[Thu Jul 30 14:41:08.580576 2026] [security2:error] [pid 3531929:tid 3531929] [client 47.251.28.243:61635] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUdBxMoDyiRYj0J39w3AAAAA0"]
[Thu Jul 30 14:41:08.580863 2026] [security2:error] [pid 3531929:tid 3531929] [client 47.251.28.243:61635] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUdBxMoDyiRYj0J39w3AAAAA0"]
[Thu Jul 30 14:41:09.155967 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:09.557110 2026] [access_compat:error] [pid 3531271:tid 3531271] [client 103.59.153.118:63293] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:41:09.610214 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:09.988605 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:10.259589 2026] [ssl:error] [pid 3533616:tid 3533616] (EAI 2)Name or service not known: [client 144.76.19.72:48742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:10.259628 2026] [ssl:error] [pid 3533616:tid 3533616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:10.315727 2026] [ssl:error] [pid 3530001:tid 3530001] (EAI 2)Name or service not known: [client 144.76.19.72:48748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:10.315764 2026] [ssl:error] [pid 3530001:tid 3530001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:10.609326 2026] [lsapi:warn] [pid 3525475:tid 3525475] [client 97.74.93.24:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:41:11.228309 2026] [security2:error] [pid 3534396:tid 3534396] [client 110.249.201.51:23180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/robots.txt"] [unique_id "amtUd-q25q3pz85Ucu8dfAAAAEQ"]
[Thu Jul 30 14:41:11.228596 2026] [access_compat:error] [pid 3534396:tid 3534396] [client 110.249.201.51:23180] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:41:11.899087 2026] [security2:error] [pid 3534396:tid 3534396] [client 47.251.28.243:21391] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUd-q25q3pz85Ucu8dfQAAAEQ"]
[Thu Jul 30 14:41:11.899151 2026] [security2:error] [pid 3534396:tid 3534396] [client 47.251.28.243:21391] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUd-q25q3pz85Ucu8dfQAAAEQ"]
[Thu Jul 30 14:41:11.899394 2026] [security2:error] [pid 3534396:tid 3534396] [client 47.251.28.243:21391] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUd-q25q3pz85Ucu8dfQAAAEQ"]
[Thu Jul 30 14:41:11.906853 2026] [ssl:error] [pid 3530000:tid 3530000] (70014)End of file found: [client 216.73.216.199:26082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:12.608392 2026] [ssl:error] [pid 3532938:tid 3532938] (70014)End of file found: [client 216.73.216.199:54785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:13.210533 2026] [ssl:error] [pid 3525475:tid 3525475] (70014)End of file found: [client 216.73.216.199:6731] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:13.373173 2026] [ssl:error] [pid 3508257:tid 3508257] (EAI 2)Name or service not known: [client 144.76.19.72:48778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:13.373203 2026] [ssl:error] [pid 3508257:tid 3508257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:13.427623 2026] [ssl:error] [pid 3530043:tid 3530043] (EAI 2)Name or service not known: [client 144.76.19.72:48786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:13.427653 2026] [ssl:error] [pid 3530043:tid 3530043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:13.557770 2026] [access_compat:error] [pid 3532939:tid 3532939] [client 103.59.153.118:63444] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:41:14.058405 2026] [security2:error] [pid 3532937:tid 3532937] [client 114.119.159.26:39753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-440.xml"] [unique_id "amtUeqs5Dj1xs0g3n5f9LwAAABI"]
[Thu Jul 30 14:41:14.480961 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:14.834953 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:15.306482 2026] [autoindex:error] [pid 3531777:tid 3531777] [client 172.213.17.107:49265] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:16.175270 2026] [ssl:error] [pid 3534290:tid 3534290] (70014)End of file found: [client 216.73.216.199:62347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:16.481417 2026] [ssl:error] [pid 3528885:tid 3528885] (EAI 2)Name or service not known: [client 144.76.19.72:48794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:16.481461 2026] [ssl:error] [pid 3528885:tid 3528885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:16.536008 2026] [ssl:error] [pid 3530044:tid 3530044] (EAI 2)Name or service not known: [client 144.76.19.72:48808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:16.536046 2026] [ssl:error] [pid 3530044:tid 3530044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:16.777229 2026] [ssl:error] [pid 3527695:tid 3527695] (70014)End of file found: [client 216.73.216.199:7617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:17.270773 2026] [ssl:error] [pid 3528885:tid 3528885] (70014)End of file found: [client 216.73.216.199:14250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:19.591952 2026] [ssl:error] [pid 3531778:tid 3531778] (EAI 2)Name or service not known: [client 144.76.19.72:53406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:19.591979 2026] [ssl:error] [pid 3531778:tid 3531778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:19.644940 2026] [ssl:error] [pid 3533525:tid 3533525] (EAI 2)Name or service not known: [client 144.76.19.72:53410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:19.644963 2026] [ssl:error] [pid 3533525:tid 3533525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:20.230569 2026] [access_compat:error] [pid 3529585:tid 3529585] [client 103.59.153.118:63598] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:41:20.476992 2026] [authz_core:error] [pid 3521483:tid 3521483] [client 66.249.66.35:36353] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:41:20.479671 2026] [authz_core:error] [pid 3521483:tid 3521483] [client 66.249.66.35:36353] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:41:20.799416 2026] [access_compat:error] [pid 3533525:tid 3533525] [client 45.158.164.139:39238] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:41:22.701316 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:53424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:22.701347 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:22.752741 2026] [ssl:error] [pid 3534945:tid 3534945] (EAI 2)Name or service not known: [client 144.76.19.72:53426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:22.752777 2026] [ssl:error] [pid 3534945:tid 3534945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:25.810568 2026] [ssl:error] [pid 3530000:tid 3530000] (EAI 2)Name or service not known: [client 144.76.19.72:53432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:25.810601 2026] [ssl:error] [pid 3530000:tid 3530000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:25.829958 2026] [ssl:error] [pid 3534389:tid 3534389] (70014)End of file found: [client 216.73.216.199:18965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:25.864908 2026] [ssl:error] [pid 3521483:tid 3521483] (EAI 2)Name or service not known: [client 144.76.19.72:53448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:25.864947 2026] [ssl:error] [pid 3521483:tid 3521483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:26.744275 2026] [ssl:error] [pid 3530000:tid 3530000] (70014)End of file found: [client 216.73.216.199:63058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:28.922565 2026] [ssl:error] [pid 3531271:tid 3531271] (EAI 2)Name or service not known: [client 144.76.19.72:53460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:28.922608 2026] [ssl:error] [pid 3531271:tid 3531271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:28.980478 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:53472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:28.980551 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:32.039656 2026] [ssl:error] [pid 3535848:tid 3535848] (EAI 2)Name or service not known: [client 144.76.19.72:32614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:32.039694 2026] [ssl:error] [pid 3535848:tid 3535848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:32.094792 2026] [ssl:error] [pid 3535852:tid 3535852] (EAI 2)Name or service not known: [client 144.76.19.72:32628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:32.094820 2026] [ssl:error] [pid 3535852:tid 3535852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:33.053546 2026] [security2:error] [pid 3523567:tid 3523567] [client 43.163.206.70:32980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saliency.co.uk"] [uri "/"] [unique_id "amtUjWKWjyKJETtS8mV84gAAADk"]
[Thu Jul 30 14:41:34.592314 2026] [ssl:error] [pid 3534389:tid 3534389] (70014)End of file found: [client 216.73.216.199:2905] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:35.148296 2026] [ssl:error] [pid 3529970:tid 3529970] (EAI 2)Name or service not known: [client 144.76.19.72:32638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:35.148327 2026] [ssl:error] [pid 3529970:tid 3529970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:35.201030 2026] [ssl:error] [pid 3535692:tid 3535692] (EAI 2)Name or service not known: [client 144.76.19.72:32640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:35.201088 2026] [ssl:error] [pid 3535692:tid 3535692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:38.256558 2026] [ssl:error] [pid 3531777:tid 3531777] (EAI 2)Name or service not known: [client 144.76.19.72:32642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:38.256591 2026] [ssl:error] [pid 3531777:tid 3531777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:38.311513 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:32648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:38.311538 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:41.049686 2026] [security2:error] [pid 3532937:tid 3532937] [client 162.14.66.219:57750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amtUlas5Dj1xs0g3n5f9NwAAABI"]
[Thu Jul 30 14:41:41.323639 2026] [security2:error] [pid 3535741:tid 3535741] [client 43.157.188.74:36702] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtUlbF8VlGx0nITcTZqXQAAAB0"]
[Thu Jul 30 14:41:41.378340 2026] [ssl:error] [pid 3535692:tid 3535692] (EAI 2)Name or service not known: [client 144.76.19.72:30562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:41.378378 2026] [ssl:error] [pid 3535692:tid 3535692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:41.435749 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:30578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:41.435779 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:42.996842 2026] [security2:error] [pid 3535856:tid 3535856] [client 43.157.188.74:38560] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtUlvBcrKkpLgjJCCuA2gAAAEA"], referer: http://www.hornsey-town-hall.org.uk
[Thu Jul 30 14:41:44.489320 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:30586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:44.489363 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:44.546843 2026] [ssl:error] [pid 3535853:tid 3535853] (EAI 2)Name or service not known: [client 144.76.19.72:30594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:44.546875 2026] [ssl:error] [pid 3535853:tid 3535853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:45.302468 2026] [autoindex:error] [pid 3529969:tid 3529969] [client 172.213.17.107:50995] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:45.542362 2026] [security2:error] [pid 3527695:tid 3527695] [client 43.157.188.74:41978] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtUmX4uQMnH9pQ2Sh9lLwAAABM"], referer: https://www.hornsey-town-hall.org.uk/
[Thu Jul 30 14:41:45.686887 2026] [autoindex:error] [pid 3529969:tid 3529969] [client 172.213.17.107:50995] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 14:41:45.699560 2026] [authz_core:error] [pid 3523527:tid 3523527] [client 98.87.102.177:13645] AH01630: client denied by server configuration: /home/lukess/public_html/error_log
[Thu Jul 30 14:41:45.764001 2026] [security2:error] [pid 3530046:tid 3530046] [client 85.208.96.193:16472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/bryan-county-jail-mugshots"] [unique_id "amtUmWir08nz4Vt9vMOvSwAAAD0"]
[Thu Jul 30 14:41:46.196015 2026] [ssl:error] [pid 3530044:tid 3530044] (70014)End of file found: [client 216.73.216.199:39898] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:47.103872 2026] [ssl:error] [pid 3530000:tid 3530000] (70014)End of file found: [client 216.73.216.199:37212] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:47.604983 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:30606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:47.605012 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:47.662787 2026] [ssl:error] [pid 3535856:tid 3535856] (EAI 2)Name or service not known: [client 144.76.19.72:30610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:47.662822 2026] [ssl:error] [pid 3535856:tid 3535856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:48.001893 2026] [core:error] [pid 3515967:tid 3515967] (13)Permission denied: [client 216.73.216.199:19280] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/pid/objects
[Thu Jul 30 14:41:50.121931 2026] [lsapi:warn] [pid 3515967:tid 3515967] [client 216.73.216.199:19280] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 14:41:50.121983 2026] [lsapi:error] [pid 3515967:tid 3515967] [client 216.73.216.199:19280] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/firebug.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 14:41:50.763462 2026] [ssl:error] [pid 3534390:tid 3534390] (EAI 2)Name or service not known: [client 144.76.19.72:27532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:50.763495 2026] [ssl:error] [pid 3534390:tid 3534390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:50.821019 2026] [ssl:error] [pid 3529970:tid 3529970] (EAI 2)Name or service not known: [client 144.76.19.72:27542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:50.821048 2026] [ssl:error] [pid 3529970:tid 3529970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:51.936646 2026] [ssl:error] [pid 3528056:tid 3528056] (70014)End of file found: [client 216.73.216.199:65188] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:52.845266 2026] [ssl:error] [pid 3533616:tid 3533616] (70014)End of file found: [client 216.73.216.199:20346] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:53.917925 2026] [ssl:error] [pid 3532938:tid 3532938] (EAI 2)Name or service not known: [client 144.76.19.72:27546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:53.917956 2026] [ssl:error] [pid 3532938:tid 3532938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:53.970188 2026] [ssl:error] [pid 3535851:tid 3535851] (EAI 2)Name or service not known: [client 144.76.19.72:27562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:53.970218 2026] [ssl:error] [pid 3535851:tid 3535851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:54.584579 2026] [cgi:error] [pid 3527695:tid 3527695] [client 91.84.110.92:63528] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/blog/?
[Thu Jul 30 14:41:54.675058 2026] [cgi:error] [pid 3535851:tid 3535851] [client 91.84.110.92:63537] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/blog/
[Thu Jul 30 14:41:57.023655 2026] [ssl:error] [pid 3535853:tid 3535853] (EAI 2)Name or service not known: [client 144.76.19.72:27566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:57.023690 2026] [ssl:error] [pid 3535853:tid 3535853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:57.075105 2026] [ssl:error] [pid 3531271:tid 3531271] (EAI 2)Name or service not known: [client 144.76.19.72:27572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:41:57.075133 2026] [ssl:error] [pid 3531271:tid 3531271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:41:57.981324 2026] [security2:error] [pid 3535692:tid 3535692] [client 216.73.216.199:13600] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/mbstring.ini"] [unique_id "amtUpSfp2sCc_Hgm4a0ETAAAAAs"]
[Thu Jul 30 14:41:57.981628 2026] [security2:error] [pid 3535692:tid 3535692] [client 216.73.216.199:13600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/mbstring.ini"] [unique_id "amtUpSfp2sCc_Hgm4a0ETAAAAAs"]
[Thu Jul 30 14:41:57.981842 2026] [security2:error] [pid 3535692:tid 3535692] [client 216.73.216.199:13600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/mbstring.ini"] [unique_id "amtUpSfp2sCc_Hgm4a0ETAAAAAs"]
[Thu Jul 30 14:41:58.584137 2026] [ssl:error] [pid 3535692:tid 3535692] (70014)End of file found: [client 216.73.216.199:13600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:41:59.567093 2026] [ssl:error] [pid 3533616:tid 3533616] (70014)End of file found: [client 216.73.216.199:64666] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:00.127920 2026] [ssl:error] [pid 3527695:tid 3527695] (EAI 2)Name or service not known: [client 144.76.19.72:56984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:00.127949 2026] [ssl:error] [pid 3527695:tid 3527695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:00.182338 2026] [ssl:error] [pid 3537164:tid 3537164] (EAI 2)Name or service not known: [client 144.76.19.72:56990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:00.182376 2026] [ssl:error] [pid 3537164:tid 3537164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:00.200566 2026] [access_compat:error] [pid 3522873:tid 3522873] [client 45.158.164.139:53128] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:42:00.700456 2026] [ssl:error] [pid 3529970:tid 3529970] (70014)End of file found: [client 216.73.216.199:32885] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:01.434925 2026] [authz_core:error] [pid 3522873:tid 3522873] [client 66.249.66.35:44276] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:42:01.437583 2026] [authz_core:error] [pid 3522873:tid 3522873] [client 66.249.66.35:44276] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:42:01.548372 2026] [security2:error] [pid 3530043:tid 3530043] [client 8.218.0.249:37345] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUqV_7vTOFsFz-Z_iPXwAAADc"]
[Thu Jul 30 14:42:01.548456 2026] [security2:error] [pid 3530043:tid 3530043] [client 8.218.0.249:37345] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUqV_7vTOFsFz-Z_iPXwAAADc"]
[Thu Jul 30 14:42:01.548699 2026] [security2:error] [pid 3530043:tid 3530043] [client 8.218.0.249:37345] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUqV_7vTOFsFz-Z_iPXwAAADc"]
[Thu Jul 30 14:42:03.236033 2026] [ssl:error] [pid 3535853:tid 3535853] (EAI 2)Name or service not known: [client 144.76.19.72:56998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:03.236082 2026] [ssl:error] [pid 3535853:tid 3535853] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:03.288935 2026] [ssl:error] [pid 3534341:tid 3534341] (EAI 2)Name or service not known: [client 144.76.19.72:57006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:03.288974 2026] [ssl:error] [pid 3534341:tid 3534341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:03.398484 2026] [security2:error] [pid 3537339:tid 3537339] [client 46.32.177.94:16036] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUqzngrup0JXDN3RSiLQAAAAE"]
[Thu Jul 30 14:42:03.398542 2026] [security2:error] [pid 3537339:tid 3537339] [client 46.32.177.94:16036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUqzngrup0JXDN3RSiLQAAAAE"]
[Thu Jul 30 14:42:03.398860 2026] [security2:error] [pid 3537339:tid 3537339] [client 46.32.177.94:16036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUqzngrup0JXDN3RSiLQAAAAE"]
[Thu Jul 30 14:42:04.355547 2026] [ssl:error] [pid 3533788:tid 3533788] (70014)End of file found: [client 216.73.216.199:63402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:05.581731 2026] [ssl:error] [pid 3529969:tid 3529969] (70014)End of file found: [client 216.73.216.199:31277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:06.352546 2026] [ssl:error] [pid 3521483:tid 3521483] (EAI 2)Name or service not known: [client 144.76.19.72:57022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:06.352578 2026] [ssl:error] [pid 3521483:tid 3521483] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:06.408284 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:57026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:06.408315 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:06.812449 2026] [ssl:error] [pid 3535741:tid 3535741] (70014)End of file found: [client 216.73.216.199:9377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:07.638462 2026] [security2:error] [pid 3528887:tid 3528887] [client 102.0.10.160:38426] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUr8qcc01uWTRXrydBKgAAACs"]
[Thu Jul 30 14:42:07.638514 2026] [security2:error] [pid 3528887:tid 3528887] [client 102.0.10.160:38426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtUr8qcc01uWTRXrydBKgAAACs"]
[Thu Jul 30 14:42:07.638765 2026] [security2:error] [pid 3528887:tid 3528887] [client 102.0.10.160:38426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtUr8qcc01uWTRXrydBKgAAACs"]
[Thu Jul 30 14:42:09.459885 2026] [ssl:error] [pid 3514829:tid 3514829] (EAI 2)Name or service not known: [client 144.76.19.72:57030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:09.459917 2026] [ssl:error] [pid 3514829:tid 3514829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:09.515836 2026] [ssl:error] [pid 3534391:tid 3534391] (EAI 2)Name or service not known: [client 144.76.19.72:57042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:09.515881 2026] [ssl:error] [pid 3534391:tid 3534391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:09.704375 2026] [ssl:error] [pid 3537339:tid 3537339] (70014)End of file found: [client 216.73.216.199:21334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:11.594930 2026] [security2:error] [pid 3537564:tid 3537564] [client 114.119.132.218:33239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amtUs5Ql3kw2h_gHqc6-FAAAAAo"], referer: https://the-pryors.co.uk/robots.txt
[Thu Jul 30 14:42:12.134970 2026] [ssl:error] [pid 3533616:tid 3533616] (70014)End of file found: [client 216.73.216.199:43838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:12.575341 2026] [ssl:error] [pid 3528056:tid 3528056] (EAI 2)Name or service not known: [client 144.76.19.72:29256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:12.575371 2026] [ssl:error] [pid 3528056:tid 3528056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:12.639098 2026] [ssl:error] [pid 3530044:tid 3530044] (EAI 2)Name or service not known: [client 144.76.19.72:29262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:12.639132 2026] [ssl:error] [pid 3530044:tid 3530044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:13.565455 2026] [security2:error] [pid 3535854:tid 3535854] [client 114.119.132.218:33241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amtUtaxna036cM-ibUzEwQAAADg"], referer: https://the-pryors.co.uk/robots.txt
[Thu Jul 30 14:42:14.935663 2026] [ssl:error] [pid 3534341:tid 3534341] (70014)End of file found: [client 216.73.216.199:8385] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:15.542253 2026] [ssl:error] [pid 3530001:tid 3530001] (70014)End of file found: [client 216.73.216.199:10987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:15.714948 2026] [ssl:error] [pid 3535854:tid 3535854] (EAI 2)Name or service not known: [client 144.76.19.72:29264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:15.714995 2026] [ssl:error] [pid 3535854:tid 3535854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:15.773239 2026] [ssl:error] [pid 3527695:tid 3527695] (EAI 2)Name or service not known: [client 144.76.19.72:29266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:15.773267 2026] [ssl:error] [pid 3527695:tid 3527695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:16.836858 2026] [ssl:error] [pid 3522873:tid 3522873] (70014)End of file found: [client 216.73.216.199:2613] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:17.133037 2026] [ssl:error] [pid 3533392:tid 3533392] (70014)End of file found: [client 216.73.216.199:7924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:17.542355 2026] [ssl:error] [pid 3527695:tid 3527695] (70014)End of file found: [client 216.73.216.199:32970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:18.509383 2026] [security2:error] [pid 3531777:tid 3531777] [client 43.165.125.66:38396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amtUuvbfSQBDSjcATOl4ZQAAACU"]
[Thu Jul 30 14:42:18.830351 2026] [ssl:error] [pid 3537598:tid 3537598] (EAI 2)Name or service not known: [client 144.76.19.72:29274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:18.830382 2026] [ssl:error] [pid 3537598:tid 3537598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:18.885734 2026] [ssl:error] [pid 3533616:tid 3533616] (EAI 2)Name or service not known: [client 144.76.19.72:29288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:18.885765 2026] [ssl:error] [pid 3533616:tid 3533616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:21.939002 2026] [ssl:error] [pid 3535781:tid 3535781] (EAI 2)Name or service not known: [client 144.76.19.72:60114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:21.939041 2026] [ssl:error] [pid 3535781:tid 3535781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:21.992549 2026] [ssl:error] [pid 3534341:tid 3534341] (EAI 2)Name or service not known: [client 144.76.19.72:60120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:21.992576 2026] [ssl:error] [pid 3534341:tid 3534341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:22.260273 2026] [ssl:error] [pid 3531271:tid 3531271] (70014)End of file found: [client 216.73.216.199:30503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:22.679197 2026] [ssl:error] [pid 3533616:tid 3533616] (70014)End of file found: [client 216.73.216.199:6679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:23.270806 2026] [ssl:error] [pid 3522873:tid 3522873] (70014)End of file found: [client 216.73.216.199:24231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:25.050651 2026] [ssl:error] [pid 3535855:tid 3535855] (EAI 2)Name or service not known: [client 144.76.19.72:60124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:25.050691 2026] [ssl:error] [pid 3535855:tid 3535855] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:25.208860 2026] [ssl:error] [pid 3538028:tid 3538028] (EAI 2)Name or service not known: [client 144.76.19.72:60134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:25.208900 2026] [ssl:error] [pid 3538028:tid 3538028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:27.792197 2026] [ssl:error] [pid 3537564:tid 3537564] (70014)End of file found: [client 216.73.216.199:45419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:28.003502 2026] [cgi:error] [pid 3535741:tid 3535741] [client 51.120.70.186:56696] AH02811: stderr from /home/adamdixc/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:42:28.263668 2026] [ssl:error] [pid 3538106:tid 3538106] (EAI 2)Name or service not known: [client 144.76.19.72:60138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:28.263729 2026] [ssl:error] [pid 3538106:tid 3538106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:28.317985 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:60152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:28.318011 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:28.388819 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:11830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:31.372724 2026] [ssl:error] [pid 3535851:tid 3535851] (EAI 2)Name or service not known: [client 144.76.19.72:45582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:31.372763 2026] [ssl:error] [pid 3535851:tid 3535851] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:31.428649 2026] [ssl:error] [pid 3533392:tid 3533392] (EAI 2)Name or service not known: [client 144.76.19.72:45596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:31.428691 2026] [ssl:error] [pid 3533392:tid 3533392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:32.349253 2026] [ssl:error] [pid 3535853:tid 3535853] (70014)End of file found: [client 216.73.216.199:2770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:34.482674 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:45606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:34.482719 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:34.536343 2026] [ssl:error] [pid 3538065:tid 3538065] (EAI 2)Name or service not known: [client 144.76.19.72:45614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:34.536382 2026] [ssl:error] [pid 3538065:tid 3538065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:35.965743 2026] [ssl:error] [pid 3538106:tid 3538106] (70014)End of file found: [client 216.73.216.199:38773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:36.262122 2026] [ssl:error] [pid 3538103:tid 3538103] (70014)End of file found: [client 216.73.216.199:19238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:37.595852 2026] [ssl:error] [pid 3534341:tid 3534341] (EAI 2)Name or service not known: [client 144.76.19.72:45620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:37.595881 2026] [ssl:error] [pid 3534341:tid 3534341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:37.653479 2026] [ssl:error] [pid 3535692:tid 3535692] (EAI 2)Name or service not known: [client 144.76.19.72:45622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:37.653505 2026] [ssl:error] [pid 3535692:tid 3535692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:40.716041 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:36126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:40.716091 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:40.770532 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:36140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:40.770567 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:40.941686 2026] [authz_core:error] [pid 3531777:tid 3531777] [client 66.249.66.33:64502] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:42:40.944369 2026] [authz_core:error] [pid 3531777:tid 3531777] [client 66.249.66.33:64502] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:42:41.708603 2026] [ssl:error] [pid 3534390:tid 3534390] (70014)End of file found: [client 216.73.216.199:64649] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:42.199349 2026] [ssl:error] [pid 3522873:tid 3522873] (70014)End of file found: [client 216.73.216.199:1490] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:42.507463 2026] [ssl:error] [pid 3532863:tid 3532863] (70014)End of file found: [client 216.73.216.199:62040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:43.825811 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:36150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:43.825834 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:43.878388 2026] [ssl:error] [pid 3538106:tid 3538106] (EAI 2)Name or service not known: [client 144.76.19.72:36156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:43.878447 2026] [ssl:error] [pid 3538106:tid 3538106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:46.182608 2026] [security2:error] [pid 3538830:tid 3538830] [client 85.208.96.205:56272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/life-in-the-1950s-compared-to-today"] [unique_id "amtU1uPaLCninWVTBMHccwAAAAA"]
[Thu Jul 30 14:42:46.935659 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:36160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:46.935690 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:46.991939 2026] [ssl:error] [pid 3534391:tid 3534391] (EAI 2)Name or service not known: [client 144.76.19.72:36176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:46.991968 2026] [ssl:error] [pid 3534391:tid 3534391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:47.018903 2026] [ssl:error] [pid 3535740:tid 3535740] (70014)End of file found: [client 216.73.216.199:31633] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:47.621390 2026] [ssl:error] [pid 3534391:tid 3534391] (70014)End of file found: [client 216.73.216.199:50979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:47.940477 2026] [ssl:error] [pid 3532863:tid 3532863] (70014)End of file found: [client 216.73.216.199:20131] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:50.059855 2026] [ssl:error] [pid 3534289:tid 3534289] (EAI 2)Name or service not known: [client 144.76.19.72:50968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:50.059898 2026] [ssl:error] [pid 3534289:tid 3534289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:50.115870 2026] [ssl:error] [pid 3535741:tid 3535741] (EAI 2)Name or service not known: [client 144.76.19.72:50976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:50.115909 2026] [ssl:error] [pid 3535741:tid 3535741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:52.462647 2026] [ssl:error] [pid 3530000:tid 3530000] (70014)End of file found: [client 216.73.216.199:45166] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:53.051378 2026] [ssl:error] [pid 3508257:tid 3508257] (70014)End of file found: [client 216.73.216.199:62078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:53.228375 2026] [ssl:error] [pid 3535854:tid 3535854] (EAI 2)Name or service not known: [client 144.76.19.72:50986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:53.228398 2026] [ssl:error] [pid 3535854:tid 3535854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:53.354015 2026] [ssl:error] [pid 3538106:tid 3538106] (EAI 2)Name or service not known: [client 144.76.19.72:50988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:53.354037 2026] [ssl:error] [pid 3538106:tid 3538106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:53.769788 2026] [ssl:error] [pid 3535854:tid 3535854] (70014)End of file found: [client 216.73.216.199:9414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:53.975950 2026] [access_compat:error] [pid 3538106:tid 3538106] [client 20.104.16.169:25032] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:42:56.315899 2026] [authz_core:error] [pid 3538341:tid 3538341] [client 66.249.66.33:52642] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:42:56.318558 2026] [authz_core:error] [pid 3538341:tid 3538341] [client 66.249.66.33:52642] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:42:56.408674 2026] [ssl:error] [pid 3535856:tid 3535856] (EAI 2)Name or service not known: [client 144.76.19.72:50998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:56.408699 2026] [ssl:error] [pid 3535856:tid 3535856] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:56.464104 2026] [ssl:error] [pid 3522873:tid 3522873] (EAI 2)Name or service not known: [client 144.76.19.72:51012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:56.464135 2026] [ssl:error] [pid 3522873:tid 3522873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:58.475915 2026] [ssl:error] [pid 3539479:tid 3539479] (70014)End of file found: [client 216.73.216.199:38174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:58.895111 2026] [ssl:error] [pid 3523527:tid 3523527] (70014)End of file found: [client 216.73.216.199:26513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:59.187381 2026] [ssl:error] [pid 3530000:tid 3530000] (70014)End of file found: [client 216.73.216.199:57372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:42:59.521711 2026] [ssl:error] [pid 3537563:tid 3537563] (EAI 2)Name or service not known: [client 144.76.19.72:51018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:59.521747 2026] [ssl:error] [pid 3537563:tid 3537563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:42:59.580029 2026] [ssl:error] [pid 3518955:tid 3518955] (EAI 2)Name or service not known: [client 144.76.19.72:50416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:42:59.580094 2026] [ssl:error] [pid 3518955:tid 3518955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:00.797434 2026] [access_compat:error] [pid 3530043:tid 3530043] [client 45.158.164.139:43228] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:43:01.331976 2026] [access_compat:error] [pid 3539770:tid 3539770] [client 45.158.164.139:43244] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:43:02.634664 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:50428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:02.634692 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:02.689288 2026] [ssl:error] [pid 3530043:tid 3530043] (EAI 2)Name or service not known: [client 144.76.19.72:50436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:02.689314 2026] [ssl:error] [pid 3530043:tid 3530043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:03.294706 2026] [security2:error] [pid 3535856:tid 3535856] [client 114.119.146.111:48391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574640000/request_format~html/cat_ids~104"] [unique_id "amtU5_BcrKkpLgjJCCuBIQAAAEA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E25-11-2019
[Thu Jul 30 14:43:04.311589 2026] [ssl:error] [pid 3539770:tid 3539770] (70014)End of file found: [client 216.73.216.199:64990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:04.676844 2026] [security2:error] [pid 3523527:tid 3523527] [client 51.68.107.137:33337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hazardous-materials.co.uk"] [uri "/robots.txt"] [unique_id "amtU6PgoyzcbIjzopiNXbQAAAB8"]
[Thu Jul 30 14:43:04.761919 2026] [security2:error] [pid 3538341:tid 3538341] [client 51.68.107.137:34367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amtU6CToCozgHFc-iDEVwAAAAC0"]
[Thu Jul 30 14:43:04.863610 2026] [security2:error] [pid 3530000:tid 3530000] [client 51.68.107.137:10327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hazardous-materials.co.uk"] [uri "/robots.txt"] [unique_id "amtU6NbsqGD8gCwoYE9zeAAAAAw"]
[Thu Jul 30 14:43:05.173607 2026] [security2:error] [pid 3539998:tid 3539998] [client 114.119.146.111:48399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574640000/request_format~html/cat_ids~104"] [unique_id "amtU6Q1wWDTE_FGUExYHQgAAADQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E25-11-2019
[Thu Jul 30 14:43:05.214621 2026] [ssl:error] [pid 3539479:tid 3539479] (70014)End of file found: [client 216.73.216.199:16359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:05.743671 2026] [ssl:error] [pid 3538103:tid 3538103] (EAI 2)Name or service not known: [client 144.76.19.72:50438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:05.743707 2026] [ssl:error] [pid 3538103:tid 3538103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:05.799972 2026] [ssl:error] [pid 3520931:tid 3520931] (EAI 2)Name or service not known: [client 144.76.19.72:50440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:05.800010 2026] [ssl:error] [pid 3520931:tid 3520931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:06.418625 2026] [ssl:error] [pid 3535856:tid 3535856] (70014)End of file found: [client 216.73.216.199:34423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:08.896413 2026] [ssl:error] [pid 3537563:tid 3537563] (EAI 2)Name or service not known: [client 144.76.19.72:50450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:08.896484 2026] [ssl:error] [pid 3537563:tid 3537563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:08.950154 2026] [ssl:error] [pid 3539257:tid 3539257] (EAI 2)Name or service not known: [client 144.76.19.72:50456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:08.950180 2026] [ssl:error] [pid 3539257:tid 3539257] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:10.384704 2026] [authz_core:error] [pid 3534391:tid 3534391] [client 66.249.66.35:59470] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:43:10.389334 2026] [authz_core:error] [pid 3534391:tid 3534391] [client 66.249.66.35:59470] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:43:10.641309 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:29137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:11.137585 2026] [ssl:error] [pid 3534390:tid 3534390] (70014)End of file found: [client 216.73.216.199:21927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:11.373597 2026] [security2:error] [pid 3538065:tid 3538065] [client 185.191.171.17:20678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amtU77lKVokfOLvMaRDFUQAAACI"]
[Thu Jul 30 14:43:12.007713 2026] [ssl:error] [pid 3539998:tid 3539998] (EAI 2)Name or service not known: [client 144.76.19.72:38378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:12.007746 2026] [ssl:error] [pid 3539998:tid 3539998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:12.067241 2026] [ssl:error] [pid 3534341:tid 3534341] (EAI 2)Name or service not known: [client 144.76.19.72:38380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:12.067269 2026] [ssl:error] [pid 3534341:tid 3534341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:13.047037 2026] [core:error] [pid 3538921:tid 3538921] (13)Permission denied: [client 216.73.216.199:26180] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-16/slabs_cpu_partial
[Thu Jul 30 14:43:13.348792 2026] [core:error] [pid 3538921:tid 3538921] (13)Permission denied: [client 216.73.216.199:26180] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/store_user
[Thu Jul 30 14:43:13.950972 2026] [ssl:error] [pid 3538921:tid 3538921] (70014)End of file found: [client 216.73.216.199:26180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:15.157655 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:38394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:15.157686 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:15.212842 2026] [ssl:error] [pid 3538341:tid 3538341] (EAI 2)Name or service not known: [client 144.76.19.72:38406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:15.212880 2026] [ssl:error] [pid 3538341:tid 3538341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:16.733891 2026] [security2:error] [pid 3538341:tid 3538341] [client 43.167.241.46:52658] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wartypig.com"] [uri "/"] [unique_id "amtU9CToCozgHFc-iDEVwwAAAC0"]
[Thu Jul 30 14:43:17.153522 2026] [ssl:error] [pid 3531777:tid 3531777] (70014)End of file found: [client 216.73.216.199:25272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:18.266838 2026] [ssl:error] [pid 3538103:tid 3538103] (EAI 2)Name or service not known: [client 144.76.19.72:38414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:18.266871 2026] [ssl:error] [pid 3538103:tid 3538103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:18.319700 2026] [ssl:error] [pid 3537544:tid 3537544] (EAI 2)Name or service not known: [client 144.76.19.72:38424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:18.319733 2026] [ssl:error] [pid 3537544:tid 3537544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:19.749530 2026] [ssl:error] [pid 3539997:tid 3539997] (70014)End of file found: [client 216.73.216.199:11261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:19.862721 2026] [ssl:error] [pid 3522873:tid 3522873] (70014)End of file found: [client 216.73.216.199:28548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:21.239842 2026] [security2:error] [pid 3535741:tid 3535741] [client 43.157.149.188:39232] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ziltdesign.be"] [uri "/"] [unique_id "amtU-bF8VlGx0nITcTZq3gAAAB0"]
[Thu Jul 30 14:43:21.378011 2026] [ssl:error] [pid 3538921:tid 3538921] (EAI 2)Name or service not known: [client 144.76.19.72:61292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:21.378049 2026] [ssl:error] [pid 3538921:tid 3538921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:21.434653 2026] [ssl:error] [pid 3529969:tid 3529969] (EAI 2)Name or service not known: [client 144.76.19.72:61308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:21.434690 2026] [ssl:error] [pid 3529969:tid 3529969] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:21.548819 2026] [security2:error] [pid 3538341:tid 3538341] [client 200.5.58.132:5091] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtU-SToCozgHFc-iDEVxQAAAC0"]
[Thu Jul 30 14:43:21.548868 2026] [security2:error] [pid 3538341:tid 3538341] [client 200.5.58.132:5091] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtU-SToCozgHFc-iDEVxQAAAC0"]
[Thu Jul 30 14:43:21.549142 2026] [security2:error] [pid 3538341:tid 3538341] [client 200.5.58.132:5091] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtU-SToCozgHFc-iDEVxQAAAC0"]
[Thu Jul 30 14:43:22.693965 2026] [ssl:error] [pid 3514829:tid 3514829] (70014)End of file found: [client 216.73.216.199:35476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:24.503601 2026] [ssl:error] [pid 3534391:tid 3534391] (70014)End of file found: [client 216.73.216.199:33299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:24.505981 2026] [ssl:error] [pid 3514765:tid 3514765] (EAI 2)Name or service not known: [client 144.76.19.72:61322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:24.506023 2026] [ssl:error] [pid 3514765:tid 3514765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:24.560991 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:61332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:24.561023 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:26.035833 2026] [security2:error] [pid 3532938:tid 3532938] [client 8.210.174.232:45151] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtU_ihtAZznx9iucopRKwAAABU"]
[Thu Jul 30 14:43:26.035886 2026] [security2:error] [pid 3532938:tid 3532938] [client 8.210.174.232:45151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtU_ihtAZznx9iucopRKwAAABU"]
[Thu Jul 30 14:43:26.036170 2026] [security2:error] [pid 3532938:tid 3532938] [client 8.210.174.232:45151] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtU_ihtAZznx9iucopRKwAAABU"]
[Thu Jul 30 14:43:27.618497 2026] [ssl:error] [pid 3538065:tid 3538065] (EAI 2)Name or service not known: [client 144.76.19.72:61342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:27.618526 2026] [ssl:error] [pid 3538065:tid 3538065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:27.680457 2026] [ssl:error] [pid 3538341:tid 3538341] (EAI 2)Name or service not known: [client 144.76.19.72:61350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:27.680492 2026] [ssl:error] [pid 3538341:tid 3538341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:27.878440 2026] [security2:error] [pid 3538103:tid 3538103] [client 43.165.126.130:45164] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/22a24/"] [unique_id "amtU_zw4xoDQGpKEC1MxugAAACY"]
[Thu Jul 30 14:43:28.508242 2026] [core:error] [pid 3534390:tid 3534390] (13)Permission denied: [client 216.73.216.199:62051] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_blk/drivers/virtio:virtio_blk/bind
[Thu Jul 30 14:43:29.912502 2026] [ssl:error] [pid 3539831:tid 3539831] (70014)End of file found: [client 216.73.216.199:49317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:30.214825 2026] [ssl:error] [pid 3534390:tid 3534390] (70014)End of file found: [client 216.73.216.199:62051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:30.720687 2026] [ssl:error] [pid 3538103:tid 3538103] (70014)End of file found: [client 216.73.216.199:13561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:30.732860 2026] [ssl:error] [pid 3539477:tid 3539477] (EAI 2)Name or service not known: [client 144.76.19.72:32608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:30.732891 2026] [ssl:error] [pid 3539477:tid 3539477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:30.784368 2026] [ssl:error] [pid 3534391:tid 3534391] (EAI 2)Name or service not known: [client 144.76.19.72:32614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:30.784399 2026] [ssl:error] [pid 3534391:tid 3534391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:30.892804 2026] [authz_core:error] [pid 3532863:tid 3532863] [client 172.202.44.182:17778] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:43:31.551781 2026] [security2:error] [pid 3534341:tid 3534341] [client 114.119.141.51:20951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.holistic-clear.co.uk"] [uri "/robots.txt"] [unique_id "amtVA1yyQ2CswKgQ-EEetQAAADU"], referer: http://www.holistic-clear.co.uk/robots.txt
[Thu Jul 30 14:43:31.647917 2026] [security2:error] [pid 3508257:tid 3508257] [client 8.210.174.232:42011] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVA9fKkceONMkwXS488AAAABs"]
[Thu Jul 30 14:43:31.647973 2026] [security2:error] [pid 3508257:tid 3508257] [client 8.210.174.232:42011] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVA9fKkceONMkwXS488AAAABs"]
[Thu Jul 30 14:43:31.648256 2026] [security2:error] [pid 3508257:tid 3508257] [client 8.210.174.232:42011] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVA9fKkceONMkwXS488AAAABs"]
[Thu Jul 30 14:43:33.840671 2026] [ssl:error] [pid 3539071:tid 3539071] (EAI 2)Name or service not known: [client 144.76.19.72:32636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:33.840705 2026] [ssl:error] [pid 3539071:tid 3539071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:33.895762 2026] [ssl:error] [pid 3539770:tid 3539770] (EAI 2)Name or service not known: [client 144.76.19.72:32652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:33.895799 2026] [ssl:error] [pid 3539770:tid 3539770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:34.168653 2026] [core:error] [pid 3539071:tid 3539071] [client 66.249.66.8:61554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:43:34.168681 2026] [core:error] [pid 3539071:tid 3539071] [client 66.249.66.8:61554] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:43:35.416480 2026] [ssl:error] [pid 3537563:tid 3537563] (70014)End of file found: [client 216.73.216.199:4308] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:35.792201 2026] [security2:error] [pid 3541180:tid 3541180] [client 185.191.171.16:37952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6450.0.html"] [unique_id "amtVB3YHOZ6Brq7V5drL6AAAABQ"]
[Thu Jul 30 14:43:36.240350 2026] [core:error] [pid 3539770:tid 3539770] (13)Permission denied: [client 216.73.216.199:55223] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-96/usersize
[Thu Jul 30 14:43:36.952178 2026] [ssl:error] [pid 3522873:tid 3522873] (EAI 2)Name or service not known: [client 144.76.19.72:32660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:36.952216 2026] [ssl:error] [pid 3522873:tid 3522873] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:37.007104 2026] [ssl:error] [pid 3538103:tid 3538103] (EAI 2)Name or service not known: [client 144.76.19.72:32674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:37.007131 2026] [ssl:error] [pid 3538103:tid 3538103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:37.746105 2026] [ssl:error] [pid 3538028:tid 3538028] (70014)End of file found: [client 216.73.216.199:27963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:38.048400 2026] [ssl:error] [pid 3539770:tid 3539770] (70014)End of file found: [client 216.73.216.199:55223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:40.062511 2026] [ssl:error] [pid 3535854:tid 3535854] (EAI 2)Name or service not known: [client 144.76.19.72:24544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:40.062541 2026] [ssl:error] [pid 3535854:tid 3535854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:40.118630 2026] [ssl:error] [pid 3537544:tid 3537544] (EAI 2)Name or service not known: [client 144.76.19.72:24558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:40.118652 2026] [ssl:error] [pid 3537544:tid 3537544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:41.959696 2026] [ssl:error] [pid 3531777:tid 3531777] (70014)End of file found: [client 216.73.216.199:15347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:43.065142 2026] [core:error] [pid 3534391:tid 3534391] (13)Permission denied: [client 216.73.216.199:52486] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bui_item/total_objects
[Thu Jul 30 14:43:43.175476 2026] [ssl:error] [pid 3533392:tid 3533392] (EAI 2)Name or service not known: [client 144.76.19.72:24572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:43.175502 2026] [ssl:error] [pid 3533392:tid 3533392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:43.230639 2026] [ssl:error] [pid 3535782:tid 3535782] (EAI 2)Name or service not known: [client 144.76.19.72:24574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:43.230677 2026] [ssl:error] [pid 3535782:tid 3535782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:44.681713 2026] [ssl:error] [pid 3537544:tid 3537544] (70014)End of file found: [client 216.73.216.199:32893] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:46.192938 2026] [ssl:error] [pid 3534391:tid 3534391] (70014)End of file found: [client 216.73.216.199:52486] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:46.284824 2026] [ssl:error] [pid 3530000:tid 3530000] (EAI 2)Name or service not known: [client 144.76.19.72:24582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:46.284853 2026] [ssl:error] [pid 3530000:tid 3530000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:46.341596 2026] [ssl:error] [pid 3541517:tid 3541517] (EAI 2)Name or service not known: [client 144.76.19.72:24594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:46.341633 2026] [ssl:error] [pid 3541517:tid 3541517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:46.647327 2026] [security2:error] [pid 3528056:tid 3528056] [client 85.208.96.199:25260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/disadvantages-of-wto-for-developing-countries"] [unique_id "amtVEpQES133X3N9cLm3dwAAAAM"]
[Thu Jul 30 14:43:47.294710 2026] [core:error] [pid 3528887:tid 3528887] (13)Permission denied: [client 216.73.216.199:8253] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/taskstats/objs_per_slab
[Thu Jul 30 14:43:47.396549 2026] [ssl:error] [pid 3528887:tid 3528887] (70014)End of file found: [client 216.73.216.199:8253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:49.397433 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:24610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:49.397467 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:49.450803 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:24622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:49.450835 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:50.354010 2026] [authz_core:error] [pid 3532863:tid 3532863] [client 172.202.44.182:17778] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:43:51.080535 2026] [core:crit] [pid 3532938:tid 3532938] (13)Permission denied: [client 74.248.152.244:56759] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:43:51.607344 2026] [security2:error] [pid 3538830:tid 3538830] [client 216.73.216.199:62131] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/sssd/cfg_rules.ini"] [unique_id "amtVF-PaLCninWVTBMHc0wAAAAA"]
[Thu Jul 30 14:43:51.607641 2026] [security2:error] [pid 3538830:tid 3538830] [client 216.73.216.199:62131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/sssd/cfg_rules.ini"] [unique_id "amtVF-PaLCninWVTBMHc0wAAAAA"]
[Thu Jul 30 14:43:51.607848 2026] [security2:error] [pid 3538830:tid 3538830] [client 216.73.216.199:62131] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/sssd/cfg_rules.ini"] [unique_id "amtVF-PaLCninWVTBMHc0wAAAAA"]
[Thu Jul 30 14:43:51.909237 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:62131] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:52.502938 2026] [ssl:error] [pid 3541672:tid 3541672] (EAI 2)Name or service not known: [client 144.76.19.72:36938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:52.502970 2026] [ssl:error] [pid 3541672:tid 3541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:52.527138 2026] [core:error] [pid 3541140:tid 3541140] (13)Permission denied: [client 216.73.216.199:51634] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/serio_raw/uevent
[Thu Jul 30 14:43:52.554706 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:36946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:52.554730 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:52.832023 2026] [ssl:error] [pid 3541140:tid 3541140] (70014)End of file found: [client 216.73.216.199:51634] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:54.642349 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:1669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:54.857623 2026] [security2:error] [pid 3541814:tid 3541814] [client 43.157.43.147:59062] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.techsuccess.uk"] [uri "/"] [unique_id "amtVGk6wEUurVAUBOJyAnQAAACM"]
[Thu Jul 30 14:43:55.444248 2026] [cgi:error] [pid 3541672:tid 3541672] [client 3.225.222.228:5384] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:43:55.444568 2026] [core:error] [pid 3541672:tid 3541672] [client 3.225.222.228:5384] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:43:55.630739 2026] [ssl:error] [pid 3530001:tid 3530001] (EAI 2)Name or service not known: [client 144.76.19.72:36956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:55.630778 2026] [ssl:error] [pid 3530001:tid 3530001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:55.685659 2026] [ssl:error] [pid 3541814:tid 3541814] (EAI 2)Name or service not known: [client 144.76.19.72:36970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:55.685687 2026] [ssl:error] [pid 3541814:tid 3541814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:57.364966 2026] [ssl:error] [pid 3538103:tid 3538103] (70014)End of file found: [client 216.73.216.199:18553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:43:58.740230 2026] [ssl:error] [pid 3535692:tid 3535692] (EAI 2)Name or service not known: [client 144.76.19.72:36984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:58.740261 2026] [ssl:error] [pid 3535692:tid 3535692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:43:58.795190 2026] [ssl:error] [pid 3539770:tid 3539770] (EAI 2)Name or service not known: [client 144.76.19.72:37000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:43:58.795215 2026] [ssl:error] [pid 3539770:tid 3539770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:00.140754 2026] [authz_core:error] [pid 3541140:tid 3541140] [client 34.204.233.69:30331] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 14:44:00.730561 2026] [security2:error] [pid 3538830:tid 3538830] [client 114.119.155.144:34161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574640000/cat_ids~19,14/request_format~html"] [unique_id "amtVIOPaLCninWVTBMHc1gAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574640000/cat_ids~19,14,17/request_format~html
[Thu Jul 30 14:44:00.999062 2026] [ssl:error] [pid 3530001:tid 3530001] (70014)End of file found: [client 216.73.216.199:6553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:01.236826 2026] [access_compat:error] [pid 3535692:tid 3535692] [client 145.223.131.24:52966] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 14:44:01.849737 2026] [ssl:error] [pid 3534391:tid 3534391] (EAI 2)Name or service not known: [client 144.76.19.72:35198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:01.849773 2026] [ssl:error] [pid 3534391:tid 3534391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:01.901393 2026] [ssl:error] [pid 3534289:tid 3534289] (EAI 2)Name or service not known: [client 144.76.19.72:35212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:01.901441 2026] [ssl:error] [pid 3534289:tid 3534289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:03.408681 2026] [ssl:error] [pid 3541779:tid 3541779] (70014)End of file found: [client 216.73.216.199:29331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:03.714368 2026] [ssl:error] [pid 3538028:tid 3538028] (70014)End of file found: [client 216.73.216.199:11294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:03.771314 2026] [security2:error] [pid 3538830:tid 3538830] [client 114.119.155.144:34167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574640000/cat_ids~19,14/request_format~html"] [unique_id "amtVI-PaLCninWVTBMHc1wAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574640000/cat_ids~19,14,17/request_format~html
[Thu Jul 30 14:44:04.958108 2026] [ssl:error] [pid 3532937:tid 3532937] (EAI 2)Name or service not known: [client 144.76.19.72:35224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:04.958139 2026] [ssl:error] [pid 3532937:tid 3532937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:05.021458 2026] [ssl:error] [pid 3541517:tid 3541517] (EAI 2)Name or service not known: [client 144.76.19.72:35236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:05.021484 2026] [ssl:error] [pid 3541517:tid 3541517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:06.315957 2026] [ssl:error] [pid 3532938:tid 3532938] (70014)End of file found: [client 216.73.216.199:2960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:06.884947 2026] [security2:error] [pid 3537563:tid 3537563] [client 185.205.18.167:29318] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVJjwEysUc0W5K8nrz1AAAAAQ"]
[Thu Jul 30 14:44:06.884995 2026] [security2:error] [pid 3537563:tid 3537563] [client 185.205.18.167:29318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVJjwEysUc0W5K8nrz1AAAAAQ"]
[Thu Jul 30 14:44:06.885261 2026] [security2:error] [pid 3537563:tid 3537563] [client 185.205.18.167:29318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVJjwEysUc0W5K8nrz1AAAAAQ"]
[Thu Jul 30 14:44:06.886008 2026] [access_compat:error] [pid 3530001:tid 3530001] [client 45.158.164.139:57668] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:44:08.079566 2026] [ssl:error] [pid 3538064:tid 3538064] (EAI 2)Name or service not known: [client 144.76.19.72:35240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:08.079605 2026] [ssl:error] [pid 3538064:tid 3538064] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:08.137498 2026] [ssl:error] [pid 3530001:tid 3530001] (EAI 2)Name or service not known: [client 144.76.19.72:35246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:08.137525 2026] [ssl:error] [pid 3530001:tid 3530001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:08.708255 2026] [ssl:error] [pid 3528056:tid 3528056] (70014)End of file found: [client 216.73.216.199:50186] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:10.651731 2026] [security2:error] [pid 3533392:tid 3533392] [client 49.51.178.45:60332] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amtVKoVn8SwRsI_bXzW31AAAAAg"], referer: http://peterboroughdiocesanregistry.co.uk
[Thu Jul 30 14:44:11.194967 2026] [ssl:error] [pid 3535741:tid 3535741] (EAI 2)Name or service not known: [client 144.76.19.72:24040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:11.194995 2026] [ssl:error] [pid 3535741:tid 3535741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:11.249678 2026] [ssl:error] [pid 3533392:tid 3533392] (EAI 2)Name or service not known: [client 144.76.19.72:24052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:11.249704 2026] [ssl:error] [pid 3533392:tid 3533392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:11.912151 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:39035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:12.744608 2026] [ssl:error] [pid 3535741:tid 3535741] (70014)End of file found: [client 216.73.216.199:9778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:14.304713 2026] [ssl:error] [pid 3541180:tid 3541180] (EAI 2)Name or service not known: [client 144.76.19.72:24054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:14.304764 2026] [ssl:error] [pid 3541180:tid 3541180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:14.358123 2026] [ssl:error] [pid 3533392:tid 3533392] (EAI 2)Name or service not known: [client 144.76.19.72:24070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:14.358152 2026] [ssl:error] [pid 3533392:tid 3533392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:15.458718 2026] [core:error] [pid 3538064:tid 3538064] (13)Permission denied: [client 216.73.216.199:13225] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS2/close_delay
[Thu Jul 30 14:44:16.061750 2026] [ssl:error] [pid 3538064:tid 3538064] (70014)End of file found: [client 216.73.216.199:13225] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:17.414093 2026] [ssl:error] [pid 3541180:tid 3541180] (EAI 2)Name or service not known: [client 144.76.19.72:24086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:17.414124 2026] [ssl:error] [pid 3541180:tid 3541180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:17.460127 2026] [ssl:error] [pid 3530043:tid 3530043] (70014)End of file found: [client 216.73.216.199:9636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:17.470460 2026] [ssl:error] [pid 3537544:tid 3537544] (EAI 2)Name or service not known: [client 144.76.19.72:24092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:17.470482 2026] [ssl:error] [pid 3537544:tid 3537544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:18.167850 2026] [core:error] [pid 3541914:tid 3541914] (13)Permission denied: [client 216.73.216.199:8566] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/line
[Thu Jul 30 14:44:18.770306 2026] [ssl:error] [pid 3541914:tid 3541914] (70014)End of file found: [client 216.73.216.199:8566] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:20.525701 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:52708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:20.525728 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:20.582555 2026] [ssl:error] [pid 3539832:tid 3539832] (EAI 2)Name or service not known: [client 144.76.19.72:52720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:20.582589 2026] [ssl:error] [pid 3539832:tid 3539832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:21.775630 2026] [core:error] [pid 3534390:tid 3534390] (13)Permission denied: [client 216.73.216.199:58690] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/sanity_checks
[Thu Jul 30 14:44:22.076626 2026] [ssl:error] [pid 3534390:tid 3534390] (70014)End of file found: [client 216.73.216.199:58690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:22.880402 2026] [ssl:error] [pid 3538103:tid 3538103] (70014)End of file found: [client 216.73.216.199:59294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:23.636012 2026] [ssl:error] [pid 3530043:tid 3530043] (EAI 2)Name or service not known: [client 144.76.19.72:52730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:23.636040 2026] [ssl:error] [pid 3530043:tid 3530043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:23.687233 2026] [ssl:error] [pid 3539832:tid 3539832] (EAI 2)Name or service not known: [client 144.76.19.72:52734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:23.687257 2026] [ssl:error] [pid 3539832:tid 3539832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:25.997428 2026] [ssl:error] [pid 3541813:tid 3541813] (70014)End of file found: [client 216.73.216.199:16657] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:26.778460 2026] [ssl:error] [pid 3532863:tid 3532863] (EAI 2)Name or service not known: [client 144.76.19.72:52736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:26.778499 2026] [ssl:error] [pid 3532863:tid 3532863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:26.833336 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:52742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:26.833361 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:27.803115 2026] [core:error] [pid 3537597:tid 3537597] (13)Permission denied: [client 216.73.216.199:31327] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/cache_dma
[Thu Jul 30 14:44:28.104474 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:31327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:29.006668 2026] [ssl:error] [pid 3533392:tid 3533392] (70014)End of file found: [client 216.73.216.199:12692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:29.904605 2026] [ssl:error] [pid 3543007:tid 3543007] (EAI 2)Name or service not known: [client 144.76.19.72:42758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:29.904652 2026] [ssl:error] [pid 3543007:tid 3543007] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:29.961400 2026] [ssl:error] [pid 3543008:tid 3543008] (EAI 2)Name or service not known: [client 144.76.19.72:42774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:29.961454 2026] [ssl:error] [pid 3543008:tid 3543008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:30.612854 2026] [lsapi:warn] [pid 3532863:tid 3532863] [client 194.249.231.23:58678] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 14:44:30.612895 2026] [lsapi:warn] [pid 3532863:tid 3532863] [client 194.249.231.23:58678] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 14:44:31.301894 2026] [ssl:error] [pid 3508257:tid 3508257] (70014)End of file found: [client 216.73.216.199:16794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:33.019860 2026] [ssl:error] [pid 3542973:tid 3542973] (EAI 2)Name or service not known: [client 144.76.19.72:42780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:33.019898 2026] [ssl:error] [pid 3542973:tid 3542973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:33.077889 2026] [ssl:error] [pid 3528324:tid 3528324] (EAI 2)Name or service not known: [client 144.76.19.72:42794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:33.077919 2026] [ssl:error] [pid 3528324:tid 3528324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:34.283605 2026] [ssl:error] [pid 3542838:tid 3542838] (70014)End of file found: [client 216.73.216.199:7636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:34.427343 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:8199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:35.134246 2026] [core:error] [pid 3541140:tid 3541140] [client 91.142.73.116:51198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/#comment-133978
[Thu Jul 30 14:44:35.134273 2026] [core:error] [pid 3541140:tid 3541140] [client 91.142.73.116:51198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/testing-the-rss-feed/#comment-133978
[Thu Jul 30 14:44:35.255327 2026] [core:crit] [pid 3528324:tid 3528324] (13)Permission denied: [client 91.142.73.116:60444] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable, referer: http://edwardkensington.com/
[Thu Jul 30 14:44:35.546332 2026] [core:error] [pid 3535741:tid 3535741] [client 66.249.66.8:62187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:44:35.546370 2026] [core:error] [pid 3535741:tid 3535741] [client 66.249.66.8:62187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:44:36.134430 2026] [ssl:error] [pid 3539832:tid 3539832] (EAI 2)Name or service not known: [client 144.76.19.72:42810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:36.134461 2026] [ssl:error] [pid 3539832:tid 3539832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:36.188788 2026] [ssl:error] [pid 3534341:tid 3534341] (EAI 2)Name or service not known: [client 144.76.19.72:42814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:36.188821 2026] [ssl:error] [pid 3534341:tid 3534341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:36.735612 2026] [ssl:error] [pid 3535741:tid 3535741] (70014)End of file found: [client 216.73.216.199:28497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:38.685190 2026] [authz_core:error] [pid 3534341:tid 3534341] [client 126.209.52.173:60819] AH01630: client denied by server configuration: /home/nkxfsjcw/public_html/xmlrpc.php
[Thu Jul 30 14:44:39.274393 2026] [ssl:error] [pid 3532937:tid 3532937] (EAI 2)Name or service not known: [client 144.76.19.72:42816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:39.274418 2026] [ssl:error] [pid 3532937:tid 3532937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:39.329116 2026] [ssl:error] [pid 3532937:tid 3532937] (EAI 2)Name or service not known: [client 144.76.19.72:42818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:39.329139 2026] [ssl:error] [pid 3532937:tid 3532937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:39.853571 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:11660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:40.452182 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:2497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:42.177252 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-bazvsbkx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-bazvsbkx/' is executable
[Thu Jul 30 14:44:42.181754 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/' is executable
[Thu Jul 30 14:44:42.183829 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-vuk0cupl/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-vuk0cupl/' is executable
[Thu Jul 30 14:44:42.195634 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-zfuqapa9/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-zfuqapa9/' is executable
[Thu Jul 30 14:44:42.195697 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/' is executable
[Thu Jul 30 14:44:42.199536 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/' is executable
[Thu Jul 30 14:44:42.206211 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-m25d8tn_/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-m25d8tn_/' is executable
[Thu Jul 30 14:44:42.211569 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-ptb93rze/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-ptb93rze/' is executable
[Thu Jul 30 14:44:42.212013 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-vs_5h8vw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-vs_5h8vw/' is executable
[Thu Jul 30 14:44:42.214109 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-urki9vq5/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-urki9vq5/' is executable
[Thu Jul 30 14:44:42.216839 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/' is executable
[Thu Jul 30 14:44:42.221705 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pm45e04g/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pm45e04g/' is executable
[Thu Jul 30 14:44:42.225458 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-o2wyv0oj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-o2wyv0oj/' is executable
[Thu Jul 30 14:44:42.228570 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-ilysblsz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-ilysblsz/' is executable
[Thu Jul 30 14:44:42.228929 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/' is executable
[Thu Jul 30 14:44:42.237500 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-bhe4auzv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-bhe4auzv/' is executable
[Thu Jul 30 14:44:42.242034 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-t0mgg3cv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-t0mgg3cv/' is executable
[Thu Jul 30 14:44:42.247795 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-6b4g6ain/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-6b4g6ain/' is executable
[Thu Jul 30 14:44:42.249539 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-xwbnb_cj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-xwbnb_cj/' is executable
[Thu Jul 30 14:44:42.250957 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pzyber_l/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pzyber_l/' is executable
[Thu Jul 30 14:44:42.251308 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-utbgbvka/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-utbgbvka/' is executable
[Thu Jul 30 14:44:42.252334 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pckpp7iz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pckpp7iz/' is executable
[Thu Jul 30 14:44:42.252775 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-q_4s1dmg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-q_4s1dmg/' is executable
[Thu Jul 30 14:44:42.256031 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/' is executable
[Thu Jul 30 14:44:42.257704 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-fb6u1ntx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-fb6u1ntx/' is executable
[Thu Jul 30 14:44:42.259262 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-bpwqiojf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-bpwqiojf/' is executable
[Thu Jul 30 14:44:42.260317 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-q2t2tbi3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-q2t2tbi3/' is executable
[Thu Jul 30 14:44:42.262227 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-ubj5lzzh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-ubj5lzzh/' is executable
[Thu Jul 30 14:44:42.263748 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pkan3sjx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-pkan3sjx/' is executable
[Thu Jul 30 14:44:42.264349 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-rysxxx39/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-rysxxx39/' is executable
[Thu Jul 30 14:44:42.267127 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-2u0lmmbu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-2u0lmmbu/' is executable
[Thu Jul 30 14:44:42.267368 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-5a2k1oi2/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-5a2k1oi2/' is executable
[Thu Jul 30 14:44:42.267804 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/' is executable
[Thu Jul 30 14:44:42.270375 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/lost+found/' is executable
[Thu Jul 30 14:44:42.272091 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-rzzc6i3o/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-rzzc6i3o/' is executable
[Thu Jul 30 14:44:42.272451 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-h1jwcnlk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-h1jwcnlk/' is executable
[Thu Jul 30 14:44:42.275655 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-_6d7rllb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-_6d7rllb/' is executable
[Thu Jul 30 14:44:42.277493 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-2wv4v5mp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-2wv4v5mp/' is executable
[Thu Jul 30 14:44:42.277745 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-wkkpuur3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-wkkpuur3/' is executable
[Thu Jul 30 14:44:42.282783 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-rjd_9s_e/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-rjd_9s_e/' is executable
[Thu Jul 30 14:44:42.296129 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-sj45mp0p/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/pymp-sj45mp0p/' is executable
[Thu Jul 30 14:44:42.297394 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/' is executable
[Thu Jul 30 14:44:42.298666 2026] [core:crit] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:60018] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/' is executable
[Thu Jul 30 14:44:42.429433 2026] [ssl:error] [pid 3541180:tid 3541180] (EAI 2)Name or service not known: [client 144.76.19.72:24738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:42.429461 2026] [ssl:error] [pid 3541180:tid 3541180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:42.483207 2026] [ssl:error] [pid 3541140:tid 3541140] (EAI 2)Name or service not known: [client 144.76.19.72:24746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:42.483242 2026] [ssl:error] [pid 3541140:tid 3541140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:42.586851 2026] [security2:error] [pid 3532937:tid 3532937] [client 85.208.96.202:16228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.555.html"] [unique_id "amtVSqs5Dj1xs0g3n5f9ygAAABI"]
[Thu Jul 30 14:44:44.022857 2026] [security2:error] [pid 3531777:tid 3531777] [client 85.208.96.200:48004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9129.0/prev_next,prev.html"] [unique_id "amtVTPbfSQBDSjcATOl4tAAAACU"]
[Thu Jul 30 14:44:44.068703 2026] [ssl:error] [pid 3543008:tid 3543008] (70014)End of file found: [client 216.73.216.199:60018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:45.538626 2026] [ssl:error] [pid 3534341:tid 3534341] (EAI 2)Name or service not known: [client 144.76.19.72:24748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:45.538657 2026] [ssl:error] [pid 3534341:tid 3534341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:45.595263 2026] [ssl:error] [pid 3541711:tid 3541711] (EAI 2)Name or service not known: [client 144.76.19.72:24756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:45.595324 2026] [ssl:error] [pid 3541711:tid 3541711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:47.059622 2026] [security2:error] [pid 3538103:tid 3538103] [client 85.208.96.195:36290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/solitary-islands-resort-wooli-cabins-for-sale"] [unique_id "amtVTzw4xoDQGpKEC1Mx0QAAACY"]
[Thu Jul 30 14:44:47.074344 2026] [ssl:error] [pid 3537544:tid 3537544] (70014)End of file found: [client 216.73.216.199:58191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:47.680983 2026] [ssl:error] [pid 3541711:tid 3541711] (70014)End of file found: [client 216.73.216.199:13514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:48.651806 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:24764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:48.651832 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:48.709257 2026] [ssl:error] [pid 3541672:tid 3541672] (EAI 2)Name or service not known: [client 144.76.19.72:24766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:48.709282 2026] [ssl:error] [pid 3541672:tid 3541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:48.955873 2026] [authz_core:error] [pid 3543506:tid 3543506] [client 66.249.66.33:57402] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:44:48.958493 2026] [authz_core:error] [pid 3543506:tid 3543506] [client 66.249.66.33:57402] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:44:49.372670 2026] [ssl:error] [pid 3543505:tid 3543505] (70014)End of file found: [client 216.73.216.199:27070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:51.766011 2026] [ssl:error] [pid 3539832:tid 3539832] (EAI 2)Name or service not known: [client 144.76.19.72:30662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:51.766043 2026] [ssl:error] [pid 3539832:tid 3539832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:51.819302 2026] [ssl:error] [pid 3541180:tid 3541180] (EAI 2)Name or service not known: [client 144.76.19.72:30670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:51.819355 2026] [ssl:error] [pid 3541180:tid 3541180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:52.151406 2026] [security2:error] [pid 3543801:tid 3543801] [client 43.153.58.28:55646] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "butteredcat.com"] [uri "/"] [unique_id "amtVVICmGsHupHmxppNwmwAAAAo"]
[Thu Jul 30 14:44:52.152288 2026] [authz_core:error] [pid 3543801:tid 3543801] [client 43.153.58.28:55646] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 14:44:52.401354 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:1828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:54.876626 2026] [ssl:error] [pid 3539770:tid 3539770] (EAI 2)Name or service not known: [client 144.76.19.72:30686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:54.876657 2026] [ssl:error] [pid 3539770:tid 3539770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:54.932769 2026] [ssl:error] [pid 3541779:tid 3541779] (EAI 2)Name or service not known: [client 144.76.19.72:30692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:54.932809 2026] [ssl:error] [pid 3541779:tid 3541779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:55.510633 2026] [ssl:error] [pid 3541180:tid 3541180] (70014)End of file found: [client 216.73.216.199:59953] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:56.007503 2026] [ssl:error] [pid 3541914:tid 3541914] (70014)End of file found: [client 216.73.216.199:11902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:44:57.988321 2026] [ssl:error] [pid 3530001:tid 3530001] (EAI 2)Name or service not known: [client 144.76.19.72:30708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:57.988354 2026] [ssl:error] [pid 3530001:tid 3530001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:58.041147 2026] [ssl:error] [pid 3541710:tid 3541710] (EAI 2)Name or service not known: [client 144.76.19.72:30716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:44:58.041176 2026] [ssl:error] [pid 3541710:tid 3541710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:44:58.821397 2026] [ssl:error] [pid 3543801:tid 3543801] (70014)End of file found: [client 216.73.216.199:24177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:01.115634 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:42302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:01.115674 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:01.167301 2026] [ssl:error] [pid 3541914:tid 3541914] (EAI 2)Name or service not known: [client 144.76.19.72:42316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:01.167346 2026] [ssl:error] [pid 3541914:tid 3541914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:01.535690 2026] [ssl:error] [pid 3544343:tid 3544343] (70014)End of file found: [client 216.73.216.199:43700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:02.133258 2026] [ssl:error] [pid 3537544:tid 3537544] (70014)End of file found: [client 216.73.216.199:40927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:04.125091 2026] [ssl:error] [pid 3541711:tid 3541711] (70014)End of file found: [client 216.73.216.199:15715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:04.223242 2026] [ssl:error] [pid 3539832:tid 3539832] (EAI 2)Name or service not known: [client 144.76.19.72:42326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:04.223268 2026] [ssl:error] [pid 3539832:tid 3539832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:04.277915 2026] [ssl:error] [pid 3541779:tid 3541779] (EAI 2)Name or service not known: [client 144.76.19.72:42336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:04.277966 2026] [ssl:error] [pid 3541779:tid 3541779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:06.872631 2026] [security2:error] [pid 3543830:tid 3543830] [client 77.106.34.153:42118] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVYtoQHWLkz99cOTy4BAAAAAs"]
[Thu Jul 30 14:45:06.872698 2026] [security2:error] [pid 3543830:tid 3543830] [client 77.106.34.153:42118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVYtoQHWLkz99cOTy4BAAAAAs"]
[Thu Jul 30 14:45:06.872951 2026] [security2:error] [pid 3543830:tid 3543830] [client 77.106.34.153:42118] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVYtoQHWLkz99cOTy4BAAAAAs"]
[Thu Jul 30 14:45:07.321479 2026] [access_compat:error] [pid 3541180:tid 3541180] [client 45.158.164.139:42468] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:45:07.332837 2026] [ssl:error] [pid 3535854:tid 3535854] (EAI 2)Name or service not known: [client 144.76.19.72:42338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:07.332862 2026] [ssl:error] [pid 3535854:tid 3535854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:07.397584 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:42354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:07.397613 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:08.931130 2026] [security2:error] [pid 3543801:tid 3543801] [client 47.128.47.77:50330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/robots.txt"] [unique_id "amtVZICmGsHupHmxppNwpAAAAAo"]
[Thu Jul 30 14:45:09.081729 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 66.249.66.33:64966] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:45:09.084378 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 66.249.66.33:64966] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:45:09.359007 2026] [ssl:error] [pid 3539770:tid 3539770] (70014)End of file found: [client 216.73.216.199:57941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:09.661084 2026] [ssl:error] [pid 3544804:tid 3544804] (70014)End of file found: [client 216.73.216.199:22644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:09.922301 2026] [security2:error] [pid 3541711:tid 3541711] [client 8.216.48.42:29177] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVZdp_ei0J2g1IGRkbtgAAABc"]
[Thu Jul 30 14:45:09.922365 2026] [security2:error] [pid 3541711:tid 3541711] [client 8.216.48.42:29177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVZdp_ei0J2g1IGRkbtgAAABc"]
[Thu Jul 30 14:45:09.922633 2026] [security2:error] [pid 3541711:tid 3541711] [client 8.216.48.42:29177] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVZdp_ei0J2g1IGRkbtgAAABc"]
[Thu Jul 30 14:45:10.526164 2026] [ssl:error] [pid 3541711:tid 3541711] (EAI 2)Name or service not known: [client 144.76.19.72:24820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:10.526199 2026] [ssl:error] [pid 3541711:tid 3541711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:10.569133 2026] [ssl:error] [pid 3537544:tid 3537544] (70014)End of file found: [client 216.73.216.199:42403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:10.579020 2026] [ssl:error] [pid 3541672:tid 3541672] (EAI 2)Name or service not known: [client 144.76.19.72:24830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:10.579041 2026] [ssl:error] [pid 3541672:tid 3541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:12.143115 2026] [security2:error] [pid 3541710:tid 3541710] [client 8.216.48.42:23341] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVaOn-U9t1BZBe8Z8kHAAAABM"]
[Thu Jul 30 14:45:12.143162 2026] [security2:error] [pid 3541710:tid 3541710] [client 8.216.48.42:23341] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVaOn-U9t1BZBe8Z8kHAAAABM"]
[Thu Jul 30 14:45:12.143400 2026] [security2:error] [pid 3541710:tid 3541710] [client 8.216.48.42:23341] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVaOn-U9t1BZBe8Z8kHAAAABM"]
[Thu Jul 30 14:45:13.634534 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:24838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:13.634562 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:13.687810 2026] [ssl:error] [pid 3528887:tid 3528887] (EAI 2)Name or service not known: [client 144.76.19.72:24848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:13.687839 2026] [ssl:error] [pid 3528887:tid 3528887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:13.806726 2026] [security2:error] [pid 3530001:tid 3530001] [client 94.154.43.188:55774] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "first-grade.co.uk"] [uri "/.env"] [unique_id "amtVaXnkat6iR8AWmbVbxgAAAA4"]
[Thu Jul 30 14:45:13.806915 2026] [security2:error] [pid 3530001:tid 3530001] [client 94.154.43.188:55774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "first-grade.co.uk"] [uri "/.env"] [unique_id "amtVaXnkat6iR8AWmbVbxgAAAA4"]
[Thu Jul 30 14:45:13.807123 2026] [security2:error] [pid 3530001:tid 3530001] [client 94.154.43.188:55774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "first-grade.co.uk"] [uri "/.env"] [unique_id "amtVaXnkat6iR8AWmbVbxgAAAA4"]
[Thu Jul 30 14:45:15.991365 2026] [ssl:error] [pid 3544411:tid 3544411] (70014)End of file found: [client 216.73.216.199:25320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:16.300615 2026] [ssl:error] [pid 3543505:tid 3543505] (70014)End of file found: [client 216.73.216.199:51124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:16.744301 2026] [ssl:error] [pid 3541180:tid 3541180] (EAI 2)Name or service not known: [client 144.76.19.72:24858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:16.744325 2026] [ssl:error] [pid 3541180:tid 3541180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:16.794155 2026] [ssl:error] [pid 3530043:tid 3530043] (70014)End of file found: [client 216.73.216.199:51908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:16.797496 2026] [ssl:error] [pid 3534390:tid 3534390] (EAI 2)Name or service not known: [client 144.76.19.72:24870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:16.797519 2026] [ssl:error] [pid 3534390:tid 3534390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:19.850833 2026] [ssl:error] [pid 3544927:tid 3544927] (EAI 2)Name or service not known: [client 144.76.19.72:42656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:19.850869 2026] [ssl:error] [pid 3544927:tid 3544927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:19.942588 2026] [ssl:error] [pid 3541711:tid 3541711] (EAI 2)Name or service not known: [client 144.76.19.72:42668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:19.942620 2026] [ssl:error] [pid 3541711:tid 3541711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:21.340947 2026] [ssl:error] [pid 3541710:tid 3541710] (70014)End of file found: [client 216.73.216.199:15002] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:22.043271 2026] [ssl:error] [pid 3539770:tid 3539770] (70014)End of file found: [client 216.73.216.199:35986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:22.999361 2026] [ssl:error] [pid 3530043:tid 3530043] (EAI 2)Name or service not known: [client 144.76.19.72:42684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:22.999391 2026] [ssl:error] [pid 3530043:tid 3530043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:23.056673 2026] [ssl:error] [pid 3543830:tid 3543830] (EAI 2)Name or service not known: [client 144.76.19.72:42700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:23.056706 2026] [ssl:error] [pid 3543830:tid 3543830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:23.130501 2026] [ssl:error] [pid 3545381:tid 3545381] (70014)End of file found: [client 216.73.216.199:58936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:23.883166 2026] [security2:error] [pid 3543505:tid 3543505] [client 185.191.171.9:39302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/robots.txt"] [unique_id "amtVc-WDjBCoFo7YujYd8gAAABU"]
[Thu Jul 30 14:45:24.033990 2026] [core:error] [pid 3531207:tid 3531207] (13)Permission denied: [client 216.73.216.199:54265] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory172/node0/compact
[Thu Jul 30 14:45:25.320746 2026] [security2:error] [pid 3537597:tid 3537597] [client 114.119.144.31:41015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574640000/cat_ids~17,103,18/request_format~html"] [unique_id "amtVdS37C6zwagdQ1jwz1wAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574640000/cat_ids~17,103,18,14/request_format~html
[Thu Jul 30 14:45:25.539395 2026] [core:error] [pid 3531207:tid 3531207] (13)Permission denied: [client 216.73.216.199:54265] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory258/node0/compact
[Thu Jul 30 14:45:26.114508 2026] [ssl:error] [pid 3535854:tid 3535854] (EAI 2)Name or service not known: [client 144.76.19.72:42702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:26.114539 2026] [ssl:error] [pid 3535854:tid 3535854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:26.171672 2026] [ssl:error] [pid 3543830:tid 3543830] (EAI 2)Name or service not known: [client 144.76.19.72:42706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:26.171699 2026] [ssl:error] [pid 3543830:tid 3543830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:26.743880 2026] [ssl:error] [pid 3531207:tid 3531207] (70014)End of file found: [client 216.73.216.199:54265] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:27.648846 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:4192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:28.056678 2026] [security2:error] [pid 3544410:tid 3544410] [client 114.119.144.31:41023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574640000/cat_ids~17,103,18/request_format~html"] [unique_id "amtVeLa0-P6lx_QTUiY1kQAAACE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574640000/cat_ids~17,103,18,14/request_format~html
[Thu Jul 30 14:45:29.227718 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:42718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:29.227753 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:29.281501 2026] [ssl:error] [pid 3535741:tid 3535741] (EAI 2)Name or service not known: [client 144.76.19.72:42724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:29.281535 2026] [ssl:error] [pid 3535741:tid 3535741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:30.348112 2026] [security2:error] [pid 3535741:tid 3535741] [client 85.208.96.201:28526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/news/tbox-service-completed-on-first-class-320-unit.html"] [unique_id "amtVerF8VlGx0nITcTZrVgAAAB0"]
[Thu Jul 30 14:45:30.915959 2026] [cgi:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:31.205584 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:64659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:31.691709 2026] [ssl:error] [pid 3545432:tid 3545432] (70014)End of file found: [client 216.73.216.199:7599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:32.109595 2026] [ssl:error] [pid 3533392:tid 3533392] (70014)End of file found: [client 216.73.216.199:44467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:32.355951 2026] [ssl:error] [pid 3539477:tid 3539477] (EAI 2)Name or service not known: [client 144.76.19.72:46032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:32.355986 2026] [ssl:error] [pid 3539477:tid 3539477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:32.408725 2026] [ssl:error] [pid 3541710:tid 3541710] (EAI 2)Name or service not known: [client 144.76.19.72:46046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:32.408750 2026] [ssl:error] [pid 3541710:tid 3541710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:35.464886 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:46052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:35.464914 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:35.517714 2026] [ssl:error] [pid 3541672:tid 3541672] (EAI 2)Name or service not known: [client 144.76.19.72:46062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:35.517744 2026] [ssl:error] [pid 3541672:tid 3541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:36.817448 2026] [cgi:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:37.362700 2026] [cgi:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:37.417335 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:29504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:37.830079 2026] [ssl:error] [pid 3537339:tid 3537339] (70014)End of file found: [client 216.73.216.199:6943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:38.034301 2026] [core:error] [pid 3533392:tid 3533392] [client 66.249.66.45:53233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:45:38.034330 2026] [core:error] [pid 3533392:tid 3533392] [client 66.249.66.45:53233] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:45:38.574319 2026] [ssl:error] [pid 3538103:tid 3538103] (EAI 2)Name or service not known: [client 144.76.19.72:46076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:38.574343 2026] [ssl:error] [pid 3538103:tid 3538103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:38.622465 2026] [cgi:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:38.628827 2026] [ssl:error] [pid 3545431:tid 3545431] (EAI 2)Name or service not known: [client 144.76.19.72:46090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:38.628848 2026] [ssl:error] [pid 3545431:tid 3545431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:39.941102 2026] [ssl:error] [pid 3541710:tid 3541710] (70014)End of file found: [client 216.73.216.199:47629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:40.191105 2026] [security2:error] [pid 3539832:tid 3539832] [client 45.148.10.120:39700] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glottalstop.co.uk"] [uri "/.env"] [unique_id "amtVhBknk9B2KN-GDSKU6wAAAC4"]
[Thu Jul 30 14:45:40.191257 2026] [security2:error] [pid 3539832:tid 3539832] [client 45.148.10.120:39700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glottalstop.co.uk"] [uri "/.env"] [unique_id "amtVhBknk9B2KN-GDSKU6wAAAC4"]
[Thu Jul 30 14:45:40.191461 2026] [security2:error] [pid 3539832:tid 3539832] [client 45.148.10.120:39700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glottalstop.co.uk"] [uri "/.env"] [unique_id "amtVhBknk9B2KN-GDSKU6wAAAC4"]
[Thu Jul 30 14:45:41.278050 2026] [cgi:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:41.683626 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:44616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:41.683657 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:41.735210 2026] [ssl:error] [pid 3545433:tid 3545433] (EAI 2)Name or service not known: [client 144.76.19.72:44626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:41.735237 2026] [ssl:error] [pid 3545433:tid 3545433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:42.858094 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:1172] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:42.964838 2026] [cgi:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:43.809696 2026] [cgi:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:44.081220 2026] [security2:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "devwebsitehub.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtViF_7vTOFsFz-Z_iQCQAAADc"]
[Thu Jul 30 14:45:44.081492 2026] [security2:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "devwebsitehub.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtViF_7vTOFsFz-Z_iQCQAAADc"]
[Thu Jul 30 14:45:44.081792 2026] [security2:error] [pid 3530043:tid 3530043] [client 20.171.55.167:9723] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "devwebsitehub.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtViF_7vTOFsFz-Z_iQCQAAADc"]
[Thu Jul 30 14:45:44.787443 2026] [ssl:error] [pid 3539770:tid 3539770] (EAI 2)Name or service not known: [client 144.76.19.72:44640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:44.787482 2026] [ssl:error] [pid 3539770:tid 3539770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:44.841720 2026] [ssl:error] [pid 3544215:tid 3544215] (EAI 2)Name or service not known: [client 144.76.19.72:44642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:44.841752 2026] [ssl:error] [pid 3544215:tid 3544215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:46.264536 2026] [ssl:error] [pid 3543505:tid 3543505] (70014)End of file found: [client 216.73.216.199:29895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:46.977033 2026] [authz_core:error] [pid 3543831:tid 3543831] [client 217.76.50.173:57825] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:45:47.895581 2026] [ssl:error] [pid 3545342:tid 3545342] (EAI 2)Name or service not known: [client 144.76.19.72:44652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:47.895613 2026] [ssl:error] [pid 3545342:tid 3545342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:47.953811 2026] [ssl:error] [pid 3545432:tid 3545432] (EAI 2)Name or service not known: [client 144.76.19.72:44658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:47.953865 2026] [ssl:error] [pid 3545432:tid 3545432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:48.020152 2026] [security2:error] [pid 3543439:tid 3543439] [client 43.135.142.7:54554] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sewyork.co.uk"] [uri "/"] [unique_id "amtVjJtshfpPkk8E1y0y0gAAAAQ"]
[Thu Jul 30 14:45:48.172771 2026] [security2:error] [pid 3541517:tid 3541517] [client 185.191.171.16:42196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/david-niven-grandchildren"] [unique_id "amtVjNdpnIDtOyMMGm1URQAAABA"]
[Thu Jul 30 14:45:50.781821 2026] [ssl:error] [pid 3541710:tid 3541710] (70014)End of file found: [client 216.73.216.199:55141] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:51.009635 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:64280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:51.009687 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:51.061622 2026] [ssl:error] [pid 3543830:tid 3543830] (EAI 2)Name or service not known: [client 144.76.19.72:64282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:51.061651 2026] [ssl:error] [pid 3543830:tid 3543830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:51.087100 2026] [ssl:error] [pid 3537544:tid 3537544] (70014)End of file found: [client 216.73.216.199:52559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:51.339729 2026] [cgi:error] [pid 3538105:tid 3538105] [client 20.171.55.167:9675] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:52.291595 2026] [core:error] [pid 3544411:tid 3544411] (13)Permission denied: [client 216.73.216.199:32674] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS0/flags
[Thu Jul 30 14:45:52.690288 2026] [cgi:error] [pid 3538105:tid 3538105] [client 20.171.55.167:9675] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:45:53.957782 2026] [authz_core:error] [pid 3538830:tid 3538830] [client 66.132.172.101:5806] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:45:53.964180 2026] [authz_core:error] [pid 3538830:tid 3538830] [client 66.132.172.101:5806] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:45:54.116582 2026] [ssl:error] [pid 3545431:tid 3545431] (EAI 2)Name or service not known: [client 144.76.19.72:64298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:54.116626 2026] [ssl:error] [pid 3545431:tid 3545431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:54.171505 2026] [ssl:error] [pid 3544804:tid 3544804] (EAI 2)Name or service not known: [client 144.76.19.72:64310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:54.171559 2026] [ssl:error] [pid 3544804:tid 3544804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:55.312856 2026] [ssl:error] [pid 3544411:tid 3544411] (70014)End of file found: [client 216.73.216.199:32674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:56.517910 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:27952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:45:57.353313 2026] [ssl:error] [pid 3545342:tid 3545342] (EAI 2)Name or service not known: [client 144.76.19.72:64318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:57.353347 2026] [ssl:error] [pid 3545342:tid 3545342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:57.433025 2026] [ssl:error] [pid 3545433:tid 3545433] (EAI 2)Name or service not known: [client 144.76.19.72:64326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:45:57.433058 2026] [ssl:error] [pid 3545433:tid 3545433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:45:57.721028 2026] [security2:error] [pid 3539770:tid 3539770] [client 216.73.216.199:47581] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/systemd.conf"] [unique_id "amtVlbL1k-LSxoyZpdWD8wAAACA"]
[Thu Jul 30 14:45:57.721355 2026] [security2:error] [pid 3539770:tid 3539770] [client 216.73.216.199:47581] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/systemd.conf"] [unique_id "amtVlbL1k-LSxoyZpdWD8wAAACA"]
[Thu Jul 30 14:45:57.721655 2026] [security2:error] [pid 3539770:tid 3539770] [client 216.73.216.199:47581] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/systemd.conf"] [unique_id "amtVlbL1k-LSxoyZpdWD8wAAACA"]
[Thu Jul 30 14:45:58.021498 2026] [core:error] [pid 3539770:tid 3539770] (13)Permission denied: [client 216.73.216.199:47581] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS2/close_delay
[Thu Jul 30 14:45:58.628614 2026] [ssl:error] [pid 3539770:tid 3539770] (70014)End of file found: [client 216.73.216.199:47581] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:00.485691 2026] [ssl:error] [pid 3545432:tid 3545432] (EAI 2)Name or service not known: [client 144.76.19.72:39516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:00.485726 2026] [ssl:error] [pid 3545432:tid 3545432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:00.541755 2026] [ssl:error] [pid 3534390:tid 3534390] (EAI 2)Name or service not known: [client 144.76.19.72:39524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:00.541796 2026] [ssl:error] [pid 3534390:tid 3534390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:01.047965 2026] [core:error] [pid 3545380:tid 3545380] (13)Permission denied: [client 216.73.216.199:65422] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/cache_dma
[Thu Jul 30 14:46:01.310740 2026] [cgi:error] [pid 3538105:tid 3538105] [client 20.171.55.167:9675] AH02811: stderr from /home/seedhubdev/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:46:01.671014 2026] [security2:error] [pid 3545431:tid 3545431] [client 185.191.171.8:48700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7212.0.html"] [unique_id "amtVmea-Sl1aSr0GrpCnxwAAABw"]
[Thu Jul 30 14:46:02.707443 2026] [security2:error] [pid 3528324:tid 3528324] [client 45.231.31.227:18505] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVmnAit8u-fG1E0FJv_QAAABk"]
[Thu Jul 30 14:46:02.707491 2026] [security2:error] [pid 3528324:tid 3528324] [client 45.231.31.227:18505] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVmnAit8u-fG1E0FJv_QAAABk"]
[Thu Jul 30 14:46:02.707725 2026] [security2:error] [pid 3528324:tid 3528324] [client 45.231.31.227:18505] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVmnAit8u-fG1E0FJv_QAAABk"]
[Thu Jul 30 14:46:03.596893 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:39532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:03.596923 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:03.650268 2026] [ssl:error] [pid 3531207:tid 3531207] (EAI 2)Name or service not known: [client 144.76.19.72:39548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:03.650316 2026] [ssl:error] [pid 3531207:tid 3531207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:04.116010 2026] [authz_core:error] [pid 3544410:tid 3544410] [client 191.232.199.39:43598] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-admin/includes/error_log
[Thu Jul 30 14:46:04.664661 2026] [core:error] [pid 3545380:tid 3545380] (13)Permission denied: [client 216.73.216.199:65422] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/kgdbts/uevent
[Thu Jul 30 14:46:04.977274 2026] [security2:error] [pid 3545342:tid 3545342] [client 8.216.46.77:23817] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVnC1K0PQAHia3Vkf6OwAAAAM"]
[Thu Jul 30 14:46:04.977322 2026] [security2:error] [pid 3545342:tid 3545342] [client 8.216.46.77:23817] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVnC1K0PQAHia3Vkf6OwAAAAM"]
[Thu Jul 30 14:46:04.977596 2026] [security2:error] [pid 3545342:tid 3545342] [client 8.216.46.77:23817] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVnC1K0PQAHia3Vkf6OwAAAAM"]
[Thu Jul 30 14:46:05.266243 2026] [ssl:error] [pid 3537544:tid 3537544] (70014)End of file found: [client 216.73.216.199:24500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:06.170139 2026] [ssl:error] [pid 3528324:tid 3528324] (70014)End of file found: [client 216.73.216.199:12185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:06.730146 2026] [ssl:error] [pid 3541711:tid 3541711] (EAI 2)Name or service not known: [client 144.76.19.72:39554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:06.730195 2026] [ssl:error] [pid 3541711:tid 3541711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:06.786564 2026] [ssl:error] [pid 3543830:tid 3543830] (EAI 2)Name or service not known: [client 144.76.19.72:39570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:06.786593 2026] [ssl:error] [pid 3543830:tid 3543830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:08.822910 2026] [security2:error] [pid 3531777:tid 3531777] [client 8.216.46.77:17181] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVoPbfSQBDSjcATOl4ygAAACU"]
[Thu Jul 30 14:46:08.822958 2026] [security2:error] [pid 3531777:tid 3531777] [client 8.216.46.77:17181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtVoPbfSQBDSjcATOl4ygAAACU"]
[Thu Jul 30 14:46:08.823231 2026] [security2:error] [pid 3531777:tid 3531777] [client 8.216.46.77:17181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtVoPbfSQBDSjcATOl4ygAAACU"]
[Thu Jul 30 14:46:09.192613 2026] [ssl:error] [pid 3545380:tid 3545380] (70014)End of file found: [client 216.73.216.199:65422] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:09.842234 2026] [ssl:error] [pid 3546014:tid 3546014] (EAI 2)Name or service not known: [client 144.76.19.72:38322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:09.842268 2026] [ssl:error] [pid 3546014:tid 3546014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:09.896641 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:38338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:09.896667 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:11.316850 2026] [ssl:error] [pid 3546974:tid 3546974] (70014)End of file found: [client 216.73.216.199:5562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:11.811967 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:15214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:12.954137 2026] [ssl:error] [pid 3539770:tid 3539770] (EAI 2)Name or service not known: [client 144.76.19.72:38354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:12.954165 2026] [ssl:error] [pid 3539770:tid 3539770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:13.009874 2026] [ssl:error] [pid 3531207:tid 3531207] (EAI 2)Name or service not known: [client 144.76.19.72:38360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:13.009905 2026] [ssl:error] [pid 3531207:tid 3531207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:13.438523 2026] [cgi:error] [pid 3539477:tid 3539477] [client 178.173.236.189:64791] AH02812: stderr from /home/annasmithagent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:46:14.284039 2026] [security2:error] [pid 3533392:tid 3533392] [client 43.155.157.239:36436] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amtVpoVn8SwRsI_bXzW4VwAAAAg"]
[Thu Jul 30 14:46:15.758092 2026] [cgi:error] [pid 3541517:tid 3541517] [client 178.173.236.189:64792] AH02812: stderr from /home/annasmithagent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:46:16.064501 2026] [ssl:error] [pid 3546594:tid 3546594] (EAI 2)Name or service not known: [client 144.76.19.72:38362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:16.064537 2026] [ssl:error] [pid 3546594:tid 3546594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:16.121519 2026] [ssl:error] [pid 3545380:tid 3545380] (EAI 2)Name or service not known: [client 144.76.19.72:38374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:16.121554 2026] [ssl:error] [pid 3545380:tid 3545380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:16.759660 2026] [ssl:error] [pid 3531207:tid 3531207] (70014)End of file found: [client 216.73.216.199:57919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:17.276347 2026] [cgi:error] [pid 3530001:tid 3530001] [client 216.73.216.199:53465] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/callback.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:46:17.276393 2026] [cgi:error] [pid 3530001:tid 3530001] [client 216.73.216.199:53465] End of script output before headers: callback.pl
[Thu Jul 30 14:46:17.553744 2026] [ssl:error] [pid 3545380:tid 3545380] (70014)End of file found: [client 216.73.216.199:55970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:17.608303 2026] [cgi:error] [pid 3535741:tid 3535741] [client 178.173.236.189:64793] AH02812: stderr from /home/annasmithagent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:46:19.175802 2026] [ssl:error] [pid 3531777:tid 3531777] (EAI 2)Name or service not known: [client 144.76.19.72:38386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:19.175835 2026] [ssl:error] [pid 3531777:tid 3531777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:19.229139 2026] [ssl:error] [pid 3530001:tid 3530001] (EAI 2)Name or service not known: [client 144.76.19.72:38392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:19.229170 2026] [ssl:error] [pid 3530001:tid 3530001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:20.073469 2026] [core:error] [pid 3546974:tid 3546974] (13)Permission denied: [client 216.73.216.199:18834] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:53/subsystem/ttyS0/flags
[Thu Jul 30 14:46:21.277415 2026] [ssl:error] [pid 3546974:tid 3546974] (70014)End of file found: [client 216.73.216.199:18834] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:22.282763 2026] [ssl:error] [pid 3543008:tid 3543008] (EAI 2)Name or service not known: [client 144.76.19.72:51892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:22.282809 2026] [ssl:error] [pid 3543008:tid 3543008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:22.338622 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:51896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:22.338655 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:22.476793 2026] [ssl:error] [pid 3532937:tid 3532937] (70014)End of file found: [client 216.73.216.199:44997] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:24.885719 2026] [ssl:error] [pid 3528324:tid 3528324] (70014)End of file found: [client 216.73.216.199:55276] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:24.963659 2026] [authz_core:error] [pid 3543831:tid 3543831] [client 217.76.50.173:57825] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 14:46:25.392794 2026] [ssl:error] [pid 3534390:tid 3534390] (EAI 2)Name or service not known: [client 144.76.19.72:51908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:25.392835 2026] [ssl:error] [pid 3534390:tid 3534390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:25.448924 2026] [ssl:error] [pid 3546014:tid 3546014] (EAI 2)Name or service not known: [client 144.76.19.72:51924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:25.448951 2026] [ssl:error] [pid 3546014:tid 3546014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:27.611179 2026] [security2:error] [pid 3546594:tid 3546594] [client 185.191.171.3:28112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9536.0/prev_next,next.html"] [unique_id "amtVs2yd5FuQ2ev8Z5XmRwAAAA8"]
[Thu Jul 30 14:46:27.900521 2026] [core:error] [pid 3546014:tid 3546014] (13)Permission denied: [client 216.73.216.199:32376] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:20/subsystem/ttyS3/flags
[Thu Jul 30 14:46:28.363578 2026] [authz_core:error] [pid 3544410:tid 3544410] [client 191.232.199.39:43598] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/fonts/error_log
[Thu Jul 30 14:46:28.501226 2026] [ssl:error] [pid 3532937:tid 3532937] (EAI 2)Name or service not known: [client 144.76.19.72:51926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:28.501255 2026] [ssl:error] [pid 3532937:tid 3532937] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:28.503482 2026] [ssl:error] [pid 3546014:tid 3546014] (70014)End of file found: [client 216.73.216.199:32376] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:28.553204 2026] [ssl:error] [pid 3541517:tid 3541517] (EAI 2)Name or service not known: [client 144.76.19.72:51938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:28.553263 2026] [ssl:error] [pid 3541517:tid 3541517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:30.085282 2026] [access_compat:error] [pid 3544804:tid 3544804] [client 45.158.164.139:46278] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:46:30.770643 2026] [core:error] [pid 3546594:tid 3546594] (13)Permission denied: [client 216.73.216.199:34671] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/subsystem/ttyS0/flags
[Thu Jul 30 14:46:31.373129 2026] [core:error] [pid 3546594:tid 3546594] (13)Permission denied: [client 216.73.216.199:34671] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS0/flags
[Thu Jul 30 14:46:31.607740 2026] [ssl:error] [pid 3533392:tid 3533392] (EAI 2)Name or service not known: [client 144.76.19.72:44714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:31.607770 2026] [ssl:error] [pid 3533392:tid 3533392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:31.663523 2026] [ssl:error] [pid 3528324:tid 3528324] (EAI 2)Name or service not known: [client 144.76.19.72:44728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:31.663557 2026] [ssl:error] [pid 3528324:tid 3528324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:34.684099 2026] [ssl:error] [pid 3546594:tid 3546594] (70014)End of file found: [client 216.73.216.199:34671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:34.718501 2026] [ssl:error] [pid 3546014:tid 3546014] (EAI 2)Name or service not known: [client 144.76.19.72:44732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:34.718529 2026] [ssl:error] [pid 3546014:tid 3546014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:34.771759 2026] [ssl:error] [pid 3528324:tid 3528324] (EAI 2)Name or service not known: [client 144.76.19.72:44742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:34.771789 2026] [ssl:error] [pid 3528324:tid 3528324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:35.586987 2026] [ssl:error] [pid 3541517:tid 3541517] (70014)End of file found: [client 216.73.216.199:49179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:36.494654 2026] [core:error] [pid 3546867:tid 3546867] (13)Permission denied: [client 216.73.216.199:29353] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:1/subsystem/ttyS0/flags
[Thu Jul 30 14:46:36.785120 2026] [authz_core:error] [pid 3544410:tid 3544410] [client 191.232.199.39:43598] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/Text/Diff/Engine/error_log
[Thu Jul 30 14:46:36.795400 2026] [ssl:error] [pid 3546867:tid 3546867] (70014)End of file found: [client 216.73.216.199:29353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:37.854508 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:44752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:37.854588 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:37.906498 2026] [ssl:error] [pid 3539477:tid 3539477] (EAI 2)Name or service not known: [client 144.76.19.72:44754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:37.906526 2026] [ssl:error] [pid 3539477:tid 3539477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:40.724322 2026] [cgi:error] [pid 3531207:tid 3531207] [client 216.73.216.199:29142] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-threads/examples/pool.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:46:40.724369 2026] [cgi:error] [pid 3531207:tid 3531207] [client 216.73.216.199:29142] End of script output before headers: pool.pl
[Thu Jul 30 14:46:40.962550 2026] [ssl:error] [pid 3546014:tid 3546014] (EAI 2)Name or service not known: [client 144.76.19.72:54564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:40.962588 2026] [ssl:error] [pid 3546014:tid 3546014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:41.018551 2026] [ssl:error] [pid 3548413:tid 3548413] (EAI 2)Name or service not known: [client 144.76.19.72:54574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:41.018595 2026] [ssl:error] [pid 3548413:tid 3548413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:41.952300 2026] [authz_core:error] [pid 3543008:tid 3543008] [client 217.76.50.173:54289] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/IXR/error_log
[Thu Jul 30 14:46:43.116754 2026] [ssl:error] [pid 3548539:tid 3548539] (70014)End of file found: [client 216.73.216.199:53916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:44.072087 2026] [ssl:error] [pid 3546536:tid 3546536] (EAI 2)Name or service not known: [client 144.76.19.72:54586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:44.072121 2026] [ssl:error] [pid 3546536:tid 3546536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:44.125721 2026] [ssl:error] [pid 3548538:tid 3548538] (EAI 2)Name or service not known: [client 144.76.19.72:54596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:44.125759 2026] [ssl:error] [pid 3548538:tid 3548538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:44.919612 2026] [ssl:error] [pid 3531207:tid 3531207] (70014)End of file found: [client 216.73.216.199:61093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:45.221677 2026] [ssl:error] [pid 3541672:tid 3541672] (70014)End of file found: [client 216.73.216.199:30758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:47.182573 2026] [ssl:error] [pid 3548538:tid 3548538] (EAI 2)Name or service not known: [client 144.76.19.72:54612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:47.182605 2026] [ssl:error] [pid 3548538:tid 3548538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:47.247464 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:54618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:47.247488 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:48.320972 2026] [security2:error] [pid 3548538:tid 3548538] [client 114.119.157.183:21709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/request_format~html/cat_ids~104"] [unique_id "amtVyCmNRXan54-LLWJjwAAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E24-11-2019
[Thu Jul 30 14:46:48.832714 2026] [ssl:error] [pid 3543505:tid 3543505] (70014)End of file found: [client 216.73.216.199:59353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:49.313884 2026] [security2:error] [pid 3546014:tid 3546014] [client 185.191.171.10:53168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/john-west-smoked-oysters-expiry-date"] [unique_id "amtVybj6fdDGLMl1q8u41AAAABQ"]
[Thu Jul 30 14:46:50.300635 2026] [ssl:error] [pid 3531207:tid 3531207] (EAI 2)Name or service not known: [client 144.76.19.72:53038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:50.300663 2026] [ssl:error] [pid 3531207:tid 3531207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:50.356141 2026] [ssl:error] [pid 3541710:tid 3541710] (EAI 2)Name or service not known: [client 144.76.19.72:53052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:50.356163 2026] [ssl:error] [pid 3541710:tid 3541710] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:50.364882 2026] [cgi:error] [pid 3546014:tid 3546014] [client 216.73.216.199:18058] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/perl-File-Temp/misc/benchmark.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 14:46:50.364920 2026] [cgi:error] [pid 3546014:tid 3546014] [client 216.73.216.199:18058] End of script output before headers: benchmark.pl
[Thu Jul 30 14:46:50.465292 2026] [security2:error] [pid 3541672:tid 3541672] [client 114.119.157.183:53433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/request_format~html/cat_ids~104"] [unique_id "amtVynNsQf3iyZOMKXUdiQAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E24-11-2019
[Thu Jul 30 14:46:50.600472 2026] [security2:error] [pid 3534341:tid 3534341] [client 114.119.156.99:26215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amtVylyyQ2CswKgQ-EEfKgAAADU"], referer: https://staffordshirephoenixrifleandpistolclub.co.uk/robots.txt
[Thu Jul 30 14:46:50.842267 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:39230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:53.407841 2026] [ssl:error] [pid 3533392:tid 3533392] (EAI 2)Name or service not known: [client 144.76.19.72:53064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:53.407868 2026] [ssl:error] [pid 3533392:tid 3533392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:53.462502 2026] [ssl:error] [pid 3541672:tid 3541672] (EAI 2)Name or service not known: [client 144.76.19.72:53066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:53.462527 2026] [ssl:error] [pid 3541672:tid 3541672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:53.548941 2026] [security2:error] [pid 3533392:tid 3533392] [client 146.56.197.150:51822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "amtVzYVn8SwRsI_bXzW4XwAAAAg"]
[Thu Jul 30 14:46:56.515670 2026] [ssl:error] [pid 3548539:tid 3548539] (EAI 2)Name or service not known: [client 144.76.19.72:53072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:56.515706 2026] [ssl:error] [pid 3548539:tid 3548539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:56.573551 2026] [ssl:error] [pid 3533392:tid 3533392] (EAI 2)Name or service not known: [client 144.76.19.72:53080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:56.573582 2026] [ssl:error] [pid 3533392:tid 3533392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:56.980442 2026] [security2:error] [pid 3549199:tid 3549199] [client 146.56.197.150:45292] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "amtV0FyDcqDvu8piUlYBbwAAADQ"], referer: http://www.ditchfest.com
[Thu Jul 30 14:46:57.298600 2026] [security2:error] [pid 3543830:tid 3543830] [client 185.191.171.2:32968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6892.0.html"] [unique_id "amtV0doQHWLkz99cOTy4IAAAAAs"]
[Thu Jul 30 14:46:57.868231 2026] [ssl:error] [pid 3549017:tid 3549017] (70014)End of file found: [client 216.73.216.199:39552] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:58.474482 2026] [core:error] [pid 3549068:tid 3549068] (13)Permission denied: [client 216.73.216.199:54957] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:22/subsystem/ttyS0/flags
[Thu Jul 30 14:46:59.077125 2026] [ssl:error] [pid 3549068:tid 3549068] (70014)End of file found: [client 216.73.216.199:54957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:59.556645 2026] [ssl:error] [pid 3544804:tid 3544804] (70014)End of file found: [client 216.73.216.199:46791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:46:59.631271 2026] [ssl:error] [pid 3543830:tid 3543830] (EAI 2)Name or service not known: [client 144.76.19.72:55160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:59.631301 2026] [ssl:error] [pid 3543830:tid 3543830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:46:59.691433 2026] [ssl:error] [pid 3549202:tid 3549202] (EAI 2)Name or service not known: [client 144.76.19.72:55166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:46:59.691466 2026] [ssl:error] [pid 3549202:tid 3549202] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:01.128010 2026] [ssl:error] [pid 3539770:tid 3539770] (70014)End of file found: [client 216.73.216.199:57983] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:02.026765 2026] [ssl:error] [pid 3548413:tid 3548413] (70014)End of file found: [client 216.73.216.199:42413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:02.615245 2026] [authz_core:error] [pid 3544410:tid 3544410] [client 191.232.199.39:43598] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/ID3/error_log
[Thu Jul 30 14:47:02.751719 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:55176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:02.751750 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:02.805168 2026] [authz_core:error] [pid 3544410:tid 3544410] [client 191.232.199.39:43598] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/Text/Diff/error_log
[Thu Jul 30 14:47:02.806893 2026] [ssl:error] [pid 3549124:tid 3549124] (EAI 2)Name or service not known: [client 144.76.19.72:55188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:02.806919 2026] [ssl:error] [pid 3549124:tid 3549124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:04.130002 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:29585] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:05.865448 2026] [ssl:error] [pid 3530001:tid 3530001] (EAI 2)Name or service not known: [client 144.76.19.72:55204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:05.865483 2026] [ssl:error] [pid 3530001:tid 3530001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:05.921469 2026] [ssl:error] [pid 3546867:tid 3546867] (EAI 2)Name or service not known: [client 144.76.19.72:55208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:05.921508 2026] [ssl:error] [pid 3546867:tid 3546867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:06.438693 2026] [ssl:error] [pid 3537544:tid 3537544] (70014)End of file found: [client 216.73.216.199:6921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:06.878568 2026] [core:error] [pid 3548536:tid 3548536] [client 66.249.66.8:42914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:47:06.878598 2026] [core:error] [pid 3548536:tid 3548536] [client 66.249.66.8:42914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:47:06.981803 2026] [authz_core:error] [pid 3543505:tid 3543505] [client 66.249.66.35:42438] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:47:06.984526 2026] [authz_core:error] [pid 3543505:tid 3543505] [client 66.249.66.35:42438] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:47:07.225272 2026] [security2:error] [pid 3545431:tid 3545431] [client 47.254.143.187:31535] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtV2-a-Sl1aSr0GrpCn0QAAABw"]
[Thu Jul 30 14:47:07.225317 2026] [security2:error] [pid 3545431:tid 3545431] [client 47.254.143.187:31535] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtV2-a-Sl1aSr0GrpCn0QAAABw"]
[Thu Jul 30 14:47:07.225578 2026] [security2:error] [pid 3545431:tid 3545431] [client 47.254.143.187:31535] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtV2-a-Sl1aSr0GrpCn0QAAABw"]
[Thu Jul 30 14:47:08.044648 2026] [ssl:error] [pid 3546536:tid 3546536] (70014)End of file found: [client 216.73.216.199:30515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:08.976819 2026] [ssl:error] [pid 3548331:tid 3548331] (EAI 2)Name or service not known: [client 144.76.19.72:55210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:08.976857 2026] [ssl:error] [pid 3548331:tid 3548331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:09.028782 2026] [ssl:error] [pid 3530001:tid 3530001] (EAI 2)Name or service not known: [client 144.76.19.72:55222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:09.028809 2026] [ssl:error] [pid 3530001:tid 3530001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:09.584693 2026] [security2:error] [pid 3548413:tid 3548413] [client 94.213.139.54:35284] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtV3XtMSKoWhLF9dFTONgAAABc"]
[Thu Jul 30 14:47:09.584743 2026] [security2:error] [pid 3548413:tid 3548413] [client 94.213.139.54:35284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtV3XtMSKoWhLF9dFTONgAAABc"]
[Thu Jul 30 14:47:09.584988 2026] [security2:error] [pid 3548413:tid 3548413] [client 94.213.139.54:35284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtV3XtMSKoWhLF9dFTONgAAABc"]
[Thu Jul 30 14:47:10.155903 2026] [ssl:error] [pid 3549199:tid 3549199] (70014)End of file found: [client 216.73.216.199:41724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:12.070528 2026] [security2:error] [pid 3548331:tid 3548331] [client 186.123.212.206:12743] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /\\x5c\\x22../iplist.html\\x5c\\x22"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.magic-cookie.co.uk"] [uri "/\\\\\\"../iplist.html\\\\\\""] [unique_id "amtV4HLtHPq2oTbc8eUVWwAAABI"]
[Thu Jul 30 14:47:12.070575 2026] [security2:error] [pid 3548331:tid 3548331] [client 186.123.212.206:12743] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /../iplist.html"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.magic-cookie.co.uk"] [uri "/\\\\\\"../iplist.html\\\\\\""] [unique_id "amtV4HLtHPq2oTbc8eUVWwAAABI"]
[Thu Jul 30 14:47:12.070775 2026] [security2:error] [pid 3548331:tid 3548331] [client 186.123.212.206:12743] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.magic-cookie.co.uk"] [uri "/\\\\\\"../iplist.html\\\\\\""] [unique_id "amtV4HLtHPq2oTbc8eUVWwAAABI"]
[Thu Jul 30 14:47:12.071161 2026] [security2:error] [pid 3548331:tid 3548331] [client 186.123.212.206:12743] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "www.magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "amtV4HLtHPq2oTbc8eUVWwAAABI"]
[Thu Jul 30 14:47:12.080653 2026] [ssl:error] [pid 3549198:tid 3549198] (EAI 2)Name or service not known: [client 144.76.19.72:53980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:12.080679 2026] [ssl:error] [pid 3549198:tid 3549198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:12.139719 2026] [ssl:error] [pid 3549201:tid 3549201] (EAI 2)Name or service not known: [client 144.76.19.72:53986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:12.139752 2026] [ssl:error] [pid 3549201:tid 3549201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:13.396693 2026] [security2:error] [pid 3546014:tid 3546014] [client 176.69.182.144:52938] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtV4bj6fdDGLMl1q8u43AAAABQ"]
[Thu Jul 30 14:47:13.396739 2026] [security2:error] [pid 3546014:tid 3546014] [client 176.69.182.144:52938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtV4bj6fdDGLMl1q8u43AAAABQ"]
[Thu Jul 30 14:47:13.397030 2026] [security2:error] [pid 3546014:tid 3546014] [client 176.69.182.144:52938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtV4bj6fdDGLMl1q8u43AAAABQ"]
[Thu Jul 30 14:47:13.462918 2026] [ssl:error] [pid 3543830:tid 3543830] (70014)End of file found: [client 216.73.216.199:12906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:13.765855 2026] [core:crit] [pid 3534390:tid 3534390] (13)Permission denied: [client 52.167.144.233:48982] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:47:13.766208 2026] [cgi:error] [pid 3548539:tid 3548539] [client 17.22.237.87:54734] AH01228: exec used but not allowed in /home/alismcom/public_html/themez.co.uk/index.htm
[Thu Jul 30 14:47:14.370776 2026] [core:error] [pid 3546536:tid 3546536] (13)Permission denied: [client 216.73.216.199:58744] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS2/close_delay
[Thu Jul 30 14:47:15.213883 2026] [ssl:error] [pid 3545380:tid 3545380] (EAI 2)Name or service not known: [client 144.76.19.72:53996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:15.213916 2026] [ssl:error] [pid 3545380:tid 3545380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:15.268176 2026] [ssl:error] [pid 3549017:tid 3549017] (EAI 2)Name or service not known: [client 144.76.19.72:54000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:15.268207 2026] [ssl:error] [pid 3549017:tid 3549017] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:15.274607 2026] [ssl:error] [pid 3546536:tid 3546536] (70014)End of file found: [client 216.73.216.199:58744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:17.076925 2026] [core:error] [pid 3537339:tid 3537339] (13)Permission denied: [client 216.73.216.199:38709] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/trace
[Thu Jul 30 14:47:17.155741 2026] [security2:error] [pid 3548414:tid 3548414] [client 20.203.200.218:57546] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ditchlingfair.com.ditchfest.com"] [uri "/wp-config.php"] [unique_id "amtV5ahVGpWGxMhYHfzoQgAAAB0"]
[Thu Jul 30 14:47:17.155876 2026] [security2:error] [pid 3548414:tid 3548414] [client 20.203.200.218:57546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ditchlingfair.com.ditchfest.com"] [uri "/wp-config.php"] [unique_id "amtV5ahVGpWGxMhYHfzoQgAAAB0"]
[Thu Jul 30 14:47:17.156063 2026] [security2:error] [pid 3548414:tid 3548414] [client 20.203.200.218:57546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ditchlingfair.com.ditchfest.com"] [uri "/wp-config.php"] [unique_id "amtV5ahVGpWGxMhYHfzoQgAAAB0"]
[Thu Jul 30 14:47:18.323275 2026] [ssl:error] [pid 3549197:tid 3549197] (EAI 2)Name or service not known: [client 144.76.19.72:54012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:18.323311 2026] [ssl:error] [pid 3549197:tid 3549197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:18.378398 2026] [ssl:error] [pid 3534341:tid 3534341] (EAI 2)Name or service not known: [client 144.76.19.72:54018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:18.378442 2026] [ssl:error] [pid 3534341:tid 3534341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:18.588303 2026] [ssl:error] [pid 3537339:tid 3537339] (70014)End of file found: [client 216.73.216.199:38709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:19.190459 2026] [ssl:error] [pid 3549121:tid 3549121] (70014)End of file found: [client 216.73.216.199:42575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:20.595564 2026] [ssl:error] [pid 3543439:tid 3543439] (70014)End of file found: [client 216.73.216.199:14007] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:21.436415 2026] [ssl:error] [pid 3534390:tid 3534390] (EAI 2)Name or service not known: [client 144.76.19.72:55468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:21.436456 2026] [ssl:error] [pid 3534390:tid 3534390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:21.524914 2026] [ssl:error] [pid 3549124:tid 3549124] (EAI 2)Name or service not known: [client 144.76.19.72:55484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:21.524939 2026] [ssl:error] [pid 3549124:tid 3549124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:23.049172 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:23.127106 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/php8.php
[Thu Jul 30 14:47:23.127157 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.158445 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/assets
[Thu Jul 30 14:47:23.190572 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/lite.php
[Thu Jul 30 14:47:23.190622 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.246197 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/term.php
[Thu Jul 30 14:47:23.246251 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.277670 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/config.php
[Thu Jul 30 14:47:23.277718 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.309761 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:23.374864 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-good.php
[Thu Jul 30 14:47:23.374909 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.406305 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:23.438659 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 14:47:23.438712 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.470030 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 14:47:23.470086 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.502056 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 14:47:23.502118 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.533476 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-access.php
[Thu Jul 30 14:47:23.533523 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.564797 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:23.640570 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/filemanager.php
[Thu Jul 30 14:47:23.640622 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.732715 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:23.764022 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/bthil.php
[Thu Jul 30 14:47:23.764080 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.826944 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 14:47:23.826994 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:23.893532 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:23.969617 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/cv.php
[Thu Jul 30 14:47:23.969675 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:24.036536 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:24.067821 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 14:47:24.067865 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:24.355796 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:24.401551 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/core.php
[Thu Jul 30 14:47:24.401599 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:24.450920 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 14:47:24.525835 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 14:47:24.557475 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/storage
[Thu Jul 30 14:47:24.580448 2026] [ssl:error] [pid 3528324:tid 3528324] (EAI 2)Name or service not known: [client 144.76.19.72:55498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:24.580474 2026] [ssl:error] [pid 3528324:tid 3528324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:24.589154 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/ahax.php
[Thu Jul 30 14:47:24.589199 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:24.635858 2026] [ssl:error] [pid 3545380:tid 3545380] (EAI 2)Name or service not known: [client 144.76.19.72:55500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:24.635883 2026] [ssl:error] [pid 3545380:tid 3545380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:24.739914 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/zoom1.php
[Thu Jul 30 14:47:24.739963 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:24.845292 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/txets.php
[Thu Jul 30 14:47:24.845344 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:24.880121 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:24.912676 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:24.944280 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:24.975516 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:25.006834 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:25.038356 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/radio.php
[Thu Jul 30 14:47:25.038403 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.106572 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/item.php
[Thu Jul 30 14:47:25.106619 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.138168 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/t.php
[Thu Jul 30 14:47:25.138213 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.202508 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/i.php
[Thu Jul 30 14:47:25.202554 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.233889 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/deepseek_d.php
[Thu Jul 30 14:47:25.233937 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.265444 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:25.325606 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/acme-challenge/file.php
[Thu Jul 30 14:47:25.325654 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.357373 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:25.388825 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:25.420365 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/assets
[Thu Jul 30 14:47:25.452338 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/bgymj.php
[Thu Jul 30 14:47:25.452403 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.536375 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/modules
[Thu Jul 30 14:47:25.613827 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 14:47:25.698674 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 14:47:25.698721 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.732458 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:25.763927 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 14:47:25.763973 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.795261 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/u.php
[Thu Jul 30 14:47:25.795309 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.826657 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/r.php
[Thu Jul 30 14:47:25.826702 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.860149 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 14:47:25.860199 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.892918 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 14:47:25.892966 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.924367 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/randkeyword.PhP7
[Thu Jul 30 14:47:25.924412 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:25.956325 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/vendor
[Thu Jul 30 14:47:25.987795 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/tool.php
[Thu Jul 30 14:47:25.987844 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.019194 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content.php
[Thu Jul 30 14:47:26.019295 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.050436 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 14:47:26.050482 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.081739 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/root.php
[Thu Jul 30 14:47:26.081791 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.147451 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/ws.php
[Thu Jul 30 14:47:26.147500 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.244953 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/p.php
[Thu Jul 30 14:47:26.244998 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.285107 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/elp.php
[Thu Jul 30 14:47:26.285157 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.336155 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/a1.php
[Thu Jul 30 14:47:26.336203 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.344409 2026] [security2:error] [pid 3541140:tid 3541140] [client 20.203.200.218:20374] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "ditchlingfair.com.ditchfest.com"] [uri "/var/log/error.log"] [unique_id "amtV7tnziUtkcCpMpcfKSAAAAAY"]
[Thu Jul 30 14:47:26.344591 2026] [security2:error] [pid 3541140:tid 3541140] [client 20.203.200.218:20374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ditchlingfair.com.ditchfest.com"] [uri "/var/log/error.log"] [unique_id "amtV7tnziUtkcCpMpcfKSAAAAAY"]
[Thu Jul 30 14:47:26.344774 2026] [security2:error] [pid 3541140:tid 3541140] [client 20.203.200.218:20374] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "ditchlingfair.com.ditchfest.com"] [uri "/var/log/error.log"] [unique_id "amtV7tnziUtkcCpMpcfKSAAAAAY"]
[Thu Jul 30 14:47:26.367703 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:26.399031 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa-rex.php7
[Thu Jul 30 14:47:26.399092 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.436522 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:26.514233 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/install.php
[Thu Jul 30 14:47:26.514279 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.545627 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:26.577190 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/upload.php
[Thu Jul 30 14:47:26.577235 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.673699 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:26.707462 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:26.773697 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:26.818780 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/files.php
[Thu Jul 30 14:47:26.818842 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.886875 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/o.php
[Thu Jul 30 14:47:26.886947 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.922055 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/file2.php
[Thu Jul 30 14:47:26.922130 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.955056 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/gecko-litespeed.php
[Thu Jul 30 14:47:26.955143 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:26.992453 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/xda.php
[Thu Jul 30 14:47:26.992511 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.024353 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/theme.php
[Thu Jul 30 14:47:27.024415 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.056500 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 14:47:27.056554 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.124693 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/news.php
[Thu Jul 30 14:47:27.124759 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.199661 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/about
[Thu Jul 30 14:47:27.261713 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:27.326752 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:27.360305 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:27.391724 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 14:47:27.391783 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.423329 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-conflg.php
[Thu Jul 30 14:47:27.423395 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.460455 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/123.php
[Thu Jul 30 14:47:27.460534 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.492611 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/yanz.php
[Thu Jul 30 14:47:27.492666 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.523928 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 14:47:27.523986 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.608205 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/bi.php
[Thu Jul 30 14:47:27.608262 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.628128 2026] [ssl:error] [pid 3549198:tid 3549198] (70014)End of file found: [client 216.73.216.199:56083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:27.639745 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/cc.php
[Thu Jul 30 14:47:27.639804 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.671575 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/files
[Thu Jul 30 14:47:27.689444 2026] [ssl:error] [pid 3549197:tid 3549197] (EAI 2)Name or service not known: [client 144.76.19.72:55512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:27.689476 2026] [ssl:error] [pid 3549197:tid 3549197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:27.703182 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php7
[Thu Jul 30 14:47:27.703236 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.735035 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/disagraeosc.php
[Thu Jul 30 14:47:27.735108 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.745326 2026] [ssl:error] [pid 3548536:tid 3548536] (EAI 2)Name or service not known: [client 144.76.19.72:55520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:27.745358 2026] [ssl:error] [pid 3548536:tid 3548536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:27.784610 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-logs.php
[Thu Jul 30 14:47:27.784667 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.816191 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:27.893685 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 14:47:27.893792 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.925837 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/24.php
[Thu Jul 30 14:47:27.925895 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:27.991665 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 172.213.208.20:16401] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:28.428449 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:28.459809 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 14:47:28.522524 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:28.553880 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:28.586354 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/num.php
[Thu Jul 30 14:47:28.586404 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:28.668193 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:28.748675 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:28.780224 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:28.851673 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:28.884816 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/gifclass.php
[Thu Jul 30 14:47:28.884858 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:28.950610 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:28.982331 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 14:47:29.016254 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/css
[Thu Jul 30 14:47:29.048100 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-cron.php
[Thu Jul 30 14:47:29.048149 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:29.094519 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-block.php
[Thu Jul 30 14:47:29.094567 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:47:29.186165 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 14:47:29.220041 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 172.213.208.20:20086] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 14:47:29.468022 2026] [authz_core:error] [pid 3545433:tid 3545433] [client 217.76.50.173:58349] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 14:47:30.036910 2026] [security2:error] [pid 3543830:tid 3543830] [client 216.73.216.199:14265] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/mariadb.conf"] [unique_id "amtV8toQHWLkz99cOTy4MgAAAAs"]
[Thu Jul 30 14:47:30.037212 2026] [security2:error] [pid 3543830:tid 3543830] [client 216.73.216.199:14265] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/mariadb.conf"] [unique_id "amtV8toQHWLkz99cOTy4MgAAAAs"]
[Thu Jul 30 14:47:30.037428 2026] [security2:error] [pid 3543830:tid 3543830] [client 216.73.216.199:14265] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/mariadb.conf"] [unique_id "amtV8toQHWLkz99cOTy4MgAAAAs"]
[Thu Jul 30 14:47:30.800378 2026] [ssl:error] [pid 3550343:tid 3550343] (EAI 2)Name or service not known: [client 144.76.19.72:62072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:30.800455 2026] [ssl:error] [pid 3550343:tid 3550343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:30.856858 2026] [ssl:error] [pid 3550342:tid 3550342] (EAI 2)Name or service not known: [client 144.76.19.72:62082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:30.856888 2026] [ssl:error] [pid 3550342:tid 3550342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:31.141058 2026] [ssl:error] [pid 3543830:tid 3543830] (70014)End of file found: [client 216.73.216.199:14265] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:31.445661 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:14633] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:33.911976 2026] [ssl:error] [pid 3537544:tid 3537544] (EAI 2)Name or service not known: [client 144.76.19.72:62086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:33.912010 2026] [ssl:error] [pid 3537544:tid 3537544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:33.965607 2026] [ssl:error] [pid 3548536:tid 3548536] (EAI 2)Name or service not known: [client 144.76.19.72:62094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:33.965630 2026] [ssl:error] [pid 3548536:tid 3548536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:33.968458 2026] [access_compat:error] [pid 3548537:tid 3548537] [client 45.158.164.139:47374] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:47:34.176725 2026] [ssl:error] [pid 3534341:tid 3534341] (70014)End of file found: [client 216.73.216.199:31157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:34.806928 2026] [authz_core:error] [pid 3550254:tid 3550254] [client 66.249.66.34:46253] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:47:34.809595 2026] [authz_core:error] [pid 3550254:tid 3550254] [client 66.249.66.34:46253] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:47:35.726628 2026] [authz_core:error] [pid 3544410:tid 3544410] [client 191.232.199.39:43598] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-admin/maint/error_log
[Thu Jul 30 14:47:36.506574 2026] [ssl:error] [pid 3550343:tid 3550343] (70014)End of file found: [client 216.73.216.199:27417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:37.038672 2026] [ssl:error] [pid 3544410:tid 3544410] (EAI 2)Name or service not known: [client 144.76.19.72:62106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:37.038710 2026] [ssl:error] [pid 3544410:tid 3544410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:37.231387 2026] [ssl:error] [pid 3549199:tid 3549199] (70014)End of file found: [client 216.73.216.199:29360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:37.233520 2026] [ssl:error] [pid 3551094:tid 3551094] (EAI 2)Name or service not known: [client 144.76.19.72:62120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:37.233554 2026] [ssl:error] [pid 3551094:tid 3551094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:37.325663 2026] [authz_core:error] [pid 3551095:tid 3551095] [client 66.249.66.33:46198] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:47:37.328355 2026] [authz_core:error] [pid 3551095:tid 3551095] [client 66.249.66.33:46198] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:47:37.376970 2026] [authz_core:error] [pid 3543830:tid 3543830] [client 34.123.170.104:13607] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:47:37.450312 2026] [lsapi:warn] [pid 3538830:tid 3538830] [client 62.210.185.4:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:47:37.559807 2026] [authz_core:error] [pid 3551095:tid 3551095] [client 66.249.66.33:46198] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:47:37.562501 2026] [authz_core:error] [pid 3551095:tid 3551095] [client 66.249.66.33:46198] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:47:40.288036 2026] [ssl:error] [pid 3551144:tid 3551144] (EAI 2)Name or service not known: [client 144.76.19.72:62112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:40.288091 2026] [ssl:error] [pid 3551144:tid 3551144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:40.343253 2026] [ssl:error] [pid 3549919:tid 3549919] (EAI 2)Name or service not known: [client 144.76.19.72:62114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:40.343304 2026] [ssl:error] [pid 3549919:tid 3549919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:43.406556 2026] [ssl:error] [pid 3545342:tid 3545342] (EAI 2)Name or service not known: [client 144.76.19.72:62116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:43.406588 2026] [ssl:error] [pid 3545342:tid 3545342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:43.461663 2026] [ssl:error] [pid 3550299:tid 3550299] (EAI 2)Name or service not known: [client 144.76.19.72:62126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:43.461695 2026] [ssl:error] [pid 3550299:tid 3550299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:44.790427 2026] [security2:error] [pid 3551053:tid 3551053] [client 85.208.96.206:47980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11464.0.html"] [unique_id "amtWAMiqPDxuCITSiTn06QAAAAY"]
[Thu Jul 30 14:47:44.841754 2026] [core:error] [pid 3551139:tid 3551139] (13)Permission denied: [client 216.73.216.199:46291] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_balloon/drivers/virtio:virtio_balloon/bind
[Thu Jul 30 14:47:46.514889 2026] [ssl:error] [pid 3545342:tid 3545342] (EAI 2)Name or service not known: [client 144.76.19.72:62132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:46.514925 2026] [ssl:error] [pid 3545342:tid 3545342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:46.566245 2026] [ssl:error] [pid 3551096:tid 3551096] (EAI 2)Name or service not known: [client 144.76.19.72:62144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:46.566277 2026] [ssl:error] [pid 3551096:tid 3551096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:46.827344 2026] [ssl:error] [pid 3551139:tid 3551139] (70014)End of file found: [client 216.73.216.199:46291] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:47.100443 2026] [access_compat:error] [pid 3546594:tid 3546594] [client 2.189.5.162:60944] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:47:47.169469 2026] [access_compat:error] [pid 3546014:tid 3546014] [client 2.189.5.142:50742] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:47:47.266978 2026] [ssl:error] [pid 3551143:tid 3551143] (70014)End of file found: [client 216.73.216.199:33389] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:50.137385 2026] [ssl:error] [pid 3546536:tid 3546536] (EAI 2)Name or service not known: [client 144.76.19.72:48076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:50.137440 2026] [ssl:error] [pid 3546536:tid 3546536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:50.335459 2026] [cgi:error] [pid 3550341:tid 3550341] [client 20.203.200.218:20356] AH02811: stderr from /home/ditchfes/public_html/ditchlingfair.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 14:47:50.342610 2026] [security2:error] [pid 3546536:tid 3546536] [client 185.191.171.19:19204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/how-do-you-know-serrapeptase-is-working"] [unique_id "amtWBjisUBKeN4fmJtUwpAAAAAU"]
[Thu Jul 30 14:47:50.453679 2026] [authz_core:error] [pid 3550341:tid 3550341] [client 20.203.200.218:20356] AH01630: client denied by server configuration: /home/ditchfes/public_html/ditchlingfair.com/php.ini
[Thu Jul 30 14:47:50.456847 2026] [ssl:error] [pid 3549199:tid 3549199] (EAI 2)Name or service not known: [client 144.76.19.72:48082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:50.456871 2026] [ssl:error] [pid 3549199:tid 3549199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:50.596988 2026] [ssl:error] [pid 3537339:tid 3537339] (70014)End of file found: [client 216.73.216.199:46752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:50.797435 2026] [security2:error] [pid 3551751:tid 3551751] [client 47.128.16.52:53992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amtWBvqjdl4e7yw-EySANAAAABg"]
[Thu Jul 30 14:47:52.625021 2026] [ssl:error] [pid 3546536:tid 3546536] (70014)End of file found: [client 216.73.216.199:35650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:53.016395 2026] [core:error] [pid 3528324:tid 3528324] (13)Permission denied: [client 216.73.216.199:28597] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:29/subsystem/ttyS3/close_delay
[Thu Jul 30 14:47:53.316751 2026] [ssl:error] [pid 3528324:tid 3528324] (70014)End of file found: [client 216.73.216.199:28597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:53.513474 2026] [ssl:error] [pid 3551143:tid 3551143] (EAI 2)Name or service not known: [client 144.76.19.72:48090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:53.513504 2026] [ssl:error] [pid 3551143:tid 3551143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:53.566732 2026] [ssl:error] [pid 3550341:tid 3550341] (EAI 2)Name or service not known: [client 144.76.19.72:48102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:53.566775 2026] [ssl:error] [pid 3550341:tid 3550341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:55.494316 2026] [security2:error] [pid 3539770:tid 3539770] [client 94.154.43.184:63520] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elass.me"] [uri "/.env"] [unique_id "amtWC7L1k-LSxoyZpdWEEwAAACA"]
[Thu Jul 30 14:47:55.494488 2026] [security2:error] [pid 3539770:tid 3539770] [client 94.154.43.184:63520] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elass.me"] [uri "/.env"] [unique_id "amtWC7L1k-LSxoyZpdWEEwAAACA"]
[Thu Jul 30 14:47:55.494690 2026] [security2:error] [pid 3539770:tid 3539770] [client 94.154.43.184:63520] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elass.me"] [uri "/.env"] [unique_id "amtWC7L1k-LSxoyZpdWEEwAAACA"]
[Thu Jul 30 14:47:55.963747 2026] [autoindex:error] [pid 3551141:tid 3551141] (13)Permission denied: [client 216.73.216.199:38861] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/apache2/
[Thu Jul 30 14:47:56.685216 2026] [ssl:error] [pid 3551752:tid 3551752] (EAI 2)Name or service not known: [client 144.76.19.72:48110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:56.685268 2026] [ssl:error] [pid 3551752:tid 3551752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:56.742917 2026] [ssl:error] [pid 3550341:tid 3550341] (EAI 2)Name or service not known: [client 144.76.19.72:48126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:56.742961 2026] [ssl:error] [pid 3550341:tid 3550341] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:56.975813 2026] [ssl:error] [pid 3551141:tid 3551141] (70014)End of file found: [client 216.73.216.199:38861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:47:58.094269 2026] [core:error] [pid 3538105:tid 3538105] (13)Permission denied: [client 216.73.216.199:33008] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/trace
[Thu Jul 30 14:47:59.183996 2026] [authz_core:error] [pid 3549121:tid 3549121] [client 146.70.194.246:56536] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 14:47:59.186999 2026] [access_compat:error] [pid 3549121:tid 3549121] [client 146.70.194.246:56536] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 14:47:59.190404 2026] [access_compat:error] [pid 3549121:tid 3549121] [client 146.70.194.246:56536] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 14:47:59.194589 2026] [access_compat:error] [pid 3549121:tid 3549121] [client 146.70.194.246:56536] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 14:47:59.198922 2026] [access_compat:error] [pid 3549121:tid 3549121] [client 146.70.194.246:56536] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 14:47:59.199380 2026] [access_compat:error] [pid 3549121:tid 3549121] [client 146.70.194.246:56536] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 14:47:59.815692 2026] [ssl:error] [pid 3528324:tid 3528324] (EAI 2)Name or service not known: [client 144.76.19.72:44400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:59.815737 2026] [ssl:error] [pid 3528324:tid 3528324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:47:59.869256 2026] [ssl:error] [pid 3551093:tid 3551093] (EAI 2)Name or service not known: [client 144.76.19.72:44408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:47:59.869304 2026] [ssl:error] [pid 3551093:tid 3551093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:00.050379 2026] [ssl:error] [pid 3551752:tid 3551752] (70014)End of file found: [client 216.73.216.199:30040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:01.412235 2026] [ssl:error] [pid 3548536:tid 3548536] (70014)End of file found: [client 216.73.216.199:59584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:02.622889 2026] [ssl:error] [pid 3549919:tid 3549919] (70014)End of file found: [client 216.73.216.199:62438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:02.928668 2026] [ssl:error] [pid 3551140:tid 3551140] (EAI 2)Name or service not known: [client 144.76.19.72:44416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:02.928722 2026] [ssl:error] [pid 3551140:tid 3551140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:02.980623 2026] [ssl:error] [pid 3550342:tid 3550342] (EAI 2)Name or service not known: [client 144.76.19.72:44420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:02.980659 2026] [ssl:error] [pid 3550342:tid 3550342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:03.226750 2026] [core:error] [pid 3543008:tid 3543008] (13)Permission denied: [client 216.73.216.199:27259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip4-frags/remote_node_defrag_ratio
[Thu Jul 30 14:48:03.527513 2026] [ssl:error] [pid 3543008:tid 3543008] (70014)End of file found: [client 216.73.216.199:27259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:04.993280 2026] [authz_core:error] [pid 3551786:tid 3551786] [client 216.73.216.82:37479] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:48:06.032595 2026] [ssl:error] [pid 3543830:tid 3543830] (EAI 2)Name or service not known: [client 144.76.19.72:44422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:06.032626 2026] [ssl:error] [pid 3543830:tid 3543830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:06.088333 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:44428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:06.088360 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:06.756719 2026] [security2:error] [pid 3545431:tid 3545431] [client 216.73.216.199:1859] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/modprobe.d/systemd.conf"] [unique_id "amtWFua-Sl1aSr0GrpCoCAAAABw"]
[Thu Jul 30 14:48:06.757012 2026] [security2:error] [pid 3545431:tid 3545431] [client 216.73.216.199:1859] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/modprobe.d/systemd.conf"] [unique_id "amtWFua-Sl1aSr0GrpCoCAAAABw"]
[Thu Jul 30 14:48:06.757223 2026] [security2:error] [pid 3545431:tid 3545431] [client 216.73.216.199:1859] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/modprobe.d/systemd.conf"] [unique_id "amtWFua-Sl1aSr0GrpCoCAAAABw"]
[Thu Jul 30 14:48:07.458096 2026] [ssl:error] [pid 3545431:tid 3545431] (70014)End of file found: [client 216.73.216.199:1859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:07.983002 2026] [core:error] [pid 3545432:tid 3545432] (13)Permission denied: [client 216.73.216.199:50728] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nf_conntrack_expect/hwcache_align
[Thu Jul 30 14:48:08.371630 2026] [ssl:error] [pid 3545432:tid 3545432] (70014)End of file found: [client 216.73.216.199:50728] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:08.868012 2026] [ssl:error] [pid 3551751:tid 3551751] (70014)End of file found: [client 216.73.216.199:35242] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:09.146848 2026] [ssl:error] [pid 3551138:tid 3551138] (EAI 2)Name or service not known: [client 144.76.19.72:44438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:09.146909 2026] [ssl:error] [pid 3551138:tid 3551138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:09.202135 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:44454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:09.202164 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:09.291264 2026] [security2:error] [pid 3551094:tid 3551094] [client 167.57.169.246:35014] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWGT_SgwLmUVhVDxZ7awAAABE"]
[Thu Jul 30 14:48:09.291324 2026] [security2:error] [pid 3551094:tid 3551094] [client 167.57.169.246:35014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWGT_SgwLmUVhVDxZ7awAAABE"]
[Thu Jul 30 14:48:09.291714 2026] [security2:error] [pid 3551094:tid 3551094] [client 167.57.169.246:35014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWGT_SgwLmUVhVDxZ7awAAABE"]
[Thu Jul 30 14:48:11.066536 2026] [access_compat:error] [pid 3550342:tid 3550342] [client 112.86.225.229:57376] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 14:48:11.066651 2026] [access_compat:error] [pid 3550342:tid 3550342] [client 112.86.225.229:57376] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:48:11.626151 2026] [security2:error] [pid 3551752:tid 3551752] [client 114.119.146.111:34251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/request_format~html"] [unique_id "amtWG4sz6fZhzEwn15ms0AAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E25-11-2019
[Thu Jul 30 14:48:12.257179 2026] [ssl:error] [pid 3528324:tid 3528324] (EAI 2)Name or service not known: [client 144.76.19.72:46440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:12.257212 2026] [ssl:error] [pid 3528324:tid 3528324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:12.310076 2026] [ssl:error] [pid 3539770:tid 3539770] (EAI 2)Name or service not known: [client 144.76.19.72:46456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:12.310135 2026] [ssl:error] [pid 3539770:tid 3539770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:13.211725 2026] [security2:error] [pid 3551053:tid 3551053] [client 114.119.146.111:34267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/request_format~html"] [unique_id "amtWHciqPDxuCITSiTn08gAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E25-11-2019
[Thu Jul 30 14:48:13.672857 2026] [ssl:error] [pid 3546014:tid 3546014] (70014)End of file found: [client 216.73.216.199:4253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:13.722980 2026] [security2:error] [pid 3545380:tid 3545380] [client 154.208.58.192:44340] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWHcROpRJjldDRtwZaMQAAAAo"]
[Thu Jul 30 14:48:13.723021 2026] [security2:error] [pid 3545380:tid 3545380] [client 154.208.58.192:44340] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWHcROpRJjldDRtwZaMQAAAAo"]
[Thu Jul 30 14:48:13.723287 2026] [security2:error] [pid 3545380:tid 3545380] [client 154.208.58.192:44340] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWHcROpRJjldDRtwZaMQAAAAo"]
[Thu Jul 30 14:48:13.764544 2026] [authz_core:error] [pid 3550299:tid 3550299] [client 217.76.50.173:58275] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/widgets/error_log
[Thu Jul 30 14:48:13.802603 2026] [core:error] [pid 3549124:tid 3549124] (13)Permission denied: [client 216.73.216.199:34684] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-2/slabs
[Thu Jul 30 14:48:14.104513 2026] [ssl:error] [pid 3549124:tid 3549124] (70014)End of file found: [client 216.73.216.199:34684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:15.386326 2026] [ssl:error] [pid 3545380:tid 3545380] (EAI 2)Name or service not known: [client 144.76.19.72:46466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:15.386355 2026] [ssl:error] [pid 3545380:tid 3545380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:15.439400 2026] [ssl:error] [pid 3539770:tid 3539770] (EAI 2)Name or service not known: [client 144.76.19.72:46474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:15.439440 2026] [ssl:error] [pid 3539770:tid 3539770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:15.618895 2026] [core:error] [pid 3549068:tid 3549068] (13)Permission denied: [client 216.73.216.199:40310] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tw_sock_TCP/usersize
[Thu Jul 30 14:48:15.921326 2026] [ssl:error] [pid 3549068:tid 3549068] (70014)End of file found: [client 216.73.216.199:40310] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:16.177775 2026] [access_compat:error] [pid 3539770:tid 3539770] [client 89.45.53.3:36404] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:48:17.104855 2026] [authz_core:error] [pid 3551144:tid 3551144] [client 66.249.66.33:42847] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:48:17.107526 2026] [authz_core:error] [pid 3551144:tid 3551144] [client 66.249.66.33:42847] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:48:17.115813 2026] [access_compat:error] [pid 3549198:tid 3549198] [client 2.189.5.142:43580] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:48:17.373537 2026] [access_compat:error] [pid 3548539:tid 3548539] [client 89.45.53.30:42696] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:48:17.514153 2026] [security2:error] [pid 3551784:tid 3551784] [client 170.239.69.42:15180] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWIYxvrr7HOjzb-8_94AAAADk"]
[Thu Jul 30 14:48:17.514211 2026] [security2:error] [pid 3551784:tid 3551784] [client 170.239.69.42:15180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWIYxvrr7HOjzb-8_94AAAADk"]
[Thu Jul 30 14:48:17.514461 2026] [security2:error] [pid 3551784:tid 3551784] [client 170.239.69.42:15180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWIYxvrr7HOjzb-8_94AAAADk"]
[Thu Jul 30 14:48:17.763166 2026] [core:error] [pid 3545433:tid 3545433] [client 66.249.66.199:54274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:48:17.763196 2026] [core:error] [pid 3545433:tid 3545433] [client 66.249.66.199:54274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:48:18.492341 2026] [ssl:error] [pid 3549198:tid 3549198] (EAI 2)Name or service not known: [client 144.76.19.72:46482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:18.492371 2026] [ssl:error] [pid 3549198:tid 3549198] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:18.550655 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:46490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:18.550682 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:19.735340 2026] [ssl:error] [pid 3546014:tid 3546014] (70014)End of file found: [client 216.73.216.199:56024] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:20.305481 2026] [access_compat:error] [pid 3545342:tid 3545342] [client 2.189.5.218:52410] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 14:48:20.444154 2026] [ssl:error] [pid 3545432:tid 3545432] (70014)End of file found: [client 216.73.216.199:29345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:21.257053 2026] [ssl:error] [pid 3543008:tid 3543008] (70014)End of file found: [client 216.73.216.199:19342] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:21.605046 2026] [ssl:error] [pid 3549124:tid 3549124] (EAI 2)Name or service not known: [client 144.76.19.72:56512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:21.605094 2026] [ssl:error] [pid 3549124:tid 3549124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:21.660485 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:56516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:21.660518 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:24.731720 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:56522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:24.731759 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:24.786406 2026] [ssl:error] [pid 3548539:tid 3548539] (EAI 2)Name or service not known: [client 144.76.19.72:56526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:24.786460 2026] [ssl:error] [pid 3548539:tid 3548539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:25.530321 2026] [authz_core:error] [pid 3549195:tid 3549195] [client 104.219.215.141:45678] AH01630: client denied by server configuration: /home/clss/public_html/error_log, referer: http://stopfordsackville.com/?yt1
[Thu Jul 30 14:48:26.467404 2026] [ssl:error] [pid 3550299:tid 3550299] (70014)End of file found: [client 216.73.216.199:20465] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:27.675735 2026] [ssl:error] [pid 3548331:tid 3548331] (70014)End of file found: [client 216.73.216.199:50328] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:27.845711 2026] [ssl:error] [pid 3545432:tid 3545432] (EAI 2)Name or service not known: [client 144.76.19.72:56534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:27.845741 2026] [ssl:error] [pid 3545432:tid 3545432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:27.905603 2026] [ssl:error] [pid 3551783:tid 3551783] (EAI 2)Name or service not known: [client 144.76.19.72:56548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:27.905638 2026] [ssl:error] [pid 3551783:tid 3551783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:29.181333 2026] [ssl:error] [pid 3549124:tid 3549124] (70014)End of file found: [client 216.73.216.199:14920] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:30.086520 2026] [authz_core:error] [pid 3548539:tid 3548539] [client 4.184.60.71:6785] AH01630: client denied by server configuration: /home/buttere/public_html/hbsanorth.co.uk/wp-includes/SimplePie/error_log
[Thu Jul 30 14:48:30.667699 2026] [security2:error] [pid 3543008:tid 3543008] [client 94.154.43.185:63472] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dev.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtWLkQmke7cZnj2uQuNIgAAAA0"]
[Thu Jul 30 14:48:30.667881 2026] [security2:error] [pid 3543008:tid 3543008] [client 94.154.43.185:63472] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dev.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtWLkQmke7cZnj2uQuNIgAAAA0"]
[Thu Jul 30 14:48:30.668013 2026] [security2:error] [pid 3543008:tid 3543008] [client 94.154.43.185:63472] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dev.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtWLkQmke7cZnj2uQuNIgAAAA0"]
[Thu Jul 30 14:48:31.117659 2026] [ssl:error] [pid 3553207:tid 3553207] (EAI 2)Name or service not known: [client 144.76.19.72:51014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:31.117706 2026] [ssl:error] [pid 3553207:tid 3553207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:31.443441 2026] [ssl:error] [pid 3553207:tid 3553207] (EAI 2)Name or service not known: [client 144.76.19.72:51018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:31.443470 2026] [ssl:error] [pid 3553207:tid 3553207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:32.284166 2026] [security2:error] [pid 3545380:tid 3545380] [client 43.163.206.70:59492] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "amtWMMROpRJjldDRtwZaOAAAAAo"]
[Thu Jul 30 14:48:32.771810 2026] [ssl:error] [pid 3553208:tid 3553208] (70014)End of file found: [client 216.73.216.199:20435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:33.866107 2026] [security2:error] [pid 3537597:tid 3537597] [client 43.163.206.70:35962] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtWMS37C6zwagdQ1jw0BwAAABY"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 14:48:33.867908 2026] [authz_core:error] [pid 3537597:tid 3537597] [client 43.163.206.70:35962] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 14:48:33.870575 2026] [authz_core:error] [pid 3537597:tid 3537597] [client 43.163.206.70:35962] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 14:48:33.991116 2026] [ssl:error] [pid 3553207:tid 3553207] (70014)End of file found: [client 216.73.216.199:19876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:34.409653 2026] [security2:error] [pid 3549121:tid 3549121] [client 129.159.56.14:44494] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtWMtyNmCJS0Iy6UE4gVgAAACs"]
[Thu Jul 30 14:48:34.409839 2026] [security2:error] [pid 3549121:tid 3549121] [client 129.159.56.14:44494] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtWMtyNmCJS0Iy6UE4gVgAAACs"]
[Thu Jul 30 14:48:34.410307 2026] [core:error] [pid 3549121:tid 3549121] [client 129.159.56.14:44494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:48:34.410444 2026] [security2:error] [pid 3549121:tid 3549121] [client 129.159.56.14:44494] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtWMtyNmCJS0Iy6UE4gVgAAACs"]
[Thu Jul 30 14:48:34.498962 2026] [ssl:error] [pid 3553243:tid 3553243] (EAI 2)Name or service not known: [client 144.76.19.72:51022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:34.498999 2026] [ssl:error] [pid 3553243:tid 3553243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:34.499881 2026] [ssl:error] [pid 3551144:tid 3551144] (70014)End of file found: [client 216.73.216.199:6918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:34.555466 2026] [ssl:error] [pid 3545431:tid 3545431] (EAI 2)Name or service not known: [client 144.76.19.72:51034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:34.555498 2026] [ssl:error] [pid 3545431:tid 3545431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:37.057001 2026] [access_compat:error] [pid 3549124:tid 3549124] [client 45.158.164.139:47518] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:48:37.362341 2026] [security2:error] [pid 3549919:tid 3549919] [client 51.75.54.138:45128] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtWNTff-z734_jG5etyCgAAAAg"]
[Thu Jul 30 14:48:37.651630 2026] [ssl:error] [pid 3549068:tid 3549068] (EAI 2)Name or service not known: [client 144.76.19.72:51036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:37.651667 2026] [ssl:error] [pid 3549068:tid 3549068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:37.708123 2026] [ssl:error] [pid 3553165:tid 3553165] (EAI 2)Name or service not known: [client 144.76.19.72:51044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:37.708153 2026] [ssl:error] [pid 3553165:tid 3553165] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:38.506907 2026] [ssl:error] [pid 3545431:tid 3545431] (70014)End of file found: [client 216.73.216.199:50404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:39.185664 2026] [cgi:error] [pid 3542492:tid 3542492] [client 66.132.172.176:23652] AH02812: stderr from /home/islay/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://www.islay.me:80/cgi-bin
[Thu Jul 30 14:48:39.723248 2026] [ssl:error] [pid 3546014:tid 3546014] (70014)End of file found: [client 216.73.216.199:57032] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:40.799132 2026] [ssl:error] [pid 3553242:tid 3553242] (EAI 2)Name or service not known: [client 144.76.19.72:18314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:40.799166 2026] [ssl:error] [pid 3553242:tid 3553242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:40.857058 2026] [ssl:error] [pid 3549195:tid 3549195] (EAI 2)Name or service not known: [client 144.76.19.72:18322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:40.857108 2026] [ssl:error] [pid 3549195:tid 3549195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:40.880879 2026] [authz_core:error] [pid 3549121:tid 3549121] [client 66.249.66.33:36323] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:48:40.883537 2026] [authz_core:error] [pid 3549121:tid 3549121] [client 66.249.66.33:36323] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:48:42.686480 2026] [ssl:error] [pid 3551785:tid 3551785] (70014)End of file found: [client 216.73.216.199:9169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:42.903813 2026] [ssl:error] [pid 3545342:tid 3545342] (70014)End of file found: [client 216.73.216.199:39794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:43.394132 2026] [ssl:error] [pid 3553242:tid 3553242] (70014)End of file found: [client 216.73.216.199:17214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:44.107742 2026] [ssl:error] [pid 3553642:tid 3553642] (EAI 2)Name or service not known: [client 144.76.19.72:18336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:44.107788 2026] [ssl:error] [pid 3553642:tid 3553642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:44.177198 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:18352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:44.177225 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:45.165640 2026] [lsapi:warn] [pid 3545432:tid 3545432] [client 145.14.10.39:59896] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 14:48:45.165685 2026] [lsapi:warn] [pid 3545432:tid 3545432] [client 145.14.10.39:59896] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 14:48:46.094724 2026] [access_compat:error] [pid 3551141:tid 3551141] [client 45.158.164.139:52838] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:48:47.233354 2026] [ssl:error] [pid 3545380:tid 3545380] (EAI 2)Name or service not known: [client 144.76.19.72:18356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:47.233391 2026] [ssl:error] [pid 3545380:tid 3545380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:47.284818 2026] [ssl:error] [pid 3553208:tid 3553208] (EAI 2)Name or service not known: [client 144.76.19.72:18358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:47.284870 2026] [ssl:error] [pid 3553208:tid 3553208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:47.648087 2026] [security2:error] [pid 3553689:tid 3553689] [client 47.128.24.48:33456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2010/ShelterProjects2010-print.pdf"] [unique_id "amtWP3F9hUfT0bOhdk5oswAAAB4"]
[Thu Jul 30 14:48:48.783281 2026] [security2:error] [pid 3549195:tid 3549195] [client 43.166.247.82:47806] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtWQGTCF2wwsajESsVHnAAAADA"]
[Thu Jul 30 14:48:48.944000 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:42600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:49.239361 2026] [ssl:error] [pid 3545432:tid 3545432] (70014)End of file found: [client 216.73.216.199:34034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:49.448247 2026] [security2:error] [pid 3551783:tid 3551783] [client 185.191.171.19:11206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2341.0/prev_next,prev.html"] [unique_id "amtWQXODIwc9NheaKRjyyAAAADU"]
[Thu Jul 30 14:48:50.338576 2026] [ssl:error] [pid 3553643:tid 3553643] (EAI 2)Name or service not known: [client 144.76.19.72:28540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:50.338608 2026] [ssl:error] [pid 3553643:tid 3553643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:50.393648 2026] [ssl:error] [pid 3551053:tid 3551053] (EAI 2)Name or service not known: [client 144.76.19.72:28552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:50.393691 2026] [ssl:error] [pid 3551053:tid 3551053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:50.723021 2026] [security2:error] [pid 3551783:tid 3551783] [client 185.191.171.2:31666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/gcu-doctoral-graduation"] [unique_id "amtWQnODIwc9NheaKRjyygAAADU"]
[Thu Jul 30 14:48:50.748579 2026] [ssl:error] [pid 3545431:tid 3545431] (70014)End of file found: [client 216.73.216.199:62913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:50.818920 2026] [security2:error] [pid 3549195:tid 3549195] [client 43.166.247.82:41466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtWQmTCF2wwsajESsVHnQAAADA"], referer: http://prosperon.co.uk
[Thu Jul 30 14:48:53.173763 2026] [security2:error] [pid 3553692:tid 3553692] [client 185.191.171.8:54902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1726.0.html"] [unique_id "amtWRRql823xWyjziLKVdwAAACM"]
[Thu Jul 30 14:48:53.445785 2026] [ssl:error] [pid 3551783:tid 3551783] (EAI 2)Name or service not known: [client 144.76.19.72:28560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:53.445811 2026] [ssl:error] [pid 3551783:tid 3551783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:53.501525 2026] [ssl:error] [pid 3546536:tid 3546536] (EAI 2)Name or service not known: [client 144.76.19.72:28572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:53.501553 2026] [ssl:error] [pid 3546536:tid 3546536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:54.664113 2026] [core:error] [pid 3551053:tid 3551053] (13)Permission denied: [client 216.73.216.199:61785] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu6/driver/cpu1/crash_notes
[Thu Jul 30 14:48:56.469610 2026] [ssl:error] [pid 3545432:tid 3545432] (70014)End of file found: [client 216.73.216.199:17942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:56.574172 2026] [ssl:error] [pid 3553692:tid 3553692] (EAI 2)Name or service not known: [client 144.76.19.72:28576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:56.574251 2026] [ssl:error] [pid 3553692:tid 3553692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:56.627671 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:28584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:56.627716 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:56.773960 2026] [ssl:error] [pid 3551053:tid 3551053] (70014)End of file found: [client 216.73.216.199:61785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:57.268216 2026] [ssl:error] [pid 3545342:tid 3545342] (70014)End of file found: [client 216.73.216.199:39983] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:48:59.684524 2026] [ssl:error] [pid 3550299:tid 3550299] (EAI 2)Name or service not known: [client 144.76.19.72:60456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:59.684554 2026] [ssl:error] [pid 3550299:tid 3550299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:48:59.740959 2026] [ssl:error] [pid 3546014:tid 3546014] (EAI 2)Name or service not known: [client 144.76.19.72:60472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:48:59.741007 2026] [ssl:error] [pid 3546014:tid 3546014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:00.823448 2026] [security2:error] [pid 3553207:tid 3553207] [client 187.189.84.35:16044] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWTAUfpKDa4cNg4DcEtwAAAAw"]
[Thu Jul 30 14:49:00.823508 2026] [security2:error] [pid 3553207:tid 3553207] [client 187.189.84.35:16044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWTAUfpKDa4cNg4DcEtwAAAAw"]
[Thu Jul 30 14:49:00.823768 2026] [security2:error] [pid 3553207:tid 3553207] [client 187.189.84.35:16044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWTAUfpKDa4cNg4DcEtwAAAAw"]
[Thu Jul 30 14:49:02.797842 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:60482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:02.797882 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:02.853972 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:60496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:02.854000 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:03.111040 2026] [core:error] [pid 3551783:tid 3551783] (13)Permission denied: [client 216.73.216.199:20730] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/sysfillrect/sections/__kcrctab
[Thu Jul 30 14:49:04.286258 2026] [security2:error] [pid 3542492:tid 3542492] [client 150.109.72.191:38817] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWUMfoVC8fFEBzzy17XAAAAAk"]
[Thu Jul 30 14:49:04.286323 2026] [security2:error] [pid 3542492:tid 3542492] [client 150.109.72.191:38817] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWUMfoVC8fFEBzzy17XAAAAAk"]
[Thu Jul 30 14:49:04.286650 2026] [security2:error] [pid 3542492:tid 3542492] [client 150.109.72.191:38817] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWUMfoVC8fFEBzzy17XAAAAAk"]
[Thu Jul 30 14:49:04.616348 2026] [ssl:error] [pid 3553689:tid 3553689] (70014)End of file found: [client 216.73.216.199:27583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:05.154485 2026] [security2:error] [pid 3537597:tid 3537597] [client 94.154.43.185:24614] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "junglejacks.co.uk"] [uri "/.env"] [unique_id "amtWUS37C6zwagdQ1jw0FgAAABY"]
[Thu Jul 30 14:49:05.154679 2026] [security2:error] [pid 3537597:tid 3537597] [client 94.154.43.185:24614] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "junglejacks.co.uk"] [uri "/.env"] [unique_id "amtWUS37C6zwagdQ1jw0FgAAABY"]
[Thu Jul 30 14:49:05.534222 2026] [ssl:error] [pid 3550192:tid 3550192] (70014)End of file found: [client 216.73.216.199:37507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:05.830174 2026] [ssl:error] [pid 3551783:tid 3551783] (70014)End of file found: [client 216.73.216.199:20730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:05.907153 2026] [ssl:error] [pid 3546536:tid 3546536] (EAI 2)Name or service not known: [client 144.76.19.72:60508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:05.907188 2026] [ssl:error] [pid 3546536:tid 3546536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:05.960504 2026] [ssl:error] [pid 3549919:tid 3549919] (EAI 2)Name or service not known: [client 144.76.19.72:60512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:05.960528 2026] [ssl:error] [pid 3549919:tid 3549919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:06.155365 2026] [security2:error] [pid 3537597:tid 3537597] [client 94.154.43.185:24614] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtWUS37C6zwagdQ1jw0FgAAABY"]
[Thu Jul 30 14:49:06.329536 2026] [security2:error] [pid 3549919:tid 3549919] [client 94.154.43.185:24632] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.junglejacks.co.uk"] [uri "/.env"] [unique_id "amtWUjff-z734_jG5etyEgAAAAg"]
[Thu Jul 30 14:49:06.329748 2026] [security2:error] [pid 3549919:tid 3549919] [client 94.154.43.185:24632] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.junglejacks.co.uk"] [uri "/.env"] [unique_id "amtWUjff-z734_jG5etyEgAAAAg"]
[Thu Jul 30 14:49:06.546452 2026] [security2:error] [pid 3546536:tid 3546536] [client 150.109.72.191:14105] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWUjisUBKeN4fmJtUw1AAAAAU"]
[Thu Jul 30 14:49:06.546500 2026] [security2:error] [pid 3546536:tid 3546536] [client 150.109.72.191:14105] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWUjisUBKeN4fmJtUw1AAAAAU"]
[Thu Jul 30 14:49:06.546742 2026] [security2:error] [pid 3546536:tid 3546536] [client 150.109.72.191:14105] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWUjisUBKeN4fmJtUw1AAAAAU"]
[Thu Jul 30 14:49:07.111294 2026] [security2:error] [pid 3549919:tid 3549919] [client 94.154.43.185:24632] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.junglejacks.co.uk"] [uri "/index.php"] [unique_id "amtWUjff-z734_jG5etyEgAAAAg"]
[Thu Jul 30 14:49:09.017415 2026] [ssl:error] [pid 3528324:tid 3528324] (EAI 2)Name or service not known: [client 144.76.19.72:60528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:09.017457 2026] [ssl:error] [pid 3528324:tid 3528324] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:09.073099 2026] [ssl:error] [pid 3545431:tid 3545431] (EAI 2)Name or service not known: [client 144.76.19.72:60542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:09.073129 2026] [ssl:error] [pid 3545431:tid 3545431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:11.116564 2026] [security2:error] [pid 3553689:tid 3553689] [client 129.226.93.167:62839] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWV3F9hUfT0bOhdk5ovAAAAB4"]
[Thu Jul 30 14:49:11.116621 2026] [security2:error] [pid 3553689:tid 3553689] [client 129.226.93.167:62839] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWV3F9hUfT0bOhdk5ovAAAAB4"]
[Thu Jul 30 14:49:11.116864 2026] [security2:error] [pid 3553689:tid 3553689] [client 129.226.93.167:62839] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWV3F9hUfT0bOhdk5ovAAAAB4"]
[Thu Jul 30 14:49:12.127221 2026] [ssl:error] [pid 3543830:tid 3543830] (EAI 2)Name or service not known: [client 144.76.19.72:56898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:12.127251 2026] [ssl:error] [pid 3543830:tid 3543830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:12.183190 2026] [ssl:error] [pid 3549201:tid 3549201] (EAI 2)Name or service not known: [client 144.76.19.72:56908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:12.183215 2026] [ssl:error] [pid 3549201:tid 3549201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:12.326624 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:4268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:13.531242 2026] [ssl:error] [pid 3549201:tid 3549201] (70014)End of file found: [client 216.73.216.199:41053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:13.616689 2026] [security2:error] [pid 3523527:tid 3523527] [client 51.68.107.144:24511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amtWWfgoyzcbIjzopiNXgQAAAB8"]
[Thu Jul 30 14:49:13.829081 2026] [security2:error] [pid 3548414:tid 3548414] [client 51.68.107.144:10717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtWWahVGpWGxMhYHfzo3AAAAB0"]
[Thu Jul 30 14:49:13.938053 2026] [security2:error] [pid 3549919:tid 3549919] [client 51.68.107.144:13993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/robots.txt"] [unique_id "amtWWTff-z734_jG5etyFAAAAAg"]
[Thu Jul 30 14:49:14.587617 2026] [security2:error] [pid 3546536:tid 3546536] [client 51.68.107.144:9785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.banskoexpress.com"] [uri "/403.shtml"] [unique_id "amtWWjisUBKeN4fmJtUw1wAAAAU"]
[Thu Jul 30 14:49:15.239550 2026] [ssl:error] [pid 3553689:tid 3553689] (EAI 2)Name or service not known: [client 144.76.19.72:56914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:15.239584 2026] [ssl:error] [pid 3553689:tid 3553689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:15.295785 2026] [ssl:error] [pid 3554581:tid 3554581] (EAI 2)Name or service not known: [client 144.76.19.72:56924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:15.295817 2026] [ssl:error] [pid 3554581:tid 3554581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:16.297679 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:24185] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:18.003117 2026] [authz_core:error] [pid 3553877:tid 3553877] [client 66.249.66.35:36191] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:49:18.005792 2026] [authz_core:error] [pid 3553877:tid 3553877] [client 66.249.66.35:36191] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:49:18.739484 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:56936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:18.739512 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:18.790979 2026] [ssl:error] [pid 3555011:tid 3555011] (EAI 2)Name or service not known: [client 144.76.19.72:56944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:18.791013 2026] [ssl:error] [pid 3555011:tid 3555011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:19.913524 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:54355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:21.113566 2026] [core:error] [pid 3553207:tid 3553207] (13)Permission denied: [client 216.73.216.199:1698] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/rtc/rtc0/device/driver/uevent
[Thu Jul 30 14:49:21.846917 2026] [ssl:error] [pid 3555100:tid 3555100] (EAI 2)Name or service not known: [client 144.76.19.72:57810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:21.846954 2026] [ssl:error] [pid 3555100:tid 3555100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:21.936092 2026] [ssl:error] [pid 3553643:tid 3553643] (EAI 2)Name or service not known: [client 144.76.19.72:57824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:21.936121 2026] [ssl:error] [pid 3553643:tid 3553643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:23.563109 2026] [cgi:error] [pid 3543830:tid 3543830] [client 65.109.124.116:37957] AH02812: stderr from /home/winterb/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:49:24.992712 2026] [ssl:error] [pid 3554581:tid 3554581] (EAI 2)Name or service not known: [client 144.76.19.72:57838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:24.992741 2026] [ssl:error] [pid 3554581:tid 3554581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:25.048390 2026] [ssl:error] [pid 3549919:tid 3549919] (EAI 2)Name or service not known: [client 144.76.19.72:57848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:25.048438 2026] [ssl:error] [pid 3549919:tid 3549919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:26.846038 2026] [core:error] [pid 3542492:tid 3542492] (13)Permission denied: [client 216.73.216.199:16245] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/devices/kprobe/subsystem/drivers_probe
[Thu Jul 30 14:49:27.448460 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:16245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:28.116883 2026] [ssl:error] [pid 3543008:tid 3543008] (EAI 2)Name or service not known: [client 144.76.19.72:57872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:28.116917 2026] [ssl:error] [pid 3543008:tid 3543008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:28.171252 2026] [ssl:error] [pid 3555101:tid 3555101] (EAI 2)Name or service not known: [client 144.76.19.72:57874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:28.171283 2026] [ssl:error] [pid 3555101:tid 3555101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:31.230092 2026] [ssl:error] [pid 3546014:tid 3546014] (EAI 2)Name or service not known: [client 144.76.19.72:23692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:31.230126 2026] [ssl:error] [pid 3546014:tid 3546014] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:31.270053 2026] [core:error] [pid 3528324:tid 3528324] [client 45.148.10.120:42922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:49:31.270091 2026] [core:error] [pid 3528324:tid 3528324] [client 45.148.10.120:42922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:49:31.270142 2026] [security2:error] [pid 3550299:tid 3550299] [client 45.148.10.120:42924] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.router.markmitchell.org"] [uri "/.env"] [unique_id "amtWa-9uTtHbMCAtr7UR-QAAABs"]
[Thu Jul 30 14:49:31.270354 2026] [security2:error] [pid 3550299:tid 3550299] [client 45.148.10.120:42924] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.router.markmitchell.org"] [uri "/.env"] [unique_id "amtWa-9uTtHbMCAtr7UR-QAAABs"]
[Thu Jul 30 14:49:31.270725 2026] [core:error] [pid 3550299:tid 3550299] [client 45.148.10.120:42924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:49:31.270862 2026] [security2:error] [pid 3550299:tid 3550299] [client 45.148.10.120:42924] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.router.markmitchell.org"] [uri "/.env"] [unique_id "amtWa-9uTtHbMCAtr7UR-QAAABs"]
[Thu Jul 30 14:49:31.273162 2026] [core:error] [pid 3543505:tid 3543505] [client 45.148.10.120:42940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:49:31.273183 2026] [core:error] [pid 3543505:tid 3543505] [client 45.148.10.120:42940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:49:31.284711 2026] [ssl:error] [pid 3549068:tid 3549068] (EAI 2)Name or service not known: [client 144.76.19.72:23700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:31.284736 2026] [ssl:error] [pid 3549068:tid 3549068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:31.558987 2026] [ssl:error] [pid 3523527:tid 3523527] (70014)End of file found: [client 216.73.216.199:5734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:31.667174 2026] [core:error] [pid 3553207:tid 3553207] (13)Permission denied: [client 216.73.216.199:1698] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 14:49:32.270122 2026] [ssl:error] [pid 3553207:tid 3553207] (70014)End of file found: [client 216.73.216.199:1698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:32.513543 2026] [security2:error] [pid 3555101:tid 3555101] [client 197.21.135.184:8099] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWbJ6NmA4neewLrTs-hwAAACw"]
[Thu Jul 30 14:49:32.513588 2026] [security2:error] [pid 3555101:tid 3555101] [client 197.21.135.184:8099] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWbJ6NmA4neewLrTs-hwAAACw"]
[Thu Jul 30 14:49:32.513824 2026] [security2:error] [pid 3555101:tid 3555101] [client 197.21.135.184:8099] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWbJ6NmA4neewLrTs-hwAAACw"]
[Thu Jul 30 14:49:32.762957 2026] [ssl:error] [pid 3549068:tid 3549068] (70014)End of file found: [client 216.73.216.199:20468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:34.325956 2026] [security2:error] [pid 3553242:tid 3553242] [client 185.191.171.13:10654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2284.0/prev_next,next.html"] [unique_id "amtWbusyryUScKSe7HMJtAAAABo"]
[Thu Jul 30 14:49:34.344020 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:23704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:34.344043 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:34.397030 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:23714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:34.397106 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:35.081132 2026] [security2:error] [pid 3537597:tid 3537597] [client 114.119.158.38:41949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~30/request_format~html"] [unique_id "amtWby37C6zwagdQ1jw0KwAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1574553600/cat_ids%7E17,30/request_format%7Ehtml
[Thu Jul 30 14:49:37.023778 2026] [security2:error] [pid 3523527:tid 3523527] [client 114.119.158.38:41959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~30/request_format~html"] [unique_id "amtWcfgoyzcbIjzopiNXjQAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1574553600/cat_ids%7E17,30/request_format%7Ehtml
[Thu Jul 30 14:49:37.456406 2026] [ssl:error] [pid 3555886:tid 3555886] (EAI 2)Name or service not known: [client 144.76.19.72:23716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:37.456460 2026] [ssl:error] [pid 3555886:tid 3555886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:37.513003 2026] [ssl:error] [pid 3555058:tid 3555058] (EAI 2)Name or service not known: [client 144.76.19.72:23726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:37.513031 2026] [ssl:error] [pid 3555058:tid 3555058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:38.590755 2026] [ssl:error] [pid 3543505:tid 3543505] (70014)End of file found: [client 216.73.216.199:27163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:39.431284 2026] [security2:error] [pid 3553689:tid 3553689] [client 85.208.96.193:58440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6840.0/prev_next,prev.html"] [unique_id "amtWc3F9hUfT0bOhdk5oxgAAAB4"]
[Thu Jul 30 14:49:40.101874 2026] [ssl:error] [pid 3551783:tid 3551783] (70014)End of file found: [client 216.73.216.199:21409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:40.564989 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:34988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:40.565027 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:40.592571 2026] [ssl:error] [pid 3555839:tid 3555839] (70014)End of file found: [client 216.73.216.199:32418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:40.616665 2026] [ssl:error] [pid 3553689:tid 3553689] (EAI 2)Name or service not known: [client 144.76.19.72:34992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:40.616688 2026] [ssl:error] [pid 3553689:tid 3553689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:41.467567 2026] [authz_core:error] [pid 3538830:tid 3538830] [client 66.249.66.33:44606] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:49:41.470214 2026] [authz_core:error] [pid 3538830:tid 3538830] [client 66.249.66.33:44606] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:49:43.672929 2026] [ssl:error] [pid 3549121:tid 3549121] (EAI 2)Name or service not known: [client 144.76.19.72:35004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:43.672970 2026] [ssl:error] [pid 3549121:tid 3549121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:43.728176 2026] [ssl:error] [pid 3556074:tid 3556074] (EAI 2)Name or service not known: [client 144.76.19.72:35018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:43.728220 2026] [ssl:error] [pid 3556074:tid 3556074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:43.927493 2026] [access_compat:error] [pid 3549919:tid 3549919] [client 45.158.164.139:60714] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:49:44.656754 2026] [ssl:error] [pid 3556074:tid 3556074] (70014)End of file found: [client 216.73.216.199:45932] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:45.066328 2026] [authz_core:error] [pid 3550192:tid 3550192] [client 66.249.66.35:60466] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:49:45.069019 2026] [authz_core:error] [pid 3550192:tid 3550192] [client 66.249.66.35:60466] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:49:46.790494 2026] [ssl:error] [pid 3556147:tid 3556147] (EAI 2)Name or service not known: [client 144.76.19.72:35030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:46.790526 2026] [ssl:error] [pid 3556147:tid 3556147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:46.852884 2026] [ssl:error] [pid 3555885:tid 3555885] (EAI 2)Name or service not known: [client 144.76.19.72:35040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:46.852913 2026] [ssl:error] [pid 3555885:tid 3555885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:47.242179 2026] [ssl:error] [pid 3546014:tid 3546014] (70014)End of file found: [client 216.73.216.199:9485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:48.570389 2026] [ssl:error] [pid 3556147:tid 3556147] (70014)End of file found: [client 216.73.216.199:39643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:48.773195 2026] [authz_core:error] [pid 3542492:tid 3542492] [client 77.68.84.233:55565] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:49:49.911791 2026] [ssl:error] [pid 3550299:tid 3550299] (EAI 2)Name or service not known: [client 144.76.19.72:60766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:49.911822 2026] [ssl:error] [pid 3550299:tid 3550299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:49.965519 2026] [ssl:error] [pid 3553877:tid 3553877] (70014)End of file found: [client 216.73.216.199:33088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:49.969047 2026] [ssl:error] [pid 3555057:tid 3555057] (EAI 2)Name or service not known: [client 144.76.19.72:60780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:49.969082 2026] [ssl:error] [pid 3555057:tid 3555057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:51.106264 2026] [security2:error] [pid 3550192:tid 3550192] [client 85.208.96.200:21058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/calvary-chapel-chino-hills-staff"] [unique_id "amtWf7pPInOfe-I38HV5UgAAAAc"]
[Thu Jul 30 14:49:53.024533 2026] [ssl:error] [pid 3553617:tid 3553617] (EAI 2)Name or service not known: [client 144.76.19.72:60788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:53.024569 2026] [ssl:error] [pid 3553617:tid 3553617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:53.082295 2026] [ssl:error] [pid 3551783:tid 3551783] (EAI 2)Name or service not known: [client 144.76.19.72:60800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:53.082324 2026] [ssl:error] [pid 3551783:tid 3551783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:53.392165 2026] [ssl:error] [pid 3550299:tid 3550299] (70014)End of file found: [client 216.73.216.199:65189] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:53.988499 2026] [ssl:error] [pid 3551783:tid 3551783] (70014)End of file found: [client 216.73.216.199:45941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:54.284278 2026] [core:crit] [pid 3553617:tid 3553617] (13)Permission denied: [client 52.167.144.233:48997] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:49:56.139005 2026] [ssl:error] [pid 3553642:tid 3553642] (EAI 2)Name or service not known: [client 144.76.19.72:60812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:56.139039 2026] [ssl:error] [pid 3553642:tid 3553642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:56.194810 2026] [ssl:error] [pid 3553877:tid 3553877] (EAI 2)Name or service not known: [client 144.76.19.72:60826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:56.194849 2026] [ssl:error] [pid 3553877:tid 3553877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:57.004104 2026] [ssl:error] [pid 3555099:tid 3555099] (70014)End of file found: [client 216.73.216.199:14679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:58.695035 2026] [ssl:error] [pid 3551141:tid 3551141] (70014)End of file found: [client 216.73.216.199:42146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:49:59.158201 2026] [core:crit] [pid 3549195:tid 3549195] (13)Permission denied: [client 52.167.144.161:60868] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 14:49:59.251916 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:60838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:59.251940 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:59.308170 2026] [core:error] [pid 3546014:tid 3546014] (13)Permission denied: [client 216.73.216.199:46433] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/cache_dma
[Thu Jul 30 14:49:59.309008 2026] [ssl:error] [pid 3555098:tid 3555098] (EAI 2)Name or service not known: [client 144.76.19.72:60852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:49:59.309043 2026] [ssl:error] [pid 3555098:tid 3555098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:49:59.412957 2026] [core:error] [pid 3546014:tid 3546014] (13)Permission denied: [client 216.73.216.199:46433] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-160/alloc_calls
[Thu Jul 30 14:50:02.123079 2026] [ssl:error] [pid 3546014:tid 3546014] (70014)End of file found: [client 216.73.216.199:46433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:02.283261 2026] [security2:error] [pid 3551053:tid 3551053] [client 185.93.89.167:61805] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/.env"] [unique_id "amtWisiqPDxuCITSiTn1FgAAAAY"]
[Thu Jul 30 14:50:02.283463 2026] [security2:error] [pid 3551053:tid 3551053] [client 185.93.89.167:61805] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/.env"] [unique_id "amtWisiqPDxuCITSiTn1FgAAAAY"]
[Thu Jul 30 14:50:02.380783 2026] [ssl:error] [pid 3549919:tid 3549919] (EAI 2)Name or service not known: [client 144.76.19.72:30370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:02.380828 2026] [ssl:error] [pid 3549919:tid 3549919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:02.437166 2026] [ssl:error] [pid 3553617:tid 3553617] (EAI 2)Name or service not known: [client 144.76.19.72:30382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:02.437195 2026] [ssl:error] [pid 3553617:tid 3553617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:02.602835 2026] [core:error] [pid 3528324:tid 3528324] (13)Permission denied: [client 216.73.216.199:52647] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/email_send_limits
[Thu Jul 30 14:50:02.944351 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/.env"] [unique_id "amtWiv-5P80ROAqkAnOhyAAAACc"]
[Thu Jul 30 14:50:02.944563 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/.env"] [unique_id "amtWiv-5P80ROAqkAnOhyAAAACc"]
[Thu Jul 30 14:50:03.098992 2026] [authz_core:error] [pid 3555886:tid 3555886] [client 66.249.66.35:53125] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:50:03.101658 2026] [authz_core:error] [pid 3555886:tid 3555886] [client 66.249.66.35:53125] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:50:03.383315 2026] [core:crit] [pid 3528324:tid 3528324] (13)Permission denied: [client 216.73.216.199:52647] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/doc/ai-bolit/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/doc/ai-bolit/' is executable
[Thu Jul 30 14:50:03.523984 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWiv-5P80ROAqkAnOhyAAAACc"]
[Thu Jul 30 14:50:03.545404 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/api/.env"] [unique_id "amtWi_-5P80ROAqkAnOhyQAAACc"]
[Thu Jul 30 14:50:03.545609 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/api/.env"] [unique_id "amtWi_-5P80ROAqkAnOhyQAAACc"]
[Thu Jul 30 14:50:04.198627 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWi_-5P80ROAqkAnOhyQAAACc"]
[Thu Jul 30 14:50:04.220226 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/backend/.env"] [unique_id "amtWjP-5P80ROAqkAnOhygAAACc"]
[Thu Jul 30 14:50:04.220447 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/backend/.env"] [unique_id "amtWjP-5P80ROAqkAnOhygAAACc"]
[Thu Jul 30 14:50:04.363362 2026] [security2:error] [pid 3551053:tid 3551053] [client 185.93.89.167:61805] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWisiqPDxuCITSiTn1FgAAAAY"]
[Thu Jul 30 14:50:04.385190 2026] [security2:error] [pid 3551053:tid 3551053] [client 185.93.89.167:14899] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/api/.env"] [unique_id "amtWjMiqPDxuCITSiTn1FwAAAAY"]
[Thu Jul 30 14:50:04.385398 2026] [security2:error] [pid 3551053:tid 3551053] [client 185.93.89.167:14899] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/api/.env"] [unique_id "amtWjMiqPDxuCITSiTn1FwAAAAY"]
[Thu Jul 30 14:50:04.546467 2026] [security2:error] [pid 3556916:tid 3556916] [client 4.201.104.113:3233] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/wp-config.php"] [unique_id "amtWjP94Cl4hQxJ5ES8TYgAAADE"]
[Thu Jul 30 14:50:04.546720 2026] [security2:error] [pid 3556916:tid 3556916] [client 4.201.104.113:3233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/wp-config.php"] [unique_id "amtWjP94Cl4hQxJ5ES8TYgAAADE"]
[Thu Jul 30 14:50:04.553540 2026] [security2:error] [pid 3556916:tid 3556916] [client 4.201.104.113:3233] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "woodsandgreenfurniture.co.uk"] [uri "/index.php"] [unique_id "amtWjP94Cl4hQxJ5ES8TYgAAADE"]
[Thu Jul 30 14:50:04.994607 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWjP-5P80ROAqkAnOhygAAACc"]
[Thu Jul 30 14:50:05.555843 2026] [ssl:error] [pid 3556975:tid 3556975] (EAI 2)Name or service not known: [client 144.76.19.72:30384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:05.555889 2026] [ssl:error] [pid 3556975:tid 3556975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:05.647553 2026] [ssl:error] [pid 3555101:tid 3555101] (EAI 2)Name or service not known: [client 144.76.19.72:30396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:05.647578 2026] [ssl:error] [pid 3555101:tid 3555101] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:06.023928 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/admin/.env"] [unique_id "amtWjv-5P80ROAqkAnOhzAAAACc"]
[Thu Jul 30 14:50:06.024145 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/admin/.env"] [unique_id "amtWjv-5P80ROAqkAnOhzAAAACc"]
[Thu Jul 30 14:50:06.609314 2026] [security2:error] [pid 3551053:tid 3551053] [client 185.93.89.167:14899] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWjMiqPDxuCITSiTn1FwAAAAY"]
[Thu Jul 30 14:50:06.696216 2026] [access_compat:error] [pid 3553242:tid 3553242] [client 45.158.164.139:57670] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:50:06.727477 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWjv-5P80ROAqkAnOhzAAAACc"]
[Thu Jul 30 14:50:07.109659 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/laravel/.env"] [unique_id "amtWj_-5P80ROAqkAnOhzgAAACc"]
[Thu Jul 30 14:50:07.109837 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/laravel/.env"] [unique_id "amtWj_-5P80ROAqkAnOhzgAAACc"]
[Thu Jul 30 14:50:07.441322 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWj_-5P80ROAqkAnOhzgAAACc"]
[Thu Jul 30 14:50:07.462796 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/core/.env"] [unique_id "amtWj_-5P80ROAqkAnOhzwAAACc"]
[Thu Jul 30 14:50:07.462970 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/core/.env"] [unique_id "amtWj_-5P80ROAqkAnOhzwAAACc"]
[Thu Jul 30 14:50:07.535415 2026] [ssl:error] [pid 3528324:tid 3528324] (70014)End of file found: [client 216.73.216.199:52647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:07.794909 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWj_-5P80ROAqkAnOhzwAAACc"]
[Thu Jul 30 14:50:08.157770 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/.env.example"] [unique_id "amtWkP-5P80ROAqkAnOh0QAAACc"]
[Thu Jul 30 14:50:08.157955 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/.env.example"] [unique_id "amtWkP-5P80ROAqkAnOh0QAAACc"]
[Thu Jul 30 14:50:08.448457 2026] [ssl:error] [pid 3551141:tid 3551141] (70014)End of file found: [client 216.73.216.199:39403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:08.475809 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWkP-5P80ROAqkAnOh0QAAACc"]
[Thu Jul 30 14:50:08.497290 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/app/.env"] [unique_id "amtWkP-5P80ROAqkAnOh0gAAACc"]
[Thu Jul 30 14:50:08.497498 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/app/.env"] [unique_id "amtWkP-5P80ROAqkAnOh0gAAACc"]
[Thu Jul 30 14:50:08.702218 2026] [ssl:error] [pid 3554581:tid 3554581] (EAI 2)Name or service not known: [client 144.76.19.72:30400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:08.702257 2026] [ssl:error] [pid 3554581:tid 3554581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:08.755150 2026] [ssl:error] [pid 3555886:tid 3555886] (EAI 2)Name or service not known: [client 144.76.19.72:30416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:08.755183 2026] [ssl:error] [pid 3555886:tid 3555886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:08.813284 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWkP-5P80ROAqkAnOh0gAAACc"]
[Thu Jul 30 14:50:08.834890 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/dev/.env"] [unique_id "amtWkP-5P80ROAqkAnOh0wAAACc"]
[Thu Jul 30 14:50:08.835108 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/dev/.env"] [unique_id "amtWkP-5P80ROAqkAnOh0wAAACc"]
[Thu Jul 30 14:50:09.156142 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWkP-5P80ROAqkAnOh0wAAACc"]
[Thu Jul 30 14:50:09.357009 2026] [ssl:error] [pid 3553689:tid 3553689] (70014)End of file found: [client 216.73.216.199:22756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:09.512992 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/server/.env"] [unique_id "amtWkf-5P80ROAqkAnOh1QAAACc"]
[Thu Jul 30 14:50:09.513210 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/server/.env"] [unique_id "amtWkf-5P80ROAqkAnOh1QAAACc"]
[Thu Jul 30 14:50:09.835723 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWkf-5P80ROAqkAnOh1QAAACc"]
[Thu Jul 30 14:50:09.857392 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/.env.save"] [unique_id "amtWkf-5P80ROAqkAnOh1gAAACc"]
[Thu Jul 30 14:50:09.857607 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/.env.save"] [unique_id "amtWkf-5P80ROAqkAnOh1gAAACc"]
[Thu Jul 30 14:50:10.176354 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWkf-5P80ROAqkAnOh1gAAACc"]
[Thu Jul 30 14:50:10.544941 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/staging/.env"] [unique_id "amtWkv-5P80ROAqkAnOh2AAAACc"]
[Thu Jul 30 14:50:10.545163 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/staging/.env"] [unique_id "amtWkv-5P80ROAqkAnOh2AAAACc"]
[Thu Jul 30 14:50:10.855972 2026] [security2:error] [pid 3555099:tid 3555099] [client 185.93.89.167:12565] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtWkv-5P80ROAqkAnOh2AAAACc"]
[Thu Jul 30 14:50:11.568244 2026] [security2:error] [pid 3551786:tid 3551786] [client 94.154.43.229:47706] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.projectworkspace.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtWk1wl1lJGr4zvESfP6wAAAD4"]
[Thu Jul 30 14:50:11.568395 2026] [security2:error] [pid 3551786:tid 3551786] [client 94.154.43.229:47706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.projectworkspace.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtWk1wl1lJGr4zvESfP6wAAAD4"]
[Thu Jul 30 14:50:11.568606 2026] [security2:error] [pid 3551786:tid 3551786] [client 94.154.43.229:47706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.projectworkspace.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amtWk1wl1lJGr4zvESfP6wAAAD4"]
[Thu Jul 30 14:50:11.807288 2026] [ssl:error] [pid 3555886:tid 3555886] (EAI 2)Name or service not known: [client 144.76.19.72:58952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:11.807322 2026] [ssl:error] [pid 3555886:tid 3555886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:11.858676 2026] [ssl:error] [pid 3554581:tid 3554581] (EAI 2)Name or service not known: [client 144.76.19.72:58966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:11.858710 2026] [ssl:error] [pid 3554581:tid 3554581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:12.882361 2026] [core:error] [pid 3537597:tid 3537597] (13)Permission denied: [client 216.73.216.199:54930] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/cpu/devices/cpu4/driver/bind
[Thu Jul 30 14:50:13.291216 2026] [core:error] [pid 3537597:tid 3537597] (13)Permission denied: [client 216.73.216.199:54930] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/physical_node/rom
[Thu Jul 30 14:50:13.591357 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:54930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:14.090975 2026] [ssl:error] [pid 3557078:tid 3557078] (70014)End of file found: [client 216.73.216.199:64303] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:14.912009 2026] [ssl:error] [pid 3548331:tid 3548331] (EAI 2)Name or service not known: [client 144.76.19.72:58970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:14.912036 2026] [ssl:error] [pid 3548331:tid 3548331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:14.967998 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:58978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:14.968033 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:15.705772 2026] [ssl:error] [pid 3554521:tid 3554521] (70014)End of file found: [client 216.73.216.199:41271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:16.739541 2026] [ssl:error] [pid 3553207:tid 3553207] (70014)End of file found: [client 216.73.216.199:61985] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:17.064633 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:40930] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtWmXAit8u-fG1E0FJwiwAAABk"]
[Thu Jul 30 14:50:17.064847 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:40930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtWmXAit8u-fG1E0FJwiwAAABk"]
[Thu Jul 30 14:50:17.065033 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:40930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmXAit8u-fG1E0FJwiwAAABk"]
[Thu Jul 30 14:50:17.342099 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:40964] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtWmXAit8u-fG1E0FJwjAAAABk"]
[Thu Jul 30 14:50:17.342296 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtWmXAit8u-fG1E0FJwjAAAABk"]
[Thu Jul 30 14:50:17.342496 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmXAit8u-fG1E0FJwjAAAABk"]
[Thu Jul 30 14:50:17.465488 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:40980] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtWmWTCF2wwsajESsVHtgAAADA"]
[Thu Jul 30 14:50:17.465749 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:40980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtWmWTCF2wwsajESsVHtgAAADA"]
[Thu Jul 30 14:50:17.465990 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:40980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmWTCF2wwsajESsVHtgAAADA"]
[Thu Jul 30 14:50:17.649703 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:41010] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtWmXAit8u-fG1E0FJwjQAAABk"]
[Thu Jul 30 14:50:17.649868 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:41010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtWmXAit8u-fG1E0FJwjQAAABk"]
[Thu Jul 30 14:50:17.650059 2026] [security2:error] [pid 3528324:tid 3528324] [client 34.23.170.140:41010] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmXAit8u-fG1E0FJwjQAAABk"]
[Thu Jul 30 14:50:17.829241 2026] [security2:error] [pid 3546536:tid 3546536] [client 34.23.170.140:41052] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtWmTisUBKeN4fmJtUw9gAAAAU"]
[Thu Jul 30 14:50:17.829397 2026] [security2:error] [pid 3546536:tid 3546536] [client 34.23.170.140:41052] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtWmTisUBKeN4fmJtUw9gAAAAU"]
[Thu Jul 30 14:50:17.829596 2026] [security2:error] [pid 3546536:tid 3546536] [client 34.23.170.140:41052] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmTisUBKeN4fmJtUw9gAAAAU"]
[Thu Jul 30 14:50:17.866256 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 84.75.155.2:41536] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/fake-one-pound-coins-part-three
[Thu Jul 30 14:50:17.866347 2026] [access_compat:error] [pid 3528324:tid 3528324] [client 84.75.155.2:41536] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:50:17.951839 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41086] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtWmeOrYNhJ6H-cPnwC8QAAAA8"]
[Thu Jul 30 14:50:17.951999 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtWmeOrYNhJ6H-cPnwC8QAAAA8"]
[Thu Jul 30 14:50:17.952205 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmeOrYNhJ6H-cPnwC8QAAAA8"]
[Thu Jul 30 14:50:17.955297 2026] [ssl:error] [pid 3553689:tid 3553689] (70014)End of file found: [client 216.73.216.199:63695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:18.024867 2026] [ssl:error] [pid 3553242:tid 3553242] (EAI 2)Name or service not known: [client 144.76.19.72:58988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:18.024895 2026] [ssl:error] [pid 3553242:tid 3553242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:18.057591 2026] [security2:error] [pid 3555099:tid 3555099] [client 34.23.170.140:41108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtWmv-5P80ROAqkAnOh3QAAACc"]
[Thu Jul 30 14:50:18.057774 2026] [security2:error] [pid 3555099:tid 3555099] [client 34.23.170.140:41108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtWmv-5P80ROAqkAnOh3QAAACc"]
[Thu Jul 30 14:50:18.057974 2026] [security2:error] [pid 3555099:tid 3555099] [client 34.23.170.140:41108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmv-5P80ROAqkAnOh3QAAACc"]
[Thu Jul 30 14:50:18.081981 2026] [ssl:error] [pid 3546536:tid 3546536] (EAI 2)Name or service not known: [client 144.76.19.72:58996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:18.082002 2026] [ssl:error] [pid 3546536:tid 3546536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:18.126372 2026] [security2:error] [pid 3548331:tid 3548331] [client 34.23.170.140:41136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtWmnLtHPq2oTbc8eUVpAAAABI"]
[Thu Jul 30 14:50:18.126564 2026] [security2:error] [pid 3548331:tid 3548331] [client 34.23.170.140:41136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtWmnLtHPq2oTbc8eUVpAAAABI"]
[Thu Jul 30 14:50:18.126759 2026] [security2:error] [pid 3548331:tid 3548331] [client 34.23.170.140:41136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmnLtHPq2oTbc8eUVpAAAABI"]
[Thu Jul 30 14:50:18.221121 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41160] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtWmuOrYNhJ6H-cPnwC8gAAAA8"]
[Thu Jul 30 14:50:18.221301 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtWmuOrYNhJ6H-cPnwC8gAAAA8"]
[Thu Jul 30 14:50:18.221498 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmuOrYNhJ6H-cPnwC8gAAAA8"]
[Thu Jul 30 14:50:18.361129 2026] [security2:error] [pid 3538830:tid 3538830] [client 34.23.170.140:41180] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtWmuPaLCninWVTBMHdtAAAAAA"]
[Thu Jul 30 14:50:18.361295 2026] [security2:error] [pid 3538830:tid 3538830] [client 34.23.170.140:41180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtWmuPaLCninWVTBMHdtAAAAAA"]
[Thu Jul 30 14:50:18.361503 2026] [security2:error] [pid 3538830:tid 3538830] [client 34.23.170.140:41180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmuPaLCninWVTBMHdtAAAAAA"]
[Thu Jul 30 14:50:18.415369 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:41184] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtWmmTCF2wwsajESsVHuQAAADA"]
[Thu Jul 30 14:50:18.415626 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:41184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtWmmTCF2wwsajESsVHuQAAADA"]
[Thu Jul 30 14:50:18.415853 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:41184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmmTCF2wwsajESsVHuQAAADA"]
[Thu Jul 30 14:50:18.436954 2026] [ssl:error] [pid 3555099:tid 3555099] (70014)End of file found: [client 216.73.216.199:26214] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:18.506853 2026] [authz_core:error] [pid 3555101:tid 3555101] [client 66.249.66.33:62872] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:50:18.509598 2026] [authz_core:error] [pid 3555101:tid 3555101] [client 66.249.66.33:62872] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:50:18.534040 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41204] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtWmuOrYNhJ6H-cPnwC8wAAAA8"]
[Thu Jul 30 14:50:18.534220 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtWmuOrYNhJ6H-cPnwC8wAAAA8"]
[Thu Jul 30 14:50:18.534406 2026] [security2:error] [pid 3553642:tid 3553642] [client 34.23.170.140:41204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmuOrYNhJ6H-cPnwC8wAAAA8"]
[Thu Jul 30 14:50:18.644968 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:41228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtWmoEyfqWYH2M3hzkZLQAAAAQ"]
[Thu Jul 30 14:50:18.645132 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:41228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtWmoEyfqWYH2M3hzkZLQAAAAQ"]
[Thu Jul 30 14:50:18.645335 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:41228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmoEyfqWYH2M3hzkZLQAAAAQ"]
[Thu Jul 30 14:50:18.705123 2026] [security2:error] [pid 3538830:tid 3538830] [client 34.23.170.140:41242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtWmuPaLCninWVTBMHdtQAAAAA"]
[Thu Jul 30 14:50:18.705309 2026] [security2:error] [pid 3538830:tid 3538830] [client 34.23.170.140:41242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtWmuPaLCninWVTBMHdtQAAAAA"]
[Thu Jul 30 14:50:18.705515 2026] [security2:error] [pid 3538830:tid 3538830] [client 34.23.170.140:41242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWmuPaLCninWVTBMHdtQAAAAA"]
[Thu Jul 30 14:50:19.321129 2026] [security2:error] [pid 3548331:tid 3548331] [client 43.166.161.35:58555] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWm3LtHPq2oTbc8eUVqAAAABI"]
[Thu Jul 30 14:50:19.321180 2026] [security2:error] [pid 3548331:tid 3548331] [client 43.166.161.35:58555] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWm3LtHPq2oTbc8eUVqAAAABI"]
[Thu Jul 30 14:50:19.321440 2026] [security2:error] [pid 3548331:tid 3548331] [client 43.166.161.35:58555] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWm3LtHPq2oTbc8eUVqAAAABI"]
[Thu Jul 30 14:50:19.378734 2026] [security2:error] [pid 3557583:tid 3557583] [client 185.191.171.18:43052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtWm4EyfqWYH2M3hzkZLwAAAAQ"]
[Thu Jul 30 14:50:19.685893 2026] [security2:error] [pid 3555886:tid 3555886] [client 34.23.170.140:41418] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtWm8sv7CEJd56iO35RDwAAAC0"]
[Thu Jul 30 14:50:19.686139 2026] [security2:error] [pid 3555886:tid 3555886] [client 34.23.170.140:41418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtWm8sv7CEJd56iO35RDwAAAC0"]
[Thu Jul 30 14:50:19.686338 2026] [security2:error] [pid 3555886:tid 3555886] [client 34.23.170.140:41418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWm8sv7CEJd56iO35RDwAAAC0"]
[Thu Jul 30 14:50:19.870776 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:41448] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtWm2TCF2wwsajESsVHvAAAADA"]
[Thu Jul 30 14:50:19.871117 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:41448] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtWm2TCF2wwsajESsVHvAAAADA"]
[Thu Jul 30 14:50:19.871351 2026] [security2:error] [pid 3549195:tid 3549195] [client 34.23.170.140:41448] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWm2TCF2wwsajESsVHvAAAADA"]
[Thu Jul 30 14:50:20.438486 2026] [security2:error] [pid 3556974:tid 3556974] [client 34.23.170.140:41524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtWnB1Wtm_QeuwkmeJU6wAAADQ"]
[Thu Jul 30 14:50:20.438674 2026] [security2:error] [pid 3556974:tid 3556974] [client 34.23.170.140:41524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtWnB1Wtm_QeuwkmeJU6wAAADQ"]
[Thu Jul 30 14:50:20.438881 2026] [security2:error] [pid 3556974:tid 3556974] [client 34.23.170.140:41524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnB1Wtm_QeuwkmeJU6wAAADQ"]
[Thu Jul 30 14:50:20.610084 2026] [security2:error] [pid 3545431:tid 3545431] [client 185.191.171.10:13204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/pages/gallery/days-i-to-x/day-ix.php"] [unique_id "amtWnOa-Sl1aSr0GrpCofQAAABw"]
[Thu Jul 30 14:50:20.756517 2026] [security2:error] [pid 3549919:tid 3549919] [client 34.23.170.140:58916] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtWnDff-z734_jG5etyMAAAAAg"]
[Thu Jul 30 14:50:20.756661 2026] [security2:error] [pid 3549919:tid 3549919] [client 34.23.170.140:58916] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtWnDff-z734_jG5etyMAAAAAg"]
[Thu Jul 30 14:50:20.756828 2026] [security2:error] [pid 3549919:tid 3549919] [client 34.23.170.140:58916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtWnDff-z734_jG5etyMAAAAAg"]
[Thu Jul 30 14:50:20.757029 2026] [security2:error] [pid 3549919:tid 3549919] [client 34.23.170.140:58916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnDff-z734_jG5etyMAAAAAg"]
[Thu Jul 30 14:50:20.773732 2026] [security2:error] [pid 3549195:tid 3549195] [client 105.188.34.204:57065] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWnGTCF2wwsajESsVHvwAAADA"]
[Thu Jul 30 14:50:20.773780 2026] [security2:error] [pid 3549195:tid 3549195] [client 105.188.34.204:57065] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWnGTCF2wwsajESsVHvwAAADA"]
[Thu Jul 30 14:50:20.774269 2026] [security2:error] [pid 3549195:tid 3549195] [client 105.188.34.204:57065] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWnGTCF2wwsajESsVHvwAAADA"]
[Thu Jul 30 14:50:21.150238 2026] [ssl:error] [pid 3554521:tid 3554521] (EAI 2)Name or service not known: [client 144.76.19.72:34652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:21.150271 2026] [ssl:error] [pid 3554521:tid 3554521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:21.189305 2026] [security2:error] [pid 3556074:tid 3556074] [client 34.23.170.140:58982] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtWnTzj5ma4VEtQqeduswAAAC4"]
[Thu Jul 30 14:50:21.189596 2026] [security2:error] [pid 3556074:tid 3556074] [client 34.23.170.140:58982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtWnTzj5ma4VEtQqeduswAAAC4"]
[Thu Jul 30 14:50:21.189899 2026] [security2:error] [pid 3556074:tid 3556074] [client 34.23.170.140:58982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnTzj5ma4VEtQqeduswAAAC4"]
[Thu Jul 30 14:50:21.225014 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:34668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:21.225040 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:21.339970 2026] [security2:error] [pid 3548331:tid 3548331] [client 34.23.170.140:59014] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtWnXLtHPq2oTbc8eUVrgAAABI"]
[Thu Jul 30 14:50:21.340256 2026] [security2:error] [pid 3548331:tid 3548331] [client 34.23.170.140:59014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtWnXLtHPq2oTbc8eUVrgAAABI"]
[Thu Jul 30 14:50:21.340460 2026] [security2:error] [pid 3548331:tid 3548331] [client 34.23.170.140:59014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnXLtHPq2oTbc8eUVrgAAABI"]
[Thu Jul 30 14:50:21.537008 2026] [authz_core:error] [pid 3556074:tid 3556074] [client 34.23.170.140:59048] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 14:50:21.629804 2026] [security2:error] [pid 3553242:tid 3553242] [client 34.23.170.140:59060] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtWnesyryUScKSe7HMJ4gAAABo"]
[Thu Jul 30 14:50:21.629980 2026] [security2:error] [pid 3553242:tid 3553242] [client 34.23.170.140:59060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtWnesyryUScKSe7HMJ4gAAABo"]
[Thu Jul 30 14:50:21.630180 2026] [security2:error] [pid 3553242:tid 3553242] [client 34.23.170.140:59060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnesyryUScKSe7HMJ4gAAABo"]
[Thu Jul 30 14:50:22.154938 2026] [authz_core:error] [pid 3553207:tid 3553207] [client 66.249.66.33:40332] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:50:22.157618 2026] [authz_core:error] [pid 3553207:tid 3553207] [client 66.249.66.33:40332] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:50:22.440571 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtWniT1BEBJCLh2LKQHEQAAADM"]
[Thu Jul 30 14:50:22.440761 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtWniT1BEBJCLh2LKQHEQAAADM"]
[Thu Jul 30 14:50:22.440974 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWniT1BEBJCLh2LKQHEQAAADM"]
[Thu Jul 30 14:50:22.491217 2026] [ssl:error] [pid 3545431:tid 3545431] (70014)End of file found: [client 216.73.216.199:29934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:22.588084 2026] [security2:error] [pid 3557078:tid 3557078] [client 34.23.170.140:59268] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtWngAR3BNnuwFzU9CttAAAADY"]
[Thu Jul 30 14:50:22.588254 2026] [security2:error] [pid 3557078:tid 3557078] [client 34.23.170.140:59268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtWngAR3BNnuwFzU9CttAAAADY"]
[Thu Jul 30 14:50:22.588469 2026] [security2:error] [pid 3557078:tid 3557078] [client 34.23.170.140:59268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWngAR3BNnuwFzU9CttAAAADY"]
[Thu Jul 30 14:50:22.665255 2026] [security2:error] [pid 3551141:tid 3551141] [client 34.23.170.140:59280] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtWnmzjQ8GTob4CbE_J5gAAADo"]
[Thu Jul 30 14:50:22.665436 2026] [security2:error] [pid 3551141:tid 3551141] [client 34.23.170.140:59280] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtWnmzjQ8GTob4CbE_J5gAAADo"]
[Thu Jul 30 14:50:22.665630 2026] [security2:error] [pid 3551141:tid 3551141] [client 34.23.170.140:59280] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnmzjQ8GTob4CbE_J5gAAADo"]
[Thu Jul 30 14:50:22.753249 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59294] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtWnv-G4TlbThTYvHhwwQAAADU"]
[Thu Jul 30 14:50:22.753439 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtWnv-G4TlbThTYvHhwwQAAADU"]
[Thu Jul 30 14:50:22.753631 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnv-G4TlbThTYvHhwwQAAADU"]
[Thu Jul 30 14:50:23.075645 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59356] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtWnyT1BEBJCLh2LKQHFAAAADM"]
[Thu Jul 30 14:50:23.075834 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59356] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtWnyT1BEBJCLh2LKQHFAAAADM"]
[Thu Jul 30 14:50:23.076024 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59356] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnyT1BEBJCLh2LKQHFAAAADM"]
[Thu Jul 30 14:50:23.192078 2026] [security2:error] [pid 3553689:tid 3553689] [client 34.23.170.140:59372] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtWn3F9hUfT0bOhdk5o1wAAAB4"]
[Thu Jul 30 14:50:23.192230 2026] [security2:error] [pid 3553689:tid 3553689] [client 34.23.170.140:59372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtWn3F9hUfT0bOhdk5o1wAAAB4"]
[Thu Jul 30 14:50:23.192434 2026] [security2:error] [pid 3553689:tid 3553689] [client 34.23.170.140:59372] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWn3F9hUfT0bOhdk5o1wAAAB4"]
[Thu Jul 30 14:50:23.261170 2026] [security2:error] [pid 3551141:tid 3551141] [client 34.23.170.140:59400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtWn2zjQ8GTob4CbE_J6QAAADo"]
[Thu Jul 30 14:50:23.261365 2026] [security2:error] [pid 3551141:tid 3551141] [client 34.23.170.140:59400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtWn2zjQ8GTob4CbE_J6QAAADo"]
[Thu Jul 30 14:50:23.261588 2026] [security2:error] [pid 3551141:tid 3551141] [client 34.23.170.140:59400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWn2zjQ8GTob4CbE_J6QAAADo"]
[Thu Jul 30 14:50:23.299946 2026] [ssl:error] [pid 3556074:tid 3556074] (70014)End of file found: [client 216.73.216.199:62296] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:23.300328 2026] [security2:error] [pid 3537339:tid 3537339] [client 34.23.170.140:59406] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtWnzngrup0JXDN3RSj4QAAAAE"]
[Thu Jul 30 14:50:23.300471 2026] [security2:error] [pid 3537339:tid 3537339] [client 34.23.170.140:59406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtWnzngrup0JXDN3RSj4QAAAAE"]
[Thu Jul 30 14:50:23.300655 2026] [security2:error] [pid 3537339:tid 3537339] [client 34.23.170.140:59406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnzngrup0JXDN3RSj4QAAAAE"]
[Thu Jul 30 14:50:23.590817 2026] [security2:error] [pid 3537339:tid 3537339] [client 34.23.170.140:59460] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtWnzngrup0JXDN3RSj4gAAAAE"]
[Thu Jul 30 14:50:23.591116 2026] [security2:error] [pid 3537339:tid 3537339] [client 34.23.170.140:59460] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtWnzngrup0JXDN3RSj4gAAAAE"]
[Thu Jul 30 14:50:23.591364 2026] [security2:error] [pid 3537339:tid 3537339] [client 34.23.170.140:59460] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWnzngrup0JXDN3RSj4gAAAAE"]
[Thu Jul 30 14:50:23.780636 2026] [security2:error] [pid 3555101:tid 3555101] [client 34.23.170.140:59480] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtWn56NmA4neewLrTs-mAAAACw"]
[Thu Jul 30 14:50:23.780829 2026] [security2:error] [pid 3555101:tid 3555101] [client 34.23.170.140:59480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtWn56NmA4neewLrTs-mAAAACw"]
[Thu Jul 30 14:50:23.781042 2026] [security2:error] [pid 3555101:tid 3555101] [client 34.23.170.140:59480] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWn56NmA4neewLrTs-mAAAACw"]
[Thu Jul 30 14:50:23.895766 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:1336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:23.997975 2026] [security2:error] [pid 3556915:tid 3556915] [client 34.23.170.140:59512] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtWn1Okf8q5ouKmFGUv5gAAAC8"]
[Thu Jul 30 14:50:23.998169 2026] [security2:error] [pid 3556915:tid 3556915] [client 34.23.170.140:59512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtWn1Okf8q5ouKmFGUv5gAAAC8"]
[Thu Jul 30 14:50:23.998371 2026] [security2:error] [pid 3556915:tid 3556915] [client 34.23.170.140:59512] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWn1Okf8q5ouKmFGUv5gAAAC8"]
[Thu Jul 30 14:50:24.282518 2026] [ssl:error] [pid 3558002:tid 3558002] (EAI 2)Name or service not known: [client 144.76.19.72:34678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:24.282547 2026] [ssl:error] [pid 3558002:tid 3558002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:24.293679 2026] [security2:error] [pid 3558001:tid 3558001] [client 78.182.148.222:10424] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWoExe5YTu01L9GWVgWAAAABA"]
[Thu Jul 30 14:50:24.293736 2026] [security2:error] [pid 3558001:tid 3558001] [client 78.182.148.222:10424] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtWoExe5YTu01L9GWVgWAAAABA"]
[Thu Jul 30 14:50:24.294023 2026] [security2:error] [pid 3558001:tid 3558001] [client 78.182.148.222:10424] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtWoExe5YTu01L9GWVgWAAAABA"]
[Thu Jul 30 14:50:24.339640 2026] [ssl:error] [pid 3557967:tid 3557967] (EAI 2)Name or service not known: [client 144.76.19.72:34686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:24.339675 2026] [ssl:error] [pid 3557967:tid 3557967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:24.962816 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59700] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtWoJsCW4wpVCpzdhsFTQAAAB0"]
[Thu Jul 30 14:50:24.963125 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtWoJsCW4wpVCpzdhsFTQAAAB0"]
[Thu Jul 30 14:50:24.963426 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoJsCW4wpVCpzdhsFTQAAAB0"]
[Thu Jul 30 14:50:25.002127 2026] [security2:error] [pid 3558040:tid 3558040] [client 34.23.170.140:59712] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtWoarU7CkT_St2841gDwAAADg"]
[Thu Jul 30 14:50:25.002371 2026] [security2:error] [pid 3558040:tid 3558040] [client 34.23.170.140:59712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtWoarU7CkT_St2841gDwAAADg"]
[Thu Jul 30 14:50:25.002649 2026] [security2:error] [pid 3558040:tid 3558040] [client 34.23.170.140:59712] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoarU7CkT_St2841gDwAAADg"]
[Thu Jul 30 14:50:25.178244 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59734] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtWof-G4TlbThTYvHhwxgAAADU"]
[Thu Jul 30 14:50:25.178590 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtWof-G4TlbThTYvHhwxgAAADU"]
[Thu Jul 30 14:50:25.178826 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWof-G4TlbThTYvHhwxgAAADU"]
[Thu Jul 30 14:50:25.267458 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtWoST1BEBJCLh2LKQHGwAAADM"]
[Thu Jul 30 14:50:25.267644 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtWoST1BEBJCLh2LKQHGwAAADM"]
[Thu Jul 30 14:50:25.267837 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoST1BEBJCLh2LKQHGwAAADM"]
[Thu Jul 30 14:50:25.309662 2026] [security2:error] [pid 3555011:tid 3555011] [client 34.23.170.140:59762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtWoSpV0tThV0trhoqZoQAAABg"]
[Thu Jul 30 14:50:25.309843 2026] [security2:error] [pid 3555011:tid 3555011] [client 34.23.170.140:59762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtWoSpV0tThV0trhoqZoQAAABg"]
[Thu Jul 30 14:50:25.310042 2026] [security2:error] [pid 3555011:tid 3555011] [client 34.23.170.140:59762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoSpV0tThV0trhoqZoQAAABg"]
[Thu Jul 30 14:50:25.326483 2026] [security2:error] [pid 3555057:tid 3555057] [client 34.23.170.140:59772] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtWoUVFKhdCAKEEfbCF2QAAACI"]
[Thu Jul 30 14:50:25.326685 2026] [security2:error] [pid 3555057:tid 3555057] [client 34.23.170.140:59772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtWoUVFKhdCAKEEfbCF2QAAACI"]
[Thu Jul 30 14:50:25.326903 2026] [security2:error] [pid 3555057:tid 3555057] [client 34.23.170.140:59772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoUVFKhdCAKEEfbCF2QAAACI"]
[Thu Jul 30 14:50:25.450789 2026] [security2:error] [pid 3558001:tid 3558001] [client 34.23.170.140:59786] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtWoUxe5YTu01L9GWVgWgAAABA"]
[Thu Jul 30 14:50:25.451052 2026] [security2:error] [pid 3558001:tid 3558001] [client 34.23.170.140:59786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtWoUxe5YTu01L9GWVgWgAAABA"]
[Thu Jul 30 14:50:25.451273 2026] [security2:error] [pid 3558001:tid 3558001] [client 34.23.170.140:59786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoUxe5YTu01L9GWVgWgAAABA"]
[Thu Jul 30 14:50:25.466576 2026] [security2:error] [pid 3558037:tid 3558037] [client 34.23.170.140:59800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtWoWPoJj2FAQ8B43bKBgAAABQ"]
[Thu Jul 30 14:50:25.466762 2026] [security2:error] [pid 3558037:tid 3558037] [client 34.23.170.140:59800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtWoWPoJj2FAQ8B43bKBgAAABQ"]
[Thu Jul 30 14:50:25.466978 2026] [security2:error] [pid 3558037:tid 3558037] [client 34.23.170.140:59800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoWPoJj2FAQ8B43bKBgAAABQ"]
[Thu Jul 30 14:50:25.554665 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59804] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtWoZsCW4wpVCpzdhsFTgAAAB0"]
[Thu Jul 30 14:50:25.554901 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtWoZsCW4wpVCpzdhsFTgAAAB0"]
[Thu Jul 30 14:50:25.555153 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoZsCW4wpVCpzdhsFTgAAAB0"]
[Thu Jul 30 14:50:25.565336 2026] [security2:error] [pid 3558039:tid 3558039] [client 34.23.170.140:59820] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtWoVWyj6KqQMS61JivzwAAADc"]
[Thu Jul 30 14:50:25.565559 2026] [security2:error] [pid 3558039:tid 3558039] [client 34.23.170.140:59820] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtWoVWyj6KqQMS61JivzwAAADc"]
[Thu Jul 30 14:50:25.565821 2026] [security2:error] [pid 3558039:tid 3558039] [client 34.23.170.140:59820] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoVWyj6KqQMS61JivzwAAADc"]
[Thu Jul 30 14:50:25.637392 2026] [security2:error] [pid 3557967:tid 3557967] [client 34.23.170.140:59834] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtWoUNCHIVql9F_r_xYUQAAAA0"]
[Thu Jul 30 14:50:25.637587 2026] [security2:error] [pid 3557967:tid 3557967] [client 34.23.170.140:59834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtWoUNCHIVql9F_r_xYUQAAAA0"]
[Thu Jul 30 14:50:25.637790 2026] [security2:error] [pid 3557967:tid 3557967] [client 34.23.170.140:59834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoUNCHIVql9F_r_xYUQAAAA0"]
[Thu Jul 30 14:50:25.772690 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59854] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtWof-G4TlbThTYvHhwxwAAADU"]
[Thu Jul 30 14:50:25.772940 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59854] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtWof-G4TlbThTYvHhwxwAAADU"]
[Thu Jul 30 14:50:25.773138 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:59854] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWof-G4TlbThTYvHhwxwAAADU"]
[Thu Jul 30 14:50:25.844523 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59868] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtWoST1BEBJCLh2LKQHHAAAADM"]
[Thu Jul 30 14:50:25.844765 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtWoST1BEBJCLh2LKQHHAAAADM"]
[Thu Jul 30 14:50:25.844988 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoST1BEBJCLh2LKQHHAAAADM"]
[Thu Jul 30 14:50:26.154323 2026] [security2:error] [pid 3553689:tid 3553689] [client 34.23.170.140:59926] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtWonF9hUfT0bOhdk5o3AAAAB4"]
[Thu Jul 30 14:50:26.154600 2026] [security2:error] [pid 3553689:tid 3553689] [client 34.23.170.140:59926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtWonF9hUfT0bOhdk5o3AAAAB4"]
[Thu Jul 30 14:50:26.154804 2026] [security2:error] [pid 3553689:tid 3553689] [client 34.23.170.140:59926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWonF9hUfT0bOhdk5o3AAAAB4"]
[Thu Jul 30 14:50:26.222461 2026] [access_compat:error] [pid 3555057:tid 3555057] [client 66.249.68.163:41518] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/robots.txt
[Thu Jul 30 14:50:26.222575 2026] [access_compat:error] [pid 3555057:tid 3555057] [client 66.249.68.163:41518] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:50:26.238913 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59940] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtWopsCW4wpVCpzdhsFTwAAAB0"]
[Thu Jul 30 14:50:26.239150 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59940] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtWopsCW4wpVCpzdhsFTwAAAB0"]
[Thu Jul 30 14:50:26.239382 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:59940] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWopsCW4wpVCpzdhsFTwAAAB0"]
[Thu Jul 30 14:50:26.335291 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59942] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtWoiT1BEBJCLh2LKQHHQAAADM"]
[Thu Jul 30 14:50:26.335543 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtWoiT1BEBJCLh2LKQHHQAAADM"]
[Thu Jul 30 14:50:26.335766 2026] [security2:error] [pid 3556973:tid 3556973] [client 34.23.170.140:59942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWoiT1BEBJCLh2LKQHHQAAADM"]
[Thu Jul 30 14:50:26.347294 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:59956] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtWooEyfqWYH2M3hzkZMgAAAAQ"]
[Thu Jul 30 14:50:26.347490 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:59956] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtWooEyfqWYH2M3hzkZMgAAAAQ"]
[Thu Jul 30 14:50:26.347701 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:59956] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWooEyfqWYH2M3hzkZMgAAAAQ"]
[Thu Jul 30 14:50:26.496442 2026] [security2:error] [pid 3557078:tid 3557078] [client 34.23.170.140:59984] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtWogAR3BNnuwFzU9CtuwAAADY"]
[Thu Jul 30 14:50:26.496691 2026] [security2:error] [pid 3557078:tid 3557078] [client 34.23.170.140:59984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtWogAR3BNnuwFzU9CtuwAAADY"]
[Thu Jul 30 14:50:26.496945 2026] [security2:error] [pid 3557078:tid 3557078] [client 34.23.170.140:59984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWogAR3BNnuwFzU9CtuwAAADY"]
[Thu Jul 30 14:50:26.619576 2026] [access_compat:error] [pid 3556973:tid 3556973] [client 66.249.68.165:37108] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/03/lynx.jpg
[Thu Jul 30 14:50:26.619702 2026] [access_compat:error] [pid 3556973:tid 3556973] [client 66.249.68.165:37108] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 14:50:26.631927 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:60024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtWopsCW4wpVCpzdhsFUAAAAB0"]
[Thu Jul 30 14:50:26.632386 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:60024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtWopsCW4wpVCpzdhsFUAAAAB0"]
[Thu Jul 30 14:50:26.632621 2026] [security2:error] [pid 3558038:tid 3558038] [client 34.23.170.140:60024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWopsCW4wpVCpzdhsFUAAAAB0"]
[Thu Jul 30 14:50:26.836043 2026] [security2:error] [pid 3546536:tid 3546536] [client 34.23.170.140:60058] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtWojisUBKeN4fmJtUw_wAAAAU"]
[Thu Jul 30 14:50:26.836335 2026] [security2:error] [pid 3546536:tid 3546536] [client 34.23.170.140:60058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtWojisUBKeN4fmJtUw_wAAAAU"]
[Thu Jul 30 14:50:26.836545 2026] [security2:error] [pid 3546536:tid 3546536] [client 34.23.170.140:60058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWojisUBKeN4fmJtUw_wAAAAU"]
[Thu Jul 30 14:50:26.928248 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:60062] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtWov-G4TlbThTYvHhwygAAADU"]
[Thu Jul 30 14:50:26.928454 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:60062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtWov-G4TlbThTYvHhwygAAADU"]
[Thu Jul 30 14:50:26.928683 2026] [security2:error] [pid 3556975:tid 3556975] [client 34.23.170.140:60062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWov-G4TlbThTYvHhwygAAADU"]
[Thu Jul 30 14:50:27.002376 2026] [security2:error] [pid 3551093:tid 3551093] [client 34.23.170.140:60072] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "partner.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtWozk5zhJ5dNGe5f74eAAAAA4"]
[Thu Jul 30 14:50:27.002675 2026] [security2:error] [pid 3551093:tid 3551093] [client 34.23.170.140:60072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtWozk5zhJ5dNGe5f74eAAAAA4"]
[Thu Jul 30 14:50:27.002915 2026] [security2:error] [pid 3551093:tid 3551093] [client 34.23.170.140:60072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWozk5zhJ5dNGe5f74eAAAAA4"]
[Thu Jul 30 14:50:27.069392 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:60094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "partner.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtWo4EyfqWYH2M3hzkZNAAAAAQ"]
[Thu Jul 30 14:50:27.069866 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:60094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "partner.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtWo4EyfqWYH2M3hzkZNAAAAAQ"]
[Thu Jul 30 14:50:27.070104 2026] [security2:error] [pid 3557583:tid 3557583] [client 34.23.170.140:60094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "partner.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtWo4EyfqWYH2M3hzkZNAAAAAQ"]
[Thu Jul 30 14:50:27.396906 2026] [ssl:error] [pid 3550299:tid 3550299] (EAI 2)Name or service not known: [client 144.76.19.72:34688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:27.396935 2026] [ssl:error] [pid 3550299:tid 3550299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:27.454773 2026] [ssl:error] [pid 3557583:tid 3557583] (EAI 2)Name or service not known: [client 144.76.19.72:34690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:27.454808 2026] [ssl:error] [pid 3557583:tid 3557583] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:27.885570 2026] [core:error] [pid 3556975:tid 3556975] [client 66.249.66.8:59754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:50:27.885597 2026] [core:error] [pid 3556975:tid 3556975] [client 66.249.66.8:59754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:50:30.030266 2026] [security2:error] [pid 3558038:tid 3558038] [client 216.73.216.199:23574] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/lvectl.log"] [unique_id "amtWppsCW4wpVCpzdhsFWQAAAB0"]
[Thu Jul 30 14:50:30.030639 2026] [security2:error] [pid 3558038:tid 3558038] [client 216.73.216.199:23574] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/lvectl.log"] [unique_id "amtWppsCW4wpVCpzdhsFWQAAAB0"]
[Thu Jul 30 14:50:30.030898 2026] [security2:error] [pid 3558038:tid 3558038] [client 216.73.216.199:23574] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/lvectl.log"] [unique_id "amtWppsCW4wpVCpzdhsFWQAAAB0"]
[Thu Jul 30 14:50:30.386079 2026] [authz_core:error] [pid 3537597:tid 3537597] [client 217.76.50.173:60935] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/
[Thu Jul 30 14:50:30.387623 2026] [access_compat:error] [pid 3537597:tid 3537597] [client 217.76.50.173:60935] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/
[Thu Jul 30 14:50:30.389635 2026] [access_compat:error] [pid 3537597:tid 3537597] [client 217.76.50.173:60935] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/
[Thu Jul 30 14:50:30.392049 2026] [access_compat:error] [pid 3537597:tid 3537597] [client 217.76.50.173:60935] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/
[Thu Jul 30 14:50:30.395267 2026] [access_compat:error] [pid 3537597:tid 3537597] [client 217.76.50.173:60935] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/
[Thu Jul 30 14:50:30.395304 2026] [access_compat:error] [pid 3537597:tid 3537597] [client 217.76.50.173:60935] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/
[Thu Jul 30 14:50:30.632596 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:49492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:30.632631 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:30.634127 2026] [ssl:error] [pid 3558038:tid 3558038] (70014)End of file found: [client 216.73.216.199:23574] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:30.684434 2026] [ssl:error] [pid 3546536:tid 3546536] (EAI 2)Name or service not known: [client 144.76.19.72:49508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:30.684458 2026] [ssl:error] [pid 3546536:tid 3546536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:32.146884 2026] [authz_core:error] [pid 3549195:tid 3549195] [client 66.249.66.33:35530] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:50:32.149740 2026] [authz_core:error] [pid 3549195:tid 3549195] [client 66.249.66.33:35530] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:50:32.152876 2026] [ssl:error] [pid 3557583:tid 3557583] (70014)End of file found: [client 216.73.216.199:41961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:33.070045 2026] [ssl:error] [pid 3553877:tid 3553877] (70014)End of file found: [client 216.73.216.199:56338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:33.741128 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:49514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:33.741182 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:33.800048 2026] [ssl:error] [pid 3555100:tid 3555100] (EAI 2)Name or service not known: [client 144.76.19.72:49520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:33.800088 2026] [ssl:error] [pid 3555100:tid 3555100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:36.857172 2026] [ssl:error] [pid 3551093:tid 3551093] (EAI 2)Name or service not known: [client 144.76.19.72:49532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:36.857209 2026] [ssl:error] [pid 3551093:tid 3551093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:36.911147 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:49544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:36.911194 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:39.408407 2026] [ssl:error] [pid 3537339:tid 3537339] (70014)End of file found: [client 216.73.216.199:32605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:39.720867 2026] [ssl:error] [pid 3555099:tid 3555099] (70014)End of file found: [client 216.73.216.199:23979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:39.994963 2026] [ssl:error] [pid 3553877:tid 3553877] (EAI 2)Name or service not known: [client 144.76.19.72:51490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:39.994997 2026] [ssl:error] [pid 3553877:tid 3553877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:40.047962 2026] [ssl:error] [pid 3545342:tid 3545342] (EAI 2)Name or service not known: [client 144.76.19.72:51504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:40.047991 2026] [ssl:error] [pid 3545342:tid 3545342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:43.032868 2026] [ssl:error] [pid 3551093:tid 3551093] (70014)End of file found: [client 216.73.216.199:50622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:43.102538 2026] [ssl:error] [pid 3558040:tid 3558040] (EAI 2)Name or service not known: [client 144.76.19.72:51514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:43.102579 2026] [ssl:error] [pid 3558040:tid 3558040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:43.157481 2026] [ssl:error] [pid 3555057:tid 3555057] (EAI 2)Name or service not known: [client 144.76.19.72:51516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:43.157509 2026] [ssl:error] [pid 3555057:tid 3555057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:44.736885 2026] [security2:error] [pid 3555100:tid 3555100] [client 216.73.216.199:30957] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_test_db.sql"] [unique_id "amtWtFvxTXUz-fYaieVTwgAAACo"]
[Thu Jul 30 14:50:44.737146 2026] [security2:error] [pid 3555100:tid 3555100] [client 216.73.216.199:30957] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_test_db.sql"] [unique_id "amtWtFvxTXUz-fYaieVTwgAAACo"]
[Thu Jul 30 14:50:44.737348 2026] [security2:error] [pid 3555100:tid 3555100] [client 216.73.216.199:30957] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/mysql/mysql_test_db.sql"] [unique_id "amtWtFvxTXUz-fYaieVTwgAAACo"]
[Thu Jul 30 14:50:44.842335 2026] [ssl:error] [pid 3555100:tid 3555100] (70014)End of file found: [client 216.73.216.199:30957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:45.741945 2026] [ssl:error] [pid 3555057:tid 3555057] (70014)End of file found: [client 216.73.216.199:21736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:46.210896 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:51524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:46.210926 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:46.263570 2026] [ssl:error] [pid 3538830:tid 3538830] (EAI 2)Name or service not known: [client 144.76.19.72:51540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:46.263600 2026] [ssl:error] [pid 3538830:tid 3538830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:46.681679 2026] [access_compat:error] [pid 3558037:tid 3558037] [client 45.158.164.139:38290] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:50:46.727678 2026] [access_compat:error] [pid 3556973:tid 3556973] [client 45.158.164.139:38292] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:50:47.161806 2026] [ssl:error] [pid 3537339:tid 3537339] (70014)End of file found: [client 216.73.216.199:54111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:48.368285 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:46253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:49.621597 2026] [ssl:error] [pid 3555011:tid 3555011] (EAI 2)Name or service not known: [client 144.76.19.72:51544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:49.621629 2026] [ssl:error] [pid 3555011:tid 3555011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:49.674692 2026] [ssl:error] [pid 3559044:tid 3559044] (EAI 2)Name or service not known: [client 144.76.19.72:48416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:49.674737 2026] [ssl:error] [pid 3559044:tid 3559044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:50.350211 2026] [ssl:error] [pid 3559043:tid 3559043] (70014)End of file found: [client 216.73.216.199:39565] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:50.861517 2026] [ssl:error] [pid 3551141:tid 3551141] (70014)End of file found: [client 216.73.216.199:60417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:51.562430 2026] [security2:error] [pid 3556974:tid 3556974] [client 85.208.96.196:53400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/2-bedroom-destination-trailers-for-sale"] [unique_id "amtWux1Wtm_QeuwkmeJU9wAAADQ"]
[Thu Jul 30 14:50:51.765534 2026] [ssl:error] [pid 3555057:tid 3555057] (70014)End of file found: [client 216.73.216.199:28778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:52.734664 2026] [ssl:error] [pid 3551786:tid 3551786] (EAI 2)Name or service not known: [client 144.76.19.72:48418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:52.734711 2026] [ssl:error] [pid 3551786:tid 3551786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:52.788020 2026] [ssl:error] [pid 3559044:tid 3559044] (EAI 2)Name or service not known: [client 144.76.19.72:48434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:52.788046 2026] [ssl:error] [pid 3559044:tid 3559044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:55.694763 2026] [authz_core:error] [pid 3553692:tid 3553692] [client 172.202.44.182:56181] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:50:55.842827 2026] [ssl:error] [pid 3556915:tid 3556915] (EAI 2)Name or service not known: [client 144.76.19.72:48448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:55.842870 2026] [ssl:error] [pid 3556915:tid 3556915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:55.899180 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:48460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:55.899207 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:55.928249 2026] [authz_core:error] [pid 3537339:tid 3537339] [client 52.202.41.153:31190] AH01630: client denied by server configuration: /home/lukess/public_html/error_log
[Thu Jul 30 14:50:56.310832 2026] [security2:error] [pid 3556973:tid 3556973] [client 216.73.216.199:57379] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php.dat.d/phpnative.dat"] [unique_id "amtWwCT1BEBJCLh2LKQHJQAAADM"]
[Thu Jul 30 14:50:56.311132 2026] [security2:error] [pid 3556973:tid 3556973] [client 216.73.216.199:57379] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php.dat.d/phpnative.dat"] [unique_id "amtWwCT1BEBJCLh2LKQHJQAAADM"]
[Thu Jul 30 14:50:56.311346 2026] [security2:error] [pid 3556973:tid 3556973] [client 216.73.216.199:57379] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php.dat.d/phpnative.dat"] [unique_id "amtWwCT1BEBJCLh2LKQHJQAAADM"]
[Thu Jul 30 14:50:56.788303 2026] [security2:error] [pid 3553642:tid 3553642] [client 148.153.139.134:46426] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "audio/mpeg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "spamp.com"] [uri "/"] [unique_id "amtWwOOrYNhJ6H-cPnwDQAAAAA8"]
[Thu Jul 30 14:50:56.789144 2026] [security2:error] [pid 3553642:tid 3553642] [client 148.153.139.134:46426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.com"] [uri "/"] [unique_id "amtWwOOrYNhJ6H-cPnwDQAAAAA8"]
[Thu Jul 30 14:50:57.219974 2026] [ssl:error] [pid 3556973:tid 3556973] (70014)End of file found: [client 216.73.216.199:57379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:57.502843 2026] [security2:error] [pid 3553642:tid 3553642] [client 148.153.139.134:46426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "spamp.com"] [uri "/index.php"] [unique_id "amtWwOOrYNhJ6H-cPnwDQAAAAA8"]
[Thu Jul 30 14:50:57.919539 2026] [authz_core:error] [pid 3558948:tid 3558948] [client 66.249.66.33:44426] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:50:57.922217 2026] [authz_core:error] [pid 3558948:tid 3558948] [client 66.249.66.33:44426] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:50:58.423494 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:29192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:50:58.956344 2026] [ssl:error] [pid 3558991:tid 3558991] (EAI 2)Name or service not known: [client 144.76.19.72:48476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:58.956375 2026] [ssl:error] [pid 3558991:tid 3558991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:59.009780 2026] [ssl:error] [pid 3551093:tid 3551093] (EAI 2)Name or service not known: [client 144.76.19.72:48480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:50:59.009812 2026] [ssl:error] [pid 3551093:tid 3551093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:50:59.256977 2026] [authz_core:error] [pid 3558948:tid 3558948] [client 66.249.66.33:44426] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:50:59.259657 2026] [authz_core:error] [pid 3558948:tid 3558948] [client 66.249.66.33:44426] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:50:59.293346 2026] [security2:error] [pid 3559093:tid 3559093] [client 114.119.132.171:34391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~17,30/request_format~html"] [unique_id "amtWwyEl6aaMC0jZGgxWHgAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~17,30/request_format~html
[Thu Jul 30 14:50:59.327224 2026] [ssl:error] [pid 3537339:tid 3537339] (70014)End of file found: [client 216.73.216.199:20568] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:00.962198 2026] [security2:error] [pid 3550192:tid 3550192] [client 114.119.132.171:34405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~17,30/request_format~html"] [unique_id "amtWxLpPInOfe-I38HV5VgAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~17,30/request_format~html
[Thu Jul 30 14:51:02.070497 2026] [ssl:error] [pid 3559099:tid 3559099] (EAI 2)Name or service not known: [client 144.76.19.72:36104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:02.070537 2026] [ssl:error] [pid 3559099:tid 3559099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:02.128592 2026] [ssl:error] [pid 3559093:tid 3559093] (EAI 2)Name or service not known: [client 144.76.19.72:36108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:02.128622 2026] [ssl:error] [pid 3559093:tid 3559093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:03.038456 2026] [lsapi:warn] [pid 3559096:tid 3559096] [client 216.73.216.199:44310] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 14:51:03.038492 2026] [lsapi:error] [pid 3559096:tid 3559096] [client 216.73.216.199:44310] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/doc/cpanel-php84-log/examples/syslog.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 14:51:03.460945 2026] [cgi:error] [pid 3556973:tid 3556973] [client 217.76.50.173:64635] AH02812: stderr from /home/dawnrobi/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:51:04.750161 2026] [core:error] [pid 3559096:tid 3559096] (13)Permission denied: [client 216.73.216.199:28299] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/objects
[Thu Jul 30 14:51:05.182391 2026] [ssl:error] [pid 3559093:tid 3559093] (EAI 2)Name or service not known: [client 144.76.19.72:36122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:05.182449 2026] [ssl:error] [pid 3559093:tid 3559093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:05.235294 2026] [ssl:error] [pid 3545431:tid 3545431] (EAI 2)Name or service not known: [client 144.76.19.72:36128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:05.235324 2026] [ssl:error] [pid 3545431:tid 3545431] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:05.369551 2026] [ssl:error] [pid 3559096:tid 3559096] (70014)End of file found: [client 216.73.216.199:28299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:06.057308 2026] [security2:error] [pid 3548331:tid 3548331] [client 85.214.61.34:46870] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amtWynLtHPq2oTbc8eUWGgAAABI"]
[Thu Jul 30 14:51:06.578186 2026] [core:error] [pid 3550192:tid 3550192] (13)Permission denied: [client 216.73.216.199:45340] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/partial
[Thu Jul 30 14:51:06.878599 2026] [core:error] [pid 3550192:tid 3550192] [client 216.73.216.199:45340] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/usr/lib64/python3.12/xmlrpc/%s)
[Thu Jul 30 14:51:08.310876 2026] [ssl:error] [pid 3558991:tid 3558991] (EAI 2)Name or service not known: [client 144.76.19.72:36142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:08.310920 2026] [ssl:error] [pid 3558991:tid 3558991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:08.365870 2026] [ssl:error] [pid 3550192:tid 3550192] (EAI 2)Name or service not known: [client 144.76.19.72:36146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:08.365900 2026] [ssl:error] [pid 3550192:tid 3550192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:10.332906 2026] [authz_core:error] [pid 3558039:tid 3558039] [client 66.249.66.33:50264] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:51:10.335571 2026] [authz_core:error] [pid 3558039:tid 3558039] [client 66.249.66.33:50264] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:51:11.028409 2026] [authz_core:error] [pid 3559093:tid 3559093] [client 66.249.66.34:39311] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:51:11.031054 2026] [authz_core:error] [pid 3559093:tid 3559093] [client 66.249.66.34:39311] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:51:11.450615 2026] [ssl:error] [pid 3559045:tid 3559045] (EAI 2)Name or service not known: [client 144.76.19.72:59644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:11.450650 2026] [ssl:error] [pid 3559045:tid 3559045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:11.505505 2026] [ssl:error] [pid 3559096:tid 3559096] (EAI 2)Name or service not known: [client 144.76.19.72:59648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:11.505538 2026] [ssl:error] [pid 3559096:tid 3559096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:12.016526 2026] [ssl:error] [pid 3555099:tid 3555099] (70014)End of file found: [client 216.73.216.199:52391] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:12.620626 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:12908] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:12.809496 2026] [security2:error] [pid 3551093:tid 3551093] [client 103.168.85.219:62396] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtW0Dk5zhJ5dNGe5f74iAAAAA4"]
[Thu Jul 30 14:51:12.809553 2026] [security2:error] [pid 3551093:tid 3551093] [client 103.168.85.219:62396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtW0Dk5zhJ5dNGe5f74iAAAAA4"]
[Thu Jul 30 14:51:12.809806 2026] [security2:error] [pid 3551093:tid 3551093] [client 103.168.85.219:62396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtW0Dk5zhJ5dNGe5f74iAAAAA4"]
[Thu Jul 30 14:51:14.378384 2026] [authz_core:error] [pid 3559046:tid 3559046] [client 66.249.66.35:46275] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:51:14.381275 2026] [authz_core:error] [pid 3559046:tid 3559046] [client 66.249.66.35:46275] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:51:14.562139 2026] [ssl:error] [pid 3555057:tid 3555057] (EAI 2)Name or service not known: [client 144.76.19.72:59664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:14.562170 2026] [ssl:error] [pid 3555057:tid 3555057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:14.615270 2026] [ssl:error] [pid 3559099:tid 3559099] (EAI 2)Name or service not known: [client 144.76.19.72:59678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:14.615294 2026] [ssl:error] [pid 3559099:tid 3559099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:14.934235 2026] [security2:error] [pid 3560070:tid 3560070] [client 47.128.55.114:20658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hoo-hah.co.uk"] [uri "/robots.txt"] [unique_id "amtW0uJTES_ypKiSRET0PAAAAAI"]
[Thu Jul 30 14:51:14.970269 2026] [security2:error] [pid 3559096:tid 3559096] [client 47.77.235.3:63211] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtW0hU4_4G43ntAE2z7EwAAAC0"]
[Thu Jul 30 14:51:14.970319 2026] [security2:error] [pid 3559096:tid 3559096] [client 47.77.235.3:63211] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtW0hU4_4G43ntAE2z7EwAAAC0"]
[Thu Jul 30 14:51:14.970576 2026] [security2:error] [pid 3559096:tid 3559096] [client 47.77.235.3:63211] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtW0hU4_4G43ntAE2z7EwAAAC0"]
[Thu Jul 30 14:51:16.182561 2026] [authz_core:error] [pid 3560149:tid 3560149] [client 35.224.109.12:55330] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:51:16.184292 2026] [authz_core:error] [pid 3560149:tid 3560149] [client 35.224.109.12:55330] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:51:17.668633 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:59680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:17.668667 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:17.726567 2026] [ssl:error] [pid 3556973:tid 3556973] (EAI 2)Name or service not known: [client 144.76.19.72:59686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:17.726620 2026] [ssl:error] [pid 3556973:tid 3556973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:17.998893 2026] [authz_core:error] [pid 3553692:tid 3553692] [client 172.202.44.182:56181] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:51:18.368154 2026] [authz_core:error] [pid 3559102:tid 3559102] [client 146.70.194.246:58028] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/error_log
[Thu Jul 30 14:51:18.451583 2026] [authz_core:error] [pid 3559102:tid 3559102] [client 146.70.194.246:58028] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:51:19.323386 2026] [security2:error] [pid 3559094:tid 3559094] [client 47.77.235.3:60405] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtW1-xk5OQHQUb7HV11_AAAACw"]
[Thu Jul 30 14:51:19.323453 2026] [security2:error] [pid 3559094:tid 3559094] [client 47.77.235.3:60405] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtW1-xk5OQHQUb7HV11_AAAACw"]
[Thu Jul 30 14:51:19.323798 2026] [security2:error] [pid 3559094:tid 3559094] [client 47.77.235.3:60405] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtW1-xk5OQHQUb7HV11_AAAACw"]
[Thu Jul 30 14:51:20.041086 2026] [authz_core:error] [pid 3559102:tid 3559102] [client 146.70.194.246:58028] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/IXR/error_log
[Thu Jul 30 14:51:20.265498 2026] [ssl:error] [pid 3555011:tid 3555011] (70014)End of file found: [client 216.73.216.199:44835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:20.801622 2026] [ssl:error] [pid 3558991:tid 3558991] (EAI 2)Name or service not known: [client 144.76.19.72:65516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:20.801663 2026] [ssl:error] [pid 3558991:tid 3558991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:20.856303 2026] [ssl:error] [pid 3556973:tid 3556973] (EAI 2)Name or service not known: [client 144.76.19.72:65522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:20.856332 2026] [ssl:error] [pid 3556973:tid 3556973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:20.969336 2026] [authz_core:error] [pid 3558991:tid 3558991] [client 66.249.66.35:46438] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:51:20.972161 2026] [authz_core:error] [pid 3558991:tid 3558991] [client 66.249.66.35:46438] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:51:21.474244 2026] [ssl:error] [pid 3550192:tid 3550192] (70014)End of file found: [client 216.73.216.199:13799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:21.569868 2026] [authz_core:error] [pid 3559102:tid 3559102] [client 146.70.194.246:54825] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 14:51:22.383816 2026] [ssl:error] [pid 3556973:tid 3556973] (70014)End of file found: [client 216.73.216.199:9203] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:23.080538 2026] [authz_core:error] [pid 3560430:tid 3560430] [client 146.70.194.246:5943] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:51:23.953630 2026] [ssl:error] [pid 3558948:tid 3558948] (EAI 2)Name or service not known: [client 144.76.19.72:65534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:23.953665 2026] [ssl:error] [pid 3558948:tid 3558948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:24.010179 2026] [ssl:error] [pid 3558948:tid 3558948] (EAI 2)Name or service not known: [client 144.76.19.72:18014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:24.010210 2026] [ssl:error] [pid 3558948:tid 3558948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:24.061120 2026] [authz_core:error] [pid 3560430:tid 3560430] [client 146.70.194.246:5943] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 14:51:24.976332 2026] [authz_core:error] [pid 3560491:tid 3560491] [client 146.70.194.246:39268] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 14:51:25.892624 2026] [authz_core:error] [pid 3560491:tid 3560491] [client 146.70.194.246:39268] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Auth/error_log
[Thu Jul 30 14:51:26.295146 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:48187] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:27.093896 2026] [ssl:error] [pid 3560492:tid 3560492] (EAI 2)Name or service not known: [client 144.76.19.72:18016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:27.093932 2026] [ssl:error] [pid 3560492:tid 3560492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:27.147740 2026] [ssl:error] [pid 3560149:tid 3560149] (EAI 2)Name or service not known: [client 144.76.19.72:18032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:27.147778 2026] [ssl:error] [pid 3560149:tid 3560149] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:27.201599 2026] [core:error] [pid 3560383:tid 3560383] [client 216.73.216.199:25559] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/root/lib64/python3.6/file:%s)
[Thu Jul 30 14:51:28.105618 2026] [ssl:error] [pid 3555098:tid 3555098] (70014)End of file found: [client 216.73.216.199:32042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:28.181226 2026] [authz_core:error] [pid 3559094:tid 3559094] [client 146.70.194.246:39272] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Exception/error_log
[Thu Jul 30 14:51:29.003953 2026] [ssl:error] [pid 3560491:tid 3560491] (70014)End of file found: [client 216.73.216.199:29499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:29.276874 2026] [authz_core:error] [pid 3560433:tid 3560433] [client 146.70.194.246:39278] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Exception/Http/error_log
[Thu Jul 30 14:51:29.972008 2026] [security2:error] [pid 3549919:tid 3549919] [client 129.232.187.42:50840] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtW4Tff-z734_jG5etyTgAAAAg"]
[Thu Jul 30 14:51:30.206204 2026] [ssl:error] [pid 3560335:tid 3560335] (EAI 2)Name or service not known: [client 144.76.19.72:19948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:30.206238 2026] [ssl:error] [pid 3560335:tid 3560335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:30.264527 2026] [ssl:error] [pid 3550192:tid 3550192] (EAI 2)Name or service not known: [client 144.76.19.72:19956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:30.264557 2026] [ssl:error] [pid 3550192:tid 3550192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:30.310671 2026] [security2:error] [pid 3558002:tid 3558002] [client 85.208.96.198:54510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "saturnsports.com"] [uri "/robots.txt"] [unique_id "amtW4gZ7XdoEpptllQZd3gAAABE"]
[Thu Jul 30 14:51:31.216803 2026] [security2:error] [pid 3553692:tid 3553692] [client 185.191.171.16:45108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "saturnsports.com"] [uri "/"] [unique_id "amtW4xql823xWyjziLKWFQAAACM"]
[Thu Jul 30 14:51:31.717452 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:27754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:31.836348 2026] [security2:error] [pid 3549919:tid 3549919] [client 119.91.20.139:44958] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sewyork.co.uk"] [uri "/"] [unique_id "amtW4zff-z734_jG5etyTwAAAAg"]
[Thu Jul 30 14:51:33.201925 2026] [authz_core:error] [pid 3537339:tid 3537339] [client 146.70.194.246:59356] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Exception/Transport/error_log
[Thu Jul 30 14:51:33.389388 2026] [ssl:error] [pid 3559093:tid 3559093] (EAI 2)Name or service not known: [client 144.76.19.72:19964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:33.389438 2026] [ssl:error] [pid 3559093:tid 3559093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:33.441263 2026] [ssl:error] [pid 3555099:tid 3555099] (EAI 2)Name or service not known: [client 144.76.19.72:19974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:33.441306 2026] [ssl:error] [pid 3555099:tid 3555099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:34.614395 2026] [security2:error] [pid 3560432:tid 3560432] [client 185.191.171.14:36168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "saturnsports.com"] [uri "/sitemap.xml"] [unique_id "amtW5qYonE4iA-bl-wiKewAAABQ"]
[Thu Jul 30 14:51:34.642712 2026] [authz_core:error] [pid 3553692:tid 3553692] [client 146.70.194.246:33045] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Proxy/error_log
[Thu Jul 30 14:51:35.748637 2026] [authz_core:error] [pid 3560384:tid 3560384] [client 146.70.194.246:59386] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Response/error_log
[Thu Jul 30 14:51:36.498835 2026] [ssl:error] [pid 3559094:tid 3559094] (EAI 2)Name or service not known: [client 144.76.19.72:19984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:36.498874 2026] [ssl:error] [pid 3559094:tid 3559094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:36.552250 2026] [ssl:error] [pid 3559102:tid 3559102] (EAI 2)Name or service not known: [client 144.76.19.72:19996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:36.552288 2026] [ssl:error] [pid 3559102:tid 3559102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:36.833930 2026] [ssl:error] [pid 3549919:tid 3549919] (70014)End of file found: [client 216.73.216.199:57660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:37.006950 2026] [authz_core:error] [pid 3553692:tid 3553692] [client 146.70.194.246:59390] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Transport/error_log
[Thu Jul 30 14:51:37.975615 2026] [security2:error] [pid 3560432:tid 3560432] [client 146.70.194.246:59404] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/src/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtW6aYonE4iA-bl-wiKfQAAABQ"]
[Thu Jul 30 14:51:37.975747 2026] [security2:error] [pid 3560432:tid 3560432] [client 146.70.194.246:59404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtW6aYonE4iA-bl-wiKfQAAABQ"]
[Thu Jul 30 14:51:38.343784 2026] [ssl:error] [pid 3560335:tid 3560335] (70014)End of file found: [client 216.73.216.199:45826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:38.449301 2026] [security2:error] [pid 3560432:tid 3560432] [client 146.70.194.246:59404] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtW6aYonE4iA-bl-wiKfQAAABQ"]
[Thu Jul 30 14:51:39.587039 2026] [authz_core:error] [pid 3560432:tid 3560432] [client 146.70.194.246:59404] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 14:51:39.610849 2026] [ssl:error] [pid 3560070:tid 3560070] (EAI 2)Name or service not known: [client 144.76.19.72:35268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:39.610902 2026] [ssl:error] [pid 3560070:tid 3560070] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:39.664114 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:35278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:39.664142 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:39.848922 2026] [ssl:error] [pid 3560383:tid 3560383] (70014)End of file found: [client 216.73.216.199:7504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:40.031114 2026] [security2:error] [pid 3560384:tid 3560384] [client 110.42.208.131:51520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "amtW7Mr-0FiOvEao0sNddwAAAA0"]
[Thu Jul 30 14:51:40.478752 2026] [authz_core:error] [pid 3560432:tid 3560432] [client 146.70.194.246:59404] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/library/error_log
[Thu Jul 30 14:51:41.408565 2026] [authz_core:error] [pid 3560487:tid 3560487] [client 146.70.194.246:50354] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/library/SimplePie/error_log
[Thu Jul 30 14:51:42.734722 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:35284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:42.734762 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:42.786243 2026] [ssl:error] [pid 3556915:tid 3556915] (EAI 2)Name or service not known: [client 144.76.19.72:35286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:42.786275 2026] [ssl:error] [pid 3556915:tid 3556915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:44.590981 2026] [security2:error] [pid 3560384:tid 3560384] [client 110.42.208.131:56144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtW8Mr-0FiOvEao0sNdeAAAAA0"], referer: http://purple-childcare.co.uk
[Thu Jul 30 14:51:45.840900 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:35302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:45.840931 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:45.896637 2026] [ssl:error] [pid 3560383:tid 3560383] (EAI 2)Name or service not known: [client 144.76.19.72:35312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:45.896676 2026] [ssl:error] [pid 3560383:tid 3560383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:48.755695 2026] [core:error] [pid 3560488:tid 3560488] [client 66.249.66.32:40693] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:51:48.755725 2026] [core:error] [pid 3560488:tid 3560488] [client 66.249.66.32:40693] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:51:48.881186 2026] [access_compat:error] [pid 3543505:tid 3543505] [client 45.158.164.139:44394] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:51:48.953308 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:35320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:48.953346 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:49.005562 2026] [ssl:error] [pid 3560430:tid 3560430] (EAI 2)Name or service not known: [client 144.76.19.72:35330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:49.005596 2026] [ssl:error] [pid 3560430:tid 3560430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:49.331713 2026] [cgi:error] [pid 3557078:tid 3557078] [client 194.9.110.170:33087] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:51:49.992813 2026] [lsapi:error] [pid 3555057:tid 3555057] [client 216.73.216.199:33927] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Class "Plesk\\Wappspector\\MatchResult\\MatchResult" not found in /opt/cpanel/ea-wappspector/src/MatchResult/Python.php:8\nStack trace:\n#0 {main}\n  thrown in /opt/cpanel/ea-wappspector/src/MatchResult/Python.php on line 8\n
[Thu Jul 30 14:51:52.045230 2026] [security2:error] [pid 3560430:tid 3560430] [client 85.208.96.209:38672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/bermuda-ferry-schedule"] [unique_id "amtW-FS6yP1zhKwWAR-jTwAAAA8"]
[Thu Jul 30 14:51:52.059676 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:46578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:52.059705 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:52.115269 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:46592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:52.115299 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:52.394167 2026] [ssl:error] [pid 3549919:tid 3549919] (70014)End of file found: [client 216.73.216.199:64126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:53.443915 2026] [security2:error] [pid 3559094:tid 3559094] [client 146.70.194.246:6757] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/library/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtW-exk5OQHQUb7HV12OwAAACw"]
[Thu Jul 30 14:51:53.444033 2026] [security2:error] [pid 3559094:tid 3559094] [client 146.70.194.246:6757] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtW-exk5OQHQUb7HV12OwAAACw"]
[Thu Jul 30 14:51:53.844750 2026] [security2:error] [pid 3559094:tid 3559094] [client 146.70.194.246:6757] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtW-exk5OQHQUb7HV12OwAAACw"]
[Thu Jul 30 14:51:54.441846 2026] [authz_core:error] [pid 3559094:tid 3559094] [client 146.70.194.246:6757] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/src/error_log
[Thu Jul 30 14:51:54.802216 2026] [ssl:error] [pid 3523527:tid 3523527] (70014)End of file found: [client 216.73.216.199:51789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:51:55.172464 2026] [ssl:error] [pid 3559045:tid 3559045] (EAI 2)Name or service not known: [client 144.76.19.72:46604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:55.172495 2026] [ssl:error] [pid 3559045:tid 3559045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:55.226846 2026] [ssl:error] [pid 3555011:tid 3555011] (EAI 2)Name or service not known: [client 144.76.19.72:46606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:55.226888 2026] [ssl:error] [pid 3555011:tid 3555011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:55.479832 2026] [security2:error] [pid 3538105:tid 3538105] [client 3.94.199.128:52933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/"] [unique_id "amtW--8mwledND62ov9RsgAAACg"]
[Thu Jul 30 14:51:55.483146 2026] [authz_core:error] [pid 3559094:tid 3559094] [client 146.70.194.246:6757] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/src/Cache/error_log
[Thu Jul 30 14:51:57.083652 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 66.249.66.34:43025] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:51:57.086580 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 66.249.66.34:43025] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:51:57.514927 2026] [core:error] [pid 3560432:tid 3560432] (13)Permission denied: [client 216.73.216.199:43500] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/objects
[Thu Jul 30 14:51:58.284411 2026] [ssl:error] [pid 3550192:tid 3550192] (EAI 2)Name or service not known: [client 144.76.19.72:46608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:58.284452 2026] [ssl:error] [pid 3550192:tid 3550192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:58.337620 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:46622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:51:58.337660 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:51:59.326988 2026] [core:error] [pid 3560432:tid 3560432] (13)Permission denied: [client 216.73.216.199:43500] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/objects
[Thu Jul 30 14:52:00.154836 2026] [security2:error] [pid 3560335:tid 3560335] [client 146.70.194.246:35492] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/src/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtXADem_lAw6LJGKAyu8gAAAAo"]
[Thu Jul 30 14:52:00.154946 2026] [security2:error] [pid 3560335:tid 3560335] [client 146.70.194.246:35492] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtXADem_lAw6LJGKAyu8gAAAAo"]
[Thu Jul 30 14:52:00.557599 2026] [security2:error] [pid 3560335:tid 3560335] [client 146.70.194.246:35492] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtXADem_lAw6LJGKAyu8gAAAAo"]
[Thu Jul 30 14:52:00.753344 2026] [authz_core:error] [pid 3560335:tid 3560335] [client 146.70.194.246:35492] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/src/HTTP/error_log
[Thu Jul 30 14:52:01.394940 2026] [ssl:error] [pid 3548331:tid 3548331] (EAI 2)Name or service not known: [client 144.76.19.72:56372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:01.394972 2026] [ssl:error] [pid 3548331:tid 3548331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:01.453555 2026] [ssl:error] [pid 3555057:tid 3555057] (EAI 2)Name or service not known: [client 144.76.19.72:56378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:01.453586 2026] [ssl:error] [pid 3555057:tid 3555057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:02.546586 2026] [security2:error] [pid 3559102:tid 3559102] [client 114.119.136.14:48607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amtXAl87TvVFEKlE77UeFgAAADs"], referer: http://hoo-hah.co.uk?i=hh___12
[Thu Jul 30 14:52:03.880399 2026] [security2:error] [pid 3555098:tid 3555098] [client 196.190.176.138:29001] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXA8lL4gYRYY8TUtRFqgAAACY"]
[Thu Jul 30 14:52:03.880459 2026] [security2:error] [pid 3555098:tid 3555098] [client 196.190.176.138:29001] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXA8lL4gYRYY8TUtRFqgAAACY"]
[Thu Jul 30 14:52:03.880704 2026] [security2:error] [pid 3555098:tid 3555098] [client 196.190.176.138:29001] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXA8lL4gYRYY8TUtRFqgAAACY"]
[Thu Jul 30 14:52:04.142471 2026] [ssl:error] [pid 3560432:tid 3560432] (70014)End of file found: [client 216.73.216.199:43500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:04.510499 2026] [ssl:error] [pid 3559102:tid 3559102] (EAI 2)Name or service not known: [client 144.76.19.72:56384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:04.510529 2026] [ssl:error] [pid 3559102:tid 3559102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:04.564531 2026] [ssl:error] [pid 3561650:tid 3561650] (EAI 2)Name or service not known: [client 144.76.19.72:56398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:04.564563 2026] [ssl:error] [pid 3561650:tid 3561650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:05.476437 2026] [security2:error] [pid 3537339:tid 3537339] [client 8.219.111.220:62569] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXBTngrup0JXDN3RSkFQAAAAE"]
[Thu Jul 30 14:52:05.476492 2026] [security2:error] [pid 3537339:tid 3537339] [client 8.219.111.220:62569] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXBTngrup0JXDN3RSkFQAAAAE"]
[Thu Jul 30 14:52:05.476752 2026] [security2:error] [pid 3537339:tid 3537339] [client 8.219.111.220:62569] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXBTngrup0JXDN3RSkFQAAAAE"]
[Thu Jul 30 14:52:06.848578 2026] [ssl:error] [pid 3560383:tid 3560383] (70014)End of file found: [client 216.73.216.199:20660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:07.621922 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:56412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:07.621951 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:07.677464 2026] [ssl:error] [pid 3556915:tid 3556915] (EAI 2)Name or service not known: [client 144.76.19.72:56420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:07.677493 2026] [ssl:error] [pid 3556915:tid 3556915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:08.690894 2026] [security2:error] [pid 3556915:tid 3556915] [client 8.219.111.220:33527] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXCFOkf8q5ouKmFGUwWQAAAC8"]
[Thu Jul 30 14:52:08.690958 2026] [security2:error] [pid 3556915:tid 3556915] [client 8.219.111.220:33527] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXCFOkf8q5ouKmFGUwWQAAAC8"]
[Thu Jul 30 14:52:08.691225 2026] [security2:error] [pid 3556915:tid 3556915] [client 8.219.111.220:33527] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXCFOkf8q5ouKmFGUwWQAAAC8"]
[Thu Jul 30 14:52:10.164512 2026] [ssl:error] [pid 3557078:tid 3557078] (70014)End of file found: [client 216.73.216.199:22816] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:10.763326 2026] [ssl:error] [pid 3560432:tid 3560432] (EAI 2)Name or service not known: [client 144.76.19.72:46088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:10.763361 2026] [ssl:error] [pid 3560432:tid 3560432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:10.821636 2026] [ssl:error] [pid 3556915:tid 3556915] (EAI 2)Name or service not known: [client 144.76.19.72:46098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:10.821667 2026] [ssl:error] [pid 3556915:tid 3556915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:13.174804 2026] [core:error] [pid 3550192:tid 3550192] (13)Permission denied: [client 216.73.216.199:56809] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/dev/core
[Thu Jul 30 14:52:13.910125 2026] [ssl:error] [pid 3560487:tid 3560487] (EAI 2)Name or service not known: [client 144.76.19.72:46104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:13.910179 2026] [ssl:error] [pid 3560487:tid 3560487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:13.964013 2026] [ssl:error] [pid 3559046:tid 3559046] (EAI 2)Name or service not known: [client 144.76.19.72:46112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:13.964050 2026] [ssl:error] [pid 3559046:tid 3559046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:14.841576 2026] [authz_core:error] [pid 3556974:tid 3556974] [client 146.70.194.246:43022] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 14:52:14.977904 2026] [ssl:error] [pid 3560430:tid 3560430] (70014)End of file found: [client 216.73.216.199:40668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:15.584243 2026] [core:error] [pid 3550192:tid 3550192] (13)Permission denied: [client 216.73.216.199:56809] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/partial
[Thu Jul 30 14:52:18.293723 2026] [ssl:error] [pid 3550192:tid 3550192] (70014)End of file found: [client 216.73.216.199:56809] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:18.569570 2026] [lsapi:warn] [pid 3561759:tid 3561759] [client 108.179.194.35:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 14:52:18.636791 2026] [ssl:error] [pid 3562550:tid 3562550] (EAI 2)Name or service not known: [client 144.76.19.72:46128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:18.636816 2026] [ssl:error] [pid 3562550:tid 3562550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:18.951134 2026] [authz_core:error] [pid 3559096:tid 3559096] [client 146.70.194.246:49794] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 14:52:18.977627 2026] [ssl:error] [pid 3560491:tid 3560491] (EAI 2)Name or service not known: [client 144.76.19.72:46138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:18.977660 2026] [ssl:error] [pid 3560491:tid 3560491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:20.651130 2026] [ssl:error] [pid 3537597:tid 3537597] (70014)End of file found: [client 216.73.216.199:3254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:20.748877 2026] [authz_core:error] [pid 3560432:tid 3560432] [client 146.70.194.246:54066] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 14:52:21.903737 2026] [security2:error] [pid 3560430:tid 3560430] [client 114.119.158.38:21347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~17,15,18,104/request_format~html"] [unique_id "amtXFVS6yP1zhKwWAR-jWAAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~17,15,18/request_format~html
[Thu Jul 30 14:52:21.962443 2026] [ssl:error] [pid 3562586:tid 3562586] (70014)End of file found: [client 216.73.216.199:4054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:22.033540 2026] [ssl:error] [pid 3562585:tid 3562585] (EAI 2)Name or service not known: [client 144.76.19.72:60508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:22.033584 2026] [ssl:error] [pid 3562585:tid 3562585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:22.086153 2026] [ssl:error] [pid 3523527:tid 3523527] (EAI 2)Name or service not known: [client 144.76.19.72:60524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:22.086180 2026] [ssl:error] [pid 3523527:tid 3523527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:23.505537 2026] [security2:error] [pid 3560487:tid 3560487] [client 114.119.158.38:21349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~17,15,18,104/request_format~html"] [unique_id "amtXFzFbw1PNZFrewd2qWAAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~17,15,18/request_format~html
[Thu Jul 30 14:52:23.773533 2026] [ssl:error] [pid 3542492:tid 3542492] (70014)End of file found: [client 216.73.216.199:14536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:25.142164 2026] [ssl:error] [pid 3562512:tid 3562512] (EAI 2)Name or service not known: [client 144.76.19.72:60538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:25.142237 2026] [ssl:error] [pid 3562512:tid 3562512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:25.197930 2026] [ssl:error] [pid 3562588:tid 3562588] (EAI 2)Name or service not known: [client 144.76.19.72:60546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:25.197965 2026] [ssl:error] [pid 3562588:tid 3562588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:25.539013 2026] [cgi:error] [pid 3537339:tid 3537339] [client 34.233.129.35:51409] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:52:25.539349 2026] [core:error] [pid 3537339:tid 3537339] [client 34.233.129.35:51409] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:52:26.322354 2026] [security2:error] [pid 3558991:tid 3558991] [client 114.119.143.213:57887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtXGiVYN1nFlqVWt1ZtXwAAAAU"], referer: https://raidersofthegamecupboard.co.uk/robots.txt
[Thu Jul 30 14:52:27.693833 2026] [ssl:error] [pid 3562588:tid 3562588] (70014)End of file found: [client 216.73.216.199:23182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:28.268367 2026] [ssl:error] [pid 3562591:tid 3562591] (EAI 2)Name or service not known: [client 144.76.19.72:60556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:28.268427 2026] [ssl:error] [pid 3562591:tid 3562591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:28.326354 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:60564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:28.326390 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:28.597663 2026] [ssl:error] [pid 3555098:tid 3555098] (70014)End of file found: [client 216.73.216.199:48181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:29.093055 2026] [ssl:error] [pid 3561759:tid 3561759] (70014)End of file found: [client 216.73.216.199:52912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:31.112399 2026] [cgi:error] [pid 3559045:tid 3559045] [client 74.248.33.8:13899] AH02812: stderr from /home/horusw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:52:31.379952 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:18510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:31.379986 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:31.431510 2026] [ssl:error] [pid 3560335:tid 3560335] (EAI 2)Name or service not known: [client 144.76.19.72:18512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:31.431543 2026] [ssl:error] [pid 3560335:tid 3560335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:33.445656 2026] [security2:error] [pid 3562587:tid 3562587] [client 216.73.216.199:24831] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/iconv.ini"] [unique_id "amtXIRzH5sDCZ3eeT-LcKwAAAB4"]
[Thu Jul 30 14:52:33.445905 2026] [security2:error] [pid 3562587:tid 3562587] [client 216.73.216.199:24831] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/iconv.ini"] [unique_id "amtXIRzH5sDCZ3eeT-LcKwAAAB4"]
[Thu Jul 30 14:52:33.446130 2026] [security2:error] [pid 3562587:tid 3562587] [client 216.73.216.199:24831] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/iconv.ini"] [unique_id "amtXIRzH5sDCZ3eeT-LcKwAAAB4"]
[Thu Jul 30 14:52:34.058746 2026] [ssl:error] [pid 3562587:tid 3562587] (70014)End of file found: [client 216.73.216.199:24831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:34.484049 2026] [ssl:error] [pid 3562550:tid 3562550] (EAI 2)Name or service not known: [client 144.76.19.72:18528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:34.484092 2026] [ssl:error] [pid 3562550:tid 3562550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:34.539963 2026] [ssl:error] [pid 3561759:tid 3561759] (EAI 2)Name or service not known: [client 144.76.19.72:18540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:34.539991 2026] [ssl:error] [pid 3561759:tid 3561759] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:37.385948 2026] [ssl:error] [pid 3561650:tid 3561650] (70014)End of file found: [client 216.73.216.199:5176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:37.602584 2026] [ssl:error] [pid 3562549:tid 3562549] (EAI 2)Name or service not known: [client 144.76.19.72:18554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:37.602617 2026] [ssl:error] [pid 3562549:tid 3562549] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:37.654485 2026] [ssl:error] [pid 3562589:tid 3562589] (EAI 2)Name or service not known: [client 144.76.19.72:18568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:37.654518 2026] [ssl:error] [pid 3562589:tid 3562589] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:39.193823 2026] [ssl:error] [pid 3563514:tid 3563514] (70014)End of file found: [client 216.73.216.199:8378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:40.413232 2026] [access_compat:error] [pid 3559045:tid 3559045] [client 74.248.33.8:13899] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/edd/
[Thu Jul 30 14:52:40.415172 2026] [access_compat:error] [pid 3559045:tid 3559045] [client 74.248.33.8:13899] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:52:40.415225 2026] [access_compat:error] [pid 3559045:tid 3559045] [client 74.248.33.8:13899] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 14:52:40.709592 2026] [ssl:error] [pid 3562510:tid 3562510] (EAI 2)Name or service not known: [client 144.76.19.72:54036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:40.709627 2026] [ssl:error] [pid 3562510:tid 3562510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:40.766105 2026] [ssl:error] [pid 3560335:tid 3560335] (EAI 2)Name or service not known: [client 144.76.19.72:54046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:40.766131 2026] [ssl:error] [pid 3560335:tid 3560335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:41.306823 2026] [ssl:error] [pid 3559046:tid 3559046] (70014)End of file found: [client 216.73.216.199:46120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:43.115848 2026] [ssl:error] [pid 3562591:tid 3562591] (70014)End of file found: [client 216.73.216.199:57220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:43.824574 2026] [ssl:error] [pid 3561650:tid 3561650] (EAI 2)Name or service not known: [client 144.76.19.72:54060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:43.824606 2026] [ssl:error] [pid 3561650:tid 3561650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:43.882794 2026] [ssl:error] [pid 3559099:tid 3559099] (EAI 2)Name or service not known: [client 144.76.19.72:54066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:43.882821 2026] [ssl:error] [pid 3559099:tid 3559099] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:46.967832 2026] [ssl:error] [pid 3563515:tid 3563515] (EAI 2)Name or service not known: [client 144.76.19.72:54076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:46.967876 2026] [ssl:error] [pid 3563515:tid 3563515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:47.025018 2026] [ssl:error] [pid 3562588:tid 3562588] (EAI 2)Name or service not known: [client 144.76.19.72:54086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:47.025054 2026] [ssl:error] [pid 3562588:tid 3562588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:48.241631 2026] [ssl:error] [pid 3559046:tid 3559046] (70014)End of file found: [client 216.73.216.199:5158] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:48.748951 2026] [ssl:error] [pid 3548331:tid 3548331] (70014)End of file found: [client 216.73.216.199:23026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:49.696677 2026] [security2:error] [pid 3555057:tid 3555057] [client 35.198.41.118:33814] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "georgehotelofstamford.com"] [uri "/xmlrpc.php"] [unique_id "amtXMUVFKhdCAKEEfbCGFAAAACI"]
[Thu Jul 30 14:52:49.752701 2026] [ssl:error] [pid 3561650:tid 3561650] (70014)End of file found: [client 216.73.216.199:2184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:50.100840 2026] [ssl:error] [pid 3562475:tid 3562475] (EAI 2)Name or service not known: [client 144.76.19.72:19436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:50.100869 2026] [ssl:error] [pid 3562475:tid 3562475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:50.109656 2026] [security2:error] [pid 3560487:tid 3560487] [client 43.157.175.122:53778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.familyjames.com"] [uri "/"] [unique_id "amtXMjFbw1PNZFrewd2qYgAAACQ"]
[Thu Jul 30 14:52:50.154200 2026] [ssl:error] [pid 3558991:tid 3558991] (EAI 2)Name or service not known: [client 144.76.19.72:19450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:50.154234 2026] [ssl:error] [pid 3558991:tid 3558991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:50.712303 2026] [lsapi:error] [pid 3549919:tid 3549919] [client 45.158.164.139:53654] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 131072 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-recovery-mode.php on line 172\n, referer: http://demo.mjs-services.com/wp-cron.php?doing_wp_cron=1785419570.1857318878173828125000
[Thu Jul 30 14:52:51.268855 2026] [access_compat:error] [pid 3538105:tid 3538105] [client 45.158.164.139:41014] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:52:52.203647 2026] [ssl:error] [pid 3562551:tid 3562551] (70014)End of file found: [client 216.73.216.199:53224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:52.527025 2026] [security2:error] [pid 3563514:tid 3563514] [client 85.208.96.205:31980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/aaron-powell-pizza-hut-salary"] [unique_id "amtXNNKr6ViN8rW2TiSIRwAAABQ"]
[Thu Jul 30 14:52:52.806602 2026] [ssl:error] [pid 3560487:tid 3560487] (70014)End of file found: [client 216.73.216.199:1562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:53.135211 2026] [authz_core:error] [pid 3560493:tid 3560493] [client 146.70.194.246:43242] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/customize/error_log
[Thu Jul 30 14:52:53.208443 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:19460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:53.208472 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:53.264572 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:19474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:53.264603 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:53.314413 2026] [security2:error] [pid 3563678:tid 3563678] [client 170.106.113.159:58292] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/saveshrine/secret-of-mana/"] [unique_id "amtXNdJdzF3A2jREzJ-LTQAAACA"]
[Thu Jul 30 14:52:54.326585 2026] [ssl:error] [pid 3538830:tid 3538830] (70014)End of file found: [client 216.73.216.199:64257] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:56.318927 2026] [ssl:error] [pid 3558991:tid 3558991] (EAI 2)Name or service not known: [client 144.76.19.72:19476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:56.318957 2026] [ssl:error] [pid 3558991:tid 3558991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:56.374146 2026] [ssl:error] [pid 3562591:tid 3562591] (EAI 2)Name or service not known: [client 144.76.19.72:19490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:56.374186 2026] [ssl:error] [pid 3562591:tid 3562591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:57.960528 2026] [ssl:error] [pid 3561759:tid 3561759] (70014)End of file found: [client 216.73.216.199:1800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:52:59.473024 2026] [ssl:error] [pid 3560383:tid 3560383] (EAI 2)Name or service not known: [client 144.76.19.72:19500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:59.473061 2026] [ssl:error] [pid 3560383:tid 3560383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:59.529036 2026] [ssl:error] [pid 3562586:tid 3562586] (EAI 2)Name or service not known: [client 144.76.19.72:19512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:52:59.529080 2026] [ssl:error] [pid 3562586:tid 3562586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:52:59.690614 2026] [authz_core:error] [pid 3537597:tid 3537597] [client 146.70.194.246:49318] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/html-api/error_log
[Thu Jul 30 14:52:59.778625 2026] [ssl:error] [pid 3562550:tid 3562550] (70014)End of file found: [client 216.73.216.199:21197] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:00.075686 2026] [security2:error] [pid 3555057:tid 3555057] [client 216.73.216.199:24503] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/global_php.ini"] [unique_id "amtXPEVFKhdCAKEEfbCGGAAAACI"]
[Thu Jul 30 14:53:00.075974 2026] [security2:error] [pid 3555057:tid 3555057] [client 216.73.216.199:24503] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/global_php.ini"] [unique_id "amtXPEVFKhdCAKEEfbCGGAAAACI"]
[Thu Jul 30 14:53:00.076228 2026] [security2:error] [pid 3555057:tid 3555057] [client 216.73.216.199:24503] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/global_php.ini"] [unique_id "amtXPEVFKhdCAKEEfbCGGAAAACI"]
[Thu Jul 30 14:53:01.222491 2026] [access_compat:error] [pid 3556972:tid 3556972] [client 45.158.164.139:37874] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:53:01.885425 2026] [ssl:error] [pid 3555057:tid 3555057] (70014)End of file found: [client 216.73.216.199:24503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:02.503276 2026] [security2:error] [pid 3564687:tid 3564687] [client 185.191.171.10:55482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9280.0/prev_next,next.html"] [unique_id "amtXPgKN6_e37_1zVp1dWwAAACo"]
[Thu Jul 30 14:53:02.621122 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:55600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:02.621157 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:02.678111 2026] [ssl:error] [pid 3549919:tid 3549919] (EAI 2)Name or service not known: [client 144.76.19.72:55614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:02.678144 2026] [ssl:error] [pid 3549919:tid 3549919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:03.209202 2026] [ssl:error] [pid 3564687:tid 3564687] (70014)End of file found: [client 216.73.216.199:28629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:03.510651 2026] [ssl:error] [pid 3559102:tid 3559102] (70014)End of file found: [client 216.73.216.199:40896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:04.859377 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/991176.php
[Thu Jul 30 14:53:04.938617 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 146.70.194.246:48008] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/interactivity-api/error_log
[Thu Jul 30 14:53:05.320500 2026] [ssl:error] [pid 3560335:tid 3560335] (70014)End of file found: [client 216.73.216.199:37721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:05.482015 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/adminfuns.php
[Thu Jul 30 14:53:05.734327 2026] [ssl:error] [pid 3559094:tid 3559094] (EAI 2)Name or service not known: [client 144.76.19.72:55616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:05.734355 2026] [ssl:error] [pid 3559094:tid 3559094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:05.851402 2026] [ssl:error] [pid 3558991:tid 3558991] (EAI 2)Name or service not known: [client 144.76.19.72:55630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:05.851436 2026] [ssl:error] [pid 3558991:tid 3558991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:06.144538 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/atomlib.php
[Thu Jul 30 14:53:06.762137 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/classsmtps.php
[Thu Jul 30 14:53:07.443533 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/content.php
[Thu Jul 30 14:53:07.933538 2026] [cgi:error] [pid 3562588:tid 3562588] [client 20.9.4.9:55628] AH02812: stderr from /home/horusw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:53:08.051658 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/doc.php
[Thu Jul 30 14:53:08.508699 2026] [cgi:error] [pid 3537597:tid 3537597] [client 20.9.4.9:55654] AH02812: stderr from /home/horusw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:53:08.942951 2026] [ssl:error] [pid 3559045:tid 3559045] (EAI 2)Name or service not known: [client 144.76.19.72:55644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:08.942986 2026] [ssl:error] [pid 3559045:tid 3559045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:08.999167 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:55650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:08.999200 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:09.286497 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/fond.php
[Thu Jul 30 14:53:09.297393 2026] [ssl:error] [pid 3556974:tid 3556974] (70014)End of file found: [client 216.73.216.199:49194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:09.916658 2026] [ssl:error] [pid 3559094:tid 3559094] (70014)End of file found: [client 216.73.216.199:7980] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:10.016547 2026] [core:error] [pid 3559045:tid 3559045] [client 66.249.66.45:39270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:53:10.016579 2026] [core:error] [pid 3559045:tid 3559045] [client 66.249.66.45:39270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:53:10.252906 2026] [authz_core:error] [pid 3563515:tid 3563515] [client 66.249.66.35:43570] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:53:10.255573 2026] [authz_core:error] [pid 3563515:tid 3563515] [client 66.249.66.35:43570] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:53:10.576903 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/license.php
[Thu Jul 30 14:53:11.243295 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/mariju.php
[Thu Jul 30 14:53:11.999367 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/moon.php
[Thu Jul 30 14:53:12.053904 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:47526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:12.053951 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:12.108868 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:47542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:12.108901 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:12.371045 2026] [security2:error] [pid 3564630:tid 3564630] [client 20.171.55.167:5305] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ezazz.dbstart.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtXSNws4Py13vJmqnWS9QAAACY"]
[Thu Jul 30 14:53:12.371262 2026] [security2:error] [pid 3564630:tid 3564630] [client 20.171.55.167:5305] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ezazz.dbstart.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtXSNws4Py13vJmqnWS9QAAACY"]
[Thu Jul 30 14:53:12.371394 2026] [security2:error] [pid 3564630:tid 3564630] [client 20.171.55.167:5305] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ezazz.dbstart.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtXSNws4Py13vJmqnWS9QAAACY"]
[Thu Jul 30 14:53:12.666338 2026] [ssl:error] [pid 3561650:tid 3561650] (70014)End of file found: [client 216.73.216.199:53030] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:13.287581 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/acme-challenge/sx.php
[Thu Jul 30 14:53:14.553553 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/amaxx.php
[Thu Jul 30 14:53:14.724730 2026] [core:error] [pid 3556915:tid 3556915] (13)Permission denied: [client 216.73.216.199:44227] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/dovecot/dovecot.conf.binary
[Thu Jul 30 14:53:14.804378 2026] [security2:error] [pid 3565479:tid 3565479] [client 105.105.85.244:48284] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXSvlv1uEZnCgX4kqM3AAAAC0"]
[Thu Jul 30 14:53:14.804458 2026] [security2:error] [pid 3565479:tid 3565479] [client 105.105.85.244:48284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXSvlv1uEZnCgX4kqM3AAAAC0"]
[Thu Jul 30 14:53:14.804796 2026] [security2:error] [pid 3565479:tid 3565479] [client 105.105.85.244:48284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXSvlv1uEZnCgX4kqM3AAAAC0"]
[Thu Jul 30 14:53:15.173738 2026] [ssl:error] [pid 3559094:tid 3559094] (EAI 2)Name or service not known: [client 144.76.19.72:47546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:15.173787 2026] [ssl:error] [pid 3559094:tid 3559094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:15.231793 2026] [ssl:error] [pid 3563514:tid 3563514] (EAI 2)Name or service not known: [client 144.76.19.72:47562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:15.231836 2026] [ssl:error] [pid 3563514:tid 3563514] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:15.289596 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/bek.php
[Thu Jul 30 14:53:15.398801 2026] [security2:error] [pid 3556915:tid 3556915] [client 216.73.216.199:44227] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/authselect/default/minimal/nsswitch.conf"] [unique_id "amtXS1Okf8q5ouKmFGUwcAAAAC8"]
[Thu Jul 30 14:53:15.399039 2026] [security2:error] [pid 3556915:tid 3556915] [client 216.73.216.199:44227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/authselect/default/minimal/nsswitch.conf"] [unique_id "amtXS1Okf8q5ouKmFGUwcAAAAC8"]
[Thu Jul 30 14:53:15.399257 2026] [security2:error] [pid 3556915:tid 3556915] [client 216.73.216.199:44227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/authselect/default/minimal/nsswitch.conf"] [unique_id "amtXS1Okf8q5ouKmFGUwcAAAAC8"]
[Thu Jul 30 14:53:15.994514 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/caches.php.suspected
[Thu Jul 30 14:53:16.619104 2026] [core:error] [pid 3556915:tid 3556915] (13)Permission denied: [client 216.73.216.199:44227] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/sections/__ksymtab
[Thu Jul 30 14:53:16.689316 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/class.api.php
[Thu Jul 30 14:53:17.307772 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/cong.php
[Thu Jul 30 14:53:17.523195 2026] [ssl:error] [pid 3556915:tid 3556915] (70014)End of file found: [client 216.73.216.199:44227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:17.974226 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/content.php
[Thu Jul 30 14:53:18.058445 2026] [security2:error] [pid 3549919:tid 3549919] [client 181.46.136.229:27176] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXTjff-z734_jG5etyhAAAAAg"]
[Thu Jul 30 14:53:18.058497 2026] [security2:error] [pid 3549919:tid 3549919] [client 181.46.136.229:27176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXTjff-z734_jG5etyhAAAAAg"]
[Thu Jul 30 14:53:18.058729 2026] [security2:error] [pid 3549919:tid 3549919] [client 181.46.136.229:27176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXTjff-z734_jG5etyhAAAAAg"]
[Thu Jul 30 14:53:18.284164 2026] [ssl:error] [pid 3562512:tid 3562512] (EAI 2)Name or service not known: [client 144.76.19.72:47574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:18.284196 2026] [ssl:error] [pid 3562512:tid 3562512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:18.339789 2026] [ssl:error] [pid 3565480:tid 3565480] (EAI 2)Name or service not known: [client 144.76.19.72:47576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:18.339822 2026] [ssl:error] [pid 3565480:tid 3565480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:18.658830 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/cwianpri.php
[Thu Jul 30 14:53:19.301640 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/elp.php
[Thu Jul 30 14:53:19.908160 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 68.221.186.136:14244] AH01797: client denied by server configuration: /home/thepryor/public_html/.well-known/kwggvpup.php
[Thu Jul 30 14:53:20.531251 2026] [ssl:error] [pid 3556974:tid 3556974] (70014)End of file found: [client 216.73.216.199:58682] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:20.567889 2026] [security2:error] [pid 3542492:tid 3542492] [client 113.182.102.214:34024] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXUMfoVC8fFEBzzy18KAAAAAk"]
[Thu Jul 30 14:53:20.567956 2026] [security2:error] [pid 3542492:tid 3542492] [client 113.182.102.214:34024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXUMfoVC8fFEBzzy18KAAAAAk"]
[Thu Jul 30 14:53:20.568265 2026] [security2:error] [pid 3542492:tid 3542492] [client 113.182.102.214:34024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXUMfoVC8fFEBzzy18KAAAAAk"]
[Thu Jul 30 14:53:20.880425 2026] [security2:error] [pid 3561759:tid 3561759] [client 114.119.150.34:53715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amtXUJl9adPWvGfNUkOGMgAAAAM"], referer: https://georgehotelofstamford.com/robots.txt
[Thu Jul 30 14:53:21.396724 2026] [ssl:error] [pid 3555057:tid 3555057] (EAI 2)Name or service not known: [client 144.76.19.72:65076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:21.396772 2026] [ssl:error] [pid 3555057:tid 3555057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:21.448565 2026] [ssl:error] [pid 3562552:tid 3562552] (EAI 2)Name or service not known: [client 144.76.19.72:65078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:21.448595 2026] [ssl:error] [pid 3562552:tid 3562552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:22.614363 2026] [security2:error] [pid 3562551:tid 3562551] [client 114.119.150.34:53721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtXUsMW31uBWuOvN4TRvQAAABg"], referer: https://georgehotelofstamford.com/robots.txt
[Thu Jul 30 14:53:22.956276 2026] [core:error] [pid 3560335:tid 3560335] (13)Permission denied: [client 216.73.216.199:45967] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:47/subsystem/ttyS0/uartclk
[Thu Jul 30 14:53:23.561530 2026] [core:error] [pid 3560335:tid 3560335] (13)Permission denied: [client 216.73.216.199:45967] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/cpu_slabs
[Thu Jul 30 14:53:24.503669 2026] [ssl:error] [pid 3559094:tid 3559094] (EAI 2)Name or service not known: [client 144.76.19.72:65082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:24.503702 2026] [ssl:error] [pid 3559094:tid 3559094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:24.567889 2026] [ssl:error] [pid 3559094:tid 3559094] (EAI 2)Name or service not known: [client 144.76.19.72:65086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:24.567929 2026] [ssl:error] [pid 3559094:tid 3559094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:24.708046 2026] [authz_core:error] [pid 3562588:tid 3562588] [client 20.9.4.9:55628] AH01630: client denied by server configuration: /home/horusw/public_html/php.ini
[Thu Jul 30 14:53:24.762983 2026] [core:error] [pid 3560335:tid 3560335] (13)Permission denied: [client 216.73.216.199:45967] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/exim_paniclog
[Thu Jul 30 14:53:25.291091 2026] [authz_core:error] [pid 3537597:tid 3537597] [client 20.9.4.9:55654] AH01630: client denied by server configuration: /home/horusw/public_html/php.ini
[Thu Jul 30 14:53:27.506927 2026] [ssl:error] [pid 3560335:tid 3560335] (70014)End of file found: [client 216.73.216.199:45967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:27.628606 2026] [ssl:error] [pid 3556974:tid 3556974] (EAI 2)Name or service not known: [client 144.76.19.72:65098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:27.628640 2026] [ssl:error] [pid 3556974:tid 3556974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:27.686049 2026] [ssl:error] [pid 3564687:tid 3564687] (EAI 2)Name or service not known: [client 144.76.19.72:65112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:27.686101 2026] [ssl:error] [pid 3564687:tid 3564687] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:29.028395 2026] [ssl:error] [pid 3561650:tid 3561650] (70014)End of file found: [client 216.73.216.199:2613] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:30.741396 2026] [ssl:error] [pid 3559102:tid 3559102] (EAI 2)Name or service not known: [client 144.76.19.72:46416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:30.741449 2026] [ssl:error] [pid 3559102:tid 3559102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:30.794606 2026] [ssl:error] [pid 3537339:tid 3537339] (EAI 2)Name or service not known: [client 144.76.19.72:46424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:30.794631 2026] [ssl:error] [pid 3537339:tid 3537339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:32.066816 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:49477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:33.850564 2026] [ssl:error] [pid 3565479:tid 3565479] (EAI 2)Name or service not known: [client 144.76.19.72:46430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:33.850604 2026] [ssl:error] [pid 3565479:tid 3565479] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:33.906708 2026] [ssl:error] [pid 3551095:tid 3551095] (EAI 2)Name or service not known: [client 144.76.19.72:46436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:33.906755 2026] [ssl:error] [pid 3551095:tid 3551095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:34.010948 2026] [ssl:error] [pid 3559102:tid 3559102] (70014)End of file found: [client 216.73.216.199:46663] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:34.142897 2026] [ssl:error] [pid 3563471:tid 3563471] (70014)End of file found: [client 216.73.216.199:6941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:34.446267 2026] [ssl:error] [pid 3560335:tid 3560335] (70014)End of file found: [client 216.73.216.199:34079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:36.963389 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:46442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:36.963426 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:37.017519 2026] [ssl:error] [pid 3561650:tid 3561650] (EAI 2)Name or service not known: [client 144.76.19.72:46450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:37.017552 2026] [ssl:error] [pid 3561650:tid 3561650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:39.984532 2026] [ssl:error] [pid 3559102:tid 3559102] (70014)End of file found: [client 216.73.216.199:49054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:40.095655 2026] [ssl:error] [pid 3566008:tid 3566008] (EAI 2)Name or service not known: [client 144.76.19.72:33760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:40.095691 2026] [ssl:error] [pid 3566008:tid 3566008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:40.170369 2026] [ssl:error] [pid 3560493:tid 3560493] (EAI 2)Name or service not known: [client 144.76.19.72:33772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:40.170408 2026] [ssl:error] [pid 3560493:tid 3560493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:40.218928 2026] [ssl:error] [pid 3559094:tid 3559094] (70014)End of file found: [client 216.73.216.199:13224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:40.732127 2026] [ssl:error] [pid 3566009:tid 3566009] (70014)End of file found: [client 216.73.216.199:14621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:43.247486 2026] [ssl:error] [pid 3563515:tid 3563515] (EAI 2)Name or service not known: [client 144.76.19.72:33780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:43.247528 2026] [ssl:error] [pid 3563515:tid 3563515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:43.302504 2026] [ssl:error] [pid 3561650:tid 3561650] (EAI 2)Name or service not known: [client 144.76.19.72:33782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:43.302548 2026] [ssl:error] [pid 3561650:tid 3561650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:46.309462 2026] [security2:error] [pid 3562552:tid 3562552] [client 114.119.146.111:36805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~14,18,30/request_format~html"] [unique_id "amtXaujuexYsczkKIfy7IgAAABs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~14,18,30,19/request_format~html
[Thu Jul 30 14:53:46.390607 2026] [ssl:error] [pid 3566009:tid 3566009] (EAI 2)Name or service not known: [client 144.76.19.72:33790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:46.390652 2026] [ssl:error] [pid 3566009:tid 3566009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:46.447609 2026] [ssl:error] [pid 3556974:tid 3556974] (EAI 2)Name or service not known: [client 144.76.19.72:33796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:46.447646 2026] [ssl:error] [pid 3556974:tid 3556974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:47.171807 2026] [ssl:error] [pid 3555057:tid 3555057] (70014)End of file found: [client 216.73.216.199:56283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:48.230941 2026] [security2:error] [pid 3562475:tid 3562475] [client 114.119.146.111:36807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574553600/cat_ids~14,18,30/request_format~html"] [unique_id "amtXbPLhe7F7BPmnalyyzwAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~14,18,30,19/request_format~html
[Thu Jul 30 14:53:49.504514 2026] [ssl:error] [pid 3562585:tid 3562585] (EAI 2)Name or service not known: [client 144.76.19.72:33806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:49.504548 2026] [ssl:error] [pid 3562585:tid 3562585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:49.564530 2026] [ssl:error] [pid 3566009:tid 3566009] (EAI 2)Name or service not known: [client 144.76.19.72:35256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:49.564564 2026] [ssl:error] [pid 3566009:tid 3566009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:50.552850 2026] [security2:error] [pid 3566009:tid 3566009] [client 43.159.143.187:56720] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "p2studio.co.uk"] [uri "/"] [unique_id "amtXbqC2TICnKArz2rhCHwAAADY"]
[Thu Jul 30 14:53:50.791579 2026] [ssl:error] [pid 3566719:tid 3566719] (70014)End of file found: [client 216.73.216.199:19882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:51.093204 2026] [ssl:error] [pid 3559102:tid 3559102] (70014)End of file found: [client 216.73.216.199:35300] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:51.478044 2026] [security2:error] [pid 3564686:tid 3564686] [client 94.154.43.177:40570] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/.env"] [unique_id "amtXbygFyJ2GKq9yT-7nvAAAACk"]
[Thu Jul 30 14:53:51.478271 2026] [security2:error] [pid 3564686:tid 3564686] [client 94.154.43.177:40570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/.env"] [unique_id "amtXbygFyJ2GKq9yT-7nvAAAACk"]
[Thu Jul 30 14:53:51.573866 2026] [security2:error] [pid 3566009:tid 3566009] [client 94.154.43.229:21744] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.env"] [unique_id "amtXb6C2TICnKArz2rhCIQAAADY"]
[Thu Jul 30 14:53:51.574057 2026] [security2:error] [pid 3566009:tid 3566009] [client 94.154.43.229:21744] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.env"] [unique_id "amtXb6C2TICnKArz2rhCIQAAADY"]
[Thu Jul 30 14:53:51.905510 2026] [security2:error] [pid 3564686:tid 3564686] [client 94.154.43.177:40570] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/index.php"] [unique_id "amtXbygFyJ2GKq9yT-7nvAAAACk"]
[Thu Jul 30 14:53:52.294307 2026] [security2:error] [pid 3566009:tid 3566009] [client 94.154.43.229:21744] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/index.php"] [unique_id "amtXb6C2TICnKArz2rhCIQAAADY"]
[Thu Jul 30 14:53:52.600915 2026] [security2:error] [pid 3555057:tid 3555057] [client 216.73.216.199:57873] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysctl.d/50-pid-max.conf"] [unique_id "amtXcEVFKhdCAKEEfbCGPwAAACI"]
[Thu Jul 30 14:53:52.601244 2026] [security2:error] [pid 3555057:tid 3555057] [client 216.73.216.199:57873] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysctl.d/50-pid-max.conf"] [unique_id "amtXcEVFKhdCAKEEfbCGPwAAACI"]
[Thu Jul 30 14:53:52.601501 2026] [security2:error] [pid 3555057:tid 3555057] [client 216.73.216.199:57873] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysctl.d/50-pid-max.conf"] [unique_id "amtXcEVFKhdCAKEEfbCGPwAAACI"]
[Thu Jul 30 14:53:52.618944 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:35260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:52.618965 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:52.671623 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:35262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:52.671650 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:53.058647 2026] [security2:error] [pid 3562551:tid 3562551] [client 43.157.170.126:53532] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amtXccMW31uBWuOvN4TRygAAABg"]
[Thu Jul 30 14:53:53.126220 2026] [security2:error] [pid 3560489:tid 3560489] [client 85.208.96.199:36300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/robert-sinclair-obituary"] [unique_id "amtXcTPTPv0V7YGEPzlzQwAAADE"]
[Thu Jul 30 14:53:53.503588 2026] [ssl:error] [pid 3555057:tid 3555057] (70014)End of file found: [client 216.73.216.199:57873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:54.389856 2026] [security2:error] [pid 3556974:tid 3556974] [client 94.154.43.179:16474] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "annasmithagent.com"] [uri "/.env"] [unique_id "amtXch1Wtm_QeuwkmeJVpgAAADQ"]
[Thu Jul 30 14:53:54.390048 2026] [security2:error] [pid 3556974:tid 3556974] [client 94.154.43.179:16474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "annasmithagent.com"] [uri "/.env"] [unique_id "amtXch1Wtm_QeuwkmeJVpgAAADQ"]
[Thu Jul 30 14:53:54.390270 2026] [security2:error] [pid 3556974:tid 3556974] [client 94.154.43.179:16474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "annasmithagent.com"] [uri "/.env"] [unique_id "amtXch1Wtm_QeuwkmeJVpgAAADQ"]
[Thu Jul 30 14:53:55.728562 2026] [ssl:error] [pid 3559046:tid 3559046] (EAI 2)Name or service not known: [client 144.76.19.72:35268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:55.728597 2026] [ssl:error] [pid 3559046:tid 3559046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:55.781791 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:35278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:55.781820 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:56.104838 2026] [ssl:error] [pid 3562510:tid 3562510] (70014)End of file found: [client 216.73.216.199:29059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:53:58.844545 2026] [ssl:error] [pid 3555057:tid 3555057] (EAI 2)Name or service not known: [client 144.76.19.72:35282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:58.844579 2026] [ssl:error] [pid 3555057:tid 3555057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:58.898875 2026] [ssl:error] [pid 3566685:tid 3566685] (EAI 2)Name or service not known: [client 144.76.19.72:35288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:53:58.898930 2026] [ssl:error] [pid 3566685:tid 3566685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:53:59.011941 2026] [access_compat:error] [pid 3562589:tid 3562589] [client 45.158.164.139:45310] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:53:59.529381 2026] [ssl:error] [pid 3562551:tid 3562551] (70014)End of file found: [client 216.73.216.199:21793] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:01.024848 2026] [ssl:error] [pid 3566685:tid 3566685] (70014)End of file found: [client 216.73.216.199:5476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:01.960739 2026] [ssl:error] [pid 3563956:tid 3563956] (EAI 2)Name or service not known: [client 144.76.19.72:22030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:01.960777 2026] [ssl:error] [pid 3563956:tid 3563956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:02.017231 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:22040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:02.017258 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:02.228196 2026] [core:error] [pid 3562589:tid 3562589] (13)Permission denied: [client 216.73.216.199:64254] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/ftpd-ca.pem
[Thu Jul 30 14:54:05.074690 2026] [ssl:error] [pid 3567885:tid 3567885] (EAI 2)Name or service not known: [client 144.76.19.72:22042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:05.074731 2026] [ssl:error] [pid 3567885:tid 3567885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:05.106134 2026] [security2:error] [pid 3559046:tid 3559046] [client 147.182.149.75:56996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env"] [unique_id "amtXfUZaBTV9FAghz1VtTAAAABo"]
[Thu Jul 30 14:54:05.106320 2026] [security2:error] [pid 3559046:tid 3559046] [client 147.182.149.75:56996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env"] [unique_id "amtXfUZaBTV9FAghz1VtTAAAABo"]
[Thu Jul 30 14:54:05.128099 2026] [ssl:error] [pid 3549919:tid 3549919] (EAI 2)Name or service not known: [client 144.76.19.72:22052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:05.128130 2026] [ssl:error] [pid 3549919:tid 3549919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:05.252007 2026] [security2:error] [pid 3559046:tid 3559046] [client 147.182.149.75:56996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amtXfUZaBTV9FAghz1VtTAAAABo"]
[Thu Jul 30 14:54:06.178486 2026] [security2:error] [pid 3567988:tid 3567988] [client 114.119.128.44:20045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amtXfvfZVVqWn1wbi6ar9gAAAA0"], referer: https://first-grade.co.uk/robots.txt
[Thu Jul 30 14:54:06.475042 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 146.70.194.246:59926] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/l10n/error_log
[Thu Jul 30 14:54:06.730297 2026] [security2:error] [pid 3549919:tid 3549919] [client 47.128.55.55:26418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/robots.txt"] [unique_id "amtXfjff-z734_jG5etzAAAAAAg"]
[Thu Jul 30 14:54:06.743945 2026] [ssl:error] [pid 3562589:tid 3562589] (70014)End of file found: [client 216.73.216.199:64254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:08.184656 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:22064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:08.184692 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:08.240586 2026] [ssl:error] [pid 3567634:tid 3567634] (EAI 2)Name or service not known: [client 144.76.19.72:22070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:08.240619 2026] [ssl:error] [pid 3567634:tid 3567634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:08.247970 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:19862] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/protected.d/sudo.conf"] [unique_id "amtXgPfZVVqWn1wbi6ar_AAAAA0"]
[Thu Jul 30 14:54:08.248220 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:19862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/protected.d/sudo.conf"] [unique_id "amtXgPfZVVqWn1wbi6ar_AAAAA0"]
[Thu Jul 30 14:54:08.248464 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:19862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/protected.d/sudo.conf"] [unique_id "amtXgPfZVVqWn1wbi6ar_AAAAA0"]
[Thu Jul 30 14:54:08.550157 2026] [ssl:error] [pid 3567988:tid 3567988] (70014)End of file found: [client 216.73.216.199:19862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:09.129148 2026] [security2:error] [pid 3560487:tid 3560487] [client 147.182.149.75:43742] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.git/config"] [unique_id "amtXgTFbw1PNZFrewd2qzQAAACQ"]
[Thu Jul 30 14:54:09.129344 2026] [security2:error] [pid 3560487:tid 3560487] [client 147.182.149.75:43742] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.git/config"] [unique_id "amtXgTFbw1PNZFrewd2qzQAAACQ"]
[Thu Jul 30 14:54:09.270798 2026] [security2:error] [pid 3560487:tid 3560487] [client 147.182.149.75:43742] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amtXgTFbw1PNZFrewd2qzQAAACQ"]
[Thu Jul 30 14:54:09.380286 2026] [security2:error] [pid 3559102:tid 3559102] [client 74.7.243.192:41034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.social.thecameramonkey.co.uk"] [uri "/"] [unique_id "amtXgV87TvVFEKlE77UeUgAAADs"]
[Thu Jul 30 14:54:10.071933 2026] [ssl:error] [pid 3556972:tid 3556972] (70014)End of file found: [client 216.73.216.199:7912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:11.297323 2026] [ssl:error] [pid 3560383:tid 3560383] (EAI 2)Name or service not known: [client 144.76.19.72:22952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:11.297352 2026] [ssl:error] [pid 3560383:tid 3560383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:11.352216 2026] [ssl:error] [pid 3560335:tid 3560335] (EAI 2)Name or service not known: [client 144.76.19.72:22958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:11.352245 2026] [ssl:error] [pid 3560335:tid 3560335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:11.545126 2026] [authz_core:error] [pid 3565723:tid 3565723] [client 146.70.194.246:42346] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 14:54:11.610640 2026] [security2:error] [pid 3564686:tid 3564686] [client 94.154.43.177:33456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "quantum.com.mt"] [uri "/.env"] [unique_id "amtXgygFyJ2GKq9yT-7nwgAAACk"]
[Thu Jul 30 14:54:11.610826 2026] [security2:error] [pid 3564686:tid 3564686] [client 94.154.43.177:33456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "quantum.com.mt"] [uri "/.env"] [unique_id "amtXgygFyJ2GKq9yT-7nwgAAACk"]
[Thu Jul 30 14:54:11.611033 2026] [security2:error] [pid 3564686:tid 3564686] [client 94.154.43.177:33456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "quantum.com.mt"] [uri "/.env"] [unique_id "amtXgygFyJ2GKq9yT-7nwgAAACk"]
[Thu Jul 30 14:54:12.600934 2026] [authz_core:error] [pid 3563515:tid 3563515] [client 146.70.194.246:64918] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 14:54:14.424772 2026] [ssl:error] [pid 3560489:tid 3560489] (EAI 2)Name or service not known: [client 144.76.19.72:22968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:14.424823 2026] [ssl:error] [pid 3560489:tid 3560489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:14.535271 2026] [ssl:error] [pid 3562585:tid 3562585] (EAI 2)Name or service not known: [client 144.76.19.72:22974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:14.535299 2026] [ssl:error] [pid 3562585:tid 3562585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:15.183941 2026] [ssl:error] [pid 3565479:tid 3565479] (70014)End of file found: [client 216.73.216.199:51066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:15.484827 2026] [ssl:error] [pid 3564686:tid 3564686] (70014)End of file found: [client 216.73.216.199:7926] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:15.966764 2026] [security2:error] [pid 3565421:tid 3565421] [client 43.133.66.51:59462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/abilities-api/"] [unique_id "amtXhwxraSSX7jgFNEgvJgAAAAU"]
[Thu Jul 30 14:54:16.689575 2026] [ssl:error] [pid 3565955:tid 3565955] (70014)End of file found: [client 216.73.216.199:46904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:17.575611 2026] [authz_core:error] [pid 3562475:tid 3562475] [client 146.70.194.246:34084] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 14:54:17.650004 2026] [ssl:error] [pid 3562588:tid 3562588] (EAI 2)Name or service not known: [client 144.76.19.72:22976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:17.650028 2026] [ssl:error] [pid 3562588:tid 3562588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:17.705826 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:22984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:17.705863 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:18.323594 2026] [security2:error] [pid 3566515:tid 3566515] [client 147.182.149.75:43862] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/trace.axd"] [unique_id "amtXilZsZxcW6m-8vXKNuwAAAAA"]
[Thu Jul 30 14:54:18.323858 2026] [security2:error] [pid 3566515:tid 3566515] [client 147.182.149.75:43862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/trace.axd"] [unique_id "amtXilZsZxcW6m-8vXKNuwAAAAA"]
[Thu Jul 30 14:54:18.465080 2026] [security2:error] [pid 3566515:tid 3566515] [client 147.182.149.75:43862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amtXilZsZxcW6m-8vXKNuwAAAAA"]
[Thu Jul 30 14:54:18.480866 2026] [authz_core:error] [pid 3562589:tid 3562589] [client 66.249.66.35:60373] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:54:18.483520 2026] [authz_core:error] [pid 3562589:tid 3562589] [client 66.249.66.35:60373] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:54:18.590560 2026] [security2:error] [pid 3562549:tid 3562549] [client 8.211.19.182:32817] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXiuCqKR2zFqzbq83AaQAAABE"]
[Thu Jul 30 14:54:18.590608 2026] [security2:error] [pid 3562549:tid 3562549] [client 8.211.19.182:32817] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXiuCqKR2zFqzbq83AaQAAABE"]
[Thu Jul 30 14:54:18.590896 2026] [security2:error] [pid 3562549:tid 3562549] [client 8.211.19.182:32817] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXiuCqKR2zFqzbq83AaQAAABE"]
[Thu Jul 30 14:54:19.676691 2026] [authz_core:error] [pid 3556972:tid 3556972] [client 146.70.194.246:34122] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/search/error_log
[Thu Jul 30 14:54:20.766131 2026] [ssl:error] [pid 3560383:tid 3560383] (EAI 2)Name or service not known: [client 144.76.19.72:27918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:20.766174 2026] [ssl:error] [pid 3560383:tid 3560383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:20.822732 2026] [ssl:error] [pid 3550192:tid 3550192] (EAI 2)Name or service not known: [client 144.76.19.72:27932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:20.822766 2026] [ssl:error] [pid 3550192:tid 3550192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:22.084380 2026] [security2:error] [pid 3548331:tid 3548331] [client 88.236.103.252:34496] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXjnLtHPq2oTbc8eUWwAAAABI"]
[Thu Jul 30 14:54:22.084479 2026] [security2:error] [pid 3548331:tid 3548331] [client 88.236.103.252:34496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXjnLtHPq2oTbc8eUWwAAAABI"]
[Thu Jul 30 14:54:22.084896 2026] [security2:error] [pid 3548331:tid 3548331] [client 88.236.103.252:34496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXjnLtHPq2oTbc8eUWwAAAABI"]
[Thu Jul 30 14:54:22.252819 2026] [authz_core:error] [pid 3562475:tid 3562475] [client 146.70.194.246:43774] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 14:54:22.432630 2026] [ssl:error] [pid 3565955:tid 3565955] (70014)End of file found: [client 216.73.216.199:22031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:23.073575 2026] [authz_core:error] [pid 3569021:tid 3569021] [client 66.249.66.33:38516] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:54:23.076515 2026] [authz_core:error] [pid 3569021:tid 3569021] [client 66.249.66.33:38516] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:54:23.138050 2026] [core:error] [pid 3568970:tid 3568970] (13)Permission denied: [client 216.73.216.199:22923] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS0/uartclk
[Thu Jul 30 14:54:23.439907 2026] [ssl:error] [pid 3568970:tid 3568970] (70014)End of file found: [client 216.73.216.199:22923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:23.735593 2026] [core:error] [pid 3563956:tid 3563956] (13)Permission denied: [client 216.73.216.199:57833] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup9/device/physical_node/resource1
[Thu Jul 30 14:54:23.881535 2026] [ssl:error] [pid 3560489:tid 3560489] (EAI 2)Name or service not known: [client 144.76.19.72:27942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:23.881566 2026] [ssl:error] [pid 3560489:tid 3560489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:23.938772 2026] [ssl:error] [pid 3560487:tid 3560487] (EAI 2)Name or service not known: [client 144.76.19.72:27952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:23.938806 2026] [ssl:error] [pid 3560487:tid 3560487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:24.493444 2026] [authz_core:error] [pid 3562475:tid 3562475] [client 146.70.194.246:49948] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 14:54:25.844412 2026] [ssl:error] [pid 3563956:tid 3563956] (70014)End of file found: [client 216.73.216.199:57833] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:25.993057 2026] [authz_core:error] [pid 3567213:tid 3567213] [client 146.70.194.246:43810] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/error_log
[Thu Jul 30 14:54:26.978248 2026] [authz_core:error] [pid 3560489:tid 3560489] [client 146.70.194.246:43818] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/error_log
[Thu Jul 30 14:54:26.994163 2026] [ssl:error] [pid 3568093:tid 3568093] (EAI 2)Name or service not known: [client 144.76.19.72:27968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:26.994196 2026] [ssl:error] [pid 3568093:tid 3568093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:27.050339 2026] [ssl:error] [pid 3560487:tid 3560487] (EAI 2)Name or service not known: [client 144.76.19.72:27976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:27.050381 2026] [ssl:error] [pid 3560487:tid 3560487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:27.484768 2026] [cgi:error] [pid 3566719:tid 3566719] [client 172.213.208.20:15552] AH02812: stderr from /home/tomhackn/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:54:28.072950 2026] [authz_core:error] [pid 3568093:tid 3568093] [client 146.70.194.246:61376] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/ChaCha20/error_log
[Thu Jul 30 14:54:28.346857 2026] [security2:error] [pid 3564686:tid 3564686] [client 176.29.15.107:21285] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXlCgFyJ2GKq9yT-7nzAAAACk"]
[Thu Jul 30 14:54:28.346918 2026] [security2:error] [pid 3564686:tid 3564686] [client 176.29.15.107:21285] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXlCgFyJ2GKq9yT-7nzAAAACk"]
[Thu Jul 30 14:54:28.347192 2026] [security2:error] [pid 3564686:tid 3564686] [client 176.29.15.107:21285] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXlCgFyJ2GKq9yT-7nzAAAACk"]
[Thu Jul 30 14:54:28.865020 2026] [core:error] [pid 3560489:tid 3560489] (13)Permission denied: [client 216.73.216.199:51067] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/drm/holders/cirrus/sections/__bug_table
[Thu Jul 30 14:54:29.193237 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 146.70.194.246:43842] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/Curve25519/error_log
[Thu Jul 30 14:54:29.272955 2026] [ssl:error] [pid 3560489:tid 3560489] (70014)End of file found: [client 216.73.216.199:51067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:29.773403 2026] [ssl:error] [pid 3568970:tid 3568970] (70014)End of file found: [client 216.73.216.199:12282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:30.074629 2026] [ssl:error] [pid 3567213:tid 3567213] (70014)End of file found: [client 216.73.216.199:22316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:30.106658 2026] [ssl:error] [pid 3565421:tid 3565421] (EAI 2)Name or service not known: [client 144.76.19.72:20220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:30.106693 2026] [ssl:error] [pid 3565421:tid 3565421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:30.164550 2026] [ssl:error] [pid 3567885:tid 3567885] (EAI 2)Name or service not known: [client 144.76.19.72:20226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:30.164580 2026] [ssl:error] [pid 3567885:tid 3567885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:30.173483 2026] [authz_core:error] [pid 3542492:tid 3542492] [client 146.70.194.246:43846] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/error_log
[Thu Jul 30 14:54:32.075662 2026] [authz_core:error] [pid 3537597:tid 3537597] [client 146.70.194.246:35866] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/Poly1305/error_log
[Thu Jul 30 14:54:32.427051 2026] [security2:error] [pid 3566719:tid 3566719] [client 43.131.243.61:38096] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.halmanninvestments.com"] [uri "/"] [unique_id "amtXmKbB590Gdw0xvoclfwAAABc"]
[Thu Jul 30 14:54:33.219749 2026] [ssl:error] [pid 3566719:tid 3566719] (EAI 2)Name or service not known: [client 144.76.19.72:20242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:33.219792 2026] [ssl:error] [pid 3566719:tid 3566719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:33.279749 2026] [ssl:error] [pid 3559046:tid 3559046] (EAI 2)Name or service not known: [client 144.76.19.72:20252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:33.279775 2026] [ssl:error] [pid 3559046:tid 3559046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:33.402322 2026] [core:error] [pid 3559046:tid 3559046] [client 66.249.66.8:46421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:54:33.402344 2026] [core:error] [pid 3559046:tid 3559046] [client 66.249.66.8:46421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:54:33.666427 2026] [authz_core:error] [pid 3559046:tid 3559046] [client 146.70.194.246:35948] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/error_log
[Thu Jul 30 14:54:34.656300 2026] [authz_core:error] [pid 3559046:tid 3559046] [client 146.70.194.246:35948] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 14:54:35.001995 2026] [ssl:error] [pid 3560487:tid 3560487] (70014)End of file found: [client 216.73.216.199:6032] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:35.296566 2026] [security2:error] [pid 3569516:tid 3569516] [client 185.191.171.2:28904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11549.0/prev_next,prev.html"] [unique_id "amtXm9yigUCjPxGyIO2APQAAAC8"]
[Thu Jul 30 14:54:35.617405 2026] [ssl:error] [pid 3556974:tid 3556974] (70014)End of file found: [client 216.73.216.199:41293] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:36.218155 2026] [ssl:error] [pid 3568970:tid 3568970] (70014)End of file found: [client 216.73.216.199:1196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:36.366965 2026] [ssl:error] [pid 3566008:tid 3566008] (EAI 2)Name or service not known: [client 144.76.19.72:20266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:36.366994 2026] [ssl:error] [pid 3566008:tid 3566008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:36.424260 2026] [ssl:error] [pid 3569474:tid 3569474] (EAI 2)Name or service not known: [client 144.76.19.72:20276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:36.424293 2026] [ssl:error] [pid 3569474:tid 3569474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:36.851409 2026] [authz_core:error] [pid 3569474:tid 3569474] [client 146.70.194.246:35956] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/AES/error_log
[Thu Jul 30 14:54:39.482982 2026] [ssl:error] [pid 3562592:tid 3562592] (EAI 2)Name or service not known: [client 144.76.19.72:20288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:39.483038 2026] [ssl:error] [pid 3562592:tid 3562592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:39.569272 2026] [authz_core:error] [pid 3566719:tid 3566719] [client 146.70.194.246:35980] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/ChaCha20/error_log
[Thu Jul 30 14:54:39.591593 2026] [ssl:error] [pid 3569420:tid 3569420] (EAI 2)Name or service not known: [client 144.76.19.72:28862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:39.591627 2026] [ssl:error] [pid 3569420:tid 3569420] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:40.673931 2026] [authz_core:error] [pid 3560487:tid 3560487] [client 146.70.194.246:36012] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/Curve25519/error_log
[Thu Jul 30 14:54:40.915079 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:53439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:41.929671 2026] [ssl:error] [pid 3562551:tid 3562551] (70014)End of file found: [client 216.73.216.199:28963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:42.423883 2026] [ssl:error] [pid 3567988:tid 3567988] (70014)End of file found: [client 216.73.216.199:11840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:42.649264 2026] [ssl:error] [pid 3567885:tid 3567885] (EAI 2)Name or service not known: [client 144.76.19.72:28876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:42.649292 2026] [ssl:error] [pid 3567885:tid 3567885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:42.704501 2026] [ssl:error] [pid 3565480:tid 3565480] (EAI 2)Name or service not known: [client 144.76.19.72:28890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:42.704530 2026] [ssl:error] [pid 3565480:tid 3565480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:43.599574 2026] [lsapi:warn] [pid 3542492:tid 3542492] [client 143.110.160.161:54328] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 14:54:43.599617 2026] [lsapi:warn] [pid 3542492:tid 3542492] [client 143.110.160.161:54328] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 14:54:43.880156 2026] [authz_core:error] [pid 3548331:tid 3548331] [client 146.70.194.246:56462] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/Poly1305/error_log
[Thu Jul 30 14:54:44.039091 2026] [security2:error] [pid 3562586:tid 3562586] [client 185.191.171.16:65324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8623.0/prev_next,next.html"] [unique_id "amtXpEe5YANLQFwdiUxAeAAAAB0"]
[Thu Jul 30 14:54:45.513391 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.191.171.2:26064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "brodie-engineering.co.uk"] [uri "/case-studies/class-334-major-refurbishment.html"] [unique_id "amtXpe8ppXJG7kyPz4fHwAAAACo"]
[Thu Jul 30 14:54:45.777046 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:28896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:45.777096 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:45.839617 2026] [ssl:error] [pid 3568970:tid 3568970] (EAI 2)Name or service not known: [client 144.76.19.72:28906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:45.839654 2026] [ssl:error] [pid 3568970:tid 3568970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:47.118993 2026] [authz_core:error] [pid 3569022:tid 3569022] [client 146.70.194.246:61466] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 14:54:47.382306 2026] [ssl:error] [pid 3561650:tid 3561650] (70014)End of file found: [client 216.73.216.199:9783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:47.968178 2026] [ssl:error] [pid 3556972:tid 3556972] (70014)End of file found: [client 216.73.216.199:40715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:48.151630 2026] [authz_core:error] [pid 3562551:tid 3562551] [client 146.70.194.246:56520] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/ChaCha20/error_log
[Thu Jul 30 14:54:48.166229 2026] [ssl:error] [pid 3569021:tid 3569021] (70014)End of file found: [client 216.73.216.199:20924] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:48.184847 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 66.249.66.33:51859] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:54:48.187553 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 66.249.66.33:51859] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:54:48.902605 2026] [ssl:error] [pid 3542492:tid 3542492] (EAI 2)Name or service not known: [client 144.76.19.72:28916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:48.902636 2026] [ssl:error] [pid 3542492:tid 3542492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:48.974375 2026] [ssl:error] [pid 3569516:tid 3569516] (EAI 2)Name or service not known: [client 144.76.19.72:28926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:48.974412 2026] [ssl:error] [pid 3569516:tid 3569516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:49.450740 2026] [authz_core:error] [pid 3565421:tid 3565421] [client 146.70.194.246:56548] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/Curve25519/error_log
[Thu Jul 30 14:54:51.125776 2026] [security2:error] [pid 3569516:tid 3569516] [client 47.128.24.238:17342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/translations.html"] [unique_id "amtXq9yigUCjPxGyIO2AQAAAAC8"]
[Thu Jul 30 14:54:51.952031 2026] [authz_core:error] [pid 3560487:tid 3560487] [client 146.70.194.246:50214] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/Poly1305/error_log
[Thu Jul 30 14:54:52.047228 2026] [ssl:error] [pid 3569517:tid 3569517] (EAI 2)Name or service not known: [client 144.76.19.72:30506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:52.047264 2026] [ssl:error] [pid 3569517:tid 3569517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:52.139569 2026] [ssl:error] [pid 3569474:tid 3569474] (EAI 2)Name or service not known: [client 144.76.19.72:30516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:52.139616 2026] [ssl:error] [pid 3569474:tid 3569474] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:52.720780 2026] [ssl:error] [pid 3566685:tid 3566685] (70014)End of file found: [client 216.73.216.199:15911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:53.309460 2026] [ssl:error] [pid 3538105:tid 3538105] (70014)End of file found: [client 216.73.216.199:44904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:53.971479 2026] [security2:error] [pid 3560487:tid 3560487] [client 185.191.171.18:12766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/david-hernandez-obituary"] [unique_id "amtXrTFbw1PNZFrewd2q7AAAACQ"]
[Thu Jul 30 14:54:54.040615 2026] [ssl:error] [pid 3569516:tid 3569516] (70014)End of file found: [client 216.73.216.199:20819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:54.961534 2026] [security2:error] [pid 3548331:tid 3548331] [client 170.106.180.153:46798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.broadbentandsmith.com"] [uri "/"] [unique_id "amtXrnLtHPq2oTbc8eUW0AAAABI"]
[Thu Jul 30 14:54:55.195153 2026] [ssl:error] [pid 3568093:tid 3568093] (EAI 2)Name or service not known: [client 144.76.19.72:30530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:55.195187 2026] [ssl:error] [pid 3568093:tid 3568093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:55.248210 2026] [ssl:error] [pid 3560487:tid 3560487] (EAI 2)Name or service not known: [client 144.76.19.72:30546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:55.248240 2026] [ssl:error] [pid 3560487:tid 3560487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:55.935479 2026] [security2:error] [pid 3556972:tid 3556972] [client 51.195.183.165:58030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.com"] [uri "/site/sitemap.xml"] [unique_id "amtXr0UxXX2oJrDYeMSXlwAAADI"]
[Thu Jul 30 14:54:56.977776 2026] [security2:error] [pid 3548331:tid 3548331] [client 170.106.180.153:54880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.broadbentandsmith.com"] [uri "/"] [unique_id "amtXsHLtHPq2oTbc8eUW0wAAABI"], referer: http://www.broadbentandsmith.com
[Thu Jul 30 14:54:57.031995 2026] [security2:error] [pid 3565723:tid 3565723] [client 85.208.96.210:48156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5712.0/prev_next,prev.html"] [unique_id "amtXseJ6BxiM6UEinrpR0wAAADM"]
[Thu Jul 30 14:54:57.390816 2026] [security2:error] [pid 3556972:tid 3556972] [client 47.128.60.83:64788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "minervamha.co.uk"] [uri "/robots.txt"] [unique_id "amtXsUUxXX2oJrDYeMSXmAAAADI"]
[Thu Jul 30 14:54:57.503039 2026] [authz_core:error] [pid 3565723:tid 3565723] [client 146.70.194.246:50314] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/theme-compat/error_log
[Thu Jul 30 14:54:58.176599 2026] [ssl:error] [pid 3566008:tid 3566008] (70014)End of file found: [client 216.73.216.199:56733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:58.303582 2026] [ssl:error] [pid 3569518:tid 3569518] (EAI 2)Name or service not known: [client 144.76.19.72:30548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:58.303614 2026] [ssl:error] [pid 3569518:tid 3569518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:58.357045 2026] [ssl:error] [pid 3563515:tid 3563515] (EAI 2)Name or service not known: [client 144.76.19.72:30556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:54:58.357091 2026] [ssl:error] [pid 3563515:tid 3563515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:54:59.273682 2026] [authz_core:error] [pid 3538105:tid 3538105] [client 146.70.194.246:50394] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/widgets/error_log
[Thu Jul 30 14:54:59.332409 2026] [ssl:error] [pid 3569420:tid 3569420] (70014)End of file found: [client 216.73.216.199:2811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:54:59.842225 2026] [ssl:error] [pid 3567885:tid 3567885] (70014)End of file found: [client 216.73.216.199:2791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:01.411567 2026] [ssl:error] [pid 3569021:tid 3569021] (EAI 2)Name or service not known: [client 144.76.19.72:65322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:01.411601 2026] [ssl:error] [pid 3569021:tid 3569021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:01.466738 2026] [ssl:error] [pid 3562588:tid 3562588] (EAI 2)Name or service not known: [client 144.76.19.72:65328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:01.466767 2026] [ssl:error] [pid 3562588:tid 3562588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:02.879296 2026] [access_compat:error] [pid 3542492:tid 3542492] [client 45.158.164.139:55330] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:55:04.101967 2026] [authz_core:error] [pid 3561650:tid 3561650] [client 66.249.66.34:43673] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:04.104630 2026] [authz_core:error] [pid 3561650:tid 3561650] [client 66.249.66.34:43673] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:04.478728 2026] [ssl:error] [pid 3569021:tid 3569021] (70014)End of file found: [client 216.73.216.199:44302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:04.524509 2026] [ssl:error] [pid 3562586:tid 3562586] (EAI 2)Name or service not known: [client 144.76.19.72:65330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:04.524540 2026] [ssl:error] [pid 3562586:tid 3562586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:04.580504 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:65340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:04.580549 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:05.373591 2026] [ssl:error] [pid 3569420:tid 3569420] (70014)End of file found: [client 216.73.216.199:64605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:05.887324 2026] [ssl:error] [pid 3571207:tid 3571207] (70014)End of file found: [client 216.73.216.199:28445] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:07.633883 2026] [ssl:error] [pid 3567885:tid 3567885] (EAI 2)Name or service not known: [client 144.76.19.72:65348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:07.633917 2026] [ssl:error] [pid 3567885:tid 3567885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:07.689754 2026] [ssl:error] [pid 3569516:tid 3569516] (EAI 2)Name or service not known: [client 144.76.19.72:65360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:07.689782 2026] [ssl:error] [pid 3569516:tid 3569516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:08.945792 2026] [security2:error] [pid 3569518:tid 3569518] [client 114.119.157.183:45035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574467200/cat_ids~17/request_format~html"] [unique_id "amtXvPRWFIxZVjYooS-JGgAAADc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574467200/cat_ids~17,15/request_format~html
[Thu Jul 30 14:55:10.439213 2026] [security2:error] [pid 3561650:tid 3561650] [client 114.119.157.183:49317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574467200/cat_ids~17/request_format~html"] [unique_id "amtXvk0ZzGsDgi8AfQ998QAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574467200/cat_ids~17,15/request_format~html
[Thu Jul 30 14:55:10.515216 2026] [ssl:error] [pid 3565723:tid 3565723] (70014)End of file found: [client 216.73.216.199:23623] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:10.745977 2026] [ssl:error] [pid 3562586:tid 3562586] (EAI 2)Name or service not known: [client 144.76.19.72:50514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:10.746003 2026] [ssl:error] [pid 3562586:tid 3562586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:10.804270 2026] [ssl:error] [pid 3569516:tid 3569516] (EAI 2)Name or service not known: [client 144.76.19.72:50530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:10.804298 2026] [ssl:error] [pid 3569516:tid 3569516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:11.016295 2026] [ssl:error] [pid 3569517:tid 3569517] (70014)End of file found: [client 216.73.216.199:26252] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:11.312827 2026] [ssl:error] [pid 3562586:tid 3562586] (70014)End of file found: [client 216.73.216.199:61888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:11.994613 2026] [authz_core:error] [pid 3571207:tid 3571207] [client 66.249.66.34:64439] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:11.997358 2026] [authz_core:error] [pid 3571207:tid 3571207] [client 66.249.66.34:64439] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:12.154748 2026] [security2:error] [pid 3569518:tid 3569518] [client 43.159.35.188:59810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ericashmore.org"] [uri "/"] [unique_id "amtXwPRWFIxZVjYooS-JHQAAADc"]
[Thu Jul 30 14:55:13.756875 2026] [ssl:error] [pid 3569519:tid 3569519] (70014)End of file found: [client 216.73.216.199:57184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:13.860143 2026] [ssl:error] [pid 3562475:tid 3562475] (EAI 2)Name or service not known: [client 144.76.19.72:50546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:13.860169 2026] [ssl:error] [pid 3562475:tid 3562475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:13.915790 2026] [ssl:error] [pid 3556972:tid 3556972] (EAI 2)Name or service not known: [client 144.76.19.72:50558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:13.915820 2026] [ssl:error] [pid 3556972:tid 3556972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:14.662330 2026] [ssl:error] [pid 3566718:tid 3566718] (70014)End of file found: [client 216.73.216.199:1810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:15.169167 2026] [ssl:error] [pid 3556972:tid 3556972] (70014)End of file found: [client 216.73.216.199:21367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:16.972582 2026] [ssl:error] [pid 3569516:tid 3569516] (EAI 2)Name or service not known: [client 144.76.19.72:50572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:16.972612 2026] [ssl:error] [pid 3569516:tid 3569516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:17.027480 2026] [ssl:error] [pid 3569021:tid 3569021] (EAI 2)Name or service not known: [client 144.76.19.72:50576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:17.027506 2026] [ssl:error] [pid 3569021:tid 3569021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:17.780654 2026] [security2:error] [pid 3562552:tid 3562552] [client 94.62.223.54:41622] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXxejuexYsczkKIfy7KgAAABs"]
[Thu Jul 30 14:55:17.780703 2026] [security2:error] [pid 3562552:tid 3562552] [client 94.62.223.54:41622] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXxejuexYsczkKIfy7KgAAABs"]
[Thu Jul 30 14:55:17.780964 2026] [security2:error] [pid 3562552:tid 3562552] [client 94.62.223.54:41622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXxejuexYsczkKIfy7KgAAABs"]
[Thu Jul 30 14:55:19.511881 2026] [ssl:error] [pid 3548331:tid 3548331] (70014)End of file found: [client 216.73.216.199:42683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:20.119437 2026] [ssl:error] [pid 3569518:tid 3569518] (EAI 2)Name or service not known: [client 144.76.19.72:39754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:20.119475 2026] [ssl:error] [pid 3569518:tid 3569518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:20.171689 2026] [ssl:error] [pid 3560487:tid 3560487] (EAI 2)Name or service not known: [client 144.76.19.72:39766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:20.171718 2026] [ssl:error] [pid 3560487:tid 3560487] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:20.423947 2026] [ssl:error] [pid 3569021:tid 3569021] (70014)End of file found: [client 216.73.216.199:32898] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:20.633694 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.122.255.174:26232] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXyLC4VpBrJlmzAgrCMgAAADw"]
[Thu Jul 30 14:55:20.633749 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.122.255.174:26232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXyLC4VpBrJlmzAgrCMgAAADw"]
[Thu Jul 30 14:55:20.634052 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.122.255.174:26232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXyLC4VpBrJlmzAgrCMgAAADw"]
[Thu Jul 30 14:55:20.918611 2026] [ssl:error] [pid 3566718:tid 3566718] (70014)End of file found: [client 216.73.216.199:43345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:21.473141 2026] [authz_core:error] [pid 3555839:tid 3555839] [client 146.70.194.246:38810] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/ID3/error_log
[Thu Jul 30 14:55:21.577679 2026] [authz_core:error] [pid 3555839:tid 3555839] [client 146.70.194.246:38810] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/IXR/error_log
[Thu Jul 30 14:55:21.638951 2026] [authz_core:error] [pid 3555839:tid 3555839] [client 146.70.194.246:38810] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:55:21.671760 2026] [authz_core:error] [pid 3555839:tid 3555839] [client 146.70.194.246:38810] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/library/error_log
[Thu Jul 30 14:55:22.781226 2026] [authz_core:error] [pid 3571817:tid 3571817] [client 146.70.194.246:2331] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/error_log
[Thu Jul 30 14:55:23.225514 2026] [ssl:error] [pid 3569519:tid 3569519] (EAI 2)Name or service not known: [client 144.76.19.72:39768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:23.225546 2026] [ssl:error] [pid 3569519:tid 3569519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:23.278574 2026] [ssl:error] [pid 3570686:tid 3570686] (EAI 2)Name or service not known: [client 144.76.19.72:39780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:23.278604 2026] [ssl:error] [pid 3570686:tid 3570686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:24.072017 2026] [authz_core:error] [pid 3571817:tid 3571817] [client 146.70.194.246:2331] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Auth/error_log
[Thu Jul 30 14:55:24.833568 2026] [cgi:error] [pid 3567885:tid 3567885] [client 20.104.22.47:27021] AH02812: stderr from /home/wmsfirea/public_html/andrewvenables.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:55:24.836681 2026] [ssl:error] [pid 3571943:tid 3571943] (70014)End of file found: [client 216.73.216.199:6584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:25.019424 2026] [authz_core:error] [pid 3569420:tid 3569420] [client 72.62.236.24:39892] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:25.022162 2026] [authz_core:error] [pid 3569420:tid 3569420] [client 72.62.236.24:39892] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:25.158932 2026] [security2:error] [pid 3555057:tid 3555057] [client 188.123.165.6:46205] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXzUVFKhdCAKEEfbCGxAAAACI"]
[Thu Jul 30 14:55:25.158986 2026] [security2:error] [pid 3555057:tid 3555057] [client 188.123.165.6:46205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtXzUVFKhdCAKEEfbCGxAAAACI"]
[Thu Jul 30 14:55:25.159269 2026] [security2:error] [pid 3555057:tid 3555057] [client 188.123.165.6:46205] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtXzUVFKhdCAKEEfbCGxAAAACI"]
[Thu Jul 30 14:55:25.409938 2026] [authz_core:error] [pid 3570686:tid 3570686] [client 72.62.236.24:39906] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:25.412644 2026] [authz_core:error] [pid 3570686:tid 3570686] [client 72.62.236.24:39906] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:25.777833 2026] [authz_core:error] [pid 3569022:tid 3569022] [client 72.62.236.24:39922] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:25.780517 2026] [authz_core:error] [pid 3569022:tid 3569022] [client 72.62.236.24:39922] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:25.989489 2026] [authz_core:error] [pid 3566008:tid 3566008] [client 72.62.236.24:39928] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:25.992143 2026] [authz_core:error] [pid 3566008:tid 3566008] [client 72.62.236.24:39928] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:26.190137 2026] [authz_core:error] [pid 3555839:tid 3555839] [client 72.62.236.24:39940] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:26.192791 2026] [authz_core:error] [pid 3555839:tid 3555839] [client 72.62.236.24:39940] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:26.335861 2026] [ssl:error] [pid 3562475:tid 3562475] (EAI 2)Name or service not known: [client 144.76.19.72:39784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:26.335907 2026] [ssl:error] [pid 3562475:tid 3562475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:26.380174 2026] [authz_core:error] [pid 3551053:tid 3551053] [client 146.70.194.246:40012] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Exception/error_log
[Thu Jul 30 14:55:26.393248 2026] [ssl:error] [pid 3569022:tid 3569022] (EAI 2)Name or service not known: [client 144.76.19.72:39790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:26.393286 2026] [ssl:error] [pid 3569022:tid 3569022] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:26.647017 2026] [ssl:error] [pid 3571883:tid 3571883] (70014)End of file found: [client 216.73.216.199:25442] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:27.072110 2026] [ssl:error] [pid 3569420:tid 3569420] (70014)End of file found: [client 216.73.216.199:58437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:27.546840 2026] [authz_core:error] [pid 3567988:tid 3567988] [client 146.70.194.246:19672] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Exception/Http/error_log
[Thu Jul 30 14:55:29.279349 2026] [cgi:error] [pid 3555839:tid 3555839] [client 72.62.236.24:39954] AH02812: stderr from /home/healthki/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:55:29.515522 2026] [ssl:error] [pid 3561650:tid 3561650] (EAI 2)Name or service not known: [client 144.76.19.72:39800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:29.515548 2026] [ssl:error] [pid 3561650:tid 3561650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:29.592278 2026] [ssl:error] [pid 3569519:tid 3569519] (EAI 2)Name or service not known: [client 144.76.19.72:62530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:29.592319 2026] [ssl:error] [pid 3569519:tid 3569519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:30.179953 2026] [cgi:error] [pid 3572795:tid 3572795] [client 72.62.236.24:46754] AH02812: stderr from /home/healthki/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:55:31.402407 2026] [authz_core:error] [pid 3562551:tid 3562551] [client 146.70.194.246:46124] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Exception/Transport/error_log
[Thu Jul 30 14:55:32.199470 2026] [ssl:error] [pid 3570686:tid 3570686] (70014)End of file found: [client 216.73.216.199:36464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:32.500002 2026] [ssl:error] [pid 3561650:tid 3561650] (70014)End of file found: [client 216.73.216.199:21599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:32.650983 2026] [ssl:error] [pid 3548331:tid 3548331] (EAI 2)Name or service not known: [client 144.76.19.72:62532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:32.651012 2026] [ssl:error] [pid 3548331:tid 3548331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:32.707701 2026] [ssl:error] [pid 3562475:tid 3562475] (EAI 2)Name or service not known: [client 144.76.19.72:62542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:32.707736 2026] [ssl:error] [pid 3562475:tid 3562475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:32.778468 2026] [authz_core:error] [pid 3569519:tid 3569519] [client 146.70.194.246:31421] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Proxy/error_log
[Thu Jul 30 14:55:33.185881 2026] [security2:error] [pid 3572796:tid 3572796] [client 43.165.7.132:58258] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.com"] [uri "/"] [unique_id "amtX1V83LySLykQQdykZiwAAABs"]
[Thu Jul 30 14:55:33.519128 2026] [core:error] [pid 3565955:tid 3565955] (13)Permission denied: [client 216.73.216.199:41670] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/hulk-unban-ip
[Thu Jul 30 14:55:33.837751 2026] [authz_core:error] [pid 3569516:tid 3569516] [client 146.70.194.246:46152] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Response/error_log
[Thu Jul 30 14:55:34.114485 2026] [ssl:error] [pid 3565955:tid 3565955] (70014)End of file found: [client 216.73.216.199:41670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:34.920544 2026] [authz_core:error] [pid 3555057:tid 3555057] [client 146.70.194.246:46168] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/Requests/src/Transport/error_log
[Thu Jul 30 14:55:35.762407 2026] [ssl:error] [pid 3567988:tid 3567988] (EAI 2)Name or service not known: [client 144.76.19.72:62552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:35.762457 2026] [ssl:error] [pid 3567988:tid 3567988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:35.820518 2026] [ssl:error] [pid 3569516:tid 3569516] (EAI 2)Name or service not known: [client 144.76.19.72:62556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:35.820551 2026] [ssl:error] [pid 3569516:tid 3569516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:36.051557 2026] [security2:error] [pid 3572796:tid 3572796] [client 146.70.194.246:46172] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/src/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtX2F83LySLykQQdykZjQAAABs"]
[Thu Jul 30 14:55:36.051688 2026] [security2:error] [pid 3572796:tid 3572796] [client 146.70.194.246:46172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtX2F83LySLykQQdykZjQAAABs"]
[Thu Jul 30 14:55:36.471191 2026] [security2:error] [pid 3572796:tid 3572796] [client 146.70.194.246:46172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtX2F83LySLykQQdykZjQAAABs"]
[Thu Jul 30 14:55:37.634684 2026] [ssl:error] [pid 3569021:tid 3569021] (70014)End of file found: [client 216.73.216.199:53003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:37.641149 2026] [authz_core:error] [pid 3572796:tid 3572796] [client 146.70.194.246:46172] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/error_log
[Thu Jul 30 14:55:37.743485 2026] [authz_core:error] [pid 3572796:tid 3572796] [client 146.70.194.246:46172] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/library/error_log
[Thu Jul 30 14:55:38.641765 2026] [ssl:error] [pid 3569022:tid 3569022] (70014)End of file found: [client 216.73.216.199:23047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:38.701775 2026] [authz_core:error] [pid 3555057:tid 3555057] [client 146.70.194.246:46184] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/library/SimplePie/error_log
[Thu Jul 30 14:55:38.874666 2026] [ssl:error] [pid 3572733:tid 3572733] (EAI 2)Name or service not known: [client 144.76.19.72:62564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:38.874701 2026] [ssl:error] [pid 3572733:tid 3572733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:38.929843 2026] [ssl:error] [pid 3561650:tid 3561650] (EAI 2)Name or service not known: [client 144.76.19.72:62566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:38.929872 2026] [ssl:error] [pid 3561650:tid 3561650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:40.157698 2026] [ssl:error] [pid 3571942:tid 3571942] (70014)End of file found: [client 216.73.216.199:33687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:41.984700 2026] [ssl:error] [pid 3563515:tid 3563515] (EAI 2)Name or service not known: [client 144.76.19.72:60772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:41.984742 2026] [ssl:error] [pid 3563515:tid 3563515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:42.037831 2026] [ssl:error] [pid 3566719:tid 3566719] (EAI 2)Name or service not known: [client 144.76.19.72:60788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:42.037864 2026] [ssl:error] [pid 3566719:tid 3566719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:43.072803 2026] [ssl:error] [pid 3555057:tid 3555057] (70014)End of file found: [client 216.73.216.199:27232] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:44.073381 2026] [ssl:error] [pid 3562551:tid 3562551] (70014)End of file found: [client 216.73.216.199:22111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:45.092900 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:60802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:45.092932 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:45.148692 2026] [ssl:error] [pid 3572796:tid 3572796] (EAI 2)Name or service not known: [client 144.76.19.72:60810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:45.148740 2026] [ssl:error] [pid 3572796:tid 3572796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:45.476946 2026] [ssl:error] [pid 3543505:tid 3543505] (70014)End of file found: [client 216.73.216.199:16102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:45.840208 2026] [security2:error] [pid 3570685:tid 3570685] [client 85.208.96.209:15348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5749.0/prev_next,prev.html"] [unique_id "amtX4fHGJYATKLC0fYWMMAAAAAc"]
[Thu Jul 30 14:55:48.201245 2026] [ssl:error] [pid 3562588:tid 3562588] (EAI 2)Name or service not known: [client 144.76.19.72:60816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:48.201272 2026] [ssl:error] [pid 3562588:tid 3562588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:48.257457 2026] [ssl:error] [pid 3537597:tid 3537597] (EAI 2)Name or service not known: [client 144.76.19.72:60826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:48.257488 2026] [ssl:error] [pid 3537597:tid 3537597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:48.511719 2026] [ssl:error] [pid 3571944:tid 3571944] (70014)End of file found: [client 216.73.216.199:51195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:49.364304 2026] [authz_core:error] [pid 3567213:tid 3567213] [client 66.249.66.35:65290] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:55:49.366970 2026] [authz_core:error] [pid 3567213:tid 3567213] [client 66.249.66.35:65290] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:55:49.816306 2026] [ssl:error] [pid 3565723:tid 3565723] (70014)End of file found: [client 216.73.216.199:50806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:50.156136 2026] [security2:error] [pid 3563515:tid 3563515] [client 146.70.194.246:39140] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/library/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtX5mjmwXGoH3tTEBJ_HwAAAB8"]
[Thu Jul 30 14:55:50.156257 2026] [security2:error] [pid 3563515:tid 3563515] [client 146.70.194.246:39140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/library/SimplePie/gzdecode.php"] [unique_id "amtX5mjmwXGoH3tTEBJ_HwAAAB8"]
[Thu Jul 30 14:55:50.580913 2026] [security2:error] [pid 3563515:tid 3563515] [client 146.70.194.246:39140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtX5mjmwXGoH3tTEBJ_HwAAAB8"]
[Thu Jul 30 14:55:50.665132 2026] [security2:error] [pid 3566719:tid 3566719] [client 47.128.35.137:14352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.vain.band"] [uri "/robots.txt"] [unique_id "amtX5qbB590Gdw0xvoclogAAABc"]
[Thu Jul 30 14:55:50.859136 2026] [authz_core:error] [pid 3563515:tid 3563515] [client 146.70.194.246:39140] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/src/error_log
[Thu Jul 30 14:55:51.029894 2026] [ssl:error] [pid 3569519:tid 3569519] (70014)End of file found: [client 216.73.216.199:30060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:55:51.314228 2026] [ssl:error] [pid 3565421:tid 3565421] (EAI 2)Name or service not known: [client 144.76.19.72:31822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:51.314272 2026] [ssl:error] [pid 3565421:tid 3565421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:51.370520 2026] [ssl:error] [pid 3566719:tid 3566719] (EAI 2)Name or service not known: [client 144.76.19.72:31834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:51.370549 2026] [ssl:error] [pid 3566719:tid 3566719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:51.848463 2026] [authz_core:error] [pid 3563515:tid 3563515] [client 146.70.194.246:39140] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/src/Cache/error_log
[Thu Jul 30 14:55:55.579802 2026] [ssl:error] [pid 3562592:tid 3562592] (EAI 2)Name or service not known: [client 144.76.19.72:31842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:55.579837 2026] [ssl:error] [pid 3562592:tid 3562592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:55.799174 2026] [security2:error] [pid 3572795:tid 3572795] [client 185.191.171.13:16314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/average-quarterback-height-in-high-school"] [unique_id "amtX64mX0JcX-GHRHtROMAAAAAk"]
[Thu Jul 30 14:55:56.397784 2026] [ssl:error] [pid 3572796:tid 3572796] (EAI 2)Name or service not known: [client 144.76.19.72:31852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:56.397829 2026] [ssl:error] [pid 3572796:tid 3572796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:57.843451 2026] [security2:error] [pid 3569517:tid 3569517] [client 146.70.194.246:46640] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/src/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtX7fZI675en7gBoLsxewAAADY"]
[Thu Jul 30 14:55:57.843562 2026] [security2:error] [pid 3569517:tid 3569517] [client 146.70.194.246:46640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dawnrobinson.co.uk"] [uri "/wp-includes/SimplePie/src/Gzdecode.php"] [unique_id "amtX7fZI675en7gBoLsxewAAADY"]
[Thu Jul 30 14:55:58.246673 2026] [security2:error] [pid 3569517:tid 3569517] [client 146.70.194.246:46640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dawnrobinson.co.uk"] [uri "/index.php"] [unique_id "amtX7fZI675en7gBoLsxewAAADY"]
[Thu Jul 30 14:55:58.353829 2026] [authz_core:error] [pid 3569517:tid 3569517] [client 146.70.194.246:46640] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/SimplePie/src/HTTP/error_log
[Thu Jul 30 14:55:58.623622 2026] [security2:error] [pid 3567988:tid 3567988] [client 114.119.144.202:36105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chateausaintjeannet.com"] [uri "/robots.txt"] [unique_id "amtX7vfZVVqWn1wbi6aslQAAAA0"], referer: https://www.chateausaintjeannet.com/robots.txt
[Thu Jul 30 14:55:59.456053 2026] [ssl:error] [pid 3574307:tid 3574307] (EAI 2)Name or service not known: [client 144.76.19.72:31854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:59.456110 2026] [ssl:error] [pid 3574307:tid 3574307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:55:59.511378 2026] [ssl:error] [pid 3574311:tid 3574311] (EAI 2)Name or service not known: [client 144.76.19.72:31862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:55:59.511425 2026] [ssl:error] [pid 3574311:tid 3574311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:00.117261 2026] [ssl:error] [pid 3571944:tid 3571944] (70014)End of file found: [client 216.73.216.199:55290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:01.573304 2026] [authz_core:error] [pid 3572796:tid 3572796] [client 66.249.66.35:37208] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:56:01.576093 2026] [authz_core:error] [pid 3572796:tid 3572796] [client 66.249.66.35:37208] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:56:01.674143 2026] [authz_core:error] [pid 3571883:tid 3571883] [client 4.223.71.149:23672] AH01630: client denied by server configuration: /home/shirleya/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:56:01.929018 2026] [ssl:error] [pid 3572795:tid 3572795] (70014)End of file found: [client 216.73.216.199:51369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:02.570272 2026] [ssl:error] [pid 3574307:tid 3574307] (EAI 2)Name or service not known: [client 144.76.19.72:45412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:02.570301 2026] [ssl:error] [pid 3574307:tid 3574307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:02.623553 2026] [ssl:error] [pid 3574312:tid 3574312] (EAI 2)Name or service not known: [client 144.76.19.72:45424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:02.623587 2026] [ssl:error] [pid 3574312:tid 3574312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:02.809923 2026] [security2:error] [pid 3574311:tid 3574311] [client 43.153.10.83:42708] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thatwall.com"] [uri "/"] [unique_id "amtX8uf23zHC0vkEUGD1sgAAAEc"]
[Thu Jul 30 14:56:03.176585 2026] [ssl:error] [pid 3571207:tid 3571207] (70014)End of file found: [client 216.73.216.199:49085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:04.002205 2026] [security2:error] [pid 3562551:tid 3562551] [client 45.148.10.120:36360] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bigbangburgerbar.co.uk"] [uri "/.env"] [unique_id "amtX9MMW31uBWuOvN4TSugAAABg"]
[Thu Jul 30 14:56:04.002380 2026] [security2:error] [pid 3562551:tid 3562551] [client 45.148.10.120:36360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bigbangburgerbar.co.uk"] [uri "/.env"] [unique_id "amtX9MMW31uBWuOvN4TSugAAABg"]
[Thu Jul 30 14:56:04.002692 2026] [security2:error] [pid 3562551:tid 3562551] [client 45.148.10.120:36360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtX9MMW31uBWuOvN4TSugAAABg"]
[Thu Jul 30 14:56:04.016831 2026] [access_compat:error] [pid 3574312:tid 3574312] [client 45.158.164.139:52462] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:56:05.677476 2026] [ssl:error] [pid 3560383:tid 3560383] (EAI 2)Name or service not known: [client 144.76.19.72:45436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:05.677521 2026] [ssl:error] [pid 3560383:tid 3560383] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:05.732224 2026] [ssl:error] [pid 3563956:tid 3563956] (EAI 2)Name or service not known: [client 144.76.19.72:45450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:05.732266 2026] [ssl:error] [pid 3563956:tid 3563956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:05.899184 2026] [ssl:error] [pid 3574308:tid 3574308] (70014)End of file found: [client 216.73.216.199:36822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:05.971616 2026] [authz_core:error] [pid 3568093:tid 3568093] [client 195.3.220.7:0] AH01630: client denied by server configuration: /home/revoraci/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:56:07.708347 2026] [ssl:error] [pid 3570686:tid 3570686] (70014)End of file found: [client 216.73.216.199:65015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:08.830278 2026] [ssl:error] [pid 3572796:tid 3572796] (EAI 2)Name or service not known: [client 144.76.19.72:45460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:08.830308 2026] [ssl:error] [pid 3572796:tid 3572796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:08.886195 2026] [ssl:error] [pid 3562588:tid 3562588] (EAI 2)Name or service not known: [client 144.76.19.72:45470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:08.886226 2026] [ssl:error] [pid 3562588:tid 3562588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:09.164908 2026] [security2:error] [pid 3573560:tid 3573560] [client 185.191.171.9:34628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,452.0/prev_next,prev.html"] [unique_id "amtX-QrJCkvmTiI0umBxGAAAAAA"]
[Thu Jul 30 14:56:09.813730 2026] [core:error] [pid 3571942:tid 3571942] (13)Permission denied: [client 216.73.216.199:5737] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_blk/sections/__mcount_loc
[Thu Jul 30 14:56:09.937540 2026] [authz_core:error] [pid 3574306:tid 3574306] [client 146.70.194.246:45422] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/mu-plugins/error_log
[Thu Jul 30 14:56:10.239093 2026] [authz_core:error] [pid 3569518:tid 3569518] [client 146.70.194.246:45438] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/customize/error_log
[Thu Jul 30 14:56:10.932146 2026] [security2:error] [pid 3570685:tid 3570685] [client 39.34.164.145:42040] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtX-vHGJYATKLC0fYWMOQAAAAc"]
[Thu Jul 30 14:56:10.932193 2026] [security2:error] [pid 3570685:tid 3570685] [client 39.34.164.145:42040] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtX-vHGJYATKLC0fYWMOQAAAAc"]
[Thu Jul 30 14:56:10.932447 2026] [security2:error] [pid 3570685:tid 3570685] [client 39.34.164.145:42040] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtX-vHGJYATKLC0fYWMOQAAAAc"]
[Thu Jul 30 14:56:11.019935 2026] [ssl:error] [pid 3571942:tid 3571942] (70014)End of file found: [client 216.73.216.199:5737] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:11.527627 2026] [ssl:error] [pid 3574310:tid 3574310] (70014)End of file found: [client 216.73.216.199:14688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:11.983260 2026] [ssl:error] [pid 3574255:tid 3574255] (EAI 2)Name or service not known: [client 144.76.19.72:24956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:11.983291 2026] [ssl:error] [pid 3574255:tid 3574255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:12.039243 2026] [ssl:error] [pid 3567988:tid 3567988] (EAI 2)Name or service not known: [client 144.76.19.72:24966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:12.039275 2026] [ssl:error] [pid 3567988:tid 3567988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:15.092583 2026] [ssl:error] [pid 3570686:tid 3570686] (EAI 2)Name or service not known: [client 144.76.19.72:24982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:15.092610 2026] [ssl:error] [pid 3570686:tid 3570686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:15.146269 2026] [ssl:error] [pid 3571207:tid 3571207] (EAI 2)Name or service not known: [client 144.76.19.72:24986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:15.146321 2026] [ssl:error] [pid 3571207:tid 3571207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:15.171558 2026] [ssl:error] [pid 3566719:tid 3566719] (70014)End of file found: [client 216.73.216.199:35556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:15.918628 2026] [security2:error] [pid 3574308:tid 3574308] [client 163.7.6.162:22905] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtX_yIR4tQ_nM5FPGzgLwAAAEQ"]
[Thu Jul 30 14:56:15.918679 2026] [security2:error] [pid 3574308:tid 3574308] [client 163.7.6.162:22905] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtX_yIR4tQ_nM5FPGzgLwAAAEQ"]
[Thu Jul 30 14:56:15.918940 2026] [security2:error] [pid 3574308:tid 3574308] [client 163.7.6.162:22905] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtX_yIR4tQ_nM5FPGzgLwAAAEQ"]
[Thu Jul 30 14:56:16.070477 2026] [ssl:error] [pid 3555839:tid 3555839] (70014)End of file found: [client 216.73.216.199:30257] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:16.563967 2026] [ssl:error] [pid 3574200:tid 3574200] (70014)End of file found: [client 216.73.216.199:9633] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:17.211202 2026] [authz_core:error] [pid 3568093:tid 3568093] [client 144.172.105.5:51062] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 14:56:18.203939 2026] [ssl:error] [pid 3571883:tid 3571883] (EAI 2)Name or service not known: [client 144.76.19.72:24998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:18.203981 2026] [ssl:error] [pid 3571883:tid 3571883] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:18.244529 2026] [cgi:error] [pid 3568093:tid 3568093] [client 144.172.105.5:51062] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:56:18.271535 2026] [ssl:error] [pid 3571942:tid 3571942] (EAI 2)Name or service not known: [client 144.76.19.72:25004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:18.271567 2026] [ssl:error] [pid 3571942:tid 3571942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:18.368206 2026] [cgi:error] [pid 3567988:tid 3567988] [client 146.70.194.246:46068] AH02812: stderr from /home/dawnrobi/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:56:18.483963 2026] [authz_core:error] [pid 3574308:tid 3574308] [client 66.249.66.34:45537] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:56:18.486703 2026] [authz_core:error] [pid 3574308:tid 3574308] [client 66.249.66.34:45537] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:56:20.482131 2026] [ssl:error] [pid 3571942:tid 3571942] (70014)End of file found: [client 216.73.216.199:55651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:21.328163 2026] [ssl:error] [pid 3570686:tid 3570686] (EAI 2)Name or service not known: [client 144.76.19.72:29338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:21.328197 2026] [ssl:error] [pid 3570686:tid 3570686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:21.384005 2026] [ssl:error] [pid 3569518:tid 3569518] (EAI 2)Name or service not known: [client 144.76.19.72:29348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:21.384034 2026] [ssl:error] [pid 3569518:tid 3569518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:22.398875 2026] [ssl:error] [pid 3574255:tid 3574255] (70014)End of file found: [client 216.73.216.199:27931] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:22.894145 2026] [ssl:error] [pid 3572796:tid 3572796] (70014)End of file found: [client 216.73.216.199:52081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:23.763196 2026] [security2:error] [pid 3570685:tid 3570685] [client 163.7.6.162:36679] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYB_HGJYATKLC0fYWMOwAAAAc"]
[Thu Jul 30 14:56:23.763256 2026] [security2:error] [pid 3570685:tid 3570685] [client 163.7.6.162:36679] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYB_HGJYATKLC0fYWMOwAAAAc"]
[Thu Jul 30 14:56:23.763530 2026] [security2:error] [pid 3570685:tid 3570685] [client 163.7.6.162:36679] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYB_HGJYATKLC0fYWMOwAAAAc"]
[Thu Jul 30 14:56:24.468115 2026] [ssl:error] [pid 3574305:tid 3574305] (EAI 2)Name or service not known: [client 144.76.19.72:29350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:24.468160 2026] [ssl:error] [pid 3574305:tid 3574305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:24.521669 2026] [ssl:error] [pid 3563515:tid 3563515] (EAI 2)Name or service not known: [client 144.76.19.72:29354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:24.521708 2026] [ssl:error] [pid 3563515:tid 3563515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:24.585922 2026] [access_compat:error] [pid 3571945:tid 3571945] [client 64.180.68.231:63597] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:56:25.152907 2026] [access_compat:error] [pid 3570686:tid 3570686] [client 45.158.164.139:40552] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:56:25.921627 2026] [ssl:error] [pid 3563515:tid 3563515] (70014)End of file found: [client 216.73.216.199:2165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:26.938339 2026] [core:error] [pid 3566718:tid 3566718] (13)Permission denied: [client 216.73.216.199:26474] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/drm/sections/__bug_table
[Thu Jul 30 14:56:27.574087 2026] [authz_core:error] [pid 3574308:tid 3574308] [client 72.62.236.24:41848] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:56:27.576333 2026] [ssl:error] [pid 3574142:tid 3574142] (EAI 2)Name or service not known: [client 144.76.19.72:29360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:27.576371 2026] [ssl:error] [pid 3574142:tid 3574142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:27.576946 2026] [authz_core:error] [pid 3574308:tid 3574308] [client 72.62.236.24:41848] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:56:27.631286 2026] [ssl:error] [pid 3574255:tid 3574255] (EAI 2)Name or service not known: [client 144.76.19.72:29362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:27.631330 2026] [ssl:error] [pid 3574255:tid 3574255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:27.635574 2026] [ssl:error] [pid 3575490:tid 3575490] (70014)End of file found: [client 216.73.216.199:29326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:27.672854 2026] [authz_core:error] [pid 3568093:tid 3568093] [client 144.172.105.5:51062] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 14:56:27.673788 2026] [authz_core:error] [pid 3568093:tid 3568093] [client 144.172.105.5:51062] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 14:56:28.498872 2026] [authz_core:error] [pid 3574255:tid 3574255] [client 72.62.236.24:41854] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:56:28.501675 2026] [authz_core:error] [pid 3574255:tid 3574255] [client 72.62.236.24:41854] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:56:30.666271 2026] [ssl:error] [pid 3572796:tid 3572796] (70014)End of file found: [client 216.73.216.199:38022] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:30.685939 2026] [ssl:error] [pid 3570636:tid 3570636] (EAI 2)Name or service not known: [client 144.76.19.72:47580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:30.685977 2026] [ssl:error] [pid 3570636:tid 3570636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:30.739358 2026] [ssl:error] [pid 3574309:tid 3574309] (EAI 2)Name or service not known: [client 144.76.19.72:47588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:30.739399 2026] [ssl:error] [pid 3574309:tid 3574309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:30.970744 2026] [ssl:error] [pid 3566718:tid 3566718] (70014)End of file found: [client 216.73.216.199:26474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:32.800298 2026] [security2:error] [pid 3570685:tid 3570685] [client 114.119.155.144:25431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574467200/cat_ids~17,30,103,18/request_format~html"] [unique_id "amtYEPHGJYATKLC0fYWMPgAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~17,30,103,18/request_format~html
[Thu Jul 30 14:56:33.797027 2026] [ssl:error] [pid 3568093:tid 3568093] (EAI 2)Name or service not known: [client 144.76.19.72:47600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:33.797086 2026] [ssl:error] [pid 3568093:tid 3568093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:33.852542 2026] [ssl:error] [pid 3575490:tid 3575490] (EAI 2)Name or service not known: [client 144.76.19.72:47616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:33.852580 2026] [ssl:error] [pid 3575490:tid 3575490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:34.283519 2026] [security2:error] [pid 3565421:tid 3565421] [client 114.119.155.144:25443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574467200/cat_ids~17,30,103,18/request_format~html"] [unique_id "amtYEgxraSSX7jgFNEgvbQAAAAU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574553600/cat_ids~17,30,103,18/request_format~html
[Thu Jul 30 14:56:35.071641 2026] [access_compat:error] [pid 3575490:tid 3575490] [client 64.180.68.231:64122] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:56:35.192176 2026] [ssl:error] [pid 3571208:tid 3571208] (70014)End of file found: [client 216.73.216.199:54833] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:36.905741 2026] [ssl:error] [pid 3548331:tid 3548331] (EAI 2)Name or service not known: [client 144.76.19.72:47622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:36.905779 2026] [ssl:error] [pid 3548331:tid 3548331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:36.958829 2026] [ssl:error] [pid 3569021:tid 3569021] (EAI 2)Name or service not known: [client 144.76.19.72:47632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:36.958859 2026] [ssl:error] [pid 3569021:tid 3569021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:38.203663 2026] [core:error] [pid 3559094:tid 3559094] (13)Permission denied: [client 216.73.216.199:34745] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/slabs_cpu_partial
[Thu Jul 30 14:56:38.808565 2026] [authz_core:error] [pid 3574307:tid 3574307] [client 66.249.66.33:51439] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:56:38.811479 2026] [authz_core:error] [pid 3574307:tid 3574307] [client 66.249.66.33:51439] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:56:38.947940 2026] [authz_core:error] [pid 3561650:tid 3561650] [client 144.172.105.5:51374] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 14:56:39.047025 2026] [security2:error] [pid 3574255:tid 3574255] [client 54.38.147.215:24374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/robots.txt"] [unique_id "amtYFzf_xRMM1rIJHe8sLwAAAEA"]
[Thu Jul 30 14:56:39.189813 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.287169 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.398432 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.493860 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.584362 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.683093 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.785221 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.881040 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:39.980113 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.013535 2026] [ssl:error] [pid 3574255:tid 3574255] (EAI 2)Name or service not known: [client 144.76.19.72:65334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:40.013562 2026] [ssl:error] [pid 3574255:tid 3574255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:40.060537 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.067852 2026] [ssl:error] [pid 3569518:tid 3569518] (EAI 2)Name or service not known: [client 144.76.19.72:65348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:40.067877 2026] [ssl:error] [pid 3569518:tid 3569518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:40.087795 2026] [security2:error] [pid 3555839:tid 3555839] [client 176.31.139.3:61816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtYGIqipGDoeDYN7ueZtQAAAAs"]
[Thu Jul 30 14:56:40.163486 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.272204 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.359442 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.444561 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.528275 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.635755 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.730077 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.771003 2026] [access_compat:error] [pid 3574255:tid 3574255] [client 146.70.194.246:54704] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/cache/wpo-cache/
[Thu Jul 30 14:56:40.833174 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:40.916138 2026] [ssl:error] [pid 3559094:tid 3559094] (70014)End of file found: [client 216.73.216.199:34745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:40.933478 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.031080 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.117381 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.221029 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.313349 2026] [cgi:error] [pid 3574252:tid 3574252] [client 20.151.221.234:16617] AH02811: stderr from /home/broadcas/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 14:56:41.331571 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.437773 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.543453 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.614445 2026] [access_compat:error] [pid 3562585:tid 3562585] [client 64.180.68.231:64573] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:56:41.664098 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.703877 2026] [ssl:error] [pid 3567988:tid 3567988] (70014)End of file found: [client 216.73.216.199:47606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:41.727521 2026] [lsapi:warn] [pid 3565421:tid 3565421] [client 216.73.216.199:47359] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 14:56:41.727562 2026] [lsapi:error] [pid 3565421:tid 3565421] [client 216.73.216.199:47359] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeWithDtd.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 14:56:41.769191 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.906730 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:41.997239 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.088158 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.185803 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.302242 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.310630 2026] [ssl:error] [pid 3571942:tid 3571942] (70014)End of file found: [client 216.73.216.199:19233] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:42.332917 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "amtYGiq77xGDIP_UHYHSOQAAAAg"]
[Thu Jul 30 14:56:42.333309 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/opt/mailcow-dockerized/mailcow.conf"] [unique_id "amtYGiq77xGDIP_UHYHSOQAAAAg"]
[Thu Jul 30 14:56:42.333487 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGiq77xGDIP_UHYHSOQAAAAg"]
[Thu Jul 30 14:56:42.410461 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.498858 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.579686 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.606576 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app_dev.php/_profiler/open"] [unique_id "amtYGiq77xGDIP_UHYHSQAAAAAg"]
[Thu Jul 30 14:56:42.606963 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app_dev.php/_profiler/open"] [unique_id "amtYGiq77xGDIP_UHYHSQAAAAAg"]
[Thu Jul 30 14:56:42.607133 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): OS File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGiq77xGDIP_UHYHSQAAAAAg"]
[Thu Jul 30 14:56:42.699930 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.795285 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:42.817624 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env"] [unique_id "amtYGiq77xGDIP_UHYHSRQAAAAg"]
[Thu Jul 30 14:56:42.817783 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env"] [unique_id "amtYGiq77xGDIP_UHYHSRQAAAAg"]
[Thu Jul 30 14:56:42.817933 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGiq77xGDIP_UHYHSRQAAAAg"]
[Thu Jul 30 14:56:42.905265 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:43.002048 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:43.040213 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/log/production.log"] [unique_id "amtYGyq77xGDIP_UHYHSSgAAAAg"]
[Thu Jul 30 14:56:43.040572 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/log/production.log"] [unique_id "amtYGyq77xGDIP_UHYHSSgAAAAg"]
[Thu Jul 30 14:56:43.040732 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSSgAAAAg"]
[Thu Jul 30 14:56:43.121648 2026] [ssl:error] [pid 3574309:tid 3574309] (EAI 2)Name or service not known: [client 144.76.19.72:65364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:43.121687 2026] [ssl:error] [pid 3574309:tid 3574309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:43.144240 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:43.167114 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/debug.log"] [unique_id "amtYGyq77xGDIP_UHYHSTQAAAAg"]
[Thu Jul 30 14:56:43.167472 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/debug.log"] [unique_id "amtYGyq77xGDIP_UHYHSTQAAAAg"]
[Thu Jul 30 14:56:43.167623 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSTQAAAAg"]
[Thu Jul 30 14:56:43.174544 2026] [ssl:error] [pid 3565955:tid 3565955] (EAI 2)Name or service not known: [client 144.76.19.72:65370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:43.174581 2026] [ssl:error] [pid 3565955:tid 3565955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:43.196520 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env"] [unique_id "amtYGyq77xGDIP_UHYHSTgAAAAg"]
[Thu Jul 30 14:56:43.196719 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env"] [unique_id "amtYGyq77xGDIP_UHYHSTgAAAAg"]
[Thu Jul 30 14:56:43.196883 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSTgAAAAg"]
[Thu Jul 30 14:56:43.224147 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.local"] [unique_id "amtYGyq77xGDIP_UHYHSTwAAAAg"]
[Thu Jul 30 14:56:43.224330 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.local"] [unique_id "amtYGyq77xGDIP_UHYHSTwAAAAg"]
[Thu Jul 30 14:56:43.224494 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSTwAAAAg"]
[Thu Jul 30 14:56:43.264700 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.production"] [unique_id "amtYGyq77xGDIP_UHYHSUAAAAAg"]
[Thu Jul 30 14:56:43.264877 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.production"] [unique_id "amtYGyq77xGDIP_UHYHSUAAAAAg"]
[Thu Jul 30 14:56:43.265032 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSUAAAAAg"]
[Thu Jul 30 14:56:43.293273 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/opt/.env"] [unique_id "amtYGyq77xGDIP_UHYHSUQAAAAg"]
[Thu Jul 30 14:56:43.293446 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/opt/.env"] [unique_id "amtYGyq77xGDIP_UHYHSUQAAAAg"]
[Thu Jul 30 14:56:43.293589 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSUQAAAAg"]
[Thu Jul 30 14:56:43.330533 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/.git/config.bak"] [unique_id "amtYGyq77xGDIP_UHYHSUgAAAAg"]
[Thu Jul 30 14:56:43.330753 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/config.bak"] [unique_id "amtYGyq77xGDIP_UHYHSUgAAAAg"]
[Thu Jul 30 14:56:43.330891 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/config.bak"] [unique_id "amtYGyq77xGDIP_UHYHSUgAAAAg"]
[Thu Jul 30 14:56:43.331034 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSUgAAAAg"]
[Thu Jul 30 14:56:43.366268 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/.git/config.old"] [unique_id "amtYGyq77xGDIP_UHYHSUwAAAAg"]
[Thu Jul 30 14:56:43.366493 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/config.old"] [unique_id "amtYGyq77xGDIP_UHYHSUwAAAAg"]
[Thu Jul 30 14:56:43.366650 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/config.old"] [unique_id "amtYGyq77xGDIP_UHYHSUwAAAAg"]
[Thu Jul 30 14:56:43.366795 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSUwAAAAg"]
[Thu Jul 30 14:56:43.400817 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /app/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.git/config"] [unique_id "amtYGyq77xGDIP_UHYHSVAAAAAg"]
[Thu Jul 30 14:56:43.400986 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.git/config"] [unique_id "amtYGyq77xGDIP_UHYHSVAAAAAg"]
[Thu Jul 30 14:56:43.401144 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSVAAAAAg"]
[Thu Jul 30 14:56:43.420979 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYGyq77xGDIP_UHYHSVQAAAAg"]
[Thu Jul 30 14:56:43.421131 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYGyq77xGDIP_UHYHSVQAAAAg"]
[Thu Jul 30 14:56:43.421266 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSVQAAAAg"]
[Thu Jul 30 14:56:43.464557 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/config"] [unique_id "amtYGyq77xGDIP_UHYHSVwAAAAg"]
[Thu Jul 30 14:56:43.464683 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/config"] [unique_id "amtYGyq77xGDIP_UHYHSVwAAAAg"]
[Thu Jul 30 14:56:43.464814 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSVwAAAAg"]
[Thu Jul 30 14:56:43.500194 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYGyq77xGDIP_UHYHSWAAAAAg"]
[Thu Jul 30 14:56:43.500368 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYGyq77xGDIP_UHYHSWAAAAAg"]
[Thu Jul 30 14:56:43.500534 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSWAAAAAg"]
[Thu Jul 30 14:56:43.695571 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:43.732902 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/httpd.conf"] [unique_id "amtYGyq77xGDIP_UHYHSXQAAAAg"]
[Thu Jul 30 14:56:43.733258 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/httpd.conf"] [unique_id "amtYGyq77xGDIP_UHYHSXQAAAAg"]
[Thu Jul 30 14:56:43.733434 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:5388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYGyq77xGDIP_UHYHSXQAAAAg"]
[Thu Jul 30 14:56:43.880112 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:43.913756 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.svn/entries"] [unique_id "amtYG4El-VZ8aIUwh45mtQAAABM"]
[Thu Jul 30 14:56:43.913936 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.svn/entries"] [unique_id "amtYG4El-VZ8aIUwh45mtQAAABM"]
[Thu Jul 30 14:56:43.914132 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYG4El-VZ8aIUwh45mtQAAABM"]
[Thu Jul 30 14:56:44.007832 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.038868 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/nginx.conf"] [unique_id "amtYHIEl-VZ8aIUwh45muAAAABM"]
[Thu Jul 30 14:56:44.039234 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/nginx.conf"] [unique_id "amtYHIEl-VZ8aIUwh45muAAAABM"]
[Thu Jul 30 14:56:44.039390 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYHIEl-VZ8aIUwh45muAAAABM"]
[Thu Jul 30 14:56:44.064635 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/conf.d/default.conf"] [unique_id "amtYHIEl-VZ8aIUwh45muQAAABM"]
[Thu Jul 30 14:56:44.064982 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/conf.d/default.conf"] [unique_id "amtYHIEl-VZ8aIUwh45muQAAABM"]
[Thu Jul 30 14:56:44.065163 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYHIEl-VZ8aIUwh45muQAAABM"]
[Thu Jul 30 14:56:44.187905 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.295726 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.382519 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.472562 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.567664 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.650648 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.752350 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.852603 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:44.950462 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.102564 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.199628 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.310529 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.397508 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.511221 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.597096 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.669365 2026] [access_compat:error] [pid 3562475:tid 3562475] [client 64.180.68.231:64854] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:56:45.688667 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.780512 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.883390 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:45.985336 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.158792 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.229667 2026] [ssl:error] [pid 3555839:tid 3555839] (EAI 2)Name or service not known: [client 144.76.19.72:65384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:46.229704 2026] [ssl:error] [pid 3555839:tid 3555839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:46.262451 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.284714 2026] [ssl:error] [pid 3572796:tid 3572796] (EAI 2)Name or service not known: [client 144.76.19.72:65398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:46.284754 2026] [ssl:error] [pid 3572796:tid 3572796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:46.346923 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.461571 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.547650 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.647213 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.788197 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.907612 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:46.956934 2026] [ssl:error] [pid 3574142:tid 3574142] (70014)End of file found: [client 216.73.216.199:38089] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:47.019662 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.116008 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.139795 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/uploads/2024/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/uploads/2024/.env"] [unique_id "amtYH4El-VZ8aIUwh45m9AAAABM"]
[Thu Jul 30 14:56:47.140036 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/uploads/2024/.env"] [unique_id "amtYH4El-VZ8aIUwh45m9AAAABM"]
[Thu Jul 30 14:56:47.140226 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYH4El-VZ8aIUwh45m9AAAABM"]
[Thu Jul 30 14:56:47.164146 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/uploads/2025/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/uploads/2025/.env"] [unique_id "amtYH4El-VZ8aIUwh45m9QAAABM"]
[Thu Jul 30 14:56:47.164369 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/uploads/2025/.env"] [unique_id "amtYH4El-VZ8aIUwh45m9QAAABM"]
[Thu Jul 30 14:56:47.164554 2026] [security2:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYH4El-VZ8aIUwh45m9QAAABM"]
[Thu Jul 30 14:56:47.263208 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.357258 2026] [cgi:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.382478 2026] [core:error] [pid 3576472:tid 3576472] [client 185.177.72.70:24342] AH10244: invalid URI path (/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/var/www/html/.env)
[Thu Jul 30 14:56:47.490738 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.622980 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.630803 2026] [core:error] [pid 3574307:tid 3574307] (13)Permission denied: [client 216.73.216.199:29343] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/netconsole/parameters/oops_only
[Thu Jul 30 14:56:47.709776 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.815801 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.892617 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:47.918032 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/web.config"] [unique_id "amtYH_fZVVqWn1wbi6as9gAAAA0"]
[Thu Jul 30 14:56:47.918286 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web.config"] [unique_id "amtYH_fZVVqWn1wbi6as9gAAAA0"]
[Thu Jul 30 14:56:47.918476 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web.config"] [unique_id "amtYH_fZVVqWn1wbi6as9gAAAA0"]
[Thu Jul 30 14:56:47.918708 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYH_fZVVqWn1wbi6as9gAAAA0"]
[Thu Jul 30 14:56:47.993091 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.089165 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.193222 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.292845 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.390647 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.514671 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.613041 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.686794 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.765817 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.863736 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:48.967431 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.057766 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.148018 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.263648 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.342842 2026] [ssl:error] [pid 3571882:tid 3571882] (EAI 2)Name or service not known: [client 144.76.19.72:65414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:49.342870 2026] [ssl:error] [pid 3571882:tid 3571882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:49.349998 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.371573 2026] [core:error] [pid 3574310:tid 3574310] (13)Permission denied: [client 216.73.216.199:11993] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/total_objects
[Thu Jul 30 14:56:49.386288 2026] [authz_core:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:56:49.388396 2026] [access_compat:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 14:56:49.388454 2026] [access_compat:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 14:56:49.393044 2026] [access_compat:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 14:56:49.398136 2026] [ssl:error] [pid 3574252:tid 3574252] (EAI 2)Name or service not known: [client 144.76.19.72:65428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:49.398179 2026] [ssl:error] [pid 3574252:tid 3574252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:49.446180 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.535940 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.650136 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.739722 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:49.781003 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sites/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/sites/default/.env"] [unique_id "amtYIffZVVqWn1wbi6atHQAAAA0"]
[Thu Jul 30 14:56:49.781200 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/sites/default/.env"] [unique_id "amtYIffZVVqWn1wbi6atHQAAAA0"]
[Thu Jul 30 14:56:49.781374 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYIffZVVqWn1wbi6atHQAAAA0"]
[Thu Jul 30 14:56:49.818910 2026] [authz_core:error] [pid 3563515:tid 3563515] [client 66.249.66.33:39582] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:56:49.821686 2026] [authz_core:error] [pid 3563515:tid 3563515] [client 66.249.66.33:39582] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:56:49.910759 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.031514 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.136318 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.229684 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.269121 2026] [ssl:error] [pid 3574310:tid 3574310] (70014)End of file found: [client 216.73.216.199:11993] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:50.309805 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.428958 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.526521 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.603878 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.694227 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.825494 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:50.925463 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.051378 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.169444 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.173618 2026] [ssl:error] [pid 3574307:tid 3574307] (70014)End of file found: [client 216.73.216.199:29343] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:51.203512 2026] [security2:error] [pid 3561650:tid 3561650] [client 114.119.159.134:37729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "oliviamarjorie.com"] [uri "/robots.txt"] [unique_id "amtYI00ZzGsDgi8AfQ9-XAAAAAI"], referer: https://oliviamarjorie.com/robots.txt
[Thu Jul 30 14:56:51.271083 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.362237 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.468382 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.558777 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.663631 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.799059 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:51.906508 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.009272 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.126406 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.174385 2026] [core:error] [pid 3555839:tid 3555839] [client 91.192.242.42:19321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/the-day-santa-come-to-see-me/
[Thu Jul 30 14:56:52.174430 2026] [core:error] [pid 3555839:tid 3555839] [client 91.192.242.42:19321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/the-day-santa-come-to-see-me/
[Thu Jul 30 14:56:52.214633 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.311164 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.367692 2026] [access_compat:error] [pid 3561650:tid 3561650] [client 64.180.68.231:65202] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:56:52.408798 2026] [cgi:error] [pid 3567988:tid 3567988] [client 185.177.72.70:24346] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.450428 2026] [ssl:error] [pid 3577558:tid 3577558] (EAI 2)Name or service not known: [client 144.76.19.72:18464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:52.450473 2026] [ssl:error] [pid 3577558:tid 3577558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:52.506827 2026] [ssl:error] [pid 3567988:tid 3567988] (EAI 2)Name or service not known: [client 144.76.19.72:18466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:52.506858 2026] [ssl:error] [pid 3567988:tid 3567988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:52.523662 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.538783 2026] [authz_core:error] [pid 3577559:tid 3577559] [client 66.249.66.33:65490] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:56:52.541486 2026] [authz_core:error] [pid 3577559:tid 3577559] [client 66.249.66.33:65490] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:56:52.632905 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.682146 2026] [ssl:error] [pid 3576471:tid 3576471] (70014)End of file found: [client 216.73.216.199:15531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:56:52.765410 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.875394 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:52.969837 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.063905 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.175532 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.305781 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.532896 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.652452 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.756618 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.896975 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:53.982058 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.075828 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.216968 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.335632 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.432531 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.543466 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.640184 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.742494 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.830224 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:54.909228 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.021401 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.133007 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.235385 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.321491 2026] [authz_core:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 14:56:55.331158 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.429314 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.521437 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.560398 2026] [ssl:error] [pid 3571945:tid 3571945] (EAI 2)Name or service not known: [client 144.76.19.72:18480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:55.560452 2026] [ssl:error] [pid 3571945:tid 3571945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:55.615541 2026] [ssl:error] [pid 3562585:tid 3562585] (EAI 2)Name or service not known: [client 144.76.19.72:18492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:55.615572 2026] [ssl:error] [pid 3562585:tid 3562585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:55.632266 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.745425 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.866226 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.965760 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:55.992497 2026] [security2:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtYJ183LySLykQQdykZ9AAAABs"]
[Thu Jul 30 14:56:55.992843 2026] [security2:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtYJ183LySLykQQdykZ9AAAABs"]
[Thu Jul 30 14:56:55.992991 2026] [security2:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYJ183LySLykQQdykZ9AAAABs"]
[Thu Jul 30 14:56:56.083210 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.201255 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.246457 2026] [security2:error] [pid 3574142:tid 3574142] [client 185.191.171.10:55370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/oc-son-of-regulus-black-fanfiction"] [unique_id "amtYKBfOiewaBEcgxRT5mgAAABo"]
[Thu Jul 30 14:56:56.339568 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.436297 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.560543 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.566534 2026] [access_compat:error] [pid 3574306:tid 3574306] [client 64.180.68.231:65401] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:56:56.655729 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.794265 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.905230 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:56.997557 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.096215 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.197753 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.282516 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.356157 2026] [security2:error] [pid 3575639:tid 3575639] [client 216.73.216.199:15199] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/json.ini"] [unique_id "amtYKf0ADDHRY8SvhXGePgAAAAY"]
[Thu Jul 30 14:56:57.356372 2026] [security2:error] [pid 3575639:tid 3575639] [client 216.73.216.199:15199] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/json.ini"] [unique_id "amtYKf0ADDHRY8SvhXGePgAAAAY"]
[Thu Jul 30 14:56:57.356587 2026] [security2:error] [pid 3575639:tid 3575639] [client 216.73.216.199:15199] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cloudlinux/alt-php72/root/etc/php.d.all/json.ini"] [unique_id "amtYKf0ADDHRY8SvhXGePgAAAAY"]
[Thu Jul 30 14:56:57.370233 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.453895 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.569615 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.594646 2026] [security2:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/elmah.axd"] [unique_id "amtYKV83LySLykQQdykaEwAAABs"]
[Thu Jul 30 14:56:57.595012 2026] [security2:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/elmah.axd"] [unique_id "amtYKV83LySLykQQdykaEwAAABs"]
[Thu Jul 30 14:56:57.595185 2026] [security2:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYKV83LySLykQQdykaEwAAABs"]
[Thu Jul 30 14:56:57.695953 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.779987 2026] [cgi:error] [pid 3572796:tid 3572796] [client 185.177.72.70:60958] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.893288 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:57.982660 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.003114 2026] [authz_core:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/jquery/error_log
[Thu Jul 30 14:56:58.088689 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.123821 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/s3.key"] [unique_id "amtYKmSb4o553figTwUxuwAAABk"]
[Thu Jul 30 14:56:58.124170 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/s3.key"] [unique_id "amtYKmSb4o553figTwUxuwAAABk"]
[Thu Jul 30 14:56:58.124317 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYKmSb4o553figTwUxuwAAABk"]
[Thu Jul 30 14:56:58.219504 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.298369 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.378137 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.406581 2026] [authz_core:error] [pid 3574255:tid 3574255] [client 146.70.194.246:54704] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 14:56:58.466214 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.564487 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.660208 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.691200 2026] [ssl:error] [pid 3574142:tid 3574142] (EAI 2)Name or service not known: [client 144.76.19.72:18508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:58.691232 2026] [ssl:error] [pid 3574142:tid 3574142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:58.744761 2026] [ssl:error] [pid 3572796:tid 3572796] (EAI 2)Name or service not known: [client 144.76.19.72:18524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:56:58.744793 2026] [ssl:error] [pid 3572796:tid 3572796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:56:58.749374 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.835182 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:58.926689 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.026036 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.078580 2026] [authz_core:error] [pid 3569516:tid 3569516] [client 146.70.194.246:53404] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/block-supports/error_log
[Thu Jul 30 14:56:59.132662 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.213680 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.303263 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.398048 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.504658 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.600166 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.694568 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.802142 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.893746 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:56:59.982221 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.005881 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/debug.log"] [unique_id "amtYLGSb4o553figTwUx5AAAABk"]
[Thu Jul 30 14:57:00.006180 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/debug.log"] [unique_id "amtYLGSb4o553figTwUx5AAAABk"]
[Thu Jul 30 14:57:00.006328 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLGSb4o553figTwUx5AAAABk"]
[Thu Jul 30 14:57:00.107389 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.194287 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.218823 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/config"] [unique_id "amtYLGSb4o553figTwUx6QAAABk"]
[Thu Jul 30 14:57:00.218992 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/config"] [unique_id "amtYLGSb4o553figTwUx6QAAABk"]
[Thu Jul 30 14:57:00.219174 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLGSb4o553figTwUx6QAAABk"]
[Thu Jul 30 14:57:00.249176 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYLGSb4o553figTwUx6gAAABk"]
[Thu Jul 30 14:57:00.249337 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYLGSb4o553figTwUx6gAAABk"]
[Thu Jul 30 14:57:00.249492 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLGSb4o553figTwUx6gAAABk"]
[Thu Jul 30 14:57:00.342545 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.446891 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.543428 2026] [authz_core:error] [pid 3562475:tid 3562475] [client 146.70.194.246:53498] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/html-api/error_log
[Thu Jul 30 14:57:00.548905 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.649683 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.765826 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.876037 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:00.906305 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.aws"] [unique_id "amtYLGSb4o553figTwUx9wAAABk"]
[Thu Jul 30 14:57:00.906505 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.aws"] [unique_id "amtYLGSb4o553figTwUx9wAAABk"]
[Thu Jul 30 14:57:00.906699 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLGSb4o553figTwUx9wAAABk"]
[Thu Jul 30 14:57:00.984649 2026] [core:error] [pid 3575639:tid 3575639] (13)Permission denied: [client 216.73.216.199:15199] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/objects
[Thu Jul 30 14:57:00.995789 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:01.027601 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s3/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/s3/.env.bak"] [unique_id "amtYLWSb4o553figTwUx-gAAABk"]
[Thu Jul 30 14:57:01.027862 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/s3/.env.bak"] [unique_id "amtYLWSb4o553figTwUx-gAAABk"]
[Thu Jul 30 14:57:01.028098 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUx-gAAABk"]
[Thu Jul 30 14:57:01.053048 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/srv/.env"] [unique_id "amtYLWSb4o553figTwUx-wAAABk"]
[Thu Jul 30 14:57:01.053282 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/srv/.env"] [unique_id "amtYLWSb4o553figTwUx-wAAABk"]
[Thu Jul 30 14:57:01.053472 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUx-wAAABk"]
[Thu Jul 30 14:57:01.081232 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.example"] [unique_id "amtYLWSb4o553figTwUx_AAAABk"]
[Thu Jul 30 14:57:01.081475 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.example"] [unique_id "amtYLWSb4o553figTwUx_AAAABk"]
[Thu Jul 30 14:57:01.081712 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUx_AAAABk"]
[Thu Jul 30 14:57:01.104121 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env"] [unique_id "amtYLWSb4o553figTwUx_QAAABk"]
[Thu Jul 30 14:57:01.104351 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env"] [unique_id "amtYLWSb4o553figTwUx_QAAABk"]
[Thu Jul 30 14:57:01.104560 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUx_QAAABk"]
[Thu Jul 30 14:57:01.181034 2026] [authz_core:error] [pid 3571945:tid 3571945] [client 65.109.124.116:26951] AH01630: client denied by server configuration: /home/winterb/public_html/ezazz/error_log
[Thu Jul 30 14:57:01.213060 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:01.241516 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /app/etc/local.xml found within REQUEST_FILENAME: /app/etc/local.xml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/etc/local.xml"] [unique_id "amtYLWSb4o553figTwUyAAAAABk"]
[Thu Jul 30 14:57:01.241716 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/etc/local.xml"] [unique_id "amtYLWSb4o553figTwUyAAAAABk"]
[Thu Jul 30 14:57:01.241901 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyAAAAABk"]
[Thu Jul 30 14:57:01.263164 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/HEAD"] [unique_id "amtYLWSb4o553figTwUyAQAAABk"]
[Thu Jul 30 14:57:01.263372 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/HEAD"] [unique_id "amtYLWSb4o553figTwUyAQAAABk"]
[Thu Jul 30 14:57:01.263581 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyAQAAABk"]
[Thu Jul 30 14:57:01.288143 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/index"] [unique_id "amtYLWSb4o553figTwUyAgAAABk"]
[Thu Jul 30 14:57:01.288346 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/index"] [unique_id "amtYLWSb4o553figTwUyAgAAABk"]
[Thu Jul 30 14:57:01.288522 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyAgAAABk"]
[Thu Jul 30 14:57:01.312969 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/HEAD"] [unique_id "amtYLWSb4o553figTwUyAwAAABk"]
[Thu Jul 30 14:57:01.313224 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/HEAD"] [unique_id "amtYLWSb4o553figTwUyAwAAABk"]
[Thu Jul 30 14:57:01.313428 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyAwAAABk"]
[Thu Jul 30 14:57:01.334893 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/heads/master"] [unique_id "amtYLWSb4o553figTwUyBAAAABk"]
[Thu Jul 30 14:57:01.335140 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/heads/master"] [unique_id "amtYLWSb4o553figTwUyBAAAABk"]
[Thu Jul 30 14:57:01.335365 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyBAAAABk"]
[Thu Jul 30 14:57:01.358316 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/heads/main"] [unique_id "amtYLWSb4o553figTwUyBQAAABk"]
[Thu Jul 30 14:57:01.358564 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/heads/main"] [unique_id "amtYLWSb4o553figTwUyBQAAABk"]
[Thu Jul 30 14:57:01.358754 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyBQAAABk"]
[Thu Jul 30 14:57:01.381138 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/remotes/origin/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "amtYLWSb4o553figTwUyBgAAABk"]
[Thu Jul 30 14:57:01.381347 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "amtYLWSb4o553figTwUyBgAAABk"]
[Thu Jul 30 14:57:01.381557 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyBgAAABk"]
[Thu Jul 30 14:57:01.413989 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/remotes/origin/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "amtYLWSb4o553figTwUyBwAAABk"]
[Thu Jul 30 14:57:01.414246 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/refs/remotes/origin/main"] [unique_id "amtYLWSb4o553figTwUyBwAAABk"]
[Thu Jul 30 14:57:01.414444 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyBwAAABk"]
[Thu Jul 30 14:57:01.436272 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/hooks"] [unique_id "amtYLWSb4o553figTwUyCAAAABk"]
[Thu Jul 30 14:57:01.436504 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/hooks"] [unique_id "amtYLWSb4o553figTwUyCAAAABk"]
[Thu Jul 30 14:57:01.436712 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyCAAAABk"]
[Thu Jul 30 14:57:01.459407 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/info/exclude"] [unique_id "amtYLWSb4o553figTwUyCQAAABk"]
[Thu Jul 30 14:57:01.459636 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/info/exclude"] [unique_id "amtYLWSb4o553figTwUyCQAAABk"]
[Thu Jul 30 14:57:01.459819 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyCQAAABk"]
[Thu Jul 30 14:57:01.485482 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/master"] [unique_id "amtYLWSb4o553figTwUyCgAAABk"]
[Thu Jul 30 14:57:01.485716 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/master"] [unique_id "amtYLWSb4o553figTwUyCgAAABk"]
[Thu Jul 30 14:57:01.485915 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyCgAAABk"]
[Thu Jul 30 14:57:01.507399 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/main"] [unique_id "amtYLWSb4o553figTwUyCwAAABk"]
[Thu Jul 30 14:57:01.507650 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/main"] [unique_id "amtYLWSb4o553figTwUyCwAAABk"]
[Thu Jul 30 14:57:01.507836 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyCwAAABk"]
[Thu Jul 30 14:57:01.511754 2026] [authz_core:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/l10n/error_log
[Thu Jul 30 14:57:01.529770 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/remotes/origin/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "amtYLWSb4o553figTwUyDAAAABk"]
[Thu Jul 30 14:57:01.529996 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "amtYLWSb4o553figTwUyDAAAABk"]
[Thu Jul 30 14:57:01.530213 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyDAAAABk"]
[Thu Jul 30 14:57:01.553401 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/packed-refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/packed-refs"] [unique_id "amtYLWSb4o553figTwUyDQAAABk"]
[Thu Jul 30 14:57:01.553624 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/packed-refs"] [unique_id "amtYLWSb4o553figTwUyDQAAABk"]
[Thu Jul 30 14:57:01.553820 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyDQAAABk"]
[Thu Jul 30 14:57:01.577210 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/objects"] [unique_id "amtYLWSb4o553figTwUyDgAAABk"]
[Thu Jul 30 14:57:01.577452 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/objects"] [unique_id "amtYLWSb4o553figTwUyDgAAABk"]
[Thu Jul 30 14:57:01.577665 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyDgAAABk"]
[Thu Jul 30 14:57:01.601787 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/commit_editmsg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "amtYLWSb4o553figTwUyDwAAABk"]
[Thu Jul 30 14:57:01.602006 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "amtYLWSb4o553figTwUyDwAAABk"]
[Thu Jul 30 14:57:01.602213 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyDwAAABk"]
[Thu Jul 30 14:57:01.616092 2026] [authz_core:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 14:57:01.617991 2026] [access_compat:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 14:57:01.618032 2026] [access_compat:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 14:57:01.622216 2026] [access_compat:error] [pid 3576350:tid 3576350] [client 74.248.24.145:58733] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 14:57:01.628606 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/description"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/description"] [unique_id "amtYLWSb4o553figTwUyEAAAABk"]
[Thu Jul 30 14:57:01.628846 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/description"] [unique_id "amtYLWSb4o553figTwUyEAAAABk"]
[Thu Jul 30 14:57:01.629027 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyEAAAABk"]
[Thu Jul 30 14:57:01.651711 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/fetch_head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/FETCH_HEAD"] [unique_id "amtYLWSb4o553figTwUyEQAAABk"]
[Thu Jul 30 14:57:01.651941 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/FETCH_HEAD"] [unique_id "amtYLWSb4o553figTwUyEQAAABk"]
[Thu Jul 30 14:57:01.652157 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyEQAAABk"]
[Thu Jul 30 14:57:01.677625 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/orig_head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/ORIG_HEAD"] [unique_id "amtYLWSb4o553figTwUyEgAAABk"]
[Thu Jul 30 14:57:01.677873 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/ORIG_HEAD"] [unique_id "amtYLWSb4o553figTwUyEgAAABk"]
[Thu Jul 30 14:57:01.678053 2026] [security2:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLWSb4o553figTwUyEgAAABk"]
[Thu Jul 30 14:57:01.772166 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:01.798188 2026] [ssl:error] [pid 3555839:tid 3555839] (EAI 2)Name or service not known: [client 144.76.19.72:54524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:01.798221 2026] [ssl:error] [pid 3555839:tid 3555839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:01.864805 2026] [ssl:error] [pid 3569021:tid 3569021] (EAI 2)Name or service not known: [client 144.76.19.72:54538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:01.864846 2026] [ssl:error] [pid 3569021:tid 3569021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:01.889991 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:01.995626 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.082583 2026] [cgi:error] [pid 3577830:tid 3577830] [client 185.177.72.70:60968] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.199004 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.304103 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.393223 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.486731 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.574403 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.665838 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.783629 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.869232 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.951520 2026] [security2:error] [pid 3565955:tid 3565955] [client 94.154.43.188:28490] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hornsey-town-hall.org.uk"] [uri "/.env"] [unique_id "amtYLnE1bYaZYNpdI6GJQgAAAAM"]
[Thu Jul 30 14:57:02.951695 2026] [security2:error] [pid 3565955:tid 3565955] [client 94.154.43.188:28490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hornsey-town-hall.org.uk"] [uri "/.env"] [unique_id "amtYLnE1bYaZYNpdI6GJQgAAAAM"]
[Thu Jul 30 14:57:02.955706 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:02.975940 2026] [security2:error] [pid 3572796:tid 3572796] [client 77.137.75.152:54027] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYLl83LySLykQQdykaHQAAABs"]
[Thu Jul 30 14:57:02.976003 2026] [security2:error] [pid 3572796:tid 3572796] [client 77.137.75.152:54027] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYLl83LySLykQQdykaHQAAABs"]
[Thu Jul 30 14:57:02.976387 2026] [security2:error] [pid 3572796:tid 3572796] [client 77.137.75.152:54027] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYLl83LySLykQQdykaHQAAABs"]
[Thu Jul 30 14:57:03.038754 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.071260 2026] [access_compat:error] [pid 3555839:tid 3555839] [client 64.180.68.231:49350] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:03.146235 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.170132 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.gitignore"] [unique_id "amtYLwxraSSX7jgFNEgvlQAAAAU"]
[Thu Jul 30 14:57:03.170308 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.gitignore"] [unique_id "amtYLwxraSSX7jgFNEgvlQAAAAU"]
[Thu Jul 30 14:57:03.170474 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvlQAAAAU"]
[Thu Jul 30 14:57:03.255376 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.348932 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.459242 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.480907 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks/pre-commit"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/hooks/pre-commit"] [unique_id "amtYLwxraSSX7jgFNEgvnAAAAAU"]
[Thu Jul 30 14:57:03.481159 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/hooks/pre-commit"] [unique_id "amtYLwxraSSX7jgFNEgvnAAAAAU"]
[Thu Jul 30 14:57:03.481355 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvnAAAAAU"]
[Thu Jul 30 14:57:03.503243 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/hooks/post-commit"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/hooks/post-commit"] [unique_id "amtYLwxraSSX7jgFNEgvnQAAAAU"]
[Thu Jul 30 14:57:03.503481 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/hooks/post-commit"] [unique_id "amtYLwxraSSX7jgFNEgvnQAAAAU"]
[Thu Jul 30 14:57:03.503675 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvnQAAAAU"]
[Thu Jul 30 14:57:03.523508 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/info"] [unique_id "amtYLwxraSSX7jgFNEgvngAAAAU"]
[Thu Jul 30 14:57:03.523733 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/info"] [unique_id "amtYLwxraSSX7jgFNEgvngAAAAU"]
[Thu Jul 30 14:57:03.523931 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvngAAAAU"]
[Thu Jul 30 14:57:03.546024 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/objects/info"] [unique_id "amtYLwxraSSX7jgFNEgvnwAAAAU"]
[Thu Jul 30 14:57:03.546270 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/objects/info"] [unique_id "amtYLwxraSSX7jgFNEgvnwAAAAU"]
[Thu Jul 30 14:57:03.546465 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvnwAAAAU"]
[Thu Jul 30 14:57:03.564455 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/objects/pack"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/objects/pack"] [unique_id "amtYLwxraSSX7jgFNEgvoAAAAAU"]
[Thu Jul 30 14:57:03.564688 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/objects/pack"] [unique_id "amtYLwxraSSX7jgFNEgvoAAAAAU"]
[Thu Jul 30 14:57:03.564891 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvoAAAAAU"]
[Thu Jul 30 14:57:03.590135 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/config~"] [unique_id "amtYLwxraSSX7jgFNEgvoQAAAAU"]
[Thu Jul 30 14:57:03.590371 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/config~"] [unique_id "amtYLwxraSSX7jgFNEgvoQAAAAU"]
[Thu Jul 30 14:57:03.590571 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvoQAAAAU"]
[Thu Jul 30 14:57:03.609260 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/"] [unique_id "amtYLwxraSSX7jgFNEgvogAAAAU"]
[Thu Jul 30 14:57:03.609498 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/"] [unique_id "amtYLwxraSSX7jgFNEgvogAAAAU"]
[Thu Jul 30 14:57:03.609700 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvogAAAAU"]
[Thu Jul 30 14:57:03.689533 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.788498 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.819694 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/sendgrid/.env"] [unique_id "amtYLwxraSSX7jgFNEgvpwAAAAU"]
[Thu Jul 30 14:57:03.819832 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/sendgrid/.env"] [unique_id "amtYLwxraSSX7jgFNEgvpwAAAAU"]
[Thu Jul 30 14:57:03.819991 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvpwAAAAU"]
[Thu Jul 30 14:57:03.844275 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.testing"] [unique_id "amtYLwxraSSX7jgFNEgvqAAAAAU"]
[Thu Jul 30 14:57:03.844438 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.testing"] [unique_id "amtYLwxraSSX7jgFNEgvqAAAAAU"]
[Thu Jul 30 14:57:03.844587 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvqAAAAAU"]
[Thu Jul 30 14:57:03.865808 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.development"] [unique_id "amtYLwxraSSX7jgFNEgvqQAAAAU"]
[Thu Jul 30 14:57:03.865973 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.development"] [unique_id "amtYLwxraSSX7jgFNEgvqQAAAAU"]
[Thu Jul 30 14:57:03.866150 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvqQAAAAU"]
[Thu Jul 30 14:57:03.947912 2026] [security2:error] [pid 3565955:tid 3565955] [client 94.154.43.188:28490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hornsey-town-hall.org.uk"] [uri "/index.php"] [unique_id "amtYLnE1bYaZYNpdI6GJQgAAAAM"]
[Thu Jul 30 14:57:03.949683 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:03.970690 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.production"] [unique_id "amtYLwxraSSX7jgFNEgvrAAAAAU"]
[Thu Jul 30 14:57:03.970866 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.production"] [unique_id "amtYLwxraSSX7jgFNEgvrAAAAAU"]
[Thu Jul 30 14:57:03.971025 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvrAAAAAU"]
[Thu Jul 30 14:57:03.993660 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.test"] [unique_id "amtYLwxraSSX7jgFNEgvrQAAAAU"]
[Thu Jul 30 14:57:03.993840 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.test"] [unique_id "amtYLwxraSSX7jgFNEgvrQAAAAU"]
[Thu Jul 30 14:57:03.993991 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYLwxraSSX7jgFNEgvrQAAAAU"]
[Thu Jul 30 14:57:03.995275 2026] [authz_core:error] [pid 3562585:tid 3562585] [client 74.248.24.145:39627] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 14:57:04.014258 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYMAxraSSX7jgFNEgvrgAAAAU"]
[Thu Jul 30 14:57:04.014396 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYMAxraSSX7jgFNEgvrgAAAAU"]
[Thu Jul 30 14:57:04.014548 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMAxraSSX7jgFNEgvrgAAAAU"]
[Thu Jul 30 14:57:04.035578 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod"] [unique_id "amtYMAxraSSX7jgFNEgvrwAAAAU"]
[Thu Jul 30 14:57:04.035718 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod"] [unique_id "amtYMAxraSSX7jgFNEgvrwAAAAU"]
[Thu Jul 30 14:57:04.035857 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMAxraSSX7jgFNEgvrwAAAAU"]
[Thu Jul 30 14:57:04.131844 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.152677 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stripe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/stripe/.env"] [unique_id "amtYMAxraSSX7jgFNEgvsgAAAAU"]
[Thu Jul 30 14:57:04.152851 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/stripe/.env"] [unique_id "amtYMAxraSSX7jgFNEgvsgAAAAU"]
[Thu Jul 30 14:57:04.153015 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMAxraSSX7jgFNEgvsgAAAAU"]
[Thu Jul 30 14:57:04.232656 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.315610 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.405386 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.502074 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.613714 2026] [ssl:error] [pid 3568093:tid 3568093] (70014)End of file found: [client 216.73.216.199:28723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:04.622253 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.739234 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.818651 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.899488 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:04.916685 2026] [ssl:error] [pid 3575639:tid 3575639] (70014)End of file found: [client 216.73.216.199:15199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:04.921596 2026] [ssl:error] [pid 3571945:tid 3571945] (EAI 2)Name or service not known: [client 144.76.19.72:54554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:04.921616 2026] [ssl:error] [pid 3571945:tid 3571945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:04.974579 2026] [ssl:error] [pid 3565955:tid 3565955] (EAI 2)Name or service not known: [client 144.76.19.72:54564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:04.975103 2026] [ssl:error] [pid 3565955:tid 3565955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:04.977579 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.070763 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.164784 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.251439 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.271992 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/access.log"] [unique_id "amtYMQxraSSX7jgFNEgvzAAAAAU"]
[Thu Jul 30 14:57:05.272317 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/access.log"] [unique_id "amtYMQxraSSX7jgFNEgvzAAAAAU"]
[Thu Jul 30 14:57:05.272478 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMQxraSSX7jgFNEgvzAAAAAU"]
[Thu Jul 30 14:57:05.367180 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.386440 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/error.log"] [unique_id "amtYMQxraSSX7jgFNEgvzwAAAAU"]
[Thu Jul 30 14:57:05.386782 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/error.log"] [unique_id "amtYMQxraSSX7jgFNEgvzwAAAAU"]
[Thu Jul 30 14:57:05.386951 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMQxraSSX7jgFNEgvzwAAAAU"]
[Thu Jul 30 14:57:05.480548 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.500434 2026] [authz_core:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01630: client denied by server configuration: /home/swingadd/public_html/error_log
[Thu Jul 30 14:57:05.591764 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.690004 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.767957 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.825311 2026] [core:error] [pid 3576472:tid 3576472] (13)Permission denied: [client 216.73.216.199:14051] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/mbcache/uevent
[Thu Jul 30 14:57:05.848213 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:05.930485 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.064220 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.124623 2026] [security2:error] [pid 3576472:tid 3576472] [client 216.73.216.199:14051] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cloudlinux-edition-watcher.log"] [unique_id "amtYMoEl-VZ8aIUwh45nAwAAABM"]
[Thu Jul 30 14:57:06.124924 2026] [security2:error] [pid 3576472:tid 3576472] [client 216.73.216.199:14051] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cloudlinux-edition-watcher.log"] [unique_id "amtYMoEl-VZ8aIUwh45nAwAAABM"]
[Thu Jul 30 14:57:06.125150 2026] [security2:error] [pid 3576472:tid 3576472] [client 216.73.216.199:14051] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/cloudlinux/cloudlinux-edition-watcher.log"] [unique_id "amtYMoEl-VZ8aIUwh45nAwAAABM"]
[Thu Jul 30 14:57:06.155143 2026] [access_compat:error] [pid 3565955:tid 3565955] [client 45.158.164.139:50956] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:57:06.182551 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.304835 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:53398] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.440552 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.465387 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/access.log"] [unique_id "amtYMiq77xGDIP_UHYHSZQAAAAg"]
[Thu Jul 30 14:57:06.465754 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/access.log"] [unique_id "amtYMiq77xGDIP_UHYHSZQAAAAg"]
[Thu Jul 30 14:57:06.465937 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMiq77xGDIP_UHYHSZQAAAAg"]
[Thu Jul 30 14:57:06.560197 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.662228 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.735130 2026] [ssl:error] [pid 3576472:tid 3576472] (70014)End of file found: [client 216.73.216.199:14051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:06.777041 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.893007 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:06.975243 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.004224 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env"] [unique_id "amtYMyq77xGDIP_UHYHScAAAAAg"]
[Thu Jul 30 14:57:07.004470 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env"] [unique_id "amtYMyq77xGDIP_UHYHScAAAAAg"]
[Thu Jul 30 14:57:07.004662 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMyq77xGDIP_UHYHScAAAAAg"]
[Thu Jul 30 14:57:07.107135 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.201907 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.221027 2026] [access_compat:error] [pid 3555839:tid 3555839] [client 64.180.68.231:49546] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:07.332426 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.421719 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.443750 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /tmui/login.jsp/../tmui/locallb/workspace/fileread.jsp?filename=/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "amtYMyq77xGDIP_UHYHSeQAAAAg"]
[Thu Jul 30 14:57:07.444254 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "amtYMyq77xGDIP_UHYHSeQAAAAg"]
[Thu Jul 30 14:57:07.444480 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMyq77xGDIP_UHYHSeQAAAAg"]
[Thu Jul 30 14:57:07.463942 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /tmui/login.jsp/../tmui/locallb/workspace/fileread.jsp?filename=/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "amtYMyq77xGDIP_UHYHSegAAAAg"]
[Thu Jul 30 14:57:07.464488 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "amtYMyq77xGDIP_UHYHSegAAAAg"]
[Thu Jul 30 14:57:07.464722 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMyq77xGDIP_UHYHSegAAAAg"]
[Thu Jul 30 14:57:07.483799 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/error.log"] [unique_id "amtYMyq77xGDIP_UHYHSewAAAAg"]
[Thu Jul 30 14:57:07.484231 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/error.log"] [unique_id "amtYMyq77xGDIP_UHYHSewAAAAg"]
[Thu Jul 30 14:57:07.484448 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYMyq77xGDIP_UHYHSewAAAAg"]
[Thu Jul 30 14:57:07.576504 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.707795 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.733000 2026] [security2:error] [pid 3571945:tid 3571945] [client 31.41.14.184:62373] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYM7C4VpBrJlmzAgrCXAAAADw"]
[Thu Jul 30 14:57:07.733057 2026] [security2:error] [pid 3571945:tid 3571945] [client 31.41.14.184:62373] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYM7C4VpBrJlmzAgrCXAAAADw"]
[Thu Jul 30 14:57:07.733402 2026] [security2:error] [pid 3571945:tid 3571945] [client 31.41.14.184:62373] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYM7C4VpBrJlmzAgrCXAAAADw"]
[Thu Jul 30 14:57:07.833905 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:07.910375 2026] [authz_core:error] [pid 3571882:tid 3571882] [client 66.249.66.33:45091] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:57:07.913112 2026] [authz_core:error] [pid 3571882:tid 3571882] [client 66.249.66.33:45091] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:57:07.938432 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.030719 2026] [ssl:error] [pid 3562475:tid 3562475] (EAI 2)Name or service not known: [client 144.76.19.72:54580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:08.030745 2026] [ssl:error] [pid 3562475:tid 3562475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:08.053406 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.087530 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:54582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:08.087568 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:08.141786 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.240338 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.339016 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.364271 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env"] [unique_id "amtYNCq77xGDIP_UHYHSjAAAAAg"]
[Thu Jul 30 14:57:08.364457 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env"] [unique_id "amtYNCq77xGDIP_UHYHSjAAAAAg"]
[Thu Jul 30 14:57:08.364613 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNCq77xGDIP_UHYHSjAAAAAg"]
[Thu Jul 30 14:57:08.385458 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env"] [unique_id "amtYNCq77xGDIP_UHYHSjQAAAAg"]
[Thu Jul 30 14:57:08.385591 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env"] [unique_id "amtYNCq77xGDIP_UHYHSjQAAAAg"]
[Thu Jul 30 14:57:08.385746 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNCq77xGDIP_UHYHSjQAAAAg"]
[Thu Jul 30 14:57:08.475719 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.518857 2026] [security2:error] [pid 3562475:tid 3562475] [client 37.59.204.153:35530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/pilot-vehicle-rates-australia"] [unique_id "amtYNPLhe7F7BPmnalyz6QAAAAQ"]
[Thu Jul 30 14:57:08.574879 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.667232 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.761300 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.847257 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.946053 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:08.972081 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php"] [unique_id "amtYNCq77xGDIP_UHYHSmgAAAAg"]
[Thu Jul 30 14:57:08.972276 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php"] [unique_id "amtYNCq77xGDIP_UHYHSmgAAAAg"]
[Thu Jul 30 14:57:08.972475 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNCq77xGDIP_UHYHSmgAAAAg"]
[Thu Jul 30 14:57:09.064534 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.184225 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.294083 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.326957 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/ssmtp/ssmtp.conf"] [unique_id "amtYNSq77xGDIP_UHYHSoQAAAAg"]
[Thu Jul 30 14:57:09.327404 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/ssmtp/ssmtp.conf"] [unique_id "amtYNSq77xGDIP_UHYHSoQAAAAg"]
[Thu Jul 30 14:57:09.327622 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNSq77xGDIP_UHYHSoQAAAAg"]
[Thu Jul 30 14:57:09.351817 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/exim4/exim4.conf"] [unique_id "amtYNSq77xGDIP_UHYHSogAAAAg"]
[Thu Jul 30 14:57:09.352236 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/exim4/exim4.conf"] [unique_id "amtYNSq77xGDIP_UHYHSogAAAAg"]
[Thu Jul 30 14:57:09.352457 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNSq77xGDIP_UHYHSogAAAAg"]
[Thu Jul 30 14:57:09.480642 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.606340 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.712054 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.799563 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.905336 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:09.978643 2026] [ssl:error] [pid 3566718:tid 3566718] (70014)End of file found: [client 216.73.216.199:17264] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:10.064340 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.194900 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.274362 2026] [ssl:error] [pid 3577558:tid 3577558] (70014)End of file found: [client 216.73.216.199:25091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:10.300227 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.398948 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.490401 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.513300 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/apache2.conf"] [unique_id "amtYNiq77xGDIP_UHYHStwAAAAg"]
[Thu Jul 30 14:57:10.513672 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/apache2.conf"] [unique_id "amtYNiq77xGDIP_UHYHStwAAAAg"]
[Thu Jul 30 14:57:10.513836 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNiq77xGDIP_UHYHStwAAAAg"]
[Thu Jul 30 14:57:10.602600 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.713566 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.808364 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.890215 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.973736 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:10.996509 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /static../var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/static../var/www/html/.env"] [unique_id "amtYNiq77xGDIP_UHYHSwgAAAAg"]
[Thu Jul 30 14:57:10.996548 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /static../var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/static../var/www/html/.env"] [unique_id "amtYNiq77xGDIP_UHYHSwgAAAAg"]
[Thu Jul 30 14:57:10.996597 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/static../var/www/html/.env"] [unique_id "amtYNiq77xGDIP_UHYHSwgAAAAg"]
[Thu Jul 30 14:57:10.996715 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/static../var/www/html/.env"] [unique_id "amtYNiq77xGDIP_UHYHSwgAAAAg"]
[Thu Jul 30 14:57:10.996878 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNiq77xGDIP_UHYHSwgAAAAg"]
[Thu Jul 30 14:57:11.090466 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.112667 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/boto.cfg"] [unique_id "amtYNyq77xGDIP_UHYHSxQAAAAg"]
[Thu Jul 30 14:57:11.113014 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/boto.cfg"] [unique_id "amtYNyq77xGDIP_UHYHSxQAAAAg"]
[Thu Jul 30 14:57:11.113190 2026] [security2:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNyq77xGDIP_UHYHSxQAAAAg"]
[Thu Jul 30 14:57:11.142096 2026] [ssl:error] [pid 3574200:tid 3574200] (EAI 2)Name or service not known: [client 144.76.19.72:29310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:11.142133 2026] [ssl:error] [pid 3574200:tid 3574200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:11.195760 2026] [ssl:error] [pid 3575639:tid 3575639] (EAI 2)Name or service not known: [client 144.76.19.72:29312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:11.195806 2026] [ssl:error] [pid 3575639:tid 3575639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:11.197469 2026] [cgi:error] [pid 3575966:tid 3575966] [client 185.177.72.70:53414] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.317489 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.434890 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.530972 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.558666 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/index_dev.php/_profiler/open"] [unique_id "amtYNwxraSSX7jgFNEgv6wAAAAU"]
[Thu Jul 30 14:57:11.559055 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/index_dev.php/_profiler/open"] [unique_id "amtYNwxraSSX7jgFNEgv6wAAAAU"]
[Thu Jul 30 14:57:11.559238 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): OS File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNwxraSSX7jgFNEgv6wAAAAU"]
[Thu Jul 30 14:57:11.578058 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /?file=../../../../var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amtYNwxraSSX7jgFNEgv7AAAAAU"]
[Thu Jul 30 14:57:11.578128 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /?file=../../../../var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amtYNwxraSSX7jgFNEgv7AAAAAU"]
[Thu Jul 30 14:57:11.578164 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /?file=../../../../var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amtYNwxraSSX7jgFNEgv7AAAAAU"]
[Thu Jul 30 14:57:11.578567 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amtYNwxraSSX7jgFNEgv7AAAAAU"]
[Thu Jul 30 14:57:11.578723 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=15,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNwxraSSX7jgFNEgv7AAAAAU"]
[Thu Jul 30 14:57:11.681901 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.760555 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.784333 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "amtYNwxraSSX7jgFNEgv8QAAAAU"]
[Thu Jul 30 14:57:11.784528 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%5c found within REQUEST_URI_RAW: /..%5c..%5c..%5c..%5c..%5c..%5cvar/log/apache2/access.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "amtYNwxraSSX7jgFNEgv8QAAAAU"]
[Thu Jul 30 14:57:11.784585 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "..\\\\" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ..\\x5c found within REQUEST_URI: /..\\x5c..\\x5c..\\x5c..\\x5c..\\x5c..\\x5cvar/log/apache2/access.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "amtYNwxraSSX7jgFNEgv8QAAAAU"]
[Thu Jul 30 14:57:11.784771 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "amtYNwxraSSX7jgFNEgv8QAAAAU"]
[Thu Jul 30 14:57:11.784930 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNwxraSSX7jgFNEgv8QAAAAU"]
[Thu Jul 30 14:57:11.802320 2026] [security2:error] [pid 3562475:tid 3562475] [client 74.7.242.56:49584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ditchlingfair.com"] [uri "/"] [unique_id "amtYN_Lhe7F7BPmnalyz6wAAAAQ"]
[Thu Jul 30 14:57:11.889740 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:11.915503 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd auto_prepend_file=C:\\\\\\\\\\\\\\\\xampp\\\\\\\\\\\\\\\\htdocs\\\\\\\\\\\\\\\\.env. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd auto_prepend_file=C:\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5cxampp\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5chtdocs\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c.env: \\xadd auto_prepend_file=c:\\x5c\\x5cxampp\\x5c\\x5chtdocs\\x5c\\x5c.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "swingaddiction.co.uk"] [uri "/php-cgi/php-cgi.exe"] [unique_id "amtYNwxraSSX7jgFNEgv9AAAAAU"]
[Thu Jul 30 14:57:11.915897 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/php-cgi/php-cgi.exe"] [unique_id "amtYNwxraSSX7jgFNEgv9AAAAAU"]
[Thu Jul 30 14:57:11.916052 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: Configuration Directive Found"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNwxraSSX7jgFNEgv9AAAAAU"]
[Thu Jul 30 14:57:11.938084 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd auto_prepend_file=C:\\\\\\\\\\\\\\\\xampp\\\\\\\\\\\\\\\\htdocs\\\\\\\\\\\\\\\\.env. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd auto_prepend_file=C:\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5cxampp\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5chtdocs\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c\\x5c.env: \\xadd auto_prepend_file=c:\\x5c\\x5cxampp\\x5c\\x5chtdocs\\x5c\\x5c.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "swingaddiction.co.uk"] [uri "/xampp/php-cgi.exe"] [unique_id "amtYNwxraSSX7jgFNEgv9QAAAAU"]
[Thu Jul 30 14:57:11.938430 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/xampp/php-cgi.exe"] [unique_id "amtYNwxraSSX7jgFNEgv9QAAAAU"]
[Thu Jul 30 14:57:11.938580 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: Configuration Directive Found"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYNwxraSSX7jgFNEgv9QAAAAU"]
[Thu Jul 30 14:57:12.024112 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.110214 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.136909 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /%2e./ found within REQUEST_URI_RAW: /jsp/help-hierarchyTree%2ejsp?helpFilePath=../%2e./%2e./opt/sas/sw/conf/app%2eproperties"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-gAAAAU"]
[Thu Jul 30 14:57:12.136967 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /jsp/help-hierarchyTree.jsp?helpFilePath=../%2e./%2e./opt/sas/sw/conf/app%2eproperties"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-gAAAAU"]
[Thu Jul 30 14:57:12.137000 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /jsp/help-hierarchyTree.jsp?helpFilePath=../../../opt/sas/sw/conf/app.properties"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-gAAAAU"]
[Thu Jul 30 14:57:12.137034 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /jsp/help-hierarchytree.jsp?helpfilepath=../../../opt/sas/sw/conf/app.properties"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-gAAAAU"]
[Thu Jul 30 14:57:12.137504 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-gAAAAU"]
[Thu Jul 30 14:57:12.137659 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 20 - SQLI=0,XSS=0,RFI=0,LFI=20,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOAxraSSX7jgFNEgv-gAAAAU"]
[Thu Jul 30 14:57:12.157770 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /%2e./ found within REQUEST_URI_RAW: /jsp/help-hierarchyTree%2ejsp?helpFilePath=../%2e./%2e./opt/sas/sw/conf/smg%2econf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-wAAAAU"]
[Thu Jul 30 14:57:12.157827 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /jsp/help-hierarchyTree.jsp?helpFilePath=../%2e./%2e./opt/sas/sw/conf/smg%2econf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-wAAAAU"]
[Thu Jul 30 14:57:12.157854 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /jsp/help-hierarchyTree.jsp?helpFilePath=../../../opt/sas/sw/conf/smg.conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-wAAAAU"]
[Thu Jul 30 14:57:12.157879 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /jsp/help-hierarchytree.jsp?helpfilepath=../../../opt/sas/sw/conf/smg.conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-wAAAAU"]
[Thu Jul 30 14:57:12.158280 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/jsp/help-hierarchyTree.jsp"] [unique_id "amtYOAxraSSX7jgFNEgv-wAAAAU"]
[Thu Jul 30 14:57:12.158432 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 20 - SQLI=0,XSS=0,RFI=0,LFI=20,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOAxraSSX7jgFNEgv-wAAAAU"]
[Thu Jul 30 14:57:12.202157 2026] [ssl:error] [pid 3574200:tid 3574200] (70014)End of file found: [client 216.73.216.199:8762] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:12.253498 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.352347 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.380392 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env"] [unique_id "amtYOAxraSSX7jgFNEgwAAAAAAU"]
[Thu Jul 30 14:57:12.380632 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env"] [unique_id "amtYOAxraSSX7jgFNEgwAAAAAAU"]
[Thu Jul 30 14:57:12.380803 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOAxraSSX7jgFNEgwAAAAAAU"]
[Thu Jul 30 14:57:12.401625 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /tmui/login.jsp/../tmui/locallb/workspace/fileread.jsp?filename=/config/bigip.conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "swingaddiction.co.uk"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "amtYOAxraSSX7jgFNEgwAQAAAAU"]
[Thu Jul 30 14:57:12.402112 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp"] [unique_id "amtYOAxraSSX7jgFNEgwAQAAAAU"]
[Thu Jul 30 14:57:12.419398 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOAxraSSX7jgFNEgwAQAAAAU"]
[Thu Jul 30 14:57:12.500138 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.578715 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.676201 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.767218 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:12.791943 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/config"] [unique_id "amtYOAxraSSX7jgFNEgwCgAAAAU"]
[Thu Jul 30 14:57:12.792145 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/config"] [unique_id "amtYOAxraSSX7jgFNEgwCgAAAAU"]
[Thu Jul 30 14:57:12.792298 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOAxraSSX7jgFNEgwCgAAAAU"]
[Thu Jul 30 14:57:12.917024 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.038239 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.141331 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.231223 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.343571 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.411578 2026] [security2:error] [pid 3574305:tid 3574305] [client 41.82.138.173:47792] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYOWWwnAEXOOlximlREAAAAEE"]
[Thu Jul 30 14:57:13.411631 2026] [security2:error] [pid 3574305:tid 3574305] [client 41.82.138.173:47792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYOWWwnAEXOOlximlREAAAAEE"]
[Thu Jul 30 14:57:13.411889 2026] [security2:error] [pid 3574305:tid 3574305] [client 41.82.138.173:47792] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYOWWwnAEXOOlximlREAAAAEE"]
[Thu Jul 30 14:57:13.442890 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.530892 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.632446 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.725217 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:13.756494 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /supabase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/supabase/.env"] [unique_id "amtYOQxraSSX7jgFNEgwHQAAAAU"]
[Thu Jul 30 14:57:13.756670 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/supabase/.env"] [unique_id "amtYOQxraSSX7jgFNEgwHQAAAAU"]
[Thu Jul 30 14:57:13.756825 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwHQAAAAU"]
[Thu Jul 30 14:57:13.778372 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYOQxraSSX7jgFNEgwHgAAAAU"]
[Thu Jul 30 14:57:13.778565 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYOQxraSSX7jgFNEgwHgAAAAU"]
[Thu Jul 30 14:57:13.778714 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwHgAAAAU"]
[Thu Jul 30 14:57:13.798917 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env"] [unique_id "amtYOQxraSSX7jgFNEgwHwAAAAU"]
[Thu Jul 30 14:57:13.799108 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env"] [unique_id "amtYOQxraSSX7jgFNEgwHwAAAAU"]
[Thu Jul 30 14:57:13.799277 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwHwAAAAU"]
[Thu Jul 30 14:57:13.819941 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIAAAAAU"]
[Thu Jul 30 14:57:13.820142 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIAAAAAU"]
[Thu Jul 30 14:57:13.820309 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwIAAAAAU"]
[Thu Jul 30 14:57:13.839877 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/system/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIQAAAAU"]
[Thu Jul 30 14:57:13.840045 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/system/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIQAAAAU"]
[Thu Jul 30 14:57:13.840220 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwIQAAAAU"]
[Thu Jul 30 14:57:13.860803 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIgAAAAU"]
[Thu Jul 30 14:57:13.860974 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIgAAAAU"]
[Thu Jul 30 14:57:13.861138 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwIgAAAAU"]
[Thu Jul 30 14:57:13.880463 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/core/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIwAAAAU"]
[Thu Jul 30 14:57:13.880671 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/core/.env"] [unique_id "amtYOQxraSSX7jgFNEgwIwAAAAU"]
[Thu Jul 30 14:57:13.880806 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwIwAAAAU"]
[Thu Jul 30 14:57:13.900921 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/vendor/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJAAAAAU"]
[Thu Jul 30 14:57:13.901115 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/vendor/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJAAAAAU"]
[Thu Jul 30 14:57:13.901269 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwJAAAAAU"]
[Thu Jul 30 14:57:13.923946 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/storage/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJQAAAAU"]
[Thu Jul 30 14:57:13.924141 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJQAAAAU"]
[Thu Jul 30 14:57:13.924310 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwJQAAAAU"]
[Thu Jul 30 14:57:13.945103 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJgAAAAU"]
[Thu Jul 30 14:57:13.945259 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJgAAAAU"]
[Thu Jul 30 14:57:13.945409 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwJgAAAAU"]
[Thu Jul 30 14:57:13.965665 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/dev/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJwAAAAU"]
[Thu Jul 30 14:57:13.965830 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/dev/.env"] [unique_id "amtYOQxraSSX7jgFNEgwJwAAAAU"]
[Thu Jul 30 14:57:13.965985 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwJwAAAAU"]
[Thu Jul 30 14:57:13.991989 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/v1/.env"] [unique_id "amtYOQxraSSX7jgFNEgwKAAAAAU"]
[Thu Jul 30 14:57:13.992185 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/v1/.env"] [unique_id "amtYOQxraSSX7jgFNEgwKAAAAAU"]
[Thu Jul 30 14:57:13.992346 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOQxraSSX7jgFNEgwKAAAAAU"]
[Thu Jul 30 14:57:14.012880 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/v2/.env"] [unique_id "amtYOgxraSSX7jgFNEgwKQAAAAU"]
[Thu Jul 30 14:57:14.013051 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/v2/.env"] [unique_id "amtYOgxraSSX7jgFNEgwKQAAAAU"]
[Thu Jul 30 14:57:14.013227 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwKQAAAAU"]
[Thu Jul 30 14:57:14.034616 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/admin/.env"] [unique_id "amtYOgxraSSX7jgFNEgwKgAAAAU"]
[Thu Jul 30 14:57:14.034786 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/admin/.env"] [unique_id "amtYOgxraSSX7jgFNEgwKgAAAAU"]
[Thu Jul 30 14:57:14.034955 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwKgAAAAU"]
[Thu Jul 30 14:57:14.055823 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.environment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.environment"] [unique_id "amtYOgxraSSX7jgFNEgwKwAAAAU"]
[Thu Jul 30 14:57:14.055993 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.environment"] [unique_id "amtYOgxraSSX7jgFNEgwKwAAAAU"]
[Thu Jul 30 14:57:14.056169 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwKwAAAAU"]
[Thu Jul 30 14:57:14.078572 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.environment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.environment"] [unique_id "amtYOgxraSSX7jgFNEgwLAAAAAU"]
[Thu Jul 30 14:57:14.078729 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.environment"] [unique_id "amtYOgxraSSX7jgFNEgwLAAAAAU"]
[Thu Jul 30 14:57:14.078879 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwLAAAAAU"]
[Thu Jul 30 14:57:14.098806 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.environment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.environment"] [unique_id "amtYOgxraSSX7jgFNEgwLQAAAAU"]
[Thu Jul 30 14:57:14.098969 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.environment"] [unique_id "amtYOgxraSSX7jgFNEgwLQAAAAU"]
[Thu Jul 30 14:57:14.099131 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwLQAAAAU"]
[Thu Jul 30 14:57:14.120261 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.dist"] [unique_id "amtYOgxraSSX7jgFNEgwLgAAAAU"]
[Thu Jul 30 14:57:14.120441 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.dist"] [unique_id "amtYOgxraSSX7jgFNEgwLgAAAAU"]
[Thu Jul 30 14:57:14.120596 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwLgAAAAU"]
[Thu Jul 30 14:57:14.145433 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.local.php"] [unique_id "amtYOgxraSSX7jgFNEgwLwAAAAU"]
[Thu Jul 30 14:57:14.145568 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.local.php"] [unique_id "amtYOgxraSSX7jgFNEgwLwAAAAU"]
[Thu Jul 30 14:57:14.145720 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwLwAAAAU"]
[Thu Jul 30 14:57:14.176815 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwMAAAAAU"]
[Thu Jul 30 14:57:14.176994 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwMAAAAAU"]
[Thu Jul 30 14:57:14.177161 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwMAAAAAU"]
[Thu Jul 30 14:57:14.252864 2026] [ssl:error] [pid 3574306:tid 3574306] (EAI 2)Name or service not known: [client 144.76.19.72:29322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:14.252896 2026] [ssl:error] [pid 3574306:tid 3574306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:14.260422 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:14.310509 2026] [ssl:error] [pid 3565955:tid 3565955] (EAI 2)Name or service not known: [client 144.76.19.72:29332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:14.310539 2026] [ssl:error] [pid 3565955:tid 3565955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:14.351467 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:14.372537 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwNQAAAAU"]
[Thu Jul 30 14:57:14.372713 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwNQAAAAU"]
[Thu Jul 30 14:57:14.372863 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwNQAAAAU"]
[Thu Jul 30 14:57:14.392973 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/apps/.env"] [unique_id "amtYOgxraSSX7jgFNEgwNgAAAAU"]
[Thu Jul 30 14:57:14.393144 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/apps/.env"] [unique_id "amtYOgxraSSX7jgFNEgwNgAAAAU"]
[Thu Jul 30 14:57:14.393296 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwNgAAAAU"]
[Thu Jul 30 14:57:14.413463 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/apps/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwNwAAAAU"]
[Thu Jul 30 14:57:14.413620 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/apps/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwNwAAAAU"]
[Thu Jul 30 14:57:14.413777 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwNwAAAAU"]
[Thu Jul 30 14:57:14.433604 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOAAAAAU"]
[Thu Jul 30 14:57:14.433747 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOAAAAAU"]
[Thu Jul 30 14:57:14.433896 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwOAAAAAU"]
[Thu Jul 30 14:57:14.455091 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/client/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOQAAAAU"]
[Thu Jul 30 14:57:14.455241 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/client/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOQAAAAU"]
[Thu Jul 30 14:57:14.455390 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwOQAAAAU"]
[Thu Jul 30 14:57:14.474494 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clients/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/clients/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOgAAAAU"]
[Thu Jul 30 14:57:14.474662 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/clients/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOgAAAAU"]
[Thu Jul 30 14:57:14.474805 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwOgAAAAU"]
[Thu Jul 30 14:57:14.494216 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /customer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/customer/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOwAAAAU"]
[Thu Jul 30 14:57:14.494352 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/customer/.env"] [unique_id "amtYOgxraSSX7jgFNEgwOwAAAAU"]
[Thu Jul 30 14:57:14.494501 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwOwAAAAU"]
[Thu Jul 30 14:57:14.515137 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /customers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/customers/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPAAAAAU"]
[Thu Jul 30 14:57:14.515289 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/customers/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPAAAAAU"]
[Thu Jul 30 14:57:14.515449 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwPAAAAAU"]
[Thu Jul 30 14:57:14.534801 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/admin/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPQAAAAU"]
[Thu Jul 30 14:57:14.534955 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/admin/config/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPQAAAAU"]
[Thu Jul 30 14:57:14.535112 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwPQAAAAU"]
[Thu Jul 30 14:57:14.556731 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/administrator/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPgAAAAU"]
[Thu Jul 30 14:57:14.556877 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/administrator/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPgAAAAU"]
[Thu Jul 30 14:57:14.557028 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwPgAAAAU"]
[Thu Jul 30 14:57:14.576310 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wp/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPwAAAAU"]
[Thu Jul 30 14:57:14.576488 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp/.env"] [unique_id "amtYOgxraSSX7jgFNEgwPwAAAAU"]
[Thu Jul 30 14:57:14.576636 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwPwAAAAU"]
[Thu Jul 30 14:57:14.597740 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wordpress/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQAAAAAU"]
[Thu Jul 30 14:57:14.597891 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wordpress/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQAAAAAU"]
[Thu Jul 30 14:57:14.598044 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwQAAAAAU"]
[Thu Jul 30 14:57:14.618379 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/cms/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQQAAAAU"]
[Thu Jul 30 14:57:14.618526 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/cms/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQQAAAAU"]
[Thu Jul 30 14:57:14.618662 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwQQAAAAU"]
[Thu Jul 30 14:57:14.640971 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/database/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQgAAAAU"]
[Thu Jul 30 14:57:14.641123 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/database/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQgAAAAU"]
[Thu Jul 30 14:57:14.641271 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwQgAAAAU"]
[Thu Jul 30 14:57:14.661154 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/db/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQwAAAAU"]
[Thu Jul 30 14:57:14.661295 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/db/.env"] [unique_id "amtYOgxraSSX7jgFNEgwQwAAAAU"]
[Thu Jul 30 14:57:14.661456 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwQwAAAAU"]
[Thu Jul 30 14:57:14.682579 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upload/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/upload/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRAAAAAU"]
[Thu Jul 30 14:57:14.682701 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/upload/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRAAAAAU"]
[Thu Jul 30 14:57:14.682838 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwRAAAAAU"]
[Thu Jul 30 14:57:14.703145 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/uploads/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRQAAAAU"]
[Thu Jul 30 14:57:14.703275 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/uploads/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRQAAAAU"]
[Thu Jul 30 14:57:14.703442 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwRQAAAAU"]
[Thu Jul 30 14:57:14.725232 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backup/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRgAAAAU"]
[Thu Jul 30 14:57:14.725370 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backup/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRgAAAAU"]
[Thu Jul 30 14:57:14.725517 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwRgAAAAU"]
[Thu Jul 30 14:57:14.745569 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backups/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backups/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRwAAAAU"]
[Thu Jul 30 14:57:14.745720 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backups/.env"] [unique_id "amtYOgxraSSX7jgFNEgwRwAAAAU"]
[Thu Jul 30 14:57:14.745863 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwRwAAAAU"]
[Thu Jul 30 14:57:14.774642 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.backup/.env"] [unique_id "amtYOgxraSSX7jgFNEgwSAAAAAU"]
[Thu Jul 30 14:57:14.774796 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.backup/.env"] [unique_id "amtYOgxraSSX7jgFNEgwSAAAAAU"]
[Thu Jul 30 14:57:14.774937 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOgxraSSX7jgFNEgwSAAAAAU"]
[Thu Jul 30 14:57:14.860687 2026] [cgi:error] [pid 3565421:tid 3565421] [client 185.177.72.70:40950] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:14.898329 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/old/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxqQAAAAA"]
[Thu Jul 30 14:57:14.898493 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/old/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxqQAAAAA"]
[Thu Jul 30 14:57:14.898653 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOrEmvQ1NjMKd3kGxqQAAAAA"]
[Thu Jul 30 14:57:14.920886 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/new/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxqgAAAAA"]
[Thu Jul 30 14:57:14.921058 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/new/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxqgAAAAA"]
[Thu Jul 30 14:57:14.921221 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOrEmvQ1NjMKd3kGxqgAAAAA"]
[Thu Jul 30 14:57:14.939688 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /2020/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/2020/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxqwAAAAA"]
[Thu Jul 30 14:57:14.939851 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/2020/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxqwAAAAA"]
[Thu Jul 30 14:57:14.939992 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOrEmvQ1NjMKd3kGxqwAAAAA"]
[Thu Jul 30 14:57:14.956786 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /2021/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/2021/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxrAAAAAA"]
[Thu Jul 30 14:57:14.956912 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/2021/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxrAAAAAA"]
[Thu Jul 30 14:57:14.957042 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOrEmvQ1NjMKd3kGxrAAAAAA"]
[Thu Jul 30 14:57:14.974449 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /2022/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/2022/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxrQAAAAA"]
[Thu Jul 30 14:57:14.974557 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/2022/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxrQAAAAA"]
[Thu Jul 30 14:57:14.974681 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOrEmvQ1NjMKd3kGxrQAAAAA"]
[Thu Jul 30 14:57:14.991792 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /2023/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/2023/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxrgAAAAA"]
[Thu Jul 30 14:57:14.991899 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/2023/.env"] [unique_id "amtYOrEmvQ1NjMKd3kGxrgAAAAA"]
[Thu Jul 30 14:57:14.992025 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYOrEmvQ1NjMKd3kGxrgAAAAA"]
[Thu Jul 30 14:57:15.009116 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /2024/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/2024/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxrwAAAAA"]
[Thu Jul 30 14:57:15.009236 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/2024/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxrwAAAAA"]
[Thu Jul 30 14:57:15.009368 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxrwAAAAA"]
[Thu Jul 30 14:57:15.027014 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/v1/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxsAAAAAA"]
[Thu Jul 30 14:57:15.027147 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/v1/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxsAAAAAA"]
[Thu Jul 30 14:57:15.027278 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxsAAAAAA"]
[Thu Jul 30 14:57:15.044556 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/v2/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxsQAAAAA"]
[Thu Jul 30 14:57:15.044698 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/v2/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxsQAAAAA"]
[Thu Jul 30 14:57:15.044839 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxsQAAAAA"]
[Thu Jul 30 14:57:15.064104 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/v3/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxsgAAAAA"]
[Thu Jul 30 14:57:15.064246 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/v3/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxsgAAAAA"]
[Thu Jul 30 14:57:15.064434 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxsgAAAAA"]
[Thu Jul 30 14:57:15.082489 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/config/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxswAAAAA"]
[Thu Jul 30 14:57:15.082646 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/config/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxswAAAAA"]
[Thu Jul 30 14:57:15.082782 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxswAAAAA"]
[Thu Jul 30 14:57:15.100902 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/core/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtAAAAAA"]
[Thu Jul 30 14:57:15.101031 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/core/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtAAAAAA"]
[Thu Jul 30 14:57:15.101179 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxtAAAAAA"]
[Thu Jul 30 14:57:15.117769 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/app/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtQAAAAA"]
[Thu Jul 30 14:57:15.117907 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/app/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtQAAAAA"]
[Thu Jul 30 14:57:15.118041 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxtQAAAAA"]
[Thu Jul 30 14:57:15.135238 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/test/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtgAAAAA"]
[Thu Jul 30 14:57:15.135369 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/test/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtgAAAAA"]
[Thu Jul 30 14:57:15.135508 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxtgAAAAA"]
[Thu Jul 30 14:57:15.152478 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/dev/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtwAAAAA"]
[Thu Jul 30 14:57:15.152599 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/dev/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxtwAAAAA"]
[Thu Jul 30 14:57:15.152729 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxtwAAAAA"]
[Thu Jul 30 14:57:15.176368 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/beta/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxuAAAAAA"]
[Thu Jul 30 14:57:15.176508 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/beta/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxuAAAAAA"]
[Thu Jul 30 14:57:15.176644 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxuAAAAAA"]
[Thu Jul 30 14:57:15.194604 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/beta/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxuQAAAAA"]
[Thu Jul 30 14:57:15.194734 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/beta/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxuQAAAAA"]
[Thu Jul 30 14:57:15.194877 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxuQAAAAA"]
[Thu Jul 30 14:57:15.213539 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/prod/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxugAAAAA"]
[Thu Jul 30 14:57:15.213689 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/prod/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxugAAAAA"]
[Thu Jul 30 14:57:15.213828 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxugAAAAA"]
[Thu Jul 30 14:57:15.232742 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/production/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxuwAAAAA"]
[Thu Jul 30 14:57:15.232891 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/production/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxuwAAAAA"]
[Thu Jul 30 14:57:15.233040 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxuwAAAAA"]
[Thu Jul 30 14:57:15.252346 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/stage/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvAAAAAA"]
[Thu Jul 30 14:57:15.252472 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/stage/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvAAAAAA"]
[Thu Jul 30 14:57:15.252611 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxvAAAAAA"]
[Thu Jul 30 14:57:15.272381 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/staging/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvQAAAAA"]
[Thu Jul 30 14:57:15.272536 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/staging/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvQAAAAA"]
[Thu Jul 30 14:57:15.272691 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxvQAAAAA"]
[Thu Jul 30 14:57:15.290228 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/test/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvgAAAAA"]
[Thu Jul 30 14:57:15.290382 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/test/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvgAAAAA"]
[Thu Jul 30 14:57:15.290534 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxvgAAAAA"]
[Thu Jul 30 14:57:15.308291 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/testing/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvwAAAAA"]
[Thu Jul 30 14:57:15.308465 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/testing/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxvwAAAAA"]
[Thu Jul 30 14:57:15.308613 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxvwAAAAA"]
[Thu Jul 30 14:57:15.325378 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/development/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwAAAAAA"]
[Thu Jul 30 14:57:15.325544 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/development/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwAAAAAA"]
[Thu Jul 30 14:57:15.325682 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxwAAAAAA"]
[Thu Jul 30 14:57:15.343645 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /develop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/develop/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwQAAAAA"]
[Thu Jul 30 14:57:15.343777 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/develop/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwQAAAAA"]
[Thu Jul 30 14:57:15.343910 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxwQAAAAA"]
[Thu Jul 30 14:57:15.361482 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/docker/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwgAAAAA"]
[Thu Jul 30 14:57:15.361618 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/docker/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwgAAAAA"]
[Thu Jul 30 14:57:15.361749 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxwgAAAAA"]
[Thu Jul 30 14:57:15.378589 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/docker-compose/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwwAAAAA"]
[Thu Jul 30 14:57:15.378719 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/docker-compose/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxwwAAAAA"]
[Thu Jul 30 14:57:15.378850 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxwwAAAAA"]
[Thu Jul 30 14:57:15.397402 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.docker/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxAAAAAA"]
[Thu Jul 30 14:57:15.397534 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.docker/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxAAAAAA"]
[Thu Jul 30 14:57:15.397668 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxxAAAAAA"]
[Thu Jul 30 14:57:15.415403 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxQAAAAA"]
[Thu Jul 30 14:57:15.415527 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxQAAAAA"]
[Thu Jul 30 14:57:15.415662 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxxQAAAAA"]
[Thu Jul 30 14:57:15.418534 2026] [core:error] [pid 3577559:tid 3577559] (13)Permission denied: [client 216.73.216.199:1747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/validate
[Thu Jul 30 14:57:15.435296 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /source/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/source/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxgAAAAA"]
[Thu Jul 30 14:57:15.435453 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/source/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxgAAAAA"]
[Thu Jul 30 14:57:15.435594 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxxgAAAAA"]
[Thu Jul 30 14:57:15.453410 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/sources/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxwAAAAA"]
[Thu Jul 30 14:57:15.453583 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/sources/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxxwAAAAA"]
[Thu Jul 30 14:57:15.453722 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxxwAAAAA"]
[Thu Jul 30 14:57:15.471349 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/root/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxyAAAAAA"]
[Thu Jul 30 14:57:15.471514 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/root/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxyAAAAAA"]
[Thu Jul 30 14:57:15.471656 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxyAAAAAA"]
[Thu Jul 30 14:57:15.489865 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/home/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxyQAAAAA"]
[Thu Jul 30 14:57:15.490016 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/home/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxyQAAAAA"]
[Thu Jul 30 14:57:15.490173 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxyQAAAAA"]
[Thu Jul 30 14:57:15.508319 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/site/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxygAAAAA"]
[Thu Jul 30 14:57:15.508479 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/site/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxygAAAAA"]
[Thu Jul 30 14:57:15.508618 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxygAAAAA"]
[Thu Jul 30 14:57:15.526990 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/panel/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxywAAAAA"]
[Thu Jul 30 14:57:15.527007 2026] [ssl:error] [pid 3577559:tid 3577559] (70014)End of file found: [client 216.73.216.199:1747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:15.527126 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/panel/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxywAAAAA"]
[Thu Jul 30 14:57:15.527261 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxywAAAAA"]
[Thu Jul 30 14:57:15.546093 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /control/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/control/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzAAAAAA"]
[Thu Jul 30 14:57:15.546245 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/control/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzAAAAAA"]
[Thu Jul 30 14:57:15.546382 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxzAAAAAA"]
[Thu Jul 30 14:57:15.563427 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /console/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/console/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzQAAAAA"]
[Thu Jul 30 14:57:15.563578 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/console/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzQAAAAA"]
[Thu Jul 30 14:57:15.563713 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxzQAAAAA"]
[Thu Jul 30 14:57:15.581656 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/console/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/admin/console/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzgAAAAA"]
[Thu Jul 30 14:57:15.581784 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/admin/console/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzgAAAAA"]
[Thu Jul 30 14:57:15.581918 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxzgAAAAA"]
[Thu Jul 30 14:57:15.601733 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/administrator/config/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzwAAAAA"]
[Thu Jul 30 14:57:15.601859 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/administrator/config/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGxzwAAAAA"]
[Thu Jul 30 14:57:15.601997 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGxzwAAAAA"]
[Thu Jul 30 14:57:15.619095 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/webadmin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0AAAAAA"]
[Thu Jul 30 14:57:15.619246 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/webadmin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0AAAAAA"]
[Thu Jul 30 14:57:15.619386 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx0AAAAAA"]
[Thu Jul 30 14:57:15.637430 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sysadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/sysadmin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0QAAAAA"]
[Thu Jul 30 14:57:15.637560 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/sysadmin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0QAAAAA"]
[Thu Jul 30 14:57:15.637698 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx0QAAAAA"]
[Thu Jul 30 14:57:15.656161 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mysql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/mysql/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0gAAAAA"]
[Thu Jul 30 14:57:15.656326 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/mysql/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0gAAAAA"]
[Thu Jul 30 14:57:15.656477 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx0gAAAAA"]
[Thu Jul 30 14:57:15.674851 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dbadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/dbadmin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0wAAAAA"]
[Thu Jul 30 14:57:15.675000 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/dbadmin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx0wAAAAA"]
[Thu Jul 30 14:57:15.675147 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx0wAAAAA"]
[Thu Jul 30 14:57:15.691508 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/sql/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1AAAAAA"]
[Thu Jul 30 14:57:15.691677 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/sql/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1AAAAAA"]
[Thu Jul 30 14:57:15.691812 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx1AAAAAA"]
[Thu Jul 30 14:57:15.712034 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /master/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/master/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1QAAAAA"]
[Thu Jul 30 14:57:15.712214 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/master/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1QAAAAA"]
[Thu Jul 30 14:57:15.712362 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx1QAAAAA"]
[Thu Jul 30 14:57:15.732257 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/temp/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1gAAAAA"]
[Thu Jul 30 14:57:15.732411 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/temp/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1gAAAAA"]
[Thu Jul 30 14:57:15.732562 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx1gAAAAA"]
[Thu Jul 30 14:57:15.749907 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/tmp/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1wAAAAA"]
[Thu Jul 30 14:57:15.750040 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/tmp/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx1wAAAAA"]
[Thu Jul 30 14:57:15.750196 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx1wAAAAA"]
[Thu Jul 30 14:57:15.770596 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/cloud/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2AAAAAA"]
[Thu Jul 30 14:57:15.770732 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/cloud/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2AAAAAA"]
[Thu Jul 30 14:57:15.770882 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx2AAAAAA"]
[Thu Jul 30 14:57:15.789689 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cgi-bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/cgi-bin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2QAAAAA"]
[Thu Jul 30 14:57:15.789839 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/cgi-bin/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2QAAAAA"]
[Thu Jul 30 14:57:15.789980 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx2QAAAAA"]
[Thu Jul 30 14:57:15.808788 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/blog/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2gAAAAA"]
[Thu Jul 30 14:57:15.808938 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/blog/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2gAAAAA"]
[Thu Jul 30 14:57:15.809102 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx2gAAAAA"]
[Thu Jul 30 14:57:15.826409 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blogs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/blogs/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2wAAAAA"]
[Thu Jul 30 14:57:15.826562 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/blogs/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx2wAAAAA"]
[Thu Jul 30 14:57:15.826699 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx2wAAAAA"]
[Thu Jul 30 14:57:15.845787 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /engine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/engine/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3AAAAAA"]
[Thu Jul 30 14:57:15.845909 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/engine/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3AAAAAA"]
[Thu Jul 30 14:57:15.846053 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx3AAAAAA"]
[Thu Jul 30 14:57:15.863239 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /forum/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/forum/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3QAAAAA"]
[Thu Jul 30 14:57:15.863380 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/forum/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3QAAAAA"]
[Thu Jul 30 14:57:15.863537 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx3QAAAAA"]
[Thu Jul 30 14:57:15.882290 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /forums/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/forums/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3gAAAAA"]
[Thu Jul 30 14:57:15.882433 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/forums/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3gAAAAA"]
[Thu Jul 30 14:57:15.882601 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx3gAAAAA"]
[Thu Jul 30 14:57:15.898958 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /store/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/store/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3wAAAAA"]
[Thu Jul 30 14:57:15.899121 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/store/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx3wAAAAA"]
[Thu Jul 30 14:57:15.899261 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx3wAAAAA"]
[Thu Jul 30 14:57:15.917721 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/shop/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx4AAAAAA"]
[Thu Jul 30 14:57:15.917871 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/shop/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx4AAAAAA"]
[Thu Jul 30 14:57:15.918009 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx4AAAAAA"]
[Thu Jul 30 14:57:15.934993 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cart/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/cart/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx4QAAAAA"]
[Thu Jul 30 14:57:15.935141 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/cart/.env"] [unique_id "amtYO7EmvQ1NjMKd3kGx4QAAAAA"]
[Thu Jul 30 14:57:15.935279 2026] [security2:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYO7EmvQ1NjMKd3kGx4QAAAAA"]
[Thu Jul 30 14:57:16.007503 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.040368 2026] [ssl:error] [pid 3571208:tid 3571208] (70014)End of file found: [client 216.73.216.199:41224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:16.079472 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.189185 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.274913 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.357980 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.440281 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.521172 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.611255 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.716061 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.788191 2026] [security2:error] [pid 3574255:tid 3574255] [client 156.59.198.136:49350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/wmsrb/wp-content/uploads/2017/06/WMS-Press-52.pdf"] [unique_id "amtYPDf_xRMM1rIJHe8seAAAAEA"]
[Thu Jul 30 14:57:16.802687 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.902234 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:16.975235 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.050189 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.123942 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.226933 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.323752 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.371678 2026] [ssl:error] [pid 3566008:tid 3566008] (EAI 2)Name or service not known: [client 144.76.19.72:29346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:17.371720 2026] [ssl:error] [pid 3566008:tid 3566008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:17.399534 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.423934 2026] [access_compat:error] [pid 3571945:tid 3571945] [client 64.180.68.231:50066] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:17.425524 2026] [ssl:error] [pid 3572796:tid 3572796] (EAI 2)Name or service not known: [client 144.76.19.72:29358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:17.425542 2026] [ssl:error] [pid 3572796:tid 3572796] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:17.473655 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.581962 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.652975 2026] [ssl:error] [pid 3551093:tid 3551093] (70014)End of file found: [client 216.73.216.199:13004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:17.667371 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.743675 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.835294 2026] [cgi:error] [pid 3575490:tid 3575490] [client 185.177.72.70:40964] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:17.948126 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.030716 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.111164 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.186105 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.266712 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.342641 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.426471 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.518820 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.542208 2026] [security2:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "174"] [id "933160"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: phpinfo() found within ARGS:: phpinfo()"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "swingaddiction.co.uk"] [uri "/index.php"] [unique_id "amtYPkYTJIyeUG4KMT6MOwAAAAI"]
[Thu Jul 30 14:57:18.542534 2026] [security2:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/index.php"] [unique_id "amtYPkYTJIyeUG4KMT6MOwAAAAI"]
[Thu Jul 30 14:57:18.542705 2026] [security2:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Call Found"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYPkYTJIyeUG4KMT6MOwAAAAI"]
[Thu Jul 30 14:57:18.562545 2026] [security2:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "174"] [id "933160"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: phpinfo() found within ARGS:: -phpinfo()"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "swingaddiction.co.uk"] [uri "/index.php"] [unique_id "amtYPkYTJIyeUG4KMT6MPAAAAAI"]
[Thu Jul 30 14:57:18.562837 2026] [security2:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/index.php"] [unique_id "amtYPkYTJIyeUG4KMT6MPAAAAAI"]
[Thu Jul 30 14:57:18.563004 2026] [security2:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Call Found"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYPkYTJIyeUG4KMT6MPAAAAAI"]
[Thu Jul 30 14:57:18.662233 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.750401 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.838541 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:18.942879 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.041344 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.145209 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.224944 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.311527 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.409357 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.490897 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.525552 2026] [security2:error] [pid 3572796:tid 3572796] [client 85.208.96.207:36592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,399.0/prev_next,prev.html"] [unique_id "amtYP183LySLykQQdykaIQAAABs"]
[Thu Jul 30 14:57:19.580807 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.697926 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.787144 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.869327 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:19.959778 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.054193 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.146803 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.250704 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.348486 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.432566 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.481843 2026] [ssl:error] [pid 3571207:tid 3571207] (EAI 2)Name or service not known: [client 144.76.19.72:59996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:20.481877 2026] [ssl:error] [pid 3571207:tid 3571207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:20.522916 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.558725 2026] [ssl:error] [pid 3563515:tid 3563515] (EAI 2)Name or service not known: [client 144.76.19.72:59998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:20.558766 2026] [ssl:error] [pid 3563515:tid 3563515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:20.606246 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.715532 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.794601 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.873568 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:20.906450 2026] [ssl:error] [pid 3574252:tid 3574252] (70014)End of file found: [client 216.73.216.199:33329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:20.988107 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.081009 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.161397 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.262485 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.302024 2026] [lsapi:warn] [pid 3572796:tid 3572796] [client 207.58.142.67:56220] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:57:21.346937 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.424462 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.500768 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.582575 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.623115 2026] [lsapi:warn] [pid 3572796:tid 3572796] [client 207.58.142.67:56220] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:57:21.662306 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.763188 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.857888 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:21.936509 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.017399 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.116512 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.139795 2026] [lsapi:warn] [pid 3562585:tid 3562585] [client 207.58.142.67:43376] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:57:22.195058 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.204743 2026] [ssl:error] [pid 3568093:tid 3568093] (70014)End of file found: [client 216.73.216.199:20091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:22.274502 2026] [cgi:error] [pid 3579760:tid 3579760] [client 185.177.72.70:40972] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.387300 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.430026 2026] [lsapi:warn] [pid 3562585:tid 3562585] [client 207.58.142.67:43376] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:57:22.483295 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.562215 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.642862 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.735530 2026] [lsapi:warn] [pid 3562585:tid 3562585] [client 207.58.142.67:43376] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:57:22.741801 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.836330 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:22.924251 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.002045 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.117460 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.206386 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.295510 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.400657 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.492234 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.501520 2026] [lsapi:warn] [pid 3562585:tid 3562585] [client 207.58.142.67:43376] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 14:57:23.593832 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.614932 2026] [ssl:error] [pid 3575490:tid 3575490] (EAI 2)Name or service not known: [client 144.76.19.72:60002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:23.614957 2026] [ssl:error] [pid 3575490:tid 3575490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:23.670762 2026] [ssl:error] [pid 3574305:tid 3574305] (EAI 2)Name or service not known: [client 144.76.19.72:60014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:23.670790 2026] [ssl:error] [pid 3574305:tid 3574305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:23.683864 2026] [access_compat:error] [pid 3551093:tid 3551093] [client 64.180.68.231:50377] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:23.694717 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.792442 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.881024 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:23.963330 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.018006 2026] [ssl:error] [pid 3572796:tid 3572796] (70014)End of file found: [client 216.73.216.199:14040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:24.045786 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.126520 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.208370 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.299810 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.389710 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.476495 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.563692 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.647000 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.727883 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.807779 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:24.923539 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.013572 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.097578 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.207676 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.300768 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.384447 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.462701 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.539038 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.626230 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.706162 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.808860 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.903382 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:25.990892 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.069256 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.153083 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.261796 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.284294 2026] [security2:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/debug.log"] [unique_id "amtYRinNsm-wWb_fOolQFwAAACQ"]
[Thu Jul 30 14:57:26.284744 2026] [security2:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-content/debug.log"] [unique_id "amtYRinNsm-wWb_fOolQFwAAACQ"]
[Thu Jul 30 14:57:26.284968 2026] [security2:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYRinNsm-wWb_fOolQFwAAACQ"]
[Thu Jul 30 14:57:26.380519 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.404659 2026] [security2:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php"] [unique_id "amtYRinNsm-wWb_fOolQGgAAACQ"]
[Thu Jul 30 14:57:26.404908 2026] [security2:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php"] [unique_id "amtYRinNsm-wWb_fOolQGgAAACQ"]
[Thu Jul 30 14:57:26.405126 2026] [security2:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYRinNsm-wWb_fOolQGgAAACQ"]
[Thu Jul 30 14:57:26.498556 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.584342 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.669099 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.727344 2026] [ssl:error] [pid 3566008:tid 3566008] (EAI 2)Name or service not known: [client 144.76.19.72:60030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:26.727380 2026] [ssl:error] [pid 3566008:tid 3566008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:26.757197 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.778597 2026] [ssl:error] [pid 3574252:tid 3574252] (EAI 2)Name or service not known: [client 144.76.19.72:60042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:26.778625 2026] [ssl:error] [pid 3574252:tid 3574252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:26.800528 2026] [ssl:error] [pid 3576471:tid 3576471] (70014)End of file found: [client 216.73.216.199:21992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:26.863179 2026] [cgi:error] [pid 3574200:tid 3574200] [client 185.177.72.70:42980] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.964095 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:26.985143 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.example"] [unique_id "amtYRqgwbGexZcv-5ugQkgAAABw"]
[Thu Jul 30 14:57:26.985396 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.example"] [unique_id "amtYRqgwbGexZcv-5ugQkgAAABw"]
[Thu Jul 30 14:57:26.985610 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYRqgwbGexZcv-5ugQkgAAABw"]
[Thu Jul 30 14:57:27.065187 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.150355 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.172002 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.testing"] [unique_id "amtYR6gwbGexZcv-5ugQlwAAABw"]
[Thu Jul 30 14:57:27.172253 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.testing"] [unique_id "amtYR6gwbGexZcv-5ugQlwAAABw"]
[Thu Jul 30 14:57:27.172447 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYR6gwbGexZcv-5ugQlwAAABw"]
[Thu Jul 30 14:57:27.190224 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.development"] [unique_id "amtYR6gwbGexZcv-5ugQmAAAABw"]
[Thu Jul 30 14:57:27.190468 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.development"] [unique_id "amtYR6gwbGexZcv-5ugQmAAAABw"]
[Thu Jul 30 14:57:27.190693 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYR6gwbGexZcv-5ugQmAAAABw"]
[Thu Jul 30 14:57:27.209186 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.production"] [unique_id "amtYR6gwbGexZcv-5ugQmQAAABw"]
[Thu Jul 30 14:57:27.209424 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.production"] [unique_id "amtYR6gwbGexZcv-5ugQmQAAABw"]
[Thu Jul 30 14:57:27.209626 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYR6gwbGexZcv-5ugQmQAAABw"]
[Thu Jul 30 14:57:27.227971 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.test"] [unique_id "amtYR6gwbGexZcv-5ugQmgAAABw"]
[Thu Jul 30 14:57:27.228205 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.test"] [unique_id "amtYR6gwbGexZcv-5ugQmgAAABw"]
[Thu Jul 30 14:57:27.228393 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYR6gwbGexZcv-5ugQmgAAABw"]
[Thu Jul 30 14:57:27.247347 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYR6gwbGexZcv-5ugQmwAAABw"]
[Thu Jul 30 14:57:27.247526 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYR6gwbGexZcv-5ugQmwAAABw"]
[Thu Jul 30 14:57:27.247726 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYR6gwbGexZcv-5ugQmwAAABw"]
[Thu Jul 30 14:57:27.265516 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod"] [unique_id "amtYR6gwbGexZcv-5ugQnAAAABw"]
[Thu Jul 30 14:57:27.265747 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod"] [unique_id "amtYR6gwbGexZcv-5ugQnAAAABw"]
[Thu Jul 30 14:57:27.265948 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYR6gwbGexZcv-5ugQnAAAABw"]
[Thu Jul 30 14:57:27.344770 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.423241 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.501810 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.586937 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.611022 2026] [ssl:error] [pid 3574306:tid 3574306] (70014)End of file found: [client 216.73.216.199:42943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:27.671234 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.747910 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.768022 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYR6gwbGexZcv-5ugQqQAAABw"]
[Thu Jul 30 14:57:27.768549 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYR6gwbGexZcv-5ugQqQAAABw"]
[Thu Jul 30 14:57:27.768713 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYR6gwbGexZcv-5ugQqQAAABw"]
[Thu Jul 30 14:57:27.851114 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.937611 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:27.986878 2026] [access_compat:error] [pid 3566008:tid 3566008] [client 64.180.68.231:50586] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:28.030245 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.150803 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.265527 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.360902 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.443258 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.456578 2026] [access_compat:error] [pid 3568093:tid 3568093] [client 45.158.164.139:40706] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:57:28.522683 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.597286 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.697689 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.776434 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.860096 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:28.946138 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.021906 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.101461 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.209983 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.285661 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.383004 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.477515 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.559441 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.640035 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.714510 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.787340 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.831867 2026] [ssl:error] [pid 3576472:tid 3576472] (EAI 2)Name or service not known: [client 144.76.19.72:59276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:29.831896 2026] [ssl:error] [pid 3576472:tid 3576472] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:29.861910 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.882939 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.save.2"] [unique_id "amtYSagwbGexZcv-5ugQ3gAAABw"]
[Thu Jul 30 14:57:29.883122 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.save.2"] [unique_id "amtYSagwbGexZcv-5ugQ3gAAABw"]
[Thu Jul 30 14:57:29.883282 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYSagwbGexZcv-5ugQ3gAAABw"]
[Thu Jul 30 14:57:29.955529 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:29.955813 2026] [ssl:error] [pid 3571208:tid 3571208] (EAI 2)Name or service not known: [client 144.76.19.72:59278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:29.955839 2026] [ssl:error] [pid 3571208:tid 3571208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:30.030235 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.105154 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.125558 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/backup.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ5QAAABw"]
[Thu Jul 30 14:57:30.125897 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backup.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ5QAAABw"]
[Thu Jul 30 14:57:30.126052 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYSqgwbGexZcv-5ugQ5QAAABw"]
[Thu Jul 30 14:57:30.141571 2026] [ssl:error] [pid 3569475:tid 3569475] (70014)End of file found: [client 216.73.216.199:28580] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:30.217150 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.292736 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.314040 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/db.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ6gAAABw"]
[Thu Jul 30 14:57:30.314426 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/db.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ6gAAABw"]
[Thu Jul 30 14:57:30.314586 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYSqgwbGexZcv-5ugQ6gAAABw"]
[Thu Jul 30 14:57:30.395627 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.490215 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.510489 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/database.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ7wAAABw"]
[Thu Jul 30 14:57:30.510840 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/database.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ7wAAABw"]
[Thu Jul 30 14:57:30.511009 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYSqgwbGexZcv-5ugQ7wAAABw"]
[Thu Jul 30 14:57:30.605184 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.684272 2026] [cgi:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.705531 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/localhost.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ9AAAABw"]
[Thu Jul 30 14:57:30.705875 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/localhost.sql"] [unique_id "amtYSqgwbGexZcv-5ugQ9AAAABw"]
[Thu Jul 30 14:57:30.706027 2026] [security2:error] [pid 3562585:tid 3562585] [client 185.177.72.70:42992] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYSqgwbGexZcv-5ugQ9AAAABw"]
[Thu Jul 30 14:57:30.813681 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.895504 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:30.994992 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.020191 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.save.1"] [unique_id "amtYS7C4VpBrJlmzAgrCaAAAADw"]
[Thu Jul 30 14:57:31.020390 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.save.1"] [unique_id "amtYS7C4VpBrJlmzAgrCaAAAADw"]
[Thu Jul 30 14:57:31.020580 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYS7C4VpBrJlmzAgrCaAAAADw"]
[Thu Jul 30 14:57:31.038632 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.save"] [unique_id "amtYS7C4VpBrJlmzAgrCaQAAADw"]
[Thu Jul 30 14:57:31.038954 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.save"] [unique_id "amtYS7C4VpBrJlmzAgrCaQAAADw"]
[Thu Jul 30 14:57:31.039148 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYS7C4VpBrJlmzAgrCaQAAADw"]
[Thu Jul 30 14:57:31.129234 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.221419 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.303246 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.325883 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.swp"] [unique_id "amtYS7C4VpBrJlmzAgrCcAAAADw"]
[Thu Jul 30 14:57:31.326214 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.swp"] [unique_id "amtYS7C4VpBrJlmzAgrCcAAAADw"]
[Thu Jul 30 14:57:31.326450 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYS7C4VpBrJlmzAgrCcAAAADw"]
[Thu Jul 30 14:57:31.406654 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.501538 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.575189 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.665779 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.750260 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.770040 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.dev"] [unique_id "amtYS7C4VpBrJlmzAgrCewAAADw"]
[Thu Jul 30 14:57:31.770241 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.dev"] [unique_id "amtYS7C4VpBrJlmzAgrCewAAADw"]
[Thu Jul 30 14:57:31.770398 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYS7C4VpBrJlmzAgrCewAAADw"]
[Thu Jul 30 14:57:31.842260 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:31.924176 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.004428 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.077007 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.153982 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.229524 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.302229 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.382964 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.467798 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.549005 2026] [ssl:error] [pid 3568093:tid 3568093] (70014)End of file found: [client 216.73.216.199:20991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:32.550651 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.643603 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.721252 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.741811 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYTLC4VpBrJlmzAgrClAAAADw"]
[Thu Jul 30 14:57:32.741973 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYTLC4VpBrJlmzAgrClAAAADw"]
[Thu Jul 30 14:57:32.742152 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYTLC4VpBrJlmzAgrClAAAADw"]
[Thu Jul 30 14:57:32.813654 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.834027 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/env.cfg"] [unique_id "amtYTLC4VpBrJlmzAgrClwAAADw"]
[Thu Jul 30 14:57:32.834444 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/env.cfg"] [unique_id "amtYTLC4VpBrJlmzAgrClwAAADw"]
[Thu Jul 30 14:57:32.834613 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYTLC4VpBrJlmzAgrClwAAADw"]
[Thu Jul 30 14:57:32.907001 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:32.929384 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.staging"] [unique_id "amtYTLC4VpBrJlmzAgrCmgAAADw"]
[Thu Jul 30 14:57:32.929552 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.staging"] [unique_id "amtYTLC4VpBrJlmzAgrCmgAAADw"]
[Thu Jul 30 14:57:32.929727 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYTLC4VpBrJlmzAgrCmgAAADw"]
[Thu Jul 30 14:57:33.002458 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.049342 2026] [ssl:error] [pid 3574310:tid 3574310] (EAI 2)Name or service not known: [client 144.76.19.72:59290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:33.049407 2026] [ssl:error] [pid 3574310:tid 3574310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:33.081909 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.103451 2026] [ssl:error] [pid 3570685:tid 3570685] (EAI 2)Name or service not known: [client 144.76.19.72:59300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:33.103483 2026] [ssl:error] [pid 3570685:tid 3570685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:33.193699 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.266493 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.360923 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.443508 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.523933 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.598280 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.674534 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.751237 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.771156 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.docker"] [unique_id "amtYTbC4VpBrJlmzAgrCrwAAADw"]
[Thu Jul 30 14:57:33.771332 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.docker"] [unique_id "amtYTbC4VpBrJlmzAgrCrwAAADw"]
[Thu Jul 30 14:57:33.771517 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYTbC4VpBrJlmzAgrCrwAAADw"]
[Thu Jul 30 14:57:33.845549 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.931450 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:33.953233 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/.config"] [unique_id "amtYTbC4VpBrJlmzAgrCtAAAADw"]
[Thu Jul 30 14:57:33.953619 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.config"] [unique_id "amtYTbC4VpBrJlmzAgrCtAAAADw"]
[Thu Jul 30 14:57:33.953787 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYTbC4VpBrJlmzAgrCtAAAADw"]
[Thu Jul 30 14:57:34.055214 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.056553 2026] [ssl:error] [pid 3575639:tid 3575639] (70014)End of file found: [client 216.73.216.199:64505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:34.151930 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.235474 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.332993 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.439619 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.514491 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.612235 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.692238 2026] [cgi:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.715599 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.old"] [unique_id "amtYTrC4VpBrJlmzAgrCxQAAADw"]
[Thu Jul 30 14:57:34.715835 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.old"] [unique_id "amtYTrC4VpBrJlmzAgrCxQAAADw"]
[Thu Jul 30 14:57:34.716047 2026] [security2:error] [pid 3571945:tid 3571945] [client 185.177.72.70:42996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYTrC4VpBrJlmzAgrCxQAAADw"]
[Thu Jul 30 14:57:34.848376 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:34.869550 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php.backup"] [unique_id "amtYTqPSEbUd3uzlwKw9UQAAAEY"]
[Thu Jul 30 14:57:34.869726 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php.backup"] [unique_id "amtYTqPSEbUd3uzlwKw9UQAAAEY"]
[Thu Jul 30 14:57:34.869883 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYTqPSEbUd3uzlwKw9UQAAAEY"]
[Thu Jul 30 14:57:34.948806 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.039170 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.120645 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.214234 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.309009 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.332030 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtYT6PSEbUd3uzlwKw9XAAAAEY"]
[Thu Jul 30 14:57:35.332246 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtYT6PSEbUd3uzlwKw9XAAAAEY"]
[Thu Jul 30 14:57:35.332424 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9XAAAAEY"]
[Thu Jul 30 14:57:35.420218 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.438559 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/wordpress.sql"] [unique_id "amtYT6PSEbUd3uzlwKw9XwAAAEY"]
[Thu Jul 30 14:57:35.438912 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/wordpress.sql"] [unique_id "amtYT6PSEbUd3uzlwKw9XwAAAEY"]
[Thu Jul 30 14:57:35.439091 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9XwAAAEY"]
[Thu Jul 30 14:57:35.521219 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.602290 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.626133 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env_bak"] [unique_id "amtYT6PSEbUd3uzlwKw9ZAAAAEY"]
[Thu Jul 30 14:57:35.626314 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env_bak"] [unique_id "amtYT6PSEbUd3uzlwKw9ZAAAAEY"]
[Thu Jul 30 14:57:35.626494 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9ZAAAAEY"]
[Thu Jul 30 14:57:35.645254 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.tmp"] [unique_id "amtYT6PSEbUd3uzlwKw9ZQAAAEY"]
[Thu Jul 30 14:57:35.645437 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.tmp"] [unique_id "amtYT6PSEbUd3uzlwKw9ZQAAAEY"]
[Thu Jul 30 14:57:35.645596 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9ZQAAAEY"]
[Thu Jul 30 14:57:35.720281 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:35.743244 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.copy"] [unique_id "amtYT6PSEbUd3uzlwKw9aAAAAEY"]
[Thu Jul 30 14:57:35.743428 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.copy"] [unique_id "amtYT6PSEbUd3uzlwKw9aAAAAEY"]
[Thu Jul 30 14:57:35.743586 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9aAAAAEY"]
[Thu Jul 30 14:57:35.765705 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.orig"] [unique_id "amtYT6PSEbUd3uzlwKw9aQAAAEY"]
[Thu Jul 30 14:57:35.765881 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.orig"] [unique_id "amtYT6PSEbUd3uzlwKw9aQAAAEY"]
[Thu Jul 30 14:57:35.766049 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9aQAAAEY"]
[Thu Jul 30 14:57:35.784698 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sample"] [unique_id "amtYT6PSEbUd3uzlwKw9agAAAEY"]
[Thu Jul 30 14:57:35.784823 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sample"] [unique_id "amtYT6PSEbUd3uzlwKw9agAAAEY"]
[Thu Jul 30 14:57:35.784966 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9agAAAEY"]
[Thu Jul 30 14:57:35.803981 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.default"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.default"] [unique_id "amtYT6PSEbUd3uzlwKw9awAAAEY"]
[Thu Jul 30 14:57:35.804150 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.default"] [unique_id "amtYT6PSEbUd3uzlwKw9awAAAEY"]
[Thu Jul 30 14:57:35.804296 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9awAAAEY"]
[Thu Jul 30 14:57:35.824900 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.template"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.template"] [unique_id "amtYT6PSEbUd3uzlwKw9bAAAAEY"]
[Thu Jul 30 14:57:35.825060 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.template"] [unique_id "amtYT6PSEbUd3uzlwKw9bAAAAEY"]
[Thu Jul 30 14:57:35.825228 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9bAAAAEY"]
[Thu Jul 30 14:57:35.843169 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.stage"] [unique_id "amtYT6PSEbUd3uzlwKw9bQAAAEY"]
[Thu Jul 30 14:57:35.843335 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.stage"] [unique_id "amtYT6PSEbUd3uzlwKw9bQAAAEY"]
[Thu Jul 30 14:57:35.843485 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9bQAAAEY"]
[Thu Jul 30 14:57:35.862004 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.qa"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.qa"] [unique_id "amtYT6PSEbUd3uzlwKw9bgAAAEY"]
[Thu Jul 30 14:57:35.862164 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.qa"] [unique_id "amtYT6PSEbUd3uzlwKw9bgAAAEY"]
[Thu Jul 30 14:57:35.862300 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9bgAAAEY"]
[Thu Jul 30 14:57:35.880038 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.uat"] [unique_id "amtYT6PSEbUd3uzlwKw9bwAAAEY"]
[Thu Jul 30 14:57:35.880181 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.uat"] [unique_id "amtYT6PSEbUd3uzlwKw9bwAAAEY"]
[Thu Jul 30 14:57:35.880328 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9bwAAAEY"]
[Thu Jul 30 14:57:35.898266 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ci"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.ci"] [unique_id "amtYT6PSEbUd3uzlwKw9cAAAAEY"]
[Thu Jul 30 14:57:35.898383 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.ci"] [unique_id "amtYT6PSEbUd3uzlwKw9cAAAAEY"]
[Thu Jul 30 14:57:35.898524 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9cAAAAEY"]
[Thu Jul 30 14:57:35.916378 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.local.example"] [unique_id "amtYT6PSEbUd3uzlwKw9cQAAAEY"]
[Thu Jul 30 14:57:35.916502 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.local.example"] [unique_id "amtYT6PSEbUd3uzlwKw9cQAAAEY"]
[Thu Jul 30 14:57:35.916639 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9cQAAAEY"]
[Thu Jul 30 14:57:35.936491 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.dev.local"] [unique_id "amtYT6PSEbUd3uzlwKw9cgAAAEY"]
[Thu Jul 30 14:57:35.936608 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.dev.local"] [unique_id "amtYT6PSEbUd3uzlwKw9cgAAAEY"]
[Thu Jul 30 14:57:35.936741 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9cgAAAEY"]
[Thu Jul 30 14:57:35.954660 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod.local"] [unique_id "amtYT6PSEbUd3uzlwKw9cwAAAEY"]
[Thu Jul 30 14:57:35.954815 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod.local"] [unique_id "amtYT6PSEbUd3uzlwKw9cwAAAEY"]
[Thu Jul 30 14:57:35.954957 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9cwAAAEY"]
[Thu Jul 30 14:57:35.973245 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.staging.local"] [unique_id "amtYT6PSEbUd3uzlwKw9dAAAAEY"]
[Thu Jul 30 14:57:35.973426 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.staging.local"] [unique_id "amtYT6PSEbUd3uzlwKw9dAAAAEY"]
[Thu Jul 30 14:57:35.973571 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9dAAAAEY"]
[Thu Jul 30 14:57:35.994460 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.test.local"] [unique_id "amtYT6PSEbUd3uzlwKw9dQAAAEY"]
[Thu Jul 30 14:57:35.994622 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.test.local"] [unique_id "amtYT6PSEbUd3uzlwKw9dQAAAEY"]
[Thu Jul 30 14:57:35.994768 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYT6PSEbUd3uzlwKw9dQAAAEY"]
[Thu Jul 30 14:57:36.016108 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.1"] [unique_id "amtYUKPSEbUd3uzlwKw9dgAAAEY"]
[Thu Jul 30 14:57:36.016284 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.1"] [unique_id "amtYUKPSEbUd3uzlwKw9dgAAAEY"]
[Thu Jul 30 14:57:36.016442 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9dgAAAEY"]
[Thu Jul 30 14:57:36.034984 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.2"] [unique_id "amtYUKPSEbUd3uzlwKw9dwAAAEY"]
[Thu Jul 30 14:57:36.035156 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.2"] [unique_id "amtYUKPSEbUd3uzlwKw9dwAAAEY"]
[Thu Jul 30 14:57:36.035302 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9dwAAAEY"]
[Thu Jul 30 14:57:36.052758 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env_backup"] [unique_id "amtYUKPSEbUd3uzlwKw9eAAAAEY"]
[Thu Jul 30 14:57:36.052910 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env_backup"] [unique_id "amtYUKPSEbUd3uzlwKw9eAAAAEY"]
[Thu Jul 30 14:57:36.053046 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9eAAAAEY"]
[Thu Jul 30 14:57:36.071115 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env_old"] [unique_id "amtYUKPSEbUd3uzlwKw9eQAAAEY"]
[Thu Jul 30 14:57:36.071255 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env_old"] [unique_id "amtYUKPSEbUd3uzlwKw9eQAAAEY"]
[Thu Jul 30 14:57:36.071395 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9eQAAAEY"]
[Thu Jul 30 14:57:36.089268 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env_save"] [unique_id "amtYUKPSEbUd3uzlwKw9egAAAEY"]
[Thu Jul 30 14:57:36.089452 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env_save"] [unique_id "amtYUKPSEbUd3uzlwKw9egAAAEY"]
[Thu Jul 30 14:57:36.089605 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9egAAAEY"]
[Thu Jul 30 14:57:36.108252 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env_copy"] [unique_id "amtYUKPSEbUd3uzlwKw9ewAAAEY"]
[Thu Jul 30 14:57:36.108377 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env_copy"] [unique_id "amtYUKPSEbUd3uzlwKw9ewAAAEY"]
[Thu Jul 30 14:57:36.108530 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9ewAAAEY"]
[Thu Jul 30 14:57:36.189304 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:36.227782 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9fgAAAEY"]
[Thu Jul 30 14:57:36.228093 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9fgAAAEY"]
[Thu Jul 30 14:57:36.228240 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9fgAAAEY"]
[Thu Jul 30 14:57:36.297992 2026] [cgi:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:36.318807 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.environment.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.environment.local"] [unique_id "amtYUKPSEbUd3uzlwKw9gQAAAEY"]
[Thu Jul 30 14:57:36.318982 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.environment.local"] [unique_id "amtYUKPSEbUd3uzlwKw9gQAAAEY"]
[Thu Jul 30 14:57:36.319159 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9gQAAAEY"]
[Thu Jul 30 14:57:36.336883 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9ggAAAEY"]
[Thu Jul 30 14:57:36.337079 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9ggAAAEY"]
[Thu Jul 30 14:57:36.337240 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9ggAAAEY"]
[Thu Jul 30 14:57:36.356860 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9gwAAAEY"]
[Thu Jul 30 14:57:36.357039 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9gwAAAEY"]
[Thu Jul 30 14:57:36.357215 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9gwAAAEY"]
[Thu Jul 30 14:57:36.376507 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9hAAAAEY"]
[Thu Jul 30 14:57:36.376694 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9hAAAAEY"]
[Thu Jul 30 14:57:36.376848 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9hAAAAEY"]
[Thu Jul 30 14:57:36.383980 2026] [ssl:error] [pid 3582960:tid 3582960] (EAI 2)Name or service not known: [client 144.76.19.72:59316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:36.384017 2026] [ssl:error] [pid 3582960:tid 3582960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:36.397232 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9hQAAAEY"]
[Thu Jul 30 14:57:36.397406 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9hQAAAEY"]
[Thu Jul 30 14:57:36.397559 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9hQAAAEY"]
[Thu Jul 30 14:57:36.415657 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9hgAAAEY"]
[Thu Jul 30 14:57:36.415789 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9hgAAAEY"]
[Thu Jul 30 14:57:36.415930 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9hgAAAEY"]
[Thu Jul 30 14:57:36.435026 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9hwAAAEY"]
[Thu Jul 30 14:57:36.435190 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9hwAAAEY"]
[Thu Jul 30 14:57:36.435337 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9hwAAAEY"]
[Thu Jul 30 14:57:36.453216 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9iAAAAEY"]
[Thu Jul 30 14:57:36.453382 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9iAAAAEY"]
[Thu Jul 30 14:57:36.453537 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9iAAAAEY"]
[Thu Jul 30 14:57:36.467268 2026] [ssl:error] [pid 3543505:tid 3543505] (70014)End of file found: [client 216.73.216.199:40258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:36.471575 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9iQAAAEY"]
[Thu Jul 30 14:57:36.471708 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9iQAAAEY"]
[Thu Jul 30 14:57:36.471844 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9iQAAAEY"]
[Thu Jul 30 14:57:36.490051 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9igAAAEY"]
[Thu Jul 30 14:57:36.490248 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9igAAAEY"]
[Thu Jul 30 14:57:36.490399 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9igAAAEY"]
[Thu Jul 30 14:57:36.507717 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9iwAAAEY"]
[Thu Jul 30 14:57:36.507851 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9iwAAAEY"]
[Thu Jul 30 14:57:36.508007 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9iwAAAEY"]
[Thu Jul 30 14:57:36.528529 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9jAAAAEY"]
[Thu Jul 30 14:57:36.528693 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9jAAAAEY"]
[Thu Jul 30 14:57:36.528835 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9jAAAAEY"]
[Thu Jul 30 14:57:36.546126 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9jQAAAEY"]
[Thu Jul 30 14:57:36.546259 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9jQAAAEY"]
[Thu Jul 30 14:57:36.546403 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9jQAAAEY"]
[Thu Jul 30 14:57:36.564971 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9jgAAAEY"]
[Thu Jul 30 14:57:36.565283 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9jgAAAEY"]
[Thu Jul 30 14:57:36.565547 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9jgAAAEY"]
[Thu Jul 30 14:57:36.583854 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9jwAAAEY"]
[Thu Jul 30 14:57:36.584016 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9jwAAAEY"]
[Thu Jul 30 14:57:36.584202 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9jwAAAEY"]
[Thu Jul 30 14:57:36.594790 2026] [ssl:error] [pid 3571945:tid 3571945] (EAI 2)Name or service not known: [client 144.76.19.72:59330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:36.594808 2026] [ssl:error] [pid 3571945:tid 3571945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:36.604027 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9kAAAAEY"]
[Thu Jul 30 14:57:36.604202 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9kAAAAEY"]
[Thu Jul 30 14:57:36.604346 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9kAAAAEY"]
[Thu Jul 30 14:57:36.622161 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9kQAAAEY"]
[Thu Jul 30 14:57:36.622325 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9kQAAAEY"]
[Thu Jul 30 14:57:36.622478 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9kQAAAEY"]
[Thu Jul 30 14:57:36.640240 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9kgAAAEY"]
[Thu Jul 30 14:57:36.640389 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9kgAAAEY"]
[Thu Jul 30 14:57:36.640543 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9kgAAAEY"]
[Thu Jul 30 14:57:36.661207 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9kwAAAEY"]
[Thu Jul 30 14:57:36.661355 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9kwAAAEY"]
[Thu Jul 30 14:57:36.661501 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9kwAAAEY"]
[Thu Jul 30 14:57:36.679613 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9lAAAAEY"]
[Thu Jul 30 14:57:36.679760 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9lAAAAEY"]
[Thu Jul 30 14:57:36.679893 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9lAAAAEY"]
[Thu Jul 30 14:57:36.698514 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9lQAAAEY"]
[Thu Jul 30 14:57:36.698655 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9lQAAAEY"]
[Thu Jul 30 14:57:36.698792 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9lQAAAEY"]
[Thu Jul 30 14:57:36.717719 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9lgAAAEY"]
[Thu Jul 30 14:57:36.717870 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9lgAAAEY"]
[Thu Jul 30 14:57:36.718038 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9lgAAAEY"]
[Thu Jul 30 14:57:36.736734 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9lwAAAEY"]
[Thu Jul 30 14:57:36.736854 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9lwAAAEY"]
[Thu Jul 30 14:57:36.736988 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9lwAAAEY"]
[Thu Jul 30 14:57:36.755170 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9mAAAAEY"]
[Thu Jul 30 14:57:36.755305 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9mAAAAEY"]
[Thu Jul 30 14:57:36.755461 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9mAAAAEY"]
[Thu Jul 30 14:57:36.773586 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9mQAAAEY"]
[Thu Jul 30 14:57:36.773715 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9mQAAAEY"]
[Thu Jul 30 14:57:36.773846 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9mQAAAEY"]
[Thu Jul 30 14:57:36.791926 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9mgAAAEY"]
[Thu Jul 30 14:57:36.792050 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9mgAAAEY"]
[Thu Jul 30 14:57:36.792200 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9mgAAAEY"]
[Thu Jul 30 14:57:36.811240 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9mwAAAEY"]
[Thu Jul 30 14:57:36.811364 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9mwAAAEY"]
[Thu Jul 30 14:57:36.811505 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9mwAAAEY"]
[Thu Jul 30 14:57:36.829475 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9nAAAAEY"]
[Thu Jul 30 14:57:36.829601 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9nAAAAEY"]
[Thu Jul 30 14:57:36.829740 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9nAAAAEY"]
[Thu Jul 30 14:57:36.847456 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9nQAAAEY"]
[Thu Jul 30 14:57:36.847583 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9nQAAAEY"]
[Thu Jul 30 14:57:36.847711 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9nQAAAEY"]
[Thu Jul 30 14:57:36.866754 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9ngAAAEY"]
[Thu Jul 30 14:57:36.866979 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.prod"] [unique_id "amtYUKPSEbUd3uzlwKw9ngAAAEY"]
[Thu Jul 30 14:57:36.867157 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9ngAAAEY"]
[Thu Jul 30 14:57:36.887781 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9nwAAAEY"]
[Thu Jul 30 14:57:36.887908 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.staging"] [unique_id "amtYUKPSEbUd3uzlwKw9nwAAAEY"]
[Thu Jul 30 14:57:36.888041 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9nwAAAEY"]
[Thu Jul 30 14:57:36.905769 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9oAAAAEY"]
[Thu Jul 30 14:57:36.905931 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.test"] [unique_id "amtYUKPSEbUd3uzlwKw9oAAAAEY"]
[Thu Jul 30 14:57:36.906095 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9oAAAAEY"]
[Thu Jul 30 14:57:36.924086 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9oQAAAEY"]
[Thu Jul 30 14:57:36.924247 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.example"] [unique_id "amtYUKPSEbUd3uzlwKw9oQAAAEY"]
[Thu Jul 30 14:57:36.924393 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9oQAAAEY"]
[Thu Jul 30 14:57:36.941785 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9ogAAAEY"]
[Thu Jul 30 14:57:36.941958 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.local"] [unique_id "amtYUKPSEbUd3uzlwKw9ogAAAEY"]
[Thu Jul 30 14:57:36.942115 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9ogAAAEY"]
[Thu Jul 30 14:57:36.960529 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9owAAAEY"]
[Thu Jul 30 14:57:36.960680 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.backup"] [unique_id "amtYUKPSEbUd3uzlwKw9owAAAEY"]
[Thu Jul 30 14:57:36.960820 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9owAAAEY"]
[Thu Jul 30 14:57:36.979472 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9pAAAAEY"]
[Thu Jul 30 14:57:36.979625 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.old"] [unique_id "amtYUKPSEbUd3uzlwKw9pAAAAEY"]
[Thu Jul 30 14:57:36.979765 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9pAAAAEY"]
[Thu Jul 30 14:57:36.998537 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9pQAAAEY"]
[Thu Jul 30 14:57:36.998696 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.dev"] [unique_id "amtYUKPSEbUd3uzlwKw9pQAAAEY"]
[Thu Jul 30 14:57:36.998842 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUKPSEbUd3uzlwKw9pQAAAEY"]
[Thu Jul 30 14:57:37.016925 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.prod"] [unique_id "amtYUaPSEbUd3uzlwKw9pgAAAEY"]
[Thu Jul 30 14:57:37.017090 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.prod"] [unique_id "amtYUaPSEbUd3uzlwKw9pgAAAEY"]
[Thu Jul 30 14:57:37.017236 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9pgAAAEY"]
[Thu Jul 30 14:57:37.035889 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.staging"] [unique_id "amtYUaPSEbUd3uzlwKw9pwAAAEY"]
[Thu Jul 30 14:57:37.036056 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.staging"] [unique_id "amtYUaPSEbUd3uzlwKw9pwAAAEY"]
[Thu Jul 30 14:57:37.036220 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9pwAAAEY"]
[Thu Jul 30 14:57:37.054495 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.test"] [unique_id "amtYUaPSEbUd3uzlwKw9qAAAAEY"]
[Thu Jul 30 14:57:37.054654 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.test"] [unique_id "amtYUaPSEbUd3uzlwKw9qAAAAEY"]
[Thu Jul 30 14:57:37.054791 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9qAAAAEY"]
[Thu Jul 30 14:57:37.072631 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.example"] [unique_id "amtYUaPSEbUd3uzlwKw9qQAAAEY"]
[Thu Jul 30 14:57:37.072762 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/.env.example"] [unique_id "amtYUaPSEbUd3uzlwKw9qQAAAEY"]
[Thu Jul 30 14:57:37.072908 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9qQAAAEY"]
[Thu Jul 30 14:57:37.090443 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env"] [unique_id "amtYUaPSEbUd3uzlwKw9qgAAAEY"]
[Thu Jul 30 14:57:37.090566 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env"] [unique_id "amtYUaPSEbUd3uzlwKw9qgAAAEY"]
[Thu Jul 30 14:57:37.090698 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9qgAAAEY"]
[Thu Jul 30 14:57:37.109929 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.local"] [unique_id "amtYUaPSEbUd3uzlwKw9qwAAAEY"]
[Thu Jul 30 14:57:37.110090 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.local"] [unique_id "amtYUaPSEbUd3uzlwKw9qwAAAEY"]
[Thu Jul 30 14:57:37.110224 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9qwAAAEY"]
[Thu Jul 30 14:57:37.128556 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.backup"] [unique_id "amtYUaPSEbUd3uzlwKw9rAAAAEY"]
[Thu Jul 30 14:57:37.128691 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.backup"] [unique_id "amtYUaPSEbUd3uzlwKw9rAAAAEY"]
[Thu Jul 30 14:57:37.128826 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9rAAAAEY"]
[Thu Jul 30 14:57:37.146440 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.old"] [unique_id "amtYUaPSEbUd3uzlwKw9rQAAAEY"]
[Thu Jul 30 14:57:37.146581 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.old"] [unique_id "amtYUaPSEbUd3uzlwKw9rQAAAEY"]
[Thu Jul 30 14:57:37.146734 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9rQAAAEY"]
[Thu Jul 30 14:57:37.170007 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.dev"] [unique_id "amtYUaPSEbUd3uzlwKw9rgAAAEY"]
[Thu Jul 30 14:57:37.170201 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.dev"] [unique_id "amtYUaPSEbUd3uzlwKw9rgAAAEY"]
[Thu Jul 30 14:57:37.170361 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9rgAAAEY"]
[Thu Jul 30 14:57:37.193004 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.prod"] [unique_id "amtYUaPSEbUd3uzlwKw9rwAAAEY"]
[Thu Jul 30 14:57:37.193163 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.prod"] [unique_id "amtYUaPSEbUd3uzlwKw9rwAAAEY"]
[Thu Jul 30 14:57:37.193312 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9rwAAAEY"]
[Thu Jul 30 14:57:37.211560 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.staging"] [unique_id "amtYUaPSEbUd3uzlwKw9sAAAAEY"]
[Thu Jul 30 14:57:37.211739 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.staging"] [unique_id "amtYUaPSEbUd3uzlwKw9sAAAAEY"]
[Thu Jul 30 14:57:37.211900 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9sAAAAEY"]
[Thu Jul 30 14:57:37.229882 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.test"] [unique_id "amtYUaPSEbUd3uzlwKw9sQAAAEY"]
[Thu Jul 30 14:57:37.230078 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.test"] [unique_id "amtYUaPSEbUd3uzlwKw9sQAAAEY"]
[Thu Jul 30 14:57:37.230233 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9sQAAAEY"]
[Thu Jul 30 14:57:37.247756 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.example"] [unique_id "amtYUaPSEbUd3uzlwKw9sgAAAEY"]
[Thu Jul 30 14:57:37.247952 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/.env.example"] [unique_id "amtYUaPSEbUd3uzlwKw9sgAAAEY"]
[Thu Jul 30 14:57:37.248121 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9sgAAAEY"]
[Thu Jul 30 14:57:37.266275 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.local"] [unique_id "amtYUaPSEbUd3uzlwKw9swAAAEY"]
[Thu Jul 30 14:57:37.266471 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.local"] [unique_id "amtYUaPSEbUd3uzlwKw9swAAAEY"]
[Thu Jul 30 14:57:37.266626 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9swAAAEY"]
[Thu Jul 30 14:57:37.285179 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.backup"] [unique_id "amtYUaPSEbUd3uzlwKw9tAAAAEY"]
[Thu Jul 30 14:57:37.285419 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.backup"] [unique_id "amtYUaPSEbUd3uzlwKw9tAAAAEY"]
[Thu Jul 30 14:57:37.285571 2026] [security2:error] [pid 3574310:tid 3574310] [client 185.177.72.70:8794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUaPSEbUd3uzlwKw9tAAAAEY"]
[Thu Jul 30 14:57:37.605564 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.old"] [unique_id "amtYUV9AowJF3PZLrRWDegAAAAw"]
[Thu Jul 30 14:57:37.605708 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.old"] [unique_id "amtYUV9AowJF3PZLrRWDegAAAAw"]
[Thu Jul 30 14:57:37.605869 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDegAAAAw"]
[Thu Jul 30 14:57:37.626628 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.dev"] [unique_id "amtYUV9AowJF3PZLrRWDewAAAAw"]
[Thu Jul 30 14:57:37.626776 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.dev"] [unique_id "amtYUV9AowJF3PZLrRWDewAAAAw"]
[Thu Jul 30 14:57:37.626914 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDewAAAAw"]
[Thu Jul 30 14:57:37.646786 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.prod"] [unique_id "amtYUV9AowJF3PZLrRWDfAAAAAw"]
[Thu Jul 30 14:57:37.646910 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.prod"] [unique_id "amtYUV9AowJF3PZLrRWDfAAAAAw"]
[Thu Jul 30 14:57:37.647056 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDfAAAAAw"]
[Thu Jul 30 14:57:37.667094 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.staging"] [unique_id "amtYUV9AowJF3PZLrRWDfQAAAAw"]
[Thu Jul 30 14:57:37.667220 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.staging"] [unique_id "amtYUV9AowJF3PZLrRWDfQAAAAw"]
[Thu Jul 30 14:57:37.667357 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDfQAAAAw"]
[Thu Jul 30 14:57:37.686850 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.test"] [unique_id "amtYUV9AowJF3PZLrRWDfgAAAAw"]
[Thu Jul 30 14:57:37.686983 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.test"] [unique_id "amtYUV9AowJF3PZLrRWDfgAAAAw"]
[Thu Jul 30 14:57:37.687144 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDfgAAAAw"]
[Thu Jul 30 14:57:37.706638 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.example"] [unique_id "amtYUV9AowJF3PZLrRWDfwAAAAw"]
[Thu Jul 30 14:57:37.706796 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.env.example"] [unique_id "amtYUV9AowJF3PZLrRWDfwAAAAw"]
[Thu Jul 30 14:57:37.706944 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDfwAAAAw"]
[Thu Jul 30 14:57:37.726881 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/storage/.env.local"] [unique_id "amtYUV9AowJF3PZLrRWDgAAAAAw"]
[Thu Jul 30 14:57:37.727041 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/.env.local"] [unique_id "amtYUV9AowJF3PZLrRWDgAAAAAw"]
[Thu Jul 30 14:57:37.727211 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDgAAAAAw"]
[Thu Jul 30 14:57:37.747049 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/storage/.env.backup"] [unique_id "amtYUV9AowJF3PZLrRWDgQAAAAw"]
[Thu Jul 30 14:57:37.747232 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/.env.backup"] [unique_id "amtYUV9AowJF3PZLrRWDgQAAAAw"]
[Thu Jul 30 14:57:37.747372 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDgQAAAAw"]
[Thu Jul 30 14:57:37.766690 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/bootstrap/.env"] [unique_id "amtYUV9AowJF3PZLrRWDggAAAAw"]
[Thu Jul 30 14:57:37.766814 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/bootstrap/.env"] [unique_id "amtYUV9AowJF3PZLrRWDggAAAAw"]
[Thu Jul 30 14:57:37.766953 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDggAAAAw"]
[Thu Jul 30 14:57:37.786744 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/bootstrap/.env.local"] [unique_id "amtYUV9AowJF3PZLrRWDgwAAAAw"]
[Thu Jul 30 14:57:37.786864 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/bootstrap/.env.local"] [unique_id "amtYUV9AowJF3PZLrRWDgwAAAAw"]
[Thu Jul 30 14:57:37.786993 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDgwAAAAw"]
[Thu Jul 30 14:57:37.806603 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/bootstrap/.env.backup"] [unique_id "amtYUV9AowJF3PZLrRWDhAAAAAw"]
[Thu Jul 30 14:57:37.806725 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/bootstrap/.env.backup"] [unique_id "amtYUV9AowJF3PZLrRWDhAAAAAw"]
[Thu Jul 30 14:57:37.806856 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDhAAAAAw"]
[Thu Jul 30 14:57:37.826559 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.local"] [unique_id "amtYUV9AowJF3PZLrRWDhQAAAAw"]
[Thu Jul 30 14:57:37.826677 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.local"] [unique_id "amtYUV9AowJF3PZLrRWDhQAAAAw"]
[Thu Jul 30 14:57:37.826815 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDhQAAAAw"]
[Thu Jul 30 14:57:37.846657 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.backup"] [unique_id "amtYUV9AowJF3PZLrRWDhgAAAAw"]
[Thu Jul 30 14:57:37.846787 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.backup"] [unique_id "amtYUV9AowJF3PZLrRWDhgAAAAw"]
[Thu Jul 30 14:57:37.846926 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDhgAAAAw"]
[Thu Jul 30 14:57:37.866653 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.old"] [unique_id "amtYUV9AowJF3PZLrRWDhwAAAAw"]
[Thu Jul 30 14:57:37.866788 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.old"] [unique_id "amtYUV9AowJF3PZLrRWDhwAAAAw"]
[Thu Jul 30 14:57:37.866925 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDhwAAAAw"]
[Thu Jul 30 14:57:37.886358 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.dev"] [unique_id "amtYUV9AowJF3PZLrRWDiAAAAAw"]
[Thu Jul 30 14:57:37.886500 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.dev"] [unique_id "amtYUV9AowJF3PZLrRWDiAAAAAw"]
[Thu Jul 30 14:57:37.886637 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDiAAAAAw"]
[Thu Jul 30 14:57:37.906352 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.prod"] [unique_id "amtYUV9AowJF3PZLrRWDiQAAAAw"]
[Thu Jul 30 14:57:37.906506 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.prod"] [unique_id "amtYUV9AowJF3PZLrRWDiQAAAAw"]
[Thu Jul 30 14:57:37.906645 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDiQAAAAw"]
[Thu Jul 30 14:57:37.926302 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.staging"] [unique_id "amtYUV9AowJF3PZLrRWDigAAAAw"]
[Thu Jul 30 14:57:37.926461 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.staging"] [unique_id "amtYUV9AowJF3PZLrRWDigAAAAw"]
[Thu Jul 30 14:57:37.926607 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDigAAAAw"]
[Thu Jul 30 14:57:37.946544 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.test"] [unique_id "amtYUV9AowJF3PZLrRWDiwAAAAw"]
[Thu Jul 30 14:57:37.946664 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.test"] [unique_id "amtYUV9AowJF3PZLrRWDiwAAAAw"]
[Thu Jul 30 14:57:37.946813 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDiwAAAAw"]
[Thu Jul 30 14:57:37.967178 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.example"] [unique_id "amtYUV9AowJF3PZLrRWDjAAAAAw"]
[Thu Jul 30 14:57:37.967321 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel/.env.example"] [unique_id "amtYUV9AowJF3PZLrRWDjAAAAAw"]
[Thu Jul 30 14:57:37.967478 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDjAAAAAw"]
[Thu Jul 30 14:57:37.987257 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env"] [unique_id "amtYUV9AowJF3PZLrRWDjQAAAAw"]
[Thu Jul 30 14:57:37.987431 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env"] [unique_id "amtYUV9AowJF3PZLrRWDjQAAAAw"]
[Thu Jul 30 14:57:37.987587 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUV9AowJF3PZLrRWDjQAAAAw"]
[Thu Jul 30 14:57:38.007540 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDjgAAAAw"]
[Thu Jul 30 14:57:38.007711 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDjgAAAAw"]
[Thu Jul 30 14:57:38.007862 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDjgAAAAw"]
[Thu Jul 30 14:57:38.026779 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDjwAAAAw"]
[Thu Jul 30 14:57:38.026959 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDjwAAAAw"]
[Thu Jul 30 14:57:38.027121 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDjwAAAAw"]
[Thu Jul 30 14:57:38.047269 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.old"] [unique_id "amtYUl9AowJF3PZLrRWDkAAAAAw"]
[Thu Jul 30 14:57:38.047440 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.old"] [unique_id "amtYUl9AowJF3PZLrRWDkAAAAAw"]
[Thu Jul 30 14:57:38.047590 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDkAAAAAw"]
[Thu Jul 30 14:57:38.066494 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.dev"] [unique_id "amtYUl9AowJF3PZLrRWDkQAAAAw"]
[Thu Jul 30 14:57:38.066660 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.dev"] [unique_id "amtYUl9AowJF3PZLrRWDkQAAAAw"]
[Thu Jul 30 14:57:38.066800 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDkQAAAAw"]
[Thu Jul 30 14:57:38.086385 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.prod"] [unique_id "amtYUl9AowJF3PZLrRWDkgAAAAw"]
[Thu Jul 30 14:57:38.086552 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.prod"] [unique_id "amtYUl9AowJF3PZLrRWDkgAAAAw"]
[Thu Jul 30 14:57:38.086691 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDkgAAAAw"]
[Thu Jul 30 14:57:38.105807 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.staging"] [unique_id "amtYUl9AowJF3PZLrRWDkwAAAAw"]
[Thu Jul 30 14:57:38.105975 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.staging"] [unique_id "amtYUl9AowJF3PZLrRWDkwAAAAw"]
[Thu Jul 30 14:57:38.106132 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDkwAAAAw"]
[Thu Jul 30 14:57:38.128270 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.test"] [unique_id "amtYUl9AowJF3PZLrRWDlAAAAAw"]
[Thu Jul 30 14:57:38.128433 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.test"] [unique_id "amtYUl9AowJF3PZLrRWDlAAAAAw"]
[Thu Jul 30 14:57:38.128576 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDlAAAAAw"]
[Thu Jul 30 14:57:38.148475 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.example"] [unique_id "amtYUl9AowJF3PZLrRWDlQAAAAw"]
[Thu Jul 30 14:57:38.148611 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/www/.env.example"] [unique_id "amtYUl9AowJF3PZLrRWDlQAAAAw"]
[Thu Jul 30 14:57:38.148742 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDlQAAAAw"]
[Thu Jul 30 14:57:38.168350 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/html/.env"] [unique_id "amtYUl9AowJF3PZLrRWDlgAAAAw"]
[Thu Jul 30 14:57:38.168477 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/html/.env"] [unique_id "amtYUl9AowJF3PZLrRWDlgAAAAw"]
[Thu Jul 30 14:57:38.168612 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDlgAAAAw"]
[Thu Jul 30 14:57:38.188408 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/html/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDlwAAAAw"]
[Thu Jul 30 14:57:38.188568 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/html/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDlwAAAAw"]
[Thu Jul 30 14:57:38.188710 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDlwAAAAw"]
[Thu Jul 30 14:57:38.208458 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/html/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDmAAAAAw"]
[Thu Jul 30 14:57:38.208609 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/html/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDmAAAAAw"]
[Thu Jul 30 14:57:38.208750 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDmAAAAAw"]
[Thu Jul 30 14:57:38.228907 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/htdocs/.env"] [unique_id "amtYUl9AowJF3PZLrRWDmQAAAAw"]
[Thu Jul 30 14:57:38.229048 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/htdocs/.env"] [unique_id "amtYUl9AowJF3PZLrRWDmQAAAAw"]
[Thu Jul 30 14:57:38.229211 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDmQAAAAw"]
[Thu Jul 30 14:57:38.249157 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/htdocs/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDmgAAAAw"]
[Thu Jul 30 14:57:38.249295 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/htdocs/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDmgAAAAw"]
[Thu Jul 30 14:57:38.249445 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDmgAAAAw"]
[Thu Jul 30 14:57:38.269355 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/htdocs/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDmwAAAAw"]
[Thu Jul 30 14:57:38.269498 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/htdocs/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDmwAAAAw"]
[Thu Jul 30 14:57:38.269645 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDmwAAAAw"]
[Thu Jul 30 14:57:38.291242 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/httpdocs/.env"] [unique_id "amtYUl9AowJF3PZLrRWDnAAAAAw"]
[Thu Jul 30 14:57:38.291392 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/httpdocs/.env"] [unique_id "amtYUl9AowJF3PZLrRWDnAAAAAw"]
[Thu Jul 30 14:57:38.291546 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDnAAAAAw"]
[Thu Jul 30 14:57:38.311892 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/httpdocs/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDnQAAAAw"]
[Thu Jul 30 14:57:38.312055 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/httpdocs/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDnQAAAAw"]
[Thu Jul 30 14:57:38.312221 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDnQAAAAw"]
[Thu Jul 30 14:57:38.333840 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/httpdocs/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDngAAAAw"]
[Thu Jul 30 14:57:38.334009 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/httpdocs/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDngAAAAw"]
[Thu Jul 30 14:57:38.334167 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDngAAAAw"]
[Thu Jul 30 14:57:38.353392 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/site/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDnwAAAAw"]
[Thu Jul 30 14:57:38.353563 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/site/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDnwAAAAw"]
[Thu Jul 30 14:57:38.353717 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDnwAAAAw"]
[Thu Jul 30 14:57:38.373120 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/site/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDoAAAAAw"]
[Thu Jul 30 14:57:38.373272 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/site/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDoAAAAAw"]
[Thu Jul 30 14:57:38.373424 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDoAAAAAw"]
[Thu Jul 30 14:57:38.392463 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/root/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDoQAAAAw"]
[Thu Jul 30 14:57:38.392627 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/root/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDoQAAAAw"]
[Thu Jul 30 14:57:38.392774 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDoQAAAAw"]
[Thu Jul 30 14:57:38.412771 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/root/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDogAAAAw"]
[Thu Jul 30 14:57:38.412898 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/root/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDogAAAAw"]
[Thu Jul 30 14:57:38.413040 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDogAAAAw"]
[Thu Jul 30 14:57:38.435235 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/home/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDowAAAAw"]
[Thu Jul 30 14:57:38.435404 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/home/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDowAAAAw"]
[Thu Jul 30 14:57:38.435579 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDowAAAAw"]
[Thu Jul 30 14:57:38.467935 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/home/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDpAAAAAw"]
[Thu Jul 30 14:57:38.468131 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/home/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDpAAAAAw"]
[Thu Jul 30 14:57:38.468283 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDpAAAAAw"]
[Thu Jul 30 14:57:38.498658 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env"] [unique_id "amtYUl9AowJF3PZLrRWDpQAAAAw"]
[Thu Jul 30 14:57:38.498832 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env"] [unique_id "amtYUl9AowJF3PZLrRWDpQAAAAw"]
[Thu Jul 30 14:57:38.498984 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDpQAAAAw"]
[Thu Jul 30 14:57:38.538016 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDpgAAAAw"]
[Thu Jul 30 14:57:38.538218 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDpgAAAAw"]
[Thu Jul 30 14:57:38.538379 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDpgAAAAw"]
[Thu Jul 30 14:57:38.578193 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDpwAAAAw"]
[Thu Jul 30 14:57:38.578375 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDpwAAAAw"]
[Thu Jul 30 14:57:38.578539 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDpwAAAAw"]
[Thu Jul 30 14:57:38.618058 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env"] [unique_id "amtYUl9AowJF3PZLrRWDqAAAAAw"]
[Thu Jul 30 14:57:38.618258 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env"] [unique_id "amtYUl9AowJF3PZLrRWDqAAAAAw"]
[Thu Jul 30 14:57:38.618427 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDqAAAAAw"]
[Thu Jul 30 14:57:38.636038 2026] [access_compat:error] [pid 3577409:tid 3577409] [client 64.180.68.231:51110] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:38.769920 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/html/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDqQAAAAw"]
[Thu Jul 30 14:57:38.770117 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDqQAAAAw"]
[Thu Jul 30 14:57:38.770276 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDqQAAAAw"]
[Thu Jul 30 14:57:38.887981 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/www/html/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDqgAAAAw"]
[Thu Jul 30 14:57:38.888195 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/www/html/.env.backup"] [unique_id "amtYUl9AowJF3PZLrRWDqgAAAAw"]
[Thu Jul 30 14:57:38.888365 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDqgAAAAw"]
[Thu Jul 30 14:57:38.955548 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/srv/www/.env"] [unique_id "amtYUl9AowJF3PZLrRWDqwAAAAw"]
[Thu Jul 30 14:57:38.955790 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/srv/www/.env"] [unique_id "amtYUl9AowJF3PZLrRWDqwAAAAw"]
[Thu Jul 30 14:57:38.956044 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDqwAAAAw"]
[Thu Jul 30 14:57:38.997229 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/www/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/srv/www/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDrAAAAAw"]
[Thu Jul 30 14:57:38.997428 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/srv/www/.env.local"] [unique_id "amtYUl9AowJF3PZLrRWDrAAAAAw"]
[Thu Jul 30 14:57:38.997609 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYUl9AowJF3PZLrRWDrAAAAAw"]
[Thu Jul 30 14:57:39.038191 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/www/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/srv/www/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDrQAAAAw"]
[Thu Jul 30 14:57:39.038370 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/srv/www/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDrQAAAAw"]
[Thu Jul 30 14:57:39.038557 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDrQAAAAw"]
[Thu Jul 30 14:57:39.070190 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/srv/http/.env"] [unique_id "amtYU19AowJF3PZLrRWDrgAAAAw"]
[Thu Jul 30 14:57:39.070379 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/srv/http/.env"] [unique_id "amtYU19AowJF3PZLrRWDrgAAAAw"]
[Thu Jul 30 14:57:39.070551 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDrgAAAAw"]
[Thu Jul 30 14:57:39.089635 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/http/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/srv/http/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDrwAAAAw"]
[Thu Jul 30 14:57:39.089808 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/srv/http/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDrwAAAAw"]
[Thu Jul 30 14:57:39.089963 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDrwAAAAw"]
[Thu Jul 30 14:57:39.119356 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv/http/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/srv/http/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDsAAAAAw"]
[Thu Jul 30 14:57:39.119558 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/srv/http/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDsAAAAAw"]
[Thu Jul 30 14:57:39.119720 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDsAAAAAw"]
[Thu Jul 30 14:57:39.141170 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/project/.env"] [unique_id "amtYU19AowJF3PZLrRWDsQAAAAw"]
[Thu Jul 30 14:57:39.141324 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/project/.env"] [unique_id "amtYU19AowJF3PZLrRWDsQAAAAw"]
[Thu Jul 30 14:57:39.141480 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDsQAAAAw"]
[Thu Jul 30 14:57:39.168148 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/project/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDsgAAAAw"]
[Thu Jul 30 14:57:39.168282 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/project/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDsgAAAAw"]
[Thu Jul 30 14:57:39.168429 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDsgAAAAw"]
[Thu Jul 30 14:57:39.193203 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/project/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDswAAAAw"]
[Thu Jul 30 14:57:39.193332 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/project/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDswAAAAw"]
[Thu Jul 30 14:57:39.193486 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDswAAAAw"]
[Thu Jul 30 14:57:39.195888 2026] [ssl:error] [pid 3569021:tid 3569021] (70014)End of file found: [client 216.73.216.199:5505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:39.231306 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /projects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/projects/.env"] [unique_id "amtYU19AowJF3PZLrRWDtAAAAAw"]
[Thu Jul 30 14:57:39.231457 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/projects/.env"] [unique_id "amtYU19AowJF3PZLrRWDtAAAAAw"]
[Thu Jul 30 14:57:39.231609 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDtAAAAAw"]
[Thu Jul 30 14:57:39.239708 2026] [authz_core:error] [pid 3577558:tid 3577558] [client 93.35.130.18:63360] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 14:57:39.261709 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /projects/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/projects/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDtQAAAAw"]
[Thu Jul 30 14:57:39.261876 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/projects/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDtQAAAAw"]
[Thu Jul 30 14:57:39.262035 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDtQAAAAw"]
[Thu Jul 30 14:57:39.285663 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/config/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDtgAAAAw"]
[Thu Jul 30 14:57:39.285839 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/config/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDtgAAAAw"]
[Thu Jul 30 14:57:39.285994 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDtgAAAAw"]
[Thu Jul 30 14:57:39.309123 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/config/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDtwAAAAw"]
[Thu Jul 30 14:57:39.309265 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/config/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDtwAAAAw"]
[Thu Jul 30 14:57:39.309423 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDtwAAAAw"]
[Thu Jul 30 14:57:39.331482 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env"] [unique_id "amtYU19AowJF3PZLrRWDuAAAAAw"]
[Thu Jul 30 14:57:39.331691 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env"] [unique_id "amtYU19AowJF3PZLrRWDuAAAAAw"]
[Thu Jul 30 14:57:39.331838 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDuAAAAAw"]
[Thu Jul 30 14:57:39.352140 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDuQAAAAw"]
[Thu Jul 30 14:57:39.352282 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDuQAAAAw"]
[Thu Jul 30 14:57:39.352442 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDuQAAAAw"]
[Thu Jul 30 14:57:39.371940 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDugAAAAw"]
[Thu Jul 30 14:57:39.372138 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDugAAAAw"]
[Thu Jul 30 14:57:39.372306 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDugAAAAw"]
[Thu Jul 30 14:57:39.392145 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.old"] [unique_id "amtYU19AowJF3PZLrRWDuwAAAAw"]
[Thu Jul 30 14:57:39.392321 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.old"] [unique_id "amtYU19AowJF3PZLrRWDuwAAAAw"]
[Thu Jul 30 14:57:39.392500 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDuwAAAAw"]
[Thu Jul 30 14:57:39.412300 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.dev"] [unique_id "amtYU19AowJF3PZLrRWDvAAAAAw"]
[Thu Jul 30 14:57:39.412500 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.dev"] [unique_id "amtYU19AowJF3PZLrRWDvAAAAAw"]
[Thu Jul 30 14:57:39.412659 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDvAAAAAw"]
[Thu Jul 30 14:57:39.433319 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.prod"] [unique_id "amtYU19AowJF3PZLrRWDvQAAAAw"]
[Thu Jul 30 14:57:39.433484 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.prod"] [unique_id "amtYU19AowJF3PZLrRWDvQAAAAw"]
[Thu Jul 30 14:57:39.433638 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDvQAAAAw"]
[Thu Jul 30 14:57:39.458617 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.staging"] [unique_id "amtYU19AowJF3PZLrRWDvgAAAAw"]
[Thu Jul 30 14:57:39.458805 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.staging"] [unique_id "amtYU19AowJF3PZLrRWDvgAAAAw"]
[Thu Jul 30 14:57:39.458962 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDvgAAAAw"]
[Thu Jul 30 14:57:39.478373 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.test"] [unique_id "amtYU19AowJF3PZLrRWDvwAAAAw"]
[Thu Jul 30 14:57:39.478563 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.test"] [unique_id "amtYU19AowJF3PZLrRWDvwAAAAw"]
[Thu Jul 30 14:57:39.478740 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDvwAAAAw"]
[Thu Jul 30 14:57:39.497663 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.example"] [unique_id "amtYU19AowJF3PZLrRWDwAAAAAw"]
[Thu Jul 30 14:57:39.497847 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/application/.env.example"] [unique_id "amtYU19AowJF3PZLrRWDwAAAAAw"]
[Thu Jul 30 14:57:39.498004 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDwAAAAAw"]
[Thu Jul 30 14:57:39.518252 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env"] [unique_id "amtYU19AowJF3PZLrRWDwQAAAAw"]
[Thu Jul 30 14:57:39.518432 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env"] [unique_id "amtYU19AowJF3PZLrRWDwQAAAAw"]
[Thu Jul 30 14:57:39.518591 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDwQAAAAw"]
[Thu Jul 30 14:57:39.543714 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDwgAAAAw"]
[Thu Jul 30 14:57:39.544003 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDwgAAAAw"]
[Thu Jul 30 14:57:39.544304 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDwgAAAAw"]
[Thu Jul 30 14:57:39.570473 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDwwAAAAw"]
[Thu Jul 30 14:57:39.570676 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDwwAAAAw"]
[Thu Jul 30 14:57:39.570853 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDwwAAAAw"]
[Thu Jul 30 14:57:39.592375 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.old"] [unique_id "amtYU19AowJF3PZLrRWDxAAAAAw"]
[Thu Jul 30 14:57:39.592556 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.old"] [unique_id "amtYU19AowJF3PZLrRWDxAAAAAw"]
[Thu Jul 30 14:57:39.592724 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDxAAAAAw"]
[Thu Jul 30 14:57:39.627801 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.dev"] [unique_id "amtYU19AowJF3PZLrRWDxQAAAAw"]
[Thu Jul 30 14:57:39.627982 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.dev"] [unique_id "amtYU19AowJF3PZLrRWDxQAAAAw"]
[Thu Jul 30 14:57:39.628155 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDxQAAAAw"]
[Thu Jul 30 14:57:39.649645 2026] [ssl:error] [pid 3583055:tid 3583055] (EAI 2)Name or service not known: [client 144.76.19.72:60364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:39.649683 2026] [ssl:error] [pid 3583055:tid 3583055] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:39.655390 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.prod"] [unique_id "amtYU19AowJF3PZLrRWDxgAAAAw"]
[Thu Jul 30 14:57:39.655581 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.prod"] [unique_id "amtYU19AowJF3PZLrRWDxgAAAAw"]
[Thu Jul 30 14:57:39.655761 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDxgAAAAw"]
[Thu Jul 30 14:57:39.679105 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.staging"] [unique_id "amtYU19AowJF3PZLrRWDxwAAAAw"]
[Thu Jul 30 14:57:39.679273 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.staging"] [unique_id "amtYU19AowJF3PZLrRWDxwAAAAw"]
[Thu Jul 30 14:57:39.679429 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDxwAAAAw"]
[Thu Jul 30 14:57:39.707944 2026] [ssl:error] [pid 3583056:tid 3583056] (EAI 2)Name or service not known: [client 144.76.19.72:60368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:39.707978 2026] [ssl:error] [pid 3583056:tid 3583056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:39.711018 2026] [ssl:error] [pid 3583053:tid 3583053] (70014)End of file found: [client 216.73.216.199:45589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:39.717931 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.test"] [unique_id "amtYU19AowJF3PZLrRWDyAAAAAw"]
[Thu Jul 30 14:57:39.718085 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.test"] [unique_id "amtYU19AowJF3PZLrRWDyAAAAAw"]
[Thu Jul 30 14:57:39.718237 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDyAAAAAw"]
[Thu Jul 30 14:57:39.746451 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.example"] [unique_id "amtYU19AowJF3PZLrRWDyQAAAAw"]
[Thu Jul 30 14:57:39.746656 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/.env.example"] [unique_id "amtYU19AowJF3PZLrRWDyQAAAAw"]
[Thu Jul 30 14:57:39.746864 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDyQAAAAw"]
[Thu Jul 30 14:57:39.776029 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYU19AowJF3PZLrRWDygAAAAw"]
[Thu Jul 30 14:57:39.776212 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYU19AowJF3PZLrRWDygAAAAw"]
[Thu Jul 30 14:57:39.776372 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDygAAAAw"]
[Thu Jul 30 14:57:39.821735 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDywAAAAw"]
[Thu Jul 30 14:57:39.821903 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYU19AowJF3PZLrRWDywAAAAw"]
[Thu Jul 30 14:57:39.822061 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDywAAAAw"]
[Thu Jul 30 14:57:39.847352 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDzAAAAAw"]
[Thu Jul 30 14:57:39.847521 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYU19AowJF3PZLrRWDzAAAAAw"]
[Thu Jul 30 14:57:39.847676 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDzAAAAAw"]
[Thu Jul 30 14:57:39.882058 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.old"] [unique_id "amtYU19AowJF3PZLrRWDzQAAAAw"]
[Thu Jul 30 14:57:39.882261 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.old"] [unique_id "amtYU19AowJF3PZLrRWDzQAAAAw"]
[Thu Jul 30 14:57:39.882438 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDzQAAAAw"]
[Thu Jul 30 14:57:39.907448 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.dev"] [unique_id "amtYU19AowJF3PZLrRWDzgAAAAw"]
[Thu Jul 30 14:57:39.907607 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.dev"] [unique_id "amtYU19AowJF3PZLrRWDzgAAAAw"]
[Thu Jul 30 14:57:39.907782 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDzgAAAAw"]
[Thu Jul 30 14:57:39.940487 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod"] [unique_id "amtYU19AowJF3PZLrRWDzwAAAAw"]
[Thu Jul 30 14:57:39.940666 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.prod"] [unique_id "amtYU19AowJF3PZLrRWDzwAAAAw"]
[Thu Jul 30 14:57:39.940837 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWDzwAAAAw"]
[Thu Jul 30 14:57:39.964774 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYU19AowJF3PZLrRWD0AAAAAw"]
[Thu Jul 30 14:57:39.964952 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYU19AowJF3PZLrRWD0AAAAAw"]
[Thu Jul 30 14:57:39.965131 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYU19AowJF3PZLrRWD0AAAAAw"]
[Thu Jul 30 14:57:40.006400 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD0QAAAAw"]
[Thu Jul 30 14:57:40.006592 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD0QAAAAw"]
[Thu Jul 30 14:57:40.006817 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD0QAAAAw"]
[Thu Jul 30 14:57:40.035812 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD0gAAAAw"]
[Thu Jul 30 14:57:40.035959 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD0gAAAAw"]
[Thu Jul 30 14:57:40.036130 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD0gAAAAw"]
[Thu Jul 30 14:57:40.058952 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYVF9AowJF3PZLrRWD0wAAAAw"]
[Thu Jul 30 14:57:40.059114 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env"] [unique_id "amtYVF9AowJF3PZLrRWD0wAAAAw"]
[Thu Jul 30 14:57:40.059265 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD0wAAAAw"]
[Thu Jul 30 14:57:40.087729 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD1AAAAAw"]
[Thu Jul 30 14:57:40.087893 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD1AAAAAw"]
[Thu Jul 30 14:57:40.088051 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD1AAAAAw"]
[Thu Jul 30 14:57:40.123388 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD1QAAAAw"]
[Thu Jul 30 14:57:40.123581 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD1QAAAAw"]
[Thu Jul 30 14:57:40.123746 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD1QAAAAw"]
[Thu Jul 30 14:57:40.144120 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env"] [unique_id "amtYVF9AowJF3PZLrRWD1gAAAAw"]
[Thu Jul 30 14:57:40.144297 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env"] [unique_id "amtYVF9AowJF3PZLrRWD1gAAAAw"]
[Thu Jul 30 14:57:40.144471 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD1gAAAAw"]
[Thu Jul 30 14:57:40.165270 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD1wAAAAw"]
[Thu Jul 30 14:57:40.165456 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD1wAAAAw"]
[Thu Jul 30 14:57:40.165619 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD1wAAAAw"]
[Thu Jul 30 14:57:40.187637 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD2AAAAAw"]
[Thu Jul 30 14:57:40.187799 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD2AAAAAw"]
[Thu Jul 30 14:57:40.187945 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD2AAAAAw"]
[Thu Jul 30 14:57:40.209427 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env"] [unique_id "amtYVF9AowJF3PZLrRWD2QAAAAw"]
[Thu Jul 30 14:57:40.209597 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env"] [unique_id "amtYVF9AowJF3PZLrRWD2QAAAAw"]
[Thu Jul 30 14:57:40.209748 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD2QAAAAw"]
[Thu Jul 30 14:57:40.230392 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD2gAAAAw"]
[Thu Jul 30 14:57:40.230577 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD2gAAAAw"]
[Thu Jul 30 14:57:40.230729 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD2gAAAAw"]
[Thu Jul 30 14:57:40.251280 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD2wAAAAw"]
[Thu Jul 30 14:57:40.251591 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD2wAAAAw"]
[Thu Jul 30 14:57:40.251862 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD2wAAAAw"]
[Thu Jul 30 14:57:40.273192 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYVF9AowJF3PZLrRWD3AAAAAw"]
[Thu Jul 30 14:57:40.273367 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env"] [unique_id "amtYVF9AowJF3PZLrRWD3AAAAAw"]
[Thu Jul 30 14:57:40.273535 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD3AAAAAw"]
[Thu Jul 30 14:57:40.295539 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD3QAAAAw"]
[Thu Jul 30 14:57:40.295674 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.local"] [unique_id "amtYVF9AowJF3PZLrRWD3QAAAAw"]
[Thu Jul 30 14:57:40.295819 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD3QAAAAw"]
[Thu Jul 30 14:57:40.315459 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD3gAAAAw"]
[Thu Jul 30 14:57:40.315608 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/.env.backup"] [unique_id "amtYVF9AowJF3PZLrRWD3gAAAAw"]
[Thu Jul 30 14:57:40.315749 2026] [security2:error] [pid 3583020:tid 3583020] [client 185.177.72.70:8800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVF9AowJF3PZLrRWD3gAAAAw"]
[Thu Jul 30 14:57:40.363353 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/HEAD"] [unique_id "amtYVEADAbWevPHjk60hOAAAAB0"]
[Thu Jul 30 14:57:40.363589 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/HEAD"] [unique_id "amtYVEADAbWevPHjk60hOAAAAB0"]
[Thu Jul 30 14:57:40.363789 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hOAAAAB0"]
[Thu Jul 30 14:57:40.386228 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/description"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/description"] [unique_id "amtYVEADAbWevPHjk60hOQAAAB0"]
[Thu Jul 30 14:57:40.386393 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/description"] [unique_id "amtYVEADAbWevPHjk60hOQAAAB0"]
[Thu Jul 30 14:57:40.386557 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hOQAAAB0"]
[Thu Jul 30 14:57:40.407894 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/commit_editmsg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "amtYVEADAbWevPHjk60hOgAAAB0"]
[Thu Jul 30 14:57:40.408022 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "amtYVEADAbWevPHjk60hOgAAAB0"]
[Thu Jul 30 14:57:40.408179 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hOgAAAB0"]
[Thu Jul 30 14:57:40.427447 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/master"] [unique_id "amtYVEADAbWevPHjk60hOwAAAB0"]
[Thu Jul 30 14:57:40.427573 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/master"] [unique_id "amtYVEADAbWevPHjk60hOwAAAB0"]
[Thu Jul 30 14:57:40.427723 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hOwAAAB0"]
[Thu Jul 30 14:57:40.445758 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/main"] [unique_id "amtYVEADAbWevPHjk60hPAAAAB0"]
[Thu Jul 30 14:57:40.445891 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/refs/heads/main"] [unique_id "amtYVEADAbWevPHjk60hPAAAAB0"]
[Thu Jul 30 14:57:40.446027 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hPAAAAB0"]
[Thu Jul 30 14:57:40.465932 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/HEAD"] [unique_id "amtYVEADAbWevPHjk60hPQAAAB0"]
[Thu Jul 30 14:57:40.466060 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/logs/HEAD"] [unique_id "amtYVEADAbWevPHjk60hPQAAAB0"]
[Thu Jul 30 14:57:40.466211 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hPQAAAB0"]
[Thu Jul 30 14:57:40.486940 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/packed-refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.git/packed-refs"] [unique_id "amtYVEADAbWevPHjk60hPgAAAB0"]
[Thu Jul 30 14:57:40.487115 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.git/packed-refs"] [unique_id "amtYVEADAbWevPHjk60hPgAAAB0"]
[Thu Jul 30 14:57:40.487257 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hPgAAAB0"]
[Thu Jul 30 14:57:40.505762 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.gitignore"] [unique_id "amtYVEADAbWevPHjk60hPwAAAB0"]
[Thu Jul 30 14:57:40.505902 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.gitignore"] [unique_id "amtYVEADAbWevPHjk60hPwAAAB0"]
[Thu Jul 30 14:57:40.506041 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVEADAbWevPHjk60hPwAAAB0"]
[Thu Jul 30 14:57:40.582439 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:40.659352 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:40.686547 2026] [authz_core:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01630: client denied by server configuration: /home/swingadd/public_html/.htaccess
[Thu Jul 30 14:57:40.704860 2026] [authz_core:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01630: client denied by server configuration: /home/swingadd/public_html/.htpasswd
[Thu Jul 30 14:57:40.723083 2026] [authz_core:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01630: client denied by server configuration: /home/swingadd/public_html/.user.ini
[Thu Jul 30 14:57:40.800957 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:40.921328 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.031218 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.119220 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.197211 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.283038 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.303715 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/composer.json"] [unique_id "amtYVUADAbWevPHjk60hUwAAAB0"]
[Thu Jul 30 14:57:41.303892 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/composer.json"] [unique_id "amtYVUADAbWevPHjk60hUwAAAB0"]
[Thu Jul 30 14:57:41.304058 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVUADAbWevPHjk60hUwAAAB0"]
[Thu Jul 30 14:57:41.323016 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/composer.lock"] [unique_id "amtYVUADAbWevPHjk60hVAAAAB0"]
[Thu Jul 30 14:57:41.323226 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/composer.lock"] [unique_id "amtYVUADAbWevPHjk60hVAAAAB0"]
[Thu Jul 30 14:57:41.323397 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVUADAbWevPHjk60hVAAAAB0"]
[Thu Jul 30 14:57:41.403976 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.481779 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.553938 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.628437 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.710280 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.789178 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.791458 2026] [ssl:error] [pid 3566718:tid 3566718] (70014)End of file found: [client 216.73.216.199:50583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:41.869651 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:41.948082 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.023171 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.043554 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtYVkADAbWevPHjk60hZwAAAB0"]
[Thu Jul 30 14:57:42.043900 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtYVkADAbWevPHjk60hZwAAAB0"]
[Thu Jul 30 14:57:42.044076 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hZwAAAB0"]
[Thu Jul 30 14:57:42.061344 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2023.log"] [unique_id "amtYVkADAbWevPHjk60haAAAAB0"]
[Thu Jul 30 14:57:42.061651 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2023.log"] [unique_id "amtYVkADAbWevPHjk60haAAAAB0"]
[Thu Jul 30 14:57:42.061803 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60haAAAAB0"]
[Thu Jul 30 14:57:42.079696 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2024.log"] [unique_id "amtYVkADAbWevPHjk60haQAAAB0"]
[Thu Jul 30 14:57:42.079982 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2024.log"] [unique_id "amtYVkADAbWevPHjk60haQAAAB0"]
[Thu Jul 30 14:57:42.080142 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60haQAAAB0"]
[Thu Jul 30 14:57:42.097860 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2025.log"] [unique_id "amtYVkADAbWevPHjk60hagAAAB0"]
[Thu Jul 30 14:57:42.098207 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2025.log"] [unique_id "amtYVkADAbWevPHjk60hagAAAB0"]
[Thu Jul 30 14:57:42.098373 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hagAAAB0"]
[Thu Jul 30 14:57:42.116740 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2026.log"] [unique_id "amtYVkADAbWevPHjk60hawAAAB0"]
[Thu Jul 30 14:57:42.117060 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/laravel-2026.log"] [unique_id "amtYVkADAbWevPHjk60hawAAAB0"]
[Thu Jul 30 14:57:42.117229 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hawAAAB0"]
[Thu Jul 30 14:57:42.134674 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/worker.log"] [unique_id "amtYVkADAbWevPHjk60hbAAAAB0"]
[Thu Jul 30 14:57:42.135015 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/worker.log"] [unique_id "amtYVkADAbWevPHjk60hbAAAAB0"]
[Thu Jul 30 14:57:42.135184 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hbAAAAB0"]
[Thu Jul 30 14:57:42.152662 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/scheduler.log"] [unique_id "amtYVkADAbWevPHjk60hbQAAAB0"]
[Thu Jul 30 14:57:42.152970 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/scheduler.log"] [unique_id "amtYVkADAbWevPHjk60hbQAAAB0"]
[Thu Jul 30 14:57:42.153122 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hbQAAAB0"]
[Thu Jul 30 14:57:42.170939 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/queue.log"] [unique_id "amtYVkADAbWevPHjk60hbgAAAB0"]
[Thu Jul 30 14:57:42.171256 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/queue.log"] [unique_id "amtYVkADAbWevPHjk60hbgAAAB0"]
[Thu Jul 30 14:57:42.171404 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hbgAAAB0"]
[Thu Jul 30 14:57:42.189613 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/error.log"] [unique_id "amtYVkADAbWevPHjk60hbwAAAB0"]
[Thu Jul 30 14:57:42.189943 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/error.log"] [unique_id "amtYVkADAbWevPHjk60hbwAAAB0"]
[Thu Jul 30 14:57:42.190127 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hbwAAAB0"]
[Thu Jul 30 14:57:42.208236 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/debug.log"] [unique_id "amtYVkADAbWevPHjk60hcAAAAB0"]
[Thu Jul 30 14:57:42.208590 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/logs/debug.log"] [unique_id "amtYVkADAbWevPHjk60hcAAAAB0"]
[Thu Jul 30 14:57:42.208743 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hcAAAAB0"]
[Thu Jul 30 14:57:42.308585 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.394218 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.477797 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.552262 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.629773 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.704003 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.762438 2026] [ssl:error] [pid 3543505:tid 3543505] (EAI 2)Name or service not known: [client 144.76.19.72:60376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:42.762460 2026] [ssl:error] [pid 3543505:tid 3543505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:42.779164 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.799871 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /public/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/.htaccess"] [unique_id "amtYVkADAbWevPHjk60hfwAAAB0"]
[Thu Jul 30 14:57:42.800005 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/.htaccess"] [unique_id "amtYVkADAbWevPHjk60hfwAAAB0"]
[Thu Jul 30 14:57:42.800172 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hfwAAAB0"]
[Thu Jul 30 14:57:42.800187 2026] [cgi:error] [pid 3583057:tid 3583057] [client 85.204.70.116:44517] AH01228: exec used but not allowed in /home/alismcom/public_html/themez.co.uk/index.htm
[Thu Jul 30 14:57:42.813616 2026] [ssl:error] [pid 3583059:tid 3583059] (EAI 2)Name or service not known: [client 144.76.19.72:60382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:42.813641 2026] [ssl:error] [pid 3583059:tid 3583059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:42.818706 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/public/web.config"] [unique_id "amtYVkADAbWevPHjk60hgAAAAB0"]
[Thu Jul 30 14:57:42.818959 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /public/web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public/web.config"] [unique_id "amtYVkADAbWevPHjk60hgAAAAB0"]
[Thu Jul 30 14:57:42.819132 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public/web.config"] [unique_id "amtYVkADAbWevPHjk60hgAAAAB0"]
[Thu Jul 30 14:57:42.819276 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYVkADAbWevPHjk60hgAAAAB0"]
[Thu Jul 30 14:57:42.891047 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.965088 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:42.973460 2026] [cgi:error] [pid 3583057:tid 3583057] [client 85.204.70.116:44517] AH01228: exec used but not allowed in /home/alismcom/public_html/themez.co.uk/index.htm
[Thu Jul 30 14:57:43.049151 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.123551 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.223869 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.295809 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.316533 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.php"] [unique_id "amtYV0ADAbWevPHjk60hjQAAAB0"]
[Thu Jul 30 14:57:43.316702 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.php"] [unique_id "amtYV0ADAbWevPHjk60hjQAAAB0"]
[Thu Jul 30 14:57:43.316866 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hjQAAAB0"]
[Thu Jul 30 14:57:43.335247 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.inc"] [unique_id "amtYV0ADAbWevPHjk60hjgAAAB0"]
[Thu Jul 30 14:57:43.335434 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.inc"] [unique_id "amtYV0ADAbWevPHjk60hjgAAAB0"]
[Thu Jul 30 14:57:43.335621 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hjgAAAB0"]
[Thu Jul 30 14:57:43.354304 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.conf"] [unique_id "amtYV0ADAbWevPHjk60hjwAAAB0"]
[Thu Jul 30 14:57:43.354489 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.conf"] [unique_id "amtYV0ADAbWevPHjk60hjwAAAB0"]
[Thu Jul 30 14:57:43.354671 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hjwAAAB0"]
[Thu Jul 30 14:57:43.373372 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.config"] [unique_id "amtYV0ADAbWevPHjk60hkAAAAB0"]
[Thu Jul 30 14:57:43.373549 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.config"] [unique_id "amtYV0ADAbWevPHjk60hkAAAAB0"]
[Thu Jul 30 14:57:43.373751 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hkAAAAB0"]
[Thu Jul 30 14:57:43.382491 2026] [cgi:error] [pid 3583057:tid 3583057] [client 85.204.70.116:44517] AH01228: exec used but not allowed in /home/alismcom/public_html/themez.co.uk/index.htm
[Thu Jul 30 14:57:43.392054 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cfg"] [unique_id "amtYV0ADAbWevPHjk60hkQAAAB0"]
[Thu Jul 30 14:57:43.392194 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cfg"] [unique_id "amtYV0ADAbWevPHjk60hkQAAAB0"]
[Thu Jul 30 14:57:43.392337 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hkQAAAB0"]
[Thu Jul 30 14:57:43.410463 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.ini"] [unique_id "amtYV0ADAbWevPHjk60hkgAAAB0"]
[Thu Jul 30 14:57:43.410617 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.ini"] [unique_id "amtYV0ADAbWevPHjk60hkgAAAB0"]
[Thu Jul 30 14:57:43.410765 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hkgAAAB0"]
[Thu Jul 30 14:57:43.429020 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.json"] [unique_id "amtYV0ADAbWevPHjk60hkwAAAB0"]
[Thu Jul 30 14:57:43.429194 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.json"] [unique_id "amtYV0ADAbWevPHjk60hkwAAAB0"]
[Thu Jul 30 14:57:43.429344 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hkwAAAB0"]
[Thu Jul 30 14:57:43.448675 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.xml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.xml"] [unique_id "amtYV0ADAbWevPHjk60hlAAAAB0"]
[Thu Jul 30 14:57:43.448822 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.xml"] [unique_id "amtYV0ADAbWevPHjk60hlAAAAB0"]
[Thu Jul 30 14:57:43.448962 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hlAAAAB0"]
[Thu Jul 30 14:57:43.466892 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.yaml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.yaml"] [unique_id "amtYV0ADAbWevPHjk60hlQAAAB0"]
[Thu Jul 30 14:57:43.467028 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.yaml"] [unique_id "amtYV0ADAbWevPHjk60hlQAAAB0"]
[Thu Jul 30 14:57:43.467176 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hlQAAAB0"]
[Thu Jul 30 14:57:43.485553 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.yml"] [unique_id "amtYV0ADAbWevPHjk60hlgAAAB0"]
[Thu Jul 30 14:57:43.485737 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.yml"] [unique_id "amtYV0ADAbWevPHjk60hlgAAAB0"]
[Thu Jul 30 14:57:43.485933 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hlgAAAB0"]
[Thu Jul 30 14:57:43.503528 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.toml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.toml"] [unique_id "amtYV0ADAbWevPHjk60hlwAAAB0"]
[Thu Jul 30 14:57:43.503651 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.toml"] [unique_id "amtYV0ADAbWevPHjk60hlwAAAB0"]
[Thu Jul 30 14:57:43.503782 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hlwAAAB0"]
[Thu Jul 30 14:57:43.522338 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_file"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env_file"] [unique_id "amtYV0ADAbWevPHjk60hmAAAAB0"]
[Thu Jul 30 14:57:43.522469 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env_file"] [unique_id "amtYV0ADAbWevPHjk60hmAAAAB0"]
[Thu Jul 30 14:57:43.522633 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hmAAAAB0"]
[Thu Jul 30 14:57:43.540778 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-file"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env-file"] [unique_id "amtYV0ADAbWevPHjk60hmQAAAB0"]
[Thu Jul 30 14:57:43.540942 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env-file"] [unique_id "amtYV0ADAbWevPHjk60hmQAAAB0"]
[Thu Jul 30 14:57:43.541103 2026] [security2:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV0ADAbWevPHjk60hmQAAAB0"]
[Thu Jul 30 14:57:43.615280 2026] [cgi:error] [pid 3583055:tid 3583055] [client 185.177.72.70:8814] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.704101 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.776182 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.795480 2026] [security2:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.envrc"] [unique_id "amtYV2_HmlV3KP9LJIqjmwAAAAs"]
[Thu Jul 30 14:57:43.795640 2026] [security2:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.envrc"] [unique_id "amtYV2_HmlV3KP9LJIqjmwAAAAs"]
[Thu Jul 30 14:57:43.795793 2026] [security2:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYV2_HmlV3KP9LJIqjmwAAAAs"]
[Thu Jul 30 14:57:43.866386 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:43.944283 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.019799 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.090395 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.159683 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.248393 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.319631 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.390228 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.460171 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.528479 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.615018 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.689337 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.763209 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.836689 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.914210 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:44.977497 2026] [access_compat:error] [pid 3583052:tid 3583052] [client 64.180.68.231:51429] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:44.991504 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.064786 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.137399 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.212912 2026] [ssl:error] [pid 3583059:tid 3583059] (70014)End of file found: [client 216.73.216.199:62827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:45.243670 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.334542 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.413840 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.488942 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.569159 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.643480 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.711030 2026] [ssl:error] [pid 3574312:tid 3574312] (70014)End of file found: [client 216.73.216.199:61917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:45.714700 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.784494 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.860188 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:45.865927 2026] [ssl:error] [pid 3574309:tid 3574309] (EAI 2)Name or service not known: [client 144.76.19.72:60392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:45.865964 2026] [ssl:error] [pid 3574309:tid 3574309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:45.920566 2026] [ssl:error] [pid 3568093:tid 3568093] (EAI 2)Name or service not known: [client 144.76.19.72:60402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:45.920612 2026] [ssl:error] [pid 3568093:tid 3568093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:45.948685 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.027825 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.124464 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.205566 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.285184 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.366276 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.439788 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.537246 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.629445 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.710109 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.789006 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.863220 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:46.957524 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.035639 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.113769 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.198640 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.284342 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.358355 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.422493 2026] [authz_core:error] [pid 3583052:tid 3583052] [client 216.73.216.199:45187] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/search/error_log
[Thu Jul 30 14:57:47.437485 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.511084 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.583242 2026] [cgi:error] [pid 3583019:tid 3583019] [client 185.177.72.70:35740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.675742 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.755432 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.836365 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.909253 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:47.981937 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.055466 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.128908 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.201985 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.275963 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.345158 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.420191 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.496996 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.579056 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.660672 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.736653 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.809079 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.826356 2026] [ssl:error] [pid 3582961:tid 3582961] (70014)End of file found: [client 216.73.216.199:25780] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:48.884476 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.954899 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:48.972421 2026] [ssl:error] [pid 3574306:tid 3574306] (EAI 2)Name or service not known: [client 144.76.19.72:60404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:48.972446 2026] [ssl:error] [pid 3574306:tid 3574306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:49.026752 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:60418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:49.026786 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:49.028697 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.110992 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.182443 2026] [access_compat:error] [pid 3583054:tid 3583054] [client 64.180.68.231:51636] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:49.193261 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.281339 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.359270 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.434456 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.456235 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/web.config"] [unique_id "amtYXUhfAAk6hz0Y8rLphgAAAAM"]
[Thu Jul 30 14:57:49.456504 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web.config"] [unique_id "amtYXUhfAAk6hz0Y8rLphgAAAAM"]
[Thu Jul 30 14:57:49.456733 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web.config"] [unique_id "amtYXUhfAAk6hz0Y8rLphgAAAAM"]
[Thu Jul 30 14:57:49.456941 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYXUhfAAk6hz0Y8rLphgAAAAM"]
[Thu Jul 30 14:57:49.474935 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/Web.config"] [unique_id "amtYXUhfAAk6hz0Y8rLphwAAAAM"]
[Thu Jul 30 14:57:49.475209 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/Web.config"] [unique_id "amtYXUhfAAk6hz0Y8rLphwAAAAM"]
[Thu Jul 30 14:57:49.475432 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/Web.config"] [unique_id "amtYXUhfAAk6hz0Y8rLphwAAAAM"]
[Thu Jul 30 14:57:49.475622 2026] [security2:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYXUhfAAk6hz0Y8rLphwAAAAM"]
[Thu Jul 30 14:57:49.550482 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.629535 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.707221 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.783741 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.846913 2026] [ssl:error] [pid 3572796:tid 3572796] (70014)End of file found: [client 216.73.216.199:10067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:49.862696 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:49.944476 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.024324 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.109726 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.147974 2026] [ssl:error] [pid 3583019:tid 3583019] (70014)End of file found: [client 216.73.216.199:57190] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:50.198963 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.276856 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.359105 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.438143 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.518570 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.605550 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.689282 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.766191 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.845258 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:50.921817 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.002623 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.080738 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.190406 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.269986 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.350242 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.439153 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.515272 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.591129 2026] [cgi:error] [pid 3582960:tid 3582960] [client 185.177.72.70:35756] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.679187 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.748193 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.818232 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.904231 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:51.975918 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.051975 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.081586 2026] [ssl:error] [pid 3574305:tid 3574305] (EAI 2)Name or service not known: [client 144.76.19.72:29888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:52.081617 2026] [ssl:error] [pid 3574305:tid 3574305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:52.123704 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.136168 2026] [ssl:error] [pid 3568093:tid 3568093] (EAI 2)Name or service not known: [client 144.76.19.72:29890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:52.136196 2026] [ssl:error] [pid 3568093:tid 3568093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:52.192439 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.279270 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.366969 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.438959 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.510951 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:52.529943 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /~/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/~/.env"] [unique_id "amtYYC5eOtAv9UYByrC9tgAAAEg"]
[Thu Jul 30 14:57:52.530125 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/~/.env"] [unique_id "amtYYC5eOtAv9UYByrC9tgAAAEg"]
[Thu Jul 30 14:57:52.530279 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9tgAAAEg"]
[Thu Jul 30 14:57:52.547005 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /~/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/~/laravel/.env"] [unique_id "amtYYC5eOtAv9UYByrC9twAAAEg"]
[Thu Jul 30 14:57:52.547139 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/~/laravel/.env"] [unique_id "amtYYC5eOtAv9UYByrC9twAAAEg"]
[Thu Jul 30 14:57:52.547281 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9twAAAEg"]
[Thu Jul 30 14:57:52.564532 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /~/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/~/app/.env"] [unique_id "amtYYC5eOtAv9UYByrC9uAAAAEg"]
[Thu Jul 30 14:57:52.564679 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/~/app/.env"] [unique_id "amtYYC5eOtAv9UYByrC9uAAAAEg"]
[Thu Jul 30 14:57:52.564823 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9uAAAAEg"]
[Thu Jul 30 14:57:52.583081 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /~/www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/~/www/.env"] [unique_id "amtYYC5eOtAv9UYByrC9uQAAAEg"]
[Thu Jul 30 14:57:52.583242 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/~/www/.env"] [unique_id "amtYYC5eOtAv9UYByrC9uQAAAEg"]
[Thu Jul 30 14:57:52.583388 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9uQAAAEg"]
[Thu Jul 30 14:57:52.602487 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /~/public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/~/public_html/.env"] [unique_id "amtYYC5eOtAv9UYByrC9ugAAAEg"]
[Thu Jul 30 14:57:52.602654 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/~/public_html/.env"] [unique_id "amtYYC5eOtAv9UYByrC9ugAAAEg"]
[Thu Jul 30 14:57:52.602801 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9ugAAAEg"]
[Thu Jul 30 14:57:52.622917 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env"] [unique_id "amtYYC5eOtAv9UYByrC9uwAAAEg"]
[Thu Jul 30 14:57:52.623089 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env"] [unique_id "amtYYC5eOtAv9UYByrC9uwAAAEg"]
[Thu Jul 30 14:57:52.623237 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9uwAAAEg"]
[Thu Jul 30 14:57:52.640276 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.local"] [unique_id "amtYYC5eOtAv9UYByrC9vAAAAEg"]
[Thu Jul 30 14:57:52.640468 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.local"] [unique_id "amtYYC5eOtAv9UYByrC9vAAAAEg"]
[Thu Jul 30 14:57:52.640623 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9vAAAAEg"]
[Thu Jul 30 14:57:52.658084 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.backup"] [unique_id "amtYYC5eOtAv9UYByrC9vQAAAEg"]
[Thu Jul 30 14:57:52.658264 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.backup"] [unique_id "amtYYC5eOtAv9UYByrC9vQAAAEg"]
[Thu Jul 30 14:57:52.658426 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9vQAAAEg"]
[Thu Jul 30 14:57:52.676619 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.old"] [unique_id "amtYYC5eOtAv9UYByrC9vgAAAEg"]
[Thu Jul 30 14:57:52.676796 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.old"] [unique_id "amtYYC5eOtAv9UYByrC9vgAAAEg"]
[Thu Jul 30 14:57:52.676939 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9vgAAAEg"]
[Thu Jul 30 14:57:52.695258 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.dev"] [unique_id "amtYYC5eOtAv9UYByrC9vwAAAEg"]
[Thu Jul 30 14:57:52.695494 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.dev"] [unique_id "amtYYC5eOtAv9UYByrC9vwAAAEg"]
[Thu Jul 30 14:57:52.695636 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9vwAAAEg"]
[Thu Jul 30 14:57:52.712802 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.prod"] [unique_id "amtYYC5eOtAv9UYByrC9wAAAAEg"]
[Thu Jul 30 14:57:52.712990 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.prod"] [unique_id "amtYYC5eOtAv9UYByrC9wAAAAEg"]
[Thu Jul 30 14:57:52.713160 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9wAAAAEg"]
[Thu Jul 30 14:57:52.731129 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.staging"] [unique_id "amtYYC5eOtAv9UYByrC9wQAAAEg"]
[Thu Jul 30 14:57:52.731270 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.staging"] [unique_id "amtYYC5eOtAv9UYByrC9wQAAAEg"]
[Thu Jul 30 14:57:52.731427 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9wQAAAEg"]
[Thu Jul 30 14:57:52.748217 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.test"] [unique_id "amtYYC5eOtAv9UYByrC9wgAAAEg"]
[Thu Jul 30 14:57:52.748394 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.test"] [unique_id "amtYYC5eOtAv9UYByrC9wgAAAEg"]
[Thu Jul 30 14:57:52.748558 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9wgAAAEg"]
[Thu Jul 30 14:57:52.766488 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.example"] [unique_id "amtYYC5eOtAv9UYByrC9wwAAAEg"]
[Thu Jul 30 14:57:52.766671 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/public_html/.env.example"] [unique_id "amtYYC5eOtAv9UYByrC9wwAAAEg"]
[Thu Jul 30 14:57:52.766833 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9wwAAAEg"]
[Thu Jul 30 14:57:52.783489 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /domains/example.com/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/domains/example.com/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xAAAAEg"]
[Thu Jul 30 14:57:52.783669 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/domains/example.com/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xAAAAEg"]
[Thu Jul 30 14:57:52.783822 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9xAAAAEg"]
[Thu Jul 30 14:57:52.800583 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /domains/example.com/public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/domains/example.com/public_html/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xQAAAEg"]
[Thu Jul 30 14:57:52.800763 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/domains/example.com/public_html/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xQAAAEg"]
[Thu Jul 30 14:57:52.800921 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9xQAAAEg"]
[Thu Jul 30 14:57:52.821778 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /domains/example.com/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/domains/example.com/laravel/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xgAAAEg"]
[Thu Jul 30 14:57:52.821975 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/domains/example.com/laravel/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xgAAAEg"]
[Thu Jul 30 14:57:52.822146 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9xgAAAEg"]
[Thu Jul 30 14:57:52.840331 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vhosts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/vhosts/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xwAAAEg"]
[Thu Jul 30 14:57:52.840515 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/vhosts/.env"] [unique_id "amtYYC5eOtAv9UYByrC9xwAAAEg"]
[Thu Jul 30 14:57:52.840674 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9xwAAAEg"]
[Thu Jul 30 14:57:52.858855 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /virtual/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/virtual/.env"] [unique_id "amtYYC5eOtAv9UYByrC9yAAAAEg"]
[Thu Jul 30 14:57:52.859031 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/virtual/.env"] [unique_id "amtYYC5eOtAv9UYByrC9yAAAAEg"]
[Thu Jul 30 14:57:52.859191 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9yAAAAEg"]
[Thu Jul 30 14:57:52.876697 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sites/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/sites/.env"] [unique_id "amtYYC5eOtAv9UYByrC9yQAAAEg"]
[Thu Jul 30 14:57:52.876860 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/sites/.env"] [unique_id "amtYYC5eOtAv9UYByrC9yQAAAEg"]
[Thu Jul 30 14:57:52.877009 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9yQAAAEg"]
[Thu Jul 30 14:57:52.894819 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /websites/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/websites/.env"] [unique_id "amtYYC5eOtAv9UYByrC9ygAAAEg"]
[Thu Jul 30 14:57:52.894996 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/websites/.env"] [unique_id "amtYYC5eOtAv9UYByrC9ygAAAEg"]
[Thu Jul 30 14:57:52.895158 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9ygAAAEg"]
[Thu Jul 30 14:57:52.913445 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/deploy/.env"] [unique_id "amtYYC5eOtAv9UYByrC9ywAAAEg"]
[Thu Jul 30 14:57:52.913600 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/deploy/.env"] [unique_id "amtYYC5eOtAv9UYByrC9ywAAAEg"]
[Thu Jul 30 14:57:52.913749 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9ywAAAEg"]
[Thu Jul 30 14:57:52.930684 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/deployment/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zAAAAEg"]
[Thu Jul 30 14:57:52.930853 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/deployment/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zAAAAEg"]
[Thu Jul 30 14:57:52.931001 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9zAAAAEg"]
[Thu Jul 30 14:57:52.955235 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /release/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/release/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zQAAAEg"]
[Thu Jul 30 14:57:52.955408 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/release/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zQAAAEg"]
[Thu Jul 30 14:57:52.955571 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9zQAAAEg"]
[Thu Jul 30 14:57:52.971888 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zgAAAEg"]
[Thu Jul 30 14:57:52.972061 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zgAAAEg"]
[Thu Jul 30 14:57:52.972240 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9zgAAAEg"]
[Thu Jul 30 14:57:52.989109 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/current/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zwAAAEg"]
[Thu Jul 30 14:57:52.989285 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/current/.env"] [unique_id "amtYYC5eOtAv9UYByrC9zwAAAEg"]
[Thu Jul 30 14:57:52.989445 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYC5eOtAv9UYByrC9zwAAAEg"]
[Thu Jul 30 14:57:53.006039 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/shared/.env"] [unique_id "amtYYS5eOtAv9UYByrC90AAAAEg"]
[Thu Jul 30 14:57:53.006231 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/shared/.env"] [unique_id "amtYYS5eOtAv9UYByrC90AAAAEg"]
[Thu Jul 30 14:57:53.006390 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYS5eOtAv9UYByrC90AAAAEg"]
[Thu Jul 30 14:57:53.023154 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/shared/config/.env"] [unique_id "amtYYS5eOtAv9UYByrC90QAAAEg"]
[Thu Jul 30 14:57:53.023316 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/shared/config/.env"] [unique_id "amtYYS5eOtAv9UYByrC90QAAAEg"]
[Thu Jul 30 14:57:53.023468 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYS5eOtAv9UYByrC90QAAAEg"]
[Thu Jul 30 14:57:53.091496 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.160099 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.230601 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.300173 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.383640 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.456048 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.527157 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.604454 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.689682 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.759682 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.781559 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pgadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/pgadmin/.env"] [unique_id "amtYYS5eOtAv9UYByrC95gAAAEg"]
[Thu Jul 30 14:57:53.781732 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/pgadmin/.env"] [unique_id "amtYYS5eOtAv9UYByrC95gAAAEg"]
[Thu Jul 30 14:57:53.781882 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYS5eOtAv9UYByrC95gAAAEg"]
[Thu Jul 30 14:57:53.805005 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailhog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/mailhog/.env"] [unique_id "amtYYS5eOtAv9UYByrC95wAAAEg"]
[Thu Jul 30 14:57:53.805201 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/mailhog/.env"] [unique_id "amtYYS5eOtAv9UYByrC95wAAAEg"]
[Thu Jul 30 14:57:53.805350 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYS5eOtAv9UYByrC95wAAAEg"]
[Thu Jul 30 14:57:53.823162 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /minio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/minio/.env"] [unique_id "amtYYS5eOtAv9UYByrC96AAAAEg"]
[Thu Jul 30 14:57:53.823316 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/minio/.env"] [unique_id "amtYYS5eOtAv9UYByrC96AAAAEg"]
[Thu Jul 30 14:57:53.823464 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYS5eOtAv9UYByrC96AAAAEg"]
[Thu Jul 30 14:57:53.840425 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /localstack/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/localstack/.env"] [unique_id "amtYYS5eOtAv9UYByrC96QAAAEg"]
[Thu Jul 30 14:57:53.840595 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/localstack/.env"] [unique_id "amtYYS5eOtAv9UYByrC96QAAAEg"]
[Thu Jul 30 14:57:53.840736 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYS5eOtAv9UYByrC96QAAAEg"]
[Thu Jul 30 14:57:53.907739 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.981145 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:53.999927 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/supervisord.conf"] [unique_id "amtYYS5eOtAv9UYByrC97gAAAEg"]
[Thu Jul 30 14:57:54.000293 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/supervisord.conf"] [unique_id "amtYYS5eOtAv9UYByrC97gAAAEg"]
[Thu Jul 30 14:57:54.000467 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYS5eOtAv9UYByrC97gAAAEg"]
[Thu Jul 30 14:57:54.016808 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/supervisor/laravel-worker.conf"] [unique_id "amtYYi5eOtAv9UYByrC97wAAAEg"]
[Thu Jul 30 14:57:54.017170 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/supervisor/laravel-worker.conf"] [unique_id "amtYYi5eOtAv9UYByrC97wAAAEg"]
[Thu Jul 30 14:57:54.017330 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC97wAAAEg"]
[Thu Jul 30 14:57:54.090221 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.161840 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.182117 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/laravel.log"] [unique_id "amtYYi5eOtAv9UYByrC99AAAAEg"]
[Thu Jul 30 14:57:54.182478 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/laravel.log"] [unique_id "amtYYi5eOtAv9UYByrC99AAAAEg"]
[Thu Jul 30 14:57:54.182635 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC99AAAAEg"]
[Thu Jul 30 14:57:54.207407 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/error.log"] [unique_id "amtYYi5eOtAv9UYByrC99QAAAEg"]
[Thu Jul 30 14:57:54.207765 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/error.log"] [unique_id "amtYYi5eOtAv9UYByrC99QAAAEg"]
[Thu Jul 30 14:57:54.207930 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC99QAAAEg"]
[Thu Jul 30 14:57:54.226077 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/access.log"] [unique_id "amtYYi5eOtAv9UYByrC99gAAAEg"]
[Thu Jul 30 14:57:54.226446 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/nginx/access.log"] [unique_id "amtYYi5eOtAv9UYByrC99gAAAEg"]
[Thu Jul 30 14:57:54.226606 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC99gAAAEg"]
[Thu Jul 30 14:57:54.243988 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/error.log"] [unique_id "amtYYi5eOtAv9UYByrC99wAAAEg"]
[Thu Jul 30 14:57:54.244346 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/error.log"] [unique_id "amtYYi5eOtAv9UYByrC99wAAAEg"]
[Thu Jul 30 14:57:54.244513 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC99wAAAEg"]
[Thu Jul 30 14:57:54.249956 2026] [core:error] [pid 3572795:tid 3572795] (13)Permission denied: [client 216.73.216.199:8104] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS1/flags
[Thu Jul 30 14:57:54.260647 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/access.log"] [unique_id "amtYYi5eOtAv9UYByrC9-AAAAEg"]
[Thu Jul 30 14:57:54.260951 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/apache2/access.log"] [unique_id "amtYYi5eOtAv9UYByrC9-AAAAEg"]
[Thu Jul 30 14:57:54.261104 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC9-AAAAEg"]
[Thu Jul 30 14:57:54.277669 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/php/error.log"] [unique_id "amtYYi5eOtAv9UYByrC9-QAAAEg"]
[Thu Jul 30 14:57:54.277982 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/php/error.log"] [unique_id "amtYYi5eOtAv9UYByrC9-QAAAEg"]
[Thu Jul 30 14:57:54.278151 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC9-QAAAEg"]
[Thu Jul 30 14:57:54.295252 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/var/log/mysql/error.log"] [unique_id "amtYYi5eOtAv9UYByrC9-gAAAEg"]
[Thu Jul 30 14:57:54.295572 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/var/log/mysql/error.log"] [unique_id "amtYYi5eOtAv9UYByrC9-gAAAEg"]
[Thu Jul 30 14:57:54.295715 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC9-gAAAEg"]
[Thu Jul 30 14:57:54.313798 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/cache/.env"] [unique_id "amtYYi5eOtAv9UYByrC9-wAAAEg"]
[Thu Jul 30 14:57:54.313972 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/cache/.env"] [unique_id "amtYYi5eOtAv9UYByrC9-wAAAEg"]
[Thu Jul 30 14:57:54.314156 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC9-wAAAEg"]
[Thu Jul 30 14:57:54.331707 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/logs/.env"] [unique_id "amtYYi5eOtAv9UYByrC9_AAAAEg"]
[Thu Jul 30 14:57:54.331886 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/logs/.env"] [unique_id "amtYYi5eOtAv9UYByrC9_AAAAEg"]
[Thu Jul 30 14:57:54.332044 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC9_AAAAEg"]
[Thu Jul 30 14:57:54.349466 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /log/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/log/.env"] [unique_id "amtYYi5eOtAv9UYByrC9_QAAAEg"]
[Thu Jul 30 14:57:54.349636 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/log/.env"] [unique_id "amtYYi5eOtAv9UYByrC9_QAAAEg"]
[Thu Jul 30 14:57:54.349794 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC9_QAAAEg"]
[Thu Jul 30 14:57:54.360971 2026] [core:error] [pid 3572795:tid 3572795] (13)Permission denied: [client 216.73.216.199:8104] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:15/subsystem/ttyS3/flags
[Thu Jul 30 14:57:54.420442 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.493697 2026] [cgi:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.516581 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archive/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/archive/.env"] [unique_id "amtYYi5eOtAv9UYByrC-AgAAAEg"]
[Thu Jul 30 14:57:54.516709 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/archive/.env"] [unique_id "amtYYi5eOtAv9UYByrC-AgAAAEg"]
[Thu Jul 30 14:57:54.516847 2026] [security2:error] [pid 3574312:tid 3574312] [client 185.177.72.70:47716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYi5eOtAv9UYByrC-AgAAAEg"]
[Thu Jul 30 14:57:54.605858 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.662455 2026] [ssl:error] [pid 3572795:tid 3572795] (70014)End of file found: [client 216.73.216.199:8104] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:54.679021 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.754395 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.835581 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:54.856549 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env_"] [unique_id "amtYYu8ppXJG7kyPz4fI-wAAACo"]
[Thu Jul 30 14:57:54.856723 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env_"] [unique_id "amtYYu8ppXJG7kyPz4fI-wAAACo"]
[Thu Jul 30 14:57:54.856885 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYu8ppXJG7kyPz4fI-wAAACo"]
[Thu Jul 30 14:57:54.875332 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/vendor/laravel/.env"] [unique_id "amtYYu8ppXJG7kyPz4fI_AAAACo"]
[Thu Jul 30 14:57:54.875517 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/vendor/laravel/.env"] [unique_id "amtYYu8ppXJG7kyPz4fI_AAAACo"]
[Thu Jul 30 14:57:54.875689 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYu8ppXJG7kyPz4fI_AAAACo"]
[Thu Jul 30 14:57:54.894327 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/node_modules/.env"] [unique_id "amtYYu8ppXJG7kyPz4fI_QAAACo"]
[Thu Jul 30 14:57:54.894476 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/node_modules/.env"] [unique_id "amtYYu8ppXJG7kyPz4fI_QAAACo"]
[Thu Jul 30 14:57:54.894627 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYYu8ppXJG7kyPz4fI_QAAACo"]
[Thu Jul 30 14:57:54.988627 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.062549 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.137098 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.162980 2026] [core:error] [pid 3571207:tid 3571207] (13)Permission denied: [client 216.73.216.199:44987] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS1/flags
[Thu Jul 30 14:57:55.195615 2026] [ssl:error] [pid 3566718:tid 3566718] (EAI 2)Name or service not known: [client 144.76.19.72:29898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:55.195647 2026] [ssl:error] [pid 3566718:tid 3566718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:55.212539 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.235306 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/tests/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJBgAAACo"]
[Thu Jul 30 14:57:55.235470 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/tests/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJBgAAACo"]
[Thu Jul 30 14:57:55.235625 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJBgAAACo"]
[Thu Jul 30 14:57:55.253908 2026] [ssl:error] [pid 3574312:tid 3574312] (EAI 2)Name or service not known: [client 144.76.19.72:29900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:55.253937 2026] [ssl:error] [pid 3574312:tid 3574312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:55.256687 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spec/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/spec/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJBwAAACo"]
[Thu Jul 30 14:57:55.256819 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/spec/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJBwAAACo"]
[Thu Jul 30 14:57:55.256975 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJBwAAACo"]
[Thu Jul 30 14:57:55.275250 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /specs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/specs/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCAAAACo"]
[Thu Jul 30 14:57:55.275437 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/specs/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCAAAACo"]
[Thu Jul 30 14:57:55.275600 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJCAAAACo"]
[Thu Jul 30 14:57:55.276690 2026] [ssl:error] [pid 3571207:tid 3571207] (70014)End of file found: [client 216.73.216.199:44987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:55.294221 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /feature/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/feature/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCQAAACo"]
[Thu Jul 30 14:57:55.294381 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/feature/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCQAAACo"]
[Thu Jul 30 14:57:55.294538 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJCQAAACo"]
[Thu Jul 30 14:57:55.313009 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /features/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/features/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCgAAACo"]
[Thu Jul 30 14:57:55.313151 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/features/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCgAAACo"]
[Thu Jul 30 14:57:55.313291 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJCgAAACo"]
[Thu Jul 30 14:57:55.331622 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unit/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/unit/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCwAAACo"]
[Thu Jul 30 14:57:55.331770 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/unit/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJCwAAACo"]
[Thu Jul 30 14:57:55.331920 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJCwAAACo"]
[Thu Jul 30 14:57:55.350233 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /integration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/integration/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDAAAACo"]
[Thu Jul 30 14:57:55.350406 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/integration/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDAAAACo"]
[Thu Jul 30 14:57:55.350569 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJDAAAACo"]
[Thu Jul 30 14:57:55.369192 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/e2e/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDQAAACo"]
[Thu Jul 30 14:57:55.369386 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/e2e/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDQAAACo"]
[Thu Jul 30 14:57:55.369535 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJDQAAACo"]
[Thu Jul 30 14:57:55.388255 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/ci/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDgAAACo"]
[Thu Jul 30 14:57:55.388406 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/ci/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDgAAACo"]
[Thu Jul 30 14:57:55.388561 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJDgAAACo"]
[Thu Jul 30 14:57:55.391388 2026] [access_compat:error] [pid 3582961:tid 3582961] [client 64.180.68.231:51944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:55.407428 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.local/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDwAAACo"]
[Thu Jul 30 14:57:55.407570 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.local/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJDwAAACo"]
[Thu Jul 30 14:57:55.407718 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJDwAAACo"]
[Thu Jul 30 14:57:55.426657 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/local/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJEAAAACo"]
[Thu Jul 30 14:57:55.426819 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/local/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJEAAAACo"]
[Thu Jul 30 14:57:55.426966 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJEAAAACo"]
[Thu Jul 30 14:57:55.445086 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/qa/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJEQAAACo"]
[Thu Jul 30 14:57:55.445236 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/qa/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJEQAAACo"]
[Thu Jul 30 14:57:55.445376 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJEQAAACo"]
[Thu Jul 30 14:57:55.463434 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uat/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/uat/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJEgAAACo"]
[Thu Jul 30 14:57:55.463607 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/uat/.env"] [unique_id "amtYY-8ppXJG7kyPz4fJEgAAACo"]
[Thu Jul 30 14:57:55.463756 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJEgAAACo"]
[Thu Jul 30 14:57:55.481861 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.production.php"] [unique_id "amtYY-8ppXJG7kyPz4fJEwAAACo"]
[Thu Jul 30 14:57:55.482009 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.production.php"] [unique_id "amtYY-8ppXJG7kyPz4fJEwAAACo"]
[Thu Jul 30 14:57:55.482176 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJEwAAACo"]
[Thu Jul 30 14:57:55.501225 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.development.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFAAAACo"]
[Thu Jul 30 14:57:55.501397 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.development.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFAAAACo"]
[Thu Jul 30 14:57:55.501561 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJFAAAACo"]
[Thu Jul 30 14:57:55.520421 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.staging.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFQAAACo"]
[Thu Jul 30 14:57:55.520591 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.staging.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFQAAACo"]
[Thu Jul 30 14:57:55.520752 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJFQAAACo"]
[Thu Jul 30 14:57:55.539201 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.testing.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFgAAACo"]
[Thu Jul 30 14:57:55.539379 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.testing.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFgAAACo"]
[Thu Jul 30 14:57:55.539544 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJFgAAACo"]
[Thu Jul 30 14:57:55.557807 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ci.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.ci.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFwAAACo"]
[Thu Jul 30 14:57:55.557979 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.ci.php"] [unique_id "amtYY-8ppXJG7kyPz4fJFwAAACo"]
[Thu Jul 30 14:57:55.558142 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYY-8ppXJG7kyPz4fJFwAAACo"]
[Thu Jul 30 14:57:55.637024 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.721384 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.803357 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.907186 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:55.982033 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.057883 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.132380 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.171854 2026] [ssl:error] [pid 3583054:tid 3583054] (70014)End of file found: [client 216.73.216.199:49520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:56.211423 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.291433 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.376886 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.396978 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/env.backup"] [unique_id "amtYZO8ppXJG7kyPz4fJLAAAACo"]
[Thu Jul 30 14:57:56.397333 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/env.backup"] [unique_id "amtYZO8ppXJG7kyPz4fJLAAAACo"]
[Thu Jul 30 14:57:56.397518 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZO8ppXJG7kyPz4fJLAAAACo"]
[Thu Jul 30 14:57:56.434388 2026] [security2:error] [pid 3577559:tid 3577559] [client 114.119.142.20:61425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574467200/cat_ids~17,15/request_format~html"] [unique_id "amtYZEXaF6pd5LFWQBbQEAAAABg"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1574467200/cat_ids%7E17/request_format%7Ehtml
[Thu Jul 30 14:57:56.471079 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.551765 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.638029 2026] [security2:error] [pid 3551093:tid 3551093] [client 185.191.171.2:29594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/arundel-boat-trips"] [unique_id "amtYZDk5zhJ5dNGe5f74oQAAAA4"]
[Thu Jul 30 14:57:56.638457 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.715012 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.791041 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.865554 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:56.936440 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.020812 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.043049 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV"] [unique_id "amtYZe8ppXJG7kyPz4fJPQAAACo"]
[Thu Jul 30 14:57:57.043222 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV"] [unique_id "amtYZe8ppXJG7kyPz4fJPQAAACo"]
[Thu Jul 30 14:57:57.043374 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJPQAAACo"]
[Thu Jul 30 14:57:57.062347 2026] [authz_core:error] [pid 3569518:tid 3569518] [client 51.120.70.186:19300] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:57:57.068479 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.local"] [unique_id "amtYZe8ppXJG7kyPz4fJPgAAACo"]
[Thu Jul 30 14:57:57.068628 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.local"] [unique_id "amtYZe8ppXJG7kyPz4fJPgAAACo"]
[Thu Jul 30 14:57:57.068782 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJPgAAACo"]
[Thu Jul 30 14:57:57.086945 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.backup"] [unique_id "amtYZe8ppXJG7kyPz4fJPwAAACo"]
[Thu Jul 30 14:57:57.087177 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.backup"] [unique_id "amtYZe8ppXJG7kyPz4fJPwAAACo"]
[Thu Jul 30 14:57:57.087327 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJPwAAACo"]
[Thu Jul 30 14:57:57.105358 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.old"] [unique_id "amtYZe8ppXJG7kyPz4fJQAAAACo"]
[Thu Jul 30 14:57:57.105521 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.old"] [unique_id "amtYZe8ppXJG7kyPz4fJQAAAACo"]
[Thu Jul 30 14:57:57.105661 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJQAAAACo"]
[Thu Jul 30 14:57:57.123720 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.dev"] [unique_id "amtYZe8ppXJG7kyPz4fJQQAAACo"]
[Thu Jul 30 14:57:57.123904 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.dev"] [unique_id "amtYZe8ppXJG7kyPz4fJQQAAACo"]
[Thu Jul 30 14:57:57.124049 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJQQAAACo"]
[Thu Jul 30 14:57:57.142178 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.prod"] [unique_id "amtYZe8ppXJG7kyPz4fJQgAAACo"]
[Thu Jul 30 14:57:57.142329 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.prod"] [unique_id "amtYZe8ppXJG7kyPz4fJQgAAACo"]
[Thu Jul 30 14:57:57.142489 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJQgAAACo"]
[Thu Jul 30 14:57:57.161531 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.staging"] [unique_id "amtYZe8ppXJG7kyPz4fJQwAAACo"]
[Thu Jul 30 14:57:57.161718 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.staging"] [unique_id "amtYZe8ppXJG7kyPz4fJQwAAACo"]
[Thu Jul 30 14:57:57.161874 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJQwAAACo"]
[Thu Jul 30 14:57:57.180493 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.test"] [unique_id "amtYZe8ppXJG7kyPz4fJRAAAACo"]
[Thu Jul 30 14:57:57.180670 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.test"] [unique_id "amtYZe8ppXJG7kyPz4fJRAAAACo"]
[Thu Jul 30 14:57:57.180826 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJRAAAACo"]
[Thu Jul 30 14:57:57.199922 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.example"] [unique_id "amtYZe8ppXJG7kyPz4fJRQAAACo"]
[Thu Jul 30 14:57:57.200116 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.ENV.example"] [unique_id "amtYZe8ppXJG7kyPz4fJRQAAACo"]
[Thu Jul 30 14:57:57.200267 2026] [security2:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZe8ppXJG7kyPz4fJRQAAACo"]
[Thu Jul 30 14:57:57.277104 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.352526 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.444601 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.520700 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.605100 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.699681 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.805631 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.893855 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:57.971725 2026] [cgi:error] [pid 3568093:tid 3568093] [client 185.177.72.70:47728] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.063654 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.136990 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.165259 2026] [security2:error] [pid 3569518:tid 3569518] [client 114.119.142.20:61433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574467200/cat_ids~17,15/request_format~html"] [unique_id "amtYZvRWFIxZVjYooS-JOgAAADc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1574467200/cat_ids%7E17/request_format%7Ehtml
[Thu Jul 30 14:57:58.218213 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.302931 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.310960 2026] [ssl:error] [pid 3577559:tid 3577559] (EAI 2)Name or service not known: [client 144.76.19.72:29914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:58.310988 2026] [ssl:error] [pid 3577559:tid 3577559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:58.367566 2026] [ssl:error] [pid 3565723:tid 3565723] (EAI 2)Name or service not known: [client 144.76.19.72:29926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:57:58.367604 2026] [ssl:error] [pid 3565723:tid 3565723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:57:58.380654 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.452940 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.536154 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.620000 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.660296 2026] [authz_core:error] [pid 3570686:tid 3570686] [client 146.70.194.246:58960] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/PHPMailer/error_log
[Thu Jul 30 14:57:58.704265 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.778671 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.864722 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:58.941292 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.014176 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.092625 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.167212 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.240222 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.313399 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.394678 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.439140 2026] [authz_core:error] [pid 3583052:tid 3583052] [client 146.70.194.246:59610] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 14:57:59.470867 2026] [authz_core:error] [pid 3583052:tid 3583052] [client 146.70.194.246:59610] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 14:57:59.472945 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.544472 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.629951 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.702625 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.776404 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.792855 2026] [access_compat:error] [pid 3579760:tid 3579760] [client 64.180.68.231:52163] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:57:59.796453 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/windows/win.ini"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVAAAAAg"]
[Thu Jul 30 14:57:59.796806 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/windows/win.ini"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVAAAAAg"]
[Thu Jul 30 14:57:59.796965 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVAAAAAg"]
[Thu Jul 30 14:57:59.814256 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/windows/system.ini"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVQAAAAg"]
[Thu Jul 30 14:57:59.814607 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/windows/system.ini"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVQAAAAg"]
[Thu Jul 30 14:57:59.814788 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVQAAAAg"]
[Thu Jul 30 14:57:59.832335 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/boot.ini"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVgAAAAg"]
[Thu Jul 30 14:57:59.832684 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/boot.ini"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVgAAAAg"]
[Thu Jul 30 14:57:59.832836 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYZ0Do4ZKY_a4ZKnJJVgAAAAg"]
[Thu Jul 30 14:57:59.910421 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:57:59.983111 2026] [ssl:error] [pid 3575639:tid 3575639] (70014)End of file found: [client 216.73.216.199:44666] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:57:59.983254 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:00.003479 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/resolv.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJWwAAAAg"]
[Thu Jul 30 14:58:00.003846 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/resolv.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJWwAAAAg"]
[Thu Jul 30 14:58:00.004000 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJWwAAAAg"]
[Thu Jul 30 14:58:00.076945 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:00.161211 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:00.243426 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:00.321646 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:00.342091 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/nginx/nginx.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJZAAAAAg"]
[Thu Jul 30 14:58:00.342465 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/nginx/nginx.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJZAAAAAg"]
[Thu Jul 30 14:58:00.342625 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJZAAAAAg"]
[Thu Jul 30 14:58:00.360467 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/nginx/conf.d/default.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJZQAAAAg"]
[Thu Jul 30 14:58:00.360774 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/nginx/conf.d/default.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJZQAAAAg"]
[Thu Jul 30 14:58:00.360917 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJZQAAAAg"]
[Thu Jul 30 14:58:00.433340 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:00.506838 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:00.532463 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/apache2.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJagAAAAg"]
[Thu Jul 30 14:58:00.532799 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/apache2.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJagAAAAg"]
[Thu Jul 30 14:58:00.532954 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJagAAAAg"]
[Thu Jul 30 14:58:00.551473 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/sites-available/laravel.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJawAAAAg"]
[Thu Jul 30 14:58:00.551774 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/sites-available/laravel.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJawAAAAg"]
[Thu Jul 30 14:58:00.551935 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJawAAAAg"]
[Thu Jul 30 14:58:00.570044 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/sites-enabled/laravel.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbAAAAAg"]
[Thu Jul 30 14:58:00.570357 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/apache2/sites-enabled/laravel.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbAAAAAg"]
[Thu Jul 30 14:58:00.570513 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbAAAAAg"]
[Thu Jul 30 14:58:00.588497 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/usr/local/etc/nginx/nginx.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbQAAAAg"]
[Thu Jul 30 14:58:00.588810 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/usr/local/etc/nginx/nginx.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbQAAAAg"]
[Thu Jul 30 14:58:00.588949 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbQAAAAg"]
[Thu Jul 30 14:58:00.603772 2026] [ssl:error] [pid 3574305:tid 3574305] (70014)End of file found: [client 216.73.216.199:10650] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:00.606186 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/usr/local/etc/php/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbgAAAAg"]
[Thu Jul 30 14:58:00.606478 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/usr/local/etc/php/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbgAAAAg"]
[Thu Jul 30 14:58:00.606617 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbgAAAAg"]
[Thu Jul 30 14:58:00.624058 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/usr/local/etc/php/conf.d/laravel.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbwAAAAg"]
[Thu Jul 30 14:58:00.624377 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/usr/local/etc/php/conf.d/laravel.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbwAAAAg"]
[Thu Jul 30 14:58:00.624530 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJbwAAAAg"]
[Thu Jul 30 14:58:00.642975 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.0/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcAAAAAg"]
[Thu Jul 30 14:58:00.643295 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.0/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcAAAAAg"]
[Thu Jul 30 14:58:00.643447 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcAAAAAg"]
[Thu Jul 30 14:58:00.662264 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.1/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcQAAAAg"]
[Thu Jul 30 14:58:00.662605 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.1/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcQAAAAg"]
[Thu Jul 30 14:58:00.662753 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcQAAAAg"]
[Thu Jul 30 14:58:00.680691 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.2/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcgAAAAg"]
[Thu Jul 30 14:58:00.680988 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.2/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcgAAAAg"]
[Thu Jul 30 14:58:00.681152 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcgAAAAg"]
[Thu Jul 30 14:58:00.698774 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.3/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcwAAAAg"]
[Thu Jul 30 14:58:00.699088 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.3/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcwAAAAg"]
[Thu Jul 30 14:58:00.699230 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJcwAAAAg"]
[Thu Jul 30 14:58:00.716528 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.4/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdAAAAAg"]
[Thu Jul 30 14:58:00.716914 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/8.4/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdAAAAAg"]
[Thu Jul 30 14:58:00.717086 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdAAAAAg"]
[Thu Jul 30 14:58:00.734957 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/7.4/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdQAAAAg"]
[Thu Jul 30 14:58:00.735321 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/7.4/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdQAAAAg"]
[Thu Jul 30 14:58:00.735493 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdQAAAAg"]
[Thu Jul 30 14:58:00.753632 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/7.3/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdgAAAAg"]
[Thu Jul 30 14:58:00.753989 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/7.3/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdgAAAAg"]
[Thu Jul 30 14:58:00.754153 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdgAAAAg"]
[Thu Jul 30 14:58:00.772312 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/7.2/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdwAAAAg"]
[Thu Jul 30 14:58:00.772662 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/7.2/fpm/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdwAAAAg"]
[Thu Jul 30 14:58:00.772810 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJdwAAAAg"]
[Thu Jul 30 14:58:00.790109 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJeAAAAAg"]
[Thu Jul 30 14:58:00.790467 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/etc/php/php.ini"] [unique_id "amtYaEDo4ZKY_a4ZKnJJeAAAAAg"]
[Thu Jul 30 14:58:00.790614 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJeAAAAAg"]
[Thu Jul 30 14:58:00.808913 2026] [authz_core:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01630: client denied by server configuration: /home/swingadd/public_html/php.ini
[Thu Jul 30 14:58:00.827632 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/php-fpm.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJegAAAAg"]
[Thu Jul 30 14:58:00.827943 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/php-fpm.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJegAAAAg"]
[Thu Jul 30 14:58:00.828102 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJegAAAAg"]
[Thu Jul 30 14:58:00.845299 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/php-fpm.d/www.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJewAAAAg"]
[Thu Jul 30 14:58:00.845676 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/php-fpm.d/www.conf"] [unique_id "amtYaEDo4ZKY_a4ZKnJJewAAAAg"]
[Thu Jul 30 14:58:00.845851 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJewAAAAg"]
[Thu Jul 30 14:58:00.864183 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cache"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cache"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfAAAAAg"]
[Thu Jul 30 14:58:00.864375 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cache"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfAAAAAg"]
[Thu Jul 30 14:58:00.864548 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfAAAAAg"]
[Thu Jul 30 14:58:00.882507 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.encrypted"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.encrypted"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfQAAAAg"]
[Thu Jul 30 14:58:00.882666 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.encrypted"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfQAAAAg"]
[Thu Jul 30 14:58:00.882846 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfQAAAAg"]
[Thu Jul 30 14:58:00.900555 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.key"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfgAAAAg"]
[Thu Jul 30 14:58:00.900741 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.key"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfgAAAAg"]
[Thu Jul 30 14:58:00.900893 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfgAAAAg"]
[Thu Jul 30 14:58:00.919202 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.secret"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfwAAAAg"]
[Thu Jul 30 14:58:00.919377 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.secret"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfwAAAAg"]
[Thu Jul 30 14:58:00.919535 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaEDo4ZKY_a4ZKnJJfwAAAAg"]
[Thu Jul 30 14:58:00.992319 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.079020 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.163225 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.174596 2026] [core:error] [pid 3562585:tid 3562585] [client 66.249.66.199:36086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:58:01.174619 2026] [core:error] [pid 3562585:tid 3562585] [client 66.249.66.199:36086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 14:58:01.184129 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/laravel.config"] [unique_id "amtYaUDo4ZKY_a4ZKnJJhgAAAAg"]
[Thu Jul 30 14:58:01.184491 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/laravel.config"] [unique_id "amtYaUDo4ZKY_a4ZKnJJhgAAAAg"]
[Thu Jul 30 14:58:01.184663 2026] [security2:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaUDo4ZKY_a4ZKnJJhgAAAAg"]
[Thu Jul 30 14:58:01.260832 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.350164 2026] [cgi:error] [pid 3582961:tid 3582961] [client 185.177.72.70:47740] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.424452 2026] [ssl:error] [pid 3562585:tid 3562585] (EAI 2)Name or service not known: [client 144.76.19.72:38526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:01.424477 2026] [ssl:error] [pid 3562585:tid 3562585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:01.478612 2026] [ssl:error] [pid 3583021:tid 3583021] (EAI 2)Name or service not known: [client 144.76.19.72:38530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:01.479426 2026] [ssl:error] [pid 3583021:tid 3583021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:01.500234 2026] [cgi:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.583535 2026] [cgi:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.605098 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/app.config"] [unique_id "amtYaQLKxjb_P5AOc3VYqQAAADs"]
[Thu Jul 30 14:58:01.605565 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app.config"] [unique_id "amtYaQLKxjb_P5AOc3VYqQAAADs"]
[Thu Jul 30 14:58:01.605786 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaQLKxjb_P5AOc3VYqQAAADs"]
[Thu Jul 30 14:58:01.714376 2026] [cgi:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.804019 2026] [cgi:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.884856 2026] [cgi:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:01.905645 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.app"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.app"] [unique_id "amtYaQLKxjb_P5AOc3VYsAAAADs"]
[Thu Jul 30 14:58:01.905826 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.app"] [unique_id "amtYaQLKxjb_P5AOc3VYsAAAADs"]
[Thu Jul 30 14:58:01.906006 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaQLKxjb_P5AOc3VYsAAAADs"]
[Thu Jul 30 14:58:01.923899 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.base"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.base"] [unique_id "amtYaQLKxjb_P5AOc3VYsQAAADs"]
[Thu Jul 30 14:58:01.924088 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.base"] [unique_id "amtYaQLKxjb_P5AOc3VYsQAAADs"]
[Thu Jul 30 14:58:01.924253 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaQLKxjb_P5AOc3VYsQAAADs"]
[Thu Jul 30 14:58:01.943765 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.common"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.common"] [unique_id "amtYaQLKxjb_P5AOc3VYsgAAADs"]
[Thu Jul 30 14:58:01.943938 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.common"] [unique_id "amtYaQLKxjb_P5AOc3VYsgAAADs"]
[Thu Jul 30 14:58:01.944124 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaQLKxjb_P5AOc3VYsgAAADs"]
[Thu Jul 30 14:58:01.962156 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.shared"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.shared"] [unique_id "amtYaQLKxjb_P5AOc3VYswAAADs"]
[Thu Jul 30 14:58:01.962338 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.shared"] [unique_id "amtYaQLKxjb_P5AOc3VYswAAADs"]
[Thu Jul 30 14:58:01.962509 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaQLKxjb_P5AOc3VYswAAADs"]
[Thu Jul 30 14:58:01.980405 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.global"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.global"] [unique_id "amtYaQLKxjb_P5AOc3VYtAAAADs"]
[Thu Jul 30 14:58:01.980610 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.global"] [unique_id "amtYaQLKxjb_P5AOc3VYtAAAADs"]
[Thu Jul 30 14:58:01.980782 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaQLKxjb_P5AOc3VYtAAAADs"]
[Thu Jul 30 14:58:01.999042 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.master"] [unique_id "amtYaQLKxjb_P5AOc3VYtQAAADs"]
[Thu Jul 30 14:58:01.999233 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.master"] [unique_id "amtYaQLKxjb_P5AOc3VYtQAAADs"]
[Thu Jul 30 14:58:01.999392 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYaQLKxjb_P5AOc3VYtQAAADs"]
[Thu Jul 30 14:58:02.017295 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.main"] [unique_id "amtYagLKxjb_P5AOc3VYtgAAADs"]
[Thu Jul 30 14:58:02.017493 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.main"] [unique_id "amtYagLKxjb_P5AOc3VYtgAAADs"]
[Thu Jul 30 14:58:02.017737 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYtgAAADs"]
[Thu Jul 30 14:58:02.036156 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.release"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.release"] [unique_id "amtYagLKxjb_P5AOc3VYtwAAADs"]
[Thu Jul 30 14:58:02.036322 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.release"] [unique_id "amtYagLKxjb_P5AOc3VYtwAAADs"]
[Thu Jul 30 14:58:02.036484 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYtwAAADs"]
[Thu Jul 30 14:58:02.054691 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.current"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.current"] [unique_id "amtYagLKxjb_P5AOc3VYuAAAADs"]
[Thu Jul 30 14:58:02.054855 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.current"] [unique_id "amtYagLKxjb_P5AOc3VYuAAAADs"]
[Thu Jul 30 14:58:02.055006 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYuAAAADs"]
[Thu Jul 30 14:58:02.073472 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.deploy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.deploy"] [unique_id "amtYagLKxjb_P5AOc3VYuQAAADs"]
[Thu Jul 30 14:58:02.073645 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.deploy"] [unique_id "amtYagLKxjb_P5AOc3VYuQAAADs"]
[Thu Jul 30 14:58:02.073802 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYuQAAADs"]
[Thu Jul 30 14:58:02.092975 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.deployment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.deployment"] [unique_id "amtYagLKxjb_P5AOc3VYugAAADs"]
[Thu Jul 30 14:58:02.093158 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.deployment"] [unique_id "amtYagLKxjb_P5AOc3VYugAAADs"]
[Thu Jul 30 14:58:02.093306 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYugAAADs"]
[Thu Jul 30 14:58:02.111926 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.server"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.server"] [unique_id "amtYagLKxjb_P5AOc3VYuwAAADs"]
[Thu Jul 30 14:58:02.112109 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.server"] [unique_id "amtYagLKxjb_P5AOc3VYuwAAADs"]
[Thu Jul 30 14:58:02.112262 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYuwAAADs"]
[Thu Jul 30 14:58:02.130110 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cloud"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cloud"] [unique_id "amtYagLKxjb_P5AOc3VYvAAAADs"]
[Thu Jul 30 14:58:02.130284 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cloud"] [unique_id "amtYagLKxjb_P5AOc3VYvAAAADs"]
[Thu Jul 30 14:58:02.130443 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYvAAAADs"]
[Thu Jul 30 14:58:02.150760 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.aws"] [unique_id "amtYagLKxjb_P5AOc3VYvQAAADs"]
[Thu Jul 30 14:58:02.150960 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.aws"] [unique_id "amtYagLKxjb_P5AOc3VYvQAAADs"]
[Thu Jul 30 14:58:02.151144 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYvQAAADs"]
[Thu Jul 30 14:58:02.169206 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.gcp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.gcp"] [unique_id "amtYagLKxjb_P5AOc3VYvgAAADs"]
[Thu Jul 30 14:58:02.169384 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.gcp"] [unique_id "amtYagLKxjb_P5AOc3VYvgAAADs"]
[Thu Jul 30 14:58:02.169555 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYvgAAADs"]
[Thu Jul 30 14:58:02.188991 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.azure"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.azure"] [unique_id "amtYagLKxjb_P5AOc3VYvwAAADs"]
[Thu Jul 30 14:58:02.189190 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.azure"] [unique_id "amtYagLKxjb_P5AOc3VYvwAAADs"]
[Thu Jul 30 14:58:02.189343 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYvwAAADs"]
[Thu Jul 30 14:58:02.207497 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.heroku"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.heroku"] [unique_id "amtYagLKxjb_P5AOc3VYwAAAADs"]
[Thu Jul 30 14:58:02.207670 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.heroku"] [unique_id "amtYagLKxjb_P5AOc3VYwAAAADs"]
[Thu Jul 30 14:58:02.207834 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYwAAAADs"]
[Thu Jul 30 14:58:02.217039 2026] [ssl:error] [pid 3571207:tid 3571207] (70014)End of file found: [client 216.73.216.199:35256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:02.225713 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.digitalocean"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.digitalocean"] [unique_id "amtYagLKxjb_P5AOc3VYwQAAADs"]
[Thu Jul 30 14:58:02.225895 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.digitalocean"] [unique_id "amtYagLKxjb_P5AOc3VYwQAAADs"]
[Thu Jul 30 14:58:02.226047 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYwQAAADs"]
[Thu Jul 30 14:58:02.244590 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.linode"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.linode"] [unique_id "amtYagLKxjb_P5AOc3VYwgAAADs"]
[Thu Jul 30 14:58:02.244766 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.linode"] [unique_id "amtYagLKxjb_P5AOc3VYwgAAADs"]
[Thu Jul 30 14:58:02.244919 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYwgAAADs"]
[Thu Jul 30 14:58:02.263148 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vultr"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.vultr"] [unique_id "amtYagLKxjb_P5AOc3VYwwAAADs"]
[Thu Jul 30 14:58:02.263332 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.vultr"] [unique_id "amtYagLKxjb_P5AOc3VYwwAAADs"]
[Thu Jul 30 14:58:02.263490 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYwwAAADs"]
[Thu Jul 30 14:58:02.283473 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vagrant"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.vagrant"] [unique_id "amtYagLKxjb_P5AOc3VYxAAAADs"]
[Thu Jul 30 14:58:02.283641 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.vagrant"] [unique_id "amtYagLKxjb_P5AOc3VYxAAAADs"]
[Thu Jul 30 14:58:02.283808 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYxAAAADs"]
[Thu Jul 30 14:58:02.302934 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.k8s"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.k8s"] [unique_id "amtYagLKxjb_P5AOc3VYxQAAADs"]
[Thu Jul 30 14:58:02.303125 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.k8s"] [unique_id "amtYagLKxjb_P5AOc3VYxQAAADs"]
[Thu Jul 30 14:58:02.303280 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYxQAAADs"]
[Thu Jul 30 14:58:02.321472 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.kubernetes"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.kubernetes"] [unique_id "amtYagLKxjb_P5AOc3VYxgAAADs"]
[Thu Jul 30 14:58:02.321644 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.kubernetes"] [unique_id "amtYagLKxjb_P5AOc3VYxgAAADs"]
[Thu Jul 30 14:58:02.321802 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYxgAAADs"]
[Thu Jul 30 14:58:02.340523 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.compose"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.compose"] [unique_id "amtYagLKxjb_P5AOc3VYxwAAADs"]
[Thu Jul 30 14:58:02.340693 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.compose"] [unique_id "amtYagLKxjb_P5AOc3VYxwAAADs"]
[Thu Jul 30 14:58:02.340849 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYxwAAADs"]
[Thu Jul 30 14:58:02.362926 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.override"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.override"] [unique_id "amtYagLKxjb_P5AOc3VYyAAAADs"]
[Thu Jul 30 14:58:02.363112 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.override"] [unique_id "amtYagLKxjb_P5AOc3VYyAAAADs"]
[Thu Jul 30 14:58:02.363269 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYyAAAADs"]
[Thu Jul 30 14:58:02.382966 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.secrets"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.secrets"] [unique_id "amtYagLKxjb_P5AOc3VYyQAAADs"]
[Thu Jul 30 14:58:02.383156 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.secrets"] [unique_id "amtYagLKxjb_P5AOc3VYyQAAADs"]
[Thu Jul 30 14:58:02.383324 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYyQAAADs"]
[Thu Jul 30 14:58:02.401146 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.private"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.private"] [unique_id "amtYagLKxjb_P5AOc3VYygAAADs"]
[Thu Jul 30 14:58:02.401319 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.private"] [unique_id "amtYagLKxjb_P5AOc3VYygAAADs"]
[Thu Jul 30 14:58:02.401484 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYygAAADs"]
[Thu Jul 30 14:58:02.419589 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.secure"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.secure"] [unique_id "amtYagLKxjb_P5AOc3VYywAAADs"]
[Thu Jul 30 14:58:02.419828 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.secure"] [unique_id "amtYagLKxjb_P5AOc3VYywAAADs"]
[Thu Jul 30 14:58:02.420056 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYywAAADs"]
[Thu Jul 30 14:58:02.438770 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.keys"] [unique_id "amtYagLKxjb_P5AOc3VYzAAAADs"]
[Thu Jul 30 14:58:02.438951 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.keys"] [unique_id "amtYagLKxjb_P5AOc3VYzAAAADs"]
[Thu Jul 30 14:58:02.439128 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYzAAAADs"]
[Thu Jul 30 14:58:02.459385 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.token"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.token"] [unique_id "amtYagLKxjb_P5AOc3VYzQAAADs"]
[Thu Jul 30 14:58:02.459685 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.token"] [unique_id "amtYagLKxjb_P5AOc3VYzQAAADs"]
[Thu Jul 30 14:58:02.459970 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYzQAAADs"]
[Thu Jul 30 14:58:02.479194 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tokens"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.tokens"] [unique_id "amtYagLKxjb_P5AOc3VYzgAAADs"]
[Thu Jul 30 14:58:02.479407 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.tokens"] [unique_id "amtYagLKxjb_P5AOc3VYzgAAADs"]
[Thu Jul 30 14:58:02.479685 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYzgAAADs"]
[Thu Jul 30 14:58:02.498251 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.auth"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.auth"] [unique_id "amtYagLKxjb_P5AOc3VYzwAAADs"]
[Thu Jul 30 14:58:02.498534 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.auth"] [unique_id "amtYagLKxjb_P5AOc3VYzwAAADs"]
[Thu Jul 30 14:58:02.498782 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VYzwAAADs"]
[Thu Jul 30 14:58:02.516858 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.credentials"] [unique_id "amtYagLKxjb_P5AOc3VY0AAAADs"]
[Thu Jul 30 14:58:02.517157 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.credentials"] [unique_id "amtYagLKxjb_P5AOc3VY0AAAADs"]
[Thu Jul 30 14:58:02.517401 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY0AAAADs"]
[Thu Jul 30 14:58:02.536323 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.database"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.database"] [unique_id "amtYagLKxjb_P5AOc3VY0QAAADs"]
[Thu Jul 30 14:58:02.536548 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.database"] [unique_id "amtYagLKxjb_P5AOc3VY0QAAADs"]
[Thu Jul 30 14:58:02.536729 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY0QAAADs"]
[Thu Jul 30 14:58:02.556253 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.db"] [unique_id "amtYagLKxjb_P5AOc3VY0gAAADs"]
[Thu Jul 30 14:58:02.556566 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.db"] [unique_id "amtYagLKxjb_P5AOc3VY0gAAADs"]
[Thu Jul 30 14:58:02.556846 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY0gAAADs"]
[Thu Jul 30 14:58:02.575980 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.redis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.redis"] [unique_id "amtYagLKxjb_P5AOc3VY0wAAADs"]
[Thu Jul 30 14:58:02.576180 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.redis"] [unique_id "amtYagLKxjb_P5AOc3VY0wAAADs"]
[Thu Jul 30 14:58:02.576338 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY0wAAADs"]
[Thu Jul 30 14:58:02.594795 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mail"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.mail"] [unique_id "amtYagLKxjb_P5AOc3VY1AAAADs"]
[Thu Jul 30 14:58:02.594974 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.mail"] [unique_id "amtYagLKxjb_P5AOc3VY1AAAADs"]
[Thu Jul 30 14:58:02.595151 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY1AAAADs"]
[Thu Jul 30 14:58:02.614247 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.queue"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.queue"] [unique_id "amtYagLKxjb_P5AOc3VY1QAAADs"]
[Thu Jul 30 14:58:02.614434 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.queue"] [unique_id "amtYagLKxjb_P5AOc3VY1QAAADs"]
[Thu Jul 30 14:58:02.614590 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY1QAAADs"]
[Thu Jul 30 14:58:02.632789 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.session"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.session"] [unique_id "amtYagLKxjb_P5AOc3VY1gAAADs"]
[Thu Jul 30 14:58:02.632966 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.session"] [unique_id "amtYagLKxjb_P5AOc3VY1gAAADs"]
[Thu Jul 30 14:58:02.633136 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY1gAAADs"]
[Thu Jul 30 14:58:02.651314 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.filesystem"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.filesystem"] [unique_id "amtYagLKxjb_P5AOc3VY1wAAADs"]
[Thu Jul 30 14:58:02.651508 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.filesystem"] [unique_id "amtYagLKxjb_P5AOc3VY1wAAADs"]
[Thu Jul 30 14:58:02.651662 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY1wAAADs"]
[Thu Jul 30 14:58:02.672187 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.storage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.storage"] [unique_id "amtYagLKxjb_P5AOc3VY2AAAADs"]
[Thu Jul 30 14:58:02.672377 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.storage"] [unique_id "amtYagLKxjb_P5AOc3VY2AAAADs"]
[Thu Jul 30 14:58:02.672542 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY2AAAADs"]
[Thu Jul 30 14:58:02.690602 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.broadcast"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.broadcast"] [unique_id "amtYagLKxjb_P5AOc3VY2QAAADs"]
[Thu Jul 30 14:58:02.690784 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.broadcast"] [unique_id "amtYagLKxjb_P5AOc3VY2QAAADs"]
[Thu Jul 30 14:58:02.690937 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY2QAAADs"]
[Thu Jul 30 14:58:02.710011 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.logging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.logging"] [unique_id "amtYagLKxjb_P5AOc3VY2gAAADs"]
[Thu Jul 30 14:58:02.710211 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.logging"] [unique_id "amtYagLKxjb_P5AOc3VY2gAAADs"]
[Thu Jul 30 14:58:02.710358 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY2gAAADs"]
[Thu Jul 30 14:58:02.728367 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.debug"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.debug"] [unique_id "amtYagLKxjb_P5AOc3VY2wAAADs"]
[Thu Jul 30 14:58:02.728527 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.debug"] [unique_id "amtYagLKxjb_P5AOc3VY2wAAADs"]
[Thu Jul 30 14:58:02.728667 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY2wAAADs"]
[Thu Jul 30 14:58:02.746865 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.trace"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.trace"] [unique_id "amtYagLKxjb_P5AOc3VY3AAAADs"]
[Thu Jul 30 14:58:02.747030 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.trace"] [unique_id "amtYagLKxjb_P5AOc3VY3AAAADs"]
[Thu Jul 30 14:58:02.747198 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY3AAAADs"]
[Thu Jul 30 14:58:02.765267 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.verbose"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.verbose"] [unique_id "amtYagLKxjb_P5AOc3VY3QAAADs"]
[Thu Jul 30 14:58:02.765439 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.verbose"] [unique_id "amtYagLKxjb_P5AOc3VY3QAAADs"]
[Thu Jul 30 14:58:02.765595 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY3QAAADs"]
[Thu Jul 30 14:58:02.784992 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stripe"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.stripe"] [unique_id "amtYagLKxjb_P5AOc3VY3gAAADs"]
[Thu Jul 30 14:58:02.785174 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.stripe"] [unique_id "amtYagLKxjb_P5AOc3VY3gAAADs"]
[Thu Jul 30 14:58:02.785321 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY3gAAADs"]
[Thu Jul 30 14:58:02.802963 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.paypal"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.paypal"] [unique_id "amtYagLKxjb_P5AOc3VY3wAAADs"]
[Thu Jul 30 14:58:02.803129 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.paypal"] [unique_id "amtYagLKxjb_P5AOc3VY3wAAADs"]
[Thu Jul 30 14:58:02.803268 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY3wAAADs"]
[Thu Jul 30 14:58:02.821877 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.twilio"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.twilio"] [unique_id "amtYagLKxjb_P5AOc3VY4AAAADs"]
[Thu Jul 30 14:58:02.822050 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.twilio"] [unique_id "amtYagLKxjb_P5AOc3VY4AAAADs"]
[Thu Jul 30 14:58:02.822210 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY4AAAADs"]
[Thu Jul 30 14:58:02.840103 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid"] [unique_id "amtYagLKxjb_P5AOc3VY4QAAADs"]
[Thu Jul 30 14:58:02.840320 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid"] [unique_id "amtYagLKxjb_P5AOc3VY4QAAADs"]
[Thu Jul 30 14:58:02.840488 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY4QAAADs"]
[Thu Jul 30 14:58:02.859377 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mailgun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.mailgun"] [unique_id "amtYagLKxjb_P5AOc3VY4gAAADs"]
[Thu Jul 30 14:58:02.859550 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.mailgun"] [unique_id "amtYagLKxjb_P5AOc3VY4gAAADs"]
[Thu Jul 30 14:58:02.859704 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY4gAAADs"]
[Thu Jul 30 14:58:02.878316 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ses"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.ses"] [unique_id "amtYagLKxjb_P5AOc3VY4wAAADs"]
[Thu Jul 30 14:58:02.878499 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.ses"] [unique_id "amtYagLKxjb_P5AOc3VY4wAAADs"]
[Thu Jul 30 14:58:02.878648 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY4wAAADs"]
[Thu Jul 30 14:58:02.896650 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sns"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sns"] [unique_id "amtYagLKxjb_P5AOc3VY5AAAADs"]
[Thu Jul 30 14:58:02.896807 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sns"] [unique_id "amtYagLKxjb_P5AOc3VY5AAAADs"]
[Thu Jul 30 14:58:02.896955 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY5AAAADs"]
[Thu Jul 30 14:58:02.914660 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sqs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqs"] [unique_id "amtYagLKxjb_P5AOc3VY5QAAADs"]
[Thu Jul 30 14:58:02.914810 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqs"] [unique_id "amtYagLKxjb_P5AOc3VY5QAAADs"]
[Thu Jul 30 14:58:02.914948 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY5QAAADs"]
[Thu Jul 30 14:58:02.933664 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.s3"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.s3"] [unique_id "amtYagLKxjb_P5AOc3VY5gAAADs"]
[Thu Jul 30 14:58:02.933809 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.s3"] [unique_id "amtYagLKxjb_P5AOc3VY5gAAADs"]
[Thu Jul 30 14:58:02.933959 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY5gAAADs"]
[Thu Jul 30 14:58:02.952454 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.firebase"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.firebase"] [unique_id "amtYagLKxjb_P5AOc3VY5wAAADs"]
[Thu Jul 30 14:58:02.952608 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.firebase"] [unique_id "amtYagLKxjb_P5AOc3VY5wAAADs"]
[Thu Jul 30 14:58:02.952745 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY5wAAADs"]
[Thu Jul 30 14:58:02.970520 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.google"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.google"] [unique_id "amtYagLKxjb_P5AOc3VY6AAAADs"]
[Thu Jul 30 14:58:02.970666 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.google"] [unique_id "amtYagLKxjb_P5AOc3VY6AAAADs"]
[Thu Jul 30 14:58:02.970809 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY6AAAADs"]
[Thu Jul 30 14:58:02.989617 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.facebook"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.facebook"] [unique_id "amtYagLKxjb_P5AOc3VY6QAAADs"]
[Thu Jul 30 14:58:02.989762 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.facebook"] [unique_id "amtYagLKxjb_P5AOc3VY6QAAADs"]
[Thu Jul 30 14:58:02.989899 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYagLKxjb_P5AOc3VY6QAAADs"]
[Thu Jul 30 14:58:03.008565 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.twitter"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.twitter"] [unique_id "amtYawLKxjb_P5AOc3VY6gAAADs"]
[Thu Jul 30 14:58:03.008702 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.twitter"] [unique_id "amtYawLKxjb_P5AOc3VY6gAAADs"]
[Thu Jul 30 14:58:03.008836 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY6gAAADs"]
[Thu Jul 30 14:58:03.027510 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.github"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.github"] [unique_id "amtYawLKxjb_P5AOc3VY6wAAADs"]
[Thu Jul 30 14:58:03.027645 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.github"] [unique_id "amtYawLKxjb_P5AOc3VY6wAAADs"]
[Thu Jul 30 14:58:03.027779 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY6wAAADs"]
[Thu Jul 30 14:58:03.046653 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.gitlab"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.gitlab"] [unique_id "amtYawLKxjb_P5AOc3VY7AAAADs"]
[Thu Jul 30 14:58:03.046870 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.gitlab"] [unique_id "amtYawLKxjb_P5AOc3VY7AAAADs"]
[Thu Jul 30 14:58:03.047000 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY7AAAADs"]
[Thu Jul 30 14:58:03.068797 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bitbucket"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.bitbucket"] [unique_id "amtYawLKxjb_P5AOc3VY7QAAADs"]
[Thu Jul 30 14:58:03.068939 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.bitbucket"] [unique_id "amtYawLKxjb_P5AOc3VY7QAAADs"]
[Thu Jul 30 14:58:03.069111 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY7QAAADs"]
[Thu Jul 30 14:58:03.088571 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.slack"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.slack"] [unique_id "amtYawLKxjb_P5AOc3VY7gAAADs"]
[Thu Jul 30 14:58:03.088707 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.slack"] [unique_id "amtYawLKxjb_P5AOc3VY7gAAADs"]
[Thu Jul 30 14:58:03.088840 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY7gAAADs"]
[Thu Jul 30 14:58:03.107918 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.pusher"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.pusher"] [unique_id "amtYawLKxjb_P5AOc3VY7wAAADs"]
[Thu Jul 30 14:58:03.108062 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.pusher"] [unique_id "amtYawLKxjb_P5AOc3VY7wAAADs"]
[Thu Jul 30 14:58:03.108216 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY7wAAADs"]
[Thu Jul 30 14:58:03.127351 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.echo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.echo"] [unique_id "amtYawLKxjb_P5AOc3VY8AAAADs"]
[Thu Jul 30 14:58:03.127510 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.echo"] [unique_id "amtYawLKxjb_P5AOc3VY8AAAADs"]
[Thu Jul 30 14:58:03.127650 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY8AAAADs"]
[Thu Jul 30 14:58:03.146677 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.telescope"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.telescope"] [unique_id "amtYawLKxjb_P5AOc3VY8QAAADs"]
[Thu Jul 30 14:58:03.146806 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.telescope"] [unique_id "amtYawLKxjb_P5AOc3VY8QAAADs"]
[Thu Jul 30 14:58:03.146937 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY8QAAADs"]
[Thu Jul 30 14:58:03.166831 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.horizon"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.horizon"] [unique_id "amtYawLKxjb_P5AOc3VY8gAAADs"]
[Thu Jul 30 14:58:03.166979 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.horizon"] [unique_id "amtYawLKxjb_P5AOc3VY8gAAADs"]
[Thu Jul 30 14:58:03.167137 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY8gAAADs"]
[Thu Jul 30 14:58:03.186709 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.octane"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.octane"] [unique_id "amtYawLKxjb_P5AOc3VY8wAAADs"]
[Thu Jul 30 14:58:03.186888 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.octane"] [unique_id "amtYawLKxjb_P5AOc3VY8wAAADs"]
[Thu Jul 30 14:58:03.187037 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY8wAAADs"]
[Thu Jul 30 14:58:03.206470 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sanctum"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sanctum"] [unique_id "amtYawLKxjb_P5AOc3VY9AAAADs"]
[Thu Jul 30 14:58:03.206641 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sanctum"] [unique_id "amtYawLKxjb_P5AOc3VY9AAAADs"]
[Thu Jul 30 14:58:03.206793 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY9AAAADs"]
[Thu Jul 30 14:58:03.224899 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.passport"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.passport"] [unique_id "amtYawLKxjb_P5AOc3VY9QAAADs"]
[Thu Jul 30 14:58:03.225089 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.passport"] [unique_id "amtYawLKxjb_P5AOc3VY9QAAADs"]
[Thu Jul 30 14:58:03.225233 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY9QAAADs"]
[Thu Jul 30 14:58:03.243420 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.jwt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.jwt"] [unique_id "amtYawLKxjb_P5AOc3VY9gAAADs"]
[Thu Jul 30 14:58:03.243573 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.jwt"] [unique_id "amtYawLKxjb_P5AOc3VY9gAAADs"]
[Thu Jul 30 14:58:03.243707 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY9gAAADs"]
[Thu Jul 30 14:58:03.262989 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.oauth"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.oauth"] [unique_id "amtYawLKxjb_P5AOc3VY9wAAADs"]
[Thu Jul 30 14:58:03.263142 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.oauth"] [unique_id "amtYawLKxjb_P5AOc3VY9wAAADs"]
[Thu Jul 30 14:58:03.263279 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY9wAAADs"]
[Thu Jul 30 14:58:03.281954 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.socialite"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.socialite"] [unique_id "amtYawLKxjb_P5AOc3VY-AAAADs"]
[Thu Jul 30 14:58:03.282111 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.socialite"] [unique_id "amtYawLKxjb_P5AOc3VY-AAAADs"]
[Thu Jul 30 14:58:03.282252 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY-AAAADs"]
[Thu Jul 30 14:58:03.301390 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.nova"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.nova"] [unique_id "amtYawLKxjb_P5AOc3VY-QAAADs"]
[Thu Jul 30 14:58:03.301557 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.nova"] [unique_id "amtYawLKxjb_P5AOc3VY-QAAADs"]
[Thu Jul 30 14:58:03.301697 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY-QAAADs"]
[Thu Jul 30 14:58:03.319851 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.spark"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.spark"] [unique_id "amtYawLKxjb_P5AOc3VY-gAAADs"]
[Thu Jul 30 14:58:03.319996 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.spark"] [unique_id "amtYawLKxjb_P5AOc3VY-gAAADs"]
[Thu Jul 30 14:58:03.320147 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY-gAAADs"]
[Thu Jul 30 14:58:03.338718 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cashier"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cashier"] [unique_id "amtYawLKxjb_P5AOc3VY-wAAADs"]
[Thu Jul 30 14:58:03.338877 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cashier"] [unique_id "amtYawLKxjb_P5AOc3VY-wAAADs"]
[Thu Jul 30 14:58:03.339017 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY-wAAADs"]
[Thu Jul 30 14:58:03.357361 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.scout"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.scout"] [unique_id "amtYawLKxjb_P5AOc3VY_AAAADs"]
[Thu Jul 30 14:58:03.357523 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.scout"] [unique_id "amtYawLKxjb_P5AOc3VY_AAAADs"]
[Thu Jul 30 14:58:03.357667 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY_AAAADs"]
[Thu Jul 30 14:58:03.376165 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dusk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.dusk"] [unique_id "amtYawLKxjb_P5AOc3VY_QAAADs"]
[Thu Jul 30 14:58:03.376315 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.dusk"] [unique_id "amtYawLKxjb_P5AOc3VY_QAAADs"]
[Thu Jul 30 14:58:03.376472 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY_QAAADs"]
[Thu Jul 30 14:58:03.397904 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.media"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.media"] [unique_id "amtYawLKxjb_P5AOc3VY_gAAADs"]
[Thu Jul 30 14:58:03.398056 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.media"] [unique_id "amtYawLKxjb_P5AOc3VY_gAAADs"]
[Thu Jul 30 14:58:03.398218 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY_gAAADs"]
[Thu Jul 30 14:58:03.418044 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.image"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.image"] [unique_id "amtYawLKxjb_P5AOc3VY_wAAADs"]
[Thu Jul 30 14:58:03.418212 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.image"] [unique_id "amtYawLKxjb_P5AOc3VY_wAAADs"]
[Thu Jul 30 14:58:03.418366 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VY_wAAADs"]
[Thu Jul 30 14:58:03.437263 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.video"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.video"] [unique_id "amtYawLKxjb_P5AOc3VZAAAAADs"]
[Thu Jul 30 14:58:03.437409 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.video"] [unique_id "amtYawLKxjb_P5AOc3VZAAAAADs"]
[Thu Jul 30 14:58:03.437560 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZAAAAADs"]
[Thu Jul 30 14:58:03.458645 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.audio"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.audio"] [unique_id "amtYawLKxjb_P5AOc3VZAQAAADs"]
[Thu Jul 30 14:58:03.458799 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.audio"] [unique_id "amtYawLKxjb_P5AOc3VZAQAAADs"]
[Thu Jul 30 14:58:03.458953 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZAQAAADs"]
[Thu Jul 30 14:58:03.477659 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.api"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.api"] [unique_id "amtYawLKxjb_P5AOc3VZAgAAADs"]
[Thu Jul 30 14:58:03.477819 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.api"] [unique_id "amtYawLKxjb_P5AOc3VZAgAAADs"]
[Thu Jul 30 14:58:03.477964 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZAgAAADs"]
[Thu Jul 30 14:58:03.497939 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.admin"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.admin"] [unique_id "amtYawLKxjb_P5AOc3VZAwAAADs"]
[Thu Jul 30 14:58:03.498117 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.admin"] [unique_id "amtYawLKxjb_P5AOc3VZAwAAADs"]
[Thu Jul 30 14:58:03.498265 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZAwAAADs"]
[Thu Jul 30 14:58:03.516165 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cms"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cms"] [unique_id "amtYawLKxjb_P5AOc3VZBAAAADs"]
[Thu Jul 30 14:58:03.517015 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cms"] [unique_id "amtYawLKxjb_P5AOc3VZBAAAADs"]
[Thu Jul 30 14:58:03.517191 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZBAAAADs"]
[Thu Jul 30 14:58:03.535775 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.blog"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.blog"] [unique_id "amtYawLKxjb_P5AOc3VZBQAAADs"]
[Thu Jul 30 14:58:03.535937 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.blog"] [unique_id "amtYawLKxjb_P5AOc3VZBQAAADs"]
[Thu Jul 30 14:58:03.536176 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZBQAAADs"]
[Thu Jul 30 14:58:03.556540 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.shop"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.shop"] [unique_id "amtYawLKxjb_P5AOc3VZBgAAADs"]
[Thu Jul 30 14:58:03.556700 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.shop"] [unique_id "amtYawLKxjb_P5AOc3VZBgAAADs"]
[Thu Jul 30 14:58:03.556842 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZBgAAADs"]
[Thu Jul 30 14:58:03.576497 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.store"] [unique_id "amtYawLKxjb_P5AOc3VZBwAAADs"]
[Thu Jul 30 14:58:03.576636 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.store"] [unique_id "amtYawLKxjb_P5AOc3VZBwAAADs"]
[Thu Jul 30 14:58:03.576778 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZBwAAADs"]
[Thu Jul 30 14:58:03.595157 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.payment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.payment"] [unique_id "amtYawLKxjb_P5AOc3VZCAAAADs"]
[Thu Jul 30 14:58:03.595308 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.payment"] [unique_id "amtYawLKxjb_P5AOc3VZCAAAADs"]
[Thu Jul 30 14:58:03.595455 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZCAAAADs"]
[Thu Jul 30 14:58:03.614809 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.invoice"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.invoice"] [unique_id "amtYawLKxjb_P5AOc3VZCQAAADs"]
[Thu Jul 30 14:58:03.614947 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.invoice"] [unique_id "amtYawLKxjb_P5AOc3VZCQAAADs"]
[Thu Jul 30 14:58:03.615098 2026] [security2:error] [pid 3571944:tid 3571944] [client 185.177.72.70:48384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYawLKxjb_P5AOc3VZCQAAADs"]
[Thu Jul 30 14:58:03.653532 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.crm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.crm"] [unique_id "amtYazkGaXFPa4gAXYAkVAAAAAM"]
[Thu Jul 30 14:58:03.653689 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.crm"] [unique_id "amtYazkGaXFPa4gAXYAkVAAAAAM"]
[Thu Jul 30 14:58:03.653852 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkVAAAAAM"]
[Thu Jul 30 14:58:03.673791 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.erp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.erp"] [unique_id "amtYazkGaXFPa4gAXYAkVQAAAAM"]
[Thu Jul 30 14:58:03.673949 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.erp"] [unique_id "amtYazkGaXFPa4gAXYAkVQAAAAM"]
[Thu Jul 30 14:58:03.674150 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkVQAAAAM"]
[Thu Jul 30 14:58:03.693442 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.analytics"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.analytics"] [unique_id "amtYazkGaXFPa4gAXYAkVgAAAAM"]
[Thu Jul 30 14:58:03.693608 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.analytics"] [unique_id "amtYazkGaXFPa4gAXYAkVgAAAAM"]
[Thu Jul 30 14:58:03.693750 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkVgAAAAM"]
[Thu Jul 30 14:58:03.714543 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.tracking"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.tracking"] [unique_id "amtYazkGaXFPa4gAXYAkVwAAAAM"]
[Thu Jul 30 14:58:03.714720 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.tracking"] [unique_id "amtYazkGaXFPa4gAXYAkVwAAAAM"]
[Thu Jul 30 14:58:03.714869 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkVwAAAAM"]
[Thu Jul 30 14:58:03.735468 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sentry"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sentry"] [unique_id "amtYazkGaXFPa4gAXYAkWAAAAAM"]
[Thu Jul 30 14:58:03.735626 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sentry"] [unique_id "amtYazkGaXFPa4gAXYAkWAAAAAM"]
[Thu Jul 30 14:58:03.735769 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkWAAAAAM"]
[Thu Jul 30 14:58:03.755508 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bugsnag"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.bugsnag"] [unique_id "amtYazkGaXFPa4gAXYAkWQAAAAM"]
[Thu Jul 30 14:58:03.755678 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.bugsnag"] [unique_id "amtYazkGaXFPa4gAXYAkWQAAAAM"]
[Thu Jul 30 14:58:03.755826 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkWQAAAAM"]
[Thu Jul 30 14:58:03.775662 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.rollbar"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.rollbar"] [unique_id "amtYazkGaXFPa4gAXYAkWgAAAAM"]
[Thu Jul 30 14:58:03.775848 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.rollbar"] [unique_id "amtYazkGaXFPa4gAXYAkWgAAAAM"]
[Thu Jul 30 14:58:03.776002 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkWgAAAAM"]
[Thu Jul 30 14:58:03.796118 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.datadog"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.datadog"] [unique_id "amtYazkGaXFPa4gAXYAkWwAAAAM"]
[Thu Jul 30 14:58:03.796266 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.datadog"] [unique_id "amtYazkGaXFPa4gAXYAkWwAAAAM"]
[Thu Jul 30 14:58:03.796407 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkWwAAAAM"]
[Thu Jul 30 14:58:03.816564 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.newrelic"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.newrelic"] [unique_id "amtYazkGaXFPa4gAXYAkXAAAAAM"]
[Thu Jul 30 14:58:03.816698 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.newrelic"] [unique_id "amtYazkGaXFPa4gAXYAkXAAAAAM"]
[Thu Jul 30 14:58:03.816839 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkXAAAAAM"]
[Thu Jul 30 14:58:03.836742 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.loggly"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.loggly"] [unique_id "amtYazkGaXFPa4gAXYAkXQAAAAM"]
[Thu Jul 30 14:58:03.836901 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.loggly"] [unique_id "amtYazkGaXFPa4gAXYAkXQAAAAM"]
[Thu Jul 30 14:58:03.837041 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkXQAAAAM"]
[Thu Jul 30 14:58:03.857326 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.papertrail"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.papertrail"] [unique_id "amtYazkGaXFPa4gAXYAkXgAAAAM"]
[Thu Jul 30 14:58:03.857513 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.papertrail"] [unique_id "amtYazkGaXFPa4gAXYAkXgAAAAM"]
[Thu Jul 30 14:58:03.857672 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkXgAAAAM"]
[Thu Jul 30 14:58:03.880102 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cloudwatch"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cloudwatch"] [unique_id "amtYazkGaXFPa4gAXYAkXwAAAAM"]
[Thu Jul 30 14:58:03.880256 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cloudwatch"] [unique_id "amtYazkGaXFPa4gAXYAkXwAAAAM"]
[Thu Jul 30 14:58:03.880397 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkXwAAAAM"]
[Thu Jul 30 14:58:03.901058 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.kibana"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.kibana"] [unique_id "amtYazkGaXFPa4gAXYAkYAAAAAM"]
[Thu Jul 30 14:58:03.901221 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.kibana"] [unique_id "amtYazkGaXFPa4gAXYAkYAAAAAM"]
[Thu Jul 30 14:58:03.901372 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkYAAAAAM"]
[Thu Jul 30 14:58:03.921457 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.elastic"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.elastic"] [unique_id "amtYazkGaXFPa4gAXYAkYQAAAAM"]
[Thu Jul 30 14:58:03.921602 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.elastic"] [unique_id "amtYazkGaXFPa4gAXYAkYQAAAAM"]
[Thu Jul 30 14:58:03.921740 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkYQAAAAM"]
[Thu Jul 30 14:58:03.944368 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.algolia"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.algolia"] [unique_id "amtYazkGaXFPa4gAXYAkYgAAAAM"]
[Thu Jul 30 14:58:03.944533 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.algolia"] [unique_id "amtYazkGaXFPa4gAXYAkYgAAAAM"]
[Thu Jul 30 14:58:03.944691 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkYgAAAAM"]
[Thu Jul 30 14:58:03.966614 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.meilisearch"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.meilisearch"] [unique_id "amtYazkGaXFPa4gAXYAkYwAAAAM"]
[Thu Jul 30 14:58:03.966788 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.meilisearch"] [unique_id "amtYazkGaXFPa4gAXYAkYwAAAAM"]
[Thu Jul 30 14:58:03.966936 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkYwAAAAM"]
[Thu Jul 30 14:58:03.989977 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.typesense"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.typesense"] [unique_id "amtYazkGaXFPa4gAXYAkZAAAAAM"]
[Thu Jul 30 14:58:03.990163 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.typesense"] [unique_id "amtYazkGaXFPa4gAXYAkZAAAAAM"]
[Thu Jul 30 14:58:03.990323 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYazkGaXFPa4gAXYAkZAAAAAM"]
[Thu Jul 30 14:58:04.009650 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sphinxsearch"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sphinxsearch"] [unique_id "amtYbDkGaXFPa4gAXYAkZQAAAAM"]
[Thu Jul 30 14:58:04.009816 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sphinxsearch"] [unique_id "amtYbDkGaXFPa4gAXYAkZQAAAAM"]
[Thu Jul 30 14:58:04.009961 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkZQAAAAM"]
[Thu Jul 30 14:58:04.029867 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.solr"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.solr"] [unique_id "amtYbDkGaXFPa4gAXYAkZgAAAAM"]
[Thu Jul 30 14:58:04.030032 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.solr"] [unique_id "amtYbDkGaXFPa4gAXYAkZgAAAAM"]
[Thu Jul 30 14:58:04.030201 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkZgAAAAM"]
[Thu Jul 30 14:58:04.050516 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mongo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.mongo"] [unique_id "amtYbDkGaXFPa4gAXYAkZwAAAAM"]
[Thu Jul 30 14:58:04.050667 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.mongo"] [unique_id "amtYbDkGaXFPa4gAXYAkZwAAAAM"]
[Thu Jul 30 14:58:04.050809 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkZwAAAAM"]
[Thu Jul 30 14:58:04.070363 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mongodb"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.mongodb"] [unique_id "amtYbDkGaXFPa4gAXYAkaAAAAAM"]
[Thu Jul 30 14:58:04.070534 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.mongodb"] [unique_id "amtYbDkGaXFPa4gAXYAkaAAAAAM"]
[Thu Jul 30 14:58:04.070972 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkaAAAAAM"]
[Thu Jul 30 14:58:04.090178 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.postgres"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.postgres"] [unique_id "amtYbDkGaXFPa4gAXYAkaQAAAAM"]
[Thu Jul 30 14:58:04.090328 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.postgres"] [unique_id "amtYbDkGaXFPa4gAXYAkaQAAAAM"]
[Thu Jul 30 14:58:04.090472 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkaQAAAAM"]
[Thu Jul 30 14:58:04.110740 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.postgresql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.postgresql"] [unique_id "amtYbDkGaXFPa4gAXYAkagAAAAM"]
[Thu Jul 30 14:58:04.110888 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.postgresql"] [unique_id "amtYbDkGaXFPa4gAXYAkagAAAAM"]
[Thu Jul 30 14:58:04.111027 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkagAAAAM"]
[Thu Jul 30 14:58:04.131033 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mysql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.mysql"] [unique_id "amtYbDkGaXFPa4gAXYAkawAAAAM"]
[Thu Jul 30 14:58:04.131212 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.mysql"] [unique_id "amtYbDkGaXFPa4gAXYAkawAAAAM"]
[Thu Jul 30 14:58:04.131365 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkawAAAAM"]
[Thu Jul 30 14:58:04.151306 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sqlite"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqlite"] [unique_id "amtYbDkGaXFPa4gAXYAkbAAAAAM"]
[Thu Jul 30 14:58:04.151433 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqlite"] [unique_id "amtYbDkGaXFPa4gAXYAkbAAAAAM"]
[Thu Jul 30 14:58:04.151574 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkbAAAAAM"]
[Thu Jul 30 14:58:04.170315 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sqlserver"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqlserver"] [unique_id "amtYbDkGaXFPa4gAXYAkbQAAAAM"]
[Thu Jul 30 14:58:04.170449 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqlserver"] [unique_id "amtYbDkGaXFPa4gAXYAkbQAAAAM"]
[Thu Jul 30 14:58:04.170587 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkbQAAAAM"]
[Thu Jul 30 14:58:04.189963 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cassandra"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cassandra"] [unique_id "amtYbDkGaXFPa4gAXYAkbgAAAAM"]
[Thu Jul 30 14:58:04.190103 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cassandra"] [unique_id "amtYbDkGaXFPa4gAXYAkbgAAAAM"]
[Thu Jul 30 14:58:04.190245 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkbgAAAAM"]
[Thu Jul 30 14:58:04.209993 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.couchdb"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.couchdb"] [unique_id "amtYbDkGaXFPa4gAXYAkbwAAAAM"]
[Thu Jul 30 14:58:04.210161 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.couchdb"] [unique_id "amtYbDkGaXFPa4gAXYAkbwAAAAM"]
[Thu Jul 30 14:58:04.210307 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkbwAAAAM"]
[Thu Jul 30 14:58:04.229481 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dynamodb"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.dynamodb"] [unique_id "amtYbDkGaXFPa4gAXYAkcAAAAAM"]
[Thu Jul 30 14:58:04.229638 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.dynamodb"] [unique_id "amtYbDkGaXFPa4gAXYAkcAAAAAM"]
[Thu Jul 30 14:58:04.229777 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkcAAAAAM"]
[Thu Jul 30 14:58:04.249242 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.neo4j"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.neo4j"] [unique_id "amtYbDkGaXFPa4gAXYAkcQAAAAM"]
[Thu Jul 30 14:58:04.249387 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.neo4j"] [unique_id "amtYbDkGaXFPa4gAXYAkcQAAAAM"]
[Thu Jul 30 14:58:04.249531 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkcQAAAAM"]
[Thu Jul 30 14:58:04.270038 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.influxdb"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.influxdb"] [unique_id "amtYbDkGaXFPa4gAXYAkcgAAAAM"]
[Thu Jul 30 14:58:04.270193 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.influxdb"] [unique_id "amtYbDkGaXFPa4gAXYAkcgAAAAM"]
[Thu Jul 30 14:58:04.270328 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkcgAAAAM"]
[Thu Jul 30 14:58:04.289708 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.clickhouse"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.clickhouse"] [unique_id "amtYbDkGaXFPa4gAXYAkcwAAAAM"]
[Thu Jul 30 14:58:04.289841 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.clickhouse"] [unique_id "amtYbDkGaXFPa4gAXYAkcwAAAAM"]
[Thu Jul 30 14:58:04.289974 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkcwAAAAM"]
[Thu Jul 30 14:58:04.309843 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.memcached"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.memcached"] [unique_id "amtYbDkGaXFPa4gAXYAkdAAAAAM"]
[Thu Jul 30 14:58:04.309963 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.memcached"] [unique_id "amtYbDkGaXFPa4gAXYAkdAAAAAM"]
[Thu Jul 30 14:58:04.310111 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkdAAAAAM"]
[Thu Jul 30 14:58:04.329542 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.rabbitmq"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.rabbitmq"] [unique_id "amtYbDkGaXFPa4gAXYAkdQAAAAM"]
[Thu Jul 30 14:58:04.329687 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.rabbitmq"] [unique_id "amtYbDkGaXFPa4gAXYAkdQAAAAM"]
[Thu Jul 30 14:58:04.329828 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkdQAAAAM"]
[Thu Jul 30 14:58:04.349918 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.kafka"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.kafka"] [unique_id "amtYbDkGaXFPa4gAXYAkdgAAAAM"]
[Thu Jul 30 14:58:04.350083 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.kafka"] [unique_id "amtYbDkGaXFPa4gAXYAkdgAAAAM"]
[Thu Jul 30 14:58:04.350228 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkdgAAAAM"]
[Thu Jul 30 14:58:04.370786 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.nats"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.nats"] [unique_id "amtYbDkGaXFPa4gAXYAkdwAAAAM"]
[Thu Jul 30 14:58:04.370952 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.nats"] [unique_id "amtYbDkGaXFPa4gAXYAkdwAAAAM"]
[Thu Jul 30 14:58:04.371111 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkdwAAAAM"]
[Thu Jul 30 14:58:04.393551 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.beanstalkd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.beanstalkd"] [unique_id "amtYbDkGaXFPa4gAXYAkeAAAAAM"]
[Thu Jul 30 14:58:04.393709 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.beanstalkd"] [unique_id "amtYbDkGaXFPa4gAXYAkeAAAAAM"]
[Thu Jul 30 14:58:04.393847 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkeAAAAAM"]
[Thu Jul 30 14:58:04.415686 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ironmq"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.ironmq"] [unique_id "amtYbDkGaXFPa4gAXYAkeQAAAAM"]
[Thu Jul 30 14:58:04.415842 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.ironmq"] [unique_id "amtYbDkGaXFPa4gAXYAkeQAAAAM"]
[Thu Jul 30 14:58:04.415978 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkeQAAAAM"]
[Thu Jul 30 14:58:04.437295 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sqs2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqs2"] [unique_id "amtYbDkGaXFPa4gAXYAkegAAAAM"]
[Thu Jul 30 14:58:04.437451 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sqs2"] [unique_id "amtYbDkGaXFPa4gAXYAkegAAAAM"]
[Thu Jul 30 14:58:04.437588 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkegAAAAM"]
[Thu Jul 30 14:58:04.456807 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.supervisor"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.supervisor"] [unique_id "amtYbDkGaXFPa4gAXYAkewAAAAM"]
[Thu Jul 30 14:58:04.456921 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.supervisor"] [unique_id "amtYbDkGaXFPa4gAXYAkewAAAAM"]
[Thu Jul 30 14:58:04.457060 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkewAAAAM"]
[Thu Jul 30 14:58:04.475916 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.cron"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.cron"] [unique_id "amtYbDkGaXFPa4gAXYAkfAAAAAM"]
[Thu Jul 30 14:58:04.476036 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.cron"] [unique_id "amtYbDkGaXFPa4gAXYAkfAAAAAM"]
[Thu Jul 30 14:58:04.476188 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkfAAAAAM"]
[Thu Jul 30 14:58:04.502718 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.schedule"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.schedule"] [unique_id "amtYbDkGaXFPa4gAXYAkfQAAAAM"]
[Thu Jul 30 14:58:04.502839 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.schedule"] [unique_id "amtYbDkGaXFPa4gAXYAkfQAAAAM"]
[Thu Jul 30 14:58:04.502982 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkfQAAAAM"]
[Thu Jul 30 14:58:04.523972 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.worker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.worker"] [unique_id "amtYbDkGaXFPa4gAXYAkfgAAAAM"]
[Thu Jul 30 14:58:04.524107 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.worker"] [unique_id "amtYbDkGaXFPa4gAXYAkfgAAAAM"]
[Thu Jul 30 14:58:04.524238 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkfgAAAAM"]
[Thu Jul 30 14:58:04.544993 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.horizon2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.horizon2"] [unique_id "amtYbDkGaXFPa4gAXYAkfwAAAAM"]
[Thu Jul 30 14:58:04.545142 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.horizon2"] [unique_id "amtYbDkGaXFPa4gAXYAkfwAAAAM"]
[Thu Jul 30 14:58:04.545289 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkfwAAAAM"]
[Thu Jul 30 14:58:04.550741 2026] [ssl:error] [pid 3551093:tid 3551093] (EAI 2)Name or service not known: [client 144.76.19.72:38532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:04.550764 2026] [ssl:error] [pid 3551093:tid 3551093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:04.565374 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.pulse"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.pulse"] [unique_id "amtYbDkGaXFPa4gAXYAkgAAAAAM"]
[Thu Jul 30 14:58:04.565517 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.pulse"] [unique_id "amtYbDkGaXFPa4gAXYAkgAAAAAM"]
[Thu Jul 30 14:58:04.565650 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkgAAAAAM"]
[Thu Jul 30 14:58:04.589874 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.reverb"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.reverb"] [unique_id "amtYbDkGaXFPa4gAXYAkgQAAAAM"]
[Thu Jul 30 14:58:04.590024 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.reverb"] [unique_id "amtYbDkGaXFPa4gAXYAkgQAAAAM"]
[Thu Jul 30 14:58:04.590183 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkgQAAAAM"]
[Thu Jul 30 14:58:04.603712 2026] [ssl:error] [pid 3583020:tid 3583020] (EAI 2)Name or service not known: [client 144.76.19.72:38544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:04.603740 2026] [ssl:error] [pid 3583020:tid 3583020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:04.609808 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.livewire"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.livewire"] [unique_id "amtYbDkGaXFPa4gAXYAkggAAAAM"]
[Thu Jul 30 14:58:04.609964 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.livewire"] [unique_id "amtYbDkGaXFPa4gAXYAkggAAAAM"]
[Thu Jul 30 14:58:04.610119 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkggAAAAM"]
[Thu Jul 30 14:58:04.630292 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.inertia"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.inertia"] [unique_id "amtYbDkGaXFPa4gAXYAkgwAAAAM"]
[Thu Jul 30 14:58:04.630402 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.inertia"] [unique_id "amtYbDkGaXFPa4gAXYAkgwAAAAM"]
[Thu Jul 30 14:58:04.630553 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkgwAAAAM"]
[Thu Jul 30 14:58:04.652305 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.folio"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.folio"] [unique_id "amtYbDkGaXFPa4gAXYAkhAAAAAM"]
[Thu Jul 30 14:58:04.652440 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.folio"] [unique_id "amtYbDkGaXFPa4gAXYAkhAAAAAM"]
[Thu Jul 30 14:58:04.652575 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkhAAAAAM"]
[Thu Jul 30 14:58:04.674333 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.volt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.volt"] [unique_id "amtYbDkGaXFPa4gAXYAkhQAAAAM"]
[Thu Jul 30 14:58:04.674461 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.volt"] [unique_id "amtYbDkGaXFPa4gAXYAkhQAAAAM"]
[Thu Jul 30 14:58:04.674605 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkhQAAAAM"]
[Thu Jul 30 14:58:04.694811 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.jetstream"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.jetstream"] [unique_id "amtYbDkGaXFPa4gAXYAkhgAAAAM"]
[Thu Jul 30 14:58:04.694943 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.jetstream"] [unique_id "amtYbDkGaXFPa4gAXYAkhgAAAAM"]
[Thu Jul 30 14:58:04.695091 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkhgAAAAM"]
[Thu Jul 30 14:58:04.715607 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.breeze"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.breeze"] [unique_id "amtYbDkGaXFPa4gAXYAkhwAAAAM"]
[Thu Jul 30 14:58:04.715764 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.breeze"] [unique_id "amtYbDkGaXFPa4gAXYAkhwAAAAM"]
[Thu Jul 30 14:58:04.715918 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkhwAAAAM"]
[Thu Jul 30 14:58:04.736220 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.fortify"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.fortify"] [unique_id "amtYbDkGaXFPa4gAXYAkiAAAAAM"]
[Thu Jul 30 14:58:04.736930 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.fortify"] [unique_id "amtYbDkGaXFPa4gAXYAkiAAAAAM"]
[Thu Jul 30 14:58:04.737095 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkiAAAAAM"]
[Thu Jul 30 14:58:04.756996 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.ui"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.ui"] [unique_id "amtYbDkGaXFPa4gAXYAkiQAAAAM"]
[Thu Jul 30 14:58:04.757181 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.ui"] [unique_id "amtYbDkGaXFPa4gAXYAkiQAAAAM"]
[Thu Jul 30 14:58:04.757339 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkiQAAAAM"]
[Thu Jul 30 14:58:04.777239 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mix"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.mix"] [unique_id "amtYbDkGaXFPa4gAXYAkigAAAAM"]
[Thu Jul 30 14:58:04.777369 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.mix"] [unique_id "amtYbDkGaXFPa4gAXYAkigAAAAM"]
[Thu Jul 30 14:58:04.777524 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkigAAAAM"]
[Thu Jul 30 14:58:04.796875 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.vite"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.vite"] [unique_id "amtYbDkGaXFPa4gAXYAkiwAAAAM"]
[Thu Jul 30 14:58:04.797025 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.vite"] [unique_id "amtYbDkGaXFPa4gAXYAkiwAAAAM"]
[Thu Jul 30 14:58:04.797183 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkiwAAAAM"]
[Thu Jul 30 14:58:04.816094 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.webpack"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.webpack"] [unique_id "amtYbDkGaXFPa4gAXYAkjAAAAAM"]
[Thu Jul 30 14:58:04.816259 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.webpack"] [unique_id "amtYbDkGaXFPa4gAXYAkjAAAAAM"]
[Thu Jul 30 14:58:04.816403 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkjAAAAAM"]
[Thu Jul 30 14:58:04.837125 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.npm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.npm"] [unique_id "amtYbDkGaXFPa4gAXYAkjQAAAAM"]
[Thu Jul 30 14:58:04.837290 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.npm"] [unique_id "amtYbDkGaXFPa4gAXYAkjQAAAAM"]
[Thu Jul 30 14:58:04.837440 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkjQAAAAM"]
[Thu Jul 30 14:58:04.858097 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.yarn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.yarn"] [unique_id "amtYbDkGaXFPa4gAXYAkjgAAAAM"]
[Thu Jul 30 14:58:04.858266 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.yarn"] [unique_id "amtYbDkGaXFPa4gAXYAkjgAAAAM"]
[Thu Jul 30 14:58:04.858423 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkjgAAAAM"]
[Thu Jul 30 14:58:04.878637 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.node"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.node"] [unique_id "amtYbDkGaXFPa4gAXYAkjwAAAAM"]
[Thu Jul 30 14:58:04.878803 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.node"] [unique_id "amtYbDkGaXFPa4gAXYAkjwAAAAM"]
[Thu Jul 30 14:58:04.878950 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkjwAAAAM"]
[Thu Jul 30 14:58:04.900926 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bun"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.bun"] [unique_id "amtYbDkGaXFPa4gAXYAkkAAAAAM"]
[Thu Jul 30 14:58:04.901120 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.bun"] [unique_id "amtYbDkGaXFPa4gAXYAkkAAAAAM"]
[Thu Jul 30 14:58:04.901273 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkkAAAAAM"]
[Thu Jul 30 14:58:04.920477 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.deno"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.deno"] [unique_id "amtYbDkGaXFPa4gAXYAkkQAAAAM"]
[Thu Jul 30 14:58:04.920653 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.deno"] [unique_id "amtYbDkGaXFPa4gAXYAkkQAAAAM"]
[Thu Jul 30 14:58:04.920801 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkkQAAAAM"]
[Thu Jul 30 14:58:04.941081 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.composer2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.composer2"] [unique_id "amtYbDkGaXFPa4gAXYAkkgAAAAM"]
[Thu Jul 30 14:58:04.941263 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.composer2"] [unique_id "amtYbDkGaXFPa4gAXYAkkgAAAAM"]
[Thu Jul 30 14:58:04.941407 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkkgAAAAM"]
[Thu Jul 30 14:58:04.961375 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php8"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.php8"] [unique_id "amtYbDkGaXFPa4gAXYAkkwAAAAM"]
[Thu Jul 30 14:58:04.961539 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.php8"] [unique_id "amtYbDkGaXFPa4gAXYAkkwAAAAM"]
[Thu Jul 30 14:58:04.961685 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAkkwAAAAM"]
[Thu Jul 30 14:58:04.980694 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php81"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.php81"] [unique_id "amtYbDkGaXFPa4gAXYAklAAAAAM"]
[Thu Jul 30 14:58:04.980834 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.php81"] [unique_id "amtYbDkGaXFPa4gAXYAklAAAAAM"]
[Thu Jul 30 14:58:04.980966 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbDkGaXFPa4gAXYAklAAAAAM"]
[Thu Jul 30 14:58:05.002146 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php82"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.php82"] [unique_id "amtYbTkGaXFPa4gAXYAklQAAAAM"]
[Thu Jul 30 14:58:05.002322 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.php82"] [unique_id "amtYbTkGaXFPa4gAXYAklQAAAAM"]
[Thu Jul 30 14:58:05.002487 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAklQAAAAM"]
[Thu Jul 30 14:58:05.022540 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php83"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.php83"] [unique_id "amtYbTkGaXFPa4gAXYAklgAAAAM"]
[Thu Jul 30 14:58:05.022710 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.php83"] [unique_id "amtYbTkGaXFPa4gAXYAklgAAAAM"]
[Thu Jul 30 14:58:05.022854 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAklgAAAAM"]
[Thu Jul 30 14:58:05.042698 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php84"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.php84"] [unique_id "amtYbTkGaXFPa4gAXYAklwAAAAM"]
[Thu Jul 30 14:58:05.042856 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.php84"] [unique_id "amtYbTkGaXFPa4gAXYAklwAAAAM"]
[Thu Jul 30 14:58:05.043077 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAklwAAAAM"]
[Thu Jul 30 14:58:05.120643 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.142541 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/config/env.backup"] [unique_id "amtYbTkGaXFPa4gAXYAkmgAAAAM"]
[Thu Jul 30 14:58:05.142924 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/env.backup"] [unique_id "amtYbTkGaXFPa4gAXYAkmgAAAAM"]
[Thu Jul 30 14:58:05.143093 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAkmgAAAAM"]
[Thu Jul 30 14:58:05.162975 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/config/env.old"] [unique_id "amtYbTkGaXFPa4gAXYAkmwAAAAM"]
[Thu Jul 30 14:58:05.163325 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/config/env.old"] [unique_id "amtYbTkGaXFPa4gAXYAkmwAAAAM"]
[Thu Jul 30 14:58:05.163483 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAkmwAAAAM"]
[Thu Jul 30 14:58:05.238269 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.273024 2026] [authz_core:error] [pid 3583018:tid 3583018] [client 146.70.194.246:32984] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/fields/error_log
[Thu Jul 30 14:58:05.315384 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.392287 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.480826 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.574175 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.652306 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.744747 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.766749 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/storage/env.backup"] [unique_id "amtYbTkGaXFPa4gAXYAkqgAAAAM"]
[Thu Jul 30 14:58:05.767103 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/storage/env.backup"] [unique_id "amtYbTkGaXFPa4gAXYAkqgAAAAM"]
[Thu Jul 30 14:58:05.767275 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAkqgAAAAM"]
[Thu Jul 30 14:58:05.850269 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.936969 2026] [cgi:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 14:58:05.960182 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "swingaddiction.co.uk"] [uri "/app/env.backup"] [unique_id "amtYbTkGaXFPa4gAXYAkrwAAAAM"]
[Thu Jul 30 14:58:05.960731 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/app/env.backup"] [unique_id "amtYbTkGaXFPa4gAXYAkrwAAAAM"]
[Thu Jul 30 14:58:05.960936 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAkrwAAAAM"]
[Thu Jul 30 14:58:05.981617 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/config/.env"] [unique_id "amtYbTkGaXFPa4gAXYAksAAAAAM"]
[Thu Jul 30 14:58:05.981879 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/config/.env"] [unique_id "amtYbTkGaXFPa4gAXYAksAAAAAM"]
[Thu Jul 30 14:58:05.982122 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbTkGaXFPa4gAXYAksAAAAAM"]
[Thu Jul 30 14:58:06.001733 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/config/.env.local"] [unique_id "amtYbjkGaXFPa4gAXYAksQAAAAM"]
[Thu Jul 30 14:58:06.001994 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/config/.env.local"] [unique_id "amtYbjkGaXFPa4gAXYAksQAAAAM"]
[Thu Jul 30 14:58:06.002238 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAksQAAAAM"]
[Thu Jul 30 14:58:06.022042 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/src/config/.env.backup"] [unique_id "amtYbjkGaXFPa4gAXYAksgAAAAM"]
[Thu Jul 30 14:58:06.022315 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/src/config/.env.backup"] [unique_id "amtYbjkGaXFPa4gAXYAksgAAAAM"]
[Thu Jul 30 14:58:06.022547 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAksgAAAAM"]
[Thu Jul 30 14:58:06.047519 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/config/.env.local"] [unique_id "amtYbjkGaXFPa4gAXYAkswAAAAM"]
[Thu Jul 30 14:58:06.047709 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/config/.env.local"] [unique_id "amtYbjkGaXFPa4gAXYAkswAAAAM"]
[Thu Jul 30 14:58:06.047867 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAkswAAAAM"]
[Thu Jul 30 14:58:06.067470 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/config/.env.backup"] [unique_id "amtYbjkGaXFPa4gAXYAktAAAAAM"]
[Thu Jul 30 14:58:06.067632 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/config/.env.backup"] [unique_id "amtYbjkGaXFPa4gAXYAktAAAAAM"]
[Thu Jul 30 14:58:06.067809 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAktAAAAAM"]
[Thu Jul 30 14:58:06.088595 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/config/.env"] [unique_id "amtYbjkGaXFPa4gAXYAktQAAAAM"]
[Thu Jul 30 14:58:06.088785 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/config/.env"] [unique_id "amtYbjkGaXFPa4gAXYAktQAAAAM"]
[Thu Jul 30 14:58:06.088938 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAktQAAAAM"]
[Thu Jul 30 14:58:06.108740 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/config/.env.local"] [unique_id "amtYbjkGaXFPa4gAXYAktgAAAAM"]
[Thu Jul 30 14:58:06.108937 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/config/.env.local"] [unique_id "amtYbjkGaXFPa4gAXYAktgAAAAM"]
[Thu Jul 30 14:58:06.109123 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAktgAAAAM"]
[Thu Jul 30 14:58:06.128310 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/backend/config/.env.backup"] [unique_id "amtYbjkGaXFPa4gAXYAktwAAAAM"]
[Thu Jul 30 14:58:06.128490 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/backend/config/.env.backup"] [unique_id "amtYbjkGaXFPa4gAXYAktwAAAAM"]
[Thu Jul 30 14:58:06.128637 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAktwAAAAM"]
[Thu Jul 30 14:58:06.148005 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/config/.env"] [unique_id "amtYbjkGaXFPa4gAXYAkuAAAAAM"]
[Thu Jul 30 14:58:06.148185 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/config/.env"] [unique_id "amtYbjkGaXFPa4gAXYAkuAAAAAM"]
[Thu Jul 30 14:58:06.148336 2026] [security2:error] [pid 3585927:tid 3585927] [client 185.177.72.70:48388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbjkGaXFPa4gAXYAkuAAAAAM"]
[Thu Jul 30 14:58:06.185537 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgYwAAAEQ"]
[Thu Jul 30 14:58:06.185718 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgYwAAAEQ"]
[Thu Jul 30 14:58:06.185879 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgYwAAAEQ"]
[Thu Jul 30 14:58:06.202288 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/web/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgZAAAAEQ"]
[Thu Jul 30 14:58:06.202470 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/web/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgZAAAAEQ"]
[Thu Jul 30 14:58:06.202627 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgZAAAAEQ"]
[Thu Jul 30 14:58:06.210738 2026] [access_compat:error] [pid 3574305:tid 3574305] [client 45.158.164.139:52046] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:58:06.226495 2026] [security2:error] [pid 3577558:tid 3577558] [client 150.5.134.135:53817] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYbpKgtqQPFcNbkHOVVQAAABc"]
[Thu Jul 30 14:58:06.226539 2026] [security2:error] [pid 3577558:tid 3577558] [client 150.5.134.135:53817] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYbpKgtqQPFcNbkHOVVQAAABc"]
[Thu Jul 30 14:58:06.226776 2026] [security2:error] [pid 3577558:tid 3577558] [client 150.5.134.135:53817] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYbpKgtqQPFcNbkHOVVQAAABc"]
[Thu Jul 30 14:58:06.228760 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgZQAAAEQ"]
[Thu Jul 30 14:58:06.228886 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgZQAAAEQ"]
[Thu Jul 30 14:58:06.229036 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgZQAAAEQ"]
[Thu Jul 30 14:58:06.246457 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgZgAAAEQ"]
[Thu Jul 30 14:58:06.246631 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgZgAAAEQ"]
[Thu Jul 30 14:58:06.246791 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgZgAAAEQ"]
[Thu Jul 30 14:58:06.265377 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/server/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgZwAAAEQ"]
[Thu Jul 30 14:58:06.265520 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/server/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgZwAAAEQ"]
[Thu Jul 30 14:58:06.265682 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgZwAAAEQ"]
[Thu Jul 30 14:58:06.286321 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/deploy/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgaAAAAEQ"]
[Thu Jul 30 14:58:06.286498 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/deploy/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgaAAAAEQ"]
[Thu Jul 30 14:58:06.286645 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgaAAAAEQ"]
[Thu Jul 30 14:58:06.304936 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/deploy/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgaQAAAEQ"]
[Thu Jul 30 14:58:06.305129 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/deploy/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgaQAAAEQ"]
[Thu Jul 30 14:58:06.305314 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgaQAAAEQ"]
[Thu Jul 30 14:58:06.318699 2026] [core:error] [pid 3579760:tid 3579760] (13)Permission denied: [client 216.73.216.199:54824] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/run_plugin_lifecycle
[Thu Jul 30 14:58:06.327807 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/deploy/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgagAAAEQ"]
[Thu Jul 30 14:58:06.327956 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/deploy/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgagAAAEQ"]
[Thu Jul 30 14:58:06.328110 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgagAAAEQ"]
[Thu Jul 30 14:58:06.345367 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /release/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/release/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgawAAAEQ"]
[Thu Jul 30 14:58:06.345529 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/release/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgawAAAEQ"]
[Thu Jul 30 14:58:06.345685 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgawAAAEQ"]
[Thu Jul 30 14:58:06.362575 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/shared/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgbAAAAEQ"]
[Thu Jul 30 14:58:06.362719 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/shared/config/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgbAAAAEQ"]
[Thu Jul 30 14:58:06.362859 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgbAAAAEQ"]
[Thu Jul 30 14:58:06.380233 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/config/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/shared/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgbQAAAEQ"]
[Thu Jul 30 14:58:06.380363 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/shared/config/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgbQAAAEQ"]
[Thu Jul 30 14:58:06.380530 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgbQAAAEQ"]
[Thu Jul 30 14:58:06.406924 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/current/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/current/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgbgAAAEQ"]
[Thu Jul 30 14:58:06.407108 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/current/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgbgAAAEQ"]
[Thu Jul 30 14:58:06.407261 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgbgAAAEQ"]
[Thu Jul 30 14:58:06.424518 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/current/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/current/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgbwAAAEQ"]
[Thu Jul 30 14:58:06.424681 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/current/.env.local"] [unique_id "amtYbiIR4tQ_nM5FPGzgbwAAAEQ"]
[Thu Jul 30 14:58:06.424843 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgbwAAAEQ"]
[Thu Jul 30 14:58:06.442677 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/current/.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/current/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgcAAAAEQ"]
[Thu Jul 30 14:58:06.442804 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/current/.env.backup"] [unique_id "amtYbiIR4tQ_nM5FPGzgcAAAAEQ"]
[Thu Jul 30 14:58:06.442955 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgcAAAAEQ"]
[Thu Jul 30 14:58:06.460030 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/previous/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/previous/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgcQAAAEQ"]
[Thu Jul 30 14:58:06.460179 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/previous/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgcQAAAEQ"]
[Thu Jul 30 14:58:06.460329 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgcQAAAEQ"]
[Thu Jul 30 14:58:06.478240 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/v1/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgcgAAAEQ"]
[Thu Jul 30 14:58:06.478357 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/v1/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgcgAAAEQ"]
[Thu Jul 30 14:58:06.478495 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgcgAAAEQ"]
[Thu Jul 30 14:58:06.497627 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/v2/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgcwAAAEQ"]
[Thu Jul 30 14:58:06.497754 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/v2/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgcwAAAEQ"]
[Thu Jul 30 14:58:06.497903 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgcwAAAEQ"]
[Thu Jul 30 14:58:06.514943 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /releases/v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/releases/v3/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdAAAAEQ"]
[Thu Jul 30 14:58:06.515085 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/releases/v3/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdAAAAEQ"]
[Thu Jul 30 14:58:06.515224 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgdAAAAEQ"]
[Thu Jul 30 14:58:06.532219 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/v1/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdQAAAEQ"]
[Thu Jul 30 14:58:06.532344 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/v1/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdQAAAEQ"]
[Thu Jul 30 14:58:06.532486 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgdQAAAEQ"]
[Thu Jul 30 14:58:06.549741 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/v2/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdgAAAEQ"]
[Thu Jul 30 14:58:06.549862 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/v2/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdgAAAEQ"]
[Thu Jul 30 14:58:06.549998 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgdgAAAEQ"]
[Thu Jul 30 14:58:06.566212 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v3/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/v3/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdwAAAEQ"]
[Thu Jul 30 14:58:06.566333 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/v3/config/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgdwAAAEQ"]
[Thu Jul 30 14:58:06.566479 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgdwAAAEQ"]
[Thu Jul 30 14:58:06.582650 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/api/v3/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgeAAAAEQ"]
[Thu Jul 30 14:58:06.582771 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/api/v3/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgeAAAAEQ"]
[Thu Jul 30 14:58:06.582904 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgeAAAAEQ"]
[Thu Jul 30 14:58:06.600574 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /microservices/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/microservices/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgeQAAAEQ"]
[Thu Jul 30 14:58:06.600745 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/microservices/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgeQAAAEQ"]
[Thu Jul 30 14:58:06.600895 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgeQAAAEQ"]
[Thu Jul 30 14:58:06.617869 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /microservice/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/microservice/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgegAAAEQ"]
[Thu Jul 30 14:58:06.618038 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/microservice/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgegAAAEQ"]
[Thu Jul 30 14:58:06.618200 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgegAAAEQ"]
[Thu Jul 30 14:58:06.619625 2026] [core:error] [pid 3579760:tid 3579760] (13)Permission denied: [client 216.73.216.199:54824] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory70/node0/compact
[Thu Jul 30 14:58:06.635457 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/services/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgewAAAEQ"]
[Thu Jul 30 14:58:06.635591 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/services/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgewAAAEQ"]
[Thu Jul 30 14:58:06.635733 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgewAAAEQ"]
[Thu Jul 30 14:58:06.654135 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/service/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfAAAAEQ"]
[Thu Jul 30 14:58:06.654259 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/service/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfAAAAEQ"]
[Thu Jul 30 14:58:06.654396 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgfAAAAEQ"]
[Thu Jul 30 14:58:06.671217 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/modules/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfQAAAEQ"]
[Thu Jul 30 14:58:06.671369 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/modules/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfQAAAEQ"]
[Thu Jul 30 14:58:06.671522 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgfQAAAEQ"]
[Thu Jul 30 14:58:06.677885 2026] [authz_core:error] [pid 3585927:tid 3585927] [client 146.70.194.246:33026] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/rest-api/search/error_log
[Thu Jul 30 14:58:06.688777 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /module/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/module/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfgAAAEQ"]
[Thu Jul 30 14:58:06.688898 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/module/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfgAAAEQ"]
[Thu Jul 30 14:58:06.689030 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgfgAAAEQ"]
[Thu Jul 30 14:58:06.706027 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/packages/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfwAAAEQ"]
[Thu Jul 30 14:58:06.706181 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/packages/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgfwAAAEQ"]
[Thu Jul 30 14:58:06.706323 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgfwAAAEQ"]
[Thu Jul 30 14:58:06.724156 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /package/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/package/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzggAAAAEQ"]
[Thu Jul 30 14:58:06.724319 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/package/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzggAAAAEQ"]
[Thu Jul 30 14:58:06.724479 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzggAAAAEQ"]
[Thu Jul 30 14:58:06.743516 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/libs/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzggQAAAEQ"]
[Thu Jul 30 14:58:06.743684 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/libs/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzggQAAAEQ"]
[Thu Jul 30 14:58:06.743838 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzggQAAAEQ"]
[Thu Jul 30 14:58:06.760870 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/lib/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgggAAAEQ"]
[Thu Jul 30 14:58:06.761015 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/lib/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgggAAAEQ"]
[Thu Jul 30 14:58:06.761183 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgggAAAEQ"]
[Thu Jul 30 14:58:06.777702 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /components/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/components/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzggwAAAEQ"]
[Thu Jul 30 14:58:06.777858 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/components/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzggwAAAEQ"]
[Thu Jul 30 14:58:06.778000 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzggwAAAEQ"]
[Thu Jul 30 14:58:06.794435 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /component/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/component/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghAAAAEQ"]
[Thu Jul 30 14:58:06.794603 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/component/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghAAAAEQ"]
[Thu Jul 30 14:58:06.794752 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzghAAAAEQ"]
[Thu Jul 30 14:58:06.813176 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/plugins/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghQAAAEQ"]
[Thu Jul 30 14:58:06.813332 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/plugins/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghQAAAEQ"]
[Thu Jul 30 14:58:06.813491 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzghQAAAEQ"]
[Thu Jul 30 14:58:06.831905 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/plugin/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghgAAAEQ"]
[Thu Jul 30 14:58:06.832093 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/plugin/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghgAAAEQ"]
[Thu Jul 30 14:58:06.832245 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzghgAAAEQ"]
[Thu Jul 30 14:58:06.848919 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /extensions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/extensions/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghwAAAEQ"]
[Thu Jul 30 14:58:06.849053 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/extensions/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzghwAAAEQ"]
[Thu Jul 30 14:58:06.849205 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzghwAAAEQ"]
[Thu Jul 30 14:58:06.865979 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /extension/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/extension/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgiAAAAEQ"]
[Thu Jul 30 14:58:06.866142 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/extension/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgiAAAAEQ"]
[Thu Jul 30 14:58:06.866280 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgiAAAAEQ"]
[Thu Jul 30 14:58:06.882524 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /addons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/addons/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgiQAAAEQ"]
[Thu Jul 30 14:58:06.882637 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/addons/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgiQAAAEQ"]
[Thu Jul 30 14:58:06.882770 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgiQAAAEQ"]
[Thu Jul 30 14:58:06.900573 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /addon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/addon/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgigAAAEQ"]
[Thu Jul 30 14:58:06.900715 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/addon/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgigAAAEQ"]
[Thu Jul 30 14:58:06.900855 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgigAAAEQ"]
[Thu Jul 30 14:58:06.917192 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/themes/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgiwAAAEQ"]
[Thu Jul 30 14:58:06.917343 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/themes/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgiwAAAEQ"]
[Thu Jul 30 14:58:06.917495 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgiwAAAEQ"]
[Thu Jul 30 14:58:06.934262 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/theme/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjAAAAEQ"]
[Thu Jul 30 14:58:06.934406 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/theme/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjAAAAEQ"]
[Thu Jul 30 14:58:06.934559 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgjAAAAEQ"]
[Thu Jul 30 14:58:06.951122 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /templates/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/templates/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjQAAAEQ"]
[Thu Jul 30 14:58:06.951237 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/templates/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjQAAAEQ"]
[Thu Jul 30 14:58:06.951372 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgjQAAAEQ"]
[Thu Jul 30 14:58:06.968962 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/template/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjgAAAEQ"]
[Thu Jul 30 14:58:06.969116 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/template/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjgAAAEQ"]
[Thu Jul 30 14:58:06.969265 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgjgAAAEQ"]
[Thu Jul 30 14:58:06.987670 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /views/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/views/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjwAAAEQ"]
[Thu Jul 30 14:58:06.987831 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/views/.env"] [unique_id "amtYbiIR4tQ_nM5FPGzgjwAAAEQ"]
[Thu Jul 30 14:58:06.987982 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbiIR4tQ_nM5FPGzgjwAAAEQ"]
[Thu Jul 30 14:58:07.005763 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /view/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/view/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkAAAAEQ"]
[Thu Jul 30 14:58:07.005934 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/view/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkAAAAEQ"]
[Thu Jul 30 14:58:07.006109 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgkAAAAEQ"]
[Thu Jul 30 14:58:07.022936 2026] [access_compat:error] [pid 3583059:tid 3583059] [client 45.158.164.139:52058] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:58:07.025249 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/assets/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkQAAAEQ"]
[Thu Jul 30 14:58:07.025435 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/assets/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkQAAAEQ"]
[Thu Jul 30 14:58:07.025612 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgkQAAAEQ"]
[Thu Jul 30 14:58:07.046647 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/asset/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkgAAAEQ"]
[Thu Jul 30 14:58:07.046821 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/asset/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkgAAAEQ"]
[Thu Jul 30 14:58:07.046991 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgkgAAAEQ"]
[Thu Jul 30 14:58:07.065733 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/static/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkwAAAEQ"]
[Thu Jul 30 14:58:07.065888 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/static/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgkwAAAEQ"]
[Thu Jul 30 14:58:07.066037 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgkwAAAEQ"]
[Thu Jul 30 14:58:07.083551 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/media/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglAAAAEQ"]
[Thu Jul 30 14:58:07.083715 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/media/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglAAAAEQ"]
[Thu Jul 30 14:58:07.083876 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzglAAAAEQ"]
[Thu Jul 30 14:58:07.102894 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/files/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglQAAAEQ"]
[Thu Jul 30 14:58:07.103077 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/files/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglQAAAEQ"]
[Thu Jul 30 14:58:07.103229 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzglQAAAEQ"]
[Thu Jul 30 14:58:07.121285 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /file/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/file/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglgAAAEQ"]
[Thu Jul 30 14:58:07.121469 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/file/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglgAAAEQ"]
[Thu Jul 30 14:58:07.121625 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzglgAAAEQ"]
[Thu Jul 30 14:58:07.141949 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/docs/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglwAAAEQ"]
[Thu Jul 30 14:58:07.142136 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/docs/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzglwAAAEQ"]
[Thu Jul 30 14:58:07.142287 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzglwAAAEQ"]
[Thu Jul 30 14:58:07.160587 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/doc/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmAAAAEQ"]
[Thu Jul 30 14:58:07.160756 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/doc/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmAAAAEQ"]
[Thu Jul 30 14:58:07.160904 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgmAAAAEQ"]
[Thu Jul 30 14:58:07.178600 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /reports/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/reports/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmQAAAEQ"]
[Thu Jul 30 14:58:07.178774 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/reports/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmQAAAEQ"]
[Thu Jul 30 14:58:07.178920 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgmQAAAEQ"]
[Thu Jul 30 14:58:07.196831 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /report/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/report/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmgAAAEQ"]
[Thu Jul 30 14:58:07.197004 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/report/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmgAAAEQ"]
[Thu Jul 30 14:58:07.197176 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgmgAAAEQ"]
[Thu Jul 30 14:58:07.213856 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exports/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/exports/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmwAAAEQ"]
[Thu Jul 30 14:58:07.214032 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/exports/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgmwAAAEQ"]
[Thu Jul 30 14:58:07.214196 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgmwAAAEQ"]
[Thu Jul 30 14:58:07.222793 2026] [ssl:error] [pid 3579760:tid 3579760] (70014)End of file found: [client 216.73.216.199:54824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:07.231768 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/export/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgnAAAAEQ"]
[Thu Jul 30 14:58:07.231918 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/export/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgnAAAAEQ"]
[Thu Jul 30 14:58:07.232079 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgnAAAAEQ"]
[Thu Jul 30 14:58:07.251752 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imports/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/imports/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgnQAAAEQ"]
[Thu Jul 30 14:58:07.251906 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/imports/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgnQAAAEQ"]
[Thu Jul 30 14:58:07.252051 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgnQAAAEQ"]
[Thu Jul 30 14:58:07.269284 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /import/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/import/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgngAAAEQ"]
[Thu Jul 30 14:58:07.269460 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/import/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgngAAAEQ"]
[Thu Jul 30 14:58:07.269608 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgngAAAEQ"]
[Thu Jul 30 14:58:07.286626 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/migrations/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgnwAAAEQ"]
[Thu Jul 30 14:58:07.286849 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/migrations/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgnwAAAEQ"]
[Thu Jul 30 14:58:07.286998 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgnwAAAEQ"]
[Thu Jul 30 14:58:07.304335 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /seeds/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/seeds/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgoAAAAEQ"]
[Thu Jul 30 14:58:07.304517 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/seeds/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgoAAAAEQ"]
[Thu Jul 30 14:58:07.304672 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgoAAAAEQ"]
[Thu Jul 30 14:58:07.321983 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /seed/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/seed/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgoQAAAEQ"]
[Thu Jul 30 14:58:07.322169 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/seed/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgoQAAAEQ"]
[Thu Jul 30 14:58:07.322325 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgoQAAAEQ"]
[Thu Jul 30 14:58:07.339691 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /factories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/factories/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgogAAAEQ"]
[Thu Jul 30 14:58:07.339857 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/factories/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgogAAAEQ"]
[Thu Jul 30 14:58:07.340016 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgogAAAEQ"]
[Thu Jul 30 14:58:07.358388 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /factory/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/factory/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgowAAAEQ"]
[Thu Jul 30 14:58:07.358580 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/factory/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgowAAAEQ"]
[Thu Jul 30 14:58:07.358736 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgowAAAEQ"]
[Thu Jul 30 14:58:07.376916 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/fixtures/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpAAAAEQ"]
[Thu Jul 30 14:58:07.377107 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/fixtures/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpAAAAEQ"]
[Thu Jul 30 14:58:07.377258 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgpAAAAEQ"]
[Thu Jul 30 14:58:07.397371 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixture/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/fixture/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpQAAAEQ"]
[Thu Jul 30 14:58:07.397571 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/fixture/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpQAAAEQ"]
[Thu Jul 30 14:58:07.397728 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgpQAAAEQ"]
[Thu Jul 30 14:58:07.415806 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/mocks/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpgAAAEQ"]
[Thu Jul 30 14:58:07.415983 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/mocks/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpgAAAEQ"]
[Thu Jul 30 14:58:07.416147 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgpgAAAEQ"]
[Thu Jul 30 14:58:07.433532 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mock/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/mock/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpwAAAEQ"]
[Thu Jul 30 14:58:07.433715 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/mock/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgpwAAAEQ"]
[Thu Jul 30 14:58:07.433877 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgpwAAAEQ"]
[Thu Jul 30 14:58:07.452193 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stubs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/stubs/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqAAAAEQ"]
[Thu Jul 30 14:58:07.452418 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/stubs/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqAAAAEQ"]
[Thu Jul 30 14:58:07.452568 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgqAAAAEQ"]
[Thu Jul 30 14:58:07.473453 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stub/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/stub/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqQAAAEQ"]
[Thu Jul 30 14:58:07.473636 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/stub/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqQAAAEQ"]
[Thu Jul 30 14:58:07.473787 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgqQAAAEQ"]
[Thu Jul 30 14:58:07.493006 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helpers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/helpers/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqgAAAEQ"]
[Thu Jul 30 14:58:07.493198 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/helpers/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqgAAAEQ"]
[Thu Jul 30 14:58:07.493352 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgqgAAAEQ"]
[Thu Jul 30 14:58:07.514162 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helper/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/helper/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqwAAAEQ"]
[Thu Jul 30 14:58:07.514347 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/helper/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgqwAAAEQ"]
[Thu Jul 30 14:58:07.514520 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgqwAAAEQ"]
[Thu Jul 30 14:58:07.533848 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /utilities/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/utilities/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrAAAAEQ"]
[Thu Jul 30 14:58:07.534016 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/utilities/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrAAAAEQ"]
[Thu Jul 30 14:58:07.534177 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgrAAAAEQ"]
[Thu Jul 30 14:58:07.567176 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /utility/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/utility/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrQAAAEQ"]
[Thu Jul 30 14:58:07.567346 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/utility/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrQAAAEQ"]
[Thu Jul 30 14:58:07.567524 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgrQAAAEQ"]
[Thu Jul 30 14:58:07.588619 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/tools/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrgAAAEQ"]
[Thu Jul 30 14:58:07.588773 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/tools/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrgAAAEQ"]
[Thu Jul 30 14:58:07.588915 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgrgAAAEQ"]
[Thu Jul 30 14:58:07.611024 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tool/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/tool/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrwAAAEQ"]
[Thu Jul 30 14:58:07.611191 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/tool/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgrwAAAEQ"]
[Thu Jul 30 14:58:07.611344 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgrwAAAEQ"]
[Thu Jul 30 14:58:07.630027 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/scripts/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgsAAAAEQ"]
[Thu Jul 30 14:58:07.630214 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/scripts/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgsAAAAEQ"]
[Thu Jul 30 14:58:07.630363 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgsAAAAEQ"]
[Thu Jul 30 14:58:07.652569 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /script/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/script/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgsQAAAEQ"]
[Thu Jul 30 14:58:07.652707 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/script/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgsQAAAEQ"]
[Thu Jul 30 14:58:07.652860 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgsQAAAEQ"]
[Thu Jul 30 14:58:07.661757 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:38560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:07.661779 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:07.675601 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/bins/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgsgAAAEQ"]
[Thu Jul 30 14:58:07.675722 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/bins/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgsgAAAEQ"]
[Thu Jul 30 14:58:07.675862 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgsgAAAEQ"]
[Thu Jul 30 14:58:07.697582 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/bin/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgswAAAEQ"]
[Thu Jul 30 14:58:07.697734 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/bin/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgswAAAEQ"]
[Thu Jul 30 14:58:07.697890 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgswAAAEQ"]
[Thu Jul 30 14:58:07.717997 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /commands/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/commands/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgtAAAAEQ"]
[Thu Jul 30 14:58:07.718148 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/commands/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgtAAAAEQ"]
[Thu Jul 30 14:58:07.718293 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgtAAAAEQ"]
[Thu Jul 30 14:58:07.740826 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /command/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/command/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgtQAAAEQ"]
[Thu Jul 30 14:58:07.740983 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/command/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgtQAAAEQ"]
[Thu Jul 30 14:58:07.741160 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgtQAAAEQ"]
[Thu Jul 30 14:58:07.746684 2026] [ssl:error] [pid 3551093:tid 3551093] (EAI 2)Name or service not known: [client 144.76.19.72:38564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:07.746705 2026] [ssl:error] [pid 3551093:tid 3551093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:07.759118 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jobs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/jobs/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgtgAAAEQ"]
[Thu Jul 30 14:58:07.759280 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/jobs/.env"] [unique_id "amtYbyIR4tQ_nM5FPGzgtgAAAEQ"]
[Thu Jul 30 14:58:07.759437 2026] [security2:error] [pid 3574308:tid 3574308] [client 185.177.72.70:48394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYbyIR4tQ_nM5FPGzgtgAAAEQ"]
[Thu Jul 30 14:58:08.080503 2026] [authz_core:error] [pid 3583056:tid 3583056] [client 146.70.194.246:33048] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sitemaps/providers/error_log
[Thu Jul 30 14:58:09.047627 2026] [ssl:error] [pid 3574309:tid 3574309] (70014)End of file found: [client 216.73.216.199:16710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:09.554372 2026] [ssl:error] [pid 3575639:tid 3575639] (70014)End of file found: [client 216.73.216.199:64551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:09.568811 2026] [authz_core:error] [pid 3575490:tid 3575490] [client 146.70.194.246:33082] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/lib/error_log
[Thu Jul 30 14:58:09.941699 2026] [security2:error] [pid 3568093:tid 3568093] [client 149.86.152.251:49222] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYce8ppXJG7kyPz4fJYwAAACo"]
[Thu Jul 30 14:58:09.941758 2026] [security2:error] [pid 3568093:tid 3568093] [client 149.86.152.251:49222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYce8ppXJG7kyPz4fJYwAAACo"]
[Thu Jul 30 14:58:09.942033 2026] [security2:error] [pid 3568093:tid 3568093] [client 149.86.152.251:49222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYce8ppXJG7kyPz4fJYwAAACo"]
[Thu Jul 30 14:58:10.336261 2026] [access_compat:error] [pid 3583056:tid 3583056] [client 64.180.68.231:52697] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:10.802989 2026] [ssl:error] [pid 3577409:tid 3577409] (EAI 2)Name or service not known: [client 144.76.19.72:51560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:10.803027 2026] [ssl:error] [pid 3577409:tid 3577409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:10.856297 2026] [ssl:error] [pid 3565421:tid 3565421] (EAI 2)Name or service not known: [client 144.76.19.72:51576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:10.856327 2026] [ssl:error] [pid 3565421:tid 3565421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:10.940919 2026] [authz_core:error] [pid 3570686:tid 3570686] [client 146.70.194.246:46486] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/error_log
[Thu Jul 30 14:58:12.077366 2026] [authz_core:error] [pid 3574200:tid 3574200] [client 146.70.194.246:46498] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/error_log
[Thu Jul 30 14:58:12.975330 2026] [ssl:error] [pid 3574312:tid 3574312] (70014)End of file found: [client 216.73.216.199:59200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:13.172736 2026] [authz_core:error] [pid 3574200:tid 3574200] [client 146.70.194.246:46528] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/ChaCha20/error_log
[Thu Jul 30 14:58:13.628527 2026] [security2:error] [pid 3583058:tid 3583058] [client 41.90.172.76:17165] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYdT5OvvI3yMU4LstiuAAAACE"]
[Thu Jul 30 14:58:13.628584 2026] [security2:error] [pid 3583058:tid 3583058] [client 41.90.172.76:17165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYdT5OvvI3yMU4LstiuAAAACE"]
[Thu Jul 30 14:58:13.628844 2026] [security2:error] [pid 3583058:tid 3583058] [client 41.90.172.76:17165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYdT5OvvI3yMU4LstiuAAAACE"]
[Thu Jul 30 14:58:13.960258 2026] [ssl:error] [pid 3567988:tid 3567988] (EAI 2)Name or service not known: [client 144.76.19.72:51588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:13.960286 2026] [ssl:error] [pid 3567988:tid 3567988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:14.016786 2026] [ssl:error] [pid 3583019:tid 3583019] (EAI 2)Name or service not known: [client 144.76.19.72:51592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:14.016823 2026] [ssl:error] [pid 3583019:tid 3583019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:14.366196 2026] [core:error] [pid 3583059:tid 3583059] (13)Permission denied: [client 216.73.216.199:54067] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/task_group/alloc_calls
[Thu Jul 30 14:58:14.375763 2026] [authz_core:error] [pid 3583058:tid 3583058] [client 146.70.194.246:46550] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/Curve25519/error_log
[Thu Jul 30 14:58:14.798187 2026] [ssl:error] [pid 3583059:tid 3583059] (70014)End of file found: [client 216.73.216.199:54067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:15.366558 2026] [authz_core:error] [pid 3585927:tid 3585927] [client 146.70.194.246:46562] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/error_log
[Thu Jul 30 14:58:15.453581 2026] [security2:error] [pid 3583052:tid 3583052] [client 85.208.96.206:31234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5633.0.html"] [unique_id "amtYd_S5PDivSKB6nThZxgAAABI"]
[Thu Jul 30 14:58:15.701584 2026] [core:error] [pid 3583019:tid 3583019] (13)Permission denied: [client 216.73.216.199:46987] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-128/cpu_partial
[Thu Jul 30 14:58:16.522338 2026] [access_compat:error] [pid 3583057:tid 3583057] [client 64.180.68.231:53013] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:17.072570 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:51604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:17.072612 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:17.127455 2026] [ssl:error] [pid 3572795:tid 3572795] (EAI 2)Name or service not known: [client 144.76.19.72:51616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:17.127492 2026] [ssl:error] [pid 3572795:tid 3572795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:17.191644 2026] [authz_core:error] [pid 3562585:tid 3562585] [client 146.70.194.246:46630] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/namespaced/Core/Poly1305/error_log
[Thu Jul 30 14:58:17.213513 2026] [core:error] [pid 3583019:tid 3583019] (13)Permission denied: [client 216.73.216.199:46987] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_allocation_context/align
[Thu Jul 30 14:58:17.514627 2026] [ssl:error] [pid 3583019:tid 3583019] (70014)End of file found: [client 216.73.216.199:46987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:18.878277 2026] [authz_core:error] [pid 3562585:tid 3562585] [client 146.70.194.246:46688] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/error_log
[Thu Jul 30 14:58:19.626164 2026] [ssl:error] [pid 3568093:tid 3568093] (70014)End of file found: [client 216.73.216.199:56723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:19.840377 2026] [authz_core:error] [pid 3562585:tid 3562585] [client 146.70.194.246:46688] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/error_log
[Thu Jul 30 14:58:20.206745 2026] [ssl:error] [pid 3583058:tid 3583058] (EAI 2)Name or service not known: [client 144.76.19.72:61764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:20.206781 2026] [ssl:error] [pid 3583058:tid 3583058] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:20.266468 2026] [ssl:error] [pid 3565421:tid 3565421] (EAI 2)Name or service not known: [client 144.76.19.72:61770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:20.266494 2026] [ssl:error] [pid 3565421:tid 3565421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:20.973659 2026] [access_compat:error] [pid 3579760:tid 3579760] [client 64.180.68.231:53242] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:21.141223 2026] [ssl:error] [pid 3574252:tid 3574252] (70014)End of file found: [client 216.73.216.199:38389] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:21.970900 2026] [authz_core:error] [pid 3562585:tid 3562585] [client 146.70.194.246:60230] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/AES/error_log
[Thu Jul 30 14:58:22.841914 2026] [core:error] [pid 3583018:tid 3583018] (13)Permission denied: [client 216.73.216.199:46386] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/objects
[Thu Jul 30 14:58:23.249543 2026] [ssl:error] [pid 3583018:tid 3583018] (70014)End of file found: [client 216.73.216.199:46386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:23.349460 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:61780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:23.349490 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:23.410570 2026] [ssl:error] [pid 3538105:tid 3538105] (EAI 2)Name or service not known: [client 144.76.19.72:61792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:23.410630 2026] [ssl:error] [pid 3538105:tid 3538105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:24.145913 2026] [authz_core:error] [pid 3551093:tid 3551093] [client 146.70.194.246:60272] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/ChaCha20/error_log
[Thu Jul 30 14:58:24.821179 2026] [authz_core:error] [pid 3565723:tid 3565723] [client 89.155.246.201:34116] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 14:58:24.829022 2026] [authz_core:error] [pid 3565723:tid 3565723] [client 89.155.246.201:34116] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 14:58:25.277232 2026] [authz_core:error] [pid 3574306:tid 3574306] [client 146.70.194.246:5100] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/Curve25519/error_log
[Thu Jul 30 14:58:25.966288 2026] [ssl:error] [pid 3574309:tid 3574309] (70014)End of file found: [client 216.73.216.199:31111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:26.462495 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:61798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:26.462523 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:26.518485 2026] [ssl:error] [pid 3587201:tid 3587201] (EAI 2)Name or service not known: [client 144.76.19.72:61802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:26.518516 2026] [ssl:error] [pid 3587201:tid 3587201] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:27.184337 2026] [access_compat:error] [pid 3577409:tid 3577409] [client 64.180.68.231:53599] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:27.194013 2026] [core:error] [pid 3585928:tid 3585928] (13)Permission denied: [client 216.73.216.199:65326] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory112/node0/compact
[Thu Jul 30 14:58:27.804020 2026] [security2:error] [pid 3585928:tid 3585928] [client 216.73.216.199:65326] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.nodejs/yum_cache.dat"] [unique_id "amtYg3H3ZBh7PKcUzJzb7gAAABM"]
[Thu Jul 30 14:58:27.804322 2026] [security2:error] [pid 3585928:tid 3585928] [client 216.73.216.199:65326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.nodejs/yum_cache.dat"] [unique_id "amtYg3H3ZBh7PKcUzJzb7gAAABM"]
[Thu Jul 30 14:58:27.804564 2026] [security2:error] [pid 3585928:tid 3585928] [client 216.73.216.199:65326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.nodejs/yum_cache.dat"] [unique_id "amtYg3H3ZBh7PKcUzJzb7gAAABM"]
[Thu Jul 30 14:58:28.298855 2026] [authz_core:error] [pid 3583056:tid 3583056] [client 146.70.194.246:60366] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core/Poly1305/error_log
[Thu Jul 30 14:58:28.714366 2026] [ssl:error] [pid 3585928:tid 3585928] (70014)End of file found: [client 216.73.216.199:65326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:29.572760 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:33022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:29.572789 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:29.607834 2026] [core:error] [pid 3583058:tid 3583058] (13)Permission denied: [client 216.73.216.199:36755] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/validate
[Thu Jul 30 14:58:29.628444 2026] [ssl:error] [pid 3577559:tid 3577559] (EAI 2)Name or service not known: [client 144.76.19.72:33034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:29.628474 2026] [ssl:error] [pid 3577559:tid 3577559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:29.910318 2026] [ssl:error] [pid 3583058:tid 3583058] (70014)End of file found: [client 216.73.216.199:36755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:30.872176 2026] [authz_core:error] [pid 3571207:tid 3571207] [client 146.70.194.246:50034] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/error_log
[Thu Jul 30 14:58:31.550632 2026] [access_compat:error] [pid 3574252:tid 3574252] [client 64.180.68.231:53806] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:31.784728 2026] [authz_core:error] [pid 3587462:tid 3587462] [client 66.249.66.34:41688] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:58:31.787463 2026] [authz_core:error] [pid 3587462:tid 3587462] [client 66.249.66.34:41688] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:58:32.008085 2026] [access_compat:error] [pid 3587463:tid 3587463] [client 45.158.164.139:35602] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:58:32.079437 2026] [authz_core:error] [pid 3583052:tid 3583052] [client 146.70.194.246:50062] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/ChaCha20/error_log
[Thu Jul 30 14:58:32.782714 2026] [ssl:error] [pid 3587513:tid 3587513] (EAI 2)Name or service not known: [client 144.76.19.72:33046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:32.782754 2026] [ssl:error] [pid 3587513:tid 3587513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:32.838507 2026] [ssl:error] [pid 3587515:tid 3587515] (EAI 2)Name or service not known: [client 144.76.19.72:33058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:32.838545 2026] [ssl:error] [pid 3587515:tid 3587515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:32.928058 2026] [core:error] [pid 3574309:tid 3574309] (13)Permission denied: [client 216.73.216.199:28258] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/proc_dir_entry/align
[Thu Jul 30 14:58:33.229862 2026] [ssl:error] [pid 3574309:tid 3574309] (70014)End of file found: [client 216.73.216.199:28258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:33.311902 2026] [authz_core:error] [pid 3587513:tid 3587513] [client 146.70.194.246:50084] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/Curve25519/error_log
[Thu Jul 30 14:58:34.697514 2026] [security2:error] [pid 3587614:tid 3587614] [client 47.128.24.122:10246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtYiqBAuTlLyBkyUuwmowAAACg"]
[Thu Jul 30 14:58:35.749440 2026] [authz_core:error] [pid 3587654:tid 3587654] [client 146.70.194.246:50132] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sodium_compat/src/Core32/Poly1305/error_log
[Thu Jul 30 14:58:35.912703 2026] [ssl:error] [pid 3587513:tid 3587513] (EAI 2)Name or service not known: [client 144.76.19.72:33064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:35.912734 2026] [ssl:error] [pid 3587513:tid 3587513] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:35.967135 2026] [ssl:error] [pid 3572795:tid 3572795] (EAI 2)Name or service not known: [client 144.76.19.72:33070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:35.967161 2026] [ssl:error] [pid 3572795:tid 3572795] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:37.544001 2026] [ssl:error] [pid 3574308:tid 3574308] (70014)End of file found: [client 216.73.216.199:12074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:38.448743 2026] [ssl:error] [pid 3577559:tid 3577559] (70014)End of file found: [client 216.73.216.199:13452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:38.936205 2026] [ssl:error] [pid 3574306:tid 3574306] (70014)End of file found: [client 216.73.216.199:40808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:39.022352 2026] [ssl:error] [pid 3574252:tid 3574252] (EAI 2)Name or service not known: [client 144.76.19.72:33078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:39.022379 2026] [ssl:error] [pid 3574252:tid 3574252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:39.078797 2026] [ssl:error] [pid 3574312:tid 3574312] (EAI 2)Name or service not known: [client 144.76.19.72:33082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:39.078826 2026] [ssl:error] [pid 3574312:tid 3574312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:39.876224 2026] [authz_core:error] [pid 3577409:tid 3577409] [client 146.70.194.246:50204] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/theme-compat/error_log
[Thu Jul 30 14:58:39.906447 2026] [authz_core:error] [pid 3577409:tid 3577409] [client 146.70.194.246:50204] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/widgets/error_log
[Thu Jul 30 14:58:40.459830 2026] [cgi:error] [pid 3577558:tid 3577558] [client 20.203.133.142:37482] AH02812: stderr from /home/tompalm/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 14:58:41.481707 2026] [authz_core:error] [pid 3577558:tid 3577558] [client 20.203.133.142:37482] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/l10n/error_log
[Thu Jul 30 14:58:41.515670 2026] [access_compat:error] [pid 3577558:tid 3577558] [client 20.203.133.142:37482] AH01797: client denied by server configuration: /home/tompalm/public_html/wp-content/uploads/dlm_uploads/
[Thu Jul 30 14:58:42.099256 2026] [access_compat:error] [pid 3577409:tid 3577409] [client 64.180.68.231:54348] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:42.137328 2026] [ssl:error] [pid 3583019:tid 3583019] (EAI 2)Name or service not known: [client 144.76.19.72:22228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:42.137375 2026] [ssl:error] [pid 3583019:tid 3583019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:42.188839 2026] [ssl:error] [pid 3583021:tid 3583021] (EAI 2)Name or service not known: [client 144.76.19.72:22244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:42.188872 2026] [ssl:error] [pid 3583021:tid 3583021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:42.859032 2026] [ssl:error] [pid 3574312:tid 3574312] (70014)End of file found: [client 216.73.216.199:53853] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:44.472616 2026] [ssl:error] [pid 3565421:tid 3565421] (70014)End of file found: [client 216.73.216.199:32370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:45.242409 2026] [ssl:error] [pid 3566718:tid 3566718] (EAI 2)Name or service not known: [client 144.76.19.72:22258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:45.242448 2026] [ssl:error] [pid 3566718:tid 3566718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:45.295196 2026] [ssl:error] [pid 3585928:tid 3585928] (EAI 2)Name or service not known: [client 144.76.19.72:22266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:45.295228 2026] [ssl:error] [pid 3585928:tid 3585928] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:45.680978 2026] [ssl:error] [pid 3587513:tid 3587513] (70014)End of file found: [client 216.73.216.199:37160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:48.347867 2026] [ssl:error] [pid 3587054:tid 3587054] (EAI 2)Name or service not known: [client 144.76.19.72:22276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:48.347903 2026] [ssl:error] [pid 3587054:tid 3587054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:48.353894 2026] [access_compat:error] [pid 3571207:tid 3571207] [client 64.180.68.231:54674] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:48.401085 2026] [ssl:error] [pid 3569475:tid 3569475] (EAI 2)Name or service not known: [client 144.76.19.72:22286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:48.401121 2026] [ssl:error] [pid 3569475:tid 3569475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:48.991461 2026] [ssl:error] [pid 3587462:tid 3587462] (70014)End of file found: [client 216.73.216.199:43854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:51.457745 2026] [ssl:error] [pid 3565723:tid 3565723] (EAI 2)Name or service not known: [client 144.76.19.72:31388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:51.457774 2026] [ssl:error] [pid 3565723:tid 3565723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:51.515354 2026] [ssl:error] [pid 3567988:tid 3567988] (EAI 2)Name or service not known: [client 144.76.19.72:31390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:51.515382 2026] [ssl:error] [pid 3567988:tid 3567988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:52.609728 2026] [ssl:error] [pid 3575490:tid 3575490] (70014)End of file found: [client 216.73.216.199:9052] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:52.657781 2026] [access_compat:error] [pid 3567988:tid 3567988] [client 64.180.68.231:54885] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:52.914604 2026] [ssl:error] [pid 3587515:tid 3587515] (70014)End of file found: [client 216.73.216.199:32674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:53.363485 2026] [authz_core:error] [pid 3577558:tid 3577558] [client 20.203.133.142:37482] AH01630: client denied by server configuration: /home/tompalm/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 14:58:54.456554 2026] [security2:error] [pid 3583056:tid 3583056] [client 106.52.49.148:41368] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "georgehotelofstamford.com"] [uri "/"] [unique_id "amtYnu2phSCxuvlTpcC1PAAAAB4"]
[Thu Jul 30 14:58:54.759850 2026] [ssl:error] [pid 3588402:tid 3588402] (EAI 2)Name or service not known: [client 144.76.19.72:31392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:54.759892 2026] [ssl:error] [pid 3588402:tid 3588402] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:54.826422 2026] [ssl:error] [pid 3583056:tid 3583056] (EAI 2)Name or service not known: [client 144.76.19.72:31408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:54.826448 2026] [ssl:error] [pid 3583056:tid 3583056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:55.621334 2026] [ssl:error] [pid 3565723:tid 3565723] (70014)End of file found: [client 216.73.216.199:12912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:56.110497 2026] [security2:error] [pid 3588400:tid 3588400] [client 85.208.96.200:35298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,165.0/prev_next,prev.html"] [unique_id "amtYoAC_ynbB5VoM9YzmPwAAABU"]
[Thu Jul 30 14:58:57.883549 2026] [ssl:error] [pid 3571207:tid 3571207] (EAI 2)Name or service not known: [client 144.76.19.72:31418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:57.883583 2026] [ssl:error] [pid 3571207:tid 3571207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:57.938040 2026] [ssl:error] [pid 3588400:tid 3588400] (EAI 2)Name or service not known: [client 144.76.19.72:31420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:58:57.938083 2026] [ssl:error] [pid 3588400:tid 3588400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:58:58.101652 2026] [ssl:error] [pid 3587054:tid 3587054] (70014)End of file found: [client 216.73.216.199:37373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:58:58.153020 2026] [security2:error] [pid 3588435:tid 3588435] [client 85.208.96.206:12634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/custom-food-trailers-georgia"] [unique_id "amtYoo6XtJR0j8i9BULTFAAAACA"]
[Thu Jul 30 14:58:58.333486 2026] [core:error] [pid 3577559:tid 3577559] (13)Permission denied: [client 216.73.216.199:22830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu3/subsystem/drivers_probe
[Thu Jul 30 14:58:58.445587 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /job/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/job/.env"] [unique_id "amtYotCe5jia89Y58JuiHgAAABs"]
[Thu Jul 30 14:58:58.445817 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/job/.env"] [unique_id "amtYotCe5jia89Y58JuiHgAAABs"]
[Thu Jul 30 14:58:58.446028 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiHgAAABs"]
[Thu Jul 30 14:58:58.509223 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /events/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/events/.env"] [unique_id "amtYotCe5jia89Y58JuiHwAAABs"]
[Thu Jul 30 14:58:58.509462 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/events/.env"] [unique_id "amtYotCe5jia89Y58JuiHwAAABs"]
[Thu Jul 30 14:58:58.509662 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiHwAAABs"]
[Thu Jul 30 14:58:58.544051 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /event/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/event/.env"] [unique_id "amtYotCe5jia89Y58JuiIAAAABs"]
[Thu Jul 30 14:58:58.544271 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/event/.env"] [unique_id "amtYotCe5jia89Y58JuiIAAAABs"]
[Thu Jul 30 14:58:58.544452 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiIAAAABs"]
[Thu Jul 30 14:58:58.570122 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /listeners/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/listeners/.env"] [unique_id "amtYotCe5jia89Y58JuiIQAAABs"]
[Thu Jul 30 14:58:58.570300 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/listeners/.env"] [unique_id "amtYotCe5jia89Y58JuiIQAAABs"]
[Thu Jul 30 14:58:58.570468 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiIQAAABs"]
[Thu Jul 30 14:58:58.592783 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /listener/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/listener/.env"] [unique_id "amtYotCe5jia89Y58JuiIgAAABs"]
[Thu Jul 30 14:58:58.592974 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/listener/.env"] [unique_id "amtYotCe5jia89Y58JuiIgAAABs"]
[Thu Jul 30 14:58:58.593154 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiIgAAABs"]
[Thu Jul 30 14:58:58.615091 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /observers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/observers/.env"] [unique_id "amtYotCe5jia89Y58JuiIwAAABs"]
[Thu Jul 30 14:58:58.615262 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/observers/.env"] [unique_id "amtYotCe5jia89Y58JuiIwAAABs"]
[Thu Jul 30 14:58:58.615437 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiIwAAABs"]
[Thu Jul 30 14:58:58.645518 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /observer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/observer/.env"] [unique_id "amtYotCe5jia89Y58JuiJAAAABs"]
[Thu Jul 30 14:58:58.645695 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/observer/.env"] [unique_id "amtYotCe5jia89Y58JuiJAAAABs"]
[Thu Jul 30 14:58:58.645863 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiJAAAABs"]
[Thu Jul 30 14:58:58.666902 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /notifications/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/notifications/.env"] [unique_id "amtYotCe5jia89Y58JuiJQAAABs"]
[Thu Jul 30 14:58:58.667084 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/notifications/.env"] [unique_id "amtYotCe5jia89Y58JuiJQAAABs"]
[Thu Jul 30 14:58:58.667237 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiJQAAABs"]
[Thu Jul 30 14:58:58.696809 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /notification/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/notification/.env"] [unique_id "amtYotCe5jia89Y58JuiJgAAABs"]
[Thu Jul 30 14:58:58.697007 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/notification/.env"] [unique_id "amtYotCe5jia89Y58JuiJgAAABs"]
[Thu Jul 30 14:58:58.697182 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiJgAAABs"]
[Thu Jul 30 14:58:58.742785 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/mails/.env"] [unique_id "amtYotCe5jia89Y58JuiJwAAABs"]
[Thu Jul 30 14:58:58.742911 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/mails/.env"] [unique_id "amtYotCe5jia89Y58JuiJwAAABs"]
[Thu Jul 30 14:58:58.743085 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiJwAAABs"]
[Thu Jul 30 14:58:58.766957 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/mail/.env"] [unique_id "amtYotCe5jia89Y58JuiKAAAABs"]
[Thu Jul 30 14:58:58.767147 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/mail/.env"] [unique_id "amtYotCe5jia89Y58JuiKAAAABs"]
[Thu Jul 30 14:58:58.767301 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiKAAAABs"]
[Thu Jul 30 14:58:58.822272 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/http/.env"] [unique_id "amtYotCe5jia89Y58JuiKQAAABs"]
[Thu Jul 30 14:58:58.822459 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/http/.env"] [unique_id "amtYotCe5jia89Y58JuiKQAAABs"]
[Thu Jul 30 14:58:58.822624 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiKQAAABs"]
[Thu Jul 30 14:58:58.843935 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exceptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/exceptions/.env"] [unique_id "amtYotCe5jia89Y58JuiKgAAABs"]
[Thu Jul 30 14:58:58.844116 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/exceptions/.env"] [unique_id "amtYotCe5jia89Y58JuiKgAAABs"]
[Thu Jul 30 14:58:58.844270 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiKgAAABs"]
[Thu Jul 30 14:58:58.864202 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /policies/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/policies/.env"] [unique_id "amtYotCe5jia89Y58JuiKwAAABs"]
[Thu Jul 30 14:58:58.864346 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/policies/.env"] [unique_id "amtYotCe5jia89Y58JuiKwAAABs"]
[Thu Jul 30 14:58:58.864501 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiKwAAABs"]
[Thu Jul 30 14:58:58.883814 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /policy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/policy/.env"] [unique_id "amtYotCe5jia89Y58JuiLAAAABs"]
[Thu Jul 30 14:58:58.883951 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/policy/.env"] [unique_id "amtYotCe5jia89Y58JuiLAAAABs"]
[Thu Jul 30 14:58:58.884117 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiLAAAABs"]
[Thu Jul 30 14:58:58.917835 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/rules/.env"] [unique_id "amtYotCe5jia89Y58JuiLQAAABs"]
[Thu Jul 30 14:58:58.917984 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/rules/.env"] [unique_id "amtYotCe5jia89Y58JuiLQAAABs"]
[Thu Jul 30 14:58:58.918138 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiLQAAABs"]
[Thu Jul 30 14:58:58.939521 2026] [security2:error] [pid 3587515:tid 3587515] [client 178.104.197.250:52354] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amtYon0URqduQ8NZtQJFnwAAACc"]
[Thu Jul 30 14:58:58.943251 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rule/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/rule/.env"] [unique_id "amtYotCe5jia89Y58JuiLgAAABs"]
[Thu Jul 30 14:58:58.943385 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/rule/.env"] [unique_id "amtYotCe5jia89Y58JuiLgAAABs"]
[Thu Jul 30 14:58:58.943545 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiLgAAABs"]
[Thu Jul 30 14:58:58.967660 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /requests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/requests/.env"] [unique_id "amtYotCe5jia89Y58JuiLwAAABs"]
[Thu Jul 30 14:58:58.967818 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/requests/.env"] [unique_id "amtYotCe5jia89Y58JuiLwAAABs"]
[Thu Jul 30 14:58:58.967974 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiLwAAABs"]
[Thu Jul 30 14:58:58.987110 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /request/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/request/.env"] [unique_id "amtYotCe5jia89Y58JuiMAAAABs"]
[Thu Jul 30 14:58:58.987275 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/request/.env"] [unique_id "amtYotCe5jia89Y58JuiMAAAABs"]
[Thu Jul 30 14:58:58.987431 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYotCe5jia89Y58JuiMAAAABs"]
[Thu Jul 30 14:58:59.003101 2026] [access_compat:error] [pid 3587514:tid 3587514] [client 64.180.68.231:55210] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:58:59.009531 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources2/.env/.env.sendgrid.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/resources2/.env/.env.sendgrid.local"] [unique_id "amtYo9Ce5jia89Y58JuiMQAAABs"]
[Thu Jul 30 14:58:59.009699 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/resources2/.env/.env.sendgrid.local"] [unique_id "amtYo9Ce5jia89Y58JuiMQAAABs"]
[Thu Jul 30 14:58:59.009852 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiMQAAABs"]
[Thu Jul 30 14:58:59.052840 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.backup"] [unique_id "amtYo9Ce5jia89Y58JuiMgAAABs"]
[Thu Jul 30 14:58:59.053032 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.backup"] [unique_id "amtYo9Ce5jia89Y58JuiMgAAABs"]
[Thu Jul 30 14:58:59.053202 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiMgAAABs"]
[Thu Jul 30 14:58:59.072810 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.old"] [unique_id "amtYo9Ce5jia89Y58JuiMwAAABs"]
[Thu Jul 30 14:58:59.072974 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.old"] [unique_id "amtYo9Ce5jia89Y58JuiMwAAABs"]
[Thu Jul 30 14:58:59.073144 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiMwAAABs"]
[Thu Jul 30 14:58:59.084315 2026] [security2:error] [pid 3567988:tid 3567988] [client 185.191.171.7:49368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amtYo_fZVVqWn1wbi6atbgAAAA0"]
[Thu Jul 30 14:58:59.092734 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.dev"] [unique_id "amtYo9Ce5jia89Y58JuiNAAAABs"]
[Thu Jul 30 14:58:59.092917 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.dev"] [unique_id "amtYo9Ce5jia89Y58JuiNAAAABs"]
[Thu Jul 30 14:58:59.093084 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiNAAAABs"]
[Thu Jul 30 14:58:59.113214 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.prod"] [unique_id "amtYo9Ce5jia89Y58JuiNQAAABs"]
[Thu Jul 30 14:58:59.113384 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.prod"] [unique_id "amtYo9Ce5jia89Y58JuiNQAAABs"]
[Thu Jul 30 14:58:59.113543 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiNQAAABs"]
[Thu Jul 30 14:58:59.134515 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.staging"] [unique_id "amtYo9Ce5jia89Y58JuiNgAAABs"]
[Thu Jul 30 14:58:59.134700 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.staging"] [unique_id "amtYo9Ce5jia89Y58JuiNgAAABs"]
[Thu Jul 30 14:58:59.134861 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiNgAAABs"]
[Thu Jul 30 14:58:59.165918 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.test"] [unique_id "amtYo9Ce5jia89Y58JuiNwAAABs"]
[Thu Jul 30 14:58:59.166104 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.test"] [unique_id "amtYo9Ce5jia89Y58JuiNwAAABs"]
[Thu Jul 30 14:58:59.166258 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiNwAAABs"]
[Thu Jul 30 14:58:59.201348 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.example"] [unique_id "amtYo9Ce5jia89Y58JuiOAAAABs"]
[Thu Jul 30 14:58:59.201553 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.example"] [unique_id "amtYo9Ce5jia89Y58JuiOAAAABs"]
[Thu Jul 30 14:58:59.201715 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiOAAAABs"]
[Thu Jul 30 14:58:59.226253 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.sample"] [unique_id "amtYo9Ce5jia89Y58JuiOQAAABs"]
[Thu Jul 30 14:58:59.226437 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.sample"] [unique_id "amtYo9Ce5jia89Y58JuiOQAAABs"]
[Thu Jul 30 14:58:59.226592 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiOQAAABs"]
[Thu Jul 30 14:58:59.238221 2026] [authz_core:error] [pid 3574309:tid 3574309] [client 146.70.194.246:50212] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-admin/includes/error_log
[Thu Jul 30 14:58:59.246491 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.dist"] [unique_id "amtYo9Ce5jia89Y58JuiOgAAABs"]
[Thu Jul 30 14:58:59.246670 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.dist"] [unique_id "amtYo9Ce5jia89Y58JuiOgAAABs"]
[Thu Jul 30 14:58:59.246851 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiOgAAABs"]
[Thu Jul 30 14:58:59.265837 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.template"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.template"] [unique_id "amtYo9Ce5jia89Y58JuiOwAAABs"]
[Thu Jul 30 14:58:59.266003 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.template"] [unique_id "amtYo9Ce5jia89Y58JuiOwAAABs"]
[Thu Jul 30 14:58:59.266163 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiOwAAABs"]
[Thu Jul 30 14:58:59.291372 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.production"] [unique_id "amtYo9Ce5jia89Y58JuiPAAAABs"]
[Thu Jul 30 14:58:59.291555 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.production"] [unique_id "amtYo9Ce5jia89Y58JuiPAAAABs"]
[Thu Jul 30 14:58:59.291710 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiPAAAABs"]
[Thu Jul 30 14:58:59.322406 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.development"] [unique_id "amtYo9Ce5jia89Y58JuiPQAAABs"]
[Thu Jul 30 14:58:59.322584 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.development"] [unique_id "amtYo9Ce5jia89Y58JuiPQAAABs"]
[Thu Jul 30 14:58:59.322740 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiPQAAABs"]
[Thu Jul 30 14:58:59.344434 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.ci"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.ci"] [unique_id "amtYo9Ce5jia89Y58JuiPgAAABs"]
[Thu Jul 30 14:58:59.344624 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.ci"] [unique_id "amtYo9Ce5jia89Y58JuiPgAAABs"]
[Thu Jul 30 14:58:59.344774 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiPgAAABs"]
[Thu Jul 30 14:58:59.369920 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.docker"] [unique_id "amtYo9Ce5jia89Y58JuiPwAAABs"]
[Thu Jul 30 14:58:59.370111 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.docker"] [unique_id "amtYo9Ce5jia89Y58JuiPwAAABs"]
[Thu Jul 30 14:58:59.370257 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiPwAAABs"]
[Thu Jul 30 14:58:59.390649 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.k8s"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.k8s"] [unique_id "amtYo9Ce5jia89Y58JuiQAAAABs"]
[Thu Jul 30 14:58:59.390838 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.k8s"] [unique_id "amtYo9Ce5jia89Y58JuiQAAAABs"]
[Thu Jul 30 14:58:59.390986 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiQAAAABs"]
[Thu Jul 30 14:58:59.410132 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.heroku"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.heroku"] [unique_id "amtYo9Ce5jia89Y58JuiQQAAABs"]
[Thu Jul 30 14:58:59.410307 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.heroku"] [unique_id "amtYo9Ce5jia89Y58JuiQQAAABs"]
[Thu Jul 30 14:58:59.410473 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiQQAAABs"]
[Thu Jul 30 14:58:59.429507 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.aws"] [unique_id "amtYo9Ce5jia89Y58JuiQgAAABs"]
[Thu Jul 30 14:58:59.429680 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.aws"] [unique_id "amtYo9Ce5jia89Y58JuiQgAAABs"]
[Thu Jul 30 14:58:59.429844 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiQgAAABs"]
[Thu Jul 30 14:58:59.450131 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.gcp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.gcp"] [unique_id "amtYo9Ce5jia89Y58JuiQwAAABs"]
[Thu Jul 30 14:58:59.450296 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.gcp"] [unique_id "amtYo9Ce5jia89Y58JuiQwAAABs"]
[Thu Jul 30 14:58:59.450451 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiQwAAABs"]
[Thu Jul 30 14:58:59.474802 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.azure"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.azure"] [unique_id "amtYo9Ce5jia89Y58JuiRAAAABs"]
[Thu Jul 30 14:58:59.474977 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.azure"] [unique_id "amtYo9Ce5jia89Y58JuiRAAAABs"]
[Thu Jul 30 14:58:59.475151 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiRAAAABs"]
[Thu Jul 30 14:58:59.530740 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.secret"] [unique_id "amtYo9Ce5jia89Y58JuiRQAAABs"]
[Thu Jul 30 14:58:59.530923 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.secret"] [unique_id "amtYo9Ce5jia89Y58JuiRQAAABs"]
[Thu Jul 30 14:58:59.531088 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiRQAAABs"]
[Thu Jul 30 14:58:59.552830 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.secrets"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.secrets"] [unique_id "amtYo9Ce5jia89Y58JuiRgAAABs"]
[Thu Jul 30 14:58:59.552977 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.secrets"] [unique_id "amtYo9Ce5jia89Y58JuiRgAAABs"]
[Thu Jul 30 14:58:59.553142 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiRgAAABs"]
[Thu Jul 30 14:58:59.580456 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.private"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.private"] [unique_id "amtYo9Ce5jia89Y58JuiRwAAABs"]
[Thu Jul 30 14:58:59.580584 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.private"] [unique_id "amtYo9Ce5jia89Y58JuiRwAAABs"]
[Thu Jul 30 14:58:59.580728 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiRwAAABs"]
[Thu Jul 30 14:58:59.608876 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.key"] [unique_id "amtYo9Ce5jia89Y58JuiSAAAABs"]
[Thu Jul 30 14:58:59.609033 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.key"] [unique_id "amtYo9Ce5jia89Y58JuiSAAAABs"]
[Thu Jul 30 14:58:59.609202 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiSAAAABs"]
[Thu Jul 30 14:58:59.632577 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.keys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.keys"] [unique_id "amtYo9Ce5jia89Y58JuiSQAAABs"]
[Thu Jul 30 14:58:59.632718 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.keys"] [unique_id "amtYo9Ce5jia89Y58JuiSQAAABs"]
[Thu Jul 30 14:58:59.632857 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiSQAAABs"]
[Thu Jul 30 14:58:59.708395 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.token"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.token"] [unique_id "amtYo9Ce5jia89Y58JuiSgAAABs"]
[Thu Jul 30 14:58:59.708582 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.token"] [unique_id "amtYo9Ce5jia89Y58JuiSgAAABs"]
[Thu Jul 30 14:58:59.708750 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiSgAAABs"]
[Thu Jul 30 14:58:59.737724 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.api"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.api"] [unique_id "amtYo9Ce5jia89Y58JuiSwAAABs"]
[Thu Jul 30 14:58:59.737897 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.api"] [unique_id "amtYo9Ce5jia89Y58JuiSwAAABs"]
[Thu Jul 30 14:58:59.738051 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiSwAAABs"]
[Thu Jul 30 14:58:59.771658 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.override"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.override"] [unique_id "amtYo9Ce5jia89Y58JuiTAAAABs"]
[Thu Jul 30 14:58:59.771794 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.override"] [unique_id "amtYo9Ce5jia89Y58JuiTAAAABs"]
[Thu Jul 30 14:58:59.771933 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiTAAAABs"]
[Thu Jul 30 14:58:59.809278 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.master"] [unique_id "amtYo9Ce5jia89Y58JuiTQAAABs"]
[Thu Jul 30 14:58:59.809421 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.master"] [unique_id "amtYo9Ce5jia89Y58JuiTQAAABs"]
[Thu Jul 30 14:58:59.809559 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiTQAAABs"]
[Thu Jul 30 14:58:59.828631 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.main"] [unique_id "amtYo9Ce5jia89Y58JuiTgAAABs"]
[Thu Jul 30 14:58:59.828758 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.main"] [unique_id "amtYo9Ce5jia89Y58JuiTgAAABs"]
[Thu Jul 30 14:58:59.828891 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiTgAAABs"]
[Thu Jul 30 14:58:59.857427 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.current"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.current"] [unique_id "amtYo9Ce5jia89Y58JuiTwAAABs"]
[Thu Jul 30 14:58:59.857551 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.current"] [unique_id "amtYo9Ce5jia89Y58JuiTwAAABs"]
[Thu Jul 30 14:58:59.857686 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiTwAAABs"]
[Thu Jul 30 14:58:59.890540 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.release"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.release"] [unique_id "amtYo9Ce5jia89Y58JuiUAAAABs"]
[Thu Jul 30 14:58:59.890676 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.release"] [unique_id "amtYo9Ce5jia89Y58JuiUAAAABs"]
[Thu Jul 30 14:58:59.890820 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiUAAAABs"]
[Thu Jul 30 14:58:59.914146 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.deploy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.deploy"] [unique_id "amtYo9Ce5jia89Y58JuiUQAAABs"]
[Thu Jul 30 14:58:59.914290 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.deploy"] [unique_id "amtYo9Ce5jia89Y58JuiUQAAABs"]
[Thu Jul 30 14:58:59.914440 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYo9Ce5jia89Y58JuiUQAAABs"]
[Thu Jul 30 14:59:00.004583 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.cloud"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.cloud"] [unique_id "amtYpNCe5jia89Y58JuiUgAAABs"]
[Thu Jul 30 14:59:00.004755 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.cloud"] [unique_id "amtYpNCe5jia89Y58JuiUgAAABs"]
[Thu Jul 30 14:59:00.004909 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYpNCe5jia89Y58JuiUgAAABs"]
[Thu Jul 30 14:59:00.027998 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.1"] [unique_id "amtYpNCe5jia89Y58JuiUwAAABs"]
[Thu Jul 30 14:59:00.028171 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.1"] [unique_id "amtYpNCe5jia89Y58JuiUwAAABs"]
[Thu Jul 30 14:59:00.028319 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYpNCe5jia89Y58JuiUwAAABs"]
[Thu Jul 30 14:59:00.116185 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.2"] [unique_id "amtYpNCe5jia89Y58JuiVAAAABs"]
[Thu Jul 30 14:59:00.116384 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid.2"] [unique_id "amtYpNCe5jia89Y58JuiVAAAABs"]
[Thu Jul 30 14:59:00.116557 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYpNCe5jia89Y58JuiVAAAABs"]
[Thu Jul 30 14:59:00.135481 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_backup"] [unique_id "amtYpNCe5jia89Y58JuiVQAAABs"]
[Thu Jul 30 14:59:00.135654 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_backup"] [unique_id "amtYpNCe5jia89Y58JuiVQAAABs"]
[Thu Jul 30 14:59:00.135799 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYpNCe5jia89Y58JuiVQAAABs"]
[Thu Jul 30 14:59:00.205564 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_old"] [unique_id "amtYpNCe5jia89Y58JuiVgAAABs"]
[Thu Jul 30 14:59:00.205746 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_old"] [unique_id "amtYpNCe5jia89Y58JuiVgAAABs"]
[Thu Jul 30 14:59:00.205900 2026] [security2:error] [pid 3587409:tid 3587409] [client 185.177.72.70:6232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYpNCe5jia89Y58JuiVgAAABs"]
[Thu Jul 30 14:59:00.209335 2026] [security2:error] [pid 3588442:tid 3588442] [client 106.52.49.148:34586] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "georgehotelofstamford.com"] [uri "/"] [unique_id "amtYpNUOD3v3pgmXPwT6TgAAAC8"], referer: http://georgehotelofstamford.com
[Thu Jul 30 14:59:00.993893 2026] [ssl:error] [pid 3569021:tid 3569021] (EAI 2)Name or service not known: [client 144.76.19.72:58558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:00.993947 2026] [ssl:error] [pid 3569021:tid 3569021] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:01.045778 2026] [ssl:error] [pid 3587462:tid 3587462] (EAI 2)Name or service not known: [client 144.76.19.72:58568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:01.045821 2026] [ssl:error] [pid 3587462:tid 3587462] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:01.722249 2026] [security2:error] [pid 3588369:tid 3588369] [client 185.191.171.17:53478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg282/"] [unique_id "amtYpQMwcY0wlIF2thXn1wAAABA"]
[Thu Jul 30 14:59:01.961132 2026] [ssl:error] [pid 3577559:tid 3577559] (70014)End of file found: [client 216.73.216.199:22830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:02.870353 2026] [ssl:error] [pid 3587514:tid 3587514] (70014)End of file found: [client 216.73.216.199:45558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:03.153200 2026] [security2:error] [pid 3587614:tid 3587614] [client 106.52.49.148:43204] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amtYp6BAuTlLyBkyUuwmrQAAACg"], referer: https://georgehotelofstamford.com/
[Thu Jul 30 14:59:03.206008 2026] [access_compat:error] [pid 3588442:tid 3588442] [client 64.180.68.231:55421] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:04.083057 2026] [ssl:error] [pid 3583053:tid 3583053] (70014)End of file found: [client 216.73.216.199:41128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:04.098383 2026] [ssl:error] [pid 3574309:tid 3574309] (EAI 2)Name or service not known: [client 144.76.19.72:58598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:04.098403 2026] [ssl:error] [pid 3574309:tid 3574309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:04.151178 2026] [ssl:error] [pid 3587614:tid 3587614] (EAI 2)Name or service not known: [client 144.76.19.72:58602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:04.151206 2026] [ssl:error] [pid 3587614:tid 3587614] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:04.206820 2026] [access_compat:error] [pid 3565723:tid 3565723] [client 117.247.111.182:55588] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlrpc.php
[Thu Jul 30 14:59:04.206879 2026] [access_compat:error] [pid 3565723:tid 3565723] [client 117.247.111.182:55588] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 14:59:04.833354 2026] [security2:error] [pid 3574200:tid 3574200] [client 47.128.125.151:26966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtYqCnNsm-wWb_fOolQfQAAACQ"]
[Thu Jul 30 14:59:05.306911 2026] [authz_core:error] [pid 3588439:tid 3588439] [client 66.249.66.35:46031] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:59:05.309593 2026] [authz_core:error] [pid 3588439:tid 3588439] [client 66.249.66.35:46031] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:59:06.603687 2026] [ssl:error] [pid 3588436:tid 3588436] (70014)End of file found: [client 216.73.216.199:57646] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:06.725687 2026] [security2:error] [pid 3588875:tid 3588875] [client 185.177.72.70:56286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid_save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_save"] [unique_id "amtYqlfnn7-sdOUMrgR1cQAAAAQ"]
[Thu Jul 30 14:59:06.725913 2026] [security2:error] [pid 3588875:tid 3588875] [client 185.177.72.70:56286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_save"] [unique_id "amtYqlfnn7-sdOUMrgR1cQAAAAQ"]
[Thu Jul 30 14:59:06.726135 2026] [security2:error] [pid 3588875:tid 3588875] [client 185.177.72.70:56286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYqlfnn7-sdOUMrgR1cQAAAAQ"]
[Thu Jul 30 14:59:06.762689 2026] [security2:error] [pid 3588875:tid 3588875] [client 185.177.72.70:56286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_bak"] [unique_id "amtYqlfnn7-sdOUMrgR1cgAAAAQ"]
[Thu Jul 30 14:59:06.762865 2026] [security2:error] [pid 3588875:tid 3588875] [client 185.177.72.70:56286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swingaddiction.co.uk"] [uri "/.env.sendgrid_bak"] [unique_id "amtYqlfnn7-sdOUMrgR1cgAAAAQ"]
[Thu Jul 30 14:59:06.763044 2026] [security2:error] [pid 3588875:tid 3588875] [client 185.177.72.70:56286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "swingaddiction.co.uk"] [uri "/403.shtml"] [unique_id "amtYqlfnn7-sdOUMrgR1cgAAAAQ"]
[Thu Jul 30 14:59:06.798190 2026] [ssl:error] [pid 3588402:tid 3588402] (70014)End of file found: [client 216.73.216.199:63704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:07.209620 2026] [ssl:error] [pid 3587409:tid 3587409] (EAI 2)Name or service not known: [client 144.76.19.72:58612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:07.209651 2026] [ssl:error] [pid 3587409:tid 3587409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:07.292106 2026] [ssl:error] [pid 3583052:tid 3583052] (EAI 2)Name or service not known: [client 144.76.19.72:58620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:07.292147 2026] [ssl:error] [pid 3583052:tid 3583052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:07.295175 2026] [core:error] [pid 3587155:tid 3587155] (13)Permission denied: [client 216.73.216.199:22350] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS3/line
[Thu Jul 30 14:59:08.001737 2026] [access_compat:error] [pid 3574308:tid 3574308] [client 45.158.164.139:54892] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 14:59:08.303752 2026] [ssl:error] [pid 3587155:tid 3587155] (70014)End of file found: [client 216.73.216.199:22350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:09.393581 2026] [access_compat:error] [pid 3588443:tid 3588443] [client 64.180.68.231:55734] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:10.389522 2026] [ssl:error] [pid 3588438:tid 3588438] (EAI 2)Name or service not known: [client 144.76.19.72:40982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:10.389557 2026] [ssl:error] [pid 3588438:tid 3588438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:10.446625 2026] [ssl:error] [pid 3588368:tid 3588368] (EAI 2)Name or service not known: [client 144.76.19.72:40986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:10.446658 2026] [ssl:error] [pid 3588368:tid 3588368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:12.094372 2026] [security2:error] [pid 3588438:tid 3588438] [client 74.7.227.60:54374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.sewyork.co.uk"] [uri "/"] [unique_id "amtYsMMJ0OSsL6P9-nK0UwAAACw"]
[Thu Jul 30 14:59:12.094802 2026] [security2:error] [pid 3574309:tid 3574309] [client 127.0.0.1:37978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "amtYsE49R2nsmROWSOLqbAAAAEU"]
[Thu Jul 30 14:59:12.350585 2026] [authz_core:error] [pid 3588401:tid 3588401] [client 66.249.66.33:57007] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 14:59:12.353304 2026] [authz_core:error] [pid 3588401:tid 3588401] [client 66.249.66.33:57007] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 14:59:12.518575 2026] [core:error] [pid 3575639:tid 3575639] (13)Permission denied: [client 216.73.216.199:29180] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/bin/sudoreplay
[Thu Jul 30 14:59:13.056654 2026] [security2:error] [pid 3577409:tid 3577409] [client 45.148.10.120:49310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amtYsSfe1EQzYreFbwtrGQAAABY"]
[Thu Jul 30 14:59:13.056793 2026] [security2:error] [pid 3577409:tid 3577409] [client 45.148.10.120:49310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amtYsSfe1EQzYreFbwtrGQAAABY"]
[Thu Jul 30 14:59:13.056993 2026] [security2:error] [pid 3577409:tid 3577409] [client 45.148.10.120:49310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wotmania.spamp.co.uk"] [uri "/.env"] [unique_id "amtYsSfe1EQzYreFbwtrGQAAABY"]
[Thu Jul 30 14:59:13.121224 2026] [ssl:error] [pid 3575639:tid 3575639] (70014)End of file found: [client 216.73.216.199:29180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:13.418258 2026] [ssl:error] [pid 3588368:tid 3588368] (70014)End of file found: [client 216.73.216.199:63895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:13.502501 2026] [ssl:error] [pid 3574309:tid 3574309] (EAI 2)Name or service not known: [client 144.76.19.72:40996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:13.502533 2026] [ssl:error] [pid 3574309:tid 3574309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:13.555302 2026] [ssl:error] [pid 3588438:tid 3588438] (EAI 2)Name or service not known: [client 144.76.19.72:41006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:13.555342 2026] [ssl:error] [pid 3588438:tid 3588438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:13.780053 2026] [access_compat:error] [pid 3574312:tid 3574312] [client 64.180.68.231:55955] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:15.750206 2026] [ssl:error] [pid 3587515:tid 3587515] (70014)End of file found: [client 216.73.216.199:41038] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:16.352948 2026] [ssl:error] [pid 3565421:tid 3565421] (70014)End of file found: [client 216.73.216.199:38797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:16.610528 2026] [ssl:error] [pid 3574308:tid 3574308] (EAI 2)Name or service not known: [client 144.76.19.72:41010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:16.610558 2026] [ssl:error] [pid 3574308:tid 3574308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:16.665510 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:41022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:16.665540 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:17.256280 2026] [ssl:error] [pid 3570686:tid 3570686] (70014)End of file found: [client 216.73.216.199:20453] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:19.467297 2026] [security2:error] [pid 3575490:tid 3575490] [client 114.119.158.38:57029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574208000/request_format~html/cat_ids~102"] [unique_id "amtYt7EmvQ1NjMKd3kGySQAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E20-11-2019
[Thu Jul 30 14:59:19.745832 2026] [ssl:error] [pid 3574312:tid 3574312] (EAI 2)Name or service not known: [client 144.76.19.72:32790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:19.745873 2026] [ssl:error] [pid 3574312:tid 3574312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:19.797349 2026] [ssl:error] [pid 3588368:tid 3588368] (EAI 2)Name or service not known: [client 144.76.19.72:32806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:19.797377 2026] [ssl:error] [pid 3588368:tid 3588368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:20.009895 2026] [access_compat:error] [pid 3574308:tid 3574308] [client 64.180.68.231:56267] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:20.939844 2026] [security2:error] [pid 3588368:tid 3588368] [client 114.119.158.38:57043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574208000/request_format~html/cat_ids~102"] [unique_id "amtYuLoYGj_-baLcu9BfnQAAAA4"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E20-11-2019
[Thu Jul 30 14:59:21.663788 2026] [ssl:error] [pid 3587515:tid 3587515] (70014)End of file found: [client 216.73.216.199:15907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:22.354934 2026] [security2:error] [pid 3570686:tid 3570686] [client 106.54.62.156:40954] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.quantum.com.mt"] [uri "/"] [unique_id "amtYumJwskG4O4Cnx9qc3QAAABE"]
[Thu Jul 30 14:59:23.210754 2026] [ssl:error] [pid 3589477:tid 3589477] (EAI 2)Name or service not known: [client 144.76.19.72:32818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:23.210797 2026] [ssl:error] [pid 3589477:tid 3589477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:23.443882 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:32826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:23.443915 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:23.543250 2026] [authz_core:error] [pid 3588368:tid 3588368] [client 34.87.5.130:42742] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 14:59:23.543292 2026] [authz_core:error] [pid 3588368:tid 3588368] [client 34.87.5.130:42742] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 14:59:23.885030 2026] [ssl:error] [pid 3583052:tid 3583052] (70014)End of file found: [client 216.73.216.199:7227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:24.185725 2026] [ssl:error] [pid 3583056:tid 3583056] (70014)End of file found: [client 216.73.216.199:14912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:24.388331 2026] [access_compat:error] [pid 3575639:tid 3575639] [client 64.180.68.231:56486] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:25.029773 2026] [security2:error] [pid 3583058:tid 3583058] [client 85.208.96.193:25256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/robots.txt"] [unique_id "amtYvT5OvvI3yMU4LstjfgAAACE"]
[Thu Jul 30 14:59:25.800716 2026] [security2:error] [pid 3588436:tid 3588436] [client 185.191.171.5:65022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/lyric-f-1966-004/"] [unique_id "amtYvf4hG0kiDRc3ybGJygAAACk"]
[Thu Jul 30 14:59:26.498700 2026] [ssl:error] [pid 3588322:tid 3588322] (EAI 2)Name or service not known: [client 144.76.19.72:32828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:26.498735 2026] [ssl:error] [pid 3588322:tid 3588322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:26.555331 2026] [ssl:error] [pid 3589640:tid 3589640] (EAI 2)Name or service not known: [client 144.76.19.72:32836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:26.555358 2026] [ssl:error] [pid 3589640:tid 3589640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:27.193490 2026] [ssl:error] [pid 3588436:tid 3588436] (70014)End of file found: [client 216.73.216.199:59096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:29.217081 2026] [ssl:error] [pid 3588369:tid 3588369] (70014)End of file found: [client 216.73.216.199:44020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:29.612164 2026] [ssl:error] [pid 3589477:tid 3589477] (EAI 2)Name or service not known: [client 144.76.19.72:21260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:29.612193 2026] [ssl:error] [pid 3589477:tid 3589477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:29.677524 2026] [ssl:error] [pid 3583052:tid 3583052] (EAI 2)Name or service not known: [client 144.76.19.72:21274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:29.677559 2026] [ssl:error] [pid 3583052:tid 3583052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:29.692128 2026] [authz_core:error] [pid 3588400:tid 3588400] [client 51.120.70.186:15121] AH01630: client denied by server configuration: /home/pjjiss/public_html/wp-admin/maint/error_log
[Thu Jul 30 14:59:29.927420 2026] [ssl:error] [pid 3587155:tid 3587155] (70014)End of file found: [client 216.73.216.199:44992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:30.111906 2026] [security2:error] [pid 3574309:tid 3574309] [client 103.182.151.56:41340] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYwk49R2nsmROWSOLqdAAAAEU"]
[Thu Jul 30 14:59:30.111953 2026] [security2:error] [pid 3574309:tid 3574309] [client 103.182.151.56:41340] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYwk49R2nsmROWSOLqdAAAAEU"]
[Thu Jul 30 14:59:30.112229 2026] [security2:error] [pid 3574309:tid 3574309] [client 103.182.151.56:41340] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYwk49R2nsmROWSOLqdAAAAEU"]
[Thu Jul 30 14:59:32.733783 2026] [ssl:error] [pid 3588435:tid 3588435] (EAI 2)Name or service not known: [client 144.76.19.72:21284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:32.733823 2026] [ssl:error] [pid 3588435:tid 3588435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:32.786960 2026] [ssl:error] [pid 3588400:tid 3588400] (EAI 2)Name or service not known: [client 144.76.19.72:21290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:32.786986 2026] [ssl:error] [pid 3588400:tid 3588400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:32.991048 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/.env"] [unique_id "amtYxImX0JcX-GHRHtRO5wAAAAk"]
[Thu Jul 30 14:59:32.991193 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/.env"] [unique_id "amtYxImX0JcX-GHRHtRO5wAAAAk"]
[Thu Jul 30 14:59:32.991423 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/.env"] [unique_id "amtYxImX0JcX-GHRHtRO5wAAAAk"]
[Thu Jul 30 14:59:33.616729 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/.env.production"] [unique_id "amtYxYmX0JcX-GHRHtRO6AAAAAk"]
[Thu Jul 30 14:59:33.616856 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/.env.production"] [unique_id "amtYxYmX0JcX-GHRHtRO6AAAAAk"]
[Thu Jul 30 14:59:33.617059 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/.env.production"] [unique_id "amtYxYmX0JcX-GHRHtRO6AAAAAk"]
[Thu Jul 30 14:59:34.081271 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/application/.env"] [unique_id "amtYxomX0JcX-GHRHtRO6QAAAAk"]
[Thu Jul 30 14:59:34.081400 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/application/.env"] [unique_id "amtYxomX0JcX-GHRHtRO6QAAAAk"]
[Thu Jul 30 14:59:34.081712 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/application/.env"] [unique_id "amtYxomX0JcX-GHRHtRO6QAAAAk"]
[Thu Jul 30 14:59:34.743327 2026] [security2:error] [pid 3588400:tid 3588400] [client 177.105.119.134:44649] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYxgC_ynbB5VoM9YzmTgAAABU"]
[Thu Jul 30 14:59:34.743378 2026] [security2:error] [pid 3588400:tid 3588400] [client 177.105.119.134:44649] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYxgC_ynbB5VoM9YzmTgAAABU"]
[Thu Jul 30 14:59:34.743644 2026] [security2:error] [pid 3588400:tid 3588400] [client 177.105.119.134:44649] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYxgC_ynbB5VoM9YzmTgAAABU"]
[Thu Jul 30 14:59:34.761597 2026] [ssl:error] [pid 3583056:tid 3583056] (70014)End of file found: [client 216.73.216.199:5231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:34.978635 2026] [access_compat:error] [pid 3589637:tid 3589637] [client 64.180.68.231:57022] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:35.252040 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/prod/.env"] [unique_id "amtYx4mX0JcX-GHRHtRO6gAAAAk"]
[Thu Jul 30 14:59:35.252199 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/prod/.env"] [unique_id "amtYx4mX0JcX-GHRHtRO6gAAAAk"]
[Thu Jul 30 14:59:35.252447 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/prod/.env"] [unique_id "amtYx4mX0JcX-GHRHtRO6gAAAAk"]
[Thu Jul 30 14:59:35.271681 2026] [ssl:error] [pid 3569475:tid 3569475] (70014)End of file found: [client 216.73.216.199:6192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:35.503559 2026] [access_compat:error] [pid 3587155:tid 3587155] [client 45.158.164.139:33106] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 14:59:35.668625 2026] [ssl:error] [pid 3588400:tid 3588400] (70014)End of file found: [client 216.73.216.199:27653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:35.844672 2026] [ssl:error] [pid 3589638:tid 3589638] (EAI 2)Name or service not known: [client 144.76.19.72:21294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:35.844705 2026] [ssl:error] [pid 3589638:tid 3589638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:35.900565 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:21308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:35.900589 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:36.050831 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/.env.save"] [unique_id "amtYyImX0JcX-GHRHtRO6wAAAAk"]
[Thu Jul 30 14:59:36.050960 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/.env.save"] [unique_id "amtYyImX0JcX-GHRHtRO6wAAAAk"]
[Thu Jul 30 14:59:36.051177 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/.env.save"] [unique_id "amtYyImX0JcX-GHRHtRO6wAAAAk"]
[Thu Jul 30 14:59:36.500130 2026] [security2:error] [pid 3588322:tid 3588322] [client 85.208.96.200:25284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6294.0/prev_next,next.html"] [unique_id "amtYyEoRoiW_ZikY6gfLOgAAAAs"]
[Thu Jul 30 14:59:36.612872 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/beta/.env"] [unique_id "amtYyImX0JcX-GHRHtRO7AAAAAk"]
[Thu Jul 30 14:59:36.613000 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/beta/.env"] [unique_id "amtYyImX0JcX-GHRHtRO7AAAAAk"]
[Thu Jul 30 14:59:36.613226 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/beta/.env"] [unique_id "amtYyImX0JcX-GHRHtRO7AAAAAk"]
[Thu Jul 30 14:59:36.906653 2026] [access_compat:error] [pid 3589589:tid 3589589] [client 94.130.32.121:39530] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xmlrpc.php
[Thu Jul 30 14:59:37.327852 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/admin/.env"] [unique_id "amtYyYmX0JcX-GHRHtRO7QAAAAk"]
[Thu Jul 30 14:59:37.327979 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/admin/.env"] [unique_id "amtYyYmX0JcX-GHRHtRO7QAAAAk"]
[Thu Jul 30 14:59:37.328201 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/admin/.env"] [unique_id "amtYyYmX0JcX-GHRHtRO7QAAAAk"]
[Thu Jul 30 14:59:38.215975 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/app/.env"] [unique_id "amtYyomX0JcX-GHRHtRO7gAAAAk"]
[Thu Jul 30 14:59:38.216115 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/app/.env"] [unique_id "amtYyomX0JcX-GHRHtRO7gAAAAk"]
[Thu Jul 30 14:59:38.216332 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/app/.env"] [unique_id "amtYyomX0JcX-GHRHtRO7gAAAAk"]
[Thu Jul 30 14:59:38.517856 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/config/.env"] [unique_id "amtYyomX0JcX-GHRHtRO7wAAAAk"]
[Thu Jul 30 14:59:38.517986 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/config/.env"] [unique_id "amtYyomX0JcX-GHRHtRO7wAAAAk"]
[Thu Jul 30 14:59:38.518213 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/config/.env"] [unique_id "amtYyomX0JcX-GHRHtRO7wAAAAk"]
[Thu Jul 30 14:59:38.784764 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/api/.env"] [unique_id "amtYyomX0JcX-GHRHtRO8AAAAAk"]
[Thu Jul 30 14:59:38.784868 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/api/.env"] [unique_id "amtYyomX0JcX-GHRHtRO8AAAAAk"]
[Thu Jul 30 14:59:38.785060 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/api/.env"] [unique_id "amtYyomX0JcX-GHRHtRO8AAAAAk"]
[Thu Jul 30 14:59:38.955222 2026] [ssl:error] [pid 3577409:tid 3577409] (EAI 2)Name or service not known: [client 144.76.19.72:21320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:38.955251 2026] [ssl:error] [pid 3577409:tid 3577409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:39.011537 2026] [ssl:error] [pid 3589639:tid 3589639] (EAI 2)Name or service not known: [client 144.76.19.72:21330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:39.011565 2026] [ssl:error] [pid 3589639:tid 3589639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:39.264862 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampmusic.co.uk"] [uri "/laravel/.env"] [unique_id "amtYy4mX0JcX-GHRHtRO8QAAAAk"]
[Thu Jul 30 14:59:39.264991 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampmusic.co.uk"] [uri "/laravel/.env"] [unique_id "amtYy4mX0JcX-GHRHtRO8QAAAAk"]
[Thu Jul 30 14:59:39.265216 2026] [security2:error] [pid 3572795:tid 3572795] [client 161.153.121.253:53032] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampmusic.co.uk"] [uri "/laravel/.env"] [unique_id "amtYy4mX0JcX-GHRHtRO8QAAAAk"]
[Thu Jul 30 14:59:40.182387 2026] [security2:error] [pid 3588438:tid 3588438] [client 72.252.198.191:62322] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYzMMJ0OSsL6P9-nK0XAAAACw"]
[Thu Jul 30 14:59:40.182445 2026] [security2:error] [pid 3588438:tid 3588438] [client 72.252.198.191:62322] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtYzMMJ0OSsL6P9-nK0XAAAACw"]
[Thu Jul 30 14:59:40.182706 2026] [security2:error] [pid 3588438:tid 3588438] [client 72.252.198.191:62322] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtYzMMJ0OSsL6P9-nK0XAAAACw"]
[Thu Jul 30 14:59:40.793260 2026] [core:error] [pid 3574312:tid 3574312] (13)Permission denied: [client 216.73.216.199:44101] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/device/subsystem/drivers/alarmtimer/uevent
[Thu Jul 30 14:59:41.093680 2026] [ssl:error] [pid 3574312:tid 3574312] (70014)End of file found: [client 216.73.216.199:44101] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:41.710933 2026] [core:error] [pid 3590568:tid 3590568] (13)Permission denied: [client 216.73.216.199:6757] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/scsi_mod/uevent
[Thu Jul 30 14:59:42.099199 2026] [ssl:error] [pid 3590619:tid 3590619] (EAI 2)Name or service not known: [client 144.76.19.72:62834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:42.099243 2026] [ssl:error] [pid 3590619:tid 3590619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:42.151350 2026] [ssl:error] [pid 3588369:tid 3588369] (EAI 2)Name or service not known: [client 144.76.19.72:62838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:42.151385 2026] [ssl:error] [pid 3588369:tid 3588369] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:42.900706 2026] [ssl:error] [pid 3574200:tid 3574200] (70014)End of file found: [client 216.73.216.199:34015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:44.411137 2026] [core:error] [pid 3590568:tid 3590568] (13)Permission denied: [client 216.73.216.199:6757] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/ensure_autoenabled_features
[Thu Jul 30 14:59:45.208674 2026] [ssl:error] [pid 3575490:tid 3575490] (EAI 2)Name or service not known: [client 144.76.19.72:62842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:45.208704 2026] [ssl:error] [pid 3575490:tid 3575490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:45.265616 2026] [ssl:error] [pid 3587463:tid 3587463] (EAI 2)Name or service not known: [client 144.76.19.72:62846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:45.265654 2026] [ssl:error] [pid 3587463:tid 3587463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:45.481616 2026] [ssl:error] [pid 3590568:tid 3590568] (70014)End of file found: [client 216.73.216.199:6757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:45.536005 2026] [access_compat:error] [pid 3574308:tid 3574308] [client 64.180.68.231:57555] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:47.288228 2026] [ssl:error] [pid 3589588:tid 3589588] (70014)End of file found: [client 216.73.216.199:64319] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:48.328153 2026] [ssl:error] [pid 3588438:tid 3588438] (EAI 2)Name or service not known: [client 144.76.19.72:62862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:48.328183 2026] [ssl:error] [pid 3588438:tid 3588438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:48.382718 2026] [ssl:error] [pid 3588436:tid 3588436] (EAI 2)Name or service not known: [client 144.76.19.72:62870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:48.382767 2026] [ssl:error] [pid 3588436:tid 3588436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:48.386895 2026] [core:error] [pid 3577409:tid 3577409] (13)Permission denied: [client 216.73.216.199:63184] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/nft_reject_ipv4/uevent
[Thu Jul 30 14:59:48.496433 2026] [ssl:error] [pid 3577409:tid 3577409] (70014)End of file found: [client 216.73.216.199:63184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:49.261204 2026] [security2:error] [pid 3574312:tid 3574312] [client 114.119.152.119:30209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "broadcast-support.com"] [uri "/robots.txt"] [unique_id "amtY1S5eOtAv9UYByrC-MwAAAEg"], referer: http://broadcast-support.com/robots.txt
[Thu Jul 30 14:59:49.369215 2026] [security2:error] [pid 3588438:tid 3588438] [client 185.191.171.7:39962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6737.0.html"] [unique_id "amtY1cMJ0OSsL6P9-nK0YAAAACw"]
[Thu Jul 30 14:59:50.811579 2026] [ssl:error] [pid 3589637:tid 3589637] (70014)End of file found: [client 216.73.216.199:48705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:51.436330 2026] [ssl:error] [pid 3587463:tid 3587463] (EAI 2)Name or service not known: [client 144.76.19.72:30752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:51.436371 2026] [ssl:error] [pid 3587463:tid 3587463] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:51.490646 2026] [ssl:error] [pid 3588438:tid 3588438] (EAI 2)Name or service not known: [client 144.76.19.72:30754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:51.490671 2026] [ssl:error] [pid 3588438:tid 3588438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:51.738822 2026] [access_compat:error] [pid 3567988:tid 3567988] [client 64.180.68.231:57877] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:52.728286 2026] [ssl:error] [pid 3583056:tid 3583056] (70014)End of file found: [client 216.73.216.199:56207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:54.547334 2026] [ssl:error] [pid 3577409:tid 3577409] (EAI 2)Name or service not known: [client 144.76.19.72:30760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:54.547361 2026] [ssl:error] [pid 3577409:tid 3577409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:54.600321 2026] [ssl:error] [pid 3568093:tid 3568093] (EAI 2)Name or service not known: [client 144.76.19.72:30776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:54.600342 2026] [ssl:error] [pid 3568093:tid 3568093] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:55.184388 2026] [ssl:error] [pid 3577558:tid 3577558] (70014)End of file found: [client 216.73.216.199:65230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:56.119612 2026] [access_compat:error] [pid 3579760:tid 3579760] [client 64.180.68.231:58096] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 14:59:56.300277 2026] [ssl:error] [pid 3570686:tid 3570686] (70014)End of file found: [client 216.73.216.199:25132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:57.230154 2026] [cgi:error] [pid 3589588:tid 3589588] [client 170.85.62.187:50749] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 14:59:57.656731 2026] [ssl:error] [pid 3589637:tid 3589637] (EAI 2)Name or service not known: [client 144.76.19.72:30788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:57.656764 2026] [ssl:error] [pid 3589637:tid 3589637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:57.712941 2026] [ssl:error] [pid 3588368:tid 3588368] (EAI 2)Name or service not known: [client 144.76.19.72:30802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 14:59:57.712965 2026] [ssl:error] [pid 3588368:tid 3588368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 14:59:58.204364 2026] [core:error] [pid 3589640:tid 3589640] (13)Permission denied: [client 216.73.216.199:19272] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/evtech.uk.db
[Thu Jul 30 14:59:58.505736 2026] [ssl:error] [pid 3589640:tid 3589640] (70014)End of file found: [client 216.73.216.199:19272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 14:59:58.683416 2026] [security2:error] [pid 3588368:tid 3588368] [client 185.191.171.10:36838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/how-to-clean-a-moldy-clarinet"] [unique_id "amtY3roYGj_-baLcu9BfpgAAAA4"]
[Thu Jul 30 14:59:59.881762 2026] [authz_core:error] [pid 3589638:tid 3589638] [client 159.223.208.217:46062] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 14:59:59.882482 2026] [authz_core:error] [pid 3589638:tid 3589638] [client 159.223.208.217:46062] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 15:00:00.016333 2026] [authz_core:error] [pid 3589638:tid 3589638] [client 159.223.208.217:47340] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 15:00:00.017737 2026] [authz_core:error] [pid 3589638:tid 3589638] [client 159.223.208.217:47340] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 15:00:00.766956 2026] [ssl:error] [pid 3589550:tid 3589550] (EAI 2)Name or service not known: [client 144.76.19.72:55876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:00.766989 2026] [ssl:error] [pid 3589550:tid 3589550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:00.820010 2026] [ssl:error] [pid 3574306:tid 3574306] (EAI 2)Name or service not known: [client 144.76.19.72:55882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:00.820036 2026] [ssl:error] [pid 3574306:tid 3574306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:01.128514 2026] [security2:error] [pid 3590353:tid 3590353] [client 110.249.202.212:57110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/robots.txt"] [unique_id "amtY4ZZU2rFwAaxaHIGzPAAAACA"]
[Thu Jul 30 15:00:01.219515 2026] [ssl:error] [pid 3577558:tid 3577558] (70014)End of file found: [client 216.73.216.199:53054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:03.331810 2026] [security2:error] [pid 3568093:tid 3568093] [client 43.130.111.40:38702] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtY4-8ppXJG7kyPz4fJiQAAACo"]
[Thu Jul 30 15:00:03.876298 2026] [ssl:error] [pid 3587054:tid 3587054] (EAI 2)Name or service not known: [client 144.76.19.72:55892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:03.876338 2026] [ssl:error] [pid 3587054:tid 3587054] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:03.930562 2026] [ssl:error] [pid 3574309:tid 3574309] (EAI 2)Name or service not known: [client 144.76.19.72:55904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:03.930596 2026] [ssl:error] [pid 3574309:tid 3574309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:04.426891 2026] [ssl:error] [pid 3591586:tid 3591586] (70014)End of file found: [client 216.73.216.199:14532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:04.843359 2026] [ssl:error] [pid 3574306:tid 3574306] (70014)End of file found: [client 216.73.216.199:55398] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:05.021940 2026] [security2:error] [pid 3591874:tid 3591874] [client 43.130.111.40:40702] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtY5QSyeQwaN1C7zUw23wAAADI"], referer: http://blow-hairstudio.co.uk
[Thu Jul 30 15:00:05.287583 2026] [authz_core:error] [pid 3587463:tid 3587463] [client 66.249.66.34:41824] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:00:05.290221 2026] [authz_core:error] [pid 3587463:tid 3587463] [client 66.249.66.34:41824] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:00:06.649327 2026] [ssl:error] [pid 3565421:tid 3565421] (70014)End of file found: [client 216.73.216.199:43947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:06.673054 2026] [access_compat:error] [pid 3574308:tid 3574308] [client 64.180.68.231:58627] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:06.984597 2026] [ssl:error] [pid 3589588:tid 3589588] (EAI 2)Name or service not known: [client 144.76.19.72:55918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:06.984636 2026] [ssl:error] [pid 3589588:tid 3589588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:07.042215 2026] [ssl:error] [pid 3589637:tid 3589637] (EAI 2)Name or service not known: [client 144.76.19.72:55926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:07.042242 2026] [ssl:error] [pid 3589637:tid 3589637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:07.531674 2026] [security2:error] [pid 3577558:tid 3577558] [client 47.128.27.252:32548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/robots.txt"] [unique_id "amtY55KgtqQPFcNbkHOVxQAAABc"]
[Thu Jul 30 15:00:09.787324 2026] [access_compat:error] [pid 3577559:tid 3577559] [client 45.158.164.139:57564] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:00:10.130717 2026] [ssl:error] [pid 3569475:tid 3569475] (EAI 2)Name or service not known: [client 144.76.19.72:39144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:10.130750 2026] [ssl:error] [pid 3569475:tid 3569475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:10.200196 2026] [access_compat:error] [pid 3591586:tid 3591586] [client 45.158.164.139:57588] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:00:10.218541 2026] [ssl:error] [pid 3587155:tid 3587155] (EAI 2)Name or service not known: [client 144.76.19.72:39152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:10.218574 2026] [ssl:error] [pid 3587155:tid 3587155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:10.863235 2026] [ssl:error] [pid 3585805:tid 3585805] (70014)End of file found: [client 216.73.216.199:52610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:12.138327 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amtY7OqQ2JbvFplmA66dJwAAAAw"]
[Thu Jul 30 15:00:12.138477 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amtY7OqQ2JbvFplmA66dJwAAAAw"]
[Thu Jul 30 15:00:12.138672 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/.env"] [unique_id "amtY7OqQ2JbvFplmA66dJwAAAAw"]
[Thu Jul 30 15:00:12.399247 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/.env.production"] [unique_id "amtY7OqQ2JbvFplmA66dKAAAAAw"]
[Thu Jul 30 15:00:12.399334 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/.env.production"] [unique_id "amtY7OqQ2JbvFplmA66dKAAAAAw"]
[Thu Jul 30 15:00:12.399508 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/.env.production"] [unique_id "amtY7OqQ2JbvFplmA66dKAAAAAw"]
[Thu Jul 30 15:00:12.866021 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/application/.env"] [unique_id "amtY7OqQ2JbvFplmA66dKQAAAAw"]
[Thu Jul 30 15:00:12.866152 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/application/.env"] [unique_id "amtY7OqQ2JbvFplmA66dKQAAAAw"]
[Thu Jul 30 15:00:12.866332 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/application/.env"] [unique_id "amtY7OqQ2JbvFplmA66dKQAAAAw"]
[Thu Jul 30 15:00:12.868157 2026] [access_compat:error] [pid 3589477:tid 3589477] [client 64.180.68.231:58943] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:13.277522 2026] [ssl:error] [pid 3589550:tid 3589550] (EAI 2)Name or service not known: [client 144.76.19.72:39156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:13.277553 2026] [ssl:error] [pid 3589550:tid 3589550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:13.335816 2026] [ssl:error] [pid 3588322:tid 3588322] (EAI 2)Name or service not known: [client 144.76.19.72:39164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:13.335845 2026] [ssl:error] [pid 3588322:tid 3588322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:13.536728 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/prod/.env"] [unique_id "amtY7eqQ2JbvFplmA66dKgAAAAw"]
[Thu Jul 30 15:00:13.536852 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/prod/.env"] [unique_id "amtY7eqQ2JbvFplmA66dKgAAAAw"]
[Thu Jul 30 15:00:13.537031 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/prod/.env"] [unique_id "amtY7eqQ2JbvFplmA66dKgAAAAw"]
[Thu Jul 30 15:00:13.576562 2026] [ssl:error] [pid 3574312:tid 3574312] (70014)End of file found: [client 216.73.216.199:48305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:13.877770 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/.env.save"] [unique_id "amtY7eqQ2JbvFplmA66dKwAAAAw"]
[Thu Jul 30 15:00:13.877894 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/.env.save"] [unique_id "amtY7eqQ2JbvFplmA66dKwAAAAw"]
[Thu Jul 30 15:00:13.878055 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/.env.save"] [unique_id "amtY7eqQ2JbvFplmA66dKwAAAAw"]
[Thu Jul 30 15:00:13.881440 2026] [ssl:error] [pid 3591537:tid 3591537] (70014)End of file found: [client 216.73.216.199:55394] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:14.179846 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/beta/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLAAAAAw"]
[Thu Jul 30 15:00:14.179978 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/beta/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLAAAAAw"]
[Thu Jul 30 15:00:14.180180 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/beta/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLAAAAAw"]
[Thu Jul 30 15:00:14.635019 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/admin/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLQAAAAw"]
[Thu Jul 30 15:00:14.635178 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/admin/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLQAAAAw"]
[Thu Jul 30 15:00:14.635360 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/admin/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLQAAAAw"]
[Thu Jul 30 15:00:14.969929 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/app/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLgAAAAw"]
[Thu Jul 30 15:00:14.970055 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/app/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLgAAAAw"]
[Thu Jul 30 15:00:14.970251 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/app/.env"] [unique_id "amtY7uqQ2JbvFplmA66dLgAAAAw"]
[Thu Jul 30 15:00:15.433437 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/config/.env"] [unique_id "amtY7-qQ2JbvFplmA66dLwAAAAw"]
[Thu Jul 30 15:00:15.433585 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/config/.env"] [unique_id "amtY7-qQ2JbvFplmA66dLwAAAAw"]
[Thu Jul 30 15:00:15.433765 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/config/.env"] [unique_id "amtY7-qQ2JbvFplmA66dLwAAAAw"]
[Thu Jul 30 15:00:15.590159 2026] [ssl:error] [pid 3588442:tid 3588442] (70014)End of file found: [client 216.73.216.199:61413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:15.976520 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/api/.env"] [unique_id "amtY7-qQ2JbvFplmA66dMAAAAAw"]
[Thu Jul 30 15:00:15.976647 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/api/.env"] [unique_id "amtY7-qQ2JbvFplmA66dMAAAAAw"]
[Thu Jul 30 15:00:15.976812 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/api/.env"] [unique_id "amtY7-qQ2JbvFplmA66dMAAAAAw"]
[Thu Jul 30 15:00:16.057982 2026] [ssl:error] [pid 3585805:tid 3585805] (70014)End of file found: [client 216.73.216.199:63672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:16.287170 2026] [ssl:error] [pid 3585927:tid 3585927] (70014)End of file found: [client 216.73.216.199:61162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:16.437620 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spamp.co.uk"] [uri "/laravel/.env"] [unique_id "amtY8OqQ2JbvFplmA66dMQAAAAw"]
[Thu Jul 30 15:00:16.437753 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spamp.co.uk"] [uri "/laravel/.env"] [unique_id "amtY8OqQ2JbvFplmA66dMQAAAAw"]
[Thu Jul 30 15:00:16.437931 2026] [security2:error] [pid 3587155:tid 3587155] [client 161.153.121.253:55516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spamp.co.uk"] [uri "/laravel/.env"] [unique_id "amtY8OqQ2JbvFplmA66dMQAAAAw"]
[Thu Jul 30 15:00:16.765216 2026] [ssl:error] [pid 3592542:tid 3592542] (EAI 2)Name or service not known: [client 144.76.19.72:39172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:16.765254 2026] [ssl:error] [pid 3592542:tid 3592542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:16.873474 2026] [ssl:error] [pid 3577558:tid 3577558] (EAI 2)Name or service not known: [client 144.76.19.72:39182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:16.873499 2026] [ssl:error] [pid 3577558:tid 3577558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:17.294078 2026] [access_compat:error] [pid 3577558:tid 3577558] [client 64.180.68.231:59169] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:19.928744 2026] [ssl:error] [pid 3589637:tid 3589637] (EAI 2)Name or service not known: [client 144.76.19.72:30534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:19.928790 2026] [ssl:error] [pid 3589637:tid 3589637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:19.984324 2026] [ssl:error] [pid 3592588:tid 3592588] (EAI 2)Name or service not known: [client 144.76.19.72:30542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:19.984352 2026] [ssl:error] [pid 3592588:tid 3592588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:20.290842 2026] [security2:error] [pid 3592644:tid 3592644] [client 43.135.183.82:33934] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.org.uk"] [uri "/"] [unique_id "amtY9OhzyQ1ZKp-Wf64mTwAAADw"]
[Thu Jul 30 15:00:20.343967 2026] [security2:error] [pid 3592647:tid 3592647] [client 185.246.162.171:54988] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtY9Kb5WbfrDKoJsNkjgAAAAD8"]
[Thu Jul 30 15:00:20.344030 2026] [security2:error] [pid 3592647:tid 3592647] [client 185.246.162.171:54988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtY9Kb5WbfrDKoJsNkjgAAAAD8"]
[Thu Jul 30 15:00:20.344387 2026] [security2:error] [pid 3592647:tid 3592647] [client 185.246.162.171:54988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtY9Kb5WbfrDKoJsNkjgAAAAD8"]
[Thu Jul 30 15:00:20.507715 2026] [security2:error] [pid 3592541:tid 3592541] [client 43.133.91.48:59546] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.com"] [uri "/"] [unique_id "amtY9Ewwge3Nig1hRtj9bQAAAAo"]
[Thu Jul 30 15:00:21.001114 2026] [ssl:error] [pid 3592642:tid 3592642] (70014)End of file found: [client 216.73.216.199:65459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:21.881629 2026] [security2:error] [pid 3592648:tid 3592648] [client 43.135.183.82:34814] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amtY9VB5k7vqEFqLml7azgAAAEA"], referer: http://www.shelterforum.org.uk
[Thu Jul 30 15:00:22.349708 2026] [security2:error] [pid 3575639:tid 3575639] [client 43.133.91.48:57240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtY9v0ADDHRY8SvhXGeggAAAAY"], referer: http://spampmusic.com
[Thu Jul 30 15:00:22.617761 2026] [ssl:error] [pid 3577559:tid 3577559] (70014)End of file found: [client 216.73.216.199:1981] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:23.042327 2026] [ssl:error] [pid 3583059:tid 3583059] (EAI 2)Name or service not known: [client 144.76.19.72:30550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:23.042359 2026] [ssl:error] [pid 3583059:tid 3583059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:23.096503 2026] [ssl:error] [pid 3592649:tid 3592649] (EAI 2)Name or service not known: [client 144.76.19.72:30560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:23.096530 2026] [ssl:error] [pid 3592649:tid 3592649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:23.103271 2026] [core:error] [pid 3592588:tid 3592588] (13)Permission denied: [client 216.73.216.199:8169] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory66/node0/compact
[Thu Jul 30 15:00:23.552324 2026] [access_compat:error] [pid 3592643:tid 3592643] [client 64.180.68.231:59529] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:23.816958 2026] [security2:error] [pid 3592588:tid 3592588] [client 216.73.216.199:8169] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/russian/errmsg.sys"] [unique_id "amtY9z2oOSPbts5MqIJ-gwAAADY"]
[Thu Jul 30 15:00:23.817258 2026] [security2:error] [pid 3592588:tid 3592588] [client 216.73.216.199:8169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/russian/errmsg.sys"] [unique_id "amtY9z2oOSPbts5MqIJ-gwAAADY"]
[Thu Jul 30 15:00:23.817490 2026] [security2:error] [pid 3592588:tid 3592588] [client 216.73.216.199:8169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/russian/errmsg.sys"] [unique_id "amtY9z2oOSPbts5MqIJ-gwAAADY"]
[Thu Jul 30 15:00:24.229427 2026] [security2:error] [pid 3589640:tid 3589640] [client 179.60.75.8:16628] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtY-EtWCnpUKyRncWP-2gAAACY"]
[Thu Jul 30 15:00:24.229474 2026] [security2:error] [pid 3589640:tid 3589640] [client 179.60.75.8:16628] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtY-EtWCnpUKyRncWP-2gAAACY"]
[Thu Jul 30 15:00:24.229811 2026] [security2:error] [pid 3589640:tid 3589640] [client 179.60.75.8:16628] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtY-EtWCnpUKyRncWP-2gAAACY"]
[Thu Jul 30 15:00:24.721039 2026] [core:error] [pid 3592588:tid 3592588] (13)Permission denied: [client 216.73.216.199:8169] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory110/node0/compact
[Thu Jul 30 15:00:25.024668 2026] [security2:error] [pid 3592649:tid 3592649] [client 34.73.73.46:46506] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtY-UHBGv6twPuNlKce5QAAAEE"]
[Thu Jul 30 15:00:25.625331 2026] [ssl:error] [pid 3592588:tid 3592588] (70014)End of file found: [client 216.73.216.199:8169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:26.154054 2026] [ssl:error] [pid 3585805:tid 3585805] (EAI 2)Name or service not known: [client 144.76.19.72:30564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:26.154125 2026] [ssl:error] [pid 3585805:tid 3585805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:26.211902 2026] [ssl:error] [pid 3574306:tid 3574306] (EAI 2)Name or service not known: [client 144.76.19.72:30566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:26.211947 2026] [ssl:error] [pid 3574306:tid 3574306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:27.806620 2026] [access_compat:error] [pid 3592587:tid 3592587] [client 64.180.68.231:59763] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:28.136093 2026] [security2:error] [pid 3589637:tid 3589637] [client 14.190.133.227:58577] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtY_M5B8PN7uKSZ4aJMJAAAABM"]
[Thu Jul 30 15:00:28.136143 2026] [security2:error] [pid 3589637:tid 3589637] [client 14.190.133.227:58577] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtY_M5B8PN7uKSZ4aJMJAAAABM"]
[Thu Jul 30 15:00:28.136401 2026] [security2:error] [pid 3589637:tid 3589637] [client 14.190.133.227:58577] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtY_M5B8PN7uKSZ4aJMJAAAABM"]
[Thu Jul 30 15:00:29.131650 2026] [ssl:error] [pid 3592494:tid 3592494] (70014)End of file found: [client 216.73.216.199:7103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:29.268734 2026] [ssl:error] [pid 3574200:tid 3574200] (EAI 2)Name or service not known: [client 144.76.19.72:30574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:29.268764 2026] [ssl:error] [pid 3574200:tid 3574200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:29.323280 2026] [ssl:error] [pid 3577559:tid 3577559] (EAI 2)Name or service not known: [client 144.76.19.72:30578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:29.323313 2026] [ssl:error] [pid 3577559:tid 3577559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:29.401047 2026] [authz_core:error] [pid 3588401:tid 3588401] [client 158.158.38.215:24586] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:00:31.956293 2026] [ssl:error] [pid 3592643:tid 3592643] (70014)End of file found: [client 216.73.216.199:49917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:32.379179 2026] [ssl:error] [pid 3591584:tid 3591584] (EAI 2)Name or service not known: [client 144.76.19.72:31622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:32.379215 2026] [ssl:error] [pid 3591584:tid 3591584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:32.432595 2026] [ssl:error] [pid 3589639:tid 3589639] (EAI 2)Name or service not known: [client 144.76.19.72:31636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:32.432667 2026] [ssl:error] [pid 3589639:tid 3589639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:32.441339 2026] [ssl:error] [pid 3589640:tid 3589640] (70014)End of file found: [client 216.73.216.199:46824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:35.486260 2026] [ssl:error] [pid 3574200:tid 3574200] (EAI 2)Name or service not known: [client 144.76.19.72:31642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:35.486292 2026] [ssl:error] [pid 3574200:tid 3574200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:35.551679 2026] [ssl:error] [pid 3583059:tid 3583059] (EAI 2)Name or service not known: [client 144.76.19.72:31654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:35.551727 2026] [ssl:error] [pid 3583059:tid 3583059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:37.409798 2026] [cgi:error] [pid 3587155:tid 3587155] [client 158.158.32.229:5112] AH02812: stderr from /home/hatchw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:00:38.307921 2026] [access_compat:error] [pid 3574200:tid 3574200] [client 64.180.68.231:60295] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:38.585772 2026] [ssl:error] [pid 3591584:tid 3591584] (70014)End of file found: [client 216.73.216.199:36697] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:38.605114 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:31668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:38.605154 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:38.660015 2026] [ssl:error] [pid 3590458:tid 3590458] (EAI 2)Name or service not known: [client 144.76.19.72:31682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:38.660088 2026] [ssl:error] [pid 3590458:tid 3590458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:38.741678 2026] [access_compat:error] [pid 3589477:tid 3589477] [client 45.158.164.139:49604] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:00:39.089246 2026] [ssl:error] [pid 3589640:tid 3589640] (70014)End of file found: [client 216.73.216.199:22725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:40.392294 2026] [ssl:error] [pid 3577559:tid 3577559] (70014)End of file found: [client 216.73.216.199:1433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:40.458359 2026] [security2:error] [pid 3592588:tid 3592588] [client 47.128.35.95:63374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtZCD2oOSPbts5MqIJ-jQAAADY"]
[Thu Jul 30 15:00:41.715350 2026] [ssl:error] [pid 3592588:tid 3592588] (EAI 2)Name or service not known: [client 144.76.19.72:38386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:41.715383 2026] [ssl:error] [pid 3592588:tid 3592588] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:41.768643 2026] [ssl:error] [pid 3591537:tid 3591537] (EAI 2)Name or service not known: [client 144.76.19.72:38400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:41.768682 2026] [ssl:error] [pid 3591537:tid 3591537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:43.400031 2026] [security2:error] [pid 3567988:tid 3567988] [client 114.119.144.31:35037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574121600/request_format~html/cat_ids~104"] [unique_id "amtZC_fZVVqWn1wbi6atiwAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574121600/request_format~html
[Thu Jul 30 15:00:43.906624 2026] [ssl:error] [pid 3592649:tid 3592649] (70014)End of file found: [client 216.73.216.199:53432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:44.488529 2026] [ssl:error] [pid 3574306:tid 3574306] (70014)End of file found: [client 216.73.216.199:45843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:44.838796 2026] [ssl:error] [pid 3591586:tid 3591586] (EAI 2)Name or service not known: [client 144.76.19.72:38414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:44.838835 2026] [ssl:error] [pid 3591586:tid 3591586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:44.896671 2026] [ssl:error] [pid 3574200:tid 3574200] (EAI 2)Name or service not known: [client 144.76.19.72:38418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:44.896696 2026] [ssl:error] [pid 3574200:tid 3574200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:45.017903 2026] [access_compat:error] [pid 3567988:tid 3567988] [client 64.180.68.231:60626] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:45.226233 2026] [security2:error] [pid 3574200:tid 3574200] [client 114.119.144.31:35039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574121600/request_format~html/cat_ids~104"] [unique_id "amtZDSnNsm-wWb_fOolQ0AAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574121600/request_format~html
[Thu Jul 30 15:00:46.711908 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:55274] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/cagefsctl.log"] [unique_id "amtZDvfZVVqWn1wbi6atjgAAAA0"]
[Thu Jul 30 15:00:46.712231 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:55274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/cagefsctl.log"] [unique_id "amtZDvfZVVqWn1wbi6atjgAAAA0"]
[Thu Jul 30 15:00:46.712468 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:55274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/cagefsctl.log"] [unique_id "amtZDvfZVVqWn1wbi6atjgAAAA0"]
[Thu Jul 30 15:00:47.951925 2026] [ssl:error] [pid 3594168:tid 3594168] (EAI 2)Name or service not known: [client 144.76.19.72:38428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:47.951971 2026] [ssl:error] [pid 3594168:tid 3594168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:48.007395 2026] [ssl:error] [pid 3594169:tid 3594169] (EAI 2)Name or service not known: [client 144.76.19.72:38442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:48.007447 2026] [ssl:error] [pid 3594169:tid 3594169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:48.927748 2026] [access_compat:error] [pid 3592542:tid 3592542] [client 64.180.68.231:60828] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:49.124695 2026] [security2:error] [pid 3592648:tid 3592648] [client 43.165.198.144:50428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amtZEVB5k7vqEFqLml7a1AAAAEA"]
[Thu Jul 30 15:00:50.023684 2026] [ssl:error] [pid 3567988:tid 3567988] (70014)End of file found: [client 216.73.216.199:55274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:50.933106 2026] [ssl:error] [pid 3592648:tid 3592648] (70014)End of file found: [client 216.73.216.199:18269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:51.060009 2026] [ssl:error] [pid 3592541:tid 3592541] (EAI 2)Name or service not known: [client 144.76.19.72:47456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:51.060059 2026] [ssl:error] [pid 3592541:tid 3592541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:51.116516 2026] [ssl:error] [pid 3591537:tid 3591537] (EAI 2)Name or service not known: [client 144.76.19.72:47468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:51.116544 2026] [ssl:error] [pid 3591537:tid 3591537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:51.530586 2026] [ssl:error] [pid 3565421:tid 3565421] (70014)End of file found: [client 216.73.216.199:28360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:52.390978 2026] [authz_core:error] [pid 3590353:tid 3590353] [client 146.190.172.195:53376] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 15:00:53.259482 2026] [authz_core:error] [pid 3592643:tid 3592643] [client 146.190.172.195:39228] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 15:00:53.930539 2026] [core:error] [pid 3594170:tid 3594170] [client 66.249.66.8:39803] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:00:53.930566 2026] [core:error] [pid 3594170:tid 3594170] [client 66.249.66.8:39803] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:00:54.187802 2026] [ssl:error] [pid 3594037:tid 3594037] (EAI 2)Name or service not known: [client 144.76.19.72:47480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:54.187832 2026] [ssl:error] [pid 3594037:tid 3594037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:54.251571 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:47492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:54.251606 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:55.126524 2026] [access_compat:error] [pid 3588442:tid 3588442] [client 64.180.68.231:61146] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:00:55.330117 2026] [lsapi:warn] [pid 3567988:tid 3567988] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:00:55.367382 2026] [ssl:error] [pid 3570686:tid 3570686] (70014)End of file found: [client 216.73.216.199:49177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:56.045504 2026] [authz_core:error] [pid 3594169:tid 3594169] [client 66.249.66.33:51681] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:00:56.048165 2026] [authz_core:error] [pid 3594169:tid 3594169] [client 66.249.66.33:51681] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:00:57.305633 2026] [ssl:error] [pid 3592649:tid 3592649] (EAI 2)Name or service not known: [client 144.76.19.72:47496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:57.305666 2026] [ssl:error] [pid 3592649:tid 3592649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:57.360591 2026] [ssl:error] [pid 3592648:tid 3592648] (EAI 2)Name or service not known: [client 144.76.19.72:47508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:00:57.360622 2026] [ssl:error] [pid 3592648:tid 3592648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:00:58.490975 2026] [ssl:error] [pid 3590568:tid 3590568] (70014)End of file found: [client 216.73.216.199:58355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:58.786391 2026] [core:error] [pid 3587155:tid 3587155] (13)Permission denied: [client 216.73.216.199:3585] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory193/subsystem/uevent
[Thu Jul 30 15:00:59.088722 2026] [ssl:error] [pid 3587155:tid 3587155] (70014)End of file found: [client 216.73.216.199:3585] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:00:59.296305 2026] [security2:error] [pid 3592587:tid 3592587] [client 185.191.171.16:49492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/italy-us-election"] [unique_id "amtZG6DTlhIiB-dixeUk0AAAADU"]
[Thu Jul 30 15:00:59.533031 2026] [access_compat:error] [pid 3592400:tid 3592400] [client 64.180.68.231:61374] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:00.483596 2026] [ssl:error] [pid 3592587:tid 3592587] (EAI 2)Name or service not known: [client 144.76.19.72:34440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:00.483647 2026] [ssl:error] [pid 3592587:tid 3592587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:00.542160 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:34442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:00.542193 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:00.827920 2026] [core:error] [pid 3567988:tid 3567988] (13)Permission denied: [client 216.73.216.199:57060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory211/subsystem/uevent
[Thu Jul 30 15:01:01.231270 2026] [core:error] [pid 3567988:tid 3567988] (13)Permission denied: [client 216.73.216.199:57060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory165/subsystem/uevent
[Thu Jul 30 15:01:01.533005 2026] [core:error] [pid 3567988:tid 3567988] (13)Permission denied: [client 216.73.216.199:57060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory203/subsystem/uevent
[Thu Jul 30 15:01:01.833344 2026] [core:error] [pid 3567988:tid 3567988] (13)Permission denied: [client 216.73.216.199:57060] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory251/subsystem/uevent
[Thu Jul 30 15:01:02.438878 2026] [ssl:error] [pid 3567988:tid 3567988] (70014)End of file found: [client 216.73.216.199:57060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:03.596558 2026] [ssl:error] [pid 3592643:tid 3592643] (EAI 2)Name or service not known: [client 144.76.19.72:34458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:03.596598 2026] [ssl:error] [pid 3592643:tid 3592643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:03.650321 2026] [ssl:error] [pid 3590353:tid 3590353] (EAI 2)Name or service not known: [client 144.76.19.72:34466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:03.650355 2026] [ssl:error] [pid 3590353:tid 3590353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:03.874288 2026] [security2:error] [pid 3592644:tid 3592644] [client 216.73.216.199:56814] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/lvectl.log"] [unique_id "amtZH-hzyQ1ZKp-Wf64mXQAAADw"]
[Thu Jul 30 15:01:03.874583 2026] [security2:error] [pid 3592644:tid 3592644] [client 216.73.216.199:56814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/lvectl.log"] [unique_id "amtZH-hzyQ1ZKp-Wf64mXQAAADw"]
[Thu Jul 30 15:01:03.874803 2026] [security2:error] [pid 3592644:tid 3592644] [client 216.73.216.199:56814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cloudlinux/lvectl.log"] [unique_id "amtZH-hzyQ1ZKp-Wf64mXQAAADw"]
[Thu Jul 30 15:01:04.248764 2026] [security2:error] [pid 3565421:tid 3565421] [client 185.191.171.11:38510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9352.0/prev_next,prev.html"] [unique_id "amtZIAxraSSX7jgFNEgwsgAAAAU"]
[Thu Jul 30 15:01:04.271814 2026] [ssl:error] [pid 3592644:tid 3592644] (70014)End of file found: [client 216.73.216.199:56814] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:05.491498 2026] [core:error] [pid 3592648:tid 3592648] (13)Permission denied: [client 216.73.216.199:37429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory134/subsystem/uevent
[Thu Jul 30 15:01:06.101675 2026] [ssl:error] [pid 3592648:tid 3592648] (70014)End of file found: [client 216.73.216.199:37429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:06.739544 2026] [ssl:error] [pid 3592400:tid 3592400] (EAI 2)Name or service not known: [client 144.76.19.72:34472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:06.739580 2026] [ssl:error] [pid 3592400:tid 3592400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:06.791611 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:34478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:06.791643 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:07.800254 2026] [core:error] [pid 3583053:tid 3583053] (13)Permission denied: [client 216.73.216.199:36491] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory71/node0/compact
[Thu Jul 30 15:01:08.789208 2026] [authz_core:error] [pid 3592588:tid 3592588] [client 66.249.66.34:58701] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:01:08.791869 2026] [authz_core:error] [pid 3592588:tid 3592588] [client 66.249.66.34:58701] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:01:08.835140 2026] [ssl:error] [pid 3583053:tid 3583053] (70014)End of file found: [client 216.73.216.199:36491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:09.890542 2026] [ssl:error] [pid 3592400:tid 3592400] (EAI 2)Name or service not known: [client 144.76.19.72:47516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:09.890568 2026] [ssl:error] [pid 3592400:tid 3592400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:09.944146 2026] [ssl:error] [pid 3589640:tid 3589640] (EAI 2)Name or service not known: [client 144.76.19.72:47522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:09.944169 2026] [ssl:error] [pid 3589640:tid 3589640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:10.054014 2026] [ssl:error] [pid 3594100:tid 3594100] (70014)End of file found: [client 216.73.216.199:33987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:10.111861 2026] [access_compat:error] [pid 3577558:tid 3577558] [client 64.180.68.231:61917] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:11.447026 2026] [ssl:error] [pid 3589640:tid 3589640] (70014)End of file found: [client 216.73.216.199:18596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:11.762833 2026] [security2:error] [pid 3592587:tid 3592587] [client 74.7.241.8:46456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.sewyork.co.uk"] [uri "/"] [unique_id "amtZJ6DTlhIiB-dixeUk0gAAADU"]
[Thu Jul 30 15:01:12.795670 2026] [access_compat:error] [pid 3589639:tid 3589639] [client 45.158.164.139:56384] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:01:13.000677 2026] [ssl:error] [pid 3592643:tid 3592643] (EAI 2)Name or service not known: [client 144.76.19.72:47534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:13.000701 2026] [ssl:error] [pid 3592643:tid 3592643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:13.053739 2026] [ssl:error] [pid 3587155:tid 3587155] (EAI 2)Name or service not known: [client 144.76.19.72:47550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:13.053767 2026] [ssl:error] [pid 3587155:tid 3587155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:13.411815 2026] [access_compat:error] [pid 3592649:tid 3592649] [client 45.158.164.139:56388] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:01:14.448157 2026] [security2:error] [pid 3595642:tid 3595642] [client 43.130.31.17:44422] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "josephashmore.org"] [uri "/"] [unique_id "amtZKr-RFtYYvVY4u-oDqAAAAAY"]
[Thu Jul 30 15:01:15.847309 2026] [ssl:error] [pid 3592541:tid 3592541] (70014)End of file found: [client 216.73.216.199:40037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:16.139784 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:47552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:16.139826 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:16.195890 2026] [ssl:error] [pid 3594100:tid 3594100] (EAI 2)Name or service not known: [client 144.76.19.72:47560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:16.195919 2026] [ssl:error] [pid 3594100:tid 3594100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:16.282328 2026] [access_compat:error] [pid 3589639:tid 3589639] [client 64.180.68.231:62231] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:16.382581 2026] [ssl:error] [pid 3591537:tid 3591537] (70014)End of file found: [client 216.73.216.199:15944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:17.421112 2026] [ssl:error] [pid 3587463:tid 3587463] (70014)End of file found: [client 216.73.216.199:46394] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:18.965225 2026] [security2:error] [pid 3594099:tid 3594099] [client 170.106.180.246:35836] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "acthoroughbreds.com"] [uri "/"] [unique_id "amtZLnihTSllB9L0qCySuwAAAAE"]
[Thu Jul 30 15:01:18.965841 2026] [authz_core:error] [pid 3594099:tid 3594099] [client 170.106.180.246:35836] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 15:01:18.965875 2026] [authz_core:error] [pid 3594099:tid 3594099] [client 170.106.180.246:35836] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 15:01:19.251266 2026] [ssl:error] [pid 3592033:tid 3592033] (EAI 2)Name or service not known: [client 144.76.19.72:47562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:19.251305 2026] [ssl:error] [pid 3592033:tid 3592033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:19.308260 2026] [ssl:error] [pid 3590619:tid 3590619] (EAI 2)Name or service not known: [client 144.76.19.72:47576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:19.308292 2026] [ssl:error] [pid 3590619:tid 3590619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:20.553014 2026] [security2:error] [pid 3594361:tid 3594361] [client 185.191.171.3:64694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4372.0.html"] [unique_id "amtZMP2TBt-MqPctwVNwJAAAABA"]
[Thu Jul 30 15:01:20.685083 2026] [access_compat:error] [pid 3592587:tid 3592587] [client 64.180.68.231:62455] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:20.914155 2026] [security2:error] [pid 3592647:tid 3592647] [client 187.228.59.203:37070] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZMKb5WbfrDKoJsNkjjgAAAD8"]
[Thu Jul 30 15:01:20.914206 2026] [security2:error] [pid 3592647:tid 3592647] [client 187.228.59.203:37070] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZMKb5WbfrDKoJsNkjjgAAAD8"]
[Thu Jul 30 15:01:20.914453 2026] [security2:error] [pid 3592647:tid 3592647] [client 187.228.59.203:37070] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZMKb5WbfrDKoJsNkjjgAAAD8"]
[Thu Jul 30 15:01:21.256851 2026] [ssl:error] [pid 3590619:tid 3590619] (70014)End of file found: [client 216.73.216.199:59412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:22.129098 2026] [security2:error] [pid 3594169:tid 3594169] [client 150.5.132.53:15707] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZMj7dpbVPkPV9xTDDZwAAAAc"]
[Thu Jul 30 15:01:22.129147 2026] [security2:error] [pid 3594169:tid 3594169] [client 150.5.132.53:15707] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZMj7dpbVPkPV9xTDDZwAAAAc"]
[Thu Jul 30 15:01:22.129395 2026] [security2:error] [pid 3594169:tid 3594169] [client 150.5.132.53:15707] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZMj7dpbVPkPV9xTDDZwAAAAc"]
[Thu Jul 30 15:01:22.365532 2026] [ssl:error] [pid 3565421:tid 3565421] (EAI 2)Name or service not known: [client 144.76.19.72:59588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:22.365568 2026] [ssl:error] [pid 3565421:tid 3565421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:22.419609 2026] [ssl:error] [pid 3592033:tid 3592033] (EAI 2)Name or service not known: [client 144.76.19.72:59596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:22.419642 2026] [ssl:error] [pid 3592033:tid 3592033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:22.573710 2026] [ssl:error] [pid 3574306:tid 3574306] (70014)End of file found: [client 216.73.216.199:36892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:23.787156 2026] [ssl:error] [pid 3591537:tid 3591537] (70014)End of file found: [client 216.73.216.199:11907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:25.142276 2026] [ssl:error] [pid 3585927:tid 3585927] (70014)End of file found: [client 216.73.216.199:27104] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:25.474320 2026] [ssl:error] [pid 3592033:tid 3592033] (EAI 2)Name or service not known: [client 144.76.19.72:59606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:25.474362 2026] [ssl:error] [pid 3592033:tid 3592033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:25.526193 2026] [ssl:error] [pid 3570686:tid 3570686] (EAI 2)Name or service not known: [client 144.76.19.72:59618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:25.526226 2026] [ssl:error] [pid 3570686:tid 3570686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:26.905269 2026] [access_compat:error] [pid 3594361:tid 3594361] [client 64.180.68.231:62768] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:26.979347 2026] [security2:error] [pid 3596517:tid 3596517] [client 150.5.132.53:29691] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZNspP_fEFTjhSziAPUwAAAAE"]
[Thu Jul 30 15:01:26.979406 2026] [security2:error] [pid 3596517:tid 3596517] [client 150.5.132.53:29691] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZNspP_fEFTjhSziAPUwAAAAE"]
[Thu Jul 30 15:01:26.979731 2026] [security2:error] [pid 3596517:tid 3596517] [client 150.5.132.53:29691] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZNspP_fEFTjhSziAPUwAAAAE"]
[Thu Jul 30 15:01:27.366231 2026] [ssl:error] [pid 3588442:tid 3588442] (70014)End of file found: [client 216.73.216.199:36727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:28.582208 2026] [ssl:error] [pid 3592643:tid 3592643] (EAI 2)Name or service not known: [client 144.76.19.72:59628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:28.582233 2026] [ssl:error] [pid 3592643:tid 3592643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:28.639546 2026] [ssl:error] [pid 3574306:tid 3574306] (EAI 2)Name or service not known: [client 144.76.19.72:59630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:28.639571 2026] [ssl:error] [pid 3574306:tid 3574306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:29.193626 2026] [core:error] [pid 3565421:tid 3565421] (13)Permission denied: [client 216.73.216.199:23338] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/cpu/devices/cpu6/crash_notes
[Thu Jul 30 15:01:30.415013 2026] [core:error] [pid 3565421:tid 3565421] (13)Permission denied: [client 216.73.216.199:23338] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/kprobe/subsystem/drivers_probe
[Thu Jul 30 15:01:31.318508 2026] [access_compat:error] [pid 3592643:tid 3592643] [client 64.180.68.231:62991] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:31.472663 2026] [core:error] [pid 3587463:tid 3587463] [client 74.7.230.58:57992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/robots.txt
[Thu Jul 30 15:01:31.472684 2026] [core:error] [pid 3587463:tid 3587463] [client 74.7.230.58:57992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://dev.highclereracing.co.uk/robots.txt
[Thu Jul 30 15:01:31.695585 2026] [ssl:error] [pid 3567988:tid 3567988] (EAI 2)Name or service not known: [client 144.76.19.72:37054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:31.695617 2026] [ssl:error] [pid 3567988:tid 3567988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:31.751228 2026] [ssl:error] [pid 3594100:tid 3594100] (EAI 2)Name or service not known: [client 144.76.19.72:37058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:31.751254 2026] [ssl:error] [pid 3594100:tid 3594100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:32.231958 2026] [core:error] [pid 3591537:tid 3591537] (13)Permission denied: [client 216.73.216.199:9280] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty11/subsystem/ttyS2/close_delay
[Thu Jul 30 15:01:34.042463 2026] [core:error] [pid 3591537:tid 3591537] (13)Permission denied: [client 216.73.216.199:9280] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/clientseodata.com.db
[Thu Jul 30 15:01:34.805496 2026] [ssl:error] [pid 3577558:tid 3577558] (EAI 2)Name or service not known: [client 144.76.19.72:37072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:34.805524 2026] [ssl:error] [pid 3577558:tid 3577558] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:34.875773 2026] [ssl:error] [pid 3589639:tid 3589639] (EAI 2)Name or service not known: [client 144.76.19.72:37084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:34.875817 2026] [ssl:error] [pid 3589639:tid 3589639] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:34.949657 2026] [core:error] [pid 3565421:tid 3565421] (13)Permission denied: [client 216.73.216.199:23338] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS2/uartclk
[Thu Jul 30 15:01:35.131765 2026] [security2:error] [pid 3567988:tid 3567988] [client 43.160.219.206:46080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "amtZP_fZVVqWn1wbi6at2wAAAA0"]
[Thu Jul 30 15:01:35.358773 2026] [security2:error] [pid 3589637:tid 3589637] [client 170.106.65.93:56150] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtZP85B8PN7uKSZ4aJMagAAABM"]
[Thu Jul 30 15:01:35.848588 2026] [ssl:error] [pid 3591537:tid 3591537] (5)Input/output error: [client 216.73.216.199:9280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:36.153355 2026] [core:error] [pid 3565421:tid 3565421] (13)Permission denied: [client 216.73.216.199:23338] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS3/flags
[Thu Jul 30 15:01:36.625995 2026] [security2:error] [pid 3594170:tid 3594170] [client 170.106.65.93:56804] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtZQJTzQhlZxOb821WJlgAAAAs"], referer: http://rogersbarbershopltd.co.uk
[Thu Jul 30 15:01:36.928573 2026] [security2:error] [pid 3574200:tid 3574200] [client 43.160.219.206:35416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chateausaintjeannet.com"] [uri "/"] [unique_id "amtZQCnNsm-wWb_fOolRnAAAACQ"], referer: http://www.chateausaintjeannet.com
[Thu Jul 30 15:01:37.660018 2026] [core:error] [pid 3565421:tid 3565421] (13)Permission denied: [client 216.73.216.199:23338] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:64/closing_wait
[Thu Jul 30 15:01:37.943269 2026] [ssl:error] [pid 3594170:tid 3594170] (EAI 2)Name or service not known: [client 144.76.19.72:37094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:37.943308 2026] [ssl:error] [pid 3594170:tid 3594170] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:37.999535 2026] [ssl:error] [pid 3592643:tid 3592643] (EAI 2)Name or service not known: [client 144.76.19.72:37108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:37.999561 2026] [ssl:error] [pid 3592643:tid 3592643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:39.165218 2026] [ssl:error] [pid 3565421:tid 3565421] (70014)End of file found: [client 216.73.216.199:23338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:39.836792 2026] [security2:error] [pid 3597358:tid 3597358] [client 193.37.32.137:58111] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bigbangburgerbar.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZQw_kClWs4Ol1bq9syQAAAAI"]
[Thu Jul 30 15:01:39.837024 2026] [security2:error] [pid 3597358:tid 3597358] [client 193.37.32.137:58111] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bigbangburgerbar.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZQw_kClWs4Ol1bq9syQAAAAI"]
[Thu Jul 30 15:01:39.837346 2026] [security2:error] [pid 3597358:tid 3597358] [client 193.37.32.137:58111] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZQw_kClWs4Ol1bq9syQAAAAI"]
[Thu Jul 30 15:01:41.057559 2026] [ssl:error] [pid 3594100:tid 3594100] (EAI 2)Name or service not known: [client 144.76.19.72:58946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:41.057592 2026] [ssl:error] [pid 3594100:tid 3594100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:41.112193 2026] [ssl:error] [pid 3587155:tid 3587155] (EAI 2)Name or service not known: [client 144.76.19.72:58950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:41.112222 2026] [ssl:error] [pid 3587155:tid 3587155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:41.860648 2026] [access_compat:error] [pid 3563515:tid 3563515] [client 64.180.68.231:63527] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:41.873391 2026] [ssl:error] [pid 3595642:tid 3595642] (70014)End of file found: [client 216.73.216.199:26642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:42.309315 2026] [access_compat:error] [pid 3589639:tid 3589639] [client 45.158.164.139:37720] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:01:43.291048 2026] [authz_core:error] [pid 3592588:tid 3592588] [client 66.249.66.34:43157] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:01:43.293714 2026] [authz_core:error] [pid 3592588:tid 3592588] [client 66.249.66.34:43157] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:01:44.006439 2026] [security2:error] [pid 3588368:tid 3588368] [client 193.37.32.164:22013] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/.git/HEAD"] [unique_id "amtZSLoYGj_-baLcu9BgZQAAAA4"]
[Thu Jul 30 15:01:44.006622 2026] [security2:error] [pid 3588368:tid 3588368] [client 193.37.32.164:22013] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/.git/HEAD"] [unique_id "amtZSLoYGj_-baLcu9BgZQAAAA4"]
[Thu Jul 30 15:01:44.168821 2026] [ssl:error] [pid 3569475:tid 3569475] (EAI 2)Name or service not known: [client 144.76.19.72:58960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:44.168847 2026] [ssl:error] [pid 3569475:tid 3569475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:44.222359 2026] [ssl:error] [pid 3597585:tid 3597585] (EAI 2)Name or service not known: [client 144.76.19.72:58970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:44.222396 2026] [ssl:error] [pid 3597585:tid 3597585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:44.682676 2026] [security2:error] [pid 3588368:tid 3588368] [client 193.37.32.164:22013] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/index.php"] [unique_id "amtZSLoYGj_-baLcu9BgZQAAAA4"]
[Thu Jul 30 15:01:44.893974 2026] [ssl:error] [pid 3590619:tid 3590619] (70014)End of file found: [client 216.73.216.199:9471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:46.394355 2026] [ssl:error] [pid 3585927:tid 3585927] (70014)End of file found: [client 216.73.216.199:7686] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:47.297080 2026] [ssl:error] [pid 3588368:tid 3588368] (EAI 2)Name or service not known: [client 144.76.19.72:58978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:47.297123 2026] [ssl:error] [pid 3588368:tid 3588368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:47.350860 2026] [ssl:error] [pid 3565421:tid 3565421] (EAI 2)Name or service not known: [client 144.76.19.72:58994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:47.350884 2026] [ssl:error] [pid 3565421:tid 3565421] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:48.357119 2026] [access_compat:error] [pid 3592645:tid 3592645] [client 170.106.181.163:39862] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:01:48.573613 2026] [access_compat:error] [pid 3592590:tid 3592590] [client 64.180.68.231:64069] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:48.806906 2026] [ssl:error] [pid 3592647:tid 3592647] (70014)End of file found: [client 216.73.216.199:8536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:50.408538 2026] [ssl:error] [pid 3592590:tid 3592590] (EAI 2)Name or service not known: [client 144.76.19.72:29750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:50.408573 2026] [ssl:error] [pid 3592590:tid 3592590] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:50.463343 2026] [ssl:error] [pid 3592587:tid 3592587] (EAI 2)Name or service not known: [client 144.76.19.72:29762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:50.463370 2026] [ssl:error] [pid 3592587:tid 3592587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:51.217978 2026] [ssl:error] [pid 3588400:tid 3588400] (70014)End of file found: [client 216.73.216.199:53476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:51.703621 2026] [ssl:error] [pid 3591537:tid 3591537] (70014)End of file found: [client 216.73.216.199:42116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:52.455034 2026] [access_compat:error] [pid 3585927:tid 3585927] [client 64.180.68.231:64362] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:01:53.516591 2026] [ssl:error] [pid 3574200:tid 3574200] (EAI 2)Name or service not known: [client 144.76.19.72:29770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:53.516619 2026] [ssl:error] [pid 3574200:tid 3574200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:53.568082 2026] [ssl:error] [pid 3570686:tid 3570686] (EAI 2)Name or service not known: [client 144.76.19.72:29772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:53.568108 2026] [ssl:error] [pid 3570686:tid 3570686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:55.446712 2026] [ssl:error] [pid 3598076:tid 3598076] (70014)End of file found: [client 216.73.216.199:57350] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:01:56.624564 2026] [ssl:error] [pid 3589637:tid 3589637] (EAI 2)Name or service not known: [client 144.76.19.72:29786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:56.624594 2026] [ssl:error] [pid 3589637:tid 3589637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:56.682714 2026] [ssl:error] [pid 3589638:tid 3589638] (EAI 2)Name or service not known: [client 144.76.19.72:29800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:56.682749 2026] [ssl:error] [pid 3589638:tid 3589638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:57.555690 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:3867] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/smartmontools/smartd.conf"] [unique_id "amtZVffZVVqWn1wbi6at5AAAAA0"]
[Thu Jul 30 15:01:57.555969 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:3867] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/smartmontools/smartd.conf"] [unique_id "amtZVffZVVqWn1wbi6at5AAAAA0"]
[Thu Jul 30 15:01:57.556180 2026] [security2:error] [pid 3567988:tid 3567988] [client 216.73.216.199:3867] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/smartmontools/smartd.conf"] [unique_id "amtZVffZVVqWn1wbi6at5AAAAA0"]
[Thu Jul 30 15:01:57.610496 2026] [core:error] [pid 3592542:tid 3592542] [client 66.249.66.8:50574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:01:57.610520 2026] [core:error] [pid 3592542:tid 3592542] [client 66.249.66.8:50574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:01:58.761855 2026] [core:error] [pid 3567988:tid 3567988] (13)Permission denied: [client 216.73.216.199:3867] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS2/custom_divisor
[Thu Jul 30 15:01:59.329721 2026] [security2:error] [pid 3592590:tid 3592590] [client 193.37.32.141:35903] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "broadbentandsmith.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZV8U9oKf5_pSlA7OkgwAAADk"]
[Thu Jul 30 15:01:59.329840 2026] [security2:error] [pid 3592590:tid 3592590] [client 193.37.32.141:35903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "broadbentandsmith.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZV8U9oKf5_pSlA7OkgwAAADk"]
[Thu Jul 30 15:01:59.330001 2026] [security2:error] [pid 3592590:tid 3592590] [client 193.37.32.141:35903] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "broadbentandsmith.co.uk"] [uri "/403.shtml"] [unique_id "amtZV8U9oKf5_pSlA7OkgwAAADk"]
[Thu Jul 30 15:01:59.496208 2026] [security2:error] [pid 3591537:tid 3591537] [client 193.37.32.173:64761] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.broadbentandsmith.ditchfest.com"] [uri "/.git/HEAD"] [unique_id "amtZVyzmEOLDh11ejOD9IgAAAAk"]
[Thu Jul 30 15:01:59.496381 2026] [security2:error] [pid 3591537:tid 3591537] [client 193.37.32.173:64761] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.broadbentandsmith.ditchfest.com"] [uri "/.git/HEAD"] [unique_id "amtZVyzmEOLDh11ejOD9IgAAAAk"]
[Thu Jul 30 15:01:59.496561 2026] [security2:error] [pid 3591537:tid 3591537] [client 193.37.32.173:64761] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.broadbentandsmith.ditchfest.com"] [uri "/403.shtml"] [unique_id "amtZVyzmEOLDh11ejOD9IgAAAAk"]
[Thu Jul 30 15:01:59.527925 2026] [security2:error] [pid 3588400:tid 3588400] [client 193.37.32.158:33909] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.solitons.ditchfest.com"] [uri "/.git/HEAD"] [unique_id "amtZVwC_ynbB5VoM9YzmigAAABU"]
[Thu Jul 30 15:01:59.528114 2026] [security2:error] [pid 3588400:tid 3588400] [client 193.37.32.158:33909] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.solitons.ditchfest.com"] [uri "/.git/HEAD"] [unique_id "amtZVwC_ynbB5VoM9YzmigAAABU"]
[Thu Jul 30 15:01:59.528275 2026] [security2:error] [pid 3588400:tid 3588400] [client 193.37.32.158:33909] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.solitons.ditchfest.com"] [uri "/403.shtml"] [unique_id "amtZVwC_ynbB5VoM9YzmigAAABU"]
[Thu Jul 30 15:01:59.726285 2026] [security2:error] [pid 3592587:tid 3592587] [client 185.191.171.4:36890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/wvdoh-employee-directory"] [unique_id "amtZV6DTlhIiB-dixeUk2wAAADU"]
[Thu Jul 30 15:01:59.736508 2026] [ssl:error] [pid 3589638:tid 3589638] (EAI 2)Name or service not known: [client 144.76.19.72:49940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:59.736531 2026] [ssl:error] [pid 3589638:tid 3589638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:01:59.792530 2026] [ssl:error] [pid 3594037:tid 3594037] (EAI 2)Name or service not known: [client 144.76.19.72:49948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:01:59.792560 2026] [ssl:error] [pid 3594037:tid 3594037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:01.197364 2026] [authz_core:error] [pid 3598076:tid 3598076] [client 66.249.66.34:54415] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:02:01.200296 2026] [authz_core:error] [pid 3598076:tid 3598076] [client 66.249.66.34:54415] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:02:02.850796 2026] [ssl:error] [pid 3592647:tid 3592647] (EAI 2)Name or service not known: [client 144.76.19.72:49960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:02.850825 2026] [ssl:error] [pid 3592647:tid 3592647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:02.908742 2026] [ssl:error] [pid 3598171:tid 3598171] (EAI 2)Name or service not known: [client 144.76.19.72:49974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:02.908770 2026] [ssl:error] [pid 3598171:tid 3598171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:02.984547 2026] [access_compat:error] [pid 3587463:tid 3587463] [client 64.180.68.231:65037] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:03.605709 2026] [security2:error] [pid 3592648:tid 3592648] [client 49.151.162.225:15452] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZW1B5k7vqEFqLml7bCgAAAEA"]
[Thu Jul 30 15:02:03.605758 2026] [security2:error] [pid 3592648:tid 3592648] [client 49.151.162.225:15452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZW1B5k7vqEFqLml7bCgAAAEA"]
[Thu Jul 30 15:02:03.605989 2026] [security2:error] [pid 3592648:tid 3592648] [client 49.151.162.225:15452] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZW1B5k7vqEFqLml7bCgAAAEA"]
[Thu Jul 30 15:02:04.891833 2026] [security2:error] [pid 3598168:tid 3598168] [client 193.37.32.140:25737] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amtZXLhKumUsqfkbhPli0QAAACE"]
[Thu Jul 30 15:02:04.892016 2026] [security2:error] [pid 3598168:tid 3598168] [client 193.37.32.140:25737] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amtZXLhKumUsqfkbhPli0QAAACE"]
[Thu Jul 30 15:02:04.892273 2026] [security2:error] [pid 3598168:tid 3598168] [client 193.37.32.140:25737] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amtZXLhKumUsqfkbhPli0QAAACE"]
[Thu Jul 30 15:02:05.059513 2026] [security2:error] [pid 3588401:tid 3588401] [client 193.37.32.106:26639] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amtZXZT1eDimxNgru7Jm3AAAABo"]
[Thu Jul 30 15:02:05.059668 2026] [security2:error] [pid 3588401:tid 3588401] [client 193.37.32.106:26639] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amtZXZT1eDimxNgru7Jm3AAAABo"]
[Thu Jul 30 15:02:05.059842 2026] [security2:error] [pid 3588401:tid 3588401] [client 193.37.32.106:26639] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.git/HEAD"] [unique_id "amtZXZT1eDimxNgru7Jm3AAAABo"]
[Thu Jul 30 15:02:05.106337 2026] [ssl:error] [pid 3587155:tid 3587155] (70014)End of file found: [client 216.73.216.199:37902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:06.009092 2026] [core:error] [pid 3567988:tid 3567988] (13)Permission denied: [client 216.73.216.199:3867] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/slab_common/uevent
[Thu Jul 30 15:02:06.087594 2026] [ssl:error] [pid 3592542:tid 3592542] (EAI 2)Name or service not known: [client 144.76.19.72:49988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:06.087621 2026] [ssl:error] [pid 3592542:tid 3592542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:06.141443 2026] [ssl:error] [pid 3598171:tid 3598171] (EAI 2)Name or service not known: [client 144.76.19.72:50002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:06.141479 2026] [ssl:error] [pid 3598171:tid 3598171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:07.526205 2026] [security2:error] [pid 3592644:tid 3592644] [client 114.119.157.183:64737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574035200/request_format~html/cat_ids~102"] [unique_id "amtZX-hzyQ1ZKp-Wf64moAAAADw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E18-11-2019
[Thu Jul 30 15:02:07.856681 2026] [security2:error] [pid 3596517:tid 3596517] [client 8.216.48.18:57383] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZX8pP_fEFTjhSziAPfgAAAAE"]
[Thu Jul 30 15:02:07.856731 2026] [security2:error] [pid 3596517:tid 3596517] [client 8.216.48.18:57383] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZX8pP_fEFTjhSziAPfgAAAAE"]
[Thu Jul 30 15:02:07.856974 2026] [security2:error] [pid 3596517:tid 3596517] [client 8.216.48.18:57383] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZX8pP_fEFTjhSziAPfgAAAAE"]
[Thu Jul 30 15:02:08.421170 2026] [core:error] [pid 3567988:tid 3567988] (13)Permission denied: [client 216.73.216.199:3867] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS2/custom_divisor
[Thu Jul 30 15:02:09.091793 2026] [security2:error] [pid 3587463:tid 3587463] [client 114.119.157.183:64739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574035200/request_format~html/cat_ids~102"] [unique_id "amtZYUKH_leL7KBXm_dZPAAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E18-11-2019
[Thu Jul 30 15:02:09.169732 2026] [access_compat:error] [pid 3591537:tid 3591537] [client 64.180.68.231:65354] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:09.198269 2026] [ssl:error] [pid 3594037:tid 3594037] (EAI 2)Name or service not known: [client 144.76.19.72:50016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:09.198296 2026] [ssl:error] [pid 3594037:tid 3594037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:09.252881 2026] [ssl:error] [pid 3598169:tid 3598169] (EAI 2)Name or service not known: [client 144.76.19.72:50030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:09.252920 2026] [ssl:error] [pid 3598169:tid 3598169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:11.732397 2026] [ssl:error] [pid 3567988:tid 3567988] (70014)End of file found: [client 216.73.216.199:3867] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:12.033359 2026] [core:error] [pid 3583053:tid 3583053] (13)Permission denied: [client 216.73.216.199:55863] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS1/flags
[Thu Jul 30 15:02:12.311508 2026] [ssl:error] [pid 3597585:tid 3597585] (EAI 2)Name or service not known: [client 144.76.19.72:63208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:12.311536 2026] [ssl:error] [pid 3597585:tid 3597585] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:12.367702 2026] [ssl:error] [pid 3599133:tid 3599133] (EAI 2)Name or service not known: [client 144.76.19.72:63224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:12.367742 2026] [ssl:error] [pid 3599133:tid 3599133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:12.698003 2026] [security2:error] [pid 3598076:tid 3598076] [client 8.216.48.18:16333] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZZDIw4BnJdtF0SK-NRwAAABY"]
[Thu Jul 30 15:02:12.698055 2026] [security2:error] [pid 3598076:tid 3598076] [client 8.216.48.18:16333] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZZDIw4BnJdtF0SK-NRwAAABY"]
[Thu Jul 30 15:02:12.698329 2026] [security2:error] [pid 3598076:tid 3598076] [client 8.216.48.18:16333] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZZDIw4BnJdtF0SK-NRwAAABY"]
[Thu Jul 30 15:02:12.937042 2026] [core:error] [pid 3583053:tid 3583053] (13)Permission denied: [client 216.73.216.199:55863] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf_item/order
[Thu Jul 30 15:02:12.941255 2026] [security2:error] [pid 3598168:tid 3598168] [client 193.37.32.156:56637] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/.git/HEAD"] [unique_id "amtZZLhKumUsqfkbhPli0wAAACE"]
[Thu Jul 30 15:02:12.941379 2026] [security2:error] [pid 3598168:tid 3598168] [client 193.37.32.156:56637] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/.git/HEAD"] [unique_id "amtZZLhKumUsqfkbhPli0wAAACE"]
[Thu Jul 30 15:02:13.022316 2026] [security2:error] [pid 3594170:tid 3594170] [client 193.37.32.172:36359] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.git/HEAD"] [unique_id "amtZZZTzQhlZxOb821WJwQAAAAs"]
[Thu Jul 30 15:02:13.022504 2026] [security2:error] [pid 3594170:tid 3594170] [client 193.37.32.172:36359] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/.git/HEAD"] [unique_id "amtZZZTzQhlZxOb821WJwQAAAAs"]
[Thu Jul 30 15:02:13.583299 2026] [access_compat:error] [pid 3597585:tid 3597585] [client 64.180.68.231:49214] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:13.729020 2026] [security2:error] [pid 3598168:tid 3598168] [client 193.37.32.156:56637] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.cleversprogsuk.hatch-works.com"] [uri "/index.php"] [unique_id "amtZZLhKumUsqfkbhPli0wAAACE"]
[Thu Jul 30 15:02:13.880403 2026] [security2:error] [pid 3594170:tid 3594170] [client 193.37.32.172:36359] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bumpyburp.hatch-works.com"] [uri "/index.php"] [unique_id "amtZZZTzQhlZxOb821WJwQAAAAs"]
[Thu Jul 30 15:02:15.346369 2026] [core:error] [pid 3590619:tid 3590619] (13)Permission denied: [client 216.73.216.199:22979] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty52/subsystem/ttyS0/flags
[Thu Jul 30 15:02:15.420624 2026] [ssl:error] [pid 3598961:tid 3598961] (EAI 2)Name or service not known: [client 144.76.19.72:63230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:15.420657 2026] [ssl:error] [pid 3598961:tid 3598961] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:15.476453 2026] [ssl:error] [pid 3594170:tid 3594170] (EAI 2)Name or service not known: [client 144.76.19.72:63236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:15.476481 2026] [ssl:error] [pid 3594170:tid 3594170] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:17.916813 2026] [access_compat:error] [pid 3567988:tid 3567988] [client 45.158.164.139:33874] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:02:18.230167 2026] [access_compat:error] [pid 3574306:tid 3574306] [client 45.158.164.139:33878] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:02:18.362553 2026] [core:error] [pid 3590619:tid 3590619] (13)Permission denied: [client 216.73.216.199:22979] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:15/eject
[Thu Jul 30 15:02:18.536571 2026] [ssl:error] [pid 3588368:tid 3588368] (EAI 2)Name or service not known: [client 144.76.19.72:63248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:18.536595 2026] [ssl:error] [pid 3588368:tid 3588368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:18.594094 2026] [ssl:error] [pid 3597527:tid 3597527] (EAI 2)Name or service not known: [client 144.76.19.72:63256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:18.594124 2026] [ssl:error] [pid 3597527:tid 3597527] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:20.173144 2026] [access_compat:error] [pid 3597358:tid 3597358] [client 64.180.68.231:49547] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:20.470539 2026] [ssl:error] [pid 3590619:tid 3590619] (70014)End of file found: [client 216.73.216.199:22979] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:21.667816 2026] [ssl:error] [pid 3594545:tid 3594545] (EAI 2)Name or service not known: [client 144.76.19.72:39646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:21.667855 2026] [ssl:error] [pid 3594545:tid 3594545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:21.723942 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:39648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:21.723969 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:22.277051 2026] [core:error] [pid 3597585:tid 3597585] (13)Permission denied: [client 216.73.216.199:3796] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/slabs
[Thu Jul 30 15:02:24.186896 2026] [access_compat:error] [pid 3597586:tid 3597586] [client 64.180.68.231:49782] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:24.782027 2026] [ssl:error] [pid 3599651:tid 3599651] (EAI 2)Name or service not known: [client 144.76.19.72:39656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:24.782057 2026] [ssl:error] [pid 3599651:tid 3599651] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:24.835469 2026] [ssl:error] [pid 3592587:tid 3592587] (EAI 2)Name or service not known: [client 144.76.19.72:39672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:24.835504 2026] [ssl:error] [pid 3592587:tid 3592587] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:25.768669 2026] [ssl:error] [pid 3597585:tid 3597585] (70014)End of file found: [client 216.73.216.199:3796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:26.094621 2026] [access_compat:error] [pid 3592033:tid 3592033] [client 169.58.39.193:55090] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 15:02:26.370578 2026] [ssl:error] [pid 3588442:tid 3588442] (70014)End of file found: [client 216.73.216.199:27847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:27.581211 2026] [ssl:error] [pid 3565421:tid 3565421] (70014)End of file found: [client 216.73.216.199:15454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:27.908706 2026] [ssl:error] [pid 3587155:tid 3587155] (EAI 2)Name or service not known: [client 144.76.19.72:39688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:27.908736 2026] [ssl:error] [pid 3587155:tid 3587155] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:27.986547 2026] [ssl:error] [pid 3598110:tid 3598110] (EAI 2)Name or service not known: [client 144.76.19.72:39690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:27.986579 2026] [ssl:error] [pid 3598110:tid 3598110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:30.754610 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/.env.production"] [unique_id "amtZdgyZDBwzAaQuLP6NeAAAAEI"]
[Thu Jul 30 15:02:30.754740 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/.env.production"] [unique_id "amtZdgyZDBwzAaQuLP6NeAAAAEI"]
[Thu Jul 30 15:02:30.754910 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/.env.production"] [unique_id "amtZdgyZDBwzAaQuLP6NeAAAAEI"]
[Thu Jul 30 15:02:30.841279 2026] [security2:error] [pid 3592644:tid 3592644] [client 193.37.32.106:62721] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZduhzyQ1ZKp-Wf64mqwAAADw"]
[Thu Jul 30 15:02:30.841466 2026] [security2:error] [pid 3592644:tid 3592644] [client 193.37.32.106:62721] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZduhzyQ1ZKp-Wf64mqwAAADw"]
[Thu Jul 30 15:02:30.841638 2026] [security2:error] [pid 3592644:tid 3592644] [client 193.37.32.106:62721] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZduhzyQ1ZKp-Wf64mqwAAADw"]
[Thu Jul 30 15:02:30.846904 2026] [security2:error] [pid 3598961:tid 3598961] [client 193.37.32.157:37123] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZdvHMKYSM8_oiQd-9_wAAABM"]
[Thu Jul 30 15:02:30.847021 2026] [security2:error] [pid 3598961:tid 3598961] [client 193.37.32.157:37123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZdvHMKYSM8_oiQd-9_wAAABM"]
[Thu Jul 30 15:02:30.847190 2026] [security2:error] [pid 3598961:tid 3598961] [client 193.37.32.157:37123] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.bespokegardenliving.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZdvHMKYSM8_oiQd-9_wAAABM"]
[Thu Jul 30 15:02:30.865611 2026] [security2:error] [pid 3592647:tid 3592647] [client 193.37.32.161:38271] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.somethingweb.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZdqb5WbfrDKoJsNkj2QAAAD8"]
[Thu Jul 30 15:02:30.865739 2026] [security2:error] [pid 3592647:tid 3592647] [client 193.37.32.161:38271] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.somethingweb.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZdqb5WbfrDKoJsNkj2QAAAD8"]
[Thu Jul 30 15:02:30.865906 2026] [security2:error] [pid 3592647:tid 3592647] [client 193.37.32.161:38271] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.somethingweb.josieandmatt.co.uk"] [uri "/.git/HEAD"] [unique_id "amtZdqb5WbfrDKoJsNkj2QAAAD8"]
[Thu Jul 30 15:02:31.040491 2026] [ssl:error] [pid 3570686:tid 3570686] (EAI 2)Name or service not known: [client 144.76.19.72:57942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:31.040516 2026] [ssl:error] [pid 3570686:tid 3570686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:31.097932 2026] [ssl:error] [pid 3588401:tid 3588401] (EAI 2)Name or service not known: [client 144.76.19.72:57954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:31.097962 2026] [ssl:error] [pid 3588401:tid 3588401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:31.102568 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/application/.env"] [unique_id "amtZdwyZDBwzAaQuLP6NeQAAAEI"]
[Thu Jul 30 15:02:31.102677 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/application/.env"] [unique_id "amtZdwyZDBwzAaQuLP6NeQAAAEI"]
[Thu Jul 30 15:02:31.102842 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/application/.env"] [unique_id "amtZdwyZDBwzAaQuLP6NeQAAAEI"]
[Thu Jul 30 15:02:31.720503 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/prod/.env"] [unique_id "amtZdwyZDBwzAaQuLP6NegAAAEI"]
[Thu Jul 30 15:02:31.720645 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/prod/.env"] [unique_id "amtZdwyZDBwzAaQuLP6NegAAAEI"]
[Thu Jul 30 15:02:31.720820 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/prod/.env"] [unique_id "amtZdwyZDBwzAaQuLP6NegAAAEI"]
[Thu Jul 30 15:02:32.102304 2026] [core:error] [pid 3598169:tid 3598169] (13)Permission denied: [client 216.73.216.199:31330] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:60/subsystem/ttyS0/closing_wait
[Thu Jul 30 15:02:32.125691 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/.env.save"] [unique_id "amtZeAyZDBwzAaQuLP6NewAAAEI"]
[Thu Jul 30 15:02:32.125792 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/.env.save"] [unique_id "amtZeAyZDBwzAaQuLP6NewAAAEI"]
[Thu Jul 30 15:02:32.125950 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/.env.save"] [unique_id "amtZeAyZDBwzAaQuLP6NewAAAEI"]
[Thu Jul 30 15:02:32.403524 2026] [core:error] [pid 3598169:tid 3598169] (13)Permission denied: [client 216.73.216.199:31330] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS2/custom_divisor
[Thu Jul 30 15:02:32.646518 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /beta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/beta/.env"] [unique_id "amtZeAyZDBwzAaQuLP6NfAAAAEI"]
[Thu Jul 30 15:02:32.646637 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/beta/.env"] [unique_id "amtZeAyZDBwzAaQuLP6NfAAAAEI"]
[Thu Jul 30 15:02:32.646806 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/beta/.env"] [unique_id "amtZeAyZDBwzAaQuLP6NfAAAAEI"]
[Thu Jul 30 15:02:32.950667 2026] [security2:error] [pid 3583053:tid 3583053] [client 101.33.66.34:45676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchellphotography.co.uk"] [uri "/"] [unique_id "amtZeMr-sGYN4-obp69HAQAAABk"]
[Thu Jul 30 15:02:32.969507 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/admin/.env"] [unique_id "amtZeAyZDBwzAaQuLP6NfQAAAEI"]
[Thu Jul 30 15:02:32.969630 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/admin/.env"] [unique_id "amtZeAyZDBwzAaQuLP6NfQAAAEI"]
[Thu Jul 30 15:02:32.969818 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/admin/.env"] [unique_id "amtZeAyZDBwzAaQuLP6NfQAAAEI"]
[Thu Jul 30 15:02:33.255506 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/app/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NfgAAAEI"]
[Thu Jul 30 15:02:33.255594 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/app/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NfgAAAEI"]
[Thu Jul 30 15:02:33.255744 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/app/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NfgAAAEI"]
[Thu Jul 30 15:02:33.550508 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/config/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NfwAAAEI"]
[Thu Jul 30 15:02:33.550605 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/config/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NfwAAAEI"]
[Thu Jul 30 15:02:33.550776 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/config/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NfwAAAEI"]
[Thu Jul 30 15:02:33.897315 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/api/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NgAAAAEI"]
[Thu Jul 30 15:02:33.897447 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/api/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NgAAAAEI"]
[Thu Jul 30 15:02:33.897622 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/api/.env"] [unique_id "amtZeQyZDBwzAaQuLP6NgAAAAEI"]
[Thu Jul 30 15:02:34.151990 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:57960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:34.152021 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:34.163404 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "spampman.co.uk"] [uri "/laravel/.env"] [unique_id "amtZegyZDBwzAaQuLP6NgQAAAEI"]
[Thu Jul 30 15:02:34.163529 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spampman.co.uk"] [uri "/laravel/.env"] [unique_id "amtZegyZDBwzAaQuLP6NgQAAAEI"]
[Thu Jul 30 15:02:34.163714 2026] [security2:error] [pid 3574306:tid 3574306] [client 161.153.121.253:54682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "spampman.co.uk"] [uri "/laravel/.env"] [unique_id "amtZegyZDBwzAaQuLP6NgQAAAEI"]
[Thu Jul 30 15:02:34.204449 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:57972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:34.204477 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:34.769505 2026] [access_compat:error] [pid 3592647:tid 3592647] [client 64.180.68.231:50363] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:35.714168 2026] [core:error] [pid 3587155:tid 3587155] (13)Permission denied: [client 216.73.216.199:42208] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty61/subsystem/ttyS2/close_delay
[Thu Jul 30 15:02:35.793272 2026] [authz_core:error] [pid 3592643:tid 3592643] [client 66.249.66.34:57475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:02:35.796798 2026] [authz_core:error] [pid 3592643:tid 3592643] [client 66.249.66.34:57475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:02:36.616817 2026] [core:error] [pid 3587155:tid 3587155] (13)Permission denied: [client 216.73.216.199:42208] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 15:02:37.092668 2026] [authz_core:error] [pid 3590568:tid 3590568] [client 66.249.66.33:46230] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:02:37.095446 2026] [authz_core:error] [pid 3590568:tid 3590568] [client 66.249.66.33:46230] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:02:37.256496 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:57984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:37.256530 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:37.311384 2026] [ssl:error] [pid 3597586:tid 3597586] (EAI 2)Name or service not known: [client 144.76.19.72:57986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:37.311429 2026] [ssl:error] [pid 3597586:tid 3597586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:37.526035 2026] [ssl:error] [pid 3587155:tid 3587155] (70014)End of file found: [client 216.73.216.199:42208] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:37.824851 2026] [ssl:error] [pid 3598169:tid 3598169] (70014)End of file found: [client 216.73.216.199:31330] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:38.723816 2026] [ssl:error] [pid 3597586:tid 3597586] (70014)End of file found: [client 216.73.216.199:31145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:39.498450 2026] [cgi:error] [pid 3588401:tid 3588401] [client 20.104.22.47:27296] AH02812: stderr from /home/websters/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:02:39.746757 2026] [security2:error] [pid 3598171:tid 3598171] [client 43.161.217.205:33432] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amtZf_zyC6oonYuiO8kirQAAACg"]
[Thu Jul 30 15:02:40.366282 2026] [ssl:error] [pid 3598110:tid 3598110] (EAI 2)Name or service not known: [client 144.76.19.72:27764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:40.366311 2026] [ssl:error] [pid 3598110:tid 3598110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:40.420532 2026] [ssl:error] [pid 3599132:tid 3599132] (EAI 2)Name or service not known: [client 144.76.19.72:27766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:40.420563 2026] [ssl:error] [pid 3599132:tid 3599132] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:41.057193 2026] [access_compat:error] [pid 3596517:tid 3596517] [client 64.180.68.231:50685] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:42.942012 2026] [core:error] [pid 3598171:tid 3598171] (13)Permission denied: [client 216.73.216.199:9076] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/shrink
[Thu Jul 30 15:02:43.477101 2026] [ssl:error] [pid 3594545:tid 3594545] (EAI 2)Name or service not known: [client 144.76.19.72:27786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:43.477127 2026] [ssl:error] [pid 3594545:tid 3594545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:43.534668 2026] [ssl:error] [pid 3592644:tid 3592644] (EAI 2)Name or service not known: [client 144.76.19.72:27792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:43.534705 2026] [ssl:error] [pid 3592644:tid 3592644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:44.323336 2026] [ssl:error] [pid 3599651:tid 3599651] (70014)End of file found: [client 216.73.216.199:4359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:44.523909 2026] [security2:error] [pid 3598171:tid 3598171] [client 170.106.193.108:34350] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.davidebell.com"] [uri "/"] [unique_id "amtZhPzyC6oonYuiO8kisgAAACg"]
[Thu Jul 30 15:02:44.626592 2026] [ssl:error] [pid 3597586:tid 3597586] (70014)End of file found: [client 216.73.216.199:3042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:45.324642 2026] [access_compat:error] [pid 3594545:tid 3594545] [client 64.180.68.231:50916] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:45.800576 2026] [access_compat:error] [pid 3598171:tid 3598171] [client 45.158.164.139:33364] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:02:46.593749 2026] [ssl:error] [pid 3590619:tid 3590619] (EAI 2)Name or service not known: [client 144.76.19.72:27810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:46.593790 2026] [ssl:error] [pid 3590619:tid 3590619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:46.646827 2026] [ssl:error] [pid 3599066:tid 3599066] (EAI 2)Name or service not known: [client 144.76.19.72:27820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:46.646857 2026] [ssl:error] [pid 3599066:tid 3599066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:46.846967 2026] [ssl:error] [pid 3598169:tid 3598169] (70014)End of file found: [client 216.73.216.199:58710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:47.415685 2026] [access_compat:error] [pid 3600934:tid 3600934] [client 3.225.222.228:62373] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:02:47.415851 2026] [access_compat:error] [pid 3600934:tid 3600934] [client 3.225.222.228:62373] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:02:49.704776 2026] [ssl:error] [pid 3594037:tid 3594037] (EAI 2)Name or service not known: [client 144.76.19.72:25162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:49.704806 2026] [ssl:error] [pid 3594037:tid 3594037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:49.742935 2026] [security2:error] [pid 3587515:tid 3587515] [client 216.73.216.199:15695] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/mysqlnd.ini"] [unique_id "amtZiX0URqduQ8NZtQJF5QAAACc"]
[Thu Jul 30 15:02:49.743197 2026] [security2:error] [pid 3587515:tid 3587515] [client 216.73.216.199:15695] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/mysqlnd.ini"] [unique_id "amtZiX0URqduQ8NZtQJF5QAAACc"]
[Thu Jul 30 15:02:49.743402 2026] [security2:error] [pid 3587515:tid 3587515] [client 216.73.216.199:15695] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all.def/mysqlnd.ini"] [unique_id "amtZiX0URqduQ8NZtQJF5QAAACc"]
[Thu Jul 30 15:02:49.762157 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:25166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:49.762179 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:50.151086 2026] [core:error] [pid 3587515:tid 3587515] (13)Permission denied: [client 216.73.216.199:15695] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_pci/uevent
[Thu Jul 30 15:02:51.261650 2026] [ssl:error] [pid 3600933:tid 3600933] (70014)End of file found: [client 216.73.216.199:52094] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:52.002977 2026] [authz_core:error] [pid 3599132:tid 3599132] [client 169.58.39.193:58581] AH01630: client denied by server configuration: /home/gangway/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:02:52.039371 2026] [access_compat:error] [pid 3598110:tid 3598110] [client 64.180.68.231:51262] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:52.560540 2026] [ssl:error] [pid 3587515:tid 3587515] (70014)End of file found: [client 216.73.216.199:15695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:52.816263 2026] [ssl:error] [pid 3592644:tid 3592644] (EAI 2)Name or service not known: [client 144.76.19.72:25180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:52.816297 2026] [ssl:error] [pid 3592644:tid 3592644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:52.867974 2026] [ssl:error] [pid 3599133:tid 3599133] (EAI 2)Name or service not known: [client 144.76.19.72:25192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:52.868001 2026] [ssl:error] [pid 3599133:tid 3599133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:53.054569 2026] [ssl:error] [pid 3594545:tid 3594545] (70014)End of file found: [client 216.73.216.199:16698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:53.382580 2026] [security2:error] [pid 3592644:tid 3592644] [client 43.130.101.151:53328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spurr.org.uk"] [uri "/"] [unique_id "amtZjehzyQ1ZKp-Wf64msAAAADw"]
[Thu Jul 30 15:02:55.943076 2026] [ssl:error] [pid 3598170:tid 3598170] (EAI 2)Name or service not known: [client 144.76.19.72:25200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:55.943119 2026] [ssl:error] [pid 3598170:tid 3598170] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:55.997015 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:25208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:55.997045 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:56.042175 2026] [access_compat:error] [pid 3595642:tid 3595642] [client 64.180.68.231:51467] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:02:56.675186 2026] [core:error] [pid 3599132:tid 3599132] (13)Permission denied: [client 216.73.216.199:8434] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/firmware_class/uevent
[Thu Jul 30 15:02:56.778671 2026] [ssl:error] [pid 3599132:tid 3599132] (70014)End of file found: [client 216.73.216.199:8434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:57.993058 2026] [ssl:error] [pid 3600933:tid 3600933] (70014)End of file found: [client 216.73.216.199:1563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:02:58.181877 2026] [authz_core:error] [pid 3583056:tid 3583056] [client 169.58.39.193:59617] AH01630: client denied by server configuration: /home/gangway/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:02:58.487917 2026] [core:error] [pid 3594545:tid 3594545] (13)Permission denied: [client 216.73.216.199:2011] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 15:02:59.052885 2026] [ssl:error] [pid 3590353:tid 3590353] (EAI 2)Name or service not known: [client 144.76.19.72:25214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:59.052916 2026] [ssl:error] [pid 3590353:tid 3590353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:59.142343 2026] [ssl:error] [pid 3590619:tid 3590619] (EAI 2)Name or service not known: [client 144.76.19.72:25226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:02:59.142370 2026] [ssl:error] [pid 3590619:tid 3590619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:02:59.510432 2026] [ssl:error] [pid 3594545:tid 3594545] (70014)End of file found: [client 216.73.216.199:2011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:00.115902 2026] [security2:error] [pid 3592643:tid 3592643] [client 185.191.171.11:30450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/kipp-jacksonville-calendar"] [unique_id "amtZlH7IS8BHgt7J2DkvhQAAADs"]
[Thu Jul 30 15:03:01.808530 2026] [security2:error] [pid 3600062:tid 3600062] [client 124.156.157.91:50860] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.lucynaden.com"] [uri "/"] [unique_id "amtZlflP79yK0yWXTznewAAAAA0"]
[Thu Jul 30 15:03:02.023909 2026] [security2:error] [pid 3595642:tid 3595642] [client 85.208.96.206:57354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,992.0/prev_next,next.html"] [unique_id "amtZlr-RFtYYvVY4u-oD0AAAAAY"]
[Thu Jul 30 15:03:02.122636 2026] [ssl:error] [pid 3597586:tid 3597586] (70014)End of file found: [client 216.73.216.199:10878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:02.195666 2026] [ssl:error] [pid 3598110:tid 3598110] (EAI 2)Name or service not known: [client 144.76.19.72:44566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:02.195693 2026] [ssl:error] [pid 3598110:tid 3598110] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:02.253141 2026] [ssl:error] [pid 3592645:tid 3592645] (EAI 2)Name or service not known: [client 144.76.19.72:44572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:02.253177 2026] [ssl:error] [pid 3592645:tid 3592645] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:03.322276 2026] [ssl:error] [pid 3598110:tid 3598110] (70014)End of file found: [client 216.73.216.199:42570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:04.355120 2026] [security2:error] [pid 3592648:tid 3592648] [client 85.208.96.200:15488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2490.0/prev_next,prev.html"] [unique_id "amtZmFB5k7vqEFqLml7bFgAAAEA"]
[Thu Jul 30 15:03:04.826830 2026] [ssl:error] [pid 3600933:tid 3600933] (70014)End of file found: [client 216.73.216.199:20608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:05.357478 2026] [ssl:error] [pid 3594545:tid 3594545] (EAI 2)Name or service not known: [client 144.76.19.72:44580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:05.357503 2026] [ssl:error] [pid 3594545:tid 3594545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:05.411099 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:44588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:05.411122 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:05.623665 2026] [lsapi:warn] [pid 3600883:tid 3600883] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:03:06.418509 2026] [access_compat:error] [pid 3591537:tid 3591537] [client 64.180.68.231:52015] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:07.533602 2026] [ssl:error] [pid 3583056:tid 3583056] (70014)End of file found: [client 216.73.216.199:33521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:08.157947 2026] [security2:error] [pid 3602229:tid 3602229] [client 85.208.96.194:59174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8644.0/prev_next,next.html"] [unique_id "amtZnNlyIg8rh2S8Q01RKgAAAA8"]
[Thu Jul 30 15:03:08.465867 2026] [ssl:error] [pid 3602229:tid 3602229] (EAI 2)Name or service not known: [client 144.76.19.72:44608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:08.465902 2026] [ssl:error] [pid 3602229:tid 3602229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:08.520982 2026] [ssl:error] [pid 3600062:tid 3600062] (EAI 2)Name or service not known: [client 144.76.19.72:44610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:08.521010 2026] [ssl:error] [pid 3600062:tid 3600062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:08.854156 2026] [ssl:error] [pid 3598110:tid 3598110] (70014)End of file found: [client 216.73.216.199:25624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:10.422719 2026] [security2:error] [pid 3602437:tid 3602437] [client 1.14.110.85:39932] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.evtech.ltd"] [uri "/"] [unique_id "amtZnoW0fg6T8-474Ro_RQAAAB0"]
[Thu Jul 30 15:03:10.504267 2026] [ssl:error] [pid 3602438:tid 3602438] (70014)End of file found: [client 216.73.216.199:55736] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:10.580583 2026] [security2:error] [pid 3598169:tid 3598169] [client 131.221.116.181:34044] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZnrwrGUl1xmSgWtYkcwAAACI"]
[Thu Jul 30 15:03:10.580632 2026] [security2:error] [pid 3598169:tid 3598169] [client 131.221.116.181:34044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZnrwrGUl1xmSgWtYkcwAAACI"]
[Thu Jul 30 15:03:10.580897 2026] [security2:error] [pid 3598169:tid 3598169] [client 131.221.116.181:34044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZnrwrGUl1xmSgWtYkcwAAACI"]
[Thu Jul 30 15:03:10.720656 2026] [security2:error] [pid 3602439:tid 3602439] [client 85.208.96.208:61320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3530.0.html"] [unique_id "amtZniyo7urRiR3Mt7VdOAAAACU"]
[Thu Jul 30 15:03:11.577483 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:39258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:11.577516 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:11.630540 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:39264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:11.630568 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:12.582960 2026] [access_compat:error] [pid 3602568:tid 3602568] [client 64.180.68.231:52332] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:14.645791 2026] [ssl:error] [pid 3602577:tid 3602577] (70014)End of file found: [client 216.73.216.199:6247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:14.694564 2026] [ssl:error] [pid 3596517:tid 3596517] (EAI 2)Name or service not known: [client 144.76.19.72:39276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:14.694597 2026] [ssl:error] [pid 3596517:tid 3596517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:14.749590 2026] [ssl:error] [pid 3594545:tid 3594545] (EAI 2)Name or service not known: [client 144.76.19.72:39286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:14.749628 2026] [ssl:error] [pid 3594545:tid 3594545] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:15.066769 2026] [ssl:error] [pid 3599573:tid 3599573] (70014)End of file found: [client 216.73.216.199:35103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:15.645473 2026] [security2:error] [pid 3590353:tid 3590353] [client 37.236.203.5:29224] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZo5ZU2rFwAaxaHIG0SwAAACA"]
[Thu Jul 30 15:03:15.645520 2026] [security2:error] [pid 3590353:tid 3590353] [client 37.236.203.5:29224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZo5ZU2rFwAaxaHIG0SwAAACA"]
[Thu Jul 30 15:03:15.645783 2026] [security2:error] [pid 3590353:tid 3590353] [client 37.236.203.5:29224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZo5ZU2rFwAaxaHIG0SwAAACA"]
[Thu Jul 30 15:03:15.884727 2026] [ssl:error] [pid 3596517:tid 3596517] (70014)End of file found: [client 216.73.216.199:26112] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:17.017534 2026] [access_compat:error] [pid 3602568:tid 3602568] [client 64.180.68.231:52570] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:17.804186 2026] [ssl:error] [pid 3569518:tid 3569518] (EAI 2)Name or service not known: [client 144.76.19.72:39300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:17.804215 2026] [ssl:error] [pid 3569518:tid 3569518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:17.859844 2026] [ssl:error] [pid 3602576:tid 3602576] (EAI 2)Name or service not known: [client 144.76.19.72:39310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:17.859880 2026] [ssl:error] [pid 3602576:tid 3602576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:18.667434 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 45.158.164.139:38376] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:03:20.519951 2026] [ssl:error] [pid 3602581:tid 3602581] (70014)End of file found: [client 216.73.216.199:49996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:20.834372 2026] [ssl:error] [pid 3592648:tid 3592648] (70014)End of file found: [client 216.73.216.199:11918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:20.912263 2026] [ssl:error] [pid 3588401:tid 3588401] (EAI 2)Name or service not known: [client 144.76.19.72:36712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:20.912298 2026] [ssl:error] [pid 3588401:tid 3588401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:20.966522 2026] [ssl:error] [pid 3598170:tid 3598170] (EAI 2)Name or service not known: [client 144.76.19.72:36720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:20.966546 2026] [ssl:error] [pid 3598170:tid 3598170] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:23.235048 2026] [access_compat:error] [pid 3602568:tid 3602568] [client 64.180.68.231:52887] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:23.852897 2026] [lsapi:warn] [pid 3602439:tid 3602439] [client 45.158.164.139:36566] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:03:23.852940 2026] [lsapi:warn] [pid 3602439:tid 3602439] [client 45.158.164.139:36566] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:03:23.854887 2026] [lsapi:warn] [pid 3589640:tid 3589640] [client 223.109.252.247:57080] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:03:23.854924 2026] [lsapi:warn] [pid 3589640:tid 3589640] [client 223.109.252.247:57080] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:03:24.021496 2026] [ssl:error] [pid 3583056:tid 3583056] (EAI 2)Name or service not known: [client 144.76.19.72:36736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:24.021525 2026] [ssl:error] [pid 3583056:tid 3583056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:24.077932 2026] [ssl:error] [pid 3599133:tid 3599133] (EAI 2)Name or service not known: [client 144.76.19.72:36752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:24.077956 2026] [ssl:error] [pid 3599133:tid 3599133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:24.475239 2026] [ssl:error] [pid 3592590:tid 3592590] (70014)End of file found: [client 216.73.216.199:19035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:24.928447 2026] [security2:error] [pid 3602439:tid 3602439] [client 37.236.203.5:29458] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZrCyo7urRiR3Mt7VdQgAAACU"]
[Thu Jul 30 15:03:24.928494 2026] [security2:error] [pid 3602439:tid 3602439] [client 37.236.203.5:29458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZrCyo7urRiR3Mt7VdQgAAACU"]
[Thu Jul 30 15:03:24.928724 2026] [security2:error] [pid 3602439:tid 3602439] [client 37.236.203.5:29458] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZrCyo7urRiR3Mt7VdQgAAACU"]
[Thu Jul 30 15:03:26.098799 2026] [ssl:error] [pid 3602306:tid 3602306] (70014)End of file found: [client 216.73.216.199:49723] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:27.155151 2026] [ssl:error] [pid 3599133:tid 3599133] (EAI 2)Name or service not known: [client 144.76.19.72:36768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:27.155189 2026] [ssl:error] [pid 3599133:tid 3599133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:27.208335 2026] [ssl:error] [pid 3602437:tid 3602437] (EAI 2)Name or service not known: [client 144.76.19.72:36782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:27.208367 2026] [ssl:error] [pid 3602437:tid 3602437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:27.647682 2026] [access_compat:error] [pid 3600933:tid 3600933] [client 64.180.68.231:53123] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:27.859525 2026] [security2:error] [pid 3602437:tid 3602437] [client 185.191.171.14:34948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.7815/topicseen.html"] [unique_id "amtZr4W0fg6T8-474Ro_SgAAAB0"]
[Thu Jul 30 15:03:28.406425 2026] [ssl:error] [pid 3602440:tid 3602440] (70014)End of file found: [client 216.73.216.199:58695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:28.510250 2026] [authz_core:error] [pid 3602581:tid 3602581] [client 66.249.66.33:45658] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:03:28.512960 2026] [authz_core:error] [pid 3602581:tid 3602581] [client 66.249.66.33:45658] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:03:29.810841 2026] [ssl:error] [pid 3583053:tid 3583053] (70014)End of file found: [client 216.73.216.199:54129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:30.265330 2026] [ssl:error] [pid 3602437:tid 3602437] (EAI 2)Name or service not known: [client 144.76.19.72:54320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:30.265354 2026] [ssl:error] [pid 3602437:tid 3602437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:30.318128 2026] [ssl:error] [pid 3595642:tid 3595642] (EAI 2)Name or service not known: [client 144.76.19.72:54330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:30.318159 2026] [ssl:error] [pid 3595642:tid 3595642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:30.388019 2026] [security2:error] [pid 3601359:tid 3601359] [client 114.119.135.136:24315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1586214000/request_format~html"] [unique_id "amtZsqDPKwszsd5GR409cgAAAAw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E8-4-2020
[Thu Jul 30 15:03:31.966965 2026] [security2:error] [pid 3602437:tid 3602437] [client 114.119.135.136:24317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1586214000/request_format~html"] [unique_id "amtZs4W0fg6T8-474Ro_TAAAAB0"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E8-4-2020
[Thu Jul 30 15:03:32.351349 2026] [ssl:error] [pid 3603739:tid 3603739] (70014)End of file found: [client 216.73.216.199:36320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:33.376243 2026] [ssl:error] [pid 3598961:tid 3598961] (EAI 2)Name or service not known: [client 144.76.19.72:54338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:33.376273 2026] [ssl:error] [pid 3598961:tid 3598961] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:33.433462 2026] [ssl:error] [pid 3590568:tid 3590568] (EAI 2)Name or service not known: [client 144.76.19.72:54340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:33.433493 2026] [ssl:error] [pid 3590568:tid 3590568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:33.853666 2026] [authz_core:error] [pid 3602439:tid 3602439] [client 66.249.66.34:45245] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:03:33.856315 2026] [authz_core:error] [pid 3602439:tid 3602439] [client 66.249.66.34:45245] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:03:35.076490 2026] [ssl:error] [pid 3588442:tid 3588442] (70014)End of file found: [client 216.73.216.199:54199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:36.489332 2026] [ssl:error] [pid 3588401:tid 3588401] (EAI 2)Name or service not known: [client 144.76.19.72:54342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:36.489361 2026] [ssl:error] [pid 3588401:tid 3588401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:36.545160 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:54356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:36.545183 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:36.596590 2026] [ssl:error] [pid 3598961:tid 3598961] (70014)End of file found: [client 216.73.216.199:39494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:38.245873 2026] [access_compat:error] [pid 3602229:tid 3602229] [client 64.180.68.231:53674] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:38.720030 2026] [ssl:error] [pid 3592648:tid 3592648] (70014)End of file found: [client 216.73.216.199:20828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:39.599731 2026] [ssl:error] [pid 3569518:tid 3569518] (EAI 2)Name or service not known: [client 144.76.19.72:57858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:39.599758 2026] [ssl:error] [pid 3569518:tid 3569518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:39.655490 2026] [ssl:error] [pid 3602438:tid 3602438] (EAI 2)Name or service not known: [client 144.76.19.72:57870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:39.655530 2026] [ssl:error] [pid 3602438:tid 3602438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:40.455327 2026] [core:error] [pid 3569518:tid 3569518] (13)Permission denied: [client 216.73.216.199:40778] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS1/line
[Thu Jul 30 15:03:40.863341 2026] [ssl:error] [pid 3569518:tid 3569518] (70014)End of file found: [client 216.73.216.199:40778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:41.119164 2026] [lsapi:warn] [pid 3602439:tid 3602439] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:03:41.364900 2026] [security2:error] [pid 3602437:tid 3602437] [client 43.138.68.113:40188] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ericashmore.org"] [uri "/"] [unique_id "amtZvYW0fg6T8-474Ro_UQAAAB0"]
[Thu Jul 30 15:03:41.971059 2026] [ssl:error] [pid 3602568:tid 3602568] (70014)End of file found: [client 216.73.216.199:21433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:42.711322 2026] [ssl:error] [pid 3590619:tid 3590619] (EAI 2)Name or service not known: [client 144.76.19.72:57878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:42.711348 2026] [ssl:error] [pid 3590619:tid 3590619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:42.767555 2026] [ssl:error] [pid 3602440:tid 3602440] (EAI 2)Name or service not known: [client 144.76.19.72:57884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:42.767583 2026] [ssl:error] [pid 3602440:tid 3602440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:44.525240 2026] [access_compat:error] [pid 3598076:tid 3598076] [client 64.180.68.231:53999] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:44.782682 2026] [ssl:error] [pid 3602439:tid 3602439] (70014)End of file found: [client 216.73.216.199:18864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:44.950704 2026] [security2:error] [pid 3598110:tid 3598110] [client 185.191.171.11:57126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9665.0/prev_next,prev.html"] [unique_id "amtZwLA4Ws35Gu9HgIfKogAAAB8"]
[Thu Jul 30 15:03:45.822793 2026] [ssl:error] [pid 3583056:tid 3583056] (EAI 2)Name or service not known: [client 144.76.19.72:57886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:45.822819 2026] [ssl:error] [pid 3583056:tid 3583056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:45.877002 2026] [ssl:error] [pid 3602437:tid 3602437] (EAI 2)Name or service not known: [client 144.76.19.72:57896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:45.877028 2026] [ssl:error] [pid 3602437:tid 3602437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:46.183633 2026] [ssl:error] [pid 3598110:tid 3598110] (70014)End of file found: [client 216.73.216.199:13666] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:48.433560 2026] [ssl:error] [pid 3598170:tid 3598170] (70014)End of file found: [client 216.73.216.199:63292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:48.812585 2026] [access_compat:error] [pid 3587515:tid 3587515] [client 64.180.68.231:54223] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:48.932245 2026] [ssl:error] [pid 3569518:tid 3569518] (EAI 2)Name or service not known: [client 144.76.19.72:57908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:48.932278 2026] [ssl:error] [pid 3569518:tid 3569518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:48.987653 2026] [ssl:error] [pid 3602438:tid 3602438] (EAI 2)Name or service not known: [client 144.76.19.72:57914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:48.987681 2026] [ssl:error] [pid 3602438:tid 3602438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:49.257866 2026] [access_compat:error] [pid 3585927:tid 3585927] [client 45.158.164.139:45930] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:03:49.890227 2026] [security2:error] [pid 3569518:tid 3569518] [client 162.243.56.26:55798] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "asian-kitchen.co.uk"] [uri "/.env"] [unique_id "amtZxfRWFIxZVjYooS-JRgAAADc"]
[Thu Jul 30 15:03:49.890436 2026] [security2:error] [pid 3569518:tid 3569518] [client 162.243.56.26:55798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "asian-kitchen.co.uk"] [uri "/.env"] [unique_id "amtZxfRWFIxZVjYooS-JRgAAADc"]
[Thu Jul 30 15:03:49.890647 2026] [security2:error] [pid 3569518:tid 3569518] [client 162.243.56.26:55798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "asian-kitchen.co.uk"] [uri "/.env"] [unique_id "amtZxfRWFIxZVjYooS-JRgAAADc"]
[Thu Jul 30 15:03:50.167705 2026] [core:error] [pid 3602576:tid 3602576] (13)Permission denied: [client 216.73.216.199:19338] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu4/driver/cpu2/subsystem/uevent
[Thu Jul 30 15:03:51.169188 2026] [ssl:error] [pid 3602576:tid 3602576] (70014)End of file found: [client 216.73.216.199:19338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:52.040879 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:54176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:52.040911 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:52.092821 2026] [ssl:error] [pid 3600934:tid 3600934] (EAI 2)Name or service not known: [client 144.76.19.72:54178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:52.092854 2026] [ssl:error] [pid 3600934:tid 3600934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:53.290113 2026] [ssl:error] [pid 3592494:tid 3592494] (70014)End of file found: [client 216.73.216.199:33684] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:53.781099 2026] [security2:error] [pid 3598170:tid 3598170] [client 216.73.216.199:34868] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cagefs-update.log"] [unique_id "amtZyUvxAfhpU2mvlDC4EQAAACM"]
[Thu Jul 30 15:03:53.781382 2026] [security2:error] [pid 3598170:tid 3598170] [client 216.73.216.199:34868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cagefs-update.log"] [unique_id "amtZyUvxAfhpU2mvlDC4EQAAACM"]
[Thu Jul 30 15:03:53.781610 2026] [security2:error] [pid 3598170:tid 3598170] [client 216.73.216.199:34868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cagefs-update.log"] [unique_id "amtZyUvxAfhpU2mvlDC4EQAAACM"]
[Thu Jul 30 15:03:54.526191 2026] [core:crit] [pid 3597586:tid 3597586] (13)Permission denied: [client 40.77.167.151:32483] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 15:03:55.100343 2026] [ssl:error] [pid 3598170:tid 3598170] (70014)End of file found: [client 216.73.216.199:34868] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:55.147509 2026] [ssl:error] [pid 3583053:tid 3583053] (EAI 2)Name or service not known: [client 144.76.19.72:54186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:55.147544 2026] [ssl:error] [pid 3583053:tid 3583053] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:55.200108 2026] [ssl:error] [pid 3590353:tid 3590353] (EAI 2)Name or service not known: [client 144.76.19.72:54200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:55.200137 2026] [ssl:error] [pid 3590353:tid 3590353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:55.593833 2026] [access_compat:error] [pid 3605554:tid 3605554] [client 64.180.68.231:54579] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:56.589926 2026] [ssl:error] [pid 3605553:tid 3605553] (70014)End of file found: [client 216.73.216.199:47883] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:58.225674 2026] [security2:error] [pid 3600934:tid 3600934] [client 43.164.190.28:46252] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.londonkinesiology.com"] [uri "/"] [unique_id "amtZztmoLa_KSSJ9-OKh5QAAABE"]
[Thu Jul 30 15:03:58.271399 2026] [ssl:error] [pid 3605690:tid 3605690] (EAI 2)Name or service not known: [client 144.76.19.72:54208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:58.271455 2026] [ssl:error] [pid 3605690:tid 3605690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:58.330290 2026] [ssl:error] [pid 3605694:tid 3605694] (EAI 2)Name or service not known: [client 144.76.19.72:54222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:03:58.330342 2026] [ssl:error] [pid 3605694:tid 3605694] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:03:58.615017 2026] [core:error] [pid 3605690:tid 3605690] (13)Permission denied: [client 216.73.216.199:4493] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nfit/sections/__ksymtab
[Thu Jul 30 15:03:59.162011 2026] [security2:error] [pid 3588442:tid 3588442] [client 51.103.46.9:33006] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wurlitzer.co.uk"] [uri "/.env"] [unique_id "amtZz9UOD3v3pgmXPwT64gAAAC8"]
[Thu Jul 30 15:03:59.162570 2026] [security2:error] [pid 3588442:tid 3588442] [client 51.103.46.9:33006] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wurlitzer.co.uk"] [uri "/.env"] [unique_id "amtZz9UOD3v3pgmXPwT64gAAAC8"]
[Thu Jul 30 15:03:59.349199 2026] [security2:error] [pid 3602571:tid 3602571] [client 124.220.42.101:41148] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-ganymede.com"] [uri "/"] [unique_id "amtZz01pfeC2w2DVKYySYgAAACs"]
[Thu Jul 30 15:03:59.444764 2026] [access_compat:error] [pid 3600064:tid 3600064] [client 64.180.68.231:54781] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:03:59.624834 2026] [ssl:error] [pid 3605690:tid 3605690] (70014)End of file found: [client 216.73.216.199:4493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:03:59.765009 2026] [security2:error] [pid 3605695:tid 3605695] [client 43.164.190.28:43392] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtZzwFKRE4t8gG2eyfmQQAAADY"], referer: http://www.londonkinesiology.com
[Thu Jul 30 15:03:59.767127 2026] [authz_core:error] [pid 3605695:tid 3605695] [client 43.164.190.28:43392] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.londonkinesiology.com
[Thu Jul 30 15:03:59.769865 2026] [authz_core:error] [pid 3605695:tid 3605695] [client 43.164.190.28:43392] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.londonkinesiology.com
[Thu Jul 30 15:03:59.926459 2026] [security2:error] [pid 3588442:tid 3588442] [client 51.103.46.9:33006] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wurlitzer.co.uk"] [uri "/index.php"] [unique_id "amtZz9UOD3v3pgmXPwT64gAAAC8"]
[Thu Jul 30 15:04:00.016238 2026] [authz_core:error] [pid 3589640:tid 3589640] [client 66.249.66.33:51117] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:04:00.018930 2026] [authz_core:error] [pid 3589640:tid 3589640] [client 66.249.66.33:51117] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:04:00.520804 2026] [security2:error] [pid 3588442:tid 3588442] [client 185.191.171.3:12488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/rudy-de-luca"] [unique_id "amtZ0NUOD3v3pgmXPwT64wAAAC8"]
[Thu Jul 30 15:04:01.383962 2026] [ssl:error] [pid 3588442:tid 3588442] (EAI 2)Name or service not known: [client 144.76.19.72:36794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:01.383996 2026] [ssl:error] [pid 3588442:tid 3588442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:01.422795 2026] [security2:error] [pid 3600934:tid 3600934] [client 45.148.10.120:36638] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ0dmoLa_KSSJ9-OKh6QAAABE"]
[Thu Jul 30 15:04:01.422987 2026] [security2:error] [pid 3600934:tid 3600934] [client 45.148.10.120:36638] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ0dmoLa_KSSJ9-OKh6QAAABE"]
[Thu Jul 30 15:04:01.423229 2026] [security2:error] [pid 3600934:tid 3600934] [client 45.148.10.120:36638] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ0dmoLa_KSSJ9-OKh6QAAABE"]
[Thu Jul 30 15:04:01.436387 2026] [ssl:error] [pid 3602571:tid 3602571] (EAI 2)Name or service not known: [client 144.76.19.72:36800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:01.436433 2026] [ssl:error] [pid 3602571:tid 3602571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:01.751973 2026] [ssl:error] [pid 3605694:tid 3605694] (70014)End of file found: [client 216.73.216.199:24930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:02.341270 2026] [ssl:error] [pid 3602438:tid 3602438] (70014)End of file found: [client 216.73.216.199:4652] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:03.477340 2026] [core:error] [pid 3602229:tid 3602229] [client 66.249.66.8:56310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:03.477368 2026] [core:error] [pid 3602229:tid 3602229] [client 66.249.66.8:56310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:04.489597 2026] [ssl:error] [pid 3598961:tid 3598961] (EAI 2)Name or service not known: [client 144.76.19.72:36814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:04.489625 2026] [ssl:error] [pid 3598961:tid 3598961] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:04.547241 2026] [ssl:error] [pid 3605688:tid 3605688] (EAI 2)Name or service not known: [client 144.76.19.72:36816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:04.547284 2026] [ssl:error] [pid 3605688:tid 3605688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:04.937640 2026] [ssl:error] [pid 3596517:tid 3596517] (70014)End of file found: [client 216.73.216.199:33972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:06.569781 2026] [security2:error] [pid 3598961:tid 3598961] [client 119.91.20.139:42244] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thatwall.com"] [uri "/"] [unique_id "amtZ1vHMKYSM8_oiQd--eAAAABM"]
[Thu Jul 30 15:04:07.606169 2026] [ssl:error] [pid 3598170:tid 3598170] (EAI 2)Name or service not known: [client 144.76.19.72:36820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:07.606198 2026] [ssl:error] [pid 3598170:tid 3598170] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:07.662040 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:36822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:07.662080 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:07.760521 2026] [ssl:error] [pid 3605688:tid 3605688] (70014)End of file found: [client 216.73.216.199:12603] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:08.057971 2026] [ssl:error] [pid 3600934:tid 3600934] (70014)End of file found: [client 216.73.216.199:13354] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:08.320335 2026] [security2:error] [pid 3598169:tid 3598169] [client 85.208.96.204:65162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,771.0/prev_next,prev.html"] [unique_id "amtZ2LwrGUl1xmSgWtYkoAAAACI"]
[Thu Jul 30 15:04:10.001115 2026] [access_compat:error] [pid 3605689:tid 3605689] [client 64.180.68.231:55335] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:10.347961 2026] [ssl:error] [pid 3598169:tid 3598169] (70014)End of file found: [client 216.73.216.199:59402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:10.718511 2026] [ssl:error] [pid 3598961:tid 3598961] (EAI 2)Name or service not known: [client 144.76.19.72:35588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:10.718544 2026] [ssl:error] [pid 3598961:tid 3598961] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:10.774734 2026] [ssl:error] [pid 3602437:tid 3602437] (EAI 2)Name or service not known: [client 144.76.19.72:35594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:10.774763 2026] [ssl:error] [pid 3602437:tid 3602437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:12.993058 2026] [security2:error] [pid 3605695:tid 3605695] [client 94.154.43.178:49796] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.hatch-works.hatch-works.com"] [uri "/.env"] [unique_id "amtZ3AFKRE4t8gG2eyfmQwAAADY"]
[Thu Jul 30 15:04:12.993263 2026] [security2:error] [pid 3605695:tid 3605695] [client 94.154.43.178:49796] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.hatch-works.hatch-works.com"] [uri "/.env"] [unique_id "amtZ3AFKRE4t8gG2eyfmQwAAADY"]
[Thu Jul 30 15:04:13.060381 2026] [ssl:error] [pid 3605621:tid 3605621] (70014)End of file found: [client 216.73.216.199:50401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:13.381333 2026] [core:error] [pid 3605622:tid 3605622] (13)Permission denied: [client 216.73.216.199:23907] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory142/subsystem/uevent
[Thu Jul 30 15:04:13.756285 2026] [security2:error] [pid 3605695:tid 3605695] [client 94.154.43.178:49796] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.hatch-works.hatch-works.com"] [uri "/index.php"] [unique_id "amtZ3AFKRE4t8gG2eyfmQwAAADY"]
[Thu Jul 30 15:04:13.829573 2026] [ssl:error] [pid 3600934:tid 3600934] (EAI 2)Name or service not known: [client 144.76.19.72:35606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:13.829602 2026] [ssl:error] [pid 3600934:tid 3600934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:13.884360 2026] [ssl:error] [pid 3602437:tid 3602437] (EAI 2)Name or service not known: [client 144.76.19.72:35608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:13.884382 2026] [ssl:error] [pid 3602437:tid 3602437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:14.087164 2026] [ssl:error] [pid 3605622:tid 3605622] (70014)End of file found: [client 216.73.216.199:23907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:14.472499 2026] [core:crit] [pid 3596517:tid 3596517] (13)Permission denied: [client 52.167.144.213:65127] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 15:04:14.591623 2026] [lsapi:warn] [pid 3605620:tid 3605620] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:04:15.663789 2026] [security2:error] [pid 3606847:tid 3606847] [client 91.106.41.226:54000] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZ3_-3cP6ub0dS8AfqZQAAAAU"]
[Thu Jul 30 15:04:15.663865 2026] [security2:error] [pid 3606847:tid 3606847] [client 91.106.41.226:54000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZ3_-3cP6ub0dS8AfqZQAAAAU"]
[Thu Jul 30 15:04:15.664267 2026] [security2:error] [pid 3606847:tid 3606847] [client 91.106.41.226:54000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZ3_-3cP6ub0dS8AfqZQAAAAU"]
[Thu Jul 30 15:04:16.192503 2026] [access_compat:error] [pid 3605619:tid 3605619] [client 64.180.68.231:55660] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:16.340498 2026] [ssl:error] [pid 3605689:tid 3605689] (70014)End of file found: [client 216.73.216.199:14614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:16.944585 2026] [ssl:error] [pid 3602437:tid 3602437] (70014)End of file found: [client 216.73.216.199:20310] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:16.944990 2026] [ssl:error] [pid 3606904:tid 3606904] (EAI 2)Name or service not known: [client 144.76.19.72:35624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:16.945022 2026] [ssl:error] [pid 3606904:tid 3606904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:17.000933 2026] [ssl:error] [pid 3606906:tid 3606906] (EAI 2)Name or service not known: [client 144.76.19.72:35634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:17.001005 2026] [ssl:error] [pid 3606906:tid 3606906] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:17.440984 2026] [ssl:error] [pid 3605553:tid 3605553] (70014)End of file found: [client 216.73.216.199:42856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:17.696291 2026] [security2:error] [pid 3583056:tid 3583056] [client 46.248.204.190:39407] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZ4e2phSCxuvlTpcC2ngAAAB4"]
[Thu Jul 30 15:04:17.696341 2026] [security2:error] [pid 3583056:tid 3583056] [client 46.248.204.190:39407] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZ4e2phSCxuvlTpcC2ngAAAB4"]
[Thu Jul 30 15:04:17.696591 2026] [security2:error] [pid 3583056:tid 3583056] [client 46.248.204.190:39407] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZ4e2phSCxuvlTpcC2ngAAAB4"]
[Thu Jul 30 15:04:20.090521 2026] [ssl:error] [pid 3605695:tid 3605695] (EAI 2)Name or service not known: [client 144.76.19.72:23214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:20.090554 2026] [ssl:error] [pid 3605695:tid 3605695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:20.145506 2026] [ssl:error] [pid 3605695:tid 3605695] (EAI 2)Name or service not known: [client 144.76.19.72:23222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:20.145537 2026] [ssl:error] [pid 3605695:tid 3605695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:20.565364 2026] [access_compat:error] [pid 3592648:tid 3592648] [client 64.180.68.231:55898] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:21.757795 2026] [ssl:error] [pid 3605694:tid 3605694] (70014)End of file found: [client 216.73.216.199:15952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:22.254900 2026] [ssl:error] [pid 3596517:tid 3596517] (70014)End of file found: [client 216.73.216.199:39048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:22.412576 2026] [security2:error] [pid 3589640:tid 3589640] [client 190.101.86.39:55752] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZ5ktWCnpUKyRncWP-8wAAACY"]
[Thu Jul 30 15:04:22.412623 2026] [security2:error] [pid 3589640:tid 3589640] [client 190.101.86.39:55752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtZ5ktWCnpUKyRncWP-8wAAACY"]
[Thu Jul 30 15:04:22.412858 2026] [security2:error] [pid 3589640:tid 3589640] [client 190.101.86.39:55752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtZ5ktWCnpUKyRncWP-8wAAACY"]
[Thu Jul 30 15:04:22.909443 2026] [security2:error] [pid 3600933:tid 3600933] [client 74.7.241.53:59978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "player.robin64.co.uk"] [uri "/"] [unique_id "amtZ5iiZIfnPB90ZHrrauAAAAAc"]
[Thu Jul 30 15:04:23.201656 2026] [ssl:error] [pid 3607270:tid 3607270] (EAI 2)Name or service not known: [client 144.76.19.72:23224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:23.201686 2026] [ssl:error] [pid 3607270:tid 3607270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:23.253597 2026] [ssl:error] [pid 3602439:tid 3602439] (EAI 2)Name or service not known: [client 144.76.19.72:23230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:23.253629 2026] [ssl:error] [pid 3602439:tid 3602439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:23.267553 2026] [core:error] [pid 3602574:tid 3602574] (13)Permission denied: [client 216.73.216.199:64086] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-128/slab_size
[Thu Jul 30 15:04:23.870038 2026] [ssl:error] [pid 3602574:tid 3602574] (70014)End of file found: [client 216.73.216.199:64086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:24.813710 2026] [access_compat:error] [pid 3602437:tid 3602437] [client 45.158.164.139:58488] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:04:26.329263 2026] [ssl:error] [pid 3602439:tid 3602439] (EAI 2)Name or service not known: [client 144.76.19.72:23246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:26.329290 2026] [ssl:error] [pid 3602439:tid 3602439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:26.384025 2026] [ssl:error] [pid 3607270:tid 3607270] (EAI 2)Name or service not known: [client 144.76.19.72:23250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:26.384052 2026] [ssl:error] [pid 3607270:tid 3607270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:26.797595 2026] [access_compat:error] [pid 3605620:tid 3605620] [client 64.180.68.231:56250] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:27.261523 2026] [core:error] [pid 3594037:tid 3594037] [client 172.213.10.64:12079] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:27.261552 2026] [core:error] [pid 3594037:tid 3594037] [client 172.213.10.64:12079] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:27.482520 2026] [core:error] [pid 3602571:tid 3602571] (13)Permission denied: [client 216.73.216.199:62894] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory155/subsystem/uevent
[Thu Jul 30 15:04:28.725492 2026] [security2:error] [pid 3589640:tid 3589640] [client 101.33.66.34:50970] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-settings.php"] [unique_id "amtZ7EtWCnpUKyRncWP-9gAAACY"]
[Thu Jul 30 15:04:29.502819 2026] [ssl:error] [pid 3587515:tid 3587515] (EAI 2)Name or service not known: [client 144.76.19.72:23256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:29.502881 2026] [ssl:error] [pid 3587515:tid 3587515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:29.558695 2026] [ssl:error] [pid 3607086:tid 3607086] (EAI 2)Name or service not known: [client 144.76.19.72:42528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:29.558727 2026] [ssl:error] [pid 3607086:tid 3607086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:29.886490 2026] [ssl:error] [pid 3598169:tid 3598169] (70014)End of file found: [client 216.73.216.199:33073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:30.793020 2026] [ssl:error] [pid 3602571:tid 3602571] (70014)End of file found: [client 216.73.216.199:62894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:31.088812 2026] [access_compat:error] [pid 3592590:tid 3592590] [client 64.180.68.231:56477] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:31.391231 2026] [ssl:error] [pid 3607086:tid 3607086] (70014)End of file found: [client 216.73.216.199:25657] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:32.612625 2026] [ssl:error] [pid 3603739:tid 3603739] (EAI 2)Name or service not known: [client 144.76.19.72:42540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:32.612661 2026] [ssl:error] [pid 3603739:tid 3603739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:32.667491 2026] [ssl:error] [pid 3599573:tid 3599573] (EAI 2)Name or service not known: [client 144.76.19.72:42548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:32.667541 2026] [ssl:error] [pid 3599573:tid 3599573] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:33.779396 2026] [security2:error] [pid 3591537:tid 3591537] [client 94.154.43.178:16928] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ8SzmEOLDh11ejOD93QAAAAk"]
[Thu Jul 30 15:04:33.779650 2026] [security2:error] [pid 3591537:tid 3591537] [client 94.154.43.178:16928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ8SzmEOLDh11ejOD93QAAAAk"]
[Thu Jul 30 15:04:33.779896 2026] [security2:error] [pid 3591537:tid 3591537] [client 94.154.43.178:16928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ8SzmEOLDh11ejOD93QAAAAk"]
[Thu Jul 30 15:04:34.024369 2026] [security2:error] [pid 3592033:tid 3592033] [client 185.191.171.14:29710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4206.0.html"] [unique_id "amtZ8t-eFpkV_LugTnBMogAAADQ"]
[Thu Jul 30 15:04:35.303749 2026] [ssl:error] [pid 3599573:tid 3599573] (70014)End of file found: [client 216.73.216.199:32265] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:35.719582 2026] [ssl:error] [pid 3602568:tid 3602568] (EAI 2)Name or service not known: [client 144.76.19.72:42550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:35.719613 2026] [ssl:error] [pid 3602568:tid 3602568] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:35.771497 2026] [ssl:error] [pid 3605621:tid 3605621] (EAI 2)Name or service not known: [client 144.76.19.72:42566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:35.771528 2026] [ssl:error] [pid 3605621:tid 3605621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:37.115137 2026] [core:error] [pid 3605622:tid 3605622] (13)Permission denied: [client 216.73.216.199:15388] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/vars/phpelstoken
[Thu Jul 30 15:04:37.281302 2026] [security2:error] [pid 3598169:tid 3598169] [client 94.154.43.183:24944] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.tjwilliamscarpentry.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ9bwrGUl1xmSgWtYkvAAAACI"]
[Thu Jul 30 15:04:37.281506 2026] [security2:error] [pid 3598169:tid 3598169] [client 94.154.43.183:24944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.tjwilliamscarpentry.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ9bwrGUl1xmSgWtYkvAAAACI"]
[Thu Jul 30 15:04:37.281726 2026] [security2:error] [pid 3598169:tid 3598169] [client 94.154.43.183:24944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.tjwilliamscarpentry.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ9bwrGUl1xmSgWtYkvAAAACI"]
[Thu Jul 30 15:04:37.304428 2026] [core:error] [pid 3598076:tid 3598076] [client 172.213.10.64:57045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:37.304454 2026] [core:error] [pid 3598076:tid 3598076] [client 172.213.10.64:57045] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:37.360151 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 64.180.68.231:56799] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:37.417221 2026] [core:error] [pid 3605622:tid 3605622] (13)Permission denied: [client 216.73.216.199:15388] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/bin/su
[Thu Jul 30 15:04:37.742905 2026] [security2:error] [pid 3597586:tid 3597586] [client 94.154.43.185:46246] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ9UWzhNy_wkx1fI_xXgAAABA"]
[Thu Jul 30 15:04:37.743198 2026] [security2:error] [pid 3597586:tid 3597586] [client 94.154.43.185:46246] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ9UWzhNy_wkx1fI_xXgAAABA"]
[Thu Jul 30 15:04:37.743468 2026] [security2:error] [pid 3597586:tid 3597586] [client 94.154.43.185:46246] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtZ9UWzhNy_wkx1fI_xXgAAABA"]
[Thu Jul 30 15:04:38.321933 2026] [ssl:error] [pid 3605622:tid 3605622] (70014)End of file found: [client 216.73.216.199:15388] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:38.880226 2026] [ssl:error] [pid 3587515:tid 3587515] (EAI 2)Name or service not known: [client 144.76.19.72:42578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:38.880255 2026] [ssl:error] [pid 3587515:tid 3587515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:38.925369 2026] [ssl:error] [pid 3605859:tid 3605859] (70014)End of file found: [client 216.73.216.199:4895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:38.936470 2026] [ssl:error] [pid 3605621:tid 3605621] (EAI 2)Name or service not known: [client 144.76.19.72:42586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:38.936494 2026] [ssl:error] [pid 3605621:tid 3605621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:40.618599 2026] [ssl:error] [pid 3605621:tid 3605621] (70014)End of file found: [client 216.73.216.199:18988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:41.636346 2026] [access_compat:error] [pid 3607085:tid 3607085] [client 64.180.68.231:57033] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:41.989824 2026] [ssl:error] [pid 3605690:tid 3605690] (EAI 2)Name or service not known: [client 144.76.19.72:62944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:41.989853 2026] [ssl:error] [pid 3605690:tid 3605690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:42.043870 2026] [ssl:error] [pid 3607035:tid 3607035] (EAI 2)Name or service not known: [client 144.76.19.72:62946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:42.043897 2026] [ssl:error] [pid 3607035:tid 3607035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:43.074797 2026] [core:error] [pid 3607035:tid 3607035] [client 172.213.10.64:12055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:43.074820 2026] [core:error] [pid 3607035:tid 3607035] [client 172.213.10.64:12055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:44.324147 2026] [security2:error] [pid 3607140:tid 3607140] [client 51.103.46.9:47938] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mwdesign.me.uk"] [uri "/.env"] [unique_id "amtZ_HpvM9I3xgUSj_QjRgAAADI"]
[Thu Jul 30 15:04:44.324314 2026] [security2:error] [pid 3607140:tid 3607140] [client 51.103.46.9:47938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mwdesign.me.uk"] [uri "/.env"] [unique_id "amtZ_HpvM9I3xgUSj_QjRgAAADI"]
[Thu Jul 30 15:04:44.324543 2026] [security2:error] [pid 3607140:tid 3607140] [client 51.103.46.9:47938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mwdesign.me.uk"] [uri "/.env"] [unique_id "amtZ_HpvM9I3xgUSj_QjRgAAADI"]
[Thu Jul 30 15:04:44.343332 2026] [ssl:error] [pid 3605553:tid 3605553] (70014)End of file found: [client 216.73.216.199:4468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:45.098966 2026] [ssl:error] [pid 3607142:tid 3607142] (EAI 2)Name or service not known: [client 144.76.19.72:62954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:45.098998 2026] [ssl:error] [pid 3607142:tid 3607142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:45.150730 2026] [ssl:error] [pid 3605622:tid 3605622] (EAI 2)Name or service not known: [client 144.76.19.72:62960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:45.150764 2026] [ssl:error] [pid 3605622:tid 3605622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:45.156687 2026] [ssl:error] [pid 3605859:tid 3605859] (70014)End of file found: [client 216.73.216.199:4230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:45.957220 2026] [core:error] [pid 3607142:tid 3607142] (13)Permission denied: [client 216.73.216.199:51774] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/etc/crypttab
[Thu Jul 30 15:04:46.064908 2026] [ssl:error] [pid 3607142:tid 3607142] (70014)End of file found: [client 216.73.216.199:51774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:47.836723 2026] [access_compat:error] [pid 3608855:tid 3608855] [client 64.180.68.231:57354] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:47.943604 2026] [core:error] [pid 3605691:tid 3605691] [client 172.213.10.64:18712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:47.943630 2026] [core:error] [pid 3605691:tid 3605691] [client 172.213.10.64:18712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:48.204433 2026] [ssl:error] [pid 3597586:tid 3597586] (EAI 2)Name or service not known: [client 144.76.19.72:62970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:48.204468 2026] [ssl:error] [pid 3597586:tid 3597586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:48.261832 2026] [ssl:error] [pid 3607035:tid 3607035] (EAI 2)Name or service not known: [client 144.76.19.72:62980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:48.261859 2026] [ssl:error] [pid 3607035:tid 3607035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:49.007141 2026] [security2:error] [pid 3605691:tid 3605691] [client 47.128.123.119:62578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ditchlingfair.ditchfest.com"] [uri "/robots.txt"] [unique_id "amtaAdxk2Rkerg6RwFlegwAAAC4"]
[Thu Jul 30 15:04:50.559932 2026] [security2:error] [pid 3607140:tid 3607140] [client 162.14.66.219:52984] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "amtaAnpvM9I3xgUSj_QjSAAAADI"]
[Thu Jul 30 15:04:50.893189 2026] [lsapi:warn] [pid 3602437:tid 3602437] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:04:51.315580 2026] [ssl:error] [pid 3607143:tid 3607143] (EAI 2)Name or service not known: [client 144.76.19.72:38736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:51.315615 2026] [ssl:error] [pid 3607143:tid 3607143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:51.367634 2026] [ssl:error] [pid 3607142:tid 3607142] (EAI 2)Name or service not known: [client 144.76.19.72:38740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:51.367658 2026] [ssl:error] [pid 3607142:tid 3607142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:51.802714 2026] [ssl:error] [pid 3607035:tid 3607035] (70014)End of file found: [client 216.73.216.199:37611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:52.211526 2026] [access_compat:error] [pid 3609111:tid 3609111] [client 64.180.68.231:57589] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:04:52.390272 2026] [core:error] [pid 3602437:tid 3602437] [client 172.213.10.64:2738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:52.390293 2026] [core:error] [pid 3602437:tid 3602437] [client 172.213.10.64:2738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:52.487517 2026] [ssl:error] [pid 3594170:tid 3594170] (70014)End of file found: [client 216.73.216.199:35824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:52.668451 2026] [access_compat:error] [pid 3602437:tid 3602437] [client 45.158.164.139:34368] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:04:53.244882 2026] [authz_core:error] [pid 3602437:tid 3602437] [client 192.175.111.233:51813] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 15:04:53.246317 2026] [authz_core:error] [pid 3602437:tid 3602437] [client 192.175.111.233:51813] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 15:04:53.616510 2026] [ssl:error] [pid 3607086:tid 3607086] (70014)End of file found: [client 216.73.216.199:36042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:54.421507 2026] [ssl:error] [pid 3605622:tid 3605622] (EAI 2)Name or service not known: [client 144.76.19.72:38754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:54.421534 2026] [ssl:error] [pid 3605622:tid 3605622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:54.474785 2026] [ssl:error] [pid 3607140:tid 3607140] (EAI 2)Name or service not known: [client 144.76.19.72:38760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:54.474811 2026] [ssl:error] [pid 3607140:tid 3607140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:54.751550 2026] [security2:error] [pid 3605620:tid 3605620] [client 114.119.158.38:55713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574035200/cat_ids~104,30/request_format~html"] [unique_id "amtaBjxH6Uor5CqKtvFFuQAAABU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574035200/cat_ids~104,30/request_format~html
[Thu Jul 30 15:04:56.277943 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:2105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:56.277966 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:2105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:56.454418 2026] [security2:error] [pid 3609206:tid 3609206] [client 114.119.158.38:55725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574035200/cat_ids~104,30/request_format~html"] [unique_id "amtaCI5Xa3VXZHSoV-_NugAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574035200/cat_ids~104,30/request_format~html
[Thu Jul 30 15:04:57.529730 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:38762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:57.529759 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:57.582465 2026] [ssl:error] [pid 3592033:tid 3592033] (EAI 2)Name or service not known: [client 144.76.19.72:38776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:04:57.582489 2026] [ssl:error] [pid 3592033:tid 3592033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:04:57.761002 2026] [core:error] [pid 3603739:tid 3603739] [client 172.213.10.64:41751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:57.761028 2026] [core:error] [pid 3603739:tid 3603739] [client 172.213.10.64:41751] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:58.456831 2026] [ssl:error] [pid 3596517:tid 3596517] (70014)End of file found: [client 216.73.216.199:39544] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:04:59.053244 2026] [core:error] [pid 3609206:tid 3609206] [client 172.213.10.64:2287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:59.053268 2026] [core:error] [pid 3609206:tid 3609206] [client 172.213.10.64:2287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:04:59.060145 2026] [ssl:error] [pid 3589640:tid 3589640] (70014)End of file found: [client 216.73.216.199:47246] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:00.596952 2026] [ssl:error] [pid 3605691:tid 3605691] (70014)End of file found: [client 216.73.216.199:28290] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:00.661080 2026] [ssl:error] [pid 3602438:tid 3602438] (EAI 2)Name or service not known: [client 144.76.19.72:49036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:00.661111 2026] [ssl:error] [pid 3602438:tid 3602438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:00.718422 2026] [ssl:error] [pid 3606904:tid 3606904] (EAI 2)Name or service not known: [client 144.76.19.72:49046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:00.718446 2026] [ssl:error] [pid 3606904:tid 3606904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:01.122275 2026] [authz_core:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 15:05:01.570140 2026] [authz_core:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 15:05:01.820221 2026] [security2:error] [pid 3609206:tid 3609206] [client 185.191.171.8:14250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/mobile-homes-for-rent-fayetteville,-nc"] [unique_id "amtaDY5Xa3VXZHSoV-_NvAAAABI"]
[Thu Jul 30 15:05:02.165558 2026] [authz_core:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 15:05:02.893736 2026] [access_compat:error] [pid 3608855:tid 3608855] [client 64.180.68.231:58144] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:04.042988 2026] [authz_core:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 15:05:04.105858 2026] [ssl:error] [pid 3596517:tid 3596517] (EAI 2)Name or service not known: [client 144.76.19.72:49058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:04.105886 2026] [ssl:error] [pid 3596517:tid 3596517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:04.130033 2026] [ssl:error] [pid 3605859:tid 3605859] (70014)End of file found: [client 216.73.216.199:58810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:04.384857 2026] [ssl:error] [pid 3609854:tid 3609854] (EAI 2)Name or service not known: [client 144.76.19.72:49070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:04.384908 2026] [ssl:error] [pid 3609854:tid 3609854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:04.927147 2026] [security2:error] [pid 3597586:tid 3597586] [client 43.157.170.126:47606] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.innerspacer.co.uk"] [uri "/"] [unique_id "amtaEEWzhNy_wkx1fI_xaAAAABA"]
[Thu Jul 30 15:05:04.971513 2026] [authz_core:error] [pid 3607086:tid 3607086] [client 66.249.66.34:62777] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:05:04.974162 2026] [authz_core:error] [pid 3607086:tid 3607086] [client 66.249.66.34:62777] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:05:05.527861 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtaEd-eFpkV_LugTnBMugAAADQ"]
[Thu Jul 30 15:05:05.528299 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtaEd-eFpkV_LugTnBMugAAADQ"]
[Thu Jul 30 15:05:05.528535 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtaEd-eFpkV_LugTnBMugAAADQ"]
[Thu Jul 30 15:05:05.849814 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thestringman.co.uk"] [uri "/wp-config.bak"] [unique_id "amtaEd-eFpkV_LugTnBMuwAAADQ"]
[Thu Jul 30 15:05:05.849983 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.bak"] [unique_id "amtaEd-eFpkV_LugTnBMuwAAADQ"]
[Thu Jul 30 15:05:05.850391 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.bak"] [unique_id "amtaEd-eFpkV_LugTnBMuwAAADQ"]
[Thu Jul 30 15:05:05.850625 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.bak"] [unique_id "amtaEd-eFpkV_LugTnBMuwAAADQ"]
[Thu Jul 30 15:05:06.085761 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thestringman.co.uk"] [uri "/wp-config.old"] [unique_id "amtaEt-eFpkV_LugTnBMvAAAADQ"]
[Thu Jul 30 15:05:06.085925 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.old"] [unique_id "amtaEt-eFpkV_LugTnBMvAAAADQ"]
[Thu Jul 30 15:05:06.086340 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.old"] [unique_id "amtaEt-eFpkV_LugTnBMvAAAADQ"]
[Thu Jul 30 15:05:06.086576 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.old"] [unique_id "amtaEt-eFpkV_LugTnBMvAAAADQ"]
[Thu Jul 30 15:05:06.272040 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtaEt-eFpkV_LugTnBMvQAAADQ"]
[Thu Jul 30 15:05:06.272474 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtaEt-eFpkV_LugTnBMvQAAADQ"]
[Thu Jul 30 15:05:06.272693 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtaEt-eFpkV_LugTnBMvQAAADQ"]
[Thu Jul 30 15:05:06.465125 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.save"] [unique_id "amtaEt-eFpkV_LugTnBMvgAAADQ"]
[Thu Jul 30 15:05:06.465557 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.save"] [unique_id "amtaEt-eFpkV_LugTnBMvgAAADQ"]
[Thu Jul 30 15:05:06.465783 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.save"] [unique_id "amtaEt-eFpkV_LugTnBMvgAAADQ"]
[Thu Jul 30 15:05:06.568312 2026] [core:error] [pid 3605553:tid 3605553] [client 172.213.10.64:59238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:06.568338 2026] [core:error] [pid 3605553:tid 3605553] [client 172.213.10.64:59238] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:06.963091 2026] [ssl:error] [pid 3603739:tid 3603739] (70014)End of file found: [client 216.73.216.199:45946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:07.264310 2026] [ssl:error] [pid 3609855:tid 3609855] (70014)End of file found: [client 216.73.216.199:2676] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:07.443108 2026] [ssl:error] [pid 3610041:tid 3610041] (EAI 2)Name or service not known: [client 144.76.19.72:49086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:07.443153 2026] [ssl:error] [pid 3610041:tid 3610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:07.496142 2026] [ssl:error] [pid 3602571:tid 3602571] (EAI 2)Name or service not known: [client 144.76.19.72:49088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:07.496171 2026] [ssl:error] [pid 3602571:tid 3602571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:07.767343 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.txt"] [unique_id "amtaE9-eFpkV_LugTnBMvwAAADQ"]
[Thu Jul 30 15:05:07.767752 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.txt"] [unique_id "amtaE9-eFpkV_LugTnBMvwAAADQ"]
[Thu Jul 30 15:05:07.767982 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.php.txt"] [unique_id "amtaE9-eFpkV_LugTnBMvwAAADQ"]
[Thu Jul 30 15:05:09.045627 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.txt"] [unique_id "amtaFd-eFpkV_LugTnBMwAAAADQ"]
[Thu Jul 30 15:05:09.046027 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.txt"] [unique_id "amtaFd-eFpkV_LugTnBMwAAAADQ"]
[Thu Jul 30 15:05:09.046254 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.txt"] [unique_id "amtaFd-eFpkV_LugTnBMwAAAADQ"]
[Thu Jul 30 15:05:09.080452 2026] [access_compat:error] [pid 3598961:tid 3598961] [client 64.180.68.231:58472] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:09.203911 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/wp-config.php~"] [unique_id "amtaFd-eFpkV_LugTnBMwQAAADQ"]
[Thu Jul 30 15:05:09.204327 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-config.php~"] [unique_id "amtaFd-eFpkV_LugTnBMwQAAADQ"]
[Thu Jul 30 15:05:09.204560 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-config.php~"] [unique_id "amtaFd-eFpkV_LugTnBMwQAAADQ"]
[Thu Jul 30 15:05:09.313963 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thestringman.co.uk"] [uri "/.wp-config.php.swp"] [unique_id "amtaFd-eFpkV_LugTnBMwgAAADQ"]
[Thu Jul 30 15:05:09.314387 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/.wp-config.php.swp"] [unique_id "amtaFd-eFpkV_LugTnBMwgAAADQ"]
[Thu Jul 30 15:05:09.314621 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/.wp-config.php.swp"] [unique_id "amtaFd-eFpkV_LugTnBMwgAAADQ"]
[Thu Jul 30 15:05:09.417043 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thestringman.co.uk"] [uri "/wp-content/debug.log"] [unique_id "amtaFd-eFpkV_LugTnBMwwAAADQ"]
[Thu Jul 30 15:05:09.417573 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/wp-content/debug.log"] [unique_id "amtaFd-eFpkV_LugTnBMwwAAADQ"]
[Thu Jul 30 15:05:09.417799 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/wp-content/debug.log"] [unique_id "amtaFd-eFpkV_LugTnBMwwAAADQ"]
[Thu Jul 30 15:05:09.626258 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "thestringman.co.uk"] [uri "/debug.log"] [unique_id "amtaFd-eFpkV_LugTnBMxAAAADQ"]
[Thu Jul 30 15:05:09.626774 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thestringman.co.uk"] [uri "/debug.log"] [unique_id "amtaFd-eFpkV_LugTnBMxAAAADQ"]
[Thu Jul 30 15:05:09.626986 2026] [security2:error] [pid 3592033:tid 3592033] [client 195.178.110.211:47136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "thestringman.co.uk"] [uri "/debug.log"] [unique_id "amtaFd-eFpkV_LugTnBMxAAAADQ"]
[Thu Jul 30 15:05:10.187062 2026] [ssl:error] [pid 3602568:tid 3602568] (70014)End of file found: [client 216.73.216.199:54379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:10.292095 2026] [core:error] [pid 3610041:tid 3610041] [client 172.213.10.64:61909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:10.292120 2026] [core:error] [pid 3610041:tid 3610041] [client 172.213.10.64:61909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:10.548250 2026] [ssl:error] [pid 3609600:tid 3609600] (EAI 2)Name or service not known: [client 144.76.19.72:57790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:10.548281 2026] [ssl:error] [pid 3609600:tid 3609600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:10.601492 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:57798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:10.601524 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:11.644934 2026] [core:error] [pid 3609912:tid 3609912] [client 172.213.10.64:59634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:11.644959 2026] [core:error] [pid 3609912:tid 3609912] [client 172.213.10.64:59634] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:12.074485 2026] [ssl:error] [pid 3583056:tid 3583056] (70014)End of file found: [client 216.73.216.199:33518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:12.302294 2026] [security2:error] [pid 3600934:tid 3600934] [client 51.103.46.9:42150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "unclaimedassets.co.uk"] [uri "/.env"] [unique_id "amtaGNmoLa_KSSJ9-OKiMwAAABE"]
[Thu Jul 30 15:05:12.302731 2026] [security2:error] [pid 3600934:tid 3600934] [client 51.103.46.9:42150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "unclaimedassets.co.uk"] [uri "/.env"] [unique_id "amtaGNmoLa_KSSJ9-OKiMwAAABE"]
[Thu Jul 30 15:05:12.384686 2026] [core:error] [pid 3600933:tid 3600933] [client 172.213.10.64:30628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:12.384711 2026] [core:error] [pid 3600933:tid 3600933] [client 172.213.10.64:30628] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:12.587738 2026] [ssl:error] [pid 3601359:tid 3601359] (70014)End of file found: [client 216.73.216.199:43314] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:13.032464 2026] [security2:error] [pid 3600934:tid 3600934] [client 51.103.46.9:42150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "unclaimedassets.co.uk"] [uri "/index.php"] [unique_id "amtaGNmoLa_KSSJ9-OKiMwAAABE"]
[Thu Jul 30 15:05:13.404176 2026] [access_compat:error] [pid 3597586:tid 3597586] [client 64.180.68.231:58704] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:13.657737 2026] [ssl:error] [pid 3609600:tid 3609600] (EAI 2)Name or service not known: [client 144.76.19.72:57808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:13.657772 2026] [ssl:error] [pid 3609600:tid 3609600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:13.709568 2026] [ssl:error] [pid 3602229:tid 3602229] (EAI 2)Name or service not known: [client 144.76.19.72:57812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:13.709597 2026] [ssl:error] [pid 3602229:tid 3602229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:13.999359 2026] [core:error] [pid 3589640:tid 3589640] [client 172.213.10.64:2279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:13.999391 2026] [core:error] [pid 3589640:tid 3589640] [client 172.213.10.64:2279] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:15.034849 2026] [core:error] [pid 3589640:tid 3589640] [client 172.213.10.64:20507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:15.034874 2026] [core:error] [pid 3589640:tid 3589640] [client 172.213.10.64:20507] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:15.080105 2026] [authz_core:error] [pid 3602229:tid 3602229] [client 169.58.39.193:65018] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:05:15.417418 2026] [core:error] [pid 3589640:tid 3589640] [client 172.213.10.64:44167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:15.417439 2026] [core:error] [pid 3589640:tid 3589640] [client 172.213.10.64:44167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:15.826944 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:20525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:15.826967 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:20525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:16.125212 2026] [core:error] [pid 3609854:tid 3609854] [client 172.213.10.64:13115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:16.125239 2026] [core:error] [pid 3609854:tid 3609854] [client 172.213.10.64:13115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:16.307547 2026] [ssl:error] [pid 3606904:tid 3606904] (70014)End of file found: [client 216.73.216.199:52297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:16.350715 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:44170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:16.350740 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:44170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:16.764227 2026] [ssl:error] [pid 3609600:tid 3609600] (EAI 2)Name or service not known: [client 144.76.19.72:57824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:16.764253 2026] [ssl:error] [pid 3609600:tid 3609600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:16.820503 2026] [ssl:error] [pid 3592033:tid 3592033] (EAI 2)Name or service not known: [client 144.76.19.72:57826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:16.820529 2026] [ssl:error] [pid 3592033:tid 3592033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:16.890111 2026] [core:error] [pid 3609854:tid 3609854] [client 172.213.10.64:44194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:16.890139 2026] [core:error] [pid 3609854:tid 3609854] [client 172.213.10.64:44194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:17.414717 2026] [ssl:error] [pid 3607086:tid 3607086] (70014)End of file found: [client 216.73.216.199:3276] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:18.236934 2026] [security2:error] [pid 3609913:tid 3609913] [client 43.133.14.237:34446] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "stopfordsackville.com"] [uri "/"] [unique_id "amtaHlGuQVRAStu-ebA7wQAAADA"]
[Thu Jul 30 15:05:18.237854 2026] [authz_core:error] [pid 3609913:tid 3609913] [client 43.133.14.237:34446] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 15:05:18.271941 2026] [core:error] [pid 3607142:tid 3607142] [client 172.213.10.64:2874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:18.271976 2026] [core:error] [pid 3607142:tid 3607142] [client 172.213.10.64:2874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:19.505984 2026] [security2:error] [pid 3583056:tid 3583056] [client 105.99.248.198:42272] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaH-2phSCxuvlTpcC2uAAAAB4"]
[Thu Jul 30 15:05:19.506046 2026] [security2:error] [pid 3583056:tid 3583056] [client 105.99.248.198:42272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaH-2phSCxuvlTpcC2uAAAAB4"]
[Thu Jul 30 15:05:19.506291 2026] [security2:error] [pid 3583056:tid 3583056] [client 105.99.248.198:42272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaH-2phSCxuvlTpcC2uAAAAB4"]
[Thu Jul 30 15:05:19.612668 2026] [access_compat:error] [pid 3601359:tid 3601359] [client 64.180.68.231:59032] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:19.873819 2026] [ssl:error] [pid 3597586:tid 3597586] (EAI 2)Name or service not known: [client 144.76.19.72:50100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:19.873852 2026] [ssl:error] [pid 3597586:tid 3597586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:19.926833 2026] [ssl:error] [pid 3607142:tid 3607142] (EAI 2)Name or service not known: [client 144.76.19.72:50108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:19.926877 2026] [ssl:error] [pid 3607142:tid 3607142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:20.870707 2026] [security2:error] [pid 3610041:tid 3610041] [client 43.157.179.227:55450] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glasgowball.com"] [uri "/"] [unique_id "amtaIPvVKoIl9PGP4O-5rQAAADc"]
[Thu Jul 30 15:05:21.276829 2026] [security2:error] [pid 3610041:tid 3610041] [client 47.243.207.63:27399] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaIfvVKoIl9PGP4O-5rwAAADc"]
[Thu Jul 30 15:05:21.276910 2026] [security2:error] [pid 3610041:tid 3610041] [client 47.243.207.63:27399] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaIfvVKoIl9PGP4O-5rwAAADc"]
[Thu Jul 30 15:05:21.277248 2026] [security2:error] [pid 3610041:tid 3610041] [client 47.243.207.63:27399] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaIfvVKoIl9PGP4O-5rwAAADc"]
[Thu Jul 30 15:05:21.433274 2026] [core:error] [pid 3605695:tid 3605695] [client 172.213.10.64:2210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:21.433301 2026] [core:error] [pid 3605695:tid 3605695] [client 172.213.10.64:2210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:22.052579 2026] [security2:error] [pid 3600933:tid 3600933] [client 43.157.179.227:57086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020"] [unique_id "amtaIiiZIfnPB90ZHrra0wAAAAc"], referer: http://glasgowball.com
[Thu Jul 30 15:05:22.804697 2026] [authz_core:error] [pid 3597586:tid 3597586] [client 169.58.39.193:50067] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:05:22.981791 2026] [ssl:error] [pid 3607086:tid 3607086] (EAI 2)Name or service not known: [client 144.76.19.72:50120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:22.981843 2026] [ssl:error] [pid 3607086:tid 3607086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:23.036184 2026] [ssl:error] [pid 3601359:tid 3601359] (EAI 2)Name or service not known: [client 144.76.19.72:50122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:23.036223 2026] [ssl:error] [pid 3601359:tid 3601359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:23.242241 2026] [security2:error] [pid 3609111:tid 3609111] [client 43.157.179.227:58792] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020/"] [unique_id "amtaIxZ8pTXn2J5sx19zHgAAAAk"], referer: http://www.glasgowball.com/glaball/2020
[Thu Jul 30 15:05:23.893530 2026] [core:error] [pid 3609600:tid 3609600] (13)Permission denied: [client 216.73.216.199:64138] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/db/nscd/netgroup
[Thu Jul 30 15:05:23.984441 2026] [security2:error] [pid 3602440:tid 3602440] [client 47.243.207.63:29151] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaI8OFUbyQcfPtPxf7fAAAACg"]
[Thu Jul 30 15:05:23.984489 2026] [security2:error] [pid 3602440:tid 3602440] [client 47.243.207.63:29151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaI8OFUbyQcfPtPxf7fAAAACg"]
[Thu Jul 30 15:05:23.984720 2026] [security2:error] [pid 3602440:tid 3602440] [client 47.243.207.63:29151] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaI8OFUbyQcfPtPxf7fAAAACg"]
[Thu Jul 30 15:05:24.059181 2026] [access_compat:error] [pid 3611040:tid 3611040] [client 64.180.68.231:59269] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:24.496395 2026] [ssl:error] [pid 3609600:tid 3609600] (70014)End of file found: [client 216.73.216.199:64138] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:24.800978 2026] [core:error] [pid 3609912:tid 3609912] (13)Permission denied: [client 216.73.216.199:62536] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty37/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 15:05:25.250836 2026] [lsapi:warn] [pid 3602440:tid 3602440] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:05:25.703241 2026] [ssl:error] [pid 3609912:tid 3609912] (70014)End of file found: [client 216.73.216.199:62536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:26.093361 2026] [ssl:error] [pid 3610041:tid 3610041] (EAI 2)Name or service not known: [client 144.76.19.72:50138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:26.093387 2026] [ssl:error] [pid 3610041:tid 3610041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:26.149160 2026] [ssl:error] [pid 3609111:tid 3609111] (EAI 2)Name or service not known: [client 144.76.19.72:50148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:26.149189 2026] [ssl:error] [pid 3609111:tid 3609111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:26.607144 2026] [ssl:error] [pid 3605691:tid 3605691] (70014)End of file found: [client 216.73.216.199:10559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:28.756322 2026] [core:error] [pid 3605695:tid 3605695] [client 172.213.10.64:2840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:28.756345 2026] [core:error] [pid 3605695:tid 3605695] [client 172.213.10.64:2840] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:29.203214 2026] [ssl:error] [pid 3602437:tid 3602437] (EAI 2)Name or service not known: [client 144.76.19.72:50154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:29.203249 2026] [ssl:error] [pid 3602437:tid 3602437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:29.260522 2026] [ssl:error] [pid 3607143:tid 3607143] (EAI 2)Name or service not known: [client 144.76.19.72:50158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:29.260556 2026] [ssl:error] [pid 3607143:tid 3607143] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:29.577080 2026] [cgi:error] [pid 3609111:tid 3609111] [client 20.199.183.73:17139] AH02812: stderr from /home/minervamhaco/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:05:29.716322 2026] [authz_core:error] [pid 3605619:tid 3605619] [client 20.104.22.47:65478] AH01630: client denied by server configuration: /home/alismcom/public_html/alism.net/php.ini
[Thu Jul 30 15:05:30.526049 2026] [core:error] [pid 3607143:tid 3607143] (13)Permission denied: [client 216.73.216.199:16708] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:37/subsystem/ttyS3/custom_divisor
[Thu Jul 30 15:05:30.818710 2026] [access_compat:error] [pid 3605622:tid 3605622] [client 45.158.164.139:37606] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:05:31.001394 2026] [access_compat:error] [pid 3598961:tid 3598961] [client 45.158.164.139:37616] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:05:31.586499 2026] [cgi:error] [pid 3611444:tid 3611444] [client 54.226.9.66:12459] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:05:32.317765 2026] [ssl:error] [pid 3602438:tid 3602438] (EAI 2)Name or service not known: [client 144.76.19.72:49618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:32.317793 2026] [ssl:error] [pid 3602438:tid 3602438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:32.372165 2026] [ssl:error] [pid 3565723:tid 3565723] (EAI 2)Name or service not known: [client 144.76.19.72:49632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:32.372192 2026] [ssl:error] [pid 3565723:tid 3565723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:32.596566 2026] [access_compat:error] [pid 3600933:tid 3600933] [client 45.158.164.139:37642] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:05:32.975385 2026] [security2:error] [pid 3592033:tid 3592033] [client 185.191.171.16:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.revoracing.org.uk"] [uri "/2016/05/"] [unique_id "amtaLN-eFpkV_LugTnBNDAAAADQ"]
[Thu Jul 30 15:05:34.362381 2026] [cgi:error] [pid 3606906:tid 3606906] [client 216.73.216.199:32716] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/perl5/utf8_heavy.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 15:05:34.362443 2026] [cgi:error] [pid 3606906:tid 3606906] [client 216.73.216.199:32716] End of script output before headers: utf8_heavy.pl
[Thu Jul 30 15:05:34.651852 2026] [access_compat:error] [pid 3602437:tid 3602437] [client 64.180.68.231:59829] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:35.445133 2026] [ssl:error] [pid 3607140:tid 3607140] (EAI 2)Name or service not known: [client 144.76.19.72:49640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:35.445170 2026] [ssl:error] [pid 3607140:tid 3607140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:35.500026 2026] [ssl:error] [pid 3592033:tid 3592033] (EAI 2)Name or service not known: [client 144.76.19.72:49652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:35.500059 2026] [ssl:error] [pid 3592033:tid 3592033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:37.058204 2026] [core:error] [pid 3609911:tid 3609911] [client 172.213.10.64:21542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:37.058228 2026] [core:error] [pid 3609911:tid 3609911] [client 172.213.10.64:21542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:37.226664 2026] [security2:error] [pid 3611688:tid 3611688] [client 43.165.186.188:34440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtaMWlCCyEiFHnH6t0ajgAAACU"]
[Thu Jul 30 15:05:38.081674 2026] [core:error] [pid 3607143:tid 3607143] (13)Permission denied: [client 216.73.216.199:16708] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory176/subsystem/uevent
[Thu Jul 30 15:05:38.391900 2026] [ssl:error] [pid 3607143:tid 3607143] (70014)End of file found: [client 216.73.216.199:16708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:38.557153 2026] [ssl:error] [pid 3611688:tid 3611688] (EAI 2)Name or service not known: [client 144.76.19.72:49656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:38.557185 2026] [ssl:error] [pid 3611688:tid 3611688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:38.608968 2026] [ssl:error] [pid 3605622:tid 3605622] (EAI 2)Name or service not known: [client 144.76.19.72:49658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:38.609016 2026] [ssl:error] [pid 3605622:tid 3605622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:38.856918 2026] [security2:error] [pid 3605691:tid 3605691] [client 43.165.186.188:41694] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtaMtxk2Rkerg6RwFlemAAAAC4"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 15:05:39.599677 2026] [core:error] [pid 3600934:tid 3600934] (13)Permission denied: [client 216.73.216.199:31844] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 15:05:40.272596 2026] [ssl:error] [pid 3600934:tid 3600934] (70014)End of file found: [client 216.73.216.199:31844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:40.929452 2026] [access_compat:error] [pid 3609855:tid 3609855] [client 64.180.68.231:60157] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:41.664046 2026] [ssl:error] [pid 3607142:tid 3607142] (EAI 2)Name or service not known: [client 144.76.19.72:65046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:41.664083 2026] [ssl:error] [pid 3607142:tid 3607142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:41.721174 2026] [ssl:error] [pid 3592642:tid 3592642] (EAI 2)Name or service not known: [client 144.76.19.72:65058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:41.721213 2026] [ssl:error] [pid 3592642:tid 3592642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:42.323477 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:19126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:42.323504 2026] [core:error] [pid 3592033:tid 3592033] [client 172.213.10.64:19126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:42.379882 2026] [ssl:error] [pid 3611040:tid 3611040] (70014)End of file found: [client 216.73.216.199:33625] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:44.777962 2026] [ssl:error] [pid 3603739:tid 3603739] (EAI 2)Name or service not known: [client 144.76.19.72:65072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:44.778011 2026] [ssl:error] [pid 3603739:tid 3603739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:44.829713 2026] [ssl:error] [pid 3591584:tid 3591584] (EAI 2)Name or service not known: [client 144.76.19.72:65074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:44.829758 2026] [ssl:error] [pid 3591584:tid 3591584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:45.197843 2026] [access_compat:error] [pid 3605691:tid 3605691] [client 64.180.68.231:60381] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:45.995811 2026] [ssl:error] [pid 3609854:tid 3609854] (70014)End of file found: [client 216.73.216.199:5873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:46.488678 2026] [ssl:error] [pid 3607035:tid 3607035] (70014)End of file found: [client 216.73.216.199:45042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:46.926573 2026] [authz_core:error] [pid 3607086:tid 3607086] [client 20.193.250.173:57784] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 15:05:47.538790 2026] [core:error] [pid 3608855:tid 3608855] [client 172.213.10.64:22916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:47.538813 2026] [core:error] [pid 3608855:tid 3608855] [client 172.213.10.64:22916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:47.808873 2026] [authz_core:error] [pid 3598076:tid 3598076] [client 66.249.66.41:65195] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:05:47.811997 2026] [authz_core:error] [pid 3598076:tid 3598076] [client 66.249.66.41:65195] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:05:47.885297 2026] [ssl:error] [pid 3609915:tid 3609915] (EAI 2)Name or service not known: [client 144.76.19.72:65080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:47.885334 2026] [ssl:error] [pid 3609915:tid 3609915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:47.941620 2026] [ssl:error] [pid 3611040:tid 3611040] (EAI 2)Name or service not known: [client 144.76.19.72:65088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:47.941653 2026] [ssl:error] [pid 3611040:tid 3611040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:48.437519 2026] [ssl:error] [pid 3602438:tid 3602438] (70014)End of file found: [client 216.73.216.199:40624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:48.946907 2026] [authz_core:error] [pid 3611688:tid 3611688] [client 66.249.66.33:34948] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:05:48.949566 2026] [authz_core:error] [pid 3611688:tid 3611688] [client 66.249.66.33:34948] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:05:50.420036 2026] [core:error] [pid 3607142:tid 3607142] [client 172.213.10.64:22943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:50.420058 2026] [core:error] [pid 3607142:tid 3607142] [client 172.213.10.64:22943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:50.996880 2026] [ssl:error] [pid 3611792:tid 3611792] (EAI 2)Name or service not known: [client 144.76.19.72:42544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:50.996916 2026] [ssl:error] [pid 3611792:tid 3611792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:51.048796 2026] [ssl:error] [pid 3591584:tid 3591584] (EAI 2)Name or service not known: [client 144.76.19.72:42550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:51.048826 2026] [ssl:error] [pid 3591584:tid 3591584] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:51.409329 2026] [access_compat:error] [pid 3609915:tid 3609915] [client 64.180.68.231:60704] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:51.768299 2026] [core:error] [pid 3605619:tid 3605619] (13)Permission denied: [client 216.73.216.199:19342] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory175/subsystem/uevent
[Thu Jul 30 15:05:52.371685 2026] [core:error] [pid 3605619:tid 3605619] (13)Permission denied: [client 216.73.216.199:19342] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty54/subsystem/ttyS3/flags
[Thu Jul 30 15:05:53.296645 2026] [cgi:error] [pid 3605619:tid 3605619] [client 216.73.216.199:19342] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/cb-testi.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 15:05:53.296704 2026] [cgi:error] [pid 3605619:tid 3605619] [client 216.73.216.199:19342] End of script output before headers: cb-testi.pl
[Thu Jul 30 15:05:53.774863 2026] [core:error] [pid 3611793:tid 3611793] [client 172.213.10.64:13341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:53.774886 2026] [core:error] [pid 3611793:tid 3611793] [client 172.213.10.64:13341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:53.792012 2026] [ssl:error] [pid 3605619:tid 3605619] (70014)End of file found: [client 216.73.216.199:60269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:54.105060 2026] [ssl:error] [pid 3600934:tid 3600934] (EAI 2)Name or service not known: [client 144.76.19.72:42556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:54.105105 2026] [ssl:error] [pid 3600934:tid 3600934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:54.160880 2026] [ssl:error] [pid 3607142:tid 3607142] (EAI 2)Name or service not known: [client 144.76.19.72:42564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:54.160913 2026] [ssl:error] [pid 3607142:tid 3607142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:54.418236 2026] [lsapi:warn] [pid 3585927:tid 3585927] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:05:55.166211 2026] [core:error] [pid 3611688:tid 3611688] [client 172.213.10.64:2771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:55.166253 2026] [core:error] [pid 3611688:tid 3611688] [client 172.213.10.64:2771] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:55.411014 2026] [ssl:error] [pid 3608855:tid 3608855] (70014)End of file found: [client 216.73.216.199:39313] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:55.707917 2026] [ssl:error] [pid 3610041:tid 3610041] (70014)End of file found: [client 216.73.216.199:48752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:05:55.831007 2026] [access_compat:error] [pid 3609111:tid 3609111] [client 64.180.68.231:60934] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:05:56.261702 2026] [access_compat:error] [pid 3585927:tid 3585927] [client 45.158.164.139:43556] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:05:56.450205 2026] [core:error] [pid 3607140:tid 3607140] [client 172.213.10.64:13328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:56.450236 2026] [core:error] [pid 3607140:tid 3607140] [client 172.213.10.64:13328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:56.506327 2026] [security2:error] [pid 3611688:tid 3611688] [client 100.24.167.60:13019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/automated-alerting-made-easy-itsm-integration-with-solarwinds/"] [unique_id "amtaRGlCCyEiFHnH6t0amwAAACU"]
[Thu Jul 30 15:05:57.215476 2026] [ssl:error] [pid 3607086:tid 3607086] (EAI 2)Name or service not known: [client 144.76.19.72:42570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:57.215506 2026] [ssl:error] [pid 3607086:tid 3607086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:57.270061 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:42580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:05:57.270109 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:05:57.386862 2026] [core:error] [pid 3602437:tid 3602437] [client 172.213.10.64:27844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:57.386883 2026] [core:error] [pid 3602437:tid 3602437] [client 172.213.10.64:27844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:58.774865 2026] [security2:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clientseodata.com"] [uri "/"] [unique_id "amtaRk1pfeC2w2DVKYyTAgAAACs"]
[Thu Jul 30 15:05:58.776096 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 15:05:58.776191 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 15:05:58.776351 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 15:05:58.776532 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 15:05:58.776609 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 15:05:58.776765 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 15:05:58.776922 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 15:05:58.776987 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 15:05:58.777157 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 15:05:58.777276 2026] [authz_core:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 15:05:58.777334 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 15:05:58.777399 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 15:05:58.777562 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 15:05:58.777761 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 15:05:58.777829 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 15:05:58.777986 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 15:05:58.778147 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 15:05:58.778215 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 15:05:58.778372 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 15:05:58.779168 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 15:05:58.779234 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 15:05:58.779389 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 15:05:58.779559 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 15:05:58.779636 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 15:05:58.779795 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 15:05:58.780283 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 15:05:58.780349 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 15:05:58.780514 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 15:05:58.780669 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 15:05:58.780733 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 15:05:58.780889 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 101.32.49.171:33078] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 15:05:59.109937 2026] [core:error] [pid 3602437:tid 3602437] [client 172.213.10.64:59579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:59.109962 2026] [core:error] [pid 3602437:tid 3602437] [client 172.213.10.64:59579] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:05:59.269975 2026] [authz_core:error] [pid 3609600:tid 3609600] [client 66.249.66.33:57113] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:05:59.272717 2026] [authz_core:error] [pid 3609600:tid 3609600] [client 66.249.66.33:57113] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:06:00.007684 2026] [core:error] [pid 3602571:tid 3602571] [client 172.213.10.64:27852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:00.007713 2026] [core:error] [pid 3602571:tid 3602571] [client 172.213.10.64:27852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:00.199953 2026] [security2:error] [pid 3601359:tid 3601359] [client 23.23.99.55:47274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/category/alerting-custom-alerts/"] [unique_id "amtaSKDPKwszsd5GR40-WAAAAAw"]
[Thu Jul 30 15:06:00.326852 2026] [ssl:error] [pid 3602576:tid 3602576] (EAI 2)Name or service not known: [client 144.76.19.72:22004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:00.326883 2026] [ssl:error] [pid 3602576:tid 3602576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:00.382987 2026] [ssl:error] [pid 3592642:tid 3592642] (EAI 2)Name or service not known: [client 144.76.19.72:22008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:00.383017 2026] [ssl:error] [pid 3592642:tid 3592642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:00.532564 2026] [core:error] [pid 3605622:tid 3605622] (13)Permission denied: [client 216.73.216.199:33412] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS0/close_delay
[Thu Jul 30 15:06:00.833735 2026] [core:error] [pid 3605622:tid 3605622] (13)Permission denied: [client 216.73.216.199:33412] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:46/subsystem/ttyS3/custom_divisor
[Thu Jul 30 15:06:01.134729 2026] [core:error] [pid 3605622:tid 3605622] (13)Permission denied: [client 216.73.216.199:33412] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/myattsfields.org.db
[Thu Jul 30 15:06:01.213156 2026] [core:error] [pid 3598076:tid 3598076] [client 172.213.10.64:59539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:01.213186 2026] [core:error] [pid 3598076:tid 3598076] [client 172.213.10.64:59539] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:01.436272 2026] [core:error] [pid 3605622:tid 3605622] (13)Permission denied: [client 216.73.216.199:33412] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/subsystem/ttyS0/custom_divisor
[Thu Jul 30 15:06:01.736454 2026] [ssl:error] [pid 3605622:tid 3605622] (70014)End of file found: [client 216.73.216.199:33412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:01.986338 2026] [core:error] [pid 3611040:tid 3611040] [client 172.213.10.64:2773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:01.986364 2026] [core:error] [pid 3611040:tid 3611040] [client 172.213.10.64:2773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:02.525457 2026] [security2:error] [pid 3602437:tid 3602437] [client 85.208.96.210:19976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/airplane-hangar-for-sale-utah"] [unique_id "amtaSoW0fg6T8-474Ro_-gAAAB0"]
[Thu Jul 30 15:06:03.164301 2026] [security2:error] [pid 3605553:tid 3605553] [client 3.221.222.168:50130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/after-the-war/atw-and-me/"] [unique_id "amtaSxnaITZQcZB4BaKF5wAAAAY"]
[Thu Jul 30 15:06:03.437683 2026] [ssl:error] [pid 3602576:tid 3602576] (EAI 2)Name or service not known: [client 144.76.19.72:22010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:03.437707 2026] [ssl:error] [pid 3602576:tid 3602576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:03.493644 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:22026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:03.493671 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:03.896890 2026] [security2:error] [pid 3602576:tid 3602576] [client 34.206.193.60:21824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/webinar-on-demand-event-triggered-network-diagnosis-with-solarwinds-netbrain/"] [unique_id "amtaS2vCVYm50neB5O8R-QAAADE"]
[Thu Jul 30 15:06:04.503579 2026] [core:error] [pid 3592494:tid 3592494] [client 172.213.10.64:30530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:04.503601 2026] [core:error] [pid 3592494:tid 3592494] [client 172.213.10.64:30530] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:04.747316 2026] [ssl:error] [pid 3610041:tid 3610041] (70014)End of file found: [client 216.73.216.199:37270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:05.658181 2026] [ssl:error] [pid 3592642:tid 3592642] (70014)End of file found: [client 216.73.216.199:11235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:06.415588 2026] [access_compat:error] [pid 3602438:tid 3602438] [client 64.180.68.231:61492] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:06.551420 2026] [ssl:error] [pid 3602571:tid 3602571] (EAI 2)Name or service not known: [client 144.76.19.72:22038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:06.551446 2026] [ssl:error] [pid 3602571:tid 3602571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:06.602790 2026] [ssl:error] [pid 3607142:tid 3607142] (EAI 2)Name or service not known: [client 144.76.19.72:22048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:06.602817 2026] [ssl:error] [pid 3607142:tid 3607142] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:06.608797 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 15:06:07.058513 2026] [ssl:error] [pid 3601359:tid 3601359] (70014)End of file found: [client 216.73.216.199:25658] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:07.526094 2026] [security2:error] [pid 3611039:tid 3611039] [client 20.171.55.167:6619] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.andrewvenables.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtaT6S9tTchWD3Yd234RAAAABI"]
[Thu Jul 30 15:06:07.526347 2026] [security2:error] [pid 3611039:tid 3611039] [client 20.171.55.167:6619] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.andrewvenables.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtaT6S9tTchWD3Yd234RAAAABI"]
[Thu Jul 30 15:06:07.554889 2026] [security2:error] [pid 3611039:tid 3611039] [client 20.171.55.167:6619] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.andrewvenables.com"] [uri "/403.shtml"] [unique_id "amtaT6S9tTchWD3Yd234RAAAABI"]
[Thu Jul 30 15:06:08.033578 2026] [security2:error] [pid 3607086:tid 3607086] [client 100.29.107.38:31458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/webinar-on-demand-accessing-the-value-of-automation-to-netops-with-netbrain/"] [unique_id "amtaUOtVLw_7PQrRet6V_AAAAC8"]
[Thu Jul 30 15:06:09.655422 2026] [ssl:error] [pid 3607140:tid 3607140] (EAI 2)Name or service not known: [client 144.76.19.72:59806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:09.655451 2026] [ssl:error] [pid 3607140:tid 3607140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:09.710156 2026] [ssl:error] [pid 3611732:tid 3611732] (EAI 2)Name or service not known: [client 144.76.19.72:59822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:09.710186 2026] [ssl:error] [pid 3611732:tid 3611732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:10.207485 2026] [core:error] [pid 3606906:tid 3606906] [client 172.213.10.64:13312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:10.207511 2026] [core:error] [pid 3606906:tid 3606906] [client 172.213.10.64:13312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:11.201104 2026] [ssl:error] [pid 3592642:tid 3592642] (70014)End of file found: [client 216.73.216.199:44048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:11.293958 2026] [lsapi:warn] [pid 3607035:tid 3607035] [client 64.71.166.38:44176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:06:11.294006 2026] [lsapi:warn] [pid 3607035:tid 3607035] [client 64.71.166.38:44176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:06:11.413604 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 15:06:12.118237 2026] [ssl:error] [pid 3609600:tid 3609600] (70014)End of file found: [client 216.73.216.199:13194] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:12.169685 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 15:06:12.200758 2026] [security2:error] [pid 3611688:tid 3611688] [client 47.254.92.190:36060] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amtaVGlCCyEiFHnH6t0aoQAAACU"]
[Thu Jul 30 15:06:12.261231 2026] [security2:error] [pid 3608855:tid 3608855] [client 52.205.113.104:22971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/downloads/solarwinds-access-rights-manager-trial/"] [unique_id "amtaVP1-rcauJFU3_OANigAAAAU"]
[Thu Jul 30 15:06:12.618757 2026] [core:error] [pid 3607035:tid 3607035] (13)Permission denied: [client 216.73.216.199:21248] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty24/subsystem/ttyS3/close_delay
[Thu Jul 30 15:06:12.780042 2026] [ssl:error] [pid 3613507:tid 3613507] (EAI 2)Name or service not known: [client 144.76.19.72:59828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:12.780100 2026] [ssl:error] [pid 3613507:tid 3613507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:12.794564 2026] [core:error] [pid 3601359:tid 3601359] [client 172.213.10.64:59521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:12.794587 2026] [core:error] [pid 3601359:tid 3601359] [client 172.213.10.64:59521] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:12.839770 2026] [ssl:error] [pid 3613387:tid 3613387] (EAI 2)Name or service not known: [client 144.76.19.72:59830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:12.839800 2026] [ssl:error] [pid 3613387:tid 3613387] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:12.874705 2026] [access_compat:error] [pid 3592033:tid 3592033] [client 64.180.68.231:61829] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:12.990045 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 15:06:13.231251 2026] [security2:error] [pid 3598076:tid 3598076] [client 14.191.252.101:6582] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaVTIw4BnJdtF0SK-OYgAAABY"]
[Thu Jul 30 15:06:13.231297 2026] [security2:error] [pid 3598076:tid 3598076] [client 14.191.252.101:6582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaVTIw4BnJdtF0SK-OYgAAABY"]
[Thu Jul 30 15:06:13.231567 2026] [security2:error] [pid 3598076:tid 3598076] [client 14.191.252.101:6582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaVTIw4BnJdtF0SK-OYgAAABY"]
[Thu Jul 30 15:06:13.623478 2026] [ssl:error] [pid 3607035:tid 3607035] (70014)End of file found: [client 216.73.216.199:21248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:14.027980 2026] [security2:error] [pid 3605622:tid 3605622] [client 47.254.92.190:54716] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amtaVrilitSMVvnv3pIe9gAAABo"], referer: http://hazardous-materials.co.uk
[Thu Jul 30 15:06:15.115966 2026] [core:error] [pid 3611790:tid 3611790] (13)Permission denied: [client 216.73.216.199:16104] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/validate
[Thu Jul 30 15:06:15.392627 2026] [ssl:error] [pid 3601359:tid 3601359] (70014)End of file found: [client 216.73.216.199:8880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:15.589069 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/term.php
[Thu Jul 30 15:06:15.689182 2026] [ssl:error] [pid 3611790:tid 3611790] (70014)End of file found: [client 216.73.216.199:16104] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:16.059603 2026] [security2:error] [pid 3605622:tid 3605622] [client 43.166.136.153:57378] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.com"] [uri "/"] [unique_id "amtaWLilitSMVvnv3pIe-gAAABo"]
[Thu Jul 30 15:06:16.107143 2026] [security2:error] [pid 3602437:tid 3602437] [client 38.199.32.219:41760] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaWIW0fg6T8-474RpAJQAAAB0"]
[Thu Jul 30 15:06:16.107203 2026] [security2:error] [pid 3602437:tid 3602437] [client 38.199.32.219:41760] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaWIW0fg6T8-474RpAJQAAAB0"]
[Thu Jul 30 15:06:16.107442 2026] [security2:error] [pid 3602437:tid 3602437] [client 38.199.32.219:41760] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaWIW0fg6T8-474RpAJQAAAB0"]
[Thu Jul 30 15:06:16.367788 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/ioxi-o.php
[Thu Jul 30 15:06:16.594167 2026] [ssl:error] [pid 3602437:tid 3602437] (EAI 2)Name or service not known: [client 144.76.19.72:59838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:16.594192 2026] [ssl:error] [pid 3602437:tid 3602437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:16.607260 2026] [ssl:error] [pid 3565723:tid 3565723] (70014)End of file found: [client 216.73.216.199:64213] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:16.931623 2026] [ssl:error] [pid 3605690:tid 3605690] (EAI 2)Name or service not known: [client 144.76.19.72:59844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:16.931652 2026] [ssl:error] [pid 3605690:tid 3605690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:16.994749 2026] [access_compat:error] [pid 3592642:tid 3592642] [client 64.180.68.231:62052] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:17.113737 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 15:06:18.219678 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/alfa.php
[Thu Jul 30 15:06:19.546765 2026] [security2:error] [pid 3605553:tid 3605553] [client 114.119.146.111:54955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574035200/cat_ids~104,103/request_format~html"] [unique_id "amtaWxnaITZQcZB4BaKF8AAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574035200/cat_ids~104,103/request_format~html
[Thu Jul 30 15:06:19.559338 2026] [security2:error] [pid 3605622:tid 3605622] [client 74.7.242.35:55674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/sites/default/files/home4.jpg"] [unique_id "amtaW7ilitSMVvnv3pIe_wAAABo"], referer: https://benosey.com
[Thu Jul 30 15:06:19.626091 2026] [core:error] [pid 3609854:tid 3609854] [client 172.213.10.64:13230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:19.626117 2026] [core:error] [pid 3609854:tid 3609854] [client 172.213.10.64:13230] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:19.832598 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/elp.php
[Thu Jul 30 15:06:19.986714 2026] [ssl:error] [pid 3602438:tid 3602438] (EAI 2)Name or service not known: [client 144.76.19.72:48398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:19.986764 2026] [ssl:error] [pid 3602438:tid 3602438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:20.044200 2026] [ssl:error] [pid 3611144:tid 3611144] (EAI 2)Name or service not known: [client 144.76.19.72:48400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:20.044241 2026] [ssl:error] [pid 3611144:tid 3611144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:20.256386 2026] [security2:error] [pid 3611732:tid 3611732] [client 72.146.16.10:33100] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jonathanmeyerart.com"] [uri "/wp-config.php"] [unique_id "amtaXPlHbQiR-rJYIvZ1JQAAACo"]
[Thu Jul 30 15:06:20.256531 2026] [security2:error] [pid 3611732:tid 3611732] [client 72.146.16.10:33100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jonathanmeyerart.com"] [uri "/wp-config.php"] [unique_id "amtaXPlHbQiR-rJYIvZ1JQAAACo"]
[Thu Jul 30 15:06:20.261359 2026] [security2:error] [pid 3611732:tid 3611732] [client 72.146.16.10:33100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jonathanmeyerart.com"] [uri "/index.php"] [unique_id "amtaXPlHbQiR-rJYIvZ1JQAAACo"]
[Thu Jul 30 15:06:20.593027 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 15:06:21.035224 2026] [ssl:error] [pid 3613387:tid 3613387] (70014)End of file found: [client 216.73.216.199:43801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:21.371041 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/666.php
[Thu Jul 30 15:06:21.379643 2026] [security2:error] [pid 3603739:tid 3603739] [client 114.119.146.111:42593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1574035200/cat_ids~104,103/request_format~html"] [unique_id "amtaXV8ZmPhFKHw5-rJk9AAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1574035200/cat_ids~104,103/request_format~html
[Thu Jul 30 15:06:21.435938 2026] [ssl:error] [pid 3609854:tid 3609854] (70014)End of file found: [client 216.73.216.199:40454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:21.483260 2026] [security2:error] [pid 3598076:tid 3598076] [client 212.241.24.67:22273] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaXTIw4BnJdtF0SK-OZgAAABY"]
[Thu Jul 30 15:06:21.483311 2026] [security2:error] [pid 3598076:tid 3598076] [client 212.241.24.67:22273] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaXTIw4BnJdtF0SK-OZgAAABY"]
[Thu Jul 30 15:06:21.483556 2026] [security2:error] [pid 3598076:tid 3598076] [client 212.241.24.67:22273] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaXTIw4BnJdtF0SK-OZgAAABY"]
[Thu Jul 30 15:06:22.335965 2026] [core:error] [pid 3598076:tid 3598076] (13)Permission denied: [client 216.73.216.199:48774] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/cpu_partial
[Thu Jul 30 15:06:22.936906 2026] [ssl:error] [pid 3598076:tid 3598076] (70014)End of file found: [client 216.73.216.199:48774] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:23.090506 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/ws54.php
[Thu Jul 30 15:06:23.101434 2026] [ssl:error] [pid 3592642:tid 3592642] (EAI 2)Name or service not known: [client 144.76.19.72:48410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:23.101458 2026] [ssl:error] [pid 3592642:tid 3592642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:23.157107 2026] [ssl:error] [pid 3613351:tid 3613351] (EAI 2)Name or service not known: [client 144.76.19.72:48418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:23.157150 2026] [ssl:error] [pid 3613351:tid 3613351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:23.544875 2026] [access_compat:error] [pid 3585927:tid 3585927] [client 64.180.68.231:62420] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:23.855561 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/deepseek_d.php
[Thu Jul 30 15:06:24.764239 2026] [core:error] [pid 3613550:tid 3613550] [client 172.213.10.64:13234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:24.764263 2026] [core:error] [pid 3613550:tid 3613550] [client 172.213.10.64:13234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:24.986342 2026] [core:error] [pid 3613550:tid 3613550] [client 172.213.10.64:41853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:24.986367 2026] [core:error] [pid 3613550:tid 3613550] [client 172.213.10.64:41853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:25.190836 2026] [core:error] [pid 3592642:tid 3592642] [client 172.213.10.64:2807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:25.190860 2026] [core:error] [pid 3592642:tid 3592642] [client 172.213.10.64:2807] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:25.705609 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/nw.php
[Thu Jul 30 15:06:26.446520 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/xleet.php
[Thu Jul 30 15:06:26.515701 2026] [ssl:error] [pid 3592642:tid 3592642] (EAI 2)Name or service not known: [client 144.76.19.72:48426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:26.515726 2026] [ssl:error] [pid 3592642:tid 3592642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:26.635212 2026] [ssl:error] [pid 3614113:tid 3614113] (EAI 2)Name or service not known: [client 144.76.19.72:48432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:26.635252 2026] [ssl:error] [pid 3614113:tid 3614113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:26.772995 2026] [ssl:error] [pid 3602438:tid 3602438] (70014)End of file found: [client 216.73.216.199:15911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:27.240807 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 15:06:27.607140 2026] [access_compat:error] [pid 3605690:tid 3605690] [client 64.180.68.231:62656] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:27.751222 2026] [lsapi:warn] [pid 3609912:tid 3609912] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:06:28.237401 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/155.php
[Thu Jul 30 15:06:28.676526 2026] [ssl:error] [pid 3614112:tid 3614112] (70014)End of file found: [client 216.73.216.199:11341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:28.979266 2026] [ssl:error] [pid 3602571:tid 3602571] (70014)End of file found: [client 216.73.216.199:59820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:29.067546 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/96i.php
[Thu Jul 30 15:06:29.091879 2026] [authz_core:error] [pid 3611144:tid 3611144] [client 20.193.250.173:61814] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:06:29.688493 2026] [ssl:error] [pid 3600934:tid 3600934] (EAI 2)Name or service not known: [client 144.76.19.72:32164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:29.688521 2026] [ssl:error] [pid 3600934:tid 3600934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:29.742727 2026] [ssl:error] [pid 3611144:tid 3611144] (EAI 2)Name or service not known: [client 144.76.19.72:32176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:29.742757 2026] [ssl:error] [pid 3611144:tid 3611144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:29.840961 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 15:06:30.592849 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/min.php
[Thu Jul 30 15:06:31.529538 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/php8.php
[Thu Jul 30 15:06:32.190983 2026] [ssl:error] [pid 3602438:tid 3602438] (70014)End of file found: [client 216.73.216.199:35043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:32.801908 2026] [ssl:error] [pid 3614372:tid 3614372] (EAI 2)Name or service not known: [client 144.76.19.72:32178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:32.801940 2026] [ssl:error] [pid 3614372:tid 3614372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:32.856537 2026] [ssl:error] [pid 3609600:tid 3609600] (EAI 2)Name or service not known: [client 144.76.19.72:32182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:32.856557 2026] [ssl:error] [pid 3609600:tid 3609600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:33.055866 2026] [core:error] [pid 3611791:tid 3611791] [client 172.213.10.64:13199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:33.055891 2026] [core:error] [pid 3611791:tid 3611791] [client 172.213.10.64:13199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:33.075991 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 15:06:33.706031 2026] [access_compat:error] [pid 3611791:tid 3611791] [client 45.158.164.139:36380] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:06:34.003558 2026] [ssl:error] [pid 3611688:tid 3611688] (70014)End of file found: [client 216.73.216.199:46507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:34.403772 2026] [ssl:error] [pid 3598076:tid 3598076] (70014)End of file found: [client 216.73.216.199:58528] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:34.687096 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/info.php
[Thu Jul 30 15:06:35.381090 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/a.php
[Thu Jul 30 15:06:35.464898 2026] [authz_core:error] [pid 3607086:tid 3607086] [client 66.249.66.33:49190] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:06:35.467582 2026] [authz_core:error] [pid 3607086:tid 3607086] [client 66.249.66.33:49190] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:06:35.663261 2026] [authz_core:error] [pid 3602576:tid 3602576] [client 20.193.250.173:50608] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:06:35.673748 2026] [ssl:error] [pid 3609600:tid 3609600] (70014)End of file found: [client 216.73.216.199:58559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:35.915378 2026] [ssl:error] [pid 3610968:tid 3610968] (EAI 2)Name or service not known: [client 144.76.19.72:32184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:35.915421 2026] [ssl:error] [pid 3610968:tid 3610968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:35.963637 2026] [ssl:error] [pid 3613388:tid 3613388] (70014)End of file found: [client 216.73.216.199:64596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:35.968752 2026] [ssl:error] [pid 3609915:tid 3609915] (EAI 2)Name or service not known: [client 144.76.19.72:32196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:35.968772 2026] [ssl:error] [pid 3609915:tid 3609915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:36.055699 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 15:06:36.286819 2026] [ssl:error] [pid 3614372:tid 3614372] (70014)End of file found: [client 216.73.216.199:1365] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:36.930654 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/vx.php
[Thu Jul 30 15:06:38.132820 2026] [access_compat:error] [pid 3587515:tid 3587515] [client 64.180.68.231:63206] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:38.311676 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wap.php
[Thu Jul 30 15:06:39.022541 2026] [ssl:error] [pid 3611790:tid 3611790] (EAI 2)Name or service not known: [client 144.76.19.72:32200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:39.022581 2026] [ssl:error] [pid 3611790:tid 3611790] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:39.075030 2026] [ssl:error] [pid 3589640:tid 3589640] (EAI 2)Name or service not known: [client 144.76.19.72:32212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:39.075088 2026] [ssl:error] [pid 3589640:tid 3589640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:39.395568 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/wp.php
[Thu Jul 30 15:06:40.164529 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/bgymj.php
[Thu Jul 30 15:06:40.814733 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 15:06:41.412009 2026] [ssl:error] [pid 3585927:tid 3585927] (70014)End of file found: [client 216.73.216.199:20882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:41.638212 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-mail.php
[Thu Jul 30 15:06:41.727620 2026] [core:error] [pid 3614826:tid 3614826] [client 172.213.10.64:2471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:41.727641 2026] [core:error] [pid 3614826:tid 3614826] [client 172.213.10.64:2471] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:42.127245 2026] [ssl:error] [pid 3613550:tid 3613550] (EAI 2)Name or service not known: [client 144.76.19.72:60224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:42.127287 2026] [ssl:error] [pid 3613550:tid 3613550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:42.183314 2026] [ssl:error] [pid 3610968:tid 3610968] (EAI 2)Name or service not known: [client 144.76.19.72:60232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:42.183344 2026] [ssl:error] [pid 3610968:tid 3610968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:42.455518 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/bolt.php
[Thu Jul 30 15:06:43.036763 2026] [ssl:error] [pid 3591584:tid 3591584] (70014)End of file found: [client 216.73.216.199:56964] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:43.239430 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/bthil.php
[Thu Jul 30 15:06:43.342004 2026] [ssl:error] [pid 3611688:tid 3611688] (70014)End of file found: [client 216.73.216.199:46727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:44.658982 2026] [access_compat:error] [pid 3613507:tid 3613507] [client 64.180.68.231:63557] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:44.738692 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/x.php
[Thu Jul 30 15:06:45.237617 2026] [ssl:error] [pid 3609915:tid 3609915] (EAI 2)Name or service not known: [client 144.76.19.72:60248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:45.237645 2026] [ssl:error] [pid 3609915:tid 3609915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:45.289182 2026] [ssl:error] [pid 3609854:tid 3609854] (EAI 2)Name or service not known: [client 144.76.19.72:60264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:45.289211 2026] [ssl:error] [pid 3609854:tid 3609854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:46.370587 2026] [authz_core:error] [pid 3613550:tid 3613550] [client 4.185.41.66:14670] AH01630: client denied by server configuration: /home/mjsser/demo.mjs-services.com/wp-includes/Requests/error_log
[Thu Jul 30 15:06:46.767164 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/aaa.php
[Thu Jul 30 15:06:47.606122 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/abcd.php
[Thu Jul 30 15:06:47.869599 2026] [ssl:error] [pid 3609912:tid 3609912] (70014)End of file found: [client 216.73.216.199:28166] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:48.343932 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:60278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:48.343957 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:48.398532 2026] [ssl:error] [pid 3613507:tid 3613507] (EAI 2)Name or service not known: [client 144.76.19.72:60294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:48.398564 2026] [ssl:error] [pid 3613507:tid 3613507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:48.408182 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-good.php
[Thu Jul 30 15:06:48.661234 2026] [ssl:error] [pid 3605553:tid 3605553] (70014)End of file found: [client 216.73.216.199:38470] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:48.757244 2026] [access_compat:error] [pid 3610581:tid 3610581] [client 64.180.68.231:63890] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:48.773323 2026] [ssl:error] [pid 3614236:tid 3614236] (70014)End of file found: [client 216.73.216.199:36982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:49.314086 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 15:06:50.082302 2026] [core:error] [pid 3606906:tid 3606906] [client 172.213.10.64:29741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:50.082331 2026] [core:error] [pid 3606906:tid 3606906] [client 172.213.10.64:29741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:50.347573 2026] [security2:error] [pid 3613550:tid 3613550] [client 85.208.96.200:42874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5913.0.html"] [unique_id "amtaenh09PgwfJev5JVzYwAAAB4"]
[Thu Jul 30 15:06:51.031466 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/u.php
[Thu Jul 30 15:06:51.340195 2026] [security2:error] [pid 3613387:tid 3613387] [client 72.146.16.10:28169] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "jonathanmeyerart.com"] [uri "/var/log/error.log"] [unique_id "amtae_c1bZb09McAFt4--wAAAAQ"]
[Thu Jul 30 15:06:51.340381 2026] [security2:error] [pid 3613387:tid 3613387] [client 72.146.16.10:28169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jonathanmeyerart.com"] [uri "/var/log/error.log"] [unique_id "amtae_c1bZb09McAFt4--wAAAAQ"]
[Thu Jul 30 15:06:51.345258 2026] [security2:error] [pid 3613387:tid 3613387] [client 72.146.16.10:28169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "jonathanmeyerart.com"] [uri "/index.php"] [unique_id "amtae_c1bZb09McAFt4--wAAAAQ"]
[Thu Jul 30 15:06:51.470172 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:48610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:51.470214 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:51.572279 2026] [ssl:error] [pid 3601359:tid 3601359] (EAI 2)Name or service not known: [client 144.76.19.72:48618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:51.572322 2026] [ssl:error] [pid 3601359:tid 3601359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:52.087971 2026] [cgi:error] [pid 3613387:tid 3613387] [client 47.128.117.215:16108] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:06:52.495318 2026] [authz_core:error] [pid 3609854:tid 3609854] [client 20.193.250.173:54355] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 15:06:52.568273 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/h.php
[Thu Jul 30 15:06:53.327759 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/ms-edit.php
[Thu Jul 30 15:06:53.607179 2026] [ssl:error] [pid 3606906:tid 3606906] (70014)End of file found: [client 216.73.216.199:25961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:53.695368 2026] [cgi:error] [pid 3605622:tid 3605622] [client 4.185.41.66:14636] AH02812: stderr from /home/mjsser/demo.mjs-services.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:06:54.109470 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/a7.php
[Thu Jul 30 15:06:54.118813 2026] [ssl:error] [pid 3614113:tid 3614113] (70014)End of file found: [client 216.73.216.199:38391] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:54.414885 2026] [ssl:error] [pid 3601359:tid 3601359] (70014)End of file found: [client 216.73.216.199:28988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:06:54.629532 2026] [ssl:error] [pid 3614236:tid 3614236] (EAI 2)Name or service not known: [client 144.76.19.72:48624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:54.629570 2026] [ssl:error] [pid 3614236:tid 3614236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:54.684249 2026] [ssl:error] [pid 3605622:tid 3605622] (EAI 2)Name or service not known: [client 144.76.19.72:48628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:54.684283 2026] [ssl:error] [pid 3605622:tid 3605622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:54.776623 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/manager.php
[Thu Jul 30 15:06:55.186573 2026] [access_compat:error] [pid 3609111:tid 3609111] [client 64.180.68.231:64350] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:06:55.223245 2026] [core:error] [pid 3605690:tid 3605690] [client 172.213.10.64:10323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:55.223269 2026] [core:error] [pid 3605690:tid 3605690] [client 172.213.10.64:10323] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:55.568536 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/w1.php
[Thu Jul 30 15:06:56.415912 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 45.158.164.139:50636] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:06:56.760438 2026] [core:error] [pid 3597586:tid 3597586] [client 172.213.10.64:30032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:56.760464 2026] [core:error] [pid 3597586:tid 3597586] [client 172.213.10.64:30032] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:57.026570 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-face-resolver.php
[Thu Jul 30 15:06:57.026660 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-face.php
[Thu Jul 30 15:06:57.026678 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-utils.php
[Thu Jul 30 15:06:57.026713 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-library.php
[Thu Jul 30 15:06:57.026730 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/fonts/class-wp-font-collection.php
[Thu Jul 30 15:06:57.737753 2026] [ssl:error] [pid 3609600:tid 3609600] (EAI 2)Name or service not known: [client 144.76.19.72:48632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:57.737796 2026] [ssl:error] [pid 3609600:tid 3609600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:57.795437 2026] [ssl:error] [pid 3600934:tid 3600934] (EAI 2)Name or service not known: [client 144.76.19.72:48646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:06:57.795467 2026] [ssl:error] [pid 3600934:tid 3600934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:06:57.945335 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/default.php
[Thu Jul 30 15:06:58.269601 2026] [authz_core:error] [pid 3609600:tid 3609600] [client 20.193.250.173:65156] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 15:06:58.301713 2026] [core:error] [pid 3607140:tid 3607140] [client 172.213.10.64:2570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:58.301741 2026] [core:error] [pid 3607140:tid 3607140] [client 172.213.10.64:2570] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:06:58.795285 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/i.php
[Thu Jul 30 15:06:59.307327 2026] [access_compat:error] [pid 3597586:tid 3597586] [client 64.180.68.231:64630] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:07:00.084813 2026] [core:error] [pid 3600933:tid 3600933] [client 172.213.10.64:18410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:00.084838 2026] [core:error] [pid 3600933:tid 3600933] [client 172.213.10.64:18410] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:00.257353 2026] [ssl:error] [pid 3613388:tid 3613388] (70014)End of file found: [client 216.73.216.199:23643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:00.317219 2026] [security2:error] [pid 3606906:tid 3606906] [client 43.157.148.38:60416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "amtahP5FuIwrKNIrh-fBlwAAABk"]
[Thu Jul 30 15:07:00.411501 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/gecko-new.php
[Thu Jul 30 15:07:00.528226 2026] [security2:error] [pid 3611792:tid 3611792] [client 47.128.34.243:46372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amtahAsjdNhkv6kzU7Op5QAAAD4"]
[Thu Jul 30 15:07:00.748894 2026] [ssl:error] [pid 3609911:tid 3609911] (70014)End of file found: [client 216.73.216.199:49482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:00.854057 2026] [ssl:error] [pid 3614113:tid 3614113] (EAI 2)Name or service not known: [client 144.76.19.72:18870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:00.854109 2026] [ssl:error] [pid 3614113:tid 3614113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:00.908532 2026] [ssl:error] [pid 3614372:tid 3614372] (EAI 2)Name or service not known: [client 144.76.19.72:18880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:00.908563 2026] [ssl:error] [pid 3614372:tid 3614372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:01.067879 2026] [ssl:error] [pid 3607140:tid 3607140] (70014)End of file found: [client 216.73.216.199:23892] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:01.091139 2026] [core:error] [pid 3614113:tid 3614113] [client 172.213.10.64:18396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:01.091169 2026] [core:error] [pid 3614113:tid 3614113] [client 172.213.10.64:18396] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:01.175959 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/NewFile.php
[Thu Jul 30 15:07:01.336865 2026] [security2:error] [pid 3600933:tid 3600933] [client 43.157.148.38:33512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtahSiZIfnPB90ZHrrbUwAAAAc"], referer: http://www.all4s.co.uk
[Thu Jul 30 15:07:01.993649 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-Blogs.php
[Thu Jul 30 15:07:02.355563 2026] [core:error] [pid 3610581:tid 3610581] [client 172.213.10.64:62922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:02.355593 2026] [core:error] [pid 3610581:tid 3610581] [client 172.213.10.64:62922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:02.760379 2026] [security2:error] [pid 3611792:tid 3611792] [client 47.128.34.243:48650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/robots.txt"] [unique_id "amtahgsjdNhkv6kzU7Op5gAAAD4"]
[Thu Jul 30 15:07:02.976720 2026] [security2:error] [pid 3610581:tid 3610581] [client 85.208.96.198:56334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/major-beneficial-properties-table-5e"] [unique_id "amtahjCeezwaKJRUJGeyuAAAAAE"]
[Thu Jul 30 15:07:03.032390 2026] [security2:error] [pid 3609912:tid 3609912] [client 85.208.96.205:36028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9596.0/prev_next,prev.html"] [unique_id "amtah8Z7kVb3Hk3hT6pvCAAAACQ"]
[Thu Jul 30 15:07:03.331367 2026] [core:error] [pid 3613507:tid 3613507] [client 172.213.10.64:59276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:03.331396 2026] [core:error] [pid 3613507:tid 3613507] [client 172.213.10.64:59276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:03.961882 2026] [ssl:error] [pid 3602576:tid 3602576] (EAI 2)Name or service not known: [client 144.76.19.72:18896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:03.961909 2026] [ssl:error] [pid 3602576:tid 3602576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:04.058631 2026] [ssl:error] [pid 3610581:tid 3610581] (EAI 2)Name or service not known: [client 144.76.19.72:18900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:04.058664 2026] [ssl:error] [pid 3610581:tid 3610581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:04.119915 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/cv.php
[Thu Jul 30 15:07:04.142742 2026] [lsapi:warn] [pid 3614826:tid 3614826] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:07:04.693426 2026] [core:error] [pid 3610581:tid 3610581] [client 172.213.10.64:43593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:04.693449 2026] [core:error] [pid 3610581:tid 3610581] [client 172.213.10.64:43593] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:05.500622 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/ws83.php
[Thu Jul 30 15:07:05.689100 2026] [ssl:error] [pid 3614112:tid 3614112] (70014)End of file found: [client 216.73.216.199:25037] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:06.250690 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/atex1.php
[Thu Jul 30 15:07:06.551396 2026] [ssl:error] [pid 3597586:tid 3597586] (70014)End of file found: [client 216.73.216.199:63439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:06.694946 2026] [ssl:error] [pid 3606906:tid 3606906] (70014)End of file found: [client 216.73.216.199:38415] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:06.912092 2026] [core:error] [pid 3614372:tid 3614372] [client 172.213.10.64:3046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:06.912115 2026] [core:error] [pid 3614372:tid 3614372] [client 172.213.10.64:3046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:07.066455 2026] [access_compat:error] [pid 3592494:tid 3592494] [client 20.104.22.47:55341] AH01797: client denied by server configuration: /home/thepryor/public_html/class-t.api.php
[Thu Jul 30 15:07:07.115504 2026] [ssl:error] [pid 3610968:tid 3610968] (EAI 2)Name or service not known: [client 144.76.19.72:18906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:07.115536 2026] [ssl:error] [pid 3610968:tid 3610968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:07.156660 2026] [core:error] [pid 3589640:tid 3589640] [client 143.244.57.120:48290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:07.156694 2026] [core:error] [pid 3589640:tid 3589640] [client 143.244.57.120:48290] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:07.174478 2026] [ssl:error] [pid 3609854:tid 3609854] (EAI 2)Name or service not known: [client 144.76.19.72:18910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:07.174503 2026] [ssl:error] [pid 3609854:tid 3609854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:07.455491 2026] [core:error] [pid 3605619:tid 3605619] [client 143.244.57.120:1277] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:07.455513 2026] [core:error] [pid 3605619:tid 3605619] [client 143.244.57.120:1277] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.013958 2026] [core:error] [pid 3601359:tid 3601359] [client 172.213.10.64:2531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.013985 2026] [core:error] [pid 3601359:tid 3601359] [client 172.213.10.64:2531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.060728 2026] [core:error] [pid 3605622:tid 3605622] [client 143.244.57.120:35886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.060750 2026] [core:error] [pid 3605622:tid 3605622] [client 143.244.57.120:35886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.375508 2026] [core:error] [pid 3614826:tid 3614826] [client 143.244.57.120:35892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.375542 2026] [core:error] [pid 3614826:tid 3614826] [client 143.244.57.120:35892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.675795 2026] [core:error] [pid 3609912:tid 3609912] [client 143.244.57.120:35904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:08.675828 2026] [core:error] [pid 3609912:tid 3609912] [client 143.244.57.120:35904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.069880 2026] [core:error] [pid 3607140:tid 3607140] [client 143.244.57.120:35914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.069911 2026] [core:error] [pid 3607140:tid 3607140] [client 143.244.57.120:35914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.085191 2026] [core:error] [pid 3600933:tid 3600933] [client 172.213.10.64:3063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.085211 2026] [core:error] [pid 3600933:tid 3600933] [client 172.213.10.64:3063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.349788 2026] [core:error] [pid 3602576:tid 3602576] [client 143.244.57.120:50989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.349814 2026] [core:error] [pid 3602576:tid 3602576] [client 143.244.57.120:50989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.585348 2026] [core:error] [pid 3611040:tid 3611040] [client 143.244.57.120:35934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.585370 2026] [core:error] [pid 3611040:tid 3611040] [client 143.244.57.120:35934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:09.940614 2026] [access_compat:error] [pid 3602571:tid 3602571] [client 64.180.68.231:65245] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:07:10.229674 2026] [ssl:error] [pid 3605619:tid 3605619] (EAI 2)Name or service not known: [client 144.76.19.72:35664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:10.229707 2026] [ssl:error] [pid 3605619:tid 3605619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:10.259366 2026] [core:error] [pid 3602576:tid 3602576] [client 143.244.57.120:52817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:10.259398 2026] [core:error] [pid 3602576:tid 3602576] [client 143.244.57.120:52817] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:10.286495 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:35674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:10.286521 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:10.334130 2026] [security2:error] [pid 3605619:tid 3605619] [client 43.130.102.7:47132] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "carpediemproperty.co.uk"] [uri "/"] [unique_id "amtaju9rf9JWEo2UubvWZgAAABQ"]
[Thu Jul 30 15:07:10.656763 2026] [core:error] [pid 3605619:tid 3605619] [client 143.244.57.120:15977] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:10.656794 2026] [core:error] [pid 3605619:tid 3605619] [client 143.244.57.120:15977] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:10.957946 2026] [core:error] [pid 3611791:tid 3611791] [client 172.213.10.64:18422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:10.957970 2026] [core:error] [pid 3611791:tid 3611791] [client 172.213.10.64:18422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:10.973047 2026] [core:error] [pid 3605690:tid 3605690] [client 143.244.57.120:35954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:10.973080 2026] [core:error] [pid 3605690:tid 3605690] [client 143.244.57.120:35954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:11.124511 2026] [ssl:error] [pid 3611792:tid 3611792] (70014)End of file found: [client 216.73.216.199:3573] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:11.259266 2026] [security2:error] [pid 3611688:tid 3611688] [client 95.219.222.79:47590] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaj2lCCyEiFHnH6t0awgAAACU"]
[Thu Jul 30 15:07:11.259323 2026] [security2:error] [pid 3611688:tid 3611688] [client 95.219.222.79:47590] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaj2lCCyEiFHnH6t0awgAAACU"]
[Thu Jul 30 15:07:11.259561 2026] [security2:error] [pid 3611688:tid 3611688] [client 95.219.222.79:47590] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaj2lCCyEiFHnH6t0awgAAACU"]
[Thu Jul 30 15:07:11.280903 2026] [core:error] [pid 3605619:tid 3605619] [client 143.244.57.120:35960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:11.280923 2026] [core:error] [pid 3605619:tid 3605619] [client 143.244.57.120:35960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:11.581941 2026] [core:error] [pid 3585927:tid 3585927] [client 143.244.57.120:35964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:11.581961 2026] [core:error] [pid 3585927:tid 3585927] [client 143.244.57.120:35964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:11.948114 2026] [core:error] [pid 3597586:tid 3597586] [client 143.244.57.120:35974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:11.948142 2026] [core:error] [pid 3597586:tid 3597586] [client 143.244.57.120:35974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:12.353426 2026] [core:error] [pid 3613387:tid 3613387] [client 143.244.57.120:35982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:12.353453 2026] [core:error] [pid 3613387:tid 3613387] [client 143.244.57.120:35982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:12.771565 2026] [core:error] [pid 3613387:tid 3613387] [client 143.244.57.120:4041] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:12.771590 2026] [core:error] [pid 3613387:tid 3613387] [client 143.244.57.120:4041] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:13.038354 2026] [core:error] [pid 3611791:tid 3611791] (13)Permission denied: [client 216.73.216.199:25813] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_console/drivers/virtio:virtio_rproc_serial/bind
[Thu Jul 30 15:07:13.338971 2026] [ssl:error] [pid 3611791:tid 3611791] (70014)End of file found: [client 216.73.216.199:25813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:13.344273 2026] [ssl:error] [pid 3589640:tid 3589640] (EAI 2)Name or service not known: [client 144.76.19.72:35688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:13.344298 2026] [ssl:error] [pid 3589640:tid 3589640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:13.401848 2026] [ssl:error] [pid 3589640:tid 3589640] (EAI 2)Name or service not known: [client 144.76.19.72:35696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:13.401870 2026] [ssl:error] [pid 3589640:tid 3589640] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:13.449723 2026] [authz_core:error] [pid 3598076:tid 3598076] [client 66.249.66.34:37365] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:07:13.452389 2026] [authz_core:error] [pid 3598076:tid 3598076] [client 66.249.66.34:37365] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:07:14.075646 2026] [core:error] [pid 3613387:tid 3613387] [client 143.244.57.120:35992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:14.075670 2026] [core:error] [pid 3613387:tid 3613387] [client 143.244.57.120:35992] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:14.241451 2026] [ssl:error] [pid 3609111:tid 3609111] (70014)End of file found: [client 216.73.216.199:23927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:14.450280 2026] [core:error] [pid 3613388:tid 3613388] [client 143.244.57.120:35996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:14.450302 2026] [core:error] [pid 3613388:tid 3613388] [client 143.244.57.120:35996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:07:16.316009 2026] [access_compat:error] [pid 3601359:tid 3601359] [client 64.180.68.231:49199] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:07:16.458649 2026] [ssl:error] [pid 3616435:tid 3616435] (EAI 2)Name or service not known: [client 144.76.19.72:35710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:16.458683 2026] [ssl:error] [pid 3616435:tid 3616435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:16.513169 2026] [ssl:error] [pid 3592494:tid 3592494] (EAI 2)Name or service not known: [client 144.76.19.72:35726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:16.513215 2026] [ssl:error] [pid 3592494:tid 3592494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:16.981008 2026] [ssl:error] [pid 3613387:tid 3613387] (70014)End of file found: [client 216.73.216.199:42488] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:18.310891 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/w.php
[Thu Jul 30 15:07:18.678961 2026] [ssl:error] [pid 3611792:tid 3611792] (70014)End of file found: [client 216.73.216.199:19988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:19.156819 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/archive.php
[Thu Jul 30 15:07:19.569585 2026] [ssl:error] [pid 3605619:tid 3605619] (EAI 2)Name or service not known: [client 144.76.19.72:22170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:19.569617 2026] [ssl:error] [pid 3605619:tid 3605619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:19.573261 2026] [ssl:error] [pid 3611791:tid 3611791] (70014)End of file found: [client 216.73.216.199:36946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:19.622485 2026] [ssl:error] [pid 3609854:tid 3609854] (EAI 2)Name or service not known: [client 144.76.19.72:22176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:19.622509 2026] [ssl:error] [pid 3609854:tid 3609854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:20.034991 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/bless.php
[Thu Jul 30 15:07:20.472928 2026] [access_compat:error] [pid 3614826:tid 3614826] [client 64.180.68.231:49424] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:07:20.948133 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/sagax1.php
[Thu Jul 30 15:07:21.096941 2026] [security2:error] [pid 3609912:tid 3609912] [client 114.119.141.9:54615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "astleydogpark.co.uk"] [uri "/robots.txt"] [unique_id "amtamcZ7kVb3Hk3hT6pvFQAAACQ"], referer: https://astleydogpark.co.uk/robots.txt
[Thu Jul 30 15:07:21.932116 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/wpc.php
[Thu Jul 30 15:07:22.288135 2026] [core:error] [pid 3613507:tid 3613507] (13)Permission denied: [client 216.73.216.199:39976] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory189/node0/compact
[Thu Jul 30 15:07:22.671033 2026] [security2:error] [pid 3609915:tid 3609915] [client 140.213.7.250:45269] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtamn34HsjtjfYMDbxWqwAAADU"]
[Thu Jul 30 15:07:22.671124 2026] [security2:error] [pid 3609915:tid 3609915] [client 140.213.7.250:45269] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtamn34HsjtjfYMDbxWqwAAADU"]
[Thu Jul 30 15:07:22.671446 2026] [security2:error] [pid 3609915:tid 3609915] [client 140.213.7.250:45269] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtamn34HsjtjfYMDbxWqwAAADU"]
[Thu Jul 30 15:07:22.694952 2026] [ssl:error] [pid 3611732:tid 3611732] (EAI 2)Name or service not known: [client 144.76.19.72:22184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:22.694984 2026] [ssl:error] [pid 3611732:tid 3611732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:22.706287 2026] [ssl:error] [pid 3613507:tid 3613507] (70014)End of file found: [client 216.73.216.199:39976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:22.752383 2026] [ssl:error] [pid 3597586:tid 3597586] (EAI 2)Name or service not known: [client 144.76.19.72:22194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:22.752426 2026] [ssl:error] [pid 3597586:tid 3597586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:22.836990 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/fone1.php
[Thu Jul 30 15:07:24.910870 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/ncx.php
[Thu Jul 30 15:07:25.117610 2026] [ssl:error] [pid 3609915:tid 3609915] (70014)End of file found: [client 216.73.216.199:32784] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:25.159062 2026] [security2:error] [pid 3611040:tid 3611040] [client 101.47.20.249:13939] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtanbUeRocXISOI1e00xwAAABg"]
[Thu Jul 30 15:07:25.159123 2026] [security2:error] [pid 3611040:tid 3611040] [client 101.47.20.249:13939] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtanbUeRocXISOI1e00xwAAABg"]
[Thu Jul 30 15:07:25.159348 2026] [security2:error] [pid 3611040:tid 3611040] [client 101.47.20.249:13939] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtanbUeRocXISOI1e00xwAAABg"]
[Thu Jul 30 15:07:25.417351 2026] [ssl:error] [pid 3613387:tid 3613387] (70014)End of file found: [client 216.73.216.199:5065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:25.808730 2026] [ssl:error] [pid 3616432:tid 3616432] (EAI 2)Name or service not known: [client 144.76.19.72:22202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:25.808764 2026] [ssl:error] [pid 3616432:tid 3616432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:25.875209 2026] [ssl:error] [pid 3597586:tid 3597586] (EAI 2)Name or service not known: [client 144.76.19.72:22204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:25.875233 2026] [ssl:error] [pid 3597586:tid 3597586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:26.284302 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/wso.php
[Thu Jul 30 15:07:26.930472 2026] [security2:error] [pid 3611791:tid 3611791] [client 8.218.151.89:39947] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtanvfMiv0AX3iiHC3q-wAAADk"]
[Thu Jul 30 15:07:26.930524 2026] [security2:error] [pid 3611791:tid 3611791] [client 8.218.151.89:39947] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtanvfMiv0AX3iiHC3q-wAAADk"]
[Thu Jul 30 15:07:26.930761 2026] [security2:error] [pid 3611791:tid 3611791] [client 8.218.151.89:39947] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtanvfMiv0AX3iiHC3q-wAAADk"]
[Thu Jul 30 15:07:27.862456 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 15:07:28.016617 2026] [ssl:error] [pid 3587515:tid 3587515] (70014)End of file found: [client 216.73.216.199:37775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:28.405852 2026] [security2:error] [pid 3611688:tid 3611688] [client 43.155.162.41:43564] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.3dworkstation.co.uk"] [uri "/"] [unique_id "amtaoGlCCyEiFHnH6t0axgAAACU"]
[Thu Jul 30 15:07:28.574563 2026] [security2:error] [pid 3606906:tid 3606906] [client 182.253.183.12:43047] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaoP5FuIwrKNIrh-fBoAAAABk"]
[Thu Jul 30 15:07:28.574615 2026] [security2:error] [pid 3606906:tid 3606906] [client 182.253.183.12:43047] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaoP5FuIwrKNIrh-fBoAAAABk"]
[Thu Jul 30 15:07:28.574863 2026] [security2:error] [pid 3606906:tid 3606906] [client 182.253.183.12:43047] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaoP5FuIwrKNIrh-fBoAAAABk"]
[Thu Jul 30 15:07:28.631705 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blink.php
[Thu Jul 30 15:07:28.943519 2026] [ssl:error] [pid 3611688:tid 3611688] (EAI 2)Name or service not known: [client 144.76.19.72:22206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:28.943545 2026] [ssl:error] [pid 3611688:tid 3611688] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:28.994870 2026] [ssl:error] [pid 3606906:tid 3606906] (EAI 2)Name or service not known: [client 144.76.19.72:22218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:28.994895 2026] [ssl:error] [pid 3606906:tid 3606906] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:29.702577 2026] [security2:error] [pid 3597586:tid 3597586] [client 47.128.24.53:59664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amtaoUWzhNy_wkx1fI_xogAAABA"]
[Thu Jul 30 15:07:29.822472 2026] [security2:error] [pid 3606906:tid 3606906] [client 85.208.96.209:38910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11552.0/prev_next,next.html"] [unique_id "amtaof5FuIwrKNIrh-fBogAAABk"]
[Thu Jul 30 15:07:30.450757 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/ww5.php
[Thu Jul 30 15:07:30.459818 2026] [security2:error] [pid 3616395:tid 3616395] [client 8.218.151.89:19493] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaotlMuAVOWU7nf1Z1lgAAAA8"]
[Thu Jul 30 15:07:30.459866 2026] [security2:error] [pid 3616395:tid 3616395] [client 8.218.151.89:19493] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaotlMuAVOWU7nf1Z1lgAAAA8"]
[Thu Jul 30 15:07:30.460148 2026] [security2:error] [pid 3616395:tid 3616395] [client 8.218.151.89:19493] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaotlMuAVOWU7nf1Z1lgAAAA8"]
[Thu Jul 30 15:07:30.742452 2026] [ssl:error] [pid 3605619:tid 3605619] (70014)End of file found: [client 216.73.216.199:52009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:31.066022 2026] [access_compat:error] [pid 3606906:tid 3606906] [client 64.180.68.231:49980] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:07:31.144178 2026] [ssl:error] [pid 3611732:tid 3611732] (70014)End of file found: [client 216.73.216.199:1060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:31.240648 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/2.php
[Thu Jul 30 15:07:32.050615 2026] [ssl:error] [pid 3609600:tid 3609600] (EAI 2)Name or service not known: [client 144.76.19.72:56924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:32.050649 2026] [ssl:error] [pid 3609600:tid 3609600] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:32.106670 2026] [ssl:error] [pid 3614372:tid 3614372] (EAI 2)Name or service not known: [client 144.76.19.72:56930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:32.106720 2026] [ssl:error] [pid 3614372:tid 3614372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:32.395454 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-admin/classwithtostring.php
[Thu Jul 30 15:07:33.182611 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/atomlib.php
[Thu Jul 30 15:07:33.884296 2026] [security2:error] [pid 3602576:tid 3602576] [client 216.73.216.199:39036] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default/tuned.conf"] [unique_id "amtapWvCVYm50neB5O8SNgAAADE"]
[Thu Jul 30 15:07:33.884589 2026] [security2:error] [pid 3602576:tid 3602576] [client 216.73.216.199:39036] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default/tuned.conf"] [unique_id "amtapWvCVYm50neB5O8SNgAAADE"]
[Thu Jul 30 15:07:33.884824 2026] [security2:error] [pid 3602576:tid 3602576] [client 216.73.216.199:39036] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default/tuned.conf"] [unique_id "amtapWvCVYm50neB5O8SNgAAADE"]
[Thu Jul 30 15:07:33.975141 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/rip.php
[Thu Jul 30 15:07:34.188635 2026] [ssl:error] [pid 3602576:tid 3602576] (70014)End of file found: [client 216.73.216.199:39036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:34.625812 2026] [access_compat:error] [pid 3615845:tid 3615845] [client 45.158.164.139:58346] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:07:34.757649 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/p.php
[Thu Jul 30 15:07:35.299480 2026] [ssl:error] [pid 3616945:tid 3616945] (EAI 2)Name or service not known: [client 144.76.19.72:56946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:35.299510 2026] [ssl:error] [pid 3616945:tid 3616945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:35.385637 2026] [ssl:error] [pid 3616351:tid 3616351] (EAI 2)Name or service not known: [client 144.76.19.72:56952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:35.385675 2026] [ssl:error] [pid 3616351:tid 3616351] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:35.555583 2026] [access_compat:error] [pid 3613388:tid 3613388] [client 20.104.22.47:55410] AH01797: client denied by server configuration: /home/thepryor/public_html/php.php
[Thu Jul 30 15:07:36.315177 2026] [ssl:error] [pid 3614826:tid 3614826] (70014)End of file found: [client 216.73.216.199:7482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:39.006624 2026] [core:error] [pid 3617266:tid 3617266] (13)Permission denied: [client 216.73.216.199:51957] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory143/subsystem/uevent
[Thu Jul 30 15:07:42.046300 2026] [security2:error] [pid 3597586:tid 3597586] [client 114.119.146.111:43087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~103,104/request_format~html"] [unique_id "amtarkWzhNy_wkx1fI_xqAAAABA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~103,104/request_format~html
[Thu Jul 30 15:07:43.199051 2026] [ssl:error] [pid 3597586:tid 3597586] (EAI 2)Name or service not known: [client 144.76.19.72:56968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:43.199093 2026] [ssl:error] [pid 3597586:tid 3597586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:43.557270 2026] [security2:error] [pid 3617329:tid 3617329] [client 114.119.146.111:43101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~103,104/request_format~html"] [unique_id "amtar7LIgco6B0hhDxU5WAAAADo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~103,104/request_format~html
[Thu Jul 30 15:07:44.154544 2026] [access_compat:error] [pid 3605619:tid 3605619] [client 64.180.68.231:50536] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:07:45.257847 2026] [ssl:error] [pid 3611732:tid 3611732] (EAI 2)Name or service not known: [client 144.76.19.72:58450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:45.257877 2026] [ssl:error] [pid 3611732:tid 3611732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:47.441499 2026] [ssl:error] [pid 3617603:tid 3617603] (70014)End of file found: [client 216.73.216.199:60060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:48.313593 2026] [ssl:error] [pid 3617333:tid 3617333] (EAI 2)Name or service not known: [client 144.76.19.72:58480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:48.313632 2026] [ssl:error] [pid 3617333:tid 3617333] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:48.371506 2026] [ssl:error] [pid 3587515:tid 3587515] (EAI 2)Name or service not known: [client 144.76.19.72:58484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:48.371535 2026] [ssl:error] [pid 3587515:tid 3587515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:49.252384 2026] [ssl:error] [pid 3617266:tid 3617266] (70014)End of file found: [client 216.73.216.199:51957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:49.724420 2026] [lsapi:warn] [pid 3617370:tid 3617370] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:07:50.458777 2026] [core:error] [pid 3617601:tid 3617601] (13)Permission denied: [client 216.73.216.199:31516] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty28/subsystem/ttyS3/uartclk
[Thu Jul 30 15:07:51.426255 2026] [ssl:error] [pid 3617376:tid 3617376] (EAI 2)Name or service not known: [client 144.76.19.72:39322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:51.426288 2026] [ssl:error] [pid 3617376:tid 3617376] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:51.479627 2026] [ssl:error] [pid 3592494:tid 3592494] (EAI 2)Name or service not known: [client 144.76.19.72:39330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:51.479665 2026] [ssl:error] [pid 3592494:tid 3592494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:51.662688 2026] [ssl:error] [pid 3617601:tid 3617601] (70014)End of file found: [client 216.73.216.199:31516] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:52.331165 2026] [access_compat:error] [pid 3617651:tid 3617651] [client 64.180.68.231:51092] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:07:54.071917 2026] [core:error] [pid 3617602:tid 3617602] (13)Permission denied: [client 216.73.216.199:47021] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/4:65/line
[Thu Jul 30 15:07:54.545579 2026] [ssl:error] [pid 3617332:tid 3617332] (EAI 2)Name or service not known: [client 144.76.19.72:39334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:54.545615 2026] [ssl:error] [pid 3617332:tid 3617332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:54.602216 2026] [ssl:error] [pid 3617329:tid 3617329] (EAI 2)Name or service not known: [client 144.76.19.72:39348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:54.602248 2026] [ssl:error] [pid 3617329:tid 3617329] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:54.869906 2026] [core:error] [pid 3611732:tid 3611732] (13)Permission denied: [client 216.73.216.199:17670] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/aliases
[Thu Jul 30 15:07:54.976040 2026] [ssl:error] [pid 3617602:tid 3617602] (70014)End of file found: [client 216.73.216.199:47021] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:55.878568 2026] [security2:error] [pid 3611732:tid 3611732] [client 216.73.216.199:17670] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/yum.conf"] [unique_id "amtau_lHbQiR-rJYIvZ1VAAAACo"]
[Thu Jul 30 15:07:55.878832 2026] [security2:error] [pid 3611732:tid 3611732] [client 216.73.216.199:17670] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/yum.conf"] [unique_id "amtau_lHbQiR-rJYIvZ1VAAAACo"]
[Thu Jul 30 15:07:55.879026 2026] [security2:error] [pid 3611732:tid 3611732] [client 216.73.216.199:17670] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/yum.conf"] [unique_id "amtau_lHbQiR-rJYIvZ1VAAAACo"]
[Thu Jul 30 15:07:56.180059 2026] [ssl:error] [pid 3611732:tid 3611732] (70014)End of file found: [client 216.73.216.199:17670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:07:57.659390 2026] [ssl:error] [pid 3617377:tid 3617377] (EAI 2)Name or service not known: [client 144.76.19.72:39356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:57.659439 2026] [ssl:error] [pid 3617377:tid 3617377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:57.758191 2026] [ssl:error] [pid 3617267:tid 3617267] (EAI 2)Name or service not known: [client 144.76.19.72:39360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:07:57.758226 2026] [ssl:error] [pid 3617267:tid 3617267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:07:58.006567 2026] [ssl:error] [pid 3592494:tid 3592494] (70014)End of file found: [client 216.73.216.199:46059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:00.816729 2026] [ssl:error] [pid 3617372:tid 3617372] (EAI 2)Name or service not known: [client 144.76.19.72:58242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:00.816762 2026] [ssl:error] [pid 3617372:tid 3617372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:00.872908 2026] [ssl:error] [pid 3614069:tid 3614069] (EAI 2)Name or service not known: [client 144.76.19.72:58250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:00.872941 2026] [ssl:error] [pid 3614069:tid 3614069] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:02.526590 2026] [ssl:error] [pid 3617268:tid 3617268] (70014)End of file found: [client 216.73.216.199:40327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:02.533813 2026] [security2:error] [pid 3598076:tid 3598076] [client 119.28.140.106:58510] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchell.org"] [uri "/"] [unique_id "amtawjIw4BnJdtF0SK-OlAAAABY"]
[Thu Jul 30 15:08:02.873831 2026] [access_compat:error] [pid 3617376:tid 3617376] [client 64.180.68.231:51642] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:03.325443 2026] [access_compat:error] [pid 3597586:tid 3597586] [client 45.158.164.139:36336] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:08:03.520135 2026] [security2:error] [pid 3607140:tid 3607140] [client 185.191.171.8:22784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/where-do-88k-get-stationed"] [unique_id "amtaw3pvM9I3xgUSj_QjrQAAADI"]
[Thu Jul 30 15:08:03.928365 2026] [ssl:error] [pid 3617384:tid 3617384] (EAI 2)Name or service not known: [client 144.76.19.72:58260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:03.928399 2026] [ssl:error] [pid 3617384:tid 3617384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:03.984438 2026] [ssl:error] [pid 3616434:tid 3616434] (EAI 2)Name or service not known: [client 144.76.19.72:58266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:03.984468 2026] [ssl:error] [pid 3616434:tid 3616434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:04.030848 2026] [core:error] [pid 3616432:tid 3616432] (13)Permission denied: [client 216.73.216.199:11646] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty7/subsystem/ttyS0/flags
[Thu Jul 30 15:08:07.039281 2026] [ssl:error] [pid 3617380:tid 3617380] (EAI 2)Name or service not known: [client 144.76.19.72:58272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:07.039315 2026] [ssl:error] [pid 3617380:tid 3617380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:07.095839 2026] [ssl:error] [pid 3617649:tid 3617649] (EAI 2)Name or service not known: [client 144.76.19.72:58280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:07.095871 2026] [ssl:error] [pid 3617649:tid 3617649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:07.215107 2026] [core:error] [pid 3616432:tid 3616432] (13)Permission denied: [client 216.73.216.199:11646] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/robwalsh.com.db
[Thu Jul 30 15:08:10.154273 2026] [ssl:error] [pid 3617649:tid 3617649] (EAI 2)Name or service not known: [client 144.76.19.72:20006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:10.154304 2026] [ssl:error] [pid 3617649:tid 3617649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:10.207039 2026] [ssl:error] [pid 3617267:tid 3617267] (EAI 2)Name or service not known: [client 144.76.19.72:20018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:10.207079 2026] [ssl:error] [pid 3617267:tid 3617267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:10.228879 2026] [ssl:error] [pid 3617372:tid 3617372] (70014)End of file found: [client 216.73.216.199:25954] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:10.549320 2026] [security2:error] [pid 3617653:tid 3617653] [client 34.231.77.232:59449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtaynRmcnxIUxqkhRWskwAAAGA"]
[Thu Jul 30 15:08:12.117963 2026] [security2:error] [pid 3617649:tid 3617649] [client 101.33.81.73:48266] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtazKbbHMQQi5esyvaqAAAAAFw"]
[Thu Jul 30 15:08:13.263974 2026] [ssl:error] [pid 3609111:tid 3609111] (EAI 2)Name or service not known: [client 144.76.19.72:20032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:13.263999 2026] [ssl:error] [pid 3609111:tid 3609111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:13.320624 2026] [ssl:error] [pid 3617602:tid 3617602] (EAI 2)Name or service not known: [client 144.76.19.72:20044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:13.320659 2026] [ssl:error] [pid 3617602:tid 3617602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:13.429228 2026] [access_compat:error] [pid 3617268:tid 3617268] [client 64.180.68.231:52190] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:13.565568 2026] [security2:error] [pid 3617648:tid 3617648] [client 101.33.81.73:35796] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtazWiP1UjPq6_g28BNzAAAAFs"], referer: http://www.banskoexpress.com
[Thu Jul 30 15:08:14.120838 2026] [security2:error] [pid 3617382:tid 3617382] [client 191.113.252.162:38778] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaztLRavl0QOEvrjgufQAAAFA"]
[Thu Jul 30 15:08:14.120891 2026] [security2:error] [pid 3617382:tid 3617382] [client 191.113.252.162:38778] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtaztLRavl0QOEvrjgufQAAAFA"]
[Thu Jul 30 15:08:14.121147 2026] [security2:error] [pid 3617382:tid 3617382] [client 191.113.252.162:38778] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtaztLRavl0QOEvrjgufQAAAFA"]
[Thu Jul 30 15:08:14.142112 2026] [ssl:error] [pid 3616432:tid 3616432] (70014)End of file found: [client 216.73.216.199:11646] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:14.175451 2026] [cgi:error] [pid 3585927:tid 3585927] [client 102.129.223.92:59370] AH02812: stderr from /home/pbyawsga/akoptimize.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://akoptimize.co.uk
[Thu Jul 30 15:08:16.375602 2026] [ssl:error] [pid 3617163:tid 3617163] (EAI 2)Name or service not known: [client 144.76.19.72:20052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:16.375636 2026] [ssl:error] [pid 3617163:tid 3617163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:16.403179 2026] [security2:error] [pid 3617372:tid 3617372] [client 103.92.204.24:43082] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amta0Bupjo4xZa9hJZ-YHAAAAEc"]
[Thu Jul 30 15:08:16.403229 2026] [security2:error] [pid 3617372:tid 3617372] [client 103.92.204.24:43082] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amta0Bupjo4xZa9hJZ-YHAAAAEc"]
[Thu Jul 30 15:08:16.403464 2026] [security2:error] [pid 3617372:tid 3617372] [client 103.92.204.24:43082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amta0Bupjo4xZa9hJZ-YHAAAAEc"]
[Thu Jul 30 15:08:16.433159 2026] [ssl:error] [pid 3597586:tid 3597586] (EAI 2)Name or service not known: [client 144.76.19.72:20064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:16.433186 2026] [ssl:error] [pid 3597586:tid 3597586] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:17.782590 2026] [ssl:error] [pid 3616394:tid 3616394] (70014)End of file found: [client 216.73.216.199:59537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:19.490359 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:20072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:19.490390 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:19.541797 2026] [ssl:error] [pid 3617380:tid 3617380] (EAI 2)Name or service not known: [client 144.76.19.72:20074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:19.541828 2026] [ssl:error] [pid 3617380:tid 3617380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:19.613855 2026] [access_compat:error] [pid 3607140:tid 3607140] [client 64.180.68.231:52518] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:19.889191 2026] [security2:error] [pid 3617370:tid 3617370] [client 216.73.216.199:28295] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/mariadb@bootstrap.service.d/use_galera_new_cluster.conf"] [unique_id "amta03wZgK6qAdAvWcUlIQAAAEU"]
[Thu Jul 30 15:08:19.889484 2026] [security2:error] [pid 3617370:tid 3617370] [client 216.73.216.199:28295] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/mariadb@bootstrap.service.d/use_galera_new_cluster.conf"] [unique_id "amta03wZgK6qAdAvWcUlIQAAAEU"]
[Thu Jul 30 15:08:19.889705 2026] [security2:error] [pid 3617370:tid 3617370] [client 216.73.216.199:28295] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/systemd/system/mariadb@bootstrap.service.d/use_galera_new_cluster.conf"] [unique_id "amta03wZgK6qAdAvWcUlIQAAAEU"]
[Thu Jul 30 15:08:20.791782 2026] [core:error] [pid 3617370:tid 3617370] (13)Permission denied: [client 216.73.216.199:28295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UNIX/sanity_checks
[Thu Jul 30 15:08:21.733970 2026] [security2:error] [pid 3613550:tid 3613550] [client 103.72.0.159:32860] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amta1Xh09PgwfJev5JVztgAAAB4"]
[Thu Jul 30 15:08:21.734024 2026] [security2:error] [pid 3613550:tid 3613550] [client 103.72.0.159:32860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amta1Xh09PgwfJev5JVztgAAAB4"]
[Thu Jul 30 15:08:21.734290 2026] [security2:error] [pid 3613550:tid 3613550] [client 103.72.0.159:32860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amta1Xh09PgwfJev5JVztgAAAB4"]
[Thu Jul 30 15:08:22.594986 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:27954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:22.595019 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:22.651246 2026] [ssl:error] [pid 3611039:tid 3611039] (EAI 2)Name or service not known: [client 144.76.19.72:27962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:22.651278 2026] [ssl:error] [pid 3611039:tid 3611039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:22.805526 2026] [cgi:error] [pid 3617372:tid 3617372] [client 20.104.22.47:21764] AH02812: stderr from /home/ditchfes/public_html/broadbentandsmith.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:08:23.516856 2026] [core:error] [pid 3617370:tid 3617370] (13)Permission denied: [client 216.73.216.199:28295] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_dqtrx/red_zone
[Thu Jul 30 15:08:23.818913 2026] [ssl:error] [pid 3617370:tid 3617370] (70014)End of file found: [client 216.73.216.199:28295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:23.989479 2026] [access_compat:error] [pid 3609111:tid 3609111] [client 64.180.68.231:52755] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:25.625257 2026] [core:error] [pid 3610581:tid 3610581] (13)Permission denied: [client 216.73.216.199:55036] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS1/custom_divisor
[Thu Jul 30 15:08:25.720368 2026] [ssl:error] [pid 3607270:tid 3607270] (EAI 2)Name or service not known: [client 144.76.19.72:27964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:25.720410 2026] [ssl:error] [pid 3607270:tid 3607270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:25.772519 2026] [ssl:error] [pid 3613550:tid 3613550] (EAI 2)Name or service not known: [client 144.76.19.72:27966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:25.772553 2026] [ssl:error] [pid 3613550:tid 3613550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:27.134652 2026] [ssl:error] [pid 3617330:tid 3617330] (70014)End of file found: [client 216.73.216.199:18088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:28.828203 2026] [ssl:error] [pid 3616394:tid 3616394] (EAI 2)Name or service not known: [client 144.76.19.72:27974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:28.828248 2026] [ssl:error] [pid 3616394:tid 3616394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:28.882486 2026] [ssl:error] [pid 3616945:tid 3616945] (EAI 2)Name or service not known: [client 144.76.19.72:27980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:28.882518 2026] [ssl:error] [pid 3616945:tid 3616945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:29.241257 2026] [ssl:error] [pid 3610581:tid 3610581] (70014)End of file found: [client 216.73.216.199:55036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:29.431444 2026] [authz_core:error] [pid 3617373:tid 3617373] [client 169.58.39.193:62968] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:08:29.542015 2026] [core:error] [pid 3617548:tid 3617548] (13)Permission denied: [client 216.73.216.199:9588] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty53/subsystem/ttyS2/closing_wait
[Thu Jul 30 15:08:29.846813 2026] [ssl:error] [pid 3617548:tid 3617548] (70014)End of file found: [client 216.73.216.199:9588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:31.937803 2026] [ssl:error] [pid 3617163:tid 3617163] (EAI 2)Name or service not known: [client 144.76.19.72:43138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:31.937834 2026] [ssl:error] [pid 3617163:tid 3617163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:31.992119 2026] [ssl:error] [pid 3600933:tid 3600933] (EAI 2)Name or service not known: [client 144.76.19.72:43140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:31.992151 2026] [ssl:error] [pid 3600933:tid 3600933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:33.769871 2026] [authz_core:error] [pid 3617269:tid 3617269] [client 169.58.39.193:64008] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:08:34.605844 2026] [access_compat:error] [pid 3588368:tid 3588368] [client 64.180.68.231:53356] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:34.714428 2026] [ssl:error] [pid 3600933:tid 3600933] (70014)End of file found: [client 216.73.216.199:35938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:34.965084 2026] [lsapi:warn] [pid 3610581:tid 3610581] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:08:35.101285 2026] [ssl:error] [pid 3619700:tid 3619700] (EAI 2)Name or service not known: [client 144.76.19.72:43154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:35.101314 2026] [ssl:error] [pid 3619700:tid 3619700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:35.157963 2026] [ssl:error] [pid 3585927:tid 3585927] (EAI 2)Name or service not known: [client 144.76.19.72:43170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:35.157992 2026] [ssl:error] [pid 3585927:tid 3585927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:35.202388 2026] [ssl:error] [pid 3614069:tid 3614069] (70014)End of file found: [client 216.73.216.199:31813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:37.032907 2026] [access_compat:error] [pid 3617373:tid 3617373] [client 45.158.164.139:39654] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:08:37.271483 2026] [lsapi:warn] [pid 3614372:tid 3614372] [client 107.155.97.54:39076] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:08:37.271520 2026] [lsapi:warn] [pid 3614372:tid 3614372] [client 107.155.97.54:39076] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:08:38.034230 2026] [core:error] [pid 3617548:tid 3617548] (13)Permission denied: [client 216.73.216.199:8794] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:4/subsystem/ttyS3/iomem_base
[Thu Jul 30 15:08:39.857281 2026] [ssl:error] [pid 3617548:tid 3617548] (70014)End of file found: [client 216.73.216.199:8794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:43.862888 2026] [ssl:error] [pid 3620262:tid 3620262] (EAI 2)Name or service not known: [client 144.76.19.72:43182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:43.862929 2026] [ssl:error] [pid 3620262:tid 3620262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:44.253430 2026] [security2:error] [pid 3617330:tid 3617330] [client 124.156.157.91:33910] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amta7P68kQjrrwrfwRRPygAAADw"]
[Thu Jul 30 15:08:44.701099 2026] [ssl:error] [pid 3607140:tid 3607140] (70014)End of file found: [client 216.73.216.199:33395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:44.998437 2026] [ssl:error] [pid 3617651:tid 3617651] (70014)End of file found: [client 216.73.216.199:62465] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:45.221629 2026] [ssl:error] [pid 3620134:tid 3620134] (EAI 2)Name or service not known: [client 144.76.19.72:26634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:45.221664 2026] [ssl:error] [pid 3620134:tid 3620134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:45.240913 2026] [lsapi:warn] [pid 3601359:tid 3601359] [client 107.155.97.54:39100] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:08:45.240958 2026] [lsapi:warn] [pid 3601359:tid 3601359] [client 107.155.97.54:39100] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:08:45.554669 2026] [access_compat:error] [pid 3617382:tid 3617382] [client 64.180.68.231:53905] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:46.841650 2026] [core:error] [pid 3617372:tid 3617372] [client 66.249.66.71:36372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:08:46.841676 2026] [core:error] [pid 3617372:tid 3617372] [client 66.249.66.71:36372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:08:47.423095 2026] [ssl:error] [pid 3620134:tid 3620134] (70014)End of file found: [client 216.73.216.199:33745] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:48.277054 2026] [ssl:error] [pid 3620190:tid 3620190] (EAI 2)Name or service not known: [client 144.76.19.72:26658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:48.277099 2026] [ssl:error] [pid 3620190:tid 3620190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:48.330218 2026] [ssl:error] [pid 3611791:tid 3611791] (EAI 2)Name or service not known: [client 144.76.19.72:26674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:48.330250 2026] [ssl:error] [pid 3611791:tid 3611791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:49.214328 2026] [cgi:error] [pid 3611791:tid 3611791] [client 45.156.129.169:0] AH02811: stderr from /home/quantumc/shop.papier.com.mt/cgi-bin/authLogin.cgi: script not found or unable to stat
[Thu Jul 30 15:08:50.111097 2026] [ssl:error] [pid 3610581:tid 3610581] (70014)End of file found: [client 216.73.216.199:41789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:51.389397 2026] [ssl:error] [pid 3616432:tid 3616432] (EAI 2)Name or service not known: [client 144.76.19.72:55072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:51.389439 2026] [ssl:error] [pid 3616432:tid 3616432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:51.443659 2026] [ssl:error] [pid 3617163:tid 3617163] (EAI 2)Name or service not known: [client 144.76.19.72:55074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:51.443684 2026] [ssl:error] [pid 3617163:tid 3617163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:51.693992 2026] [access_compat:error] [pid 3620196:tid 3620196] [client 64.180.68.231:54239] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:52.049171 2026] [ssl:error] [pid 3611040:tid 3611040] (70014)End of file found: [client 216.73.216.199:26137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:53.906682 2026] [ssl:error] [pid 3611732:tid 3611732] (70014)End of file found: [client 216.73.216.199:36264] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:54.497935 2026] [ssl:error] [pid 3620136:tid 3620136] (EAI 2)Name or service not known: [client 144.76.19.72:55090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:54.497970 2026] [ssl:error] [pid 3620136:tid 3620136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:54.554571 2026] [ssl:error] [pid 3620135:tid 3620135] (EAI 2)Name or service not known: [client 144.76.19.72:55102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:54.554604 2026] [ssl:error] [pid 3620135:tid 3620135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:55.669325 2026] [authz_core:error] [pid 3617370:tid 3617370] [client 207.46.13.154:3649] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 15:08:55.835584 2026] [access_compat:error] [pid 3620193:tid 3620193] [client 64.180.68.231:54458] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:08:57.235340 2026] [core:error] [pid 3616945:tid 3616945] (13)Permission denied: [client 216.73.216.199:20348] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS2/closing_wait
[Thu Jul 30 15:08:57.631347 2026] [ssl:error] [pid 3620134:tid 3620134] (EAI 2)Name or service not known: [client 144.76.19.72:55106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:57.631386 2026] [ssl:error] [pid 3620134:tid 3620134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:57.684499 2026] [ssl:error] [pid 3620192:tid 3620192] (EAI 2)Name or service not known: [client 144.76.19.72:55114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:08:57.684533 2026] [ssl:error] [pid 3620192:tid 3620192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:08:57.789419 2026] [security2:error] [pid 3605622:tid 3605622] [client 43.134.15.174:35052] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amta-bilitSMVvnv3pIfhAAAABo"]
[Thu Jul 30 15:08:57.961675 2026] [security2:error] [pid 3617385:tid 3617385] [client 43.155.129.131:41966] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "itsupportinayrshire.com"] [uri "/"] [unique_id "amta-YAgqEsuB393gKuh_wAAAFM"]
[Thu Jul 30 15:08:58.138126 2026] [ssl:error] [pid 3616945:tid 3616945] (70014)End of file found: [client 216.73.216.199:20348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:08:58.997559 2026] [security2:error] [pid 3620135:tid 3620135] [client 43.134.15.174:52066] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amta-gG1oZKijnhPyxR1ugAAABQ"], referer: http://www.berehap.be
[Thu Jul 30 15:08:59.367150 2026] [cgi:error] [pid 3620264:tid 3620264] [client 216.73.216.199:23542] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/scripts/xfer_rcube_schema_migrate.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 15:08:59.367191 2026] [cgi:error] [pid 3620264:tid 3620264] [client 216.73.216.199:23542] End of script output before headers: xfer_rcube_schema_migrate.pl
[Thu Jul 30 15:08:59.859777 2026] [authz_core:error] [pid 3598076:tid 3598076] [client 20.193.250.173:61720] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:08:59.912903 2026] [security2:error] [pid 3620252:tid 3620252] [client 43.155.129.131:42848] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "itsupportinayrshire.com"] [uri "/"] [unique_id "amta-1T63DOu3TmwUeNn-wAAACk"], referer: http://itsupportinayrshire.com
[Thu Jul 30 15:09:00.111020 2026] [security2:error] [pid 3617163:tid 3617163] [client 43.165.2.110:41122] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "iapib.com"] [uri "/"] [unique_id "amta_IlkgPJ8RgBNk9yjmAAAACI"]
[Thu Jul 30 15:09:00.740192 2026] [ssl:error] [pid 3611040:tid 3611040] (EAI 2)Name or service not known: [client 144.76.19.72:48416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:00.740234 2026] [ssl:error] [pid 3611040:tid 3611040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:00.793111 2026] [ssl:error] [pid 3620266:tid 3620266] (EAI 2)Name or service not known: [client 144.76.19.72:48424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:00.793149 2026] [ssl:error] [pid 3620266:tid 3620266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:00.847593 2026] [ssl:error] [pid 3600024:tid 3600024] (70014)End of file found: [client 216.73.216.199:56294] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:01.356764 2026] [security2:error] [pid 3620261:tid 3620261] [client 47.128.99.189:45128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.rediscoveredgarden.co.uk"] [uri "/robots.txt"] [unique_id "amta_eu3HC2w7jIdd6LygAAAAEA"]
[Thu Jul 30 15:09:01.440006 2026] [security2:error] [pid 3617601:tid 3617601] [client 43.134.15.174:54202] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amta_cQixQ9Z45e7k8UGawAAAFY"], referer: https://www.berehap.be/
[Thu Jul 30 15:09:03.262557 2026] [ssl:error] [pid 3620251:tid 3620251] (70014)End of file found: [client 216.73.216.199:34061] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:03.851081 2026] [ssl:error] [pid 3620265:tid 3620265] (EAI 2)Name or service not known: [client 144.76.19.72:48436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:03.851115 2026] [ssl:error] [pid 3620265:tid 3620265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:03.908509 2026] [ssl:error] [pid 3617266:tid 3617266] (EAI 2)Name or service not known: [client 144.76.19.72:48452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:03.908542 2026] [ssl:error] [pid 3617266:tid 3617266] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:03.914937 2026] [security2:error] [pid 3617163:tid 3617163] [client 185.191.171.19:24438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/royalroms-pcsx2-bios"] [unique_id "amta_4lkgPJ8RgBNk9yjmQAAACI"]
[Thu Jul 30 15:09:04.050980 2026] [authz_core:error] [pid 3617330:tid 3617330] [client 20.193.250.173:55441] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:09:05.070386 2026] [ssl:error] [pid 3620252:tid 3620252] (70014)End of file found: [client 216.73.216.199:33292] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:05.548865 2026] [security2:error] [pid 3620261:tid 3620261] [client 114.119.142.20:60113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~102,103/request_format~html"] [unique_id "amtbAeu3HC2w7jIdd6LygQAAAEA"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~102,103/request_format~html
[Thu Jul 30 15:09:06.435380 2026] [access_compat:error] [pid 3617601:tid 3617601] [client 64.180.68.231:55013] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:06.890557 2026] [access_compat:error] [pid 3620257:tid 3620257] [client 45.158.164.139:37062] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:09:06.965221 2026] [ssl:error] [pid 3601359:tid 3601359] (EAI 2)Name or service not known: [client 144.76.19.72:48468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:06.965253 2026] [ssl:error] [pid 3601359:tid 3601359] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:07.076477 2026] [ssl:error] [pid 3620265:tid 3620265] (EAI 2)Name or service not known: [client 144.76.19.72:48476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:07.076508 2026] [ssl:error] [pid 3620265:tid 3620265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:07.306576 2026] [security2:error] [pid 3614372:tid 3614372] [client 187.190.177.189:39240] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbA6i6p_cpfvdp4vgytgAAACw"]
[Thu Jul 30 15:09:07.306624 2026] [security2:error] [pid 3614372:tid 3614372] [client 187.190.177.189:39240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbA6i6p_cpfvdp4vgytgAAACw"]
[Thu Jul 30 15:09:07.306871 2026] [security2:error] [pid 3614372:tid 3614372] [client 187.190.177.189:39240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbA6i6p_cpfvdp4vgytgAAACw"]
[Thu Jul 30 15:09:07.333389 2026] [cgi:error] [pid 3617163:tid 3617163] [client 130.12.182.254:31526] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:09:07.333711 2026] [core:error] [pid 3617163:tid 3617163] [client 130.12.182.254:31526] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:09:07.573795 2026] [security2:error] [pid 3617330:tid 3617330] [client 114.119.142.20:60123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~102,103/request_format~html"] [unique_id "amtbA_68kQjrrwrfwRRPzwAAADw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~102,103/request_format~html
[Thu Jul 30 15:09:08.384655 2026] [ssl:error] [pid 3620254:tid 3620254] (70014)End of file found: [client 216.73.216.199:21983] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:08.767386 2026] [security2:error] [pid 3620260:tid 3620260] [client 46.202.163.137:33744] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amtbBN7Az52quHSVuvr9tAAAAD8"]
[Thu Jul 30 15:09:09.288166 2026] [ssl:error] [pid 3620007:tid 3620007] (70014)End of file found: [client 216.73.216.199:1886] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:09.539285 2026] [security2:error] [pid 3614069:tid 3614069] [client 103.129.214.55:39064] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbBXGhXCdGKCN28xMzRwAAAAU"]
[Thu Jul 30 15:09:09.539334 2026] [security2:error] [pid 3614069:tid 3614069] [client 103.129.214.55:39064] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbBXGhXCdGKCN28xMzRwAAAAU"]
[Thu Jul 30 15:09:09.539584 2026] [security2:error] [pid 3614069:tid 3614069] [client 103.129.214.55:39064] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbBXGhXCdGKCN28xMzRwAAAAU"]
[Thu Jul 30 15:09:10.132856 2026] [ssl:error] [pid 3611732:tid 3611732] (EAI 2)Name or service not known: [client 144.76.19.72:58750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:10.132895 2026] [ssl:error] [pid 3611732:tid 3611732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:10.222361 2026] [ssl:error] [pid 3617371:tid 3617371] (EAI 2)Name or service not known: [client 144.76.19.72:58764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:10.222413 2026] [ssl:error] [pid 3617371:tid 3617371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:10.394230 2026] [security2:error] [pid 3617375:tid 3617375] [client 216.73.216.199:16870] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/plesk-lmlib.conf"] [unique_id "amtbBhVlTVHCs2ciMmmCrQAAAEo"]
[Thu Jul 30 15:09:10.394523 2026] [security2:error] [pid 3617375:tid 3617375] [client 216.73.216.199:16870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/plesk-lmlib.conf"] [unique_id "amtbBhVlTVHCs2ciMmmCrQAAAEo"]
[Thu Jul 30 15:09:10.394732 2026] [security2:error] [pid 3617375:tid 3617375] [client 216.73.216.199:16870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/plesk-lmlib.conf"] [unique_id "amtbBhVlTVHCs2ciMmmCrQAAAEo"]
[Thu Jul 30 15:09:10.496957 2026] [ssl:error] [pid 3617375:tid 3617375] (70014)End of file found: [client 216.73.216.199:16870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:13.124975 2026] [access_compat:error] [pid 3620260:tid 3620260] [client 64.180.68.231:55356] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:13.278493 2026] [ssl:error] [pid 3617371:tid 3617371] (EAI 2)Name or service not known: [client 144.76.19.72:58774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:13.278524 2026] [ssl:error] [pid 3617371:tid 3617371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:13.335897 2026] [ssl:error] [pid 3620256:tid 3620256] (EAI 2)Name or service not known: [client 144.76.19.72:58790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:13.335932 2026] [ssl:error] [pid 3620256:tid 3620256] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:14.960086 2026] [security2:error] [pid 3607086:tid 3607086] [client 185.191.171.17:43140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amtbCutVLw_7PQrRet6WfwAAAC8"]
[Thu Jul 30 15:09:15.032807 2026] [core:error] [pid 3620264:tid 3620264] (13)Permission denied: [client 216.73.216.199:36462] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/slab_size
[Thu Jul 30 15:09:15.556025 2026] [security2:error] [pid 3617601:tid 3617601] [client 185.191.171.11:42920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5308.0/prev_next,next.html"] [unique_id "amtbC8QixQ9Z45e7k8UGbQAAAFY"]
[Thu Jul 30 15:09:15.939352 2026] [ssl:error] [pid 3620264:tid 3620264] (70014)End of file found: [client 216.73.216.199:36462] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:16.391113 2026] [ssl:error] [pid 3620007:tid 3620007] (EAI 2)Name or service not known: [client 144.76.19.72:58802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:16.391147 2026] [ssl:error] [pid 3620007:tid 3620007] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:16.448129 2026] [ssl:error] [pid 3607086:tid 3607086] (EAI 2)Name or service not known: [client 144.76.19.72:58808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:16.448149 2026] [ssl:error] [pid 3607086:tid 3607086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:16.844222 2026] [ssl:error] [pid 3610581:tid 3610581] (70014)End of file found: [client 216.73.216.199:49065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:17.044496 2026] [access_compat:error] [pid 3620265:tid 3620265] [client 64.180.68.231:55563] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:17.922642 2026] [security2:error] [pid 3620537:tid 3620537] [client 41.34.38.1:64278] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbDQDdhnEu3o3h5nKN8wAAAE4"]
[Thu Jul 30 15:09:17.922689 2026] [security2:error] [pid 3620537:tid 3620537] [client 41.34.38.1:64278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbDQDdhnEu3o3h5nKN8wAAAE4"]
[Thu Jul 30 15:09:17.922973 2026] [security2:error] [pid 3620537:tid 3620537] [client 41.34.38.1:64278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbDQDdhnEu3o3h5nKN8wAAAE4"]
[Thu Jul 30 15:09:18.481788 2026] [authz_core:error] [pid 3609915:tid 3609915] [client 66.249.66.33:38521] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:09:18.484596 2026] [authz_core:error] [pid 3609915:tid 3609915] [client 66.249.66.33:38521] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:09:19.506124 2026] [ssl:error] [pid 3588368:tid 3588368] (EAI 2)Name or service not known: [client 144.76.19.72:58812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:19.506155 2026] [ssl:error] [pid 3588368:tid 3588368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:19.559098 2026] [ssl:error] [pid 3620196:tid 3620196] (EAI 2)Name or service not known: [client 144.76.19.72:20296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:19.559133 2026] [ssl:error] [pid 3620196:tid 3620196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:19.757255 2026] [lsapi:warn] [pid 3611040:tid 3611040] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:09:20.768465 2026] [ssl:error] [pid 3600024:tid 3600024] (70014)End of file found: [client 216.73.216.199:25425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:22.020933 2026] [security2:error] [pid 3616945:tid 3616945] [client 49.51.38.193:52330] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amtbEkFdDKkYceIDzeuDzwAAABw"]
[Thu Jul 30 15:09:22.268499 2026] [core:error] [pid 3620262:tid 3620262] (13)Permission denied: [client 216.73.216.199:26061] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nf_tables_set/uevent
[Thu Jul 30 15:09:22.611605 2026] [ssl:error] [pid 3620260:tid 3620260] (EAI 2)Name or service not known: [client 144.76.19.72:20304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:22.611641 2026] [ssl:error] [pid 3620260:tid 3620260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:22.663897 2026] [ssl:error] [pid 3617330:tid 3617330] (EAI 2)Name or service not known: [client 144.76.19.72:20308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:22.663933 2026] [ssl:error] [pid 3617330:tid 3617330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:23.172367 2026] [ssl:error] [pid 3620262:tid 3620262] (70014)End of file found: [client 216.73.216.199:26061] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:23.221183 2026] [access_compat:error] [pid 3620135:tid 3620135] [client 64.180.68.231:55882] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:23.997125 2026] [security2:error] [pid 3617269:tid 3617269] [client 49.51.38.193:35646] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtbE4GIUMGgFCrXT4bWvQAAADQ"], referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 15:09:23.998935 2026] [authz_core:error] [pid 3617269:tid 3617269] [client 49.51.38.193:35646] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 15:09:24.001591 2026] [authz_core:error] [pid 3617269:tid 3617269] [client 49.51.38.193:35646] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 15:09:25.720605 2026] [ssl:error] [pid 3617330:tid 3617330] (EAI 2)Name or service not known: [client 144.76.19.72:20314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:25.720640 2026] [ssl:error] [pid 3617330:tid 3617330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:25.773890 2026] [ssl:error] [pid 3620254:tid 3620254] (EAI 2)Name or service not known: [client 144.76.19.72:20324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:25.773928 2026] [ssl:error] [pid 3620254:tid 3620254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:26.187553 2026] [ssl:error] [pid 3620537:tid 3620537] (70014)End of file found: [client 216.73.216.199:18813] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:26.681990 2026] [core:error] [pid 3620265:tid 3620265] (13)Permission denied: [client 216.73.216.199:46100] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS2/iomem_base
[Thu Jul 30 15:09:27.587769 2026] [access_compat:error] [pid 3620195:tid 3620195] [client 64.180.68.231:56112] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:28.831008 2026] [ssl:error] [pid 3616945:tid 3616945] (EAI 2)Name or service not known: [client 144.76.19.72:20340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:28.831032 2026] [ssl:error] [pid 3616945:tid 3616945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:28.885283 2026] [ssl:error] [pid 3620079:tid 3620079] (EAI 2)Name or service not known: [client 144.76.19.72:20352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:28.885309 2026] [ssl:error] [pid 3620079:tid 3620079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:29.497618 2026] [core:error] [pid 3611732:tid 3611732] (13)Permission denied: [client 216.73.216.199:40165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:58/subsystem/ttyS3/line
[Thu Jul 30 15:09:30.099698 2026] [ssl:error] [pid 3611732:tid 3611732] (70014)End of file found: [client 216.73.216.199:40165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:30.705133 2026] [core:error] [pid 3620265:tid 3620265] (13)Permission denied: [client 216.73.216.199:46100] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS2/closing_wait
[Thu Jul 30 15:09:31.609820 2026] [ssl:error] [pid 3620265:tid 3620265] (70014)End of file found: [client 216.73.216.199:46100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:09:31.944797 2026] [ssl:error] [pid 3617371:tid 3617371] (EAI 2)Name or service not known: [client 144.76.19.72:61212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:31.944840 2026] [ssl:error] [pid 3617371:tid 3617371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:32.000878 2026] [ssl:error] [pid 3617269:tid 3617269] (EAI 2)Name or service not known: [client 144.76.19.72:61220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:32.000911 2026] [ssl:error] [pid 3617269:tid 3617269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:35.073172 2026] [ssl:error] [pid 3620536:tid 3620536] (EAI 2)Name or service not known: [client 144.76.19.72:61230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:35.073210 2026] [ssl:error] [pid 3620536:tid 3620536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:35.126853 2026] [ssl:error] [pid 3620079:tid 3620079] (EAI 2)Name or service not known: [client 144.76.19.72:61240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:35.126880 2026] [ssl:error] [pid 3620079:tid 3620079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:35.518831 2026] [core:error] [pid 3620537:tid 3620537] (13)Permission denied: [client 216.73.216.199:14442] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/sunrpc/sections/__tracepoints
[Thu Jul 30 15:09:36.608325 2026] [core:error] [pid 3620537:tid 3620537] (13)Permission denied: [client 216.73.216.199:14442] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/xt_owner/uevent
[Thu Jul 30 15:09:38.132145 2026] [access_compat:error] [pid 3617371:tid 3617371] [client 64.180.68.231:56661] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:38.230836 2026] [ssl:error] [pid 3620254:tid 3620254] (EAI 2)Name or service not known: [client 144.76.19.72:61254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:38.230860 2026] [ssl:error] [pid 3620254:tid 3620254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:38.286894 2026] [ssl:error] [pid 3620536:tid 3620536] (EAI 2)Name or service not known: [client 144.76.19.72:61260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:38.286923 2026] [ssl:error] [pid 3620536:tid 3620536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:39.543287 2026] [access_compat:error] [pid 3617163:tid 3617163] [client 45.158.164.139:58126] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:09:39.944503 2026] [security2:error] [pid 3620189:tid 3620189] [client 216.73.216.199:14285] ModSecurity: Warning. Matched phrase "fsockopen" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: fsockopen found within REQUEST_FILENAME: /wp-includes/requests/src/transport/fsockopen.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtbI7L-2BjVE145LlwNgQAAAB0"]
[Thu Jul 30 15:09:39.944679 2026] [security2:error] [pid 3620189:tid 3620189] [client 216.73.216.199:14285] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtbI7L-2BjVE145LlwNgQAAAB0"]
[Thu Jul 30 15:09:39.944898 2026] [security2:error] [pid 3620189:tid 3620189] [client 216.73.216.199:14285] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-includes/Requests/src/Transport/Fsockopen.php"] [unique_id "amtbI7L-2BjVE145LlwNgQAAAB0"]
[Thu Jul 30 15:09:40.049964 2026] [authz_core:error] [pid 3620189:tid 3620189] [client 216.73.216.199:14285] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Exception/error_log
[Thu Jul 30 15:09:40.650514 2026] [authz_core:error] [pid 3620189:tid 3620189] [client 216.73.216.199:14285] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/src/Auth/error_log
[Thu Jul 30 15:09:41.344105 2026] [ssl:error] [pid 3617375:tid 3617375] (EAI 2)Name or service not known: [client 144.76.19.72:18996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:41.344144 2026] [ssl:error] [pid 3617375:tid 3617375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:41.397909 2026] [ssl:error] [pid 3620536:tid 3620536] (EAI 2)Name or service not known: [client 144.76.19.72:19004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:41.397942 2026] [ssl:error] [pid 3620536:tid 3620536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:42.056148 2026] [core:error] [pid 3620255:tid 3620255] (13)Permission denied: [client 216.73.216.199:22909] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mnt_cache/objects_partial
[Thu Jul 30 15:09:42.172291 2026] [security2:error] [pid 3617382:tid 3617382] [client 46.105.39.49:14673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.loca.co.uk"] [uri "/robots.txt"] [unique_id "amtbJtLRavl0QOEvrjguvQAAAFA"]
[Thu Jul 30 15:09:44.298104 2026] [access_compat:error] [pid 3617649:tid 3617649] [client 64.180.68.231:56977] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:44.543455 2026] [ssl:error] [pid 3620536:tid 3620536] (EAI 2)Name or service not known: [client 144.76.19.72:19018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:44.543479 2026] [ssl:error] [pid 3620536:tid 3620536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:44.767933 2026] [lsapi:warn] [pid 3620255:tid 3620255] [client 216.73.216.199:22909] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 15:09:44.767959 2026] [lsapi:error] [pid 3620255:tid 3620255] [client 216.73.216.199:22909] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeIndexedArrayWithContext.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 15:09:44.865609 2026] [ssl:error] [pid 3620255:tid 3620255] (EAI 2)Name or service not known: [client 144.76.19.72:19020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:44.865638 2026] [ssl:error] [pid 3620255:tid 3620255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:48.571173 2026] [ssl:error] [pid 3620254:tid 3620254] (EAI 2)Name or service not known: [client 144.76.19.72:19022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:48.571217 2026] [ssl:error] [pid 3620254:tid 3620254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:48.631557 2026] [ssl:error] [pid 3620189:tid 3620189] (EAI 2)Name or service not known: [client 144.76.19.72:19028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:48.631590 2026] [ssl:error] [pid 3620189:tid 3620189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:48.778487 2026] [access_compat:error] [pid 3616945:tid 3616945] [client 64.180.68.231:57209] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:49.883065 2026] [core:error] [pid 3620079:tid 3620079] (13)Permission denied: [client 216.73.216.199:18911] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_ext_cache/objects_partial
[Thu Jul 30 15:09:51.557769 2026] [security2:error] [pid 3617267:tid 3617267] [client 110.42.208.131:51242] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.com"] [uri "/"] [unique_id "amtbLwdU3PTwpK0vhRNeWgAAADA"]
[Thu Jul 30 15:09:51.684475 2026] [ssl:error] [pid 3617330:tid 3617330] (EAI 2)Name or service not known: [client 144.76.19.72:65154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:51.684509 2026] [ssl:error] [pid 3617330:tid 3617330] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:51.736550 2026] [ssl:error] [pid 3620252:tid 3620252] (EAI 2)Name or service not known: [client 144.76.19.72:65156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:51.736579 2026] [ssl:error] [pid 3620252:tid 3620252] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:51.940444 2026] [security2:error] [pid 3620255:tid 3620255] [client 212.168.42.182:58860] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "video/x-msvideo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "thatwall.com"] [uri "/"] [unique_id "amtbLwsSsdId1kdMw3L-NQAAADM"]
[Thu Jul 30 15:09:51.941187 2026] [security2:error] [pid 3620255:tid 3620255] [client 212.168.42.182:58860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thatwall.com"] [uri "/"] [unique_id "amtbLwsSsdId1kdMw3L-NQAAADM"]
[Thu Jul 30 15:09:51.941457 2026] [security2:error] [pid 3620255:tid 3620255] [client 212.168.42.182:58860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "thatwall.com"] [uri "/"] [unique_id "amtbLwsSsdId1kdMw3L-NQAAADM"]
[Thu Jul 30 15:09:53.915234 2026] [security2:error] [pid 3620255:tid 3620255] [client 110.42.208.131:53510] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtbMQsSsdId1kdMw3L-NgAAADM"], referer: http://www.saturnsports.com
[Thu Jul 30 15:09:54.790546 2026] [ssl:error] [pid 3620537:tid 3620537] (EAI 2)Name or service not known: [client 144.76.19.72:65166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:54.790577 2026] [ssl:error] [pid 3620537:tid 3620537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:54.847281 2026] [ssl:error] [pid 3617371:tid 3617371] (EAI 2)Name or service not known: [client 144.76.19.72:65180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:54.847307 2026] [ssl:error] [pid 3617371:tid 3617371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:54.931819 2026] [access_compat:error] [pid 3620265:tid 3620265] [client 64.180.68.231:57532] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:09:55.722537 2026] [lsapi:warn] [pid 3617382:tid 3617382] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:09:57.968811 2026] [ssl:error] [pid 3617649:tid 3617649] (EAI 2)Name or service not known: [client 144.76.19.72:65190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:57.968836 2026] [ssl:error] [pid 3617649:tid 3617649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:58.278143 2026] [ssl:error] [pid 3617375:tid 3617375] (EAI 2)Name or service not known: [client 144.76.19.72:65192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:09:58.278169 2026] [ssl:error] [pid 3617375:tid 3617375] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:09:59.336472 2026] [access_compat:error] [pid 3619699:tid 3619699] [client 64.180.68.231:57777] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:01.332793 2026] [ssl:error] [pid 3623650:tid 3623650] (EAI 2)Name or service not known: [client 144.76.19.72:29412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:01.332849 2026] [ssl:error] [pid 3623650:tid 3623650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:01.395290 2026] [ssl:error] [pid 3620195:tid 3620195] (EAI 2)Name or service not known: [client 144.76.19.72:29424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:01.395333 2026] [ssl:error] [pid 3620195:tid 3620195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:01.596413 2026] [access_compat:error] [pid 3609915:tid 3609915] [client 3.80.52.151:54220] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2009/10/birthday-cake-candles-fire.jpg
[Thu Jul 30 15:10:01.596535 2026] [access_compat:error] [pid 3609915:tid 3609915] [client 3.80.52.151:54220] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:10:02.713417 2026] [core:error] [pid 3616945:tid 3616945] [client 66.249.66.8:63134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:10:02.713445 2026] [core:error] [pid 3616945:tid 3616945] [client 66.249.66.8:63134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:10:04.449467 2026] [ssl:error] [pid 3617269:tid 3617269] (EAI 2)Name or service not known: [client 144.76.19.72:29430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:04.449505 2026] [ssl:error] [pid 3617269:tid 3617269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:04.503577 2026] [ssl:error] [pid 3623869:tid 3623869] (EAI 2)Name or service not known: [client 144.76.19.72:29432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:04.503613 2026] [ssl:error] [pid 3623869:tid 3623869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:05.678934 2026] [ssl:error] [pid 3607086:tid 3607086] (70014)End of file found: [client 216.73.216.199:16565] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:10:06.049197 2026] [security2:error] [pid 3619699:tid 3619699] [client 85.208.96.206:65392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/famous-birthdays-february-5,-1962"] [unique_id "amtbPp9FTftmTmb-J-8JhwAAAAQ"]
[Thu Jul 30 15:10:07.561083 2026] [ssl:error] [pid 3620007:tid 3620007] (EAI 2)Name or service not known: [client 144.76.19.72:29448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:07.561118 2026] [ssl:error] [pid 3620007:tid 3620007] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:07.612883 2026] [ssl:error] [pid 3623140:tid 3623140] (EAI 2)Name or service not known: [client 144.76.19.72:29458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:07.612923 2026] [ssl:error] [pid 3623140:tid 3623140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:09.912209 2026] [access_compat:error] [pid 3617375:tid 3617375] [client 64.180.68.231:58396] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:10.349256 2026] [access_compat:error] [pid 3623647:tid 3623647] [client 45.158.164.139:34670] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:10:10.721805 2026] [ssl:error] [pid 3620134:tid 3620134] (EAI 2)Name or service not known: [client 144.76.19.72:61298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:10.721837 2026] [ssl:error] [pid 3620134:tid 3620134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:10.777687 2026] [ssl:error] [pid 3617371:tid 3617371] (EAI 2)Name or service not known: [client 144.76.19.72:61308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:10.777722 2026] [ssl:error] [pid 3617371:tid 3617371] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:10.797967 2026] [security2:error] [pid 3623591:tid 3623591] [client 43.162.95.192:41644] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.co.uk"] [uri "/"] [unique_id "amtbQruiSzIwsFbIu38TzQAAAAk"]
[Thu Jul 30 15:10:11.945650 2026] [security2:error] [pid 3620265:tid 3620265] [client 43.162.95.192:42256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtbQ1Wm-sHKXX8O2djx3AAAAEk"], referer: http://www.jasperandtroy.co.uk
[Thu Jul 30 15:10:13.848040 2026] [ssl:error] [pid 3620195:tid 3620195] (EAI 2)Name or service not known: [client 144.76.19.72:61312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:13.848093 2026] [ssl:error] [pid 3620195:tid 3620195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:13.901389 2026] [ssl:error] [pid 3620189:tid 3620189] (EAI 2)Name or service not known: [client 144.76.19.72:61326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:13.901431 2026] [ssl:error] [pid 3620189:tid 3620189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:14.192415 2026] [ssl:error] [pid 3623647:tid 3623647] (70014)End of file found: [client 216.73.216.199:47289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:10:14.651760 2026] [security2:error] [pid 3617602:tid 3617602] [client 139.155.134.17:51470] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-earth.com"] [uri "/"] [unique_id "amtbRlKCz0zMnGlOEsqt4QAAAFc"]
[Thu Jul 30 15:10:16.312205 2026] [ssl:error] [pid 3623141:tid 3623141] (70014)End of file found: [client 216.73.216.199:20921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:10:16.499159 2026] [access_compat:error] [pid 3620265:tid 3620265] [client 3.228.112.215:35842] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:10:16.499272 2026] [access_compat:error] [pid 3620265:tid 3620265] [client 3.228.112.215:35842] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:10:16.552037 2026] [access_compat:error] [pid 3607086:tid 3607086] [client 64.180.68.231:58763] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:16.954797 2026] [ssl:error] [pid 3620265:tid 3620265] (EAI 2)Name or service not known: [client 144.76.19.72:61338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:16.954826 2026] [ssl:error] [pid 3620265:tid 3620265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:17.009281 2026] [ssl:error] [pid 3620262:tid 3620262] (EAI 2)Name or service not known: [client 144.76.19.72:61352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:17.009326 2026] [ssl:error] [pid 3620262:tid 3620262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:17.011954 2026] [authz_core:error] [pid 3611792:tid 3611792] [client 169.58.39.193:49536] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:10:20.066249 2026] [ssl:error] [pid 3620443:tid 3620443] (EAI 2)Name or service not known: [client 144.76.19.72:62526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:20.066293 2026] [ssl:error] [pid 3620443:tid 3620443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:20.120096 2026] [ssl:error] [pid 3623648:tid 3623648] (EAI 2)Name or service not known: [client 144.76.19.72:62530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:20.120135 2026] [ssl:error] [pid 3623648:tid 3623648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:20.465962 2026] [access_compat:error] [pid 3617371:tid 3617371] [client 64.180.68.231:58975] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:22.471421 2026] [cgi:error] [pid 3623648:tid 3623648] [client 199.45.155.108:34412] AH02812: stderr from /home/pbyawsga/akoptimize.co.uk/cgi-bin/: attempt to invoke directory as script, referer: http://www.akoptimize.co.uk:80/cgi-bin
[Thu Jul 30 15:10:23.177158 2026] [ssl:error] [pid 3620537:tid 3620537] (EAI 2)Name or service not known: [client 144.76.19.72:62540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:23.177194 2026] [ssl:error] [pid 3620537:tid 3620537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:23.229112 2026] [ssl:error] [pid 3617602:tid 3617602] (EAI 2)Name or service not known: [client 144.76.19.72:62546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:23.229143 2026] [ssl:error] [pid 3617602:tid 3617602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:24.277652 2026] [authz_core:error] [pid 3623869:tid 3623869] [client 169.58.39.193:50228] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:10:25.406650 2026] [ssl:error] [pid 3614372:tid 3614372] (70014)End of file found: [client 216.73.216.199:54708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:10:26.284482 2026] [ssl:error] [pid 3620443:tid 3620443] (EAI 2)Name or service not known: [client 144.76.19.72:62566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:26.284519 2026] [ssl:error] [pid 3620443:tid 3620443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:26.337940 2026] [ssl:error] [pid 3623647:tid 3623647] (EAI 2)Name or service not known: [client 144.76.19.72:62574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:26.337970 2026] [ssl:error] [pid 3623647:tid 3623647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:26.489040 2026] [security2:error] [pid 3623141:tid 3623141] [client 43.167.236.228:38992] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-earth.com"] [uri "/"] [unique_id "amtbUs58amwCVUqNOpCiPAAAAAc"]
[Thu Jul 30 15:10:28.545339 2026] [security2:error] [pid 3616945:tid 3616945] [client 114.119.142.20:42073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/request_format~html/cat_ids~17"] [unique_id "amtbVEFdDKkYceIDzeuD5wAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/request_format~html/cat_ids~17
[Thu Jul 30 15:10:29.394488 2026] [ssl:error] [pid 3607086:tid 3607086] (EAI 2)Name or service not known: [client 144.76.19.72:62582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:29.394512 2026] [ssl:error] [pid 3607086:tid 3607086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:29.449162 2026] [ssl:error] [pid 3620443:tid 3620443] (EAI 2)Name or service not known: [client 144.76.19.72:62596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:29.449194 2026] [ssl:error] [pid 3620443:tid 3620443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:30.024339 2026] [security2:error] [pid 3616945:tid 3616945] [client 114.119.142.20:42081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/request_format~html/cat_ids~17"] [unique_id "amtbVkFdDKkYceIDzeuD6AAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/request_format~html/cat_ids~17
[Thu Jul 30 15:10:31.088460 2026] [access_compat:error] [pid 3620255:tid 3620255] [client 64.180.68.231:59565] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:31.116038 2026] [cgi:error] [pid 3614372:tid 3614372] [client 94.154.43.177:16822] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:10:31.453353 2026] [authz_core:error] [pid 3624811:tid 3624811] [client 66.249.66.33:46276] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:10:31.456038 2026] [authz_core:error] [pid 3624811:tid 3624811] [client 66.249.66.33:46276] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:10:31.747911 2026] [lsapi:warn] [pid 3616945:tid 3616945] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:10:33.044594 2026] [ssl:error] [pid 3611792:tid 3611792] (EAI 2)Name or service not known: [client 144.76.19.72:40396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:33.044625 2026] [ssl:error] [pid 3611792:tid 3611792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:33.100676 2026] [ssl:error] [pid 3617602:tid 3617602] (EAI 2)Name or service not known: [client 144.76.19.72:40408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:33.100712 2026] [ssl:error] [pid 3617602:tid 3617602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:34.504893 2026] [authz_core:error] [pid 3624887:tid 3624887] [client 169.58.39.193:51159] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:10:36.152996 2026] [ssl:error] [pid 3620079:tid 3620079] (EAI 2)Name or service not known: [client 144.76.19.72:40412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:36.153040 2026] [ssl:error] [pid 3620079:tid 3620079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:36.205841 2026] [ssl:error] [pid 3623647:tid 3623647] (EAI 2)Name or service not known: [client 144.76.19.72:40420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:36.205865 2026] [ssl:error] [pid 3623647:tid 3623647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:37.231322 2026] [access_compat:error] [pid 3620079:tid 3620079] [client 64.180.68.231:59890] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:39.263504 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:40432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:39.263538 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:39.317417 2026] [ssl:error] [pid 3624852:tid 3624852] (EAI 2)Name or service not known: [client 144.76.19.72:40446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:39.317449 2026] [ssl:error] [pid 3624852:tid 3624852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:39.455432 2026] [security2:error] [pid 3624887:tid 3624887] [client 18.214.238.178:36824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/uk-unclaimed-shares-and-dividends/"] [unique_id "amtbX8go-KCw2DGkusTuNwAAABg"]
[Thu Jul 30 15:10:40.142346 2026] [authz_core:error] [pid 3607086:tid 3607086] [client 169.58.39.193:52080] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:10:40.970850 2026] [access_compat:error] [pid 3620135:tid 3620135] [client 45.158.164.139:56310] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:10:41.605736 2026] [access_compat:error] [pid 3611792:tid 3611792] [client 64.180.68.231:60122] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:42.372644 2026] [ssl:error] [pid 3616945:tid 3616945] (EAI 2)Name or service not known: [client 144.76.19.72:49580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:42.372676 2026] [ssl:error] [pid 3616945:tid 3616945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:42.426105 2026] [ssl:error] [pid 3617267:tid 3617267] (EAI 2)Name or service not known: [client 144.76.19.72:49594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:42.426134 2026] [ssl:error] [pid 3617267:tid 3617267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:42.710794 2026] [ssl:error] [pid 3623534:tid 3623534] (70014)End of file found: [client 216.73.216.199:6223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:10:43.256560 2026] [security2:error] [pid 3623647:tid 3623647] [client 34.239.197.197:40800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/search/page/3/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/unclaimed-ib-industrial-life-penny-policies/"] [unique_id "amtbY2-mfJEe3ihqKSjfLgAAAAw"]
[Thu Jul 30 15:10:43.282185 2026] [security2:error] [pid 3624811:tid 3624811] [client 94.154.43.229:60286] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "josephashmore.org"] [uri "/.env"] [unique_id "amtbY1TUrHyURJg_j5GcwgAAAAU"]
[Thu Jul 30 15:10:43.282368 2026] [security2:error] [pid 3624811:tid 3624811] [client 94.154.43.229:60286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "josephashmore.org"] [uri "/.env"] [unique_id "amtbY1TUrHyURJg_j5GcwgAAAAU"]
[Thu Jul 30 15:10:43.282611 2026] [security2:error] [pid 3624811:tid 3624811] [client 94.154.43.229:60286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "josephashmore.org"] [uri "/.env"] [unique_id "amtbY1TUrHyURJg_j5GcwgAAAAU"]
[Thu Jul 30 15:10:43.330508 2026] [security2:error] [pid 3616945:tid 3616945] [client 190.162.29.71:37370] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbY0FdDKkYceIDzeuD7AAAABw"]
[Thu Jul 30 15:10:43.330556 2026] [security2:error] [pid 3616945:tid 3616945] [client 190.162.29.71:37370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbY0FdDKkYceIDzeuD7AAAABw"]
[Thu Jul 30 15:10:43.330815 2026] [security2:error] [pid 3616945:tid 3616945] [client 190.162.29.71:37370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbY0FdDKkYceIDzeuD7AAAABw"]
[Thu Jul 30 15:10:43.513248 2026] [security2:error] [pid 3623141:tid 3623141] [client 101.33.66.34:46170] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.cssystems.co.uk"] [uri "/"] [unique_id "amtbY858amwCVUqNOpCiQgAAAAc"], referer: http://www.cssystems.co.uk
[Thu Jul 30 15:10:45.481334 2026] [ssl:error] [pid 3607086:tid 3607086] (EAI 2)Name or service not known: [client 144.76.19.72:49608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:45.481366 2026] [ssl:error] [pid 3607086:tid 3607086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:45.532781 2026] [ssl:error] [pid 3620443:tid 3620443] (EAI 2)Name or service not known: [client 144.76.19.72:49622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:45.532807 2026] [ssl:error] [pid 3620443:tid 3620443] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:45.555983 2026] [security2:error] [pid 3620135:tid 3620135] [client 78.179.237.191:64777] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbZQG1oZKijnhPyxR14AAAABQ"]
[Thu Jul 30 15:10:45.556031 2026] [security2:error] [pid 3620135:tid 3620135] [client 78.179.237.191:64777] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbZQG1oZKijnhPyxR14AAAABQ"]
[Thu Jul 30 15:10:45.556306 2026] [security2:error] [pid 3620135:tid 3620135] [client 78.179.237.191:64777] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbZQG1oZKijnhPyxR14AAAABQ"]
[Thu Jul 30 15:10:47.738830 2026] [access_compat:error] [pid 3623647:tid 3623647] [client 64.180.68.231:60443] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:48.246730 2026] [security2:error] [pid 3624888:tid 3624888] [client 43.153.122.30:41900] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "epmsonline.co.uk"] [uri "/"] [unique_id "amtbaEnJdvsS4POI5_z48wAAABo"]
[Thu Jul 30 15:10:48.584273 2026] [ssl:error] [pid 3624886:tid 3624886] (EAI 2)Name or service not known: [client 144.76.19.72:49636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:48.584305 2026] [ssl:error] [pid 3624886:tid 3624886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:48.637565 2026] [ssl:error] [pid 3617602:tid 3617602] (EAI 2)Name or service not known: [client 144.76.19.72:49652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:48.637592 2026] [ssl:error] [pid 3617602:tid 3617602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:48.814173 2026] [lsapi:warn] [pid 3624888:tid 3624888] [client 43.153.122.30:41900] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 15:10:50.868246 2026] [ssl:error] [pid 3623648:tid 3623648] (70014)End of file found: [client 216.73.216.199:31261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:10:51.695770 2026] [ssl:error] [pid 3623647:tid 3623647] (EAI 2)Name or service not known: [client 144.76.19.72:49556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:51.695806 2026] [ssl:error] [pid 3623647:tid 3623647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:51.750371 2026] [ssl:error] [pid 3623647:tid 3623647] (EAI 2)Name or service not known: [client 144.76.19.72:49572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:51.750412 2026] [ssl:error] [pid 3623647:tid 3623647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:52.196483 2026] [access_compat:error] [pid 3623647:tid 3623647] [client 64.180.68.231:60674] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:10:52.647031 2026] [cgi:error] [pid 3623106:tid 3623106] [client 47.128.117.60:44848] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:10:53.902573 2026] [lsapi:warn] [pid 3619699:tid 3619699] [client 216.73.216.199:14635] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 15:10:53.902603 2026] [lsapi:error] [pid 3619699:tid 3619699] [client 216.73.216.199:14635] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeWithAttributes2.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 15:10:54.498127 2026] [security2:error] [pid 3624886:tid 3624886] [client 216.73.216.199:5018] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/\\x22../scripts2/updateconf/\\x22"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/\\"../scripts2/updateconf/\\""] [unique_id "amtbbteJlf1HuO-hD3eM8wAAABY"]
[Thu Jul 30 15:10:54.498174 2026] [security2:error] [pid 3624886:tid 3624886] [client 216.73.216.199:5018] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/../scripts2/updateconf/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/\\"../scripts2/updateconf/\\""] [unique_id "amtbbteJlf1HuO-hD3eM8wAAABY"]
[Thu Jul 30 15:10:54.498327 2026] [security2:error] [pid 3624886:tid 3624886] [client 216.73.216.199:5018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/\\"../scripts2/updateconf/\\""] [unique_id "amtbbteJlf1HuO-hD3eM8wAAABY"]
[Thu Jul 30 15:10:54.498555 2026] [security2:error] [pid 3624886:tid 3624886] [client 216.73.216.199:5018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/\\"../scripts2/updateconf/\\""] [unique_id "amtbbteJlf1HuO-hD3eM8wAAABY"]
[Thu Jul 30 15:10:54.823378 2026] [ssl:error] [pid 3620189:tid 3620189] (EAI 2)Name or service not known: [client 144.76.19.72:49576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:54.823422 2026] [ssl:error] [pid 3620189:tid 3620189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:54.882360 2026] [ssl:error] [pid 3611792:tid 3611792] (EAI 2)Name or service not known: [client 144.76.19.72:49590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:54.882388 2026] [ssl:error] [pid 3611792:tid 3611792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:56.187144 2026] [security2:error] [pid 3617382:tid 3617382] [client 41.71.8.245:56519] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbcNLRavl0QOEvrjgu0gAAAFA"]
[Thu Jul 30 15:10:56.187207 2026] [security2:error] [pid 3617382:tid 3617382] [client 41.71.8.245:56519] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbcNLRavl0QOEvrjgu0gAAAFA"]
[Thu Jul 30 15:10:56.187439 2026] [security2:error] [pid 3617382:tid 3617382] [client 41.71.8.245:56519] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbcNLRavl0QOEvrjgu0gAAAFA"]
[Thu Jul 30 15:10:57.940169 2026] [ssl:error] [pid 3625389:tid 3625389] (EAI 2)Name or service not known: [client 144.76.19.72:49606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:57.940205 2026] [ssl:error] [pid 3625389:tid 3625389] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:57.996644 2026] [ssl:error] [pid 3614372:tid 3614372] (EAI 2)Name or service not known: [client 144.76.19.72:49614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:10:57.996672 2026] [ssl:error] [pid 3614372:tid 3614372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:10:59.030331 2026] [lsapi:warn] [pid 3624886:tid 3624886] [client 216.73.216.199:5018] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 15:10:59.030363 2026] [lsapi:error] [pid 3624886:tid 3624886] [client 216.73.216.199:5018] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeWithAttributes.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 15:10:59.946830 2026] [core:error] [pid 3623591:tid 3623591] (13)Permission denied: [client 216.73.216.199:39327] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/objects
[Thu Jul 30 15:11:01.050970 2026] [ssl:error] [pid 3625536:tid 3625536] (EAI 2)Name or service not known: [client 144.76.19.72:28944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:01.051005 2026] [ssl:error] [pid 3625536:tid 3625536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:01.106377 2026] [ssl:error] [pid 3617267:tid 3617267] (EAI 2)Name or service not known: [client 144.76.19.72:28948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:01.106433 2026] [ssl:error] [pid 3617267:tid 3617267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:01.160507 2026] [core:error] [pid 3623591:tid 3623591] [client 216.73.216.199:39327] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/root/lib64/python3.6/%s.html)
[Thu Jul 30 15:11:02.453298 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:45836] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:02.453341 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:45836] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:02.736049 2026] [access_compat:error] [pid 3620136:tid 3620136] [client 64.180.68.231:61228] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:02.749362 2026] [lsapi:warn] [pid 3588368:tid 3588368] [client 45.158.164.139:45864] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:02.749412 2026] [lsapi:warn] [pid 3588368:tid 3588368] [client 45.158.164.139:45864] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:03.015789 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:03.015832 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:03.234862 2026] [lsapi:warn] [pid 3605695:tid 3605695] [client 45.158.164.139:45878] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:03.234902 2026] [lsapi:warn] [pid 3605695:tid 3605695] [client 45.158.164.139:45878] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:03.237172 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:03.237195 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:03.296277 2026] [authz_core:error] [pid 3620195:tid 3620195] [client 66.249.66.33:48234] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:11:03.298938 2026] [authz_core:error] [pid 3620195:tid 3620195] [client 66.249.66.33:48234] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:11:03.511415 2026] [lsapi:warn] [pid 3625922:tid 3625922] [client 45.158.164.139:45884] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:03.511450 2026] [lsapi:warn] [pid 3625922:tid 3625922] [client 45.158.164.139:45884] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:03.771365 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:45888] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:03.771422 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:45888] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:03.773376 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:03.773398 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:03.865871 2026] [security2:error] [pid 3624887:tid 3624887] [client 185.191.171.5:17364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3026.0/prev_next,prev.html"] [unique_id "amtbd8go-KCw2DGkusTuPwAAABg"]
[Thu Jul 30 15:11:03.974032 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:45902] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:03.974079 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:45902] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:04.164107 2026] [ssl:error] [pid 3624887:tid 3624887] (EAI 2)Name or service not known: [client 144.76.19.72:28958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:04.164146 2026] [ssl:error] [pid 3624887:tid 3624887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:04.221955 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:28972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:04.221989 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:04.416887 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:04.416914 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:04.600954 2026] [lsapi:warn] [pid 3620193:tid 3620193] [client 45.158.164.139:45964] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:04.600996 2026] [lsapi:warn] [pid 3620193:tid 3620193] [client 45.158.164.139:45964] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:04.603026 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:04.603049 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:04.784833 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:45970] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:04.784868 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:45970] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:04.786885 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:04.786909 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:04.976603 2026] [lsapi:warn] [pid 3617649:tid 3617649] [client 45.158.164.139:45978] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:04.976652 2026] [lsapi:warn] [pid 3617649:tid 3617649] [client 45.158.164.139:45978] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:05.231853 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:45980] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:05.231878 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:45980] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:05.430233 2026] [lsapi:warn] [pid 3624852:tid 3624852] [client 45.158.164.139:45986] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:05.430276 2026] [lsapi:warn] [pid 3624852:tid 3624852] [client 45.158.164.139:45986] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:05.644788 2026] [lsapi:warn] [pid 3624852:tid 3624852] [client 45.158.164.139:45988] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:05.644813 2026] [lsapi:warn] [pid 3624852:tid 3624852] [client 45.158.164.139:45988] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:06.166778 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:06.166807 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:06.436229 2026] [lsapi:warn] [pid 3620079:tid 3620079] [client 45.158.164.139:46004] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:06.436280 2026] [lsapi:warn] [pid 3620079:tid 3620079] [client 45.158.164.139:46004] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:06.438293 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:06.438317 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:06.668416 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:46018] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:06.668443 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:46018] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:06.671002 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:06.671024 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:06.924142 2026] [security2:error] [pid 3611792:tid 3611792] [client 216.73.216.199:49870] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/sysusers.d/basic.conf"] [unique_id "amtbegsjdNhkv6kzU7OqWwAAAD4"]
[Thu Jul 30 15:11:06.924445 2026] [security2:error] [pid 3611792:tid 3611792] [client 216.73.216.199:49870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/sysusers.d/basic.conf"] [unique_id "amtbegsjdNhkv6kzU7OqWwAAAD4"]
[Thu Jul 30 15:11:06.924665 2026] [security2:error] [pid 3611792:tid 3611792] [client 216.73.216.199:49870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/sysusers.d/basic.conf"] [unique_id "amtbegsjdNhkv6kzU7OqWwAAAD4"]
[Thu Jul 30 15:11:06.949615 2026] [security2:error] [pid 3625922:tid 3625922] [client 85.208.96.205:40082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/optumrx-prior-auth-form-2022"] [unique_id "amtbev0pSmo76lL-J71ZsAAAAAQ"]
[Thu Jul 30 15:11:07.064566 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:46032] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:07.064607 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:46032] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:07.070772 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:07.070798 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:07.261294 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:07.261327 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:07.280788 2026] [ssl:error] [pid 3624749:tid 3624749] (EAI 2)Name or service not known: [client 144.76.19.72:28976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:07.280817 2026] [ssl:error] [pid 3624749:tid 3624749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:07.334268 2026] [ssl:error] [pid 3623591:tid 3623591] (EAI 2)Name or service not known: [client 144.76.19.72:28988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:07.334305 2026] [ssl:error] [pid 3623591:tid 3623591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:07.454531 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:07.454561 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:07.642809 2026] [lsapi:warn] [pid 3625922:tid 3625922] [client 45.158.164.139:46074] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:07.642839 2026] [lsapi:warn] [pid 3625922:tid 3625922] [client 45.158.164.139:46074] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:07.830248 2026] [core:error] [pid 3611792:tid 3611792] (13)Permission denied: [client 216.73.216.199:49870] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mbcache/total_objects
[Thu Jul 30 15:11:07.859462 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:46080] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:07.859492 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:46080] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.044529 2026] [lsapi:warn] [pid 3626193:tid 3626193] [client 45.158.164.139:46088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:08.044570 2026] [lsapi:warn] [pid 3626193:tid 3626193] [client 45.158.164.139:46088] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.148543 2026] [authz_core:error] [pid 3614372:tid 3614372] [client 51.39.33.16:2436] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:11:08.151265 2026] [authz_core:error] [pid 3614372:tid 3614372] [client 51.39.33.16:2436] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:11:08.229988 2026] [lsapi:warn] [pid 3620079:tid 3620079] [client 45.158.164.139:46094] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:08.230017 2026] [lsapi:warn] [pid 3620079:tid 3620079] [client 45.158.164.139:46094] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.232018 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:08.232039 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.425274 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:08.425301 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.655564 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:46112] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:08.655591 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:46112] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.657670 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:08.657711 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.837198 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:46128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:08.837241 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:46128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:08.931999 2026] [access_compat:error] [pid 3626193:tid 3626193] [client 64.180.68.231:61548] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:09.047681 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.047709 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:09.179154 2026] [cgi:error] [pid 3620255:tid 3620255] [client 45.148.10.67:55264] AH02812: stderr from /home/quantumc/halmanninvestments.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:11:09.271191 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.271219 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:09.503059 2026] [lsapi:warn] [pid 3623647:tid 3623647] [client 45.158.164.139:46160] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.503112 2026] [lsapi:warn] [pid 3623647:tid 3623647] [client 45.158.164.139:46160] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:09.505189 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.505211 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:09.515769 2026] [security2:error] [pid 3623591:tid 3623591] [client 45.148.10.67:55248] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env"] [unique_id "amtbfbuiSzIwsFbIu38T9gAAAAk"]
[Thu Jul 30 15:11:09.515957 2026] [security2:error] [pid 3623591:tid 3623591] [client 45.148.10.67:55248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env"] [unique_id "amtbfbuiSzIwsFbIu38T9gAAAAk"]
[Thu Jul 30 15:11:09.516245 2026] [security2:error] [pid 3623591:tid 3623591] [client 45.148.10.67:55248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env"] [unique_id "amtbfbuiSzIwsFbIu38T9gAAAAk"]
[Thu Jul 30 15:11:09.718639 2026] [lsapi:warn] [pid 3624749:tid 3624749] [client 45.158.164.139:46170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.718684 2026] [lsapi:warn] [pid 3624749:tid 3624749] [client 45.158.164.139:46170] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:09.720697 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.720719 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:09.911305 2026] [lsapi:warn] [pid 3624811:tid 3624811] [client 45.158.164.139:46178] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.911349 2026] [lsapi:warn] [pid 3624811:tid 3624811] [client 45.158.164.139:46178] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:09.913363 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:09.913386 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:10.153341 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:46192] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:10.153387 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:46192] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:10.156225 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:10.156250 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:10.369224 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:46198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:10.369269 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:46198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:10.375911 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:10.375937 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:10.393344 2026] [ssl:error] [pid 3626193:tid 3626193] (EAI 2)Name or service not known: [client 144.76.19.72:47454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:10.393380 2026] [ssl:error] [pid 3626193:tid 3626193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:10.447252 2026] [ssl:error] [pid 3626123:tid 3626123] (EAI 2)Name or service not known: [client 144.76.19.72:47462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:10.447288 2026] [ssl:error] [pid 3626123:tid 3626123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:10.561059 2026] [lsapi:warn] [pid 3624811:tid 3624811] [client 45.158.164.139:46204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:10.561104 2026] [lsapi:warn] [pid 3624811:tid 3624811] [client 45.158.164.139:46204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:10.749819 2026] [lsapi:warn] [pid 3626123:tid 3626123] [client 45.158.164.139:36124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:10.749860 2026] [lsapi:warn] [pid 3626123:tid 3626123] [client 45.158.164.139:36124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:10.949881 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:10.949913 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:11.165354 2026] [lsapi:warn] [pid 3624811:tid 3624811] [client 45.158.164.139:36136] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:11.165392 2026] [lsapi:warn] [pid 3624811:tid 3624811] [client 45.158.164.139:36136] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:11.395983 2026] [lsapi:warn] [pid 3616945:tid 3616945] [client 45.158.164.139:36148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:11.396023 2026] [lsapi:warn] [pid 3616945:tid 3616945] [client 45.158.164.139:36148] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:11.398013 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:11.398037 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:11.584884 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:11.584912 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:11.747092 2026] [security2:error] [pid 3623647:tid 3623647] [client 45.148.10.67:55278] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/portal/.env"] [unique_id "amtbf2-mfJEe3ihqKSjfOgAAAAw"]
[Thu Jul 30 15:11:11.747275 2026] [security2:error] [pid 3623647:tid 3623647] [client 45.148.10.67:55278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/portal/.env"] [unique_id "amtbf2-mfJEe3ihqKSjfOgAAAAw"]
[Thu Jul 30 15:11:11.747492 2026] [security2:error] [pid 3623647:tid 3623647] [client 45.148.10.67:55278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/portal/.env"] [unique_id "amtbf2-mfJEe3ihqKSjfOgAAAAw"]
[Thu Jul 30 15:11:11.809909 2026] [lsapi:warn] [pid 3617334:tid 3617334] [client 45.158.164.139:36176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:11.809958 2026] [lsapi:warn] [pid 3617334:tid 3617334] [client 45.158.164.139:36176] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:11.811922 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:11.811948 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:11.833375 2026] [security2:error] [pid 3623647:tid 3623647] [client 45.148.10.67:55278] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/env/.env"] [unique_id "amtbf2-mfJEe3ihqKSjfOwAAAAw"]
[Thu Jul 30 15:11:11.833564 2026] [security2:error] [pid 3623647:tid 3623647] [client 45.148.10.67:55278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/env/.env"] [unique_id "amtbf2-mfJEe3ihqKSjfOwAAAAw"]
[Thu Jul 30 15:11:11.833771 2026] [security2:error] [pid 3623647:tid 3623647] [client 45.148.10.67:55278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/env/.env"] [unique_id "amtbf2-mfJEe3ihqKSjfOwAAAAw"]
[Thu Jul 30 15:11:12.022883 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:36178] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.022917 2026] [lsapi:warn] [pid 3623534:tid 3623534] [client 45.158.164.139:36178] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:12.025007 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.025033 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:12.124425 2026] [core:error] [pid 3611792:tid 3611792] (13)Permission denied: [client 216.73.216.199:49870] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/objects_partial
[Thu Jul 30 15:11:12.242876 2026] [lsapi:warn] [pid 3624749:tid 3624749] [client 45.158.164.139:36186] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.242907 2026] [lsapi:warn] [pid 3624749:tid 3624749] [client 45.158.164.139:36186] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:12.247287 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.247310 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:12.485980 2026] [lsapi:warn] [pid 3620260:tid 3620260] [client 45.158.164.139:36198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.486027 2026] [lsapi:warn] [pid 3620260:tid 3620260] [client 45.158.164.139:36198] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:12.490687 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.490712 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:12.712434 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.712469 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:12.950571 2026] [lsapi:warn] [pid 3620260:tid 3620260] [client 45.158.164.139:36204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:12.950603 2026] [lsapi:warn] [pid 3620260:tid 3620260] [client 45.158.164.139:36204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:13.139499 2026] [lsapi:warn] [pid 3617602:tid 3617602] [client 45.158.164.139:36206] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:13.139545 2026] [lsapi:warn] [pid 3617602:tid 3617602] [client 45.158.164.139:36206] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:13.141624 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:13.141664 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:13.270958 2026] [access_compat:error] [pid 3625389:tid 3625389] [client 64.180.68.231:61774] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:13.391062 2026] [security2:error] [pid 3626492:tid 3626492] [client 106.54.62.156:39380] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtbgVMMKDDX1O8UUVsm6AAAACE"]
[Thu Jul 30 15:11:13.408873 2026] [lsapi:warn] [pid 3620260:tid 3620260] [client 45.158.164.139:36222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:13.408904 2026] [lsapi:warn] [pid 3620260:tid 3620260] [client 45.158.164.139:36222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:13.411277 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:13.411311 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:13.501176 2026] [ssl:error] [pid 3624885:tid 3624885] (EAI 2)Name or service not known: [client 144.76.19.72:47476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:13.501216 2026] [ssl:error] [pid 3624885:tid 3624885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:13.560483 2026] [ssl:error] [pid 3617602:tid 3617602] (EAI 2)Name or service not known: [client 144.76.19.72:47484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:13.560511 2026] [ssl:error] [pid 3617602:tid 3617602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:13.690545 2026] [lsapi:warn] [pid 3614372:tid 3614372] [client 45.158.164.139:36234] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:13.690592 2026] [lsapi:warn] [pid 3614372:tid 3614372] [client 45.158.164.139:36234] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:13.692695 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:13.692723 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:13.773762 2026] [access_compat:error] [pid 3617602:tid 3617602] [client 45.158.164.139:36236] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:11:13.842835 2026] [security2:error] [pid 3624885:tid 3624885] [client 45.148.10.67:55284] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/api/.env"] [unique_id "amtbgR36fb56dnOG2Gn5ngAAABU"]
[Thu Jul 30 15:11:13.843014 2026] [security2:error] [pid 3624885:tid 3624885] [client 45.148.10.67:55284] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/api/.env"] [unique_id "amtbgR36fb56dnOG2Gn5ngAAABU"]
[Thu Jul 30 15:11:13.843265 2026] [security2:error] [pid 3624885:tid 3624885] [client 45.148.10.67:55284] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/api/.env"] [unique_id "amtbgR36fb56dnOG2Gn5ngAAABU"]
[Thu Jul 30 15:11:13.978821 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:13.978851 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.194410 2026] [lsapi:warn] [pid 3614372:tid 3614372] [client 45.158.164.139:36246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.194441 2026] [lsapi:warn] [pid 3614372:tid 3614372] [client 45.158.164.139:36246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.196858 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.196883 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.450118 2026] [lsapi:warn] [pid 3624886:tid 3624886] [client 45.158.164.139:36256] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.450178 2026] [lsapi:warn] [pid 3624886:tid 3624886] [client 45.158.164.139:36256] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.452505 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.452530 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.693507 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:36272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.693547 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:36272] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.695728 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.695751 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.913112 2026] [lsapi:warn] [pid 3617602:tid 3617602] [client 45.158.164.139:36280] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.913152 2026] [lsapi:warn] [pid 3617602:tid 3617602] [client 45.158.164.139:36280] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:14.915827 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:14.915857 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:15.176252 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:15.176285 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:15.419194 2026] [lsapi:warn] [pid 3624888:tid 3624888] [client 45.158.164.139:36308] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:15.419237 2026] [lsapi:warn] [pid 3624888:tid 3624888] [client 45.158.164.139:36308] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:15.608094 2026] [lsapi:warn] [pid 3625922:tid 3625922] [client 45.158.164.139:36318] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:15.608133 2026] [lsapi:warn] [pid 3625922:tid 3625922] [client 45.158.164.139:36318] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:15.610236 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:15.610267 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:15.865453 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:15.865486 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:16.055288 2026] [lsapi:warn] [pid 3624888:tid 3624888] [client 45.158.164.139:36334] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:16.055319 2026] [lsapi:warn] [pid 3624888:tid 3624888] [client 45.158.164.139:36334] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:16.057614 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:16.057638 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:16.494228 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:16.494255 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:16.620898 2026] [ssl:error] [pid 3611732:tid 3611732] (EAI 2)Name or service not known: [client 144.76.19.72:47500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:16.620927 2026] [ssl:error] [pid 3611732:tid 3611732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:16.637478 2026] [ssl:error] [pid 3617334:tid 3617334] (70014)End of file found: [client 216.73.216.199:22610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:16.675570 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:47508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:16.675610 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:16.720731 2026] [lsapi:warn] [pid 3623592:tid 3623592] [client 45.158.164.139:36354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:16.720770 2026] [lsapi:warn] [pid 3623592:tid 3623592] [client 45.158.164.139:36354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:16.722163 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:16.722186 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:16.905252 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:36370] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:16.905294 2026] [lsapi:warn] [pid 3623141:tid 3623141] [client 45.158.164.139:36370] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:16.907350 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:16.907377 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:17.118151 2026] [lsapi:warn] [pid 3624853:tid 3624853] [client 45.158.164.139:36376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:17.118190 2026] [lsapi:warn] [pid 3624853:tid 3624853] [client 45.158.164.139:36376] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:17.126623 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:17.126650 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:17.265109 2026] [lsapi:warn] [pid 3614372:tid 3614372] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:11:17.305962 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:36386] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:17.305993 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:36386] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:17.311231 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:17.311257 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:17.543269 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:17.543296 2026] [lsapi:warn] [pid 3617267:tid 3617267] [client 20.203.148.31:12232] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:19.777076 2026] [ssl:error] [pid 3623647:tid 3623647] (EAI 2)Name or service not known: [client 144.76.19.72:32326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:19.777123 2026] [ssl:error] [pid 3623647:tid 3623647] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:19.834038 2026] [ssl:error] [pid 3624749:tid 3624749] (EAI 2)Name or service not known: [client 144.76.19.72:32342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:19.834087 2026] [ssl:error] [pid 3624749:tid 3624749] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:19.998828 2026] [access_compat:error] [pid 3624811:tid 3624811] [client 64.180.68.231:62127] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:20.659976 2026] [security2:error] [pid 3620079:tid 3620079] [client 45.148.10.67:40906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/app/.env"] [unique_id "amtbiBipedqj0TwvQy6-5QAAAAs"]
[Thu Jul 30 15:11:20.660332 2026] [security2:error] [pid 3620079:tid 3620079] [client 45.148.10.67:40906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/app/.env"] [unique_id "amtbiBipedqj0TwvQy6-5QAAAAs"]
[Thu Jul 30 15:11:20.660616 2026] [security2:error] [pid 3620079:tid 3620079] [client 45.148.10.67:40906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/app/.env"] [unique_id "amtbiBipedqj0TwvQy6-5QAAAAs"]
[Thu Jul 30 15:11:20.949188 2026] [ssl:error] [pid 3623141:tid 3623141] (70014)End of file found: [client 216.73.216.199:7729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:22.160566 2026] [ssl:error] [pid 3620193:tid 3620193] (70014)End of file found: [client 216.73.216.199:4969] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:22.890449 2026] [ssl:error] [pid 3624885:tid 3624885] (EAI 2)Name or service not known: [client 144.76.19.72:32350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:22.890483 2026] [ssl:error] [pid 3624885:tid 3624885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:22.943827 2026] [ssl:error] [pid 3620260:tid 3620260] (EAI 2)Name or service not known: [client 144.76.19.72:32356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:22.943869 2026] [ssl:error] [pid 3620260:tid 3620260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:23.100046 2026] [ssl:error] [pid 3624852:tid 3624852] (70014)End of file found: [client 216.73.216.199:15072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:23.382776 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/dev/.env"] [unique_id "amtbi9FSQAQesFH5DwLAaAAAAEI"]
[Thu Jul 30 15:11:23.383024 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/dev/.env"] [unique_id "amtbi9FSQAQesFH5DwLAaAAAAEI"]
[Thu Jul 30 15:11:23.383322 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/dev/.env"] [unique_id "amtbi9FSQAQesFH5DwLAaAAAAEI"]
[Thu Jul 30 15:11:23.539637 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/new/.env"] [unique_id "amtbi9FSQAQesFH5DwLAaQAAAEI"]
[Thu Jul 30 15:11:23.539812 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/new/.env"] [unique_id "amtbi9FSQAQesFH5DwLAaQAAAEI"]
[Thu Jul 30 15:11:23.540062 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/new/.env"] [unique_id "amtbi9FSQAQesFH5DwLAaQAAAEI"]
[Thu Jul 30 15:11:23.643922 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/new/.env.local"] [unique_id "amtbi9FSQAQesFH5DwLAagAAAEI"]
[Thu Jul 30 15:11:23.644091 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/new/.env.local"] [unique_id "amtbi9FSQAQesFH5DwLAagAAAEI"]
[Thu Jul 30 15:11:23.644348 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/new/.env.local"] [unique_id "amtbi9FSQAQesFH5DwLAagAAAEI"]
[Thu Jul 30 15:11:23.655353 2026] [security2:error] [pid 3624853:tid 3624853] [client 47.237.254.14:46165] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbi8nk7TCpAUAHerDZbQAAABM"]
[Thu Jul 30 15:11:23.655435 2026] [security2:error] [pid 3624853:tid 3624853] [client 47.237.254.14:46165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbi8nk7TCpAUAHerDZbQAAABM"]
[Thu Jul 30 15:11:23.655819 2026] [security2:error] [pid 3624853:tid 3624853] [client 47.237.254.14:46165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbi8nk7TCpAUAHerDZbQAAABM"]
[Thu Jul 30 15:11:23.933570 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/new/.env.production"] [unique_id "amtbi9FSQAQesFH5DwLAawAAAEI"]
[Thu Jul 30 15:11:23.933826 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/new/.env.production"] [unique_id "amtbi9FSQAQesFH5DwLAawAAAEI"]
[Thu Jul 30 15:11:23.934104 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/new/.env.production"] [unique_id "amtbi9FSQAQesFH5DwLAawAAAEI"]
[Thu Jul 30 15:11:23.952728 2026] [access_compat:error] [pid 3626123:tid 3626123] [client 64.180.68.231:62329] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:24.108889 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/new/.env.staging"] [unique_id "amtbjNFSQAQesFH5DwLAbAAAAEI"]
[Thu Jul 30 15:11:24.109061 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/new/.env.staging"] [unique_id "amtbjNFSQAQesFH5DwLAbAAAAEI"]
[Thu Jul 30 15:11:24.109298 2026] [security2:error] [pid 3617334:tid 3617334] [client 45.148.10.67:40922] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/new/.env.staging"] [unique_id "amtbjNFSQAQesFH5DwLAbAAAAEI"]
[Thu Jul 30 15:11:24.433926 2026] [security2:error] [pid 3617382:tid 3617382] [client 27.59.124.123:36930] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbjNLRavl0QOEvrjgu2wAAAFA"]
[Thu Jul 30 15:11:24.433979 2026] [security2:error] [pid 3617382:tid 3617382] [client 27.59.124.123:36930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbjNLRavl0QOEvrjgu2wAAAFA"]
[Thu Jul 30 15:11:24.434236 2026] [security2:error] [pid 3617382:tid 3617382] [client 27.59.124.123:36930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbjNLRavl0QOEvrjgu2wAAAFA"]
[Thu Jul 30 15:11:26.032394 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:32372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:26.032487 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:26.086249 2026] [ssl:error] [pid 3624885:tid 3624885] (EAI 2)Name or service not known: [client 144.76.19.72:32378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:26.086293 2026] [ssl:error] [pid 3624885:tid 3624885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:26.904891 2026] [security2:error] [pid 3626193:tid 3626193] [client 47.237.254.14:35629] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbjlhJkJ_uudBCVgFn_QAAAB8"]
[Thu Jul 30 15:11:26.904958 2026] [security2:error] [pid 3626193:tid 3626193] [client 47.237.254.14:35629] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbjlhJkJ_uudBCVgFn_QAAAB8"]
[Thu Jul 30 15:11:26.905244 2026] [security2:error] [pid 3626193:tid 3626193] [client 47.237.254.14:35629] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbjlhJkJ_uudBCVgFn_QAAAB8"]
[Thu Jul 30 15:11:27.429697 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/awstats/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WhgAAAAI"]
[Thu Jul 30 15:11:27.429879 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/awstats/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WhgAAAAI"]
[Thu Jul 30 15:11:27.430119 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/awstats/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WhgAAAAI"]
[Thu Jul 30 15:11:27.511676 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/conf/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WhwAAAAI"]
[Thu Jul 30 15:11:27.511855 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/conf/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WhwAAAAI"]
[Thu Jul 30 15:11:27.512081 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/conf/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WhwAAAAI"]
[Thu Jul 30 15:11:27.631636 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/cron/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WiAAAAAI"]
[Thu Jul 30 15:11:27.631822 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/cron/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WiAAAAAI"]
[Thu Jul 30 15:11:27.632039 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/cron/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WiAAAAAI"]
[Thu Jul 30 15:11:27.808967 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/www/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WiQAAAAI"]
[Thu Jul 30 15:11:27.809185 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/www/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WiQAAAAI"]
[Thu Jul 30 15:11:27.809410 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/www/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WiQAAAAI"]
[Thu Jul 30 15:11:27.942670 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/docker/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WigAAAAI"]
[Thu Jul 30 15:11:27.942853 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/docker/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WigAAAAI"]
[Thu Jul 30 15:11:27.943057 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/docker/.env"] [unique_id "amtbj1qwSVvLCm4GJ01WigAAAAI"]
[Thu Jul 30 15:11:28.130979 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/docker/app/.env"] [unique_id "amtbkFqwSVvLCm4GJ01WiwAAAAI"]
[Thu Jul 30 15:11:28.131265 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/docker/app/.env"] [unique_id "amtbkFqwSVvLCm4GJ01WiwAAAAI"]
[Thu Jul 30 15:11:28.131537 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/docker/app/.env"] [unique_id "amtbkFqwSVvLCm4GJ01WiwAAAAI"]
[Thu Jul 30 15:11:28.234883 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "halmanninvestments.com"] [uri "/env.backup"] [unique_id "amtbkFqwSVvLCm4GJ01WjAAAAAI"]
[Thu Jul 30 15:11:28.235148 2026] [ssl:error] [pid 3626529:tid 3626529] (70014)End of file found: [client 216.73.216.199:46549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:28.235167 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/env.backup"] [unique_id "amtbkFqwSVvLCm4GJ01WjAAAAAI"]
[Thu Jul 30 15:11:28.235449 2026] [security2:error] [pid 3623106:tid 3623106] [client 45.148.10.67:53786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/env.backup"] [unique_id "amtbkFqwSVvLCm4GJ01WjAAAAAI"]
[Thu Jul 30 15:11:29.142033 2026] [ssl:error] [pid 3623534:tid 3623534] (EAI 2)Name or service not known: [client 144.76.19.72:32392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:29.142098 2026] [ssl:error] [pid 3623534:tid 3623534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:29.206525 2026] [ssl:error] [pid 3625536:tid 3625536] (EAI 2)Name or service not known: [client 144.76.19.72:32396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:29.206558 2026] [ssl:error] [pid 3625536:tid 3625536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:30.036784 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:59961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:31.084896 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.vscode/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4QAAABA"]
[Thu Jul 30 15:11:31.085023 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.vscode/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4QAAABA"]
[Thu Jul 30 15:11:31.085257 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.vscode/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4QAAABA"]
[Thu Jul 30 15:11:31.269830 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/js/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4gAAABA"]
[Thu Jul 30 15:11:31.270014 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/js/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4gAAABA"]
[Thu Jul 30 15:11:31.270223 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/js/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4gAAABA"]
[Thu Jul 30 15:11:31.475831 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/laravel/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4wAAABA"]
[Thu Jul 30 15:11:31.476009 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/laravel/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4wAAABA"]
[Thu Jul 30 15:11:31.476230 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:53790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/laravel/.env"] [unique_id "amtbk1rEVrcmWCgE5tjO4wAAABA"]
[Thu Jul 30 15:11:31.852094 2026] [core:error] [pid 3617382:tid 3617382] (13)Permission denied: [client 216.73.216.199:48550] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/total_objects
[Thu Jul 30 15:11:32.261698 2026] [ssl:error] [pid 3623591:tid 3623591] (EAI 2)Name or service not known: [client 144.76.19.72:52026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:32.261742 2026] [ssl:error] [pid 3623591:tid 3623591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:32.315132 2026] [ssl:error] [pid 3617334:tid 3617334] (EAI 2)Name or service not known: [client 144.76.19.72:52034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:32.315166 2026] [ssl:error] [pid 3617334:tid 3617334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:32.772476 2026] [ssl:error] [pid 3617382:tid 3617382] (70014)End of file found: [client 216.73.216.199:48550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:33.077732 2026] [authz_core:error] [pid 3617334:tid 3617334] [client 66.249.66.34:63794] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:11:33.080410 2026] [authz_core:error] [pid 3617334:tid 3617334] [client 66.249.66.34:63794] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:11:34.335046 2026] [security2:error] [pid 3620443:tid 3620443] [client 45.148.10.67:53804] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/laravel/core/.env"] [unique_id "amtbluZMzP0qPE6a8qLXWgAAAE0"]
[Thu Jul 30 15:11:34.335273 2026] [security2:error] [pid 3620443:tid 3620443] [client 45.148.10.67:53804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/laravel/core/.env"] [unique_id "amtbluZMzP0qPE6a8qLXWgAAAE0"]
[Thu Jul 30 15:11:34.335564 2026] [security2:error] [pid 3620443:tid 3620443] [client 45.148.10.67:53804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/laravel/core/.env"] [unique_id "amtbluZMzP0qPE6a8qLXWgAAAE0"]
[Thu Jul 30 15:11:34.496654 2026] [security2:error] [pid 3624888:tid 3624888] [client 185.191.171.1:10628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2196.0/prev_next,prev.html"] [unique_id "amtblknJdvsS4POI5_z5NgAAABo"]
[Thu Jul 30 15:11:34.600621 2026] [access_compat:error] [pid 3626529:tid 3626529] [client 64.180.68.231:62885] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:35.097871 2026] [security2:error] [pid 3626492:tid 3626492] [client 43.128.149.102:34696] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.akoptimize.co.uk"] [uri "/"] [unique_id "amtbl1MMKDDX1O8UUVsm8QAAACE"]
[Thu Jul 30 15:11:35.369681 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:52044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:35.369711 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:35.429758 2026] [ssl:error] [pid 3623591:tid 3623591] (EAI 2)Name or service not known: [client 144.76.19.72:52060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:35.429804 2026] [ssl:error] [pid 3623591:tid 3623591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:36.187335 2026] [security2:error] [pid 3626492:tid 3626492] [client 45.148.10.67:41914] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/mail/.env"] [unique_id "amtbmFMMKDDX1O8UUVsm8gAAACE"]
[Thu Jul 30 15:11:36.187539 2026] [security2:error] [pid 3626492:tid 3626492] [client 45.148.10.67:41914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/mail/.env"] [unique_id "amtbmFMMKDDX1O8UUVsm8gAAACE"]
[Thu Jul 30 15:11:36.187746 2026] [security2:error] [pid 3626492:tid 3626492] [client 45.148.10.67:41914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/mail/.env"] [unique_id "amtbmFMMKDDX1O8UUVsm8gAAACE"]
[Thu Jul 30 15:11:36.188161 2026] [access_compat:error] [pid 3627000:tid 3627000] [client 44.212.50.52:51484] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/12/emma-thompson.jpg
[Thu Jul 30 15:11:36.188264 2026] [access_compat:error] [pid 3627000:tid 3627000] [client 44.212.50.52:51484] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:11:36.243641 2026] [security2:error] [pid 3626192:tid 3626192] [client 18.214.124.6:36282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2016/01/leeds-191x300.jpg"] [unique_id "amtbmIgcAq11CPrh_M4s_gAAAB4"]
[Thu Jul 30 15:11:36.259614 2026] [security2:error] [pid 3626492:tid 3626492] [client 45.148.10.67:41914] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/mailer/.env"] [unique_id "amtbmFMMKDDX1O8UUVsm8wAAACE"]
[Thu Jul 30 15:11:36.259791 2026] [security2:error] [pid 3626492:tid 3626492] [client 45.148.10.67:41914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/mailer/.env"] [unique_id "amtbmFMMKDDX1O8UUVsm8wAAACE"]
[Thu Jul 30 15:11:36.259988 2026] [security2:error] [pid 3626492:tid 3626492] [client 45.148.10.67:41914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/mailer/.env"] [unique_id "amtbmFMMKDDX1O8UUVsm8wAAACE"]
[Thu Jul 30 15:11:36.378516 2026] [ssl:error] [pid 3620260:tid 3620260] (70014)End of file found: [client 216.73.216.199:38529] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:37.640328 2026] [security2:error] [pid 3627000:tid 3627000] [client 45.148.10.67:41916] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/nginx/.env"] [unique_id "amtbmbNEnzQisMFE5K6rmgAAACU"]
[Thu Jul 30 15:11:37.640541 2026] [security2:error] [pid 3627000:tid 3627000] [client 45.148.10.67:41916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/nginx/.env"] [unique_id "amtbmbNEnzQisMFE5K6rmgAAACU"]
[Thu Jul 30 15:11:37.640766 2026] [security2:error] [pid 3627000:tid 3627000] [client 45.148.10.67:41916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/nginx/.env"] [unique_id "amtbmbNEnzQisMFE5K6rmgAAACU"]
[Thu Jul 30 15:11:38.488165 2026] [ssl:error] [pid 3617382:tid 3617382] (EAI 2)Name or service not known: [client 144.76.19.72:52068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:38.488206 2026] [ssl:error] [pid 3617382:tid 3617382] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:38.544459 2026] [ssl:error] [pid 3616945:tid 3616945] (EAI 2)Name or service not known: [client 144.76.19.72:52078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:38.544490 2026] [ssl:error] [pid 3616945:tid 3616945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:38.675599 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/public/.env"] [unique_id "amtbmlWm-sHKXX8O2djx_gAAAEk"]
[Thu Jul 30 15:11:38.675741 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/public/.env"] [unique_id "amtbmlWm-sHKXX8O2djx_gAAAEk"]
[Thu Jul 30 15:11:38.675956 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/public/.env"] [unique_id "amtbmlWm-sHKXX8O2djx_gAAAEk"]
[Thu Jul 30 15:11:38.876632 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/site/.env"] [unique_id "amtbmlWm-sHKXX8O2djx_wAAAEk"]
[Thu Jul 30 15:11:38.876781 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/site/.env"] [unique_id "amtbmlWm-sHKXX8O2djx_wAAAEk"]
[Thu Jul 30 15:11:38.876974 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/site/.env"] [unique_id "amtbmlWm-sHKXX8O2djx_wAAAEk"]
[Thu Jul 30 15:11:39.029389 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:39.029443 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:39.093365 2026] [ssl:error] [pid 3624888:tid 3624888] (70014)End of file found: [client 216.73.216.199:4897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:39.093924 2026] [security2:error] [pid 3616945:tid 3616945] [client 3.216.227.216:31668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2020/01/library-poster-211x300.png"] [unique_id "amtbm0FdDKkYceIDzeuD-gAAABw"]
[Thu Jul 30 15:11:39.129364 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/xampp/.env"] [unique_id "amtbm1Wm-sHKXX8O2djyAAAAAEk"]
[Thu Jul 30 15:11:39.129553 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/xampp/.env"] [unique_id "amtbm1Wm-sHKXX8O2djyAAAAAEk"]
[Thu Jul 30 15:11:39.129766 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:41930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/xampp/.env"] [unique_id "amtbm1Wm-sHKXX8O2djyAAAAAEk"]
[Thu Jul 30 15:11:39.254266 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:39.254297 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:39.468178 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:55744] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:39.468203 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:55744] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:39.470208 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:39.470229 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:39.529429 2026] [security2:error] [pid 3626964:tid 3626964] [client 94.154.43.187:59612] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "craft-buddies.co.uk"] [uri "/.env"] [unique_id "amtbmx0W4ijdXklExR0biAAAAAU"]
[Thu Jul 30 15:11:39.529698 2026] [security2:error] [pid 3626964:tid 3626964] [client 94.154.43.187:59612] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "craft-buddies.co.uk"] [uri "/.env"] [unique_id "amtbmx0W4ijdXklExR0biAAAAAU"]
[Thu Jul 30 15:11:39.529987 2026] [security2:error] [pid 3626964:tid 3626964] [client 94.154.43.187:59612] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "craft-buddies.co.uk"] [uri "/.env"] [unique_id "amtbmx0W4ijdXklExR0biAAAAAU"]
[Thu Jul 30 15:11:39.691779 2026] [ssl:error] [pid 3627003:tid 3627003] (70014)End of file found: [client 216.73.216.199:12541] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:39.742353 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:39.742381 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.001687 2026] [lsapi:warn] [pid 3626964:tid 3626964] [client 45.158.164.139:55756] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.001758 2026] [lsapi:warn] [pid 3626964:tid 3626964] [client 45.158.164.139:55756] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.012744 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.012777 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.195330 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:55772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.195373 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:55772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.196821 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.196856 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.417448 2026] [lsapi:warn] [pid 3590353:tid 3590353] [client 45.158.164.139:55780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.417487 2026] [lsapi:warn] [pid 3590353:tid 3590353] [client 45.158.164.139:55780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.420250 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.420305 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.571384 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:41944] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/main/.env"] [unique_id "amtbnFrEVrcmWCgE5tjO5QAAABA"]
[Thu Jul 30 15:11:40.571579 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:41944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/main/.env"] [unique_id "amtbnFrEVrcmWCgE5tjO5QAAABA"]
[Thu Jul 30 15:11:40.571778 2026] [security2:error] [pid 3626123:tid 3626123] [client 45.148.10.67:41944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/main/.env"] [unique_id "amtbnFrEVrcmWCgE5tjO5QAAABA"]
[Thu Jul 30 15:11:40.599045 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:55794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.599080 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:55794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.600951 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.600981 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.801506 2026] [lsapi:warn] [pid 3616945:tid 3616945] [client 45.158.164.139:45246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.801536 2026] [lsapi:warn] [pid 3616945:tid 3616945] [client 45.158.164.139:45246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:40.804790 2026] [access_compat:error] [pid 3617602:tid 3617602] [client 64.180.68.231:63210] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:40.808230 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:40.808252 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.016534 2026] [lsapi:warn] [pid 3590353:tid 3590353] [client 45.158.164.139:45256] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.016562 2026] [lsapi:warn] [pid 3590353:tid 3590353] [client 45.158.164.139:45256] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.018781 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.018808 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.239552 2026] [lsapi:warn] [pid 3620255:tid 3620255] [client 45.158.164.139:45264] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.239593 2026] [lsapi:warn] [pid 3620255:tid 3620255] [client 45.158.164.139:45264] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.241639 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.241659 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.266183 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/node_modules/.env"] [unique_id "amtbnchMUHUQQZkyMbwR0wAAACY"]
[Thu Jul 30 15:11:41.266354 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/node_modules/.env"] [unique_id "amtbnchMUHUQQZkyMbwR0wAAACY"]
[Thu Jul 30 15:11:41.266560 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/node_modules/.env"] [unique_id "amtbnchMUHUQQZkyMbwR0wAAACY"]
[Thu Jul 30 15:11:41.423846 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.423875 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.572725 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/kyc/.env"] [unique_id "amtbnchMUHUQQZkyMbwR1AAAACY"]
[Thu Jul 30 15:11:41.572866 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/kyc/.env"] [unique_id "amtbnchMUHUQQZkyMbwR1AAAACY"]
[Thu Jul 30 15:11:41.573048 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/kyc/.env"] [unique_id "amtbnchMUHUQQZkyMbwR1AAAACY"]
[Thu Jul 30 15:11:41.596122 2026] [ssl:error] [pid 3605695:tid 3605695] (EAI 2)Name or service not known: [client 144.76.19.72:46434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:41.596145 2026] [ssl:error] [pid 3605695:tid 3605695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:41.626596 2026] [lsapi:warn] [pid 3622635:tid 3622635] [client 45.158.164.139:45292] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.626631 2026] [lsapi:warn] [pid 3622635:tid 3622635] [client 45.158.164.139:45292] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.628829 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.628851 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.649458 2026] [ssl:error] [pid 3627002:tid 3627002] (EAI 2)Name or service not known: [client 144.76.19.72:46444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:41.649484 2026] [ssl:error] [pid 3627002:tid 3627002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:41.712056 2026] [ssl:error] [pid 3617267:tid 3617267] (70014)End of file found: [client 216.73.216.199:41502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:41.834273 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/admin/.env"] [unique_id "amtbnchMUHUQQZkyMbwR1QAAACY"]
[Thu Jul 30 15:11:41.834420 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/admin/.env"] [unique_id "amtbnchMUHUQQZkyMbwR1QAAACY"]
[Thu Jul 30 15:11:41.834608 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/admin/.env"] [unique_id "amtbnchMUHUQQZkyMbwR1QAAACY"]
[Thu Jul 30 15:11:41.869628 2026] [lsapi:warn] [pid 3616945:tid 3616945] [client 45.158.164.139:45294] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.869666 2026] [lsapi:warn] [pid 3616945:tid 3616945] [client 45.158.164.139:45294] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:41.872824 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:41.872848 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:42.025639 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/prod/.env"] [unique_id "amtbnshMUHUQQZkyMbwR1gAAACY"]
[Thu Jul 30 15:11:42.025788 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/prod/.env"] [unique_id "amtbnshMUHUQQZkyMbwR1gAAACY"]
[Thu Jul 30 15:11:42.025972 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/prod/.env"] [unique_id "amtbnshMUHUQQZkyMbwR1gAAACY"]
[Thu Jul 30 15:11:42.098293 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:45304] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:42.098323 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:45304] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:42.102283 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:42.102306 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:42.174665 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env.bak"] [unique_id "amtbnshMUHUQQZkyMbwR1wAAACY"]
[Thu Jul 30 15:11:42.174797 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env.bak"] [unique_id "amtbnshMUHUQQZkyMbwR1wAAACY"]
[Thu Jul 30 15:11:42.174984 2026] [security2:error] [pid 3620195:tid 3620195] [client 45.148.10.67:41950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env.bak"] [unique_id "amtbnshMUHUQQZkyMbwR1wAAACY"]
[Thu Jul 30 15:11:42.391360 2026] [lsapi:warn] [pid 3622635:tid 3622635] [client 45.158.164.139:45316] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:42.391414 2026] [lsapi:warn] [pid 3622635:tid 3622635] [client 45.158.164.139:45316] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:42.393941 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:42.393973 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:42.653512 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:45320] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:42.653540 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:45320] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:42.698257 2026] [security2:error] [pid 3616945:tid 3616945] [client 34.224.9.144:8509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtbnkFdDKkYceIDzeuD_gAAABw"]
[Thu Jul 30 15:11:42.912890 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:45332] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:42.912933 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:45332] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.128016 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:45342] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:43.128043 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:45342] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.376304 2026] [lsapi:warn] [pid 3625536:tid 3625536] [client 45.158.164.139:45372] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:43.376343 2026] [lsapi:warn] [pid 3625536:tid 3625536] [client 45.158.164.139:45372] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.378246 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:43.378294 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.470732 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/website/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9AAAABE"]
[Thu Jul 30 15:11:43.470872 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/website/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9AAAABE"]
[Thu Jul 30 15:11:43.471053 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/website/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9AAAABE"]
[Thu Jul 30 15:11:43.661808 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/development/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9QAAABE"]
[Thu Jul 30 15:11:43.661990 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/development/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9QAAABE"]
[Thu Jul 30 15:11:43.662216 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/development/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9QAAABE"]
[Thu Jul 30 15:11:43.664731 2026] [lsapi:warn] [pid 3620189:tid 3620189] [client 45.158.164.139:45378] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:43.664786 2026] [lsapi:warn] [pid 3620189:tid 3620189] [client 45.158.164.139:45378] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.667805 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:43.667986 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.863658 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:45384] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:43.863709 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:45384] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.865639 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:43.865671 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:43.873048 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/backend/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9gAAABE"]
[Thu Jul 30 15:11:43.873227 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/backend/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9gAAABE"]
[Thu Jul 30 15:11:43.873431 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/backend/.env"] [unique_id "amtbn4KcJjLQnp_B8uFY9gAAABE"]
[Thu Jul 30 15:11:44.058059 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:45392] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.058102 2026] [lsapi:warn] [pid 3620443:tid 3620443] [client 45.158.164.139:45392] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.060010 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.060034 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.090945 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/api/shared/config/.env"] [unique_id "amtboIKcJjLQnp_B8uFY9wAAABE"]
[Thu Jul 30 15:11:44.091132 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/api/shared/config/.env"] [unique_id "amtboIKcJjLQnp_B8uFY9wAAABE"]
[Thu Jul 30 15:11:44.091336 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/api/shared/config/.env"] [unique_id "amtboIKcJjLQnp_B8uFY9wAAABE"]
[Thu Jul 30 15:11:44.305437 2026] [lsapi:warn] [pid 3606906:tid 3606906] [client 45.158.164.139:45400] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.305483 2026] [lsapi:warn] [pid 3606906:tid 3606906] [client 45.158.164.139:45400] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.307424 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.307448 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.372087 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/api/shared/.env"] [unique_id "amtboIKcJjLQnp_B8uFY-AAAABE"]
[Thu Jul 30 15:11:44.372240 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/api/shared/.env"] [unique_id "amtboIKcJjLQnp_B8uFY-AAAABE"]
[Thu Jul 30 15:11:44.372445 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/api/shared/.env"] [unique_id "amtboIKcJjLQnp_B8uFY-AAAABE"]
[Thu Jul 30 15:11:44.491894 2026] [lsapi:warn] [pid 3625536:tid 3625536] [client 45.158.164.139:45410] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.491923 2026] [lsapi:warn] [pid 3625536:tid 3625536] [client 45.158.164.139:45410] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.493903 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.493926 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.674184 2026] [lsapi:warn] [pid 3624749:tid 3624749] [client 45.158.164.139:45412] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.674210 2026] [lsapi:warn] [pid 3624749:tid 3624749] [client 45.158.164.139:45412] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.696692 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.696719 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.705721 2026] [ssl:error] [pid 3616945:tid 3616945] (EAI 2)Name or service not known: [client 144.76.19.72:46452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:44.705741 2026] [ssl:error] [pid 3616945:tid 3616945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:44.762885 2026] [ssl:error] [pid 3624887:tid 3624887] (EAI 2)Name or service not known: [client 144.76.19.72:46454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:44.762911 2026] [ssl:error] [pid 3624887:tid 3624887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:44.876106 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/node/.env_example"] [unique_id "amtboIKcJjLQnp_B8uFY-wAAABE"]
[Thu Jul 30 15:11:44.876243 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/node/.env_example"] [unique_id "amtboIKcJjLQnp_B8uFY-wAAABE"]
[Thu Jul 30 15:11:44.876441 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/node/.env_example"] [unique_id "amtboIKcJjLQnp_B8uFY-wAAABE"]
[Thu Jul 30 15:11:44.917248 2026] [lsapi:warn] [pid 3620189:tid 3620189] [client 45.158.164.139:45416] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.917278 2026] [lsapi:warn] [pid 3620189:tid 3620189] [client 45.158.164.139:45416] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.919238 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:44.919260 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:44.999465 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env.production.local"] [unique_id "amtboIKcJjLQnp_B8uFY_AAAABE"]
[Thu Jul 30 15:11:44.999615 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env.production.local"] [unique_id "amtboIKcJjLQnp_B8uFY_AAAABE"]
[Thu Jul 30 15:11:44.999801 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env.production.local"] [unique_id "amtboIKcJjLQnp_B8uFY_AAAABE"]
[Thu Jul 30 15:11:45.103969 2026] [lsapi:warn] [pid 3617649:tid 3617649] [client 45.158.164.139:45418] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:45.104001 2026] [lsapi:warn] [pid 3617649:tid 3617649] [client 45.158.164.139:45418] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:45.131738 2026] [access_compat:error] [pid 3620255:tid 3620255] [client 64.180.68.231:63436] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:45.293391 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:45.293427 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:45.387957 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env.local"] [unique_id "amtboYKcJjLQnp_B8uFY_QAAABE"]
[Thu Jul 30 15:11:45.388151 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env.local"] [unique_id "amtboYKcJjLQnp_B8uFY_QAAABE"]
[Thu Jul 30 15:11:45.388354 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env.local"] [unique_id "amtboYKcJjLQnp_B8uFY_QAAABE"]
[Thu Jul 30 15:11:45.487637 2026] [lsapi:warn] [pid 3615845:tid 3615845] [client 45.158.164.139:45430] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:45.487681 2026] [lsapi:warn] [pid 3615845:tid 3615845] [client 45.158.164.139:45430] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:45.534998 2026] [access_compat:error] [pid 3616945:tid 3616945] [client 98.81.82.100:36104] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/10/mark_king_cambridge_level_42.jpg
[Thu Jul 30 15:11:45.535105 2026] [access_compat:error] [pid 3616945:tid 3616945] [client 98.81.82.100:36104] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:11:45.573915 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env.example"] [unique_id "amtboYKcJjLQnp_B8uFY_gAAABE"]
[Thu Jul 30 15:11:45.574055 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env.example"] [unique_id "amtboYKcJjLQnp_B8uFY_gAAABE"]
[Thu Jul 30 15:11:45.574268 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env.example"] [unique_id "amtboYKcJjLQnp_B8uFY_gAAABE"]
[Thu Jul 30 15:11:45.632975 2026] [core:error] [pid 3624886:tid 3624886] (13)Permission denied: [client 216.73.216.199:22235] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu3/node0/cpu2/crash_notes
[Thu Jul 30 15:11:45.747835 2026] [lsapi:warn] [pid 3620135:tid 3620135] [client 45.158.164.139:45444] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:45.747877 2026] [lsapi:warn] [pid 3620135:tid 3620135] [client 45.158.164.139:45444] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:45.813515 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env.stage"] [unique_id "amtboYKcJjLQnp_B8uFY_wAAABE"]
[Thu Jul 30 15:11:45.813681 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env.stage"] [unique_id "amtboYKcJjLQnp_B8uFY_wAAABE"]
[Thu Jul 30 15:11:45.813889 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env.stage"] [unique_id "amtboYKcJjLQnp_B8uFY_wAAABE"]
[Thu Jul 30 15:11:46.166514 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env.old"] [unique_id "amtbooKcJjLQnp_B8uFZAQAAABE"]
[Thu Jul 30 15:11:46.166813 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env.old"] [unique_id "amtbooKcJjLQnp_B8uFZAQAAABE"]
[Thu Jul 30 15:11:46.167085 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env.old"] [unique_id "amtbooKcJjLQnp_B8uFZAQAAABE"]
[Thu Jul 30 15:11:46.249669 2026] [lsapi:warn] [pid 3627001:tid 3627001] [client 45.158.164.139:45476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:46.249710 2026] [lsapi:warn] [pid 3627001:tid 3627001] [client 45.158.164.139:45476] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:46.251666 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:46.251687 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:46.447127 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:45478] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:46.447160 2026] [lsapi:warn] [pid 3623591:tid 3623591] [client 45.158.164.139:45478] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:46.448798 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:46.448819 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:46.484426 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env_sample"] [unique_id "amtbooKcJjLQnp_B8uFZAgAAABE"]
[Thu Jul 30 15:11:46.484561 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env_sample"] [unique_id "amtbooKcJjLQnp_B8uFZAgAAABE"]
[Thu Jul 30 15:11:46.484753 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env_sample"] [unique_id "amtbooKcJjLQnp_B8uFZAgAAABE"]
[Thu Jul 30 15:11:46.628906 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:45480] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:46.628936 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:45480] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:46.857893 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:45494] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:46.857923 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:45494] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:46.860900 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:46.860922 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:46.968496 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/.env.prod"] [unique_id "amtbooKcJjLQnp_B8uFZBAAAABE"]
[Thu Jul 30 15:11:46.968640 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/.env.prod"] [unique_id "amtbooKcJjLQnp_B8uFZBAAAABE"]
[Thu Jul 30 15:11:46.968829 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/.env.prod"] [unique_id "amtbooKcJjLQnp_B8uFZBAAAABE"]
[Thu Jul 30 15:11:47.094852 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/crm/.env"] [unique_id "amtbo4KcJjLQnp_B8uFZBQAAABE"]
[Thu Jul 30 15:11:47.095018 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/crm/.env"] [unique_id "amtbo4KcJjLQnp_B8uFZBQAAABE"]
[Thu Jul 30 15:11:47.095224 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/crm/.env"] [unique_id "amtbo4KcJjLQnp_B8uFZBQAAABE"]
[Thu Jul 30 15:11:47.103210 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:45508] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.103239 2026] [lsapi:warn] [pid 3620136:tid 3620136] [client 45.158.164.139:45508] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.105236 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.105258 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.326638 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/local/.env"] [unique_id "amtbo4KcJjLQnp_B8uFZBgAAABE"]
[Thu Jul 30 15:11:47.326781 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/local/.env"] [unique_id "amtbo4KcJjLQnp_B8uFZBgAAABE"]
[Thu Jul 30 15:11:47.326980 2026] [security2:error] [pid 3623869:tid 3623869] [client 45.148.10.67:41952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/local/.env"] [unique_id "amtbo4KcJjLQnp_B8uFZBgAAABE"]
[Thu Jul 30 15:11:47.348727 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:45520] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.348752 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:45520] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.350719 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.350739 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.485789 2026] [security2:error] [pid 3623592:tid 3623592] [client 43.157.67.70:50312] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.inrc.org.uk"] [uri "/"] [unique_id "amtbo4VbWItGVFGhYAt78QAAAAo"]
[Thu Jul 30 15:11:47.552721 2026] [ssl:error] [pid 3611732:tid 3611732] (70014)End of file found: [client 216.73.216.199:62272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:47.617355 2026] [lsapi:warn] [pid 3615845:tid 3615845] [client 45.158.164.139:45522] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.617386 2026] [lsapi:warn] [pid 3615845:tid 3615845] [client 45.158.164.139:45522] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.630338 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.630365 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.636843 2026] [security2:error] [pid 3617375:tid 3617375] [client 54.147.182.90:42723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtboxVlTVHCs2ciMmmC0gAAAEo"]
[Thu Jul 30 15:11:47.817112 2026] [ssl:error] [pid 3615845:tid 3615845] (EAI 2)Name or service not known: [client 144.76.19.72:46462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:47.817149 2026] [ssl:error] [pid 3615845:tid 3615845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:47.829667 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/core/.env"] [unique_id "amtbo8go-KCw2DGkusTuTwAAABg"]
[Thu Jul 30 15:11:47.829839 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/core/.env"] [unique_id "amtbo8go-KCw2DGkusTuTwAAABg"]
[Thu Jul 30 15:11:47.830049 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/core/.env"] [unique_id "amtbo8go-KCw2DGkusTuTwAAABg"]
[Thu Jul 30 15:11:47.873438 2026] [ssl:error] [pid 3623592:tid 3623592] (EAI 2)Name or service not known: [client 144.76.19.72:46466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:47.873475 2026] [ssl:error] [pid 3623592:tid 3623592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:47.876681 2026] [lsapi:warn] [pid 3626123:tid 3626123] [client 45.158.164.139:45532] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.876709 2026] [lsapi:warn] [pid 3626123:tid 3626123] [client 45.158.164.139:45532] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.883436 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:47.883460 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:47.973827 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/apps/.env"] [unique_id "amtbo8go-KCw2DGkusTuUAAAABg"]
[Thu Jul 30 15:11:47.974004 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/apps/.env"] [unique_id "amtbo8go-KCw2DGkusTuUAAAABg"]
[Thu Jul 30 15:11:47.974222 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/apps/.env"] [unique_id "amtbo8go-KCw2DGkusTuUAAAABg"]
[Thu Jul 30 15:11:48.100638 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:45536] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:48.100678 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:45536] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:48.104639 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:48.104666 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:48.297199 2026] [lsapi:warn] [pid 3620265:tid 3620265] [client 45.158.164.139:45546] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:48.297236 2026] [lsapi:warn] [pid 3620265:tid 3620265] [client 45.158.164.139:45546] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:48.335744 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/application/.env"] [unique_id "amtbpMgo-KCw2DGkusTuUQAAABg"]
[Thu Jul 30 15:11:48.335897 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/application/.env"] [unique_id "amtbpMgo-KCw2DGkusTuUQAAABg"]
[Thu Jul 30 15:11:48.336093 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/application/.env"] [unique_id "amtbpMgo-KCw2DGkusTuUQAAABg"]
[Thu Jul 30 15:11:48.428522 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/web/.env"] [unique_id "amtbpMgo-KCw2DGkusTuUgAAABg"]
[Thu Jul 30 15:11:48.428719 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/web/.env"] [unique_id "amtbpMgo-KCw2DGkusTuUgAAABg"]
[Thu Jul 30 15:11:48.428918 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/web/.env"] [unique_id "amtbpMgo-KCw2DGkusTuUgAAABg"]
[Thu Jul 30 15:11:48.497457 2026] [lsapi:warn] [pid 3626932:tid 3626932] [client 45.158.164.139:45560] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:48.497499 2026] [lsapi:warn] [pid 3626932:tid 3626932] [client 45.158.164.139:45560] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:48.503393 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:48.503424 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:48.636367 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/wp-config.php.bak"] [unique_id "amtbpMgo-KCw2DGkusTuVAAAABg"]
[Thu Jul 30 15:11:48.636557 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/wp-config.php.bak"] [unique_id "amtbpMgo-KCw2DGkusTuVAAAABg"]
[Thu Jul 30 15:11:48.636767 2026] [security2:error] [pid 3624887:tid 3624887] [client 45.148.10.67:55686] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/wp-config.php.bak"] [unique_id "amtbpMgo-KCw2DGkusTuVAAAABg"]
[Thu Jul 30 15:11:48.708172 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:48.708201 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:48.751952 2026] [core:error] [pid 3624886:tid 3624886] (13)Permission denied: [client 216.73.216.199:22235] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu4/node0/cpu2/crash_notes
[Thu Jul 30 15:11:48.919612 2026] [lsapi:warn] [pid 3620265:tid 3620265] [client 45.158.164.139:45584] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:48.919638 2026] [lsapi:warn] [pid 3620265:tid 3620265] [client 45.158.164.139:45584] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:49.056899 2026] [security2:error] [pid 3623591:tid 3623591] [client 216.73.216.199:63150] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/systemd.conf"] [unique_id "amtbpbuiSzIwsFbIu38UKQAAAAk"]
[Thu Jul 30 15:11:49.057205 2026] [security2:error] [pid 3623591:tid 3623591] [client 216.73.216.199:63150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/systemd.conf"] [unique_id "amtbpbuiSzIwsFbIu38UKQAAAAk"]
[Thu Jul 30 15:11:49.057437 2026] [security2:error] [pid 3623591:tid 3623591] [client 216.73.216.199:63150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/systemd.conf"] [unique_id "amtbpbuiSzIwsFbIu38UKQAAAAk"]
[Thu Jul 30 15:11:49.156375 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:49.156418 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:49.382423 2026] [lsapi:warn] [pid 3627002:tid 3627002] [client 45.158.164.139:45608] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:49.382463 2026] [lsapi:warn] [pid 3627002:tid 3627002] [client 45.158.164.139:45608] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:49.383788 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:49.383810 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:49.577117 2026] [security2:error] [pid 3627430:tid 3627430] [client 216.144.249.201:37966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.akoptimize.online"] [uri "/sitemap.xml"] [unique_id "amtbpfdIIkPBZ1wPYb3OgQAAACs"]
[Thu Jul 30 15:11:49.605282 2026] [lsapi:warn] [pid 3617375:tid 3617375] [client 45.158.164.139:45614] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:49.605320 2026] [lsapi:warn] [pid 3617375:tid 3617375] [client 45.158.164.139:45614] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:49.608429 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:49.608451 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:49.710884 2026] [security2:error] [pid 3620136:tid 3620136] [client 216.144.249.201:38248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.akoptimize.online"] [uri "/actuator/configprops"] [unique_id "amtbpTMpIpKCrQfZNuoVpAAAABc"]
[Thu Jul 30 15:11:49.741547 2026] [security2:error] [pid 3627193:tid 3627193] [client 216.144.249.201:38100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.akoptimize.online"] [uri "/wp-config.php"] [unique_id "amtbpVKqEa-5H_NGWbYguQAAACQ"]
[Thu Jul 30 15:11:49.746432 2026] [security2:error] [pid 3627430:tid 3627430] [client 216.144.249.201:38118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.akoptimize.online"] [uri "/config.json"] [unique_id "amtbpfdIIkPBZ1wPYb3OhAAAACs"]
[Thu Jul 30 15:11:49.900117 2026] [security2:error] [pid 3620265:tid 3620265] [client 216.144.249.201:37952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.akoptimize.online"] [uri "/env.json"] [unique_id "amtbpVWm-sHKXX8O2djyDQAAAEk"]
[Thu Jul 30 15:11:49.920642 2026] [security2:error] [pid 3620136:tid 3620136] [client 216.144.249.201:38544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.akoptimize.online"] [uri "/vercel.json"] [unique_id "amtbpTMpIpKCrQfZNuoVqQAAABc"]
[Thu Jul 30 15:11:50.576791 2026] [ssl:error] [pid 3624886:tid 3624886] (70014)End of file found: [client 216.73.216.199:22235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:52.166236 2026] [security2:error] [pid 3617334:tid 3617334] [client 114.119.142.20:56745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~30,104/request_format~html"] [unique_id "amtbqNFSQAQesFH5DwLAdgAAAEI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573171200/cat_ids~30,104/request_format~html
[Thu Jul 30 15:11:52.952776 2026] [lsapi:warn] [pid 3626529:tid 3626529] [client 45.158.164.139:45626] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:52.952815 2026] [lsapi:warn] [pid 3626529:tid 3626529] [client 45.158.164.139:45626] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:53.698737 2026] [security2:error] [pid 3627000:tid 3627000] [client 114.119.142.20:56761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~30,104/request_format~html"] [unique_id "amtbqbNEnzQisMFE5K6rnAAAACU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573171200/cat_ids~30,104/request_format~html
[Thu Jul 30 15:11:54.008339 2026] [ssl:error] [pid 3626123:tid 3626123] (EAI 2)Name or service not known: [client 144.76.19.72:60998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:54.008362 2026] [ssl:error] [pid 3626123:tid 3626123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:54.622410 2026] [lsapi:warn] [pid 3628231:tid 3628231] [client 45.158.164.139:52918] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:54.622451 2026] [lsapi:warn] [pid 3628231:tid 3628231] [client 45.158.164.139:52918] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:54.624324 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:54.624349 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:55.011299 2026] [ssl:error] [pid 3620265:tid 3620265] (EAI 2)Name or service not known: [client 144.76.19.72:61012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:55.011330 2026] [ssl:error] [pid 3620265:tid 3620265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:55.117665 2026] [access_compat:error] [pid 3626964:tid 3626964] [client 64.34.84.8:34750] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:11:55.156920 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:52924] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:55.156947 2026] [lsapi:warn] [pid 3627430:tid 3627430] [client 45.158.164.139:52924] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:55.440813 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:55.440842 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:55.550151 2026] [authz_core:error] [pid 3626964:tid 3626964] [client 66.249.66.33:43566] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:11:55.552822 2026] [authz_core:error] [pid 3626964:tid 3626964] [client 66.249.66.33:43566] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:11:55.717557 2026] [access_compat:error] [pid 3623869:tid 3623869] [client 64.180.68.231:64149] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:11:55.740257 2026] [ssl:error] [pid 3623591:tid 3623591] (70014)End of file found: [client 216.73.216.199:63150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:55.820217 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:55.820241 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:56.052112 2026] [core:error] [pid 3615845:tid 3615845] (13)Permission denied: [client 216.73.216.199:29549] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/alt-php-internal-common/php.ini-development
[Thu Jul 30 15:11:56.227608 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "halmanninvestments.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtbrFWm-sHKXX8O2djyGQAAAEk"]
[Thu Jul 30 15:11:56.227866 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtbrFWm-sHKXX8O2djyGQAAAEk"]
[Thu Jul 30 15:11:56.228082 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtbrFWm-sHKXX8O2djyGQAAAEk"]
[Thu Jul 30 15:11:56.706179 2026] [lsapi:warn] [pid 3628276:tid 3628276] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:11:56.777888 2026] [security2:error] [pid 3628277:tid 3628277] [client 34.231.118.144:34361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/category/systems-management/feed/"] [unique_id "amtbrBub1SiQkcijuYf_4wAAAEE"]
[Thu Jul 30 15:11:56.845478 2026] [lsapi:warn] [pid 3628274:tid 3628274] [client 45.158.164.139:52960] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:56.845513 2026] [lsapi:warn] [pid 3628274:tid 3628274] [client 45.158.164.139:52960] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:56.851950 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:56.851979 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:57.141854 2026] [lsapi:warn] [pid 3628273:tid 3628273] [client 45.158.164.139:52976] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:57.141901 2026] [lsapi:warn] [pid 3628273:tid 3628273] [client 45.158.164.139:52976] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:57.266963 2026] [ssl:error] [pid 3615845:tid 3615845] (70014)End of file found: [client 216.73.216.199:29549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:11:57.437546 2026] [lsapi:warn] [pid 3628286:tid 3628286] [client 45.158.164.139:52984] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:57.437584 2026] [lsapi:warn] [pid 3628286:tid 3628286] [client 45.158.164.139:52984] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:57.671463 2026] [lsapi:warn] [pid 3628290:tid 3628290] [client 45.158.164.139:52996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:57.671523 2026] [lsapi:warn] [pid 3628290:tid 3628290] [client 45.158.164.139:52996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:57.678122 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:57.678151 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:57.944249 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:53004] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:57.944278 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:53004] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:57.949502 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:57.949526 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.081623 2026] [ssl:error] [pid 3628273:tid 3628273] (EAI 2)Name or service not known: [client 144.76.19.72:61022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:58.081665 2026] [ssl:error] [pid 3628273:tid 3628273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:58.134738 2026] [ssl:error] [pid 3628290:tid 3628290] (EAI 2)Name or service not known: [client 144.76.19.72:61038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:11:58.134789 2026] [ssl:error] [pid 3628290:tid 3628290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:11:58.228169 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:53016] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.228208 2026] [lsapi:warn] [pid 3624887:tid 3624887] [client 45.158.164.139:53016] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.239772 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.239799 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.426324 2026] [lsapi:warn] [pid 3627001:tid 3627001] [client 45.158.164.139:53044] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.426352 2026] [lsapi:warn] [pid 3627001:tid 3627001] [client 45.158.164.139:53044] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.427656 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.427680 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.632001 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:53056] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.632029 2026] [lsapi:warn] [pid 3626530:tid 3626530] [client 45.158.164.139:53056] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.633560 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.633581 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.902410 2026] [lsapi:warn] [pid 3627193:tid 3627193] [client 45.158.164.139:53072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.902454 2026] [lsapi:warn] [pid 3627193:tid 3627193] [client 45.158.164.139:53072] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:58.904576 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:58.904598 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:59.145382 2026] [lsapi:warn] [pid 3627000:tid 3627000] [client 45.158.164.139:53086] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:59.145432 2026] [lsapi:warn] [pid 3627000:tid 3627000] [client 45.158.164.139:53086] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:59.147205 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:59.147228 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:59.638987 2026] [lsapi:warn] [pid 3628238:tid 3628238] [client 45.158.164.139:53108] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:59.639026 2026] [lsapi:warn] [pid 3628238:tid 3628238] [client 45.158.164.139:53108] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:59.640389 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:59.640418 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:59.909133 2026] [lsapi:warn] [pid 3627193:tid 3627193] [client 45.158.164.139:53112] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:59.909161 2026] [lsapi:warn] [pid 3627193:tid 3627193] [client 45.158.164.139:53112] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:11:59.911116 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:11:59.911136 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:12:00.017328 2026] [ssl:error] [pid 3617267:tid 3617267] (70014)End of file found: [client 216.73.216.199:32340] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:00.198044 2026] [lsapi:warn] [pid 3628425:tid 3628425] [client 45.158.164.139:53114] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:12:00.198096 2026] [lsapi:warn] [pid 3628425:tid 3628425] [client 45.158.164.139:53114] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:12:00.200223 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:12:00.200260 2026] [lsapi:warn] [pid 3626192:tid 3626192] [client 20.203.148.31:23987] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:12:00.236703 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/app/config/parameters.yml"] [unique_id "amtbsFWm-sHKXX8O2djyPwAAAEk"]
[Thu Jul 30 15:12:00.236887 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/app/config/parameters.yml"] [unique_id "amtbsFWm-sHKXX8O2djyPwAAAEk"]
[Thu Jul 30 15:12:00.237109 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/app/config/parameters.yml"] [unique_id "amtbsFWm-sHKXX8O2djyPwAAAEk"]
[Thu Jul 30 15:12:00.301202 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/config/parameters.yml"] [unique_id "amtbsFWm-sHKXX8O2djyQAAAAEk"]
[Thu Jul 30 15:12:00.301346 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/config/parameters.yml"] [unique_id "amtbsFWm-sHKXX8O2djyQAAAAEk"]
[Thu Jul 30 15:12:00.301547 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/config/parameters.yml"] [unique_id "amtbsFWm-sHKXX8O2djyQAAAAEk"]
[Thu Jul 30 15:12:00.758578 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /api/config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "halmanninvestments.com"] [uri "/api/config/config.yml"] [unique_id "amtbsFWm-sHKXX8O2djyRgAAAEk"]
[Thu Jul 30 15:12:00.758767 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "halmanninvestments.com"] [uri "/api/config/config.yml"] [unique_id "amtbsFWm-sHKXX8O2djyRgAAAEk"]
[Thu Jul 30 15:12:00.758967 2026] [security2:error] [pid 3620265:tid 3620265] [client 45.148.10.67:45048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "halmanninvestments.com"] [uri "/api/config/config.yml"] [unique_id "amtbsFWm-sHKXX8O2djyRgAAAEk"]
[Thu Jul 30 15:12:01.135112 2026] [core:error] [pid 3628238:tid 3628238] (13)Permission denied: [client 216.73.216.199:22750] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/total_objects
[Thu Jul 30 15:12:01.215176 2026] [ssl:error] [pid 3628290:tid 3628290] (EAI 2)Name or service not known: [client 144.76.19.72:54554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:01.215216 2026] [ssl:error] [pid 3628290:tid 3628290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:01.271495 2026] [ssl:error] [pid 3626530:tid 3626530] (EAI 2)Name or service not known: [client 144.76.19.72:54562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:01.271526 2026] [ssl:error] [pid 3626530:tid 3626530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:01.841762 2026] [ssl:error] [pid 3628238:tid 3628238] (70014)End of file found: [client 216.73.216.199:22750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:04.254223 2026] [ssl:error] [pid 3617649:tid 3617649] (70014)End of file found: [client 216.73.216.199:32963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:04.329081 2026] [ssl:error] [pid 3624885:tid 3624885] (EAI 2)Name or service not known: [client 144.76.19.72:54570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:04.329112 2026] [ssl:error] [pid 3624885:tid 3624885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:04.380809 2026] [ssl:error] [pid 3611732:tid 3611732] (EAI 2)Name or service not known: [client 144.76.19.72:54572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:04.380840 2026] [ssl:error] [pid 3611732:tid 3611732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:04.410195 2026] [security2:error] [pid 3628286:tid 3628286] [client 114.119.135.84:37213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/robots.txt"] [unique_id "amtbtP6VwM6g8cJ7b-qM2AAAAEw"], referer: http://www.robin64.co.uk/robots.txt
[Thu Jul 30 15:12:05.363576 2026] [core:error] [pid 3624852:tid 3624852] (13)Permission denied: [client 216.73.216.199:6343] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/dnf/vars/altpythonelstoken
[Thu Jul 30 15:12:06.300476 2026] [access_compat:error] [pid 3620195:tid 3620195] [client 64.180.68.231:64814] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:07.163644 2026] [lsapi:warn] [pid 3628162:tid 3628162] [client 136.111.41.212:17408] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:12:07.163684 2026] [lsapi:warn] [pid 3628162:tid 3628162] [client 136.111.41.212:17408] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:12:07.435903 2026] [ssl:error] [pid 3628193:tid 3628193] (EAI 2)Name or service not known: [client 144.76.19.72:54574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:07.435941 2026] [ssl:error] [pid 3628193:tid 3628193] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:07.491694 2026] [ssl:error] [pid 3628289:tid 3628289] (EAI 2)Name or service not known: [client 144.76.19.72:54580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:07.491722 2026] [ssl:error] [pid 3628289:tid 3628289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:07.495192 2026] [security2:error] [pid 3628196:tid 3628196] [client 85.208.96.202:10912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/itv-sports-commentators-tonight"] [unique_id "amtbt2giG4RZwxqb_PVTCwAAADQ"]
[Thu Jul 30 15:12:09.775440 2026] [access_compat:error] [pid 3628281:tid 3628281] [client 34.207.242.149:34568] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2008/03/be-kind-rewind.jpg
[Thu Jul 30 15:12:09.775549 2026] [access_compat:error] [pid 3628281:tid 3628281] [client 34.207.242.149:34568] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:12:10.545383 2026] [ssl:error] [pid 3624885:tid 3624885] (EAI 2)Name or service not known: [client 144.76.19.72:54586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:10.545425 2026] [ssl:error] [pid 3624885:tid 3624885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:10.599565 2026] [ssl:error] [pid 3628195:tid 3628195] (EAI 2)Name or service not known: [client 144.76.19.72:54590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:10.599597 2026] [ssl:error] [pid 3628195:tid 3628195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:11.672593 2026] [access_compat:error] [pid 3625536:tid 3625536] [client 154.80.2.150:46160] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/06/gibraltar_sleeping_monkey.jpg, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:11.672698 2026] [access_compat:error] [pid 3625536:tid 3625536] [client 154.80.2.150:46160] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:11.739431 2026] [security2:error] [pid 3623592:tid 3623592] [client 43.159.140.236:35226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amtbu4VbWItGVFGhYAt79gAAAAo"]
[Thu Jul 30 15:12:11.927518 2026] [ssl:error] [pid 3628290:tid 3628290] (70014)End of file found: [client 216.73.216.199:52124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:12.049869 2026] [security2:error] [pid 3624885:tid 3624885] [client 5.36.103.147:58594] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbvB36fb56dnOG2Gn5rQAAABU"]
[Thu Jul 30 15:12:12.049919 2026] [security2:error] [pid 3624885:tid 3624885] [client 5.36.103.147:58594] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbvB36fb56dnOG2Gn5rQAAABU"]
[Thu Jul 30 15:12:12.050198 2026] [security2:error] [pid 3624885:tid 3624885] [client 5.36.103.147:58594] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbvB36fb56dnOG2Gn5rQAAABU"]
[Thu Jul 30 15:12:12.458575 2026] [access_compat:error] [pid 3628195:tid 3628195] [client 64.180.68.231:65154] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:12.534507 2026] [ssl:error] [pid 3628280:tid 3628280] (70014)End of file found: [client 216.73.216.199:53115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:13.659092 2026] [ssl:error] [pid 3623592:tid 3623592] (EAI 2)Name or service not known: [client 144.76.19.72:54602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:13.659124 2026] [ssl:error] [pid 3623592:tid 3623592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:13.713753 2026] [ssl:error] [pid 3628162:tid 3628162] (EAI 2)Name or service not known: [client 144.76.19.72:54608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:13.713783 2026] [ssl:error] [pid 3628162:tid 3628162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:13.724776 2026] [access_compat:error] [pid 3624852:tid 3624852] [client 176.29.15.55:24935] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/06/gibraltar_sleeping_monkey.jpg, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:13.724874 2026] [access_compat:error] [pid 3624852:tid 3624852] [client 176.29.15.55:24935] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:14.650288 2026] [core:error] [pid 3623591:tid 3623591] (13)Permission denied: [client 216.73.216.199:45570] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_da_state/objects
[Thu Jul 30 15:12:15.860612 2026] [ssl:error] [pid 3623591:tid 3623591] (70014)End of file found: [client 216.73.216.199:45570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:16.107653 2026] [security2:error] [pid 3628195:tid 3628195] [client 191.83.137.31:45098] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbwHvBralx4umGzw3p0AAAADI"]
[Thu Jul 30 15:12:16.107708 2026] [security2:error] [pid 3628195:tid 3628195] [client 191.83.137.31:45098] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbwHvBralx4umGzw3p0AAAADI"]
[Thu Jul 30 15:12:16.107956 2026] [security2:error] [pid 3628195:tid 3628195] [client 191.83.137.31:45098] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbwHvBralx4umGzw3p0AAAADI"]
[Thu Jul 30 15:12:16.181085 2026] [access_compat:error] [pid 3617602:tid 3617602] [client 149.50.204.189:36902] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/06/gibraltar_sleeping_monkey.jpg, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:16.181201 2026] [access_compat:error] [pid 3617602:tid 3617602] [client 149.50.204.189:36902] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:16.773790 2026] [ssl:error] [pid 3620195:tid 3620195] (EAI 2)Name or service not known: [client 144.76.19.72:54612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:16.773819 2026] [ssl:error] [pid 3620195:tid 3620195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:16.834894 2026] [ssl:error] [pid 3626529:tid 3626529] (EAI 2)Name or service not known: [client 144.76.19.72:54624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:16.834931 2026] [ssl:error] [pid 3626529:tid 3626529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:16.872349 2026] [access_compat:error] [pid 3620135:tid 3620135] [client 64.180.68.231:65384] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:17.306397 2026] [access_compat:error] [pid 3627500:tid 3627500] [client 45.158.164.139:59652] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:12:18.317723 2026] [access_compat:error] [pid 3626529:tid 3626529] [client 14.161.144.194:38692] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/06/gibraltar_sleeping_monkey.jpg, referer: https://google.com
[Thu Jul 30 15:12:18.317823 2026] [access_compat:error] [pid 3626529:tid 3626529] [client 14.161.144.194:38692] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://google.com
[Thu Jul 30 15:12:19.953365 2026] [ssl:error] [pid 3620079:tid 3620079] (EAI 2)Name or service not known: [client 144.76.19.72:23590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:19.953393 2026] [ssl:error] [pid 3620079:tid 3620079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:20.008839 2026] [ssl:error] [pid 3626529:tid 3626529] (EAI 2)Name or service not known: [client 144.76.19.72:23592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:20.008867 2026] [ssl:error] [pid 3626529:tid 3626529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:20.568091 2026] [ssl:error] [pid 3611732:tid 3611732] (70014)End of file found: [client 216.73.216.199:46796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:20.867025 2026] [access_compat:error] [pid 3620079:tid 3620079] [client 190.153.91.245:48474] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2007/06/gibraltar_sleeping_monkey.jpg, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:20.867142 2026] [access_compat:error] [pid 3620079:tid 3620079] [client 190.153.91.245:48474] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://forums.moneysavingexpert.com/discussion/comment/38495448/
[Thu Jul 30 15:12:21.521504 2026] [security2:error] [pid 3617602:tid 3617602] [client 190.17.133.161:42380] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbxVKCz0zMnGlOEsquDQAAAFc"]
[Thu Jul 30 15:12:21.521553 2026] [security2:error] [pid 3617602:tid 3617602] [client 190.17.133.161:42380] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtbxVKCz0zMnGlOEsquDQAAAFc"]
[Thu Jul 30 15:12:21.521809 2026] [security2:error] [pid 3617602:tid 3617602] [client 190.17.133.161:42380] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtbxVKCz0zMnGlOEsquDQAAAFc"]
[Thu Jul 30 15:12:21.897539 2026] [ssl:error] [pid 3627002:tid 3627002] (70014)End of file found: [client 216.73.216.199:13000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:22.433039 2026] [authz_core:error] [pid 3623648:tid 3623648] [client 94.154.43.186:63676] AH01630: client denied by server configuration: /home/lukess/public_html/error_log
[Thu Jul 30 15:12:23.061218 2026] [ssl:error] [pid 3628162:tid 3628162] (EAI 2)Name or service not known: [client 144.76.19.72:23602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:23.061243 2026] [ssl:error] [pid 3628162:tid 3628162] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:23.112314 2026] [ssl:error] [pid 3628290:tid 3628290] (EAI 2)Name or service not known: [client 144.76.19.72:23606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:23.112340 2026] [ssl:error] [pid 3628290:tid 3628290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:23.488028 2026] [access_compat:error] [pid 3624887:tid 3624887] [client 64.180.68.231:49395] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:24.342965 2026] [ssl:error] [pid 3626529:tid 3626529] (70014)End of file found: [client 216.73.216.199:59563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:25.803663 2026] [security2:error] [pid 3623141:tid 3623141] [client 43.134.38.171:55010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtbyc58amwCVUqNOpCibAAAAAc"]
[Thu Jul 30 15:12:26.169195 2026] [ssl:error] [pid 3627500:tid 3627500] (EAI 2)Name or service not known: [client 144.76.19.72:23614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:26.169229 2026] [ssl:error] [pid 3627500:tid 3627500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:26.230985 2026] [ssl:error] [pid 3624887:tid 3624887] (EAI 2)Name or service not known: [client 144.76.19.72:23630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:26.231009 2026] [ssl:error] [pid 3624887:tid 3624887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:26.856284 2026] [authz_core:error] [pid 3624852:tid 3624852] [client 16.59.59.72:51302] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 15:12:26.857750 2026] [authz_core:error] [pid 3624852:tid 3624852] [client 16.59.59.72:51302] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 15:12:26.933755 2026] [security2:error] [pid 3617334:tid 3617334] [client 85.11.167.225:46682] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "yahtzeecouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amtbytFSQAQesFH5DwLAgAAAAEI"]
[Thu Jul 30 15:12:26.933941 2026] [security2:error] [pid 3617334:tid 3617334] [client 85.11.167.225:46682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "yahtzeecouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amtbytFSQAQesFH5DwLAgAAAAEI"]
[Thu Jul 30 15:12:26.934168 2026] [security2:error] [pid 3617334:tid 3617334] [client 85.11.167.225:46682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "yahtzeecouk.alism.com"] [uri "/.git/HEAD"] [unique_id "amtbytFSQAQesFH5DwLAgAAAAEI"]
[Thu Jul 30 15:12:26.949455 2026] [security2:error] [pid 3624887:tid 3624887] [client 85.11.167.225:46684] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "yahtzeecouk.alism.com"] [uri "/.git/config"] [unique_id "amtbysgo-KCw2DGkusTuawAAABg"]
[Thu Jul 30 15:12:26.949633 2026] [security2:error] [pid 3624887:tid 3624887] [client 85.11.167.225:46684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "yahtzeecouk.alism.com"] [uri "/.git/config"] [unique_id "amtbysgo-KCw2DGkusTuawAAABg"]
[Thu Jul 30 15:12:26.949840 2026] [security2:error] [pid 3624887:tid 3624887] [client 85.11.167.225:46684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "yahtzeecouk.alism.com"] [uri "/.git/config"] [unique_id "amtbysgo-KCw2DGkusTuawAAABg"]
[Thu Jul 30 15:12:27.365462 2026] [access_compat:error] [pid 3623106:tid 3623106] [client 64.180.68.231:49608] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:27.936858 2026] [security2:error] [pid 3628161:tid 3628161] [client 43.134.38.171:47810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtbyyN7O4tTqu68Sz7pkgAAAC0"], referer: http://www.beechhouseselfcatering.co.uk
[Thu Jul 30 15:12:29.289939 2026] [ssl:error] [pid 3620189:tid 3620189] (EAI 2)Name or service not known: [client 144.76.19.72:23638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:29.289971 2026] [ssl:error] [pid 3620189:tid 3620189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:29.344234 2026] [ssl:error] [pid 3628161:tid 3628161] (EAI 2)Name or service not known: [client 144.76.19.72:23654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:29.344264 2026] [ssl:error] [pid 3628161:tid 3628161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:29.774658 2026] [ssl:error] [pid 3624886:tid 3624886] (70014)End of file found: [client 216.73.216.199:17119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:31.883698 2026] [ssl:error] [pid 3620443:tid 3620443] (70014)End of file found: [client 216.73.216.199:49266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:32.402282 2026] [ssl:error] [pid 3628273:tid 3628273] (EAI 2)Name or service not known: [client 144.76.19.72:41762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:32.402311 2026] [ssl:error] [pid 3628273:tid 3628273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:32.458286 2026] [ssl:error] [pid 3630090:tid 3630090] (EAI 2)Name or service not known: [client 144.76.19.72:41774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:32.458319 2026] [ssl:error] [pid 3630090:tid 3630090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:32.791951 2026] [ssl:error] [pid 3628285:tid 3628285] (70014)End of file found: [client 216.73.216.199:63210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:35.085286 2026] [core:error] [pid 3623534:tid 3623534] (13)Permission denied: [client 216.73.216.199:21283] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu1/driver/cpu7/node0/compact
[Thu Jul 30 15:12:35.559792 2026] [ssl:error] [pid 3590353:tid 3590353] (EAI 2)Name or service not known: [client 144.76.19.72:41778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:35.559857 2026] [ssl:error] [pid 3590353:tid 3590353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:35.615203 2026] [ssl:error] [pid 3627002:tid 3627002] (EAI 2)Name or service not known: [client 144.76.19.72:41792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:35.615229 2026] [ssl:error] [pid 3627002:tid 3627002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:36.148779 2026] [security2:error] [pid 3628277:tid 3628277] [client 43.156.232.154:44004] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/saveshrine/"] [unique_id "amtb1Bub1SiQkcijuYf_7wAAAEE"]
[Thu Jul 30 15:12:37.954674 2026] [access_compat:error] [pid 3620443:tid 3620443] [client 64.180.68.231:50171] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:38.672652 2026] [ssl:error] [pid 3624887:tid 3624887] (EAI 2)Name or service not known: [client 144.76.19.72:41806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:38.672684 2026] [ssl:error] [pid 3624887:tid 3624887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:38.729963 2026] [ssl:error] [pid 3624852:tid 3624852] (EAI 2)Name or service not known: [client 144.76.19.72:41814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:38.729994 2026] [ssl:error] [pid 3624852:tid 3624852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:39.446315 2026] [core:error] [pid 3624853:tid 3624853] [client 23.230.235.225:26094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/the-day-santa-come-to-see-me/
[Thu Jul 30 15:12:39.446342 2026] [core:error] [pid 3624853:tid 3624853] [client 23.230.235.225:26094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://edwardkensington.com/the-day-santa-come-to-see-me/
[Thu Jul 30 15:12:39.756036 2026] [lsapi:warn] [pid 3628238:tid 3628238] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:12:39.828155 2026] [core:error] [pid 3623534:tid 3623534] (13)Permission denied: [client 216.73.216.199:21283] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/rtc/rtc0/device/driver/bind
[Thu Jul 30 15:12:40.441334 2026] [ssl:error] [pid 3623534:tid 3623534] (70014)End of file found: [client 216.73.216.199:21283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:41.784843 2026] [ssl:error] [pid 3628282:tid 3628282] (EAI 2)Name or service not known: [client 144.76.19.72:57894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:41.784895 2026] [ssl:error] [pid 3628282:tid 3628282] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:41.841093 2026] [ssl:error] [pid 3623591:tid 3623591] (EAI 2)Name or service not known: [client 144.76.19.72:57896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:41.841126 2026] [ssl:error] [pid 3623591:tid 3623591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:42.638775 2026] [ssl:error] [pid 3628290:tid 3628290] (70014)End of file found: [client 216.73.216.199:16152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:43.261532 2026] [core:error] [pid 3624853:tid 3624853] (13)Permission denied: [client 216.73.216.199:34070] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lve_struct/object_size
[Thu Jul 30 15:12:44.102631 2026] [access_compat:error] [pid 3620189:tid 3620189] [client 64.180.68.231:50501] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:44.821909 2026] [core:error] [pid 3624853:tid 3624853] (13)Permission denied: [client 216.73.216.199:34070] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/blkdev_ioc/trace
[Thu Jul 30 15:12:44.895886 2026] [ssl:error] [pid 3624887:tid 3624887] (EAI 2)Name or service not known: [client 144.76.19.72:57902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:44.895912 2026] [ssl:error] [pid 3624887:tid 3624887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:44.951526 2026] [ssl:error] [pid 3620195:tid 3620195] (EAI 2)Name or service not known: [client 144.76.19.72:57914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:44.951554 2026] [ssl:error] [pid 3620195:tid 3620195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:45.444212 2026] [ssl:error] [pid 3624853:tid 3624853] (70014)End of file found: [client 216.73.216.199:34070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:46.654347 2026] [core:error] [pid 3630650:tid 3630650] (13)Permission denied: [client 216.73.216.199:3949] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/libcrc32c/sections/__ksymtab_strings
[Thu Jul 30 15:12:48.004640 2026] [ssl:error] [pid 3617334:tid 3617334] (EAI 2)Name or service not known: [client 144.76.19.72:57922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:48.004673 2026] [ssl:error] [pid 3617334:tid 3617334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:48.057609 2026] [ssl:error] [pid 3628233:tid 3628233] (EAI 2)Name or service not known: [client 144.76.19.72:57930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:48.057642 2026] [ssl:error] [pid 3628233:tid 3628233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:48.544231 2026] [access_compat:error] [pid 3628290:tid 3628290] [client 64.180.68.231:50739] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:49.671549 2026] [core:error] [pid 3630650:tid 3630650] (13)Permission denied: [client 216.73.216.199:3949] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory169/subsystem/uevent
[Thu Jul 30 15:12:50.273679 2026] [ssl:error] [pid 3630650:tid 3630650] (70014)End of file found: [client 216.73.216.199:3949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:51.114201 2026] [ssl:error] [pid 3628277:tid 3628277] (EAI 2)Name or service not known: [client 144.76.19.72:40350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:51.114233 2026] [ssl:error] [pid 3628277:tid 3628277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:51.169194 2026] [ssl:error] [pid 3628280:tid 3628280] (EAI 2)Name or service not known: [client 144.76.19.72:40364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:51.169228 2026] [ssl:error] [pid 3628280:tid 3628280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:51.176661 2026] [core:error] [pid 3630613:tid 3630613] (13)Permission denied: [client 216.73.216.199:18766] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/cpu_partial
[Thu Jul 30 15:12:51.779656 2026] [ssl:error] [pid 3630613:tid 3630613] (70014)End of file found: [client 216.73.216.199:18766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:12:54.224701 2026] [ssl:error] [pid 3630680:tid 3630680] (EAI 2)Name or service not known: [client 144.76.19.72:40374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:54.224733 2026] [ssl:error] [pid 3630680:tid 3630680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:54.277009 2026] [ssl:error] [pid 3630721:tid 3630721] (EAI 2)Name or service not known: [client 144.76.19.72:40384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:54.277042 2026] [ssl:error] [pid 3630721:tid 3630721] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:54.597017 2026] [access_compat:error] [pid 3590353:tid 3590353] [client 45.158.164.139:56766] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:12:54.677746 2026] [access_compat:error] [pid 3623869:tid 3623869] [client 64.180.68.231:51059] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:12:57.210716 2026] [core:error] [pid 3623869:tid 3623869] (13)Permission denied: [client 216.73.216.199:32916] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-4k/slabs_cpu_partial
[Thu Jul 30 15:12:57.332054 2026] [ssl:error] [pid 3630650:tid 3630650] (EAI 2)Name or service not known: [client 144.76.19.72:40386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:57.332107 2026] [ssl:error] [pid 3630650:tid 3630650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:57.388522 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:40402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:12:57.388551 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:12:59.151034 2026] [access_compat:error] [pid 3626529:tid 3626529] [client 64.180.68.231:51290] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:00.446339 2026] [ssl:error] [pid 3628280:tid 3628280] (EAI 2)Name or service not known: [client 144.76.19.72:21844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:00.446371 2026] [ssl:error] [pid 3628280:tid 3628280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:00.503693 2026] [ssl:error] [pid 3628238:tid 3628238] (EAI 2)Name or service not known: [client 144.76.19.72:21856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:00.503726 2026] [ssl:error] [pid 3628238:tid 3628238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:01.463119 2026] [core:error] [pid 3624885:tid 3624885] (13)Permission denied: [client 216.73.216.199:9789] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_free_data/cache_dma
[Thu Jul 30 15:13:02.081466 2026] [ssl:error] [pid 3624885:tid 3624885] (70014)End of file found: [client 216.73.216.199:9789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:02.325483 2026] [access_compat:error] [pid 3630649:tid 3630649] [client 145.223.131.188:48454] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/i-demand-a-recount
[Thu Jul 30 15:13:02.325593 2026] [access_compat:error] [pid 3630649:tid 3630649] [client 145.223.131.188:48454] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:13:03.579883 2026] [ssl:error] [pid 3617267:tid 3617267] (EAI 2)Name or service not known: [client 144.76.19.72:21872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:03.579945 2026] [ssl:error] [pid 3617267:tid 3617267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:03.651901 2026] [security2:error] [pid 3620195:tid 3620195] [client 146.190.234.109:58648] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "sarahwiseman.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtb78hMUHUQQZkyMbwR9QAAACY"]
[Thu Jul 30 15:13:03.670788 2026] [ssl:error] [pid 3630650:tid 3630650] (EAI 2)Name or service not known: [client 144.76.19.72:21880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:03.670815 2026] [ssl:error] [pid 3630650:tid 3630650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:04.201089 2026] [core:error] [pid 3623141:tid 3623141] (13)Permission denied: [client 216.73.216.199:28827] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/configfs_dir_cache/store_user
[Thu Jul 30 15:13:05.295556 2026] [access_compat:error] [pid 3624887:tid 3624887] [client 64.180.68.231:51617] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:05.709254 2026] [ssl:error] [pid 3623141:tid 3623141] (70014)End of file found: [client 216.73.216.199:28827] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:06.726531 2026] [ssl:error] [pid 3628274:tid 3628274] (EAI 2)Name or service not known: [client 144.76.19.72:21888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:06.726568 2026] [ssl:error] [pid 3628274:tid 3628274] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:06.783103 2026] [ssl:error] [pid 3630649:tid 3630649] (EAI 2)Name or service not known: [client 144.76.19.72:21904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:06.783137 2026] [ssl:error] [pid 3630649:tid 3630649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:08.616142 2026] [security2:error] [pid 3617649:tid 3617649] [client 185.191.171.11:22698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/what-channel-is-nfhs-on-uverse"] [unique_id "amtb9KbbHMQQi5esyvaqmwAAAFw"]
[Thu Jul 30 15:13:09.730890 2026] [access_compat:error] [pid 3626123:tid 3626123] [client 64.180.68.231:51852] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:09.736034 2026] [access_compat:error] [pid 3628274:tid 3628274] [client 13.220.97.51:38518] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/10/sean_freeman_nathan_king_cambridge.thumbnail.jpg
[Thu Jul 30 15:13:09.736141 2026] [access_compat:error] [pid 3628274:tid 3628274] [client 13.220.97.51:38518] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:13:09.837041 2026] [ssl:error] [pid 3630719:tid 3630719] (EAI 2)Name or service not known: [client 144.76.19.72:61080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:09.837095 2026] [ssl:error] [pid 3630719:tid 3630719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:09.892352 2026] [ssl:error] [pid 3617649:tid 3617649] (EAI 2)Name or service not known: [client 144.76.19.72:61082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:09.892391 2026] [ssl:error] [pid 3617649:tid 3617649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:10.098520 2026] [security2:error] [pid 3590353:tid 3590353] [client 47.243.201.196:13175] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtb9pZU2rFwAaxaHIG0bgAAACA"]
[Thu Jul 30 15:13:10.098581 2026] [security2:error] [pid 3590353:tid 3590353] [client 47.243.201.196:13175] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtb9pZU2rFwAaxaHIG0bgAAACA"]
[Thu Jul 30 15:13:10.098804 2026] [security2:error] [pid 3590353:tid 3590353] [client 47.243.201.196:13175] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtb9pZU2rFwAaxaHIG0bgAAACA"]
[Thu Jul 30 15:13:11.751034 2026] [ssl:error] [pid 3617267:tid 3617267] (70014)End of file found: [client 216.73.216.199:51282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:12.949539 2026] [ssl:error] [pid 3628274:tid 3628274] (EAI 2)Name or service not known: [client 144.76.19.72:61088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:12.949575 2026] [ssl:error] [pid 3628274:tid 3628274] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:13.005812 2026] [ssl:error] [pid 3628425:tid 3628425] (EAI 2)Name or service not known: [client 144.76.19.72:61102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:13.005855 2026] [ssl:error] [pid 3628425:tid 3628425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:14.374856 2026] [security2:error] [pid 3628274:tid 3628274] [client 206.84.81.119:58726] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtb-iODJnEODwVzgs0GZAAAAD8"]
[Thu Jul 30 15:13:14.374907 2026] [security2:error] [pid 3628274:tid 3628274] [client 206.84.81.119:58726] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtb-iODJnEODwVzgs0GZAAAAD8"]
[Thu Jul 30 15:13:14.375175 2026] [security2:error] [pid 3628274:tid 3628274] [client 206.84.81.119:58726] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtb-iODJnEODwVzgs0GZAAAAD8"]
[Thu Jul 30 15:13:15.086756 2026] [core:error] [pid 3628196:tid 3628196] (13)Permission denied: [client 216.73.216.199:29249] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory125/subsystem/uevent
[Thu Jul 30 15:13:15.522500 2026] [security2:error] [pid 3630718:tid 3630718] [client 114.119.146.111:58991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~17,102/request_format~html"] [unique_id "amtb-_FiAIlFKpgUPPz_jgAAABY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~17,102/request_format~html
[Thu Jul 30 15:13:15.802798 2026] [lsapi:warn] [pid 3628282:tid 3628282] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:13:15.856437 2026] [access_compat:error] [pid 3628283:tid 3628283] [client 64.180.68.231:52170] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:16.005701 2026] [core:crit] [pid 3628196:tid 3628196] (13)Permission denied: [client 216.73.216.199:29249] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/ldconfig/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/ldconfig/' is executable
[Thu Jul 30 15:13:16.005769 2026] [core:crit] [pid 3628196:tid 3628196] (13)Permission denied: [client 216.73.216.199:29249] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/private/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/private/' is executable
[Thu Jul 30 15:13:16.061743 2026] [ssl:error] [pid 3626123:tid 3626123] (EAI 2)Name or service not known: [client 144.76.19.72:61108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:16.061789 2026] [ssl:error] [pid 3626123:tid 3626123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:16.114566 2026] [ssl:error] [pid 3628231:tid 3628231] (EAI 2)Name or service not known: [client 144.76.19.72:61122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:16.114610 2026] [ssl:error] [pid 3628231:tid 3628231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:16.507493 2026] [authz_core:error] [pid 3628286:tid 3628286] [client 20.79.250.162:4293] AH01630: client denied by server configuration: /home/lukess/public_html/wp-content/error_log
[Thu Jul 30 15:13:16.559694 2026] [security2:error] [pid 3625535:tid 3625535] [client 114.119.146.111:59001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~17,102/request_format~html"] [unique_id "amtb_PgalsNfkAoT3m8O2QAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~17,102/request_format~html
[Thu Jul 30 15:13:16.689540 2026] [security2:error] [pid 3590353:tid 3590353] [client 14.237.74.130:58381] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtb_JZU2rFwAaxaHIG0cAAAACA"]
[Thu Jul 30 15:13:16.689587 2026] [security2:error] [pid 3590353:tid 3590353] [client 14.237.74.130:58381] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtb_JZU2rFwAaxaHIG0cAAAACA"]
[Thu Jul 30 15:13:16.689803 2026] [security2:error] [pid 3590353:tid 3590353] [client 14.237.74.130:58381] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtb_JZU2rFwAaxaHIG0cAAAACA"]
[Thu Jul 30 15:13:18.426964 2026] [security2:error] [pid 3630719:tid 3630719] [client 170.106.107.87:37204] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tartanbag.com"] [uri "/"] [unique_id "amtb_t2t8mMaL2eoH-iC8QAAABc"]
[Thu Jul 30 15:13:19.172301 2026] [ssl:error] [pid 3628283:tid 3628283] (EAI 2)Name or service not known: [client 144.76.19.72:61128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:19.172341 2026] [ssl:error] [pid 3628283:tid 3628283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:19.230675 2026] [ssl:error] [pid 3630719:tid 3630719] (EAI 2)Name or service not known: [client 144.76.19.72:61140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:19.230706 2026] [ssl:error] [pid 3630719:tid 3630719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:20.304731 2026] [access_compat:error] [pid 3630680:tid 3630680] [client 64.180.68.231:52401] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:20.771499 2026] [access_compat:error] [pid 3623869:tid 3623869] [client 45.158.164.139:60144] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:13:22.330629 2026] [ssl:error] [pid 3623591:tid 3623591] (EAI 2)Name or service not known: [client 144.76.19.72:53640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:22.330676 2026] [ssl:error] [pid 3623591:tid 3623591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:22.332857 2026] [core:error] [pid 3628196:tid 3628196] (13)Permission denied: [client 216.73.216.199:29249] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/shmem_inode_cache/order
[Thu Jul 30 15:13:22.385516 2026] [ssl:error] [pid 3631975:tid 3631975] (EAI 2)Name or service not known: [client 144.76.19.72:53654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:22.385547 2026] [ssl:error] [pid 3631975:tid 3631975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:24.152415 2026] [ssl:error] [pid 3628196:tid 3628196] (70014)End of file found: [client 216.73.216.199:29249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:25.362050 2026] [core:error] [pid 3620189:tid 3620189] (13)Permission denied: [client 216.73.216.199:48716] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/configfs_dir_cache/red_zone
[Thu Jul 30 15:13:25.443568 2026] [ssl:error] [pid 3632106:tid 3632106] (EAI 2)Name or service not known: [client 144.76.19.72:53658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:25.443615 2026] [ssl:error] [pid 3632106:tid 3632106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:25.500286 2026] [ssl:error] [pid 3630680:tid 3630680] (EAI 2)Name or service not known: [client 144.76.19.72:53664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:25.500331 2026] [ssl:error] [pid 3630680:tid 3630680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:28.166118 2026] [authz_core:error] [pid 3628282:tid 3628282] [client 172.213.10.64:1840] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:13:28.402239 2026] [core:error] [pid 3620189:tid 3620189] (13)Permission denied: [client 216.73.216.199:48716] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDP-Lite/total_objects
[Thu Jul 30 15:13:28.576582 2026] [ssl:error] [pid 3590353:tid 3590353] (EAI 2)Name or service not known: [client 144.76.19.72:53678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:28.576623 2026] [ssl:error] [pid 3590353:tid 3590353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:28.648646 2026] [ssl:error] [pid 3630719:tid 3630719] (EAI 2)Name or service not known: [client 144.76.19.72:53686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:28.648678 2026] [ssl:error] [pid 3630719:tid 3630719] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:30.576076 2026] [ssl:error] [pid 3620189:tid 3620189] (70014)End of file found: [client 216.73.216.199:48716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:30.862160 2026] [access_compat:error] [pid 3628277:tid 3628277] [client 64.180.68.231:52954] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:30.881094 2026] [ssl:error] [pid 3626123:tid 3626123] (70014)End of file found: [client 216.73.216.199:8300] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:31.483754 2026] [core:error] [pid 3632074:tid 3632074] (13)Permission denied: [client 216.73.216.199:27940] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/tcp_bind_bucket/objects
[Thu Jul 30 15:13:31.703237 2026] [ssl:error] [pid 3620135:tid 3620135] (EAI 2)Name or service not known: [client 144.76.19.72:42062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:31.703273 2026] [ssl:error] [pid 3620135:tid 3620135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:31.755871 2026] [ssl:error] [pid 3632105:tid 3632105] (EAI 2)Name or service not known: [client 144.76.19.72:42074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:31.755898 2026] [ssl:error] [pid 3632105:tid 3632105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:31.784483 2026] [ssl:error] [pid 3632074:tid 3632074] (70014)End of file found: [client 216.73.216.199:27940] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:34.829976 2026] [ssl:error] [pid 3623106:tid 3623106] (EAI 2)Name or service not known: [client 144.76.19.72:42078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:34.830029 2026] [ssl:error] [pid 3623106:tid 3623106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:34.881897 2026] [ssl:error] [pid 3632106:tid 3632106] (EAI 2)Name or service not known: [client 144.76.19.72:42088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:34.881933 2026] [ssl:error] [pid 3632106:tid 3632106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:35.474685 2026] [security2:error] [pid 3630650:tid 3630650] [client 43.173.1.69:41736] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtcD27VEh6HyRAjmf9ZigAAAAM"]
[Thu Jul 30 15:13:35.654046 2026] [security2:error] [pid 3632103:tid 3632103] [client 185.191.171.13:32308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9515.0/prev_next,next.html"] [unique_id "amtcD6gJVBLZfoad0cLhUQAAABM"]
[Thu Jul 30 15:13:36.060697 2026] [ssl:error] [pid 3620189:tid 3620189] (70014)End of file found: [client 216.73.216.199:56660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:36.160607 2026] [security2:error] [pid 3630650:tid 3630650] [client 114.119.137.67:39207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/wp-content/uploads/2011/06/Black_Panther_8_second_printing.jpg"] [unique_id "amtcEG7VEh6HyRAjmf9ZiwAAAAM"], referer: http://www.localhero.org.uk/2008/01/stormblack-panther-art-frank-chocoloreffects-localhero
[Thu Jul 30 15:13:36.666627 2026] [core:error] [pid 3617267:tid 3617267] (13)Permission denied: [client 216.73.216.199:20339] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory149/node0/compact
[Thu Jul 30 15:13:37.029489 2026] [access_compat:error] [pid 3628273:tid 3628273] [client 64.180.68.231:53282] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:37.803418 2026] [security2:error] [pid 3632531:tid 3632531] [client 43.173.1.69:46480] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtcEU6NrSuWJl5o2PCWFgAAABQ"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 15:13:37.936926 2026] [ssl:error] [pid 3630650:tid 3630650] (EAI 2)Name or service not known: [client 144.76.19.72:42092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:37.936953 2026] [ssl:error] [pid 3630650:tid 3630650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:37.973419 2026] [security2:error] [pid 3632530:tid 3632530] [client 43.154.127.188:42010] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "secretbluestone.co.uk"] [uri "/"] [unique_id "amtcEQxJ6Ijf2ZL6vgkvOgAAAAo"]
[Thu Jul 30 15:13:37.987971 2026] [ssl:error] [pid 3625535:tid 3625535] (EAI 2)Name or service not known: [client 144.76.19.72:42094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:37.987998 2026] [ssl:error] [pid 3625535:tid 3625535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:38.014480 2026] [security2:error] [pid 3632074:tid 3632074] [client 114.119.150.190:45745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/tshelter-8designs/assessments/S4%20Indonesia%20Java%20Structural%20Assessment_01.pdf"] [unique_id "amtcEjyxRyQocNIRBNp0lwAAAA0"]
[Thu Jul 30 15:13:38.178015 2026] [ssl:error] [pid 3628286:tid 3628286] (70014)End of file found: [client 216.73.216.199:57477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:38.204085 2026] [security2:error] [pid 3628278:tid 3628278] [client 118.24.135.34:60322] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.p2studio.co.uk"] [uri "/"] [unique_id "amtcEpDyfSSFiRF7s2DV6QAAAEM"]
[Thu Jul 30 15:13:39.986393 2026] [core:error] [pid 3617267:tid 3617267] (13)Permission denied: [client 216.73.216.199:20339] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Operand/object_size
[Thu Jul 30 15:13:40.119644 2026] [authz_core:error] [pid 3625536:tid 3625536] [client 172.213.10.64:63785] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/l10n/error_log
[Thu Jul 30 15:13:40.260005 2026] [authz_core:error] [pid 3625536:tid 3625536] [client 172.213.10.64:63785] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:13:41.040379 2026] [ssl:error] [pid 3617649:tid 3617649] (EAI 2)Name or service not known: [client 144.76.19.72:23202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:41.040416 2026] [ssl:error] [pid 3617649:tid 3617649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:41.093887 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:23216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:41.093937 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:41.461868 2026] [access_compat:error] [pid 3628425:tid 3628425] [client 64.180.68.231:53511] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:42.205979 2026] [authz_core:error] [pid 3625536:tid 3625536] [client 172.213.10.64:63785] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 15:13:43.580409 2026] [security2:error] [pid 3632770:tid 3632770] [client 185.191.171.11:12220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.5265.html"] [unique_id "amtcF6iby1kv7-Wq7S5bSQAAACQ"]
[Thu Jul 30 15:13:43.616884 2026] [core:error] [pid 3620189:tid 3620189] (13)Permission denied: [client 216.73.216.199:45648] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/scripts/elevate-cpanel
[Thu Jul 30 15:13:44.148453 2026] [ssl:error] [pid 3632769:tid 3632769] (EAI 2)Name or service not known: [client 144.76.19.72:23228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:44.148488 2026] [ssl:error] [pid 3632769:tid 3632769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:44.202231 2026] [ssl:error] [pid 3590353:tid 3590353] (EAI 2)Name or service not known: [client 144.76.19.72:23232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:44.202266 2026] [ssl:error] [pid 3590353:tid 3590353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:45.739120 2026] [ssl:error] [pid 3617267:tid 3617267] (70014)End of file found: [client 216.73.216.199:20339] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:47.271428 2026] [core:error] [pid 3620189:tid 3620189] (13)Permission denied: [client 216.73.216.199:45648] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/loop/uevent
[Thu Jul 30 15:13:47.317938 2026] [ssl:error] [pid 3632103:tid 3632103] (EAI 2)Name or service not known: [client 144.76.19.72:23242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:47.317972 2026] [ssl:error] [pid 3632103:tid 3632103] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:47.372811 2026] [ssl:error] [pid 3628425:tid 3628425] (EAI 2)Name or service not known: [client 144.76.19.72:23254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:47.372850 2026] [ssl:error] [pid 3628425:tid 3628425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:47.647272 2026] [access_compat:error] [pid 3628290:tid 3628290] [client 64.180.68.231:53834] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:48.447159 2026] [rewrite:error] [pid 3630650:tid 3630650] [client 72.146.16.10:12058] AH10411: Rewritten query string contains control characters or spaces
[Thu Jul 30 15:13:48.721380 2026] [ssl:error] [pid 3630650:tid 3630650] (70014)End of file found: [client 216.73.216.199:45898] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:49.041572 2026] [ssl:error] [pid 3630718:tid 3630718] (70014)End of file found: [client 216.73.216.199:31521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:50.428558 2026] [ssl:error] [pid 3623106:tid 3623106] (EAI 2)Name or service not known: [client 144.76.19.72:50122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:50.428602 2026] [ssl:error] [pid 3623106:tid 3623106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:50.482935 2026] [ssl:error] [pid 3632074:tid 3632074] (EAI 2)Name or service not known: [client 144.76.19.72:50132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:50.482974 2026] [ssl:error] [pid 3632074:tid 3632074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:52.112328 2026] [access_compat:error] [pid 3624887:tid 3624887] [client 64.180.68.231:54063] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:13:53.960552 2026] [ssl:error] [pid 3632073:tid 3632073] (EAI 2)Name or service not known: [client 144.76.19.72:50146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:53.960588 2026] [ssl:error] [pid 3632073:tid 3632073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:54.019492 2026] [ssl:error] [pid 3623106:tid 3623106] (EAI 2)Name or service not known: [client 144.76.19.72:50150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:54.019525 2026] [ssl:error] [pid 3623106:tid 3623106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:55.055664 2026] [ssl:error] [pid 3630650:tid 3630650] (70014)End of file found: [client 216.73.216.199:39118] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:55.758570 2026] [ssl:error] [pid 3623869:tid 3623869] (70014)End of file found: [client 216.73.216.199:52111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:13:57.120349 2026] [ssl:error] [pid 3632806:tid 3632806] (EAI 2)Name or service not known: [client 144.76.19.72:50164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:57.120386 2026] [ssl:error] [pid 3632806:tid 3632806] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:57.175032 2026] [ssl:error] [pid 3632769:tid 3632769] (EAI 2)Name or service not known: [client 144.76.19.72:50178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:13:57.175075 2026] [ssl:error] [pid 3632769:tid 3632769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:13:57.865934 2026] [lsapi:warn] [pid 3628238:tid 3628238] [client 80.65.208.25:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:13:59.422335 2026] [rewrite:error] [pid 3628425:tid 3628425] [client 72.146.16.10:29900] AH10411: Rewritten query string contains control characters or spaces
[Thu Jul 30 15:14:00.228712 2026] [ssl:error] [pid 3626123:tid 3626123] (EAI 2)Name or service not known: [client 144.76.19.72:47012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:00.228741 2026] [ssl:error] [pid 3626123:tid 3626123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:00.280048 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:47014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:00.280096 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:00.802714 2026] [ssl:error] [pid 3632074:tid 3632074] (70014)End of file found: [client 216.73.216.199:46014] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:01.095008 2026] [ssl:error] [pid 3628196:tid 3628196] (70014)End of file found: [client 216.73.216.199:36538] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:01.119660 2026] [security2:error] [pid 3632769:tid 3632769] [client 114.119.129.14:55543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-437.xml"] [unique_id "amtcKegNgXVfYMRRGe9CHQAAABc"]
[Thu Jul 30 15:14:01.394819 2026] [ssl:error] [pid 3628286:tid 3628286] (70014)End of file found: [client 216.73.216.199:33379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:02.657711 2026] [access_compat:error] [pid 3633530:tid 3633530] [client 64.180.68.231:54612] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:03.337842 2026] [ssl:error] [pid 3632720:tid 3632720] (EAI 2)Name or service not known: [client 144.76.19.72:47022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:03.337886 2026] [ssl:error] [pid 3632720:tid 3632720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:03.395279 2026] [ssl:error] [pid 3633051:tid 3633051] (EAI 2)Name or service not known: [client 144.76.19.72:47032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:03.395313 2026] [ssl:error] [pid 3633051:tid 3633051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:06.326592 2026] [ssl:error] [pid 3632074:tid 3632074] (70014)End of file found: [client 216.73.216.199:9871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:06.416348 2026] [security2:error] [pid 3624888:tid 3624888] [client 46.246.39.245:44344] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "berehap.be"] [uri "/xmlrpc.php"] [unique_id "amtcLknJdvsS4POI5_z5pgAAABo"]
[Thu Jul 30 15:14:06.450950 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:47040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:06.450979 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:06.510623 2026] [ssl:error] [pid 3632500:tid 3632500] (EAI 2)Name or service not known: [client 144.76.19.72:47056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:06.510663 2026] [ssl:error] [pid 3632500:tid 3632500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:06.518942 2026] [ssl:error] [pid 3590353:tid 3590353] (70014)End of file found: [client 216.73.216.199:39437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:06.924451 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:39342] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:07.594321 2026] [security2:error] [pid 3628286:tid 3628286] [client 114.119.149.203:63005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns-sun.com"] [uri "/robots.txt"] [unique_id "amtcL_6VwM6g8cJ7b-qNewAAAEw"], referer: https://ns-sun.com/robots.txt
[Thu Jul 30 15:14:08.799017 2026] [access_compat:error] [pid 3620189:tid 3620189] [client 64.180.68.231:54934] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:09.619903 2026] [ssl:error] [pid 3630650:tid 3630650] (EAI 2)Name or service not known: [client 144.76.19.72:54936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:09.619966 2026] [ssl:error] [pid 3630650:tid 3630650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:09.673118 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:54948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:09.673147 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:09.702194 2026] [security2:error] [pid 3632104:tid 3632104] [client 85.208.96.206:53566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/red-lobster-tropical-treasure-drink-recipe"] [unique_id "amtcMc6YdN0SAZ6kp0DiTwAAAB8"]
[Thu Jul 30 15:14:11.677308 2026] [security2:error] [pid 3617267:tid 3617267] [client 14.231.145.60:51848] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcMwdU3PTwpK0vhRNfRwAAADA"]
[Thu Jul 30 15:14:11.677363 2026] [security2:error] [pid 3617267:tid 3617267] [client 14.231.145.60:51848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcMwdU3PTwpK0vhRNfRwAAADA"]
[Thu Jul 30 15:14:11.677619 2026] [security2:error] [pid 3617267:tid 3617267] [client 14.231.145.60:51848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcMwdU3PTwpK0vhRNfRwAAADA"]
[Thu Jul 30 15:14:11.706697 2026] [ssl:error] [pid 3632103:tid 3632103] (70014)End of file found: [client 216.73.216.199:41857] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:11.993807 2026] [ssl:error] [pid 3630649:tid 3630649] (70014)End of file found: [client 216.73.216.199:13399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:12.729301 2026] [ssl:error] [pid 3630649:tid 3630649] (EAI 2)Name or service not known: [client 144.76.19.72:54960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:12.729339 2026] [ssl:error] [pid 3630649:tid 3630649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:12.787088 2026] [ssl:error] [pid 3617267:tid 3617267] (EAI 2)Name or service not known: [client 144.76.19.72:54966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:12.787120 2026] [ssl:error] [pid 3617267:tid 3617267] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:13.033568 2026] [security2:error] [pid 3624888:tid 3624888] [client 43.166.136.24:49822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-links-opml.php"] [unique_id "amtcNUnJdvsS4POI5_z5rQAAABo"]
[Thu Jul 30 15:14:13.128607 2026] [access_compat:error] [pid 3630649:tid 3630649] [client 45.158.164.139:53292] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:14:13.277306 2026] [authz_core:error] [pid 3617267:tid 3617267] [client 66.249.66.34:45000] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:14:13.280516 2026] [authz_core:error] [pid 3617267:tid 3617267] [client 66.249.66.34:45000] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:14:13.288890 2026] [access_compat:error] [pid 3617649:tid 3617649] [client 64.180.68.231:55164] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:13.498643 2026] [lsapi:warn] [pid 3628278:tid 3628278] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:14:13.990918 2026] [security2:error] [pid 3630680:tid 3630680] [client 51.91.255.78:33324] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcNVYoTSWZ2kB0KKcIWAAAAAY"]
[Thu Jul 30 15:14:13.990968 2026] [security2:error] [pid 3630680:tid 3630680] [client 51.91.255.78:33324] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcNVYoTSWZ2kB0KKcIWAAAAAY"]
[Thu Jul 30 15:14:13.991236 2026] [security2:error] [pid 3630680:tid 3630680] [client 51.91.255.78:33324] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcNVYoTSWZ2kB0KKcIWAAAAAY"]
[Thu Jul 30 15:14:14.092223 2026] [security2:error] [pid 3632807:tid 3632807] [client 213.32.68.86:57932] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcNu2j9Ydp879h45Ca-QAAACY"]
[Thu Jul 30 15:14:14.092283 2026] [security2:error] [pid 3632807:tid 3632807] [client 213.32.68.86:57932] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcNu2j9Ydp879h45Ca-QAAACY"]
[Thu Jul 30 15:14:14.092551 2026] [security2:error] [pid 3632807:tid 3632807] [client 213.32.68.86:57932] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcNu2j9Ydp879h45Ca-QAAACY"]
[Thu Jul 30 15:14:14.812493 2026] [security2:error] [pid 3630649:tid 3630649] [client 114.119.153.38:31039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/parasite-wood-carved-mushrooms"] [unique_id "amtcNmW6AycNU82Pfn6oDgAAAAE"], referer: https://tripodhome.co.uk/product-category/gift
[Thu Jul 30 15:14:15.843902 2026] [ssl:error] [pid 3628278:tid 3628278] (EAI 2)Name or service not known: [client 144.76.19.72:54968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:15.843939 2026] [ssl:error] [pid 3628278:tid 3628278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:15.920041 2026] [ssl:error] [pid 3633530:tid 3633530] (EAI 2)Name or service not known: [client 144.76.19.72:54970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:15.920091 2026] [ssl:error] [pid 3633530:tid 3633530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:17.338713 2026] [ssl:error] [pid 3630679:tid 3630679] (70014)End of file found: [client 216.73.216.199:2648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:17.668109 2026] [cgi:error] [pid 3632106:tid 3632106] [client 216.73.216.199:62251] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Math-BigInt/examples/prime.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 15:14:17.668196 2026] [cgi:error] [pid 3632106:tid 3632106] [client 216.73.216.199:62251] End of script output before headers: prime.pl
[Thu Jul 30 15:14:17.945970 2026] [security2:error] [pid 3630680:tid 3630680] [client 51.91.255.78:33324] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcOVYoTSWZ2kB0KKcIWQAAAAY"]
[Thu Jul 30 15:14:17.946040 2026] [security2:error] [pid 3630680:tid 3630680] [client 51.91.255.78:33324] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcOVYoTSWZ2kB0KKcIWQAAAAY"]
[Thu Jul 30 15:14:17.946289 2026] [security2:error] [pid 3630680:tid 3630680] [client 51.91.255.78:33324] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcOVYoTSWZ2kB0KKcIWQAAAAY"]
[Thu Jul 30 15:14:18.096553 2026] [security2:error] [pid 3628274:tid 3628274] [client 51.91.250.17:49132] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcOiODJnEODwVzgs0GcAAAAD8"]
[Thu Jul 30 15:14:18.096607 2026] [security2:error] [pid 3628274:tid 3628274] [client 51.91.250.17:49132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcOiODJnEODwVzgs0GcAAAAD8"]
[Thu Jul 30 15:14:18.096859 2026] [security2:error] [pid 3628274:tid 3628274] [client 51.91.250.17:49132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcOiODJnEODwVzgs0GcAAAAD8"]
[Thu Jul 30 15:14:18.972587 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:54984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:18.972634 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:19.024268 2026] [ssl:error] [pid 3625536:tid 3625536] (EAI 2)Name or service not known: [client 144.76.19.72:54994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:19.024301 2026] [ssl:error] [pid 3625536:tid 3625536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:19.432324 2026] [access_compat:error] [pid 3632106:tid 3632106] [client 64.180.68.231:55486] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:20.135266 2026] [authz_core:error] [pid 3632720:tid 3632720] [client 72.146.16.10:60111] AH01630: client denied by server configuration: /home/jonatha/public_html/php.ini
[Thu Jul 30 15:14:20.526084 2026] [security2:error] [pid 3632720:tid 3632720] [client 51.75.23.120:33504] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,291.0/prev_next,next.html"] [unique_id "amtcPGyfrluu4vLiyWu1FwAAAAA"]
[Thu Jul 30 15:14:20.526134 2026] [security2:error] [pid 3632720:tid 3632720] [client 51.75.23.120:33504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,291.0/prev_next,next.html"] [unique_id "amtcPGyfrluu4vLiyWu1FwAAAAA"]
[Thu Jul 30 15:14:20.526371 2026] [security2:error] [pid 3632720:tid 3632720] [client 51.75.23.120:33504] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcPGyfrluu4vLiyWu1FwAAAAA"]
[Thu Jul 30 15:14:20.691434 2026] [security2:error] [pid 3625536:tid 3625536] [client 57.129.81.227:38576] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,291.0/prev_next,next.html"] [unique_id "amtcPFXG3Zq4AsqPAezZJAAAABs"]
[Thu Jul 30 15:14:20.691478 2026] [security2:error] [pid 3625536:tid 3625536] [client 57.129.81.227:38576] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,291.0/prev_next,next.html"] [unique_id "amtcPFXG3Zq4AsqPAezZJAAAABs"]
[Thu Jul 30 15:14:20.691779 2026] [security2:error] [pid 3625536:tid 3625536] [client 57.129.81.227:38576] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcPFXG3Zq4AsqPAezZJAAAABs"]
[Thu Jul 30 15:14:22.540873 2026] [ssl:error] [pid 3635059:tid 3635059] (EAI 2)Name or service not known: [client 144.76.19.72:56492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:22.540901 2026] [ssl:error] [pid 3635059:tid 3635059] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:22.554330 2026] [security2:error] [pid 3630679:tid 3630679] [client 43.134.68.29:59786] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.refraction.co.uk"] [uri "/"] [unique_id "amtcPtmBYr2hCvC5rJQENwAAAAU"]
[Thu Jul 30 15:14:22.643542 2026] [access_compat:error] [pid 3617267:tid 3617267] [client 98.93.47.218:33580] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2008/10/13a-looking-at-me-level-42-cambridge-221008.jpg
[Thu Jul 30 15:14:22.643658 2026] [access_compat:error] [pid 3617267:tid 3617267] [client 98.93.47.218:33580] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:14:22.645862 2026] [ssl:error] [pid 3635085:tid 3635085] (EAI 2)Name or service not known: [client 144.76.19.72:56494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:22.645909 2026] [ssl:error] [pid 3635085:tid 3635085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:23.088221 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:42685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:23.826960 2026] [security2:error] [pid 3628274:tid 3628274] [client 80.94.92.67:40906] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "banskoexpress.com"] [uri "/.svn/wc.db"] [unique_id "amtcPyODJnEODwVzgs0GdAAAAD8"]
[Thu Jul 30 15:14:23.827136 2026] [security2:error] [pid 3628274:tid 3628274] [client 80.94.92.67:40906] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "banskoexpress.com"] [uri "/.svn/wc.db"] [unique_id "amtcPyODJnEODwVzgs0GdAAAAD8"]
[Thu Jul 30 15:14:23.827320 2026] [security2:error] [pid 3628274:tid 3628274] [client 80.94.92.67:40906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "banskoexpress.com"] [uri "/.svn/wc.db"] [unique_id "amtcPyODJnEODwVzgs0GdAAAAD8"]
[Thu Jul 30 15:14:23.827508 2026] [security2:error] [pid 3628274:tid 3628274] [client 80.94.92.67:40906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "banskoexpress.com"] [uri "/403.shtml"] [unique_id "amtcPyODJnEODwVzgs0GdAAAAD8"]
[Thu Jul 30 15:14:23.862698 2026] [access_compat:error] [pid 3635086:tid 3635086] [client 64.180.68.231:55749] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:24.360839 2026] [access_compat:error] [pid 3635136:tid 3635136] [client 45.158.164.139:57642] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:14:25.488312 2026] [security2:error] [pid 3630717:tid 3630717] [client 94.154.43.185:53802] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "staging.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtcQYMTWknaYdNbQiWbxgAAAA8"]
[Thu Jul 30 15:14:25.488523 2026] [security2:error] [pid 3630717:tid 3630717] [client 94.154.43.185:53802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "staging.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtcQYMTWknaYdNbQiWbxgAAAA8"]
[Thu Jul 30 15:14:25.488794 2026] [security2:error] [pid 3630717:tid 3630717] [client 94.154.43.185:53802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "staging.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtcQYMTWknaYdNbQiWbxgAAAA8"]
[Thu Jul 30 15:14:25.507412 2026] [ssl:error] [pid 3623534:tid 3623534] (70014)End of file found: [client 216.73.216.199:6853] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:25.700802 2026] [ssl:error] [pid 3632720:tid 3632720] (EAI 2)Name or service not known: [client 144.76.19.72:56510] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:25.700852 2026] [ssl:error] [pid 3632720:tid 3632720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:25.759539 2026] [ssl:error] [pid 3630717:tid 3630717] (EAI 2)Name or service not known: [client 144.76.19.72:56512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:25.759577 2026] [ssl:error] [pid 3630717:tid 3630717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:26.677673 2026] [security2:error] [pid 3635230:tid 3635230] [client 94.154.43.178:43872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/.env"] [unique_id "amtcQtM2xGFFueoh14bxJgAAADE"]
[Thu Jul 30 15:14:26.677882 2026] [security2:error] [pid 3635230:tid 3635230] [client 94.154.43.178:43872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/.env"] [unique_id "amtcQtM2xGFFueoh14bxJgAAADE"]
[Thu Jul 30 15:14:27.040382 2026] [core:error] [pid 3635085:tid 3635085] [client 216.73.216.199:60821] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/python3.6/%(docloc)s)
[Thu Jul 30 15:14:27.101854 2026] [core:error] [pid 3635136:tid 3635136] [client 66.249.66.8:53954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:14:27.101900 2026] [core:error] [pid 3635136:tid 3635136] [client 66.249.66.8:53954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:14:27.343411 2026] [security2:error] [pid 3635230:tid 3635230] [client 94.154.43.178:43872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/index.php"] [unique_id "amtcQtM2xGFFueoh14bxJgAAADE"]
[Thu Jul 30 15:14:28.814574 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:56522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:28.814622 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:28.870794 2026] [ssl:error] [pid 3632806:tid 3632806] (EAI 2)Name or service not known: [client 144.76.19.72:56538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:28.870838 2026] [ssl:error] [pid 3632806:tid 3632806] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:29.916773 2026] [authz_core:error] [pid 3630717:tid 3630717] [client 66.249.66.33:45144] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:14:29.919460 2026] [authz_core:error] [pid 3630717:tid 3630717] [client 66.249.66.33:45144] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:14:31.927001 2026] [ssl:error] [pid 3623534:tid 3623534] (EAI 2)Name or service not known: [client 144.76.19.72:42016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:31.927040 2026] [ssl:error] [pid 3623534:tid 3623534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:31.980533 2026] [ssl:error] [pid 3620265:tid 3620265] (EAI 2)Name or service not known: [client 144.76.19.72:42032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:31.980574 2026] [ssl:error] [pid 3620265:tid 3620265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:32.255729 2026] [ssl:error] [pid 3628274:tid 3628274] (70014)End of file found: [client 216.73.216.199:59474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:32.858874 2026] [ssl:error] [pid 3635135:tid 3635135] (70014)End of file found: [client 216.73.216.199:14323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:34.446856 2026] [access_compat:error] [pid 3633530:tid 3633530] [client 64.180.68.231:56312] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:35.035593 2026] [ssl:error] [pid 3632104:tid 3632104] (EAI 2)Name or service not known: [client 144.76.19.72:42048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:35.035648 2026] [ssl:error] [pid 3632104:tid 3632104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:35.090549 2026] [ssl:error] [pid 3632073:tid 3632073] (EAI 2)Name or service not known: [client 144.76.19.72:42062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:35.090582 2026] [ssl:error] [pid 3632073:tid 3632073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:35.296885 2026] [ssl:error] [pid 3628273:tid 3628273] (70014)End of file found: [client 216.73.216.199:56286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:36.054798 2026] [security2:error] [pid 3625535:tid 3625535] [client 185.191.171.15:30672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2226.0/prev_next,prev.html"] [unique_id "amtcTPgalsNfkAoT3m8PPgAAABI"]
[Thu Jul 30 15:14:37.617895 2026] [ssl:error] [pid 3632073:tid 3632073] (70014)End of file found: [client 216.73.216.199:57604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:38.146749 2026] [ssl:error] [pid 3635138:tid 3635138] (EAI 2)Name or service not known: [client 144.76.19.72:42070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:38.146805 2026] [ssl:error] [pid 3635138:tid 3635138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:38.277495 2026] [ssl:error] [pid 3635138:tid 3635138] (EAI 2)Name or service not known: [client 144.76.19.72:42082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:38.277541 2026] [ssl:error] [pid 3635138:tid 3635138] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:38.579298 2026] [security2:error] [pid 3623534:tid 3623534] [client 167.172.227.247:41638] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtcTrl7mZYEuFkCn__dHQAAAAg"]
[Thu Jul 30 15:14:38.917092 2026] [ssl:error] [pid 3632531:tid 3632531] (70014)End of file found: [client 216.73.216.199:54756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:40.614006 2026] [ssl:error] [pid 3635137:tid 3635137] (70014)End of file found: [client 216.73.216.199:26402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:40.618213 2026] [access_compat:error] [pid 3628286:tid 3628286] [client 64.180.68.231:56638] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:41.357689 2026] [ssl:error] [pid 3628425:tid 3628425] (EAI 2)Name or service not known: [client 144.76.19.72:60994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:41.357727 2026] [ssl:error] [pid 3628425:tid 3628425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:41.399265 2026] [security2:error] [pid 3630649:tid 3630649] [client 114.119.135.136:59551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~17,102,30/request_format~html"] [unique_id "amtcUWW6AycNU82Pfn6oGwAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~17,102,30,18/request_format~html
[Thu Jul 30 15:14:41.413705 2026] [ssl:error] [pid 3620265:tid 3620265] (EAI 2)Name or service not known: [client 144.76.19.72:61008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:41.413729 2026] [ssl:error] [pid 3620265:tid 3620265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:42.759350 2026] [ssl:error] [pid 3632770:tid 3632770] (70014)End of file found: [client 216.73.216.199:37280] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:42.939825 2026] [security2:error] [pid 3630721:tid 3630721] [client 114.119.130.248:63283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/pages/35/Studio/st_157/1"] [unique_id "amtcUk_sZw5TwizJUk1GdQAAABw"], referer: https://www.jonathanmeyerart.com/pages/35/Studio/st_157/page:2
[Thu Jul 30 15:14:43.058612 2026] [ssl:error] [pid 3630680:tid 3630680] (70014)End of file found: [client 216.73.216.199:4118] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:43.174698 2026] [ssl:error] [pid 3620189:tid 3620189] (70014)End of file found: [client 216.73.216.199:51365] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:44.348361 2026] [security2:error] [pid 3632531:tid 3632531] [client 114.119.135.136:39089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~17,102,30/request_format~html"] [unique_id "amtcVE6NrSuWJl5o2PCWMwAAABQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~17,102,30,18/request_format~html
[Thu Jul 30 15:14:44.468904 2026] [ssl:error] [pid 3633659:tid 3633659] (EAI 2)Name or service not known: [client 144.76.19.72:61010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:44.468954 2026] [ssl:error] [pid 3633659:tid 3633659] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:44.529658 2026] [ssl:error] [pid 3628286:tid 3628286] (EAI 2)Name or service not known: [client 144.76.19.72:61020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:44.529700 2026] [ssl:error] [pid 3628286:tid 3628286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:44.869820 2026] [security2:error] [pid 3632104:tid 3632104] [client 160.153.187.97:35022] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amtcVM6YdN0SAZ6kp0DiZgAAAB8"]
[Thu Jul 30 15:14:44.870004 2026] [security2:error] [pid 3632104:tid 3632104] [client 160.153.187.97:35022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amtcVM6YdN0SAZ6kp0DiZgAAAB8"]
[Thu Jul 30 15:14:44.870612 2026] [security2:error] [pid 3632104:tid 3632104] [client 160.153.187.97:35022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtcVM6YdN0SAZ6kp0DiZgAAAB8"]
[Thu Jul 30 15:14:45.018158 2026] [access_compat:error] [pid 3632809:tid 3632809] [client 64.180.68.231:56866] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:45.305990 2026] [security2:error] [pid 3628286:tid 3628286] [client 160.153.187.97:49082] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amtcVf6VwM6g8cJ7b-qNlQAAAEw"]
[Thu Jul 30 15:14:45.306237 2026] [security2:error] [pid 3628286:tid 3628286] [client 160.153.187.97:49082] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amtcVf6VwM6g8cJ7b-qNlQAAAEw"]
[Thu Jul 30 15:14:45.306516 2026] [security2:error] [pid 3628286:tid 3628286] [client 160.153.187.97:49082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtcVf6VwM6g8cJ7b-qNlQAAAEw"]
[Thu Jul 30 15:14:45.561445 2026] [ssl:error] [pid 3635085:tid 3635085] (70014)End of file found: [client 216.73.216.199:63220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:45.577081 2026] [cgi:error] [pid 3623106:tid 3623106] [client 37.59.21.100:50280] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:14:47.583136 2026] [ssl:error] [pid 3633530:tid 3633530] (EAI 2)Name or service not known: [client 144.76.19.72:61036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:47.583165 2026] [ssl:error] [pid 3633530:tid 3633530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:47.634918 2026] [ssl:error] [pid 3632808:tid 3632808] (EAI 2)Name or service not known: [client 144.76.19.72:61038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:47.634948 2026] [ssl:error] [pid 3632808:tid 3632808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:48.228877 2026] [ssl:error] [pid 3635059:tid 3635059] (70014)End of file found: [client 216.73.216.199:22995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:48.307428 2026] [security2:error] [pid 3628278:tid 3628278] [client 194.238.10.26:40083] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcWJDyfSSFiRF7s2DWiAAAAEM"]
[Thu Jul 30 15:14:48.307480 2026] [security2:error] [pid 3628278:tid 3628278] [client 194.238.10.26:40083] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcWJDyfSSFiRF7s2DWiAAAAEM"]
[Thu Jul 30 15:14:48.307723 2026] [security2:error] [pid 3628278:tid 3628278] [client 194.238.10.26:40083] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcWJDyfSSFiRF7s2DWiAAAAEM"]
[Thu Jul 30 15:14:48.351822 2026] [security2:error] [pid 3630650:tid 3630650] [client 43.159.128.155:52738] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amtcWG7VEh6HyRAjmf9ZqQAAAAM"]
[Thu Jul 30 15:14:49.225894 2026] [security2:error] [pid 3620189:tid 3620189] [client 49.51.180.2:60834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hugoashmore.org"] [uri "/"] [unique_id "amtcWbL-2BjVE145LlwOMwAAAB0"]
[Thu Jul 30 15:14:49.721317 2026] [security2:error] [pid 3626492:tid 3626492] [client 198.11.177.243:47286] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "martingriese.com"] [uri "/"] [unique_id "amtcWVMMKDDX1O8UUVsnawAAACE"]
[Thu Jul 30 15:14:50.037600 2026] [core:error] [pid 3633659:tid 3633659] (13)Permission denied: [client 216.73.216.199:36986] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/slabs_cpu_partial
[Thu Jul 30 15:14:50.328391 2026] [ssl:error] [pid 3633659:tid 3633659] (70014)End of file found: [client 216.73.216.199:36986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:50.552627 2026] [security2:error] [pid 3632808:tid 3632808] [client 104.28.205.83:16758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webdisk.ericashmore.org"] [uri "/.env.example"] [unique_id "amtcWitSUACivJ6j5QIQ1QAAACc"]
[Thu Jul 30 15:14:50.688866 2026] [ssl:error] [pid 3633051:tid 3633051] (EAI 2)Name or service not known: [client 144.76.19.72:47714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:50.688912 2026] [ssl:error] [pid 3633051:tid 3633051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:50.744672 2026] [ssl:error] [pid 3632104:tid 3632104] (EAI 2)Name or service not known: [client 144.76.19.72:47728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:50.744702 2026] [ssl:error] [pid 3632104:tid 3632104] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:50.934527 2026] [core:error] [pid 3632105:tid 3632105] (13)Permission denied: [client 216.73.216.199:37956] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/alloc_calls
[Thu Jul 30 15:14:51.279451 2026] [access_compat:error] [pid 3636746:tid 3636746] [client 64.180.68.231:57189] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:52.447596 2026] [ssl:error] [pid 3632105:tid 3632105] (70014)End of file found: [client 216.73.216.199:37956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:52.458865 2026] [security2:error] [pid 3628425:tid 3628425] [client 82.156.34.74:60056] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/"] [unique_id "amtcXCuMPTZc0MDkhTlOgQAAACs"]
[Thu Jul 30 15:14:53.562752 2026] [core:error] [pid 3625535:tid 3625535] (13)Permission denied: [client 216.73.216.199:1408] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/slabs_cpu_partial
[Thu Jul 30 15:14:53.796438 2026] [ssl:error] [pid 3636746:tid 3636746] (EAI 2)Name or service not known: [client 144.76.19.72:47744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:53.796491 2026] [ssl:error] [pid 3636746:tid 3636746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:53.852988 2026] [ssl:error] [pid 3636746:tid 3636746] (EAI 2)Name or service not known: [client 144.76.19.72:47752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:53.853022 2026] [ssl:error] [pid 3636746:tid 3636746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:53.957736 2026] [ssl:error] [pid 3625535:tid 3625535] (70014)End of file found: [client 216.73.216.199:1408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:54.936554 2026] [security2:error] [pid 3632500:tid 3632500] [client 82.156.34.74:32928] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtcXmgaK5vMmBP89l1AVQAAAAQ"], referer: http://www.clarepillinger.co.uk
[Thu Jul 30 15:14:55.612738 2026] [access_compat:error] [pid 3635086:tid 3635086] [client 64.180.68.231:57414] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:14:56.365326 2026] [ssl:error] [pid 3636593:tid 3636593] (70014)End of file found: [client 216.73.216.199:50477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:14:56.908136 2026] [ssl:error] [pid 3635137:tid 3635137] (EAI 2)Name or service not known: [client 144.76.19.72:47756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:56.908182 2026] [ssl:error] [pid 3635137:tid 3635137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:56.963345 2026] [ssl:error] [pid 3635135:tid 3635135] (EAI 2)Name or service not known: [client 144.76.19.72:47758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:14:56.963375 2026] [ssl:error] [pid 3635135:tid 3635135] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:14:57.068457 2026] [security2:error] [pid 3623106:tid 3623106] [client 44.207.69.106:43535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/robots.txt"] [unique_id "amtcYVqwSVvLCm4GJ01W8AAAAAI"]
[Thu Jul 30 15:14:57.884137 2026] [core:error] [pid 3628274:tid 3628274] (13)Permission denied: [client 216.73.216.199:38064] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/intel_rapl_common/uevent
[Thu Jul 30 15:14:57.898734 2026] [security2:error] [pid 3635137:tid 3635137] [client 185.191.171.18:60668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amtcYfQboI5hPb5FdaHiJQAAAC4"]
[Thu Jul 30 15:14:58.788441 2026] [ssl:error] [pid 3628274:tid 3628274] (70014)End of file found: [client 216.73.216.199:38064] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:00.019007 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:26712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:00.019056 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:00.071991 2026] [ssl:error] [pid 3630721:tid 3630721] (EAI 2)Name or service not known: [client 144.76.19.72:26720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:00.072020 2026] [ssl:error] [pid 3630721:tid 3630721] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:00.289982 2026] [security2:error] [pid 3626192:tid 3626192] [client 216.73.216.199:5306] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/danish/errmsg.sys"] [unique_id "amtcZIgcAq11CPrh_M4txgAAAB4"]
[Thu Jul 30 15:15:00.290507 2026] [security2:error] [pid 3626192:tid 3626192] [client 216.73.216.199:5306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/danish/errmsg.sys"] [unique_id "amtcZIgcAq11CPrh_M4txgAAAB4"]
[Thu Jul 30 15:15:00.290724 2026] [security2:error] [pid 3626192:tid 3626192] [client 216.73.216.199:5306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/danish/errmsg.sys"] [unique_id "amtcZIgcAq11CPrh_M4txgAAAB4"]
[Thu Jul 30 15:15:01.273381 2026] [security2:error] [pid 3623141:tid 3623141] [client 52.54.95.127:58026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtcZc58amwCVUqNOpCi1QAAAAc"]
[Thu Jul 30 15:15:01.495710 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:5306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:01.996334 2026] [ssl:error] [pid 3628425:tid 3628425] (70014)End of file found: [client 216.73.216.199:54808] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:03.123849 2026] [ssl:error] [pid 3630649:tid 3630649] (EAI 2)Name or service not known: [client 144.76.19.72:26724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:03.123880 2026] [ssl:error] [pid 3630649:tid 3630649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:03.176677 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:26732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:03.176718 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:06.214905 2026] [access_compat:error] [pid 3633530:tid 3633530] [client 64.180.68.231:57992] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:06.231740 2026] [ssl:error] [pid 3620189:tid 3620189] (EAI 2)Name or service not known: [client 144.76.19.72:26740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:06.231770 2026] [ssl:error] [pid 3620189:tid 3620189] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:06.287741 2026] [ssl:error] [pid 3623591:tid 3623591] (EAI 2)Name or service not known: [client 144.76.19.72:26750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:06.287774 2026] [ssl:error] [pid 3623591:tid 3623591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:07.153969 2026] [security2:error] [pid 3632808:tid 3632808] [client 85.208.96.201:24752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8498.0.html"] [unique_id "amtcaytSUACivJ6j5QIQ3gAAACc"]
[Thu Jul 30 15:15:08.458153 2026] [ssl:error] [pid 3623534:tid 3623534] (70014)End of file found: [client 216.73.216.199:15335] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:08.946550 2026] [security2:error] [pid 3637794:tid 3637794] [client 89.156.79.224:42138] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,94.0.html"] [unique_id "amtcbE1GBsMvg3mj69ICygAAAAA"]
[Thu Jul 30 15:15:08.946598 2026] [security2:error] [pid 3637794:tid 3637794] [client 89.156.79.224:42138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,94.0.html"] [unique_id "amtcbE1GBsMvg3mj69ICygAAAAA"]
[Thu Jul 30 15:15:08.946863 2026] [security2:error] [pid 3637794:tid 3637794] [client 89.156.79.224:42138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcbE1GBsMvg3mj69ICygAAAAA"]
[Thu Jul 30 15:15:09.534047 2026] [ssl:error] [pid 3623869:tid 3623869] (EAI 2)Name or service not known: [client 144.76.19.72:26752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:09.534095 2026] [ssl:error] [pid 3623869:tid 3623869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:09.540771 2026] [lsapi:warn] [pid 3630717:tid 3630717] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:15:09.599777 2026] [ssl:error] [pid 3623869:tid 3623869] (EAI 2)Name or service not known: [client 144.76.19.72:36964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:09.599807 2026] [ssl:error] [pid 3623869:tid 3623869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:10.217163 2026] [security2:error] [pid 3630680:tid 3630680] [client 185.191.171.15:38610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/birch-hill-wedding-venue-fairbanks"] [unique_id "amtcblYoTSWZ2kB0KKcIdwAAAAY"]
[Thu Jul 30 15:15:10.548870 2026] [ssl:error] [pid 3632074:tid 3632074] (70014)End of file found: [client 216.73.216.199:52903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:11.143675 2026] [ssl:error] [pid 3636746:tid 3636746] (70014)End of file found: [client 216.73.216.199:4481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:11.211783 2026] [security2:error] [pid 3635138:tid 3635138] [client 43.166.130.123:46908] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amtcbyxLsBAlIFi-WddqnQAAAC8"]
[Thu Jul 30 15:15:11.216182 2026] [security2:error] [pid 3632105:tid 3632105] [client 43.152.72.190:60273] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,94.0.html"] [unique_id "amtcb4LH8ucX2O72AA5lawAAACI"]
[Thu Jul 30 15:15:11.216235 2026] [security2:error] [pid 3632105:tid 3632105] [client 43.152.72.190:60273] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,94.0.html"] [unique_id "amtcb4LH8ucX2O72AA5lawAAACI"]
[Thu Jul 30 15:15:11.216478 2026] [security2:error] [pid 3632105:tid 3632105] [client 43.152.72.190:60273] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcb4LH8ucX2O72AA5lawAAACI"]
[Thu Jul 30 15:15:12.329540 2026] [access_compat:error] [pid 3635086:tid 3635086] [client 64.180.68.231:58353] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:12.419393 2026] [security2:error] [pid 3628425:tid 3628425] [client 43.166.130.123:47566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/index.html"] [unique_id "amtccCuMPTZc0MDkhTlOiQAAACs"], referer: http://shelterprojects.org
[Thu Jul 30 15:15:12.669006 2026] [ssl:error] [pid 3630649:tid 3630649] (EAI 2)Name or service not known: [client 144.76.19.72:36980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:12.669044 2026] [ssl:error] [pid 3630649:tid 3630649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:12.722032 2026] [ssl:error] [pid 3632530:tid 3632530] (EAI 2)Name or service not known: [client 144.76.19.72:36986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:12.722085 2026] [ssl:error] [pid 3632530:tid 3632530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:15.542031 2026] [security2:error] [pid 3620265:tid 3620265] [client 43.152.72.190:31469] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,94.0.html"] [unique_id "amtcc1Wm-sHKXX8O2djy4gAAAEk"]
[Thu Jul 30 15:15:15.542102 2026] [security2:error] [pid 3620265:tid 3620265] [client 43.152.72.190:31469] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,94.0.html"] [unique_id "amtcc1Wm-sHKXX8O2djy4gAAAEk"]
[Thu Jul 30 15:15:15.542366 2026] [security2:error] [pid 3620265:tid 3620265] [client 43.152.72.190:31469] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcc1Wm-sHKXX8O2djy4gAAAEk"]
[Thu Jul 30 15:15:15.780547 2026] [ssl:error] [pid 3637830:tid 3637830] (EAI 2)Name or service not known: [client 144.76.19.72:37000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:15.780578 2026] [ssl:error] [pid 3637830:tid 3637830] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:15.832268 2026] [ssl:error] [pid 3637794:tid 3637794] (EAI 2)Name or service not known: [client 144.76.19.72:37002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:15.832299 2026] [ssl:error] [pid 3637794:tid 3637794] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:16.840643 2026] [access_compat:error] [pid 3620265:tid 3620265] [client 64.180.68.231:58596] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:16.937972 2026] [access_compat:error] [pid 3628274:tid 3628274] [client 45.158.164.139:37318] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:15:17.512519 2026] [security2:error] [pid 3633530:tid 3633530] [client 49.51.166.228:54336] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "soul-connections.net"] [uri "/"] [unique_id "amtcdeD2zmZhke44DzHVbAAAACo"]
[Thu Jul 30 15:15:17.635846 2026] [ssl:error] [pid 3632808:tid 3632808] (70014)End of file found: [client 216.73.216.199:54590] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:18.398934 2026] [ssl:error] [pid 3635138:tid 3635138] (70014)End of file found: [client 216.73.216.199:39680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:18.887960 2026] [ssl:error] [pid 3630649:tid 3630649] (EAI 2)Name or service not known: [client 144.76.19.72:37010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:18.887992 2026] [ssl:error] [pid 3630649:tid 3630649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:18.940286 2026] [ssl:error] [pid 3636745:tid 3636745] (EAI 2)Name or service not known: [client 144.76.19.72:37012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:18.940328 2026] [ssl:error] [pid 3636745:tid 3636745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:19.455916 2026] [ssl:error] [pid 3633530:tid 3633530] (70014)End of file found: [client 216.73.216.199:28044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:20.491004 2026] [authz_core:error] [pid 3632531:tid 3632531] [client 66.249.66.33:57068] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:15:20.493666 2026] [authz_core:error] [pid 3632531:tid 3632531] [client 66.249.66.33:57068] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:15:22.027895 2026] [ssl:error] [pid 3632106:tid 3632106] (EAI 2)Name or service not known: [client 144.76.19.72:53402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:22.027932 2026] [ssl:error] [pid 3632106:tid 3632106] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:22.081123 2026] [ssl:error] [pid 3632807:tid 3632807] (EAI 2)Name or service not known: [client 144.76.19.72:53414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:22.081165 2026] [ssl:error] [pid 3632807:tid 3632807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:22.825135 2026] [security2:error] [pid 3635137:tid 3635137] [client 110.42.208.131:53992] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amtcevQboI5hPb5FdaHiMwAAAC4"]
[Thu Jul 30 15:15:22.982597 2026] [access_compat:error] [pid 3637829:tid 3637829] [client 64.180.68.231:58921] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:23.846175 2026] [security2:error] [pid 3623869:tid 3623869] [client 20.63.98.115:25049] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kinesiology-london.com"] [uri "/wp-config.php"] [unique_id "amtce4KcJjLQnp_B8uFZeAAAABE"]
[Thu Jul 30 15:15:23.846378 2026] [security2:error] [pid 3623869:tid 3623869] [client 20.63.98.115:25049] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiology-london.com"] [uri "/wp-config.php"] [unique_id "amtce4KcJjLQnp_B8uFZeAAAABE"]
[Thu Jul 30 15:15:23.846578 2026] [security2:error] [pid 3623869:tid 3623869] [client 20.63.98.115:25049] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kinesiology-london.com"] [uri "/403.shtml"] [unique_id "amtce4KcJjLQnp_B8uFZeAAAABE"]
[Thu Jul 30 15:15:24.332237 2026] [ssl:error] [pid 3632106:tid 3632106] (70014)End of file found: [client 216.73.216.199:44611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:24.947806 2026] [security2:error] [pid 3632530:tid 3632530] [client 216.73.216.199:42068] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cldeploy.log"] [unique_id "amtcfAxJ6Ijf2ZL6vgkvrAAAAAo"]
[Thu Jul 30 15:15:24.948358 2026] [security2:error] [pid 3632530:tid 3632530] [client 216.73.216.199:42068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cldeploy.log"] [unique_id "amtcfAxJ6Ijf2ZL6vgkvrAAAAAo"]
[Thu Jul 30 15:15:24.948589 2026] [security2:error] [pid 3632530:tid 3632530] [client 216.73.216.199:42068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/cldeploy.log"] [unique_id "amtcfAxJ6Ijf2ZL6vgkvrAAAAAo"]
[Thu Jul 30 15:15:24.984444 2026] [access_compat:error] [pid 3620189:tid 3620189] [client 93.152.224.221:49429] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/version.php
[Thu Jul 30 15:15:25.139271 2026] [ssl:error] [pid 3632105:tid 3632105] (EAI 2)Name or service not known: [client 144.76.19.72:53430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:25.139316 2026] [ssl:error] [pid 3632105:tid 3632105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:25.190709 2026] [ssl:error] [pid 3633530:tid 3633530] (EAI 2)Name or service not known: [client 144.76.19.72:53440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:25.190742 2026] [ssl:error] [pid 3633530:tid 3633530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:25.827003 2026] [ssl:error] [pid 3636746:tid 3636746] (70014)End of file found: [client 216.73.216.199:46705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:27.064404 2026] [ssl:error] [pid 3632530:tid 3632530] (70014)End of file found: [client 216.73.216.199:42068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:27.314730 2026] [access_compat:error] [pid 3635137:tid 3635137] [client 64.180.68.231:59152] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:27.800098 2026] [access_compat:error] [pid 3590353:tid 3590353] [client 45.158.164.139:41626] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:15:28.244146 2026] [ssl:error] [pid 3632500:tid 3632500] (EAI 2)Name or service not known: [client 144.76.19.72:53462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:28.244173 2026] [ssl:error] [pid 3632500:tid 3632500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:28.252555 2026] [security2:error] [pid 3628274:tid 3628274] [client 110.42.208.131:60890] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amtcgCODJnEODwVzgs0GpQAAAD8"], referer: http://www.hazardous-materials.co.uk
[Thu Jul 30 15:15:28.297477 2026] [ssl:error] [pid 3630716:tid 3630716] (EAI 2)Name or service not known: [client 144.76.19.72:53466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:28.297530 2026] [ssl:error] [pid 3630716:tid 3630716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:30.078992 2026] [ssl:error] [pid 3620189:tid 3620189] (70014)End of file found: [client 216.73.216.199:1295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:31.163138 2026] [ssl:error] [pid 3628273:tid 3628273] (70014)End of file found: [client 216.73.216.199:15485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:31.356027 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:18158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:31.356054 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:31.408693 2026] [ssl:error] [pid 3636746:tid 3636746] (EAI 2)Name or service not known: [client 144.76.19.72:18170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:31.408720 2026] [ssl:error] [pid 3636746:tid 3636746] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:32.377058 2026] [ssl:error] [pid 3638672:tid 3638672] (70014)End of file found: [client 216.73.216.199:51671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:34.460339 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:18176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:34.460375 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:34.516301 2026] [ssl:error] [pid 3635137:tid 3635137] (EAI 2)Name or service not known: [client 144.76.19.72:18186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:34.516345 2026] [ssl:error] [pid 3635137:tid 3635137] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:35.159591 2026] [core:error] [pid 3632806:tid 3632806] [client 66.249.66.45:56438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:15:35.159620 2026] [core:error] [pid 3632806:tid 3632806] [client 66.249.66.45:56438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:15:35.411025 2026] [cgi:error] [pid 3633659:tid 3633659] [client 216.73.216.199:1687] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/ssl_diff.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 15:15:35.411086 2026] [cgi:error] [pid 3633659:tid 3633659] [client 216.73.216.199:1687] End of script output before headers: ssl_diff.pl
[Thu Jul 30 15:15:36.727085 2026] [ssl:error] [pid 3632500:tid 3632500] (70014)End of file found: [client 216.73.216.199:31019] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:37.223921 2026] [ssl:error] [pid 3638671:tid 3638671] (70014)End of file found: [client 216.73.216.199:58149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:37.573628 2026] [ssl:error] [pid 3635085:tid 3635085] (EAI 2)Name or service not known: [client 144.76.19.72:18188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:37.573663 2026] [ssl:error] [pid 3635085:tid 3635085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:37.628258 2026] [ssl:error] [pid 3626492:tid 3626492] (EAI 2)Name or service not known: [client 144.76.19.72:18192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:37.628293 2026] [ssl:error] [pid 3626492:tid 3626492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:37.658912 2026] [authz_core:error] [pid 3628273:tid 3628273] [client 66.249.66.34:55669] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:15:37.661585 2026] [authz_core:error] [pid 3628273:tid 3628273] [client 66.249.66.34:55669] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:15:37.857245 2026] [ssl:error] [pid 3609915:tid 3609915] (70014)End of file found: [client 216.73.216.199:17110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:37.863592 2026] [access_compat:error] [pid 3590353:tid 3590353] [client 64.180.68.231:59704] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:40.684037 2026] [ssl:error] [pid 3638670:tid 3638670] (EAI 2)Name or service not known: [client 144.76.19.72:61428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:40.684092 2026] [ssl:error] [pid 3638670:tid 3638670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:40.740513 2026] [ssl:error] [pid 3628283:tid 3628283] (EAI 2)Name or service not known: [client 144.76.19.72:61432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:40.740540 2026] [ssl:error] [pid 3628283:tid 3628283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:43.666299 2026] [ssl:error] [pid 3628278:tid 3628278] (70014)End of file found: [client 216.73.216.199:53782] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:43.795292 2026] [ssl:error] [pid 3632500:tid 3632500] (EAI 2)Name or service not known: [client 144.76.19.72:61440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:43.795318 2026] [ssl:error] [pid 3632500:tid 3632500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:43.846600 2026] [ssl:error] [pid 3609915:tid 3609915] (EAI 2)Name or service not known: [client 144.76.19.72:61446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:43.846627 2026] [ssl:error] [pid 3609915:tid 3609915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:44.050550 2026] [access_compat:error] [pid 3624888:tid 3624888] [client 64.180.68.231:60023] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:44.567251 2026] [ssl:error] [pid 3590353:tid 3590353] (70014)End of file found: [client 216.73.216.199:34472] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:44.720665 2026] [security2:error] [pid 3623869:tid 3623869] [client 175.27.136.83:36842] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.abc-dyslexia.com"] [uri "/"] [unique_id "amtckIKcJjLQnp_B8uFZsgAAABE"]
[Thu Jul 30 15:15:44.966218 2026] [security2:error] [pid 3632500:tid 3632500] [client 43.164.190.124:43686] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amtckGgaK5vMmBP89l1AZwAAAAQ"]
[Thu Jul 30 15:15:45.771524 2026] [ssl:error] [pid 3638638:tid 3638638] (70014)End of file found: [client 216.73.216.199:9764] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:46.666320 2026] [ssl:error] [pid 3638672:tid 3638672] (70014)End of file found: [client 216.73.216.199:17121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:46.972920 2026] [ssl:error] [pid 3632808:tid 3632808] (EAI 2)Name or service not known: [client 144.76.19.72:61448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:46.972953 2026] [ssl:error] [pid 3632808:tid 3632808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:47.029983 2026] [ssl:error] [pid 3632808:tid 3632808] (EAI 2)Name or service not known: [client 144.76.19.72:61454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:47.030009 2026] [ssl:error] [pid 3632808:tid 3632808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:47.374093 2026] [core:error] [pid 3638671:tid 3638671] (13)Permission denied: [client 216.73.216.199:32612] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/cache_dma
[Thu Jul 30 15:15:48.436780 2026] [access_compat:error] [pid 3632500:tid 3632500] [client 64.180.68.231:60254] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:48.878693 2026] [ssl:error] [pid 3638671:tid 3638671] (70014)End of file found: [client 216.73.216.199:32612] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:49.185191 2026] [ssl:error] [pid 3639428:tid 3639428] (70014)End of file found: [client 216.73.216.199:58626] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:50.005801 2026] [security2:error] [pid 3638670:tid 3638670] [client 74.7.227.175:39964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiology-london.com.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtclvZwg8_muW6Ld0MEAAAAAA0"]
[Thu Jul 30 15:15:50.108135 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:43718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:50.108177 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:50.176793 2026] [ssl:error] [pid 3623869:tid 3623869] (EAI 2)Name or service not known: [client 144.76.19.72:43726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:50.176821 2026] [ssl:error] [pid 3623869:tid 3623869] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:51.639080 2026] [access_compat:error] [pid 3628283:tid 3628283] [client 112.209.180.50:15271] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:53.108423 2026] [ssl:error] [pid 3639605:tid 3639605] (70014)End of file found: [client 216.73.216.199:40946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:53.232939 2026] [ssl:error] [pid 3638638:tid 3638638] (EAI 2)Name or service not known: [client 144.76.19.72:43736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:53.232967 2026] [ssl:error] [pid 3638638:tid 3638638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:53.291956 2026] [ssl:error] [pid 3635085:tid 3635085] (EAI 2)Name or service not known: [client 144.76.19.72:43746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:53.291988 2026] [ssl:error] [pid 3635085:tid 3635085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:54.499694 2026] [ssl:error] [pid 3626492:tid 3626492] (70014)End of file found: [client 216.73.216.199:57860] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:54.809840 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:49972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:15:56.345029 2026] [ssl:error] [pid 3638984:tid 3638984] (EAI 2)Name or service not known: [client 144.76.19.72:43762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:56.345059 2026] [ssl:error] [pid 3638984:tid 3638984] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:56.397558 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:43770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:56.397586 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:56.851214 2026] [security2:error] [pid 3639428:tid 3639428] [client 49.51.39.209:35556] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclereracing.com"] [uri "/"] [unique_id "amtcnJdYNRwiqZ14I6dkrAAAABs"]
[Thu Jul 30 15:15:57.173976 2026] [security2:error] [pid 3632105:tid 3632105] [client 20.63.98.115:25224] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "kinesiology-london.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtcnYLH8ucX2O72AA5lxQAAACI"]
[Thu Jul 30 15:15:57.174180 2026] [security2:error] [pid 3632105:tid 3632105] [client 20.63.98.115:25224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiology-london.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtcnYLH8ucX2O72AA5lxQAAACI"]
[Thu Jul 30 15:15:57.174365 2026] [security2:error] [pid 3632105:tid 3632105] [client 20.63.98.115:25224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "kinesiology-london.com"] [uri "/403.shtml"] [unique_id "amtcnYLH8ucX2O72AA5lxQAAACI"]
[Thu Jul 30 15:15:57.256841 2026] [security2:error] [pid 3639602:tid 3639602] [client 129.204.188.64:47674] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.martingriese.com"] [uri "/"] [unique_id "amtcnSM789E1qbCMMufUVwAAADA"]
[Thu Jul 30 15:15:58.540957 2026] [access_compat:error] [pid 3620189:tid 3620189] [client 112.209.180.50:15570] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:58.639387 2026] [security2:error] [pid 3628283:tid 3628283] [client 52.54.157.23:37283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/competitions/form/"] [unique_id "amtcnq5JUIJdAVwOjt12eQAAAEc"]
[Thu Jul 30 15:15:59.031700 2026] [access_compat:error] [pid 3628196:tid 3628196] [client 64.180.68.231:60802] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:15:59.191209 2026] [security2:error] [pid 3639602:tid 3639602] [client 52.200.58.199:64703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/editions.html"] [unique_id "amtcnyM789E1qbCMMufUWQAAADA"]
[Thu Jul 30 15:15:59.452628 2026] [ssl:error] [pid 3628283:tid 3628283] (EAI 2)Name or service not known: [client 144.76.19.72:43772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:59.452657 2026] [ssl:error] [pid 3628283:tid 3628283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:15:59.497142 2026] [security2:error] [pid 3630650:tid 3630650] [client 80.94.92.167:56642] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "highbrightness.com"] [uri "/.svn/wc.db"] [unique_id "amtcn27VEh6HyRAjmf9adwAAAAM"]
[Thu Jul 30 15:15:59.497301 2026] [security2:error] [pid 3630650:tid 3630650] [client 80.94.92.167:56642] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "highbrightness.com"] [uri "/.svn/wc.db"] [unique_id "amtcn27VEh6HyRAjmf9adwAAAAM"]
[Thu Jul 30 15:15:59.497494 2026] [security2:error] [pid 3630650:tid 3630650] [client 80.94.92.167:56642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "highbrightness.com"] [uri "/.svn/wc.db"] [unique_id "amtcn27VEh6HyRAjmf9adwAAAAM"]
[Thu Jul 30 15:15:59.497728 2026] [security2:error] [pid 3630650:tid 3630650] [client 80.94.92.167:56642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "highbrightness.com"] [uri "/.svn/wc.db"] [unique_id "amtcn27VEh6HyRAjmf9adwAAAAM"]
[Thu Jul 30 15:15:59.506989 2026] [ssl:error] [pid 3632808:tid 3632808] (EAI 2)Name or service not known: [client 144.76.19.72:43776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:15:59.507018 2026] [ssl:error] [pid 3632808:tid 3632808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:00.936408 2026] [ssl:error] [pid 3639532:tid 3639532] (70014)End of file found: [client 216.73.216.199:50962] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:01.760684 2026] [security2:error] [pid 3639604:tid 3639604] [client 80.94.92.167:56640] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "highbrightness.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtcoT0k0nWKAN_WX0Z73AAAADM"]
[Thu Jul 30 15:16:01.760833 2026] [security2:error] [pid 3639604:tid 3639604] [client 80.94.92.167:56640] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "highbrightness.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtcoT0k0nWKAN_WX0Z73AAAADM"]
[Thu Jul 30 15:16:01.761005 2026] [security2:error] [pid 3639604:tid 3639604] [client 80.94.92.167:56640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "highbrightness.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtcoT0k0nWKAN_WX0Z73AAAADM"]
[Thu Jul 30 15:16:01.839215 2026] [ssl:error] [pid 3639602:tid 3639602] (70014)End of file found: [client 216.73.216.199:11935] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:01.849642 2026] [access_compat:error] [pid 3632808:tid 3632808] [client 112.209.180.50:15732] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:02.131351 2026] [authz_core:error] [pid 3638608:tid 3638608] [client 66.249.66.35:43412] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:16:02.134088 2026] [authz_core:error] [pid 3638608:tid 3638608] [client 66.249.66.35:43412] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:16:02.270623 2026] [security2:error] [pid 3639604:tid 3639604] [client 80.94.92.167:56640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "highbrightness.co.uk"] [uri "/index.php"] [unique_id "amtcoT0k0nWKAN_WX0Z73AAAADM"]
[Thu Jul 30 15:16:02.564828 2026] [ssl:error] [pid 3609915:tid 3609915] (EAI 2)Name or service not known: [client 144.76.19.72:34448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:02.564859 2026] [ssl:error] [pid 3609915:tid 3609915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:02.622274 2026] [ssl:error] [pid 3639604:tid 3639604] (EAI 2)Name or service not known: [client 144.76.19.72:34450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:02.622300 2026] [ssl:error] [pid 3639604:tid 3639604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:02.740758 2026] [core:error] [pid 3639601:tid 3639601] (13)Permission denied: [client 216.73.216.199:30352] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/perf_event/cache_dma
[Thu Jul 30 15:16:02.993252 2026] [security2:error] [pid 3623534:tid 3623534] [client 114.119.142.20:58577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~15/request_format~html"] [unique_id "amtcorl7mZYEuFkCn__dZQAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/request_format~html/cat_ids~15
[Thu Jul 30 15:16:03.157982 2026] [lsapi:warn] [pid 3640242:tid 3640242] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:16:03.836900 2026] [security2:error] [pid 3628273:tid 3628273] [client 80.94.92.167:45132] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "highbrightness.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtcozxEZYxwF87O3av3ygAAAD4"]
[Thu Jul 30 15:16:03.837043 2026] [security2:error] [pid 3628273:tid 3628273] [client 80.94.92.167:45132] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "highbrightness.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtcozxEZYxwF87O3av3ygAAAD4"]
[Thu Jul 30 15:16:03.837240 2026] [security2:error] [pid 3628273:tid 3628273] [client 80.94.92.167:45132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "highbrightness.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtcozxEZYxwF87O3av3ygAAAD4"]
[Thu Jul 30 15:16:03.843661 2026] [security2:error] [pid 3628273:tid 3628273] [client 80.94.92.167:45132] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "highbrightness.co.uk"] [uri "/index.php"] [unique_id "amtcozxEZYxwF87O3av3ygAAAD4"]
[Thu Jul 30 15:16:03.863527 2026] [security2:error] [pid 3635086:tid 3635086] [client 52.1.157.90:13975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects9/A.17-Indonesia-SP9.pdf"] [unique_id "amtco0Q5EsZbDjpsAm0RdQAAABg"]
[Thu Jul 30 15:16:05.150310 2026] [ssl:error] [pid 3639601:tid 3639601] (70014)End of file found: [client 216.73.216.199:30352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:05.231474 2026] [security2:error] [pid 3639478:tid 3639478] [client 114.119.142.20:58593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~15/request_format~html"] [unique_id "amtcpY7Sp7r8e-kdqmZqZQAAAB8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/request_format~html/cat_ids~15
[Thu Jul 30 15:16:05.264680 2026] [access_compat:error] [pid 3630649:tid 3630649] [client 64.180.68.231:61119] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:05.680543 2026] [ssl:error] [pid 3635085:tid 3635085] (EAI 2)Name or service not known: [client 144.76.19.72:34452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:05.680570 2026] [ssl:error] [pid 3635085:tid 3635085] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:05.733943 2026] [ssl:error] [pid 3628196:tid 3628196] (EAI 2)Name or service not known: [client 144.76.19.72:34460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:05.733967 2026] [ssl:error] [pid 3628196:tid 3628196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:07.365576 2026] [security2:error] [pid 3620189:tid 3620189] [client 3.215.59.93:56940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects-compilations/Shelter-Projects-Urban-Booklet-2020.pdf"] [unique_id "amtcp7L-2BjVE145LlwOUgAAAB0"]
[Thu Jul 30 15:16:07.680767 2026] [access_compat:error] [pid 3632530:tid 3632530] [client 35.245.45.168:18099] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:16:07.680868 2026] [access_compat:error] [pid 3632530:tid 3632530] [client 35.245.45.168:18099] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:16:08.104046 2026] [security2:error] [pid 3639602:tid 3639602] [client 47.245.139.161:41227] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcqCM789E1qbCMMufUXAAAADA"]
[Thu Jul 30 15:16:08.104124 2026] [security2:error] [pid 3639602:tid 3639602] [client 47.245.139.161:41227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcqCM789E1qbCMMufUXAAAADA"]
[Thu Jul 30 15:16:08.104501 2026] [security2:error] [pid 3639602:tid 3639602] [client 47.245.139.161:41227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcqCM789E1qbCMMufUXAAAADA"]
[Thu Jul 30 15:16:08.567936 2026] [security2:error] [pid 3620189:tid 3620189] [client 54.210.152.179:57865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcqLL-2BjVE145LlwOUwAAAB0"]
[Thu Jul 30 15:16:08.785938 2026] [ssl:error] [pid 3632105:tid 3632105] (EAI 2)Name or service not known: [client 144.76.19.72:34462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:08.785969 2026] [ssl:error] [pid 3632105:tid 3632105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:08.839263 2026] [ssl:error] [pid 3638608:tid 3638608] (EAI 2)Name or service not known: [client 144.76.19.72:34468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:08.839295 2026] [ssl:error] [pid 3638608:tid 3638608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:09.593989 2026] [access_compat:error] [pid 3639530:tid 3639530] [client 64.180.68.231:61356] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:09.952873 2026] [security2:error] [pid 3628273:tid 3628273] [client 47.243.204.97:47637] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcqTxEZYxwF87O3av3zgAAAD4"]
[Thu Jul 30 15:16:09.952918 2026] [security2:error] [pid 3628273:tid 3628273] [client 47.243.204.97:47637] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcqTxEZYxwF87O3av3zgAAAD4"]
[Thu Jul 30 15:16:09.953174 2026] [security2:error] [pid 3628273:tid 3628273] [client 47.243.204.97:47637] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcqTxEZYxwF87O3av3zgAAAD4"]
[Thu Jul 30 15:16:10.873008 2026] [core:error] [pid 3638984:tid 3638984] (13)Permission denied: [client 216.73.216.199:53878] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/slabs
[Thu Jul 30 15:16:11.074210 2026] [security2:error] [pid 3635136:tid 3635136] [client 185.191.171.1:57882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/jon-husted-son"] [unique_id "amtcq2-krjUirYSvROZRHgAAAC0"]
[Thu Jul 30 15:16:11.222191 2026] [security2:error] [pid 3638671:tid 3638671] [client 54.204.12.115:20102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2015-2016/SP15-16_A22-Somalia-2011-2013.pdf"] [unique_id "amtcq9eX8ABwaAL-2EVi8wAAAA8"]
[Thu Jul 30 15:16:11.475863 2026] [ssl:error] [pid 3638984:tid 3638984] (70014)End of file found: [client 216.73.216.199:53878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:11.895205 2026] [ssl:error] [pid 3638671:tid 3638671] (EAI 2)Name or service not known: [client 144.76.19.72:26440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:11.895261 2026] [ssl:error] [pid 3638671:tid 3638671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:11.953333 2026] [ssl:error] [pid 3635230:tid 3635230] (EAI 2)Name or service not known: [client 144.76.19.72:26454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:11.953388 2026] [ssl:error] [pid 3635230:tid 3635230] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:12.086699 2026] [security2:error] [pid 3628283:tid 3628283] [client 114.119.142.12:36059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amtcrK5JUIJdAVwOjt12fwAAAEc"], referer: http://www.jonathanhill.co.uk/
[Thu Jul 30 15:16:12.343405 2026] [access_compat:error] [pid 3630716:tid 3630716] [client 112.209.180.50:16081] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:12.383762 2026] [core:error] [pid 3639597:tid 3639597] (13)Permission denied: [client 216.73.216.199:32430] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/usersize
[Thu Jul 30 15:16:13.053309 2026] [security2:error] [pid 3623869:tid 3623869] [client 167.114.139.248:30968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtcrYKcJjLQnp_B8uFZuwAAABE"]
[Thu Jul 30 15:16:13.396871 2026] [security2:error] [pid 3635136:tid 3635136] [client 47.243.204.97:28589] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcrW-krjUirYSvROZRIAAAAC0"]
[Thu Jul 30 15:16:13.396935 2026] [security2:error] [pid 3635136:tid 3635136] [client 47.243.204.97:28589] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcrW-krjUirYSvROZRIAAAAC0"]
[Thu Jul 30 15:16:13.397302 2026] [security2:error] [pid 3635136:tid 3635136] [client 47.243.204.97:28589] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcrW-krjUirYSvROZRIAAAAC0"]
[Thu Jul 30 15:16:15.008640 2026] [ssl:error] [pid 3632500:tid 3632500] (EAI 2)Name or service not known: [client 144.76.19.72:26470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:15.008689 2026] [ssl:error] [pid 3632500:tid 3632500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:15.086684 2026] [ssl:error] [pid 3636745:tid 3636745] (EAI 2)Name or service not known: [client 144.76.19.72:26482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:15.086732 2026] [ssl:error] [pid 3636745:tid 3636745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:15.398629 2026] [ssl:error] [pid 3632770:tid 3632770] (70014)End of file found: [client 216.73.216.199:32680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:15.711515 2026] [access_compat:error] [pid 3623869:tid 3623869] [client 64.180.68.231:61679] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:16.032214 2026] [access_compat:error] [pid 3630650:tid 3630650] [client 2.189.5.162:40576] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:16:16.197749 2026] [ssl:error] [pid 3639597:tid 3639597] (70014)End of file found: [client 216.73.216.199:32430] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:16.795929 2026] [core:error] [pid 3635086:tid 3635086] (13)Permission denied: [client 216.73.216.199:11146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCPv6/usersize
[Thu Jul 30 15:16:17.096923 2026] [ssl:error] [pid 3635086:tid 3635086] (70014)End of file found: [client 216.73.216.199:11146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:18.159173 2026] [ssl:error] [pid 3636745:tid 3636745] (EAI 2)Name or service not known: [client 144.76.19.72:26490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:18.159213 2026] [ssl:error] [pid 3636745:tid 3636745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:18.216685 2026] [ssl:error] [pid 3638670:tid 3638670] (EAI 2)Name or service not known: [client 144.76.19.72:26494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:18.216729 2026] [ssl:error] [pid 3638670:tid 3638670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:18.835084 2026] [access_compat:error] [pid 3628273:tid 3628273] [client 136.158.25.236:56099] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:20.160938 2026] [access_compat:error] [pid 3628278:tid 3628278] [client 64.180.68.231:61913] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:20.538583 2026] [authz_core:error] [pid 3639604:tid 3639604] [client 20.193.250.173:51014] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:16:20.904054 2026] [core:error] [pid 3632500:tid 3632500] (13)Permission denied: [client 216.73.216.199:5253] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/slab_common/uevent
[Thu Jul 30 15:16:21.270416 2026] [ssl:error] [pid 3630650:tid 3630650] (EAI 2)Name or service not known: [client 144.76.19.72:24302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:21.270440 2026] [ssl:error] [pid 3630650:tid 3630650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:21.311260 2026] [ssl:error] [pid 3632500:tid 3632500] (70014)End of file found: [client 216.73.216.199:5253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:21.322058 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:24310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:21.322099 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:22.684602 2026] [access_compat:error] [pid 3628274:tid 3628274] [client 136.158.25.236:56474] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:23.423090 2026] [core:error] [pid 3632770:tid 3632770] (13)Permission denied: [client 216.73.216.199:51170] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCP/store_user
[Thu Jul 30 15:16:24.027588 2026] [autoindex:error] [pid 3632770:tid 3632770] (13)Permission denied: [client 216.73.216.199:51170] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/cssystem/
[Thu Jul 30 15:16:24.375838 2026] [ssl:error] [pid 3640242:tid 3640242] (EAI 2)Name or service not known: [client 144.76.19.72:24314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:24.375869 2026] [ssl:error] [pid 3640242:tid 3640242] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:24.430881 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:24320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:24.430905 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:24.921912 2026] [authz_core:error] [pid 3623869:tid 3623869] [client 20.193.250.173:50255] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:16:26.135712 2026] [ssl:error] [pid 3630650:tid 3630650] (70014)End of file found: [client 216.73.216.199:48848] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:26.441800 2026] [ssl:error] [pid 3632770:tid 3632770] (5)Input/output error: [client 216.73.216.199:51170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:27.341275 2026] [ssl:error] [pid 3628273:tid 3628273] (70014)End of file found: [client 216.73.216.199:16466] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:27.486567 2026] [ssl:error] [pid 3609915:tid 3609915] (EAI 2)Name or service not known: [client 144.76.19.72:24324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:27.486599 2026] [ssl:error] [pid 3609915:tid 3609915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:27.544335 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:24326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:27.544362 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:28.225104 2026] [access_compat:error] [pid 3624888:tid 3624888] [client 45.158.164.139:47864] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:16:28.965590 2026] [access_compat:error] [pid 3623141:tid 3623141] [client 136.158.25.236:57103] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:29.120814 2026] [security2:error] [pid 3624888:tid 3624888] [client 129.211.172.249:60302] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.com"] [uri "/"] [unique_id "amtcvUnJdvsS4POI5_z57AAAABo"]
[Thu Jul 30 15:16:29.471243 2026] [access_compat:error] [pid 3638670:tid 3638670] [client 45.158.164.139:47884] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:16:30.117669 2026] [authz_core:error] [pid 3639602:tid 3639602] [client 20.193.250.173:53529] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 15:16:30.602532 2026] [ssl:error] [pid 3641275:tid 3641275] (EAI 2)Name or service not known: [client 144.76.19.72:63944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:30.602573 2026] [ssl:error] [pid 3641275:tid 3641275] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:30.660554 2026] [ssl:error] [pid 3641221:tid 3641221] (EAI 2)Name or service not known: [client 144.76.19.72:63954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:30.660583 2026] [ssl:error] [pid 3641221:tid 3641221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:30.699187 2026] [access_compat:error] [pid 3638671:tid 3638671] [client 64.180.68.231:62490] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:31.584524 2026] [ssl:error] [pid 3630716:tid 3630716] (70014)End of file found: [client 216.73.216.199:33574] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:33.171027 2026] [access_compat:error] [pid 3626492:tid 3626492] [client 136.158.25.236:57564] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:33.757774 2026] [ssl:error] [pid 3632770:tid 3632770] (EAI 2)Name or service not known: [client 144.76.19.72:63970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:33.757804 2026] [ssl:error] [pid 3632770:tid 3632770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:33.811344 2026] [ssl:error] [pid 3639604:tid 3639604] (EAI 2)Name or service not known: [client 144.76.19.72:63980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:33.811369 2026] [ssl:error] [pid 3639604:tid 3639604] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:33.994157 2026] [core:error] [pid 3641221:tid 3641221] (13)Permission denied: [client 216.73.216.199:35619] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/system_needs_reboot.cache
[Thu Jul 30 15:16:34.295157 2026] [ssl:error] [pid 3641221:tid 3641221] (70014)End of file found: [client 216.73.216.199:35619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:36.190499 2026] [core:error] [pid 3641813:tid 3641813] [client 66.249.66.8:44882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:16:36.190544 2026] [core:error] [pid 3641813:tid 3641813] [client 66.249.66.8:44882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:16:36.434305 2026] [authz_core:error] [pid 3609915:tid 3609915] [client 20.193.250.173:49791] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 15:16:36.710840 2026] [ssl:error] [pid 3640242:tid 3640242] (70014)End of file found: [client 216.73.216.199:24043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:36.863300 2026] [ssl:error] [pid 3632530:tid 3632530] (EAI 2)Name or service not known: [client 144.76.19.72:63986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:36.863328 2026] [ssl:error] [pid 3632530:tid 3632530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:36.919471 2026] [ssl:error] [pid 3632530:tid 3632530] (EAI 2)Name or service not known: [client 144.76.19.72:63992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:36.919497 2026] [ssl:error] [pid 3632530:tid 3632530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:36.959997 2026] [security2:error] [pid 3635086:tid 3635086] [client 129.211.172.249:54050] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtcxEQ5EsZbDjpsAm0RfQAAABg"], referer: http://www.spampmusic.com
[Thu Jul 30 15:16:37.097191 2026] [access_compat:error] [pid 3630716:tid 3630716] [client 64.180.68.231:62816] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:38.220009 2026] [ssl:error] [pid 3641917:tid 3641917] (70014)End of file found: [client 216.73.216.199:22806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:39.975451 2026] [ssl:error] [pid 3642039:tid 3642039] (EAI 2)Name or service not known: [client 144.76.19.72:46926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:39.975502 2026] [ssl:error] [pid 3642039:tid 3642039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:40.030174 2026] [ssl:error] [pid 3642040:tid 3642040] (EAI 2)Name or service not known: [client 144.76.19.72:46936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:40.030209 2026] [ssl:error] [pid 3642040:tid 3642040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:41.287333 2026] [access_compat:error] [pid 3642039:tid 3642039] [client 64.180.68.231:63042] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:41.533735 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:58162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:42.013161 2026] [security2:error] [pid 3623141:tid 3623141] [client 20.171.55.167:2677] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtcys58amwCVUqNOpCjAgAAAAc"]
[Thu Jul 30 15:16:42.013381 2026] [security2:error] [pid 3623141:tid 3623141] [client 20.171.55.167:2677] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtcys58amwCVUqNOpCjAgAAAAc"]
[Thu Jul 30 15:16:42.204753 2026] [security2:error] [pid 3623141:tid 3623141] [client 20.171.55.167:2677] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/index.php"] [unique_id "amtcys58amwCVUqNOpCjAgAAAAc"]
[Thu Jul 30 15:16:42.431053 2026] [ssl:error] [pid 3641275:tid 3641275] (70014)End of file found: [client 216.73.216.199:58828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:42.727668 2026] [security2:error] [pid 3639601:tid 3639601] [client 43.110.36.229:50319] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcypHjeHxKKe2dPUANVAAAAC8"]
[Thu Jul 30 15:16:42.727716 2026] [security2:error] [pid 3639601:tid 3639601] [client 43.110.36.229:50319] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcypHjeHxKKe2dPUANVAAAAC8"]
[Thu Jul 30 15:16:42.727969 2026] [security2:error] [pid 3639601:tid 3639601] [client 43.110.36.229:50319] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcypHjeHxKKe2dPUANVAAAAC8"]
[Thu Jul 30 15:16:43.088342 2026] [ssl:error] [pid 3637829:tid 3637829] (EAI 2)Name or service not known: [client 144.76.19.72:46948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:43.088413 2026] [ssl:error] [pid 3637829:tid 3637829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:43.141868 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:46956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:43.141897 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:43.828094 2026] [security2:error] [pid 3640242:tid 3640242] [client 88.185.218.135:41352] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcyx3XX3vsklunvwxPAgAAABQ"]
[Thu Jul 30 15:16:43.828149 2026] [security2:error] [pid 3640242:tid 3640242] [client 88.185.218.135:41352] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtcyx3XX3vsklunvwxPAgAAABQ"]
[Thu Jul 30 15:16:43.828517 2026] [security2:error] [pid 3640242:tid 3640242] [client 88.185.218.135:41352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtcyx3XX3vsklunvwxPAgAAABQ"]
[Thu Jul 30 15:16:43.869942 2026] [access_compat:error] [pid 3626192:tid 3626192] [client 136.158.25.236:58473] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:44.338838 2026] [security2:error] [pid 3642045:tid 3642045] [client 43.134.100.175:45376] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "nigelmassey.com"] [uri "/"] [unique_id "amtczI9h4TrMEzokTjvyqgAAAC4"]
[Thu Jul 30 15:16:44.562510 2026] [security2:error] [pid 3639477:tid 3639477] [client 45.148.10.120:42084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.perish.freakorgeek.com"] [uri "/.env"] [unique_id "amtczGV6JPx8x8aJSYtzKAAAABM"]
[Thu Jul 30 15:16:44.562673 2026] [security2:error] [pid 3639477:tid 3639477] [client 45.148.10.120:42084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.perish.freakorgeek.com"] [uri "/.env"] [unique_id "amtczGV6JPx8x8aJSYtzKAAAABM"]
[Thu Jul 30 15:16:44.562843 2026] [security2:error] [pid 3639477:tid 3639477] [client 45.148.10.120:42084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.perish.freakorgeek.com"] [uri "/.env"] [unique_id "amtczGV6JPx8x8aJSYtzKAAAABM"]
[Thu Jul 30 15:16:45.448965 2026] [ssl:error] [pid 3639601:tid 3639601] (70014)End of file found: [client 216.73.216.199:48986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:46.197010 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:46966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:46.197042 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:46.250133 2026] [ssl:error] [pid 3641813:tid 3641813] (EAI 2)Name or service not known: [client 144.76.19.72:46970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:46.250165 2026] [ssl:error] [pid 3641813:tid 3641813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:46.621659 2026] [security2:error] [pid 3628273:tid 3628273] [client 118.70.54.248:6554] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtczjxEZYxwF87O3av33wAAAD4"]
[Thu Jul 30 15:16:46.621708 2026] [security2:error] [pid 3628273:tid 3628273] [client 118.70.54.248:6554] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtczjxEZYxwF87O3av33wAAAD4"]
[Thu Jul 30 15:16:46.621959 2026] [security2:error] [pid 3628273:tid 3628273] [client 118.70.54.248:6554] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtczjxEZYxwF87O3av33wAAAD4"]
[Thu Jul 30 15:16:47.441891 2026] [access_compat:error] [pid 3633530:tid 3633530] [client 64.180.68.231:63357] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:49.073265 2026] [security2:error] [pid 3642045:tid 3642045] [client 216.73.216.199:48896] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/mariadb.conf"] [unique_id "amtc0Y9h4TrMEzokTjvyrwAAAC4"]
[Thu Jul 30 15:16:49.073703 2026] [security2:error] [pid 3642045:tid 3642045] [client 216.73.216.199:48896] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/mariadb.conf"] [unique_id "amtc0Y9h4TrMEzokTjvyrwAAAC4"]
[Thu Jul 30 15:16:49.074018 2026] [security2:error] [pid 3642045:tid 3642045] [client 216.73.216.199:48896] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/mariadb.conf"] [unique_id "amtc0Y9h4TrMEzokTjvyrwAAAC4"]
[Thu Jul 30 15:16:49.302547 2026] [ssl:error] [pid 3630716:tid 3630716] (EAI 2)Name or service not known: [client 144.76.19.72:46986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:49.302603 2026] [ssl:error] [pid 3630716:tid 3630716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:49.354556 2026] [ssl:error] [pid 3630721:tid 3630721] (EAI 2)Name or service not known: [client 144.76.19.72:46990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:49.354591 2026] [ssl:error] [pid 3630721:tid 3630721] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:49.677343 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:8379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:50.097476 2026] [lsapi:warn] [pid 3636745:tid 3636745] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:16:50.352924 2026] [access_compat:error] [pid 3639477:tid 3639477] [client 112.209.180.50:17272] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:50.581839 2026] [ssl:error] [pid 3642045:tid 3642045] (70014)End of file found: [client 216.73.216.199:48896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:51.085194 2026] [ssl:error] [pid 3630721:tid 3630721] (70014)End of file found: [client 216.73.216.199:40679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:51.856910 2026] [access_compat:error] [pid 3632770:tid 3632770] [client 64.180.68.231:63601] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:52.410826 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:35972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:52.410863 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:52.468544 2026] [ssl:error] [pid 3642039:tid 3642039] (EAI 2)Name or service not known: [client 144.76.19.72:35974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:52.468577 2026] [ssl:error] [pid 3642039:tid 3642039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:54.181803 2026] [access_compat:error] [pid 3642044:tid 3642044] [client 136.158.25.236:59332] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:16:54.596457 2026] [lsapi:warn] [pid 3642825:tid 3642825] [client 45.158.164.139:60184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:16:54.596500 2026] [lsapi:warn] [pid 3642825:tid 3642825] [client 45.158.164.139:60184] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:16:55.405495 2026] [ssl:error] [pid 3642825:tid 3642825] (70014)End of file found: [client 216.73.216.199:33770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:55.582214 2026] [ssl:error] [pid 3632530:tid 3632530] (EAI 2)Name or service not known: [client 144.76.19.72:35978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:55.582244 2026] [ssl:error] [pid 3632530:tid 3632530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:55.633501 2026] [ssl:error] [pid 3632530:tid 3632530] (EAI 2)Name or service not known: [client 144.76.19.72:35982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:55.633549 2026] [ssl:error] [pid 3632530:tid 3632530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:56.305576 2026] [ssl:error] [pid 3642045:tid 3642045] (70014)End of file found: [client 216.73.216.199:33293] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:16:58.688796 2026] [ssl:error] [pid 3632770:tid 3632770] (EAI 2)Name or service not known: [client 144.76.19.72:35998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:58.688848 2026] [ssl:error] [pid 3632770:tid 3632770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:16:58.747798 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:36010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:16:58.747833 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:00.414545 2026] [access_compat:error] [pid 3623141:tid 3623141] [client 136.158.25.236:59784] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:01.421931 2026] [ssl:error] [pid 3630721:tid 3630721] (70014)End of file found: [client 216.73.216.199:46049] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:01.817691 2026] [ssl:error] [pid 3632808:tid 3632808] (EAI 2)Name or service not known: [client 144.76.19.72:42928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:01.817748 2026] [ssl:error] [pid 3632808:tid 3632808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:01.875279 2026] [ssl:error] [pid 3626492:tid 3626492] (EAI 2)Name or service not known: [client 144.76.19.72:42938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:01.875306 2026] [ssl:error] [pid 3626492:tid 3626492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:02.378749 2026] [access_compat:error] [pid 3641972:tid 3641972] [client 64.180.68.231:64299] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:04.825461 2026] [access_compat:error] [pid 3626123:tid 3626123] [client 112.209.180.50:13780] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:04.963892 2026] [ssl:error] [pid 3639530:tid 3639530] (EAI 2)Name or service not known: [client 144.76.19.72:42950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:04.963945 2026] [ssl:error] [pid 3639530:tid 3639530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:05.017682 2026] [ssl:error] [pid 3642047:tid 3642047] (EAI 2)Name or service not known: [client 144.76.19.72:42958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:05.017710 2026] [ssl:error] [pid 3642047:tid 3642047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:06.357953 2026] [core:error] [pid 3642047:tid 3642047] (13)Permission denied: [client 216.73.216.199:45338] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/thermal/uevent
[Thu Jul 30 15:17:06.960376 2026] [ssl:error] [pid 3642047:tid 3642047] (70014)End of file found: [client 216.73.216.199:45338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:07.265205 2026] [core:error] [pid 3642040:tid 3642040] (13)Permission denied: [client 216.73.216.199:38828] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/cache_dma
[Thu Jul 30 15:17:07.569420 2026] [ssl:error] [pid 3642040:tid 3642040] (70014)End of file found: [client 216.73.216.199:38828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:08.065135 2026] [core:error] [pid 3639602:tid 3639602] (13)Permission denied: [client 216.73.216.199:51085] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-4k/align
[Thu Jul 30 15:17:08.110850 2026] [ssl:error] [pid 3635086:tid 3635086] (EAI 2)Name or service not known: [client 144.76.19.72:42974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:08.110894 2026] [ssl:error] [pid 3635086:tid 3635086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:08.166019 2026] [ssl:error] [pid 3632500:tid 3632500] (EAI 2)Name or service not known: [client 144.76.19.72:42990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:08.166050 2026] [ssl:error] [pid 3632500:tid 3632500] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:08.535339 2026] [access_compat:error] [pid 3632770:tid 3632770] [client 64.180.68.231:64673] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:09.519173 2026] [security2:error] [pid 3643327:tid 3643327] [client 103.244.93.154:46756] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtc5RRNChmUhqyo8eBqpgAAAAY"]
[Thu Jul 30 15:17:09.519256 2026] [security2:error] [pid 3643327:tid 3643327] [client 103.244.93.154:46756] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtc5RRNChmUhqyo8eBqpgAAAAY"]
[Thu Jul 30 15:17:09.519620 2026] [security2:error] [pid 3643327:tid 3643327] [client 103.244.93.154:46756] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtc5RRNChmUhqyo8eBqpgAAAAY"]
[Thu Jul 30 15:17:09.848732 2026] [security2:error] [pid 3626492:tid 3626492] [client 43.156.37.91:50196] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "curvmed.com"] [uri "/"] [unique_id "amtc5VMMKDDX1O8UUVsn7gAAACE"]
[Thu Jul 30 15:17:11.262707 2026] [ssl:error] [pid 3637829:tid 3637829] (EAI 2)Name or service not known: [client 144.76.19.72:28670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:11.262749 2026] [ssl:error] [pid 3637829:tid 3637829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:11.316044 2026] [ssl:error] [pid 3642973:tid 3642973] (EAI 2)Name or service not known: [client 144.76.19.72:28682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:11.316093 2026] [ssl:error] [pid 3642973:tid 3642973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:11.482201 2026] [security2:error] [pid 3639477:tid 3639477] [client 185.191.171.10:44458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/new-york-central-railroad-stock-certificate-value"] [unique_id "amtc52V6JPx8x8aJSYtzLwAAABM"]
[Thu Jul 30 15:17:12.910282 2026] [access_compat:error] [pid 3642973:tid 3642973] [client 64.180.68.231:64947] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:13.068223 2026] [security2:error] [pid 3642047:tid 3642047] [client 51.68.236.94:25673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amtc6ZxJZTDQNbAQ2aJU4wAAADE"]
[Thu Jul 30 15:17:13.157897 2026] [security2:error] [pid 3638670:tid 3638670] [client 51.68.236.94:31525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtc6fZwg8_muW6Ld0MEGQAAAA0"]
[Thu Jul 30 15:17:13.278723 2026] [security2:error] [pid 3642040:tid 3642040] [client 51.68.236.94:16245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amtc6fAiwSWlY5VMMGVJNwAAACg"]
[Thu Jul 30 15:17:13.299020 2026] [ssl:error] [pid 3639602:tid 3639602] (70014)End of file found: [client 216.73.216.199:51085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:13.456709 2026] [security2:error] [pid 3641975:tid 3641975] [client 150.109.46.88:46270] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.michael-boffey.co.uk"] [uri "/"] [unique_id "amtc6Rji99x2e7pSXWV26wAAACA"]
[Thu Jul 30 15:17:13.789188 2026] [ssl:error] [pid 3623141:tid 3623141] (70014)End of file found: [client 216.73.216.199:17986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:14.068348 2026] [authz_core:error] [pid 3642047:tid 3642047] [client 192.42.116.13:23925] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log, referer: acthoroughbreds.com
[Thu Jul 30 15:17:14.068409 2026] [authz_core:error] [pid 3642047:tid 3642047] [client 192.42.116.13:23925] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config, referer: acthoroughbreds.com
[Thu Jul 30 15:17:14.305574 2026] [authz_core:error] [pid 3641813:tid 3641813] [client 192.42.116.13:65202] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log, referer: http://acthoroughbreds.com/?C=D;O=A
[Thu Jul 30 15:17:14.305629 2026] [authz_core:error] [pid 3641813:tid 3641813] [client 192.42.116.13:65202] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config, referer: http://acthoroughbreds.com/?C=D;O=A
[Thu Jul 30 15:17:14.374263 2026] [ssl:error] [pid 3642047:tid 3642047] (EAI 2)Name or service not known: [client 144.76.19.72:28694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:14.374295 2026] [ssl:error] [pid 3642047:tid 3642047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:14.427333 2026] [ssl:error] [pid 3642040:tid 3642040] (EAI 2)Name or service not known: [client 144.76.19.72:28700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:14.427377 2026] [ssl:error] [pid 3642040:tid 3642040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:14.496378 2026] [authz_core:error] [pid 3641975:tid 3641975] [client 192.42.116.13:33284] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log, referer: http://acthoroughbreds.com/?C=M;O=A
[Thu Jul 30 15:17:14.496444 2026] [authz_core:error] [pid 3641975:tid 3641975] [client 192.42.116.13:33284] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config, referer: http://acthoroughbreds.com/?C=M;O=A
[Thu Jul 30 15:17:14.793649 2026] [authz_core:error] [pid 3642047:tid 3642047] [client 192.42.116.13:41733] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log, referer: http://acthoroughbreds.com/?C=N;O=D
[Thu Jul 30 15:17:14.793713 2026] [authz_core:error] [pid 3642047:tid 3642047] [client 192.42.116.13:41733] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config, referer: http://acthoroughbreds.com/?C=N;O=D
[Thu Jul 30 15:17:15.058952 2026] [authz_core:error] [pid 3623534:tid 3623534] [client 192.42.116.13:18108] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log, referer: http://acthoroughbreds.com/?C=S;O=A
[Thu Jul 30 15:17:15.059001 2026] [authz_core:error] [pid 3623534:tid 3623534] [client 192.42.116.13:18108] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config, referer: http://acthoroughbreds.com/?C=S;O=A
[Thu Jul 30 15:17:15.105617 2026] [ssl:error] [pid 3624888:tid 3624888] (70014)End of file found: [client 216.73.216.199:41565] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:15.171016 2026] [access_compat:error] [pid 3641813:tid 3641813] [client 136.158.25.236:61032] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:16.626775 2026] [security2:error] [pid 3643327:tid 3643327] [client 192.42.116.13:15174] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amtc7BRNChmUhqyo8eBqqAAAAAY"], referer: http://acthoroughbreds.com/web.config.backup
[Thu Jul 30 15:17:16.627029 2026] [security2:error] [pid 3643327:tid 3643327] [client 192.42.116.13:15174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amtc7BRNChmUhqyo8eBqqAAAAAY"], referer: http://acthoroughbreds.com/web.config.backup
[Thu Jul 30 15:17:16.627179 2026] [security2:error] [pid 3643327:tid 3643327] [client 192.42.116.13:15174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "acthoroughbreds.com"] [uri "/web.config.backup"] [unique_id "amtc7BRNChmUhqyo8eBqqAAAAAY"], referer: http://acthoroughbreds.com/web.config.backup
[Thu Jul 30 15:17:17.482120 2026] [ssl:error] [pid 3623534:tid 3623534] (EAI 2)Name or service not known: [client 144.76.19.72:28708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:17.482157 2026] [ssl:error] [pid 3623534:tid 3623534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:17.535168 2026] [ssl:error] [pid 3626492:tid 3626492] (EAI 2)Name or service not known: [client 144.76.19.72:28720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:17.535202 2026] [ssl:error] [pid 3626492:tid 3626492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:19.016916 2026] [access_compat:error] [pid 3642045:tid 3642045] [client 64.180.68.231:65260] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:20.253410 2026] [ssl:error] [pid 3628274:tid 3628274] (70014)End of file found: [client 216.73.216.199:6918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:20.590447 2026] [ssl:error] [pid 3626123:tid 3626123] (EAI 2)Name or service not known: [client 144.76.19.72:59530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:20.590481 2026] [ssl:error] [pid 3626123:tid 3626123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:20.645156 2026] [ssl:error] [pid 3642045:tid 3642045] (EAI 2)Name or service not known: [client 144.76.19.72:59540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:20.645193 2026] [ssl:error] [pid 3642045:tid 3642045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:21.463175 2026] [core:error] [pid 3643327:tid 3643327] (13)Permission denied: [client 216.73.216.199:54497] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip4-frags/partial
[Thu Jul 30 15:17:21.547322 2026] [access_compat:error] [pid 3632500:tid 3632500] [client 136.158.25.236:61526] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:21.763565 2026] [core:error] [pid 3643327:tid 3643327] (13)Permission denied: [client 216.73.216.199:54497] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/rapl/uevent
[Thu Jul 30 15:17:22.064614 2026] [ssl:error] [pid 3643327:tid 3643327] (70014)End of file found: [client 216.73.216.199:54497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:22.648016 2026] [core:error] [pid 3637829:tid 3637829] [client 152.44.103.149:29775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:17:22.648048 2026] [core:error] [pid 3637829:tid 3637829] [client 152.44.103.149:29775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:17:23.524901 2026] [access_compat:error] [pid 3639601:tid 3639601] [client 64.180.68.231:65502] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:23.702729 2026] [ssl:error] [pid 3643328:tid 3643328] (EAI 2)Name or service not known: [client 144.76.19.72:59550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:23.702762 2026] [ssl:error] [pid 3643328:tid 3643328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:23.760271 2026] [ssl:error] [pid 3637829:tid 3637829] (EAI 2)Name or service not known: [client 144.76.19.72:59560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:23.760299 2026] [ssl:error] [pid 3637829:tid 3637829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:24.915925 2026] [core:error] [pid 3632105:tid 3632105] [client 66.249.66.5:57258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:17:24.915954 2026] [core:error] [pid 3632105:tid 3632105] [client 66.249.66.5:57258] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:17:25.084092 2026] [ssl:error] [pid 3632770:tid 3632770] (70014)End of file found: [client 216.73.216.199:54494] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:25.690576 2026] [access_compat:error] [pid 3642825:tid 3642825] [client 136.158.25.236:61836] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:25.886735 2026] [security2:error] [pid 3643328:tid 3643328] [client 216.73.216.199:48077] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/estonian/errmsg.sys"] [unique_id "amtc9QIn8DbERdc0twRwbAAAAAk"]
[Thu Jul 30 15:17:25.887021 2026] [security2:error] [pid 3643328:tid 3643328] [client 216.73.216.199:48077] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/estonian/errmsg.sys"] [unique_id "amtc9QIn8DbERdc0twRwbAAAAAk"]
[Thu Jul 30 15:17:25.887247 2026] [security2:error] [pid 3643328:tid 3643328] [client 216.73.216.199:48077] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/estonian/errmsg.sys"] [unique_id "amtc9QIn8DbERdc0twRwbAAAAAk"]
[Thu Jul 30 15:17:26.860607 2026] [security2:error] [pid 3642973:tid 3642973] [client 114.119.155.144:24639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~104,18/request_format~html"] [unique_id "amtc9q1ctopxp_5O50nfiwAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~104,18/request_format~html
[Thu Jul 30 15:17:27.051495 2026] [ssl:error] [pid 3643958:tid 3643958] (EAI 2)Name or service not known: [client 144.76.19.72:59570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:27.051539 2026] [ssl:error] [pid 3643958:tid 3643958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:27.107889 2026] [ssl:error] [pid 3643958:tid 3643958] (EAI 2)Name or service not known: [client 144.76.19.72:59576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:27.107913 2026] [ssl:error] [pid 3643958:tid 3643958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:28.381996 2026] [security2:error] [pid 3642047:tid 3642047] [client 114.119.155.144:37399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~104,18/request_format~html"] [unique_id "amtc-JxJZTDQNbAQ2aJU6gAAADE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~104,18/request_format~html
[Thu Jul 30 15:17:28.413320 2026] [ssl:error] [pid 3643328:tid 3643328] (70014)End of file found: [client 216.73.216.199:48077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:28.483282 2026] [access_compat:error] [pid 3643999:tid 3643999] [client 45.158.164.139:48934] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:17:29.624950 2026] [ssl:error] [pid 3628274:tid 3628274] (70014)End of file found: [client 216.73.216.199:44516] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:30.160927 2026] [ssl:error] [pid 3642973:tid 3642973] (EAI 2)Name or service not known: [client 144.76.19.72:19676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:30.160957 2026] [ssl:error] [pid 3642973:tid 3642973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:30.275553 2026] [ssl:error] [pid 3635086:tid 3635086] (EAI 2)Name or service not known: [client 144.76.19.72:19690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:30.275583 2026] [ssl:error] [pid 3635086:tid 3635086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:31.436359 2026] [access_compat:error] [pid 3644040:tid 3644040] [client 54.84.229.199:34148] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/08/ilooklike.jpg
[Thu Jul 30 15:17:31.436544 2026] [access_compat:error] [pid 3644040:tid 3644040] [client 54.84.229.199:34148] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:17:31.437791 2026] [core:error] [pid 3632808:tid 3632808] (13)Permission denied: [client 216.73.216.199:3527] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Parse/total_objects
[Thu Jul 30 15:17:32.043703 2026] [ssl:error] [pid 3632808:tid 3632808] (70014)End of file found: [client 216.73.216.199:3527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:32.874984 2026] [security2:error] [pid 3632770:tid 3632770] [client 43.166.251.233:45220] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-narvi.com"] [uri "/"] [unique_id "amtc_Kiby1kv7-Wq7S5b9gAAACQ"]
[Thu Jul 30 15:17:33.346487 2026] [ssl:error] [pid 3643999:tid 3643999] (EAI 2)Name or service not known: [client 144.76.19.72:19698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:33.346527 2026] [ssl:error] [pid 3643999:tid 3643999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:33.398351 2026] [ssl:error] [pid 3632105:tid 3632105] (EAI 2)Name or service not known: [client 144.76.19.72:19700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:33.398380 2026] [ssl:error] [pid 3632105:tid 3632105] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:33.673635 2026] [security2:error] [pid 3644037:tid 3644037] [client 171.225.199.107:11179] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtc_XkrPkmPy0BnXMgEEgAAACg"]
[Thu Jul 30 15:17:33.673687 2026] [security2:error] [pid 3644037:tid 3644037] [client 171.225.199.107:11179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtc_XkrPkmPy0BnXMgEEgAAACg"]
[Thu Jul 30 15:17:33.673910 2026] [security2:error] [pid 3644037:tid 3644037] [client 171.225.199.107:11179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtc_XkrPkmPy0BnXMgEEgAAACg"]
[Thu Jul 30 15:17:34.018692 2026] [access_compat:error] [pid 3643957:tid 3643957] [client 64.180.68.231:49682] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:34.167798 2026] [ssl:error] [pid 3637829:tid 3637829] (70014)End of file found: [client 216.73.216.199:43384] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:34.663015 2026] [cgi:error] [pid 3644035:tid 3644035] [client 51.103.154.47:23122] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:17:34.898364 2026] [access_compat:error] [pid 3643926:tid 3643926] [client 45.158.164.139:41894] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:17:34.913792 2026] [access_compat:error] [pid 3636745:tid 3636745] [client 45.158.164.139:41896] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:17:35.351232 2026] [cgi:error] [pid 3644035:tid 3644035] [client 51.103.154.47:23122] AH02811: stderr from /home/annawagent9523/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:17:36.268771 2026] [access_compat:error] [pid 3643328:tid 3643328] [client 112.209.180.50:15479] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:36.451547 2026] [ssl:error] [pid 3639530:tid 3639530] (EAI 2)Name or service not known: [client 144.76.19.72:19702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:36.451582 2026] [ssl:error] [pid 3639530:tid 3639530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:36.504376 2026] [ssl:error] [pid 3635086:tid 3635086] (EAI 2)Name or service not known: [client 144.76.19.72:19718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:36.504421 2026] [ssl:error] [pid 3635086:tid 3635086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:36.628865 2026] [ssl:error] [pid 3639477:tid 3639477] (70014)End of file found: [client 216.73.216.199:64669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:36.933621 2026] [ssl:error] [pid 3643926:tid 3643926] (70014)End of file found: [client 216.73.216.199:45122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:37.348793 2026] [core:error] [pid 3644037:tid 3644037] [client 66.249.66.8:46403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:17:37.348819 2026] [core:error] [pid 3644037:tid 3644037] [client 66.249.66.8:46403] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:17:37.635873 2026] [ssl:error] [pid 3623141:tid 3623141] (70014)End of file found: [client 216.73.216.199:11927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:39.706107 2026] [ssl:error] [pid 3643327:tid 3643327] (EAI 2)Name or service not known: [client 144.76.19.72:19786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:39.706139 2026] [ssl:error] [pid 3643327:tid 3643327] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:39.831173 2026] [ssl:error] [pid 3632770:tid 3632770] (EAI 2)Name or service not known: [client 144.76.19.72:19790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:39.831199 2026] [ssl:error] [pid 3632770:tid 3632770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:41.044103 2026] [cgi:error] [pid 3626192:tid 3626192] [client 144.76.32.120:23362] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:17:41.820028 2026] [authz_core:error] [pid 3643957:tid 3643957] [client 1.21.49.191:31672] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://search.yahoo.co.jp/
[Thu Jul 30 15:17:41.822711 2026] [authz_core:error] [pid 3643957:tid 3643957] [client 1.21.49.191:31672] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://search.yahoo.co.jp/
[Thu Jul 30 15:17:42.155337 2026] [ssl:error] [pid 3643999:tid 3643999] (70014)End of file found: [client 216.73.216.199:15792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:42.888078 2026] [ssl:error] [pid 3644036:tid 3644036] (EAI 2)Name or service not known: [client 144.76.19.72:19804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:42.888129 2026] [ssl:error] [pid 3644036:tid 3644036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:42.944489 2026] [ssl:error] [pid 3643328:tid 3643328] (EAI 2)Name or service not known: [client 144.76.19.72:19812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:42.944534 2026] [ssl:error] [pid 3643328:tid 3643328] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:43.290549 2026] [access_compat:error] [pid 3643638:tid 3643638] [client 112.209.180.50:15734] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:43.372085 2026] [ssl:error] [pid 3644435:tid 3644435] (70014)End of file found: [client 216.73.216.199:1873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:44.563847 2026] [access_compat:error] [pid 3644507:tid 3644507] [client 64.180.68.231:50226] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:45.497262 2026] [ssl:error] [pid 3639477:tid 3639477] (70014)End of file found: [client 216.73.216.199:34589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:46.035287 2026] [ssl:error] [pid 3641813:tid 3641813] (EAI 2)Name or service not known: [client 144.76.19.72:19828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:46.035335 2026] [ssl:error] [pid 3641813:tid 3641813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:46.091218 2026] [ssl:error] [pid 3644506:tid 3644506] (EAI 2)Name or service not known: [client 144.76.19.72:19836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:46.091249 2026] [ssl:error] [pid 3644506:tid 3644506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:46.761148 2026] [access_compat:error] [pid 3643328:tid 3643328] [client 136.158.25.236:63779] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:47.307547 2026] [lsapi:warn] [pid 3644506:tid 3644506] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:17:47.500206 2026] [ssl:error] [pid 3639602:tid 3639602] (70014)End of file found: [client 216.73.216.199:14370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:47.967492 2026] [access_compat:error] [pid 3643958:tid 3643958] [client 167.94.146.59:30188] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:17:48.713777 2026] [ssl:error] [pid 3632808:tid 3632808] (70014)End of file found: [client 216.73.216.199:19726] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:49.184359 2026] [ssl:error] [pid 3644435:tid 3644435] (EAI 2)Name or service not known: [client 144.76.19.72:19838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:49.184423 2026] [ssl:error] [pid 3644435:tid 3644435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:49.275943 2026] [ssl:error] [pid 3644040:tid 3644040] (EAI 2)Name or service not known: [client 144.76.19.72:19846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:49.275985 2026] [ssl:error] [pid 3644040:tid 3644040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:50.726936 2026] [access_compat:error] [pid 3644040:tid 3644040] [client 64.180.68.231:50544] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:50.837710 2026] [ssl:error] [pid 3635086:tid 3635086] (70014)End of file found: [client 216.73.216.199:20763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:51.923018 2026] [authz_core:error] [pid 3644507:tid 3644507] [client 186.232.88.4:41371] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log
[Thu Jul 30 15:17:52.334230 2026] [ssl:error] [pid 3639477:tid 3639477] (EAI 2)Name or service not known: [client 144.76.19.72:64562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:52.334287 2026] [ssl:error] [pid 3639477:tid 3639477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:52.386983 2026] [ssl:error] [pid 3644040:tid 3644040] (EAI 2)Name or service not known: [client 144.76.19.72:64564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:52.387024 2026] [ssl:error] [pid 3644040:tid 3644040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:53.060843 2026] [access_compat:error] [pid 3623141:tid 3623141] [client 136.158.25.236:64295] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:53.123994 2026] [authz_core:error] [pid 3639477:tid 3639477] [client 2.11.152.25:58164] AH01630: client denied by server configuration: /home/spampcou/public_html/thestringman.co.uk/error_log, referer: http://thestringman.co.uk
[Thu Jul 30 15:17:53.645026 2026] [ssl:error] [pid 3642042:tid 3642042] (70014)End of file found: [client 216.73.216.199:61956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:53.659963 2026] [security2:error] [pid 3644036:tid 3644036] [client 47.128.32.178:37520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/robots.txt"] [unique_id "amtdEVMDQhapKIWGwh8AHwAAACM"]
[Thu Jul 30 15:17:55.122683 2026] [access_compat:error] [pid 3644510:tid 3644510] [client 64.180.68.231:50780] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:55.442444 2026] [ssl:error] [pid 3643958:tid 3643958] (EAI 2)Name or service not known: [client 144.76.19.72:64576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:55.442495 2026] [ssl:error] [pid 3643958:tid 3643958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:55.494118 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:64580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:55.494150 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:56.352653 2026] [ssl:error] [pid 3644509:tid 3644509] (70014)End of file found: [client 216.73.216.199:30003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:57.186629 2026] [access_compat:error] [pid 3644002:tid 3644002] [client 136.158.25.236:64614] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:17:57.561834 2026] [ssl:error] [pid 3644430:tid 3644430] (70014)End of file found: [client 216.73.216.199:14865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:17:58.548465 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:64594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:58.548496 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:17:58.603985 2026] [ssl:error] [pid 3628274:tid 3628274] (EAI 2)Name or service not known: [client 144.76.19.72:64604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:17:58.604015 2026] [ssl:error] [pid 3628274:tid 3628274] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:00.875461 2026] [ssl:error] [pid 3644435:tid 3644435] (70014)End of file found: [client 216.73.216.199:1669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:01.276628 2026] [access_compat:error] [pid 3644863:tid 3644863] [client 64.180.68.231:51095] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:01.660083 2026] [ssl:error] [pid 3628274:tid 3628274] (EAI 2)Name or service not known: [client 144.76.19.72:29420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:01.660133 2026] [ssl:error] [pid 3628274:tid 3628274] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:01.666780 2026] [ssl:error] [pid 3644035:tid 3644035] (70014)End of file found: [client 216.73.216.199:54828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:01.714703 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:29422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:01.714740 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:02.869888 2026] [ssl:error] [pid 3639601:tid 3639601] (70014)End of file found: [client 216.73.216.199:1496] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:04.488718 2026] [security2:error] [pid 3644003:tid 3644003] [client 43.157.82.252:42158] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.liberator-no-email.com"] [uri "/"] [unique_id "amtdHCUMVA3V7gavhWlxcwAAABQ"]
[Thu Jul 30 15:18:04.766378 2026] [ssl:error] [pid 3644510:tid 3644510] (EAI 2)Name or service not known: [client 144.76.19.72:29428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:04.766425 2026] [ssl:error] [pid 3644510:tid 3644510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:04.819521 2026] [ssl:error] [pid 3644039:tid 3644039] (EAI 2)Name or service not known: [client 144.76.19.72:29438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:04.819548 2026] [ssl:error] [pid 3644039:tid 3644039] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:05.715182 2026] [access_compat:error] [pid 3644003:tid 3644003] [client 64.180.68.231:51333] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:06.176866 2026] [ssl:error] [pid 3636745:tid 3636745] (70014)End of file found: [client 216.73.216.199:1489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:07.132011 2026] [ssl:error] [pid 3642973:tid 3642973] (70014)End of file found: [client 216.73.216.199:56071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:07.766482 2026] [access_compat:error] [pid 3642042:tid 3642042] [client 136.158.25.236:1] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:07.895308 2026] [ssl:error] [pid 3644434:tid 3644434] (EAI 2)Name or service not known: [client 144.76.19.72:29450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:07.895345 2026] [ssl:error] [pid 3644434:tid 3644434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:07.948797 2026] [ssl:error] [pid 3630721:tid 3630721] (EAI 2)Name or service not known: [client 144.76.19.72:29466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:07.948823 2026] [ssl:error] [pid 3630721:tid 3630721] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:08.291758 2026] [ssl:error] [pid 3644434:tid 3644434] (70014)End of file found: [client 216.73.216.199:58760] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:08.603702 2026] [ssl:error] [pid 3639601:tid 3639601] (70014)End of file found: [client 216.73.216.199:1429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:11.003771 2026] [ssl:error] [pid 3637829:tid 3637829] (EAI 2)Name or service not known: [client 144.76.19.72:33682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:11.003807 2026] [ssl:error] [pid 3637829:tid 3637829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:11.060829 2026] [ssl:error] [pid 3644509:tid 3644509] (EAI 2)Name or service not known: [client 144.76.19.72:33690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:11.060871 2026] [ssl:error] [pid 3644509:tid 3644509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:11.612979 2026] [ssl:error] [pid 3644393:tid 3644393] (70014)End of file found: [client 216.73.216.199:47003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:11.857251 2026] [access_compat:error] [pid 3643328:tid 3643328] [client 64.180.68.231:51655] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:11.876899 2026] [security2:error] [pid 3641917:tid 3641917] [client 85.208.96.199:63214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/carol-rosenthal-obituary"] [unique_id "amtdIwNI5o4wQLTDZOLtdwAAABY"]
[Thu Jul 30 15:18:12.045722 2026] [access_compat:error] [pid 3636745:tid 3636745] [client 45.78.203.158:51502] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2012/01/captain-america-the-first-avenger.jpg, referer: https://blog.alism.com
[Thu Jul 30 15:18:12.045830 2026] [access_compat:error] [pid 3636745:tid 3636745] [client 45.78.203.158:51502] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com
[Thu Jul 30 15:18:13.726755 2026] [ssl:error] [pid 3636745:tid 3636745] (70014)End of file found: [client 216.73.216.199:26991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:14.117916 2026] [ssl:error] [pid 3630720:tid 3630720] (EAI 2)Name or service not known: [client 144.76.19.72:33696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:14.117956 2026] [ssl:error] [pid 3630720:tid 3630720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:14.174587 2026] [ssl:error] [pid 3644434:tid 3644434] (EAI 2)Name or service not known: [client 144.76.19.72:33712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:14.174618 2026] [ssl:error] [pid 3644434:tid 3644434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:14.433649 2026] [ssl:error] [pid 3626123:tid 3626123] (70014)End of file found: [client 216.73.216.199:11543] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:14.859812 2026] [access_compat:error] [pid 3642973:tid 3642973] [client 112.209.180.50:16802] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:15.098644 2026] [security2:error] [pid 3644392:tid 3644392] [client 138.84.74.90:12892] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdJwMZagOGJyMZHasrKwAAAA8"]
[Thu Jul 30 15:18:15.098697 2026] [security2:error] [pid 3644392:tid 3644392] [client 138.84.74.90:12892] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdJwMZagOGJyMZHasrKwAAAA8"]
[Thu Jul 30 15:18:15.098960 2026] [security2:error] [pid 3644392:tid 3644392] [client 138.84.74.90:12892] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdJwMZagOGJyMZHasrKwAAAA8"]
[Thu Jul 30 15:18:15.330726 2026] [security2:error] [pid 3643327:tid 3643327] [client 114.119.130.213:23229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtdJxRNChmUhqyo8eBqvwAAAAY"], referer: https://www.raidersofthegamecupboard.co.uk/robots.txt
[Thu Jul 30 15:18:16.313716 2026] [access_compat:error] [pid 3644504:tid 3644504] [client 64.180.68.231:51896] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:17.083574 2026] [security2:error] [pid 3623141:tid 3623141] [client 43.166.166.26:44949] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdKc58amwCVUqNOpCjgQAAAAc"]
[Thu Jul 30 15:18:17.083654 2026] [security2:error] [pid 3623141:tid 3623141] [client 43.166.166.26:44949] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdKc58amwCVUqNOpCjgQAAAAc"]
[Thu Jul 30 15:18:17.083913 2026] [security2:error] [pid 3623141:tid 3623141] [client 43.166.166.26:44949] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdKc58amwCVUqNOpCjgQAAAAc"]
[Thu Jul 30 15:18:17.231466 2026] [ssl:error] [pid 3644393:tid 3644393] (EAI 2)Name or service not known: [client 144.76.19.72:33724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:17.231504 2026] [ssl:error] [pid 3644393:tid 3644393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:17.287989 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:33730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:17.288027 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:17.425259 2026] [authz_core:error] [pid 3639031:tid 3639031] [client 66.132.172.214:45006] AH01630: client denied by server configuration: /home/erskinen/public_html/erskinefusion.com/error_log
[Thu Jul 30 15:18:18.163612 2026] [access_compat:error] [pid 3644393:tid 3644393] [client 136.158.25.236:920] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:19.246678 2026] [core:error] [pid 3626492:tid 3626492] (13)Permission denied: [client 216.73.216.199:27149] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_inode/alloc_calls
[Thu Jul 30 15:18:19.547664 2026] [ssl:error] [pid 3626492:tid 3626492] (70014)End of file found: [client 216.73.216.199:27149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:20.149961 2026] [ssl:error] [pid 3636745:tid 3636745] (70014)End of file found: [client 216.73.216.199:62519] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:20.258572 2026] [security2:error] [pid 3644003:tid 3644003] [client 43.166.166.26:37025] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdLCUMVA3V7gavhWlxeAAAABQ"]
[Thu Jul 30 15:18:20.258626 2026] [security2:error] [pid 3644003:tid 3644003] [client 43.166.166.26:37025] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdLCUMVA3V7gavhWlxeAAAABQ"]
[Thu Jul 30 15:18:20.258876 2026] [security2:error] [pid 3644003:tid 3644003] [client 43.166.166.26:37025] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdLCUMVA3V7gavhWlxeAAAABQ"]
[Thu Jul 30 15:18:20.340556 2026] [ssl:error] [pid 3639031:tid 3639031] (EAI 2)Name or service not known: [client 144.76.19.72:46496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:20.340591 2026] [ssl:error] [pid 3639031:tid 3639031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:20.395605 2026] [ssl:error] [pid 3641917:tid 3641917] (EAI 2)Name or service not known: [client 144.76.19.72:46504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:20.395647 2026] [ssl:error] [pid 3641917:tid 3641917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:20.642134 2026] [core:error] [pid 3632770:tid 3632770] (13)Permission denied: [client 216.73.216.199:60130] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/remote_node_defrag_ratio
[Thu Jul 30 15:18:20.752667 2026] [ssl:error] [pid 3632770:tid 3632770] (70014)End of file found: [client 216.73.216.199:60130] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:21.055733 2026] [security2:error] [pid 3643327:tid 3643327] [client 20.215.218.234:3499] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kirstybashforth.com.davidebell.com"] [uri "/wp-config.php"] [unique_id "amtdLRRNChmUhqyo8eBrIgAAAAY"]
[Thu Jul 30 15:18:21.055877 2026] [security2:error] [pid 3643327:tid 3643327] [client 20.215.218.234:3499] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kirstybashforth.com.davidebell.com"] [uri "/wp-config.php"] [unique_id "amtdLRRNChmUhqyo8eBrIgAAAAY"]
[Thu Jul 30 15:18:21.056061 2026] [security2:error] [pid 3643327:tid 3643327] [client 20.215.218.234:3499] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kirstybashforth.com.davidebell.com"] [uri "/wp-config.php"] [unique_id "amtdLRRNChmUhqyo8eBrIgAAAAY"]
[Thu Jul 30 15:18:23.451374 2026] [ssl:error] [pid 3644430:tid 3644430] (EAI 2)Name or service not known: [client 144.76.19.72:46520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:23.451453 2026] [ssl:error] [pid 3644430:tid 3644430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:23.503405 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:46536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:23.503441 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:23.951319 2026] [authz_core:error] [pid 3644430:tid 3644430] [client 20.193.250.173:57841] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:18:25.542195 2026] [access_compat:error] [pid 3644393:tid 3644393] [client 112.209.180.50:17177] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:26.175752 2026] [core:error] [pid 3642973:tid 3642973] (13)Permission denied: [client 216.73.216.199:33377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmem_cache/poison
[Thu Jul 30 15:18:26.559232 2026] [ssl:error] [pid 3635086:tid 3635086] (EAI 2)Name or service not known: [client 144.76.19.72:46546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:26.559268 2026] [ssl:error] [pid 3635086:tid 3635086] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:26.614875 2026] [ssl:error] [pid 3626123:tid 3626123] (EAI 2)Name or service not known: [client 144.76.19.72:46556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:26.614902 2026] [ssl:error] [pid 3626123:tid 3626123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:26.819658 2026] [access_compat:error] [pid 3644392:tid 3644392] [client 64.180.68.231:52477] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:27.272985 2026] [ssl:error] [pid 3626123:tid 3626123] (70014)End of file found: [client 216.73.216.199:27759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:27.681620 2026] [core:error] [pid 3642973:tid 3642973] (13)Permission denied: [client 216.73.216.199:33377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/usersize
[Thu Jul 30 15:18:28.283906 2026] [core:error] [pid 3642973:tid 3642973] (13)Permission denied: [client 216.73.216.199:33377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/order
[Thu Jul 30 15:18:28.292412 2026] [core:error] [pid 3641975:tid 3641975] [client 66.132.172.214:25996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:18:28.292438 2026] [core:error] [pid 3641975:tid 3641975] [client 66.132.172.214:25996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:18:28.838577 2026] [access_compat:error] [pid 3646373:tid 3646373] [client 112.209.180.50:17321] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:28.946141 2026] [security2:error] [pid 3644863:tid 3644863] [client 20.215.218.234:3470] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kirstybashforth.com.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amtdNMGj3pTfJEVapYeI5wAAAAg"]
[Thu Jul 30 15:18:28.946315 2026] [security2:error] [pid 3644863:tid 3644863] [client 20.215.218.234:3470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kirstybashforth.com.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amtdNMGj3pTfJEVapYeI5wAAAAg"]
[Thu Jul 30 15:18:28.946518 2026] [security2:error] [pid 3644863:tid 3644863] [client 20.215.218.234:3470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kirstybashforth.com.davidebell.com"] [uri "/var/log/error.log"] [unique_id "amtdNMGj3pTfJEVapYeI5wAAAAg"]
[Thu Jul 30 15:18:29.187055 2026] [ssl:error] [pid 3642973:tid 3642973] (70014)End of file found: [client 216.73.216.199:33377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:29.672565 2026] [ssl:error] [pid 3644036:tid 3644036] (EAI 2)Name or service not known: [client 144.76.19.72:33014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:29.672591 2026] [ssl:error] [pid 3644036:tid 3644036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:29.682205 2026] [ssl:error] [pid 3644041:tid 3644041] (70014)End of file found: [client 216.73.216.199:55498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:29.728659 2026] [ssl:error] [pid 3646334:tid 3646334] (EAI 2)Name or service not known: [client 144.76.19.72:33018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:29.728693 2026] [ssl:error] [pid 3646334:tid 3646334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:31.502855 2026] [lsapi:warn] [pid 3639031:tid 3639031] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:18:32.317639 2026] [security2:error] [pid 3646272:tid 3646272] [client 139.155.134.17:35310] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.juliaashmore.org"] [uri "/"] [unique_id "amtdOEcxuC8enJDpI2wHpQAAAAE"]
[Thu Jul 30 15:18:32.783924 2026] [ssl:error] [pid 3626123:tid 3626123] (EAI 2)Name or service not known: [client 144.76.19.72:33030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:32.783954 2026] [ssl:error] [pid 3626123:tid 3626123] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:32.836525 2026] [ssl:error] [pid 3644393:tid 3644393] (EAI 2)Name or service not known: [client 144.76.19.72:33036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:32.836551 2026] [ssl:error] [pid 3644393:tid 3644393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:32.955900 2026] [access_compat:error] [pid 3639031:tid 3639031] [client 64.180.68.231:52783] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:33.415967 2026] [core:error] [pid 3624888:tid 3624888] (13)Permission denied: [client 216.73.216.199:20052] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/min_partial
[Thu Jul 30 15:18:33.716940 2026] [ssl:error] [pid 3624888:tid 3624888] (70014)End of file found: [client 216.73.216.199:20052] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:34.173584 2026] [security2:error] [pid 3641972:tid 3641972] [client 85.208.96.207:40518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3923.0.html"] [unique_id "amtdOiUJw6Rp7Mh8T-iJkgAAABs"]
[Thu Jul 30 15:18:34.488740 2026] [access_compat:error] [pid 3644393:tid 3644393] [client 45.158.164.139:34414] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:18:34.513348 2026] [ssl:error] [pid 3626492:tid 3626492] (70014)End of file found: [client 216.73.216.199:34895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:34.524727 2026] [authz_core:error] [pid 3641972:tid 3641972] [client 20.193.250.173:53782] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:18:35.822298 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:21717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:35.890169 2026] [ssl:error] [pid 3646008:tid 3646008] (EAI 2)Name or service not known: [client 144.76.19.72:33050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:35.890218 2026] [ssl:error] [pid 3646008:tid 3646008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:35.941892 2026] [ssl:error] [pid 3636745:tid 3636745] (EAI 2)Name or service not known: [client 144.76.19.72:33054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:35.941918 2026] [ssl:error] [pid 3636745:tid 3636745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:37.305969 2026] [access_compat:error] [pid 3630720:tid 3630720] [client 64.180.68.231:53023] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:37.818730 2026] [access_compat:error] [pid 3623141:tid 3623141] [client 45.158.164.139:34418] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:18:37.846567 2026] [security2:error] [pid 3641918:tid 3641918] [client 43.165.167.72:46000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtdPS40uWOiymCQfIy5CwAAABc"], referer: http://banskoexpress.net
[Thu Jul 30 15:18:38.542578 2026] [core:error] [pid 3644003:tid 3644003] (13)Permission denied: [client 216.73.216.199:47810] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UDPv6/cache_dma
[Thu Jul 30 15:18:38.953816 2026] [core:error] [pid 3641918:tid 3641918] [client 66.249.66.8:61487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:18:38.953857 2026] [core:error] [pid 3641918:tid 3641918] [client 66.249.66.8:61487] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:18:38.995657 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:33056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:38.995693 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:39.051652 2026] [ssl:error] [pid 3641975:tid 3641975] (EAI 2)Name or service not known: [client 144.76.19.72:33066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:39.051689 2026] [ssl:error] [pid 3641975:tid 3641975] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:39.131023 2026] [access_compat:error] [pid 3644863:tid 3644863] [client 136.158.25.236:2806] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:39.756200 2026] [core:error] [pid 3624888:tid 3624888] (13)Permission denied: [client 216.73.216.199:45465] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/user_namespace/cpu_slabs
[Thu Jul 30 15:18:40.580187 2026] [security2:error] [pid 3623141:tid 3623141] [client 43.165.167.72:42154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtdQM58amwCVUqNOpCjhwAAAAc"], referer: http://www.banskoexpress.com
[Thu Jul 30 15:18:40.824085 2026] [authz_core:error] [pid 3644504:tid 3644504] [client 20.193.250.173:51435] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:18:41.234998 2026] [security2:error] [pid 3642042:tid 3642042] [client 123.207.65.62:36000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amtdQUnp8ELYTAfZDF1tYQAAACw"]
[Thu Jul 30 15:18:41.376169 2026] [ssl:error] [pid 3644003:tid 3644003] (70014)End of file found: [client 216.73.216.199:47810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:41.681907 2026] [ssl:error] [pid 3624888:tid 3624888] (70014)End of file found: [client 216.73.216.199:45465] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:42.106798 2026] [ssl:error] [pid 3644434:tid 3644434] (EAI 2)Name or service not known: [client 144.76.19.72:58732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:42.106824 2026] [ssl:error] [pid 3644434:tid 3644434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:42.163022 2026] [ssl:error] [pid 3623141:tid 3623141] (EAI 2)Name or service not known: [client 144.76.19.72:58748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:42.163045 2026] [ssl:error] [pid 3623141:tid 3623141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:42.927408 2026] [authz_core:error] [pid 3630721:tid 3630721] [client 216.73.216.199:43776] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/opt/cloudlinux/alt-php72/root/etc/php.ini
[Thu Jul 30 15:18:44.050989 2026] [access_compat:error] [pid 3626123:tid 3626123] [client 64.180.68.231:53369] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:44.395854 2026] [ssl:error] [pid 3630721:tid 3630721] (70014)End of file found: [client 216.73.216.199:43776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:45.236921 2026] [ssl:error] [pid 3644036:tid 3644036] (EAI 2)Name or service not known: [client 144.76.19.72:58752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:45.236954 2026] [ssl:error] [pid 3644036:tid 3644036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:45.289631 2026] [ssl:error] [pid 3644036:tid 3644036] (EAI 2)Name or service not known: [client 144.76.19.72:58768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:45.289649 2026] [ssl:error] [pid 3644036:tid 3644036] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:45.538533 2026] [access_compat:error] [pid 3644863:tid 3644863] [client 136.158.25.236:3375] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:47.416508 2026] [authz_core:error] [pid 3646334:tid 3646334] [client 20.193.250.173:65254] AH01630: client denied by server configuration: /home/stadiumd/jonathanhill.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:18:47.714422 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:4710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:47.894608 2026] [access_compat:error] [pid 3644036:tid 3644036] [client 64.180.68.231:53573] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:48.344985 2026] [ssl:error] [pid 3644041:tid 3644041] (EAI 2)Name or service not known: [client 144.76.19.72:58776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:48.345033 2026] [ssl:error] [pid 3644041:tid 3644041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:48.401598 2026] [ssl:error] [pid 3644040:tid 3644040] (EAI 2)Name or service not known: [client 144.76.19.72:58790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:48.401625 2026] [ssl:error] [pid 3644040:tid 3644040] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:49.348133 2026] [cgi:error] [pid 3644510:tid 3644510] [client 20.215.218.234:40532] AH02811: stderr from /home/davidebell/public_html/kirstybashforth.com/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 15:18:49.509136 2026] [authz_core:error] [pid 3644510:tid 3644510] [client 20.215.218.234:40532] AH01630: client denied by server configuration: /home/davidebell/public_html/kirstybashforth.com/php.ini
[Thu Jul 30 15:18:49.516217 2026] [ssl:error] [pid 3644037:tid 3644037] (70014)End of file found: [client 216.73.216.199:36400] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:49.816371 2026] [access_compat:error] [pid 3646008:tid 3646008] [client 112.209.180.50:14049] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:50.016900 2026] [ssl:error] [pid 3644040:tid 3644040] (70014)End of file found: [client 216.73.216.199:8493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:50.540757 2026] [security2:error] [pid 3639602:tid 3639602] [client 114.119.132.171:49001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~103,15/request_format~html"] [unique_id "amtdSiM789E1qbCMMufVMAAAADA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1573257600/cat_ids%7E103/request_format%7Ehtml
[Thu Jul 30 15:18:50.814604 2026] [security2:error] [pid 3644432:tid 3644432] [client 43.165.198.144:56858] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sijames.com"] [uri "/"] [unique_id "amtdSsPS8Q6bjhpUsG5HSAAAAC0"]
[Thu Jul 30 15:18:51.454868 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:52776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:51.454903 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:51.508099 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:52792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:51.508132 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:52.636296 2026] [security2:error] [pid 3647389:tid 3647389] [client 114.119.132.171:49017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~103,15/request_format~html"] [unique_id "amtdTKV7ttebrw3MjsLUIgAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1573257600/cat_ids%7E103/request_format%7Ehtml
[Thu Jul 30 15:18:53.860336 2026] [access_compat:error] [pid 3639477:tid 3639477] [client 199.45.154.116:49706] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:18:54.039550 2026] [ssl:error] [pid 3639602:tid 3639602] (70014)End of file found: [client 216.73.216.199:9066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:54.564754 2026] [ssl:error] [pid 3644510:tid 3644510] (EAI 2)Name or service not known: [client 144.76.19.72:52804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:54.564810 2026] [ssl:error] [pid 3644510:tid 3644510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:54.621106 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:52816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:54.621151 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:54.830009 2026] [ssl:error] [pid 3644392:tid 3644392] (70014)End of file found: [client 216.73.216.199:20790] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:55.446807 2026] [ssl:error] [pid 3647325:tid 3647325] (70014)End of file found: [client 216.73.216.199:16029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:18:57.676244 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:52820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:57.676269 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:57.732938 2026] [ssl:error] [pid 3644435:tid 3644435] (EAI 2)Name or service not known: [client 144.76.19.72:52826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:18:57.732974 2026] [ssl:error] [pid 3644435:tid 3644435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:18:58.434826 2026] [access_compat:error] [pid 3632770:tid 3632770] [client 64.180.68.231:54118] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:18:59.349315 2026] [ssl:error] [pid 3644505:tid 3644505] (70014)End of file found: [client 216.73.216.199:45056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:00.275721 2026] [access_compat:error] [pid 3647391:tid 3647391] [client 112.209.180.50:14523] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:00.718685 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:38256] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:00.805000 2026] [ssl:error] [pid 3646334:tid 3646334] (EAI 2)Name or service not known: [client 144.76.19.72:33016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:00.805036 2026] [ssl:error] [pid 3646334:tid 3646334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:00.862587 2026] [ssl:error] [pid 3626492:tid 3626492] (EAI 2)Name or service not known: [client 144.76.19.72:33032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:00.862629 2026] [ssl:error] [pid 3626492:tid 3626492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:01.265029 2026] [ssl:error] [pid 3639477:tid 3639477] (70014)End of file found: [client 216.73.216.199:26520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:03.428171 2026] [security2:error] [pid 3644036:tid 3644036] [client 82.180.147.63:50004] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtdV1MDQhapKIWGwh8AUwAAACM"]
[Thu Jul 30 15:19:03.720415 2026] [authz_core:error] [pid 3647182:tid 3647182] [client 66.132.172.214:61020] AH01630: client denied by server configuration: /home/erskinen/public_html/erskinefusion.com/error_log
[Thu Jul 30 15:19:03.920455 2026] [ssl:error] [pid 3646008:tid 3646008] (EAI 2)Name or service not known: [client 144.76.19.72:33038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:03.920479 2026] [ssl:error] [pid 3646008:tid 3646008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:03.973686 2026] [ssl:error] [pid 3644393:tid 3644393] (EAI 2)Name or service not known: [client 144.76.19.72:33052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:03.973721 2026] [ssl:error] [pid 3644393:tid 3644393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:04.012807 2026] [security2:error] [pid 3647358:tid 3647358] [client 43.164.197.117:38696] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highbrightness.com"] [uri "/"] [unique_id "amtdWJBimxny_wpq5jxYYQAAACU"]
[Thu Jul 30 15:19:04.575956 2026] [access_compat:error] [pid 3644432:tid 3644432] [client 64.180.68.231:54422] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:04.693603 2026] [cgi:error] [pid 3647182:tid 3647182] [client 66.132.172.214:61020] AH02812: stderr from /home/erskinen/public_html/erskinefusion.com/cgi-bin/: attempt to invoke directory as script, referer: https://www.erskinefusion.erskinenazarene.co.uk:443/cgi-bin
[Thu Jul 30 15:19:04.694349 2026] [core:error] [pid 3647182:tid 3647182] [client 66.132.172.214:61020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.erskinefusion.erskinenazarene.co.uk:443/cgi-bin
[Thu Jul 30 15:19:05.221506 2026] [ssl:error] [pid 3646008:tid 3646008] (70014)End of file found: [client 216.73.216.199:44136] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:06.025701 2026] [ssl:error] [pid 3646414:tid 3646414] (70014)End of file found: [client 216.73.216.199:30169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:06.633277 2026] [ssl:error] [pid 3644505:tid 3644505] (70014)End of file found: [client 216.73.216.199:20630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:06.740017 2026] [access_compat:error] [pid 3644036:tid 3644036] [client 136.158.25.236:5103] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:07.029577 2026] [ssl:error] [pid 3647391:tid 3647391] (EAI 2)Name or service not known: [client 144.76.19.72:33068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:07.029632 2026] [ssl:error] [pid 3647391:tid 3647391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:07.084695 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:33070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:07.084727 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:08.650802 2026] [ssl:error] [pid 3644506:tid 3644506] (70014)End of file found: [client 216.73.216.199:46585] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:09.091029 2026] [access_compat:error] [pid 3644432:tid 3644432] [client 64.180.68.231:54671] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:09.653302 2026] [ssl:error] [pid 3644435:tid 3644435] (70014)End of file found: [client 216.73.216.199:59495] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:10.172448 2026] [ssl:error] [pid 3646272:tid 3646272] (EAI 2)Name or service not known: [client 144.76.19.72:62260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:10.172499 2026] [ssl:error] [pid 3646272:tid 3646272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:10.227485 2026] [ssl:error] [pid 3647325:tid 3647325] (EAI 2)Name or service not known: [client 144.76.19.72:62262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:10.227539 2026] [ssl:error] [pid 3647325:tid 3647325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:10.762514 2026] [access_compat:error] [pid 3647358:tid 3647358] [client 112.209.180.50:15137] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:11.458738 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:37690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:11.825633 2026] [security2:error] [pid 3647325:tid 3647325] [client 43.155.188.157:52524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/"] [unique_id "amtdX6x9sRfC1D38g1Us8AAAABg"]
[Thu Jul 30 15:19:12.215600 2026] [lsapi:warn] [pid 3641975:tid 3641975] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:19:12.588221 2026] [security2:error] [pid 3646414:tid 3646414] [client 185.191.171.12:46544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/cprp-exam-passing-score"] [unique_id "amtdYB_OmI3hRl9ZFuqQ-gAAAB8"]
[Thu Jul 30 15:19:13.328809 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:62264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:13.328840 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:13.380280 2026] [ssl:error] [pid 3624888:tid 3624888] (EAI 2)Name or service not known: [client 144.76.19.72:62270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:13.380311 2026] [ssl:error] [pid 3624888:tid 3624888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:14.229240 2026] [security2:error] [pid 3624888:tid 3624888] [client 43.155.188.157:53756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "amtdYknJdvsS4POI5_z6JgAAABo"], referer: http://taylorshouse.com
[Thu Jul 30 15:19:14.475367 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:5039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:15.022126 2026] [ssl:error] [pid 3644863:tid 3644863] (70014)End of file found: [client 216.73.216.199:6356] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:15.243271 2026] [access_compat:error] [pid 3647390:tid 3647390] [client 64.180.68.231:54977] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:15.957303 2026] [security2:error] [pid 3644435:tid 3644435] [client 169.224.68.13:4384] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdYyk4joasiu_gA4ct_gAAADM"]
[Thu Jul 30 15:19:15.957365 2026] [security2:error] [pid 3644435:tid 3644435] [client 169.224.68.13:4384] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdYyk4joasiu_gA4ct_gAAADM"]
[Thu Jul 30 15:19:15.957690 2026] [security2:error] [pid 3644435:tid 3644435] [client 169.224.68.13:4384] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdYyk4joasiu_gA4ct_gAAADM"]
[Thu Jul 30 15:19:16.213593 2026] [security2:error] [pid 3644037:tid 3644037] [client 43.155.188.157:54944] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "amtdZHkrPkmPy0BnXMgENAAAACg"], referer: http://www.taylorshouse.com/home
[Thu Jul 30 15:19:16.432283 2026] [ssl:error] [pid 3639477:tid 3639477] (EAI 2)Name or service not known: [client 144.76.19.72:62282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:16.432316 2026] [ssl:error] [pid 3639477:tid 3639477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:16.483901 2026] [ssl:error] [pid 3647390:tid 3647390] (EAI 2)Name or service not known: [client 144.76.19.72:62284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:16.483933 2026] [ssl:error] [pid 3647390:tid 3647390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:16.779467 2026] [ssl:error] [pid 3647358:tid 3647358] (70014)End of file found: [client 216.73.216.199:23168] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:17.123385 2026] [access_compat:error] [pid 3646272:tid 3646272] [client 136.158.25.236:5949] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:18.310487 2026] [security2:error] [pid 3644002:tid 3644002] [client 41.251.54.75:46052] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdZsaFJFz5f-3BiLwSmgAAABE"]
[Thu Jul 30 15:19:18.310539 2026] [security2:error] [pid 3644002:tid 3644002] [client 41.251.54.75:46052] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdZsaFJFz5f-3BiLwSmgAAABE"]
[Thu Jul 30 15:19:18.310781 2026] [security2:error] [pid 3644002:tid 3644002] [client 41.251.54.75:46052] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdZsaFJFz5f-3BiLwSmgAAABE"]
[Thu Jul 30 15:19:18.560108 2026] [security2:error] [pid 3644509:tid 3644509] [client 43.155.188.157:56232] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "amtdZgTbU-EpU3ahadB41AAAADo"], referer: http://www.taylorshouse.com/home/
[Thu Jul 30 15:19:18.750426 2026] [security2:error] [pid 3644037:tid 3644037] [client 50.16.248.61:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/media/captcha/base/96aa35ad24dc446f816523e7eb774111.png"] [unique_id "amtdZnkrPkmPy0BnXMgENgAAACg"]
[Thu Jul 30 15:19:19.576654 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:61144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:19.576687 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:19.629717 2026] [ssl:error] [pid 3644002:tid 3644002] (EAI 2)Name or service not known: [client 144.76.19.72:61158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:19.629751 2026] [ssl:error] [pid 3644002:tid 3644002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:19.709551 2026] [access_compat:error] [pid 3647182:tid 3647182] [client 64.180.68.231:55218] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:19.840076 2026] [ssl:error] [pid 3644505:tid 3644505] (70014)End of file found: [client 216.73.216.199:61717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:20.456241 2026] [security2:error] [pid 3644002:tid 3644002] [client 43.165.67.31:47894] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amtdaMaFJFz5f-3BiLwSmwAAABE"]
[Thu Jul 30 15:19:20.812164 2026] [ssl:error] [pid 3647390:tid 3647390] (70014)End of file found: [client 216.73.216.199:40987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:21.097714 2026] [access_compat:error] [pid 3646008:tid 3646008] [client 136.158.25.236:6334] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:22.312857 2026] [ssl:error] [pid 3644358:tid 3644358] (70014)End of file found: [client 216.73.216.199:48945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:22.684929 2026] [ssl:error] [pid 3639477:tid 3639477] (EAI 2)Name or service not known: [client 144.76.19.72:61164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:22.684966 2026] [ssl:error] [pid 3639477:tid 3639477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:22.739957 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:61168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:22.739998 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:22.955786 2026] [security2:error] [pid 3647391:tid 3647391] [client 43.165.67.31:42290] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtdaurFzvCzlgfe3l5pZQAAADE"], referer: http://spampmusic.co.uk
[Thu Jul 30 15:19:25.225948 2026] [ssl:error] [pid 3644505:tid 3644505] (70014)End of file found: [client 216.73.216.199:65357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:25.794264 2026] [ssl:error] [pid 3639602:tid 3639602] (EAI 2)Name or service not known: [client 144.76.19.72:61176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:25.794302 2026] [ssl:error] [pid 3639602:tid 3639602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:25.850963 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:61192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:25.850990 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:26.112183 2026] [ssl:error] [pid 3644863:tid 3644863] (70014)End of file found: [client 216.73.216.199:47619] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:27.477118 2026] [security2:error] [pid 3648803:tid 3648803] [client 179.51.107.229:59280] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdbzqmDdEx_1s7jcS6HgAAABY"]
[Thu Jul 30 15:19:27.477184 2026] [security2:error] [pid 3648803:tid 3648803] [client 179.51.107.229:59280] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdbzqmDdEx_1s7jcS6HgAAABY"]
[Thu Jul 30 15:19:27.477536 2026] [security2:error] [pid 3648803:tid 3648803] [client 179.51.107.229:59280] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdbzqmDdEx_1s7jcS6HgAAABY"]
[Thu Jul 30 15:19:27.633275 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:44978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:28.906514 2026] [ssl:error] [pid 3648803:tid 3648803] (EAI 2)Name or service not known: [client 144.76.19.72:61198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:28.906569 2026] [ssl:error] [pid 3648803:tid 3648803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:28.963490 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:61208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:28.963539 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:30.207549 2026] [access_compat:error] [pid 3644510:tid 3644510] [client 64.180.68.231:55760] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:30.631412 2026] [ssl:error] [pid 3648801:tid 3648801] (70014)End of file found: [client 216.73.216.199:6852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:31.537556 2026] [ssl:error] [pid 3644863:tid 3644863] (70014)End of file found: [client 216.73.216.199:34787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:31.604428 2026] [access_compat:error] [pid 3644504:tid 3644504] [client 136.158.25.236:6939] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:32.018679 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:56110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:32.018708 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:32.074411 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:56124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:32.074439 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:33.044197 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:65362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:35.131128 2026] [ssl:error] [pid 3647182:tid 3647182] (EAI 2)Name or service not known: [client 144.76.19.72:56132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:35.131170 2026] [ssl:error] [pid 3647182:tid 3647182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:35.184614 2026] [ssl:error] [pid 3637829:tid 3637829] (EAI 2)Name or service not known: [client 144.76.19.72:56146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:35.184658 2026] [ssl:error] [pid 3637829:tid 3637829] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:35.302977 2026] [access_compat:error] [pid 3646272:tid 3646272] [client 45.158.164.139:59354] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:19:36.068695 2026] [ssl:error] [pid 3648845:tid 3648845] (70014)End of file found: [client 216.73.216.199:15361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:36.379426 2026] [access_compat:error] [pid 3647182:tid 3647182] [client 64.180.68.231:56057] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:36.489819 2026] [security2:error] [pid 3648801:tid 3648801] [client 43.140.37.167:48474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchellphotography.co.uk"] [uri "/"] [unique_id "amtdeNTdrJ3Ow0xPiRReTQAAABU"]
[Thu Jul 30 15:19:36.925099 2026] [security2:error] [pid 3648754:tid 3648754] [client 185.191.171.3:55820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.255.html"] [unique_id "amtdeAVKfYsWzfDRL_V7_gAAABQ"]
[Thu Jul 30 15:19:37.674978 2026] [core:error] [pid 3646272:tid 3646272] (13)Permission denied: [client 216.73.216.199:48637] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/libexec/utempter/utempter
[Thu Jul 30 15:19:37.819775 2026] [access_compat:error] [pid 3646414:tid 3646414] [client 136.158.25.236:7631] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:37.976143 2026] [ssl:error] [pid 3646272:tid 3646272] (70014)End of file found: [client 216.73.216.199:48637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:38.241568 2026] [ssl:error] [pid 3644504:tid 3644504] (EAI 2)Name or service not known: [client 144.76.19.72:56156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:38.241612 2026] [ssl:error] [pid 3644504:tid 3644504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:38.300747 2026] [ssl:error] [pid 3646008:tid 3646008] (EAI 2)Name or service not known: [client 144.76.19.72:56168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:38.300775 2026] [ssl:error] [pid 3646008:tid 3646008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:38.420424 2026] [access_compat:error] [pid 3648656:tid 3648656] [client 45.158.164.139:59370] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:19:39.076569 2026] [ssl:error] [pid 3644504:tid 3644504] (70014)End of file found: [client 216.73.216.199:60476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:39.413334 2026] [authz_core:error] [pid 3646373:tid 3646373] [client 66.249.66.33:47353] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:19:39.416006 2026] [authz_core:error] [pid 3646373:tid 3646373] [client 66.249.66.33:47353] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:19:40.736207 2026] [access_compat:error] [pid 3644510:tid 3644510] [client 64.180.68.231:56304] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:41.386917 2026] [ssl:error] [pid 3647389:tid 3647389] (EAI 2)Name or service not known: [client 144.76.19.72:56926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:41.386970 2026] [ssl:error] [pid 3647389:tid 3647389] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:41.444014 2026] [ssl:error] [pid 3646008:tid 3646008] (EAI 2)Name or service not known: [client 144.76.19.72:56934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:41.444041 2026] [ssl:error] [pid 3646008:tid 3646008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:41.780999 2026] [ssl:error] [pid 3648386:tid 3648386] (70014)End of file found: [client 216.73.216.199:59238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:42.148612 2026] [access_compat:error] [pid 3647390:tid 3647390] [client 136.158.25.236:7983] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:43.474912 2026] [ssl:error] [pid 3647182:tid 3647182] (70014)End of file found: [client 216.73.216.199:14138] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:43.684139 2026] [security2:error] [pid 3646272:tid 3646272] [client 85.208.96.195:20936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3308.0.html"] [unique_id "amtdf0cxuC8enJDpI2wHvQAAAAE"]
[Thu Jul 30 15:19:44.497634 2026] [ssl:error] [pid 3646414:tid 3646414] (EAI 2)Name or service not known: [client 144.76.19.72:56938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:44.497673 2026] [ssl:error] [pid 3646414:tid 3646414] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:44.554027 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:56952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:44.554059 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:44.795304 2026] [security2:error] [pid 3636745:tid 3636745] [client 216.73.216.199:63348] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/tuned-profiles-cloudlinux/oom-groups.conf"] [unique_id "amtdgIKibzXYXpClAPysLwAAAAs"]
[Thu Jul 30 15:19:44.795588 2026] [security2:error] [pid 3636745:tid 3636745] [client 216.73.216.199:63348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/tuned-profiles-cloudlinux/oom-groups.conf"] [unique_id "amtdgIKibzXYXpClAPysLwAAAAs"]
[Thu Jul 30 15:19:44.795793 2026] [security2:error] [pid 3636745:tid 3636745] [client 216.73.216.199:63348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/tuned-profiles-cloudlinux/oom-groups.conf"] [unique_id "amtdgIKibzXYXpClAPysLwAAAAs"]
[Thu Jul 30 15:19:45.096965 2026] [ssl:error] [pid 3636745:tid 3636745] (70014)End of file found: [client 216.73.216.199:63348] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:46.443096 2026] [security2:error] [pid 3646008:tid 3646008] [client 43.164.190.28:47512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "randomlearner.org.uk"] [uri "/"] [unique_id "amtdglEC6tYTe_LvUSNQVAAAAAA"]
[Thu Jul 30 15:19:46.855632 2026] [access_compat:error] [pid 3646272:tid 3646272] [client 64.180.68.231:56599] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:47.094122 2026] [ssl:error] [pid 3644504:tid 3644504] (70014)End of file found: [client 216.73.216.199:14480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:47.611827 2026] [ssl:error] [pid 3648803:tid 3648803] (EAI 2)Name or service not known: [client 144.76.19.72:56968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:47.611852 2026] [ssl:error] [pid 3648803:tid 3648803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:47.669197 2026] [ssl:error] [pid 3646008:tid 3646008] (EAI 2)Name or service not known: [client 144.76.19.72:56978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:47.669222 2026] [ssl:error] [pid 3646008:tid 3646008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:48.397281 2026] [access_compat:error] [pid 3648801:tid 3648801] [client 136.158.25.236:8425] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:49.308703 2026] [ssl:error] [pid 3648603:tid 3648603] (70014)End of file found: [client 216.73.216.199:41516] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:50.740180 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:61150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:50.740213 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:50.796245 2026] [ssl:error] [pid 3639477:tid 3639477] (EAI 2)Name or service not known: [client 144.76.19.72:61154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:50.796280 2026] [ssl:error] [pid 3639477:tid 3639477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:50.818112 2026] [ssl:error] [pid 3647391:tid 3647391] (70014)End of file found: [client 216.73.216.199:61622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:51.320231 2026] [access_compat:error] [pid 3648848:tid 3648848] [client 64.180.68.231:56851] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:52.807334 2026] [access_compat:error] [pid 3646008:tid 3646008] [client 112.209.180.50:16761] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:19:52.925333 2026] [ssl:error] [pid 3647390:tid 3647390] (70014)End of file found: [client 216.73.216.199:38008] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:53.849699 2026] [ssl:error] [pid 3644863:tid 3644863] (EAI 2)Name or service not known: [client 144.76.19.72:61160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:53.849735 2026] [ssl:error] [pid 3644863:tid 3644863] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:53.906347 2026] [ssl:error] [pid 3650211:tid 3650211] (EAI 2)Name or service not known: [client 144.76.19.72:61174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:53.906378 2026] [ssl:error] [pid 3650211:tid 3650211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:54.639633 2026] [ssl:error] [pid 3649113:tid 3649113] (70014)End of file found: [client 216.73.216.199:1674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:54.911541 2026] [security2:error] [pid 3648801:tid 3648801] [client 43.165.126.130:38348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amtditTdrJ3Ow0xPiRRehgAAABU"]
[Thu Jul 30 15:19:56.128555 2026] [ssl:error] [pid 3650333:tid 3650333] (70014)End of file found: [client 216.73.216.199:55085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:56.965331 2026] [ssl:error] [pid 3648603:tid 3648603] (EAI 2)Name or service not known: [client 144.76.19.72:61178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:56.965373 2026] [ssl:error] [pid 3648603:tid 3648603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:57.037883 2026] [ssl:error] [pid 3644002:tid 3644002] (EAI 2)Name or service not known: [client 144.76.19.72:61190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:19:57.037913 2026] [ssl:error] [pid 3644002:tid 3644002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:19:57.696706 2026] [lsapi:warn] [pid 3647359:tid 3647359] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:19:58.241218 2026] [ssl:error] [pid 3650330:tid 3650330] (70014)End of file found: [client 216.73.216.199:23871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:19:58.492748 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amtdjurFzvCzlgfe3l5pcwAAADE"]
[Thu Jul 30 15:19:58.492936 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amtdjurFzvCzlgfe3l5pcwAAADE"]
[Thu Jul 30 15:19:58.493082 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amtdjurFzvCzlgfe3l5pcwAAADE"]
[Thu Jul 30 15:19:58.493334 2026] [security2:error] [pid 3648603:tid 3648603] [client 162.141.167.72:43478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtdjmeTTxcQf8PloT8j-AAAAAU"]
[Thu Jul 30 15:19:58.493568 2026] [security2:error] [pid 3648603:tid 3648603] [client 162.141.167.72:43478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtdjmeTTxcQf8PloT8j-AAAAAU"]
[Thu Jul 30 15:19:58.493722 2026] [security2:error] [pid 3648603:tid 3648603] [client 162.141.167.72:43478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amtdjmeTTxcQf8PloT8j-AAAAAU"]
[Thu Jul 30 15:19:58.827198 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amtdjurFzvCzlgfe3l5pdAAAADE"]
[Thu Jul 30 15:19:58.827385 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amtdjurFzvCzlgfe3l5pdAAAADE"]
[Thu Jul 30 15:19:58.827529 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amtdjurFzvCzlgfe3l5pdAAAADE"]
[Thu Jul 30 15:19:59.051498 2026] [security2:error] [pid 3648603:tid 3648603] [client 162.141.167.72:43478] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amtdj2eTTxcQf8PloT8j-gAAAAU"]
[Thu Jul 30 15:19:59.051734 2026] [security2:error] [pid 3648603:tid 3648603] [client 162.141.167.72:43478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amtdj2eTTxcQf8PloT8j-gAAAAU"]
[Thu Jul 30 15:19:59.051886 2026] [security2:error] [pid 3648603:tid 3648603] [client 162.141.167.72:43478] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amtdj2eTTxcQf8PloT8j-gAAAAU"]
[Thu Jul 30 15:19:59.060246 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amtdj-rFzvCzlgfe3l5pdQAAADE"]
[Thu Jul 30 15:19:59.060454 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amtdj-rFzvCzlgfe3l5pdQAAADE"]
[Thu Jul 30 15:19:59.060586 2026] [security2:error] [pid 3647391:tid 3647391] [client 162.141.167.72:43462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amtdj-rFzvCzlgfe3l5pdQAAADE"]
[Thu Jul 30 15:19:59.104144 2026] [security2:error] [pid 3637829:tid 3637829] [client 162.141.167.72:43500] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtdjxCb4ZwFnF1qCzos2wAAAAI"]
[Thu Jul 30 15:19:59.104316 2026] [security2:error] [pid 3637829:tid 3637829] [client 162.141.167.72:43500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtdjxCb4ZwFnF1qCzos2wAAAAI"]
[Thu Jul 30 15:19:59.104452 2026] [security2:error] [pid 3637829:tid 3637829] [client 162.141.167.72:43500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtdjxCb4ZwFnF1qCzos2wAAAAI"]
[Thu Jul 30 15:19:59.105249 2026] [security2:error] [pid 3647325:tid 3647325] [client 162.141.167.72:43540] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amtdj6x9sRfC1D38g1Us_AAAABg"]
[Thu Jul 30 15:19:59.105382 2026] [security2:error] [pid 3647325:tid 3647325] [client 162.141.167.72:43540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amtdj6x9sRfC1D38g1Us_AAAABg"]
[Thu Jul 30 15:19:59.105498 2026] [security2:error] [pid 3648803:tid 3648803] [client 162.141.167.72:43546] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amtdjzqmDdEx_1s7jcS6KgAAABY"]
[Thu Jul 30 15:19:59.105504 2026] [security2:error] [pid 3647325:tid 3647325] [client 162.141.167.72:43540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amtdj6x9sRfC1D38g1Us_AAAABg"]
[Thu Jul 30 15:19:59.105626 2026] [security2:error] [pid 3648803:tid 3648803] [client 162.141.167.72:43546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amtdjzqmDdEx_1s7jcS6KgAAABY"]
[Thu Jul 30 15:19:59.105750 2026] [security2:error] [pid 3648803:tid 3648803] [client 162.141.167.72:43546] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amtdjzqmDdEx_1s7jcS6KgAAABY"]
[Thu Jul 30 15:20:00.092671 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:52696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:00.092699 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:00.146124 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:52710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:00.146142 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:00.763515 2026] [ssl:error] [pid 3636745:tid 3636745] (70014)End of file found: [client 216.73.216.199:25048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:01.564812 2026] [ssl:error] [pid 3650572:tid 3650572] (70014)End of file found: [client 216.73.216.199:39522] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:01.911931 2026] [access_compat:error] [pid 3650573:tid 3650573] [client 64.180.68.231:57398] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:02.176994 2026] [core:error] [pid 3650333:tid 3650333] [client 66.249.66.8:43641] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:20:02.177029 2026] [core:error] [pid 3650333:tid 3650333] [client 66.249.66.8:43641] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:20:03.130383 2026] [access_compat:error] [pid 3650631:tid 3650631] [client 136.158.25.236:9701] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:03.201176 2026] [ssl:error] [pid 3650632:tid 3650632] (EAI 2)Name or service not known: [client 144.76.19.72:52718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:03.201229 2026] [ssl:error] [pid 3650632:tid 3650632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:03.256859 2026] [ssl:error] [pid 3650633:tid 3650633] (EAI 2)Name or service not known: [client 144.76.19.72:52722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:03.256892 2026] [ssl:error] [pid 3650633:tid 3650633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:03.675022 2026] [ssl:error] [pid 3650632:tid 3650632] (70014)End of file found: [client 216.73.216.199:3662] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:03.805819 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 15:20:04.849910 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/3PJcpMFsD8B.php
[Thu Jul 30 15:20:06.311676 2026] [ssl:error] [pid 3648754:tid 3648754] (EAI 2)Name or service not known: [client 144.76.19.72:52734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:06.311713 2026] [ssl:error] [pid 3648754:tid 3648754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:06.365751 2026] [ssl:error] [pid 3648603:tid 3648603] (EAI 2)Name or service not known: [client 144.76.19.72:52750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:06.365793 2026] [ssl:error] [pid 3648603:tid 3648603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:06.385117 2026] [security2:error] [pid 3646008:tid 3646008] [client 101.33.66.34:49626] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "amtdllEC6tYTe_LvUSNQWQAAAAA"]
[Thu Jul 30 15:20:06.881437 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/err.php
[Thu Jul 30 15:20:07.991573 2026] [ssl:error] [pid 3644358:tid 3644358] (70014)End of file found: [client 216.73.216.199:44034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:08.415794 2026] [access_compat:error] [pid 3648754:tid 3648754] [client 64.180.68.231:57721] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:08.493168 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/img.php
[Thu Jul 30 15:20:08.508112 2026] [ssl:error] [pid 3648801:tid 3648801] (70014)End of file found: [client 216.73.216.199:13525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:09.375439 2026] [access_compat:error] [pid 3647182:tid 3647182] [client 136.158.25.236:10225] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:09.424399 2026] [ssl:error] [pid 3650632:tid 3650632] (EAI 2)Name or service not known: [client 144.76.19.72:52752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:09.424444 2026] [ssl:error] [pid 3650632:tid 3650632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:09.479500 2026] [ssl:error] [pid 3650272:tid 3650272] (EAI 2)Name or service not known: [client 144.76.19.72:52768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:09.479533 2026] [ssl:error] [pid 3650272:tid 3650272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:10.311404 2026] [ssl:error] [pid 3647389:tid 3647389] (70014)End of file found: [client 216.73.216.199:58661] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:10.801887 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/aa.php
[Thu Jul 30 15:20:12.133471 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/aa.php
[Thu Jul 30 15:20:12.501910 2026] [access_compat:error] [pid 3637829:tid 3637829] [client 64.180.68.231:57968] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:12.533782 2026] [ssl:error] [pid 3650332:tid 3650332] (EAI 2)Name or service not known: [client 144.76.19.72:36518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:12.533819 2026] [ssl:error] [pid 3650332:tid 3650332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:12.587415 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:36526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:12.587448 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:13.043838 2026] [security2:error] [pid 3644002:tid 3644002] [client 185.191.171.16:64390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/blue-states-turning-red-2022"] [unique_id "amtdncaFJFz5f-3BiLwSsQAAABE"]
[Thu Jul 30 15:20:13.213572 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/av.php
[Thu Jul 30 15:20:13.338111 2026] [security2:error] [pid 3648845:tid 3648845] [client 114.119.155.144:20129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~103,104,17,102,30/request_format~html"] [unique_id "amtdnYJ1Ey1KvqjK41RmagAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~103,104,17,102/request_format~html
[Thu Jul 30 15:20:13.564754 2026] [access_compat:error] [pid 3650632:tid 3650632] [client 136.158.25.236:10588] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:14.562447 2026] [ssl:error] [pid 3647325:tid 3647325] (70014)End of file found: [client 216.73.216.199:41667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:14.654899 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/av.php
[Thu Jul 30 15:20:14.920873 2026] [security2:error] [pid 3650272:tid 3650272] [client 114.119.155.144:20145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573257600/cat_ids~103,104,17,102,30/request_format~html"] [unique_id "amtdnuKlomu06ksz-1ezvAAAABw"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573257600/cat_ids~103,104,17,102/request_format~html
[Thu Jul 30 15:20:15.644546 2026] [ssl:error] [pid 3647390:tid 3647390] (EAI 2)Name or service not known: [client 144.76.19.72:36536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:15.644582 2026] [ssl:error] [pid 3647390:tid 3647390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:15.698845 2026] [ssl:error] [pid 3648848:tid 3648848] (EAI 2)Name or service not known: [client 144.76.19.72:36542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:15.698882 2026] [ssl:error] [pid 3648848:tid 3648848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:16.674320 2026] [ssl:error] [pid 3648803:tid 3648803] (70014)End of file found: [client 216.73.216.199:1798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:16.890918 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xa.php
[Thu Jul 30 15:20:17.572832 2026] [ssl:error] [pid 3650572:tid 3650572] (70014)End of file found: [client 216.73.216.199:11455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:18.755308 2026] [ssl:error] [pid 3648847:tid 3648847] (EAI 2)Name or service not known: [client 144.76.19.72:36554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:18.755353 2026] [ssl:error] [pid 3648847:tid 3648847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:18.810039 2026] [ssl:error] [pid 3648603:tid 3648603] (EAI 2)Name or service not known: [client 144.76.19.72:36570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:18.810085 2026] [ssl:error] [pid 3648603:tid 3648603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:19.990037 2026] [ssl:error] [pid 3650425:tid 3650425] (70014)End of file found: [client 216.73.216.199:36374] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:20.189716 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/media.php
[Thu Jul 30 15:20:21.865702 2026] [ssl:error] [pid 3646334:tid 3646334] (EAI 2)Name or service not known: [client 144.76.19.72:49646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:21.865745 2026] [ssl:error] [pid 3646334:tid 3646334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:21.920242 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:49652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:21.920270 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:22.009860 2026] [ssl:error] [pid 3647391:tid 3647391] (70014)End of file found: [client 216.73.216.199:13719] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:22.894195 2026] [ssl:error] [pid 3646334:tid 3646334] (70014)End of file found: [client 216.73.216.199:48710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:23.102486 2026] [access_compat:error] [pid 3644510:tid 3644510] [client 64.180.68.231:58584] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:23.382361 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/images.php
[Thu Jul 30 15:20:24.150401 2026] [access_compat:error] [pid 3644432:tid 3644432] [client 136.158.25.236:11439] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:24.416648 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/gecko.php
[Thu Jul 30 15:20:25.034435 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:49658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:25.034471 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:25.088850 2026] [ssl:error] [pid 3650331:tid 3650331] (EAI 2)Name or service not known: [client 144.76.19.72:49664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:25.088885 2026] [ssl:error] [pid 3650331:tid 3650331] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:25.193695 2026] [security2:error] [pid 3646373:tid 3646373] [client 150.5.129.52:18915] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdqelBy0Lpv8sPFHpg6AAAAAY"]
[Thu Jul 30 15:20:25.193755 2026] [security2:error] [pid 3646373:tid 3646373] [client 150.5.129.52:18915] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdqelBy0Lpv8sPFHpg6AAAAAY"]
[Thu Jul 30 15:20:25.193997 2026] [security2:error] [pid 3646373:tid 3646373] [client 150.5.129.52:18915] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdqelBy0Lpv8sPFHpg6AAAAAY"]
[Thu Jul 30 15:20:25.469798 2026] [ssl:error] [pid 3644509:tid 3644509] (70014)End of file found: [client 216.73.216.199:51843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:25.773328 2026] [ssl:error] [pid 3644505:tid 3644505] (70014)End of file found: [client 216.73.216.199:11906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:25.780647 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/82.php
[Thu Jul 30 15:20:26.760813 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xstelth.php
[Thu Jul 30 15:20:27.131361 2026] [security2:error] [pid 3647391:tid 3647391] [client 43.166.251.71:63889] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdq-rFzvCzlgfe3l5pigAAADE"]
[Thu Jul 30 15:20:27.131424 2026] [security2:error] [pid 3647391:tid 3647391] [client 43.166.251.71:63889] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdq-rFzvCzlgfe3l5pigAAADE"]
[Thu Jul 30 15:20:27.131684 2026] [security2:error] [pid 3647391:tid 3647391] [client 43.166.251.71:63889] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdq-rFzvCzlgfe3l5pigAAADE"]
[Thu Jul 30 15:20:27.384186 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:6744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:28.050858 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xp.php
[Thu Jul 30 15:20:29.027993 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/admin.php
[Thu Jul 30 15:20:29.339225 2026] [ssl:error] [pid 3644506:tid 3644506] (EAI 2)Name or service not known: [client 144.76.19.72:49678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:29.339255 2026] [ssl:error] [pid 3644506:tid 3644506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:29.626193 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/admin.php
[Thu Jul 30 15:20:29.707546 2026] [ssl:error] [pid 3644506:tid 3644506] (EAI 2)Name or service not known: [client 144.76.19.72:49690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:29.707569 2026] [ssl:error] [pid 3644506:tid 3644506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:29.872718 2026] [access_compat:error] [pid 3647389:tid 3647389] [client 64.180.68.231:58902] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:29.925684 2026] [authz_core:error] [pid 3646334:tid 3646334] [client 66.249.66.33:58265] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:20:29.928333 2026] [authz_core:error] [pid 3646334:tid 3646334] [client 66.249.66.33:58265] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:20:30.298369 2026] [security2:error] [pid 3650211:tid 3650211] [client 43.166.251.71:29137] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdrj1ahHzXK8xYL263LgAAAAc"]
[Thu Jul 30 15:20:30.298426 2026] [security2:error] [pid 3650211:tid 3650211] [client 43.166.251.71:29137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtdrj1ahHzXK8xYL263LgAAAAc"]
[Thu Jul 30 15:20:30.298700 2026] [security2:error] [pid 3650211:tid 3650211] [client 43.166.251.71:29137] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtdrj1ahHzXK8xYL263LgAAAAc"]
[Thu Jul 30 15:20:30.497115 2026] [access_compat:error] [pid 3651804:tid 3651804] [client 136.158.25.236:11976] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:30.640835 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/adminner.php
[Thu Jul 30 15:20:30.874400 2026] [ssl:error] [pid 3650211:tid 3650211] (70014)End of file found: [client 216.73.216.199:1202] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:31.201342 2026] [core:error] [pid 3647389:tid 3647389] (13)Permission denied: [client 216.73.216.199:61519] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/803971.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.02afbc20.tmp
[Thu Jul 30 15:20:31.448023 2026] [security2:error] [pid 3651803:tid 3651803] [client 43.153.122.30:53580] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtdr54bZN6GnT31WO1uPAAAABg"]
[Thu Jul 30 15:20:31.600639 2026] [ssl:error] [pid 3647389:tid 3647389] (70014)End of file found: [client 216.73.216.199:61519] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:31.834545 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:31.834638 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.021443 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/php8.php
[Thu Jul 30 15:20:32.021524 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.054604 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/a.php
[Thu Jul 30 15:20:32.135839 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/assets
[Thu Jul 30 15:20:32.135920 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.249935 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/lite.php
[Thu Jul 30 15:20:32.250015 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.365431 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/term.php
[Thu Jul 30 15:20:32.365511 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.480461 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/config.php
[Thu Jul 30 15:20:32.480542 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.626721 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:32.626802 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.667598 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/a.php
[Thu Jul 30 15:20:32.741272 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-good.php
[Thu Jul 30 15:20:32.741361 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:32.760815 2026] [ssl:error] [pid 3648603:tid 3648603] (EAI 2)Name or service not known: [client 144.76.19.72:59796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:32.760840 2026] [ssl:error] [pid 3648603:tid 3648603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:32.786658 2026] [access_compat:error] [pid 3644506:tid 3644506] [client 199.45.155.70:51564] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:20:32.815711 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:59798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:32.815751 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:32.955221 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:32.955306 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:33.111494 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/abcd.php
[Thu Jul 30 15:20:33.111586 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:33.226093 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/x.php
[Thu Jul 30 15:20:33.226186 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:33.403884 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/goods.php
[Thu Jul 30 15:20:33.403973 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:33.519216 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-access.php
[Thu Jul 30 15:20:33.519318 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:33.537511 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/k.php
[Thu Jul 30 15:20:33.629968 2026] [access_compat:error] [pid 3647390:tid 3647390] [client 64.180.68.231:59164] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:33.633806 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:33.633884 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:33.748606 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/filemanager.php
[Thu Jul 30 15:20:33.748698 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:34.092088 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:34.092174 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:34.341721 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/bthil.php
[Thu Jul 30 15:20:34.341798 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:34.357330 2026] [lsapi:warn] [pid 3648848:tid 3648848] [client 194.249.231.23:47772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 15:20:34.357376 2026] [lsapi:warn] [pid 3648848:tid 3648848] [client 194.249.231.23:47772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.facebook.com/
[Thu Jul 30 15:20:34.433191 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/222.php
[Thu Jul 30 15:20:34.456577 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xmlrpc.php
[Thu Jul 30 15:20:34.456658 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:34.607350 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:34.607440 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:34.683115 2026] [access_compat:error] [pid 3648656:tid 3648656] [client 136.158.25.236:12299] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:34.788335 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/cv.php
[Thu Jul 30 15:20:34.788425 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:34.918197 2026] [ssl:error] [pid 3651803:tid 3651803] (70014)End of file found: [client 216.73.216.199:32235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:34.950142 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:34.950227 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.064729 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/css.php
[Thu Jul 30 15:20:35.064812 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.223853 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:35.223936 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.317484 2026] [access_compat:error] [pid 3648603:tid 3648603] [client 45.158.164.139:46530] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:20:35.338961 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/core.php
[Thu Jul 30 15:20:35.339041 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.498711 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin
[Thu Jul 30 15:20:35.498791 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.658435 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin
[Thu Jul 30 15:20:35.658561 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.788932 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/storage
[Thu Jul 30 15:20:35.789058 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.871207 2026] [ssl:error] [pid 3651757:tid 3651757] (EAI 2)Name or service not known: [client 144.76.19.72:59800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:35.871245 2026] [ssl:error] [pid 3651757:tid 3651757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:35.903857 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ahax.php
[Thu Jul 30 15:20:35.903940 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:35.924494 2026] [ssl:error] [pid 3644510:tid 3644510] (EAI 2)Name or service not known: [client 144.76.19.72:59814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:35.924516 2026] [ssl:error] [pid 3644510:tid 3644510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:36.056793 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/zoom1.php
[Thu Jul 30 15:20:36.056878 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:36.216341 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/txets.php
[Thu Jul 30 15:20:36.216428 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:36.331022 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:36.331121 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:36.353940 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/mac.php
[Thu Jul 30 15:20:36.447943 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:36.448031 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:36.621757 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:36.621860 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:36.727821 2026] [ssl:error] [pid 3644506:tid 3644506] (70014)End of file found: [client 216.73.216.199:43595] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:36.736470 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:36.736548 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:36.889633 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:36.889718 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.005676 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/radio.php
[Thu Jul 30 15:20:37.005763 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.048856 2026] [security2:error] [pid 3648801:tid 3648801] [client 94.154.43.185:64700] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.baconkitty.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtdtdTdrJ3Ow0xPiRRelQAAABU"]
[Thu Jul 30 15:20:37.049037 2026] [security2:error] [pid 3648801:tid 3648801] [client 94.154.43.185:64700] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.baconkitty.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtdtdTdrJ3Ow0xPiRRelQAAABU"]
[Thu Jul 30 15:20:37.049270 2026] [security2:error] [pid 3648801:tid 3648801] [client 94.154.43.185:64700] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.baconkitty.josieandmatt.co.uk"] [uri "/.env"] [unique_id "amtdtdTdrJ3Ow0xPiRRelQAAABU"]
[Thu Jul 30 15:20:37.121263 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/item.php
[Thu Jul 30 15:20:37.121354 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.219246 2026] [ssl:error] [pid 3650332:tid 3650332] (70014)End of file found: [client 216.73.216.199:38046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:37.235979 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/t.php
[Thu Jul 30 15:20:37.236062 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.413765 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/i.php
[Thu Jul 30 15:20:37.413851 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.528864 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/deepseek_d.php
[Thu Jul 30 15:20:37.528960 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.645231 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:37.645336 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.796310 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/.well-known/acme-challenge/file.php
[Thu Jul 30 15:20:37.796405 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:37.955786 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:37.955870 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.070287 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:38.070374 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.184796 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/assets
[Thu Jul 30 15:20:38.184882 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.332424 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/bgymj.php
[Thu Jul 30 15:20:38.332510 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.364568 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/uploads/index.php
[Thu Jul 30 15:20:38.364620 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/uploads/index.php8
[Thu Jul 30 15:20:38.364648 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/uploads/index.php7
[Thu Jul 30 15:20:38.364674 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/uploads/index.php5
[Thu Jul 30 15:20:38.364903 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-content/uploads/index.phtml
[Thu Jul 30 15:20:38.448719 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/modules
[Thu Jul 30 15:20:38.448836 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.563994 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/images
[Thu Jul 30 15:20:38.564102 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.688175 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-load.php
[Thu Jul 30 15:20:38.688276 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.812099 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:38.812203 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.979299 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/a.php
[Thu Jul 30 15:20:38.979433 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:38.980640 2026] [ssl:error] [pid 3648801:tid 3648801] (EAI 2)Name or service not known: [client 144.76.19.72:59828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:38.980680 2026] [ssl:error] [pid 3648801:tid 3648801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:39.044728 2026] [ssl:error] [pid 3650272:tid 3650272] (EAI 2)Name or service not known: [client 144.76.19.72:59830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:39.044763 2026] [ssl:error] [pid 3650272:tid 3650272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:39.094770 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/u.php
[Thu Jul 30 15:20:39.094860 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:39.251898 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/r.php
[Thu Jul 30 15:20:39.251982 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:39.366723 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-blog.php
[Thu Jul 30 15:20:39.366812 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:39.481223 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xxx.php
[Thu Jul 30 15:20:39.481310 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:39.564561 2026] [security2:error] [pid 3647390:tid 3647390] [client 185.191.171.13:44190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9073.0.html"] [unique_id "amtdtz6N5eiGX-rO8jal0gAAACo"]
[Thu Jul 30 15:20:39.637598 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/randkeyword.PhP7
[Thu Jul 30 15:20:39.637693 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:39.752438 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/vendor
[Thu Jul 30 15:20:39.752533 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:39.764017 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.php8
[Thu Jul 30 15:20:39.764080 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.php7
[Thu Jul 30 15:20:39.764107 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.php5
[Thu Jul 30 15:20:39.764329 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Text/index.phtml
[Thu Jul 30 15:20:39.833425 2026] [security2:error] [pid 3647391:tid 3647391] [client 142.44.233.126:20948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "iapib.com"] [uri "/robots.txt"] [unique_id "amtdt-rFzvCzlgfe3l5pkQAAADE"]
[Thu Jul 30 15:20:39.834351 2026] [access_compat:error] [pid 3648848:tid 3648848] [client 64.180.68.231:59464] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:39.867179 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/tool.php
[Thu Jul 30 15:20:39.867267 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.061703 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content.php
[Thu Jul 30 15:20:40.061799 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.176162 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/k.php
[Thu Jul 30 15:20:40.176244 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.299688 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/root.php
[Thu Jul 30 15:20:40.299769 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.364102 2026] [access_compat:error] [pid 3647391:tid 3647391] [client 45.158.164.139:39338] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:20:40.414106 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ws.php
[Thu Jul 30 15:20:40.414194 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.528688 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/p.php
[Thu Jul 30 15:20:40.528768 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.638050 2026] [ssl:error] [pid 3647390:tid 3647390] (70014)End of file found: [client 216.73.216.199:32135] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:40.690639 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/elp.php
[Thu Jul 30 15:20:40.690732 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.805705 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/a1.php
[Thu Jul 30 15:20:40.805795 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:40.967653 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:40.967735 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:41.018276 2026] [security2:error] [pid 3651803:tid 3651803] [client 51.195.215.236:23620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "iapib.com"] [uri "/index.html"] [unique_id "amtduZ4bZN6GnT31WO1uSgAAABg"]
[Thu Jul 30 15:20:41.098777 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/ops.php
[Thu Jul 30 15:20:41.117103 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/alfa-rex.php7
[Thu Jul 30 15:20:41.117184 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:41.282625 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:41.282719 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:41.446788 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/install.php
[Thu Jul 30 15:20:41.446889 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:41.476821 2026] [access_compat:error] [pid 3644432:tid 3644432] [client 112.209.180.50:14432] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:41.561094 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:41.561176 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:41.693747 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/upload.php
[Thu Jul 30 15:20:41.693836 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:41.854004 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:41.854104 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:41.968432 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:41.968521 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:42.083666 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:42.083753 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:42.090596 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/8.php
[Thu Jul 30 15:20:42.096998 2026] [ssl:error] [pid 3647182:tid 3647182] (EAI 2)Name or service not known: [client 144.76.19.72:61598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:42.097021 2026] [ssl:error] [pid 3647182:tid 3647182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:42.153097 2026] [ssl:error] [pid 3639477:tid 3639477] (EAI 2)Name or service not known: [client 144.76.19.72:61602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:42.153124 2026] [ssl:error] [pid 3639477:tid 3639477] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:42.200271 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/files.php
[Thu Jul 30 15:20:42.200359 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:42.481404 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/o.php
[Thu Jul 30 15:20:42.481487 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:42.650271 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file2.php
[Thu Jul 30 15:20:42.650352 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:42.793712 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/.well-known/gecko-litespeed.php
[Thu Jul 30 15:20:42.793796 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:42.908099 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xda.php
[Thu Jul 30 15:20:42.908184 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:42.992593 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/FWAZ.php
[Thu Jul 30 15:20:43.047515 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:15134] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_net/drivers/virtio:virtio_net/bind
[Thu Jul 30 15:20:43.066367 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/theme.php
[Thu Jul 30 15:20:43.066467 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:43.180676 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/classwithtostring.php
[Thu Jul 30 15:20:43.180758 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:43.350635 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/news.php
[Thu Jul 30 15:20:43.350717 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:43.467846 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/about
[Thu Jul 30 15:20:43.467935 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:43.582517 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:43.582608 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:43.750090 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:43.750171 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:43.868287 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:43.868367 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.017450 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/lock360.php
[Thu Jul 30 15:20:44.017536 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.147550 2026] [lsapi:warn] [pid 3650332:tid 3650332] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:20:44.181828 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-conflg.php
[Thu Jul 30 15:20:44.181911 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.247944 2026] [access_compat:error] [pid 3650425:tid 3650425] [client 64.180.68.231:59716] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:44.296305 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/123.php
[Thu Jul 30 15:20:44.296401 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.370585 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/biufile.php
[Thu Jul 30 15:20:44.411836 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/yanz.php
[Thu Jul 30 15:20:44.411925 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.526080 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/autoload_classmap.php
[Thu Jul 30 15:20:44.526163 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.640587 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/bi.php
[Thu Jul 30 15:20:44.640669 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.755179 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/cc.php
[Thu Jul 30 15:20:44.755268 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.871615 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/files
[Thu Jul 30 15:20:44.871712 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:44.987342 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1.php7
[Thu Jul 30 15:20:44.987457 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:45.102034 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/disagraeosc.php
[Thu Jul 30 15:20:45.102140 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:45.155306 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:15134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:45.213354 2026] [ssl:error] [pid 3650211:tid 3650211] (EAI 2)Name or service not known: [client 144.76.19.72:61606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:45.213385 2026] [ssl:error] [pid 3650211:tid 3650211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:45.256309 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/coffexium.php
[Thu Jul 30 15:20:45.270202 2026] [ssl:error] [pid 3646412:tid 3646412] (EAI 2)Name or service not known: [client 144.76.19.72:61616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:45.270230 2026] [ssl:error] [pid 3646412:tid 3646412] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:45.300685 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-logs.php
[Thu Jul 30 15:20:45.300774 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:45.346017 2026] [access_compat:error] [pid 3646334:tid 3646334] [client 136.158.25.236:56560] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:45.460963 2026] [ssl:error] [pid 3651803:tid 3651803] (70014)End of file found: [client 216.73.216.199:55152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:45.487153 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:45.487241 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:45.513092 2026] [core:crit] [pid 3649113:tid 3649113] (13)Permission denied: [client 52.167.144.184:63800] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 15:20:45.668855 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/system_log.php
[Thu Jul 30 15:20:45.668945 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:45.786903 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/24.php
[Thu Jul 30 15:20:45.786995 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:45.905030 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:45.905130 2026] [rewrite:error] [pid 3648845:tid 3648845] [client 172.202.44.182:34442] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:46.239898 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/simple.php
[Thu Jul 30 15:20:46.668507 2026] [core:error] [pid 3646412:tid 3646412] (13)Permission denied: [client 216.73.216.199:20668] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/usersize
[Thu Jul 30 15:20:47.129678 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/fpwch.php
[Thu Jul 30 15:20:47.271490 2026] [ssl:error] [pid 3646412:tid 3646412] (70014)End of file found: [client 216.73.216.199:20668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:48.021577 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/dex.php
[Thu Jul 30 15:20:48.143789 2026] [access_compat:error] [pid 3647390:tid 3647390] [client 5.127.0.46:59984] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:20:48.334556 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:61624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:48.334589 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:48.396602 2026] [ssl:error] [pid 3647391:tid 3647391] (EAI 2)Name or service not known: [client 144.76.19.72:61632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:48.396648 2026] [ssl:error] [pid 3647391:tid 3647391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:48.918528 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/1.php
[Thu Jul 30 15:20:49.581989 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:49.582096 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:49.655143 2026] [core:crit] [pid 3650425:tid 3650425] (13)Permission denied: [client 52.167.144.204:8744] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 15:20:49.698275 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin
[Thu Jul 30 15:20:49.698357 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:49.809035 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/modern/index.php8
[Thu Jul 30 15:20:49.809097 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/modern/index.php7
[Thu Jul 30 15:20:49.809129 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/modern/index.php5
[Thu Jul 30 15:20:49.809411 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-admin/css/colors/modern/index.phtml
[Thu Jul 30 15:20:49.859227 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:49.859313 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:49.976289 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:49.976381 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:50.092293 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/num.php
[Thu Jul 30 15:20:50.092374 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:50.233954 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:50.234043 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:50.350852 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:50.350932 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:50.403161 2026] [security2:error] [pid 3646414:tid 3646414] [client 52.238.199.152:4740] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "orgent.fr"] [uri "/wp-config.php"] [unique_id "amtdwh_OmI3hRl9ZFuqRMAAAAB8"]
[Thu Jul 30 15:20:50.403309 2026] [security2:error] [pid 3646414:tid 3646414] [client 52.238.199.152:4740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/wp-config.php"] [unique_id "amtdwh_OmI3hRl9ZFuqRMAAAAB8"]
[Thu Jul 30 15:20:50.466506 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:50.466597 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:50.482912 2026] [ssl:error] [pid 3648848:tid 3648848] (70014)End of file found: [client 216.73.216.199:26927] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:50.581550 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:50.581634 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:50.685541 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/config.json.php
[Thu Jul 30 15:20:50.776339 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:63132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:50.886716 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/gifclass.php
[Thu Jul 30 15:20:50.886799 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:51.060305 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:51.060405 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:51.205343 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:20:51.205446 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:51.320665 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/css
[Thu Jul 30 15:20:51.320768 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:51.362144 2026] [authz_core:error] [pid 3648655:tid 3648655] [client 66.249.66.33:37337] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:20:51.364809 2026] [authz_core:error] [pid 3648655:tid 3648655] [client 66.249.66.33:37337] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:20:51.436118 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-cron.php
[Thu Jul 30 15:20:51.436210 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:51.451545 2026] [ssl:error] [pid 3644510:tid 3644510] (EAI 2)Name or service not known: [client 144.76.19.72:60028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:51.451571 2026] [ssl:error] [pid 3644510:tid 3644510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:51.503079 2026] [ssl:error] [pid 3650632:tid 3650632] (EAI 2)Name or service not known: [client 144.76.19.72:60042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:51.503118 2026] [ssl:error] [pid 3650632:tid 3650632] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:51.551647 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-block.php
[Thu Jul 30 15:20:51.551736 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:51.670459 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:20:51.670544 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:51.671343 2026] [security2:error] [pid 3646414:tid 3646414] [client 52.238.199.152:4740] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtdwh_OmI3hRl9ZFuqRMAAAAB8"]
[Thu Jul 30 15:20:51.833409 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:20:51.833494 2026] [rewrite:error] [pid 3651756:tid 3651756] [client 172.202.44.182:54319] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:20:52.085260 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/k2.php
[Thu Jul 30 15:20:52.603646 2026] [ssl:error] [pid 3651800:tid 3651800] (70014)End of file found: [client 216.73.216.199:60069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:53.146037 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/raw.php
[Thu Jul 30 15:20:53.876078 2026] [security2:error] [pid 3644432:tid 3644432] [client 20.63.98.115:38404] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightredsocks.com"] [uri "/wp-config.php"] [unique_id "amtdxcPS8Q6bjhpUsG5HnQAAAC0"]
[Thu Jul 30 15:20:53.876288 2026] [security2:error] [pid 3644432:tid 3644432] [client 20.63.98.115:38404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "brightredsocks.com"] [uri "/wp-config.php"] [unique_id "amtdxcPS8Q6bjhpUsG5HnQAAAC0"]
[Thu Jul 30 15:20:53.876554 2026] [security2:error] [pid 3644432:tid 3644432] [client 20.63.98.115:38404] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "brightredsocks.com"] [uri "/wp-config.php"] [unique_id "amtdxcPS8Q6bjhpUsG5HnQAAAC0"]
[Thu Jul 30 15:20:54.065010 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp.php
[Thu Jul 30 15:20:54.276990 2026] [security2:error] [pid 3650211:tid 3650211] [client 170.106.167.214:60234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtdxj1ahHzXK8xYL263OAAAAAc"]
[Thu Jul 30 15:20:54.587656 2026] [ssl:error] [pid 3648847:tid 3648847] (EAI 2)Name or service not known: [client 144.76.19.72:60052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:54.587701 2026] [ssl:error] [pid 3648847:tid 3648847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:54.640823 2026] [ssl:error] [pid 3651803:tid 3651803] (EAI 2)Name or service not known: [client 144.76.19.72:60056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:54.640876 2026] [ssl:error] [pid 3651803:tid 3651803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:54.663578 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp.php
[Thu Jul 30 15:20:54.806385 2026] [access_compat:error] [pid 3651801:tid 3651801] [client 64.180.68.231:60257] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:55.652230 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/fffm.php
[Thu Jul 30 15:20:55.806203 2026] [security2:error] [pid 3650572:tid 3650572] [client 170.106.167.214:60872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtdxz-Bhje9Myn2lzZq4QAAADI"], referer: http://www.1stcolsterworthscouts.org.uk
[Thu Jul 30 15:20:55.923335 2026] [ssl:error] [pid 3651803:tid 3651803] (70014)End of file found: [client 216.73.216.199:62781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:56.030738 2026] [access_compat:error] [pid 3652931:tid 3652931] [client 112.209.180.50:15098] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:20:56.227421 2026] [ssl:error] [pid 3650211:tid 3650211] (70014)End of file found: [client 216.73.216.199:1260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:56.239944 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/fffm.php
[Thu Jul 30 15:20:57.119889 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/111.php
[Thu Jul 30 15:20:57.696729 2026] [ssl:error] [pid 3648847:tid 3648847] (EAI 2)Name or service not known: [client 144.76.19.72:60062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:57.696759 2026] [ssl:error] [pid 3648847:tid 3648847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:57.753592 2026] [ssl:error] [pid 3646008:tid 3646008] (EAI 2)Name or service not known: [client 144.76.19.72:60066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:20:57.753621 2026] [ssl:error] [pid 3646008:tid 3646008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:20:58.009721 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php8
[Thu Jul 30 15:20:58.009767 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php7
[Thu Jul 30 15:20:58.009806 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php5
[Thu Jul 30 15:20:58.010032 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.phtml
[Thu Jul 30 15:20:58.032355 2026] [ssl:error] [pid 3651800:tid 3651800] (70014)End of file found: [client 216.73.216.199:34785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:20:59.129274 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php8
[Thu Jul 30 15:20:59.129322 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php7
[Thu Jul 30 15:20:59.129347 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.php5
[Thu Jul 30 15:20:59.129570 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-includes/Requests/index.phtml
[Thu Jul 30 15:21:00.620647 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/ws.php
[Thu Jul 30 15:21:00.811462 2026] [ssl:error] [pid 3651804:tid 3651804] (EAI 2)Name or service not known: [client 144.76.19.72:43602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:00.811502 2026] [ssl:error] [pid 3651804:tid 3651804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:00.866346 2026] [ssl:error] [pid 3653134:tid 3653134] (EAI 2)Name or service not known: [client 144.76.19.72:43616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:00.866373 2026] [ssl:error] [pid 3653134:tid 3653134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:00.964566 2026] [access_compat:error] [pid 3646334:tid 3646334] [client 64.180.68.231:60554] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:01.456682 2026] [core:error] [pid 3646008:tid 3646008] (13)Permission denied: [client 216.73.216.199:37963] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2587416.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.a009afa2.tmp
[Thu Jul 30 15:21:01.758795 2026] [ssl:error] [pid 3646008:tid 3646008] (70014)End of file found: [client 216.73.216.199:37963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:01.828543 2026] [security2:error] [pid 3653216:tid 3653216] [client 124.221.140.98:58898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.acthoroughbreds.com"] [uri "/"] [unique_id "amtdzQwbEYV1b6N9CAwdXwAAADE"]
[Thu Jul 30 15:21:01.829045 2026] [authz_core:error] [pid 3653216:tid 3653216] [client 124.221.140.98:58898] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 15:21:01.829111 2026] [authz_core:error] [pid 3653216:tid 3653216] [client 124.221.140.98:58898] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 15:21:02.050505 2026] [security2:error] [pid 3646412:tid 3646412] [client 172.104.55.33:51526] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elass.me"] [uri "/sftp-config.json"] [unique_id "amtdzvPtI9AoOLGpToQPWQAAAA4"]
[Thu Jul 30 15:21:02.050692 2026] [security2:error] [pid 3646412:tid 3646412] [client 172.104.55.33:51526] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "elass.me"] [uri "/sftp-config.json"] [unique_id "amtdzvPtI9AoOLGpToQPWQAAAA4"]
[Thu Jul 30 15:21:02.050889 2026] [security2:error] [pid 3646412:tid 3646412] [client 172.104.55.33:51526] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "elass.me"] [uri "/sftp-config.json"] [unique_id "amtdzvPtI9AoOLGpToQPWQAAAA4"]
[Thu Jul 30 15:21:02.373806 2026] [access_compat:error] [pid 3647390:tid 3647390] [client 136.158.25.236:14469] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:02.784502 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/coffee.php
[Thu Jul 30 15:21:03.567586 2026] [ssl:error] [pid 3650211:tid 3650211] (70014)End of file found: [client 216.73.216.199:34977] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:03.732590 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/coffee.php
[Thu Jul 30 15:21:03.925104 2026] [ssl:error] [pid 3651801:tid 3651801] (EAI 2)Name or service not known: [client 144.76.19.72:43628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:03.925139 2026] [ssl:error] [pid 3651801:tid 3651801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:03.976909 2026] [ssl:error] [pid 3650532:tid 3650532] (EAI 2)Name or service not known: [client 144.76.19.72:43636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:03.976938 2026] [ssl:error] [pid 3650532:tid 3650532] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:04.080185 2026] [core:error] [pid 3651801:tid 3651801] (13)Permission denied: [client 216.73.216.199:52072] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/2228084.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.bab6cbcb.tmp
[Thu Jul 30 15:21:04.653792 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/goods.php
[Thu Jul 30 15:21:05.344683 2026] [access_compat:error] [pid 3650631:tid 3650631] [client 64.180.68.231:60807] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:05.383203 2026] [ssl:error] [pid 3651801:tid 3651801] (70014)End of file found: [client 216.73.216.199:52072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:05.823945 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/about.php
[Thu Jul 30 15:21:06.108384 2026] [security2:error] [pid 3639602:tid 3639602] [client 185.191.171.14:22216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.webstersltd.com"] [uri "/robots.txt"] [unique_id "amtd0iM789E1qbCMMufVTQAAADA"]
[Thu Jul 30 15:21:06.165777 2026] [access_compat:error] [pid 3650271:tid 3650271] [client 136.158.25.236:14787] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:06.328141 2026] [authz_core:error] [pid 3652711:tid 3652711] [client 66.249.66.35:43458] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:21:06.330848 2026] [authz_core:error] [pid 3652711:tid 3652711] [client 66.249.66.35:43458] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:21:06.808467 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/about.php
[Thu Jul 30 15:21:06.836010 2026] [security2:error] [pid 3648603:tid 3648603] [client 20.63.98.115:16516] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "sarahwiseman.co.uk"] [uri "/wp-config.php"] [unique_id "amtd0meTTxcQf8PloT8kNgAAAAU"]
[Thu Jul 30 15:21:06.836221 2026] [security2:error] [pid 3648603:tid 3648603] [client 20.63.98.115:16516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahwiseman.co.uk"] [uri "/wp-config.php"] [unique_id "amtd0meTTxcQf8PloT8kNgAAAAU"]
[Thu Jul 30 15:21:06.910089 2026] [security2:error] [pid 3651757:tid 3651757] [client 185.191.171.7:27604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.webstersltd.com"] [uri "/web-internet-services.html"] [unique_id "amtd0qePTET_eTorjulTsgAAAAg"]
[Thu Jul 30 15:21:07.033964 2026] [ssl:error] [pid 3653136:tid 3653136] (EAI 2)Name or service not known: [client 144.76.19.72:43644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:07.033997 2026] [ssl:error] [pid 3653136:tid 3653136] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:07.086299 2026] [ssl:error] [pid 3650332:tid 3650332] (70014)End of file found: [client 216.73.216.199:55470] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:07.088361 2026] [security2:error] [pid 3648603:tid 3648603] [client 20.63.98.115:16516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "sarahwiseman.co.uk"] [uri "/index.php"] [unique_id "amtd0meTTxcQf8PloT8kNgAAAAU"]
[Thu Jul 30 15:21:07.092412 2026] [ssl:error] [pid 3653075:tid 3653075] (EAI 2)Name or service not known: [client 144.76.19.72:43652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:07.092437 2026] [ssl:error] [pid 3653075:tid 3653075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:07.791301 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/admin.php
[Thu Jul 30 15:21:08.449892 2026] [access_compat:error] [pid 3651803:tid 3651803] [client 123.30.233.48:55362] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xmlrpc.php
[Thu Jul 30 15:21:09.324384 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/inputs.php
[Thu Jul 30 15:21:09.909141 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:40099] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:10.147562 2026] [ssl:error] [pid 3653075:tid 3653075] (EAI 2)Name or service not known: [client 144.76.19.72:35758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:10.147587 2026] [ssl:error] [pid 3653075:tid 3653075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:10.203588 2026] [ssl:error] [pid 3653216:tid 3653216] (EAI 2)Name or service not known: [client 144.76.19.72:35770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:10.203621 2026] [ssl:error] [pid 3653216:tid 3653216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:10.613197 2026] [cgi:error] [pid 3646412:tid 3646412] [client 20.63.98.115:20257] AH02811: stderr from /home/redsocks/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:21:10.726820 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:22144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:10.968921 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/inputs.php
[Thu Jul 30 15:21:11.582170 2026] [access_compat:error] [pid 3648655:tid 3648655] [client 64.180.68.231:61108] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:11.910838 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/adminfuns.php
[Thu Jul 30 15:21:12.512788 2026] [ssl:error] [pid 3653216:tid 3653216] (70014)End of file found: [client 216.73.216.199:57050] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:12.587945 2026] [access_compat:error] [pid 3643328:tid 3643328] [client 136.158.25.236:15265] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:12.856955 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/adminfuns.php
[Thu Jul 30 15:21:13.258300 2026] [ssl:error] [pid 3648847:tid 3648847] (EAI 2)Name or service not known: [client 144.76.19.72:35782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:13.258346 2026] [ssl:error] [pid 3648847:tid 3648847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:13.311469 2026] [ssl:error] [pid 3650631:tid 3650631] (EAI 2)Name or service not known: [client 144.76.19.72:35794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:13.311521 2026] [ssl:error] [pid 3650631:tid 3650631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:13.760001 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/404.php
[Thu Jul 30 15:21:13.841587 2026] [security2:error] [pid 3653213:tid 3653213] [client 85.208.96.206:35368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/william-lupo-age"] [unique_id "amtd2SMBrtVSFO4r8djdMwAAACc"]
[Thu Jul 30 15:21:14.348192 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/404.php
[Thu Jul 30 15:21:15.141337 2026] [security2:error] [pid 3647182:tid 3647182] [client 110.42.208.131:44718] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.curvmed.com"] [uri "/"] [unique_id "amtd22-1qSqzbjuzMd2yRQAAAA0"]
[Thu Jul 30 15:21:15.211449 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xxx.php
[Thu Jul 30 15:21:15.768712 2026] [ssl:error] [pid 3651804:tid 3651804] (70014)End of file found: [client 216.73.216.199:43782] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:15.895527 2026] [access_compat:error] [pid 3639602:tid 3639602] [client 64.180.68.231:61354] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:16.132443 2026] [ssl:error] [pid 3650332:tid 3650332] (70014)End of file found: [client 216.73.216.199:45634] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:16.368212 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:35802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:16.368242 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:16.424569 2026] [ssl:error] [pid 3653215:tid 3653215] (EAI 2)Name or service not known: [client 144.76.19.72:35808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:16.424599 2026] [ssl:error] [pid 3653215:tid 3653215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:16.640126 2026] [access_compat:error] [pid 3653213:tid 3653213] [client 136.158.25.236:15566] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:16.912429 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/classwithtostring.php
[Thu Jul 30 15:21:17.608773 2026] [authz_core:error] [pid 3648848:tid 3648848] [client 81.185.227.39:36246] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 15:21:17.773844 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/classwithtostring.php
[Thu Jul 30 15:21:17.936260 2026] [core:error] [pid 3647182:tid 3647182] (13)Permission denied: [client 216.73.216.199:5965] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/771389.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.cdd99df7.tmp
[Thu Jul 30 15:21:18.648981 2026] [ssl:error] [pid 3647182:tid 3647182] (70014)End of file found: [client 216.73.216.199:5965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:18.682578 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/234ff.php
[Thu Jul 30 15:21:19.482520 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:35814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:19.482548 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:19.554424 2026] [ssl:error] [pid 3651801:tid 3651801] (EAI 2)Name or service not known: [client 144.76.19.72:35816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:19.554450 2026] [ssl:error] [pid 3651801:tid 3651801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:19.592457 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/133.php
[Thu Jul 30 15:21:20.640293 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/133.php
[Thu Jul 30 15:21:21.240298 2026] [cgi:error] [pid 3648655:tid 3648655] [client 20.63.98.115:20231] AH02811: stderr from /home/redsocks/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:21:21.376606 2026] [core:error] [pid 3648801:tid 3648801] (13)Permission denied: [client 216.73.216.199:7958] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/322414.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.f5e90fd3.tmp
[Thu Jul 30 15:21:21.819573 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-ws68.php
[Thu Jul 30 15:21:22.404179 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-ws68.php
[Thu Jul 30 15:21:22.584404 2026] [core:error] [pid 3648801:tid 3648801] (13)Permission denied: [client 216.73.216.199:7958] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/kmodlve/sections/__tracepoints
[Thu Jul 30 15:21:22.612761 2026] [ssl:error] [pid 3651804:tid 3651804] (EAI 2)Name or service not known: [client 144.76.19.72:18398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:22.612789 2026] [ssl:error] [pid 3651804:tid 3651804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:22.667075 2026] [ssl:error] [pid 3650332:tid 3650332] (EAI 2)Name or service not known: [client 144.76.19.72:18410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:22.667109 2026] [ssl:error] [pid 3650332:tid 3650332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:23.261945 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/mgrr.php
[Thu Jul 30 15:21:23.325486 2026] [access_compat:error] [pid 3653075:tid 3653075] [client 136.158.25.236:16094] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:24.133361 2026] [ssl:error] [pid 3653213:tid 3653213] (70014)End of file found: [client 216.73.216.199:21888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:24.144689 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/55.php
[Thu Jul 30 15:21:24.733053 2026] [access_compat:error] [pid 3644435:tid 3644435] [client 20.100.203.84:52245] AH01797: client denied by server configuration: /home/candidejacobs/public_html/55.php
[Thu Jul 30 15:21:25.354423 2026] [ssl:error] [pid 3646334:tid 3646334] (70014)End of file found: [client 216.73.216.199:4174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:25.821680 2026] [ssl:error] [pid 3650572:tid 3650572] (EAI 2)Name or service not known: [client 144.76.19.72:18420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:25.821745 2026] [ssl:error] [pid 3650572:tid 3650572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:25.875318 2026] [ssl:error] [pid 3653214:tid 3653214] (EAI 2)Name or service not known: [client 144.76.19.72:18436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:25.875352 2026] [ssl:error] [pid 3653214:tid 3653214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:26.077783 2026] [lsapi:warn] [pid 3651804:tid 3651804] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:21:26.463971 2026] [access_compat:error] [pid 3652931:tid 3652931] [client 64.180.68.231:61908] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:26.988802 2026] [ssl:error] [pid 3648801:tid 3648801] (70014)End of file found: [client 216.73.216.199:7958] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:27.176675 2026] [access_compat:error] [pid 3651757:tid 3651757] [client 136.158.25.236:16479] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:27.766220 2026] [security2:error] [pid 3651804:tid 3651804] [client 74.7.227.19:42482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.andrewvenables.com"] [uri "/"] [unique_id "amtd54sZLarJZy_Gmhp7LgAAACA"]
[Thu Jul 30 15:21:28.839241 2026] [cgi:error] [pid 3650572:tid 3650572] [client 20.63.98.115:19504] AH02811: stderr from /home/redsocks/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:21:28.930467 2026] [ssl:error] [pid 3653214:tid 3653214] (EAI 2)Name or service not known: [client 144.76.19.72:18442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:28.930495 2026] [ssl:error] [pid 3653214:tid 3653214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:29.014554 2026] [ssl:error] [pid 3648845:tid 3648845] (EAI 2)Name or service not known: [client 144.76.19.72:18452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:29.014597 2026] [ssl:error] [pid 3648845:tid 3648845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:29.777030 2026] [security2:error] [pid 3650572:tid 3650572] [client 20.63.98.115:19504] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "brightredsocks.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtd6T-Bhje9Myn2lzZq_AAAADI"]
[Thu Jul 30 15:21:29.777236 2026] [security2:error] [pid 3650572:tid 3650572] [client 20.63.98.115:19504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "brightredsocks.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtd6T-Bhje9Myn2lzZq_AAAADI"]
[Thu Jul 30 15:21:29.777462 2026] [security2:error] [pid 3650572:tid 3650572] [client 20.63.98.115:19504] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "brightredsocks.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtd6T-Bhje9Myn2lzZq_AAAADI"]
[Thu Jul 30 15:21:30.621487 2026] [ssl:error] [pid 3650211:tid 3650211] (70014)End of file found: [client 216.73.216.199:35267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:32.069850 2026] [ssl:error] [pid 3654920:tid 3654920] (EAI 2)Name or service not known: [client 144.76.19.72:56578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:32.069888 2026] [ssl:error] [pid 3654920:tid 3654920] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:32.127471 2026] [ssl:error] [pid 3650332:tid 3650332] (EAI 2)Name or service not known: [client 144.76.19.72:56580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:32.127495 2026] [ssl:error] [pid 3650332:tid 3650332] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:32.430854 2026] [ssl:error] [pid 3653075:tid 3653075] (70014)End of file found: [client 216.73.216.199:25213] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:32.662326 2026] [access_compat:error] [pid 3653134:tid 3653134] [client 64.180.68.231:62201] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:33.647249 2026] [ssl:error] [pid 3650532:tid 3650532] (70014)End of file found: [client 216.73.216.199:46863] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:33.708637 2026] [access_compat:error] [pid 3648845:tid 3648845] [client 136.158.25.236:16999] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:35.180865 2026] [ssl:error] [pid 3647182:tid 3647182] (EAI 2)Name or service not known: [client 144.76.19.72:56584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:35.180895 2026] [ssl:error] [pid 3647182:tid 3647182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:35.235028 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:56596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:35.235051 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:35.938988 2026] [core:error] [pid 3626192:tid 3626192] (13)Permission denied: [client 216.73.216.199:50459] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/327530.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.55a0faee.tmp
[Thu Jul 30 15:21:36.657107 2026] [ssl:error] [pid 3626192:tid 3626192] (70014)End of file found: [client 216.73.216.199:50459] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:37.027619 2026] [access_compat:error] [pid 3649113:tid 3649113] [client 64.180.68.231:62451] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:37.118282 2026] [security2:error] [pid 3653214:tid 3653214] [client 114.119.142.20:51743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572998400/request_format~html/cat_ids~19"] [unique_id "amtd8cO4x2vf_C8jLO3cYgAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E6-11-2019
[Thu Jul 30 15:21:38.167473 2026] [access_compat:error] [pid 3650211:tid 3650211] [client 112.209.180.50:16806] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:38.291617 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:56600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:38.291650 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:38.344526 2026] [ssl:error] [pid 3650572:tid 3650572] (EAI 2)Name or service not known: [client 144.76.19.72:56614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:38.344555 2026] [ssl:error] [pid 3650572:tid 3650572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:38.600244 2026] [security2:error] [pid 3653214:tid 3653214] [client 114.119.142.20:51759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572998400/request_format~html/cat_ids~19"] [unique_id "amtd8sO4x2vf_C8jLO3cYwAAACs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E6-11-2019
[Thu Jul 30 15:21:39.101112 2026] [core:error] [pid 3650271:tid 3650271] (13)Permission denied: [client 216.73.216.199:12315] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mnt_cache/objs_per_slab
[Thu Jul 30 15:21:39.370260 2026] [ssl:error] [pid 3650532:tid 3650532] (70014)End of file found: [client 216.73.216.199:50627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:40.009603 2026] [access_compat:error] [pid 3641972:tid 3641972] [client 45.158.164.139:38846] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:21:41.398278 2026] [ssl:error] [pid 3648845:tid 3648845] (EAI 2)Name or service not known: [client 144.76.19.72:43290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:41.398307 2026] [ssl:error] [pid 3648845:tid 3648845] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:41.454135 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:43300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:41.454172 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:43.161520 2026] [access_compat:error] [pid 3648848:tid 3648848] [client 64.180.68.231:62743] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:43.609177 2026] [core:error] [pid 3650271:tid 3650271] (13)Permission denied: [client 216.73.216.199:12315] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3585016.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.66c91bb2.tmp
[Thu Jul 30 15:21:43.807612 2026] [access_compat:error] [pid 3651804:tid 3651804] [client 45.158.164.139:46068] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:21:43.910117 2026] [ssl:error] [pid 3650271:tid 3650271] (70014)End of file found: [client 216.73.216.199:12315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:44.506592 2026] [ssl:error] [pid 3650211:tid 3650211] (EAI 2)Name or service not known: [client 144.76.19.72:43302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:44.506621 2026] [ssl:error] [pid 3650211:tid 3650211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:44.546077 2026] [core:error] [pid 3644432:tid 3644432] (13)Permission denied: [client 216.73.216.199:1960] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/487774.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.b95ef108.tmp
[Thu Jul 30 15:21:44.562185 2026] [ssl:error] [pid 3651804:tid 3651804] (EAI 2)Name or service not known: [client 144.76.19.72:43304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:44.562223 2026] [ssl:error] [pid 3651804:tid 3651804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:45.114413 2026] [ssl:error] [pid 3644432:tid 3644432] (70014)End of file found: [client 216.73.216.199:1960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:45.411134 2026] [ssl:error] [pid 3648848:tid 3648848] (70014)End of file found: [client 216.73.216.199:10755] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:46.841301 2026] [security2:error] [pid 3644435:tid 3644435] [client 85.208.96.199:46320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "techsuccess.uk"] [uri "/robots.txt"] [unique_id "amtd-ik4joasiu_gA4cuWAAAADM"]
[Thu Jul 30 15:21:46.868381 2026] [cgi:error] [pid 3649113:tid 3649113] [client 194.9.110.170:58211] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:21:47.482898 2026] [security2:error] [pid 3644506:tid 3644506] [client 85.208.96.207:35634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "techsuccess.uk"] [uri "/services"] [unique_id "amtd-5MsOLI9No3Fr6UXXAAAADc"]
[Thu Jul 30 15:21:47.616744 2026] [ssl:error] [pid 3644435:tid 3644435] (EAI 2)Name or service not known: [client 144.76.19.72:43316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:47.616770 2026] [ssl:error] [pid 3644435:tid 3644435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:47.645126 2026] [access_compat:error] [pid 3646272:tid 3646272] [client 64.180.68.231:63002] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:47.669510 2026] [ssl:error] [pid 3651757:tid 3651757] (EAI 2)Name or service not known: [client 144.76.19.72:43326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:47.669541 2026] [ssl:error] [pid 3651757:tid 3651757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:48.276086 2026] [access_compat:error] [pid 3650332:tid 3650332] [client 136.158.25.236:18400] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:49.212994 2026] [ssl:error] [pid 3648845:tid 3648845] (70014)End of file found: [client 216.73.216.199:44039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:50.423802 2026] [ssl:error] [pid 3653134:tid 3653134] (70014)End of file found: [client 216.73.216.199:59895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:50.724130 2026] [ssl:error] [pid 3644432:tid 3644432] (EAI 2)Name or service not known: [client 144.76.19.72:31700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:50.724157 2026] [ssl:error] [pid 3644432:tid 3644432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:50.780427 2026] [ssl:error] [pid 3651757:tid 3651757] (EAI 2)Name or service not known: [client 144.76.19.72:31710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:50.780455 2026] [ssl:error] [pid 3651757:tid 3651757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:51.134334 2026] [ssl:error] [pid 3655207:tid 3655207] (70014)End of file found: [client 216.73.216.199:53315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:53.833498 2026] [ssl:error] [pid 3653214:tid 3653214] (EAI 2)Name or service not known: [client 144.76.19.72:31722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:53.833527 2026] [ssl:error] [pid 3653214:tid 3653214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:53.884826 2026] [ssl:error] [pid 3651757:tid 3651757] (EAI 2)Name or service not known: [client 144.76.19.72:31724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:53.884857 2026] [ssl:error] [pid 3651757:tid 3651757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:54.673503 2026] [access_compat:error] [pid 3644358:tid 3644358] [client 136.158.25.236:18937] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:55.788412 2026] [ssl:error] [pid 3653214:tid 3653214] (70014)End of file found: [client 216.73.216.199:35828] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:56.050885 2026] [security2:error] [pid 3653215:tid 3653215] [client 103.189.207.255:40676] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteBGJzyJEF3RDLRG1C2AAAACw"]
[Thu Jul 30 15:21:56.050933 2026] [security2:error] [pid 3653215:tid 3653215] [client 103.189.207.255:40676] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteBGJzyJEF3RDLRG1C2AAAACw"]
[Thu Jul 30 15:21:56.051172 2026] [security2:error] [pid 3653215:tid 3653215] [client 103.189.207.255:40676] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteBGJzyJEF3RDLRG1C2AAAACw"]
[Thu Jul 30 15:21:56.276882 2026] [ssl:error] [pid 3652931:tid 3652931] (70014)End of file found: [client 216.73.216.199:35443] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:56.301743 2026] [lsapi:warn] [pid 3651757:tid 3651757] [client 46.101.46.173:42906] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:21:56.301784 2026] [lsapi:warn] [pid 3651757:tid 3651757] [client 46.101.46.173:42906] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:21:56.585210 2026] [core:error] [pid 3648847:tid 3648847] (13)Permission denied: [client 216.73.216.199:5165] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/3382071.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.d8a3b211.tmp
[Thu Jul 30 15:21:56.939634 2026] [ssl:error] [pid 3650532:tid 3650532] (EAI 2)Name or service not known: [client 144.76.19.72:31742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:56.939663 2026] [ssl:error] [pid 3650532:tid 3650532] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:56.999382 2026] [ssl:error] [pid 3626192:tid 3626192] (EAI 2)Name or service not known: [client 144.76.19.72:31754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:21:56.999414 2026] [ssl:error] [pid 3626192:tid 3626192] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:21:57.375215 2026] [security2:error] [pid 3655207:tid 3655207] [client 85.208.96.203:17084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4313.0/prev_next,prev.html"] [unique_id "amteBSfIZVGJkXQnOwvC0gAAABI"]
[Thu Jul 30 15:21:58.155511 2026] [security2:error] [pid 3641918:tid 3641918] [client 74.7.227.51:45504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "nativespace-narvi.ns-narvi.com"] [uri "/"] [unique_id "amteBi40uWOiymCQfIy5dwAAABc"]
[Thu Jul 30 15:21:58.202917 2026] [access_compat:error] [pid 3644506:tid 3644506] [client 64.180.68.231:63549] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:58.532683 2026] [security2:error] [pid 3651757:tid 3651757] [client 94.154.43.177:51462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/.env"] [unique_id "amteBqePTET_eTorjulUHwAAAAg"]
[Thu Jul 30 15:21:58.532856 2026] [security2:error] [pid 3651757:tid 3651757] [client 94.154.43.177:51462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/.env"] [unique_id "amteBqePTET_eTorjulUHwAAAAg"]
[Thu Jul 30 15:21:58.533148 2026] [security2:error] [pid 3651757:tid 3651757] [client 94.154.43.177:51462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/403.shtml"] [unique_id "amteBqePTET_eTorjulUHwAAAAg"]
[Thu Jul 30 15:21:58.796326 2026] [ssl:error] [pid 3648847:tid 3648847] (70014)End of file found: [client 216.73.216.199:5165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:21:58.807222 2026] [access_compat:error] [pid 3650532:tid 3650532] [client 112.209.180.50:13571] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:21:59.305115 2026] [security2:error] [pid 3653075:tid 3653075] [client 24.190.34.63:41834] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteB4oPSXSfgi6tKF231AAAACQ"]
[Thu Jul 30 15:21:59.305187 2026] [security2:error] [pid 3653075:tid 3653075] [client 24.190.34.63:41834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteB4oPSXSfgi6tKF231AAAACQ"]
[Thu Jul 30 15:21:59.305582 2026] [security2:error] [pid 3653075:tid 3653075] [client 24.190.34.63:41834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteB4oPSXSfgi6tKF231AAAACQ"]
[Thu Jul 30 15:22:00.077134 2026] [ssl:error] [pid 3653481:tid 3653481] (EAI 2)Name or service not known: [client 144.76.19.72:51264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:00.077181 2026] [ssl:error] [pid 3653481:tid 3653481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:00.120395 2026] [security2:error] [pid 3641918:tid 3641918] [client 80.94.92.167:53162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "highcleresyndicates.co.uk"] [uri "/.svn/wc.db"] [unique_id "amteCC40uWOiymCQfIy5eAAAABc"]
[Thu Jul 30 15:22:00.120565 2026] [security2:error] [pid 3641918:tid 3641918] [client 80.94.92.167:53162] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "highcleresyndicates.co.uk"] [uri "/.svn/wc.db"] [unique_id "amteCC40uWOiymCQfIy5eAAAABc"]
[Thu Jul 30 15:22:00.120758 2026] [security2:error] [pid 3641918:tid 3641918] [client 80.94.92.167:53162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "highcleresyndicates.co.uk"] [uri "/.svn/wc.db"] [unique_id "amteCC40uWOiymCQfIy5eAAAABc"]
[Thu Jul 30 15:22:00.120987 2026] [security2:error] [pid 3641918:tid 3641918] [client 80.94.92.167:53162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "highcleresyndicates.co.uk"] [uri "/.svn/wc.db"] [unique_id "amteCC40uWOiymCQfIy5eAAAABc"]
[Thu Jul 30 15:22:00.131992 2026] [ssl:error] [pid 3651757:tid 3651757] (EAI 2)Name or service not known: [client 144.76.19.72:51266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:00.132016 2026] [ssl:error] [pid 3651757:tid 3651757] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:00.419443 2026] [security2:error] [pid 3650271:tid 3650271] [client 94.154.43.186:21334] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "raidersofthegamecupboard.bigbangburgerbar.co.uk"] [uri "/.env"] [unique_id "amteCOf9594OSGF7ylKNWQAAABo"]
[Thu Jul 30 15:22:00.419637 2026] [security2:error] [pid 3650271:tid 3650271] [client 94.154.43.186:21334] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "raidersofthegamecupboard.bigbangburgerbar.co.uk"] [uri "/.env"] [unique_id "amteCOf9594OSGF7ylKNWQAAABo"]
[Thu Jul 30 15:22:00.419903 2026] [security2:error] [pid 3650271:tid 3650271] [client 94.154.43.186:21334] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "raidersofthegamecupboard.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteCOf9594OSGF7ylKNWQAAABo"]
[Thu Jul 30 15:22:01.157393 2026] [core:error] [pid 3653481:tid 3653481] (13)Permission denied: [client 216.73.216.199:14291] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/kdb/parameters/enable_nmi
[Thu Jul 30 15:22:01.649034 2026] [security2:error] [pid 3648656:tid 3648656] [client 43.157.142.101:33906] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/wowmetahelper/"] [unique_id "amteCSKDRAglsH-kd_oaVgAAABA"]
[Thu Jul 30 15:22:01.809976 2026] [core:error] [pid 3653481:tid 3653481] (13)Permission denied: [client 216.73.216.199:14291] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCP/store_user
[Thu Jul 30 15:22:03.013087 2026] [ssl:error] [pid 3650332:tid 3650332] (70014)End of file found: [client 216.73.216.199:49409] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:03.227309 2026] [ssl:error] [pid 3647389:tid 3647389] (EAI 2)Name or service not known: [client 144.76.19.72:51270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:03.227339 2026] [ssl:error] [pid 3647389:tid 3647389] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:03.283080 2026] [ssl:error] [pid 3653622:tid 3653622] (EAI 2)Name or service not known: [client 144.76.19.72:51282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:03.283113 2026] [ssl:error] [pid 3653622:tid 3653622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:03.920048 2026] [ssl:error] [pid 3653481:tid 3653481] (70014)End of file found: [client 216.73.216.199:14291] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:04.349285 2026] [access_compat:error] [pid 3644358:tid 3644358] [client 64.180.68.231:63946] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:05.078669 2026] [access_compat:error] [pid 3653622:tid 3653622] [client 136.158.25.236:19773] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:05.429317 2026] [core:error] [pid 3646414:tid 3646414] (13)Permission denied: [client 216.73.216.199:22209] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/filp/partial
[Thu Jul 30 15:22:05.729028 2026] [core:error] [pid 3646414:tid 3646414] (13)Permission denied: [client 216.73.216.199:22209] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/tmp/470748.LOGD___WAITING_FOR_CHILD_TO_PROCESS_LOGS__.9ff648aa.tmp
[Thu Jul 30 15:22:06.338355 2026] [ssl:error] [pid 3648655:tid 3648655] (EAI 2)Name or service not known: [client 144.76.19.72:51294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:06.338411 2026] [ssl:error] [pid 3648655:tid 3648655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:06.424463 2026] [ssl:error] [pid 3653075:tid 3653075] (EAI 2)Name or service not known: [client 144.76.19.72:51298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:06.424499 2026] [ssl:error] [pid 3653075:tid 3653075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:06.632395 2026] [ssl:error] [pid 3646414:tid 3646414] (70014)End of file found: [client 216.73.216.199:22209] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:07.706512 2026] [authz_core:error] [pid 3644358:tid 3644358] [client 66.249.66.35:65136] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:22:07.709216 2026] [authz_core:error] [pid 3644358:tid 3644358] [client 66.249.66.35:65136] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:22:08.444054 2026] [ssl:error] [pid 3650532:tid 3650532] (70014)End of file found: [client 216.73.216.199:55279] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:08.698830 2026] [access_compat:error] [pid 3648801:tid 3648801] [client 64.180.68.231:64258] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:09.250343 2026] [ssl:error] [pid 3653215:tid 3653215] (70014)End of file found: [client 216.73.216.199:20043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:09.250947 2026] [access_compat:error] [pid 3655336:tid 3655336] [client 136.158.25.236:20126] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:09.477922 2026] [ssl:error] [pid 3647389:tid 3647389] (EAI 2)Name or service not known: [client 144.76.19.72:51304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:09.477955 2026] [ssl:error] [pid 3647389:tid 3647389] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:09.535026 2026] [ssl:error] [pid 3651803:tid 3651803] (EAI 2)Name or service not known: [client 144.76.19.72:51318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:09.535059 2026] [ssl:error] [pid 3651803:tid 3651803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:10.396600 2026] [lsapi:warn] [pid 3647182:tid 3647182] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:22:10.668195 2026] [authz_core:error] [pid 3646373:tid 3646373] [client 66.249.66.33:60417] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:22:10.670840 2026] [authz_core:error] [pid 3646373:tid 3646373] [client 66.249.66.33:60417] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:22:12.061234 2026] [ssl:error] [pid 3650211:tid 3650211] (70014)End of file found: [client 216.73.216.199:34546] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:12.590575 2026] [ssl:error] [pid 3656787:tid 3656787] (EAI 2)Name or service not known: [client 144.76.19.72:23398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:12.590615 2026] [ssl:error] [pid 3656787:tid 3656787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:12.646941 2026] [ssl:error] [pid 3648603:tid 3648603] (EAI 2)Name or service not known: [client 144.76.19.72:23400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:12.646972 2026] [ssl:error] [pid 3648603:tid 3648603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:14.471716 2026] [ssl:error] [pid 3647182:tid 3647182] (70014)End of file found: [client 216.73.216.199:41408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:14.595653 2026] [security2:error] [pid 3653214:tid 3653214] [client 85.208.96.209:61604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.2550/topicseen.html"] [unique_id "amteFsO4x2vf_C8jLO3cbQAAACs"]
[Thu Jul 30 15:22:14.669243 2026] [security2:error] [pid 3644506:tid 3644506] [client 185.191.171.4:26880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/where-to-find-bunny-tail-grass-christchurch"] [unique_id "amteFpMsOLI9No3Fr6UXYQAAADc"]
[Thu Jul 30 15:22:14.835690 2026] [access_compat:error] [pid 3653213:tid 3653213] [client 64.180.68.231:64614] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:15.701997 2026] [ssl:error] [pid 3644506:tid 3644506] (EAI 2)Name or service not known: [client 144.76.19.72:23410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:15.702027 2026] [ssl:error] [pid 3644506:tid 3644506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:15.757755 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:23420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:15.757784 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:15.971503 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:8947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:17.477929 2026] [ssl:error] [pid 3651804:tid 3651804] (70014)End of file found: [client 216.73.216.199:2013] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:18.235684 2026] [security2:error] [pid 3643328:tid 3643328] [client 103.166.40.40:57300] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteGgIn8DbERdc0twRxjgAAAAk"]
[Thu Jul 30 15:22:18.235738 2026] [security2:error] [pid 3643328:tid 3643328] [client 103.166.40.40:57300] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteGgIn8DbERdc0twRxjgAAAAk"]
[Thu Jul 30 15:22:18.235993 2026] [security2:error] [pid 3643328:tid 3643328] [client 103.166.40.40:57300] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteGgIn8DbERdc0twRxjgAAAAk"]
[Thu Jul 30 15:22:18.328744 2026] [security2:error] [pid 3644435:tid 3644435] [client 45.148.10.120:43918] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amteGik4joasiu_gA4cuZQAAADM"]
[Thu Jul 30 15:22:18.328897 2026] [security2:error] [pid 3644435:tid 3644435] [client 45.148.10.120:43918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amteGik4joasiu_gA4cuZQAAADM"]
[Thu Jul 30 15:22:18.329098 2026] [security2:error] [pid 3644435:tid 3644435] [client 45.148.10.120:43918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.randomlearner.secretbluestone.co.uk"] [uri "/.env"] [unique_id "amteGik4joasiu_gA4cuZQAAADM"]
[Thu Jul 30 15:22:18.815193 2026] [ssl:error] [pid 3653134:tid 3653134] (EAI 2)Name or service not known: [client 144.76.19.72:23434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:18.815227 2026] [ssl:error] [pid 3653134:tid 3653134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:18.868629 2026] [ssl:error] [pid 3653481:tid 3653481] (EAI 2)Name or service not known: [client 144.76.19.72:23448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:18.868660 2026] [ssl:error] [pid 3653481:tid 3653481] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:19.316288 2026] [access_compat:error] [pid 3650211:tid 3650211] [client 64.180.68.231:64907] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:19.516235 2026] [security2:error] [pid 3653622:tid 3653622] [client 222.254.7.17:48837] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteG1dNWJWGj0KHjS-ZDwAAADg"]
[Thu Jul 30 15:22:19.516284 2026] [security2:error] [pid 3653622:tid 3653622] [client 222.254.7.17:48837] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteG1dNWJWGj0KHjS-ZDwAAADg"]
[Thu Jul 30 15:22:19.516563 2026] [security2:error] [pid 3653622:tid 3653622] [client 222.254.7.17:48837] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteG1dNWJWGj0KHjS-ZDwAAADg"]
[Thu Jul 30 15:22:19.662816 2026] [access_compat:error] [pid 3653213:tid 3653213] [client 136.158.25.236:20939] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:19.792617 2026] [ssl:error] [pid 3644509:tid 3644509] (70014)End of file found: [client 216.73.216.199:24219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:20.557874 2026] [authz_core:error] [pid 3653075:tid 3653075] [client 66.249.66.33:61906] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:22:20.560589 2026] [authz_core:error] [pid 3653075:tid 3653075] [client 66.249.66.33:61906] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:22:21.967884 2026] [ssl:error] [pid 3655336:tid 3655336] (EAI 2)Name or service not known: [client 144.76.19.72:64010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:21.967921 2026] [ssl:error] [pid 3655336:tid 3655336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:21.994182 2026] [ssl:error] [pid 3649113:tid 3649113] (70014)End of file found: [client 216.73.216.199:57289] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:22.019600 2026] [ssl:error] [pid 3654776:tid 3654776] (EAI 2)Name or service not known: [client 144.76.19.72:64018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:22.019635 2026] [ssl:error] [pid 3654776:tid 3654776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:22.781885 2026] [ssl:error] [pid 3655336:tid 3655336] (70014)End of file found: [client 216.73.216.199:59687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:24.909312 2026] [authz_core:error] [pid 3650271:tid 3650271] [client 82.102.18.190:38510] AH01630: client denied by server configuration: /home/stcols/public_html/wp-includes/customize/error_log
[Thu Jul 30 15:22:25.076864 2026] [ssl:error] [pid 3653215:tid 3653215] (EAI 2)Name or service not known: [client 144.76.19.72:64026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:25.076893 2026] [ssl:error] [pid 3653215:tid 3653215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:25.130541 2026] [ssl:error] [pid 3644358:tid 3644358] (EAI 2)Name or service not known: [client 144.76.19.72:64038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:25.130576 2026] [ssl:error] [pid 3644358:tid 3644358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:25.207617 2026] [ssl:error] [pid 3650211:tid 3650211] (70014)End of file found: [client 216.73.216.199:57521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:26.010647 2026] [access_compat:error] [pid 3653075:tid 3653075] [client 136.158.25.236:21396] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:26.023580 2026] [security2:error] [pid 3657456:tid 3657456] [client 79.106.50.146:45346] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteIgk4DxKNmPHTJU_1DAAAABI"]
[Thu Jul 30 15:22:26.023640 2026] [security2:error] [pid 3657456:tid 3657456] [client 79.106.50.146:45346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteIgk4DxKNmPHTJU_1DAAAABI"]
[Thu Jul 30 15:22:26.023918 2026] [security2:error] [pid 3657456:tid 3657456] [client 79.106.50.146:45346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteIgk4DxKNmPHTJU_1DAAAABI"]
[Thu Jul 30 15:22:26.541337 2026] [ssl:error] [pid 3651804:tid 3651804] (70014)End of file found: [client 216.73.216.199:6624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:26.650474 2026] [security2:error] [pid 3644505:tid 3644505] [client 43.130.34.74:46358] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amteIveDc4ICzEYYn7NUIwAAADY"]
[Thu Jul 30 15:22:26.945805 2026] [lsapi:warn] [pid 3656745:tid 3656745] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:22:27.461212 2026] [core:error] [pid 3644435:tid 3644435] (13)Permission denied: [client 216.73.216.199:35254] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_da_state/alloc_calls
[Thu Jul 30 15:22:27.511559 2026] [security2:error] [pid 3648656:tid 3648656] [client 216.73.216.199:24034] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/yum/pluginconf.d/debuginfo-install.conf"] [unique_id "amteIyKDRAglsH-kd_oaYQAAABA"]
[Thu Jul 30 15:22:27.511865 2026] [security2:error] [pid 3648656:tid 3648656] [client 216.73.216.199:24034] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/yum/pluginconf.d/debuginfo-install.conf"] [unique_id "amteIyKDRAglsH-kd_oaYQAAABA"]
[Thu Jul 30 15:22:27.512085 2026] [security2:error] [pid 3648656:tid 3648656] [client 216.73.216.199:24034] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/yum/pluginconf.d/debuginfo-install.conf"] [unique_id "amteIyKDRAglsH-kd_oaYQAAABA"]
[Thu Jul 30 15:22:27.812570 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:24034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:28.184802 2026] [ssl:error] [pid 3653213:tid 3653213] (EAI 2)Name or service not known: [client 144.76.19.72:64048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:28.184861 2026] [ssl:error] [pid 3653213:tid 3653213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:28.239817 2026] [ssl:error] [pid 3656787:tid 3656787] (EAI 2)Name or service not known: [client 144.76.19.72:64052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:28.239857 2026] [ssl:error] [pid 3656787:tid 3656787] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:28.358357 2026] [security2:error] [pid 3657456:tid 3657456] [client 43.130.34.74:51586] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amteJAk4DxKNmPHTJU_1DQAAABI"], referer: http://www.prosperon.co.uk
[Thu Jul 30 15:22:29.919140 2026] [access_compat:error] [pid 3648848:tid 3648848] [client 64.180.68.231:65514] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:29.920242 2026] [ssl:error] [pid 3644435:tid 3644435] (70014)End of file found: [client 216.73.216.199:35254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:30.294853 2026] [access_compat:error] [pid 3653622:tid 3653622] [client 112.209.180.50:14968] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:31.293233 2026] [ssl:error] [pid 3653213:tid 3653213] (EAI 2)Name or service not known: [client 144.76.19.72:47150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:31.293266 2026] [ssl:error] [pid 3653213:tid 3653213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:31.345439 2026] [ssl:error] [pid 3657398:tid 3657398] (EAI 2)Name or service not known: [client 144.76.19.72:47158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:31.345474 2026] [ssl:error] [pid 3657398:tid 3657398] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:32.342505 2026] [core:error] [pid 3656745:tid 3656745] (13)Permission denied: [client 216.73.216.199:31211] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/block/loop0/subsystem/vda/device/driver/unbind
[Thu Jul 30 15:22:34.141238 2026] [ssl:error] [pid 3656745:tid 3656745] (70014)End of file found: [client 216.73.216.199:31211] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:34.405630 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:47174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:34.405654 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:34.462802 2026] [ssl:error] [pid 3653134:tid 3653134] (EAI 2)Name or service not known: [client 144.76.19.72:47186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:34.462843 2026] [ssl:error] [pid 3653134:tid 3653134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:34.477506 2026] [lsapi:warn] [pid 3656744:tid 3656744] [client 45.158.164.139:45536] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:22:34.477558 2026] [lsapi:warn] [pid 3656744:tid 3656744] [client 45.158.164.139:45536] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:22:34.479285 2026] [lsapi:warn] [pid 3655751:tid 3655751] [client 89.197.16.98:45449] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:22:34.479359 2026] [lsapi:warn] [pid 3655751:tid 3655751] [client 89.197.16.98:45449] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:22:34.642497 2026] [core:error] [pid 3653213:tid 3653213] (13)Permission denied: [client 216.73.216.199:7548] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS0/flags
[Thu Jul 30 15:22:36.128997 2026] [access_compat:error] [pid 3650271:tid 3650271] [client 64.180.68.231:49431] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:36.905298 2026] [ssl:error] [pid 3658171:tid 3658171] (70014)End of file found: [client 216.73.216.199:12797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:37.019438 2026] [access_compat:error] [pid 3644506:tid 3644506] [client 112.209.180.50:15321] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:37.518733 2026] [ssl:error] [pid 3650271:tid 3650271] (EAI 2)Name or service not known: [client 144.76.19.72:47188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:37.518772 2026] [ssl:error] [pid 3650271:tid 3650271] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:37.576696 2026] [ssl:error] [pid 3650572:tid 3650572] (EAI 2)Name or service not known: [client 144.76.19.72:47190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:37.576730 2026] [ssl:error] [pid 3650572:tid 3650572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:38.810423 2026] [security2:error] [pid 3650271:tid 3650271] [client 43.153.10.83:47644] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.firstclassbkltd.co.uk"] [uri "/"] [unique_id "amteLuf9594OSGF7ylKNXwAAABo"]
[Thu Jul 30 15:22:39.185973 2026] [autoindex:error] [pid 3654776:tid 3654776] [client 94.154.43.186:16780] AH01276: Cannot serve directory /home/winterb/public_html/drupal2/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:22:39.250417 2026] [authz_core:error] [pid 3650271:tid 3650271] [client 94.154.43.186:16782] AH01630: client denied by server configuration: /home/winterb/public_html/nortonnews/error_log
[Thu Jul 30 15:22:39.255119 2026] [ssl:error] [pid 3658172:tid 3658172] (70014)End of file found: [client 216.73.216.199:37750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:39.966459 2026] [authz_core:error] [pid 3654776:tid 3654776] [client 94.154.43.186:16806] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 15:22:39.974551 2026] [authz_core:error] [pid 3654776:tid 3654776] [client 94.154.43.186:16806] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 15:22:40.507469 2026] [access_compat:error] [pid 3658272:tid 3658272] [client 64.180.68.231:49694] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:40.672213 2026] [ssl:error] [pid 3658279:tid 3658279] (EAI 2)Name or service not known: [client 144.76.19.72:39740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:40.672266 2026] [ssl:error] [pid 3658279:tid 3658279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:40.729094 2026] [ssl:error] [pid 3658278:tid 3658278] (EAI 2)Name or service not known: [client 144.76.19.72:39746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:40.729134 2026] [ssl:error] [pid 3658278:tid 3658278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:40.766087 2026] [ssl:error] [pid 3653213:tid 3653213] (70014)End of file found: [client 216.73.216.199:7548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:40.804173 2026] [access_compat:error] [pid 3658275:tid 3658275] [client 112.209.180.50:15491] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:40.939147 2026] [access_compat:error] [pid 3658280:tid 3658280] [client 45.158.164.139:54098] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:22:42.469877 2026] [ssl:error] [pid 3644358:tid 3644358] (70014)End of file found: [client 216.73.216.199:12167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:43.787800 2026] [ssl:error] [pid 3658273:tid 3658273] (EAI 2)Name or service not known: [client 144.76.19.72:39758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:43.787838 2026] [ssl:error] [pid 3658273:tid 3658273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:43.842443 2026] [ssl:error] [pid 3658171:tid 3658171] (EAI 2)Name or service not known: [client 144.76.19.72:39764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:43.842484 2026] [ssl:error] [pid 3658171:tid 3658171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:44.640203 2026] [authz_core:error] [pid 3644506:tid 3644506] [client 91.92.241.196:49790] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/error_log
[Thu Jul 30 15:22:44.642829 2026] [authz_core:error] [pid 3644506:tid 3644506] [client 91.92.241.196:49790] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/php.ini
[Thu Jul 30 15:22:45.585663 2026] [ssl:error] [pid 3647182:tid 3647182] (70014)End of file found: [client 216.73.216.199:5677] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:46.273016 2026] [lsapi:warn] [pid 3657563:tid 3657563] [client 129.211.218.71:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:22:46.489290 2026] [ssl:error] [pid 3658172:tid 3658172] (70014)End of file found: [client 216.73.216.199:54823] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:46.895546 2026] [ssl:error] [pid 3646334:tid 3646334] (EAI 2)Name or service not known: [client 144.76.19.72:39780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:46.895578 2026] [ssl:error] [pid 3646334:tid 3646334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:46.952865 2026] [ssl:error] [pid 3658274:tid 3658274] (EAI 2)Name or service not known: [client 144.76.19.72:39790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:46.952898 2026] [ssl:error] [pid 3658274:tid 3658274] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:46.965478 2026] [authz_core:error] [pid 3653213:tid 3653213] [client 91.92.241.196:23448] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/error_log
[Thu Jul 30 15:22:46.967076 2026] [authz_core:error] [pid 3653213:tid 3653213] [client 91.92.241.196:23448] AH01630: client denied by server configuration: /home/seedhubdev/greekortho.devwebsitehub.com/php.ini
[Thu Jul 30 15:22:47.187118 2026] [lsapi:warn] [pid 3649113:tid 3649113] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:22:48.295180 2026] [ssl:error] [pid 3658275:tid 3658275] (70014)End of file found: [client 216.73.216.199:55628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:49.092860 2026] [authz_core:error] [pid 3658274:tid 3658274] [client 169.58.39.192:60143] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 15:22:50.007761 2026] [ssl:error] [pid 3649113:tid 3649113] (EAI 2)Name or service not known: [client 144.76.19.72:57898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:50.007817 2026] [ssl:error] [pid 3649113:tid 3649113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:50.090228 2026] [ssl:error] [pid 3644509:tid 3644509] (EAI 2)Name or service not known: [client 144.76.19.72:57900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:50.090261 2026] [ssl:error] [pid 3644509:tid 3644509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:51.250245 2026] [access_compat:error] [pid 3656745:tid 3656745] [client 112.209.180.50:15933] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:51.727497 2026] [access_compat:error] [pid 3658280:tid 3658280] [client 45.158.164.139:47608] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:22:51.750474 2026] [access_compat:error] [pid 3641972:tid 3641972] [client 52.238.199.152:4508] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:22:53.143433 2026] [ssl:error] [pid 3658279:tid 3658279] (EAI 2)Name or service not known: [client 144.76.19.72:57928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:53.143462 2026] [ssl:error] [pid 3658279:tid 3658279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:53.197758 2026] [ssl:error] [pid 3658172:tid 3658172] (EAI 2)Name or service not known: [client 144.76.19.72:57930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:53.197800 2026] [ssl:error] [pid 3658172:tid 3658172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:54.623044 2026] [ssl:error] [pid 3658280:tid 3658280] (70014)End of file found: [client 216.73.216.199:26653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:54.926371 2026] [core:error] [pid 3644505:tid 3644505] (13)Permission denied: [client 216.73.216.199:41464] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/trace
[Thu Jul 30 15:22:56.255273 2026] [ssl:error] [pid 3658124:tid 3658124] (EAI 2)Name or service not known: [client 144.76.19.72:57950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:56.255312 2026] [ssl:error] [pid 3658124:tid 3658124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:56.307320 2026] [ssl:error] [pid 3658171:tid 3658171] (EAI 2)Name or service not known: [client 144.76.19.72:57960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:56.307361 2026] [ssl:error] [pid 3658171:tid 3658171] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:56.325648 2026] [ssl:error] [pid 3644505:tid 3644505] (70014)End of file found: [client 216.73.216.199:41464] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:56.931721 2026] [ssl:error] [pid 3651800:tid 3651800] (70014)End of file found: [client 216.73.216.199:15632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:22:57.833640 2026] [security2:error] [pid 3644435:tid 3644435] [client 45.148.10.120:54828] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "amteQSk4joasiu_gA4cudQAAADM"]
[Thu Jul 30 15:22:57.833773 2026] [security2:error] [pid 3644435:tid 3644435] [client 45.148.10.120:54828] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "amteQSk4joasiu_gA4cudQAAADM"]
[Thu Jul 30 15:22:57.833968 2026] [security2:error] [pid 3644435:tid 3644435] [client 45.148.10.120:54828] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "amteQSk4joasiu_gA4cudQAAADM"]
[Thu Jul 30 15:22:58.743625 2026] [access_compat:error] [pid 3653075:tid 3653075] [client 112.209.180.50:16217] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:22:59.362196 2026] [ssl:error] [pid 3656745:tid 3656745] (EAI 2)Name or service not known: [client 144.76.19.72:57990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:59.362233 2026] [ssl:error] [pid 3656745:tid 3656745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:22:59.415533 2026] [ssl:error] [pid 3644435:tid 3644435] (EAI 2)Name or service not known: [client 144.76.19.72:57998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:22:59.415560 2026] [ssl:error] [pid 3644435:tid 3644435] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:00.126578 2026] [core:error] [pid 3647182:tid 3647182] (13)Permission denied: [client 216.73.216.199:14807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/hid_magicmouse/drivers/hid:magicmouse/new_id
[Thu Jul 30 15:23:00.264956 2026] [core:error] [pid 3647182:tid 3647182] (13)Permission denied: [client 216.73.216.199:14807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu3/crash_notes
[Thu Jul 30 15:23:00.544102 2026] [core:error] [pid 3647182:tid 3647182] (13)Permission denied: [client 216.73.216.199:14807] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS0/flags
[Thu Jul 30 15:23:00.678331 2026] [security2:error] [pid 3658279:tid 3658279] [client 114.119.155.144:45789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572998400/cat_ids~15/request_format~html"] [unique_id "amteROb8W7sfHR9SL0HfvgAAADs"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572998400/cat_ids~30,15/request_format~html
[Thu Jul 30 15:23:01.005400 2026] [security2:error] [pid 3653481:tid 3653481] [client 185.191.171.18:28186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4512.0.html"] [unique_id "amteRT3qFWo7tHapj0v7nwAAAAM"]
[Thu Jul 30 15:23:01.584610 2026] [access_compat:error] [pid 3641918:tid 3641918] [client 136.158.25.236:24289] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:02.376009 2026] [security2:error] [pid 3644509:tid 3644509] [client 114.119.155.144:45797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572998400/cat_ids~15/request_format~html"] [unique_id "amteRgTbU-EpU3ahadB5NwAAADo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572998400/cat_ids~30,15/request_format~html
[Thu Jul 30 15:23:02.473485 2026] [ssl:error] [pid 3658279:tid 3658279] (EAI 2)Name or service not known: [client 144.76.19.72:29704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:02.473515 2026] [ssl:error] [pid 3658279:tid 3658279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:02.527609 2026] [ssl:error] [pid 3656744:tid 3656744] (EAI 2)Name or service not known: [client 144.76.19.72:29712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:02.527645 2026] [ssl:error] [pid 3656744:tid 3656744] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:02.652919 2026] [ssl:error] [pid 3647182:tid 3647182] (70014)End of file found: [client 216.73.216.199:14807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:03.156422 2026] [ssl:error] [pid 3658279:tid 3658279] (70014)End of file found: [client 216.73.216.199:11394] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:03.168137 2026] [security2:error] [pid 3651804:tid 3651804] [client 47.128.22.133:33752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "rogersbarbershopltd.co.uk"] [uri "/robots.txt"] [unique_id "amteR4sZLarJZy_Gmhp7TwAAACA"]
[Thu Jul 30 15:23:03.811218 2026] [security2:error] [pid 3648801:tid 3648801] [client 54.39.210.2:55714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/robots.txt"] [unique_id "amteR9TdrJ3Ow0xPiRRezQAAABU"]
[Thu Jul 30 15:23:04.471248 2026] [core:error] [pid 3655751:tid 3655751] (13)Permission denied: [client 216.73.216.199:59685] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS0/flags
[Thu Jul 30 15:23:05.001401 2026] [security2:error] [pid 3653481:tid 3653481] [client 51.68.247.201:32312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/products/"] [unique_id "amteST3qFWo7tHapj0v7oQAAAAM"]
[Thu Jul 30 15:23:05.076186 2026] [ssl:error] [pid 3655751:tid 3655751] (70014)End of file found: [client 216.73.216.199:59685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:05.580514 2026] [ssl:error] [pid 3644509:tid 3644509] (EAI 2)Name or service not known: [client 144.76.19.72:29728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:05.580545 2026] [ssl:error] [pid 3644509:tid 3644509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:05.636620 2026] [ssl:error] [pid 3653075:tid 3653075] (EAI 2)Name or service not known: [client 144.76.19.72:29742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:05.636655 2026] [ssl:error] [pid 3653075:tid 3653075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:07.527518 2026] [lsapi:warn] [pid 3658222:tid 3658222] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:23:07.839463 2026] [security2:error] [pid 3658223:tid 3658223] [client 20.63.98.115:28202] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "sarahwiseman.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amteS9WgAqI6OIbOkJoNigAAACk"]
[Thu Jul 30 15:23:07.839670 2026] [security2:error] [pid 3658223:tid 3658223] [client 20.63.98.115:28202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahwiseman.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amteS9WgAqI6OIbOkJoNigAAACk"]
[Thu Jul 30 15:23:08.086005 2026] [security2:error] [pid 3658223:tid 3658223] [client 20.63.98.115:28202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "sarahwiseman.co.uk"] [uri "/index.php"] [unique_id "amteS9WgAqI6OIbOkJoNigAAACk"]
[Thu Jul 30 15:23:08.694490 2026] [ssl:error] [pid 3658124:tid 3658124] (EAI 2)Name or service not known: [client 144.76.19.72:29746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:08.694522 2026] [ssl:error] [pid 3658124:tid 3658124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:08.747286 2026] [ssl:error] [pid 3651804:tid 3651804] (EAI 2)Name or service not known: [client 144.76.19.72:29758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:08.747309 2026] [ssl:error] [pid 3651804:tid 3651804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:09.008493 2026] [ssl:error] [pid 3636745:tid 3636745] (70014)End of file found: [client 216.73.216.199:28048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:09.313953 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:15560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:11.115816 2026] [ssl:error] [pid 3658124:tid 3658124] (70014)End of file found: [client 216.73.216.199:60834] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:11.820727 2026] [ssl:error] [pid 3648603:tid 3648603] (EAI 2)Name or service not known: [client 144.76.19.72:22194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:11.820775 2026] [ssl:error] [pid 3648603:tid 3648603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:11.877324 2026] [ssl:error] [pid 3648801:tid 3648801] (EAI 2)Name or service not known: [client 144.76.19.72:22200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:11.877352 2026] [ssl:error] [pid 3648801:tid 3648801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:12.061756 2026] [access_compat:error] [pid 3658280:tid 3658280] [client 136.158.25.236:25219] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:13.355962 2026] [authz_core:error] [pid 3646334:tid 3646334] [client 169.58.39.192:56029] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:23:14.330683 2026] [ssl:error] [pid 3654776:tid 3654776] (70014)End of file found: [client 216.73.216.199:8785] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:14.933592 2026] [ssl:error] [pid 3656745:tid 3656745] (EAI 2)Name or service not known: [client 144.76.19.72:22214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:14.933617 2026] [ssl:error] [pid 3656745:tid 3656745] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:14.989440 2026] [ssl:error] [pid 3653134:tid 3653134] (EAI 2)Name or service not known: [client 144.76.19.72:22220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:14.989472 2026] [ssl:error] [pid 3653134:tid 3653134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:15.338178 2026] [security2:error] [pid 3648801:tid 3648801] [client 185.191.171.7:62330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/earl-watson-joy-taylor-split"] [unique_id "amteU9TdrJ3Ow0xPiRRe0gAAABU"]
[Thu Jul 30 15:23:15.630922 2026] [ssl:error] [pid 3655751:tid 3655751] (70014)End of file found: [client 216.73.216.199:36667] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:15.770968 2026] [authz_core:error] [pid 3653134:tid 3653134] [client 37.97.115.80:57390] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 15:23:15.778922 2026] [authz_core:error] [pid 3653134:tid 3653134] [client 37.97.115.80:57390] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 15:23:16.431138 2026] [authz_core:error] [pid 3653215:tid 3653215] [client 169.58.39.192:57395] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:23:16.659141 2026] [security2:error] [pid 3656785:tid 3656785] [client 14.191.71.181:30336] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteVJb3CCna7YL5XuvHGAAAACM"]
[Thu Jul 30 15:23:16.659189 2026] [security2:error] [pid 3656785:tid 3656785] [client 14.191.71.181:30336] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteVJb3CCna7YL5XuvHGAAAACM"]
[Thu Jul 30 15:23:16.659444 2026] [security2:error] [pid 3656785:tid 3656785] [client 14.191.71.181:30336] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteVJb3CCna7YL5XuvHGAAAACM"]
[Thu Jul 30 15:23:17.142259 2026] [core:error] [pid 3646334:tid 3646334] (13)Permission denied: [client 216.73.216.199:9743] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/hwcache_align
[Thu Jul 30 15:23:17.445708 2026] [ssl:error] [pid 3646334:tid 3646334] (70014)End of file found: [client 216.73.216.199:9743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:18.042603 2026] [ssl:error] [pid 3653134:tid 3653134] (EAI 2)Name or service not known: [client 144.76.19.72:22232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:18.042637 2026] [ssl:error] [pid 3653134:tid 3653134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:18.098658 2026] [ssl:error] [pid 3658279:tid 3658279] (EAI 2)Name or service not known: [client 144.76.19.72:22240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:18.098691 2026] [ssl:error] [pid 3658279:tid 3658279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:18.548588 2026] [access_compat:error] [pid 3653134:tid 3653134] [client 136.158.25.236:25672] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:19.751768 2026] [core:error] [pid 3644506:tid 3644506] (13)Permission denied: [client 216.73.216.199:20074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/slabs
[Thu Jul 30 15:23:20.456131 2026] [core:error] [pid 3644506:tid 3644506] (13)Permission denied: [client 216.73.216.199:20074] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/free_calls
[Thu Jul 30 15:23:20.554315 2026] [authz_core:error] [pid 3659997:tid 3659997] [client 66.249.66.33:60898] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:23:20.556979 2026] [authz_core:error] [pid 3659997:tid 3659997] [client 66.249.66.33:60898] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:23:21.155427 2026] [ssl:error] [pid 3659998:tid 3659998] (EAI 2)Name or service not known: [client 144.76.19.72:32276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:21.155467 2026] [ssl:error] [pid 3659998:tid 3659998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:21.211963 2026] [ssl:error] [pid 3658223:tid 3658223] (EAI 2)Name or service not known: [client 144.76.19.72:32286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:21.211997 2026] [ssl:error] [pid 3658223:tid 3658223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:21.655382 2026] [ssl:error] [pid 3653075:tid 3653075] (70014)End of file found: [client 216.73.216.199:20730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:21.670064 2026] [security2:error] [pid 3655751:tid 3655751] [client 179.217.229.237:13443] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteWdm-Lr52R7rsoOk2FQAAABY"]
[Thu Jul 30 15:23:21.670118 2026] [security2:error] [pid 3655751:tid 3655751] [client 179.217.229.237:13443] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amteWdm-Lr52R7rsoOk2FQAAABY"]
[Thu Jul 30 15:23:21.670359 2026] [security2:error] [pid 3655751:tid 3655751] [client 179.217.229.237:13443] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amteWdm-Lr52R7rsoOk2FQAAABY"]
[Thu Jul 30 15:23:22.262112 2026] [ssl:error] [pid 3644506:tid 3644506] (70014)End of file found: [client 216.73.216.199:20074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:22.560295 2026] [access_compat:error] [pid 3660097:tid 3660097] [client 136.158.25.236:26069] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:22.573309 2026] [security2:error] [pid 3636745:tid 3636745] [client 94.154.43.178:65022] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "auroravation.com"] [uri "/.env"] [unique_id "amteWoKibzXYXpClAPysrAAAAAs"]
[Thu Jul 30 15:23:22.573507 2026] [security2:error] [pid 3636745:tid 3636745] [client 94.154.43.178:65022] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "auroravation.com"] [uri "/.env"] [unique_id "amteWoKibzXYXpClAPysrAAAAAs"]
[Thu Jul 30 15:23:22.573695 2026] [security2:error] [pid 3636745:tid 3636745] [client 94.154.43.178:65022] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "auroravation.com"] [uri "/.env"] [unique_id "amteWoKibzXYXpClAPysrAAAAAs"]
[Thu Jul 30 15:23:23.316561 2026] [security2:error] [pid 3658275:tid 3658275] [client 216.144.249.201:58890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.akoptimize.online"] [uri "/unprotected/json-minified.js"] [unique_id "amteW39BxGQR4F0yZtWNXAAAADQ"]
[Thu Jul 30 15:23:23.618239 2026] [security2:error] [pid 3658272:tid 3658272] [client 216.144.249.201:58874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.akoptimize.online"] [uri "/netlify.toml"] [unique_id "amteW6vSkN5zJy6ha2SOfgAAACs"]
[Thu Jul 30 15:23:23.790392 2026] [security2:error] [pid 3659998:tid 3659998] [client 216.144.249.201:58884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.akoptimize.online"] [uri "/awsconfiguration.json"] [unique_id "amteW_oLoimaakGGtlhXkQAAAAo"]
[Thu Jul 30 15:23:23.936460 2026] [security2:error] [pid 3648656:tid 3648656] [client 216.144.249.201:59096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.akoptimize.online"] [uri "/key.json"] [unique_id "amteWyKDRAglsH-kd_oazQAAABA"]
[Thu Jul 30 15:23:23.947595 2026] [security2:error] [pid 3659998:tid 3659998] [client 216.144.249.201:58932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "webmail.akoptimize.online"] [uri "/config.js"] [unique_id "amteW_oLoimaakGGtlhXlgAAAAo"]
[Thu Jul 30 15:23:25.568554 2026] [ssl:error] [pid 3657563:tid 3657563] (70014)End of file found: [client 216.73.216.199:4874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:27.475092 2026] [ssl:error] [pid 3660357:tid 3660357] (EAI 2)Name or service not known: [client 144.76.19.72:32292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:27.475137 2026] [ssl:error] [pid 3660357:tid 3660357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:27.702513 2026] [ssl:error] [pid 3660368:tid 3660368] (70014)End of file found: [client 216.73.216.199:23140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:28.091976 2026] [ssl:error] [pid 3660442:tid 3660442] (70014)End of file found: [client 216.73.216.199:38956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:28.405396 2026] [ssl:error] [pid 3660362:tid 3660362] (70014)End of file found: [client 216.73.216.199:27540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:28.515916 2026] [lsapi:warn] [pid 3660360:tid 3660360] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:23:28.612343 2026] [ssl:error] [pid 3648801:tid 3648801] (EAI 2)Name or service not known: [client 144.76.19.72:32306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:28.612371 2026] [ssl:error] [pid 3648801:tid 3648801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:30.029516 2026] [access_compat:error] [pid 3660491:tid 3660491] [client 136.158.25.236:26605] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:30.774453 2026] [security2:error] [pid 3647182:tid 3647182] [client 183.87.97.99:48808] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wurlitzer.co.uk"] [uri "/laser-repairs-cdm12-cdm-pro"] [unique_id "amteYm-1qSqzbjuzMd2yrAAAAA0"], referer: https://wurlitzer.co.uk/
[Thu Jul 30 15:23:31.667522 2026] [ssl:error] [pid 3648801:tid 3648801] (EAI 2)Name or service not known: [client 144.76.19.72:48766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:31.667560 2026] [ssl:error] [pid 3648801:tid 3648801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:31.723055 2026] [ssl:error] [pid 3654776:tid 3654776] (EAI 2)Name or service not known: [client 144.76.19.72:48768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:31.723103 2026] [ssl:error] [pid 3654776:tid 3654776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:32.914620 2026] [ssl:error] [pid 3660364:tid 3660364] (70014)End of file found: [client 216.73.216.199:44897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:33.192736 2026] [access_compat:error] [pid 3654776:tid 3654776] [client 112.209.180.50:13579] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:33.321869 2026] [security2:error] [pid 3648656:tid 3648656] [client 42.201.192.89:32009] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/laser-repairs-cdm12-cdm-pro/"] [unique_id "amteZSKDRAglsH-kd_oazgAAABA"], referer: https://wurlitzer.co.uk/
[Thu Jul 30 15:23:33.816062 2026] [security2:error] [pid 3660232:tid 3660232] [client 216.73.216.199:53706] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/tuned.conf"] [unique_id "amteZa2V4Ri4ugpwMRhc-AAAABw"]
[Thu Jul 30 15:23:33.816392 2026] [security2:error] [pid 3660232:tid 3660232] [client 216.73.216.199:53706] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/tuned.conf"] [unique_id "amteZa2V4Ri4ugpwMRhc-AAAABw"]
[Thu Jul 30 15:23:33.816639 2026] [security2:error] [pid 3660232:tid 3660232] [client 216.73.216.199:53706] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/tuned.conf"] [unique_id "amteZa2V4Ri4ugpwMRhc-AAAABw"]
[Thu Jul 30 15:23:34.118162 2026] [ssl:error] [pid 3660232:tid 3660232] (70014)End of file found: [client 216.73.216.199:53706] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:34.619251 2026] [security2:error] [pid 3653215:tid 3653215] [client 216.73.216.199:38602] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/named.conf"] [unique_id "amteZmJzyJEF3RDLRG1DMgAAACw"]
[Thu Jul 30 15:23:34.619555 2026] [security2:error] [pid 3653215:tid 3653215] [client 216.73.216.199:38602] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/named.conf"] [unique_id "amteZmJzyJEF3RDLRG1DMgAAACw"]
[Thu Jul 30 15:23:34.619792 2026] [security2:error] [pid 3653215:tid 3653215] [client 216.73.216.199:38602] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/named.conf"] [unique_id "amteZmJzyJEF3RDLRG1DMgAAACw"]
[Thu Jul 30 15:23:34.814783 2026] [ssl:error] [pid 3660356:tid 3660356] (EAI 2)Name or service not known: [client 144.76.19.72:48770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:34.814819 2026] [ssl:error] [pid 3660356:tid 3660356] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:34.817156 2026] [authz_core:error] [pid 3660368:tid 3660368] [client 66.249.66.33:38808] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:23:34.819945 2026] [authz_core:error] [pid 3660368:tid 3660368] [client 66.249.66.33:38808] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:23:34.873339 2026] [ssl:error] [pid 3659997:tid 3659997] (EAI 2)Name or service not known: [client 144.76.19.72:48778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:34.873376 2026] [ssl:error] [pid 3659997:tid 3659997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:35.623963 2026] [ssl:error] [pid 3653215:tid 3653215] (70014)End of file found: [client 216.73.216.199:38602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:37.930638 2026] [ssl:error] [pid 3659947:tid 3659947] (EAI 2)Name or service not known: [client 144.76.19.72:48792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:37.930674 2026] [ssl:error] [pid 3659947:tid 3659947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:37.985830 2026] [ssl:error] [pid 3658223:tid 3658223] (EAI 2)Name or service not known: [client 144.76.19.72:48808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:37.985863 2026] [ssl:error] [pid 3658223:tid 3658223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:38.946833 2026] [ssl:error] [pid 3660231:tid 3660231] (70014)End of file found: [client 216.73.216.199:1068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:39.438594 2026] [ssl:error] [pid 3657398:tid 3657398] (70014)End of file found: [client 216.73.216.199:4891] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:40.951596 2026] [ssl:error] [pid 3653216:tid 3653216] (70014)End of file found: [client 216.73.216.199:37710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:41.044124 2026] [ssl:error] [pid 3660148:tid 3660148] (EAI 2)Name or service not known: [client 144.76.19.72:40778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:41.044161 2026] [ssl:error] [pid 3660148:tid 3660148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:41.099304 2026] [ssl:error] [pid 3659281:tid 3659281] (EAI 2)Name or service not known: [client 144.76.19.72:40790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:41.099350 2026] [ssl:error] [pid 3659281:tid 3659281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:43.511671 2026] [access_compat:error] [pid 3660367:tid 3660367] [client 136.158.25.236:27788] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:43.671834 2026] [access_compat:error] [pid 3660353:tid 3660353] [client 45.158.164.139:51852] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:23:44.191266 2026] [ssl:error] [pid 3660360:tid 3660360] (EAI 2)Name or service not known: [client 144.76.19.72:40798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:44.191308 2026] [ssl:error] [pid 3660360:tid 3660360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:44.243703 2026] [ssl:error] [pid 3660148:tid 3660148] (EAI 2)Name or service not known: [client 144.76.19.72:40812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:44.243743 2026] [ssl:error] [pid 3660148:tid 3660148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:44.365581 2026] [ssl:error] [pid 3653215:tid 3653215] (70014)End of file found: [client 216.73.216.199:19963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:44.869577 2026] [ssl:error] [pid 3660311:tid 3660311] (70014)End of file found: [client 216.73.216.199:62744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:46.281793 2026] [lsapi:warn] [pid 3660232:tid 3660232] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:23:46.363192 2026] [ssl:error] [pid 3657398:tid 3657398] (70014)End of file found: [client 216.73.216.199:14732] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:47.297184 2026] [ssl:error] [pid 3660097:tid 3660097] (EAI 2)Name or service not known: [client 144.76.19.72:40826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:47.297232 2026] [ssl:error] [pid 3660097:tid 3660097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:47.352302 2026] [ssl:error] [pid 3648847:tid 3648847] (EAI 2)Name or service not known: [client 144.76.19.72:40828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:47.352329 2026] [ssl:error] [pid 3648847:tid 3648847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:49.702616 2026] [ssl:error] [pid 3660355:tid 3660355] (70014)End of file found: [client 216.73.216.199:43362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:49.889973 2026] [access_compat:error] [pid 3648847:tid 3648847] [client 112.209.180.50:14399] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:50.410060 2026] [ssl:error] [pid 3653075:tid 3653075] (EAI 2)Name or service not known: [client 144.76.19.72:38726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:50.410110 2026] [ssl:error] [pid 3653075:tid 3653075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:50.463563 2026] [ssl:error] [pid 3660313:tid 3660313] (EAI 2)Name or service not known: [client 144.76.19.72:38740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:50.463597 2026] [ssl:error] [pid 3660313:tid 3660313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:51.011193 2026] [ssl:error] [pid 3658221:tid 3658221] (70014)End of file found: [client 216.73.216.199:44463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:51.817337 2026] [ssl:error] [pid 3660234:tid 3660234] (70014)End of file found: [client 216.73.216.199:1481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:52.620943 2026] [security2:error] [pid 3660361:tid 3660361] [client 43.153.35.128:60308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sudokulogicapp.com"] [uri "/"] [unique_id "amteeOXwGuwW4G2ieaNGEwAAAEA"]
[Thu Jul 30 15:23:52.784364 2026] [authz_core:error] [pid 3648655:tid 3648655] [client 66.249.66.33:46671] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:23:52.787111 2026] [authz_core:error] [pid 3648655:tid 3648655] [client 66.249.66.33:46671] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:23:53.192720 2026] [security2:error] [pid 3660097:tid 3660097] [client 85.208.96.194:45084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1312.0.html"] [unique_id "amteeVoQU0QFpQWE1UePmgAAABI"]
[Thu Jul 30 15:23:53.282874 2026] [security2:error] [pid 3657398:tid 3657398] [client 101.32.208.70:36004] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "newtronicmedia.com"] [uri "/"] [unique_id "amteed4-RGqzBoRFbsgwMAAAAAY"]
[Thu Jul 30 15:23:53.518508 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:38772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:53.518542 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:53.639717 2026] [ssl:error] [pid 3660442:tid 3660442] (EAI 2)Name or service not known: [client 144.76.19.72:38786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:53.639753 2026] [ssl:error] [pid 3660442:tid 3660442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:53.704814 2026] [security2:error] [pid 3660363:tid 3660363] [client 175.27.163.171:47530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.fr"] [uri "/"] [unique_id "amteedMzT_VoK63A94IpbAAAAEI"]
[Thu Jul 30 15:23:53.976408 2026] [access_compat:error] [pid 3644506:tid 3644506] [client 136.158.25.236:28613] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:23:54.419768 2026] [access_compat:error] [pid 3660361:tid 3660361] [client 45.158.164.139:41010] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:23:55.116248 2026] [ssl:error] [pid 3657398:tid 3657398] (70014)End of file found: [client 216.73.216.199:41610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:56.157983 2026] [security2:error] [pid 3660368:tid 3660368] [client 51.68.107.139:16361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amtefCTTFRLrGClMseRbkQAAAEc"]
[Thu Jul 30 15:23:56.334333 2026] [ssl:error] [pid 3654776:tid 3654776] (70014)End of file found: [client 216.73.216.199:47011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:56.503276 2026] [security2:error] [pid 3660357:tid 3660357] [client 52.238.199.152:9268] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "horus-wellbeing.co.uk"] [uri "/wp-config.php"] [unique_id "amtefGhQPwhh1n1ua649WAAAADo"]
[Thu Jul 30 15:23:56.503561 2026] [security2:error] [pid 3660357:tid 3660357] [client 52.238.199.152:9268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "horus-wellbeing.co.uk"] [uri "/wp-config.php"] [unique_id "amtefGhQPwhh1n1ua649WAAAADo"]
[Thu Jul 30 15:23:56.698590 2026] [ssl:error] [pid 3660355:tid 3660355] (EAI 2)Name or service not known: [client 144.76.19.72:38808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:56.698630 2026] [ssl:error] [pid 3660355:tid 3660355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:56.754562 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:38816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:56.754591 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:56.939514 2026] [security2:error] [pid 3660357:tid 3660357] [client 52.238.199.152:9268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "horus-wellbeing.co.uk"] [uri "/index.php"] [unique_id "amtefGhQPwhh1n1ua649WAAAADo"]
[Thu Jul 30 15:23:57.645558 2026] [security2:error] [pid 3657563:tid 3657563] [client 175.27.163.171:38594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtefTbWcUYEzcqkuDkPngAAACg"], referer: http://www.orgent.fr
[Thu Jul 30 15:23:59.079126 2026] [ssl:error] [pid 3651800:tid 3651800] (70014)End of file found: [client 216.73.216.199:31226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:23:59.806336 2026] [ssl:error] [pid 3655751:tid 3655751] (EAI 2)Name or service not known: [client 144.76.19.72:62830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:59.806397 2026] [ssl:error] [pid 3655751:tid 3655751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:23:59.861649 2026] [ssl:error] [pid 3644506:tid 3644506] (EAI 2)Name or service not known: [client 144.76.19.72:62834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:23:59.861695 2026] [ssl:error] [pid 3644506:tid 3644506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:00.586338 2026] [core:error] [pid 3660353:tid 3660353] (13)Permission denied: [client 216.73.216.199:31988] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_head/trace
[Thu Jul 30 15:24:00.890393 2026] [ssl:error] [pid 3660359:tid 3660359] (70014)End of file found: [client 216.73.216.199:58200] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:01.189592 2026] [ssl:error] [pid 3660353:tid 3660353] (70014)End of file found: [client 216.73.216.199:31988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:02.560454 2026] [lsapi:warn] [pid 3660492:tid 3660492] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:24:02.913523 2026] [ssl:error] [pid 3654776:tid 3654776] (EAI 2)Name or service not known: [client 144.76.19.72:62838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:02.913589 2026] [ssl:error] [pid 3654776:tid 3654776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:02.964928 2026] [ssl:error] [pid 3655751:tid 3655751] (EAI 2)Name or service not known: [client 144.76.19.72:62848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:02.964960 2026] [ssl:error] [pid 3655751:tid 3655751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:03.187696 2026] [core:error] [pid 3660097:tid 3660097] [client 66.249.66.8:51169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:24:03.187727 2026] [core:error] [pid 3660097:tid 3660097] [client 66.249.66.8:51169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:24:04.602313 2026] [access_compat:error] [pid 3651800:tid 3651800] [client 136.158.25.236:29522] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:06.020253 2026] [ssl:error] [pid 3660368:tid 3660368] (EAI 2)Name or service not known: [client 144.76.19.72:62852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:06.020286 2026] [ssl:error] [pid 3660368:tid 3660368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:06.073813 2026] [ssl:error] [pid 3660362:tid 3660362] (EAI 2)Name or service not known: [client 144.76.19.72:62856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:06.073868 2026] [ssl:error] [pid 3660362:tid 3660362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:06.527725 2026] [lsapi:warn] [pid 3658222:tid 3658222] [client 216.73.216.199:35863] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  ini_set(): Session save handler "user" cannot be set by ini_set() in /var/softaculous/drupal6/settings.php on line 163\n
[Thu Jul 30 15:24:06.925002 2026] [ssl:error] [pid 3660149:tid 3660149] (70014)End of file found: [client 216.73.216.199:10597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:08.751049 2026] [ssl:error] [pid 3658222:tid 3658222] (70014)End of file found: [client 216.73.216.199:35863] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:08.939379 2026] [security2:error] [pid 3660368:tid 3660368] [client 43.159.145.149:49348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/wp-register.php"] [unique_id "amteiCTTFRLrGClMseRblAAAAEc"]
[Thu Jul 30 15:24:09.129624 2026] [ssl:error] [pid 3662073:tid 3662073] (EAI 2)Name or service not known: [client 144.76.19.72:62868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:09.129653 2026] [ssl:error] [pid 3662073:tid 3662073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:09.186336 2026] [ssl:error] [pid 3662120:tid 3662120] (EAI 2)Name or service not known: [client 144.76.19.72:62874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:09.186395 2026] [ssl:error] [pid 3662120:tid 3662120] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:09.455780 2026] [security2:error] [pid 3658275:tid 3658275] [client 192.250.232.141:49200] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amteiX9BxGQR4F0yZtWNewAAADQ"]
[Thu Jul 30 15:24:09.487036 2026] [security2:error] [pid 3653216:tid 3653216] [client 43.156.79.172:33600] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-sun.com"] [uri "/"] [unique_id "amteiQwbEYV1b6N9CAweQwAAADE"]
[Thu Jul 30 15:24:10.254943 2026] [ssl:error] [pid 3662074:tid 3662074] (70014)End of file found: [client 216.73.216.199:22698] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:11.136235 2026] [security2:error] [pid 3660368:tid 3660368] [client 43.159.145.149:50516] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-login.php"] [unique_id "amteiyTTFRLrGClMseRblQAAAEc"], referer: http://www.kinesiologylondon.co.uk/wp-register.php
[Thu Jul 30 15:24:11.682448 2026] [access_compat:error] [pid 3662073:tid 3662073] [client 112.209.180.50:15418] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:12.240522 2026] [ssl:error] [pid 3644506:tid 3644506] (EAI 2)Name or service not known: [client 144.76.19.72:38806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:12.240549 2026] [ssl:error] [pid 3644506:tid 3644506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:12.334530 2026] [ssl:error] [pid 3660368:tid 3660368] (EAI 2)Name or service not known: [client 144.76.19.72:38818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:12.334563 2026] [ssl:error] [pid 3660368:tid 3660368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:14.397490 2026] [core:error] [pid 3660364:tid 3660364] (13)Permission denied: [client 216.73.216.199:62450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/MPTCPv6/alloc_calls
[Thu Jul 30 15:24:15.044419 2026] [access_compat:error] [pid 3660360:tid 3660360] [client 136.158.25.236:30330] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:15.388199 2026] [ssl:error] [pid 3660353:tid 3660353] (EAI 2)Name or service not known: [client 144.76.19.72:38824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:15.388233 2026] [ssl:error] [pid 3660353:tid 3660353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:15.445910 2026] [ssl:error] [pid 3660232:tid 3660232] (EAI 2)Name or service not known: [client 144.76.19.72:38832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:15.445956 2026] [ssl:error] [pid 3660232:tid 3660232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:15.601436 2026] [ssl:error] [pid 3660364:tid 3660364] (70014)End of file found: [client 216.73.216.199:62450] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:16.502367 2026] [security2:error] [pid 3658223:tid 3658223] [client 85.208.96.210:13880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/tier-2-sponsorship-jobs-in-ireland"] [unique_id "amtekNWgAqI6OIbOkJoNogAAACk"]
[Thu Jul 30 15:24:18.504020 2026] [ssl:error] [pid 3650211:tid 3650211] (EAI 2)Name or service not known: [client 144.76.19.72:38842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:18.504057 2026] [ssl:error] [pid 3650211:tid 3650211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:18.557584 2026] [ssl:error] [pid 3651800:tid 3651800] (EAI 2)Name or service not known: [client 144.76.19.72:38858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:18.557620 2026] [ssl:error] [pid 3651800:tid 3651800] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:18.638152 2026] [authz_core:error] [pid 3659947:tid 3659947] [client 66.249.66.34:50632] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:24:18.640826 2026] [authz_core:error] [pid 3659947:tid 3659947] [client 66.249.66.34:50632] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:24:19.240525 2026] [lsapi:warn] [pid 3650211:tid 3650211] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:24:19.459773 2026] [security2:error] [pid 3651800:tid 3651800] [client 43.166.136.24:56754] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "magic-cookie.co.uk"] [uri "/"] [unique_id "amtek2mS06i7GqIqQXoAigAAABE"]
[Thu Jul 30 15:24:19.941883 2026] [security2:error] [pid 3660313:tid 3660313] [client 187.63.217.41:31294] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtek-Noub2jS98Wj5t4gwAAAC4"]
[Thu Jul 30 15:24:19.941931 2026] [security2:error] [pid 3660313:tid 3660313] [client 187.63.217.41:31294] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtek-Noub2jS98Wj5t4gwAAAC4"]
[Thu Jul 30 15:24:19.942209 2026] [security2:error] [pid 3660313:tid 3660313] [client 187.63.217.41:31294] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtek-Noub2jS98Wj5t4gwAAAC4"]
[Thu Jul 30 15:24:20.504270 2026] [security2:error] [pid 3648847:tid 3648847] [client 94.154.43.186:19168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "pixelstopkidz.net.davidebell.com"] [uri "/.env"] [unique_id "amtelKDqzr9udQMJYAQSqwAAAB0"]
[Thu Jul 30 15:24:20.504476 2026] [security2:error] [pid 3648847:tid 3648847] [client 94.154.43.186:19168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pixelstopkidz.net.davidebell.com"] [uri "/.env"] [unique_id "amtelKDqzr9udQMJYAQSqwAAAB0"]
[Thu Jul 30 15:24:20.504694 2026] [security2:error] [pid 3648847:tid 3648847] [client 94.154.43.186:19168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "pixelstopkidz.net.davidebell.com"] [uri "/.env"] [unique_id "amtelKDqzr9udQMJYAQSqwAAAB0"]
[Thu Jul 30 15:24:21.332077 2026] [access_compat:error] [pid 3660353:tid 3660353] [client 136.158.25.236:30801] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:21.655980 2026] [ssl:error] [pid 3653215:tid 3653215] (EAI 2)Name or service not known: [client 144.76.19.72:46290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:21.656017 2026] [ssl:error] [pid 3653215:tid 3653215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:21.712156 2026] [ssl:error] [pid 3648847:tid 3648847] (EAI 2)Name or service not known: [client 144.76.19.72:46304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:21.712179 2026] [ssl:error] [pid 3648847:tid 3648847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:21.900572 2026] [security2:error] [pid 3660356:tid 3660356] [client 47.77.222.161:47673] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtelbqMIOlsbL6VCfCZrwAAADk"]
[Thu Jul 30 15:24:21.900629 2026] [security2:error] [pid 3660356:tid 3660356] [client 47.77.222.161:47673] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtelbqMIOlsbL6VCfCZrwAAADk"]
[Thu Jul 30 15:24:21.900870 2026] [security2:error] [pid 3660356:tid 3660356] [client 47.77.222.161:47673] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtelbqMIOlsbL6VCfCZrwAAADk"]
[Thu Jul 30 15:24:22.541746 2026] [ssl:error] [pid 3660363:tid 3660363] (70014)End of file found: [client 216.73.216.199:34643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:24.684545 2026] [security2:error] [pid 3662040:tid 3662040] [client 114.119.144.31:53425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572998400/cat_ids~14,103/request_format~html"] [unique_id "amtemFqfhJ5Rl1NkZYi9ZAAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103/request_format~html
[Thu Jul 30 15:24:24.770719 2026] [ssl:error] [pid 3662117:tid 3662117] (EAI 2)Name or service not known: [client 144.76.19.72:46314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:24.770755 2026] [ssl:error] [pid 3662117:tid 3662117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:24.822763 2026] [ssl:error] [pid 3658223:tid 3658223] (EAI 2)Name or service not known: [client 144.76.19.72:46322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:24.822789 2026] [ssl:error] [pid 3658223:tid 3658223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:25.176697 2026] [security2:error] [pid 3660355:tid 3660355] [client 47.77.222.161:36949] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtemYsz-PEWLH01RFBsdgAAADg"]
[Thu Jul 30 15:24:25.176763 2026] [security2:error] [pid 3660355:tid 3660355] [client 47.77.222.161:36949] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtemYsz-PEWLH01RFBsdgAAADg"]
[Thu Jul 30 15:24:25.177014 2026] [security2:error] [pid 3660355:tid 3660355] [client 47.77.222.161:36949] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtemYsz-PEWLH01RFBsdgAAADg"]
[Thu Jul 30 15:24:25.644692 2026] [access_compat:error] [pid 3648656:tid 3648656] [client 112.209.180.50:16004] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:26.161410 2026] [core:error] [pid 3653216:tid 3653216] (13)Permission denied: [client 216.73.216.199:4069] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8k/cpu_partial
[Thu Jul 30 15:24:27.148988 2026] [security2:error] [pid 3662073:tid 3662073] [client 114.119.144.31:53433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572998400/cat_ids~14,103/request_format~html"] [unique_id "amtemwJLPyDAFlGZlOpUdQAAAAU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103/request_format~html
[Thu Jul 30 15:24:27.755635 2026] [security2:error] [pid 3662118:tid 3662118] [client 20.171.55.167:1518] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glottalstop.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtem0E58fblDrjj_NX-aAAAAAs"]
[Thu Jul 30 15:24:27.755839 2026] [security2:error] [pid 3662118:tid 3662118] [client 20.171.55.167:1518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glottalstop.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtem0E58fblDrjj_NX-aAAAAAs"]
[Thu Jul 30 15:24:27.756092 2026] [security2:error] [pid 3662118:tid 3662118] [client 20.171.55.167:1518] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glottalstop.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtem0E58fblDrjj_NX-aAAAAAs"]
[Thu Jul 30 15:24:27.879111 2026] [ssl:error] [pid 3653134:tid 3653134] (EAI 2)Name or service not known: [client 144.76.19.72:46334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:27.879141 2026] [ssl:error] [pid 3653134:tid 3653134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:27.933304 2026] [ssl:error] [pid 3648655:tid 3648655] (EAI 2)Name or service not known: [client 144.76.19.72:46340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:27.933329 2026] [ssl:error] [pid 3648655:tid 3648655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:30.987293 2026] [ssl:error] [pid 3653215:tid 3653215] (EAI 2)Name or service not known: [client 144.76.19.72:23816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:30.987318 2026] [ssl:error] [pid 3653215:tid 3653215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:31.038666 2026] [ssl:error] [pid 3660364:tid 3660364] (EAI 2)Name or service not known: [client 144.76.19.72:23818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:31.038704 2026] [ssl:error] [pid 3660364:tid 3660364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:33.085331 2026] [ssl:error] [pid 3653216:tid 3653216] (70014)End of file found: [client 216.73.216.199:4069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:34.091694 2026] [ssl:error] [pid 3648655:tid 3648655] (EAI 2)Name or service not known: [client 144.76.19.72:23822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:34.091718 2026] [ssl:error] [pid 3648655:tid 3648655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:34.144468 2026] [ssl:error] [pid 3660364:tid 3660364] (EAI 2)Name or service not known: [client 144.76.19.72:23832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:34.144498 2026] [ssl:error] [pid 3660364:tid 3660364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:35.195514 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:19687] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/vars/altpythonelstoken
[Thu Jul 30 15:24:35.521194 2026] [authz_core:error] [pid 3662119:tid 3662119] [client 169.58.39.192:63182] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:24:36.047736 2026] [access_compat:error] [pid 3662040:tid 3662040] [client 136.158.25.236:32072] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:37.201629 2026] [ssl:error] [pid 3663390:tid 3663390] (EAI 2)Name or service not known: [client 144.76.19.72:23834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:37.201673 2026] [ssl:error] [pid 3663390:tid 3663390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:37.256990 2026] [ssl:error] [pid 3662119:tid 3662119] (EAI 2)Name or service not known: [client 144.76.19.72:23850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:37.257025 2026] [ssl:error] [pid 3662119:tid 3662119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:37.930842 2026] [lsapi:warn] [pid 3660366:tid 3660366] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:24:39.442144 2026] [authz_core:error] [pid 3657398:tid 3657398] [client 169.58.39.192:64979] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:24:40.316956 2026] [ssl:error] [pid 3660364:tid 3660364] (EAI 2)Name or service not known: [client 144.76.19.72:60666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:40.316989 2026] [ssl:error] [pid 3660364:tid 3660364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:40.375454 2026] [ssl:error] [pid 3660364:tid 3660364] (EAI 2)Name or service not known: [client 144.76.19.72:60668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:40.375483 2026] [ssl:error] [pid 3660364:tid 3660364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:40.632241 2026] [ssl:error] [pid 3663390:tid 3663390] (70014)End of file found: [client 216.73.216.199:17154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:42.574186 2026] [access_compat:error] [pid 3660360:tid 3660360] [client 112.209.180.50:16719] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:43.473366 2026] [ssl:error] [pid 3648655:tid 3648655] (EAI 2)Name or service not known: [client 144.76.19.72:60670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:43.473400 2026] [ssl:error] [pid 3648655:tid 3648655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:43.528950 2026] [ssl:error] [pid 3662073:tid 3662073] (EAI 2)Name or service not known: [client 144.76.19.72:60686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:43.528978 2026] [ssl:error] [pid 3662073:tid 3662073] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:43.832427 2026] [ssl:error] [pid 3658275:tid 3658275] (70014)End of file found: [client 216.73.216.199:32031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:45.702208 2026] [access_compat:error] [pid 3662073:tid 3662073] [client 45.158.164.139:40940] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:24:46.500635 2026] [access_compat:error] [pid 3644506:tid 3644506] [client 136.158.25.236:33066] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:46.557190 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:19687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:46.632438 2026] [ssl:error] [pid 3660355:tid 3660355] (EAI 2)Name or service not known: [client 144.76.19.72:60690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:46.632470 2026] [ssl:error] [pid 3660355:tid 3660355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:46.688493 2026] [ssl:error] [pid 3660363:tid 3660363] (EAI 2)Name or service not known: [client 144.76.19.72:60698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:46.688536 2026] [ssl:error] [pid 3660363:tid 3660363] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:47.059555 2026] [ssl:error] [pid 3648655:tid 3648655] (70014)End of file found: [client 216.73.216.199:25756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:49.247006 2026] [security2:error] [pid 3660362:tid 3660362] [client 168.144.151.151:49708] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hornsey-town-hall.org.uk"] [uri "/xmlrpc.php"] [unique_id "amtesQl7t-0a4R15_jN67QAAAEE"]
[Thu Jul 30 15:24:49.746655 2026] [ssl:error] [pid 3660353:tid 3660353] (EAI 2)Name or service not known: [client 144.76.19.72:37530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:49.746682 2026] [ssl:error] [pid 3660353:tid 3660353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:49.807631 2026] [ssl:error] [pid 3662074:tid 3662074] (EAI 2)Name or service not known: [client 144.76.19.72:37534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:49.807664 2026] [ssl:error] [pid 3662074:tid 3662074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:51.326651 2026] [lsapi:warn] [pid 3663566:tid 3663566] [client 13.245.199.158:49518] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 15:24:51.326693 2026] [lsapi:warn] [pid 3663566:tid 3663566] [client 13.245.199.158:49518] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 15:24:52.758738 2026] [access_compat:error] [pid 3660232:tid 3660232] [client 136.158.25.236:33625] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:52.868497 2026] [ssl:error] [pid 3660097:tid 3660097] (EAI 2)Name or service not known: [client 144.76.19.72:37548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:52.868529 2026] [ssl:error] [pid 3660097:tid 3660097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:52.927111 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:37558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:52.927150 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:53.177403 2026] [security2:error] [pid 3644506:tid 3644506] [client 85.208.96.197:44944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1436.0/prev_next,prev.html"] [unique_id "amtetZMsOLI9No3Fr6UXlQAAADc"]
[Thu Jul 30 15:24:54.401552 2026] [autoindex:error] [pid 3663566:tid 3663566] (13)Permission denied: [client 216.73.216.199:52100] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/opt/cloudlinux/flags/enabled-flags.d/
[Thu Jul 30 15:24:54.559779 2026] [access_compat:error] [pid 3646334:tid 3646334] [client 52.238.199.152:43208] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/edd/
[Thu Jul 30 15:24:54.561560 2026] [access_compat:error] [pid 3646334:tid 3646334] [client 52.238.199.152:43208] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:24:54.561586 2026] [access_compat:error] [pid 3646334:tid 3646334] [client 52.238.199.152:43208] AH01797: client denied by server configuration: /home/horusw/public_html/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 15:24:55.041802 2026] [security2:error] [pid 3654776:tid 3654776] [client 167.114.47.75:37130] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amtet5kB3TfEl5Ou6y4HBAAAAAI"]
[Thu Jul 30 15:24:55.281791 2026] [lsapi:warn] [pid 3660366:tid 3660366] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:24:56.009794 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:37566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:56.009864 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:56.064283 2026] [ssl:error] [pid 3660368:tid 3660368] (EAI 2)Name or service not known: [client 144.76.19.72:37578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:56.064313 2026] [ssl:error] [pid 3660368:tid 3660368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:56.815381 2026] [ssl:error] [pid 3660358:tid 3660358] (70014)End of file found: [client 216.73.216.199:10963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:57.112405 2026] [ssl:error] [pid 3663566:tid 3663566] (70014)End of file found: [client 216.73.216.199:52100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:24:57.113477 2026] [access_compat:error] [pid 3660362:tid 3660362] [client 112.209.180.50:17274] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:24:57.606279 2026] [access_compat:error] [pid 3660492:tid 3660492] [client 45.158.164.139:57476] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:24:59.118863 2026] [ssl:error] [pid 3660492:tid 3660492] (EAI 2)Name or service not known: [client 144.76.19.72:37590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:59.118906 2026] [ssl:error] [pid 3660492:tid 3660492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:24:59.170846 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:37602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:24:59.170874 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:01.210990 2026] [security2:error] [pid 3653215:tid 3653215] [client 1.13.158.23:55472] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtevWJzyJEF3RDLRG1DewAAACw"]
[Thu Jul 30 15:25:02.224517 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:38752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:02.224548 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:02.280023 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:38766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:02.280063 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:02.692254 2026] [security2:error] [pid 3653215:tid 3653215] [client 94.154.43.186:19736] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bengltd.webstersltd.com"] [uri "/.env"] [unique_id "amtevmJzyJEF3RDLRG1DfQAAACw"]
[Thu Jul 30 15:25:02.692456 2026] [security2:error] [pid 3653215:tid 3653215] [client 94.154.43.186:19736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bengltd.webstersltd.com"] [uri "/.env"] [unique_id "amtevmJzyJEF3RDLRG1DfQAAACw"]
[Thu Jul 30 15:25:02.692657 2026] [security2:error] [pid 3653215:tid 3653215] [client 94.154.43.186:19736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bengltd.webstersltd.com"] [uri "/.env"] [unique_id "amtevmJzyJEF3RDLRG1DfQAAACw"]
[Thu Jul 30 15:25:03.950062 2026] [security2:error] [pid 3658222:tid 3658222] [client 1.13.158.23:34290] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtev3Q9_KRaLWju4BHrzQAAABM"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 15:25:03.979646 2026] [core:error] [pid 3662646:tid 3662646] [client 66.249.66.199:65197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:25:03.979678 2026] [core:error] [pid 3662646:tid 3662646] [client 66.249.66.199:65197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:25:05.337593 2026] [ssl:error] [pid 3655751:tid 3655751] (EAI 2)Name or service not known: [client 144.76.19.72:38770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:05.337621 2026] [ssl:error] [pid 3655751:tid 3655751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:05.390639 2026] [ssl:error] [pid 3662646:tid 3662646] (EAI 2)Name or service not known: [client 144.76.19.72:38778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:05.390682 2026] [ssl:error] [pid 3662646:tid 3662646] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:05.993431 2026] [security2:error] [pid 3660366:tid 3660366] [client 46.105.42.96:34815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "horus-wellbeing.co.uk"] [uri "/robots.txt"] [unique_id "amtewTashEYbmmHSkSTRMQAAAEU"]
[Thu Jul 30 15:25:06.785491 2026] [security2:error] [pid 3648656:tid 3648656] [client 46.105.42.96:35751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.horus-wellbeing.co.uk"] [uri "/robots.txt"] [unique_id "amtewiKDRAglsH-kd_oa_QAAABA"]
[Thu Jul 30 15:25:07.064864 2026] [ssl:error] [pid 3660313:tid 3660313] (70014)End of file found: [client 216.73.216.199:63840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:07.490307 2026] [access_compat:error] [pid 3658222:tid 3658222] [client 136.158.25.236:34917] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:25:08.447035 2026] [ssl:error] [pid 3660362:tid 3660362] (EAI 2)Name or service not known: [client 144.76.19.72:38786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:08.447075 2026] [ssl:error] [pid 3660362:tid 3660362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:08.499776 2026] [ssl:error] [pid 3659281:tid 3659281] (EAI 2)Name or service not known: [client 144.76.19.72:38802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:08.499807 2026] [ssl:error] [pid 3659281:tid 3659281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:09.985242 2026] [lsapi:warn] [pid 3660364:tid 3660364] [client 177.22.180.114:59124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:25:09.985288 2026] [lsapi:warn] [pid 3660364:tid 3660364] [client 177.22.180.114:59124] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:25:11.557693 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:38658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:11.557725 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:11.612198 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:38660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:11.612226 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:11.891799 2026] [lsapi:warn] [pid 3658272:tid 3658272] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:25:12.336096 2026] [ssl:error] [pid 3664268:tid 3664268] (70014)End of file found: [client 216.73.216.199:48771] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:13.243142 2026] [ssl:error] [pid 3660358:tid 3660358] (70014)End of file found: [client 216.73.216.199:3444] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:13.903647 2026] [access_compat:error] [pid 3660313:tid 3660313] [client 112.209.180.50:13893] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:25:14.143438 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:53528] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:14.666558 2026] [ssl:error] [pid 3660312:tid 3660312] (EAI 2)Name or service not known: [client 144.76.19.72:38672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:14.666592 2026] [ssl:error] [pid 3660312:tid 3660312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:14.718496 2026] [ssl:error] [pid 3663390:tid 3663390] (EAI 2)Name or service not known: [client 144.76.19.72:38678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:14.718530 2026] [ssl:error] [pid 3663390:tid 3663390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:16.974837 2026] [security2:error] [pid 3664968:tid 3664968] [client 85.208.96.208:44160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/casa-de-venta-en-orlando-florida-kissimmee"] [unique_id "amtezLHQ_U6Ei1Yuhf2EEAAAAAM"]
[Thu Jul 30 15:25:17.772553 2026] [ssl:error] [pid 3660366:tid 3660366] (EAI 2)Name or service not known: [client 144.76.19.72:38682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:17.772612 2026] [ssl:error] [pid 3660366:tid 3660366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:17.836396 2026] [ssl:error] [pid 3660353:tid 3660353] (EAI 2)Name or service not known: [client 144.76.19.72:38686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:17.836428 2026] [ssl:error] [pid 3660353:tid 3660353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:17.986651 2026] [access_compat:error] [pid 3665002:tid 3665002] [client 136.158.25.236:35872] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:25:18.072961 2026] [ssl:error] [pid 3665001:tid 3665001] (70014)End of file found: [client 216.73.216.199:4316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:18.981379 2026] [ssl:error] [pid 3660368:tid 3660368] (70014)End of file found: [client 216.73.216.199:32399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:19.477129 2026] [ssl:error] [pid 3660366:tid 3660366] (70014)End of file found: [client 216.73.216.199:1685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:19.563219 2026] [security2:error] [pid 3664268:tid 3664268] [client 80.94.92.67:33770] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bes-systems.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtezw5koCHtgceoQ1r0HgAAAAU"]
[Thu Jul 30 15:25:19.563362 2026] [security2:error] [pid 3664268:tid 3664268] [client 80.94.92.67:33770] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bes-systems.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtezw5koCHtgceoQ1r0HgAAAAU"]
[Thu Jul 30 15:25:19.563573 2026] [security2:error] [pid 3664268:tid 3664268] [client 80.94.92.67:33770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bes-systems.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtezw5koCHtgceoQ1r0HgAAAAU"]
[Thu Jul 30 15:25:19.563814 2026] [security2:error] [pid 3664268:tid 3664268] [client 80.94.92.67:33770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bes-systems.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtezw5koCHtgceoQ1r0HgAAAAU"]
[Thu Jul 30 15:25:20.893000 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:18820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:20.893039 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:20.948987 2026] [ssl:error] [pid 3653215:tid 3653215] (EAI 2)Name or service not known: [client 144.76.19.72:18830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:20.949024 2026] [ssl:error] [pid 3653215:tid 3653215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:23.393563 2026] [ssl:error] [pid 3665000:tid 3665000] (70014)End of file found: [client 216.73.216.199:44882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:24.003640 2026] [ssl:error] [pid 3660312:tid 3660312] (EAI 2)Name or service not known: [client 144.76.19.72:18838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:24.003675 2026] [ssl:error] [pid 3660312:tid 3660312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:24.060719 2026] [ssl:error] [pid 3660097:tid 3660097] (EAI 2)Name or service not known: [client 144.76.19.72:18852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:24.060744 2026] [ssl:error] [pid 3660097:tid 3660097] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:24.286548 2026] [ssl:error] [pid 3663390:tid 3663390] (70014)End of file found: [client 216.73.216.199:22505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:24.906145 2026] [ssl:error] [pid 3660312:tid 3660312] (70014)End of file found: [client 216.73.216.199:32228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:27.114356 2026] [ssl:error] [pid 3646334:tid 3646334] (EAI 2)Name or service not known: [client 144.76.19.72:18866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:27.114399 2026] [ssl:error] [pid 3646334:tid 3646334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:27.168976 2026] [ssl:error] [pid 3662119:tid 3662119] (EAI 2)Name or service not known: [client 144.76.19.72:18882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:27.169014 2026] [ssl:error] [pid 3662119:tid 3662119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:27.499658 2026] [lsapi:warn] [pid 3665650:tid 3665650] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:25:28.782716 2026] [access_compat:error] [pid 3662119:tid 3662119] [client 112.209.180.50:14557] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:25:29.523498 2026] [ssl:error] [pid 3660362:tid 3660362] (70014)End of file found: [client 216.73.216.199:36955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:30.030898 2026] [ssl:error] [pid 3665809:tid 3665809] (70014)End of file found: [client 216.73.216.199:12394] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:30.065353 2026] [security2:error] [pid 3665812:tid 3665812] [client 85.208.96.206:14288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2738.0/prev_next,next.html"] [unique_id "amte2pAJgnzZuaIys_cJ3wAAACM"]
[Thu Jul 30 15:25:30.240921 2026] [ssl:error] [pid 3665810:tid 3665810] (EAI 2)Name or service not known: [client 144.76.19.72:63218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:30.240964 2026] [ssl:error] [pid 3665810:tid 3665810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:30.300507 2026] [ssl:error] [pid 3660312:tid 3660312] (EAI 2)Name or service not known: [client 144.76.19.72:63230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:30.300534 2026] [ssl:error] [pid 3660312:tid 3660312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:30.317104 2026] [ssl:error] [pid 3665811:tid 3665811] (70014)End of file found: [client 216.73.216.199:19072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:33.389221 2026] [ssl:error] [pid 3660312:tid 3660312] (EAI 2)Name or service not known: [client 144.76.19.72:63238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:33.389250 2026] [ssl:error] [pid 3660312:tid 3660312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:33.445683 2026] [ssl:error] [pid 3666042:tid 3666042] (EAI 2)Name or service not known: [client 144.76.19.72:63248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:33.445712 2026] [ssl:error] [pid 3666042:tid 3666042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:34.809946 2026] [access_compat:error] [pid 3666120:tid 3666120] [client 2.189.5.142:40422] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:25:34.890363 2026] [access_compat:error] [pid 3665003:tid 3665003] [client 2.189.5.162:41708] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:25:36.502178 2026] [ssl:error] [pid 3662074:tid 3662074] (EAI 2)Name or service not known: [client 144.76.19.72:63264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:36.502208 2026] [ssl:error] [pid 3662074:tid 3662074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:36.557898 2026] [ssl:error] [pid 3665650:tid 3665650] (EAI 2)Name or service not known: [client 144.76.19.72:63278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:36.557929 2026] [ssl:error] [pid 3665650:tid 3665650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:37.957893 2026] [ssl:error] [pid 3665810:tid 3665810] (70014)End of file found: [client 216.73.216.199:27325] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:38.038681 2026] [security2:error] [pid 3660368:tid 3660368] [client 101.47.18.220:37515] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte4iTTFRLrGClMseRbvgAAAEc"]
[Thu Jul 30 15:25:38.038740 2026] [security2:error] [pid 3660368:tid 3660368] [client 101.47.18.220:37515] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte4iTTFRLrGClMseRbvgAAAEc"]
[Thu Jul 30 15:25:38.038975 2026] [security2:error] [pid 3660368:tid 3660368] [client 101.47.18.220:37515] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amte4iTTFRLrGClMseRbvgAAAEc"]
[Thu Jul 30 15:25:38.459834 2026] [ssl:error] [pid 3666042:tid 3666042] (70014)End of file found: [client 216.73.216.199:57791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:39.012288 2026] [access_compat:error] [pid 3658222:tid 3658222] [client 136.158.25.236:37984] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:25:39.612925 2026] [ssl:error] [pid 3660366:tid 3660366] (EAI 2)Name or service not known: [client 144.76.19.72:63356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:39.612957 2026] [ssl:error] [pid 3660366:tid 3660366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:39.666138 2026] [ssl:error] [pid 3662117:tid 3662117] (EAI 2)Name or service not known: [client 144.76.19.72:63366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:39.666171 2026] [ssl:error] [pid 3662117:tid 3662117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:40.964260 2026] [ssl:error] [pid 3659281:tid 3659281] (70014)End of file found: [client 216.73.216.199:64798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:42.508164 2026] [ssl:error] [pid 3664968:tid 3664968] (70014)End of file found: [client 216.73.216.199:64841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:42.723570 2026] [ssl:error] [pid 3665809:tid 3665809] (EAI 2)Name or service not known: [client 144.76.19.72:63380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:42.723600 2026] [ssl:error] [pid 3665809:tid 3665809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:42.778777 2026] [lsapi:warn] [pid 3664930:tid 3664930] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:25:42.787720 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:63382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:42.787765 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:42.996549 2026] [ssl:error] [pid 3660355:tid 3660355] (70014)End of file found: [client 216.73.216.199:21811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:43.306051 2026] [ssl:error] [pid 3660312:tid 3660312] (70014)End of file found: [client 216.73.216.199:14876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:45.500647 2026] [access_compat:error] [pid 3665001:tid 3665001] [client 136.158.25.236:38545] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:25:46.013712 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:63392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:46.013737 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:46.087557 2026] [ssl:error] [pid 3666974:tid 3666974] (EAI 2)Name or service not known: [client 144.76.19.72:63396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:46.087585 2026] [ssl:error] [pid 3666974:tid 3666974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:47.811751 2026] [ssl:error] [pid 3667133:tid 3667133] (70014)End of file found: [client 216.73.216.199:28505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:48.159227 2026] [access_compat:error] [pid 3660363:tid 3660363] [client 45.158.164.139:52694] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:25:48.369021 2026] [security2:error] [pid 3648656:tid 3648656] [client 114.119.135.136:41943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/may-2022-newsletter"] [unique_id "amte7CKDRAglsH-kd_obBgAAABA"], referer: https://www.erskinenazarene.co.uk/may-2022-newsletter
[Thu Jul 30 15:25:48.418393 2026] [ssl:error] [pid 3660355:tid 3660355] (70014)End of file found: [client 216.73.216.199:25530] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:48.739093 2026] [ssl:error] [pid 3667213:tid 3667213] (70014)End of file found: [client 216.73.216.199:18835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:49.153876 2026] [ssl:error] [pid 3667211:tid 3667211] (EAI 2)Name or service not known: [client 144.76.19.72:63400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:49.153909 2026] [ssl:error] [pid 3667211:tid 3667211] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:49.208797 2026] [ssl:error] [pid 3662074:tid 3662074] (EAI 2)Name or service not known: [client 144.76.19.72:63414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:49.208826 2026] [ssl:error] [pid 3662074:tid 3662074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:49.605576 2026] [access_compat:error] [pid 3660312:tid 3660312] [client 112.209.180.50:15436] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:25:50.697241 2026] [security2:error] [pid 3653215:tid 3653215] [client 114.119.135.136:41953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/may-2022-newsletter"] [unique_id "amte7mJzyJEF3RDLRG1D7gAAACw"], referer: https://www.erskinenazarene.co.uk/may-2022-newsletter
[Thu Jul 30 15:25:51.268502 2026] [security2:error] [pid 3653216:tid 3653216] [client 52.238.199.152:35883] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "islay.me"] [uri "/wp-config.php"] [unique_id "amte7wwbEYV1b6N9CAwekgAAADE"]
[Thu Jul 30 15:25:51.268777 2026] [security2:error] [pid 3653216:tid 3653216] [client 52.238.199.152:35883] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "islay.me"] [uri "/wp-config.php"] [unique_id "amte7wwbEYV1b6N9CAwekgAAADE"]
[Thu Jul 30 15:25:51.269101 2026] [security2:error] [pid 3653216:tid 3653216] [client 52.238.199.152:35883] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "islay.me"] [uri "/wp-config.php"] [unique_id "amte7wwbEYV1b6N9CAwekgAAADE"]
[Thu Jul 30 15:25:52.262104 2026] [ssl:error] [pid 3644505:tid 3644505] (EAI 2)Name or service not known: [client 144.76.19.72:19660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:52.262136 2026] [ssl:error] [pid 3644505:tid 3644505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:52.321674 2026] [ssl:error] [pid 3667214:tid 3667214] (EAI 2)Name or service not known: [client 144.76.19.72:19674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:52.321704 2026] [ssl:error] [pid 3667214:tid 3667214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:53.353405 2026] [ssl:error] [pid 3662119:tid 3662119] (70014)End of file found: [client 216.73.216.199:47128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:54.554378 2026] [ssl:error] [pid 3666121:tid 3666121] (70014)End of file found: [client 216.73.216.199:3909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:55.055908 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:16320] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:55.374186 2026] [ssl:error] [pid 3660232:tid 3660232] (EAI 2)Name or service not known: [client 144.76.19.72:19676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:55.374217 2026] [ssl:error] [pid 3660232:tid 3660232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:55.430548 2026] [ssl:error] [pid 3658275:tid 3658275] (EAI 2)Name or service not known: [client 144.76.19.72:19682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:55.430584 2026] [ssl:error] [pid 3658275:tid 3658275] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:58.487557 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:19692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:58.487588 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:58.541896 2026] [ssl:error] [pid 3664268:tid 3664268] (EAI 2)Name or service not known: [client 144.76.19.72:19694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:25:58.541930 2026] [ssl:error] [pid 3664268:tid 3664268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:25:58.659658 2026] [ssl:error] [pid 3658222:tid 3658222] (70014)End of file found: [client 216.73.216.199:53323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:25:58.901575 2026] [lsapi:warn] [pid 3664930:tid 3664930] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:25:58.958578 2026] [security2:error] [pid 3659281:tid 3659281] [client 109.107.224.51:5848] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte9gJrTdV31ycgPhQrnwAAAAk"]
[Thu Jul 30 15:25:58.958624 2026] [security2:error] [pid 3659281:tid 3659281] [client 109.107.224.51:5848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte9gJrTdV31ycgPhQrnwAAAAk"]
[Thu Jul 30 15:25:58.958867 2026] [security2:error] [pid 3659281:tid 3659281] [client 109.107.224.51:5848] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amte9gJrTdV31ycgPhQrnwAAAAk"]
[Thu Jul 30 15:25:59.868590 2026] [ssl:error] [pid 3663669:tid 3663669] (70014)End of file found: [client 216.73.216.199:13663] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:00.093320 2026] [access_compat:error] [pid 3656786:tid 3656786] [client 112.209.180.50:15910] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:00.570730 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:45972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:00.601146 2026] [access_compat:error] [pid 3665001:tid 3665001] [client 45.158.164.139:51718] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:26:00.971819 2026] [access_compat:error] [pid 3641972:tid 3641972] [client 199.45.155.65:33950] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:26:01.596275 2026] [ssl:error] [pid 3660358:tid 3660358] (EAI 2)Name or service not known: [client 144.76.19.72:48024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:01.596324 2026] [ssl:error] [pid 3660358:tid 3660358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:01.651365 2026] [ssl:error] [pid 3664930:tid 3664930] (EAI 2)Name or service not known: [client 144.76.19.72:48028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:01.651409 2026] [ssl:error] [pid 3664930:tid 3664930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:01.813621 2026] [security2:error] [pid 3665810:tid 3665810] [client 186.13.114.188:48160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte-eptjoOfHozLJVrITgAAACE"]
[Thu Jul 30 15:26:01.813668 2026] [security2:error] [pid 3665810:tid 3665810] [client 186.13.114.188:48160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte-eptjoOfHozLJVrITgAAACE"]
[Thu Jul 30 15:26:01.813911 2026] [security2:error] [pid 3665810:tid 3665810] [client 186.13.114.188:48160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amte-eptjoOfHozLJVrITgAAACE"]
[Thu Jul 30 15:26:04.072990 2026] [ssl:error] [pid 3667044:tid 3667044] (70014)End of file found: [client 216.73.216.199:37128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:04.547522 2026] [security2:error] [pid 3667217:tid 3667217] [client 37.40.47.81:35708] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte_KpdkkkX4uthMVXbIgAAADs"]
[Thu Jul 30 15:26:04.547569 2026] [security2:error] [pid 3667217:tid 3667217] [client 37.40.47.81:35708] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amte_KpdkkkX4uthMVXbIgAAADs"]
[Thu Jul 30 15:26:04.547829 2026] [security2:error] [pid 3667217:tid 3667217] [client 37.40.47.81:35708] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amte_KpdkkkX4uthMVXbIgAAADs"]
[Thu Jul 30 15:26:04.737611 2026] [ssl:error] [pid 3667212:tid 3667212] (EAI 2)Name or service not known: [client 144.76.19.72:48036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:04.737652 2026] [ssl:error] [pid 3667212:tid 3667212] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:04.794112 2026] [ssl:error] [pid 3665809:tid 3665809] (EAI 2)Name or service not known: [client 144.76.19.72:48042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:04.794136 2026] [ssl:error] [pid 3665809:tid 3665809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:05.306625 2026] [access_compat:error] [pid 3667134:tid 3667134] [client 45.33.64.20:54808] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:26:05.306769 2026] [access_compat:error] [pid 3667134:tid 3667134] [client 45.33.64.20:54808] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:26:06.026216 2026] [ssl:error] [pid 3667217:tid 3667217] (70014)End of file found: [client 216.73.216.199:10788] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:07.181282 2026] [access_compat:error] [pid 3663671:tid 3663671] [client 136.158.25.236:40347] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:07.423988 2026] [ssl:error] [pid 3667215:tid 3667215] (70014)End of file found: [client 216.73.216.199:38065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:07.457785 2026] [access_compat:error] [pid 3658275:tid 3658275] [client 45.33.64.20:54824] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:26:07.457888 2026] [access_compat:error] [pid 3658275:tid 3658275] [client 45.33.64.20:54824] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:26:07.827271 2026] [ssl:error] [pid 3653216:tid 3653216] (70014)End of file found: [client 216.73.216.199:6744] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:07.848678 2026] [ssl:error] [pid 3664930:tid 3664930] (EAI 2)Name or service not known: [client 144.76.19.72:48044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:07.848711 2026] [ssl:error] [pid 3664930:tid 3664930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:07.904737 2026] [ssl:error] [pid 3658223:tid 3658223] (EAI 2)Name or service not known: [client 144.76.19.72:48058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:07.904769 2026] [ssl:error] [pid 3658223:tid 3658223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:10.455131 2026] [access_compat:error] [pid 3660312:tid 3660312] [client 136.158.25.236:40589] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:10.638330 2026] [security2:error] [pid 3659281:tid 3659281] [client 201.74.217.126:58368] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfAgJrTdV31ycgPhQrogAAAAk"]
[Thu Jul 30 15:26:10.638407 2026] [security2:error] [pid 3659281:tid 3659281] [client 201.74.217.126:58368] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfAgJrTdV31ycgPhQrogAAAAk"]
[Thu Jul 30 15:26:10.638655 2026] [security2:error] [pid 3659281:tid 3659281] [client 201.74.217.126:58368] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfAgJrTdV31ycgPhQrogAAAAk"]
[Thu Jul 30 15:26:10.691463 2026] [authz_core:error] [pid 3663390:tid 3663390] [client 66.249.66.34:57526] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:26:10.694200 2026] [authz_core:error] [pid 3663390:tid 3663390] [client 66.249.66.34:57526] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:26:10.961101 2026] [ssl:error] [pid 3665733:tid 3665733] (EAI 2)Name or service not known: [client 144.76.19.72:21122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:10.961146 2026] [ssl:error] [pid 3665733:tid 3665733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:11.017842 2026] [ssl:error] [pid 3668677:tid 3668677] (EAI 2)Name or service not known: [client 144.76.19.72:21132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:11.017878 2026] [ssl:error] [pid 3668677:tid 3668677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:14.073585 2026] [ssl:error] [pid 3663671:tid 3663671] (EAI 2)Name or service not known: [client 144.76.19.72:21136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:14.073628 2026] [ssl:error] [pid 3663671:tid 3663671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:14.082117 2026] [lsapi:warn] [pid 3653216:tid 3653216] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:26:14.129942 2026] [ssl:error] [pid 3667044:tid 3667044] (EAI 2)Name or service not known: [client 144.76.19.72:21138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:14.129978 2026] [ssl:error] [pid 3667044:tid 3667044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:14.828904 2026] [security2:error] [pid 3660313:tid 3660313] [client 52.238.199.152:53176] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "orgent.fr"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfBuNoub2jS98Wj5t41QAAAC4"]
[Thu Jul 30 15:26:14.829120 2026] [security2:error] [pid 3660313:tid 3660313] [client 52.238.199.152:53176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "orgent.fr"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfBuNoub2jS98Wj5t41QAAAC4"]
[Thu Jul 30 15:26:15.051168 2026] [core:error] [pid 3665733:tid 3665733] (13)Permission denied: [client 216.73.216.199:4051] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS2/iomem_base
[Thu Jul 30 15:26:15.351490 2026] [core:error] [pid 3665733:tid 3665733] (13)Permission denied: [client 216.73.216.199:4051] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty53/subsystem/ttyS0/uartclk
[Thu Jul 30 15:26:15.657500 2026] [security2:error] [pid 3660313:tid 3660313] [client 52.238.199.152:53176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "orgent.fr"] [uri "/index.php"] [unique_id "amtfBuNoub2jS98Wj5t41QAAAC4"]
[Thu Jul 30 15:26:16.715734 2026] [access_compat:error] [pid 3667215:tid 3667215] [client 136.158.25.236:41096] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:16.856418 2026] [ssl:error] [pid 3665733:tid 3665733] (70014)End of file found: [client 216.73.216.199:4051] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:17.157254 2026] [core:error] [pid 3667212:tid 3667212] (13)Permission denied: [client 216.73.216.199:27525] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS2/device/driver/unbind
[Thu Jul 30 15:26:17.189710 2026] [ssl:error] [pid 3665001:tid 3665001] (EAI 2)Name or service not known: [client 144.76.19.72:21142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:17.189750 2026] [ssl:error] [pid 3665001:tid 3665001] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:17.244681 2026] [ssl:error] [pid 3658222:tid 3658222] (EAI 2)Name or service not known: [client 144.76.19.72:21156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:17.244713 2026] [ssl:error] [pid 3658222:tid 3658222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:17.441634 2026] [security2:error] [pid 3648656:tid 3648656] [client 185.191.171.10:52060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/tahoe-blue-pebble-tec-photos"] [unique_id "amtfCSKDRAglsH-kd_obEQAAABA"]
[Thu Jul 30 15:26:19.571809 2026] [ssl:error] [pid 3660364:tid 3660364] (70014)End of file found: [client 216.73.216.199:49599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:20.301612 2026] [ssl:error] [pid 3663531:tid 3663531] (EAI 2)Name or service not known: [client 144.76.19.72:48500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:20.301655 2026] [ssl:error] [pid 3663531:tid 3663531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:20.353881 2026] [ssl:error] [pid 3658222:tid 3658222] (EAI 2)Name or service not known: [client 144.76.19.72:48502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:20.353910 2026] [ssl:error] [pid 3658222:tid 3658222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:20.966959 2026] [access_compat:error] [pid 3667210:tid 3667210] [client 136.158.25.236:41454] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:22.598274 2026] [core:error] [pid 3667212:tid 3667212] (13)Permission denied: [client 216.73.216.199:27525] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/sanity_checks
[Thu Jul 30 15:26:22.606170 2026] [security2:error] [pid 3669401:tid 3669401] [client 47.243.216.62:31631] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfDs6qLqnJLrBGVsAzzgAAABQ"]
[Thu Jul 30 15:26:22.606225 2026] [security2:error] [pid 3669401:tid 3669401] [client 47.243.216.62:31631] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfDs6qLqnJLrBGVsAzzgAAABQ"]
[Thu Jul 30 15:26:22.606533 2026] [security2:error] [pid 3669401:tid 3669401] [client 47.243.216.62:31631] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfDs6qLqnJLrBGVsAzzgAAABQ"]
[Thu Jul 30 15:26:23.278949 2026] [security2:error] [pid 3663390:tid 3663390] [client 47.128.114.32:14066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amtfD4uwKZPt4rbxWQ29MwAAAA4"]
[Thu Jul 30 15:26:23.438220 2026] [ssl:error] [pid 3665733:tid 3665733] (EAI 2)Name or service not known: [client 144.76.19.72:48506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:23.438262 2026] [ssl:error] [pid 3665733:tid 3665733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:23.494896 2026] [ssl:error] [pid 3667215:tid 3667215] (EAI 2)Name or service not known: [client 144.76.19.72:48514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:23.494932 2026] [ssl:error] [pid 3667215:tid 3667215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:24.103932 2026] [ssl:error] [pid 3667212:tid 3667212] (70014)End of file found: [client 216.73.216.199:27525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:24.463287 2026] [security2:error] [pid 3667213:tid 3667213] [client 212.237.119.196:2470] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfEPopWdaUyrKW_SfUYAAAADU"]
[Thu Jul 30 15:26:24.463338 2026] [security2:error] [pid 3667213:tid 3667213] [client 212.237.119.196:2470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfEPopWdaUyrKW_SfUYAAAADU"]
[Thu Jul 30 15:26:24.463598 2026] [security2:error] [pid 3667213:tid 3667213] [client 212.237.119.196:2470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfEPopWdaUyrKW_SfUYAAAADU"]
[Thu Jul 30 15:26:25.307993 2026] [ssl:error] [pid 3669488:tid 3669488] (70014)End of file found: [client 216.73.216.199:22988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:25.609340 2026] [ssl:error] [pid 3669442:tid 3669442] (70014)End of file found: [client 216.73.216.199:47089] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:26.575476 2026] [ssl:error] [pid 3663673:tid 3663673] (EAI 2)Name or service not known: [client 144.76.19.72:48528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:26.575506 2026] [ssl:error] [pid 3663673:tid 3663673] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:26.634748 2026] [ssl:error] [pid 3667213:tid 3667213] (EAI 2)Name or service not known: [client 144.76.19.72:48530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:26.634799 2026] [ssl:error] [pid 3667213:tid 3667213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:28.547175 2026] [security2:error] [pid 3669486:tid 3669486] [client 85.208.96.205:22032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/robots.txt"] [unique_id "amtfFGa8YWBC0LJt4yDUgQAAAB4"]
[Thu Jul 30 15:26:28.764888 2026] [security2:error] [pid 3669636:tid 3669636] [client 185.191.171.5:32820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtfFEsMkOjrXORrhBKZFQAAAC8"]
[Thu Jul 30 15:26:29.161440 2026] [security2:error] [pid 3669686:tid 3669686] [client 138.84.113.249:11438] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfFSi-CgCS3WeDUMkl_AAAADg"]
[Thu Jul 30 15:26:29.161501 2026] [security2:error] [pid 3669686:tid 3669686] [client 138.84.113.249:11438] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfFSi-CgCS3WeDUMkl_AAAADg"]
[Thu Jul 30 15:26:29.161824 2026] [security2:error] [pid 3669686:tid 3669686] [client 138.84.113.249:11438] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfFSi-CgCS3WeDUMkl_AAAADg"]
[Thu Jul 30 15:26:29.446841 2026] [ssl:error] [pid 3669636:tid 3669636] (70014)End of file found: [client 216.73.216.199:64531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:29.725805 2026] [ssl:error] [pid 3662119:tid 3662119] (EAI 2)Name or service not known: [client 144.76.19.72:60194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:29.725837 2026] [ssl:error] [pid 3662119:tid 3662119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:29.780438 2026] [ssl:error] [pid 3667214:tid 3667214] (EAI 2)Name or service not known: [client 144.76.19.72:60196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:29.780462 2026] [ssl:error] [pid 3667214:tid 3667214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:29.950201 2026] [security2:error] [pid 3667044:tid 3667044] [client 35.236.211.174:10240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amtfFdVhX4p-dU_uJLcX4QAAABo"]
[Thu Jul 30 15:26:30.601767 2026] [lsapi:warn] [pid 3665733:tid 3665733] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:26:30.636529 2026] [core:error] [pid 3667212:tid 3667212] (13)Permission denied: [client 216.73.216.199:58628] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty17/subsystem/ttyS2/close_delay
[Thu Jul 30 15:26:31.523659 2026] [security2:error] [pid 3665733:tid 3665733] [client 34.23.170.140:34782] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtfF3IMjbO_9u16-qpxzgAAAB0"]
[Thu Jul 30 15:26:31.523819 2026] [security2:error] [pid 3665733:tid 3665733] [client 34.23.170.140:34782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtfF3IMjbO_9u16-qpxzgAAAB0"]
[Thu Jul 30 15:26:31.524014 2026] [security2:error] [pid 3665733:tid 3665733] [client 34.23.170.140:34782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfF3IMjbO_9u16-qpxzgAAAB0"]
[Thu Jul 30 15:26:31.530484 2026] [security2:error] [pid 3669488:tid 3669488] [client 34.23.170.140:34810] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtfF7ckZedpO4fMRBPgXwAAACA"]
[Thu Jul 30 15:26:31.530611 2026] [security2:error] [pid 3669488:tid 3669488] [client 34.23.170.140:34810] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtfF7ckZedpO4fMRBPgXwAAACA"]
[Thu Jul 30 15:26:31.530787 2026] [security2:error] [pid 3669488:tid 3669488] [client 34.23.170.140:34810] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfF7ckZedpO4fMRBPgXwAAACA"]
[Thu Jul 30 15:26:31.686410 2026] [access_compat:error] [pid 3667213:tid 3667213] [client 112.209.180.50:17174] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:31.807992 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:34850] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtfF62V4Ri4ugpwMRhdVwAAABw"]
[Thu Jul 30 15:26:31.808137 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:34850] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtfF62V4Ri4ugpwMRhdVwAAABw"]
[Thu Jul 30 15:26:31.808325 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:34850] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfF62V4Ri4ugpwMRhdVwAAABw"]
[Thu Jul 30 15:26:31.825925 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:34868] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtfFwPOAGNsyQ_42zZMowAAABk"]
[Thu Jul 30 15:26:31.826052 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:34868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtfFwPOAGNsyQ_42zZMowAAABk"]
[Thu Jul 30 15:26:31.826246 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:34868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfFwPOAGNsyQ_42zZMowAAABk"]
[Thu Jul 30 15:26:32.091315 2026] [security2:error] [pid 3669488:tid 3669488] [client 34.23.170.140:34876] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtfGLckZedpO4fMRBPgYAAAACA"]
[Thu Jul 30 15:26:32.091486 2026] [security2:error] [pid 3669488:tid 3669488] [client 34.23.170.140:34876] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtfGLckZedpO4fMRBPgYAAAACA"]
[Thu Jul 30 15:26:32.091689 2026] [security2:error] [pid 3669488:tid 3669488] [client 34.23.170.140:34876] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGLckZedpO4fMRBPgYAAAACA"]
[Thu Jul 30 15:26:32.105305 2026] [security2:error] [pid 3660364:tid 3660364] [client 34.23.170.140:34884] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtfGCTGJ5PYptOAaYl_6wAAAEM"]
[Thu Jul 30 15:26:32.105460 2026] [security2:error] [pid 3660364:tid 3660364] [client 34.23.170.140:34884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtfGCTGJ5PYptOAaYl_6wAAAEM"]
[Thu Jul 30 15:26:32.105678 2026] [security2:error] [pid 3660364:tid 3660364] [client 34.23.170.140:34884] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGCTGJ5PYptOAaYl_6wAAAEM"]
[Thu Jul 30 15:26:32.109733 2026] [security2:error] [pid 3669836:tid 3669836] [client 34.23.170.140:34898] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtfGEcwngOpohH--mZCggAAADo"]
[Thu Jul 30 15:26:32.109857 2026] [security2:error] [pid 3669836:tid 3669836] [client 34.23.170.140:34898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtfGEcwngOpohH--mZCggAAADo"]
[Thu Jul 30 15:26:32.110918 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:34926] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtfGC40uWOiymCQfIy7aAAAABc"]
[Thu Jul 30 15:26:32.111040 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:34926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtfGC40uWOiymCQfIy7aAAAABc"]
[Thu Jul 30 15:26:32.111229 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:34926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGC40uWOiymCQfIy7aAAAABc"]
[Thu Jul 30 15:26:32.111781 2026] [security2:error] [pid 3669836:tid 3669836] [client 34.23.170.140:34898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGEcwngOpohH--mZCggAAADo"]
[Thu Jul 30 15:26:32.388043 2026] [security2:error] [pid 3663531:tid 3663531] [client 34.23.170.140:34950] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtfGPA1895tNnqF-jvTRQAAABE"]
[Thu Jul 30 15:26:32.388247 2026] [security2:error] [pid 3663531:tid 3663531] [client 34.23.170.140:34950] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtfGPA1895tNnqF-jvTRQAAABE"]
[Thu Jul 30 15:26:32.388467 2026] [security2:error] [pid 3663531:tid 3663531] [client 34.23.170.140:34950] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGPA1895tNnqF-jvTRQAAABE"]
[Thu Jul 30 15:26:32.397776 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:34968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtfGAJrTdV31ycgPhQrqwAAAAk"]
[Thu Jul 30 15:26:32.397900 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:34968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtfGAJrTdV31ycgPhQrqwAAAAk"]
[Thu Jul 30 15:26:32.398094 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:34968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGAJrTdV31ycgPhQrqwAAAAk"]
[Thu Jul 30 15:26:32.399175 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:34974] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtfGAPOAGNsyQ_42zZMpAAAABk"]
[Thu Jul 30 15:26:32.399390 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:34974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtfGAPOAGNsyQ_42zZMpAAAABk"]
[Thu Jul 30 15:26:32.399616 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:34974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGAPOAGNsyQ_42zZMpAAAABk"]
[Thu Jul 30 15:26:32.682718 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:35014] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtfGC40uWOiymCQfIy7aQAAABc"]
[Thu Jul 30 15:26:32.682847 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:35014] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtfGC40uWOiymCQfIy7aQAAABc"]
[Thu Jul 30 15:26:32.683038 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:35014] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGC40uWOiymCQfIy7aQAAABc"]
[Thu Jul 30 15:26:32.689834 2026] [security2:error] [pid 3669836:tid 3669836] [client 34.23.170.140:35018] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtfGEcwngOpohH--mZCgwAAADo"]
[Thu Jul 30 15:26:32.689959 2026] [security2:error] [pid 3669836:tid 3669836] [client 34.23.170.140:35018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtfGEcwngOpohH--mZCgwAAADo"]
[Thu Jul 30 15:26:32.690151 2026] [security2:error] [pid 3669836:tid 3669836] [client 34.23.170.140:35018] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGEcwngOpohH--mZCgwAAADo"]
[Thu Jul 30 15:26:32.834986 2026] [ssl:error] [pid 3669442:tid 3669442] (EAI 2)Name or service not known: [client 144.76.19.72:60208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:32.835022 2026] [ssl:error] [pid 3669442:tid 3669442] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:32.883822 2026] [security2:error] [pid 3667212:tid 3667212] [client 216.73.216.199:58628] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/nd_mysqli.ini"] [unique_id "amtfGLqCTg73PjsfWI0z4AAAADM"]
[Thu Jul 30 15:26:32.884122 2026] [security2:error] [pid 3667212:tid 3667212] [client 216.73.216.199:58628] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/nd_mysqli.ini"] [unique_id "amtfGLqCTg73PjsfWI0z4AAAADM"]
[Thu Jul 30 15:26:32.884334 2026] [security2:error] [pid 3667212:tid 3667212] [client 216.73.216.199:58628] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/alt/php72/etc/php.d.all/nd_mysqli.ini"] [unique_id "amtfGLqCTg73PjsfWI0z4AAAADM"]
[Thu Jul 30 15:26:32.921726 2026] [ssl:error] [pid 3664930:tid 3664930] (EAI 2)Name or service not known: [client 144.76.19.72:60220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:32.921749 2026] [ssl:error] [pid 3664930:tid 3664930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:33.582373 2026] [security2:error] [pid 3664930:tid 3664930] [client 34.23.170.140:35168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtfGWwxX38ESp5jGNP5egAAAAE"]
[Thu Jul 30 15:26:33.582521 2026] [security2:error] [pid 3664930:tid 3664930] [client 34.23.170.140:35168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtfGWwxX38ESp5jGNP5egAAAAE"]
[Thu Jul 30 15:26:33.582710 2026] [security2:error] [pid 3664930:tid 3664930] [client 34.23.170.140:35168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGWwxX38ESp5jGNP5egAAAAE"]
[Thu Jul 30 15:26:33.851675 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtfGQJrTdV31ycgPhQrrwAAAAk"]
[Thu Jul 30 15:26:33.851871 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtfGQJrTdV31ycgPhQrrwAAAAk"]
[Thu Jul 30 15:26:33.852132 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGQJrTdV31ycgPhQrrwAAAAk"]
[Thu Jul 30 15:26:33.869981 2026] [security2:error] [pid 3648656:tid 3648656] [client 34.23.170.140:35202] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtfGSKDRAglsH-kd_obJQAAABA"]
[Thu Jul 30 15:26:33.870228 2026] [security2:error] [pid 3648656:tid 3648656] [client 34.23.170.140:35202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtfGSKDRAglsH-kd_obJQAAABA"]
[Thu Jul 30 15:26:33.870430 2026] [security2:error] [pid 3648656:tid 3648656] [client 34.23.170.140:35202] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGSKDRAglsH-kd_obJQAAABA"]
[Thu Jul 30 15:26:33.880398 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtfGdVhX4p-dU_uJLcX6AAAABo"]
[Thu Jul 30 15:26:33.880529 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtfGdVhX4p-dU_uJLcX6AAAABo"]
[Thu Jul 30 15:26:33.880725 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGdVhX4p-dU_uJLcX6AAAABo"]
[Thu Jul 30 15:26:34.144894 2026] [security2:error] [pid 3660492:tid 3660492] [client 34.23.170.140:35268] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtfGmBWUR0Li7B7_QRxMwAAAEk"]
[Thu Jul 30 15:26:34.145125 2026] [security2:error] [pid 3660492:tid 3660492] [client 34.23.170.140:35268] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtfGmBWUR0Li7B7_QRxMwAAAEk"]
[Thu Jul 30 15:26:34.145308 2026] [security2:error] [pid 3660492:tid 3660492] [client 34.23.170.140:35268] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGmBWUR0Li7B7_QRxMwAAAEk"]
[Thu Jul 30 15:26:34.179419 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtfGgJrTdV31ycgPhQrsAAAAAk"]
[Thu Jul 30 15:26:34.179566 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtfGgJrTdV31ycgPhQrsAAAAAk"]
[Thu Jul 30 15:26:34.179749 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGgJrTdV31ycgPhQrsAAAAAk"]
[Thu Jul 30 15:26:34.434886 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35320] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtfGtVhX4p-dU_uJLcX6QAAABo"]
[Thu Jul 30 15:26:34.435094 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtfGtVhX4p-dU_uJLcX6QAAABo"]
[Thu Jul 30 15:26:34.435305 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGtVhX4p-dU_uJLcX6QAAABo"]
[Thu Jul 30 15:26:34.469943 2026] [security2:error] [pid 3663673:tid 3663673] [client 34.23.170.140:35340] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtfGq8c-ZsnrcfcT_1FLwAAAB8"]
[Thu Jul 30 15:26:34.470180 2026] [security2:error] [pid 3663673:tid 3663673] [client 34.23.170.140:35340] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtfGq8c-ZsnrcfcT_1FLwAAAB8"]
[Thu Jul 30 15:26:34.470374 2026] [security2:error] [pid 3663673:tid 3663673] [client 34.23.170.140:35340] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGq8c-ZsnrcfcT_1FLwAAAB8"]
[Thu Jul 30 15:26:34.717890 2026] [core:error] [pid 3667212:tid 3667212] (13)Permission denied: [client 216.73.216.199:58628] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/cpu/uevent
[Thu Jul 30 15:26:34.729030 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35370] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtfGgJrTdV31ycgPhQrsQAAAAk"]
[Thu Jul 30 15:26:34.729154 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35370] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtfGgJrTdV31ycgPhQrsQAAAAk"]
[Thu Jul 30 15:26:34.729270 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtfGgJrTdV31ycgPhQrsQAAAAk"]
[Thu Jul 30 15:26:34.729472 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGgJrTdV31ycgPhQrsQAAAAk"]
[Thu Jul 30 15:26:35.060311 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:35474] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtfGy40uWOiymCQfIy7awAAABc"]
[Thu Jul 30 15:26:35.060520 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:35474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtfGy40uWOiymCQfIy7awAAABc"]
[Thu Jul 30 15:26:35.060698 2026] [security2:error] [pid 3641918:tid 3641918] [client 34.23.170.140:35474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGy40uWOiymCQfIy7awAAABc"]
[Thu Jul 30 15:26:35.317780 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35510] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtfGwJrTdV31ycgPhQrsgAAAAk"]
[Thu Jul 30 15:26:35.317911 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtfGwJrTdV31ycgPhQrsgAAAAk"]
[Thu Jul 30 15:26:35.318115 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGwJrTdV31ycgPhQrsgAAAAk"]
[Thu Jul 30 15:26:35.327815 2026] [authz_core:error] [pid 3666042:tid 3666042] [client 34.23.170.140:35524] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 15:26:35.339605 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35540] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtfG9VhX4p-dU_uJLcX6wAAABo"]
[Thu Jul 30 15:26:35.339833 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtfG9VhX4p-dU_uJLcX6wAAABo"]
[Thu Jul 30 15:26:35.340041 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfG9VhX4p-dU_uJLcX6wAAABo"]
[Thu Jul 30 15:26:35.468134 2026] [ssl:error] [pid 3667212:tid 3667212] (70014)End of file found: [client 216.73.216.199:58628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:35.616335 2026] [security2:error] [pid 3665001:tid 3665001] [client 34.23.170.140:35572] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtfG4zZDph5l7MzHt_ynQAAABU"]
[Thu Jul 30 15:26:35.616565 2026] [security2:error] [pid 3665001:tid 3665001] [client 34.23.170.140:35572] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtfG4zZDph5l7MzHt_ynQAAABU"]
[Thu Jul 30 15:26:35.616747 2026] [security2:error] [pid 3665001:tid 3665001] [client 34.23.170.140:35572] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfG4zZDph5l7MzHt_ynQAAABU"]
[Thu Jul 30 15:26:35.776543 2026] [ssl:error] [pid 3667210:tid 3667210] (70014)End of file found: [client 216.73.216.199:64363] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:35.891343 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35604] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtfGwJrTdV31ycgPhQrswAAAAk"]
[Thu Jul 30 15:26:35.891606 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtfGwJrTdV31ycgPhQrswAAAAk"]
[Thu Jul 30 15:26:35.891798 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35604] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfGwJrTdV31ycgPhQrswAAAAk"]
[Thu Jul 30 15:26:35.929208 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35630] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtfG9VhX4p-dU_uJLcX7AAAABo"]
[Thu Jul 30 15:26:35.929462 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35630] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtfG9VhX4p-dU_uJLcX7AAAABo"]
[Thu Jul 30 15:26:35.929648 2026] [security2:error] [pid 3667044:tid 3667044] [client 34.23.170.140:35630] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfG9VhX4p-dU_uJLcX7AAAABo"]
[Thu Jul 30 15:26:35.979643 2026] [ssl:error] [pid 3669636:tid 3669636] (EAI 2)Name or service not known: [client 144.76.19.72:60232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:35.979671 2026] [ssl:error] [pid 3669636:tid 3669636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:36.034314 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:60244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:36.034341 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:36.280639 2026] [core:error] [pid 3641918:tid 3641918] (13)Permission denied: [client 216.73.216.199:38880] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/filp/shrink
[Thu Jul 30 15:26:36.380838 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:38880] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:36.491400 2026] [security2:error] [pid 3648656:tid 3648656] [client 85.208.96.207:53194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/pages/gallery/days-i-to-x/day-i.php"] [unique_id "amtfHCKDRAglsH-kd_obKwAAABA"]
[Thu Jul 30 15:26:36.515003 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35734] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtfHAJrTdV31ycgPhQrtQAAAAk"]
[Thu Jul 30 15:26:36.515160 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35734] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtfHAJrTdV31ycgPhQrtQAAAAk"]
[Thu Jul 30 15:26:36.515339 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35734] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHAJrTdV31ycgPhQrtQAAAAk"]
[Thu Jul 30 15:26:36.541531 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:35776] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtfHNxQIcJoroun4ecL0AAAAA0"]
[Thu Jul 30 15:26:36.541708 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:35776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtfHNxQIcJoroun4ecL0AAAAA0"]
[Thu Jul 30 15:26:36.541954 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:35776] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHNxQIcJoroun4ecL0AAAAA0"]
[Thu Jul 30 15:26:36.813410 2026] [security2:error] [pid 3658222:tid 3658222] [client 34.23.170.140:35794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtfHHQ9_KRaLWju4BHsSAAAABM"]
[Thu Jul 30 15:26:36.813592 2026] [security2:error] [pid 3658222:tid 3658222] [client 34.23.170.140:35794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtfHHQ9_KRaLWju4BHsSAAAABM"]
[Thu Jul 30 15:26:36.813791 2026] [security2:error] [pid 3658222:tid 3658222] [client 34.23.170.140:35794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHHQ9_KRaLWju4BHsSAAAABM"]
[Thu Jul 30 15:26:37.064154 2026] [security2:error] [pid 3667217:tid 3667217] [client 34.23.170.140:35816] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtfHapdkkkX4uthMVXbMAAAADs"]
[Thu Jul 30 15:26:37.064328 2026] [security2:error] [pid 3667217:tid 3667217] [client 34.23.170.140:35816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtfHapdkkkX4uthMVXbMAAAADs"]
[Thu Jul 30 15:26:37.064544 2026] [security2:error] [pid 3667217:tid 3667217] [client 34.23.170.140:35816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHapdkkkX4uthMVXbMAAAADs"]
[Thu Jul 30 15:26:37.351857 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35868] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtfHQJrTdV31ycgPhQrtwAAAAk"]
[Thu Jul 30 15:26:37.352019 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtfHQJrTdV31ycgPhQrtwAAAAk"]
[Thu Jul 30 15:26:37.352239 2026] [security2:error] [pid 3659281:tid 3659281] [client 34.23.170.140:35868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHQJrTdV31ycgPhQrtwAAAAk"]
[Thu Jul 30 15:26:37.361571 2026] [security2:error] [pid 3656786:tid 3656786] [client 34.23.170.140:35870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtfHfHxtfrksg9OYgGMmAAAACY"]
[Thu Jul 30 15:26:37.361715 2026] [security2:error] [pid 3656786:tid 3656786] [client 34.23.170.140:35870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtfHfHxtfrksg9OYgGMmAAAACY"]
[Thu Jul 30 15:26:37.361919 2026] [security2:error] [pid 3656786:tid 3656786] [client 34.23.170.140:35870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHfHxtfrksg9OYgGMmAAAACY"]
[Thu Jul 30 15:26:37.399031 2026] [security2:error] [pid 3667217:tid 3667217] [client 34.23.170.140:35882] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtfHapdkkkX4uthMVXbMQAAADs"]
[Thu Jul 30 15:26:37.399220 2026] [security2:error] [pid 3667217:tid 3667217] [client 34.23.170.140:35882] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtfHapdkkkX4uthMVXbMQAAADs"]
[Thu Jul 30 15:26:37.399418 2026] [security2:error] [pid 3667217:tid 3667217] [client 34.23.170.140:35882] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHapdkkkX4uthMVXbMQAAADs"]
[Thu Jul 30 15:26:37.409189 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:35888] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtfHdxQIcJoroun4ecL0gAAAA0"]
[Thu Jul 30 15:26:37.409342 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:35888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtfHdxQIcJoroun4ecL0gAAAA0"]
[Thu Jul 30 15:26:37.409537 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:35888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHdxQIcJoroun4ecL0gAAAA0"]
[Thu Jul 30 15:26:37.648842 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:35908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtfHWLKQ7FuMwwZ842m_AAAACU"]
[Thu Jul 30 15:26:37.648993 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:35908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtfHWLKQ7FuMwwZ842m_AAAACU"]
[Thu Jul 30 15:26:37.649194 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:35908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHWLKQ7FuMwwZ842m_AAAACU"]
[Thu Jul 30 15:26:37.992761 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:35976] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtfHWLKQ7FuMwwZ842m_QAAACU"]
[Thu Jul 30 15:26:37.992902 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:35976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtfHWLKQ7FuMwwZ842m_QAAACU"]
[Thu Jul 30 15:26:37.993101 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:35976] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHWLKQ7FuMwwZ842m_QAAACU"]
[Thu Jul 30 15:26:38.016992 2026] [access_compat:error] [pid 3659281:tid 3659281] [client 136.158.25.236:42844] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:38.297847 2026] [security2:error] [pid 3667213:tid 3667213] [client 34.23.170.140:36016] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtfHvopWdaUyrKW_SfUaAAAADU"]
[Thu Jul 30 15:26:38.298009 2026] [security2:error] [pid 3667213:tid 3667213] [client 34.23.170.140:36016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtfHvopWdaUyrKW_SfUaAAAADU"]
[Thu Jul 30 15:26:38.298203 2026] [security2:error] [pid 3667213:tid 3667213] [client 34.23.170.140:36016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHvopWdaUyrKW_SfUaAAAADU"]
[Thu Jul 30 15:26:38.583283 2026] [security2:error] [pid 3664930:tid 3664930] [client 52.238.199.152:46867] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "islay.me"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfHmwxX38ESp5jGNP5kgAAAAE"]
[Thu Jul 30 15:26:38.583477 2026] [security2:error] [pid 3664930:tid 3664930] [client 52.238.199.152:46867] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "islay.me"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfHmwxX38ESp5jGNP5kgAAAAE"]
[Thu Jul 30 15:26:38.583708 2026] [security2:error] [pid 3664930:tid 3664930] [client 52.238.199.152:46867] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "islay.me"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfHmwxX38ESp5jGNP5kgAAAAE"]
[Thu Jul 30 15:26:38.840637 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:36116] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtfHmLKQ7FuMwwZ842nAAAAACU"]
[Thu Jul 30 15:26:38.840776 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:36116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtfHmLKQ7FuMwwZ842nAAAAACU"]
[Thu Jul 30 15:26:38.840956 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:36116] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHmLKQ7FuMwwZ842nAAAAACU"]
[Thu Jul 30 15:26:38.895678 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtfHq7mED7o0-nVdXleSgAAABI"]
[Thu Jul 30 15:26:38.895808 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtfHq7mED7o0-nVdXleSgAAABI"]
[Thu Jul 30 15:26:38.895987 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHq7mED7o0-nVdXleSgAAABI"]
[Thu Jul 30 15:26:39.021994 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:36154] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtfH62V4Ri4ugpwMRhdXAAAABw"]
[Thu Jul 30 15:26:39.022190 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:36154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtfH62V4Ri4ugpwMRhdXAAAABw"]
[Thu Jul 30 15:26:39.022392 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:36154] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH62V4Ri4ugpwMRhdXAAAABw"]
[Thu Jul 30 15:26:39.112402 2026] [security2:error] [pid 3656786:tid 3656786] [client 34.23.170.140:36158] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtfH_Hxtfrksg9OYgGMmwAAACY"]
[Thu Jul 30 15:26:39.112592 2026] [security2:error] [pid 3656786:tid 3656786] [client 34.23.170.140:36158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtfH_Hxtfrksg9OYgGMmwAAACY"]
[Thu Jul 30 15:26:39.112782 2026] [security2:error] [pid 3656786:tid 3656786] [client 34.23.170.140:36158] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH_Hxtfrksg9OYgGMmwAAACY"]
[Thu Jul 30 15:26:39.113180 2026] [ssl:error] [pid 3660312:tid 3660312] (EAI 2)Name or service not known: [client 144.76.19.72:60254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:39.113204 2026] [ssl:error] [pid 3660312:tid 3660312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:39.166601 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:36174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtfH2LKQ7FuMwwZ842nAQAAACU"]
[Thu Jul 30 15:26:39.166840 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:36174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtfH2LKQ7FuMwwZ842nAQAAACU"]
[Thu Jul 30 15:26:39.167027 2026] [security2:error] [pid 3666120:tid 3666120] [client 34.23.170.140:36174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH2LKQ7FuMwwZ842nAQAAACU"]
[Thu Jul 30 15:26:39.168913 2026] [ssl:error] [pid 3669490:tid 3669490] (EAI 2)Name or service not known: [client 144.76.19.72:60262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:39.168939 2026] [ssl:error] [pid 3669490:tid 3669490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:39.192473 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:36176] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtfH9xQIcJoroun4ecL1QAAAA0"]
[Thu Jul 30 15:26:39.192599 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:36176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtfH9xQIcJoroun4ecL1QAAAA0"]
[Thu Jul 30 15:26:39.192797 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:36176] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH9xQIcJoroun4ecL1QAAAA0"]
[Thu Jul 30 15:26:39.200669 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36192] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtfH67mED7o0-nVdXleSwAAABI"]
[Thu Jul 30 15:26:39.200793 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtfH67mED7o0-nVdXleSwAAABI"]
[Thu Jul 30 15:26:39.201133 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH67mED7o0-nVdXleSwAAABI"]
[Thu Jul 30 15:26:39.396750 2026] [security2:error] [pid 3669490:tid 3669490] [client 34.23.170.140:36218] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtfHzGjrybwJrwHI3ZPMAAAACw"]
[Thu Jul 30 15:26:39.396941 2026] [security2:error] [pid 3669490:tid 3669490] [client 34.23.170.140:36218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtfHzGjrybwJrwHI3ZPMAAAACw"]
[Thu Jul 30 15:26:39.397166 2026] [security2:error] [pid 3669490:tid 3669490] [client 34.23.170.140:36218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHzGjrybwJrwHI3ZPMAAAACw"]
[Thu Jul 30 15:26:39.450440 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:36230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtfHwPOAGNsyQ_42zZMqQAAABk"]
[Thu Jul 30 15:26:39.450578 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:36230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtfHwPOAGNsyQ_42zZMqQAAABk"]
[Thu Jul 30 15:26:39.450758 2026] [security2:error] [pid 3663669:tid 3663669] [client 34.23.170.140:36230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHwPOAGNsyQ_42zZMqQAAABk"]
[Thu Jul 30 15:26:39.496000 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:36242] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtfH9xQIcJoroun4ecL1gAAAA0"]
[Thu Jul 30 15:26:39.496151 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:36242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtfH9xQIcJoroun4ecL1gAAAA0"]
[Thu Jul 30 15:26:39.496367 2026] [security2:error] [pid 3670077:tid 3670077] [client 34.23.170.140:36242] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH9xQIcJoroun4ecL1gAAAA0"]
[Thu Jul 30 15:26:39.513616 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36256] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtfH67mED7o0-nVdXleTAAAABI"]
[Thu Jul 30 15:26:39.513756 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtfH67mED7o0-nVdXleTAAAABI"]
[Thu Jul 30 15:26:39.513938 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:36256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH67mED7o0-nVdXleTAAAABI"]
[Thu Jul 30 15:26:39.751981 2026] [security2:error] [pid 3662117:tid 3662117] [client 34.23.170.140:36290] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtfHw3C4mueXBSPH1nncgAAAAo"]
[Thu Jul 30 15:26:39.752265 2026] [security2:error] [pid 3662117:tid 3662117] [client 34.23.170.140:36290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtfHw3C4mueXBSPH1nncgAAAAo"]
[Thu Jul 30 15:26:39.752493 2026] [security2:error] [pid 3662117:tid 3662117] [client 34.23.170.140:36290] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfHw3C4mueXBSPH1nncgAAAAo"]
[Thu Jul 30 15:26:39.752890 2026] [security2:error] [pid 3660312:tid 3660312] [client 34.23.170.140:36282] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtfH5t--9LHTjlq5gTdagAAACo"]
[Thu Jul 30 15:26:39.753196 2026] [security2:error] [pid 3660312:tid 3660312] [client 34.23.170.140:36282] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtfH5t--9LHTjlq5gTdagAAACo"]
[Thu Jul 30 15:26:39.753419 2026] [security2:error] [pid 3660312:tid 3660312] [client 34.23.170.140:36282] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH5t--9LHTjlq5gTdagAAACo"]
[Thu Jul 30 15:26:39.919768 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:36320] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtfH62V4Ri4ugpwMRhdXgAAABw"]
[Thu Jul 30 15:26:39.920044 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:36320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtfH62V4Ri4ugpwMRhdXgAAABw"]
[Thu Jul 30 15:26:39.920250 2026] [security2:error] [pid 3660232:tid 3660232] [client 34.23.170.140:36320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfH62V4Ri4ugpwMRhdXgAAABw"]
[Thu Jul 30 15:26:40.005695 2026] [security2:error] [pid 3670176:tid 3670176] [client 43.165.198.144:51800] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtfIB9Qd9b7i1fxWGOeDwAAABg"]
[Thu Jul 30 15:26:40.061544 2026] [security2:error] [pid 3662117:tid 3662117] [client 34.23.170.140:36358] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtfIA3C4mueXBSPH1nncwAAAAo"]
[Thu Jul 30 15:26:40.061835 2026] [security2:error] [pid 3662117:tid 3662117] [client 34.23.170.140:36358] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtfIA3C4mueXBSPH1nncwAAAAo"]
[Thu Jul 30 15:26:40.062017 2026] [security2:error] [pid 3662117:tid 3662117] [client 34.23.170.140:36358] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfIA3C4mueXBSPH1nncwAAAAo"]
[Thu Jul 30 15:26:40.898807 2026] [ssl:error] [pid 3667212:tid 3667212] (70014)End of file found: [client 216.73.216.199:40891] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:41.131961 2026] [ssl:error] [pid 3667213:tid 3667213] [client 66.132.172.138:54488] AH02032: Hostname sirahdigital.com (default host as no SNI was provided) and hostname mail.jonathanhill.co.uk provided via HTTP have no compatible SSL setup for policy 'secure'
[Thu Jul 30 15:26:41.411555 2026] [ssl:error] [pid 3667214:tid 3667214] (70014)End of file found: [client 216.73.216.199:31382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:41.707643 2026] [ssl:error] [pid 3667210:tid 3667210] (70014)End of file found: [client 216.73.216.199:58668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:42.176322 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:33642] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtfIq7mED7o0-nVdXleUwAAABI"]
[Thu Jul 30 15:26:42.176513 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:33642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtfIq7mED7o0-nVdXleUwAAABI"]
[Thu Jul 30 15:26:42.176727 2026] [security2:error] [pid 3668677:tid 3668677] [client 34.23.170.140:33642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dashboard.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtfIq7mED7o0-nVdXleUwAAABI"]
[Thu Jul 30 15:26:42.223932 2026] [ssl:error] [pid 3660312:tid 3660312] (EAI 2)Name or service not known: [client 144.76.19.72:52480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:42.223957 2026] [ssl:error] [pid 3660312:tid 3660312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:42.279544 2026] [ssl:error] [pid 3667044:tid 3667044] (EAI 2)Name or service not known: [client 144.76.19.72:52490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:42.279572 2026] [ssl:error] [pid 3667044:tid 3667044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:43.041955 2026] [access_compat:error] [pid 3662117:tid 3662117] [client 112.209.180.50:13490] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:43.411138 2026] [security2:error] [pid 3656786:tid 3656786] [client 43.165.198.144:57832] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtfI_Hxtfrksg9OYgGMowAAACY"], referer: http://www.retrodisco.co.uk
[Thu Jul 30 15:26:43.965953 2026] [security2:error] [pid 3644505:tid 3644505] [client 43.165.67.31:59570] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amtfI_eDc4ICzEYYn7NUzwAAADY"]
[Thu Jul 30 15:26:44.845289 2026] [lsapi:warn] [pid 3667134:tid 3667134] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:26:45.331280 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:52502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:45.331318 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:45.383237 2026] [ssl:error] [pid 3669401:tid 3669401] (EAI 2)Name or service not known: [client 144.76.19.72:52518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:45.383268 2026] [ssl:error] [pid 3669401:tid 3669401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:46.643015 2026] [ssl:error] [pid 3665001:tid 3665001] (70014)End of file found: [client 216.73.216.199:11156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:47.153005 2026] [ssl:error] [pid 3667213:tid 3667213] (70014)End of file found: [client 216.73.216.199:8527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:47.172344 2026] [security2:error] [pid 3669836:tid 3669836] [client 85.208.96.195:12444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7194.90.html"] [unique_id "amtfJ0cwngOpohH--mZCiQAAADo"]
[Thu Jul 30 15:26:48.438486 2026] [ssl:error] [pid 3660492:tid 3660492] (EAI 2)Name or service not known: [client 144.76.19.72:52528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:48.438522 2026] [ssl:error] [pid 3660492:tid 3660492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:48.491228 2026] [ssl:error] [pid 3667210:tid 3667210] (EAI 2)Name or service not known: [client 144.76.19.72:52542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:48.491259 2026] [ssl:error] [pid 3667210:tid 3667210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:48.755130 2026] [core:crit] [pid 3669636:tid 3669636] (13)Permission denied: [client 216.73.216.199:63261] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/run/log/journal/94ec86214b6d4f709d03069668011c21/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/run/log/journal/94ec86214b6d4f709d03069668011c21/' is executable
[Thu Jul 30 15:26:49.649617 2026] [access_compat:error] [pid 3667133:tid 3667133] [client 136.158.25.236:43948] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:50.267419 2026] [core:error] [pid 3669636:tid 3669636] (13)Permission denied: [client 216.73.216.199:63261] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/console/subsystem/ttyS2/line
[Thu Jul 30 15:26:50.568624 2026] [core:error] [pid 3669636:tid 3669636] (13)Permission denied: [client 216.73.216.199:63261] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:0c/subsystem/drivers_probe
[Thu Jul 30 15:26:51.547597 2026] [ssl:error] [pid 3660358:tid 3660358] (EAI 2)Name or service not known: [client 144.76.19.72:62918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:51.547621 2026] [ssl:error] [pid 3660358:tid 3660358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:51.645784 2026] [ssl:error] [pid 3665650:tid 3665650] (EAI 2)Name or service not known: [client 144.76.19.72:62932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:51.645809 2026] [ssl:error] [pid 3665650:tid 3665650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:52.691483 2026] [ssl:error] [pid 3669636:tid 3669636] (70014)End of file found: [client 216.73.216.199:63261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:52.710723 2026] [access_compat:error] [pid 3667134:tid 3667134] [client 136.158.25.236:44251] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:54.703415 2026] [ssl:error] [pid 3660313:tid 3660313] (EAI 2)Name or service not known: [client 144.76.19.72:62948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:54.703439 2026] [ssl:error] [pid 3660313:tid 3660313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:54.755971 2026] [ssl:error] [pid 3667213:tid 3667213] (EAI 2)Name or service not known: [client 144.76.19.72:62958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:54.755996 2026] [ssl:error] [pid 3667213:tid 3667213] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:55.394236 2026] [authz_core:error] [pid 3670176:tid 3670176] [client 66.249.66.33:46073] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:26:55.396983 2026] [authz_core:error] [pid 3670176:tid 3670176] [client 66.249.66.33:46073] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:26:57.284549 2026] [security2:error] [pid 3667210:tid 3667210] [client 162.14.81.106:46340] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "amtfMaPmk3gHvRiKyIKrPQAAADA"]
[Thu Jul 30 15:26:57.809281 2026] [ssl:error] [pid 3667210:tid 3667210] (EAI 2)Name or service not known: [client 144.76.19.72:62972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:57.809312 2026] [ssl:error] [pid 3667210:tid 3667210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:57.866747 2026] [ssl:error] [pid 3660364:tid 3660364] (EAI 2)Name or service not known: [client 144.76.19.72:62980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:26:57.866781 2026] [ssl:error] [pid 3660364:tid 3660364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:26:59.283202 2026] [access_compat:error] [pid 3669489:tid 3669489] [client 112.209.180.50:14156] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:26:59.588912 2026] [authz_core:error] [pid 3667133:tid 3667133] [client 66.249.66.33:42016] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:26:59.591584 2026] [authz_core:error] [pid 3667133:tid 3667133] [client 66.249.66.33:42016] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:26:59.620163 2026] [ssl:error] [pid 3669441:tid 3669441] (70014)End of file found: [client 216.73.216.199:27247] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:26:59.689752 2026] [security2:error] [pid 3660364:tid 3660364] [client 162.14.81.106:47256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "amtfMyTGJ5PYptOAaYl_-gAAAEM"], referer: http://www.pamporovoexpress.com
[Thu Jul 30 15:27:00.141494 2026] [core:error] [pid 3669686:tid 3669686] [client 66.249.66.8:60673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:27:00.141519 2026] [core:error] [pid 3669686:tid 3669686] [client 66.249.66.8:60673] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:27:00.533173 2026] [ssl:error] [pid 3665650:tid 3665650] (70014)End of file found: [client 216.73.216.199:8230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:00.922113 2026] [ssl:error] [pid 3669636:tid 3669636] (EAI 2)Name or service not known: [client 144.76.19.72:29060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:00.922143 2026] [ssl:error] [pid 3669636:tid 3669636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:00.978490 2026] [ssl:error] [pid 3669836:tid 3669836] (EAI 2)Name or service not known: [client 144.76.19.72:29068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:00.978522 2026] [ssl:error] [pid 3669836:tid 3669836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:01.034579 2026] [core:error] [pid 3667210:tid 3667210] (13)Permission denied: [client 216.73.216.199:20998] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/ericashmore.org.db
[Thu Jul 30 15:27:01.335677 2026] [lsapi:warn] [pid 3670290:tid 3670290] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:27:03.365596 2026] [access_compat:error] [pid 3641972:tid 3641972] [client 136.158.25.236:45289] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:03.479962 2026] [security2:error] [pid 3669836:tid 3669836] [client 102.103.239.214:60960] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfN0cwngOpohH--mZCmAAAADo"]
[Thu Jul 30 15:27:03.480025 2026] [security2:error] [pid 3669836:tid 3669836] [client 102.103.239.214:60960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfN0cwngOpohH--mZCmAAAADo"]
[Thu Jul 30 15:27:03.480270 2026] [security2:error] [pid 3669836:tid 3669836] [client 102.103.239.214:60960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfN0cwngOpohH--mZCmAAAADo"]
[Thu Jul 30 15:27:03.822567 2026] [access_compat:error] [pid 3658275:tid 3658275] [client 45.158.164.139:60486] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:27:04.016941 2026] [access_compat:error] [pid 3668677:tid 3668677] [client 45.158.164.139:60498] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:27:04.030881 2026] [ssl:error] [pid 3660358:tid 3660358] (EAI 2)Name or service not known: [client 144.76.19.72:29078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:04.030907 2026] [ssl:error] [pid 3660358:tid 3660358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:04.084843 2026] [ssl:error] [pid 3666042:tid 3666042] (EAI 2)Name or service not known: [client 144.76.19.72:29092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:04.084873 2026] [ssl:error] [pid 3666042:tid 3666042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:04.222675 2026] [security2:error] [pid 3667134:tid 3667134] [client 20.63.98.115:42797] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "theovertones.co.uk"] [uri "/wp-config.php"] [unique_id "amtfOHRmeRw4DLLkPovMuQAAAC0"]
[Thu Jul 30 15:27:04.223100 2026] [security2:error] [pid 3667134:tid 3667134] [client 20.63.98.115:42797] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "theovertones.co.uk"] [uri "/wp-config.php"] [unique_id "amtfOHRmeRw4DLLkPovMuQAAAC0"]
[Thu Jul 30 15:27:04.223536 2026] [security2:error] [pid 3667134:tid 3667134] [client 20.63.98.115:42797] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "theovertones.co.uk"] [uri "/wp-config.php"] [unique_id "amtfOHRmeRw4DLLkPovMuQAAAC0"]
[Thu Jul 30 15:27:04.450170 2026] [security2:error] [pid 3667210:tid 3667210] [client 216.73.216.199:20998] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-skeleton/lib/tmpfiles.d/rpcbind.conf"] [unique_id "amtfOKPmk3gHvRiKyIKrSgAAADA"]
[Thu Jul 30 15:27:04.450510 2026] [security2:error] [pid 3667210:tid 3667210] [client 216.73.216.199:20998] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-skeleton/lib/tmpfiles.d/rpcbind.conf"] [unique_id "amtfOKPmk3gHvRiKyIKrSgAAADA"]
[Thu Jul 30 15:27:04.450756 2026] [security2:error] [pid 3667210:tid 3667210] [client 216.73.216.199:20998] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-skeleton/lib/tmpfiles.d/rpcbind.conf"] [unique_id "amtfOKPmk3gHvRiKyIKrSgAAADA"]
[Thu Jul 30 15:27:06.050552 2026] [security2:error] [pid 3669490:tid 3669490] [client 189.219.98.180:59668] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfOjGjrybwJrwHI3ZPOwAAACw"]
[Thu Jul 30 15:27:06.050610 2026] [security2:error] [pid 3669490:tid 3669490] [client 189.219.98.180:59668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfOjGjrybwJrwHI3ZPOwAAACw"]
[Thu Jul 30 15:27:06.050850 2026] [security2:error] [pid 3669490:tid 3669490] [client 189.219.98.180:59668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfOjGjrybwJrwHI3ZPOwAAACw"]
[Thu Jul 30 15:27:07.027675 2026] [ssl:error] [pid 3667210:tid 3667210] (70014)End of file found: [client 216.73.216.199:20998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:07.141034 2026] [ssl:error] [pid 3660358:tid 3660358] (EAI 2)Name or service not known: [client 144.76.19.72:29096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:07.141081 2026] [ssl:error] [pid 3660358:tid 3660358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:07.198685 2026] [ssl:error] [pid 3669486:tid 3669486] (EAI 2)Name or service not known: [client 144.76.19.72:29102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:07.198725 2026] [ssl:error] [pid 3669486:tid 3669486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:07.628359 2026] [ssl:error] [pid 3666042:tid 3666042] (70014)End of file found: [client 216.73.216.199:53625] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:10.051118 2026] [security2:error] [pid 3658222:tid 3658222] [client 45.175.113.167:50987] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfPnQ9_KRaLWju4BHsVgAAABM"]
[Thu Jul 30 15:27:10.051164 2026] [security2:error] [pid 3658222:tid 3658222] [client 45.175.113.167:50987] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfPnQ9_KRaLWju4BHsVgAAABM"]
[Thu Jul 30 15:27:10.051392 2026] [security2:error] [pid 3658222:tid 3658222] [client 45.175.113.167:50987] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfPnQ9_KRaLWju4BHsVgAAABM"]
[Thu Jul 30 15:27:10.253895 2026] [ssl:error] [pid 3669486:tid 3669486] (EAI 2)Name or service not known: [client 144.76.19.72:54916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:10.253922 2026] [ssl:error] [pid 3669486:tid 3669486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:10.301918 2026] [access_compat:error] [pid 3670231:tid 3670231] [client 112.209.180.50:14616] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:10.309791 2026] [ssl:error] [pid 3659281:tid 3659281] (EAI 2)Name or service not known: [client 144.76.19.72:54932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:10.309813 2026] [ssl:error] [pid 3659281:tid 3659281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:10.747797 2026] [security2:error] [pid 3665810:tid 3665810] [client 114.119.144.31:50821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/prime-timers/"] [unique_id "amtfPuptjoOfHozLJVrIhAAAACE"], referer: http://www.erskinenazarene.co.uk/event/prime-timers/?instance_id=34935
[Thu Jul 30 15:27:10.942280 2026] [security2:error] [pid 3669636:tid 3669636] [client 185.191.171.15:51598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amtfPksMkOjrXORrhBKZNAAAAC8"]
[Thu Jul 30 15:27:12.325678 2026] [security2:error] [pid 3667133:tid 3667133] [client 114.119.144.31:47703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/prime-timers/"] [unique_id "amtfQHv6KNynuNyWyE8CSgAAACg"], referer: http://www.erskinenazarene.co.uk/event/prime-timers/?instance_id=34935
[Thu Jul 30 15:27:12.572825 2026] [security2:error] [pid 3663531:tid 3663531] [client 157.230.19.140:51272] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.env"] [unique_id "amtfQPA1895tNnqF-jvUFAAAABE"]
[Thu Jul 30 15:27:12.573010 2026] [security2:error] [pid 3663531:tid 3663531] [client 157.230.19.140:51272] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.env"] [unique_id "amtfQPA1895tNnqF-jvUFAAAABE"]
[Thu Jul 30 15:27:12.725521 2026] [security2:error] [pid 3663531:tid 3663531] [client 157.230.19.140:51272] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amtfQPA1895tNnqF-jvUFAAAABE"]
[Thu Jul 30 15:27:13.383165 2026] [ssl:error] [pid 3666042:tid 3666042] (EAI 2)Name or service not known: [client 144.76.19.72:54938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:13.383206 2026] [ssl:error] [pid 3666042:tid 3666042] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:13.436106 2026] [ssl:error] [pid 3665650:tid 3665650] (EAI 2)Name or service not known: [client 144.76.19.72:54948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:13.436142 2026] [ssl:error] [pid 3665650:tid 3665650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:14.123453 2026] [access_compat:error] [pid 3663390:tid 3663390] [client 112.209.180.50:14788] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:14.608223 2026] [core:error] [pid 3660312:tid 3660312] (13)Permission denied: [client 216.73.216.199:57653] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS3/uartclk
[Thu Jul 30 15:27:16.415604 2026] [core:error] [pid 3660312:tid 3660312] (13)Permission denied: [client 216.73.216.199:57653] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty52/subsystem/ttyS0/uartclk
[Thu Jul 30 15:27:16.492642 2026] [ssl:error] [pid 3669836:tid 3669836] (EAI 2)Name or service not known: [client 144.76.19.72:54956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:16.492671 2026] [ssl:error] [pid 3669836:tid 3669836] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:16.546018 2026] [ssl:error] [pid 3663531:tid 3663531] (EAI 2)Name or service not known: [client 144.76.19.72:54970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:16.546052 2026] [ssl:error] [pid 3663531:tid 3663531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:17.471468 2026] [security2:error] [pid 3670291:tid 3670291] [client 157.230.19.140:51298] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mcgarvey.co.uk"] [uri "/.git/config"] [unique_id "amtfRWfxAJ6-8XfFXw0YkwAAAD4"]
[Thu Jul 30 15:27:17.471657 2026] [security2:error] [pid 3670291:tid 3670291] [client 157.230.19.140:51298] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/.git/config"] [unique_id "amtfRWfxAJ6-8XfFXw0YkwAAAD4"]
[Thu Jul 30 15:27:17.612792 2026] [security2:error] [pid 3670291:tid 3670291] [client 157.230.19.140:51298] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amtfRWfxAJ6-8XfFXw0YkwAAAD4"]
[Thu Jul 30 15:27:17.844549 2026] [security2:error] [pid 3669836:tid 3669836] [client 85.208.96.211:33722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/places-to-rent-kewanee,-il"] [unique_id "amtfRUcwngOpohH--mZCnQAAADo"]
[Thu Jul 30 15:27:19.601489 2026] [ssl:error] [pid 3663390:tid 3663390] (EAI 2)Name or service not known: [client 144.76.19.72:36720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:19.601517 2026] [ssl:error] [pid 3663390:tid 3663390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:19.657499 2026] [ssl:error] [pid 3669486:tid 3669486] (EAI 2)Name or service not known: [client 144.76.19.72:36732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:19.657528 2026] [ssl:error] [pid 3669486:tid 3669486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:22.160568 2026] [security2:error] [pid 3663390:tid 3663390] [client 216.73.216.199:4563] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/selector.conf"] [unique_id "amtfSouwKZPt4rbxWQ29PAAAAA4"]
[Thu Jul 30 15:27:22.160826 2026] [security2:error] [pid 3663390:tid 3663390] [client 216.73.216.199:4563] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/selector.conf"] [unique_id "amtfSouwKZPt4rbxWQ29PAAAAA4"]
[Thu Jul 30 15:27:22.161019 2026] [security2:error] [pid 3663390:tid 3663390] [client 216.73.216.199:4563] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/selector.conf"] [unique_id "amtfSouwKZPt4rbxWQ29PAAAAA4"]
[Thu Jul 30 15:27:22.538193 2026] [lsapi:warn] [pid 3668677:tid 3668677] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:27:22.716880 2026] [ssl:error] [pid 3672638:tid 3672638] (EAI 2)Name or service not known: [client 144.76.19.72:36738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:22.716909 2026] [ssl:error] [pid 3672638:tid 3672638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:22.764389 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 15:27:22.771647 2026] [ssl:error] [pid 3672638:tid 3672638] (EAI 2)Name or service not known: [client 144.76.19.72:36740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:22.771666 2026] [ssl:error] [pid 3672638:tid 3672638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:22.786445 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 15:27:22.786486 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:22.814333 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/3PJcpMFsD8B.php
[Thu Jul 30 15:27:22.814376 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:22.836444 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/err.php
[Thu Jul 30 15:27:22.836491 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:22.882764 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/img.php
[Thu Jul 30 15:27:22.882809 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:22.904923 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aa.php
[Thu Jul 30 15:27:22.904963 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.021114 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/av.php
[Thu Jul 30 15:27:23.021161 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.058688 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xa.php
[Thu Jul 30 15:27:23.058739 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.064031 2026] [core:error] [pid 3663390:tid 3663390] (13)Permission denied: [client 216.73.216.199:4563] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty44/subsystem/ttyS0/uartclk
[Thu Jul 30 15:27:23.094900 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/media.php
[Thu Jul 30 15:27:23.094952 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.117272 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/images.php
[Thu Jul 30 15:27:23.117320 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.153943 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gecko.php
[Thu Jul 30 15:27:23.153993 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.176129 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/82.php
[Thu Jul 30 15:27:23.176174 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.198124 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xstelth.php
[Thu Jul 30 15:27:23.198169 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.232148 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xp.php
[Thu Jul 30 15:27:23.232196 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.254146 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin.php
[Thu Jul 30 15:27:23.254191 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.277097 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/adminner.php
[Thu Jul 30 15:27:23.277141 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.300414 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a.php
[Thu Jul 30 15:27:23.300457 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.322427 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/k.php
[Thu Jul 30 15:27:23.322473 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.356818 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/222.php
[Thu Jul 30 15:27:23.356875 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.364873 2026] [core:error] [pid 3663390:tid 3663390] (13)Permission denied: [client 216.73.216.199:4563] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty41/subsystem/ttyS1/uartclk
[Thu Jul 30 15:27:23.378526 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mac.php
[Thu Jul 30 15:27:23.378564 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.400605 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 15:27:23.422421 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 15:27:23.444255 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ops.php
[Thu Jul 30 15:27:23.444293 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.478064 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/8.php
[Thu Jul 30 15:27:23.478118 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.499932 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/FWAZ.php
[Thu Jul 30 15:27:23.499971 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.565051 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/biufile.php
[Thu Jul 30 15:27:23.565106 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.586906 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/coffexium.php
[Thu Jul 30 15:27:23.586950 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.622170 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/simple.php
[Thu Jul 30 15:27:23.622214 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.645912 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fpwch.php
[Thu Jul 30 15:27:23.645953 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.667887 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dex.php
[Thu Jul 30 15:27:23.667937 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.695002 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/1.php
[Thu Jul 30 15:27:23.695047 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.720403 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-admin
[Thu Jul 30 15:27:23.742317 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/config.json.php
[Thu Jul 30 15:27:23.742360 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.764429 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/k2.php
[Thu Jul 30 15:27:23.764474 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.797124 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/raw.php
[Thu Jul 30 15:27:23.797166 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.841990 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp.php
[Thu Jul 30 15:27:23.842033 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.868522 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fffm.php
[Thu Jul 30 15:27:23.868563 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.909573 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/111.php
[Thu Jul 30 15:27:23.909618 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.931834 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 15:27:23.957061 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws.php
[Thu Jul 30 15:27:23.957126 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:23.979008 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/coffee.php
[Thu Jul 30 15:27:23.979051 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.000785 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/goods.php
[Thu Jul 30 15:27:24.000828 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.023348 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about.php
[Thu Jul 30 15:27:24.023399 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.045366 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about.php
[Thu Jul 30 15:27:24.045416 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.067303 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin.php
[Thu Jul 30 15:27:24.067347 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.089390 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/inputs.php
[Thu Jul 30 15:27:24.089434 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.127237 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/inputs.php
[Thu Jul 30 15:27:24.127283 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.167149 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/adminfuns.php
[Thu Jul 30 15:27:24.167200 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.177674 2026] [lsapi:error] [pid 3663390:tid 3663390] [client 216.73.216.199:4563] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Uncaught Error: Call to undefined function get_lang() in /var/softaculous/chamilo/events.conf.php:25\nStack trace:\n#0 {main}\n  thrown in /var/softaculous/chamilo/events.conf.php on line 25\n
[Thu Jul 30 15:27:24.221519 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.php
[Thu Jul 30 15:27:24.221561 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.245047 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xxx.php
[Thu Jul 30 15:27:24.245103 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.279720 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/classwithtostring.php
[Thu Jul 30 15:27:24.279776 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.302490 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/234ff.php
[Thu Jul 30 15:27:24.302536 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.324320 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/133.php
[Thu Jul 30 15:27:24.324364 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.346293 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-ws68.php
[Thu Jul 30 15:27:24.346334 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.369511 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mgrr.php
[Thu Jul 30 15:27:24.369556 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.391489 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/55.php
[Thu Jul 30 15:27:24.391532 2026] [access_compat:error] [pid 3672637:tid 3672637] [client 4.185.41.66:15830] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:27:24.603855 2026] [access_compat:error] [pid 3665810:tid 3665810] [client 112.209.180.50:15280] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:25.826301 2026] [ssl:error] [pid 3669486:tid 3669486] (EAI 2)Name or service not known: [client 144.76.19.72:36744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:25.826329 2026] [ssl:error] [pid 3669486:tid 3669486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:25.881370 2026] [ssl:error] [pid 3672699:tid 3672699] (EAI 2)Name or service not known: [client 144.76.19.72:36758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:25.881411 2026] [ssl:error] [pid 3672699:tid 3672699] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:27.230587 2026] [lsapi:warn] [pid 3670290:tid 3670290] [client 45.158.164.139:38852] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:27:27.230629 2026] [lsapi:warn] [pid 3670290:tid 3670290] [client 45.158.164.139:38852] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:27:27.232730 2026] [lsapi:warn] [pid 3672895:tid 3672895] [client 89.197.16.98:60984] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:27:27.232762 2026] [lsapi:warn] [pid 3672895:tid 3672895] [client 89.197.16.98:60984] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:27:28.944757 2026] [ssl:error] [pid 3673009:tid 3673009] (EAI 2)Name or service not known: [client 144.76.19.72:36760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:28.944799 2026] [ssl:error] [pid 3673009:tid 3673009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:28.998450 2026] [ssl:error] [pid 3660366:tid 3660366] (EAI 2)Name or service not known: [client 144.76.19.72:36768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:28.998473 2026] [ssl:error] [pid 3660366:tid 3660366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:29.691253 2026] [ssl:error] [pid 3660312:tid 3660312] (70014)End of file found: [client 216.73.216.199:57653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:29.997632 2026] [autoindex:error] [pid 3667134:tid 3667134] (13)Permission denied: [client 216.73.216.199:59876] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/home/firework/
[Thu Jul 30 15:27:30.880612 2026] [access_compat:error] [pid 3673009:tid 3673009] [client 136.158.25.236:47923] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:31.627808 2026] [security2:error] [pid 3667133:tid 3667133] [client 157.230.19.140:42236] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "mcgarvey.co.uk"] [uri "/trace.axd"] [unique_id "amtfU3v6KNynuNyWyE8CUwAAACg"]
[Thu Jul 30 15:27:31.628023 2026] [security2:error] [pid 3667133:tid 3667133] [client 157.230.19.140:42236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mcgarvey.co.uk"] [uri "/trace.axd"] [unique_id "amtfU3v6KNynuNyWyE8CUwAAACg"]
[Thu Jul 30 15:27:31.769432 2026] [security2:error] [pid 3667133:tid 3667133] [client 157.230.19.140:42236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "mcgarvey.co.uk"] [uri "/index.php"] [unique_id "amtfU3v6KNynuNyWyE8CUwAAACg"]
[Thu Jul 30 15:27:32.055644 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:56054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:32.055674 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:32.108872 2026] [ssl:error] [pid 3660313:tid 3660313] (EAI 2)Name or service not known: [client 144.76.19.72:56060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:32.108900 2026] [ssl:error] [pid 3660313:tid 3660313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:33.005657 2026] [core:error] [pid 3673124:tid 3673124] (13)Permission denied: [client 216.73.216.199:42866] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/ata_generic/uevent
[Thu Jul 30 15:27:34.513436 2026] [ssl:error] [pid 3673124:tid 3673124] (70014)End of file found: [client 216.73.216.199:42866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:34.741758 2026] [access_compat:error] [pid 3673223:tid 3673223] [client 136.158.25.236:48293] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:35.123173 2026] [core:error] [pid 3667134:tid 3667134] (13)Permission denied: [client 216.73.216.199:59876] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_rui_item/alloc_calls
[Thu Jul 30 15:27:35.162573 2026] [ssl:error] [pid 3673220:tid 3673220] (EAI 2)Name or service not known: [client 144.76.19.72:56072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:35.162602 2026] [ssl:error] [pid 3673220:tid 3673220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:35.220514 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:56082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:35.220542 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:36.420607 2026] [ssl:error] [pid 3667134:tid 3667134] (70014)End of file found: [client 216.73.216.199:59876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:38.276510 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:56096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:38.276545 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:38.329264 2026] [ssl:error] [pid 3673220:tid 3673220] (EAI 2)Name or service not known: [client 144.76.19.72:56104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:38.329299 2026] [ssl:error] [pid 3673220:tid 3673220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:38.528337 2026] [core:error] [pid 3669401:tid 3669401] (13)Permission denied: [client 216.73.216.199:48946] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/RAWv6/aliases
[Thu Jul 30 15:27:39.130110 2026] [ssl:error] [pid 3669401:tid 3669401] (70014)End of file found: [client 216.73.216.199:48946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:40.329393 2026] [core:error] [pid 3672700:tid 3672700] (13)Permission denied: [client 216.73.216.199:45454] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_bui_item/cpu_slabs
[Thu Jul 30 15:27:40.377560 2026] [security2:error] [pid 3658222:tid 3658222] [client 20.63.98.115:55682] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "theovertones.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfXHQ9_KRaLWju4BHscwAAABM"]
[Thu Jul 30 15:27:40.377744 2026] [security2:error] [pid 3658222:tid 3658222] [client 20.63.98.115:55682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "theovertones.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfXHQ9_KRaLWju4BHscwAAABM"]
[Thu Jul 30 15:27:40.377983 2026] [security2:error] [pid 3658222:tid 3658222] [client 20.63.98.115:55682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "theovertones.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtfXHQ9_KRaLWju4BHscwAAABM"]
[Thu Jul 30 15:27:40.630642 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:45454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:41.001669 2026] [access_compat:error] [pid 3673222:tid 3673222] [client 136.158.25.236:48972] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:41.386201 2026] [ssl:error] [pid 3672638:tid 3672638] (EAI 2)Name or service not known: [client 144.76.19.72:22768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:41.386230 2026] [ssl:error] [pid 3672638:tid 3672638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:41.443964 2026] [ssl:error] [pid 3673221:tid 3673221] (EAI 2)Name or service not known: [client 144.76.19.72:22772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:41.444000 2026] [ssl:error] [pid 3673221:tid 3673221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:41.736303 2026] [ssl:error] [pid 3668677:tid 3668677] (70014)End of file found: [client 216.73.216.199:4286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:41.769512 2026] [authz_core:error] [pid 3672701:tid 3672701] [client 66.249.66.33:39941] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:27:41.772840 2026] [authz_core:error] [pid 3672701:tid 3672701] [client 66.249.66.33:39941] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:27:42.043733 2026] [autoindex:error] [pid 3673588:tid 3673588] [client 191.232.199.39:1513] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:27:42.514872 2026] [lsapi:warn] [pid 3673223:tid 3673223] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:27:44.443338 2026] [ssl:error] [pid 3663390:tid 3663390] (70014)End of file found: [client 216.73.216.199:27179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:44.501586 2026] [ssl:error] [pid 3665650:tid 3665650] (EAI 2)Name or service not known: [client 144.76.19.72:22786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:44.501614 2026] [ssl:error] [pid 3665650:tid 3665650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:44.557614 2026] [ssl:error] [pid 3667134:tid 3667134] (EAI 2)Name or service not known: [client 144.76.19.72:22802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:44.557647 2026] [ssl:error] [pid 3667134:tid 3667134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:45.249199 2026] [access_compat:error] [pid 3660358:tid 3660358] [client 112.209.180.50:16076] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:46.355089 2026] [ssl:error] [pid 3672699:tid 3672699] (70014)End of file found: [client 216.73.216.199:10724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:47.250212 2026] [cgi:error] [pid 3670290:tid 3670290] [client 20.151.221.234:11333] AH02812: stderr from /home/buttere/public_html/fswknowledge.store/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:27:47.612498 2026] [ssl:error] [pid 3672701:tid 3672701] (EAI 2)Name or service not known: [client 144.76.19.72:22814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:47.612530 2026] [ssl:error] [pid 3672701:tid 3672701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:47.669592 2026] [ssl:error] [pid 3658124:tid 3658124] (EAI 2)Name or service not known: [client 144.76.19.72:22818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:47.669618 2026] [ssl:error] [pid 3658124:tid 3658124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:48.165361 2026] [core:error] [pid 3660232:tid 3660232] (13)Permission denied: [client 216.73.216.199:11020] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS2/closing_wait
[Thu Jul 30 15:27:49.966448 2026] [security2:error] [pid 3660232:tid 3660232] [client 216.73.216.199:11020] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/lib64/cracklib_dict.pwd"] [unique_id "amtfZa2V4Ri4ugpwMRhdiwAAABw"]
[Thu Jul 30 15:27:49.966710 2026] [security2:error] [pid 3660232:tid 3660232] [client 216.73.216.199:11020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/lib64/cracklib_dict.pwd"] [unique_id "amtfZa2V4Ri4ugpwMRhdiwAAABw"]
[Thu Jul 30 15:27:49.966912 2026] [security2:error] [pid 3660232:tid 3660232] [client 216.73.216.199:11020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/lib64/cracklib_dict.pwd"] [unique_id "amtfZa2V4Ri4ugpwMRhdiwAAABw"]
[Thu Jul 30 15:27:50.764274 2026] [ssl:error] [pid 3670231:tid 3670231] (EAI 2)Name or service not known: [client 144.76.19.72:35456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:50.764325 2026] [ssl:error] [pid 3670231:tid 3670231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:50.821088 2026] [ssl:error] [pid 3660366:tid 3660366] (EAI 2)Name or service not known: [client 144.76.19.72:35464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:50.821117 2026] [ssl:error] [pid 3660366:tid 3660366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:51.173436 2026] [core:error] [pid 3660232:tid 3660232] (13)Permission denied: [client 216.73.216.199:11020] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty40/subsystem/ttyS0/uartclk
[Thu Jul 30 15:27:51.786910 2026] [security2:error] [pid 3667214:tid 3667214] [client 15.235.98.195:26454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.nigelmassey.com"] [uri "/robots.txt"] [unique_id "amtfZyz7Z2m-RXdkcWAZBAAAADc"]
[Thu Jul 30 15:27:53.581193 2026] [ssl:error] [pid 3660232:tid 3660232] (70014)End of file found: [client 216.73.216.199:11020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:53.877139 2026] [ssl:error] [pid 3669636:tid 3669636] (EAI 2)Name or service not known: [client 144.76.19.72:35468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:53.877173 2026] [ssl:error] [pid 3669636:tid 3669636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:53.934582 2026] [ssl:error] [pid 3664268:tid 3664268] (EAI 2)Name or service not known: [client 144.76.19.72:35476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:53.934614 2026] [ssl:error] [pid 3664268:tid 3664268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:55.334468 2026] [access_compat:error] [pid 3673223:tid 3673223] [client 136.158.25.236:50187] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:27:56.080914 2026] [core:error] [pid 3663531:tid 3663531] (13)Permission denied: [client 216.73.216.199:51727] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_rmap_item/cpu_slabs
[Thu Jul 30 15:27:56.991781 2026] [ssl:error] [pid 3667134:tid 3667134] (EAI 2)Name or service not known: [client 144.76.19.72:35484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:56.991808 2026] [ssl:error] [pid 3667134:tid 3667134] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:57.047002 2026] [ssl:error] [pid 3658124:tid 3658124] (EAI 2)Name or service not known: [client 144.76.19.72:35500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:27:57.047026 2026] [ssl:error] [pid 3658124:tid 3658124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:27:57.798285 2026] [ssl:error] [pid 3663531:tid 3663531] (70014)End of file found: [client 216.73.216.199:51727] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:58.093530 2026] [core:error] [pid 3672570:tid 3672570] (13)Permission denied: [client 216.73.216.199:42221] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-128/objs_per_slab
[Thu Jul 30 15:27:58.239360 2026] [autoindex:error] [pid 3673220:tid 3673220] [client 191.232.199.39:40596] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:27:58.394921 2026] [ssl:error] [pid 3672570:tid 3672570] (70014)End of file found: [client 216.73.216.199:42221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:27:58.879401 2026] [authz_core:error] [pid 3669486:tid 3669486] [client 216.73.216.199:56233] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:27:58.882038 2026] [authz_core:error] [pid 3669486:tid 3669486] [client 216.73.216.199:56233] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:27:59.991537 2026] [lsapi:warn] [pid 3670290:tid 3670290] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:28:00.103543 2026] [ssl:error] [pid 3672702:tid 3672702] (EAI 2)Name or service not known: [client 144.76.19.72:56416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:00.103578 2026] [ssl:error] [pid 3672702:tid 3672702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:00.156988 2026] [ssl:error] [pid 3674733:tid 3674733] (EAI 2)Name or service not known: [client 144.76.19.72:56428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:00.157025 2026] [ssl:error] [pid 3674733:tid 3674733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:00.910795 2026] [ssl:error] [pid 3660232:tid 3660232] (70014)End of file found: [client 216.73.216.199:6268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:01.084281 2026] [security2:error] [pid 3673177:tid 3673177] [client 5.39.1.252:17130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.nigelmassey.com"] [uri "/exhibitions.php"] [unique_id "amtfcWUIvCjwVbBFJm5O9gAAADU"]
[Thu Jul 30 15:28:01.601902 2026] [access_compat:error] [pid 3668677:tid 3668677] [client 136.158.25.236:50710] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:01.811375 2026] [ssl:error] [pid 3665810:tid 3665810] (70014)End of file found: [client 216.73.216.199:28824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:02.411360 2026] [ssl:error] [pid 3669489:tid 3669489] (70014)End of file found: [client 216.73.216.199:27696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:03.287788 2026] [ssl:error] [pid 3660312:tid 3660312] (EAI 2)Name or service not known: [client 144.76.19.72:56442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:03.287820 2026] [ssl:error] [pid 3660312:tid 3660312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:03.341150 2026] [ssl:error] [pid 3664930:tid 3664930] (EAI 2)Name or service not known: [client 144.76.19.72:56454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:03.341186 2026] [ssl:error] [pid 3664930:tid 3664930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:03.895026 2026] [security2:error] [pid 3672702:tid 3672702] [client 47.128.17.238:53312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/robots.txt"] [unique_id "amtfcyxLPtdS6Dj9GwKVEQAAACY"]
[Thu Jul 30 15:28:04.829404 2026] [authz_core:error] [pid 3669486:tid 3669486] [client 169.58.39.192:49428] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 15:28:05.346932 2026] [access_compat:error] [pid 3658124:tid 3658124] [client 45.158.164.139:48470] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:28:05.950605 2026] [access_compat:error] [pid 3673223:tid 3673223] [client 112.209.180.50:16849] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:06.404933 2026] [access_compat:error] [pid 3669486:tid 3669486] [client 45.158.164.139:48508] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:28:06.414742 2026] [ssl:error] [pid 3664930:tid 3664930] (EAI 2)Name or service not known: [client 144.76.19.72:56466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:06.414762 2026] [ssl:error] [pid 3664930:tid 3664930] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:06.467602 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:56478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:06.467627 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:06.631577 2026] [ssl:error] [pid 3673220:tid 3673220] (70014)End of file found: [client 216.73.216.199:51554] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:07.529896 2026] [core:error] [pid 3658124:tid 3658124] (13)Permission denied: [client 216.73.216.199:5183] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS0/close_delay
[Thu Jul 30 15:28:07.799023 2026] [authz_core:error] [pid 3667134:tid 3667134] [client 169.58.39.192:50980] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 15:28:08.132329 2026] [ssl:error] [pid 3658124:tid 3658124] (70014)End of file found: [client 216.73.216.199:5183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:09.340527 2026] [ssl:error] [pid 3670231:tid 3670231] (70014)End of file found: [client 216.73.216.199:50647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:09.519855 2026] [ssl:error] [pid 3669489:tid 3669489] (EAI 2)Name or service not known: [client 144.76.19.72:56488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:09.519894 2026] [ssl:error] [pid 3669489:tid 3669489] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:09.572161 2026] [ssl:error] [pid 3674041:tid 3674041] (EAI 2)Name or service not known: [client 144.76.19.72:20374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:09.572197 2026] [ssl:error] [pid 3674041:tid 3674041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:11.237163 2026] [authz_core:error] [pid 3672699:tid 3672699] [client 169.58.39.192:52803] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:28:11.902805 2026] [security2:error] [pid 3665810:tid 3665810] [client 162.14.81.106:54740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "amtfe-ptjoOfHozLJVrImgAAACE"]
[Thu Jul 30 15:28:11.947948 2026] [ssl:error] [pid 3673223:tid 3673223] (70014)End of file found: [client 216.73.216.199:49022] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:12.629483 2026] [ssl:error] [pid 3673220:tid 3673220] (EAI 2)Name or service not known: [client 144.76.19.72:20376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:12.629508 2026] [ssl:error] [pid 3673220:tid 3673220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:12.682452 2026] [ssl:error] [pid 3660366:tid 3660366] (EAI 2)Name or service not known: [client 144.76.19.72:20390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:12.682480 2026] [ssl:error] [pid 3660366:tid 3660366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:12.696749 2026] [autoindex:error] [pid 3673009:tid 3673009] [client 191.232.199.39:40195] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:28:13.329978 2026] [authz_core:error] [pid 3672701:tid 3672701] [client 169.58.39.192:53862] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:28:13.863301 2026] [ssl:error] [pid 3673177:tid 3673177] (70014)End of file found: [client 216.73.216.199:8661] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:14.653197 2026] [ssl:error] [pid 3670290:tid 3670290] (70014)End of file found: [client 216.73.216.199:12205] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:15.736771 2026] [ssl:error] [pid 3668677:tid 3668677] (EAI 2)Name or service not known: [client 144.76.19.72:20394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:15.736803 2026] [ssl:error] [pid 3668677:tid 3668677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:15.852669 2026] [ssl:error] [pid 3664268:tid 3664268] (EAI 2)Name or service not known: [client 144.76.19.72:20402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:15.852695 2026] [ssl:error] [pid 3664268:tid 3664268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:16.081779 2026] [autoindex:error] [pid 3658124:tid 3658124] [client 191.232.199.39:1518] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:28:16.245568 2026] [security2:error] [pid 3673222:tid 3673222] [client 162.14.81.106:58112] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtfgM64-az3ulnhvTKEYAAAAD8"], referer: http://www.all4s.co.uk
[Thu Jul 30 15:28:16.445800 2026] [lsapi:warn] [pid 3668677:tid 3668677] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:28:16.491235 2026] [access_compat:error] [pid 3673220:tid 3673220] [client 112.209.180.50:17297] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:16.773795 2026] [authz_core:error] [pid 3641918:tid 3641918] [client 169.58.39.192:55528] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 15:28:17.360062 2026] [ssl:error] [pid 3658124:tid 3658124] (70014)End of file found: [client 216.73.216.199:43978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:18.852499 2026] [security2:error] [pid 3660313:tid 3660313] [client 185.191.171.7:64972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/where-are-petrol-wheels-made"] [unique_id "amtfguNoub2jS98Wj5t5BAAAAC4"]
[Thu Jul 30 15:28:18.911158 2026] [ssl:error] [pid 3669486:tid 3669486] (EAI 2)Name or service not known: [client 144.76.19.72:20404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:18.911183 2026] [ssl:error] [pid 3669486:tid 3669486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:18.968099 2026] [ssl:error] [pid 3672570:tid 3672570] (EAI 2)Name or service not known: [client 144.76.19.72:20406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:18.968127 2026] [ssl:error] [pid 3672570:tid 3672570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:19.179127 2026] [ssl:error] [pid 3664969:tid 3664969] (70014)End of file found: [client 216.73.216.199:43262] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:19.598949 2026] [authz_core:error] [pid 3665650:tid 3665650] [client 169.58.39.192:57069] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 15:28:20.080505 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:35272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:22.023649 2026] [ssl:error] [pid 3663390:tid 3663390] (EAI 2)Name or service not known: [client 144.76.19.72:43096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:22.023681 2026] [ssl:error] [pid 3663390:tid 3663390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:22.075462 2026] [ssl:error] [pid 3673177:tid 3673177] (EAI 2)Name or service not known: [client 144.76.19.72:43098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:22.075500 2026] [ssl:error] [pid 3673177:tid 3673177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:22.779755 2026] [ssl:error] [pid 3673177:tid 3673177] (70014)End of file found: [client 216.73.216.199:49270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:22.981994 2026] [access_compat:error] [pid 3665650:tid 3665650] [client 112.209.180.50:13457] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:24.699815 2026] [ssl:error] [pid 3667214:tid 3667214] (70014)End of file found: [client 216.73.216.199:61627] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:25.146400 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:43104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:25.146453 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:25.204774 2026] [ssl:error] [pid 3676047:tid 3676047] (EAI 2)Name or service not known: [client 144.76.19.72:43110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:25.204819 2026] [ssl:error] [pid 3676047:tid 3676047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:26.202802 2026] [ssl:error] [pid 3673009:tid 3673009] (70014)End of file found: [client 216.73.216.199:49679] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:27.960133 2026] [access_compat:error] [pid 3672699:tid 3672699] [client 136.158.25.236:52838] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:28.418138 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:43116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:28.418166 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:28.474190 2026] [ssl:error] [pid 3673223:tid 3673223] (EAI 2)Name or service not known: [client 144.76.19.72:43132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:28.474228 2026] [ssl:error] [pid 3673223:tid 3673223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:28.920575 2026] [autoindex:error] [pid 3667133:tid 3667133] [client 191.232.199.39:40003] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:28:30.109261 2026] [cgi:error] [pid 3671167:tid 3671167] [client 20.104.22.47:63745] AH02812: stderr from /home/eznoyveg/public_html/nigelmassey.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:28:30.912339 2026] [ssl:error] [pid 3676047:tid 3676047] (70014)End of file found: [client 216.73.216.199:45169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:31.514573 2026] [ssl:error] [pid 3672701:tid 3672701] (70014)End of file found: [client 216.73.216.199:2890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:31.530476 2026] [ssl:error] [pid 3673009:tid 3673009] (EAI 2)Name or service not known: [client 144.76.19.72:18314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:31.530502 2026] [ssl:error] [pid 3673009:tid 3673009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:31.585101 2026] [ssl:error] [pid 3676262:tid 3676262] (EAI 2)Name or service not known: [client 144.76.19.72:18326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:31.585131 2026] [ssl:error] [pid 3676262:tid 3676262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:31.975470 2026] [security2:error] [pid 3664969:tid 3664969] [client 47.128.116.172:24686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wildduckdesigns.co.uk"] [uri "/"] [unique_id "amtfj8g1z7yb6QMEVjXKpwAAAAc"]
[Thu Jul 30 15:28:32.417324 2026] [ssl:error] [pid 3676048:tid 3676048] (70014)End of file found: [client 216.73.216.199:7360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:33.607748 2026] [lsapi:warn] [pid 3664969:tid 3664969] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:28:33.884454 2026] [autoindex:error] [pid 3641918:tid 3641918] [client 195.3.220.7:41146] AH01276: Cannot serve directory /home/nkxfsjcw/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:28:34.196474 2026] [security2:error] [pid 3660313:tid 3660313] [client 114.119.144.31:20441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~15,103,30/request_format~html"] [unique_id "amtfkuNoub2jS98Wj5t5CAAAAC4"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~15,103,30/request_format~html
[Thu Jul 30 15:28:34.294636 2026] [access_compat:error] [pid 3676004:tid 3676004] [client 136.158.25.236:53681] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:34.640001 2026] [ssl:error] [pid 3672700:tid 3672700] (EAI 2)Name or service not known: [client 144.76.19.72:18336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:34.640039 2026] [ssl:error] [pid 3672700:tid 3672700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:34.699642 2026] [ssl:error] [pid 3672700:tid 3672700] (EAI 2)Name or service not known: [client 144.76.19.72:18352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:34.699664 2026] [ssl:error] [pid 3672700:tid 3672700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:35.941414 2026] [security2:error] [pid 3641918:tid 3641918] [client 114.119.144.31:20447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~15,103,30/request_format~html"] [unique_id "amtfky40uWOiymCQfIy7xgAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~15,103,30/request_format~html
[Thu Jul 30 15:28:36.635682 2026] [ssl:error] [pid 3673177:tid 3673177] (70014)End of file found: [client 216.73.216.199:55549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:37.428475 2026] [access_compat:error] [pid 3664930:tid 3664930] [client 112.209.180.50:14042] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:37.534192 2026] [ssl:error] [pid 3676575:tid 3676575] (70014)End of file found: [client 216.73.216.199:8752] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:37.751205 2026] [ssl:error] [pid 3673220:tid 3673220] (EAI 2)Name or service not known: [client 144.76.19.72:18358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:37.751233 2026] [ssl:error] [pid 3673220:tid 3673220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:37.806679 2026] [ssl:error] [pid 3676261:tid 3676261] (EAI 2)Name or service not known: [client 144.76.19.72:18364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:37.806714 2026] [ssl:error] [pid 3676261:tid 3676261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:40.243861 2026] [ssl:error] [pid 3658124:tid 3658124] (70014)End of file found: [client 216.73.216.199:8137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:40.354917 2026] [security2:error] [pid 3667133:tid 3667133] [client 101.32.15.141:38054] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtfmHv6KNynuNyWyE8CZwAAACg"]
[Thu Jul 30 15:28:40.860706 2026] [ssl:error] [pid 3674530:tid 3674530] (EAI 2)Name or service not known: [client 144.76.19.72:35784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:40.860743 2026] [ssl:error] [pid 3674530:tid 3674530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:40.912950 2026] [ssl:error] [pid 3665650:tid 3665650] (EAI 2)Name or service not known: [client 144.76.19.72:35796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:40.912977 2026] [ssl:error] [pid 3665650:tid 3665650] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:42.952812 2026] [ssl:error] [pid 3668677:tid 3668677] (70014)End of file found: [client 216.73.216.199:25532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:43.061841 2026] [security2:error] [pid 3671167:tid 3671167] [client 170.106.113.159:34584] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unique-pr.co.uk"] [uri "/"] [unique_id "amtfmxOYqo1rUNfBLs8-JAAAAA0"]
[Thu Jul 30 15:28:43.459814 2026] [core:error] [pid 3664930:tid 3664930] (13)Permission denied: [client 216.73.216.199:16645] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/subsystem/drivers/button/bind
[Thu Jul 30 15:28:43.968672 2026] [ssl:error] [pid 3674041:tid 3674041] (EAI 2)Name or service not known: [client 144.76.19.72:35812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:43.968698 2026] [ssl:error] [pid 3674041:tid 3674041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:44.021930 2026] [ssl:error] [pid 3676261:tid 3676261] (EAI 2)Name or service not known: [client 144.76.19.72:35818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:44.021961 2026] [ssl:error] [pid 3676261:tid 3676261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:44.763848 2026] [ssl:error] [pid 3664930:tid 3664930] (70014)End of file found: [client 216.73.216.199:16645] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:46.268929 2026] [ssl:error] [pid 3676512:tid 3676512] (70014)End of file found: [client 216.73.216.199:45178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:47.076591 2026] [ssl:error] [pid 3667210:tid 3667210] (EAI 2)Name or service not known: [client 144.76.19.72:35822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:47.076621 2026] [ssl:error] [pid 3667210:tid 3667210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:47.129129 2026] [ssl:error] [pid 3672702:tid 3672702] (EAI 2)Name or service not known: [client 144.76.19.72:35838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:47.129173 2026] [ssl:error] [pid 3672702:tid 3672702] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:47.405413 2026] [security2:error] [pid 3641972:tid 3641972] [client 51.36.219.176:2885] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfnyUJw6Rp7Mh8T-iK4AAAABs"]
[Thu Jul 30 15:28:47.405467 2026] [security2:error] [pid 3641972:tid 3641972] [client 51.36.219.176:2885] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfnyUJw6Rp7Mh8T-iK4AAAABs"]
[Thu Jul 30 15:28:47.405731 2026] [security2:error] [pid 3641972:tid 3641972] [client 51.36.219.176:2885] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfnyUJw6Rp7Mh8T-iK4AAAABs"]
[Thu Jul 30 15:28:47.770661 2026] [access_compat:error] [pid 3673124:tid 3673124] [client 136.158.25.236:55083] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:48.974351 2026] [core:error] [pid 3670231:tid 3670231] (13)Permission denied: [client 216.73.216.199:15621] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/i8042/uevent
[Thu Jul 30 15:28:49.164813 2026] [authz_core:error] [pid 3667133:tid 3667133] [client 195.3.220.7:43484] AH01630: client denied by server configuration: /home/nkxfsjcw/public_html/wp-admin/includes/error_log
[Thu Jul 30 15:28:49.878490 2026] [ssl:error] [pid 3670231:tid 3670231] (70014)End of file found: [client 216.73.216.199:15621] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:50.181918 2026] [ssl:error] [pid 3660313:tid 3660313] (EAI 2)Name or service not known: [client 144.76.19.72:48888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:50.181948 2026] [ssl:error] [pid 3660313:tid 3660313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:50.236589 2026] [ssl:error] [pid 3673009:tid 3673009] (EAI 2)Name or service not known: [client 144.76.19.72:48898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:50.236620 2026] [ssl:error] [pid 3673009:tid 3673009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:51.044317 2026] [lsapi:warn] [pid 3660313:tid 3660313] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:28:52.150472 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:1551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:52.439217 2026] [ssl:error] [pid 3669486:tid 3669486] (70014)End of file found: [client 216.73.216.199:39577] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:53.294236 2026] [ssl:error] [pid 3674041:tid 3674041] (EAI 2)Name or service not known: [client 144.76.19.72:48900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:53.294262 2026] [ssl:error] [pid 3674041:tid 3674041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:53.349591 2026] [ssl:error] [pid 3660366:tid 3660366] (EAI 2)Name or service not known: [client 144.76.19.72:48916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:53.349615 2026] [ssl:error] [pid 3660366:tid 3660366] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:54.042934 2026] [access_compat:error] [pid 3667214:tid 3667214] [client 136.158.25.236:55704] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:54.059022 2026] [core:error] [pid 3660313:tid 3660313] (13)Permission denied: [client 216.73.216.199:8133] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/usb-serial/uevent
[Thu Jul 30 15:28:54.360263 2026] [ssl:error] [pid 3660313:tid 3660313] (70014)End of file found: [client 216.73.216.199:8133] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:54.461132 2026] [security2:error] [pid 3677356:tid 3677356] [client 38.137.160.113:42436] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfpmIMDExNHngwBp6RVAAAABI"]
[Thu Jul 30 15:28:54.461192 2026] [security2:error] [pid 3677356:tid 3677356] [client 38.137.160.113:42436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfpmIMDExNHngwBp6RVAAAABI"]
[Thu Jul 30 15:28:54.461508 2026] [security2:error] [pid 3677356:tid 3677356] [client 38.137.160.113:42436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfpmIMDExNHngwBp6RVAAAABI"]
[Thu Jul 30 15:28:56.406167 2026] [ssl:error] [pid 3676576:tid 3676576] (EAI 2)Name or service not known: [client 144.76.19.72:48932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:56.406215 2026] [ssl:error] [pid 3676576:tid 3676576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:56.459615 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:48936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:56.459646 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:57.551750 2026] [ssl:error] [pid 3676047:tid 3676047] (70014)End of file found: [client 216.73.216.199:1114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:58.236959 2026] [access_compat:error] [pid 3670290:tid 3670290] [client 136.158.25.236:56134] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:28:58.282981 2026] [security2:error] [pid 3672700:tid 3672700] [client 103.182.212.145:52782] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfqvXsgbsDTDkdXbDEbgAAAB0"]
[Thu Jul 30 15:28:58.283030 2026] [security2:error] [pid 3672700:tid 3672700] [client 103.182.212.145:52782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfqvXsgbsDTDkdXbDEbgAAAB0"]
[Thu Jul 30 15:28:58.283272 2026] [security2:error] [pid 3672700:tid 3672700] [client 103.182.212.145:52782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfqvXsgbsDTDkdXbDEbgAAAB0"]
[Thu Jul 30 15:28:58.570325 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:41287] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:28:59.417763 2026] [security2:error] [pid 3658124:tid 3658124] [client 1.13.158.23:37202] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-sun.com"] [uri "/"] [unique_id "amtfq5G-MbFXJXNuiooWpwAAAAA"]
[Thu Jul 30 15:28:59.532184 2026] [ssl:error] [pid 3676575:tid 3676575] (EAI 2)Name or service not known: [client 144.76.19.72:48952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:59.532231 2026] [ssl:error] [pid 3676575:tid 3676575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:59.586182 2026] [ssl:error] [pid 3673177:tid 3673177] (EAI 2)Name or service not known: [client 144.76.19.72:37636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:28:59.586213 2026] [ssl:error] [pid 3673177:tid 3673177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:28:59.666718 2026] [core:error] [pid 3673009:tid 3673009] [client 66.249.66.8:60373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:28:59.666747 2026] [core:error] [pid 3673009:tid 3673009] [client 66.249.66.8:60373] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:29:02.642747 2026] [ssl:error] [pid 3663390:tid 3663390] (EAI 2)Name or service not known: [client 144.76.19.72:37648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:02.642782 2026] [ssl:error] [pid 3663390:tid 3663390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:02.756721 2026] [ssl:error] [pid 3660232:tid 3660232] (EAI 2)Name or service not known: [client 144.76.19.72:37654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:02.756755 2026] [ssl:error] [pid 3660232:tid 3660232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:03.387750 2026] [ssl:error] [pid 3669486:tid 3669486] (70014)End of file found: [client 216.73.216.199:58324] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:04.590958 2026] [access_compat:error] [pid 3673177:tid 3673177] [client 136.158.25.236:56700] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:04.959301 2026] [security2:error] [pid 3654776:tid 3654776] [client 176.31.139.9:45668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/do-they-make-their-own-outfits-on-rupaul%27s-drag-race"] [unique_id "amtfsJkB3TfEl5Ou6y4HmAAAAAI"]
[Thu Jul 30 15:29:05.507485 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:40499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:05.813812 2026] [ssl:error] [pid 3676194:tid 3676194] (EAI 2)Name or service not known: [client 144.76.19.72:37660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:05.813851 2026] [ssl:error] [pid 3676194:tid 3676194] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:05.870197 2026] [ssl:error] [pid 3676576:tid 3676576] (EAI 2)Name or service not known: [client 144.76.19.72:37664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:05.870227 2026] [ssl:error] [pid 3676576:tid 3676576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:06.407149 2026] [core:error] [pid 3674041:tid 3674041] (13)Permission denied: [client 216.73.216.199:49944] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/device/subsystem/uevent
[Thu Jul 30 15:29:06.708315 2026] [core:error] [pid 3674041:tid 3674041] (13)Permission denied: [client 216.73.216.199:49944] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS0/uartclk
[Thu Jul 30 15:29:07.567469 2026] [lsapi:warn] [pid 3641972:tid 3641972] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:29:07.629342 2026] [ssl:error] [pid 3674041:tid 3674041] (70014)End of file found: [client 216.73.216.199:49944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:07.806250 2026] [security2:error] [pid 3660366:tid 3660366] [client 185.191.171.10:23274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1942.0/prev_next,prev.html"] [unique_id "amtfszashEYbmmHSkSTS9QAAAEU"]
[Thu Jul 30 15:29:07.809599 2026] [access_compat:error] [pid 3676512:tid 3676512] [client 45.158.164.139:35092] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:29:07.952306 2026] [lsapi:warn] [pid 3676194:tid 3676194] [client 145.14.10.39:35202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:29:07.952349 2026] [lsapi:warn] [pid 3676194:tid 3676194] [client 145.14.10.39:35202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:29:08.598447 2026] [access_compat:error] [pid 3677315:tid 3677315] [client 45.158.164.139:35096] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:29:08.681768 2026] [access_compat:error] [pid 3641972:tid 3641972] [client 45.158.164.139:35102] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:29:08.726506 2026] [core:error] [pid 3654776:tid 3654776] (13)Permission denied: [client 216.73.216.199:6692] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty44/subsystem/ttyS1/uartclk
[Thu Jul 30 15:29:08.742877 2026] [access_compat:error] [pid 3676194:tid 3676194] [client 136.158.25.236:57179] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:08.932786 2026] [ssl:error] [pid 3670231:tid 3670231] (EAI 2)Name or service not known: [client 144.76.19.72:37674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:08.932816 2026] [ssl:error] [pid 3670231:tid 3670231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:09.003497 2026] [ssl:error] [pid 3669486:tid 3669486] (EAI 2)Name or service not known: [client 144.76.19.72:37682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:09.003530 2026] [ssl:error] [pid 3669486:tid 3669486] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:09.183871 2026] [access_compat:error] [pid 3670231:tid 3670231] [client 45.158.164.139:35116] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:29:09.296090 2026] [security2:error] [pid 3677356:tid 3677356] [client 80.94.92.167:37166] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "hugoashmore.org"] [uri "/.svn/wc.db"] [unique_id "amtftWIMDExNHngwBp6RWQAAABI"]
[Thu Jul 30 15:29:09.296250 2026] [security2:error] [pid 3677356:tid 3677356] [client 80.94.92.167:37166] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hugoashmore.org"] [uri "/.svn/wc.db"] [unique_id "amtftWIMDExNHngwBp6RWQAAABI"]
[Thu Jul 30 15:29:09.296433 2026] [security2:error] [pid 3677356:tid 3677356] [client 80.94.92.167:37166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hugoashmore.org"] [uri "/.svn/wc.db"] [unique_id "amtftWIMDExNHngwBp6RWQAAABI"]
[Thu Jul 30 15:29:09.296658 2026] [security2:error] [pid 3677356:tid 3677356] [client 80.94.92.167:37166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hugoashmore.org"] [uri "/.svn/wc.db"] [unique_id "amtftWIMDExNHngwBp6RWQAAABI"]
[Thu Jul 30 15:29:09.735977 2026] [ssl:error] [pid 3654776:tid 3654776] (70014)End of file found: [client 216.73.216.199:6692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:10.525876 2026] [autoindex:error] [pid 3667133:tid 3667133] [client 191.232.199.39:1632] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:29:12.062669 2026] [ssl:error] [pid 3673009:tid 3673009] (EAI 2)Name or service not known: [client 144.76.19.72:30658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:12.062696 2026] [ssl:error] [pid 3673009:tid 3673009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:12.116672 2026] [ssl:error] [pid 3673220:tid 3673220] (EAI 2)Name or service not known: [client 144.76.19.72:30662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:12.116701 2026] [ssl:error] [pid 3673220:tid 3673220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:13.663405 2026] [ssl:error] [pid 3667214:tid 3667214] (70014)End of file found: [client 216.73.216.199:24510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:14.060839 2026] [autoindex:error] [pid 3672700:tid 3672700] [client 191.232.199.39:1618] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:29:14.570126 2026] [ssl:error] [pid 3673220:tid 3673220] (70014)End of file found: [client 216.73.216.199:51111] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:15.167927 2026] [ssl:error] [pid 3673177:tid 3673177] (70014)End of file found: [client 216.73.216.199:63614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:15.184813 2026] [ssl:error] [pid 3677797:tid 3677797] (EAI 2)Name or service not known: [client 144.76.19.72:30672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:15.184841 2026] [ssl:error] [pid 3677797:tid 3677797] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:15.241122 2026] [ssl:error] [pid 3677356:tid 3677356] (EAI 2)Name or service not known: [client 144.76.19.72:30686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:15.241153 2026] [ssl:error] [pid 3677356:tid 3677356] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:16.210270 2026] [cgi:error] [pid 3660232:tid 3660232] [client 37.59.21.100:53644] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:29:18.294097 2026] [ssl:error] [pid 3660232:tid 3660232] (EAI 2)Name or service not known: [client 144.76.19.72:30702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:18.294128 2026] [ssl:error] [pid 3660232:tid 3660232] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:18.348465 2026] [ssl:error] [pid 3670231:tid 3670231] (EAI 2)Name or service not known: [client 144.76.19.72:30706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:18.348495 2026] [ssl:error] [pid 3670231:tid 3670231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:19.306766 2026] [access_compat:error] [pid 3676004:tid 3676004] [client 136.158.25.236:58133] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:19.452626 2026] [security2:error] [pid 3663390:tid 3663390] [client 185.191.171.10:31600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/black-roots-blonde-hair-braids"] [unique_id "amtfv4uwKZPt4rbxWQ29YwAAAA4"]
[Thu Jul 30 15:29:19.685187 2026] [core:error] [pid 3660232:tid 3660232] (13)Permission denied: [client 216.73.216.199:25937] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/irqbypass/holders/kvm/sections/__ksymtab_strings
[Thu Jul 30 15:29:19.992265 2026] [core:crit] [pid 3660232:tid 3660232] (13)Permission denied: [client 216.73.216.199:25937] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/nfs/statd/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/lib/nfs/statd/' is executable
[Thu Jul 30 15:29:20.650587 2026] [authz_core:error] [pid 3667210:tid 3667210] [client 169.58.39.192:54184] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:29:21.404247 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:63792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:21.404281 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:21.456396 2026] [ssl:error] [pid 3676512:tid 3676512] (EAI 2)Name or service not known: [client 144.76.19.72:63794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:21.456437 2026] [ssl:error] [pid 3676512:tid 3676512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:23.476591 2026] [ssl:error] [pid 3660232:tid 3660232] (70014)End of file found: [client 216.73.216.199:25937] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:24.178937 2026] [authz_core:error] [pid 3672700:tid 3672700] [client 169.58.39.192:55892] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:29:24.239565 2026] [lsapi:warn] [pid 3676261:tid 3676261] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:29:24.509637 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:63810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:24.509670 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:24.565187 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:63816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:24.565211 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:24.988513 2026] [ssl:error] [pid 3677357:tid 3677357] (70014)End of file found: [client 216.73.216.199:40614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:25.765836 2026] [access_compat:error] [pid 3671167:tid 3671167] [client 112.209.180.50:16044] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:26.560885 2026] [authz_core:error] [pid 3677315:tid 3677315] [client 169.58.39.192:57106] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:29:27.101094 2026] [core:error] [pid 3678381:tid 3678381] (13)Permission denied: [client 216.73.216.199:9571] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty8/subsystem/ttyS1/flags
[Thu Jul 30 15:29:27.565581 2026] [security2:error] [pid 3677315:tid 3677315] [client 47.254.178.223:20237] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfx0EINR72-U-YNJK-igAAAAY"]
[Thu Jul 30 15:29:27.565630 2026] [security2:error] [pid 3677315:tid 3677315] [client 47.254.178.223:20237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfx0EINR72-U-YNJK-igAAAAY"]
[Thu Jul 30 15:29:27.565893 2026] [security2:error] [pid 3677315:tid 3677315] [client 47.254.178.223:20237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfx0EINR72-U-YNJK-igAAAAY"]
[Thu Jul 30 15:29:27.625600 2026] [ssl:error] [pid 3673220:tid 3673220] (EAI 2)Name or service not known: [client 144.76.19.72:63822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:27.625625 2026] [ssl:error] [pid 3673220:tid 3673220] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:27.680116 2026] [ssl:error] [pid 3677315:tid 3677315] (EAI 2)Name or service not known: [client 144.76.19.72:63828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:27.680148 2026] [ssl:error] [pid 3677315:tid 3677315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:29.243641 2026] [authz_core:error] [pid 3676576:tid 3676576] [client 66.249.66.35:58618] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:29:29.246334 2026] [authz_core:error] [pid 3676576:tid 3676576] [client 66.249.66.35:58618] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:29:29.508721 2026] [ssl:error] [pid 3678381:tid 3678381] (70014)End of file found: [client 216.73.216.199:9571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:29.729734 2026] [access_compat:error] [pid 3660232:tid 3660232] [client 136.158.25.236:59089] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:30.110740 2026] [core:error] [pid 3676512:tid 3676512] (13)Permission denied: [client 216.73.216.199:18326] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty44/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:29:30.256393 2026] [authz_core:error] [pid 3678548:tid 3678548] [client 169.58.39.192:58683] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:29:30.734492 2026] [ssl:error] [pid 3663390:tid 3663390] (EAI 2)Name or service not known: [client 144.76.19.72:51500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:30.734518 2026] [ssl:error] [pid 3663390:tid 3663390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:30.787636 2026] [ssl:error] [pid 3678315:tid 3678315] (EAI 2)Name or service not known: [client 144.76.19.72:51516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:30.787671 2026] [ssl:error] [pid 3678315:tid 3678315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:31.313866 2026] [core:error] [pid 3676512:tid 3676512] (13)Permission denied: [client 216.73.216.199:18326] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nft_chain_nat/sections/__mcount_loc
[Thu Jul 30 15:29:31.424312 2026] [security2:error] [pid 3663390:tid 3663390] [client 181.42.182.28:44684] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfy4uwKZPt4rbxWQ29aAAAAA4"]
[Thu Jul 30 15:29:31.424382 2026] [security2:error] [pid 3663390:tid 3663390] [client 181.42.182.28:44684] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtfy4uwKZPt4rbxWQ29aAAAAA4"]
[Thu Jul 30 15:29:31.424633 2026] [security2:error] [pid 3663390:tid 3663390] [client 181.42.182.28:44684] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtfy4uwKZPt4rbxWQ29aAAAAA4"]
[Thu Jul 30 15:29:33.845986 2026] [ssl:error] [pid 3676047:tid 3676047] (EAI 2)Name or service not known: [client 144.76.19.72:51530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:33.846017 2026] [ssl:error] [pid 3676047:tid 3676047] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:33.900444 2026] [ssl:error] [pid 3677357:tid 3677357] (EAI 2)Name or service not known: [client 144.76.19.72:51538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:33.900484 2026] [ssl:error] [pid 3677357:tid 3677357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:34.409434 2026] [autoindex:error] [pid 3676260:tid 3676260] [client 191.232.199.39:41871] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:29:34.531648 2026] [security2:error] [pid 3673124:tid 3673124] [client 138.197.80.41:57002] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "orgent.eu"] [uri "/xmlrpc.php"] [unique_id "amtfzn5np6Bh95A5S7gJ7AAAADE"]
[Thu Jul 30 15:29:34.634972 2026] [ssl:error] [pid 3676512:tid 3676512] (70014)End of file found: [client 216.73.216.199:18326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:36.120912 2026] [security2:error] [pid 3667133:tid 3667133] [client 110.226.181.82:9841] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtf0Hv6KNynuNyWyE8CdwAAACg"]
[Thu Jul 30 15:29:36.120965 2026] [security2:error] [pid 3667133:tid 3667133] [client 110.226.181.82:9841] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtf0Hv6KNynuNyWyE8CdwAAACg"]
[Thu Jul 30 15:29:36.121240 2026] [security2:error] [pid 3667133:tid 3667133] [client 110.226.181.82:9841] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtf0Hv6KNynuNyWyE8CdwAAACg"]
[Thu Jul 30 15:29:36.730392 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:32770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:36.979868 2026] [ssl:error] [pid 3676260:tid 3676260] (EAI 2)Name or service not known: [client 144.76.19.72:51548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:36.979913 2026] [ssl:error] [pid 3676260:tid 3676260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:37.034596 2026] [ssl:error] [pid 3677901:tid 3677901] (EAI 2)Name or service not known: [client 144.76.19.72:51560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:37.034631 2026] [ssl:error] [pid 3677901:tid 3677901] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:40.090565 2026] [ssl:error] [pid 3676512:tid 3676512] (EAI 2)Name or service not known: [client 144.76.19.72:58922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:40.090597 2026] [ssl:error] [pid 3676512:tid 3676512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:40.144929 2026] [ssl:error] [pid 3678960:tid 3678960] (EAI 2)Name or service not known: [client 144.76.19.72:58924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:40.144970 2026] [ssl:error] [pid 3678960:tid 3678960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:40.173883 2026] [access_compat:error] [pid 3673009:tid 3673009] [client 136.158.25.236:59953] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:40.346057 2026] [ssl:error] [pid 3673220:tid 3673220] (70014)End of file found: [client 216.73.216.199:55778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:41.245942 2026] [security2:error] [pid 3679008:tid 3679008] [client 139.155.126.16:52542] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtf1aZR7mULjSdrBwr6JAAAACc"]
[Thu Jul 30 15:29:41.309348 2026] [lsapi:warn] [pid 3676512:tid 3676512] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:29:41.777294 2026] [cgi:error] [pid 3676576:tid 3676576] [client 20.151.221.234:60773] AH02812: stderr from /home/ditchfes/public_html/glottalstop.co.uk/portfolio/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:29:43.201842 2026] [ssl:error] [pid 3679008:tid 3679008] (EAI 2)Name or service not known: [client 144.76.19.72:58936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:43.201884 2026] [ssl:error] [pid 3679008:tid 3679008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:43.257335 2026] [ssl:error] [pid 3679046:tid 3679046] (EAI 2)Name or service not known: [client 144.76.19.72:58938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:43.257373 2026] [ssl:error] [pid 3679046:tid 3679046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:43.728586 2026] [security2:error] [pid 3660232:tid 3660232] [client 139.155.126.16:51686] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtf162V4Ri4ugpwMRhd8wAAABw"], referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 15:29:43.959989 2026] [ssl:error] [pid 3678960:tid 3678960] (70014)End of file found: [client 216.73.216.199:24776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:44.328849 2026] [lsapi:warn] [pid 3660232:tid 3660232] [client 139.155.126.16:51686] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 15:29:44.328893 2026] [lsapi:warn] [pid 3660232:tid 3660232] [client 139.155.126.16:51686] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 15:29:44.447675 2026] [ssl:error] [pid 3678961:tid 3678961] (70014)End of file found: [client 216.73.216.199:64224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:46.311502 2026] [ssl:error] [pid 3677357:tid 3677357] (EAI 2)Name or service not known: [client 144.76.19.72:58944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:46.311536 2026] [ssl:error] [pid 3677357:tid 3677357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:46.367424 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:58960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:46.367460 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:46.672027 2026] [ssl:error] [pid 3676262:tid 3676262] (70014)End of file found: [client 216.73.216.199:48806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:46.759077 2026] [authz_core:error] [pid 3676260:tid 3676260] [client 66.249.66.34:48768] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:29:46.761737 2026] [authz_core:error] [pid 3676260:tid 3676260] [client 66.249.66.34:48768] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:29:46.920341 2026] [access_compat:error] [pid 3667210:tid 3667210] [client 112.209.180.50:16879] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:49.421015 2026] [ssl:error] [pid 3677357:tid 3677357] (EAI 2)Name or service not known: [client 144.76.19.72:58964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:49.421039 2026] [ssl:error] [pid 3677357:tid 3677357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:49.475325 2026] [ssl:error] [pid 3679009:tid 3679009] (EAI 2)Name or service not known: [client 144.76.19.72:58976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:49.475353 2026] [ssl:error] [pid 3679009:tid 3679009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:49.874489 2026] [core:error] [pid 3673124:tid 3673124] (13)Permission denied: [client 216.73.216.199:53078] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:9/subsystem/ttyS1/custom_divisor
[Thu Jul 30 15:29:50.950819 2026] [access_compat:error] [pid 3679047:tid 3679047] [client 112.209.180.50:17058] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:52.531574 2026] [ssl:error] [pid 3667215:tid 3667215] (EAI 2)Name or service not known: [client 144.76.19.72:53778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:52.531611 2026] [ssl:error] [pid 3667215:tid 3667215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:52.588191 2026] [ssl:error] [pid 3679624:tid 3679624] (EAI 2)Name or service not known: [client 144.76.19.72:53786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:52.588235 2026] [ssl:error] [pid 3679624:tid 3679624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:52.907449 2026] [ssl:error] [pid 3676004:tid 3676004] (70014)End of file found: [client 216.73.216.199:52326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:53.203268 2026] [ssl:error] [pid 3673124:tid 3673124] (70014)End of file found: [client 216.73.216.199:53078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:54.408472 2026] [autoindex:error] [pid 3677797:tid 3677797] (13)Permission denied: [client 216.73.216.199:21766] AH01275: Can't open directory for index: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/home/plastics/
[Thu Jul 30 15:29:54.676839 2026] [autoindex:error] [pid 3676047:tid 3676047] [client 191.232.199.39:1670] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:29:54.707904 2026] [ssl:error] [pid 3677797:tid 3677797] (70014)End of file found: [client 216.73.216.199:21766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:29:55.646497 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:53798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:55.646527 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:55.702703 2026] [ssl:error] [pid 3679624:tid 3679624] (EAI 2)Name or service not known: [client 144.76.19.72:53802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:55.702733 2026] [ssl:error] [pid 3679624:tid 3679624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:56.026696 2026] [authz_core:error] [pid 3658124:tid 3658124] [client 66.249.66.33:53568] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:29:56.029388 2026] [authz_core:error] [pid 3658124:tid 3658124] [client 66.249.66.33:53568] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:29:57.255519 2026] [access_compat:error] [pid 3669489:tid 3669489] [client 136.158.25.236:61479] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:29:57.550266 2026] [cgi:error] [pid 3667210:tid 3667210] [client 136.226.167.4:18623] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:29:57.779888 2026] [lsapi:warn] [pid 3667214:tid 3667214] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:29:57.843224 2026] [security2:error] [pid 3679007:tid 3679007] [client 114.119.132.171:61123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1562540400/cat_ids~102,14,17/request_format~html"] [unique_id "amtf5apyQEcaH5LNl90RkQAAACY"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~102,14,17/request_format~html
[Thu Jul 30 15:29:58.626716 2026] [core:error] [pid 3673177:tid 3673177] (13)Permission denied: [client 216.73.216.199:36871] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/drivers/battery/bind
[Thu Jul 30 15:29:58.757533 2026] [ssl:error] [pid 3667214:tid 3667214] (EAI 2)Name or service not known: [client 144.76.19.72:53810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:58.757568 2026] [ssl:error] [pid 3667214:tid 3667214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:58.809482 2026] [ssl:error] [pid 3667214:tid 3667214] (EAI 2)Name or service not known: [client 144.76.19.72:53824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:29:58.809511 2026] [ssl:error] [pid 3667214:tid 3667214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:29:59.013011 2026] [security2:error] [pid 3654776:tid 3654776] [client 184.72.95.195:55970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2022/05/may-2022-multi-300x41.png"] [unique_id "amtf55kB3TfEl5Ou6y4IDwAAAAI"]
[Thu Jul 30 15:29:59.941181 2026] [security2:error] [pid 3676047:tid 3676047] [client 114.119.132.171:42149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1562540400/cat_ids~102,14,17/request_format~html"] [unique_id "amtf546Y07SsiJjKYZIElQAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563145200/cat_ids~102,14,17/request_format~html
[Thu Jul 30 15:30:00.126770 2026] [ssl:error] [pid 3673177:tid 3673177] (70014)End of file found: [client 216.73.216.199:36871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:00.432054 2026] [ssl:error] [pid 3678960:tid 3678960] (70014)End of file found: [client 216.73.216.199:27674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:01.147634 2026] [access_compat:error] [pid 3677797:tid 3677797] [client 136.158.25.236:61835] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:01.866303 2026] [ssl:error] [pid 3678490:tid 3678490] (EAI 2)Name or service not known: [client 144.76.19.72:18828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:01.866354 2026] [ssl:error] [pid 3678490:tid 3678490] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:01.924319 2026] [ssl:error] [pid 3674041:tid 3674041] (EAI 2)Name or service not known: [client 144.76.19.72:18836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:01.924353 2026] [ssl:error] [pid 3674041:tid 3674041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:02.839606 2026] [ssl:error] [pid 3677315:tid 3677315] (70014)End of file found: [client 216.73.216.199:9209] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:03.466408 2026] [autoindex:error] [pid 3664268:tid 3664268] [client 191.232.199.39:49228] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:30:04.978085 2026] [ssl:error] [pid 3667215:tid 3667215] (EAI 2)Name or service not known: [client 144.76.19.72:18844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:04.978112 2026] [ssl:error] [pid 3667215:tid 3667215] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:05.034209 2026] [ssl:error] [pid 3664268:tid 3664268] (EAI 2)Name or service not known: [client 144.76.19.72:18848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:05.034243 2026] [ssl:error] [pid 3664268:tid 3664268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:07.050022 2026] [ssl:error] [pid 3678548:tid 3678548] (70014)End of file found: [client 216.73.216.199:25156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:07.543720 2026] [core:error] [pid 3674041:tid 3674041] (13)Permission denied: [client 216.73.216.199:20844] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:14/subsystem/ttyS1/custom_divisor
[Thu Jul 30 15:30:07.951855 2026] [core:error] [pid 3674041:tid 3674041] (13)Permission denied: [client 216.73.216.199:20844] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty40/subsystem/ttyS1/uartclk
[Thu Jul 30 15:30:08.091629 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:18858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:08.091666 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:08.147463 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:18874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:08.147490 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:08.854914 2026] [core:error] [pid 3674041:tid 3674041] (13)Permission denied: [client 216.73.216.199:20844] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/var/run/sm-notify.pid
[Thu Jul 30 15:30:10.663318 2026] [ssl:error] [pid 3674041:tid 3674041] (70014)End of file found: [client 216.73.216.199:20844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:11.200632 2026] [ssl:error] [pid 3669488:tid 3669488] (EAI 2)Name or service not known: [client 144.76.19.72:47072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:11.200668 2026] [ssl:error] [pid 3669488:tid 3669488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:11.252685 2026] [ssl:error] [pid 3676262:tid 3676262] (EAI 2)Name or service not known: [client 144.76.19.72:47076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:11.252708 2026] [ssl:error] [pid 3676262:tid 3676262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:11.627336 2026] [access_compat:error] [pid 3641918:tid 3641918] [client 136.158.25.236:62889] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:12.056911 2026] [access_compat:error] [pid 3672700:tid 3672700] [client 45.158.164.139:35336] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:30:12.415361 2026] [autoindex:error] [pid 3676004:tid 3676004] [client 191.232.199.39:1309] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:30:14.237328 2026] [core:error] [pid 3667214:tid 3667214] (13)Permission denied: [client 216.73.216.199:15772] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/poison
[Thu Jul 30 15:30:14.325430 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:47092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:14.325473 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:14.378352 2026] [ssl:error] [pid 3678548:tid 3678548] (EAI 2)Name or service not known: [client 144.76.19.72:47102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:14.378401 2026] [ssl:error] [pid 3678548:tid 3678548] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:14.552824 2026] [security2:error] [pid 3679046:tid 3679046] [client 94.154.43.188:17016] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "saliency.co.uk"] [uri "/.env"] [unique_id "amtf9s7Iya5g6l-pty9bVAAAAC8"]
[Thu Jul 30 15:30:14.552977 2026] [security2:error] [pid 3679046:tid 3679046] [client 94.154.43.188:17016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saliency.co.uk"] [uri "/.env"] [unique_id "amtf9s7Iya5g6l-pty9bVAAAAC8"]
[Thu Jul 30 15:30:14.553189 2026] [security2:error] [pid 3679046:tid 3679046] [client 94.154.43.188:17016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "saliency.co.uk"] [uri "/.env"] [unique_id "amtf9s7Iya5g6l-pty9bVAAAAC8"]
[Thu Jul 30 15:30:14.628955 2026] [core:error] [pid 3641972:tid 3641972] (13)Permission denied: [client 216.73.216.199:59870] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:65/subsystem/ttyS1/iomem_base
[Thu Jul 30 15:30:14.670171 2026] [access_compat:error] [pid 3672700:tid 3672700] [client 45.158.164.139:35374] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:30:15.051185 2026] [lsapi:warn] [pid 3678548:tid 3678548] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:30:15.438632 2026] [lsapi:warn] [pid 3641972:tid 3641972] [client 216.73.216.199:59870] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Constant PASSWORD_DEFAULT already defined in /var/softaculous/yeti/update_pass.php on line 17\n
[Thu Jul 30 15:30:16.134165 2026] [ssl:error] [pid 3667214:tid 3667214] (70014)End of file found: [client 216.73.216.199:15772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:16.140433 2026] [authz_core:error] [pid 3664268:tid 3664268] [client 66.249.66.34:59519] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:30:16.143107 2026] [authz_core:error] [pid 3664268:tid 3664268] [client 66.249.66.34:59519] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:30:16.962956 2026] [security2:error] [pid 3670231:tid 3670231] [client 43.140.247.223:39634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/"] [unique_id "amtf-Mi42W46fCDy9H7RqQAAAB8"]
[Thu Jul 30 15:30:17.037102 2026] [core:error] [pid 3641972:tid 3641972] (13)Permission denied: [client 216.73.216.199:59870] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS0/irq
[Thu Jul 30 15:30:17.337649 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:59870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:17.432515 2026] [ssl:error] [pid 3677356:tid 3677356] (EAI 2)Name or service not known: [client 144.76.19.72:47118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:17.432545 2026] [ssl:error] [pid 3677356:tid 3677356] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:17.485513 2026] [ssl:error] [pid 3679050:tid 3679050] (EAI 2)Name or service not known: [client 144.76.19.72:47130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:17.485550 2026] [ssl:error] [pid 3679050:tid 3679050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:18.617639 2026] [security2:error] [pid 3641918:tid 3641918] [client 85.208.96.204:23086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,697.0/prev_next,next.html"] [unique_id "amtf-i40uWOiymCQfIy75gAAABc"]
[Thu Jul 30 15:30:19.239046 2026] [access_compat:error] [pid 3672700:tid 3672700] [client 112.209.180.50:14006] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:20.181580 2026] [security2:error] [pid 3676260:tid 3676260] [client 85.208.96.206:25594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/atlanta-braves-hat-new-era"] [unique_id "amtf_IndJhmF4lVhZHGAnwAAAC0"]
[Thu Jul 30 15:30:20.540686 2026] [ssl:error] [pid 3679050:tid 3679050] (EAI 2)Name or service not known: [client 144.76.19.72:41008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:20.540717 2026] [ssl:error] [pid 3679050:tid 3679050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:20.747750 2026] [ssl:error] [pid 3676260:tid 3676260] (EAI 2)Name or service not known: [client 144.76.19.72:41020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:20.747782 2026] [ssl:error] [pid 3676260:tid 3676260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:22.097913 2026] [security2:error] [pid 3681130:tid 3681130] [client 43.140.247.223:43850] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amtf_omWRFSG_-PgPZKm1AAAACM"], referer: http://www.thesilkshed.co.uk
[Thu Jul 30 15:30:22.118183 2026] [access_compat:error] [pid 3679052:tid 3679052] [client 136.158.25.236:63782] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:23.158565 2026] [security2:error] [pid 3667215:tid 3667215] [client 51.68.111.208:23219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amtf_8WOh0SMCrYH235P5AAAADk"]
[Thu Jul 30 15:30:23.238056 2026] [security2:error] [pid 3681296:tid 3681296] [client 51.68.111.208:19871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtf_0nV0A-EjI5xJ5T1hgAAACY"]
[Thu Jul 30 15:30:23.337195 2026] [security2:error] [pid 3676261:tid 3676261] [client 51.68.111.208:31307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bes-systems.co.uk"] [uri "/robots.txt"] [unique_id "amtf_2gRnasot5cM0AJf5wAAADg"]
[Thu Jul 30 15:30:23.804116 2026] [ssl:error] [pid 3641972:tid 3641972] (EAI 2)Name or service not known: [client 144.76.19.72:41028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:23.804152 2026] [ssl:error] [pid 3641972:tid 3641972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:23.856758 2026] [ssl:error] [pid 3664268:tid 3664268] (EAI 2)Name or service not known: [client 144.76.19.72:41034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:23.856787 2026] [ssl:error] [pid 3664268:tid 3664268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:25.394729 2026] [core:error] [pid 3641918:tid 3641918] (13)Permission denied: [client 216.73.216.199:64634] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty7/subsystem/ttyS1/closing_wait
[Thu Jul 30 15:30:25.996237 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:64634] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:26.297356 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:6693] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:26.908890 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:41038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:26.908923 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:26.961978 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:41052] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:26.962016 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:27.200936 2026] [ssl:error] [pid 3641972:tid 3641972] (70014)End of file found: [client 216.73.216.199:62378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:28.685389 2026] [security2:error] [pid 3679625:tid 3679625] [client 43.166.247.155:58202] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ogsoil.com"] [uri "/"] [unique_id "amtgBPsl9_eqt9vmeM2xKAAAADs"]
[Thu Jul 30 15:30:29.294390 2026] [lsapi:warn] [pid 3672700:tid 3672700] [client 45.158.164.139:39792] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:30:29.294433 2026] [lsapi:warn] [pid 3672700:tid 3672700] [client 45.158.164.139:39792] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:30:30.075413 2026] [ssl:error] [pid 3676004:tid 3676004] (EAI 2)Name or service not known: [client 144.76.19.72:45360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:30.075447 2026] [ssl:error] [pid 3676004:tid 3676004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:30.142033 2026] [ssl:error] [pid 3681626:tid 3681626] (EAI 2)Name or service not known: [client 144.76.19.72:45372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:30.142089 2026] [ssl:error] [pid 3681626:tid 3681626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:30.972758 2026] [lsapi:warn] [pid 3681626:tid 3681626] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:30:31.302977 2026] [ssl:error] [pid 3665000:tid 3665000] (70014)End of file found: [client 216.73.216.199:38422] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:32.614321 2026] [core:error] [pid 3679046:tid 3679046] (13)Permission denied: [client 216.73.216.199:34720] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty58/subsystem/ttyS0/close_delay
[Thu Jul 30 15:30:32.904538 2026] [access_compat:error] [pid 3678921:tid 3678921] [client 112.209.180.50:14538] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:33.229593 2026] [ssl:error] [pid 3672700:tid 3672700] (EAI 2)Name or service not known: [client 144.76.19.72:45386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:33.229621 2026] [ssl:error] [pid 3672700:tid 3672700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:33.282810 2026] [ssl:error] [pid 3681130:tid 3681130] (EAI 2)Name or service not known: [client 144.76.19.72:45400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:33.282852 2026] [ssl:error] [pid 3681130:tid 3681130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:34.686050 2026] [security2:error] [pid 3681130:tid 3681130] [client 47.236.111.232:65227] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgComWRFSG_-PgPZKm1wAAACM"]
[Thu Jul 30 15:30:34.686114 2026] [security2:error] [pid 3681130:tid 3681130] [client 47.236.111.232:65227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgComWRFSG_-PgPZKm1wAAACM"]
[Thu Jul 30 15:30:34.686391 2026] [security2:error] [pid 3681130:tid 3681130] [client 47.236.111.232:65227] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgComWRFSG_-PgPZKm1wAAACM"]
[Thu Jul 30 15:30:36.338506 2026] [ssl:error] [pid 3678961:tid 3678961] (EAI 2)Name or service not known: [client 144.76.19.72:45422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:36.338541 2026] [ssl:error] [pid 3678961:tid 3678961] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:36.393312 2026] [ssl:error] [pid 3667214:tid 3667214] (EAI 2)Name or service not known: [client 144.76.19.72:45426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:36.393341 2026] [ssl:error] [pid 3667214:tid 3667214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:37.153995 2026] [core:error] [pid 3679009:tid 3679009] (13)Permission denied: [client 216.73.216.199:5484] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/irq
[Thu Jul 30 15:30:39.180933 2026] [security2:error] [pid 3658272:tid 3658272] [client 201.162.93.16:33888] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgD6vSkN5zJy6ha2SPFwAAACs"]
[Thu Jul 30 15:30:39.180996 2026] [security2:error] [pid 3658272:tid 3658272] [client 201.162.93.16:33888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgD6vSkN5zJy6ha2SPFwAAACs"]
[Thu Jul 30 15:30:39.181271 2026] [security2:error] [pid 3658272:tid 3658272] [client 201.162.93.16:33888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgD6vSkN5zJy6ha2SPFwAAACs"]
[Thu Jul 30 15:30:39.450882 2026] [ssl:error] [pid 3646334:tid 3646334] (EAI 2)Name or service not known: [client 144.76.19.72:45434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:39.450918 2026] [ssl:error] [pid 3646334:tid 3646334] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:39.507968 2026] [ssl:error] [pid 3676261:tid 3676261] (EAI 2)Name or service not known: [client 144.76.19.72:45438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:39.507996 2026] [ssl:error] [pid 3676261:tid 3676261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:40.644869 2026] [authz_core:error] [pid 3667133:tid 3667133] [client 139.162.177.81:47772] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-london.com
[Thu Jul 30 15:30:40.647529 2026] [authz_core:error] [pid 3667133:tid 3667133] [client 139.162.177.81:47772] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-london.com
[Thu Jul 30 15:30:42.007196 2026] [security2:error] [pid 3641918:tid 3641918] [client 47.128.32.12:15672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/robots.txt"] [unique_id "amtgEi40uWOiymCQfIy7_wAAABc"]
[Thu Jul 30 15:30:42.280299 2026] [security2:error] [pid 3679009:tid 3679009] [client 216.73.216.199:5484] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-libkcapi-optmem_max.conf"] [unique_id "amtgEmcgFzUK-EI2bxJbBQAAAC4"]
[Thu Jul 30 15:30:42.280622 2026] [security2:error] [pid 3679009:tid 3679009] [client 216.73.216.199:5484] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-libkcapi-optmem_max.conf"] [unique_id "amtgEmcgFzUK-EI2bxJbBQAAAC4"]
[Thu Jul 30 15:30:42.280853 2026] [security2:error] [pid 3679009:tid 3679009] [client 216.73.216.199:5484] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysctl.d/50-libkcapi-optmem_max.conf"] [unique_id "amtgEmcgFzUK-EI2bxJbBQAAAC4"]
[Thu Jul 30 15:30:42.372720 2026] [security2:error] [pid 3674041:tid 3674041] [client 185.191.171.7:54488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9389.0/prev_next,next.html"] [unique_id "amtgEmc7AtAAQCY7lWjRmAAAABg"]
[Thu Jul 30 15:30:42.565657 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:30948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:42.565686 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:42.621677 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:30958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:42.621708 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:42.892783 2026] [core:error] [pid 3679009:tid 3679009] (13)Permission denied: [client 216.73.216.199:5484] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS0/iomem_base
[Thu Jul 30 15:30:43.065531 2026] [access_compat:error] [pid 3671167:tid 3671167] [client 136.158.25.236:110] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:43.187418 2026] [ssl:error] [pid 3679009:tid 3679009] (70014)End of file found: [client 216.73.216.199:5484] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:45.088117 2026] [security2:error] [pid 3676260:tid 3676260] [client 98.83.177.42:20473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "positivelydisruptive.co.uk"] [uri "/"] [unique_id "amtgFYndJhmF4lVhZHGApwAAAC0"]
[Thu Jul 30 15:30:45.414494 2026] [core:error] [pid 3646334:tid 3646334] [client 66.249.66.199:65188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:30:45.414523 2026] [core:error] [pid 3646334:tid 3646334] [client 66.249.66.199:65188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:30:45.608296 2026] [core:error] [pid 3678961:tid 3678961] (13)Permission denied: [client 216.73.216.199:30632] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 15:30:45.698621 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:30974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:45.698667 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:45.754872 2026] [ssl:error] [pid 3681130:tid 3681130] (EAI 2)Name or service not known: [client 144.76.19.72:30990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:45.754901 2026] [ssl:error] [pid 3681130:tid 3681130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:45.776319 2026] [security2:error] [pid 3670231:tid 3670231] [client 85.208.96.199:44012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amtgFci42W46fCDy9H7RsAAAAB8"]
[Thu Jul 30 15:30:46.782513 2026] [security2:error] [pid 3673220:tid 3673220] [client 185.191.171.8:40474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/hotel"] [unique_id "amtgFuiEJqc66AoBiKiXKAAAADY"]
[Thu Jul 30 15:30:46.810977 2026] [ssl:error] [pid 3678961:tid 3678961] (70014)End of file found: [client 216.73.216.199:30632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:47.716802 2026] [core:error] [pid 3646334:tid 3646334] (13)Permission denied: [client 216.73.216.199:31375] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/sanity_checks
[Thu Jul 30 15:30:47.889710 2026] [lsapi:warn] [pid 3673220:tid 3673220] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:30:48.620255 2026] [ssl:error] [pid 3646334:tid 3646334] (70014)End of file found: [client 216.73.216.199:31375] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:48.808255 2026] [ssl:error] [pid 3681130:tid 3681130] (EAI 2)Name or service not known: [client 144.76.19.72:31002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:48.808282 2026] [ssl:error] [pid 3681130:tid 3681130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:48.861293 2026] [ssl:error] [pid 3665000:tid 3665000] (EAI 2)Name or service not known: [client 144.76.19.72:31014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:48.861332 2026] [ssl:error] [pid 3665000:tid 3665000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:49.352621 2026] [access_compat:error] [pid 3674041:tid 3674041] [client 136.158.25.236:783] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:49.995195 2026] [authz_core:error] [pid 3676004:tid 3676004] [client 66.249.66.33:37089] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:30:49.997840 2026] [authz_core:error] [pid 3676004:tid 3676004] [client 66.249.66.33:37089] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:30:50.902022 2026] [security2:error] [pid 3673220:tid 3673220] [client 216.73.216.199:8403] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/mariadb.conf"] [unique_id "amtgGuiEJqc66AoBiKiXMAAAADY"]
[Thu Jul 30 15:30:50.902325 2026] [security2:error] [pid 3673220:tid 3673220] [client 216.73.216.199:8403] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/mariadb.conf"] [unique_id "amtgGuiEJqc66AoBiKiXMAAAADY"]
[Thu Jul 30 15:30:50.902553 2026] [security2:error] [pid 3673220:tid 3673220] [client 216.73.216.199:8403] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/mariadb.conf"] [unique_id "amtgGuiEJqc66AoBiKiXMAAAADY"]
[Thu Jul 30 15:30:51.201998 2026] [security2:error] [pid 3673220:tid 3673220] [client 216.73.216.199:8403] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/firmware/slicoss/oasisrcvucode.sys"] [unique_id "amtgG-iEJqc66AoBiKiXMQAAADY"]
[Thu Jul 30 15:30:51.202260 2026] [security2:error] [pid 3673220:tid 3673220] [client 216.73.216.199:8403] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/firmware/slicoss/oasisrcvucode.sys"] [unique_id "amtgG-iEJqc66AoBiKiXMQAAADY"]
[Thu Jul 30 15:30:51.202465 2026] [security2:error] [pid 3673220:tid 3673220] [client 216.73.216.199:8403] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/firmware/slicoss/oasisrcvucode.sys"] [unique_id "amtgG-iEJqc66AoBiKiXMQAAADY"]
[Thu Jul 30 15:30:51.916628 2026] [ssl:error] [pid 3658272:tid 3658272] (EAI 2)Name or service not known: [client 144.76.19.72:31982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:51.916672 2026] [ssl:error] [pid 3658272:tid 3658272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:51.971248 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:31984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:51.971282 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:52.406408 2026] [ssl:error] [pid 3673220:tid 3673220] (70014)End of file found: [client 216.73.216.199:8403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:53.611558 2026] [ssl:error] [pid 3667211:tid 3667211] (70014)End of file found: [client 216.73.216.199:32844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:53.795214 2026] [access_compat:error] [pid 3658272:tid 3658272] [client 112.209.180.50:15391] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:30:54.516910 2026] [core:error] [pid 3664268:tid 3664268] (13)Permission denied: [client 216.73.216.199:10766] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/usbhid/uevent
[Thu Jul 30 15:30:55.023176 2026] [ssl:error] [pid 3681129:tid 3681129] (EAI 2)Name or service not known: [client 144.76.19.72:31990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:55.023215 2026] [ssl:error] [pid 3681129:tid 3681129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:55.076791 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:32004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:55.076824 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:56.330241 2026] [security2:error] [pid 3667214:tid 3667214] [client 85.208.96.207:58752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,324.0.html"] [unique_id "amtgICz7Z2m-RXdkcWAaKAAAADc"]
[Thu Jul 30 15:30:57.223740 2026] [ssl:error] [pid 3664268:tid 3664268] (70014)End of file found: [client 216.73.216.199:10766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:30:57.338583 2026] [security2:error] [pid 3681296:tid 3681296] [client 43.133.91.48:33576] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amtgIUnV0A-EjI5xJ5T1jQAAACY"], referer: http://www.peterboroughdiocesanregistry.co.uk
[Thu Jul 30 15:30:58.130526 2026] [ssl:error] [pid 3682932:tid 3682932] (EAI 2)Name or service not known: [client 144.76.19.72:32014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:58.130564 2026] [ssl:error] [pid 3682932:tid 3682932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:58.185042 2026] [ssl:error] [pid 3682933:tid 3682933] (EAI 2)Name or service not known: [client 144.76.19.72:32024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:30:58.185103 2026] [ssl:error] [pid 3682933:tid 3682933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:30:58.514310 2026] [security2:error] [pid 3679624:tid 3679624] [client 52.238.199.152:0] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "www.papier.com.mt"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtgIpwSBFzvXNGJe_KDCgAAABw"]
[Thu Jul 30 15:30:58.514517 2026] [security2:error] [pid 3679624:tid 3679624] [client 52.238.199.152:0] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.papier.com.mt"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtgIpwSBFzvXNGJe_KDCgAAABw"]
[Thu Jul 30 15:30:58.514736 2026] [security2:error] [pid 3679624:tid 3679624] [client 52.238.199.152:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "www.papier.com.mt"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtgIpwSBFzvXNGJe_KDCgAAABw"]
[Thu Jul 30 15:31:00.024661 2026] [ssl:error] [pid 3677357:tid 3677357] (70014)End of file found: [client 216.73.216.199:43953] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:00.229860 2026] [core:error] [pid 3677356:tid 3677356] (13)Permission denied: [client 216.73.216.199:32708] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:31:01.243843 2026] [ssl:error] [pid 3679009:tid 3679009] (EAI 2)Name or service not known: [client 144.76.19.72:54964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:01.243876 2026] [ssl:error] [pid 3679009:tid 3679009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:01.300526 2026] [ssl:error] [pid 3676260:tid 3676260] (EAI 2)Name or service not known: [client 144.76.19.72:54974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:01.300555 2026] [ssl:error] [pid 3676260:tid 3676260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:01.736205 2026] [ssl:error] [pid 3677356:tid 3677356] (70014)End of file found: [client 216.73.216.199:32708] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:02.499827 2026] [security2:error] [pid 3676260:tid 3676260] [client 185.191.171.11:47668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6624.0/prev_next,next.html"] [unique_id "amtgJondJhmF4lVhZHGAqwAAAC0"]
[Thu Jul 30 15:31:02.535660 2026] [ssl:error] [pid 3679009:tid 3679009] (70014)End of file found: [client 216.73.216.199:58949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:02.667961 2026] [security2:error] [pid 3665811:tid 3665811] [client 52.238.199.152:33537] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "auroravation.co.uk"] [uri "/wp-config.php"] [unique_id "amtgJopjMLoJGUXK2HoluAAAACI"]
[Thu Jul 30 15:31:02.668187 2026] [security2:error] [pid 3665811:tid 3665811] [client 52.238.199.152:33537] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "auroravation.co.uk"] [uri "/wp-config.php"] [unique_id "amtgJopjMLoJGUXK2HoluAAAACI"]
[Thu Jul 30 15:31:02.668430 2026] [security2:error] [pid 3665811:tid 3665811] [client 52.238.199.152:33537] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "auroravation.co.uk"] [uri "/wp-config.php"] [unique_id "amtgJopjMLoJGUXK2HoluAAAACI"]
[Thu Jul 30 15:31:04.338308 2026] [access_compat:error] [pid 3676261:tid 3676261] [client 136.158.25.236:2064] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:04.352611 2026] [ssl:error] [pid 3660362:tid 3660362] (EAI 2)Name or service not known: [client 144.76.19.72:54986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:04.352641 2026] [ssl:error] [pid 3660362:tid 3660362] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:04.407112 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:54990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:04.407158 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:04.665757 2026] [security2:error] [pid 3676004:tid 3676004] [client 170.106.152.143:53297] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgKEUu4ftHRhZEdvpEcwAAAAk"]
[Thu Jul 30 15:31:04.665815 2026] [security2:error] [pid 3676004:tid 3676004] [client 170.106.152.143:53297] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgKEUu4ftHRhZEdvpEcwAAAAk"]
[Thu Jul 30 15:31:04.666142 2026] [security2:error] [pid 3676004:tid 3676004] [client 170.106.152.143:53297] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgKEUu4ftHRhZEdvpEcwAAAAk"]
[Thu Jul 30 15:31:05.810985 2026] [lsapi:warn] [pid 3660362:tid 3660362] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:31:06.342502 2026] [security2:error] [pid 3677357:tid 3677357] [client 43.130.132.175:21389] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgKtm8KRzOakoiZjdQ-gAAABQ"]
[Thu Jul 30 15:31:06.342557 2026] [security2:error] [pid 3677357:tid 3677357] [client 43.130.132.175:21389] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgKtm8KRzOakoiZjdQ-gAAABQ"]
[Thu Jul 30 15:31:06.342807 2026] [security2:error] [pid 3677357:tid 3677357] [client 43.130.132.175:21389] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgKtm8KRzOakoiZjdQ-gAAABQ"]
[Thu Jul 30 15:31:06.571054 2026] [core:error] [pid 3679624:tid 3679624] (13)Permission denied: [client 216.73.216.199:12618] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty53/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:31:06.872303 2026] [core:error] [pid 3679624:tid 3679624] (13)Permission denied: [client 216.73.216.199:12618] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS3/irq
[Thu Jul 30 15:31:07.463354 2026] [ssl:error] [pid 3677357:tid 3677357] (EAI 2)Name or service not known: [client 144.76.19.72:55000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:07.463398 2026] [ssl:error] [pid 3677357:tid 3677357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:07.474795 2026] [core:error] [pid 3679624:tid 3679624] (13)Permission denied: [client 216.73.216.199:12618] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/rhn/systemid
[Thu Jul 30 15:31:07.520467 2026] [ssl:error] [pid 3676576:tid 3676576] (EAI 2)Name or service not known: [client 144.76.19.72:55016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:07.520498 2026] [ssl:error] [pid 3676576:tid 3676576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:09.553412 2026] [security2:error] [pid 3679909:tid 3679909] [client 43.130.132.175:47223] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgLf7EsYOfI1n7sl7QoQAAACE"]
[Thu Jul 30 15:31:09.553459 2026] [security2:error] [pid 3679909:tid 3679909] [client 43.130.132.175:47223] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgLf7EsYOfI1n7sl7QoQAAACE"]
[Thu Jul 30 15:31:09.553691 2026] [security2:error] [pid 3679909:tid 3679909] [client 43.130.132.175:47223] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgLf7EsYOfI1n7sl7QoQAAACE"]
[Thu Jul 30 15:31:09.582406 2026] [core:error] [pid 3679624:tid 3679624] (13)Permission denied: [client 216.73.216.199:12618] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS3/port
[Thu Jul 30 15:31:10.577874 2026] [ssl:error] [pid 3679909:tid 3679909] (EAI 2)Name or service not known: [client 144.76.19.72:58040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:10.577916 2026] [ssl:error] [pid 3679909:tid 3679909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:10.632810 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:58044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:10.632849 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:10.819433 2026] [access_compat:error] [pid 3677356:tid 3677356] [client 112.209.180.50:16103] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:11.389389 2026] [ssl:error] [pid 3679624:tid 3679624] (70014)End of file found: [client 216.73.216.199:12618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:12.595138 2026] [ssl:error] [pid 3681626:tid 3681626] (70014)End of file found: [client 216.73.216.199:2251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:12.895569 2026] [core:error] [pid 3664268:tid 3664268] (13)Permission denied: [client 216.73.216.199:51955] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:31:13.645144 2026] [security2:error] [pid 3679008:tid 3679008] [client 84.75.155.207:56144] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.msg35316.html"] [unique_id "amtgMaZR7mULjSdrBwr6jwAAACc"]
[Thu Jul 30 15:31:13.645213 2026] [security2:error] [pid 3679008:tid 3679008] [client 84.75.155.207:56144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.msg35316.html"] [unique_id "amtgMaZR7mULjSdrBwr6jwAAACc"]
[Thu Jul 30 15:31:13.645587 2026] [security2:error] [pid 3679008:tid 3679008] [client 84.75.155.207:56144] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgMaZR7mULjSdrBwr6jwAAACc"]
[Thu Jul 30 15:31:13.688512 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:58056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:13.688553 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:13.742805 2026] [ssl:error] [pid 3664968:tid 3664968] (EAI 2)Name or service not known: [client 144.76.19.72:58062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:13.742850 2026] [ssl:error] [pid 3664968:tid 3664968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:15.003052 2026] [core:error] [pid 3664268:tid 3664268] (13)Permission denied: [client 216.73.216.199:51955] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty49/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:31:15.224794 2026] [access_compat:error] [pid 3665811:tid 3665811] [client 112.209.180.50:16258] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:15.717249 2026] [access_compat:error] [pid 3658124:tid 3658124] [client 45.158.164.139:51718] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:31:16.063939 2026] [security2:error] [pid 3679008:tid 3679008] [client 74.7.227.131:59296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.ilkagriese.newtronicmedia.com"] [uri "/"] [unique_id "amtgNKZR7mULjSdrBwr6kQAAACc"]
[Thu Jul 30 15:31:16.405439 2026] [security2:error] [pid 3677315:tid 3677315] [client 162.14.114.97:51804] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amtgNEEINR72-U-YNJK-qAAAAAY"]
[Thu Jul 30 15:31:16.508638 2026] [ssl:error] [pid 3664268:tid 3664268] (70014)End of file found: [client 216.73.216.199:51955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:16.798350 2026] [ssl:error] [pid 3674041:tid 3674041] (EAI 2)Name or service not known: [client 144.76.19.72:58068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:16.798400 2026] [ssl:error] [pid 3674041:tid 3674041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:16.850947 2026] [ssl:error] [pid 3677357:tid 3677357] (EAI 2)Name or service not known: [client 144.76.19.72:58078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:16.850976 2026] [ssl:error] [pid 3677357:tid 3677357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:16.996119 2026] [core:error] [pid 3673220:tid 3673220] (13)Permission denied: [client 216.73.216.199:53609] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty4/subsystem/ttyS1/closing_wait
[Thu Jul 30 15:31:18.009042 2026] [ssl:error] [pid 3673220:tid 3673220] (70014)End of file found: [client 216.73.216.199:53609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:19.426150 2026] [access_compat:error] [pid 3679052:tid 3679052] [client 45.158.164.139:51764] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:31:19.926102 2026] [ssl:error] [pid 3670231:tid 3670231] (EAI 2)Name or service not known: [client 144.76.19.72:40094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:19.926145 2026] [ssl:error] [pid 3670231:tid 3670231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:20.014200 2026] [ssl:error] [pid 3641918:tid 3641918] (EAI 2)Name or service not known: [client 144.76.19.72:40108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:20.014230 2026] [ssl:error] [pid 3641918:tid 3641918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:20.688432 2026] [security2:error] [pid 3677901:tid 3677901] [client 85.208.96.200:48964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/disappointment-blvd-plot"] [unique_id "amtgOB0vOuNCbazBikpPSgAAAAc"]
[Thu Jul 30 15:31:20.776603 2026] [security2:error] [pid 3641918:tid 3641918] [client 114.119.158.38:57919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/cat_ids~102,14,104,15/request_format~html"] [unique_id "amtgOC40uWOiymCQfIy8CwAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/cat_ids~102,14,104/request_format~html
[Thu Jul 30 15:31:21.139557 2026] [security2:error] [pid 3679009:tid 3679009] [client 47.128.99.168:41256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spampmusic.co.uk"] [uri "/robots.txt"] [unique_id "amtgOWcgFzUK-EI2bxJbEgAAAC4"]
[Thu Jul 30 15:31:21.219589 2026] [core:error] [pid 3672700:tid 3672700] (13)Permission denied: [client 216.73.216.199:49974] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 15:31:21.860237 2026] [cgi:error] [pid 3678960:tid 3678960] [client 52.238.199.152:41767] AH02811: stderr from /home/aurorav/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:31:22.122728 2026] [core:error] [pid 3672700:tid 3672700] (13)Permission denied: [client 216.73.216.199:49974] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 15:31:22.547424 2026] [lsapi:warn] [pid 3665811:tid 3665811] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:31:22.721562 2026] [access_compat:error] [pid 3681296:tid 3681296] [client 112.209.180.50:16531] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:22.734259 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:49974] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:22.808344 2026] [security2:error] [pid 3641918:tid 3641918] [client 114.119.158.38:57929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/cat_ids~102,14,104,15/request_format~html"] [unique_id "amtgOi40uWOiymCQfIy8DAAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/cat_ids~102,14,104/request_format~html
[Thu Jul 30 15:31:23.072855 2026] [ssl:error] [pid 3681129:tid 3681129] (EAI 2)Name or service not known: [client 144.76.19.72:40116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:23.072913 2026] [ssl:error] [pid 3681129:tid 3681129] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:23.125813 2026] [ssl:error] [pid 3679008:tid 3679008] (EAI 2)Name or service not known: [client 144.76.19.72:40120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:23.125839 2026] [ssl:error] [pid 3679008:tid 3679008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:23.787687 2026] [security2:error] [pid 3677315:tid 3677315] [client 162.14.114.97:52596] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amtgO0EINR72-U-YNJK-qgAAAAY"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 15:31:25.445285 2026] [access_compat:error] [pid 3673124:tid 3673124] [client 136.158.25.236:3706] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:26.182863 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:40128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:26.182890 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:26.236015 2026] [ssl:error] [pid 3679909:tid 3679909] (EAI 2)Name or service not known: [client 144.76.19.72:40138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:26.236038 2026] [ssl:error] [pid 3679909:tid 3679909] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:26.641206 2026] [ssl:error] [pid 3665811:tid 3665811] (70014)End of file found: [client 216.73.216.199:55703] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:26.907952 2026] [security2:error] [pid 3677357:tid 3677357] [client 162.14.114.97:56766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtgPtm8KRzOakoiZjdQ_wAAABQ"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 15:31:28.141622 2026] [core:error] [pid 3679009:tid 3679009] (13)Permission denied: [client 216.73.216.199:9041] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS0/iomem_base
[Thu Jul 30 15:31:29.220565 2026] [core:error] [pid 3679009:tid 3679009] (13)Permission denied: [client 216.73.216.199:9041] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty22/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:31:29.287614 2026] [ssl:error] [pid 3676260:tid 3676260] (EAI 2)Name or service not known: [client 144.76.19.72:40144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:29.287644 2026] [ssl:error] [pid 3676260:tid 3676260] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:29.342509 2026] [ssl:error] [pid 3658124:tid 3658124] (EAI 2)Name or service not known: [client 144.76.19.72:40150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:29.342558 2026] [ssl:error] [pid 3658124:tid 3658124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:29.346043 2026] [ssl:error] [pid 3679009:tid 3679009] (70014)End of file found: [client 216.73.216.199:9041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:30.554158 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:3555] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:32.394676 2026] [ssl:error] [pid 3676576:tid 3676576] (EAI 2)Name or service not known: [client 144.76.19.72:45752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:32.394705 2026] [ssl:error] [pid 3676576:tid 3676576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:32.585747 2026] [ssl:error] [pid 3662074:tid 3662074] (EAI 2)Name or service not known: [client 144.76.19.72:45768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:32.585780 2026] [ssl:error] [pid 3662074:tid 3662074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:34.770012 2026] [core:error] [pid 3667214:tid 3667214] (13)Permission denied: [client 216.73.216.199:31066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS0/iomem_base
[Thu Jul 30 15:31:35.517752 2026] [access_compat:error] [pid 3665000:tid 3665000] [client 136.158.25.236:4673] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:35.637640 2026] [ssl:error] [pid 3682889:tid 3682889] (EAI 2)Name or service not known: [client 144.76.19.72:45776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:35.637678 2026] [ssl:error] [pid 3682889:tid 3682889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:35.694534 2026] [ssl:error] [pid 3672700:tid 3672700] (EAI 2)Name or service not known: [client 144.76.19.72:45786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:35.694563 2026] [ssl:error] [pid 3672700:tid 3672700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:35.816558 2026] [cgi:error] [pid 3641918:tid 3641918] [client 52.238.199.152:37606] AH02811: stderr from /home/aurorav/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:31:37.183892 2026] [core:error] [pid 3667214:tid 3667214] (13)Permission denied: [client 216.73.216.199:31066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS3/irq
[Thu Jul 30 15:31:37.781386 2026] [ssl:error] [pid 3667214:tid 3667214] (70014)End of file found: [client 216.73.216.199:31066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:38.767861 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:45796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:38.767899 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:38.844935 2026] [ssl:error] [pid 3664968:tid 3664968] (EAI 2)Name or service not known: [client 144.76.19.72:45806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:38.844960 2026] [ssl:error] [pid 3664968:tid 3664968] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:38.985631 2026] [ssl:error] [pid 3672570:tid 3672570] (70014)End of file found: [client 216.73.216.199:38238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:39.884497 2026] [ssl:error] [pid 3682889:tid 3682889] (70014)End of file found: [client 216.73.216.199:42617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:41.900548 2026] [ssl:error] [pid 3682572:tid 3682572] (EAI 2)Name or service not known: [client 144.76.19.72:65342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:41.900594 2026] [ssl:error] [pid 3682572:tid 3682572] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:41.952586 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:65352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:41.952658 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:42.250173 2026] [access_compat:error] [pid 3673124:tid 3673124] [client 112.209.180.50:17306] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:42.390638 2026] [ssl:error] [pid 3679008:tid 3679008] (70014)End of file found: [client 216.73.216.199:14456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:42.999501 2026] [ssl:error] [pid 3682933:tid 3682933] (70014)End of file found: [client 216.73.216.199:11531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:43.195530 2026] [cgi:error] [pid 3679053:tid 3679053] [client 52.238.199.152:4805] AH02811: stderr from /home/aurorav/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:31:44.464946 2026] [security2:error] [pid 3679053:tid 3679053] [client 52.238.199.152:4805] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "auroravation.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtgUN3suV0-mkLNmpgJHgAAAEI"]
[Thu Jul 30 15:31:44.465094 2026] [security2:error] [pid 3679053:tid 3679053] [client 52.238.199.152:4805] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "auroravation.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtgUN3suV0-mkLNmpgJHgAAAEI"]
[Thu Jul 30 15:31:44.465298 2026] [security2:error] [pid 3679053:tid 3679053] [client 52.238.199.152:4805] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "auroravation.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtgUN3suV0-mkLNmpgJHgAAAEI"]
[Thu Jul 30 15:31:44.501584 2026] [core:error] [pid 3670231:tid 3670231] (13)Permission denied: [client 216.73.216.199:28244] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/13:66/subsystem/input0/device/driver/bind
[Thu Jul 30 15:31:44.801905 2026] [core:error] [pid 3670231:tid 3670231] (13)Permission denied: [client 216.73.216.199:28244] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory168/node0/compact
[Thu Jul 30 15:31:45.004916 2026] [ssl:error] [pid 3683626:tid 3683626] (EAI 2)Name or service not known: [client 144.76.19.72:65360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:45.004970 2026] [ssl:error] [pid 3683626:tid 3683626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:45.056652 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:65366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:45.056682 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:45.102699 2026] [ssl:error] [pid 3670231:tid 3670231] (70014)End of file found: [client 216.73.216.199:28244] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:31:45.411446 2026] [lsapi:warn] [pid 3677357:tid 3677357] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:31:46.138982 2026] [access_compat:error] [pid 3671167:tid 3671167] [client 136.158.25.236:5691] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:47.699682 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:50906] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/13:67/subsystem/input1/device/driver/bind
[Thu Jul 30 15:31:48.130559 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:65382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:48.130588 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:48.183306 2026] [ssl:error] [pid 3679009:tid 3679009] (EAI 2)Name or service not known: [client 144.76.19.72:65396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:48.183332 2026] [ssl:error] [pid 3679009:tid 3679009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:48.989858 2026] [core:error] [pid 3681296:tid 3681296] [client 66.249.66.8:62371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:31:48.989884 2026] [core:error] [pid 3681296:tid 3681296] [client 66.249.66.8:62371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:31:50.419456 2026] [security2:error] [pid 3677901:tid 3677901] [client 155.133.142.67:46229] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/xmlrpc.php"] [unique_id "amtgVh0vOuNCbazBikpPTwAAAAc"]
[Thu Jul 30 15:31:50.808508 2026] [lsapi:warn] [pid 3683626:tid 3683626] [client 54.235.232.111:33524] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 15:31:51.279881 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:30134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:51.279915 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:51.333159 2026] [ssl:error] [pid 3682933:tid 3682933] (EAI 2)Name or service not known: [client 144.76.19.72:30138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:51.333187 2026] [ssl:error] [pid 3682933:tid 3682933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:52.524205 2026] [access_compat:error] [pid 3671167:tid 3671167] [client 136.158.25.236:6339] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:53.227950 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:50906] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_vcpu/alloc_calls
[Thu Jul 30 15:31:53.887967 2026] [authz_core:error] [pid 3654776:tid 3654776] [client 20.104.22.47:65480] AH01630: client denied by server configuration: /home/alismcom/public_html/alism.net/php.ini
[Thu Jul 30 15:31:54.409621 2026] [ssl:error] [pid 3670231:tid 3670231] (EAI 2)Name or service not known: [client 144.76.19.72:30150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:54.409662 2026] [ssl:error] [pid 3670231:tid 3670231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:54.465729 2026] [ssl:error] [pid 3667214:tid 3667214] (EAI 2)Name or service not known: [client 144.76.19.72:30162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:54.465757 2026] [ssl:error] [pid 3667214:tid 3667214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:55.035043 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:50906] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lvp_cache/cpu_slabs
[Thu Jul 30 15:31:56.243718 2026] [core:error] [pid 3679008:tid 3679008] (13)Permission denied: [client 216.73.216.199:41491] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/biovec-max/objects_partial
[Thu Jul 30 15:31:56.842118 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:50906] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Operand/cache_dma
[Thu Jul 30 15:31:56.884625 2026] [access_compat:error] [pid 3676576:tid 3676576] [client 112.209.180.50:13763] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:31:57.521598 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:30168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:57.521634 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:31:57.578567 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:30178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:31:57.578596 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:00.633565 2026] [ssl:error] [pid 3665000:tid 3665000] (EAI 2)Name or service not known: [client 144.76.19.72:44124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:00.633602 2026] [ssl:error] [pid 3665000:tid 3665000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:00.687007 2026] [ssl:error] [pid 3677357:tid 3677357] (EAI 2)Name or service not known: [client 144.76.19.72:44134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:00.687039 2026] [ssl:error] [pid 3677357:tid 3677357] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:02.721974 2026] [security2:error] [pid 3681026:tid 3681026] [client 14.175.116.130:60888] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgYgIr8m8PhmOq3sTRTQAAAAE"]
[Thu Jul 30 15:32:02.722037 2026] [security2:error] [pid 3681026:tid 3681026] [client 14.175.116.130:60888] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgYgIr8m8PhmOq3sTRTQAAAAE"]
[Thu Jul 30 15:32:02.722284 2026] [security2:error] [pid 3681026:tid 3681026] [client 14.175.116.130:60888] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgYgIr8m8PhmOq3sTRTQAAAAE"]
[Thu Jul 30 15:32:02.878096 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:50906] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/PING/align
[Thu Jul 30 15:32:03.471642 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:50906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:03.741460 2026] [ssl:error] [pid 3685841:tid 3685841] (EAI 2)Name or service not known: [client 144.76.19.72:44148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:03.741506 2026] [ssl:error] [pid 3685841:tid 3685841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:03.795525 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:44154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:03.795558 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:04.684822 2026] [core:error] [pid 3679008:tid 3679008] (13)Permission denied: [client 216.73.216.199:41491] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-2k/total_objects
[Thu Jul 30 15:32:06.341624 2026] [security2:error] [pid 3677901:tid 3677901] [client 103.185.250.86:63935] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgZh0vOuNCbazBikpPVAAAAAc"]
[Thu Jul 30 15:32:06.341690 2026] [security2:error] [pid 3677901:tid 3677901] [client 103.185.250.86:63935] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgZh0vOuNCbazBikpPVAAAAAc"]
[Thu Jul 30 15:32:06.341964 2026] [security2:error] [pid 3677901:tid 3677901] [client 103.185.250.86:63935] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgZh0vOuNCbazBikpPVAAAAAc"]
[Thu Jul 30 15:32:06.728117 2026] [lsapi:warn] [pid 3685655:tid 3685655] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:32:06.851760 2026] [ssl:error] [pid 3683626:tid 3683626] (EAI 2)Name or service not known: [client 144.76.19.72:44156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:06.851793 2026] [ssl:error] [pid 3683626:tid 3683626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:06.905974 2026] [ssl:error] [pid 3685657:tid 3685657] (EAI 2)Name or service not known: [client 144.76.19.72:44170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:06.906015 2026] [ssl:error] [pid 3685657:tid 3685657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:07.056005 2026] [access_compat:error] [pid 3685517:tid 3685517] [client 136.158.25.236:7678] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:07.107243 2026] [ssl:error] [pid 3681626:tid 3681626] (70014)End of file found: [client 216.73.216.199:23632] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:09.561455 2026] [ssl:error] [pid 3665000:tid 3665000] (70014)End of file found: [client 216.73.216.199:15520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:09.959860 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:43654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:09.959897 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:10.012774 2026] [ssl:error] [pid 3681026:tid 3681026] (EAI 2)Name or service not known: [client 144.76.19.72:43660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:10.012808 2026] [ssl:error] [pid 3681026:tid 3681026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:12.903274 2026] [security2:error] [pid 3682889:tid 3682889] [client 185.191.171.3:25528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5541.0.html"] [unique_id "amtgbNx67uT38KnpTQUs3AAAACk"]
[Thu Jul 30 15:32:13.070879 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:43666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:13.070942 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:13.129079 2026] [ssl:error] [pid 3681626:tid 3681626] (EAI 2)Name or service not known: [client 144.76.19.72:43682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:13.129107 2026] [ssl:error] [pid 3681626:tid 3681626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:13.573243 2026] [access_compat:error] [pid 3641918:tid 3641918] [client 136.158.25.236:8282] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:14.678686 2026] [cgi:error] [pid 3667214:tid 3667214] [client 158.158.41.78:12829] AH02812: stderr from /home/hugoashmore/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:32:15.360207 2026] [core:crit] [pid 3662119:tid 3662119] (13)Permission denied: [client 216.73.216.199:7640] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/ldconfig/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/ldconfig/' is executable
[Thu Jul 30 15:32:15.360282 2026] [core:crit] [pid 3662119:tid 3662119] (13)Permission denied: [client 216.73.216.199:7640] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/private/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/cache/private/' is executable
[Thu Jul 30 15:32:15.656576 2026] [ssl:error] [pid 3662119:tid 3662119] (70014)End of file found: [client 216.73.216.199:7640] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:16.137216 2026] [security2:error] [pid 3648656:tid 3648656] [client 114.119.157.166:32361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/wp-content/uploads/2020/03/R445-007-768x1024.jpg"] [unique_id "amtgcCKDRAglsH-kd_obVgAAABA"], referer: https://www.wurlitzer.co.uk/wp-content/uploads/2020/03/R445-007-768x1024.jpg
[Thu Jul 30 15:32:16.187454 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:43684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:16.187486 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:16.241521 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:43698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:16.241553 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:17.152345 2026] [authz_core:error] [pid 3685615:tid 3685615] [client 66.249.66.35:43258] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:32:17.155010 2026] [authz_core:error] [pid 3685615:tid 3685615] [client 66.249.66.35:43258] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:32:17.603665 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 136.158.25.236:8684] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:18.059544 2026] [access_compat:error] [pid 3673124:tid 3673124] [client 45.158.164.139:55148] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:32:18.401126 2026] [core:error] [pid 3679008:tid 3679008] (13)Permission denied: [client 216.73.216.199:41491] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/system.slice/memory.pressure_level
[Thu Jul 30 15:32:19.064798 2026] [security2:error] [pid 3662117:tid 3662117] [client 147.135.212.202:44908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hornsey-town-hall.org.uk"] [uri "/robots.txt"] [unique_id "amtgcw3C4mueXBSPH1nnjAAAAAo"]
[Thu Jul 30 15:32:19.303464 2026] [ssl:error] [pid 3679624:tid 3679624] (EAI 2)Name or service not known: [client 144.76.19.72:43708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:19.303494 2026] [ssl:error] [pid 3679624:tid 3679624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:19.360904 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:43710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:19.360934 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:19.622134 2026] [core:error] [pid 3672700:tid 3672700] (13)Permission denied: [client 216.73.216.199:26436] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory178/node0/compact
[Thu Jul 30 15:32:19.923208 2026] [core:error] [pid 3672700:tid 3672700] (13)Permission denied: [client 216.73.216.199:26436] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory41/node0/compact
[Thu Jul 30 15:32:20.484858 2026] [access_compat:error] [pid 3673124:tid 3673124] [client 45.158.164.139:55176] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:32:20.526135 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:26436] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:21.121540 2026] [security2:error] [pid 3685517:tid 3685517] [client 185.191.171.3:51604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/desiree-lindstrom-house"] [unique_id "amtgdfNp9S1A5gfWM1JRWQAAAAM"]
[Thu Jul 30 15:32:21.352886 2026] [lsapi:warn] [pid 3683626:tid 3683626] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:32:21.632823 2026] [security2:error] [pid 3685615:tid 3685615] [client 47.128.17.5:21024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/robots.txt"] [unique_id "amtgdWu2JG3_VdYelXV0pAAAAAY"]
[Thu Jul 30 15:32:22.003825 2026] [access_compat:error] [pid 3677901:tid 3677901] [client 45.158.164.139:60906] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:32:22.351910 2026] [ssl:error] [pid 3679008:tid 3679008] (70014)End of file found: [client 216.73.216.199:41491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:22.419579 2026] [ssl:error] [pid 3683626:tid 3683626] (EAI 2)Name or service not known: [client 144.76.19.72:54192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:22.419613 2026] [ssl:error] [pid 3683626:tid 3683626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:22.472277 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:54204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:22.472306 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:22.949822 2026] [ssl:error] [pid 3682932:tid 3682932] (70014)End of file found: [client 216.73.216.199:1549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:24.356398 2026] [security2:error] [pid 3663669:tid 3663669] [client 102.42.130.157:61544] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgeAPOAGNsyQ_42zZMuQAAABk"]
[Thu Jul 30 15:32:24.356443 2026] [security2:error] [pid 3663669:tid 3663669] [client 102.42.130.157:61544] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgeAPOAGNsyQ_42zZMuQAAABk"]
[Thu Jul 30 15:32:24.356695 2026] [security2:error] [pid 3663669:tid 3663669] [client 102.42.130.157:61544] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgeAPOAGNsyQ_42zZMuQAAABk"]
[Thu Jul 30 15:32:24.479924 2026] [security2:error] [pid 3679053:tid 3679053] [client 129.159.56.14:42016] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/.env"] [unique_id "amtgeN3suV0-mkLNmpgJMQAAAEI"]
[Thu Jul 30 15:32:24.480113 2026] [security2:error] [pid 3679053:tid 3679053] [client 129.159.56.14:42016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/.env"] [unique_id "amtgeN3suV0-mkLNmpgJMQAAAEI"]
[Thu Jul 30 15:32:24.480306 2026] [security2:error] [pid 3679053:tid 3679053] [client 129.159.56.14:42016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.nativespace.com.ns-pandora.com"] [uri "/.env"] [unique_id "amtgeN3suV0-mkLNmpgJMQAAAEI"]
[Thu Jul 30 15:32:25.525641 2026] [ssl:error] [pid 3664268:tid 3664268] (EAI 2)Name or service not known: [client 144.76.19.72:54208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:25.525668 2026] [ssl:error] [pid 3664268:tid 3664268] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:25.578500 2026] [ssl:error] [pid 3667214:tid 3667214] (EAI 2)Name or service not known: [client 144.76.19.72:54220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:25.578524 2026] [ssl:error] [pid 3667214:tid 3667214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:26.235481 2026] [authz_core:error] [pid 3641918:tid 3641918] [client 66.249.66.33:37251] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:32:26.238146 2026] [authz_core:error] [pid 3641918:tid 3641918] [client 66.249.66.33:37251] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:32:27.505175 2026] [ssl:error] [pid 3664268:tid 3664268] (70014)End of file found: [client 216.73.216.199:10615] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:28.051301 2026] [access_compat:error] [pid 3682889:tid 3682889] [client 136.158.25.236:9585] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:28.408476 2026] [ssl:error] [pid 3686789:tid 3686789] (70014)End of file found: [client 216.73.216.199:49210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:29.140160 2026] [ssl:error] [pid 3686847:tid 3686847] (EAI 2)Name or service not known: [client 144.76.19.72:54222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:29.140204 2026] [ssl:error] [pid 3686847:tid 3686847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:29.192728 2026] [ssl:error] [pid 3686848:tid 3686848] (EAI 2)Name or service not known: [client 144.76.19.72:54226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:29.192755 2026] [ssl:error] [pid 3686848:tid 3686848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:31.128569 2026] [ssl:error] [pid 3662117:tid 3662117] (70014)End of file found: [client 216.73.216.199:26503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:32.114209 2026] [security2:error] [pid 3665811:tid 3665811] [client 47.128.27.195:42232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/robots.txt"] [unique_id "amtggIpjMLoJGUXK2HomCAAAACI"]
[Thu Jul 30 15:32:32.249238 2026] [ssl:error] [pid 3685841:tid 3685841] (EAI 2)Name or service not known: [client 144.76.19.72:26874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:32.249280 2026] [ssl:error] [pid 3685841:tid 3685841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:32.304351 2026] [ssl:error] [pid 3671167:tid 3671167] (EAI 2)Name or service not known: [client 144.76.19.72:26882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:32.304407 2026] [ssl:error] [pid 3671167:tid 3671167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:32.850285 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:55996] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:33.764598 2026] [ssl:error] [pid 3685517:tid 3685517] (70014)End of file found: [client 216.73.216.199:22357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:34.321472 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 136.158.25.236:10066] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:35.165829 2026] [security2:error] [pid 3686789:tid 3686789] [client 51.89.129.131:47628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/creative-solutions/"] [unique_id "amtgg77V1mAGWbhmfq_lJwAAAA4"]
[Thu Jul 30 15:32:35.359130 2026] [ssl:error] [pid 3679624:tid 3679624] (EAI 2)Name or service not known: [client 144.76.19.72:26886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:35.359161 2026] [ssl:error] [pid 3679624:tid 3679624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:35.418469 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:26898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:35.418493 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:36.519133 2026] [cgi:error] [pid 3671167:tid 3671167] [client 216.73.216.199:35174] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/lib64/perl5/Config_git.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 15:32:36.519192 2026] [cgi:error] [pid 3671167:tid 3671167] [client 216.73.216.199:35174] End of script output before headers: Config_git.pl
[Thu Jul 30 15:32:36.662464 2026] [security2:error] [pid 3686847:tid 3686847] [client 47.128.19.249:46460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spampmusic.co.uk"] [uri "/robots.txt"] [unique_id "amtghN3C_3eDr0Zvy7R0bwAAABs"]
[Thu Jul 30 15:32:36.856897 2026] [lsapi:warn] [pid 3678921:tid 3678921] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:32:37.107398 2026] [ssl:error] [pid 3662117:tid 3662117] (70014)End of file found: [client 216.73.216.199:65231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:37.273982 2026] [authz_core:error] [pid 3679624:tid 3679624] [client 212.34.128.179:62537] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log, referer: http://marcwhiffen.co.uk/
[Thu Jul 30 15:32:38.206934 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:32:38.337973 2026] [ssl:error] [pid 3682932:tid 3682932] (70014)End of file found: [client 216.73.216.199:58182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:38.391414 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:32:38.473303 2026] [ssl:error] [pid 3679624:tid 3679624] (EAI 2)Name or service not known: [client 144.76.19.72:26914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:38.473335 2026] [ssl:error] [pid 3679624:tid 3679624] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:38.566477 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:26928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:38.566502 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:38.576590 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:32:38.630794 2026] [access_compat:error] [pid 3684939:tid 3684939] [client 112.209.180.50:15607] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:38.761960 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:32:38.949357 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.git
[Thu Jul 30 15:32:39.133456 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:32:39.319525 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env
[Thu Jul 30 15:32:39.504527 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.local
[Thu Jul 30 15:32:39.693560 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.production
[Thu Jul 30 15:32:39.884522 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.staging
[Thu Jul 30 15:32:40.075388 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.development
[Thu Jul 30 15:32:40.259952 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.test
[Thu Jul 30 15:32:40.453836 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.remote
[Thu Jul 30 15:32:40.641549 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.bak
[Thu Jul 30 15:32:40.828897 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.backup
[Thu Jul 30 15:32:41.015535 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.save
[Thu Jul 30 15:32:41.199973 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.old
[Thu Jul 30 15:32:41.391053 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.sample
[Thu Jul 30 15:32:41.575843 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.example
[Thu Jul 30 15:32:41.761489 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.dev
[Thu Jul 30 15:32:41.924882 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:56288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:41.924917 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:41.946346 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.prod
[Thu Jul 30 15:32:41.973888 2026] [authz_core:error] [pid 3686905:tid 3686905] [client 66.249.66.33:48538] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:32:41.976539 2026] [authz_core:error] [pid 3686905:tid 3686905] [client 66.249.66.33:48538] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:32:41.982593 2026] [ssl:error] [pid 3654776:tid 3654776] (EAI 2)Name or service not known: [client 144.76.19.72:56300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:41.982620 2026] [ssl:error] [pid 3654776:tid 3654776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:42.132106 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.stage
[Thu Jul 30 15:32:42.316841 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.ci
[Thu Jul 30 15:32:42.501899 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.docker
[Thu Jul 30 15:32:42.688033 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.live
[Thu Jul 30 15:32:42.872588 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.preprod
[Thu Jul 30 15:32:43.057219 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.uat
[Thu Jul 30 15:32:43.252982 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.dist
[Thu Jul 30 15:32:43.437385 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env.swp
[Thu Jul 30 15:32:43.621879 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.env~
[Thu Jul 30 15:32:43.807367 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/app
[Thu Jul 30 15:32:43.991823 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/apps
[Thu Jul 30 15:32:44.176361 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/api
[Thu Jul 30 15:32:44.360724 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/web
[Thu Jul 30 15:32:44.558102 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/site
[Thu Jul 30 15:32:44.742472 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/public
[Thu Jul 30 15:32:44.927575 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 15:32:45.037342 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:56306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:45.037367 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:45.090357 2026] [ssl:error] [pid 3684939:tid 3684939] (EAI 2)Name or service not known: [client 144.76.19.72:56314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:45.090398 2026] [ssl:error] [pid 3684939:tid 3684939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:45.110131 2026] [access_compat:error] [pid 3682932:tid 3682932] [client 112.209.180.50:15895] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:45.135259 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/backend
[Thu Jul 30 15:32:45.332186 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/server
[Thu Jul 30 15:32:45.516648 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/frontend
[Thu Jul 30 15:32:45.701906 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/src
[Thu Jul 30 15:32:45.886629 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/core
[Thu Jul 30 15:32:46.126488 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/core
[Thu Jul 30 15:32:46.314652 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/core
[Thu Jul 30 15:32:46.337221 2026] [security2:error] [pid 3685615:tid 3685615] [client 114.119.158.38:60255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~9-3-2020"] [unique_id "amtgjmu2JG3_VdYelXV0rQAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eagenda/page_offset%7E3/time_limit%7E1564873200/cat_ids%7E15/request_format%7Ehtml
[Thu Jul 30 15:32:46.500359 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/config
[Thu Jul 30 15:32:46.684818 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/private
[Thu Jul 30 15:32:46.874513 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/current
[Thu Jul 30 15:32:47.059178 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/release
[Thu Jul 30 15:32:47.175165 2026] [core:error] [pid 3677901:tid 3677901] (13)Permission denied: [client 216.73.216.199:18266] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS0/uartclk
[Thu Jul 30 15:32:47.248286 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/releases
[Thu Jul 30 15:32:47.436270 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/shared
[Thu Jul 30 15:32:47.622596 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/deploy
[Thu Jul 30 15:32:47.810696 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/build
[Thu Jul 30 15:32:47.833276 2026] [security2:error] [pid 3686905:tid 3686905] [client 114.119.158.38:60267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~9-3-2020"] [unique_id "amtgj92rX9FxgkCxYeKcMwAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eagenda/page_offset%7E3/time_limit%7E1564873200/cat_ids%7E15/request_format%7Ehtml
[Thu Jul 30 15:32:47.994928 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dist
[Thu Jul 30 15:32:48.148601 2026] [ssl:error] [pid 3685657:tid 3685657] (EAI 2)Name or service not known: [client 144.76.19.72:56318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:48.148630 2026] [ssl:error] [pid 3685657:tid 3685657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:48.178853 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/public_html
[Thu Jul 30 15:32:48.204646 2026] [ssl:error] [pid 3662117:tid 3662117] (EAI 2)Name or service not known: [client 144.76.19.72:56326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:48.204675 2026] [ssl:error] [pid 3662117:tid 3662117] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:48.405757 2026] [security2:error] [pid 3679052:tid 3679052] [client 43.157.168.43:38428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.butteredcat.com"] [uri "/"] [unique_id "amtgkEqUBSn_WNwhBxx2AwAAAEA"]
[Thu Jul 30 15:32:48.406637 2026] [authz_core:error] [pid 3679052:tid 3679052] [client 43.157.168.43:38428] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 15:32:48.424796 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/htdocs
[Thu Jul 30 15:32:48.617484 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www
[Thu Jul 30 15:32:48.687779 2026] [ssl:error] [pid 3677901:tid 3677901] (70014)End of file found: [client 216.73.216.199:18266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:48.803383 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/html
[Thu Jul 30 15:32:48.988107 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/live
[Thu Jul 30 15:32:49.012139 2026] [access_compat:error] [pid 3686478:tid 3686478] [client 136.158.25.236:11462] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:49.174077 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/prod
[Thu Jul 30 15:32:49.362051 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dev
[Thu Jul 30 15:32:49.546841 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/staging
[Thu Jul 30 15:32:49.733433 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/laravel
[Thu Jul 30 15:32:49.919137 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/symfony
[Thu Jul 30 15:32:50.105749 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wordpress
[Thu Jul 30 15:32:50.290751 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp
[Thu Jul 30 15:32:50.475234 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cms
[Thu Jul 30 15:32:50.661965 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/drupal
[Thu Jul 30 15:32:50.855573 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/joomla
[Thu Jul 30 15:32:51.040543 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/magento
[Thu Jul 30 15:32:51.225606 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/shopify
[Thu Jul 30 15:32:51.262243 2026] [ssl:error] [pid 3672637:tid 3672637] (EAI 2)Name or service not known: [client 144.76.19.72:30324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:51.262280 2026] [ssl:error] [pid 3672637:tid 3672637] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:51.318919 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:30332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:51.318949 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:51.415968 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/prestashop
[Thu Jul 30 15:32:51.600510 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/v1
[Thu Jul 30 15:32:51.785269 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/v2
[Thu Jul 30 15:32:51.973121 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/v3
[Thu Jul 30 15:32:52.157204 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/api
[Thu Jul 30 15:32:52.344151 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/api
[Thu Jul 30 15:32:52.347144 2026] [security2:error] [pid 3686847:tid 3686847] [client 43.136.167.197:43428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bashforthbell.com"] [uri "/"] [unique_id "amtglN3C_3eDr0Zvy7R0cgAAABs"]
[Thu Jul 30 15:32:52.530364 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/rest
[Thu Jul 30 15:32:52.614476 2026] [authz_core:error] [pid 3679009:tid 3679009] [client 47.79.205.206:50896] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 15:32:52.622320 2026] [authz_core:error] [pid 3679009:tid 3679009] [client 47.79.205.206:50896] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 15:32:52.639790 2026] [ssl:error] [pid 3665811:tid 3665811] (70014)End of file found: [client 216.73.216.199:64133] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:52.715719 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/graphql
[Thu Jul 30 15:32:52.911880 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gateway
[Thu Jul 30 15:32:53.096308 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/microservice
[Thu Jul 30 15:32:53.265552 2026] [lsapi:warn] [pid 3679009:tid 3679009] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:32:53.280547 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/service
[Thu Jul 30 15:32:53.465673 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/vendor
[Thu Jul 30 15:32:53.650524 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lib
[Thu Jul 30 15:32:53.837010 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/database
[Thu Jul 30 15:32:54.025488 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/resources
[Thu Jul 30 15:32:54.210905 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/storage
[Thu Jul 30 15:32:54.240532 2026] [security2:error] [pid 3687960:tid 3687960] [client 43.136.167.197:45994] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amtglv7_gxREFlsdtZo8XgAAACU"], referer: http://www.bashforthbell.com
[Thu Jul 30 15:32:54.346801 2026] [ssl:error] [pid 3682932:tid 3682932] (70014)End of file found: [client 216.73.216.199:1500] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:32:54.373168 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:30338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:54.373203 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:54.395586 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/assets
[Thu Jul 30 15:32:54.426520 2026] [ssl:error] [pid 3662074:tid 3662074] (EAI 2)Name or service not known: [client 144.76.19.72:30348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:54.426553 2026] [ssl:error] [pid 3662074:tid 3662074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:54.559813 2026] [security2:error] [pid 3686847:tid 3686847] [client 170.106.35.137:45966] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.p2studio.co.uk"] [uri "/"] [unique_id "amtglt3C_3eDr0Zvy7R0dAAAABs"]
[Thu Jul 30 15:32:54.587205 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/uploads
[Thu Jul 30 15:32:54.771770 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/internal
[Thu Jul 30 15:32:54.955880 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tools
[Thu Jul 30 15:32:55.141808 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/scripts
[Thu Jul 30 15:32:55.326218 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/portal
[Thu Jul 30 15:32:55.519189 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dashboard
[Thu Jul 30 15:32:55.704728 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/panel
[Thu Jul 30 15:32:55.894638 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/crm
[Thu Jul 30 15:32:56.079567 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/erp
[Thu Jul 30 15:32:56.264489 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/shop
[Thu Jul 30 15:32:56.448961 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/store
[Thu Jul 30 15:32:56.506021 2026] [security2:error] [pid 3687997:tid 3687997] [client 94.154.43.186:45656] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "warform.freakorgeek.com"] [uri "/.env"] [unique_id "amtgmGIRr3KnoPiDcSWMAAAAACk"]
[Thu Jul 30 15:32:56.506255 2026] [security2:error] [pid 3687997:tid 3687997] [client 94.154.43.186:45656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "warform.freakorgeek.com"] [uri "/.env"] [unique_id "amtgmGIRr3KnoPiDcSWMAAAAACk"]
[Thu Jul 30 15:32:56.506528 2026] [security2:error] [pid 3687997:tid 3687997] [client 94.154.43.186:45656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "warform.freakorgeek.com"] [uri "/.env"] [unique_id "amtgmGIRr3KnoPiDcSWMAAAAACk"]
[Thu Jul 30 15:32:56.556004 2026] [security2:error] [pid 3687999:tid 3687999] [client 122.51.236.174:47628] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "amtgmMrppOX9g4-P_rHWCQAAAC0"]
[Thu Jul 30 15:32:56.579888 2026] [cgi:error] [pid 3664268:tid 3664268] [client 216.73.216.199:53921] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-Net-SSLeay/examples/ephemeral.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 15:32:56.579925 2026] [cgi:error] [pid 3664268:tid 3664268] [client 216.73.216.199:53921] End of script output before headers: ephemeral.pl
[Thu Jul 30 15:32:56.642903 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/saas
[Thu Jul 30 15:32:56.759367 2026] [security2:error] [pid 3688000:tid 3688000] [client 74.7.242.16:34072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.woodsandgreen.rediscoveredgarden.co.uk"] [uri "/"] [unique_id "amtgmEuUWhXNH_QcviQUdAAAAC8"]
[Thu Jul 30 15:32:56.830860 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/client
[Thu Jul 30 15:32:57.017748 2026] [access_compat:error] [pid 3686687:tid 3686687] [client 159.65.15.150:58680] AH01797: client denied by server configuration: /home/pbyawsga/public_html/project
[Thu Jul 30 15:32:57.480705 2026] [ssl:error] [pid 3687998:tid 3687998] (EAI 2)Name or service not known: [client 144.76.19.72:30360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:57.480739 2026] [ssl:error] [pid 3687998:tid 3687998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:57.539799 2026] [ssl:error] [pid 3688000:tid 3688000] (EAI 2)Name or service not known: [client 144.76.19.72:30366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:32:57.539847 2026] [ssl:error] [pid 3688000:tid 3688000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:32:57.596157 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/node
[Thu Jul 30 15:32:57.780880 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/express
[Thu Jul 30 15:32:57.964036 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/next
[Thu Jul 30 15:32:58.147554 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/nuxt
[Thu Jul 30 15:32:58.332579 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/nest
[Thu Jul 30 15:32:58.515991 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/backup
[Thu Jul 30 15:32:58.713323 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/backups
[Thu Jul 30 15:32:58.896613 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/old
[Thu Jul 30 15:32:59.087767 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tmp/.env
[Thu Jul 30 15:32:59.273194 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/temp
[Thu Jul 30 15:32:59.459288 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lab
[Thu Jul 30 15:32:59.524235 2026] [access_compat:error] [pid 3665811:tid 3665811] [client 136.158.25.236:12585] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:32:59.640764 2026] [security2:error] [pid 3681130:tid 3681130] [client 162.14.66.219:35332] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.co.uk"] [uri "/"] [unique_id "amtgm4mWRFSG_-PgPZKm_QAAACM"]
[Thu Jul 30 15:32:59.644291 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cronlab
[Thu Jul 30 15:32:59.827930 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cron
[Thu Jul 30 15:33:00.013776 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/en
[Thu Jul 30 15:33:00.208584 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/administrator/.env
[Thu Jul 30 15:33:00.398493 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/psnlink
[Thu Jul 30 15:33:00.581664 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/exapi
[Thu Jul 30 15:33:00.598030 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:59684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:00.598057 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:00.650956 2026] [ssl:error] [pid 3665000:tid 3665000] (EAI 2)Name or service not known: [client 144.76.19.72:59690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:00.650983 2026] [ssl:error] [pid 3665000:tid 3665000] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:00.765179 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sitemaps
[Thu Jul 30 15:33:00.950998 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mailer
[Thu Jul 30 15:33:01.134752 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mail
[Thu Jul 30 15:33:01.317927 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/email
[Thu Jul 30 15:33:01.468011 2026] [security2:error] [pid 3687999:tid 3687999] [client 122.51.236.174:50912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "amtgncrppOX9g4-P_rHWCgAAAC0"], referer: http://www.itsupportinayrshire.com
[Thu Jul 30 15:33:01.510575 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/smtp
[Thu Jul 30 15:33:01.717558 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mailing
[Thu Jul 30 15:33:01.888188 2026] [security2:error] [pid 3686687:tid 3686687] [client 162.14.66.219:37056] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtgndbBB5mZHCCTQKJo3gAAAAE"], referer: http://www.jasperandtroy.co.uk
[Thu Jul 30 15:33:01.914576 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/notifications
[Thu Jul 30 15:33:01.997635 2026] [core:error] [pid 3686906:tid 3686906] (13)Permission denied: [client 216.73.216.199:43108] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty7/subsystem/ttyS2/closing_wait
[Thu Jul 30 15:33:02.101737 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/notify
[Thu Jul 30 15:33:02.294253 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sender
[Thu Jul 30 15:33:02.300012 2026] [ssl:error] [pid 3686906:tid 3686906] (70014)End of file found: [client 216.73.216.199:43108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:02.478800 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/campaign
[Thu Jul 30 15:33:02.599195 2026] [ssl:error] [pid 3667133:tid 3667133] (70014)End of file found: [client 216.73.216.199:54923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:02.619463 2026] [core:error] [pid 3665000:tid 3665000] [client 62.60.130.210:54316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:02.619490 2026] [core:error] [pid 3665000:tid 3665000] [client 62.60.130.210:54316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:02.663464 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/newsletter
[Thu Jul 30 15:33:02.814432 2026] [core:error] [pid 3686905:tid 3686905] [client 62.60.130.210:54086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:02.814461 2026] [core:error] [pid 3686905:tid 3686905] [client 62.60.130.210:54086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:02.846702 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ses
[Thu Jul 30 15:33:02.992009 2026] [security2:error] [pid 3687325:tid 3687325] [client 47.128.116.111:43566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wildduckdesigns.co.uk"] [uri "/robots.txt"] [unique_id "amtgnmOTiFP9CefBh1e-vwAAAAw"]
[Thu Jul 30 15:33:03.031662 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sendgrid
[Thu Jul 30 15:33:03.214957 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sparkpost
[Thu Jul 30 15:33:03.398236 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/postmark
[Thu Jul 30 15:33:03.398467 2026] [core:error] [pid 3672637:tid 3672637] [client 62.60.130.210:55499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:03.398488 2026] [core:error] [pid 3672637:tid 3672637] [client 62.60.130.210:55499] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:03.582058 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mailgun
[Thu Jul 30 15:33:03.718836 2026] [ssl:error] [pid 3654776:tid 3654776] (EAI 2)Name or service not known: [client 144.76.19.72:59694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:03.718872 2026] [ssl:error] [pid 3654776:tid 3654776] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:03.774207 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mandrill
[Thu Jul 30 15:33:03.777807 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:59710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:03.777845 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:03.919211 2026] [core:error] [pid 3685517:tid 3685517] [client 62.60.130.210:63302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:03.919238 2026] [core:error] [pid 3685517:tid 3685517] [client 62.60.130.210:63302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:03.978339 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mailjet
[Thu Jul 30 15:33:04.162348 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/brevo
[Thu Jul 30 15:33:04.347018 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/transactional
[Thu Jul 30 15:33:04.521963 2026] [core:error] [pid 3686905:tid 3686905] [client 62.60.130.210:63588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:04.521993 2026] [core:error] [pid 3686905:tid 3686905] [client 62.60.130.210:63588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:04.530270 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bulk
[Thu Jul 30 15:33:04.663967 2026] [cgi:error] [pid 3672700:tid 3672700] [client 51.103.154.47:19008] AH02812: stderr from /home/sijamesc/loca.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:33:04.713665 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/phpinfo.php
[Thu Jul 30 15:33:04.713717 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:04.898398 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/info.php
[Thu Jul 30 15:33:04.898451 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:04.974890 2026] [core:error] [pid 3687999:tid 3687999] [client 62.60.130.210:56666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:04.974917 2026] [core:error] [pid 3687999:tid 3687999] [client 62.60.130.210:56666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:05.081568 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/php.php
[Thu Jul 30 15:33:05.081621 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:05.266729 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/i.php
[Thu Jul 30 15:33:05.266781 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:05.298145 2026] [core:error] [pid 3654776:tid 3654776] [client 62.60.130.210:55041] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:05.298174 2026] [core:error] [pid 3654776:tid 3654776] [client 62.60.130.210:55041] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:05.373171 2026] [security2:error] [pid 3672637:tid 3672637] [client 85.208.96.196:27714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2800.0/prev_next,next.html"] [unique_id "amtgoXEOlCrRqu6rBjFxWwAAABY"]
[Thu Jul 30 15:33:05.449612 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/pi.php
[Thu Jul 30 15:33:05.449683 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:05.620987 2026] [core:error] [pid 3678921:tid 3678921] (13)Permission denied: [client 216.73.216.199:38370] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty37/subsystem/ttyS0/closing_wait
[Thu Jul 30 15:33:05.634689 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/pinfo.php
[Thu Jul 30 15:33:05.634735 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:05.734062 2026] [core:error] [pid 3686907:tid 3686907] [client 62.60.130.210:55076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:05.734103 2026] [core:error] [pid 3686907:tid 3686907] [client 62.60.130.210:55076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:05.821016 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/test.php
[Thu Jul 30 15:33:05.821078 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:05.959869 2026] [access_compat:error] [pid 3685615:tid 3685615] [client 136.158.25.236:13074] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:06.004300 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/phpinfo
[Thu Jul 30 15:33:06.188586 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/p.php
[Thu Jul 30 15:33:06.188637 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:06.244330 2026] [core:error] [pid 3677901:tid 3677901] [client 62.60.130.210:57315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:06.244354 2026] [core:error] [pid 3677901:tid 3677901] [client 62.60.130.210:57315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:06.373141 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/debug.php
[Thu Jul 30 15:33:06.373189 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:06.527455 2026] [core:error] [pid 3672637:tid 3672637] [client 62.60.130.210:61938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:06.527502 2026] [core:error] [pid 3672637:tid 3672637] [client 62.60.130.210:61938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:06.556225 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 15:33:06.744406 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/test
[Thu Jul 30 15:33:06.836649 2026] [ssl:error] [pid 3686907:tid 3686907] (EAI 2)Name or service not known: [client 144.76.19.72:59722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:06.836686 2026] [ssl:error] [pid 3686907:tid 3686907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:06.891493 2026] [ssl:error] [pid 3686905:tid 3686905] (EAI 2)Name or service not known: [client 144.76.19.72:59726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:06.891524 2026] [ssl:error] [pid 3686905:tid 3686905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:06.927745 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/dev
[Thu Jul 30 15:33:07.054497 2026] [security2:error] [pid 3662117:tid 3662117] [client 185.191.171.3:25194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4559.0.html"] [unique_id "amtgow3C4mueXBSPH1nnoAAAAAo"]
[Thu Jul 30 15:33:07.075233 2026] [lsapi:warn] [pid 3672637:tid 3672637] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:33:07.087257 2026] [core:error] [pid 3686789:tid 3686789] [client 62.60.130.210:60225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:07.087283 2026] [core:error] [pid 3686789:tid 3686789] [client 62.60.130.210:60225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:07.110560 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/old
[Thu Jul 30 15:33:07.294397 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tmp/phpinfo.php
[Thu Jul 30 15:33:07.294450 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:07.414028 2026] [security2:error] [pid 3687529:tid 3687529] [client 114.119.156.56:60719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.soul-connections.net"] [uri "/robots.txt"] [unique_id "amtgo4HO4m-dc_7A-odRMgAAAB8"], referer: http://www.soul-connections.net/robots.txt
[Thu Jul 30 15:33:07.478353 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/public
[Thu Jul 30 15:33:07.504767 2026] [core:error] [pid 3685841:tid 3685841] [client 62.60.130.210:60773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:07.504795 2026] [core:error] [pid 3685841:tid 3685841] [client 62.60.130.210:60773] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:07.661958 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/info
[Thu Jul 30 15:33:07.848990 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/php-info.php
[Thu Jul 30 15:33:07.849046 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:07.925696 2026] [core:error] [pid 3673221:tid 3673221] [client 62.60.130.210:53454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:07.925722 2026] [core:error] [pid 3673221:tid 3673221] [client 62.60.130.210:53454] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:08.032287 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/phpversion.php
[Thu Jul 30 15:33:08.032349 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:08.218180 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/_phpinfo.php
[Thu Jul 30 15:33:08.218236 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:08.372148 2026] [core:error] [pid 3679052:tid 3679052] [client 62.60.130.210:61523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:08.372174 2026] [core:error] [pid 3679052:tid 3679052] [client 62.60.130.210:61523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: www.google.com
[Thu Jul 30 15:33:08.401734 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/old_phpinfo.php
[Thu Jul 30 15:33:08.401800 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:08.586362 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/server-info.php
[Thu Jul 30 15:33:08.586461 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:08.775702 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/server-status.php
[Thu Jul 30 15:33:08.775766 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:33:08.959235 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/_profiler
[Thu Jul 30 15:33:09.021078 2026] [security2:error] [pid 3681130:tid 3681130] [client 36.65.179.117:33002] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgpYmWRFSG_-PgPZKm_wAAACM"]
[Thu Jul 30 15:33:09.021130 2026] [security2:error] [pid 3681130:tid 3681130] [client 36.65.179.117:33002] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgpYmWRFSG_-PgPZKm_wAAACM"]
[Thu Jul 30 15:33:09.021355 2026] [security2:error] [pid 3681130:tid 3681130] [client 36.65.179.117:33002] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgpYmWRFSG_-PgPZKm_wAAACM"]
[Thu Jul 30 15:33:09.142421 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/_environment
[Thu Jul 30 15:33:09.325734 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/webroot
[Thu Jul 30 15:33:09.514570 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mail
[Thu Jul 30 15:33:09.699987 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cpanel
[Thu Jul 30 15:33:09.882870 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/hosting
[Thu Jul 30 15:33:09.942504 2026] [access_compat:error] [pid 3681296:tid 3681296] [client 136.158.25.236:13466] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:09.950557 2026] [ssl:error] [pid 3681130:tid 3681130] (EAI 2)Name or service not known: [client 144.76.19.72:21154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:09.950577 2026] [ssl:error] [pid 3681130:tid 3681130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:09.987248 2026] [security2:error] [pid 3687998:tid 3687998] [client 109.81.116.110:63309] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgpWoZBEZBIeTA70a4fwAAACs"]
[Thu Jul 30 15:33:09.987296 2026] [security2:error] [pid 3687998:tid 3687998] [client 109.81.116.110:63309] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgpWoZBEZBIeTA70a4fwAAACs"]
[Thu Jul 30 15:33:09.987556 2026] [security2:error] [pid 3687998:tid 3687998] [client 109.81.116.110:63309] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgpWoZBEZBIeTA70a4fwAAACs"]
[Thu Jul 30 15:33:10.003996 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:21162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:10.004022 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:10.565515 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 159.65.15.150:39360] AH01797: client denied by server configuration: /home/pbyawsga/public_html/smtp
[Thu Jul 30 15:33:11.875410 2026] [security2:error] [pid 3664268:tid 3664268] [client 68.51.169.149:39972] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgpw5koCHtgceoQ1r10gAAAAU"]
[Thu Jul 30 15:33:11.875466 2026] [security2:error] [pid 3664268:tid 3664268] [client 68.51.169.149:39972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtgpw5koCHtgceoQ1r10gAAAAU"]
[Thu Jul 30 15:33:11.875723 2026] [security2:error] [pid 3664268:tid 3664268] [client 68.51.169.149:39972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtgpw5koCHtgceoQ1r10gAAAAU"]
[Thu Jul 30 15:33:12.476192 2026] [security2:error] [pid 3686478:tid 3686478] [client 74.7.243.130:38352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "wartypig.com"] [uri "/"] [unique_id "amtgqNERfzGN9L05QumiDwAAAAA"]
[Thu Jul 30 15:33:13.058902 2026] [ssl:error] [pid 3665811:tid 3665811] (EAI 2)Name or service not known: [client 144.76.19.72:21164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:13.058939 2026] [ssl:error] [pid 3665811:tid 3665811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:13.111472 2026] [ssl:error] [pid 3686478:tid 3686478] (EAI 2)Name or service not known: [client 144.76.19.72:21168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:13.111510 2026] [ssl:error] [pid 3686478:tid 3686478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:14.134808 2026] [security2:error] [pid 3685517:tid 3685517] [client 106.54.62.156:50438] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amtgqvNp9S1A5gfWM1JRagAAAAM"]
[Thu Jul 30 15:33:16.012582 2026] [security2:error] [pid 3685517:tid 3685517] [client 106.54.62.156:48996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtgrPNp9S1A5gfWM1JRawAAAAM"], referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 15:33:16.014306 2026] [authz_core:error] [pid 3685517:tid 3685517] [client 106.54.62.156:48996] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 15:33:16.016998 2026] [authz_core:error] [pid 3685517:tid 3685517] [client 106.54.62.156:48996] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 15:33:16.168234 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:21180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:16.168293 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:16.224924 2026] [ssl:error] [pid 3673221:tid 3673221] (EAI 2)Name or service not known: [client 144.76.19.72:21188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:16.224965 2026] [ssl:error] [pid 3673221:tid 3673221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:19.282512 2026] [ssl:error] [pid 3674041:tid 3674041] (EAI 2)Name or service not known: [client 144.76.19.72:21196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:19.282544 2026] [ssl:error] [pid 3674041:tid 3674041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:19.340281 2026] [ssl:error] [pid 3681626:tid 3681626] (EAI 2)Name or service not known: [client 144.76.19.72:21202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:19.340325 2026] [ssl:error] [pid 3681626:tid 3681626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:19.553241 2026] [core:error] [pid 3678921:tid 3678921] (13)Permission denied: [client 216.73.216.199:38370] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:39/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 15:33:20.480992 2026] [access_compat:error] [pid 3687959:tid 3687959] [client 136.158.25.236:14353] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:20.937099 2026] [access_compat:error] [pid 3684939:tid 3684939] [client 45.158.164.139:55350] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:33:21.369467 2026] [core:error] [pid 3678921:tid 3678921] (13)Permission denied: [client 216.73.216.199:38370] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:39/subsystem/ttyS3/irq
[Thu Jul 30 15:33:21.564206 2026] [security2:error] [pid 3686848:tid 3686848] [client 185.191.171.2:62784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/what-body-type-does-aquarius-man-like"] [unique_id "amtgscF2_EzSK6FqG7UYNQAAAB4"]
[Thu Jul 30 15:33:22.398112 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:50092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:22.398142 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:22.452685 2026] [ssl:error] [pid 3686906:tid 3686906] (EAI 2)Name or service not known: [client 144.76.19.72:50100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:22.452727 2026] [ssl:error] [pid 3686906:tid 3686906] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:23.179836 2026] [core:error] [pid 3678921:tid 3678921] (13)Permission denied: [client 216.73.216.199:38370] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:39/subsystem/ttyS3/port
[Thu Jul 30 15:33:24.985254 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:38370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:25.493770 2026] [core:error] [pid 3648656:tid 3648656] (13)Permission denied: [client 216.73.216.199:4187] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:39/subsystem/ttyS3/iomem_base
[Thu Jul 30 15:33:25.509310 2026] [ssl:error] [pid 3686848:tid 3686848] (EAI 2)Name or service not known: [client 144.76.19.72:50106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:25.509345 2026] [ssl:error] [pid 3686848:tid 3686848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:25.561535 2026] [ssl:error] [pid 3679008:tid 3679008] (EAI 2)Name or service not known: [client 144.76.19.72:50108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:25.561561 2026] [ssl:error] [pid 3679008:tid 3679008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:25.702020 2026] [lsapi:warn] [pid 3684939:tid 3684939] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:33:26.495197 2026] [ssl:error] [pid 3686848:tid 3686848] (70014)End of file found: [client 216.73.216.199:64154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:26.842256 2026] [access_compat:error] [pid 3685517:tid 3685517] [client 45.158.164.139:55392] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:33:28.617755 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:50114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:28.617790 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:28.672845 2026] [ssl:error] [pid 3689394:tid 3689394] (EAI 2)Name or service not known: [client 144.76.19.72:50118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:28.672883 2026] [ssl:error] [pid 3689394:tid 3689394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:29.326346 2026] [security2:error] [pid 3685841:tid 3685841] [client 51.68.111.204:18369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "i4el.co.uk"] [uri "/robots.txt"] [unique_id "amtguZnpNWL168dWn3THcAAAABo"]
[Thu Jul 30 15:33:29.518407 2026] [security2:error] [pid 3687960:tid 3687960] [client 34.23.170.140:58104] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtguf7_gxREFlsdtZo8ZwAAACU"]
[Thu Jul 30 15:33:29.518602 2026] [security2:error] [pid 3687960:tid 3687960] [client 34.23.170.140:58104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtguf7_gxREFlsdtZo8ZwAAACU"]
[Thu Jul 30 15:33:29.518808 2026] [security2:error] [pid 3687960:tid 3687960] [client 34.23.170.140:58104] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguf7_gxREFlsdtZo8ZwAAACU"]
[Thu Jul 30 15:33:29.535860 2026] [security2:error] [pid 3665811:tid 3665811] [client 34.23.170.140:58136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtguYpjMLoJGUXK2HomJgAAACI"]
[Thu Jul 30 15:33:29.536041 2026] [security2:error] [pid 3665811:tid 3665811] [client 34.23.170.140:58136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtguYpjMLoJGUXK2HomJgAAACI"]
[Thu Jul 30 15:33:29.536401 2026] [security2:error] [pid 3665811:tid 3665811] [client 34.23.170.140:58136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguYpjMLoJGUXK2HomJgAAACI"]
[Thu Jul 30 15:33:29.810266 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:58182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtguYoqVK2px4huxiM_ugAAAA8"]
[Thu Jul 30 15:33:29.810413 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:58182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtguYoqVK2px4huxiM_ugAAAA8"]
[Thu Jul 30 15:33:29.810639 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:58182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguYoqVK2px4huxiM_ugAAAA8"]
[Thu Jul 30 15:33:29.815046 2026] [security2:error] [pid 3679052:tid 3679052] [client 34.23.170.140:58194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtguUqUBSn_WNwhBxx2EwAAAEA"]
[Thu Jul 30 15:33:29.815232 2026] [security2:error] [pid 3679052:tid 3679052] [client 34.23.170.140:58194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtguUqUBSn_WNwhBxx2EwAAAEA"]
[Thu Jul 30 15:33:29.815446 2026] [security2:error] [pid 3679052:tid 3679052] [client 34.23.170.140:58194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguUqUBSn_WNwhBxx2EwAAAEA"]
[Thu Jul 30 15:33:29.995903 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:58208] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtguYoqVK2px4huxiM_uwAAAA8"]
[Thu Jul 30 15:33:29.996106 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:58208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtguYoqVK2px4huxiM_uwAAAA8"]
[Thu Jul 30 15:33:29.996302 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:58208] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguYoqVK2px4huxiM_uwAAAA8"]
[Thu Jul 30 15:33:29.999535 2026] [security2:error] [pid 3689433:tid 3689433] [client 34.23.170.140:58236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtguRtVnlDNBF-DL7nwGAAAABU"]
[Thu Jul 30 15:33:29.999675 2026] [security2:error] [pid 3689433:tid 3689433] [client 34.23.170.140:58236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtguRtVnlDNBF-DL7nwGAAAABU"]
[Thu Jul 30 15:33:29.999867 2026] [security2:error] [pid 3689433:tid 3689433] [client 34.23.170.140:58236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguRtVnlDNBF-DL7nwGAAAABU"]
[Thu Jul 30 15:33:30.001175 2026] [security2:error] [pid 3679052:tid 3679052] [client 34.23.170.140:58220] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtguUqUBSn_WNwhBxx2FAAAAEA"]
[Thu Jul 30 15:33:30.001505 2026] [security2:error] [pid 3679052:tid 3679052] [client 34.23.170.140:58220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtguUqUBSn_WNwhBxx2FAAAAEA"]
[Thu Jul 30 15:33:30.001877 2026] [security2:error] [pid 3679052:tid 3679052] [client 34.23.170.140:58220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguUqUBSn_WNwhBxx2FAAAAEA"]
[Thu Jul 30 15:33:30.006611 2026] [authz_core:error] [pid 3665811:tid 3665811] [client 66.249.66.33:47889] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:33:30.009318 2026] [authz_core:error] [pid 3665811:tid 3665811] [client 66.249.66.33:47889] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:33:30.432667 2026] [security2:error] [pid 3648656:tid 3648656] [client 216.73.216.199:4187] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysctl.d/50-default.conf"] [unique_id "amtguiKDRAglsH-kd_obeQAAABA"]
[Thu Jul 30 15:33:30.433028 2026] [security2:error] [pid 3648656:tid 3648656] [client 216.73.216.199:4187] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysctl.d/50-default.conf"] [unique_id "amtguiKDRAglsH-kd_obeQAAABA"]
[Thu Jul 30 15:33:30.433296 2026] [security2:error] [pid 3648656:tid 3648656] [client 216.73.216.199:4187] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib/sysctl.d/50-default.conf"] [unique_id "amtguiKDRAglsH-kd_obeQAAABA"]
[Thu Jul 30 15:33:30.652208 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:59904] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtgusttnYKacNJRP4DfdAAAABs"]
[Thu Jul 30 15:33:30.652418 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:59904] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtgusttnYKacNJRP4DfdAAAABs"]
[Thu Jul 30 15:33:30.652675 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:59904] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgusttnYKacNJRP4DfdAAAABs"]
[Thu Jul 30 15:33:30.746454 2026] [security2:error] [pid 3689470:tid 3689470] [client 43.135.145.77:47670] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/saveshrine/secret-of-mana/"] [unique_id "amtgusttnYKacNJRP4DfdQAAABs"]
[Thu Jul 30 15:33:30.839646 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:59926] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtgukdntmIBVxLLbYSV-AAAABk"]
[Thu Jul 30 15:33:30.839844 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:59926] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtgukdntmIBVxLLbYSV-AAAABk"]
[Thu Jul 30 15:33:30.840063 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:59926] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgukdntmIBVxLLbYSV-AAAABk"]
[Thu Jul 30 15:33:30.848348 2026] [security2:error] [pid 3689468:tid 3689468] [client 34.23.170.140:59930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtguilnJJ_gEGm_NK-FyAAAABY"]
[Thu Jul 30 15:33:30.848708 2026] [security2:error] [pid 3689468:tid 3689468] [client 34.23.170.140:59930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtguilnJJ_gEGm_NK-FyAAAABY"]
[Thu Jul 30 15:33:30.849465 2026] [security2:error] [pid 3689468:tid 3689468] [client 34.23.170.140:59930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtguilnJJ_gEGm_NK-FyAAAABY"]
[Thu Jul 30 15:33:30.932861 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:59946] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtgukUu4ftHRhZEdvpE5QAAAAk"]
[Thu Jul 30 15:33:30.933049 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:59946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtgukUu4ftHRhZEdvpE5QAAAAk"]
[Thu Jul 30 15:33:30.933257 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:59946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgukUu4ftHRhZEdvpE5QAAAAk"]
[Thu Jul 30 15:33:30.951499 2026] [access_compat:error] [pid 3689471:tid 3689471] [client 136.158.25.236:15320] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:30.961886 2026] [security2:error] [pid 3687999:tid 3687999] [client 34.23.170.140:59968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtgusrppOX9g4-P_rHWFgAAAC0"]
[Thu Jul 30 15:33:30.962135 2026] [security2:error] [pid 3687999:tid 3687999] [client 34.23.170.140:59968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtgusrppOX9g4-P_rHWFgAAAC0"]
[Thu Jul 30 15:33:30.962359 2026] [security2:error] [pid 3687999:tid 3687999] [client 34.23.170.140:59968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgusrppOX9g4-P_rHWFgAAAC0"]
[Thu Jul 30 15:33:31.121361 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:59988] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtgu0dntmIBVxLLbYSV-QAAABk"]
[Thu Jul 30 15:33:31.121566 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:59988] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtgu0dntmIBVxLLbYSV-QAAABk"]
[Thu Jul 30 15:33:31.121771 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:59988] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgu0dntmIBVxLLbYSV-QAAABk"]
[Thu Jul 30 15:33:31.731548 2026] [ssl:error] [pid 3685841:tid 3685841] (EAI 2)Name or service not known: [client 144.76.19.72:59112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:31.731580 2026] [ssl:error] [pid 3685841:tid 3685841] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:31.784601 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:59128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:31.784643 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:32.191556 2026] [cgi:error] [pid 3687959:tid 3687959] [client 20.104.22.47:21920] AH02812: stderr from /home/printmyc/codeworks.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:33:33.036395 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:60370] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtgvYoqVK2px4huxiM_wQAAAA8"]
[Thu Jul 30 15:33:33.036583 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:60370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtgvYoqVK2px4huxiM_wQAAAA8"]
[Thu Jul 30 15:33:33.036793 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:60370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgvYoqVK2px4huxiM_wQAAAA8"]
[Thu Jul 30 15:33:33.153386 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:4187] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:33.407902 2026] [authz_core:error] [pid 3685615:tid 3685615] [client 66.249.64.160:37119] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:33:33.410587 2026] [authz_core:error] [pid 3685615:tid 3685615] [client 66.249.64.160:37119] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:33:33.450415 2026] [authz_core:error] [pid 3686907:tid 3686907] [client 34.23.170.140:60438] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 15:33:33.605091 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:60472] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtgvQoNsdhHLPOQ9vtBVQAAACw"]
[Thu Jul 30 15:33:33.605287 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:60472] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtgvQoNsdhHLPOQ9vtBVQAAACw"]
[Thu Jul 30 15:33:33.605528 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:60472] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgvQoNsdhHLPOQ9vtBVQAAACw"]
[Thu Jul 30 15:33:33.653388 2026] [ssl:error] [pid 3681626:tid 3681626] (70014)End of file found: [client 216.73.216.199:42763] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:33.815695 2026] [authz_core:error] [pid 3665811:tid 3665811] [client 66.249.66.33:47889] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:33:33.818617 2026] [authz_core:error] [pid 3665811:tid 3665811] [client 66.249.66.33:47889] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:33:33.946738 2026] [ssl:error] [pid 3673124:tid 3673124] (70014)End of file found: [client 216.73.216.199:41170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:34.711139 2026] [security2:error] [pid 3679008:tid 3679008] [client 34.23.170.140:60656] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtgvqZR7mULjSdrBwr66gAAACc"]
[Thu Jul 30 15:33:34.711341 2026] [security2:error] [pid 3679008:tid 3679008] [client 34.23.170.140:60656] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtgvqZR7mULjSdrBwr66gAAACc"]
[Thu Jul 30 15:33:34.711556 2026] [security2:error] [pid 3679008:tid 3679008] [client 34.23.170.140:60656] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgvqZR7mULjSdrBwr66gAAACc"]
[Thu Jul 30 15:33:34.837172 2026] [ssl:error] [pid 3672700:tid 3672700] (EAI 2)Name or service not known: [client 144.76.19.72:59130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:34.837196 2026] [ssl:error] [pid 3672700:tid 3672700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:34.891547 2026] [ssl:error] [pid 3679008:tid 3679008] (EAI 2)Name or service not known: [client 144.76.19.72:59138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:34.891568 2026] [ssl:error] [pid 3679008:tid 3679008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:34.929122 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:60682] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtgvooqVK2px4huxiM_xwAAAA8"]
[Thu Jul 30 15:33:34.929390 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:60682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtgvooqVK2px4huxiM_xwAAAA8"]
[Thu Jul 30 15:33:34.929579 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:60682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgvooqVK2px4huxiM_xwAAAA8"]
[Thu Jul 30 15:33:35.457110 2026] [security2:error] [pid 3689669:tid 3689669] [client 34.23.170.140:60788] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtgv4VRxO6Vs04FPHfJMwAAADA"]
[Thu Jul 30 15:33:35.457395 2026] [security2:error] [pid 3689669:tid 3689669] [client 34.23.170.140:60788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtgv4VRxO6Vs04FPHfJMwAAADA"]
[Thu Jul 30 15:33:35.457617 2026] [security2:error] [pid 3689669:tid 3689669] [client 34.23.170.140:60788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgv4VRxO6Vs04FPHfJMwAAADA"]
[Thu Jul 30 15:33:35.878005 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:60860] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtgv0dntmIBVxLLbYSWBQAAABk"]
[Thu Jul 30 15:33:35.878168 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:60860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtgv0dntmIBVxLLbYSWBQAAABk"]
[Thu Jul 30 15:33:35.878386 2026] [security2:error] [pid 3689469:tid 3689469] [client 34.23.170.140:60860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgv0dntmIBVxLLbYSWBQAAABk"]
[Thu Jul 30 15:33:36.219522 2026] [security2:error] [pid 3667133:tid 3667133] [client 34.23.170.140:60908] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtgwHv6KNynuNyWyE8DRwAAACg"]
[Thu Jul 30 15:33:36.219791 2026] [security2:error] [pid 3667133:tid 3667133] [client 34.23.170.140:60908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtgwHv6KNynuNyWyE8DRwAAACg"]
[Thu Jul 30 15:33:36.219984 2026] [security2:error] [pid 3667133:tid 3667133] [client 34.23.170.140:60908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwHv6KNynuNyWyE8DRwAAACg"]
[Thu Jul 30 15:33:36.282317 2026] [security2:error] [pid 3689254:tid 3689254] [client 34.23.170.140:60910] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtgwJAjm_AQSo9SEhTm_AAAAAE"]
[Thu Jul 30 15:33:36.282523 2026] [security2:error] [pid 3689254:tid 3689254] [client 34.23.170.140:60910] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtgwJAjm_AQSo9SEhTm_AAAAAE"]
[Thu Jul 30 15:33:36.282732 2026] [security2:error] [pid 3689254:tid 3689254] [client 34.23.170.140:60910] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwJAjm_AQSo9SEhTm_AAAAAE"]
[Thu Jul 30 15:33:36.589306 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:60968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtgwBbFq77dbN_KSeHAzgAAAAs"]
[Thu Jul 30 15:33:36.589595 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:60968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtgwBbFq77dbN_KSeHAzgAAAAs"]
[Thu Jul 30 15:33:36.589833 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:60968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwBbFq77dbN_KSeHAzgAAAAs"]
[Thu Jul 30 15:33:36.819870 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:32770] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtgwN2rX9FxgkCxYeKcfAAAACA"]
[Thu Jul 30 15:33:36.820157 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:32770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtgwN2rX9FxgkCxYeKcfAAAACA"]
[Thu Jul 30 15:33:36.820348 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:32770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwN2rX9FxgkCxYeKcfAAAACA"]
[Thu Jul 30 15:33:37.111615 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:32822] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtgwd2rX9FxgkCxYeKcfQAAACA"]
[Thu Jul 30 15:33:37.111888 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:32822] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtgwd2rX9FxgkCxYeKcfQAAACA"]
[Thu Jul 30 15:33:37.112090 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:32822] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwd2rX9FxgkCxYeKcfQAAACA"]
[Thu Jul 30 15:33:37.206513 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:32836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtgwRbFq77dbN_KSeHA0QAAAAs"]
[Thu Jul 30 15:33:37.206769 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:32836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtgwRbFq77dbN_KSeHA0QAAAAs"]
[Thu Jul 30 15:33:37.207026 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:32836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwRbFq77dbN_KSeHA0QAAAAs"]
[Thu Jul 30 15:33:37.208626 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:32844] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtgwYmWRFSG_-PgPZKnBgAAACM"]
[Thu Jul 30 15:33:37.208788 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:32844] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtgwYmWRFSG_-PgPZKnBgAAACM"]
[Thu Jul 30 15:33:37.208989 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:32844] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwYmWRFSG_-PgPZKnBgAAACM"]
[Thu Jul 30 15:33:37.321327 2026] [access_compat:error] [pid 3664268:tid 3664268] [client 136.158.25.236:16039] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:37.394312 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:32868] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtgwYmWRFSG_-PgPZKnBwAAACM"]
[Thu Jul 30 15:33:37.394768 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:32868] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtgwYmWRFSG_-PgPZKnBwAAACM"]
[Thu Jul 30 15:33:37.395135 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:32868] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwYmWRFSG_-PgPZKnBwAAACM"]
[Thu Jul 30 15:33:37.780721 2026] [security2:error] [pid 3689432:tid 3689432] [client 34.23.170.140:32944] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtgwYiu6MBRFvP8JWFWdAAAABQ"]
[Thu Jul 30 15:33:37.780974 2026] [security2:error] [pid 3689432:tid 3689432] [client 34.23.170.140:32944] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtgwYiu6MBRFvP8JWFWdAAAABQ"]
[Thu Jul 30 15:33:37.781170 2026] [security2:error] [pid 3689432:tid 3689432] [client 34.23.170.140:32944] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwYiu6MBRFvP8JWFWdAAAABQ"]
[Thu Jul 30 15:33:37.943946 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:32980] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtgwRbFq77dbN_KSeHA1AAAAAs"]
[Thu Jul 30 15:33:37.944210 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:32980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtgwRbFq77dbN_KSeHA1AAAAAs"]
[Thu Jul 30 15:33:37.944468 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:32980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwRbFq77dbN_KSeHA1AAAAAs"]
[Thu Jul 30 15:33:37.963265 2026] [ssl:error] [pid 3689548:tid 3689548] (EAI 2)Name or service not known: [client 144.76.19.72:59152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:37.963306 2026] [ssl:error] [pid 3689548:tid 3689548] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:38.020498 2026] [ssl:error] [pid 3689470:tid 3689470] (EAI 2)Name or service not known: [client 144.76.19.72:59166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:38.020537 2026] [ssl:error] [pid 3689470:tid 3689470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:38.145268 2026] [security2:error] [pid 3689432:tid 3689432] [client 34.23.170.140:33016] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtgwoiu6MBRFvP8JWFWdQAAABQ"]
[Thu Jul 30 15:33:38.145543 2026] [security2:error] [pid 3689432:tid 3689432] [client 34.23.170.140:33016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtgwoiu6MBRFvP8JWFWdQAAABQ"]
[Thu Jul 30 15:33:38.145738 2026] [security2:error] [pid 3689432:tid 3689432] [client 34.23.170.140:33016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwoiu6MBRFvP8JWFWdQAAABQ"]
[Thu Jul 30 15:33:38.164582 2026] [security2:error] [pid 3686789:tid 3686789] [client 34.23.170.140:33024] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtgwr7V1mAGWbhmfq_lOwAAAA4"]
[Thu Jul 30 15:33:38.164764 2026] [security2:error] [pid 3686789:tid 3686789] [client 34.23.170.140:33024] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtgwr7V1mAGWbhmfq_lOwAAAA4"]
[Thu Jul 30 15:33:38.164954 2026] [security2:error] [pid 3686789:tid 3686789] [client 34.23.170.140:33024] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwr7V1mAGWbhmfq_lOwAAAA4"]
[Thu Jul 30 15:33:38.381160 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33068] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtgwsttnYKacNJRP4DfegAAABs"]
[Thu Jul 30 15:33:38.381304 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtgwsttnYKacNJRP4DfegAAABs"]
[Thu Jul 30 15:33:38.381511 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwsttnYKacNJRP4DfegAAABs"]
[Thu Jul 30 15:33:38.428060 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33072] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtgwufzxtNHVfojGWDsqgAAABM"]
[Thu Jul 30 15:33:38.428232 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33072] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtgwufzxtNHVfojGWDsqgAAABM"]
[Thu Jul 30 15:33:38.428442 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33072] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwufzxtNHVfojGWDsqgAAABM"]
[Thu Jul 30 15:33:38.450647 2026] [security2:error] [pid 3689768:tid 3689768] [client 34.23.170.140:33074] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtgwtFDVgj69pU2NQTU_wAAADU"]
[Thu Jul 30 15:33:38.450815 2026] [security2:error] [pid 3689768:tid 3689768] [client 34.23.170.140:33074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtgwtFDVgj69pU2NQTU_wAAADU"]
[Thu Jul 30 15:33:38.451020 2026] [security2:error] [pid 3689768:tid 3689768] [client 34.23.170.140:33074] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwtFDVgj69pU2NQTU_wAAADU"]
[Thu Jul 30 15:33:38.556199 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33092] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtgwgoNsdhHLPOQ9vtBWgAAACw"]
[Thu Jul 30 15:33:38.556429 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtgwgoNsdhHLPOQ9vtBWgAAACw"]
[Thu Jul 30 15:33:38.556634 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33092] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwgoNsdhHLPOQ9vtBWgAAACw"]
[Thu Jul 30 15:33:38.769182 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33136] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtgwsttnYKacNJRP4DfewAAABs"]
[Thu Jul 30 15:33:38.769337 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtgwsttnYKacNJRP4DfewAAABs"]
[Thu Jul 30 15:33:38.769534 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33136] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwsttnYKacNJRP4DfewAAABs"]
[Thu Jul 30 15:33:38.868292 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:33164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtgwomWRFSG_-PgPZKnCQAAACM"]
[Thu Jul 30 15:33:38.868720 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:33164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtgwomWRFSG_-PgPZKnCQAAACM"]
[Thu Jul 30 15:33:38.869004 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:33164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwomWRFSG_-PgPZKnCQAAACM"]
[Thu Jul 30 15:33:38.976695 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33180] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtgwufzxtNHVfojGWDsqwAAABM"]
[Thu Jul 30 15:33:38.976960 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtgwufzxtNHVfojGWDsqwAAABM"]
[Thu Jul 30 15:33:38.977172 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwufzxtNHVfojGWDsqwAAABM"]
[Thu Jul 30 15:33:39.069415 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33216] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtgwwoNsdhHLPOQ9vtBWwAAACw"]
[Thu Jul 30 15:33:39.069681 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtgwwoNsdhHLPOQ9vtBWwAAACw"]
[Thu Jul 30 15:33:39.069903 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33216] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwwoNsdhHLPOQ9vtBWwAAACw"]
[Thu Jul 30 15:33:39.168287 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:33234] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtgw0Uu4ftHRhZEdvpE5wAAAAk"]
[Thu Jul 30 15:33:39.168486 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:33234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtgw0Uu4ftHRhZEdvpE5wAAAAk"]
[Thu Jul 30 15:33:39.168674 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:33234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgw0Uu4ftHRhZEdvpE5wAAAAk"]
[Thu Jul 30 15:33:39.374921 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33274] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtgw8ttnYKacNJRP4DffAAAABs"]
[Thu Jul 30 15:33:39.375082 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33274] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtgw8ttnYKacNJRP4DffAAAABs"]
[Thu Jul 30 15:33:39.375228 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtgw8ttnYKacNJRP4DffAAAABs"]
[Thu Jul 30 15:33:39.375423 2026] [security2:error] [pid 3689470:tid 3689470] [client 34.23.170.140:33274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgw8ttnYKacNJRP4DffAAAABs"]
[Thu Jul 30 15:33:39.731287 2026] [security2:error] [pid 3687997:tid 3687997] [client 34.23.170.140:33334] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtgw2IRr3KnoPiDcSWMQAAAACk"]
[Thu Jul 30 15:33:39.731492 2026] [security2:error] [pid 3687997:tid 3687997] [client 34.23.170.140:33334] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtgw2IRr3KnoPiDcSWMQAAAACk"]
[Thu Jul 30 15:33:39.731710 2026] [security2:error] [pid 3687997:tid 3687997] [client 34.23.170.140:33334] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgw2IRr3KnoPiDcSWMQAAAACk"]
[Thu Jul 30 15:33:39.874086 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:33364] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "portal.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtgw92rX9FxgkCxYeKchAAAACA"]
[Thu Jul 30 15:33:39.874292 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:33364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtgw92rX9FxgkCxYeKchAAAACA"]
[Thu Jul 30 15:33:39.874484 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:33364] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgw92rX9FxgkCxYeKchAAAACA"]
[Thu Jul 30 15:33:39.876913 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33348] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtgwwoNsdhHLPOQ9vtBXAAAACw"]
[Thu Jul 30 15:33:39.877241 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtgwwoNsdhHLPOQ9vtBXAAAACw"]
[Thu Jul 30 15:33:39.877586 2026] [security2:error] [pid 3689548:tid 3689548] [client 34.23.170.140:33348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwwoNsdhHLPOQ9vtBXAAAACw"]
[Thu Jul 30 15:33:39.886021 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:33370] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtgw0Uu4ftHRhZEdvpE6AAAAAk"]
[Thu Jul 30 15:33:39.886171 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:33370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtgw0Uu4ftHRhZEdvpE6AAAAAk"]
[Thu Jul 30 15:33:39.886350 2026] [security2:error] [pid 3676004:tid 3676004] [client 34.23.170.140:33370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgw0Uu4ftHRhZEdvpE6AAAAAk"]
[Thu Jul 30 15:33:39.958351 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:33376] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtgwxbFq77dbN_KSeHA2AAAAAs"]
[Thu Jul 30 15:33:39.958533 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:33376] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtgwxbFq77dbN_KSeHA2AAAAAs"]
[Thu Jul 30 15:33:39.958718 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.23.170.140:33376] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgwxbFq77dbN_KSeHA2AAAAAs"]
[Thu Jul 30 15:33:40.020250 2026] [security2:error] [pid 3686789:tid 3686789] [client 34.23.170.140:33378] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtgxL7V1mAGWbhmfq_lPwAAAA4"]
[Thu Jul 30 15:33:40.020610 2026] [security2:error] [pid 3686789:tid 3686789] [client 34.23.170.140:33378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtgxL7V1mAGWbhmfq_lPwAAAA4"]
[Thu Jul 30 15:33:40.020816 2026] [security2:error] [pid 3686789:tid 3686789] [client 34.23.170.140:33378] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxL7V1mAGWbhmfq_lPwAAAA4"]
[Thu Jul 30 15:33:40.076292 2026] [security2:error] [pid 3689720:tid 3689720] [client 34.23.170.140:33392] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtgxEbJ5ZARxC2WtpPjcQAAADM"]
[Thu Jul 30 15:33:40.076485 2026] [security2:error] [pid 3689720:tid 3689720] [client 34.23.170.140:33392] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtgxEbJ5ZARxC2WtpPjcQAAADM"]
[Thu Jul 30 15:33:40.076691 2026] [security2:error] [pid 3689720:tid 3689720] [client 34.23.170.140:33392] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxEbJ5ZARxC2WtpPjcQAAADM"]
[Thu Jul 30 15:33:40.177114 2026] [security2:error] [pid 3687325:tid 3687325] [client 34.23.170.140:33396] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtgxGOTiFP9CefBh1e-yQAAAAw"]
[Thu Jul 30 15:33:40.177467 2026] [security2:error] [pid 3687325:tid 3687325] [client 34.23.170.140:33396] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtgxGOTiFP9CefBh1e-yQAAAAw"]
[Thu Jul 30 15:33:40.177654 2026] [security2:error] [pid 3687325:tid 3687325] [client 34.23.170.140:33396] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxGOTiFP9CefBh1e-yQAAAAw"]
[Thu Jul 30 15:33:40.184655 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:33408] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtgxIoqVK2px4huxiM_zwAAAA8"]
[Thu Jul 30 15:33:40.184795 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:33408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtgxIoqVK2px4huxiM_zwAAAA8"]
[Thu Jul 30 15:33:40.185088 2026] [security2:error] [pid 3689394:tid 3689394] [client 34.23.170.140:33408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxIoqVK2px4huxiM_zwAAAA8"]
[Thu Jul 30 15:33:40.194645 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:33414] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtgxImWRFSG_-PgPZKnCwAAACM"]
[Thu Jul 30 15:33:40.194793 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:33414] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtgxImWRFSG_-PgPZKnCwAAACM"]
[Thu Jul 30 15:33:40.194978 2026] [security2:error] [pid 3681130:tid 3681130] [client 34.23.170.140:33414] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxImWRFSG_-PgPZKnCwAAACM"]
[Thu Jul 30 15:33:40.261672 2026] [security2:error] [pid 3673124:tid 3673124] [client 34.23.170.140:33430] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtgxH5np6Bh95A5S7gKuQAAADE"]
[Thu Jul 30 15:33:40.261934 2026] [security2:error] [pid 3673124:tid 3673124] [client 34.23.170.140:33430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtgxH5np6Bh95A5S7gKuQAAADE"]
[Thu Jul 30 15:33:40.262196 2026] [security2:error] [pid 3673124:tid 3673124] [client 34.23.170.140:33430] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxH5np6Bh95A5S7gKuQAAADE"]
[Thu Jul 30 15:33:40.303133 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33436] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtgxOfzxtNHVfojGWDsrQAAABM"]
[Thu Jul 30 15:33:40.303314 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtgxOfzxtNHVfojGWDsrQAAABM"]
[Thu Jul 30 15:33:40.303506 2026] [security2:error] [pid 3684939:tid 3684939] [client 34.23.170.140:33436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxOfzxtNHVfojGWDsrQAAABM"]
[Thu Jul 30 15:33:40.357638 2026] [security2:error] [pid 3689766:tid 3689766] [client 34.23.170.140:33446] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtgxICcWLbQj9MMb8tlDgAAADQ"]
[Thu Jul 30 15:33:40.357825 2026] [security2:error] [pid 3689766:tid 3689766] [client 34.23.170.140:33446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtgxICcWLbQj9MMb8tlDgAAADQ"]
[Thu Jul 30 15:33:40.358027 2026] [security2:error] [pid 3689766:tid 3689766] [client 34.23.170.140:33446] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxICcWLbQj9MMb8tlDgAAADQ"]
[Thu Jul 30 15:33:40.465869 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:33456] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtgxN2rX9FxgkCxYeKchQAAACA"]
[Thu Jul 30 15:33:40.466000 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:33456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "portal.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtgxN2rX9FxgkCxYeKchQAAACA"]
[Thu Jul 30 15:33:40.466203 2026] [security2:error] [pid 3686905:tid 3686905] [client 34.23.170.140:33456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "portal.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtgxN2rX9FxgkCxYeKchQAAACA"]
[Thu Jul 30 15:33:40.899196 2026] [lsapi:warn] [pid 3686789:tid 3686789] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:33:41.127393 2026] [ssl:error] [pid 3681130:tid 3681130] (EAI 2)Name or service not known: [client 144.76.19.72:60462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:41.127423 2026] [ssl:error] [pid 3681130:tid 3681130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:41.180727 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:60470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:41.180780 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:41.438102 2026] [access_compat:error] [pid 3641918:tid 3641918] [client 136.158.25.236:16352] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:44.282711 2026] [ssl:error] [pid 3681130:tid 3681130] (EAI 2)Name or service not known: [client 144.76.19.72:60472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:44.282745 2026] [ssl:error] [pid 3681130:tid 3681130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:44.412438 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:60482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:44.412477 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:45.019291 2026] [security2:error] [pid 3689224:tid 3689224] [client 114.119.137.31:51011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "andrewmarvell5642.co.uk"] [uri "/robots.txt"] [unique_id "amtgyUBEphuqxb_NZ5HW2wAAAAA"], referer: http://andrewmarvell5642.co.uk/robots.txt
[Thu Jul 30 15:33:47.472544 2026] [ssl:error] [pid 3687997:tid 3687997] (EAI 2)Name or service not known: [client 144.76.19.72:60486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:47.472585 2026] [ssl:error] [pid 3687997:tid 3687997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:47.533106 2026] [ssl:error] [pid 3684939:tid 3684939] (EAI 2)Name or service not known: [client 144.76.19.72:60496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:47.533138 2026] [ssl:error] [pid 3684939:tid 3684939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:48.380160 2026] [core:error] [pid 3689469:tid 3689469] (13)Permission denied: [client 216.73.216.199:9591] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:39/subsystem/ttyS3/custom_divisor
[Thu Jul 30 15:33:49.884694 2026] [ssl:error] [pid 3689469:tid 3689469] (70014)End of file found: [client 216.73.216.199:9591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:50.488367 2026] [security2:error] [pid 3681130:tid 3681130] [client 43.153.10.13:58990] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ilkagriese.com"] [uri "/"] [unique_id "amtgzomWRFSG_-PgPZKnDQAAACM"]
[Thu Jul 30 15:33:50.589285 2026] [ssl:error] [pid 3665811:tid 3665811] (EAI 2)Name or service not known: [client 144.76.19.72:62542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:50.589316 2026] [ssl:error] [pid 3665811:tid 3665811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:50.642164 2026] [ssl:error] [pid 3686848:tid 3686848] (EAI 2)Name or service not known: [client 144.76.19.72:62554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:50.642191 2026] [ssl:error] [pid 3686848:tid 3686848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:52.040775 2026] [access_compat:error] [pid 3665811:tid 3665811] [client 136.158.25.236:17260] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:52.603811 2026] [ssl:error] [pid 3687325:tid 3687325] (70014)End of file found: [client 216.73.216.199:21018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:52.889562 2026] [cgi:error] [pid 3689468:tid 3689468] [client 66.249.66.196:49433] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:33:53.271676 2026] [core:error] [pid 3689766:tid 3689766] [client 167.172.228.148:43426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.impactscotland.erskinenazarene.co.uk/
[Thu Jul 30 15:33:53.271701 2026] [core:error] [pid 3689766:tid 3689766] [client 167.172.228.148:43426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://www.impactscotland.erskinenazarene.co.uk/
[Thu Jul 30 15:33:53.700049 2026] [ssl:error] [pid 3689224:tid 3689224] (EAI 2)Name or service not known: [client 144.76.19.72:62570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:53.700106 2026] [ssl:error] [pid 3689224:tid 3689224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:53.755269 2026] [ssl:error] [pid 3689720:tid 3689720] (EAI 2)Name or service not known: [client 144.76.19.72:62582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:53.755316 2026] [ssl:error] [pid 3689720:tid 3689720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:54.719584 2026] [ssl:error] [pid 3641918:tid 3641918] (70014)End of file found: [client 216.73.216.199:43153] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:55.228938 2026] [ssl:error] [pid 3673124:tid 3673124] (70014)End of file found: [client 216.73.216.199:60360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:55.886177 2026] [core:error] [pid 3689720:tid 3689720] [client 167.172.228.148:56820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.impactscotland.erskinenazarene.co.uk/
[Thu Jul 30 15:33:55.886209 2026] [core:error] [pid 3689720:tid 3689720] [client 167.172.228.148:56820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.impactscotland.erskinenazarene.co.uk/
[Thu Jul 30 15:33:56.813683 2026] [ssl:error] [pid 3686906:tid 3686906] (EAI 2)Name or service not known: [client 144.76.19.72:62594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:56.813713 2026] [ssl:error] [pid 3686906:tid 3686906] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:56.866559 2026] [ssl:error] [pid 3689432:tid 3689432] (EAI 2)Name or service not known: [client 144.76.19.72:62604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:56.866591 2026] [ssl:error] [pid 3689432:tid 3689432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:57.810218 2026] [lsapi:warn] [pid 3687960:tid 3687960] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:33:58.345055 2026] [ssl:error] [pid 3689669:tid 3689669] (70014)End of file found: [client 216.73.216.199:58862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:33:58.400874 2026] [access_compat:error] [pid 3686906:tid 3686906] [client 136.158.25.236:17822] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:33:59.920515 2026] [ssl:error] [pid 3688885:tid 3688885] (EAI 2)Name or service not known: [client 144.76.19.72:63134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:59.920559 2026] [ssl:error] [pid 3688885:tid 3688885] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:33:59.979327 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:63144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:33:59.979361 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:00.031704 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:30717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:01.051820 2026] [ssl:error] [pid 3689592:tid 3689592] (70014)End of file found: [client 216.73.216.199:14703] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:02.667295 2026] [access_compat:error] [pid 3686848:tid 3686848] [client 112.209.180.50:14991] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:03.035897 2026] [ssl:error] [pid 3676004:tid 3676004] (EAI 2)Name or service not known: [client 144.76.19.72:63160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:03.035934 2026] [ssl:error] [pid 3676004:tid 3676004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:03.091980 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:63174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:03.092018 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:04.371212 2026] [ssl:error] [pid 3667133:tid 3667133] (70014)End of file found: [client 216.73.216.199:32105] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:04.524913 2026] [security2:error] [pid 3678921:tid 3678921] [client 37.202.113.55:50752] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtg3BbFq77dbN_KSeHA3wAAAAs"]
[Thu Jul 30 15:34:04.524965 2026] [security2:error] [pid 3678921:tid 3678921] [client 37.202.113.55:50752] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtg3BbFq77dbN_KSeHA3wAAAAs"]
[Thu Jul 30 15:34:04.525225 2026] [security2:error] [pid 3678921:tid 3678921] [client 37.202.113.55:50752] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtg3BbFq77dbN_KSeHA3wAAAAs"]
[Thu Jul 30 15:34:05.547957 2026] [security2:error] [pid 3686906:tid 3686906] [client 43.166.242.189:58970] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/"] [unique_id "amtg3fSKRkqril5jLovNNQAAACE"]
[Thu Jul 30 15:34:06.145555 2026] [ssl:error] [pid 3687325:tid 3687325] (EAI 2)Name or service not known: [client 144.76.19.72:63188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:06.145614 2026] [ssl:error] [pid 3687325:tid 3687325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:06.192248 2026] [security2:error] [pid 3689770:tid 3689770] [client 85.73.50.108:50291] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtg3ptiLsNKvcPUX82l3QAAADc"]
[Thu Jul 30 15:34:06.192294 2026] [security2:error] [pid 3689770:tid 3689770] [client 85.73.50.108:50291] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtg3ptiLsNKvcPUX82l3QAAADc"]
[Thu Jul 30 15:34:06.192547 2026] [security2:error] [pid 3689770:tid 3689770] [client 85.73.50.108:50291] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtg3ptiLsNKvcPUX82l3QAAADc"]
[Thu Jul 30 15:34:06.199169 2026] [ssl:error] [pid 3665811:tid 3665811] (EAI 2)Name or service not known: [client 144.76.19.72:63196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:06.199215 2026] [ssl:error] [pid 3665811:tid 3665811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:07.119449 2026] [authz_core:error] [pid 3689768:tid 3689768] [client 66.249.66.34:50573] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:34:07.122121 2026] [authz_core:error] [pid 3689768:tid 3689768] [client 66.249.66.34:50573] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:34:09.104536 2026] [access_compat:error] [pid 3688885:tid 3688885] [client 136.158.25.236:18657] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:09.256805 2026] [ssl:error] [pid 3689469:tid 3689469] (EAI 2)Name or service not known: [client 144.76.19.72:63204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:09.256856 2026] [ssl:error] [pid 3689469:tid 3689469] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:09.310259 2026] [ssl:error] [pid 3686848:tid 3686848] (EAI 2)Name or service not known: [client 144.76.19.72:63220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:09.310291 2026] [ssl:error] [pid 3686848:tid 3686848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:09.571429 2026] [security2:error] [pid 3689720:tid 3689720] [client 124.29.224.23:15704] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtg4UbJ5ZARxC2WtpPjeQAAADM"]
[Thu Jul 30 15:34:09.571493 2026] [security2:error] [pid 3689720:tid 3689720] [client 124.29.224.23:15704] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtg4UbJ5ZARxC2WtpPjeQAAADM"]
[Thu Jul 30 15:34:09.571750 2026] [security2:error] [pid 3689720:tid 3689720] [client 124.29.224.23:15704] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtg4UbJ5ZARxC2WtpPjeQAAADM"]
[Thu Jul 30 15:34:10.094883 2026] [ssl:error] [pid 3687999:tid 3687999] (70014)End of file found: [client 216.73.216.199:8359] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:10.665928 2026] [security2:error] [pid 3686848:tid 3686848] [client 114.119.142.20:30705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~30-7-2019"] [unique_id "amtg4sF2_EzSK6FqG7UYRQAAAB4"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1564354800/cat_ids%7E102,17/request_format%7Ehtml
[Thu Jul 30 15:34:10.697410 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:40889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:11.196962 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:24672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:11.258409 2026] [security2:error] [pid 3689254:tid 3689254] [client 185.191.171.10:40506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4176.0/prev_next,prev.html"] [unique_id "amtg45Ajm_AQSo9SEhTnBQAAAAE"]
[Thu Jul 30 15:34:11.564853 2026] [cgi:error] [pid 3687325:tid 3687325] [client 66.132.172.216:63842] AH02812: stderr from /home/quantumc/public_html/quantum.com.mt/cgi-bin/: attempt to invoke directory as script, referer: http://www.quantum.com.mt:80/cgi-bin
[Thu Jul 30 15:34:11.764635 2026] [authz_core:error] [pid 3685517:tid 3685517] [client 66.249.66.33:64962] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:34:11.767283 2026] [authz_core:error] [pid 3685517:tid 3685517] [client 66.249.66.33:64962] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:34:12.154081 2026] [security2:error] [pid 3676004:tid 3676004] [client 114.119.142.20:30711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~30-7-2019"] [unique_id "amtg5EUu4ftHRhZEdvpFJwAAAAk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1564354800/cat_ids%7E102,17/request_format%7Ehtml
[Thu Jul 30 15:34:12.365135 2026] [ssl:error] [pid 3689254:tid 3689254] (EAI 2)Name or service not known: [client 144.76.19.72:61918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:12.365188 2026] [ssl:error] [pid 3689254:tid 3689254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:12.418427 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:61922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:12.418453 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:13.562355 2026] [access_compat:error] [pid 3686848:tid 3686848] [client 112.209.180.50:15475] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:13.991708 2026] [ssl:error] [pid 3689770:tid 3689770] (70014)End of file found: [client 216.73.216.199:9489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:15.498813 2026] [ssl:error] [pid 3676004:tid 3676004] (EAI 2)Name or service not known: [client 144.76.19.72:61926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:15.498854 2026] [ssl:error] [pid 3676004:tid 3676004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:15.551853 2026] [ssl:error] [pid 3686907:tid 3686907] (EAI 2)Name or service not known: [client 144.76.19.72:61942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:15.551891 2026] [ssl:error] [pid 3686907:tid 3686907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:18.055949 2026] [authz_core:error] [pid 3672700:tid 3672700] [client 66.249.66.33:54061] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:34:18.059013 2026] [authz_core:error] [pid 3672700:tid 3672700] [client 66.249.66.33:54061] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:34:18.608899 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:61952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:18.608946 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:18.662380 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:61962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:18.662415 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:20.616131 2026] [core:error] [pid 3689432:tid 3689432] (13)Permission denied: [client 216.73.216.199:60768] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS0/port
[Thu Jul 30 15:34:21.717338 2026] [ssl:error] [pid 3689720:tid 3689720] (EAI 2)Name or service not known: [client 144.76.19.72:52294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:21.717379 2026] [ssl:error] [pid 3689720:tid 3689720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:21.772591 2026] [ssl:error] [pid 3662074:tid 3662074] (EAI 2)Name or service not known: [client 144.76.19.72:52296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:21.772622 2026] [ssl:error] [pid 3662074:tid 3662074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:21.973238 2026] [security2:error] [pid 3641918:tid 3641918] [client 185.191.171.3:29514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/north-texas-state-hospital-famous-patients"] [unique_id "amtg7S40uWOiymCQfIy8rQAAABc"]
[Thu Jul 30 15:34:22.767519 2026] [lsapi:warn] [pid 3686848:tid 3686848] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:34:22.990481 2026] [authz_core:error] [pid 3684939:tid 3684939] [client 66.249.66.33:41337] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:34:22.993199 2026] [authz_core:error] [pid 3684939:tid 3684939] [client 66.249.66.33:41337] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:34:23.074092 2026] [authz_core:error] [pid 3662074:tid 3662074] [client 66.249.66.33:60143] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:34:23.076749 2026] [authz_core:error] [pid 3662074:tid 3662074] [client 66.249.66.33:60143] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:34:23.477617 2026] [access_compat:error] [pid 3641918:tid 3641918] [client 136.158.25.236:19859] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:23.588381 2026] [security2:error] [pid 3689224:tid 3689224] [client 103.233.56.103:60310] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtg70BEphuqxb_NZ5HW5QAAAAA"]
[Thu Jul 30 15:34:23.921472 2026] [access_compat:error] [pid 3687959:tid 3687959] [client 45.158.164.139:57332] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:34:24.533053 2026] [ssl:error] [pid 3689770:tid 3689770] (70014)End of file found: [client 216.73.216.199:53548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:24.903724 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:52298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:24.903752 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:24.958957 2026] [ssl:error] [pid 3672700:tid 3672700] (EAI 2)Name or service not known: [client 144.76.19.72:52306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:24.959001 2026] [ssl:error] [pid 3672700:tid 3672700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:25.131329 2026] [ssl:error] [pid 3689432:tid 3689432] (70014)End of file found: [client 216.73.216.199:60768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:25.756463 2026] [security2:error] [pid 3689719:tid 3689719] [client 85.208.96.199:41922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtg8a-ktr3kslTY3l9PZQAAADI"]
[Thu Jul 30 15:34:26.163265 2026] [security2:error] [pid 3678921:tid 3678921] [client 85.208.96.198:18644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2011/09/15/how-to-download-and-install-the-window-8-developer-preview/"] [unique_id "amtg8hbFq77dbN_KSeHA4gAAAAs"]
[Thu Jul 30 15:34:27.056799 2026] [security2:error] [pid 3667133:tid 3667133] [client 85.208.96.201:44948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "highclereracing.com"] [uri "/robots.txt"] [unique_id "amtg83v6KNynuNyWyE8DVQAAACg"]
[Thu Jul 30 15:34:28.015825 2026] [ssl:error] [pid 3691638:tid 3691638] (EAI 2)Name or service not known: [client 144.76.19.72:52318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:28.015871 2026] [ssl:error] [pid 3691638:tid 3691638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:28.067621 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:52330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:28.067648 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:28.716683 2026] [access_compat:error] [pid 3691638:tid 3691638] [client 45.158.164.139:57350] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:34:30.314694 2026] [access_compat:error] [pid 3676194:tid 3676194] [client 45.78.206.119:23647] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/04/clash-of-the-titans-bacofoil.jpg, referer: http://www.norwegianmorningwood.com
[Thu Jul 30 15:34:30.314803 2026] [access_compat:error] [pid 3676194:tid 3676194] [client 45.78.206.119:23647] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: http://www.norwegianmorningwood.com
[Thu Jul 30 15:34:30.661712 2026] [access_compat:error] [pid 3686906:tid 3686906] [client 136.158.25.236:20374] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:31.119724 2026] [ssl:error] [pid 3686907:tid 3686907] (EAI 2)Name or service not known: [client 144.76.19.72:24522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:31.119753 2026] [ssl:error] [pid 3686907:tid 3686907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:31.173911 2026] [ssl:error] [pid 3691740:tid 3691740] (EAI 2)Name or service not known: [client 144.76.19.72:24530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:31.173946 2026] [ssl:error] [pid 3691740:tid 3691740] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:31.822607 2026] [security2:error] [pid 3686907:tid 3686907] [client 20.197.226.217:54508] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtg99RYTwrPLyor9cD3fAAAACQ"]
[Thu Jul 30 15:34:34.028823 2026] [access_compat:error] [pid 3685517:tid 3685517] [client 136.158.25.236:20779] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:34.161269 2026] [core:error] [pid 3678921:tid 3678921] (13)Permission denied: [client 216.73.216.199:43704] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS0/irq
[Thu Jul 30 15:34:34.228202 2026] [ssl:error] [pid 3662074:tid 3662074] (EAI 2)Name or service not known: [client 144.76.19.72:24542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:34.228233 2026] [ssl:error] [pid 3662074:tid 3662074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:34.280806 2026] [ssl:error] [pid 3676004:tid 3676004] (EAI 2)Name or service not known: [client 144.76.19.72:24550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:34.280838 2026] [ssl:error] [pid 3676004:tid 3676004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:35.069061 2026] [security2:error] [pid 3662074:tid 3662074] [client 85.208.96.197:29124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5696.0/prev_next,next.html"] [unique_id "amtg-2grdzMCgiCdjenGkQAAAAg"]
[Thu Jul 30 15:34:36.269750 2026] [core:error] [pid 3678921:tid 3678921] (13)Permission denied: [client 216.73.216.199:43704] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty16/subsystem/ttyS2/line
[Thu Jul 30 15:34:36.571110 2026] [core:error] [pid 3678921:tid 3678921] (13)Permission denied: [client 216.73.216.199:43704] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/device/subsystem/drivers/alarmtimer/uevent
[Thu Jul 30 15:34:37.337616 2026] [ssl:error] [pid 3689432:tid 3689432] (EAI 2)Name or service not known: [client 144.76.19.72:24558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:37.337666 2026] [ssl:error] [pid 3689432:tid 3689432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:37.341137 2026] [security2:error] [pid 3691703:tid 3691703] [client 136.109.237.179:35834] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "static3.alism.com"] [uri "/.git/config"] [unique_id "amtg_RaaOQuBzc2Zw_P5BQAAAAQ"]
[Thu Jul 30 15:34:37.341271 2026] [security2:error] [pid 3691703:tid 3691703] [client 136.109.237.179:35834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "static3.alism.com"] [uri "/.git/config"] [unique_id "amtg_RaaOQuBzc2Zw_P5BQAAAAQ"]
[Thu Jul 30 15:34:37.341508 2026] [security2:error] [pid 3691703:tid 3691703] [client 136.109.237.179:35834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "static3.alism.com"] [uri "/.git/config"] [unique_id "amtg_RaaOQuBzc2Zw_P5BQAAAAQ"]
[Thu Jul 30 15:34:37.393811 2026] [ssl:error] [pid 3691638:tid 3691638] (EAI 2)Name or service not known: [client 144.76.19.72:24572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:37.393842 2026] [ssl:error] [pid 3691638:tid 3691638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:38.475940 2026] [authz_core:error] [pid 3641918:tid 3641918] [client 45.8.19.68:21457] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:34:38.478668 2026] [authz_core:error] [pid 3641918:tid 3641918] [client 45.8.19.68:21457] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:34:39.455235 2026] [security2:error] [pid 3673124:tid 3673124] [client 111.225.148.146:25016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/robots.txt"] [unique_id "amtg_35np6Bh95A5S7gLEgAAADE"]
[Thu Jul 30 15:34:39.587602 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:43704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:40.449406 2026] [ssl:error] [pid 3691638:tid 3691638] (EAI 2)Name or service not known: [client 144.76.19.72:33300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:40.449436 2026] [ssl:error] [pid 3691638:tid 3691638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:40.501188 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:33316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:40.501216 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:41.694163 2026] [security2:error] [pid 3687325:tid 3687325] [client 216.73.216.199:30474] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/slicoss/gbdownload.sys"] [unique_id "amthAWOTiFP9CefBh1e-8gAAAAw"]
[Thu Jul 30 15:34:41.694445 2026] [security2:error] [pid 3687325:tid 3687325] [client 216.73.216.199:30474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/slicoss/gbdownload.sys"] [unique_id "amthAWOTiFP9CefBh1e-8gAAAAw"]
[Thu Jul 30 15:34:41.694666 2026] [security2:error] [pid 3687325:tid 3687325] [client 216.73.216.199:30474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/firmware/slicoss/gbdownload.sys"] [unique_id "amthAWOTiFP9CefBh1e-8gAAAAw"]
[Thu Jul 30 15:34:42.503120 2026] [ssl:error] [pid 3687325:tid 3687325] (70014)End of file found: [client 216.73.216.199:30474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:43.557996 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:33330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:43.558035 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:43.615860 2026] [ssl:error] [pid 3689770:tid 3689770] (EAI 2)Name or service not known: [client 144.76.19.72:33346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:43.615899 2026] [ssl:error] [pid 3689770:tid 3689770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:43.711197 2026] [ssl:error] [pid 3689394:tid 3689394] (70014)End of file found: [client 216.73.216.199:60759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:44.152892 2026] [lsapi:warn] [pid 3686907:tid 3686907] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:34:44.782523 2026] [access_compat:error] [pid 3691965:tid 3691965] [client 112.209.180.50:16751] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:46.427252 2026] [core:error] [pid 3673124:tid 3673124] (13)Permission denied: [client 216.73.216.199:41130] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/luxus.com.mt.db
[Thu Jul 30 15:34:46.689978 2026] [ssl:error] [pid 3689720:tid 3689720] (EAI 2)Name or service not known: [client 144.76.19.72:33362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:46.690017 2026] [ssl:error] [pid 3689720:tid 3689720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:46.729901 2026] [ssl:error] [pid 3673124:tid 3673124] (70014)End of file found: [client 216.73.216.199:41130] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:46.791548 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:33376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:46.791575 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:46.893580 2026] [security2:error] [pid 3689720:tid 3689720] [client 185.191.171.10:27474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1089.0/prev_next,prev.html"] [unique_id "amthBkbJ5ZARxC2WtpPjgQAAADM"]
[Thu Jul 30 15:34:48.253095 2026] [core:crit] [pid 3692465:tid 3692465] (13)Permission denied: [client 216.73.216.199:49295] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/tracing/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/tracing/' is executable
[Thu Jul 30 15:34:48.267017 2026] [core:crit] [pid 3692465:tid 3692465] (13)Permission denied: [client 216.73.216.199:49295] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/debug/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/kernel/debug/' is executable
[Thu Jul 30 15:34:49.150413 2026] [security2:error] [pid 3692465:tid 3692465] [client 216.73.216.199:49295] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/package_reinstaller.log"] [unique_id "amthCcUEc1jEOeBg8mpB7QAAAAg"]
[Thu Jul 30 15:34:49.150794 2026] [security2:error] [pid 3692465:tid 3692465] [client 216.73.216.199:49295] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/package_reinstaller.log"] [unique_id "amthCcUEc1jEOeBg8mpB7QAAAAg"]
[Thu Jul 30 15:34:49.151080 2026] [security2:error] [pid 3692465:tid 3692465] [client 216.73.216.199:49295] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/package_reinstaller.log"] [unique_id "amthCcUEc1jEOeBg8mpB7QAAAAg"]
[Thu Jul 30 15:34:49.846945 2026] [ssl:error] [pid 3674041:tid 3674041] (EAI 2)Name or service not known: [client 144.76.19.72:33068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:49.846981 2026] [ssl:error] [pid 3674041:tid 3674041] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:49.901541 2026] [ssl:error] [pid 3689394:tid 3689394] (EAI 2)Name or service not known: [client 144.76.19.72:33072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:49.901574 2026] [ssl:error] [pid 3689394:tid 3689394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:51.580270 2026] [authz_core:error] [pid 3689432:tid 3689432] [client 66.249.66.33:43421] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:34:51.583093 2026] [authz_core:error] [pid 3689432:tid 3689432] [client 66.249.66.33:43421] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:34:52.944302 2026] [cgi:error] [pid 3689768:tid 3689768] [client 20.199.183.73:24297] AH02812: stderr from /home/robincou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:34:52.953444 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:33076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:52.953471 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:53.009359 2026] [ssl:error] [pid 3676194:tid 3676194] (EAI 2)Name or service not known: [client 144.76.19.72:33082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:53.009393 2026] [ssl:error] [pid 3676194:tid 3676194] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:54.904092 2026] [ssl:error] [pid 3692465:tid 3692465] (70014)End of file found: [client 216.73.216.199:49295] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:55.123059 2026] [access_compat:error] [pid 3673124:tid 3673124] [client 112.209.180.50:17176] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:34:55.808033 2026] [ssl:error] [pid 3665811:tid 3665811] (70014)End of file found: [client 216.73.216.199:30281] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:56.072547 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:33098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:56.072589 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:56.184704 2026] [ssl:error] [pid 3689394:tid 3689394] (EAI 2)Name or service not known: [client 144.76.19.72:33104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:56.184747 2026] [ssl:error] [pid 3689394:tid 3689394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:58.223660 2026] [core:error] [pid 3689471:tid 3689471] (13)Permission denied: [client 216.73.216.199:60110] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty43/subsystem/ttyS2/line
[Thu Jul 30 15:34:58.524919 2026] [ssl:error] [pid 3689471:tid 3689471] (70014)End of file found: [client 216.73.216.199:60110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:34:58.613433 2026] [cgi:error] [pid 3681296:tid 3681296] [client 20.151.221.234:13236] AH02812: stderr from /home/jgqawffu/public_html/greenduckgallery.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:34:59.241960 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:33114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:59.241991 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:34:59.298393 2026] [ssl:error] [pid 3692927:tid 3692927] (EAI 2)Name or service not known: [client 144.76.19.72:33124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:34:59.298428 2026] [ssl:error] [pid 3692927:tid 3692927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:01.242864 2026] [ssl:error] [pid 3685517:tid 3685517] (70014)End of file found: [client 216.73.216.199:19843] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:01.873228 2026] [ssl:error] [pid 3674041:tid 3674041] (5)Input/output error: [client 216.73.216.199:64971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:02.354615 2026] [ssl:error] [pid 3691638:tid 3691638] (EAI 2)Name or service not known: [client 144.76.19.72:58636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:02.354648 2026] [ssl:error] [pid 3691638:tid 3691638] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:02.410347 2026] [ssl:error] [pid 3692609:tid 3692609] (EAI 2)Name or service not known: [client 144.76.19.72:58650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:02.410405 2026] [ssl:error] [pid 3692609:tid 3692609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:02.887916 2026] [access_compat:error] [pid 3672700:tid 3672700] [client 136.158.25.236:23242] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:03.926631 2026] [security2:error] [pid 3693206:tid 3693206] [client 47.239.23.80:39839] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthF3ytAgi08d9v-lXMPgAAAC4"]
[Thu Jul 30 15:35:03.926682 2026] [security2:error] [pid 3693206:tid 3693206] [client 47.239.23.80:39839] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthF3ytAgi08d9v-lXMPgAAAC4"]
[Thu Jul 30 15:35:03.926957 2026] [security2:error] [pid 3693206:tid 3693206] [client 47.239.23.80:39839] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthF3ytAgi08d9v-lXMPgAAAC4"]
[Thu Jul 30 15:35:04.569543 2026] [core:error] [pid 3676004:tid 3676004] (13)Permission denied: [client 216.73.216.199:10762] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/passive3dmonitor.co.uk.db
[Thu Jul 30 15:35:05.023665 2026] [security2:error] [pid 3667133:tid 3667133] [client 37.215.40.199:2747] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthGXv6KNynuNyWyE8DggAAACg"]
[Thu Jul 30 15:35:05.023715 2026] [security2:error] [pid 3667133:tid 3667133] [client 37.215.40.199:2747] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthGXv6KNynuNyWyE8DggAAACg"]
[Thu Jul 30 15:35:05.023964 2026] [security2:error] [pid 3667133:tid 3667133] [client 37.215.40.199:2747] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthGXv6KNynuNyWyE8DggAAACg"]
[Thu Jul 30 15:35:05.438771 2026] [access_compat:error] [pid 3692609:tid 3692609] [client 136.158.25.236:23541] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:05.465170 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:58656] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:05.465196 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:05.517853 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:58666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:05.517879 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:05.636904 2026] [security2:error] [pid 3648656:tid 3648656] [client 43.157.150.69:59234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.com"] [uri "/"] [unique_id "amthGSKDRAglsH-kd_oblgAAABA"]
[Thu Jul 30 15:35:06.400359 2026] [ssl:error] [pid 3676004:tid 3676004] (70014)End of file found: [client 216.73.216.199:10762] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:07.014032 2026] [ssl:error] [pid 3676194:tid 3676194] (70014)End of file found: [client 216.73.216.199:37932] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:07.265358 2026] [lsapi:warn] [pid 3692608:tid 3692608] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:35:08.569666 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:58668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:08.569702 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:08.624112 2026] [ssl:error] [pid 3667133:tid 3667133] (EAI 2)Name or service not known: [client 144.76.19.72:58678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:08.624141 2026] [ssl:error] [pid 3667133:tid 3667133] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:08.750959 2026] [security2:error] [pid 3689394:tid 3689394] [client 185.105.212.51:62188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthHIoqVK2px4huxiM_7QAAAA8"]
[Thu Jul 30 15:35:08.751025 2026] [security2:error] [pid 3689394:tid 3689394] [client 185.105.212.51:62188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthHIoqVK2px4huxiM_7QAAAA8"]
[Thu Jul 30 15:35:08.751279 2026] [security2:error] [pid 3689394:tid 3689394] [client 185.105.212.51:62188] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthHIoqVK2px4huxiM_7QAAAA8"]
[Thu Jul 30 15:35:09.423604 2026] [ssl:error] [pid 3685517:tid 3685517] (70014)End of file found: [client 216.73.216.199:25910] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:10.516604 2026] [authz_core:error] [pid 3689224:tid 3689224] [client 66.249.66.35:47948] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:35:10.519386 2026] [authz_core:error] [pid 3689224:tid 3689224] [client 66.249.66.35:47948] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:35:10.578486 2026] [authz_core:error] [pid 3693207:tid 3693207] [client 66.249.66.35:51944] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:35:10.581179 2026] [authz_core:error] [pid 3693207:tid 3693207] [client 66.249.66.35:51944] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:35:11.677899 2026] [ssl:error] [pid 3673124:tid 3673124] (EAI 2)Name or service not known: [client 144.76.19.72:57938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:11.677945 2026] [ssl:error] [pid 3673124:tid 3673124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:11.733543 2026] [ssl:error] [pid 3693208:tid 3693208] (EAI 2)Name or service not known: [client 144.76.19.72:57942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:11.733574 2026] [ssl:error] [pid 3693208:tid 3693208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:13.186305 2026] [authz_core:error] [pid 3689471:tid 3689471] [client 66.249.66.33:60282] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:35:13.189031 2026] [authz_core:error] [pid 3689471:tid 3689471] [client 66.249.66.33:60282] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:35:13.757468 2026] [ssl:error] [pid 3693125:tid 3693125] (70014)End of file found: [client 216.73.216.199:43743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:14.792523 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:57948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:14.792557 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:14.843854 2026] [ssl:error] [pid 3684939:tid 3684939] (EAI 2)Name or service not known: [client 144.76.19.72:57962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:14.843889 2026] [ssl:error] [pid 3684939:tid 3684939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:14.981749 2026] [core:error] [pid 3685615:tid 3685615] (13)Permission denied: [client 216.73.216.199:14877] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/simplychange.com.db
[Thu Jul 30 15:35:15.276381 2026] [authz_core:error] [pid 3686907:tid 3686907] [client 66.249.66.34:62701] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:35:15.279439 2026] [authz_core:error] [pid 3686907:tid 3686907] [client 66.249.66.34:62701] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:35:15.973432 2026] [access_compat:error] [pid 3693207:tid 3693207] [client 136.158.25.236:24286] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:17.900936 2026] [ssl:error] [pid 3687325:tid 3687325] (EAI 2)Name or service not known: [client 144.76.19.72:57964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:17.900965 2026] [ssl:error] [pid 3687325:tid 3687325] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:17.953825 2026] [ssl:error] [pid 3665811:tid 3665811] (EAI 2)Name or service not known: [client 144.76.19.72:57976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:17.953856 2026] [ssl:error] [pid 3665811:tid 3665811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:18.908918 2026] [ssl:error] [pid 3685615:tid 3685615] (70014)End of file found: [client 216.73.216.199:14877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:19.400204 2026] [security2:error] [pid 3676194:tid 3676194] [client 216.73.216.199:1685] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-skeleton/lib/tmpfiles.d/screen.conf"] [unique_id "amthJ1oEcVv0zZ3EDxAtZgAAACo"]
[Thu Jul 30 15:35:19.400494 2026] [security2:error] [pid 3676194:tid 3676194] [client 216.73.216.199:1685] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-skeleton/lib/tmpfiles.d/screen.conf"] [unique_id "amthJ1oEcVv0zZ3EDxAtZgAAACo"]
[Thu Jul 30 15:35:19.400695 2026] [security2:error] [pid 3676194:tid 3676194] [client 216.73.216.199:1685] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/cagefs-skeleton/lib/tmpfiles.d/screen.conf"] [unique_id "amthJ1oEcVv0zZ3EDxAtZgAAACo"]
[Thu Jul 30 15:35:19.807486 2026] [autoindex:error] [pid 3689471:tid 3689471] [client 51.120.79.193:51969] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:35:20.126921 2026] [ssl:error] [pid 3676194:tid 3676194] (70014)End of file found: [client 216.73.216.199:1685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:20.656714 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:20058] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:21.007514 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:54422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:21.007543 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:21.060719 2026] [ssl:error] [pid 3691965:tid 3691965] (EAI 2)Name or service not known: [client 144.76.19.72:54430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:21.060754 2026] [ssl:error] [pid 3691965:tid 3691965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:22.121521 2026] [authz_core:error] [pid 3689770:tid 3689770] [client 66.249.66.33:40848] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:35:22.124217 2026] [authz_core:error] [pid 3689770:tid 3689770] [client 66.249.66.33:40848] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:35:22.369562 2026] [access_compat:error] [pid 3689471:tid 3689471] [client 136.158.25.236:24895] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:22.982806 2026] [security2:error] [pid 3648656:tid 3648656] [client 185.191.171.6:15666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/elenco-telefonico-pesaro-urbino"] [unique_id "amthKiKDRAglsH-kd_obnAAAABA"]
[Thu Jul 30 15:35:24.141857 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:54442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:24.141899 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:24.194669 2026] [ssl:error] [pid 3685655:tid 3685655] (EAI 2)Name or service not known: [client 144.76.19.72:54458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:24.194716 2026] [ssl:error] [pid 3685655:tid 3685655] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:24.487676 2026] [lsapi:warn] [pid 3689394:tid 3689394] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:35:25.252523 2026] [security2:error] [pid 3685655:tid 3685655] [client 38.41.21.71:41123] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthLbz5qQWftGGniZBxqQAAABI"]
[Thu Jul 30 15:35:25.252583 2026] [security2:error] [pid 3685655:tid 3685655] [client 38.41.21.71:41123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthLbz5qQWftGGniZBxqQAAABI"]
[Thu Jul 30 15:35:25.252857 2026] [security2:error] [pid 3685655:tid 3685655] [client 38.41.21.71:41123] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthLbz5qQWftGGniZBxqQAAABI"]
[Thu Jul 30 15:35:26.438479 2026] [access_compat:error] [pid 3689768:tid 3689768] [client 136.158.25.236:25178] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:26.920897 2026] [access_compat:error] [pid 3672700:tid 3672700] [client 45.158.164.139:44096] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:35:27.248642 2026] [ssl:error] [pid 3686907:tid 3686907] (EAI 2)Name or service not known: [client 144.76.19.72:54464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:27.248681 2026] [ssl:error] [pid 3686907:tid 3686907] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:27.301637 2026] [ssl:error] [pid 3689770:tid 3689770] (EAI 2)Name or service not known: [client 144.76.19.72:54476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:27.301667 2026] [ssl:error] [pid 3689770:tid 3689770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:27.397998 2026] [ssl:error] [pid 3689432:tid 3689432] (70014)End of file found: [client 216.73.216.199:16585] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:27.901224 2026] [security2:error] [pid 3693125:tid 3693125] [client 216.73.216.199:42377] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/zabbix-agent.conf"] [unique_id "amthL8k5H4CMTFenp0IE6gAAACc"]
[Thu Jul 30 15:35:27.901618 2026] [security2:error] [pid 3693125:tid 3693125] [client 216.73.216.199:42377] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/zabbix-agent.conf"] [unique_id "amthL8k5H4CMTFenp0IE6gAAACc"]
[Thu Jul 30 15:35:27.901904 2026] [security2:error] [pid 3693125:tid 3693125] [client 216.73.216.199:42377] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/zabbix-agent.conf"] [unique_id "amthL8k5H4CMTFenp0IE6gAAACc"]
[Thu Jul 30 15:35:29.369601 2026] [core:error] [pid 3689471:tid 3689471] [client 20.104.16.169:36194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:29.369647 2026] [core:error] [pid 3689471:tid 3689471] [client 20.104.16.169:36194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:29.585160 2026] [access_compat:error] [pid 3689592:tid 3689592] [client 45.158.164.139:44112] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:35:29.816631 2026] [core:error] [pid 3693125:tid 3693125] (13)Permission denied: [client 216.73.216.199:42377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty52/subsystem/ttyS3/uartclk
[Thu Jul 30 15:35:30.121540 2026] [core:error] [pid 3693125:tid 3693125] (13)Permission denied: [client 216.73.216.199:42377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS0/port
[Thu Jul 30 15:35:30.357428 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:55744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:30.357478 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:30.410531 2026] [ssl:error] [pid 3689770:tid 3689770] (EAI 2)Name or service not known: [client 144.76.19.72:55758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:30.410564 2026] [ssl:error] [pid 3689770:tid 3689770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:32.532448 2026] [security2:error] [pid 3693208:tid 3693208] [client 188.53.108.218:4042] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthNJkskFv8koKIkCa61QAAADg"]
[Thu Jul 30 15:35:32.532506 2026] [security2:error] [pid 3693208:tid 3693208] [client 188.53.108.218:4042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthNJkskFv8koKIkCa61QAAADg"]
[Thu Jul 30 15:35:32.532781 2026] [security2:error] [pid 3693208:tid 3693208] [client 188.53.108.218:4042] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthNJkskFv8koKIkCa61QAAADg"]
[Thu Jul 30 15:35:33.339543 2026] [security2:error] [pid 3665811:tid 3665811] [client 114.119.158.38:40013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~27-8-2018"] [unique_id "amthNYpjMLoJGUXK2HomkQAAACI"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1533078000/cat_ids%7E18,104,102,30/request_format%7Ehtml
[Thu Jul 30 15:35:33.807097 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:55772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:33.807133 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:33.998655 2026] [access_compat:error] [pid 3689768:tid 3689768] [client 136.158.25.236:25864] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:34.180319 2026] [ssl:error] [pid 3665811:tid 3665811] (EAI 2)Name or service not known: [client 144.76.19.72:55786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:34.180348 2026] [ssl:error] [pid 3665811:tid 3665811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:34.465774 2026] [security2:error] [pid 3686907:tid 3686907] [client 114.119.158.38:40027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~27-8-2018"] [unique_id "amthNtRYTwrPLyor9cD39QAAACQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1533078000/cat_ids%7E18,104,102,30/request_format%7Ehtml
[Thu Jul 30 15:35:35.259472 2026] [access_compat:error] [pid 3692567:tid 3692567] [client 89.45.53.3:42288] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:35:35.360064 2026] [core:error] [pid 3692567:tid 3692567] [client 20.104.16.169:36178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:35.360100 2026] [core:error] [pid 3692567:tid 3692567] [client 20.104.16.169:36178] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:35.957399 2026] [access_compat:error] [pid 3694764:tid 3694764] [client 2.189.5.218:53208] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:35:35.968804 2026] [access_compat:error] [pid 3694766:tid 3694766] [client 2.189.5.142:45922] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:35:36.015727 2026] [access_compat:error] [pid 3694712:tid 3694712] [client 89.45.53.30:49630] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:35:37.237520 2026] [ssl:error] [pid 3691739:tid 3691739] (EAI 2)Name or service not known: [client 144.76.19.72:55802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:37.237557 2026] [ssl:error] [pid 3691739:tid 3691739] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:37.257702 2026] [access_compat:error] [pid 3687529:tid 3687529] [client 136.158.25.236:26187] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:37.293877 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:55818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:37.293909 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:37.976874 2026] [core:error] [pid 3692567:tid 3692567] (13)Permission denied: [client 216.73.216.199:44942] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty34/subsystem/ttyS2/line
[Thu Jul 30 15:35:38.107596 2026] [security2:error] [pid 3694812:tid 3694812] [client 114.119.133.1:22967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.vain.band"] [uri "/robots.txt"] [unique_id "amthOjnzwR77dwtB1zGQsAAAADk"], referer: http://www.vain.band/robots.txt
[Thu Jul 30 15:35:40.346774 2026] [ssl:error] [pid 3689394:tid 3689394] (EAI 2)Name or service not known: [client 144.76.19.72:44084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:40.346804 2026] [ssl:error] [pid 3689394:tid 3689394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:40.384684 2026] [ssl:error] [pid 3692567:tid 3692567] (70014)End of file found: [client 216.73.216.199:44942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:40.403061 2026] [ssl:error] [pid 3694811:tid 3694811] (EAI 2)Name or service not known: [client 144.76.19.72:44092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:40.403108 2026] [ssl:error] [pid 3694811:tid 3694811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:41.093162 2026] [core:error] [pid 3694812:tid 3694812] [client 20.104.16.169:36133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:41.093189 2026] [core:error] [pid 3694812:tid 3694812] [client 20.104.16.169:36133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:41.653785 2026] [security2:error] [pid 3672700:tid 3672700] [client 169.224.121.232:38236] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthPfXsgbsDTDkdXbDF1wAAAB0"]
[Thu Jul 30 15:35:41.653841 2026] [security2:error] [pid 3672700:tid 3672700] [client 169.224.121.232:38236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthPfXsgbsDTDkdXbDF1wAAAB0"]
[Thu Jul 30 15:35:41.654090 2026] [security2:error] [pid 3672700:tid 3672700] [client 169.224.121.232:38236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthPfXsgbsDTDkdXbDF1wAAAB0"]
[Thu Jul 30 15:35:42.375701 2026] [authz_core:error] [pid 3648656:tid 3648656] [client 66.249.66.33:56100] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:35:42.378657 2026] [authz_core:error] [pid 3648656:tid 3648656] [client 66.249.66.33:56100] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:35:42.577330 2026] [core:error] [pid 3693125:tid 3693125] (13)Permission denied: [client 216.73.216.199:42377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/nfit/sections/__kcrctab
[Thu Jul 30 15:35:43.456465 2026] [ssl:error] [pid 3694765:tid 3694765] (EAI 2)Name or service not known: [client 144.76.19.72:44094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:43.456512 2026] [ssl:error] [pid 3694765:tid 3694765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:43.513017 2026] [ssl:error] [pid 3694810:tid 3694810] (EAI 2)Name or service not known: [client 144.76.19.72:44096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:43.513053 2026] [ssl:error] [pid 3694810:tid 3694810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:44.912552 2026] [core:error] [pid 3673124:tid 3673124] [client 20.104.16.169:36221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:44.912588 2026] [core:error] [pid 3673124:tid 3673124] [client 20.104.16.169:36221] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:45.657653 2026] [lsapi:warn] [pid 3672700:tid 3672700] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:35:46.568821 2026] [ssl:error] [pid 3689224:tid 3689224] (EAI 2)Name or service not known: [client 144.76.19.72:44112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:46.568861 2026] [ssl:error] [pid 3689224:tid 3689224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:46.621460 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:44124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:46.621488 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:47.405228 2026] [core:error] [pid 3693125:tid 3693125] (13)Permission denied: [client 216.73.216.199:42377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS0/iomem_reg_shift
[Thu Jul 30 15:35:47.409614 2026] [access_compat:error] [pid 3694812:tid 3694812] [client 136.158.25.236:27086] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:47.567502 2026] [autoindex:error] [pid 3687959:tid 3687959] [client 51.120.79.193:29339] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:35:48.295121 2026] [security2:error] [pid 3689224:tid 3689224] [client 170.106.187.106:42808] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sewyork.co.uk"] [uri "/"] [unique_id "amthREBEphuqxb_NZ5HXCAAAAAA"]
[Thu Jul 30 15:35:49.675734 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:21728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:49.675773 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:49.731624 2026] [ssl:error] [pid 3689468:tid 3689468] (EAI 2)Name or service not known: [client 144.76.19.72:21744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:49.731658 2026] [ssl:error] [pid 3689468:tid 3689468] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:50.716905 2026] [core:error] [pid 3693125:tid 3693125] (13)Permission denied: [client 216.73.216.199:42377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS0/subsystem/ttyS2/line
[Thu Jul 30 15:35:50.741830 2026] [core:error] [pid 3687529:tid 3687529] [client 20.104.16.169:36179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:50.741855 2026] [core:error] [pid 3687529:tid 3687529] [client 20.104.16.169:36179] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:51.020854 2026] [core:error] [pid 3693125:tid 3693125] (13)Permission denied: [client 216.73.216.199:42377] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS2/subsystem/ttyS0/line
[Thu Jul 30 15:35:51.620614 2026] [ssl:error] [pid 3693125:tid 3693125] (70014)End of file found: [client 216.73.216.199:42377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:52.171494 2026] [security2:error] [pid 3694815:tid 3694815] [client 20.171.55.167:8913] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "broadbentandsmith.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amthSMI93n3lBbnoRqyvwAAAADw"]
[Thu Jul 30 15:35:52.171657 2026] [security2:error] [pid 3694815:tid 3694815] [client 20.171.55.167:8913] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "broadbentandsmith.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amthSMI93n3lBbnoRqyvwAAAADw"]
[Thu Jul 30 15:35:52.171865 2026] [security2:error] [pid 3694815:tid 3694815] [client 20.171.55.167:8913] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "broadbentandsmith.ditchfest.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amthSMI93n3lBbnoRqyvwAAAADw"]
[Thu Jul 30 15:35:52.316981 2026] [ssl:error] [pid 3648656:tid 3648656] (70014)End of file found: [client 216.73.216.199:31395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:52.447446 2026] [security2:error] [pid 3694711:tid 3694711] [client 34.196.114.170:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/index.php/wishlist/"] [unique_id "amthSPtFZpV1zC9N4ndzxwAAAAk"]
[Thu Jul 30 15:35:52.793832 2026] [ssl:error] [pid 3687529:tid 3687529] (EAI 2)Name or service not known: [client 144.76.19.72:21756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:52.793871 2026] [ssl:error] [pid 3687529:tid 3687529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:52.850292 2026] [ssl:error] [pid 3691965:tid 3691965] (EAI 2)Name or service not known: [client 144.76.19.72:21772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:52.850316 2026] [ssl:error] [pid 3691965:tid 3691965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:53.426805 2026] [ssl:error] [pid 3689592:tid 3689592] (70014)End of file found: [client 216.73.216.199:38788] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:53.682455 2026] [access_compat:error] [pid 3684939:tid 3684939] [client 136.158.25.236:27603] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:55.218953 2026] [security2:error] [pid 3689394:tid 3689394] [client 20.63.98.115:23128] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "annasmithagent.com"] [uri "/wp-config.php"] [unique_id "amthS4oqVK2px4huxiNAJgAAAA8"]
[Thu Jul 30 15:35:55.219192 2026] [security2:error] [pid 3689394:tid 3689394] [client 20.63.98.115:23128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "annasmithagent.com"] [uri "/wp-config.php"] [unique_id "amthS4oqVK2px4huxiNAJgAAAA8"]
[Thu Jul 30 15:35:55.219460 2026] [security2:error] [pid 3689394:tid 3689394] [client 20.63.98.115:23128] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "annasmithagent.com"] [uri "/wp-config.php"] [unique_id "amthS4oqVK2px4huxiNAJgAAAA8"]
[Thu Jul 30 15:35:55.906490 2026] [ssl:error] [pid 3692567:tid 3692567] (EAI 2)Name or service not known: [client 144.76.19.72:21788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:55.906525 2026] [ssl:error] [pid 3692567:tid 3692567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:55.961479 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:21804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:55.961504 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:56.385432 2026] [security2:error] [pid 3692890:tid 3692890] [client 20.171.55.167:2189] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.freerangemumblings.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amthTAd4GcAxkcLvn8fPOgAAABo"]
[Thu Jul 30 15:35:56.385589 2026] [security2:error] [pid 3692890:tid 3692890] [client 20.171.55.167:2189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.freerangemumblings.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amthTAd4GcAxkcLvn8fPOgAAABo"]
[Thu Jul 30 15:35:56.393177 2026] [security2:error] [pid 3692890:tid 3692890] [client 20.171.55.167:2189] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.freerangemumblings.josieandmatt.co.uk"] [uri "/index.php"] [unique_id "amthTAd4GcAxkcLvn8fPOgAAABo"]
[Thu Jul 30 15:35:57.367378 2026] [ssl:error] [pid 3692567:tid 3692567] (70014)End of file found: [client 216.73.216.199:31084] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:35:58.149739 2026] [access_compat:error] [pid 3693205:tid 3693205] [client 112.209.180.50:15674] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:35:59.015459 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:21810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:59.015500 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:59.068675 2026] [ssl:error] [pid 3689592:tid 3689592] (EAI 2)Name or service not known: [client 144.76.19.72:21826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:35:59.068718 2026] [ssl:error] [pid 3689592:tid 3689592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:35:59.180862 2026] [security2:error] [pid 3685517:tid 3685517] [client 216.73.216.199:61777] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/elevate-cpanel.log"] [unique_id "amthT_Np9S1A5gfWM1JR5QAAAAM"]
[Thu Jul 30 15:35:59.181181 2026] [security2:error] [pid 3685517:tid 3685517] [client 216.73.216.199:61777] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/elevate-cpanel.log"] [unique_id "amthT_Np9S1A5gfWM1JR5QAAAAM"]
[Thu Jul 30 15:35:59.181413 2026] [security2:error] [pid 3685517:tid 3685517] [client 216.73.216.199:61777] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/elevate-cpanel.log"] [unique_id "amthT_Np9S1A5gfWM1JR5QAAAAM"]
[Thu Jul 30 15:35:59.223750 2026] [core:error] [pid 3648656:tid 3648656] [client 20.104.16.169:36170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:35:59.223779 2026] [core:error] [pid 3648656:tid 3648656] [client 20.104.16.169:36170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:00.190846 2026] [authz_core:error] [pid 3686848:tid 3686848] [client 66.249.66.33:37978] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:36:00.193584 2026] [authz_core:error] [pid 3686848:tid 3686848] [client 66.249.66.33:37978] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:36:01.130271 2026] [ssl:error] [pid 3694810:tid 3694810] (70014)End of file found: [client 216.73.216.199:1605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:01.628835 2026] [ssl:error] [pid 3694815:tid 3694815] (70014)End of file found: [client 216.73.216.199:46793] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:02.188761 2026] [ssl:error] [pid 3689768:tid 3689768] (EAI 2)Name or service not known: [client 144.76.19.72:60824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:02.188817 2026] [ssl:error] [pid 3689768:tid 3689768] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:02.257144 2026] [ssl:error] [pid 3665811:tid 3665811] (EAI 2)Name or service not known: [client 144.76.19.72:60826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:02.257174 2026] [ssl:error] [pid 3665811:tid 3665811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:02.438769 2026] [core:error] [pid 3672700:tid 3672700] [client 20.104.16.169:36128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:02.438808 2026] [core:error] [pid 3672700:tid 3672700] [client 20.104.16.169:36128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:02.492615 2026] [authz_core:error] [pid 3686848:tid 3686848] [client 66.249.66.33:37978] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:36:02.495320 2026] [authz_core:error] [pid 3686848:tid 3686848] [client 66.249.66.33:37978] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:36:03.883526 2026] [authz_core:error] [pid 3694812:tid 3694812] [client 158.158.38.215:60704] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:36:03.885440 2026] [access_compat:error] [pid 3694812:tid 3694812] [client 158.158.38.215:60704] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 15:36:03.885480 2026] [access_compat:error] [pid 3694812:tid 3694812] [client 158.158.38.215:60704] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 15:36:03.889666 2026] [access_compat:error] [pid 3694812:tid 3694812] [client 158.158.38.215:60704] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 15:36:04.746015 2026] [ssl:error] [pid 3689394:tid 3689394] (70014)End of file found: [client 216.73.216.199:35876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:05.102158 2026] [security2:error] [pid 3696417:tid 3696417] [client 43.167.163.51:59957] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthVXISR4p_-XgNN_SBfwAAABI"]
[Thu Jul 30 15:36:05.102226 2026] [security2:error] [pid 3696417:tid 3696417] [client 43.167.163.51:59957] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthVXISR4p_-XgNN_SBfwAAABI"]
[Thu Jul 30 15:36:05.102585 2026] [security2:error] [pid 3696417:tid 3696417] [client 43.167.163.51:59957] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthVXISR4p_-XgNN_SBfwAAABI"]
[Thu Jul 30 15:36:05.313558 2026] [ssl:error] [pid 3679052:tid 3679052] (EAI 2)Name or service not known: [client 144.76.19.72:60838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:05.313611 2026] [ssl:error] [pid 3679052:tid 3679052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:05.369859 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:60840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:05.369891 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:05.734020 2026] [core:error] [pid 3689433:tid 3689433] [client 20.104.16.169:36104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:05.734045 2026] [core:error] [pid 3689433:tid 3689433] [client 20.104.16.169:36104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:06.270732 2026] [security2:error] [pid 3693205:tid 3693205] [client 49.234.192.248:43594] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.stopfordsackville.com"] [uri "/"] [unique_id "amthVrcTicFsTHMs3ynCOgAAACw"]
[Thu Jul 30 15:36:06.271665 2026] [authz_core:error] [pid 3693205:tid 3693205] [client 49.234.192.248:43594] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 15:36:06.577058 2026] [security2:error] [pid 3684939:tid 3684939] [client 170.106.84.136:56908] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns2.ns-ganymede.com"] [uri "/"] [unique_id "amthVufzxtNHVfojGWDtKwAAABM"]
[Thu Jul 30 15:36:06.675151 2026] [security2:error] [pid 3662117:tid 3662117] [client 49.51.38.193:40550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.butteredcat.com"] [uri "/wp/"] [unique_id "amthVg3C4mueXBSPH1nnvQAAAAo"]
[Thu Jul 30 15:36:07.397096 2026] [authz_core:error] [pid 3694812:tid 3694812] [client 158.158.38.215:60704] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 15:36:07.450688 2026] [ssl:error] [pid 3689468:tid 3689468] (70014)End of file found: [client 216.73.216.199:40476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:07.638701 2026] [security2:error] [pid 3686848:tid 3686848] [client 102.204.123.214:52428] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthV8F2_EzSK6FqG7UYfgAAAB4"]
[Thu Jul 30 15:36:07.638752 2026] [security2:error] [pid 3686848:tid 3686848] [client 102.204.123.214:52428] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthV8F2_EzSK6FqG7UYfgAAAB4"]
[Thu Jul 30 15:36:07.639001 2026] [security2:error] [pid 3686848:tid 3686848] [client 102.204.123.214:52428] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthV8F2_EzSK6FqG7UYfgAAAB4"]
[Thu Jul 30 15:36:08.357613 2026] [ssl:error] [pid 3694810:tid 3694810] (70014)End of file found: [client 216.73.216.199:63267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:08.423269 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:60856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:08.423297 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:08.479203 2026] [ssl:error] [pid 3686848:tid 3686848] (EAI 2)Name or service not known: [client 144.76.19.72:60864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:08.479230 2026] [ssl:error] [pid 3686848:tid 3686848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:08.531793 2026] [access_compat:error] [pid 3694813:tid 3694813] [client 136.158.25.236:28958] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:08.762091 2026] [core:error] [pid 3692608:tid 3692608] [client 20.104.16.169:36102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:08.762125 2026] [core:error] [pid 3692608:tid 3692608] [client 20.104.16.169:36102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:09.028803 2026] [core:error] [pid 3665811:tid 3665811] [client 20.104.16.169:36111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:09.028827 2026] [core:error] [pid 3665811:tid 3665811] [client 20.104.16.169:36111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:09.144433 2026] [autoindex:error] [pid 3686848:tid 3686848] [client 51.120.79.193:39768] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:36:09.761292 2026] [core:error] [pid 3664268:tid 3664268] [client 20.104.16.169:36191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:09.761320 2026] [core:error] [pid 3664268:tid 3664268] [client 20.104.16.169:36191] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:10.273923 2026] [core:error] [pid 3689394:tid 3689394] [client 20.104.16.169:36146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:10.273959 2026] [core:error] [pid 3689394:tid 3689394] [client 20.104.16.169:36146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:10.718692 2026] [core:error] [pid 3694711:tid 3694711] [client 20.104.16.169:36209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:10.718730 2026] [core:error] [pid 3694711:tid 3694711] [client 20.104.16.169:36209] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:11.070779 2026] [core:error] [pid 3696223:tid 3696223] (13)Permission denied: [client 216.73.216.199:55449] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/alloc_calls
[Thu Jul 30 15:36:11.198118 2026] [lsapi:warn] [pid 3686906:tid 3686906] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:36:11.296591 2026] [core:error] [pid 3664268:tid 3664268] [client 20.104.16.169:34905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:11.296617 2026] [core:error] [pid 3664268:tid 3664268] [client 20.104.16.169:34905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:11.372423 2026] [ssl:error] [pid 3696223:tid 3696223] (70014)End of file found: [client 216.73.216.199:55449] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:11.532525 2026] [ssl:error] [pid 3694816:tid 3694816] (EAI 2)Name or service not known: [client 144.76.19.72:58122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:11.532560 2026] [ssl:error] [pid 3694816:tid 3694816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:11.585997 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:58138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:11.586042 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:11.916909 2026] [core:error] [pid 3648656:tid 3648656] [client 20.104.16.169:36223] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:11.916936 2026] [core:error] [pid 3648656:tid 3648656] [client 20.104.16.169:36223] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:12.108130 2026] [security2:error] [pid 3692608:tid 3692608] [client 105.72.204.146:62605] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthXFTBhqQvZfl7j_pTgwAAABE"]
[Thu Jul 30 15:36:12.108191 2026] [security2:error] [pid 3692608:tid 3692608] [client 105.72.204.146:62605] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthXFTBhqQvZfl7j_pTgwAAABE"]
[Thu Jul 30 15:36:12.108461 2026] [security2:error] [pid 3692608:tid 3692608] [client 105.72.204.146:62605] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthXFTBhqQvZfl7j_pTgwAAABE"]
[Thu Jul 30 15:36:12.495959 2026] [core:error] [pid 3648656:tid 3648656] [client 20.104.16.169:36158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:12.495991 2026] [core:error] [pid 3648656:tid 3648656] [client 20.104.16.169:36158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:12.939012 2026] [core:error] [pid 3689468:tid 3689468] [client 20.104.16.169:36141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:12.939037 2026] [core:error] [pid 3689468:tid 3689468] [client 20.104.16.169:36141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:13.178620 2026] [ssl:error] [pid 3686906:tid 3686906] (70014)End of file found: [client 216.73.216.199:54717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:13.674132 2026] [ssl:error] [pid 3694657:tid 3694657] (70014)End of file found: [client 216.73.216.199:18156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:14.410982 2026] [core:error] [pid 3694810:tid 3694810] [client 20.104.16.169:36187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:14.411006 2026] [core:error] [pid 3694810:tid 3694810] [client 20.104.16.169:36187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:14.644223 2026] [ssl:error] [pid 3694813:tid 3694813] (EAI 2)Name or service not known: [client 144.76.19.72:58148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:14.644254 2026] [ssl:error] [pid 3694813:tid 3694813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:14.695977 2026] [ssl:error] [pid 3689770:tid 3689770] (EAI 2)Name or service not known: [client 144.76.19.72:58150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:14.696000 2026] [ssl:error] [pid 3689770:tid 3689770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:14.905357 2026] [lsapi:warn] [pid 3694810:tid 3694810] [client 45.158.164.139:56738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:36:14.905413 2026] [lsapi:warn] [pid 3694810:tid 3694810] [client 45.158.164.139:56738] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:36:15.824734 2026] [access_compat:error] [pid 3696153:tid 3696153] [client 112.209.180.50:16327] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:17.389892 2026] [ssl:error] [pid 3691965:tid 3691965] (70014)End of file found: [client 216.73.216.199:20462] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:17.423827 2026] [core:error] [pid 3694810:tid 3694810] [client 20.104.16.169:36144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:17.423851 2026] [core:error] [pid 3694810:tid 3694810] [client 20.104.16.169:36144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:17.749439 2026] [ssl:error] [pid 3693205:tid 3693205] (EAI 2)Name or service not known: [client 144.76.19.72:58154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:17.749471 2026] [ssl:error] [pid 3693205:tid 3693205] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:17.802804 2026] [ssl:error] [pid 3694764:tid 3694764] (EAI 2)Name or service not known: [client 144.76.19.72:58170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:17.802841 2026] [ssl:error] [pid 3694764:tid 3694764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:18.592956 2026] [ssl:error] [pid 3692890:tid 3692890] (70014)End of file found: [client 216.73.216.199:13572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:18.979403 2026] [access_compat:error] [pid 3693205:tid 3693205] [client 136.158.25.236:29867] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:19.194308 2026] [ssl:error] [pid 3689432:tid 3689432] (70014)End of file found: [client 216.73.216.199:36031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:20.449312 2026] [core:error] [pid 3681296:tid 3681296] [client 20.104.16.169:36107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:20.449337 2026] [core:error] [pid 3681296:tid 3681296] [client 20.104.16.169:36107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:20.625097 2026] [authz_core:error] [pid 3696417:tid 3696417] [client 66.249.66.33:56133] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:36:20.627736 2026] [authz_core:error] [pid 3696417:tid 3696417] [client 66.249.66.33:56133] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:36:20.860389 2026] [ssl:error] [pid 3696872:tid 3696872] (EAI 2)Name or service not known: [client 144.76.19.72:30892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:20.860431 2026] [ssl:error] [pid 3696872:tid 3696872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:20.916213 2026] [ssl:error] [pid 3694810:tid 3694810] (EAI 2)Name or service not known: [client 144.76.19.72:30894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:20.916255 2026] [ssl:error] [pid 3694810:tid 3694810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:23.000713 2026] [core:error] [pid 3696872:tid 3696872] [client 20.104.16.169:36153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:23.000748 2026] [core:error] [pid 3696872:tid 3696872] [client 20.104.16.169:36153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:23.461974 2026] [security2:error] [pid 3689394:tid 3689394] [client 85.208.96.197:64260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/tm6sr/watson-funeral-home-conway,-sc-obituaries"] [unique_id "amthZ4oqVK2px4huxiNAbwAAAA8"]
[Thu Jul 30 15:36:23.973513 2026] [ssl:error] [pid 3694711:tid 3694711] (EAI 2)Name or service not known: [client 144.76.19.72:30896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:23.973547 2026] [ssl:error] [pid 3694711:tid 3694711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:24.011697 2026] [ssl:error] [pid 3689592:tid 3689592] (70014)End of file found: [client 216.73.216.199:50518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:24.026689 2026] [ssl:error] [pid 3693208:tid 3693208] (EAI 2)Name or service not known: [client 144.76.19.72:30910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:24.026711 2026] [ssl:error] [pid 3693208:tid 3693208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:24.049810 2026] [core:error] [pid 3689770:tid 3689770] [client 20.104.16.169:36142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:24.049839 2026] [core:error] [pid 3689770:tid 3689770] [client 20.104.16.169:36142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:24.804186 2026] [ssl:error] [pid 3664268:tid 3664268] (70014)End of file found: [client 216.73.216.199:30644] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:24.919597 2026] [ssl:error] [pid 3694810:tid 3694810] (70014)End of file found: [client 216.73.216.199:51919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:25.207905 2026] [access_compat:error] [pid 3694816:tid 3694816] [client 136.158.25.236:30418] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:25.682362 2026] [security2:error] [pid 3681296:tid 3681296] [client 85.208.96.195:26616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4488.0.html"] [unique_id "amthaUnV0A-EjI5xJ5T2iwAAACY"]
[Thu Jul 30 15:36:26.494617 2026] [core:error] [pid 3693125:tid 3693125] [client 20.104.16.169:36222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:26.494655 2026] [core:error] [pid 3693125:tid 3693125] [client 20.104.16.169:36222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:26.917467 2026] [authz_core:error] [pid 3693205:tid 3693205] [client 66.249.66.33:48158] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:36:26.920222 2026] [authz_core:error] [pid 3693205:tid 3693205] [client 66.249.66.33:48158] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:36:27.080044 2026] [ssl:error] [pid 3689433:tid 3689433] (EAI 2)Name or service not known: [client 144.76.19.72:30916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:27.080097 2026] [ssl:error] [pid 3689433:tid 3689433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:27.133018 2026] [ssl:error] [pid 3681296:tid 3681296] (EAI 2)Name or service not known: [client 144.76.19.72:30926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:27.133042 2026] [ssl:error] [pid 3681296:tid 3681296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:27.610597 2026] [core:error] [pid 3689770:tid 3689770] [client 20.104.16.169:36124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:27.610637 2026] [core:error] [pid 3689770:tid 3689770] [client 20.104.16.169:36124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:28.497633 2026] [core:error] [pid 3681296:tid 3681296] [client 20.104.16.169:36208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:28.497659 2026] [core:error] [pid 3681296:tid 3681296] [client 20.104.16.169:36208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:28.705857 2026] [security2:error] [pid 3694764:tid 3694764] [client 74.7.227.51:50266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.liberator-no-email.com"] [uri "/"] [unique_id "amthbI5SnqY3syT_XElEBgAAABc"]
[Thu Jul 30 15:36:29.306286 2026] [access_compat:error] [pid 3689471:tid 3689471] [client 136.158.25.236:30827] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:29.319244 2026] [core:error] [pid 3694765:tid 3694765] [client 20.104.16.169:36210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:29.319274 2026] [core:error] [pid 3694765:tid 3694765] [client 20.104.16.169:36210] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:29.439322 2026] [ssl:error] [pid 3681296:tid 3681296] (70014)End of file found: [client 216.73.216.199:5747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:29.744567 2026] [access_compat:error] [pid 3693125:tid 3693125] [client 45.158.164.139:40710] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:36:30.184785 2026] [ssl:error] [pid 3693208:tid 3693208] (EAI 2)Name or service not known: [client 144.76.19.72:48382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:30.184819 2026] [ssl:error] [pid 3693208:tid 3693208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:30.239155 2026] [ssl:error] [pid 3694810:tid 3694810] (EAI 2)Name or service not known: [client 144.76.19.72:48386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:30.239182 2026] [ssl:error] [pid 3694810:tid 3694810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:30.467142 2026] [security2:error] [pid 3689770:tid 3689770] [client 20.63.98.115:23156] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "annasmithagent.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amthbptiLsNKvcPUX82mIgAAADc"]
[Thu Jul 30 15:36:30.467501 2026] [security2:error] [pid 3689770:tid 3689770] [client 20.63.98.115:23156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "annasmithagent.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amthbptiLsNKvcPUX82mIgAAADc"]
[Thu Jul 30 15:36:30.467934 2026] [security2:error] [pid 3689770:tid 3689770] [client 20.63.98.115:23156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "annasmithagent.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amthbptiLsNKvcPUX82mIgAAADc"]
[Thu Jul 30 15:36:30.715703 2026] [authz_core:error] [pid 3693125:tid 3693125] [client 216.73.216.199:65427] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/rest-api/endpoints/error_log
[Thu Jul 30 15:36:30.833494 2026] [core:error] [pid 3694812:tid 3694812] [client 20.104.16.169:34891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:30.833521 2026] [core:error] [pid 3694812:tid 3694812] [client 20.104.16.169:34891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:32.091459 2026] [core:error] [pid 3692567:tid 3692567] [client 20.104.16.169:36121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:32.091487 2026] [core:error] [pid 3692567:tid 3692567] [client 20.104.16.169:36121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:32.650886 2026] [ssl:error] [pid 3689432:tid 3689432] (70014)End of file found: [client 216.73.216.199:21995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:33.294225 2026] [ssl:error] [pid 3696872:tid 3696872] (EAI 2)Name or service not known: [client 144.76.19.72:48390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:33.294249 2026] [ssl:error] [pid 3696872:tid 3696872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:33.350218 2026] [ssl:error] [pid 3686906:tid 3686906] (EAI 2)Name or service not known: [client 144.76.19.72:48394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:33.350259 2026] [ssl:error] [pid 3686906:tid 3686906] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:34.255220 2026] [lsapi:warn] [pid 3697706:tid 3697706] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:36:34.466967 2026] [core:error] [pid 3686906:tid 3686906] [client 20.104.16.169:36134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:34.467002 2026] [core:error] [pid 3686906:tid 3686906] [client 20.104.16.169:36134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:34.468321 2026] [ssl:error] [pid 3696831:tid 3696831] (70014)End of file found: [client 216.73.216.199:58536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:34.970434 2026] [ssl:error] [pid 3694811:tid 3694811] (70014)End of file found: [client 216.73.216.199:57940] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:35.223409 2026] [core:error] [pid 3689471:tid 3689471] [client 20.104.16.169:36127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:35.223449 2026] [core:error] [pid 3689471:tid 3689471] [client 20.104.16.169:36127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:36.407334 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:48404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:36.407359 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:36.461676 2026] [ssl:error] [pid 3693967:tid 3693967] (EAI 2)Name or service not known: [client 144.76.19.72:48406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:36.461709 2026] [ssl:error] [pid 3693967:tid 3693967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:37.022119 2026] [core:error] [pid 3689669:tid 3689669] [client 20.104.16.169:36108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:37.022141 2026] [core:error] [pid 3689669:tid 3689669] [client 20.104.16.169:36108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:37.733006 2026] [core:error] [pid 3693125:tid 3693125] [client 20.104.16.169:36176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:37.733039 2026] [core:error] [pid 3693125:tid 3693125] [client 20.104.16.169:36176] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:38.959509 2026] [core:error] [pid 3697603:tid 3697603] [client 20.104.16.169:36220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:38.959532 2026] [core:error] [pid 3697603:tid 3697603] [client 20.104.16.169:36220] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:38.980520 2026] [ssl:error] [pid 3694816:tid 3694816] (70014)End of file found: [client 216.73.216.199:24741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:39.518406 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:48408] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:39.518439 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:39.575804 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:38318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:39.575842 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:39.967727 2026] [access_compat:error] [pid 3694765:tid 3694765] [client 136.158.25.236:53579] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:40.267109 2026] [access_compat:error] [pid 3694812:tid 3694812] [client 45.158.164.139:53270] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:36:41.112076 2026] [core:error] [pid 3696872:tid 3696872] [client 20.104.16.169:36137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:41.112104 2026] [core:error] [pid 3696872:tid 3696872] [client 20.104.16.169:36137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:41.695355 2026] [ssl:error] [pid 3689669:tid 3689669] (70014)End of file found: [client 216.73.216.199:26970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:42.599262 2026] [core:error] [pid 3694813:tid 3694813] (13)Permission denied: [client 216.73.216.199:3483] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/cpu_partial
[Thu Jul 30 15:36:42.633478 2026] [ssl:error] [pid 3685517:tid 3685517] (EAI 2)Name or service not known: [client 144.76.19.72:38324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:42.633504 2026] [ssl:error] [pid 3685517:tid 3685517] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:42.689552 2026] [ssl:error] [pid 3694812:tid 3694812] (EAI 2)Name or service not known: [client 144.76.19.72:38328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:42.689594 2026] [ssl:error] [pid 3694812:tid 3694812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:42.898672 2026] [core:error] [pid 3694813:tid 3694813] (13)Permission denied: [client 216.73.216.199:3483] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/total_objects
[Thu Jul 30 15:36:43.944203 2026] [core:error] [pid 3697603:tid 3697603] [client 20.104.16.169:36157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:43.944230 2026] [core:error] [pid 3697603:tid 3697603] [client 20.104.16.169:36157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:44.413104 2026] [core:error] [pid 3694813:tid 3694813] (13)Permission denied: [client 216.73.216.199:3483] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/file_lock_cache/alloc_calls
[Thu Jul 30 15:36:45.927275 2026] [core:error] [pid 3694813:tid 3694813] (13)Permission denied: [client 216.73.216.199:3483] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/total_objects
[Thu Jul 30 15:36:46.306689 2026] [ssl:error] [pid 3692465:tid 3692465] (EAI 2)Name or service not known: [client 144.76.19.72:38330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:46.306731 2026] [ssl:error] [pid 3692465:tid 3692465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:46.324388 2026] [core:error] [pid 3694765:tid 3694765] [client 20.104.16.169:36204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:46.324412 2026] [core:error] [pid 3694765:tid 3694765] [client 20.104.16.169:36204] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:46.387140 2026] [ssl:error] [pid 3692890:tid 3692890] (EAI 2)Name or service not known: [client 144.76.19.72:38344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:46.387178 2026] [ssl:error] [pid 3692890:tid 3692890] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:46.722506 2026] [access_compat:error] [pid 3685517:tid 3685517] [client 136.158.25.236:32516] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:48.320987 2026] [core:error] [pid 3697706:tid 3697706] [client 20.104.16.169:36115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:48.321019 2026] [core:error] [pid 3697706:tid 3697706] [client 20.104.16.169:36115] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:48.872004 2026] [core:error] [pid 3689592:tid 3689592] (13)Permission denied: [client 216.73.216.199:62658] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory49/node0/compact
[Thu Jul 30 15:36:49.252392 2026] [core:error] [pid 3689669:tid 3689669] (13)Permission denied: [client 216.73.216.199:20917] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_prealloc_space/partial
[Thu Jul 30 15:36:49.447974 2026] [ssl:error] [pid 3689720:tid 3689720] (EAI 2)Name or service not known: [client 144.76.19.72:38350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:49.448016 2026] [ssl:error] [pid 3689720:tid 3689720] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:49.502463 2026] [ssl:error] [pid 3694711:tid 3694711] (EAI 2)Name or service not known: [client 144.76.19.72:38354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:49.502491 2026] [ssl:error] [pid 3694711:tid 3694711] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:50.608628 2026] [access_compat:error] [pid 3694711:tid 3694711] [client 112.209.180.50:13605] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:36:51.073201 2026] [core:error] [pid 3689592:tid 3689592] (13)Permission denied: [client 216.73.216.199:62658] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/hwcache_align
[Thu Jul 30 15:36:51.389257 2026] [core:error] [pid 3692567:tid 3692567] [client 20.104.16.169:36166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:51.389281 2026] [core:error] [pid 3692567:tid 3692567] [client 20.104.16.169:36166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:52.556787 2026] [ssl:error] [pid 3689432:tid 3689432] (EAI 2)Name or service not known: [client 144.76.19.72:36740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:52.556812 2026] [ssl:error] [pid 3689432:tid 3689432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:52.611541 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:36742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:52.611565 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:52.994675 2026] [lsapi:warn] [pid 3694657:tid 3694657] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:36:53.699172 2026] [security2:error] [pid 3692567:tid 3692567] [client 43.164.196.244:41314] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kirmond.com"] [uri "/"] [unique_id "amthhY0Zr4-ahecT_8uWeQAAAA4"]
[Thu Jul 30 15:36:53.702139 2026] [authz_core:error] [pid 3692567:tid 3692567] [client 43.164.196.244:41314] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 15:36:53.821713 2026] [ssl:error] [pid 3689592:tid 3689592] (70014)End of file found: [client 216.73.216.199:62658] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:54.119536 2026] [ssl:error] [pid 3689669:tid 3689669] (70014)End of file found: [client 216.73.216.199:20917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:55.578972 2026] [core:error] [pid 3694810:tid 3694810] [client 20.104.16.169:36156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:55.579013 2026] [core:error] [pid 3694810:tid 3694810] [client 20.104.16.169:36156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:36:55.634757 2026] [ssl:error] [pid 3693125:tid 3693125] (70014)End of file found: [client 216.73.216.199:18540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:36:55.713401 2026] [ssl:error] [pid 3694765:tid 3694765] (EAI 2)Name or service not known: [client 144.76.19.72:36758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:55.713427 2026] [ssl:error] [pid 3694765:tid 3694765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:55.769455 2026] [ssl:error] [pid 3692465:tid 3692465] (EAI 2)Name or service not known: [client 144.76.19.72:36774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:36:55.769479 2026] [ssl:error] [pid 3692465:tid 3692465] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:36:57.127363 2026] [security2:error] [pid 3696872:tid 3696872] [client 114.119.144.31:38261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15,102,19,14,30/request_format~html"] [unique_id "amthicI6ephEbvvI5hbYKgAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,102,19,14/request_format~html
[Thu Jul 30 15:36:58.988603 2026] [security2:error] [pid 3694816:tid 3694816] [client 114.119.144.31:38273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578960000/cat_ids~15,102,19,14,30/request_format~html"] [unique_id "amthig2h7EPd1fq0Ayi-qAAAAD0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15,102,19,14/request_format~html
[Thu Jul 30 15:37:03.216376 2026] [access_compat:error] [pid 3699666:tid 3699666] [client 20.104.22.47:45247] AH01797: client denied by server configuration: /home/prenicou/public_html/images/class-config.php
[Thu Jul 30 15:37:03.335417 2026] [core:error] [pid 3694657:tid 3694657] [client 20.104.16.169:36186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:03.335444 2026] [core:error] [pid 3694657:tid 3694657] [client 20.104.16.169:36186] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:08.069354 2026] [ssl:error] [pid 3700812:tid 3700812] (EAI 2)Name or service not known: [client 144.76.19.72:36778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:08.069401 2026] [ssl:error] [pid 3700812:tid 3700812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:08.165482 2026] [ssl:error] [pid 3700299:tid 3700299] (70014)End of file found: [client 216.73.216.199:50057] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:09.377922 2026] [security2:error] [pid 3686906:tid 3686906] [client 47.128.17.104:55188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/robots.txt"] [unique_id "amthlfSKRkqril5jLovODgAAACE"]
[Thu Jul 30 15:37:09.851694 2026] [authz_core:error] [pid 3699664:tid 3699664] [client 20.104.22.47:45352] AH01630: client denied by server configuration: /home/georgeho/public_html/.alf.php
[Thu Jul 30 15:37:09.943317 2026] [core:error] [pid 3700302:tid 3700302] [client 20.104.16.169:34933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:09.943339 2026] [core:error] [pid 3700302:tid 3700302] [client 20.104.16.169:34933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:10.310564 2026] [security2:error] [pid 3648656:tid 3648656] [client 150.5.132.222:23865] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthliKDRAglsH-kd_ocFQAAABA"]
[Thu Jul 30 15:37:10.310614 2026] [security2:error] [pid 3648656:tid 3648656] [client 150.5.132.222:23865] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthliKDRAglsH-kd_ocFQAAABA"]
[Thu Jul 30 15:37:10.310858 2026] [security2:error] [pid 3648656:tid 3648656] [client 150.5.132.222:23865] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthliKDRAglsH-kd_ocFQAAABA"]
[Thu Jul 30 15:37:10.860689 2026] [ssl:error] [pid 3701090:tid 3701090] (EAI 2)Name or service not known: [client 144.76.19.72:22562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:10.860720 2026] [ssl:error] [pid 3701090:tid 3701090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:10.975579 2026] [ssl:error] [pid 3696223:tid 3696223] (70014)End of file found: [client 216.73.216.199:42438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:11.155306 2026] [lsapi:warn] [pid 3694810:tid 3694810] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:37:12.059522 2026] [security2:error] [pid 3694810:tid 3694810] [client 80.94.92.67:54974] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "borovetsexpress.com"] [uri "/.svn/wc.db"] [unique_id "amthmAeMLW8VSCCV325aqQAAACo"]
[Thu Jul 30 15:37:12.059668 2026] [security2:error] [pid 3694810:tid 3694810] [client 80.94.92.67:54974] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "borovetsexpress.com"] [uri "/.svn/wc.db"] [unique_id "amthmAeMLW8VSCCV325aqQAAACo"]
[Thu Jul 30 15:37:12.059845 2026] [security2:error] [pid 3694810:tid 3694810] [client 80.94.92.67:54974] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "borovetsexpress.com"] [uri "/.svn/wc.db"] [unique_id "amthmAeMLW8VSCCV325aqQAAACo"]
[Thu Jul 30 15:37:12.060012 2026] [security2:error] [pid 3694810:tid 3694810] [client 80.94.92.67:54974] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "borovetsexpress.com"] [uri "/403.shtml"] [unique_id "amthmAeMLW8VSCCV325aqQAAACo"]
[Thu Jul 30 15:37:13.217420 2026] [core:error] [pid 3700471:tid 3700471] [client 20.104.16.169:34902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:13.217450 2026] [core:error] [pid 3700471:tid 3700471] [client 20.104.16.169:34902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:13.265012 2026] [security2:error] [pid 3700299:tid 3700299] [client 197.29.59.52:44360] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthmZGmbJ4QPNK5giH_cgAAAEU"]
[Thu Jul 30 15:37:13.265097 2026] [security2:error] [pid 3700299:tid 3700299] [client 197.29.59.52:44360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthmZGmbJ4QPNK5giH_cgAAAEU"]
[Thu Jul 30 15:37:13.265351 2026] [security2:error] [pid 3700299:tid 3700299] [client 197.29.59.52:44360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthmZGmbJ4QPNK5giH_cgAAAEU"]
[Thu Jul 30 15:37:13.500347 2026] [ssl:error] [pid 3701091:tid 3701091] (70014)End of file found: [client 216.73.216.199:38570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:13.779518 2026] [access_compat:error] [pid 3701241:tid 3701241] [client 112.209.180.50:14428] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:13.949328 2026] [security2:error] [pid 3700470:tid 3700470] [client 185.191.171.7:14972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amthmbZfLAM4XDJzr0aMJAAAAEk"]
[Thu Jul 30 15:37:14.086350 2026] [authz_core:error] [pid 3701636:tid 3701636] [client 169.58.39.192:55521] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 15:37:14.107758 2026] [authz_core:error] [pid 3701636:tid 3701636] [client 169.58.39.192:55521] AH01630: client denied by server configuration: /home/purple/public_html/wp-content/uploads/mc4wp-debug-log.php, referer: binance.com
[Thu Jul 30 15:37:14.677973 2026] [lsapi:warn] [pid 3689394:tid 3689394] [client 45.158.164.139:33762] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:14.678017 2026] [lsapi:warn] [pid 3689394:tid 3689394] [client 45.158.164.139:33762] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:15.366641 2026] [ssl:error] [pid 3701243:tid 3701243] (EAI 2)Name or service not known: [client 144.76.19.72:55334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:15.366671 2026] [ssl:error] [pid 3701243:tid 3701243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:15.899954 2026] [core:error] [pid 3701732:tid 3701732] [client 20.104.16.169:36198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:15.899991 2026] [core:error] [pid 3701732:tid 3701732] [client 20.104.16.169:36198] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:16.114530 2026] [ssl:error] [pid 3701089:tid 3701089] (EAI 2)Name or service not known: [client 144.76.19.72:55340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:16.114564 2026] [ssl:error] [pid 3701089:tid 3701089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:16.268385 2026] [lsapi:warn] [pid 3696831:tid 3696831] [client 45.158.164.139:33780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:16.268430 2026] [lsapi:warn] [pid 3696831:tid 3696831] [client 45.158.164.139:33780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:16.449533 2026] [ssl:error] [pid 3689720:tid 3689720] (70014)End of file found: [client 216.73.216.199:24332] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:16.658506 2026] [security2:error] [pid 3701833:tid 3701833] [client 110.235.180.108:33472] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthnAuI-PH0Rp83U5lsAAAAAGQ"]
[Thu Jul 30 15:37:16.658555 2026] [security2:error] [pid 3701833:tid 3701833] [client 110.235.180.108:33472] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthnAuI-PH0Rp83U5lsAAAAAGQ"]
[Thu Jul 30 15:37:16.658824 2026] [security2:error] [pid 3701833:tid 3701833] [client 110.235.180.108:33472] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthnAuI-PH0Rp83U5lsAAAAAGQ"]
[Thu Jul 30 15:37:17.351534 2026] [lsapi:warn] [pid 3696223:tid 3696223] [client 45.158.164.139:33794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:17.351594 2026] [lsapi:warn] [pid 3696223:tid 3696223] [client 45.158.164.139:33794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:17.380522 2026] [core:error] [pid 3699664:tid 3699664] [client 20.104.16.169:36189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:17.380553 2026] [core:error] [pid 3699664:tid 3699664] [client 20.104.16.169:36189] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:18.170218 2026] [security2:error] [pid 3700954:tid 3700954] [client 185.191.171.2:55316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/asia-shelter-forum-2020-kathmandu-nepal/"] [unique_id "amthnkLlJTKDHG7t5_DbfwAAAE0"]
[Thu Jul 30 15:37:19.027375 2026] [lsapi:warn] [pid 3700471:tid 3700471] [client 45.158.164.139:33812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:19.027420 2026] [lsapi:warn] [pid 3700471:tid 3700471] [client 45.158.164.139:33812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:19.170725 2026] [ssl:error] [pid 3693967:tid 3693967] (EAI 2)Name or service not known: [client 144.76.19.72:55346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:19.170763 2026] [ssl:error] [pid 3693967:tid 3693967] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:19.231859 2026] [ssl:error] [pid 3701932:tid 3701932] (EAI 2)Name or service not known: [client 144.76.19.72:55354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:19.231903 2026] [ssl:error] [pid 3701932:tid 3701932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:19.402315 2026] [lsapi:warn] [pid 3701929:tid 3701929] [client 45.158.164.139:33826] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:19.402355 2026] [lsapi:warn] [pid 3701929:tid 3701929] [client 45.158.164.139:33826] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:19.538026 2026] [core:error] [pid 3700471:tid 3700471] [client 20.104.16.169:36161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:19.538046 2026] [core:error] [pid 3700471:tid 3700471] [client 20.104.16.169:36161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:19.856628 2026] [core:error] [pid 3701930:tid 3701930] (13)Permission denied: [client 216.73.216.199:43718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/partial
[Thu Jul 30 15:37:20.365290 2026] [core:error] [pid 3700954:tid 3700954] [client 20.104.16.169:34899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:20.365315 2026] [core:error] [pid 3700954:tid 3700954] [client 20.104.16.169:34899] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:20.823384 2026] [lsapi:warn] [pid 3678921:tid 3678921] [client 45.158.164.139:41940] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:20.823433 2026] [lsapi:warn] [pid 3678921:tid 3678921] [client 45.158.164.139:41940] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:21.078982 2026] [authz_core:error] [pid 3689592:tid 3689592] [client 66.249.66.34:52030] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:37:21.081683 2026] [authz_core:error] [pid 3689592:tid 3689592] [client 66.249.66.34:52030] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:37:21.245415 2026] [lsapi:warn] [pid 3697706:tid 3697706] [client 45.158.164.139:41946] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:21.245457 2026] [lsapi:warn] [pid 3697706:tid 3697706] [client 45.158.164.139:41946] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:21.675136 2026] [core:error] [pid 3701930:tid 3701930] (13)Permission denied: [client 216.73.216.199:43718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/remote_node_defrag_ratio
[Thu Jul 30 15:37:21.716290 2026] [lsapi:warn] [pid 3693208:tid 3693208] [client 45.158.164.139:41956] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:21.716333 2026] [lsapi:warn] [pid 3693208:tid 3693208] [client 45.158.164.139:41956] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:22.261533 2026] [core:error] [pid 3701235:tid 3701235] [client 20.104.16.169:34928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:22.261562 2026] [core:error] [pid 3701235:tid 3701235] [client 20.104.16.169:34928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:22.308563 2026] [ssl:error] [pid 3689770:tid 3689770] (EAI 2)Name or service not known: [client 144.76.19.72:33684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:22.308597 2026] [ssl:error] [pid 3689770:tid 3689770] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:22.364953 2026] [ssl:error] [pid 3700954:tid 3700954] (EAI 2)Name or service not known: [client 144.76.19.72:33690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:22.364987 2026] [ssl:error] [pid 3700954:tid 3700954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:22.415625 2026] [access_compat:error] [pid 3699662:tid 3699662] [client 112.209.180.50:14880] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:22.592503 2026] [lsapi:warn] [pid 3672700:tid 3672700] [client 45.158.164.139:41982] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:22.592575 2026] [lsapi:warn] [pid 3672700:tid 3672700] [client 45.158.164.139:41982] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:22.960614 2026] [lsapi:warn] [pid 3699669:tid 3699669] [client 45.158.164.139:41994] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:22.960657 2026] [lsapi:warn] [pid 3699669:tid 3699669] [client 45.158.164.139:41994] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:22.967208 2026] [access_compat:error] [pid 3699535:tid 3699535] [client 142.93.114.194:19002] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:23.358296 2026] [lsapi:warn] [pid 3701929:tid 3701929] [client 45.158.164.139:42008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:23.358327 2026] [lsapi:warn] [pid 3701929:tid 3701929] [client 45.158.164.139:42008] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:23.700678 2026] [core:error] [pid 3699534:tid 3699534] [client 20.104.16.169:36131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:23.700704 2026] [core:error] [pid 3699534:tid 3699534] [client 20.104.16.169:36131] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:23.915714 2026] [security2:error] [pid 3698865:tid 3698865] [client 175.27.136.83:42790] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtho4a6b-zGIS7oDMLEfQAAAB4"]
[Thu Jul 30 15:37:24.554550 2026] [security2:error] [pid 3678921:tid 3678921] [client 185.191.171.8:50244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/ryanair-extra-legroom-seats-worth-it"] [unique_id "amthpBbFq77dbN_KSeHBgAAAAAs"]
[Thu Jul 30 15:37:24.683202 2026] [core:error] [pid 3701930:tid 3701930] (13)Permission denied: [client 216.73.216.199:43718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/libexec/audit-functions
[Thu Jul 30 15:37:25.082883 2026] [core:error] [pid 3699667:tid 3699667] [client 20.104.16.169:34835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:25.082923 2026] [core:error] [pid 3699667:tid 3699667] [client 20.104.16.169:34835] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:25.426118 2026] [ssl:error] [pid 3700478:tid 3700478] (EAI 2)Name or service not known: [client 144.76.19.72:33700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:25.426152 2026] [ssl:error] [pid 3700478:tid 3700478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:25.488580 2026] [ssl:error] [pid 3700298:tid 3700298] (EAI 2)Name or service not known: [client 144.76.19.72:33714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:25.488612 2026] [ssl:error] [pid 3700298:tid 3700298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:25.951291 2026] [core:error] [pid 3689432:tid 3689432] [client 20.104.16.169:36207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:25.951321 2026] [core:error] [pid 3689432:tid 3689432] [client 20.104.16.169:36207] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:26.491193 2026] [core:error] [pid 3701930:tid 3701930] (13)Permission denied: [client 216.73.216.199:43718] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/remote_node_defrag_ratio
[Thu Jul 30 15:37:27.009003 2026] [core:error] [pid 3689432:tid 3689432] [client 20.104.16.169:36112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:27.009031 2026] [core:error] [pid 3689432:tid 3689432] [client 20.104.16.169:36112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:27.014605 2026] [security2:error] [pid 3701234:tid 3701234] [client 47.128.24.235:13344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amthp8qXs-Z_BES50xW-aAAAAFY"]
[Thu Jul 30 15:37:27.703641 2026] [ssl:error] [pid 3701930:tid 3701930] (70014)End of file found: [client 216.73.216.199:43718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:27.991535 2026] [lsapi:warn] [pid 3699953:tid 3699953] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:37:28.102391 2026] [authz_core:error] [pid 3701830:tid 3701830] [client 158.158.38.215:33504] AH01630: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:37:28.104288 2026] [access_compat:error] [pid 3701830:tid 3701830] [client 158.158.38.215:33504] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/responsive-add-ons/
[Thu Jul 30 15:37:28.104331 2026] [access_compat:error] [pid 3701830:tid 3701830] [client 158.158.38.215:33504] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/sucuri/
[Thu Jul 30 15:37:28.108588 2026] [access_compat:error] [pid 3701830:tid 3701830] [client 158.158.38.215:33504] AH01797: client denied by server configuration: /home/healthki/public_html/wp-content/uploads/wpseo-redirects/
[Thu Jul 30 15:37:28.204666 2026] [ssl:error] [pid 3700467:tid 3700467] (70014)End of file found: [client 216.73.216.199:25482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:28.543641 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:33718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:28.543669 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:28.597812 2026] [ssl:error] [pid 3700470:tid 3700470] (EAI 2)Name or service not known: [client 144.76.19.72:33732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:28.597848 2026] [ssl:error] [pid 3700470:tid 3700470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:28.904626 2026] [access_compat:error] [pid 3701089:tid 3701089] [client 112.209.180.50:15194] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:29.367358 2026] [ssl:error] [pid 3699670:tid 3699670] (70014)End of file found: [client 216.73.216.199:58117] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:30.709390 2026] [core:error] [pid 3701833:tid 3701833] [client 20.104.16.169:36199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:30.709419 2026] [core:error] [pid 3701833:tid 3701833] [client 20.104.16.169:36199] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:31.654300 2026] [ssl:error] [pid 3696831:tid 3696831] (EAI 2)Name or service not known: [client 144.76.19.72:58530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:31.654342 2026] [ssl:error] [pid 3696831:tid 3696831] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:31.706760 2026] [ssl:error] [pid 3701235:tid 3701235] (EAI 2)Name or service not known: [client 144.76.19.72:58534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:31.706797 2026] [ssl:error] [pid 3701235:tid 3701235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:32.316167 2026] [core:error] [pid 3701733:tid 3701733] [client 20.104.16.169:36185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:32.316196 2026] [core:error] [pid 3701733:tid 3701733] [client 20.104.16.169:36185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:32.468530 2026] [security2:error] [pid 3693205:tid 3693205] [client 74.7.243.130:40186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unitedintelligence.co.uk.refraction.co.uk"] [uri "/"] [unique_id "amthrLcTicFsTHMs3ynChAAAACw"]
[Thu Jul 30 15:37:32.484102 2026] [lsapi:warn] [pid 3700470:tid 3700470] [client 216.73.217.172:30683] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:37:32.484141 2026] [lsapi:warn] [pid 3700470:tid 3700470] [client 216.73.217.172:30683] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:37:32.675907 2026] [access_compat:error] [pid 3687959:tid 3687959] [client 136.158.25.236:37080] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:33.182959 2026] [access_compat:error] [pid 3700471:tid 3700471] [client 45.158.164.139:59080] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:37:33.421737 2026] [core:error] [pid 3689433:tid 3689433] [client 20.104.16.169:34824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:33.421766 2026] [core:error] [pid 3689433:tid 3689433] [client 20.104.16.169:34824] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:33.519872 2026] [authz_core:error] [pid 3701830:tid 3701830] [client 158.158.38.215:33504] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/Requests/error_log
[Thu Jul 30 15:37:33.900078 2026] [core:error] [pid 3692608:tid 3692608] [client 20.104.16.169:36180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:33.900110 2026] [core:error] [pid 3692608:tid 3692608] [client 20.104.16.169:36180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:34.550292 2026] [ssl:error] [pid 3699671:tid 3699671] (70014)End of file found: [client 216.73.216.199:42636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:34.761787 2026] [ssl:error] [pid 3648656:tid 3648656] (EAI 2)Name or service not known: [client 144.76.19.72:58544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:34.761817 2026] [ssl:error] [pid 3648656:tid 3648656] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:34.816343 2026] [ssl:error] [pid 3700956:tid 3700956] (EAI 2)Name or service not known: [client 144.76.19.72:58548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:34.816407 2026] [ssl:error] [pid 3700956:tid 3700956] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:35.001648 2026] [core:error] [pid 3699531:tid 3699531] [client 20.104.16.169:36188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:35.001679 2026] [core:error] [pid 3699531:tid 3699531] [client 20.104.16.169:36188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:35.143064 2026] [security2:error] [pid 3701927:tid 3701927] [client 216.73.216.199:58696] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/systemd.conf"] [unique_id "amthr-fxv5C38_X_FRKX_wAAAGY"]
[Thu Jul 30 15:37:35.143314 2026] [security2:error] [pid 3701927:tid 3701927] [client 216.73.216.199:58696] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/systemd.conf"] [unique_id "amthr-fxv5C38_X_FRKX_wAAAGY"]
[Thu Jul 30 15:37:35.143520 2026] [security2:error] [pid 3701927:tid 3701927] [client 216.73.216.199:58696] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/systemd.conf"] [unique_id "amthr-fxv5C38_X_FRKX_wAAAGY"]
[Thu Jul 30 15:37:36.046573 2026] [core:error] [pid 3699666:tid 3699666] [client 20.104.16.169:34930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:36.046603 2026] [core:error] [pid 3699666:tid 3699666] [client 20.104.16.169:34930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:36.326505 2026] [authz_core:error] [pid 3697603:tid 3697603] [client 169.58.39.192:50574] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:37:36.766319 2026] [core:error] [pid 3700467:tid 3700467] [client 20.104.16.169:36213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:36.766346 2026] [core:error] [pid 3700467:tid 3700467] [client 20.104.16.169:36213] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:37.290523 2026] [ssl:error] [pid 3701927:tid 3701927] (70014)End of file found: [client 216.73.216.199:58696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:37.872084 2026] [ssl:error] [pid 3694811:tid 3694811] (EAI 2)Name or service not known: [client 144.76.19.72:58560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:37.872122 2026] [ssl:error] [pid 3694811:tid 3694811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:37.926782 2026] [ssl:error] [pid 3700478:tid 3700478] (EAI 2)Name or service not known: [client 144.76.19.72:58564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:37.926811 2026] [ssl:error] [pid 3700478:tid 3700478] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:38.579624 2026] [cgi:error] [pid 3689394:tid 3689394] [client 199.45.155.80:36648] AH02812: stderr from /home/pbyawsga/akoptimize.online/cgi-bin/: attempt to invoke directory as script, referer: https://akoptimize.onlinec.gatkabfs.com:443/cgi-bin
[Thu Jul 30 15:37:38.823601 2026] [ssl:error] [pid 3699531:tid 3699531] (70014)End of file found: [client 216.73.216.199:24066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:38.860771 2026] [core:error] [pid 3692890:tid 3692890] [client 20.104.16.169:36138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:38.860796 2026] [core:error] [pid 3692890:tid 3692890] [client 20.104.16.169:36138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:39.358392 2026] [authz_core:error] [pid 3699667:tid 3699667] [client 169.58.39.192:51990] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 15:37:39.827149 2026] [lsapi:warn] [pid 3692608:tid 3692608] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:37:39.927873 2026] [ssl:error] [pid 3689432:tid 3689432] (70014)End of file found: [client 216.73.216.199:47956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:40.984273 2026] [ssl:error] [pid 3701732:tid 3701732] (EAI 2)Name or service not known: [client 144.76.19.72:26810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:40.984334 2026] [ssl:error] [pid 3701732:tid 3701732] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:41.071412 2026] [ssl:error] [pid 3699670:tid 3699670] (EAI 2)Name or service not known: [client 144.76.19.72:26822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:41.071481 2026] [ssl:error] [pid 3699670:tid 3699670] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:42.311148 2026] [core:error] [pid 3701240:tid 3701240] [client 20.104.16.169:36106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:42.311180 2026] [core:error] [pid 3701240:tid 3701240] [client 20.104.16.169:36106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:42.651123 2026] [ssl:error] [pid 3701929:tid 3701929] (70014)End of file found: [client 216.73.216.199:58671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:42.703350 2026] [access_compat:error] [pid 3699953:tid 3699953] [client 136.158.25.236:38132] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:43.592561 2026] [security2:error] [pid 3701089:tid 3701089] [client 47.128.126.137:15260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thestringman.co.uk"] [uri "/robots.txt"] [unique_id "amtht1Yk0su6p_I3TXQtjgAAAFI"]
[Thu Jul 30 15:37:44.127153 2026] [ssl:error] [pid 3700471:tid 3700471] (EAI 2)Name or service not known: [client 144.76.19.72:26842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:44.127212 2026] [ssl:error] [pid 3700471:tid 3700471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:44.183992 2026] [ssl:error] [pid 3700467:tid 3700467] (EAI 2)Name or service not known: [client 144.76.19.72:26844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:44.184037 2026] [ssl:error] [pid 3700467:tid 3700467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:44.860869 2026] [core:error] [pid 3694657:tid 3694657] [client 20.104.16.169:36196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:44.860899 2026] [core:error] [pid 3694657:tid 3694657] [client 20.104.16.169:36196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:45.570723 2026] [ssl:error] [pid 3689720:tid 3689720] (70014)End of file found: [client 216.73.216.199:10555] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:45.873130 2026] [ssl:error] [pid 3701239:tid 3701239] (70014)End of file found: [client 216.73.216.199:17760] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:46.315123 2026] [authz_core:error] [pid 3699664:tid 3699664] [client 169.58.39.192:55442] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 15:37:47.009051 2026] [core:error] [pid 3678921:tid 3678921] [client 20.104.16.169:34939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:47.009093 2026] [core:error] [pid 3678921:tid 3678921] [client 20.104.16.169:34939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:47.239698 2026] [ssl:error] [pid 3700302:tid 3700302] (EAI 2)Name or service not known: [client 144.76.19.72:26850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:47.239740 2026] [ssl:error] [pid 3700302:tid 3700302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:47.293630 2026] [ssl:error] [pid 3699534:tid 3699534] (EAI 2)Name or service not known: [client 144.76.19.72:26858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:47.293689 2026] [ssl:error] [pid 3699534:tid 3699534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:48.313561 2026] [ssl:error] [pid 3699670:tid 3699670] (70014)End of file found: [client 216.73.216.199:1683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:48.939302 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/
[Thu Jul 30 15:37:48.939409 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:48.987027 2026] [authz_core:error] [pid 3672700:tid 3672700] [client 169.58.39.192:56901] AH01630: client denied by server configuration: /home/purple/public_html/wp-admin/maint/error_log, referer: binance.com
[Thu Jul 30 15:37:49.101981 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/
[Thu Jul 30 15:37:49.102059 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:49.153423 2026] [access_compat:error] [pid 3697706:tid 3697706] [client 136.158.25.236:38623] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:49.224050 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:37:49.224147 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:49.318677 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xmlrpc.php
[Thu Jul 30 15:37:49.318751 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:49.423825 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/
[Thu Jul 30 15:37:49.423906 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:49.816253 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/blog
[Thu Jul 30 15:37:49.816328 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:49.915308 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/web
[Thu Jul 30 15:37:49.915390 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.028159 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wordpress
[Thu Jul 30 15:37:50.028230 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.208131 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/website
[Thu Jul 30 15:37:50.208202 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.309763 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp
[Thu Jul 30 15:37:50.309835 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.352340 2026] [ssl:error] [pid 3700475:tid 3700475] (EAI 2)Name or service not known: [client 144.76.19.72:63796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:50.352390 2026] [ssl:error] [pid 3700475:tid 3700475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:50.362189 2026] [core:error] [pid 3700140:tid 3700140] [client 20.104.16.169:36151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:50.362214 2026] [core:error] [pid 3700140:tid 3700140] [client 20.104.16.169:36151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:50.409240 2026] [ssl:error] [pid 3699664:tid 3699664] (EAI 2)Name or service not known: [client 144.76.19.72:63804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:50.409268 2026] [ssl:error] [pid 3699664:tid 3699664] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:50.445155 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/news
[Thu Jul 30 15:37:50.445223 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.526512 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/2018
[Thu Jul 30 15:37:50.526585 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.626716 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/2019
[Thu Jul 30 15:37:50.626787 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.722519 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/shop
[Thu Jul 30 15:37:50.722594 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.817061 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp1
[Thu Jul 30 15:37:50.817144 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:50.907713 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/test
[Thu Jul 30 15:37:50.907784 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:51.004554 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/media
[Thu Jul 30 15:37:51.004626 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:51.119900 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp2
[Thu Jul 30 15:37:51.119971 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:51.210750 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/site
[Thu Jul 30 15:37:51.210820 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:51.260446 2026] [core:error] [pid 3701929:tid 3701929] [client 74.248.33.8:18727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:51.260468 2026] [core:error] [pid 3701929:tid 3701929] [client 74.248.33.8:18727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:51.300053 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/cms
[Thu Jul 30 15:37:51.300132 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:51.401063 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/sito
[Thu Jul 30 15:37:51.401147 2026] [rewrite:error] [pid 3700299:tid 3700299] [client 82.102.18.180:36364] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:37:51.657199 2026] [ssl:error] [pid 3699534:tid 3699534] (70014)End of file found: [client 216.73.216.199:50399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:51.942800 2026] [core:error] [pid 3696417:tid 3696417] [client 74.248.33.8:46941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:51.942841 2026] [core:error] [pid 3696417:tid 3696417] [client 74.248.33.8:46941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:52.053149 2026] [access_compat:error] [pid 3701093:tid 3701093] [client 45.158.164.139:60786] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:37:52.430630 2026] [core:error] [pid 3699531:tid 3699531] [client 74.248.33.8:33388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:52.430657 2026] [core:error] [pid 3699531:tid 3699531] [client 74.248.33.8:33388] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:53.355240 2026] [access_compat:error] [pid 3701636:tid 3701636] [client 112.209.180.50:16252] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:37:53.476836 2026] [ssl:error] [pid 3696831:tid 3696831] (70014)End of file found: [client 216.73.216.199:20946] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:53.483080 2026] [ssl:error] [pid 3693125:tid 3693125] (EAI 2)Name or service not known: [client 144.76.19.72:63816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:53.483130 2026] [ssl:error] [pid 3693125:tid 3693125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:53.540911 2026] [ssl:error] [pid 3701925:tid 3701925] (EAI 2)Name or service not known: [client 144.76.19.72:63820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:53.540947 2026] [ssl:error] [pid 3701925:tid 3701925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:53.976665 2026] [ssl:error] [pid 3672700:tid 3672700] (70014)End of file found: [client 216.73.216.199:8878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:54.169523 2026] [core:error] [pid 3696153:tid 3696153] [client 74.248.33.8:33372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:54.169550 2026] [core:error] [pid 3696153:tid 3696153] [client 74.248.33.8:33372] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:54.589305 2026] [core:error] [pid 3687999:tid 3687999] [client 20.104.16.169:36132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:54.589332 2026] [core:error] [pid 3687999:tid 3687999] [client 20.104.16.169:36132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:54.890321 2026] [core:error] [pid 3699403:tid 3699403] [client 74.248.33.8:49110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:54.890348 2026] [core:error] [pid 3699403:tid 3699403] [client 74.248.33.8:49110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:55.522531 2026] [security2:error] [pid 3701929:tid 3701929] [client 178.63.40.24:48352] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amthwwAf-5zXdk0NUHZtJwAAAGg"]
[Thu Jul 30 15:37:56.595960 2026] [ssl:error] [pid 3700954:tid 3700954] (EAI 2)Name or service not known: [client 144.76.19.72:63840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:56.595993 2026] [ssl:error] [pid 3700954:tid 3700954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:56.649678 2026] [ssl:error] [pid 3701240:tid 3701240] (EAI 2)Name or service not known: [client 144.76.19.72:63848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:56.649727 2026] [ssl:error] [pid 3701240:tid 3701240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:57.011904 2026] [ssl:error] [pid 3696153:tid 3696153] (70014)End of file found: [client 216.73.216.199:34606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:57.112424 2026] [lsapi:warn] [pid 3700812:tid 3700812] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:37:58.833896 2026] [core:error] [pid 3700473:tid 3700473] [client 74.248.33.8:46942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:58.833921 2026] [core:error] [pid 3700473:tid 3700473] [client 74.248.33.8:46942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:58.941210 2026] [ssl:error] [pid 3701930:tid 3701930] (70014)End of file found: [client 216.73.216.199:16120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:37:59.409981 2026] [core:error] [pid 3700954:tid 3700954] [client 20.104.16.169:34937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:59.410009 2026] [core:error] [pid 3700954:tid 3700954] [client 20.104.16.169:34937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:59.481332 2026] [core:error] [pid 3701929:tid 3701929] [client 74.248.33.8:49886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:59.481356 2026] [core:error] [pid 3701929:tid 3701929] [client 74.248.33.8:49886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:37:59.706158 2026] [ssl:error] [pid 3684939:tid 3684939] (EAI 2)Name or service not known: [client 144.76.19.72:62736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:59.706193 2026] [ssl:error] [pid 3684939:tid 3684939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:37:59.762288 2026] [ssl:error] [pid 3699534:tid 3699534] (EAI 2)Name or service not known: [client 144.76.19.72:62750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:37:59.762320 2026] [ssl:error] [pid 3699534:tid 3699534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:00.266559 2026] [core:error] [pid 3689471:tid 3689471] [client 74.248.33.8:62926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:00.266585 2026] [core:error] [pid 3689471:tid 3689471] [client 74.248.33.8:62926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:01.224924 2026] [core:error] [pid 3687529:tid 3687529] [client 74.248.33.8:17208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:01.224950 2026] [core:error] [pid 3687529:tid 3687529] [client 74.248.33.8:17208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:01.227168 2026] [security2:error] [pid 3687999:tid 3687999] [client 122.51.236.174:48432] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "amthycrppOX9g4-P_rHWhQAAAC0"]
[Thu Jul 30 15:38:01.835233 2026] [core:error] [pid 3700954:tid 3700954] [client 20.104.16.169:36193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:01.835259 2026] [core:error] [pid 3700954:tid 3700954] [client 20.104.16.169:36193] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:01.962552 2026] [core:error] [pid 3701927:tid 3701927] (13)Permission denied: [client 216.73.216.199:30174] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory19/node0/compact
[Thu Jul 30 15:38:02.564934 2026] [ssl:error] [pid 3701927:tid 3701927] (70014)End of file found: [client 216.73.216.199:30174] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:02.817937 2026] [ssl:error] [pid 3699671:tid 3699671] (EAI 2)Name or service not known: [client 144.76.19.72:62764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:02.817972 2026] [ssl:error] [pid 3699671:tid 3699671] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:02.873258 2026] [ssl:error] [pid 3701925:tid 3701925] (EAI 2)Name or service not known: [client 144.76.19.72:62770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:02.873306 2026] [ssl:error] [pid 3701925:tid 3701925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:03.163240 2026] [ssl:error] [pid 3700475:tid 3700475] (70014)End of file found: [client 216.73.216.199:40142] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:03.323400 2026] [core:error] [pid 3684939:tid 3684939] [client 74.248.33.8:62942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:03.323428 2026] [core:error] [pid 3684939:tid 3684939] [client 74.248.33.8:62942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:03.681989 2026] [access_compat:error] [pid 3701089:tid 3701089] [client 136.158.25.236:39795] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:04.367610 2026] [ssl:error] [pid 3701830:tid 3701830] (70014)End of file found: [client 216.73.216.199:8765] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:04.592100 2026] [core:error] [pid 3694811:tid 3694811] [client 74.248.33.8:34047] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:04.592126 2026] [core:error] [pid 3694811:tid 3694811] [client 74.248.33.8:34047] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:05.435923 2026] [core:error] [pid 3689720:tid 3689720] [client 74.248.33.8:33998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:05.435949 2026] [core:error] [pid 3689720:tid 3689720] [client 74.248.33.8:33998] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:05.658484 2026] [access_compat:error] [pid 3700472:tid 3700472] [client 94.154.43.178:58664] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/
[Thu Jul 30 15:38:05.658622 2026] [access_compat:error] [pid 3700472:tid 3700472] [client 94.154.43.178:58664] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 15:38:05.671401 2026] [access_compat:error] [pid 3699664:tid 3699664] [client 94.154.43.178:58666] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 15:38:05.697296 2026] [access_compat:error] [pid 3701930:tid 3701930] [client 94.154.43.178:58670] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/
[Thu Jul 30 15:38:05.927890 2026] [ssl:error] [pid 3687529:tid 3687529] (EAI 2)Name or service not known: [client 144.76.19.72:62774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:05.927922 2026] [ssl:error] [pid 3687529:tid 3687529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:05.982336 2026] [ssl:error] [pid 3700473:tid 3700473] (EAI 2)Name or service not known: [client 144.76.19.72:62778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:05.982382 2026] [ssl:error] [pid 3700473:tid 3700473] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:06.043168 2026] [security2:error] [pid 3685615:tid 3685615] [client 49.207.221.50:3762] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthzmu2JG3_VdYelXV1rQAAAAY"]
[Thu Jul 30 15:38:06.043230 2026] [security2:error] [pid 3685615:tid 3685615] [client 49.207.221.50:3762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amthzmu2JG3_VdYelXV1rQAAAAY"]
[Thu Jul 30 15:38:06.043509 2026] [security2:error] [pid 3685615:tid 3685615] [client 49.207.221.50:3762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amthzmu2JG3_VdYelXV1rQAAAAY"]
[Thu Jul 30 15:38:06.744270 2026] [core:error] [pid 3687529:tid 3687529] [client 20.104.16.169:36162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:06.744294 2026] [core:error] [pid 3687529:tid 3687529] [client 20.104.16.169:36162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:06.889846 2026] [core:error] [pid 3689432:tid 3689432] [client 74.248.33.8:63828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:06.889873 2026] [core:error] [pid 3689432:tid 3689432] [client 74.248.33.8:63828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:07.655176 2026] [core:error] [pid 3701928:tid 3701928] [client 74.248.33.8:49139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:07.655201 2026] [core:error] [pid 3701928:tid 3701928] [client 74.248.33.8:49139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:08.200347 2026] [core:error] [pid 3701242:tid 3701242] [client 74.248.33.8:47662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:08.200412 2026] [core:error] [pid 3701242:tid 3701242] [client 74.248.33.8:47662] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:08.901472 2026] [ssl:error] [pid 3701091:tid 3701091] (70014)End of file found: [client 216.73.216.199:45676] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:09.038744 2026] [ssl:error] [pid 3700139:tid 3700139] (EAI 2)Name or service not known: [client 144.76.19.72:62782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:09.038772 2026] [ssl:error] [pid 3700139:tid 3700139] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:09.044914 2026] [lsapi:warn] [pid 3687959:tid 3687959] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:38:09.095139 2026] [ssl:error] [pid 3694813:tid 3694813] (EAI 2)Name or service not known: [client 144.76.19.72:62784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:09.095166 2026] [ssl:error] [pid 3694813:tid 3694813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:09.241590 2026] [core:error] [pid 3700475:tid 3700475] [client 74.248.33.8:18745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:09.241615 2026] [core:error] [pid 3700475:tid 3700475] [client 74.248.33.8:18745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:09.392527 2026] [ssl:error] [pid 3701242:tid 3701242] (70014)End of file found: [client 216.73.216.199:54507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:09.625927 2026] [security2:error] [pid 3701089:tid 3701089] [client 191.241.78.227:59763] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amth0VYk0su6p_I3TXQtkQAAAFI"]
[Thu Jul 30 15:38:09.625974 2026] [security2:error] [pid 3701089:tid 3701089] [client 191.241.78.227:59763] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amth0VYk0su6p_I3TXQtkQAAAFI"]
[Thu Jul 30 15:38:09.626232 2026] [security2:error] [pid 3701089:tid 3701089] [client 191.241.78.227:59763] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amth0VYk0su6p_I3TXQtkQAAAFI"]
[Thu Jul 30 15:38:09.876264 2026] [core:error] [pid 3701928:tid 3701928] [client 74.248.33.8:63809] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:09.876297 2026] [core:error] [pid 3701928:tid 3701928] [client 74.248.33.8:63809] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:10.101138 2026] [access_compat:error] [pid 3700140:tid 3700140] [client 112.209.180.50:16859] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:10.264579 2026] [core:error] [pid 3701830:tid 3701830] [client 74.248.33.8:49106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:10.264604 2026] [core:error] [pid 3701830:tid 3701830] [client 74.248.33.8:49106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:10.402550 2026] [ssl:error] [pid 3694813:tid 3694813] (70014)End of file found: [client 216.73.216.199:13288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:11.411118 2026] [core:error] [pid 3700301:tid 3700301] [client 74.248.33.8:18726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:11.411148 2026] [core:error] [pid 3700301:tid 3700301] [client 74.248.33.8:18726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:12.071405 2026] [ssl:error] [pid 3699534:tid 3699534] (70014)End of file found: [client 216.73.216.199:20252] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:12.146870 2026] [ssl:error] [pid 3700301:tid 3700301] (EAI 2)Name or service not known: [client 144.76.19.72:62836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:12.146908 2026] [ssl:error] [pid 3700301:tid 3700301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:12.252660 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:62850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:12.252685 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:12.681095 2026] [core:error] [pid 3701928:tid 3701928] (13)Permission denied: [client 216.73.216.199:60288] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/nsproxy/align
[Thu Jul 30 15:38:13.076537 2026] [core:error] [pid 3701925:tid 3701925] [client 74.248.33.8:64123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:13.076562 2026] [core:error] [pid 3701925:tid 3701925] [client 74.248.33.8:64123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:13.548642 2026] [core:error] [pid 3694657:tid 3694657] [client 20.104.16.169:36197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:13.548671 2026] [core:error] [pid 3694657:tid 3694657] [client 20.104.16.169:36197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:13.586287 2026] [core:error] [pid 3701928:tid 3701928] (13)Permission denied: [client 216.73.216.199:60288] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/virtio_console/drivers/virtio:virtio_console/bind
[Thu Jul 30 15:38:13.887963 2026] [ssl:error] [pid 3701928:tid 3701928] (70014)End of file found: [client 216.73.216.199:60288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:14.221761 2026] [core:error] [pid 3689432:tid 3689432] [client 74.248.33.8:48173] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:14.221781 2026] [core:error] [pid 3689432:tid 3689432] [client 74.248.33.8:48173] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:14.292242 2026] [access_compat:error] [pid 3700954:tid 3700954] [client 112.209.180.50:17036] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:14.935006 2026] [core:error] [pid 3694765:tid 3694765] [client 74.248.33.8:64310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:14.935031 2026] [core:error] [pid 3694765:tid 3694765] [client 74.248.33.8:64310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:15.190399 2026] [core:error] [pid 3699532:tid 3699532] [client 74.248.33.8:48755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:15.190425 2026] [core:error] [pid 3699532:tid 3699532] [client 74.248.33.8:48755] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:15.309699 2026] [ssl:error] [pid 3697706:tid 3697706] (EAI 2)Name or service not known: [client 144.76.19.72:62866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:15.309738 2026] [ssl:error] [pid 3697706:tid 3697706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:15.366656 2026] [ssl:error] [pid 3701832:tid 3701832] (EAI 2)Name or service not known: [client 144.76.19.72:62874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:15.366686 2026] [ssl:error] [pid 3701832:tid 3701832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:16.149544 2026] [authz_core:error] [pid 3701091:tid 3701091] [client 66.249.66.35:44990] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:38:16.152203 2026] [authz_core:error] [pid 3701091:tid 3701091] [client 66.249.66.35:44990] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:38:16.300997 2026] [ssl:error] [pid 3687999:tid 3687999] (70014)End of file found: [client 216.73.216.199:23245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:17.097561 2026] [core:error] [pid 3700139:tid 3700139] [client 74.248.33.8:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:17.097591 2026] [core:error] [pid 3700139:tid 3700139] [client 74.248.33.8:46008] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:17.143874 2026] [security2:error] [pid 3699532:tid 3699532] [client 113.165.178.126:51770] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amth2T4FWGSCy8wwi0cMDwAAACg"]
[Thu Jul 30 15:38:17.143928 2026] [security2:error] [pid 3699532:tid 3699532] [client 113.165.178.126:51770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amth2T4FWGSCy8wwi0cMDwAAACg"]
[Thu Jul 30 15:38:17.144178 2026] [security2:error] [pid 3699532:tid 3699532] [client 113.165.178.126:51770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amth2T4FWGSCy8wwi0cMDwAAACg"]
[Thu Jul 30 15:38:18.422266 2026] [ssl:error] [pid 3697706:tid 3697706] (70014)End of file found: [client 216.73.216.199:9788] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:18.422598 2026] [ssl:error] [pid 3701239:tid 3701239] (EAI 2)Name or service not known: [client 144.76.19.72:62884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:18.422630 2026] [ssl:error] [pid 3701239:tid 3701239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:18.476039 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:62896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:18.476085 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:19.115752 2026] [core:error] [pid 3700140:tid 3700140] [client 74.248.33.8:17187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:19.115793 2026] [core:error] [pid 3700140:tid 3700140] [client 74.248.33.8:17187] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:19.488778 2026] [core:error] [pid 3699532:tid 3699532] [client 74.248.33.8:21491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:19.488804 2026] [core:error] [pid 3699532:tid 3699532] [client 74.248.33.8:21491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:19.632727 2026] [ssl:error] [pid 3700301:tid 3700301] (70014)End of file found: [client 216.73.216.199:45567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:20.202106 2026] [core:error] [pid 3701089:tid 3701089] [client 74.248.33.8:48168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:20.202138 2026] [core:error] [pid 3701089:tid 3701089] [client 74.248.33.8:48168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:20.556532 2026] [access_compat:error] [pid 3700475:tid 3700475] [client 136.158.25.236:41416] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:21.351151 2026] [security2:error] [pid 3694813:tid 3694813] [client 114.119.146.111:65147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578787200/cat_ids~30,18/request_format~html"] [unique_id "amth3bwrHh22hTX3BJAt0gAAADo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18/request_format~html
[Thu Jul 30 15:38:21.531333 2026] [ssl:error] [pid 3700954:tid 3700954] (EAI 2)Name or service not known: [client 144.76.19.72:47336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:21.531360 2026] [ssl:error] [pid 3700954:tid 3700954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:21.586231 2026] [ssl:error] [pid 3699531:tid 3699531] (EAI 2)Name or service not known: [client 144.76.19.72:47344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:21.586277 2026] [ssl:error] [pid 3699531:tid 3699531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:22.198050 2026] [core:error] [pid 3698691:tid 3698691] [client 74.248.33.8:17182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:22.198103 2026] [core:error] [pid 3698691:tid 3698691] [client 74.248.33.8:17182] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:22.532833 2026] [core:error] [pid 3699953:tid 3699953] [client 74.248.33.8:33406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:22.532877 2026] [core:error] [pid 3699953:tid 3699953] [client 74.248.33.8:33406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:22.951123 2026] [core:error] [pid 3687999:tid 3687999] [client 74.248.33.8:46969] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:22.951158 2026] [core:error] [pid 3687999:tid 3687999] [client 74.248.33.8:46969] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:23.245924 2026] [security2:error] [pid 3696223:tid 3696223] [client 114.119.146.111:65159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1578787200/cat_ids~30,18/request_format~html"] [unique_id "amth36MWerp5isu3xDfG1AAAAA0"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578873600/cat_ids~30,18/request_format~html
[Thu Jul 30 15:38:23.261656 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:22108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:24.103446 2026] [core:error] [pid 3698691:tid 3698691] [client 74.248.33.8:33995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:24.103491 2026] [core:error] [pid 3698691:tid 3698691] [client 74.248.33.8:33995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:24.614039 2026] [lsapi:warn] [pid 3701241:tid 3701241] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:38:24.673905 2026] [access_compat:error] [pid 3694811:tid 3694811] [client 136.158.25.236:41769] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:24.698759 2026] [ssl:error] [pid 3686906:tid 3686906] (EAI 2)Name or service not known: [client 144.76.19.72:47382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:24.698807 2026] [ssl:error] [pid 3686906:tid 3686906] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:24.755088 2026] [ssl:error] [pid 3698691:tid 3698691] (EAI 2)Name or service not known: [client 144.76.19.72:47384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:24.755138 2026] [ssl:error] [pid 3698691:tid 3698691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:24.768978 2026] [ssl:error] [pid 3654776:tid 3654776] (70014)End of file found: [client 216.73.216.199:29329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:25.135403 2026] [security2:error] [pid 3699531:tid 3699531] [client 85.208.96.195:47792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/basketball-legends-unblocked-games-76"] [unique_id "amth4SA0FkZpq37vVi2fggAAACU"]
[Thu Jul 30 15:38:25.764301 2026] [core:error] [pid 3701091:tid 3701091] [client 74.248.33.8:17196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:25.764342 2026] [core:error] [pid 3701091:tid 3701091] [client 74.248.33.8:17196] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:26.277786 2026] [ssl:error] [pid 3701830:tid 3701830] (70014)End of file found: [client 216.73.216.199:61490] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:27.188656 2026] [core:error] [pid 3699666:tid 3699666] [client 74.248.33.8:33999] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:27.188689 2026] [core:error] [pid 3699666:tid 3699666] [client 74.248.33.8:33999] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:27.405696 2026] [security2:error] [pid 3686906:tid 3686906] [client 185.191.171.15:41152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5632.0.html"] [unique_id "amth4_SKRkqril5jLovOqgAAACE"]
[Thu Jul 30 15:38:27.828124 2026] [ssl:error] [pid 3694765:tid 3694765] (EAI 2)Name or service not known: [client 144.76.19.72:47402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:27.828159 2026] [ssl:error] [pid 3694765:tid 3694765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:27.891177 2026] [core:error] [pid 3699666:tid 3699666] [client 74.248.33.8:21440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:27.891204 2026] [core:error] [pid 3699666:tid 3699666] [client 74.248.33.8:21440] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:27.906381 2026] [ssl:error] [pid 3699531:tid 3699531] (EAI 2)Name or service not known: [client 144.76.19.72:47414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:27.906404 2026] [ssl:error] [pid 3699531:tid 3699531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:28.012566 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amth5HRKtJy3Ze2YOsmiZgAAAGM"]
[Thu Jul 30 15:38:28.012700 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amth5HRKtJy3Ze2YOsmiZgAAAGM"]
[Thu Jul 30 15:38:28.012825 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amth5HRKtJy3Ze2YOsmiZgAAAGM"]
[Thu Jul 30 15:38:28.026052 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amth5PeVWVyA6KgBGAbxfAAAADY"]
[Thu Jul 30 15:38:28.026200 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amth5PeVWVyA6KgBGAbxfAAAADY"]
[Thu Jul 30 15:38:28.026624 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.git/HEAD"] [unique_id "amth5PeVWVyA6KgBGAbxfAAAADY"]
[Thu Jul 30 15:38:28.079567 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amth5E5HOws0qx0aWMDRfwAAABs"]
[Thu Jul 30 15:38:28.079700 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amth5E5HOws0qx0aWMDRfwAAABs"]
[Thu Jul 30 15:38:28.079823 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env"] [unique_id "amth5E5HOws0qx0aWMDRfwAAABs"]
[Thu Jul 30 15:38:28.143116 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.example"] [unique_id "amth5PeVWVyA6KgBGAbxgAAAADY"]
[Thu Jul 30 15:38:28.143277 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.example"] [unique_id "amth5PeVWVyA6KgBGAbxgAAAADY"]
[Thu Jul 30 15:38:28.143394 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.example"] [unique_id "amth5PeVWVyA6KgBGAbxgAAAADY"]
[Thu Jul 30 15:38:28.152117 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amth5E5HOws0qx0aWMDRgQAAABs"]
[Thu Jul 30 15:38:28.152278 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amth5E5HOws0qx0aWMDRgQAAABs"]
[Thu Jul 30 15:38:28.152438 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production"] [unique_id "amth5E5HOws0qx0aWMDRgQAAABs"]
[Thu Jul 30 15:38:28.155884 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amth5PeVWVyA6KgBGAbxgQAAADY"]
[Thu Jul 30 15:38:28.156018 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amth5PeVWVyA6KgBGAbxgQAAADY"]
[Thu Jul 30 15:38:28.156223 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.local"] [unique_id "amth5PeVWVyA6KgBGAbxgQAAADY"]
[Thu Jul 30 15:38:28.196617 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.backup"] [unique_id "amth5HRKtJy3Ze2YOsmiagAAAGM"]
[Thu Jul 30 15:38:28.196750 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.backup"] [unique_id "amth5HRKtJy3Ze2YOsmiagAAAGM"]
[Thu Jul 30 15:38:28.196871 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.backup"] [unique_id "amth5HRKtJy3Ze2YOsmiagAAAGM"]
[Thu Jul 30 15:38:28.212199 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.old"] [unique_id "amth5HRKtJy3Ze2YOsmiawAAAGM"]
[Thu Jul 30 15:38:28.212338 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.old"] [unique_id "amth5HRKtJy3Ze2YOsmiawAAAGM"]
[Thu Jul 30 15:38:28.212457 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.old"] [unique_id "amth5HRKtJy3Ze2YOsmiawAAAGM"]
[Thu Jul 30 15:38:28.220042 2026] [security2:error] [pid 3699531:tid 3699531] [client 34.53.210.86:59122] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.bak"] [unique_id "amth5CA0FkZpq37vVi2fjgAAACU"]
[Thu Jul 30 15:38:28.220189 2026] [security2:error] [pid 3699531:tid 3699531] [client 34.53.210.86:59122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.bak"] [unique_id "amth5CA0FkZpq37vVi2fjgAAACU"]
[Thu Jul 30 15:38:28.220306 2026] [security2:error] [pid 3699531:tid 3699531] [client 34.53.210.86:59122] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.bak"] [unique_id "amth5CA0FkZpq37vVi2fjgAAACU"]
[Thu Jul 30 15:38:28.247293 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amth5HRKtJy3Ze2YOsmibQAAAGM"]
[Thu Jul 30 15:38:28.247436 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amth5HRKtJy3Ze2YOsmibQAAAGM"]
[Thu Jul 30 15:38:28.247542 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/api/.env"] [unique_id "amth5HRKtJy3Ze2YOsmibQAAAGM"]
[Thu Jul 30 15:38:28.261267 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/admin/.env"] [unique_id "amth5E5HOws0qx0aWMDRhAAAABs"]
[Thu Jul 30 15:38:28.261412 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/admin/.env"] [unique_id "amth5E5HOws0qx0aWMDRhAAAABs"]
[Thu Jul 30 15:38:28.261522 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/admin/.env"] [unique_id "amth5E5HOws0qx0aWMDRhAAAABs"]
[Thu Jul 30 15:38:28.338502 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/elmah.axd"] [unique_id "amth5HRKtJy3Ze2YOsmibwAAAGM"]
[Thu Jul 30 15:38:28.338704 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/elmah.axd"] [unique_id "amth5HRKtJy3Ze2YOsmibwAAAGM"]
[Thu Jul 30 15:38:28.338818 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/elmah.axd"] [unique_id "amth5HRKtJy3Ze2YOsmibwAAAGM"]
[Thu Jul 30 15:38:28.406679 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/rclone.conf"] [unique_id "amth5HRKtJy3Ze2YOsmicQAAAGM"]
[Thu Jul 30 15:38:28.406872 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/rclone.conf"] [unique_id "amth5HRKtJy3Ze2YOsmicQAAAGM"]
[Thu Jul 30 15:38:28.406997 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/rclone.conf"] [unique_id "amth5HRKtJy3Ze2YOsmicQAAAGM"]
[Thu Jul 30 15:38:28.449453 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/trace.axd"] [unique_id "amth5E5HOws0qx0aWMDRigAAABs"]
[Thu Jul 30 15:38:28.449649 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/trace.axd"] [unique_id "amth5E5HOws0qx0aWMDRigAAABs"]
[Thu Jul 30 15:38:28.449758 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/trace.axd"] [unique_id "amth5E5HOws0qx0aWMDRigAAABs"]
[Thu Jul 30 15:38:28.451543 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.github/.env"] [unique_id "amth5PSKRkqril5jLovOuQAAACE"]
[Thu Jul 30 15:38:28.451670 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.github/.env"] [unique_id "amth5PSKRkqril5jLovOuQAAACE"]
[Thu Jul 30 15:38:28.451794 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.github/.env"] [unique_id "amth5PSKRkqril5jLovOuQAAACE"]
[Thu Jul 30 15:38:28.483631 2026] [core:error] [pid 3699531:tid 3699531] [client 74.248.33.8:62922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:28.483658 2026] [core:error] [pid 3699531:tid 3699531] [client 74.248.33.8:62922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:28.507638 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/@fs/.env"] [unique_id "amth5E5HOws0qx0aWMDRjAAAABs"]
[Thu Jul 30 15:38:28.507727 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/@fs/root/.env"] [unique_id "amth5PSKRkqril5jLovOuwAAACE"]
[Thu Jul 30 15:38:28.508016 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/@fs/.env"] [unique_id "amth5E5HOws0qx0aWMDRjAAAABs"]
[Thu Jul 30 15:38:28.508029 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/@fs/root/.env"] [unique_id "amth5PSKRkqril5jLovOuwAAACE"]
[Thu Jul 30 15:38:28.508153 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/@fs/.env"] [unique_id "amth5E5HOws0qx0aWMDRjAAAABs"]
[Thu Jul 30 15:38:28.508166 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/@fs/root/.env"] [unique_id "amth5PSKRkqril5jLovOuwAAACE"]
[Thu Jul 30 15:38:28.541007 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.hermes/.env"] [unique_id "amth5PeVWVyA6KgBGAbxjQAAADY"]
[Thu Jul 30 15:38:28.541149 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.hermes/.env"] [unique_id "amth5PeVWVyA6KgBGAbxjQAAADY"]
[Thu Jul 30 15:38:28.541255 2026] [security2:error] [pid 3699664:tid 3699664] [client 34.53.210.86:59140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.hermes/.env"] [unique_id "amth5PeVWVyA6KgBGAbxjQAAADY"]
[Thu Jul 30 15:38:28.541820 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/config/.env"] [unique_id "amth5M1HMoAJcbZOTNV9fQAAAFA"]
[Thu Jul 30 15:38:28.541954 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/config/.env"] [unique_id "amth5M1HMoAJcbZOTNV9fQAAAFA"]
[Thu Jul 30 15:38:28.542059 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/config/.env"] [unique_id "amth5M1HMoAJcbZOTNV9fQAAAFA"]
[Thu Jul 30 15:38:28.557191 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amth5M1HMoAJcbZOTNV9fgAAAFA"]
[Thu Jul 30 15:38:28.557321 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amth5M1HMoAJcbZOTNV9fgAAAFA"]
[Thu Jul 30 15:38:28.557430 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/backend/.env"] [unique_id "amth5M1HMoAJcbZOTNV9fgAAAFA"]
[Thu Jul 30 15:38:28.565970 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amth5J8Z7BQgXygjfHpNKwAAAE4"]
[Thu Jul 30 15:38:28.566129 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amth5J8Z7BQgXygjfHpNKwAAAE4"]
[Thu Jul 30 15:38:28.566242 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.development"] [unique_id "amth5J8Z7BQgXygjfHpNKwAAAE4"]
[Thu Jul 30 15:38:28.577001 2026] [authz_core:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] AH01630: client denied by server configuration: /home/wwwhighc/public_html/.htpasswd
[Thu Jul 30 15:38:28.591524 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/server.key"] [unique_id "amth5HRKtJy3Ze2YOsmidgAAAGM"]
[Thu Jul 30 15:38:28.591713 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/server.key"] [unique_id "amth5HRKtJy3Ze2YOsmidgAAAGM"]
[Thu Jul 30 15:38:28.591823 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/server.key"] [unique_id "amth5HRKtJy3Ze2YOsmidgAAAGM"]
[Thu Jul 30 15:38:28.601114 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/web.config"] [unique_id "amth5J8Z7BQgXygjfHpNLAAAAE4"]
[Thu Jul 30 15:38:28.601236 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/web.config"] [unique_id "amth5J8Z7BQgXygjfHpNLAAAAE4"]
[Thu Jul 30 15:38:28.601374 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/web.config"] [unique_id "amth5J8Z7BQgXygjfHpNLAAAAE4"]
[Thu Jul 30 15:38:28.601494 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/web.config"] [unique_id "amth5J8Z7BQgXygjfHpNLAAAAE4"]
[Thu Jul 30 15:38:28.631956 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/config/master.key"] [unique_id "amth5E5HOws0qx0aWMDRjgAAABs"]
[Thu Jul 30 15:38:28.632270 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/config/master.key"] [unique_id "amth5E5HOws0qx0aWMDRjgAAABs"]
[Thu Jul 30 15:38:28.632469 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/config/master.key"] [unique_id "amth5E5HOws0qx0aWMDRjgAAABs"]
[Thu Jul 30 15:38:28.644951 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.staging"] [unique_id "amth5J8Z7BQgXygjfHpNLQAAAE4"]
[Thu Jul 30 15:38:28.645162 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/privatekey.key"] [unique_id "amth5M1HMoAJcbZOTNV9gQAAAFA"]
[Thu Jul 30 15:38:28.645172 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.staging"] [unique_id "amth5J8Z7BQgXygjfHpNLQAAAE4"]
[Thu Jul 30 15:38:28.645296 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.staging"] [unique_id "amth5J8Z7BQgXygjfHpNLQAAAE4"]
[Thu Jul 30 15:38:28.645373 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/privatekey.key"] [unique_id "amth5M1HMoAJcbZOTNV9gQAAAFA"]
[Thu Jul 30 15:38:28.645490 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/privatekey.key"] [unique_id "amth5M1HMoAJcbZOTNV9gQAAAFA"]
[Thu Jul 30 15:38:28.669994 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.test"] [unique_id "amth5J8Z7BQgXygjfHpNLgAAAE4"]
[Thu Jul 30 15:38:28.670139 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.test"] [unique_id "amth5J8Z7BQgXygjfHpNLgAAAE4"]
[Thu Jul 30 15:38:28.670256 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.test"] [unique_id "amth5J8Z7BQgXygjfHpNLgAAAE4"]
[Thu Jul 30 15:38:28.723982 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/localhost.key"] [unique_id "amth5HRKtJy3Ze2YOsmiewAAAGM"]
[Thu Jul 30 15:38:28.724202 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/localhost.key"] [unique_id "amth5HRKtJy3Ze2YOsmiewAAAGM"]
[Thu Jul 30 15:38:28.724311 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/localhost.key"] [unique_id "amth5HRKtJy3Ze2YOsmiewAAAGM"]
[Thu Jul 30 15:38:28.734789 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.svn/entries"] [unique_id "amth5M1HMoAJcbZOTNV9hgAAAFA"]
[Thu Jul 30 15:38:28.734929 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.svn/entries"] [unique_id "amth5M1HMoAJcbZOTNV9hgAAAFA"]
[Thu Jul 30 15:38:28.735038 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.svn/entries"] [unique_id "amth5M1HMoAJcbZOTNV9hgAAAFA"]
[Thu Jul 30 15:38:28.769310 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/host.key"] [unique_id "amth5HRKtJy3Ze2YOsmifAAAAGM"]
[Thu Jul 30 15:38:28.769542 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/host.key"] [unique_id "amth5HRKtJy3Ze2YOsmifAAAAGM"]
[Thu Jul 30 15:38:28.769656 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/host.key"] [unique_id "amth5HRKtJy3Ze2YOsmifAAAAGM"]
[Thu Jul 30 15:38:28.819172 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.openclaw/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNAAAAE4"]
[Thu Jul 30 15:38:28.819306 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.openclaw/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNAAAAE4"]
[Thu Jul 30 15:38:28.819435 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.openclaw/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNAAAAE4"]
[Thu Jul 30 15:38:28.822806 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.dev"] [unique_id "amth5PSKRkqril5jLovOwwAAACE"]
[Thu Jul 30 15:38:28.822941 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.dev"] [unique_id "amth5PSKRkqril5jLovOwwAAACE"]
[Thu Jul 30 15:38:28.823052 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.dev"] [unique_id "amth5PSKRkqril5jLovOwwAAACE"]
[Thu Jul 30 15:38:28.825986 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/ssl/server.key"] [unique_id "amth5E5HOws0qx0aWMDRkAAAABs"]
[Thu Jul 30 15:38:28.826283 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/ssl/server.key"] [unique_id "amth5E5HOws0qx0aWMDRkAAAABs"]
[Thu Jul 30 15:38:28.826451 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/ssl/server.key"] [unique_id "amth5E5HOws0qx0aWMDRkAAAABs"]
[Thu Jul 30 15:38:28.854059 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/app/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNQAAAE4"]
[Thu Jul 30 15:38:28.854251 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/app/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNQAAAE4"]
[Thu Jul 30 15:38:28.854381 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/app/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNQAAAE4"]
[Thu Jul 30 15:38:28.867381 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.swp"] [unique_id "amth5PSKRkqril5jLovOxQAAACE"]
[Thu Jul 30 15:38:28.867447 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/docker/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNgAAAE4"]
[Thu Jul 30 15:38:28.867513 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.swp"] [unique_id "amth5PSKRkqril5jLovOxQAAACE"]
[Thu Jul 30 15:38:28.867571 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/docker/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNgAAAE4"]
[Thu Jul 30 15:38:28.867635 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.swp"] [unique_id "amth5PSKRkqril5jLovOxQAAACE"]
[Thu Jul 30 15:38:28.867695 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/docker/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNgAAAE4"]
[Thu Jul 30 15:38:28.880283 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/production/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNwAAAE4"]
[Thu Jul 30 15:38:28.880448 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/production/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNwAAAE4"]
[Thu Jul 30 15:38:28.880564 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/production/.env"] [unique_id "amth5J8Z7BQgXygjfHpNNwAAAE4"]
[Thu Jul 30 15:38:28.888765 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amth5HRKtJy3Ze2YOsmigQAAAGM"]
[Thu Jul 30 15:38:28.888985 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amth5HRKtJy3Ze2YOsmigQAAAGM"]
[Thu Jul 30 15:38:28.889260 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amth5HRKtJy3Ze2YOsmigQAAAGM"]
[Thu Jul 30 15:38:28.908511 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/src/.env"] [unique_id "amth5J8Z7BQgXygjfHpNOQAAAE4"]
[Thu Jul 30 15:38:28.908642 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/src/.env"] [unique_id "amth5J8Z7BQgXygjfHpNOQAAAE4"]
[Thu Jul 30 15:38:28.908755 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/src/.env"] [unique_id "amth5J8Z7BQgXygjfHpNOQAAAE4"]
[Thu Jul 30 15:38:28.917489 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/public/.env"] [unique_id "amth5M1HMoAJcbZOTNV9jAAAAFA"]
[Thu Jul 30 15:38:28.917628 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/public/.env"] [unique_id "amth5M1HMoAJcbZOTNV9jAAAAFA"]
[Thu Jul 30 15:38:28.917741 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/public/.env"] [unique_id "amth5M1HMoAJcbZOTNV9jAAAAFA"]
[Thu Jul 30 15:38:28.927523 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amth5J8Z7BQgXygjfHpNOgAAAE4"]
[Thu Jul 30 15:38:28.927655 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amth5J8Z7BQgXygjfHpNOgAAAE4"]
[Thu Jul 30 15:38:28.927763 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amth5J8Z7BQgXygjfHpNOgAAAE4"]
[Thu Jul 30 15:38:28.931137 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/frontend/.env"] [unique_id "amth5HRKtJy3Ze2YOsmigwAAAGM"]
[Thu Jul 30 15:38:28.931273 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/frontend/.env"] [unique_id "amth5HRKtJy3Ze2YOsmigwAAAGM"]
[Thu Jul 30 15:38:28.931388 2026] [security2:error] [pid 3701832:tid 3701832] [client 34.53.210.86:59096] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/frontend/.env"] [unique_id "amth5HRKtJy3Ze2YOsmigwAAAGM"]
[Thu Jul 30 15:38:28.932551 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/wp-config.php.old"] [unique_id "amth5PSKRkqril5jLovOyAAAACE"]
[Thu Jul 30 15:38:28.932677 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/wp-config.php.old"] [unique_id "amth5PSKRkqril5jLovOyAAAACE"]
[Thu Jul 30 15:38:28.932786 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/wp-config.php.old"] [unique_id "amth5PSKRkqril5jLovOyAAAACE"]
[Thu Jul 30 15:38:28.942116 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/web/.env"] [unique_id "amth5J8Z7BQgXygjfHpNOwAAAE4"]
[Thu Jul 30 15:38:28.942255 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/web/.env"] [unique_id "amth5J8Z7BQgXygjfHpNOwAAAE4"]
[Thu Jul 30 15:38:28.942377 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/web/.env"] [unique_id "amth5J8Z7BQgXygjfHpNOwAAAE4"]
[Thu Jul 30 15:38:28.953077 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.docker"] [unique_id "amth5M1HMoAJcbZOTNV9jgAAAFA"]
[Thu Jul 30 15:38:28.953207 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.docker"] [unique_id "amth5M1HMoAJcbZOTNV9jgAAAFA"]
[Thu Jul 30 15:38:28.953312 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.docker"] [unique_id "amth5M1HMoAJcbZOTNV9jgAAAFA"]
[Thu Jul 30 15:38:28.960295 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/staging/.env"] [unique_id "amth5E5HOws0qx0aWMDRlQAAABs"]
[Thu Jul 30 15:38:28.960522 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/staging/.env"] [unique_id "amth5E5HOws0qx0aWMDRlQAAABs"]
[Thu Jul 30 15:38:28.960666 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/staging/.env"] [unique_id "amth5E5HOws0qx0aWMDRlQAAABs"]
[Thu Jul 30 15:38:28.975138 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "admin.highclereracing.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amth5J8Z7BQgXygjfHpNPQAAAE4"]
[Thu Jul 30 15:38:28.975361 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amth5J8Z7BQgXygjfHpNPQAAAE4"]
[Thu Jul 30 15:38:28.975495 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amth5J8Z7BQgXygjfHpNPQAAAE4"]
[Thu Jul 30 15:38:28.976687 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/server/.env"] [unique_id "amth5E5HOws0qx0aWMDRlgAAABs"]
[Thu Jul 30 15:38:28.976859 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/server/.env"] [unique_id "amth5E5HOws0qx0aWMDRlgAAABs"]
[Thu Jul 30 15:38:28.976995 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/server/.env"] [unique_id "amth5E5HOws0qx0aWMDRlgAAABs"]
[Thu Jul 30 15:38:28.995887 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/laravel/.env"] [unique_id "amth5M1HMoAJcbZOTNV9kAAAAFA"]
[Thu Jul 30 15:38:28.996026 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/laravel/.env"] [unique_id "amth5M1HMoAJcbZOTNV9kAAAAFA"]
[Thu Jul 30 15:38:28.996149 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/laravel/.env"] [unique_id "amth5M1HMoAJcbZOTNV9kAAAAFA"]
[Thu Jul 30 15:38:28.998801 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production.bak"] [unique_id "amth5E5HOws0qx0aWMDRlwAAABs"]
[Thu Jul 30 15:38:28.998949 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production.bak"] [unique_id "amth5E5HOws0qx0aWMDRlwAAABs"]
[Thu Jul 30 15:38:28.999062 2026] [security2:error] [pid 3694765:tid 3694765] [client 34.53.210.86:59126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.production.bak"] [unique_id "amth5E5HOws0qx0aWMDRlwAAABs"]
[Thu Jul 30 15:38:29.003724 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.prod.bak"] [unique_id "amth5fSKRkqril5jLovOygAAACE"]
[Thu Jul 30 15:38:29.003853 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.prod.bak"] [unique_id "amth5fSKRkqril5jLovOygAAACE"]
[Thu Jul 30 15:38:29.003964 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.prod.bak"] [unique_id "amth5fSKRkqril5jLovOygAAACE"]
[Thu Jul 30 15:38:29.013189 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/config/.env.php"] [unique_id "amth5c1HMoAJcbZOTNV9kQAAAFA"]
[Thu Jul 30 15:38:29.013329 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/config/.env.php"] [unique_id "amth5c1HMoAJcbZOTNV9kQAAAFA"]
[Thu Jul 30 15:38:29.013446 2026] [security2:error] [pid 3700812:tid 3700812] [client 34.53.210.86:59150] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/config/.env.php"] [unique_id "amth5c1HMoAJcbZOTNV9kQAAAFA"]
[Thu Jul 30 15:38:29.018045 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/dev/.env"] [unique_id "amth5fSKRkqril5jLovOywAAACE"]
[Thu Jul 30 15:38:29.018190 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/dev/.env"] [unique_id "amth5fSKRkqril5jLovOywAAACE"]
[Thu Jul 30 15:38:29.018296 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/dev/.env"] [unique_id "amth5fSKRkqril5jLovOywAAACE"]
[Thu Jul 30 15:38:29.035795 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.php.bak"] [unique_id "amth5fSKRkqril5jLovOzAAAACE"]
[Thu Jul 30 15:38:29.035936 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.php.bak"] [unique_id "amth5fSKRkqril5jLovOzAAAACE"]
[Thu Jul 30 15:38:29.036041 2026] [security2:error] [pid 3686906:tid 3686906] [client 34.53.210.86:59148] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/.env.php.bak"] [unique_id "amth5fSKRkqril5jLovOzAAAACE"]
[Thu Jul 30 15:38:29.072417 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "admin.highclereracing.co.uk"] [uri "/core/.env"] [unique_id "amth5Z8Z7BQgXygjfHpNQAAAAE4"]
[Thu Jul 30 15:38:29.072545 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "admin.highclereracing.co.uk"] [uri "/core/.env"] [unique_id "amth5Z8Z7BQgXygjfHpNQAAAAE4"]
[Thu Jul 30 15:38:29.072657 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.53.210.86:59162] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "admin.highclereracing.co.uk"] [uri "/core/.env"] [unique_id "amth5Z8Z7BQgXygjfHpNQAAAAE4"]
[Thu Jul 30 15:38:29.588801 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:54267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:29.820574 2026] [core:error] [pid 3689394:tid 3689394] [client 74.248.33.8:17154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:29.820597 2026] [core:error] [pid 3689394:tid 3689394] [client 74.248.33.8:17154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:29.851965 2026] [security2:error] [pid 3689394:tid 3689394] [client 43.134.94.96:59276] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "annasmithagent.com"] [uri "/"] [unique_id "amth5YoqVK2px4huxiNAlAAAAA8"]
[Thu Jul 30 15:38:30.524847 2026] [core:error] [pid 3694811:tid 3694811] [client 74.248.33.8:48150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:30.524876 2026] [core:error] [pid 3694811:tid 3694811] [client 74.248.33.8:48150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:31.223796 2026] [ssl:error] [pid 3705622:tid 3705622] (EAI 2)Name or service not known: [client 144.76.19.72:60086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:31.223838 2026] [ssl:error] [pid 3705622:tid 3705622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:31.320671 2026] [core:error] [pid 3705620:tid 3705620] [client 74.248.33.8:46958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:31.320711 2026] [core:error] [pid 3705620:tid 3705620] [client 74.248.33.8:46958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:31.322640 2026] [access_compat:error] [pid 3701927:tid 3701927] [client 136.158.25.236:42319] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:31.489957 2026] [ssl:error] [pid 3705620:tid 3705620] (70014)End of file found: [client 216.73.216.199:62044] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:32.417449 2026] [ssl:error] [pid 3700301:tid 3700301] (EAI 2)Name or service not known: [client 144.76.19.72:60090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:32.417476 2026] [ssl:error] [pid 3700301:tid 3700301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:32.648784 2026] [core:error] [pid 3700301:tid 3700301] [client 74.248.33.8:49141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:32.648811 2026] [core:error] [pid 3700301:tid 3700301] [client 74.248.33.8:49141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:33.214221 2026] [core:error] [pid 3705681:tid 3705681] [client 74.248.33.8:17212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:33.214267 2026] [core:error] [pid 3705681:tid 3705681] [client 74.248.33.8:17212] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:34.114546 2026] [authz_core:error] [pid 3701091:tid 3701091] [client 66.249.66.33:42475] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:38:34.118918 2026] [authz_core:error] [pid 3701091:tid 3701091] [client 66.249.66.33:42475] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:38:34.366001 2026] [core:error] [pid 3705682:tid 3705682] [client 74.248.33.8:14140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:34.366033 2026] [core:error] [pid 3705682:tid 3705682] [client 74.248.33.8:14140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:34.400115 2026] [authz_core:error] [pid 3673221:tid 3673221] [client 66.249.66.33:55055] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:38:34.402824 2026] [authz_core:error] [pid 3673221:tid 3673221] [client 66.249.66.33:55055] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:38:34.751635 2026] [core:error] [pid 3700475:tid 3700475] [client 74.248.33.8:49112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:34.751668 2026] [core:error] [pid 3700475:tid 3700475] [client 74.248.33.8:49112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:35.178634 2026] [access_compat:error] [pid 3700140:tid 3700140] [client 136.158.25.236:42720] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:35.469309 2026] [ssl:error] [pid 3696153:tid 3696153] (EAI 2)Name or service not known: [client 144.76.19.72:60106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:35.469344 2026] [ssl:error] [pid 3696153:tid 3696153] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:35.521245 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:60118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:35.521273 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:35.685651 2026] [core:error] [pid 3692608:tid 3692608] [client 20.104.16.169:36114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:35.685675 2026] [core:error] [pid 3692608:tid 3692608] [client 20.104.16.169:36114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:35.760874 2026] [access_compat:error] [pid 3705681:tid 3705681] [client 45.158.164.139:60436] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:38:37.448794 2026] [ssl:error] [pid 3701240:tid 3701240] (70014)End of file found: [client 216.73.216.199:38826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:37.745675 2026] [ssl:error] [pid 3705621:tid 3705621] (70014)End of file found: [client 216.73.216.199:35093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:38.578480 2026] [ssl:error] [pid 3689433:tid 3689433] (EAI 2)Name or service not known: [client 144.76.19.72:60124] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:38.578525 2026] [ssl:error] [pid 3689433:tid 3689433] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:38.634733 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:60128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:38.634779 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:38.803899 2026] [authz_core:error] [pid 3701091:tid 3701091] [client 66.249.66.33:51582] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:38:38.806589 2026] [authz_core:error] [pid 3701091:tid 3701091] [client 66.249.66.33:51582] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:38:38.869766 2026] [core:error] [pid 3694813:tid 3694813] [client 74.248.33.8:62945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:38.869794 2026] [core:error] [pid 3694813:tid 3694813] [client 74.248.33.8:62945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:39.737136 2026] [cgi:error] [pid 3701239:tid 3701239] [client 20.151.221.234:55584] AH02812: stderr from /home/liberat/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:38:40.038742 2026] [core:error] [pid 3705681:tid 3705681] [client 74.248.33.8:34001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:40.038777 2026] [core:error] [pid 3705681:tid 3705681] [client 74.248.33.8:34001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:40.460992 2026] [ssl:error] [pid 3705619:tid 3705619] (70014)End of file found: [client 216.73.216.199:4675] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:40.825326 2026] [core:error] [pid 3699531:tid 3699531] [client 74.248.33.8:17180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:40.825354 2026] [core:error] [pid 3699531:tid 3699531] [client 74.248.33.8:17180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:41.218624 2026] [core:error] [pid 3689394:tid 3689394] [client 74.248.33.8:17194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:41.218648 2026] [core:error] [pid 3689394:tid 3689394] [client 74.248.33.8:17194] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:41.433215 2026] [lsapi:warn] [pid 3705679:tid 3705679] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:38:41.541727 2026] [core:error] [pid 3699532:tid 3699532] [client 74.248.33.8:46948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:41.541750 2026] [core:error] [pid 3699532:tid 3699532] [client 74.248.33.8:46948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:41.688625 2026] [ssl:error] [pid 3697706:tid 3697706] (EAI 2)Name or service not known: [client 144.76.19.72:45836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:41.688670 2026] [ssl:error] [pid 3697706:tid 3697706] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:41.745898 2026] [ssl:error] [pid 3701832:tid 3701832] (EAI 2)Name or service not known: [client 144.76.19.72:45842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:41.745937 2026] [ssl:error] [pid 3701832:tid 3701832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:42.120423 2026] [access_compat:error] [pid 3673221:tid 3673221] [client 136.158.25.236:43348] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:42.484624 2026] [core:error] [pid 3701927:tid 3701927] [client 74.248.33.8:46975] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:42.484651 2026] [core:error] [pid 3701927:tid 3701927] [client 74.248.33.8:46975] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:42.928341 2026] [core:error] [pid 3698691:tid 3698691] [client 20.104.16.169:36140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:42.928379 2026] [core:error] [pid 3698691:tid 3698691] [client 20.104.16.169:36140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:42.938577 2026] [core:error] [pid 3686906:tid 3686906] [client 74.248.33.8:48892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:42.938601 2026] [core:error] [pid 3686906:tid 3686906] [client 74.248.33.8:48892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:43.182685 2026] [core:error] [pid 3699531:tid 3699531] (13)Permission denied: [client 216.73.216.199:2175] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory132/node0/compact
[Thu Jul 30 15:38:43.760796 2026] [core:error] [pid 3687959:tid 3687959] [client 74.248.33.8:33344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:43.760834 2026] [core:error] [pid 3687959:tid 3687959] [client 74.248.33.8:33344] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:44.122228 2026] [core:error] [pid 3698691:tid 3698691] [client 66.249.66.8:43094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:44.122272 2026] [core:error] [pid 3698691:tid 3698691] [client 66.249.66.8:43094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:44.388582 2026] [ssl:error] [pid 3699531:tid 3699531] (70014)End of file found: [client 216.73.216.199:2175] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:44.615177 2026] [core:error] [pid 3700140:tid 3700140] [client 74.248.33.8:33398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:44.615211 2026] [core:error] [pid 3700140:tid 3700140] [client 74.248.33.8:33398] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:44.804055 2026] [ssl:error] [pid 3698691:tid 3698691] (EAI 2)Name or service not known: [client 144.76.19.72:45856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:44.804094 2026] [ssl:error] [pid 3698691:tid 3698691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:44.858453 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:45862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:44.858496 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:45.032490 2026] [core:error] [pid 3705680:tid 3705680] [client 74.248.33.8:48190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:45.032522 2026] [core:error] [pid 3705680:tid 3705680] [client 74.248.33.8:48190] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:45.500516 2026] [core:error] [pid 3705676:tid 3705676] [client 74.248.33.8:62925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:45.500549 2026] [core:error] [pid 3705676:tid 3705676] [client 74.248.33.8:62925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:45.905916 2026] [access_compat:error] [pid 3700140:tid 3700140] [client 136.158.25.236:43716] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:46.184243 2026] [core:error] [pid 3705676:tid 3705676] [client 20.104.16.169:34886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:46.184272 2026] [core:error] [pid 3705676:tid 3705676] [client 20.104.16.169:34886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:46.193524 2026] [ssl:error] [pid 3689471:tid 3689471] (70014)End of file found: [client 216.73.216.199:57911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:46.729043 2026] [core:error] [pid 3705621:tid 3705621] [client 74.248.33.8:62953] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:46.729090 2026] [core:error] [pid 3705621:tid 3705621] [client 74.248.33.8:62953] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:47.518237 2026] [core:error] [pid 3699664:tid 3699664] [client 74.248.33.8:49149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:47.518268 2026] [core:error] [pid 3699664:tid 3699664] [client 74.248.33.8:49149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:47.915018 2026] [ssl:error] [pid 3694765:tid 3694765] (EAI 2)Name or service not known: [client 144.76.19.72:45878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:47.915047 2026] [ssl:error] [pid 3694765:tid 3694765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:47.969484 2026] [ssl:error] [pid 3673221:tid 3673221] (EAI 2)Name or service not known: [client 144.76.19.72:45888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:47.969514 2026] [ssl:error] [pid 3673221:tid 3673221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:48.296481 2026] [ssl:error] [pid 3700301:tid 3700301] (70014)End of file found: [client 216.73.216.199:22009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:49.015057 2026] [core:error] [pid 3699664:tid 3699664] [client 20.104.16.169:34818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:49.015105 2026] [core:error] [pid 3699664:tid 3699664] [client 20.104.16.169:34818] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:50.719614 2026] [ssl:error] [pid 3701239:tid 3701239] (70014)End of file found: [client 216.73.216.199:55251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:50.733533 2026] [core:error] [pid 3694765:tid 3694765] [client 74.248.33.8:64077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:50.733560 2026] [core:error] [pid 3694765:tid 3694765] [client 74.248.33.8:64077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:51.025636 2026] [ssl:error] [pid 3694765:tid 3694765] (EAI 2)Name or service not known: [client 144.76.19.72:27826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:51.025667 2026] [ssl:error] [pid 3694765:tid 3694765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:51.077148 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:27842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:51.077193 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:51.505547 2026] [ssl:error] [pid 3687959:tid 3687959] (70014)End of file found: [client 216.73.216.199:31874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:51.594739 2026] [core:error] [pid 3697706:tid 3697706] [client 74.248.33.8:49099] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:51.594769 2026] [core:error] [pid 3697706:tid 3697706] [client 74.248.33.8:49099] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:52.056352 2026] [authz_core:error] [pid 3701932:tid 3701932] [client 169.58.39.192:55638] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:38:52.140812 2026] [core:error] [pid 3689471:tid 3689471] [client 74.248.33.8:34037] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:52.140841 2026] [core:error] [pid 3689471:tid 3689471] [client 74.248.33.8:34037] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:52.239481 2026] [security2:error] [pid 3705679:tid 3705679] [client 106.52.216.13:49328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alism.com"] [uri "/"] [unique_id "amth_AJeEDoios_r9TnRuQAAABI"]
[Thu Jul 30 15:38:52.529244 2026] [core:error] [pid 3701089:tid 3701089] [client 74.248.33.8:49089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:52.529285 2026] [core:error] [pid 3701089:tid 3701089] [client 74.248.33.8:49089] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:52.543227 2026] [core:error] [pid 3705680:tid 3705680] [client 20.104.16.169:34895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:52.543254 2026] [core:error] [pid 3705680:tid 3705680] [client 20.104.16.169:34895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.025110 2026] [core:error] [pid 3694765:tid 3694765] [client 74.248.33.8:27183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.025165 2026] [core:error] [pid 3694765:tid 3694765] [client 74.248.33.8:27183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.346223 2026] [core:error] [pid 3701932:tid 3701932] [client 74.248.33.8:36048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.346260 2026] [core:error] [pid 3701932:tid 3701932] [client 74.248.33.8:36048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.636117 2026] [ssl:error] [pid 3694765:tid 3694765] (70014)End of file found: [client 216.73.216.199:24466] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:53.666226 2026] [access_compat:error] [pid 3685615:tid 3685615] [client 45.158.164.139:55258] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:38:53.753741 2026] [core:error] [pid 3701832:tid 3701832] [client 74.248.33.8:36095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.753772 2026] [core:error] [pid 3701832:tid 3701832] [client 74.248.33.8:36095] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.952473 2026] [core:error] [pid 3705576:tid 3705576] [client 20.104.16.169:36150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:53.952501 2026] [core:error] [pid 3705576:tid 3705576] [client 20.104.16.169:36150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:54.133394 2026] [ssl:error] [pid 3705621:tid 3705621] (EAI 2)Name or service not known: [client 144.76.19.72:27852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:54.133427 2026] [ssl:error] [pid 3705621:tid 3705621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:54.191102 2026] [core:error] [pid 3654776:tid 3654776] [client 74.248.33.8:36083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:54.191142 2026] [core:error] [pid 3654776:tid 3654776] [client 74.248.33.8:36083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:54.192225 2026] [ssl:error] [pid 3699531:tid 3699531] (EAI 2)Name or service not known: [client 144.76.19.72:27862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:54.192250 2026] [ssl:error] [pid 3699531:tid 3699531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:54.913122 2026] [authz_core:error] [pid 3697706:tid 3697706] [client 169.58.39.192:57133] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 15:38:54.935904 2026] [authz_core:error] [pid 3692608:tid 3692608] [client 66.249.66.33:45097] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:38:54.938561 2026] [authz_core:error] [pid 3692608:tid 3692608] [client 66.249.66.33:45097] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:38:54.960569 2026] [core:error] [pid 3696223:tid 3696223] [client 74.248.33.8:46066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:54.960598 2026] [core:error] [pid 3696223:tid 3696223] [client 74.248.33.8:46066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:55.190922 2026] [core:error] [pid 3654776:tid 3654776] [client 20.104.16.169:34852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:55.190957 2026] [core:error] [pid 3654776:tid 3654776] [client 20.104.16.169:34852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:55.283214 2026] [core:error] [pid 3685615:tid 3685615] [client 74.248.33.8:49090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:55.283241 2026] [core:error] [pid 3685615:tid 3685615] [client 74.248.33.8:49090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:56.329321 2026] [access_compat:error] [pid 3696223:tid 3696223] [client 112.209.180.50:14843] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:38:56.393272 2026] [core:error] [pid 3705620:tid 3705620] [client 20.104.16.169:36202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:56.393299 2026] [core:error] [pid 3705620:tid 3705620] [client 20.104.16.169:36202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:56.455129 2026] [ssl:error] [pid 3701830:tid 3701830] (70014)End of file found: [client 216.73.216.199:13479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:56.744738 2026] [core:error] [pid 3705679:tid 3705679] [client 74.248.33.8:46937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:56.744766 2026] [core:error] [pid 3705679:tid 3705679] [client 74.248.33.8:46937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:57.278032 2026] [ssl:error] [pid 3701927:tid 3701927] (EAI 2)Name or service not known: [client 144.76.19.72:27864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:57.278093 2026] [ssl:error] [pid 3701927:tid 3701927] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:57.331669 2026] [ssl:error] [pid 3705679:tid 3705679] (EAI 2)Name or service not known: [client 144.76.19.72:27874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:38:57.331706 2026] [ssl:error] [pid 3705679:tid 3705679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:38:57.555826 2026] [core:error] [pid 3696153:tid 3696153] [client 74.248.33.8:64094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:57.555852 2026] [core:error] [pid 3696153:tid 3696153] [client 74.248.33.8:64094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:57.655737 2026] [ssl:error] [pid 3701089:tid 3701089] (70014)End of file found: [client 216.73.216.199:20891] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:38:57.722548 2026] [core:error] [pid 3705576:tid 3705576] [client 20.104.16.169:34821] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:57.722571 2026] [core:error] [pid 3705576:tid 3705576] [client 20.104.16.169:34821] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:57.923986 2026] [lsapi:warn] [pid 3689394:tid 3689394] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:38:57.933531 2026] [core:error] [pid 3696153:tid 3696153] [client 74.248.33.8:34015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:57.933548 2026] [core:error] [pid 3696153:tid 3696153] [client 74.248.33.8:34015] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:58.249210 2026] [core:error] [pid 3705576:tid 3705576] [client 20.104.16.169:36116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:58.249237 2026] [core:error] [pid 3705576:tid 3705576] [client 20.104.16.169:36116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:58.794561 2026] [core:error] [pid 3705621:tid 3705621] [client 20.104.16.169:36120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:58.794598 2026] [core:error] [pid 3705621:tid 3705621] [client 20.104.16.169:36120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:58.896992 2026] [core:error] [pid 3700140:tid 3700140] [client 74.248.33.8:62949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:58.897043 2026] [core:error] [pid 3700140:tid 3700140] [client 74.248.33.8:62949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:59.259022 2026] [core:error] [pid 3705622:tid 3705622] [client 20.104.16.169:34885] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:59.259048 2026] [core:error] [pid 3705622:tid 3705622] [client 20.104.16.169:34885] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:59.546715 2026] [core:error] [pid 3705676:tid 3705676] [client 74.248.33.8:17185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:59.546746 2026] [core:error] [pid 3705676:tid 3705676] [client 74.248.33.8:17185] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:38:59.762803 2026] [core:error] [pid 3706562:tid 3706562] (13)Permission denied: [client 216.73.216.199:41397] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory117/node0/compact
[Thu Jul 30 15:39:00.064228 2026] [ssl:error] [pid 3706562:tid 3706562] (70014)End of file found: [client 216.73.216.199:41397] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:00.180630 2026] [security2:error] [pid 3689394:tid 3689394] [client 74.7.241.5:43886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "gatkabfs.com"] [uri "/"] [unique_id "amtiBIoqVK2px4huxiNArgAAAA8"]
[Thu Jul 30 15:39:00.180796 2026] [access_compat:error] [pid 3689394:tid 3689394] [client 74.7.241.5:43886] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 15:39:00.390093 2026] [ssl:error] [pid 3701240:tid 3701240] (EAI 2)Name or service not known: [client 144.76.19.72:23218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:00.390133 2026] [ssl:error] [pid 3701240:tid 3701240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:00.429732 2026] [core:error] [pid 3700301:tid 3700301] [client 20.104.16.169:34881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:00.429764 2026] [core:error] [pid 3700301:tid 3700301] [client 20.104.16.169:34881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:00.445079 2026] [ssl:error] [pid 3700140:tid 3700140] (EAI 2)Name or service not known: [client 144.76.19.72:23232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:00.445126 2026] [ssl:error] [pid 3700140:tid 3700140] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:00.503107 2026] [core:error] [pid 3705676:tid 3705676] [client 74.248.33.8:48165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:00.503136 2026] [core:error] [pid 3705676:tid 3705676] [client 74.248.33.8:48165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:01.522862 2026] [rewrite:error] [pid 3689471:tid 3689471] [client 74.7.175.183:58356] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/robots.txt
[Thu Jul 30 15:39:01.523001 2026] [rewrite:error] [pid 3689471:tid 3689471] [client 74.7.175.183:58356] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:39:01.664507 2026] [core:error] [pid 3701240:tid 3701240] [client 20.104.16.169:36168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:01.664531 2026] [core:error] [pid 3701240:tid 3701240] [client 20.104.16.169:36168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:01.739614 2026] [security2:error] [pid 3701932:tid 3701932] [client 74.7.241.20:52990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.saturnstopwatches.co.uk"] [uri "/"] [unique_id "amtiBcMVGddaGX21r6DbLAAAAGs"]
[Thu Jul 30 15:39:01.742003 2026] [rewrite:error] [pid 3701932:tid 3701932] [client 74.7.241.20:52990] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:39:02.191613 2026] [core:error] [pid 3701932:tid 3701932] (13)Permission denied: [client 216.73.216.199:54816] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/skbuff_head_cache/trace
[Thu Jul 30 15:39:02.201230 2026] [security2:error] [pid 3700140:tid 3700140] [client 85.208.96.208:41214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9504.0.html"] [unique_id "amtiBiem-v8PLx2yXeCGBgAAAEM"]
[Thu Jul 30 15:39:02.677824 2026] [access_compat:error] [pid 3696223:tid 3696223] [client 136.158.25.236:45540] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:02.772649 2026] [authz_core:error] [pid 3705683:tid 3705683] [client 20.203.205.96:26297] AH01630: client denied by server configuration: /home/junglej/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:39:03.503390 2026] [ssl:error] [pid 3673221:tid 3673221] (EAI 2)Name or service not known: [client 144.76.19.72:23236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:03.503420 2026] [ssl:error] [pid 3673221:tid 3673221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:03.559436 2026] [ssl:error] [pid 3694811:tid 3694811] (EAI 2)Name or service not known: [client 144.76.19.72:23250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:03.559462 2026] [ssl:error] [pid 3694811:tid 3694811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:04.466122 2026] [core:error] [pid 3700301:tid 3700301] [client 74.248.33.8:49885] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:04.466152 2026] [core:error] [pid 3700301:tid 3700301] [client 74.248.33.8:49885] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:05.958638 2026] [ssl:error] [pid 3701089:tid 3701089] (70014)End of file found: [client 216.73.216.199:54312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:06.267235 2026] [security2:error] [pid 3705620:tid 3705620] [client 191.183.37.102:15739] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiCvXzZo10pGCZgklzxQAAAAg"]
[Thu Jul 30 15:39:06.267282 2026] [security2:error] [pid 3705620:tid 3705620] [client 191.183.37.102:15739] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiCvXzZo10pGCZgklzxQAAAAg"]
[Thu Jul 30 15:39:06.267520 2026] [security2:error] [pid 3705620:tid 3705620] [client 191.183.37.102:15739] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiCvXzZo10pGCZgklzxQAAAAg"]
[Thu Jul 30 15:39:06.556290 2026] [ssl:error] [pid 3694765:tid 3694765] (70014)End of file found: [client 216.73.216.199:14300] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:06.576327 2026] [access_compat:error] [pid 3700140:tid 3700140] [client 136.158.25.236:45924] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:06.615696 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:23258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:06.615726 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:06.668976 2026] [ssl:error] [pid 3699531:tid 3699531] (EAI 2)Name or service not known: [client 144.76.19.72:23270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:06.669020 2026] [ssl:error] [pid 3699531:tid 3699531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:06.852485 2026] [ssl:error] [pid 3699664:tid 3699664] (70014)End of file found: [client 216.73.216.199:13497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:07.216298 2026] [authz_core:error] [pid 3701832:tid 3701832] [client 66.249.66.35:36452] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:39:07.218953 2026] [authz_core:error] [pid 3701832:tid 3701832] [client 66.249.66.35:36452] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:39:08.257320 2026] [core:error] [pid 3689471:tid 3689471] [client 74.248.33.8:49811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:08.257346 2026] [core:error] [pid 3689471:tid 3689471] [client 74.248.33.8:49811] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:39:08.972479 2026] [security2:error] [pid 3699531:tid 3699531] [client 102.253.1.22:34110] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiDCA0FkZpq37vVi2fxgAAACU"]
[Thu Jul 30 15:39:08.972530 2026] [security2:error] [pid 3699531:tid 3699531] [client 102.253.1.22:34110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiDCA0FkZpq37vVi2fxgAAACU"]
[Thu Jul 30 15:39:08.972777 2026] [security2:error] [pid 3699531:tid 3699531] [client 102.253.1.22:34110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiDCA0FkZpq37vVi2fxgAAACU"]
[Thu Jul 30 15:39:09.722523 2026] [ssl:error] [pid 3705576:tid 3705576] (EAI 2)Name or service not known: [client 144.76.19.72:39316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:09.722560 2026] [ssl:error] [pid 3705576:tid 3705576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:09.775799 2026] [ssl:error] [pid 3701240:tid 3701240] (EAI 2)Name or service not known: [client 144.76.19.72:39322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:09.775825 2026] [ssl:error] [pid 3701240:tid 3701240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:12.580309 2026] [ssl:error] [pid 3696223:tid 3696223] (70014)End of file found: [client 216.73.216.199:3551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:12.829379 2026] [ssl:error] [pid 3694657:tid 3694657] (EAI 2)Name or service not known: [client 144.76.19.72:39334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:12.829415 2026] [ssl:error] [pid 3694657:tid 3694657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:12.882779 2026] [ssl:error] [pid 3705620:tid 3705620] (EAI 2)Name or service not known: [client 144.76.19.72:39338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:12.882814 2026] [ssl:error] [pid 3705620:tid 3705620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:12.934756 2026] [access_compat:error] [pid 3699531:tid 3699531] [client 112.209.180.50:15731] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:13.067519 2026] [ssl:error] [pid 3705676:tid 3705676] (70014)End of file found: [client 216.73.216.199:61638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:13.628653 2026] [security2:error] [pid 3699664:tid 3699664] [client 223.29.215.19:47568] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiEfeVWVyA6KgBGAbxuAAAADY"]
[Thu Jul 30 15:39:13.628699 2026] [security2:error] [pid 3699664:tid 3699664] [client 223.29.215.19:47568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiEfeVWVyA6KgBGAbxuAAAADY"]
[Thu Jul 30 15:39:13.628935 2026] [security2:error] [pid 3699664:tid 3699664] [client 223.29.215.19:47568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiEfeVWVyA6KgBGAbxuAAAADY"]
[Thu Jul 30 15:39:13.767651 2026] [security2:error] [pid 3701927:tid 3701927] [client 74.7.242.57:43522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.eraten.spamp.co.uk"] [uri "/"] [unique_id "amtiEefxv5C38_X_FRKYNgAAAGY"]
[Thu Jul 30 15:39:14.987163 2026] [core:error] [pid 3673221:tid 3673221] (13)Permission denied: [client 216.73.216.199:21584] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory198/node0/compact
[Thu Jul 30 15:39:15.123220 2026] [lsapi:warn] [pid 3701927:tid 3701927] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:39:15.891178 2026] [ssl:error] [pid 3673221:tid 3673221] (70014)End of file found: [client 216.73.216.199:21584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:15.938486 2026] [ssl:error] [pid 3700301:tid 3700301] (EAI 2)Name or service not known: [client 144.76.19.72:39342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:15.938512 2026] [ssl:error] [pid 3700301:tid 3700301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:15.993454 2026] [ssl:error] [pid 3689394:tid 3689394] (EAI 2)Name or service not known: [client 144.76.19.72:39346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:15.993476 2026] [ssl:error] [pid 3689394:tid 3689394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:17.045264 2026] [access_compat:error] [pid 3689394:tid 3689394] [client 136.158.25.236:46920] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:17.993465 2026] [ssl:error] [pid 3696223:tid 3696223] (70014)End of file found: [client 216.73.216.199:18585] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:19.054099 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:39350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:19.054128 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:19.109950 2026] [ssl:error] [pid 3705620:tid 3705620] (EAI 2)Name or service not known: [client 144.76.19.72:39356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:19.109984 2026] [ssl:error] [pid 3705620:tid 3705620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:21.611959 2026] [ssl:error] [pid 3705676:tid 3705676] (70014)End of file found: [client 216.73.216.199:51820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:22.163625 2026] [ssl:error] [pid 3694813:tid 3694813] (EAI 2)Name or service not known: [client 144.76.19.72:59792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:22.163655 2026] [ssl:error] [pid 3694813:tid 3694813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:22.223390 2026] [ssl:error] [pid 3709166:tid 3709166] (EAI 2)Name or service not known: [client 144.76.19.72:59802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:22.223427 2026] [ssl:error] [pid 3709166:tid 3709166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:23.424968 2026] [core:error] [pid 3705679:tid 3705679] (13)Permission denied: [client 216.73.216.199:31689] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory13/node0/compact
[Thu Jul 30 15:39:25.278033 2026] [ssl:error] [pid 3709091:tid 3709091] (EAI 2)Name or service not known: [client 144.76.19.72:59810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:25.278064 2026] [ssl:error] [pid 3709091:tid 3709091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:25.334167 2026] [ssl:error] [pid 3705506:tid 3705506] (EAI 2)Name or service not known: [client 144.76.19.72:59824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:25.334201 2026] [ssl:error] [pid 3705506:tid 3705506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:25.537008 2026] [ssl:error] [pid 3705679:tid 3705679] (70014)End of file found: [client 216.73.216.199:31689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:25.837434 2026] [ssl:error] [pid 3709167:tid 3709167] (70014)End of file found: [client 216.73.216.199:54766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:26.664350 2026] [security2:error] [pid 3709091:tid 3709091] [client 85.208.96.210:41072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/christopher-pallotta-obituary"] [unique_id "amtiHnFgEZY94PlfH6K7tQAAAAc"]
[Thu Jul 30 15:39:27.349279 2026] [core:error] [pid 3699671:tid 3699671] (13)Permission denied: [client 216.73.216.199:59450] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu3/driver/uevent
[Thu Jul 30 15:39:27.760666 2026] [access_compat:error] [pid 3689471:tid 3689471] [client 112.209.180.50:16445] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:27.952397 2026] [ssl:error] [pid 3699671:tid 3699671] (70014)End of file found: [client 216.73.216.199:59450] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:28.426888 2026] [ssl:error] [pid 3699531:tid 3699531] (EAI 2)Name or service not known: [client 144.76.19.72:59834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:28.426914 2026] [ssl:error] [pid 3699531:tid 3699531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:28.484693 2026] [ssl:error] [pid 3701243:tid 3701243] (EAI 2)Name or service not known: [client 144.76.19.72:59838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:28.484723 2026] [ssl:error] [pid 3701243:tid 3701243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:29.490214 2026] [authz_core:error] [pid 3698691:tid 3698691] [client 66.249.66.33:54744] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:39:29.492875 2026] [authz_core:error] [pid 3698691:tid 3698691] [client 66.249.66.33:54744] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:39:29.632596 2026] [security2:error] [pid 3697706:tid 3697706] [client 43.157.158.178:55628] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.com"] [uri "/"] [unique_id "amtiIUCYunb6LQf5-lmaQwAAABk"]
[Thu Jul 30 15:39:29.881059 2026] [ssl:error] [pid 3687999:tid 3687999] (70014)End of file found: [client 216.73.216.199:55474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:30.191438 2026] [ssl:error] [pid 3701832:tid 3701832] (70014)End of file found: [client 216.73.216.199:55423] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:30.606889 2026] [ssl:error] [pid 3701932:tid 3701932] (70014)End of file found: [client 216.73.216.199:17199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:30.815235 2026] [security2:error] [pid 3696223:tid 3696223] [client 43.157.158.178:49442] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtiIqMWerp5isu3xDfG9QAAAA0"], referer: http://www.spampmusic.com
[Thu Jul 30 15:39:31.614742 2026] [ssl:error] [pid 3694811:tid 3694811] (EAI 2)Name or service not known: [client 144.76.19.72:35680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:31.614782 2026] [ssl:error] [pid 3694811:tid 3694811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:31.667663 2026] [ssl:error] [pid 3689394:tid 3689394] (EAI 2)Name or service not known: [client 144.76.19.72:35690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:31.667689 2026] [ssl:error] [pid 3689394:tid 3689394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:33.383982 2026] [lsapi:warn] [pid 3699671:tid 3699671] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:39:34.212217 2026] [access_compat:error] [pid 3689471:tid 3689471] [client 112.209.180.50:16694] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:34.723495 2026] [ssl:error] [pid 3705622:tid 3705622] (EAI 2)Name or service not known: [client 144.76.19.72:35698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:34.723527 2026] [ssl:error] [pid 3705622:tid 3705622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:34.778036 2026] [ssl:error] [pid 3705620:tid 3705620] (EAI 2)Name or service not known: [client 144.76.19.72:35702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:34.778078 2026] [ssl:error] [pid 3705620:tid 3705620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:35.484396 2026] [security2:error] [pid 3709168:tid 3709168] [client 185.191.171.14:26402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,215.0/prev_next,prev.html"] [unique_id "amtiJ4ZXUJxA0cb6rrTm8QAAAB4"]
[Thu Jul 30 15:39:37.834697 2026] [ssl:error] [pid 3673221:tid 3673221] (EAI 2)Name or service not known: [client 144.76.19.72:35708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:37.834722 2026] [ssl:error] [pid 3673221:tid 3673221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:37.890598 2026] [ssl:error] [pid 3696223:tid 3696223] (EAI 2)Name or service not known: [client 144.76.19.72:35712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:37.890635 2026] [ssl:error] [pid 3696223:tid 3696223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:38.049016 2026] [access_compat:error] [pid 3701243:tid 3701243] [client 136.158.25.236:48579] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:38.245277 2026] [ssl:error] [pid 3701832:tid 3701832] (70014)End of file found: [client 216.73.216.199:32272] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:38.323117 2026] [authz_core:error] [pid 3706562:tid 3706562] [client 66.249.66.33:58390] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:39:38.325780 2026] [authz_core:error] [pid 3706562:tid 3706562] [client 66.249.66.33:58390] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:39:38.501509 2026] [access_compat:error] [pid 3673221:tid 3673221] [client 45.158.164.139:36592] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:39:38.539034 2026] [ssl:error] [pid 3709091:tid 3709091] (70014)End of file found: [client 216.73.216.199:36850] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:39.146308 2026] [ssl:error] [pid 3701239:tid 3701239] (70014)End of file found: [client 216.73.216.199:53628] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:40.946708 2026] [ssl:error] [pid 3705621:tid 3705621] (EAI 2)Name or service not known: [client 144.76.19.72:39934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:40.946743 2026] [ssl:error] [pid 3705621:tid 3705621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:40.999779 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:39938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:40.999812 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:43.731919 2026] [security2:error] [pid 3692608:tid 3692608] [client 114.119.144.31:48531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/request_format~html/cat_ids~30"] [unique_id "amtiL1TBhqQvZfl7j_pUYgAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/request_format~html/cat_ids~30
[Thu Jul 30 15:39:44.053727 2026] [ssl:error] [pid 3701243:tid 3701243] (EAI 2)Name or service not known: [client 144.76.19.72:39954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:44.053755 2026] [ssl:error] [pid 3701243:tid 3701243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:44.108019 2026] [ssl:error] [pid 3706562:tid 3706562] (EAI 2)Name or service not known: [client 144.76.19.72:39970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:44.108056 2026] [ssl:error] [pid 3706562:tid 3706562] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:44.162606 2026] [security2:error] [pid 3709166:tid 3709166] [client 213.160.75.126:34754] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtiML5XmUUr-POOHNz4sgAAABc"]
[Thu Jul 30 15:39:44.379189 2026] [ssl:error] [pid 3701830:tid 3701830] (70014)End of file found: [client 216.73.216.199:52000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:45.056350 2026] [ssl:error] [pid 3709091:tid 3709091] (70014)End of file found: [client 216.73.216.199:20232] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:45.281510 2026] [ssl:error] [pid 3709387:tid 3709387] (70014)End of file found: [client 216.73.216.199:17076] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:45.289205 2026] [security2:error] [pid 3701925:tid 3701925] [client 114.119.144.31:48539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/request_format~html/cat_ids~30"] [unique_id "amtiMWAhRdUgmyOTaZbuHgAAAGU"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/request_format~html/cat_ids~30
[Thu Jul 30 15:39:47.165054 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:39976] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:47.165091 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:47.228936 2026] [ssl:error] [pid 3705620:tid 3705620] (EAI 2)Name or service not known: [client 144.76.19.72:39978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:47.228963 2026] [ssl:error] [pid 3705620:tid 3705620] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:48.563199 2026] [access_compat:error] [pid 3701925:tid 3701925] [client 136.158.25.236:49416] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:50.131919 2026] [ssl:error] [pid 3705620:tid 3705620] (70014)End of file found: [client 216.73.216.199:62918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:50.286450 2026] [ssl:error] [pid 3708917:tid 3708917] (EAI 2)Name or service not known: [client 144.76.19.72:50228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:50.286480 2026] [ssl:error] [pid 3708917:tid 3708917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:50.344024 2026] [ssl:error] [pid 3709091:tid 3709091] (EAI 2)Name or service not known: [client 144.76.19.72:50230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:50.344056 2026] [ssl:error] [pid 3709091:tid 3709091] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:51.292990 2026] [security2:error] [pid 3700475:tid 3700475] [client 34.88.64.134:46936] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtiN58Z7BQgXygjfHpNUAAAAE4"]
[Thu Jul 30 15:39:52.509324 2026] [lsapi:warn] [pid 3701832:tid 3701832] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:39:53.398612 2026] [ssl:error] [pid 3700475:tid 3700475] (EAI 2)Name or service not known: [client 144.76.19.72:50244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:53.398641 2026] [ssl:error] [pid 3700475:tid 3700475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:53.451580 2026] [ssl:error] [pid 3709425:tid 3709425] (EAI 2)Name or service not known: [client 144.76.19.72:50252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:53.451618 2026] [ssl:error] [pid 3709425:tid 3709425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:54.855956 2026] [lsapi:warn] [pid 3706562:tid 3706562] [client 45.32.128.80:45122] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 15:39:54.855998 2026] [lsapi:warn] [pid 3706562:tid 3706562] [client 45.32.128.80:45122] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 15:39:54.892567 2026] [access_compat:error] [pid 3709121:tid 3709121] [client 136.158.25.236:50011] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:54.967594 2026] [ssl:error] [pid 3701243:tid 3701243] (70014)End of file found: [client 216.73.216.199:7674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:55.851519 2026] [access_compat:error] [pid 3687959:tid 3687959] [client 45.158.164.139:47630] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:39:56.479117 2026] [security2:error] [pid 3699531:tid 3699531] [client 91.207.181.153:25844] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /\\x5c\\x22../iplist.html\\x5c\\x22"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "magic-cookie.co.uk"] [uri "/\\\\\\"../iplist.html\\\\\\""] [unique_id "amtiPCA0FkZpq37vVi2f2QAAACU"]
[Thu Jul 30 15:39:56.479164 2026] [security2:error] [pid 3699531:tid 3699531] [client 91.207.181.153:25844] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /../iplist.html"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "magic-cookie.co.uk"] [uri "/\\\\\\"../iplist.html\\\\\\""] [unique_id "amtiPCA0FkZpq37vVi2f2QAAACU"]
[Thu Jul 30 15:39:56.479351 2026] [security2:error] [pid 3699531:tid 3699531] [client 91.207.181.153:25844] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "magic-cookie.co.uk"] [uri "/\\\\\\"../iplist.html\\\\\\""] [unique_id "amtiPCA0FkZpq37vVi2f2QAAACU"]
[Thu Jul 30 15:39:56.479706 2026] [security2:error] [pid 3699531:tid 3699531] [client 91.207.181.153:25844] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=10,RCE=0,PHPI=0,HTTP=0,SESS=0): Path Traversal Attack (/../)"] [tag "event-correlation"] [hostname "magic-cookie.co.uk"] [uri "/403.shtml"] [unique_id "amtiPCA0FkZpq37vVi2f2QAAACU"]
[Thu Jul 30 15:39:56.506898 2026] [ssl:error] [pid 3711695:tid 3711695] (EAI 2)Name or service not known: [client 144.76.19.72:50258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:56.506938 2026] [ssl:error] [pid 3711695:tid 3711695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:56.558804 2026] [ssl:error] [pid 3701089:tid 3701089] (EAI 2)Name or service not known: [client 144.76.19.72:50262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:56.558834 2026] [ssl:error] [pid 3701089:tid 3701089] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:58.282287 2026] [ssl:error] [pid 3709091:tid 3709091] (70014)End of file found: [client 216.73.216.199:22498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:58.579208 2026] [ssl:error] [pid 3709387:tid 3709387] (70014)End of file found: [client 216.73.216.199:27227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:39:59.229614 2026] [access_compat:error] [pid 3687529:tid 3687529] [client 112.209.180.50:13800] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:39:59.614289 2026] [ssl:error] [pid 3709169:tid 3709169] (EAI 2)Name or service not known: [client 144.76.19.72:39144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:59.614326 2026] [ssl:error] [pid 3709169:tid 3709169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:39:59.668750 2026] [ssl:error] [pid 3694813:tid 3694813] (EAI 2)Name or service not known: [client 144.76.19.72:39154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:39:59.668778 2026] [ssl:error] [pid 3694813:tid 3694813] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:02.185223 2026] [core:error] [pid 3694657:tid 3694657] (13)Permission denied: [client 216.73.216.199:7178] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/red_zone
[Thu Jul 30 15:40:02.743732 2026] [ssl:error] [pid 3705678:tid 3705678] (EAI 2)Name or service not known: [client 144.76.19.72:39160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:02.743778 2026] [ssl:error] [pid 3705678:tid 3705678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:02.798505 2026] [ssl:error] [pid 3701925:tid 3701925] (EAI 2)Name or service not known: [client 144.76.19.72:39172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:02.798542 2026] [ssl:error] [pid 3701925:tid 3701925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:02.955554 2026] [authz_core:error] [pid 3701239:tid 3701239] [client 66.249.66.33:46998] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:40:02.958220 2026] [authz_core:error] [pid 3701239:tid 3701239] [client 66.249.66.33:46998] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:40:03.387035 2026] [ssl:error] [pid 3694657:tid 3694657] (70014)End of file found: [client 216.73.216.199:7178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:03.692287 2026] [ssl:error] [pid 3705680:tid 3705680] (70014)End of file found: [client 216.73.216.199:6838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:04.901622 2026] [ssl:error] [pid 3689394:tid 3689394] (70014)End of file found: [client 216.73.216.199:63758] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:05.184112 2026] [security2:error] [pid 3689471:tid 3689471] [client 157.100.142.90:41171] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiRV2gNNpmfjosRgpPFQAAACs"]
[Thu Jul 30 15:40:05.184158 2026] [security2:error] [pid 3689471:tid 3689471] [client 157.100.142.90:41171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiRV2gNNpmfjosRgpPFQAAACs"]
[Thu Jul 30 15:40:05.184423 2026] [security2:error] [pid 3689471:tid 3689471] [client 157.100.142.90:41171] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiRV2gNNpmfjosRgpPFQAAACs"]
[Thu Jul 30 15:40:05.852447 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:39182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:05.852474 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:05.908610 2026] [ssl:error] [pid 3705678:tid 3705678] (EAI 2)Name or service not known: [client 144.76.19.72:39196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:05.908639 2026] [ssl:error] [pid 3705678:tid 3705678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:06.191472 2026] [access_compat:error] [pid 3709387:tid 3709387] [client 112.209.180.50:14097] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:07.232249 2026] [security2:error] [pid 3699534:tid 3699534] [client 103.15.247.51:54470] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiR0Qeb1mDaSf17LJlhQAAACk"]
[Thu Jul 30 15:40:07.232297 2026] [security2:error] [pid 3699534:tid 3699534] [client 103.15.247.51:54470] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiR0Qeb1mDaSf17LJlhQAAACk"]
[Thu Jul 30 15:40:07.232551 2026] [security2:error] [pid 3699534:tid 3699534] [client 103.15.247.51:54470] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiR0Qeb1mDaSf17LJlhQAAACk"]
[Thu Jul 30 15:40:08.592381 2026] [lsapi:warn] [pid 3712035:tid 3712035] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:40:09.444333 2026] [core:error] [pid 3699534:tid 3699534] (13)Permission denied: [client 216.73.216.199:8600] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_buf/total_objects
[Thu Jul 30 15:40:09.561612 2026] [access_compat:error] [pid 3705683:tid 3705683] [client 136.158.25.236:51159] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:10.063658 2026] [ssl:error] [pid 3694811:tid 3694811] (EAI 2)Name or service not known: [client 144.76.19.72:23990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:10.063681 2026] [ssl:error] [pid 3694811:tid 3694811] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:10.119611 2026] [ssl:error] [pid 3689394:tid 3689394] (EAI 2)Name or service not known: [client 144.76.19.72:23994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:10.119643 2026] [ssl:error] [pid 3689394:tid 3689394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:10.426475 2026] [security2:error] [pid 3694813:tid 3694813] [client 114.119.146.18:27163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amtiSrwrHh22hTX3BJAuBAAAADo"], referer: https://magic-cookie.co.uk/robots.txt
[Thu Jul 30 15:40:11.922060 2026] [security2:error] [pid 3694813:tid 3694813] [client 2.134.27.193:50421] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiS7wrHh22hTX3BJAuCAAAADo"]
[Thu Jul 30 15:40:11.922121 2026] [security2:error] [pid 3694813:tid 3694813] [client 2.134.27.193:50421] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiS7wrHh22hTX3BJAuCAAAADo"]
[Thu Jul 30 15:40:11.922353 2026] [security2:error] [pid 3694813:tid 3694813] [client 2.134.27.193:50421] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiS7wrHh22hTX3BJAuCAAAADo"]
[Thu Jul 30 15:40:13.178478 2026] [ssl:error] [pid 3711695:tid 3711695] (EAI 2)Name or service not known: [client 144.76.19.72:23998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:13.178509 2026] [ssl:error] [pid 3711695:tid 3711695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:13.229568 2026] [ssl:error] [pid 3708917:tid 3708917] (EAI 2)Name or service not known: [client 144.76.19.72:24008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:13.229606 2026] [ssl:error] [pid 3708917:tid 3708917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:13.406773 2026] [ssl:error] [pid 3699534:tid 3699534] (70014)End of file found: [client 216.73.216.199:8600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:13.712155 2026] [core:error] [pid 3687999:tid 3687999] (13)Permission denied: [client 216.73.216.199:57253] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kvm_async_pf/total_objects
[Thu Jul 30 15:40:14.313529 2026] [core:error] [pid 3687999:tid 3687999] (13)Permission denied: [client 216.73.216.199:57253] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/lsm_inode_cache/slabs_cpu_partial
[Thu Jul 30 15:40:15.417554 2026] [ssl:error] [pid 3705683:tid 3705683] (70014)End of file found: [client 216.73.216.199:36201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:16.285818 2026] [ssl:error] [pid 3700475:tid 3700475] (EAI 2)Name or service not known: [client 144.76.19.72:24016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:16.285848 2026] [ssl:error] [pid 3700475:tid 3700475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:16.340323 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:24018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:16.340356 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:18.168358 2026] [ssl:error] [pid 3687959:tid 3687959] (70014)End of file found: [client 216.73.216.199:3815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:18.571729 2026] [ssl:error] [pid 3699531:tid 3699531] (70014)End of file found: [client 216.73.216.199:52821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:18.689804 2026] [security2:error] [pid 3689471:tid 3689471] [client 170.106.35.137:40904] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.josephashmore.org"] [uri "/"] [unique_id "amtiUl2gNNpmfjosRgpPFwAAACs"]
[Thu Jul 30 15:40:19.177596 2026] [ssl:error] [pid 3700301:tid 3700301] (70014)End of file found: [client 216.73.216.199:61588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:19.392134 2026] [ssl:error] [pid 3705576:tid 3705576] (EAI 2)Name or service not known: [client 144.76.19.72:24032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:19.392159 2026] [ssl:error] [pid 3705576:tid 3705576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:19.444721 2026] [ssl:error] [pid 3696223:tid 3696223] (EAI 2)Name or service not known: [client 144.76.19.72:24042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:19.444760 2026] [ssl:error] [pid 3696223:tid 3696223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:20.059194 2026] [access_compat:error] [pid 3699534:tid 3699534] [client 136.158.25.236:52050] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:21.953778 2026] [authz_core:error] [pid 3705680:tid 3705680] [client 66.249.66.33:60798] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:40:21.956437 2026] [authz_core:error] [pid 3705680:tid 3705680] [client 66.249.66.33:60798] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:40:22.502874 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:54854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:22.502909 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:22.556162 2026] [ssl:error] [pid 3713506:tid 3713506] (EAI 2)Name or service not known: [client 144.76.19.72:54860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:22.556201 2026] [ssl:error] [pid 3713506:tid 3713506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:25.522751 2026] [ssl:error] [pid 3705620:tid 3705620] (70014)End of file found: [client 216.73.216.199:51070] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:25.611434 2026] [ssl:error] [pid 3701240:tid 3701240] (EAI 2)Name or service not known: [client 144.76.19.72:54874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:25.611466 2026] [ssl:error] [pid 3701240:tid 3701240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:25.663892 2026] [ssl:error] [pid 3705679:tid 3705679] (EAI 2)Name or service not known: [client 144.76.19.72:54884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:25.663921 2026] [ssl:error] [pid 3705679:tid 3705679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:25.786377 2026] [security2:error] [pid 3697706:tid 3697706] [client 43.134.100.175:33232] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.acthoroughbreds.com"] [uri "/"] [unique_id "amtiWUCYunb6LQf5-lmagAAAABk"]
[Thu Jul 30 15:40:25.786887 2026] [authz_core:error] [pid 3697706:tid 3697706] [client 43.134.100.175:33232] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 15:40:25.786918 2026] [authz_core:error] [pid 3697706:tid 3697706] [client 43.134.100.175:33232] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 15:40:26.674585 2026] [access_compat:error] [pid 3712971:tid 3712971] [client 112.209.180.50:14950] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:27.726022 2026] [security2:error] [pid 3685615:tid 3685615] [client 85.208.96.210:58210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/united-states-penitentiary,-terre-haute-death-row"] [unique_id "amtiW2u2JG3_VdYelXV2iAAAAAY"]
[Thu Jul 30 15:40:28.233464 2026] [core:error] [pid 3701240:tid 3701240] [client 216.73.216.199:55224] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/python3.6/xmlrpc/%s)
[Thu Jul 30 15:40:28.718338 2026] [ssl:error] [pid 3705680:tid 3705680] (EAI 2)Name or service not known: [client 144.76.19.72:54892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:28.718386 2026] [ssl:error] [pid 3705680:tid 3705680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:28.771529 2026] [ssl:error] [pid 3711695:tid 3711695] (EAI 2)Name or service not known: [client 144.76.19.72:54904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:28.771567 2026] [ssl:error] [pid 3711695:tid 3711695] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:29.108488 2026] [security2:error] [pid 3709121:tid 3709121] [client 43.157.22.57:34252] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-atrox-killers.net"] [uri "/"] [unique_id "amtiXRvQJ0Km_ggnPbXBlQAAAA4"]
[Thu Jul 30 15:40:29.205699 2026] [authz_core:error] [pid 3712896:tid 3712896] [client 66.249.66.33:44999] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:40:29.208351 2026] [authz_core:error] [pid 3712896:tid 3712896] [client 66.249.66.33:44999] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:40:29.742968 2026] [security2:error] [pid 3701241:tid 3701241] [client 52.238.199.152:49061] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mjs-services.com"] [uri "/wp-config.php"] [unique_id "amtiXRB9T4y2N3ihMMDLzQAAAFs"]
[Thu Jul 30 15:40:29.743138 2026] [security2:error] [pid 3701241:tid 3701241] [client 52.238.199.152:49061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mjs-services.com"] [uri "/wp-config.php"] [unique_id "amtiXRB9T4y2N3ihMMDLzQAAAFs"]
[Thu Jul 30 15:40:30.127944 2026] [security2:error] [pid 3701241:tid 3701241] [client 52.238.199.152:49061] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "mjs-services.com"] [uri "/index.php"] [unique_id "amtiXRB9T4y2N3ihMMDLzQAAAFs"]
[Thu Jul 30 15:40:30.765606 2026] [access_compat:error] [pid 3705680:tid 3705680] [client 112.209.180.50:15162] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:31.825328 2026] [ssl:error] [pid 3709166:tid 3709166] (EAI 2)Name or service not known: [client 144.76.19.72:29892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:31.825356 2026] [ssl:error] [pid 3709166:tid 3709166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:31.878042 2026] [ssl:error] [pid 3709426:tid 3709426] (EAI 2)Name or service not known: [client 144.76.19.72:29896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:31.878081 2026] [ssl:error] [pid 3709426:tid 3709426] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:32.452733 2026] [ssl:error] [pid 3705683:tid 3705683] (70014)End of file found: [client 216.73.216.199:63852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:33.963652 2026] [ssl:error] [pid 3696223:tid 3696223] (70014)End of file found: [client 216.73.216.199:8219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:34.575717 2026] [lsapi:warn] [pid 3692608:tid 3692608] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:40:34.958175 2026] [ssl:error] [pid 3708917:tid 3708917] (EAI 2)Name or service not known: [client 144.76.19.72:29910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:34.958213 2026] [ssl:error] [pid 3708917:tid 3708917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:35.011248 2026] [ssl:error] [pid 3709169:tid 3709169] (EAI 2)Name or service not known: [client 144.76.19.72:29916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:35.011270 2026] [ssl:error] [pid 3709169:tid 3709169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:36.369952 2026] [ssl:error] [pid 3698691:tid 3698691] (70014)End of file found: [client 216.73.216.199:59077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:37.231424 2026] [access_compat:error] [pid 3714087:tid 3714087] [client 112.209.180.50:15530] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:37.875768 2026] [ssl:error] [pid 3714090:tid 3714090] (70014)End of file found: [client 216.73.216.199:17719] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:38.069606 2026] [ssl:error] [pid 3701636:tid 3701636] (EAI 2)Name or service not known: [client 144.76.19.72:29920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:38.069638 2026] [ssl:error] [pid 3701636:tid 3701636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:38.124636 2026] [ssl:error] [pid 3701832:tid 3701832] (EAI 2)Name or service not known: [client 144.76.19.72:29924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:38.124664 2026] [ssl:error] [pid 3701832:tid 3701832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:38.281888 2026] [access_compat:error] [pid 3701243:tid 3701243] [client 192.175.111.251:59378] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:40:40.602754 2026] [ssl:error] [pid 3713506:tid 3713506] (70014)End of file found: [client 216.73.216.199:17418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:41.047616 2026] [access_compat:error] [pid 3705506:tid 3705506] [client 136.158.25.236:54037] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:41.182716 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:58664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:41.182742 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:41.237295 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:58676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:41.237324 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:41.485492 2026] [access_compat:error] [pid 3701925:tid 3701925] [client 45.158.164.139:55752] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:40:42.340225 2026] [security2:error] [pid 3698691:tid 3698691] [client 185.191.171.4:12766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3386.0/prev_next,prev.html"] [unique_id "amtiaky3AOthSnqZosTO3gAAABY"]
[Thu Jul 30 15:40:42.386560 2026] [authz_core:error] [pid 3689471:tid 3689471] [client 66.249.66.33:65281] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:40:42.389248 2026] [authz_core:error] [pid 3689471:tid 3689471] [client 66.249.66.33:65281] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:40:44.290643 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:58680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:44.290679 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:44.348166 2026] [ssl:error] [pid 3699534:tid 3699534] (EAI 2)Name or service not known: [client 144.76.19.72:58684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:44.348196 2026] [ssl:error] [pid 3699534:tid 3699534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:47.402528 2026] [ssl:error] [pid 3699534:tid 3699534] (EAI 2)Name or service not known: [client 144.76.19.72:58688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:47.402569 2026] [ssl:error] [pid 3699534:tid 3699534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:47.437097 2026] [ssl:error] [pid 3696223:tid 3696223] (70014)End of file found: [client 216.73.216.199:12699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:47.457486 2026] [ssl:error] [pid 3705576:tid 3705576] (EAI 2)Name or service not known: [client 144.76.19.72:58690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:47.457509 2026] [ssl:error] [pid 3705576:tid 3705576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:48.268116 2026] [security2:error] [pid 3711695:tid 3711695] [client 43.154.140.188:44980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amticPJtG9dbcKnow61ZiAAAAAw"]
[Thu Jul 30 15:40:49.998218 2026] [lsapi:warn] [pid 3709169:tid 3709169] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:40:50.115180 2026] [security2:error] [pid 3699534:tid 3699534] [client 43.154.140.188:58998] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtickQeb1mDaSf17LJlrAAAACk"], referer: http://staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 15:40:50.509967 2026] [ssl:error] [pid 3701832:tid 3701832] (EAI 2)Name or service not known: [client 144.76.19.72:33970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:50.509994 2026] [ssl:error] [pid 3701832:tid 3701832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:50.596251 2026] [ssl:error] [pid 3701636:tid 3701636] (EAI 2)Name or service not known: [client 144.76.19.72:33982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:50.596275 2026] [ssl:error] [pid 3701636:tid 3701636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:51.750171 2026] [access_compat:error] [pid 3696831:tid 3696831] [client 136.158.25.236:55114] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:51.967151 2026] [core:error] [pid 3709121:tid 3709121] (13)Permission denied: [client 216.73.216.199:16415] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory127/subsystem/uevent
[Thu Jul 30 15:40:52.867988 2026] [security2:error] [pid 3692608:tid 3692608] [client 216.73.216.199:7589] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amtidFTBhqQvZfl7j_pUxgAAABE"]
[Thu Jul 30 15:40:52.868219 2026] [security2:error] [pid 3692608:tid 3692608] [client 216.73.216.199:7589] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amtidFTBhqQvZfl7j_pUxgAAABE"]
[Thu Jul 30 15:40:52.868423 2026] [security2:error] [pid 3692608:tid 3692608] [client 216.73.216.199:7589] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/mysql/mysql_sys_schema.sql"] [unique_id "amtidFTBhqQvZfl7j_pUxgAAABE"]
[Thu Jul 30 15:40:53.474135 2026] [core:error] [pid 3692608:tid 3692608] (13)Permission denied: [client 216.73.216.199:7589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/md_mod/uevent
[Thu Jul 30 15:40:53.650354 2026] [security2:error] [pid 3685615:tid 3685615] [client 74.7.227.133:48042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amtidWu2JG3_VdYelXV2kgAAAAY"]
[Thu Jul 30 15:40:53.650644 2026] [ssl:error] [pid 3701240:tid 3701240] (EAI 2)Name or service not known: [client 144.76.19.72:33986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:53.650667 2026] [ssl:error] [pid 3701240:tid 3701240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:53.707011 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:34002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:53.707040 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:53.775880 2026] [core:error] [pid 3692608:tid 3692608] (13)Permission denied: [client 216.73.216.199:7589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory126/subsystem/uevent
[Thu Jul 30 15:40:54.378135 2026] [core:error] [pid 3692608:tid 3692608] (13)Permission denied: [client 216.73.216.199:7589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory225/subsystem/uevent
[Thu Jul 30 15:40:54.981307 2026] [core:error] [pid 3692608:tid 3692608] (13)Permission denied: [client 216.73.216.199:7589] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory171/subsystem/uevent
[Thu Jul 30 15:40:56.148687 2026] [security2:error] [pid 3711695:tid 3711695] [client 43.165.4.2:44068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtiePJtG9dbcKnow61ZjgAAAAw"]
[Thu Jul 30 15:40:56.636513 2026] [security2:error] [pid 3715083:tid 3715083] [client 43.165.4.2:44700] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtieBh1G3KsNWOajzwtFAAAAAE"], referer: http://www.rogersbarbershopltd.co.uk
[Thu Jul 30 15:40:56.764605 2026] [ssl:error] [pid 3687999:tid 3687999] (EAI 2)Name or service not known: [client 144.76.19.72:34014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:56.764639 2026] [ssl:error] [pid 3687999:tid 3687999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:56.817933 2026] [ssl:error] [pid 3678921:tid 3678921] (EAI 2)Name or service not known: [client 144.76.19.72:34016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:56.817979 2026] [ssl:error] [pid 3678921:tid 3678921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:57.091399 2026] [ssl:error] [pid 3709121:tid 3709121] (70014)End of file found: [client 216.73.216.199:16415] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:57.396779 2026] [ssl:error] [pid 3692608:tid 3692608] (70014)End of file found: [client 216.73.216.199:7589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:57.919539 2026] [ssl:error] [pid 3701243:tid 3701243] (70014)End of file found: [client 216.73.216.199:1180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:40:57.956538 2026] [access_compat:error] [pid 3687959:tid 3687959] [client 136.158.25.236:55797] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:40:58.101194 2026] [security2:error] [pid 3705680:tid 3705680] [client 110.249.201.47:51690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/faculty-jurisdiction-rules-2015-amended-up-to-2024.pdf"] [unique_id "amtiemYhi-2MILKyZzL-OwAAABM"]
[Thu Jul 30 15:40:59.941976 2026] [ssl:error] [pid 3699531:tid 3699531] (EAI 2)Name or service not known: [client 144.76.19.72:64098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:59.942008 2026] [ssl:error] [pid 3699531:tid 3699531] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:40:59.995324 2026] [ssl:error] [pid 3715237:tid 3715237] (EAI 2)Name or service not known: [client 144.76.19.72:64112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:40:59.995357 2026] [ssl:error] [pid 3715237:tid 3715237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:02.365019 2026] [access_compat:error] [pid 3699534:tid 3699534] [client 112.209.180.50:16747] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:02.777238 2026] [security2:error] [pid 3714090:tid 3714090] [client 20.63.98.115:57855] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchell.org"] [uri "/wp-config.php"] [unique_id "amtifik8P_JH3l-JKv1pbwAAACY"]
[Thu Jul 30 15:41:02.777453 2026] [security2:error] [pid 3714090:tid 3714090] [client 20.63.98.115:57855] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchell.org"] [uri "/wp-config.php"] [unique_id "amtifik8P_JH3l-JKv1pbwAAACY"]
[Thu Jul 30 15:41:02.780804 2026] [security2:error] [pid 3714090:tid 3714090] [client 20.63.98.115:57855] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchell.org"] [uri "/index.php"] [unique_id "amtifik8P_JH3l-JKv1pbwAAACY"]
[Thu Jul 30 15:41:03.052110 2026] [ssl:error] [pid 3701925:tid 3701925] (EAI 2)Name or service not known: [client 144.76.19.72:64128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:03.052142 2026] [ssl:error] [pid 3701925:tid 3701925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:03.104976 2026] [ssl:error] [pid 3709121:tid 3709121] (EAI 2)Name or service not known: [client 144.76.19.72:64144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:03.105010 2026] [ssl:error] [pid 3709121:tid 3709121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:03.883571 2026] [authz_core:error] [pid 3701241:tid 3701241] [client 66.249.66.34:50999] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:41:03.886295 2026] [authz_core:error] [pid 3701241:tid 3701241] [client 66.249.66.34:50999] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:41:05.354423 2026] [access_compat:error] [pid 3714090:tid 3714090] [client 45.158.164.139:40828] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:41:05.615231 2026] [lsapi:warn] [pid 3692608:tid 3692608] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:41:06.161945 2026] [ssl:error] [pid 3713977:tid 3713977] (EAI 2)Name or service not known: [client 144.76.19.72:64154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:06.161984 2026] [ssl:error] [pid 3713977:tid 3713977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:06.219448 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:64162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:06.219477 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:06.781437 2026] [ssl:error] [pid 3685615:tid 3685615] (70014)End of file found: [client 216.73.216.199:2108] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:41:07.082018 2026] [core:error] [pid 3709121:tid 3709121] (13)Permission denied: [client 216.73.216.199:43069] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu3/driver/cpu7/node0/compact
[Thu Jul 30 15:41:07.853581 2026] [security2:error] [pid 3714090:tid 3714090] [client 170.106.169.13:52717] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtigyk8P_JH3l-JKv1peQAAACY"]
[Thu Jul 30 15:41:07.853637 2026] [security2:error] [pid 3714090:tid 3714090] [client 170.106.169.13:52717] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtigyk8P_JH3l-JKv1peQAAACY"]
[Thu Jul 30 15:41:07.853906 2026] [security2:error] [pid 3714090:tid 3714090] [client 170.106.169.13:52717] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtigyk8P_JH3l-JKv1peQAAACY"]
[Thu Jul 30 15:41:08.239169 2026] [cgi:error] [pid 3712035:tid 3712035] [client 20.9.4.9:26574] AH02811: stderr from /home/broadcas/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:41:08.325102 2026] [security2:error] [pid 3714090:tid 3714090] [client 114.119.157.183:30285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,17,18/request_format~html"] [unique_id "amtihCk8P_JH3l-JKv1pegAAACY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572825600/cat_ids~30,17,18/request_format~html
[Thu Jul 30 15:41:08.683675 2026] [access_compat:error] [pid 3711246:tid 3711246] [client 136.158.25.236:56671] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:09.289158 2026] [ssl:error] [pid 3701636:tid 3701636] (EAI 2)Name or service not known: [client 144.76.19.72:64172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:09.289192 2026] [ssl:error] [pid 3701636:tid 3701636] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:09.350549 2026] [ssl:error] [pid 3700301:tid 3700301] (EAI 2)Name or service not known: [client 144.76.19.72:64182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:09.350577 2026] [ssl:error] [pid 3700301:tid 3700301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:09.723111 2026] [security2:error] [pid 3705680:tid 3705680] [client 114.119.128.50:47051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thatwall.com"] [uri "/robots.txt"] [unique_id "amtihWYhi-2MILKyZzL-QgAAABM"], referer: https://thatwall.com/robots.txt
[Thu Jul 30 15:41:09.796256 2026] [security2:error] [pid 3701636:tid 3701636] [client 114.119.157.183:30291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,17,18/request_format~html"] [unique_id "amtihYZMaidFTY9aZOjwUQAAAF4"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572825600/cat_ids~30,17,18/request_format~html
[Thu Jul 30 15:41:10.039862 2026] [security2:error] [pid 3701243:tid 3701243] [client 47.128.40.122:29766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.horus-wellbeing.co.uk"] [uri "/robots.txt"] [unique_id "amtiho5ra8L3Okye1U9llQAAAF0"]
[Thu Jul 30 15:41:10.784383 2026] [security2:error] [pid 3701925:tid 3701925] [client 103.147.190.35:43964] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtihmAhRdUgmyOTaZbuYwAAAGU"]
[Thu Jul 30 15:41:10.784448 2026] [security2:error] [pid 3701925:tid 3701925] [client 103.147.190.35:43964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtihmAhRdUgmyOTaZbuYwAAAGU"]
[Thu Jul 30 15:41:10.784701 2026] [security2:error] [pid 3701925:tid 3701925] [client 103.147.190.35:43964] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtihmAhRdUgmyOTaZbuYwAAAGU"]
[Thu Jul 30 15:41:12.404546 2026] [ssl:error] [pid 3713506:tid 3713506] (EAI 2)Name or service not known: [client 144.76.19.72:58912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:12.404581 2026] [ssl:error] [pid 3713506:tid 3713506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:12.457922 2026] [ssl:error] [pid 3701243:tid 3701243] (EAI 2)Name or service not known: [client 144.76.19.72:58924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:12.457953 2026] [ssl:error] [pid 3701243:tid 3701243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:12.539519 2026] [access_compat:error] [pid 3714090:tid 3714090] [client 136.158.25.236:57033] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:14.198462 2026] [authz_core:error] [pid 3701241:tid 3701241] [client 66.249.66.33:36242] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:41:14.201108 2026] [authz_core:error] [pid 3701241:tid 3701241] [client 66.249.66.33:36242] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:41:14.801171 2026] [security2:error] [pid 3714920:tid 3714920] [client 102.159.191.56:50788] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiilbvr1epRc0zkC6jlQAAAAA"]
[Thu Jul 30 15:41:14.801220 2026] [security2:error] [pid 3714920:tid 3714920] [client 102.159.191.56:50788] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiilbvr1epRc0zkC6jlQAAAAA"]
[Thu Jul 30 15:41:14.801509 2026] [security2:error] [pid 3714920:tid 3714920] [client 102.159.191.56:50788] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiilbvr1epRc0zkC6jlQAAAAA"]
[Thu Jul 30 15:41:15.515508 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:58930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:15.515540 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:15.568523 2026] [ssl:error] [pid 3713977:tid 3713977] (EAI 2)Name or service not known: [client 144.76.19.72:58940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:15.568546 2026] [ssl:error] [pid 3713977:tid 3713977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:15.800210 2026] [authz_core:error] [pid 3701241:tid 3701241] [client 66.249.66.33:36242] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:41:15.802874 2026] [authz_core:error] [pid 3701241:tid 3701241] [client 66.249.66.33:36242] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:41:16.854512 2026] [security2:error] [pid 3713506:tid 3713506] [client 47.128.24.64:53636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/"] [unique_id "amtijGBKnMFjTYofNzBUcgAAABQ"]
[Thu Jul 30 15:41:18.621909 2026] [ssl:error] [pid 3709167:tid 3709167] (EAI 2)Name or service not known: [client 144.76.19.72:58944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:18.621957 2026] [ssl:error] [pid 3709167:tid 3709167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:18.676820 2026] [ssl:error] [pid 3705575:tid 3705575] (EAI 2)Name or service not known: [client 144.76.19.72:58946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:18.676853 2026] [ssl:error] [pid 3705575:tid 3705575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:18.923109 2026] [access_compat:error] [pid 3714920:tid 3714920] [client 136.158.25.236:57583] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:19.459837 2026] [lsapi:warn] [pid 3705620:tid 3705620] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:41:19.642804 2026] [ssl:error] [pid 3709121:tid 3709121] (70014)End of file found: [client 216.73.216.199:43069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:41:21.734441 2026] [ssl:error] [pid 3709167:tid 3709167] (EAI 2)Name or service not known: [client 144.76.19.72:50486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:21.734479 2026] [ssl:error] [pid 3709167:tid 3709167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:21.785675 2026] [ssl:error] [pid 3705683:tid 3705683] (EAI 2)Name or service not known: [client 144.76.19.72:50498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:21.785715 2026] [ssl:error] [pid 3705683:tid 3705683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:22.591998 2026] [authz_core:error] [pid 3705683:tid 3705683] [client 66.249.66.33:41080] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:41:22.594658 2026] [authz_core:error] [pid 3705683:tid 3705683] [client 66.249.66.33:41080] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:41:22.991098 2026] [access_compat:error] [pid 3700301:tid 3700301] [client 136.158.25.236:57913] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:24.885498 2026] [ssl:error] [pid 3685615:tid 3685615] (EAI 2)Name or service not known: [client 144.76.19.72:50502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:24.885530 2026] [ssl:error] [pid 3685615:tid 3685615] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:25.175695 2026] [ssl:error] [pid 3716200:tid 3716200] (EAI 2)Name or service not known: [client 144.76.19.72:50504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:25.175727 2026] [ssl:error] [pid 3716200:tid 3716200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:25.690131 2026] [lsapi:warn] [pid 3705620:tid 3705620] [client 192.250.227.35:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:41:28.230375 2026] [ssl:error] [pid 3705683:tid 3705683] (EAI 2)Name or service not known: [client 144.76.19.72:50520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:28.230403 2026] [ssl:error] [pid 3705683:tid 3705683] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:28.283860 2026] [ssl:error] [pid 3716246:tid 3716246] (EAI 2)Name or service not known: [client 144.76.19.72:50522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:28.283891 2026] [ssl:error] [pid 3716246:tid 3716246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:28.289108 2026] [security2:error] [pid 3705620:tid 3705620] [client 85.208.96.195:52486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/jerma-mental-health"] [unique_id "amtimPXzZo10pGCZgkl0SQAAAAg"]
[Thu Jul 30 15:41:29.304538 2026] [ssl:error] [pid 3714089:tid 3714089] (70014)End of file found: [client 216.73.216.199:2362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:41:29.433340 2026] [access_compat:error] [pid 3716246:tid 3716246] [client 112.209.180.50:13857] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:31.030562 2026] [lsapi:warn] [pid 3705575:tid 3705575] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:41:31.339655 2026] [ssl:error] [pid 3705680:tid 3705680] (EAI 2)Name or service not known: [client 144.76.19.72:41962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:31.339691 2026] [ssl:error] [pid 3705680:tid 3705680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:31.394796 2026] [ssl:error] [pid 3713977:tid 3713977] (EAI 2)Name or service not known: [client 144.76.19.72:41974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:31.394828 2026] [ssl:error] [pid 3713977:tid 3713977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:32.120299 2026] [access_compat:error] [pid 3716157:tid 3716157] [client 204.93.227.6:35170] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:41:33.616105 2026] [access_compat:error] [pid 3700301:tid 3700301] [client 112.209.180.50:14073] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:34.446699 2026] [ssl:error] [pid 3716157:tid 3716157] (EAI 2)Name or service not known: [client 144.76.19.72:42036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:34.446734 2026] [ssl:error] [pid 3716157:tid 3716157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:34.499709 2026] [ssl:error] [pid 3709121:tid 3709121] (EAI 2)Name or service not known: [client 144.76.19.72:42044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:34.499741 2026] [ssl:error] [pid 3709121:tid 3709121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:37.556385 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:42096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:37.556419 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:37.607744 2026] [ssl:error] [pid 3713506:tid 3713506] (EAI 2)Name or service not known: [client 144.76.19.72:42102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:37.607771 2026] [ssl:error] [pid 3713506:tid 3713506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:38.699203 2026] [lsapi:warn] [pid 3713506:tid 3713506] [client 103.155.118.106:35908] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 15:41:40.660935 2026] [ssl:error] [pid 3709121:tid 3709121] (EAI 2)Name or service not known: [client 144.76.19.72:27746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:40.660964 2026] [ssl:error] [pid 3709121:tid 3709121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:40.716658 2026] [ssl:error] [pid 3716246:tid 3716246] (EAI 2)Name or service not known: [client 144.76.19.72:27762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:40.716679 2026] [ssl:error] [pid 3716246:tid 3716246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:42.069909 2026] [lsapi:warn] [pid 3716247:tid 3716247] [client 191.44.71.39:32664] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 15:41:43.659128 2026] [security2:error] [pid 3709169:tid 3709169] [client 94.154.43.179:52292] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "amtip0WNSuJfX6QryP8IpAAAACA"]
[Thu Jul 30 15:41:43.659330 2026] [security2:error] [pid 3709169:tid 3709169] [client 94.154.43.179:52292] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "amtip0WNSuJfX6QryP8IpAAAACA"]
[Thu Jul 30 15:41:43.659550 2026] [security2:error] [pid 3709169:tid 3709169] [client 94.154.43.179:52292] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "edmundwild.co.uk"] [uri "/.env"] [unique_id "amtip0WNSuJfX6QryP8IpAAAACA"]
[Thu Jul 30 15:41:43.789283 2026] [ssl:error] [pid 3715083:tid 3715083] (EAI 2)Name or service not known: [client 144.76.19.72:27764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:43.789332 2026] [ssl:error] [pid 3715083:tid 3715083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:43.845881 2026] [ssl:error] [pid 3711246:tid 3711246] (EAI 2)Name or service not known: [client 144.76.19.72:27768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:43.845917 2026] [ssl:error] [pid 3711246:tid 3711246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:43.974942 2026] [access_compat:error] [pid 3716157:tid 3716157] [client 136.158.25.236:59723] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:44.266524 2026] [lsapi:warn] [pid 3696223:tid 3696223] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:41:44.411843 2026] [access_compat:error] [pid 3709169:tid 3709169] [client 45.158.164.139:59202] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:41:44.440918 2026] [authz_core:error] [pid 3714089:tid 3714089] [client 66.249.66.33:45247] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:41:44.443596 2026] [authz_core:error] [pid 3714089:tid 3714089] [client 66.249.66.33:45247] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:41:46.396915 2026] [security2:error] [pid 3716037:tid 3716037] [client 47.128.116.153:61924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wildduckdesigns.co.uk"] [uri "/robots.txt"] [unique_id "amtiqnNHNLzL-nt3y7CRNgAAAAw"]
[Thu Jul 30 15:41:46.903753 2026] [ssl:error] [pid 3700301:tid 3700301] (EAI 2)Name or service not known: [client 144.76.19.72:27770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:46.903782 2026] [ssl:error] [pid 3700301:tid 3700301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:46.956788 2026] [ssl:error] [pid 3700301:tid 3700301] (EAI 2)Name or service not known: [client 144.76.19.72:27780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:46.956825 2026] [ssl:error] [pid 3700301:tid 3700301] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:47.576302 2026] [cgi:error] [pid 3711246:tid 3711246] [client 199.45.155.91:34172] AH02812: stderr from /home/pbyawsga/akoptimize.online/cgi-bin/: attempt to invoke directory as script, referer: http://akoptimize.onlinec.gatkabfs.com:80/cgi-bin
[Thu Jul 30 15:41:47.628484 2026] [security2:error] [pid 3716246:tid 3716246] [client 51.222.168.23:40768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amtiq_Tq9UtHh9XXozf90QAAAB8"]
[Thu Jul 30 15:41:48.498870 2026] [authz_core:error] [pid 3714089:tid 3714089] [client 66.249.66.33:45247] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:41:48.501674 2026] [authz_core:error] [pid 3714089:tid 3714089] [client 66.249.66.33:45247] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:41:48.509306 2026] [authz_core:error] [pid 3700301:tid 3700301] [client 169.58.39.192:59033] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 15:41:48.913183 2026] [security2:error] [pid 3700301:tid 3700301] [client 51.89.129.39:23638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.msg35687.html"] [unique_id "amtirKIRb1e2Q1wB7RfE1wAAAEY"]
[Thu Jul 30 15:41:50.173741 2026] [ssl:error] [pid 3716157:tid 3716157] (EAI 2)Name or service not known: [client 144.76.19.72:30432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:50.173769 2026] [ssl:error] [pid 3716157:tid 3716157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:50.225493 2026] [ssl:error] [pid 3716157:tid 3716157] (EAI 2)Name or service not known: [client 144.76.19.72:30436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:50.225522 2026] [ssl:error] [pid 3716157:tid 3716157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:50.817439 2026] [access_compat:error] [pid 3716157:tid 3716157] [client 136.158.25.236:60266] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:51.462174 2026] [authz_core:error] [pid 3705680:tid 3705680] [client 169.58.39.192:60137] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 15:41:53.324346 2026] [ssl:error] [pid 3711246:tid 3711246] (EAI 2)Name or service not known: [client 144.76.19.72:30440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:53.324387 2026] [ssl:error] [pid 3711246:tid 3711246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:53.382203 2026] [ssl:error] [pid 3715317:tid 3715317] (EAI 2)Name or service not known: [client 144.76.19.72:30448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:53.382231 2026] [ssl:error] [pid 3715317:tid 3715317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:54.469567 2026] [access_compat:error] [pid 3709167:tid 3709167] [client 136.158.25.236:60528] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:41:55.767719 2026] [authz_core:error] [pid 3698691:tid 3698691] [client 169.58.39.192:62219] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:41:56.437922 2026] [ssl:error] [pid 3709169:tid 3709169] (EAI 2)Name or service not known: [client 144.76.19.72:30454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:56.437966 2026] [ssl:error] [pid 3709169:tid 3709169] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:56.497761 2026] [ssl:error] [pid 3714090:tid 3714090] (EAI 2)Name or service not known: [client 144.76.19.72:30456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:56.497803 2026] [ssl:error] [pid 3714090:tid 3714090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:57.068641 2026] [lsapi:warn] [pid 3713977:tid 3713977] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:41:57.106524 2026] [ssl:error] [pid 3717304:tid 3717304] (70014)End of file found: [client 216.73.216.199:41318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:41:57.707479 2026] [ssl:error] [pid 3694657:tid 3694657] (70014)End of file found: [client 216.73.216.199:28328] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:41:58.612752 2026] [security2:error] [pid 3717303:tid 3717303] [client 216.73.216.199:64514] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/limits.conf"] [unique_id "amtitrGzBYyIQlvhb72otgAAAC8"]
[Thu Jul 30 15:41:58.613053 2026] [security2:error] [pid 3717303:tid 3717303] [client 216.73.216.199:64514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/limits.conf"] [unique_id "amtitrGzBYyIQlvhb72otgAAAC8"]
[Thu Jul 30 15:41:58.613289 2026] [security2:error] [pid 3717303:tid 3717303] [client 216.73.216.199:64514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/security/limits.conf"] [unique_id "amtitrGzBYyIQlvhb72otgAAAC8"]
[Thu Jul 30 15:41:58.949344 2026] [authz_core:error] [pid 3713977:tid 3713977] [client 169.58.39.192:63741] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 15:41:59.514414 2026] [ssl:error] [pid 3717303:tid 3717303] (70014)End of file found: [client 216.73.216.199:64514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:41:59.554255 2026] [ssl:error] [pid 3698691:tid 3698691] (EAI 2)Name or service not known: [client 144.76.19.72:46114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:59.554283 2026] [ssl:error] [pid 3698691:tid 3698691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:41:59.608455 2026] [ssl:error] [pid 3717126:tid 3717126] (EAI 2)Name or service not known: [client 144.76.19.72:46116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:41:59.608484 2026] [ssl:error] [pid 3717126:tid 3717126] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:00.991475 2026] [access_compat:error] [pid 3711246:tid 3711246] [client 112.209.180.50:15050] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:42:02.428705 2026] [core:error] [pid 3716678:tid 3716678] (13)Permission denied: [client 216.73.216.199:31809] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu3/driver/bind
[Thu Jul 30 15:42:02.665770 2026] [ssl:error] [pid 3717304:tid 3717304] (EAI 2)Name or service not known: [client 144.76.19.72:46126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:02.665824 2026] [ssl:error] [pid 3717304:tid 3717304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:02.717782 2026] [ssl:error] [pid 3709166:tid 3709166] (EAI 2)Name or service not known: [client 144.76.19.72:46134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:02.717815 2026] [ssl:error] [pid 3709166:tid 3709166] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:03.036866 2026] [ssl:error] [pid 3689471:tid 3689471] (70014)End of file found: [client 216.73.216.199:14082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:03.133661 2026] [ssl:error] [pid 3716678:tid 3716678] (70014)End of file found: [client 216.73.216.199:31809] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:03.507544 2026] [authz_core:error] [pid 3717304:tid 3717304] [client 169.58.39.192:49393] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 15:42:04.628102 2026] [authz_core:error] [pid 3717306:tid 3717306] [client 65.109.124.116:19320] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 15:42:04.634604 2026] [authz_core:error] [pid 3717306:tid 3717306] [client 65.109.124.116:19320] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 15:42:05.773755 2026] [ssl:error] [pid 3717309:tid 3717309] (EAI 2)Name or service not known: [client 144.76.19.72:46150] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:05.773796 2026] [ssl:error] [pid 3717309:tid 3717309] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:05.830509 2026] [ssl:error] [pid 3717303:tid 3717303] (EAI 2)Name or service not known: [client 144.76.19.72:46156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:05.830543 2026] [ssl:error] [pid 3717303:tid 3717303] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:05.844122 2026] [ssl:error] [pid 3701241:tid 3701241] (70014)End of file found: [client 216.73.216.199:2059] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:06.505709 2026] [cgi:error] [pid 3714090:tid 3714090] [client 20.9.4.9:15792] AH02812: stderr from /home/websters/public_html/bengltd/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:42:07.986646 2026] [authz_core:error] [pid 3716245:tid 3716245] [client 169.58.39.192:51596] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 15:42:08.452266 2026] [ssl:error] [pid 3717303:tid 3717303] (70014)End of file found: [client 216.73.216.199:29829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:08.885513 2026] [ssl:error] [pid 3717302:tid 3717302] (EAI 2)Name or service not known: [client 144.76.19.72:46160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:08.885556 2026] [ssl:error] [pid 3717302:tid 3717302] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:08.943518 2026] [ssl:error] [pid 3716037:tid 3716037] (EAI 2)Name or service not known: [client 144.76.19.72:46162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:08.943555 2026] [ssl:error] [pid 3716037:tid 3716037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:09.846257 2026] [access_compat:error] [pid 3717302:tid 3717302] [client 45.158.164.139:55034] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:42:10.267453 2026] [lsapi:warn] [pid 3713506:tid 3713506] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:42:10.378143 2026] [ssl:error] [pid 3717126:tid 3717126] (70014)End of file found: [client 216.73.216.199:31064] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:10.824234 2026] [security2:error] [pid 3699534:tid 3699534] [client 47.128.47.180:21158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/robots.txt"] [unique_id "amtiwkQeb1mDaSf17LJl1QAAACk"]
[Thu Jul 30 15:42:11.173924 2026] [ssl:error] [pid 3717307:tid 3717307] (70014)End of file found: [client 216.73.216.199:64812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:11.938703 2026] [security2:error] [pid 3709166:tid 3709166] [client 124.123.191.121:42307] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiw75XmUUr-POOHNz4-AAAABc"]
[Thu Jul 30 15:42:11.938755 2026] [security2:error] [pid 3709166:tid 3709166] [client 124.123.191.121:42307] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiw75XmUUr-POOHNz4-AAAABc"]
[Thu Jul 30 15:42:11.938990 2026] [security2:error] [pid 3709166:tid 3709166] [client 124.123.191.121:42307] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiw75XmUUr-POOHNz4-AAAABc"]
[Thu Jul 30 15:42:12.001980 2026] [ssl:error] [pid 3713506:tid 3713506] (EAI 2)Name or service not known: [client 144.76.19.72:60496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:12.002014 2026] [ssl:error] [pid 3713506:tid 3713506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:12.058385 2026] [ssl:error] [pid 3716200:tid 3716200] (EAI 2)Name or service not known: [client 144.76.19.72:60506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:12.058421 2026] [ssl:error] [pid 3716200:tid 3716200] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:12.718524 2026] [security2:error] [pid 3717309:tid 3717309] [client 114.119.147.246:40589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kingston1010.org.uk"] [uri "/robots.txt"] [unique_id "amtixCxGBcuaC1XlTp1IPQAAADU"], referer: https://kingston1010.org.uk/robots.txt
[Thu Jul 30 15:42:13.873906 2026] [ssl:error] [pid 3717304:tid 3717304] (70014)End of file found: [client 216.73.216.199:56639] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:15.142664 2026] [ssl:error] [pid 3715083:tid 3715083] (EAI 2)Name or service not known: [client 144.76.19.72:60516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:15.142720 2026] [ssl:error] [pid 3715083:tid 3715083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:15.198780 2026] [ssl:error] [pid 3715317:tid 3715317] (EAI 2)Name or service not known: [client 144.76.19.72:60528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:15.198810 2026] [ssl:error] [pid 3715317:tid 3715317] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:15.684681 2026] [ssl:error] [pid 3689471:tid 3689471] (70014)End of file found: [client 216.73.216.199:14373] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:16.589424 2026] [ssl:error] [pid 3705620:tid 3705620] (70014)End of file found: [client 216.73.216.199:39031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:18.270333 2026] [ssl:error] [pid 3715546:tid 3715546] (EAI 2)Name or service not known: [client 144.76.19.72:60544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:18.270381 2026] [ssl:error] [pid 3715546:tid 3715546] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:18.327170 2026] [ssl:error] [pid 3716678:tid 3716678] (EAI 2)Name or service not known: [client 144.76.19.72:60558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:18.327228 2026] [ssl:error] [pid 3716678:tid 3716678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:18.827484 2026] [security2:error] [pid 3685615:tid 3685615] [client 103.136.159.225:38232] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiymu2JG3_VdYelXV27AAAAAY"]
[Thu Jul 30 15:42:18.827549 2026] [security2:error] [pid 3685615:tid 3685615] [client 103.136.159.225:38232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtiymu2JG3_VdYelXV27AAAAAY"]
[Thu Jul 30 15:42:18.827784 2026] [security2:error] [pid 3685615:tid 3685615] [client 103.136.159.225:38232] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtiymu2JG3_VdYelXV27AAAAAY"]
[Thu Jul 30 15:42:20.640973 2026] [core:error] [pid 3711246:tid 3711246] (13)Permission denied: [client 216.73.216.199:65513] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/codeworks.uk.db
[Thu Jul 30 15:42:21.420499 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:65294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:21.420535 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:21.474117 2026] [ssl:error] [pid 3705680:tid 3705680] (EAI 2)Name or service not known: [client 144.76.19.72:65306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:21.474166 2026] [ssl:error] [pid 3705680:tid 3705680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:21.765271 2026] [ssl:error] [pid 3698691:tid 3698691] (70014)End of file found: [client 216.73.216.199:49016] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:21.801377 2026] [security2:error] [pid 3716852:tid 3716852] [client 74.7.242.11:51184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtizWUa3i1ecdlkl8EOfAAAAB0"]
[Thu Jul 30 15:42:22.464239 2026] [ssl:error] [pid 3711246:tid 3711246] (70014)End of file found: [client 216.73.216.199:65513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:23.371380 2026] [ssl:error] [pid 3716245:tid 3716245] (70014)End of file found: [client 216.73.216.199:2322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:23.586663 2026] [security2:error] [pid 3716852:tid 3716852] [client 43.167.236.228:40878] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "evtech.ltd"] [uri "/"] [unique_id "amtiz2Ua3i1ecdlkl8EOfgAAAB0"]
[Thu Jul 30 15:42:23.907283 2026] [lsapi:warn] [pid 3714090:tid 3714090] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:42:24.530471 2026] [ssl:error] [pid 3716852:tid 3716852] (EAI 2)Name or service not known: [client 144.76.19.72:65322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:24.530502 2026] [ssl:error] [pid 3716852:tid 3716852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:24.547697 2026] [ssl:error] [pid 3718556:tid 3718556] (70014)End of file found: [client 216.73.216.199:47340] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:24.585418 2026] [ssl:error] [pid 3716852:tid 3716852] (EAI 2)Name or service not known: [client 144.76.19.72:65324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:24.585441 2026] [ssl:error] [pid 3716852:tid 3716852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:25.777735 2026] [ssl:error] [pid 3716852:tid 3716852] (70014)End of file found: [client 216.73.216.199:22751] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:27.656567 2026] [ssl:error] [pid 3718643:tid 3718643] (EAI 2)Name or service not known: [client 144.76.19.72:65332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:27.656608 2026] [ssl:error] [pid 3718643:tid 3718643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:27.712023 2026] [ssl:error] [pid 3718644:tid 3718644] (EAI 2)Name or service not known: [client 144.76.19.72:65346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:27.712055 2026] [ssl:error] [pid 3718644:tid 3718644] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:28.830497 2026] [security2:error] [pid 3717303:tid 3717303] [client 85.208.96.200:16764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/bbc-bitesize-habitats-ks3"] [unique_id "amti1LGzBYyIQlvhb72ovgAAAC8"]
[Thu Jul 30 15:42:29.101080 2026] [ssl:error] [pid 3716157:tid 3716157] (70014)End of file found: [client 216.73.216.199:19637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:30.380136 2026] [ssl:error] [pid 3699534:tid 3699534] (70014)End of file found: [client 216.73.216.199:55784] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:30.656569 2026] [ssl:error] [pid 3718156:tid 3718156] (70014)End of file found: [client 216.73.216.199:52387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:30.755177 2026] [security2:error] [pid 3717126:tid 3717126] [client 114.119.157.183:58899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,15/request_format~html"] [unique_id "amti1iODBUJhewA5ovTaigAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 15:42:30.766004 2026] [ssl:error] [pid 3718556:tid 3718556] (EAI 2)Name or service not known: [client 144.76.19.72:36364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:30.766035 2026] [ssl:error] [pid 3718556:tid 3718556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:30.821010 2026] [ssl:error] [pid 3713977:tid 3713977] (EAI 2)Name or service not known: [client 144.76.19.72:36372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:30.821044 2026] [ssl:error] [pid 3713977:tid 3713977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:32.470762 2026] [ssl:error] [pid 3711246:tid 3711246] (70014)End of file found: [client 216.73.216.199:18000] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:33.031490 2026] [security2:error] [pid 3717126:tid 3717126] [client 114.119.157.183:58909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,15/request_format~html"] [unique_id "amti2SODBUJhewA5ovTaiwAAABo"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 15:42:33.877627 2026] [ssl:error] [pid 3717262:tid 3717262] (EAI 2)Name or service not known: [client 144.76.19.72:36378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:33.877656 2026] [ssl:error] [pid 3717262:tid 3717262] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:33.937523 2026] [ssl:error] [pid 3716678:tid 3716678] (EAI 2)Name or service not known: [client 144.76.19.72:36394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:33.937552 2026] [ssl:error] [pid 3716678:tid 3716678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:35.684643 2026] [core:error] [pid 3716678:tid 3716678] (13)Permission denied: [client 216.73.216.199:28713] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/block/253:0/device/driver/unbind
[Thu Jul 30 15:42:35.803345 2026] [ssl:error] [pid 3716678:tid 3716678] (70014)End of file found: [client 216.73.216.199:28713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:36.993134 2026] [ssl:error] [pid 3717264:tid 3717264] (EAI 2)Name or service not known: [client 144.76.19.72:36402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:36.993166 2026] [ssl:error] [pid 3717264:tid 3717264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:37.047540 2026] [ssl:error] [pid 3699534:tid 3699534] (EAI 2)Name or service not known: [client 144.76.19.72:36406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:37.047569 2026] [ssl:error] [pid 3699534:tid 3699534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:37.490747 2026] [lsapi:warn] [pid 3698691:tid 3698691] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:42:40.072243 2026] [ssl:error] [pid 3717305:tid 3717305] (70014)End of file found: [client 216.73.216.199:63543] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:40.103283 2026] [ssl:error] [pid 3716247:tid 3716247] (EAI 2)Name or service not known: [client 144.76.19.72:41428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:40.103320 2026] [ssl:error] [pid 3716247:tid 3716247] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:40.161552 2026] [ssl:error] [pid 3718648:tid 3718648] (EAI 2)Name or service not known: [client 144.76.19.72:41438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:40.161582 2026] [ssl:error] [pid 3718648:tid 3718648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:40.637047 2026] [security2:error] [pid 3713977:tid 3713977] [client 185.191.171.13:55224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8928.0/prev_next,prev.html"] [unique_id "amti4PrI5lZ4vB-RunAHswAAAA8"]
[Thu Jul 30 15:42:40.677221 2026] [ssl:error] [pid 3698691:tid 3698691] (70014)End of file found: [client 216.73.216.199:42341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:41.169681 2026] [ssl:error] [pid 3718647:tid 3718647] (70014)End of file found: [client 216.73.216.199:63225] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:43.213965 2026] [ssl:error] [pid 3718642:tid 3718642] (EAI 2)Name or service not known: [client 144.76.19.72:41450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:43.213996 2026] [ssl:error] [pid 3718642:tid 3718642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:43.265652 2026] [ssl:error] [pid 3718602:tid 3718602] (EAI 2)Name or service not known: [client 144.76.19.72:41454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:43.265679 2026] [ssl:error] [pid 3718602:tid 3718602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:46.344116 2026] [ssl:error] [pid 3698691:tid 3698691] (EAI 2)Name or service not known: [client 144.76.19.72:41456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:46.344153 2026] [ssl:error] [pid 3698691:tid 3698691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:46.412131 2026] [ssl:error] [pid 3713506:tid 3713506] (EAI 2)Name or service not known: [client 144.76.19.72:41458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:46.412160 2026] [ssl:error] [pid 3713506:tid 3713506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:47.293103 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:47.398140 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:47.524704 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:47.630965 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:47.733274 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:47.828640 2026] [security2:error] [pid 3715317:tid 3715317] [client 85.208.96.211:49436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9085.0/prev_next,next.html"] [unique_id "amti50LfSDUxvoUIHXvVsAAAAAU"]
[Thu Jul 30 15:42:47.862493 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:47.920620 2026] [ssl:error] [pid 3699534:tid 3699534] (70014)End of file found: [client 216.73.216.199:8913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:48.460815 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:48.681473 2026] [security2:error] [pid 3705680:tid 3705680] [client 175.27.163.171:37796] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amti6GYhi-2MILKyZzL-XAAAABM"]
[Thu Jul 30 15:42:49.157514 2026] [lsapi:warn] [pid 3716037:tid 3716037] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:42:49.272224 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:49.476480 2026] [ssl:error] [pid 3694657:tid 3694657] (EAI 2)Name or service not known: [client 144.76.19.72:41460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:49.476509 2026] [ssl:error] [pid 3694657:tid 3694657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:49.529693 2026] [ssl:error] [pid 3713506:tid 3713506] (EAI 2)Name or service not known: [client 144.76.19.72:41470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:49.529717 2026] [ssl:error] [pid 3713506:tid 3713506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:49.953904 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:50.093020 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:50.195721 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:50.301023 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:50.449742 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:50.616776 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:50.898809 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:51.016041 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:52.293221 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:52.411098 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:52.570415 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:52.583231 2026] [ssl:error] [pid 3716245:tid 3716245] (EAI 2)Name or service not known: [client 144.76.19.72:58858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:52.583267 2026] [ssl:error] [pid 3716245:tid 3716245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:52.637947 2026] [ssl:error] [pid 3718602:tid 3718602] (EAI 2)Name or service not known: [client 144.76.19.72:58864] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:52.637972 2026] [ssl:error] [pid 3718602:tid 3718602] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:52.711342 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:53.110255 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:53.209317 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:54.254792 2026] [ssl:error] [pid 3717220:tid 3717220] (70014)End of file found: [client 216.73.216.199:52056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:54.662061 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:54.851912 2026] [ssl:error] [pid 3698691:tid 3698691] (70014)End of file found: [client 216.73.216.199:20804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:55.193417 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:55.298391 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:55.425937 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:55.563114 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:55.671958 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:55.692740 2026] [ssl:error] [pid 3717264:tid 3717264] (EAI 2)Name or service not known: [client 144.76.19.72:58868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:55.692762 2026] [ssl:error] [pid 3717264:tid 3717264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:55.746535 2026] [ssl:error] [pid 3718603:tid 3718603] (EAI 2)Name or service not known: [client 144.76.19.72:58884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:55.746562 2026] [ssl:error] [pid 3718603:tid 3718603] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:55.757884 2026] [ssl:error] [pid 3718647:tid 3718647] (70014)End of file found: [client 216.73.216.199:58587] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:42:55.815166 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:55.925644 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.046212 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.167948 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.405757 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.517601 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.632314 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.737282 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.849103 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:56.949602 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:57.278835 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:57.411141 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:57.526291 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:57.625954 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:57.747873 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:57.873117 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:57.984192 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:58.017585 2026] [cgi:error] [pid 3717309:tid 3717309] [client 121.229.156.83:39894] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:42:58.470701 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:58.577785 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:58.800521 2026] [ssl:error] [pid 3720274:tid 3720274] (EAI 2)Name or service not known: [client 144.76.19.72:58900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:58.800554 2026] [ssl:error] [pid 3720274:tid 3720274] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:58.857177 2026] [ssl:error] [pid 3720354:tid 3720354] (EAI 2)Name or service not known: [client 144.76.19.72:58908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:42:58.857216 2026] [ssl:error] [pid 3720354:tid 3720354] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:42:59.396835 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:59.510284 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:42:59.613183 2026] [cgi:error] [pid 3696223:tid 3696223] [client 172.213.17.107:54540] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:01.582398 2026] [core:error] [pid 3718642:tid 3718642] (13)Permission denied: [client 216.73.216.199:25079] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/validate
[Thu Jul 30 15:43:01.832536 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:01.912139 2026] [ssl:error] [pid 3719976:tid 3719976] (EAI 2)Name or service not known: [client 144.76.19.72:50738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:01.912173 2026] [ssl:error] [pid 3719976:tid 3719976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:01.978504 2026] [ssl:error] [pid 3720274:tid 3720274] (EAI 2)Name or service not known: [client 144.76.19.72:50752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:01.978534 2026] [ssl:error] [pid 3720274:tid 3720274] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:02.252846 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:02.483443 2026] [core:error] [pid 3718642:tid 3718642] (13)Permission denied: [client 216.73.216.199:25079] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu4/driver/bind
[Thu Jul 30 15:43:02.879136 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:02.991025 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:03.089343 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:03.271767 2026] [security2:error] [pid 3719976:tid 3719976] [client 86.108.32.179:22477] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti9yQ9AklPXjCqZXS7QQAAABc"]
[Thu Jul 30 15:43:03.271827 2026] [security2:error] [pid 3719976:tid 3719976] [client 86.108.32.179:22477] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti9yQ9AklPXjCqZXS7QQAAABc"]
[Thu Jul 30 15:43:03.272102 2026] [security2:error] [pid 3719976:tid 3719976] [client 86.108.32.179:22477] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amti9yQ9AklPXjCqZXS7QQAAABc"]
[Thu Jul 30 15:43:03.455231 2026] [lsapi:warn] [pid 3719819:tid 3719819] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:43:03.484420 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:03.687137 2026] [core:error] [pid 3716247:tid 3716247] (13)Permission denied: [client 216.73.216.199:38911] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/partial
[Thu Jul 30 15:43:03.904677 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:04.002126 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:04.128597 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:04.255569 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:04.290366 2026] [ssl:error] [pid 3716247:tid 3716247] (70014)End of file found: [client 216.73.216.199:38911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:04.375411 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:04.498271 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:04.599626 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:04.892014 2026] [ssl:error] [pid 3718642:tid 3718642] (70014)End of file found: [client 216.73.216.199:25079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:05.024883 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:05.034722 2026] [ssl:error] [pid 3719819:tid 3719819] (EAI 2)Name or service not known: [client 144.76.19.72:50758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:05.034748 2026] [ssl:error] [pid 3719819:tid 3719819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:05.088422 2026] [ssl:error] [pid 3720355:tid 3720355] (EAI 2)Name or service not known: [client 144.76.19.72:50762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:05.088453 2026] [ssl:error] [pid 3720355:tid 3720355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:05.186823 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:05.484207 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:05.592584 2026] [security2:error] [pid 3709121:tid 3709121] [client 175.157.16.20:29697] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti-RvQJ0Km_ggnPbXCDwAAAA4"]
[Thu Jul 30 15:43:05.592628 2026] [security2:error] [pid 3709121:tid 3709121] [client 175.157.16.20:29697] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti-RvQJ0Km_ggnPbXCDwAAAA4"]
[Thu Jul 30 15:43:05.592845 2026] [security2:error] [pid 3709121:tid 3709121] [client 175.157.16.20:29697] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amti-RvQJ0Km_ggnPbXCDwAAAA4"]
[Thu Jul 30 15:43:05.598044 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:05.945227 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:06.248510 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:06.526458 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:06.636047 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:06.772506 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:06.915833 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:06.982927 2026] [security2:error] [pid 3718646:tid 3718646] [client 163.61.60.30:60386] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.jonathanhill.co.uk"] [uri "/xmlrpc.php"] [unique_id "amti-uiSdP0Pi69bLHOaCwAAADc"]
[Thu Jul 30 15:43:06.999635 2026] [ssl:error] [pid 3694657:tid 3694657] (70014)End of file found: [client 216.73.216.199:39306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:07.373655 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:07.533550 2026] [security2:error] [pid 3718518:tid 3718518] [client 14.191.93.216:7131] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti-8cFju0pTW9JyhckBAAAAAk"]
[Thu Jul 30 15:43:07.533604 2026] [security2:error] [pid 3718518:tid 3718518] [client 14.191.93.216:7131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti-8cFju0pTW9JyhckBAAAAAk"]
[Thu Jul 30 15:43:07.533832 2026] [security2:error] [pid 3718518:tid 3718518] [client 14.191.93.216:7131] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amti-8cFju0pTW9JyhckBAAAAAk"]
[Thu Jul 30 15:43:07.542399 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:07.905799 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:08.235184 2026] [ssl:error] [pid 3705680:tid 3705680] (EAI 2)Name or service not known: [client 144.76.19.72:50776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:08.235212 2026] [ssl:error] [pid 3705680:tid 3705680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:08.292079 2026] [ssl:error] [pid 3719819:tid 3719819] (EAI 2)Name or service not known: [client 144.76.19.72:50780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:08.292104 2026] [ssl:error] [pid 3719819:tid 3719819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:08.558443 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:08.799922 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:08.912287 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:09.020361 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:09.316894 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:09.459368 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:09.559890 2026] [security2:error] [pid 3713506:tid 3713506] [client 84.75.155.186:47194] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti_WBKnMFjTYofNzBUkwAAABQ"]
[Thu Jul 30 15:43:09.559939 2026] [security2:error] [pid 3713506:tid 3713506] [client 84.75.155.186:47194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amti_WBKnMFjTYofNzBUkwAAABQ"]
[Thu Jul 30 15:43:09.560177 2026] [security2:error] [pid 3713506:tid 3713506] [client 84.75.155.186:47194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amti_WBKnMFjTYofNzBUkwAAABQ"]
[Thu Jul 30 15:43:09.583618 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:09.614588 2026] [ssl:error] [pid 3678921:tid 3678921] (70014)End of file found: [client 216.73.216.199:38604] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:09.869558 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:10.146832 2026] [authz_core:error] [pid 3718647:tid 3718647] [client 169.58.39.192:65461] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:43:10.147499 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:10.477831 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:10.598370 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:10.611328 2026] [ssl:error] [pid 3718518:tid 3718518] (70014)End of file found: [client 216.73.216.199:2540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:10.944428 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:11.071859 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:11.169711 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:11.348491 2026] [ssl:error] [pid 3718642:tid 3718642] (EAI 2)Name or service not known: [client 144.76.19.72:41828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:11.348522 2026] [ssl:error] [pid 3718642:tid 3718642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:11.405494 2026] [ssl:error] [pid 3714090:tid 3714090] (EAI 2)Name or service not known: [client 144.76.19.72:41832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:11.405522 2026] [ssl:error] [pid 3714090:tid 3714090] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:11.479257 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:11.586830 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:11.787012 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:11.959515 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:12.080406 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:12.200131 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:12.320899 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:12.422609 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:12.534620 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:12.660051 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:12.828272 2026] [security2:error] [pid 3711246:tid 3711246] [client 85.208.96.209:54382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3666.0/prev_next,prev.html"] [unique_id "amtjAIpdw_tC82jlUQXXJwAAAAo"]
[Thu Jul 30 15:43:12.906167 2026] [core:error] [pid 3718642:tid 3718642] (13)Permission denied: [client 216.73.216.199:20279] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/physical_node/resource4
[Thu Jul 30 15:43:13.129348 2026] [cgi:error] [pid 3701241:tid 3701241] [client 172.213.17.107:53920] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:13.505802 2026] [authz_core:error] [pid 3715083:tid 3715083] [client 169.58.39.192:50719] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 15:43:14.169698 2026] [cgi:error] [pid 3698691:tid 3698691] [client 172.213.17.107:51339] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:14.191743 2026] [security2:error] [pid 3692608:tid 3692608] [client 47.128.27.172:17956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/robots.txt"] [unique_id "amtjAlTBhqQvZfl7j_pVWQAAABE"]
[Thu Jul 30 15:43:14.278802 2026] [ssl:error] [pid 3716247:tid 3716247] (70014)End of file found: [client 216.73.216.199:33811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:14.403506 2026] [cgi:error] [pid 3698691:tid 3698691] [client 172.213.17.107:51339] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:14.462561 2026] [ssl:error] [pid 3717187:tid 3717187] (EAI 2)Name or service not known: [client 144.76.19.72:41838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:14.462598 2026] [ssl:error] [pid 3717187:tid 3717187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:14.515433 2026] [cgi:error] [pid 3698691:tid 3698691] [client 172.213.17.107:51339] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:14.517260 2026] [ssl:error] [pid 3711246:tid 3711246] (EAI 2)Name or service not known: [client 144.76.19.72:41842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:14.517284 2026] [ssl:error] [pid 3711246:tid 3711246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:14.622211 2026] [cgi:error] [pid 3698691:tid 3698691] [client 172.213.17.107:51339] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63.
[Thu Jul 30 15:43:15.788094 2026] [ssl:error] [pid 3715083:tid 3715083] (70014)End of file found: [client 216.73.216.199:16842] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:16.041137 2026] [security2:error] [pid 3687959:tid 3687959] [client 52.238.199.152:14309] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "mjs-services.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtjBNL_Boxc0YEdwK0EJgAAABw"]
[Thu Jul 30 15:43:16.041313 2026] [security2:error] [pid 3687959:tid 3687959] [client 52.238.199.152:14309] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mjs-services.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtjBNL_Boxc0YEdwK0EJgAAABw"]
[Thu Jul 30 15:43:16.193876 2026] [lsapi:warn] [pid 3716678:tid 3716678] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:43:16.445281 2026] [security2:error] [pid 3687959:tid 3687959] [client 52.238.199.152:14309] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "mjs-services.com"] [uri "/index.php"] [unique_id "amtjBNL_Boxc0YEdwK0EJgAAABw"]
[Thu Jul 30 15:43:17.343985 2026] [authz_core:error] [pid 3678921:tid 3678921] [client 169.58.39.192:52875] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:43:17.573234 2026] [ssl:error] [pid 3709121:tid 3709121] (EAI 2)Name or service not known: [client 144.76.19.72:41858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:17.573265 2026] [ssl:error] [pid 3709121:tid 3709121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:17.624307 2026] [ssl:error] [pid 3705680:tid 3705680] (EAI 2)Name or service not known: [client 144.76.19.72:41862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:17.624332 2026] [ssl:error] [pid 3705680:tid 3705680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:18.800629 2026] [ssl:error] [pid 3718602:tid 3718602] (70014)End of file found: [client 216.73.216.199:42583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:18.953180 2026] [authz_core:error] [pid 3709121:tid 3709121] [client 94.154.43.187:33022] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 15:43:20.004041 2026] [ssl:error] [pid 3718555:tid 3718555] (70014)End of file found: [client 216.73.216.199:40227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:20.341906 2026] [authz_core:error] [pid 3717220:tid 3717220] [client 169.58.39.192:54430] AH01630: client denied by server configuration: /home/purple/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 15:43:20.695904 2026] [ssl:error] [pid 3689471:tid 3689471] (EAI 2)Name or service not known: [client 144.76.19.72:59466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:20.695940 2026] [ssl:error] [pid 3689471:tid 3689471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:20.751811 2026] [ssl:error] [pid 3716247:tid 3716247] (EAI 2)Name or service not known: [client 144.76.19.72:59482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:20.751841 2026] [ssl:error] [pid 3716247:tid 3716247] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:21.235034 2026] [authz_core:error] [pid 3720355:tid 3720355] [client 66.249.66.74:39474] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 15:43:21.810794 2026] [ssl:error] [pid 3701241:tid 3701241] (70014)End of file found: [client 216.73.216.199:32656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:22.001217 2026] [security2:error] [pid 3709167:tid 3709167] [client 101.32.49.171:41212] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchellphotography.co.uk"] [uri "/"] [unique_id "amtjCmAdpQFzBvvAo6mYPQAAABs"]
[Thu Jul 30 15:43:22.363729 2026] [security2:error] [pid 3719978:tid 3719978] [client 85.208.96.202:47908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10692.0.html"] [unique_id "amtjCkQkGx7MVhELjzjGJQAAABk"]
[Thu Jul 30 15:43:22.607389 2026] [access_compat:error] [pid 3716247:tid 3716247] [client 45.158.164.139:60354] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:43:23.168210 2026] [authz_core:error] [pid 3694657:tid 3694657] [client 66.249.66.34:57564] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:43:23.170936 2026] [authz_core:error] [pid 3694657:tid 3694657] [client 66.249.66.34:57564] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:43:23.233127 2026] [authz_core:error] [pid 3715317:tid 3715317] [client 4.225.166.222:38376] AH01630: client denied by server configuration: /home/junglej/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:43:23.807910 2026] [ssl:error] [pid 3716245:tid 3716245] (EAI 2)Name or service not known: [client 144.76.19.72:59492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:23.807935 2026] [ssl:error] [pid 3716245:tid 3716245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:23.861178 2026] [ssl:error] [pid 3718518:tid 3718518] (EAI 2)Name or service not known: [client 144.76.19.72:59504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:23.861210 2026] [ssl:error] [pid 3718518:tid 3718518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:24.524289 2026] [ssl:error] [pid 3709167:tid 3709167] (70014)End of file found: [client 216.73.216.199:11866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:25.314841 2026] [ssl:error] [pid 3717220:tid 3717220] (70014)End of file found: [client 216.73.216.199:29480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:26.919468 2026] [ssl:error] [pid 3722098:tid 3722098] (EAI 2)Name or service not known: [client 144.76.19.72:59506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:26.919508 2026] [ssl:error] [pid 3722098:tid 3722098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:26.972952 2026] [ssl:error] [pid 3718601:tid 3718601] (EAI 2)Name or service not known: [client 144.76.19.72:59512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:26.972991 2026] [ssl:error] [pid 3718601:tid 3718601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:27.543821 2026] [ssl:error] [pid 3718602:tid 3718602] (70014)End of file found: [client 216.73.216.199:51749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:29.756866 2026] [security2:error] [pid 3694657:tid 3694657] [client 185.191.171.13:52534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/head-of-lambeth-council"] [unique_id "amtjEXvUBzIfWa_knfCehwAAAAQ"]
[Thu Jul 30 15:43:30.024813 2026] [ssl:error] [pid 3718649:tid 3718649] (EAI 2)Name or service not known: [client 144.76.19.72:63238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:30.024848 2026] [ssl:error] [pid 3718649:tid 3718649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:30.081227 2026] [ssl:error] [pid 3716678:tid 3716678] (EAI 2)Name or service not known: [client 144.76.19.72:63244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:30.081252 2026] [ssl:error] [pid 3716678:tid 3716678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:30.419908 2026] [lsapi:warn] [pid 3694657:tid 3694657] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:43:31.254589 2026] [ssl:error] [pid 3698691:tid 3698691] (70014)End of file found: [client 216.73.216.199:6123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:31.713077 2026] [ssl:error] [pid 3694657:tid 3694657] (70014)End of file found: [client 216.73.216.199:5156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:32.257192 2026] [ssl:error] [pid 3719975:tid 3719975] (70014)End of file found: [client 216.73.216.199:42418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:33.138739 2026] [ssl:error] [pid 3715083:tid 3715083] (EAI 2)Name or service not known: [client 144.76.19.72:63250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:33.138772 2026] [ssl:error] [pid 3715083:tid 3715083] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:33.193131 2026] [ssl:error] [pid 3719882:tid 3719882] (EAI 2)Name or service not known: [client 144.76.19.72:63264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:33.193168 2026] [ssl:error] [pid 3719882:tid 3719882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:35.076308 2026] [security2:error] [pid 3718602:tid 3718602] [client 85.208.96.210:63822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11543.new.html"] [unique_id "amtjF4K0MtFzbQ45CqF-GAAAACc"]
[Thu Jul 30 15:43:36.246938 2026] [ssl:error] [pid 3709121:tid 3709121] (EAI 2)Name or service not known: [client 144.76.19.72:63274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:36.246973 2026] [ssl:error] [pid 3709121:tid 3709121] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:36.298625 2026] [ssl:error] [pid 3718601:tid 3718601] (EAI 2)Name or service not known: [client 144.76.19.72:63286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:36.298657 2026] [ssl:error] [pid 3718601:tid 3718601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:37.376933 2026] [ssl:error] [pid 3718518:tid 3718518] (70014)End of file found: [client 216.73.216.199:8715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:37.978758 2026] [ssl:error] [pid 3718648:tid 3718648] (70014)End of file found: [client 216.73.216.199:61022] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:38.481502 2026] [ssl:error] [pid 3709121:tid 3709121] (70014)End of file found: [client 216.73.216.199:14655] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:39.354063 2026] [ssl:error] [pid 3709167:tid 3709167] (EAI 2)Name or service not known: [client 144.76.19.72:63296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:39.354126 2026] [ssl:error] [pid 3709167:tid 3709167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:39.407591 2026] [ssl:error] [pid 3719979:tid 3719979] (EAI 2)Name or service not known: [client 144.76.19.72:63310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:39.407624 2026] [ssl:error] [pid 3719979:tid 3719979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:39.516689 2026] [security2:error] [pid 3718601:tid 3718601] [client 47.128.28.88:57748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/harry-potter-and-the-deathly-hallows-part-2-3d/"] [unique_id "amtjG-Zm08JKq4oUAOXnXgAAACQ"]
[Thu Jul 30 15:43:39.517014 2026] [access_compat:error] [pid 3718601:tid 3718601] [client 47.128.28.88:57748] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:43:42.507418 2026] [ssl:error] [pid 3719882:tid 3719882] (EAI 2)Name or service not known: [client 144.76.19.72:53556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:42.507455 2026] [ssl:error] [pid 3719882:tid 3719882] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:42.561939 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:53570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:42.561969 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:44.010466 2026] [ssl:error] [pid 3694657:tid 3694657] (70014)End of file found: [client 216.73.216.199:62776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:44.062030 2026] [security2:error] [pid 3718648:tid 3718648] [client 34.75.156.157:52628] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.github/.env"] [unique_id "amtjIJtPZOhtHSKQEWaDxwAAADk"]
[Thu Jul 30 15:43:44.062467 2026] [security2:error] [pid 3718648:tid 3718648] [client 34.75.156.157:52628] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.github/.env"] [unique_id "amtjIJtPZOhtHSKQEWaDxwAAADk"]
[Thu Jul 30 15:43:44.062689 2026] [security2:error] [pid 3718648:tid 3718648] [client 34.75.156.157:52628] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.github/.env"] [unique_id "amtjIJtPZOhtHSKQEWaDxwAAADk"]
[Thu Jul 30 15:43:44.249381 2026] [security2:error] [pid 3718602:tid 3718602] [client 34.75.156.157:52640] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.git/config"] [unique_id "amtjIIK0MtFzbQ45CqF-GgAAACc"]
[Thu Jul 30 15:43:44.249683 2026] [security2:error] [pid 3718602:tid 3718602] [client 34.75.156.157:52640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.git/config"] [unique_id "amtjIIK0MtFzbQ45CqF-GgAAACc"]
[Thu Jul 30 15:43:44.249853 2026] [security2:error] [pid 3718602:tid 3718602] [client 34.75.156.157:52640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.git/config"] [unique_id "amtjIIK0MtFzbQ45CqF-GgAAACc"]
[Thu Jul 30 15:43:44.367128 2026] [security2:error] [pid 3719882:tid 3719882] [client 34.75.156.157:52692] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/.env"] [unique_id "amtjIN17VgB36tulzUNGpgAAAAY"]
[Thu Jul 30 15:43:44.367473 2026] [security2:error] [pid 3719882:tid 3719882] [client 34.75.156.157:52692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/.env"] [unique_id "amtjIN17VgB36tulzUNGpgAAAAY"]
[Thu Jul 30 15:43:44.367652 2026] [security2:error] [pid 3719882:tid 3719882] [client 34.75.156.157:52692] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/.env"] [unique_id "amtjIN17VgB36tulzUNGpgAAAAY"]
[Thu Jul 30 15:43:44.382035 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/backend/.env"] [unique_id "amtjIMcFju0pTW9JyhckFAAAAAk"]
[Thu Jul 30 15:43:44.382410 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/backend/.env"] [unique_id "amtjIMcFju0pTW9JyhckFAAAAAk"]
[Thu Jul 30 15:43:44.382609 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/backend/.env"] [unique_id "amtjIMcFju0pTW9JyhckFAAAAAk"]
[Thu Jul 30 15:43:44.383971 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.git/HEAD"] [unique_id "amtjIBbFq77dbN_KSeHCUQAAAAs"]
[Thu Jul 30 15:43:44.384300 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.git/HEAD"] [unique_id "amtjIBbFq77dbN_KSeHCUQAAAAs"]
[Thu Jul 30 15:43:44.384487 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.git/HEAD"] [unique_id "amtjIBbFq77dbN_KSeHCUQAAAAs"]
[Thu Jul 30 15:43:44.488140 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.bak"] [unique_id "amtjIMdk4iTtbi_vp4MNVgAAADQ"]
[Thu Jul 30 15:43:44.488473 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.bak"] [unique_id "amtjIMdk4iTtbi_vp4MNVgAAADQ"]
[Thu Jul 30 15:43:44.488649 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.bak"] [unique_id "amtjIMdk4iTtbi_vp4MNVgAAADQ"]
[Thu Jul 30 15:43:44.540163 2026] [security2:error] [pid 3722390:tid 3722390] [client 34.75.156.157:52630] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.old"] [unique_id "amtjIH9TZbYvLcYPHK_g2AAAAA0"]
[Thu Jul 30 15:43:44.540490 2026] [security2:error] [pid 3722390:tid 3722390] [client 34.75.156.157:52630] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.old"] [unique_id "amtjIH9TZbYvLcYPHK_g2AAAAA0"]
[Thu Jul 30 15:43:44.540695 2026] [security2:error] [pid 3722390:tid 3722390] [client 34.75.156.157:52630] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.old"] [unique_id "amtjIH9TZbYvLcYPHK_g2AAAAA0"]
[Thu Jul 30 15:43:44.611953 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/api/.env"] [unique_id "amtjIA-LIjvvlVwCQ4TCdwAAAAc"]
[Thu Jul 30 15:43:44.612463 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/api/.env"] [unique_id "amtjIA-LIjvvlVwCQ4TCdwAAAAc"]
[Thu Jul 30 15:43:44.612734 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/api/.env"] [unique_id "amtjIA-LIjvvlVwCQ4TCdwAAAAc"]
[Thu Jul 30 15:43:44.692665 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.backup"] [unique_id "amtjINP6GSVtqQ_0P2n5DAAAADI"]
[Thu Jul 30 15:43:44.692971 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.backup"] [unique_id "amtjINP6GSVtqQ_0P2n5DAAAADI"]
[Thu Jul 30 15:43:44.693170 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.backup"] [unique_id "amtjINP6GSVtqQ_0P2n5DAAAADI"]
[Thu Jul 30 15:43:44.694232 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/admin/.env"] [unique_id "amtjIMcFju0pTW9JyhckFwAAAAk"]
[Thu Jul 30 15:43:44.694557 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/admin/.env"] [unique_id "amtjIMcFju0pTW9JyhckFwAAAAk"]
[Thu Jul 30 15:43:44.694726 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/admin/.env"] [unique_id "amtjIMcFju0pTW9JyhckFwAAAAk"]
[Thu Jul 30 15:43:44.748333 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.local"] [unique_id "amtjIGR74m6Osyd_t_mjjwAAACE"]
[Thu Jul 30 15:43:44.748696 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.local"] [unique_id "amtjIGR74m6Osyd_t_mjjwAAACE"]
[Thu Jul 30 15:43:44.748903 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.local"] [unique_id "amtjIGR74m6Osyd_t_mjjwAAACE"]
[Thu Jul 30 15:43:44.813662 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.example"] [unique_id "amtjIMdk4iTtbi_vp4MNWQAAADQ"]
[Thu Jul 30 15:43:44.814082 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.example"] [unique_id "amtjIMdk4iTtbi_vp4MNWQAAADQ"]
[Thu Jul 30 15:43:44.814325 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.example"] [unique_id "amtjIMdk4iTtbi_vp4MNWQAAADQ"]
[Thu Jul 30 15:43:44.837261 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.production"] [unique_id "amtjIBbFq77dbN_KSeHCVQAAAAs"]
[Thu Jul 30 15:43:44.837658 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.production"] [unique_id "amtjIBbFq77dbN_KSeHCVQAAAAs"]
[Thu Jul 30 15:43:44.837878 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.production"] [unique_id "amtjIBbFq77dbN_KSeHCVQAAAAs"]
[Thu Jul 30 15:43:44.928458 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amtjIMdk4iTtbi_vp4MNWgAAADQ"]
[Thu Jul 30 15:43:44.928852 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amtjIMdk4iTtbi_vp4MNWgAAADQ"]
[Thu Jul 30 15:43:44.929047 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amtjIMdk4iTtbi_vp4MNWgAAADQ"]
[Thu Jul 30 15:43:45.010931 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/rclone.conf"] [unique_id "amtjIQ-LIjvvlVwCQ4TCegAAAAc"]
[Thu Jul 30 15:43:45.011418 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/rclone.conf"] [unique_id "amtjIQ-LIjvvlVwCQ4TCegAAAAc"]
[Thu Jul 30 15:43:45.011634 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/rclone.conf"] [unique_id "amtjIQ-LIjvvlVwCQ4TCegAAAAc"]
[Thu Jul 30 15:43:45.118146 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/staging/.env"] [unique_id "amtjIQ-LIjvvlVwCQ4TCewAAAAc"]
[Thu Jul 30 15:43:45.118531 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/staging/.env"] [unique_id "amtjIQ-LIjvvlVwCQ4TCewAAAAc"]
[Thu Jul 30 15:43:45.118723 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/staging/.env"] [unique_id "amtjIQ-LIjvvlVwCQ4TCewAAAAc"]
[Thu Jul 30 15:43:45.184816 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.docker"] [unique_id "amtjIcdk4iTtbi_vp4MNXAAAADQ"]
[Thu Jul 30 15:43:45.185221 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.docker"] [unique_id "amtjIcdk4iTtbi_vp4MNXAAAADQ"]
[Thu Jul 30 15:43:45.185447 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.docker"] [unique_id "amtjIcdk4iTtbi_vp4MNXAAAADQ"]
[Thu Jul 30 15:43:45.484018 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/server.key"] [unique_id "amtjIQ-LIjvvlVwCQ4TCfgAAAAc"]
[Thu Jul 30 15:43:45.484463 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/server.key"] [unique_id "amtjIQ-LIjvvlVwCQ4TCfgAAAAc"]
[Thu Jul 30 15:43:45.484657 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/server.key"] [unique_id "amtjIQ-LIjvvlVwCQ4TCfgAAAAc"]
[Thu Jul 30 15:43:45.630838 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.hermes/.env"] [unique_id "amtjIRbFq77dbN_KSeHCXAAAAAs"]
[Thu Jul 30 15:43:45.631161 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.hermes/.env"] [unique_id "amtjIRbFq77dbN_KSeHCXAAAAAs"]
[Thu Jul 30 15:43:45.631347 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.hermes/.env"] [unique_id "amtjIRbFq77dbN_KSeHCXAAAAAs"]
[Thu Jul 30 15:43:45.716032 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/@fs/.env"] [unique_id "amtjIdP6GSVtqQ_0P2n5FQAAADI"]
[Thu Jul 30 15:43:45.716567 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/@fs/.env"] [unique_id "amtjIdP6GSVtqQ_0P2n5FQAAADI"]
[Thu Jul 30 15:43:45.716782 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/@fs/.env"] [unique_id "amtjIdP6GSVtqQ_0P2n5FQAAADI"]
[Thu Jul 30 15:43:45.735149 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.production.bak"] [unique_id "amtjIQ-LIjvvlVwCQ4TCgAAAAAc"]
[Thu Jul 30 15:43:45.735507 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.production.bak"] [unique_id "amtjIQ-LIjvvlVwCQ4TCgAAAAAc"]
[Thu Jul 30 15:43:45.735702 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.production.bak"] [unique_id "amtjIQ-LIjvvlVwCQ4TCgAAAAAc"]
[Thu Jul 30 15:43:45.849389 2026] [authz_core:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] AH01630: client denied by server configuration: /home/chemgalproj/_wildcard_.chemicalgalaxy.co.uk/.htpasswd
[Thu Jul 30 15:43:45.936748 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.svn/entries"] [unique_id "amtjIWR74m6Osyd_t_mjmgAAACE"]
[Thu Jul 30 15:43:45.937128 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.svn/entries"] [unique_id "amtjIWR74m6Osyd_t_mjmgAAACE"]
[Thu Jul 30 15:43:45.937314 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.svn/entries"] [unique_id "amtjIWR74m6Osyd_t_mjmgAAACE"]
[Thu Jul 30 15:43:45.941285 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/ssl/server.key"] [unique_id "amtjIQ-LIjvvlVwCQ4TCggAAAAc"]
[Thu Jul 30 15:43:45.941701 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/ssl/server.key"] [unique_id "amtjIQ-LIjvvlVwCQ4TCggAAAAc"]
[Thu Jul 30 15:43:45.941876 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/ssl/server.key"] [unique_id "amtjIQ-LIjvvlVwCQ4TCggAAAAc"]
[Thu Jul 30 15:43:46.061464 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/privatekey.key"] [unique_id "amtjIsdk4iTtbi_vp4MNZAAAADQ"]
[Thu Jul 30 15:43:46.061877 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/privatekey.key"] [unique_id "amtjIsdk4iTtbi_vp4MNZAAAADQ"]
[Thu Jul 30 15:43:46.062061 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/privatekey.key"] [unique_id "amtjIsdk4iTtbi_vp4MNZAAAADQ"]
[Thu Jul 30 15:43:46.063676 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtjImR74m6Osyd_t_mjmwAAACE"]
[Thu Jul 30 15:43:46.063813 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtjImR74m6Osyd_t_mjmwAAACE"]
[Thu Jul 30 15:43:46.064150 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtjImR74m6Osyd_t_mjmwAAACE"]
[Thu Jul 30 15:43:46.064330 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtjImR74m6Osyd_t_mjmwAAACE"]
[Thu Jul 30 15:43:46.070615 2026] [core:error] [pid 3719819:tid 3719819] (13)Permission denied: [client 216.73.216.199:32756] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:30/subsystem/ttyS3/close_delay
[Thu Jul 30 15:43:46.165611 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amtjImR74m6Osyd_t_mjnAAAACE"]
[Thu Jul 30 15:43:46.166035 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amtjImR74m6Osyd_t_mjnAAAACE"]
[Thu Jul 30 15:43:46.166238 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amtjImR74m6Osyd_t_mjnAAAACE"]
[Thu Jul 30 15:43:46.210949 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.prod.bak"] [unique_id "amtjIscFju0pTW9JyhckJQAAAAk"]
[Thu Jul 30 15:43:46.211332 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.prod.bak"] [unique_id "amtjIscFju0pTW9JyhckJQAAAAk"]
[Thu Jul 30 15:43:46.211542 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.prod.bak"] [unique_id "amtjIscFju0pTW9JyhckJQAAAAk"]
[Thu Jul 30 15:43:46.256375 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/@fs/root/.env"] [unique_id "amtjIsdk4iTtbi_vp4MNZgAAADQ"]
[Thu Jul 30 15:43:46.256863 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/@fs/root/.env"] [unique_id "amtjIsdk4iTtbi_vp4MNZgAAADQ"]
[Thu Jul 30 15:43:46.257062 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/@fs/root/.env"] [unique_id "amtjIsdk4iTtbi_vp4MNZgAAADQ"]
[Thu Jul 30 15:43:46.262108 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtjImR74m6Osyd_t_mjnQAAACE"]
[Thu Jul 30 15:43:46.262495 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtjImR74m6Osyd_t_mjnQAAACE"]
[Thu Jul 30 15:43:46.262745 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtjImR74m6Osyd_t_mjnQAAACE"]
[Thu Jul 30 15:43:46.270891 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/localhost.key"] [unique_id "amtjIg-LIjvvlVwCQ4TChQAAAAc"]
[Thu Jul 30 15:43:46.271303 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/localhost.key"] [unique_id "amtjIg-LIjvvlVwCQ4TChQAAAAc"]
[Thu Jul 30 15:43:46.271497 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/localhost.key"] [unique_id "amtjIg-LIjvvlVwCQ4TChQAAAAc"]
[Thu Jul 30 15:43:46.373779 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/host.key"] [unique_id "amtjIg-LIjvvlVwCQ4TChgAAAAc"]
[Thu Jul 30 15:43:46.374319 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/host.key"] [unique_id "amtjIg-LIjvvlVwCQ4TChgAAAAc"]
[Thu Jul 30 15:43:46.374565 2026] [security2:error] [pid 3722769:tid 3722769] [client 34.75.156.157:52714] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/host.key"] [unique_id "amtjIg-LIjvvlVwCQ4TChgAAAAc"]
[Thu Jul 30 15:43:46.442248 2026] [ssl:error] [pid 3705620:tid 3705620] (70014)End of file found: [client 216.73.216.199:39533] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:46.515965 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.openclaw/.env"] [unique_id "amtjIscFju0pTW9JyhckKAAAAAk"]
[Thu Jul 30 15:43:46.516310 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.openclaw/.env"] [unique_id "amtjIscFju0pTW9JyhckKAAAAAk"]
[Thu Jul 30 15:43:46.516519 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.openclaw/.env"] [unique_id "amtjIscFju0pTW9JyhckKAAAAAk"]
[Thu Jul 30 15:43:46.539211 2026] [lsapi:warn] [pid 3698691:tid 3698691] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:43:46.545800 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/laravel/.env"] [unique_id "amtjItP6GSVtqQ_0P2n5HAAAADI"]
[Thu Jul 30 15:43:46.546159 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/laravel/.env"] [unique_id "amtjItP6GSVtqQ_0P2n5HAAAADI"]
[Thu Jul 30 15:43:46.546341 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/laravel/.env"] [unique_id "amtjItP6GSVtqQ_0P2n5HAAAADI"]
[Thu Jul 30 15:43:46.596134 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/trace.axd"] [unique_id "amtjIsdk4iTtbi_vp4MNaQAAADQ"]
[Thu Jul 30 15:43:46.596658 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/trace.axd"] [unique_id "amtjIsdk4iTtbi_vp4MNaQAAADQ"]
[Thu Jul 30 15:43:46.596875 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/trace.axd"] [unique_id "amtjIsdk4iTtbi_vp4MNaQAAADQ"]
[Thu Jul 30 15:43:46.713827 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/master.key"] [unique_id "amtjIscFju0pTW9JyhckKgAAAAk"]
[Thu Jul 30 15:43:46.714344 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/master.key"] [unique_id "amtjIscFju0pTW9JyhckKgAAAAk"]
[Thu Jul 30 15:43:46.714563 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/master.key"] [unique_id "amtjIscFju0pTW9JyhckKgAAAAk"]
[Thu Jul 30 15:43:46.746936 2026] [ssl:error] [pid 3719819:tid 3719819] (70014)End of file found: [client 216.73.216.199:32756] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:46.762392 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/elmah.axd"] [unique_id "amtjItP6GSVtqQ_0P2n5HgAAADI"]
[Thu Jul 30 15:43:46.762866 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/elmah.axd"] [unique_id "amtjItP6GSVtqQ_0P2n5HgAAADI"]
[Thu Jul 30 15:43:46.763062 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/elmah.axd"] [unique_id "amtjItP6GSVtqQ_0P2n5HgAAADI"]
[Thu Jul 30 15:43:46.813110 2026] [ssl:error] [pid 3722860:tid 3722860] (EAI 2)Name or service not known: [client 144.76.19.72:53574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:46.813152 2026] [ssl:error] [pid 3722860:tid 3722860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:46.837721 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtjIrrrnvjx5hS_2ypHIQAAACo"]
[Thu Jul 30 15:43:46.838078 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtjIrrrnvjx5hS_2ypHIQAAACo"]
[Thu Jul 30 15:43:46.838278 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtjIrrrnvjx5hS_2ypHIQAAACo"]
[Thu Jul 30 15:43:47.164643 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/.env.php"] [unique_id "amtjI7rrnvjx5hS_2ypHJAAAACo"]
[Thu Jul 30 15:43:47.165222 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/.env.php"] [unique_id "amtjI7rrnvjx5hS_2ypHJAAAACo"]
[Thu Jul 30 15:43:47.165512 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/config/.env.php"] [unique_id "amtjI7rrnvjx5hS_2ypHJAAAACo"]
[Thu Jul 30 15:43:47.236203 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.development"] [unique_id "amtjI8dk4iTtbi_vp4MNbwAAADQ"]
[Thu Jul 30 15:43:47.236599 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.development"] [unique_id "amtjI8dk4iTtbi_vp4MNbwAAADQ"]
[Thu Jul 30 15:43:47.236804 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.development"] [unique_id "amtjI8dk4iTtbi_vp4MNbwAAADQ"]
[Thu Jul 30 15:43:47.257537 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtjI7rrnvjx5hS_2ypHJQAAACo"]
[Thu Jul 30 15:43:47.258219 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtjI7rrnvjx5hS_2ypHJQAAACo"]
[Thu Jul 30 15:43:47.258520 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtjI7rrnvjx5hS_2ypHJQAAACo"]
[Thu Jul 30 15:43:47.268031 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.php.bak"] [unique_id "amtjI2R74m6Osyd_t_mjpgAAACE"]
[Thu Jul 30 15:43:47.268444 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.php.bak"] [unique_id "amtjI2R74m6Osyd_t_mjpgAAACE"]
[Thu Jul 30 15:43:47.268656 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.php.bak"] [unique_id "amtjI2R74m6Osyd_t_mjpgAAACE"]
[Thu Jul 30 15:43:47.331805 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.staging"] [unique_id "amtjI8dk4iTtbi_vp4MNcAAAADQ"]
[Thu Jul 30 15:43:47.332209 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.staging"] [unique_id "amtjI8dk4iTtbi_vp4MNcAAAADQ"]
[Thu Jul 30 15:43:47.332406 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.staging"] [unique_id "amtjI8dk4iTtbi_vp4MNcAAAADQ"]
[Thu Jul 30 15:43:47.336981 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/core/.env"] [unique_id "amtjI9P6GSVtqQ_0P2n5IwAAADI"]
[Thu Jul 30 15:43:47.337323 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/core/.env"] [unique_id "amtjI9P6GSVtqQ_0P2n5IwAAADI"]
[Thu Jul 30 15:43:47.337510 2026] [security2:error] [pid 3720355:tid 3720355] [client 34.75.156.157:52702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/core/.env"] [unique_id "amtjI9P6GSVtqQ_0P2n5IwAAADI"]
[Thu Jul 30 15:43:47.376980 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.dev"] [unique_id "amtjI2R74m6Osyd_t_mjpwAAACE"]
[Thu Jul 30 15:43:47.377406 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.dev"] [unique_id "amtjI2R74m6Osyd_t_mjpwAAACE"]
[Thu Jul 30 15:43:47.377622 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.dev"] [unique_id "amtjI2R74m6Osyd_t_mjpwAAACE"]
[Thu Jul 30 15:43:47.407866 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.test"] [unique_id "amtjIxbFq77dbN_KSeHCbAAAAAs"]
[Thu Jul 30 15:43:47.408278 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.test"] [unique_id "amtjIxbFq77dbN_KSeHCbAAAAAs"]
[Thu Jul 30 15:43:47.408507 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.test"] [unique_id "amtjIxbFq77dbN_KSeHCbAAAAAs"]
[Thu Jul 30 15:43:47.429909 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.swp"] [unique_id "amtjI8dk4iTtbi_vp4MNcQAAADQ"]
[Thu Jul 30 15:43:47.430309 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.swp"] [unique_id "amtjI8dk4iTtbi_vp4MNcQAAADQ"]
[Thu Jul 30 15:43:47.430518 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/.env.swp"] [unique_id "amtjI8dk4iTtbi_vp4MNcQAAADQ"]
[Thu Jul 30 15:43:47.641719 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/app/.env"] [unique_id "amtjI8cFju0pTW9JyhckMgAAAAk"]
[Thu Jul 30 15:43:47.642053 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/app/.env"] [unique_id "amtjI8cFju0pTW9JyhckMgAAAAk"]
[Thu Jul 30 15:43:47.642257 2026] [security2:error] [pid 3718518:tid 3718518] [client 34.75.156.157:52716] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/app/.env"] [unique_id "amtjI8cFju0pTW9JyhckMgAAAAk"]
[Thu Jul 30 15:43:47.732993 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/src/.env"] [unique_id "amtjIxbFq77dbN_KSeHCbwAAAAs"]
[Thu Jul 30 15:43:47.733415 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/src/.env"] [unique_id "amtjIxbFq77dbN_KSeHCbwAAAAs"]
[Thu Jul 30 15:43:47.733627 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/src/.env"] [unique_id "amtjIxbFq77dbN_KSeHCbwAAAAs"]
[Thu Jul 30 15:43:47.772198 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/frontend/.env"] [unique_id "amtjI8dk4iTtbi_vp4MNdAAAADQ"]
[Thu Jul 30 15:43:47.772597 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/frontend/.env"] [unique_id "amtjI8dk4iTtbi_vp4MNdAAAADQ"]
[Thu Jul 30 15:43:47.772808 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/frontend/.env"] [unique_id "amtjI8dk4iTtbi_vp4MNdAAAADQ"]
[Thu Jul 30 15:43:48.008252 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/web/.env"] [unique_id "amtjJGR74m6Osyd_t_mjrQAAACE"]
[Thu Jul 30 15:43:48.008609 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/web/.env"] [unique_id "amtjJGR74m6Osyd_t_mjrQAAACE"]
[Thu Jul 30 15:43:48.008804 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/web/.env"] [unique_id "amtjJGR74m6Osyd_t_mjrQAAACE"]
[Thu Jul 30 15:43:48.088978 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/production/.env"] [unique_id "amtjJLrrnvjx5hS_2ypHLQAAACo"]
[Thu Jul 30 15:43:48.089403 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/production/.env"] [unique_id "amtjJLrrnvjx5hS_2ypHLQAAACo"]
[Thu Jul 30 15:43:48.089664 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/production/.env"] [unique_id "amtjJLrrnvjx5hS_2ypHLQAAACo"]
[Thu Jul 30 15:43:48.163022 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/dev/.env"] [unique_id "amtjJBbFq77dbN_KSeHCcwAAAAs"]
[Thu Jul 30 15:43:48.163454 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/dev/.env"] [unique_id "amtjJBbFq77dbN_KSeHCcwAAAAs"]
[Thu Jul 30 15:43:48.163668 2026] [security2:error] [pid 3678921:tid 3678921] [client 34.75.156.157:52682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/dev/.env"] [unique_id "amtjJBbFq77dbN_KSeHCcwAAAAs"]
[Thu Jul 30 15:43:48.184910 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/docker/.env"] [unique_id "amtjJLrrnvjx5hS_2ypHLgAAACo"]
[Thu Jul 30 15:43:48.185320 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/docker/.env"] [unique_id "amtjJLrrnvjx5hS_2ypHLgAAACo"]
[Thu Jul 30 15:43:48.185547 2026] [security2:error] [pid 3718603:tid 3718603] [client 34.75.156.157:52738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/docker/.env"] [unique_id "amtjJLrrnvjx5hS_2ypHLgAAACo"]
[Thu Jul 30 15:43:48.225789 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/public/.env"] [unique_id "amtjJGR74m6Osyd_t_mjrwAAACE"]
[Thu Jul 30 15:43:48.226194 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/public/.env"] [unique_id "amtjJGR74m6Osyd_t_mjrwAAACE"]
[Thu Jul 30 15:43:48.226394 2026] [security2:error] [pid 3716247:tid 3716247] [client 34.75.156.157:52646] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/public/.env"] [unique_id "amtjJGR74m6Osyd_t_mjrwAAACE"]
[Thu Jul 30 15:43:48.248773 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/server/.env"] [unique_id "amtjJMdk4iTtbi_vp4MNeAAAADQ"]
[Thu Jul 30 15:43:48.249185 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/server/.env"] [unique_id "amtjJMdk4iTtbi_vp4MNeAAAADQ"]
[Thu Jul 30 15:43:48.249406 2026] [security2:error] [pid 3720444:tid 3720444] [client 34.75.156.157:52658] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.chemicalgalaxy.co.uk"] [uri "/server/.env"] [unique_id "amtjJMdk4iTtbi_vp4MNeAAAADQ"]
[Thu Jul 30 15:43:48.311178 2026] [ssl:error] [pid 3717187:tid 3717187] (EAI 2)Name or service not known: [client 144.76.19.72:53590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:48.311205 2026] [ssl:error] [pid 3717187:tid 3717187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:48.998941 2026] [security2:error] [pid 3717187:tid 3717187] [client 43.153.10.83:33324] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.info"] [uri "/"] [unique_id "amtjJN3BWQKyQVZlnmfwKgAAACI"]
[Thu Jul 30 15:43:49.399684 2026] [ssl:error] [pid 3716678:tid 3716678] (70014)End of file found: [client 216.73.216.199:38047] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:50.373918 2026] [security2:error] [pid 3718648:tid 3718648] [client 43.153.10.83:33978] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "amtjJptPZOhtHSKQEWaDywAAADk"], referer: http://shelterforum.info
[Thu Jul 30 15:43:51.384288 2026] [ssl:error] [pid 3722973:tid 3722973] (EAI 2)Name or service not known: [client 144.76.19.72:18338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:51.384363 2026] [ssl:error] [pid 3722973:tid 3722973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:51.442237 2026] [ssl:error] [pid 3713977:tid 3713977] (EAI 2)Name or service not known: [client 144.76.19.72:18342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:51.442267 2026] [ssl:error] [pid 3713977:tid 3713977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:51.707616 2026] [authz_core:error] [pid 3722975:tid 3722975] [client 172.71.155.146:10166] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 15:43:51.707684 2026] [authz_core:error] [pid 3722975:tid 3722975] [client 172.71.155.146:10166] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 15:43:51.893055 2026] [ssl:error] [pid 3722978:tid 3722978] (70014)End of file found: [client 216.73.216.199:63476] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:53.697639 2026] [security2:error] [pid 3718601:tid 3718601] [client 94.154.43.184:37236] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "actsa.co.uk.acthoroughbreds.com"] [uri "/.env"] [unique_id "amtjKeZm08JKq4oUAOXnYwAAACQ"]
[Thu Jul 30 15:43:53.697846 2026] [security2:error] [pid 3718601:tid 3718601] [client 94.154.43.184:37236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "actsa.co.uk.acthoroughbreds.com"] [uri "/.env"] [unique_id "amtjKeZm08JKq4oUAOXnYwAAACQ"]
[Thu Jul 30 15:43:53.698059 2026] [security2:error] [pid 3718601:tid 3718601] [client 94.154.43.184:37236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "actsa.co.uk.acthoroughbreds.com"] [uri "/.env"] [unique_id "amtjKeZm08JKq4oUAOXnYwAAACQ"]
[Thu Jul 30 15:43:54.177460 2026] [security2:error] [pid 3718647:tid 3718647] [client 114.119.142.20:39829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,14,19/request_format~html"] [unique_id "amtjKkS5wEF_OmNru3moXQAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~30,14/request_format~html
[Thu Jul 30 15:43:54.495944 2026] [ssl:error] [pid 3698691:tid 3698691] (EAI 2)Name or service not known: [client 144.76.19.72:18346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:54.495970 2026] [ssl:error] [pid 3698691:tid 3698691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:54.550382 2026] [ssl:error] [pid 3722973:tid 3722973] (EAI 2)Name or service not known: [client 144.76.19.72:18356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:54.550405 2026] [ssl:error] [pid 3722973:tid 3722973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:55.102332 2026] [security2:error] [pid 3722977:tid 3722977] [client 114.119.142.20:39841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,14,19/request_format~html"] [unique_id "amtjK15RdUkQ4o_zrZtWCwAAAEQ"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~30,14/request_format~html
[Thu Jul 30 15:43:55.841585 2026] [core:error] [pid 3722984:tid 3722984] (13)Permission denied: [client 216.73.216.199:61065] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:27/subsystem/ttyS2/flags
[Thu Jul 30 15:43:56.143383 2026] [ssl:error] [pid 3722984:tid 3722984] (70014)End of file found: [client 216.73.216.199:61065] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:43:56.645838 2026] [core:error] [pid 3698691:tid 3698691] (13)Permission denied: [client 216.73.216.199:36180] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS3/flags
[Thu Jul 30 15:43:57.603535 2026] [ssl:error] [pid 3722390:tid 3722390] (EAI 2)Name or service not known: [client 144.76.19.72:18372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:57.603573 2026] [ssl:error] [pid 3722390:tid 3722390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:57.656846 2026] [ssl:error] [pid 3718649:tid 3718649] (EAI 2)Name or service not known: [client 144.76.19.72:18384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:43:57.656870 2026] [ssl:error] [pid 3718649:tid 3718649] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:43:59.076521 2026] [core:error] [pid 3701241:tid 3701241] (13)Permission denied: [client 216.73.216.199:5890] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/13:66/subsystem/input4/device/driver/unbind
[Thu Jul 30 15:43:59.322203 2026] [cgi:error] [pid 3722924:tid 3722924] [client 37.59.21.100:44870] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:43:59.471491 2026] [ssl:error] [pid 3701241:tid 3701241] (70014)End of file found: [client 216.73.216.199:5890] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:00.713141 2026] [ssl:error] [pid 3722924:tid 3722924] (EAI 2)Name or service not known: [client 144.76.19.72:64450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:00.713179 2026] [ssl:error] [pid 3722924:tid 3722924] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:00.770267 2026] [ssl:error] [pid 3722970:tid 3722970] (EAI 2)Name or service not known: [client 144.76.19.72:64458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:00.770304 2026] [ssl:error] [pid 3722970:tid 3722970] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:01.758255 2026] [lsapi:warn] [pid 3709167:tid 3709167] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:44:03.261210 2026] [security2:error] [pid 3709167:tid 3709167] [client 122.51.236.174:45636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amtjM2AdpQFzBvvAo6mYSgAAABs"]
[Thu Jul 30 15:44:03.824973 2026] [ssl:error] [pid 3722860:tid 3722860] (EAI 2)Name or service not known: [client 144.76.19.72:64464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:03.825007 2026] [ssl:error] [pid 3722860:tid 3722860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:03.880778 2026] [ssl:error] [pid 3722973:tid 3722973] (EAI 2)Name or service not known: [client 144.76.19.72:64474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:03.880805 2026] [ssl:error] [pid 3722973:tid 3722973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:04.095421 2026] [ssl:error] [pid 3698691:tid 3698691] (70014)End of file found: [client 216.73.216.199:36180] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:04.994655 2026] [ssl:error] [pid 3722985:tid 3722985] (70014)End of file found: [client 216.73.216.199:60699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:05.719858 2026] [security2:error] [pid 3718518:tid 3718518] [client 122.51.236.174:46666] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wmsfirearmstraining.com"] [uri "/"] [unique_id "amtjNccFju0pTW9JyhckOwAAAAk"], referer: http://www.wmsfirearmstraining.com
[Thu Jul 30 15:44:06.934056 2026] [ssl:error] [pid 3719979:tid 3719979] (EAI 2)Name or service not known: [client 144.76.19.72:64482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:06.934099 2026] [ssl:error] [pid 3719979:tid 3719979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:06.991325 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:64486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:06.991373 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:07.101923 2026] [ssl:error] [pid 3722390:tid 3722390] (70014)End of file found: [client 216.73.216.199:43414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:09.401099 2026] [security2:error] [pid 3687959:tid 3687959] [client 176.236.37.111:10803] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjOdL_Boxc0YEdwK0ENwAAABw"]
[Thu Jul 30 15:44:09.401151 2026] [security2:error] [pid 3687959:tid 3687959] [client 176.236.37.111:10803] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjOdL_Boxc0YEdwK0ENwAAABw"]
[Thu Jul 30 15:44:09.401421 2026] [security2:error] [pid 3687959:tid 3687959] [client 176.236.37.111:10803] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjOdL_Boxc0YEdwK0ENwAAABw"]
[Thu Jul 30 15:44:10.045522 2026] [ssl:error] [pid 3717264:tid 3717264] (EAI 2)Name or service not known: [client 144.76.19.72:20632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:10.045566 2026] [ssl:error] [pid 3717264:tid 3717264] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:10.101387 2026] [ssl:error] [pid 3719978:tid 3719978] (EAI 2)Name or service not known: [client 144.76.19.72:20646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:10.101418 2026] [ssl:error] [pid 3719978:tid 3719978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:10.737301 2026] [security2:error] [pid 3698691:tid 3698691] [client 43.165.198.5:60014] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/"] [unique_id "amtjOky3AOthSnqZosTPQAAAABY"]
[Thu Jul 30 15:44:10.857724 2026] [security2:error] [pid 3722769:tid 3722769] [client 47.76.103.115:50373] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjOg-LIjvvlVwCQ4TCjgAAAAc"]
[Thu Jul 30 15:44:10.857778 2026] [security2:error] [pid 3722769:tid 3722769] [client 47.76.103.115:50373] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjOg-LIjvvlVwCQ4TCjgAAAAc"]
[Thu Jul 30 15:44:10.858055 2026] [security2:error] [pid 3722769:tid 3722769] [client 47.76.103.115:50373] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjOg-LIjvvlVwCQ4TCjgAAAAc"]
[Thu Jul 30 15:44:10.956991 2026] [ssl:error] [pid 3718647:tid 3718647] (70014)End of file found: [client 216.73.216.199:45381] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:11.672343 2026] [ssl:error] [pid 3720444:tid 3720444] (70014)End of file found: [client 216.73.216.199:8122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:12.876923 2026] [ssl:error] [pid 3722979:tid 3722979] (70014)End of file found: [client 216.73.216.199:35791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:12.891933 2026] [security2:error] [pid 3718649:tid 3718649] [client 185.191.171.18:43272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9758.0.html"] [unique_id "amtjPKovmLn7zsnccY15vwAAADo"]
[Thu Jul 30 15:44:13.156307 2026] [ssl:error] [pid 3698691:tid 3698691] (EAI 2)Name or service not known: [client 144.76.19.72:20660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:13.156334 2026] [ssl:error] [pid 3698691:tid 3698691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:13.212415 2026] [ssl:error] [pid 3718601:tid 3718601] (EAI 2)Name or service not known: [client 144.76.19.72:20668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:13.212447 2026] [ssl:error] [pid 3718601:tid 3718601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:13.766878 2026] [security2:error] [pid 3722390:tid 3722390] [client 47.76.103.115:39803] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjPX9TZbYvLcYPHK_g6gAAAA0"]
[Thu Jul 30 15:44:13.766924 2026] [security2:error] [pid 3722390:tid 3722390] [client 47.76.103.115:39803] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjPX9TZbYvLcYPHK_g6gAAAA0"]
[Thu Jul 30 15:44:13.767197 2026] [security2:error] [pid 3722390:tid 3722390] [client 47.76.103.115:39803] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjPX9TZbYvLcYPHK_g6gAAAA0"]
[Thu Jul 30 15:44:16.267218 2026] [ssl:error] [pid 3718555:tid 3718555] (EAI 2)Name or service not known: [client 144.76.19.72:20670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:16.267252 2026] [ssl:error] [pid 3718555:tid 3718555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:16.320644 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:20678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:16.320675 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:17.344462 2026] [lsapi:warn] [pid 3722812:tid 3722812] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:44:19.429876 2026] [ssl:error] [pid 3718555:tid 3718555] (EAI 2)Name or service not known: [client 144.76.19.72:20690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:19.429916 2026] [ssl:error] [pid 3718555:tid 3718555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:19.483182 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:20700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:19.483206 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:20.732965 2026] [ssl:error] [pid 3716157:tid 3716157] (70014)End of file found: [client 216.73.216.199:62154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:21.038122 2026] [ssl:error] [pid 3718649:tid 3718649] (70014)End of file found: [client 216.73.216.199:46144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:22.248513 2026] [ssl:error] [pid 3722390:tid 3722390] (70014)End of file found: [client 216.73.216.199:3235] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:22.552017 2026] [ssl:error] [pid 3722925:tid 3722925] (EAI 2)Name or service not known: [client 144.76.19.72:40758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:22.552061 2026] [ssl:error] [pid 3722925:tid 3722925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:22.635735 2026] [ssl:error] [pid 3722980:tid 3722980] (EAI 2)Name or service not known: [client 144.76.19.72:40768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:22.635767 2026] [ssl:error] [pid 3722980:tid 3722980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:22.851470 2026] [access_compat:error] [pid 3701241:tid 3701241] [client 45.158.164.139:41846] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:44:25.454088 2026] [cgi:error] [pid 3722971:tid 3722971] [client 20.104.22.47:55380] AH02812: stderr from /home/mjsser/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:44:25.699450 2026] [ssl:error] [pid 3719979:tid 3719979] (EAI 2)Name or service not known: [client 144.76.19.72:40774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:25.699482 2026] [ssl:error] [pid 3719979:tid 3719979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:25.754420 2026] [ssl:error] [pid 3720444:tid 3720444] (EAI 2)Name or service not known: [client 144.76.19.72:40788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:25.754455 2026] [ssl:error] [pid 3720444:tid 3720444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:26.066195 2026] [ssl:error] [pid 3719979:tid 3719979] (70014)End of file found: [client 216.73.216.199:7569] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:26.604873 2026] [access_compat:error] [pid 3722981:tid 3722981] [client 152.228.220.143:36658] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/robin-hood
[Thu Jul 30 15:44:26.604959 2026] [access_compat:error] [pid 3722981:tid 3722981] [client 152.228.220.143:36658] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:44:27.068764 2026] [ssl:error] [pid 3716157:tid 3716157] (70014)End of file found: [client 216.73.216.199:31685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:27.271286 2026] [lsapi:error] [pid 3724384:tid 3724384] [client 103.134.216.89:52906] [host www.bigbangburgerbar.co.uk] Backend fatal error: PHP Fatal error:  Allowed memory size of 33554432 bytes exhausted (tried to allocate 11211687 bytes) in /home/bigbangb/public_html/Forum/Sources/QueryString.php on line 445\n, referer: http://www.bigbangburgerbar.co.uk
[Thu Jul 30 15:44:28.063921 2026] [lsapi:warn] [pid 3689471:tid 3689471] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:44:28.570078 2026] [ssl:error] [pid 3722976:tid 3722976] (70014)End of file found: [client 216.73.216.199:48437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:28.809904 2026] [ssl:error] [pid 3720444:tid 3720444] (EAI 2)Name or service not known: [client 144.76.19.72:40790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:28.809936 2026] [ssl:error] [pid 3720444:tid 3720444] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:28.864275 2026] [ssl:error] [pid 3722985:tid 3722985] (EAI 2)Name or service not known: [client 144.76.19.72:40804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:28.864310 2026] [ssl:error] [pid 3722985:tid 3722985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:29.753956 2026] [core:error] [pid 3718602:tid 3718602] [client 66.249.66.8:44299] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:44:29.753983 2026] [core:error] [pid 3718602:tid 3718602] [client 66.249.66.8:44299] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:44:30.522467 2026] [security2:error] [pid 3722922:tid 3722922] [client 185.191.171.19:25242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/dede-mcguire-husband"] [unique_id "amtjTrGvTC08vHgcj9xzIgAAACM"]
[Thu Jul 30 15:44:30.557087 2026] [security2:error] [pid 3718602:tid 3718602] [client 43.162.103.213:44474] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "devwebsitehub.com"] [uri "/"] [unique_id "amtjToK0MtFzbQ45CqF-JQAAACc"]
[Thu Jul 30 15:44:31.924513 2026] [ssl:error] [pid 3722978:tid 3722978] (EAI 2)Name or service not known: [client 144.76.19.72:51552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:31.924549 2026] [ssl:error] [pid 3722978:tid 3722978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:31.979115 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:51562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:31.979161 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:32.440857 2026] [security2:error] [pid 3722861:tid 3722861] [client 43.160.219.138:59612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.stopfordsackville.com"] [uri "/"] [unique_id "amtjUCDMLBbus6ChxQNg9QAAACA"]
[Thu Jul 30 15:44:32.441955 2026] [authz_core:error] [pid 3722861:tid 3722861] [client 43.160.219.138:59612] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 15:44:32.771404 2026] [ssl:error] [pid 3718601:tid 3718601] (70014)End of file found: [client 216.73.216.199:1251] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:34.871659 2026] [ssl:error] [pid 3689471:tid 3689471] (70014)End of file found: [client 216.73.216.199:9090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:35.035621 2026] [ssl:error] [pid 3724783:tid 3724783] (EAI 2)Name or service not known: [client 144.76.19.72:51578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:35.035675 2026] [ssl:error] [pid 3724783:tid 3724783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:35.093585 2026] [ssl:error] [pid 3722979:tid 3722979] (EAI 2)Name or service not known: [client 144.76.19.72:51592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:35.093628 2026] [ssl:error] [pid 3722979:tid 3722979] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:35.774702 2026] [ssl:error] [pid 3724783:tid 3724783] (70014)End of file found: [client 216.73.216.199:45786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:38.149842 2026] [ssl:error] [pid 3722924:tid 3722924] (EAI 2)Name or service not known: [client 144.76.19.72:51602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:38.149886 2026] [ssl:error] [pid 3722924:tid 3722924] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:38.273214 2026] [ssl:error] [pid 3722860:tid 3722860] (EAI 2)Name or service not known: [client 144.76.19.72:51616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:38.273254 2026] [ssl:error] [pid 3722860:tid 3722860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:39.073190 2026] [security2:error] [pid 3694657:tid 3694657] [client 124.29.253.70:12111] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjV3vUBzIfWa_knfCengAAAAQ"]
[Thu Jul 30 15:44:39.073251 2026] [security2:error] [pid 3694657:tid 3694657] [client 124.29.253.70:12111] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjV3vUBzIfWa_knfCengAAAAQ"]
[Thu Jul 30 15:44:39.073605 2026] [security2:error] [pid 3694657:tid 3694657] [client 124.29.253.70:12111] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjV3vUBzIfWa_knfCengAAAAQ"]
[Thu Jul 30 15:44:41.139561 2026] [lsapi:warn] [pid 3698691:tid 3698691] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:44:41.375881 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:53588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:41.375909 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:41.427329 2026] [ssl:error] [pid 3722976:tid 3722976] (EAI 2)Name or service not known: [client 144.76.19.72:53600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:41.427382 2026] [ssl:error] [pid 3722976:tid 3722976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:42.498739 2026] [security2:error] [pid 3724783:tid 3724783] [client 162.14.66.219:54440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-narvi.com"] [uri "/"] [unique_id "amtjWqNZtKPZ2fQiA8AyPgAAAA4"]
[Thu Jul 30 15:44:42.562988 2026] [security2:error] [pid 3724782:tid 3724782] [client 201.141.97.223:52160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjWincdSFTtaUc-YYzNAAAAAs"]
[Thu Jul 30 15:44:42.563037 2026] [security2:error] [pid 3724782:tid 3724782] [client 201.141.97.223:52160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjWincdSFTtaUc-YYzNAAAAAs"]
[Thu Jul 30 15:44:42.563308 2026] [security2:error] [pid 3724782:tid 3724782] [client 201.141.97.223:52160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjWincdSFTtaUc-YYzNAAAAAs"]
[Thu Jul 30 15:44:43.604863 2026] [ssl:error] [pid 3722981:tid 3722981] (70014)End of file found: [client 216.73.216.199:36337] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:44.204112 2026] [ssl:error] [pid 3719819:tid 3719819] (70014)End of file found: [client 216.73.216.199:44326] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:44.481494 2026] [ssl:error] [pid 3717304:tid 3717304] (EAI 2)Name or service not known: [client 144.76.19.72:53614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:44.481531 2026] [ssl:error] [pid 3717304:tid 3717304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:44.534510 2026] [ssl:error] [pid 3724782:tid 3724782] (EAI 2)Name or service not known: [client 144.76.19.72:53628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:44.534543 2026] [ssl:error] [pid 3724782:tid 3724782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:46.523246 2026] [security2:error] [pid 3722922:tid 3722922] [client 114.119.136.208:47453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.junglejacks.co.uk"] [uri "/wp-content/uploads/2014/02/monkeyimage.jpg"] [unique_id "amtjXrGvTC08vHgcj9xzkgAAACM"], referer: https://www.junglejacks.co.uk/opening-times/
[Thu Jul 30 15:44:46.621976 2026] [ssl:error] [pid 3722390:tid 3722390] (70014)End of file found: [client 216.73.216.199:26347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:47.142688 2026] [security2:error] [pid 3722978:tid 3722978] [client 41.13.74.190:62750] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjX1I7kMtqSQhdMGbQcQAAAEU"]
[Thu Jul 30 15:44:47.142740 2026] [security2:error] [pid 3722978:tid 3722978] [client 41.13.74.190:62750] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjX1I7kMtqSQhdMGbQcQAAAEU"]
[Thu Jul 30 15:44:47.142986 2026] [security2:error] [pid 3722978:tid 3722978] [client 41.13.74.190:62750] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjX1I7kMtqSQhdMGbQcQAAAEU"]
[Thu Jul 30 15:44:47.592570 2026] [ssl:error] [pid 3722978:tid 3722978] (EAI 2)Name or service not known: [client 144.76.19.72:53644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:47.592607 2026] [ssl:error] [pid 3722978:tid 3722978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:47.644604 2026] [ssl:error] [pid 3724294:tid 3724294] (EAI 2)Name or service not known: [client 144.76.19.72:53650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:47.644639 2026] [ssl:error] [pid 3724294:tid 3724294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:48.474443 2026] [security2:error] [pid 3722859:tid 3722859] [client 47.128.127.32:39408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amtjYP1fMfQ3I68nN4YYmAAAAB4"]
[Thu Jul 30 15:44:49.640640 2026] [ssl:error] [pid 3722922:tid 3722922] (70014)End of file found: [client 216.73.216.199:34398] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:50.195100 2026] [security2:error] [pid 3718602:tid 3718602] [client 185.226.232.105:33180] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "www.wurlitzer.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtjYoK0MtFzbQ45CqF-KQAAACc"]
[Thu Jul 30 15:44:50.527025 2026] [authz_core:error] [pid 3720355:tid 3720355] [client 172.202.95.21:34642] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 15:44:50.700695 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:19444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:50.700744 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:50.752310 2026] [ssl:error] [pid 3717304:tid 3717304] (EAI 2)Name or service not known: [client 144.76.19.72:19456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:50.752343 2026] [ssl:error] [pid 3717304:tid 3717304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:51.001760 2026] [security2:error] [pid 3722924:tid 3722924] [client 129.159.56.14:53906] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "amtjYySvU4cEwYUdMbJ6NwAAACk"]
[Thu Jul 30 15:44:51.001953 2026] [security2:error] [pid 3722924:tid 3722924] [client 129.159.56.14:53906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "amtjYySvU4cEwYUdMbJ6NwAAACk"]
[Thu Jul 30 15:44:51.002180 2026] [security2:error] [pid 3722924:tid 3722924] [client 129.159.56.14:53906] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.nineteenthirtythree.butteredcat.com"] [uri "/.env"] [unique_id "amtjYySvU4cEwYUdMbJ6NwAAACk"]
[Thu Jul 30 15:44:51.402054 2026] [security2:error] [pid 3698691:tid 3698691] [client 43.161.234.148:34246] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "amtjY0y3AOthSnqZosTPTQAAABY"]
[Thu Jul 30 15:44:51.446774 2026] [ssl:error] [pid 3722812:tid 3722812] (70014)End of file found: [client 216.73.216.199:14602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:52.646451 2026] [ssl:error] [pid 3719819:tid 3719819] (70014)End of file found: [client 216.73.216.199:49029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:53.823584 2026] [ssl:error] [pid 3717307:tid 3717307] (EAI 2)Name or service not known: [client 144.76.19.72:19464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:53.823648 2026] [ssl:error] [pid 3717307:tid 3717307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:53.881421 2026] [ssl:error] [pid 3709167:tid 3709167] (EAI 2)Name or service not known: [client 144.76.19.72:19468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:53.881451 2026] [ssl:error] [pid 3709167:tid 3709167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:54.503488 2026] [security2:error] [pid 3722985:tid 3722985] [client 43.161.234.148:37956] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtjZonhkiTlApF8BVAGygAAAEw"], referer: http://purple-childcare.co.uk
[Thu Jul 30 15:44:54.960185 2026] [ssl:error] [pid 3722860:tid 3722860] (70014)End of file found: [client 216.73.216.199:60919] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:56.284228 2026] [lsapi:warn] [pid 3698691:tid 3698691] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:44:56.944117 2026] [ssl:error] [pid 3717307:tid 3717307] (EAI 2)Name or service not known: [client 144.76.19.72:19476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:56.944167 2026] [ssl:error] [pid 3717307:tid 3717307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:57.035475 2026] [ssl:error] [pid 3724782:tid 3724782] (EAI 2)Name or service not known: [client 144.76.19.72:19480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:44:57.035515 2026] [ssl:error] [pid 3724782:tid 3724782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:44:58.370437 2026] [ssl:error] [pid 3715317:tid 3715317] (70014)End of file found: [client 216.73.216.199:9191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:44:58.865511 2026] [ssl:error] [pid 3717307:tid 3717307] (70014)End of file found: [client 216.73.216.199:1176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:00.088094 2026] [ssl:error] [pid 3725422:tid 3725422] (EAI 2)Name or service not known: [client 144.76.19.72:53440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:00.088160 2026] [ssl:error] [pid 3725422:tid 3725422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:00.140042 2026] [ssl:error] [pid 3719819:tid 3719819] (EAI 2)Name or service not known: [client 144.76.19.72:53444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:00.140103 2026] [ssl:error] [pid 3719819:tid 3719819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:00.958256 2026] [ssl:error] [pid 3722924:tid 3722924] (70014)End of file found: [client 216.73.216.199:55791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:03.193666 2026] [ssl:error] [pid 3722925:tid 3722925] (EAI 2)Name or service not known: [client 144.76.19.72:53452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:03.193711 2026] [ssl:error] [pid 3722925:tid 3722925] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:03.249832 2026] [ssl:error] [pid 3722860:tid 3722860] (EAI 2)Name or service not known: [client 144.76.19.72:53464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:03.249879 2026] [ssl:error] [pid 3722860:tid 3722860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:03.523375 2026] [security2:error] [pid 3722390:tid 3722390] [client 179.51.99.213:33598] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjb39TZbYvLcYPHK_hAgAAAA0"]
[Thu Jul 30 15:45:03.523430 2026] [security2:error] [pid 3722390:tid 3722390] [client 179.51.99.213:33598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjb39TZbYvLcYPHK_hAgAAAA0"]
[Thu Jul 30 15:45:03.523705 2026] [security2:error] [pid 3722390:tid 3722390] [client 179.51.99.213:33598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjb39TZbYvLcYPHK_hAgAAAA0"]
[Thu Jul 30 15:45:03.859163 2026] [ssl:error] [pid 3722860:tid 3722860] (70014)End of file found: [client 216.73.216.199:62461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:05.475247 2026] [ssl:error] [pid 3719819:tid 3719819] (70014)End of file found: [client 216.73.216.199:17548] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:06.213664 2026] [security2:error] [pid 3692608:tid 3692608] [client 182.189.254.6:42456] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjclTBhqQvZfl7j_pVxwAAABE"]
[Thu Jul 30 15:45:06.213715 2026] [security2:error] [pid 3692608:tid 3692608] [client 182.189.254.6:42456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjclTBhqQvZfl7j_pVxwAAABE"]
[Thu Jul 30 15:45:06.213957 2026] [security2:error] [pid 3692608:tid 3692608] [client 182.189.254.6:42456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjclTBhqQvZfl7j_pVxwAAABE"]
[Thu Jul 30 15:45:06.312685 2026] [ssl:error] [pid 3725422:tid 3725422] (EAI 2)Name or service not known: [client 144.76.19.72:53476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:06.312731 2026] [ssl:error] [pid 3725422:tid 3725422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:06.365926 2026] [ssl:error] [pid 3687959:tid 3687959] (EAI 2)Name or service not known: [client 144.76.19.72:53484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:06.365961 2026] [ssl:error] [pid 3687959:tid 3687959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:06.979040 2026] [ssl:error] [pid 3724294:tid 3724294] (70014)End of file found: [client 216.73.216.199:34329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:07.220504 2026] [authz_core:error] [pid 3725422:tid 3725422] [client 66.249.66.35:59354] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:45:07.223379 2026] [authz_core:error] [pid 3725422:tid 3725422] [client 66.249.66.35:59354] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:45:08.823496 2026] [lsapi:warn] [pid 3722976:tid 3722976] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:45:09.422382 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:53496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:09.422454 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:09.477456 2026] [ssl:error] [pid 3722860:tid 3722860] (EAI 2)Name or service not known: [client 144.76.19.72:53502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:09.477490 2026] [ssl:error] [pid 3722860:tid 3722860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:09.661209 2026] [security2:error] [pid 3689471:tid 3689471] [client 102.159.217.30:35252] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjdV2gNNpmfjosRgpPwwAAACs"]
[Thu Jul 30 15:45:09.661258 2026] [security2:error] [pid 3689471:tid 3689471] [client 102.159.217.30:35252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjdV2gNNpmfjosRgpPwwAAACs"]
[Thu Jul 30 15:45:09.661501 2026] [security2:error] [pid 3689471:tid 3689471] [client 102.159.217.30:35252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjdV2gNNpmfjosRgpPwwAAACs"]
[Thu Jul 30 15:45:11.513234 2026] [ssl:error] [pid 3724783:tid 3724783] (70014)End of file found: [client 216.73.216.199:34660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:12.110397 2026] [core:error] [pid 3720355:tid 3720355] (13)Permission denied: [client 216.73.216.199:64881] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/processor/uevent
[Thu Jul 30 15:45:12.532582 2026] [ssl:error] [pid 3717307:tid 3717307] (EAI 2)Name or service not known: [client 144.76.19.72:45330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:12.532628 2026] [ssl:error] [pid 3717307:tid 3717307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:12.586895 2026] [ssl:error] [pid 3709167:tid 3709167] (EAI 2)Name or service not known: [client 144.76.19.72:45332] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:12.586928 2026] [ssl:error] [pid 3709167:tid 3709167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:12.904435 2026] [authz_core:error] [pid 3724294:tid 3724294] [client 66.249.66.33:38477] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:45:12.907117 2026] [authz_core:error] [pid 3724294:tid 3724294] [client 66.249.66.33:38477] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:45:14.518410 2026] [ssl:error] [pid 3720355:tid 3720355] (70014)End of file found: [client 216.73.216.199:64881] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:15.401064 2026] [security2:error] [pid 3718518:tid 3718518] [client 213.32.68.81:50918] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje8cFju0pTW9JyhckTwAAAAk"]
[Thu Jul 30 15:45:15.401128 2026] [security2:error] [pid 3718518:tid 3718518] [client 213.32.68.81:50918] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje8cFju0pTW9JyhckTwAAAAk"]
[Thu Jul 30 15:45:15.401378 2026] [security2:error] [pid 3718518:tid 3718518] [client 213.32.68.81:50918] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtje8cFju0pTW9JyhckTwAAAAk"]
[Thu Jul 30 15:45:15.454483 2026] [security2:error] [pid 3722978:tid 3722978] [client 141.94.95.76:52598] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje1I7kMtqSQhdMGbQeQAAAEU"]
[Thu Jul 30 15:45:15.454546 2026] [security2:error] [pid 3722978:tid 3722978] [client 141.94.95.76:52598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje1I7kMtqSQhdMGbQeQAAAEU"]
[Thu Jul 30 15:45:15.454860 2026] [security2:error] [pid 3722978:tid 3722978] [client 141.94.95.76:52598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtje1I7kMtqSQhdMGbQeQAAAEU"]
[Thu Jul 30 15:45:15.641767 2026] [ssl:error] [pid 3722971:tid 3722971] (EAI 2)Name or service not known: [client 144.76.19.72:45338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:15.641807 2026] [ssl:error] [pid 3722971:tid 3722971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:15.664144 2026] [security2:error] [pid 3717304:tid 3717304] [client 141.95.54.132:41774] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje65rpPzxM1XPQ7XquwAAADA"]
[Thu Jul 30 15:45:15.664194 2026] [security2:error] [pid 3717304:tid 3717304] [client 141.95.54.132:41774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje65rpPzxM1XPQ7XquwAAADA"]
[Thu Jul 30 15:45:15.664460 2026] [security2:error] [pid 3717304:tid 3717304] [client 141.95.54.132:41774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtje65rpPzxM1XPQ7XquwAAADA"]
[Thu Jul 30 15:45:15.698311 2026] [ssl:error] [pid 3725422:tid 3725422] (EAI 2)Name or service not known: [client 144.76.19.72:45342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:15.698338 2026] [ssl:error] [pid 3725422:tid 3725422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:15.811324 2026] [security2:error] [pid 3722980:tid 3722980] [client 52.112.238.193:53568] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amtje5xLNAsbMe22XxB-OQAAAEc"]
[Thu Jul 30 15:45:15.811558 2026] [security2:error] [pid 3722980:tid 3722980] [client 52.112.238.193:53568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amtje5xLNAsbMe22XxB-OQAAAEc"]
[Thu Jul 30 15:45:15.842039 2026] [security2:error] [pid 3722980:tid 3722980] [client 52.112.238.193:53568] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "autodiscover.tompalmer.co.uk"] [uri "/403.shtml"] [unique_id "amtje5xLNAsbMe22XxB-OQAAAEc"]
[Thu Jul 30 15:45:15.861892 2026] [security2:error] [pid 3725422:tid 3725422] [client 51.77.210.64:33972] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje08MaFOiw9n5IyTw4wAAAAY"]
[Thu Jul 30 15:45:15.861933 2026] [security2:error] [pid 3725422:tid 3725422] [client 51.77.210.64:33972] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtje08MaFOiw9n5IyTw4wAAAAY"]
[Thu Jul 30 15:45:15.862193 2026] [security2:error] [pid 3725422:tid 3725422] [client 51.77.210.64:33972] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtje08MaFOiw9n5IyTw4wAAAAY"]
[Thu Jul 30 15:45:16.645750 2026] [ssl:error] [pid 3719881:tid 3719881] (70014)End of file found: [client 216.73.216.199:57531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:18.081180 2026] [security2:error] [pid 3698691:tid 3698691] [client 85.208.96.212:16666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10776.0/prev_next,next.html"] [unique_id "amtjfky3AOthSnqZosTPWAAAABY"]
[Thu Jul 30 15:45:18.204123 2026] [security2:error] [pid 3694657:tid 3694657] [client 114.119.135.136:34789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,104/request_format~html"] [unique_id "amtjfnvUBzIfWa_knfCetQAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 15:45:18.753927 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:45354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:18.753961 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:18.808127 2026] [ssl:error] [pid 3724294:tid 3724294] (EAI 2)Name or service not known: [client 144.76.19.72:45366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:18.808161 2026] [ssl:error] [pid 3724294:tid 3724294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:20.326175 2026] [security2:error] [pid 3724294:tid 3724294] [client 114.119.135.136:34797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,104/request_format~html"] [unique_id "amtjgJHwBb-NoWF6a4JQ1gAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 15:45:21.859716 2026] [ssl:error] [pid 3718518:tid 3718518] (EAI 2)Name or service not known: [client 144.76.19.72:63230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:21.859746 2026] [ssl:error] [pid 3718518:tid 3718518] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:21.911272 2026] [ssl:error] [pid 3722978:tid 3722978] (EAI 2)Name or service not known: [client 144.76.19.72:63232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:21.911304 2026] [ssl:error] [pid 3722978:tid 3722978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:22.001088 2026] [security2:error] [pid 3687959:tid 3687959] [client 43.164.0.96:37592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "amtjgtL_Boxc0YEdwK0EWQAAABw"]
[Thu Jul 30 15:45:22.970568 2026] [core:error] [pid 3716199:tid 3716199] (13)Permission denied: [client 216.73.216.199:9864] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu7/driver/bind
[Thu Jul 30 15:45:23.155037 2026] [cgi:error] [pid 3717307:tid 3717307] [client 47.128.117.248:50470] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:45:23.577013 2026] [authz_core:error] [pid 3718555:tid 3718555] [client 66.249.66.33:47168] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:45:23.579687 2026] [authz_core:error] [pid 3718555:tid 3718555] [client 66.249.66.33:47168] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:45:23.723938 2026] [security2:error] [pid 3722978:tid 3722978] [client 141.94.78.40:38528] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjg1I7kMtqSQhdMGbQegAAAEU"]
[Thu Jul 30 15:45:23.724004 2026] [security2:error] [pid 3722978:tid 3722978] [client 141.94.78.40:38528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjg1I7kMtqSQhdMGbQegAAAEU"]
[Thu Jul 30 15:45:23.724260 2026] [security2:error] [pid 3722978:tid 3722978] [client 141.94.78.40:38528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjg1I7kMtqSQhdMGbQegAAAEU"]
[Thu Jul 30 15:45:23.774034 2026] [security2:error] [pid 3724294:tid 3724294] [client 51.91.255.78:60540] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjg5HwBb-NoWF6a4JQ1wAAAAA"]
[Thu Jul 30 15:45:23.774099 2026] [security2:error] [pid 3724294:tid 3724294] [client 51.91.255.78:60540] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjg5HwBb-NoWF6a4JQ1wAAAAA"]
[Thu Jul 30 15:45:23.774383 2026] [security2:error] [pid 3724294:tid 3724294] [client 51.91.255.78:60540] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjg5HwBb-NoWF6a4JQ1wAAAAA"]
[Thu Jul 30 15:45:24.280316 2026] [lsapi:warn] [pid 3717304:tid 3717304] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:45:24.991315 2026] [ssl:error] [pid 3726701:tid 3726701] (EAI 2)Name or service not known: [client 144.76.19.72:63238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:24.991367 2026] [ssl:error] [pid 3726701:tid 3726701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:25.044606 2026] [ssl:error] [pid 3719881:tid 3719881] (EAI 2)Name or service not known: [client 144.76.19.72:63254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:25.044640 2026] [ssl:error] [pid 3719881:tid 3719881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:26.895406 2026] [ssl:error] [pid 3722098:tid 3722098] (70014)End of file found: [client 216.73.216.199:5949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:27.794666 2026] [ssl:error] [pid 3716199:tid 3716199] (70014)End of file found: [client 216.73.216.199:9864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:27.871558 2026] [security2:error] [pid 3722922:tid 3722922] [client 43.164.3.182:51758] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtjh7GvTC08vHgcj9xzogAAACM"]
[Thu Jul 30 15:45:28.101450 2026] [ssl:error] [pid 3722812:tid 3722812] (EAI 2)Name or service not known: [client 144.76.19.72:63262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:28.101488 2026] [ssl:error] [pid 3722812:tid 3722812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:28.157622 2026] [ssl:error] [pid 3698691:tid 3698691] (EAI 2)Name or service not known: [client 144.76.19.72:63266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:28.157653 2026] [ssl:error] [pid 3698691:tid 3698691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:30.978392 2026] [security2:error] [pid 3692608:tid 3692608] [client 216.73.216.199:1581] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/basic.conf"] [unique_id "amtjilTBhqQvZfl7j_pV1QAAABE"]
[Thu Jul 30 15:45:30.978681 2026] [security2:error] [pid 3692608:tid 3692608] [client 216.73.216.199:1581] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/basic.conf"] [unique_id "amtjilTBhqQvZfl7j_pV1QAAABE"]
[Thu Jul 30 15:45:30.978901 2026] [security2:error] [pid 3692608:tid 3692608] [client 216.73.216.199:1581] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/basic.conf"] [unique_id "amtjilTBhqQvZfl7j_pV1QAAABE"]
[Thu Jul 30 15:45:30.993046 2026] [core:error] [pid 3724294:tid 3724294] [client 66.249.66.8:63768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:45:30.993083 2026] [core:error] [pid 3724294:tid 3724294] [client 66.249.66.8:63768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:45:31.030236 2026] [security2:error] [pid 3718555:tid 3718555] [client 185.191.171.2:18934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/does-chris-potter-have-cancer-in-real-life"] [unique_id "amtji44Jzc4zx9-NsW6XdAAAABU"]
[Thu Jul 30 15:45:31.214664 2026] [ssl:error] [pid 3724294:tid 3724294] (EAI 2)Name or service not known: [client 144.76.19.72:28380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:31.214699 2026] [ssl:error] [pid 3724294:tid 3724294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:31.299306 2026] [ssl:error] [pid 3725422:tid 3725422] (EAI 2)Name or service not known: [client 144.76.19.72:28396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:31.299339 2026] [ssl:error] [pid 3725422:tid 3725422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:33.731516 2026] [core:error] [pid 3720354:tid 3720354] [client 20.203.221.142:29768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:45:33.731543 2026] [core:error] [pid 3720354:tid 3720354] [client 20.203.221.142:29768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:45:34.356616 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:28410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:34.356654 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:34.411930 2026] [ssl:error] [pid 3727293:tid 3727293] (EAI 2)Name or service not known: [client 144.76.19.72:28418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:34.411975 2026] [ssl:error] [pid 3727293:tid 3727293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:35.884137 2026] [lsapi:warn] [pid 3718601:tid 3718601] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:45:37.503971 2026] [ssl:error] [pid 3717307:tid 3717307] (EAI 2)Name or service not known: [client 144.76.19.72:28432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:37.504004 2026] [ssl:error] [pid 3717307:tid 3717307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:37.558824 2026] [ssl:error] [pid 3726654:tid 3726654] (EAI 2)Name or service not known: [client 144.76.19.72:28436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:37.558858 2026] [ssl:error] [pid 3726654:tid 3726654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:38.617328 2026] [rewrite:error] [pid 3717307:tid 3717307] [client 141.98.11.42:62324] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/
[Thu Jul 30 15:45:38.617433 2026] [rewrite:error] [pid 3717307:tid 3717307] [client 141.98.11.42:62324] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:45:40.617488 2026] [ssl:error] [pid 3722976:tid 3722976] (EAI 2)Name or service not known: [client 144.76.19.72:54056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:40.617521 2026] [ssl:error] [pid 3722976:tid 3722976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:40.674974 2026] [ssl:error] [pid 3716199:tid 3716199] (EAI 2)Name or service not known: [client 144.76.19.72:54068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:40.675010 2026] [ssl:error] [pid 3716199:tid 3716199] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:42.664160 2026] [access_compat:error] [pid 3727294:tid 3727294] [client 45.158.164.139:53666] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:45:43.733587 2026] [ssl:error] [pid 3724384:tid 3724384] (EAI 2)Name or service not known: [client 144.76.19.72:54084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:43.733622 2026] [ssl:error] [pid 3724384:tid 3724384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:43.788286 2026] [ssl:error] [pid 3722922:tid 3722922] (EAI 2)Name or service not known: [client 144.76.19.72:54086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:43.788321 2026] [ssl:error] [pid 3722922:tid 3722922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:44.004124 2026] [ssl:error] [pid 3726701:tid 3726701] (70014)End of file found: [client 216.73.216.199:52748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:45.207443 2026] [ssl:error] [pid 3692608:tid 3692608] (70014)End of file found: [client 216.73.216.199:1581] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:46.842374 2026] [ssl:error] [pid 3722980:tid 3722980] (EAI 2)Name or service not known: [client 144.76.19.72:54100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:46.842401 2026] [ssl:error] [pid 3722980:tid 3722980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:46.896589 2026] [ssl:error] [pid 3724734:tid 3724734] (EAI 2)Name or service not known: [client 144.76.19.72:54102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:46.896616 2026] [ssl:error] [pid 3724734:tid 3724734] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:47.600400 2026] [lsapi:warn] [pid 3689471:tid 3689471] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:45:47.719287 2026] [cgi:error] [pid 3727295:tid 3727295] [client 20.151.221.234:50829] AH02812: stderr from /home/bessys/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:45:48.581828 2026] [authz_core:error] [pid 3722981:tid 3722981] [client 65.109.124.116:1302] AH01630: client denied by server configuration: /home/winterb/public_html/naomiwinter/error_log
[Thu Jul 30 15:45:49.951206 2026] [ssl:error] [pid 3711246:tid 3711246] (EAI 2)Name or service not known: [client 144.76.19.72:37990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:49.951245 2026] [ssl:error] [pid 3711246:tid 3711246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:50.006824 2026] [ssl:error] [pid 3725530:tid 3725530] (EAI 2)Name or service not known: [client 144.76.19.72:38006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:50.006864 2026] [ssl:error] [pid 3725530:tid 3725530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:53.061256 2026] [ssl:error] [pid 3719819:tid 3719819] (EAI 2)Name or service not known: [client 144.76.19.72:38014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:53.061289 2026] [ssl:error] [pid 3719819:tid 3719819] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:53.118042 2026] [ssl:error] [pid 3726654:tid 3726654] (EAI 2)Name or service not known: [client 144.76.19.72:38018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:53.118084 2026] [ssl:error] [pid 3726654:tid 3726654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:53.366707 2026] [core:error] [pid 3727224:tid 3727224] (13)Permission denied: [client 216.73.216.199:10054] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmem_cache/objects
[Thu Jul 30 15:45:56.236608 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:38034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:56.236644 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:56.290984 2026] [ssl:error] [pid 3722812:tid 3722812] (EAI 2)Name or service not known: [client 144.76.19.72:38048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:56.291011 2026] [ssl:error] [pid 3722812:tid 3722812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:57.287126 2026] [ssl:error] [pid 3727224:tid 3727224] (70014)End of file found: [client 216.73.216.199:10054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:45:59.346195 2026] [ssl:error] [pid 3722978:tid 3722978] (EAI 2)Name or service not known: [client 144.76.19.72:38050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:59.346231 2026] [ssl:error] [pid 3722978:tid 3722978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:45:59.427556 2026] [ssl:error] [pid 3724782:tid 3724782] (EAI 2)Name or service not known: [client 144.76.19.72:38060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:45:59.427588 2026] [ssl:error] [pid 3724782:tid 3724782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:00.640412 2026] [lsapi:warn] [pid 3727296:tid 3727296] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:46:01.034798 2026] [authz_core:error] [pid 3724294:tid 3724294] [client 66.249.66.35:44882] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:46:01.037491 2026] [authz_core:error] [pid 3724294:tid 3724294] [client 66.249.66.35:44882] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:46:02.481459 2026] [ssl:error] [pid 3719881:tid 3719881] (EAI 2)Name or service not known: [client 144.76.19.72:47984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:02.481487 2026] [ssl:error] [pid 3719881:tid 3719881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:02.534154 2026] [ssl:error] [pid 3724782:tid 3724782] (EAI 2)Name or service not known: [client 144.76.19.72:47992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:02.534183 2026] [ssl:error] [pid 3724782:tid 3724782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:05.592480 2026] [ssl:error] [pid 3725530:tid 3725530] (EAI 2)Name or service not known: [client 144.76.19.72:48000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:05.592515 2026] [ssl:error] [pid 3725530:tid 3725530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:05.647211 2026] [ssl:error] [pid 3718642:tid 3718642] (EAI 2)Name or service not known: [client 144.76.19.72:48004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:05.647241 2026] [ssl:error] [pid 3718642:tid 3718642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:07.319952 2026] [security2:error] [pid 3719881:tid 3719881] [client 43.156.79.172:44392] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spurr.org.uk"] [uri "/"] [unique_id "amtjr2Ajfu6fLYnTaNapmAAAAAM"]
[Thu Jul 30 15:46:08.102654 2026] [authz_core:error] [pid 3727157:tid 3727157] [client 66.249.66.12:50916] AH01630: client denied by server configuration: /home/seedhubdev/jeansandcasual.devwebsitehub.com/error_log
[Thu Jul 30 15:46:08.706131 2026] [ssl:error] [pid 3722812:tid 3722812] (EAI 2)Name or service not known: [client 144.76.19.72:48014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:08.706170 2026] [ssl:error] [pid 3722812:tid 3722812] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:08.757574 2026] [ssl:error] [pid 3727225:tid 3727225] (EAI 2)Name or service not known: [client 144.76.19.72:48020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:08.757612 2026] [ssl:error] [pid 3727225:tid 3727225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:10.055415 2026] [ssl:error] [pid 3722980:tid 3722980] (70014)End of file found: [client 216.73.216.199:31904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:10.078059 2026] [authz_core:error] [pid 3727225:tid 3727225] [client 172.202.44.182:35302] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-admin/includes/error_log
[Thu Jul 30 15:46:11.497863 2026] [security2:error] [pid 3724294:tid 3724294] [client 43.166.238.12:39362] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "amtjs5HwBb-NoWF6a4JRTAAAAAA"]
[Thu Jul 30 15:46:11.814664 2026] [ssl:error] [pid 3718642:tid 3718642] (EAI 2)Name or service not known: [client 144.76.19.72:40672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:11.814702 2026] [ssl:error] [pid 3718642:tid 3718642] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:11.867414 2026] [ssl:error] [pid 3724384:tid 3724384] (EAI 2)Name or service not known: [client 144.76.19.72:40680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:11.867445 2026] [ssl:error] [pid 3724384:tid 3724384] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:12.997927 2026] [security2:error] [pid 3724294:tid 3724294] [client 43.166.238.12:45182] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.itsupportinayrshire.com"] [uri "/"] [unique_id "amtjtJHwBb-NoWF6a4JRTQAAAAA"], referer: http://www.itsupportinayrshire.com
[Thu Jul 30 15:46:13.140274 2026] [access_compat:error] [pid 3718601:tid 3718601] [client 20.203.221.142:37161] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/66.php
[Thu Jul 30 15:46:13.140662 2026] [core:error] [pid 3718601:tid 3718601] [client 20.203.221.142:37161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:13.759282 2026] [security2:error] [pid 3727295:tid 3727295] [client 85.208.96.200:63704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5278.0.html"] [unique_id "amtjtY59pLU0EuFiYLefyQAAABs"]
[Thu Jul 30 15:46:13.947476 2026] [access_compat:error] [pid 3718601:tid 3718601] [client 20.203.221.142:31029] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ms-edit.php
[Thu Jul 30 15:46:13.947845 2026] [core:error] [pid 3718601:tid 3718601] [client 20.203.221.142:31029] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:13.967200 2026] [ssl:error] [pid 3727296:tid 3727296] (70014)End of file found: [client 216.73.216.199:14463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:14.267414 2026] [ssl:error] [pid 3724782:tid 3724782] (70014)End of file found: [client 216.73.216.199:64135] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:14.476138 2026] [lsapi:warn] [pid 3727225:tid 3727225] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:46:14.687285 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 20.203.221.142:3772] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aaa.php
[Thu Jul 30 15:46:14.687660 2026] [core:error] [pid 3722812:tid 3722812] [client 20.203.221.142:3772] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:14.926200 2026] [ssl:error] [pid 3712971:tid 3712971] (EAI 2)Name or service not known: [client 144.76.19.72:40690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:14.926265 2026] [ssl:error] [pid 3712971:tid 3712971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:14.984466 2026] [ssl:error] [pid 3692608:tid 3692608] (EAI 2)Name or service not known: [client 144.76.19.72:40692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:14.984510 2026] [ssl:error] [pid 3692608:tid 3692608] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:16.375199 2026] [ssl:error] [pid 3727225:tid 3727225] (70014)End of file found: [client 216.73.216.199:1379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:16.745433 2026] [security2:error] [pid 3722981:tid 3722981] [client 187.4.85.148:4627] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjuBH3efg7rSZOEXLW9wAAAEg"]
[Thu Jul 30 15:46:16.745486 2026] [security2:error] [pid 3722981:tid 3722981] [client 187.4.85.148:4627] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjuBH3efg7rSZOEXLW9wAAAEg"]
[Thu Jul 30 15:46:16.745761 2026] [security2:error] [pid 3722981:tid 3722981] [client 187.4.85.148:4627] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjuBH3efg7rSZOEXLW9wAAAEg"]
[Thu Jul 30 15:46:18.041034 2026] [ssl:error] [pid 3722980:tid 3722980] (EAI 2)Name or service not known: [client 144.76.19.72:40704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:18.041085 2026] [ssl:error] [pid 3722980:tid 3722980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:18.093024 2026] [ssl:error] [pid 3722390:tid 3722390] (EAI 2)Name or service not known: [client 144.76.19.72:40710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:18.093094 2026] [ssl:error] [pid 3722390:tid 3722390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:19.016939 2026] [security2:error] [pid 3725422:tid 3725422] [client 47.76.36.220:23455] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtju08MaFOiw9n5IyTw9gAAAAY"]
[Thu Jul 30 15:46:19.017007 2026] [security2:error] [pid 3725422:tid 3725422] [client 47.76.36.220:23455] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtju08MaFOiw9n5IyTw9gAAAAY"]
[Thu Jul 30 15:46:19.017366 2026] [security2:error] [pid 3725422:tid 3725422] [client 47.76.36.220:23455] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtju08MaFOiw9n5IyTw9gAAAAY"]
[Thu Jul 30 15:46:19.281680 2026] [ssl:error] [pid 3722390:tid 3722390] (70014)End of file found: [client 216.73.216.199:1837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:19.756149 2026] [access_compat:error] [pid 3725422:tid 3725422] [client 20.203.221.142:8937] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bgymj.php
[Thu Jul 30 15:46:19.756545 2026] [core:error] [pid 3725422:tid 3725422] [client 20.203.221.142:8937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:20.092922 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 15:46:20.092972 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.177814 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 15:46:20.177857 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.263476 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 15:46:20.263522 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.358687 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 15:46:20.358753 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.451757 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 15:46:20.451815 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.536679 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 15:46:20.536739 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.621768 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 15:46:20.621823 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.707149 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 15:46:20.707207 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.792328 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 15:46:20.792395 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.877620 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/php8.php
[Thu Jul 30 15:46:20.877681 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:20.962831 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 15:46:20.962891 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.051335 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 15:46:21.051406 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.139022 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 15:46:21.139083 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.224085 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 15:46:21.224143 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.308913 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 15:46:21.308959 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.402839 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:46:21.488240 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 15:46:21.488290 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.573276 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/file2.php
[Thu Jul 30 15:46:21.573329 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.659587 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 15:46:21.745584 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa.php
[Thu Jul 30 15:46:21.745635 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.813894 2026] [ssl:error] [pid 3727296:tid 3727296] (70014)End of file found: [client 216.73.216.199:3724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:21.830673 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 15:46:21.830722 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:21.917450 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 15:46:21.917499 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.002480 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/asasx.php
[Thu Jul 30 15:46:22.002527 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.087923 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/filemanager.php
[Thu Jul 30 15:46:22.087970 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.174666 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/themes.php
[Thu Jul 30 15:46:22.174730 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.263470 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:22.348476 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/buy.php
[Thu Jul 30 15:46:22.348524 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.433624 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/dropdown.php
[Thu Jul 30 15:46:22.433671 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.518664 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 15:46:22.518714 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.603662 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/100.php
[Thu Jul 30 15:46:22.603710 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.689444 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/akc.php
[Thu Jul 30 15:46:22.689491 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.774554 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap
[Thu Jul 30 15:46:22.859791 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/php.php
[Thu Jul 30 15:46:22.859839 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:22.944862 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/t.php
[Thu Jul 30 15:46:22.944912 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.049092 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/index
[Thu Jul 30 15:46:23.134294 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wk
[Thu Jul 30 15:46:23.219289 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blink.php
[Thu Jul 30 15:46:23.219334 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.304482 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/xfun.php
[Thu Jul 30 15:46:23.304531 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.394400 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/p.php
[Thu Jul 30 15:46:23.394450 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.479418 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:23.487999 2026] [core:error] [pid 3729524:tid 3729524] [client 20.104.22.47:47014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:23.488041 2026] [core:error] [pid 3729524:tid 3729524] [client 20.104.22.47:47014] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:23.564370 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 15:46:23.564418 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.651491 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/term.php
[Thu Jul 30 15:46:23.651539 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.746451 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/w.php
[Thu Jul 30 15:46:23.749441 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 15:46:23.749492 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.842451 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 15:46:23.842499 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:23.930859 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/makeasmtp.php
[Thu Jul 30 15:46:23.930968 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.016231 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:24.123973 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:46:24.209640 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/atomlib.php
[Thu Jul 30 15:46:24.209691 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.279551 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 15:46:24.298388 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/min.php
[Thu Jul 30 15:46:24.298435 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.390090 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 15:46:24.390137 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.475482 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/nc4.php
[Thu Jul 30 15:46:24.475530 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.561435 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 15:46:24.561479 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.646534 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 15:46:24.646583 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.731445 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/media
[Thu Jul 30 15:46:24.816409 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 15:46:24.816457 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.904518 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 15:46:24.904566 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:24.923253 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 15:46:24.989587 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 15:46:24.989633 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.078599 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/hosty.php
[Thu Jul 30 15:46:25.078653 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.163599 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/test1.php
[Thu Jul 30 15:46:25.163656 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.249582 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/zwso.php
[Thu Jul 30 15:46:25.249644 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.335015 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/Geforce.php
[Thu Jul 30 15:46:25.335102 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.440477 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 15:46:25.440528 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.481608 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 15:46:25.525811 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/mini
[Thu Jul 30 15:46:25.610838 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog-header.php
[Thu Jul 30 15:46:25.610885 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.696740 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/about
[Thu Jul 30 15:46:25.784559 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/function
[Thu Jul 30 15:46:25.869566 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-signin.php
[Thu Jul 30 15:46:25.869611 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:25.955437 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 15:46:25.955485 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.043090 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 15:46:26.043150 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.128136 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/class.php
[Thu Jul 30 15:46:26.128187 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.129499 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 15:46:26.212999 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/flower.php
[Thu Jul 30 15:46:26.213043 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.298963 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/motu.php
[Thu Jul 30 15:46:26.299010 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.383777 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 15:46:26.383827 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.468639 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/lite.php
[Thu Jul 30 15:46:26.468687 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.553489 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 15:46:26.553535 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.579038 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/admin.php
[Thu Jul 30 15:46:26.579152 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:26.638528 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:26.666015 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/edit.php
[Thu Jul 30 15:46:26.666112 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:26.726666 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-links-opml.php
[Thu Jul 30 15:46:26.726712 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.753257 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/w.php
[Thu Jul 30 15:46:26.753351 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:26.811606 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/.alf.php
[Thu Jul 30 15:46:26.811655 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46988] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:26.840636 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file.php
[Thu Jul 30 15:46:26.840729 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:26.929128 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/adminfuns.php
[Thu Jul 30 15:46:26.929210 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.017042 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aa.php
[Thu Jul 30 15:46:27.017143 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.107490 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/classwithtostring.php
[Thu Jul 30 15:46:27.107585 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.158756 2026] [authz_core:error] [pid 3729704:tid 3729704] [client 159.65.57.52:56629] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 15:46:27.195746 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/about.php
[Thu Jul 30 15:46:27.195836 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.220245 2026] [access_compat:error] [pid 3729703:tid 3729703] [client 20.203.221.142:49056] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ah25.php
[Thu Jul 30 15:46:27.220643 2026] [core:error] [pid 3729703:tid 3729703] [client 20.203.221.142:49056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:27.247821 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 15:46:27.247891 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.282887 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/goods.php
[Thu Jul 30 15:46:27.282977 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.334165 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 15:46:27.334213 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.338681 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 15:46:27.338735 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:27.370918 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/php8.php
[Thu Jul 30 15:46:27.371013 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.422918 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 15:46:27.422964 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.440849 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/edit.php
[Thu Jul 30 15:46:27.440897 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:27.460584 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/info.php
[Thu Jul 30 15:46:27.460667 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.506452 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 15:46:27.506498 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.525922 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w.php
[Thu Jul 30 15:46:27.525968 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:27.556623 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/chosen.php
[Thu Jul 30 15:46:27.556710 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.590339 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 15:46:27.590396 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.611547 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file.php
[Thu Jul 30 15:46:27.611594 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:27.645683 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/simple.php
[Thu Jul 30 15:46:27.645768 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.674029 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 15:46:27.674105 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.696629 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminfuns.php
[Thu Jul 30 15:46:27.696679 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:27.760103 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/ioxi-o.php
[Thu Jul 30 15:46:27.760223 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.779532 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 15:46:27.779588 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.781540 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aa.php
[Thu Jul 30 15:46:27.781588 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:27.848228 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/av.php
[Thu Jul 30 15:46:27.848338 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.863315 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 15:46:27.863389 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.866352 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 15:46:27.866407 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:27.935824 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-admin
[Thu Jul 30 15:46:27.935929 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:27.947511 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 15:46:27.947561 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:27.952921 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 15:46:27.952973 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.025084 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp.php
[Thu Jul 30 15:46:28.025190 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.031878 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/php8.php
[Thu Jul 30 15:46:28.031929 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.039593 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/goods.php
[Thu Jul 30 15:46:28.039645 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.116994 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file2.php
[Thu Jul 30 15:46:28.117155 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.118486 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 15:46:28.118538 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.128620 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/php8.php
[Thu Jul 30 15:46:28.128674 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.202561 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 15:46:28.202607 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.206131 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/images
[Thu Jul 30 15:46:28.206239 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.215610 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/info.php
[Thu Jul 30 15:46:28.215672 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.286546 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 15:46:28.286594 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.297317 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/alfa.php
[Thu Jul 30 15:46:28.297452 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.300437 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/chosen.php
[Thu Jul 30 15:46:28.300495 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.373659 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 15:46:28.373720 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.389531 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/1.php
[Thu Jul 30 15:46:28.389647 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.389783 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/simple.php
[Thu Jul 30 15:46:28.389833 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.457416 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 15:46:28.457490 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.476041 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ioxi-o.php
[Thu Jul 30 15:46:28.476106 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.477202 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/222.php
[Thu Jul 30 15:46:28.477304 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.541667 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:46:28.564671 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/av.php
[Thu Jul 30 15:46:28.564721 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.566688 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/asasx.php
[Thu Jul 30 15:46:28.566809 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.625424 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 15:46:28.625482 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.650824 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 15:46:28.657164 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/filemanager.php
[Thu Jul 30 15:46:28.657274 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.711495 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/file2.php
[Thu Jul 30 15:46:28.711544 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.735697 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp.php
[Thu Jul 30 15:46:28.735750 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.748318 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/themes.php
[Thu Jul 30 15:46:28.748430 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.797430 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/images
[Thu Jul 30 15:46:28.820569 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file2.php
[Thu Jul 30 15:46:28.820623 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.835948 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:46:28.836044 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.880815 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa.php
[Thu Jul 30 15:46:28.880860 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:28.928017 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/class-config.php
[Thu Jul 30 15:46:28.928088 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:28.931690 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/buy.php
[Thu Jul 30 15:46:28.931772 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:28.968796 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 15:46:28.968844 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.012840 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa.php
[Thu Jul 30 15:46:29.012891 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.018584 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/dropdown.php
[Thu Jul 30 15:46:29.018670 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.054373 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 15:46:29.054422 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.099157 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php
[Thu Jul 30 15:46:29.099225 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.112737 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/inputs.php
[Thu Jul 30 15:46:29.112828 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.141842 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/asasx.php
[Thu Jul 30 15:46:29.141903 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.151997 2026] [authz_core:error] [pid 3729703:tid 3729703] [client 66.249.66.33:56925] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:46:29.154928 2026] [authz_core:error] [pid 3729703:tid 3729703] [client 66.249.66.33:56925] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:46:29.184026 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/222.php
[Thu Jul 30 15:46:29.184087 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.199864 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/100.php
[Thu Jul 30 15:46:29.199953 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.225734 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/filemanager.php
[Thu Jul 30 15:46:29.225779 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.268791 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/asasx.php
[Thu Jul 30 15:46:29.268843 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.288336 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/akc.php
[Thu Jul 30 15:46:29.288425 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.322965 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/themes.php
[Thu Jul 30 15:46:29.323012 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.353614 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/filemanager.php
[Thu Jul 30 15:46:29.353664 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.377307 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/autoload_classmap
[Thu Jul 30 15:46:29.377412 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.419643 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:29.438451 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/themes.php
[Thu Jul 30 15:46:29.438502 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.465420 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/php.php
[Thu Jul 30 15:46:29.465508 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.512495 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/buy.php
[Thu Jul 30 15:46:29.512539 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.523400 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 15:46:29.554863 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/t.php
[Thu Jul 30 15:46:29.554967 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.598466 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/dropdown.php
[Thu Jul 30 15:46:29.598514 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.608151 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/buy.php
[Thu Jul 30 15:46:29.608201 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.644682 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/index
[Thu Jul 30 15:46:29.644765 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.691575 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 15:46:29.691619 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.692887 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dropdown.php
[Thu Jul 30 15:46:29.692933 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.734545 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wk
[Thu Jul 30 15:46:29.734650 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.777563 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inputs.php
[Thu Jul 30 15:46:29.777613 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.779982 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/100.php
[Thu Jul 30 15:46:29.780037 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.822622 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-blink.php
[Thu Jul 30 15:46:29.822708 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.862273 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/100.php
[Thu Jul 30 15:46:29.862323 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.866508 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/akc.php
[Thu Jul 30 15:46:29.866552 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:29.915252 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/xfun.php
[Thu Jul 30 15:46:29.915336 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:29.946967 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/akc.php
[Thu Jul 30 15:46:29.947020 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:29.958551 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap
[Thu Jul 30 15:46:30.005827 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/p.php
[Thu Jul 30 15:46:30.005920 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.032496 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/autoload_classmap
[Thu Jul 30 15:46:30.048422 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/php.php
[Thu Jul 30 15:46:30.048478 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.093040 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:46:30.093142 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.121800 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/php.php
[Thu Jul 30 15:46:30.121848 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:30.133422 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/t.php
[Thu Jul 30 15:46:30.133466 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.179920 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/aaa.php
[Thu Jul 30 15:46:30.180005 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.208190 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/t.php
[Thu Jul 30 15:46:30.208240 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:30.220996 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/index
[Thu Jul 30 15:46:30.268629 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/term.php
[Thu Jul 30 15:46:30.268714 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.292964 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/index
[Thu Jul 30 15:46:30.306442 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wk
[Thu Jul 30 15:46:30.358397 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/7.php
[Thu Jul 30 15:46:30.358479 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.380343 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wk
[Thu Jul 30 15:46:30.392466 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blink.php
[Thu Jul 30 15:46:30.392510 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.445849 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/file5.php
[Thu Jul 30 15:46:30.445931 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.465212 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blink.php
[Thu Jul 30 15:46:30.465258 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:30.483558 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/xfun.php
[Thu Jul 30 15:46:30.483608 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.532892 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/makeasmtp.php
[Thu Jul 30 15:46:30.532979 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.557936 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xfun.php
[Thu Jul 30 15:46:30.557987 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:30.574441 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/p.php
[Thu Jul 30 15:46:30.574489 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.621699 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:46:30.621783 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.637027 2026] [cgi:error] [pid 3698691:tid 3698691] [client 20.151.221.234:11729] AH02812: stderr from /home/sijamesc/loca.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:46:30.643642 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/p.php
[Thu Jul 30 15:46:30.643690 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:30.657779 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:30.708676 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-includes
[Thu Jul 30 15:46:30.708760 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.730472 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 15:46:30.741084 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 15:46:30.741131 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.795548 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/atomlib.php
[Thu Jul 30 15:46:30.795633 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.815475 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaa.php
[Thu Jul 30 15:46:30.815532 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:30.827511 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/term.php
[Thu Jul 30 15:46:30.827558 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.885024 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/min.php
[Thu Jul 30 15:46:30.885123 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.907798 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/term.php
[Thu Jul 30 15:46:30.907846 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:30.911053 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 15:46:30.911113 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:30.973345 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/mac.php
[Thu Jul 30 15:46:30.973440 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:30.996890 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/7.php
[Thu Jul 30 15:46:30.996942 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.002184 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 15:46:31.002228 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.068555 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/nc4.php
[Thu Jul 30 15:46:31.068640 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.085628 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/makeasmtp.php
[Thu Jul 30 15:46:31.085674 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.086881 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file5.php
[Thu Jul 30 15:46:31.086927 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.117914 2026] [ssl:error] [pid 3730848:tid 3730848] (EAI 2)Name or service not known: [client 144.76.19.72:54136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:31.117949 2026] [ssl:error] [pid 3730848:tid 3730848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:31.143154 2026] [authz_core:error] [pid 3716199:tid 3716199] [client 20.104.22.47:47008] AH01630: client denied by server configuration: /home/erskinen/public_html/images
[Thu Jul 30 15:46:31.158244 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/as.php
[Thu Jul 30 15:46:31.158330 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.172023 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/makeasmtp.php
[Thu Jul 30 15:46:31.172082 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.184022 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:31.245040 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/k.php
[Thu Jul 30 15:46:31.245135 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.257728 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 15:46:31.267906 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:46:31.333929 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/media
[Thu Jul 30 15:46:31.334017 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.344472 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 15:46:31.359469 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/atomlib.php
[Thu Jul 30 15:46:31.359515 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.420972 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/system_log.php
[Thu Jul 30 15:46:31.421058 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.429454 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/atomlib.php
[Thu Jul 30 15:46:31.429504 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.445439 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/min.php
[Thu Jul 30 15:46:31.445491 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.507993 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/x.php
[Thu Jul 30 15:46:31.508110 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.519987 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/min.php
[Thu Jul 30 15:46:31.520038 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.531536 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 15:46:31.531593 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.604586 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/autoload_classmap.php
[Thu Jul 30 15:46:31.604674 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.607807 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mac.php
[Thu Jul 30 15:46:31.607851 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.621146 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/nc4.php
[Thu Jul 30 15:46:31.621191 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.692802 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/hosty.php
[Thu Jul 30 15:46:31.692889 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.696688 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/nc4.php
[Thu Jul 30 15:46:31.696747 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.710928 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 15:46:31.710973 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.779871 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/test1.php
[Thu Jul 30 15:46:31.779955 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.794113 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/as.php
[Thu Jul 30 15:46:31.794186 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.800783 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 15:46:31.800828 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.867869 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/zwso.php
[Thu Jul 30 15:46:31.867955 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.888121 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/k.php
[Thu Jul 30 15:46:31.888182 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:31.891798 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/media
[Thu Jul 30 15:46:31.958759 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/Geforce.php
[Thu Jul 30 15:46:31.958842 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:31.975250 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 15:46:31.975298 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:31.983246 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/media/com_sppagebuilder
[Thu Jul 30 15:46:32.049276 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/fpwch.php
[Thu Jul 30 15:46:32.049380 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.059159 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 15:46:32.059206 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.070667 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/system_log.php
[Thu Jul 30 15:46:32.070728 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.140651 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/mini
[Thu Jul 30 15:46:32.140743 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.147161 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 15:46:32.147208 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.157041 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 15:46:32.157110 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.210137 2026] [authz_core:error] [pid 3718555:tid 3718555] [client 66.249.66.34:61282] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:46:32.212833 2026] [authz_core:error] [pid 3718555:tid 3718555] [client 66.249.66.34:61282] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:46:32.232504 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/hosty.php
[Thu Jul 30 15:46:32.232554 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.232610 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-blog-header.php
[Thu Jul 30 15:46:32.232690 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.247297 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/autoload_classmap.php
[Thu Jul 30 15:46:32.247365 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.315984 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/test1.php
[Thu Jul 30 15:46:32.316030 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.319428 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/about
[Thu Jul 30 15:46:32.319510 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.338173 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hosty.php
[Thu Jul 30 15:46:32.338221 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.401993 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/zwso.php
[Thu Jul 30 15:46:32.402039 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.406530 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/function
[Thu Jul 30 15:46:32.406611 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.431832 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/test1.php
[Thu Jul 30 15:46:32.431879 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.486539 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/Geforce.php
[Thu Jul 30 15:46:32.486583 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.493482 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-signin.php
[Thu Jul 30 15:46:32.493563 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.511102 2026] [security2:error] [pid 3731010:tid 3731010] [client 47.76.36.220:12809] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjyEaDS34LBx6hPwurjAAAAEI"]
[Thu Jul 30 15:46:32.511156 2026] [security2:error] [pid 3731010:tid 3731010] [client 47.76.36.220:12809] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtjyEaDS34LBx6hPwurjAAAAEI"]
[Thu Jul 30 15:46:32.511483 2026] [security2:error] [pid 3731010:tid 3731010] [client 47.76.36.220:12809] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtjyEaDS34LBx6hPwurjAAAAEI"]
[Thu Jul 30 15:46:32.525926 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zwso.php
[Thu Jul 30 15:46:32.525982 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.573221 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 15:46:32.573275 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.580588 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/f35.php
[Thu Jul 30 15:46:32.580673 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.613520 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/Geforce.php
[Thu Jul 30 15:46:32.613579 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.658538 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/mini
[Thu Jul 30 15:46:32.667906 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/gg.php
[Thu Jul 30 15:46:32.667985 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.698671 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fpwch.php
[Thu Jul 30 15:46:32.698723 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.743864 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog-header.php
[Thu Jul 30 15:46:32.743910 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:32.756315 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/class.php
[Thu Jul 30 15:46:32.756407 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.784628 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mini
[Thu Jul 30 15:46:32.838836 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/about
[Thu Jul 30 15:46:32.843562 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/flower.php
[Thu Jul 30 15:46:32.843645 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.870038 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blog-header.php
[Thu Jul 30 15:46:32.870102 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:32.879395 2026] [core:error] [pid 3731010:tid 3731010] [client 20.104.22.47:47320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:32.879415 2026] [core:error] [pid 3731010:tid 3731010] [client 20.104.22.47:47320] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:32.925282 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/function
[Thu Jul 30 15:46:32.932615 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/motu.php
[Thu Jul 30 15:46:32.932694 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:32.954879 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about
[Thu Jul 30 15:46:33.009540 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-signin.php
[Thu Jul 30 15:46:33.009591 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.020621 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/404.php
[Thu Jul 30 15:46:33.020705 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:33.041643 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/function
[Thu Jul 30 15:46:33.102566 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 15:46:33.102610 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.110052 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/lite.php
[Thu Jul 30 15:46:33.110170 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:33.127728 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-signin.php
[Thu Jul 30 15:46:33.127775 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.188290 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/gg.php
[Thu Jul 30 15:46:33.188334 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.197852 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/lock360.php
[Thu Jul 30 15:46:33.197930 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:33.217227 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 15:46:33.217286 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.274744 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/class.php
[Thu Jul 30 15:46:33.274787 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.284931 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-content
[Thu Jul 30 15:46:33.285016 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:33.294157 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/w.php
[Thu Jul 30 15:46:33.329112 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gg.php
[Thu Jul 30 15:46:33.329176 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.360385 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/flower.php
[Thu Jul 30 15:46:33.360432 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.372369 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/wp-links-opml.php
[Thu Jul 30 15:46:33.372448 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:33.375674 2026] [access_compat:error] [pid 3729700:tid 3729700] [client 20.203.221.142:13695] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/main.php
[Thu Jul 30 15:46:33.376012 2026] [core:error] [pid 3729700:tid 3729700] [client 20.203.221.142:13695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:33.414249 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/class.php
[Thu Jul 30 15:46:33.414304 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.443913 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/motu.php
[Thu Jul 30 15:46:33.443961 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.460522 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/.alf.php
[Thu Jul 30 15:46:33.460604 2026] [rewrite:error] [pid 3722980:tid 3722980] [client 20.104.22.47:47026] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /home/saturnsp/public_html/saturnstopwatches.co.uk/403.shtml
[Thu Jul 30 15:46:33.501144 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/flower.php
[Thu Jul 30 15:46:33.501202 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.527622 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 15:46:33.527675 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.587528 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/motu.php
[Thu Jul 30 15:46:33.587580 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.614462 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/lite.php
[Thu Jul 30 15:46:33.614526 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.678550 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 15:46:33.678603 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.698047 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/lock360.php
[Thu Jul 30 15:46:33.698119 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.744924 2026] [core:error] [pid 3731181:tid 3731181] (13)Permission denied: [client 216.73.216.199:25196] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:46:33.784422 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:46:33.793507 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lite.php
[Thu Jul 30 15:46:33.793559 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.891889 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lock360.php
[Thu Jul 30 15:46:33.891937 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:33.892616 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-links-opml.php
[Thu Jul 30 15:46:33.892660 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:33.978052 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 15:46:33.981878 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/.alf.php
[Thu Jul 30 15:46:33.981924 2026] [access_compat:error] [pid 3730203:tid 3730203] [client 20.104.22.47:47377] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:46:34.083217 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-links-opml.php
[Thu Jul 30 15:46:34.083272 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:34.168136 2026] [authz_core:error] [pid 3730201:tid 3730201] [client 66.249.66.33:37656] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:46:34.170813 2026] [authz_core:error] [pid 3730201:tid 3730201] [client 66.249.66.33:37656] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:46:34.172997 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.alf.php
[Thu Jul 30 15:46:34.173058 2026] [access_compat:error] [pid 3729704:tid 3729704] [client 20.104.22.47:46980] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 15:46:34.378725 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/file.php
[Thu Jul 30 15:46:34.684281 2026] [ssl:error] [pid 3731181:tid 3731181] (70014)End of file found: [client 216.73.216.199:25196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:34.717559 2026] [access_compat:error] [pid 3724384:tid 3724384] [client 20.203.221.142:8925] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/new4.php
[Thu Jul 30 15:46:34.717911 2026] [core:error] [pid 3724384:tid 3724384] [client 20.203.221.142:8925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:34.795854 2026] [lsapi:error] [pid 3726700:tid 3726700] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Request retrieving failed. Reason: unknown, On: request body, Source: client, Where: unknown
[Thu Jul 30 15:46:34.795877 2026] [lsapi:error] [pid 3726700:tid 3726700] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] In order to get more info about fail reason try to change LogLevel to Info in httpd.conf and restart Apache
[Thu Jul 30 15:46:34.795890 2026] [lsapi:error] [pid 3726700:tid 3726700] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Client error on sending request(POST /xmlrpc.php HTTP/1.1); uri(/xmlrpc.php) content-length(679): user_get_body(tmpstackbuf, 16384): read from client failed
[Thu Jul 30 15:46:35.512833 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 15:46:35.513424 2026] [ssl:error] [pid 3722098:tid 3722098] (EAI 2)Name or service not known: [client 144.76.19.72:37692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:35.513442 2026] [ssl:error] [pid 3722098:tid 3722098] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:35.766627 2026] [access_compat:error] [pid 3725422:tid 3725422] [client 20.203.221.142:8910] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/inputs.php
[Thu Jul 30 15:46:35.766971 2026] [core:error] [pid 3725422:tid 3725422] [client 20.203.221.142:8910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:35.926294 2026] [security2:error] [pid 3730363:tid 3730363] [client 185.191.171.10:40678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/custom-valve-covers"] [unique_id "amtjyxwulDK8OhmTGZlnSAAAADQ"]
[Thu Jul 30 15:46:36.152099 2026] [access_compat:error] [pid 3725422:tid 3725422] [client 20.104.22.47:47346] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/w.php
[Thu Jul 30 15:46:36.152443 2026] [core:error] [pid 3725422:tid 3725422] [client 20.104.22.47:47346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:36.493367 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 15:46:36.864615 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/php8.php
[Thu Jul 30 15:46:37.437925 2026] [security2:error] [pid 3727224:tid 3727224] [client 43.153.122.30:41284] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchell.org"] [uri "/"] [unique_id "amtjzQqjCsgBBdeJxScjJAAAAAk"]
[Thu Jul 30 15:46:37.617452 2026] [authz_core:error] [pid 3730201:tid 3730201] [client 66.249.66.33:37656] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:46:37.620371 2026] [authz_core:error] [pid 3730201:tid 3730201] [client 66.249.66.33:37656] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:46:37.682595 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 15:46:37.720561 2026] [access_compat:error] [pid 3687959:tid 3687959] [client 20.104.22.47:47392] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file.php
[Thu Jul 30 15:46:37.720907 2026] [core:error] [pid 3687959:tid 3687959] [client 20.104.22.47:47392] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:37.896623 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/info.php
[Thu Jul 30 15:46:38.255702 2026] [access_compat:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47379] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/adminfuns.php
[Thu Jul 30 15:46:38.256053 2026] [core:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47379] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:38.694919 2026] [access_compat:error] [pid 3729522:tid 3729522] [client 20.104.22.47:47405] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aa.php
[Thu Jul 30 15:46:38.695269 2026] [core:error] [pid 3729522:tid 3729522] [client 20.104.22.47:47405] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:38.696889 2026] [ssl:error] [pid 3731345:tid 3731345] (EAI 2)Name or service not known: [client 144.76.19.72:37702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:38.696914 2026] [ssl:error] [pid 3731345:tid 3731345] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:38.856594 2026] [ssl:error] [pid 3724294:tid 3724294] (EAI 2)Name or service not known: [client 144.76.19.72:37708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:38.856630 2026] [ssl:error] [pid 3724294:tid 3724294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:39.043203 2026] [access_compat:error] [pid 3731345:tid 3731345] [client 20.104.22.47:47359] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/classwithtostring.php
[Thu Jul 30 15:46:39.043563 2026] [core:error] [pid 3731345:tid 3731345] [client 20.104.22.47:47359] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:39.054419 2026] [ssl:error] [pid 3731182:tid 3731182] (70014)End of file found: [client 216.73.216.199:11347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:39.334494 2026] [core:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:39.334534 2026] [core:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:39.600935 2026] [core:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:39.600963 2026] [core:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47314] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:39.676097 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 15:46:39.867604 2026] [access_compat:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47296] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/php8.php
[Thu Jul 30 15:46:39.867931 2026] [core:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47296] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:40.133589 2026] [access_compat:error] [pid 3731349:tid 3731349] [client 20.104.22.47:47316] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/info.php
[Thu Jul 30 15:46:40.133976 2026] [core:error] [pid 3731349:tid 3731349] [client 20.104.22.47:47316] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:40.398946 2026] [access_compat:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47439] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/chosen.php
[Thu Jul 30 15:46:40.399317 2026] [core:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47439] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:40.560944 2026] [ssl:error] [pid 3729700:tid 3729700] (70014)End of file found: [client 216.73.216.199:57770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:40.667562 2026] [access_compat:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47260] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/simple.php
[Thu Jul 30 15:46:40.667873 2026] [core:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47260] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:40.929296 2026] [access_compat:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47303] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ioxi-o.php
[Thu Jul 30 15:46:40.929684 2026] [core:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47303] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:41.099239 2026] [security2:error] [pid 3732152:tid 3732152] [client 114.119.144.31:45761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~19,17/request_format~html"] [unique_id "amtj0VFjasywuPrXqjZgBwAAAFQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E19
[Thu Jul 30 15:46:41.120600 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 15:46:41.218951 2026] [access_compat:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47342] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/av.php
[Thu Jul 30 15:46:41.219685 2026] [core:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:41.501245 2026] [core:error] [pid 3727295:tid 3727295] [client 20.104.22.47:47297] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:41.501276 2026] [core:error] [pid 3727295:tid 3727295] [client 20.104.22.47:47297] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:41.764852 2026] [access_compat:error] [pid 3727295:tid 3727295] [client 20.104.22.47:47455] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp.php
[Thu Jul 30 15:46:41.765215 2026] [core:error] [pid 3727295:tid 3727295] [client 20.104.22.47:47455] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:41.886649 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/ioxi-o.php
[Thu Jul 30 15:46:41.915669 2026] [ssl:error] [pid 3727295:tid 3727295] (EAI 2)Name or service not known: [client 144.76.19.72:60628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:41.915710 2026] [ssl:error] [pid 3727295:tid 3727295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:41.976172 2026] [ssl:error] [pid 3722390:tid 3722390] (EAI 2)Name or service not known: [client 144.76.19.72:60630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:41.976239 2026] [ssl:error] [pid 3722390:tid 3722390] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:42.040664 2026] [access_compat:error] [pid 3719881:tid 3719881] [client 20.104.22.47:47291] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file2.php
[Thu Jul 30 15:46:42.041011 2026] [core:error] [pid 3719881:tid 3719881] [client 20.104.22.47:47291] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:42.302373 2026] [core:error] [pid 3732152:tid 3732152] [client 20.104.22.47:47234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:42.302401 2026] [core:error] [pid 3732152:tid 3732152] [client 20.104.22.47:47234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:42.303398 2026] [access_compat:error] [pid 3724384:tid 3724384] [client 45.82.244.214:58476] AH01797: client denied by server configuration: /home/nspandor/public_html/ads.txt
[Thu Jul 30 15:46:42.426279 2026] [security2:error] [pid 3729401:tid 3729401] [client 114.119.144.31:45765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~19,17/request_format~html"] [unique_id "amtj0qVmgcaRFFC6KcFcfgAAABk"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E19
[Thu Jul 30 15:46:42.565640 2026] [access_compat:error] [pid 3732153:tid 3732153] [client 20.104.22.47:47259] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/alfa.php
[Thu Jul 30 15:46:42.565973 2026] [core:error] [pid 3732153:tid 3732153] [client 20.104.22.47:47259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:42.649578 2026] [security2:error] [pid 3726701:tid 3726701] [client 20.171.55.167:2530] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.horus-wellbeing.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtj0s4SMinmN3k0LjBzwwAAABc"]
[Thu Jul 30 15:46:42.649793 2026] [security2:error] [pid 3726701:tid 3726701] [client 20.171.55.167:2530] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.horus-wellbeing.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtj0s4SMinmN3k0LjBzwwAAABc"]
[Thu Jul 30 15:46:42.672518 2026] [ssl:error] [pid 3731349:tid 3731349] (70014)End of file found: [client 216.73.216.199:11575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:42.695332 2026] [security2:error] [pid 3726701:tid 3726701] [client 20.171.55.167:2530] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.horus-wellbeing.co.uk"] [uri "/403.shtml"] [unique_id "amtj0s4SMinmN3k0LjBzwwAAABc"]
[Thu Jul 30 15:46:42.731777 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/av.php
[Thu Jul 30 15:46:42.828012 2026] [access_compat:error] [pid 3727295:tid 3727295] [client 20.104.22.47:47018] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/1.php
[Thu Jul 30 15:46:42.828372 2026] [core:error] [pid 3727295:tid 3727295] [client 20.104.22.47:47018] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:43.106826 2026] [access_compat:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47694] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/222.php
[Thu Jul 30 15:46:43.107187 2026] [core:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:43.369653 2026] [access_compat:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47685] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/asasx.php
[Thu Jul 30 15:46:43.370029 2026] [core:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47685] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:43.398983 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 15:46:43.631430 2026] [access_compat:error] [pid 3732152:tid 3732152] [client 20.104.22.47:47722] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/filemanager.php
[Thu Jul 30 15:46:43.631810 2026] [core:error] [pid 3732152:tid 3732152] [client 20.104.22.47:47722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:43.906845 2026] [core:error] [pid 3698691:tid 3698691] [client 20.104.22.47:47295] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:43.906873 2026] [core:error] [pid 3698691:tid 3698691] [client 20.104.22.47:47295] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:44.006646 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/file2.php
[Thu Jul 30 15:46:44.076493 2026] [access_compat:error] [pid 3727045:tid 3727045] [client 45.158.164.139:43310] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:46:44.165905 2026] [core:error] [pid 3729705:tid 3729705] [client 20.104.22.47:47686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:44.165928 2026] [core:error] [pid 3729705:tid 3729705] [client 20.104.22.47:47686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:44.437038 2026] [core:error] [pid 3729522:tid 3729522] [client 20.104.22.47:47289] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:44.437061 2026] [core:error] [pid 3729522:tid 3729522] [client 20.104.22.47:47289] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:44.485604 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/php8.php
[Thu Jul 30 15:46:44.710275 2026] [access_compat:error] [pid 3731181:tid 3731181] [client 20.104.22.47:47692] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/dropdown.php
[Thu Jul 30 15:46:44.710614 2026] [core:error] [pid 3731181:tid 3731181] [client 20.104.22.47:47692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:45.009553 2026] [access_compat:error] [pid 3731344:tid 3731344] [client 20.104.22.47:47309] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/inputs.php
[Thu Jul 30 15:46:45.009916 2026] [core:error] [pid 3731344:tid 3731344] [client 20.104.22.47:47309] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:45.036609 2026] [ssl:error] [pid 3729522:tid 3729522] (EAI 2)Name or service not known: [client 144.76.19.72:60638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:45.036654 2026] [ssl:error] [pid 3729522:tid 3729522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:45.097429 2026] [ssl:error] [pid 3722859:tid 3722859] (EAI 2)Name or service not known: [client 144.76.19.72:60644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:45.097486 2026] [ssl:error] [pid 3722859:tid 3722859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:45.219765 2026] [security2:error] [pid 3731348:tid 3731348] [client 52.238.199.152:14736] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "itsupportinayrshire.com"] [uri "/wp-config.php"] [unique_id "amtj1QaxyxHWTwTEmr2MBAAAAE4"]
[Thu Jul 30 15:46:45.219926 2026] [security2:error] [pid 3731348:tid 3731348] [client 52.238.199.152:14736] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "itsupportinayrshire.com"] [uri "/wp-config.php"] [unique_id "amtj1QaxyxHWTwTEmr2MBAAAAE4"]
[Thu Jul 30 15:46:45.220199 2026] [security2:error] [pid 3731348:tid 3731348] [client 52.238.199.152:14736] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "itsupportinayrshire.com"] [uri "/wp-config.php"] [unique_id "amtj1QaxyxHWTwTEmr2MBAAAAE4"]
[Thu Jul 30 15:46:45.273859 2026] [access_compat:error] [pid 3718555:tid 3718555] [client 20.104.22.47:47021] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/100.php
[Thu Jul 30 15:46:45.274236 2026] [core:error] [pid 3718555:tid 3718555] [client 20.104.22.47:47021] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:45.389840 2026] [ssl:error] [pid 3730363:tid 3730363] (70014)End of file found: [client 216.73.216.199:28898] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:45.588926 2026] [access_compat:error] [pid 3729522:tid 3729522] [client 20.104.22.47:47422] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/akc.php
[Thu Jul 30 15:46:45.589293 2026] [core:error] [pid 3729522:tid 3729522] [client 20.104.22.47:47422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:45.715320 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/info.php
[Thu Jul 30 15:46:45.819600 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/alfa.php
[Thu Jul 30 15:46:45.863726 2026] [core:error] [pid 3729703:tid 3729703] [client 20.104.22.47:46917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:45.863749 2026] [core:error] [pid 3729703:tid 3729703] [client 20.104.22.47:46917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:46.131906 2026] [access_compat:error] [pid 3727296:tid 3727296] [client 20.104.22.47:47013] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/php.php
[Thu Jul 30 15:46:46.132294 2026] [core:error] [pid 3727296:tid 3727296] [client 20.104.22.47:47013] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:46.418833 2026] [access_compat:error] [pid 3732153:tid 3732153] [client 20.104.22.47:46947] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/t.php
[Thu Jul 30 15:46:46.419208 2026] [core:error] [pid 3732153:tid 3732153] [client 20.104.22.47:46947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:46.442139 2026] [lsapi:warn] [pid 3727045:tid 3727045] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:46:46.691350 2026] [core:error] [pid 3729701:tid 3729701] [client 20.104.22.47:46989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:46.691394 2026] [core:error] [pid 3729701:tid 3729701] [client 20.104.22.47:46989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:46.891591 2026] [ssl:error] [pid 3730368:tid 3730368] (70014)End of file found: [client 216.73.216.199:11234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:46.954833 2026] [core:error] [pid 3712971:tid 3712971] [client 20.104.22.47:46955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:46.954857 2026] [core:error] [pid 3712971:tid 3712971] [client 20.104.22.47:46955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:46.975623 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 15:46:47.093320 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 15:46:47.229631 2026] [access_compat:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47736] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-blink.php
[Thu Jul 30 15:46:47.229972 2026] [core:error] [pid 3731352:tid 3731352] [client 20.104.22.47:47736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:47.498677 2026] [access_compat:error] [pid 3727045:tid 3727045] [client 20.104.22.47:47452] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xfun.php
[Thu Jul 30 15:46:47.499022 2026] [core:error] [pid 3727045:tid 3727045] [client 20.104.22.47:47452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:47.765821 2026] [access_compat:error] [pid 3724782:tid 3724782] [client 20.104.22.47:47737] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/p.php
[Thu Jul 30 15:46:47.766187 2026] [core:error] [pid 3724782:tid 3724782] [client 20.104.22.47:47737] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:47.995008 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 15:46:48.006498 2026] [security2:error] [pid 3727224:tid 3727224] [client 216.73.216.199:10267] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xsl.ini"] [unique_id "amtj2AqjCsgBBdeJxScjKQAAAAk"]
[Thu Jul 30 15:46:48.006849 2026] [security2:error] [pid 3727224:tid 3727224] [client 216.73.216.199:10267] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xsl.ini"] [unique_id "amtj2AqjCsgBBdeJxScjKQAAAAk"]
[Thu Jul 30 15:46:48.007118 2026] [security2:error] [pid 3727224:tid 3727224] [client 216.73.216.199:10267] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xsl.ini"] [unique_id "amtj2AqjCsgBBdeJxScjKQAAAAk"]
[Thu Jul 30 15:46:48.028000 2026] [core:error] [pid 3732023:tid 3732023] [client 20.104.22.47:47007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:48.028032 2026] [core:error] [pid 3732023:tid 3732023] [client 20.104.22.47:47007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:48.151297 2026] [ssl:error] [pid 3712971:tid 3712971] (EAI 2)Name or service not known: [client 144.76.19.72:60658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:48.151337 2026] [ssl:error] [pid 3712971:tid 3712971] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:48.214487 2026] [ssl:error] [pid 3729522:tid 3729522] (EAI 2)Name or service not known: [client 144.76.19.72:60664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:48.214520 2026] [ssl:error] [pid 3729522:tid 3729522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:48.293686 2026] [access_compat:error] [pid 3730201:tid 3730201] [client 20.104.22.47:47270] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aaa.php
[Thu Jul 30 15:46:48.294081 2026] [core:error] [pid 3730201:tid 3730201] [client 20.104.22.47:47270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:48.406661 2026] [ssl:error] [pid 3727224:tid 3727224] (70014)End of file found: [client 216.73.216.199:10267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:48.553076 2026] [access_compat:error] [pid 3732023:tid 3732023] [client 20.104.22.47:46933] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/term.php
[Thu Jul 30 15:46:48.553433 2026] [core:error] [pid 3732023:tid 3732023] [client 20.104.22.47:46933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:48.638635 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/simple.php
[Thu Jul 30 15:46:48.812592 2026] [core:error] [pid 3687959:tid 3687959] [client 20.203.221.142:41937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:48.812627 2026] [core:error] [pid 3687959:tid 3687959] [client 20.203.221.142:41937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:48.818537 2026] [access_compat:error] [pid 3730543:tid 3730543] [client 20.104.22.47:47252] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/7.php
[Thu Jul 30 15:46:48.818905 2026] [core:error] [pid 3730543:tid 3730543] [client 20.104.22.47:47252] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:48.878561 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/asasx.php
[Thu Jul 30 15:46:49.102903 2026] [access_compat:error] [pid 3732023:tid 3732023] [client 20.104.22.47:46924] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file5.php
[Thu Jul 30 15:46:49.103318 2026] [core:error] [pid 3732023:tid 3732023] [client 20.104.22.47:46924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:49.361716 2026] [access_compat:error] [pid 3731181:tid 3731181] [client 20.104.22.47:47450] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/makeasmtp.php
[Thu Jul 30 15:46:49.362087 2026] [core:error] [pid 3731181:tid 3731181] [client 20.104.22.47:47450] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:49.628156 2026] [core:error] [pid 3731351:tid 3731351] [client 20.104.22.47:47272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:49.628194 2026] [core:error] [pid 3731351:tid 3731351] [client 20.104.22.47:47272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:49.895133 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/filemanager.php
[Thu Jul 30 15:46:49.896595 2026] [core:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47685] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:49.896614 2026] [core:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47685] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:49.967576 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/ioxi-o.php
[Thu Jul 30 15:46:50.168733 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46931] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/atomlib.php
[Thu Jul 30 15:46:50.169120 2026] [core:error] [pid 3727157:tid 3727157] [client 20.104.22.47:46931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:50.432490 2026] [access_compat:error] [pid 3724782:tid 3724782] [client 20.104.22.47:47357] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/min.php
[Thu Jul 30 15:46:50.432828 2026] [core:error] [pid 3724782:tid 3724782] [client 20.104.22.47:47357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:50.711226 2026] [core:error] [pid 3689471:tid 3689471] (13)Permission denied: [client 216.73.216.199:13922] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:58/subsystem/ttyS1/flags
[Thu Jul 30 15:46:50.713824 2026] [access_compat:error] [pid 3729399:tid 3729399] [client 20.104.22.47:47671] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mac.php
[Thu Jul 30 15:46:50.714184 2026] [core:error] [pid 3729399:tid 3729399] [client 20.104.22.47:47671] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:50.975133 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47668] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/nc4.php
[Thu Jul 30 15:46:50.975591 2026] [core:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47668] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:51.111128 2026] [ssl:error] [pid 3689471:tid 3689471] (70014)End of file found: [client 216.73.216.199:13922] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:51.242669 2026] [access_compat:error] [pid 3692608:tid 3692608] [client 20.104.22.47:47588] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/as.php
[Thu Jul 30 15:46:51.243106 2026] [core:error] [pid 3692608:tid 3692608] [client 20.104.22.47:47588] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:51.273063 2026] [ssl:error] [pid 3729700:tid 3729700] (EAI 2)Name or service not known: [client 144.76.19.72:26398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:51.273131 2026] [ssl:error] [pid 3729700:tid 3729700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:51.331197 2026] [ssl:error] [pid 3727045:tid 3727045] (EAI 2)Name or service not known: [client 144.76.19.72:26402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:51.331237 2026] [ssl:error] [pid 3727045:tid 3727045] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:51.353258 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/av.php
[Thu Jul 30 15:46:51.503589 2026] [access_compat:error] [pid 3724782:tid 3724782] [client 20.104.22.47:47728] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/k.php
[Thu Jul 30 15:46:51.503979 2026] [core:error] [pid 3724782:tid 3724782] [client 20.104.22.47:47728] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:51.779724 2026] [core:error] [pid 3729524:tid 3729524] [client 20.104.22.47:47644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:51.779760 2026] [core:error] [pid 3729524:tid 3729524] [client 20.104.22.47:47644] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:52.007786 2026] [access_compat:error] [pid 3729698:tid 3729698] [client 20.203.221.142:63272] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a2.php
[Thu Jul 30 15:46:52.008175 2026] [core:error] [pid 3729698:tid 3729698] [client 20.203.221.142:63272] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:52.046249 2026] [access_compat:error] [pid 3729401:tid 3729401] [client 20.104.22.47:47422] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/system_log.php
[Thu Jul 30 15:46:52.046698 2026] [core:error] [pid 3729401:tid 3729401] [client 20.104.22.47:47422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:52.309791 2026] [access_compat:error] [pid 3731010:tid 3731010] [client 20.104.22.47:47633] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/x.php
[Thu Jul 30 15:46:52.310155 2026] [core:error] [pid 3731010:tid 3731010] [client 20.104.22.47:47633] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:52.575310 2026] [access_compat:error] [pid 3727045:tid 3727045] [client 20.104.22.47:47647] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/autoload_classmap.php
[Thu Jul 30 15:46:52.575646 2026] [core:error] [pid 3727045:tid 3727045] [client 20.104.22.47:47647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:52.747693 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 15:46:52.848645 2026] [access_compat:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47474] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/hosty.php
[Thu Jul 30 15:46:52.849019 2026] [core:error] [pid 3731009:tid 3731009] [client 20.104.22.47:47474] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:52.938702 2026] [core:error] [pid 3729705:tid 3729705] [client 20.203.221.142:63242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:52.938729 2026] [core:error] [pid 3729705:tid 3729705] [client 20.203.221.142:63242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:53.120830 2026] [access_compat:error] [pid 3729698:tid 3729698] [client 20.104.22.47:47603] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/test1.php
[Thu Jul 30 15:46:53.121169 2026] [core:error] [pid 3729698:tid 3729698] [client 20.104.22.47:47603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:53.392304 2026] [access_compat:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47648] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/zwso.php
[Thu Jul 30 15:46:53.392695 2026] [core:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:53.567937 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/file2.php
[Thu Jul 30 15:46:53.654666 2026] [access_compat:error] [pid 3730369:tid 3730369] [client 20.104.22.47:46928] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/Geforce.php
[Thu Jul 30 15:46:53.655022 2026] [core:error] [pid 3730369:tid 3730369] [client 20.104.22.47:46928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:53.903132 2026] [security2:error] [pid 3731344:tid 3731344] [client 185.191.171.4:18726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2608.0/prev_next,prev.html"] [unique_id "amtj3a4vaa_phPN6sVplhQAAAEs"]
[Thu Jul 30 15:46:53.922208 2026] [access_compat:error] [pid 3722859:tid 3722859] [client 20.104.22.47:47370] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fpwch.php
[Thu Jul 30 15:46:53.922579 2026] [core:error] [pid 3722859:tid 3722859] [client 20.104.22.47:47370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:54.196649 2026] [core:error] [pid 3729705:tid 3729705] [client 20.104.22.47:46960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:54.196680 2026] [core:error] [pid 3729705:tid 3729705] [client 20.104.22.47:46960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:54.458220 2026] [access_compat:error] [pid 3731180:tid 3731180] [client 20.104.22.47:47031] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-blog-header.php
[Thu Jul 30 15:46:54.458590 2026] [core:error] [pid 3731180:tid 3731180] [client 20.104.22.47:47031] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:54.469922 2026] [ssl:error] [pid 3729704:tid 3729704] (EAI 2)Name or service not known: [client 144.76.19.72:26416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:54.469959 2026] [ssl:error] [pid 3729704:tid 3729704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:54.525780 2026] [ssl:error] [pid 3727294:tid 3727294] (EAI 2)Name or service not known: [client 144.76.19.72:26418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:54.525835 2026] [ssl:error] [pid 3727294:tid 3727294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:54.753213 2026] [core:error] [pid 3729127:tid 3729127] (13)Permission denied: [client 216.73.216.199:49309] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:46:54.771040 2026] [core:error] [pid 3730548:tid 3730548] [client 20.104.22.47:47558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:54.771081 2026] [core:error] [pid 3730548:tid 3730548] [client 20.104.22.47:47558] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:55.030054 2026] [core:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:55.030094 2026] [core:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:55.201284 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/alfa.php
[Thu Jul 30 15:46:55.232883 2026] [authz_core:error] [pid 3729305:tid 3729305] [client 66.249.66.33:65325] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:46:55.235851 2026] [authz_core:error] [pid 3729305:tid 3729305] [client 66.249.66.33:65325] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:46:55.294759 2026] [access_compat:error] [pid 3731345:tid 3731345] [client 20.104.22.47:46996] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-signin.php
[Thu Jul 30 15:46:55.295125 2026] [core:error] [pid 3731345:tid 3731345] [client 20.104.22.47:46996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:55.592046 2026] [access_compat:error] [pid 3722976:tid 3722976] [client 20.104.22.47:47635] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/f35.php
[Thu Jul 30 15:46:55.592413 2026] [core:error] [pid 3722976:tid 3722976] [client 20.104.22.47:47635] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:55.855832 2026] [access_compat:error] [pid 3724384:tid 3724384] [client 20.104.22.47:47654] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/gg.php
[Thu Jul 30 15:46:55.856290 2026] [core:error] [pid 3724384:tid 3724384] [client 20.104.22.47:47654] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:56.107210 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/1.php
[Thu Jul 30 15:46:56.128043 2026] [access_compat:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47234] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/class.php
[Thu Jul 30 15:46:56.128505 2026] [core:error] [pid 3731350:tid 3731350] [client 20.104.22.47:47234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:56.395235 2026] [access_compat:error] [pid 3732023:tid 3732023] [client 20.104.22.47:47236] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/flower.php
[Thu Jul 30 15:46:56.395590 2026] [core:error] [pid 3732023:tid 3732023] [client 20.104.22.47:47236] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:56.663862 2026] [access_compat:error] [pid 3731348:tid 3731348] [client 20.104.22.47:47111] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/motu.php
[Thu Jul 30 15:46:56.664270 2026] [core:error] [pid 3731348:tid 3731348] [client 20.104.22.47:47111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:56.865095 2026] [core:error] [pid 3727224:tid 3727224] (13)Permission denied: [client 216.73.216.199:10906] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/scsi_dh_rdac/uevent
[Thu Jul 30 15:46:56.933685 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/222.php
[Thu Jul 30 15:46:56.935844 2026] [access_compat:error] [pid 3724384:tid 3724384] [client 20.104.22.47:47610] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/404.php
[Thu Jul 30 15:46:56.936203 2026] [core:error] [pid 3724384:tid 3724384] [client 20.104.22.47:47610] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:57.214052 2026] [access_compat:error] [pid 3722859:tid 3722859] [client 20.104.22.47:47637] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/lite.php
[Thu Jul 30 15:46:57.214417 2026] [core:error] [pid 3722859:tid 3722859] [client 20.104.22.47:47637] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:57.390653 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/dropdown.php
[Thu Jul 30 15:46:57.490244 2026] [access_compat:error] [pid 3722098:tid 3722098] [client 20.104.22.47:46924] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/lock360.php
[Thu Jul 30 15:46:57.490587 2026] [core:error] [pid 3722098:tid 3722098] [client 20.104.22.47:46924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:57.582829 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:26432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:57.582866 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:57.641447 2026] [ssl:error] [pid 3731181:tid 3731181] (EAI 2)Name or service not known: [client 144.76.19.72:26446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:46:57.641483 2026] [ssl:error] [pid 3731181:tid 3731181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:46:57.756514 2026] [core:error] [pid 3729699:tid 3729699] [client 20.104.22.47:47278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:57.756536 2026] [core:error] [pid 3729699:tid 3729699] [client 20.104.22.47:47278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:57.860524 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/asasx.php
[Thu Jul 30 15:46:58.016610 2026] [access_compat:error] [pid 3730543:tid 3730543] [client 20.104.22.47:47642] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-links-opml.php
[Thu Jul 30 15:46:58.016936 2026] [core:error] [pid 3730543:tid 3730543] [client 20.104.22.47:47642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:58.069585 2026] [ssl:error] [pid 3727224:tid 3727224] (70014)End of file found: [client 216.73.216.199:10906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:46:58.100253 2026] [security2:error] [pid 3722976:tid 3722976] [client 114.119.145.130:45363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/tag/tumi-dolamo/"] [unique_id "amtj4pQVekwKrX5MIZ5ZswAAAEM"], referer: http://www.localhero.org.uk/tag/tumi-dolamo
[Thu Jul 30 15:46:58.298646 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/inputs.php
[Thu Jul 30 15:46:58.298889 2026] [security2:error] [pid 3725422:tid 3725422] [client 114.119.135.232:32531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/shelterprojects2009/ref/C.9-India-1977-Tropical-cyclone.pdf"] [unique_id "amtj4k8MaFOiw9n5IyTxWAAAAAY"], referer: https://www.shelterprojects.org/editions.html
[Thu Jul 30 15:46:58.308840 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47282] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.alf.php
[Thu Jul 30 15:46:58.309212 2026] [core:error] [pid 3730538:tid 3730538] [client 20.104.22.47:47282] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:46:59.175776 2026] [access_compat:error] [pid 3730848:tid 3730848] [client 20.104.22.47:47325] AH01797: client denied by server configuration: /home/thepryor/public_html/filemanager.php
[Thu Jul 30 15:46:59.222612 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/100.php
[Thu Jul 30 15:46:59.273847 2026] [core:error] [pid 3729127:tid 3729127] (13)Permission denied: [client 216.73.216.199:49309] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/dev/char/189:1/driver/bind
[Thu Jul 30 15:46:59.371894 2026] [lsapi:warn] [pid 3722980:tid 3722980] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:46:59.574586 2026] [ssl:error] [pid 3729127:tid 3729127] (70014)End of file found: [client 216.73.216.199:49309] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:00.067222 2026] [ssl:error] [pid 3722098:tid 3722098] (70014)End of file found: [client 216.73.216.199:56879] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:00.202339 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/akc.php
[Thu Jul 30 15:47:00.698170 2026] [ssl:error] [pid 3727296:tid 3727296] (EAI 2)Name or service not known: [client 144.76.19.72:43812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:00.698216 2026] [ssl:error] [pid 3727296:tid 3727296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:00.751825 2026] [ssl:error] [pid 3731010:tid 3731010] (EAI 2)Name or service not known: [client 144.76.19.72:43822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:00.751854 2026] [ssl:error] [pid 3731010:tid 3731010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:01.736492 2026] [security2:error] [pid 3687999:tid 3687999] [client 47.128.127.40:35420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "epmsonline.co.uk"] [uri "/robots.txt"] [unique_id "amtj5crppOX9g4-P_rHXBwAAAC0"]
[Thu Jul 30 15:47:01.969881 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/php.php
[Thu Jul 30 15:47:02.805399 2026] [security2:error] [pid 3732153:tid 3732153] [client 8.211.159.0:35107] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtj5hwHDAqeZfZbZ80tCQAAAFU"]
[Thu Jul 30 15:47:02.805464 2026] [security2:error] [pid 3732153:tid 3732153] [client 8.211.159.0:35107] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtj5hwHDAqeZfZbZ80tCQAAAFU"]
[Thu Jul 30 15:47:02.805732 2026] [security2:error] [pid 3732153:tid 3732153] [client 8.211.159.0:35107] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtj5hwHDAqeZfZbZ80tCQAAAFU"]
[Thu Jul 30 15:47:02.995542 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/t.php
[Thu Jul 30 15:47:03.840002 2026] [ssl:error] [pid 3731352:tid 3731352] (EAI 2)Name or service not known: [client 144.76.19.72:43828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:03.840109 2026] [ssl:error] [pid 3731352:tid 3731352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:03.903583 2026] [ssl:error] [pid 3726701:tid 3726701] (EAI 2)Name or service not known: [client 144.76.19.72:43834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:03.903618 2026] [ssl:error] [pid 3726701:tid 3726701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:04.405487 2026] [ssl:error] [pid 3731350:tid 3731350] (70014)End of file found: [client 216.73.216.199:60361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:04.738498 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blink.php
[Thu Jul 30 15:47:05.042585 2026] [security2:error] [pid 3731352:tid 3731352] [client 150.5.134.200:30617] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtj6XaR0KFkaE2wezz1qwAAAFI"]
[Thu Jul 30 15:47:05.042641 2026] [security2:error] [pid 3731352:tid 3731352] [client 150.5.134.200:30617] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtj6XaR0KFkaE2wezz1qwAAAFI"]
[Thu Jul 30 15:47:05.042918 2026] [security2:error] [pid 3731352:tid 3731352] [client 150.5.134.200:30617] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtj6XaR0KFkaE2wezz1qwAAAFI"]
[Thu Jul 30 15:47:05.305150 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/xfun.php
[Thu Jul 30 15:47:05.331572 2026] [ssl:error] [pid 3730201:tid 3730201] (70014)End of file found: [client 216.73.216.199:31380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:05.770020 2026] [cgi:error] [pid 3729305:tid 3729305] [client 9.160.34.146:20637] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 15:47:05.770142 2026] [cgi:error] [pid 3729305:tid 3729305] [client 9.160.34.146:20637] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 15:47:05.880608 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/p.php
[Thu Jul 30 15:47:06.805082 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 20.203.221.142:55712] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/0.php
[Thu Jul 30 15:47:06.805498 2026] [core:error] [pid 3730538:tid 3730538] [client 20.203.221.142:55712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:06.835557 2026] [core:error] [pid 3731347:tid 3731347] (13)Permission denied: [client 216.73.216.199:58343] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/kirstybashforth.com.db
[Thu Jul 30 15:47:06.905485 2026] [security2:error] [pid 3731351:tid 3731351] [client 3.210.223.61:32528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtj6m2AkVSwxL6C05IhrAAAAFE"]
[Thu Jul 30 15:47:06.959729 2026] [ssl:error] [pid 3729701:tid 3729701] (EAI 2)Name or service not known: [client 144.76.19.72:43846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:06.959775 2026] [ssl:error] [pid 3729701:tid 3729701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:07.020053 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:43848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:07.020093 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:07.088629 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/aaa.php
[Thu Jul 30 15:47:07.093641 2026] [security2:error] [pid 3731344:tid 3731344] [client 176.31.139.30:25514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/robots.txt"] [unique_id "amtj664vaa_phPN6sVplmQAAAEs"]
[Thu Jul 30 15:47:07.137460 2026] [ssl:error] [pid 3731347:tid 3731347] (70014)End of file found: [client 216.73.216.199:58343] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:07.575958 2026] [security2:error] [pid 3722922:tid 3722922] [client 150.5.134.200:34317] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtj67GvTC08vHgcj9x0FAAAACM"]
[Thu Jul 30 15:47:07.576009 2026] [security2:error] [pid 3722922:tid 3722922] [client 150.5.134.200:34317] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtj67GvTC08vHgcj9x0FAAAACM"]
[Thu Jul 30 15:47:07.576272 2026] [security2:error] [pid 3722922:tid 3722922] [client 150.5.134.200:34317] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtj67GvTC08vHgcj9x0FAAAACM"]
[Thu Jul 30 15:47:07.638675 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/term.php
[Thu Jul 30 15:47:08.206142 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/7.php
[Thu Jul 30 15:47:08.770982 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/file5.php
[Thu Jul 30 15:47:09.110899 2026] [security2:error] [pid 3718555:tid 3718555] [client 54.39.0.157:49690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/"] [unique_id "amtj7Y4Jzc4zx9-NsW6X6QAAABU"]
[Thu Jul 30 15:47:09.206414 2026] [lsapi:warn] [pid 3730363:tid 3730363] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:47:09.378865 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/makeasmtp.php
[Thu Jul 30 15:47:10.040543 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/class-wp-http-client.php
[Thu Jul 30 15:47:10.073634 2026] [ssl:error] [pid 3731350:tid 3731350] (EAI 2)Name or service not known: [client 144.76.19.72:52002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:10.073689 2026] [ssl:error] [pid 3731350:tid 3731350] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:10.129662 2026] [ssl:error] [pid 3729701:tid 3729701] (EAI 2)Name or service not known: [client 144.76.19.72:52012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:10.129688 2026] [ssl:error] [pid 3729701:tid 3729701] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:10.526089 2026] [access_compat:error] [pid 3731010:tid 3731010] [client 20.203.221.142:63253] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/lock360.php
[Thu Jul 30 15:47:10.526470 2026] [core:error] [pid 3731010:tid 3731010] [client 20.203.221.142:63253] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:10.610886 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/atomlib.php
[Thu Jul 30 15:47:11.145623 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/min.php
[Thu Jul 30 15:47:11.347733 2026] [core:error] [pid 3731182:tid 3731182] (13)Permission denied: [client 216.73.216.199:50787] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/jbd2/uevent
[Thu Jul 30 15:47:11.663559 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/mac.php
[Thu Jul 30 15:47:12.266908 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/nc4.php
[Thu Jul 30 15:47:12.268695 2026] [ssl:error] [pid 3731182:tid 3731182] (70014)End of file found: [client 216.73.216.199:50787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:12.649894 2026] [access_compat:error] [pid 3732153:tid 3732153] [client 20.203.221.142:3682] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/plss3.php
[Thu Jul 30 15:47:12.650297 2026] [core:error] [pid 3732153:tid 3732153] [client 20.203.221.142:3682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:12.953949 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 15:47:13.186245 2026] [ssl:error] [pid 3731347:tid 3731347] (EAI 2)Name or service not known: [client 144.76.19.72:52024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:13.186282 2026] [ssl:error] [pid 3731347:tid 3731347] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:13.241294 2026] [ssl:error] [pid 3729305:tid 3729305] (EAI 2)Name or service not known: [client 144.76.19.72:52026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:13.241335 2026] [ssl:error] [pid 3729305:tid 3729305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:13.496163 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 15:47:14.524695 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/system_log.php
[Thu Jul 30 15:47:15.053608 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/x.php
[Thu Jul 30 15:47:15.285253 2026] [core:error] [pid 3731180:tid 3731180] (13)Permission denied: [client 216.73.216.199:38822] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:47:15.625143 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/autoload_classmap.php
[Thu Jul 30 15:47:16.138108 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/hosty.php
[Thu Jul 30 15:47:16.735749 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/test1.php
[Thu Jul 30 15:47:17.092148 2026] [ssl:error] [pid 3727296:tid 3727296] (70014)End of file found: [client 216.73.216.199:2140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:17.286372 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/zwso.php
[Thu Jul 30 15:47:17.393428 2026] [ssl:error] [pid 3731180:tid 3731180] (70014)End of file found: [client 216.73.216.199:38822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:17.819649 2026] [access_compat:error] [pid 3730062:tid 3730062] [client 20.203.221.142:28157] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp.php
[Thu Jul 30 15:47:17.820001 2026] [core:error] [pid 3730062:tid 3730062] [client 20.203.221.142:28157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:17.863777 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/Geforce.php
[Thu Jul 30 15:47:18.028808 2026] [security2:error] [pid 3726700:tid 3726700] [client 43.159.135.203:38912] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtj9qyTr9C2TRLePKtLfwAAABM"]
[Thu Jul 30 15:47:18.039943 2026] [ssl:error] [pid 3730062:tid 3730062] (EAI 2)Name or service not known: [client 144.76.19.72:52030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:18.039973 2026] [ssl:error] [pid 3730062:tid 3730062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:18.429820 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/fpwch.php
[Thu Jul 30 15:47:19.585326 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blog-header.php
[Thu Jul 30 15:47:20.460621 2026] [access_compat:error] [pid 3730543:tid 3730543] [client 20.203.221.142:47254] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/x.php
[Thu Jul 30 15:47:20.460957 2026] [core:error] [pid 3730543:tid 3730543] [client 20.203.221.142:47254] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:21.635402 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-signin.php
[Thu Jul 30 15:47:22.714540 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 20.203.221.142:41970] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aq.php
[Thu Jul 30 15:47:22.714913 2026] [core:error] [pid 3722812:tid 3722812] [client 20.203.221.142:41970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:23.480966 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/f35.php
[Thu Jul 30 15:47:24.508694 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/gg.php
[Thu Jul 30 15:47:25.594519 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/class.php
[Thu Jul 30 15:47:26.663084 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/flower.php
[Thu Jul 30 15:47:27.329521 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/motu.php
[Thu Jul 30 15:47:27.945183 2026] [core:error] [pid 3729699:tid 3729699] [client 20.203.221.142:23851] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:27.945209 2026] [core:error] [pid 3729699:tid 3729699] [client 20.203.221.142:23851] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:28.337723 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 15:47:28.593668 2026] [security2:error] [pid 3730538:tid 3730538] [client 114.119.157.56:27841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-364.xml"] [unique_id "amtkADgp80QAf8bfuu8Q1wAAADs"]
[Thu Jul 30 15:47:28.912677 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:29.121973 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/this_is_a_new_hello_world.php
[Thu Jul 30 15:47:29.122020 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.140392 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/lite.php
[Thu Jul 30 15:47:29.494590 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wawe.php
[Thu Jul 30 15:47:29.494630 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.559366 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa123.php
[Thu Jul 30 15:47:29.559410 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.686418 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/kn.php
[Thu Jul 30 15:47:29.686468 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.714299 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/class-wp.php
[Thu Jul 30 15:47:29.714348 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.744865 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/shelp.php
[Thu Jul 30 15:47:29.744908 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.778277 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/phpi.php
[Thu Jul 30 15:47:29.778321 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.821664 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/birlingsless.php
[Thu Jul 30 15:47:29.821708 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.849686 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/shell20211028.php
[Thu Jul 30 15:47:29.849728 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.889345 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/x402.ph
[Thu Jul 30 15:47:29.931461 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-slss.php
[Thu Jul 30 15:47:29.931503 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:29.967927 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/mifta.ph
[Thu Jul 30 15:47:29.996968 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/lock360.php
[Thu Jul 30 15:47:30.007021 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/amxloxxr.php
[Thu Jul 30 15:47:30.007083 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.046519 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/infophp.php
[Thu Jul 30 15:47:30.046562 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.094227 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/xxl.php
[Thu Jul 30 15:47:30.094270 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.242506 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/png.php
[Thu Jul 30 15:47:30.242554 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.448602 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/xmlss.php
[Thu Jul 30 15:47:30.448657 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.593948 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wuasr.php
[Thu Jul 30 15:47:30.594000 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.621954 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/kbfr.php
[Thu Jul 30 15:47:30.622006 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.658626 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko-new.php
[Thu Jul 30 15:47:30.658682 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.690568 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/god4m.php
[Thu Jul 30 15:47:30.690621 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.718721 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/ok.php
[Thu Jul 30 15:47:30.718774 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.773168 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/usr.php
[Thu Jul 30 15:47:30.773220 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.801181 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/ncx.php
[Thu Jul 30 15:47:30.801249 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:30.835548 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-content/wp-conflg.php
[Thu Jul 30 15:47:30.969025 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/jo.php
[Thu Jul 30 15:47:30.969159 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.051841 2026] [access_compat:error] [pid 3727157:tid 3727157] [client 20.203.221.142:14197] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/css.php
[Thu Jul 30 15:47:31.052201 2026] [core:error] [pid 3727157:tid 3727157] [client 20.203.221.142:14197] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:31.479639 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/ixpsdyrw.php
[Thu Jul 30 15:47:31.479698 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.508329 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/er.php
[Thu Jul 30 15:47:31.508409 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.536317 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/oxshell.php
[Thu Jul 30 15:47:31.536394 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.580612 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/in.php
[Thu Jul 30 15:47:31.580665 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.615751 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-links-opml.php
[Thu Jul 30 15:47:31.658057 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/nw.php
[Thu Jul 30 15:47:31.658119 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.693793 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 15:47:31.693838 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.763083 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/pxx.php
[Thu Jul 30 15:47:31.763138 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:31.792447 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/f8moue.php
[Thu Jul 30 15:47:31.792489 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.188234 2026] [ssl:error] [pid 3731182:tid 3731182] (EAI 2)Name or service not known: [client 144.76.19.72:52044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:32.188279 2026] [ssl:error] [pid 3731182:tid 3731182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:32.252597 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 20.104.22.47:46977] AH01797: client denied by server configuration: /home/thepryor/public_html/.alf.php
[Thu Jul 30 15:47:32.276501 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/011i.php
[Thu Jul 30 15:47:32.276550 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.304661 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/b00869ae6e.php
[Thu Jul 30 15:47:32.304705 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.355427 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/13134.php
[Thu Jul 30 15:47:32.355471 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.384836 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/xminie.php
[Thu Jul 30 15:47:32.384880 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.413449 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 15:47:32.413493 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.461031 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/mgrr.php
[Thu Jul 30 15:47:32.461086 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.657491 2026] [security2:error] [pid 3734942:tid 3734942] [client 43.159.135.203:53094] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtkBMwCQ13DxVcHktDPzgAAAAA"], referer: http://www.blow-hairstudio.co.uk
[Thu Jul 30 15:47:32.734173 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/domvf.php
[Thu Jul 30 15:47:32.734218 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.776805 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/yup.php
[Thu Jul 30 15:47:32.776849 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.832404 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/X.php
[Thu Jul 30 15:47:32.832444 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.861289 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/1polka.php
[Thu Jul 30 15:47:32.861334 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.890215 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/gec.php
[Thu Jul 30 15:47:32.890256 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.932231 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/sky.php
[Thu Jul 30 15:47:32.932271 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.960642 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/fffm.php
[Thu Jul 30 15:47:32.960682 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:32.994419 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/sixxis.php
[Thu Jul 30 15:47:32.994464 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.024862 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/yj09.php
[Thu Jul 30 15:47:33.024909 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.076613 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 15:47:33.076664 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.211838 2026] [security2:error] [pid 3692608:tid 3692608] [client 47.128.27.197:29668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/robots.txt"] [unique_id "amtkBVTBhqQvZfl7j_pWxQAAABE"]
[Thu Jul 30 15:47:33.262388 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/k2.php
[Thu Jul 30 15:47:33.262440 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.311221 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 15:47:33.311270 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.347086 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/fpwch.php
[Thu Jul 30 15:47:33.347129 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.375420 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/w2025.php
[Thu Jul 30 15:47:33.375476 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.404510 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/FWAZ.php
[Thu Jul 30 15:47:33.404559 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.432596 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/qterm.php
[Thu Jul 30 15:47:33.432655 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.473495 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/blurbs.php
[Thu Jul 30 15:47:33.473544 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.506411 2026] [lsapi:error] [pid 3692608:tid 3692608] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Request retrieving failed. Reason: unknown, On: request body, Source: client, Where: unknown
[Thu Jul 30 15:47:33.506434 2026] [lsapi:error] [pid 3692608:tid 3692608] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] In order to get more info about fail reason try to change LogLevel to Info in httpd.conf and restart Apache
[Thu Jul 30 15:47:33.506441 2026] [lsapi:error] [pid 3692608:tid 3692608] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Client error on sending request(POST /xmlrpc.php HTTP/1.1); uri(/xmlrpc.php) content-length(682): user_get_body(tmpstackbuf, 16384): read from client failed
[Thu Jul 30 15:47:33.522525 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-ws68.php
[Thu Jul 30 15:47:33.522588 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.574470 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/xyn.php
[Thu Jul 30 15:47:33.574519 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.603878 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/ccc.php
[Thu Jul 30 15:47:33.603922 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.643266 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/get.php
[Thu Jul 30 15:47:33.643308 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.671093 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/images.php
[Thu Jul 30 15:47:33.671138 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.705407 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/alls.php
[Thu Jul 30 15:47:33.705450 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.756589 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/coffexium.php
[Thu Jul 30 15:47:33.756635 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:33.993608 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/red.php
[Thu Jul 30 15:47:33.993652 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:34.011295 2026] [access_compat:error] [pid 3736172:tid 3736172] [client 54.158.29.48:46514] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xmlrpc.php
[Thu Jul 30 15:47:34.022527 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:34.051538 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:34.083431 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:34.111443 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:34.139327 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:34.190273 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 15:47:34.190315 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:34.220484 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/177.php
[Thu Jul 30 15:47:34.220527 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:34.574208 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/199.php
[Thu Jul 30 15:47:34.574253 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:34.604323 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/file52.php
[Thu Jul 30 15:47:34.604375 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:34.924422 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/geck.php
[Thu Jul 30 15:47:34.924467 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:34.954786 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/biufile.php
[Thu Jul 30 15:47:34.954829 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.257418 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/dejavu.php
[Thu Jul 30 15:47:35.257464 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.285377 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/aaf.php
[Thu Jul 30 15:47:35.285421 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.337362 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/ha.php
[Thu Jul 30 15:47:35.337412 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.367212 2026] [core:error] [pid 3726654:tid 3726654] (13)Permission denied: [client 216.73.216.199:16947] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory35/subsystem/uevent
[Thu Jul 30 15:47:35.369934 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/hur.php
[Thu Jul 30 15:47:35.369991 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.405471 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/h02ugyh.php
[Thu Jul 30 15:47:35.405534 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.450328 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 15:47:35.450396 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.498486 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/ops.php
[Thu Jul 30 15:47:35.498528 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.531288 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/ingfo.php
[Thu Jul 30 15:47:35.531329 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.591505 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/error_log.php
[Thu Jul 30 15:47:35.591548 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.622361 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/koala.php
[Thu Jul 30 15:47:35.622406 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.675948 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/mac.php
[Thu Jul 30 15:47:35.675992 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.704715 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wefile.php
[Thu Jul 30 15:47:35.704761 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.771301 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:35.805259 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:35.849367 2026] [ssl:error] [pid 3736182:tid 3736182] (EAI 2)Name or service not known: [client 144.76.19.72:55640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:35.849411 2026] [ssl:error] [pid 3736182:tid 3736182] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:35.861446 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/makeasmtp.php
[Thu Jul 30 15:47:35.861493 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.904483 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/2P.php
[Thu Jul 30 15:47:35.904531 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.932532 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/about.php
[Thu Jul 30 15:47:35.932586 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:35.968665 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:35.996480 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/system_log.php
[Thu Jul 30 15:47:35.996523 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:36.039108 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:36.074500 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:36.264509 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/crgio.php
[Thu Jul 30 15:47:36.264552 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:36.297573 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/pucci.php
[Thu Jul 30 15:47:36.297621 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:36.355474 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:36.403706 2026] [access_compat:error] [pid 3730538:tid 3730538] [client 51.103.154.47:28912] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:36.580182 2026] [core:error] [pid 3732153:tid 3732153] (13)Permission denied: [client 216.73.216.199:31925] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-16/objects
[Thu Jul 30 15:47:36.852204 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-temp.php
[Thu Jul 30 15:47:36.852255 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:36.966510 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:37.001545 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/puc.php
[Thu Jul 30 15:47:37.001594 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.035666 2026] [security2:error] [pid 3731010:tid 3731010] [client 114.119.150.239:23701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "josephashmore.org"] [uri "/working/dadaab/"] [unique_id "amtkCUaDS34LBx6hPwusKAAAAEI"], referer: https://josephashmore.org/index.html
[Thu Jul 30 15:47:37.050895 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/dx.php
[Thu Jul 30 15:47:37.050942 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.080406 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:37.109841 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/7.php
[Thu Jul 30 15:47:37.109887 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.151947 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/8.php
[Thu Jul 30 15:47:37.151989 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.193520 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 15:47:37.193568 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.228446 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 15:47:37.228489 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.264315 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 15:47:37.264394 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.314706 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 15:47:37.314763 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.444985 2026] [security2:error] [pid 3736183:tid 3736183] [client 52.238.199.152:55748] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "itsupportinayrshire.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtkCVFQyPPvEXfedOw9nwAAAD8"]
[Thu Jul 30 15:47:37.445202 2026] [security2:error] [pid 3736183:tid 3736183] [client 52.238.199.152:55748] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "itsupportinayrshire.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtkCVFQyPPvEXfedOw9nwAAAD8"]
[Thu Jul 30 15:47:37.445448 2026] [security2:error] [pid 3736183:tid 3736183] [client 52.238.199.152:55748] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "itsupportinayrshire.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtkCVFQyPPvEXfedOw9nwAAAD8"]
[Thu Jul 30 15:47:37.478239 2026] [ssl:error] [pid 3732153:tid 3732153] (70014)End of file found: [client 216.73.216.199:31925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:37.536845 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:37.676833 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 15:47:37.676893 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.711667 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/av.php
[Thu Jul 30 15:47:37.711724 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.738405 2026] [security2:error] [pid 3734942:tid 3734942] [client 114.119.137.128:49649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/products/mango-wood-bowl-blond-colour/"] [unique_id "amtkCcwCQ13DxVcHktDP0AAAAAA"], referer: http://tripodhome.co.uk/product-category/bowls-baskest-and-bird-cages
[Thu Jul 30 15:47:37.874916 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 15:47:37.874972 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:37.904596 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:38.040521 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blog.php
[Thu Jul 30 15:47:38.040567 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:38.077421 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:38.143262 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:38.205030 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 15:47:38.205086 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:38.270281 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 15:47:38.270328 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:38.306527 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-edit.php
[Thu Jul 30 15:47:38.306573 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:38.335790 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 15:47:38.335836 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:38.368451 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/index.php
[Thu Jul 30 15:47:38.368499 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:38.398120 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:38.469531 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/BDKR28WP.php
[Thu Jul 30 15:47:38.469573 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:38.513910 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:38.855820 2026] [ssl:error] [pid 3734942:tid 3734942] (EAI 2)Name or service not known: [client 144.76.19.72:55644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:38.855874 2026] [ssl:error] [pid 3734942:tid 3734942] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:38.960241 2026] [security2:error] [pid 3737441:tid 3737441] [client 198.244.183.120:31628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thestringman.co.uk"] [uri "/robots.txt"] [unique_id "amtkCnpHsGMt09JnPi8KJgAAAFQ"]
[Thu Jul 30 15:47:39.018119 2026] [lsapi:warn] [pid 3737441:tid 3737441] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:47:39.275583 2026] [security2:error] [pid 3737442:tid 3737442] [client 185.191.171.18:39102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/francis-schreibvogel-oklahoma"] [unique_id "amtkCx2DqAlCZMpWR0teOgAAAFY"]
[Thu Jul 30 15:47:39.320296 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:39.352499 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 15:47:39.352546 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.384529 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 15:47:39.384574 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.417456 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/a1.php
[Thu Jul 30 15:47:39.417505 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.447530 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:39.483495 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/admin.php
[Thu Jul 30 15:47:39.483546 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.570408 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 15:47:39.606530 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 15:47:39.606577 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.643039 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/xxx.php
[Thu Jul 30 15:47:39.643097 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.672510 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/hypo.php
[Thu Jul 30 15:47:39.672553 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.855683 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:39.890428 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 15:47:39.890473 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:39.923705 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:39.953533 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/als.php
[Thu Jul 30 15:47:39.953580 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.098375 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/pol.php
[Thu Jul 30 15:47:40.098422 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.129408 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/file5.php
[Thu Jul 30 15:47:40.129453 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.133532 2026] [security2:error] [pid 3727225:tid 3727225] [client 51.75.236.129:19656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thestringman.co.uk"] [uri "/"] [unique_id "amtkDOEZK0mnXR83Vzm6pwAAAA4"]
[Thu Jul 30 15:47:40.158622 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 15:47:40.158665 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.188038 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 15:47:40.188097 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.223551 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/aa2.php
[Thu Jul 30 15:47:40.223596 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.319528 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/ccou.php
[Thu Jul 30 15:47:40.319582 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.369453 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/dr.php
[Thu Jul 30 15:47:40.369495 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.470531 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/xamp.php
[Thu Jul 30 15:47:40.470574 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.504097 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/bless.php
[Thu Jul 30 15:47:40.504140 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.536437 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/file25.php
[Thu Jul 30 15:47:40.536478 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.566246 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/file6.php
[Thu Jul 30 15:47:40.566287 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.595561 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/a2.php
[Thu Jul 30 15:47:40.595603 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.635020 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/file15.php
[Thu Jul 30 15:47:40.635079 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.672706 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 15:47:40.672750 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.709231 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-load.php
[Thu Jul 30 15:47:40.709277 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.740751 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/xwpg.php
[Thu Jul 30 15:47:40.740795 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.760705 2026] [access_compat:error] [pid 3722976:tid 3722976] [client 152.203.207.186:34111] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/harry-potter-and-the-deathly-hallows-part-2-3d
[Thu Jul 30 15:47:40.760830 2026] [access_compat:error] [pid 3722976:tid 3722976] [client 152.203.207.186:34111] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:47:40.775279 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 15:47:40.809694 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:40.840609 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/xstelth.php
[Thu Jul 30 15:47:40.840648 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:40.905708 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 15:47:40.940402 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 15:47:40.940449 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.022234 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko.php
[Thu Jul 30 15:47:41.022290 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.074447 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/pbck.php
[Thu Jul 30 15:47:41.074488 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.111474 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/xiugai.php
[Thu Jul 30 15:47:41.111519 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.146754 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/e.php
[Thu Jul 30 15:47:41.146797 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.226726 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/adminner.php
[Thu Jul 30 15:47:41.226769 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.268698 2026] [ssl:error] [pid 3726654:tid 3726654] (70014)End of file found: [client 216.73.216.199:16947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:41.315521 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/file1221.php
[Thu Jul 30 15:47:41.315579 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.352165 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/inx.php
[Thu Jul 30 15:47:41.352211 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.385494 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/qqqa.php
[Thu Jul 30 15:47:41.385540 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.477028 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-firewall.php
[Thu Jul 30 15:47:41.477088 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.511462 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/reviall.php
[Thu Jul 30 15:47:41.511507 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.541059 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 15:47:41.541153 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.570381 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/bolt.php
[Thu Jul 30 15:47:41.570424 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.599760 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/File.php
[Thu Jul 30 15:47:41.599801 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.663420 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/fi22.php
[Thu Jul 30 15:47:41.663465 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.706423 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/zero.php
[Thu Jul 30 15:47:41.706468 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.819518 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/1xmomo.php
[Thu Jul 30 15:47:41.819568 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.855524 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/fmws.php
[Thu Jul 30 15:47:41.855569 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.895496 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/3PJcpMFsD8B.php
[Thu Jul 30 15:47:41.895542 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.908005 2026] [ssl:error] [pid 3731181:tid 3731181] (EAI 2)Name or service not known: [client 144.76.19.72:65158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:41.908032 2026] [ssl:error] [pid 3731181:tid 3731181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:41.966402 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/hp2.php
[Thu Jul 30 15:47:41.966445 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:41.968585 2026] [ssl:error] [pid 3737183:tid 3737183] (EAI 2)Name or service not known: [client 144.76.19.72:65168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:41.968611 2026] [ssl:error] [pid 3737183:tid 3737183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:42.092292 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/aabb.php
[Thu Jul 30 15:47:42.092341 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.257414 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/1254xx.php
[Thu Jul 30 15:47:42.257459 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.530515 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/a3ampzmbipnkpxeqhqpsanCdefault.php
[Thu Jul 30 15:47:42.530559 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.563405 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/ffs.php
[Thu Jul 30 15:47:42.563452 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.595013 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/1PJcpMFsD8B.php
[Thu Jul 30 15:47:42.595058 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.626166 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/4PJcpMFsD8B.php
[Thu Jul 30 15:47:42.626219 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.655592 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/i99z7zzbwtpteujvv6s8hiCdefault.php
[Thu Jul 30 15:47:42.655634 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.685021 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/gwaih1gfzp5vuwr04Cdefault.php
[Thu Jul 30 15:47:42.685081 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.778147 2026] [ssl:error] [pid 3736036:tid 3736036] (70014)End of file found: [client 216.73.216.199:11715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:42.805579 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/dyui.php
[Thu Jul 30 15:47:42.805630 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.838534 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/ho.php
[Thu Jul 30 15:47:42.838581 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:42.868001 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/zildan.php
[Thu Jul 30 15:47:42.868045 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:43.096834 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/66b867516c8f01.php
[Thu Jul 30 15:47:43.096883 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:43.132779 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/ext.php
[Thu Jul 30 15:47:43.132824 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:43.189462 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/1wvekeybd9it2di2vyipgr6Cdefault.php
[Thu Jul 30 15:47:43.189508 2026] [access_compat:error] [pid 3722812:tid 3722812] [client 51.103.154.47:29458] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 15:47:43.538592 2026] [authz_core:error] [pid 3737530:tid 3737530] [client 79.117.251.170:41090] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 15:47:44.123156 2026] [core:error] [pid 3731010:tid 3731010] [client 20.203.221.142:41959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:44.123198 2026] [core:error] [pid 3731010:tid 3731010] [client 20.203.221.142:41959] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:47:45.024155 2026] [ssl:error] [pid 3727224:tid 3727224] (EAI 2)Name or service not known: [client 144.76.19.72:65172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:45.024213 2026] [ssl:error] [pid 3727224:tid 3727224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:45.078476 2026] [ssl:error] [pid 3735204:tid 3735204] (EAI 2)Name or service not known: [client 144.76.19.72:65176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:45.078511 2026] [ssl:error] [pid 3735204:tid 3735204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:45.488879 2026] [ssl:error] [pid 3737526:tid 3737526] (70014)End of file found: [client 216.73.216.199:1728] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:47.302248 2026] [ssl:error] [pid 3735209:tid 3735209] (70014)End of file found: [client 216.73.216.199:8653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:48.135106 2026] [ssl:error] [pid 3735111:tid 3735111] (EAI 2)Name or service not known: [client 144.76.19.72:65188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:48.135137 2026] [ssl:error] [pid 3735111:tid 3735111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:48.191664 2026] [ssl:error] [pid 3736183:tid 3736183] (EAI 2)Name or service not known: [client 144.76.19.72:65194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:48.191715 2026] [ssl:error] [pid 3736183:tid 3736183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:48.208481 2026] [ssl:error] [pid 3737441:tid 3737441] (70014)End of file found: [client 216.73.216.199:60550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:49.302347 2026] [authz_core:error] [pid 3737530:tid 3737530] [client 66.249.66.33:41671] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:47:49.305190 2026] [authz_core:error] [pid 3737530:tid 3737530] [client 66.249.66.33:41671] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:47:50.881703 2026] [lsapi:warn] [pid 3722976:tid 3722976] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:47:51.247035 2026] [ssl:error] [pid 3731349:tid 3731349] (EAI 2)Name or service not known: [client 144.76.19.72:22710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:51.247087 2026] [ssl:error] [pid 3731349:tid 3731349] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:51.256864 2026] [core:error] [pid 3731009:tid 3731009] (13)Permission denied: [client 216.73.216.199:26050] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/trace
[Thu Jul 30 15:47:51.303697 2026] [ssl:error] [pid 3726700:tid 3726700] (EAI 2)Name or service not known: [client 144.76.19.72:22718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:51.303740 2026] [ssl:error] [pid 3726700:tid 3726700] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:51.558379 2026] [core:error] [pid 3731009:tid 3731009] (13)Permission denied: [client 216.73.216.199:26050] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/psmouse/uevent
[Thu Jul 30 15:47:52.762398 2026] [ssl:error] [pid 3731009:tid 3731009] (70014)End of file found: [client 216.73.216.199:26050] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:53.667927 2026] [ssl:error] [pid 3729127:tid 3729127] (70014)End of file found: [client 216.73.216.199:23011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:53.965155 2026] [ssl:error] [pid 3737522:tid 3737522] (70014)End of file found: [client 216.73.216.199:58126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:47:54.103898 2026] [security2:error] [pid 3735209:tid 3735209] [client 178.104.51.165:50060] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/png"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "dbstart.com"] [uri "/"] [unique_id "amtkGi6BOQUb63ofaCAL-QAAABo"]
[Thu Jul 30 15:47:54.104921 2026] [security2:error] [pid 3735209:tid 3735209] [client 178.104.51.165:50060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.com"] [uri "/"] [unique_id "amtkGi6BOQUb63ofaCAL-QAAABo"]
[Thu Jul 30 15:47:54.280577 2026] [security2:error] [pid 3737525:tid 3737525] [client 114.119.130.248:35521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/pages/35/Studio/st_0808/8"] [unique_id "amtkGodbHIic-UDr3wsL6wAAAFo"], referer: https://www.jonathanmeyerart.com/pages/35/Studio/st_0808/page:9
[Thu Jul 30 15:47:54.359549 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:22726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:54.359578 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:54.415508 2026] [ssl:error] [pid 3737523:tid 3737523] (EAI 2)Name or service not known: [client 144.76.19.72:22740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:54.415542 2026] [ssl:error] [pid 3737523:tid 3737523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:55.465625 2026] [access_compat:error] [pid 3735217:tid 3735217] [client 115.96.93.224:53350] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:47:56.309099 2026] [security2:error] [pid 3735209:tid 3735209] [client 178.104.51.165:50060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "dbstart.com"] [uri "/"] [unique_id "amtkGi6BOQUb63ofaCAL-QAAABo"]
[Thu Jul 30 15:47:57.509670 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:22750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:57.509719 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:57.563191 2026] [ssl:error] [pid 3735218:tid 3735218] (EAI 2)Name or service not known: [client 144.76.19.72:22752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:47:57.563222 2026] [ssl:error] [pid 3735218:tid 3735218] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:47:58.028838 2026] [access_compat:error] [pid 3727225:tid 3727225] [client 45.158.164.139:35018] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:47:59.590007 2026] [lsapi:warn] [pid 3736184:tid 3736184] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:47:59.617024 2026] [ssl:error] [pid 3735211:tid 3735211] (70014)End of file found: [client 216.73.216.199:54198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:00.662719 2026] [ssl:error] [pid 3735111:tid 3735111] (EAI 2)Name or service not known: [client 144.76.19.72:60164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:00.662747 2026] [ssl:error] [pid 3735111:tid 3735111] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:00.717968 2026] [ssl:error] [pid 3729127:tid 3729127] (EAI 2)Name or service not known: [client 144.76.19.72:60172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:00.718026 2026] [ssl:error] [pid 3729127:tid 3729127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:00.912513 2026] [core:error] [pid 3735716:tid 3735716] (13)Permission denied: [client 216.73.216.199:52656] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nft_log/sections/__mcount_loc
[Thu Jul 30 15:48:02.422778 2026] [access_compat:error] [pid 3692608:tid 3692608] [client 115.96.93.224:53688] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:03.332749 2026] [access_compat:error] [pid 3737522:tid 3737522] [client 20.203.221.142:47245] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/gecko-litespeed.php
[Thu Jul 30 15:48:03.333110 2026] [core:error] [pid 3737522:tid 3737522] [client 20.203.221.142:47245] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:48:03.636519 2026] [ssl:error] [pid 3735206:tid 3735206] (70014)End of file found: [client 216.73.216.199:8344] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:03.773621 2026] [ssl:error] [pid 3730538:tid 3730538] (EAI 2)Name or service not known: [client 144.76.19.72:60178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:03.773677 2026] [ssl:error] [pid 3730538:tid 3730538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:03.831530 2026] [ssl:error] [pid 3729705:tid 3729705] (EAI 2)Name or service not known: [client 144.76.19.72:60194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:03.831573 2026] [ssl:error] [pid 3729705:tid 3729705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:05.095105 2026] [core:error] [pid 3737522:tid 3737522] (13)Permission denied: [client 216.73.216.199:50879] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory123/subsystem/uevent
[Thu Jul 30 15:48:05.458245 2026] [security2:error] [pid 3730538:tid 3730538] [client 170.106.35.187:39924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.com"] [uri "/"] [unique_id "amtkJTgp80QAf8bfuu8RQwAAADs"]
[Thu Jul 30 15:48:05.560510 2026] [access_compat:error] [pid 3737523:tid 3737523] [client 20.203.221.142:55733] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/nw.php
[Thu Jul 30 15:48:05.560909 2026] [core:error] [pid 3737523:tid 3737523] [client 20.203.221.142:55733] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:48:06.069997 2026] [security2:error] [pid 3735111:tid 3735111] [client 187.120.134.188:44866] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkJn1ORh3_h2zugxRWfQAAAAc"]
[Thu Jul 30 15:48:06.070049 2026] [security2:error] [pid 3735111:tid 3735111] [client 187.120.134.188:44866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkJn1ORh3_h2zugxRWfQAAAAc"]
[Thu Jul 30 15:48:06.070344 2026] [security2:error] [pid 3735111:tid 3735111] [client 187.120.134.188:44866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkJn1ORh3_h2zugxRWfQAAAAc"]
[Thu Jul 30 15:48:06.891242 2026] [ssl:error] [pid 3735112:tid 3735112] (EAI 2)Name or service not known: [client 144.76.19.72:60204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:06.891284 2026] [ssl:error] [pid 3735112:tid 3735112] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:06.943645 2026] [ssl:error] [pid 3736035:tid 3736035] (EAI 2)Name or service not known: [client 144.76.19.72:60210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:06.943682 2026] [ssl:error] [pid 3736035:tid 3736035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:07.032310 2026] [security2:error] [pid 3689471:tid 3689471] [client 185.191.171.18:26084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7731.0/prev_next,next.html"] [unique_id "amtkJ12gNNpmfjosRgpREwAAACs"]
[Thu Jul 30 15:48:07.719763 2026] [access_compat:error] [pid 3692608:tid 3692608] [client 115.96.93.224:53941] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:08.318096 2026] [lsapi:warn] [pid 3731182:tid 3731182] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:48:09.549774 2026] [security2:error] [pid 3727224:tid 3727224] [client 114.119.157.183:35587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/whats-going-on"] [unique_id "amtkKQqjCsgBBdeJxScjjgAAAAk"], referer: https://www.erskinenazarene.co.uk/erskine-community-festival
[Thu Jul 30 15:48:10.014800 2026] [ssl:error] [pid 3722976:tid 3722976] (EAI 2)Name or service not known: [client 144.76.19.72:52770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:10.014855 2026] [ssl:error] [pid 3722976:tid 3722976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:10.079670 2026] [ssl:error] [pid 3727157:tid 3727157] (EAI 2)Name or service not known: [client 144.76.19.72:52774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:10.079715 2026] [ssl:error] [pid 3727157:tid 3727157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:10.309527 2026] [ssl:error] [pid 3737439:tid 3737439] (70014)End of file found: [client 216.73.216.199:15988] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:11.420935 2026] [authz_core:error] [pid 3735209:tid 3735209] [client 66.249.66.33:64190] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:48:11.423889 2026] [authz_core:error] [pid 3735209:tid 3735209] [client 66.249.66.33:64190] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:48:11.512010 2026] [ssl:error] [pid 3727225:tid 3727225] (70014)End of file found: [client 216.73.216.199:5452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:11.690384 2026] [security2:error] [pid 3735029:tid 3735029] [client 152.56.134.193:39370] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkKzDkwxSS2UEer3OkKwAAAAY"]
[Thu Jul 30 15:48:11.690432 2026] [security2:error] [pid 3735029:tid 3735029] [client 152.56.134.193:39370] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkKzDkwxSS2UEer3OkKwAAAAY"]
[Thu Jul 30 15:48:11.690736 2026] [security2:error] [pid 3735029:tid 3735029] [client 152.56.134.193:39370] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkKzDkwxSS2UEer3OkKwAAAAY"]
[Thu Jul 30 15:48:12.412050 2026] [core:error] [pid 3734942:tid 3734942] (13)Permission denied: [client 216.73.216.199:6598] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory153/subsystem/uevent
[Thu Jul 30 15:48:12.948265 2026] [core:error] [pid 3722976:tid 3722976] [client 20.203.221.142:28111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:48:12.948292 2026] [core:error] [pid 3722976:tid 3722976] [client 20.203.221.142:28111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:48:13.133807 2026] [ssl:error] [pid 3727157:tid 3727157] (EAI 2)Name or service not known: [client 144.76.19.72:52782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:13.133836 2026] [ssl:error] [pid 3727157:tid 3727157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:13.189163 2026] [ssl:error] [pid 3729525:tid 3729525] (EAI 2)Name or service not known: [client 144.76.19.72:52790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:13.189197 2026] [ssl:error] [pid 3729525:tid 3729525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:13.322629 2026] [ssl:error] [pid 3734942:tid 3734942] (70014)End of file found: [client 216.73.216.199:6598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:13.561011 2026] [authz_core:error] [pid 3736172:tid 3736172] [client 172.69.135.13:10851] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 15:48:14.071478 2026] [access_compat:error] [pid 3736174:tid 3736174] [client 115.96.93.224:54365] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:14.889778 2026] [security2:error] [pid 3737183:tid 3737183] [client 114.119.157.183:34461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/whats-going-on"] [unique_id "amtkLolGBKtk97_bkWQsfAAAACc"], referer: https://www.erskinenazarene.co.uk/erskine-community-festival
[Thu Jul 30 15:48:14.991801 2026] [authz_core:error] [pid 3726700:tid 3726700] [client 66.249.66.34:49604] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:48:14.994488 2026] [authz_core:error] [pid 3726700:tid 3726700] [client 66.249.66.34:49604] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:48:15.613187 2026] [core:error] [pid 3735217:tid 3735217] (13)Permission denied: [client 216.73.216.199:50456] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory250/subsystem/uevent
[Thu Jul 30 15:48:15.691701 2026] [access_compat:error] [pid 3692608:tid 3692608] [client 20.203.221.142:58809] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-the.php
[Thu Jul 30 15:48:15.692062 2026] [core:error] [pid 3692608:tid 3692608] [client 20.203.221.142:58809] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:48:16.025318 2026] [ssl:error] [pid 3735217:tid 3735217] (70014)End of file found: [client 216.73.216.199:50456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:16.246497 2026] [ssl:error] [pid 3735204:tid 3735204] (EAI 2)Name or service not known: [client 144.76.19.72:52794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:16.246531 2026] [ssl:error] [pid 3735204:tid 3735204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:16.303778 2026] [ssl:error] [pid 3730538:tid 3730538] (EAI 2)Name or service not known: [client 144.76.19.72:52810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:16.303806 2026] [ssl:error] [pid 3730538:tid 3730538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:16.829408 2026] [ssl:error] [pid 3736176:tid 3736176] (70014)End of file found: [client 216.73.216.199:29713] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:17.078619 2026] [security2:error] [pid 3737530:tid 3737530] [client 187.224.208.247:45004] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkMd4o-TnMNWMYgcmwBgAAAF4"]
[Thu Jul 30 15:48:17.078667 2026] [security2:error] [pid 3737530:tid 3737530] [client 187.224.208.247:45004] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkMd4o-TnMNWMYgcmwBgAAAF4"]
[Thu Jul 30 15:48:17.078943 2026] [security2:error] [pid 3737530:tid 3737530] [client 187.224.208.247:45004] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkMd4o-TnMNWMYgcmwBgAAAF4"]
[Thu Jul 30 15:48:18.499490 2026] [access_compat:error] [pid 3722978:tid 3722978] [client 115.96.93.224:54557] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:18.630658 2026] [core:error] [pid 3737183:tid 3737183] (13)Permission denied: [client 216.73.216.199:31645] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory34/subsystem/uevent
[Thu Jul 30 15:48:19.360564 2026] [ssl:error] [pid 3735871:tid 3735871] (EAI 2)Name or service not known: [client 144.76.19.72:52826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:19.360606 2026] [ssl:error] [pid 3735871:tid 3735871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:19.416924 2026] [ssl:error] [pid 3737439:tid 3737439] (EAI 2)Name or service not known: [client 144.76.19.72:52834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:19.416959 2026] [ssl:error] [pid 3737439:tid 3737439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:20.244316 2026] [ssl:error] [pid 3737183:tid 3737183] (70014)End of file found: [client 216.73.216.199:31645] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:20.749533 2026] [lsapi:warn] [pid 3737439:tid 3737439] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:48:21.333766 2026] [core:error] [pid 3735209:tid 3735209] (13)Permission denied: [client 216.73.216.199:62521] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory106/subsystem/uevent
[Thu Jul 30 15:48:21.749094 2026] [core:error] [pid 3735209:tid 3735209] (13)Permission denied: [client 216.73.216.199:62521] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory144/subsystem/uevent
[Thu Jul 30 15:48:22.472673 2026] [ssl:error] [pid 3736176:tid 3736176] (EAI 2)Name or service not known: [client 144.76.19.72:51064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:22.472709 2026] [ssl:error] [pid 3736176:tid 3736176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:22.552988 2026] [ssl:error] [pid 3727225:tid 3727225] (EAI 2)Name or service not known: [client 144.76.19.72:51074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:22.553012 2026] [ssl:error] [pid 3727225:tid 3727225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:23.254215 2026] [core:error] [pid 3735209:tid 3735209] (13)Permission denied: [client 216.73.216.199:62521] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory224/subsystem/uevent
[Thu Jul 30 15:48:24.383710 2026] [access_compat:error] [pid 3731182:tid 3731182] [client 20.203.221.142:17393] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/myfile.php
[Thu Jul 30 15:48:24.384085 2026] [core:error] [pid 3731182:tid 3731182] [client 20.203.221.142:17393] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:48:24.759991 2026] [core:error] [pid 3735209:tid 3735209] (13)Permission denied: [client 216.73.216.199:62521] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory215/subsystem/uevent
[Thu Jul 30 15:48:25.361422 2026] [core:error] [pid 3735209:tid 3735209] (13)Permission denied: [client 216.73.216.199:62521] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/block/uevent
[Thu Jul 30 15:48:25.618037 2026] [ssl:error] [pid 3735206:tid 3735206] (EAI 2)Name or service not known: [client 144.76.19.72:51088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:25.618095 2026] [ssl:error] [pid 3735206:tid 3735206] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:25.671777 2026] [ssl:error] [pid 3736176:tid 3736176] (EAI 2)Name or service not known: [client 144.76.19.72:51098] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:25.671804 2026] [ssl:error] [pid 3736176:tid 3736176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:25.719115 2026] [autoindex:error] [pid 3735029:tid 3735029] [client 20.151.254.105:38924] AH01276: Cannot serve directory /home/familyja/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:48:26.866461 2026] [ssl:error] [pid 3735209:tid 3735209] (70014)End of file found: [client 216.73.216.199:62521] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:26.928940 2026] [access_compat:error] [pid 3729525:tid 3729525] [client 20.203.221.142:26970] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/info.php
[Thu Jul 30 15:48:26.929296 2026] [core:error] [pid 3729525:tid 3729525] [client 20.203.221.142:26970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:48:27.371341 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:30561] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:28.144781 2026] [cgi:error] [pid 3735029:tid 3735029] [client 20.151.254.105:38924] AH02812: stderr from /home/familyja/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:48:28.376864 2026] [ssl:error] [pid 3727157:tid 3727157] (70014)End of file found: [client 216.73.216.199:44312] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:28.723613 2026] [ssl:error] [pid 3735871:tid 3735871] (EAI 2)Name or service not known: [client 144.76.19.72:51112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:28.723641 2026] [ssl:error] [pid 3735871:tid 3735871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:28.777988 2026] [ssl:error] [pid 3735206:tid 3735206] (EAI 2)Name or service not known: [client 144.76.19.72:51126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:28.778015 2026] [ssl:error] [pid 3735206:tid 3735206] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:29.569612 2026] [authz_core:error] [pid 3731180:tid 3731180] [client 66.249.66.33:62395] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:48:29.572269 2026] [authz_core:error] [pid 3731180:tid 3731180] [client 66.249.66.33:62395] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:48:29.983338 2026] [access_compat:error] [pid 3735206:tid 3735206] [client 115.96.93.224:55061] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:30.681758 2026] [access_compat:error] [pid 3731351:tid 3731351] [client 45.158.164.139:38190] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:48:31.834267 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:24346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:31.834327 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:31.889278 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:24358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:31.889325 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:32.192587 2026] [ssl:error] [pid 3736184:tid 3736184] (70014)End of file found: [client 216.73.216.199:39137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:32.489349 2026] [lsapi:warn] [pid 3722981:tid 3722981] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:48:32.728491 2026] [core:error] [pid 3737440:tid 3737440] [client 104.28.219.195:37279] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Thu Jul 30 15:48:34.947453 2026] [ssl:error] [pid 3737440:tid 3737440] (EAI 2)Name or service not known: [client 144.76.19.72:24362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:34.947488 2026] [ssl:error] [pid 3737440:tid 3737440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:35.000972 2026] [ssl:error] [pid 3727225:tid 3727225] (EAI 2)Name or service not known: [client 144.76.19.72:24378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:35.001002 2026] [ssl:error] [pid 3727225:tid 3727225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:35.813953 2026] [security2:error] [pid 3722978:tid 3722978] [client 216.73.216.199:37083] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/wddx.ini"] [unique_id "amtkQ1I7kMtqSQhdMGbRNAAAAEU"]
[Thu Jul 30 15:48:35.814264 2026] [security2:error] [pid 3722978:tid 3722978] [client 216.73.216.199:37083] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/wddx.ini"] [unique_id "amtkQ1I7kMtqSQhdMGbRNAAAAEU"]
[Thu Jul 30 15:48:35.814493 2026] [security2:error] [pid 3722978:tid 3722978] [client 216.73.216.199:37083] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/wddx.ini"] [unique_id "amtkQ1I7kMtqSQhdMGbRNAAAAEU"]
[Thu Jul 30 15:48:36.418245 2026] [ssl:error] [pid 3722978:tid 3722978] (70014)End of file found: [client 216.73.216.199:37083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:36.437316 2026] [security2:error] [pid 3746777:tid 3746777] [client 43.157.43.147:53928] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amtkRIw7lHOZCn7zaTtH6wAAAAI"]
[Thu Jul 30 15:48:37.374266 2026] [security2:error] [pid 3731180:tid 3731180] [client 43.157.43.147:57826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amtkRZv-iPW7V1Uv8mFWRQAAAEQ"], referer: http://www.hazardous-materials.co.uk
[Thu Jul 30 15:48:38.032148 2026] [authz_core:error] [pid 3735029:tid 3735029] [client 40.77.167.224:61028] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:48:38.034827 2026] [authz_core:error] [pid 3735029:tid 3735029] [client 40.77.167.224:61028] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:48:38.053862 2026] [ssl:error] [pid 3737522:tid 3737522] (EAI 2)Name or service not known: [client 144.76.19.72:24382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:38.053893 2026] [ssl:error] [pid 3737522:tid 3737522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:38.110762 2026] [ssl:error] [pid 3730538:tid 3730538] (EAI 2)Name or service not known: [client 144.76.19.72:24384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:38.110793 2026] [ssl:error] [pid 3730538:tid 3730538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:38.822046 2026] [ssl:error] [pid 3735112:tid 3735112] (70014)End of file found: [client 216.73.216.199:61949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:39.725536 2026] [authz_core:error] [pid 3731344:tid 3731344] [client 66.249.66.33:36456] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:48:39.728222 2026] [authz_core:error] [pid 3731344:tid 3731344] [client 66.249.66.33:36456] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:48:39.806642 2026] [security2:error] [pid 3735217:tid 3735217] [client 85.208.96.199:60490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/three-facts-about-the-british-ship-of-the-line"] [unique_id "amtkR9zi-7VPk3VbOBKqxgAAAB8"]
[Thu Jul 30 15:48:40.352018 2026] [core:error] [pid 3730368:tid 3730368] (13)Permission denied: [client 216.73.216.199:57659] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory216/subsystem/uevent
[Thu Jul 30 15:48:40.754706 2026] [access_compat:error] [pid 3737442:tid 3737442] [client 115.96.93.224:55561] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:41.167275 2026] [ssl:error] [pid 3718555:tid 3718555] (EAI 2)Name or service not known: [client 144.76.19.72:62990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:41.167325 2026] [ssl:error] [pid 3718555:tid 3718555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:41.226825 2026] [ssl:error] [pid 3737530:tid 3737530] (EAI 2)Name or service not known: [client 144.76.19.72:63000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:41.226862 2026] [ssl:error] [pid 3737530:tid 3737530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:41.725774 2026] [cgi:error] [pid 3731181:tid 3731181] [client 112.82.200.25:45948] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:48:42.158425 2026] [ssl:error] [pid 3730368:tid 3730368] (70014)End of file found: [client 216.73.216.199:57659] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:43.966457 2026] [ssl:error] [pid 3746777:tid 3746777] (70014)End of file found: [client 216.73.216.199:23402] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:44.299512 2026] [ssl:error] [pid 3737440:tid 3737440] (EAI 2)Name or service not known: [client 144.76.19.72:63008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:44.299550 2026] [ssl:error] [pid 3737440:tid 3737440] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:44.353895 2026] [ssl:error] [pid 3730535:tid 3730535] (EAI 2)Name or service not known: [client 144.76.19.72:63010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:44.353931 2026] [ssl:error] [pid 3730535:tid 3730535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:44.503789 2026] [lsapi:warn] [pid 3731345:tid 3731345] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:48:47.053599 2026] [access_compat:error] [pid 3752161:tid 3752161] [client 115.96.93.224:55835] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:47.408040 2026] [ssl:error] [pid 3736172:tid 3736172] (EAI 2)Name or service not known: [client 144.76.19.72:63024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:47.408109 2026] [ssl:error] [pid 3736172:tid 3736172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:47.468182 2026] [ssl:error] [pid 3735209:tid 3735209] (EAI 2)Name or service not known: [client 144.76.19.72:63032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:47.468229 2026] [ssl:error] [pid 3735209:tid 3735209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:47.881936 2026] [core:error] [pid 3731351:tid 3731351] (13)Permission denied: [client 216.73.216.199:31917] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu1/subsystem/uevent
[Thu Jul 30 15:48:49.092370 2026] [core:error] [pid 3731351:tid 3731351] (13)Permission denied: [client 216.73.216.199:31917] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory128/subsystem/uevent
[Thu Jul 30 15:48:50.301178 2026] [ssl:error] [pid 3731351:tid 3731351] (70014)End of file found: [client 216.73.216.199:31917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:50.525810 2026] [ssl:error] [pid 3722861:tid 3722861] (EAI 2)Name or service not known: [client 144.76.19.72:65160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:50.525869 2026] [ssl:error] [pid 3722861:tid 3722861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:50.584526 2026] [ssl:error] [pid 3737523:tid 3737523] (EAI 2)Name or service not known: [client 144.76.19.72:65164] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:50.584564 2026] [ssl:error] [pid 3737523:tid 3737523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:50.603402 2026] [ssl:error] [pid 3731344:tid 3731344] (70014)End of file found: [client 216.73.216.199:42385] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:51.653871 2026] [access_compat:error] [pid 3735206:tid 3735206] [client 115.96.93.224:56067] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:51.757016 2026] [cgi:error] [pid 3722861:tid 3722861] [client 216.73.216.205:28541] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/robots.txt
[Thu Jul 30 15:48:52.418017 2026] [core:error] [pid 3729705:tid 3729705] (13)Permission denied: [client 216.73.216.199:10114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory228/subsystem/uevent
[Thu Jul 30 15:48:53.363320 2026] [security2:error] [pid 3735217:tid 3735217] [client 43.166.136.202:37484] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.com"] [uri "/"] [unique_id "amtkVdzi-7VPk3VbOBKqzgAAAB8"]
[Thu Jul 30 15:48:53.636614 2026] [cgi:error] [pid 3722861:tid 3722861] [client 216.73.216.205:28541] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: https://swingaddiction.co.uk/sitemap.xml
[Thu Jul 30 15:48:53.639808 2026] [ssl:error] [pid 3736174:tid 3736174] (EAI 2)Name or service not known: [client 144.76.19.72:65172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:53.639838 2026] [ssl:error] [pid 3736174:tid 3736174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:53.697405 2026] [ssl:error] [pid 3737523:tid 3737523] (EAI 2)Name or service not known: [client 144.76.19.72:65186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:53.697429 2026] [ssl:error] [pid 3737523:tid 3737523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:55.141904 2026] [core:error] [pid 3729705:tid 3729705] (13)Permission denied: [client 216.73.216.199:10114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory254/subsystem/uevent
[Thu Jul 30 15:48:56.605381 2026] [lsapi:warn] [pid 3737312:tid 3737312] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:48:56.754721 2026] [ssl:error] [pid 3746777:tid 3746777] (EAI 2)Name or service not known: [client 144.76.19.72:65188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:56.754757 2026] [ssl:error] [pid 3746777:tid 3746777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:56.812929 2026] [ssl:error] [pid 3752161:tid 3752161] (EAI 2)Name or service not known: [client 144.76.19.72:65202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:56.812986 2026] [ssl:error] [pid 3752161:tid 3752161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:56.951570 2026] [core:error] [pid 3729705:tid 3729705] (13)Permission denied: [client 216.73.216.199:10114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory220/subsystem/uevent
[Thu Jul 30 15:48:57.252784 2026] [core:error] [pid 3729705:tid 3729705] (13)Permission denied: [client 216.73.216.199:10114] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/shrink
[Thu Jul 30 15:48:57.945469 2026] [access_compat:error] [pid 3752161:tid 3752161] [client 115.96.93.224:56341] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:48:58.630654 2026] [access_compat:error] [pid 3735206:tid 3735206] [client 45.158.164.139:59484] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:48:58.897621 2026] [security2:error] [pid 3736184:tid 3736184] [client 43.153.104.196:52310] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "45.158.164.139"] [uri "/"] [unique_id "amtkWoANCi_tGbi7QfpFOgAAAE4"]
[Thu Jul 30 15:48:59.081293 2026] [ssl:error] [pid 3729705:tid 3729705] (70014)End of file found: [client 216.73.216.199:10114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:48:59.690622 2026] [core:error] [pid 3731351:tid 3731351] (13)Permission denied: [client 216.73.216.199:1181] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/ssh/ssh_host_ecdsa_key
[Thu Jul 30 15:48:59.866682 2026] [ssl:error] [pid 3730368:tid 3730368] (EAI 2)Name or service not known: [client 144.76.19.72:44340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:59.866715 2026] [ssl:error] [pid 3730368:tid 3730368] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:59.920557 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:44364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:48:59.920586 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:48:59.991110 2026] [core:error] [pid 3731351:tid 3731351] [client 216.73.216.199:1181] AH10244: invalid URI path (/wp-includes/js/swfupload/1/2/proc/self/cwd/usr/lib64/python3.12/file:%s)
[Thu Jul 30 15:49:02.543427 2026] [access_compat:error] [pid 3722980:tid 3722980] [client 115.96.93.224:56563] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:02.554515 2026] [access_compat:error] [pid 3735206:tid 3735206] [client 20.203.221.142:23871] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fs.php
[Thu Jul 30 15:49:02.554863 2026] [core:error] [pid 3735206:tid 3735206] [client 20.203.221.142:23871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:02.974932 2026] [ssl:error] [pid 3736174:tid 3736174] (EAI 2)Name or service not known: [client 144.76.19.72:44376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:02.974988 2026] [ssl:error] [pid 3736174:tid 3736174] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:03.026714 2026] [ssl:error] [pid 3729305:tid 3729305] (EAI 2)Name or service not known: [client 144.76.19.72:44380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:03.026745 2026] [ssl:error] [pid 3729305:tid 3729305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:03.471929 2026] [access_compat:error] [pid 3736176:tid 3736176] [client 94.154.43.229:33650] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:49:03.472033 2026] [access_compat:error] [pid 3736176:tid 3736176] [client 94.154.43.229:33650] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:49:04.037739 2026] [lsapi:warn] [pid 3731009:tid 3731009] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:49:05.229892 2026] [ssl:error] [pid 3731345:tid 3731345] (70014)End of file found: [client 216.73.216.199:10437] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:06.083037 2026] [ssl:error] [pid 3729705:tid 3729705] (EAI 2)Name or service not known: [client 144.76.19.72:44388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:06.083083 2026] [ssl:error] [pid 3729705:tid 3729705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:06.138865 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:44394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:06.138892 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:06.735078 2026] [ssl:error] [pid 3751943:tid 3751943] (70014)End of file found: [client 216.73.216.199:1914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:08.856545 2026] [ssl:error] [pid 3735204:tid 3735204] (70014)End of file found: [client 216.73.216.199:25837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:09.196973 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:44412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:09.197006 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:09.231725 2026] [security2:error] [pid 3737312:tid 3737312] [client 114.119.159.8:28697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jonathanmeyerart.co.uk"] [uri "/pages/36/Work/Collage/Please_See_Through_Me/page:51"] [unique_id "amtkZRdlkQjSVLYnW6IhcQAAADE"], referer: http://jonathanmeyerart.co.uk/section/36/Work/Collage
[Thu Jul 30 15:49:09.254339 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:44414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:09.254370 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:09.695827 2026] [security2:error] [pid 3731351:tid 3731351] [client 47.237.255.82:31689] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkZW2AkVSwxL6C05IiKgAAAFE"]
[Thu Jul 30 15:49:09.695889 2026] [security2:error] [pid 3731351:tid 3731351] [client 47.237.255.82:31689] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkZW2AkVSwxL6C05IiKgAAAFE"]
[Thu Jul 30 15:49:09.696190 2026] [security2:error] [pid 3731351:tid 3731351] [client 47.237.255.82:31689] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkZW2AkVSwxL6C05IiKgAAAFE"]
[Thu Jul 30 15:49:10.548152 2026] [ssl:error] [pid 3731345:tid 3731345] (70014)End of file found: [client 216.73.216.199:63425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:10.825421 2026] [access_compat:error] [pid 3752160:tid 3752160] [client 20.203.221.142:58752] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ff.php
[Thu Jul 30 15:49:10.825802 2026] [core:error] [pid 3752160:tid 3752160] [client 20.203.221.142:58752] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:11.716450 2026] [lsapi:warn] [pid 3737439:tid 3737439] [client 2a00:1d35:2986:c300:e40c:b7a6:a30a:5836:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:49:12.311254 2026] [ssl:error] [pid 3722981:tid 3722981] (EAI 2)Name or service not known: [client 144.76.19.72:19368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:12.311299 2026] [ssl:error] [pid 3722981:tid 3722981] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:12.365974 2026] [ssl:error] [pid 3746777:tid 3746777] (EAI 2)Name or service not known: [client 144.76.19.72:19370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:12.366007 2026] [ssl:error] [pid 3746777:tid 3746777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:12.470894 2026] [ssl:error] [pid 3729127:tid 3729127] (70014)End of file found: [client 216.73.216.199:13803] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:13.715526 2026] [access_compat:error] [pid 3737440:tid 3737440] [client 115.96.93.224:57073] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:14.579557 2026] [ssl:error] [pid 3722978:tid 3722978] (70014)End of file found: [client 216.73.216.199:22534] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:14.702727 2026] [core:crit] [pid 3735217:tid 3735217] (13)Permission denied: [client 150.136.151.151:7852] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 15:49:15.438414 2026] [ssl:error] [pid 3735204:tid 3735204] (EAI 2)Name or service not known: [client 144.76.19.72:19376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:15.438466 2026] [ssl:error] [pid 3735204:tid 3735204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:15.491988 2026] [ssl:error] [pid 3737522:tid 3737522] (EAI 2)Name or service not known: [client 144.76.19.72:19384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:15.492020 2026] [ssl:error] [pid 3737522:tid 3737522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:16.200034 2026] [security2:error] [pid 3737183:tid 3737183] [client 136.158.10.121:27349] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkbIlGBKtk97_bkWQsmgAAACc"]
[Thu Jul 30 15:49:16.200091 2026] [security2:error] [pid 3737183:tid 3737183] [client 136.158.10.121:27349] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkbIlGBKtk97_bkWQsmgAAACc"]
[Thu Jul 30 15:49:16.200380 2026] [security2:error] [pid 3737183:tid 3737183] [client 136.158.10.121:27349] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkbIlGBKtk97_bkWQsmgAAACc"]
[Thu Jul 30 15:49:16.385336 2026] [ssl:error] [pid 3749424:tid 3749424] (70014)End of file found: [client 216.73.216.199:39096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:18.502611 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:22221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:18.547126 2026] [ssl:error] [pid 3752161:tid 3752161] (EAI 2)Name or service not known: [client 144.76.19.72:19386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:18.547157 2026] [ssl:error] [pid 3752161:tid 3752161] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:18.603229 2026] [ssl:error] [pid 3735217:tid 3735217] (EAI 2)Name or service not known: [client 144.76.19.72:19392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:18.603289 2026] [ssl:error] [pid 3735217:tid 3735217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:19.352137 2026] [core:error] [pid 3725529:tid 3725529] [client 66.249.66.8:60706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:19.352184 2026] [core:error] [pid 3725529:tid 3725529] [client 66.249.66.8:60706] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:19.914786 2026] [core:error] [pid 3759337:tid 3759337] (13)Permission denied: [client 216.73.216.199:34269] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/bio-280/objects
[Thu Jul 30 15:49:20.458192 2026] [security2:error] [pid 3735217:tid 3735217] [client 103.25.82.92:55550] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkcNzi-7VPk3VbOBKq4AAAAB8"]
[Thu Jul 30 15:49:20.458243 2026] [security2:error] [pid 3735217:tid 3735217] [client 103.25.82.92:55550] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkcNzi-7VPk3VbOBKq4AAAAB8"]
[Thu Jul 30 15:49:20.458564 2026] [security2:error] [pid 3735217:tid 3735217] [client 103.25.82.92:55550] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkcNzi-7VPk3VbOBKq4AAAAB8"]
[Thu Jul 30 15:49:21.659828 2026] [ssl:error] [pid 3735209:tid 3735209] (EAI 2)Name or service not known: [client 144.76.19.72:49436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:21.659867 2026] [ssl:error] [pid 3735209:tid 3735209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:21.717386 2026] [ssl:error] [pid 3722980:tid 3722980] (EAI 2)Name or service not known: [client 144.76.19.72:49452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:21.717424 2026] [ssl:error] [pid 3722980:tid 3722980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:24.260234 2026] [access_compat:error] [pid 3737523:tid 3737523] [client 115.96.93.224:57578] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:24.770585 2026] [ssl:error] [pid 3730536:tid 3730536] (EAI 2)Name or service not known: [client 144.76.19.72:49464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:24.770631 2026] [ssl:error] [pid 3730536:tid 3730536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:24.822822 2026] [ssl:error] [pid 3760405:tid 3760405] (EAI 2)Name or service not known: [client 144.76.19.72:49470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:24.822869 2026] [ssl:error] [pid 3760405:tid 3760405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:25.368246 2026] [cgi:error] [pid 3729127:tid 3729127] [client 118.194.248.4:47260] AH02812: stderr from /home/ppclcom/parallel-coordinates.net/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:49:27.594281 2026] [lsapi:warn] [pid 3731009:tid 3731009] [client 81.156.218.179:50309] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:49:27.594323 2026] [lsapi:warn] [pid 3731009:tid 3731009] [client 81.156.218.179:50309] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:49:27.921688 2026] [ssl:error] [pid 3737522:tid 3737522] (EAI 2)Name or service not known: [client 144.76.19.72:49482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:27.921723 2026] [ssl:error] [pid 3737522:tid 3737522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:27.973675 2026] [ssl:error] [pid 3722861:tid 3722861] (EAI 2)Name or service not known: [client 144.76.19.72:49484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:27.973714 2026] [ssl:error] [pid 3722861:tid 3722861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:28.457841 2026] [ssl:error] [pid 3759337:tid 3759337] (70014)End of file found: [client 216.73.216.199:34269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:28.567949 2026] [cgi:error] [pid 3722861:tid 3722861] [client 118.194.248.4:39720] AH02812: stderr from /home/ppclcom/parallel-coordinates.net/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:49:28.817954 2026] [security2:error] [pid 3731009:tid 3731009] [client 114.119.158.38:64503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/andrew-purdy/"] [unique_id "amtkeGs38dHiDluHGwhukAAAAEE"], referer: https://www.erskinenazarene.co.uk/sermons/page/2/
[Thu Jul 30 15:49:28.954959 2026] [security2:error] [pid 3737439:tid 3737439] [client 74.7.227.173:45470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "mail.sharonduggal.co.uk"] [uri "/"] [unique_id "amtkePIqXjVnPZ3aoH7I6wAAAFA"]
[Thu Jul 30 15:49:28.961967 2026] [ssl:error] [pid 3736033:tid 3736033] (70014)End of file found: [client 216.73.216.199:40159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:29.963642 2026] [ssl:error] [pid 3722980:tid 3722980] (70014)End of file found: [client 216.73.216.199:36933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:30.326046 2026] [access_compat:error] [pid 3761048:tid 3761048] [client 115.96.93.224:57856] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:30.857556 2026] [access_compat:error] [pid 3735217:tid 3735217] [client 45.158.164.139:40206] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:49:31.026818 2026] [ssl:error] [pid 3737523:tid 3737523] (EAI 2)Name or service not known: [client 144.76.19.72:59342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:31.026857 2026] [ssl:error] [pid 3737523:tid 3737523] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:31.079771 2026] [security2:error] [pid 3735210:tid 3735210] [client 114.119.142.12:32833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amtke7ejRRSrmmE0BqPmTAAAABs"], referer: https://www.jonathanhill.co.uk/?page_id=511
[Thu Jul 30 15:49:31.135215 2026] [ssl:error] [pid 3736176:tid 3736176] (EAI 2)Name or service not known: [client 144.76.19.72:59346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:31.135251 2026] [ssl:error] [pid 3736176:tid 3736176] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:31.304461 2026] [security2:error] [pid 3735209:tid 3735209] [client 114.119.158.38:64519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/preacher/andrew-purdy/"] [unique_id "amtkey6BOQUb63ofaCAMKgAAABo"], referer: https://www.erskinenazarene.co.uk/sermons/page/2/
[Thu Jul 30 15:49:31.422942 2026] [security2:error] [pid 3735210:tid 3735210] [client 119.91.20.139:48078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtke7ejRRSrmmE0BqPmTQAAABs"]
[Thu Jul 30 15:49:34.192156 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:59352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:34.192189 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:34.243596 2026] [ssl:error] [pid 3760244:tid 3760244] (EAI 2)Name or service not known: [client 144.76.19.72:59368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:34.243635 2026] [ssl:error] [pid 3760244:tid 3760244] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:34.484546 2026] [core:error] [pid 3731345:tid 3731345] (13)Permission denied: [client 216.73.216.199:33231] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/ext4/sections/__jump_table
[Thu Jul 30 15:49:34.873425 2026] [access_compat:error] [pid 3759337:tid 3759337] [client 115.96.93.224:58082] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:35.325078 2026] [access_compat:error] [pid 3737442:tid 3737442] [client 20.203.221.142:41923] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-access.php
[Thu Jul 30 15:49:35.325488 2026] [core:error] [pid 3737442:tid 3737442] [client 20.203.221.142:41923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:37.060778 2026] [ssl:error] [pid 3731345:tid 3731345] (70014)End of file found: [client 216.73.216.199:33231] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:37.336548 2026] [ssl:error] [pid 3729127:tid 3729127] (EAI 2)Name or service not known: [client 144.76.19.72:59378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:37.336582 2026] [ssl:error] [pid 3729127:tid 3729127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:37.409781 2026] [ssl:error] [pid 3761118:tid 3761118] (EAI 2)Name or service not known: [client 144.76.19.72:59390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:37.409822 2026] [ssl:error] [pid 3761118:tid 3761118] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:37.964474 2026] [ssl:error] [pid 3722980:tid 3722980] (70014)End of file found: [client 216.73.216.199:31913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:38.767253 2026] [security2:error] [pid 3725529:tid 3725529] [client 43.157.181.189:54924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.iapib.com"] [uri "/"] [unique_id "amtkgoDz6P6AGqSNOAxBdwAAAA8"]
[Thu Jul 30 15:49:39.771411 2026] [ssl:error] [pid 3761048:tid 3761048] (70014)End of file found: [client 216.73.216.199:5576] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:39.969452 2026] [security2:error] [pid 3731181:tid 3731181] [client 43.157.181.189:55904] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "iapib.com"] [uri "/"] [unique_id "amtkgw1RM5pCSVtxfUTGgAAAAEY"], referer: http://www.iapib.com
[Thu Jul 30 15:49:40.276609 2026] [security2:error] [pid 3737442:tid 3737442] [client 185.191.171.7:14910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/sava-senior-care-locations-in-texas"] [unique_id "amtkhB2DqAlCZMpWR0teYQAAAFY"]
[Thu Jul 30 15:49:40.466412 2026] [ssl:error] [pid 3759337:tid 3759337] (EAI 2)Name or service not known: [client 144.76.19.72:23224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:40.466444 2026] [ssl:error] [pid 3759337:tid 3759337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:40.522532 2026] [ssl:error] [pid 3760404:tid 3760404] (EAI 2)Name or service not known: [client 144.76.19.72:23238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:40.522563 2026] [ssl:error] [pid 3760404:tid 3760404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:42.206296 2026] [access_compat:error] [pid 3722861:tid 3722861] [client 20.203.221.142:3267] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/Sanskrit.php
[Thu Jul 30 15:49:42.206648 2026] [core:error] [pid 3722861:tid 3722861] [client 20.203.221.142:3267] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:42.950542 2026] [access_compat:error] [pid 3736033:tid 3736033] [client 20.203.221.142:23823] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a.php
[Thu Jul 30 15:49:42.950885 2026] [core:error] [pid 3736033:tid 3736033] [client 20.203.221.142:23823] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:43.579782 2026] [ssl:error] [pid 3761677:tid 3761677] (EAI 2)Name or service not known: [client 144.76.19.72:23250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:43.579841 2026] [ssl:error] [pid 3761677:tid 3761677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:43.636595 2026] [ssl:error] [pid 3718555:tid 3718555] (EAI 2)Name or service not known: [client 144.76.19.72:23258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:43.636623 2026] [ssl:error] [pid 3718555:tid 3718555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:43.680392 2026] [ssl:error] [pid 3731345:tid 3731345] (70014)End of file found: [client 216.73.216.199:64631] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:45.500811 2026] [core:error] [pid 3761078:tid 3761078] [client 20.203.221.142:58770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:45.500835 2026] [core:error] [pid 3761078:tid 3761078] [client 20.203.221.142:58770] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:45.637172 2026] [access_compat:error] [pid 3761678:tid 3761678] [client 115.96.93.224:58588] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:46.092686 2026] [ssl:error] [pid 3718601:tid 3718601] (70014)End of file found: [client 216.73.216.199:53036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:46.718705 2026] [ssl:error] [pid 3729524:tid 3729524] (EAI 2)Name or service not known: [client 144.76.19.72:23266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:46.718768 2026] [ssl:error] [pid 3729524:tid 3729524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:46.775077 2026] [ssl:error] [pid 3761119:tid 3761119] (EAI 2)Name or service not known: [client 144.76.19.72:23280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:46.775109 2026] [ssl:error] [pid 3761119:tid 3761119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:48.499992 2026] [ssl:error] [pid 3752161:tid 3752161] (70014)End of file found: [client 216.73.216.199:14810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:49.000078 2026] [ssl:error] [pid 3735204:tid 3735204] (70014)End of file found: [client 216.73.216.199:40412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:49.338481 2026] [authz_core:error] [pid 3736176:tid 3736176] [client 66.249.66.35:62697] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:49:49.341428 2026] [authz_core:error] [pid 3736176:tid 3736176] [client 66.249.66.35:62697] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:49:49.834591 2026] [ssl:error] [pid 3760895:tid 3760895] (EAI 2)Name or service not known: [client 144.76.19.72:39898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:49.834620 2026] [ssl:error] [pid 3760895:tid 3760895] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:49.892595 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:39914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:49.892620 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:50.213040 2026] [cgi:error] [pid 3761621:tid 3761621] [client 20.151.221.234:36089] AH02812: stderr from /home/chemgalproj/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:49:50.420090 2026] [access_compat:error] [pid 3718555:tid 3718555] [client 20.203.221.142:55693] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/style.php
[Thu Jul 30 15:49:50.420450 2026] [core:error] [pid 3718555:tid 3718555] [client 20.203.221.142:55693] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:51.596207 2026] [access_compat:error] [pid 3722980:tid 3722980] [client 20.203.221.142:23836] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-act.php
[Thu Jul 30 15:49:51.596611 2026] [core:error] [pid 3722980:tid 3722980] [client 20.203.221.142:23836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:49:51.816478 2026] [access_compat:error] [pid 3729127:tid 3729127] [client 115.96.93.224:58858] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:52.402537 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60186] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtkkCZZIxtlY4Mc479xiQAAACA"]
[Thu Jul 30 15:49:52.402776 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtkkCZZIxtlY4Mc479xiQAAACA"]
[Thu Jul 30 15:49:52.403049 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60186] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkCZZIxtlY4Mc479xiQAAACA"]
[Thu Jul 30 15:49:52.403486 2026] [security2:error] [pid 3735029:tid 3735029] [client 34.125.84.50:60192] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtkkDDkwxSS2UEer3OkmQAAAAY"]
[Thu Jul 30 15:49:52.403853 2026] [security2:error] [pid 3735029:tid 3735029] [client 34.125.84.50:60192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtkkDDkwxSS2UEer3OkmQAAAAY"]
[Thu Jul 30 15:49:52.404230 2026] [security2:error] [pid 3735029:tid 3735029] [client 34.125.84.50:60192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkDDkwxSS2UEer3OkmQAAAAY"]
[Thu Jul 30 15:49:52.484820 2026] [cgi:error] [pid 3761678:tid 3761678] [client 118.194.248.4:45300] AH02812: stderr from /home/ppclcom/parallel-coordinates.net/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:49:52.946682 2026] [ssl:error] [pid 3762290:tid 3762290] (EAI 2)Name or service not known: [client 144.76.19.72:39928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:52.946725 2026] [ssl:error] [pid 3762290:tid 3762290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:52.999991 2026] [ssl:error] [pid 3736172:tid 3736172] (EAI 2)Name or service not known: [client 144.76.19.72:39936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:53.000025 2026] [ssl:error] [pid 3736172:tid 3736172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:53.040015 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60218] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtkkSZZIxtlY4Mc479xigAAACA"]
[Thu Jul 30 15:49:53.040170 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtkkSZZIxtlY4Mc479xigAAACA"]
[Thu Jul 30 15:49:53.040382 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60218] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkSZZIxtlY4Mc479xigAAACA"]
[Thu Jul 30 15:49:53.217009 2026] [security2:error] [pid 3761678:tid 3761678] [client 34.125.84.50:60270] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtkkSmMnHWU6yhSMvnWywAAAB4"]
[Thu Jul 30 15:49:53.217225 2026] [security2:error] [pid 3761678:tid 3761678] [client 34.125.84.50:60270] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtkkSmMnHWU6yhSMvnWywAAAB4"]
[Thu Jul 30 15:49:53.217451 2026] [security2:error] [pid 3761678:tid 3761678] [client 34.125.84.50:60270] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkSmMnHWU6yhSMvnWywAAAB4"]
[Thu Jul 30 15:49:53.571174 2026] [security2:error] [pid 3722980:tid 3722980] [client 34.125.84.50:60300] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtkkZxLNAsbMe22XxB_CQAAAEc"]
[Thu Jul 30 15:49:53.571326 2026] [security2:error] [pid 3722980:tid 3722980] [client 34.125.84.50:60300] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtkkZxLNAsbMe22XxB_CQAAAEc"]
[Thu Jul 30 15:49:53.571554 2026] [security2:error] [pid 3722980:tid 3722980] [client 34.125.84.50:60300] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkZxLNAsbMe22XxB_CQAAAEc"]
[Thu Jul 30 15:49:53.682671 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60310] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtkkSZZIxtlY4Mc479xiwAAACA"]
[Thu Jul 30 15:49:53.682866 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtkkSZZIxtlY4Mc479xiwAAACA"]
[Thu Jul 30 15:49:53.683131 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:60310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkSZZIxtlY4Mc479xiwAAACA"]
[Thu Jul 30 15:49:53.703203 2026] [security2:error] [pid 3718601:tid 3718601] [client 34.125.84.50:60330] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtkkeZm08JKq4oUAOXosAAAACQ"]
[Thu Jul 30 15:49:53.703397 2026] [security2:error] [pid 3718601:tid 3718601] [client 34.125.84.50:60330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtkkeZm08JKq4oUAOXosAAAACQ"]
[Thu Jul 30 15:49:53.703632 2026] [security2:error] [pid 3718601:tid 3718601] [client 34.125.84.50:60330] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkeZm08JKq4oUAOXosAAAACQ"]
[Thu Jul 30 15:49:53.710360 2026] [security2:error] [pid 3727225:tid 3727225] [client 34.125.84.50:60324] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtkkeEZK0mnXR83Vzm63gAAAA4"]
[Thu Jul 30 15:49:53.710521 2026] [security2:error] [pid 3727225:tid 3727225] [client 34.125.84.50:60324] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtkkeEZK0mnXR83Vzm63gAAAA4"]
[Thu Jul 30 15:49:53.710705 2026] [security2:error] [pid 3727225:tid 3727225] [client 34.125.84.50:60324] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkeEZK0mnXR83Vzm63gAAAA4"]
[Thu Jul 30 15:49:53.719134 2026] [security2:error] [pid 3762291:tid 3762291] [client 34.125.84.50:60350] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtkkTpOn3f4-ApJTI2NvwAAACM"]
[Thu Jul 30 15:49:53.719292 2026] [security2:error] [pid 3762291:tid 3762291] [client 34.125.84.50:60350] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtkkTpOn3f4-ApJTI2NvwAAACM"]
[Thu Jul 30 15:49:53.719554 2026] [security2:error] [pid 3762291:tid 3762291] [client 34.125.84.50:60350] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkTpOn3f4-ApJTI2NvwAAACM"]
[Thu Jul 30 15:49:53.740899 2026] [security2:error] [pid 3751943:tid 3751943] [client 34.125.84.50:60338] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtkkSE9bOq0-QR4gXWpwQAAAAE"]
[Thu Jul 30 15:49:53.741084 2026] [security2:error] [pid 3751943:tid 3751943] [client 34.125.84.50:60338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtkkSE9bOq0-QR4gXWpwQAAAAE"]
[Thu Jul 30 15:49:53.741291 2026] [security2:error] [pid 3751943:tid 3751943] [client 34.125.84.50:60338] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkSE9bOq0-QR4gXWpwQAAAAE"]
[Thu Jul 30 15:49:54.056543 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:35886] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtkkqjZwwtvY07nSf1vfQAAACw"]
[Thu Jul 30 15:49:54.056798 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:35886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtkkqjZwwtvY07nSf1vfQAAACw"]
[Thu Jul 30 15:49:54.057036 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:35886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkqjZwwtvY07nSf1vfQAAACw"]
[Thu Jul 30 15:49:54.170840 2026] [security2:error] [pid 3722980:tid 3722980] [client 34.125.84.50:35894] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtkkpxLNAsbMe22XxB_CgAAAEc"]
[Thu Jul 30 15:49:54.171054 2026] [security2:error] [pid 3722980:tid 3722980] [client 34.125.84.50:35894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtkkpxLNAsbMe22XxB_CgAAAEc"]
[Thu Jul 30 15:49:54.171292 2026] [security2:error] [pid 3722980:tid 3722980] [client 34.125.84.50:35894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkpxLNAsbMe22XxB_CgAAAEc"]
[Thu Jul 30 15:49:54.192670 2026] [security2:error] [pid 3725529:tid 3725529] [client 34.125.84.50:35908] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtkkoDz6P6AGqSNOAxBfAAAAA8"]
[Thu Jul 30 15:49:54.192857 2026] [security2:error] [pid 3725529:tid 3725529] [client 34.125.84.50:35908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtkkoDz6P6AGqSNOAxBfAAAAA8"]
[Thu Jul 30 15:49:54.193092 2026] [security2:error] [pid 3725529:tid 3725529] [client 34.125.84.50:35908] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkoDz6P6AGqSNOAxBfAAAAA8"]
[Thu Jul 30 15:49:54.216406 2026] [security2:error] [pid 3718601:tid 3718601] [client 34.125.84.50:35914] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtkkuZm08JKq4oUAOXosQAAACQ"]
[Thu Jul 30 15:49:54.216607 2026] [security2:error] [pid 3718601:tid 3718601] [client 34.125.84.50:35914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtkkuZm08JKq4oUAOXosQAAACQ"]
[Thu Jul 30 15:49:54.216803 2026] [security2:error] [pid 3718601:tid 3718601] [client 34.125.84.50:35914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkkuZm08JKq4oUAOXosQAAACQ"]
[Thu Jul 30 15:49:55.107720 2026] [authz_core:error] [pid 3736176:tid 3736176] [client 34.125.84.50:36004] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 15:49:55.113136 2026] [security2:error] [pid 3725529:tid 3725529] [client 34.125.84.50:36028] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtkk4Dz6P6AGqSNOAxBfQAAAA8"]
[Thu Jul 30 15:49:55.113313 2026] [security2:error] [pid 3725529:tid 3725529] [client 34.125.84.50:36028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtkk4Dz6P6AGqSNOAxBfQAAAA8"]
[Thu Jul 30 15:49:55.113519 2026] [security2:error] [pid 3725529:tid 3725529] [client 34.125.84.50:36028] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkk4Dz6P6AGqSNOAxBfQAAAA8"]
[Thu Jul 30 15:49:55.591908 2026] [ssl:error] [pid 3762346:tid 3762346] (70014)End of file found: [client 216.73.216.199:9783] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:56.054365 2026] [ssl:error] [pid 3761678:tid 3761678] (EAI 2)Name or service not known: [client 144.76.19.72:39946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:56.054408 2026] [ssl:error] [pid 3761678:tid 3761678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:56.110188 2026] [ssl:error] [pid 3762249:tid 3762249] (EAI 2)Name or service not known: [client 144.76.19.72:39948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:56.110222 2026] [ssl:error] [pid 3762249:tid 3762249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:56.288236 2026] [core:error] [pid 3735217:tid 3735217] (13)Permission denied: [client 216.73.216.199:37046] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/189:1/driver/bind
[Thu Jul 30 15:49:56.311702 2026] [access_compat:error] [pid 3749424:tid 3749424] [client 115.96.93.224:59099] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:49:56.390229 2026] [security2:error] [pid 3736172:tid 3736172] [client 34.125.84.50:36180] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtklIfCUPNgUpCgXTfa4AAAADI"]
[Thu Jul 30 15:49:56.390512 2026] [security2:error] [pid 3736172:tid 3736172] [client 34.125.84.50:36180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtklIfCUPNgUpCgXTfa4AAAADI"]
[Thu Jul 30 15:49:56.390716 2026] [security2:error] [pid 3736172:tid 3736172] [client 34.125.84.50:36180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklIfCUPNgUpCgXTfa4AAAADI"]
[Thu Jul 30 15:49:56.438639 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:36198] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtklKjZwwtvY07nSf1vgAAAACw"]
[Thu Jul 30 15:49:56.438907 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:36198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtklKjZwwtvY07nSf1vgAAAACw"]
[Thu Jul 30 15:49:56.439192 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:36198] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklKjZwwtvY07nSf1vgAAAACw"]
[Thu Jul 30 15:49:56.497590 2026] [security2:error] [pid 3761678:tid 3761678] [client 34.125.84.50:36220] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtklCmMnHWU6yhSMvnWzwAAAB4"]
[Thu Jul 30 15:49:56.497865 2026] [security2:error] [pid 3761678:tid 3761678] [client 34.125.84.50:36220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtklCmMnHWU6yhSMvnWzwAAAB4"]
[Thu Jul 30 15:49:56.498085 2026] [security2:error] [pid 3761678:tid 3761678] [client 34.125.84.50:36220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklCmMnHWU6yhSMvnWzwAAAB4"]
[Thu Jul 30 15:49:56.753390 2026] [security2:error] [pid 3736176:tid 3736176] [client 34.125.84.50:36236] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtklJGieQOLvKX7fVM7swAAADU"]
[Thu Jul 30 15:49:56.753667 2026] [security2:error] [pid 3736176:tid 3736176] [client 34.125.84.50:36236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtklJGieQOLvKX7fVM7swAAADU"]
[Thu Jul 30 15:49:56.753876 2026] [security2:error] [pid 3736176:tid 3736176] [client 34.125.84.50:36236] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklJGieQOLvKX7fVM7swAAADU"]
[Thu Jul 30 15:49:56.841403 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:36238] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtklCZZIxtlY4Mc479xjgAAACA"]
[Thu Jul 30 15:49:56.841683 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:36238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtklCZZIxtlY4Mc479xjgAAACA"]
[Thu Jul 30 15:49:56.841892 2026] [security2:error] [pid 3762249:tid 3762249] [client 34.125.84.50:36238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklCZZIxtlY4Mc479xjgAAACA"]
[Thu Jul 30 15:49:56.870226 2026] [security2:error] [pid 3759337:tid 3759337] [client 34.125.84.50:36254] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtklETdCV0n2CLgdSUZygAAAAA"]
[Thu Jul 30 15:49:56.870446 2026] [security2:error] [pid 3759337:tid 3759337] [client 34.125.84.50:36254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtklETdCV0n2CLgdSUZygAAAAA"]
[Thu Jul 30 15:49:56.870646 2026] [security2:error] [pid 3759337:tid 3759337] [client 34.125.84.50:36254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklETdCV0n2CLgdSUZygAAAAA"]
[Thu Jul 30 15:49:56.891538 2026] [security2:error] [pid 3727225:tid 3727225] [client 34.125.84.50:36260] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtklOEZK0mnXR83Vzm64gAAAA4"]
[Thu Jul 30 15:49:56.891725 2026] [security2:error] [pid 3727225:tid 3727225] [client 34.125.84.50:36260] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtklOEZK0mnXR83Vzm64gAAAA4"]
[Thu Jul 30 15:49:56.891938 2026] [security2:error] [pid 3727225:tid 3727225] [client 34.125.84.50:36260] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklOEZK0mnXR83Vzm64gAAAA4"]
[Thu Jul 30 15:49:57.576813 2026] [security2:error] [pid 3729705:tid 3729705] [client 34.125.84.50:36304] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtklaixpZ0pl8Ib8V1ZpwAAADA"]
[Thu Jul 30 15:49:57.576999 2026] [security2:error] [pid 3729705:tid 3729705] [client 34.125.84.50:36304] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtklaixpZ0pl8Ib8V1ZpwAAADA"]
[Thu Jul 30 15:49:57.577198 2026] [security2:error] [pid 3729705:tid 3729705] [client 34.125.84.50:36304] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklaixpZ0pl8Ib8V1ZpwAAADA"]
[Thu Jul 30 15:49:58.704414 2026] [ssl:error] [pid 3731345:tid 3731345] (70014)End of file found: [client 216.73.216.199:28379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:49:58.850149 2026] [security2:error] [pid 3737440:tid 3737440] [client 34.125.84.50:36394] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtklim8iWvf904lgf-pqAAAAFM"]
[Thu Jul 30 15:49:58.850348 2026] [security2:error] [pid 3737440:tid 3737440] [client 34.125.84.50:36394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtklim8iWvf904lgf-pqAAAAFM"]
[Thu Jul 30 15:49:58.850579 2026] [security2:error] [pid 3737440:tid 3737440] [client 34.125.84.50:36394] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklim8iWvf904lgf-pqAAAAFM"]
[Thu Jul 30 15:49:58.855197 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:36408] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtklqjZwwtvY07nSf1vggAAACw"]
[Thu Jul 30 15:49:58.855392 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:36408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtklqjZwwtvY07nSf1vggAAACw"]
[Thu Jul 30 15:49:58.855595 2026] [security2:error] [pid 3736033:tid 3736033] [client 34.125.84.50:36408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklqjZwwtvY07nSf1vggAAACw"]
[Thu Jul 30 15:49:58.861126 2026] [security2:error] [pid 3736176:tid 3736176] [client 34.125.84.50:36418] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtklpGieQOLvKX7fVM7tQAAADU"]
[Thu Jul 30 15:49:58.861294 2026] [security2:error] [pid 3736176:tid 3736176] [client 34.125.84.50:36418] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtklpGieQOLvKX7fVM7tQAAADU"]
[Thu Jul 30 15:49:58.861515 2026] [security2:error] [pid 3736176:tid 3736176] [client 34.125.84.50:36418] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklpGieQOLvKX7fVM7tQAAADU"]
[Thu Jul 30 15:49:58.883885 2026] [security2:error] [pid 3762290:tid 3762290] [client 34.125.84.50:36432] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtklrVkQjyaGxAFu39ZmQAAACE"]
[Thu Jul 30 15:49:58.884179 2026] [security2:error] [pid 3762290:tid 3762290] [client 34.125.84.50:36432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtklrVkQjyaGxAFu39ZmQAAACE"]
[Thu Jul 30 15:49:58.884401 2026] [security2:error] [pid 3762290:tid 3762290] [client 34.125.84.50:36432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklrVkQjyaGxAFu39ZmQAAACE"]
[Thu Jul 30 15:49:59.000736 2026] [core:error] [pid 3735217:tid 3735217] (13)Permission denied: [client 216.73.216.199:37046] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/alloc_calls
[Thu Jul 30 15:49:59.162476 2026] [ssl:error] [pid 3736172:tid 3736172] (EAI 2)Name or service not known: [client 144.76.19.72:39958] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:59.162512 2026] [ssl:error] [pid 3736172:tid 3736172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:59.194706 2026] [security2:error] [pid 3730535:tid 3730535] [client 34.125.84.50:36448] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtklzFaxbdnPdpMu6muaAAAADg"]
[Thu Jul 30 15:49:59.194865 2026] [security2:error] [pid 3730535:tid 3730535] [client 34.125.84.50:36448] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtklzFaxbdnPdpMu6muaAAAADg"]
[Thu Jul 30 15:49:59.195059 2026] [security2:error] [pid 3730535:tid 3730535] [client 34.125.84.50:36448] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklzFaxbdnPdpMu6muaAAAADg"]
[Thu Jul 30 15:49:59.218738 2026] [ssl:error] [pid 3735210:tid 3735210] (EAI 2)Name or service not known: [client 144.76.19.72:39964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:49:59.218792 2026] [ssl:error] [pid 3735210:tid 3735210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:49:59.245002 2026] [security2:error] [pid 3729305:tid 3729305] [client 34.125.84.50:36450] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtklwrA3_HGz5yqr9B_AwAAAAo"]
[Thu Jul 30 15:49:59.245208 2026] [security2:error] [pid 3729305:tid 3729305] [client 34.125.84.50:36450] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtklwrA3_HGz5yqr9B_AwAAAAo"]
[Thu Jul 30 15:49:59.245424 2026] [security2:error] [pid 3729305:tid 3729305] [client 34.125.84.50:36450] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklwrA3_HGz5yqr9B_AwAAAAo"]
[Thu Jul 30 15:49:59.315437 2026] [access_compat:error] [pid 3730536:tid 3730536] [client 45.158.164.139:34128] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:49:59.406150 2026] [cgi:error] [pid 3731009:tid 3731009] [client 118.194.248.4:35224] AH02812: stderr from /home/ppclcom/parallel-coordinates.net/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:49:59.459306 2026] [security2:error] [pid 3761048:tid 3761048] [client 34.125.84.50:36464] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtkl6GioyZJkPWBDyN0wgAAABM"]
[Thu Jul 30 15:49:59.459512 2026] [security2:error] [pid 3761048:tid 3761048] [client 34.125.84.50:36464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtkl6GioyZJkPWBDyN0wgAAABM"]
[Thu Jul 30 15:49:59.459731 2026] [security2:error] [pid 3761048:tid 3761048] [client 34.125.84.50:36464] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkl6GioyZJkPWBDyN0wgAAABM"]
[Thu Jul 30 15:49:59.603326 2026] [core:error] [pid 3735217:tid 3735217] (13)Permission denied: [client 216.73.216.199:37046] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory181/subsystem/uevent
[Thu Jul 30 15:49:59.739841 2026] [security2:error] [pid 3737440:tid 3737440] [client 34.125.84.50:36486] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtklym8iWvf904lgf-pqQAAAFM"]
[Thu Jul 30 15:49:59.740028 2026] [security2:error] [pid 3737440:tid 3737440] [client 34.125.84.50:36486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtklym8iWvf904lgf-pqQAAAFM"]
[Thu Jul 30 15:49:59.740237 2026] [security2:error] [pid 3737440:tid 3737440] [client 34.125.84.50:36486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtklym8iWvf904lgf-pqQAAAFM"]
[Thu Jul 30 15:49:59.927319 2026] [security2:error] [pid 3762290:tid 3762290] [client 34.125.84.50:36494] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtkl7VkQjyaGxAFu39ZmgAAACE"]
[Thu Jul 30 15:49:59.927521 2026] [security2:error] [pid 3762290:tid 3762290] [client 34.125.84.50:36494] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtkl7VkQjyaGxAFu39ZmgAAACE"]
[Thu Jul 30 15:49:59.927718 2026] [security2:error] [pid 3762290:tid 3762290] [client 34.125.84.50:36494] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkl7VkQjyaGxAFu39ZmgAAACE"]
[Thu Jul 30 15:49:59.990243 2026] [security2:error] [pid 3735210:tid 3735210] [client 34.125.84.50:36500] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtkl7ejRRSrmmE0BqPmuAAAABs"]
[Thu Jul 30 15:49:59.990465 2026] [security2:error] [pid 3735210:tid 3735210] [client 34.125.84.50:36500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtkl7ejRRSrmmE0BqPmuAAAABs"]
[Thu Jul 30 15:49:59.990686 2026] [security2:error] [pid 3735210:tid 3735210] [client 34.125.84.50:36500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkl7ejRRSrmmE0BqPmuAAAABs"]
[Thu Jul 30 15:50:00.023523 2026] [security2:error] [pid 3735209:tid 3735209] [client 34.125.84.50:36516] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtkmC6BOQUb63ofaCAMlAAAABo"]
[Thu Jul 30 15:50:00.023714 2026] [security2:error] [pid 3735209:tid 3735209] [client 34.125.84.50:36516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtkmC6BOQUb63ofaCAMlAAAABo"]
[Thu Jul 30 15:50:00.023923 2026] [security2:error] [pid 3735209:tid 3735209] [client 34.125.84.50:36516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmC6BOQUb63ofaCAMlAAAABo"]
[Thu Jul 30 15:50:00.960237 2026] [security2:error] [pid 3760405:tid 3760405] [client 34.125.84.50:36654] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtkmNaXalB7ZV5dYNryXQAAABA"]
[Thu Jul 30 15:50:00.960405 2026] [security2:error] [pid 3760405:tid 3760405] [client 34.125.84.50:36654] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtkmNaXalB7ZV5dYNryXQAAABA"]
[Thu Jul 30 15:50:00.960583 2026] [security2:error] [pid 3760405:tid 3760405] [client 34.125.84.50:36654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtkmNaXalB7ZV5dYNryXQAAABA"]
[Thu Jul 30 15:50:00.960809 2026] [security2:error] [pid 3760405:tid 3760405] [client 34.125.84.50:36654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmNaXalB7ZV5dYNryXQAAABA"]
[Thu Jul 30 15:50:01.364232 2026] [security2:error] [pid 3735209:tid 3735209] [client 34.125.84.50:36682] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtkmS6BOQUb63ofaCAMlQAAABo"]
[Thu Jul 30 15:50:01.364528 2026] [security2:error] [pid 3735209:tid 3735209] [client 34.125.84.50:36682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtkmS6BOQUb63ofaCAMlQAAABo"]
[Thu Jul 30 15:50:01.364728 2026] [security2:error] [pid 3735209:tid 3735209] [client 34.125.84.50:36682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmS6BOQUb63ofaCAMlQAAABo"]
[Thu Jul 30 15:50:01.830203 2026] [security2:error] [pid 3762346:tid 3762346] [client 34.125.84.50:36738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtkmfvw-lpMi0gbtLlaDwAAACU"]
[Thu Jul 30 15:50:01.830597 2026] [security2:error] [pid 3762346:tid 3762346] [client 34.125.84.50:36738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtkmfvw-lpMi0gbtLlaDwAAACU"]
[Thu Jul 30 15:50:01.830906 2026] [security2:error] [pid 3762346:tid 3762346] [client 34.125.84.50:36738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmfvw-lpMi0gbtLlaDwAAACU"]
[Thu Jul 30 15:50:01.900416 2026] [security2:error] [pid 3731180:tid 3731180] [client 34.125.84.50:36746] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtkmZv-iPW7V1Uv8mFWkQAAAEQ"]
[Thu Jul 30 15:50:01.900734 2026] [security2:error] [pid 3731180:tid 3731180] [client 34.125.84.50:36746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtkmZv-iPW7V1Uv8mFWkQAAAEQ"]
[Thu Jul 30 15:50:01.901179 2026] [security2:error] [pid 3731180:tid 3731180] [client 34.125.84.50:36746] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmZv-iPW7V1Uv8mFWkQAAAEQ"]
[Thu Jul 30 15:50:01.903286 2026] [security2:error] [pid 3746777:tid 3746777] [client 34.125.84.50:36762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtkmYw7lHOZCn7zaTtIPwAAAAI"]
[Thu Jul 30 15:50:01.903607 2026] [security2:error] [pid 3746777:tid 3746777] [client 34.125.84.50:36762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtkmYw7lHOZCn7zaTtIPwAAAAI"]
[Thu Jul 30 15:50:01.903976 2026] [security2:error] [pid 3746777:tid 3746777] [client 34.125.84.50:36762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmYw7lHOZCn7zaTtIPwAAAAI"]
[Thu Jul 30 15:50:02.165851 2026] [security2:error] [pid 3762349:tid 3762349] [client 34.125.84.50:36794] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtkmoTj4DFBXSmWXyTqHgAAACg"]
[Thu Jul 30 15:50:02.166056 2026] [security2:error] [pid 3762349:tid 3762349] [client 34.125.84.50:36794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtkmoTj4DFBXSmWXyTqHgAAACg"]
[Thu Jul 30 15:50:02.166302 2026] [security2:error] [pid 3762349:tid 3762349] [client 34.125.84.50:36794] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmoTj4DFBXSmWXyTqHgAAACg"]
[Thu Jul 30 15:50:02.269616 2026] [security2:error] [pid 3737439:tid 3737439] [client 34.125.84.50:36802] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtkmvIqXjVnPZ3aoH7JDQAAAFA"]
[Thu Jul 30 15:50:02.269832 2026] [security2:error] [pid 3737439:tid 3737439] [client 34.125.84.50:36802] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtkmvIqXjVnPZ3aoH7JDQAAAFA"]
[Thu Jul 30 15:50:02.270051 2026] [security2:error] [pid 3737439:tid 3737439] [client 34.125.84.50:36802] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmvIqXjVnPZ3aoH7JDQAAAFA"]
[Thu Jul 30 15:50:02.272300 2026] [ssl:error] [pid 3729524:tid 3729524] (EAI 2)Name or service not known: [client 144.76.19.72:29838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:02.272323 2026] [ssl:error] [pid 3729524:tid 3729524] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:02.332749 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:29854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:02.332795 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:02.352852 2026] [security2:error] [pid 3762348:tid 3762348] [client 34.125.84.50:36808] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtkmpywa5fBtXOaAq0HCAAAACc"]
[Thu Jul 30 15:50:02.353051 2026] [security2:error] [pid 3762348:tid 3762348] [client 34.125.84.50:36808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtkmpywa5fBtXOaAq0HCAAAACc"]
[Thu Jul 30 15:50:02.353292 2026] [security2:error] [pid 3762348:tid 3762348] [client 34.125.84.50:36808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmpywa5fBtXOaAq0HCAAAACc"]
[Thu Jul 30 15:50:02.356106 2026] [security2:error] [pid 3761048:tid 3761048] [client 34.125.84.50:36804] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtkmqGioyZJkPWBDyN0xQAAABM"]
[Thu Jul 30 15:50:02.356286 2026] [security2:error] [pid 3761048:tid 3761048] [client 34.125.84.50:36804] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtkmqGioyZJkPWBDyN0xQAAABM"]
[Thu Jul 30 15:50:02.356492 2026] [security2:error] [pid 3761048:tid 3761048] [client 34.125.84.50:36804] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmqGioyZJkPWBDyN0xQAAABM"]
[Thu Jul 30 15:50:02.388780 2026] [security2:error] [pid 3760405:tid 3760405] [client 34.125.84.50:36814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtkmtaXalB7ZV5dYNryXwAAABA"]
[Thu Jul 30 15:50:02.388965 2026] [security2:error] [pid 3760405:tid 3760405] [client 34.125.84.50:36814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtkmtaXalB7ZV5dYNryXwAAABA"]
[Thu Jul 30 15:50:02.389182 2026] [security2:error] [pid 3760405:tid 3760405] [client 34.125.84.50:36814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmtaXalB7ZV5dYNryXwAAABA"]
[Thu Jul 30 15:50:02.392967 2026] [access_compat:error] [pid 3735209:tid 3735209] [client 115.96.93.224:59370] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:02.470559 2026] [security2:error] [pid 3730536:tid 3730536] [client 34.125.84.50:36822] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtkmgP3VF2eC69Z9Xd3sgAAADk"]
[Thu Jul 30 15:50:02.470755 2026] [security2:error] [pid 3730536:tid 3730536] [client 34.125.84.50:36822] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtkmgP3VF2eC69Z9Xd3sgAAADk"]
[Thu Jul 30 15:50:02.470990 2026] [security2:error] [pid 3730536:tid 3730536] [client 34.125.84.50:36822] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmgP3VF2eC69Z9Xd3sgAAADk"]
[Thu Jul 30 15:50:02.635766 2026] [security2:error] [pid 3762346:tid 3762346] [client 34.125.84.50:36836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtkmvvw-lpMi0gbtLlaEAAAACU"]
[Thu Jul 30 15:50:02.635913 2026] [security2:error] [pid 3762346:tid 3762346] [client 34.125.84.50:36836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtkmvvw-lpMi0gbtLlaEAAAACU"]
[Thu Jul 30 15:50:02.636119 2026] [security2:error] [pid 3762346:tid 3762346] [client 34.125.84.50:36836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmvvw-lpMi0gbtLlaEAAAACU"]
[Thu Jul 30 15:50:02.724220 2026] [security2:error] [pid 3746777:tid 3746777] [client 34.125.84.50:36844] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtkmow7lHOZCn7zaTtIQAAAAAI"]
[Thu Jul 30 15:50:02.724422 2026] [security2:error] [pid 3746777:tid 3746777] [client 34.125.84.50:36844] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtkmow7lHOZCn7zaTtIQAAAAAI"]
[Thu Jul 30 15:50:02.724629 2026] [security2:error] [pid 3746777:tid 3746777] [client 34.125.84.50:36844] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmow7lHOZCn7zaTtIQAAAAAI"]
[Thu Jul 30 15:50:02.800457 2026] [security2:error] [pid 3760244:tid 3760244] [client 34.125.84.50:36862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtkmn7i1iRiQbVRUv7noQAAAAs"]
[Thu Jul 30 15:50:02.800654 2026] [security2:error] [pid 3760244:tid 3760244] [client 34.125.84.50:36862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtkmn7i1iRiQbVRUv7noQAAAAs"]
[Thu Jul 30 15:50:02.800856 2026] [security2:error] [pid 3760244:tid 3760244] [client 34.125.84.50:36862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmn7i1iRiQbVRUv7noQAAAAs"]
[Thu Jul 30 15:50:02.805001 2026] [security2:error] [pid 3761118:tid 3761118] [client 34.125.84.50:36860] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtkms_rc9ApTreDBo9VfAAAABc"]
[Thu Jul 30 15:50:02.805176 2026] [security2:error] [pid 3761118:tid 3761118] [client 34.125.84.50:36860] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtkms_rc9ApTreDBo9VfAAAABc"]
[Thu Jul 30 15:50:02.805383 2026] [security2:error] [pid 3761118:tid 3761118] [client 34.125.84.50:36860] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkms_rc9ApTreDBo9VfAAAABc"]
[Thu Jul 30 15:50:02.832076 2026] [security2:error] [pid 3751943:tid 3751943] [client 34.125.84.50:36870] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtkmiE9bOq0-QR4gXWpxAAAAAE"]
[Thu Jul 30 15:50:02.832442 2026] [security2:error] [pid 3751943:tid 3751943] [client 34.125.84.50:36870] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtkmiE9bOq0-QR4gXWpxAAAAAE"]
[Thu Jul 30 15:50:02.832639 2026] [security2:error] [pid 3751943:tid 3751943] [client 34.125.84.50:36870] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmiE9bOq0-QR4gXWpxAAAAAE"]
[Thu Jul 30 15:50:02.910083 2026] [security2:error] [pid 3729524:tid 3729524] [client 34.125.84.50:36872] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtkmjecle0l0j_hiD5YGgAAACI"]
[Thu Jul 30 15:50:02.910483 2026] [security2:error] [pid 3729524:tid 3729524] [client 34.125.84.50:36872] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtkmjecle0l0j_hiD5YGgAAACI"]
[Thu Jul 30 15:50:02.910687 2026] [security2:error] [pid 3729524:tid 3729524] [client 34.125.84.50:36872] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtkmjecle0l0j_hiD5YGgAAACI"]
[Thu Jul 30 15:50:04.259195 2026] [security2:error] [pid 3751943:tid 3751943] [client 43.133.220.37:37166] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "vain.band"] [uri "/"] [unique_id "amtknCE9bOq0-QR4gXWpxgAAAAE"]
[Thu Jul 30 15:50:05.331759 2026] [core:error] [pid 3761621:tid 3761621] (13)Permission denied: [client 216.73.216.199:38123] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory109/subsystem/uevent
[Thu Jul 30 15:50:05.386615 2026] [ssl:error] [pid 3722980:tid 3722980] (EAI 2)Name or service not known: [client 144.76.19.72:29862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:05.386646 2026] [ssl:error] [pid 3722980:tid 3722980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:05.475370 2026] [ssl:error] [pid 3762918:tid 3762918] (EAI 2)Name or service not known: [client 144.76.19.72:29874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:05.475405 2026] [ssl:error] [pid 3762918:tid 3762918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:05.632974 2026] [ssl:error] [pid 3761621:tid 3761621] (70014)End of file found: [client 216.73.216.199:38123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:07.509238 2026] [access_compat:error] [pid 3760404:tid 3760404] [client 115.96.93.224:59613] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:08.529234 2026] [ssl:error] [pid 3761119:tid 3761119] (EAI 2)Name or service not known: [client 144.76.19.72:29882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:08.529285 2026] [ssl:error] [pid 3761119:tid 3761119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:08.582455 2026] [ssl:error] [pid 3736172:tid 3736172] (EAI 2)Name or service not known: [client 144.76.19.72:29888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:08.582484 2026] [ssl:error] [pid 3736172:tid 3736172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:09.114839 2026] [security2:error] [pid 3761077:tid 3761077] [client 43.164.1.211:48518] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/"] [unique_id "amtkoRDlIft8Kdqm6LbcoQAAABQ"]
[Thu Jul 30 15:50:09.256038 2026] [core:error] [pid 3735217:tid 3735217] (13)Permission denied: [client 216.73.216.199:37046] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory120/subsystem/uevent
[Thu Jul 30 15:50:10.276873 2026] [security2:error] [pid 3761119:tid 3761119] [client 43.164.190.124:39970] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "amtkoixAqE8MpB27t8orXAAAABg"]
[Thu Jul 30 15:50:10.546644 2026] [security2:error] [pid 3760244:tid 3760244] [client 43.164.1.211:50316] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtkon7i1iRiQbVRUv7nowAAAAs"], referer: http://clarepillinger.co.uk
[Thu Jul 30 15:50:10.749667 2026] [ssl:error] [pid 3735217:tid 3735217] (70014)End of file found: [client 216.73.216.199:37046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:10.851219 2026] [lsapi:warn] [pid 3761119:tid 3761119] [client 43.164.190.124:39970] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 15:50:11.640569 2026] [ssl:error] [pid 3718601:tid 3718601] (EAI 2)Name or service not known: [client 144.76.19.72:22088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:11.640605 2026] [ssl:error] [pid 3718601:tid 3718601] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:11.692193 2026] [ssl:error] [pid 3718555:tid 3718555] (EAI 2)Name or service not known: [client 144.76.19.72:22094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:11.692252 2026] [ssl:error] [pid 3718555:tid 3718555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:12.860607 2026] [ssl:error] [pid 3731009:tid 3731009] (70014)End of file found: [client 216.73.216.199:65408] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:13.521445 2026] [access_compat:error] [pid 3751943:tid 3751943] [client 115.96.93.224:59904] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:14.743858 2026] [ssl:error] [pid 3730535:tid 3730535] (EAI 2)Name or service not known: [client 144.76.19.72:22100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:14.743892 2026] [ssl:error] [pid 3730535:tid 3730535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:14.799419 2026] [ssl:error] [pid 3722980:tid 3722980] (EAI 2)Name or service not known: [client 144.76.19.72:22106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:14.799442 2026] [ssl:error] [pid 3722980:tid 3722980] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:15.177868 2026] [ssl:error] [pid 3737439:tid 3737439] (70014)End of file found: [client 216.73.216.199:47330] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:16.350807 2026] [authz_core:error] [pid 3735209:tid 3735209] [client 66.249.66.33:40940] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:50:16.353726 2026] [authz_core:error] [pid 3735209:tid 3735209] [client 66.249.66.33:40940] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:50:16.752816 2026] [access_compat:error] [pid 3761678:tid 3761678] [client 20.203.221.142:31035] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/222.php
[Thu Jul 30 15:50:16.753229 2026] [core:error] [pid 3761678:tid 3761678] [client 20.203.221.142:31035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:17.796251 2026] [core:error] [pid 3731345:tid 3731345] [client 20.203.221.142:8919] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:17.796282 2026] [core:error] [pid 3731345:tid 3731345] [client 20.203.221.142:8919] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:17.873426 2026] [ssl:error] [pid 3752742:tid 3752742] (EAI 2)Name or service not known: [client 144.76.19.72:22120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:17.873477 2026] [ssl:error] [pid 3752742:tid 3752742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:17.928573 2026] [ssl:error] [pid 3761677:tid 3761677] (EAI 2)Name or service not known: [client 144.76.19.72:22134] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:17.928601 2026] [ssl:error] [pid 3761677:tid 3761677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:18.204717 2026] [access_compat:error] [pid 3763430:tid 3763430] [client 115.96.93.224:60121] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:18.675795 2026] [security2:error] [pid 3761678:tid 3761678] [client 43.131.36.84:33574] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "plastic-sheeting.org"] [uri "/"] [unique_id "amtkqimMnHWU6yhSMvnW1wAAAB4"]
[Thu Jul 30 15:50:19.121329 2026] [ssl:error] [pid 3731181:tid 3731181] (70014)End of file found: [client 216.73.216.199:34955] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:19.209496 2026] [ssl:error] [pid 3760404:tid 3760404] (70014)End of file found: [client 216.73.216.199:40936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:20.986566 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:19266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:20.986597 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:21.039464 2026] [ssl:error] [pid 3737439:tid 3737439] (EAI 2)Name or service not known: [client 144.76.19.72:19272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:21.039487 2026] [ssl:error] [pid 3737439:tid 3737439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:21.633580 2026] [ssl:error] [pid 3761077:tid 3761077] (70014)End of file found: [client 216.73.216.199:15245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:23.142853 2026] [ssl:error] [pid 3735209:tid 3735209] (70014)End of file found: [client 216.73.216.199:5411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:23.376834 2026] [security2:error] [pid 3718601:tid 3718601] [client 49.51.166.228:60968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tripodhome.co.uk"] [uri "/"] [unique_id "amtkr-Zm08JKq4oUAOXotQAAACQ"]
[Thu Jul 30 15:50:23.444098 2026] [ssl:error] [pid 3722978:tid 3722978] (70014)End of file found: [client 216.73.216.199:19673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:24.096595 2026] [ssl:error] [pid 3736033:tid 3736033] (EAI 2)Name or service not known: [client 144.76.19.72:19288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:24.096652 2026] [ssl:error] [pid 3736033:tid 3736033] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:24.151959 2026] [ssl:error] [pid 3725529:tid 3725529] (EAI 2)Name or service not known: [client 144.76.19.72:19292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:24.152006 2026] [ssl:error] [pid 3725529:tid 3725529] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:25.073100 2026] [access_compat:error] [pid 3735204:tid 3735204] [client 20.203.221.142:37195] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ms.php
[Thu Jul 30 15:50:25.073457 2026] [core:error] [pid 3735204:tid 3735204] [client 20.203.221.142:37195] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:25.171274 2026] [security2:error] [pid 3731181:tid 3731181] [client 85.208.96.203:41744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11543.0/prev_next,next.html"] [unique_id "amtksQ1RM5pCSVtxfUTGjAAAAEY"]
[Thu Jul 30 15:50:27.082277 2026] [security2:error] [pid 3730535:tid 3730535] [client 145.223.130.189:44914] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.msg36363/topicseen.html"] [unique_id "amtkszFaxbdnPdpMu6mucAAAADg"]
[Thu Jul 30 15:50:27.082326 2026] [security2:error] [pid 3730535:tid 3730535] [client 145.223.130.189:44914] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.msg36363/topicseen.html"] [unique_id "amtkszFaxbdnPdpMu6mucAAAADg"]
[Thu Jul 30 15:50:27.082575 2026] [security2:error] [pid 3730535:tid 3730535] [client 145.223.130.189:44914] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkszFaxbdnPdpMu6mucAAAADg"]
[Thu Jul 30 15:50:27.207925 2026] [ssl:error] [pid 3752742:tid 3752742] (EAI 2)Name or service not known: [client 144.76.19.72:19304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:27.207963 2026] [ssl:error] [pid 3752742:tid 3752742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:27.262547 2026] [ssl:error] [pid 3761077:tid 3761077] (EAI 2)Name or service not known: [client 144.76.19.72:19308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:27.262583 2026] [ssl:error] [pid 3761077:tid 3761077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:27.771770 2026] [access_compat:error] [pid 3735204:tid 3735204] [client 20.203.221.142:49069] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/abcd.php
[Thu Jul 30 15:50:27.772132 2026] [core:error] [pid 3735204:tid 3735204] [client 20.203.221.142:49069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:28.269788 2026] [ssl:error] [pid 3761678:tid 3761678] (70014)End of file found: [client 216.73.216.199:43662] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:29.069049 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:24257] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:29.169306 2026] [access_compat:error] [pid 3761077:tid 3761077] [client 115.96.93.224:60631] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:29.782026 2026] [security2:error] [pid 3729524:tid 3729524] [client 216.73.216.199:7170] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-vz/tuned.conf"] [unique_id "amtktTecle0l0j_hiD5YJgAAACI"]
[Thu Jul 30 15:50:29.782320 2026] [security2:error] [pid 3729524:tid 3729524] [client 216.73.216.199:7170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-vz/tuned.conf"] [unique_id "amtktTecle0l0j_hiD5YJgAAACI"]
[Thu Jul 30 15:50:29.782533 2026] [security2:error] [pid 3729524:tid 3729524] [client 216.73.216.199:7170] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-vz/tuned.conf"] [unique_id "amtktTecle0l0j_hiD5YJgAAACI"]
[Thu Jul 30 15:50:29.908518 2026] [access_compat:error] [pid 3763498:tid 3763498] [client 20.203.221.142:49078] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/06.php
[Thu Jul 30 15:50:29.908861 2026] [core:error] [pid 3763498:tid 3763498] [client 20.203.221.142:49078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:30.083329 2026] [ssl:error] [pid 3729524:tid 3729524] (70014)End of file found: [client 216.73.216.199:7170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:30.319106 2026] [ssl:error] [pid 3752742:tid 3752742] (EAI 2)Name or service not known: [client 144.76.19.72:54468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:30.319135 2026] [ssl:error] [pid 3752742:tid 3752742] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:30.373337 2026] [ssl:error] [pid 3730535:tid 3730535] (EAI 2)Name or service not known: [client 144.76.19.72:54470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:30.373370 2026] [ssl:error] [pid 3730535:tid 3730535] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:32.177368 2026] [security2:error] [pid 3729705:tid 3729705] [client 190.124.191.206:12373] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkuKixpZ0pl8Ib8V1ZrQAAADA"]
[Thu Jul 30 15:50:32.177433 2026] [security2:error] [pid 3729705:tid 3729705] [client 190.124.191.206:12373] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkuKixpZ0pl8Ib8V1ZrQAAADA"]
[Thu Jul 30 15:50:32.177696 2026] [security2:error] [pid 3729705:tid 3729705] [client 190.124.191.206:12373] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkuKixpZ0pl8Ib8V1ZrQAAADA"]
[Thu Jul 30 15:50:33.240063 2026] [lsapi:warn] [pid 3760244:tid 3760244] [client 104.22.17.107:12570] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:50:33.240155 2026] [lsapi:warn] [pid 3760244:tid 3760244] [client 104.22.17.107:12570] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:50:33.456172 2026] [core:error] [pid 3761678:tid 3761678] [client 66.249.66.8:63865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:33.456206 2026] [core:error] [pid 3761678:tid 3761678] [client 66.249.66.8:63865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:34.140806 2026] [ssl:error] [pid 3760405:tid 3760405] (EAI 2)Name or service not known: [client 144.76.19.72:54474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:34.140852 2026] [ssl:error] [pid 3760405:tid 3760405] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:34.468778 2026] [ssl:error] [pid 3762346:tid 3762346] (EAI 2)Name or service not known: [client 144.76.19.72:54476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:34.468819 2026] [ssl:error] [pid 3762346:tid 3762346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:34.585758 2026] [lsapi:warn] [pid 3764293:tid 3764293] [client 108.131.167.17:50850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:50:34.585817 2026] [lsapi:warn] [pid 3764293:tid 3764293] [client 108.131.167.17:50850] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:50:34.741580 2026] [security2:error] [pid 3764295:tid 3764295] [client 167.62.252.25:59642] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkugXDX07-ervBSqqTJQAAACk"]
[Thu Jul 30 15:50:34.741656 2026] [security2:error] [pid 3764295:tid 3764295] [client 167.62.252.25:59642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkugXDX07-ervBSqqTJQAAACk"]
[Thu Jul 30 15:50:34.742016 2026] [security2:error] [pid 3764295:tid 3764295] [client 167.62.252.25:59642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkugXDX07-ervBSqqTJQAAACk"]
[Thu Jul 30 15:50:35.287392 2026] [access_compat:error] [pid 3764331:tid 3764331] [client 115.96.93.224:60929] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:35.819766 2026] [access_compat:error] [pid 3761077:tid 3761077] [client 45.158.164.139:33702] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:50:37.033213 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:16160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:37.525472 2026] [ssl:error] [pid 3735209:tid 3735209] (EAI 2)Name or service not known: [client 144.76.19.72:54484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:37.525525 2026] [ssl:error] [pid 3735209:tid 3735209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:37.579899 2026] [ssl:error] [pid 3761077:tid 3761077] (EAI 2)Name or service not known: [client 144.76.19.72:54486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:37.579942 2026] [ssl:error] [pid 3761077:tid 3761077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:37.933666 2026] [core:error] [pid 3746777:tid 3746777] (13)Permission denied: [client 216.73.216.199:45177] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/intel_rapl_common/uevent
[Thu Jul 30 15:50:38.044023 2026] [security2:error] [pid 3761120:tid 3761120] [client 51.68.236.64:14749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "beechhouseselfcatering.co.uk"] [uri "/robots.txt"] [unique_id "amtkvs_ICGM4YJ0wi-wnyAAAABk"]
[Thu Jul 30 15:50:38.157229 2026] [security2:error] [pid 3764336:tid 3764336] [client 51.68.236.64:14659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtkvky13fMECu4V2b5HgAAAADM"]
[Thu Jul 30 15:50:38.298147 2026] [security2:error] [pid 3722978:tid 3722978] [client 51.68.236.64:31775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/robots.txt"] [unique_id "amtkvlI7kMtqSQhdMGbRVgAAAEU"]
[Thu Jul 30 15:50:38.513557 2026] [security2:error] [pid 3759337:tid 3759337] [client 51.68.236.64:9353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/403.shtml"] [unique_id "amtkvkTdCV0n2CLgdSUZ_AAAAAA"]
[Thu Jul 30 15:50:38.921420 2026] [access_compat:error] [pid 3761077:tid 3761077] [client 100.55.76.164:42542] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2011/08/x-men-first-class.jpg
[Thu Jul 30 15:50:38.921537 2026] [access_compat:error] [pid 3761077:tid 3761077] [client 100.55.76.164:42542] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:50:39.352643 2026] [security2:error] [pid 3752742:tid 3752742] [client 78.184.230.236:35438] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkv0y9lXAUtbUCQa-XRAAAAAw"]
[Thu Jul 30 15:50:39.352709 2026] [security2:error] [pid 3752742:tid 3752742] [client 78.184.230.236:35438] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtkv0y9lXAUtbUCQa-XRAAAAAw"]
[Thu Jul 30 15:50:39.353018 2026] [security2:error] [pid 3752742:tid 3752742] [client 78.184.230.236:35438] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtkv0y9lXAUtbUCQa-XRAAAAAw"]
[Thu Jul 30 15:50:40.045337 2026] [ssl:error] [pid 3746777:tid 3746777] (70014)End of file found: [client 216.73.216.199:45177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:40.359734 2026] [access_compat:error] [pid 3764266:tid 3764266] [client 115.96.93.224:61145] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:40.462879 2026] [access_compat:error] [pid 3722978:tid 3722978] [client 20.203.221.142:51448] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/155.php
[Thu Jul 30 15:50:40.463248 2026] [core:error] [pid 3722978:tid 3722978] [client 20.203.221.142:51448] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:40.631901 2026] [ssl:error] [pid 3761048:tid 3761048] (EAI 2)Name or service not known: [client 144.76.19.72:38450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:40.631958 2026] [ssl:error] [pid 3761048:tid 3761048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:40.652672 2026] [ssl:error] [pid 3729127:tid 3729127] (70014)End of file found: [client 216.73.216.199:31700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:40.685522 2026] [ssl:error] [pid 3761677:tid 3761677] (EAI 2)Name or service not known: [client 144.76.19.72:38462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:40.685559 2026] [ssl:error] [pid 3761677:tid 3761677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:40.798864 2026] [security2:error] [pid 3760404:tid 3760404] [client 85.208.96.206:24608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/how-many-diamond-albums-does-lil-wayne-have"] [unique_id "amtkwPHOg1i4IqbVD9D8YwAAAA0"]
[Thu Jul 30 15:50:43.060683 2026] [core:error] [pid 3761678:tid 3761678] (13)Permission denied: [client 216.73.216.199:23902] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty48/subsystem/ttyS2/flags
[Thu Jul 30 15:50:43.740477 2026] [ssl:error] [pid 3761119:tid 3761119] (EAI 2)Name or service not known: [client 144.76.19.72:38476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:43.740525 2026] [ssl:error] [pid 3761119:tid 3761119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:43.793398 2026] [ssl:error] [pid 3760244:tid 3760244] (EAI 2)Name or service not known: [client 144.76.19.72:38490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:43.793442 2026] [ssl:error] [pid 3760244:tid 3760244] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:43.964759 2026] [ssl:error] [pid 3761678:tid 3761678] (70014)End of file found: [client 216.73.216.199:23902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:44.646625 2026] [security2:error] [pid 3760405:tid 3760405] [client 114.119.148.154:53065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.theovertones.co.uk"] [uri "/images/igallery/resized/1-100/overtones210602-2-200-200-80-c.jpg"] [unique_id "amtkxNaXalB7ZV5dYNryZgAAABA"], referer: https://www.theovertones.co.uk/?i=overtones210609
[Thu Jul 30 15:50:46.470804 2026] [access_compat:error] [pid 3761621:tid 3761621] [client 115.96.93.224:61454] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:46.674990 2026] [ssl:error] [pid 3764293:tid 3764293] (70014)End of file found: [client 216.73.216.199:38597] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:46.848537 2026] [ssl:error] [pid 3746777:tid 3746777] (EAI 2)Name or service not known: [client 144.76.19.72:38506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:46.848576 2026] [ssl:error] [pid 3746777:tid 3746777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:46.905036 2026] [ssl:error] [pid 3764295:tid 3764295] (EAI 2)Name or service not known: [client 144.76.19.72:38522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:46.905119 2026] [ssl:error] [pid 3764295:tid 3764295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:47.159507 2026] [security2:error] [pid 3764336:tid 3764336] [client 216.73.216.199:35069] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/openssh/PROTOCOL.key"] [unique_id "amtkx0y13fMECu4V2b5HggAAADM"]
[Thu Jul 30 15:50:47.159933 2026] [security2:error] [pid 3735209:tid 3735209] [client 85.208.96.211:60940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3134.0/prev_next,prev.html"] [unique_id "amtkxy6BOQUb63ofaCAMnwAAABo"]
[Thu Jul 30 15:50:47.159950 2026] [security2:error] [pid 3764336:tid 3764336] [client 216.73.216.199:35069] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/openssh/PROTOCOL.key"] [unique_id "amtkx0y13fMECu4V2b5HggAAADM"]
[Thu Jul 30 15:50:47.160305 2026] [security2:error] [pid 3764336:tid 3764336] [client 216.73.216.199:35069] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/doc/openssh/PROTOCOL.key"] [unique_id "amtkx0y13fMECu4V2b5HggAAADM"]
[Thu Jul 30 15:50:47.875854 2026] [ssl:error] [pid 3764336:tid 3764336] (70014)End of file found: [client 216.73.216.199:35069] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:49.976171 2026] [ssl:error] [pid 3746777:tid 3746777] (EAI 2)Name or service not known: [client 144.76.19.72:37868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:49.976218 2026] [ssl:error] [pid 3746777:tid 3746777] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:50.031889 2026] [ssl:error] [pid 3763497:tid 3763497] (EAI 2)Name or service not known: [client 144.76.19.72:37880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:50.031917 2026] [ssl:error] [pid 3763497:tid 3763497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:50.755413 2026] [ssl:error] [pid 3729305:tid 3729305] (70014)End of file found: [client 216.73.216.199:48715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:50.931221 2026] [access_compat:error] [pid 3760244:tid 3760244] [client 115.96.93.224:61652] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:50:51.103682 2026] [access_compat:error] [pid 3751943:tid 3751943] [client 20.203.221.142:3038] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ol.php
[Thu Jul 30 15:50:51.104096 2026] [core:error] [pid 3751943:tid 3751943] [client 20.203.221.142:3038] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:50:51.776759 2026] [security2:error] [pid 3761077:tid 3761077] [client 114.119.157.183:28857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/wp-content/uploads/2022/08/My-project-1-9-2048x1365.png"] [unique_id "amtkyxDlIft8Kdqm6LbcrgAAABQ"], referer: http://www.erskinenazarene.co.uk/wp-content/uploads/2022/08/My-project-1-9-2048x1365.png
[Thu Jul 30 15:50:52.161916 2026] [ssl:error] [pid 3763497:tid 3763497] (70014)End of file found: [client 216.73.216.199:27114] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:53.087427 2026] [ssl:error] [pid 3737530:tid 3737530] (EAI 2)Name or service not known: [client 144.76.19.72:37886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:53.087473 2026] [ssl:error] [pid 3737530:tid 3737530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:53.142500 2026] [ssl:error] [pid 3763498:tid 3763498] (EAI 2)Name or service not known: [client 144.76.19.72:37896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:53.142543 2026] [ssl:error] [pid 3763498:tid 3763498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:53.390965 2026] [security2:error] [pid 3764331:tid 3764331] [client 114.119.157.183:28859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/wp-content/uploads/2022/08/My-project-1-9-2048x1365.png"] [unique_id "amtkzYYfepcDRdMEkFMQoQAAACs"], referer: http://www.erskinenazarene.co.uk/wp-content/uploads/2022/08/My-project-1-9-2048x1365.png
[Thu Jul 30 15:50:53.645189 2026] [access_compat:error] [pid 3761621:tid 3761621] [client 43.159.36.180:43084] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:50:53.645380 2026] [access_compat:error] [pid 3761621:tid 3761621] [client 43.159.36.180:43084] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:50:54.672826 2026] [ssl:error] [pid 3760741:tid 3760741] (70014)End of file found: [client 216.73.216.199:50846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:56.176889 2026] [ssl:error] [pid 3761621:tid 3761621] (70014)End of file found: [client 216.73.216.199:58255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:56.200628 2026] [ssl:error] [pid 3764293:tid 3764293] (EAI 2)Name or service not known: [client 144.76.19.72:37906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:56.200667 2026] [ssl:error] [pid 3764293:tid 3764293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:56.255568 2026] [ssl:error] [pid 3729305:tid 3729305] (EAI 2)Name or service not known: [client 144.76.19.72:37912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:56.255603 2026] [ssl:error] [pid 3729305:tid 3729305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:57.583983 2026] [core:error] [pid 3764266:tid 3764266] (13)Permission denied: [client 216.73.216.199:33080] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS1/closing_wait
[Thu Jul 30 15:50:57.686240 2026] [ssl:error] [pid 3764266:tid 3764266] (70014)End of file found: [client 216.73.216.199:33080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:50:58.654812 2026] [security2:error] [pid 3731180:tid 3731180] [client 43.164.192.151:50774] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amtk0pv-iPW7V1Uv8mFWmQAAAEQ"]
[Thu Jul 30 15:50:59.312604 2026] [ssl:error] [pid 3761119:tid 3761119] (EAI 2)Name or service not known: [client 144.76.19.72:37920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:59.312634 2026] [ssl:error] [pid 3761119:tid 3761119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:50:59.321641 2026] [access_compat:error] [pid 3736033:tid 3736033] [client 45.158.164.139:35208] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:50:59.367627 2026] [ssl:error] [pid 3736172:tid 3736172] (EAI 2)Name or service not known: [client 144.76.19.72:37926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:50:59.367658 2026] [ssl:error] [pid 3736172:tid 3736172] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:00.012477 2026] [ssl:error] [pid 3760741:tid 3760741] (70014)End of file found: [client 216.73.216.199:57341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:01.914957 2026] [ssl:error] [pid 3735209:tid 3735209] (70014)End of file found: [client 216.73.216.199:15259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:02.094316 2026] [access_compat:error] [pid 3736172:tid 3736172] [client 115.96.93.224:62166] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:02.423842 2026] [ssl:error] [pid 3763497:tid 3763497] (EAI 2)Name or service not known: [client 144.76.19.72:50218] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:02.423890 2026] [ssl:error] [pid 3763497:tid 3763497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:02.486151 2026] [ssl:error] [pid 3761077:tid 3761077] (EAI 2)Name or service not known: [client 144.76.19.72:50224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:02.486181 2026] [ssl:error] [pid 3761077:tid 3761077] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:03.441395 2026] [ssl:error] [pid 3761048:tid 3761048] (70014)End of file found: [client 216.73.216.199:20855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:05.543827 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:50236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:05.543874 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:05.599683 2026] [ssl:error] [pid 3764296:tid 3764296] (EAI 2)Name or service not known: [client 144.76.19.72:50238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:05.599730 2026] [ssl:error] [pid 3764296:tid 3764296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:05.868589 2026] [ssl:error] [pid 3763991:tid 3763991] (70014)End of file found: [client 216.73.216.199:21416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:07.375739 2026] [ssl:error] [pid 3764336:tid 3764336] (70014)End of file found: [client 216.73.216.199:34158] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:08.689002 2026] [ssl:error] [pid 3760741:tid 3760741] (EAI 2)Name or service not known: [client 144.76.19.72:50248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:08.689081 2026] [ssl:error] [pid 3760741:tid 3760741] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:08.740738 2026] [ssl:error] [pid 3735209:tid 3735209] (EAI 2)Name or service not known: [client 144.76.19.72:50258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:08.740764 2026] [ssl:error] [pid 3735209:tid 3735209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:08.770875 2026] [ssl:error] [pid 3729127:tid 3729127] (70014)End of file found: [client 216.73.216.199:59555] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:09.164047 2026] [security2:error] [pid 3761048:tid 3761048] [client 91.79.75.194:58334] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtk3aGioyZJkPWBDyN02AAAABM"]
[Thu Jul 30 15:51:09.164121 2026] [security2:error] [pid 3761048:tid 3761048] [client 91.79.75.194:58334] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtk3aGioyZJkPWBDyN02AAAABM"]
[Thu Jul 30 15:51:09.164425 2026] [security2:error] [pid 3761048:tid 3761048] [client 91.79.75.194:58334] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtk3aGioyZJkPWBDyN02AAAABM"]
[Thu Jul 30 15:51:11.072626 2026] [cgi:error] [pid 3761119:tid 3761119] [client 194.9.110.170:38829] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:51:11.143925 2026] [security2:error] [pid 3764265:tid 3764265] [client 162.62.132.25:44612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "render-farm.co.uk"] [uri "/"] [unique_id "amtk32yWufOe5L_bjPqj-QAAAB8"]
[Thu Jul 30 15:51:11.199232 2026] [security2:error] [pid 3761677:tid 3761677] [client 136.158.26.69:45685] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtk3zZSpWouyrVDeiIR-QAAAB0"]
[Thu Jul 30 15:51:11.199287 2026] [security2:error] [pid 3761677:tid 3761677] [client 136.158.26.69:45685] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtk3zZSpWouyrVDeiIR-QAAAB0"]
[Thu Jul 30 15:51:11.199605 2026] [security2:error] [pid 3761677:tid 3761677] [client 136.158.26.69:45685] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtk3zZSpWouyrVDeiIR-QAAAB0"]
[Thu Jul 30 15:51:11.839149 2026] [ssl:error] [pid 3722978:tid 3722978] (EAI 2)Name or service not known: [client 144.76.19.72:49978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:11.839178 2026] [ssl:error] [pid 3722978:tid 3722978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:11.890371 2026] [ssl:error] [pid 3764295:tid 3764295] (EAI 2)Name or service not known: [client 144.76.19.72:49994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:11.890394 2026] [ssl:error] [pid 3764295:tid 3764295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:11.923433 2026] [core:error] [pid 3760741:tid 3760741] (13)Permission denied: [client 216.73.216.199:49593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS1/closing_wait
[Thu Jul 30 15:51:12.716395 2026] [core:error] [pid 3764293:tid 3764293] (13)Permission denied: [client 216.73.216.199:63576] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:27/subsystem/ttyS2/closing_wait
[Thu Jul 30 15:51:13.141488 2026] [ssl:error] [pid 3764293:tid 3764293] (70014)End of file found: [client 216.73.216.199:63576] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:13.142475 2026] [access_compat:error] [pid 3722978:tid 3722978] [client 115.96.93.224:62673] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:14.417775 2026] [security2:error] [pid 3736033:tid 3736033] [client 103.167.229.209:33085] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtk4qjZwwtvY07nSf1vlwAAACw"]
[Thu Jul 30 15:51:14.417848 2026] [security2:error] [pid 3736033:tid 3736033] [client 103.167.229.209:33085] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtk4qjZwwtvY07nSf1vlwAAACw"]
[Thu Jul 30 15:51:14.418128 2026] [security2:error] [pid 3736033:tid 3736033] [client 103.167.229.209:33085] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtk4qjZwwtvY07nSf1vlwAAACw"]
[Thu Jul 30 15:51:14.945761 2026] [ssl:error] [pid 3761621:tid 3761621] (EAI 2)Name or service not known: [client 144.76.19.72:49996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:14.945819 2026] [ssl:error] [pid 3761621:tid 3761621] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:15.001899 2026] [ssl:error] [pid 3761048:tid 3761048] (EAI 2)Name or service not known: [client 144.76.19.72:50010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:15.001930 2026] [ssl:error] [pid 3761048:tid 3761048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:15.628655 2026] [security2:error] [pid 3764337:tid 3764337] [client 80.94.92.167:54668] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "islay.me"] [uri "/.svn/wc.db"] [unique_id "amtk4--dFgS-5Madnmv97wAAADQ"]
[Thu Jul 30 15:51:15.628801 2026] [security2:error] [pid 3764337:tid 3764337] [client 80.94.92.167:54668] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "islay.me"] [uri "/.svn/wc.db"] [unique_id "amtk4--dFgS-5Madnmv97wAAADQ"]
[Thu Jul 30 15:51:15.628999 2026] [security2:error] [pid 3764337:tid 3764337] [client 80.94.92.167:54668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "islay.me"] [uri "/.svn/wc.db"] [unique_id "amtk4--dFgS-5Madnmv97wAAADQ"]
[Thu Jul 30 15:51:15.629236 2026] [security2:error] [pid 3764337:tid 3764337] [client 80.94.92.167:54668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "islay.me"] [uri "/.svn/wc.db"] [unique_id "amtk4--dFgS-5Madnmv97wAAADQ"]
[Thu Jul 30 15:51:16.167261 2026] [ssl:error] [pid 3760741:tid 3760741] (70014)End of file found: [client 216.73.216.199:49593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:17.668478 2026] [ssl:error] [pid 3765368:tid 3765368] (70014)End of file found: [client 216.73.216.199:4020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:18.058639 2026] [ssl:error] [pid 3763991:tid 3763991] (EAI 2)Name or service not known: [client 144.76.19.72:50018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:18.058682 2026] [ssl:error] [pid 3763991:tid 3763991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:18.110705 2026] [ssl:error] [pid 3763497:tid 3763497] (EAI 2)Name or service not known: [client 144.76.19.72:50020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:18.110746 2026] [ssl:error] [pid 3763497:tid 3763497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:18.461711 2026] [ssl:error] [pid 3731009:tid 3731009] (70014)End of file found: [client 216.73.216.199:20699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:18.601704 2026] [access_compat:error] [pid 3761621:tid 3761621] [client 20.203.221.142:44048] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file59.php
[Thu Jul 30 15:51:18.602090 2026] [core:error] [pid 3761621:tid 3761621] [client 20.203.221.142:44048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:51:19.234694 2026] [access_compat:error] [pid 3736033:tid 3736033] [client 115.96.93.224:62986] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:21.178595 2026] [ssl:error] [pid 3764239:tid 3764239] (EAI 2)Name or service not known: [client 144.76.19.72:51846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:21.178644 2026] [ssl:error] [pid 3764239:tid 3764239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:21.235221 2026] [ssl:error] [pid 3764293:tid 3764293] (EAI 2)Name or service not known: [client 144.76.19.72:51854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:21.235271 2026] [ssl:error] [pid 3764293:tid 3764293] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:22.313769 2026] [access_compat:error] [pid 3764293:tid 3764293] [client 20.203.221.142:42572] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/vx.php
[Thu Jul 30 15:51:22.314192 2026] [core:error] [pid 3764293:tid 3764293] [client 20.203.221.142:42572] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:51:23.914220 2026] [access_compat:error] [pid 3735209:tid 3735209] [client 115.96.93.224:63193] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:24.293369 2026] [ssl:error] [pid 3763430:tid 3763430] (EAI 2)Name or service not known: [client 144.76.19.72:51868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:24.293412 2026] [ssl:error] [pid 3763430:tid 3763430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:24.347903 2026] [ssl:error] [pid 3763430:tid 3763430] (EAI 2)Name or service not known: [client 144.76.19.72:51882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:24.347931 2026] [ssl:error] [pid 3763430:tid 3763430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:24.656084 2026] [ssl:error] [pid 3764239:tid 3764239] (70014)End of file found: [client 216.73.216.199:54575] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:25.198630 2026] [ssl:error] [pid 3736033:tid 3736033] (70014)End of file found: [client 216.73.216.199:51331] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:25.554696 2026] [ssl:error] [pid 3731009:tid 3731009] (70014)End of file found: [client 216.73.216.199:62648] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:27.405342 2026] [ssl:error] [pid 3766437:tid 3766437] (EAI 2)Name or service not known: [client 144.76.19.72:51888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:27.405391 2026] [ssl:error] [pid 3766437:tid 3766437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:27.463629 2026] [ssl:error] [pid 3737525:tid 3737525] (EAI 2)Name or service not known: [client 144.76.19.72:51904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:27.463692 2026] [ssl:error] [pid 3737525:tid 3737525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:29.972399 2026] [core:error] [pid 3764337:tid 3764337] (13)Permission denied: [client 216.73.216.199:25686] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:51:30.128612 2026] [access_compat:error] [pid 3729127:tid 3729127] [client 115.96.93.224:63513] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:30.518917 2026] [ssl:error] [pid 3762249:tid 3762249] (EAI 2)Name or service not known: [client 144.76.19.72:39678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:30.518959 2026] [ssl:error] [pid 3762249:tid 3762249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:30.583542 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:39684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:30.583577 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:30.945882 2026] [security2:error] [pid 3729305:tid 3729305] [client 43.163.80.48:51224] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "amtk8grA3_HGz5yqr9B_FwAAAAo"]
[Thu Jul 30 15:51:31.285813 2026] [ssl:error] [pid 3764337:tid 3764337] (70014)End of file found: [client 216.73.216.199:25686] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:32.185193 2026] [ssl:error] [pid 3763498:tid 3763498] (70014)End of file found: [client 216.73.216.199:46396] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:32.258010 2026] [security2:error] [pid 3760405:tid 3760405] [client 43.163.80.48:54268] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchfest.com"] [uri "/"] [unique_id "amtk9NaXalB7ZV5dYNrydwAAABA"], referer: http://ditchfest.com
[Thu Jul 30 15:51:32.687640 2026] [security2:error] [pid 3722978:tid 3722978] [client 47.128.42.188:34832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.saturnsports.co.uk"] [uri "/robots.txt"] [unique_id "amtk9FI7kMtqSQhdMGbRaQAAAEU"]
[Thu Jul 30 15:51:33.682694 2026] [ssl:error] [pid 3766493:tid 3766493] (EAI 2)Name or service not known: [client 144.76.19.72:39700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:33.682730 2026] [ssl:error] [pid 3766493:tid 3766493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:33.734346 2026] [ssl:error] [pid 3737530:tid 3737530] (EAI 2)Name or service not known: [client 144.76.19.72:39716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:33.734380 2026] [ssl:error] [pid 3737530:tid 3737530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:34.562125 2026] [access_compat:error] [pid 3731180:tid 3731180] [client 115.96.93.224:63704] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:34.597623 2026] [ssl:error] [pid 3764295:tid 3764295] (70014)End of file found: [client 216.73.216.199:2876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:34.651297 2026] [security2:error] [pid 3722978:tid 3722978] [client 47.128.27.202:43406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "codeworks.co.uk"] [uri "/robots.txt"] [unique_id "amtk9lI7kMtqSQhdMGbRbAAAAEU"]
[Thu Jul 30 15:51:36.819618 2026] [ssl:error] [pid 3764337:tid 3764337] (EAI 2)Name or service not known: [client 144.76.19.72:39720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:36.819673 2026] [ssl:error] [pid 3764337:tid 3764337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:36.874655 2026] [ssl:error] [pid 3762346:tid 3762346] (EAI 2)Name or service not known: [client 144.76.19.72:39724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:36.874695 2026] [ssl:error] [pid 3762346:tid 3762346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:37.006545 2026] [ssl:error] [pid 3737439:tid 3737439] (70014)End of file found: [client 216.73.216.199:45642] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:37.908581 2026] [ssl:error] [pid 3722978:tid 3722978] (70014)End of file found: [client 216.73.216.199:13162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:38.925782 2026] [security2:error] [pid 3727225:tid 3727225] [client 80.94.92.67:45420] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bashforthbell.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtk-uEZK0mnXR83Vzm7MQAAAA4"]
[Thu Jul 30 15:51:38.926042 2026] [security2:error] [pid 3727225:tid 3727225] [client 80.94.92.67:45420] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtk-uEZK0mnXR83Vzm7MQAAAA4"]
[Thu Jul 30 15:51:38.926426 2026] [security2:error] [pid 3727225:tid 3727225] [client 80.94.92.67:45420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtk-uEZK0mnXR83Vzm7MQAAAA4"]
[Thu Jul 30 15:51:38.926819 2026] [security2:error] [pid 3727225:tid 3727225] [client 80.94.92.67:45420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtk-uEZK0mnXR83Vzm7MQAAAA4"]
[Thu Jul 30 15:51:39.089484 2026] [security2:error] [pid 3766381:tid 3766381] [client 80.94.92.67:45436] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bashforthbell.com"] [uri "/.svn/wc.db"] [unique_id "amtk-8UnpdQlkZHXPEBr4wAAAAE"]
[Thu Jul 30 15:51:39.089648 2026] [security2:error] [pid 3766381:tid 3766381] [client 80.94.92.67:45436] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bashforthbell.com"] [uri "/.svn/wc.db"] [unique_id "amtk-8UnpdQlkZHXPEBr4wAAAAE"]
[Thu Jul 30 15:51:39.089826 2026] [security2:error] [pid 3766381:tid 3766381] [client 80.94.92.67:45436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bashforthbell.com"] [uri "/.svn/wc.db"] [unique_id "amtk-8UnpdQlkZHXPEBr4wAAAAE"]
[Thu Jul 30 15:51:39.090063 2026] [security2:error] [pid 3766381:tid 3766381] [client 80.94.92.67:45436] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bashforthbell.com"] [uri "/.svn/wc.db"] [unique_id "amtk-8UnpdQlkZHXPEBr4wAAAAE"]
[Thu Jul 30 15:51:39.818409 2026] [security2:error] [pid 3735209:tid 3735209] [client 47.128.29.113:25430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "blog.alism.com"] [uri "/harry-potter-and-the-deathly-hallows-part-2-3d/"] [unique_id "amtk-y6BOQUb63ofaCAMuwAAABo"]
[Thu Jul 30 15:51:39.818741 2026] [access_compat:error] [pid 3735209:tid 3735209] [client 47.128.29.113:25430] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:51:39.929796 2026] [ssl:error] [pid 3766949:tid 3766949] (EAI 2)Name or service not known: [client 144.76.19.72:35386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:39.929841 2026] [ssl:error] [pid 3766949:tid 3766949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:39.990817 2026] [ssl:error] [pid 3766992:tid 3766992] (EAI 2)Name or service not known: [client 144.76.19.72:35400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:39.990853 2026] [ssl:error] [pid 3766992:tid 3766992] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:40.318393 2026] [ssl:error] [pid 3766991:tid 3766991] (70014)End of file found: [client 216.73.216.199:35623] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:40.514103 2026] [access_compat:error] [pid 3766437:tid 3766437] [client 20.203.221.142:22993] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/166.php
[Thu Jul 30 15:51:40.514473 2026] [core:error] [pid 3766437:tid 3766437] [client 20.203.221.142:22993] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:51:41.385483 2026] [security2:error] [pid 3766437:tid 3766437] [client 85.208.96.203:48428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/remember-me-with-smiles-not-tears,-for-all-the-joy-through-all-the-years"] [unique_id "amtk_aik2swLVL6dXDF9pwAAAAY"]
[Thu Jul 30 15:51:41.610308 2026] [security2:error] [pid 3762346:tid 3762346] [client 51.89.129.178:64740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/josh/"] [unique_id "amtk_fvw-lpMi0gbtLlaLQAAACU"]
[Thu Jul 30 15:51:43.049083 2026] [ssl:error] [pid 3737525:tid 3737525] (EAI 2)Name or service not known: [client 144.76.19.72:35414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:43.049124 2026] [ssl:error] [pid 3737525:tid 3737525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:43.101931 2026] [ssl:error] [pid 3727225:tid 3727225] (EAI 2)Name or service not known: [client 144.76.19.72:35422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:43.101969 2026] [ssl:error] [pid 3727225:tid 3727225] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:43.333637 2026] [ssl:error] [pid 3766490:tid 3766490] (70014)End of file found: [client 216.73.216.199:24995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:43.962201 2026] [security2:error] [pid 3729305:tid 3729305] [client 43.140.37.167:35026] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.josephashmore.org"] [uri "/"] [unique_id "amtk_wrA3_HGz5yqr9B_IAAAAAo"]
[Thu Jul 30 15:51:45.245838 2026] [access_compat:error] [pid 3737525:tid 3737525] [client 115.96.93.224:64217] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:45.447698 2026] [ssl:error] [pid 3760405:tid 3760405] (70014)End of file found: [client 216.73.216.199:26387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:45.692408 2026] [access_compat:error] [pid 3761119:tid 3761119] [client 45.158.164.139:46292] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:51:46.115724 2026] [security2:error] [pid 3766493:tid 3766493] [client 185.191.171.19:26802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,196.0/prev_next,prev.html"] [unique_id "amtlAoSrrYA6gF-XPWtkPQAAAA8"]
[Thu Jul 30 15:51:46.159750 2026] [ssl:error] [pid 3766491:tid 3766491] (EAI 2)Name or service not known: [client 144.76.19.72:35454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:46.159789 2026] [ssl:error] [pid 3766491:tid 3766491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:46.217800 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:35464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:46.217847 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:47.863189 2026] [ssl:error] [pid 3761678:tid 3761678] (70014)End of file found: [client 216.73.216.199:48947] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:48.667417 2026] [ssl:error] [pid 3729127:tid 3729127] (70014)End of file found: [client 216.73.216.199:62041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:49.271972 2026] [ssl:error] [pid 3764294:tid 3764294] (EAI 2)Name or service not known: [client 144.76.19.72:35480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:49.272009 2026] [ssl:error] [pid 3764294:tid 3764294] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:49.327361 2026] [ssl:error] [pid 3766994:tid 3766994] (EAI 2)Name or service not known: [client 144.76.19.72:35484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:49.327402 2026] [ssl:error] [pid 3766994:tid 3766994] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:49.894052 2026] [security2:error] [pid 3766491:tid 3766491] [client 47.128.50.178:52038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "orgent.eu"] [uri "/robots.txt"] [unique_id "amtlBX_XiUy6t8UNUAfuQAAAAAw"]
[Thu Jul 30 15:51:50.771415 2026] [ssl:error] [pid 3762249:tid 3762249] (70014)End of file found: [client 216.73.216.199:29607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:52.396536 2026] [ssl:error] [pid 3766949:tid 3766949] (EAI 2)Name or service not known: [client 144.76.19.72:21728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:52.396575 2026] [ssl:error] [pid 3766949:tid 3766949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:52.447904 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:21732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:52.447936 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:52.463051 2026] [authz_core:error] [pid 3766491:tid 3766491] [client 66.249.66.33:60546] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:51:52.465727 2026] [authz_core:error] [pid 3766491:tid 3766491] [client 66.249.66.33:60546] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:51:52.680677 2026] [ssl:error] [pid 3763430:tid 3763430] (70014)End of file found: [client 216.73.216.199:35866] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:53.994496 2026] [ssl:error] [pid 3718555:tid 3718555] (70014)End of file found: [client 216.73.216.199:63322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:55.501515 2026] [ssl:error] [pid 3763498:tid 3763498] (EAI 2)Name or service not known: [client 144.76.19.72:21736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:55.501546 2026] [ssl:error] [pid 3763498:tid 3763498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:55.559014 2026] [ssl:error] [pid 3761048:tid 3761048] (EAI 2)Name or service not known: [client 144.76.19.72:21740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:55.559048 2026] [ssl:error] [pid 3761048:tid 3761048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:55.718935 2026] [access_compat:error] [pid 3764239:tid 3764239] [client 115.96.93.224:64727] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:56.100730 2026] [core:error] [pid 3767668:tid 3767668] (13)Permission denied: [client 216.73.216.199:47959] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fsnotify_mark/slabs_cpu_partial
[Thu Jul 30 15:51:57.320147 2026] [access_compat:error] [pid 3766990:tid 3766990] [client 45.118.159.69:31209] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:51:58.176559 2026] [security2:error] [pid 3763497:tid 3763497] [client 43.156.79.172:60764] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.co.uk"] [uri "/"] [unique_id "amtlDlQ9JrlmY5lmjD6TlQAAAAc"]
[Thu Jul 30 15:51:58.509111 2026] [ssl:error] [pid 3767668:tid 3767668] (70014)End of file found: [client 216.73.216.199:47959] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:51:58.612827 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:21752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:58.612876 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:51:58.665281 2026] [ssl:error] [pid 3767793:tid 3767793] (EAI 2)Name or service not known: [client 144.76.19.72:21754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:51:58.665317 2026] [ssl:error] [pid 3767793:tid 3767793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:00.013136 2026] [ssl:error] [pid 3735204:tid 3735204] (70014)End of file found: [client 216.73.216.199:9715] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:00.616235 2026] [core:error] [pid 3749424:tid 3749424] (13)Permission denied: [client 216.73.216.199:1967] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-2/usersize
[Thu Jul 30 15:52:01.649303 2026] [core:error] [pid 3763430:tid 3763430] [client 20.203.221.142:21491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:01.649339 2026] [core:error] [pid 3763430:tid 3763430] [client 20.203.221.142:21491] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:01.719187 2026] [ssl:error] [pid 3766492:tid 3766492] (EAI 2)Name or service not known: [client 144.76.19.72:27528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:01.719241 2026] [ssl:error] [pid 3766492:tid 3766492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:01.774122 2026] [ssl:error] [pid 3764239:tid 3764239] (EAI 2)Name or service not known: [client 144.76.19.72:27530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:01.774173 2026] [ssl:error] [pid 3764239:tid 3764239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:01.800232 2026] [access_compat:error] [pid 3767793:tid 3767793] [client 115.96.93.224:65044] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:02.723003 2026] [ssl:error] [pid 3749424:tid 3749424] (70014)End of file found: [client 216.73.216.199:1967] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:03.505536 2026] [access_compat:error] [pid 3763430:tid 3763430] [client 45.118.159.69:31222] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:04.526936 2026] [access_compat:error] [pid 3764294:tid 3764294] [client 45.158.164.139:41764] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:52:04.832204 2026] [ssl:error] [pid 3764239:tid 3764239] (EAI 2)Name or service not known: [client 144.76.19.72:27532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:04.832245 2026] [ssl:error] [pid 3764239:tid 3764239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:04.885630 2026] [ssl:error] [pid 3767762:tid 3767762] (EAI 2)Name or service not known: [client 144.76.19.72:27544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:04.885675 2026] [ssl:error] [pid 3767762:tid 3767762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:05.741121 2026] [ssl:error] [pid 3763992:tid 3763992] (70014)End of file found: [client 216.73.216.199:39914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:06.234684 2026] [ssl:error] [pid 3737525:tid 3737525] (70014)End of file found: [client 216.73.216.199:9917] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:06.513263 2026] [access_compat:error] [pid 3764239:tid 3764239] [client 115.96.93.224:65246] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:07.943469 2026] [ssl:error] [pid 3764336:tid 3764336] (EAI 2)Name or service not known: [client 144.76.19.72:27558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:07.943514 2026] [ssl:error] [pid 3764336:tid 3764336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:07.996957 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:27572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:07.997002 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:08.763915 2026] [access_compat:error] [pid 3749424:tid 3749424] [client 45.118.159.69:30806] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:09.229712 2026] [security2:error] [pid 3766994:tid 3766994] [client 47.128.119.88:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "papier.com.mt"] [uri "/robots.txt"] [unique_id "amtlGcoC_Bd3BsFm0lPLKwAAACQ"]
[Thu Jul 30 15:52:09.357888 2026] [ssl:error] [pid 3735204:tid 3735204] (70014)End of file found: [client 216.73.216.199:43602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:11.053235 2026] [ssl:error] [pid 3763497:tid 3763497] (EAI 2)Name or service not known: [client 144.76.19.72:28326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:11.053265 2026] [ssl:error] [pid 3763497:tid 3763497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:11.106586 2026] [ssl:error] [pid 3768251:tid 3768251] (EAI 2)Name or service not known: [client 144.76.19.72:28330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:11.106630 2026] [ssl:error] [pid 3768251:tid 3768251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:12.670234 2026] [ssl:error] [pid 3767668:tid 3767668] (70014)End of file found: [client 216.73.216.199:11916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:13.268525 2026] [ssl:error] [pid 3768251:tid 3768251] (70014)End of file found: [client 216.73.216.199:52079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:14.159084 2026] [ssl:error] [pid 3764239:tid 3764239] (EAI 2)Name or service not known: [client 144.76.19.72:28334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:14.159116 2026] [ssl:error] [pid 3764239:tid 3764239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:14.211855 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:28344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:14.211884 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:14.298140 2026] [security2:error] [pid 3729127:tid 3729127] [client 20.171.55.167:8204] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jonathanmeyerart.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtlHoPmEr29eaWUJVP2DAAAAAg"]
[Thu Jul 30 15:52:14.298360 2026] [security2:error] [pid 3729127:tid 3729127] [client 20.171.55.167:8204] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jonathanmeyerart.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtlHoPmEr29eaWUJVP2DAAAAAg"]
[Thu Jul 30 15:52:14.303982 2026] [security2:error] [pid 3729127:tid 3729127] [client 20.171.55.167:8204] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jonathanmeyerart.com"] [uri "/index.php"] [unique_id "amtlHoPmEr29eaWUJVP2DAAAAAg"]
[Thu Jul 30 15:52:14.665610 2026] [ssl:error] [pid 3763991:tid 3763991] (70014)End of file found: [client 216.73.216.199:46629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:14.788276 2026] [access_compat:error] [pid 3767762:tid 3767762] [client 45.118.159.69:30792] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:14.858042 2026] [security2:error] [pid 3767793:tid 3767793] [client 54.147.182.90:23020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/wp-content/uploads/2013/06/Steve-03-300x201.png"] [unique_id "amtlHt6xXJEv5ZU1hrepzAAAABQ"]
[Thu Jul 30 15:52:14.970504 2026] [security2:error] [pid 3735204:tid 3735204] [client 114.119.144.31:59637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/service-type/special-service/"] [unique_id "amtlHquEBmAYsWETt1MchAAAABI"], referer: http://www.erskinenazarene.co.uk/sermons/page/9/
[Thu Jul 30 15:52:15.751658 2026] [cgi:error] [pid 3767667:tid 3767667] [client 20.9.4.9:57500] AH02812: stderr from /home/websters/public_html/itsupportinayrshire.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:52:16.469201 2026] [core:error] [pid 3735204:tid 3735204] [client 20.203.221.142:3626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:16.469244 2026] [core:error] [pid 3735204:tid 3735204] [client 20.203.221.142:3626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:16.470759 2026] [security2:error] [pid 3731180:tid 3731180] [client 114.119.144.31:59641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/service-type/special-service/"] [unique_id "amtlIJv-iPW7V1Uv8mFWtwAAAEQ"], referer: http://www.erskinenazarene.co.uk/sermons/page/9/
[Thu Jul 30 15:52:17.033649 2026] [access_compat:error] [pid 3737530:tid 3737530] [client 115.96.93.224:49368] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:17.269037 2026] [ssl:error] [pid 3768497:tid 3768497] (EAI 2)Name or service not known: [client 144.76.19.72:28346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:17.269103 2026] [ssl:error] [pid 3768497:tid 3768497] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:17.327512 2026] [ssl:error] [pid 3768498:tid 3768498] (EAI 2)Name or service not known: [client 144.76.19.72:28348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:17.327561 2026] [ssl:error] [pid 3768498:tid 3768498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:17.479233 2026] [access_compat:error] [pid 3764336:tid 3764336] [client 20.203.221.142:52982] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a1vx.php
[Thu Jul 30 15:52:17.479602 2026] [core:error] [pid 3764336:tid 3764336] [client 20.203.221.142:52982] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:18.699567 2026] [access_compat:error] [pid 3768251:tid 3768251] [client 45.118.159.69:30810] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:19.893831 2026] [ssl:error] [pid 3767668:tid 3767668] (70014)End of file found: [client 216.73.216.199:10424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:20.194098 2026] [ssl:error] [pid 3768538:tid 3768538] (70014)End of file found: [client 216.73.216.199:51455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:20.385029 2026] [ssl:error] [pid 3764336:tid 3764336] (EAI 2)Name or service not known: [client 144.76.19.72:41962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:20.385061 2026] [ssl:error] [pid 3764336:tid 3764336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:20.440195 2026] [ssl:error] [pid 3764336:tid 3764336] (EAI 2)Name or service not known: [client 144.76.19.72:41966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:20.440229 2026] [ssl:error] [pid 3764336:tid 3764336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:21.097030 2026] [core:error] [pid 3764336:tid 3764336] (13)Permission denied: [client 216.73.216.199:61747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory135/node0/compact
[Thu Jul 30 15:52:22.106094 2026] [core:error] [pid 3764337:tid 3764337] [client 66.249.66.8:38937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:22.106158 2026] [core:error] [pid 3764337:tid 3764337] [client 66.249.66.8:38937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:22.510377 2026] [ssl:error] [pid 3764336:tid 3764336] (70014)End of file found: [client 216.73.216.199:61747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:23.221208 2026] [access_compat:error] [pid 3768759:tid 3768759] [client 115.96.93.224:49705] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:23.543598 2026] [ssl:error] [pid 3764239:tid 3764239] (EAI 2)Name or service not known: [client 144.76.19.72:41968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:23.543653 2026] [ssl:error] [pid 3764239:tid 3764239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:23.598478 2026] [ssl:error] [pid 3729127:tid 3729127] (EAI 2)Name or service not known: [client 144.76.19.72:41974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:23.598508 2026] [ssl:error] [pid 3729127:tid 3729127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:25.188096 2026] [security2:error] [pid 3767668:tid 3767668] [client 74.7.227.41:47724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "borovetsexpress.com"] [uri "/"] [unique_id "amtlKYmvyIAlIU0RTl3gtwAAAAs"], referer: https://sergechel.info
[Thu Jul 30 15:52:25.555738 2026] [ssl:error] [pid 3768876:tid 3768876] (70014)End of file found: [client 216.73.216.199:64388] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:25.823243 2026] [core:error] [pid 3768540:tid 3768540] (13)Permission denied: [client 216.73.216.199:51878] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory119/node0/compact
[Thu Jul 30 15:52:26.021268 2026] [security2:error] [pid 3768537:tid 3768537] [client 110.249.201.104:29932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amtlKkVlEqSFht4jukQtPwAAABY"]
[Thu Jul 30 15:52:26.606678 2026] [security2:error] [pid 3769027:tid 3769027] [client 85.208.96.199:55570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1963.0/prev_next,prev.html"] [unique_id "amtlKkdTVSemxeWkqHSLEwAAAC8"]
[Thu Jul 30 15:52:26.685406 2026] [ssl:error] [pid 3766436:tid 3766436] (EAI 2)Name or service not known: [client 144.76.19.72:41988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:26.685465 2026] [ssl:error] [pid 3766436:tid 3766436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:26.752243 2026] [ssl:error] [pid 3769027:tid 3769027] (EAI 2)Name or service not known: [client 144.76.19.72:41998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:26.752275 2026] [ssl:error] [pid 3769027:tid 3769027] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:27.330312 2026] [ssl:error] [pid 3768540:tid 3768540] (70014)End of file found: [client 216.73.216.199:51878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:27.639112 2026] [access_compat:error] [pid 3768497:tid 3768497] [client 115.96.93.224:49899] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:28.119291 2026] [security2:error] [pid 3768954:tid 3768954] [client 139.135.36.53:58387] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlLAGvJIqSEaKyX68b2QAAACw"]
[Thu Jul 30 15:52:28.119365 2026] [security2:error] [pid 3768954:tid 3768954] [client 139.135.36.53:58387] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlLAGvJIqSEaKyX68b2QAAACw"]
[Thu Jul 30 15:52:28.119718 2026] [security2:error] [pid 3768954:tid 3768954] [client 139.135.36.53:58387] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlLAGvJIqSEaKyX68b2QAAACw"]
[Thu Jul 30 15:52:28.301616 2026] [authz_core:error] [pid 3763992:tid 3763992] [client 66.249.66.34:50122] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:52:28.304307 2026] [authz_core:error] [pid 3763992:tid 3763992] [client 66.249.66.34:50122] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:52:28.538205 2026] [ssl:error] [pid 3768953:tid 3768953] (70014)End of file found: [client 216.73.216.199:40028] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:29.475547 2026] [authz_core:error] [pid 3763992:tid 3763992] [client 66.249.66.34:50122] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:52:29.478205 2026] [authz_core:error] [pid 3763992:tid 3763992] [client 66.249.66.34:50122] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:52:29.807923 2026] [ssl:error] [pid 3767762:tid 3767762] (EAI 2)Name or service not known: [client 144.76.19.72:36622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:29.807958 2026] [ssl:error] [pid 3767762:tid 3767762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:29.861209 2026] [ssl:error] [pid 3769081:tid 3769081] (EAI 2)Name or service not known: [client 144.76.19.72:36636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:29.861243 2026] [ssl:error] [pid 3769081:tid 3769081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:30.032614 2026] [access_compat:error] [pid 3731180:tid 3731180] [client 45.118.159.69:31420] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:30.596644 2026] [security2:error] [pid 3769073:tid 3769073] [client 197.88.254.197:42146] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlLrmCNFV4vxXCa5GJYwAAADE"]
[Thu Jul 30 15:52:30.596716 2026] [security2:error] [pid 3769073:tid 3769073] [client 197.88.254.197:42146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlLrmCNFV4vxXCa5GJYwAAADE"]
[Thu Jul 30 15:52:30.597062 2026] [security2:error] [pid 3769073:tid 3769073] [client 197.88.254.197:42146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlLrmCNFV4vxXCa5GJYwAAADE"]
[Thu Jul 30 15:52:30.863195 2026] [security2:error] [pid 3764295:tid 3764295] [client 216.73.216.199:46673] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default-base/tuned.conf"] [unique_id "amtlLgXDX07-ervBSqqTWAAAACk"]
[Thu Jul 30 15:52:30.863496 2026] [security2:error] [pid 3764295:tid 3764295] [client 216.73.216.199:46673] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default-base/tuned.conf"] [unique_id "amtlLgXDX07-ervBSqqTWAAAACk"]
[Thu Jul 30 15:52:30.863720 2026] [security2:error] [pid 3764295:tid 3764295] [client 216.73.216.199:46673] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tuned/cloudlinux-default-base/tuned.conf"] [unique_id "amtlLgXDX07-ervBSqqTWAAAACk"]
[Thu Jul 30 15:52:32.914983 2026] [ssl:error] [pid 3767793:tid 3767793] (EAI 2)Name or service not known: [client 144.76.19.72:36644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:32.915015 2026] [ssl:error] [pid 3767793:tid 3767793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:32.969853 2026] [ssl:error] [pid 3768760:tid 3768760] (EAI 2)Name or service not known: [client 144.76.19.72:36646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:32.969899 2026] [ssl:error] [pid 3768760:tid 3768760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:33.398041 2026] [ssl:error] [pid 3769026:tid 3769026] (70014)End of file found: [client 216.73.216.199:44266] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:33.731270 2026] [access_compat:error] [pid 3766991:tid 3766991] [client 115.96.93.224:50215] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:34.316310 2026] [ssl:error] [pid 3767792:tid 3767792] (70014)End of file found: [client 216.73.216.199:28162] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:35.755806 2026] [security2:error] [pid 3768876:tid 3768876] [client 177.12.208.95:1486] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlM0oW3asUY2EsipuHXwAAACg"]
[Thu Jul 30 15:52:35.755865 2026] [security2:error] [pid 3768876:tid 3768876] [client 177.12.208.95:1486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlM0oW3asUY2EsipuHXwAAACg"]
[Thu Jul 30 15:52:35.756177 2026] [security2:error] [pid 3768876:tid 3768876] [client 177.12.208.95:1486] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlM0oW3asUY2EsipuHXwAAACg"]
[Thu Jul 30 15:52:35.829155 2026] [ssl:error] [pid 3764295:tid 3764295] (70014)End of file found: [client 216.73.216.199:46673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:36.026909 2026] [ssl:error] [pid 3769028:tid 3769028] (EAI 2)Name or service not known: [client 144.76.19.72:36660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:36.026944 2026] [ssl:error] [pid 3769028:tid 3769028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:36.059940 2026] [access_compat:error] [pid 3764294:tid 3764294] [client 45.118.159.69:30543] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:36.078777 2026] [ssl:error] [pid 3769025:tid 3769025] (EAI 2)Name or service not known: [client 144.76.19.72:36662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:36.078817 2026] [ssl:error] [pid 3769025:tid 3769025] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:37.696062 2026] [authz_core:error] [pid 3768251:tid 3768251] [client 66.249.66.33:54109] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:52:37.698743 2026] [authz_core:error] [pid 3768251:tid 3768251] [client 66.249.66.33:54109] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:52:38.231656 2026] [access_compat:error] [pid 3768451:tid 3768451] [client 115.96.93.224:50409] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:39.136576 2026] [ssl:error] [pid 3737525:tid 3737525] (EAI 2)Name or service not known: [client 144.76.19.72:36666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:39.136614 2026] [ssl:error] [pid 3737525:tid 3737525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:39.194153 2026] [ssl:error] [pid 3768953:tid 3768953] (EAI 2)Name or service not known: [client 144.76.19.72:36676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:39.194197 2026] [ssl:error] [pid 3768953:tid 3768953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:39.627662 2026] [access_compat:error] [pid 3761678:tid 3761678] [client 45.118.159.69:30779] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:39.767452 2026] [ssl:error] [pid 3767618:tid 3767618] (70014)End of file found: [client 216.73.216.199:12718] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:40.280980 2026] [ssl:error] [pid 3767792:tid 3767792] (70014)End of file found: [client 216.73.216.199:37249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:41.279810 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:60704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:41.305392 2026] [lsapi:warn] [pid 3769080:tid 3769080] [client 195.226.50.190:65135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 15:52:41.305432 2026] [lsapi:warn] [pid 3769080:tid 3769080] [client 195.226.50.190:65135] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 15:52:41.860977 2026] [security2:error] [pid 3735204:tid 3735204] [client 85.208.96.196:22746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/childfund-australia-cancel-donation"] [unique_id "amtlOauEBmAYsWETt1MciAAAABI"]
[Thu Jul 30 15:52:42.251052 2026] [ssl:error] [pid 3766990:tid 3766990] (EAI 2)Name or service not known: [client 144.76.19.72:29194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:42.251116 2026] [ssl:error] [pid 3766990:tid 3766990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:42.307781 2026] [ssl:error] [pid 3767793:tid 3767793] (EAI 2)Name or service not known: [client 144.76.19.72:29208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:42.307812 2026] [ssl:error] [pid 3767793:tid 3767793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:43.385775 2026] [access_compat:error] [pid 3768498:tid 3768498] [client 44.200.193.199:45632] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2006/10/nathan_king_cambridge.thumbnail.jpg
[Thu Jul 30 15:52:43.385884 2026] [access_compat:error] [pid 3768498:tid 3768498] [client 44.200.193.199:45632] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:52:45.364204 2026] [ssl:error] [pid 3767793:tid 3767793] (EAI 2)Name or service not known: [client 144.76.19.72:29224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:45.364236 2026] [ssl:error] [pid 3767793:tid 3767793] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:45.420710 2026] [ssl:error] [pid 3768538:tid 3768538] (EAI 2)Name or service not known: [client 144.76.19.72:29240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:45.420766 2026] [ssl:error] [pid 3768538:tid 3768538] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:45.720656 2026] [access_compat:error] [pid 3767667:tid 3767667] [client 45.118.159.69:30842] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:46.289824 2026] [access_compat:error] [pid 3763430:tid 3763430] [client 45.158.164.139:52434] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:52:46.363280 2026] [access_compat:error] [pid 3768498:tid 3768498] [client 20.203.221.142:1542] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/666.php
[Thu Jul 30 15:52:46.363671 2026] [core:error] [pid 3768498:tid 3768498] [client 20.203.221.142:1542] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:47.058791 2026] [ssl:error] [pid 3768760:tid 3768760] (70014)End of file found: [client 216.73.216.199:50840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:47.322265 2026] [access_compat:error] [pid 3768498:tid 3768498] [client 20.203.221.142:29337] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/cu.php
[Thu Jul 30 15:52:47.322681 2026] [core:error] [pid 3768498:tid 3768498] [client 20.203.221.142:29337] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:52:47.856842 2026] [ssl:error] [pid 3762249:tid 3762249] (70014)End of file found: [client 216.73.216.199:5990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:48.476723 2026] [ssl:error] [pid 3769078:tid 3769078] (EAI 2)Name or service not known: [client 144.76.19.72:29242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:48.476769 2026] [ssl:error] [pid 3769078:tid 3769078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:48.533174 2026] [ssl:error] [pid 3768498:tid 3768498] (EAI 2)Name or service not known: [client 144.76.19.72:29252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:48.533212 2026] [ssl:error] [pid 3768498:tid 3768498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:49.046267 2026] [access_compat:error] [pid 3761048:tid 3761048] [client 115.96.93.224:50924] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:50.341041 2026] [access_compat:error] [pid 3769026:tid 3769026] [client 45.118.159.69:31178] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:51.584618 2026] [ssl:error] [pid 3769929:tid 3769929] (EAI 2)Name or service not known: [client 144.76.19.72:48330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:51.584663 2026] [ssl:error] [pid 3769929:tid 3769929] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:51.641284 2026] [ssl:error] [pid 3768953:tid 3768953] (EAI 2)Name or service not known: [client 144.76.19.72:48344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:51.641320 2026] [ssl:error] [pid 3768953:tid 3768953] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:52.533204 2026] [core:error] [pid 3761678:tid 3761678] (13)Permission denied: [client 216.73.216.199:56094] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory130/node0/compact
[Thu Jul 30 15:52:53.139386 2026] [ssl:error] [pid 3764296:tid 3764296] (70014)End of file found: [client 216.73.216.199:1775] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:54.713590 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:48360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:54.713636 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:54.771265 2026] [ssl:error] [pid 3769075:tid 3769075] (EAI 2)Name or service not known: [client 144.76.19.72:48364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:54.771310 2026] [ssl:error] [pid 3769075:tid 3769075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:55.215367 2026] [access_compat:error] [pid 3768953:tid 3768953] [client 115.96.93.224:51255] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:56.150879 2026] [core:error] [pid 3761678:tid 3761678] (13)Permission denied: [client 216.73.216.199:56094] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/zswap_entry/objects
[Thu Jul 30 15:52:56.446955 2026] [ssl:error] [pid 3761678:tid 3761678] (70014)End of file found: [client 216.73.216.199:56094] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:57.827199 2026] [ssl:error] [pid 3767667:tid 3767667] (EAI 2)Name or service not known: [client 144.76.19.72:48380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:57.827246 2026] [ssl:error] [pid 3767667:tid 3767667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:57.888113 2026] [ssl:error] [pid 3737530:tid 3737530] (EAI 2)Name or service not known: [client 144.76.19.72:48392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:52:57.888140 2026] [ssl:error] [pid 3737530:tid 3737530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:52:57.984061 2026] [core:error] [pid 3767618:tid 3767618] (13)Permission denied: [client 216.73.216.199:54343] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/order
[Thu Jul 30 15:52:59.070744 2026] [ssl:error] [pid 3767762:tid 3767762] (70014)End of file found: [client 216.73.216.199:46116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:52:59.512539 2026] [access_compat:error] [pid 3770421:tid 3770421] [client 115.96.93.224:51429] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:52:59.919290 2026] [security2:error] [pid 3764296:tid 3764296] [client 85.208.96.196:16106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,767.0/prev_next,prev.html"] [unique_id "amtlS6adUuTjGgXd3bgZRgAAACo"]
[Thu Jul 30 15:53:00.945091 2026] [ssl:error] [pid 3761048:tid 3761048] (EAI 2)Name or service not known: [client 144.76.19.72:35596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:00.945152 2026] [ssl:error] [pid 3761048:tid 3761048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:00.999814 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:35600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:00.999863 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:01.000876 2026] [ssl:error] [pid 3767618:tid 3767618] (70014)End of file found: [client 216.73.216.199:54343] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:02.200794 2026] [ssl:error] [pid 3768954:tid 3768954] (70014)End of file found: [client 216.73.216.199:28177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:03.968522 2026] [security2:error] [pid 3735204:tid 3735204] [client 47.128.119.21:44660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "staging.heritageinsuranceagency.co.uk"] [uri "/robots.txt"] [unique_id "amtlT6uEBmAYsWETt1McjgAAABI"]
[Thu Jul 30 15:53:04.057675 2026] [ssl:error] [pid 3764239:tid 3764239] (EAI 2)Name or service not known: [client 144.76.19.72:35612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:04.057710 2026] [ssl:error] [pid 3764239:tid 3764239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:04.115125 2026] [ssl:error] [pid 3769078:tid 3769078] (EAI 2)Name or service not known: [client 144.76.19.72:35624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:04.115163 2026] [ssl:error] [pid 3769078:tid 3769078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:04.509619 2026] [ssl:error] [pid 3769075:tid 3769075] (70014)End of file found: [client 216.73.216.199:30683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:05.664113 2026] [access_compat:error] [pid 3769076:tid 3769076] [client 115.96.93.224:51755] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:06.318055 2026] [ssl:error] [pid 3766990:tid 3766990] (70014)End of file found: [client 216.73.216.199:18250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:07.171707 2026] [ssl:error] [pid 3729127:tid 3729127] (EAI 2)Name or service not known: [client 144.76.19.72:35640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:07.171758 2026] [ssl:error] [pid 3729127:tid 3729127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:07.223659 2026] [ssl:error] [pid 3767792:tid 3767792] (EAI 2)Name or service not known: [client 144.76.19.72:35642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:07.223724 2026] [ssl:error] [pid 3767792:tid 3767792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:07.521957 2026] [ssl:error] [pid 3762346:tid 3762346] (70014)End of file found: [client 216.73.216.199:15801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:08.733791 2026] [security2:error] [pid 3767667:tid 3767667] [client 170.106.81.90:32541] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlVD-RclN-JBJn4U4yVgAAAAo"]
[Thu Jul 30 15:53:08.733858 2026] [security2:error] [pid 3767667:tid 3767667] [client 170.106.81.90:32541] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlVD-RclN-JBJn4U4yVgAAAAo"]
[Thu Jul 30 15:53:08.734141 2026] [security2:error] [pid 3767667:tid 3767667] [client 170.106.81.90:32541] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlVD-RclN-JBJn4U4yVgAAAAo"]
[Thu Jul 30 15:53:09.711392 2026] [access_compat:error] [pid 3768498:tid 3768498] [client 45.158.164.139:45638] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:53:09.926569 2026] [ssl:error] [pid 3731180:tid 3731180] (70014)End of file found: [client 216.73.216.199:57035] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:10.147280 2026] [access_compat:error] [pid 3769078:tid 3769078] [client 115.96.93.224:51944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:10.263642 2026] [security2:error] [pid 3767793:tid 3767793] [client 81.51.228.205:44626] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlVt6xXJEv5ZU1hrep5QAAABQ"]
[Thu Jul 30 15:53:10.263696 2026] [security2:error] [pid 3767793:tid 3767793] [client 81.51.228.205:44626] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlVt6xXJEv5ZU1hrep5QAAABQ"]
[Thu Jul 30 15:53:10.263961 2026] [security2:error] [pid 3767793:tid 3767793] [client 81.51.228.205:44626] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlVt6xXJEv5ZU1hrep5QAAABQ"]
[Thu Jul 30 15:53:10.278552 2026] [ssl:error] [pid 3767667:tid 3767667] (EAI 2)Name or service not known: [client 144.76.19.72:57930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:10.278602 2026] [ssl:error] [pid 3767667:tid 3767667] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:10.334510 2026] [ssl:error] [pid 3769075:tid 3769075] (EAI 2)Name or service not known: [client 144.76.19.72:57944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:10.334542 2026] [ssl:error] [pid 3769075:tid 3769075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:11.729393 2026] [ssl:error] [pid 3762249:tid 3762249] (70014)End of file found: [client 216.73.216.199:9889] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:12.638747 2026] [access_compat:error] [pid 3722978:tid 3722978] [client 45.118.159.69:31381] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:13.389134 2026] [ssl:error] [pid 3762291:tid 3762291] (EAI 2)Name or service not known: [client 144.76.19.72:57946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:13.389178 2026] [ssl:error] [pid 3762291:tid 3762291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:13.424840 2026] [security2:error] [pid 3749424:tid 3749424] [client 81.66.152.93:56490] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlWUgbpYY8Irr9i1qdgQAAAAM"]
[Thu Jul 30 15:53:13.424892 2026] [security2:error] [pid 3749424:tid 3749424] [client 81.66.152.93:56490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlWUgbpYY8Irr9i1qdgQAAAAM"]
[Thu Jul 30 15:53:13.425176 2026] [security2:error] [pid 3749424:tid 3749424] [client 81.66.152.93:56490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlWUgbpYY8Irr9i1qdgQAAAAM"]
[Thu Jul 30 15:53:13.445567 2026] [ssl:error] [pid 3769026:tid 3769026] (EAI 2)Name or service not known: [client 144.76.19.72:57954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:13.445618 2026] [ssl:error] [pid 3769026:tid 3769026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:14.250282 2026] [core:error] [pid 3762346:tid 3762346] (13)Permission denied: [client 216.73.216.199:20286] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory141/node0/compact
[Thu Jul 30 15:53:15.456002 2026] [core:error] [pid 3762346:tid 3762346] (13)Permission denied: [client 216.73.216.199:20286] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory138/node0/compact
[Thu Jul 30 15:53:15.756807 2026] [core:error] [pid 3762346:tid 3762346] (13)Permission denied: [client 216.73.216.199:20286] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory158/node0/compact
[Thu Jul 30 15:53:16.358889 2026] [security2:error] [pid 3762346:tid 3762346] [client 216.73.216.199:20286] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/dbus.conf"] [unique_id "amtlXPvw-lpMi0gbtLlaXAAAACU"]
[Thu Jul 30 15:53:16.359220 2026] [security2:error] [pid 3762346:tid 3762346] [client 216.73.216.199:20286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/dbus.conf"] [unique_id "amtlXPvw-lpMi0gbtLlaXAAAACU"]
[Thu Jul 30 15:53:16.359458 2026] [security2:error] [pid 3762346:tid 3762346] [client 216.73.216.199:20286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/sysusers.d/dbus.conf"] [unique_id "amtlXPvw-lpMi0gbtLlaXAAAACU"]
[Thu Jul 30 15:53:16.501249 2026] [ssl:error] [pid 3767668:tid 3767668] (EAI 2)Name or service not known: [client 144.76.19.72:57960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:16.501316 2026] [ssl:error] [pid 3767668:tid 3767668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:16.553413 2026] [ssl:error] [pid 3769026:tid 3769026] (EAI 2)Name or service not known: [client 144.76.19.72:57966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:16.553452 2026] [ssl:error] [pid 3769026:tid 3769026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:17.262710 2026] [security2:error] [pid 3762346:tid 3762346] [client 216.73.216.199:20286] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sys"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/polish/errmsg.sys"] [unique_id "amtlXfvw-lpMi0gbtLlaXwAAACU"]
[Thu Jul 30 15:53:17.263017 2026] [security2:error] [pid 3762346:tid 3762346] [client 216.73.216.199:20286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/polish/errmsg.sys"] [unique_id "amtlXfvw-lpMi0gbtLlaXwAAACU"]
[Thu Jul 30 15:53:17.263248 2026] [security2:error] [pid 3762346:tid 3762346] [client 216.73.216.199:20286] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/mysql/polish/errmsg.sys"] [unique_id "amtlXfvw-lpMi0gbtLlaXwAAACU"]
[Thu Jul 30 15:53:17.863810 2026] [ssl:error] [pid 3762346:tid 3762346] (70014)End of file found: [client 216.73.216.199:20286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:18.729946 2026] [access_compat:error] [pid 3731180:tid 3731180] [client 45.118.159.69:31513] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:18.771034 2026] [core:error] [pid 3731009:tid 3731009] (13)Permission denied: [client 216.73.216.199:12630] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory206/node0/compact
[Thu Jul 30 15:53:19.072526 2026] [ssl:error] [pid 3731009:tid 3731009] (70014)End of file found: [client 216.73.216.199:12630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:19.559852 2026] [cgi:error] [pid 3762249:tid 3762249] [client 74.248.96.101:16166] AH02811: stderr from /home/lukess/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:53:19.608986 2026] [ssl:error] [pid 3767792:tid 3767792] (EAI 2)Name or service not known: [client 144.76.19.72:37682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:19.609018 2026] [ssl:error] [pid 3767792:tid 3767792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:19.662047 2026] [ssl:error] [pid 3769028:tid 3769028] (EAI 2)Name or service not known: [client 144.76.19.72:37692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:19.662110 2026] [ssl:error] [pid 3769028:tid 3769028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:19.967849 2026] [cgi:error] [pid 3762249:tid 3762249] [client 74.248.96.101:16166] AH02811: stderr from /home/lukess/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:53:20.088693 2026] [authz_core:error] [pid 3762249:tid 3762249] [client 74.248.96.101:16166] AH01630: client denied by server configuration: /home/lukess/public_html/wp-content/error_log
[Thu Jul 30 15:53:20.846989 2026] [access_compat:error] [pid 3749424:tid 3749424] [client 115.96.93.224:52464] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:21.535988 2026] [security2:error] [pid 3771512:tid 3771512] [client 51.68.111.203:33959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amtlYdg-6IHpp-FjmnTCOwAAAAY"]
[Thu Jul 30 15:53:21.659255 2026] [security2:error] [pid 3771512:tid 3771512] [client 51.68.111.203:33727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/"] [unique_id "amtlYdg-6IHpp-FjmnTCPAAAAAY"]
[Thu Jul 30 15:53:21.835995 2026] [security2:error] [pid 3722978:tid 3722978] [client 51.68.111.203:36017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amtlYVI7kMtqSQhdMGbRmAAAAEU"]
[Thu Jul 30 15:53:22.029170 2026] [security2:error] [pid 3767792:tid 3767792] [client 51.68.111.203:15297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.first-grade.co.uk"] [uri "/robots.txt"] [unique_id "amtlYt7p1xp1KJb0LUM-fgAAAA8"]
[Thu Jul 30 15:53:22.719796 2026] [ssl:error] [pid 3771595:tid 3771595] (EAI 2)Name or service not known: [client 144.76.19.72:37706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:22.719836 2026] [ssl:error] [pid 3771595:tid 3771595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:22.778698 2026] [ssl:error] [pid 3771596:tid 3771596] (EAI 2)Name or service not known: [client 144.76.19.72:37710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:22.778756 2026] [ssl:error] [pid 3771596:tid 3771596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:25.837470 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:37716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:25.837497 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:25.890484 2026] [ssl:error] [pid 3764295:tid 3764295] (EAI 2)Name or service not known: [client 144.76.19.72:37726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:25.890512 2026] [ssl:error] [pid 3764295:tid 3764295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:27.014735 2026] [access_compat:error] [pid 3771751:tid 3771751] [client 115.96.93.224:52799] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:28.968317 2026] [ssl:error] [pid 3771751:tid 3771751] (EAI 2)Name or service not known: [client 144.76.19.72:37730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:28.968373 2026] [ssl:error] [pid 3771751:tid 3771751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:29.026476 2026] [ssl:error] [pid 3762291:tid 3762291] (EAI 2)Name or service not known: [client 144.76.19.72:37732] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:29.026503 2026] [ssl:error] [pid 3762291:tid 3762291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:29.180897 2026] [ssl:error] [pid 3769025:tid 3769025] (70014)End of file found: [client 216.73.216.199:64527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:29.776928 2026] [security2:error] [pid 3762291:tid 3762291] [client 58.26.249.98:47090] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtlaTpOn3f4-ApJTI2OaQAAACM"]
[Thu Jul 30 15:53:31.508389 2026] [access_compat:error] [pid 3771596:tid 3771596] [client 115.96.93.224:53062] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:32.085714 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:38900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:32.085752 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:32.141870 2026] [ssl:error] [pid 3767618:tid 3767618] (EAI 2)Name or service not known: [client 144.76.19.72:38912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:32.141924 2026] [ssl:error] [pid 3767618:tid 3767618] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:33.097732 2026] [ssl:error] [pid 3771512:tid 3771512] (70014)End of file found: [client 216.73.216.199:9172] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:34.202881 2026] [access_compat:error] [pid 3762249:tid 3762249] [client 45.118.159.69:30943] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:34.734574 2026] [authz_core:error] [pid 3768759:tid 3768759] [client 66.249.66.34:39532] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:53:34.737233 2026] [authz_core:error] [pid 3768759:tid 3768759] [client 66.249.66.34:39532] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:53:35.202708 2026] [ssl:error] [pid 3769078:tid 3769078] (EAI 2)Name or service not known: [client 144.76.19.72:38924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:35.202740 2026] [ssl:error] [pid 3769078:tid 3769078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:35.260026 2026] [ssl:error] [pid 3722978:tid 3722978] (EAI 2)Name or service not known: [client 144.76.19.72:38934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:35.260060 2026] [ssl:error] [pid 3722978:tid 3722978] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:36.704490 2026] [ssl:error] [pid 3768760:tid 3768760] (70014)End of file found: [client 216.73.216.199:64479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:37.724700 2026] [access_compat:error] [pid 3772436:tid 3772436] [client 115.96.93.224:53556] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:38.315838 2026] [ssl:error] [pid 3772386:tid 3772386] (EAI 2)Name or service not known: [client 144.76.19.72:38940] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:38.315885 2026] [ssl:error] [pid 3772386:tid 3772386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:38.373036 2026] [ssl:error] [pid 3769075:tid 3769075] (EAI 2)Name or service not known: [client 144.76.19.72:38944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:38.373092 2026] [ssl:error] [pid 3769075:tid 3769075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:38.837720 2026] [security2:error] [pid 3767667:tid 3767667] [client 114.119.158.38:32791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/series/mission"] [unique_id "amtlcj-RclN-JBJn4U4yXAAAAAo"], referer: http://www.erskinenazarene.co.uk/sermons/a-leap-of-faith/
[Thu Jul 30 15:53:39.932009 2026] [security2:error] [pid 3771511:tid 3771511] [client 43.130.111.40:58384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "amtlc3Sr3wyAykylcKGhswAAAAQ"]
[Thu Jul 30 15:53:40.023423 2026] [security2:error] [pid 3771595:tid 3771595] [client 114.119.158.38:32795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/series/mission"] [unique_id "amtldNCeGg5rzNcXNEc6jwAAAAw"], referer: http://www.erskinenazarene.co.uk/sermons/a-leap-of-faith/
[Thu Jul 30 15:53:40.925054 2026] [ssl:error] [pid 3771430:tid 3771430] (70014)End of file found: [client 216.73.216.199:39355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:41.426696 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:41720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:41.426747 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:41.481179 2026] [ssl:error] [pid 3768537:tid 3768537] (EAI 2)Name or service not known: [client 144.76.19.72:41722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:41.481236 2026] [ssl:error] [pid 3768537:tid 3768537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:42.035109 2026] [access_compat:error] [pid 3766994:tid 3766994] [client 115.96.93.224:53796] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:42.129449 2026] [ssl:error] [pid 3760741:tid 3760741] (70014)End of file found: [client 216.73.216.199:17801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:42.196758 2026] [security2:error] [pid 3764295:tid 3764295] [client 43.165.167.69:41234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtldgXDX07-ervBSqqTbgAAACk"]
[Thu Jul 30 15:53:42.851813 2026] [security2:error] [pid 3761048:tid 3761048] [client 85.208.96.203:15704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/georgia-leon-ricks-net-worth"] [unique_id "amtldqGioyZJkPWBDyN1FgAAABM"]
[Thu Jul 30 15:53:42.857630 2026] [core:error] [pid 3772513:tid 3772513] [client 20.203.221.142:3666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:42.857669 2026] [core:error] [pid 3772513:tid 3772513] [client 20.203.221.142:3666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:43.370698 2026] [access_compat:error] [pid 3731009:tid 3731009] [client 20.203.221.142:63247] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/kj.php
[Thu Jul 30 15:53:43.371097 2026] [core:error] [pid 3731009:tid 3731009] [client 20.203.221.142:63247] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:44.335262 2026] [core:error] [pid 3772074:tid 3772074] [client 20.203.221.142:61948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:44.335306 2026] [core:error] [pid 3772074:tid 3772074] [client 20.203.221.142:61948] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:44.533758 2026] [ssl:error] [pid 3718555:tid 3718555] (EAI 2)Name or service not known: [client 144.76.19.72:41730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:44.533802 2026] [ssl:error] [pid 3718555:tid 3718555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:44.589675 2026] [ssl:error] [pid 3762249:tid 3762249] (EAI 2)Name or service not known: [client 144.76.19.72:41736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:44.589714 2026] [ssl:error] [pid 3762249:tid 3762249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:45.912015 2026] [access_compat:error] [pid 3771594:tid 3771594] [client 20.203.221.142:25276] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/styll.php
[Thu Jul 30 15:53:45.912411 2026] [core:error] [pid 3771594:tid 3771594] [client 20.203.221.142:25276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:46.724966 2026] [security2:error] [pid 3722978:tid 3722978] [client 43.165.167.69:54710] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtlelI7kMtqSQhdMGbRngAAAEU"], referer: http://unclaimedassets.co.uk
[Thu Jul 30 15:53:47.644700 2026] [ssl:error] [pid 3768498:tid 3768498] (EAI 2)Name or service not known: [client 144.76.19.72:41746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:47.644747 2026] [ssl:error] [pid 3768498:tid 3768498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:47.702639 2026] [ssl:error] [pid 3767792:tid 3767792] (EAI 2)Name or service not known: [client 144.76.19.72:41750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:47.702672 2026] [ssl:error] [pid 3767792:tid 3767792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:48.562597 2026] [security2:error] [pid 3766991:tid 3766991] [client 84.75.150.22:52000] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.msg29488.html"] [unique_id "amtlfO69VMIKnYp_2SOzQwAAACE"]
[Thu Jul 30 15:53:48.562652 2026] [security2:error] [pid 3766991:tid 3766991] [client 84.75.150.22:52000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.msg29488.html"] [unique_id "amtlfO69VMIKnYp_2SOzQwAAACE"]
[Thu Jul 30 15:53:48.562923 2026] [security2:error] [pid 3766991:tid 3766991] [client 84.75.150.22:52000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlfO69VMIKnYp_2SOzQwAAACE"]
[Thu Jul 30 15:53:50.761054 2026] [ssl:error] [pid 3766990:tid 3766990] (EAI 2)Name or service not known: [client 144.76.19.72:42562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:50.761099 2026] [ssl:error] [pid 3766990:tid 3766990] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:50.815834 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:42564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:50.815859 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:51.162778 2026] [ssl:error] [pid 3771595:tid 3771595] (70014)End of file found: [client 216.73.216.199:40902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:53:51.790644 2026] [access_compat:error] [pid 3768537:tid 3768537] [client 20.203.221.142:62598] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/av.php
[Thu Jul 30 15:53:51.790996 2026] [core:error] [pid 3768537:tid 3768537] [client 20.203.221.142:62598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:52.659452 2026] [access_compat:error] [pid 3768537:tid 3768537] [client 115.96.93.224:54438] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:53.131123 2026] [access_compat:error] [pid 3772513:tid 3772513] [client 45.158.164.139:34340] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:53:53.250779 2026] [security2:error] [pid 3769025:tid 3769025] [client 103.189.60.87:59840] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlgcZfwCxkLbq7_FYW1gAAAC0"]
[Thu Jul 30 15:53:53.250848 2026] [security2:error] [pid 3769025:tid 3769025] [client 103.189.60.87:59840] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlgcZfwCxkLbq7_FYW1gAAAC0"]
[Thu Jul 30 15:53:53.251144 2026] [security2:error] [pid 3769025:tid 3769025] [client 103.189.60.87:59840] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlgcZfwCxkLbq7_FYW1gAAAC0"]
[Thu Jul 30 15:53:53.904702 2026] [ssl:error] [pid 3769026:tid 3769026] (EAI 2)Name or service not known: [client 144.76.19.72:42580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:53.904733 2026] [ssl:error] [pid 3769026:tid 3769026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:53.962517 2026] [ssl:error] [pid 3762291:tid 3762291] (EAI 2)Name or service not known: [client 144.76.19.72:42582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:53.962581 2026] [ssl:error] [pid 3762291:tid 3762291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:54.475016 2026] [authz_core:error] [pid 3772510:tid 3772510] [client 66.249.66.33:53580] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:53:54.477700 2026] [authz_core:error] [pid 3772510:tid 3772510] [client 66.249.66.33:53580] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:53:55.340238 2026] [security2:error] [pid 3768540:tid 3768540] [client 43.156.119.60:27775] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlg_L20SIJHpMn0pI3UwAAAB0"]
[Thu Jul 30 15:53:55.340299 2026] [security2:error] [pid 3768540:tid 3768540] [client 43.156.119.60:27775] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlg_L20SIJHpMn0pI3UwAAAB0"]
[Thu Jul 30 15:53:55.340610 2026] [security2:error] [pid 3768540:tid 3768540] [client 43.156.119.60:27775] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlg_L20SIJHpMn0pI3UwAAAB0"]
[Thu Jul 30 15:53:57.062506 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:42588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:57.062549 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:57.115632 2026] [ssl:error] [pid 3772074:tid 3772074] (EAI 2)Name or service not known: [client 144.76.19.72:42596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:53:57.115667 2026] [ssl:error] [pid 3772074:tid 3772074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:53:58.447032 2026] [access_compat:error] [pid 3772074:tid 3772074] [client 20.203.221.142:41956] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aw.php
[Thu Jul 30 15:53:58.447649 2026] [core:error] [pid 3772074:tid 3772074] [client 20.203.221.142:41956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:53:58.739487 2026] [security2:error] [pid 3772386:tid 3772386] [client 43.156.119.60:53073] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlhsNfiaKrfb0cli7GzAAAABc"]
[Thu Jul 30 15:53:58.739543 2026] [security2:error] [pid 3772386:tid 3772386] [client 43.156.119.60:53073] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlhsNfiaKrfb0cli7GzAAAABc"]
[Thu Jul 30 15:53:58.739829 2026] [security2:error] [pid 3772386:tid 3772386] [client 43.156.119.60:53073] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlhsNfiaKrfb0cli7GzAAAABc"]
[Thu Jul 30 15:53:59.269229 2026] [access_compat:error] [pid 3762249:tid 3762249] [client 115.96.93.224:54805] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:53:59.370886 2026] [core:crit] [pid 3771115:tid 3771115] (13)Permission denied: [client 40.77.167.151:32768] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 15:53:59.484792 2026] [access_compat:error] [pid 3718555:tid 3718555] [client 20.203.221.142:13666] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xqq.php
[Thu Jul 30 15:53:59.485202 2026] [core:error] [pid 3718555:tid 3718555] [client 20.203.221.142:13666] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:00.173602 2026] [ssl:error] [pid 3772386:tid 3772386] (EAI 2)Name or service not known: [client 144.76.19.72:64846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:00.173638 2026] [ssl:error] [pid 3772386:tid 3772386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:00.230897 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:64862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:00.230944 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:02.308928 2026] [ssl:error] [pid 3771512:tid 3771512] (70014)End of file found: [client 216.73.216.199:12581] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:03.224813 2026] [core:error] [pid 3768540:tid 3768540] [client 20.203.221.142:3017] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:03.224843 2026] [core:error] [pid 3768540:tid 3768540] [client 20.203.221.142:3017] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:03.245743 2026] [access_compat:error] [pid 3771596:tid 3771596] [client 115.96.93.224:54968] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:03.299314 2026] [authz_core:error] [pid 3766990:tid 3766990] [client 66.249.66.34:60814] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:54:03.301976 2026] [authz_core:error] [pid 3766990:tid 3766990] [client 66.249.66.34:60814] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:54:03.365919 2026] [ssl:error] [pid 3769028:tid 3769028] (EAI 2)Name or service not known: [client 144.76.19.72:64878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:03.365980 2026] [ssl:error] [pid 3769028:tid 3769028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:03.421400 2026] [ssl:error] [pid 3771594:tid 3771594] (EAI 2)Name or service not known: [client 144.76.19.72:64886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:03.421450 2026] [ssl:error] [pid 3771594:tid 3771594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:04.073305 2026] [security2:error] [pid 3769026:tid 3769026] [client 101.33.80.42:55854] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/"] [unique_id "amtljDO2s8XX355ElZnUVgAAAC4"]
[Thu Jul 30 15:54:04.609916 2026] [security2:error] [pid 3769028:tid 3769028] [client 43.166.164.67:12181] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtljCzvpcZ5PRfRGQBTHwAAADA"]
[Thu Jul 30 15:54:04.609975 2026] [security2:error] [pid 3769028:tid 3769028] [client 43.166.164.67:12181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtljCzvpcZ5PRfRGQBTHwAAADA"]
[Thu Jul 30 15:54:04.610315 2026] [security2:error] [pid 3769028:tid 3769028] [client 43.166.164.67:12181] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtljCzvpcZ5PRfRGQBTHwAAADA"]
[Thu Jul 30 15:54:05.345487 2026] [security2:error] [pid 3764296:tid 3764296] [client 43.130.141.193:57006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amtljaadUuTjGgXd3bgZiQAAACo"]
[Thu Jul 30 15:54:05.925867 2026] [core:error] [pid 3767792:tid 3767792] (13)Permission denied: [client 216.73.216.199:12568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS0/subsystem/ttyS2/flags
[Thu Jul 30 15:54:06.226660 2026] [core:error] [pid 3767792:tid 3767792] (13)Permission denied: [client 216.73.216.199:12568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS2/subsystem/ttyS0/flags
[Thu Jul 30 15:54:06.350846 2026] [security2:error] [pid 3771115:tid 3771115] [client 122.161.67.102:10468] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtljusuOhT9ytHp2UmE1gAAAAA"]
[Thu Jul 30 15:54:06.350916 2026] [security2:error] [pid 3771115:tid 3771115] [client 122.161.67.102:10468] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtljusuOhT9ytHp2UmE1gAAAAA"]
[Thu Jul 30 15:54:06.351197 2026] [security2:error] [pid 3771115:tid 3771115] [client 122.161.67.102:10468] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtljusuOhT9ytHp2UmE1gAAAAA"]
[Thu Jul 30 15:54:06.479538 2026] [ssl:error] [pid 3768537:tid 3768537] (EAI 2)Name or service not known: [client 144.76.19.72:64902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:06.479573 2026] [ssl:error] [pid 3768537:tid 3768537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:06.527996 2026] [core:error] [pid 3767792:tid 3767792] (13)Permission denied: [client 216.73.216.199:12568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/device/subsystem/drivers/clk-lpss-atom/bind
[Thu Jul 30 15:54:06.535466 2026] [ssl:error] [pid 3764296:tid 3764296] (EAI 2)Name or service not known: [client 144.76.19.72:64908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:06.535506 2026] [ssl:error] [pid 3764296:tid 3764296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:06.668423 2026] [security2:error] [pid 3718555:tid 3718555] [client 82.38.180.170:59958] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,157.0.html"] [unique_id "amtljo4Jzc4zx9-NsW6YaAAAABU"]
[Thu Jul 30 15:54:06.668475 2026] [security2:error] [pid 3718555:tid 3718555] [client 82.38.180.170:59958] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,157.0.html"] [unique_id "amtljo4Jzc4zx9-NsW6YaAAAABU"]
[Thu Jul 30 15:54:06.668765 2026] [security2:error] [pid 3718555:tid 3718555] [client 82.38.180.170:59958] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtljo4Jzc4zx9-NsW6YaAAAABU"]
[Thu Jul 30 15:54:07.613716 2026] [access_compat:error] [pid 3768537:tid 3768537] [client 20.203.221.142:28435] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-update.php
[Thu Jul 30 15:54:07.614084 2026] [core:error] [pid 3768537:tid 3768537] [client 20.203.221.142:28435] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:08.334052 2026] [core:error] [pid 3767792:tid 3767792] (13)Permission denied: [client 216.73.216.199:12568] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/block/253:0/device/driver/virtio2/subsystem/uevent
[Thu Jul 30 15:54:08.635370 2026] [ssl:error] [pid 3767792:tid 3767792] (70014)End of file found: [client 216.73.216.199:12568] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:08.932844 2026] [ssl:error] [pid 3766991:tid 3766991] (70014)End of file found: [client 216.73.216.199:20471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:09.341243 2026] [access_compat:error] [pid 3772437:tid 3772437] [client 115.96.93.224:55300] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:09.407106 2026] [security2:error] [pid 3767762:tid 3767762] [client 185.191.171.8:64030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,797.0.html"] [unique_id "amtlkXteJB3GqIMn1I6gswAAAA4"]
[Thu Jul 30 15:54:09.592021 2026] [ssl:error] [pid 3762291:tid 3762291] (EAI 2)Name or service not known: [client 144.76.19.72:34216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:09.592086 2026] [ssl:error] [pid 3762291:tid 3762291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:09.647247 2026] [ssl:error] [pid 3771751:tid 3771751] (EAI 2)Name or service not known: [client 144.76.19.72:34222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:09.647295 2026] [ssl:error] [pid 3771751:tid 3771751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:09.835908 2026] [ssl:error] [pid 3768537:tid 3768537] (70014)End of file found: [client 216.73.216.199:4299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:11.477744 2026] [security2:error] [pid 3773693:tid 3773693] [client 45.236.139.172:9616] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlk6Ur6B9O9xrJ2L_zdwAAAAE"]
[Thu Jul 30 15:54:11.477831 2026] [security2:error] [pid 3773693:tid 3773693] [client 45.236.139.172:9616] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtlk6Ur6B9O9xrJ2L_zdwAAAAE"]
[Thu Jul 30 15:54:11.478216 2026] [security2:error] [pid 3773693:tid 3773693] [client 45.236.139.172:9616] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtlk6Ur6B9O9xrJ2L_zdwAAAAE"]
[Thu Jul 30 15:54:12.163437 2026] [access_compat:error] [pid 3768498:tid 3768498] [client 45.158.164.139:46856] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:54:12.701852 2026] [ssl:error] [pid 3767668:tid 3767668] (EAI 2)Name or service not known: [client 144.76.19.72:34236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:12.701898 2026] [ssl:error] [pid 3767668:tid 3767668] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:12.718314 2026] [authz_core:error] [pid 3768954:tid 3768954] [client 66.249.66.34:51565] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:54:12.721060 2026] [authz_core:error] [pid 3768954:tid 3768954] [client 66.249.66.34:51565] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:54:12.753505 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:34238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:12.753552 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:13.669286 2026] [authz_core:error] [pid 3772386:tid 3772386] [client 66.249.66.33:63375] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:54:13.672264 2026] [authz_core:error] [pid 3772386:tid 3772386] [client 66.249.66.33:63375] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:54:13.937422 2026] [ssl:error] [pid 3760741:tid 3760741] (70014)End of file found: [client 216.73.216.199:38536] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:13.982361 2026] [access_compat:error] [pid 3771751:tid 3771751] [client 115.96.93.224:55491] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:14.266558 2026] [ssl:error] [pid 3764296:tid 3764296] (70014)End of file found: [client 216.73.216.199:6241] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:14.307614 2026] [access_compat:error] [pid 3762249:tid 3762249] [client 20.203.221.142:62606] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/k.php
[Thu Jul 30 15:54:14.307973 2026] [core:error] [pid 3762249:tid 3762249] [client 20.203.221.142:62606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:15.233772 2026] [access_compat:error] [pid 3737530:tid 3737530] [client 20.203.221.142:55722] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/opts.php
[Thu Jul 30 15:54:15.234170 2026] [core:error] [pid 3737530:tid 3737530] [client 20.203.221.142:55722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:15.811248 2026] [ssl:error] [pid 3737530:tid 3737530] (EAI 2)Name or service not known: [client 144.76.19.72:34252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:15.811280 2026] [ssl:error] [pid 3737530:tid 3737530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:15.862657 2026] [ssl:error] [pid 3771595:tid 3771595] (EAI 2)Name or service not known: [client 144.76.19.72:34256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:15.862685 2026] [ssl:error] [pid 3771595:tid 3771595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:16.158185 2026] [core:error] [pid 3772436:tid 3772436] (13)Permission denied: [client 216.73.216.199:63081] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:59/subsystem/ttyS2/uartclk
[Thu Jul 30 15:54:17.060828 2026] [ssl:error] [pid 3772436:tid 3772436] (70014)End of file found: [client 216.73.216.199:63081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:18.920587 2026] [ssl:error] [pid 3771512:tid 3771512] (EAI 2)Name or service not known: [client 144.76.19.72:34266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:18.920629 2026] [ssl:error] [pid 3771512:tid 3771512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:18.976573 2026] [ssl:error] [pid 3761048:tid 3761048] (EAI 2)Name or service not known: [client 144.76.19.72:34270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:18.976618 2026] [ssl:error] [pid 3761048:tid 3761048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:19.031175 2026] [access_compat:error] [pid 3769026:tid 3769026] [client 20.203.221.142:49456] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/manager.php
[Thu Jul 30 15:54:19.031569 2026] [core:error] [pid 3769026:tid 3769026] [client 20.203.221.142:49456] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:20.074547 2026] [ssl:error] [pid 3766990:tid 3766990] (70014)End of file found: [client 216.73.216.199:49225] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:21.278620 2026] [ssl:error] [pid 3771430:tid 3771430] (70014)End of file found: [client 216.73.216.199:46519] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:21.370254 2026] [cgi:error] [pid 3737525:tid 3737525] [client 20.151.221.234:45856] AH02812: stderr from /home/buttere/public_html/nineteenthirtythree.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:54:22.035547 2026] [ssl:error] [pid 3762249:tid 3762249] (EAI 2)Name or service not known: [client 144.76.19.72:42972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:22.035575 2026] [ssl:error] [pid 3762249:tid 3762249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:22.089852 2026] [ssl:error] [pid 3774181:tid 3774181] (EAI 2)Name or service not known: [client 144.76.19.72:42974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:22.089883 2026] [ssl:error] [pid 3774181:tid 3774181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:22.377558 2026] [ssl:error] [pid 3772386:tid 3772386] (70014)End of file found: [client 216.73.216.199:30438] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:23.378516 2026] [core:error] [pid 3769025:tid 3769025] [client 20.203.221.142:33981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:23.378572 2026] [core:error] [pid 3769025:tid 3769025] [client 20.203.221.142:33981] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:24.381554 2026] [access_compat:error] [pid 3772436:tid 3772436] [client 115.96.93.224:56026] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:25.145692 2026] [ssl:error] [pid 3764295:tid 3764295] (EAI 2)Name or service not known: [client 144.76.19.72:42986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:25.145735 2026] [ssl:error] [pid 3764295:tid 3764295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:25.201517 2026] [ssl:error] [pid 3767762:tid 3767762] (EAI 2)Name or service not known: [client 144.76.19.72:42988] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:25.201546 2026] [ssl:error] [pid 3767762:tid 3767762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:25.395156 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:34976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:26.784696 2026] [ssl:error] [pid 3766990:tid 3766990] (70014)End of file found: [client 216.73.216.199:1053] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:27.038198 2026] [security2:error] [pid 3771430:tid 3771430] [client 85.208.96.208:47288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2618.0/prev_next,next.html"] [unique_id "amtlo80VhOXfsJKhnyNmGAAAAAI"]
[Thu Jul 30 15:54:27.690142 2026] [ssl:error] [pid 3774648:tid 3774648] (70014)End of file found: [client 216.73.216.199:1799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:28.174992 2026] [security2:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34642] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtlpNg-6IHpp-FjmnTCZwAAAAY"]
[Thu Jul 30 15:54:28.175257 2026] [security2:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34642] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtlpNg-6IHpp-FjmnTCZwAAAAY"]
[Thu Jul 30 15:54:28.175781 2026] [core:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:28.175949 2026] [security2:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34642] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.stroudgreenwi.sarahwiseman.co.uk"] [uri "/.env"] [unique_id "amtlpNg-6IHpp-FjmnTCZwAAAAY"]
[Thu Jul 30 15:54:28.213164 2026] [core:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:28.213199 2026] [core:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34656] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:28.250537 2026] [core:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:28.250568 2026] [core:error] [pid 3771512:tid 3771512] [client 45.148.10.120:34636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:28.548654 2026] [ssl:error] [pid 3761048:tid 3761048] (EAI 2)Name or service not known: [client 144.76.19.72:42994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:28.548697 2026] [ssl:error] [pid 3761048:tid 3761048] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:28.606033 2026] [ssl:error] [pid 3774709:tid 3774709] (EAI 2)Name or service not known: [client 144.76.19.72:42998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:28.606093 2026] [ssl:error] [pid 3774709:tid 3774709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:30.792686 2026] [access_compat:error] [pid 3771430:tid 3771430] [client 115.96.93.224:56346] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:31.663688 2026] [ssl:error] [pid 3772074:tid 3772074] (EAI 2)Name or service not known: [client 144.76.19.72:19690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:31.663721 2026] [ssl:error] [pid 3772074:tid 3772074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:31.718062 2026] [ssl:error] [pid 3772512:tid 3772512] (EAI 2)Name or service not known: [client 144.76.19.72:19694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:31.718106 2026] [ssl:error] [pid 3772512:tid 3772512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:33.328901 2026] [authz_core:error] [pid 3772511:tid 3772511] [client 51.38.177.7:61100] AH01630: client denied by server configuration: /home/buttere/public_html/error_log
[Thu Jul 30 15:54:33.523686 2026] [security2:error] [pid 3771751:tid 3771751] [client 216.73.216.199:25128] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/sssd/cfg_rules.ini"] [unique_id "amtlqQswRNrBkQcytMfyqgAAABQ"]
[Thu Jul 30 15:54:33.523963 2026] [security2:error] [pid 3771751:tid 3771751] [client 216.73.216.199:25128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/sssd/cfg_rules.ini"] [unique_id "amtlqQswRNrBkQcytMfyqgAAABQ"]
[Thu Jul 30 15:54:33.524184 2026] [security2:error] [pid 3771751:tid 3771751] [client 216.73.216.199:25128] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/share/sssd/cfg_rules.ini"] [unique_id "amtlqQswRNrBkQcytMfyqgAAABQ"]
[Thu Jul 30 15:54:34.791273 2026] [ssl:error] [pid 3769026:tid 3769026] (EAI 2)Name or service not known: [client 144.76.19.72:19702] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:34.791311 2026] [ssl:error] [pid 3769026:tid 3769026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:34.847256 2026] [ssl:error] [pid 3772386:tid 3772386] (EAI 2)Name or service not known: [client 144.76.19.72:19704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:34.847292 2026] [ssl:error] [pid 3772386:tid 3772386] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:35.083444 2026] [authz_core:error] [pid 3769026:tid 3769026] [client 66.249.66.33:46469] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:54:35.086098 2026] [authz_core:error] [pid 3769026:tid 3769026] [client 66.249.66.33:46469] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:54:35.106525 2026] [access_compat:error] [pid 3774712:tid 3774712] [client 115.96.93.224:56558] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:37.902883 2026] [ssl:error] [pid 3771430:tid 3771430] (EAI 2)Name or service not known: [client 144.76.19.72:19708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:37.902926 2026] [ssl:error] [pid 3771430:tid 3771430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:37.956512 2026] [ssl:error] [pid 3771594:tid 3771594] (EAI 2)Name or service not known: [client 144.76.19.72:19724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:37.956552 2026] [ssl:error] [pid 3771594:tid 3771594] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:38.667401 2026] [security2:error] [pid 3771594:tid 3771594] [client 51.68.247.223:39548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/st-landry-parish-jcampus"] [unique_id "amtlrpIyLrscR3Zy8QEuPQAAAAc"]
[Thu Jul 30 15:54:38.948292 2026] [core:error] [pid 3771751:tid 3771751] (13)Permission denied: [client 216.73.216.199:25128] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/nf_defrag_ipv4/uevent
[Thu Jul 30 15:54:40.292833 2026] [authz_core:error] [pid 3773693:tid 3773693] [client 66.249.66.33:55146] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:54:40.295564 2026] [authz_core:error] [pid 3773693:tid 3773693] [client 66.249.66.33:55146] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:54:40.653699 2026] [security2:error] [pid 3761048:tid 3761048] [client 54.39.203.99:31404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/robots.txt"] [unique_id "amtlsKGioyZJkPWBDyN1IgAAABM"]
[Thu Jul 30 15:54:40.654232 2026] [core:error] [pid 3761048:tid 3761048] [client 54.39.203.99:31404] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:41.011793 2026] [ssl:error] [pid 3771512:tid 3771512] (EAI 2)Name or service not known: [client 144.76.19.72:50322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:41.011848 2026] [ssl:error] [pid 3771512:tid 3771512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:41.063691 2026] [ssl:error] [pid 3774648:tid 3774648] (EAI 2)Name or service not known: [client 144.76.19.72:50326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:41.063738 2026] [ssl:error] [pid 3774648:tid 3774648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:41.807426 2026] [security2:error] [pid 3731009:tid 3731009] [client 198.244.242.84:58292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "edwardkensington.com"] [uri "/a-picture-for-each-month/"] [unique_id "amtlsWs38dHiDluHGwhveAAAAEE"]
[Thu Jul 30 15:54:41.808042 2026] [core:error] [pid 3731009:tid 3731009] [client 198.244.242.84:58292] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:43.295193 2026] [security2:error] [pid 3774709:tid 3774709] [client 85.208.96.203:63720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/west-midlands-police-vacancies"] [unique_id "amtlsx5HIGAZBUqs7u7ekAAAAAU"]
[Thu Jul 30 15:54:44.116930 2026] [ssl:error] [pid 3769028:tid 3769028] (EAI 2)Name or service not known: [client 144.76.19.72:50336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:44.116970 2026] [ssl:error] [pid 3769028:tid 3769028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:44.171323 2026] [ssl:error] [pid 3772512:tid 3772512] (EAI 2)Name or service not known: [client 144.76.19.72:50340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:44.171367 2026] [ssl:error] [pid 3772512:tid 3772512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:45.971439 2026] [access_compat:error] [pid 3773693:tid 3773693] [client 115.96.93.224:57080] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:47.248559 2026] [ssl:error] [pid 3774181:tid 3774181] (EAI 2)Name or service not known: [client 144.76.19.72:50348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:47.248620 2026] [ssl:error] [pid 3774181:tid 3774181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:47.303701 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:50354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:47.303734 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:47.872136 2026] [core:error] [pid 3749424:tid 3749424] [client 66.249.66.45:64812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:47.872164 2026] [core:error] [pid 3749424:tid 3749424] [client 66.249.66.45:64812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:49.490827 2026] [core:error] [pid 3771596:tid 3771596] (13)Permission denied: [client 216.73.216.199:19248] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty23/subsystem/ttyS2/flags
[Thu Jul 30 15:54:50.259945 2026] [access_compat:error] [pid 3771512:tid 3771512] [client 20.203.221.142:3098] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-blog.php
[Thu Jul 30 15:54:50.260302 2026] [core:error] [pid 3771512:tid 3771512] [client 20.203.221.142:3098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:50.395452 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:47230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:50.395492 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:50.450329 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:47244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:50.450372 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:51.562193 2026] [access_compat:error] [pid 3774648:tid 3774648] [client 20.203.221.142:9513] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/gifclass.php
[Thu Jul 30 15:54:51.562587 2026] [core:error] [pid 3774648:tid 3774648] [client 20.203.221.142:9513] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:51.603209 2026] [core:error] [pid 3773693:tid 3773693] (13)Permission denied: [client 216.73.216.199:44413] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS3/closing_wait
[Thu Jul 30 15:54:52.501745 2026] [ssl:error] [pid 3773693:tid 3773693] (70014)End of file found: [client 216.73.216.199:44413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:53.543834 2026] [ssl:error] [pid 3775786:tid 3775786] (EAI 2)Name or service not known: [client 144.76.19.72:47260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:53.543871 2026] [ssl:error] [pid 3775786:tid 3775786] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:53.600662 2026] [ssl:error] [pid 3767762:tid 3767762] (EAI 2)Name or service not known: [client 144.76.19.72:47268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:53.600700 2026] [ssl:error] [pid 3767762:tid 3767762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:54.388079 2026] [access_compat:error] [pid 3774181:tid 3774181] [client 20.203.221.142:57895] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws60.php
[Thu Jul 30 15:54:54.388444 2026] [core:error] [pid 3774181:tid 3774181] [client 20.203.221.142:57895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:56.563961 2026] [cgi:error] [pid 3771751:tid 3771751] [client 20.91.199.21:10179] AH02811: stderr from /home/ditchfes/public_html/hoohah15/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:54:56.624361 2026] [ssl:error] [pid 3774181:tid 3774181] (70014)End of file found: [client 216.73.216.199:54998] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:56.657826 2026] [ssl:error] [pid 3737525:tid 3737525] (EAI 2)Name or service not known: [client 144.76.19.72:47278] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:56.657863 2026] [ssl:error] [pid 3737525:tid 3737525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:56.720008 2026] [ssl:error] [pid 3764295:tid 3764295] (EAI 2)Name or service not known: [client 144.76.19.72:47292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:54:56.720037 2026] [ssl:error] [pid 3764295:tid 3764295] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:54:56.780423 2026] [access_compat:error] [pid 3731180:tid 3731180] [client 115.96.93.224:57605] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:54:57.099922 2026] [access_compat:error] [pid 3768954:tid 3768954] [client 20.203.221.142:47421] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ff1.php
[Thu Jul 30 15:54:57.100285 2026] [core:error] [pid 3768954:tid 3768954] [client 20.203.221.142:47421] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:57.148319 2026] [cgi:error] [pid 3771751:tid 3771751] [client 20.91.199.21:10179] AH02811: stderr from /home/ditchfes/public_html/hoohah15/cgi-bin: script not found or unable to stat
[Thu Jul 30 15:54:57.226413 2026] [ssl:error] [pid 3771596:tid 3771596] (70014)End of file found: [client 216.73.216.199:19248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:54:57.321148 2026] [access_compat:error] [pid 3768537:tid 3768537] [client 45.158.164.139:43660] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:54:58.931960 2026] [access_compat:error] [pid 3769026:tid 3769026] [client 20.203.221.142:9528] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/init.php
[Thu Jul 30 15:54:58.932370 2026] [core:error] [pid 3769026:tid 3769026] [client 20.203.221.142:9528] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:54:59.141744 2026] [lsapi:warn] [pid 3772511:tid 3772511] [client 167.172.163.238:52336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 15:54:59.141803 2026] [lsapi:warn] [pid 3772511:tid 3772511] [client 167.172.163.238:52336] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 15:54:59.496413 2026] [access_compat:error] [pid 3769026:tid 3769026] [client 20.203.221.142:3170] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/grsiuk.php
[Thu Jul 30 15:54:59.496767 2026] [core:error] [pid 3769026:tid 3769026] [client 20.203.221.142:3170] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:55:00.105438 2026] [ssl:error] [pid 3718555:tid 3718555] (EAI 2)Name or service not known: [client 144.76.19.72:33450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:00.105489 2026] [ssl:error] [pid 3718555:tid 3718555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:00.716870 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:33452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:00.716900 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:02.483220 2026] [security2:error] [pid 3771595:tid 3771595] [client 114.119.146.111:46053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/series/advent-2017"] [unique_id "amtlxtCeGg5rzNcXNEc6ugAAAAw"], referer: http://www.erskinenazarene.co.uk/preacher/nick-daldry
[Thu Jul 30 15:55:03.497535 2026] [access_compat:error] [pid 3767762:tid 3767762] [client 115.96.93.224:57957] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:03.798140 2026] [ssl:error] [pid 3771595:tid 3771595] (EAI 2)Name or service not known: [client 144.76.19.72:33454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:03.798175 2026] [ssl:error] [pid 3771595:tid 3771595] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:03.855826 2026] [ssl:error] [pid 3772436:tid 3772436] (EAI 2)Name or service not known: [client 144.76.19.72:33456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:03.855877 2026] [ssl:error] [pid 3772436:tid 3772436] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:03.918968 2026] [core:error] [pid 3768954:tid 3768954] (13)Permission denied: [client 216.73.216.199:40149] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty16/subsystem/ttyS2/flags
[Thu Jul 30 15:55:03.964860 2026] [security2:error] [pid 3731009:tid 3731009] [client 114.119.146.111:46055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/series/advent-2017"] [unique_id "amtlx2s38dHiDluHGwhvfwAAAEE"], referer: http://www.erskinenazarene.co.uk/preacher/nick-daldry
[Thu Jul 30 15:55:06.254105 2026] [ssl:error] [pid 3764296:tid 3764296] (70014)End of file found: [client 216.73.216.199:16600] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:06.914125 2026] [ssl:error] [pid 3731009:tid 3731009] (EAI 2)Name or service not known: [client 144.76.19.72:33472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:06.914151 2026] [ssl:error] [pid 3731009:tid 3731009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:06.971845 2026] [ssl:error] [pid 3771751:tid 3771751] (EAI 2)Name or service not known: [client 144.76.19.72:33474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:06.971882 2026] [ssl:error] [pid 3771751:tid 3771751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:07.759308 2026] [access_compat:error] [pid 3767762:tid 3767762] [client 115.96.93.224:58136] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:09.269754 2026] [core:error] [pid 3737530:tid 3737530] (13)Permission denied: [client 216.73.216.199:26994] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS0/closing_wait
[Thu Jul 30 15:55:10.030174 2026] [ssl:error] [pid 3763498:tid 3763498] (EAI 2)Name or service not known: [client 144.76.19.72:40556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:10.030203 2026] [ssl:error] [pid 3763498:tid 3763498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:10.087461 2026] [ssl:error] [pid 3762249:tid 3762249] (EAI 2)Name or service not known: [client 144.76.19.72:40564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:10.087493 2026] [ssl:error] [pid 3762249:tid 3762249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:12.582293 2026] [core:error] [pid 3737530:tid 3737530] (13)Permission denied: [client 216.73.216.199:26994] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty43/subsystem/ttyS2/flags
[Thu Jul 30 15:55:13.167372 2026] [ssl:error] [pid 3774712:tid 3774712] (EAI 2)Name or service not known: [client 144.76.19.72:40584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:13.167413 2026] [ssl:error] [pid 3774712:tid 3774712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:13.222584 2026] [ssl:error] [pid 3775449:tid 3775449] (EAI 2)Name or service not known: [client 144.76.19.72:40588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:13.222616 2026] [ssl:error] [pid 3775449:tid 3775449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:13.809774 2026] [access_compat:error] [pid 3774712:tid 3774712] [client 115.96.93.224:58461] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:14.445911 2026] [core:error] [pid 3771430:tid 3771430] [client 20.203.221.142:3139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:55:14.445936 2026] [core:error] [pid 3771430:tid 3771430] [client 20.203.221.142:3139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:55:14.742332 2026] [access_compat:error] [pid 3775622:tid 3775622] [client 45.158.164.139:44198] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:55:14.916533 2026] [security2:error] [pid 3764296:tid 3764296] [client 79.98.114.13:51559] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtl0qadUuTjGgXd3bgZnwAAACo"]
[Thu Jul 30 15:55:14.916589 2026] [security2:error] [pid 3764296:tid 3764296] [client 79.98.114.13:51559] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtl0qadUuTjGgXd3bgZnwAAACo"]
[Thu Jul 30 15:55:14.916879 2026] [security2:error] [pid 3764296:tid 3764296] [client 79.98.114.13:51559] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtl0qadUuTjGgXd3bgZnwAAACo"]
[Thu Jul 30 15:55:15.892947 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:26994] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:16.036249 2026] [security2:error] [pid 3767762:tid 3767762] [client 23.23.103.31:5421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-content/uploads/2023/12/Enhance-Database-Monitoring-with-SolarWinds-SQL-Sentry-Blog-Banner-Prosperon-Networks.png"] [unique_id "amtl1HteJB3GqIMn1I6gxwAAAA4"]
[Thu Jul 30 15:55:16.176457 2026] [security2:error] [pid 3773693:tid 3773693] [client 103.161.106.155:34288] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtl1KUr6B9O9xrJ2L_ziAAAAAE"]
[Thu Jul 30 15:55:16.176511 2026] [security2:error] [pid 3773693:tid 3773693] [client 103.161.106.155:34288] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtl1KUr6B9O9xrJ2L_ziAAAAAE"]
[Thu Jul 30 15:55:16.176760 2026] [security2:error] [pid 3773693:tid 3773693] [client 103.161.106.155:34288] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtl1KUr6B9O9xrJ2L_ziAAAAAE"]
[Thu Jul 30 15:55:16.275333 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:40612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:16.275381 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:16.328300 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:40622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:16.328327 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:17.399332 2026] [ssl:error] [pid 3764296:tid 3764296] (70014)End of file found: [client 216.73.216.199:8914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:17.694862 2026] [ssl:error] [pid 3731180:tid 3731180] (70014)End of file found: [client 216.73.216.199:47608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:18.782374 2026] [access_compat:error] [pid 3776985:tid 3776985] [client 115.96.93.224:58669] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:19.386104 2026] [ssl:error] [pid 3772437:tid 3772437] (EAI 2)Name or service not known: [client 144.76.19.72:40644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:19.386144 2026] [ssl:error] [pid 3772437:tid 3772437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:19.442403 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:40650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:19.442435 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:21.075974 2026] [security2:error] [pid 3774181:tid 3774181] [client 177.173.227.36:10094] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtl2TW_olWDjRxAqiiDsAAAAAA"]
[Thu Jul 30 15:55:21.076023 2026] [security2:error] [pid 3774181:tid 3774181] [client 177.173.227.36:10094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtl2TW_olWDjRxAqiiDsAAAAAA"]
[Thu Jul 30 15:55:21.076292 2026] [security2:error] [pid 3774181:tid 3774181] [client 177.173.227.36:10094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtl2TW_olWDjRxAqiiDsAAAAAA"]
[Thu Jul 30 15:55:21.211813 2026] [ssl:error] [pid 3776807:tid 3776807] (70014)End of file found: [client 216.73.216.199:44531] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:21.467596 2026] [access_compat:error] [pid 3772436:tid 3772436] [client 2.189.5.222:37862] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:55:21.919137 2026] [lsapi:warn] [pid 3775786:tid 3775786] [client 220.181.108.114:50824] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 15:55:21.919204 2026] [lsapi:warn] [pid 3775786:tid 3775786] [client 220.181.108.114:50824] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 15:55:22.498625 2026] [ssl:error] [pid 3771430:tid 3771430] (EAI 2)Name or service not known: [client 144.76.19.72:57000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:22.498656 2026] [ssl:error] [pid 3771430:tid 3771430] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:22.550232 2026] [ssl:error] [pid 3772512:tid 3772512] (EAI 2)Name or service not known: [client 144.76.19.72:57006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:22.550268 2026] [ssl:error] [pid 3772512:tid 3772512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:22.830785 2026] [ssl:error] [pid 3771430:tid 3771430] (70014)End of file found: [client 216.73.216.199:30424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:23.579113 2026] [authz_core:error] [pid 3777195:tid 3777195] [client 66.249.66.33:64813] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:55:23.581838 2026] [authz_core:error] [pid 3777195:tid 3777195] [client 66.249.66.33:64813] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:55:25.251790 2026] [ssl:error] [pid 3772511:tid 3772511] (70014)End of file found: [client 216.73.216.199:9048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:25.603484 2026] [ssl:error] [pid 3777235:tid 3777235] (EAI 2)Name or service not known: [client 144.76.19.72:57012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:25.603535 2026] [ssl:error] [pid 3777235:tid 3777235] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:25.658194 2026] [ssl:error] [pid 3777237:tid 3777237] (EAI 2)Name or service not known: [client 144.76.19.72:57020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:25.658258 2026] [ssl:error] [pid 3777237:tid 3777237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:25.832884 2026] [authz_core:error] [pid 3767762:tid 3767762] [client 93.158.90.73:39983] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 15:55:25.833607 2026] [authz_core:error] [pid 3767762:tid 3767762] [client 93.158.90.73:39983] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 15:55:28.153522 2026] [ssl:error] [pid 3777235:tid 3777235] (70014)End of file found: [client 216.73.216.199:40079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:28.654301 2026] [ssl:error] [pid 3773693:tid 3773693] (70014)End of file found: [client 216.73.216.199:30491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:28.713428 2026] [ssl:error] [pid 3768537:tid 3768537] (EAI 2)Name or service not known: [client 144.76.19.72:57030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:28.713481 2026] [ssl:error] [pid 3768537:tid 3768537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:28.766357 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:57044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:28.766390 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:29.314131 2026] [access_compat:error] [pid 3771430:tid 3771430] [client 115.96.93.224:59199] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:31.164988 2026] [ssl:error] [pid 3771595:tid 3771595] (70014)End of file found: [client 216.73.216.199:6380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:31.820080 2026] [ssl:error] [pid 3772511:tid 3772511] (EAI 2)Name or service not known: [client 144.76.19.72:55256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:31.820128 2026] [ssl:error] [pid 3772511:tid 3772511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:31.876634 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:55270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:31.876663 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:32.680456 2026] [authz_core:error] [pid 3774709:tid 3774709] [client 66.249.66.33:45734] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:55:32.683294 2026] [authz_core:error] [pid 3774709:tid 3774709] [client 66.249.66.33:45734] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:55:33.467191 2026] [ssl:error] [pid 3774712:tid 3774712] (70014)End of file found: [client 216.73.216.199:50508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:34.931297 2026] [ssl:error] [pid 3776985:tid 3776985] (EAI 2)Name or service not known: [client 144.76.19.72:55286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:34.931353 2026] [ssl:error] [pid 3776985:tid 3776985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:34.987614 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:55288] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:34.987646 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:35.521264 2026] [access_compat:error] [pid 3776985:tid 3776985] [client 115.96.93.224:59528] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:36.598545 2026] [ssl:error] [pid 3769026:tid 3769026] (70014)End of file found: [client 216.73.216.199:3634] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:38.062182 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:55304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:38.062235 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:38.113876 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:55316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:38.113915 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:38.126607 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:17477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:38.932262 2026] [core:error] [pid 3774712:tid 3774712] (13)Permission denied: [client 216.73.216.199:15991] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/named_bak/dbstart.com.db
[Thu Jul 30 15:55:39.992834 2026] [access_compat:error] [pid 3776986:tid 3776986] [client 115.96.93.224:59729] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:41.167537 2026] [ssl:error] [pid 3772512:tid 3772512] (EAI 2)Name or service not known: [client 144.76.19.72:35586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:41.167569 2026] [ssl:error] [pid 3772512:tid 3772512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:41.224569 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:35600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:41.224624 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:42.042402 2026] [ssl:error] [pid 3774712:tid 3774712] (70014)End of file found: [client 216.73.216.199:15991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:42.064597 2026] [security2:error] [pid 3775449:tid 3775449] [client 138.68.144.227:34808] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.evtech.uk"] [uri "/.env"] [unique_id "amtl7nhJYCVyMrzsUDbGqgAAAA8"]
[Thu Jul 30 15:55:42.064757 2026] [security2:error] [pid 3775449:tid 3775449] [client 138.68.144.227:34808] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.evtech.uk"] [uri "/.env"] [unique_id "amtl7nhJYCVyMrzsUDbGqgAAAA8"]
[Thu Jul 30 15:55:42.064949 2026] [security2:error] [pid 3775449:tid 3775449] [client 138.68.144.227:34808] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.evtech.uk"] [uri "/.env"] [unique_id "amtl7nhJYCVyMrzsUDbGqgAAAA8"]
[Thu Jul 30 15:55:42.659089 2026] [security2:error] [pid 3771751:tid 3771751] [client 64.227.32.66:35400] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.jd-media.tv"] [uri "/.env"] [unique_id "amtl7gswRNrBkQcytMfzeQAAABQ"]
[Thu Jul 30 15:55:42.659253 2026] [security2:error] [pid 3771751:tid 3771751] [client 64.227.32.66:35400] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jd-media.tv"] [uri "/.env"] [unique_id "amtl7gswRNrBkQcytMfzeQAAABQ"]
[Thu Jul 30 15:55:42.659464 2026] [security2:error] [pid 3771751:tid 3771751] [client 64.227.32.66:35400] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.jd-media.tv"] [uri "/.env"] [unique_id "amtl7gswRNrBkQcytMfzeQAAABQ"]
[Thu Jul 30 15:55:42.784551 2026] [security2:error] [pid 3768954:tid 3768954] [client 147.182.200.94:57200] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glasgowball.com"] [uri "/.env"] [unique_id "amtl7gGvJIqSEaKyX68clgAAACw"]
[Thu Jul 30 15:55:42.784804 2026] [security2:error] [pid 3768954:tid 3768954] [client 147.182.200.94:57200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glasgowball.com"] [uri "/.env"] [unique_id "amtl7gGvJIqSEaKyX68clgAAACw"]
[Thu Jul 30 15:55:42.785042 2026] [security2:error] [pid 3768954:tid 3768954] [client 147.182.200.94:57200] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glasgowball.com"] [uri "/.env"] [unique_id "amtl7gGvJIqSEaKyX68clgAAACw"]
[Thu Jul 30 15:55:42.896341 2026] [access_compat:error] [pid 3776985:tid 3776985] [client 24.254.120.61:35191] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/harry-potter-and-the-deathly-hallows-part-2-3d
[Thu Jul 30 15:55:42.896471 2026] [access_compat:error] [pid 3776985:tid 3776985] [client 24.254.120.61:35191] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:55:43.708236 2026] [security2:error] [pid 3768537:tid 3768537] [client 185.191.171.19:39974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/are-kayla-davises-parents-divorced-2020"] [unique_id "amtl70VlEqSFht4jukQtcQAAABY"]
[Thu Jul 30 15:55:43.953670 2026] [ssl:error] [pid 3776807:tid 3776807] (70014)End of file found: [client 216.73.216.199:24647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:44.253857 2026] [ssl:error] [pid 3774181:tid 3774181] (70014)End of file found: [client 216.73.216.199:12475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:44.549245 2026] [ssl:error] [pid 3773693:tid 3773693] (EAI 2)Name or service not known: [client 144.76.19.72:35604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:44.549283 2026] [ssl:error] [pid 3773693:tid 3773693] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:44.733629 2026] [ssl:error] [pid 3777962:tid 3777962] (EAI 2)Name or service not known: [client 144.76.19.72:35618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:44.733663 2026] [ssl:error] [pid 3777962:tid 3777962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:45.153296 2026] [ssl:error] [pid 3768954:tid 3768954] (70014)End of file found: [client 216.73.216.199:57865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:45.736150 2026] [security2:error] [pid 3778029:tid 3778029] [client 138.68.144.227:47244] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.evtech.uk"] [uri "/.git/config"] [unique_id "amtl8YnTrSP0orvb6bLBPwAAADQ"]
[Thu Jul 30 15:55:45.736317 2026] [security2:error] [pid 3778029:tid 3778029] [client 138.68.144.227:47244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.evtech.uk"] [uri "/.git/config"] [unique_id "amtl8YnTrSP0orvb6bLBPwAAADQ"]
[Thu Jul 30 15:55:45.736523 2026] [security2:error] [pid 3778029:tid 3778029] [client 138.68.144.227:47244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.evtech.uk"] [uri "/.git/config"] [unique_id "amtl8YnTrSP0orvb6bLBPwAAADQ"]
[Thu Jul 30 15:55:46.092973 2026] [access_compat:error] [pid 3776986:tid 3776986] [client 115.96.93.224:60055] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:46.186986 2026] [security2:error] [pid 3778027:tid 3778027] [client 64.227.32.66:34058] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.jd-media.tv"] [uri "/.env"] [unique_id "amtl8qfDDrwtKizwkvQxUwAAADI"]
[Thu Jul 30 15:55:46.187201 2026] [security2:error] [pid 3778027:tid 3778027] [client 64.227.32.66:34058] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jd-media.tv"] [uri "/.env"] [unique_id "amtl8qfDDrwtKizwkvQxUwAAADI"]
[Thu Jul 30 15:55:46.187461 2026] [security2:error] [pid 3778027:tid 3778027] [client 64.227.32.66:34058] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.jd-media.tv"] [uri "/.env"] [unique_id "amtl8qfDDrwtKizwkvQxUwAAADI"]
[Thu Jul 30 15:55:46.579923 2026] [security2:error] [pid 3774648:tid 3774648] [client 147.182.200.94:57212] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glasgowball.com"] [uri "/.git/config"] [unique_id "amtl8qlWB2AtBrZwCBzgYAAAAAQ"]
[Thu Jul 30 15:55:46.580158 2026] [security2:error] [pid 3774648:tid 3774648] [client 147.182.200.94:57212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glasgowball.com"] [uri "/.git/config"] [unique_id "amtl8qlWB2AtBrZwCBzgYAAAAAQ"]
[Thu Jul 30 15:55:46.580375 2026] [security2:error] [pid 3774648:tid 3774648] [client 147.182.200.94:57212] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glasgowball.com"] [uri "/.git/config"] [unique_id "amtl8qlWB2AtBrZwCBzgYAAAAAQ"]
[Thu Jul 30 15:55:46.788480 2026] [security2:error] [pid 3778069:tid 3778069] [client 64.227.32.66:33558] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.jd-media.tv"] [uri "/.git/config"] [unique_id "amtl8o1p57A3oSl44VWvbwAAADc"]
[Thu Jul 30 15:55:46.788704 2026] [security2:error] [pid 3778069:tid 3778069] [client 64.227.32.66:33558] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jd-media.tv"] [uri "/.git/config"] [unique_id "amtl8o1p57A3oSl44VWvbwAAADc"]
[Thu Jul 30 15:55:46.788960 2026] [security2:error] [pid 3778069:tid 3778069] [client 64.227.32.66:33558] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.jd-media.tv"] [uri "/.git/config"] [unique_id "amtl8o1p57A3oSl44VWvbwAAADc"]
[Thu Jul 30 15:55:47.786128 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:35622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:47.786170 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:47.840169 2026] [ssl:error] [pid 3775579:tid 3775579] (EAI 2)Name or service not known: [client 144.76.19.72:35638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:47.840211 2026] [ssl:error] [pid 3775579:tid 3775579] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:47.898637 2026] [security2:error] [pid 3778070:tid 3778070] [client 164.90.228.79:47038] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "evtech.uk"] [uri "/.env"] [unique_id "amtl8-xesgRQV44MoXSyWAAAADg"]
[Thu Jul 30 15:55:47.898803 2026] [security2:error] [pid 3778070:tid 3778070] [client 164.90.228.79:47038] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evtech.uk"] [uri "/.env"] [unique_id "amtl8-xesgRQV44MoXSyWAAAADg"]
[Thu Jul 30 15:55:47.899009 2026] [security2:error] [pid 3778070:tid 3778070] [client 164.90.228.79:47038] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "evtech.uk"] [uri "/.env"] [unique_id "amtl8-xesgRQV44MoXSyWAAAADg"]
[Thu Jul 30 15:55:48.028638 2026] [access_compat:error] [pid 3778075:tid 3778075] [client 188.215.125.139:46527] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/harry-potter-and-the-deathly-hallows-part-2-3d
[Thu Jul 30 15:55:48.028877 2026] [access_compat:error] [pid 3778075:tid 3778075] [client 188.215.125.139:46527] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:55:48.205329 2026] [security2:error] [pid 3762249:tid 3762249] [client 164.90.228.79:47042] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amtl9CZZIxtlY4Mc479ypgAAACA"]
[Thu Jul 30 15:55:48.205551 2026] [security2:error] [pid 3762249:tid 3762249] [client 164.90.228.79:47042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amtl9CZZIxtlY4Mc479ypgAAACA"]
[Thu Jul 30 15:55:48.205774 2026] [security2:error] [pid 3762249:tid 3762249] [client 164.90.228.79:47042] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amtl9CZZIxtlY4Mc479ypgAAACA"]
[Thu Jul 30 15:55:49.058240 2026] [access_compat:error] [pid 3778075:tid 3778075] [client 188.215.125.139:46527] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/favicon.ico, referer: https://blog.alism.com/harry-potter-and-the-deathly-hallows-part-2-3d/
[Thu Jul 30 15:55:49.058337 2026] [access_compat:error] [pid 3778075:tid 3778075] [client 188.215.125.139:46527] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/harry-potter-and-the-deathly-hallows-part-2-3d/
[Thu Jul 30 15:55:49.537734 2026] [security2:error] [pid 3777718:tid 3777718] [client 157.230.19.140:55722] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amtl9Vu205rYdHVNLDpoUwAAAAY"]
[Thu Jul 30 15:55:49.537891 2026] [security2:error] [pid 3777718:tid 3777718] [client 157.230.19.140:55722] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amtl9Vu205rYdHVNLDpoUwAAAAY"]
[Thu Jul 30 15:55:49.538099 2026] [security2:error] [pid 3777718:tid 3777718] [client 157.230.19.140:55722] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.env"] [unique_id "amtl9Vu205rYdHVNLDpoUwAAAAY"]
[Thu Jul 30 15:55:49.681084 2026] [core:error] [pid 3777237:tid 3777237] (13)Permission denied: [client 216.73.216.199:37083] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/log/messages
[Thu Jul 30 15:55:49.768136 2026] [security2:error] [pid 3718555:tid 3718555] [client 157.230.19.140:55738] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "evtech.uk"] [uri "/.env"] [unique_id "amtl9Y4Jzc4zx9-NsW6YgwAAABU"]
[Thu Jul 30 15:55:49.768355 2026] [security2:error] [pid 3718555:tid 3718555] [client 157.230.19.140:55738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evtech.uk"] [uri "/.env"] [unique_id "amtl9Y4Jzc4zx9-NsW6YgwAAABU"]
[Thu Jul 30 15:55:49.768576 2026] [security2:error] [pid 3718555:tid 3718555] [client 157.230.19.140:55738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "evtech.uk"] [uri "/.env"] [unique_id "amtl9Y4Jzc4zx9-NsW6YgwAAABU"]
[Thu Jul 30 15:55:50.037754 2026] [security2:error] [pid 3737525:tid 3737525] [client 138.68.82.23:42182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.evtech.uk"] [uri "/.env"] [unique_id "amtl9odbHIic-UDr3wsNLgAAAFo"]
[Thu Jul 30 15:55:50.037935 2026] [security2:error] [pid 3737525:tid 3737525] [client 138.68.82.23:42182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.evtech.uk"] [uri "/.env"] [unique_id "amtl9odbHIic-UDr3wsNLgAAAFo"]
[Thu Jul 30 15:55:50.038134 2026] [security2:error] [pid 3737525:tid 3737525] [client 138.68.82.23:42182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.evtech.uk"] [uri "/.env"] [unique_id "amtl9odbHIic-UDr3wsNLgAAAFo"]
[Thu Jul 30 15:55:50.275441 2026] [security2:error] [pid 3731180:tid 3731180] [client 64.227.32.66:34068] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.jd-media.tv"] [uri "/.git/config"] [unique_id "amtl9pv-iPW7V1Uv8mFXdQAAAEQ"]
[Thu Jul 30 15:55:50.275577 2026] [security2:error] [pid 3731180:tid 3731180] [client 64.227.32.66:34068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jd-media.tv"] [uri "/.git/config"] [unique_id "amtl9pv-iPW7V1Uv8mFXdQAAAEQ"]
[Thu Jul 30 15:55:50.275757 2026] [security2:error] [pid 3731180:tid 3731180] [client 64.227.32.66:34068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.jd-media.tv"] [uri "/.git/config"] [unique_id "amtl9pv-iPW7V1Uv8mFXdQAAAEQ"]
[Thu Jul 30 15:55:50.282769 2026] [ssl:error] [pid 3777237:tid 3777237] (70014)End of file found: [client 216.73.216.199:37083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:50.856532 2026] [access_compat:error] [pid 3776807:tid 3776807] [client 115.96.93.224:60262] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:55:50.885419 2026] [ssl:error] [pid 3771430:tid 3771430] (70014)End of file found: [client 216.73.216.199:2043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:50.897408 2026] [ssl:error] [pid 3778029:tid 3778029] (EAI 2)Name or service not known: [client 144.76.19.72:64446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:50.897439 2026] [ssl:error] [pid 3778029:tid 3778029] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:50.950869 2026] [ssl:error] [pid 3772512:tid 3772512] (EAI 2)Name or service not known: [client 144.76.19.72:64452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:50.950898 2026] [ssl:error] [pid 3772512:tid 3772512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:52.029664 2026] [security2:error] [pid 3777761:tid 3777761] [client 164.90.228.79:47052] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "evtech.uk"] [uri "/.git/config"] [unique_id "amtl-FFWaTiTCJiNuavgagAAABk"]
[Thu Jul 30 15:55:52.029839 2026] [security2:error] [pid 3777761:tid 3777761] [client 164.90.228.79:47052] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evtech.uk"] [uri "/.git/config"] [unique_id "amtl-FFWaTiTCJiNuavgagAAABk"]
[Thu Jul 30 15:55:52.030055 2026] [security2:error] [pid 3777761:tid 3777761] [client 164.90.228.79:47052] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "evtech.uk"] [uri "/.git/config"] [unique_id "amtl-FFWaTiTCJiNuavgagAAABk"]
[Thu Jul 30 15:55:52.390237 2026] [ssl:error] [pid 3777962:tid 3777962] (70014)End of file found: [client 216.73.216.199:1152] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:52.414337 2026] [security2:error] [pid 3769026:tid 3769026] [client 164.90.228.79:47068] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.git/config"] [unique_id "amtl-DO2s8XX355ElZnUfQAAAC4"]
[Thu Jul 30 15:55:52.414531 2026] [security2:error] [pid 3769026:tid 3769026] [client 164.90.228.79:47068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.git/config"] [unique_id "amtl-DO2s8XX355ElZnUfQAAAC4"]
[Thu Jul 30 15:55:52.414725 2026] [security2:error] [pid 3769026:tid 3769026] [client 164.90.228.79:47068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.git/config"] [unique_id "amtl-DO2s8XX355ElZnUfQAAAC4"]
[Thu Jul 30 15:55:53.324917 2026] [security2:error] [pid 3778071:tid 3778071] [client 196.27.114.137:56096] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "unclaimedassets.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtl-enJWMuL0jJsMyReCwAAADk"]
[Thu Jul 30 15:55:53.380218 2026] [security2:error] [pid 3774648:tid 3774648] [client 157.230.19.140:55780] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "jd-media.tv"] [uri "/.git/config"] [unique_id "amtl-alWB2AtBrZwCBzgYgAAAAQ"]
[Thu Jul 30 15:55:53.380473 2026] [security2:error] [pid 3774648:tid 3774648] [client 157.230.19.140:55780] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/.git/config"] [unique_id "amtl-alWB2AtBrZwCBzgYgAAAAQ"]
[Thu Jul 30 15:55:53.380692 2026] [security2:error] [pid 3774648:tid 3774648] [client 157.230.19.140:55780] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/.git/config"] [unique_id "amtl-alWB2AtBrZwCBzgYgAAAAQ"]
[Thu Jul 30 15:55:53.803133 2026] [security2:error] [pid 3778030:tid 3778030] [client 138.68.144.227:35184] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.evtech.uk"] [uri "/trace.axd"] [unique_id "amtl-SJnblELdG3eWYlI5AAAADU"]
[Thu Jul 30 15:55:53.803615 2026] [security2:error] [pid 3778030:tid 3778030] [client 138.68.144.227:35184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.evtech.uk"] [uri "/trace.axd"] [unique_id "amtl-SJnblELdG3eWYlI5AAAADU"]
[Thu Jul 30 15:55:53.803964 2026] [security2:error] [pid 3778030:tid 3778030] [client 138.68.144.227:35184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.evtech.uk"] [uri "/trace.axd"] [unique_id "amtl-SJnblELdG3eWYlI5AAAADU"]
[Thu Jul 30 15:55:53.805664 2026] [security2:error] [pid 3772510:tid 3772510] [client 157.230.19.140:55786] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "evtech.uk"] [uri "/.git/config"] [unique_id "amtl-ernJYYphOaMqT9g5AAAABs"]
[Thu Jul 30 15:55:53.805908 2026] [security2:error] [pid 3772510:tid 3772510] [client 157.230.19.140:55786] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evtech.uk"] [uri "/.git/config"] [unique_id "amtl-ernJYYphOaMqT9g5AAAABs"]
[Thu Jul 30 15:55:53.806184 2026] [security2:error] [pid 3772510:tid 3772510] [client 157.230.19.140:55786] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "evtech.uk"] [uri "/.git/config"] [unique_id "amtl-ernJYYphOaMqT9g5AAAABs"]
[Thu Jul 30 15:55:53.831925 2026] [lsapi:warn] [pid 3778071:tid 3778071] [client 196.27.114.137:56096] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:55:54.007713 2026] [ssl:error] [pid 3777995:tid 3777995] (EAI 2)Name or service not known: [client 144.76.19.72:64466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:54.007749 2026] [ssl:error] [pid 3777995:tid 3777995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:54.064769 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:64474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:54.064806 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:54.399058 2026] [security2:error] [pid 3772510:tid 3772510] [client 138.68.82.23:50718] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.evtech.uk"] [uri "/.git/config"] [unique_id "amtl-urnJYYphOaMqT9g5QAAABs"]
[Thu Jul 30 15:55:54.399325 2026] [security2:error] [pid 3772510:tid 3772510] [client 138.68.82.23:50718] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.evtech.uk"] [uri "/.git/config"] [unique_id "amtl-urnJYYphOaMqT9g5QAAABs"]
[Thu Jul 30 15:55:54.399556 2026] [security2:error] [pid 3772510:tid 3772510] [client 138.68.82.23:50718] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.evtech.uk"] [uri "/.git/config"] [unique_id "amtl-urnJYYphOaMqT9g5QAAABs"]
[Thu Jul 30 15:55:54.527988 2026] [security2:error] [pid 3775579:tid 3775579] [client 138.68.82.23:44062] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glasgowball.com"] [uri "/.env"] [unique_id "amtl-lYytBpw6yN8mo6HiQAAAAo"]
[Thu Jul 30 15:55:54.528213 2026] [security2:error] [pid 3775579:tid 3775579] [client 138.68.82.23:44062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glasgowball.com"] [uri "/.env"] [unique_id "amtl-lYytBpw6yN8mo6HiQAAAAo"]
[Thu Jul 30 15:55:54.528446 2026] [security2:error] [pid 3775579:tid 3775579] [client 138.68.82.23:44062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glasgowball.com"] [uri "/.env"] [unique_id "amtl-lYytBpw6yN8mo6HiQAAAAo"]
[Thu Jul 30 15:55:55.128301 2026] [authz_core:error] [pid 3772510:tid 3772510] [client 93.123.109.166:53948] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:55:55.130682 2026] [authz_core:error] [pid 3718555:tid 3718555] [client 93.123.109.166:53940] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:55:55.131489 2026] [authz_core:error] [pid 3772510:tid 3772510] [client 93.123.109.166:53948] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:55:55.133440 2026] [authz_core:error] [pid 3718555:tid 3718555] [client 93.123.109.166:53940] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:55:55.244787 2026] [authz_core:error] [pid 3777761:tid 3777761] [client 93.123.109.166:53970] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:55:55.247558 2026] [authz_core:error] [pid 3777761:tid 3777761] [client 93.123.109.166:53970] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:55:55.258003 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 93.123.109.166:53978] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:55:55.260891 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 93.123.109.166:53978] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:55:55.581497 2026] [ssl:error] [pid 3769026:tid 3769026] (70014)End of file found: [client 216.73.216.199:62124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:55:56.535926 2026] [security2:error] [pid 3776986:tid 3776986] [client 147.182.200.94:50510] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "glasgowball.com"] [uri "/trace.axd"] [unique_id "amtl_C0OxQYb6ntLVFUFIwAAACc"]
[Thu Jul 30 15:55:56.536192 2026] [security2:error] [pid 3776986:tid 3776986] [client 147.182.200.94:50510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glasgowball.com"] [uri "/trace.axd"] [unique_id "amtl_C0OxQYb6ntLVFUFIwAAACc"]
[Thu Jul 30 15:55:56.536373 2026] [security2:error] [pid 3776986:tid 3776986] [client 147.182.200.94:50510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "glasgowball.com"] [uri "/trace.axd"] [unique_id "amtl_C0OxQYb6ntLVFUFIwAAACc"]
[Thu Jul 30 15:55:57.149395 2026] [ssl:error] [pid 3774709:tid 3774709] (EAI 2)Name or service not known: [client 144.76.19.72:64476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:57.149443 2026] [ssl:error] [pid 3774709:tid 3774709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:57.203753 2026] [ssl:error] [pid 3776948:tid 3776948] (EAI 2)Name or service not known: [client 144.76.19.72:64480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:55:57.203799 2026] [ssl:error] [pid 3776948:tid 3776948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:55:57.738434 2026] [security2:error] [pid 3777962:tid 3777962] [client 64.227.32.66:33166] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.jd-media.tv"] [uri "/trace.axd"] [unique_id "amtl_S_CrYwiF4LaXmHC2QAAACg"]
[Thu Jul 30 15:55:57.738733 2026] [security2:error] [pid 3777962:tid 3777962] [client 64.227.32.66:33166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jd-media.tv"] [uri "/trace.axd"] [unique_id "amtl_S_CrYwiF4LaXmHC2QAAACg"]
[Thu Jul 30 15:55:57.738946 2026] [security2:error] [pid 3777962:tid 3777962] [client 64.227.32.66:33166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.jd-media.tv"] [uri "/trace.axd"] [unique_id "amtl_S_CrYwiF4LaXmHC2QAAACg"]
[Thu Jul 30 15:55:58.369297 2026] [security2:error] [pid 3777962:tid 3777962] [client 138.68.82.23:44080] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "glasgowball.com"] [uri "/.git/config"] [unique_id "amtl_i_CrYwiF4LaXmHC2gAAACg"]
[Thu Jul 30 15:55:58.369540 2026] [security2:error] [pid 3777962:tid 3777962] [client 138.68.82.23:44080] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glasgowball.com"] [uri "/.git/config"] [unique_id "amtl_i_CrYwiF4LaXmHC2gAAACg"]
[Thu Jul 30 15:55:58.369771 2026] [security2:error] [pid 3777962:tid 3777962] [client 138.68.82.23:44080] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "glasgowball.com"] [uri "/.git/config"] [unique_id "amtl_i_CrYwiF4LaXmHC2gAAACg"]
[Thu Jul 30 15:55:59.912720 2026] [ssl:error] [pid 3776948:tid 3776948] (70014)End of file found: [client 216.73.216.199:64824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:00.309851 2026] [ssl:error] [pid 3774709:tid 3774709] (EAI 2)Name or service not known: [client 144.76.19.72:26192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:00.309893 2026] [ssl:error] [pid 3774709:tid 3774709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:00.361500 2026] [ssl:error] [pid 3778075:tid 3778075] (EAI 2)Name or service not known: [client 144.76.19.72:26194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:00.361539 2026] [ssl:error] [pid 3778075:tid 3778075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:00.514246 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:13567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:01.014951 2026] [security2:error] [pid 3768537:tid 3768537] [client 164.90.228.79:40894] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "evtech.uk"] [uri "/trace.axd"] [unique_id "amtmAUVlEqSFht4jukQtdgAAABY"]
[Thu Jul 30 15:56:01.015296 2026] [security2:error] [pid 3768537:tid 3768537] [client 164.90.228.79:40894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evtech.uk"] [uri "/trace.axd"] [unique_id "amtmAUVlEqSFht4jukQtdgAAABY"]
[Thu Jul 30 15:56:01.015560 2026] [security2:error] [pid 3768537:tid 3768537] [client 164.90.228.79:40894] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "evtech.uk"] [uri "/trace.axd"] [unique_id "amtmAUVlEqSFht4jukQtdgAAABY"]
[Thu Jul 30 15:56:01.549102 2026] [security2:error] [pid 3772074:tid 3772074] [client 64.227.32.66:58938] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmAde4PN_-eHbnVlrnFwAAABI"]
[Thu Jul 30 15:56:01.549454 2026] [security2:error] [pid 3772074:tid 3772074] [client 64.227.32.66:58938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmAde4PN_-eHbnVlrnFwAAABI"]
[Thu Jul 30 15:56:01.549723 2026] [security2:error] [pid 3772074:tid 3772074] [client 64.227.32.66:58938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmAde4PN_-eHbnVlrnFwAAABI"]
[Thu Jul 30 15:56:01.719053 2026] [ssl:error] [pid 3772386:tid 3772386] (70014)End of file found: [client 216.73.216.199:59045] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:01.954935 2026] [access_compat:error] [pid 3774709:tid 3774709] [client 115.96.93.224:60797] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:02.430532 2026] [access_compat:error] [pid 3772437:tid 3772437] [client 45.158.164.139:57364] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:56:03.033625 2026] [security2:error] [pid 3769026:tid 3769026] [client 164.90.228.79:40936] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmAzO2s8XX355ElZnUhAAAAC4"]
[Thu Jul 30 15:56:03.033939 2026] [security2:error] [pid 3769026:tid 3769026] [client 164.90.228.79:40936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmAzO2s8XX355ElZnUhAAAAC4"]
[Thu Jul 30 15:56:03.034211 2026] [security2:error] [pid 3769026:tid 3769026] [client 164.90.228.79:40936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmAzO2s8XX355ElZnUhAAAAC4"]
[Thu Jul 30 15:56:03.417679 2026] [ssl:error] [pid 3769026:tid 3769026] (EAI 2)Name or service not known: [client 144.76.19.72:26208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:03.417713 2026] [ssl:error] [pid 3769026:tid 3769026] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:03.479787 2026] [ssl:error] [pid 3762249:tid 3762249] (EAI 2)Name or service not known: [client 144.76.19.72:26214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:03.479822 2026] [ssl:error] [pid 3762249:tid 3762249] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:04.841714 2026] [security2:error] [pid 3778893:tid 3778893] [client 157.230.19.140:52758] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmBHDwPRnYbGeFIDpzogAAADc"]
[Thu Jul 30 15:56:04.842083 2026] [security2:error] [pid 3778893:tid 3778893] [client 157.230.19.140:52758] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmBHDwPRnYbGeFIDpzogAAADc"]
[Thu Jul 30 15:56:04.842403 2026] [security2:error] [pid 3778893:tid 3778893] [client 157.230.19.140:52758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "jd-media.tv"] [uri "/trace.axd"] [unique_id "amtmBHDwPRnYbGeFIDpzogAAADc"]
[Thu Jul 30 15:56:04.932941 2026] [security2:error] [pid 3778029:tid 3778029] [client 157.230.19.140:52764] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "evtech.uk"] [uri "/trace.axd"] [unique_id "amtmBInTrSP0orvb6bLBbAAAADQ"]
[Thu Jul 30 15:56:04.933228 2026] [security2:error] [pid 3778029:tid 3778029] [client 157.230.19.140:52764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "evtech.uk"] [uri "/trace.axd"] [unique_id "amtmBInTrSP0orvb6bLBbAAAADQ"]
[Thu Jul 30 15:56:04.933422 2026] [security2:error] [pid 3778029:tid 3778029] [client 157.230.19.140:52764] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "evtech.uk"] [uri "/trace.axd"] [unique_id "amtmBInTrSP0orvb6bLBbAAAADQ"]
[Thu Jul 30 15:56:06.408803 2026] [ssl:error] [pid 3778071:tid 3778071] (70014)End of file found: [client 216.73.216.199:26268] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:06.533558 2026] [ssl:error] [pid 3778753:tid 3778753] (EAI 2)Name or service not known: [client 144.76.19.72:26230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:06.533625 2026] [ssl:error] [pid 3778753:tid 3778753] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:06.594988 2026] [ssl:error] [pid 3778074:tid 3778074] (EAI 2)Name or service not known: [client 144.76.19.72:26238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:06.595024 2026] [ssl:error] [pid 3778074:tid 3778074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:06.781837 2026] [security2:error] [pid 3764296:tid 3764296] [client 138.68.82.23:51770] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.evtech.uk"] [uri "/trace.axd"] [unique_id "amtmBqadUuTjGgXd3bgZtwAAACo"]
[Thu Jul 30 15:56:06.782181 2026] [security2:error] [pid 3764296:tid 3764296] [client 138.68.82.23:51770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.evtech.uk"] [uri "/trace.axd"] [unique_id "amtmBqadUuTjGgXd3bgZtwAAACo"]
[Thu Jul 30 15:56:06.782405 2026] [security2:error] [pid 3764296:tid 3764296] [client 138.68.82.23:51770] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "www.evtech.uk"] [uri "/trace.axd"] [unique_id "amtmBqadUuTjGgXd3bgZtwAAACo"]
[Thu Jul 30 15:56:06.886606 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:5654] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:07.370292 2026] [security2:error] [pid 3778895:tid 3778895] [client 118.101.201.236:35342] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmBxQtuuUY7yLht62GlAAAAD8"]
[Thu Jul 30 15:56:07.370340 2026] [security2:error] [pid 3778895:tid 3778895] [client 118.101.201.236:35342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmBxQtuuUY7yLht62GlAAAAD8"]
[Thu Jul 30 15:56:07.370614 2026] [security2:error] [pid 3778895:tid 3778895] [client 118.101.201.236:35342] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmBxQtuuUY7yLht62GlAAAAD8"]
[Thu Jul 30 15:56:07.396583 2026] [ssl:error] [pid 3778892:tid 3778892] (70014)End of file found: [client 216.73.216.199:1110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:09.678201 2026] [ssl:error] [pid 3775623:tid 3775623] (EAI 2)Name or service not known: [client 144.76.19.72:59690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:09.678265 2026] [ssl:error] [pid 3775623:tid 3775623] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:09.733926 2026] [ssl:error] [pid 3778075:tid 3778075] (EAI 2)Name or service not known: [client 144.76.19.72:59692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:09.733958 2026] [ssl:error] [pid 3778075:tid 3778075] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:11.321841 2026] [security2:error] [pid 3778075:tid 3778075] [client 45.236.135.148:11711] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmC4dA5nKXFnitqQ8kjAAAAD0"]
[Thu Jul 30 15:56:11.321900 2026] [security2:error] [pid 3778075:tid 3778075] [client 45.236.135.148:11711] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmC4dA5nKXFnitqQ8kjAAAAD0"]
[Thu Jul 30 15:56:11.322224 2026] [security2:error] [pid 3778075:tid 3778075] [client 45.236.135.148:11711] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmC4dA5nKXFnitqQ8kjAAAAD0"]
[Thu Jul 30 15:56:11.955951 2026] [authz_core:error] [pid 3772511:tid 3772511] [client 66.249.66.35:56969] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:56:11.958669 2026] [authz_core:error] [pid 3772511:tid 3772511] [client 66.249.66.35:56969] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:56:12.744835 2026] [access_compat:error] [pid 3778071:tid 3778071] [client 115.96.93.224:61333] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:12.800835 2026] [ssl:error] [pid 3768537:tid 3768537] (70014)End of file found: [client 216.73.216.199:37091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:12.811393 2026] [ssl:error] [pid 3774712:tid 3774712] (EAI 2)Name or service not known: [client 144.76.19.72:59706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:12.811432 2026] [ssl:error] [pid 3774712:tid 3774712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:12.870622 2026] [ssl:error] [pid 3775622:tid 3775622] (EAI 2)Name or service not known: [client 144.76.19.72:59722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:12.870666 2026] [ssl:error] [pid 3775622:tid 3775622] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:13.091396 2026] [ssl:error] [pid 3771751:tid 3771751] (70014)End of file found: [client 216.73.216.199:29759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:13.136512 2026] [authz_core:error] [pid 3777996:tid 3777996] [client 66.249.66.35:50307] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:56:13.139171 2026] [authz_core:error] [pid 3777996:tid 3777996] [client 66.249.66.35:50307] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:56:13.820989 2026] [security2:error] [pid 3775622:tid 3775622] [client 64.225.75.246:43344] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "retrodisco.co.uk"] [uri "/.env"] [unique_id "amtmDSuYK_3f4ObvAkQpoAAAAAs"]
[Thu Jul 30 15:56:13.821204 2026] [security2:error] [pid 3775622:tid 3775622] [client 64.225.75.246:43344] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "retrodisco.co.uk"] [uri "/.env"] [unique_id "amtmDSuYK_3f4ObvAkQpoAAAAAs"]
[Thu Jul 30 15:56:14.299749 2026] [ssl:error] [pid 3778894:tid 3778894] (70014)End of file found: [client 216.73.216.199:32814] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:14.617338 2026] [security2:error] [pid 3775622:tid 3775622] [client 64.225.75.246:43344] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "retrodisco.co.uk"] [uri "/index.php"] [unique_id "amtmDSuYK_3f4ObvAkQpoAAAAAs"]
[Thu Jul 30 15:56:15.248309 2026] [security2:error] [pid 3774648:tid 3774648] [client 138.68.82.23:44138] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "glasgowball.com"] [uri "/trace.axd"] [unique_id "amtmD6lWB2AtBrZwCBzgaQAAAAQ"]
[Thu Jul 30 15:56:15.248601 2026] [security2:error] [pid 3774648:tid 3774648] [client 138.68.82.23:44138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "glasgowball.com"] [uri "/trace.axd"] [unique_id "amtmD6lWB2AtBrZwCBzgaQAAAAQ"]
[Thu Jul 30 15:56:15.248816 2026] [security2:error] [pid 3774648:tid 3774648] [client 138.68.82.23:44138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "glasgowball.com"] [uri "/trace.axd"] [unique_id "amtmD6lWB2AtBrZwCBzgaQAAAAQ"]
[Thu Jul 30 15:56:15.590993 2026] [security2:error] [pid 3764296:tid 3764296] [client 177.73.195.49:19114] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmD6adUuTjGgXd3bgZugAAACo"]
[Thu Jul 30 15:56:15.591043 2026] [security2:error] [pid 3764296:tid 3764296] [client 177.73.195.49:19114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmD6adUuTjGgXd3bgZugAAACo"]
[Thu Jul 30 15:56:15.591304 2026] [security2:error] [pid 3764296:tid 3764296] [client 177.73.195.49:19114] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmD6adUuTjGgXd3bgZugAAACo"]
[Thu Jul 30 15:56:15.927645 2026] [ssl:error] [pid 3778800:tid 3778800] (EAI 2)Name or service not known: [client 144.76.19.72:59738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:15.927674 2026] [ssl:error] [pid 3778800:tid 3778800] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:15.981209 2026] [ssl:error] [pid 3777718:tid 3777718] (EAI 2)Name or service not known: [client 144.76.19.72:59744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:15.981260 2026] [ssl:error] [pid 3777718:tid 3777718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:16.094135 2026] [authz_core:error] [pid 3774648:tid 3774648] [client 40.77.167.30:19116] AH01630: client denied by server configuration: /home/winterb/public_html/naomiwinter/error_log
[Thu Jul 30 15:56:18.140978 2026] [core:error] [pid 3737530:tid 3737530] (13)Permission denied: [client 216.73.216.199:1386] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty39/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 15:56:18.278835 2026] [security2:error] [pid 3778028:tid 3778028] [client 64.225.75.246:35710] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "retrodisco.co.uk"] [uri "/.git/config"] [unique_id "amtmEuYP5vTFyPR1Y9MV1QAAADM"]
[Thu Jul 30 15:56:18.279001 2026] [security2:error] [pid 3778028:tid 3778028] [client 64.225.75.246:35710] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "retrodisco.co.uk"] [uri "/.git/config"] [unique_id "amtmEuYP5vTFyPR1Y9MV1QAAADM"]
[Thu Jul 30 15:56:18.845720 2026] [ssl:error] [pid 3737530:tid 3737530] (70014)End of file found: [client 216.73.216.199:1386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:18.903232 2026] [access_compat:error] [pid 3777718:tid 3777718] [client 115.96.93.224:61678] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:19.007835 2026] [security2:error] [pid 3778028:tid 3778028] [client 64.225.75.246:35710] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "retrodisco.co.uk"] [uri "/index.php"] [unique_id "amtmEuYP5vTFyPR1Y9MV1QAAADM"]
[Thu Jul 30 15:56:19.041967 2026] [ssl:error] [pid 3776985:tid 3776985] (EAI 2)Name or service not known: [client 144.76.19.72:59752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:19.042004 2026] [ssl:error] [pid 3776985:tid 3776985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:19.095578 2026] [ssl:error] [pid 3771751:tid 3771751] (EAI 2)Name or service not known: [client 144.76.19.72:59768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:19.095609 2026] [ssl:error] [pid 3771751:tid 3771751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:19.348830 2026] [ssl:error] [pid 3769026:tid 3769026] (70014)End of file found: [client 216.73.216.199:51414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:19.817006 2026] [security2:error] [pid 3764296:tid 3764296] [client 64.225.75.246:38228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "retrodisco.co.uk"] [uri "/.env"] [unique_id "amtmE6adUuTjGgXd3bgZvQAAACo"]
[Thu Jul 30 15:56:19.817223 2026] [security2:error] [pid 3764296:tid 3764296] [client 64.225.75.246:38228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "retrodisco.co.uk"] [uri "/.env"] [unique_id "amtmE6adUuTjGgXd3bgZvQAAACo"]
[Thu Jul 30 15:56:20.078987 2026] [ssl:error] [pid 3777995:tid 3777995] (70014)End of file found: [client 216.73.216.199:14874] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:20.250741 2026] [access_compat:error] [pid 3778071:tid 3778071] [client 45.158.164.139:35486] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:56:20.752096 2026] [security2:error] [pid 3764296:tid 3764296] [client 64.225.75.246:38228] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "retrodisco.co.uk"] [uri "/index.php"] [unique_id "amtmE6adUuTjGgXd3bgZvQAAACo"]
[Thu Jul 30 15:56:21.617035 2026] [access_compat:error] [pid 3778565:tid 3778565] [client 172.213.232.128:22671] AH01797: client denied by server configuration: /home/hornseyt/public_html/wp-content/updraft/about.php
[Thu Jul 30 15:56:22.151960 2026] [ssl:error] [pid 3778892:tid 3778892] (EAI 2)Name or service not known: [client 144.76.19.72:34190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:22.151999 2026] [ssl:error] [pid 3778892:tid 3778892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:22.233043 2026] [ssl:error] [pid 3778030:tid 3778030] (EAI 2)Name or service not known: [client 144.76.19.72:34194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:22.233097 2026] [ssl:error] [pid 3778030:tid 3778030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:23.919663 2026] [access_compat:error] [pid 3777761:tid 3777761] [client 115.96.93.224:61879] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:25.286770 2026] [ssl:error] [pid 3731180:tid 3731180] (EAI 2)Name or service not known: [client 144.76.19.72:34202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:25.286811 2026] [ssl:error] [pid 3731180:tid 3731180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:25.343593 2026] [ssl:error] [pid 3776986:tid 3776986] (EAI 2)Name or service not known: [client 144.76.19.72:34214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:25.343652 2026] [ssl:error] [pid 3776986:tid 3776986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:25.360110 2026] [security2:error] [pid 3778484:tid 3778484] [client 64.225.75.246:38252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "retrodisco.co.uk"] [uri "/.git/config"] [unique_id "amtmGRiWTk9ha1DktWt-VQAAAAE"]
[Thu Jul 30 15:56:25.360313 2026] [security2:error] [pid 3778484:tid 3778484] [client 64.225.75.246:38252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "retrodisco.co.uk"] [uri "/.git/config"] [unique_id "amtmGRiWTk9ha1DktWt-VQAAAAE"]
[Thu Jul 30 15:56:25.389028 2026] [authz_core:error] [pid 3778753:tid 3778753] [client 65.108.124.214:42342] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 15:56:25.601210 2026] [core:error] [pid 3774709:tid 3774709] (13)Permission denied: [client 216.73.216.199:14704] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory1/subsystem/uevent
[Thu Jul 30 15:56:25.860761 2026] [security2:error] [pid 3777996:tid 3777996] [client 114.119.146.111:42255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~30,19/request_format~html"] [unique_id "amtmGYojCD3v5jDdliW9awAAADE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1564354800/cat_ids%7E30,19,102/request_format%7Ehtml
[Thu Jul 30 15:56:25.898866 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 15:56:25.899006 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 15:56:25.901366 2026] [ssl:error] [pid 3774709:tid 3774709] (70014)End of file found: [client 216.73.216.199:14704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:25.933882 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/this_is_a_new_hello_world.php
[Thu Jul 30 15:56:25.933930 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.115157 2026] [security2:error] [pid 3778484:tid 3778484] [client 64.225.75.246:38252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "retrodisco.co.uk"] [uri "/index.php"] [unique_id "amtmGRiWTk9ha1DktWt-VQAAAAE"]
[Thu Jul 30 15:56:26.351601 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/3PJcpMFsD8B.php
[Thu Jul 30 15:56:26.351657 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.608154 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/err.php
[Thu Jul 30 15:56:26.608207 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.681608 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/img.php
[Thu Jul 30 15:56:26.681658 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.728584 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/aa.php
[Thu Jul 30 15:56:26.728635 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.791392 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/av.php
[Thu Jul 30 15:56:26.791439 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.850461 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xa.php
[Thu Jul 30 15:56:26.850505 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.904522 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/media.php
[Thu Jul 30 15:56:26.904568 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:26.956223 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/images.php
[Thu Jul 30 15:56:26.956277 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:27.006908 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/gecko.php
[Thu Jul 30 15:56:27.006959 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:27.077112 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/82.php
[Thu Jul 30 15:56:27.077184 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:27.126615 2026] [ssl:error] [pid 3777718:tid 3777718] (70014)End of file found: [client 216.73.216.199:23372] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:27.309953 2026] [security2:error] [pid 3778484:tid 3778484] [client 114.119.146.111:42261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1564354800/cat_ids~30,19/request_format~html"] [unique_id "amtmGxiWTk9ha1DktWt-VgAAAAE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eweek/exact_date%7E1564354800/cat_ids%7E30,19,102/request_format%7Ehtml
[Thu Jul 30 15:56:28.051352 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xstelth.php
[Thu Jul 30 15:56:28.051408 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.085490 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xp.php
[Thu Jul 30 15:56:28.085546 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.128170 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/admin.php
[Thu Jul 30 15:56:28.128228 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.162417 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/adminner.php
[Thu Jul 30 15:56:28.162473 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.196451 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/a.php
[Thu Jul 30 15:56:28.196499 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.400900 2026] [ssl:error] [pid 3777995:tid 3777995] (EAI 2)Name or service not known: [client 144.76.19.72:34228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:28.400942 2026] [ssl:error] [pid 3777995:tid 3777995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:28.454009 2026] [ssl:error] [pid 3774712:tid 3774712] (EAI 2)Name or service not known: [client 144.76.19.72:34236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:28.454038 2026] [ssl:error] [pid 3774712:tid 3774712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:28.643278 2026] [ssl:error] [pid 3778068:tid 3778068] (70014)End of file found: [client 216.73.216.199:63357] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:28.701111 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/k.php
[Thu Jul 30 15:56:28.701178 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.735158 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/222.php
[Thu Jul 30 15:56:28.735204 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.769244 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/mac.php
[Thu Jul 30 15:56:28.769291 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:28.803388 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-content
[Thu Jul 30 15:56:28.803501 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 15:56:28.837863 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 15:56:28.837992 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 15:56:29.173721 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ops.php
[Thu Jul 30 15:56:29.173779 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:29.398622 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/8.php
[Thu Jul 30 15:56:29.398676 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:29.432533 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/FWAZ.php
[Thu Jul 30 15:56:29.432582 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:29.844405 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/biufile.php
[Thu Jul 30 15:56:29.844455 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:29.878525 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/coffexium.php
[Thu Jul 30 15:56:29.878590 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:29.913318 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/simple.php
[Thu Jul 30 15:56:29.913375 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:29.947277 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/fpwch.php
[Thu Jul 30 15:56:29.947321 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:29.987255 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/dex.php
[Thu Jul 30 15:56:29.987302 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.021222 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/1.php
[Thu Jul 30 15:56:30.021276 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.055337 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-admin
[Thu Jul 30 15:56:30.055465 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 15:56:30.090629 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/config.json.php
[Thu Jul 30 15:56:30.090677 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.124645 2026] [access_compat:error] [pid 3780141:tid 3780141] [client 115.96.93.224:62238] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:30.138521 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/k2.php
[Thu Jul 30 15:56:30.138568 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.184894 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/raw.php
[Thu Jul 30 15:56:30.184943 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.219520 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp.php
[Thu Jul 30 15:56:30.219570 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.274749 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/fffm.php
[Thu Jul 30 15:56:30.274802 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.308937 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/111.php
[Thu Jul 30 15:56:30.308989 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.343269 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-includes
[Thu Jul 30 15:56:30.343386 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/index.php
[Thu Jul 30 15:56:30.377377 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ws.php
[Thu Jul 30 15:56:30.377433 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.412438 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/coffee.php
[Thu Jul 30 15:56:30.412495 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.460147 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/goods.php
[Thu Jul 30 15:56:30.460216 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.494536 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/about.php
[Thu Jul 30 15:56:30.494597 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.529035 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/about.php
[Thu Jul 30 15:56:30.529167 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.589632 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/admin.php
[Thu Jul 30 15:56:30.589685 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.626167 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/inputs.php
[Thu Jul 30 15:56:30.626222 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.813903 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/inputs.php
[Thu Jul 30 15:56:30.813967 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:30.999271 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/adminfuns.php
[Thu Jul 30 15:56:30.999384 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.033935 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/404.php
[Thu Jul 30 15:56:31.034034 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.068638 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/xxx.php
[Thu Jul 30 15:56:31.068734 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.263749 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/classwithtostring.php
[Thu Jul 30 15:56:31.263802 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.297594 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/234ff.php
[Thu Jul 30 15:56:31.297642 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.331464 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/133.php
[Thu Jul 30 15:56:31.331514 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.365533 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/wp-ws68.php
[Thu Jul 30 15:56:31.365582 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.399706 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/mgrr.php
[Thu Jul 30 15:56:31.399751 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.433608 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/55.php
[Thu Jul 30 15:56:31.433677 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 4.223.67.9:35902] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 15:56:31.510239 2026] [ssl:error] [pid 3780186:tid 3780186] (EAI 2)Name or service not known: [client 144.76.19.72:49572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:31.510279 2026] [ssl:error] [pid 3780186:tid 3780186] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:31.615367 2026] [ssl:error] [pid 3777995:tid 3777995] (EAI 2)Name or service not known: [client 144.76.19.72:49578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:31.615392 2026] [ssl:error] [pid 3777995:tid 3777995] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:32.052173 2026] [ssl:error] [pid 3780184:tid 3780184] (70014)End of file found: [client 216.73.216.199:45052] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:33.954462 2026] [security2:error] [pid 3777995:tid 3777995] [client 43.159.128.237:44390] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/"] [unique_id "amtmIe6x7ZgAjMymLEOnIQAAADA"]
[Thu Jul 30 15:56:34.675259 2026] [ssl:error] [pid 3749424:tid 3749424] (EAI 2)Name or service not known: [client 144.76.19.72:49590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:34.675292 2026] [ssl:error] [pid 3749424:tid 3749424] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:34.728280 2026] [ssl:error] [pid 3778892:tid 3778892] (EAI 2)Name or service not known: [client 144.76.19.72:49598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:34.728309 2026] [ssl:error] [pid 3778892:tid 3778892] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:34.810849 2026] [ssl:error] [pid 3774712:tid 3774712] (70014)End of file found: [client 216.73.216.199:54386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:34.877824 2026] [access_compat:error] [pid 3778068:tid 3778068] [client 115.96.93.224:62424] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:35.224328 2026] [security2:error] [pid 3778892:tid 3778892] [client 43.159.128.237:44978] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020"] [unique_id "amtmI0zdLIL0cHTvdWBL_wAAAC0"], referer: http://www.glasgowball.com
[Thu Jul 30 15:56:35.313633 2026] [ssl:error] [pid 3778074:tid 3778074] (70014)End of file found: [client 216.73.216.199:43133] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:36.418245 2026] [security2:error] [pid 3774181:tid 3774181] [client 43.159.128.237:45524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glasgowball.com"] [uri "/glaball/2020/"] [unique_id "amtmJDW_olWDjRxAqiiDwwAAAAA"], referer: http://www.glasgowball.com/glaball/2020
[Thu Jul 30 15:56:36.458051 2026] [security2:error] [pid 3779782:tid 3779782] [client 64.225.75.246:43428] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "retrodisco.co.uk"] [uri "/trace.axd"] [unique_id "amtmJLCheKgcmzHSzXUGxgAAAAI"]
[Thu Jul 30 15:56:36.458270 2026] [security2:error] [pid 3779782:tid 3779782] [client 64.225.75.246:43428] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "retrodisco.co.uk"] [uri "/trace.axd"] [unique_id "amtmJLCheKgcmzHSzXUGxgAAAAI"]
[Thu Jul 30 15:56:37.208995 2026] [security2:error] [pid 3779782:tid 3779782] [client 64.225.75.246:43428] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "retrodisco.co.uk"] [uri "/index.php"] [unique_id "amtmJLCheKgcmzHSzXUGxgAAAAI"]
[Thu Jul 30 15:56:37.811592 2026] [ssl:error] [pid 3775886:tid 3775886] (EAI 2)Name or service not known: [client 144.76.19.72:49614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:37.811629 2026] [ssl:error] [pid 3775886:tid 3775886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:37.867392 2026] [ssl:error] [pid 3778028:tid 3778028] (EAI 2)Name or service not known: [client 144.76.19.72:49618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:37.867431 2026] [ssl:error] [pid 3778028:tid 3778028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:37.870340 2026] [core:error] [pid 3778072:tid 3778072] (13)Permission denied: [client 216.73.216.199:38770] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-512/store_user
[Thu Jul 30 15:56:40.946038 2026] [ssl:error] [pid 3780238:tid 3780238] (EAI 2)Name or service not known: [client 144.76.19.72:56392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:40.946114 2026] [ssl:error] [pid 3780238:tid 3780238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:41.001467 2026] [ssl:error] [pid 3774712:tid 3774712] (EAI 2)Name or service not known: [client 144.76.19.72:56394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:41.001495 2026] [ssl:error] [pid 3774712:tid 3774712] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:41.511222 2026] [core:error] [pid 3778072:tid 3778072] (13)Permission denied: [client 216.73.216.199:38770] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty37/subsystem/ttyS2/close_delay
[Thu Jul 30 15:56:41.621325 2026] [authz_core:error] [pid 3771751:tid 3771751] [client 172.213.244.85:21583] AH01630: client denied by server configuration: /home/blowha/public_html/wp-includes/l10n/error_log
[Thu Jul 30 15:56:41.656037 2026] [security2:error] [pid 3776807:tid 3776807] [client 129.226.174.80:36820] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-earth.com"] [uri "/"] [unique_id "amtmKbr6Kyx5GbWbJZ7OcQAAABA"]
[Thu Jul 30 15:56:41.815367 2026] [ssl:error] [pid 3778072:tid 3778072] (70014)End of file found: [client 216.73.216.199:38770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:43.400909 2026] [core:error] [pid 3780232:tid 3780232] (13)Permission denied: [client 216.73.216.199:40031] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/scsi_host/host0/host_reset
[Thu Jul 30 15:56:44.003373 2026] [ssl:error] [pid 3780232:tid 3780232] (70014)End of file found: [client 216.73.216.199:40031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:44.060248 2026] [ssl:error] [pid 3775579:tid 3775579] (EAI 2)Name or service not known: [client 144.76.19.72:56396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:44.060273 2026] [ssl:error] [pid 3775579:tid 3775579] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:44.088801 2026] [security2:error] [pid 3731180:tid 3731180] [client 185.191.171.15:34734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/randalls-return-policy"] [unique_id "amtmLJv-iPW7V1Uv8mFXsgAAAEQ"]
[Thu Jul 30 15:56:44.116093 2026] [ssl:error] [pid 3778071:tid 3778071] (EAI 2)Name or service not known: [client 144.76.19.72:56410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:44.116127 2026] [ssl:error] [pid 3778071:tid 3778071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:44.321398 2026] [security2:error] [pid 3780187:tid 3780187] [client 85.208.96.208:12576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2009/01/27/learning-how-to-write/"] [unique_id "amtmLJQKScsr3AppFn0DVQAAABg"]
[Thu Jul 30 15:56:44.339937 2026] [core:error] [pid 3778893:tid 3778893] [client 66.249.66.8:50091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:56:44.339977 2026] [core:error] [pid 3778893:tid 3778893] [client 66.249.66.8:50091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:56:44.485049 2026] [ssl:error] [pid 3775579:tid 3775579] (70014)End of file found: [client 216.73.216.199:19930] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:45.357530 2026] [access_compat:error] [pid 3772437:tid 3772437] [client 45.118.159.69:30944] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:45.411017 2026] [security2:error] [pid 3777195:tid 3777195] [client 64.225.75.246:51586] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "retrodisco.co.uk"] [uri "/trace.axd"] [unique_id "amtmLUQcHoP1d2r1l_uvrwAAACs"]
[Thu Jul 30 15:56:45.411520 2026] [security2:error] [pid 3777195:tid 3777195] [client 64.225.75.246:51586] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "retrodisco.co.uk"] [uri "/trace.axd"] [unique_id "amtmLUQcHoP1d2r1l_uvrwAAACs"]
[Thu Jul 30 15:56:45.421614 2026] [access_compat:error] [pid 3780238:tid 3780238] [client 115.96.93.224:62956] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:46.153983 2026] [authz_core:error] [pid 3776986:tid 3776986] [client 93.123.109.166:60648] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:56:46.156747 2026] [authz_core:error] [pid 3776986:tid 3776986] [client 93.123.109.166:60648] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:56:46.194950 2026] [authz_core:error] [pid 3776986:tid 3776986] [client 93.123.109.166:60664] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:56:46.197618 2026] [authz_core:error] [pid 3776986:tid 3776986] [client 93.123.109.166:60664] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:56:46.254201 2026] [security2:error] [pid 3777195:tid 3777195] [client 64.225.75.246:51586] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "retrodisco.co.uk"] [uri "/index.php"] [unique_id "amtmLUQcHoP1d2r1l_uvrwAAACs"]
[Thu Jul 30 15:56:46.277033 2026] [authz_core:error] [pid 3776986:tid 3776986] [client 93.123.109.166:60692] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:56:46.279759 2026] [authz_core:error] [pid 3776986:tid 3776986] [client 93.123.109.166:60692] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.kinesiologylondon.co.uk/
[Thu Jul 30 15:56:46.312759 2026] [authz_core:error] [pid 3778074:tid 3778074] [client 93.123.109.166:60698] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:56:46.315453 2026] [authz_core:error] [pid 3778074:tid 3778074] [client 93.123.109.166:60698] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologymerseyside.co.uk/
[Thu Jul 30 15:56:47.077738 2026] [authz_core:error] [pid 3780947:tid 3780947] [client 66.249.66.33:38178] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:56:47.080454 2026] [authz_core:error] [pid 3780947:tid 3780947] [client 66.249.66.33:38178] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:56:47.168744 2026] [ssl:error] [pid 3778072:tid 3778072] (EAI 2)Name or service not known: [client 144.76.19.72:56424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:47.168778 2026] [ssl:error] [pid 3778072:tid 3778072] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:47.223834 2026] [ssl:error] [pid 3778484:tid 3778484] (EAI 2)Name or service not known: [client 144.76.19.72:56438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:47.223869 2026] [ssl:error] [pid 3778484:tid 3778484] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:48.121047 2026] [core:crit] [pid 3780141:tid 3780141] (13)Permission denied: [client 216.73.216.199:38734] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/kernel/tracing/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/kernel/tracing/' is executable
[Thu Jul 30 15:56:48.133632 2026] [core:crit] [pid 3780141:tid 3780141] (13)Permission denied: [client 216.73.216.199:38734] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/kernel/debug/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/kernel/debug/' is executable
[Thu Jul 30 15:56:49.139036 2026] [security2:error] [pid 3774181:tid 3774181] [client 43.153.27.244:53676] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtmMTW_olWDjRxAqiiDxgAAAAA"]
[Thu Jul 30 15:56:49.631297 2026] [core:error] [pid 3780875:tid 3780875] (13)Permission denied: [client 216.73.216.199:3192] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/hid/parameters/debug
[Thu Jul 30 15:56:50.277712 2026] [ssl:error] [pid 3768537:tid 3768537] (EAI 2)Name or service not known: [client 144.76.19.72:45374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:50.277749 2026] [ssl:error] [pid 3768537:tid 3768537] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:50.331991 2026] [ssl:error] [pid 3777832:tid 3777832] (EAI 2)Name or service not known: [client 144.76.19.72:45384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:50.332020 2026] [ssl:error] [pid 3777832:tid 3777832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:50.913934 2026] [security2:error] [pid 3774181:tid 3774181] [client 43.153.27.244:53648] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtmMjW_olWDjRxAqiiDxwAAAAA"], referer: http://orgent.eu
[Thu Jul 30 15:56:53.389259 2026] [ssl:error] [pid 3778028:tid 3778028] (EAI 2)Name or service not known: [client 144.76.19.72:45396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:53.389298 2026] [ssl:error] [pid 3778028:tid 3778028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:53.452179 2026] [ssl:error] [pid 3774709:tid 3774709] (EAI 2)Name or service not known: [client 144.76.19.72:45400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:53.452205 2026] [ssl:error] [pid 3774709:tid 3774709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:53.870737 2026] [security2:error] [pid 3775579:tid 3775579] [client 43.135.211.148:50498] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "amtmNVYytBpw6yN8mo6IDgAAAAo"]
[Thu Jul 30 15:56:54.158101 2026] [ssl:error] [pid 3780141:tid 3780141] (70014)End of file found: [client 216.73.216.199:38734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:55.904754 2026] [access_compat:error] [pid 3780231:tid 3780231] [client 115.96.93.224:63485] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:56:56.506323 2026] [ssl:error] [pid 3781015:tid 3781015] (EAI 2)Name or service not known: [client 144.76.19.72:45416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:56.506383 2026] [ssl:error] [pid 3781015:tid 3781015] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:56.562581 2026] [ssl:error] [pid 3780947:tid 3780947] (EAI 2)Name or service not known: [client 144.76.19.72:45418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:56.562617 2026] [ssl:error] [pid 3780947:tid 3780947] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:56.569819 2026] [ssl:error] [pid 3780875:tid 3780875] (70014)End of file found: [client 216.73.216.199:3192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:57.062510 2026] [ssl:error] [pid 3776948:tid 3776948] (70014)End of file found: [client 216.73.216.199:7948] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:56:59.616607 2026] [ssl:error] [pid 3772512:tid 3772512] (EAI 2)Name or service not known: [client 144.76.19.72:50446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:59.616671 2026] [ssl:error] [pid 3772512:tid 3772512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:56:59.674369 2026] [ssl:error] [pid 3777996:tid 3777996] (EAI 2)Name or service not known: [client 144.76.19.72:50448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:56:59.674402 2026] [ssl:error] [pid 3777996:tid 3777996] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:02.054596 2026] [access_compat:error] [pid 3778800:tid 3778800] [client 115.96.93.224:63824] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:02.600105 2026] [access_compat:error] [pid 3778072:tid 3778072] [client 45.158.164.139:36422] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:57:02.730875 2026] [ssl:error] [pid 3778565:tid 3778565] (EAI 2)Name or service not known: [client 144.76.19.72:50450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:02.730913 2026] [ssl:error] [pid 3778565:tid 3778565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:02.791363 2026] [ssl:error] [pid 3780946:tid 3780946] (EAI 2)Name or service not known: [client 144.76.19.72:50464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:02.791393 2026] [ssl:error] [pid 3780946:tid 3780946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:05.518743 2026] [cgi:error] [pid 3780186:tid 3780186] [client 20.104.22.47:64015] AH02812: stderr from /home/thelamb1/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:57:05.848789 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:50476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:05.848816 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:05.903794 2026] [ssl:error] [pid 3780187:tid 3780187] (EAI 2)Name or service not known: [client 144.76.19.72:50478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:05.903830 2026] [ssl:error] [pid 3780187:tid 3780187] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:06.816725 2026] [access_compat:error] [pid 3780187:tid 3780187] [client 115.96.93.224:64024] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:07.415472 2026] [security2:error] [pid 3780236:tid 3780236] [client 138.94.170.131:17106] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmQ3wobfS22YN4h7O-HAAAADI"]
[Thu Jul 30 15:57:07.415524 2026] [security2:error] [pid 3780236:tid 3780236] [client 138.94.170.131:17106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmQ3wobfS22YN4h7O-HAAAADI"]
[Thu Jul 30 15:57:07.415788 2026] [security2:error] [pid 3780236:tid 3780236] [client 138.94.170.131:17106] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmQ3wobfS22YN4h7O-HAAAADI"]
[Thu Jul 30 15:57:08.620356 2026] [ssl:error] [pid 3777996:tid 3777996] (70014)End of file found: [client 216.73.216.199:45603] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:08.962791 2026] [ssl:error] [pid 3777718:tid 3777718] (EAI 2)Name or service not known: [client 144.76.19.72:50488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:08.962823 2026] [ssl:error] [pid 3777718:tid 3777718] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:09.015477 2026] [ssl:error] [pid 3775579:tid 3775579] (EAI 2)Name or service not known: [client 144.76.19.72:50498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:09.015503 2026] [ssl:error] [pid 3775579:tid 3775579] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:09.521222 2026] [security2:error] [pid 3731180:tid 3731180] [client 101.32.201.248:37673] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmRZv-iPW7V1Uv8mFXugAAAEQ"]
[Thu Jul 30 15:57:09.521267 2026] [security2:error] [pid 3731180:tid 3731180] [client 101.32.201.248:37673] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmRZv-iPW7V1Uv8mFXugAAAEQ"]
[Thu Jul 30 15:57:09.521516 2026] [security2:error] [pid 3731180:tid 3731180] [client 101.32.201.248:37673] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmRZv-iPW7V1Uv8mFXugAAAEQ"]
[Thu Jul 30 15:57:10.438513 2026] [ssl:error] [pid 3780237:tid 3780237] (70014)End of file found: [client 216.73.216.199:41492] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:11.780224 2026] [access_compat:error] [pid 3780231:tid 3780231] [client 36.152.7.71:43854] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/
[Thu Jul 30 15:57:11.780329 2026] [access_compat:error] [pid 3780231:tid 3780231] [client 36.152.7.71:43854] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 15:57:12.070619 2026] [ssl:error] [pid 3782147:tid 3782147] (EAI 2)Name or service not known: [client 144.76.19.72:30738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:12.070656 2026] [ssl:error] [pid 3782147:tid 3782147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:12.128005 2026] [ssl:error] [pid 3777832:tid 3777832] (EAI 2)Name or service not known: [client 144.76.19.72:30748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:12.128040 2026] [ssl:error] [pid 3777832:tid 3777832] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:12.943598 2026] [security2:error] [pid 3772512:tid 3772512] [client 101.32.201.248:12083] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmSM5awrs_oAP5iMUiYQAAAB8"]
[Thu Jul 30 15:57:12.943659 2026] [security2:error] [pid 3772512:tid 3772512] [client 101.32.201.248:12083] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmSM5awrs_oAP5iMUiYQAAAB8"]
[Thu Jul 30 15:57:12.943981 2026] [security2:error] [pid 3772512:tid 3772512] [client 101.32.201.248:12083] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmSM5awrs_oAP5iMUiYQAAAB8"]
[Thu Jul 30 15:57:13.152389 2026] [ssl:error] [pid 3772511:tid 3772511] (70014)End of file found: [client 216.73.216.199:63318] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:15.199257 2026] [ssl:error] [pid 3772437:tid 3772437] (EAI 2)Name or service not known: [client 144.76.19.72:30764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:15.199298 2026] [ssl:error] [pid 3772437:tid 3772437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:15.253629 2026] [ssl:error] [pid 3774709:tid 3774709] (EAI 2)Name or service not known: [client 144.76.19.72:30768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:15.253664 2026] [ssl:error] [pid 3774709:tid 3774709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:15.281856 2026] [ssl:error] [pid 3780141:tid 3780141] (70014)End of file found: [client 216.73.216.199:35943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:16.241301 2026] [ssl:error] [pid 3781015:tid 3781015] (70014)End of file found: [client 216.73.216.199:57729] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:16.543665 2026] [ssl:error] [pid 3771594:tid 3771594] (70014)End of file found: [client 216.73.216.199:64479] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:17.021368 2026] [authz_core:error] [pid 3778030:tid 3778030] [client 66.249.66.34:42655] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:57:17.024023 2026] [authz_core:error] [pid 3778030:tid 3778030] [client 66.249.66.34:42655] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:57:17.258624 2026] [ssl:error] [pid 3772437:tid 3772437] (70014)End of file found: [client 216.73.216.199:7418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:17.546721 2026] [access_compat:error] [pid 3775579:tid 3775579] [client 115.96.93.224:64558] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:18.309904 2026] [ssl:error] [pid 3778565:tid 3778565] (EAI 2)Name or service not known: [client 144.76.19.72:30780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:18.309940 2026] [ssl:error] [pid 3778565:tid 3778565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:18.363233 2026] [ssl:error] [pid 3780184:tid 3780184] (EAI 2)Name or service not known: [client 144.76.19.72:30784] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:18.363285 2026] [ssl:error] [pid 3780184:tid 3780184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:21.423004 2026] [ssl:error] [pid 3778565:tid 3778565] (EAI 2)Name or service not known: [client 144.76.19.72:63308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:21.423046 2026] [ssl:error] [pid 3778565:tid 3778565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:21.477536 2026] [ssl:error] [pid 3777761:tid 3777761] (EAI 2)Name or service not known: [client 144.76.19.72:63318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:21.477567 2026] [ssl:error] [pid 3777761:tid 3777761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:22.988988 2026] [ssl:error] [pid 3776985:tid 3776985] (70014)End of file found: [client 216.73.216.199:46419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:23.566672 2026] [access_compat:error] [pid 3780141:tid 3780141] [client 45.158.164.139:37538] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:57:23.670607 2026] [access_compat:error] [pid 3771594:tid 3771594] [client 115.96.93.224:64902] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:24.535950 2026] [ssl:error] [pid 3766991:tid 3766991] (EAI 2)Name or service not known: [client 144.76.19.72:63322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:24.535984 2026] [ssl:error] [pid 3766991:tid 3766991] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:24.591880 2026] [ssl:error] [pid 3780237:tid 3780237] (EAI 2)Name or service not known: [client 144.76.19.72:63330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:24.591917 2026] [ssl:error] [pid 3780237:tid 3780237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:24.899373 2026] [ssl:error] [pid 3774181:tid 3774181] (70014)End of file found: [client 216.73.216.199:11045] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:25.412527 2026] [ssl:error] [pid 3771751:tid 3771751] (70014)End of file found: [client 216.73.216.199:10355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:27.676040 2026] [ssl:error] [pid 3780141:tid 3780141] (EAI 2)Name or service not known: [client 144.76.19.72:63344] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:27.676108 2026] [ssl:error] [pid 3780141:tid 3780141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:27.731060 2026] [ssl:error] [pid 3778071:tid 3778071] (EAI 2)Name or service not known: [client 144.76.19.72:63348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:27.731110 2026] [ssl:error] [pid 3778071:tid 3778071] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:28.082786 2026] [access_compat:error] [pid 3778484:tid 3778484] [client 115.96.93.224:65090] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:28.343824 2026] [ssl:error] [pid 3778068:tid 3778068] (70014)End of file found: [client 216.73.216.199:55937] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:29.024315 2026] [security2:error] [pid 3780141:tid 3780141] [client 43.133.139.6:52772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "annawelshagent.com"] [uri "/"] [unique_id "amtmWeV_c6r9sp0Pm9AwSAAAAAs"]
[Thu Jul 30 15:57:30.762134 2026] [ssl:error] [pid 3778565:tid 3778565] (70014)End of file found: [client 216.73.216.199:44680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:30.837304 2026] [ssl:error] [pid 3774181:tid 3774181] (EAI 2)Name or service not known: [client 144.76.19.72:63418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:30.837333 2026] [ssl:error] [pid 3774181:tid 3774181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:30.892527 2026] [ssl:error] [pid 3772511:tid 3772511] (EAI 2)Name or service not known: [client 144.76.19.72:63434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:30.892554 2026] [ssl:error] [pid 3772511:tid 3772511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:31.766712 2026] [ssl:error] [pid 3778072:tid 3778072] (70014)End of file found: [client 216.73.216.199:17766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:33.950150 2026] [ssl:error] [pid 3783081:tid 3783081] (EAI 2)Name or service not known: [client 144.76.19.72:63438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:33.950179 2026] [ssl:error] [pid 3783081:tid 3783081] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:34.003391 2026] [ssl:error] [pid 3772511:tid 3772511] (EAI 2)Name or service not known: [client 144.76.19.72:63450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:34.003415 2026] [ssl:error] [pid 3772511:tid 3772511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:34.168874 2026] [ssl:error] [pid 3772437:tid 3772437] (70014)End of file found: [client 216.73.216.199:26187] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:34.202009 2026] [access_compat:error] [pid 3774181:tid 3774181] [client 115.96.93.224:65430] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:40.754395 2026] [ssl:error] [pid 3783290:tid 3783290] (EAI 2)Name or service not known: [client 144.76.19.72:63456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:40.754435 2026] [ssl:error] [pid 3783290:tid 3783290] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:41.260254 2026] [access_compat:error] [pid 3783179:tid 3783179] [client 115.96.93.224:49251] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:41.370176 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:20636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:41.370214 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:41.874001 2026] [security2:error] [pid 3776986:tid 3776986] [client 47.128.36.111:58012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amtmZS0OxQYb6ntLVFUFTgAAACc"]
[Thu Jul 30 15:57:42.006405 2026] [ssl:error] [pid 3780185:tid 3780185] (70014)End of file found: [client 216.73.216.199:60982] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:42.610040 2026] [core:error] [pid 3783289:tid 3783289] (13)Permission denied: [client 216.73.216.199:20217] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/ipt_REJECT/uevent
[Thu Jul 30 15:57:44.416308 2026] [core:error] [pid 3783289:tid 3783289] (13)Permission denied: [client 216.73.216.199:20217] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/intel_idle/uevent
[Thu Jul 30 15:57:44.456105 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:20648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:44.456140 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:44.507995 2026] [ssl:error] [pid 3783240:tid 3783240] (EAI 2)Name or service not known: [client 144.76.19.72:20650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:44.508024 2026] [ssl:error] [pid 3783240:tid 3783240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:44.508548 2026] [security2:error] [pid 3783237:tid 3783237] [client 185.191.171.13:12022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/alexandrian-text-corrupt"] [unique_id "amtmaF1SlJ1OYlDBjNQwWQAAADI"]
[Thu Jul 30 15:57:45.017798 2026] [ssl:error] [pid 3783289:tid 3783289] (70014)End of file found: [client 216.73.216.199:20217] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:46.758521 2026] [security2:error] [pid 3783237:tid 3783237] [client 85.208.96.209:24104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.2430.html"] [unique_id "amtmal1SlJ1OYlDBjNQwWgAAADI"]
[Thu Jul 30 15:57:46.977263 2026] [ssl:error] [pid 3783285:tid 3783285] (70014)End of file found: [client 216.73.216.199:56748] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:47.292029 2026] [authz_core:error] [pid 3783180:tid 3783180] [client 66.249.66.33:61440] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:57:47.294704 2026] [authz_core:error] [pid 3783180:tid 3783180] [client 66.249.66.33:61440] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:57:47.578483 2026] [ssl:error] [pid 3783179:tid 3783179] (EAI 2)Name or service not known: [client 144.76.19.72:20660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:47.578523 2026] [ssl:error] [pid 3783179:tid 3783179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:47.633240 2026] [ssl:error] [pid 3783281:tid 3783281] (EAI 2)Name or service not known: [client 144.76.19.72:20676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:47.633276 2026] [ssl:error] [pid 3783281:tid 3783281] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:48.950480 2026] [cgi:error] [pid 3771751:tid 3771751] [client 20.9.4.9:57587] AH02812: stderr from /home/ajowfeua/public_html/comicsuncovered/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:57:49.393837 2026] [access_compat:error] [pid 3783179:tid 3783179] [client 115.96.93.224:49797] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:49.669218 2026] [security2:error] [pid 3780946:tid 3780946] [client 114.119.135.136:24261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~26-8-2021"] [unique_id "amtmbaPuPzwVEXTpdruPcQAAAA8"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1627772400/cat_ids%7E18,102,14/request_format%7Ehtml
[Thu Jul 30 15:57:50.117234 2026] [security2:error] [pid 3776986:tid 3776986] [client 20.63.98.115:7264] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "markmitchell.org"] [uri "/wp-config.php"] [unique_id "amtmbi0OxQYb6ntLVFUFUAAAACc"]
[Thu Jul 30 15:57:50.117423 2026] [security2:error] [pid 3776986:tid 3776986] [client 20.63.98.115:7264] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchell.org"] [uri "/wp-config.php"] [unique_id "amtmbi0OxQYb6ntLVFUFUAAAACc"]
[Thu Jul 30 15:57:50.121466 2026] [security2:error] [pid 3776986:tid 3776986] [client 20.63.98.115:7264] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "markmitchell.org"] [uri "/index.php"] [unique_id "amtmbi0OxQYb6ntLVFUFUAAAACc"]
[Thu Jul 30 15:57:50.687613 2026] [ssl:error] [pid 3780185:tid 3780185] (EAI 2)Name or service not known: [client 144.76.19.72:42924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:50.687650 2026] [ssl:error] [pid 3780185:tid 3780185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:50.743766 2026] [ssl:error] [pid 3783233:tid 3783233] (EAI 2)Name or service not known: [client 144.76.19.72:42938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:50.743794 2026] [ssl:error] [pid 3783233:tid 3783233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:50.756368 2026] [access_compat:error] [pid 3783277:tid 3783277] [client 45.118.159.69:31102] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:51.751958 2026] [security2:error] [pid 3783280:tid 3783280] [client 114.119.135.136:24265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~26-8-2021"] [unique_id "amtmb_Le3xh7-HY8Bzk_xQAAAEE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Emonth/exact_date%7E1627772400/cat_ids%7E18,102,14/request_format%7Ehtml
[Thu Jul 30 15:57:52.091704 2026] [ssl:error] [pid 3778894:tid 3778894] (70014)End of file found: [client 216.73.216.199:37184] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:52.384507 2026] [authz_core:error] [pid 3771751:tid 3771751] [client 20.9.4.9:57587] AH01630: client denied by server configuration: /home/ajowfeua/public_html/comicsuncovered/php.ini
[Thu Jul 30 15:57:53.169241 2026] [core:error] [pid 3778028:tid 3778028] (13)Permission denied: [client 216.73.216.199:20526] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ip_fib_trie/cpu_partial
[Thu Jul 30 15:57:53.797631 2026] [ssl:error] [pid 3778074:tid 3778074] (EAI 2)Name or service not known: [client 144.76.19.72:42944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:53.797656 2026] [ssl:error] [pid 3778074:tid 3778074] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:53.850899 2026] [ssl:error] [pid 3783234:tid 3783234] (EAI 2)Name or service not known: [client 144.76.19.72:42960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:53.850936 2026] [ssl:error] [pid 3783234:tid 3783234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:55.107454 2026] [ssl:error] [pid 3778028:tid 3778028] (70014)End of file found: [client 216.73.216.199:20526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:55.408683 2026] [ssl:error] [pid 3776986:tid 3776986] (70014)End of file found: [client 216.73.216.199:28903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:57:55.569462 2026] [access_compat:error] [pid 3783283:tid 3783283] [client 115.96.93.224:50141] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:57:55.755832 2026] [autoindex:error] [pid 3783207:tid 3783207] [client 20.104.22.47:27215] AH01276: Cannot serve directory /home/uniquepr/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 15:57:55.928775 2026] [security2:error] [pid 3780187:tid 3780187] [client 150.109.119.38:58944] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ns-narvi.com"] [uri "/"] [unique_id "amtmc5QKScsr3AppFn0DzQAAABg"]
[Thu Jul 30 15:57:56.237572 2026] [security2:error] [pid 3768954:tid 3768954] [client 43.159.149.216:56524] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/"] [unique_id "amtmdAGvJIqSEaKyX68dNgAAACw"]
[Thu Jul 30 15:57:56.906762 2026] [ssl:error] [pid 3783291:tid 3783291] (EAI 2)Name or service not known: [client 144.76.19.72:42966] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:56.906806 2026] [ssl:error] [pid 3783291:tid 3783291] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:56.962048 2026] [ssl:error] [pid 3783278:tid 3783278] (EAI 2)Name or service not known: [client 144.76.19.72:42982] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:57:56.962091 2026] [ssl:error] [pid 3783278:tid 3783278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:57:57.704015 2026] [security2:error] [pid 3783179:tid 3783179] [client 43.159.149.216:57222] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterprojects.org"] [uri "/index.html"] [unique_id "amtmdffZ1HJbQCVssOuv3QAAAAo"], referer: http://www.shelterprojects.org
[Thu Jul 30 15:57:57.801627 2026] [authz_core:error] [pid 3783277:tid 3783277] [client 66.249.66.33:47620] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:57:57.804314 2026] [authz_core:error] [pid 3783277:tid 3783277] [client 66.249.66.33:47620] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:57:57.898483 2026] [cgi:error] [pid 3783207:tid 3783207] [client 20.104.22.47:27215] AH02812: stderr from /home/uniquepr/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:57:57.949434 2026] [security2:error] [pid 3780232:tid 3780232] [client 43.165.126.130:39522] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "edwardkensington.com"] [uri "/"] [unique_id "amtmdWl0NUHvwhEdCGgmbAAAACA"]
[Thu Jul 30 15:57:57.951998 2026] [core:crit] [pid 3780232:tid 3780232] (13)Permission denied: [client 43.165.126.130:39522] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 15:57:59.934159 2026] [ssl:error] [pid 3782147:tid 3782147] (70014)End of file found: [client 216.73.216.199:46594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:00.014242 2026] [ssl:error] [pid 3783286:tid 3783286] (EAI 2)Name or service not known: [client 144.76.19.72:19092] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:00.014271 2026] [ssl:error] [pid 3783286:tid 3783286] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:00.051658 2026] [access_compat:error] [pid 3774181:tid 3774181] [client 115.96.93.224:50338] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:00.097752 2026] [ssl:error] [pid 3783353:tid 3783353] (EAI 2)Name or service not known: [client 144.76.19.72:19108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:00.097789 2026] [ssl:error] [pid 3783353:tid 3783353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:00.836652 2026] [ssl:error] [pid 3783291:tid 3783291] (70014)End of file found: [client 216.73.216.199:33537] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:03.151818 2026] [ssl:error] [pid 3776985:tid 3776985] (EAI 2)Name or service not known: [client 144.76.19.72:19120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:03.151850 2026] [ssl:error] [pid 3776985:tid 3776985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:03.206612 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:19136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:03.206642 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:03.552574 2026] [ssl:error] [pid 3783236:tid 3783236] (70014)End of file found: [client 216.73.216.199:19720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:04.100554 2026] [security2:error] [pid 3783208:tid 3783208] [client 43.134.3.111:36004] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.soul-connections.net"] [uri "/"] [unique_id "amtmfCRIlfbE-jYku-14jQAAABA"]
[Thu Jul 30 15:58:06.182320 2026] [access_compat:error] [pid 3783208:tid 3783208] [client 115.96.93.224:50684] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:06.261538 2026] [ssl:error] [pid 3780184:tid 3780184] (EAI 2)Name or service not known: [client 144.76.19.72:19148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:06.261578 2026] [ssl:error] [pid 3780184:tid 3780184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:06.293631 2026] [ssl:error] [pid 3778068:tid 3778068] (70014)End of file found: [client 216.73.216.199:37837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:06.313277 2026] [ssl:error] [pid 3783284:tid 3783284] (EAI 2)Name or service not known: [client 144.76.19.72:19158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:06.313313 2026] [ssl:error] [pid 3783284:tid 3783284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:06.721118 2026] [access_compat:error] [pid 3783081:tid 3783081] [client 45.158.164.139:54730] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:58:07.548777 2026] [core:error] [pid 3777718:tid 3777718] [client 66.249.66.8:63601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:58:07.548813 2026] [core:error] [pid 3777718:tid 3777718] [client 66.249.66.8:63601] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:58:08.130901 2026] [ssl:error] [pid 3783353:tid 3783353] (70014)End of file found: [client 216.73.216.199:60286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:09.205038 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 20.52.125.110:5984] AH01630: client denied by server configuration: /home/georgeho/public_html/.tmb
[Thu Jul 30 15:58:09.366797 2026] [ssl:error] [pid 3776986:tid 3776986] (EAI 2)Name or service not known: [client 144.76.19.72:19170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:09.366827 2026] [ssl:error] [pid 3776986:tid 3776986] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:09.418532 2026] [ssl:error] [pid 3783234:tid 3783234] (EAI 2)Name or service not known: [client 144.76.19.72:19174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:09.418562 2026] [ssl:error] [pid 3783234:tid 3783234] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:09.436899 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 20.52.125.110:5984] AH01630: client denied by server configuration: /home/georgeho/public_html/.tmb
[Thu Jul 30 15:58:09.656396 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 20.52.125.110:5984] AH01630: client denied by server configuration: /home/georgeho/public_html/.tmb
[Thu Jul 30 15:58:09.837616 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 20.52.125.110:5984] AH01630: client denied by server configuration: /home/georgeho/public_html/.tmb
[Thu Jul 30 15:58:09.943216 2026] [ssl:error] [pid 3777761:tid 3777761] (70014)End of file found: [client 216.73.216.199:10138] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:10.208688 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 20.52.125.110:5984] AH01630: client denied by server configuration: /home/georgeho/public_html/.tmb
[Thu Jul 30 15:58:10.583876 2026] [authz_core:error] [pid 3780875:tid 3780875] [client 88.218.62.29:38004] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 15:58:10.754061 2026] [lsapi:warn] [pid 3785214:tid 3785214] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:58:10.805628 2026] [access_compat:error] [pid 3771751:tid 3771751] [client 115.96.93.224:50887] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:12.063795 2026] [ssl:error] [pid 3783279:tid 3783279] (70014)End of file found: [client 216.73.216.199:63219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:12.471184 2026] [ssl:error] [pid 3783406:tid 3783406] (EAI 2)Name or service not known: [client 144.76.19.72:46016] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:12.471219 2026] [ssl:error] [pid 3783406:tid 3783406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:12.526487 2026] [ssl:error] [pid 3772437:tid 3772437] (EAI 2)Name or service not known: [client 144.76.19.72:46022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:12.526529 2026] [ssl:error] [pid 3772437:tid 3772437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:12.776512 2026] [security2:error] [pid 3783278:tid 3783278] [client 43.155.27.244:60086] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "freakorgeek.com"] [uri "/"] [unique_id "amtmhI9F-enbGzjc3bzn2QAAAD8"]
[Thu Jul 30 15:58:13.458584 2026] [ssl:error] [pid 3785299:tid 3785299] (70014)End of file found: [client 216.73.216.199:31416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:15.277936 2026] [ssl:error] [pid 3783239:tid 3783239] (70014)End of file found: [client 216.73.216.199:51589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:15.579892 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:46026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:15.579925 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:15.634390 2026] [ssl:error] [pid 3783278:tid 3783278] (EAI 2)Name or service not known: [client 144.76.19.72:46030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:15.634425 2026] [ssl:error] [pid 3783278:tid 3783278] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:16.665040 2026] [authz_core:error] [pid 3780231:tid 3780231] [client 216.73.216.199:1872] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/thickbox/error_log
[Thu Jul 30 15:58:17.438704 2026] [security2:error] [pid 3783236:tid 3783236] [client 114.119.147.166:45231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "wmsfirearmstraining.com"] [uri "/robots.txt"] [unique_id "amtmiUQdsr9W08QZk2tEigAAADE"], referer: https://wmsfirearmstraining.com/robots.txt
[Thu Jul 30 15:58:17.833310 2026] [ssl:error] [pid 3783238:tid 3783238] (70014)End of file found: [client 216.73.216.199:34288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:18.687768 2026] [ssl:error] [pid 3783279:tid 3783279] (EAI 2)Name or service not known: [client 144.76.19.72:46046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:18.687818 2026] [ssl:error] [pid 3783279:tid 3783279] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:18.741592 2026] [ssl:error] [pid 3778068:tid 3778068] (EAI 2)Name or service not known: [client 144.76.19.72:46054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:18.741640 2026] [ssl:error] [pid 3778068:tid 3778068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:18.844328 2026] [ssl:error] [pid 3785251:tid 3785251] (70014)End of file found: [client 216.73.216.199:63472] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:19.754377 2026] [ssl:error] [pid 3785119:tid 3785119] (70014)End of file found: [client 216.73.216.199:49480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:19.767049 2026] [authz_core:error] [pid 3783284:tid 3783284] [client 66.249.66.33:56427] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:58:19.769717 2026] [authz_core:error] [pid 3783284:tid 3783284] [client 66.249.66.33:56427] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:58:19.860264 2026] [security2:error] [pid 3782147:tid 3782147] [client 185.191.171.2:19406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11191.0.html"] [unique_id "amtmi1V3eSnsDreNJLDVewAAAAM"]
[Thu Jul 30 15:58:20.201164 2026] [security2:error] [pid 3777761:tid 3777761] [client 88.186.224.61:34178] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmjFFWaTiTCJiNuavg5QAAABk"]
[Thu Jul 30 15:58:20.201223 2026] [security2:error] [pid 3777761:tid 3777761] [client 88.186.224.61:34178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmjFFWaTiTCJiNuavg5QAAABk"]
[Thu Jul 30 15:58:20.201487 2026] [security2:error] [pid 3777761:tid 3777761] [client 88.186.224.61:34178] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmjFFWaTiTCJiNuavg5QAAABk"]
[Thu Jul 30 15:58:20.541879 2026] [lsapi:warn] [pid 3783279:tid 3783279] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:58:21.427437 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 115.96.93.224:51430] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:21.447836 2026] [security2:error] [pid 3783236:tid 3783236] [client 114.119.147.166:38965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/robots.txt"] [unique_id "amtmjUQdsr9W08QZk2tEiwAAADE"], referer: https://wmsfirearmstraining.com/robots.txt
[Thu Jul 30 15:58:21.813718 2026] [security2:error] [pid 3783239:tid 3783239] [client 93.182.105.169:63220] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmjR4sCiw7UrevfIQ5sgAAADc"]
[Thu Jul 30 15:58:21.813765 2026] [security2:error] [pid 3783239:tid 3783239] [client 93.182.105.169:63220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmjR4sCiw7UrevfIQ5sgAAADc"]
[Thu Jul 30 15:58:21.814040 2026] [security2:error] [pid 3783239:tid 3783239] [client 93.182.105.169:63220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmjR4sCiw7UrevfIQ5sgAAADc"]
[Thu Jul 30 15:58:21.856785 2026] [ssl:error] [pid 3785298:tid 3785298] (EAI 2)Name or service not known: [client 144.76.19.72:45042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:21.856825 2026] [ssl:error] [pid 3785298:tid 3785298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:21.908965 2026] [ssl:error] [pid 3783208:tid 3783208] (EAI 2)Name or service not known: [client 144.76.19.72:45046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:21.909016 2026] [ssl:error] [pid 3783208:tid 3783208] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:23.281825 2026] [ssl:error] [pid 3783081:tid 3783081] (70014)End of file found: [client 216.73.216.199:44593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:23.398509 2026] [security2:error] [pid 3783208:tid 3783208] [client 85.208.96.194:57162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5593.0/prev_next,prev.html"] [unique_id "amtmjyRIlfbE-jYku-14kQAAABA"]
[Thu Jul 30 15:58:24.588093 2026] [ssl:error] [pid 3768954:tid 3768954] (70014)End of file found: [client 216.73.216.199:6542] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:24.965146 2026] [ssl:error] [pid 3783277:tid 3783277] (EAI 2)Name or service not known: [client 144.76.19.72:45048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:24.965185 2026] [ssl:error] [pid 3783277:tid 3783277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:25.020118 2026] [ssl:error] [pid 3777761:tid 3777761] (EAI 2)Name or service not known: [client 144.76.19.72:45050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:25.020143 2026] [ssl:error] [pid 3777761:tid 3777761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:25.177416 2026] [security2:error] [pid 3778072:tid 3778072] [client 154.57.223.63:35528] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmkRogDYn2UMk0Fr3V9gAAADo"]
[Thu Jul 30 15:58:25.177464 2026] [security2:error] [pid 3778072:tid 3778072] [client 154.57.223.63:35528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmkRogDYn2UMk0Fr3V9gAAADo"]
[Thu Jul 30 15:58:25.177721 2026] [security2:error] [pid 3778072:tid 3778072] [client 154.57.223.63:35528] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmkRogDYn2UMk0Fr3V9gAAADo"]
[Thu Jul 30 15:58:25.486560 2026] [ssl:error] [pid 3783236:tid 3783236] (70014)End of file found: [client 216.73.216.199:64806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:25.868801 2026] [cgi:error] [pid 3778028:tid 3778028] [client 20.104.22.47:64297] AH02812: stderr from /home/spampcou/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:58:26.031207 2026] [access_compat:error] [pid 3777195:tid 3777195] [client 63.32.193.127:47174] AH01797: client denied by server configuration: /home/candidejacobs/public_html/xmlrpc.php
[Thu Jul 30 15:58:26.124263 2026] [access_compat:error] [pid 3776986:tid 3776986] [client 45.158.164.139:42278] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:58:27.110556 2026] [ssl:error] [pid 3783284:tid 3783284] (70014)End of file found: [client 216.73.216.199:30551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:27.388521 2026] [ssl:error] [pid 3783277:tid 3783277] (70014)End of file found: [client 216.73.216.199:47725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:27.499301 2026] [access_compat:error] [pid 3783281:tid 3783281] [client 45.158.164.139:42312] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:58:27.506328 2026] [access_compat:error] [pid 3783240:tid 3783240] [client 115.96.93.224:51770] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:28.077799 2026] [ssl:error] [pid 3785119:tid 3785119] (EAI 2)Name or service not known: [client 144.76.19.72:45062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:28.077831 2026] [ssl:error] [pid 3785119:tid 3785119] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:28.102864 2026] [ssl:error] [pid 3778068:tid 3778068] (70014)End of file found: [client 216.73.216.199:9540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:28.132481 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:45068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:28.132507 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:31.081226 2026] [lsapi:warn] [pid 3783281:tid 3783281] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:58:31.188402 2026] [ssl:error] [pid 3783207:tid 3783207] (EAI 2)Name or service not known: [client 144.76.19.72:28762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:31.188436 2026] [ssl:error] [pid 3783207:tid 3783207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:31.243584 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:28778] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:31.243616 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:32.195497 2026] [access_compat:error] [pid 3783236:tid 3783236] [client 115.96.93.224:51974] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:33.303384 2026] [cgi:error] [pid 3780234:tid 3780234] [client 20.104.22.47:57174] AH02812: stderr from /home/markmitc/recklesselectricity.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:58:34.135791 2026] [ssl:error] [pid 3778030:tid 3778030] (70014)End of file found: [client 216.73.216.199:1245] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:34.295769 2026] [ssl:error] [pid 3783407:tid 3783407] (EAI 2)Name or service not known: [client 144.76.19.72:28790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:34.295817 2026] [ssl:error] [pid 3783407:tid 3783407] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:34.350666 2026] [ssl:error] [pid 3783277:tid 3783277] (EAI 2)Name or service not known: [client 144.76.19.72:28804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:34.350692 2026] [ssl:error] [pid 3783277:tid 3783277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:34.641770 2026] [ssl:error] [pid 3783207:tid 3783207] (70014)End of file found: [client 216.73.216.199:39630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:35.955360 2026] [security2:error] [pid 3778028:tid 3778028] [client 43.167.236.228:47784] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hugoashmore.org"] [uri "/"] [unique_id "amtmm-YP5vTFyPR1Y9MWmgAAADM"]
[Thu Jul 30 15:58:37.142254 2026] [ssl:error] [pid 3783280:tid 3783280] (70014)End of file found: [client 216.73.216.199:19046] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:37.404036 2026] [ssl:error] [pid 3778028:tid 3778028] (EAI 2)Name or service not known: [client 144.76.19.72:28820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:37.404077 2026] [ssl:error] [pid 3778028:tid 3778028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:37.457890 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:28828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:37.457944 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:38.360181 2026] [access_compat:error] [pid 3778028:tid 3778028] [client 115.96.93.224:52314] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:40.344111 2026] [ssl:error] [pid 3778030:tid 3778030] (70014)End of file found: [client 216.73.216.199:56421] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:40.361587 2026] [lsapi:warn] [pid 3783287:tid 3783287] [client 216.73.216.199:36998] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 15:58:40.361616 2026] [lsapi:error] [pid 3783287:tid 3783287] [client 216.73.216.199:36998] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-net-url/docs/6470.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 15:58:40.511952 2026] [ssl:error] [pid 3780141:tid 3780141] (EAI 2)Name or service not known: [client 144.76.19.72:52386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:40.511998 2026] [ssl:error] [pid 3780141:tid 3780141] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:40.565493 2026] [ssl:error] [pid 3783207:tid 3783207] (EAI 2)Name or service not known: [client 144.76.19.72:52398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:40.565526 2026] [ssl:error] [pid 3783207:tid 3783207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:41.363996 2026] [ssl:error] [pid 3778068:tid 3778068] (70014)End of file found: [client 216.73.216.199:47681] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:41.806177 2026] [lsapi:warn] [pid 3783277:tid 3783277] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:58:42.464298 2026] [ssl:error] [pid 3786479:tid 3786479] (70014)End of file found: [client 216.73.216.199:40329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:42.963757 2026] [access_compat:error] [pid 3783234:tid 3783234] [client 115.96.93.224:52511] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:43.423129 2026] [access_compat:error] [pid 3783277:tid 3783277] [client 45.118.159.69:31288] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:43.621636 2026] [ssl:error] [pid 3785296:tid 3785296] (EAI 2)Name or service not known: [client 144.76.19.72:52402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:43.621671 2026] [ssl:error] [pid 3785296:tid 3785296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:43.673992 2026] [ssl:error] [pid 3786480:tid 3786480] (EAI 2)Name or service not known: [client 144.76.19.72:52418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:43.674028 2026] [ssl:error] [pid 3786480:tid 3786480] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:45.767401 2026] [security2:error] [pid 3783353:tid 3783353] [client 216.73.216.199:45360] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/debuginfo-install.conf"] [unique_id "amtmpUE4cFpInUldlthK1QAAAE4"]
[Thu Jul 30 15:58:45.767663 2026] [security2:error] [pid 3783353:tid 3783353] [client 216.73.216.199:45360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/debuginfo-install.conf"] [unique_id "amtmpUE4cFpInUldlthK1QAAAE4"]
[Thu Jul 30 15:58:45.767886 2026] [security2:error] [pid 3783353:tid 3783353] [client 216.73.216.199:45360] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/dnf/plugins/debuginfo-install.conf"] [unique_id "amtmpUE4cFpInUldlthK1QAAAE4"]
[Thu Jul 30 15:58:45.953584 2026] [security2:error] [pid 3778028:tid 3778028] [client 185.191.171.2:50670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/nfl-combine-bench-press-worst"] [unique_id "amtmpeYP5vTFyPR1Y9MWnAAAADM"]
[Thu Jul 30 15:58:46.733099 2026] [ssl:error] [pid 3778028:tid 3778028] (EAI 2)Name or service not known: [client 144.76.19.72:52428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:46.733124 2026] [ssl:error] [pid 3778028:tid 3778028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:46.786255 2026] [ssl:error] [pid 3785298:tid 3785298] (EAI 2)Name or service not known: [client 144.76.19.72:52440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:46.786286 2026] [ssl:error] [pid 3785298:tid 3785298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:47.086820 2026] [ssl:error] [pid 3783353:tid 3783353] (70014)End of file found: [client 216.73.216.199:45360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:47.577270 2026] [ssl:error] [pid 3783406:tid 3783406] (70014)End of file found: [client 216.73.216.199:3513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:47.878213 2026] [ssl:error] [pid 3780234:tid 3780234] (70014)End of file found: [client 216.73.216.199:57298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:49.091499 2026] [security2:error] [pid 3783280:tid 3783280] [client 43.130.39.254:55464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sarahwiseman.co.uk"] [uri "/"] [unique_id "amtmqfLe3xh7-HY8Bzk_2QAAAEE"]
[Thu Jul 30 15:58:49.841481 2026] [ssl:error] [pid 3783277:tid 3783277] (EAI 2)Name or service not known: [client 144.76.19.72:52498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:49.841506 2026] [ssl:error] [pid 3783277:tid 3783277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:49.893530 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:52512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:49.893559 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:51.141898 2026] [security2:error] [pid 3785299:tid 3785299] [client 43.130.39.254:56820] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amtmq9R3mKDsydiaPIF9IgAAABw"], referer: http://www.sarahwiseman.co.uk
[Thu Jul 30 15:58:51.874924 2026] [security2:error] [pid 3786439:tid 3786439] [client 185.191.171.17:20324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6721.0.html"] [unique_id "amtmq7e8rPHN6IQAoAm8XQAAAAc"]
[Thu Jul 30 15:58:52.406143 2026] [ssl:error] [pid 3786439:tid 3786439] (70014)End of file found: [client 216.73.216.199:23493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:52.499691 2026] [lsapi:warn] [pid 3780232:tid 3780232] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:58:52.973319 2026] [ssl:error] [pid 3786773:tid 3786773] (EAI 2)Name or service not known: [client 144.76.19.72:52544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:52.973392 2026] [ssl:error] [pid 3786773:tid 3786773] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:53.080751 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:52546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:53.080796 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:53.526007 2026] [access_compat:error] [pid 3786318:tid 3786318] [client 115.96.93.224:53134] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:53.708314 2026] [core:error] [pid 3786773:tid 3786773] (13)Permission denied: [client 216.73.216.199:59010] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/cpu/devices/cpu2/node0/cpu3/crash_notes
[Thu Jul 30 15:58:54.311374 2026] [ssl:error] [pid 3786773:tid 3786773] (70014)End of file found: [client 216.73.216.199:59010] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:56.117014 2026] [ssl:error] [pid 3782147:tid 3782147] (70014)End of file found: [client 216.73.216.199:54913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:56.138857 2026] [ssl:error] [pid 3786360:tid 3786360] (EAI 2)Name or service not known: [client 144.76.19.72:52574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:56.138886 2026] [ssl:error] [pid 3786360:tid 3786360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:56.225449 2026] [ssl:error] [pid 3786921:tid 3786921] (EAI 2)Name or service not known: [client 144.76.19.72:52576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:56.225493 2026] [ssl:error] [pid 3786921:tid 3786921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:57.520376 2026] [cgi:error] [pid 3783209:tid 3783209] [client 20.9.4.9:26111] AH02812: stderr from /home/highcler/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:58:57.537988 2026] [ssl:error] [pid 3787078:tid 3787078] (70014)End of file found: [client 216.73.216.199:57226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:58.256768 2026] [ssl:error] [pid 3786921:tid 3786921] (70014)End of file found: [client 216.73.216.199:43042] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:58.909792 2026] [authz_core:error] [pid 3778072:tid 3778072] [client 66.249.66.33:45380] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:58:58.912465 2026] [authz_core:error] [pid 3778072:tid 3778072] [client 66.249.66.33:45380] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:58:59.037277 2026] [access_compat:error] [pid 3780141:tid 3780141] [client 20.106.184.92:62459] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:58:59.283482 2026] [ssl:error] [pid 3783284:tid 3783284] (EAI 2)Name or service not known: [client 144.76.19.72:52594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:59.283508 2026] [ssl:error] [pid 3783284:tid 3783284] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:59.341182 2026] [ssl:error] [pid 3780184:tid 3780184] (EAI 2)Name or service not known: [client 144.76.19.72:52596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:58:59.341232 2026] [ssl:error] [pid 3780184:tid 3780184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:58:59.456317 2026] [ssl:error] [pid 3785297:tid 3785297] (70014)End of file found: [client 216.73.216.199:59276] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:58:59.612701 2026] [access_compat:error] [pid 3786439:tid 3786439] [client 20.106.184.92:62490] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 15:58:59.714052 2026] [access_compat:error] [pid 3780234:tid 3780234] [client 115.96.93.224:53581] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:58:59.880839 2026] [authz_core:error] [pid 3786318:tid 3786318] [client 66.249.66.33:56014] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:58:59.883555 2026] [authz_core:error] [pid 3786318:tid 3786318] [client 66.249.66.33:56014] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:59:02.394554 2026] [ssl:error] [pid 3783407:tid 3783407] (EAI 2)Name or service not known: [client 144.76.19.72:20718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:02.394582 2026] [ssl:error] [pid 3783407:tid 3783407] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:02.445681 2026] [ssl:error] [pid 3776985:tid 3776985] (EAI 2)Name or service not known: [client 144.76.19.72:20722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:02.445707 2026] [ssl:error] [pid 3776985:tid 3776985] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:02.972516 2026] [ssl:error] [pid 3786923:tid 3786923] (70014)End of file found: [client 216.73.216.199:46837] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:03.523758 2026] [security2:error] [pid 3729127:tid 3729127] [client 103.166.59.98:59194] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmt4PmEr29eaWUJVP2jQAAAAg"]
[Thu Jul 30 15:59:03.523807 2026] [security2:error] [pid 3729127:tid 3729127] [client 103.166.59.98:59194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmt4PmEr29eaWUJVP2jQAAAAg"]
[Thu Jul 30 15:59:03.524063 2026] [security2:error] [pid 3729127:tid 3729127] [client 103.166.59.98:59194] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmt4PmEr29eaWUJVP2jQAAAAg"]
[Thu Jul 30 15:59:03.579006 2026] [lsapi:warn] [pid 3785251:tid 3785251] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:59:04.349544 2026] [access_compat:error] [pid 3783081:tid 3783081] [client 115.96.93.224:53868] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:05.181210 2026] [ssl:error] [pid 3787078:tid 3787078] (70014)End of file found: [client 216.73.216.199:54525] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:05.446786 2026] [security2:error] [pid 3780232:tid 3780232] [client 14.179.137.183:56898] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmuWl0NUHvwhEdCGgmrwAAACA"]
[Thu Jul 30 15:59:05.446849 2026] [security2:error] [pid 3780232:tid 3780232] [client 14.179.137.183:56898] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmuWl0NUHvwhEdCGgmrwAAACA"]
[Thu Jul 30 15:59:05.447180 2026] [security2:error] [pid 3780232:tid 3780232] [client 14.179.137.183:56898] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmuWl0NUHvwhEdCGgmrwAAACA"]
[Thu Jul 30 15:59:05.498990 2026] [ssl:error] [pid 3785299:tid 3785299] (EAI 2)Name or service not known: [client 144.76.19.72:20736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:05.499040 2026] [ssl:error] [pid 3785299:tid 3785299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:05.554080 2026] [ssl:error] [pid 3783236:tid 3783236] (EAI 2)Name or service not known: [client 144.76.19.72:20738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:05.554131 2026] [ssl:error] [pid 3783236:tid 3783236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:06.985052 2026] [ssl:error] [pid 3786479:tid 3786479] (70014)End of file found: [client 216.73.216.199:39714] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:07.326962 2026] [security2:error] [pid 3786921:tid 3786921] [client 170.106.180.246:52118] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amtmu-5hqIQJbchiUVqR-gAAACU"]
[Thu Jul 30 15:59:08.550492 2026] [security2:error] [pid 3781014:tid 3781014] [client 170.106.180.246:48900] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtmvNdRIE8Lr9zVvn17egAAAC0"], referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 15:59:08.552291 2026] [authz_core:error] [pid 3781014:tid 3781014] [client 170.106.180.246:48900] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 15:59:08.554948 2026] [authz_core:error] [pid 3781014:tid 3781014] [client 170.106.180.246:48900] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 15:59:08.610762 2026] [ssl:error] [pid 3786921:tid 3786921] (EAI 2)Name or service not known: [client 144.76.19.72:20750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:08.610810 2026] [ssl:error] [pid 3786921:tid 3786921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:08.665321 2026] [ssl:error] [pid 3780184:tid 3780184] (EAI 2)Name or service not known: [client 144.76.19.72:20754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:08.665360 2026] [ssl:error] [pid 3780184:tid 3780184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:09.923466 2026] [security2:error] [pid 3783287:tid 3783287] [client 113.190.145.91:51498] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmvcS_GdebJaTd-P_-OgAAAEg"]
[Thu Jul 30 15:59:09.923534 2026] [security2:error] [pid 3783287:tid 3783287] [client 113.190.145.91:51498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtmvcS_GdebJaTd-P_-OgAAAEg"]
[Thu Jul 30 15:59:09.923782 2026] [security2:error] [pid 3783287:tid 3783287] [client 113.190.145.91:51498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtmvcS_GdebJaTd-P_-OgAAAEg"]
[Thu Jul 30 15:59:10.046834 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 66.249.66.33:41974] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:59:10.049593 2026] [authz_core:error] [pid 3776985:tid 3776985] [client 66.249.66.33:41974] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:59:10.451981 2026] [access_compat:error] [pid 3783283:tid 3783283] [client 115.96.93.224:54253] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:10.595779 2026] [ssl:error] [pid 3786439:tid 3786439] (70014)End of file found: [client 216.73.216.199:60835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:10.979785 2026] [access_compat:error] [pid 3786773:tid 3786773] [client 45.158.164.139:59144] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 15:59:11.719960 2026] [ssl:error] [pid 3774181:tid 3774181] (EAI 2)Name or service not known: [client 144.76.19.72:45464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:11.719980 2026] [ssl:error] [pid 3774181:tid 3774181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:11.773429 2026] [ssl:error] [pid 3786922:tid 3786922] (EAI 2)Name or service not known: [client 144.76.19.72:45474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:11.773478 2026] [ssl:error] [pid 3786922:tid 3786922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:12.104543 2026] [ssl:error] [pid 3786889:tid 3786889] (70014)End of file found: [client 216.73.216.199:35165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:12.588624 2026] [ssl:error] [pid 3783240:tid 3783240] (70014)End of file found: [client 216.73.216.199:15122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:13.099904 2026] [security2:error] [pid 3783236:tid 3783236] [client 114.119.135.136:23593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1581897600/request_format~html/cat_ids~15"] [unique_id "amtmwUQdsr9W08QZk2tEnAAAADE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E17-2-2020
[Thu Jul 30 15:59:14.009147 2026] [lsapi:warn] [pid 3786361:tid 3786361] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:59:14.574844 2026] [security2:error] [pid 3783407:tid 3783407] [client 114.119.135.136:23595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1581897600/request_format~html/cat_ids~15"] [unique_id "amtmwiGB2ojc2aDJCk412gAAAE8"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E17-2-2020
[Thu Jul 30 15:59:14.830846 2026] [ssl:error] [pid 3787023:tid 3787023] (EAI 2)Name or service not known: [client 144.76.19.72:45486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:14.830882 2026] [ssl:error] [pid 3787023:tid 3787023] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:14.887517 2026] [ssl:error] [pid 3785296:tid 3785296] (EAI 2)Name or service not known: [client 144.76.19.72:45498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:14.887566 2026] [ssl:error] [pid 3785296:tid 3785296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:15.464359 2026] [access_compat:error] [pid 3778072:tid 3778072] [client 115.96.93.224:54505] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:16.018787 2026] [ssl:error] [pid 3783406:tid 3783406] (70014)End of file found: [client 216.73.216.199:11154] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:17.424051 2026] [ssl:error] [pid 3785299:tid 3785299] (70014)End of file found: [client 216.73.216.199:47491] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:17.943425 2026] [ssl:error] [pid 3783407:tid 3783407] (EAI 2)Name or service not known: [client 144.76.19.72:45514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:17.943453 2026] [ssl:error] [pid 3783407:tid 3783407] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:18.001048 2026] [ssl:error] [pid 3782147:tid 3782147] (EAI 2)Name or service not known: [client 144.76.19.72:45522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:18.001095 2026] [ssl:error] [pid 3782147:tid 3782147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:18.023534 2026] [ssl:error] [pid 3786922:tid 3786922] (70014)End of file found: [client 216.73.216.199:44817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:18.760276 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 191.232.199.39:24888] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.php
[Thu Jul 30 15:59:18.760398 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 191.232.199.39:24888] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.php5
[Thu Jul 30 15:59:18.760452 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 191.232.199.39:24888] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.pl
[Thu Jul 30 15:59:18.760547 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 191.232.199.39:24888] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.cgi
[Thu Jul 30 15:59:18.760620 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 191.232.199.39:24888] AH01797: client denied by server configuration: /home/prenicou/public_html/images/index.phtml
[Thu Jul 30 15:59:21.057585 2026] [ssl:error] [pid 3778030:tid 3778030] (EAI 2)Name or service not known: [client 144.76.19.72:37886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:21.057629 2026] [ssl:error] [pid 3778030:tid 3778030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:21.111432 2026] [ssl:error] [pid 3788127:tid 3788127] (EAI 2)Name or service not known: [client 144.76.19.72:37892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:21.111475 2026] [ssl:error] [pid 3788127:tid 3788127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:21.561897 2026] [access_compat:error] [pid 3778072:tid 3778072] [client 115.96.93.224:54828] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:21.751898 2026] [ssl:error] [pid 3778030:tid 3778030] (70014)End of file found: [client 216.73.216.199:59191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:23.258539 2026] [ssl:error] [pid 3780184:tid 3780184] (70014)End of file found: [client 216.73.216.199:25725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:24.161333 2026] [ssl:error] [pid 3783353:tid 3783353] (70014)End of file found: [client 216.73.216.199:6369] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:24.193677 2026] [ssl:error] [pid 3788127:tid 3788127] (EAI 2)Name or service not known: [client 144.76.19.72:37896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:24.193715 2026] [ssl:error] [pid 3788127:tid 3788127] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:24.252692 2026] [ssl:error] [pid 3781013:tid 3781013] (EAI 2)Name or service not known: [client 144.76.19.72:37906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:24.252725 2026] [ssl:error] [pid 3781013:tid 3781013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:24.507109 2026] [lsapi:warn] [pid 3783209:tid 3783209] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:59:26.278520 2026] [access_compat:error] [pid 3788127:tid 3788127] [client 115.96.93.224:55055] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:27.306249 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:37916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:27.306277 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:27.358609 2026] [ssl:error] [pid 3786439:tid 3786439] (EAI 2)Name or service not known: [client 144.76.19.72:37930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:27.358653 2026] [ssl:error] [pid 3786439:tid 3786439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:27.368937 2026] [ssl:error] [pid 3778068:tid 3778068] (70014)End of file found: [client 216.73.216.199:22582] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:28.875501 2026] [ssl:error] [pid 3783240:tid 3783240] (70014)End of file found: [client 216.73.216.199:32822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:29.496496 2026] [core:error] [pid 3786361:tid 3786361] [client 66.249.66.8:48057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:59:29.496533 2026] [core:error] [pid 3786361:tid 3786361] [client 66.249.66.8:48057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 15:59:29.681874 2026] [ssl:error] [pid 3783277:tid 3783277] (70014)End of file found: [client 216.73.216.199:35795] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:30.131254 2026] [security2:error] [pid 3786924:tid 3786924] [client 43.130.57.46:42114] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "pamporovoexpress.com"] [uri "/"] [unique_id "amtm0seJ4GkcDKK4wGbtZgAAADA"]
[Thu Jul 30 15:59:30.411176 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:27192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:30.411208 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:30.462817 2026] [ssl:error] [pid 3788180:tid 3788180] (EAI 2)Name or service not known: [client 144.76.19.72:27196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:30.462866 2026] [ssl:error] [pid 3788180:tid 3788180] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:31.474926 2026] [security2:error] [pid 3783238:tid 3783238] [client 43.130.57.46:57154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "pamporovoexpress.com"] [uri "/"] [unique_id "amtm063m7XXIDA_3dOcw1gAAADQ"], referer: http://pamporovoexpress.com
[Thu Jul 30 15:59:32.417582 2026] [authz_core:error] [pid 3786850:tid 3786850] [client 34.158.123.103:51079] AH01630: client denied by server configuration: /home/horusw/development.horus-wellbeing.co.uk/error_log
[Thu Jul 30 15:59:32.974326 2026] [security2:error] [pid 3778030:tid 3778030] [client 43.130.57.46:57938] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.pamporovoexpress.com"] [uri "/"] [unique_id "amtm1CJnblELdG3eWYlJngAAADU"], referer: https://pamporovoexpress.com/
[Thu Jul 30 15:59:33.399298 2026] [ssl:error] [pid 3783234:tid 3783234] (70014)End of file found: [client 216.73.216.199:51921] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:33.538391 2026] [ssl:error] [pid 3783283:tid 3783283] (EAI 2)Name or service not known: [client 144.76.19.72:27208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:33.538426 2026] [ssl:error] [pid 3783283:tid 3783283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:33.584224 2026] [access_compat:error] [pid 3786890:tid 3786890] [client 152.163.243.63:63374] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 15:59:33.594744 2026] [ssl:error] [pid 3786922:tid 3786922] (EAI 2)Name or service not known: [client 144.76.19.72:27224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:33.594777 2026] [ssl:error] [pid 3786922:tid 3786922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:35.074285 2026] [lsapi:warn] [pid 3786850:tid 3786850] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:59:36.652375 2026] [ssl:error] [pid 3783233:tid 3783233] (EAI 2)Name or service not known: [client 144.76.19.72:27240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:36.652425 2026] [ssl:error] [pid 3783233:tid 3783233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:36.706681 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:27242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:36.706713 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:36.931386 2026] [access_compat:error] [pid 3787078:tid 3787078] [client 115.96.93.224:55597] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:37.013819 2026] [ssl:error] [pid 3778068:tid 3778068] (70014)End of file found: [client 216.73.216.199:45722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:37.314714 2026] [ssl:error] [pid 3783283:tid 3783283] (70014)End of file found: [client 216.73.216.199:36909] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:39.125958 2026] [core:error] [pid 3783233:tid 3783233] (13)Permission denied: [client 216.73.216.199:52657] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/object_size
[Thu Jul 30 15:59:39.427626 2026] [ssl:error] [pid 3783233:tid 3783233] (70014)End of file found: [client 216.73.216.199:52657] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:39.760490 2026] [ssl:error] [pid 3783207:tid 3783207] (EAI 2)Name or service not known: [client 144.76.19.72:63182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:39.760534 2026] [ssl:error] [pid 3783207:tid 3783207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:39.813447 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:63196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:39.813485 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:42.276194 2026] [security2:error] [pid 3788179:tid 3788179] [client 47.128.47.76:63134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/robots.txt"] [unique_id "amtm3hGBLsU7mz6Jz1pCjwAAAAg"]
[Thu Jul 30 15:59:42.871154 2026] [ssl:error] [pid 3786922:tid 3786922] (EAI 2)Name or service not known: [client 144.76.19.72:63208] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:42.871186 2026] [ssl:error] [pid 3786922:tid 3786922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:42.925628 2026] [ssl:error] [pid 3778068:tid 3778068] (EAI 2)Name or service not known: [client 144.76.19.72:63222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:42.925656 2026] [ssl:error] [pid 3778068:tid 3778068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:43.028768 2026] [access_compat:error] [pid 3786479:tid 3786479] [client 115.96.93.224:55915] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:43.335834 2026] [ssl:error] [pid 3783236:tid 3783236] (70014)End of file found: [client 216.73.216.199:8944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:43.848569 2026] [authz_core:error] [pid 3785299:tid 3785299] [client 66.249.66.33:56212] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:59:43.853576 2026] [authz_core:error] [pid 3785299:tid 3785299] [client 66.249.66.33:56212] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:59:44.545462 2026] [ssl:error] [pid 3783284:tid 3783284] (70014)End of file found: [client 216.73.216.199:28875] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:45.449014 2026] [ssl:error] [pid 3786922:tid 3786922] (70014)End of file found: [client 216.73.216.199:28487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:45.622911 2026] [lsapi:warn] [pid 3783207:tid 3783207] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:59:45.982187 2026] [ssl:error] [pid 3778068:tid 3778068] (EAI 2)Name or service not known: [client 144.76.19.72:63236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:45.982220 2026] [ssl:error] [pid 3778068:tid 3778068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:46.034916 2026] [ssl:error] [pid 3783353:tid 3783353] (EAI 2)Name or service not known: [client 144.76.19.72:63242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:46.034949 2026] [ssl:error] [pid 3783353:tid 3783353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:46.439359 2026] [security2:error] [pid 3778068:tid 3778068] [client 185.191.171.18:36214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/jeffrey-rogers-arlington,-tx"] [unique_id "amtm4pvtSVSyQD37dBGRvgAAADY"]
[Thu Jul 30 15:59:47.635964 2026] [access_compat:error] [pid 3783238:tid 3783238] [client 115.96.93.224:56142] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:48.659046 2026] [ssl:error] [pid 3783353:tid 3783353] (70014)End of file found: [client 216.73.216.199:47010] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:49.094733 2026] [ssl:error] [pid 3783207:tid 3783207] (EAI 2)Name or service not known: [client 144.76.19.72:63244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:49.094766 2026] [ssl:error] [pid 3783207:tid 3783207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:49.151768 2026] [ssl:error] [pid 3783283:tid 3783283] (EAI 2)Name or service not known: [client 144.76.19.72:63248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:49.151799 2026] [ssl:error] [pid 3783283:tid 3783283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:50.106933 2026] [cgi:error] [pid 3783407:tid 3783407] [client 103.117.14.201:64385] AH02812: stderr from /home/minervamhaco/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://minervamha.co.uk
[Thu Jul 30 15:59:50.636521 2026] [access_compat:error] [pid 3777195:tid 3777195] [client 45.158.164.139:54680] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 15:59:50.870890 2026] [ssl:error] [pid 3783207:tid 3783207] (70014)End of file found: [client 216.73.216.199:60683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:51.361410 2026] [ssl:error] [pid 3786889:tid 3786889] (70014)End of file found: [client 216.73.216.199:27721] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:51.695200 2026] [security2:error] [pid 3783406:tid 3783406] [client 85.208.96.199:19742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9339.0/prev_next,next.html"] [unique_id "amtm55jvuffdHflr-7CJrQAAAAk"]
[Thu Jul 30 15:59:52.212727 2026] [ssl:error] [pid 3788179:tid 3788179] (EAI 2)Name or service not known: [client 144.76.19.72:27070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:52.212764 2026] [ssl:error] [pid 3788179:tid 3788179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:52.300711 2026] [ssl:error] [pid 3783407:tid 3783407] (EAI 2)Name or service not known: [client 144.76.19.72:27078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:52.300746 2026] [ssl:error] [pid 3783407:tid 3783407] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:53.760989 2026] [access_compat:error] [pid 3786922:tid 3786922] [client 115.96.93.224:56460] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:54.087783 2026] [core:error] [pid 3783280:tid 3783280] (13)Permission denied: [client 216.73.216.199:41739] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/cpu/devices/cpu2/node0/cpu0/crash_notes
[Thu Jul 30 15:59:54.991045 2026] [cgi:error] [pid 3768540:tid 3768540] [client 172.213.17.107:8689] AH02812: stderr from /home/jgqawffu/public_html/tyredandmotional.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 15:59:55.358021 2026] [authz_core:error] [pid 3783353:tid 3783353] [client 66.249.66.33:48960] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:59:55.360695 2026] [authz_core:error] [pid 3783353:tid 3783353] [client 66.249.66.33:48960] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:59:55.369589 2026] [authz_core:error] [pid 3785296:tid 3785296] [client 172.213.17.107:8563] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/l10n/error_log
[Thu Jul 30 15:59:55.383203 2026] [ssl:error] [pid 3786850:tid 3786850] (EAI 2)Name or service not known: [client 144.76.19.72:27094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:55.383283 2026] [ssl:error] [pid 3786850:tid 3786850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:55.439505 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:27106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:55.439536 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:55.451587 2026] [access_compat:error] [pid 3785296:tid 3785296] [client 172.213.17.107:8563] AH01797: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-content/uploads/ps_auto_sitemap/
[Thu Jul 30 15:59:55.696945 2026] [ssl:error] [pid 3783280:tid 3783280] (70014)End of file found: [client 216.73.216.199:41739] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:56.199712 2026] [lsapi:warn] [pid 3783236:tid 3783236] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 15:59:56.596429 2026] [ssl:error] [pid 3788179:tid 3788179] (70014)End of file found: [client 216.73.216.199:43489] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:57.695377 2026] [ssl:error] [pid 3786772:tid 3786772] (70014)End of file found: [client 216.73.216.199:54992] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 15:59:57.720624 2026] [authz_core:error] [pid 3783236:tid 3783236] [client 66.249.66.33:43069] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 15:59:57.723428 2026] [authz_core:error] [pid 3783236:tid 3783236] [client 66.249.66.33:43069] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 15:59:58.216231 2026] [cgi:error] [pid 3786850:tid 3786850] [client 136.226.167.4:18045] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 15:59:58.340122 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 115.96.93.224:56684] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 15:59:58.492960 2026] [ssl:error] [pid 3777195:tid 3777195] (EAI 2)Name or service not known: [client 144.76.19.72:27114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:58.493008 2026] [ssl:error] [pid 3777195:tid 3777195] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:58.544646 2026] [ssl:error] [pid 3778068:tid 3778068] (EAI 2)Name or service not known: [client 144.76.19.72:27126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 15:59:58.544673 2026] [ssl:error] [pid 3778068:tid 3778068] AH01941: stapling_renew_response: responder error
[Thu Jul 30 15:59:58.664877 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 45.118.159.69:31463] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:00.014160 2026] [authz_core:error] [pid 3785296:tid 3785296] [client 172.213.17.107:8563] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 16:00:00.940178 2026] [access_compat:error] [pid 3780234:tid 3780234] [client 47.236.199.168:60458] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2010/08/toy-story-3-3d.jpg
[Thu Jul 30 16:00:00.940288 2026] [access_compat:error] [pid 3780234:tid 3780234] [client 47.236.199.168:60458] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 16:00:01.403642 2026] [ssl:error] [pid 3778030:tid 3778030] (70014)End of file found: [client 216.73.216.199:1709] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:01.601538 2026] [ssl:error] [pid 3789807:tid 3789807] (EAI 2)Name or service not known: [client 144.76.19.72:54386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:01.601601 2026] [ssl:error] [pid 3789807:tid 3789807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:01.658278 2026] [ssl:error] [pid 3789809:tid 3789809] (EAI 2)Name or service not known: [client 144.76.19.72:54392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:01.658321 2026] [ssl:error] [pid 3789809:tid 3789809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:03.142270 2026] [ssl:error] [pid 3789808:tid 3789808] (70014)End of file found: [client 216.73.216.199:55804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:03.481972 2026] [authz_core:error] [pid 3785296:tid 3785296] [client 172.213.17.107:8563] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/assets/error_log
[Thu Jul 30 16:00:03.629933 2026] [ssl:error] [pid 3768954:tid 3768954] (70014)End of file found: [client 216.73.216.199:42811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:04.510901 2026] [lsapi:warn] [pid 3786889:tid 3786889] [client 185.70.168.100:62944] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 16:00:04.510948 2026] [lsapi:warn] [pid 3786889:tid 3786889] [client 185.70.168.100:62944] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 16:00:04.712549 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:54412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:04.712579 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:04.764323 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:54422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:04.764368 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:05.192248 2026] [security2:error] [pid 3771751:tid 3771751] [client 119.28.187.185:65243] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtm9QswRNrBkQcytMf0RQAAABQ"]
[Thu Jul 30 16:00:05.192299 2026] [security2:error] [pid 3771751:tid 3771751] [client 119.28.187.185:65243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtm9QswRNrBkQcytMf0RQAAABQ"]
[Thu Jul 30 16:00:05.192567 2026] [security2:error] [pid 3771751:tid 3771751] [client 119.28.187.185:65243] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtm9QswRNrBkQcytMf0RQAAABQ"]
[Thu Jul 30 16:00:06.931659 2026] [security2:error] [pid 3783209:tid 3783209] [client 43.166.253.94:35230] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "amtm9rXs07kQ0faNaCQs9wAAABY"]
[Thu Jul 30 16:00:07.152801 2026] [security2:error] [pid 3778068:tid 3778068] [client 43.166.174.77:44597] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtm95vtSVSyQD37dBGRxAAAADY"]
[Thu Jul 30 16:00:07.152875 2026] [security2:error] [pid 3778068:tid 3778068] [client 43.166.174.77:44597] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtm95vtSVSyQD37dBGRxAAAADY"]
[Thu Jul 30 16:00:07.153198 2026] [security2:error] [pid 3778068:tid 3778068] [client 43.166.174.77:44597] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtm95vtSVSyQD37dBGRxAAAADY"]
[Thu Jul 30 16:00:07.286663 2026] [lsapi:warn] [pid 3771751:tid 3771751] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:00:07.820170 2026] [ssl:error] [pid 3777761:tid 3777761] (EAI 2)Name or service not known: [client 144.76.19.72:54436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:07.820203 2026] [ssl:error] [pid 3777761:tid 3777761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:07.876369 2026] [ssl:error] [pid 3783285:tid 3783285] (EAI 2)Name or service not known: [client 144.76.19.72:54444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:07.876420 2026] [ssl:error] [pid 3783285:tid 3783285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:08.558406 2026] [ssl:error] [pid 3789723:tid 3789723] (70014)End of file found: [client 216.73.216.199:18322] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:09.467813 2026] [ssl:error] [pid 3780234:tid 3780234] (70014)End of file found: [client 216.73.216.199:19773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:09.526456 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 115.96.93.224:57242] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:10.231004 2026] [security2:error] [pid 3787078:tid 3787078] [client 119.28.177.175:48982] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amtm-lj0P7McP0Y7yQgslwAAADc"]
[Thu Jul 30 16:00:10.373523 2026] [core:crit] [pid 3768954:tid 3768954] (1)Operation not permitted: [client 216.73.216.199:23690] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/rpc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/rpc/' is executable
[Thu Jul 30 16:00:10.373769 2026] [core:crit] [pid 3768954:tid 3768954] (1)Operation not permitted: [client 216.73.216.199:23690] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/stat/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/stat/' is executable
[Thu Jul 30 16:00:10.374434 2026] [core:crit] [pid 3768954:tid 3768954] (1)Operation not permitted: [client 216.73.216.199:23690] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/dev_snmp6/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/dev_snmp6/' is executable
[Thu Jul 30 16:00:10.374541 2026] [core:crit] [pid 3768954:tid 3768954] (1)Operation not permitted: [client 216.73.216.199:23690] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/netfilter/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/net/netfilter/' is executable
[Thu Jul 30 16:00:10.934925 2026] [ssl:error] [pid 3783240:tid 3783240] (EAI 2)Name or service not known: [client 144.76.19.72:39560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:10.934959 2026] [ssl:error] [pid 3783240:tid 3783240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:10.965977 2026] [security2:error] [pid 3777761:tid 3777761] [client 43.166.174.77:10717] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtm-lFWaTiTCJiNuavhAwAAABk"]
[Thu Jul 30 16:00:10.966030 2026] [security2:error] [pid 3777761:tid 3777761] [client 43.166.174.77:10717] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtm-lFWaTiTCJiNuavhAwAAABk"]
[Thu Jul 30 16:00:10.966282 2026] [security2:error] [pid 3777761:tid 3777761] [client 43.166.174.77:10717] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtm-lFWaTiTCJiNuavhAwAAABk"]
[Thu Jul 30 16:00:10.973138 2026] [ssl:error] [pid 3768954:tid 3768954] (70014)End of file found: [client 216.73.216.199:23690] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:10.992545 2026] [ssl:error] [pid 3789808:tid 3789808] (EAI 2)Name or service not known: [client 144.76.19.72:39568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:10.992573 2026] [ssl:error] [pid 3789808:tid 3789808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:12.143401 2026] [lsapi:warn] [pid 3789808:tid 3789808] [client 185.70.168.100:61441] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 16:00:12.143449 2026] [lsapi:warn] [pid 3789808:tid 3789808] [client 185.70.168.100:61441] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 16:00:13.878290 2026] [ssl:error] [pid 3785251:tid 3785251] (70014)End of file found: [client 216.73.216.199:50269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:14.046473 2026] [ssl:error] [pid 3786922:tid 3786922] (EAI 2)Name or service not known: [client 144.76.19.72:39576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:14.046502 2026] [ssl:error] [pid 3786922:tid 3786922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:14.102643 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:39578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:14.102684 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:14.773022 2026] [ssl:error] [pid 3777195:tid 3777195] (70014)End of file found: [client 216.73.216.199:62764] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:15.674183 2026] [access_compat:error] [pid 3786479:tid 3786479] [client 115.96.93.224:57555] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:16.203176 2026] [access_compat:error] [pid 3787079:tid 3787079] [client 45.158.164.139:33466] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:00:16.302364 2026] [ssl:error] [pid 3778028:tid 3778028] (70014)End of file found: [client 216.73.216.199:47776] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:17.158451 2026] [ssl:error] [pid 3790528:tid 3790528] (EAI 2)Name or service not known: [client 144.76.19.72:39592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:17.158495 2026] [ssl:error] [pid 3790528:tid 3790528] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:17.210706 2026] [ssl:error] [pid 3786439:tid 3786439] (EAI 2)Name or service not known: [client 144.76.19.72:39594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:17.210740 2026] [ssl:error] [pid 3786439:tid 3786439] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:17.674498 2026] [lsapi:warn] [pid 3778068:tid 3778068] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:00:18.906524 2026] [authz_core:error] [pid 3783353:tid 3783353] [client 66.249.66.34:46749] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:00:18.909263 2026] [authz_core:error] [pid 3783353:tid 3783353] [client 66.249.66.34:46749] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:00:20.268674 2026] [ssl:error] [pid 3786921:tid 3786921] (EAI 2)Name or service not known: [client 144.76.19.72:61482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:20.268718 2026] [ssl:error] [pid 3786921:tid 3786921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:20.309635 2026] [ssl:error] [pid 3785214:tid 3785214] (70014)End of file found: [client 216.73.216.199:35845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:20.325085 2026] [ssl:error] [pid 3789772:tid 3789772] (EAI 2)Name or service not known: [client 144.76.19.72:61496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:20.325121 2026] [ssl:error] [pid 3789772:tid 3789772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:20.359024 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 115.96.93.224:57784] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:20.618285 2026] [ssl:error] [pid 3786772:tid 3786772] (70014)End of file found: [client 216.73.216.199:16192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:22.415745 2026] [ssl:error] [pid 3789772:tid 3789772] (70014)End of file found: [client 216.73.216.199:12482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:23.383599 2026] [ssl:error] [pid 3778028:tid 3778028] (EAI 2)Name or service not known: [client 144.76.19.72:61498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:23.383634 2026] [ssl:error] [pid 3778028:tid 3778028] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:23.490257 2026] [ssl:error] [pid 3788179:tid 3788179] (EAI 2)Name or service not known: [client 144.76.19.72:61512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:23.490291 2026] [ssl:error] [pid 3788179:tid 3788179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:24.266061 2026] [lsapi:warn] [pid 3777761:tid 3777761] [client 185.70.168.100:55494] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/contact/
[Thu Jul 30 16:00:24.266142 2026] [lsapi:warn] [pid 3777761:tid 3777761] [client 185.70.168.100:55494] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/contact/
[Thu Jul 30 16:00:26.403309 2026] [access_compat:error] [pid 3771751:tid 3771751] [client 115.96.93.224:58093] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:26.576252 2026] [ssl:error] [pid 3783280:tid 3783280] (EAI 2)Name or service not known: [client 144.76.19.72:61526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:26.576312 2026] [ssl:error] [pid 3783280:tid 3783280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:26.632554 2026] [ssl:error] [pid 3783280:tid 3783280] (EAI 2)Name or service not known: [client 144.76.19.72:61534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:26.632615 2026] [ssl:error] [pid 3783280:tid 3783280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:27.693178 2026] [lsapi:warn] [pid 3788179:tid 3788179] [client 185.70.168.100:62594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/
[Thu Jul 30 16:00:27.693240 2026] [lsapi:warn] [pid 3788179:tid 3788179] [client 185.70.168.100:62594] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/
[Thu Jul 30 16:00:27.975673 2026] [lsapi:warn] [pid 3789772:tid 3789772] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:00:28.123325 2026] [authz_core:error] [pid 3785296:tid 3785296] [client 172.213.17.107:8563] AH01630: client denied by server configuration: /home/jgqawffu/public_html/tyredandmotional.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 16:00:28.465329 2026] [core:error] [pid 3790467:tid 3790467] (13)Permission denied: [client 216.73.216.199:65429] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/subsystem/drivers/button/unbind
[Thu Jul 30 16:00:28.766246 2026] [ssl:error] [pid 3790467:tid 3790467] (70014)End of file found: [client 216.73.216.199:65429] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:29.680848 2026] [core:error] [pid 3778030:tid 3778030] (13)Permission denied: [client 216.73.216.199:57747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:59/subsystem/ttyS2/closing_wait
[Thu Jul 30 16:00:29.726914 2026] [ssl:error] [pid 3790530:tid 3790530] (EAI 2)Name or service not known: [client 144.76.19.72:62182] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:29.726951 2026] [ssl:error] [pid 3790530:tid 3790530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:29.797560 2026] [ssl:error] [pid 3790530:tid 3790530] (EAI 2)Name or service not known: [client 144.76.19.72:62194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:29.797586 2026] [ssl:error] [pid 3790530:tid 3790530] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:31.208668 2026] [access_compat:error] [pid 3789807:tid 3789807] [client 115.96.93.224:58315] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:32.390846 2026] [ssl:error] [pid 3778030:tid 3778030] (70014)End of file found: [client 216.73.216.199:57747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:32.854058 2026] [ssl:error] [pid 3771751:tid 3771751] (EAI 2)Name or service not known: [client 144.76.19.72:62198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:32.854097 2026] [ssl:error] [pid 3771751:tid 3771751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:32.910002 2026] [ssl:error] [pid 3791244:tid 3791244] (EAI 2)Name or service not known: [client 144.76.19.72:62212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:32.910030 2026] [ssl:error] [pid 3791244:tid 3791244] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:34.113735 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33166] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtnEtkNT--HdzZohm5obwAAACc"]
[Thu Jul 30 16:00:34.113907 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amtnEtkNT--HdzZohm5obwAAACc"]
[Thu Jul 30 16:00:34.114138 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnEtkNT--HdzZohm5obwAAACc"]
[Thu Jul 30 16:00:34.116109 2026] [security2:error] [pid 3786922:tid 3786922] [client 34.23.170.140:33164] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtnEqJZH60xwsVXRn-gnwAAACg"]
[Thu Jul 30 16:00:34.116239 2026] [security2:error] [pid 3786922:tid 3786922] [client 34.23.170.140:33164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amtnEqJZH60xwsVXRn-gnwAAACg"]
[Thu Jul 30 16:00:34.116426 2026] [security2:error] [pid 3786922:tid 3786922] [client 34.23.170.140:33164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnEqJZH60xwsVXRn-gnwAAACg"]
[Thu Jul 30 16:00:34.120081 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:33184] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtnErtJXbHO-2RzWE9jqgAAACo"]
[Thu Jul 30 16:00:34.120218 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:33184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amtnErtJXbHO-2RzWE9jqgAAACo"]
[Thu Jul 30 16:00:34.120417 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:33184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnErtJXbHO-2RzWE9jqgAAACo"]
[Thu Jul 30 16:00:34.427613 2026] [security2:error] [pid 3786479:tid 3786479] [client 34.23.170.140:33252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtnEnpwXygvVXWmi4_SMAAAAAw"]
[Thu Jul 30 16:00:34.427756 2026] [security2:error] [pid 3786479:tid 3786479] [client 34.23.170.140:33252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amtnEnpwXygvVXWmi4_SMAAAAAw"]
[Thu Jul 30 16:00:34.427961 2026] [security2:error] [pid 3786479:tid 3786479] [client 34.23.170.140:33252] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnEnpwXygvVXWmi4_SMAAAAAw"]
[Thu Jul 30 16:00:34.739159 2026] [core:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:34.739199 2026] [core:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6921] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:34.835480 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.157.43.147:50798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.co.uk"] [uri "/"] [unique_id "amtnEhdiGKNw_zw6DlyioQAAACs"]
[Thu Jul 30 16:00:35.149740 2026] [access_compat:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6853] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/this_is_a_new_hello_world.php
[Thu Jul 30 16:00:35.150090 2026] [core:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6853] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:35.423605 2026] [security2:error] [pid 3778028:tid 3778028] [client 34.23.170.140:33438] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtnE-YP5vTFyPR1Y9MWswAAADM"]
[Thu Jul 30 16:00:35.423799 2026] [security2:error] [pid 3778028:tid 3778028] [client 34.23.170.140:33438] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amtnE-YP5vTFyPR1Y9MWswAAADM"]
[Thu Jul 30 16:00:35.424015 2026] [security2:error] [pid 3778028:tid 3778028] [client 34.23.170.140:33438] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnE-YP5vTFyPR1Y9MWswAAADM"]
[Thu Jul 30 16:00:35.441509 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtnE9kNT--HdzZohm5odAAAACc"]
[Thu Jul 30 16:00:35.441699 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amtnE9kNT--HdzZohm5odAAAACc"]
[Thu Jul 30 16:00:35.441941 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnE9kNT--HdzZohm5odAAAACc"]
[Thu Jul 30 16:00:35.481050 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.157.43.147:54604] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtnExdiGKNw_zw6DlyiowAAACs"], referer: http://www.spampmusic.co.uk
[Thu Jul 30 16:00:35.567449 2026] [access_compat:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6912] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wicked.php
[Thu Jul 30 16:00:35.567791 2026] [core:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6912] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:35.613521 2026] [security2:error] [pid 3786889:tid 3786889] [client 34.23.170.140:33474] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtnE_mkdc40_Z9AnQ-7nQAAACE"]
[Thu Jul 30 16:00:35.613716 2026] [security2:error] [pid 3786889:tid 3786889] [client 34.23.170.140:33474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amtnE_mkdc40_Z9AnQ-7nQAAACE"]
[Thu Jul 30 16:00:35.613938 2026] [security2:error] [pid 3786889:tid 3786889] [client 34.23.170.140:33474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnE_mkdc40_Z9AnQ-7nQAAACE"]
[Thu Jul 30 16:00:35.730682 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33500] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtnE-r1lvbAWw9JY2ZemQAAAC0"]
[Thu Jul 30 16:00:35.730881 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amtnE-r1lvbAWw9JY2ZemQAAAC0"]
[Thu Jul 30 16:00:35.731152 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33500] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnE-r1lvbAWw9JY2ZemQAAAC0"]
[Thu Jul 30 16:00:35.740646 2026] [security2:error] [pid 3791554:tid 3791554] [client 34.23.170.140:33502] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtnE6MIf50FLZagH3JDoAAAAC8"]
[Thu Jul 30 16:00:35.740849 2026] [security2:error] [pid 3791554:tid 3791554] [client 34.23.170.140:33502] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amtnE6MIf50FLZagH3JDoAAAAC8"]
[Thu Jul 30 16:00:35.741111 2026] [security2:error] [pid 3791554:tid 3791554] [client 34.23.170.140:33502] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnE6MIf50FLZagH3JDoAAAAC8"]
[Thu Jul 30 16:00:35.752994 2026] [security2:error] [pid 3786850:tid 3786850] [client 34.23.170.140:33508] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtnEya9HPEXIhEoc0ihPQAAAB4"]
[Thu Jul 30 16:00:35.753181 2026] [security2:error] [pid 3786850:tid 3786850] [client 34.23.170.140:33508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amtnEya9HPEXIhEoc0ihPQAAAB4"]
[Thu Jul 30 16:00:35.753385 2026] [security2:error] [pid 3786850:tid 3786850] [client 34.23.170.140:33508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnEya9HPEXIhEoc0ihPQAAAB4"]
[Thu Jul 30 16:00:35.932479 2026] [security2:error] [pid 3783209:tid 3783209] [client 34.23.170.140:33524] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtnE7Xs07kQ0faNaCQtAAAAABY"]
[Thu Jul 30 16:00:35.932667 2026] [security2:error] [pid 3783209:tid 3783209] [client 34.23.170.140:33524] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amtnE7Xs07kQ0faNaCQtAAAAABY"]
[Thu Jul 30 16:00:35.932879 2026] [security2:error] [pid 3783209:tid 3783209] [client 34.23.170.140:33524] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnE7Xs07kQ0faNaCQtAAAAABY"]
[Thu Jul 30 16:00:35.956213 2026] [access_compat:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6916] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wpx.php
[Thu Jul 30 16:00:35.956608 2026] [core:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6916] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:35.969621 2026] [ssl:error] [pid 3786850:tid 3786850] (EAI 2)Name or service not known: [client 144.76.19.72:62214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:35.969648 2026] [ssl:error] [pid 3786850:tid 3786850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:36.025703 2026] [ssl:error] [pid 3790938:tid 3790938] (EAI 2)Name or service not known: [client 144.76.19.72:62228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:36.025743 2026] [ssl:error] [pid 3790938:tid 3790938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:36.036439 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33532] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtnFBGBLsU7mz6Jz1pCpQAAAAg"]
[Thu Jul 30 16:00:36.036631 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amtnFBGBLsU7mz6Jz1pCpQAAAAg"]
[Thu Jul 30 16:00:36.036787 2026] [security2:error] [pid 3777761:tid 3777761] [client 34.23.170.140:33548] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtnFFFWaTiTCJiNuavhEAAAABk"]
[Thu Jul 30 16:00:36.036822 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33532] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFBGBLsU7mz6Jz1pCpQAAAAg"]
[Thu Jul 30 16:00:36.036927 2026] [security2:error] [pid 3777761:tid 3777761] [client 34.23.170.140:33548] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amtnFFFWaTiTCJiNuavhEAAAABk"]
[Thu Jul 30 16:00:36.037131 2026] [security2:error] [pid 3777761:tid 3777761] [client 34.23.170.140:33548] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFFFWaTiTCJiNuavhEAAAABk"]
[Thu Jul 30 16:00:36.327738 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33606] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtnFNkNT--HdzZohm5odgAAACc"]
[Thu Jul 30 16:00:36.327888 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33606] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amtnFNkNT--HdzZohm5odgAAACc"]
[Thu Jul 30 16:00:36.328110 2026] [security2:error] [pid 3791243:tid 3791243] [client 34.23.170.140:33606] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFNkNT--HdzZohm5odgAAACc"]
[Thu Jul 30 16:00:36.328835 2026] [access_compat:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6967] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/images.php
[Thu Jul 30 16:00:36.329237 2026] [core:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6967] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:36.604271 2026] [ssl:error] [pid 3790530:tid 3790530] (70014)End of file found: [client 216.73.216.199:34526] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:36.711223 2026] [access_compat:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6913] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/1xmomo.php
[Thu Jul 30 16:00:36.711611 2026] [core:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6913] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:36.800987 2026] [security2:error] [pid 3788179:tid 3788179] [client 114.119.142.20:30633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579046400/cat_ids~15/request_format~html"] [unique_id "amtnFBGBLsU7mz6Jz1pCpwAAAAg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15/request_format~html
[Thu Jul 30 16:00:36.806200 2026] [authz_core:error] [pid 3785296:tid 3785296] [client 34.23.170.140:33676] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 16:00:36.815471 2026] [security2:error] [pid 3791554:tid 3791554] [client 34.23.170.140:33680] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtnFKMIf50FLZagH3JDowAAAC8"]
[Thu Jul 30 16:00:36.815755 2026] [security2:error] [pid 3791554:tid 3791554] [client 34.23.170.140:33680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amtnFKMIf50FLZagH3JDowAAAC8"]
[Thu Jul 30 16:00:36.815970 2026] [security2:error] [pid 3791554:tid 3791554] [client 34.23.170.140:33680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFKMIf50FLZagH3JDowAAAC8"]
[Thu Jul 30 16:00:37.095591 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.23.170.140:33732] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtnFYpXjGxiuuoHwvjRhgAAAA8"]
[Thu Jul 30 16:00:37.095810 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.23.170.140:33732] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amtnFYpXjGxiuuoHwvjRhgAAAA8"]
[Thu Jul 30 16:00:37.096020 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.23.170.140:33732] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFYpXjGxiuuoHwvjRhgAAAA8"]
[Thu Jul 30 16:00:37.106832 2026] [access_compat:error] [pid 3778028:tid 3778028] [client 20.197.178.120:6929] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/1revo.php
[Thu Jul 30 16:00:37.107465 2026] [core:error] [pid 3778028:tid 3778028] [client 20.197.178.120:6929] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:37.282878 2026] [access_compat:error] [pid 3791178:tid 3791178] [client 115.96.93.224:58628] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:37.474333 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33816] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtnFer1lvbAWw9JY2ZenAAAAC0"]
[Thu Jul 30 16:00:37.474533 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amtnFer1lvbAWw9JY2ZenAAAAC0"]
[Thu Jul 30 16:00:37.474729 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFer1lvbAWw9JY2ZenAAAAC0"]
[Thu Jul 30 16:00:37.521951 2026] [access_compat:error] [pid 3783240:tid 3783240] [client 20.197.178.120:6926] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/cong.php
[Thu Jul 30 16:00:37.522374 2026] [core:error] [pid 3783240:tid 3783240] [client 20.197.178.120:6926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:37.952112 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6946] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a.php
[Thu Jul 30 16:00:37.952483 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6946] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:38.019346 2026] [lsapi:warn] [pid 3785296:tid 3785296] [client 185.70.168.100:54089] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/welcome-to-team-brodie.html
[Thu Jul 30 16:00:38.019389 2026] [lsapi:warn] [pid 3785296:tid 3785296] [client 185.70.168.100:54089] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/welcome-to-team-brodie.html
[Thu Jul 30 16:00:38.265627 2026] [security2:error] [pid 3783287:tid 3783287] [client 34.23.170.140:33928] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtnFsS_GdebJaTd-P_-UwAAAEg"]
[Thu Jul 30 16:00:38.265906 2026] [security2:error] [pid 3783287:tid 3783287] [client 34.23.170.140:33928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amtnFsS_GdebJaTd-P_-UwAAAEg"]
[Thu Jul 30 16:00:38.266148 2026] [security2:error] [pid 3783287:tid 3783287] [client 34.23.170.140:33928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFsS_GdebJaTd-P_-UwAAAEg"]
[Thu Jul 30 16:00:38.281367 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33942] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtnFhGBLsU7mz6Jz1pCqAAAAAg"]
[Thu Jul 30 16:00:38.281639 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amtnFhGBLsU7mz6Jz1pCqAAAAAg"]
[Thu Jul 30 16:00:38.281833 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33942] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFhGBLsU7mz6Jz1pCqAAAAAg"]
[Thu Jul 30 16:00:38.300221 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33952] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtnFur1lvbAWw9JY2ZengAAAC0"]
[Thu Jul 30 16:00:38.300419 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33952] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amtnFur1lvbAWw9JY2ZengAAAC0"]
[Thu Jul 30 16:00:38.300606 2026] [security2:error] [pid 3791553:tid 3791553] [client 34.23.170.140:33952] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFur1lvbAWw9JY2ZengAAAC0"]
[Thu Jul 30 16:00:38.332352 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6918] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/srontol.php
[Thu Jul 30 16:00:38.332716 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:38.375227 2026] [security2:error] [pid 3783287:tid 3783287] [client 114.119.142.20:30647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1579046400/cat_ids~15/request_format~html"] [unique_id "amtnFsS_GdebJaTd-P_-VAAAAEg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1578960000/cat_ids~15/request_format~html
[Thu Jul 30 16:00:38.418287 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:33984] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtnFnnJJRotFi3yNEBfkgAAABU"]
[Thu Jul 30 16:00:38.418526 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:33984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amtnFnnJJRotFi3yNEBfkgAAABU"]
[Thu Jul 30 16:00:38.418742 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:33984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFnnJJRotFi3yNEBfkgAAABU"]
[Thu Jul 30 16:00:38.555599 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33996] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtnFhGBLsU7mz6Jz1pCqQAAAAg"]
[Thu Jul 30 16:00:38.555889 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amtnFhGBLsU7mz6Jz1pCqQAAAAg"]
[Thu Jul 30 16:00:38.556093 2026] [security2:error] [pid 3788179:tid 3788179] [client 34.23.170.140:33996] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFhGBLsU7mz6Jz1pCqQAAAAg"]
[Thu Jul 30 16:00:38.573113 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34012] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtnFsZ8Rc8WOczVVhFF6QAAADI"]
[Thu Jul 30 16:00:38.573304 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34012] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amtnFsZ8Rc8WOczVVhFF6QAAADI"]
[Thu Jul 30 16:00:38.573546 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34012] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFsZ8Rc8WOczVVhFF6QAAADI"]
[Thu Jul 30 16:00:38.583276 2026] [security2:error] [pid 3768954:tid 3768954] [client 34.23.170.140:34016] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtnFgGvJIqSEaKyX68dmQAAACw"]
[Thu Jul 30 16:00:38.583485 2026] [security2:error] [pid 3768954:tid 3768954] [client 34.23.170.140:34016] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amtnFgGvJIqSEaKyX68dmQAAACw"]
[Thu Jul 30 16:00:38.583689 2026] [security2:error] [pid 3768954:tid 3768954] [client 34.23.170.140:34016] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFgGvJIqSEaKyX68dmQAAACw"]
[Thu Jul 30 16:00:38.722244 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:34046] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtnFoBmN6T8I7kPWzpIyAAAAAE"]
[Thu Jul 30 16:00:38.722418 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:34046] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amtnFoBmN6T8I7kPWzpIyAAAAAE"]
[Thu Jul 30 16:00:38.722620 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:34046] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFoBmN6T8I7kPWzpIyAAAAAE"]
[Thu Jul 30 16:00:38.843716 2026] [access_compat:error] [pid 3791177:tid 3791177] [client 20.197.178.120:6860] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/reop3.php
[Thu Jul 30 16:00:38.844082 2026] [core:error] [pid 3791177:tid 3791177] [client 20.197.178.120:6860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:38.929022 2026] [security2:error] [pid 3791553:tid 3791553] [client 35.221.246.130:52408] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dream.robin64.co.uk"] [uri "/.git/config"] [unique_id "amtnFur1lvbAWw9JY2ZenwAAAC0"]
[Thu Jul 30 16:00:38.929166 2026] [security2:error] [pid 3791553:tid 3791553] [client 35.221.246.130:52408] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dream.robin64.co.uk"] [uri "/.git/config"] [unique_id "amtnFur1lvbAWw9JY2ZenwAAAC0"]
[Thu Jul 30 16:00:38.929465 2026] [security2:error] [pid 3791553:tid 3791553] [client 35.221.246.130:52408] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "dream.robin64.co.uk"] [uri "/.git/config"] [unique_id "amtnFur1lvbAWw9JY2ZenwAAAC0"]
[Thu Jul 30 16:00:38.939683 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:34080] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtnFgNeIzKfhL8ABsnKMAAAAAQ"]
[Thu Jul 30 16:00:38.939816 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:34080] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amtnFgNeIzKfhL8ABsnKMAAAAAQ"]
[Thu Jul 30 16:00:38.940000 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:34080] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnFgNeIzKfhL8ABsnKMAAAAAQ"]
[Thu Jul 30 16:00:38.943215 2026] [lsapi:warn] [pid 3785251:tid 3785251] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:00:39.049542 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34092] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtnF5jvuffdHflr-7CJvwAAAAk"]
[Thu Jul 30 16:00:39.049746 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amtnF5jvuffdHflr-7CJvwAAAAk"]
[Thu Jul 30 16:00:39.049958 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34092] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF5jvuffdHflr-7CJvwAAAAk"]
[Thu Jul 30 16:00:39.080179 2026] [ssl:error] [pid 3789807:tid 3789807] (EAI 2)Name or service not known: [client 144.76.19.72:62238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:39.080209 2026] [ssl:error] [pid 3789807:tid 3789807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:39.133566 2026] [ssl:error] [pid 3789808:tid 3789808] (EAI 2)Name or service not known: [client 144.76.19.72:62242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:39.133598 2026] [ssl:error] [pid 3789808:tid 3789808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:39.153938 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34104] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtnF8Z8Rc8WOczVVhFF6wAAADI"]
[Thu Jul 30 16:00:39.154406 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amtnF8Z8Rc8WOczVVhFF6wAAADI"]
[Thu Jul 30 16:00:39.154730 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34104] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF8Z8Rc8WOczVVhFF6wAAADI"]
[Thu Jul 30 16:00:39.254848 2026] [access_compat:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6972] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file5.php
[Thu Jul 30 16:00:39.255216 2026] [core:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6972] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:39.350441 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34146] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtnF5jvuffdHflr-7CJwAAAAAk"]
[Thu Jul 30 16:00:39.350636 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34146] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amtnF5jvuffdHflr-7CJwAAAAAk"]
[Thu Jul 30 16:00:39.350837 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34146] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF5jvuffdHflr-7CJwAAAAAk"]
[Thu Jul 30 16:00:39.439453 2026] [security2:error] [pid 3789808:tid 3789808] [client 34.23.170.140:34156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtnF_yGGXxU0B0BG_bauQAAABc"]
[Thu Jul 30 16:00:39.439665 2026] [security2:error] [pid 3789808:tid 3789808] [client 34.23.170.140:34156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amtnF_yGGXxU0B0BG_bauQAAABc"]
[Thu Jul 30 16:00:39.439868 2026] [security2:error] [pid 3789808:tid 3789808] [client 34.23.170.140:34156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF_yGGXxU0B0BG_bauQAAABc"]
[Thu Jul 30 16:00:39.464684 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34160] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtnF8Z8Rc8WOczVVhFF7AAAADI"]
[Thu Jul 30 16:00:39.464765 2026] [security2:error] [pid 3786924:tid 3786924] [client 34.23.170.140:34172] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtnF8eJ4GkcDKK4wGbtegAAADA"]
[Thu Jul 30 16:00:39.464935 2026] [security2:error] [pid 3786924:tid 3786924] [client 34.23.170.140:34172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amtnF8eJ4GkcDKK4wGbtegAAADA"]
[Thu Jul 30 16:00:39.464936 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amtnF8Z8Rc8WOczVVhFF7AAAADI"]
[Thu Jul 30 16:00:39.465148 2026] [security2:error] [pid 3786924:tid 3786924] [client 34.23.170.140:34172] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF8eJ4GkcDKK4wGbtegAAADA"]
[Thu Jul 30 16:00:39.467576 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:34160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF8Z8Rc8WOczVVhFF7AAAADI"]
[Thu Jul 30 16:00:39.520586 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:34182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtnF9ADcZIarOThWw9aogAAAB4"]
[Thu Jul 30 16:00:39.520808 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:34182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amtnF9ADcZIarOThWw9aogAAAB4"]
[Thu Jul 30 16:00:39.521056 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:34182] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF9ADcZIarOThWw9aogAAAB4"]
[Thu Jul 30 16:00:39.727862 2026] [access_compat:error] [pid 3786924:tid 3786924] [client 20.197.178.120:6917] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/domvf.php
[Thu Jul 30 16:00:39.728256 2026] [core:error] [pid 3786924:tid 3786924] [client 20.197.178.120:6917] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:39.732328 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:34196] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtnF3nJJRotFi3yNEBflQAAABU"]
[Thu Jul 30 16:00:39.732523 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:34196] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amtnF3nJJRotFi3yNEBflQAAABU"]
[Thu Jul 30 16:00:39.732709 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:34196] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF3nJJRotFi3yNEBflQAAABU"]
[Thu Jul 30 16:00:39.763136 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34210] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtnF5jvuffdHflr-7CJwQAAAAk"]
[Thu Jul 30 16:00:39.763328 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amtnF5jvuffdHflr-7CJwQAAAAk"]
[Thu Jul 30 16:00:39.763531 2026] [security2:error] [pid 3783406:tid 3783406] [client 34.23.170.140:34210] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF5jvuffdHflr-7CJwQAAAAk"]
[Thu Jul 30 16:00:39.935924 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:34230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtnF9ADcZIarOThWw9aowAAAB4"]
[Thu Jul 30 16:00:39.936119 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:34230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amtnF9ADcZIarOThWw9aowAAAB4"]
[Thu Jul 30 16:00:39.936320 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:34230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnF9ADcZIarOThWw9aowAAAB4"]
[Thu Jul 30 16:00:40.026842 2026] [security2:error] [pid 3790467:tid 3790467] [client 34.23.170.140:34238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtnGKMgflYOewVTY9NRNgAAAAI"]
[Thu Jul 30 16:00:40.026990 2026] [security2:error] [pid 3790467:tid 3790467] [client 34.23.170.140:34238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amtnGKMgflYOewVTY9NRNgAAAAI"]
[Thu Jul 30 16:00:40.027211 2026] [security2:error] [pid 3790467:tid 3790467] [client 34.23.170.140:34238] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGKMgflYOewVTY9NRNgAAAAI"]
[Thu Jul 30 16:00:40.111977 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:34264] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtnGHnJJRotFi3yNEBflgAAABU"]
[Thu Jul 30 16:00:40.112179 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:34264] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amtnGHnJJRotFi3yNEBflgAAABU"]
[Thu Jul 30 16:00:40.112387 2026] [security2:error] [pid 3789807:tid 3789807] [client 34.23.170.140:34264] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGHnJJRotFi3yNEBflgAAABU"]
[Thu Jul 30 16:00:40.255376 2026] [access_compat:error] [pid 3791815:tid 3791815] [client 20.197.178.120:6927] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/zero.php
[Thu Jul 30 16:00:40.255758 2026] [core:error] [pid 3791815:tid 3791815] [client 20.197.178.120:6927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:40.371325 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:34306] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtnGANeIzKfhL8ABsnKNAAAAAQ"]
[Thu Jul 30 16:00:40.371524 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:34306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amtnGANeIzKfhL8ABsnKNAAAAAQ"]
[Thu Jul 30 16:00:40.371716 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:34306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGANeIzKfhL8ABsnKNAAAAAQ"]
[Thu Jul 30 16:00:40.465400 2026] [security2:error] [pid 3771751:tid 3771751] [client 34.23.170.140:34320] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtnGAswRNrBkQcytMf0TwAAABQ"]
[Thu Jul 30 16:00:40.465589 2026] [security2:error] [pid 3771751:tid 3771751] [client 34.23.170.140:34320] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amtnGAswRNrBkQcytMf0TwAAABQ"]
[Thu Jul 30 16:00:40.465784 2026] [security2:error] [pid 3771751:tid 3771751] [client 34.23.170.140:34320] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGAswRNrBkQcytMf0TwAAABQ"]
[Thu Jul 30 16:00:40.672481 2026] [access_compat:error] [pid 3783287:tid 3783287] [client 20.197.178.120:6928] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/002.php
[Thu Jul 30 16:00:40.672829 2026] [core:error] [pid 3783287:tid 3783287] [client 20.197.178.120:6928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:40.687385 2026] [security2:error] [pid 3783406:tid 3783406] [client 43.153.58.28:35936] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtnGJjvuffdHflr-7CJxAAAAAk"]
[Thu Jul 30 16:00:40.773553 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:43244] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtnGNADcZIarOThWw9apQAAAB4"]
[Thu Jul 30 16:00:40.773847 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:43244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amtnGNADcZIarOThWw9apQAAAB4"]
[Thu Jul 30 16:00:40.774055 2026] [security2:error] [pid 3791815:tid 3791815] [client 34.23.170.140:43244] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGNADcZIarOThWw9apQAAAB4"]
[Thu Jul 30 16:00:41.158783 2026] [access_compat:error] [pid 3783353:tid 3783353] [client 20.197.178.120:6953] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/thoms.php
[Thu Jul 30 16:00:41.159385 2026] [core:error] [pid 3783353:tid 3783353] [client 20.197.178.120:6953] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:41.284035 2026] [security2:error] [pid 3780234:tid 3780234] [client 34.23.170.140:43348] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtnGYeIK7dGaUFiN9TIuwAAAC4"]
[Thu Jul 30 16:00:41.284199 2026] [security2:error] [pid 3780234:tid 3780234] [client 34.23.170.140:43348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amtnGYeIK7dGaUFiN9TIuwAAAC4"]
[Thu Jul 30 16:00:41.284412 2026] [security2:error] [pid 3780234:tid 3780234] [client 34.23.170.140:43348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGYeIK7dGaUFiN9TIuwAAAC4"]
[Thu Jul 30 16:00:41.569447 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:43382] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtnGYBmN6T8I7kPWzpIzQAAAAE"]
[Thu Jul 30 16:00:41.569642 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:43382] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtnGYBmN6T8I7kPWzpIzQAAAAE"]
[Thu Jul 30 16:00:41.569889 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:43382] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amtnGYBmN6T8I7kPWzpIzQAAAAE"]
[Thu Jul 30 16:00:41.570179 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:43382] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGYBmN6T8I7kPWzpIzQAAAAE"]
[Thu Jul 30 16:00:41.574954 2026] [access_compat:error] [pid 3789808:tid 3789808] [client 20.197.178.120:6915] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fi22.php
[Thu Jul 30 16:00:41.575375 2026] [core:error] [pid 3789808:tid 3789808] [client 20.197.178.120:6915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:41.975155 2026] [access_compat:error] [pid 3783353:tid 3783353] [client 115.96.93.224:58862] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:42.054234 2026] [core:error] [pid 3789808:tid 3789808] [client 20.197.178.120:6924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:42.054264 2026] [core:error] [pid 3789808:tid 3789808] [client 20.197.178.120:6924] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:42.144540 2026] [security2:error] [pid 3790467:tid 3790467] [client 34.23.170.140:43484] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtnGqMgflYOewVTY9NROgAAAAI"]
[Thu Jul 30 16:00:42.144910 2026] [security2:error] [pid 3790467:tid 3790467] [client 34.23.170.140:43484] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amtnGqMgflYOewVTY9NROgAAAAI"]
[Thu Jul 30 16:00:42.145138 2026] [security2:error] [pid 3790467:tid 3790467] [client 34.23.170.140:43484] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGqMgflYOewVTY9NROgAAAAI"]
[Thu Jul 30 16:00:42.154898 2026] [security2:error] [pid 3786921:tid 3786921] [client 34.23.170.140:43498] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtnGu5hqIQJbchiUVqSFgAAACU"]
[Thu Jul 30 16:00:42.155087 2026] [security2:error] [pid 3786921:tid 3786921] [client 34.23.170.140:43498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amtnGu5hqIQJbchiUVqSFgAAACU"]
[Thu Jul 30 16:00:42.155291 2026] [security2:error] [pid 3786921:tid 3786921] [client 34.23.170.140:43498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGu5hqIQJbchiUVqSFgAAACU"]
[Thu Jul 30 16:00:42.190320 2026] [ssl:error] [pid 3790939:tid 3790939] (EAI 2)Name or service not known: [client 144.76.19.72:41000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:42.190359 2026] [ssl:error] [pid 3790939:tid 3790939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:42.245112 2026] [ssl:error] [pid 3789723:tid 3789723] (EAI 2)Name or service not known: [client 144.76.19.72:41004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:42.245159 2026] [ssl:error] [pid 3789723:tid 3789723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:42.265577 2026] [security2:error] [pid 3783233:tid 3783233] [client 34.23.170.140:43510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtnGhpjuSajz7BfR8l-AAAAACQ"]
[Thu Jul 30 16:00:42.265992 2026] [security2:error] [pid 3783233:tid 3783233] [client 34.23.170.140:43510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amtnGhpjuSajz7BfR8l-AAAAACQ"]
[Thu Jul 30 16:00:42.266217 2026] [security2:error] [pid 3783233:tid 3783233] [client 34.23.170.140:43510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGhpjuSajz7BfR8l-AAAAACQ"]
[Thu Jul 30 16:00:42.367022 2026] [authz_core:error] [pid 3789807:tid 3789807] [client 66.249.66.33:61827] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:00:42.369821 2026] [authz_core:error] [pid 3789807:tid 3789807] [client 66.249.66.33:61827] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:00:42.428409 2026] [access_compat:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6930] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/82.php
[Thu Jul 30 16:00:42.428793 2026] [core:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:42.729203 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:43632] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtnGgNeIzKfhL8ABsnKNwAAAAQ"]
[Thu Jul 30 16:00:42.729376 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:43632] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amtnGgNeIzKfhL8ABsnKNwAAAAQ"]
[Thu Jul 30 16:00:42.729565 2026] [security2:error] [pid 3787880:tid 3787880] [client 34.23.170.140:43632] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGgNeIzKfhL8ABsnKNwAAAAQ"]
[Thu Jul 30 16:00:42.819474 2026] [access_compat:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6931] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sx.php
[Thu Jul 30 16:00:42.819831 2026] [core:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:42.862379 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:43654] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtnGrtJXbHO-2RzWE9jrgAAACo"]
[Thu Jul 30 16:00:42.862562 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:43654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amtnGrtJXbHO-2RzWE9jrgAAACo"]
[Thu Jul 30 16:00:42.862753 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:43654] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGrtJXbHO-2RzWE9jrgAAACo"]
[Thu Jul 30 16:00:42.939209 2026] [ssl:error] [pid 3791554:tid 3791554] (70014)End of file found: [client 216.73.216.199:6161] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:43.007881 2026] [security2:error] [pid 3785214:tid 3785214] [client 34.23.170.140:43674] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtnGzj2G5RVeD-Dmbkr2QAAAAo"]
[Thu Jul 30 16:00:43.008086 2026] [security2:error] [pid 3785214:tid 3785214] [client 34.23.170.140:43674] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amtnGzj2G5RVeD-Dmbkr2QAAAAo"]
[Thu Jul 30 16:00:43.008285 2026] [security2:error] [pid 3785214:tid 3785214] [client 34.23.170.140:43674] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnGzj2G5RVeD-Dmbkr2QAAAAo"]
[Thu Jul 30 16:00:43.015084 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:43688] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtnG4BmN6T8I7kPWzpI0AAAAAE"]
[Thu Jul 30 16:00:43.015215 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:43688] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amtnG4BmN6T8I7kPWzpI0AAAAAE"]
[Thu Jul 30 16:00:43.015418 2026] [security2:error] [pid 3789723:tid 3789723] [client 34.23.170.140:43688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnG4BmN6T8I7kPWzpI0AAAAAE"]
[Thu Jul 30 16:00:43.038515 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:43710] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtnG8Z8Rc8WOczVVhFF8wAAADI"]
[Thu Jul 30 16:00:43.038671 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:43710] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amtnG8Z8Rc8WOczVVhFF8wAAADI"]
[Thu Jul 30 16:00:43.038857 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:43710] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnG8Z8Rc8WOczVVhFF8wAAADI"]
[Thu Jul 30 16:00:43.270524 2026] [access_compat:error] [pid 3786921:tid 3786921] [client 20.197.178.120:6961] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/dex.php
[Thu Jul 30 16:00:43.270876 2026] [core:error] [pid 3786921:tid 3786921] [client 20.197.178.120:6961] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:43.440422 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:43774] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "studio.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtnG8Z8Rc8WOczVVhFF9AAAADI"]
[Thu Jul 30 16:00:43.440604 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:43774] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amtnG8Z8Rc8WOczVVhFF9AAAADI"]
[Thu Jul 30 16:00:43.440809 2026] [security2:error] [pid 3791690:tid 3791690] [client 34.23.170.140:43774] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnG8Z8Rc8WOczVVhFF9AAAADI"]
[Thu Jul 30 16:00:43.440848 2026] [ssl:error] [pid 3789723:tid 3789723] (70014)End of file found: [client 216.73.216.199:40929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:43.697090 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6865] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fpwch.php
[Thu Jul 30 16:00:43.697467 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6865] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:43.940653 2026] [security2:error] [pid 3786439:tid 3786439] [client 34.23.170.140:43886] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtnG7e8rPHN6IQAoAm8hAAAAAc"]
[Thu Jul 30 16:00:43.940854 2026] [security2:error] [pid 3786439:tid 3786439] [client 34.23.170.140:43886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amtnG7e8rPHN6IQAoAm8hAAAAAc"]
[Thu Jul 30 16:00:43.941052 2026] [security2:error] [pid 3786439:tid 3786439] [client 34.23.170.140:43886] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnG7e8rPHN6IQAoAm8hAAAAAc"]
[Thu Jul 30 16:00:44.011995 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:43890] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtnHLtJXbHO-2RzWE9jsQAAACo"]
[Thu Jul 30 16:00:44.012294 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:43890] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amtnHLtJXbHO-2RzWE9jsQAAACo"]
[Thu Jul 30 16:00:44.012492 2026] [security2:error] [pid 3791244:tid 3791244] [client 34.23.170.140:43890] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnHLtJXbHO-2RzWE9jsQAAACo"]
[Thu Jul 30 16:00:44.117965 2026] [access_compat:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6923] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/black.php
[Thu Jul 30 16:00:44.118332 2026] [core:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6923] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:44.500865 2026] [access_compat:error] [pid 3783238:tid 3783238] [client 20.197.178.120:6962] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/loader.php
[Thu Jul 30 16:00:44.501241 2026] [core:error] [pid 3783238:tid 3783238] [client 20.197.178.120:6962] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:44.811228 2026] [security2:error] [pid 3771751:tid 3771751] [client 34.23.170.140:44020] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "studio.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtnHAswRNrBkQcytMf0WAAAABQ"]
[Thu Jul 30 16:00:44.811444 2026] [security2:error] [pid 3771751:tid 3771751] [client 34.23.170.140:44020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "studio.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amtnHAswRNrBkQcytMf0WAAAABQ"]
[Thu Jul 30 16:00:44.811626 2026] [security2:error] [pid 3771751:tid 3771751] [client 34.23.170.140:44020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "studio.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amtnHAswRNrBkQcytMf0WAAAABQ"]
[Thu Jul 30 16:00:44.935900 2026] [access_compat:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6955] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file61.php
[Thu Jul 30 16:00:44.936259 2026] [core:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6955] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:45.300489 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:41010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:45.300518 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:45.355131 2026] [ssl:error] [pid 3789772:tid 3789772] (EAI 2)Name or service not known: [client 144.76.19.72:41024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:45.355157 2026] [ssl:error] [pid 3789772:tid 3789772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:45.362143 2026] [access_compat:error] [pid 3785296:tid 3785296] [client 20.197.178.120:6954] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-css.php
[Thu Jul 30 16:00:45.362472 2026] [core:error] [pid 3785296:tid 3785296] [client 20.197.178.120:6954] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:45.779887 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6850] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-blink.php
[Thu Jul 30 16:00:45.780273 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:46.233626 2026] [access_compat:error] [pid 3790872:tid 3790872] [client 20.197.178.120:6973] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/txets.php
[Thu Jul 30 16:00:46.233995 2026] [core:error] [pid 3790872:tid 3790872] [client 20.197.178.120:6973] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:46.623488 2026] [access_compat:error] [pid 3786924:tid 3786924] [client 20.197.178.120:6875] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/pucci.php
[Thu Jul 30 16:00:46.623828 2026] [core:error] [pid 3786924:tid 3786924] [client 20.197.178.120:6875] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:46.886441 2026] [security2:error] [pid 3791553:tid 3791553] [client 85.208.96.193:57374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/you-snooze-you-lose-similar-sayings"] [unique_id "amtnHur1lvbAWw9JY2ZeogAAAC0"]
[Thu Jul 30 16:00:47.175584 2026] [access_compat:error] [pid 3768540:tid 3768540] [client 20.197.178.120:6848] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xwpg.php
[Thu Jul 30 16:00:47.175931 2026] [core:error] [pid 3768540:tid 3768540] [client 20.197.178.120:6848] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:47.760938 2026] [access_compat:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6927] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ops.php
[Thu Jul 30 16:00:47.761305 2026] [core:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6927] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:48.180186 2026] [security2:error] [pid 3791177:tid 3791177] [client 185.191.171.9:20642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/robots.txt"] [unique_id "amtnIFqukbWmlvMPnpVK8QAAACA"]
[Thu Jul 30 16:00:48.256887 2026] [access_compat:error] [pid 3768954:tid 3768954] [client 20.197.178.120:6878] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/1.php
[Thu Jul 30 16:00:48.257281 2026] [core:error] [pid 3768954:tid 3768954] [client 20.197.178.120:6878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:48.414990 2026] [ssl:error] [pid 3791554:tid 3791554] (EAI 2)Name or service not known: [client 144.76.19.72:41028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:48.415026 2026] [ssl:error] [pid 3791554:tid 3791554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:48.471104 2026] [ssl:error] [pid 3785251:tid 3785251] (EAI 2)Name or service not known: [client 144.76.19.72:41044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:48.471145 2026] [ssl:error] [pid 3785251:tid 3785251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:48.840955 2026] [access_compat:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6960] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mac.php
[Thu Jul 30 16:00:48.841313 2026] [core:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6960] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:48.896945 2026] [lsapi:error] [pid 3783209:tid 3783209] [client 45.158.164.139:46352] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 131072 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/class-wp-recovery-mode.php on line 172\n, referer: https://demo.mjs-services.com/wp-cron.php?doing_wp_cron=1785423648.3364849090576171875000
[Thu Jul 30 16:00:48.921800 2026] [lsapi:error] [pid 3791815:tid 3791815] [client 63.135.161.163:37721] [host demo.mjs-services.com] Backend fatal error: PHP Fatal error:  Allowed memory size of 41943040 bytes exhausted (tried to allocate 20480 bytes) in /home/mjsser/demo.mjs-services.com/wp-includes/functions.php on line 4312\n
[Thu Jul 30 16:00:48.983826 2026] [ssl:error] [pid 3790467:tid 3790467] (70014)End of file found: [client 216.73.216.199:34298] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:48.986037 2026] [security2:error] [pid 3768540:tid 3768540] [client 85.208.96.199:21024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/lyricf-1970-001/"] [unique_id "amtnIPL20SIJHpMn0pI4NwAAAB0"]
[Thu Jul 30 16:00:49.327662 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:49.327694 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6862] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:49.558453 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:00:49.743078 2026] [access_compat:error] [pid 3791815:tid 3791815] [client 20.197.178.120:6970] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aa.php
[Thu Jul 30 16:00:49.743470 2026] [core:error] [pid 3791815:tid 3791815] [client 20.197.178.120:6970] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:49.892529 2026] [ssl:error] [pid 3786921:tid 3786921] (70014)End of file found: [client 216.73.216.199:14300] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:50.172958 2026] [access_compat:error] [pid 3791241:tid 3791241] [client 20.197.178.120:6936] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xyn.php
[Thu Jul 30 16:00:50.173413 2026] [core:error] [pid 3791241:tid 3791241] [client 20.197.178.120:6936] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:50.650312 2026] [access_compat:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6935] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-wp.php
[Thu Jul 30 16:00:50.650672 2026] [core:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:50.883092 2026] [security2:error] [pid 3786439:tid 3786439] [client 74.7.227.62:39074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "chateausaintjeannetorg.chateausaintjeannet.com"] [uri "/"] [unique_id "amtnIre8rPHN6IQAoAm8hgAAAAc"]
[Thu Jul 30 16:00:51.062820 2026] [access_compat:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6857] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aw.php
[Thu Jul 30 16:00:51.063212 2026] [core:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6857] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:51.505923 2026] [access_compat:error] [pid 3791815:tid 3791815] [client 20.197.178.120:6858] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/classwithtostring.php
[Thu Jul 30 16:00:51.506274 2026] [core:error] [pid 3791815:tid 3791815] [client 20.197.178.120:6858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:51.525537 2026] [ssl:error] [pid 3789723:tid 3789723] (EAI 2)Name or service not known: [client 144.76.19.72:61562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:51.525564 2026] [ssl:error] [pid 3789723:tid 3789723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:51.582881 2026] [ssl:error] [pid 3783406:tid 3783406] (EAI 2)Name or service not known: [client 144.76.19.72:61566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:51.582911 2026] [ssl:error] [pid 3783406:tid 3783406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:51.919447 2026] [access_compat:error] [pid 3790528:tid 3790528] [client 20.197.178.120:6966] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/yawa.php
[Thu Jul 30 16:00:51.919807 2026] [core:error] [pid 3790528:tid 3790528] [client 20.197.178.120:6966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:52.349719 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6882] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sym403.php
[Thu Jul 30 16:00:52.350401 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:52.499083 2026] [cgi:error] [pid 3791241:tid 3791241] [client 158.158.41.78:27641] AH02812: stderr from /home/jgqawffu/public_html/randomlearner.org.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:00:52.738578 2026] [core:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:52.738605 2026] [core:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:52.814125 2026] [access_compat:error] [pid 3789723:tid 3789723] [client 115.96.93.224:59405] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:53.145281 2026] [access_compat:error] [pid 3791178:tid 3791178] [client 20.197.178.120:6861] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/adminner.php
[Thu Jul 30 16:00:53.145642 2026] [core:error] [pid 3791178:tid 3791178] [client 20.197.178.120:6861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:53.508361 2026] [ssl:error] [pid 3783209:tid 3783209] (70014)End of file found: [client 216.73.216.199:4433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:53.533585 2026] [access_compat:error] [pid 3768540:tid 3768540] [client 20.197.178.120:6950] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/yup.php
[Thu Jul 30 16:00:53.533933 2026] [core:error] [pid 3768540:tid 3768540] [client 20.197.178.120:6950] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:53.910239 2026] [access_compat:error] [pid 3790528:tid 3790528] [client 20.197.178.120:7116] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/config.json.php
[Thu Jul 30 16:00:53.910647 2026] [core:error] [pid 3790528:tid 3790528] [client 20.197.178.120:7116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:54.294965 2026] [ssl:error] [pid 3791242:tid 3791242] (70014)End of file found: [client 216.73.216.199:42806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:54.340988 2026] [core:error] [pid 3790530:tid 3790530] [client 20.197.178.120:7125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:54.341019 2026] [core:error] [pid 3790530:tid 3790530] [client 20.197.178.120:7125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:54.636079 2026] [ssl:error] [pid 3790939:tid 3790939] (EAI 2)Name or service not known: [client 144.76.19.72:61572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:54.636106 2026] [ssl:error] [pid 3790939:tid 3790939] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:54.691868 2026] [ssl:error] [pid 3774181:tid 3774181] (EAI 2)Name or service not known: [client 144.76.19.72:61586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:54.691895 2026] [ssl:error] [pid 3774181:tid 3774181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:54.721116 2026] [access_compat:error] [pid 3791178:tid 3791178] [client 20.197.178.120:6919] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/2.php
[Thu Jul 30 16:00:54.721466 2026] [core:error] [pid 3791178:tid 3791178] [client 20.197.178.120:6919] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:55.161233 2026] [access_compat:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6881] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/f35.update.php
[Thu Jul 30 16:00:55.161581 2026] [core:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6881] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:55.469110 2026] [ssl:error] [pid 3790528:tid 3790528] (70014)End of file found: [client 216.73.216.199:46945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:55.624197 2026] [access_compat:error] [pid 3790530:tid 3790530] [client 20.197.178.120:6934] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/k.php
[Thu Jul 30 16:00:55.624542 2026] [core:error] [pid 3790530:tid 3790530] [client 20.197.178.120:6934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:56.009032 2026] [core:error] [pid 3774181:tid 3774181] [client 20.197.178.120:6863] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:56.009055 2026] [core:error] [pid 3774181:tid 3774181] [client 20.197.178.120:6863] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:56.340167 2026] [security2:error] [pid 3786921:tid 3786921] [client 51.68.111.215:27627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amtnKO5hqIQJbchiUVqSIgAAACU"]
[Thu Jul 30 16:00:56.413974 2026] [access_compat:error] [pid 3785251:tid 3785251] [client 20.197.178.120:7112] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/spadex.php
[Thu Jul 30 16:00:56.414329 2026] [core:error] [pid 3785251:tid 3785251] [client 20.197.178.120:7112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:56.415185 2026] [security2:error] [pid 3791553:tid 3791553] [client 51.68.111.215:15755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtnKOr1lvbAWw9JY2ZepgAAAC0"]
[Thu Jul 30 16:00:56.519857 2026] [security2:error] [pid 3790467:tid 3790467] [client 51.68.111.215:29679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/robots.txt"] [unique_id "amtnKKMgflYOewVTY9NRUwAAAAI"]
[Thu Jul 30 16:00:56.795609 2026] [access_compat:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6958] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mg.php
[Thu Jul 30 16:00:56.795960 2026] [core:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6958] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:57.312894 2026] [access_compat:error] [pid 3785251:tid 3785251] [client 20.197.178.120:6893] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fnstall.php
[Thu Jul 30 16:00:57.313253 2026] [core:error] [pid 3785251:tid 3785251] [client 20.197.178.120:6893] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:57.640445 2026] [security2:error] [pid 3786924:tid 3786924] [client 43.134.23.177:57562] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.martingriese.com"] [uri "/"] [unique_id "amtnKceJ4GkcDKK4wGbtgwAAADA"]
[Thu Jul 30 16:00:57.683389 2026] [access_compat:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6969] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ortasekerli1.php
[Thu Jul 30 16:00:57.683741 2026] [core:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6969] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:57.776686 2026] [ssl:error] [pid 3774181:tid 3774181] (EAI 2)Name or service not known: [client 144.76.19.72:61602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:57.776725 2026] [ssl:error] [pid 3774181:tid 3774181] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:57.829756 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:61612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:00:57.829781 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:00:58.082953 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 20.197.178.120:7109] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sump1.php
[Thu Jul 30 16:00:58.083319 2026] [core:error] [pid 3785214:tid 3785214] [client 20.197.178.120:7109] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:58.268266 2026] [lsapi:warn] [pid 3783240:tid 3783240] [client 185.70.168.100:56798] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/
[Thu Jul 30 16:00:58.268312 2026] [lsapi:warn] [pid 3783240:tid 3783240] [client 185.70.168.100:56798] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/
[Thu Jul 30 16:00:58.475568 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6968] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ops.php
[Thu Jul 30 16:00:58.475902 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6968] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:58.862830 2026] [access_compat:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6942] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-post-data.php
[Thu Jul 30 16:00:58.863195 2026] [core:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6942] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:58.991141 2026] [ssl:error] [pid 3783406:tid 3783406] (70014)End of file found: [client 216.73.216.199:41929] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:00:59.077674 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 115.96.93.224:59729] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:00:59.242145 2026] [access_compat:error] [pid 3783209:tid 3783209] [client 20.197.178.120:6963] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/root.php
[Thu Jul 30 16:00:59.242509 2026] [core:error] [pid 3783209:tid 3783209] [client 20.197.178.120:6963] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:59.476379 2026] [security2:error] [pid 3790872:tid 3790872] [client 18.205.127.11:4588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "unclaimedassets.co.uk"] [uri "/wp-content-677f/plugins/wp-external-links/images/ext-icons/ext-icon-16.png"] [unique_id "amtnK0sLlirtG12evz3zAAAAAAU"]
[Thu Jul 30 16:00:59.648976 2026] [access_compat:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6849] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/v543.php
[Thu Jul 30 16:00:59.649357 2026] [core:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6849] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:00:59.884479 2026] [ssl:error] [pid 3783209:tid 3783209] (70014)End of file found: [client 216.73.216.199:31425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:00.030475 2026] [access_compat:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6851] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sixxis.php
[Thu Jul 30 16:01:00.030881 2026] [core:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6851] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:00.147049 2026] [lsapi:warn] [pid 3791242:tid 3791242] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:01:00.468539 2026] [access_compat:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6872] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ip.php
[Thu Jul 30 16:01:00.468876 2026] [core:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:00.843322 2026] [access_compat:error] [pid 3790528:tid 3790528] [client 20.197.178.120:6951] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/kq1.php
[Thu Jul 30 16:01:00.843693 2026] [core:error] [pid 3790528:tid 3790528] [client 20.197.178.120:6951] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:00.848790 2026] [security2:error] [pid 3777761:tid 3777761] [client 43.155.140.157:59078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/"] [unique_id "amtnLFFWaTiTCJiNuavhHgAAABk"]
[Thu Jul 30 16:01:00.883514 2026] [ssl:error] [pid 3792946:tid 3792946] (EAI 2)Name or service not known: [client 144.76.19.72:31230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:00.883543 2026] [ssl:error] [pid 3792946:tid 3792946] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:00.940062 2026] [ssl:error] [pid 3789772:tid 3789772] (EAI 2)Name or service not known: [client 144.76.19.72:31246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:00.940101 2026] [ssl:error] [pid 3789772:tid 3789772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:01.209129 2026] [core:error] [pid 3790872:tid 3790872] (13)Permission denied: [client 216.73.216.199:28750] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/libexec/dbus-1/dbus-daemon-launch-helper
[Thu Jul 30 16:01:01.261313 2026] [core:error] [pid 3791242:tid 3791242] [client 20.197.178.120:6878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:01.261367 2026] [core:error] [pid 3791242:tid 3791242] [client 20.197.178.120:6878] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:01.420605 2026] [access_compat:error] [pid 3789772:tid 3789772] [client 2.189.5.162:39968] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:01:01.637881 2026] [access_compat:error] [pid 3791242:tid 3791242] [client 20.197.178.120:7118] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/h02ugyh.php
[Thu Jul 30 16:01:01.638251 2026] [core:error] [pid 3791242:tid 3791242] [client 20.197.178.120:7118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:01.817855 2026] [ssl:error] [pid 3790872:tid 3790872] (70014)End of file found: [client 216.73.216.199:28750] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:02.012921 2026] [access_compat:error] [pid 3791242:tid 3791242] [client 20.197.178.120:6939] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-temp.php
[Thu Jul 30 16:01:02.013312 2026] [core:error] [pid 3791242:tid 3791242] [client 20.197.178.120:6939] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:02.383948 2026] [security2:error] [pid 3789807:tid 3789807] [client 43.155.140.157:59892] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "amtnLnnJJRotFi3yNEBfnwAAABU"], referer: http://www.taylorshouse.com
[Thu Jul 30 16:01:02.386153 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:7124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:02.386175 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:7124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:02.799516 2026] [core:error] [pid 3783353:tid 3783353] [client 20.197.178.120:6949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:02.799546 2026] [core:error] [pid 3783353:tid 3783353] [client 20.197.178.120:6949] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:03.201501 2026] [core:error] [pid 3793122:tid 3793122] [client 20.197.178.120:6864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:03.201549 2026] [core:error] [pid 3793122:tid 3793122] [client 20.197.178.120:6864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:03.582935 2026] [access_compat:error] [pid 3789807:tid 3789807] [client 20.197.178.120:6866] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/jj.php
[Thu Jul 30 16:01:03.583297 2026] [core:error] [pid 3789807:tid 3789807] [client 20.197.178.120:6866] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:03.607140 2026] [security2:error] [pid 3783353:tid 3783353] [client 43.155.140.157:60914] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "amtnL0E4cFpInUldlthLHAAAAE4"], referer: http://www.taylorshouse.com/home
[Thu Jul 30 16:01:03.661012 2026] [security2:error] [pid 3791241:tid 3791241] [client 43.153.102.138:45168] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtnLzhQogV9dYcHprtkUAAAACM"], referer: http://www.banskoexpress.net
[Thu Jul 30 16:01:03.750876 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 115.96.93.224:59961] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:03.995773 2026] [ssl:error] [pid 3789807:tid 3789807] (EAI 2)Name or service not known: [client 144.76.19.72:31248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:03.995808 2026] [ssl:error] [pid 3789807:tid 3789807] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:04.013601 2026] [access_compat:error] [pid 3783236:tid 3783236] [client 20.197.178.120:6909] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/class-walker-footer-dev.php
[Thu Jul 30 16:01:04.013955 2026] [core:error] [pid 3783236:tid 3783236] [client 20.197.178.120:6909] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:04.047551 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:31264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:04.047594 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:04.259119 2026] [access_compat:error] [pid 3786772:tid 3786772] [client 45.158.164.139:53438] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:01:04.407356 2026] [access_compat:error] [pid 3783236:tid 3783236] [client 20.197.178.120:7123] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xpwer1.php
[Thu Jul 30 16:01:04.407706 2026] [core:error] [pid 3783236:tid 3783236] [client 20.197.178.120:7123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:04.449886 2026] [ssl:error] [pid 3791243:tid 3791243] (70014)End of file found: [client 216.73.216.199:9299] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:04.780126 2026] [access_compat:error] [pid 3783353:tid 3783353] [client 20.197.178.120:7111] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/flox.php
[Thu Jul 30 16:01:04.780489 2026] [core:error] [pid 3783353:tid 3783353] [client 20.197.178.120:7111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:04.935631 2026] [security2:error] [pid 3793229:tid 3793229] [client 43.153.102.138:56154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtnMJsAWq194giJaKCdDgAAADk"], referer: http://www.banskoexpress.com
[Thu Jul 30 16:01:05.085495 2026] [security2:error] [pid 3772074:tid 3772074] [client 43.155.140.157:33722] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "amtnMde4PN_-eHbnVlrnGQAAABI"], referer: http://www.taylorshouse.com/home/
[Thu Jul 30 16:01:05.157777 2026] [access_compat:error] [pid 3783236:tid 3783236] [client 20.197.178.120:6945] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/popo.php
[Thu Jul 30 16:01:05.158139 2026] [core:error] [pid 3783236:tid 3783236] [client 20.197.178.120:6945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:05.543970 2026] [access_compat:error] [pid 3786772:tid 3786772] [client 20.197.178.120:6896] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/yas.php
[Thu Jul 30 16:01:05.544322 2026] [core:error] [pid 3786772:tid 3786772] [client 20.197.178.120:6896] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:05.915092 2026] [access_compat:error] [pid 3783236:tid 3783236] [client 20.197.178.120:6855] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/water.php
[Thu Jul 30 16:01:05.915444 2026] [core:error] [pid 3783236:tid 3783236] [client 20.197.178.120:6855] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:06.288212 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6957] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/nano.php
[Thu Jul 30 16:01:06.288645 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6957] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:06.681431 2026] [access_compat:error] [pid 3793229:tid 3793229] [client 20.197.178.120:7143] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/moon.php
[Thu Jul 30 16:01:06.681790 2026] [core:error] [pid 3793229:tid 3793229] [client 20.197.178.120:7143] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:06.682508 2026] [ssl:error] [pid 3785214:tid 3785214] (70014)End of file found: [client 216.73.216.199:35562] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:07.062481 2026] [access_compat:error] [pid 3791102:tid 3791102] [client 20.197.178.120:7137] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-info.php
[Thu Jul 30 16:01:07.062829 2026] [core:error] [pid 3791102:tid 3791102] [client 20.197.178.120:7137] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:07.158730 2026] [ssl:error] [pid 3790467:tid 3790467] (EAI 2)Name or service not known: [client 144.76.19.72:31280] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:07.158777 2026] [ssl:error] [pid 3790467:tid 3790467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:07.169087 2026] [ssl:error] [pid 3786921:tid 3786921] (70014)End of file found: [client 216.73.216.199:17079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:07.212561 2026] [ssl:error] [pid 3783236:tid 3783236] (EAI 2)Name or service not known: [client 144.76.19.72:31292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:07.212621 2026] [ssl:error] [pid 3783236:tid 3783236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:07.442362 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6870] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file5.php
[Thu Jul 30 16:01:07.442853 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:07.815479 2026] [access_compat:error] [pid 3792946:tid 3792946] [client 20.197.178.120:6914] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/2000.php
[Thu Jul 30 16:01:07.815868 2026] [core:error] [pid 3792946:tid 3792946] [client 20.197.178.120:6914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:08.188525 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6974] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/122.php
[Thu Jul 30 16:01:08.188880 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6974] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:08.577921 2026] [access_compat:error] [pid 3791102:tid 3791102] [client 20.197.178.120:6944] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mds.php
[Thu Jul 30 16:01:08.578634 2026] [core:error] [pid 3791102:tid 3791102] [client 20.197.178.120:6944] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:08.958927 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 20.197.178.120:7046] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/zc-208.php
[Thu Jul 30 16:01:08.959327 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:7046] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:09.336220 2026] [access_compat:error] [pid 3789772:tid 3789772] [client 20.197.178.120:6892] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sid4.php
[Thu Jul 30 16:01:09.336597 2026] [core:error] [pid 3789772:tid 3789772] [client 20.197.178.120:6892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:09.711114 2026] [core:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:09.711142 2026] [core:error] [pid 3789723:tid 3789723] [client 20.197.178.120:6920] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:09.798515 2026] [access_compat:error] [pid 3793122:tid 3793122] [client 115.96.93.224:60268] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:10.085762 2026] [access_compat:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6941] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wmore1.php
[Thu Jul 30 16:01:10.086152 2026] [core:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6941] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:10.268915 2026] [ssl:error] [pid 3783285:tid 3783285] (EAI 2)Name or service not known: [client 144.76.19.72:55376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:10.268963 2026] [ssl:error] [pid 3783285:tid 3783285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:10.292838 2026] [lsapi:warn] [pid 3793003:tid 3793003] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:01:10.295405 2026] [ssl:error] [pid 3791102:tid 3791102] (70014)End of file found: [client 216.73.216.199:17753] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:10.326391 2026] [ssl:error] [pid 3783240:tid 3783240] (EAI 2)Name or service not known: [client 144.76.19.72:55388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:10.326422 2026] [ssl:error] [pid 3783240:tid 3783240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:10.494695 2026] [access_compat:error] [pid 3783236:tid 3783236] [client 20.197.178.120:7132] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/solo1.php
[Thu Jul 30 16:01:10.495046 2026] [core:error] [pid 3783236:tid 3783236] [client 20.197.178.120:7132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:10.888813 2026] [core:error] [pid 3791243:tid 3791243] [client 20.197.178.120:7148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:10.888842 2026] [core:error] [pid 3791243:tid 3791243] [client 20.197.178.120:7148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:11.267486 2026] [core:error] [pid 3791177:tid 3791177] [client 20.197.178.120:7114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:11.267515 2026] [core:error] [pid 3791177:tid 3791177] [client 20.197.178.120:7114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:11.661389 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:11.661421 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:11.990495 2026] [ssl:error] [pid 3783406:tid 3783406] (70014)End of file found: [client 216.73.216.199:64134] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:12.057334 2026] [access_compat:error] [pid 3791242:tid 3791242] [client 20.197.178.120:6937] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/output.php
[Thu Jul 30 16:01:12.057761 2026] [core:error] [pid 3791242:tid 3791242] [client 20.197.178.120:6937] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:12.449387 2026] [access_compat:error] [pid 3791243:tid 3791243] [client 20.197.178.120:6852] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-file-120.php
[Thu Jul 30 16:01:12.449739 2026] [core:error] [pid 3791243:tid 3791243] [client 20.197.178.120:6852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:12.602685 2026] [ssl:error] [pid 3783209:tid 3783209] (70014)End of file found: [client 216.73.216.199:54323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:12.829978 2026] [core:error] [pid 3791177:tid 3791177] [client 20.197.178.120:6888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:12.830005 2026] [core:error] [pid 3791177:tid 3791177] [client 20.197.178.120:6888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:13.233165 2026] [access_compat:error] [pid 3793002:tid 3793002] [client 20.197.178.120:6900] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/as.php
[Thu Jul 30 16:01:13.233531 2026] [core:error] [pid 3793002:tid 3793002] [client 20.197.178.120:6900] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:13.381310 2026] [ssl:error] [pid 3768954:tid 3768954] (EAI 2)Name or service not known: [client 144.76.19.72:55402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:13.381354 2026] [ssl:error] [pid 3768954:tid 3768954] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:13.438572 2026] [ssl:error] [pid 3789808:tid 3789808] (EAI 2)Name or service not known: [client 144.76.19.72:55404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:13.438604 2026] [ssl:error] [pid 3789808:tid 3789808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:13.613459 2026] [core:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:13.613486 2026] [core:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6884] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:14.003851 2026] [access_compat:error] [pid 3790939:tid 3790939] [client 20.197.178.120:6956] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/w1px.php
[Thu Jul 30 16:01:14.004308 2026] [core:error] [pid 3790939:tid 3790939] [client 20.197.178.120:6956] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:14.375464 2026] [access_compat:error] [pid 3783238:tid 3783238] [client 20.197.178.120:6971] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/js.php
[Thu Jul 30 16:01:14.375810 2026] [core:error] [pid 3783238:tid 3783238] [client 20.197.178.120:6971] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:14.435499 2026] [access_compat:error] [pid 3790872:tid 3790872] [client 115.96.93.224:60499] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:14.748584 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 20.197.178.120:7104] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/core.php
[Thu Jul 30 16:01:14.748949 2026] [core:error] [pid 3793124:tid 3793124] [client 20.197.178.120:7104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:15.047104 2026] [security2:error] [pid 3788179:tid 3788179] [client 47.128.21.201:35676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.acthoroughbreds.com"] [uri "/robots.txt"] [unique_id "amtnOxGBLsU7mz6Jz1pCwgAAAAg"]
[Thu Jul 30 16:01:15.169094 2026] [access_compat:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6933] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fffm.php
[Thu Jul 30 16:01:15.169458 2026] [core:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:15.541028 2026] [access_compat:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6925] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ww.php
[Thu Jul 30 16:01:15.541418 2026] [core:error] [pid 3777761:tid 3777761] [client 20.197.178.120:6925] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:15.621394 2026] [ssl:error] [pid 3783238:tid 3783238] (70014)End of file found: [client 216.73.216.199:16869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:15.928811 2026] [access_compat:error] [pid 3790528:tid 3790528] [client 20.197.178.120:6906] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/domvf.php
[Thu Jul 30 16:01:15.929194 2026] [core:error] [pid 3790528:tid 3790528] [client 20.197.178.120:6906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:16.248647 2026] [security2:error] [pid 3786772:tid 3786772] [client 45.11.80.177:37798] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnPLHDcooPRjp-ba2vsAAAABo"]
[Thu Jul 30 16:01:16.248704 2026] [security2:error] [pid 3786772:tid 3786772] [client 45.11.80.177:37798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnPLHDcooPRjp-ba2vsAAAABo"]
[Thu Jul 30 16:01:16.248979 2026] [security2:error] [pid 3786772:tid 3786772] [client 45.11.80.177:37798] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtnPLHDcooPRjp-ba2vsAAAABo"]
[Thu Jul 30 16:01:16.330367 2026] [access_compat:error] [pid 3771751:tid 3771751] [client 20.197.178.120:6868] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/echkm.php
[Thu Jul 30 16:01:16.330774 2026] [core:error] [pid 3771751:tid 3771751] [client 20.197.178.120:6868] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:16.493503 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:55412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:16.493543 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:16.549803 2026] [ssl:error] [pid 3789808:tid 3789808] (EAI 2)Name or service not known: [client 144.76.19.72:55420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:16.549831 2026] [ssl:error] [pid 3789808:tid 3789808] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:16.752555 2026] [access_compat:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6947] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ano.php
[Thu Jul 30 16:01:16.752879 2026] [core:error] [pid 3788179:tid 3788179] [client 20.197.178.120:6947] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:17.154049 2026] [access_compat:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6891] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ah25.php
[Thu Jul 30 16:01:17.154467 2026] [core:error] [pid 3791553:tid 3791553] [client 20.197.178.120:6891] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:17.421110 2026] [ssl:error] [pid 3790939:tid 3790939] (70014)End of file found: [client 216.73.216.199:8872] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:17.522999 2026] [access_compat:error] [pid 3791241:tid 3791241] [client 20.197.178.120:6975] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/term.php
[Thu Jul 30 16:01:17.523387 2026] [core:error] [pid 3791241:tid 3791241] [client 20.197.178.120:6975] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:17.893815 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 20.197.178.120:7127] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/we.php
[Thu Jul 30 16:01:17.894205 2026] [core:error] [pid 3793124:tid 3793124] [client 20.197.178.120:7127] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:18.048841 2026] [ssl:error] [pid 3787079:tid 3787079] (70014)End of file found: [client 216.73.216.199:17509] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:18.265865 2026] [access_compat:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6952] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/zip-onee.php
[Thu Jul 30 16:01:18.266217 2026] [core:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:18.646858 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 20.197.178.120:6895] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/il.php
[Thu Jul 30 16:01:18.647234 2026] [core:error] [pid 3793124:tid 3793124] [client 20.197.178.120:6895] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:19.050027 2026] [access_compat:error] [pid 3791243:tid 3791243] [client 20.197.178.120:6867] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/one.php
[Thu Jul 30 16:01:19.050439 2026] [core:error] [pid 3791243:tid 3791243] [client 20.197.178.120:6867] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:19.427955 2026] [access_compat:error] [pid 3783407:tid 3783407] [client 20.197.178.120:7158] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/002.php
[Thu Jul 30 16:01:19.428344 2026] [core:error] [pid 3783407:tid 3783407] [client 20.197.178.120:7158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:19.603733 2026] [ssl:error] [pid 3792263:tid 3792263] (EAI 2)Name or service not known: [client 144.76.19.72:50822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:19.603768 2026] [ssl:error] [pid 3792263:tid 3792263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:19.660096 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:50832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:19.660124 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:19.693515 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/welcome-to-team-brodie.html
[Thu Jul 30 16:01:19.693562 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/welcome-to-team-brodie.html
[Thu Jul 30 16:01:19.808439 2026] [access_compat:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6943] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/file1.php
[Thu Jul 30 16:01:19.808797 2026] [core:error] [pid 3791554:tid 3791554] [client 20.197.178.120:6943] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:20.158096 2026] [security2:error] [pid 3783236:tid 3783236] [client 45.170.151.6:44640] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnQEQdsr9W08QZk2tE_gAAADE"]
[Thu Jul 30 16:01:20.158143 2026] [security2:error] [pid 3783236:tid 3783236] [client 45.170.151.6:44640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnQEQdsr9W08QZk2tE_gAAADE"]
[Thu Jul 30 16:01:20.158431 2026] [security2:error] [pid 3783236:tid 3783236] [client 45.170.151.6:44640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtnQEQdsr9W08QZk2tE_gAAADE"]
[Thu Jul 30 16:01:20.193609 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 20.197.178.120:7144] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/akimet.php
[Thu Jul 30 16:01:20.193954 2026] [core:error] [pid 3785214:tid 3785214] [client 20.197.178.120:7144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:20.345316 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/
[Thu Jul 30 16:01:20.345363 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/news/
[Thu Jul 30 16:01:20.582167 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 20.197.178.120:7155] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/reop3.php
[Thu Jul 30 16:01:20.582586 2026] [core:error] [pid 3783284:tid 3783284] [client 20.197.178.120:7155] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:20.947889 2026] [lsapi:warn] [pid 3793124:tid 3793124] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:01:20.963512 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6877] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/h.php
[Thu Jul 30 16:01:20.963859 2026] [core:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6877] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:21.017412 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/contact/
[Thu Jul 30 16:01:21.017451 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/contact/
[Thu Jul 30 16:01:21.061291 2026] [ssl:error] [pid 3783236:tid 3783236] (70014)End of file found: [client 216.73.216.199:26456] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:21.212278 2026] [security2:error] [pid 3786921:tid 3786921] [client 185.191.171.1:33422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2010/02/28/f1-technical-information/"] [unique_id "amtnQe5hqIQJbchiUVqSJwAAACU"]
[Thu Jul 30 16:01:21.335969 2026] [access_compat:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7150] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/2x.php
[Thu Jul 30 16:01:21.336348 2026] [core:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:21.672149 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 16:01:21.672180 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/
[Thu Jul 30 16:01:21.712578 2026] [access_compat:error] [pid 3790872:tid 3790872] [client 20.197.178.120:6856] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/petx.php
[Thu Jul 30 16:01:21.712914 2026] [core:error] [pid 3790872:tid 3790872] [client 20.197.178.120:6856] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:22.102514 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6901] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/zxz.php
[Thu Jul 30 16:01:22.102870 2026] [core:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6901] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:22.490872 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 20.197.178.120:7110] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/2.php
[Thu Jul 30 16:01:22.491257 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:7110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:22.714824 2026] [ssl:error] [pid 3791177:tid 3791177] (EAI 2)Name or service not known: [client 144.76.19.72:50844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:22.714868 2026] [ssl:error] [pid 3791177:tid 3791177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:22.768562 2026] [ssl:error] [pid 3791102:tid 3791102] (EAI 2)Name or service not known: [client 144.76.19.72:50854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:22.768593 2026] [ssl:error] [pid 3791102:tid 3791102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:22.867688 2026] [access_compat:error] [pid 3790872:tid 3790872] [client 20.197.178.120:7128] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/op.php
[Thu Jul 30 16:01:22.868019 2026] [core:error] [pid 3790872:tid 3790872] [client 20.197.178.120:7128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:23.241747 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6889] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/a5.php
[Thu Jul 30 16:01:23.242099 2026] [core:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6889] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:23.273980 2026] [ssl:error] [pid 3789809:tid 3789809] (70014)End of file found: [client 216.73.216.199:4485] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:23.616636 2026] [access_compat:error] [pid 3791102:tid 3791102] [client 20.197.178.120:6903] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws80.php
[Thu Jul 30 16:01:23.616970 2026] [core:error] [pid 3791102:tid 3791102] [client 20.197.178.120:6903] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:23.632474 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 16:01:23.632504 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 185.70.168.100:49873] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 16:01:23.757200 2026] [ssl:error] [pid 3790872:tid 3790872] (70014)End of file found: [client 216.73.216.199:35149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:23.984264 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6854] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xa.php
[Thu Jul 30 16:01:23.984616 2026] [core:error] [pid 3785214:tid 3785214] [client 20.197.178.120:6854] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:24.391923 2026] [access_compat:error] [pid 3793002:tid 3793002] [client 20.197.178.120:7060] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/asd67.php
[Thu Jul 30 16:01:24.392282 2026] [core:error] [pid 3793002:tid 3793002] [client 20.197.178.120:7060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:24.758906 2026] [access_compat:error] [pid 3791102:tid 3791102] [client 20.197.178.120:7126] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/bk.php
[Thu Jul 30 16:01:24.759279 2026] [core:error] [pid 3791102:tid 3791102] [client 20.197.178.120:7126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:25.143723 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6879] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-links.php
[Thu Jul 30 16:01:25.144117 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6879] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:25.529970 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6932] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/mosty.php
[Thu Jul 30 16:01:25.530613 2026] [core:error] [pid 3783285:tid 3783285] [client 20.197.178.120:6932] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:25.614846 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 115.96.93.224:61037] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:25.825748 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:50862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:25.825803 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:25.834708 2026] [security2:error] [pid 3787079:tid 3787079] [client 91.151.137.62:12094] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnRZHnvVAO6EDWnFdgMAAAADg"]
[Thu Jul 30 16:01:25.834783 2026] [security2:error] [pid 3787079:tid 3787079] [client 91.151.137.62:12094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnRZHnvVAO6EDWnFdgMAAAADg"]
[Thu Jul 30 16:01:25.835188 2026] [security2:error] [pid 3787079:tid 3787079] [client 91.151.137.62:12094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtnRZHnvVAO6EDWnFdgMAAAADg"]
[Thu Jul 30 16:01:25.880889 2026] [ssl:error] [pid 3789772:tid 3789772] (EAI 2)Name or service not known: [client 144.76.19.72:50870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:25.880919 2026] [ssl:error] [pid 3789772:tid 3789772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:25.905581 2026] [access_compat:error] [pid 3783283:tid 3783283] [client 20.197.178.120:7040] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/sump3.php
[Thu Jul 30 16:01:25.905932 2026] [core:error] [pid 3783283:tid 3783283] [client 20.197.178.120:7040] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:26.066327 2026] [access_compat:error] [pid 3793002:tid 3793002] [client 45.158.164.139:45184] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:01:26.301553 2026] [access_compat:error] [pid 3793125:tid 3793125] [client 20.197.178.120:7154] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/first.php
[Thu Jul 30 16:01:26.301904 2026] [core:error] [pid 3793125:tid 3793125] [client 20.197.178.120:7154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:26.377735 2026] [ssl:error] [pid 3783280:tid 3783280] (70014)End of file found: [client 216.73.216.199:17754] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:26.682621 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6890] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/acp.php
[Thu Jul 30 16:01:26.682972 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:6890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:27.054221 2026] [access_compat:error] [pid 3789772:tid 3789772] [client 20.197.178.120:7047] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-good.php
[Thu Jul 30 16:01:27.054582 2026] [core:error] [pid 3789772:tid 3789772] [client 20.197.178.120:7047] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:27.389620 2026] [ssl:error] [pid 3783285:tid 3783285] (70014)End of file found: [client 216.73.216.199:2493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:27.490471 2026] [access_compat:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6940] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/daerl3.php
[Thu Jul 30 16:01:27.490835 2026] [core:error] [pid 3790938:tid 3790938] [client 20.197.178.120:6940] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:27.867970 2026] [access_compat:error] [pid 3783207:tid 3783207] [client 20.197.178.120:6886] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/php5.php
[Thu Jul 30 16:01:27.868317 2026] [core:error] [pid 3783207:tid 3783207] [client 20.197.178.120:6886] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:28.253528 2026] [access_compat:error] [pid 3791243:tid 3791243] [client 20.197.178.120:7159] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/xoot.php
[Thu Jul 30 16:01:28.253870 2026] [core:error] [pid 3791243:tid 3791243] [client 20.197.178.120:7159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:28.292960 2026] [core:error] [pid 3793229:tid 3793229] (13)Permission denied: [client 216.73.216.199:11254] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:6/subsystem/ttyS1/line
[Thu Jul 30 16:01:28.594297 2026] [core:error] [pid 3793229:tid 3793229] (13)Permission denied: [client 216.73.216.199:11254] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup1/device/subsystem/devices/device:13/eject
[Thu Jul 30 16:01:28.710476 2026] [access_compat:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7010] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/clxcc.php
[Thu Jul 30 16:01:28.710804 2026] [core:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7010] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:28.953142 2026] [ssl:error] [pid 3793122:tid 3793122] (EAI 2)Name or service not known: [client 144.76.19.72:50886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:28.953188 2026] [ssl:error] [pid 3793122:tid 3793122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:29.009681 2026] [ssl:error] [pid 3790872:tid 3790872] (EAI 2)Name or service not known: [client 144.76.19.72:50900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:29.009717 2026] [ssl:error] [pid 3790872:tid 3790872] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:29.111585 2026] [access_compat:error] [pid 3785251:tid 3785251] [client 20.197.178.120:6907] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ai.php
[Thu Jul 30 16:01:29.111947 2026] [core:error] [pid 3785251:tid 3785251] [client 20.197.178.120:6907] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:29.201059 2026] [ssl:error] [pid 3793229:tid 3793229] (70014)End of file found: [client 216.73.216.199:11254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:29.489773 2026] [access_compat:error] [pid 3793122:tid 3793122] [client 20.197.178.120:6885] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/nwflm.php
[Thu Jul 30 16:01:29.490150 2026] [core:error] [pid 3793122:tid 3793122] [client 20.197.178.120:6885] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:29.858216 2026] [access_compat:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7079] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/hypo.php
[Thu Jul 30 16:01:29.858572 2026] [core:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7079] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:30.232621 2026] [access_compat:error] [pid 3793123:tid 3793123] [client 20.197.178.120:6931] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/w3llscc.php
[Thu Jul 30 16:01:30.232962 2026] [core:error] [pid 3793123:tid 3793123] [client 20.197.178.120:6931] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:30.606816 2026] [access_compat:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7153] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/11PJcpMFsD8B.php
[Thu Jul 30 16:01:30.607190 2026] [core:error] [pid 3783238:tid 3783238] [client 20.197.178.120:7153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:30.981707 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 20.197.178.120:7071] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/8.php
[Thu Jul 30 16:01:30.982052 2026] [core:error] [pid 3783284:tid 3783284] [client 20.197.178.120:7071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:31.337344 2026] [lsapi:warn] [pid 3793123:tid 3793123] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:01:31.358033 2026] [access_compat:error] [pid 3778030:tid 3778030] [client 20.197.178.120:7058] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fnstall.php
[Thu Jul 30 16:01:31.358425 2026] [core:error] [pid 3778030:tid 3778030] [client 20.197.178.120:7058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:31.769199 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 20.197.178.120:6894] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/edorxrr.php
[Thu Jul 30 16:01:31.769577 2026] [core:error] [pid 3793124:tid 3793124] [client 20.197.178.120:6894] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:31.850381 2026] [security2:error] [pid 3793002:tid 3793002] [client 150.109.230.210:48060] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclereracing.com"] [uri "/"] [unique_id "amtnS5gZgdfFqNEPYdiFzgAAAAc"]
[Thu Jul 30 16:01:32.065901 2026] [ssl:error] [pid 3778030:tid 3778030] (EAI 2)Name or service not known: [client 144.76.19.72:56450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:32.065930 2026] [ssl:error] [pid 3778030:tid 3778030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:32.090062 2026] [authz_core:error] [pid 3783280:tid 3783280] [client 66.249.66.33:48135] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:01:32.092746 2026] [authz_core:error] [pid 3783280:tid 3783280] [client 66.249.66.33:48135] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:01:32.120834 2026] [ssl:error] [pid 3792263:tid 3792263] (EAI 2)Name or service not known: [client 144.76.19.72:56452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:32.120858 2026] [ssl:error] [pid 3792263:tid 3792263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:32.173370 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 20.197.178.120:7130] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/setup.php
[Thu Jul 30 16:01:32.173731 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:7130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:32.262732 2026] [security2:error] [pid 3789808:tid 3789808] [client 136.115.158.195:37666] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtnTPyGGXxU0B0BG_ba_wAAABc"]
[Thu Jul 30 16:01:32.262871 2026] [security2:error] [pid 3789808:tid 3789808] [client 136.115.158.195:37666] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtnTPyGGXxU0B0BG_ba_wAAABc"]
[Thu Jul 30 16:01:32.263014 2026] [security2:error] [pid 3789808:tid 3789808] [client 136.115.158.195:37666] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.admin.highclereracing.co.uk"] [uri "/.git/config"] [unique_id "amtnTPyGGXxU0B0BG_ba_wAAABc"]
[Thu Jul 30 16:01:32.550714 2026] [access_compat:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6938] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/6.php
[Thu Jul 30 16:01:32.551080 2026] [core:error] [pid 3792263:tid 3792263] [client 20.197.178.120:6938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:32.926321 2026] [access_compat:error] [pid 3791102:tid 3791102] [client 20.197.178.120:6892] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/w3lls.php
[Thu Jul 30 16:01:32.926694 2026] [core:error] [pid 3791102:tid 3791102] [client 20.197.178.120:6892] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:33.295781 2026] [access_compat:error] [pid 3778030:tid 3778030] [client 20.197.178.120:6874] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/99.php
[Thu Jul 30 16:01:33.296167 2026] [core:error] [pid 3778030:tid 3778030] [client 20.197.178.120:6874] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:33.669680 2026] [core:error] [pid 3783284:tid 3783284] [client 20.197.178.120:6876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:33.669706 2026] [core:error] [pid 3783284:tid 3783284] [client 20.197.178.120:6876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:33.819089 2026] [lsapi:warn] [pid 3789808:tid 3789808] [client 66.249.93.163:60213] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:01:33.819119 2026] [lsapi:warn] [pid 3789808:tid 3789808] [client 66.249.93.163:60213] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:01:34.040908 2026] [access_compat:error] [pid 3783207:tid 3783207] [client 20.197.178.120:6965] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/media.php
[Thu Jul 30 16:01:34.041253 2026] [core:error] [pid 3783207:tid 3783207] [client 20.197.178.120:6965] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:34.396493 2026] [security2:error] [pid 3783238:tid 3783238] [client 216.73.216.199:54222] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/sysctl.d/50-pid-max.conf"] [unique_id "amtnTq3m7XXIDA_3dOcw-wAAADQ"]
[Thu Jul 30 16:01:34.396767 2026] [security2:error] [pid 3783238:tid 3783238] [client 216.73.216.199:54222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/sysctl.d/50-pid-max.conf"] [unique_id "amtnTq3m7XXIDA_3dOcw-wAAADQ"]
[Thu Jul 30 16:01:34.396968 2026] [security2:error] [pid 3783238:tid 3783238] [client 216.73.216.199:54222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/usr/lib/sysctl.d/50-pid-max.conf"] [unique_id "amtnTq3m7XXIDA_3dOcw-wAAADQ"]
[Thu Jul 30 16:01:34.432871 2026] [core:error] [pid 3789809:tid 3789809] [client 20.197.178.120:7140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:34.432896 2026] [core:error] [pid 3789809:tid 3789809] [client 20.197.178.120:7140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:34.664724 2026] [authz_core:error] [pid 3789807:tid 3789807] [client 66.249.66.33:57133] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:01:34.667409 2026] [authz_core:error] [pid 3789807:tid 3789807] [client 66.249.66.33:57133] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:01:34.806939 2026] [access_compat:error] [pid 3786889:tid 3786889] [client 20.197.178.120:7053] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/222.php
[Thu Jul 30 16:01:34.807329 2026] [core:error] [pid 3786889:tid 3786889] [client 20.197.178.120:7053] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:35.177739 2026] [ssl:error] [pid 3791690:tid 3791690] (EAI 2)Name or service not known: [client 144.76.19.72:56466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:35.177775 2026] [ssl:error] [pid 3791690:tid 3791690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:35.221387 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 20.197.178.120:7142] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-load.php
[Thu Jul 30 16:01:35.221736 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:7142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:35.239013 2026] [ssl:error] [pid 3771751:tid 3771751] (EAI 2)Name or service not known: [client 144.76.19.72:56482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:35.239053 2026] [ssl:error] [pid 3771751:tid 3771751] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:35.601189 2026] [core:error] [pid 3791243:tid 3791243] [client 20.197.178.120:6873] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:35.601220 2026] [core:error] [pid 3791243:tid 3791243] [client 20.197.178.120:6873] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:35.989407 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:35.989439 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:6905] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:36.361551 2026] [access_compat:error] [pid 3787880:tid 3787880] [client 20.197.178.120:7106] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/memberfuns.php
[Thu Jul 30 16:01:36.361941 2026] [core:error] [pid 3787880:tid 3787880] [client 20.197.178.120:7106] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:36.382606 2026] [access_compat:error] [pid 3786889:tid 3786889] [client 115.96.93.224:61576] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:36.519158 2026] [lsapi:warn] [pid 3786924:tid 3786924] [client 185.70.168.100:59197] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 16:01:36.519204 2026] [lsapi:warn] [pid 3786924:tid 3786924] [client 185.70.168.100:59197] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.google.com/
[Thu Jul 30 16:01:36.746304 2026] [access_compat:error] [pid 3783284:tid 3783284] [client 20.197.178.120:7107] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/orange3.php
[Thu Jul 30 16:01:36.746675 2026] [core:error] [pid 3783284:tid 3783284] [client 20.197.178.120:7107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:37.117757 2026] [core:error] [pid 3785251:tid 3785251] [client 20.197.178.120:6871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:37.117782 2026] [core:error] [pid 3785251:tid 3785251] [client 20.197.178.120:6871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:37.340353 2026] [core:error] [pid 3783238:tid 3783238] (13)Permission denied: [client 216.73.216.199:54222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory147/subsystem/uevent
[Thu Jul 30 16:01:37.486991 2026] [access_compat:error] [pid 3783280:tid 3783280] [client 20.197.178.120:7161] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp-the.php
[Thu Jul 30 16:01:37.487413 2026] [core:error] [pid 3783280:tid 3783280] [client 20.197.178.120:7161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:37.875672 2026] [access_compat:error] [pid 3789772:tid 3789772] [client 20.197.178.120:7135] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/crgio.php
[Thu Jul 30 16:01:37.876049 2026] [core:error] [pid 3789772:tid 3789772] [client 20.197.178.120:7135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:38.254096 2026] [access_compat:error] [pid 3794689:tid 3794689] [client 20.197.178.120:6869] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ws13.php
[Thu Jul 30 16:01:38.254463 2026] [core:error] [pid 3794689:tid 3794689] [client 20.197.178.120:6869] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:38.292402 2026] [ssl:error] [pid 3789772:tid 3789772] (EAI 2)Name or service not known: [client 144.76.19.72:56498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:38.292430 2026] [ssl:error] [pid 3789772:tid 3789772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:38.348054 2026] [ssl:error] [pid 3785299:tid 3785299] (EAI 2)Name or service not known: [client 144.76.19.72:56504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:38.348099 2026] [ssl:error] [pid 3785299:tid 3785299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:38.628830 2026] [access_compat:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6964] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/srontol.php
[Thu Jul 30 16:01:38.629189 2026] [core:error] [pid 3791485:tid 3791485] [client 20.197.178.120:6964] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:39.017947 2026] [access_compat:error] [pid 3786921:tid 3786921] [client 20.197.178.120:7166] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/miru3.php
[Thu Jul 30 16:01:39.018308 2026] [core:error] [pid 3786921:tid 3786921] [client 20.197.178.120:7166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:39.400463 2026] [access_compat:error] [pid 3795100:tid 3795100] [client 20.197.178.120:7138] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ingfo.php
[Thu Jul 30 16:01:39.400878 2026] [core:error] [pid 3795100:tid 3795100] [client 20.197.178.120:7138] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:39.453408 2026] [core:error] [pid 3783285:tid 3783285] (13)Permission denied: [client 216.73.216.199:50222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/rapl/uevent
[Thu Jul 30 16:01:39.754220 2026] [core:error] [pid 3783285:tid 3783285] (13)Permission denied: [client 216.73.216.199:50222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory259/subsystem/uevent
[Thu Jul 30 16:01:39.778691 2026] [access_compat:error] [pid 3795130:tid 3795130] [client 20.197.178.120:6897] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/ey5.php
[Thu Jul 30 16:01:39.779177 2026] [core:error] [pid 3795130:tid 3795130] [client 20.197.178.120:6897] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:40.167541 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 20.197.178.120:7054] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/fine.php
[Thu Jul 30 16:01:40.167929 2026] [core:error] [pid 3785299:tid 3785299] [client 20.197.178.120:7054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:01:40.959290 2026] [core:error] [pid 3783285:tid 3783285] (13)Permission denied: [client 216.73.216.199:50222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty46/subsystem/ttyS3/close_delay
[Thu Jul 30 16:01:41.405586 2026] [ssl:error] [pid 3783207:tid 3783207] (EAI 2)Name or service not known: [client 144.76.19.72:37262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:41.405616 2026] [ssl:error] [pid 3783207:tid 3783207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:41.462807 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:37268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:41.462844 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:41.561154 2026] [ssl:error] [pid 3783285:tid 3783285] (70014)End of file found: [client 216.73.216.199:50222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:41.857469 2026] [ssl:error] [pid 3783238:tid 3783238] (70014)End of file found: [client 216.73.216.199:54222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:41.937032 2026] [lsapi:warn] [pid 3791554:tid 3791554] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:01:42.351962 2026] [core:error] [pid 3788179:tid 3788179] (13)Permission denied: [client 216.73.216.199:9361] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory262/subsystem/uevent
[Thu Jul 30 16:01:42.459529 2026] [core:error] [pid 3788179:tid 3788179] (13)Permission denied: [client 216.73.216.199:9361] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:49/subsystem/ttyS3/iomem_base
[Thu Jul 30 16:01:42.492591 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 115.96.93.224:61886] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:42.760761 2026] [ssl:error] [pid 3788179:tid 3788179] (70014)End of file found: [client 216.73.216.199:9361] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:44.560614 2026] [ssl:error] [pid 3763498:tid 3763498] (EAI 2)Name or service not known: [client 144.76.19.72:37270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:44.560644 2026] [ssl:error] [pid 3763498:tid 3763498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:44.613461 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:37272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:44.613496 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:46.866689 2026] [core:error] [pid 3785214:tid 3785214] (13)Permission denied: [client 216.73.216.199:62227] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-8/aliases
[Thu Jul 30 16:01:47.285809 2026] [security2:error] [pid 3783406:tid 3783406] [client 185.191.171.6:13886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/david-nelson-obituary-2021"] [unique_id "amtnW5jvuffdHflr-7CJ1gAAAAk"]
[Thu Jul 30 16:01:47.295634 2026] [access_compat:error] [pid 3791690:tid 3791690] [client 115.96.93.224:62118] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:47.705958 2026] [ssl:error] [pid 3795100:tid 3795100] (EAI 2)Name or service not known: [client 144.76.19.72:37284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:47.705991 2026] [ssl:error] [pid 3795100:tid 3795100] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:47.759433 2026] [ssl:error] [pid 3792263:tid 3792263] (EAI 2)Name or service not known: [client 144.76.19.72:37294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:47.759458 2026] [ssl:error] [pid 3792263:tid 3792263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:48.480761 2026] [ssl:error] [pid 3785214:tid 3785214] (70014)End of file found: [client 216.73.216.199:62227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:01:48.699133 2026] [security2:error] [pid 3792263:tid 3792263] [client 43.160.240.216:48716] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sijames.com"] [uri "/"] [unique_id "amtnXAVdHrj0xfLRS8bPewAAAC4"]
[Thu Jul 30 16:01:48.883943 2026] [authz_core:error] [pid 3788179:tid 3788179] [client 66.249.66.33:39189] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:01:48.886604 2026] [authz_core:error] [pid 3788179:tid 3788179] [client 66.249.66.33:39189] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:01:50.812278 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:55932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:50.812311 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:50.869560 2026] [ssl:error] [pid 3763498:tid 3763498] (EAI 2)Name or service not known: [client 144.76.19.72:55942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:50.869592 2026] [ssl:error] [pid 3763498:tid 3763498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:51.619636 2026] [security2:error] [pid 3795131:tid 3795131] [client 216.73.216.199:3068] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/request-key.d/id_resolver.conf"] [unique_id "amtnX79FOfQRbk7sd9LSjgAAAAw"]
[Thu Jul 30 16:01:51.619894 2026] [security2:error] [pid 3795131:tid 3795131] [client 216.73.216.199:3068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/request-key.d/id_resolver.conf"] [unique_id "amtnX79FOfQRbk7sd9LSjgAAAAw"]
[Thu Jul 30 16:01:51.620105 2026] [security2:error] [pid 3795131:tid 3795131] [client 216.73.216.199:3068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/request-key.d/id_resolver.conf"] [unique_id "amtnX79FOfQRbk7sd9LSjgAAAAw"]
[Thu Jul 30 16:01:52.954415 2026] [lsapi:warn] [pid 3794913:tid 3794913] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:01:53.611344 2026] [access_compat:error] [pid 3791690:tid 3791690] [client 115.96.93.224:62436] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:53.922670 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:55954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:53.922704 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:53.978647 2026] [ssl:error] [pid 3794913:tid 3794913] (EAI 2)Name or service not known: [client 144.76.19.72:55960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:53.978685 2026] [ssl:error] [pid 3794913:tid 3794913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:57.036956 2026] [ssl:error] [pid 3783207:tid 3783207] (EAI 2)Name or service not known: [client 144.76.19.72:55962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:57.036986 2026] [ssl:error] [pid 3783207:tid 3783207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:57.093521 2026] [ssl:error] [pid 3793122:tid 3793122] (EAI 2)Name or service not known: [client 144.76.19.72:55972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:01:57.093550 2026] [ssl:error] [pid 3793122:tid 3793122] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:01:58.487197 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 115.96.93.224:62659] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:01:59.448403 2026] [ssl:error] [pid 3795131:tid 3795131] (70014)End of file found: [client 216.73.216.199:3068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:00.069112 2026] [ssl:error] [pid 3793002:tid 3793002] (70014)End of file found: [client 216.73.216.199:33518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:00.173356 2026] [ssl:error] [pid 3778030:tid 3778030] (EAI 2)Name or service not known: [client 144.76.19.72:63060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:00.173394 2026] [ssl:error] [pid 3778030:tid 3778030] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:00.226838 2026] [ssl:error] [pid 3790938:tid 3790938] (EAI 2)Name or service not known: [client 144.76.19.72:63064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:00.226867 2026] [ssl:error] [pid 3790938:tid 3790938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:00.499899 2026] [security2:error] [pid 3795690:tid 3795690] [client 114.119.135.136:54459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~102"] [unique_id "amtnaPavkHvF1dTut2apnAAAABI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~102
[Thu Jul 30 16:02:01.547772 2026] [security2:error] [pid 3763498:tid 3763498] [client 114.119.135.136:54463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~102"] [unique_id "amtnaVn6vYj7Cf7xsQ7kMwAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1576454400/request_format~html/cat_ids~102
[Thu Jul 30 16:02:03.064875 2026] [ssl:error] [pid 3786921:tid 3786921] (70014)End of file found: [client 216.73.216.199:7124] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:03.160287 2026] [lsapi:warn] [pid 3790938:tid 3790938] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:02:03.283991 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:63078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:03.284028 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:03.337503 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:63094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:03.337534 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:03.981353 2026] [security2:error] [pid 3795690:tid 3795690] [client 162.14.109.170:47622] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unique-pr.co.uk"] [uri "/"] [unique_id "amtna_avkHvF1dTut2apngAAABI"]
[Thu Jul 30 16:02:04.774993 2026] [ssl:error] [pid 3783238:tid 3783238] (70014)End of file found: [client 216.73.216.199:6605] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:05.416562 2026] [security2:error] [pid 3785214:tid 3785214] [client 43.157.46.118:60240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "oliviamarjorie.com"] [uri "/"] [unique_id "amtnbTj2G5RVeD-DmbksLQAAAAo"]
[Thu Jul 30 16:02:05.780571 2026] [core:error] [pid 3791485:tid 3791485] (13)Permission denied: [client 216.73.216.199:40613] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/8250/uevent
[Thu Jul 30 16:02:06.382434 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:40613] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:06.393679 2026] [ssl:error] [pid 3783283:tid 3783283] (EAI 2)Name or service not known: [client 144.76.19.72:63106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:06.393707 2026] [ssl:error] [pid 3783283:tid 3783283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:06.449654 2026] [ssl:error] [pid 3783280:tid 3783280] (EAI 2)Name or service not known: [client 144.76.19.72:63122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:06.449687 2026] [ssl:error] [pid 3783280:tid 3783280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:08.180280 2026] [security2:error] [pid 3783285:tid 3783285] [client 49.51.50.147:44334] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "amtncDZpedruEIrGY8amywAAAEY"]
[Thu Jul 30 16:02:08.486669 2026] [ssl:error] [pid 3783353:tid 3783353] (70014)End of file found: [client 216.73.216.199:3395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:08.990255 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 115.96.93.224:63196] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:09.325760 2026] [lsapi:warn] [pid 3789809:tid 3789809] [client 185.223.152.46:50371] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:02:09.502375 2026] [ssl:error] [pid 3796191:tid 3796191] (EAI 2)Name or service not known: [client 144.76.19.72:63136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:09.502419 2026] [ssl:error] [pid 3796191:tid 3796191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:09.554294 2026] [ssl:error] [pid 3786921:tid 3786921] (EAI 2)Name or service not known: [client 144.76.19.72:34186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:09.554326 2026] [ssl:error] [pid 3786921:tid 3786921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:09.570367 2026] [security2:error] [pid 3788179:tid 3788179] [client 43.156.102.219:29597] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtncRGBLsU7mz6Jz1pC0QAAAAg"]
[Thu Jul 30 16:02:09.570414 2026] [security2:error] [pid 3788179:tid 3788179] [client 43.156.102.219:29597] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtncRGBLsU7mz6Jz1pC0QAAAAg"]
[Thu Jul 30 16:02:09.570672 2026] [security2:error] [pid 3788179:tid 3788179] [client 43.156.102.219:29597] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtncRGBLsU7mz6Jz1pC0QAAAAg"]
[Thu Jul 30 16:02:10.304223 2026] [ssl:error] [pid 3796191:tid 3796191] (70014)End of file found: [client 216.73.216.199:7221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:11.809701 2026] [ssl:error] [pid 3789809:tid 3789809] (70014)End of file found: [client 216.73.216.199:38502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:12.488350 2026] [security2:error] [pid 3795100:tid 3795100] [client 85.208.96.204:21130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9272.0/prev_next,next.html"] [unique_id "amtndHKDajJeyTGq7HRRMAAAAAI"]
[Thu Jul 30 16:02:12.610718 2026] [ssl:error] [pid 3791690:tid 3791690] (EAI 2)Name or service not known: [client 144.76.19.72:34192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:12.610747 2026] [ssl:error] [pid 3791690:tid 3791690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:12.666422 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:34206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:12.666451 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:13.758383 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:02:13.828627 2026] [security2:error] [pid 3794913:tid 3794913] [client 146.56.229.214:48494] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/"] [unique_id "amtndXYBeKXiDSam10DwnQAAAAE"]
[Thu Jul 30 16:02:14.357688 2026] [security2:error] [pid 3785214:tid 3785214] [client 49.151.181.86:50982] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtndjj2G5RVeD-DmbksNAAAAAo"]
[Thu Jul 30 16:02:14.357739 2026] [security2:error] [pid 3785214:tid 3785214] [client 49.151.181.86:50982] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtndjj2G5RVeD-DmbksNAAAAAo"]
[Thu Jul 30 16:02:14.357965 2026] [security2:error] [pid 3785214:tid 3785214] [client 49.151.181.86:50982] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtndjj2G5RVeD-DmbksNAAAAAo"]
[Thu Jul 30 16:02:14.973865 2026] [security2:error] [pid 3791690:tid 3791690] [client 146.56.229.214:49562] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home"] [unique_id "amtndsZ8Rc8WOczVVhFGAgAAADI"], referer: http://taylorshouse.com
[Thu Jul 30 16:02:15.077042 2026] [access_compat:error] [pid 3796160:tid 3796160] [client 115.96.93.224:63505] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:15.721161 2026] [ssl:error] [pid 3794913:tid 3794913] (EAI 2)Name or service not known: [client 144.76.19.72:34222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:15.721199 2026] [ssl:error] [pid 3794913:tid 3794913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:15.778474 2026] [ssl:error] [pid 3793229:tid 3793229] (EAI 2)Name or service not known: [client 144.76.19.72:34228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:15.778506 2026] [ssl:error] [pid 3793229:tid 3793229] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:16.652221 2026] [security2:error] [pid 3788179:tid 3788179] [client 146.56.229.214:51140] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.taylorshouse.com"] [uri "/home/"] [unique_id "amtneBGBLsU7mz6Jz1pC0wAAAAg"], referer: http://www.taylorshouse.com/home
[Thu Jul 30 16:02:17.405518 2026] [lsapi:warn] [pid 3789772:tid 3789772] [client 185.70.168.100:63656] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/the-team/
[Thu Jul 30 16:02:17.405571 2026] [lsapi:warn] [pid 3789772:tid 3789772] [client 185.70.168.100:63656] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/the-team/
[Thu Jul 30 16:02:17.531812 2026] [ssl:error] [pid 3795131:tid 3795131] (70014)End of file found: [client 216.73.216.199:32937] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:18.039320 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:59611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:18.164992 2026] [security2:error] [pid 3786924:tid 3786924] [client 51.68.111.199:17119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterforum.info"] [uri "/robots.txt"] [unique_id "amtneseJ4GkcDKK4wGbtjQAAADA"]
[Thu Jul 30 16:02:18.331057 2026] [ssl:error] [pid 3788179:tid 3788179] (70014)End of file found: [client 216.73.216.199:46354] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:18.487920 2026] [access_compat:error] [pid 3796190:tid 3796190] [client 45.158.164.139:47350] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:02:18.488629 2026] [security2:error] [pid 3796566:tid 3796566] [client 146.56.229.214:52854] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "taylorshouse.com"] [uri "/home/"] [unique_id "amtneqzXeKoYaG83Nq7DJgAAAAI"], referer: http://www.taylorshouse.com/home/
[Thu Jul 30 16:02:18.851703 2026] [security2:error] [pid 3793124:tid 3793124] [client 31.155.254.63:13593] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtner5koEf2kJSERTz_dwAAADM"]
[Thu Jul 30 16:02:18.851762 2026] [security2:error] [pid 3793124:tid 3793124] [client 31.155.254.63:13593] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtner5koEf2kJSERTz_dwAAADM"]
[Thu Jul 30 16:02:18.852022 2026] [security2:error] [pid 3793124:tid 3793124] [client 31.155.254.63:13593] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtner5koEf2kJSERTz_dwAAADM"]
[Thu Jul 30 16:02:18.893023 2026] [security2:error] [pid 3789807:tid 3789807] [client 51.68.111.199:22131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/robots.txt"] [unique_id "amtnennJJRotFi3yNEBfsgAAABU"]
[Thu Jul 30 16:02:19.341081 2026] [ssl:error] [pid 3789809:tid 3789809] (EAI 2)Name or service not known: [client 144.76.19.72:34242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:19.341115 2026] [ssl:error] [pid 3789809:tid 3789809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:19.583330 2026] [ssl:error] [pid 3795691:tid 3795691] (EAI 2)Name or service not known: [client 144.76.19.72:34250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:19.583368 2026] [ssl:error] [pid 3795691:tid 3795691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:19.867736 2026] [access_compat:error] [pid 3796613:tid 3796613] [client 115.96.93.224:63740] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:21.168690 2026] [ssl:error] [pid 3785251:tid 3785251] (70014)End of file found: [client 216.73.216.199:61952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:21.771208 2026] [ssl:error] [pid 3796566:tid 3796566] (70014)End of file found: [client 216.73.216.199:54191] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:22.253755 2026] [ssl:error] [pid 3796673:tid 3796673] (70014)End of file found: [client 216.73.216.199:20960] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:23.244186 2026] [ssl:error] [pid 3783236:tid 3783236] (EAI 2)Name or service not known: [client 144.76.19.72:40160] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:23.244219 2026] [ssl:error] [pid 3783236:tid 3783236] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:23.431250 2026] [ssl:error] [pid 3788179:tid 3788179] (EAI 2)Name or service not known: [client 144.76.19.72:40176] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:23.431285 2026] [ssl:error] [pid 3788179:tid 3788179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:24.346900 2026] [lsapi:warn] [pid 3783353:tid 3783353] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:02:25.804137 2026] [authz_core:error] [pid 3796190:tid 3796190] [client 66.249.66.33:38396] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:02:25.806827 2026] [authz_core:error] [pid 3796190:tid 3796190] [client 66.249.66.33:38396] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:02:25.947949 2026] [access_compat:error] [pid 3796824:tid 3796824] [client 115.96.93.224:64050] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:26.439748 2026] [access_compat:error] [pid 3790938:tid 3790938] [client 45.158.164.139:46562] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:02:26.485187 2026] [ssl:error] [pid 3788179:tid 3788179] (EAI 2)Name or service not known: [client 144.76.19.72:40188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:26.485218 2026] [ssl:error] [pid 3788179:tid 3788179] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:26.539769 2026] [ssl:error] [pid 3789772:tid 3789772] (EAI 2)Name or service not known: [client 144.76.19.72:40194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:26.539805 2026] [ssl:error] [pid 3789772:tid 3789772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:26.591833 2026] [ssl:error] [pid 3785214:tid 3785214] (70014)End of file found: [client 216.73.216.199:48249] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:27.070960 2026] [ssl:error] [pid 3796613:tid 3796613] (70014)End of file found: [client 216.73.216.199:42614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:28.093829 2026] [ssl:error] [pid 3789772:tid 3789772] (70014)End of file found: [client 216.73.216.199:47914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:29.593563 2026] [ssl:error] [pid 3792263:tid 3792263] (EAI 2)Name or service not known: [client 144.76.19.72:37536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:29.593592 2026] [ssl:error] [pid 3792263:tid 3792263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:29.647521 2026] [ssl:error] [pid 3783207:tid 3783207] (EAI 2)Name or service not known: [client 144.76.19.72:37544] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:29.647554 2026] [ssl:error] [pid 3783207:tid 3783207] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:30.408496 2026] [access_compat:error] [pid 3795691:tid 3795691] [client 115.96.93.224:64277] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:31.897002 2026] [ssl:error] [pid 3794689:tid 3794689] (70014)End of file found: [client 216.73.216.199:64291] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:32.513444 2026] [ssl:error] [pid 3783240:tid 3783240] (70014)End of file found: [client 216.73.216.199:42926] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:32.725830 2026] [ssl:error] [pid 3791690:tid 3791690] (EAI 2)Name or service not known: [client 144.76.19.72:37560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:32.725869 2026] [ssl:error] [pid 3791690:tid 3791690] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:32.782598 2026] [ssl:error] [pid 3791102:tid 3791102] (EAI 2)Name or service not known: [client 144.76.19.72:37570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:32.782630 2026] [ssl:error] [pid 3791102:tid 3791102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:33.822817 2026] [ssl:error] [pid 3791690:tid 3791690] (70014)End of file found: [client 216.73.216.199:25720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:34.868636 2026] [security2:error] [pid 3791485:tid 3791485] [client 85.208.96.203:60878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7601.0.html"] [unique_id "amtnihdiGKNw_zw6Dlyi0wAAACs"]
[Thu Jul 30 16:02:35.420474 2026] [lsapi:warn] [pid 3796671:tid 3796671] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:02:35.840314 2026] [ssl:error] [pid 3783283:tid 3783283] (EAI 2)Name or service not known: [client 144.76.19.72:37572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:35.840352 2026] [ssl:error] [pid 3783283:tid 3783283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:35.895954 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:37576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:35.895983 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:37.320027 2026] [ssl:error] [pid 3796160:tid 3796160] (70014)End of file found: [client 216.73.216.199:19807] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:38.948140 2026] [ssl:error] [pid 3793125:tid 3793125] (EAI 2)Name or service not known: [client 144.76.19.72:37582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:38.948175 2026] [ssl:error] [pid 3793125:tid 3793125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:39.005888 2026] [ssl:error] [pid 3797377:tid 3797377] (EAI 2)Name or service not known: [client 144.76.19.72:37596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:39.005924 2026] [ssl:error] [pid 3797377:tid 3797377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:39.238083 2026] [ssl:error] [pid 3778030:tid 3778030] (70014)End of file found: [client 216.73.216.199:56790] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:39.745244 2026] [ssl:error] [pid 3783285:tid 3783285] (70014)End of file found: [client 216.73.216.199:45845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:41.036843 2026] [access_compat:error] [pid 3785251:tid 3785251] [client 115.96.93.224:64828] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:41.301087 2026] [access_compat:error] [pid 3786889:tid 3786889] [client 18.232.56.126:49742] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2008/12/batman-bin-suparman.jpg
[Thu Jul 30 16:02:41.301192 2026] [access_compat:error] [pid 3786889:tid 3786889] [client 18.232.56.126:49742] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 16:02:42.060495 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:57460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:42.060532 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:42.115609 2026] [ssl:error] [pid 3796190:tid 3796190] (EAI 2)Name or service not known: [client 144.76.19.72:57472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:42.115644 2026] [ssl:error] [pid 3796190:tid 3796190] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:43.152769 2026] [ssl:error] [pid 3797612:tid 3797612] (70014)End of file found: [client 216.73.216.199:9778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:44.449840 2026] [core:error] [pid 3795130:tid 3795130] [client 66.249.66.8:59051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:02:44.449876 2026] [core:error] [pid 3795130:tid 3795130] [client 66.249.66.8:59051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:02:44.588947 2026] [access_compat:error] [pid 3797683:tid 3797683] [client 2.189.5.162:32942] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:02:44.614761 2026] [access_compat:error] [pid 3797682:tid 3797682] [client 2.189.5.142:54030] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:02:44.962467 2026] [core:error] [pid 3786889:tid 3786889] (13)Permission denied: [client 216.73.216.199:45973] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:48/subsystem/ttyS1/line
[Thu Jul 30 16:02:44.975080 2026] [security2:error] [pid 3795130:tid 3795130] [client 101.32.15.141:46788] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/"] [unique_id "amtnlB7BOIoc0HAJSg1_vQAAAAY"]
[Thu Jul 30 16:02:45.172643 2026] [ssl:error] [pid 3797677:tid 3797677] (EAI 2)Name or service not known: [client 144.76.19.72:57488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:45.172678 2026] [ssl:error] [pid 3797677:tid 3797677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:45.267632 2026] [ssl:error] [pid 3794689:tid 3794689] (EAI 2)Name or service not known: [client 144.76.19.72:57504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:45.267661 2026] [ssl:error] [pid 3794689:tid 3794689] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:45.621217 2026] [lsapi:warn] [pid 3797683:tid 3797683] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:02:45.866088 2026] [ssl:error] [pid 3786889:tid 3786889] (70014)End of file found: [client 216.73.216.199:45973] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:47.194751 2026] [access_compat:error] [pid 3794689:tid 3794689] [client 115.96.93.224:65136] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:47.682180 2026] [security2:error] [pid 3791102:tid 3791102] [client 185.191.171.17:17078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/crystal-river-artifacts"] [unique_id "amtnl_nsL2HF11-e0T7fugAAAB8"]
[Thu Jul 30 16:02:47.973327 2026] [ssl:error] [pid 3797682:tid 3797682] (5)Input/output error: [client 216.73.216.199:13794] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:48.322442 2026] [ssl:error] [pid 3785251:tid 3785251] (EAI 2)Name or service not known: [client 144.76.19.72:57514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:48.322476 2026] [ssl:error] [pid 3785251:tid 3785251] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:48.377285 2026] [ssl:error] [pid 3797377:tid 3797377] (EAI 2)Name or service not known: [client 144.76.19.72:57520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:48.377316 2026] [ssl:error] [pid 3797377:tid 3797377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:49.484622 2026] [ssl:error] [pid 3783240:tid 3783240] (70014)End of file found: [client 216.73.216.199:16383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:51.434944 2026] [ssl:error] [pid 3786924:tid 3786924] (EAI 2)Name or service not known: [client 144.76.19.72:44324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:51.434995 2026] [ssl:error] [pid 3786924:tid 3786924] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:51.491586 2026] [ssl:error] [pid 3797157:tid 3797157] (EAI 2)Name or service not known: [client 144.76.19.72:44328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:51.491615 2026] [ssl:error] [pid 3797157:tid 3797157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:51.779673 2026] [access_compat:error] [pid 3789807:tid 3789807] [client 115.96.93.224:65367] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:51.908623 2026] [core:error] [pid 3797781:tid 3797781] (13)Permission denied: [client 216.73.216.199:31358] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/device/driver/bind
[Thu Jul 30 16:02:52.208644 2026] [core:error] [pid 3797781:tid 3797781] (1)Operation not permitted: [client 216.73.216.199:31358] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/net/protocols
[Thu Jul 30 16:02:52.456534 2026] [authz_core:error] [pid 3785251:tid 3785251] [client 66.249.66.64:47960] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 16:02:52.456584 2026] [authz_core:error] [pid 3785251:tid 3785251] [client 66.249.66.64:47960] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 16:02:53.413935 2026] [ssl:error] [pid 3797781:tid 3797781] (70014)End of file found: [client 216.73.216.199:31358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:54.547280 2026] [ssl:error] [pid 3797677:tid 3797677] (EAI 2)Name or service not known: [client 144.76.19.72:44342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:54.547315 2026] [ssl:error] [pid 3797677:tid 3797677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:54.601708 2026] [ssl:error] [pid 3786924:tid 3786924] (EAI 2)Name or service not known: [client 144.76.19.72:44356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:54.601736 2026] [ssl:error] [pid 3786924:tid 3786924] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:56.123783 2026] [ssl:error] [pid 3791554:tid 3791554] (70014)End of file found: [client 216.73.216.199:10378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:56.627692 2026] [lsapi:warn] [pid 3797683:tid 3797683] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:02:57.633508 2026] [ssl:error] [pid 3786889:tid 3786889] (70014)End of file found: [client 216.73.216.199:59140] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:57.655361 2026] [ssl:error] [pid 3797682:tid 3797682] (EAI 2)Name or service not known: [client 144.76.19.72:44366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:57.655398 2026] [ssl:error] [pid 3797682:tid 3797682] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:57.711578 2026] [ssl:error] [pid 3797377:tid 3797377] (EAI 2)Name or service not known: [client 144.76.19.72:44378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:02:57.711609 2026] [ssl:error] [pid 3797377:tid 3797377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:02:57.904552 2026] [access_compat:error] [pid 3797556:tid 3797556] [client 115.96.93.224:49297] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:02:58.734840 2026] [ssl:error] [pid 3771751:tid 3771751] (70014)End of file found: [client 216.73.216.199:1636] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:02:59.627101 2026] [security2:error] [pid 3797682:tid 3797682] [client 43.164.196.47:55522] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtno0JGOus7y8ZhcJJ98QAAAD8"]
[Thu Jul 30 16:03:00.769735 2026] [ssl:error] [pid 3797779:tid 3797779] (EAI 2)Name or service not known: [client 144.76.19.72:56780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:00.769776 2026] [ssl:error] [pid 3797779:tid 3797779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:00.824313 2026] [ssl:error] [pid 3797677:tid 3797677] (EAI 2)Name or service not known: [client 144.76.19.72:56788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:00.824348 2026] [ssl:error] [pid 3797677:tid 3797677] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:01.559156 2026] [security2:error] [pid 3793125:tid 3793125] [client 94.23.188.203:23642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/robots.txt"] [unique_id "amtnpdw4wsSAgpyOhytoMAAAADc"]
[Thu Jul 30 16:03:02.146125 2026] [core:error] [pid 3796670:tid 3796670] (13)Permission denied: [client 216.73.216.199:2504] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/machinecheck/drivers_probe
[Thu Jul 30 16:03:02.321972 2026] [security2:error] [pid 3796190:tid 3796190] [client 43.164.196.47:41532] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtnpjSKuNT0N6ej6WnJ9AAAAAU"], referer: http://raidersofthegamecupboard.co.uk
[Thu Jul 30 16:03:02.448210 2026] [core:error] [pid 3796670:tid 3796670] (13)Permission denied: [client 216.73.216.199:2504] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-16/cache_dma
[Thu Jul 30 16:03:03.159930 2026] [access_compat:error] [pid 3797488:tid 3797488] [client 115.96.93.224:49539] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:03.351660 2026] [ssl:error] [pid 3786772:tid 3786772] (70014)End of file found: [client 216.73.216.199:50246] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:03.510719 2026] [authz_core:error] [pid 3797765:tid 3797765] [client 66.249.66.35:49802] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:03:03.513374 2026] [authz_core:error] [pid 3797765:tid 3797765] [client 66.249.66.35:49802] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:03:03.877479 2026] [ssl:error] [pid 3791243:tid 3791243] (EAI 2)Name or service not known: [client 144.76.19.72:56796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:03.877522 2026] [ssl:error] [pid 3791243:tid 3791243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:03.932293 2026] [ssl:error] [pid 3786889:tid 3786889] (EAI 2)Name or service not known: [client 144.76.19.72:56812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:03.932330 2026] [ssl:error] [pid 3786889:tid 3786889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:05.459857 2026] [security2:error] [pid 3796670:tid 3796670] [client 216.73.216.199:2504] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php_native_ver.dat"] [unique_id "amtnqYwmXbxm1jAIWlfIkgAAAB4"]
[Thu Jul 30 16:03:05.460163 2026] [security2:error] [pid 3796670:tid 3796670] [client 216.73.216.199:2504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php_native_ver.dat"] [unique_id "amtnqYwmXbxm1jAIWlfIkgAAAB4"]
[Thu Jul 30 16:03:05.460383 2026] [security2:error] [pid 3796670:tid 3796670] [client 216.73.216.199:2504] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/lve/php_native_ver.dat"] [unique_id "amtnqYwmXbxm1jAIWlfIkgAAAB4"]
[Thu Jul 30 16:03:05.760768 2026] [ssl:error] [pid 3796670:tid 3796670] (70014)End of file found: [client 216.73.216.199:2504] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:06.059508 2026] [security2:error] [pid 3783207:tid 3783207] [client 92.222.104.193:32608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kirmond.com"] [uri "/"] [unique_id "amtnqq3sRJzR8dy9rlzXFgAAAA4"]
[Thu Jul 30 16:03:06.364294 2026] [ssl:error] [pid 3797778:tid 3797778] (70014)End of file found: [client 216.73.216.199:17865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:07.005183 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:56814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:07.005220 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:07.060840 2026] [ssl:error] [pid 3795130:tid 3795130] (EAI 2)Name or service not known: [client 144.76.19.72:56824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:07.060870 2026] [ssl:error] [pid 3795130:tid 3795130] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:07.311380 2026] [lsapi:warn] [pid 3783207:tid 3783207] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:03:07.819548 2026] [authz_core:error] [pid 3783280:tid 3783280] [client 66.249.66.33:42320] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:03:07.822228 2026] [authz_core:error] [pid 3783280:tid 3783280] [client 66.249.66.33:42320] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:03:09.076925 2026] [ssl:error] [pid 3797157:tid 3797157] (70014)End of file found: [client 216.73.216.199:5692] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:10.117675 2026] [ssl:error] [pid 3797781:tid 3797781] (EAI 2)Name or service not known: [client 144.76.19.72:44534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:10.117705 2026] [ssl:error] [pid 3797781:tid 3797781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:10.171483 2026] [ssl:error] [pid 3797607:tid 3797607] (EAI 2)Name or service not known: [client 144.76.19.72:44548] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:10.171522 2026] [ssl:error] [pid 3797607:tid 3797607] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:11.064427 2026] [ssl:error] [pid 3791554:tid 3791554] (70014)End of file found: [client 216.73.216.199:20668] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:11.691650 2026] [ssl:error] [pid 3795130:tid 3795130] (70014)End of file found: [client 216.73.216.199:60334] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:13.229654 2026] [ssl:error] [pid 3797778:tid 3797778] (EAI 2)Name or service not known: [client 144.76.19.72:44560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:13.229695 2026] [ssl:error] [pid 3797778:tid 3797778] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:13.283081 2026] [ssl:error] [pid 3797766:tid 3797766] (EAI 2)Name or service not known: [client 144.76.19.72:44566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:13.283105 2026] [ssl:error] [pid 3797766:tid 3797766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:14.271686 2026] [access_compat:error] [pid 3790939:tid 3790939] [client 115.96.93.224:50097] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:14.395158 2026] [ssl:error] [pid 3796670:tid 3796670] (70014)End of file found: [client 216.73.216.199:54789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:14.495385 2026] [access_compat:error] [pid 3797557:tid 3797557] [client 82.38.180.30:43270] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/category
[Thu Jul 30 16:03:14.495511 2026] [access_compat:error] [pid 3797557:tid 3797557] [client 82.38.180.30:43270] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 16:03:14.592772 2026] [security2:error] [pid 3793124:tid 3793124] [client 43.157.172.39:58412] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tyredandmotional.co.uk"] [uri "/"] [unique_id "amtnsr5koEf2kJSERTz_iAAAADM"]
[Thu Jul 30 16:03:15.310377 2026] [core:error] [pid 3797770:tid 3797770] (13)Permission denied: [client 216.73.216.199:38653] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/subsystem/ttyS3/flags
[Thu Jul 30 16:03:16.319147 2026] [ssl:error] [pid 3797770:tid 3797770] (70014)End of file found: [client 216.73.216.199:38653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:16.338631 2026] [ssl:error] [pid 3793125:tid 3793125] (EAI 2)Name or service not known: [client 144.76.19.72:44576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:16.338655 2026] [ssl:error] [pid 3793125:tid 3793125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:16.391548 2026] [ssl:error] [pid 3789772:tid 3789772] (EAI 2)Name or service not known: [client 144.76.19.72:44586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:16.391573 2026] [ssl:error] [pid 3789772:tid 3789772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:16.973323 2026] [security2:error] [pid 3785299:tid 3785299] [client 43.157.172.39:33076] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amtntNR3mKDsydiaPIF92wAAABw"], referer: http://tyredandmotional.co.uk
[Thu Jul 30 16:03:17.379465 2026] [lsapi:warn] [pid 3797680:tid 3797680] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:03:17.527254 2026] [ssl:error] [pid 3797681:tid 3797681] (70014)End of file found: [client 216.73.216.199:26167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:17.527498 2026] [authz_core:error] [pid 3797611:tid 3797611] [client 66.249.66.33:44716] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:03:17.530160 2026] [authz_core:error] [pid 3797611:tid 3797611] [client 66.249.66.33:44716] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:03:18.694115 2026] [security2:error] [pid 3792263:tid 3792263] [client 190.5.44.118:57240] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtntgVdHrj0xfLRS8bP2AAAAC4"]
[Thu Jul 30 16:03:18.694165 2026] [security2:error] [pid 3792263:tid 3792263] [client 190.5.44.118:57240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtntgVdHrj0xfLRS8bP2AAAAC4"]
[Thu Jul 30 16:03:18.694442 2026] [security2:error] [pid 3792263:tid 3792263] [client 190.5.44.118:57240] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtntgVdHrj0xfLRS8bP2AAAAC4"]
[Thu Jul 30 16:03:18.725928 2026] [ssl:error] [pid 3797157:tid 3797157] (70014)End of file found: [client 216.73.216.199:52870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:18.995499 2026] [access_compat:error] [pid 3797676:tid 3797676] [client 45.158.164.139:46632] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:03:19.447975 2026] [ssl:error] [pid 3797680:tid 3797680] (EAI 2)Name or service not known: [client 144.76.19.72:44600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:19.448013 2026] [ssl:error] [pid 3797680:tid 3797680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:19.501057 2026] [ssl:error] [pid 3793125:tid 3793125] (EAI 2)Name or service not known: [client 144.76.19.72:44612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:19.501104 2026] [ssl:error] [pid 3793125:tid 3793125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:21.691048 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.167.170.90:26025] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnuTZpedruEIrGY8am1wAAAEY"]
[Thu Jul 30 16:03:21.691131 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.167.170.90:26025] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnuTZpedruEIrGY8am1wAAAEY"]
[Thu Jul 30 16:03:21.691389 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.167.170.90:26025] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtnuTZpedruEIrGY8am1wAAAEY"]
[Thu Jul 30 16:03:22.558659 2026] [ssl:error] [pid 3797774:tid 3797774] (EAI 2)Name or service not known: [client 144.76.19.72:64484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:22.558694 2026] [ssl:error] [pid 3797774:tid 3797774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:22.611874 2026] [ssl:error] [pid 3797611:tid 3797611] (EAI 2)Name or service not known: [client 144.76.19.72:64500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:22.611913 2026] [ssl:error] [pid 3797611:tid 3797611] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:22.944765 2026] [ssl:error] [pid 3791243:tid 3791243] (70014)End of file found: [client 216.73.216.199:62263] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:23.431459 2026] [ssl:error] [pid 3793125:tid 3793125] (70014)End of file found: [client 216.73.216.199:48663] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:25.171698 2026] [access_compat:error] [pid 3797770:tid 3797770] [client 115.96.93.224:50640] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:25.352958 2026] [ssl:error] [pid 3783280:tid 3783280] (70014)End of file found: [client 216.73.216.199:45970] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:25.453099 2026] [security2:error] [pid 3796824:tid 3796824] [client 114.119.157.183:22259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~17,103/request_format~html"] [unique_id "amtnvXK-FXpBLjGvbbodsQAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~17,103/request_format~html
[Thu Jul 30 16:03:25.669558 2026] [ssl:error] [pid 3797557:tid 3797557] (EAI 2)Name or service not known: [client 144.76.19.72:64504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:25.669594 2026] [ssl:error] [pid 3797557:tid 3797557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:25.723279 2026] [ssl:error] [pid 3797157:tid 3797157] (EAI 2)Name or service not known: [client 144.76.19.72:64514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:25.723302 2026] [ssl:error] [pid 3797157:tid 3797157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:26.001308 2026] [security2:error] [pid 3789807:tid 3789807] [client 43.167.170.90:17805] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnvXnJJRotFi3yNEBf5QAAABU"]
[Thu Jul 30 16:03:26.001368 2026] [security2:error] [pid 3789807:tid 3789807] [client 43.167.170.90:17805] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtnvXnJJRotFi3yNEBf5QAAABU"]
[Thu Jul 30 16:03:26.001625 2026] [security2:error] [pid 3789807:tid 3789807] [client 43.167.170.90:17805] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtnvXnJJRotFi3yNEBf5QAAABU"]
[Thu Jul 30 16:03:27.198495 2026] [security2:error] [pid 3791241:tid 3791241] [client 114.119.157.183:22269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~17,103/request_format~html"] [unique_id "amtnvzhQogV9dYcHprtkVgAAACM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~17,103/request_format~html
[Thu Jul 30 16:03:27.954637 2026] [lsapi:warn] [pid 3795130:tid 3795130] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:03:28.470231 2026] [security2:error] [pid 3796191:tid 3796191] [client 47.128.126.37:31698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amtnwAJ2ZgEzIepRh2zq7QAAABE"]
[Thu Jul 30 16:03:28.776236 2026] [ssl:error] [pid 3796784:tid 3796784] (EAI 2)Name or service not known: [client 144.76.19.72:64526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:28.776274 2026] [ssl:error] [pid 3796784:tid 3796784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:28.832422 2026] [ssl:error] [pid 3785296:tid 3785296] (EAI 2)Name or service not known: [client 144.76.19.72:64536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:28.832452 2026] [ssl:error] [pid 3785296:tid 3785296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:28.961031 2026] [ssl:error] [pid 3797766:tid 3797766] (70014)End of file found: [client 216.73.216.199:40943] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:29.266374 2026] [ssl:error] [pid 3796566:tid 3796566] (70014)End of file found: [client 216.73.216.199:17806] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:31.072426 2026] [ssl:error] [pid 3796191:tid 3796191] (70014)End of file found: [client 216.73.216.199:41770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:31.247784 2026] [access_compat:error] [pid 3797770:tid 3797770] [client 115.96.93.224:50974] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:31.768100 2026] [access_compat:error] [pid 3800115:tid 3800115] [client 45.158.164.139:46104] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:03:31.886002 2026] [ssl:error] [pid 3790938:tid 3790938] (EAI 2)Name or service not known: [client 144.76.19.72:29870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:31.886037 2026] [ssl:error] [pid 3790938:tid 3790938] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:32.027915 2026] [ssl:error] [pid 3792263:tid 3792263] (EAI 2)Name or service not known: [client 144.76.19.72:29872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:32.027947 2026] [ssl:error] [pid 3792263:tid 3792263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:34.388765 2026] [ssl:error] [pid 3797611:tid 3797611] (70014)End of file found: [client 216.73.216.199:7861] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:35.085131 2026] [ssl:error] [pid 3796566:tid 3796566] (EAI 2)Name or service not known: [client 144.76.19.72:29884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:35.085168 2026] [ssl:error] [pid 3796566:tid 3796566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:35.137047 2026] [ssl:error] [pid 3797769:tid 3797769] (EAI 2)Name or service not known: [client 144.76.19.72:29886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:35.137088 2026] [ssl:error] [pid 3797769:tid 3797769] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:35.582847 2026] [core:error] [pid 3797775:tid 3797775] (13)Permission denied: [client 216.73.216.199:43904] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty9/subsystem/ttyS0/close_delay
[Thu Jul 30 16:03:35.609226 2026] [access_compat:error] [pid 3785296:tid 3785296] [client 115.96.93.224:51183] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:36.486821 2026] [ssl:error] [pid 3797775:tid 3797775] (70014)End of file found: [client 216.73.216.199:43904] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:36.965973 2026] [cgi:error] [pid 3783353:tid 3783353] [client 20.151.221.234:44850] AH02812: stderr from /home/bigbangb/public_html/raidersofthegamecupboard.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:03:38.222504 2026] [ssl:error] [pid 3791241:tid 3791241] (EAI 2)Name or service not known: [client 144.76.19.72:29894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:38.222598 2026] [ssl:error] [pid 3791241:tid 3791241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:38.279051 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:29910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:38.279100 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:38.481184 2026] [lsapi:warn] [pid 3791554:tid 3791554] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:03:39.199932 2026] [ssl:error] [pid 3791102:tid 3791102] (70014)End of file found: [client 216.73.216.199:36824] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:39.801739 2026] [ssl:error] [pid 3791241:tid 3791241] (70014)End of file found: [client 216.73.216.199:6115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:41.332194 2026] [ssl:error] [pid 3797781:tid 3797781] (EAI 2)Name or service not known: [client 144.76.19.72:26890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:41.332225 2026] [ssl:error] [pid 3797781:tid 3797781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:41.386696 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:26898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:41.386724 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:41.687138 2026] [access_compat:error] [pid 3797680:tid 3797680] [client 115.96.93.224:51508] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:42.221322 2026] [ssl:error] [pid 3785296:tid 3785296] (70014)End of file found: [client 216.73.216.199:58673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:44.439776 2026] [ssl:error] [pid 3783353:tid 3783353] (EAI 2)Name or service not known: [client 144.76.19.72:26906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:44.439808 2026] [ssl:error] [pid 3783353:tid 3783353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:44.494232 2026] [ssl:error] [pid 3796566:tid 3796566] (EAI 2)Name or service not known: [client 144.76.19.72:26910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:44.494258 2026] [ssl:error] [pid 3796566:tid 3796566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:45.740637 2026] [core:error] [pid 3797557:tid 3797557] (13)Permission denied: [client 216.73.216.199:57196] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-2k/objs_per_slab
[Thu Jul 30 16:03:46.033688 2026] [security2:error] [pid 3785299:tid 3785299] [client 43.157.156.190:52178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "junglejacks.co.uk"] [uri "/"] [unique_id "amtn0tR3mKDsydiaPIF94gAAABw"]
[Thu Jul 30 16:03:46.181547 2026] [access_compat:error] [pid 3797778:tid 3797778] [client 115.96.93.224:51716] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:47.547227 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:26918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:47.547265 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:47.600030 2026] [ssl:error] [pid 3797681:tid 3797681] (EAI 2)Name or service not known: [client 144.76.19.72:26926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:47.600080 2026] [ssl:error] [pid 3797681:tid 3797681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:47.847316 2026] [ssl:error] [pid 3797557:tid 3797557] (70014)End of file found: [client 216.73.216.199:57196] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:48.171023 2026] [security2:error] [pid 3785296:tid 3785296] [client 85.208.96.197:61912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/dynata-interviewer-login"] [unique_id "amtn1IpXjGxiuuoHwvjRmwAAAA8"]
[Thu Jul 30 16:03:48.449080 2026] [ssl:error] [pid 3797783:tid 3797783] (70014)End of file found: [client 216.73.216.199:31977] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:48.844814 2026] [security2:error] [pid 3791554:tid 3791554] [client 43.157.156.190:55450] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amtn1KMIf50FLZagH3JEDQAAAC8"], referer: http://junglejacks.co.uk
[Thu Jul 30 16:03:49.371644 2026] [security2:error] [pid 3793125:tid 3793125] [client 43.130.31.17:42996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "secretbluestone.co.uk"] [uri "/"] [unique_id "amtn1dw4wsSAgpyOhytoPQAAADc"]
[Thu Jul 30 16:03:49.490175 2026] [lsapi:warn] [pid 3785299:tid 3785299] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:03:49.954425 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:24172] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:49.956615 2026] [security2:error] [pid 3797770:tid 3797770] [client 43.165.7.135:51134] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtn1QbguYJzD7Ge_3WY0QAAAEk"]
[Thu Jul 30 16:03:49.968830 2026] [lsapi:warn] [pid 3797769:tid 3797769] [client 117.237.6.9:14086] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://www.brodie-engineering.co.uk/case-studies
[Thu Jul 30 16:03:49.968872 2026] [lsapi:warn] [pid 3797769:tid 3797769] [client 117.237.6.9:14086] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://www.brodie-engineering.co.uk/case-studies
[Thu Jul 30 16:03:50.656734 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:46912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:50.656765 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:50.709292 2026] [ssl:error] [pid 3793125:tid 3793125] (EAI 2)Name or service not known: [client 144.76.19.72:46928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:50.709316 2026] [ssl:error] [pid 3793125:tid 3793125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:51.360343 2026] [security2:error] [pid 3793124:tid 3793124] [client 43.165.7.135:42876] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amtn175koEf2kJSERTz_kgAAADM"], referer: http://berehap.be
[Thu Jul 30 16:03:53.240279 2026] [security2:error] [pid 3797611:tid 3797611] [client 47.254.92.190:53550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amtn2RVnnWxE-c_dZn1T4QAAAC0"]
[Thu Jul 30 16:03:53.262493 2026] [ssl:error] [pid 3791241:tid 3791241] (70014)End of file found: [client 216.73.216.199:24149] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:53.634365 2026] [security2:error] [pid 3797557:tid 3797557] [client 85.208.96.200:54122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tripodhome.co.uk"] [uri "/robots.txt"] [unique_id "amtn2e7tFyVcNg9sEl8lcAAAACU"]
[Thu Jul 30 16:03:53.764690 2026] [ssl:error] [pid 3797157:tid 3797157] (EAI 2)Name or service not known: [client 144.76.19.72:46932] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:53.764723 2026] [ssl:error] [pid 3797157:tid 3797157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:53.820817 2026] [ssl:error] [pid 3796191:tid 3796191] (EAI 2)Name or service not known: [client 144.76.19.72:46938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:53.820853 2026] [ssl:error] [pid 3796191:tid 3796191] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:53.823539 2026] [security2:error] [pid 3798704:tid 3798704] [client 43.165.7.135:44896] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtn2W1ACgymLe-i3TlJNAAAAAA"], referer: https://www.berehap.be/
[Thu Jul 30 16:03:54.108661 2026] [core:error] [pid 3797783:tid 3797783] [client 20.215.191.139:10283] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:54.108685 2026] [core:error] [pid 3797783:tid 3797783] [client 20.215.191.139:10283] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:54.467232 2026] [ssl:error] [pid 3796672:tid 3796672] (70014)End of file found: [client 216.73.216.199:32270] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:54.841126 2026] [core:error] [pid 3796824:tid 3796824] [client 20.215.191.139:10259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:54.841152 2026] [core:error] [pid 3796824:tid 3796824] [client 20.215.191.139:10259] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:54.934807 2026] [security2:error] [pid 3798704:tid 3798704] [client 43.135.36.201:45566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "craft-buddies.co.uk"] [uri "/"] [unique_id "amtn2m1ACgymLe-i3TlJNQAAAAA"]
[Thu Jul 30 16:03:55.263122 2026] [ssl:error] [pid 3797775:tid 3797775] (70014)End of file found: [client 216.73.216.199:42259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:56.082119 2026] [core:error] [pid 3797782:tid 3797782] [client 20.215.191.139:10157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:56.082162 2026] [core:error] [pid 3797782:tid 3797782] [client 20.215.191.139:10157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:56.552764 2026] [core:error] [pid 3796824:tid 3796824] [client 20.215.191.139:38361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:56.552810 2026] [core:error] [pid 3796824:tid 3796824] [client 20.215.191.139:38361] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:56.877282 2026] [access_compat:error] [pid 3785299:tid 3785299] [client 115.96.93.224:52251] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:03:56.877604 2026] [ssl:error] [pid 3797782:tid 3797782] (EAI 2)Name or service not known: [client 144.76.19.72:46944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:56.877629 2026] [ssl:error] [pid 3797782:tid 3797782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:56.934007 2026] [ssl:error] [pid 3791554:tid 3791554] (EAI 2)Name or service not known: [client 144.76.19.72:46954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:56.934043 2026] [ssl:error] [pid 3791554:tid 3791554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:03:57.614376 2026] [core:error] [pid 3786889:tid 3786889] [client 20.215.191.139:10287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:57.614406 2026] [core:error] [pid 3786889:tid 3786889] [client 20.215.191.139:10287] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:57.683183 2026] [authz_core:error] [pid 3789807:tid 3789807] [client 104.219.215.141:35410] AH01630: client denied by server configuration: /home/lukess/public_html/error_log, referer: http://lukess.me/?yt1
[Thu Jul 30 16:03:58.054363 2026] [core:error] [pid 3801429:tid 3801429] [client 20.215.191.139:34370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:58.054396 2026] [core:error] [pid 3801429:tid 3801429] [client 20.215.191.139:34370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:58.604417 2026] [ssl:error] [pid 3792263:tid 3792263] (70014)End of file found: [client 216.73.216.199:9570] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:03:59.595895 2026] [lsapi:warn] [pid 3796784:tid 3796784] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:03:59.760840 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 20.215.191.139:34377] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/991176.php
[Thu Jul 30 16:03:59.761249 2026] [core:error] [pid 3797766:tid 3797766] [client 20.215.191.139:34377] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:03:59.990233 2026] [ssl:error] [pid 3800525:tid 3800525] (EAI 2)Name or service not known: [client 144.76.19.72:49674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:03:59.990272 2026] [ssl:error] [pid 3800525:tid 3800525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:00.045444 2026] [ssl:error] [pid 3797488:tid 3797488] (EAI 2)Name or service not known: [client 144.76.19.72:49676] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:00.045495 2026] [ssl:error] [pid 3797488:tid 3797488] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:00.083727 2026] [access_compat:error] [pid 3796253:tid 3796253] [client 20.215.191.139:10266] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/adminfuns.php
[Thu Jul 30 16:04:00.084046 2026] [core:error] [pid 3796253:tid 3796253] [client 20.215.191.139:10266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:00.448361 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10702] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/atomlib.php
[Thu Jul 30 16:04:00.448688 2026] [core:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:01.417379 2026] [ssl:error] [pid 3801566:tid 3801566] (70014)End of file found: [client 216.73.216.199:1168] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:01.595351 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10747] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/classsmtps.php
[Thu Jul 30 16:04:01.595747 2026] [core:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10747] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:01.871710 2026] [access_compat:error] [pid 3797681:tid 3797681] [client 20.215.191.139:38355] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/content.php
[Thu Jul 30 16:04:01.872052 2026] [core:error] [pid 3797681:tid 3797681] [client 20.215.191.139:38355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:02.020226 2026] [ssl:error] [pid 3800115:tid 3800115] (70014)End of file found: [client 216.73.216.199:41678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:02.053278 2026] [access_compat:error] [pid 3797778:tid 3797778] [client 20.215.191.139:10293] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/doc.php
[Thu Jul 30 16:04:02.053680 2026] [core:error] [pid 3797778:tid 3797778] [client 20.215.191.139:10293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:02.468995 2026] [security2:error] [pid 3797775:tid 3797775] [client 170.106.140.110:35950] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtn4u77sL_k2a5M7WSr9gAAAEw"]
[Thu Jul 30 16:04:02.652605 2026] [security2:error] [pid 3800525:tid 3800525] [client 43.157.170.13:44576] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spurr.org.uk"] [uri "/"] [unique_id "amtn4swXWIMkI_Yii-_mxAAAAAs"]
[Thu Jul 30 16:04:02.952756 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 115.96.93.224:52574] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:03.101541 2026] [ssl:error] [pid 3785299:tid 3785299] (EAI 2)Name or service not known: [client 144.76.19.72:49688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:03.101567 2026] [ssl:error] [pid 3785299:tid 3785299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:03.155648 2026] [ssl:error] [pid 3797774:tid 3797774] (EAI 2)Name or service not known: [client 144.76.19.72:49694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:03.155677 2026] [ssl:error] [pid 3797774:tid 3797774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:03.174470 2026] [core:error] [pid 3783285:tid 3783285] [client 20.215.191.139:34407] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:03.174498 2026] [core:error] [pid 3783285:tid 3783285] [client 20.215.191.139:34407] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:03.488558 2026] [security2:error] [pid 3791243:tid 3791243] [client 140.213.202.252:1796] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtn49kNT--HdzZohm5o_wAAACc"]
[Thu Jul 30 16:04:03.488605 2026] [security2:error] [pid 3791243:tid 3791243] [client 140.213.202.252:1796] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtn49kNT--HdzZohm5o_wAAACc"]
[Thu Jul 30 16:04:03.488861 2026] [security2:error] [pid 3791243:tid 3791243] [client 140.213.202.252:1796] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtn49kNT--HdzZohm5o_wAAACc"]
[Thu Jul 30 16:04:04.009900 2026] [ssl:error] [pid 3786772:tid 3786772] (70014)End of file found: [client 216.73.216.199:50746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:04.022549 2026] [access_compat:error] [pid 3800525:tid 3800525] [client 20.215.191.139:10245] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/fond.php
[Thu Jul 30 16:04:04.022884 2026] [core:error] [pid 3800525:tid 3800525] [client 20.215.191.139:10245] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:04.563284 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.166.245.120:57586] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.robin64.co.uk"] [uri "/"] [unique_id "amtn5DZpedruEIrGY8anQAAAAEY"]
[Thu Jul 30 16:04:05.426934 2026] [security2:error] [pid 3792263:tid 3792263] [client 170.106.140.110:38062] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtn5QVdHrj0xfLRS8bP5QAAAC4"], referer: http://hornsey-town-hall.org.uk
[Thu Jul 30 16:04:05.475542 2026] [security2:error] [pid 3783238:tid 3783238] [client 175.100.79.24:5062] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtn5a3m7XXIDA_3dOcxkQAAADQ"]
[Thu Jul 30 16:04:05.475592 2026] [security2:error] [pid 3783238:tid 3783238] [client 175.100.79.24:5062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtn5a3m7XXIDA_3dOcxkQAAADQ"]
[Thu Jul 30 16:04:05.475844 2026] [security2:error] [pid 3783238:tid 3783238] [client 175.100.79.24:5062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtn5a3m7XXIDA_3dOcxkQAAADQ"]
[Thu Jul 30 16:04:06.117304 2026] [core:error] [pid 3791243:tid 3791243] [client 20.215.191.139:34409] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:06.117354 2026] [core:error] [pid 3791243:tid 3791243] [client 20.215.191.139:34409] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:06.237445 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:49718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:06.237485 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:06.290762 2026] [ssl:error] [pid 3785299:tid 3785299] (EAI 2)Name or service not known: [client 144.76.19.72:49726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:06.290793 2026] [ssl:error] [pid 3785299:tid 3785299] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:06.531417 2026] [access_compat:error] [pid 3797157:tid 3797157] [client 20.215.191.139:38351] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/license.php
[Thu Jul 30 16:04:06.531750 2026] [core:error] [pid 3797157:tid 3797157] [client 20.215.191.139:38351] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:06.884702 2026] [access_compat:error] [pid 3791241:tid 3791241] [client 20.215.191.139:10705] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/mariju.php
[Thu Jul 30 16:04:06.885026 2026] [core:error] [pid 3791241:tid 3791241] [client 20.215.191.139:10705] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:07.138237 2026] [ssl:error] [pid 3793125:tid 3793125] (70014)End of file found: [client 216.73.216.199:21838] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:07.346242 2026] [access_compat:error] [pid 3783283:tid 3783283] [client 115.96.93.224:52780] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:08.457447 2026] [access_compat:error] [pid 3792263:tid 3792263] [client 20.215.191.139:34385] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/moon.php
[Thu Jul 30 16:04:08.457796 2026] [core:error] [pid 3792263:tid 3792263] [client 20.215.191.139:34385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:08.740844 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.164.196.47:48108] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "amtn6DZpedruEIrGY8anQQAAAEY"]
[Thu Jul 30 16:04:08.753655 2026] [core:error] [pid 3791485:tid 3791485] [client 20.215.191.139:10731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:08.753679 2026] [core:error] [pid 3791485:tid 3791485] [client 20.215.191.139:10731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:08.964921 2026] [security2:error] [pid 3797611:tid 3797611] [client 200.4.119.127:18587] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtn6BVnnWxE-c_dZn1T5wAAAC0"]
[Thu Jul 30 16:04:08.964969 2026] [security2:error] [pid 3797611:tid 3797611] [client 200.4.119.127:18587] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtn6BVnnWxE-c_dZn1T5wAAAC0"]
[Thu Jul 30 16:04:08.965257 2026] [security2:error] [pid 3797611:tid 3797611] [client 200.4.119.127:18587] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtn6BVnnWxE-c_dZn1T5wAAAC0"]
[Thu Jul 30 16:04:09.206817 2026] [security2:error] [pid 3789807:tid 3789807] [client 43.131.36.84:55508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amtn6XnJJRotFi3yNEBf8QAAABU"]
[Thu Jul 30 16:04:09.396342 2026] [ssl:error] [pid 3797157:tid 3797157] (EAI 2)Name or service not known: [client 144.76.19.72:49754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:09.396389 2026] [ssl:error] [pid 3797157:tid 3797157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:09.452490 2026] [ssl:error] [pid 3791241:tid 3791241] (EAI 2)Name or service not known: [client 144.76.19.72:49762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:09.452521 2026] [ssl:error] [pid 3791241:tid 3791241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:09.478988 2026] [access_compat:error] [pid 3797775:tid 3797775] [client 20.215.191.139:37919] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/sx.php
[Thu Jul 30 16:04:09.479356 2026] [core:error] [pid 3797775:tid 3797775] [client 20.215.191.139:37919] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:10.083372 2026] [core:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:10.083401 2026] [core:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:10.188389 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.164.196.47:50098] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtn6hdiGKNw_zw6Dlyi6AAAACs"], referer: http://spamp.co.uk
[Thu Jul 30 16:04:10.219879 2026] [security2:error] [pid 3786772:tid 3786772] [client 119.28.89.249:33280] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "fast-hosting.co.uk"] [uri "/"] [unique_id "amtn6rHDcooPRjp-ba2v_AAAABo"]
[Thu Jul 30 16:04:10.220285 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.135.182.43:60178] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "retrodisco.co.uk"] [uri "/"] [unique_id "amtn6jZpedruEIrGY8anQgAAAEY"]
[Thu Jul 30 16:04:10.301565 2026] [lsapi:warn] [pid 3801372:tid 3801372] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:04:10.707834 2026] [security2:error] [pid 3797611:tid 3797611] [client 43.131.36.84:43766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amtn6hVnnWxE-c_dZn1T6AAAAC0"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 16:04:10.747505 2026] [ssl:error] [pid 3796824:tid 3796824] (70014)End of file found: [client 216.73.216.199:41074] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:10.829908 2026] [lsapi:warn] [pid 3797611:tid 3797611] [client 43.131.36.84:43766] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 16:04:10.829952 2026] [lsapi:warn] [pid 3797611:tid 3797611] [client 43.131.36.84:43766] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk
[Thu Jul 30 16:04:11.429149 2026] [authz_core:error] [pid 3768540:tid 3768540] [client 66.249.66.35:54656] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:04:11.431908 2026] [authz_core:error] [pid 3768540:tid 3768540] [client 66.249.66.35:54656] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:04:11.571820 2026] [security2:error] [pid 3795131:tid 3795131] [client 119.28.89.249:34856] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amtn679FOfQRbk7sd9LSxQAAAAw"]
[Thu Jul 30 16:04:11.654216 2026] [ssl:error] [pid 3785296:tid 3785296] (70014)End of file found: [client 216.73.216.199:58867] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:11.758820 2026] [access_compat:error] [pid 3797681:tid 3797681] [client 20.215.191.139:10255] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/amaxx.php
[Thu Jul 30 16:04:11.759164 2026] [core:error] [pid 3797681:tid 3797681] [client 20.215.191.139:10255] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:12.172607 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.159.148.221:60974] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtn7BdiGKNw_zw6Dlyi6QAAACs"]
[Thu Jul 30 16:04:12.270890 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10691] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/bek.php
[Thu Jul 30 16:04:12.271237 2026] [core:error] [pid 3797766:tid 3797766] [client 20.215.191.139:10691] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:12.421795 2026] [security2:error] [pid 3795131:tid 3795131] [client 43.157.153.236:34216] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "loca.co.uk"] [uri "/"] [unique_id "amtn7L9FOfQRbk7sd9LSxgAAAAw"]
[Thu Jul 30 16:04:12.447024 2026] [ssl:error] [pid 3797681:tid 3797681] (70014)End of file found: [client 216.73.216.199:63906] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:12.715045 2026] [security2:error] [pid 3800476:tid 3800476] [client 43.157.179.227:33908] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hoo-hah.co.uk"] [uri "/"] [unique_id "amtn7IKcVrwOJrJvXZYH5QAAAAc"]
[Thu Jul 30 16:04:12.880555 2026] [security2:error] [pid 3796672:tid 3796672] [client 43.153.85.46:40064] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtn7Jhoa6IkxxrWz4lxMgAAACI"]
[Thu Jul 30 16:04:12.951656 2026] [ssl:error] [pid 3783285:tid 3783285] (EAI 2)Name or service not known: [client 144.76.19.72:33326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:12.951690 2026] [ssl:error] [pid 3783285:tid 3783285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:12.989114 2026] [security2:error] [pid 3789807:tid 3789807] [client 43.130.40.120:38222] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amtn7HnJJRotFi3yNEBf8wAAABU"]
[Thu Jul 30 16:04:13.008249 2026] [ssl:error] [pid 3797680:tid 3797680] (EAI 2)Name or service not known: [client 144.76.19.72:33336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:13.008272 2026] [ssl:error] [pid 3797680:tid 3797680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:13.008943 2026] [security2:error] [pid 3801671:tid 3801671] [client 170.106.140.110:44404] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "michael-boffey.co.uk"] [uri "/"] [unique_id "amtn7XE85VujPLwKs-z6uQAAABI"]
[Thu Jul 30 16:04:13.384492 2026] [security2:error] [pid 3796253:tid 3796253] [client 43.164.196.47:36852] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtn7dD7ppx-TdWuYJAg0wAAABc"], referer: http://spamp.com/
[Thu Jul 30 16:04:13.407824 2026] [access_compat:error] [pid 3791485:tid 3791485] [client 115.96.93.224:53211] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:13.474902 2026] [security2:error] [pid 3782147:tid 3782147] [client 43.130.40.120:38440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amtn7VV3eSnsDreNJLDVkgAAAAM"]
[Thu Jul 30 16:04:13.796413 2026] [access_compat:error] [pid 3798704:tid 3798704] [client 20.215.191.139:38340] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/caches.php.suspected
[Thu Jul 30 16:04:13.796772 2026] [core:error] [pid 3798704:tid 3798704] [client 20.215.191.139:38340] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:13.806778 2026] [security2:error] [pid 3797781:tid 3797781] [client 43.159.148.221:34542] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bes-systems.co.uk"] [uri "/"] [unique_id "amtn7b-PYs6dXagumO6tIwAAAFM"]
[Thu Jul 30 16:04:13.824718 2026] [security2:error] [pid 3801148:tid 3801148] [client 43.153.85.46:41022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtn7VUe64BktppWpaKcfAAAAAY"], referer: http://somethingweb.co.uk
[Thu Jul 30 16:04:14.086816 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.157.148.38:41842] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "techsuccess.uk"] [uri "/"] [unique_id "amtn7jZpedruEIrGY8anRAAAAEY"]
[Thu Jul 30 16:04:14.102605 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 20.215.191.139:10716] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/class.api.php
[Thu Jul 30 16:04:14.102922 2026] [core:error] [pid 3793124:tid 3793124] [client 20.215.191.139:10716] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:14.352204 2026] [security2:error] [pid 3796672:tid 3796672] [client 43.159.148.221:55238] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amtn7phoa6IkxxrWz4lxMwAAACI"], referer: http://unclaimedassets.co.uk
[Thu Jul 30 16:04:14.587297 2026] [access_compat:error] [pid 3800476:tid 3800476] [client 20.215.191.139:38363] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/cong.php
[Thu Jul 30 16:04:14.587640 2026] [core:error] [pid 3800476:tid 3800476] [client 20.215.191.139:38363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:14.732747 2026] [security2:error] [pid 3791241:tid 3791241] [client 43.134.15.174:48152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "quantum.com.mt"] [uri "/"] [unique_id "amtn7jhQogV9dYcHprtkYwAAACM"]
[Thu Jul 30 16:04:15.196936 2026] [security2:error] [pid 3802346:tid 3802346] [client 43.130.40.120:40990] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/"] [unique_id "amtn76yDmOMb-E8R5NR5dwAAAAI"]
[Thu Jul 30 16:04:15.277951 2026] [authz_core:error] [pid 3800115:tid 3800115] [client 66.249.66.34:42506] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:04:15.280625 2026] [authz_core:error] [pid 3800115:tid 3800115] [client 66.249.66.34:42506] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:04:15.332215 2026] [security2:error] [pid 3797781:tid 3797781] [client 43.153.85.46:37340] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtn77-PYs6dXagumO6tJAAAAFM"], referer: http://mwdesign.me.uk
[Thu Jul 30 16:04:15.431483 2026] [security2:error] [pid 3783238:tid 3783238] [client 43.130.9.111:49106] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "p2studio.co.uk"] [uri "/"] [unique_id "amtn763m7XXIDA_3dOcxlAAAADQ"]
[Thu Jul 30 16:04:15.901816 2026] [security2:error] [pid 3791241:tid 3791241] [client 43.159.148.221:57090] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amtn7zhQogV9dYcHprtkZAAAACM"], referer: http://bes-systems.co.uk
[Thu Jul 30 16:04:15.908789 2026] [security2:error] [pid 3801148:tid 3801148] [client 43.135.182.43:40822] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtn71Ue64BktppWpaKcfQAAAAY"], referer: http://retrodisco.co.uk
[Thu Jul 30 16:04:16.064352 2026] [ssl:error] [pid 3802346:tid 3802346] (EAI 2)Name or service not known: [client 144.76.19.72:33352] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:16.064383 2026] [ssl:error] [pid 3802346:tid 3802346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:16.119906 2026] [ssl:error] [pid 3802403:tid 3802403] (EAI 2)Name or service not known: [client 144.76.19.72:33356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:16.119943 2026] [ssl:error] [pid 3802403:tid 3802403] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:16.183447 2026] [ssl:error] [pid 3793124:tid 3793124] (70014)End of file found: [client 216.73.216.199:33902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:16.428510 2026] [cgi:error] [pid 3802404:tid 3802404] [client 216.73.216.199:6958] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/scripts/check_domain_tls_service_domains.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 16:04:16.428575 2026] [cgi:error] [pid 3802404:tid 3802404] [client 216.73.216.199:6958] End of script output before headers: check_domain_tls_service_domains.pl
[Thu Jul 30 16:04:16.606681 2026] [security2:error] [pid 3786889:tid 3786889] [client 43.157.98.187:58224] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtn8Pmkdc40_Z9AnQ-8aAAAACE"]
[Thu Jul 30 16:04:16.867316 2026] [security2:error] [pid 3791241:tid 3791241] [client 43.130.40.120:42678] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtn8DhQogV9dYcHprtkZQAAACM"], referer: http://swingaddiction.co.uk
[Thu Jul 30 16:04:16.908393 2026] [core:error] [pid 3797676:tid 3797676] (13)Permission denied: [client 216.73.216.199:57283] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fanotify_perm_event/min_partial
[Thu Jul 30 16:04:16.922981 2026] [cgi:error] [pid 3791241:tid 3791241] [client 43.130.40.120:42678] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://swingaddiction.co.uk
[Thu Jul 30 16:04:17.011492 2026] [ssl:error] [pid 3797676:tid 3797676] (70014)End of file found: [client 216.73.216.199:57283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:17.027048 2026] [security2:error] [pid 3796824:tid 3796824] [client 43.153.85.46:38424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mwdesign.me.uk"] [uri "/"] [unique_id "amtn8XK-FXpBLjGvbbodxwAAACo"], referer: http://mwdesign.me.uk
[Thu Jul 30 16:04:17.445322 2026] [security2:error] [pid 3797557:tid 3797557] [client 43.159.141.150:52002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "holistic-clear.co.uk"] [uri "/"] [unique_id "amtn8e7tFyVcNg9sEl8l2AAAACU"]
[Thu Jul 30 16:04:17.875767 2026] [access_compat:error] [pid 3786772:tid 3786772] [client 115.96.93.224:53496] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:17.910718 2026] [ssl:error] [pid 3801428:tid 3801428] (70014)End of file found: [client 216.73.216.199:8282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:18.030431 2026] [access_compat:error] [pid 3802346:tid 3802346] [client 20.215.191.139:38336] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/content.php
[Thu Jul 30 16:04:18.030782 2026] [core:error] [pid 3802346:tid 3802346] [client 20.215.191.139:38336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:18.031761 2026] [security2:error] [pid 3796670:tid 3796670] [client 43.130.40.120:43766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/"] [unique_id "amtn8owmXbxm1jAIWlfIoAAAAB4"]
[Thu Jul 30 16:04:18.397210 2026] [access_compat:error] [pid 3786889:tid 3786889] [client 20.215.191.139:38370] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/cwianpri.php
[Thu Jul 30 16:04:18.397599 2026] [core:error] [pid 3786889:tid 3786889] [client 20.215.191.139:38370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:18.613725 2026] [security2:error] [pid 3768540:tid 3768540] [client 43.164.3.182:43488] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "markmitchellphotography.co.uk"] [uri "/"] [unique_id "amtn8vL20SIJHpMn0pI4tQAAAB0"]
[Thu Jul 30 16:04:18.965439 2026] [security2:error] [pid 3797681:tid 3797681] [client 43.157.98.187:55438] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtn8vHl1Wb6-BcXeY-NYgAAAD4"], referer: http://staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 16:04:19.026902 2026] [access_compat:error] [pid 3796672:tid 3796672] [client 20.215.191.139:34489] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/elp.php
[Thu Jul 30 16:04:19.027292 2026] [core:error] [pid 3796672:tid 3796672] [client 20.215.191.139:34489] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:19.175641 2026] [ssl:error] [pid 3801148:tid 3801148] (EAI 2)Name or service not known: [client 144.76.19.72:33366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:19.175679 2026] [ssl:error] [pid 3801148:tid 3801148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:19.231896 2026] [ssl:error] [pid 3797157:tid 3797157] (EAI 2)Name or service not known: [client 144.76.19.72:33372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:19.231926 2026] [ssl:error] [pid 3797157:tid 3797157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:19.387856 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 20.215.191.139:37934] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/kwggvpup.php
[Thu Jul 30 16:04:19.388202 2026] [core:error] [pid 3797766:tid 3797766] [client 20.215.191.139:37934] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:19.680578 2026] [core:error] [pid 3801671:tid 3801671] [client 20.215.191.139:10692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:19.680605 2026] [core:error] [pid 3801671:tid 3801671] [client 20.215.191.139:10692] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:19.830107 2026] [security2:error] [pid 3797557:tid 3797557] [client 43.159.141.150:60924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtn8-7tFyVcNg9sEl8l2QAAACU"], referer: http://holistic-clear.co.uk
[Thu Jul 30 16:04:19.831950 2026] [authz_core:error] [pid 3797557:tid 3797557] [client 43.159.141.150:60924] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://holistic-clear.co.uk
[Thu Jul 30 16:04:19.834635 2026] [authz_core:error] [pid 3797557:tid 3797557] [client 43.159.141.150:60924] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://holistic-clear.co.uk
[Thu Jul 30 16:04:19.940527 2026] [security2:error] [pid 3796784:tid 3796784] [client 43.130.40.120:45644] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtn875yDW8TxcBf_7U7iQAAACY"], referer: http://all4s.co.uk
[Thu Jul 30 16:04:20.781736 2026] [security2:error] [pid 3791102:tid 3791102] [client 43.165.198.144:49592] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "islay.me"] [uri "/"] [unique_id "amtn9PnsL2HF11-e0T7gDwAAAB8"]
[Thu Jul 30 16:04:21.235205 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:04:21.694018 2026] [security2:error] [pid 3802404:tid 3802404] [client 43.133.139.6:52090] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amtn9QN09j4SXEleF4Zi7QAAAAs"]
[Thu Jul 30 16:04:21.796898 2026] [core:error] [pid 3791243:tid 3791243] [client 20.215.191.139:10690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:21.796922 2026] [core:error] [pid 3791243:tid 3791243] [client 20.215.191.139:10690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:22.289918 2026] [ssl:error] [pid 3800115:tid 3800115] (EAI 2)Name or service not known: [client 144.76.19.72:36008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:22.289951 2026] [ssl:error] [pid 3800115:tid 3800115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:22.347587 2026] [ssl:error] [pid 3797681:tid 3797681] (EAI 2)Name or service not known: [client 144.76.19.72:36014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:22.347619 2026] [ssl:error] [pid 3797681:tid 3797681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:22.687952 2026] [core:error] [pid 3797611:tid 3797611] [client 20.215.191.139:10310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:22.687984 2026] [core:error] [pid 3797611:tid 3797611] [client 20.215.191.139:10310] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:23.549785 2026] [security2:error] [pid 3791102:tid 3791102] [client 43.130.101.151:46898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "robin64.co.uk"] [uri "/"] [unique_id "amtn9_nsL2HF11-e0T7gEAAAAB8"]
[Thu Jul 30 16:04:23.923113 2026] [access_compat:error] [pid 3793124:tid 3793124] [client 45.158.164.139:58268] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:04:24.451427 2026] [security2:error] [pid 3797676:tid 3797676] [client 170.106.160.90:53358] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amtn-EZMDl6YuAsf7Kh0XQAAADg"]
[Thu Jul 30 16:04:24.823543 2026] [security2:error] [pid 3801428:tid 3801428] [client 43.159.148.221:46642] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saliency.co.uk"] [uri "/"] [unique_id "amtn-BwokLJzczn4b4aUJAAAAA0"]
[Thu Jul 30 16:04:25.153797 2026] [core:error] [pid 3797766:tid 3797766] (13)Permission denied: [client 216.73.216.199:46764] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty49/subsystem/ttyS3/close_delay
[Thu Jul 30 16:04:25.402395 2026] [ssl:error] [pid 3796784:tid 3796784] (EAI 2)Name or service not known: [client 144.76.19.72:36020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:25.402438 2026] [ssl:error] [pid 3796784:tid 3796784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:25.455956 2026] [ssl:error] [pid 3797766:tid 3797766] (70014)End of file found: [client 216.73.216.199:46764] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:25.458265 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:36026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:25.458286 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:26.350214 2026] [security2:error] [pid 3797681:tid 3797681] [client 43.155.162.41:45160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtn-vHl1Wb6-BcXeY-NZAAAAD4"], referer: http://banskoexpress.co.uk
[Thu Jul 30 16:04:26.660774 2026] [ssl:error] [pid 3796784:tid 3796784] (70014)End of file found: [client 216.73.216.199:60169] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:26.966452 2026] [ssl:error] [pid 3785296:tid 3785296] (70014)End of file found: [client 216.73.216.199:35041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:27.262505 2026] [security2:error] [pid 3797676:tid 3797676] [client 43.164.196.47:43508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highcleresyndicates.co.uk"] [uri "/"] [unique_id "amtn-0ZMDl6YuAsf7Kh0XwAAADg"]
[Thu Jul 30 16:04:27.688895 2026] [security2:error] [pid 3797676:tid 3797676] [client 5.161.62.209:5200] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "innerspacer.co.uk"] [uri "/.env"] [unique_id "amtn-0ZMDl6YuAsf7Kh0YAAAADg"]
[Thu Jul 30 16:04:27.689116 2026] [security2:error] [pid 3797676:tid 3797676] [client 5.161.62.209:5200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "innerspacer.co.uk"] [uri "/.env"] [unique_id "amtn-0ZMDl6YuAsf7Kh0YAAAADg"]
[Thu Jul 30 16:04:27.689324 2026] [security2:error] [pid 3797676:tid 3797676] [client 5.161.62.209:5200] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "innerspacer.co.uk"] [uri "/.env"] [unique_id "amtn-0ZMDl6YuAsf7Kh0YAAAADg"]
[Thu Jul 30 16:04:27.917664 2026] [core:error] [pid 3802792:tid 3802792] [client 20.215.191.139:38360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:27.917707 2026] [core:error] [pid 3802792:tid 3802792] [client 20.215.191.139:38360] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:27.990985 2026] [security2:error] [pid 3797680:tid 3797680] [client 43.155.162.41:52976] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtn-3i9IztF5IirxDn04wAAAD0"], referer: http://www.banskoexpress.com
[Thu Jul 30 16:04:28.697773 2026] [ssl:error] [pid 3783280:tid 3783280] (EAI 2)Name or service not known: [client 144.76.19.72:36032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:28.697798 2026] [ssl:error] [pid 3783280:tid 3783280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:28.871104 2026] [core:error] [pid 3783280:tid 3783280] [client 20.215.191.139:10274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:28.871132 2026] [core:error] [pid 3783280:tid 3783280] [client 20.215.191.139:10274] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:28.880378 2026] [access_compat:error] [pid 3802792:tid 3802792] [client 115.96.93.224:54156] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:29.012506 2026] [security2:error] [pid 3786772:tid 3786772] [client 43.157.150.69:40584] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtn_bHDcooPRjp-ba2wAAAAABo"], referer: http://banskoexpresstransfers.co.uk
[Thu Jul 30 16:04:29.039837 2026] [ssl:error] [pid 3792263:tid 3792263] (EAI 2)Name or service not known: [client 144.76.19.72:36046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:29.039864 2026] [ssl:error] [pid 3792263:tid 3792263] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:29.166809 2026] [core:error] [pid 3793125:tid 3793125] [client 20.215.191.139:10281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:29.166838 2026] [core:error] [pid 3793125:tid 3793125] [client 20.215.191.139:10281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:29.720651 2026] [security2:error] [pid 3783280:tid 3783280] [client 43.134.15.174:38720] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.co.uk"] [uri "/"] [unique_id "amtn_fLe3xh7-HY8BzlBVAAAAEE"]
[Thu Jul 30 16:04:30.206267 2026] [security2:error] [pid 3802838:tid 3802838] [client 43.157.150.69:60634] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtn_qdd_UCsfHT3ZIE8TwAAABY"], referer: http://www.banskoexpress.com
[Thu Jul 30 16:04:30.467148 2026] [security2:error] [pid 3795131:tid 3795131] [client 43.134.54.246:46370] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtn_r9FOfQRbk7sd9LSzAAAAAw"]
[Thu Jul 30 16:04:30.605180 2026] [security2:error] [pid 3797157:tid 3797157] [client 43.166.242.189:56458] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "localhero.org.uk"] [uri "/"] [unique_id "amtn_uzcmTq0sAsD8smsKgAAAAg"]
[Thu Jul 30 16:04:31.059794 2026] [security2:error] [pid 3801566:tid 3801566] [client 43.153.49.151:34070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tripodhome.co.uk"] [uri "/"] [unique_id "amtn_7XYAFCZIdJ4HDcQvwAAABA"]
[Thu Jul 30 16:04:31.639993 2026] [lsapi:warn] [pid 3802839:tid 3802839] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:04:31.811125 2026] [core:error] [pid 3786772:tid 3786772] [client 20.215.191.139:34381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:31.811157 2026] [core:error] [pid 3786772:tid 3786772] [client 20.215.191.139:34381] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:04:32.078479 2026] [security2:error] [pid 3797779:tid 3797779] [client 43.159.141.150:36586] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "marcwhiffen.co.uk"] [uri "/"] [unique_id "amtoAN60_AraApW13_D_ugAAAFE"]
[Thu Jul 30 16:04:32.079328 2026] [authz_core:error] [pid 3797779:tid 3797779] [client 43.159.141.150:36586] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 16:04:32.093323 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:35114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:32.093355 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:32.150514 2026] [ssl:error] [pid 3797766:tid 3797766] (EAI 2)Name or service not known: [client 144.76.19.72:35122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:32.150544 2026] [ssl:error] [pid 3797766:tid 3797766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:32.463062 2026] [core:error] [pid 3793125:tid 3793125] (13)Permission denied: [client 216.73.216.199:59182] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty53/subsystem/ttyS0/close_delay
[Thu Jul 30 16:04:33.068454 2026] [security2:error] [pid 3786772:tid 3786772] [client 43.134.54.246:50242] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtoAbHDcooPRjp-ba2wAwAAABo"], referer: http://apotheekcandidejacobs.be
[Thu Jul 30 16:04:33.968779 2026] [ssl:error] [pid 3793125:tid 3793125] (70014)End of file found: [client 216.73.216.199:59182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:34.670895 2026] [ssl:error] [pid 3802838:tid 3802838] (70014)End of file found: [client 216.73.216.199:6230] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:35.025359 2026] [access_compat:error] [pid 3801428:tid 3801428] [client 115.96.93.224:54536] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:35.176489 2026] [core:error] [pid 3783238:tid 3783238] (13)Permission denied: [client 216.73.216.199:11033] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty5/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 16:04:35.207272 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:35132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:35.207301 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:35.260797 2026] [ssl:error] [pid 3802404:tid 3802404] (EAI 2)Name or service not known: [client 144.76.19.72:35148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:35.260828 2026] [ssl:error] [pid 3802404:tid 3802404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:35.526594 2026] [access_compat:error] [pid 3796784:tid 3796784] [client 45.158.164.139:44846] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:04:35.695105 2026] [security2:error] [pid 3801671:tid 3801671] [client 106.52.49.148:55678] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.iapib.com"] [uri "/"] [unique_id "amtoA3E85VujPLwKs-z6wQAAABI"]
[Thu Jul 30 16:04:35.777423 2026] [core:error] [pid 3783238:tid 3783238] (13)Permission denied: [client 216.73.216.199:11033] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty6/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 16:04:36.078595 2026] [core:error] [pid 3783238:tid 3783238] (13)Permission denied: [client 216.73.216.199:11033] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 16:04:36.618441 2026] [security2:error] [pid 3792263:tid 3792263] [client 43.134.236.36:40572] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amtoBAVdHrj0xfLRS8bP7wAAAC4"]
[Thu Jul 30 16:04:36.662674 2026] [security2:error] [pid 3791241:tid 3791241] [client 106.52.49.148:56738] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "iapib.com"] [uri "/"] [unique_id "amtoBDhQogV9dYcHprtkaQAAACM"], referer: http://www.iapib.com
[Thu Jul 30 16:04:36.697811 2026] [security2:error] [pid 3801428:tid 3801428] [client 43.164.131.148:55842] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amtoBBwokLJzczn4b4aUJwAAAA0"]
[Thu Jul 30 16:04:36.909211 2026] [security2:error] [pid 3802792:tid 3802792] [client 43.173.1.69:36212] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amtoBJdDCPKKsp99FrDHeAAAABE"]
[Thu Jul 30 16:04:37.744025 2026] [security2:error] [pid 3786772:tid 3786772] [client 43.134.236.36:59440] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hazardous-materials.co.uk"] [uri "/"] [unique_id "amtoBbHDcooPRjp-ba2wBQAAABo"], referer: http://hazardous-materials.co.uk
[Thu Jul 30 16:04:37.886415 2026] [core:error] [pid 3783238:tid 3783238] (13)Permission denied: [client 216.73.216.199:11033] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty37/subsystem/ttyS2/uartclk
[Thu Jul 30 16:04:38.025162 2026] [security2:error] [pid 3802791:tid 3802791] [client 43.164.131.148:57314] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amtoBjWGJFxdIk9_Axd2_QAAAA4"]
[Thu Jul 30 16:04:38.340268 2026] [ssl:error] [pid 3801566:tid 3801566] (EAI 2)Name or service not known: [client 144.76.19.72:35152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:38.340352 2026] [ssl:error] [pid 3801566:tid 3801566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:38.393917 2026] [ssl:error] [pid 3802404:tid 3802404] (EAI 2)Name or service not known: [client 144.76.19.72:35162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:38.393946 2026] [ssl:error] [pid 3802404:tid 3802404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:38.997765 2026] [access_compat:error] [pid 3792263:tid 3792263] [client 115.96.93.224:54725] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:39.273259 2026] [security2:error] [pid 3801148:tid 3801148] [client 43.135.133.241:34462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sharonduggal.co.uk"] [uri "/"] [unique_id "amtoB1Ue64BktppWpaKchQAAAAY"]
[Thu Jul 30 16:04:39.485253 2026] [ssl:error] [pid 3783238:tid 3783238] (70014)End of file found: [client 216.73.216.199:11033] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:39.702383 2026] [ssl:error] [pid 3796784:tid 3796784] (70014)End of file found: [client 216.73.216.199:37367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:41.147871 2026] [security2:error] [pid 3791241:tid 3791241] [client 43.164.131.148:55908] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtoCThQogV9dYcHprtkagAAACM"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 16:04:41.148233 2026] [security2:error] [pid 3786772:tid 3786772] [client 43.164.131.148:55868] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtoCbHDcooPRjp-ba2wBgAAABo"], referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 16:04:41.149706 2026] [authz_core:error] [pid 3791241:tid 3791241] [client 43.164.131.148:55908] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 16:04:41.149966 2026] [authz_core:error] [pid 3786772:tid 3786772] [client 43.164.131.148:55868] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 16:04:41.152391 2026] [authz_core:error] [pid 3791241:tid 3791241] [client 43.164.131.148:55908] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 16:04:41.152617 2026] [authz_core:error] [pid 3786772:tid 3786772] [client 43.164.131.148:55868] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiology-in-london.co.uk
[Thu Jul 30 16:04:41.341180 2026] [core:crit] [pid 3797609:tid 3797609] (13)Permission denied: [client 52.167.144.158:17415] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 16:04:41.448547 2026] [ssl:error] [pid 3791102:tid 3791102] (EAI 2)Name or service not known: [client 144.76.19.72:37322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:41.448576 2026] [ssl:error] [pid 3791102:tid 3791102] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:41.505143 2026] [ssl:error] [pid 3797557:tid 3797557] (EAI 2)Name or service not known: [client 144.76.19.72:37338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:41.505171 2026] [ssl:error] [pid 3797557:tid 3797557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:41.572522 2026] [authz_core:error] [pid 3797488:tid 3797488] [client 66.249.66.33:35635] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:04:41.575173 2026] [authz_core:error] [pid 3797488:tid 3797488] [client 66.249.66.33:35635] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:04:41.808817 2026] [ssl:error] [pid 3800476:tid 3800476] (70014)End of file found: [client 216.73.216.199:42819] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:41.852824 2026] [security2:error] [pid 3791102:tid 3791102] [client 43.164.1.211:38278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtoCfnsL2HF11-e0T7gFQAAAB8"]
[Thu Jul 30 16:04:42.267960 2026] [lsapi:warn] [pid 3802836:tid 3802836] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:04:42.510956 2026] [security2:error] [pid 3768540:tid 3768540] [client 43.164.1.211:38336] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.fr"] [uri "/"] [unique_id "amtoCvL20SIJHpMn0pI5DQAAAB0"]
[Thu Jul 30 16:04:43.426794 2026] [authz_core:error] [pid 3797488:tid 3797488] [client 66.249.66.33:35635] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:04:43.429456 2026] [authz_core:error] [pid 3797488:tid 3797488] [client 66.249.66.33:35635] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:04:43.934012 2026] [security2:error] [pid 3803353:tid 3803353] [client 180.181.244.244:39958] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtoC1Bml_c8fdH4lrNWpAAAAA0"]
[Thu Jul 30 16:04:44.126704 2026] [security2:error] [pid 3791243:tid 3791243] [client 43.153.10.83:43084] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "amtoDNkNT--HdzZohm5pDAAAACc"]
[Thu Jul 30 16:04:44.374389 2026] [security2:error] [pid 3800115:tid 3800115] [client 43.164.1.211:42470] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtoDAhM8tsGkXvPR2BGiwAAAAQ"], referer: http://orgent.eu
[Thu Jul 30 16:04:44.562200 2026] [ssl:error] [pid 3803379:tid 3803379] (EAI 2)Name or service not known: [client 144.76.19.72:37348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:44.562247 2026] [ssl:error] [pid 3803379:tid 3803379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:44.619007 2026] [ssl:error] [pid 3803380:tid 3803380] (EAI 2)Name or service not known: [client 144.76.19.72:37358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:44.619052 2026] [ssl:error] [pid 3803380:tid 3803380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:45.419608 2026] [ssl:error] [pid 3783238:tid 3783238] (70014)End of file found: [client 216.73.216.199:32629] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:45.997800 2026] [security2:error] [pid 3783280:tid 3783280] [client 139.155.126.16:42846] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.maisongerlyn.be"] [uri "/"] [unique_id "amtoDfLe3xh7-HY8BzlBXAAAAEE"]
[Thu Jul 30 16:04:46.017218 2026] [security2:error] [pid 3791243:tid 3791243] [client 43.157.98.187:58390] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parallel-coordinates.co.uk"] [uri "/"] [unique_id "amtoDtkNT--HdzZohm5pDgAAACc"]
[Thu Jul 30 16:04:46.093375 2026] [security2:error] [pid 3797680:tid 3797680] [client 43.164.1.211:45308] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtoDni9IztF5IirxDn05wAAAD0"], referer: http://orgent.fr
[Thu Jul 30 16:04:46.628040 2026] [core:error] [pid 3797676:tid 3797676] (13)Permission denied: [client 216.73.216.199:63820] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty50/subsystem/ttyS1/flags
[Thu Jul 30 16:04:46.930697 2026] [security2:error] [pid 3797676:tid 3797676] [client 216.73.216.199:63820] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/opt/alt/alt-php-config/alt-php.cfg"] [unique_id "amtoDkZMDl6YuAsf7Kh0igAAADg"]
[Thu Jul 30 16:04:46.930992 2026] [security2:error] [pid 3797676:tid 3797676] [client 216.73.216.199:63820] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/opt/alt/alt-php-config/alt-php.cfg"] [unique_id "amtoDkZMDl6YuAsf7Kh0igAAADg"]
[Thu Jul 30 16:04:46.931227 2026] [security2:error] [pid 3797676:tid 3797676] [client 216.73.216.199:63820] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/opt/alt/alt-php-config/alt-php.cfg"] [unique_id "amtoDkZMDl6YuAsf7Kh0igAAADg"]
[Thu Jul 30 16:04:46.964894 2026] [security2:error] [pid 3796670:tid 3796670] [client 43.133.69.37:34530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtoDowmXbxm1jAIWlfIpwAAAB4"]
[Thu Jul 30 16:04:47.676022 2026] [ssl:error] [pid 3797774:tid 3797774] (EAI 2)Name or service not known: [client 144.76.19.72:37372] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:47.676054 2026] [ssl:error] [pid 3797774:tid 3797774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:47.729392 2026] [ssl:error] [pid 3802837:tid 3802837] (EAI 2)Name or service not known: [client 144.76.19.72:37386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:47.729425 2026] [ssl:error] [pid 3802837:tid 3802837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:47.941470 2026] [security2:error] [pid 3802791:tid 3802791] [client 43.166.131.228:46214] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amtoDzWGJFxdIk9_Axd2_wAAAA4"]
[Thu Jul 30 16:04:48.047369 2026] [security2:error] [pid 3797766:tid 3797766] [client 114.119.155.144:50537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~102,18/request_format~html"] [unique_id "amtoEFouQu6tGwUDkcxMSQAAAEc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~102,18/request_format~html
[Thu Jul 30 16:04:48.436059 2026] [ssl:error] [pid 3797676:tid 3797676] (70014)End of file found: [client 216.73.216.199:63820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:48.594206 2026] [security2:error] [pid 3791243:tid 3791243] [client 85.208.96.193:54844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/bayou-club-houston-membership-fees"] [unique_id "amtoENkNT--HdzZohm5pEAAAACc"]
[Thu Jul 30 16:04:48.834822 2026] [security2:error] [pid 3797488:tid 3797488] [client 43.130.154.56:49424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtoELWt0eOAG0X6ZWFrSQAAABk"]
[Thu Jul 30 16:04:48.906652 2026] [security2:error] [pid 3803380:tid 3803380] [client 85.208.96.209:25378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1524.0/prev_next,prev.html"] [unique_id "amtoEC9YZI-WfHEdm98VpQAAABw"]
[Thu Jul 30 16:04:49.340032 2026] [ssl:error] [pid 3802837:tid 3802837] (70014)End of file found: [client 216.73.216.199:65505] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:49.401207 2026] [authz_core:error] [pid 3803323:tid 3803323] [client 157.55.39.201:46078] AH01630: client denied by server configuration: /home/winterb/public_html/wordpress0/wp-includes/js/tinymce/error_log
[Thu Jul 30 16:04:49.642701 2026] [security2:error] [pid 3796670:tid 3796670] [client 139.155.126.16:41982] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtoEYwmXbxm1jAIWlfIqAAAAB4"], referer: http://www.maisongerlyn.be
[Thu Jul 30 16:04:49.663478 2026] [access_compat:error] [pid 3802839:tid 3802839] [client 115.96.93.224:55263] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:04:49.786248 2026] [security2:error] [pid 3791243:tid 3791243] [client 114.119.155.144:50551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1573344000/cat_ids~102,18/request_format~html"] [unique_id "amtoEdkNT--HdzZohm5pEQAAACc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1573344000/cat_ids~102,18/request_format~html
[Thu Jul 30 16:04:50.005799 2026] [security2:error] [pid 3803380:tid 3803380] [client 43.130.154.56:50706] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtoEi9YZI-WfHEdm98VpgAAABw"], referer: http://rogersbarbershopltd.co.uk
[Thu Jul 30 16:04:50.254979 2026] [security2:error] [pid 3785296:tid 3785296] [client 43.133.69.37:58274] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtoEopXjGxiuuoHwvjRtAAAAA8"], referer: http://beechhouseselfcatering.co.uk
[Thu Jul 30 16:04:50.632828 2026] [security2:error] [pid 3797783:tid 3797783] [client 43.164.131.148:40772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dbstart.co.uk"] [uri "/"] [unique_id "amtoEjpcdNOmcVO50wd7PAAAAFU"]
[Thu Jul 30 16:04:50.636002 2026] [authz_core:error] [pid 3797783:tid 3797783] [client 43.164.131.148:40772] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 16:04:50.642043 2026] [authz_core:error] [pid 3797783:tid 3797783] [client 43.164.131.148:40772] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 16:04:50.783605 2026] [ssl:error] [pid 3803377:tid 3803377] (EAI 2)Name or service not known: [client 144.76.19.72:54674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:50.783650 2026] [ssl:error] [pid 3803377:tid 3803377] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:50.842527 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:54688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:50.842556 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:51.156213 2026] [security2:error] [pid 3783238:tid 3783238] [client 124.156.179.141:37470] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wurlitzer.co.uk"] [uri "/"] [unique_id "amtoE63m7XXIDA_3dOcxqgAAADQ"]
[Thu Jul 30 16:04:52.055005 2026] [ssl:error] [pid 3800115:tid 3800115] (70014)End of file found: [client 216.73.216.199:35894] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:52.528978 2026] [lsapi:warn] [pid 3768540:tid 3768540] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:04:52.845716 2026] [security2:error] [pid 3802791:tid 3802791] [client 43.163.80.48:38040] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.co.uk"] [uri "/"] [unique_id "amtoFDWGJFxdIk9_Axd3AgAAAA4"]
[Thu Jul 30 16:04:52.940185 2026] [security2:error] [pid 3802792:tid 3802792] [client 43.162.95.192:49052] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/"] [unique_id "amtoFJdDCPKKsp99FrDHfwAAABE"]
[Thu Jul 30 16:04:53.079826 2026] [security2:error] [pid 3800476:tid 3800476] [client 124.156.179.141:38892] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtoFYKcVrwOJrJvXZYH9AAAAAc"], referer: http://wurlitzer.co.uk
[Thu Jul 30 16:04:53.742951 2026] [ssl:error] [pid 3797766:tid 3797766] (70014)End of file found: [client 216.73.216.199:26370] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:53.907412 2026] [ssl:error] [pid 3796784:tid 3796784] (EAI 2)Name or service not known: [client 144.76.19.72:54694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:53.907451 2026] [ssl:error] [pid 3796784:tid 3796784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:53.963798 2026] [ssl:error] [pid 3768540:tid 3768540] (EAI 2)Name or service not known: [client 144.76.19.72:54704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:53.963823 2026] [ssl:error] [pid 3768540:tid 3768540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:54.813714 2026] [security2:error] [pid 3801566:tid 3801566] [client 43.162.95.192:50832] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtoFrXYAFCZIdJ4HDcQxgAAABA"], referer: http://clarepillinger.co.uk
[Thu Jul 30 16:04:54.877221 2026] [security2:error] [pid 3797676:tid 3797676] [client 43.163.80.48:42838] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amtoFkZMDl6YuAsf7Kh0kAAAADg"], referer: http://saturnsports.co.uk
[Thu Jul 30 16:04:55.079581 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:58609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:57.016835 2026] [ssl:error] [pid 3797781:tid 3797781] (EAI 2)Name or service not known: [client 144.76.19.72:54710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:57.016877 2026] [ssl:error] [pid 3797781:tid 3797781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:57.071366 2026] [ssl:error] [pid 3795131:tid 3795131] (EAI 2)Name or service not known: [client 144.76.19.72:54722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:04:57.071404 2026] [ssl:error] [pid 3795131:tid 3795131] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:04:57.231620 2026] [security2:error] [pid 3797488:tid 3797488] [client 43.134.56.214:53464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtoGbWt0eOAG0X6ZWFrTAAAABk"]
[Thu Jul 30 16:04:57.429705 2026] [security2:error] [pid 3783238:tid 3783238] [client 43.161.233.190:34500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amtoGa3m7XXIDA_3dOcxrwAAADQ"]
[Thu Jul 30 16:04:58.102696 2026] [core:error] [pid 3797557:tid 3797557] (13)Permission denied: [client 216.73.216.199:60615] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:61/subsystem/ttyS0/line
[Thu Jul 30 16:04:58.404032 2026] [ssl:error] [pid 3797557:tid 3797557] (70014)End of file found: [client 216.73.216.199:60615] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:04:59.083412 2026] [security2:error] [pid 3802839:tid 3802839] [client 47.128.36.109:19940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/robots.txt"] [unique_id "amtoG-Qa6bUedvRQ1fZKbQAAABc"]
[Thu Jul 30 16:04:59.786640 2026] [security2:error] [pid 3785214:tid 3785214] [client 43.134.56.214:45180] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtoGzj2G5RVeD-DmbktFQAAAAo"], referer: http://maisongerlyn.be
[Thu Jul 30 16:04:59.825887 2026] [security2:error] [pid 3802839:tid 3802839] [client 43.159.128.247:60752] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "astleydogpark.co.uk"] [uri "/"] [unique_id "amtoG-Qa6bUedvRQ1fZKbgAAABc"]
[Thu Jul 30 16:04:59.919796 2026] [ssl:error] [pid 3797488:tid 3797488] (70014)End of file found: [client 216.73.216.199:24062] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:00.083859 2026] [core:error] [pid 3791554:tid 3791554] [client 66.249.66.8:53618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:05:00.083885 2026] [core:error] [pid 3791554:tid 3791554] [client 66.249.66.8:53618] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:05:00.125196 2026] [ssl:error] [pid 3797680:tid 3797680] (EAI 2)Name or service not known: [client 144.76.19.72:61612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:00.125227 2026] [ssl:error] [pid 3797680:tid 3797680] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:00.141645 2026] [access_compat:error] [pid 3797676:tid 3797676] [client 115.96.93.224:55784] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:00.180598 2026] [ssl:error] [pid 3797783:tid 3797783] (EAI 2)Name or service not known: [client 144.76.19.72:61626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:00.180630 2026] [ssl:error] [pid 3797783:tid 3797783] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:00.422615 2026] [ssl:error] [pid 3802791:tid 3802791] (70014)End of file found: [client 216.73.216.199:58804] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:00.748610 2026] [security2:error] [pid 3803380:tid 3803380] [client 43.161.233.190:39994] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "glottalstop.co.uk"] [uri "/"] [unique_id "amtoHC9YZI-WfHEdm98VqgAAABw"], referer: http://glottalstop.co.uk
[Thu Jul 30 16:05:00.985947 2026] [authz_core:error] [pid 3802839:tid 3802839] [client 66.249.66.35:47866] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:05:00.988625 2026] [authz_core:error] [pid 3802839:tid 3802839] [client 66.249.66.35:47866] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:05:01.165724 2026] [security2:error] [pid 3791554:tid 3791554] [client 43.159.141.150:34354] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtoHaMIf50FLZagH3JEJQAAAC8"]
[Thu Jul 30 16:05:01.337253 2026] [security2:error] [pid 3802403:tid 3802403] [client 124.156.206.145:34678] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "inrc.org.uk"] [uri "/"] [unique_id "amtoHarJSjVh_sJmWZXZ8QAAAAU"]
[Thu Jul 30 16:05:01.436315 2026] [ssl:error] [pid 3797783:tid 3797783] (70014)End of file found: [client 216.73.216.199:5781] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:03.231041 2026] [ssl:error] [pid 3793124:tid 3793124] (70014)End of file found: [client 216.73.216.199:39716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:03.240206 2026] [ssl:error] [pid 3791554:tid 3791554] (EAI 2)Name or service not known: [client 144.76.19.72:61650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:03.240230 2026] [ssl:error] [pid 3791554:tid 3791554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:03.310826 2026] [ssl:error] [pid 3803379:tid 3803379] (EAI 2)Name or service not known: [client 144.76.19.72:61660] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:03.310856 2026] [ssl:error] [pid 3803379:tid 3803379] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:03.534686 2026] [ssl:error] [pid 3797157:tid 3797157] (70014)End of file found: [client 216.73.216.199:65103] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:03.534755 2026] [lsapi:warn] [pid 3803353:tid 3803353] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:05:06.281751 2026] [access_compat:error] [pid 3803617:tid 3803617] [client 115.96.93.224:56103] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:06.370667 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:61670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:06.370706 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:06.424606 2026] [ssl:error] [pid 3802838:tid 3802838] (EAI 2)Name or service not known: [client 144.76.19.72:61674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:06.424642 2026] [ssl:error] [pid 3802838:tid 3802838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:06.501230 2026] [security2:error] [pid 3797676:tid 3797676] [client 49.51.166.228:52468] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amtoIkZMDl6YuAsf7Kh0kwAAADg"]
[Thu Jul 30 16:05:06.769503 2026] [ssl:error] [pid 3797766:tid 3797766] (70014)End of file found: [client 216.73.216.199:44869] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:07.071640 2026] [security2:error] [pid 3797783:tid 3797783] [client 49.51.39.209:35660] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "the-pryors.co.uk"] [uri "/"] [unique_id "amtoIzpcdNOmcVO50wd7QgAAAFU"]
[Thu Jul 30 16:05:08.566658 2026] [core:error] [pid 3803323:tid 3803323] (13)Permission denied: [client 216.73.216.199:56287] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory263/node0/compact
[Thu Jul 30 16:05:08.766346 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.130.47.33:34754] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/"] [unique_id "amtoJBdiGKNw_zw6Dlyi9gAAACs"]
[Thu Jul 30 16:05:09.173372 2026] [ssl:error] [pid 3797783:tid 3797783] (70014)End of file found: [client 216.73.216.199:31128] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:09.458574 2026] [ssl:error] [pid 3797781:tid 3797781] (70014)End of file found: [client 216.73.216.199:56772] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:09.497585 2026] [ssl:error] [pid 3797157:tid 3797157] (EAI 2)Name or service not known: [client 144.76.19.72:61688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:09.497614 2026] [ssl:error] [pid 3797157:tid 3797157] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:09.552263 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:47474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:09.552294 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:09.753381 2026] [ssl:error] [pid 3791243:tid 3791243] (70014)End of file found: [client 216.73.216.199:39978] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:09.804710 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.130.14.245:52826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thesilkshed.co.uk"] [uri "/"] [unique_id "amtoJRdiGKNw_zw6Dlyi9wAAACs"]
[Thu Jul 30 16:05:09.984739 2026] [security2:error] [pid 3796670:tid 3796670] [client 49.51.39.209:53598] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amtoJYwmXbxm1jAIWlfIrgAAAB4"], referer: http://the-pryors.co.uk
[Thu Jul 30 16:05:10.084423 2026] [security2:error] [pid 3802792:tid 3802792] [client 1.13.158.23:45396] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sijames.com"] [uri "/"] [unique_id "amtoJpdDCPKKsp99FrDHpQAAABE"]
[Thu Jul 30 16:05:10.731837 2026] [security2:error] [pid 3796670:tid 3796670] [client 43.130.47.33:36328] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtoJowmXbxm1jAIWlfIrwAAAB4"], referer: http://theislipgarage.co.uk
[Thu Jul 30 16:05:10.805379 2026] [access_compat:error] [pid 3803353:tid 3803353] [client 115.96.93.224:56318] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:12.083715 2026] [security2:error] [pid 3795131:tid 3795131] [client 43.153.12.58:46500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "leaccess.co.uk"] [uri "/"] [unique_id "amtoKL9FOfQRbk7sd9LS0gAAAAw"]
[Thu Jul 30 16:05:12.368639 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.130.3.122:43412] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "cssystems.co.uk"] [uri "/"] [unique_id "amtoKBdiGKNw_zw6Dlyi-AAAACs"], referer: http://cssystems.co.uk
[Thu Jul 30 16:05:12.610718 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:47478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:12.610749 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:12.663590 2026] [ssl:error] [pid 3802839:tid 3802839] (EAI 2)Name or service not known: [client 144.76.19.72:47482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:12.663625 2026] [ssl:error] [pid 3802839:tid 3802839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:12.767595 2026] [security2:error] [pid 3797557:tid 3797557] [client 43.130.14.245:55224] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amtoKO7tFyVcNg9sEl8l6gAAACU"], referer: http://thesilkshed.co.uk
[Thu Jul 30 16:05:12.851350 2026] [security2:error] [pid 3793124:tid 3793124] [client 43.153.74.75:34518] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtoKL5koEf2kJSERTz_qAAAADM"]
[Thu Jul 30 16:05:13.683142 2026] [lsapi:warn] [pid 3797766:tid 3797766] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:05:14.642912 2026] [ssl:error] [pid 3785214:tid 3785214] (70014)End of file found: [client 216.73.216.199:1694] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:14.944640 2026] [ssl:error] [pid 3791554:tid 3791554] (70014)End of file found: [client 216.73.216.199:33029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:15.603886 2026] [security2:error] [pid 3797783:tid 3797783] [client 150.109.119.38:53070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amtoKzpcdNOmcVO50wd7RAAAAFU"]
[Thu Jul 30 16:05:15.638096 2026] [authz_core:error] [pid 3802838:tid 3802838] [client 66.249.66.34:58785] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:05:15.640767 2026] [authz_core:error] [pid 3802838:tid 3802838] [client 66.249.66.34:58785] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:05:15.653393 2026] [ssl:error] [pid 3791241:tid 3791241] (70014)End of file found: [client 216.73.216.199:59353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:15.718457 2026] [ssl:error] [pid 3797676:tid 3797676] (EAI 2)Name or service not known: [client 144.76.19.72:47490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:15.718520 2026] [ssl:error] [pid 3797676:tid 3797676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:15.776604 2026] [ssl:error] [pid 3797609:tid 3797609] (EAI 2)Name or service not known: [client 144.76.19.72:47492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:15.776645 2026] [ssl:error] [pid 3797609:tid 3797609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:16.017267 2026] [security2:error] [pid 3793124:tid 3793124] [client 43.153.74.75:36068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtoLL5koEf2kJSERTz_qQAAADM"], referer: http://baketastic.co.uk
[Thu Jul 30 16:05:16.675383 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.166.239.145:47980] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "akoptimize.co.uk"] [uri "/"] [unique_id "amtoLBdiGKNw_zw6Dlyi-gAAACs"]
[Thu Jul 30 16:05:17.151180 2026] [security2:error] [pid 3802837:tid 3802837] [client 43.155.188.157:33832] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "mcgarvey.co.uk"] [uri "/"] [unique_id "amtoLR-jGU9tk3K0fN7s7wAAABQ"]
[Thu Jul 30 16:05:17.611155 2026] [security2:error] [pid 3785296:tid 3785296] [client 43.130.67.33:58054] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amtoLYpXjGxiuuoHwvjRvAAAAA8"]
[Thu Jul 30 16:05:18.836863 2026] [ssl:error] [pid 3800115:tid 3800115] (EAI 2)Name or service not known: [client 144.76.19.72:47504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:18.836892 2026] [ssl:error] [pid 3800115:tid 3800115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:18.889922 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:47516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:18.889967 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:19.143781 2026] [security2:error] [pid 3803379:tid 3803379] [client 43.130.67.33:49550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtoL2M46U2S2uN3lP9PsQAAABg"], referer: http://spampmusic.co.uk
[Thu Jul 30 16:05:21.234862 2026] [access_compat:error] [pid 3785214:tid 3785214] [client 115.96.93.224:56855] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:21.311076 2026] [security2:error] [pid 3791485:tid 3791485] [client 185.191.171.14:14640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/07/29/vista-sp1-bigger-than-you-thought/"] [unique_id "amtoMRdiGKNw_zw6Dlyi_AAAACs"]
[Thu Jul 30 16:05:21.341148 2026] [core:error] [pid 3802839:tid 3802839] (13)Permission denied: [client 216.73.216.199:56669] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/sunrpc/sections/__ksymtab
[Thu Jul 30 16:05:21.415307 2026] [security2:error] [pid 3785296:tid 3785296] [client 49.51.233.46:48032] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "theovertones.co.uk"] [uri "/"] [unique_id "amtoMYpXjGxiuuoHwvjRvgAAAA8"]
[Thu Jul 30 16:05:21.442243 2026] [ssl:error] [pid 3802839:tid 3802839] (70014)End of file found: [client 216.73.216.199:56669] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:21.958629 2026] [ssl:error] [pid 3803323:tid 3803323] (EAI 2)Name or service not known: [client 144.76.19.72:45560] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:21.958665 2026] [ssl:error] [pid 3803323:tid 3803323] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:22.013851 2026] [ssl:error] [pid 3791241:tid 3791241] (EAI 2)Name or service not known: [client 144.76.19.72:45568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:22.013882 2026] [ssl:error] [pid 3791241:tid 3791241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:22.028762 2026] [ssl:error] [pid 3797609:tid 3797609] (70014)End of file found: [client 216.73.216.199:49015] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:22.258423 2026] [security2:error] [pid 3804824:tid 3804824] [client 119.28.177.175:48348] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "shelterforum.org.uk"] [uri "/"] [unique_id "amtoMirrU-uYsBSrh667TQAAABU"]
[Thu Jul 30 16:05:24.127894 2026] [security2:error] [pid 3804824:tid 3804824] [client 43.166.129.247:51584] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.co.uk"] [uri "/"] [unique_id "amtoNCrrU-uYsBSrh667TgAAABU"]
[Thu Jul 30 16:05:24.220047 2026] [security2:error] [pid 3797766:tid 3797766] [client 43.133.69.37:39336] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "epmsonline.co.uk"] [uri "/"] [unique_id "amtoNFouQu6tGwUDkcxMUgAAAEc"]
[Thu Jul 30 16:05:24.455285 2026] [ssl:error] [pid 3797680:tid 3797680] (70014)End of file found: [client 216.73.216.199:23733] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:24.595645 2026] [lsapi:warn] [pid 3783283:tid 3783283] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:05:24.789553 2026] [lsapi:warn] [pid 3797766:tid 3797766] [client 43.133.69.37:39336] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:05:25.073045 2026] [ssl:error] [pid 3805510:tid 3805510] (EAI 2)Name or service not known: [client 144.76.19.72:45580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:25.073097 2026] [ssl:error] [pid 3805510:tid 3805510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:25.127765 2026] [ssl:error] [pid 3794913:tid 3794913] (EAI 2)Name or service not known: [client 144.76.19.72:45586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:25.127796 2026] [ssl:error] [pid 3794913:tid 3794913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:25.176180 2026] [security2:error] [pid 3793125:tid 3793125] [client 163.7.8.118:16421] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoNdw4wsSAgpyOhytoWgAAADc"]
[Thu Jul 30 16:05:25.176242 2026] [security2:error] [pid 3793125:tid 3793125] [client 163.7.8.118:16421] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoNdw4wsSAgpyOhytoWgAAADc"]
[Thu Jul 30 16:05:25.176517 2026] [security2:error] [pid 3793125:tid 3793125] [client 163.7.8.118:16421] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtoNdw4wsSAgpyOhytoWgAAADc"]
[Thu Jul 30 16:05:25.579465 2026] [security2:error] [pid 3793125:tid 3793125] [client 119.28.177.175:50606] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amtoNdw4wsSAgpyOhytoWwAAADc"], referer: http://shelterforum.org.uk
[Thu Jul 30 16:05:25.653008 2026] [security2:error] [pid 3803352:tid 3803352] [client 43.134.38.171:57132] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtoNYwHaJAWj6HjuOfRaQAAAAk"]
[Thu Jul 30 16:05:27.174626 2026] [security2:error] [pid 3797766:tid 3797766] [client 223.24.198.24:6189] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoN1ouQu6tGwUDkcxMVAAAAEc"]
[Thu Jul 30 16:05:27.174677 2026] [security2:error] [pid 3797766:tid 3797766] [client 223.24.198.24:6189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoN1ouQu6tGwUDkcxMVAAAAEc"]
[Thu Jul 30 16:05:27.174949 2026] [security2:error] [pid 3797766:tid 3797766] [client 223.24.198.24:6189] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtoN1ouQu6tGwUDkcxMVAAAAEc"]
[Thu Jul 30 16:05:27.526898 2026] [access_compat:error] [pid 3802837:tid 3802837] [client 115.96.93.224:57178] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:27.780002 2026] [ssl:error] [pid 3802839:tid 3802839] (70014)End of file found: [client 216.73.216.199:26039] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:27.875999 2026] [security2:error] [pid 3796670:tid 3796670] [client 185.191.171.12:12498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8816.975.html"] [unique_id "amtoN4wmXbxm1jAIWlfIswAAAB4"]
[Thu Jul 30 16:05:27.927368 2026] [security2:error] [pid 3803353:tid 3803353] [client 43.133.69.37:42712] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "render-farm.co.uk"] [uri "/"] [unique_id "amtoN1Bml_c8fdH4lrNWsAAAAA0"]
[Thu Jul 30 16:05:28.181318 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:45594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:28.181359 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:28.234853 2026] [ssl:error] [pid 3797609:tid 3797609] (EAI 2)Name or service not known: [client 144.76.19.72:45602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:28.234881 2026] [ssl:error] [pid 3797609:tid 3797609] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:28.793115 2026] [authz_core:error] [pid 3797766:tid 3797766] [client 169.58.39.193:54749] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/mailchimp-for-wp/, referer: binance.com
[Thu Jul 30 16:05:28.794922 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 169.58.39.193:54749] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-backups/, referer: binance.com
[Thu Jul 30 16:05:28.797208 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 169.58.39.193:54749] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-temp/, referer: binance.com
[Thu Jul 30 16:05:28.799940 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 169.58.39.193:54749] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-ce3730-logs/, referer: binance.com
[Thu Jul 30 16:05:28.803401 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 169.58.39.193:54749] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-logs/, referer: binance.com
[Thu Jul 30 16:05:28.803458 2026] [access_compat:error] [pid 3797766:tid 3797766] [client 169.58.39.193:54749] AH01797: client denied by server configuration: /home/dawnrobi/public_html/wp-content/uploads/backwpup-e225be-temp/, referer: binance.com
[Thu Jul 30 16:05:28.983856 2026] [ssl:error] [pid 3805510:tid 3805510] (70014)End of file found: [client 216.73.216.199:32198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:29.096105 2026] [security2:error] [pid 3796784:tid 3796784] [client 43.134.38.171:51794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtoOb5yDW8TxcBf_7U7oAAAACY"], referer: http://tompalmer.co.uk
[Thu Jul 30 16:05:29.456443 2026] [access_compat:error] [pid 3802838:tid 3802838] [client 45.158.164.139:51802] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:05:29.535487 2026] [security2:error] [pid 3802792:tid 3802792] [client 43.166.7.113:53882] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "wildduckdesigns.co.uk"] [uri "/"] [unique_id "amtoOZdDCPKKsp99FrDHqQAAABE"]
[Thu Jul 30 16:05:29.649089 2026] [security2:error] [pid 3803353:tid 3803353] [client 43.166.251.233:52192] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kingston1010.org.uk"] [uri "/"] [unique_id "amtoOVBml_c8fdH4lrNWsQAAAA0"]
[Thu Jul 30 16:05:29.774492 2026] [ssl:error] [pid 3803380:tid 3803380] (70014)End of file found: [client 216.73.216.199:3549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:29.783213 2026] [security2:error] [pid 3804824:tid 3804824] [client 5.53.113.107:46812] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoOSrrU-uYsBSrh667UAAAABU"]
[Thu Jul 30 16:05:29.783266 2026] [security2:error] [pid 3804824:tid 3804824] [client 5.53.113.107:46812] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoOSrrU-uYsBSrh667UAAAABU"]
[Thu Jul 30 16:05:29.783513 2026] [security2:error] [pid 3804824:tid 3804824] [client 5.53.113.107:46812] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtoOSrrU-uYsBSrh667UAAAABU"]
[Thu Jul 30 16:05:30.006538 2026] [security2:error] [pid 3802756:tid 3802756] [client 162.62.231.139:59324] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "innerspacer.co.uk"] [uri "/"] [unique_id "amtoOnK6mlLPmQmsT3Jb5QAAAAA"]
[Thu Jul 30 16:05:30.309259 2026] [security2:error] [pid 3803323:tid 3803323] [client 43.166.7.113:54646] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jasperandtroy.co.uk"] [uri "/"] [unique_id "amtoOjfZO1EdN3FRsRdO7AAAAAM"]
[Thu Jul 30 16:05:31.288350 2026] [ssl:error] [pid 3802838:tid 3802838] (EAI 2)Name or service not known: [client 144.76.19.72:21682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:31.288388 2026] [ssl:error] [pid 3802838:tid 3802838] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:31.344359 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:21694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:31.344392 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:31.754668 2026] [access_compat:error] [pid 3797676:tid 3797676] [client 115.96.93.224:57385] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:33.404922 2026] [security2:error] [pid 3803323:tid 3803323] [client 43.166.7.113:56666] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amtoPTfZO1EdN3FRsRdO7QAAAAM"], referer: http://jasperandtroy.co.uk
[Thu Jul 30 16:05:33.499714 2026] [ssl:error] [pid 3802791:tid 3802791] (70014)End of file found: [client 216.73.216.199:65482] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:34.233529 2026] [security2:error] [pid 3796672:tid 3796672] [client 43.153.10.13:48316] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtoPphoa6IkxxrWz4lxOgAAACI"]
[Thu Jul 30 16:05:34.291910 2026] [ssl:error] [pid 3783283:tid 3783283] (70014)End of file found: [client 216.73.216.199:13146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:34.400843 2026] [ssl:error] [pid 3802839:tid 3802839] (EAI 2)Name or service not known: [client 144.76.19.72:21710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:34.400875 2026] [ssl:error] [pid 3802839:tid 3802839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:34.424808 2026] [security2:error] [pid 3803379:tid 3803379] [client 20.51.120.24:48726] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "astleydogpark.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtoPmM46U2S2uN3lP9PtwAAABg"]
[Thu Jul 30 16:05:34.456859 2026] [ssl:error] [pid 3802837:tid 3802837] (EAI 2)Name or service not known: [client 144.76.19.72:21720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:34.456892 2026] [ssl:error] [pid 3802837:tid 3802837] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:34.901277 2026] [lsapi:warn] [pid 3801148:tid 3801148] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:05:34.988257 2026] [security2:error] [pid 3805510:tid 3805510] [client 209.141.49.73:54946] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtoPqfz92rYUtXcKms7RgAAAAU"]
[Thu Jul 30 16:05:34.996604 2026] [security2:error] [pid 3803323:tid 3803323] [client 43.130.105.21:60466] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtoPjfZO1EdN3FRsRdO7gAAAAM"], referer: http://rock-ola.co.uk
[Thu Jul 30 16:05:36.238837 2026] [security2:error] [pid 3791554:tid 3791554] [client 43.153.107.22:51928] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "purple-childcare.co.uk"] [uri "/"] [unique_id "amtoQKMIf50FLZagH3JELAAAAC8"]
[Thu Jul 30 16:05:36.822252 2026] [ssl:error] [pid 3793124:tid 3793124] (70014)End of file found: [client 216.73.216.199:5583] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:37.127131 2026] [security2:error] [pid 3805510:tid 3805510] [client 43.130.105.21:55704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amtoQafz92rYUtXcKms7RwAAAAU"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 16:05:37.514548 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:21734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:37.514589 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:37.571613 2026] [ssl:error] [pid 3802792:tid 3802792] (EAI 2)Name or service not known: [client 144.76.19.72:21742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:37.571657 2026] [ssl:error] [pid 3802792:tid 3802792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:37.790953 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.159.128.237:55344] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "refraction.co.uk"] [uri "/"] [unique_id "amtoQRdiGKNw_zw6DlyjAAAAACs"]
[Thu Jul 30 16:05:37.831651 2026] [access_compat:error] [pid 3797781:tid 3797781] [client 115.96.93.224:57711] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:38.356008 2026] [access_compat:error] [pid 3791554:tid 3791554] [client 45.158.164.139:47624] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:05:38.695034 2026] [security2:error] [pid 3791485:tid 3791485] [client 101.32.49.171:49772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "randomlearner.org.uk"] [uri "/"] [unique_id "amtoQhdiGKNw_zw6DlyjAQAAACs"]
[Thu Jul 30 16:05:38.705979 2026] [cgi:error] [pid 3802792:tid 3802792] [client 47.128.117.229:38544] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 16:05:38.823933 2026] [ssl:error] [pid 3796670:tid 3796670] (70014)End of file found: [client 216.73.216.199:44867] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:39.430169 2026] [security2:error] [pid 3791243:tid 3791243] [client 43.166.244.66:56976] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.be"] [uri "/"] [unique_id "amtoQ9kNT--HdzZohm5pHAAAACc"]
[Thu Jul 30 16:05:39.826162 2026] [security2:error] [pid 3805510:tid 3805510] [client 43.153.107.22:48864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtoQ6fz92rYUtXcKms7SQAAAAU"], referer: http://purple-childcare.co.uk
[Thu Jul 30 16:05:40.705210 2026] [ssl:error] [pid 3797766:tid 3797766] (EAI 2)Name or service not known: [client 144.76.19.72:34428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:40.705241 2026] [ssl:error] [pid 3797766:tid 3797766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:40.758043 2026] [ssl:error] [pid 3791243:tid 3791243] (EAI 2)Name or service not known: [client 144.76.19.72:34436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:40.758087 2026] [ssl:error] [pid 3791243:tid 3791243] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:41.635690 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:21091] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:41.868831 2026] [security2:error] [pid 3791554:tid 3791554] [client 43.166.244.66:53898] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtoRaMIf50FLZagH3JEMAAAAC8"], referer: http://orgent.be
[Thu Jul 30 16:05:42.241163 2026] [ssl:error] [pid 3797783:tid 3797783] (70014)End of file found: [client 216.73.216.199:44976] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:42.290488 2026] [access_compat:error] [pid 3791243:tid 3791243] [client 115.96.93.224:57924] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:42.677778 2026] [authz_core:error] [pid 3803379:tid 3803379] [client 169.58.39.193:57650] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 16:05:43.615278 2026] [security2:error] [pid 3796784:tid 3796784] [client 20.63.98.115:8037] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "markmitchell.org"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtoR75yDW8TxcBf_7U7pAAAACY"]
[Thu Jul 30 16:05:43.615475 2026] [security2:error] [pid 3796784:tid 3796784] [client 20.63.98.115:8037] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "markmitchell.org"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtoR75yDW8TxcBf_7U7pAAAACY"]
[Thu Jul 30 16:05:43.619158 2026] [security2:error] [pid 3796784:tid 3796784] [client 20.63.98.115:8037] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "markmitchell.org"] [uri "/index.php"] [unique_id "amtoR75yDW8TxcBf_7U7pAAAACY"]
[Thu Jul 30 16:05:43.837806 2026] [ssl:error] [pid 3803380:tid 3803380] (EAI 2)Name or service not known: [client 144.76.19.72:34448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:43.837851 2026] [ssl:error] [pid 3803380:tid 3803380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:43.895367 2026] [ssl:error] [pid 3783285:tid 3783285] (EAI 2)Name or service not known: [client 144.76.19.72:34450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:43.895396 2026] [ssl:error] [pid 3783285:tid 3783285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:44.235482 2026] [ssl:error] [pid 3791241:tid 3791241] (70014)End of file found: [client 216.73.216.199:62720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:44.788645 2026] [security2:error] [pid 3797781:tid 3797781] [client 43.159.148.221:54160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sewyork.co.uk"] [uri "/"] [unique_id "amtoSL-PYs6dXagumO6tNQAAAFM"]
[Thu Jul 30 16:05:45.157221 2026] [security2:error] [pid 3803380:tid 3803380] [client 43.159.148.221:54610] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtoSS9YZI-WfHEdm98VtgAAABw"]
[Thu Jul 30 16:05:45.520144 2026] [lsapi:warn] [pid 3802791:tid 3802791] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:05:46.215351 2026] [authz_core:error] [pid 3806230:tid 3806230] [client 169.58.39.193:58415] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 16:05:46.294473 2026] [lsapi:warn] [pid 3806279:tid 3806279] [client 90.251.214.20:62257] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:05:46.294529 2026] [lsapi:warn] [pid 3806279:tid 3806279] [client 90.251.214.20:62257] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:05:47.064836 2026] [security2:error] [pid 3797781:tid 3797781] [client 43.166.244.66:36050] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtoS7-PYs6dXagumO6tNwAAAFM"]
[Thu Jul 30 16:05:47.066484 2026] [authz_core:error] [pid 3797781:tid 3797781] [client 43.166.244.66:36050] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:05:47.068221 2026] [authz_core:error] [pid 3797781:tid 3797781] [client 43.166.244.66:36050] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:05:47.205940 2026] [security2:error] [pid 3791243:tid 3791243] [client 43.166.244.66:36206] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtoS9kNT--HdzZohm5pHgAAACc"]
[Thu Jul 30 16:05:47.337493 2026] [ssl:error] [pid 3806336:tid 3806336] (EAI 2)Name or service not known: [client 144.76.19.72:34462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:47.337533 2026] [ssl:error] [pid 3806336:tid 3806336] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:47.391106 2026] [ssl:error] [pid 3806337:tid 3806337] (EAI 2)Name or service not known: [client 144.76.19.72:34468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:47.391137 2026] [ssl:error] [pid 3806337:tid 3806337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:47.919023 2026] [authz_core:error] [pid 3806338:tid 3806338] [client 66.249.66.33:65079] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:05:47.921712 2026] [authz_core:error] [pid 3806338:tid 3806338] [client 66.249.66.33:65079] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:05:48.976117 2026] [security2:error] [pid 3803323:tid 3803323] [client 185.191.171.17:37504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/solterra-garbage-holiday-schedule-2022"] [unique_id "amtoTDfZO1EdN3FRsRdO8QAAAAM"]
[Thu Jul 30 16:05:49.038466 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:55972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:49.641391 2026] [ssl:error] [pid 3796784:tid 3796784] (70014)End of file found: [client 216.73.216.199:5150] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:49.893441 2026] [security2:error] [pid 3800476:tid 3800476] [client 85.208.96.198:27700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3774.0.html"] [unique_id "amtoTYKcVrwOJrJvXZYIOQAAAAc"]
[Thu Jul 30 16:05:49.983961 2026] [security2:error] [pid 3800476:tid 3800476] [client 43.159.138.217:40694] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "jonathanhill.co.uk"] [uri "/"] [unique_id "amtoTYKcVrwOJrJvXZYIOgAAAAc"]
[Thu Jul 30 16:05:50.548647 2026] [security2:error] [pid 3800476:tid 3800476] [client 74.7.243.209:42584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "autodiscover.saturnstopwatches.co.uk"] [uri "/"] [unique_id "amtoToKcVrwOJrJvXZYIOwAAAAc"]
[Thu Jul 30 16:05:50.670556 2026] [security2:error] [pid 3806502:tid 3806502] [client 43.159.148.221:50554] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtoTpg_M9I8pstNSmVUbgAAACQ"], referer: http://prosperon.co.uk
[Thu Jul 30 16:05:50.818019 2026] [security2:error] [pid 3796670:tid 3796670] [client 127.0.0.1:42622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "amtoTowmXbxm1jAIWlfIuQAAAB4"]
[Thu Jul 30 16:05:50.822254 2026] [ssl:error] [pid 3783283:tid 3783283] (EAI 2)Name or service not known: [client 144.76.19.72:20798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:50.822278 2026] [ssl:error] [pid 3783283:tid 3783283] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:50.920230 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:20804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:50.920262 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:51.030247 2026] [security2:error] [pid 3806503:tid 3806503] [client 43.166.244.66:33438] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtoT-3bRbb_J6SHBXVJrAAAACU"], referer: http://blow-hairstudio.co.uk
[Thu Jul 30 16:05:51.783143 2026] [security2:error] [pid 3806566:tid 3806566] [client 43.159.138.217:43078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amtoT7GiGyUjKsf96j73_AAAACk"], referer: http://jonathanhill.co.uk
[Thu Jul 30 16:05:51.788644 2026] [authz_core:error] [pid 3803352:tid 3803352] [client 66.249.66.33:42972] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:05:51.791393 2026] [authz_core:error] [pid 3803352:tid 3803352] [client 66.249.66.33:42972] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:05:52.868633 2026] [access_compat:error] [pid 3806503:tid 3806503] [client 115.96.93.224:58458] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:05:53.859508 2026] [ssl:error] [pid 3796670:tid 3796670] (70014)End of file found: [client 216.73.216.199:54371] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:53.973920 2026] [ssl:error] [pid 3793125:tid 3793125] (EAI 2)Name or service not known: [client 144.76.19.72:20818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:53.973954 2026] [ssl:error] [pid 3793125:tid 3793125] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:54.028368 2026] [ssl:error] [pid 3806020:tid 3806020] (EAI 2)Name or service not known: [client 144.76.19.72:20822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:54.028406 2026] [ssl:error] [pid 3806020:tid 3806020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:55.893667 2026] [cgi:error] [pid 3783238:tid 3783238] [client 20.151.221.234:63651] AH02812: stderr from /home/retrodis/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:05:56.211116 2026] [lsapi:warn] [pid 3791485:tid 3791485] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:05:56.463948 2026] [security2:error] [pid 3793125:tid 3793125] [client 43.154.250.181:57746] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amtoVNw4wsSAgpyOhytoZwAAADc"]
[Thu Jul 30 16:05:57.085245 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:20830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:57.085282 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:57.138178 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:20836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:05:57.138205 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:05:57.181245 2026] [ssl:error] [pid 3797766:tid 3797766] (70014)End of file found: [client 216.73.216.199:5944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:57.787560 2026] [ssl:error] [pid 3791243:tid 3791243] (70014)End of file found: [client 216.73.216.199:5087] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:05:59.000736 2026] [access_compat:error] [pid 3803323:tid 3803323] [client 115.96.93.224:58783] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:00.195449 2026] [ssl:error] [pid 3797781:tid 3797781] (EAI 2)Name or service not known: [client 144.76.19.72:52880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:00.195482 2026] [ssl:error] [pid 3797781:tid 3797781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:00.248410 2026] [ssl:error] [pid 3806019:tid 3806019] (EAI 2)Name or service not known: [client 144.76.19.72:52892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:00.248445 2026] [ssl:error] [pid 3806019:tid 3806019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:00.531664 2026] [ssl:error] [pid 3803353:tid 3803353] (70014)End of file found: [client 216.73.216.199:50730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:01.084002 2026] [security2:error] [pid 3806503:tid 3806503] [client 43.155.188.157:50136] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "3dworkstation.co.uk"] [uri "/"] [unique_id "amtoWe3bRbb_J6SHBXVJrwAAACU"]
[Thu Jul 30 16:06:02.939172 2026] [ssl:error] [pid 3803617:tid 3803617] (70014)End of file found: [client 216.73.216.199:48811] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:03.303958 2026] [ssl:error] [pid 3800115:tid 3800115] (EAI 2)Name or service not known: [client 144.76.19.72:52894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:03.303983 2026] [ssl:error] [pid 3800115:tid 3800115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:03.355539 2026] [ssl:error] [pid 3785296:tid 3785296] (EAI 2)Name or service not known: [client 144.76.19.72:52908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:03.355568 2026] [ssl:error] [pid 3785296:tid 3785296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:03.427888 2026] [core:error] [pid 3783285:tid 3783285] (13)Permission denied: [client 216.73.216.199:14886] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory170/node0/compact
[Thu Jul 30 16:06:03.444522 2026] [access_compat:error] [pid 3797676:tid 3797676] [client 115.96.93.224:58995] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:03.838229 2026] [ssl:error] [pid 3783285:tid 3783285] (70014)End of file found: [client 216.73.216.199:14886] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:04.246991 2026] [core:error] [pid 3806686:tid 3806686] [client 222.187.115.202:59586] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Thu Jul 30 16:06:04.994237 2026] [security2:error] [pid 3803379:tid 3803379] [client 43.154.250.181:35262] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "asian-kitchen.co.uk"] [uri "/"] [unique_id "amtoXGM46U2S2uN3lP9PwQAAABg"]
[Thu Jul 30 16:06:05.746992 2026] [core:error] [pid 3806458:tid 3806458] [client 222.187.115.202:60544] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh)
[Thu Jul 30 16:06:06.246906 2026] [ssl:error] [pid 3806338:tid 3806338] (70014)End of file found: [client 216.73.216.199:11333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:06.409361 2026] [ssl:error] [pid 3806566:tid 3806566] (EAI 2)Name or service not known: [client 144.76.19.72:52922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:06.409395 2026] [ssl:error] [pid 3806566:tid 3806566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:06.468150 2026] [ssl:error] [pid 3807581:tid 3807581] (EAI 2)Name or service not known: [client 144.76.19.72:52928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:06.468184 2026] [ssl:error] [pid 3807581:tid 3807581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:07.098444 2026] [lsapi:warn] [pid 3807581:tid 3807581] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:06:08.660318 2026] [core:error] [pid 3806458:tid 3806458] (13)Permission denied: [client 216.73.216.199:42547] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory248/node0/compact
[Thu Jul 30 16:06:08.915419 2026] [security2:error] [pid 3793125:tid 3793125] [client 43.255.20.251:53584] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoYNw4wsSAgpyOhytoawAAADc"]
[Thu Jul 30 16:06:08.915469 2026] [security2:error] [pid 3793125:tid 3793125] [client 43.255.20.251:53584] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoYNw4wsSAgpyOhytoawAAADc"]
[Thu Jul 30 16:06:08.915696 2026] [security2:error] [pid 3793125:tid 3793125] [client 43.255.20.251:53584] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtoYNw4wsSAgpyOhytoawAAADc"]
[Thu Jul 30 16:06:08.961905 2026] [ssl:error] [pid 3806458:tid 3806458] (70014)End of file found: [client 216.73.216.199:42547] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:09.167567 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "45.158.164.139"] [uri "/hello.world"] [unique_id "amtoYYKcVrwOJrJvXZYIQwAAAAc"]
[Thu Jul 30 16:06:09.167631 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "45.158.164.139"] [uri "/hello.world"] [unique_id "amtoYYKcVrwOJrJvXZYIQwAAAAc"]
[Thu Jul 30 16:06:09.168026 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/hello.world"] [unique_id "amtoYYKcVrwOJrJvXZYIQwAAAAc"]
[Thu Jul 30 16:06:09.168590 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=10,HTTP=0,SESS=0): PHP Injection Attack: I/O Stream Found"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtoYYKcVrwOJrJvXZYIQwAAAAc"]
[Thu Jul 30 16:06:09.447497 2026] [ssl:error] [pid 3803617:tid 3803617] (70014)End of file found: [client 216.73.216.199:26057] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:09.521822 2026] [ssl:error] [pid 3807660:tid 3807660] (EAI 2)Name or service not known: [client 144.76.19.72:52930] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:09.521851 2026] [ssl:error] [pid 3807660:tid 3807660] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:09.573616 2026] [ssl:error] [pid 3783238:tid 3783238] (EAI 2)Name or service not known: [client 144.76.19.72:19508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:09.573644 2026] [ssl:error] [pid 3783238:tid 3783238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:09.580695 2026] [access_compat:error] [pid 3807661:tid 3807661] [client 115.96.93.224:59317] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:09.866311 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "45.158.164.139"] [uri "/"] [unique_id "amtoYYKcVrwOJrJvXZYIRAAAAAc"]
[Thu Jul 30 16:06:09.866390 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "45.158.164.139"] [uri "/"] [unique_id "amtoYYKcVrwOJrJvXZYIRAAAAAc"]
[Thu Jul 30 16:06:09.866774 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/"] [unique_id "amtoYYKcVrwOJrJvXZYIRAAAAAc"]
[Thu Jul 30 16:06:09.867313 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=10,HTTP=0,SESS=0): PHP Injection Attack: I/O Stream Found"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtoYYKcVrwOJrJvXZYIRAAAAAc"]
[Thu Jul 30 16:06:10.534374 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amtoYoKcVrwOJrJvXZYIRQAAAAc"]
[Thu Jul 30 16:06:10.534705 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amtoYoKcVrwOJrJvXZYIRQAAAAc"]
[Thu Jul 30 16:06:10.535252 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): GET or HEAD Request with Body Content."] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtoYoKcVrwOJrJvXZYIRQAAAAc"]
[Thu Jul 30 16:06:11.312806 2026] [security2:error] [pid 3800115:tid 3800115] [client 114.119.135.136:20757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,14/request_format~html"] [unique_id "amtoYwhM8tsGkXvPR2BHBgAAAAQ"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 16:06:11.410017 2026] [security2:error] [pid 3806279:tid 3806279] [client 43.130.67.6:52174] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "greenduckgallery.co.uk"] [uri "/"] [unique_id "amtoY_Jqswj3bqM1t-AmvAAAABM"]
[Thu Jul 30 16:06:11.559605 2026] [ssl:error] [pid 3806686:tid 3806686] (70014)End of file found: [client 216.73.216.199:38665] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:11.746225 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "amtoY4KcVrwOJrJvXZYIRgAAAAc"]
[Thu Jul 30 16:06:11.746610 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "amtoY4KcVrwOJrJvXZYIRgAAAAc"]
[Thu Jul 30 16:06:11.747148 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): GET or HEAD Request with Body Content."] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtoY4KcVrwOJrJvXZYIRgAAAAc"]
[Thu Jul 30 16:06:12.324886 2026] [security2:error] [pid 3805982:tid 3805982] [client 114.119.135.136:20763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~30,14/request_format~html"] [unique_id "amtoZE7LyFRJ-cHO_RyyxwAAAAA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E30
[Thu Jul 30 16:06:12.672810 2026] [ssl:error] [pid 3797766:tid 3797766] (EAI 2)Name or service not known: [client 144.76.19.72:19520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:12.672843 2026] [ssl:error] [pid 3797766:tid 3797766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:12.709456 2026] [security2:error] [pid 3804823:tid 3804823] [client 181.233.89.66:56772] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoZBVT6pYRZEGKIlNqhgAAABI"]
[Thu Jul 30 16:06:12.709522 2026] [security2:error] [pid 3804823:tid 3804823] [client 181.233.89.66:56772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtoZBVT6pYRZEGKIlNqhgAAABI"]
[Thu Jul 30 16:06:12.709764 2026] [security2:error] [pid 3804823:tid 3804823] [client 181.233.89.66:56772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtoZBVT6pYRZEGKIlNqhgAAABI"]
[Thu Jul 30 16:06:12.778893 2026] [ssl:error] [pid 3806020:tid 3806020] (EAI 2)Name or service not known: [client 144.76.19.72:19524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:12.778930 2026] [ssl:error] [pid 3806020:tid 3806020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:12.987849 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amtoZIKcVrwOJrJvXZYIRwAAAAc"]
[Thu Jul 30 16:06:12.988249 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "amtoZIKcVrwOJrJvXZYIRwAAAAc"]
[Thu Jul 30 16:06:12.988817 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): GET or HEAD Request with Body Content."] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtoZIKcVrwOJrJvXZYIRwAAAAc"]
[Thu Jul 30 16:06:13.892988 2026] [access_compat:error] [pid 3791243:tid 3791243] [client 115.96.93.224:59526] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:14.295167 2026] [ssl:error] [pid 3807580:tid 3807580] (70014)End of file found: [client 216.73.216.199:15172] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:15.620986 2026] [ssl:error] [pid 3797766:tid 3797766] (70014)End of file found: [client 216.73.216.199:1345] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:15.832659 2026] [ssl:error] [pid 3807498:tid 3807498] (EAI 2)Name or service not known: [client 144.76.19.72:19528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:15.832693 2026] [ssl:error] [pid 3807498:tid 3807498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:15.888620 2026] [ssl:error] [pid 3797774:tid 3797774] (EAI 2)Name or service not known: [client 144.76.19.72:19542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:15.888654 2026] [ssl:error] [pid 3797774:tid 3797774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:16.576576 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "amtoaIKcVrwOJrJvXZYISAAAAAc"]
[Thu Jul 30 16:06:16.576939 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "amtoaIKcVrwOJrJvXZYISAAAAAc"]
[Thu Jul 30 16:06:16.577490 2026] [security2:error] [pid 3800476:tid 3800476] [client 222.187.115.202:33490] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): GET or HEAD Request with Body Content."] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amtoaIKcVrwOJrJvXZYISAAAAAc"]
[Thu Jul 30 16:06:17.024214 2026] [ssl:error] [pid 3806568:tid 3806568] (70014)End of file found: [client 216.73.216.199:23315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:17.145005 2026] [security2:error] [pid 3807662:tid 3807662] [client 43.159.36.180:56756] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtoaXQVtkaHqQD78BIjxwAAAC4"]
[Thu Jul 30 16:06:17.549624 2026] [lsapi:warn] [pid 3807661:tid 3807661] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:06:18.947387 2026] [ssl:error] [pid 3806566:tid 3806566] (EAI 2)Name or service not known: [client 144.76.19.72:19558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:18.947418 2026] [ssl:error] [pid 3806566:tid 3806566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:19.000812 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:19568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:19.000849 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:19.689362 2026] [authz_core:error] [pid 3793125:tid 3793125] [client 66.249.66.34:61087] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:06:19.692007 2026] [authz_core:error] [pid 3793125:tid 3793125] [client 66.249.66.34:61087] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:06:19.775614 2026] [authz_core:error] [pid 3802792:tid 3802792] [client 52.238.199.152:60564] AH01630: client denied by server configuration: /home/hornseyt/public_html/wp-config.php
[Thu Jul 30 16:06:19.943593 2026] [ssl:error] [pid 3807659:tid 3807659] (70014)End of file found: [client 216.73.216.199:52903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:20.460241 2026] [ssl:error] [pid 3803323:tid 3803323] (70014)End of file found: [client 216.73.216.199:58607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:21.603412 2026] [security2:error] [pid 3806337:tid 3806337] [client 43.130.67.6:46816] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amtobaxLJ0_zW2WolvNOSgAAAB8"], referer: http://peterboroughdiocesanregistry.co.uk
[Thu Jul 30 16:06:22.083955 2026] [ssl:error] [pid 3806019:tid 3806019] (EAI 2)Name or service not known: [client 144.76.19.72:46730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:22.083997 2026] [ssl:error] [pid 3806019:tid 3806019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:22.140530 2026] [ssl:error] [pid 3806020:tid 3806020] (EAI 2)Name or service not known: [client 144.76.19.72:46744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:22.140553 2026] [ssl:error] [pid 3806020:tid 3806020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:24.558306 2026] [access_compat:error] [pid 3803379:tid 3803379] [client 115.96.93.224:60064] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:25.195235 2026] [ssl:error] [pid 3785296:tid 3785296] (EAI 2)Name or service not known: [client 144.76.19.72:46754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:25.195270 2026] [ssl:error] [pid 3785296:tid 3785296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:25.251791 2026] [ssl:error] [pid 3806567:tid 3806567] (EAI 2)Name or service not known: [client 144.76.19.72:46760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:25.251825 2026] [ssl:error] [pid 3806567:tid 3806567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:25.900605 2026] [ssl:error] [pid 3807662:tid 3807662] (70014)End of file found: [client 216.73.216.199:7358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:26.210651 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:9398] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:26.812390 2026] [ssl:error] [pid 3807659:tid 3807659] (70014)End of file found: [client 216.73.216.199:20590] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:28.156583 2026] [lsapi:warn] [pid 3806458:tid 3806458] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:06:28.306945 2026] [ssl:error] [pid 3797774:tid 3797774] (EAI 2)Name or service not known: [client 144.76.19.72:46768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:28.306974 2026] [ssl:error] [pid 3797774:tid 3797774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:28.363092 2026] [ssl:error] [pid 3808372:tid 3808372] (EAI 2)Name or service not known: [client 144.76.19.72:46776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:28.363136 2026] [ssl:error] [pid 3808372:tid 3808372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:30.588123 2026] [access_compat:error] [pid 3808372:tid 3808372] [client 115.96.93.224:60380] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:30.918641 2026] [security2:error] [pid 3803379:tid 3803379] [client 43.153.104.196:53646] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sudokulogicapp.com"] [uri "/"] [unique_id "amtodmM46U2S2uN3lP9PyQAAABg"]
[Thu Jul 30 16:06:31.421817 2026] [ssl:error] [pid 3807662:tid 3807662] (EAI 2)Name or service not known: [client 144.76.19.72:25590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:31.421855 2026] [ssl:error] [pid 3807662:tid 3807662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:31.477870 2026] [ssl:error] [pid 3800476:tid 3800476] (EAI 2)Name or service not known: [client 144.76.19.72:25594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:31.477909 2026] [ssl:error] [pid 3800476:tid 3800476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:31.658348 2026] [ssl:error] [pid 3793125:tid 3793125] (70014)End of file found: [client 216.73.216.199:52498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:32.262175 2026] [ssl:error] [pid 3791243:tid 3791243] (70014)End of file found: [client 216.73.216.199:20584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:32.522226 2026] [security2:error] [pid 3803379:tid 3803379] [client 114.119.146.36:38659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.kinesiologylondon.co.uk"] [uri "/robots.txt"] [unique_id "amtoeGM46U2S2uN3lP9PywAAABg"], referer: https://www.kinesiologylondon.co.uk/robots.txt
[Thu Jul 30 16:06:32.646932 2026] [access_compat:error] [pid 3806020:tid 3806020] [client 45.158.164.139:49236] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:06:32.764261 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:57093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:33.780849 2026] [security2:error] [pid 3808319:tid 3808319] [client 85.208.96.200:11224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2295.0.html"] [unique_id "amtoeSyNps9vn9LaiYQycQAAAAA"]
[Thu Jul 30 16:06:34.534587 2026] [ssl:error] [pid 3806567:tid 3806567] (EAI 2)Name or service not known: [client 144.76.19.72:25600] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:34.534617 2026] [ssl:error] [pid 3806567:tid 3806567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:34.592123 2026] [ssl:error] [pid 3807580:tid 3807580] (EAI 2)Name or service not known: [client 144.76.19.72:25602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:34.592166 2026] [ssl:error] [pid 3807580:tid 3807580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:35.202472 2026] [access_compat:error] [pid 3803353:tid 3803353] [client 115.96.93.224:60600] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:36.941308 2026] [security2:error] [pid 3783285:tid 3783285] [client 170.106.187.106:39512] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.marcwhiffen.co.uk"] [uri "/"] [unique_id "amtofDZpedruEIrGY8anygAAAEY"]
[Thu Jul 30 16:06:36.942037 2026] [authz_core:error] [pid 3783285:tid 3783285] [client 170.106.187.106:39512] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 16:06:37.002778 2026] [ssl:error] [pid 3803323:tid 3803323] (70014)End of file found: [client 216.73.216.199:11956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:37.599246 2026] [ssl:error] [pid 3806280:tid 3806280] (70014)End of file found: [client 216.73.216.199:49017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:37.649677 2026] [ssl:error] [pid 3806338:tid 3806338] (EAI 2)Name or service not known: [client 144.76.19.72:25616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:37.649705 2026] [ssl:error] [pid 3806338:tid 3806338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:37.704413 2026] [ssl:error] [pid 3783285:tid 3783285] (EAI 2)Name or service not known: [client 144.76.19.72:25618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:37.704445 2026] [ssl:error] [pid 3783285:tid 3783285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:38.393559 2026] [lsapi:warn] [pid 3806338:tid 3806338] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:06:38.602384 2026] [ssl:error] [pid 3791243:tid 3791243] (70014)End of file found: [client 216.73.216.199:43362] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:40.617528 2026] [core:error] [pid 3808319:tid 3808319] [client 173.211.70.38:57725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:06:40.617556 2026] [core:error] [pid 3808319:tid 3808319] [client 173.211.70.38:57725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:06:40.666576 2026] [authz_core:error] [pid 3797676:tid 3797676] [client 173.211.70.38:57723] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 16:06:40.792892 2026] [core:error] [pid 3803379:tid 3803379] [client 173.211.70.38:57724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:06:40.792921 2026] [core:error] [pid 3803379:tid 3803379] [client 173.211.70.38:57724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:06:41.154281 2026] [ssl:error] [pid 3808319:tid 3808319] (EAI 2)Name or service not known: [client 144.76.19.72:59506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:41.154320 2026] [ssl:error] [pid 3808319:tid 3808319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:41.639878 2026] [ssl:error] [pid 3808319:tid 3808319] (EAI 2)Name or service not known: [client 144.76.19.72:59518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:41.639904 2026] [ssl:error] [pid 3808319:tid 3808319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:41.730617 2026] [access_compat:error] [pid 3808975:tid 3808975] [client 115.96.93.224:60917] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:42.145433 2026] [authz_core:error] [pid 3797676:tid 3797676] [client 173.211.70.38:57788] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 16:06:42.251898 2026] [access_compat:error] [pid 3808373:tid 3808373] [client 45.158.164.139:37916] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:06:42.418028 2026] [ssl:error] [pid 3803323:tid 3803323] (70014)End of file found: [client 216.73.216.199:24660] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:43.005269 2026] [ssl:error] [pid 3806566:tid 3806566] (70014)End of file found: [client 216.73.216.199:64630] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:43.909017 2026] [ssl:error] [pid 3797676:tid 3797676] (70014)End of file found: [client 216.73.216.199:35306] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:44.473037 2026] [authz_core:error] [pid 3806019:tid 3806019] [client 66.249.66.34:61404] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:06:44.475754 2026] [authz_core:error] [pid 3806019:tid 3806019] [client 66.249.66.34:61404] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:06:44.697186 2026] [ssl:error] [pid 3808974:tid 3808974] (EAI 2)Name or service not known: [client 144.76.19.72:59530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:44.697234 2026] [ssl:error] [pid 3808974:tid 3808974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:44.753720 2026] [ssl:error] [pid 3806458:tid 3806458] (EAI 2)Name or service not known: [client 144.76.19.72:59546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:44.753758 2026] [ssl:error] [pid 3806458:tid 3806458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:45.291016 2026] [ssl:error] [pid 3805510:tid 3805510] (70014)End of file found: [client 216.73.216.199:52934] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:45.576347 2026] [ssl:error] [pid 3808975:tid 3808975] (70014)End of file found: [client 216.73.216.199:30339] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:45.775639 2026] [access_compat:error] [pid 3806279:tid 3806279] [client 115.96.93.224:61126] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:45.861560 2026] [ssl:error] [pid 3793124:tid 3793124] (70014)End of file found: [client 216.73.216.199:7522] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:46.091621 2026] [security2:error] [pid 3793125:tid 3793125] [client 43.155.162.41:33958] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/"] [unique_id "amtohtw4wsSAgpyOhytodQAAADc"]
[Thu Jul 30 16:06:47.811990 2026] [ssl:error] [pid 3808913:tid 3808913] (EAI 2)Name or service not known: [client 144.76.19.72:59550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:47.812020 2026] [ssl:error] [pid 3808913:tid 3808913] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:47.911393 2026] [ssl:error] [pid 3806458:tid 3806458] (EAI 2)Name or service not known: [client 144.76.19.72:59558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:47.911416 2026] [ssl:error] [pid 3806458:tid 3806458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:48.403824 2026] [security2:error] [pid 3797774:tid 3797774] [client 43.155.162.41:37342] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.thesilkshed.co.uk"] [uri "/index.php"] [unique_id "amtoiH7y-5ZlY-a8bCc3UAAAAEs"], referer: http://www.thesilkshed.co.uk
[Thu Jul 30 16:06:49.431934 2026] [lsapi:warn] [pid 3806566:tid 3806566] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:06:49.441055 2026] [security2:error] [pid 3806565:tid 3806565] [client 85.208.96.199:28560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/what-happened-to-eben-britton-and-mike-tyson"] [unique_id "amtoiWYcSLiqiYycN-iQoQAAACg"]
[Thu Jul 30 16:06:50.198499 2026] [security2:error] [pid 3806019:tid 3806019] [client 216.73.216.199:51054] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.all.def/json.ini"] [unique_id "amtoiviSUPKfdV0BtR-HOwAAAAE"]
[Thu Jul 30 16:06:50.198786 2026] [security2:error] [pid 3806019:tid 3806019] [client 216.73.216.199:51054] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.all.def/json.ini"] [unique_id "amtoiviSUPKfdV0BtR-HOwAAAAE"]
[Thu Jul 30 16:06:50.198995 2026] [security2:error] [pid 3806019:tid 3806019] [client 216.73.216.199:51054] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.all.def/json.ini"] [unique_id "amtoiviSUPKfdV0BtR-HOwAAAAE"]
[Thu Jul 30 16:06:50.384576 2026] [security2:error] [pid 3808852:tid 3808852] [client 43.164.192.151:40838] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amtoiqAM4urbF8MJLC1FzwAAABA"]
[Thu Jul 30 16:06:50.974318 2026] [ssl:error] [pid 3806566:tid 3806566] (EAI 2)Name or service not known: [client 144.76.19.72:50440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:50.974354 2026] [ssl:error] [pid 3806566:tid 3806566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:51.028885 2026] [ssl:error] [pid 3807581:tid 3807581] (EAI 2)Name or service not known: [client 144.76.19.72:50450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:51.028916 2026] [ssl:error] [pid 3807581:tid 3807581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:52.266737 2026] [security2:error] [pid 3805510:tid 3805510] [client 43.164.192.151:49470] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mwdesign.me.uk"] [uri "/"] [unique_id "amtojKfz92rYUtXcKms7XQAAAAU"], referer: http://www.mwdesign.me.uk
[Thu Jul 30 16:06:53.040823 2026] [authz_core:error] [pid 3808973:tid 3808973] [client 66.249.66.33:39208] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:06:53.043516 2026] [authz_core:error] [pid 3808973:tid 3808973] [client 66.249.66.33:39208] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:06:54.082402 2026] [ssl:error] [pid 3805510:tid 3805510] (EAI 2)Name or service not known: [client 144.76.19.72:50460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:54.082440 2026] [ssl:error] [pid 3805510:tid 3805510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:54.139411 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:50466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:54.139455 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:54.507080 2026] [security2:error] [pid 3800476:tid 3800476] [client 114.119.128.196:27151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.michael-boffey.co.uk"] [uri "/robots.txt"] [unique_id "amtojoKcVrwOJrJvXZYIgwAAAAc"], referer: http://www.michael-boffey.co.uk/robots.txt
[Thu Jul 30 16:06:54.767216 2026] [ssl:error] [pid 3806019:tid 3806019] (70014)End of file found: [client 216.73.216.199:51054] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:55.837682 2026] [security2:error] [pid 3800115:tid 3800115] [client 114.119.141.15:51259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.loca.co.uk"] [uri "/robots.txt"] [unique_id "amtojwhM8tsGkXvPR2BHZQAAAAQ"], referer: https://www.loca.co.uk/robots.txt
[Thu Jul 30 16:06:56.231560 2026] [security2:error] [pid 3806338:tid 3806338] [client 43.157.172.39:43638] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.andrewmarvell5642.co.uk"] [uri "/"] [unique_id "amtokLRQVLRyzpmo35BjwAAAACA"]
[Thu Jul 30 16:06:56.322128 2026] [access_compat:error] [pid 3809084:tid 3809084] [client 115.96.93.224:61659] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:06:56.587345 2026] [ssl:error] [pid 3791243:tid 3791243] (70014)End of file found: [client 216.73.216.199:23896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:06:57.195527 2026] [ssl:error] [pid 3807580:tid 3807580] (EAI 2)Name or service not known: [client 144.76.19.72:50472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:57.195557 2026] [ssl:error] [pid 3807580:tid 3807580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:57.250163 2026] [ssl:error] [pid 3797676:tid 3797676] (EAI 2)Name or service not known: [client 144.76.19.72:50476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:06:57.250191 2026] [ssl:error] [pid 3797676:tid 3797676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:06:58.758364 2026] [security2:error] [pid 3786772:tid 3786772] [client 43.166.132.142:43668] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.holistic-clear.co.uk"] [uri "/"] [unique_id "amtokrHDcooPRjp-ba2wWwAAABo"]
[Thu Jul 30 16:06:59.788045 2026] [lsapi:warn] [pid 3800115:tid 3800115] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:07:00.301269 2026] [security2:error] [pid 3797676:tid 3797676] [client 43.166.132.142:52750] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtolEZMDl6YuAsf7Kh0uQAAADg"], referer: http://www.holistic-clear.co.uk
[Thu Jul 30 16:07:00.303292 2026] [authz_core:error] [pid 3797676:tid 3797676] [client 43.166.132.142:52750] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 16:07:00.306342 2026] [authz_core:error] [pid 3797676:tid 3797676] [client 43.166.132.142:52750] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holistic-clear.co.uk
[Thu Jul 30 16:07:00.325988 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:58476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:00.326036 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:00.380678 2026] [ssl:error] [pid 3806458:tid 3806458] (EAI 2)Name or service not known: [client 144.76.19.72:58482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:00.380710 2026] [ssl:error] [pid 3806458:tid 3806458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:00.748919 2026] [security2:error] [pid 3808852:tid 3808852] [client 167.99.76.90:53468] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtolKAM4urbF8MJLC1F0QAAABA"]
[Thu Jul 30 16:07:01.082486 2026] [security2:error] [pid 3802792:tid 3802792] [client 43.156.37.91:46674] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.islay.me"] [uri "/"] [unique_id "amtolZdDCPKKsp99FrDICgAAABE"]
[Thu Jul 30 16:07:02.370867 2026] [access_compat:error] [pid 3806280:tid 3806280] [client 115.96.93.224:61976] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:03.382481 2026] [authz_core:error] [pid 3805510:tid 3805510] [client 35.187.38.62:58622] AH01630: client denied by server configuration: /home/markmitc/recklesselectricity.com/error_log
[Thu Jul 30 16:07:03.435662 2026] [ssl:error] [pid 3809084:tid 3809084] (EAI 2)Name or service not known: [client 144.76.19.72:58492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:03.435696 2026] [ssl:error] [pid 3809084:tid 3809084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:03.487786 2026] [ssl:error] [pid 3800115:tid 3800115] (EAI 2)Name or service not known: [client 144.76.19.72:58508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:03.487816 2026] [ssl:error] [pid 3800115:tid 3800115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:05.396872 2026] [security2:error] [pid 3800115:tid 3800115] [client 43.173.126.75:45311] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtomQhM8tsGkXvPR2BHaQAAAAQ"]
[Thu Jul 30 16:07:05.396956 2026] [security2:error] [pid 3800115:tid 3800115] [client 43.173.126.75:45311] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtomQhM8tsGkXvPR2BHaQAAAAQ"]
[Thu Jul 30 16:07:05.397211 2026] [security2:error] [pid 3800115:tid 3800115] [client 43.173.126.75:45311] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtomQhM8tsGkXvPR2BHaQAAAAQ"]
[Thu Jul 30 16:07:06.539640 2026] [ssl:error] [pid 3807662:tid 3807662] (EAI 2)Name or service not known: [client 144.76.19.72:58516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:06.539675 2026] [ssl:error] [pid 3807662:tid 3807662] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:06.595786 2026] [ssl:error] [pid 3800115:tid 3800115] (EAI 2)Name or service not known: [client 144.76.19.72:58526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:06.595818 2026] [ssl:error] [pid 3800115:tid 3800115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:07.084852 2026] [access_compat:error] [pid 3806279:tid 3806279] [client 115.96.93.224:62188] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:07.104785 2026] [security2:error] [pid 3809084:tid 3809084] [client 123.21.105.22:55689] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtomyYKwRGImuP6UkNzJQAAADI"]
[Thu Jul 30 16:07:07.104832 2026] [security2:error] [pid 3809084:tid 3809084] [client 123.21.105.22:55689] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtomyYKwRGImuP6UkNzJQAAADI"]
[Thu Jul 30 16:07:07.105124 2026] [security2:error] [pid 3809084:tid 3809084] [client 123.21.105.22:55689] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtomyYKwRGImuP6UkNzJQAAADI"]
[Thu Jul 30 16:07:07.162797 2026] [ssl:error] [pid 3803323:tid 3803323] (70014)End of file found: [client 216.73.216.199:11670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:09.487856 2026] [security2:error] [pid 3786772:tid 3786772] [client 43.157.170.13:37068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.quantum.com.mt"] [uri "/"] [unique_id "amtonbHDcooPRjp-ba2wXgAAABo"]
[Thu Jul 30 16:07:09.651571 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:20738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:09.651623 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:09.707514 2026] [ssl:error] [pid 3808372:tid 3808372] (EAI 2)Name or service not known: [client 144.76.19.72:20752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:09.707543 2026] [ssl:error] [pid 3808372:tid 3808372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:10.413468 2026] [lsapi:warn] [pid 3808852:tid 3808852] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:07:11.864039 2026] [security2:error] [pid 3806280:tid 3806280] [client 168.195.27.193:58890] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtonz0ZUDspeVyFWjPz2wAAABU"]
[Thu Jul 30 16:07:11.864126 2026] [security2:error] [pid 3806280:tid 3806280] [client 168.195.27.193:58890] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtonz0ZUDspeVyFWjPz2wAAABU"]
[Thu Jul 30 16:07:11.864412 2026] [security2:error] [pid 3806280:tid 3806280] [client 168.195.27.193:58890] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtonz0ZUDspeVyFWjPz2wAAABU"]
[Thu Jul 30 16:07:12.338562 2026] [security2:error] [pid 3802791:tid 3802791] [client 43.134.91.35:55026] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.firstclassbkltd.co.uk"] [uri "/"] [unique_id "amtooDWGJFxdIk9_Axd3UgAAAA4"]
[Thu Jul 30 16:07:12.556994 2026] [security2:error] [pid 3800115:tid 3800115] [client 43.157.180.116:33866] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.asian-kitchen.co.uk"] [uri "/"] [unique_id "amtooAhM8tsGkXvPR2BHbQAAAAQ"]
[Thu Jul 30 16:07:12.762380 2026] [ssl:error] [pid 3786772:tid 3786772] (EAI 2)Name or service not known: [client 144.76.19.72:20762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:12.762412 2026] [ssl:error] [pid 3786772:tid 3786772] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:12.819716 2026] [ssl:error] [pid 3808319:tid 3808319] (EAI 2)Name or service not known: [client 144.76.19.72:20776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:12.819746 2026] [ssl:error] [pid 3808319:tid 3808319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:12.874448 2026] [core:crit] [pid 3797774:tid 3797774] (13)Permission denied: [client 17.241.75.80:53110] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 16:07:12.874524 2026] [authz_core:error] [pid 3797774:tid 3797774] [client 17.241.75.80:53110] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 16:07:12.875389 2026] [core:crit] [pid 3797774:tid 3797774] (13)Permission denied: [client 17.241.75.80:53110] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 16:07:12.875422 2026] [core:crit] [pid 3797774:tid 3797774] (13)Permission denied: [client 17.241.75.80:53110] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 16:07:12.875467 2026] [core:crit] [pid 3797774:tid 3797774] (13)Permission denied: [client 17.241.75.80:53110] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 16:07:13.395663 2026] [security2:error] [pid 3802791:tid 3802791] [client 216.73.216.199:41800] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/yum/pluginconf.d/debuginfo-install.conf"] [unique_id "amtooTWGJFxdIk9_Axd3UwAAAA4"]
[Thu Jul 30 16:07:13.395945 2026] [security2:error] [pid 3802791:tid 3802791] [client 216.73.216.199:41800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/yum/pluginconf.d/debuginfo-install.conf"] [unique_id "amtooTWGJFxdIk9_Axd3UwAAAA4"]
[Thu Jul 30 16:07:13.396176 2026] [security2:error] [pid 3802791:tid 3802791] [client 216.73.216.199:41800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/yum/pluginconf.d/debuginfo-install.conf"] [unique_id "amtooTWGJFxdIk9_Axd3UwAAAA4"]
[Thu Jul 30 16:07:15.875986 2026] [ssl:error] [pid 3806280:tid 3806280] (EAI 2)Name or service not known: [client 144.76.19.72:20786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:15.876023 2026] [ssl:error] [pid 3806280:tid 3806280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:15.933998 2026] [ssl:error] [pid 3806458:tid 3806458] (EAI 2)Name or service not known: [client 144.76.19.72:20790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:15.934048 2026] [ssl:error] [pid 3806458:tid 3806458] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:17.043122 2026] [security2:error] [pid 3808974:tid 3808974] [client 129.211.229.121:49146] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.broadcast-support.com"] [uri "/"] [unique_id "amtopZIl2Sq-0UoAwPk9TwAAACU"]
[Thu Jul 30 16:07:17.363716 2026] [access_compat:error] [pid 3809084:tid 3809084] [client 115.96.93.224:62720] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:18.760627 2026] [authz_core:error] [pid 3783285:tid 3783285] [client 66.249.66.33:59627] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:07:18.763312 2026] [authz_core:error] [pid 3783285:tid 3783285] [client 66.249.66.33:59627] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:07:18.992758 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:20798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:18.992792 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:19.048806 2026] [ssl:error] [pid 3807498:tid 3807498] (EAI 2)Name or service not known: [client 144.76.19.72:20804] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:19.048839 2026] [ssl:error] [pid 3807498:tid 3807498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:19.737935 2026] [security2:error] [pid 3808974:tid 3808974] [client 43.157.179.227:50038] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.greenduckgallery.co.uk"] [uri "/"] [unique_id "amtop5Il2Sq-0UoAwPk9UQAAACU"]
[Thu Jul 30 16:07:20.456389 2026] [security2:error] [pid 3810643:tid 3810643] [client 43.157.180.116:45794] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.loca.co.uk"] [uri "/"] [unique_id "amtoqMDhuc7Gu8wJRPJFWAAAAAs"]
[Thu Jul 30 16:07:20.675545 2026] [security2:error] [pid 3808974:tid 3808974] [client 34.75.156.157:37060] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.git/config"] [unique_id "amtoqJIl2Sq-0UoAwPk9UwAAACU"]
[Thu Jul 30 16:07:20.675777 2026] [security2:error] [pid 3808974:tid 3808974] [client 34.75.156.157:37060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.git/config"] [unique_id "amtoqJIl2Sq-0UoAwPk9UwAAACU"]
[Thu Jul 30 16:07:20.675989 2026] [security2:error] [pid 3808974:tid 3808974] [client 34.75.156.157:37060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.git/config"] [unique_id "amtoqJIl2Sq-0UoAwPk9UwAAACU"]
[Thu Jul 30 16:07:20.999954 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.git/HEAD"] [unique_id "amtoqIpXjGxiuuoHwvjSPgAAAA8"]
[Thu Jul 30 16:07:21.000102 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.git/HEAD"] [unique_id "amtoqIpXjGxiuuoHwvjSPgAAAA8"]
[Thu Jul 30 16:07:21.000284 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.git/HEAD"] [unique_id "amtoqIpXjGxiuuoHwvjSPgAAAA8"]
[Thu Jul 30 16:07:21.207974 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amtoqUmU_VT2pZ9_ee5mUAAAACI"]
[Thu Jul 30 16:07:21.208121 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amtoqUmU_VT2pZ9_ee5mUAAAACI"]
[Thu Jul 30 16:07:21.208299 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env"] [unique_id "amtoqUmU_VT2pZ9_ee5mUAAAACI"]
[Thu Jul 30 16:07:21.293670 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.old"] [unique_id "amtoqdw4wsSAgpyOhytohgAAADc"]
[Thu Jul 30 16:07:21.293810 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.old"] [unique_id "amtoqdw4wsSAgpyOhytohgAAADc"]
[Thu Jul 30 16:07:21.294014 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.old"] [unique_id "amtoqdw4wsSAgpyOhytohgAAADc"]
[Thu Jul 30 16:07:21.330108 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/api/.env"] [unique_id "amtoqSyNps9vn9LaiYQyhwAAAAA"]
[Thu Jul 30 16:07:21.330248 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/api/.env"] [unique_id "amtoqSyNps9vn9LaiYQyhwAAAAA"]
[Thu Jul 30 16:07:21.330443 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/api/.env"] [unique_id "amtoqSyNps9vn9LaiYQyhwAAAAA"]
[Thu Jul 30 16:07:21.410362 2026] [ssl:error] [pid 3802791:tid 3802791] (70014)End of file found: [client 216.73.216.199:41800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:21.452471 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/admin/.env"] [unique_id "amtoqUmU_VT2pZ9_ee5mUgAAACI"]
[Thu Jul 30 16:07:21.452636 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/admin/.env"] [unique_id "amtoqUmU_VT2pZ9_ee5mUgAAACI"]
[Thu Jul 30 16:07:21.452844 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/admin/.env"] [unique_id "amtoqUmU_VT2pZ9_ee5mUgAAACI"]
[Thu Jul 30 16:07:21.525678 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.github/.env"] [unique_id "amtoqcDhuc7Gu8wJRPJFXQAAAAs"]
[Thu Jul 30 16:07:21.525812 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.github/.env"] [unique_id "amtoqcDhuc7Gu8wJRPJFXQAAAAs"]
[Thu Jul 30 16:07:21.525986 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.github/.env"] [unique_id "amtoqcDhuc7Gu8wJRPJFXQAAAAs"]
[Thu Jul 30 16:07:21.529622 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/backend/.env"] [unique_id "amtoqYpXjGxiuuoHwvjSQwAAAA8"]
[Thu Jul 30 16:07:21.529748 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/backend/.env"] [unique_id "amtoqYpXjGxiuuoHwvjSQwAAAA8"]
[Thu Jul 30 16:07:21.530062 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/backend/.env"] [unique_id "amtoqYpXjGxiuuoHwvjSQwAAAA8"]
[Thu Jul 30 16:07:21.575160 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.example"] [unique_id "amtoqUmU_VT2pZ9_ee5mUwAAACI"]
[Thu Jul 30 16:07:21.575287 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.example"] [unique_id "amtoqUmU_VT2pZ9_ee5mUwAAACI"]
[Thu Jul 30 16:07:21.575478 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.example"] [unique_id "amtoqUmU_VT2pZ9_ee5mUwAAACI"]
[Thu Jul 30 16:07:21.820523 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/laravel/.env"] [unique_id "amtoqdw4wsSAgpyOhytoiwAAADc"]
[Thu Jul 30 16:07:21.820701 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/laravel/.env"] [unique_id "amtoqdw4wsSAgpyOhytoiwAAADc"]
[Thu Jul 30 16:07:21.820903 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/laravel/.env"] [unique_id "amtoqdw4wsSAgpyOhytoiwAAADc"]
[Thu Jul 30 16:07:21.876206 2026] [security2:error] [pid 3797774:tid 3797774] [client 34.75.156.157:37092] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.hermes/.env"] [unique_id "amtoqX7y-5ZlY-a8bCc3aQAAAEs"]
[Thu Jul 30 16:07:21.876344 2026] [security2:error] [pid 3797774:tid 3797774] [client 34.75.156.157:37092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.hermes/.env"] [unique_id "amtoqX7y-5ZlY-a8bCc3aQAAAEs"]
[Thu Jul 30 16:07:21.876511 2026] [security2:error] [pid 3797774:tid 3797774] [client 34.75.156.157:37092] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.hermes/.env"] [unique_id "amtoqX7y-5ZlY-a8bCc3aQAAAEs"]
[Thu Jul 30 16:07:21.877017 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.local"] [unique_id "amtoqYpXjGxiuuoHwvjSRgAAAA8"]
[Thu Jul 30 16:07:21.877155 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.local"] [unique_id "amtoqYpXjGxiuuoHwvjSRgAAAA8"]
[Thu Jul 30 16:07:21.877323 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.local"] [unique_id "amtoqYpXjGxiuuoHwvjSRgAAAA8"]
[Thu Jul 30 16:07:21.939392 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/.env.php"] [unique_id "amtoqSyNps9vn9LaiYQyjQAAAAA"]
[Thu Jul 30 16:07:21.939589 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/.env.php"] [unique_id "amtoqSyNps9vn9LaiYQyjQAAAAA"]
[Thu Jul 30 16:07:21.939803 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/.env.php"] [unique_id "amtoqSyNps9vn9LaiYQyjQAAAAA"]
[Thu Jul 30 16:07:21.970344 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.php.bak"] [unique_id "amtoqcDhuc7Gu8wJRPJFYQAAAAs"]
[Thu Jul 30 16:07:21.970477 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.php.bak"] [unique_id "amtoqcDhuc7Gu8wJRPJFYQAAAAs"]
[Thu Jul 30 16:07:21.970643 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.php.bak"] [unique_id "amtoqcDhuc7Gu8wJRPJFYQAAAAs"]
[Thu Jul 30 16:07:22.050751 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/core/.env"] [unique_id "amtoqtw4wsSAgpyOhytojQAAADc"]
[Thu Jul 30 16:07:22.050944 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/core/.env"] [unique_id "amtoqtw4wsSAgpyOhytojQAAADc"]
[Thu Jul 30 16:07:22.051178 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37068] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/core/.env"] [unique_id "amtoqtw4wsSAgpyOhytojQAAADc"]
[Thu Jul 30 16:07:22.089183 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/server.key"] [unique_id "amtoqmKhI-eE5MihE2_0mAAAACE"]
[Thu Jul 30 16:07:22.089432 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/server.key"] [unique_id "amtoqmKhI-eE5MihE2_0mAAAACE"]
[Thu Jul 30 16:07:22.089637 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/server.key"] [unique_id "amtoqmKhI-eE5MihE2_0mAAAACE"]
[Thu Jul 30 16:07:22.186618 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.bak"] [unique_id "amtoqmKhI-eE5MihE2_0mQAAACE"]
[Thu Jul 30 16:07:22.186788 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.bak"] [unique_id "amtoqmKhI-eE5MihE2_0mQAAACE"]
[Thu Jul 30 16:07:22.186969 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.bak"] [unique_id "amtoqmKhI-eE5MihE2_0mQAAACE"]
[Thu Jul 30 16:07:22.295573 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.backup"] [unique_id "amtoqopXjGxiuuoHwvjSSgAAAA8"]
[Thu Jul 30 16:07:22.295707 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.backup"] [unique_id "amtoqopXjGxiuuoHwvjSSgAAAA8"]
[Thu Jul 30 16:07:22.295883 2026] [security2:error] [pid 3785296:tid 3785296] [client 34.75.156.157:37100] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.backup"] [unique_id "amtoqopXjGxiuuoHwvjSSgAAAA8"]
[Thu Jul 30 16:07:22.299560 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.svn/entries"] [unique_id "amtoqmKhI-eE5MihE2_0mgAAACE"]
[Thu Jul 30 16:07:22.299686 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.svn/entries"] [unique_id "amtoqmKhI-eE5MihE2_0mgAAACE"]
[Thu Jul 30 16:07:22.299987 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.svn/entries"] [unique_id "amtoqmKhI-eE5MihE2_0mgAAACE"]
[Thu Jul 30 16:07:22.398615 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/localhost.key"] [unique_id "amtoqkmU_VT2pZ9_ee5mWwAAACI"]
[Thu Jul 30 16:07:22.398824 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/localhost.key"] [unique_id "amtoqkmU_VT2pZ9_ee5mWwAAACI"]
[Thu Jul 30 16:07:22.399015 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/localhost.key"] [unique_id "amtoqkmU_VT2pZ9_ee5mWwAAACI"]
[Thu Jul 30 16:07:22.409957 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.production"] [unique_id "amtoqmKhI-eE5MihE2_0mwAAACE"]
[Thu Jul 30 16:07:22.410112 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.production"] [unique_id "amtoqmKhI-eE5MihE2_0mwAAACE"]
[Thu Jul 30 16:07:22.410295 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.production"] [unique_id "amtoqmKhI-eE5MihE2_0mwAAACE"]
[Thu Jul 30 16:07:22.496279 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/.env"] [unique_id "amtoqkmU_VT2pZ9_ee5mXAAAACI"]
[Thu Jul 30 16:07:22.496478 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/.env"] [unique_id "amtoqkmU_VT2pZ9_ee5mXAAAACI"]
[Thu Jul 30 16:07:22.496693 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/.env"] [unique_id "amtoqkmU_VT2pZ9_ee5mXAAAACI"]
[Thu Jul 30 16:07:22.533023 2026] [security2:error] [pid 3810754:tid 3810754] [client 34.75.156.157:37214] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/host.key"] [unique_id "amtoqh-9C-qOklv621dP-gAAACQ"]
[Thu Jul 30 16:07:22.533294 2026] [security2:error] [pid 3810754:tid 3810754] [client 34.75.156.157:37214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/host.key"] [unique_id "amtoqh-9C-qOklv621dP-gAAACQ"]
[Thu Jul 30 16:07:22.533536 2026] [security2:error] [pid 3810754:tid 3810754] [client 34.75.156.157:37214] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/host.key"] [unique_id "amtoqh-9C-qOklv621dP-gAAACQ"]
[Thu Jul 30 16:07:22.626507 2026] [ssl:error] [pid 3810754:tid 3810754] (EAI 2)Name or service not known: [client 144.76.19.72:38672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:22.626535 2026] [ssl:error] [pid 3810754:tid 3810754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:22.646755 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/ssl/server.key"] [unique_id "amtoqtw4wsSAgpyOhytokAAAADc"]
[Thu Jul 30 16:07:22.646978 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/ssl/server.key"] [unique_id "amtoqtw4wsSAgpyOhytokAAAADc"]
[Thu Jul 30 16:07:22.647165 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/ssl/server.key"] [unique_id "amtoqtw4wsSAgpyOhytokAAAADc"]
[Thu Jul 30 16:07:22.658140 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/privatekey.key"] [unique_id "amtoqmKhI-eE5MihE2_0nQAAACE"]
[Thu Jul 30 16:07:22.658348 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/privatekey.key"] [unique_id "amtoqmKhI-eE5MihE2_0nQAAACE"]
[Thu Jul 30 16:07:22.658518 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/privatekey.key"] [unique_id "amtoqmKhI-eE5MihE2_0nQAAACE"]
[Thu Jul 30 16:07:22.759986 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amtoqmKhI-eE5MihE2_0ngAAACE"]
[Thu Jul 30 16:07:22.760223 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amtoqmKhI-eE5MihE2_0ngAAACE"]
[Thu Jul 30 16:07:22.760405 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/ssl/localhost.key"] [unique_id "amtoqmKhI-eE5MihE2_0ngAAACE"]
[Thu Jul 30 16:07:22.763727 2026] [security2:error] [pid 3806335:tid 3806335] [client 34.75.156.157:37234] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/web/.env"] [unique_id "amtoqhod0-yfLY0hOjZHoQAAABY"]
[Thu Jul 30 16:07:22.763855 2026] [security2:error] [pid 3806335:tid 3806335] [client 34.75.156.157:37234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/web/.env"] [unique_id "amtoqhod0-yfLY0hOjZHoQAAABY"]
[Thu Jul 30 16:07:22.764188 2026] [security2:error] [pid 3806335:tid 3806335] [client 34.75.156.157:37234] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/web/.env"] [unique_id "amtoqhod0-yfLY0hOjZHoQAAABY"]
[Thu Jul 30 16:07:22.765325 2026] [lsapi:warn] [pid 3810756:tid 3810756] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:07:22.871449 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/rclone.conf"] [unique_id "amtoqsDhuc7Gu8wJRPJFZQAAAAs"]
[Thu Jul 30 16:07:22.871663 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/rclone.conf"] [unique_id "amtoqsDhuc7Gu8wJRPJFZQAAAAs"]
[Thu Jul 30 16:07:22.871845 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/rclone.conf"] [unique_id "amtoqsDhuc7Gu8wJRPJFZQAAAAs"]
[Thu Jul 30 16:07:22.925951 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtoqkmU_VT2pZ9_ee5mYAAAACI"]
[Thu Jul 30 16:07:22.926105 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtoqkmU_VT2pZ9_ee5mYAAAACI"]
[Thu Jul 30 16:07:22.926287 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/wp-config.php.bak"] [unique_id "amtoqkmU_VT2pZ9_ee5mYAAAACI"]
[Thu Jul 30 16:07:22.937609 2026] [authz_core:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] AH01630: client denied by server configuration: /home/chemgalproj/_wildcard_.chemicalgalaxy.co.uk/.htpasswd
[Thu Jul 30 16:07:22.968808 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtoqsDhuc7Gu8wJRPJFZgAAAAs"]
[Thu Jul 30 16:07:22.968980 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtoqsDhuc7Gu8wJRPJFZgAAAAs"]
[Thu Jul 30 16:07:22.969169 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/wp-config.php.old"] [unique_id "amtoqsDhuc7Gu8wJRPJFZgAAAAs"]
[Thu Jul 30 16:07:22.986317 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/trace.axd"] [unique_id "amtoqtw4wsSAgpyOhytokwAAADc"]
[Thu Jul 30 16:07:22.986575 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/trace.axd"] [unique_id "amtoqtw4wsSAgpyOhytokwAAADc"]
[Thu Jul 30 16:07:22.986768 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/trace.axd"] [unique_id "amtoqtw4wsSAgpyOhytokwAAADc"]
[Thu Jul 30 16:07:22.989206 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/elmah.axd"] [unique_id "amtoqmKhI-eE5MihE2_0oAAAACE"]
[Thu Jul 30 16:07:22.989417 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/elmah.axd"] [unique_id "amtoqmKhI-eE5MihE2_0oAAAACE"]
[Thu Jul 30 16:07:22.989679 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/elmah.axd"] [unique_id "amtoqmKhI-eE5MihE2_0oAAAACE"]
[Thu Jul 30 16:07:23.004408 2026] [ssl:error] [pid 3806280:tid 3806280] (EAI 2)Name or service not known: [client 144.76.19.72:38674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:23.004430 2026] [ssl:error] [pid 3806280:tid 3806280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:23.025208 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtoq0mU_VT2pZ9_ee5mYQAAACI"]
[Thu Jul 30 16:07:23.025438 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtoq0mU_VT2pZ9_ee5mYQAAACI"]
[Thu Jul 30 16:07:23.025618 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/storage/logs/laravel.log"] [unique_id "amtoq0mU_VT2pZ9_ee5mYQAAACI"]
[Thu Jul 30 16:07:23.085777 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.dev"] [unique_id "amtoq2KhI-eE5MihE2_0oQAAACE"]
[Thu Jul 30 16:07:23.085970 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.dev"] [unique_id "amtoq2KhI-eE5MihE2_0oQAAACE"]
[Thu Jul 30 16:07:23.086180 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.dev"] [unique_id "amtoq2KhI-eE5MihE2_0oQAAACE"]
[Thu Jul 30 16:07:23.153144 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.swp"] [unique_id "amtoq0mU_VT2pZ9_ee5mYgAAACI"]
[Thu Jul 30 16:07:23.153348 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.swp"] [unique_id "amtoq0mU_VT2pZ9_ee5mYgAAACI"]
[Thu Jul 30 16:07:23.153545 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.swp"] [unique_id "amtoq0mU_VT2pZ9_ee5mYgAAACI"]
[Thu Jul 30 16:07:23.318765 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.openclaw/.env"] [unique_id "amtoq9w4wsSAgpyOhytolgAAADc"]
[Thu Jul 30 16:07:23.318934 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.openclaw/.env"] [unique_id "amtoq9w4wsSAgpyOhytolgAAADc"]
[Thu Jul 30 16:07:23.319135 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.openclaw/.env"] [unique_id "amtoq9w4wsSAgpyOhytolgAAADc"]
[Thu Jul 30 16:07:23.519982 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/staging/.env"] [unique_id "amtoq9w4wsSAgpyOhytomAAAADc"]
[Thu Jul 30 16:07:23.520165 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/staging/.env"] [unique_id "amtoq9w4wsSAgpyOhytomAAAADc"]
[Thu Jul 30 16:07:23.520370 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/staging/.env"] [unique_id "amtoq9w4wsSAgpyOhytomAAAADc"]
[Thu Jul 30 16:07:23.528712 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/app/.env"] [unique_id "amtoq8Dhuc7Gu8wJRPJFawAAAAs"]
[Thu Jul 30 16:07:23.528861 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/app/.env"] [unique_id "amtoq8Dhuc7Gu8wJRPJFawAAAAs"]
[Thu Jul 30 16:07:23.529041 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/app/.env"] [unique_id "amtoq8Dhuc7Gu8wJRPJFawAAAAs"]
[Thu Jul 30 16:07:23.637537 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.docker"] [unique_id "amtoq8Dhuc7Gu8wJRPJFbAAAAAs"]
[Thu Jul 30 16:07:23.637745 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.docker"] [unique_id "amtoq8Dhuc7Gu8wJRPJFbAAAAAs"]
[Thu Jul 30 16:07:23.637935 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.docker"] [unique_id "amtoq8Dhuc7Gu8wJRPJFbAAAAAs"]
[Thu Jul 30 16:07:23.638933 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/src/.env"] [unique_id "amtoq2KhI-eE5MihE2_0pgAAACE"]
[Thu Jul 30 16:07:23.639058 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/src/.env"] [unique_id "amtoq2KhI-eE5MihE2_0pgAAACE"]
[Thu Jul 30 16:07:23.639241 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/src/.env"] [unique_id "amtoq2KhI-eE5MihE2_0pgAAACE"]
[Thu Jul 30 16:07:23.640227 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/public/.env"] [unique_id "amtoq9w4wsSAgpyOhytomQAAADc"]
[Thu Jul 30 16:07:23.640373 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/public/.env"] [unique_id "amtoq9w4wsSAgpyOhytomQAAADc"]
[Thu Jul 30 16:07:23.640544 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/public/.env"] [unique_id "amtoq9w4wsSAgpyOhytomQAAADc"]
[Thu Jul 30 16:07:23.675551 2026] [security2:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtoq7eJ_N3Kr5dqs7LVBAAAABo"]
[Thu Jul 30 16:07:23.675682 2026] [security2:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtoq7eJ_N3Kr5dqs7LVBAAAABo"]
[Thu Jul 30 16:07:23.675965 2026] [security2:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtoq7eJ_N3Kr5dqs7LVBAAAABo"]
[Thu Jul 30 16:07:23.676347 2026] [security2:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/web.config"] [unique_id "amtoq7eJ_N3Kr5dqs7LVBAAAABo"]
[Thu Jul 30 16:07:23.734801 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/frontend/.env"] [unique_id "amtoq9w4wsSAgpyOhytomgAAADc"]
[Thu Jul 30 16:07:23.734965 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/frontend/.env"] [unique_id "amtoq9w4wsSAgpyOhytomgAAADc"]
[Thu Jul 30 16:07:23.735182 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/frontend/.env"] [unique_id "amtoq9w4wsSAgpyOhytomgAAADc"]
[Thu Jul 30 16:07:23.739510 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/docker/.env"] [unique_id "amtoq2KhI-eE5MihE2_0pwAAACE"]
[Thu Jul 30 16:07:23.739660 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/docker/.env"] [unique_id "amtoq2KhI-eE5MihE2_0pwAAACE"]
[Thu Jul 30 16:07:23.739846 2026] [security2:error] [pid 3806458:tid 3806458] [client 34.75.156.157:37168] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/docker/.env"] [unique_id "amtoq2KhI-eE5MihE2_0pwAAACE"]
[Thu Jul 30 16:07:23.792568 2026] [security2:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/production/.env"] [unique_id "amtoq7eJ_N3Kr5dqs7LVBQAAABo"]
[Thu Jul 30 16:07:23.792715 2026] [security2:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/production/.env"] [unique_id "amtoq7eJ_N3Kr5dqs7LVBQAAABo"]
[Thu Jul 30 16:07:23.792911 2026] [security2:error] [pid 3810709:tid 3810709] [client 34.75.156.157:37156] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/production/.env"] [unique_id "amtoq7eJ_N3Kr5dqs7LVBQAAABo"]
[Thu Jul 30 16:07:23.830135 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.test"] [unique_id "amtoq9w4wsSAgpyOhytomwAAADc"]
[Thu Jul 30 16:07:23.830291 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.test"] [unique_id "amtoq9w4wsSAgpyOhytomwAAADc"]
[Thu Jul 30 16:07:23.830489 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.test"] [unique_id "amtoq9w4wsSAgpyOhytomwAAADc"]
[Thu Jul 30 16:07:23.923770 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/master.key"] [unique_id "amtoq9w4wsSAgpyOhytonAAAADc"]
[Thu Jul 30 16:07:23.924040 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/master.key"] [unique_id "amtoq9w4wsSAgpyOhytonAAAADc"]
[Thu Jul 30 16:07:23.924252 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/config/master.key"] [unique_id "amtoq9w4wsSAgpyOhytonAAAADc"]
[Thu Jul 30 16:07:23.969943 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.production.bak"] [unique_id "amtoq0mU_VT2pZ9_ee5maQAAACI"]
[Thu Jul 30 16:07:23.970161 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.production.bak"] [unique_id "amtoq0mU_VT2pZ9_ee5maQAAACI"]
[Thu Jul 30 16:07:23.970394 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.production.bak"] [unique_id "amtoq0mU_VT2pZ9_ee5maQAAACI"]
[Thu Jul 30 16:07:23.997469 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/server/.env"] [unique_id "amtoqyyNps9vn9LaiYQyoAAAAAA"]
[Thu Jul 30 16:07:23.997608 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/server/.env"] [unique_id "amtoqyyNps9vn9LaiYQyoAAAAAA"]
[Thu Jul 30 16:07:23.997787 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/server/.env"] [unique_id "amtoqyyNps9vn9LaiYQyoAAAAAA"]
[Thu Jul 30 16:07:24.045954 2026] [security2:error] [pid 3810807:tid 3810807] [client 43.157.22.109:35174] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highcleresyndicates.co.uk"] [uri "/"] [unique_id "amtorNnNl0w7oUV10fADmwAAADQ"]
[Thu Jul 30 16:07:24.084597 2026] [authz_core:error] [pid 3810803:tid 3810803] [client 66.249.66.33:58297] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:07:24.087291 2026] [authz_core:error] [pid 3810803:tid 3810803] [client 66.249.66.33:58297] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:07:24.102633 2026] [access_compat:error] [pid 3797774:tid 3797774] [client 115.96.93.224:63034] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:24.115180 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.prod.bak"] [unique_id "amtorMDhuc7Gu8wJRPJFcAAAAAs"]
[Thu Jul 30 16:07:24.115400 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.prod.bak"] [unique_id "amtorMDhuc7Gu8wJRPJFcAAAAAs"]
[Thu Jul 30 16:07:24.115604 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.prod.bak"] [unique_id "amtorMDhuc7Gu8wJRPJFcAAAAAs"]
[Thu Jul 30 16:07:24.213446 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/dev/.env"] [unique_id "amtorMDhuc7Gu8wJRPJFcQAAAAs"]
[Thu Jul 30 16:07:24.213634 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/dev/.env"] [unique_id "amtorMDhuc7Gu8wJRPJFcQAAAAs"]
[Thu Jul 30 16:07:24.213829 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/dev/.env"] [unique_id "amtorMDhuc7Gu8wJRPJFcQAAAAs"]
[Thu Jul 30 16:07:24.271199 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/@fs/.env"] [unique_id "amtorEmU_VT2pZ9_ee5mbAAAACI"]
[Thu Jul 30 16:07:24.271589 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/@fs/.env"] [unique_id "amtorEmU_VT2pZ9_ee5mbAAAACI"]
[Thu Jul 30 16:07:24.271802 2026] [security2:error] [pid 3808914:tid 3808914] [client 34.75.156.157:37094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/@fs/.env"] [unique_id "amtorEmU_VT2pZ9_ee5mbAAAACI"]
[Thu Jul 30 16:07:24.350872 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.staging"] [unique_id "amtorNw4wsSAgpyOhytooAAAADc"]
[Thu Jul 30 16:07:24.351045 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.staging"] [unique_id "amtorNw4wsSAgpyOhytooAAAADc"]
[Thu Jul 30 16:07:24.351238 2026] [security2:error] [pid 3793125:tid 3793125] [client 34.75.156.157:37174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.staging"] [unique_id "amtorNw4wsSAgpyOhytooAAAADc"]
[Thu Jul 30 16:07:24.363401 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/@fs/root/.env"] [unique_id "amtorMDhuc7Gu8wJRPJFcgAAAAs"]
[Thu Jul 30 16:07:24.363784 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/@fs/root/.env"] [unique_id "amtorMDhuc7Gu8wJRPJFcgAAAAs"]
[Thu Jul 30 16:07:24.363979 2026] [security2:error] [pid 3810643:tid 3810643] [client 34.75.156.157:37110] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/@fs/root/.env"] [unique_id "amtorMDhuc7Gu8wJRPJFcgAAAAs"]
[Thu Jul 30 16:07:24.580502 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.development"] [unique_id "amtorCyNps9vn9LaiYQypQAAAAA"]
[Thu Jul 30 16:07:24.580658 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.development"] [unique_id "amtorCyNps9vn9LaiYQypQAAAAA"]
[Thu Jul 30 16:07:24.580833 2026] [security2:error] [pid 3808319:tid 3808319] [client 34.75.156.157:37084] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "client.chemicalgalaxy.co.uk"] [uri "/.env.development"] [unique_id "amtorCyNps9vn9LaiYQypQAAAAA"]
[Thu Jul 30 16:07:24.987367 2026] [security2:error] [pid 3810810:tid 3810810] [client 43.157.188.74:50612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.org.uk"] [uri "/"] [unique_id "amtorISZWYddwtRzEmFNpwAAADg"]
[Thu Jul 30 16:07:26.056483 2026] [ssl:error] [pid 3810805:tid 3810805] (EAI 2)Name or service not known: [client 144.76.19.72:38688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:26.056528 2026] [ssl:error] [pid 3810805:tid 3810805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:26.111553 2026] [ssl:error] [pid 3797774:tid 3797774] (EAI 2)Name or service not known: [client 144.76.19.72:38692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:26.111633 2026] [ssl:error] [pid 3797774:tid 3797774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:26.535084 2026] [security2:error] [pid 3806565:tid 3806565] [client 43.157.188.74:52754] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/category/united-kingdom/"] [unique_id "amtormYcSLiqiYycN-iQqgAAACg"], referer: http://www.shelterforum.org.uk
[Thu Jul 30 16:07:27.904272 2026] [access_compat:error] [pid 3797774:tid 3797774] [client 115.96.93.224:63241] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:29.165014 2026] [ssl:error] [pid 3803380:tid 3803380] (EAI 2)Name or service not known: [client 144.76.19.72:38708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:29.165049 2026] [ssl:error] [pid 3803380:tid 3803380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:29.221418 2026] [ssl:error] [pid 3783285:tid 3783285] (EAI 2)Name or service not known: [client 144.76.19.72:38712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:29.221452 2026] [ssl:error] [pid 3783285:tid 3783285] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:30.782461 2026] [ssl:error] [pid 3810754:tid 3810754] (70014)End of file found: [client 216.73.216.199:9958] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:31.678479 2026] [security2:error] [pid 3793124:tid 3793124] [client 43.130.174.37:54502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saliency.co.uk"] [uri "/"] [unique_id "amtos75koEf2kJSERTwAAwAAADM"]
[Thu Jul 30 16:07:31.735054 2026] [lsapi:warn] [pid 3803379:tid 3803379] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:07:32.304521 2026] [ssl:error] [pid 3800476:tid 3800476] (EAI 2)Name or service not known: [client 144.76.19.72:29996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:32.304560 2026] [ssl:error] [pid 3800476:tid 3800476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:32.360632 2026] [ssl:error] [pid 3810805:tid 3810805] (EAI 2)Name or service not known: [client 144.76.19.72:30008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:32.360667 2026] [ssl:error] [pid 3810805:tid 3810805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:32.611026 2026] [ssl:error] [pid 3805510:tid 3805510] (70014)End of file found: [client 216.73.216.199:19678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:33.497299 2026] [security2:error] [pid 3802792:tid 3802792] [client 110.249.202.118:33832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/robots.txt"] [unique_id "amtotZdDCPKKsp99FrDIFAAAABE"]
[Thu Jul 30 16:07:33.961195 2026] [access_compat:error] [pid 3791485:tid 3791485] [client 115.96.93.224:63561] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:34.727742 2026] [ssl:error] [pid 3785214:tid 3785214] (70014)End of file found: [client 216.73.216.199:21027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:34.734994 2026] [security2:error] [pid 3810810:tid 3810810] [client 114.119.135.136:45513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14/request_format~html"] [unique_id "amtotoSZWYddwtRzEmFNqwAAADg"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~104,14/request_format~html
[Thu Jul 30 16:07:35.249399 2026] [security2:error] [pid 3810809:tid 3810809] [client 23.23.212.212:49661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects9/A.27-SyrianArabRepublic-SP9.pdf"] [unique_id "amtot2Z524uTQtMBHF_bswAAADY"]
[Thu Jul 30 16:07:35.319049 2026] [security2:error] [pid 3808852:tid 3808852] [client 52.207.47.227:26864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterprojects.org"] [uri "/CCCM/vol3/ch4/D.2-Philipines-2017-2018-Natural-Disaster.pdf"] [unique_id "amtot6AM4urbF8MJLC1GCQAAABA"]
[Thu Jul 30 16:07:35.419146 2026] [ssl:error] [pid 3810752:tid 3810752] (EAI 2)Name or service not known: [client 144.76.19.72:30012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:35.419179 2026] [ssl:error] [pid 3810752:tid 3810752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:35.477366 2026] [ssl:error] [pid 3811392:tid 3811392] (EAI 2)Name or service not known: [client 144.76.19.72:30014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:35.477412 2026] [ssl:error] [pid 3811392:tid 3811392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:36.126512 2026] [core:error] [pid 3803379:tid 3803379] (13)Permission denied: [client 216.73.216.199:33900] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup6/device/physical_node/remove
[Thu Jul 30 16:07:36.155974 2026] [authz_core:error] [pid 3808852:tid 3808852] [client 66.249.66.33:53861] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:07:36.158648 2026] [authz_core:error] [pid 3808852:tid 3808852] [client 66.249.66.33:53861] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:07:36.296748 2026] [security2:error] [pid 3811392:tid 3811392] [client 43.157.46.118:59488] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ziltdesign.be"] [uri "/"] [unique_id "amtouMWPizWXRSssZ7Va9AAAACA"]
[Thu Jul 30 16:07:36.316204 2026] [security2:error] [pid 3802792:tid 3802792] [client 114.119.135.136:45525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14/request_format~html"] [unique_id "amtouJdDCPKKsp99FrDIFQAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~104,14/request_format~html
[Thu Jul 30 16:07:37.827270 2026] [security2:error] [pid 3806335:tid 3806335] [client 47.128.125.191:52958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "baketastic.co.uk"] [uri "/robots.txt"] [unique_id "amtouRod0-yfLY0hOjZHpQAAABY"]
[Thu Jul 30 16:07:38.458616 2026] [access_compat:error] [pid 3805510:tid 3805510] [client 115.96.93.224:63774] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:38.535958 2026] [ssl:error] [pid 3810809:tid 3810809] (EAI 2)Name or service not known: [client 144.76.19.72:30030] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:38.535988 2026] [ssl:error] [pid 3810809:tid 3810809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:38.592400 2026] [ssl:error] [pid 3807498:tid 3807498] (EAI 2)Name or service not known: [client 144.76.19.72:30040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:38.592427 2026] [ssl:error] [pid 3807498:tid 3807498] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:38.802454 2026] [security2:error] [pid 3810805:tid 3810805] [client 101.32.52.164:60662] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtour03-PUQHbWXFFpB7wAAADE"]
[Thu Jul 30 16:07:39.098635 2026] [security2:error] [pid 3800115:tid 3800115] [client 44.218.170.184:13072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/competitions/winners/"] [unique_id "amtouwhM8tsGkXvPR2BHtwAAAAQ"]
[Thu Jul 30 16:07:39.187477 2026] [cgi:error] [pid 3807580:tid 3807580] [client 20.151.221.234:0] AH02812: stderr from /home/quantumc/shop.papier.com.mt/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:07:39.250229 2026] [ssl:error] [pid 3803379:tid 3803379] (70014)End of file found: [client 216.73.216.199:33900] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:39.349760 2026] [authz_core:error] [pid 3808852:tid 3808852] [client 66.249.66.33:53861] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:07:39.352442 2026] [authz_core:error] [pid 3808852:tid 3808852] [client 66.249.66.33:53861] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:07:39.752649 2026] [ssl:error] [pid 3810809:tid 3810809] (70014)End of file found: [client 216.73.216.199:51145] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:41.588438 2026] [authz_core:error] [pid 3810805:tid 3810805] [client 169.58.39.193:64098] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 16:07:41.644295 2026] [ssl:error] [pid 3785296:tid 3785296] (EAI 2)Name or service not known: [client 144.76.19.72:49394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:41.644344 2026] [ssl:error] [pid 3785296:tid 3785296] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:41.702558 2026] [ssl:error] [pid 3807659:tid 3807659] (EAI 2)Name or service not known: [client 144.76.19.72:49406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:41.702604 2026] [ssl:error] [pid 3807659:tid 3807659] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:42.106001 2026] [security2:error] [pid 3791241:tid 3791241] [client 101.32.52.164:56428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtovjhQogV9dYcHprtk9QAAACM"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 16:07:42.612918 2026] [lsapi:warn] [pid 3809542:tid 3809542] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:07:42.878056 2026] [ssl:error] [pid 3804823:tid 3804823] (70014)End of file found: [client 216.73.216.199:25018] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:43.109142 2026] [security2:error] [pid 3806337:tid 3806337] [client 3.89.170.186:26858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/other/siteplanning/site-planning-references/DG%20ECHO%20Thematic%20policy%20documentss_shelter%20and%20settlements.pdf"] [unique_id "amtov6xLJ0_zW2WolvNOhAAAAB8"]
[Thu Jul 30 16:07:43.766228 2026] [access_compat:error] [pid 3807581:tid 3807581] [client 45.158.164.139:54614] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:07:44.759293 2026] [ssl:error] [pid 3809084:tid 3809084] (EAI 2)Name or service not known: [client 144.76.19.72:49416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:44.759345 2026] [ssl:error] [pid 3809084:tid 3809084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:44.810759 2026] [ssl:error] [pid 3802792:tid 3802792] (EAI 2)Name or service not known: [client 144.76.19.72:49430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:44.810798 2026] [ssl:error] [pid 3802792:tid 3802792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:45.045599 2026] [security2:error] [pid 3807580:tid 3807580] [client 101.32.52.164:37180] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dawnrobinson.co.uk"] [uri "/"] [unique_id "amtowVs0_U1tYKc0Y_cy8QAAABQ"]
[Thu Jul 30 16:07:45.599651 2026] [ssl:error] [pid 3791241:tid 3791241] (70014)End of file found: [client 216.73.216.199:58441] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:46.100850 2026] [ssl:error] [pid 3809084:tid 3809084] (70014)End of file found: [client 216.73.216.199:20351] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:46.155817 2026] [authz_core:error] [pid 3807581:tid 3807581] [client 169.58.39.193:64948] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 16:07:46.418633 2026] [security2:error] [pid 3807580:tid 3807580] [client 101.32.52.164:38042] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.karenthomasjewellery.co.uk"] [uri "/"] [unique_id "amtowls0_U1tYKc0Y_cy8gAAABQ"]
[Thu Jul 30 16:07:47.155482 2026] [security2:error] [pid 3806335:tid 3806335] [client 44.206.65.8:6200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/CCCM/vol3/ch4/D.1-Nepal-2011-2020-Natural-Disaster.pdf"] [unique_id "amtowxod0-yfLY0hOjZHqAAAABY"]
[Thu Jul 30 16:07:47.615540 2026] [security2:error] [pid 3802792:tid 3802792] [client 43.167.241.46:56930] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/"] [unique_id "amtow5dDCPKKsp99FrDIGAAAABE"], referer: http://www.peterboroughdiocesanregistry.co.uk
[Thu Jul 30 16:07:47.804281 2026] [security2:error] [pid 3803353:tid 3803353] [client 101.32.52.164:39518] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "dawnrobinson.co.uk"] [uri "/"] [unique_id "amtow1Bml_c8fdH4lrNXPQAAAA0"], referer: http://www.dawnrobinson.co.uk
[Thu Jul 30 16:07:47.862901 2026] [ssl:error] [pid 3797774:tid 3797774] (EAI 2)Name or service not known: [client 144.76.19.72:49440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:47.862926 2026] [ssl:error] [pid 3797774:tid 3797774] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:47.921540 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:49452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:47.921570 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:48.997818 2026] [access_compat:error] [pid 3804823:tid 3804823] [client 115.96.93.224:64302] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:49.466672 2026] [access_compat:error] [pid 3807662:tid 3807662] [client 45.158.164.139:54628] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:07:49.517555 2026] [security2:error] [pid 3803353:tid 3803353] [client 101.32.52.164:40722] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/"] [unique_id "amtoxVBml_c8fdH4lrNXPgAAAA0"]
[Thu Jul 30 16:07:49.622506 2026] [ssl:error] [pid 3807581:tid 3807581] (70014)End of file found: [client 216.73.216.199:24455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:49.884909 2026] [security2:error] [pid 3810805:tid 3810805] [client 185.191.171.7:38408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/missouri-blind-pension-contact-number"] [unique_id "amtoxb03-PUQHbWXFFpB8wAAADE"]
[Thu Jul 30 16:07:50.065873 2026] [security2:error] [pid 3808974:tid 3808974] [client 170.106.187.106:53470] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtoxpIl2Sq-0UoAwPk9YAAAACU"], referer: http://www.banskoexpress.co.uk
[Thu Jul 30 16:07:50.926670 2026] [security2:error] [pid 3808974:tid 3808974] [client 3.210.114.189:13664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/shelterprojects9/A.2-DRCongo-SP9.pdf"] [unique_id "amtoxpIl2Sq-0UoAwPk9YQAAACU"]
[Thu Jul 30 16:07:51.103896 2026] [ssl:error] [pid 3808974:tid 3808974] (70014)End of file found: [client 216.73.216.199:19626] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:51.151367 2026] [ssl:error] [pid 3808372:tid 3808372] (EAI 2)Name or service not known: [client 144.76.19.72:27206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:51.151401 2026] [ssl:error] [pid 3808372:tid 3808372] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:51.214986 2026] [ssl:error] [pid 3810803:tid 3810803] (EAI 2)Name or service not known: [client 144.76.19.72:27210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:51.215016 2026] [ssl:error] [pid 3810803:tid 3810803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:51.462270 2026] [security2:error] [pid 3791241:tid 3791241] [client 170.106.187.106:41226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtoxzhQogV9dYcHprtk_AAAACM"], referer: http://www.banskoexpress.com
[Thu Jul 30 16:07:51.730581 2026] [ssl:error] [pid 3803323:tid 3803323] (70014)End of file found: [client 216.73.216.199:26502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:52.828119 2026] [security2:error] [pid 3805510:tid 3805510] [client 101.32.52.164:42522] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.swingaddiction.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtoyKfz92rYUtXcKms7cgAAAAU"], referer: http://www.swingaddiction.co.uk
[Thu Jul 30 16:07:52.867083 2026] [cgi:error] [pid 3805510:tid 3805510] [client 101.32.52.164:42522] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Use of uninitialized value $homedir in concatenation (.) or string at /usr/local/cpanel/Cpanel/WebTemplates.pm line 63., referer: http://www.swingaddiction.co.uk
[Thu Jul 30 16:07:53.139696 2026] [lsapi:warn] [pid 3807661:tid 3807661] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:07:54.241387 2026] [ssl:error] [pid 3805510:tid 3805510] (70014)End of file found: [client 216.73.216.199:61510] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:54.273769 2026] [ssl:error] [pid 3785214:tid 3785214] (EAI 2)Name or service not known: [client 144.76.19.72:27224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:54.273799 2026] [ssl:error] [pid 3785214:tid 3785214] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:54.331280 2026] [ssl:error] [pid 3811392:tid 3811392] (EAI 2)Name or service not known: [client 144.76.19.72:27226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:54.331309 2026] [ssl:error] [pid 3811392:tid 3811392] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:54.612564 2026] [security2:error] [pid 3806335:tid 3806335] [client 85.208.96.195:26408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2434.0/prev_next,prev.html"] [unique_id "amtoyhod0-yfLY0hOjZHqgAAABY"]
[Thu Jul 30 16:07:54.692183 2026] [security2:error] [pid 3802792:tid 3802792] [client 101.32.52.164:43424] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/"] [unique_id "amtoypdDCPKKsp99FrDIGgAAABE"]
[Thu Jul 30 16:07:54.842698 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:62486] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:55.445495 2026] [ssl:error] [pid 3808372:tid 3808372] (70014)End of file found: [client 216.73.216.199:33573] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:07:55.573118 2026] [security2:error] [pid 3806019:tid 3806019] [client 20.63.98.115:58937] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ns-earth.com"] [uri "/wp-config.php"] [unique_id "amtoy_iSUPKfdV0BtR-HiAAAAAE"]
[Thu Jul 30 16:07:55.573288 2026] [security2:error] [pid 3806019:tid 3806019] [client 20.63.98.115:58937] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/wp-config.php"] [unique_id "amtoy_iSUPKfdV0BtR-HiAAAAAE"]
[Thu Jul 30 16:07:55.573495 2026] [security2:error] [pid 3806019:tid 3806019] [client 20.63.98.115:58937] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/wp-config.php"] [unique_id "amtoy_iSUPKfdV0BtR-HiAAAAAE"]
[Thu Jul 30 16:07:55.685390 2026] [access_compat:error] [pid 3804823:tid 3804823] [client 115.96.93.224:64650] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:07:56.341210 2026] [security2:error] [pid 3807659:tid 3807659] [client 54.84.147.79:37490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/CCCM/vol3/ch2/B.1-Afghanistan-2018-Protracted-Conflict.pdf"] [unique_id "amtozOQqi0kHrPpG3JSHfQAAAB4"]
[Thu Jul 30 16:07:56.632004 2026] [security2:error] [pid 3810752:tid 3810752] [client 43.166.239.145:50834] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amtozLAKrG6Lfv4Uz1DcVQAAAB0"]
[Thu Jul 30 16:07:57.387936 2026] [ssl:error] [pid 3807580:tid 3807580] (EAI 2)Name or service not known: [client 144.76.19.72:27234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:57.387971 2026] [ssl:error] [pid 3807580:tid 3807580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:57.441108 2026] [ssl:error] [pid 3806280:tid 3806280] (EAI 2)Name or service not known: [client 144.76.19.72:27242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:07:57.441141 2026] [ssl:error] [pid 3806280:tid 3806280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:07:57.473810 2026] [security2:error] [pid 3783285:tid 3783285] [client 170.106.15.3:35494] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.co.uk"] [uri "/"] [unique_id "amtozTZpedruEIrGY8an4QAAAEY"]
[Thu Jul 30 16:07:57.683906 2026] [security2:error] [pid 3807580:tid 3807580] [client 43.155.26.193:38836] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.leaccess.co.uk"] [uri "/"] [unique_id "amtozVs0_U1tYKc0Y_cy9gAAABQ"]
[Thu Jul 30 16:07:58.039365 2026] [security2:error] [pid 3812288:tid 3812288] [client 101.32.52.164:46018] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.all4s.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtozsl-jXa5Kzff1r9efQAAAD0"], referer: http://www.all4s.co.uk
[Thu Jul 30 16:07:58.397150 2026] [authz_core:error] [pid 3812289:tid 3812289] [client 66.249.66.33:35676] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:07:58.400088 2026] [authz_core:error] [pid 3812289:tid 3812289] [client 66.249.66.33:35676] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:07:59.556536 2026] [access_compat:error] [pid 3783285:tid 3783285] [client 115.96.93.224:64834] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:00.163629 2026] [ssl:error] [pid 3812288:tid 3812288] (70014)End of file found: [client 216.73.216.199:46617] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:00.497636 2026] [ssl:error] [pid 3807661:tid 3807661] (EAI 2)Name or service not known: [client 144.76.19.72:25268] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:00.497685 2026] [ssl:error] [pid 3807661:tid 3807661] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:00.552835 2026] [ssl:error] [pid 3808852:tid 3808852] (EAI 2)Name or service not known: [client 144.76.19.72:25284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:00.552878 2026] [ssl:error] [pid 3808852:tid 3808852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:00.567549 2026] [ssl:error] [pid 3803380:tid 3803380] (70014)End of file found: [client 216.73.216.199:39447] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:00.620975 2026] [security2:error] [pid 3785296:tid 3785296] [client 43.166.239.145:42416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.retrodisco.co.uk"] [uri "/"] [unique_id "amto0IpXjGxiuuoHwvjSuAAAAA8"], referer: http://www.retrodisco.co.uk
[Thu Jul 30 16:08:02.675935 2026] [ssl:error] [pid 3807661:tid 3807661] (70014)End of file found: [client 216.73.216.199:45875] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:03.530300 2026] [security2:error] [pid 3802346:tid 3802346] [client 49.51.166.228:55084] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.parallel-coordinates.co.uk"] [uri "/"] [unique_id "amto06yDmOMb-E8R5NR5hQAAAAI"]
[Thu Jul 30 16:08:03.605552 2026] [ssl:error] [pid 3812056:tid 3812056] (EAI 2)Name or service not known: [client 144.76.19.72:25286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:03.605600 2026] [ssl:error] [pid 3812056:tid 3812056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:03.661747 2026] [ssl:error] [pid 3802792:tid 3802792] (EAI 2)Name or service not known: [client 144.76.19.72:25294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:03.661778 2026] [ssl:error] [pid 3802792:tid 3802792] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:03.679260 2026] [lsapi:warn] [pid 3810756:tid 3810756] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:08:04.069405 2026] [security2:error] [pid 3810805:tid 3810805] [client 43.165.186.188:39152] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.dbstart.co.uk"] [uri "/"] [unique_id "amto1L03-PUQHbWXFFpB9wAAADE"]
[Thu Jul 30 16:08:04.072493 2026] [authz_core:error] [pid 3810805:tid 3810805] [client 43.165.186.188:39152] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 16:08:04.078435 2026] [authz_core:error] [pid 3810805:tid 3810805] [client 43.165.186.188:39152] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 16:08:04.311485 2026] [security2:error] [pid 3810754:tid 3810754] [client 43.165.186.188:39536] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.yorkguitarworkshop.co.uk"] [uri "/"] [unique_id "amto1B-9C-qOklv621dQGwAAACQ"]
[Thu Jul 30 16:08:05.022307 2026] [security2:error] [pid 3807581:tid 3807581] [client 43.166.239.145:58510] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.secretbluestone.co.uk"] [uri "/"] [unique_id "amto1co0XON21QyIP3tHcQAAABk"]
[Thu Jul 30 16:08:05.337298 2026] [security2:error] [pid 3802792:tid 3802792] [client 43.135.182.95:56700] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amto1ZdDCPKKsp99FrDIHgAAABE"]
[Thu Jul 30 16:08:05.642139 2026] [access_compat:error] [pid 3812056:tid 3812056] [client 115.96.93.224:65156] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:06.292835 2026] [ssl:error] [pid 3810756:tid 3810756] (70014)End of file found: [client 216.73.216.199:34685] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:06.593263 2026] [ssl:error] [pid 3808974:tid 3808974] (70014)End of file found: [client 216.73.216.199:44072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:06.735975 2026] [ssl:error] [pid 3810708:tid 3810708] (EAI 2)Name or service not known: [client 144.76.19.72:25302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:06.736035 2026] [ssl:error] [pid 3810708:tid 3810708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:06.793781 2026] [ssl:error] [pid 3810810:tid 3810810] (EAI 2)Name or service not known: [client 144.76.19.72:25316] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:06.793825 2026] [ssl:error] [pid 3810810:tid 3810810] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:07.754925 2026] [security2:error] [pid 3812287:tid 3812287] [client 43.135.182.95:60614] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hazardous-materials.co.uk"] [uri "/"] [unique_id "amto10VI98uBZeUWbwm4MgAAADw"], referer: http://www.hazardous-materials.co.uk
[Thu Jul 30 16:08:07.983689 2026] [ssl:error] [pid 3810810:tid 3810810] (70014)End of file found: [client 216.73.216.199:25381] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:08.201471 2026] [security2:error] [pid 3810643:tid 3810643] [client 185.191.171.7:37572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6894.0/prev_next,next.html"] [unique_id "amto2MDhuc7Gu8wJRPJFgQAAAAs"]
[Thu Jul 30 16:08:09.462149 2026] [security2:error] [pid 3812287:tid 3812287] [client 43.165.7.74:37538] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-pryors.co.uk"] [uri "/"] [unique_id "amto2UVI98uBZeUWbwm4MwAAADw"]
[Thu Jul 30 16:08:09.577606 2026] [security2:error] [pid 3810643:tid 3810643] [client 43.160.219.206:34780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.inrc.org.uk"] [uri "/"] [unique_id "amto2cDhuc7Gu8wJRPJFggAAAAs"]
[Thu Jul 30 16:08:09.904040 2026] [ssl:error] [pid 3812204:tid 3812204] (EAI 2)Name or service not known: [client 144.76.19.72:26140] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:09.904121 2026] [ssl:error] [pid 3812204:tid 3812204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:09.958410 2026] [ssl:error] [pid 3810752:tid 3810752] (EAI 2)Name or service not known: [client 144.76.19.72:26144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:09.958440 2026] [ssl:error] [pid 3810752:tid 3810752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:10.155574 2026] [access_compat:error] [pid 3809542:tid 3809542] [client 115.96.93.224:65369] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:10.333638 2026] [security2:error] [pid 3811392:tid 3811392] [client 43.134.23.177:32922] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.fast-hosting.co.uk"] [uri "/"] [unique_id "amto2sWPizWXRSssZ7Va_AAAACA"]
[Thu Jul 30 16:08:11.716749 2026] [ssl:error] [pid 3800476:tid 3800476] (70014)End of file found: [client 216.73.216.199:28036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:12.312684 2026] [ssl:error] [pid 3811392:tid 3811392] (70014)End of file found: [client 216.73.216.199:22095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:12.961995 2026] [security2:error] [pid 3812056:tid 3812056] [client 43.135.172.89:52706] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.localhero.org.uk"] [uri "/"] [unique_id "amto3LkNc6zQ80XKjWJGEQAAAC0"]
[Thu Jul 30 16:08:13.129387 2026] [ssl:error] [pid 3810809:tid 3810809] (EAI 2)Name or service not known: [client 144.76.19.72:26158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:13.129419 2026] [ssl:error] [pid 3810809:tid 3810809] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:13.190165 2026] [ssl:error] [pid 3810643:tid 3810643] (EAI 2)Name or service not known: [client 144.76.19.72:26162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:13.190206 2026] [ssl:error] [pid 3810643:tid 3810643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:13.420547 2026] [ssl:error] [pid 3812288:tid 3812288] (70014)End of file found: [client 216.73.216.199:47926] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:14.771637 2026] [lsapi:warn] [pid 3785296:tid 3785296] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:08:16.245706 2026] [ssl:error] [pid 3803380:tid 3803380] (EAI 2)Name or service not known: [client 144.76.19.72:26178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:16.245735 2026] [ssl:error] [pid 3803380:tid 3803380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:16.301925 2026] [ssl:error] [pid 3812057:tid 3812057] (EAI 2)Name or service not known: [client 144.76.19.72:26190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:16.301958 2026] [ssl:error] [pid 3812057:tid 3812057] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:16.550432 2026] [access_compat:error] [pid 3810810:tid 3810810] [client 104.22.17.71:11560] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 16:08:17.129238 2026] [ssl:error] [pid 3802791:tid 3802791] (70014)End of file found: [client 216.73.216.199:25498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:17.614238 2026] [security2:error] [pid 3803353:tid 3803353] [client 85.208.96.204:61794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5921.0/prev_next,prev.html"] [unique_id "amto4VBml_c8fdH4lrNXRAAAAA0"]
[Thu Jul 30 16:08:17.678155 2026] [security2:error] [pid 3812056:tid 3812056] [client 43.164.0.96:46406] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/"] [unique_id "amto4bkNc6zQ80XKjWJGEwAAAC0"]
[Thu Jul 30 16:08:19.238031 2026] [ssl:error] [pid 3806280:tid 3806280] (70014)End of file found: [client 216.73.216.199:5255] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:19.356978 2026] [ssl:error] [pid 3800476:tid 3800476] (EAI 2)Name or service not known: [client 144.76.19.72:26202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:19.357009 2026] [ssl:error] [pid 3800476:tid 3800476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:19.411420 2026] [ssl:error] [pid 3806566:tid 3806566] (EAI 2)Name or service not known: [client 144.76.19.72:26216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:19.411455 2026] [ssl:error] [pid 3806566:tid 3806566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:19.547018 2026] [ssl:error] [pid 3806458:tid 3806458] (70014)End of file found: [client 216.73.216.199:21895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:20.488599 2026] [security2:error] [pid 3810756:tid 3810756] [client 43.164.0.96:49002] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theislipgarage.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amto5O--jdYRRn2NjqSTgAAAACc"], referer: http://www.theislipgarage.co.uk
[Thu Jul 30 16:08:20.677449 2026] [access_compat:error] [pid 3807662:tid 3807662] [client 115.96.93.224:49519] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:21.041838 2026] [security2:error] [pid 3800476:tid 3800476] [client 47.254.47.156:49264] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amto5YKcVrwOJrJvXZYInQAAAAc"]
[Thu Jul 30 16:08:21.184656 2026] [security2:error] [pid 3811392:tid 3811392] [client 43.167.239.66:40736] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amto5cWPizWXRSssZ7VbAAAAACA"], referer: http://www.banskoexpresstransfers.co.uk
[Thu Jul 30 16:08:22.465523 2026] [ssl:error] [pid 3810643:tid 3810643] (EAI 2)Name or service not known: [client 144.76.19.72:55192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:22.465551 2026] [ssl:error] [pid 3810643:tid 3810643] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:22.518509 2026] [ssl:error] [pid 3791485:tid 3791485] (EAI 2)Name or service not known: [client 144.76.19.72:55206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:22.518540 2026] [ssl:error] [pid 3791485:tid 3791485] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:22.582227 2026] [ssl:error] [pid 3800115:tid 3800115] (70014)End of file found: [client 216.73.216.199:8449] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:22.794613 2026] [security2:error] [pid 3783240:tid 3783240] [client 47.254.47.156:45840] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.saturnsports.co.uk"] [uri "/"] [unique_id "amto5nILJ35NPsFT22p99gAAADs"], referer: http://www.saturnsports.co.uk
[Thu Jul 30 16:08:22.980625 2026] [security2:error] [pid 3809542:tid 3809542] [client 43.167.239.66:56220] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amto5lGVvvoeo0jDDqBEHwAAAAg"], referer: http://www.banskoexpress.com
[Thu Jul 30 16:08:23.800356 2026] [security2:error] [pid 3802346:tid 3802346] [client 43.164.3.23:35550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanhill.co.uk"] [uri "/"] [unique_id "amto56yDmOMb-E8R5NR5jgAAAAI"]
[Thu Jul 30 16:08:24.524445 2026] [ssl:error] [pid 3791485:tid 3791485] (70014)End of file found: [client 216.73.216.199:11610] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:24.792751 2026] [core:error] [pid 3791554:tid 3791554] (13)Permission denied: [client 216.73.216.199:64909] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/UNIX/cpu_slabs
[Thu Jul 30 16:08:25.338486 2026] [lsapi:warn] [pid 3809542:tid 3809542] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:08:25.572736 2026] [ssl:error] [pid 3803352:tid 3803352] (EAI 2)Name or service not known: [client 144.76.19.72:55222] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:25.572783 2026] [ssl:error] [pid 3803352:tid 3803352] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:25.632498 2026] [ssl:error] [pid 3800476:tid 3800476] (EAI 2)Name or service not known: [client 144.76.19.72:55226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:25.632530 2026] [ssl:error] [pid 3800476:tid 3800476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:25.699559 2026] [ssl:error] [pid 3806458:tid 3806458] (70014)End of file found: [client 216.73.216.199:32770] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:26.518050 2026] [security2:error] [pid 3805510:tid 3805510] [client 105.74.67.12:35256] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amto6qfz92rYUtXcKms7fQAAAAU"]
[Thu Jul 30 16:08:26.518117 2026] [security2:error] [pid 3805510:tid 3805510] [client 105.74.67.12:35256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amto6qfz92rYUtXcKms7fQAAAAU"]
[Thu Jul 30 16:08:26.518374 2026] [security2:error] [pid 3805510:tid 3805510] [client 105.74.67.12:35256] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amto6qfz92rYUtXcKms7fQAAAAU"]
[Thu Jul 30 16:08:26.925401 2026] [access_compat:error] [pid 3806019:tid 3806019] [client 115.96.93.224:49841] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:27.017062 2026] [security2:error] [pid 3808974:tid 3808974] [client 43.130.139.136:57888] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amto65Il2Sq-0UoAwPk9bgAAACU"]
[Thu Jul 30 16:08:27.165774 2026] [ssl:error] [pid 3791241:tid 3791241] (70014)End of file found: [client 216.73.216.199:57450] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:27.467578 2026] [ssl:error] [pid 3813475:tid 3813475] (70014)End of file found: [client 216.73.216.199:1360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:28.361839 2026] [ssl:error] [pid 3807581:tid 3807581] (70014)End of file found: [client 216.73.216.199:25971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:28.554535 2026] [security2:error] [pid 3813557:tid 3813557] [client 217.131.9.18:29449] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amto7FXFJkS5sJW_SvMMowAAABA"]
[Thu Jul 30 16:08:28.554592 2026] [security2:error] [pid 3813557:tid 3813557] [client 217.131.9.18:29449] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,59.0.html"] [unique_id "amto7FXFJkS5sJW_SvMMowAAABA"]
[Thu Jul 30 16:08:28.554881 2026] [security2:error] [pid 3813557:tid 3813557] [client 217.131.9.18:29449] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amto7FXFJkS5sJW_SvMMowAAABA"]
[Thu Jul 30 16:08:29.132947 2026] [ssl:error] [pid 3810752:tid 3810752] (EAI 2)Name or service not known: [client 144.76.19.72:55238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:29.132972 2026] [ssl:error] [pid 3810752:tid 3810752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:29.367604 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:55250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:29.367652 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:29.372994 2026] [core:error] [pid 3810752:tid 3810752] [client 18.232.121.80:18878] AH10244: invalid URI path (/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts)
[Thu Jul 30 16:08:29.567296 2026] [security2:error] [pid 3812289:tid 3812289] [client 43.130.139.136:40778] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unclaimedassets.co.uk"] [uri "/"] [unique_id "amto7WyedwZGBSA2neA8GQAAAD4"], referer: http://www.unclaimedassets.co.uk
[Thu Jul 30 16:08:29.627137 2026] [security2:error] [pid 3791485:tid 3791485] [client 43.130.139.136:60606] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amto7RdiGKNw_zw6DlyjhgAAACs"]
[Thu Jul 30 16:08:29.717014 2026] [core:error] [pid 3812015:tid 3812015] [client 18.232.121.80:18886] AH10244: invalid URI path (/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh)
[Thu Jul 30 16:08:29.883598 2026] [security2:error] [pid 3810752:tid 3810752] [client 43.161.217.205:55416] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.daggerlaneenterprises.co.uk"] [uri "/"] [unique_id "amto7bAKrG6Lfv4Uz1DcXwAAAB0"]
[Thu Jul 30 16:08:30.832221 2026] [lsapi:warn] [pid 3810803:tid 3810803] [client 145.14.10.39:55354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:08:30.832266 2026] [lsapi:warn] [pid 3810803:tid 3810803] [client 145.14.10.39:55354] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:08:31.361806 2026] [access_compat:error] [pid 3813597:tid 3813597] [client 115.96.93.224:50051] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:31.592364 2026] [security2:error] [pid 3813598:tid 3813598] [client 43.130.139.136:44300] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "unclaimedassets.co.uk"] [uri "/"] [unique_id "amto7xONdWpWqLDgsQg2kQAAADY"], referer: https://www.unclaimedassets.co.uk/
[Thu Jul 30 16:08:31.743792 2026] [security2:error] [pid 3812289:tid 3812289] [client 43.130.139.136:44350] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bes-systems.co.uk"] [uri "/"] [unique_id "amto72yedwZGBSA2neA8GgAAAD4"], referer: http://www.bes-systems.co.uk
[Thu Jul 30 16:08:32.425958 2026] [ssl:error] [pid 3813598:tid 3813598] (EAI 2)Name or service not known: [client 144.76.19.72:32746] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:32.425993 2026] [ssl:error] [pid 3813598:tid 3813598] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:32.481559 2026] [ssl:error] [pid 3810752:tid 3810752] (EAI 2)Name or service not known: [client 144.76.19.72:32752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:32.481586 2026] [ssl:error] [pid 3810752:tid 3810752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:32.733196 2026] [security2:error] [pid 3803353:tid 3803353] [client 20.63.98.115:35945] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "ns-earth.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amto8FBml_c8fdH4lrNXXAAAAA0"]
[Thu Jul 30 16:08:32.733391 2026] [security2:error] [pid 3803353:tid 3803353] [client 20.63.98.115:35945] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ns-earth.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amto8FBml_c8fdH4lrNXXAAAAA0"]
[Thu Jul 30 16:08:32.733617 2026] [security2:error] [pid 3803353:tid 3803353] [client 20.63.98.115:35945] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "ns-earth.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amto8FBml_c8fdH4lrNXXAAAAA0"]
[Thu Jul 30 16:08:33.657184 2026] [security2:error] [pid 3813521:tid 3813521] [client 43.166.132.142:57878] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.co.uk"] [uri "/"] [unique_id "amto8T0JwE3avYAhCGwdlgAAAAY"]
[Thu Jul 30 16:08:33.871024 2026] [security2:error] [pid 3791554:tid 3791554] [client 43.153.87.54:51640] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amto8aMIf50FLZagH3JERQAAAC8"]
[Thu Jul 30 16:08:34.054722 2026] [security2:error] [pid 3793125:tid 3793125] [client 198.11.177.243:49100] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amto8tw4wsSAgpyOhytorgAAADc"]
[Thu Jul 30 16:08:34.328185 2026] [security2:error] [pid 3808319:tid 3808319] [client 18.232.121.80:20694] ModSecurity: Warning. Matched phrase "etc/hosts" at ARGS:url. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/hosts found within ARGS:url: file:/etc/hosts"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/api/geojson"] [unique_id "amto8iyNps9vn9LaiYQzAgAAAAA"]
[Thu Jul 30 16:08:34.328575 2026] [security2:error] [pid 3808319:tid 3808319] [client 18.232.121.80:20694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/api/geojson"] [unique_id "amto8iyNps9vn9LaiYQzAgAAAAA"]
[Thu Jul 30 16:08:34.328783 2026] [security2:error] [pid 3808319:tid 3808319] [client 18.232.121.80:20694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): OS File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amto8iyNps9vn9LaiYQzAgAAAAA"]
[Thu Jul 30 16:08:35.304236 2026] [ssl:error] [pid 3813557:tid 3813557] (70014)End of file found: [client 216.73.216.199:57005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:35.483811 2026] [security2:error] [pid 3803379:tid 3803379] [client 18.232.121.80:20708] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amto82M46U2S2uN3lP9QOgAAABg"]
[Thu Jul 30 16:08:35.484085 2026] [security2:error] [pid 3803379:tid 3803379] [client 18.232.121.80:20708] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.env"] [unique_id "amto82M46U2S2uN3lP9QOgAAABg"]
[Thu Jul 30 16:08:35.484389 2026] [security2:error] [pid 3803379:tid 3803379] [client 18.232.121.80:20708] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amto82M46U2S2uN3lP9QOgAAABg"]
[Thu Jul 30 16:08:35.523261 2026] [security2:error] [pid 3805510:tid 3805510] [client 43.166.132.142:59556] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jasperandtroy.com"] [uri "/"] [unique_id "amto86fz92rYUtXcKms7gQAAAAU"], referer: http://www.jasperandtroy.co.uk
[Thu Jul 30 16:08:35.534962 2026] [ssl:error] [pid 3800476:tid 3800476] (EAI 2)Name or service not known: [client 144.76.19.72:32762] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:35.534996 2026] [ssl:error] [pid 3800476:tid 3800476] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:35.591255 2026] [ssl:error] [pid 3812289:tid 3812289] (EAI 2)Name or service not known: [client 144.76.19.72:32768] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:35.591287 2026] [ssl:error] [pid 3812289:tid 3812289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:35.601445 2026] [ssl:error] [pid 3810810:tid 3810810] (70014)End of file found: [client 216.73.216.199:40724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:36.063642 2026] [security2:error] [pid 3793125:tid 3793125] [client 18.232.121.80:20722] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amto9Nw4wsSAgpyOhytosAAAADc"]
[Thu Jul 30 16:08:36.063833 2026] [security2:error] [pid 3793125:tid 3793125] [client 18.232.121.80:20722] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "45.158.164.139"] [uri "/.git/config"] [unique_id "amto9Nw4wsSAgpyOhytosAAAADc"]
[Thu Jul 30 16:08:36.064037 2026] [security2:error] [pid 3793125:tid 3793125] [client 18.232.121.80:20722] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "45.158.164.139"] [uri "/403.shtml"] [unique_id "amto9Nw4wsSAgpyOhytosAAAADc"]
[Thu Jul 30 16:08:36.127497 2026] [security2:error] [pid 3783285:tid 3783285] [client 43.153.87.54:36432] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amto9DZpedruEIrGY8an7AAAAEY"], referer: http://www.staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 16:08:36.207266 2026] [ssl:error] [pid 3808319:tid 3808319] (70014)End of file found: [client 216.73.216.199:5198] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:36.433709 2026] [security2:error] [pid 3813595:tid 3813595] [client 198.11.177.243:55574] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amto9N75TLRM_nC46mNFTQAAACk"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 16:08:36.500217 2026] [lsapi:warn] [pid 3812015:tid 3812015] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:08:37.433694 2026] [access_compat:error] [pid 3793125:tid 3793125] [client 115.96.93.224:50374] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:38.049699 2026] [security2:error] [pid 3813558:tid 3813558] [client 170.106.35.153:38812] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/"] [unique_id "amto9pG1AkOx2CIXFsPDsgAAABE"]
[Thu Jul 30 16:08:38.687163 2026] [security2:error] [pid 3813597:tid 3813597] [client 43.153.87.54:38158] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amto9p4hHac1DCFzCI7mjwAAADU"], referer: https://www.staffordshirephoenixrifleandpistolclub.co.uk/
[Thu Jul 30 16:08:38.691156 2026] [ssl:error] [pid 3800115:tid 3800115] (EAI 2)Name or service not known: [client 144.76.19.72:32782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:38.691194 2026] [ssl:error] [pid 3800115:tid 3800115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:38.742416 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:32788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:38.742458 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:40.772319 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:6577] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:40.807928 2026] [security2:error] [pid 3812287:tid 3812287] [client 43.159.152.4:50776] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.michael-boffey.co.uk"] [uri "/"] [unique_id "amto-EVI98uBZeUWbwm4XAAAADw"]
[Thu Jul 30 16:08:41.721940 2026] [security2:error] [pid 3783285:tid 3783285] [client 49.51.183.84:43392] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.p2studio.co.uk"] [uri "/"] [unique_id "amto-TZpedruEIrGY8an7wAAAEY"]
[Thu Jul 30 16:08:41.834342 2026] [ssl:error] [pid 3806337:tid 3806337] (EAI 2)Name or service not known: [client 144.76.19.72:29138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:41.834375 2026] [ssl:error] [pid 3806337:tid 3806337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:41.878023 2026] [access_compat:error] [pid 3813557:tid 3813557] [client 115.96.93.224:50586] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:41.885492 2026] [ssl:error] [pid 3813521:tid 3813521] (EAI 2)Name or service not known: [client 144.76.19.72:29152] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:41.885522 2026] [ssl:error] [pid 3813521:tid 3813521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:42.143431 2026] [ssl:error] [pid 3813597:tid 3813597] (70014)End of file found: [client 216.73.216.199:54821] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:42.864090 2026] [ssl:error] [pid 3810752:tid 3810752] (70014)End of file found: [client 216.73.216.199:20855] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:43.396934 2026] [security2:error] [pid 3805510:tid 3805510] [client 43.157.62.101:56392] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.innerspacer.co.uk"] [uri "/"] [unique_id "amto-6fz92rYUtXcKms7hgAAAAU"]
[Thu Jul 30 16:08:43.479909 2026] [security2:error] [pid 3803353:tid 3803353] [client 43.164.0.96:50000] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amto-1Bml_c8fdH4lrNXagAAAA0"], referer: http://www.rock-ola.co.uk
[Thu Jul 30 16:08:44.544275 2026] [security2:error] [pid 3805510:tid 3805510] [client 49.51.183.220:33596] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amto_Kfz92rYUtXcKms7hwAAAAU"]
[Thu Jul 30 16:08:44.691186 2026] [access_compat:error] [pid 3803353:tid 3803353] [client 45.158.164.139:39030] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:08:44.710044 2026] [security2:error] [pid 3810805:tid 3810805] [client 43.159.135.203:50282] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.theovertones.co.uk"] [uri "/"] [unique_id "amto_L03-PUQHbWXFFpCAgAAADE"]
[Thu Jul 30 16:08:44.736426 2026] [security2:error] [pid 3793125:tid 3793125] [client 43.167.157.80:37454] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sarahwiseman.co.uk"] [uri "/"] [unique_id "amto_Nw4wsSAgpyOhytoswAAADc"]
[Thu Jul 30 16:08:44.940505 2026] [ssl:error] [pid 3812056:tid 3812056] (EAI 2)Name or service not known: [client 144.76.19.72:29158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:44.940537 2026] [ssl:error] [pid 3812056:tid 3812056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:44.993961 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:29172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:44.993997 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:45.649964 2026] [security2:error] [pid 3797556:tid 3797556] [client 74.7.227.177:53224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "spampmusic.co.uk"] [uri "/"] [unique_id "amto_UQtVAMdAcyS521hgAAAABs"]
[Thu Jul 30 16:08:45.781221 2026] [security2:error] [pid 3812289:tid 3812289] [client 18.215.112.101:57190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.peterboroughdiocesanregistry.co.uk"] [uri "/chancels.html"] [unique_id "amto_WyedwZGBSA2neA8HwAAAD4"]
[Thu Jul 30 16:08:46.021802 2026] [security2:error] [pid 3813559:tid 3813559] [client 43.164.0.96:33160] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wurlitzer.co.uk"] [uri "/"] [unique_id "amto_lldHQpQBaK8dYgNgwAAABI"], referer: http://www.wurlitzer.co.uk
[Thu Jul 30 16:08:46.373520 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:56942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:47.683059 2026] [lsapi:warn] [pid 3793125:tid 3793125] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:08:48.102450 2026] [ssl:error] [pid 3813592:tid 3813592] (EAI 2)Name or service not known: [client 144.76.19.72:29180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:48.102482 2026] [ssl:error] [pid 3813592:tid 3813592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:48.157527 2026] [ssl:error] [pid 3812289:tid 3812289] (EAI 2)Name or service not known: [client 144.76.19.72:29184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:48.157553 2026] [ssl:error] [pid 3812289:tid 3812289] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:48.393967 2026] [security2:error] [pid 3813594:tid 3813594] [client 43.167.157.80:40464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amtpAP_nwvbZdVIfHiysfQAAACc"], referer: http://www.sarahwiseman.co.uk
[Thu Jul 30 16:08:48.586874 2026] [ssl:error] [pid 3810643:tid 3810643] (70014)End of file found: [client 216.73.216.199:61831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:48.724969 2026] [security2:error] [pid 3812289:tid 3812289] [client 170.106.107.87:48780] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highclerethoroughbredracing.ltd.uk"] [uri "/"] [unique_id "amtpAGyedwZGBSA2neA8IgAAAD4"]
[Thu Jul 30 16:08:49.798190 2026] [ssl:error] [pid 3810810:tid 3810810] (70014)End of file found: [client 216.73.216.199:22793] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:50.288580 2026] [security2:error] [pid 3807662:tid 3807662] [client 185.191.171.4:47740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/where-to-buy-pistachio-trees"] [unique_id "amtpAnQVtkaHqQD78BIkMQAAAC4"]
[Thu Jul 30 16:08:51.016433 2026] [security2:error] [pid 3813521:tid 3813521] [client 43.135.135.57:59806] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/"] [unique_id "amtpAz0JwE3avYAhCGwdmQAAAAY"]
[Thu Jul 30 16:08:51.213478 2026] [ssl:error] [pid 3810752:tid 3810752] (EAI 2)Name or service not known: [client 144.76.19.72:39884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:51.213509 2026] [ssl:error] [pid 3810752:tid 3810752] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:51.269381 2026] [ssl:error] [pid 3802346:tid 3802346] (EAI 2)Name or service not known: [client 144.76.19.72:39900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:51.269411 2026] [ssl:error] [pid 3802346:tid 3802346] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:51.827506 2026] [ssl:error] [pid 3807662:tid 3807662] (70014)End of file found: [client 216.73.216.199:24897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:52.364076 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 115.96.93.224:51123] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:52.706434 2026] [security2:error] [pid 3802346:tid 3802346] [client 43.135.135.57:33244] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.clarepillinger.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtpBKyDmOMb-E8R5NR5kgAAAAI"], referer: http://www.clarepillinger.co.uk
[Thu Jul 30 16:08:52.827575 2026] [access_compat:error] [pid 3812289:tid 3812289] [client 45.158.164.139:54746] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:08:53.801930 2026] [access_compat:error] [pid 3812251:tid 3812251] [client 104.22.17.70:9407] AH01797: client denied by server configuration: /home/pbyawsga/public_html/robots.txt
[Thu Jul 30 16:08:54.326898 2026] [ssl:error] [pid 3813521:tid 3813521] (EAI 2)Name or service not known: [client 144.76.19.72:39910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:54.326936 2026] [ssl:error] [pid 3813521:tid 3813521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:54.382835 2026] [ssl:error] [pid 3810708:tid 3810708] (EAI 2)Name or service not known: [client 144.76.19.72:39914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:54.382877 2026] [ssl:error] [pid 3810708:tid 3810708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:54.653862 2026] [ssl:error] [pid 3813591:tid 3813591] (70014)End of file found: [client 216.73.216.199:51471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:55.171433 2026] [ssl:error] [pid 3810803:tid 3810803] (70014)End of file found: [client 216.73.216.199:39779] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:57.129080 2026] [security2:error] [pid 3813597:tid 3813597] [client 170.106.35.153:56450] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.wildduckdesigns.co.uk"] [uri "/"] [unique_id "amtpCZ4hHac1DCFzCI7mkwAAADU"]
[Thu Jul 30 16:08:57.437232 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:39928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:57.437261 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:57.488703 2026] [ssl:error] [pid 3806337:tid 3806337] (EAI 2)Name or service not known: [client 144.76.19.72:39934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:08:57.488725 2026] [ssl:error] [pid 3806337:tid 3806337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:08:57.669531 2026] [security2:error] [pid 3810643:tid 3810643] [client 43.130.32.245:33502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtpCcDhuc7Gu8wJRPJF0QAAAAs"]
[Thu Jul 30 16:08:58.348621 2026] [lsapi:warn] [pid 3809084:tid 3809084] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:08:58.464913 2026] [ssl:error] [pid 3812056:tid 3812056] (70014)End of file found: [client 216.73.216.199:1379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:08:58.836246 2026] [authz_core:error] [pid 3813597:tid 3813597] [client 66.249.66.33:43569] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:08:58.838907 2026] [authz_core:error] [pid 3813597:tid 3813597] [client 66.249.66.33:43569] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:08:59.053905 2026] [access_compat:error] [pid 3813558:tid 3813558] [client 115.96.93.224:51477] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:08:59.149202 2026] [security2:error] [pid 3797556:tid 3797556] [client 47.128.18.209:46860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtpC0QtVAMdAcyS521hhQAAABs"]
[Thu Jul 30 16:08:59.716865 2026] [security2:error] [pid 3813521:tid 3813521] [client 114.119.135.136:42971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14,18,17,104/request_format~html"] [unique_id "amtpCz0JwE3avYAhCGwdnAAAAAY"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~14,18,17/request_format~html
[Thu Jul 30 16:08:59.984508 2026] [ssl:error] [pid 3797556:tid 3797556] (70014)End of file found: [client 216.73.216.199:18096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:00.015015 2026] [security2:error] [pid 3809084:tid 3809084] [client 43.130.32.245:36004] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.brodie-engineering.co.uk"] [uri "/"] [unique_id "amtpDCYKwRGImuP6UkNzOgAAADI"], referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 16:09:00.122279 2026] [lsapi:warn] [pid 3809084:tid 3809084] [client 43.130.32.245:36004] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 16:09:00.122323 2026] [lsapi:warn] [pid 3809084:tid 3809084] [client 43.130.32.245:36004] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://www.brodie-engineering.co.uk
[Thu Jul 30 16:09:00.550572 2026] [ssl:error] [pid 3814755:tid 3814755] (EAI 2)Name or service not known: [client 144.76.19.72:34198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:00.550616 2026] [ssl:error] [pid 3814755:tid 3814755] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:00.583610 2026] [ssl:error] [pid 3802346:tid 3802346] (70014)End of file found: [client 216.73.216.199:26741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:00.606872 2026] [ssl:error] [pid 3813521:tid 3813521] (EAI 2)Name or service not known: [client 144.76.19.72:34206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:00.606906 2026] [ssl:error] [pid 3813521:tid 3813521] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:00.850836 2026] [security2:error] [pid 3813591:tid 3813591] [client 114.119.135.136:42983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14,18,17,104/request_format~html"] [unique_id "amtpDFhULqQtOIbF5F6dagAAACI"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~14,18,17/request_format~html
[Thu Jul 30 16:09:01.201340 2026] [security2:error] [pid 3814755:tid 3814755] [client 43.152.72.244:42412] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.randomlearner.org.uk"] [uri "/"] [unique_id "amtpDWI4o04bcLEqPEIF8gAAAAA"]
[Thu Jul 30 16:09:03.168770 2026] [access_compat:error] [pid 3810803:tid 3810803] [client 115.96.93.224:51667] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:03.666583 2026] [ssl:error] [pid 3807659:tid 3807659] (EAI 2)Name or service not known: [client 144.76.19.72:34220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:03.666616 2026] [ssl:error] [pid 3807659:tid 3807659] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:03.719487 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:34232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:03.719514 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:03.926535 2026] [ssl:error] [pid 3806458:tid 3806458] (70014)End of file found: [client 216.73.216.199:65392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:05.478014 2026] [ssl:error] [pid 3800115:tid 3800115] (70014)End of file found: [client 216.73.216.199:18749] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:05.745775 2026] [security2:error] [pid 3797556:tid 3797556] [client 49.51.195.195:45880] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amtpEUQtVAMdAcyS521hhwAAABs"]
[Thu Jul 30 16:09:05.810047 2026] [security2:error] [pid 3812204:tid 3812204] [client 43.130.141.193:37986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtpET3SQf6Z8IScSoxoewAAADQ"]
[Thu Jul 30 16:09:06.066806 2026] [cgi:error] [pid 3791554:tid 3791554] [client 66.249.77.231:37955] AH02812: stderr from /home/nssun/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:09:06.484876 2026] [ssl:error] [pid 3805510:tid 3805510] (70014)End of file found: [client 216.73.216.199:15720] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:06.771790 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:34238] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:06.771830 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:06.827688 2026] [ssl:error] [pid 3815043:tid 3815043] (EAI 2)Name or service not known: [client 144.76.19.72:34246] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:06.827725 2026] [ssl:error] [pid 3815043:tid 3815043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:07.144093 2026] [security2:error] [pid 3810810:tid 3810810] [client 101.47.20.197:37785] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,125.0.html"] [unique_id "amtpE4SZWYddwtRzEmFN9gAAADg"]
[Thu Jul 30 16:09:07.144150 2026] [security2:error] [pid 3810810:tid 3810810] [client 101.47.20.197:37785] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,125.0.html"] [unique_id "amtpE4SZWYddwtRzEmFN9gAAADg"]
[Thu Jul 30 16:09:07.144405 2026] [security2:error] [pid 3810810:tid 3810810] [client 101.47.20.197:37785] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpE4SZWYddwtRzEmFN9gAAADg"]
[Thu Jul 30 16:09:07.560718 2026] [core:error] [pid 3803353:tid 3803353] [client 66.249.66.8:59124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:09:07.560743 2026] [core:error] [pid 3803353:tid 3803353] [client 66.249.66.8:59124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:09:08.235466 2026] [security2:error] [pid 3812251:tid 3812251] [client 49.51.195.195:50636] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.glottalstop.co.uk"] [uri "/"] [unique_id "amtpFMxDNmoBNtfXMkoXfgAAADk"], referer: http://www.glottalstop.co.uk
[Thu Jul 30 16:09:08.271953 2026] [security2:error] [pid 3810810:tid 3810810] [client 43.153.48.240:49612] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtpFISZWYddwtRzEmFN9wAAADg"]
[Thu Jul 30 16:09:08.578675 2026] [security2:error] [pid 3813558:tid 3813558] [client 43.155.129.131:58022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tompalmer.co.uk"] [uri "/"] [unique_id "amtpFJG1AkOx2CIXFsPDugAAABE"]
[Thu Jul 30 16:09:08.784374 2026] [security2:error] [pid 3793124:tid 3793124] [client 43.130.141.193:41558] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "apotheekcandidejacobs.be"] [uri "/"] [unique_id "amtpFL5koEf2kJSERTwAGQAAADM"], referer: http://www.apotheekcandidejacobs.be
[Thu Jul 30 16:09:09.119082 2026] [lsapi:warn] [pid 3806019:tid 3806019] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:09:09.801206 2026] [security2:error] [pid 3815163:tid 3815163] [client 85.208.96.202:43206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1978.0/prev_next,prev.html"] [unique_id "amtpFdGghwbw2nDmi7UGYAAAAAk"]
[Thu Jul 30 16:09:09.812292 2026] [ssl:error] [pid 3810810:tid 3810810] (70014)End of file found: [client 216.73.216.199:20360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:10.046189 2026] [ssl:error] [pid 3806335:tid 3806335] (EAI 2)Name or service not known: [client 144.76.19.72:35354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:10.046224 2026] [ssl:error] [pid 3806335:tid 3806335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:10.317956 2026] [security2:error] [pid 3812056:tid 3812056] [client 43.131.23.154:60168] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.render-farm.co.uk"] [uri "/"] [unique_id "amtpFrkNc6zQ80XKjWJGHgAAAC0"]
[Thu Jul 30 16:09:10.419131 2026] [ssl:error] [pid 3815203:tid 3815203] (EAI 2)Name or service not known: [client 144.76.19.72:35356] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:10.419179 2026] [ssl:error] [pid 3815203:tid 3815203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:11.015273 2026] [ssl:error] [pid 3812056:tid 3812056] (70014)End of file found: [client 216.73.216.199:42614] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:11.974919 2026] [security2:error] [pid 3805510:tid 3805510] [client 150.5.132.35:11795] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,125.0.html"] [unique_id "amtpF6fz92rYUtXcKms7ngAAAAU"]
[Thu Jul 30 16:09:11.974971 2026] [security2:error] [pid 3805510:tid 3805510] [client 150.5.132.35:11795] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,125.0.html"] [unique_id "amtpF6fz92rYUtXcKms7ngAAAAU"]
[Thu Jul 30 16:09:11.975216 2026] [security2:error] [pid 3805510:tid 3805510] [client 150.5.132.35:11795] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpF6fz92rYUtXcKms7ngAAAAU"]
[Thu Jul 30 16:09:11.979313 2026] [autoindex:error] [pid 3806337:tid 3806337] [client 207.191.168.147:43934] AH01276: Cannot serve directory /home/winterb/public_html/thesilkshed/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:09:12.444548 2026] [security2:error] [pid 3815254:tid 3815254] [client 43.153.96.233:55772] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amtpGMjHTTdARR4Vhup5HgAAAAw"]
[Thu Jul 30 16:09:12.521537 2026] [ssl:error] [pid 3791554:tid 3791554] (70014)End of file found: [client 216.73.216.199:46337] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:12.534288 2026] [security2:error] [pid 3813597:tid 3813597] [client 43.155.129.131:33226] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtpGJ4hHac1DCFzCI7mlwAAADU"], referer: http://www.tompalmer.co.uk
[Thu Jul 30 16:09:13.296164 2026] [security2:error] [pid 3810805:tid 3810805] [client 43.152.72.244:52272] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.baketastic.co.uk"] [uri "/"] [unique_id "amtpGb03-PUQHbWXFFpCCgAAADE"]
[Thu Jul 30 16:09:13.492155 2026] [ssl:error] [pid 3815255:tid 3815255] (EAI 2)Name or service not known: [client 144.76.19.72:35368] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:13.492194 2026] [ssl:error] [pid 3815255:tid 3815255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:13.546798 2026] [ssl:error] [pid 3813522:tid 3813522] (EAI 2)Name or service not known: [client 144.76.19.72:35382] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:13.546824 2026] [ssl:error] [pid 3813522:tid 3813522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:13.822758 2026] [access_compat:error] [pid 3803353:tid 3803353] [client 115.96.93.224:52195] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:15.229339 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:29420] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:15.422313 2026] [access_compat:error] [pid 3809084:tid 3809084] [client 104.22.17.85:12283] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 16:09:16.412810 2026] [security2:error] [pid 3812204:tid 3812204] [client 43.152.72.244:48448] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "baketastic.co.uk"] [uri "/"] [unique_id "amtpHD3SQf6Z8IScSoxofgAAADQ"], referer: http://www.baketastic.co.uk
[Thu Jul 30 16:09:16.544751 2026] [security2:error] [pid 3808974:tid 3808974] [client 43.166.244.251:45528] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.junglejacks.co.uk"] [uri "/"] [unique_id "amtpHJIl2Sq-0UoAwPk9eAAAACU"]
[Thu Jul 30 16:09:16.603349 2026] [ssl:error] [pid 3803380:tid 3803380] (EAI 2)Name or service not known: [client 144.76.19.72:35390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:16.603381 2026] [ssl:error] [pid 3803380:tid 3803380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:16.660916 2026] [ssl:error] [pid 3810708:tid 3810708] (EAI 2)Name or service not known: [client 144.76.19.72:35406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:16.660953 2026] [ssl:error] [pid 3810708:tid 3810708] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:16.737735 2026] [core:error] [pid 3810805:tid 3810805] (13)Permission denied: [client 216.73.216.199:12596] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dentry/shrink
[Thu Jul 30 16:09:17.545201 2026] [security2:error] [pid 3813591:tid 3813591] [client 150.5.132.35:28251] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,125.0.html"] [unique_id "amtpHVhULqQtOIbF5F6dbQAAACI"]
[Thu Jul 30 16:09:17.545251 2026] [security2:error] [pid 3813591:tid 3813591] [client 150.5.132.35:28251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,125.0.html"] [unique_id "amtpHVhULqQtOIbF5F6dbQAAACI"]
[Thu Jul 30 16:09:17.545507 2026] [security2:error] [pid 3813591:tid 3813591] [client 150.5.132.35:28251] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpHVhULqQtOIbF5F6dbQAAACI"]
[Thu Jul 30 16:09:17.549238 2026] [security2:error] [pid 3813557:tid 3813557] [client 43.153.96.233:60154] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.eu"] [uri "/"] [unique_id "amtpHVXFJkS5sJW_SvMMtQAAABA"]
[Thu Jul 30 16:09:17.815318 2026] [security2:error] [pid 3811392:tid 3811392] [client 43.153.96.233:60454] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.fr"] [uri "/"] [unique_id "amtpHcWPizWXRSssZ7VbRAAAACA"]
[Thu Jul 30 16:09:18.139052 2026] [ssl:error] [pid 3806458:tid 3806458] (70014)End of file found: [client 216.73.216.199:57579] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:18.811448 2026] [security2:error] [pid 3813596:tid 3813596] [client 101.32.52.164:46604] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spamp.co.uk"] [uri "/"] [unique_id "amtpHo_9nNoWSxSBGHLUDgAAADA"]
[Thu Jul 30 16:09:18.861543 2026] [ssl:error] [pid 3810805:tid 3810805] (70014)End of file found: [client 216.73.216.199:12596] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:19.338184 2026] [security2:error] [pid 3815203:tid 3815203] [client 43.131.23.154:40640] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.techsuccess.uk"] [uri "/"] [unique_id "amtpH1xgH4_amzZxDtw8RAAAAAo"]
[Thu Jul 30 16:09:19.382248 2026] [security2:error] [pid 3810708:tid 3810708] [client 49.51.72.76:54808] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtpH8SDIHnRHYAfqGtdKQAAABM"]
[Thu Jul 30 16:09:19.625203 2026] [lsapi:warn] [pid 3791554:tid 3791554] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:09:19.753587 2026] [ssl:error] [pid 3793124:tid 3793124] (EAI 2)Name or service not known: [client 144.76.19.72:33454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:19.753615 2026] [ssl:error] [pid 3793124:tid 3793124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:19.809521 2026] [ssl:error] [pid 3813557:tid 3813557] (EAI 2)Name or service not known: [client 144.76.19.72:33470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:19.809560 2026] [ssl:error] [pid 3813557:tid 3813557] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:20.174278 2026] [security2:error] [pid 3811392:tid 3811392] [client 43.153.96.233:58518] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtpIMWPizWXRSssZ7VbRQAAACA"], referer: http://www.orgent.eu
[Thu Jul 30 16:09:20.264992 2026] [security2:error] [pid 3807659:tid 3807659] [client 43.153.96.233:58530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtpIOQqi0kHrPpG3JSHlAAAAB4"], referer: http://www.orgent.fr
[Thu Jul 30 16:09:20.591272 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:14578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:21.031937 2026] [security2:error] [pid 3815043:tid 3815043] [client 101.32.52.164:48382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtpISNCU9dhiJN0FMmSEwAAAAc"], referer: http://www.spamp.co.uk
[Thu Jul 30 16:09:21.311149 2026] [security2:error] [pid 3815204:tid 3815204] [client 43.159.145.149:42704] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.markmitchellphotography.co.uk"] [uri "/"] [unique_id "amtpIfoR8CNiYnt1Jm4JRQAAAAs"]
[Thu Jul 30 16:09:21.419224 2026] [security2:error] [pid 3803353:tid 3803353] [client 49.51.72.76:56810] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtpIVBml_c8fdH4lrNXdgAAAA0"]
[Thu Jul 30 16:09:21.420828 2026] [authz_core:error] [pid 3803353:tid 3803353] [client 49.51.72.76:56810] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:09:21.422562 2026] [authz_core:error] [pid 3803353:tid 3803353] [client 49.51.72.76:56810] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:09:21.444144 2026] [security2:error] [pid 3797556:tid 3797556] [client 49.51.72.76:57114] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtpIUQtVAMdAcyS521higAAABs"]
[Thu Jul 30 16:09:22.905718 2026] [ssl:error] [pid 3815204:tid 3815204] (EAI 2)Name or service not known: [client 144.76.19.72:33486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:22.905767 2026] [ssl:error] [pid 3815204:tid 3815204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:22.960958 2026] [ssl:error] [pid 3809084:tid 3809084] (EAI 2)Name or service not known: [client 144.76.19.72:33488] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:22.960995 2026] [ssl:error] [pid 3809084:tid 3809084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:24.230692 2026] [access_compat:error] [pid 3815255:tid 3815255] [client 115.96.93.224:52723] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:24.769236 2026] [security2:error] [pid 3813522:tid 3813522] [client 49.51.72.76:38604] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "blow-hairstudio.co.uk"] [uri "/"] [unique_id "amtpJIuBlSgrPR9C5kh0LAAAAA8"], referer: http://www.blow-hairstudio.co.uk
[Thu Jul 30 16:09:24.834616 2026] [security2:error] [pid 3811392:tid 3811392] [client 101.32.52.164:44282] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtpJMWPizWXRSssZ7VbRgAAACA"], referer: http://spamp.com/
[Thu Jul 30 16:09:24.974590 2026] [security2:error] [pid 3812287:tid 3812287] [client 49.51.72.76:60270] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.orgent.be"] [uri "/"] [unique_id "amtpJEVI98uBZeUWbwm4iwAAADw"]
[Thu Jul 30 16:09:25.883814 2026] [security2:error] [pid 3810805:tid 3810805] [client 43.153.36.110:33384] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spurr.org.uk"] [uri "/"] [unique_id "amtpJb03-PUQHbWXFFpCEgAAADE"]
[Thu Jul 30 16:09:25.900656 2026] [security2:error] [pid 3812251:tid 3812251] [client 170.106.192.3:40872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amtpJcxDNmoBNtfXMkoXggAAADk"]
[Thu Jul 30 16:09:26.016572 2026] [ssl:error] [pid 3815204:tid 3815204] (EAI 2)Name or service not known: [client 144.76.19.72:33490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:26.016600 2026] [ssl:error] [pid 3815204:tid 3815204] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:26.071909 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:33492] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:26.071960 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:26.417888 2026] [ssl:error] [pid 3812015:tid 3812015] (70014)End of file found: [client 216.73.216.199:3514] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:27.275838 2026] [security2:error] [pid 3813522:tid 3813522] [client 49.51.72.76:40352] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "orgent.eu"] [uri "/"] [unique_id "amtpJ4uBlSgrPR9C5kh0LQAAAA8"], referer: http://www.orgent.be
[Thu Jul 30 16:09:27.325042 2026] [ssl:error] [pid 3813521:tid 3813521] (70014)End of file found: [client 216.73.216.199:7925] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:27.422391 2026] [authz_core:error] [pid 3797556:tid 3797556] [client 66.249.66.35:52211] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:09:27.425179 2026] [authz_core:error] [pid 3797556:tid 3797556] [client 66.249.66.35:52211] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:09:28.297193 2026] [ssl:error] [pid 3791554:tid 3791554] (70014)End of file found: [client 216.73.216.199:12515] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:28.752837 2026] [security2:error] [pid 3815256:tid 3815256] [client 49.51.233.95:45510] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtpKOYahf6Wr32Y5F9grQAAABg"]
[Thu Jul 30 16:09:29.131612 2026] [ssl:error] [pid 3815203:tid 3815203] (EAI 2)Name or service not known: [client 144.76.19.72:33496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:29.131648 2026] [ssl:error] [pid 3815203:tid 3815203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:29.187628 2026] [ssl:error] [pid 3815254:tid 3815254] (EAI 2)Name or service not known: [client 144.76.19.72:33508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:29.187671 2026] [ssl:error] [pid 3815254:tid 3815254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:29.914847 2026] [ssl:error] [pid 3810708:tid 3810708] (70014)End of file found: [client 216.73.216.199:28075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:30.171463 2026] [lsapi:warn] [pid 3813522:tid 3813522] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:09:30.234022 2026] [access_compat:error] [pid 3809084:tid 3809084] [client 115.96.93.224:53118] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:30.624621 2026] [ssl:error] [pid 3815254:tid 3815254] (70014)End of file found: [client 216.73.216.199:17835] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:31.111842 2026] [ssl:error] [pid 3815256:tid 3815256] (70014)End of file found: [client 216.73.216.199:53647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:31.551248 2026] [security2:error] [pid 3815917:tid 3815917] [client 49.51.233.95:40378] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtpK6_MmcbDxiZtD2aBigAAAAM"], referer: http://www.hornsey-town-hall.org.uk
[Thu Jul 30 16:09:32.244971 2026] [ssl:error] [pid 3813596:tid 3813596] (EAI 2)Name or service not known: [client 144.76.19.72:31704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:32.245003 2026] [ssl:error] [pid 3813596:tid 3813596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:32.301350 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:31714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:32.301383 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:33.449053 2026] [security2:error] [pid 3806337:tid 3806337] [client 43.130.141.193:34236] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.3dworkstation.co.uk"] [uri "/"] [unique_id "amtpLaxLJ0_zW2WolvNPNgAAAB8"]
[Thu Jul 30 16:09:34.838570 2026] [access_compat:error] [pid 3815949:tid 3815949] [client 115.96.93.224:53399] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:35.350728 2026] [security2:error] [pid 3813594:tid 3813594] [client 43.159.143.139:59530] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.craft-buddies.co.uk"] [uri "/"] [unique_id "amtpL__nwvbZdVIfHiysiAAAACc"]
[Thu Jul 30 16:09:35.352862 2026] [ssl:error] [pid 3803380:tid 3803380] (70014)End of file found: [client 216.73.216.199:61297] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:35.360412 2026] [ssl:error] [pid 3806337:tid 3806337] (EAI 2)Name or service not known: [client 144.76.19.72:31716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:35.360434 2026] [ssl:error] [pid 3806337:tid 3806337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:35.417983 2026] [ssl:error] [pid 3807659:tid 3807659] (EAI 2)Name or service not known: [client 144.76.19.72:31718] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:35.418010 2026] [ssl:error] [pid 3807659:tid 3807659] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:35.503979 2026] [security2:error] [pid 3805510:tid 3805510] [client 43.161.224.78:54006] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tripodhome.co.uk"] [uri "/"] [unique_id "amtpL6fz92rYUtXcKms8BQAAAAU"]
[Thu Jul 30 16:09:35.629666 2026] [authz_core:error] [pid 3809542:tid 3809542] [client 66.249.66.34:57827] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:09:35.632350 2026] [authz_core:error] [pid 3809542:tid 3809542] [client 66.249.66.34:57827] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:09:35.902433 2026] [security2:error] [pid 3791554:tid 3791554] [client 49.51.233.95:43502] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "hornsey-town-hall.org.uk"] [uri "/"] [unique_id "amtpL6MIf50FLZagH3JEVgAAAC8"], referer: https://www.hornsey-town-hall.org.uk/
[Thu Jul 30 16:09:35.939974 2026] [ssl:error] [pid 3810709:tid 3810709] (70014)End of file found: [client 216.73.216.199:49995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:36.161473 2026] [security2:error] [pid 3813557:tid 3813557] [client 49.51.72.76:41566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.refraction.co.uk"] [uri "/"] [unique_id "amtpMFXFJkS5sJW_SvMMuQAAABA"]
[Thu Jul 30 16:09:36.300080 2026] [security2:error] [pid 3810708:tid 3810708] [client 185.191.171.10:55200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/robots.txt"] [unique_id "amtpMMSDIHnRHYAfqGtdLAAAABM"]
[Thu Jul 30 16:09:36.509431 2026] [security2:error] [pid 3807659:tid 3807659] [client 85.208.96.208:40434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,378.0.html"] [unique_id "amtpMOQqi0kHrPpG3JSHlwAAAB4"]
[Thu Jul 30 16:09:36.892781 2026] [security2:error] [pid 3810708:tid 3810708] [client 101.33.80.42:36746] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtpMMSDIHnRHYAfqGtdLQAAABM"]
[Thu Jul 30 16:09:37.557317 2026] [ssl:error] [pid 3806337:tid 3806337] (70014)End of file found: [client 216.73.216.199:17455] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:38.474589 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:31736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:38.474628 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:38.528975 2026] [ssl:error] [pid 3813597:tid 3813597] (EAI 2)Name or service not known: [client 144.76.19.72:31738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:38.529022 2026] [ssl:error] [pid 3813597:tid 3813597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:38.714382 2026] [security2:error] [pid 3813591:tid 3813591] [client 43.165.197.116:58736] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.epmsonline.co.uk"] [uri "/"] [unique_id "amtpMlhULqQtOIbF5F6ddAAAACI"]
[Thu Jul 30 16:09:39.281823 2026] [lsapi:warn] [pid 3813591:tid 3813591] [client 43.165.197.116:58736] [host www.epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:09:39.976025 2026] [security2:error] [pid 3803353:tid 3803353] [client 43.130.72.177:47736] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amtpM1Bml_c8fdH4lrNXewAAAA0"]
[Thu Jul 30 16:09:40.601972 2026] [lsapi:warn] [pid 3815988:tid 3815988] [client 103.75.185.95:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:09:40.732871 2026] [lsapi:warn] [pid 3813596:tid 3813596] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:09:41.173434 2026] [ssl:error] [pid 3815949:tid 3815949] (70014)End of file found: [client 216.73.216.199:62958] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:41.320182 2026] [security2:error] [pid 3802791:tid 3802791] [client 114.119.155.232:57649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "horus-wellbeing.co.uk"] [uri "/robots.txt"] [unique_id "amtpNTWGJFxdIk9_Axd4IQAAAA4"], referer: https://horus-wellbeing.co.uk/robots.txt
[Thu Jul 30 16:09:41.591730 2026] [ssl:error] [pid 3803380:tid 3803380] (EAI 2)Name or service not known: [client 144.76.19.72:27306] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:41.591756 2026] [ssl:error] [pid 3803380:tid 3803380] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:41.649661 2026] [ssl:error] [pid 3797556:tid 3797556] (EAI 2)Name or service not known: [client 144.76.19.72:27310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:41.649690 2026] [ssl:error] [pid 3797556:tid 3797556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:41.964497 2026] [security2:error] [pid 3810803:tid 3810803] [client 52.238.199.152:35318] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "hornsey-town-hall.org.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtpNdyewqKdMoEiF_n7wQAAACw"]
[Thu Jul 30 16:09:41.964690 2026] [security2:error] [pid 3810803:tid 3810803] [client 52.238.199.152:35318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hornsey-town-hall.org.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtpNdyewqKdMoEiF_n7wQAAACw"]
[Thu Jul 30 16:09:42.075704 2026] [security2:error] [pid 3815043:tid 3815043] [client 216.73.216.199:60483] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".dat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/cl.nodejs/yum_cache.dat"] [unique_id "amtpNiNCU9dhiJN0FMmSGgAAAAc"]
[Thu Jul 30 16:09:42.075936 2026] [security2:error] [pid 3815043:tid 3815043] [client 216.73.216.199:60483] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/cl.nodejs/yum_cache.dat"] [unique_id "amtpNiNCU9dhiJN0FMmSGgAAAAc"]
[Thu Jul 30 16:09:42.076161 2026] [security2:error] [pid 3815043:tid 3815043] [client 216.73.216.199:60483] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/cl.nodejs/yum_cache.dat"] [unique_id "amtpNiNCU9dhiJN0FMmSGgAAAAc"]
[Thu Jul 30 16:09:42.171118 2026] [security2:error] [pid 3791554:tid 3791554] [client 101.33.80.42:57240] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtpNqMIf50FLZagH3JEWAAAAC8"], referer: http://www.purple-childcare.co.uk
[Thu Jul 30 16:09:42.377375 2026] [core:error] [pid 3815043:tid 3815043] (13)Permission denied: [client 216.73.216.199:60483] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/objects_partial
[Thu Jul 30 16:09:42.389726 2026] [security2:error] [pid 3815203:tid 3815203] [client 43.173.1.69:49798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtpNlxgH4_amzZxDtw8SgAAAAo"]
[Thu Jul 30 16:09:42.461927 2026] [security2:error] [pid 3810803:tid 3810803] [client 52.238.199.152:35318] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "hornsey-town-hall.org.uk"] [uri "/index.php"] [unique_id "amtpNdyewqKdMoEiF_n7wQAAACw"]
[Thu Jul 30 16:09:43.580993 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:60483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:43.882925 2026] [ssl:error] [pid 3810709:tid 3810709] (70014)End of file found: [client 216.73.216.199:33602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:44.707419 2026] [ssl:error] [pid 3815917:tid 3815917] (EAI 2)Name or service not known: [client 144.76.19.72:27318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:44.707453 2026] [ssl:error] [pid 3815917:tid 3815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:44.765253 2026] [ssl:error] [pid 3805510:tid 3805510] (EAI 2)Name or service not known: [client 144.76.19.72:27328] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:44.765279 2026] [ssl:error] [pid 3805510:tid 3805510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:44.772214 2026] [security2:error] [pid 3815255:tid 3815255] [client 114.119.155.232:57657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.horus-wellbeing.co.uk"] [uri "/robots.txt"] [unique_id "amtpOB-QmZuXB5szg08bxgAAABU"], referer: https://horus-wellbeing.co.uk/robots.txt
[Thu Jul 30 16:09:45.219025 2026] [security2:error] [pid 3813591:tid 3813591] [client 43.173.1.69:55698] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.beechhouseselfcatering.co.uk"] [uri "/"] [unique_id "amtpOVhULqQtOIbF5F6ddwAAACI"], referer: http://www.beechhouseselfcatering.co.uk
[Thu Jul 30 16:09:45.332301 2026] [access_compat:error] [pid 3815989:tid 3815989] [client 115.96.93.224:54058] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:46.869836 2026] [security2:error] [pid 3815204:tid 3815204] [client 162.62.231.139:43930] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampmusic.co.uk"] [uri "/"] [unique_id "amtpOvoR8CNiYnt1Jm4JTQAAAAs"]
[Thu Jul 30 16:09:47.497375 2026] [ssl:error] [pid 3815985:tid 3815985] (70014)End of file found: [client 216.73.216.199:47968] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:47.821584 2026] [ssl:error] [pid 3815988:tid 3815988] (EAI 2)Name or service not known: [client 144.76.19.72:27342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:47.821619 2026] [ssl:error] [pid 3815988:tid 3815988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:47.874805 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:27358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:47.874834 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:48.770477 2026] [security2:error] [pid 3803380:tid 3803380] [client 162.62.231.139:56968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtpPC9YZI-WfHEdm98V3gAAABw"], referer: http://www.spampmusic.co.uk
[Thu Jul 30 16:09:50.506536 2026] [ssl:error] [pid 3802791:tid 3802791] (70014)End of file found: [client 216.73.216.199:39020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:50.762250 2026] [security2:error] [pid 3809542:tid 3809542] [client 85.208.96.197:52334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/lima-airport-covid-test"] [unique_id "amtpPlGVvvoeo0jDDqBEJAAAAAg"]
[Thu Jul 30 16:09:50.948845 2026] [ssl:error] [pid 3813522:tid 3813522] (EAI 2)Name or service not known: [client 144.76.19.72:43780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:50.948880 2026] [ssl:error] [pid 3813522:tid 3813522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:51.004898 2026] [ssl:error] [pid 3809542:tid 3809542] (EAI 2)Name or service not known: [client 144.76.19.72:43792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:51.004928 2026] [ssl:error] [pid 3809542:tid 3809542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:51.290522 2026] [security2:error] [pid 3803353:tid 3803353] [client 101.33.80.42:50896] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.prosperon.co.uk"] [uri "/"] [unique_id "amtpP1Bml_c8fdH4lrNXfgAAAA0"]
[Thu Jul 30 16:09:51.391784 2026] [access_compat:error] [pid 3815989:tid 3815989] [client 115.96.93.224:54426] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:51.438224 2026] [lsapi:warn] [pid 3813522:tid 3813522] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:09:51.716530 2026] [ssl:error] [pid 3815988:tid 3815988] (70014)End of file found: [client 216.73.216.199:22309] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:52.232371 2026] [security2:error] [pid 3807581:tid 3807581] [client 101.33.80.42:52070] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sewyork.co.uk"] [uri "/"] [unique_id "amtpQMo0XON21QyIP3tHoQAAABk"]
[Thu Jul 30 16:09:52.234055 2026] [access_compat:error] [pid 3815203:tid 3815203] [client 45.158.164.139:37696] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:09:54.057355 2026] [ssl:error] [pid 3813591:tid 3813591] (EAI 2)Name or service not known: [client 144.76.19.72:43808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:54.057395 2026] [ssl:error] [pid 3813591:tid 3813591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:54.088622 2026] [security2:error] [pid 3803353:tid 3803353] [client 101.33.80.42:41500] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "prosperon.co.uk"] [uri "/"] [unique_id "amtpQlBml_c8fdH4lrNXfwAAAA0"], referer: http://www.prosperon.co.uk
[Thu Jul 30 16:09:54.113724 2026] [ssl:error] [pid 3815203:tid 3815203] (EAI 2)Name or service not known: [client 144.76.19.72:43816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:54.113746 2026] [ssl:error] [pid 3815203:tid 3815203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:54.731319 2026] [core:error] [pid 3813522:tid 3813522] (13)Permission denied: [client 216.73.216.199:10787] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_buffer/hwcache_align
[Thu Jul 30 16:09:55.638174 2026] [ssl:error] [pid 3813522:tid 3813522] (70014)End of file found: [client 216.73.216.199:10787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:09:55.887595 2026] [access_compat:error] [pid 3807581:tid 3807581] [client 115.96.93.224:54635] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:09:56.364047 2026] [access_compat:error] [pid 3802791:tid 3802791] [client 45.158.164.139:37712] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:09:56.366953 2026] [authz_core:error] [pid 3808974:tid 3808974] [client 66.249.66.33:40400] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:09:56.369592 2026] [authz_core:error] [pid 3808974:tid 3808974] [client 66.249.66.33:40400] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:09:56.842274 2026] [core:error] [pid 3791554:tid 3791554] (13)Permission denied: [client 216.73.216.199:42115] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/usersize
[Thu Jul 30 16:09:57.342167 2026] [ssl:error] [pid 3812056:tid 3812056] (EAI 2)Name or service not known: [client 144.76.19.72:43828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:57.342194 2026] [ssl:error] [pid 3812056:tid 3812056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:09:57.381251 2026] [security2:error] [pid 3812056:tid 3812056] [client 51.195.183.253:63518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/olympus-digital-camera-2/"] [unique_id "amtpRbkNc6zQ80XKjWJGLQAAAC0"]
[Thu Jul 30 16:09:57.755251 2026] [security2:error] [pid 3802346:tid 3802346] [client 119.28.140.106:50544] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.auroravation.co.uk"] [uri "/"] [unique_id "amtpRayDmOMb-E8R5NR5oAAAAAI"]
[Thu Jul 30 16:09:57.839946 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:43836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:09:57.839970 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:00.070387 2026] [authz_core:error] [pid 3813560:tid 3813560] [client 31.130.13.6:41797] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 16:10:00.072120 2026] [authz_core:error] [pid 3813560:tid 3813560] [client 31.130.13.6:41797] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://kinesiologylondon.co.uk/
[Thu Jul 30 16:10:00.353192 2026] [ssl:error] [pid 3791554:tid 3791554] (70014)End of file found: [client 216.73.216.199:42115] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:00.891924 2026] [ssl:error] [pid 3813591:tid 3813591] (EAI 2)Name or service not known: [client 144.76.19.72:55432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:00.891953 2026] [ssl:error] [pid 3813591:tid 3813591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:00.944455 2026] [ssl:error] [pid 3816905:tid 3816905] (EAI 2)Name or service not known: [client 144.76.19.72:55444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:00.944487 2026] [ssl:error] [pid 3816905:tid 3816905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:01.882454 2026] [lsapi:warn] [pid 3805510:tid 3805510] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:10:01.909119 2026] [security2:error] [pid 3815203:tid 3815203] [client 43.130.12.43:38504] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.cssystems.co.uk"] [uri "/"] [unique_id "amtpSVxgH4_amzZxDtw8TgAAAAo"], referer: http://www.cssystems.co.uk
[Thu Jul 30 16:10:01.945589 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/011i.php
[Thu Jul 30 16:10:01.945645 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:01.980551 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/03a005685d.php
[Thu Jul 30 16:10:01.980627 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.016461 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.php
[Thu Jul 30 16:10:02.016536 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.128755 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 16:10:02.128813 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.245012 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 16:10:02.245081 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.280112 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/aafewc0k.php
[Thu Jul 30 16:10:02.280166 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.382609 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 16:10:02.382664 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.417364 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 16:10:02.417415 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.452800 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 16:10:02.452849 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.483302 2026] [access_compat:error] [pid 3817209:tid 3817209] [client 115.96.93.224:54990] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:02.487585 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 16:10:02.487631 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.530442 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/albin.php
[Thu Jul 30 16:10:02.530515 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.566186 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/amfsqvgv.php
[Thu Jul 30 16:10:02.566239 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.600985 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/ant.php
[Thu Jul 30 16:10:02.601051 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.669972 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/appreciators.php
[Thu Jul 30 16:10:02.670023 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.733933 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/archive.php
[Thu Jul 30 16:10:02.733986 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.768916 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 16:10:02.768971 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.804788 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/atomlib.php
[Thu Jul 30 16:10:02.804841 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.840339 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/autoload_classmap.php
[Thu Jul 30 16:10:02.840409 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.875599 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/bb.php
[Thu Jul 30 16:10:02.875647 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.909899 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/bnm.php
[Thu Jul 30 16:10:02.909951 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.944466 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/bootstrap.php
[Thu Jul 30 16:10:02.944516 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:02.979170 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/buy.php
[Thu Jul 30 16:10:02.979220 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.062874 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 16:10:03.062940 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.071122 2026] [ssl:error] [pid 3816905:tid 3816905] (70014)End of file found: [client 216.73.216.199:42005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:03.162231 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/class-wp-image.php
[Thu Jul 30 16:10:03.162284 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.196620 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/classsmtps.php
[Thu Jul 30 16:10:03.196685 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.231753 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 16:10:03.231801 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.288151 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/config.php
[Thu Jul 30 16:10:03.288204 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.322898 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/core.php
[Thu Jul 30 16:10:03.322957 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.360641 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/css.php
[Thu Jul 30 16:10:03.360691 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.450119 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/database.php
[Thu Jul 30 16:10:03.450169 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.486590 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/db.php
[Thu Jul 30 16:10:03.486643 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.521581 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/default.php
[Thu Jul 30 16:10:03.521635 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.624404 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/dropdown.php
[Thu Jul 30 16:10:03.624484 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.658907 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 16:10:03.658966 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.700878 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/f35.php
[Thu Jul 30 16:10:03.700924 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.735393 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/f7.php
[Thu Jul 30 16:10:03.735450 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 20.91.199.21:55359] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:10:03.799198 2026] [lsapi:warn] [pid 3805510:tid 3805510] [client 167.172.161.111:35834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 16:10:03.799239 2026] [lsapi:warn] [pid 3805510:tid 3805510] [client 167.172.161.111:35834] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 16:10:03.942246 2026] [authz_core:error] [pid 3815985:tid 3815985] [client 66.249.66.35:43756] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:10:03.944917 2026] [authz_core:error] [pid 3815985:tid 3815985] [client 66.249.66.35:43756] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:10:03.969272 2026] [ssl:error] [pid 3809542:tid 3809542] (70014)End of file found: [client 216.73.216.199:8635] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:04.034704 2026] [ssl:error] [pid 3817209:tid 3817209] (EAI 2)Name or service not known: [client 144.76.19.72:55448] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:04.034742 2026] [ssl:error] [pid 3817209:tid 3817209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:04.088548 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:55460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:04.088585 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:06.431639 2026] [access_compat:error] [pid 3815948:tid 3815948] [client 115.96.93.224:55169] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:07.144545 2026] [ssl:error] [pid 3813522:tid 3813522] (EAI 2)Name or service not known: [client 144.76.19.72:55462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:07.144574 2026] [ssl:error] [pid 3813522:tid 3813522] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:07.201629 2026] [ssl:error] [pid 3815988:tid 3815988] (EAI 2)Name or service not known: [client 144.76.19.72:55472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:07.201661 2026] [ssl:error] [pid 3815988:tid 3815988] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:07.626959 2026] [security2:error] [pid 3817574:tid 3817574] [client 43.159.62.129:37904] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtpT0oaKQalXfIHDUaCKAAAACM"]
[Thu Jul 30 16:10:09.750543 2026] [ssl:error] [pid 3810709:tid 3810709] (70014)End of file found: [client 216.73.216.199:11502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:10.254777 2026] [ssl:error] [pid 3816905:tid 3816905] (EAI 2)Name or service not known: [client 144.76.19.72:62624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:10.254810 2026] [ssl:error] [pid 3816905:tid 3816905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:10.308968 2026] [ssl:error] [pid 3815203:tid 3815203] (EAI 2)Name or service not known: [client 144.76.19.72:62626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:10.309005 2026] [ssl:error] [pid 3815203:tid 3815203] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:10.442825 2026] [security2:error] [pid 3816696:tid 3816696] [client 43.159.62.129:40426] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/"] [unique_id "amtpUmxdxykndKQFor0c5AAAAAs"], referer: http://www.1stcolsterworthscouts.org.uk
[Thu Jul 30 16:10:10.658737 2026] [ssl:error] [pid 3809542:tid 3809542] (70014)End of file found: [client 216.73.216.199:27768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:11.191264 2026] [security2:error] [pid 3816696:tid 3816696] [client 185.191.171.3:61574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9104.0.html"] [unique_id "amtpU2xdxykndKQFor0c5QAAAAs"]
[Thu Jul 30 16:10:11.360898 2026] [security2:error] [pid 3815948:tid 3815948] [client 43.130.100.35:37924] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.akoptimize.co.uk"] [uri "/"] [unique_id "amtpU2PhX-84DR2orhk39AAAAAQ"]
[Thu Jul 30 16:10:11.562415 2026] [ssl:error] [pid 3816905:tid 3816905] (70014)End of file found: [client 216.73.216.199:11907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:13.365293 2026] [ssl:error] [pid 3806019:tid 3806019] (EAI 2)Name or service not known: [client 144.76.19.72:62640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:13.365352 2026] [ssl:error] [pid 3806019:tid 3806019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:13.423184 2026] [ssl:error] [pid 3817860:tid 3817860] (EAI 2)Name or service not known: [client 144.76.19.72:62642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:13.423229 2026] [ssl:error] [pid 3817860:tid 3817860] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:14.222259 2026] [lsapi:warn] [pid 3817804:tid 3817804] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:10:14.394054 2026] [security2:error] [pid 3817503:tid 3817503] [client 119.28.140.106:35798] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amtpVuOm9JM-_D_Z31hgkAAAAB4"]
[Thu Jul 30 16:10:14.461088 2026] [security2:error] [pid 3817858:tid 3817858] [client 54.152.163.42:39699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/bridging-asia-shelter-forum-2020-21-marc-dsilva/"] [unique_id "amtpVjCr-wHgKI-TL4cQ0AAAAC4"]
[Thu Jul 30 16:10:16.479199 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:62646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:16.479230 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:16.533765 2026] [ssl:error] [pid 3812056:tid 3812056] (EAI 2)Name or service not known: [client 144.76.19.72:62662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:16.533799 2026] [ssl:error] [pid 3812056:tid 3812056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:16.981687 2026] [access_compat:error] [pid 3817209:tid 3817209] [client 115.96.93.224:55720] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:17.448611 2026] [security2:error] [pid 3816696:tid 3816696] [client 94.154.43.179:45248] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "kingston1010.org.uk"] [uri "/.env"] [unique_id "amtpWWxdxykndKQFor0c5wAAAAs"]
[Thu Jul 30 16:10:17.448807 2026] [security2:error] [pid 3816696:tid 3816696] [client 94.154.43.179:45248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kingston1010.org.uk"] [uri "/.env"] [unique_id "amtpWWxdxykndKQFor0c5wAAAAs"]
[Thu Jul 30 16:10:17.449023 2026] [security2:error] [pid 3816696:tid 3816696] [client 94.154.43.179:45248] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "kingston1010.org.uk"] [uri "/.env"] [unique_id "amtpWWxdxykndKQFor0c5wAAAAs"]
[Thu Jul 30 16:10:17.882974 2026] [security2:error] [pid 3810709:tid 3810709] [client 119.28.140.106:48856] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.berehap.be"] [uri "/"] [unique_id "amtpWbeJ_N3Kr5dqs7LVYwAAABo"], referer: http://www.berehap.be
[Thu Jul 30 16:10:18.840342 2026] [ssl:error] [pid 3810752:tid 3810752] (70014)End of file found: [client 216.73.216.199:6884] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:18.984528 2026] [security2:error] [pid 3813560:tid 3813560] [client 100.28.57.133:1312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.shelterforum.info"] [uri "/asia-shelter-forum-2020-speakers-and-sessions/promoflyer_3-min/"] [unique_id "amtpWqHYo0Q1MEYpv5cUWwAAABQ"]
[Thu Jul 30 16:10:19.591580 2026] [ssl:error] [pid 3817861:tid 3817861] (EAI 2)Name or service not known: [client 144.76.19.72:47380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:19.591617 2026] [ssl:error] [pid 3817861:tid 3817861] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:19.643520 2026] [ssl:error] [pid 3807581:tid 3807581] (EAI 2)Name or service not known: [client 144.76.19.72:47394] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:19.643552 2026] [ssl:error] [pid 3807581:tid 3807581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:21.363018 2026] [security2:error] [pid 3813592:tid 3813592] [client 119.28.140.106:51802] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "berehap.be"] [uri "/"] [unique_id "amtpXQs121qiIvuLd3BnugAAACQ"], referer: https://www.berehap.be/
[Thu Jul 30 16:10:21.570857 2026] [security2:error] [pid 3813560:tid 3813560] [client 185.191.171.5:65256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amtpXaHYo0Q1MEYpv5cUXQAAABQ"]
[Thu Jul 30 16:10:22.696305 2026] [ssl:error] [pid 3802839:tid 3802839] (EAI 2)Name or service not known: [client 144.76.19.72:47398] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:22.696366 2026] [ssl:error] [pid 3802839:tid 3802839] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:22.752195 2026] [ssl:error] [pid 3813560:tid 3813560] (EAI 2)Name or service not known: [client 144.76.19.72:47402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:22.752231 2026] [ssl:error] [pid 3813560:tid 3813560] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:23.051832 2026] [access_compat:error] [pid 3815163:tid 3815163] [client 115.96.93.224:56090] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:23.624533 2026] [lsapi:warn] [pid 3817573:tid 3817573] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:10:23.662058 2026] [core:error] [pid 3817859:tid 3817859] (13)Permission denied: [client 216.73.216.199:59375] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu1/crash_notes
[Thu Jul 30 16:10:24.639706 2026] [security2:error] [pid 3813591:tid 3813591] [client 114.119.132.171:55029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/life-stages/forfamilies/"] [unique_id "amtpYFhULqQtOIbF5F6dgwAAACI"], referer: http://erskinenazarene.co.uk/
[Thu Jul 30 16:10:25.809423 2026] [ssl:error] [pid 3816696:tid 3816696] (EAI 2)Name or service not known: [client 144.76.19.72:47414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:25.809474 2026] [ssl:error] [pid 3816696:tid 3816696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:25.867189 2026] [ssl:error] [pid 3808974:tid 3808974] (EAI 2)Name or service not known: [client 144.76.19.72:47426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:25.867215 2026] [ssl:error] [pid 3808974:tid 3808974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:26.016351 2026] [security2:error] [pid 3802839:tid 3802839] [client 43.159.36.180:49506] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.sharonduggal.co.uk"] [uri "/"] [unique_id "amtpYuQa6bUedvRQ1fZK3QAAABc"]
[Thu Jul 30 16:10:26.514460 2026] [security2:error] [pid 3816697:tid 3816697] [client 114.119.132.171:55033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/life-stages/forfamilies/"] [unique_id "amtpYhBUXwH1L9pId0lyRwAAABA"], referer: http://erskinenazarene.co.uk/
[Thu Jul 30 16:10:27.604674 2026] [access_compat:error] [pid 3791554:tid 3791554] [client 115.96.93.224:56307] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:28.005977 2026] [security2:error] [pid 3815989:tid 3815989] [client 177.197.234.215:43737] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpZCnaZNiK3TLTH4pH_wAAACY"]
[Thu Jul 30 16:10:28.006045 2026] [security2:error] [pid 3815989:tid 3815989] [client 177.197.234.215:43737] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpZCnaZNiK3TLTH4pH_wAAACY"]
[Thu Jul 30 16:10:28.006334 2026] [security2:error] [pid 3815989:tid 3815989] [client 177.197.234.215:43737] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpZCnaZNiK3TLTH4pH_wAAACY"]
[Thu Jul 30 16:10:28.953639 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:47430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:28.953677 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:29.009531 2026] [ssl:error] [pid 3817209:tid 3817209] (EAI 2)Name or service not known: [client 144.76.19.72:47438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:29.009564 2026] [ssl:error] [pid 3817209:tid 3817209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:29.774447 2026] [lsapi:warn] [pid 3817859:tid 3817859] [client 216.73.216.199:59375] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 16:10:29.774480 2026] [lsapi:error] [pid 3817859:tid 3817859] [client 216.73.216.199:59375] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/serializeNullProperties.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 16:10:30.673943 2026] [ssl:error] [pid 3816697:tid 3816697] (70014)End of file found: [client 216.73.216.199:61712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:31.797367 2026] [security2:error] [pid 3818808:tid 3818808] [client 52.6.5.24:3100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/solarwinds-alerting-tips-minimise-false-alerts/"] [unique_id "amtpZ8WhiRgAv3tnI6CffQAAAA8"]
[Thu Jul 30 16:10:32.065496 2026] [ssl:error] [pid 3806019:tid 3806019] (EAI 2)Name or service not known: [client 144.76.19.72:44942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:32.065540 2026] [ssl:error] [pid 3806019:tid 3806019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:32.119930 2026] [ssl:error] [pid 3806019:tid 3806019] (EAI 2)Name or service not known: [client 144.76.19.72:44944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:32.119954 2026] [ssl:error] [pid 3806019:tid 3806019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:32.268955 2026] [autoindex:error] [pid 3802346:tid 3802346] [client 177.91.2.147:41594] AH01276: Cannot serve directory /home/winterb/public_html/drupal2/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:10:32.592743 2026] [security2:error] [pid 3805510:tid 3805510] [client 37.61.124.157:7406] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpaKfz92rYUtXcKms8HQAAAAU"]
[Thu Jul 30 16:10:32.592787 2026] [security2:error] [pid 3805510:tid 3805510] [client 37.61.124.157:7406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpaKfz92rYUtXcKms8HQAAAAU"]
[Thu Jul 30 16:10:32.593012 2026] [security2:error] [pid 3805510:tid 3805510] [client 37.61.124.157:7406] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpaKfz92rYUtXcKms8HQAAAAU"]
[Thu Jul 30 16:10:32.698349 2026] [cgi:error] [pid 3817858:tid 3817858] [client 153.35.209.67:47674] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat, referer: http://refraction.co.uk/
[Thu Jul 30 16:10:33.737819 2026] [access_compat:error] [pid 3810709:tid 3810709] [client 115.96.93.224:56646] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:34.493116 2026] [lsapi:warn] [pid 3808974:tid 3808974] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:10:35.178314 2026] [ssl:error] [pid 3809542:tid 3809542] (EAI 2)Name or service not known: [client 144.76.19.72:44956] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:35.178370 2026] [ssl:error] [pid 3809542:tid 3809542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:35.181106 2026] [core:error] [pid 3815989:tid 3815989] (13)Permission denied: [client 216.73.216.199:12305] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/system.slice/lsapi-cache.service/cgroup.event_control
[Thu Jul 30 16:10:35.230561 2026] [ssl:error] [pid 3818848:tid 3818848] (EAI 2)Name or service not known: [client 144.76.19.72:44970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:35.230588 2026] [ssl:error] [pid 3818848:tid 3818848] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:35.486093 2026] [core:error] [pid 3815989:tid 3815989] (13)Permission denied: [client 216.73.216.199:12305] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/system.slice/proxyexecd.service/cgroup.event_control
[Thu Jul 30 16:10:35.735593 2026] [security2:error] [pid 3815163:tid 3815163] [client 14.191.221.100:32703] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpa9Gghwbw2nDmi7UGawAAAAk"]
[Thu Jul 30 16:10:35.735642 2026] [security2:error] [pid 3815163:tid 3815163] [client 14.191.221.100:32703] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpa9Gghwbw2nDmi7UGawAAAAk"]
[Thu Jul 30 16:10:35.735916 2026] [security2:error] [pid 3815163:tid 3815163] [client 14.191.221.100:32703] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpa9Gghwbw2nDmi7UGawAAAAk"]
[Thu Jul 30 16:10:35.792386 2026] [ssl:error] [pid 3815989:tid 3815989] (70014)End of file found: [client 216.73.216.199:12305] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:36.087766 2026] [ssl:error] [pid 3802346:tid 3802346] (70014)End of file found: [client 216.73.216.199:17984] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:36.554850 2026] [security2:error] [pid 3812287:tid 3812287] [client 3.230.224.6:18544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/insights/webinar-on-demand-supercharge-network-operations-management-with-solarwinds-netbrain/"] [unique_id "amtpbEVI98uBZeUWbwm4nwAAADw"]
[Thu Jul 30 16:10:36.580384 2026] [ssl:error] [pid 3803353:tid 3803353] (70014)End of file found: [client 216.73.216.199:18366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:37.472906 2026] [authz_core:error] [pid 3818951:tid 3818951] [client 66.249.66.33:45586] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:10:37.475595 2026] [authz_core:error] [pid 3818951:tid 3818951] [client 66.249.66.33:45586] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:10:38.063895 2026] [security2:error] [pid 3817209:tid 3817209] [client 43.154.250.181:50282] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.maisongerlyn.be"] [uri "/"] [unique_id "amtpbsmkwWp42uHBpj2_QQAAABs"]
[Thu Jul 30 16:10:38.113971 2026] [access_compat:error] [pid 3815948:tid 3815948] [client 115.96.93.224:56843] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:38.283497 2026] [ssl:error] [pid 3806335:tid 3806335] (EAI 2)Name or service not known: [client 144.76.19.72:44978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:38.283527 2026] [ssl:error] [pid 3806335:tid 3806335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:38.338622 2026] [ssl:error] [pid 3818847:tid 3818847] (EAI 2)Name or service not known: [client 144.76.19.72:44994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:38.338651 2026] [ssl:error] [pid 3818847:tid 3818847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:41.099725 2026] [ssl:error] [pid 3818808:tid 3818808] (70014)End of file found: [client 216.73.216.199:22040] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:41.395882 2026] [ssl:error] [pid 3807581:tid 3807581] (EAI 2)Name or service not known: [client 144.76.19.72:32094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:41.395913 2026] [ssl:error] [pid 3807581:tid 3807581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:41.448483 2026] [ssl:error] [pid 3815989:tid 3815989] (EAI 2)Name or service not known: [client 144.76.19.72:32096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:41.448521 2026] [ssl:error] [pid 3815989:tid 3815989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:42.106487 2026] [ssl:error] [pid 3817209:tid 3817209] (70014)End of file found: [client 216.73.216.199:59383] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:42.946179 2026] [security2:error] [pid 3805510:tid 3805510] [client 43.154.250.181:59278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtpcqfz92rYUtXcKms8JAAAAAU"], referer: http://www.maisongerlyn.be
[Thu Jul 30 16:10:44.506598 2026] [ssl:error] [pid 3815254:tid 3815254] (EAI 2)Name or service not known: [client 144.76.19.72:32106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:44.506641 2026] [ssl:error] [pid 3815254:tid 3815254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:44.545875 2026] [ssl:error] [pid 3815989:tid 3815989] (70014)End of file found: [client 216.73.216.199:31207] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:44.557498 2026] [lsapi:warn] [pid 3815948:tid 3815948] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:10:44.560961 2026] [ssl:error] [pid 3815254:tid 3815254] (EAI 2)Name or service not known: [client 144.76.19.72:32112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:44.560991 2026] [ssl:error] [pid 3815254:tid 3815254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:44.681883 2026] [core:error] [pid 3815254:tid 3815254] [client 66.249.66.8:58820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:10:44.681916 2026] [core:error] [pid 3815254:tid 3815254] [client 66.249.66.8:58820] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:10:47.178544 2026] [security2:error] [pid 3813560:tid 3813560] [client 74.7.227.31:37986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.yahtzeecouk.alism.com"] [uri "/"] [unique_id "amtpd6HYo0Q1MEYpv5cUZAAAABQ"]
[Thu Jul 30 16:10:47.256103 2026] [authz_core:error] [pid 3819413:tid 3819413] [client 66.249.66.33:56910] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:10:47.258761 2026] [authz_core:error] [pid 3819413:tid 3819413] [client 66.249.66.33:56910] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:10:47.615868 2026] [ssl:error] [pid 3817209:tid 3817209] (EAI 2)Name or service not known: [client 144.76.19.72:32118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:47.615903 2026] [ssl:error] [pid 3817209:tid 3817209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:47.673479 2026] [ssl:error] [pid 3816696:tid 3816696] (EAI 2)Name or service not known: [client 144.76.19.72:32132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:47.673508 2026] [ssl:error] [pid 3816696:tid 3816696] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:48.670300 2026] [access_compat:error] [pid 3817861:tid 3817861] [client 115.96.93.224:57377] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:50.727190 2026] [ssl:error] [pid 3818847:tid 3818847] (EAI 2)Name or service not known: [client 144.76.19.72:39802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:50.727229 2026] [ssl:error] [pid 3818847:tid 3818847] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:50.781991 2026] [ssl:error] [pid 3807581:tid 3807581] (EAI 2)Name or service not known: [client 144.76.19.72:39818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:50.782026 2026] [ssl:error] [pid 3807581:tid 3807581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:51.288255 2026] [security2:error] [pid 3818847:tid 3818847] [client 85.208.96.205:51824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/state-farm-diamond-deck-parking"] [unique_id "amtpewVlhFIe346pi-BKBgAAABE"]
[Thu Jul 30 16:10:51.705595 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/as.php
[Thu Jul 30 16:10:51.705653 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:51.815884 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/k.php
[Thu Jul 30 16:10:51.815935 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:51.926349 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/system_log.php
[Thu Jul 30 16:10:51.926399 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:52.037737 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/x.php
[Thu Jul 30 16:10:52.037784 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:52.154106 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/autoload_classmap.php
[Thu Jul 30 16:10:52.154152 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:52.265207 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/hosty.php
[Thu Jul 30 16:10:52.265254 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:52.375404 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/test1.php
[Thu Jul 30 16:10:52.375453 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:52.532978 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/zwso.php
[Thu Jul 30 16:10:52.533030 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:52.643717 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/fpwch.php
[Thu Jul 30 16:10:52.643768 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:52.754404 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/mini
[Thu Jul 30 16:10:52.867828 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-blog-header.php
[Thu Jul 30 16:10:52.867881 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:53.035680 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/about
[Thu Jul 30 16:10:53.197574 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/function
[Thu Jul 30 16:10:53.308238 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-signin.php
[Thu Jul 30 16:10:53.308293 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:53.452936 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/f35.php
[Thu Jul 30 16:10:53.452986 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:53.518575 2026] [security2:error] [pid 3817503:tid 3817503] [client 43.166.244.192:43844] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/"] [unique_id "amtpfeOm9JM-_D_Z31hg7gAAAB4"]
[Thu Jul 30 16:10:53.587965 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/gg.php
[Thu Jul 30 16:10:53.588020 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:53.698402 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/class.php
[Thu Jul 30 16:10:53.698456 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:53.816872 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/flower.php
[Thu Jul 30 16:10:53.816929 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:53.838900 2026] [ssl:error] [pid 3809542:tid 3809542] (EAI 2)Name or service not known: [client 144.76.19.72:39832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:53.838924 2026] [ssl:error] [pid 3809542:tid 3809542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:53.873990 2026] [core:error] [pid 3815203:tid 3815203] (13)Permission denied: [client 216.73.216.199:27222] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/system.slice/queueprocd.service/cgroup.event_control
[Thu Jul 30 16:10:53.894809 2026] [ssl:error] [pid 3805510:tid 3805510] (EAI 2)Name or service not known: [client 144.76.19.72:39848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:53.894832 2026] [ssl:error] [pid 3805510:tid 3805510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:53.927257 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/motu.php
[Thu Jul 30 16:10:53.927306 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:54.039188 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/404.php
[Thu Jul 30 16:10:54.039254 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:54.184467 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lite.php
[Thu Jul 30 16:10:54.184521 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:54.294758 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/lock360.php
[Thu Jul 30 16:10:54.294811 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:54.405014 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 16:10:54.554556 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-links-opml.php
[Thu Jul 30 16:10:54.554610 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:54.667317 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.alf.php
[Thu Jul 30 16:10:54.667388 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:54.679598 2026] [access_compat:error] [pid 3818848:tid 3818848] [client 115.96.93.224:57714] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:54.777585 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws.php
[Thu Jul 30 16:10:54.777644 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:54.922173 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/css
[Thu Jul 30 16:10:55.035782 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ioxi-o.php
[Thu Jul 30 16:10:55.035838 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:55.116563 2026] [access_compat:error] [pid 3817503:tid 3817503] [client 45.158.164.139:35624] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:10:55.154788 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/ws54.php
[Thu Jul 30 16:10:55.154856 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:55.320641 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/155.php
[Thu Jul 30 16:10:55.320701 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:55.431435 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-includes
[Thu Jul 30 16:10:55.591228 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/xmlrpc.php
[Thu Jul 30 16:10:55.591275 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:55.669748 2026] [security2:error] [pid 3802346:tid 3802346] [client 43.166.244.192:45314] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.rogersbarbershopltd.co.uk"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "amtpf6yDmOMb-E8R5NR5tQAAAAI"], referer: http://www.rogersbarbershopltd.co.uk
[Thu Jul 30 16:10:55.702084 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/tinyfilemanager.php
[Thu Jul 30 16:10:55.702134 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:55.812492 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/hplfuns.php
[Thu Jul 30 16:10:55.812541 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:55.898719 2026] [lsapi:warn] [pid 3819816:tid 3819816] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:10:55.923587 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/bthil.php
[Thu Jul 30 16:10:55.923640 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:56.034494 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cv.php
[Thu Jul 30 16:10:56.034545 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:56.184432 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sf.php
[Thu Jul 30 16:10:56.184495 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:56.296319 2026] [ssl:error] [pid 3815203:tid 3815203] (70014)End of file found: [client 216.73.216.199:27222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:56.297302 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content.php
[Thu Jul 30 16:10:56.297358 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:56.461412 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.bod
[Thu Jul 30 16:10:56.653534 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/txets.php
[Thu Jul 30 16:10:56.653589 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:56.781315 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wk
[Thu Jul 30 16:10:56.805158 2026] [ssl:error] [pid 3803353:tid 3803353] (70014)End of file found: [client 216.73.216.199:61404] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:10:56.959375 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/222.php
[Thu Jul 30 16:10:56.959428 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:57.011467 2026] [ssl:error] [pid 3819874:tid 3819874] (EAI 2)Name or service not known: [client 144.76.19.72:39850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:57.011523 2026] [ssl:error] [pid 3819874:tid 3819874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:57.069807 2026] [ssl:error] [pid 3819874:tid 3819874] (EAI 2)Name or service not known: [client 144.76.19.72:39862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:10:57.069843 2026] [ssl:error] [pid 3819874:tid 3819874] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:10:57.153376 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/new.php
[Thu Jul 30 16:10:57.153424 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:57.342716 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 16:10:57.453549 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/.trash7206
[Thu Jul 30 16:10:57.568023 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/classwithtostring.php
[Thu Jul 30 16:10:57.568088 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:57.678540 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/error.php
[Thu Jul 30 16:10:57.678586 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:57.788774 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/a7.php
[Thu Jul 30 16:10:57.788826 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml
[Thu Jul 30 16:10:57.812100 2026] [core:error] [pid 3819875:tid 3819875] (13)Permission denied: [client 216.73.216.199:53832] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/system.slice/rpcbind.socket/cgroup.event_control
[Thu Jul 30 16:10:57.900708 2026] [access_compat:error] [pid 3814755:tid 3814755] [client 172.202.95.21:30643] AH01797: client denied by server configuration: /home/pbyawsga/public_html/wp-content
[Thu Jul 30 16:10:58.713230 2026] [security2:error] [pid 3815254:tid 3815254] [client 85.208.96.206:37310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2008/07/08/microsoft-midori-speculation/"] [unique_id "amtpgsjHTTdARR4Vhup5pwAAAAw"]
[Thu Jul 30 16:10:59.203500 2026] [access_compat:error] [pid 3819915:tid 3819915] [client 115.96.93.224:57916] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:10:59.700418 2026] [access_compat:error] [pid 3813591:tid 3813591] [client 45.158.164.139:35682] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:11:00.127387 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:53552] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:00.127418 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:00.191636 2026] [ssl:error] [pid 3819378:tid 3819378] (EAI 2)Name or service not known: [client 144.76.19.72:53568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:00.191674 2026] [ssl:error] [pid 3819378:tid 3819378] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:03.246767 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:53578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:03.246793 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:03.301761 2026] [ssl:error] [pid 3813591:tid 3813591] (EAI 2)Name or service not known: [client 144.76.19.72:53584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:03.301795 2026] [ssl:error] [pid 3813591:tid 3813591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:03.373370 2026] [authz_core:error] [pid 3802791:tid 3802791] [client 66.249.64.161:36229] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:11:03.376028 2026] [authz_core:error] [pid 3802791:tid 3802791] [client 66.249.64.161:36229] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:11:03.599035 2026] [security2:error] [pid 3817574:tid 3817574] [client 23.251.48.187:37664] ModSecurity: Warning. Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "440"] [id "920420"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/png"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "www.alism.com"] [uri "/"] [unique_id "amtph0oaKQalXfIHDUaCnAAAACM"]
[Thu Jul 30 16:11:03.599868 2026] [security2:error] [pid 3817574:tid 3817574] [client 23.251.48.187:37664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.alism.com"] [uri "/"] [unique_id "amtph0oaKQalXfIHDUaCnAAAACM"]
[Thu Jul 30 16:11:03.645222 2026] [security2:error] [pid 3817574:tid 3817574] [client 23.251.48.187:37664] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): Request content type is not allowed by policy"] [tag "event-correlation"] [hostname "www.alism.com"] [uri "/"] [unique_id "amtph0oaKQalXfIHDUaCnAAAACM"]
[Thu Jul 30 16:11:05.811742 2026] [access_compat:error] [pid 3819413:tid 3819413] [client 115.96.93.224:58284] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:05.852580 2026] [lsapi:warn] [pid 3812056:tid 3812056] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:11:06.230523 2026] [authz_core:error] [pid 3819916:tid 3819916] [client 20.9.4.9:33007] AH01630: client denied by server configuration: /var/www/html/php.ini
[Thu Jul 30 16:11:06.358006 2026] [ssl:error] [pid 3817209:tid 3817209] (EAI 2)Name or service not known: [client 144.76.19.72:53598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:06.358036 2026] [ssl:error] [pid 3817209:tid 3817209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:06.414044 2026] [ssl:error] [pid 3816697:tid 3816697] (EAI 2)Name or service not known: [client 144.76.19.72:53606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:06.414118 2026] [ssl:error] [pid 3816697:tid 3816697] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:06.662827 2026] [security2:error] [pid 3805510:tid 3805510] [client 170.106.84.136:41670] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amtpiqfz92rYUtXcKms8LwAAAAU"]
[Thu Jul 30 16:11:06.999119 2026] [security2:error] [pid 3819920:tid 3819920] [client 170.106.84.136:42128] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kinesiology-in-london.co.uk"] [uri "/"] [unique_id "amtpiokit1Ii8UOcwvAhBAAAAD0"]
[Thu Jul 30 16:11:08.537716 2026] [security2:error] [pid 3802346:tid 3802346] [client 170.106.84.136:35920] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtpjKyDmOMb-E8R5NR5uwAAAAI"], referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 16:11:08.539457 2026] [authz_core:error] [pid 3802346:tid 3802346] [client 170.106.84.136:35920] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 16:11:08.542116 2026] [authz_core:error] [pid 3802346:tid 3802346] [client 170.106.84.136:35920] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.healthkinesiologylondon.co.uk
[Thu Jul 30 16:11:08.977508 2026] [security2:error] [pid 3807581:tid 3807581] [client 170.106.84.136:35872] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtpjMo0XON21QyIP3tHugAAABk"], referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 16:11:08.979254 2026] [authz_core:error] [pid 3807581:tid 3807581] [client 170.106.84.136:35872] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 16:11:08.981919 2026] [authz_core:error] [pid 3807581:tid 3807581] [client 170.106.84.136:35872] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.kinesiology-in-london.co.uk
[Thu Jul 30 16:11:09.055566 2026] [security2:error] [pid 3806019:tid 3806019] [client 20.57.16.117:51470] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "unclaimedassets.co.uk"] [uri "/xmlrpc.php"] [unique_id "amtpjfiSUPKfdV0BtR-IAAAAAAE"]
[Thu Jul 30 16:11:09.505375 2026] [ssl:error] [pid 3819915:tid 3819915] (EAI 2)Name or service not known: [client 144.76.19.72:53610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:09.505421 2026] [ssl:error] [pid 3819915:tid 3819915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:09.561167 2026] [lsapi:warn] [pid 3806019:tid 3806019] [client 20.57.16.117:51470] [host unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:11:09.561661 2026] [ssl:error] [pid 3817574:tid 3817574] (EAI 2)Name or service not known: [client 144.76.19.72:28664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:09.561689 2026] [ssl:error] [pid 3817574:tid 3817574] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:09.659620 2026] [security2:error] [pid 3817503:tid 3817503] [client 43.166.240.231:54128] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amtpjeOm9JM-_D_Z31hg-QAAAB4"]
[Thu Jul 30 16:11:09.708423 2026] [access_compat:error] [pid 3818847:tid 3818847] [client 115.96.93.224:58456] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:10.278900 2026] [authz_core:error] [pid 3809542:tid 3809542] [client 104.22.17.78:13630] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 16:11:12.641970 2026] [ssl:error] [pid 3819919:tid 3819919] (EAI 2)Name or service not known: [client 144.76.19.72:28670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:12.642008 2026] [ssl:error] [pid 3819919:tid 3819919] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:12.699128 2026] [ssl:error] [pid 3815043:tid 3815043] (EAI 2)Name or service not known: [client 144.76.19.72:28684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:12.699156 2026] [ssl:error] [pid 3815043:tid 3815043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:12.997848 2026] [security2:error] [pid 3808974:tid 3808974] [client 103.124.137.32:43048] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,160.0.html"] [unique_id "amtpkJIl2Sq-0UoAwPk9vAAAACU"]
[Thu Jul 30 16:11:12.997903 2026] [security2:error] [pid 3808974:tid 3808974] [client 103.124.137.32:43048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,160.0.html"] [unique_id "amtpkJIl2Sq-0UoAwPk9vAAAACU"]
[Thu Jul 30 16:11:12.998176 2026] [security2:error] [pid 3808974:tid 3808974] [client 103.124.137.32:43048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpkJIl2Sq-0UoAwPk9vAAAACU"]
[Thu Jul 30 16:11:14.294306 2026] [core:error] [pid 3819875:tid 3819875] (13)Permission denied: [client 216.73.216.199:53832] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/system.slice/systemd-tmpfiles-setup-dev.service/cgroup.event_control
[Thu Jul 30 16:11:15.756017 2026] [ssl:error] [pid 3819918:tid 3819918] (EAI 2)Name or service not known: [client 144.76.19.72:28698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:15.756057 2026] [ssl:error] [pid 3819918:tid 3819918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:15.809564 2026] [ssl:error] [pid 3815256:tid 3815256] (EAI 2)Name or service not known: [client 144.76.19.72:28708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:15.809599 2026] [ssl:error] [pid 3815256:tid 3815256] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:16.575154 2026] [lsapi:warn] [pid 3816648:tid 3816648] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:11:16.969847 2026] [security2:error] [pid 3815987:tid 3815987] [client 45.177.16.166:40310] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,160.0.html"] [unique_id "amtplIIcTFljM1vClYoCuwAAACA"]
[Thu Jul 30 16:11:16.969903 2026] [security2:error] [pid 3815987:tid 3815987] [client 45.177.16.166:40310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,160.0.html"] [unique_id "amtplIIcTFljM1vClYoCuwAAACA"]
[Thu Jul 30 16:11:16.970189 2026] [security2:error] [pid 3815987:tid 3815987] [client 45.177.16.166:40310] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtplIIcTFljM1vClYoCuwAAACA"]
[Thu Jul 30 16:11:18.864856 2026] [ssl:error] [pid 3816648:tid 3816648] (EAI 2)Name or service not known: [client 144.76.19.72:28716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:18.864930 2026] [ssl:error] [pid 3816648:tid 3816648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:18.919454 2026] [ssl:error] [pid 3815256:tid 3815256] (EAI 2)Name or service not known: [client 144.76.19.72:28726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:18.919486 2026] [ssl:error] [pid 3815256:tid 3815256] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:19.003212 2026] [security2:error] [pid 3807581:tid 3807581] [client 138.124.66.226:33420] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "orgent.fr"] [uri "/wp-json/batch/v1"] [unique_id "amtpl8o0XON21QyIP3tHvgAAABk"]
[Thu Jul 30 16:11:20.262420 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 115.96.93.224:58993] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:21.977287 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:55672] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:21.977316 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:22.034306 2026] [ssl:error] [pid 3815987:tid 3815987] (EAI 2)Name or service not known: [client 144.76.19.72:55684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:22.034358 2026] [ssl:error] [pid 3815987:tid 3815987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:25.094761 2026] [ssl:error] [pid 3815948:tid 3815948] (EAI 2)Name or service not known: [client 144.76.19.72:55700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:25.094801 2026] [ssl:error] [pid 3815948:tid 3815948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:25.152596 2026] [ssl:error] [pid 3819817:tid 3819817] (EAI 2)Name or service not known: [client 144.76.19.72:55716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:25.152648 2026] [ssl:error] [pid 3819817:tid 3819817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:25.546450 2026] [security2:error] [pid 3806565:tid 3806565] [client 138.124.66.226:51608] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "157"] [id "920180"] [rev "1"] [msg "POST request missing Content-Length Header."] [data "0"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "orgent.fr"] [uri "/wp-json/batch/v1"] [unique_id "amtpnWYcSLiqiYycN-iRdwAAACg"]
[Thu Jul 30 16:11:26.341640 2026] [access_compat:error] [pid 3817574:tid 3817574] [client 115.96.93.224:59329] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:27.238192 2026] [lsapi:warn] [pid 3815043:tid 3815043] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:11:28.209582 2026] [ssl:error] [pid 3808974:tid 3808974] (EAI 2)Name or service not known: [client 144.76.19.72:55722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:28.209628 2026] [ssl:error] [pid 3808974:tid 3808974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:28.380389 2026] [ssl:error] [pid 3809084:tid 3809084] (EAI 2)Name or service not known: [client 144.76.19.72:55736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:28.380418 2026] [ssl:error] [pid 3809084:tid 3809084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:29.179858 2026] [security2:error] [pid 3817804:tid 3817804] [client 180.75.44.219:13179] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,160.0.html"] [unique_id "amtpoapSnoCYPIaYqa-S_AAAACk"]
[Thu Jul 30 16:11:29.179911 2026] [security2:error] [pid 3817804:tid 3817804] [client 180.75.44.219:13179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/board,160.0.html"] [unique_id "amtpoapSnoCYPIaYqa-S_AAAACk"]
[Thu Jul 30 16:11:29.180167 2026] [security2:error] [pid 3817804:tid 3817804] [client 180.75.44.219:13179] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpoapSnoCYPIaYqa-S_AAAACk"]
[Thu Jul 30 16:11:30.789646 2026] [access_compat:error] [pid 3810803:tid 3810803] [client 115.96.93.224:59532] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:31.377798 2026] [ssl:error] [pid 3819414:tid 3819414] (70014)End of file found: [client 216.73.216.199:30567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:31.437436 2026] [ssl:error] [pid 3817859:tid 3817859] (EAI 2)Name or service not known: [client 144.76.19.72:47908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:31.437477 2026] [ssl:error] [pid 3817859:tid 3817859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:31.503709 2026] [ssl:error] [pid 3821418:tid 3821418] (EAI 2)Name or service not known: [client 144.76.19.72:47924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:31.503744 2026] [ssl:error] [pid 3821418:tid 3821418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:32.889932 2026] [ssl:error] [pid 3821417:tid 3821417] (70014)End of file found: [client 216.73.216.199:52726] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:33.188400 2026] [ssl:error] [pid 3819877:tid 3819877] (70014)End of file found: [client 216.73.216.199:48226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:34.593851 2026] [ssl:error] [pid 3809542:tid 3809542] (EAI 2)Name or service not known: [client 144.76.19.72:47928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:34.593881 2026] [ssl:error] [pid 3809542:tid 3809542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:34.698144 2026] [ssl:error] [pid 3815987:tid 3815987] (EAI 2)Name or service not known: [client 144.76.19.72:47944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:34.698168 2026] [ssl:error] [pid 3815987:tid 3815987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:36.700568 2026] [ssl:error] [pid 3816697:tid 3816697] (70014)End of file found: [client 216.73.216.199:59877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:37.753515 2026] [ssl:error] [pid 3817859:tid 3817859] (EAI 2)Name or service not known: [client 144.76.19.72:47948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:37.753549 2026] [ssl:error] [pid 3817859:tid 3817859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:37.806814 2026] [ssl:error] [pid 3817209:tid 3817209] (EAI 2)Name or service not known: [client 144.76.19.72:47964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:37.806859 2026] [ssl:error] [pid 3817209:tid 3817209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:37.975935 2026] [lsapi:warn] [pid 3791554:tid 3791554] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:11:38.216421 2026] [ssl:error] [pid 3817503:tid 3817503] (70014)End of file found: [client 216.73.216.199:41386] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:38.494912 2026] [ssl:error] [pid 3819817:tid 3819817] (70014)End of file found: [client 216.73.216.199:23090] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:40.890604 2026] [ssl:error] [pid 3815948:tid 3815948] (EAI 2)Name or service not known: [client 144.76.19.72:46870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:40.890643 2026] [ssl:error] [pid 3815948:tid 3815948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:40.945661 2026] [ssl:error] [pid 3819917:tid 3819917] (EAI 2)Name or service not known: [client 144.76.19.72:46882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:40.945694 2026] [ssl:error] [pid 3819917:tid 3819917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:41.341821 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 115.96.93.224:60070] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:42.248647 2026] [ssl:error] [pid 3816905:tid 3816905] (70014)End of file found: [client 216.73.216.199:44067] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:43.637955 2026] [ssl:error] [pid 3817209:tid 3817209] (70014)End of file found: [client 216.73.216.199:59823] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:44.002825 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:46894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:44.002872 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:44.057838 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:46898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:44.057872 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:44.358404 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:52883] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:46.853994 2026] [security2:error] [pid 3817749:tid 3817749] [client 114.119.155.144:21745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/living-in-the-midst-of-change"] [unique_id "amtpsq_P2lRie_nkXn9_0gAAACc"], referer: http://www.erskinenazarene.co.uk/see-hear/sermons
[Thu Jul 30 16:11:47.111131 2026] [ssl:error] [pid 3819915:tid 3819915] (EAI 2)Name or service not known: [client 144.76.19.72:46904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:47.111161 2026] [ssl:error] [pid 3819915:tid 3819915] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:47.167363 2026] [ssl:error] [pid 3821418:tid 3821418] (EAI 2)Name or service not known: [client 144.76.19.72:46912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:47.167412 2026] [ssl:error] [pid 3821418:tid 3821418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:47.373258 2026] [access_compat:error] [pid 3819875:tid 3819875] [client 115.96.93.224:60400] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:47.600467 2026] [security2:error] [pid 3822000:tid 3822000] [client 185.191.171.16:32550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10460.0/prev_next,prev.html"] [unique_id "amtps4ygXVUo36wMlHFdMAAAAA8"]
[Thu Jul 30 16:11:47.972857 2026] [ssl:error] [pid 3818951:tid 3818951] (70014)End of file found: [client 216.73.216.199:36901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:48.402251 2026] [security2:error] [pid 3805510:tid 3805510] [client 114.119.155.144:53797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/sermons/living-in-the-midst-of-change"] [unique_id "amtptKfz92rYUtXcKms8QAAAAAU"], referer: http://www.erskinenazarene.co.uk/see-hear/sermons
[Thu Jul 30 16:11:48.781619 2026] [lsapi:warn] [pid 3821418:tid 3821418] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:11:48.955881 2026] [security2:error] [pid 3822505:tid 3822505] [client 185.191.171.9:42810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8800.3495.html"] [unique_id "amtptKKELpdSGDCYasb_4QAAAB0"]
[Thu Jul 30 16:11:49.066138 2026] [ssl:error] [pid 3819414:tid 3819414] (70014)End of file found: [client 216.73.216.199:35969] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:49.795187 2026] [ssl:error] [pid 3817859:tid 3817859] (70014)End of file found: [client 216.73.216.199:22569] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:50.226489 2026] [ssl:error] [pid 3808974:tid 3808974] (EAI 2)Name or service not known: [client 144.76.19.72:28798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:50.226539 2026] [ssl:error] [pid 3808974:tid 3808974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:50.284906 2026] [ssl:error] [pid 3822550:tid 3822550] (EAI 2)Name or service not known: [client 144.76.19.72:28812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:50.284967 2026] [ssl:error] [pid 3822550:tid 3822550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:51.579853 2026] [security2:error] [pid 3819916:tid 3819916] [client 20.63.98.115:17054] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "firstclassbkltd.co.uk"] [uri "/wp-config.php"] [unique_id "amtptzBra8AiDVfLzc5EQQAAADg"]
[Thu Jul 30 16:11:51.580131 2026] [security2:error] [pid 3819916:tid 3819916] [client 20.63.98.115:17054] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "firstclassbkltd.co.uk"] [uri "/wp-config.php"] [unique_id "amtptzBra8AiDVfLzc5EQQAAADg"]
[Thu Jul 30 16:11:51.580435 2026] [security2:error] [pid 3819916:tid 3819916] [client 20.63.98.115:17054] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "firstclassbkltd.co.uk"] [uri "/wp-config.php"] [unique_id "amtptzBra8AiDVfLzc5EQQAAADg"]
[Thu Jul 30 16:11:51.954789 2026] [access_compat:error] [pid 3821417:tid 3821417] [client 115.96.93.224:60602] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:52.018847 2026] [security2:error] [pid 3806565:tid 3806565] [client 85.208.96.207:52884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/ktvo-news-anchors"] [unique_id "amtpuGYcSLiqiYycN-iRgQAAACg"]
[Thu Jul 30 16:11:53.276451 2026] [security2:error] [pid 3809084:tid 3809084] [client 216.73.216.199:20347] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/tmp.conf"] [unique_id "amtpuSYKwRGImuP6UkNzfgAAADI"]
[Thu Jul 30 16:11:53.276700 2026] [security2:error] [pid 3809084:tid 3809084] [client 216.73.216.199:20347] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/tmp.conf"] [unique_id "amtpuSYKwRGImuP6UkNzfgAAADI"]
[Thu Jul 30 16:11:53.276889 2026] [security2:error] [pid 3809084:tid 3809084] [client 216.73.216.199:20347] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/tmpfiles.d/tmp.conf"] [unique_id "amtpuSYKwRGImuP6UkNzfgAAADI"]
[Thu Jul 30 16:11:53.340494 2026] [ssl:error] [pid 3822552:tid 3822552] (EAI 2)Name or service not known: [client 144.76.19.72:28822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:53.340535 2026] [ssl:error] [pid 3822552:tid 3822552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:53.394874 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:28828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:53.394941 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:54.298486 2026] [ssl:error] [pid 3809084:tid 3809084] (70014)End of file found: [client 216.73.216.199:20347] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:54.688478 2026] [core:error] [pid 3822210:tid 3822210] [client 74.7.228.34:33188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:11:54.688510 2026] [core:error] [pid 3822210:tid 3822210] [client 74.7.228.34:33188] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:11:54.788970 2026] [ssl:error] [pid 3817209:tid 3817209] (70014)End of file found: [client 216.73.216.199:1601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:55.099689 2026] [ssl:error] [pid 3813560:tid 3813560] (70014)End of file found: [client 216.73.216.199:34102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:11:56.454587 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:28832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:56.454616 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:56.508153 2026] [ssl:error] [pid 3819877:tid 3819877] (EAI 2)Name or service not known: [client 144.76.19.72:28846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:56.508213 2026] [ssl:error] [pid 3819877:tid 3819877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:58.086506 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 115.96.93.224:60935] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:11:59.466789 2026] [lsapi:warn] [pid 3806565:tid 3806565] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:11:59.567255 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:49588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:59.567289 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:59.623439 2026] [ssl:error] [pid 3819877:tid 3819877] (EAI 2)Name or service not known: [client 144.76.19.72:49596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:11:59.623469 2026] [ssl:error] [pid 3819877:tid 3819877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:11:59.649854 2026] [authz_core:error] [pid 3815917:tid 3815917] [client 144.172.105.5:52122] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 16:11:59.900817 2026] [cgi:error] [pid 3815917:tid 3815917] [client 144.172.105.5:52122] AH02812: stderr from /home/dqvlbwjd/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:12:00.818596 2026] [ssl:error] [pid 3821945:tid 3821945] (70014)End of file found: [client 216.73.216.199:35990] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:01.322059 2026] [ssl:error] [pid 3817209:tid 3817209] (70014)End of file found: [client 216.73.216.199:31226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:01.663692 2026] [access_compat:error] [pid 3822475:tid 3822475] [client 5.127.0.46:37874] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:12:02.491664 2026] [access_compat:error] [pid 3822210:tid 3822210] [client 115.96.93.224:61133] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:02.677054 2026] [ssl:error] [pid 3822505:tid 3822505] (EAI 2)Name or service not known: [client 144.76.19.72:49604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:02.677113 2026] [ssl:error] [pid 3822505:tid 3822505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:02.680266 2026] [security2:error] [pid 3822273:tid 3822273] [client 43.130.116.87:46260] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "m.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtpwgczzfdAEJlCeeNvgwAAABc"]
[Thu Jul 30 16:12:02.733922 2026] [ssl:error] [pid 3806335:tid 3806335] (EAI 2)Name or service not known: [client 144.76.19.72:49608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:02.733950 2026] [ssl:error] [pid 3806335:tid 3806335] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:03.016634 2026] [access_compat:error] [pid 3822505:tid 3822505] [client 45.158.164.139:41670] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:12:04.300023 2026] [autoindex:error] [pid 3823139:tid 3823139] [client 111.92.148.41:35360] AH01276: Cannot serve directory /home/winterb/public_html/drupal1/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:12:05.788980 2026] [ssl:error] [pid 3807581:tid 3807581] (EAI 2)Name or service not known: [client 144.76.19.72:49614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:05.789023 2026] [ssl:error] [pid 3807581:tid 3807581] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:05.843682 2026] [ssl:error] [pid 3821418:tid 3821418] (EAI 2)Name or service not known: [client 144.76.19.72:49618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:05.843716 2026] [ssl:error] [pid 3821418:tid 3821418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:06.844739 2026] [security2:error] [pid 3815163:tid 3815163] [client 186.81.124.105:19459] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpxtGghwbw2nDmi7UGiAAAAAk"]
[Thu Jul 30 16:12:06.844788 2026] [security2:error] [pid 3815163:tid 3815163] [client 186.81.124.105:19459] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpxtGghwbw2nDmi7UGiAAAAAk"]
[Thu Jul 30 16:12:06.845037 2026] [security2:error] [pid 3815163:tid 3815163] [client 186.81.124.105:19459] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpxtGghwbw2nDmi7UGiAAAAAk"]
[Thu Jul 30 16:12:07.267192 2026] [access_compat:error] [pid 3810709:tid 3810709] [client 45.158.164.139:41692] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:12:08.102749 2026] [ssl:error] [pid 3809084:tid 3809084] (70014)End of file found: [client 216.73.216.199:23431] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:08.611461 2026] [ssl:error] [pid 3802791:tid 3802791] (70014)End of file found: [client 216.73.216.199:60222] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:08.899964 2026] [ssl:error] [pid 3821945:tid 3821945] (EAI 2)Name or service not known: [client 144.76.19.72:49626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:08.899996 2026] [ssl:error] [pid 3821945:tid 3821945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:08.954943 2026] [ssl:error] [pid 3805510:tid 3805510] (EAI 2)Name or service not known: [client 144.76.19.72:49648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:08.954989 2026] [ssl:error] [pid 3805510:tid 3805510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:09.000814 2026] [security2:error] [pid 3819413:tid 3819413] [client 47.76.115.44:20907] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpyD9y_WeIiXQbl5XnsgAAABw"]
[Thu Jul 30 16:12:09.000869 2026] [security2:error] [pid 3819413:tid 3819413] [client 47.76.115.44:20907] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpyD9y_WeIiXQbl5XnsgAAABw"]
[Thu Jul 30 16:12:09.001133 2026] [security2:error] [pid 3819413:tid 3819413] [client 47.76.115.44:20907] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpyD9y_WeIiXQbl5XnsgAAABw"]
[Thu Jul 30 16:12:10.228705 2026] [lsapi:warn] [pid 3819914:tid 3819914] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:12:10.826366 2026] [ssl:error] [pid 3823139:tid 3823139] (70014)End of file found: [client 216.73.216.199:40138] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:11.262227 2026] [security2:error] [pid 3822910:tid 3822910] [client 47.76.115.44:44813] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpy9A4Kme_eBaFfHOGAgAAAAs"]
[Thu Jul 30 16:12:11.262272 2026] [security2:error] [pid 3822910:tid 3822910] [client 47.76.115.44:44813] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtpy9A4Kme_eBaFfHOGAgAAAAs"]
[Thu Jul 30 16:12:11.262502 2026] [security2:error] [pid 3822910:tid 3822910] [client 47.76.115.44:44813] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtpy9A4Kme_eBaFfHOGAgAAAAs"]
[Thu Jul 30 16:12:12.009438 2026] [ssl:error] [pid 3819817:tid 3819817] (EAI 2)Name or service not known: [client 144.76.19.72:52806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:12.009471 2026] [ssl:error] [pid 3819817:tid 3819817] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:12.065199 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:52816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:12.065227 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:12.984503 2026] [access_compat:error] [pid 3817574:tid 3817574] [client 115.96.93.224:61679] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:13.432478 2026] [ssl:error] [pid 3822210:tid 3822210] (70014)End of file found: [client 216.73.216.199:6870] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:13.799687 2026] [security2:error] [pid 3815043:tid 3815043] [client 85.208.96.210:44884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/fuego-007/"] [unique_id "amtpzSNCU9dhiJN0FMmSiAAAAAc"]
[Thu Jul 30 16:12:14.038589 2026] [ssl:error] [pid 3809084:tid 3809084] (70014)End of file found: [client 216.73.216.199:24972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:15.140711 2026] [ssl:error] [pid 3818951:tid 3818951] (EAI 2)Name or service not known: [client 144.76.19.72:52828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:15.140768 2026] [ssl:error] [pid 3818951:tid 3818951] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:15.195733 2026] [ssl:error] [pid 3813560:tid 3813560] (EAI 2)Name or service not known: [client 144.76.19.72:52844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:15.195776 2026] [ssl:error] [pid 3813560:tid 3813560] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:18.250631 2026] [ssl:error] [pid 3822910:tid 3822910] (EAI 2)Name or service not known: [client 144.76.19.72:52856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:18.250700 2026] [ssl:error] [pid 3822910:tid 3822910] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:18.306914 2026] [ssl:error] [pid 3816648:tid 3816648] (EAI 2)Name or service not known: [client 144.76.19.72:52868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:18.306948 2026] [ssl:error] [pid 3816648:tid 3816648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:18.762368 2026] [ssl:error] [pid 3822273:tid 3822273] (70014)End of file found: [client 216.73.216.199:25760] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:19.059719 2026] [access_compat:error] [pid 3819413:tid 3819413] [client 115.96.93.224:62007] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:19.680032 2026] [ssl:error] [pid 3822553:tid 3822553] (70014)End of file found: [client 216.73.216.199:58395] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:19.686602 2026] [cgi:error] [pid 3822000:tid 3822000] [client 20.151.221.234:55044] AH02812: stderr from /home/qse/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:12:21.282120 2026] [lsapi:warn] [pid 3791554:tid 3791554] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:12:21.415835 2026] [ssl:error] [pid 3822210:tid 3822210] (EAI 2)Name or service not known: [client 144.76.19.72:41428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:21.415881 2026] [ssl:error] [pid 3822210:tid 3822210] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:21.469861 2026] [ssl:error] [pid 3821999:tid 3821999] (EAI 2)Name or service not known: [client 144.76.19.72:41432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:21.469902 2026] [ssl:error] [pid 3821999:tid 3821999] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:21.512768 2026] [ssl:error] [pid 3821418:tid 3821418] (70014)End of file found: [client 216.73.216.199:18201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:23.584312 2026] [access_compat:error] [pid 3819918:tid 3819918] [client 115.96.93.224:62212] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:24.121834 2026] [ssl:error] [pid 3824129:tid 3824129] (70014)End of file found: [client 216.73.216.199:26119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:24.523900 2026] [ssl:error] [pid 3822552:tid 3822552] (EAI 2)Name or service not known: [client 144.76.19.72:41440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:24.523926 2026] [ssl:error] [pid 3822552:tid 3822552] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:24.576933 2026] [ssl:error] [pid 3816905:tid 3816905] (EAI 2)Name or service not known: [client 144.76.19.72:41454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:24.576969 2026] [ssl:error] [pid 3816905:tid 3816905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:25.137224 2026] [ssl:error] [pid 3819414:tid 3819414] (70014)End of file found: [client 216.73.216.199:55475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:26.587026 2026] [security2:error] [pid 3823184:tid 3823184] [client 20.63.98.115:59991] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "firstclassbkltd.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtp2nyA2sn8_trEmEmUFgAAACI"]
[Thu Jul 30 16:12:26.587231 2026] [security2:error] [pid 3823184:tid 3823184] [client 20.63.98.115:59991] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "firstclassbkltd.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtp2nyA2sn8_trEmEmUFgAAACI"]
[Thu Jul 30 16:12:26.587476 2026] [security2:error] [pid 3823184:tid 3823184] [client 20.63.98.115:59991] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "firstclassbkltd.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtp2nyA2sn8_trEmEmUFgAAACI"]
[Thu Jul 30 16:12:27.635572 2026] [ssl:error] [pid 3822273:tid 3822273] (EAI 2)Name or service not known: [client 144.76.19.72:41470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:27.635605 2026] [ssl:error] [pid 3822273:tid 3822273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:27.697541 2026] [ssl:error] [pid 3823297:tid 3823297] (EAI 2)Name or service not known: [client 144.76.19.72:41482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:27.697577 2026] [ssl:error] [pid 3823297:tid 3823297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:27.846674 2026] [security2:error] [pid 3822272:tid 3822272] [client 216.73.216.199:3167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/php.conf"] [unique_id "amtp26rhAbR_h9esoxg8tQAAABI"]
[Thu Jul 30 16:12:27.846887 2026] [security2:error] [pid 3822272:tid 3822272] [client 216.73.216.199:3167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/php.conf"] [unique_id "amtp26rhAbR_h9esoxg8tQAAABI"]
[Thu Jul 30 16:12:27.847097 2026] [security2:error] [pid 3822272:tid 3822272] [client 216.73.216.199:3167] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/cl.selector/php.conf"] [unique_id "amtp26rhAbR_h9esoxg8tQAAABI"]
[Thu Jul 30 16:12:29.649037 2026] [access_compat:error] [pid 3805510:tid 3805510] [client 115.96.93.224:62549] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:30.749691 2026] [ssl:error] [pid 3821418:tid 3821418] (EAI 2)Name or service not known: [client 144.76.19.72:48720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:30.749722 2026] [ssl:error] [pid 3821418:tid 3821418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:30.804084 2026] [ssl:error] [pid 3817859:tid 3817859] (EAI 2)Name or service not known: [client 144.76.19.72:48724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:30.804129 2026] [ssl:error] [pid 3817859:tid 3817859] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:30.875032 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:3167] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:31.442728 2026] [lsapi:warn] [pid 3802791:tid 3802791] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:12:31.473102 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:43977] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:33.889941 2026] [ssl:error] [pid 3823827:tid 3823827] (EAI 2)Name or service not known: [client 144.76.19.72:48734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:33.889978 2026] [ssl:error] [pid 3823827:tid 3823827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:33.943897 2026] [ssl:error] [pid 3809084:tid 3809084] (EAI 2)Name or service not known: [client 144.76.19.72:48736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:33.943947 2026] [ssl:error] [pid 3809084:tid 3809084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:34.078282 2026] [access_compat:error] [pid 3822475:tid 3822475] [client 115.96.93.224:62754] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:34.564834 2026] [core:error] [pid 3819917:tid 3819917] [client 66.249.66.8:54598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:12:34.564864 2026] [core:error] [pid 3819917:tid 3819917] [client 66.249.66.8:54598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:12:35.093374 2026] [ssl:error] [pid 3822210:tid 3822210] (70014)End of file found: [client 216.73.216.199:19933] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:36.785736 2026] [ssl:error] [pid 3822505:tid 3822505] (70014)End of file found: [client 216.73.216.199:44746] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:36.997612 2026] [ssl:error] [pid 3823827:tid 3823827] (EAI 2)Name or service not known: [client 144.76.19.72:48738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:36.997650 2026] [ssl:error] [pid 3823827:tid 3823827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:37.050374 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:48750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:37.050400 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:38.103155 2026] [core:error] [pid 3808974:tid 3808974] (13)Permission denied: [client 216.73.216.199:52656] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfrm_dst_cache/red_zone
[Thu Jul 30 16:12:38.404859 2026] [ssl:error] [pid 3808974:tid 3808974] (70014)End of file found: [client 216.73.216.199:52656] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:40.112075 2026] [ssl:error] [pid 3819917:tid 3819917] (EAI 2)Name or service not known: [client 144.76.19.72:25102] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:40.112123 2026] [ssl:error] [pid 3819917:tid 3819917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:40.201502 2026] [ssl:error] [pid 3823297:tid 3823297] (EAI 2)Name or service not known: [client 144.76.19.72:25104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:40.201535 2026] [ssl:error] [pid 3823297:tid 3823297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:40.401542 2026] [ssl:error] [pid 3810709:tid 3810709] (70014)End of file found: [client 216.73.216.199:49163] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:41.197015 2026] [security2:error] [pid 3819877:tid 3819877] [client 163.61.60.30:51808] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "hatch-works.com"] [uri "/xmlrpc.php"] [unique_id "amtp6dLYBGWifXA9xmSjjAAAADM"]
[Thu Jul 30 16:12:41.500920 2026] [authz_core:error] [pid 3823185:tid 3823185] [client 169.58.39.193:49455] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 16:12:41.707576 2026] [security2:error] [pid 3819914:tid 3819914] [client 123.30.222.68:50676] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp6T9lCToHA06OhzH2mAAAADY"]
[Thu Jul 30 16:12:41.707625 2026] [security2:error] [pid 3819914:tid 3819914] [client 123.30.222.68:50676] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp6T9lCToHA06OhzH2mAAAADY"]
[Thu Jul 30 16:12:41.707876 2026] [security2:error] [pid 3819914:tid 3819914] [client 123.30.222.68:50676] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtp6T9lCToHA06OhzH2mAAAADY"]
[Thu Jul 30 16:12:41.963299 2026] [lsapi:warn] [pid 3823827:tid 3823827] [client 202.141.44.136:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:12:42.601807 2026] [ssl:error] [pid 3810803:tid 3810803] (70014)End of file found: [client 216.73.216.199:56942] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:42.884456 2026] [security2:error] [pid 3817859:tid 3817859] [client 113.199.231.213:13165] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp6oVly5cBX4qzDI6JTQAAADE"]
[Thu Jul 30 16:12:42.884507 2026] [security2:error] [pid 3817859:tid 3817859] [client 113.199.231.213:13165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp6oVly5cBX4qzDI6JTQAAADE"]
[Thu Jul 30 16:12:42.884735 2026] [security2:error] [pid 3817859:tid 3817859] [client 113.199.231.213:13165] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtp6oVly5cBX4qzDI6JTQAAADE"]
[Thu Jul 30 16:12:42.994518 2026] [ssl:error] [pid 3815163:tid 3815163] (70014)End of file found: [client 216.73.216.199:42875] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:43.258602 2026] [ssl:error] [pid 3813560:tid 3813560] (EAI 2)Name or service not known: [client 144.76.19.72:25114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:43.258634 2026] [ssl:error] [pid 3813560:tid 3813560] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:43.386763 2026] [ssl:error] [pid 3819918:tid 3819918] (EAI 2)Name or service not known: [client 144.76.19.72:25122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:43.386792 2026] [ssl:error] [pid 3819918:tid 3819918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:43.513648 2026] [ssl:error] [pid 3819918:tid 3819918] (70014)End of file found: [client 216.73.216.199:54224] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:43.849889 2026] [authz_core:error] [pid 3813596:tid 3813596] [client 66.249.66.35:53279] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:12:43.852561 2026] [authz_core:error] [pid 3813596:tid 3813596] [client 66.249.66.35:53279] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:12:44.690339 2026] [access_compat:error] [pid 3819877:tid 3819877] [client 115.96.93.224:63292] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:46.462862 2026] [ssl:error] [pid 3822550:tid 3822550] (EAI 2)Name or service not known: [client 144.76.19.72:25126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:46.462906 2026] [ssl:error] [pid 3822550:tid 3822550] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:46.569433 2026] [ssl:error] [pid 3825008:tid 3825008] (EAI 2)Name or service not known: [client 144.76.19.72:25132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:46.569504 2026] [ssl:error] [pid 3825008:tid 3825008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:47.066862 2026] [authz_core:error] [pid 3825009:tid 3825009] [client 169.58.39.193:50569] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/ID3/error_log, referer: binance.com
[Thu Jul 30 16:12:47.710379 2026] [security2:error] [pid 3810709:tid 3810709] [client 109.107.229.232:33161] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp77eJ_N3Kr5dqs7LVnwAAABo"]
[Thu Jul 30 16:12:47.710428 2026] [security2:error] [pid 3810709:tid 3810709] [client 109.107.229.232:33161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp77eJ_N3Kr5dqs7LVnwAAABo"]
[Thu Jul 30 16:12:47.710672 2026] [security2:error] [pid 3810709:tid 3810709] [client 109.107.229.232:33161] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtp77eJ_N3Kr5dqs7LVnwAAABo"]
[Thu Jul 30 16:12:48.193226 2026] [ssl:error] [pid 3825010:tid 3825010] (70014)End of file found: [client 216.73.216.199:43164] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:48.715883 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:23963] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:49.625597 2026] [ssl:error] [pid 3824945:tid 3824945] (EAI 2)Name or service not known: [client 144.76.19.72:27198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:49.625634 2026] [ssl:error] [pid 3824945:tid 3824945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:49.678666 2026] [ssl:error] [pid 3819918:tid 3819918] (EAI 2)Name or service not known: [client 144.76.19.72:27204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:49.678690 2026] [ssl:error] [pid 3819918:tid 3819918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:49.920093 2026] [ssl:error] [pid 3823959:tid 3823959] (70014)End of file found: [client 216.73.216.199:17483] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:50.721218 2026] [access_compat:error] [pid 3813560:tid 3813560] [client 115.96.93.224:63628] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:51.110277 2026] [authz_core:error] [pid 3819914:tid 3819914] [client 169.58.39.193:51733] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 16:12:51.525900 2026] [security2:error] [pid 3823827:tid 3823827] [client 44.206.65.8:22800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/pipelineleaderboards/supermetroid/"] [unique_id "amtp8ytwzvtlE_Vmu-8PkwAAAAE"]
[Thu Jul 30 16:12:52.735288 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:27220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:52.735315 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:52.791506 2026] [ssl:error] [pid 3819917:tid 3819917] (EAI 2)Name or service not known: [client 144.76.19.72:27226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:52.791538 2026] [ssl:error] [pid 3819917:tid 3819917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:53.231538 2026] [security2:error] [pid 3822505:tid 3822505] [client 185.191.171.11:16906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/four-directions-elements"] [unique_id "amtp9aKELpdSGDCYasb_9AAAAB0"]
[Thu Jul 30 16:12:55.009385 2026] [authz_core:error] [pid 3825008:tid 3825008] [client 169.58.39.193:52724] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 16:12:55.062873 2026] [security2:error] [pid 3815917:tid 3815917] [client 23.23.180.225:9477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.robin64.co.uk"] [uri "/rompatcher/"] [unique_id "amtp96_MmcbDxiZtD2aBvAAAAAM"]
[Thu Jul 30 16:12:55.164217 2026] [access_compat:error] [pid 3825009:tid 3825009] [client 115.96.93.224:63827] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:12:55.849124 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:27240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:55.849151 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:55.905244 2026] [ssl:error] [pid 3823184:tid 3823184] (EAI 2)Name or service not known: [client 144.76.19.72:27256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:55.905288 2026] [ssl:error] [pid 3823184:tid 3823184] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:56.567946 2026] [ssl:error] [pid 3824945:tid 3824945] (70014)End of file found: [client 216.73.216.199:42856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:57.169474 2026] [ssl:error] [pid 3825010:tid 3825010] (70014)End of file found: [client 216.73.216.199:64288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:57.669861 2026] [ssl:error] [pid 3819414:tid 3819414] (70014)End of file found: [client 216.73.216.199:5170] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:12:58.906503 2026] [lsapi:warn] [pid 3806565:tid 3806565] [client 51.116.2.93:42814] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:12:58.906546 2026] [lsapi:warn] [pid 3806565:tid 3806565] [client 51.116.2.93:42814] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:12:58.962741 2026] [ssl:error] [pid 3791554:tid 3791554] (EAI 2)Name or service not known: [client 144.76.19.72:27264] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:58.962781 2026] [ssl:error] [pid 3791554:tid 3791554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:59.023863 2026] [ssl:error] [pid 3823959:tid 3823959] (EAI 2)Name or service not known: [client 144.76.19.72:27276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:12:59.023900 2026] [ssl:error] [pid 3823959:tid 3823959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:12:59.309023 2026] [security2:error] [pid 3819918:tid 3819918] [client 43.166.226.57:36428] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amtp-zs06pZHFb1nSrmvnAAAADo"]
[Thu Jul 30 16:12:59.370848 2026] [authz_core:error] [pid 3815163:tid 3815163] [client 169.58.39.193:53787] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 16:13:00.417795 2026] [security2:error] [pid 3825009:tid 3825009] [client 43.166.226.57:41986] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "brodie-engineering.co.uk"] [uri "/"] [unique_id "amtp_CoEV8Is60D2W7P1AwAAACA"], referer: http://brodie-engineering.co.uk
[Thu Jul 30 16:13:00.555610 2026] [lsapi:warn] [pid 3791554:tid 3791554] [client 20.98.101.58:17077] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:13:01.024790 2026] [lsapi:warn] [pid 3823184:tid 3823184] [client 20.114.2.213:52299] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:13:01.266569 2026] [lsapi:warn] [pid 3822475:tid 3822475] [client 90.213.83.66:1539] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:13:01.266628 2026] [lsapi:warn] [pid 3822475:tid 3822475] [client 90.213.83.66:1539] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:13:02.157828 2026] [lsapi:warn] [pid 3825676:tid 3825676] [client 20.104.56.146:59325] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:13:02.277308 2026] [ssl:error] [pid 3825010:tid 3825010] (EAI 2)Name or service not known: [client 144.76.19.72:55942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:02.277373 2026] [ssl:error] [pid 3825010:tid 3825010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:02.333701 2026] [ssl:error] [pid 3825010:tid 3825010] (EAI 2)Name or service not known: [client 144.76.19.72:55952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:02.333728 2026] [ssl:error] [pid 3825010:tid 3825010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:02.642838 2026] [authz_core:error] [pid 3810709:tid 3810709] [client 169.58.39.193:54803] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 16:13:02.892409 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:2829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:02.999889 2026] [lsapi:warn] [pid 3823185:tid 3823185] [client 20.166.13.76:36075] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:13:03.043568 2026] [security2:error] [pid 3819877:tid 3819877] [client 3.94.157.25:46809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/3d-book-covers/fp-5-3d-book-jpg/"] [unique_id "amtp_9LYBGWifXA9xmSjmgAAADM"]
[Thu Jul 30 16:13:03.294801 2026] [security2:error] [pid 3825715:tid 3825715] [client 91.247.159.126:20777] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp_6lCF0IIx06aFM5rdwAAAAw"]
[Thu Jul 30 16:13:03.294858 2026] [security2:error] [pid 3825715:tid 3825715] [client 91.247.159.126:20777] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtp_6lCF0IIx06aFM5rdwAAAAw"]
[Thu Jul 30 16:13:03.295194 2026] [security2:error] [pid 3825715:tid 3825715] [client 91.247.159.126:20777] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtp_6lCF0IIx06aFM5rdwAAAAw"]
[Thu Jul 30 16:13:03.352506 2026] [security2:error] [pid 3822210:tid 3822210] [client 85.208.96.201:52366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3726.0/prev_next,prev.html"] [unique_id "amtp_z-7zh5rxBQgVH6yUwAAABE"]
[Thu Jul 30 16:13:04.090594 2026] [ssl:error] [pid 3824945:tid 3824945] (70014)End of file found: [client 216.73.216.199:39497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:04.476709 2026] [autoindex:error] [pid 3810709:tid 3810709] [client 78.159.206.165:47069] AH01276: Cannot serve directory /home/winterb/public_html/drupal0/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:13:04.587353 2026] [ssl:error] [pid 3819414:tid 3819414] (70014)End of file found: [client 216.73.216.199:64643] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:05.390509 2026] [ssl:error] [pid 3791554:tid 3791554] (EAI 2)Name or service not known: [client 144.76.19.72:55960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:05.390539 2026] [ssl:error] [pid 3791554:tid 3791554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:05.443628 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:55970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:05.443658 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:05.633733 2026] [access_compat:error] [pid 3815948:tid 3815948] [client 115.96.93.224:64374] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:06.114692 2026] [access_compat:error] [pid 3822273:tid 3822273] [client 45.158.164.139:58368] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:13:06.115156 2026] [security2:error] [pid 3810709:tid 3810709] [client 85.208.96.212:35012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,884.0/prev_next,next.html"] [unique_id "amtqAreJ_N3Kr5dqs7LVpQAAABo"]
[Thu Jul 30 16:13:06.908424 2026] [security2:error] [pid 3822210:tid 3822210] [client 54.197.114.76:38770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/schools-librarians/articles/chatterbooks-chatter-with-tom-palmer/"] [unique_id "amtqAj-7zh5rxBQgVH6yVgAAABE"]
[Thu Jul 30 16:13:07.190165 2026] [security2:error] [pid 3825914:tid 3825914] [client 45.172.114.54:47936] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqAydup715tS2WKfnvFgAAACY"]
[Thu Jul 30 16:13:07.190223 2026] [security2:error] [pid 3825914:tid 3825914] [client 45.172.114.54:47936] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqAydup715tS2WKfnvFgAAACY"]
[Thu Jul 30 16:13:07.190569 2026] [security2:error] [pid 3825914:tid 3825914] [client 45.172.114.54:47936] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqAydup715tS2WKfnvFgAAACY"]
[Thu Jul 30 16:13:08.498842 2026] [ssl:error] [pid 3813596:tid 3813596] (EAI 2)Name or service not known: [client 144.76.19.72:55974] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:08.498875 2026] [ssl:error] [pid 3813596:tid 3813596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:08.554795 2026] [ssl:error] [pid 3810803:tid 3810803] (EAI 2)Name or service not known: [client 144.76.19.72:55980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:08.554825 2026] [ssl:error] [pid 3810803:tid 3810803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:08.784529 2026] [security2:error] [pid 3822273:tid 3822273] [client 43.157.82.252:45268] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtqBAczzfdAEJlCeeNvpgAAABc"], referer: http://banskotransfer.com
[Thu Jul 30 16:13:09.451490 2026] [security2:error] [pid 3810803:tid 3810803] [client 43.157.82.252:57766] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.banskoexpress.com"] [uri "/"] [unique_id "amtqBdyewqKdMoEiF_n8lwAAACw"], referer: http://www.banskoexpress.com
[Thu Jul 30 16:13:10.123077 2026] [ssl:error] [pid 3815917:tid 3815917] (70014)End of file found: [client 216.73.216.199:27036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:10.297860 2026] [security2:error] [pid 3805510:tid 3805510] [client 114.119.155.144:21011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/series/the-mission-of-god/"] [unique_id "amtqBqfz92rYUtXcKms8vAAAAAU"], referer: http://www.erskinenazarene.co.uk/sermons/jesus-and-the-mission-of-god/
[Thu Jul 30 16:13:10.311880 2026] [lsapi:warn] [pid 3821418:tid 3821418] [client 90.213.83.66:1602] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/?utm_source=chatgpt.com
[Thu Jul 30 16:13:10.311923 2026] [lsapi:warn] [pid 3821418:tid 3821418] [client 90.213.83.66:1602] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/?utm_source=chatgpt.com
[Thu Jul 30 16:13:10.844537 2026] [security2:error] [pid 3817209:tid 3817209] [client 54.235.172.108:4877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/unsubscribe"] [unique_id "amtqBsmkwWp42uHBpj2_2AAAABs"]
[Thu Jul 30 16:13:10.972554 2026] [cgi:error] [pid 3819917:tid 3819917] [client 181.20.65.252:40064] AH02812: stderr from /home/winterb/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:13:11.612574 2026] [ssl:error] [pid 3823297:tid 3823297] (EAI 2)Name or service not known: [client 144.76.19.72:54828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:11.612604 2026] [ssl:error] [pid 3823297:tid 3823297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:11.668754 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:54840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:11.668780 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:11.772173 2026] [access_compat:error] [pid 3805510:tid 3805510] [client 45.158.164.139:38776] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:13:11.817387 2026] [security2:error] [pid 3823297:tid 3823297] [client 114.119.155.144:21013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/series/the-mission-of-god/"] [unique_id "amtqB3v2VXDeXprZmeciRAAAADQ"], referer: http://www.erskinenazarene.co.uk/sermons/jesus-and-the-mission-of-god/
[Thu Jul 30 16:13:11.868150 2026] [security2:error] [pid 3817804:tid 3817804] [client 54.235.172.108:15396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/unsubscribe/"] [unique_id "amtqB6pSnoCYPIaYqa-TNAAAACk"]
[Thu Jul 30 16:13:12.565684 2026] [security2:error] [pid 3822505:tid 3822505] [client 27.59.110.68:59738] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqCKKELpdSGDCYasb_-wAAAB0"]
[Thu Jul 30 16:13:12.565730 2026] [security2:error] [pid 3822505:tid 3822505] [client 27.59.110.68:59738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqCKKELpdSGDCYasb_-wAAAB0"]
[Thu Jul 30 16:13:12.565966 2026] [security2:error] [pid 3822505:tid 3822505] [client 27.59.110.68:59738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqCKKELpdSGDCYasb_-wAAAB0"]
[Thu Jul 30 16:13:12.858386 2026] [security2:error] [pid 3825008:tid 3825008] [client 43.165.126.130:43668] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/admin/"] [unique_id "amtqCPz2PeS9nyyUj0rO8AAAABk"]
[Thu Jul 30 16:13:13.323906 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:50549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:13.922261 2026] [ssl:error] [pid 3825009:tid 3825009] (70014)End of file found: [client 216.73.216.199:12852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:14.723413 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:54856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:14.723450 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:14.777394 2026] [ssl:error] [pid 3809084:tid 3809084] (EAI 2)Name or service not known: [client 144.76.19.72:54858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:14.777420 2026] [ssl:error] [pid 3809084:tid 3809084] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:16.102651 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 115.96.93.224:64906] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:16.689395 2026] [security2:error] [pid 3816648:tid 3816648] [client 100.24.167.60:19557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/dday-dog/"] [unique_id "amtqDHenrmnGq47AqhkHmwAAAAY"]
[Thu Jul 30 16:13:17.277093 2026] [ssl:error] [pid 3825010:tid 3825010] (70014)End of file found: [client 216.73.216.199:38607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:17.900376 2026] [ssl:error] [pid 3791554:tid 3791554] (EAI 2)Name or service not known: [client 144.76.19.72:54872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:17.900414 2026] [ssl:error] [pid 3791554:tid 3791554] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:17.954631 2026] [ssl:error] [pid 3815917:tid 3815917] (EAI 2)Name or service not known: [client 144.76.19.72:54876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:17.954657 2026] [ssl:error] [pid 3815917:tid 3815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:18.134450 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 90.213.83.66:1583] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 16:13:18.134509 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 90.213.83.66:1583] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: https://brodie-engineering.co.uk/careers/
[Thu Jul 30 16:13:18.788619 2026] [security2:error] [pid 3822505:tid 3822505] [client 3.213.85.234:9351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/"] [unique_id "amtqDqKELpdSGDCYasYAAQAAAB0"]
[Thu Jul 30 16:13:19.403749 2026] [ssl:error] [pid 3816905:tid 3816905] (70014)End of file found: [client 216.73.216.199:31382] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:20.607384 2026] [ssl:error] [pid 3825716:tid 3825716] (70014)End of file found: [client 216.73.216.199:10277] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:21.009107 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:42724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:21.009141 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:21.064778 2026] [ssl:error] [pid 3825676:tid 3825676] (EAI 2)Name or service not known: [client 144.76.19.72:42740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:21.064810 2026] [ssl:error] [pid 3825676:tid 3825676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:22.193161 2026] [access_compat:error] [pid 3817503:tid 3817503] [client 115.96.93.224:65236] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:22.310634 2026] [security2:error] [pid 3822000:tid 3822000] [client 43.165.7.135:45792] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.newtronicmedia.com"] [uri "/"] [unique_id "amtqEoygXVUo36wMlHFdrgAAAA8"]
[Thu Jul 30 16:13:24.118521 2026] [ssl:error] [pid 3824976:tid 3824976] (EAI 2)Name or service not known: [client 144.76.19.72:42744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:24.118562 2026] [ssl:error] [pid 3824976:tid 3824976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:24.176480 2026] [ssl:error] [pid 3825676:tid 3825676] (EAI 2)Name or service not known: [client 144.76.19.72:42754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:24.176517 2026] [ssl:error] [pid 3825676:tid 3825676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:25.211961 2026] [ssl:error] [pid 3803353:tid 3803353] (70014)End of file found: [client 216.73.216.199:36192] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:25.809425 2026] [ssl:error] [pid 3825676:tid 3825676] (70014)End of file found: [client 216.73.216.199:57769] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:26.659551 2026] [access_compat:error] [pid 3815917:tid 3815917] [client 115.96.93.224:65450] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:27.030773 2026] [ssl:error] [pid 3819413:tid 3819413] (70014)End of file found: [client 216.73.216.199:47088] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:27.234494 2026] [ssl:error] [pid 3815163:tid 3815163] (EAI 2)Name or service not known: [client 144.76.19.72:42756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:27.234529 2026] [ssl:error] [pid 3815163:tid 3815163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:27.290784 2026] [ssl:error] [pid 3824976:tid 3824976] (EAI 2)Name or service not known: [client 144.76.19.72:42760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:27.290815 2026] [ssl:error] [pid 3824976:tid 3824976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:29.603907 2026] [security2:error] [pid 3816648:tid 3816648] [client 43.163.112.239:48714] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amtqGXenrmnGq47AqhkHoQAAAAY"]
[Thu Jul 30 16:13:30.346207 2026] [ssl:error] [pid 3810709:tid 3810709] (EAI 2)Name or service not known: [client 144.76.19.72:35446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:30.346236 2026] [ssl:error] [pid 3810709:tid 3810709] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:30.398142 2026] [ssl:error] [pid 3824976:tid 3824976] (EAI 2)Name or service not known: [client 144.76.19.72:35462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:30.398174 2026] [ssl:error] [pid 3824976:tid 3824976] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:31.485170 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:31.485285 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:31.628072 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:31.628187 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:31.728342 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:31.728454 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:31.824356 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:31.824480 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.024445 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.024577 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.129303 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.129418 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.371877 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.371989 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.452131 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.452246 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.545994 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.546120 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.649337 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.649451 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.817592 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.817713 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:32.937848 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:32.937970 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:33.139190 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:33.139310 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:33.232608 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:33.232719 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:33.365513 2026] [security2:error] [pid 3821418:tid 3821418] [client 43.153.86.78:60670] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-sun.com"] [uri "/"] [unique_id "amtqHUXH8wQy6rHpsAXJVwAAAAo"]
[Thu Jul 30 16:13:33.451739 2026] [ssl:error] [pid 3815917:tid 3815917] (EAI 2)Name or service not known: [client 144.76.19.72:35468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:33.451765 2026] [ssl:error] [pid 3815917:tid 3815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:33.509178 2026] [ssl:error] [pid 3808974:tid 3808974] (EAI 2)Name or service not known: [client 144.76.19.72:35470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:33.509207 2026] [ssl:error] [pid 3808974:tid 3808974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:33.672536 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:33.672648 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:33.751278 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:33.751396 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:33.828141 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:33.828254 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:33.917538 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:33.917649 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.023161 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.023290 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.136591 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.136702 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.233891 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.234002 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.335985 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.336107 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.451420 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.451533 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.567964 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.568082 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.649020 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.649139 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:34.765483 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:34.765595 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:35.091251 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:35.091388 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:35.168686 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:35.168804 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:35.836338 2026] [ssl:error] [pid 3822505:tid 3822505] (70014)End of file found: [client 216.73.216.199:1116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:36.244744 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:36.244859 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:36.317341 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:41130] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:36.356619 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:36.356731 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:36.446660 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:36.446775 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:36.552790 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:36.552904 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:36.562395 2026] [ssl:error] [pid 3816905:tid 3816905] (EAI 2)Name or service not known: [client 144.76.19.72:35486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:36.562421 2026] [ssl:error] [pid 3816905:tid 3816905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:36.618368 2026] [ssl:error] [pid 3827095:tid 3827095] (EAI 2)Name or service not known: [client 144.76.19.72:35490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:36.618396 2026] [ssl:error] [pid 3827095:tid 3827095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:36.632834 2026] [ssl:error] [pid 3825914:tid 3825914] (70014)End of file found: [client 216.73.216.199:44873] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:36.642397 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:36.642507 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:37.207360 2026] [access_compat:error] [pid 3823185:tid 3823185] [client 115.96.93.224:49607] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:37.789414 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:37.789530 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:37.920482 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:37.920594 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.038679 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.038790 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.137678 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.137789 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.313009 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.313134 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.512886 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.513008 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.619175 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.619292 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.720542 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.720664 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.824839 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.824950 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:38.913396 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:38.913508 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:39.186842 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:39.186957 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:39.263808 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:39.263921 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:39.349315 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:39.349438 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:39.426608 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:39.426724 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:39.519189 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:39.519302 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:39.676565 2026] [ssl:error] [pid 3826977:tid 3826977] (EAI 2)Name or service not known: [client 144.76.19.72:58604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:39.676609 2026] [ssl:error] [pid 3826977:tid 3826977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:39.732848 2026] [ssl:error] [pid 3816648:tid 3816648] (EAI 2)Name or service not known: [client 144.76.19.72:58618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:39.732882 2026] [ssl:error] [pid 3816648:tid 3816648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:39.799482 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:39.799601 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:40.102461 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:40.102577 2026] [cgi:error] [pid 3815948:tid 3815948] [client 4.184.185.91:16894] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:41.161623 2026] [ssl:error] [pid 3823297:tid 3823297] (70014)End of file found: [client 216.73.216.199:63173] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:41.259151 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:41.259275 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:41.526010 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:41.526131 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:41.623345 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:41.623465 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:41.723773 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:41.723891 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:41.755499 2026] [ssl:error] [pid 3827503:tid 3827503] (70014)End of file found: [client 216.73.216.199:24953] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:41.841344 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:41.841461 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:41.949012 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden
[Thu Jul 30 16:13:41.949139 2026] [cgi:error] [pid 3824945:tid 3824945] [client 4.184.185.91:16769] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157.
[Thu Jul 30 16:13:42.072148 2026] [ssl:error] [pid 3825716:tid 3825716] (70014)End of file found: [client 216.73.216.199:4844] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:42.788791 2026] [ssl:error] [pid 3825009:tid 3825009] (EAI 2)Name or service not known: [client 144.76.19.72:58622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:42.788834 2026] [ssl:error] [pid 3825009:tid 3825009] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:42.848485 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:58632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:42.848519 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:43.293242 2026] [access_compat:error] [pid 3816648:tid 3816648] [client 115.96.93.224:49942] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:44.361027 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:1989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:45.906397 2026] [ssl:error] [pid 3822505:tid 3822505] (EAI 2)Name or service not known: [client 144.76.19.72:58634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:45.906431 2026] [ssl:error] [pid 3822505:tid 3822505] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:45.960611 2026] [ssl:error] [pid 3827559:tid 3827559] (EAI 2)Name or service not known: [client 144.76.19.72:58640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:45.960641 2026] [ssl:error] [pid 3827559:tid 3827559] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:46.379677 2026] [authz_core:error] [pid 3823827:tid 3823827] [client 66.249.66.33:64809] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:13:46.382414 2026] [authz_core:error] [pid 3823827:tid 3823827] [client 66.249.66.33:64809] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:13:47.073365 2026] [core:error] [pid 3802791:tid 3802791] (13)Permission denied: [client 216.73.216.199:19261] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:53/subsystem/ttyS3/close_delay
[Thu Jul 30 16:13:47.762253 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 115.96.93.224:50147] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:49.069486 2026] [ssl:error] [pid 3822273:tid 3822273] (EAI 2)Name or service not known: [client 144.76.19.72:58646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:49.069521 2026] [ssl:error] [pid 3822273:tid 3822273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:49.125928 2026] [ssl:error] [pid 3823297:tid 3823297] (EAI 2)Name or service not known: [client 144.76.19.72:58652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:49.125964 2026] [ssl:error] [pid 3823297:tid 3823297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:49.781340 2026] [ssl:error] [pid 3802791:tid 3802791] (70014)End of file found: [client 216.73.216.199:19261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:50.992875 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:5466] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:51.487405 2026] [core:error] [pid 3827503:tid 3827503] (13)Permission denied: [client 216.73.216.199:1712] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/filp/slabs_cpu_partial
[Thu Jul 30 16:13:52.177599 2026] [ssl:error] [pid 3827560:tid 3827560] (EAI 2)Name or service not known: [client 144.76.19.72:54696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:52.177636 2026] [ssl:error] [pid 3827560:tid 3827560] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:52.229767 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:54708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:52.229818 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:52.832033 2026] [core:crit] [pid 3823185:tid 3823185] (13)Permission denied: [client 85.11.167.118:50220] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 16:13:52.876551 2026] [core:error] [pid 3816905:tid 3816905] [client 85.11.167.118:50223] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:13:52.921015 2026] [core:error] [pid 3824945:tid 3824945] [client 85.11.167.118:54424] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:13:53.895855 2026] [security2:error] [pid 3810803:tid 3810803] [client 85.208.96.212:16966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/port-authority-bus-terminal-to-woodbury-common-schedule"] [unique_id "amtqMdyewqKdMoEiF_n9JwAAACw"]
[Thu Jul 30 16:13:53.910102 2026] [access_compat:error] [pid 3821418:tid 3821418] [client 115.96.93.224:50487] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:53.997811 2026] [security2:error] [pid 3825716:tid 3825716] [client 43.130.26.3:40462] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.curvmed.com"] [uri "/"] [unique_id "amtqMVYUVbSLUW_QQ3lTRwAAABA"]
[Thu Jul 30 16:13:54.004448 2026] [ssl:error] [pid 3827503:tid 3827503] (70014)End of file found: [client 216.73.216.199:1712] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:55.326171 2026] [ssl:error] [pid 3816905:tid 3816905] (EAI 2)Name or service not known: [client 144.76.19.72:54712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:55.326211 2026] [ssl:error] [pid 3816905:tid 3816905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:55.382495 2026] [ssl:error] [pid 3815163:tid 3815163] (EAI 2)Name or service not known: [client 144.76.19.72:54720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:55.382530 2026] [ssl:error] [pid 3815163:tid 3815163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:57.676412 2026] [security2:error] [pid 3816905:tid 3816905] [client 5.161.62.209:22222] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "craft-buddies.co.uk"] [uri "/.env"] [unique_id "amtqNTCfOThIpmopqstMzgAAABM"]
[Thu Jul 30 16:13:57.676630 2026] [security2:error] [pid 3816905:tid 3816905] [client 5.161.62.209:22222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "craft-buddies.co.uk"] [uri "/.env"] [unique_id "amtqNTCfOThIpmopqstMzgAAABM"]
[Thu Jul 30 16:13:57.676860 2026] [security2:error] [pid 3816905:tid 3816905] [client 5.161.62.209:22222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "craft-buddies.co.uk"] [uri "/.env"] [unique_id "amtqNTCfOThIpmopqstMzgAAABM"]
[Thu Jul 30 16:13:58.213194 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:2795] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:13:58.233941 2026] [access_compat:error] [pid 3823297:tid 3823297] [client 115.96.93.224:50689] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:13:58.438676 2026] [ssl:error] [pid 3823185:tid 3823185] (EAI 2)Name or service not known: [client 144.76.19.72:54730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:58.438710 2026] [ssl:error] [pid 3823185:tid 3823185] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:58.496799 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:54736] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:13:58.496834 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:13:58.515816 2026] [ssl:error] [pid 3810803:tid 3810803] (70014)End of file found: [client 216.73.216.199:9716] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:00.025775 2026] [ssl:error] [pid 3827559:tid 3827559] (70014)End of file found: [client 216.73.216.199:24566] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:00.036859 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:00.147618 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/php8.php
[Thu Jul 30 16:14:00.147671 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:00.315939 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/assets
[Thu Jul 30 16:14:00.451945 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lite.php
[Thu Jul 30 16:14:00.452009 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:00.562308 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/term.php
[Thu Jul 30 16:14:00.562387 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:00.730162 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/config.php
[Thu Jul 30 16:14:00.730230 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:00.842056 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:00.956821 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-good.php
[Thu Jul 30 16:14:00.956877 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:01.068492 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:01.179006 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/abcd.php
[Thu Jul 30 16:14:01.179064 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:01.291605 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 16:14:01.291665 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:01.460142 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/goods.php
[Thu Jul 30 16:14:01.460198 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:01.550545 2026] [ssl:error] [pid 3821945:tid 3821945] (EAI 2)Name or service not known: [client 144.76.19.72:22034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:01.550580 2026] [ssl:error] [pid 3821945:tid 3821945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:01.604828 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:22036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:01.604859 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:01.632866 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-access.php
[Thu Jul 30 16:14:01.632917 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:01.785388 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:01.899622 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/filemanager.php
[Thu Jul 30 16:14:01.899676 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:02.070029 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:02.183714 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bthil.php
[Thu Jul 30 16:14:02.183773 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:02.340163 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xmlrpc.php
[Thu Jul 30 16:14:02.340214 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:02.526469 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:02.636997 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cv.php
[Thu Jul 30 16:14:02.637090 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:02.705466 2026] [security2:error] [pid 3822000:tid 3822000] [client 43.136.86.241:59508] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.spampman.com"] [uri "/"] [unique_id "amtqOoygXVUo36wMlHFdvgAAAA8"]
[Thu Jul 30 16:14:02.755150 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:02.931596 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css.php
[Thu Jul 30 16:14:02.931658 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:03.117406 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:03.264688 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/core.php
[Thu Jul 30 16:14:03.264760 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:03.375103 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin
[Thu Jul 30 16:14:03.554560 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin
[Thu Jul 30 16:14:03.633824 2026] [ssl:error] [pid 3828404:tid 3828404] (70014)End of file found: [client 216.73.216.199:39121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:03.667571 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/storage
[Thu Jul 30 16:14:03.777807 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ahax.php
[Thu Jul 30 16:14:03.777866 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:03.891639 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zoom1.php
[Thu Jul 30 16:14:03.891696 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:04.024810 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/txets.php
[Thu Jul 30 16:14:04.024870 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:04.201600 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:04.236593 2026] [ssl:error] [pid 3816648:tid 3816648] (70014)End of file found: [client 216.73.216.199:38182] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:04.404454 2026] [security2:error] [pid 3822210:tid 3822210] [client 43.136.86.241:53762] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtqPD-7zh5rxBQgVH6yagAAABE"], referer: http://www.spampman.com
[Thu Jul 30 16:14:04.542467 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:04.660703 2026] [ssl:error] [pid 3822273:tid 3822273] (EAI 2)Name or service not known: [client 144.76.19.72:22050] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:04.660750 2026] [ssl:error] [pid 3822273:tid 3822273] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:04.684914 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:04.714545 2026] [ssl:error] [pid 3827503:tid 3827503] (EAI 2)Name or service not known: [client 144.76.19.72:22056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:04.714576 2026] [ssl:error] [pid 3827503:tid 3827503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:04.816402 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:04.998533 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:05.147386 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/radio.php
[Thu Jul 30 16:14:05.147448 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:05.257643 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/item.php
[Thu Jul 30 16:14:05.257699 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:05.340365 2026] [ssl:error] [pid 3819918:tid 3819918] (70014)End of file found: [client 216.73.216.199:9957] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:05.368178 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/t.php
[Thu Jul 30 16:14:05.368230 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:05.478564 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/i.php
[Thu Jul 30 16:14:05.478620 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:05.588581 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/deepseek_d.php
[Thu Jul 30 16:14:05.588636 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:05.699404 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:05.809599 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/acme-challenge/file.php
[Thu Jul 30 16:14:05.809657 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:06.003660 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:06.114991 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:06.232180 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/assets
[Thu Jul 30 16:14:06.342427 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bgymj.php
[Thu Jul 30 16:14:06.342480 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:06.478502 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/modules/mod_footer/tmpl/index.php
[Thu Jul 30 16:14:06.478568 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:06.591600 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images/
[Thu Jul 30 16:14:06.762579 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-load.php
[Thu Jul 30 16:14:06.762633 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:06.975572 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:07.160114 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a.php
[Thu Jul 30 16:14:07.160174 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:07.270427 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/u.php
[Thu Jul 30 16:14:07.270484 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:07.433743 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/r.php
[Thu Jul 30 16:14:07.433799 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:07.545915 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blog.php
[Thu Jul 30 16:14:07.545978 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:07.658641 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xxx.php
[Thu Jul 30 16:14:07.658705 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:07.771531 2026] [ssl:error] [pid 3816905:tid 3816905] (EAI 2)Name or service not known: [client 144.76.19.72:22072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:07.771562 2026] [ssl:error] [pid 3816905:tid 3816905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:07.827167 2026] [ssl:error] [pid 3819917:tid 3819917] (EAI 2)Name or service not known: [client 144.76.19.72:22086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:07.827196 2026] [ssl:error] [pid 3819917:tid 3819917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:08.013256 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/randkeyword.PhP7
[Thu Jul 30 16:14:08.013336 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:08.216856 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/vendor
[Thu Jul 30 16:14:08.327400 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/tool.php
[Thu Jul 30 16:14:08.327460 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:08.521720 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content.php
[Thu Jul 30 16:14:08.521780 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:08.664574 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/k.php
[Thu Jul 30 16:14:08.664637 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:08.775225 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/root.php
[Thu Jul 30 16:14:08.775283 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:08.844703 2026] [access_compat:error] [pid 3825010:tid 3825010] [client 115.96.93.224:51233] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:14:08.953659 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ws.php
[Thu Jul 30 16:14:08.953738 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:09.064336 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/p.php
[Thu Jul 30 16:14:09.064403 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:09.174615 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/elp.php
[Thu Jul 30 16:14:09.174676 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:09.321025 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a1.php
[Thu Jul 30 16:14:09.321095 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:09.322741 2026] [access_compat:error] [pid 3827560:tid 3827560] [client 45.158.164.139:51858] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:14:09.354118 2026] [ssl:error] [pid 3817503:tid 3817503] (70014)End of file found: [client 216.73.216.199:22155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:09.532749 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:09.647143 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alfa-rex.php7
[Thu Jul 30 16:14:09.647204 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:09.757226 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:09.924849 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/install.php
[Thu Jul 30 16:14:09.924911 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:10.037271 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:10.189025 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/upload.php
[Thu Jul 30 16:14:10.189100 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:10.350055 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:10.460579 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:10.679497 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:10.797085 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/files.php
[Thu Jul 30 16:14:10.797146 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:10.883769 2026] [ssl:error] [pid 3827094:tid 3827094] (EAI 2)Name or service not known: [client 144.76.19.72:43018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:10.883806 2026] [ssl:error] [pid 3827094:tid 3827094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:10.941747 2026] [ssl:error] [pid 3819918:tid 3819918] (EAI 2)Name or service not known: [client 144.76.19.72:43028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:10.941788 2026] [ssl:error] [pid 3819918:tid 3819918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:10.958869 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/o.php
[Thu Jul 30 16:14:10.958928 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:11.070017 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file2.php
[Thu Jul 30 16:14:11.070092 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:11.180155 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/gecko-litespeed.php
[Thu Jul 30 16:14:11.180209 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:11.644402 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xda.php
[Thu Jul 30 16:14:11.644460 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:11.754493 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/theme.php
[Thu Jul 30 16:14:11.754550 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:11.864733 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 16:14:11.864806 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:11.975680 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/news.php
[Thu Jul 30 16:14:11.975741 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:12.167740 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about
[Thu Jul 30 16:14:12.346974 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:12.459223 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:12.640804 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:12.787960 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/lock360.php
[Thu Jul 30 16:14:12.788016 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:12.898262 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-conflg.php
[Thu Jul 30 16:14:12.898316 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:13.039486 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/123.php
[Thu Jul 30 16:14:13.039553 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:13.150592 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/yanz.php
[Thu Jul 30 16:14:13.150648 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:13.305765 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/autoload_classmap.php
[Thu Jul 30 16:14:13.305824 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:13.348690 2026] [ssl:error] [pid 3816648:tid 3816648] (70014)End of file found: [client 216.73.216.199:10358] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:13.417660 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bi.php
[Thu Jul 30 16:14:13.417719 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:13.851659 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cc.php
[Thu Jul 30 16:14:13.851720 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:13.999614 2026] [ssl:error] [pid 3825716:tid 3825716] (EAI 2)Name or service not known: [client 144.76.19.72:43036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:13.999654 2026] [ssl:error] [pid 3825716:tid 3825716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:14.038229 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/files
[Thu Jul 30 16:14:14.051582 2026] [ssl:error] [pid 3822506:tid 3822506] (EAI 2)Name or service not known: [client 144.76.19.72:43038] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:14.051616 2026] [ssl:error] [pid 3822506:tid 3822506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:14.203634 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php7
[Thu Jul 30 16:14:14.203692 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:14.351612 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/disagraeosc.php
[Thu Jul 30 16:14:14.351671 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:14.461660 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-logs.php
[Thu Jul 30 16:14:14.461715 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:14.619973 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:14.685198 2026] [ssl:error] [pid 3819917:tid 3819917] (70014)End of file found: [client 216.73.216.199:3178] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:14.730746 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/system_log.php
[Thu Jul 30 16:14:14.730796 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:14.841144 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/24.php
[Thu Jul 30 16:14:14.841212 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:14.952052 2026] [access_compat:error] [pid 3825715:tid 3825715] [client 172.202.44.182:21413] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:15.191553 2026] [ssl:error] [pid 3828183:tid 3828183] (70014)End of file found: [client 216.73.216.199:13563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:15.492629 2026] [access_compat:error] [pid 3827095:tid 3827095] [client 115.96.93.224:51592] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:14:17.105082 2026] [ssl:error] [pid 3827095:tid 3827095] (EAI 2)Name or service not known: [client 144.76.19.72:43044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:17.105119 2026] [ssl:error] [pid 3827095:tid 3827095] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:17.164162 2026] [ssl:error] [pid 3817503:tid 3817503] (EAI 2)Name or service not known: [client 144.76.19.72:43054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:17.164202 2026] [ssl:error] [pid 3817503:tid 3817503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:17.866665 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:18.032360 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin
[Thu Jul 30 16:14:18.148255 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:18.283948 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:18.287770 2026] [authz_core:error] [pid 3813596:tid 3813596] [client 169.58.39.193:60358] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 16:14:18.399902 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/num.php
[Thu Jul 30 16:14:18.399959 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:18.548139 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:18.663901 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:18.805483 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:39677] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:18.823151 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:19.255621 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:19.388596 2026] [access_compat:error] [pid 3816648:tid 3816648] [client 115.96.93.224:51775] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:14:19.448853 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gifclass.php
[Thu Jul 30 16:14:19.448904 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:19.564793 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:19.740563 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:14:19.856681 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/css
[Thu Jul 30 16:14:20.035742 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-cron.php
[Thu Jul 30 16:14:20.035794 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:20.151665 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-block.php
[Thu Jul 30 16:14:20.151713 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:14:20.269651 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:14:20.337367 2026] [ssl:error] [pid 3819918:tid 3819918] (EAI 2)Name or service not known: [client 144.76.19.72:25396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:20.337411 2026] [ssl:error] [pid 3819918:tid 3819918] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:20.391720 2026] [access_compat:error] [pid 3821945:tid 3821945] [client 172.202.44.182:21405] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:14:20.396509 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:25400] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:20.396536 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:21.305129 2026] [authz_core:error] [pid 3825676:tid 3825676] [client 169.58.39.193:61922] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 16:14:21.311523 2026] [core:error] [pid 3823959:tid 3823959] (13)Permission denied: [client 216.73.216.199:57696] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/subsystem/ttyS3/close_delay
[Thu Jul 30 16:14:21.617356 2026] [ssl:error] [pid 3823959:tid 3823959] (70014)End of file found: [client 216.73.216.199:57696] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:21.630381 2026] [access_compat:error] [pid 3825009:tid 3825009] [client 45.158.164.139:57586] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:14:23.370423 2026] [security2:error] [pid 3825009:tid 3825009] [client 74.7.243.192:37952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "evtech.uk"] [uri "/"] [unique_id "amtqTyoEV8Is60D2W7P1IAAAACA"], referer: https://sergechel.info
[Thu Jul 30 16:14:23.454403 2026] [ssl:error] [pid 3810803:tid 3810803] (EAI 2)Name or service not known: [client 144.76.19.72:25416] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:23.454428 2026] [ssl:error] [pid 3810803:tid 3810803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:23.508613 2026] [ssl:error] [pid 3810803:tid 3810803] (EAI 2)Name or service not known: [client 144.76.19.72:25420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:23.508636 2026] [ssl:error] [pid 3810803:tid 3810803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:25.445193 2026] [access_compat:error] [pid 3829563:tid 3829563] [client 115.96.93.224:52107] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:14:25.593702 2026] [authz_core:error] [pid 3829567:tid 3829567] [client 169.58.39.193:65187] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 16:14:25.825349 2026] [ssl:error] [pid 3829565:tid 3829565] (70014)End of file found: [client 216.73.216.199:48820] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:26.149598 2026] [authz_core:error] [pid 3815917:tid 3815917] [client 40.77.167.47:42977] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 16:14:26.150349 2026] [authz_core:error] [pid 3815917:tid 3815917] [client 40.77.167.47:42977] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 16:14:26.563557 2026] [ssl:error] [pid 3823297:tid 3823297] (EAI 2)Name or service not known: [client 144.76.19.72:25428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:26.563593 2026] [ssl:error] [pid 3823297:tid 3823297] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:26.619436 2026] [ssl:error] [pid 3827503:tid 3827503] (EAI 2)Name or service not known: [client 144.76.19.72:25438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:26.619464 2026] [ssl:error] [pid 3827503:tid 3827503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:28.534704 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:18972] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:28.852755 2026] [authz_core:error] [pid 3829506:tid 3829506] [client 169.58.39.193:51071] AH01630: client denied by server configuration: /home/dawnrobi/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 16:14:29.136899 2026] [ssl:error] [pid 3817503:tid 3817503] (70014)End of file found: [client 216.73.216.199:25477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:29.672961 2026] [ssl:error] [pid 3825010:tid 3825010] (EAI 2)Name or service not known: [client 144.76.19.72:31156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:29.672993 2026] [ssl:error] [pid 3825010:tid 3825010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:29.726243 2026] [ssl:error] [pid 3817209:tid 3817209] (EAI 2)Name or service not known: [client 144.76.19.72:31166] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:29.726288 2026] [ssl:error] [pid 3817209:tid 3817209] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:29.935569 2026] [access_compat:error] [pid 3815043:tid 3815043] [client 115.96.93.224:52315] AH01797: client denied by server configuration: /home/thepryor/public_html/xmlrpc.php
[Thu Jul 30 16:14:31.194156 2026] [security2:error] [pid 3826977:tid 3826977] [client 8.216.47.97:21579] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqVwn0MU2CFXKITmg23AAAABQ"]
[Thu Jul 30 16:14:31.194208 2026] [security2:error] [pid 3826977:tid 3826977] [client 8.216.47.97:21579] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqVwn0MU2CFXKITmg23AAAABQ"]
[Thu Jul 30 16:14:31.194468 2026] [security2:error] [pid 3826977:tid 3826977] [client 8.216.47.97:21579] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqVwn0MU2CFXKITmg23AAAABQ"]
[Thu Jul 30 16:14:31.471796 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/011i.php
[Thu Jul 30 16:14:31.471855 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.502738 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/03a005685d.php
[Thu Jul 30 16:14:31.502793 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.568650 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.php
[Thu Jul 30 16:14:31.568704 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.605842 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/404.php
[Thu Jul 30 16:14:31.605933 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.678815 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/aa.php
[Thu Jul 30 16:14:31.678875 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.714059 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/aafewc0k.php
[Thu Jul 30 16:14:31.714127 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.836312 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/abcd.php
[Thu Jul 30 16:14:31.836377 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.850021 2026] [ssl:error] [pid 3825010:tid 3825010] (70014)End of file found: [client 216.73.216.199:49244] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:31.920369 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/about.php
[Thu Jul 30 16:14:31.920430 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.950733 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/admin.php
[Thu Jul 30 16:14:31.950788 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:31.987491 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/adminfuns.php
[Thu Jul 30 16:14:31.987547 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.017837 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/albin.php
[Thu Jul 30 16:14:32.017911 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.052944 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/amfsqvgv.php
[Thu Jul 30 16:14:32.052999 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.089152 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/ant.php
[Thu Jul 30 16:14:32.089240 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.159019 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/appreciators.php
[Thu Jul 30 16:14:32.159086 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.266470 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/archive.php
[Thu Jul 30 16:14:32.266529 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.370464 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/as.php
[Thu Jul 30 16:14:32.370526 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.472852 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/atomlib.php
[Thu Jul 30 16:14:32.472904 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.503739 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/autoload_classmap.php
[Thu Jul 30 16:14:32.503832 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.536042 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/bb.php
[Thu Jul 30 16:14:32.536150 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.575742 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/bnm.php
[Thu Jul 30 16:14:32.575815 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.712693 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/bootstrap.php
[Thu Jul 30 16:14:32.712782 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.745310 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/buy.php
[Thu Jul 30 16:14:32.745395 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.776028 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/chosen.php
[Thu Jul 30 16:14:32.776159 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.782603 2026] [ssl:error] [pid 3826977:tid 3826977] (EAI 2)Name or service not known: [client 144.76.19.72:31168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:32.782632 2026] [ssl:error] [pid 3826977:tid 3826977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:32.835507 2026] [ssl:error] [pid 3813596:tid 3813596] (EAI 2)Name or service not known: [client 144.76.19.72:31172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:32.835541 2026] [ssl:error] [pid 3813596:tid 3813596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:32.846234 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/class-wp-image.php
[Thu Jul 30 16:14:32.846338 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.877147 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/classsmtps.php
[Thu Jul 30 16:14:32.877232 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:32.994738 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/classwithtostring.php
[Thu Jul 30 16:14:32.994795 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.036312 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/config.php
[Thu Jul 30 16:14:33.036386 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.068815 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/core.php
[Thu Jul 30 16:14:33.068868 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.100462 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/css.php
[Thu Jul 30 16:14:33.100519 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.132758 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/database.php
[Thu Jul 30 16:14:33.132812 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.164343 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/db.php
[Thu Jul 30 16:14:33.164410 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.194976 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/default.php
[Thu Jul 30 16:14:33.195083 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.267714 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/dropdown.php
[Thu Jul 30 16:14:33.267769 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.394377 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/edit.php
[Thu Jul 30 16:14:33.394458 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.495909 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/f35.php
[Thu Jul 30 16:14:33.495992 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:33.530673 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/f7.php
[Thu Jul 30 16:14:33.530730 2026] [access_compat:error] [pid 3816905:tid 3816905] [client 20.100.187.246:48946] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.pronationft.com/403.shtml
[Thu Jul 30 16:14:34.514499 2026] [authz_core:error] [pid 3829568:tid 3829568] [client 66.249.66.34:59369] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:14:34.517164 2026] [authz_core:error] [pid 3829568:tid 3829568] [client 66.249.66.34:59369] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:14:34.770297 2026] [authz_core:error] [pid 3828404:tid 3828404] [client 66.249.66.34:65187] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:14:34.772961 2026] [authz_core:error] [pid 3828404:tid 3828404] [client 66.249.66.34:65187] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:14:34.963208 2026] [security2:error] [pid 3817503:tid 3817503] [client 181.51.91.45:7192] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqWuOm9JM-_D_Z31hhXAAAAB4"]
[Thu Jul 30 16:14:34.963273 2026] [security2:error] [pid 3817503:tid 3817503] [client 181.51.91.45:7192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqWuOm9JM-_D_Z31hhXAAAAB4"]
[Thu Jul 30 16:14:34.963551 2026] [security2:error] [pid 3817503:tid 3817503] [client 181.51.91.45:7192] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqWuOm9JM-_D_Z31hhXAAAAB4"]
[Thu Jul 30 16:14:35.123411 2026] [security2:error] [pid 3815917:tid 3815917] [client 114.119.142.20:40935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/prayre-holy-week/"] [unique_id "amtqW6_MmcbDxiZtD2aB3gAAAAM"], referer: http://www.erskinenazarene.co.uk/prayre-holy-week/?instance_id=39456
[Thu Jul 30 16:14:35.892860 2026] [ssl:error] [pid 3825716:tid 3825716] (EAI 2)Name or service not known: [client 144.76.19.72:31178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:35.892898 2026] [ssl:error] [pid 3825716:tid 3825716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:35.949283 2026] [ssl:error] [pid 3827094:tid 3827094] (EAI 2)Name or service not known: [client 144.76.19.72:31194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:35.949310 2026] [ssl:error] [pid 3827094:tid 3827094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:36.838241 2026] [security2:error] [pid 3825716:tid 3825716] [client 114.119.142.20:40937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/prayre-holy-week/"] [unique_id "amtqXFYUVbSLUW_QQ3lTUgAAABA"], referer: http://www.erskinenazarene.co.uk/prayre-holy-week/?instance_id=39456
[Thu Jul 30 16:14:39.002564 2026] [ssl:error] [pid 3826977:tid 3826977] (EAI 2)Name or service not known: [client 144.76.19.72:31196] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:39.002598 2026] [ssl:error] [pid 3826977:tid 3826977] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:39.057044 2026] [ssl:error] [pid 3810803:tid 3810803] (EAI 2)Name or service not known: [client 144.76.19.72:31210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:39.057090 2026] [ssl:error] [pid 3810803:tid 3810803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:39.388415 2026] [security2:error] [pid 3806565:tid 3806565] [client 45.229.143.6:26157] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqX2YcSLiqiYycN-iRsAAAACg"]
[Thu Jul 30 16:14:39.388479 2026] [security2:error] [pid 3806565:tid 3806565] [client 45.229.143.6:26157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqX2YcSLiqiYycN-iRsAAAACg"]
[Thu Jul 30 16:14:39.388735 2026] [security2:error] [pid 3806565:tid 3806565] [client 45.229.143.6:26157] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqX2YcSLiqiYycN-iRsAAAACg"]
[Thu Jul 30 16:14:40.261171 2026] [authz_core:error] [pid 3830168:tid 3830168] [client 66.249.66.33:36754] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:14:40.263859 2026] [authz_core:error] [pid 3830168:tid 3830168] [client 66.249.66.33:36754] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:14:41.494432 2026] [ssl:error] [pid 3816648:tid 3816648] (70014)End of file found: [client 216.73.216.199:50944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:41.763074 2026] [authz_core:error] [pid 3822272:tid 3822272] [client 4.232.188.49:50128] AH01630: client denied by server configuration: /home/mjsser/public_html/wp-includes/Requests/error_log
[Thu Jul 30 16:14:41.793409 2026] [ssl:error] [pid 3829570:tid 3829570] (70014)End of file found: [client 216.73.216.199:6412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:42.114348 2026] [ssl:error] [pid 3828183:tid 3828183] (EAI 2)Name or service not known: [client 144.76.19.72:55764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:42.114383 2026] [ssl:error] [pid 3828183:tid 3828183] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:42.172618 2026] [ssl:error] [pid 3829506:tid 3829506] (EAI 2)Name or service not known: [client 144.76.19.72:55776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:42.172661 2026] [ssl:error] [pid 3829506:tid 3829506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:42.293505 2026] [ssl:error] [pid 3829567:tid 3829567] (70014)End of file found: [client 216.73.216.199:48888] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:45.227700 2026] [ssl:error] [pid 3813596:tid 3813596] (EAI 2)Name or service not known: [client 144.76.19.72:55790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:45.227737 2026] [ssl:error] [pid 3813596:tid 3813596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:45.280444 2026] [ssl:error] [pid 3819877:tid 3819877] (EAI 2)Name or service not known: [client 144.76.19.72:55806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:45.280476 2026] [ssl:error] [pid 3819877:tid 3819877] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:45.886963 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:45822] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:46.184225 2026] [core:error] [pid 3806565:tid 3806565] (13)Permission denied: [client 216.73.216.199:50584] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/unix_diag/sections/__bug_table
[Thu Jul 30 16:14:46.602571 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:50584] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:47.003949 2026] [authz_core:error] [pid 3825914:tid 3825914] [client 35.231.131.125:49850] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 16:14:47.231020 2026] [cgi:error] [pid 3825715:tid 3825715] [client 216.73.216.199:10642] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/lib/systemd/catalog/systemd.pl.catalog: suexec policy violation: see suexec log for more details
[Thu Jul 30 16:14:47.231078 2026] [cgi:error] [pid 3825715:tid 3825715] [client 216.73.216.199:10642] End of script output before headers: systemd.pl.catalog
[Thu Jul 30 16:14:47.703696 2026] [ssl:error] [pid 3825716:tid 3825716] (70014)End of file found: [client 216.73.216.199:9419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:47.979447 2026] [access_compat:error] [pid 3827503:tid 3827503] [client 54.82.68.177:59038] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/wp-content/2008/10/level-42-oxford-2.jpg
[Thu Jul 30 16:14:47.979550 2026] [access_compat:error] [pid 3827503:tid 3827503] [client 54.82.68.177:59038] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php
[Thu Jul 30 16:14:48.338992 2026] [ssl:error] [pid 3829567:tid 3829567] (EAI 2)Name or service not known: [client 144.76.19.72:55822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:48.339029 2026] [ssl:error] [pid 3829567:tid 3829567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:48.395553 2026] [ssl:error] [pid 3827094:tid 3827094] (EAI 2)Name or service not known: [client 144.76.19.72:55832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:48.395593 2026] [ssl:error] [pid 3827094:tid 3827094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:51.491182 2026] [ssl:error] [pid 3830223:tid 3830223] (EAI 2)Name or service not known: [client 144.76.19.72:32662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:51.491231 2026] [ssl:error] [pid 3830223:tid 3830223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:51.544874 2026] [ssl:error] [pid 3829506:tid 3829506] (EAI 2)Name or service not known: [client 144.76.19.72:32664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:51.544909 2026] [ssl:error] [pid 3829506:tid 3829506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:52.023541 2026] [security2:error] [pid 3827503:tid 3827503] [client 216.73.216.199:7201] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.all.def/imap.ini"] [unique_id "amtqbBK8jjdLQSCmHQhklAAAACQ"]
[Thu Jul 30 16:14:52.023854 2026] [security2:error] [pid 3827503:tid 3827503] [client 216.73.216.199:7201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.all.def/imap.ini"] [unique_id "amtqbBK8jjdLQSCmHQhklAAAACQ"]
[Thu Jul 30 16:14:52.024111 2026] [security2:error] [pid 3827503:tid 3827503] [client 216.73.216.199:7201] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.all.def/imap.ini"] [unique_id "amtqbBK8jjdLQSCmHQhklAAAACQ"]
[Thu Jul 30 16:14:52.230823 2026] [security2:error] [pid 3830223:tid 3830223] [client 51.68.111.240:31343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtqbLqA3sfbwmlt4yRyMQAAABY"]
[Thu Jul 30 16:14:52.325517 2026] [ssl:error] [pid 3827503:tid 3827503] (70014)End of file found: [client 216.73.216.199:7201] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:52.340279 2026] [security2:error] [pid 3828404:tid 3828404] [client 51.68.111.240:16705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtqbFUCE16_7_LmwXpgKwAAAAU"]
[Thu Jul 30 16:14:52.443653 2026] [security2:error] [pid 3827094:tid 3827094] [client 51.68.111.240:18161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "raidersofthegamecupboard.co.uk"] [uri "/robots.txt"] [unique_id "amtqbOlH1x2QmEibjhpZNAAAABk"]
[Thu Jul 30 16:14:52.813130 2026] [ssl:error] [pid 3830223:tid 3830223] (70014)End of file found: [client 216.73.216.199:38734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:53.538424 2026] [ssl:error] [pid 3829219:tid 3829219] (70014)End of file found: [client 216.73.216.199:3910] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:54.290907 2026] [security2:error] [pid 3823959:tid 3823959] [client 85.208.96.203:53900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/list-of-fmcg-companies-in-canada"] [unique_id "amtqbh4s9GhSvaHsZlRcKwAAAAI"]
[Thu Jul 30 16:14:54.602851 2026] [ssl:error] [pid 3825010:tid 3825010] (EAI 2)Name or service not known: [client 144.76.19.72:32678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:54.602888 2026] [ssl:error] [pid 3825010:tid 3825010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:54.658776 2026] [ssl:error] [pid 3827094:tid 3827094] (EAI 2)Name or service not known: [client 144.76.19.72:32694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:54.658827 2026] [ssl:error] [pid 3827094:tid 3827094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:57.642362 2026] [ssl:error] [pid 3815917:tid 3815917] (70014)End of file found: [client 216.73.216.199:1689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:57.716979 2026] [ssl:error] [pid 3830222:tid 3830222] (EAI 2)Name or service not known: [client 144.76.19.72:32728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:57.717020 2026] [ssl:error] [pid 3830222:tid 3830222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:57.771960 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:32734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:14:57.771997 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:14:58.961757 2026] [ssl:error] [pid 3829569:tid 3829569] (70014)End of file found: [client 216.73.216.199:22332] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:59.143108 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 94.154.43.183:31162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:14:59.143145 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 94.154.43.183:31162] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:14:59.460583 2026] [ssl:error] [pid 3821945:tid 3821945] (70014)End of file found: [client 216.73.216.199:38343] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:14:59.865861 2026] [authz_core:error] [pid 3808974:tid 3808974] [client 52.165.196.84:42986] AH01630: client denied by server configuration: /home/lukess/public_html/wp-content/error_log
[Thu Jul 30 16:15:00.824901 2026] [ssl:error] [pid 3815163:tid 3815163] (EAI 2)Name or service not known: [client 144.76.19.72:32410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:00.824928 2026] [ssl:error] [pid 3815163:tid 3815163] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:00.879168 2026] [ssl:error] [pid 3829506:tid 3829506] (EAI 2)Name or service not known: [client 144.76.19.72:32412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:00.879196 2026] [ssl:error] [pid 3829506:tid 3829506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:03.077474 2026] [ssl:error] [pid 3829570:tid 3829570] (70014)End of file found: [client 216.73.216.199:4945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:03.935821 2026] [ssl:error] [pid 3827094:tid 3827094] (EAI 2)Name or service not known: [client 144.76.19.72:32418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:03.935855 2026] [ssl:error] [pid 3827094:tid 3827094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:03.995765 2026] [ssl:error] [pid 3815917:tid 3815917] (EAI 2)Name or service not known: [client 144.76.19.72:32422] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:03.995809 2026] [ssl:error] [pid 3815917:tid 3815917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:04.690706 2026] [ssl:error] [pid 3830168:tid 3830168] (70014)End of file found: [client 216.73.216.199:6031] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:05.189054 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:58864] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:06.390931 2026] [security2:error] [pid 3828183:tid 3828183] [client 86.97.147.209:36790] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqepwoFYMf1GFhwyxtOgAAAAQ"]
[Thu Jul 30 16:15:06.390995 2026] [security2:error] [pid 3828183:tid 3828183] [client 86.97.147.209:36790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqepwoFYMf1GFhwyxtOgAAAAQ"]
[Thu Jul 30 16:15:06.391255 2026] [security2:error] [pid 3828183:tid 3828183] [client 86.97.147.209:36790] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqepwoFYMf1GFhwyxtOgAAAAQ"]
[Thu Jul 30 16:15:06.748657 2026] [security2:error] [pid 3827095:tid 3827095] [client 54.225.181.161:39819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "hbsanorth.co.uk"] [uri "/"] [unique_id "amtqetW-gfEuzhskNPi9VwAAAB8"]
[Thu Jul 30 16:15:07.050870 2026] [ssl:error] [pid 3823959:tid 3823959] (EAI 2)Name or service not known: [client 144.76.19.72:32426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:07.050904 2026] [ssl:error] [pid 3823959:tid 3823959] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:07.101796 2026] [ssl:error] [pid 3830223:tid 3830223] (EAI 2)Name or service not known: [client 144.76.19.72:32438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:07.101826 2026] [ssl:error] [pid 3830223:tid 3830223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:08.478311 2026] [security2:error] [pid 3830223:tid 3830223] [client 52.73.142.41:43679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.hbsanorth.co.uk"] [uri "/"] [unique_id "amtqfLqA3sfbwmlt4yRyNwAAABY"]
[Thu Jul 30 16:15:09.249640 2026] [cgi:error] [pid 3808974:tid 3808974] [client 52.165.196.84:42986] AH02811: stderr from /home/lukess/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 16:15:09.816448 2026] [ssl:error] [pid 3825676:tid 3825676] (70014)End of file found: [client 216.73.216.199:9499] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:10.154891 2026] [ssl:error] [pid 3830168:tid 3830168] (EAI 2)Name or service not known: [client 144.76.19.72:34984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:10.154922 2026] [ssl:error] [pid 3830168:tid 3830168] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:10.207176 2026] [ssl:error] [pid 3828404:tid 3828404] (EAI 2)Name or service not known: [client 144.76.19.72:34990] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:10.207208 2026] [ssl:error] [pid 3828404:tid 3828404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:10.306462 2026] [core:error] [pid 3806565:tid 3806565] (13)Permission denied: [client 216.73.216.199:16687] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/virtio_console/uevent
[Thu Jul 30 16:15:10.413887 2026] [security2:error] [pid 3806565:tid 3806565] [client 216.73.216.199:16687] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-latency-performance/tuned.conf"] [unique_id "amtqfmYcSLiqiYycN-iRvgAAACg"]
[Thu Jul 30 16:15:10.414202 2026] [security2:error] [pid 3806565:tid 3806565] [client 216.73.216.199:16687] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-latency-performance/tuned.conf"] [unique_id "amtqfmYcSLiqiYycN-iRvgAAACg"]
[Thu Jul 30 16:15:10.414431 2026] [security2:error] [pid 3806565:tid 3806565] [client 216.73.216.199:16687] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-latency-performance/tuned.conf"] [unique_id "amtqfmYcSLiqiYycN-iRvgAAACg"]
[Thu Jul 30 16:15:11.618281 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:16687] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:11.688026 2026] [security2:error] [pid 3827095:tid 3827095] [client 160.89.61.162:57519] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqf9W-gfEuzhskNPi9WwAAAB8"]
[Thu Jul 30 16:15:11.688118 2026] [security2:error] [pid 3827095:tid 3827095] [client 160.89.61.162:57519] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqf9W-gfEuzhskNPi9WwAAAB8"]
[Thu Jul 30 16:15:11.688493 2026] [security2:error] [pid 3827095:tid 3827095] [client 160.89.61.162:57519] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqf9W-gfEuzhskNPi9WwAAAB8"]
[Thu Jul 30 16:15:12.522360 2026] [ssl:error] [pid 3829569:tid 3829569] (70014)End of file found: [client 216.73.216.199:26995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:13.264331 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:35002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:13.264370 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:13.317381 2026] [ssl:error] [pid 3831599:tid 3831599] (EAI 2)Name or service not known: [client 144.76.19.72:35012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:13.317416 2026] [ssl:error] [pid 3831599:tid 3831599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:15.241336 2026] [ssl:error] [pid 3827094:tid 3827094] (70014)End of file found: [client 216.73.216.199:3952] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:16.009377 2026] [security2:error] [pid 3808974:tid 3808974] [client 205.164.151.34:32633] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqhJIl2Sq-0UoAwPk_RwAAACU"]
[Thu Jul 30 16:15:16.009425 2026] [security2:error] [pid 3808974:tid 3808974] [client 205.164.151.34:32633] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqhJIl2Sq-0UoAwPk_RwAAACU"]
[Thu Jul 30 16:15:16.009656 2026] [security2:error] [pid 3808974:tid 3808974] [client 205.164.151.34:32633] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtqhJIl2Sq-0UoAwPk_RwAAACU"]
[Thu Jul 30 16:15:16.416645 2026] [ssl:error] [pid 3831597:tid 3831597] (EAI 2)Name or service not known: [client 144.76.19.72:35020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:16.416695 2026] [ssl:error] [pid 3831597:tid 3831597] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:16.429162 2026] [ssl:error] [pid 3823959:tid 3823959] (70014)End of file found: [client 216.73.216.199:15907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:16.473298 2026] [ssl:error] [pid 3829434:tid 3829434] (EAI 2)Name or service not known: [client 144.76.19.72:35034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:16.473335 2026] [ssl:error] [pid 3829434:tid 3829434] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:17.146420 2026] [ssl:error] [pid 3806565:tid 3806565] (70014)End of file found: [client 216.73.216.199:1725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:17.255446 2026] [security2:error] [pid 3803353:tid 3803353] [client 43.159.143.187:55534] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "healthkinesiologylondon.co.uk"] [uri "/"] [unique_id "amtqhVBml_c8fdH4lrNYPwAAAA0"]
[Thu Jul 30 16:15:18.050667 2026] [ssl:error] [pid 3829434:tid 3829434] (70014)End of file found: [client 216.73.216.199:53329] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:18.858929 2026] [security2:error] [pid 3827095:tid 3827095] [client 114.119.154.81:60641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "islay.me"] [uri "/robots.txt"] [unique_id "amtqhtW-gfEuzhskNPi9XgAAAB8"], referer: https://islay.me/robots.txt
[Thu Jul 30 16:15:18.902435 2026] [security2:error] [pid 3829506:tid 3829506] [client 43.159.143.187:57022] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/"] [unique_id "amtqhiUgiTDwZJqiYLbNhwAAAC0"], referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 16:15:18.904307 2026] [authz_core:error] [pid 3829506:tid 3829506] [client 43.159.143.187:57022] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 16:15:18.906999 2026] [authz_core:error] [pid 3829506:tid 3829506] [client 43.159.143.187:57022] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://healthkinesiologylondon.co.uk
[Thu Jul 30 16:15:19.572908 2026] [ssl:error] [pid 3829506:tid 3829506] (EAI 2)Name or service not known: [client 144.76.19.72:35108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:19.572947 2026] [ssl:error] [pid 3829506:tid 3829506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:19.627816 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:35114] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:19.627849 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:20.716623 2026] [security2:error] [pid 3828183:tid 3828183] [client 47.128.98.64:57032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/"] [unique_id "amtqiJwoFYMf1GFhwyxtPgAAAAQ"]
[Thu Jul 30 16:15:21.469333 2026] [security2:error] [pid 3831636:tid 3831636] [client 216.73.216.199:62333] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/basic.conf"] [unique_id "amtqiWFRdJpof-pMWZBUAAAAACE"]
[Thu Jul 30 16:15:21.469627 2026] [security2:error] [pid 3831636:tid 3831636] [client 216.73.216.199:62333] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/basic.conf"] [unique_id "amtqiWFRdJpof-pMWZBUAAAAACE"]
[Thu Jul 30 16:15:21.469838 2026] [security2:error] [pid 3831636:tid 3831636] [client 216.73.216.199:62333] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/cwd/lib/sysusers.d/basic.conf"] [unique_id "amtqiWFRdJpof-pMWZBUAAAAACE"]
[Thu Jul 30 16:15:22.458261 2026] [authz_core:error] [pid 3819413:tid 3819413] [client 66.249.66.33:44602] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:15:22.460924 2026] [authz_core:error] [pid 3819413:tid 3819413] [client 66.249.66.33:44602] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:15:22.745226 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:35126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:22.745262 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:22.802544 2026] [ssl:error] [pid 3831634:tid 3831634] (EAI 2)Name or service not known: [client 144.76.19.72:35142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:22.802574 2026] [ssl:error] [pid 3831634:tid 3831634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:23.607444 2026] [core:error] [pid 3831636:tid 3831636] (13)Permission denied: [client 216.73.216.199:62333] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu4/driver/cpu2/node0/compact
[Thu Jul 30 16:15:25.129124 2026] [ssl:error] [pid 3831636:tid 3831636] (70014)End of file found: [client 216.73.216.199:62333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:25.625465 2026] [core:error] [pid 3829570:tid 3829570] (13)Permission denied: [client 216.73.216.199:25747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/xt_LOG/uevent
[Thu Jul 30 16:15:25.731800 2026] [ssl:error] [pid 3829570:tid 3829570] (70014)End of file found: [client 216.73.216.199:25747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:26.217421 2026] [ssl:error] [pid 3806565:tid 3806565] (EAI 2)Name or service not known: [client 144.76.19.72:35148] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:26.217454 2026] [ssl:error] [pid 3806565:tid 3806565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:26.294593 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:35158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:26.294632 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:26.590478 2026] [security2:error] [pid 3829563:tid 3829563] [client 52.238.199.152:56990] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "blow-hairstudio.co.uk"] [uri "/wp-config.php"] [unique_id "amtqjujrseRLgrj7090j3gAAAC4"]
[Thu Jul 30 16:15:26.590755 2026] [security2:error] [pid 3829563:tid 3829563] [client 52.238.199.152:56990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "blow-hairstudio.co.uk"] [uri "/wp-config.php"] [unique_id "amtqjujrseRLgrj7090j3gAAAC4"]
[Thu Jul 30 16:15:26.979522 2026] [security2:error] [pid 3829563:tid 3829563] [client 52.238.199.152:56990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "blow-hairstudio.co.uk"] [uri "/index.php"] [unique_id "amtqjujrseRLgrj7090j3gAAAC4"]
[Thu Jul 30 16:15:28.457499 2026] [security2:error] [pid 3821945:tid 3821945] [client 216.73.216.199:28027] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/dom.ini"] [unique_id "amtqkGMs9SvoFV_oEFQSwwAAAAA"]
[Thu Jul 30 16:15:28.457769 2026] [security2:error] [pid 3821945:tid 3821945] [client 216.73.216.199:28027] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/dom.ini"] [unique_id "amtqkGMs9SvoFV_oEFQSwwAAAAA"]
[Thu Jul 30 16:15:28.457974 2026] [security2:error] [pid 3821945:tid 3821945] [client 216.73.216.199:28027] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/dom.ini"] [unique_id "amtqkGMs9SvoFV_oEFQSwwAAAAA"]
[Thu Jul 30 16:15:29.349488 2026] [ssl:error] [pid 3829567:tid 3829567] (EAI 2)Name or service not known: [client 144.76.19.72:35162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:29.349529 2026] [ssl:error] [pid 3829567:tid 3829567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:29.402668 2026] [ssl:error] [pid 3831599:tid 3831599] (EAI 2)Name or service not known: [client 144.76.19.72:35174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:29.402706 2026] [ssl:error] [pid 3831599:tid 3831599] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:30.574453 2026] [ssl:error] [pid 3821945:tid 3821945] (70014)End of file found: [client 216.73.216.199:28027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:31.188782 2026] [core:crit] [pid 3832356:tid 3832356] (13)Permission denied: [client 52.167.144.217:14509] AH00529: /home/edbear/public_html/s2016__7af9720/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/edbear/public_html/s2016__7af9720/' is executable
[Thu Jul 30 16:15:32.490456 2026] [ssl:error] [pid 3829567:tid 3829567] (EAI 2)Name or service not known: [client 144.76.19.72:18212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:32.490489 2026] [ssl:error] [pid 3829567:tid 3829567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:32.564205 2026] [ssl:error] [pid 3832449:tid 3832449] (EAI 2)Name or service not known: [client 144.76.19.72:18216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:32.564251 2026] [ssl:error] [pid 3832449:tid 3832449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:32.638689 2026] [lsapi:warn] [pid 3829506:tid 3829506] [client 45.158.164.139:45064] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:32.638731 2026] [lsapi:warn] [pid 3829506:tid 3829506] [client 45.158.164.139:45064] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:33.147468 2026] [lsapi:warn] [pid 3827094:tid 3827094] [client 45.158.164.139:45068] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:33.147513 2026] [lsapi:warn] [pid 3827094:tid 3827094] [client 45.158.164.139:45068] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:33.610742 2026] [lsapi:warn] [pid 3822272:tid 3822272] [client 45.158.164.139:45078] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:33.610786 2026] [lsapi:warn] [pid 3822272:tid 3822272] [client 45.158.164.139:45078] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:33.867557 2026] [lsapi:warn] [pid 3813596:tid 3813596] [client 45.158.164.139:45080] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:33.867601 2026] [lsapi:warn] [pid 3813596:tid 3813596] [client 45.158.164.139:45080] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:34.122299 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:45090] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:34.122366 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:45090] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:34.350894 2026] [lsapi:warn] [pid 3825715:tid 3825715] [client 8.215.16.7:53477] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:34.846398 2026] [lsapi:warn] [pid 3832509:tid 3832509] [client 45.158.164.139:45114] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:34.846441 2026] [lsapi:warn] [pid 3832509:tid 3832509] [client 45.158.164.139:45114] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:35.463127 2026] [lsapi:warn] [pid 3806565:tid 3806565] [client 8.215.16.7:53505] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:35.616262 2026] [ssl:error] [pid 3829567:tid 3829567] (EAI 2)Name or service not known: [client 144.76.19.72:18220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:35.616329 2026] [ssl:error] [pid 3829567:tid 3829567] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:35.669195 2026] [ssl:error] [pid 3832509:tid 3832509] (EAI 2)Name or service not known: [client 144.76.19.72:18236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:35.669230 2026] [ssl:error] [pid 3832509:tid 3832509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:35.718904 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:19856] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:35.935585 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:36.221714 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:36.485172 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:36.573156 2026] [lsapi:warn] [pid 3821945:tid 3821945] [client 45.158.164.139:45160] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:36.573204 2026] [lsapi:warn] [pid 3821945:tid 3821945] [client 45.158.164.139:45160] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:36.738829 2026] [ssl:error] [pid 3816648:tid 3816648] (70014)End of file found: [client 216.73.216.199:61451] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:36.768797 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:37.034594 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:37.313254 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:37.577062 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:37.648692 2026] [ssl:error] [pid 3817503:tid 3817503] (70014)End of file found: [client 216.73.216.199:4735] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:37.838825 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:37.873082 2026] [lsapi:warn] [pid 3832450:tid 3832450] [client 45.158.164.139:45180] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:37.873140 2026] [lsapi:warn] [pid 3832450:tid 3832450] [client 45.158.164.139:45180] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:38.159532 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:38.446192 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:38.557232 2026] [lsapi:warn] [pid 3830168:tid 3830168] [client 45.158.164.139:45190] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:38.557272 2026] [lsapi:warn] [pid 3830168:tid 3830168] [client 45.158.164.139:45190] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:38.720506 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:38.722648 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:18244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:38.722670 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:38.775883 2026] [ssl:error] [pid 3831556:tid 3831556] (EAI 2)Name or service not known: [client 144.76.19.72:18260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:38.775921 2026] [ssl:error] [pid 3831556:tid 3831556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:38.985789 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 8.215.16.7:53512] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:15:39.113394 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:45208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:39.113438 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:45208] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:39.617879 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:45220] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:39.617908 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:45220] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:39.898717 2026] [lsapi:warn] [pid 3829501:tid 3829501] [client 45.158.164.139:45222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:39.898761 2026] [lsapi:warn] [pid 3829501:tid 3829501] [client 45.158.164.139:45222] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:40.483402 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 45.158.164.139:45234] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:40.483444 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 45.158.164.139:45234] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:41.274880 2026] [core:error] [pid 3813596:tid 3813596] (13)Permission denied: [client 216.73.216.199:44965] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/i2c_piix4/uevent
[Thu Jul 30 16:15:41.277333 2026] [lsapi:warn] [pid 3831635:tid 3831635] [client 45.158.164.139:55772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:41.277370 2026] [lsapi:warn] [pid 3831635:tid 3831635] [client 45.158.164.139:55772] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:41.468800 2026] [security2:error] [pid 3802791:tid 3802791] [client 34.194.14.255:18956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqnTWGJFxdIk9_Axd5BQAAAA4"]
[Thu Jul 30 16:15:41.556692 2026] [lsapi:warn] [pid 3832451:tid 3832451] [client 45.158.164.139:55788] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:41.556732 2026] [lsapi:warn] [pid 3832451:tid 3832451] [client 45.158.164.139:55788] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:41.576120 2026] [core:error] [pid 3813596:tid 3813596] (13)Permission denied: [client 216.73.216.199:44965] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/libata/sections/__kcrctab
[Thu Jul 30 16:15:41.634083 2026] [security2:error] [pid 3831636:tid 3831636] [client 52.0.105.244:35311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtqnWFRdJpof-pMWZBUEwAAACE"]
[Thu Jul 30 16:15:41.829760 2026] [ssl:error] [pid 3822272:tid 3822272] (EAI 2)Name or service not known: [client 144.76.19.72:42380] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:41.829800 2026] [ssl:error] [pid 3822272:tid 3822272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:41.885997 2026] [ssl:error] [pid 3829566:tid 3829566] (EAI 2)Name or service not known: [client 144.76.19.72:42392] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:41.886033 2026] [ssl:error] [pid 3829566:tid 3829566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:42.159460 2026] [lsapi:warn] [pid 3829570:tid 3829570] [client 45.158.164.139:55792] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:42.159518 2026] [lsapi:warn] [pid 3829570:tid 3829570] [client 45.158.164.139:55792] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:42.413439 2026] [lsapi:warn] [pid 3816648:tid 3816648] [client 45.158.164.139:55796] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:42.413484 2026] [lsapi:warn] [pid 3816648:tid 3816648] [client 45.158.164.139:55796] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:42.479736 2026] [cgi:error] [pid 3831599:tid 3831599] [client 51.120.79.193:37605] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 16:15:42.688628 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:42.688661 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:42.966867 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:55820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:42.966905 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:55820] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:44.065459 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55866] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:44.065490 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55866] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:44.291500 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:44965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:44.362280 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:55878] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:44.362309 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:55878] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:44.423954 2026] [access_compat:error] [pid 3829566:tid 3829566] [client 45.158.164.139:55880] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:15:44.661519 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:55894] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:44.661550 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:55894] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:44.793031 2026] [cgi:error] [pid 3831599:tid 3831599] [client 51.120.79.193:37605] AH02811: stderr from /home/beng/public_html/cgi-bin: script not found or unable to stat
[Thu Jul 30 16:15:44.944756 2026] [ssl:error] [pid 3823827:tid 3823827] (EAI 2)Name or service not known: [client 144.76.19.72:42404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:44.944790 2026] [ssl:error] [pid 3823827:tid 3823827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:44.973716 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:55910] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:44.973739 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:55910] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:45.000626 2026] [ssl:error] [pid 3829570:tid 3829570] (EAI 2)Name or service not known: [client 144.76.19.72:42414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:45.000665 2026] [ssl:error] [pid 3829570:tid 3829570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:45.241702 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:55914] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:45.241731 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:55914] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:45.499384 2026] [ssl:error] [pid 3832410:tid 3832410] (70014)End of file found: [client 216.73.216.199:7871] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:45.946192 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:55926] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:45.946222 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:55926] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:46.579690 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55946] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:46.579725 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55946] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:46.829143 2026] [lsapi:warn] [pid 3815043:tid 3815043] [client 45.158.164.139:55948] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:46.829195 2026] [lsapi:warn] [pid 3815043:tid 3815043] [client 45.158.164.139:55948] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:46.895675 2026] [ssl:error] [pid 3825715:tid 3825715] (70014)End of file found: [client 216.73.216.199:19699] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:47.069726 2026] [lsapi:warn] [pid 3832451:tid 3832451] [client 45.158.164.139:55950] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:47.069768 2026] [lsapi:warn] [pid 3832451:tid 3832451] [client 45.158.164.139:55950] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:47.297391 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55966] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:47.297425 2026] [lsapi:warn] [pid 3832504:tid 3832504] [client 45.158.164.139:55966] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:48.057457 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:42424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:48.057493 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:48.111959 2026] [ssl:error] [pid 3832452:tid 3832452] (EAI 2)Name or service not known: [client 144.76.19.72:42426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:48.111993 2026] [ssl:error] [pid 3832452:tid 3832452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:48.819217 2026] [lsapi:warn] [pid 3826977:tid 3826977] [client 45.158.164.139:55996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:48.819265 2026] [lsapi:warn] [pid 3826977:tid 3826977] [client 45.158.164.139:55996] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:49.097366 2026] [lsapi:warn] [pid 3832507:tid 3832507] [client 45.158.164.139:55998] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:49.097405 2026] [lsapi:warn] [pid 3832507:tid 3832507] [client 45.158.164.139:55998] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:49.403199 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:56006] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:49.403236 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:56006] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:49.798572 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:37935] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:50.216146 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 45.158.164.139:56030] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:50.216176 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 45.158.164.139:56030] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:50.892495 2026] [core:error] [pid 3832449:tid 3832449] [client 66.249.66.199:53725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:15:50.892533 2026] [core:error] [pid 3832449:tid 3832449] [client 66.249.66.199:53725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:15:51.166760 2026] [ssl:error] [pid 3832410:tid 3832410] (EAI 2)Name or service not known: [client 144.76.19.72:64678] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:51.166795 2026] [ssl:error] [pid 3832410:tid 3832410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:51.223631 2026] [ssl:error] [pid 3828404:tid 3828404] (EAI 2)Name or service not known: [client 144.76.19.72:64692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:51.223667 2026] [ssl:error] [pid 3828404:tid 3828404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:51.394448 2026] [lsapi:warn] [pid 3832449:tid 3832449] [client 45.158.164.139:41128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:51.394500 2026] [lsapi:warn] [pid 3832449:tid 3832449] [client 45.158.164.139:41128] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:51.448298 2026] [ssl:error] [pid 3832451:tid 3832451] (70014)End of file found: [client 216.73.216.199:39080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:52.267875 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:47810] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:53.447440 2026] [lsapi:warn] [pid 3803353:tid 3803353] [client 45.158.164.139:41154] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:53.447483 2026] [lsapi:warn] [pid 3803353:tid 3803353] [client 45.158.164.139:41154] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:54.280848 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:64698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:54.280879 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:54.320729 2026] [lsapi:warn] [pid 3832449:tid 3832449] [client 45.158.164.139:41180] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:54.320757 2026] [lsapi:warn] [pid 3832449:tid 3832449] [client 45.158.164.139:41180] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:54.335469 2026] [ssl:error] [pid 3831635:tid 3831635] (EAI 2)Name or service not known: [client 144.76.19.72:64712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:54.335501 2026] [ssl:error] [pid 3831635:tid 3831635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:54.591357 2026] [lsapi:warn] [pid 3816648:tid 3816648] [client 45.158.164.139:41190] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:54.591397 2026] [lsapi:warn] [pid 3816648:tid 3816648] [client 45.158.164.139:41190] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:54.714711 2026] [security2:error] [pid 3829570:tid 3829570] [client 85.208.96.208:33428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/andy-samberg-teeth"] [unique_id "amtqqvgYijG5y_PFVuWfAgAAADg"]
[Thu Jul 30 16:15:54.842112 2026] [lsapi:warn] [pid 3829563:tid 3829563] [client 45.158.164.139:41202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:54.842175 2026] [lsapi:warn] [pid 3829563:tid 3829563] [client 45.158.164.139:41202] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:55.088644 2026] [lsapi:warn] [pid 3825914:tid 3825914] [client 45.158.164.139:41204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:55.088686 2026] [lsapi:warn] [pid 3825914:tid 3825914] [client 45.158.164.139:41204] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:55.125675 2026] [ssl:error] [pid 3810803:tid 3810803] (70014)End of file found: [client 216.73.216.199:40379] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:57.073333 2026] [lsapi:warn] [pid 3831556:tid 3831556] [client 45.158.164.139:41230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:57.073382 2026] [lsapi:warn] [pid 3831556:tid 3831556] [client 45.158.164.139:41230] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:57.352722 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:63238] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:57.398751 2026] [ssl:error] [pid 3813596:tid 3813596] (EAI 2)Name or service not known: [client 144.76.19.72:64726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:57.398782 2026] [ssl:error] [pid 3813596:tid 3813596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:57.451703 2026] [ssl:error] [pid 3827094:tid 3827094] (EAI 2)Name or service not known: [client 144.76.19.72:64728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:15:57.451732 2026] [ssl:error] [pid 3827094:tid 3827094] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:15:58.761135 2026] [cgi:error] [pid 3831637:tid 3831637] [client 20.9.4.9:32983] AH02812: stderr from /home/heritag1/staging.heritageinsuranceagency.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:15:58.995431 2026] [lsapi:warn] [pid 3832506:tid 3832506] [client 45.158.164.139:41256] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:58.995470 2026] [lsapi:warn] [pid 3832506:tid 3832506] [client 45.158.164.139:41256] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:15:59.159586 2026] [ssl:error] [pid 3831556:tid 3831556] (70014)End of file found: [client 216.73.216.199:62160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:15:59.195007 2026] [security2:error] [pid 3832506:tid 3832506] [client 114.119.158.38:49897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/parents-and-toddlers/"] [unique_id "amtqr6Fb0FrUr2hehPST4gAAAC8"], referer: http://www.erskinenazarene.co.uk/event/parents-and-toddlers/?instance_id=35452
[Thu Jul 30 16:15:59.291967 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:41268] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:15:59.292001 2026] [lsapi:warn] [pid 3831637:tid 3831637] [client 45.158.164.139:41268] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:00.522983 2026] [ssl:error] [pid 3825914:tid 3825914] (EAI 2)Name or service not known: [client 144.76.19.72:63410] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:00.523040 2026] [ssl:error] [pid 3825914:tid 3825914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:00.557043 2026] [ssl:error] [pid 3829434:tid 3829434] (70014)End of file found: [client 216.73.216.199:45219] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:00.578133 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:63424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:00.578164 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:00.733209 2026] [authz_core:error] [pid 3802791:tid 3802791] [client 52.165.196.84:1329] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 16:16:01.372177 2026] [security2:error] [pid 3832510:tid 3832510] [client 114.119.158.38:49901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/parents-and-toddlers/"] [unique_id "amtqsSkgJWilCroa9Uq0SAAAADY"], referer: http://www.erskinenazarene.co.uk/event/parents-and-toddlers/?instance_id=35452
[Thu Jul 30 16:16:01.961345 2026] [lsapi:warn] [pid 3810803:tid 3810803] [client 45.158.164.139:60630] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:01.961384 2026] [lsapi:warn] [pid 3810803:tid 3810803] [client 45.158.164.139:60630] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:02.250948 2026] [lsapi:warn] [pid 3826977:tid 3826977] [client 45.158.164.139:60638] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:02.250982 2026] [lsapi:warn] [pid 3826977:tid 3826977] [client 45.158.164.139:60638] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:02.545613 2026] [lsapi:warn] [pid 3828404:tid 3828404] [client 45.158.164.139:60652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:02.545671 2026] [lsapi:warn] [pid 3828404:tid 3828404] [client 45.158.164.139:60652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:02.897161 2026] [lsapi:warn] [pid 3832449:tid 3832449] [client 45.158.164.139:60666] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:02.897210 2026] [lsapi:warn] [pid 3832449:tid 3832449] [client 45.158.164.139:60666] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:03.088548 2026] [ssl:error] [pid 3826977:tid 3826977] (70014)End of file found: [client 216.73.216.199:7812] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:03.136023 2026] [authz_core:error] [pid 3832507:tid 3832507] [client 66.249.66.33:53265] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:16:03.138746 2026] [authz_core:error] [pid 3832507:tid 3832507] [client 66.249.66.33:53265] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:16:03.414338 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:60674] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:03.414368 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:60674] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:03.632582 2026] [ssl:error] [pid 3832452:tid 3832452] (EAI 2)Name or service not known: [client 144.76.19.72:63428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:03.632606 2026] [ssl:error] [pid 3832452:tid 3832452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:03.674911 2026] [lsapi:warn] [pid 3829501:tid 3829501] [client 45.158.164.139:60676] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:03.674946 2026] [lsapi:warn] [pid 3829501:tid 3829501] [client 45.158.164.139:60676] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:03.684215 2026] [ssl:error] [pid 3832450:tid 3832450] (EAI 2)Name or service not known: [client 144.76.19.72:63430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:03.684247 2026] [ssl:error] [pid 3832450:tid 3832450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:03.967836 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:60688] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:03.967862 2026] [lsapi:warn] [pid 3832452:tid 3832452] [client 45.158.164.139:60688] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:04.471544 2026] [lsapi:warn] [pid 3817503:tid 3817503] [client 45.158.164.139:60704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:04.471588 2026] [lsapi:warn] [pid 3817503:tid 3817503] [client 45.158.164.139:60704] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:05.267533 2026] [lsapi:warn] [pid 3810803:tid 3810803] [client 45.158.164.139:60720] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:05.267562 2026] [lsapi:warn] [pid 3810803:tid 3810803] [client 45.158.164.139:60720] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:05.572165 2026] [cgi:error] [pid 3832449:tid 3832449] [client 216.73.216.199:37217] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/lib64/perl5/Config_heavy.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 16:16:05.572204 2026] [cgi:error] [pid 3832449:tid 3832449] [client 216.73.216.199:37217] End of script output before headers: Config_heavy.pl
[Thu Jul 30 16:16:05.762300 2026] [lsapi:warn] [pid 3834124:tid 3834124] [client 45.158.164.139:60728] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:05.762349 2026] [lsapi:warn] [pid 3834124:tid 3834124] [client 45.158.164.139:60728] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:06.057450 2026] [lsapi:warn] [pid 3813596:tid 3813596] [client 45.158.164.139:60744] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:06.057485 2026] [lsapi:warn] [pid 3813596:tid 3813596] [client 45.158.164.139:60744] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:06.081974 2026] [ssl:error] [pid 3825715:tid 3825715] (70014)End of file found: [client 216.73.216.199:8591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:06.320682 2026] [lsapi:warn] [pid 3834124:tid 3834124] [client 45.158.164.139:60754] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:06.320712 2026] [lsapi:warn] [pid 3834124:tid 3834124] [client 45.158.164.139:60754] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:06.353574 2026] [ssl:error] [pid 3832452:tid 3832452] (70014)End of file found: [client 216.73.216.199:42271] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:06.762099 2026] [lsapi:warn] [pid 3823827:tid 3823827] [client 45.158.164.139:60760] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:06.762141 2026] [lsapi:warn] [pid 3823827:tid 3823827] [client 45.158.164.139:60760] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:06.764305 2026] [ssl:error] [pid 3823827:tid 3823827] (EAI 2)Name or service not known: [client 144.76.19.72:63436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:06.764334 2026] [ssl:error] [pid 3823827:tid 3823827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:06.813174 2026] [security2:error] [pid 3813596:tid 3813596] [client 185.191.171.7:31150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10969.0/prev_next,prev.html"] [unique_id "amtqto_9nNoWSxSBGHLVAgAAADA"]
[Thu Jul 30 16:16:06.863452 2026] [ssl:error] [pid 3832506:tid 3832506] (EAI 2)Name or service not known: [client 144.76.19.72:63452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:06.863501 2026] [ssl:error] [pid 3832506:tid 3832506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:07.247344 2026] [lsapi:warn] [pid 3830168:tid 3830168] [client 45.158.164.139:60770] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:07.247381 2026] [lsapi:warn] [pid 3830168:tid 3830168] [client 45.158.164.139:60770] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:07.847828 2026] [lsapi:warn] [pid 3832506:tid 3832506] [client 45.158.164.139:60794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:07.847856 2026] [lsapi:warn] [pid 3832506:tid 3832506] [client 45.158.164.139:60794] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:08.365698 2026] [lsapi:warn] [pid 3832506:tid 3832506] [client 45.158.164.139:60800] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:08.365729 2026] [lsapi:warn] [pid 3832506:tid 3832506] [client 45.158.164.139:60800] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:08.673655 2026] [lsapi:warn] [pid 3832507:tid 3832507] [client 45.158.164.139:60812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:08.673684 2026] [lsapi:warn] [pid 3832507:tid 3832507] [client 45.158.164.139:60812] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:08.948355 2026] [lsapi:warn] [pid 3832409:tid 3832409] [client 45.158.164.139:60838] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:08.948415 2026] [lsapi:warn] [pid 3832409:tid 3832409] [client 45.158.164.139:60838] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:09.952768 2026] [ssl:error] [pid 3829501:tid 3829501] (EAI 2)Name or service not known: [client 144.76.19.72:55856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:09.952817 2026] [ssl:error] [pid 3829501:tid 3829501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:10.009651 2026] [ssl:error] [pid 3829501:tid 3829501] (EAI 2)Name or service not known: [client 144.76.19.72:55866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:10.009676 2026] [ssl:error] [pid 3829501:tid 3829501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:10.088509 2026] [ssl:error] [pid 3832503:tid 3832503] (70014)End of file found: [client 216.73.216.199:56705] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:10.752512 2026] [lsapi:warn] [pid 3817503:tid 3817503] [client 45.158.164.139:56670] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:10.752557 2026] [lsapi:warn] [pid 3817503:tid 3817503] [client 45.158.164.139:56670] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:11.301626 2026] [lsapi:warn] [pid 3832507:tid 3832507] [client 45.158.164.139:56678] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:11.301658 2026] [lsapi:warn] [pid 3832507:tid 3832507] [client 45.158.164.139:56678] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:11.597923 2026] [ssl:error] [pid 3833265:tid 3833265] (70014)End of file found: [client 216.73.216.199:52799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:11.600863 2026] [lsapi:warn] [pid 3831634:tid 3831634] [client 45.158.164.139:56694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:11.600907 2026] [lsapi:warn] [pid 3831634:tid 3831634] [client 45.158.164.139:56694] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:11.920252 2026] [lsapi:warn] [pid 3825715:tid 3825715] [client 45.158.164.139:56700] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:11.920299 2026] [lsapi:warn] [pid 3825715:tid 3825715] [client 45.158.164.139:56700] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:12.139168 2026] [authz_core:error] [pid 3802791:tid 3802791] [client 52.165.196.84:1329] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/l10n/error_log
[Thu Jul 30 16:16:12.207721 2026] [ssl:error] [pid 3832506:tid 3832506] (70014)End of file found: [client 216.73.216.199:48700] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:12.657027 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 45.158.164.139:56724] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:12.657057 2026] [lsapi:warn] [pid 3819413:tid 3819413] [client 45.158.164.139:56724] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:13.068504 2026] [ssl:error] [pid 3810803:tid 3810803] (EAI 2)Name or service not known: [client 144.76.19.72:55880] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:13.068531 2026] [ssl:error] [pid 3810803:tid 3810803] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:13.120026 2026] [ssl:error] [pid 3815043:tid 3815043] (EAI 2)Name or service not known: [client 144.76.19.72:55892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:13.120053 2026] [ssl:error] [pid 3815043:tid 3815043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:16.135882 2026] [ssl:error] [pid 3831635:tid 3831635] (70014)End of file found: [client 216.73.216.199:13399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:16.177706 2026] [ssl:error] [pid 3815043:tid 3815043] (EAI 2)Name or service not known: [client 144.76.19.72:55900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:16.177729 2026] [ssl:error] [pid 3815043:tid 3815043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:16.294547 2026] [ssl:error] [pid 3808974:tid 3808974] (EAI 2)Name or service not known: [client 144.76.19.72:55904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:16.294582 2026] [ssl:error] [pid 3808974:tid 3808974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:16.538079 2026] [lsapi:warn] [pid 3832508:tid 3832508] [client 45.158.164.139:56760] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:16.538118 2026] [lsapi:warn] [pid 3832508:tid 3832508] [client 45.158.164.139:56760] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:17.039162 2026] [ssl:error] [pid 3832508:tid 3832508] (70014)End of file found: [client 216.73.216.199:42250] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:17.641177 2026] [ssl:error] [pid 3832506:tid 3832506] (70014)End of file found: [client 216.73.216.199:18176] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:19.350978 2026] [ssl:error] [pid 3816648:tid 3816648] (EAI 2)Name or service not known: [client 144.76.19.72:55912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:19.351013 2026] [ssl:error] [pid 3816648:tid 3816648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:19.407132 2026] [ssl:error] [pid 3821945:tid 3821945] (EAI 2)Name or service not known: [client 144.76.19.72:55918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:19.407167 2026] [ssl:error] [pid 3821945:tid 3821945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:19.749331 2026] [lsapi:warn] [pid 3816648:tid 3816648] [client 45.158.164.139:56764] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:19.749358 2026] [lsapi:warn] [pid 3816648:tid 3816648] [client 45.158.164.139:56764] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:20.006375 2026] [lsapi:warn] [pid 3833265:tid 3833265] [client 45.158.164.139:56776] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:20.006426 2026] [lsapi:warn] [pid 3833265:tid 3833265] [client 45.158.164.139:56776] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:20.267555 2026] [lsapi:warn] [pid 3832450:tid 3832450] [client 45.158.164.139:56780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:16:20.267590 2026] [lsapi:warn] [pid 3832450:tid 3832450] [client 45.158.164.139:56780] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:16:21.857532 2026] [ssl:error] [pid 3834972:tid 3834972] (70014)End of file found: [client 216.73.216.199:8468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:22.355221 2026] [ssl:error] [pid 3829506:tid 3829506] (70014)End of file found: [client 216.73.216.199:25944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:22.461360 2026] [ssl:error] [pid 3829566:tid 3829566] (EAI 2)Name or service not known: [client 144.76.19.72:29154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:22.461404 2026] [ssl:error] [pid 3829566:tid 3829566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:22.514494 2026] [ssl:error] [pid 3831635:tid 3831635] (EAI 2)Name or service not known: [client 144.76.19.72:29162] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:22.514527 2026] [ssl:error] [pid 3831635:tid 3831635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:23.367521 2026] [ssl:error] [pid 3834455:tid 3834455] (70014)End of file found: [client 216.73.216.199:64724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:25.569545 2026] [ssl:error] [pid 3823827:tid 3823827] (EAI 2)Name or service not known: [client 144.76.19.72:29174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:25.569577 2026] [ssl:error] [pid 3823827:tid 3823827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:25.625516 2026] [ssl:error] [pid 3803353:tid 3803353] (EAI 2)Name or service not known: [client 144.76.19.72:29180] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:25.625566 2026] [ssl:error] [pid 3803353:tid 3803353] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:26.125912 2026] [authz_core:error] [pid 3816648:tid 3816648] [client 20.9.4.9:33065] AH01630: client denied by server configuration: /home/heritag1/staging.heritageinsuranceagency.co.uk/php.ini
[Thu Jul 30 16:16:27.191662 2026] [ssl:error] [pid 3832449:tid 3832449] (70014)End of file found: [client 216.73.216.199:45913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:28.685563 2026] [ssl:error] [pid 3832507:tid 3832507] (EAI 2)Name or service not known: [client 144.76.19.72:29188] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:28.685604 2026] [ssl:error] [pid 3832507:tid 3832507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:28.742391 2026] [ssl:error] [pid 3832452:tid 3832452] (EAI 2)Name or service not known: [client 144.76.19.72:29204] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:28.742430 2026] [ssl:error] [pid 3832452:tid 3832452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:29.426807 2026] [ssl:error] [pid 3831635:tid 3831635] (70014)End of file found: [client 216.73.216.199:63572] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:30.002979 2026] [ssl:error] [pid 3810803:tid 3810803] (70014)End of file found: [client 216.73.216.199:10323] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:31.799562 2026] [ssl:error] [pid 3832452:tid 3832452] (EAI 2)Name or service not known: [client 144.76.19.72:33862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:31.799595 2026] [ssl:error] [pid 3832452:tid 3832452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:31.864498 2026] [ssl:error] [pid 3825716:tid 3825716] (EAI 2)Name or service not known: [client 144.76.19.72:33876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:31.864526 2026] [ssl:error] [pid 3825716:tid 3825716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:32.608541 2026] [ssl:error] [pid 3834394:tid 3834394] (70014)End of file found: [client 216.73.216.199:46989] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:34.950134 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:33886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:34.950197 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:35.005122 2026] [ssl:error] [pid 3821945:tid 3821945] (EAI 2)Name or service not known: [client 144.76.19.72:33900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:35.005167 2026] [ssl:error] [pid 3821945:tid 3821945] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:35.142428 2026] [ssl:error] [pid 3832506:tid 3832506] (70014)End of file found: [client 216.73.216.199:65336] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:37.674718 2026] [security2:error] [pid 3810803:tid 3810803] [client 163.7.15.226:42329] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq1dyewqKdMoEiF_n9ZQAAACw"]
[Thu Jul 30 16:16:37.674767 2026] [security2:error] [pid 3810803:tid 3810803] [client 163.7.15.226:42329] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq1dyewqKdMoEiF_n9ZQAAACw"]
[Thu Jul 30 16:16:37.675036 2026] [security2:error] [pid 3810803:tid 3810803] [client 163.7.15.226:42329] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtq1dyewqKdMoEiF_n9ZQAAACw"]
[Thu Jul 30 16:16:38.058620 2026] [ssl:error] [pid 3828404:tid 3828404] (EAI 2)Name or service not known: [client 144.76.19.72:33916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:38.058645 2026] [ssl:error] [pid 3828404:tid 3828404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:38.114485 2026] [ssl:error] [pid 3808974:tid 3808974] (EAI 2)Name or service not known: [client 144.76.19.72:33924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:38.114522 2026] [ssl:error] [pid 3808974:tid 3808974] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:39.196019 2026] [authz_core:error] [pid 3831556:tid 3831556] [client 66.249.66.33:37464] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:16:39.198787 2026] [authz_core:error] [pid 3831556:tid 3831556] [client 66.249.66.33:37464] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:16:39.210251 2026] [security2:error] [pid 3832452:tid 3832452] [client 178.86.188.252:42912] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq1_hcG-UQY7AjKm73FAAAACc"]
[Thu Jul 30 16:16:39.210309 2026] [security2:error] [pid 3832452:tid 3832452] [client 178.86.188.252:42912] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq1_hcG-UQY7AjKm73FAAAACc"]
[Thu Jul 30 16:16:39.210572 2026] [security2:error] [pid 3832452:tid 3832452] [client 178.86.188.252:42912] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtq1_hcG-UQY7AjKm73FAAAACc"]
[Thu Jul 30 16:16:40.738227 2026] [security2:error] [pid 3808974:tid 3808974] [client 85.208.96.205:50660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7495.0.html"] [unique_id "amtq2JIl2Sq-0UoAwPk_bgAAACU"]
[Thu Jul 30 16:16:41.166678 2026] [ssl:error] [pid 3828404:tid 3828404] (EAI 2)Name or service not known: [client 144.76.19.72:46590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:41.166711 2026] [ssl:error] [pid 3828404:tid 3828404] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:41.220858 2026] [ssl:error] [pid 3816648:tid 3816648] (EAI 2)Name or service not known: [client 144.76.19.72:46594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:41.220883 2026] [ssl:error] [pid 3816648:tid 3816648] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:41.589579 2026] [core:error] [pid 3832449:tid 3832449] (13)Permission denied: [client 216.73.216.199:64587] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:67/device/driver/bind
[Thu Jul 30 16:16:42.096619 2026] [security2:error] [pid 3831634:tid 3831634] [client 37.67.149.97:34160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq2h41_LIDdr0pBk98WQAAABs"]
[Thu Jul 30 16:16:42.096671 2026] [security2:error] [pid 3831634:tid 3831634] [client 37.67.149.97:34160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq2h41_LIDdr0pBk98WQAAABs"]
[Thu Jul 30 16:16:42.096948 2026] [security2:error] [pid 3831634:tid 3831634] [client 37.67.149.97:34160] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtq2h41_LIDdr0pBk98WQAAABs"]
[Thu Jul 30 16:16:42.792983 2026] [core:error] [pid 3835859:tid 3835859] (13)Permission denied: [client 216.73.216.199:45083] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/binfmt_misc/sections/__jump_table
[Thu Jul 30 16:16:44.275524 2026] [ssl:error] [pid 3825914:tid 3825914] (EAI 2)Name or service not known: [client 144.76.19.72:46606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:44.275551 2026] [ssl:error] [pid 3825914:tid 3825914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:44.328959 2026] [ssl:error] [pid 3831556:tid 3831556] (EAI 2)Name or service not known: [client 144.76.19.72:46622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:44.329002 2026] [ssl:error] [pid 3831556:tid 3831556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:44.604288 2026] [core:error] [pid 3832449:tid 3832449] (13)Permission denied: [client 216.73.216.199:64587] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/module/nf_nat/sections/__bug_table
[Thu Jul 30 16:16:45.709343 2026] [access_compat:error] [pid 3829563:tid 3829563] [client 185.226.197.57:57500] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 16:16:45.731487 2026] [security2:error] [pid 3829566:tid 3829566] [client 45.148.10.120:38296] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/.env"] [unique_id "amtq3Th1nWV_QOfXQnUc8wAAADI"]
[Thu Jul 30 16:16:45.731723 2026] [security2:error] [pid 3829566:tid 3829566] [client 45.148.10.120:38296] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/.env"] [unique_id "amtq3Th1nWV_QOfXQnUc8wAAADI"]
[Thu Jul 30 16:16:46.710482 2026] [access_compat:error] [pid 3834917:tid 3834917] [client 185.226.197.57:57510] AH01797: client denied by server configuration: /home/pbyawsga/public_html/js
[Thu Jul 30 16:16:46.794478 2026] [access_compat:error] [pid 3832409:tid 3832409] [client 185.226.197.58:19272] AH01797: client denied by server configuration: /home/pbyawsga/public_html/identity
[Thu Jul 30 16:16:47.391534 2026] [ssl:error] [pid 3825914:tid 3825914] (EAI 2)Name or service not known: [client 144.76.19.72:46626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:47.391573 2026] [ssl:error] [pid 3825914:tid 3825914] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:47.444532 2026] [ssl:error] [pid 3831556:tid 3831556] (EAI 2)Name or service not known: [client 144.76.19.72:46632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:47.444561 2026] [ssl:error] [pid 3831556:tid 3831556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:47.609529 2026] [ssl:error] [pid 3832449:tid 3832449] (70014)End of file found: [client 216.73.216.199:64587] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:48.225254 2026] [access_compat:error] [pid 3810803:tid 3810803] [client 185.226.197.59:36952] AH01797: client denied by server configuration: /home/pbyawsga/public_html/favicon.ico
[Thu Jul 30 16:16:48.412271 2026] [authz_core:error] [pid 3803353:tid 3803353] [client 66.249.66.194:64113] AH01630: client denied by server configuration: /home/nkxfsjcw/public_html/wp-includes/sodium_compat/src/Core/Curve25519/error_log
[Thu Jul 30 16:16:49.008677 2026] [access_compat:error] [pid 3832410:tid 3832410] [client 185.226.197.57:57516] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 16:16:49.077564 2026] [access_compat:error] [pid 3834454:tid 3834454] [client 185.226.197.60:15092] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cf_scripts
[Thu Jul 30 16:16:49.170114 2026] [access_compat:error] [pid 3835818:tid 3835818] [client 185.226.197.59:36960] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 16:16:49.439497 2026] [ssl:error] [pid 3835859:tid 3835859] (70014)End of file found: [client 216.73.216.199:45083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:49.458806 2026] [access_compat:error] [pid 3831556:tid 3831556] [client 185.226.197.60:15106] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sitecore
[Thu Jul 30 16:16:50.363710 2026] [access_compat:error] [pid 3808974:tid 3808974] [client 185.226.197.60:15120] AH01797: client denied by server configuration: /home/pbyawsga/public_html/favicon-32x32.png
[Thu Jul 30 16:16:50.510541 2026] [security2:error] [pid 3829566:tid 3829566] [client 45.148.10.120:38296] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.fswknowledge.butteredcat.com"] [uri "/index.php"] [unique_id "amtq3Th1nWV_QOfXQnUc8wAAADI"]
[Thu Jul 30 16:16:50.527110 2026] [security2:error] [pid 3829566:tid 3829566] [client 43.153.87.54:33542] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "localhero.org.uk"] [uri "/"] [unique_id "amtq4jh1nWV_QOfXQnUc9AAAADI"]
[Thu Jul 30 16:16:50.611284 2026] [access_compat:error] [pid 3829501:tid 3829501] [client 185.226.197.57:57524] AH01797: client denied by server configuration: /home/pbyawsga/public_html/api
[Thu Jul 30 16:16:51.182005 2026] [ssl:error] [pid 3831634:tid 3831634] (EAI 2)Name or service not known: [client 144.76.19.72:38904] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:51.182039 2026] [ssl:error] [pid 3831634:tid 3831634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:51.258197 2026] [core:error] [pid 3829563:tid 3829563] (13)Permission denied: [client 216.73.216.199:37734] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu4/driver/cpu7/node0/compact
[Thu Jul 30 16:16:51.630252 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:38912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:51.630281 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:51.859298 2026] [ssl:error] [pid 3829563:tid 3829563] (70014)End of file found: [client 216.73.216.199:37734] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:51.995229 2026] [access_compat:error] [pid 3815043:tid 3815043] [client 185.226.197.57:57530] AH01797: client denied by server configuration: /home/pbyawsga/public_html/favicon.ico
[Thu Jul 30 16:16:52.041867 2026] [access_compat:error] [pid 3815043:tid 3815043] [client 185.226.197.59:36974] AH01797: client denied by server configuration: /home/pbyawsga/public_html/index.jsp
[Thu Jul 30 16:16:52.729386 2026] [access_compat:error] [pid 3837008:tid 3837008] [client 185.226.197.57:50498] AH01797: client denied by server configuration: /home/pbyawsga/public_html/showLogin.cc
[Thu Jul 30 16:16:53.351690 2026] [access_compat:error] [pid 3836921:tid 3836921] [client 185.226.197.57:50514] AH01797: client denied by server configuration: /home/pbyawsga/public_html/WebInterface
[Thu Jul 30 16:16:53.378252 2026] [ssl:error] [pid 3837005:tid 3837005] (70014)End of file found: [client 216.73.216.199:3269] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:54.472092 2026] [access_compat:error] [pid 3832451:tid 3832451] [client 185.226.197.58:37352] AH01797: client denied by server configuration: /home/pbyawsga/public_html/
[Thu Jul 30 16:16:54.601639 2026] [access_compat:error] [pid 3803353:tid 3803353] [client 185.226.197.59:21144] AH01797: client denied by server configuration: /home/pbyawsga/public_html/admin
[Thu Jul 30 16:16:54.691852 2026] [ssl:error] [pid 3834917:tid 3834917] (EAI 2)Name or service not known: [client 144.76.19.72:38920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:54.691909 2026] [ssl:error] [pid 3834917:tid 3834917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:54.713357 2026] [access_compat:error] [pid 3835858:tid 3835858] [client 185.226.197.58:37368] AH01797: client denied by server configuration: /home/pbyawsga/public_html/Telerik.Web.UI.WebResource.axd
[Thu Jul 30 16:16:54.750603 2026] [ssl:error] [pid 3834454:tid 3834454] (EAI 2)Name or service not known: [client 144.76.19.72:38934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:54.750657 2026] [ssl:error] [pid 3834454:tid 3834454] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:55.178016 2026] [security2:error] [pid 3821945:tid 3821945] [client 85.208.96.207:51118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/sportsbet-annual-report-2020"] [unique_id "amtq52Ms9SvoFV_oEFQTHAAAAAA"]
[Thu Jul 30 16:16:55.208260 2026] [cgi:error] [pid 3832503:tid 3832503] [client 20.151.221.234:52932] AH02812: stderr from /home/rediscov/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:16:56.628755 2026] [access_compat:error] [pid 3819413:tid 3819413] [client 185.226.197.60:47320] AH01797: client denied by server configuration: /home/pbyawsga/public_html/aspera
[Thu Jul 30 16:16:56.758238 2026] [access_compat:error] [pid 3834917:tid 3834917] [client 185.226.197.59:21154] AH01797: client denied by server configuration: /home/pbyawsga/public_html/login.do
[Thu Jul 30 16:16:57.809857 2026] [ssl:error] [pid 3832449:tid 3832449] (EAI 2)Name or service not known: [client 144.76.19.72:38950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:57.809889 2026] [ssl:error] [pid 3832449:tid 3832449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:57.863337 2026] [ssl:error] [pid 3834972:tid 3834972] (EAI 2)Name or service not known: [client 144.76.19.72:38960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:16:57.863380 2026] [ssl:error] [pid 3834972:tid 3834972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:16:58.198490 2026] [access_compat:error] [pid 3829566:tid 3829566] [client 185.226.197.58:37380] AH01797: client denied by server configuration: /home/pbyawsga/public_html/cgi-bin/authLogin.cgi
[Thu Jul 30 16:16:59.697935 2026] [ssl:error] [pid 3832410:tid 3832410] (70014)End of file found: [client 216.73.216.199:59267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:16:59.750812 2026] [access_compat:error] [pid 3832452:tid 3832452] [client 185.226.197.59:21164] AH01797: client denied by server configuration: /home/pbyawsga/public_html/icons
[Thu Jul 30 16:16:59.818374 2026] [access_compat:error] [pid 3837011:tid 3837011] [client 185.226.197.59:21166] AH01797: client denied by server configuration: /home/pbyawsga/public_html/solr
[Thu Jul 30 16:17:00.921569 2026] [ssl:error] [pid 3829501:tid 3829501] (EAI 2)Name or service not known: [client 144.76.19.72:22308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:00.921604 2026] [ssl:error] [pid 3829501:tid 3829501] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:00.976341 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:22310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:00.976378 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:01.141841 2026] [access_compat:error] [pid 3834972:tid 3834972] [client 185.226.197.58:37396] AH01797: client denied by server configuration: /home/pbyawsga/public_html/zabbix
[Thu Jul 30 16:17:02.252828 2026] [access_compat:error] [pid 3832451:tid 3832451] [client 185.226.197.58:37404] AH01797: client denied by server configuration: /home/pbyawsga/public_html/sugar_version.json
[Thu Jul 30 16:17:02.402848 2026] [ssl:error] [pid 3832450:tid 3832450] (70014)End of file found: [client 216.73.216.199:63956] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:03.911819 2026] [ssl:error] [pid 3832506:tid 3832506] (70014)End of file found: [client 216.73.216.199:34846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:04.030642 2026] [ssl:error] [pid 3834256:tid 3834256] (EAI 2)Name or service not known: [client 144.76.19.72:22326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:04.030683 2026] [ssl:error] [pid 3834256:tid 3834256] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:04.086981 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:22330] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:04.087011 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:07.152881 2026] [ssl:error] [pid 3834124:tid 3834124] (EAI 2)Name or service not known: [client 144.76.19.72:22336] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:07.152940 2026] [ssl:error] [pid 3834124:tid 3834124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:07.207817 2026] [ssl:error] [pid 3832409:tid 3832409] (EAI 2)Name or service not known: [client 144.76.19.72:22340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:07.207855 2026] [ssl:error] [pid 3832409:tid 3832409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:09.236681 2026] [security2:error] [pid 3836920:tid 3836920] [client 45.70.88.39:64211] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq9fZlfdCQoQlzMybuLgAAAAY"]
[Thu Jul 30 16:17:09.236760 2026] [security2:error] [pid 3836920:tid 3836920] [client 45.70.88.39:64211] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq9fZlfdCQoQlzMybuLgAAAAY"]
[Thu Jul 30 16:17:09.237170 2026] [security2:error] [pid 3836920:tid 3836920] [client 45.70.88.39:64211] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtq9fZlfdCQoQlzMybuLgAAAAY"]
[Thu Jul 30 16:17:09.498439 2026] [ssl:error] [pid 3832449:tid 3832449] (70014)End of file found: [client 216.73.216.199:47771] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:10.105548 2026] [ssl:error] [pid 3836955:tid 3836955] (70014)End of file found: [client 216.73.216.199:15670] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:10.276846 2026] [ssl:error] [pid 3836958:tid 3836958] (EAI 2)Name or service not known: [client 144.76.19.72:41058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:10.276896 2026] [ssl:error] [pid 3836958:tid 3836958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:10.355744 2026] [ssl:error] [pid 3834124:tid 3834124] (EAI 2)Name or service not known: [client 144.76.19.72:41060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:10.355785 2026] [ssl:error] [pid 3834124:tid 3834124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:10.660609 2026] [security2:error] [pid 3832410:tid 3832410] [client 189.216.142.111:35738] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq9lmoEl6ISpsAMn8ghQAAAA8"]
[Thu Jul 30 16:17:10.660681 2026] [security2:error] [pid 3832410:tid 3832410] [client 189.216.142.111:35738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq9lmoEl6ISpsAMn8ghQAAAA8"]
[Thu Jul 30 16:17:10.660952 2026] [security2:error] [pid 3832410:tid 3832410] [client 189.216.142.111:35738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtq9lmoEl6ISpsAMn8ghQAAAA8"]
[Thu Jul 30 16:17:13.409587 2026] [ssl:error] [pid 3829566:tid 3829566] (EAI 2)Name or service not known: [client 144.76.19.72:41078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:13.409627 2026] [ssl:error] [pid 3829566:tid 3829566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:13.467621 2026] [ssl:error] [pid 3829569:tid 3829569] (EAI 2)Name or service not known: [client 144.76.19.72:41088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:13.467673 2026] [ssl:error] [pid 3829569:tid 3829569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:13.653392 2026] [security2:error] [pid 3825716:tid 3825716] [client 172.116.235.50:44200] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq-VYUVbSLUW_QQ3lT4gAAABA"]
[Thu Jul 30 16:17:13.653445 2026] [security2:error] [pid 3825716:tid 3825716] [client 172.116.235.50:44200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtq-VYUVbSLUW_QQ3lT4gAAABA"]
[Thu Jul 30 16:17:13.653669 2026] [security2:error] [pid 3825716:tid 3825716] [client 172.116.235.50:44200] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtq-VYUVbSLUW_QQ3lT4gAAABA"]
[Thu Jul 30 16:17:13.730628 2026] [ssl:error] [pid 3832452:tid 3832452] (70014)End of file found: [client 216.73.216.199:19541] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:16.153868 2026] [ssl:error] [pid 3815043:tid 3815043] (70014)End of file found: [client 216.73.216.199:31036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:16.524424 2026] [ssl:error] [pid 3829569:tid 3829569] (EAI 2)Name or service not known: [client 144.76.19.72:41096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:16.524457 2026] [ssl:error] [pid 3829569:tid 3829569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:16.576113 2026] [ssl:error] [pid 3832510:tid 3832510] (EAI 2)Name or service not known: [client 144.76.19.72:41108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:16.576153 2026] [ssl:error] [pid 3832510:tid 3832510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:17.371472 2026] [ssl:error] [pid 3836955:tid 3836955] (70014)End of file found: [client 216.73.216.199:56417] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:17.981808 2026] [core:error] [pid 3834917:tid 3834917] [client 66.249.66.8:44906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:17:17.981837 2026] [core:error] [pid 3834917:tid 3834917] [client 66.249.66.8:44906] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:17:18.346654 2026] [security2:error] [pid 3825716:tid 3825716] [client 85.208.96.195:53310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,6736.0/prev_next,prev.html"] [unique_id "amtq_lYUVbSLUW_QQ3lT6AAAABA"]
[Thu Jul 30 16:17:19.635782 2026] [ssl:error] [pid 3836960:tid 3836960] (EAI 2)Name or service not known: [client 144.76.19.72:52950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:19.635820 2026] [ssl:error] [pid 3836960:tid 3836960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:19.750501 2026] [ssl:error] [pid 3832507:tid 3832507] (EAI 2)Name or service not known: [client 144.76.19.72:52964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:19.750528 2026] [ssl:error] [pid 3832507:tid 3832507] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:22.140080 2026] [access_compat:error] [pid 3834256:tid 3834256] [client 45.158.164.139:34208] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:17:22.727715 2026] [security2:error] [pid 3838358:tid 3838358] [client 114.119.146.111:53393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/kids-club/"] [unique_id "amtrAkwdyVZyaY_ub1BF0QAAACY"], referer: http://www.erskinenazarene.co.uk/event/kids-club/?instance_id=39567
[Thu Jul 30 16:17:22.804664 2026] [ssl:error] [pid 3831635:tid 3831635] (EAI 2)Name or service not known: [client 144.76.19.72:52978] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:22.804695 2026] [ssl:error] [pid 3831635:tid 3831635] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:22.860833 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:52984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:22.860866 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:23.084323 2026] [ssl:error] [pid 3832510:tid 3832510] (70014)End of file found: [client 216.73.216.199:7127] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:24.592247 2026] [core:error] [pid 3832503:tid 3832503] (13)Permission denied: [client 216.73.216.199:39540] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/libexec/audit-functions
[Thu Jul 30 16:17:24.949101 2026] [security2:error] [pid 3837005:tid 3837005] [client 114.119.146.111:53403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/kids-club/"] [unique_id "amtrBCwhfRNwIrz3vcFJDwAAADw"], referer: http://www.erskinenazarene.co.uk/event/kids-club/?instance_id=39567
[Thu Jul 30 16:17:25.458977 2026] [authz_core:error] [pid 3836960:tid 3836960] [client 66.249.66.34:52888] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:17:25.461698 2026] [authz_core:error] [pid 3836960:tid 3836960] [client 66.249.66.34:52888] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:17:25.498817 2026] [security2:error] [pid 3838240:tid 3838240] [client 216.73.216.199:28768] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/mysqlnd.ini"] [unique_id "amtrBQDA4iCMk00mLqv15gAAACQ"]
[Thu Jul 30 16:17:25.499198 2026] [security2:error] [pid 3838240:tid 3838240] [client 216.73.216.199:28768] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/mysqlnd.ini"] [unique_id "amtrBQDA4iCMk00mLqv15gAAACQ"]
[Thu Jul 30 16:17:25.499507 2026] [security2:error] [pid 3838240:tid 3838240] [client 216.73.216.199:28768] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/alt/php72/etc/php.d.std/mysqlnd.ini"] [unique_id "amtrBQDA4iCMk00mLqv15gAAACQ"]
[Thu Jul 30 16:17:25.919182 2026] [ssl:error] [pid 3832449:tid 3832449] (EAI 2)Name or service not known: [client 144.76.19.72:52994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:25.919225 2026] [ssl:error] [pid 3832449:tid 3832449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:25.976609 2026] [ssl:error] [pid 3832410:tid 3832410] (EAI 2)Name or service not known: [client 144.76.19.72:52998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:25.976642 2026] [ssl:error] [pid 3832410:tid 3832410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:27.002027 2026] [ssl:error] [pid 3838240:tid 3838240] (70014)End of file found: [client 216.73.216.199:28768] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:27.792991 2026] [authz_core:error] [pid 3838238:tid 3838238] [client 66.249.66.33:48730] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:17:27.795667 2026] [authz_core:error] [pid 3838238:tid 3838238] [client 66.249.66.33:48730] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:17:28.510709 2026] [ssl:error] [pid 3832503:tid 3832503] (70014)End of file found: [client 216.73.216.199:39540] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:29.037684 2026] [ssl:error] [pid 3834455:tid 3834455] (EAI 2)Name or service not known: [client 144.76.19.72:53012] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:29.037730 2026] [ssl:error] [pid 3834455:tid 3834455] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:29.094604 2026] [ssl:error] [pid 3837010:tid 3837010] (EAI 2)Name or service not known: [client 144.76.19.72:53018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:29.094643 2026] [ssl:error] [pid 3837010:tid 3837010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:30.621859 2026] [ssl:error] [pid 3832510:tid 3832510] (70014)End of file found: [client 216.73.216.199:14012] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:30.625903 2026] [cgi:error] [pid 3837011:tid 3837011] [client 158.158.41.78:43099] AH02812: stderr from /home/markmitc/markmitchellphotography.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:17:32.153562 2026] [ssl:error] [pid 3822272:tid 3822272] (EAI 2)Name or service not known: [client 144.76.19.72:41764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:32.153595 2026] [ssl:error] [pid 3822272:tid 3822272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:32.206558 2026] [ssl:error] [pid 3834124:tid 3834124] (EAI 2)Name or service not known: [client 144.76.19.72:41780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:32.206592 2026] [ssl:error] [pid 3834124:tid 3834124] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:32.350272 2026] [ssl:error] [pid 3836227:tid 3836227] (70014)End of file found: [client 216.73.216.199:14286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:33.309926 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 16:17:33.950876 2026] [access_compat:error] [pid 3832503:tid 3832503] [client 45.158.164.139:39108] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:17:35.166711 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:33026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:35.308395 2026] [ssl:error] [pid 3836881:tid 3836881] (EAI 2)Name or service not known: [client 144.76.19.72:41790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:35.308434 2026] [ssl:error] [pid 3836881:tid 3836881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:35.363330 2026] [ssl:error] [pid 3838789:tid 3838789] (EAI 2)Name or service not known: [client 144.76.19.72:41802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:35.363359 2026] [ssl:error] [pid 3838789:tid 3838789] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:35.379443 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/error.php
[Thu Jul 30 16:17:36.203258 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/k.php
[Thu Jul 30 16:17:36.998658 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/lock.php
[Thu Jul 30 16:17:37.117521 2026] [security2:error] [pid 3838824:tid 3838824] [client 156.59.198.136:17806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "robin64.co.uk"] [uri "/terranigma/monkey-moore-0.5-2009-11-29-win32/Januschan%20JOME%20Regular.ttf"] [unique_id "amtrEd10YvhhIYYs1McYngAAAB0"]
[Thu Jul 30 16:17:37.290007 2026] [ssl:error] [pid 3832506:tid 3832506] (70014)End of file found: [client 216.73.216.199:49208] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:37.777133 2026] [ssl:error] [pid 3832508:tid 3832508] (70014)End of file found: [client 216.73.216.199:7651] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:37.815110 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/lock360.php
[Thu Jul 30 16:17:37.819624 2026] [security2:error] [pid 3836881:tid 3836881] [client 20.171.55.167:7062] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.the-pryors.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtrEYX0xoysz2NefS6r8wAAAAU"]
[Thu Jul 30 16:17:37.819839 2026] [security2:error] [pid 3836881:tid 3836881] [client 20.171.55.167:7062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.the-pryors.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtrEYX0xoysz2NefS6r8wAAAAU"]
[Thu Jul 30 16:17:37.848079 2026] [security2:error] [pid 3836881:tid 3836881] [client 20.171.55.167:7062] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.the-pryors.co.uk"] [uri "/403.shtml"] [unique_id "amtrEYX0xoysz2NefS6r8wAAAAU"]
[Thu Jul 30 16:17:38.426827 2026] [ssl:error] [pid 3836960:tid 3836960] (EAI 2)Name or service not known: [client 144.76.19.72:41814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:38.426858 2026] [ssl:error] [pid 3836960:tid 3836960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:38.544946 2026] [ssl:error] [pid 3836881:tid 3836881] (EAI 2)Name or service not known: [client 144.76.19.72:41818] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:38.544971 2026] [ssl:error] [pid 3836881:tid 3836881] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:38.604337 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/php.php
[Thu Jul 30 16:17:39.389229 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/php8.php
[Thu Jul 30 16:17:40.901369 2026] [ssl:error] [pid 3838157:tid 3838157] (70014)End of file found: [client 216.73.216.199:61923] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:40.921787 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-config-sample.php
[Thu Jul 30 16:17:40.973468 2026] [authz_core:error] [pid 3838823:tid 3838823] [client 20.104.22.47:59719] AH01630: client denied by server configuration: /var/www/html/php.ini
[Thu Jul 30 16:17:41.632142 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:34170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:41.632212 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:41.686653 2026] [ssl:error] [pid 3825716:tid 3825716] (EAI 2)Name or service not known: [client 144.76.19.72:34172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:41.686687 2026] [ssl:error] [pid 3825716:tid 3825716] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:42.276366 2026] [authz_core:error] [pid 3836958:tid 3836958] [client 20.104.22.47:59665] AH01630: client denied by server configuration: /var/www/html/php.ini
[Thu Jul 30 16:17:42.661239 2026] [security2:error] [pid 3836096:tid 3836096] [client 143.198.119.177:43280] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "berehap.be"] [uri "/xmlrpc.php"] [unique_id "amtrFlVxBBWvADwS6uxMkgAAACs"]
[Thu Jul 30 16:17:43.094617 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-mail.php
[Thu Jul 30 16:17:43.929796 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 16:17:44.847684 2026] [ssl:error] [pid 3835858:tid 3835858] (EAI 2)Name or service not known: [client 144.76.19.72:34174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:44.847730 2026] [ssl:error] [pid 3835858:tid 3835858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:44.872630 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/css.php
[Thu Jul 30 16:17:45.101146 2026] [ssl:error] [pid 3838238:tid 3838238] (EAI 2)Name or service not known: [client 144.76.19.72:34178] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:45.101202 2026] [ssl:error] [pid 3838238:tid 3838238] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:45.449180 2026] [security2:error] [pid 3834256:tid 3834256] [client 216.73.216.199:48897] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/dbus.conf"] [unique_id "amtrGVJHhu4vB8BvYo3GTgAAABE"]
[Thu Jul 30 16:17:45.449497 2026] [security2:error] [pid 3834256:tid 3834256] [client 216.73.216.199:48897] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/dbus.conf"] [unique_id "amtrGVJHhu4vB8BvYo3GTgAAABE"]
[Thu Jul 30 16:17:45.449712 2026] [security2:error] [pid 3834256:tid 3834256] [client 216.73.216.199:48897] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/sysusers.d/dbus.conf"] [unique_id "amtrGVJHhu4vB8BvYo3GTgAAABE"]
[Thu Jul 30 16:17:45.752051 2026] [ssl:error] [pid 3834256:tid 3834256] (70014)End of file found: [client 216.73.216.199:48897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:46.042566 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/files.php
[Thu Jul 30 16:17:46.659038 2026] [core:error] [pid 3822272:tid 3822272] (13)Permission denied: [client 216.73.216.199:40253] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/store_user
[Thu Jul 30 16:17:46.961199 2026] [core:error] [pid 3822272:tid 3822272] (13)Permission denied: [client 216.73.216.199:40253] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/scripts/agent360.sh
[Thu Jul 30 16:17:47.571334 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:40253] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:48.083777 2026] [ssl:error] [pid 3839308:tid 3839308] (70014)End of file found: [client 216.73.216.199:16399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:48.158011 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:34190] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:48.158052 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:48.213776 2026] [ssl:error] [pid 3839031:tid 3839031] (EAI 2)Name or service not known: [client 144.76.19.72:34206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:48.213813 2026] [ssl:error] [pid 3839031:tid 3839031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:48.580237 2026] [cgi:error] [pid 3837004:tid 3837004] [client 66.132.172.197:61264] AH02812: stderr from /home/jgqawffu/public_html/learning/cgi-bin/: attempt to invoke directory as script, referer: http://learning.secretbluestone.co.uk:80/cgi-bin
[Thu Jul 30 16:17:51.270305 2026] [ssl:error] [pid 3837011:tid 3837011] (EAI 2)Name or service not known: [client 144.76.19.72:52442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:51.270349 2026] [ssl:error] [pid 3837011:tid 3837011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:51.323544 2026] [ssl:error] [pid 3838824:tid 3838824] (EAI 2)Name or service not known: [client 144.76.19.72:52454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:51.323582 2026] [ssl:error] [pid 3838824:tid 3838824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:51.830725 2026] [core:error] [pid 3839251:tid 3839251] (13)Permission denied: [client 216.73.216.199:23216] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-8/cache_dma
[Thu Jul 30 16:17:52.206406 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 16:17:52.206505 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 16:17:52.206675 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 16:17:52.206866 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 16:17:52.206936 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 16:17:52.207112 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 16:17:52.207288 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 16:17:52.207366 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 16:17:52.207538 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 16:17:52.207657 2026] [authz_core:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 16:17:52.207721 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 16:17:52.207793 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 16:17:52.207971 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 16:17:52.208149 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 16:17:52.208218 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 16:17:52.208394 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 16:17:52.208564 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 16:17:52.208639 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 16:17:52.208809 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 16:17:52.209680 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 16:17:52.209751 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 16:17:52.209921 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 16:17:52.210116 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 16:17:52.210184 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 16:17:52.210356 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 16:17:52.210880 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 16:17:52.210950 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 16:17:52.211125 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 16:17:52.211291 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 16:17:52.211367 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 16:17:52.211534 2026] [access_compat:error] [pid 3836955:tid 3836955] [client 46.184.243.58:7004] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 16:17:52.526224 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/info.php
[Thu Jul 30 16:17:52.747438 2026] [ssl:error] [pid 3839251:tid 3839251] (70014)End of file found: [client 216.73.216.199:23216] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:53.286448 2026] [ssl:error] [pid 3839520:tid 3839520] (70014)End of file found: [client 216.73.216.199:51327] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:53.407502 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp.php
[Thu Jul 30 16:17:53.975077 2026] [ssl:error] [pid 3831637:tid 3831637] (70014)End of file found: [client 216.73.216.199:49508] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:17:54.378446 2026] [ssl:error] [pid 3834972:tid 3834972] (EAI 2)Name or service not known: [client 144.76.19.72:52460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:54.378484 2026] [ssl:error] [pid 3834972:tid 3834972] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:54.430236 2026] [ssl:error] [pid 3839361:tid 3839361] (EAI 2)Name or service not known: [client 144.76.19.72:52470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:54.430281 2026] [ssl:error] [pid 3839361:tid 3839361] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:55.158205 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-config-sample.php
[Thu Jul 30 16:17:55.767215 2026] [security2:error] [pid 3834454:tid 3834454] [client 85.208.96.209:31152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/starportal-bch-police-login"] [unique_id "amtrI9AP3rgu1RdnxF8zmQAAABY"]
[Thu Jul 30 16:17:56.293203 2026] [authz_core:error] [pid 3835818:tid 3835818] [client 52.165.196.84:55431] AH01630: client denied by server configuration: /home/maisongerlyn/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 16:17:56.728038 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/666.php
[Thu Jul 30 16:17:57.489295 2026] [ssl:error] [pid 3838823:tid 3838823] (EAI 2)Name or service not known: [client 144.76.19.72:52486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:57.489338 2026] [ssl:error] [pid 3838823:tid 3838823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:57.549706 2026] [ssl:error] [pid 3839519:tid 3839519] (EAI 2)Name or service not known: [client 144.76.19.72:52496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:17:57.549739 2026] [ssl:error] [pid 3839519:tid 3839519] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:17:57.701125 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/bgymj.php
[Thu Jul 30 16:17:58.491103 2026] [core:error] [pid 3836958:tid 3836958] (13)Permission denied: [client 216.73.216.199:26146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/slabs_cpu_partial
[Thu Jul 30 16:17:58.518913 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/control.php
[Thu Jul 30 16:17:58.793201 2026] [core:error] [pid 3836958:tid 3836958] (13)Permission denied: [client 216.73.216.199:26146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_struct/slabs
[Thu Jul 30 16:17:59.099386 2026] [core:error] [pid 3836958:tid 3836958] (13)Permission denied: [client 216.73.216.199:26146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu3/firmware_node/eject
[Thu Jul 30 16:18:00.186646 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 16:18:00.605270 2026] [ssl:error] [pid 3832449:tid 3832449] (EAI 2)Name or service not known: [client 144.76.19.72:46708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:00.605300 2026] [ssl:error] [pid 3832449:tid 3832449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:00.660853 2026] [ssl:error] [pid 3836960:tid 3836960] (EAI 2)Name or service not known: [client 144.76.19.72:46714] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:00.660875 2026] [ssl:error] [pid 3836960:tid 3836960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:00.912356 2026] [core:error] [pid 3836958:tid 3836958] (13)Permission denied: [client 216.73.216.199:26146] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/restorepkg
[Thu Jul 30 16:18:01.249430 2026] [ssl:error] [pid 3836227:tid 3836227] (70014)End of file found: [client 216.73.216.199:1594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:01.510230 2026] [ssl:error] [pid 3836958:tid 3836958] (70014)End of file found: [client 216.73.216.199:26146] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:01.822261 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/php8.php
[Thu Jul 30 16:18:02.894381 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-mail.php
[Thu Jul 30 16:18:03.684542 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/a7.php
[Thu Jul 30 16:18:03.720758 2026] [ssl:error] [pid 3822272:tid 3822272] (EAI 2)Name or service not known: [client 144.76.19.72:46724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:03.720787 2026] [ssl:error] [pid 3822272:tid 3822272] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:03.783272 2026] [ssl:error] [pid 3838824:tid 3838824] (EAI 2)Name or service not known: [client 144.76.19.72:46738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:03.783310 2026] [ssl:error] [pid 3838824:tid 3838824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:03.936673 2026] [ssl:error] [pid 3834454:tid 3834454] (70014)End of file found: [client 216.73.216.199:43829] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:04.516758 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/php.php
[Thu Jul 30 16:18:04.534887 2026] [security2:error] [pid 3819413:tid 3819413] [client 190.218.122.247:51516] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrLD9y_WeIiXQbl5XorgAAABw"]
[Thu Jul 30 16:18:04.534954 2026] [security2:error] [pid 3819413:tid 3819413] [client 190.218.122.247:51516] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrLD9y_WeIiXQbl5XorgAAABw"]
[Thu Jul 30 16:18:04.535199 2026] [security2:error] [pid 3819413:tid 3819413] [client 190.218.122.247:51516] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrLD9y_WeIiXQbl5XorgAAABw"]
[Thu Jul 30 16:18:04.623100 2026] [authz_core:error] [pid 3838824:tid 3838824] [client 66.249.66.35:44629] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:18:04.625790 2026] [authz_core:error] [pid 3838824:tid 3838824] [client 66.249.66.35:44629] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:18:05.337568 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/8.php
[Thu Jul 30 16:18:06.153519 2026] [authz_core:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01630: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/error_log
[Thu Jul 30 16:18:06.153572 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/class-wp-rest-request.php
[Thu Jul 30 16:18:06.153590 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/class-wp-rest-server.php
[Thu Jul 30 16:18:06.161961 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/rest-api/class-wp-rest-response.php
[Thu Jul 30 16:18:06.734020 2026] [security2:error] [pid 3839466:tid 3839466] [client 43.106.1.189:23121] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrLoL61ajsmxnYoVM-iAAAAEQ"]
[Thu Jul 30 16:18:06.734098 2026] [security2:error] [pid 3839466:tid 3839466] [client 43.106.1.189:23121] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrLoL61ajsmxnYoVM-iAAAAEQ"]
[Thu Jul 30 16:18:06.734460 2026] [security2:error] [pid 3839466:tid 3839466] [client 43.106.1.189:23121] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrLoL61ajsmxnYoVM-iAAAAEQ"]
[Thu Jul 30 16:18:06.837032 2026] [ssl:error] [pid 3829570:tid 3829570] (EAI 2)Name or service not known: [client 144.76.19.72:46748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:06.837092 2026] [ssl:error] [pid 3829570:tid 3829570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:06.898827 2026] [ssl:error] [pid 3837011:tid 3837011] (EAI 2)Name or service not known: [client 144.76.19.72:46752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:06.898860 2026] [ssl:error] [pid 3837011:tid 3837011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:07.726948 2026] [ssl:error] [pid 3829501:tid 3829501] (70014)End of file found: [client 216.73.216.199:64082] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:07.906421 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-includes/assets/ty.php
[Thu Jul 30 16:18:08.445677 2026] [ssl:error] [pid 3838238:tid 3838238] (70014)End of file found: [client 216.73.216.199:50478] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:08.706596 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/file61.php
[Thu Jul 30 16:18:09.249076 2026] [authz_core:error] [pid 3836960:tid 3836960] [client 147.90.209.154:61895] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/error_log
[Thu Jul 30 16:18:09.249973 2026] [authz_core:error] [pid 3836960:tid 3836960] [client 147.90.209.154:61895] AH01630: client denied by server configuration: /home/spampcou/public_html/lisichka.co.uk/php.ini
[Thu Jul 30 16:18:09.525028 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/p.php
[Thu Jul 30 16:18:09.957505 2026] [ssl:error] [pid 3832409:tid 3832409] (EAI 2)Name or service not known: [client 144.76.19.72:46806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:09.957534 2026] [ssl:error] [pid 3832409:tid 3832409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:10.012768 2026] [ssl:error] [pid 3829563:tid 3829563] (EAI 2)Name or service not known: [client 144.76.19.72:46816] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:10.012833 2026] [ssl:error] [pid 3829563:tid 3829563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:10.418664 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/ms-edit.php
[Thu Jul 30 16:18:10.639231 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:11.246641 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/alfanew.PHP7
[Thu Jul 30 16:18:12.922151 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/dx.php
[Thu Jul 30 16:18:13.091435 2026] [ssl:error] [pid 3839360:tid 3839360] (EAI 2)Name or service not known: [client 144.76.19.72:46824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:13.091484 2026] [ssl:error] [pid 3839360:tid 3839360] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:13.143286 2026] [ssl:error] [pid 3832409:tid 3832409] (EAI 2)Name or service not known: [client 144.76.19.72:46834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:13.143325 2026] [ssl:error] [pid 3832409:tid 3832409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:13.226778 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:13.364888 2026] [security2:error] [pid 3838823:tid 3838823] [client 43.106.1.189:65053] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrNe3GHj9kicT3IUC34wAAABM"]
[Thu Jul 30 16:18:13.364938 2026] [security2:error] [pid 3838823:tid 3838823] [client 43.106.1.189:65053] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrNe3GHj9kicT3IUC34wAAABM"]
[Thu Jul 30 16:18:13.365194 2026] [security2:error] [pid 3838823:tid 3838823] [client 43.106.1.189:65053] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrNe3GHj9kicT3IUC34wAAABM"]
[Thu Jul 30 16:18:14.093550 2026] [ssl:error] [pid 3839360:tid 3839360] (70014)End of file found: [client 216.73.216.199:25858] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:14.592720 2026] [ssl:error] [pid 3834455:tid 3834455] (70014)End of file found: [client 216.73.216.199:2472] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:15.219667 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/doc.php
[Thu Jul 30 16:18:15.239042 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:15.607554 2026] [ssl:error] [pid 3829570:tid 3829570] (70014)End of file found: [client 216.73.216.199:35797] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:15.916307 2026] [security2:error] [pid 3829563:tid 3829563] [client 185.191.171.19:22672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9628.0.html"] [unique_id "amtrN-jrseRLgrj7090kSgAAAC4"]
[Thu Jul 30 16:18:16.123243 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/tool.php
[Thu Jul 30 16:18:16.200606 2026] [ssl:error] [pid 3832510:tid 3832510] (EAI 2)Name or service not known: [client 144.76.19.72:46840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:16.200678 2026] [ssl:error] [pid 3832510:tid 3832510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:16.257920 2026] [ssl:error] [pid 3832409:tid 3832409] (EAI 2)Name or service not known: [client 144.76.19.72:46846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:16.257946 2026] [ssl:error] [pid 3832409:tid 3832409] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:16.592081 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:16.870446 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/xx.php
[Thu Jul 30 16:18:17.667735 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/xxx.php
[Thu Jul 30 16:18:18.505734 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/100.php
[Thu Jul 30 16:18:19.071961 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:19.311434 2026] [ssl:error] [pid 3813596:tid 3813596] (EAI 2)Name or service not known: [client 144.76.19.72:46858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:19.311460 2026] [ssl:error] [pid 3813596:tid 3813596] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:19.362783 2026] [ssl:error] [pid 3832503:tid 3832503] (EAI 2)Name or service not known: [client 144.76.19.72:46860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:19.362830 2026] [ssl:error] [pid 3832503:tid 3832503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:19.415993 2026] [ssl:error] [pid 3832510:tid 3832510] (70014)End of file found: [client 216.73.216.199:53920] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:19.926756 2026] [access_compat:error] [pid 3831634:tid 3831634] [client 20.104.16.169:29362] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-blog.php
[Thu Jul 30 16:18:21.386190 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:21.630962 2026] [ssl:error] [pid 3813596:tid 3813596] (70014)End of file found: [client 216.73.216.199:10607] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:22.414569 2026] [access_compat:error] [pid 3829570:tid 3829570] [client 45.158.164.139:33714] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:18:22.415963 2026] [ssl:error] [pid 3839308:tid 3839308] (EAI 2)Name or service not known: [client 144.76.19.72:20100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:22.415992 2026] [ssl:error] [pid 3839308:tid 3839308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:22.469095 2026] [ssl:error] [pid 3837005:tid 3837005] (EAI 2)Name or service not known: [client 144.76.19.72:20106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:22.469146 2026] [ssl:error] [pid 3837005:tid 3837005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:22.844231 2026] [ssl:error] [pid 3835858:tid 3835858] (70014)End of file found: [client 216.73.216.199:27338] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:23.065475 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:24.809414 2026] [core:error] [pid 3829563:tid 3829563] [client 47.79.13.191:60674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:18:24.809442 2026] [core:error] [pid 3829563:tid 3829563] [client 47.79.13.191:60674] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:18:25.222584 2026] [core:error] [pid 3829563:tid 3829563] [client 47.79.13.191:60686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:18:25.222608 2026] [core:error] [pid 3829563:tid 3829563] [client 47.79.13.191:60686] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:18:25.523030 2026] [ssl:error] [pid 3840973:tid 3840973] (EAI 2)Name or service not known: [client 144.76.19.72:20120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:25.523094 2026] [ssl:error] [pid 3840973:tid 3840973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:25.576209 2026] [ssl:error] [pid 3838196:tid 3838196] (EAI 2)Name or service not known: [client 144.76.19.72:20130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:25.576240 2026] [ssl:error] [pid 3838196:tid 3838196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:25.776564 2026] [autoindex:error] [pid 3834917:tid 3834917] [client 217.76.50.173:57656] AH01276: Cannot serve directory /home/erskinen/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:27.992695 2026] [ssl:error] [pid 3832510:tid 3832510] (70014)End of file found: [client 216.73.216.199:57366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:28.562338 2026] [security2:error] [pid 3841947:tid 3841947] [client 114.119.138.239:59267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/robots.txt"] [unique_id "amtrREjvTugSqpo4dqDukAAAAAk"], referer: http://refraction.co.uk/robots.txt
[Thu Jul 30 16:18:28.634204 2026] [ssl:error] [pid 3841948:tid 3841948] (EAI 2)Name or service not known: [client 144.76.19.72:20146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:28.634243 2026] [ssl:error] [pid 3841948:tid 3841948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:28.697961 2026] [ssl:error] [pid 3841949:tid 3841949] (EAI 2)Name or service not known: [client 144.76.19.72:20154] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:28.698004 2026] [ssl:error] [pid 3841949:tid 3841949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:30.092189 2026] [ssl:error] [pid 3839360:tid 3839360] (70014)End of file found: [client 216.73.216.199:53252] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:30.777472 2026] [security2:error] [pid 3836096:tid 3836096] [client 52.238.199.152:48514] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "blow-hairstudio.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtrRlVxBBWvADwS6uxMyAAAACs"]
[Thu Jul 30 16:18:30.777662 2026] [security2:error] [pid 3836096:tid 3836096] [client 52.238.199.152:48514] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "blow-hairstudio.co.uk"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtrRlVxBBWvADwS6uxMyAAAACs"]
[Thu Jul 30 16:18:31.172300 2026] [security2:error] [pid 3836096:tid 3836096] [client 52.238.199.152:48514] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "blow-hairstudio.co.uk"] [uri "/index.php"] [unique_id "amtrRlVxBBWvADwS6uxMyAAAACs"]
[Thu Jul 30 16:18:31.755633 2026] [ssl:error] [pid 3841804:tid 3841804] (EAI 2)Name or service not known: [client 144.76.19.72:47054] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:31.755676 2026] [ssl:error] [pid 3841804:tid 3841804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:31.814406 2026] [ssl:error] [pid 3834256:tid 3834256] (EAI 2)Name or service not known: [client 144.76.19.72:47066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:31.814435 2026] [ssl:error] [pid 3834256:tid 3834256] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:32.207343 2026] [ssl:error] [pid 3841950:tid 3841950] (70014)End of file found: [client 216.73.216.199:17110] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:33.445670 2026] [authz_core:error] [pid 3819413:tid 3819413] [client 66.249.66.33:49838] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:18:33.448428 2026] [authz_core:error] [pid 3819413:tid 3819413] [client 66.249.66.33:49838] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:18:34.914873 2026] [ssl:error] [pid 3832506:tid 3832506] (EAI 2)Name or service not known: [client 144.76.19.72:47078] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:34.914904 2026] [ssl:error] [pid 3832506:tid 3832506] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:34.971656 2026] [ssl:error] [pid 3841948:tid 3841948] (EAI 2)Name or service not known: [client 144.76.19.72:47084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:34.971696 2026] [ssl:error] [pid 3841948:tid 3841948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:36.241744 2026] [ssl:error] [pid 3836227:tid 3836227] (70014)End of file found: [client 216.73.216.199:51977] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:36.331777 2026] [authz_core:error] [pid 3838238:tid 3838238] [client 66.249.66.33:43717] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:18:36.334444 2026] [authz_core:error] [pid 3838238:tid 3838238] [client 66.249.66.33:43717] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:18:36.605947 2026] [security2:error] [pid 3836955:tid 3836955] [client 80.94.92.167:46410] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "holistic-clear.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtrTMXo2X6A_S3zWlu54QAAAC0"]
[Thu Jul 30 16:18:36.606089 2026] [security2:error] [pid 3836955:tid 3836955] [client 80.94.92.167:46410] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "holistic-clear.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtrTMXo2X6A_S3zWlu54QAAAC0"]
[Thu Jul 30 16:18:36.606239 2026] [security2:error] [pid 3836955:tid 3836955] [client 80.94.92.167:46410] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "holistic-clear.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtrTMXo2X6A_S3zWlu54QAAAC0"]
[Thu Jul 30 16:18:36.606418 2026] [security2:error] [pid 3836955:tid 3836955] [client 80.94.92.167:46410] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "holistic-clear.co.uk"] [uri "/403.shtml"] [unique_id "amtrTMXo2X6A_S3zWlu54QAAAC0"]
[Thu Jul 30 16:18:36.634166 2026] [security2:error] [pid 3842039:tid 3842039] [client 43.130.150.80:48890] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ogsoil.com"] [uri "/"] [unique_id "amtrTFBK8KY2JJPE8DkvEQAAACc"]
[Thu Jul 30 16:18:36.746626 2026] [ssl:error] [pid 3832510:tid 3832510] (70014)End of file found: [client 216.73.216.199:23646] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:37.750245 2026] [ssl:error] [pid 3839362:tid 3839362] (70014)End of file found: [client 216.73.216.199:58095] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:38.158443 2026] [ssl:error] [pid 3838823:tid 3838823] (EAI 2)Name or service not known: [client 144.76.19.72:47096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:38.158474 2026] [ssl:error] [pid 3838823:tid 3838823] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:38.223017 2026] [ssl:error] [pid 3836958:tid 3836958] (EAI 2)Name or service not known: [client 144.76.19.72:47112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:38.223049 2026] [ssl:error] [pid 3836958:tid 3836958] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:39.446336 2026] [security2:error] [pid 3841867:tid 3841867] [client 170.106.160.90:55476] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.magic-cookie.co.uk"] [uri "/"] [unique_id "amtrT9s3NtkR6LoCIRFfMAAAAAY"]
[Thu Jul 30 16:18:41.279970 2026] [ssl:error] [pid 3841948:tid 3841948] (EAI 2)Name or service not known: [client 144.76.19.72:30972] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:41.280008 2026] [ssl:error] [pid 3841948:tid 3841948] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:41.332697 2026] [ssl:error] [pid 3841949:tid 3841949] (EAI 2)Name or service not known: [client 144.76.19.72:30986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:41.332728 2026] [ssl:error] [pid 3841949:tid 3841949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:41.968031 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:28122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:42.566889 2026] [ssl:error] [pid 3832510:tid 3832510] (70014)End of file found: [client 216.73.216.199:6961] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:43.065703 2026] [core:error] [pid 3836958:tid 3836958] (13)Permission denied: [client 216.73.216.199:14412] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty15/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 16:18:43.473211 2026] [ssl:error] [pid 3836958:tid 3836958] (70014)End of file found: [client 216.73.216.199:14412] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:44.387218 2026] [ssl:error] [pid 3833265:tid 3833265] (EAI 2)Name or service not known: [client 144.76.19.72:31002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:44.387265 2026] [ssl:error] [pid 3833265:tid 3833265] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:44.446798 2026] [ssl:error] [pid 3837012:tid 3837012] (EAI 2)Name or service not known: [client 144.76.19.72:31006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:44.446841 2026] [ssl:error] [pid 3837012:tid 3837012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:45.717248 2026] [security2:error] [pid 3815043:tid 3815043] [client 114.119.158.38:32707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~30,102,17,19/request_format~html"] [unique_id "amtrVSNCU9dhiJN0FMmTiwAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~30,102,17/request_format~html
[Thu Jul 30 16:18:46.168720 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:46.779955 2026] [security2:error] [pid 3815043:tid 3815043] [client 114.119.158.38:32711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1563750000/cat_ids~30,102,17,19/request_format~html"] [unique_id "amtrViNCU9dhiJN0FMmTjAAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1563750000/cat_ids~30,102,17/request_format~html
[Thu Jul 30 16:18:47.310775 2026] [core:error] [pid 3833265:tid 3833265] (13)Permission denied: [client 216.73.216.199:13722] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty5/subsystem/ttyS3/device/driver/bind
[Thu Jul 30 16:18:47.423396 2026] [ssl:error] [pid 3833265:tid 3833265] (70014)End of file found: [client 216.73.216.199:13722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:47.502578 2026] [ssl:error] [pid 3832508:tid 3832508] (EAI 2)Name or service not known: [client 144.76.19.72:31008] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:47.502617 2026] [ssl:error] [pid 3832508:tid 3832508] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:47.560329 2026] [ssl:error] [pid 3834917:tid 3834917] (EAI 2)Name or service not known: [client 144.76.19.72:31010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:47.560378 2026] [ssl:error] [pid 3834917:tid 3834917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:48.333666 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:49.306989 2026] [authz_core:error] [pid 3835818:tid 3835818] [client 52.165.196.84:55431] AH01630: client denied by server configuration: /home/maisongerlyn/public_html/wp-includes/l10n/error_log
[Thu Jul 30 16:18:50.115552 2026] [lsapi:warn] [pid 3842035:tid 3842035] [client 195.250.26.52:0] [host mail.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:18:50.479822 2026] [ssl:error] [pid 3841947:tid 3841947] (70014)End of file found: [client 216.73.216.199:52666] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:50.632267 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:40914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:50.632335 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:50.691715 2026] [ssl:error] [pid 3832449:tid 3832449] (EAI 2)Name or service not known: [client 144.76.19.72:40916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:50.691757 2026] [ssl:error] [pid 3832449:tid 3832449] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:50.746801 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:51.997441 2026] [ssl:error] [pid 3837012:tid 3837012] (70014)End of file found: [client 216.73.216.199:35341] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:52.672448 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:53.749599 2026] [ssl:error] [pid 3835858:tid 3835858] (EAI 2)Name or service not known: [client 144.76.19.72:40922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:53.749644 2026] [ssl:error] [pid 3835858:tid 3835858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:53.801379 2026] [ssl:error] [pid 3837004:tid 3837004] (EAI 2)Name or service not known: [client 144.76.19.72:40926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:53.801426 2026] [ssl:error] [pid 3837004:tid 3837004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:54.232762 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:56.166890 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:56.399217 2026] [security2:error] [pid 3838238:tid 3838238] [client 85.208.96.204:62744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/my-boss-is-bullying-me-to-quit"] [unique_id "amtrYHiyGc3f1Jb-sVHGFAAAAB8"]
[Thu Jul 30 16:18:56.562159 2026] [ssl:error] [pid 3836960:tid 3836960] (70014)End of file found: [client 216.73.216.199:47724] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:56.887245 2026] [ssl:error] [pid 3842043:tid 3842043] (EAI 2)Name or service not known: [client 144.76.19.72:40936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:56.887281 2026] [ssl:error] [pid 3842043:tid 3842043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:56.939693 2026] [ssl:error] [pid 3838358:tid 3838358] (EAI 2)Name or service not known: [client 144.76.19.72:40938] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:18:56.939732 2026] [ssl:error] [pid 3838358:tid 3838358] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:18:57.085585 2026] [ssl:error] [pid 3829569:tid 3829569] (70014)End of file found: [client 216.73.216.199:55440] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:18:58.231914 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:18:58.700195 2026] [core:error] [pid 3836958:tid 3836958] (13)Permission denied: [client 216.73.216.199:46686] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/system.slice/cgroup.event_control
[Thu Jul 30 16:18:58.997937 2026] [ssl:error] [pid 3836958:tid 3836958] (70014)End of file found: [client 216.73.216.199:46686] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:00.029119 2026] [ssl:error] [pid 3841949:tid 3841949] (EAI 2)Name or service not known: [client 144.76.19.72:26640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:00.029166 2026] [ssl:error] [pid 3841949:tid 3841949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:00.085232 2026] [ssl:error] [pid 3839308:tid 3839308] (EAI 2)Name or service not known: [client 144.76.19.72:26650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:00.085264 2026] [ssl:error] [pid 3839308:tid 3839308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:00.252230 2026] [access_compat:error] [pid 3831464:tid 3831464] [client 4.223.67.9:24832] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 16:19:00.382480 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:02.345395 2026] [ssl:error] [pid 3838824:tid 3838824] (70014)End of file found: [client 216.73.216.199:31591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:02.588195 2026] [cgi:error] [pid 3838238:tid 3838238] [client 52.165.196.84:55467] AH02812: stderr from /home/maisongerlyn/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:19:02.973911 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:03.146266 2026] [authz_core:error] [pid 3839361:tid 3839361] [client 66.249.66.35:52898] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:19:03.149191 2026] [authz_core:error] [pid 3839361:tid 3839361] [client 66.249.66.35:52898] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:19:03.180200 2026] [ssl:error] [pid 3837011:tid 3837011] (EAI 2)Name or service not known: [client 144.76.19.72:26666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:03.180244 2026] [ssl:error] [pid 3837011:tid 3837011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:03.233113 2026] [ssl:error] [pid 3841949:tid 3841949] (EAI 2)Name or service not known: [client 144.76.19.72:26682] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:03.233147 2026] [ssl:error] [pid 3841949:tid 3841949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:03.247255 2026] [ssl:error] [pid 3839031:tid 3839031] (70014)End of file found: [client 216.73.216.199:65398] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:05.464254 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:06.285767 2026] [ssl:error] [pid 3834917:tid 3834917] (EAI 2)Name or service not known: [client 144.76.19.72:26686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:06.285801 2026] [ssl:error] [pid 3834917:tid 3834917] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:06.372620 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:26694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:06.372669 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:06.567275 2026] [ssl:error] [pid 3842044:tid 3842044] (70014)End of file found: [client 216.73.216.199:63243] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:07.368571 2026] [security2:error] [pid 3802791:tid 3802791] [client 37.99.64.182:56304] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrazWGJFxdIk9_Axd6FQAAAA4"]
[Thu Jul 30 16:19:07.368620 2026] [security2:error] [pid 3802791:tid 3802791] [client 37.99.64.182:56304] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrazWGJFxdIk9_Axd6FQAAAA4"]
[Thu Jul 30 16:19:07.368860 2026] [security2:error] [pid 3802791:tid 3802791] [client 37.99.64.182:56304] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrazWGJFxdIk9_Axd6FQAAAA4"]
[Thu Jul 30 16:19:07.384937 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:08.765374 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:09.326033 2026] [security2:error] [pid 3839361:tid 3839361] [client 47.243.206.199:14915] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrbeEUi5bdAmzFBFoxYQAAAD4"]
[Thu Jul 30 16:19:09.326123 2026] [security2:error] [pid 3839361:tid 3839361] [client 47.243.206.199:14915] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrbeEUi5bdAmzFBFoxYQAAAD4"]
[Thu Jul 30 16:19:09.326492 2026] [security2:error] [pid 3839361:tid 3839361] [client 47.243.206.199:14915] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrbeEUi5bdAmzFBFoxYQAAAD4"]
[Thu Jul 30 16:19:09.429815 2026] [ssl:error] [pid 3838824:tid 3838824] (EAI 2)Name or service not known: [client 144.76.19.72:26696] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:09.429854 2026] [ssl:error] [pid 3838824:tid 3838824] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:09.491537 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:26708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:09.491575 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:10.497526 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:6588] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:10.535499 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:11.702938 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:3859] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:12.610722 2026] [ssl:error] [pid 3842044:tid 3842044] (EAI 2)Name or service not known: [client 144.76.19.72:28294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:12.610772 2026] [ssl:error] [pid 3842044:tid 3842044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:12.664229 2026] [ssl:error] [pid 3837004:tid 3837004] (EAI 2)Name or service not known: [client 144.76.19.72:28296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:12.664272 2026] [ssl:error] [pid 3837004:tid 3837004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:12.674900 2026] [security2:error] [pid 3829563:tid 3829563] [client 47.243.206.199:30875] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrcOjrseRLgrj7090kZgAAAC4"]
[Thu Jul 30 16:19:12.674982 2026] [security2:error] [pid 3829563:tid 3829563] [client 47.243.206.199:30875] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrcOjrseRLgrj7090kZgAAAC4"]
[Thu Jul 30 16:19:12.675327 2026] [security2:error] [pid 3829563:tid 3829563] [client 47.243.206.199:30875] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrcOjrseRLgrj7090kZgAAAC4"]
[Thu Jul 30 16:19:14.725769 2026] [ssl:error] [pid 3842043:tid 3842043] (70014)End of file found: [client 216.73.216.199:51355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:15.349125 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:15.722569 2026] [ssl:error] [pid 3819413:tid 3819413] (EAI 2)Name or service not known: [client 144.76.19.72:28298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:15.722602 2026] [ssl:error] [pid 3819413:tid 3819413] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:15.780530 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:28310] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:15.780567 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:15.929435 2026] [ssl:error] [pid 3839031:tid 3839031] (70014)End of file found: [client 216.73.216.199:57854] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:17.134160 2026] [ssl:error] [pid 3841867:tid 3841867] (70014)End of file found: [client 216.73.216.199:1309] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:17.584105 2026] [authz_core:error] [pid 3822272:tid 3822272] [client 148.222.185.74:50436] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 16:19:17.586812 2026] [authz_core:error] [pid 3822272:tid 3822272] [client 148.222.185.74:50436] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: https://kinesiologylondon.co.uk/
[Thu Jul 30 16:19:17.658168 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:18.833874 2026] [ssl:error] [pid 3837010:tid 3837010] (EAI 2)Name or service not known: [client 144.76.19.72:28312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:18.833905 2026] [ssl:error] [pid 3837010:tid 3837010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:18.891556 2026] [ssl:error] [pid 3842044:tid 3842044] (EAI 2)Name or service not known: [client 144.76.19.72:28322] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:18.891590 2026] [ssl:error] [pid 3842044:tid 3842044] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:20.054237 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:30004] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:20.249114 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:21.269049 2026] [ssl:error] [pid 3835858:tid 3835858] (70014)End of file found: [client 216.73.216.199:10823] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:21.783916 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:21.965399 2026] [ssl:error] [pid 3839031:tid 3839031] (EAI 2)Name or service not known: [client 144.76.19.72:26346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:21.965448 2026] [ssl:error] [pid 3839031:tid 3839031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:22.022782 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:26358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:22.022834 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:25.076617 2026] [ssl:error] [pid 3835858:tid 3835858] (EAI 2)Name or service not known: [client 144.76.19.72:26360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:25.076649 2026] [ssl:error] [pid 3835858:tid 3835858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:25.133557 2026] [ssl:error] [pid 3839308:tid 3839308] (EAI 2)Name or service not known: [client 144.76.19.72:26376] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:25.133582 2026] [ssl:error] [pid 3839308:tid 3839308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:27.042450 2026] [ssl:error] [pid 3822272:tid 3822272] (70014)End of file found: [client 216.73.216.199:30786] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:27.645419 2026] [ssl:error] [pid 3842041:tid 3842041] (70014)End of file found: [client 216.73.216.199:47553] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:27.826967 2026] [security2:error] [pid 3836096:tid 3836096] [client 106.52.216.13:47936] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtrf1VxBBWvADwS6uxM5QAAACs"]
[Thu Jul 30 16:19:28.059935 2026] [authz_core:error] [pid 3832410:tid 3832410] [client 66.249.66.33:52688] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:19:28.062703 2026] [authz_core:error] [pid 3832410:tid 3832410] [client 66.249.66.33:52688] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:19:28.154211 2026] [ssl:error] [pid 3843672:tid 3843672] (70014)End of file found: [client 216.73.216.199:64735] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:28.191506 2026] [ssl:error] [pid 3839308:tid 3839308] (EAI 2)Name or service not known: [client 144.76.19.72:26390] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:28.191533 2026] [ssl:error] [pid 3839308:tid 3839308] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:28.248954 2026] [ssl:error] [pid 3835858:tid 3835858] (EAI 2)Name or service not known: [client 144.76.19.72:26406] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:28.248978 2026] [ssl:error] [pid 3835858:tid 3835858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:30.122079 2026] [security2:error] [pid 3832506:tid 3832506] [client 49.51.183.15:54680] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "georgehotelofstamford.com"] [uri "/"] [unique_id "amtrgqFb0FrUr2hehPSUZAAAAC8"]
[Thu Jul 30 16:19:31.310645 2026] [ssl:error] [pid 3842038:tid 3842038] (EAI 2)Name or service not known: [client 144.76.19.72:32074] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:31.310682 2026] [ssl:error] [pid 3842038:tid 3842038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:31.365742 2026] [ssl:error] [pid 3841949:tid 3841949] (EAI 2)Name or service not known: [client 144.76.19.72:32080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:31.365779 2026] [ssl:error] [pid 3841949:tid 3841949] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:31.401957 2026] [security2:error] [pid 3832506:tid 3832506] [client 49.51.183.15:48738] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "georgehotelofstamford.com"] [uri "/"] [unique_id "amtrg6Fb0FrUr2hehPSUZQAAAC8"], referer: http://georgehotelofstamford.com
[Thu Jul 30 16:19:31.597518 2026] [security2:error] [pid 3838240:tid 3838240] [client 106.52.216.13:42078] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.raidersofthegamecupboard.co.uk"] [uri "/"] [unique_id "amtrgwDA4iCMk00mLqv2FgAAACQ"], referer: http://www.raidersofthegamecupboard.co.uk
[Thu Jul 30 16:19:32.369089 2026] [ssl:error] [pid 3832506:tid 3832506] (70014)End of file found: [client 216.73.216.199:15041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:32.992605 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:64204] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:33.198198 2026] [security2:error] [pid 3844337:tid 3844337] [client 49.51.183.15:49366] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.georgehotelofstamford.com"] [uri "/"] [unique_id "amtrhcBSur5rPh1oZ3F2-QAAAAo"], referer: https://georgehotelofstamford.com/
[Thu Jul 30 16:19:33.576977 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:33.993756 2026] [ssl:error] [pid 3842041:tid 3842041] (70014)End of file found: [client 216.73.216.199:13558] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:34.118355 2026] [access_compat:error] [pid 3822272:tid 3822272] [client 45.158.164.139:46802] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:19:34.581480 2026] [ssl:error] [pid 3838240:tid 3838240] (EAI 2)Name or service not known: [client 144.76.19.72:32090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:34.581513 2026] [ssl:error] [pid 3838240:tid 3838240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:34.785470 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:34.986206 2026] [ssl:error] [pid 3836096:tid 3836096] (EAI 2)Name or service not known: [client 144.76.19.72:32104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:34.986244 2026] [ssl:error] [pid 3836096:tid 3836096] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:37.684499 2026] [security2:error] [pid 3822272:tid 3822272] [client 129.226.195.146:58132] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.co.uk"] [uri "/"] [unique_id "amtriarhAbR_h9esoxg9vAAAABI"]
[Thu Jul 30 16:19:37.817657 2026] [ssl:error] [pid 3844337:tid 3844337] (70014)End of file found: [client 216.73.216.199:41195] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:38.042222 2026] [ssl:error] [pid 3839031:tid 3839031] (EAI 2)Name or service not known: [client 144.76.19.72:32116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:38.042257 2026] [ssl:error] [pid 3839031:tid 3839031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:38.121840 2026] [ssl:error] [pid 3845080:tid 3845080] (EAI 2)Name or service not known: [client 144.76.19.72:32126] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:38.121880 2026] [ssl:error] [pid 3845080:tid 3845080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:38.356780 2026] [autoindex:error] [pid 3840973:tid 3840973] [client 217.76.50.173:61698] AH01276: Cannot serve directory /home/erskinen/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:19:38.603515 2026] [security2:error] [pid 3839031:tid 3839031] [client 129.226.195.146:59124] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtriglkDyJ9V044igVHgQAAACo"], referer: http://spamp.co.uk
[Thu Jul 30 16:19:40.835412 2026] [security2:error] [pid 3839031:tid 3839031] [client 129.226.195.146:52708] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "spamp.com"] [uri "/"] [unique_id "amtrjAlkDyJ9V044igVHggAAACo"], referer: http://spamp.com/
[Thu Jul 30 16:19:41.178915 2026] [ssl:error] [pid 3842035:tid 3842035] (EAI 2)Name or service not known: [client 144.76.19.72:31666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:41.178961 2026] [ssl:error] [pid 3842035:tid 3842035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:41.233663 2026] [ssl:error] [pid 3838196:tid 3838196] (EAI 2)Name or service not known: [client 144.76.19.72:31680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:41.233694 2026] [ssl:error] [pid 3838196:tid 3838196] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:41.757116 2026] [security2:error] [pid 3836096:tid 3836096] [client 170.106.72.93:36450] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.unique-pr.co.uk"] [uri "/"] [unique_id "amtrjVVxBBWvADwS6uxM6wAAACs"]
[Thu Jul 30 16:19:42.121956 2026] [ssl:error] [pid 3829570:tid 3829570] (70014)End of file found: [client 216.73.216.199:17876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:44.235739 2026] [ssl:error] [pid 3842041:tid 3842041] (70014)End of file found: [client 216.73.216.199:42743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:44.285857 2026] [ssl:error] [pid 3838237:tid 3838237] (EAI 2)Name or service not known: [client 144.76.19.72:31684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:44.285894 2026] [ssl:error] [pid 3838237:tid 3838237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:44.338363 2026] [ssl:error] [pid 3815043:tid 3815043] (EAI 2)Name or service not known: [client 144.76.19.72:31686] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:44.338396 2026] [ssl:error] [pid 3815043:tid 3815043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:46.349383 2026] [ssl:error] [pid 3845164:tid 3845164] (70014)End of file found: [client 216.73.216.199:42199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:47.397623 2026] [ssl:error] [pid 3836227:tid 3836227] (EAI 2)Name or service not known: [client 144.76.19.72:31700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:47.397678 2026] [ssl:error] [pid 3836227:tid 3836227] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:47.454580 2026] [ssl:error] [pid 3842038:tid 3842038] (EAI 2)Name or service not known: [client 144.76.19.72:31706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:47.454611 2026] [ssl:error] [pid 3842038:tid 3842038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:47.623726 2026] [ssl:error] [pid 3845114:tid 3845114] (70014)End of file found: [client 216.73.216.199:19425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:49.398248 2026] [security2:error] [pid 3838995:tid 3838995] [client 185.191.171.5:58668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11126.0/prev_next,prev.html"] [unique_id "amtrlQlVVj5eyQDEtx3SgwAAACU"]
[Thu Jul 30 16:19:49.566036 2026] [ssl:error] [pid 3842045:tid 3842045] (70014)End of file found: [client 216.73.216.199:42390] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:50.033395 2026] [security2:error] [pid 3838995:tid 3838995] [client 43.130.16.212:43256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.nigelmassey.com"] [uri "/"] [unique_id "amtrlglVVj5eyQDEtx3ShAAAACU"]
[Thu Jul 30 16:19:50.511510 2026] [ssl:error] [pid 3838237:tid 3838237] (EAI 2)Name or service not known: [client 144.76.19.72:50582] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:50.511546 2026] [ssl:error] [pid 3838237:tid 3838237] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:50.566044 2026] [ssl:error] [pid 3842038:tid 3842038] (EAI 2)Name or service not known: [client 144.76.19.72:50596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:50.566096 2026] [ssl:error] [pid 3842038:tid 3842038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:52.690476 2026] [ssl:error] [pid 3845110:tid 3845110] (70014)End of file found: [client 216.73.216.199:31551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:53.620702 2026] [ssl:error] [pid 3842038:tid 3842038] (EAI 2)Name or service not known: [client 144.76.19.72:50610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:53.620739 2026] [ssl:error] [pid 3842038:tid 3842038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:53.676643 2026] [ssl:error] [pid 3845160:tid 3845160] (EAI 2)Name or service not known: [client 144.76.19.72:50620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:53.676684 2026] [ssl:error] [pid 3845160:tid 3845160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:54.503492 2026] [ssl:error] [pid 3844417:tid 3844417] (70014)End of file found: [client 216.73.216.199:22450] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:55.023082 2026] [ssl:error] [pid 3836096:tid 3836096] (70014)End of file found: [client 216.73.216.199:1439] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:56.129172 2026] [ssl:error] [pid 3845114:tid 3845114] (70014)End of file found: [client 216.73.216.199:15848] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:56.751892 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:50622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:56.751940 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:56.807880 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:50630] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:56.807915 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:19:56.837271 2026] [security2:error] [pid 3815043:tid 3815043] [client 85.208.96.194:12340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/w6sjo/john-allen-mrballen-wife"] [unique_id "amtrnCNCU9dhiJN0FMmUBAAAAAc"]
[Thu Jul 30 16:19:56.936407 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:24895] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:19:58.919280 2026] [authz_core:error] [pid 3842041:tid 3842041] [client 172.71.158.174:12855] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 16:19:59.995677 2026] [ssl:error] [pid 3837013:tid 3837013] (EAI 2)Name or service not known: [client 144.76.19.72:49792] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:19:59.995711 2026] [ssl:error] [pid 3837013:tid 3837013] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:00.484852 2026] [ssl:error] [pid 3844417:tid 3844417] (EAI 2)Name or service not known: [client 144.76.19.72:49802] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:00.484888 2026] [ssl:error] [pid 3844417:tid 3844417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:03.542521 2026] [ssl:error] [pid 3835858:tid 3835858] (EAI 2)Name or service not known: [client 144.76.19.72:49810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:03.542550 2026] [ssl:error] [pid 3835858:tid 3835858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:03.593578 2026] [ssl:error] [pid 3845160:tid 3845160] (70014)End of file found: [client 216.73.216.199:4080] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:03.600033 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:49824] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:03.600087 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:04.195833 2026] [ssl:error] [pid 3841867:tid 3841867] (70014)End of file found: [client 216.73.216.199:38926] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:06.658528 2026] [security2:error] [pid 3845944:tid 3845944] [client 114.119.145.125:20459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.georgehotelofstamford.com"] [uri "/sites/default/files/uploaded/Wine%20List%20Autumn%202023.pdf"] [unique_id "amtrpkQ5z6pQrzLY4J0wEAAAAAw"], referer: https://www.georgehotelofstamford.com/private-dining
[Thu Jul 30 16:20:06.660675 2026] [ssl:error] [pid 3843672:tid 3843672] (EAI 2)Name or service not known: [client 144.76.19.72:49840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:06.660704 2026] [ssl:error] [pid 3843672:tid 3843672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:06.712477 2026] [ssl:error] [pid 3835858:tid 3835858] (EAI 2)Name or service not known: [client 144.76.19.72:49842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:06.712514 2026] [ssl:error] [pid 3835858:tid 3835858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:07.215361 2026] [ssl:error] [pid 3845164:tid 3845164] (70014)End of file found: [client 216.73.216.199:38912] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:09.006497 2026] [authz_core:error] [pid 3843672:tid 3843672] [client 66.249.66.33:57844] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:20:09.009454 2026] [authz_core:error] [pid 3843672:tid 3843672] [client 66.249.66.33:57844] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:20:09.764434 2026] [ssl:error] [pid 3846020:tid 3846020] (EAI 2)Name or service not known: [client 144.76.19.72:22810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:09.764469 2026] [ssl:error] [pid 3846020:tid 3846020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:09.816246 2026] [ssl:error] [pid 3842038:tid 3842038] (EAI 2)Name or service not known: [client 144.76.19.72:22812] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:09.816276 2026] [ssl:error] [pid 3842038:tid 3842038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:10.593405 2026] [ssl:error] [pid 3829563:tid 3829563] (70014)End of file found: [client 216.73.216.199:20486] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:11.041816 2026] [lsapi:warn] [pid 3829570:tid 3829570] [client 97.74.93.24:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:20:11.208640 2026] [ssl:error] [pid 3839361:tid 3839361] (70014)End of file found: [client 216.73.216.199:57223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:12.872153 2026] [ssl:error] [pid 3845160:tid 3845160] (EAI 2)Name or service not known: [client 144.76.19.72:22814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:12.872221 2026] [ssl:error] [pid 3845160:tid 3845160] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:12.923748 2026] [ssl:error] [pid 3829570:tid 3829570] (EAI 2)Name or service not known: [client 144.76.19.72:22830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:12.923780 2026] [ssl:error] [pid 3829570:tid 3829570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:13.368820 2026] [security2:error] [pid 3846066:tid 3846066] [client 221.127.170.227:55222] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrrTGiojCx7vQOuPC61wAAACw"]
[Thu Jul 30 16:20:13.368867 2026] [security2:error] [pid 3846066:tid 3846066] [client 221.127.170.227:55222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrrTGiojCx7vQOuPC61wAAACw"]
[Thu Jul 30 16:20:13.369175 2026] [security2:error] [pid 3846066:tid 3846066] [client 221.127.170.227:55222] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrrTGiojCx7vQOuPC61wAAACw"]
[Thu Jul 30 16:20:15.979902 2026] [ssl:error] [pid 3802791:tid 3802791] (EAI 2)Name or service not known: [client 144.76.19.72:22844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:15.979938 2026] [ssl:error] [pid 3802791:tid 3802791] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:16.035585 2026] [ssl:error] [pid 3845114:tid 3845114] (EAI 2)Name or service not known: [client 144.76.19.72:22854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:16.035617 2026] [ssl:error] [pid 3845114:tid 3845114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:16.332731 2026] [ssl:error] [pid 3840973:tid 3840973] (70014)End of file found: [client 216.73.216.199:40983] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:16.492649 2026] [security2:error] [pid 3841804:tid 3841804] [client 101.32.36.136:25493] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrsA9tsQ4s4Fgx7_QqxwAAAAU"]
[Thu Jul 30 16:20:16.492712 2026] [security2:error] [pid 3841804:tid 3841804] [client 101.32.36.136:25493] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrsA9tsQ4s4Fgx7_QqxwAAAAU"]
[Thu Jul 30 16:20:16.493026 2026] [security2:error] [pid 3841804:tid 3841804] [client 101.32.36.136:25493] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrsA9tsQ4s4Fgx7_QqxwAAAAU"]
[Thu Jul 30 16:20:17.107384 2026] [security2:error] [pid 3836955:tid 3836955] [client 114.119.156.17:34729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/tag/kate-beckinsale/"] [unique_id "amtrscXo2X6A_S3zWlu5-wAAAC0"], referer: http://www.localhero.org.uk/tag/kate-beckinsale/
[Thu Jul 30 16:20:18.409811 2026] [security2:error] [pid 3839361:tid 3839361] [client 106.52.216.13:34278] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "auroravation.com"] [uri "/"] [unique_id "amtrsuEUi5bdAmzFBFoxdgAAAD4"]
[Thu Jul 30 16:20:19.089708 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:22862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:19.089741 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:19.142574 2026] [ssl:error] [pid 3844417:tid 3844417] (EAI 2)Name or service not known: [client 144.76.19.72:22878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:19.142607 2026] [ssl:error] [pid 3844417:tid 3844417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:19.555200 2026] [security2:error] [pid 3846066:tid 3846066] [client 101.32.36.136:29257] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrszGiojCx7vQOuPC62QAAACw"]
[Thu Jul 30 16:20:19.555249 2026] [security2:error] [pid 3846066:tid 3846066] [client 101.32.36.136:29257] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtrszGiojCx7vQOuPC62QAAACw"]
[Thu Jul 30 16:20:19.555521 2026] [security2:error] [pid 3846066:tid 3846066] [client 101.32.36.136:29257] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtrszGiojCx7vQOuPC62QAAACw"]
[Thu Jul 30 16:20:21.022006 2026] [security2:error] [pid 3846067:tid 3846067] [client 114.119.146.111:56419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103,102/request_format~html"] [unique_id "amtrtSJeW5QDwsL6J5MzZQAAAC8"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103/request_format~html
[Thu Jul 30 16:20:21.694796 2026] [security2:error] [pid 3845944:tid 3845944] [client 114.119.138.235:38135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "shelterprojects.org"] [uri "/tshelter-8designs/10designs2013/2013-Postdisaster-shelter-10designs-Pakistan.pdf"] [unique_id "amtrtUQ5z6pQrzLY4J0wFgAAAAw"]
[Thu Jul 30 16:20:22.201629 2026] [ssl:error] [pid 3846019:tid 3846019] (EAI 2)Name or service not known: [client 144.76.19.72:55028] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:22.201669 2026] [ssl:error] [pid 3846019:tid 3846019] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:22.258105 2026] [ssl:error] [pid 3845982:tid 3845982] (EAI 2)Name or service not known: [client 144.76.19.72:55034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:22.258140 2026] [ssl:error] [pid 3845982:tid 3845982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:22.455399 2026] [security2:error] [pid 3839031:tid 3839031] [client 114.119.146.111:56431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103,102/request_format~html"] [unique_id "amtrtglkDyJ9V044igVHhgAAACo"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1577059200/cat_ids~104,103/request_format~html
[Thu Jul 30 16:20:23.073475 2026] [authz_core:error] [pid 3845944:tid 3845944] [client 66.249.66.34:64263] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:20:23.076213 2026] [authz_core:error] [pid 3845944:tid 3845944] [client 66.249.66.34:64263] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:20:25.313393 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:55046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:25.313442 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:25.410825 2026] [ssl:error] [pid 3846063:tid 3846063] (EAI 2)Name or service not known: [client 144.76.19.72:55060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:25.410860 2026] [ssl:error] [pid 3846063:tid 3846063] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:25.489242 2026] [security2:error] [pid 3845114:tid 3845114] [client 185.191.171.14:59786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11465.0/prev_next,prev.html"] [unique_id "amtruRGFtqe-7r0XxlsAvgAAAA0"]
[Thu Jul 30 16:20:27.726935 2026] [cgi:error] [pid 3845981:tid 3845981] [client 4.223.67.9:26819] AH02812: stderr from /home/orgent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:20:28.484090 2026] [ssl:error] [pid 3845944:tid 3845944] (EAI 2)Name or service not known: [client 144.76.19.72:55070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:28.484142 2026] [ssl:error] [pid 3845944:tid 3845944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:28.535864 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:55084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:28.535899 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:29.933950 2026] [security2:error] [pid 3832410:tid 3832410] [client 185.191.171.3:17282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,8609.0.html"] [unique_id "amtrvVmoEl6ISpsAMn8gswAAAA8"]
[Thu Jul 30 16:20:31.243203 2026] [authz_core:error] [pid 3844337:tid 3844337] [client 4.223.67.9:39708] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/l10n/error_log
[Thu Jul 30 16:20:31.378407 2026] [access_compat:error] [pid 3844337:tid 3844337] [client 4.223.67.9:39708] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 16:20:31.619099 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:56232] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:31.619134 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:31.671006 2026] [ssl:error] [pid 3829569:tid 3829569] (EAI 2)Name or service not known: [client 144.76.19.72:56242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:31.671040 2026] [ssl:error] [pid 3829569:tid 3829569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:32.792219 2026] [security2:error] [pid 3840973:tid 3840973] [client 77.90.185.129:0] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.papier.com.mt"] [uri "/sftp-config.json"] [unique_id "amtrwNaiO-YM9DDPG44kdAAAAAA"]
[Thu Jul 30 16:20:32.792447 2026] [security2:error] [pid 3840973:tid 3840973] [client 77.90.185.129:0] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.papier.com.mt"] [uri "/sftp-config.json"] [unique_id "amtrwNaiO-YM9DDPG44kdAAAAAA"]
[Thu Jul 30 16:20:32.792628 2026] [security2:error] [pid 3840973:tid 3840973] [client 77.90.185.129:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.papier.com.mt"] [uri "/sftp-config.json"] [unique_id "amtrwNaiO-YM9DDPG44kdAAAAAA"]
[Thu Jul 30 16:20:34.726370 2026] [ssl:error] [pid 3845080:tid 3845080] (EAI 2)Name or service not known: [client 144.76.19.72:56258] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:34.726401 2026] [ssl:error] [pid 3845080:tid 3845080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:34.777907 2026] [ssl:error] [pid 3846062:tid 3846062] (EAI 2)Name or service not known: [client 144.76.19.72:56260] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:34.777938 2026] [ssl:error] [pid 3846062:tid 3846062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:36.617150 2026] [access_compat:error] [pid 3847991:tid 3847991] [client 45.158.164.139:54588] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:20:37.835487 2026] [ssl:error] [pid 3846062:tid 3846062] (EAI 2)Name or service not known: [client 144.76.19.72:56272] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:37.835514 2026] [ssl:error] [pid 3846062:tid 3846062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:37.890646 2026] [ssl:error] [pid 3837012:tid 3837012] (EAI 2)Name or service not known: [client 144.76.19.72:56274] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:37.890673 2026] [ssl:error] [pid 3837012:tid 3837012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:38.355001 2026] [ssl:error] [pid 3841867:tid 3841867] (70014)End of file found: [client 216.73.216.199:27800] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:38.807244 2026] [ssl:error] [pid 3842035:tid 3842035] (70014)End of file found: [client 216.73.216.199:18780] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:40.011333 2026] [ssl:error] [pid 3837012:tid 3837012] (70014)End of file found: [client 216.73.216.199:9475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:40.956772 2026] [ssl:error] [pid 3840973:tid 3840973] (EAI 2)Name or service not known: [client 144.76.19.72:61032] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:40.956805 2026] [ssl:error] [pid 3840973:tid 3840973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:41.008491 2026] [ssl:error] [pid 3840973:tid 3840973] (EAI 2)Name or service not known: [client 144.76.19.72:61058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:41.008519 2026] [ssl:error] [pid 3840973:tid 3840973] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:42.293749 2026] [security2:error] [pid 3836955:tid 3836955] [client 94.23.188.201:18212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/monique-wright-channel-7-weight-loss"] [unique_id "amtrysXo2X6A_S3zWlu6AgAAAC0"]
[Thu Jul 30 16:20:44.062781 2026] [ssl:error] [pid 3829569:tid 3829569] (EAI 2)Name or service not known: [client 144.76.19.72:61066] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:44.062818 2026] [ssl:error] [pid 3829569:tid 3829569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:44.116250 2026] [ssl:error] [pid 3841867:tid 3841867] (EAI 2)Name or service not known: [client 144.76.19.72:61080] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:44.116308 2026] [ssl:error] [pid 3841867:tid 3841867] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:44.444516 2026] [access_compat:error] [pid 3836096:tid 3836096] [client 172.202.95.21:36232] AH01797: client denied by server configuration: /home/tompalm/public_html/wp-content/uploads/dlm_uploads/
[Thu Jul 30 16:20:45.103018 2026] [authz_core:error] [pid 3845080:tid 3845080] [client 66.249.66.33:42075] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:20:45.105706 2026] [authz_core:error] [pid 3845080:tid 3845080] [client 66.249.66.33:42075] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:20:45.459380 2026] [ssl:error] [pid 3847822:tid 3847822] (70014)End of file found: [client 216.73.216.199:57550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:45.684640 2026] [cgi:error] [pid 3841868:tid 3841868] [client 20.104.22.47:51218] AH02812: stderr from /home/winterb/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:20:46.697601 2026] [authz_core:error] [pid 3844337:tid 3844337] [client 4.223.67.9:39708] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 16:20:47.172707 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:61108] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:47.172755 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:47.227217 2026] [ssl:error] [pid 3838240:tid 3838240] (EAI 2)Name or service not known: [client 144.76.19.72:61118] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:47.227243 2026] [ssl:error] [pid 3838240:tid 3838240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:47.574879 2026] [ssl:error] [pid 3843672:tid 3843672] (70014)End of file found: [client 216.73.216.199:39793] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:47.742588 2026] [security2:error] [pid 3846061:tid 3846061] [client 114.119.147.137:26251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "jeansandcasual.devwebsitehub.com"] [uri "/sitemap-item-326.xml"] [unique_id "amtrz7cAoBmpHfZiucCFugAAACE"]
[Thu Jul 30 16:20:48.774391 2026] [ssl:error] [pid 3846062:tid 3846062] (70014)End of file found: [client 216.73.216.199:64254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:50.280536 2026] [ssl:error] [pid 3845944:tid 3845944] (EAI 2)Name or service not known: [client 144.76.19.72:53470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:50.280567 2026] [ssl:error] [pid 3845944:tid 3845944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:50.333583 2026] [ssl:error] [pid 3842046:tid 3842046] (EAI 2)Name or service not known: [client 144.76.19.72:53478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:50.333621 2026] [ssl:error] [pid 3842046:tid 3842046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:51.671409 2026] [security2:error] [pid 3846066:tid 3846066] [client 185.191.171.15:52740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/2009/10/15/abu-dhabi-yas-marina-f1-circuit/"] [unique_id "amtr0zGiojCx7vQOuPC7AwAAACw"]
[Thu Jul 30 16:20:52.098344 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:27307] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:53.290970 2026] [ssl:error] [pid 3847821:tid 3847821] (70014)End of file found: [client 216.73.216.199:5487] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:53.389661 2026] [ssl:error] [pid 3841868:tid 3841868] (EAI 2)Name or service not known: [client 144.76.19.72:53484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:53.389702 2026] [ssl:error] [pid 3841868:tid 3841868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:53.441632 2026] [ssl:error] [pid 3842035:tid 3842035] (EAI 2)Name or service not known: [client 144.76.19.72:53494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:53.441658 2026] [ssl:error] [pid 3842035:tid 3842035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:54.085542 2026] [ssl:error] [pid 3842038:tid 3842038] (70014)End of file found: [client 216.73.216.199:57901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:56.498058 2026] [ssl:error] [pid 3845164:tid 3845164] (EAI 2)Name or service not known: [client 144.76.19.72:53496] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:56.498112 2026] [ssl:error] [pid 3845164:tid 3845164] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:56.560513 2026] [ssl:error] [pid 3815043:tid 3815043] (EAI 2)Name or service not known: [client 144.76.19.72:53498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:56.560540 2026] [ssl:error] [pid 3815043:tid 3815043] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:57.336418 2026] [security2:error] [pid 3846060:tid 3846060] [client 114.119.136.137:63087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tripodhome.co.uk"] [uri "/wp-content/uploads/2017/09/krupup-cans.jpg"] [unique_id "amtr2XcJZ1n1WZwvXVaarAAAAB4"], referer: https://tripodhome.co.uk/wp-content/uploads/2017/09/krupup-cans.jpg
[Thu Jul 30 16:20:57.420985 2026] [ssl:error] [pid 3844417:tid 3844417] (70014)End of file found: [client 216.73.216.199:46027] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:57.542206 2026] [security2:error] [pid 3835858:tid 3835858] [client 185.191.171.18:14684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/talkeetna-denali-webcam"] [unique_id "amtr2QAnyPdIvgNWf9V1ZQAAACg"]
[Thu Jul 30 16:20:58.598936 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:2832] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:20:59.632046 2026] [ssl:error] [pid 3842038:tid 3842038] (EAI 2)Name or service not known: [client 144.76.19.72:47756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:59.632096 2026] [ssl:error] [pid 3842038:tid 3842038] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:20:59.686835 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:47758] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:20:59.686884 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:02.742090 2026] [ssl:error] [pid 3839031:tid 3839031] (EAI 2)Name or service not known: [client 144.76.19.72:47766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:02.742121 2026] [ssl:error] [pid 3839031:tid 3839031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:02.796517 2026] [ssl:error] [pid 3846020:tid 3846020] (EAI 2)Name or service not known: [client 144.76.19.72:47776] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:02.796549 2026] [ssl:error] [pid 3846020:tid 3846020] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:03.231227 2026] [ssl:error] [pid 3847822:tid 3847822] (70014)End of file found: [client 216.73.216.199:3400] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:04.132768 2026] [ssl:error] [pid 3845156:tid 3845156] (70014)End of file found: [client 216.73.216.199:43234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:04.768684 2026] [ssl:error] [pid 3844417:tid 3844417] (70014)End of file found: [client 216.73.216.199:56413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:04.822908 2026] [security2:error] [pid 3848691:tid 3848691] [client 82.156.88.97:47030] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tompalmer.co.uk"] [uri "/"] [unique_id "amtr4MCaPZW6FlVUcFY6wAAAABU"]
[Thu Jul 30 16:21:05.853683 2026] [ssl:error] [pid 3841804:tid 3841804] (EAI 2)Name or service not known: [client 144.76.19.72:47786] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:05.853718 2026] [ssl:error] [pid 3841804:tid 3841804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:05.904692 2026] [ssl:error] [pid 3841804:tid 3841804] (EAI 2)Name or service not known: [client 144.76.19.72:47796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:05.904720 2026] [ssl:error] [pid 3841804:tid 3841804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:08.488184 2026] [security2:error] [pid 3845164:tid 3845164] [client 150.5.131.157:63305] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtr5MY1-11glp6p17QqEwAAABY"]
[Thu Jul 30 16:21:08.488237 2026] [security2:error] [pid 3845164:tid 3845164] [client 150.5.131.157:63305] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtr5MY1-11glp6p17QqEwAAABY"]
[Thu Jul 30 16:21:08.488546 2026] [security2:error] [pid 3845164:tid 3845164] [client 150.5.131.157:63305] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtr5MY1-11glp6p17QqEwAAABY"]
[Thu Jul 30 16:21:08.956845 2026] [ssl:error] [pid 3829563:tid 3829563] (EAI 2)Name or service not known: [client 144.76.19.72:47808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:08.956884 2026] [ssl:error] [pid 3829563:tid 3829563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:09.010088 2026] [ssl:error] [pid 3845944:tid 3845944] (EAI 2)Name or service not known: [client 144.76.19.72:47820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:09.010121 2026] [ssl:error] [pid 3845944:tid 3845944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:10.552604 2026] [security2:error] [pid 3845982:tid 3845982] [client 46.106.67.168:43467] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtr5k7nV0c5Wx5APrER2AAAABk"]
[Thu Jul 30 16:21:10.552658 2026] [security2:error] [pid 3845982:tid 3845982] [client 46.106.67.168:43467] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtr5k7nV0c5Wx5APrER2AAAABk"]
[Thu Jul 30 16:21:10.552953 2026] [security2:error] [pid 3845982:tid 3845982] [client 46.106.67.168:43467] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtr5k7nV0c5Wx5APrER2AAAABk"]
[Thu Jul 30 16:21:10.855770 2026] [core:error] [pid 3848197:tid 3848197] (13)Permission denied: [client 216.73.216.199:8987] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS2/closing_wait
[Thu Jul 30 16:21:11.238171 2026] [cgi:error] [pid 3841867:tid 3841867] [client 194.9.110.170:21608] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 16:21:11.634198 2026] [security2:error] [pid 3845982:tid 3845982] [client 114.119.135.171:29595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiology-gift-voucher/"] [unique_id "amtr507nV0c5Wx5APrER2QAAABk"], referer: https://www.kinesiologylondon.co.uk/kinesiology-gift-voucher/
[Thu Jul 30 16:21:11.743879 2026] [ssl:error] [pid 3848197:tid 3848197] (70014)End of file found: [client 216.73.216.199:8987] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:12.068014 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:50200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:12.068045 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:12.125231 2026] [ssl:error] [pid 3845114:tid 3845114] (EAI 2)Name or service not known: [client 144.76.19.72:50206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:12.125265 2026] [ssl:error] [pid 3845114:tid 3845114] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:12.953594 2026] [ssl:error] [pid 3847822:tid 3847822] (70014)End of file found: [client 216.73.216.199:40846] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:14.167168 2026] [ssl:error] [pid 3838238:tid 3838238] (70014)End of file found: [client 216.73.216.199:49759] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:14.271576 2026] [security2:error] [pid 3829563:tid 3829563] [client 103.248.222.154:39124] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtr6ujrseRLgrj7090knQAAAC4"]
[Thu Jul 30 16:21:14.271626 2026] [security2:error] [pid 3829563:tid 3829563] [client 103.248.222.154:39124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtr6ujrseRLgrj7090knQAAAC4"]
[Thu Jul 30 16:21:14.271851 2026] [security2:error] [pid 3829563:tid 3829563] [client 103.248.222.154:39124] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtr6ujrseRLgrj7090knQAAAC4"]
[Thu Jul 30 16:21:15.182362 2026] [ssl:error] [pid 3841804:tid 3841804] (EAI 2)Name or service not known: [client 144.76.19.72:50210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:15.182397 2026] [ssl:error] [pid 3841804:tid 3841804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:15.235517 2026] [ssl:error] [pid 3839031:tid 3839031] (EAI 2)Name or service not known: [client 144.76.19.72:50226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:15.235552 2026] [ssl:error] [pid 3839031:tid 3839031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:17.076914 2026] [ssl:error] [pid 3840973:tid 3840973] (70014)End of file found: [client 216.73.216.199:37845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:17.312930 2026] [security2:error] [pid 3846066:tid 3846066] [client 114.119.141.139:25957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.jonathanmeyerart.com"] [uri "/pages/35/Studio/st_0776/page:6"] [unique_id "amtr7TGiojCx7vQOuPC7MAAAACw"], referer: https://www.jonathanmeyerart.com/section/35/2
[Thu Jul 30 16:21:18.097683 2026] [security2:error] [pid 3842046:tid 3842046] [client 85.208.96.200:52714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2358.0/prev_next,next.html"] [unique_id "amtr7t9dkIbd1Dunf9-NegAAAEY"]
[Thu Jul 30 16:21:18.320085 2026] [ssl:error] [pid 3846062:tid 3846062] (EAI 2)Name or service not known: [client 144.76.19.72:50236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:18.320123 2026] [ssl:error] [pid 3846062:tid 3846062] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:18.374737 2026] [ssl:error] [pid 3848805:tid 3848805] (EAI 2)Name or service not known: [client 144.76.19.72:50248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:18.374768 2026] [ssl:error] [pid 3848805:tid 3848805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:19.287765 2026] [lsapi:warn] [pid 3832410:tid 3832410] [client 45.158.164.139:58040] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:19.287808 2026] [lsapi:warn] [pid 3832410:tid 3832410] [client 45.158.164.139:58040] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:19.294634 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:19.294672 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:19.708269 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:19.708300 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:20.036397 2026] [lsapi:warn] [pid 3847821:tid 3847821] [client 45.158.164.139:58076] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:20.036441 2026] [lsapi:warn] [pid 3847821:tid 3847821] [client 45.158.164.139:58076] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:20.038475 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:20.038501 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:20.212220 2026] [ssl:error] [pid 3849814:tid 3849814] (70014)End of file found: [client 216.73.216.199:1168] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:20.340377 2026] [lsapi:warn] [pid 3836960:tid 3836960] [client 45.158.164.139:58080] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:20.340423 2026] [lsapi:warn] [pid 3836960:tid 3836960] [client 45.158.164.139:58080] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:20.345955 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:20.345981 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:20.629457 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:20.629488 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:20.816427 2026] [ssl:error] [pid 3849568:tid 3849568] (70014)End of file found: [client 216.73.216.199:29599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:20.899280 2026] [lsapi:warn] [pid 3845080:tid 3845080] [client 45.158.164.139:37468] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:20.899330 2026] [lsapi:warn] [pid 3845080:tid 3845080] [client 45.158.164.139:37468] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:20.900623 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:20.900644 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:21.205309 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:21.205347 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:21.429400 2026] [ssl:error] [pid 3848691:tid 3848691] (EAI 2)Name or service not known: [client 144.76.19.72:44464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:21.429433 2026] [ssl:error] [pid 3848691:tid 3848691] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:21.484398 2026] [ssl:error] [pid 3836960:tid 3836960] (EAI 2)Name or service not known: [client 144.76.19.72:44466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:21.484435 2026] [ssl:error] [pid 3836960:tid 3836960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:21.573665 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:21.573700 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:21.891722 2026] [security2:error] [pid 3845080:tid 3845080] [client 43.166.247.82:37144] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtr8cwalV4V3Crw6EguYAAAAAQ"]
[Thu Jul 30 16:21:21.943790 2026] [lsapi:warn] [pid 3836960:tid 3836960] [client 45.158.164.139:37490] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:21.943818 2026] [lsapi:warn] [pid 3836960:tid 3836960] [client 45.158.164.139:37490] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:21.945870 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:21.945893 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:22.375287 2026] [lsapi:warn] [pid 3836955:tid 3836955] [client 45.158.164.139:37494] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:22.375341 2026] [lsapi:warn] [pid 3836955:tid 3836955] [client 45.158.164.139:37494] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:22.408665 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:22.408692 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:22.532836 2026] [ssl:error] [pid 3847822:tid 3847822] (70014)End of file found: [client 216.73.216.199:38796] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:22.814139 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:22.814170 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:23.107336 2026] [security2:error] [pid 3849425:tid 3849425] [client 98.83.8.142:43996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amtr81pYyjDwMYj9u5dBowAAABs"]
[Thu Jul 30 16:21:23.348230 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:23.348262 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:23.762342 2026] [lsapi:warn] [pid 3841804:tid 3841804] [client 45.158.164.139:37540] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:23.762384 2026] [lsapi:warn] [pid 3841804:tid 3841804] [client 45.158.164.139:37540] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:23.817233 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:23.817261 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:24.618748 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:24.618790 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:24.619285 2026] [ssl:error] [pid 3846066:tid 3846066] (EAI 2)Name or service not known: [client 144.76.19.72:44470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:24.619324 2026] [ssl:error] [pid 3846066:tid 3846066] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:24.789009 2026] [security2:error] [pid 3844417:tid 3844417] [client 43.166.247.82:59234] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "maisongerlyn.be"] [uri "/"] [unique_id "amtr9PZeOK2FvC8M6QE0hQAAABE"], referer: http://maisongerlyn.be
[Thu Jul 30 16:21:24.963204 2026] [ssl:error] [pid 3836960:tid 3836960] (EAI 2)Name or service not known: [client 144.76.19.72:44484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:24.963235 2026] [ssl:error] [pid 3836960:tid 3836960] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:25.457698 2026] [lsapi:warn] [pid 3849814:tid 3849814] [client 45.158.164.139:37566] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:25.457742 2026] [lsapi:warn] [pid 3849814:tid 3849814] [client 45.158.164.139:37566] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:25.460731 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:25.460756 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:26.018167 2026] [lsapi:warn] [pid 3849568:tid 3849568] [client 45.158.164.139:37596] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:26.018215 2026] [lsapi:warn] [pid 3849568:tid 3849568] [client 45.158.164.139:37596] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:26.438704 2026] [lsapi:warn] [pid 3849817:tid 3849817] [client 45.158.164.139:37598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:26.438745 2026] [lsapi:warn] [pid 3849817:tid 3849817] [client 45.158.164.139:37598] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:26.444236 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:26.444265 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:26.590821 2026] [core:error] [pid 3846066:tid 3846066] [client 66.249.66.8:45933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:21:26.590855 2026] [core:error] [pid 3846066:tid 3846066] [client 66.249.66.8:45933] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:21:26.748366 2026] [lsapi:warn] [pid 3802791:tid 3802791] [client 45.158.164.139:37612] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:26.748418 2026] [lsapi:warn] [pid 3802791:tid 3802791] [client 45.158.164.139:37612] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:27.036726 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:27.036755 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:27.353627 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:27.353653 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:27.769757 2026] [lsapi:warn] [pid 3829569:tid 3829569] [client 45.158.164.139:37646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:27.769799 2026] [lsapi:warn] [pid 3829569:tid 3829569] [client 45.158.164.139:37646] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:27.966343 2026] [ssl:error] [pid 3836960:tid 3836960] (70014)End of file found: [client 216.73.216.199:63226] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:28.022968 2026] [ssl:error] [pid 3850580:tid 3850580] (EAI 2)Name or service not known: [client 144.76.19.72:44490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:28.023012 2026] [ssl:error] [pid 3850580:tid 3850580] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:28.068604 2026] [ssl:error] [pid 3850576:tid 3850576] (70014)End of file found: [client 216.73.216.199:1969] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:28.085282 2026] [ssl:error] [pid 3850582:tid 3850582] (EAI 2)Name or service not known: [client 144.76.19.72:44502] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:28.085331 2026] [ssl:error] [pid 3850582:tid 3850582] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:28.147950 2026] [lsapi:warn] [pid 3850578:tid 3850578] [client 45.158.164.139:37652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:28.147990 2026] [lsapi:warn] [pid 3850578:tid 3850578] [client 45.158.164.139:37652] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:28.150278 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:28.150301 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:28.522773 2026] [lsapi:warn] [pid 3849817:tid 3849817] [client 45.158.164.139:37658] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:28.522808 2026] [lsapi:warn] [pid 3849817:tid 3849817] [client 45.158.164.139:37658] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:28.524339 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:28.524369 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:28.570920 2026] [ssl:error] [pid 3849814:tid 3849814] (70014)End of file found: [client 216.73.216.199:54695] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:28.879999 2026] [lsapi:warn] [pid 3841144:tid 3841144] [client 45.158.164.139:37662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:28.880039 2026] [lsapi:warn] [pid 3841144:tid 3841144] [client 45.158.164.139:37662] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:28.896236 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:28.896264 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:29.172954 2026] [security2:error] [pid 3850509:tid 3850509] [client 18.211.39.188:53770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/jargon/jarg411/jargon-4.1.1/submissions.html"] [unique_id "amtr-Y4FTBWkgIZaH2MCGwAAACM"]
[Thu Jul 30 16:21:29.324957 2026] [lsapi:warn] [pid 3842038:tid 3842038] [client 45.158.164.139:37672] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:29.325022 2026] [lsapi:warn] [pid 3842038:tid 3842038] [client 45.158.164.139:37672] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:29.332704 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:29.332744 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:29.669704 2026] [lsapi:warn] [pid 3850511:tid 3850511] [client 45.158.164.139:37674] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:29.669745 2026] [lsapi:warn] [pid 3850511:tid 3850511] [client 45.158.164.139:37674] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:29.671911 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:29.671951 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:30.012495 2026] [lsapi:warn] [pid 3841868:tid 3841868] [client 45.158.164.139:37676] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:30.012543 2026] [lsapi:warn] [pid 3841868:tid 3841868] [client 45.158.164.139:37676] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:30.020747 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:30.020788 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:30.370222 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:30.370249 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:30.743349 2026] [lsapi:warn] [pid 3832410:tid 3832410] [client 45.158.164.139:53854] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:30.743384 2026] [lsapi:warn] [pid 3832410:tid 3832410] [client 45.158.164.139:53854] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:30.746223 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:30.746248 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:31.146694 2026] [lsapi:warn] [pid 3850582:tid 3850582] [client 45.158.164.139:53858] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:31.146735 2026] [lsapi:warn] [pid 3850582:tid 3850582] [client 45.158.164.139:53858] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:31.148729 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:31.148751 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:31.159008 2026] [ssl:error] [pid 3829569:tid 3829569] (EAI 2)Name or service not known: [client 144.76.19.72:58462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:31.159035 2026] [ssl:error] [pid 3829569:tid 3829569] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:31.213545 2026] [ssl:error] [pid 3848197:tid 3848197] (EAI 2)Name or service not known: [client 144.76.19.72:58476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:31.213584 2026] [ssl:error] [pid 3848197:tid 3848197] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:31.501912 2026] [lsapi:warn] [pid 3847821:tid 3847821] [client 45.158.164.139:53866] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:31.501945 2026] [lsapi:warn] [pid 3847821:tid 3847821] [client 45.158.164.139:53866] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:31.809346 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:53870] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:31.809389 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:53870] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:32.176371 2026] [lsapi:warn] [pid 3836955:tid 3836955] [client 45.158.164.139:53880] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:32.176405 2026] [lsapi:warn] [pid 3836955:tid 3836955] [client 45.158.164.139:53880] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:32.179439 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:32.179462 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:32.469168 2026] [lsapi:warn] [pid 3841867:tid 3841867] [client 45.158.164.139:53890] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:32.469211 2026] [lsapi:warn] [pid 3841867:tid 3841867] [client 45.158.164.139:53890] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:32.471278 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:32.471299 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:32.614142 2026] [authz_core:error] [pid 3838238:tid 3838238] [client 104.196.47.32:53330] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://holisticclear.co.uk
[Thu Jul 30 16:21:32.616815 2026] [authz_core:error] [pid 3838238:tid 3838238] [client 104.196.47.32:53330] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://holisticclear.co.uk
[Thu Jul 30 16:21:32.770992 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:53900] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:32.771024 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:53900] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:33.053341 2026] [lsapi:warn] [pid 3848691:tid 3848691] [client 45.158.164.139:53914] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:33.053390 2026] [lsapi:warn] [pid 3848691:tid 3848691] [client 45.158.164.139:53914] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:33.055389 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:33.055418 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:33.350608 2026] [lsapi:warn] [pid 3841144:tid 3841144] [client 45.158.164.139:53936] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:33.350639 2026] [lsapi:warn] [pid 3841144:tid 3841144] [client 45.158.164.139:53936] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:33.352703 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:33.352725 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:33.784927 2026] [lsapi:warn] [pid 3841144:tid 3841144] [client 45.158.164.139:53938] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:33.784953 2026] [lsapi:warn] [pid 3841144:tid 3841144] [client 45.158.164.139:53938] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:34.271968 2026] [ssl:error] [pid 3850452:tid 3850452] (EAI 2)Name or service not known: [client 144.76.19.72:58486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:34.272005 2026] [ssl:error] [pid 3850452:tid 3850452] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:34.327032 2026] [ssl:error] [pid 3850582:tid 3850582] (EAI 2)Name or service not known: [client 144.76.19.72:58498] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:34.327075 2026] [ssl:error] [pid 3850582:tid 3850582] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:34.597547 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:34.597577 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:34.704531 2026] [ssl:error] [pid 3847821:tid 3847821] (70014)End of file found: [client 216.73.216.199:11586] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:34.998987 2026] [ssl:error] [pid 3849705:tid 3849705] (70014)End of file found: [client 216.73.216.199:19261] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:35.056239 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:35.056267 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:35.361354 2026] [lsapi:warn] [pid 3847905:tid 3847905] [client 45.158.164.139:53972] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:35.361391 2026] [lsapi:warn] [pid 3847905:tid 3847905] [client 45.158.164.139:53972] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:35.364002 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:35.364025 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:35.679373 2026] [lsapi:warn] [pid 3850452:tid 3850452] [client 45.158.164.139:53988] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:35.679418 2026] [lsapi:warn] [pid 3850452:tid 3850452] [client 45.158.164.139:53988] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:36.065376 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:53994] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:36.065425 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:53994] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:36.350423 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:54000] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:36.350451 2026] [lsapi:warn] [pid 3848197:tid 3848197] [client 45.158.164.139:54000] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:36.353654 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:36.353681 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:37.055545 2026] [lsapi:warn] [pid 3850453:tid 3850453] [client 45.158.164.139:54004] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:37.055584 2026] [lsapi:warn] [pid 3850453:tid 3850453] [client 45.158.164.139:54004] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:37.109640 2026] [ssl:error] [pid 3836227:tid 3836227] (70014)End of file found: [client 216.73.216.199:14017] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:37.399045 2026] [lsapi:warn] [pid 3850510:tid 3850510] [client 45.158.164.139:54036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:37.399092 2026] [lsapi:warn] [pid 3850510:tid 3850510] [client 45.158.164.139:54036] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:37.414694 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:21:37.414740 2026] [lsapi:warn] [pid 3836096:tid 3836096] [client 172.202.95.21:29843] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:21:37.415152 2026] [ssl:error] [pid 3850453:tid 3850453] (EAI 2)Name or service not known: [client 144.76.19.72:58506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:37.415179 2026] [ssl:error] [pid 3850453:tid 3850453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:37.466985 2026] [ssl:error] [pid 3837010:tid 3837010] (EAI 2)Name or service not known: [client 144.76.19.72:58518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:37.467010 2026] [ssl:error] [pid 3837010:tid 3837010] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:40.596514 2026] [ssl:error] [pid 3842046:tid 3842046] (EAI 2)Name or service not known: [client 144.76.19.72:29800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:40.596558 2026] [ssl:error] [pid 3842046:tid 3842046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:40.651608 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:29808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:40.651641 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:41.264505 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:50446] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:41.974594 2026] [security2:error] [pid 3848691:tid 3848691] [client 43.166.251.233:58958] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "craft-buddies.co.uk"] [uri "/"] [unique_id "amtsBcCaPZW6FlVUcFY6zgAAABU"]
[Thu Jul 30 16:21:42.253198 2026] [ssl:error] [pid 3846066:tid 3846066] (70014)End of file found: [client 216.73.216.199:61480] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:42.269523 2026] [authz_core:error] [pid 3832410:tid 3832410] [client 66.249.66.35:37140] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:21:42.272188 2026] [authz_core:error] [pid 3832410:tid 3832410] [client 66.249.66.35:37140] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:21:42.287545 2026] [security2:error] [pid 3836227:tid 3836227] [client 114.119.157.183:40201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103/request_format~html"] [unique_id "amtsBqmDkylICXdHmhzJVQAAADU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E14
[Thu Jul 30 16:21:43.706521 2026] [ssl:error] [pid 3845982:tid 3845982] (EAI 2)Name or service not known: [client 144.76.19.72:29820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:43.706553 2026] [ssl:error] [pid 3845982:tid 3845982] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:43.761289 2026] [ssl:error] [pid 3851515:tid 3851515] (EAI 2)Name or service not known: [client 144.76.19.72:29836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:43.761333 2026] [ssl:error] [pid 3851515:tid 3851515] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:44.678200 2026] [security2:error] [pid 3845080:tid 3845080] [client 178.152.85.37:47306] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsCMwalV4V3Crw6EgucgAAAAQ"]
[Thu Jul 30 16:21:44.678282 2026] [security2:error] [pid 3845080:tid 3845080] [client 178.152.85.37:47306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsCMwalV4V3Crw6EgucgAAAAQ"]
[Thu Jul 30 16:21:44.678625 2026] [security2:error] [pid 3845080:tid 3845080] [client 178.152.85.37:47306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsCMwalV4V3Crw6EgucgAAAAQ"]
[Thu Jul 30 16:21:44.789693 2026] [ssl:error] [pid 3850575:tid 3850575] (70014)End of file found: [client 216.73.216.199:46832] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:45.286193 2026] [security2:error] [pid 3850510:tid 3850510] [client 114.119.157.183:40205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103/request_format~html"] [unique_id "amtsCSDlGVIaeibKQ4zeQwAAACY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E14
[Thu Jul 30 16:21:45.348805 2026] [access_compat:error] [pid 3850509:tid 3850509] [client 196.210.204.226:49522] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/this-is-a-free-national-awareness-message, referer: https://blog.alism.com/this-is-a-free-national-awareness-message
[Thu Jul 30 16:21:45.348911 2026] [access_compat:error] [pid 3850509:tid 3850509] [client 196.210.204.226:49522] AH01797: client denied by server configuration: /home/alismcom/public_html/blog/index.php, referer: https://blog.alism.com/this-is-a-free-national-awareness-message
[Thu Jul 30 16:21:46.398842 2026] [security2:error] [pid 3849705:tid 3849705] [client 47.237.254.73:40017] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsCpS_Po4Dni1x61QwpwAAACU"]
[Thu Jul 30 16:21:46.398900 2026] [security2:error] [pid 3849705:tid 3849705] [client 47.237.254.73:40017] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsCpS_Po4Dni1x61QwpwAAACU"]
[Thu Jul 30 16:21:46.399193 2026] [security2:error] [pid 3849705:tid 3849705] [client 47.237.254.73:40017] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsCpS_Po4Dni1x61QwpwAAACU"]
[Thu Jul 30 16:21:46.590185 2026] [access_compat:error] [pid 3842035:tid 3842035] [client 45.158.164.139:48006] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:21:46.816649 2026] [ssl:error] [pid 3851322:tid 3851322] (EAI 2)Name or service not known: [client 144.76.19.72:29852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:46.816684 2026] [ssl:error] [pid 3851322:tid 3851322] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:46.870102 2026] [ssl:error] [pid 3845156:tid 3845156] (EAI 2)Name or service not known: [client 144.76.19.72:29858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:46.870149 2026] [ssl:error] [pid 3845156:tid 3845156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:47.708848 2026] [ssl:error] [pid 3845156:tid 3845156] (70014)End of file found: [client 216.73.216.199:21119] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:48.109790 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:37683] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:49.524538 2026] [security2:error] [pid 3846020:tid 3846020] [client 47.237.254.73:12525] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsDcXoIvhHn-OygUEyQAAAAB0"]
[Thu Jul 30 16:21:49.524587 2026] [security2:error] [pid 3846020:tid 3846020] [client 47.237.254.73:12525] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsDcXoIvhHn-OygUEyQAAAAB0"]
[Thu Jul 30 16:21:49.524828 2026] [security2:error] [pid 3846020:tid 3846020] [client 47.237.254.73:12525] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsDcXoIvhHn-OygUEyQAAAAB0"]
[Thu Jul 30 16:21:49.925527 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:32782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:49.925566 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:49.976741 2026] [ssl:error] [pid 3829570:tid 3829570] (EAI 2)Name or service not known: [client 144.76.19.72:32788] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:49.976769 2026] [ssl:error] [pid 3829570:tid 3829570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:52.021845 2026] [ssl:error] [pid 3850511:tid 3850511] (70014)End of file found: [client 216.73.216.199:1340] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:52.993890 2026] [authz_core:error] [pid 3851515:tid 3851515] [client 66.249.66.33:41086] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:21:52.996564 2026] [authz_core:error] [pid 3851515:tid 3851515] [client 66.249.66.33:41086] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:21:53.029748 2026] [ssl:error] [pid 3844417:tid 3844417] (EAI 2)Name or service not known: [client 144.76.19.72:32800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:53.029774 2026] [ssl:error] [pid 3844417:tid 3844417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:53.083244 2026] [ssl:error] [pid 3851470:tid 3851470] (EAI 2)Name or service not known: [client 144.76.19.72:32808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:53.083276 2026] [ssl:error] [pid 3851470:tid 3851470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:53.127667 2026] [ssl:error] [pid 3829569:tid 3829569] (70014)End of file found: [client 216.73.216.199:23780] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:53.420434 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:5002] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:56.176172 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:32814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:56.176208 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:56.233770 2026] [ssl:error] [pid 3851516:tid 3851516] (EAI 2)Name or service not known: [client 144.76.19.72:32826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:56.233816 2026] [ssl:error] [pid 3851516:tid 3851516] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:56.729822 2026] [security2:error] [pid 3843672:tid 3843672] [client 43.153.36.110:36186] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ns-ganymede.com"] [uri "/"] [unique_id "amtsFC0H_mdP6fhFOjyESQAAAAI"]
[Thu Jul 30 16:21:57.642736 2026] [authz_core:error] [pid 3844417:tid 3844417] [client 66.249.66.33:61191] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:21:57.645425 2026] [authz_core:error] [pid 3844417:tid 3844417] [client 66.249.66.33:61191] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:21:58.361408 2026] [ssl:error] [pid 3851321:tid 3851321] (70014)End of file found: [client 216.73.216.199:5689] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:58.852909 2026] [ssl:error] [pid 3829569:tid 3829569] (70014)End of file found: [client 216.73.216.199:11006] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:21:59.148212 2026] [core:error] [pid 3835858:tid 3835858] (13)Permission denied: [client 216.73.216.199:53944] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:35/subsystem/ttyS0/rx_trig_bytes
[Thu Jul 30 16:21:59.290531 2026] [ssl:error] [pid 3850509:tid 3850509] (EAI 2)Name or service not known: [client 144.76.19.72:32834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:59.290560 2026] [ssl:error] [pid 3850509:tid 3850509] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:21:59.311641 2026] [security2:error] [pid 3845080:tid 3845080] [client 185.191.171.12:13054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/unique-wedding-readings"] [unique_id "amtsF8walV4V3Crw6EgufAAAAAQ"]
[Thu Jul 30 16:21:59.348196 2026] [ssl:error] [pid 3849815:tid 3849815] (EAI 2)Name or service not known: [client 144.76.19.72:32836] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:21:59.348227 2026] [ssl:error] [pid 3849815:tid 3849815] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:00.768339 2026] [core:error] [pid 3835858:tid 3835858] (13)Permission denied: [client 216.73.216.199:53944] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/uartclk
[Thu Jul 30 16:22:01.069054 2026] [ssl:error] [pid 3835858:tid 3835858] (70014)End of file found: [client 216.73.216.199:53944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:02.404694 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:65082] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:02.404743 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:02.462506 2026] [ssl:error] [pid 3852556:tid 3852556] (EAI 2)Name or service not known: [client 144.76.19.72:65084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:02.462542 2026] [ssl:error] [pid 3852556:tid 3852556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:05.290097 2026] [ssl:error] [pid 3844417:tid 3844417] (70014)End of file found: [client 216.73.216.199:18156] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:05.543517 2026] [ssl:error] [pid 3842046:tid 3842046] (EAI 2)Name or service not known: [client 144.76.19.72:65096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:05.543558 2026] [ssl:error] [pid 3842046:tid 3842046] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:05.592363 2026] [ssl:error] [pid 3852619:tid 3852619] (70014)End of file found: [client 216.73.216.199:30653] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:05.598473 2026] [ssl:error] [pid 3849815:tid 3849815] (EAI 2)Name or service not known: [client 144.76.19.72:65100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:05.598499 2026] [ssl:error] [pid 3849815:tid 3849815] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:07.097476 2026] [ssl:error] [pid 3837012:tid 3837012] (70014)End of file found: [client 216.73.216.199:20452] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:08.691615 2026] [ssl:error] [pid 3849814:tid 3849814] (EAI 2)Name or service not known: [client 144.76.19.72:65110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:08.691654 2026] [ssl:error] [pid 3849814:tid 3849814] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:08.744617 2026] [ssl:error] [pid 3845080:tid 3845080] (EAI 2)Name or service not known: [client 144.76.19.72:65116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:08.744653 2026] [ssl:error] [pid 3845080:tid 3845080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:10.761614 2026] [security2:error] [pid 3849705:tid 3849705] [client 43.164.197.117:37918] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ilkagriese.com"] [uri "/"] [unique_id "amtsIpS_Po4Dni1x61QwrwAAACU"]
[Thu Jul 30 16:22:11.025607 2026] [ssl:error] [pid 3829569:tid 3829569] (70014)End of file found: [client 216.73.216.199:5787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:11.633804 2026] [ssl:error] [pid 3850578:tid 3850578] (70014)End of file found: [client 216.73.216.199:23877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:11.797239 2026] [ssl:error] [pid 3852616:tid 3852616] (EAI 2)Name or service not known: [client 144.76.19.72:55444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:11.797270 2026] [ssl:error] [pid 3852616:tid 3852616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:11.849399 2026] [ssl:error] [pid 3852619:tid 3852619] (EAI 2)Name or service not known: [client 144.76.19.72:55458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:11.849429 2026] [ssl:error] [pid 3852619:tid 3852619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:12.412535 2026] [ssl:error] [pid 3852556:tid 3852556] (70014)End of file found: [client 216.73.216.199:47608] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:14.903387 2026] [ssl:error] [pid 3849705:tid 3849705] (EAI 2)Name or service not known: [client 144.76.19.72:55470] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:14.903438 2026] [ssl:error] [pid 3849705:tid 3849705] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:14.962455 2026] [ssl:error] [pid 3852616:tid 3852616] (EAI 2)Name or service not known: [client 144.76.19.72:55478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:14.962485 2026] [ssl:error] [pid 3852616:tid 3852616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:15.516337 2026] [authz_core:error] [pid 3852616:tid 3852616] [client 66.249.66.34:63501] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:22:15.519012 2026] [authz_core:error] [pid 3852616:tid 3852616] [client 66.249.66.34:63501] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:22:15.732974 2026] [security2:error] [pid 3836955:tid 3836955] [client 20.171.55.167:5329] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.elass.me"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtsJ8Xo2X6A_S3zWlu6LwAAAC0"]
[Thu Jul 30 16:22:15.733207 2026] [security2:error] [pid 3836955:tid 3836955] [client 20.171.55.167:5329] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.elass.me"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtsJ8Xo2X6A_S3zWlu6LwAAAC0"]
[Thu Jul 30 16:22:15.765351 2026] [security2:error] [pid 3836955:tid 3836955] [client 20.171.55.167:5329] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.elass.me"] [uri "/403.shtml"] [unique_id "amtsJ8Xo2X6A_S3zWlu6LwAAAC0"]
[Thu Jul 30 16:22:15.992352 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:63221] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:17.766823 2026] [security2:error] [pid 3849705:tid 3849705] [client 47.128.56.236:16306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.localhero.org.uk"] [uri "/robots.txt"] [unique_id "amtsKZS_Po4Dni1x61QwsgAAACU"]
[Thu Jul 30 16:22:17.794573 2026] [ssl:error] [pid 3850510:tid 3850510] (70014)End of file found: [client 216.73.216.199:39228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:18.026662 2026] [ssl:error] [pid 3835858:tid 3835858] (EAI 2)Name or service not known: [client 144.76.19.72:55482] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:18.026701 2026] [ssl:error] [pid 3835858:tid 3835858] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:18.078380 2026] [ssl:error] [pid 3849425:tid 3849425] (EAI 2)Name or service not known: [client 144.76.19.72:55486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:18.078413 2026] [ssl:error] [pid 3849425:tid 3849425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:18.096031 2026] [ssl:error] [pid 3841144:tid 3841144] (70014)End of file found: [client 216.73.216.199:4328] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:21.135620 2026] [ssl:error] [pid 3846060:tid 3846060] (EAI 2)Name or service not known: [client 144.76.19.72:61308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:21.135660 2026] [ssl:error] [pid 3846060:tid 3846060] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:21.191651 2026] [ssl:error] [pid 3841868:tid 3841868] (EAI 2)Name or service not known: [client 144.76.19.72:61314] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:21.191696 2026] [ssl:error] [pid 3841868:tid 3841868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:23.526560 2026] [ssl:error] [pid 3838240:tid 3838240] (70014)End of file found: [client 216.73.216.199:63918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:23.827416 2026] [core:error] [pid 3842046:tid 3842046] (13)Permission denied: [client 216.73.216.199:30903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty47/subsystem/ttyS1/close_delay
[Thu Jul 30 16:22:24.248615 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:61320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:24.248659 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:24.300450 2026] [ssl:error] [pid 3850453:tid 3850453] (EAI 2)Name or service not known: [client 144.76.19.72:61326] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:24.300478 2026] [ssl:error] [pid 3850453:tid 3850453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:24.401607 2026] [lsapi:warn] [pid 3845156:tid 3845156] [client 68.183.22.192:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:22:25.339697 2026] [core:error] [pid 3842046:tid 3842046] (13)Permission denied: [client 216.73.216.199:30903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty36/subsystem/ttyS1/close_delay
[Thu Jul 30 16:22:27.356965 2026] [ssl:error] [pid 3850453:tid 3850453] (EAI 2)Name or service not known: [client 144.76.19.72:61334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:27.356996 2026] [ssl:error] [pid 3850453:tid 3850453] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:27.412753 2026] [ssl:error] [pid 3850575:tid 3850575] (EAI 2)Name or service not known: [client 144.76.19.72:61342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:27.412810 2026] [ssl:error] [pid 3850575:tid 3850575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:27.502883 2026] [core:error] [pid 3842046:tid 3842046] (13)Permission denied: [client 216.73.216.199:30903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS3/device/subsystem/drivers/alarmtimer/unbind
[Thu Jul 30 16:22:28.049246 2026] [core:error] [pid 3842046:tid 3842046] (13)Permission denied: [client 216.73.216.199:30903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty4/subsystem/ttyS0/uartclk
[Thu Jul 30 16:22:30.468697 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:19340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:30.468733 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:30.526462 2026] [ssl:error] [pid 3849816:tid 3849816] (EAI 2)Name or service not known: [client 144.76.19.72:19348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:30.526497 2026] [ssl:error] [pid 3849816:tid 3849816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:30.780641 2026] [core:error] [pid 3842046:tid 3842046] (13)Permission denied: [client 216.73.216.199:30903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty58/subsystem/ttyS2/close_delay
[Thu Jul 30 16:22:33.191895 2026] [core:error] [pid 3842046:tid 3842046] (13)Permission denied: [client 216.73.216.199:30903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty60/subsystem/ttyS3/close_delay
[Thu Jul 30 16:22:33.583672 2026] [ssl:error] [pid 3850512:tid 3850512] (EAI 2)Name or service not known: [client 144.76.19.72:19360] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:33.583704 2026] [ssl:error] [pid 3850512:tid 3850512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:33.638530 2026] [ssl:error] [pid 3852555:tid 3852555] (EAI 2)Name or service not known: [client 144.76.19.72:19364] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:33.638565 2026] [ssl:error] [pid 3852555:tid 3852555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:34.800742 2026] [security2:error] [pid 3850511:tid 3850511] [client 47.128.126.250:60984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amtsOg7FeSdQoXK8KNb6QAAAACk"]
[Thu Jul 30 16:22:35.003090 2026] [core:error] [pid 3842046:tid 3842046] (13)Permission denied: [client 216.73.216.199:30903] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty62/subsystem/ttyS2/uartclk
[Thu Jul 30 16:22:36.510396 2026] [security2:error] [pid 3842046:tid 3842046] [client 216.73.216.199:30903] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysctl.d/99-xfrm-mitigation.conf"] [unique_id "amtsPN9dkIbd1Dunf9-OHQAAAEY"]
[Thu Jul 30 16:22:36.510689 2026] [security2:error] [pid 3842046:tid 3842046] [client 216.73.216.199:30903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysctl.d/99-xfrm-mitigation.conf"] [unique_id "amtsPN9dkIbd1Dunf9-OHQAAAEY"]
[Thu Jul 30 16:22:36.510925 2026] [security2:error] [pid 3842046:tid 3842046] [client 216.73.216.199:30903] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/sysctl.d/99-xfrm-mitigation.conf"] [unique_id "amtsPN9dkIbd1Dunf9-OHQAAAEY"]
[Thu Jul 30 16:22:36.696550 2026] [ssl:error] [pid 3829563:tid 3829563] (EAI 2)Name or service not known: [client 144.76.19.72:19378] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:36.696585 2026] [ssl:error] [pid 3829563:tid 3829563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:36.749392 2026] [ssl:error] [pid 3850511:tid 3850511] (EAI 2)Name or service not known: [client 144.76.19.72:19388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:36.749430 2026] [ssl:error] [pid 3850511:tid 3850511] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:39.010029 2026] [security2:error] [pid 3848197:tid 3848197] [client 181.162.199.231:43306] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsP_Ks4JpIFIpHNmKmTAAAABQ"]
[Thu Jul 30 16:22:39.010100 2026] [security2:error] [pid 3848197:tid 3848197] [client 181.162.199.231:43306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsP_Ks4JpIFIpHNmKmTAAAABQ"]
[Thu Jul 30 16:22:39.010370 2026] [security2:error] [pid 3848197:tid 3848197] [client 181.162.199.231:43306] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsP_Ks4JpIFIpHNmKmTAAAABQ"]
[Thu Jul 30 16:22:39.527122 2026] [ssl:error] [pid 3838240:tid 3838240] (70014)End of file found: [client 216.73.216.199:11254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:39.822971 2026] [ssl:error] [pid 3842046:tid 3842046] (70014)End of file found: [client 216.73.216.199:30903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:39.833127 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:33320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:39.833159 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:39.888639 2026] [ssl:error] [pid 3850510:tid 3850510] (EAI 2)Name or service not known: [client 144.76.19.72:33324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:39.888678 2026] [ssl:error] [pid 3850510:tid 3850510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:41.146636 2026] [security2:error] [pid 3842035:tid 3842035] [client 88.237.69.92:50412] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsQciyZ4jqeJH2tumA8wAAACA"]
[Thu Jul 30 16:22:41.146685 2026] [security2:error] [pid 3842035:tid 3842035] [client 88.237.69.92:50412] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsQciyZ4jqeJH2tumA8wAAACA"]
[Thu Jul 30 16:22:41.146939 2026] [security2:error] [pid 3842035:tid 3842035] [client 88.237.69.92:50412] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsQciyZ4jqeJH2tumA8wAAACA"]
[Thu Jul 30 16:22:41.633045 2026] [core:error] [pid 3844337:tid 3844337] (13)Permission denied: [client 216.73.216.199:53512] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/kmodlve/uevent
[Thu Jul 30 16:22:41.933894 2026] [core:error] [pid 3844337:tid 3844337] (13)Permission denied: [client 216.73.216.199:53512] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty31/subsystem/ttyS2/uartclk
[Thu Jul 30 16:22:42.943592 2026] [ssl:error] [pid 3842035:tid 3842035] (EAI 2)Name or service not known: [client 144.76.19.72:33340] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:42.943630 2026] [ssl:error] [pid 3842035:tid 3842035] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:43.000562 2026] [ssl:error] [pid 3832410:tid 3832410] (EAI 2)Name or service not known: [client 144.76.19.72:33346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:43.000596 2026] [ssl:error] [pid 3832410:tid 3832410] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:44.564593 2026] [security2:error] [pid 3850509:tid 3850509] [client 148.3.137.203:62935] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsRI4FTBWkgIZaH2MCOAAAACM"]
[Thu Jul 30 16:22:44.564645 2026] [security2:error] [pid 3850509:tid 3850509] [client 148.3.137.203:62935] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsRI4FTBWkgIZaH2MCOAAAACM"]
[Thu Jul 30 16:22:44.564894 2026] [security2:error] [pid 3850509:tid 3850509] [client 148.3.137.203:62935] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsRI4FTBWkgIZaH2MCOAAAACM"]
[Thu Jul 30 16:22:45.254664 2026] [core:error] [pid 3844337:tid 3844337] (13)Permission denied: [client 216.73.216.199:53512] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/libcrc32c/sections/__kcrctab
[Thu Jul 30 16:22:45.406243 2026] [access_compat:error] [pid 3850578:tid 3850578] [client 74.7.244.56:40256] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/robots.txt
[Thu Jul 30 16:22:46.105203 2026] [ssl:error] [pid 3854542:tid 3854542] (EAI 2)Name or service not known: [client 144.76.19.72:33358] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:46.105245 2026] [ssl:error] [pid 3854542:tid 3854542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:46.162141 2026] [ssl:error] [pid 3854544:tid 3854544] (EAI 2)Name or service not known: [client 144.76.19.72:33362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:46.162201 2026] [ssl:error] [pid 3854544:tid 3854544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:48.694330 2026] [lsapi:warn] [pid 3854544:tid 3854544] [client 97.74.93.24:0] [host revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:22:49.268626 2026] [ssl:error] [pid 3845156:tid 3845156] (EAI 2)Name or service not known: [client 144.76.19.72:33374] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:49.268655 2026] [ssl:error] [pid 3845156:tid 3845156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:49.326828 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:33384] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:49.326877 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:49.484731 2026] [ssl:error] [pid 3844337:tid 3844337] (70014)End of file found: [client 216.73.216.199:53512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:50.387513 2026] [ssl:error] [pid 3854546:tid 3854546] (70014)End of file found: [client 216.73.216.199:43673] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:52.387559 2026] [ssl:error] [pid 3852451:tid 3852451] (EAI 2)Name or service not known: [client 144.76.19.72:60780] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:52.387593 2026] [ssl:error] [pid 3852451:tid 3852451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:52.441577 2026] [ssl:error] [pid 3850582:tid 3850582] (EAI 2)Name or service not known: [client 144.76.19.72:60794] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:52.441614 2026] [ssl:error] [pid 3850582:tid 3850582] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:52.496223 2026] [core:error] [pid 3829432:tid 3829432] (13)Permission denied: [client 216.73.216.199:41620] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/usr/share/cagefs/skeleton.libs.list
[Thu Jul 30 16:22:52.797002 2026] [core:error] [pid 3829432:tid 3829432] (13)Permission denied: [client 216.73.216.199:41620] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/user_namespace/sanity_checks
[Thu Jul 30 16:22:53.121564 2026] [core:error] [pid 3850582:tid 3850582] [client 66.249.66.45:49724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:22:53.121602 2026] [core:error] [pid 3850582:tid 3850582] [client 66.249.66.45:49724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:22:53.127157 2026] [cgi:error] [pid 3829432:tid 3829432] [client 216.73.216.199:41620] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/local/lib64/perl5/XML/Parser/LWPExternEnt.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 16:22:53.127207 2026] [cgi:error] [pid 3829432:tid 3829432] [client 216.73.216.199:41620] End of script output before headers: LWPExternEnt.pl
[Thu Jul 30 16:22:53.554847 2026] [security2:error] [pid 3850511:tid 3850511] [client 176.31.139.23:60946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tyredandmotional.co.uk"] [uri "/robots.txt"] [unique_id "amtsTQ7FeSdQoXK8KNb6SAAAACk"]
[Thu Jul 30 16:22:54.605758 2026] [security2:error] [pid 3829432:tid 3829432] [client 85.208.96.199:55082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,2411.0/prev_next,prev.html"] [unique_id "amtsTs2sRwWoEu6urD6YQAAAABg"]
[Thu Jul 30 16:22:55.469863 2026] [security2:error] [pid 3849814:tid 3849814] [client 51.89.129.201:27044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.tyredandmotional.co.uk"] [uri "/"] [unique_id "amtsT8p8QJ0VQMHNacAGXwAAADA"]
[Thu Jul 30 16:22:55.496638 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:60808] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:55.496668 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:55.511972 2026] [ssl:error] [pid 3836955:tid 3836955] (70014)End of file found: [client 216.73.216.199:48680] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:55.550809 2026] [ssl:error] [pid 3849816:tid 3849816] (EAI 2)Name or service not known: [client 144.76.19.72:60810] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:55.550835 2026] [ssl:error] [pid 3849816:tid 3849816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:56.004813 2026] [ssl:error] [pid 3839031:tid 3839031] (70014)End of file found: [client 216.73.216.199:19352] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:56.728259 2026] [security2:error] [pid 3854494:tid 3854494] [client 216.73.216.199:1220] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/legacy.conf"] [unique_id "amtsUBIjNuFZJy0Xu5LZqgAAABw"]
[Thu Jul 30 16:22:56.728568 2026] [security2:error] [pid 3854494:tid 3854494] [client 216.73.216.199:1220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/legacy.conf"] [unique_id "amtsUBIjNuFZJy0Xu5LZqgAAABw"]
[Thu Jul 30 16:22:56.728822 2026] [security2:error] [pid 3854494:tid 3854494] [client 216.73.216.199:1220] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/lib/tmpfiles.d/legacy.conf"] [unique_id "amtsUBIjNuFZJy0Xu5LZqgAAABw"]
[Thu Jul 30 16:22:57.024577 2026] [ssl:error] [pid 3854494:tid 3854494] (70014)End of file found: [client 216.73.216.199:1220] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:22:58.814686 2026] [ssl:error] [pid 3845156:tid 3845156] (EAI 2)Name or service not known: [client 144.76.19.72:60820] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:58.814724 2026] [ssl:error] [pid 3845156:tid 3845156] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:58.872855 2026] [ssl:error] [pid 3852555:tid 3852555] (EAI 2)Name or service not known: [client 144.76.19.72:60828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:22:58.872880 2026] [ssl:error] [pid 3852555:tid 3852555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:22:59.998898 2026] [security2:error] [pid 3845080:tid 3845080] [client 85.208.96.200:53016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/will-cardano-ever-reach-1000"] [unique_id "amtsU8walV4V3Crw6Egu6wAAAAQ"]
[Thu Jul 30 16:23:00.852823 2026] [core:error] [pid 3838238:tid 3838238] (13)Permission denied: [client 216.73.216.199:46887] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS2/line
[Thu Jul 30 16:23:01.260498 2026] [core:error] [pid 3838238:tid 3838238] (13)Permission denied: [client 216.73.216.199:46887] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory170/subsystem/uevent
[Thu Jul 30 16:23:01.928517 2026] [ssl:error] [pid 3854542:tid 3854542] (EAI 2)Name or service not known: [client 144.76.19.72:64294] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:01.928546 2026] [ssl:error] [pid 3854542:tid 3854542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:01.955519 2026] [security2:error] [pid 3839031:tid 3839031] [client 44.205.192.249:27882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/gunroom-and-steel-targets/"] [unique_id "amtsVQlkDyJ9V044igVIBwAAACo"]
[Thu Jul 30 16:23:01.981645 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:64300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:01.981675 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:02.176674 2026] [ssl:error] [pid 3838238:tid 3838238] (70014)End of file found: [client 216.73.216.199:46887] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:03.091211 2026] [ssl:error] [pid 3829570:tid 3829570] (70014)End of file found: [client 216.73.216.199:33434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:03.104884 2026] [security2:error] [pid 3852555:tid 3852555] [client 114.119.158.38:64351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103,18/request_format~html"] [unique_id "amtsV-vYxIt_krH67Xl9OAAAAAc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103,19,18/request_format~html
[Thu Jul 30 16:23:04.011836 2026] [authz_core:error] [pid 3854450:tid 3854450] [client 169.58.39.191:65496] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com
[Thu Jul 30 16:23:04.241989 2026] [security2:error] [pid 3846065:tid 3846065] [client 114.119.158.38:64353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103,18/request_format~html"] [unique_id "amtsWK9PQdkN8QffZ8W0PAAAACc"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~14,103,19,18/request_format~html
[Thu Jul 30 16:23:04.906651 2026] [core:error] [pid 3854494:tid 3854494] (13)Permission denied: [client 216.73.216.199:46457] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/ttyS1/line
[Thu Jul 30 16:23:05.036460 2026] [ssl:error] [pid 3852556:tid 3852556] (EAI 2)Name or service not known: [client 144.76.19.72:64302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:05.036505 2026] [ssl:error] [pid 3852556:tid 3852556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:05.099730 2026] [ssl:error] [pid 3841144:tid 3841144] (EAI 2)Name or service not known: [client 144.76.19.72:64312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:05.099761 2026] [ssl:error] [pid 3841144:tid 3841144] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:05.508257 2026] [core:error] [pid 3854494:tid 3854494] (13)Permission denied: [client 216.73.216.199:46457] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty7/subsystem/ttyS3/flags
[Thu Jul 30 16:23:06.382206 2026] [security2:error] [pid 3850453:tid 3850453] [client 51.195.183.40:42124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ziltdesign.be"] [uri "/robots.txt"] [unique_id "amtsWg_8HDjgM-t16ZFR4AAAACE"]
[Thu Jul 30 16:23:07.962914 2026] [authz_core:error] [pid 3839031:tid 3839031] [client 66.249.66.34:41515] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:23:07.965572 2026] [authz_core:error] [pid 3839031:tid 3839031] [client 66.249.66.34:41515] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:23:08.173466 2026] [ssl:error] [pid 3850512:tid 3850512] (EAI 2)Name or service not known: [client 144.76.19.72:64320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:08.173513 2026] [ssl:error] [pid 3850512:tid 3850512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:08.230747 2026] [ssl:error] [pid 3854541:tid 3854541] (EAI 2)Name or service not known: [client 144.76.19.72:64334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:08.230780 2026] [ssl:error] [pid 3854541:tid 3854541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:08.531317 2026] [ssl:error] [pid 3854494:tid 3854494] (70014)End of file found: [client 216.73.216.199:46457] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:11.252195 2026] [ssl:error] [pid 3842035:tid 3842035] (70014)End of file found: [client 216.73.216.199:9254] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:11.287616 2026] [ssl:error] [pid 3854406:tid 3854406] (EAI 2)Name or service not known: [client 144.76.19.72:54970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:11.287658 2026] [ssl:error] [pid 3854406:tid 3854406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:11.343783 2026] [ssl:error] [pid 3852555:tid 3852555] (EAI 2)Name or service not known: [client 144.76.19.72:54980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:11.343820 2026] [ssl:error] [pid 3852555:tid 3852555] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:12.455960 2026] [core:error] [pid 3838238:tid 3838238] (13)Permission denied: [client 216.73.216.199:31124] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/fs/cgroup/memory/cgroup.event_control
[Thu Jul 30 16:23:14.401160 2026] [ssl:error] [pid 3854491:tid 3854491] (EAI 2)Name or service not known: [client 144.76.19.72:54986] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:14.401207 2026] [ssl:error] [pid 3854491:tid 3854491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:14.457702 2026] [ssl:error] [pid 3854542:tid 3854542] (EAI 2)Name or service not known: [client 144.76.19.72:55000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:14.457728 2026] [ssl:error] [pid 3854542:tid 3854542] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:15.420244 2026] [authz_core:error] [pid 3854491:tid 3854491] [client 34.26.136.102:55068] AH01630: client denied by server configuration: /home/healthki/public_html/error_log, referer: http://www.holisticclear.co.uk.kinesiologylondon.co.uk
[Thu Jul 30 16:23:15.423146 2026] [authz_core:error] [pid 3854491:tid 3854491] [client 34.26.136.102:55068] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini, referer: http://www.holisticclear.co.uk.kinesiologylondon.co.uk
[Thu Jul 30 16:23:16.097714 2026] [security2:error] [pid 3850509:tid 3850509] [client 92.222.104.207:31294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ziltdesign.be"] [uri "/"] [unique_id "amtsZI4FTBWkgIZaH2MCowAAACM"]
[Thu Jul 30 16:23:16.498541 2026] [access_compat:error] [pid 3849754:tid 3849754] [client 45.158.164.139:34858] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:23:17.305447 2026] [authz_core:error] [pid 3851470:tid 3851470] [client 20.215.216.94:33737] AH01630: client denied by server configuration: /home/berehapbe/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 16:23:17.557478 2026] [ssl:error] [pid 3850510:tid 3850510] (EAI 2)Name or service not known: [client 144.76.19.72:55010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:17.557511 2026] [ssl:error] [pid 3850510:tid 3850510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:17.613270 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:55018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:17.613305 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:20.329888 2026] [security2:error] [pid 3851321:tid 3851321] [client 43.136.86.241:42176] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amtsaC4ioz8F_Xd5OwyLsAAAAAY"]
[Thu Jul 30 16:23:20.675389 2026] [ssl:error] [pid 3854544:tid 3854544] (EAI 2)Name or service not known: [client 144.76.19.72:51024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:20.675418 2026] [ssl:error] [pid 3854544:tid 3854544] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:20.731205 2026] [ssl:error] [pid 3852556:tid 3852556] (EAI 2)Name or service not known: [client 144.76.19.72:51034] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:20.731229 2026] [ssl:error] [pid 3852556:tid 3852556] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:20.860344 2026] [ssl:error] [pid 3849814:tid 3849814] (70014)End of file found: [client 216.73.216.199:53832] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:21.068654 2026] [ssl:error] [pid 3852556:tid 3852556] (70014)End of file found: [client 216.73.216.199:47477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:21.391931 2026] [ssl:error] [pid 3854406:tid 3854406] (70014)End of file found: [client 216.73.216.199:65414] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:23.791515 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:51048] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:23.791548 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:23.845336 2026] [ssl:error] [pid 3839031:tid 3839031] (EAI 2)Name or service not known: [client 144.76.19.72:51064] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:23.845365 2026] [ssl:error] [pid 3839031:tid 3839031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:26.651711 2026] [ssl:error] [pid 3837012:tid 3837012] (70014)End of file found: [client 216.73.216.199:65073] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:26.956140 2026] [ssl:error] [pid 3844417:tid 3844417] (EAI 2)Name or service not known: [client 144.76.19.72:51076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:26.956174 2026] [ssl:error] [pid 3844417:tid 3844417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:27.009339 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:51086] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:27.009368 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:28.506349 2026] [ssl:error] [pid 3856717:tid 3856717] (70014)End of file found: [client 216.73.216.199:33991] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:29.021672 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:44468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:30.062536 2026] [ssl:error] [pid 3850575:tid 3850575] (EAI 2)Name or service not known: [client 144.76.19.72:27072] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:30.062575 2026] [ssl:error] [pid 3850575:tid 3850575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:30.118809 2026] [ssl:error] [pid 3854540:tid 3854540] (EAI 2)Name or service not known: [client 144.76.19.72:27088] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:30.118861 2026] [ssl:error] [pid 3854540:tid 3854540] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:30.323975 2026] [security2:error] [pid 3850509:tid 3850509] [client 124.156.225.181:43520] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.chemicalgalaxy.co.uk"] [uri "/"] [unique_id "amtsco4FTBWkgIZaH2MCrAAAACM"]
[Thu Jul 30 16:23:30.437855 2026] [security2:error] [pid 3832410:tid 3832410] [client 114.119.133.251:22821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.codeworks.co.uk"] [uri "/products/ipages.jpg"] [unique_id "amtsclmoEl6ISpsAMn8hUAAAAA8"], referer: https://www.codeworks.co.uk/products/ipages
[Thu Jul 30 16:23:32.042161 2026] [ssl:error] [pid 3842035:tid 3842035] (70014)End of file found: [client 216.73.216.199:60258] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:33.174454 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:27090] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:33.174483 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:33.232525 2026] [ssl:error] [pid 3855922:tid 3855922] (EAI 2)Name or service not known: [client 144.76.19.72:27094] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:33.232562 2026] [ssl:error] [pid 3855922:tid 3855922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:33.848979 2026] [ssl:error] [pid 3856426:tid 3856426] (70014)End of file found: [client 216.73.216.199:43601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:36.056551 2026] [core:error] [pid 3854539:tid 3854539] (13)Permission denied: [client 216.73.216.199:35257] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/inet_diag/uevent
[Thu Jul 30 16:23:36.291483 2026] [ssl:error] [pid 3839031:tid 3839031] (EAI 2)Name or service not known: [client 144.76.19.72:27096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:36.291512 2026] [ssl:error] [pid 3839031:tid 3839031] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:36.344432 2026] [ssl:error] [pid 3856944:tid 3856944] (EAI 2)Name or service not known: [client 144.76.19.72:27104] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:36.344469 2026] [ssl:error] [pid 3856944:tid 3856944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:36.357404 2026] [ssl:error] [pid 3854539:tid 3854539] (70014)End of file found: [client 216.73.216.199:35257] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:36.394767 2026] [authz_core:error] [pid 3856535:tid 3856535] [client 66.249.66.33:47938] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:23:36.397454 2026] [authz_core:error] [pid 3856535:tid 3856535] [client 66.249.66.33:47938] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:23:36.592889 2026] [access_compat:error] [pid 3852556:tid 3852556] [client 89.45.53.3:37262] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:23:36.687036 2026] [access_compat:error] [pid 3854540:tid 3854540] [client 2.189.5.218:40112] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:23:36.851746 2026] [access_compat:error] [pid 3854494:tid 3854494] [client 2.189.5.142:56764] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:23:37.089646 2026] [access_compat:error] [pid 3829570:tid 3829570] [client 89.45.53.30:49144] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:23:38.290873 2026] [authz_core:error] [pid 3854450:tid 3854450] [client 169.58.39.191:59950] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 16:23:39.399598 2026] [ssl:error] [pid 3849816:tid 3849816] (EAI 2)Name or service not known: [client 144.76.19.72:27116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:39.399630 2026] [ssl:error] [pid 3849816:tid 3849816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:39.455367 2026] [ssl:error] [pid 3856426:tid 3856426] (EAI 2)Name or service not known: [client 144.76.19.72:27128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:39.455401 2026] [ssl:error] [pid 3856426:tid 3856426] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:40.877916 2026] [ssl:error] [pid 3852619:tid 3852619] (70014)End of file found: [client 216.73.216.199:23922] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:41.833842 2026] [security2:error] [pid 3856426:tid 3856426] [client 182.181.213.16:41702] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsfQ5-tELp7VwerlvePQAAAAc"]
[Thu Jul 30 16:23:41.833896 2026] [security2:error] [pid 3856426:tid 3856426] [client 182.181.213.16:41702] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsfQ5-tELp7VwerlvePQAAAAc"]
[Thu Jul 30 16:23:41.834157 2026] [security2:error] [pid 3856426:tid 3856426] [client 182.181.213.16:41702] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsfQ5-tELp7VwerlvePQAAAAc"]
[Thu Jul 30 16:23:42.509667 2026] [ssl:error] [pid 3850575:tid 3850575] (EAI 2)Name or service not known: [client 144.76.19.72:45890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:42.509698 2026] [ssl:error] [pid 3850575:tid 3850575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:42.565356 2026] [ssl:error] [pid 3850578:tid 3850578] (EAI 2)Name or service not known: [client 144.76.19.72:45898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:42.565400 2026] [ssl:error] [pid 3850578:tid 3850578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:42.678364 2026] [authz_core:error] [pid 3856532:tid 3856532] [client 169.58.39.191:61348] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-admin/includes/error_log, referer: binance.com
[Thu Jul 30 16:23:42.717544 2026] [ssl:error] [pid 3832410:tid 3832410] (70014)End of file found: [client 216.73.216.199:32509] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:43.033409 2026] [ssl:error] [pid 3855922:tid 3855922] (70014)End of file found: [client 216.73.216.199:1652] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:45.455049 2026] [security2:error] [pid 3844417:tid 3844417] [client 101.47.26.163:37905] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsgfZeOK2FvC8M6QE0sQAAABE"]
[Thu Jul 30 16:23:45.455111 2026] [security2:error] [pid 3844417:tid 3844417] [client 101.47.26.163:37905] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsgfZeOK2FvC8M6QE0sQAAABE"]
[Thu Jul 30 16:23:45.455356 2026] [security2:error] [pid 3844417:tid 3844417] [client 101.47.26.163:37905] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsgfZeOK2FvC8M6QE0sQAAABE"]
[Thu Jul 30 16:23:45.658532 2026] [ssl:error] [pid 3843672:tid 3843672] (EAI 2)Name or service not known: [client 144.76.19.72:45912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:45.658570 2026] [ssl:error] [pid 3843672:tid 3843672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:45.711609 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:45926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:45.711638 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:46.907280 2026] [security2:error] [pid 3855604:tid 3855604] [client 80.94.92.167:35614] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "holisticclear.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtsgrPygw3fDLeZSGXvVwAAAAs"]
[Thu Jul 30 16:23:46.907453 2026] [security2:error] [pid 3855604:tid 3855604] [client 80.94.92.167:35614] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "holisticclear.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtsgrPygw3fDLeZSGXvVwAAAAs"]
[Thu Jul 30 16:23:46.907640 2026] [security2:error] [pid 3855604:tid 3855604] [client 80.94.92.167:35614] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "holisticclear.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtsgrPygw3fDLeZSGXvVwAAAAs"]
[Thu Jul 30 16:23:46.907799 2026] [security2:error] [pid 3855604:tid 3855604] [client 80.94.92.167:35614] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "holisticclear.co.uk"] [uri "/403.shtml"] [unique_id "amtsgrPygw3fDLeZSGXvVwAAAAs"]
[Thu Jul 30 16:23:48.606292 2026] [core:error] [pid 3836955:tid 3836955] [client 104.234.4.200:52642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:23:48.606332 2026] [core:error] [pid 3836955:tid 3836955] [client 104.234.4.200:52642] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:23:48.683974 2026] [authz_core:error] [pid 3850576:tid 3850576] [client 52.165.196.84:54409] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/block-bindings/error_log
[Thu Jul 30 16:23:48.707900 2026] [core:error] [pid 3850578:tid 3850578] [client 104.234.4.200:52643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:23:48.707965 2026] [core:error] [pid 3850578:tid 3850578] [client 104.234.4.200:52643] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:23:48.847595 2026] [ssl:error] [pid 3855922:tid 3855922] (EAI 2)Name or service not known: [client 144.76.19.72:45942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:48.847627 2026] [ssl:error] [pid 3855922:tid 3855922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:48.900443 2026] [ssl:error] [pid 3850510:tid 3850510] (EAI 2)Name or service not known: [client 144.76.19.72:45954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:48.900476 2026] [ssl:error] [pid 3850510:tid 3850510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:49.083351 2026] [ssl:error] [pid 3856472:tid 3856472] (70014)End of file found: [client 216.73.216.199:8602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:50.464961 2026] [ssl:error] [pid 3856471:tid 3856471] (70014)End of file found: [client 216.73.216.199:48471] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:51.957100 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:62256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:51.957129 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:52.009693 2026] [ssl:error] [pid 3856944:tid 3856944] (EAI 2)Name or service not known: [client 144.76.19.72:62266] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:52.009723 2026] [ssl:error] [pid 3856944:tid 3856944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:52.500574 2026] [authz_core:error] [pid 3829432:tid 3829432] [client 104.152.52.123:37113] AH01630: client denied by server configuration: /home/clss/public_html/error_log
[Thu Jul 30 16:23:52.600171 2026] [core:error] [pid 3829570:tid 3829570] (13)Permission denied: [client 216.73.216.199:28085] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/hugetlbfs_inode_cache/cache_dma
[Thu Jul 30 16:23:52.692195 2026] [core:error] [pid 3851254:tid 3851254] [client 104.152.52.123:58657] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:23:52.692222 2026] [core:error] [pid 3851254:tid 3851254] [client 104.152.52.123:58657] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:23:53.109385 2026] [security2:error] [pid 3839031:tid 3839031] [client 198.244.226.52:29148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thewillow1994.co.uk"] [uri "/robots.txt"] [unique_id "amtsiQlkDyJ9V044igVIFQAAACo"]
[Thu Jul 30 16:23:53.203519 2026] [ssl:error] [pid 3829570:tid 3829570] (70014)End of file found: [client 216.73.216.199:28085] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:54.151987 2026] [security2:error] [pid 3850512:tid 3850512] [client 198.244.168.238:60006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "thewillow1994.co.uk"] [uri "/A2B8A7C1D7BDFAFCD230AE148C49D602.txt"] [unique_id "amtsisRdVyhb4LsItyqNTgAAADQ"]
[Thu Jul 30 16:23:54.719987 2026] [ssl:error] [pid 3836955:tid 3836955] (70014)End of file found: [client 216.73.216.199:49513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:54.827844 2026] [security2:error] [pid 3855604:tid 3855604] [client 85.208.96.209:25026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1916.0/prev_next,next.html"] [unique_id "amtsirPygw3fDLeZSGXvWwAAAAs"]
[Thu Jul 30 16:23:55.065102 2026] [ssl:error] [pid 3843672:tid 3843672] (EAI 2)Name or service not known: [client 144.76.19.72:62282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:55.065136 2026] [ssl:error] [pid 3843672:tid 3843672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:55.120919 2026] [ssl:error] [pid 3850512:tid 3850512] (EAI 2)Name or service not known: [client 144.76.19.72:62300] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:55.120943 2026] [ssl:error] [pid 3850512:tid 3850512] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:56.827183 2026] [ssl:error] [pid 3851254:tid 3851254] (70014)End of file found: [client 216.73.216.199:56875] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:58.178741 2026] [ssl:error] [pid 3855922:tid 3855922] (EAI 2)Name or service not known: [client 144.76.19.72:62312] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:58.178772 2026] [ssl:error] [pid 3855922:tid 3855922] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:58.236203 2026] [ssl:error] [pid 3850510:tid 3850510] (EAI 2)Name or service not known: [client 144.76.19.72:62320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:23:58.236236 2026] [ssl:error] [pid 3850510:tid 3850510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:23:58.644407 2026] [ssl:error] [pid 3855922:tid 3855922] (70014)End of file found: [client 216.73.216.199:59993] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:23:59.033623 2026] [security2:error] [pid 3855604:tid 3855604] [client 162.62.132.25:42642] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/"] [unique_id "amtsj7Pygw3fDLeZSGXvXwAAAAs"]
[Thu Jul 30 16:24:00.459080 2026] [ssl:error] [pid 3854406:tid 3854406] (70014)End of file found: [client 216.73.216.199:61937] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:00.555040 2026] [security2:error] [pid 3850510:tid 3850510] [client 82.156.116.86:42080] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "amtskCDlGVIaeibKQ4zecQAAACY"]
[Thu Jul 30 16:24:00.588500 2026] [cgi:error] [pid 3844417:tid 3844417] [client 20.104.22.47:32192] AH02812: stderr from /home/hxsrumdr/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:24:00.806806 2026] [security2:error] [pid 3858339:tid 3858339] [client 185.191.171.3:31244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/married-spencer-watts-husband"] [unique_id "amtskImeaRia7mDIbJjzeQAAAAk"]
[Thu Jul 30 16:24:01.293601 2026] [ssl:error] [pid 3854450:tid 3854450] (EAI 2)Name or service not known: [client 144.76.19.72:40608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:01.293647 2026] [ssl:error] [pid 3854450:tid 3854450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:01.387890 2026] [ssl:error] [pid 3854450:tid 3854450] (EAI 2)Name or service not known: [client 144.76.19.72:40614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:01.387915 2026] [ssl:error] [pid 3854450:tid 3854450] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:01.775843 2026] [authz_core:error] [pid 3844417:tid 3844417] [client 20.104.22.47:32192] AH01630: client denied by server configuration: /home/hxsrumdr/public_html/php.ini
[Thu Jul 30 16:24:02.176462 2026] [ssl:error] [pid 3858393:tid 3858393] (70014)End of file found: [client 216.73.216.199:29598] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:04.401388 2026] [ssl:error] [pid 3858395:tid 3858395] (70014)End of file found: [client 216.73.216.199:28799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:04.446034 2026] [ssl:error] [pid 3858394:tid 3858394] (EAI 2)Name or service not known: [client 144.76.19.72:40620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:04.446081 2026] [ssl:error] [pid 3858394:tid 3858394] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:04.500928 2026] [ssl:error] [pid 3849816:tid 3849816] (EAI 2)Name or service not known: [client 144.76.19.72:40622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:04.500962 2026] [ssl:error] [pid 3849816:tid 3849816] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:07.557610 2026] [ssl:error] [pid 3856717:tid 3856717] (EAI 2)Name or service not known: [client 144.76.19.72:40626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:07.557649 2026] [ssl:error] [pid 3856717:tid 3856717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:07.615670 2026] [ssl:error] [pid 3854494:tid 3854494] (EAI 2)Name or service not known: [client 144.76.19.72:40642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:07.615716 2026] [ssl:error] [pid 3854494:tid 3854494] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:08.045384 2026] [ssl:error] [pid 3850512:tid 3850512] (70014)End of file found: [client 216.73.216.199:48913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:08.341474 2026] [security2:error] [pid 3850510:tid 3850510] [client 200.41.113.144:3641] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsmCDlGVIaeibKQ4zedgAAACY"]
[Thu Jul 30 16:24:08.341534 2026] [security2:error] [pid 3850510:tid 3850510] [client 200.41.113.144:3641] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsmCDlGVIaeibKQ4zedgAAACY"]
[Thu Jul 30 16:24:08.341787 2026] [security2:error] [pid 3850510:tid 3850510] [client 200.41.113.144:3641] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsmCDlGVIaeibKQ4zedgAAACY"]
[Thu Jul 30 16:24:08.647158 2026] [core:error] [pid 3856944:tid 3856944] (13)Permission denied: [client 216.73.216.199:49647] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/pid_namespace/usersize
[Thu Jul 30 16:24:09.254379 2026] [ssl:error] [pid 3856944:tid 3856944] (70014)End of file found: [client 216.73.216.199:49647] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:09.747023 2026] [ssl:error] [pid 3855922:tid 3855922] (70014)End of file found: [client 216.73.216.199:37563] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:10.674258 2026] [ssl:error] [pid 3829570:tid 3829570] (EAI 2)Name or service not known: [client 144.76.19.72:65436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:10.674286 2026] [ssl:error] [pid 3829570:tid 3829570] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:10.728294 2026] [ssl:error] [pid 3858834:tid 3858834] (EAI 2)Name or service not known: [client 144.76.19.72:65440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:10.728344 2026] [ssl:error] [pid 3858834:tid 3858834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:11.895462 2026] [security2:error] [pid 3854492:tid 3854492] [client 47.236.111.43:62821] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsm990SUPh6Te99SZGdQAAABY"]
[Thu Jul 30 16:24:11.895511 2026] [security2:error] [pid 3854492:tid 3854492] [client 47.236.111.43:62821] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsm990SUPh6Te99SZGdQAAABY"]
[Thu Jul 30 16:24:11.895753 2026] [security2:error] [pid 3854492:tid 3854492] [client 47.236.111.43:62821] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsm990SUPh6Te99SZGdQAAABY"]
[Thu Jul 30 16:24:12.289367 2026] [security2:error] [pid 3854541:tid 3854541] [client 47.128.98.92:54290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.mcgarvey.co.uk"] [uri "/robots.txt"] [unique_id "amtsnHitGzn6x5ItM-GzdwAAACs"]
[Thu Jul 30 16:24:13.869123 2026] [ssl:error] [pid 3859051:tid 3859051] (EAI 2)Name or service not known: [client 144.76.19.72:65444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:13.869186 2026] [ssl:error] [pid 3859051:tid 3859051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:13.925907 2026] [ssl:error] [pid 3859051:tid 3859051] (EAI 2)Name or service not known: [client 144.76.19.72:65458] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:13.925939 2026] [ssl:error] [pid 3859051:tid 3859051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:14.787849 2026] [access_compat:error] [pid 3854492:tid 3854492] [client 20.226.5.174:33729] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/011i.php
[Thu Jul 30 16:24:14.788211 2026] [core:error] [pid 3854492:tid 3854492] [client 20.226.5.174:33729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:15.009991 2026] [security2:error] [pid 3856471:tid 3856471] [client 47.236.111.43:64033] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsnzG_NNVLJUxpXTeBOAAAABM"]
[Thu Jul 30 16:24:15.010045 2026] [security2:error] [pid 3856471:tid 3856471] [client 47.236.111.43:64033] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsnzG_NNVLJUxpXTeBOAAAABM"]
[Thu Jul 30 16:24:15.010333 2026] [security2:error] [pid 3856471:tid 3856471] [client 47.236.111.43:64033] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsnzG_NNVLJUxpXTeBOAAAABM"]
[Thu Jul 30 16:24:15.262695 2026] [cgi:error] [pid 3858395:tid 3858395] [client 20.215.186.36:48458] AH02812: stderr from /home/hatchw/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:24:15.703705 2026] [access_compat:error] [pid 3846020:tid 3846020] [client 20.226.5.174:33759] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/03a005685d.php
[Thu Jul 30 16:24:15.704044 2026] [core:error] [pid 3846020:tid 3846020] [client 20.226.5.174:33759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:16.982543 2026] [ssl:error] [pid 3845080:tid 3845080] (EAI 2)Name or service not known: [client 144.76.19.72:65462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:16.982575 2026] [ssl:error] [pid 3845080:tid 3845080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:17.036763 2026] [ssl:error] [pid 3854406:tid 3854406] (EAI 2)Name or service not known: [client 144.76.19.72:65476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:17.036791 2026] [ssl:error] [pid 3854406:tid 3854406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:17.104510 2026] [access_compat:error] [pid 3846020:tid 3846020] [client 20.226.5.174:33741] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/403.php
[Thu Jul 30 16:24:17.104853 2026] [core:error] [pid 3846020:tid 3846020] [client 20.226.5.174:33741] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:17.979405 2026] [authz_core:error] [pid 3849754:tid 3849754] [client 66.249.66.33:41195] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:24:17.982057 2026] [authz_core:error] [pid 3849754:tid 3849754] [client 66.249.66.33:41195] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:24:18.177764 2026] [ssl:error] [pid 3859217:tid 3859217] (70014)End of file found: [client 216.73.216.199:3425] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:18.499842 2026] [ssl:error] [pid 3856717:tid 3856717] (70014)End of file found: [client 216.73.216.199:1589] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:18.801382 2026] [ssl:error] [pid 3838238:tid 3838238] (70014)End of file found: [client 216.73.216.199:25248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:19.099517 2026] [access_compat:error] [pid 3846020:tid 3846020] [client 20.226.5.174:36048] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/404.php
[Thu Jul 30 16:24:19.099853 2026] [core:error] [pid 3846020:tid 3846020] [client 20.226.5.174:36048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:20.093138 2026] [ssl:error] [pid 3854539:tid 3854539] (EAI 2)Name or service not known: [client 144.76.19.72:61634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:20.093193 2026] [ssl:error] [pid 3854539:tid 3854539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:20.146666 2026] [ssl:error] [pid 3848865:tid 3848865] (EAI 2)Name or service not known: [client 144.76.19.72:61648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:20.146698 2026] [ssl:error] [pid 3848865:tid 3848865] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:22.194142 2026] [access_compat:error] [pid 3854545:tid 3854545] [client 20.226.5.174:36043] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/aa.php
[Thu Jul 30 16:24:22.194530 2026] [core:error] [pid 3854545:tid 3854545] [client 20.226.5.174:36043] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:23.009821 2026] [access_compat:error] [pid 3859180:tid 3859180] [client 20.226.5.174:33730] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/aafewc0k.php
[Thu Jul 30 16:24:23.010246 2026] [core:error] [pid 3859180:tid 3859180] [client 20.226.5.174:33730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:23.220321 2026] [ssl:error] [pid 3852619:tid 3852619] (EAI 2)Name or service not known: [client 144.76.19.72:61664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:23.220360 2026] [ssl:error] [pid 3852619:tid 3852619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:23.273530 2026] [ssl:error] [pid 3844417:tid 3844417] (EAI 2)Name or service not known: [client 144.76.19.72:61674] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:23.273573 2026] [ssl:error] [pid 3844417:tid 3844417] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:23.775333 2026] [security2:error] [pid 3848865:tid 3848865] [client 43.165.67.31:57864] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "saturnsports.com"] [uri "/"] [unique_id "amtsp938K04dWFQ4Ljv1EQAAABo"]
[Thu Jul 30 16:24:23.828121 2026] [access_compat:error] [pid 3858340:tid 3858340] [client 20.226.5.174:33758] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/abcd.php
[Thu Jul 30 16:24:23.828482 2026] [core:error] [pid 3858340:tid 3858340] [client 20.226.5.174:33758] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:23.932818 2026] [ssl:error] [pid 3859051:tid 3859051] (70014)End of file found: [client 216.73.216.199:25882] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:24.137625 2026] [security2:error] [pid 3829570:tid 3829570] [client 185.191.171.6:13076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,456.0/prev_next,next.html"] [unique_id "amtsqPgYijG5y_PFVuWg7wAAADg"]
[Thu Jul 30 16:24:24.235605 2026] [ssl:error] [pid 3859050:tid 3859050] (70014)End of file found: [client 216.73.216.199:60717] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:24.732678 2026] [core:error] [pid 3852619:tid 3852619] [client 20.226.5.174:36047] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:24.732702 2026] [core:error] [pid 3852619:tid 3852619] [client 20.226.5.174:36047] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:26.351594 2026] [ssl:error] [pid 3837012:tid 3837012] (EAI 2)Name or service not known: [client 144.76.19.72:61688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:26.351622 2026] [ssl:error] [pid 3837012:tid 3837012] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:26.394281 2026] [security2:error] [pid 3849425:tid 3849425] [client 114.119.142.20:57041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~104,19/request_format~html"] [unique_id "amtsqlpYyjDwMYj9u5dCXQAAABs"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/cat_ids%7E104/request_format%7Ehtml
[Thu Jul 30 16:24:26.407506 2026] [ssl:error] [pid 3851470:tid 3851470] (EAI 2)Name or service not known: [client 144.76.19.72:61704] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:26.407538 2026] [ssl:error] [pid 3851470:tid 3851470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:26.770922 2026] [core:error] [pid 3858983:tid 3858983] [client 20.226.5.174:36054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:26.770946 2026] [core:error] [pid 3858983:tid 3858983] [client 20.226.5.174:36054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:27.393326 2026] [security2:error] [pid 3842035:tid 3842035] [client 114.119.142.20:57045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~104,19/request_format~html"] [unique_id "amtsq8iyZ4jqeJH2tumBSQAAACA"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/cat_ids%7E104/request_format%7Ehtml
[Thu Jul 30 16:24:28.639035 2026] [security2:error] [pid 3858393:tid 3858393] [client 47.128.124.198:56338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "1stcolsterworthscouts.org.uk"] [uri "/robots.txt"] [unique_id "amtsrEp93YbCCzOl18SW1gAAABA"]
[Thu Jul 30 16:24:29.078153 2026] [ssl:error] [pid 3829563:tid 3829563] (70014)End of file found: [client 216.73.216.199:12884] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:29.462315 2026] [ssl:error] [pid 3858834:tid 3858834] (EAI 2)Name or service not known: [client 144.76.19.72:61710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:29.462346 2026] [ssl:error] [pid 3858834:tid 3858834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:29.518803 2026] [ssl:error] [pid 3856944:tid 3856944] (EAI 2)Name or service not known: [client 144.76.19.72:61724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:29.518835 2026] [ssl:error] [pid 3856944:tid 3856944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:29.568320 2026] [ssl:error] [pid 3854539:tid 3854539] (70014)End of file found: [client 216.73.216.199:31791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:29.877453 2026] [ssl:error] [pid 3854544:tid 3854544] (70014)End of file found: [client 216.73.216.199:33048] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:30.682657 2026] [access_compat:error] [pid 3859255:tid 3859255] [client 20.226.5.174:33743] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/adminfuns.php
[Thu Jul 30 16:24:30.683016 2026] [core:error] [pid 3859255:tid 3859255] [client 20.226.5.174:33743] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:31.653550 2026] [authz_core:error] [pid 3850576:tid 3850576] [client 52.165.196.84:54409] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/l10n/error_log
[Thu Jul 30 16:24:32.023380 2026] [access_compat:error] [pid 3857654:tid 3857654] [client 45.158.164.139:43704] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:24:32.574947 2026] [ssl:error] [pid 3856944:tid 3856944] (EAI 2)Name or service not known: [client 144.76.19.72:57512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:32.574976 2026] [ssl:error] [pid 3856944:tid 3856944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:32.665226 2026] [ssl:error] [pid 3846065:tid 3846065] (EAI 2)Name or service not known: [client 144.76.19.72:57516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:32.665275 2026] [ssl:error] [pid 3846065:tid 3846065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:33.844547 2026] [authz_core:error] [pid 3850576:tid 3850576] [client 52.165.196.84:54409] AH01630: client denied by server configuration: /home/jgqawffu/public_html/positivelydisruptive.co.uk/wp-includes/assets/error_log
[Thu Jul 30 16:24:34.446346 2026] [ssl:error] [pid 3838238:tid 3838238] (70014)End of file found: [client 216.73.216.199:41516] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:34.541802 2026] [access_compat:error] [pid 3856717:tid 3856717] [client 20.226.5.174:36058] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/albin.php
[Thu Jul 30 16:24:34.542183 2026] [core:error] [pid 3856717:tid 3856717] [client 20.226.5.174:36058] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:35.068274 2026] [ssl:error] [pid 3859904:tid 3859904] (70014)End of file found: [client 216.73.216.199:20316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:35.722236 2026] [ssl:error] [pid 3855852:tid 3855852] (EAI 2)Name or service not known: [client 144.76.19.72:57520] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:35.722269 2026] [ssl:error] [pid 3855852:tid 3855852] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:35.774534 2026] [ssl:error] [pid 3843672:tid 3843672] (EAI 2)Name or service not known: [client 144.76.19.72:57524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:35.774573 2026] [ssl:error] [pid 3843672:tid 3843672] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:36.733858 2026] [security2:error] [pid 3855922:tid 3855922] [client 43.131.26.226:35464] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kirmond.com"] [uri "/"] [unique_id "amtstD9ikS3jxFqBBcv7gwAAAB4"]
[Thu Jul 30 16:24:36.736815 2026] [authz_core:error] [pid 3855922:tid 3855922] [client 43.131.26.226:35464] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 16:24:38.506987 2026] [access_compat:error] [pid 3856944:tid 3856944] [client 20.226.5.174:33790] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/amfsqvgv.php
[Thu Jul 30 16:24:38.507340 2026] [core:error] [pid 3856944:tid 3856944] [client 20.226.5.174:33790] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:38.828692 2026] [ssl:error] [pid 3845080:tid 3845080] (EAI 2)Name or service not known: [client 144.76.19.72:57526] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:38.828719 2026] [ssl:error] [pid 3845080:tid 3845080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:38.891522 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:57534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:38.891553 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:39.198897 2026] [access_compat:error] [pid 3860069:tid 3860069] [client 20.226.5.174:33739] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/ant.php
[Thu Jul 30 16:24:39.199383 2026] [core:error] [pid 3860069:tid 3860069] [client 20.226.5.174:33739] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:40.562748 2026] [ssl:error] [pid 3858396:tid 3858396] (70014)End of file found: [client 216.73.216.199:7606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:40.873743 2026] [cgi:error] [pid 3855922:tid 3855922] [client 52.165.196.84:52008] AH02812: stderr from /home/jgqawffu/public_html/positivelydisruptive.co.uk/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:24:41.217963 2026] [authz_core:error] [pid 3850575:tid 3850575] [client 66.249.66.33:57754] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:24:41.221245 2026] [authz_core:error] [pid 3850575:tid 3850575] [client 66.249.66.33:57754] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:24:41.500639 2026] [ssl:error] [pid 3851254:tid 3851254] (70014)End of file found: [client 216.73.216.199:27286] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:41.949843 2026] [ssl:error] [pid 3858393:tid 3858393] (EAI 2)Name or service not known: [client 144.76.19.72:55914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:41.949890 2026] [ssl:error] [pid 3858393:tid 3858393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:42.008522 2026] [ssl:error] [pid 3845080:tid 3845080] (EAI 2)Name or service not known: [client 144.76.19.72:55924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:42.008565 2026] [ssl:error] [pid 3845080:tid 3845080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:42.204164 2026] [access_compat:error] [pid 3854545:tid 3854545] [client 20.226.5.174:33768] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/appreciators.php
[Thu Jul 30 16:24:42.204544 2026] [core:error] [pid 3854545:tid 3854545] [client 20.226.5.174:33768] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:42.699246 2026] [ssl:error] [pid 3856471:tid 3856471] (70014)End of file found: [client 216.73.216.199:36950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:42.813035 2026] [security2:error] [pid 3845080:tid 3845080] [client 85.208.96.205:34026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5481.0/prev_next,next.html"] [unique_id "amtsuswalV4V3Crw6EgvDAAAAAQ"]
[Thu Jul 30 16:24:43.453804 2026] [access_compat:error] [pid 3854539:tid 3854539] [client 20.226.5.174:36060] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/archive.php
[Thu Jul 30 16:24:43.454198 2026] [core:error] [pid 3854539:tid 3854539] [client 20.226.5.174:36060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:45.067993 2026] [ssl:error] [pid 3859849:tid 3859849] (EAI 2)Name or service not known: [client 144.76.19.72:55926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:45.068045 2026] [ssl:error] [pid 3859849:tid 3859849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:45.126044 2026] [ssl:error] [pid 3859217:tid 3859217] (EAI 2)Name or service not known: [client 144.76.19.72:55942] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:45.126104 2026] [ssl:error] [pid 3859217:tid 3859217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:45.765663 2026] [access_compat:error] [pid 3851470:tid 3851470] [client 20.226.5.174:33791] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/as.php
[Thu Jul 30 16:24:45.766000 2026] [core:error] [pid 3851470:tid 3851470] [client 20.226.5.174:33791] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:46.339302 2026] [ssl:error] [pid 3842035:tid 3842035] (70014)End of file found: [client 216.73.216.199:30413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:46.598697 2026] [access_compat:error] [pid 3850575:tid 3850575] [client 20.226.5.174:35576] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/atomlib.php
[Thu Jul 30 16:24:46.599107 2026] [core:error] [pid 3850575:tid 3850575] [client 20.226.5.174:35576] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:47.247395 2026] [ssl:error] [pid 3859905:tid 3859905] (70014)End of file found: [client 216.73.216.199:43902] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:48.183176 2026] [ssl:error] [pid 3858396:tid 3858396] (EAI 2)Name or service not known: [client 144.76.19.72:55946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:48.183216 2026] [ssl:error] [pid 3858396:tid 3858396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:48.244883 2026] [ssl:error] [pid 3859904:tid 3859904] (EAI 2)Name or service not known: [client 144.76.19.72:55960] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:48.244921 2026] [ssl:error] [pid 3859904:tid 3859904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:48.476985 2026] [ssl:error] [pid 3846065:tid 3846065] (70014)End of file found: [client 216.73.216.199:13171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:49.695770 2026] [security2:error] [pid 3849754:tid 3849754] [client 20.171.55.167:1259] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtswYNnVfzY4UPkGdDq6QAAAC8"]
[Thu Jul 30 16:24:49.696019 2026] [security2:error] [pid 3849754:tid 3849754] [client 20.171.55.167:1259] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtswYNnVfzY4UPkGdDq6QAAAC8"]
[Thu Jul 30 16:24:49.696319 2026] [security2:error] [pid 3849754:tid 3849754] [client 20.171.55.167:1259] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "peterboroughdiocesanregistry.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtswYNnVfzY4UPkGdDq6QAAAC8"]
[Thu Jul 30 16:24:50.896048 2026] [access_compat:error] [pid 3856471:tid 3856471] [client 20.226.5.174:35532] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/autoload_classmap.php
[Thu Jul 30 16:24:50.896402 2026] [core:error] [pid 3856471:tid 3856471] [client 20.226.5.174:35532] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:51.338100 2026] [ssl:error] [pid 3859904:tid 3859904] (EAI 2)Name or service not known: [client 144.76.19.72:30504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:51.338143 2026] [ssl:error] [pid 3859904:tid 3859904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:51.398054 2026] [ssl:error] [pid 3850575:tid 3850575] (EAI 2)Name or service not known: [client 144.76.19.72:30516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:51.398108 2026] [ssl:error] [pid 3850575:tid 3850575] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:52.119281 2026] [ssl:error] [pid 3860069:tid 3860069] (70014)End of file found: [client 216.73.216.199:61308] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:52.609794 2026] [access_compat:error] [pid 3859904:tid 3859904] [client 20.226.5.174:35549] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/bb.php
[Thu Jul 30 16:24:52.610205 2026] [core:error] [pid 3859904:tid 3859904] [client 20.226.5.174:35549] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:53.619273 2026] [ssl:error] [pid 3852619:tid 3852619] (70014)End of file found: [client 216.73.216.199:19274] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:53.820389 2026] [access_compat:error] [pid 3857654:tid 3857654] [client 20.226.5.174:35552] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/bnm.php
[Thu Jul 30 16:24:53.820741 2026] [core:error] [pid 3857654:tid 3857654] [client 20.226.5.174:35552] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:54.491155 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:30518] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:54.491199 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:54.544477 2026] [ssl:error] [pid 3829563:tid 3829563] (EAI 2)Name or service not known: [client 144.76.19.72:30522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:54.544506 2026] [ssl:error] [pid 3829563:tid 3829563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:55.199833 2026] [access_compat:error] [pid 3849754:tid 3849754] [client 20.226.5.174:35574] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/bootstrap.php
[Thu Jul 30 16:24:55.200186 2026] [core:error] [pid 3849754:tid 3849754] [client 20.226.5.174:35574] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:57.250901 2026] [core:error] [pid 3829563:tid 3829563] [client 20.226.5.174:33745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:57.250929 2026] [core:error] [pid 3829563:tid 3829563] [client 20.226.5.174:33745] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:57.622565 2026] [ssl:error] [pid 3858834:tid 3858834] (EAI 2)Name or service not known: [client 144.76.19.72:30534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:57.622604 2026] [ssl:error] [pid 3858834:tid 3858834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:57.678254 2026] [ssl:error] [pid 3829563:tid 3829563] (EAI 2)Name or service not known: [client 144.76.19.72:30540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:24:57.678281 2026] [ssl:error] [pid 3829563:tid 3829563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:24:58.016978 2026] [core:error] [pid 3860920:tid 3860920] [client 104.152.52.205:53347] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:58.017020 2026] [core:error] [pid 3860920:tid 3860920] [client 104.152.52.205:53347] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:58.142161 2026] [ssl:error] [pid 3856717:tid 3856717] (70014)End of file found: [client 216.73.216.199:61072] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:24:58.720768 2026] [access_compat:error] [pid 3851254:tid 3851254] [client 20.226.5.174:33759] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/chosen.php
[Thu Jul 30 16:24:58.721111 2026] [core:error] [pid 3851254:tid 3851254] [client 20.226.5.174:33759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:24:59.645732 2026] [ssl:error] [pid 3859216:tid 3859216] (70014)End of file found: [client 216.73.216.199:46122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:00.734029 2026] [ssl:error] [pid 3852619:tid 3852619] (EAI 2)Name or service not known: [client 144.76.19.72:63996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:00.734081 2026] [ssl:error] [pid 3852619:tid 3852619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:00.788369 2026] [ssl:error] [pid 3859905:tid 3859905] (EAI 2)Name or service not known: [client 144.76.19.72:64002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:00.788408 2026] [ssl:error] [pid 3859905:tid 3859905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:00.851097 2026] [ssl:error] [pid 3860069:tid 3860069] (70014)End of file found: [client 216.73.216.199:19010] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:00.934049 2026] [authz_core:error] [pid 3859849:tid 3859849] [client 66.249.66.35:49770] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:25:00.936726 2026] [authz_core:error] [pid 3859849:tid 3859849] [client 66.249.66.35:49770] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:25:01.306266 2026] [security2:error] [pid 3860319:tid 3860319] [client 85.208.96.194:18212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/how-to-drive-a-sagittarius-woman-crazy"] [unique_id "amtszemBAf33qa8jHLNflAAAABE"]
[Thu Jul 30 16:25:02.112616 2026] [access_compat:error] [pid 3851254:tid 3851254] [client 20.226.5.174:34241] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/class-wp-image.php
[Thu Jul 30 16:25:02.112956 2026] [core:error] [pid 3851254:tid 3851254] [client 20.226.5.174:34241] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:02.299405 2026] [core:error] [pid 3854491:tid 3854491] [client 66.249.66.8:45035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:02.299435 2026] [core:error] [pid 3854491:tid 3854491] [client 66.249.66.8:45035] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:02.354453 2026] [cgi:error] [pid 3855921:tid 3855921] [client 66.132.224.230:39626] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 16:25:02.394658 2026] [security2:error] [pid 3859051:tid 3859051] [client 141.94.79.3:41206] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsztd8d1t6Y9IW9OI9lAAAACo"]
[Thu Jul 30 16:25:02.394721 2026] [security2:error] [pid 3859051:tid 3859051] [client 141.94.79.3:41206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtsztd8d1t6Y9IW9OI9lAAAACo"]
[Thu Jul 30 16:25:02.394995 2026] [security2:error] [pid 3859051:tid 3859051] [client 141.94.79.3:41206] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtsztd8d1t6Y9IW9OI9lAAAACo"]
[Thu Jul 30 16:25:02.844457 2026] [security2:error] [pid 3861298:tid 3861298] [client 145.239.87.55:48680] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtszhkow3HBoVwfsCI21gAAACI"]
[Thu Jul 30 16:25:02.844521 2026] [security2:error] [pid 3861298:tid 3861298] [client 145.239.87.55:48680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtszhkow3HBoVwfsCI21gAAACI"]
[Thu Jul 30 16:25:02.844864 2026] [security2:error] [pid 3861298:tid 3861298] [client 145.239.87.55:48680] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtszhkow3HBoVwfsCI21gAAACI"]
[Thu Jul 30 16:25:03.134500 2026] [access_compat:error] [pid 3851470:tid 3851470] [client 20.226.5.174:34378] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/classsmtps.php
[Thu Jul 30 16:25:03.134834 2026] [core:error] [pid 3851470:tid 3851470] [client 20.226.5.174:34378] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:03.612605 2026] [ssl:error] [pid 3860319:tid 3860319] (70014)End of file found: [client 216.73.216.199:44686] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:03.647592 2026] [authz_core:error] [pid 3851470:tid 3851470] [client 169.58.39.191:56407] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 16:25:03.845172 2026] [ssl:error] [pid 3856717:tid 3856717] (EAI 2)Name or service not known: [client 144.76.19.72:64010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:03.845204 2026] [ssl:error] [pid 3856717:tid 3856717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:03.899860 2026] [ssl:error] [pid 3858396:tid 3858396] (EAI 2)Name or service not known: [client 144.76.19.72:64014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:03.899890 2026] [ssl:error] [pid 3858396:tid 3858396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:05.331828 2026] [access_compat:error] [pid 3858983:tid 3858983] [client 20.226.5.174:34267] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/classwithtostring.php
[Thu Jul 30 16:25:05.332274 2026] [core:error] [pid 3858983:tid 3858983] [client 20.226.5.174:34267] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:06.336449 2026] [cgi:error] [pid 3854539:tid 3854539] [client 66.249.66.195:50942] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 16:25:06.591368 2026] [core:error] [pid 3852619:tid 3852619] (13)Permission denied: [client 216.73.216.199:56260] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:59/subsystem/ttyS2/flags
[Thu Jul 30 16:25:06.857013 2026] [authz_core:error] [pid 3859217:tid 3859217] [client 169.58.39.191:57570] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/error_log, referer: binance.com
[Thu Jul 30 16:25:06.885624 2026] [ssl:error] [pid 3852619:tid 3852619] (70014)End of file found: [client 216.73.216.199:56260] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:06.954610 2026] [ssl:error] [pid 3855921:tid 3855921] (EAI 2)Name or service not known: [client 144.76.19.72:64024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:06.954643 2026] [ssl:error] [pid 3855921:tid 3855921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:07.014668 2026] [ssl:error] [pid 3861400:tid 3861400] (EAI 2)Name or service not known: [client 144.76.19.72:64026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:07.014698 2026] [ssl:error] [pid 3861400:tid 3861400] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:07.057132 2026] [lsapi:warn] [pid 3861401:tid 3861401] [client 107.191.47.131:59246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 16:25:07.057192 2026] [lsapi:warn] [pid 3861401:tid 3861401] [client 107.191.47.131:59246] [host brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n, referer: http://brodie-engineering.co.uk/
[Thu Jul 30 16:25:07.234642 2026] [access_compat:error] [pid 3858983:tid 3858983] [client 20.226.5.174:34383] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/config.php
[Thu Jul 30 16:25:07.235017 2026] [core:error] [pid 3858983:tid 3858983] [client 20.226.5.174:34383] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:07.907127 2026] [security2:error] [pid 3859849:tid 3859849] [client 51.75.23.111:37826] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts08LAsqkzLMBYRZLCWgAAAAU"]
[Thu Jul 30 16:25:07.907192 2026] [security2:error] [pid 3859849:tid 3859849] [client 51.75.23.111:37826] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts08LAsqkzLMBYRZLCWgAAAAU"]
[Thu Jul 30 16:25:07.907470 2026] [security2:error] [pid 3859849:tid 3859849] [client 51.75.23.111:37826] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amts08LAsqkzLMBYRZLCWgAAAAU"]
[Thu Jul 30 16:25:08.033085 2026] [security2:error] [pid 3856717:tid 3856717] [client 51.38.189.62:50270] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts1AnRcxv_ZaS6trLUfAAAACQ"]
[Thu Jul 30 16:25:08.033140 2026] [security2:error] [pid 3856717:tid 3856717] [client 51.38.189.62:50270] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts1AnRcxv_ZaS6trLUfAAAACQ"]
[Thu Jul 30 16:25:08.033451 2026] [security2:error] [pid 3856717:tid 3856717] [client 51.38.189.62:50270] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amts1AnRcxv_ZaS6trLUfAAAACQ"]
[Thu Jul 30 16:25:08.103487 2026] [ssl:error] [pid 3855921:tid 3855921] (70014)End of file found: [client 216.73.216.199:5993] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:08.114551 2026] [access_compat:error] [pid 3850510:tid 3850510] [client 20.226.5.174:34416] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/core.php
[Thu Jul 30 16:25:08.114888 2026] [core:error] [pid 3850510:tid 3850510] [client 20.226.5.174:34416] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:08.150136 2026] [security2:error] [pid 3861401:tid 3861401] [client 141.94.94.95:52164] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts1M-k3_lggI5VfuuC_gAAADM"]
[Thu Jul 30 16:25:08.150183 2026] [security2:error] [pid 3861401:tid 3861401] [client 141.94.94.95:52164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts1M-k3_lggI5VfuuC_gAAADM"]
[Thu Jul 30 16:25:08.150458 2026] [security2:error] [pid 3861401:tid 3861401] [client 141.94.94.95:52164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amts1M-k3_lggI5VfuuC_gAAADM"]
[Thu Jul 30 16:25:08.203399 2026] [security2:error] [pid 3845981:tid 3845981] [client 141.94.94.40:48890] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts1PGXFCf393bYLmcaQgAAABI"]
[Thu Jul 30 16:25:08.203447 2026] [security2:error] [pid 3845981:tid 3845981] [client 141.94.94.40:48890] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts1PGXFCf393bYLmcaQgAAABI"]
[Thu Jul 30 16:25:08.203711 2026] [security2:error] [pid 3845981:tid 3845981] [client 141.94.94.40:48890] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amts1PGXFCf393bYLmcaQgAAABI"]
[Thu Jul 30 16:25:09.543841 2026] [authz_core:error] [pid 3851254:tid 3851254] [client 20.215.186.36:65449] AH01630: client denied by server configuration: /home/hatchw/public_html/wp-includes/block-patterns/error_log
[Thu Jul 30 16:25:10.038994 2026] [access_compat:error] [pid 3850510:tid 3850510] [client 20.226.5.174:34386] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/css.php
[Thu Jul 30 16:25:10.039356 2026] [core:error] [pid 3850510:tid 3850510] [client 20.226.5.174:34386] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:10.072675 2026] [ssl:error] [pid 3859050:tid 3859050] (EAI 2)Name or service not known: [client 144.76.19.72:41648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:10.072710 2026] [ssl:error] [pid 3859050:tid 3859050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:10.130515 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:41664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:10.130544 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:10.510812 2026] [ssl:error] [pid 3859217:tid 3859217] (70014)End of file found: [client 216.73.216.199:9599] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:11.381733 2026] [access_compat:error] [pid 3829563:tid 3829563] [client 20.226.5.174:34247] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/database.php
[Thu Jul 30 16:25:11.382055 2026] [core:error] [pid 3829563:tid 3829563] [client 20.226.5.174:34247] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:12.618039 2026] [core:error] [pid 3854541:tid 3854541] (13)Permission denied: [client 216.73.216.199:32093] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/firmware_class/uevent
[Thu Jul 30 16:25:13.188631 2026] [ssl:error] [pid 3859255:tid 3859255] (EAI 2)Name or service not known: [client 144.76.19.72:41670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:13.188669 2026] [ssl:error] [pid 3859255:tid 3859255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:13.242324 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:41684] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:13.242360 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:13.785398 2026] [access_compat:error] [pid 3852619:tid 3852619] [client 20.226.5.174:34074] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/db.php
[Thu Jul 30 16:25:13.785810 2026] [core:error] [pid 3852619:tid 3852619] [client 20.226.5.174:34074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:14.644081 2026] [access_compat:error] [pid 3856717:tid 3856717] [client 20.226.5.174:34102] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/default.php
[Thu Jul 30 16:25:14.644415 2026] [core:error] [pid 3856717:tid 3856717] [client 20.226.5.174:34102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:15.644631 2026] [access_compat:error] [pid 3845080:tid 3845080] [client 20.226.5.174:34385] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/dropdown.php
[Thu Jul 30 16:25:15.644989 2026] [core:error] [pid 3845080:tid 3845080] [client 20.226.5.174:34385] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:15.671513 2026] [ssl:error] [pid 3854541:tid 3854541] (70014)End of file found: [client 216.73.216.199:32093] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:16.299332 2026] [ssl:error] [pid 3858339:tid 3858339] (EAI 2)Name or service not known: [client 144.76.19.72:41692] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:16.299371 2026] [ssl:error] [pid 3858339:tid 3858339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:16.354237 2026] [ssl:error] [pid 3852619:tid 3852619] (EAI 2)Name or service not known: [client 144.76.19.72:41694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:16.354272 2026] [ssl:error] [pid 3852619:tid 3852619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:16.897026 2026] [core:error] [pid 3859217:tid 3859217] [client 20.226.5.174:34056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:16.897058 2026] [core:error] [pid 3859217:tid 3859217] [client 20.226.5.174:34056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:17.183616 2026] [core:error] [pid 3861400:tid 3861400] (13)Permission denied: [client 216.73.216.199:30766] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/226:0/device/resource0
[Thu Jul 30 16:25:17.254236 2026] [security2:error] [pid 3854493:tid 3854493] [client 43.156.102.219:49415] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts3USMN9691uGp_eucNgAAABk"]
[Thu Jul 30 16:25:17.254295 2026] [security2:error] [pid 3854493:tid 3854493] [client 43.156.102.219:49415] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts3USMN9691uGp_eucNgAAABk"]
[Thu Jul 30 16:25:17.254627 2026] [security2:error] [pid 3854493:tid 3854493] [client 43.156.102.219:49415] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amts3USMN9691uGp_eucNgAAABk"]
[Thu Jul 30 16:25:18.487012 2026] [core:error] [pid 3852619:tid 3852619] (13)Permission denied: [client 216.73.216.199:17826] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:32/subsystem/ttyS0/uartclk
[Thu Jul 30 16:25:19.413491 2026] [ssl:error] [pid 3856717:tid 3856717] (EAI 2)Name or service not known: [client 144.76.19.72:41708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:19.413523 2026] [ssl:error] [pid 3856717:tid 3856717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:19.468174 2026] [ssl:error] [pid 3850578:tid 3850578] (EAI 2)Name or service not known: [client 144.76.19.72:41712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:19.468218 2026] [ssl:error] [pid 3850578:tid 3850578] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:20.263566 2026] [security2:error] [pid 3829570:tid 3829570] [client 145.255.180.0:12129] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts4PgYijG5y_PFVuWhWwAAADg"]
[Thu Jul 30 16:25:20.263621 2026] [security2:error] [pid 3829570:tid 3829570] [client 145.255.180.0:12129] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts4PgYijG5y_PFVuWhWwAAADg"]
[Thu Jul 30 16:25:20.263869 2026] [security2:error] [pid 3829570:tid 3829570] [client 145.255.180.0:12129] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amts4PgYijG5y_PFVuWhWwAAADg"]
[Thu Jul 30 16:25:22.098913 2026] [ssl:error] [pid 3861400:tid 3861400] (70014)End of file found: [client 216.73.216.199:30766] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:22.248601 2026] [access_compat:error] [pid 3859217:tid 3859217] [client 20.226.5.174:33638] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/f35.php
[Thu Jul 30 16:25:22.248960 2026] [core:error] [pid 3859217:tid 3859217] [client 20.226.5.174:33638] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:22.526323 2026] [ssl:error] [pid 3858396:tid 3858396] (EAI 2)Name or service not known: [client 144.76.19.72:45438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:22.526362 2026] [ssl:error] [pid 3858396:tid 3858396] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:22.585598 2026] [ssl:error] [pid 3859905:tid 3859905] (EAI 2)Name or service not known: [client 144.76.19.72:45442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:22.585632 2026] [ssl:error] [pid 3859905:tid 3859905] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:23.309956 2026] [ssl:error] [pid 3852619:tid 3852619] (70014)End of file found: [client 216.73.216.199:17826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:24.315246 2026] [access_compat:error] [pid 3846065:tid 3846065] [client 20.226.5.174:33606] AH01797: client denied by server configuration: /home/thepryor/public_html/dev/f7.php
[Thu Jul 30 16:25:24.315620 2026] [core:error] [pid 3846065:tid 3846065] [client 20.226.5.174:33606] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:25:24.807292 2026] [ssl:error] [pid 3862467:tid 3862467] (70014)End of file found: [client 216.73.216.199:42801] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:25.260988 2026] [security2:error] [pid 3859904:tid 3859904] [client 123.25.50.62:52044] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts5daSj_e4x8M1iuJsZAAAAAg"]
[Thu Jul 30 16:25:25.261035 2026] [security2:error] [pid 3859904:tid 3859904] [client 123.25.50.62:52044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amts5daSj_e4x8M1iuJsZAAAAAg"]
[Thu Jul 30 16:25:25.261294 2026] [security2:error] [pid 3859904:tid 3859904] [client 123.25.50.62:52044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amts5daSj_e4x8M1iuJsZAAAAAg"]
[Thu Jul 30 16:25:25.792325 2026] [ssl:error] [pid 3860921:tid 3860921] (EAI 2)Name or service not known: [client 144.76.19.72:45452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:25.792358 2026] [ssl:error] [pid 3860921:tid 3860921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:26.054912 2026] [ssl:error] [pid 3862563:tid 3862563] (EAI 2)Name or service not known: [client 144.76.19.72:45468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:26.054957 2026] [ssl:error] [pid 3862563:tid 3862563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:28.650558 2026] [ssl:error] [pid 3852619:tid 3852619] (70014)End of file found: [client 216.73.216.199:48228] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:29.112153 2026] [ssl:error] [pid 3862623:tid 3862623] (EAI 2)Name or service not known: [client 144.76.19.72:45472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:29.112208 2026] [ssl:error] [pid 3862623:tid 3862623] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:29.167367 2026] [ssl:error] [pid 3862625:tid 3862625] (EAI 2)Name or service not known: [client 144.76.19.72:45480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:29.167428 2026] [ssl:error] [pid 3862625:tid 3862625] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:30.854017 2026] [ssl:error] [pid 3862565:tid 3862565] (70014)End of file found: [client 216.73.216.199:20043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:32.244414 2026] [ssl:error] [pid 3859255:tid 3859255] (EAI 2)Name or service not known: [client 144.76.19.72:49772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:32.244471 2026] [ssl:error] [pid 3859255:tid 3859255] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:32.301413 2026] [ssl:error] [pid 3851470:tid 3851470] (EAI 2)Name or service not known: [client 144.76.19.72:49774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:32.301464 2026] [ssl:error] [pid 3851470:tid 3851470] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:34.165906 2026] [security2:error] [pid 3862624:tid 3862624] [client 216.73.216.199:37747] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/zabbix-agent.conf"] [unique_id "amts7v9V2nYHJnTtlfDX_QAAADw"]
[Thu Jul 30 16:25:34.166213 2026] [security2:error] [pid 3862624:tid 3862624] [client 216.73.216.199:37747] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/zabbix-agent.conf"] [unique_id "amts7v9V2nYHJnTtlfDX_QAAADw"]
[Thu Jul 30 16:25:34.166441 2026] [security2:error] [pid 3862624:tid 3862624] [client 216.73.216.199:37747] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/zabbix-agent.conf"] [unique_id "amts7v9V2nYHJnTtlfDX_QAAADw"]
[Thu Jul 30 16:25:34.666356 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 45.158.164.139:43584] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:25:34.765219 2026] [ssl:error] [pid 3862624:tid 3862624] (70014)End of file found: [client 216.73.216.199:37747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:35.264428 2026] [ssl:error] [pid 3854491:tid 3854491] (70014)End of file found: [client 216.73.216.199:59595] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:35.357055 2026] [ssl:error] [pid 3860857:tid 3860857] (EAI 2)Name or service not known: [client 144.76.19.72:49782] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:35.357100 2026] [ssl:error] [pid 3860857:tid 3860857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:35.412502 2026] [ssl:error] [pid 3862625:tid 3862625] (EAI 2)Name or service not known: [client 144.76.19.72:49798] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:35.412535 2026] [ssl:error] [pid 3862625:tid 3862625] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:36.891245 2026] [ssl:error] [pid 3858339:tid 3858339] (70014)End of file found: [client 216.73.216.199:31005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:37.288709 2026] [security2:error] [pid 3862564:tid 3862564] [client 185.191.171.19:34776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,10792.0/prev_next,prev.html"] [unique_id "amts8QFhHJaIAwiCZGWqQQAAABk"]
[Thu Jul 30 16:25:38.466967 2026] [ssl:error] [pid 3859904:tid 3859904] (EAI 2)Name or service not known: [client 144.76.19.72:49814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:38.466995 2026] [ssl:error] [pid 3859904:tid 3859904] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:38.521746 2026] [ssl:error] [pid 3862627:tid 3862627] (EAI 2)Name or service not known: [client 144.76.19.72:49826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:38.521778 2026] [ssl:error] [pid 3862627:tid 3862627] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:41.582631 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:54508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:41.582672 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:41.636471 2026] [ssl:error] [pid 3859216:tid 3859216] (EAI 2)Name or service not known: [client 144.76.19.72:54524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:41.636510 2026] [ssl:error] [pid 3859216:tid 3859216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:42.107327 2026] [authz_core:error] [pid 3862565:tid 3862565] [client 66.249.66.33:40440] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:25:42.110004 2026] [authz_core:error] [pid 3862565:tid 3862565] [client 66.249.66.33:40440] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:25:43.902499 2026] [ssl:error] [pid 3858834:tid 3858834] (70014)End of file found: [client 216.73.216.199:26025] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:44.689384 2026] [ssl:error] [pid 3862563:tid 3862563] (EAI 2)Name or service not known: [client 144.76.19.72:54528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:44.689416 2026] [ssl:error] [pid 3862563:tid 3862563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:44.744534 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:54532] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:44.744567 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:45.107370 2026] [ssl:error] [pid 3862467:tid 3862467] (70014)End of file found: [client 216.73.216.199:62435] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:46.006594 2026] [ssl:error] [pid 3858396:tid 3858396] (70014)End of file found: [client 216.73.216.199:15935] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:46.466299 2026] [authz_core:error] [pid 3851254:tid 3851254] [client 66.249.66.33:43121] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:25:46.468968 2026] [authz_core:error] [pid 3851254:tid 3851254] [client 66.249.66.33:43121] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:25:47.281782 2026] [authz_core:error] [pid 3862565:tid 3862565] [client 104.152.52.233:56737] AH01630: client denied by server configuration: /home/spampcou/public_html/php.ini
[Thu Jul 30 16:25:47.797119 2026] [ssl:error] [pid 3859050:tid 3859050] (EAI 2)Name or service not known: [client 144.76.19.72:54534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:47.797154 2026] [ssl:error] [pid 3859050:tid 3859050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:47.853036 2026] [ssl:error] [pid 3860857:tid 3860857] (EAI 2)Name or service not known: [client 144.76.19.72:54550] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:47.853082 2026] [ssl:error] [pid 3860857:tid 3860857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:48.298571 2026] [security2:error] [pid 3858393:tid 3858393] [client 43.131.39.179:43550] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ditchlingfair.com"] [uri "/"] [unique_id "amts_Ep93YbCCzOl18SXEwAAABA"]
[Thu Jul 30 16:25:49.211096 2026] [ssl:error] [pid 3862503:tid 3862503] (70014)End of file found: [client 216.73.216.199:40792] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:50.210631 2026] [security2:error] [pid 3862467:tid 3862467] [client 43.165.67.31:58632] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "bashforthbell.com"] [uri "/"] [unique_id "amts_nnFeuq34YUcIkD8lwAAAAY"]
[Thu Jul 30 16:25:51.128316 2026] [ssl:error] [pid 3862625:tid 3862625] (70014)End of file found: [client 216.73.216.199:19011] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:51.182719 2026] [security2:error] [pid 3863870:tid 3863870] [client 43.165.67.31:59196] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "davidebell.com"] [uri "/"] [unique_id "amts_4kkNMQ75rU6sbLf7AAAAAw"], referer: http://bashforthbell.com
[Thu Jul 30 16:25:51.359293 2026] [ssl:error] [pid 3863871:tid 3863871] (EAI 2)Name or service not known: [client 144.76.19.72:43250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:51.359340 2026] [ssl:error] [pid 3863871:tid 3863871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:51.831613 2026] [ssl:error] [pid 3861401:tid 3861401] (EAI 2)Name or service not known: [client 144.76.19.72:43262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:51.831643 2026] [ssl:error] [pid 3861401:tid 3861401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:52.019470 2026] [security2:error] [pid 3862563:tid 3862563] [client 216.73.216.199:61762] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/apache2.conf"] [unique_id "amttABOl17zNOJGa_0JlPgAAABY"]
[Thu Jul 30 16:25:52.019762 2026] [security2:error] [pid 3862563:tid 3862563] [client 216.73.216.199:61762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/apache2.conf"] [unique_id "amttABOl17zNOJGa_0JlPgAAABY"]
[Thu Jul 30 16:25:52.020014 2026] [security2:error] [pid 3862563:tid 3862563] [client 216.73.216.199:61762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tmpfiles.d/apache2.conf"] [unique_id "amttABOl17zNOJGa_0JlPgAAABY"]
[Thu Jul 30 16:25:52.409593 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/011i.php
[Thu Jul 30 16:25:52.889540 2026] [security2:error] [pid 3855921:tid 3855921] [client 114.119.132.171:64933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~104,17/request_format~html"] [unique_id "amttAF2rqCUrZaU22bZ19AAAABc"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/cat_ids%7E104/request_format%7Ehtml
[Thu Jul 30 16:25:53.394718 2026] [security2:error] [pid 3843672:tid 3843672] [client 72.146.16.10:56960] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "parallelcoordinates.co.uk.ppcl.com"] [uri "/wp-config.php"] [unique_id "amttAS0H_mdP6fhFOjyFGQAAAAI"]
[Thu Jul 30 16:25:53.394848 2026] [security2:error] [pid 3843672:tid 3843672] [client 72.146.16.10:56960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "parallelcoordinates.co.uk.ppcl.com"] [uri "/wp-config.php"] [unique_id "amttAS0H_mdP6fhFOjyFGQAAAAI"]
[Thu Jul 30 16:25:53.395035 2026] [security2:error] [pid 3843672:tid 3843672] [client 72.146.16.10:56960] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "parallelcoordinates.co.uk.ppcl.com"] [uri "/wp-config.php"] [unique_id "amttAS0H_mdP6fhFOjyFGQAAAAI"]
[Thu Jul 30 16:25:53.834107 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/03a005685d.php
[Thu Jul 30 16:25:54.709412 2026] [security2:error] [pid 3864004:tid 3864004] [client 114.119.132.171:64937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~104,17/request_format~html"] [unique_id "amttAlqTPP01FvWv_EZLjgAAADY"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/cat_ids%7E104/request_format%7Ehtml
[Thu Jul 30 16:25:54.788898 2026] [ssl:error] [pid 3843672:tid 3843672] (70014)End of file found: [client 216.73.216.199:38725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:54.886993 2026] [ssl:error] [pid 3864011:tid 3864011] (EAI 2)Name or service not known: [client 144.76.19.72:43284] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:54.887036 2026] [ssl:error] [pid 3864011:tid 3864011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:54.942005 2026] [ssl:error] [pid 3855921:tid 3855921] (EAI 2)Name or service not known: [client 144.76.19.72:43286] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:54.942050 2026] [ssl:error] [pid 3855921:tid 3855921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:54.970039 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/403.php
[Thu Jul 30 16:25:55.316523 2026] [lsapi:warn] [pid 3859051:tid 3859051] [client 216.73.216.199:26680] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 16:25:55.316566 2026] [lsapi:error] [pid 3859051:tid 3859051] [client 216.73.216.199:26680] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-xml-serializer/examples/unserializeAnyXML.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 16:25:55.598561 2026] [ssl:error] [pid 3859904:tid 3859904] (70014)End of file found: [client 216.73.216.199:50007] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:25:56.001652 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/404.php
[Thu Jul 30 16:25:56.046527 2026] [authz_core:error] [pid 3864010:tid 3864010] [client 66.249.66.33:42708] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:25:56.049514 2026] [authz_core:error] [pid 3864010:tid 3864010] [client 66.249.66.33:42708] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:25:56.992948 2026] [lsapi:warn] [pid 3850576:tid 3850576] [client 94.154.43.183:55866] [host epmsonline.co.uk] Backend log: PHP Deprecated:  Creation of dynamic property Joomla\\CMS\\User\\User::$aid is deprecated in /home/epmsonli/public_html/libraries/src/User/User.php on line 953\n
[Thu Jul 30 16:25:57.046247 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/aa.php
[Thu Jul 30 16:25:57.993687 2026] [ssl:error] [pid 3862563:tid 3862563] (EAI 2)Name or service not known: [client 144.76.19.72:43296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:57.993717 2026] [ssl:error] [pid 3862563:tid 3862563] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:58.045495 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:43302] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:25:58.045550 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:25:58.083202 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/aafewc0k.php
[Thu Jul 30 16:25:59.096035 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/abcd.php
[Thu Jul 30 16:25:59.310752 2026] [core:error] [pid 3858395:tid 3858395] (13)Permission denied: [client 216.73.216.199:4122] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-Namespace/cache_dma
[Thu Jul 30 16:25:59.912567 2026] [core:error] [pid 3858395:tid 3858395] (13)Permission denied: [client 216.73.216.199:4122] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory93/subsystem/uevent
[Thu Jul 30 16:26:00.039663 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/about.php
[Thu Jul 30 16:26:00.816480 2026] [ssl:error] [pid 3858395:tid 3858395] (70014)End of file found: [client 216.73.216.199:4122] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:26:01.034676 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/admin.php
[Thu Jul 30 16:26:01.101524 2026] [ssl:error] [pid 3859051:tid 3859051] (EAI 2)Name or service not known: [client 144.76.19.72:48562] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:01.101558 2026] [ssl:error] [pid 3859051:tid 3859051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:01.152977 2026] [ssl:error] [pid 3863933:tid 3863933] (EAI 2)Name or service not known: [client 144.76.19.72:48564] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:01.153005 2026] [ssl:error] [pid 3863933:tid 3863933] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:01.781425 2026] [security2:error] [pid 3859904:tid 3859904] [client 185.191.171.4:58882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/couples-tower-isle-tips"] [unique_id "amttCdaSj_e4x8M1iuJsbgAAAAg"]
[Thu Jul 30 16:26:01.965977 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/adminfuns.php
[Thu Jul 30 16:26:02.854006 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/albin.php
[Thu Jul 30 16:26:03.530439 2026] [lsapi:warn] [pid 3836955:tid 3836955] [client 216.73.216.199:34240] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 16:26:03.530470 2026] [lsapi:error] [pid 3836955:tid 3836955] [client 216.73.216.199:34240] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-html-template-it/examples/sample_itx_addblockfile.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 16:26:03.799464 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/amfsqvgv.php
[Thu Jul 30 16:26:03.826327 2026] [security2:error] [pid 3861401:tid 3861401] [client 216.73.216.199:3795] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysusers.d/basic.conf"] [unique_id "amttC8-k3_lggI5VfuuDNwAAADM"]
[Thu Jul 30 16:26:03.826619 2026] [security2:error] [pid 3861401:tid 3861401] [client 216.73.216.199:3795] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysusers.d/basic.conf"] [unique_id "amttC8-k3_lggI5VfuuDNwAAADM"]
[Thu Jul 30 16:26:03.826849 2026] [security2:error] [pid 3861401:tid 3861401] [client 216.73.216.199:3795] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/lib/sysusers.d/basic.conf"] [unique_id "amttC8-k3_lggI5VfuuDNwAAADM"]
[Thu Jul 30 16:26:04.209542 2026] [ssl:error] [pid 3860857:tid 3860857] (EAI 2)Name or service not known: [client 144.76.19.72:48578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:04.209569 2026] [ssl:error] [pid 3860857:tid 3860857] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:04.265642 2026] [ssl:error] [pid 3863870:tid 3863870] (EAI 2)Name or service not known: [client 144.76.19.72:48588] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:04.265673 2026] [ssl:error] [pid 3863870:tid 3863870] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:04.440604 2026] [lsapi:warn] [pid 3861401:tid 3861401] [client 216.73.216.199:3795] [host kinesiologylondon.co.uk] Backend log: PHP Warning:  Unknown: Failed to open stream: No such file or directory in Unknown on line 0\n
[Thu Jul 30 16:26:04.440635 2026] [lsapi:error] [pid 3861401:tid 3861401] [client 216.73.216.199:3795] [host kinesiologylondon.co.uk] Backend fatal error: PHP Fatal error:  Failed opening required '/home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/cpanel-php84-html-template-it/examples/sample_it.php' (include_path='.:/opt/cpanel/ea-php82/root/usr/share/pear') in Unknown on line 0\n
[Thu Jul 30 16:26:04.736617 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/ant.php
[Thu Jul 30 16:26:05.960576 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/appreciators.php
[Thu Jul 30 16:26:06.962230 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/archive.php
[Thu Jul 30 16:26:07.336517 2026] [ssl:error] [pid 3836955:tid 3836955] (EAI 2)Name or service not known: [client 144.76.19.72:48598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:07.336578 2026] [ssl:error] [pid 3836955:tid 3836955] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:07.391520 2026] [ssl:error] [pid 3859217:tid 3859217] (EAI 2)Name or service not known: [client 144.76.19.72:48610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:07.391562 2026] [ssl:error] [pid 3859217:tid 3859217] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:07.945727 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/as.php
[Thu Jul 30 16:26:09.442562 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/atomlib.php
[Thu Jul 30 16:26:10.359526 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/autoload_classmap.php
[Thu Jul 30 16:26:10.416940 2026] [security2:error] [pid 3862504:tid 3862504] [client 85.208.96.206:47174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,5045.0.html"] [unique_id "amttEnAfcjobXtI1t0Xe3wAAAA8"]
[Thu Jul 30 16:26:10.449125 2026] [ssl:error] [pid 3864008:tid 3864008] (EAI 2)Name or service not known: [client 144.76.19.72:25616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:10.449176 2026] [ssl:error] [pid 3864008:tid 3864008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:10.508535 2026] [ssl:error] [pid 3856471:tid 3856471] (EAI 2)Name or service not known: [client 144.76.19.72:25624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:10.508575 2026] [ssl:error] [pid 3856471:tid 3856471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:11.288943 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/bb.php
[Thu Jul 30 16:26:12.176539 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/bnm.php
[Thu Jul 30 16:26:12.515822 2026] [authz_core:error] [pid 3863932:tid 3863932] [client 20.203.221.142:46876] AH01630: client denied by server configuration: /home/heritag1/staging.heritageinsuranceagency.co.uk/wp-includes/SimplePie/error_log
[Thu Jul 30 16:26:12.978547 2026] [ssl:error] [pid 3862565:tid 3862565] (70014)End of file found: [client 216.73.216.199:54377] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:26:13.134813 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/bootstrap.php
[Thu Jul 30 16:26:13.564438 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:25632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:13.564469 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:13.618651 2026] [ssl:error] [pid 3854541:tid 3854541] (EAI 2)Name or service not known: [client 144.76.19.72:25642] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:13.618695 2026] [ssl:error] [pid 3854541:tid 3854541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:14.057924 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/buy.php
[Thu Jul 30 16:26:14.977798 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/chosen.php
[Thu Jul 30 16:26:15.919621 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/class-wp-image.php
[Thu Jul 30 16:26:16.674935 2026] [ssl:error] [pid 3855921:tid 3855921] (EAI 2)Name or service not known: [client 144.76.19.72:25650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:16.674960 2026] [ssl:error] [pid 3855921:tid 3855921] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:16.729610 2026] [ssl:error] [pid 3863932:tid 3863932] (EAI 2)Name or service not known: [client 144.76.19.72:25654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:16.729658 2026] [ssl:error] [pid 3863932:tid 3863932] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:16.798639 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/classsmtps.php
[Thu Jul 30 16:26:17.716343 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/classwithtostring.php
[Thu Jul 30 16:26:17.887872 2026] [security2:error] [pid 3858393:tid 3858393] [client 43.134.15.174:59020] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.annasmithagent.com"] [uri "/"] [unique_id "amttGUp93YbCCzOl18SXHQAAABA"]
[Thu Jul 30 16:26:18.640826 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/config.php
[Thu Jul 30 16:26:19.546687 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/core.php
[Thu Jul 30 16:26:19.844537 2026] [ssl:error] [pid 3856471:tid 3856471] (EAI 2)Name or service not known: [client 144.76.19.72:49000] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:19.844574 2026] [ssl:error] [pid 3856471:tid 3856471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:19.896056 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:49010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:19.896098 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:20.563661 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/css.php
[Thu Jul 30 16:26:21.378127 2026] [access_compat:error] [pid 3855921:tid 3855921] [client 5.127.0.38:45064] AH01797: client denied by server configuration: /home/nspandor/public_html/
[Thu Jul 30 16:26:21.439600 2026] [security2:error] [pid 3856717:tid 3856717] [client 190.62.86.67:24917] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttHQnRcxv_ZaS6trLUjwAAACQ"]
[Thu Jul 30 16:26:21.439658 2026] [security2:error] [pid 3856717:tid 3856717] [client 190.62.86.67:24917] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttHQnRcxv_ZaS6trLUjwAAACQ"]
[Thu Jul 30 16:26:21.439929 2026] [security2:error] [pid 3856717:tid 3856717] [client 190.62.86.67:24917] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttHQnRcxv_ZaS6trLUjwAAACQ"]
[Thu Jul 30 16:26:21.483481 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/database.php
[Thu Jul 30 16:26:22.392007 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/db.php
[Thu Jul 30 16:26:22.955749 2026] [ssl:error] [pid 3854539:tid 3854539] (EAI 2)Name or service not known: [client 144.76.19.72:49024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:22.955777 2026] [ssl:error] [pid 3854539:tid 3854539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:23.042186 2026] [security2:error] [pid 3862564:tid 3862564] [client 72.146.16.10:30682] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "parallelcoordinates.co.uk.ppcl.com"] [uri "/var/log/error.log"] [unique_id "amttHwFhHJaIAwiCZGWqfwAAABk"]
[Thu Jul 30 16:26:23.042371 2026] [security2:error] [pid 3862564:tid 3862564] [client 72.146.16.10:30682] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "parallelcoordinates.co.uk.ppcl.com"] [uri "/var/log/error.log"] [unique_id "amttHwFhHJaIAwiCZGWqfwAAABk"]
[Thu Jul 30 16:26:23.042544 2026] [security2:error] [pid 3862564:tid 3862564] [client 72.146.16.10:30682] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "parallelcoordinates.co.uk.ppcl.com"] [uri "/var/log/error.log"] [unique_id "amttHwFhHJaIAwiCZGWqfwAAABk"]
[Thu Jul 30 16:26:23.049111 2026] [ssl:error] [pid 3864005:tid 3864005] (EAI 2)Name or service not known: [client 144.76.19.72:49036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:23.049150 2026] [ssl:error] [pid 3864005:tid 3864005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:23.274811 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/default.php
[Thu Jul 30 16:26:24.172733 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/dropdown.php
[Thu Jul 30 16:26:25.088800 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/edit.php
[Thu Jul 30 16:26:26.043701 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/f35.php
[Thu Jul 30 16:26:26.109492 2026] [ssl:error] [pid 3856471:tid 3856471] (EAI 2)Name or service not known: [client 144.76.19.72:49044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:26.109521 2026] [ssl:error] [pid 3856471:tid 3856471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:26.167154 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:49060] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:26.167187 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:26.930840 2026] [access_compat:error] [pid 3862467:tid 3862467] [client 172.213.232.128:49845] AH01797: client denied by server configuration: /home/candidejacobs/public_html/f7.php
[Thu Jul 30 16:26:28.491386 2026] [authz_core:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] AH01630: client denied by server configuration: /home/georgeho/public_html/.env
[Thu Jul 30 16:26:28.509120 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amttJHitGzn6x5ItM-G0GgAAACs"]
[Thu Jul 30 16:26:28.509375 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amttJHitGzn6x5ItM-G0GgAAACs"]
[Thu Jul 30 16:26:28.509605 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0GgAAACs"]
[Thu Jul 30 16:26:28.527117 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amttJHitGzn6x5ItM-G0GwAAACs"]
[Thu Jul 30 16:26:28.527341 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amttJHitGzn6x5ItM-G0GwAAACs"]
[Thu Jul 30 16:26:28.527537 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0GwAAACs"]
[Thu Jul 30 16:26:28.571106 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amttJHitGzn6x5ItM-G0HQAAACs"]
[Thu Jul 30 16:26:28.571321 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amttJHitGzn6x5ItM-G0HQAAACs"]
[Thu Jul 30 16:26:28.571518 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0HQAAACs"]
[Thu Jul 30 16:26:28.608097 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amttJHitGzn6x5ItM-G0HwAAACs"]
[Thu Jul 30 16:26:28.608334 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amttJHitGzn6x5ItM-G0HwAAACs"]
[Thu Jul 30 16:26:28.608526 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0HwAAACs"]
[Thu Jul 30 16:26:28.624392 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amttJHitGzn6x5ItM-G0IAAAACs"]
[Thu Jul 30 16:26:28.624591 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amttJHitGzn6x5ItM-G0IAAAACs"]
[Thu Jul 30 16:26:28.624785 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0IAAAACs"]
[Thu Jul 30 16:26:28.656323 2026] [authz_core:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] AH01630: client denied by server configuration: /home/georgeho/public_html/.env.example
[Thu Jul 30 16:26:28.672447 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amttJHitGzn6x5ItM-G0IwAAACs"]
[Thu Jul 30 16:26:28.672656 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amttJHitGzn6x5ItM-G0IwAAACs"]
[Thu Jul 30 16:26:28.672848 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0IwAAACs"]
[Thu Jul 30 16:26:28.688435 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amttJHitGzn6x5ItM-G0JAAAACs"]
[Thu Jul 30 16:26:28.688588 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amttJHitGzn6x5ItM-G0JAAAACs"]
[Thu Jul 30 16:26:28.688775 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0JAAAACs"]
[Thu Jul 30 16:26:28.721654 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amttJHitGzn6x5ItM-G0JgAAACs"]
[Thu Jul 30 16:26:28.721826 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amttJHitGzn6x5ItM-G0JgAAACs"]
[Thu Jul 30 16:26:28.722011 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0JgAAACs"]
[Thu Jul 30 16:26:28.737749 2026] [authz_core:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] AH01630: client denied by server configuration: /home/georgeho/public_html/.env.save
[Thu Jul 30 16:26:28.769968 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amttJHitGzn6x5ItM-G0KQAAACs"]
[Thu Jul 30 16:26:28.770163 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amttJHitGzn6x5ItM-G0KQAAACs"]
[Thu Jul 30 16:26:28.770356 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.93.89.167:60063] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJHitGzn6x5ItM-G0KQAAACs"]
[Thu Jul 30 16:26:29.228515 2026] [ssl:error] [pid 3856944:tid 3856944] (EAI 2)Name or service not known: [client 144.76.19.72:49068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:29.228545 2026] [ssl:error] [pid 3856944:tid 3856944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:29.284231 2026] [ssl:error] [pid 3858393:tid 3858393] (EAI 2)Name or service not known: [client 144.76.19.72:49084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:29.284263 2026] [ssl:error] [pid 3858393:tid 3858393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:29.341983 2026] [authz_core:error] [pid 3863933:tid 3863933] [client 66.249.66.34:36914] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:26:29.344793 2026] [authz_core:error] [pid 3863933:tid 3863933] [client 66.249.66.34:36914] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:26:30.041905 2026] [authz_core:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] AH01630: client denied by server configuration: /home/georgeho/public_html/.env
[Thu Jul 30 16:26:30.062724 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amttJsLAsqkzLMBYRZLCqgAAAAU"]
[Thu Jul 30 16:26:30.062916 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amttJsLAsqkzLMBYRZLCqgAAAAU"]
[Thu Jul 30 16:26:30.063084 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCqgAAAAU"]
[Thu Jul 30 16:26:30.080241 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amttJsLAsqkzLMBYRZLCqwAAAAU"]
[Thu Jul 30 16:26:30.080442 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amttJsLAsqkzLMBYRZLCqwAAAAU"]
[Thu Jul 30 16:26:30.080603 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCqwAAAAU"]
[Thu Jul 30 16:26:30.115403 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amttJsLAsqkzLMBYRZLCrQAAAAU"]
[Thu Jul 30 16:26:30.115553 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amttJsLAsqkzLMBYRZLCrQAAAAU"]
[Thu Jul 30 16:26:30.115716 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCrQAAAAU"]
[Thu Jul 30 16:26:30.150408 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amttJsLAsqkzLMBYRZLCrwAAAAU"]
[Thu Jul 30 16:26:30.150602 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amttJsLAsqkzLMBYRZLCrwAAAAU"]
[Thu Jul 30 16:26:30.150773 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCrwAAAAU"]
[Thu Jul 30 16:26:30.167981 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amttJsLAsqkzLMBYRZLCsAAAAAU"]
[Thu Jul 30 16:26:30.168189 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amttJsLAsqkzLMBYRZLCsAAAAAU"]
[Thu Jul 30 16:26:30.168358 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCsAAAAAU"]
[Thu Jul 30 16:26:30.208657 2026] [authz_core:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] AH01630: client denied by server configuration: /home/georgeho/public_html/.env.example
[Thu Jul 30 16:26:30.226254 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amttJsLAsqkzLMBYRZLCswAAAAU"]
[Thu Jul 30 16:26:30.226466 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amttJsLAsqkzLMBYRZLCswAAAAU"]
[Thu Jul 30 16:26:30.226649 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCswAAAAU"]
[Thu Jul 30 16:26:30.243911 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amttJsLAsqkzLMBYRZLCtAAAAAU"]
[Thu Jul 30 16:26:30.244122 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amttJsLAsqkzLMBYRZLCtAAAAAU"]
[Thu Jul 30 16:26:30.244290 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCtAAAAAU"]
[Thu Jul 30 16:26:30.288999 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amttJsLAsqkzLMBYRZLCtgAAAAU"]
[Thu Jul 30 16:26:30.289216 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amttJsLAsqkzLMBYRZLCtgAAAAU"]
[Thu Jul 30 16:26:30.289424 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCtgAAAAU"]
[Thu Jul 30 16:26:30.306298 2026] [authz_core:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] AH01630: client denied by server configuration: /home/georgeho/public_html/.env.save
[Thu Jul 30 16:26:30.341800 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amttJsLAsqkzLMBYRZLCuQAAAAU"]
[Thu Jul 30 16:26:30.341996 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amttJsLAsqkzLMBYRZLCuQAAAAU"]
[Thu Jul 30 16:26:30.342171 2026] [security2:error] [pid 3859849:tid 3859849] [client 185.93.89.167:43989] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttJsLAsqkzLMBYRZLCuQAAAAU"]
[Thu Jul 30 16:26:30.665885 2026] [security2:error] [pid 3858395:tid 3858395] [client 43.157.67.70:51654] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amttJjdNDFdZ9c3NKxfK-AAAACM"]
[Thu Jul 30 16:26:31.507729 2026] [security2:error] [pid 3858395:tid 3858395] [client 43.157.67.70:60828] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amttJzdNDFdZ9c3NKxfK-QAAACM"], referer: http://www.staffordshirephoenixrifleandpistolclub.co.uk
[Thu Jul 30 16:26:32.337769 2026] [ssl:error] [pid 3861298:tid 3861298] (EAI 2)Name or service not known: [client 144.76.19.72:19568] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:32.337803 2026] [ssl:error] [pid 3861298:tid 3861298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:32.391609 2026] [ssl:error] [pid 3854491:tid 3854491] (EAI 2)Name or service not known: [client 144.76.19.72:19584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:32.391636 2026] [ssl:error] [pid 3854491:tid 3854491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:33.987761 2026] [security2:error] [pid 3860921:tid 3860921] [client 43.157.67.70:34382] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "staffordshirephoenixrifleandpistolclub.co.uk"] [uri "/"] [unique_id "amttKc0g_3jaNngI21-3nQAAAB0"], referer: https://www.staffordshirephoenixrifleandpistolclub.co.uk/
[Thu Jul 30 16:26:34.058828 2026] [authz_core:error] [pid 3858395:tid 3858395] [client 66.249.66.33:58200] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:26:34.061482 2026] [authz_core:error] [pid 3858395:tid 3858395] [client 66.249.66.33:58200] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:26:35.355518 2026] [access_compat:error] [pid 3862565:tid 3862565] [client 45.158.164.139:43454] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:26:35.444047 2026] [ssl:error] [pid 3862467:tid 3862467] (EAI 2)Name or service not known: [client 144.76.19.72:19590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:35.444090 2026] [ssl:error] [pid 3862467:tid 3862467] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:35.507604 2026] [ssl:error] [pid 3860319:tid 3860319] (EAI 2)Name or service not known: [client 144.76.19.72:19606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:35.507644 2026] [ssl:error] [pid 3860319:tid 3860319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:38.610149 2026] [ssl:error] [pid 3859849:tid 3859849] (EAI 2)Name or service not known: [client 144.76.19.72:19622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:38.610206 2026] [ssl:error] [pid 3859849:tid 3859849] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:38.666838 2026] [ssl:error] [pid 3858395:tid 3858395] (EAI 2)Name or service not known: [client 144.76.19.72:19624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:38.666874 2026] [ssl:error] [pid 3858395:tid 3858395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:41.730480 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:33194] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:41.730515 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:41.784574 2026] [ssl:error] [pid 3862566:tid 3862566] (EAI 2)Name or service not known: [client 144.76.19.72:33206] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:41.784621 2026] [ssl:error] [pid 3862566:tid 3862566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:42.498247 2026] [security2:error] [pid 3861401:tid 3861401] [client 114.119.147.45:45759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.ns-sun.com"] [uri "/robots.txt"] [unique_id "amttMs-k3_lggI5VfuuDRQAAADM"], referer: https://www.ns-sun.com/robots.txt
[Thu Jul 30 16:26:43.723981 2026] [security2:error] [pid 3851470:tid 3851470] [client 114.119.130.105:39455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "chateausaintjeannet.com"] [uri "/robots.txt"] [unique_id "amttM7wCe-dcEKk3PWaD7AAAAA0"], referer: https://chateausaintjeannet.com/robots.txt
[Thu Jul 30 16:26:43.996758 2026] [access_compat:error] [pid 3855852:tid 3855852] [client 51.116.238.8:15643] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 16:26:44.838614 2026] [ssl:error] [pid 3861401:tid 3861401] (EAI 2)Name or service not known: [client 144.76.19.72:33210] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:44.838659 2026] [ssl:error] [pid 3861401:tid 3861401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:44.896263 2026] [ssl:error] [pid 3859216:tid 3859216] (EAI 2)Name or service not known: [client 144.76.19.72:33224] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:44.896298 2026] [ssl:error] [pid 3859216:tid 3859216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:45.861703 2026] [cgi:error] [pid 3863934:tid 3863934] [client 72.146.16.10:42898] AH02811: stderr from /home/ppclcom/parallelcoordinates.co.uk/perlcgi.pl: script not found or unable to stat
[Thu Jul 30 16:26:46.017176 2026] [authz_core:error] [pid 3863934:tid 3863934] [client 72.146.16.10:42898] AH01630: client denied by server configuration: /home/ppclcom/parallelcoordinates.co.uk/php.ini
[Thu Jul 30 16:26:46.888124 2026] [security2:error] [pid 3854539:tid 3854539] [client 103.174.4.25:41552] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttNjXIb3GHUnJSqb4T9wAAACU"]
[Thu Jul 30 16:26:46.888175 2026] [security2:error] [pid 3854539:tid 3854539] [client 103.174.4.25:41552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttNjXIb3GHUnJSqb4T9wAAACU"]
[Thu Jul 30 16:26:46.888428 2026] [security2:error] [pid 3854539:tid 3854539] [client 103.174.4.25:41552] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttNjXIb3GHUnJSqb4T9wAAACU"]
[Thu Jul 30 16:26:46.960682 2026] [security2:error] [pid 3860319:tid 3860319] [client 114.119.130.105:39471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.chateausaintjeannet.com"] [uri "/robots.txt"] [unique_id "amttNumBAf33qa8jHLNf7wAAABE"], referer: https://chateausaintjeannet.com/robots.txt
[Thu Jul 30 16:26:47.616324 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:39800] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amttN5uVCEClkaESuhfzZwAAAEI"]
[Thu Jul 30 16:26:47.616470 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:39800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/config"] [unique_id "amttN5uVCEClkaESuhfzZwAAAEI"]
[Thu Jul 30 16:26:47.616663 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:39800] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttN5uVCEClkaESuhfzZwAAAEI"]
[Thu Jul 30 16:26:47.648167 2026] [security2:error] [pid 3860921:tid 3860921] [client 34.23.170.140:39820] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amttN80g_3jaNngI21-3pAAAAB0"]
[Thu Jul 30 16:26:47.648323 2026] [security2:error] [pid 3860921:tid 3860921] [client 34.23.170.140:39820] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.git/HEAD"] [unique_id "amttN80g_3jaNngI21-3pAAAAB0"]
[Thu Jul 30 16:26:47.648533 2026] [security2:error] [pid 3860921:tid 3860921] [client 34.23.170.140:39820] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttN80g_3jaNngI21-3pAAAAB0"]
[Thu Jul 30 16:26:47.912861 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:39854] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amttNwVLdzPX5KqZQK_2vgAAAAI"]
[Thu Jul 30 16:26:47.913005 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:39854] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.svn/entries"] [unique_id "amttNwVLdzPX5KqZQK_2vgAAAAI"]
[Thu Jul 30 16:26:47.913219 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:39854] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttNwVLdzPX5KqZQK_2vgAAAAI"]
[Thu Jul 30 16:26:47.954554 2026] [ssl:error] [pid 3863934:tid 3863934] (EAI 2)Name or service not known: [client 144.76.19.72:33236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:47.954588 2026] [ssl:error] [pid 3863934:tid 3863934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:48.007669 2026] [ssl:error] [pid 3863934:tid 3863934] (EAI 2)Name or service not known: [client 144.76.19.72:33244] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:48.007699 2026] [ssl:error] [pid 3863934:tid 3863934] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:48.223444 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:39930] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amttONYlozcBYy-GHjz_QgAAACk"]
[Thu Jul 30 16:26:48.223606 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:39930] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env"] [unique_id "amttONYlozcBYy-GHjz_QgAAACk"]
[Thu Jul 30 16:26:48.223791 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:39930] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttONYlozcBYy-GHjz_QgAAACk"]
[Thu Jul 30 16:26:48.492454 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:39968] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amttOJuVCEClkaESuhfzagAAAEI"]
[Thu Jul 30 16:26:48.492640 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:39968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.example"] [unique_id "amttOJuVCEClkaESuhfzagAAAEI"]
[Thu Jul 30 16:26:48.492829 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:39968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOJuVCEClkaESuhfzagAAAEI"]
[Thu Jul 30 16:26:48.511520 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:39990] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amttOAVLdzPX5KqZQK_2wAAAAAI"]
[Thu Jul 30 16:26:48.511720 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:39990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production"] [unique_id "amttOAVLdzPX5KqZQK_2wAAAAAI"]
[Thu Jul 30 16:26:48.511917 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:39990] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOAVLdzPX5KqZQK_2wAAAAAI"]
[Thu Jul 30 16:26:48.513546 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:39984] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amttONYlozcBYy-GHjz_QwAAACk"]
[Thu Jul 30 16:26:48.513739 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:39984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.local"] [unique_id "amttONYlozcBYy-GHjz_QwAAACk"]
[Thu Jul 30 16:26:48.513957 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:39984] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttONYlozcBYy-GHjz_QwAAACk"]
[Thu Jul 30 16:26:48.519482 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40000] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amttOINnVfzY4UPkGdDrEwAAAC8"]
[Thu Jul 30 16:26:48.519644 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40000] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.backup"] [unique_id "amttOINnVfzY4UPkGdDrEwAAAC8"]
[Thu Jul 30 16:26:48.519830 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40000] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOINnVfzY4UPkGdDrEwAAAC8"]
[Thu Jul 30 16:26:48.574145 2026] [security2:error] [pid 3856471:tid 3856471] [client 34.23.170.140:40008] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amttODG_NNVLJUxpXTeB0AAAABM"]
[Thu Jul 30 16:26:48.574388 2026] [security2:error] [pid 3856471:tid 3856471] [client 34.23.170.140:40008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/laravel/.env"] [unique_id "amttODG_NNVLJUxpXTeB0AAAABM"]
[Thu Jul 30 16:26:48.574639 2026] [security2:error] [pid 3856471:tid 3856471] [client 34.23.170.140:40008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttODG_NNVLJUxpXTeB0AAAABM"]
[Thu Jul 30 16:26:48.786642 2026] [security2:error] [pid 3863933:tid 3863933] [client 34.23.170.140:40020] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amttONSBvoDFVQcMEFLEsgAAACc"]
[Thu Jul 30 16:26:48.786858 2026] [security2:error] [pid 3863933:tid 3863933] [client 34.23.170.140:40020] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.old"] [unique_id "amttONSBvoDFVQcMEFLEsgAAACc"]
[Thu Jul 30 16:26:48.787120 2026] [security2:error] [pid 3863933:tid 3863933] [client 34.23.170.140:40020] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttONSBvoDFVQcMEFLEsgAAACc"]
[Thu Jul 30 16:26:48.803178 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:40028] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amttOJuVCEClkaESuhfzawAAAEI"]
[Thu Jul 30 16:26:48.803370 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:40028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.bak"] [unique_id "amttOJuVCEClkaESuhfzawAAAEI"]
[Thu Jul 30 16:26:48.803569 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:40028] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOJuVCEClkaESuhfzawAAAEI"]
[Thu Jul 30 16:26:48.880535 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40066] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amttONYlozcBYy-GHjz_RAAAACk"]
[Thu Jul 30 16:26:48.880781 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40066] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/api/.env"] [unique_id "amttONYlozcBYy-GHjz_RAAAACk"]
[Thu Jul 30 16:26:48.881016 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40066] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttONYlozcBYy-GHjz_RAAAACk"]
[Thu Jul 30 16:26:49.127486 2026] [security2:error] [pid 3851470:tid 3851470] [client 34.23.170.140:40108] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amttObwCe-dcEKk3PWaD8AAAAA0"]
[Thu Jul 30 16:26:49.127620 2026] [security2:error] [pid 3851470:tid 3851470] [client 34.23.170.140:40108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/admin/.env"] [unique_id "amttObwCe-dcEKk3PWaD8AAAAA0"]
[Thu Jul 30 16:26:49.127801 2026] [security2:error] [pid 3851470:tid 3851470] [client 34.23.170.140:40108] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttObwCe-dcEKk3PWaD8AAAAA0"]
[Thu Jul 30 16:26:49.466334 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40158] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amttOdYlozcBYy-GHjz_RgAAACk"]
[Thu Jul 30 16:26:49.466559 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env"] [unique_id "amttOdYlozcBYy-GHjz_RgAAACk"]
[Thu Jul 30 16:26:49.466805 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40158] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOdYlozcBYy-GHjz_RgAAACk"]
[Thu Jul 30 16:26:50.004953 2026] [security2:error] [pid 3866761:tid 3866761] [client 34.23.170.140:40226] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amttOjpstToqmL_nJsj-RwAAAAw"]
[Thu Jul 30 16:26:50.005299 2026] [security2:error] [pid 3866761:tid 3866761] [client 34.23.170.140:40226] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/trace.axd"] [unique_id "amttOjpstToqmL_nJsj-RwAAAAw"]
[Thu Jul 30 16:26:50.005623 2026] [security2:error] [pid 3866761:tid 3866761] [client 34.23.170.140:40226] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOjpstToqmL_nJsj-RwAAAAw"]
[Thu Jul 30 16:26:50.189556 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40250] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amttOtYlozcBYy-GHjz_SAAAACk"]
[Thu Jul 30 16:26:50.189824 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/backend/.env"] [unique_id "amttOtYlozcBYy-GHjz_SAAAACk"]
[Thu Jul 30 16:26:50.190052 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40250] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOtYlozcBYy-GHjz_SAAAACk"]
[Thu Jul 30 16:26:50.227153 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40254] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amttOoNnVfzY4UPkGdDrGQAAAC8"]
[Thu Jul 30 16:26:50.227449 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40254] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/rclone.conf"] [unique_id "amttOoNnVfzY4UPkGdDrGQAAAC8"]
[Thu Jul 30 16:26:50.227652 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40254] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOoNnVfzY4UPkGdDrGQAAAC8"]
[Thu Jul 30 16:26:50.294683 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:40274] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amttOpuVCEClkaESuhfzcAAAAEI"]
[Thu Jul 30 16:26:50.294907 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:40274] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/frontend/.env"] [unique_id "amttOpuVCEClkaESuhfzcAAAAEI"]
[Thu Jul 30 16:26:50.295163 2026] [security2:error] [pid 3864008:tid 3864008] [client 34.23.170.140:40274] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOpuVCEClkaESuhfzcAAAAEI"]
[Thu Jul 30 16:26:50.309534 2026] [security2:error] [pid 3863871:tid 3863871] [client 34.23.170.140:40278] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amttOilqfPnSZAS0fkZTvwAAABI"]
[Thu Jul 30 16:26:50.309719 2026] [security2:error] [pid 3863871:tid 3863871] [client 34.23.170.140:40278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.php.bak"] [unique_id "amttOilqfPnSZAS0fkZTvwAAABI"]
[Thu Jul 30 16:26:50.309927 2026] [security2:error] [pid 3863871:tid 3863871] [client 34.23.170.140:40278] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOilqfPnSZAS0fkZTvwAAABI"]
[Thu Jul 30 16:26:50.476610 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40816] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amttOtYlozcBYy-GHjz_SQAAACk"]
[Thu Jul 30 16:26:50.476811 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40816] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/config/.env.php"] [unique_id "amttOtYlozcBYy-GHjz_SQAAACk"]
[Thu Jul 30 16:26:50.477001 2026] [security2:error] [pid 3863934:tid 3863934] [client 34.23.170.140:40816] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOtYlozcBYy-GHjz_SQAAACk"]
[Thu Jul 30 16:26:50.596891 2026] [security2:error] [pid 3867080:tid 3867080] [client 34.23.170.140:40836] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amttOjOCgU28Xy3otVWK5AAAABY"]
[Thu Jul 30 16:26:50.597202 2026] [security2:error] [pid 3867080:tid 3867080] [client 34.23.170.140:40836] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/src/.env"] [unique_id "amttOjOCgU28Xy3otVWK5AAAABY"]
[Thu Jul 30 16:26:50.597582 2026] [security2:error] [pid 3867080:tid 3867080] [client 34.23.170.140:40836] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOjOCgU28Xy3otVWK5AAAABY"]
[Thu Jul 30 16:26:50.779585 2026] [security2:error] [pid 3861401:tid 3861401] [client 34.23.170.140:40862] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amttOs-k3_lggI5VfuuDSAAAADM"]
[Thu Jul 30 16:26:50.779771 2026] [security2:error] [pid 3861401:tid 3861401] [client 34.23.170.140:40862] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/server/.env"] [unique_id "amttOs-k3_lggI5VfuuDSAAAADM"]
[Thu Jul 30 16:26:50.779957 2026] [security2:error] [pid 3861401:tid 3861401] [client 34.23.170.140:40862] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttOs-k3_lggI5VfuuDSAAAADM"]
[Thu Jul 30 16:26:51.059469 2026] [ssl:error] [pid 3861401:tid 3861401] (EAI 2)Name or service not known: [client 144.76.19.72:26612] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:51.059505 2026] [ssl:error] [pid 3861401:tid 3861401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:51.112397 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:26616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:51.112430 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:51.234917 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40956] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amttO4NnVfzY4UPkGdDrHAAAAC8"]
[Thu Jul 30 16:26:51.235092 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40956] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/core/.env"] [unique_id "amttO4NnVfzY4UPkGdDrHAAAAC8"]
[Thu Jul 30 16:26:51.235278 2026] [security2:error] [pid 3849754:tid 3849754] [client 34.23.170.140:40956] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttO4NnVfzY4UPkGdDrHAAAAC8"]
[Thu Jul 30 16:26:51.352121 2026] [security2:error] [pid 3861401:tid 3861401] [client 34.23.170.140:40968] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amttO8-k3_lggI5VfuuDSQAAADM"]
[Thu Jul 30 16:26:51.352411 2026] [security2:error] [pid 3861401:tid 3861401] [client 34.23.170.140:40968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/elmah.axd"] [unique_id "amttO8-k3_lggI5VfuuDSQAAADM"]
[Thu Jul 30 16:26:51.352604 2026] [security2:error] [pid 3861401:tid 3861401] [client 34.23.170.140:40968] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttO8-k3_lggI5VfuuDSQAAADM"]
[Thu Jul 30 16:26:51.788447 2026] [security2:error] [pid 3859849:tid 3859849] [client 34.23.170.140:41048] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amttO8LAsqkzLMBYRZLCwwAAAAU"]
[Thu Jul 30 16:26:51.788624 2026] [security2:error] [pid 3859849:tid 3859849] [client 34.23.170.140:41048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/production/.env"] [unique_id "amttO8LAsqkzLMBYRZLCwwAAAAU"]
[Thu Jul 30 16:26:51.788813 2026] [security2:error] [pid 3859849:tid 3859849] [client 34.23.170.140:41048] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttO8LAsqkzLMBYRZLCwwAAAAU"]
[Thu Jul 30 16:26:52.432077 2026] [security2:error] [pid 3862565:tid 3862565] [client 34.23.170.140:41180] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amttPHdr3sppxkPEFAu1uAAAABw"]
[Thu Jul 30 16:26:52.432230 2026] [security2:error] [pid 3862565:tid 3862565] [client 34.23.170.140:41180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/dev/.env"] [unique_id "amttPHdr3sppxkPEFAu1uAAAABw"]
[Thu Jul 30 16:26:52.432427 2026] [security2:error] [pid 3862565:tid 3862565] [client 34.23.170.140:41180] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPHdr3sppxkPEFAu1uAAAABw"]
[Thu Jul 30 16:26:52.438320 2026] [security2:error] [pid 3858339:tid 3858339] [client 34.23.170.140:41184] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amttPImeaRia7mDIbJj0IAAAAAk"]
[Thu Jul 30 16:26:52.438514 2026] [security2:error] [pid 3858339:tid 3858339] [client 34.23.170.140:41184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/server.key"] [unique_id "amttPImeaRia7mDIbJj0IAAAAAk"]
[Thu Jul 30 16:26:52.438699 2026] [security2:error] [pid 3858339:tid 3858339] [client 34.23.170.140:41184] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPImeaRia7mDIbJj0IAAAAAk"]
[Thu Jul 30 16:26:52.529203 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41190] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amttPHzZBDgiRzlhgrOBxgAAAB4"]
[Thu Jul 30 16:26:52.529399 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/docker/.env"] [unique_id "amttPHzZBDgiRzlhgrOBxgAAAB4"]
[Thu Jul 30 16:26:52.529628 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41190] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPHzZBDgiRzlhgrOBxgAAAB4"]
[Thu Jul 30 16:26:52.935878 2026] [security2:error] [pid 3855921:tid 3855921] [client 34.23.170.140:41282] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amttPF2rqCUrZaU22bZ2EAAAABc"]
[Thu Jul 30 16:26:52.936034 2026] [security2:error] [pid 3855921:tid 3855921] [client 34.23.170.140:41282] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.docker"] [unique_id "amttPF2rqCUrZaU22bZ2EAAAABc"]
[Thu Jul 30 16:26:52.936234 2026] [security2:error] [pid 3855921:tid 3855921] [client 34.23.170.140:41282] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPF2rqCUrZaU22bZ2EAAAABc"]
[Thu Jul 30 16:26:53.211907 2026] [security2:error] [pid 3858339:tid 3858339] [client 34.23.170.140:41326] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amttPYmeaRia7mDIbJj0IgAAAAk"]
[Thu Jul 30 16:26:53.212110 2026] [security2:error] [pid 3858339:tid 3858339] [client 34.23.170.140:41326] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.prod.bak"] [unique_id "amttPYmeaRia7mDIbJj0IgAAAAk"]
[Thu Jul 30 16:26:53.212322 2026] [security2:error] [pid 3858339:tid 3858339] [client 34.23.170.140:41326] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPYmeaRia7mDIbJj0IgAAAAk"]
[Thu Jul 30 16:26:53.326537 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41346] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amttPXzZBDgiRzlhgrOByAAAAB4"]
[Thu Jul 30 16:26:53.326683 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41346] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.github/.env"] [unique_id "amttPXzZBDgiRzlhgrOByAAAAB4"]
[Thu Jul 30 16:26:53.326892 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41346] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPXzZBDgiRzlhgrOByAAAAB4"]
[Thu Jul 30 16:26:53.389747 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41348] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amttPZtnFzlqM9tTRxvZ_gAAABA"]
[Thu Jul 30 16:26:53.389957 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41348] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/staging/.env"] [unique_id "amttPZtnFzlqM9tTRxvZ_gAAABA"]
[Thu Jul 30 16:26:53.390184 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41348] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPZtnFzlqM9tTRxvZ_gAAABA"]
[Thu Jul 30 16:26:53.786931 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41390] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amttPXzZBDgiRzlhgrOByQAAAB4"]
[Thu Jul 30 16:26:53.787344 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/.env"] [unique_id "amttPXzZBDgiRzlhgrOByQAAAB4"]
[Thu Jul 30 16:26:53.787558 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPXzZBDgiRzlhgrOByQAAAB4"]
[Thu Jul 30 16:26:53.826784 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41420] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amttPZtnFzlqM9tTRxvZ_wAAABA"]
[Thu Jul 30 16:26:53.827059 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41420] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/localhost.key"] [unique_id "amttPZtnFzlqM9tTRxvZ_wAAABA"]
[Thu Jul 30 16:26:53.827265 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41420] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPZtnFzlqM9tTRxvZ_wAAABA"]
[Thu Jul 30 16:26:53.894652 2026] [security2:error] [pid 3847784:tid 3847784] [client 34.23.170.140:41432] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amttPQHeOwfwIumvJo9JRAAAAAM"]
[Thu Jul 30 16:26:53.894951 2026] [security2:error] [pid 3847784:tid 3847784] [client 34.23.170.140:41432] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/config/master.key"] [unique_id "amttPQHeOwfwIumvJo9JRAAAAAM"]
[Thu Jul 30 16:26:53.895193 2026] [security2:error] [pid 3847784:tid 3847784] [client 34.23.170.140:41432] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPQHeOwfwIumvJo9JRAAAAAM"]
[Thu Jul 30 16:26:54.068223 2026] [security2:error] [pid 3862564:tid 3862564] [client 34.23.170.140:41456] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amttPgFhHJaIAwiCZGWqugAAABk"]
[Thu Jul 30 16:26:54.068444 2026] [security2:error] [pid 3862564:tid 3862564] [client 34.23.170.140:41456] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/host.key"] [unique_id "amttPgFhHJaIAwiCZGWqugAAABk"]
[Thu Jul 30 16:26:54.068635 2026] [security2:error] [pid 3862564:tid 3862564] [client 34.23.170.140:41456] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPgFhHJaIAwiCZGWqugAAABk"]
[Thu Jul 30 16:26:54.111675 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41462] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amttPnzZBDgiRzlhgrOBygAAAB4"]
[Thu Jul 30 16:26:54.111859 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.swp"] [unique_id "amttPnzZBDgiRzlhgrOBygAAAB4"]
[Thu Jul 30 16:26:54.112081 2026] [security2:error] [pid 3867148:tid 3867148] [client 34.23.170.140:41462] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPnzZBDgiRzlhgrOBygAAAB4"]
[Thu Jul 30 16:26:54.186631 2026] [ssl:error] [pid 3861401:tid 3861401] (EAI 2)Name or service not known: [client 144.76.19.72:26628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:54.186661 2026] [ssl:error] [pid 3861401:tid 3861401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:54.217232 2026] [security2:error] [pid 3847784:tid 3847784] [client 34.23.170.140:41482] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amttPgHeOwfwIumvJo9JRQAAAAM"]
[Thu Jul 30 16:26:54.217581 2026] [security2:error] [pid 3847784:tid 3847784] [client 34.23.170.140:41482] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/privatekey.key"] [unique_id "amttPgHeOwfwIumvJo9JRQAAAAM"]
[Thu Jul 30 16:26:54.217814 2026] [security2:error] [pid 3847784:tid 3847784] [client 34.23.170.140:41482] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPgHeOwfwIumvJo9JRQAAAAM"]
[Thu Jul 30 16:26:54.240675 2026] [ssl:error] [pid 3862566:tid 3862566] (EAI 2)Name or service not known: [client 144.76.19.72:26644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:54.240707 2026] [ssl:error] [pid 3862566:tid 3862566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:54.302038 2026] [security2:error] [pid 3862503:tid 3862503] [client 34.23.170.140:41496] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amttPo3sqqkq1BE4MCd8CgAAAAo"]
[Thu Jul 30 16:26:54.302318 2026] [security2:error] [pid 3862503:tid 3862503] [client 34.23.170.140:41496] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.dev"] [unique_id "amttPo3sqqkq1BE4MCd8CgAAAAo"]
[Thu Jul 30 16:26:54.302552 2026] [security2:error] [pid 3862503:tid 3862503] [client 34.23.170.140:41496] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPo3sqqkq1BE4MCd8CgAAAAo"]
[Thu Jul 30 16:26:54.370325 2026] [security2:error] [pid 3860857:tid 3860857] [client 34.23.170.140:41506] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amttPpT5CsALMWXBofUyAAAAABo"]
[Thu Jul 30 16:26:54.370580 2026] [security2:error] [pid 3860857:tid 3860857] [client 34.23.170.140:41506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/server.key"] [unique_id "amttPpT5CsALMWXBofUyAAAAABo"]
[Thu Jul 30 16:26:54.370776 2026] [security2:error] [pid 3860857:tid 3860857] [client 34.23.170.140:41506] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPpT5CsALMWXBofUyAAAAABo"]
[Thu Jul 30 16:26:54.404377 2026] [security2:error] [pid 3859216:tid 3859216] [client 34.23.170.140:41510] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amttPjTMR5uTbpBts7Mt1AAAADI"]
[Thu Jul 30 16:26:54.404585 2026] [security2:error] [pid 3859216:tid 3859216] [client 34.23.170.140:41510] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.production.bak"] [unique_id "amttPjTMR5uTbpBts7Mt1AAAADI"]
[Thu Jul 30 16:26:54.404797 2026] [security2:error] [pid 3859216:tid 3859216] [client 34.23.170.140:41510] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPjTMR5uTbpBts7Mt1AAAADI"]
[Thu Jul 30 16:26:54.413639 2026] [ssl:error] [pid 3862564:tid 3862564] (70014)End of file found: [client 216.73.216.199:12637] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:26:54.603628 2026] [security2:error] [pid 3850576:tid 3850576] [client 34.23.170.140:41544] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amttPp16TXsfzJhbjZROUQAAADk"]
[Thu Jul 30 16:26:54.604076 2026] [security2:error] [pid 3850576:tid 3850576] [client 34.23.170.140:41544] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/@fs/root/.env"] [unique_id "amttPp16TXsfzJhbjZROUQAAADk"]
[Thu Jul 30 16:26:54.604331 2026] [security2:error] [pid 3850576:tid 3850576] [client 34.23.170.140:41544] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPp16TXsfzJhbjZROUQAAADk"]
[Thu Jul 30 16:26:54.988060 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41598] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amttPgVLdzPX5KqZQK_2wwAAAAI"]
[Thu Jul 30 16:26:54.988268 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41598] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/public/.env"] [unique_id "amttPgVLdzPX5KqZQK_2wwAAAAI"]
[Thu Jul 30 16:26:54.988470 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41598] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPgVLdzPX5KqZQK_2wwAAAAI"]
[Thu Jul 30 16:26:54.992994 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41600] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amttPptnFzlqM9tTRxvaAgAAABA"]
[Thu Jul 30 16:26:54.993168 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.test"] [unique_id "amttPptnFzlqM9tTRxvaAgAAABA"]
[Thu Jul 30 16:26:54.993366 2026] [security2:error] [pid 3866762:tid 3866762] [client 34.23.170.140:41600] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPptnFzlqM9tTRxvaAgAAABA"]
[Thu Jul 30 16:26:55.127674 2026] [core:error] [pid 3867148:tid 3867148] (13)Permission denied: [client 216.73.216.199:38106] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:27/subsystem/ttyS2/uartclk
[Thu Jul 30 16:26:55.254810 2026] [security2:error] [pid 3867269:tid 3867269] [client 34.23.170.140:41630] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amttPzV9v5_Cd-HGxVqI2QAAACE"]
[Thu Jul 30 16:26:55.255036 2026] [security2:error] [pid 3867269:tid 3867269] [client 34.23.170.140:41630] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/web/.env"] [unique_id "amttPzV9v5_Cd-HGxVqI2QAAACE"]
[Thu Jul 30 16:26:55.255300 2026] [security2:error] [pid 3867269:tid 3867269] [client 34.23.170.140:41630] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPzV9v5_Cd-HGxVqI2QAAACE"]
[Thu Jul 30 16:26:55.285045 2026] [security2:error] [pid 3864004:tid 3864004] [client 34.23.170.140:41640] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amttP1qTPP01FvWv_EZMAwAAADY"]
[Thu Jul 30 16:26:55.285349 2026] [security2:error] [pid 3864004:tid 3864004] [client 34.23.170.140:41640] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/ssl/localhost.key"] [unique_id "amttP1qTPP01FvWv_EZMAwAAADY"]
[Thu Jul 30 16:26:55.285562 2026] [security2:error] [pid 3864004:tid 3864004] [client 34.23.170.140:41640] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttP1qTPP01FvWv_EZMAwAAADY"]
[Thu Jul 30 16:26:55.287834 2026] [security2:error] [pid 3864011:tid 3864011] [client 34.23.170.140:41638] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amttP9l2cjolC4ZDc4LBMgAAAEU"]
[Thu Jul 30 16:26:55.288030 2026] [security2:error] [pid 3864011:tid 3864011] [client 34.23.170.140:41638] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.development"] [unique_id "amttP9l2cjolC4ZDc4LBMgAAAEU"]
[Thu Jul 30 16:26:55.288269 2026] [security2:error] [pid 3864011:tid 3864011] [client 34.23.170.140:41638] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttP9l2cjolC4ZDc4LBMgAAAEU"]
[Thu Jul 30 16:26:55.391392 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41668] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amttPwVLdzPX5KqZQK_2xAAAAAI"]
[Thu Jul 30 16:26:55.391552 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41668] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.env.staging"] [unique_id "amttPwVLdzPX5KqZQK_2xAAAAAI"]
[Thu Jul 30 16:26:55.391765 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41668] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPwVLdzPX5KqZQK_2xAAAAAI"]
[Thu Jul 30 16:26:55.683200 2026] [authz_core:error] [pid 3864011:tid 3864011] [client 34.23.170.140:41720] AH01630: client denied by server configuration: /home/sirahdig/public_html/.htpasswd
[Thu Jul 30 16:26:55.785404 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41728] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.openclaw/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amttPwVLdzPX5KqZQK_2xQAAAAI"]
[Thu Jul 30 16:26:55.785571 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41728] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.openclaw/.env"] [unique_id "amttPwVLdzPX5KqZQK_2xQAAAAI"]
[Thu Jul 30 16:26:55.785760 2026] [security2:error] [pid 3865593:tid 3865593] [client 34.23.170.140:41728] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPwVLdzPX5KqZQK_2xQAAAAI"]
[Thu Jul 30 16:26:55.925957 2026] [security2:error] [pid 3867269:tid 3867269] [client 34.23.170.140:41754] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amttPzV9v5_Cd-HGxVqI2wAAACE"]
[Thu Jul 30 16:26:55.926104 2026] [security2:error] [pid 3867269:tid 3867269] [client 34.23.170.140:41754] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/app/.env"] [unique_id "amttPzV9v5_Cd-HGxVqI2wAAACE"]
[Thu Jul 30 16:26:55.926284 2026] [security2:error] [pid 3867269:tid 3867269] [client 34.23.170.140:41754] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttPzV9v5_Cd-HGxVqI2wAAACE"]
[Thu Jul 30 16:26:56.808018 2026] [security2:error] [pid 3857654:tid 3857654] [client 34.23.170.140:41920] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amttQAPeX1esuFuckonfmAAAAAE"]
[Thu Jul 30 16:26:56.808156 2026] [security2:error] [pid 3857654:tid 3857654] [client 34.23.170.140:41920] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amttQAPeX1esuFuckonfmAAAAAE"]
[Thu Jul 30 16:26:56.808278 2026] [security2:error] [pid 3857654:tid 3857654] [client 34.23.170.140:41920] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/web.config"] [unique_id "amttQAPeX1esuFuckonfmAAAAAE"]
[Thu Jul 30 16:26:56.808488 2026] [security2:error] [pid 3857654:tid 3857654] [client 34.23.170.140:41920] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttQAPeX1esuFuckonfmAAAAAE"]
[Thu Jul 30 16:26:57.296108 2026] [ssl:error] [pid 3866658:tid 3866658] (EAI 2)Name or service not known: [client 144.76.19.72:26658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:57.296146 2026] [ssl:error] [pid 3866658:tid 3866658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:57.349871 2026] [ssl:error] [pid 3864004:tid 3864004] (EAI 2)Name or service not known: [client 144.76.19.72:26664] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:26:57.349915 2026] [ssl:error] [pid 3864004:tid 3864004] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:26:57.747755 2026] [security2:error] [pid 3861298:tid 3861298] [client 34.23.170.140:42074] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.hermes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amttQRkow3HBoVwfsCI29wAAACI"]
[Thu Jul 30 16:26:57.747941 2026] [security2:error] [pid 3861298:tid 3861298] [client 34.23.170.140:42074] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/.hermes/.env"] [unique_id "amttQRkow3HBoVwfsCI29wAAACI"]
[Thu Jul 30 16:26:57.748140 2026] [security2:error] [pid 3861298:tid 3861298] [client 34.23.170.140:42074] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttQRkow3HBoVwfsCI29wAAACI"]
[Thu Jul 30 16:26:58.045396 2026] [security2:error] [pid 3867080:tid 3867080] [client 34.23.170.140:42120] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amttQjOCgU28Xy3otVWK7wAAABY"]
[Thu Jul 30 16:26:58.045573 2026] [security2:error] [pid 3867080:tid 3867080] [client 34.23.170.140:42120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.bak"] [unique_id "amttQjOCgU28Xy3otVWK7wAAABY"]
[Thu Jul 30 16:26:58.045779 2026] [security2:error] [pid 3867080:tid 3867080] [client 34.23.170.140:42120] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttQjOCgU28Xy3otVWK7wAAABY"]
[Thu Jul 30 16:26:58.298344 2026] [security2:error] [pid 3857654:tid 3857654] [client 34.23.170.140:42164] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amttQgPeX1esuFuckonfmwAAAAE"]
[Thu Jul 30 16:26:58.298506 2026] [security2:error] [pid 3857654:tid 3857654] [client 34.23.170.140:42164] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/wp-config.php.old"] [unique_id "amttQgPeX1esuFuckonfmwAAAAE"]
[Thu Jul 30 16:26:58.298717 2026] [security2:error] [pid 3857654:tid 3857654] [client 34.23.170.140:42164] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttQgPeX1esuFuckonfmwAAAAE"]
[Thu Jul 30 16:26:58.335595 2026] [security2:error] [pid 3861298:tid 3861298] [client 34.23.170.140:42174] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "account.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amttQhkow3HBoVwfsCI2-AAAACI"]
[Thu Jul 30 16:26:58.335854 2026] [security2:error] [pid 3861298:tid 3861298] [client 34.23.170.140:42174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "account.georgehotelofstamford.com"] [uri "/storage/logs/laravel.log"] [unique_id "amttQhkow3HBoVwfsCI2-AAAACI"]
[Thu Jul 30 16:26:58.336047 2026] [security2:error] [pid 3861298:tid 3861298] [client 34.23.170.140:42174] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "account.georgehotelofstamford.com"] [uri "/403.shtml"] [unique_id "amttQhkow3HBoVwfsCI2-AAAACI"]
[Thu Jul 30 16:27:00.411550 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:45840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:00.411583 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:00.468926 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:45842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:00.468949 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:02.310756 2026] [security2:error] [pid 3863933:tid 3863933] [client 85.208.96.207:27566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/luscombe-a/houses-for-rent-in-san-antonio,-tx-all-bills-paid"] [unique_id "amttRtSBvoDFVQcMEFLEvAAAACc"]
[Thu Jul 30 16:27:03.526811 2026] [ssl:error] [pid 3863871:tid 3863871] (EAI 2)Name or service not known: [client 144.76.19.72:45850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:03.526847 2026] [ssl:error] [pid 3863871:tid 3863871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:03.578574 2026] [ssl:error] [pid 3866658:tid 3866658] (EAI 2)Name or service not known: [client 144.76.19.72:45852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:03.578615 2026] [ssl:error] [pid 3866658:tid 3866658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:06.634483 2026] [ssl:error] [pid 3861298:tid 3861298] (EAI 2)Name or service not known: [client 144.76.19.72:45866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:06.634520 2026] [ssl:error] [pid 3861298:tid 3861298] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:06.691551 2026] [ssl:error] [pid 3849754:tid 3849754] (EAI 2)Name or service not known: [client 144.76.19.72:45874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:06.691596 2026] [ssl:error] [pid 3849754:tid 3849754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:07.181146 2026] [security2:error] [pid 3859849:tid 3859849] [client 20.171.55.167:6913] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttS8LAsqkzLMBYRZLDHgAAAAU"]
[Thu Jul 30 16:27:07.181374 2026] [security2:error] [pid 3859849:tid 3859849] [client 20.171.55.167:6913] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttS8LAsqkzLMBYRZLDHgAAAAU"]
[Thu Jul 30 16:27:07.181640 2026] [security2:error] [pid 3859849:tid 3859849] [client 20.171.55.167:6913] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "stneotvillagefestival.com.josieandmatt.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttS8LAsqkzLMBYRZLDHgAAAAU"]
[Thu Jul 30 16:27:09.635610 2026] [core:error] [pid 3856717:tid 3856717] [client 66.132.186.201:63922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:27:09.635637 2026] [core:error] [pid 3856717:tid 3856717] [client 66.132.186.201:63922] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:27:09.749038 2026] [ssl:error] [pid 3867475:tid 3867475] (EAI 2)Name or service not known: [client 144.76.19.72:46428] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:09.749120 2026] [ssl:error] [pid 3867475:tid 3867475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:09.805583 2026] [ssl:error] [pid 3866726:tid 3866726] (EAI 2)Name or service not known: [client 144.76.19.72:46432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:09.805618 2026] [ssl:error] [pid 3866726:tid 3866726] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:10.257640 2026] [security2:error] [pid 3868078:tid 3868078] [client 54.87.62.248:11843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wmsfirearmstraining.com"] [uri "/zoos-police-government/"] [unique_id "amttTqwBkj9E22xt37KJ_AAAADU"]
[Thu Jul 30 16:27:11.869543 2026] [ssl:error] [pid 3867536:tid 3867536] (70014)End of file found: [client 216.73.216.199:39089] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:12.918301 2026] [ssl:error] [pid 3863871:tid 3863871] (EAI 2)Name or service not known: [client 144.76.19.72:46434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:12.918352 2026] [ssl:error] [pid 3863871:tid 3863871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:12.972472 2026] [ssl:error] [pid 3868037:tid 3868037] (EAI 2)Name or service not known: [client 144.76.19.72:46444] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:12.972514 2026] [ssl:error] [pid 3868037:tid 3868037] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:13.976855 2026] [ssl:error] [pid 3862503:tid 3862503] (70014)End of file found: [client 216.73.216.199:17741] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:14.117432 2026] [security2:error] [pid 3868233:tid 3868233] [client 101.33.80.42:40102] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.the-atrox-killers.net"] [uri "/"] [unique_id "amttUhzSF5v_YHDJLjmu1QAAADg"]
[Thu Jul 30 16:27:14.286328 2026] [core:error] [pid 3862565:tid 3862565] (13)Permission denied: [client 216.73.216.199:18941] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/iptable_nat/uevent
[Thu Jul 30 16:27:14.839145 2026] [security2:error] [pid 3851470:tid 3851470] [client 84.255.184.160:31902] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttUrwCe-dcEKk3PWaD-AAAAA0"]
[Thu Jul 30 16:27:14.839196 2026] [security2:error] [pid 3851470:tid 3851470] [client 84.255.184.160:31902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttUrwCe-dcEKk3PWaD-AAAAA0"]
[Thu Jul 30 16:27:14.839455 2026] [security2:error] [pid 3851470:tid 3851470] [client 84.255.184.160:31902] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttUrwCe-dcEKk3PWaD-AAAAA0"]
[Thu Jul 30 16:27:15.158690 2026] [security2:error] [pid 3863806:tid 3863806] [client 185.191.171.18:45890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,4945.0/prev_next,prev.html"] [unique_id "amttU8pyPykFjPWZolhokgAAAAs"]
[Thu Jul 30 16:27:16.026895 2026] [ssl:error] [pid 3847784:tid 3847784] (EAI 2)Name or service not known: [client 144.76.19.72:46460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:16.026937 2026] [ssl:error] [pid 3847784:tid 3847784] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:16.090826 2026] [ssl:error] [pid 3863871:tid 3863871] (EAI 2)Name or service not known: [client 144.76.19.72:46466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:16.090854 2026] [ssl:error] [pid 3863871:tid 3863871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:16.102675 2026] [core:error] [pid 3862565:tid 3862565] (13)Permission denied: [client 216.73.216.199:18941] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/etc/chrony.keys
[Thu Jul 30 16:27:16.200200 2026] [security2:error] [pid 3847784:tid 3847784] [client 114.119.135.136:53547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~104,17,14,19/request_format~html"] [unique_id "amttVAHeOwfwIumvJo9JggAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~104,17,14/request_format~html
[Thu Jul 30 16:27:17.293964 2026] [ssl:error] [pid 3862565:tid 3862565] (70014)End of file found: [client 216.73.216.199:18941] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:17.942339 2026] [security2:error] [pid 3847784:tid 3847784] [client 114.119.135.136:53551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~104,17,14,19/request_format~html"] [unique_id "amttVQHeOwfwIumvJo9JgwAAAAM"], referer: http://www.erskinenazarene.co.uk/calendar/action~oneday/exact_date~1572912000/cat_ids~104,17,14/request_format~html
[Thu Jul 30 16:27:18.494450 2026] [ssl:error] [pid 3862626:tid 3862626] (70014)End of file found: [client 216.73.216.199:6560] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:19.146875 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:46476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:19.146900 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:19.203655 2026] [ssl:error] [pid 3854539:tid 3854539] (EAI 2)Name or service not known: [client 144.76.19.72:46478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:19.203698 2026] [ssl:error] [pid 3854539:tid 3854539] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:19.298314 2026] [ssl:error] [pid 3866726:tid 3866726] (70014)End of file found: [client 216.73.216.199:10645] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:20.501625 2026] [security2:error] [pid 3859849:tid 3859849] [client 45.123.221.176:13044] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttWMLAsqkzLMBYRZLDKwAAAAU"]
[Thu Jul 30 16:27:20.501676 2026] [security2:error] [pid 3859849:tid 3859849] [client 45.123.221.176:13044] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttWMLAsqkzLMBYRZLDKwAAAAU"]
[Thu Jul 30 16:27:20.501909 2026] [security2:error] [pid 3859849:tid 3859849] [client 45.123.221.176:13044] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttWMLAsqkzLMBYRZLDKwAAAAU"]
[Thu Jul 30 16:27:22.260165 2026] [ssl:error] [pid 3845080:tid 3845080] (EAI 2)Name or service not known: [client 144.76.19.72:41726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:22.260198 2026] [ssl:error] [pid 3845080:tid 3845080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:22.311454 2026] [ssl:error] [pid 3858395:tid 3858395] (EAI 2)Name or service not known: [client 144.76.19.72:41730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:22.311485 2026] [ssl:error] [pid 3858395:tid 3858395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:24.112336 2026] [cgi:error] [pid 3858339:tid 3858339] [client 103.117.14.201:60343] AH02812: stderr from /home/printmyc/thewhitefamily.uk/cgi-bin/: attempt to invoke directory as script, referer: http://thewhitefamily.uk
[Thu Jul 30 16:27:24.222367 2026] [ssl:error] [pid 3863871:tid 3863871] (70014)End of file found: [client 216.73.216.199:2137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:24.708500 2026] [core:error] [pid 3856944:tid 3856944] (13)Permission denied: [client 216.73.216.199:32248] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_buffers/order
[Thu Jul 30 16:27:25.364969 2026] [ssl:error] [pid 3866658:tid 3866658] (EAI 2)Name or service not known: [client 144.76.19.72:41738] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:25.364999 2026] [ssl:error] [pid 3866658:tid 3866658] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:25.419410 2026] [ssl:error] [pid 3851254:tid 3851254] (EAI 2)Name or service not known: [client 144.76.19.72:41748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:25.419455 2026] [ssl:error] [pid 3851254:tid 3851254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:26.235999 2026] [security2:error] [pid 3868079:tid 3868079] [client 43.159.34.167:51096] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "abc-dyslexia.com"] [uri "/"] [unique_id "amttXsFyeC57dQib0IEbwAAAADY"]
[Thu Jul 30 16:27:28.142667 2026] [ssl:error] [pid 3868037:tid 3868037] (70014)End of file found: [client 216.73.216.199:59227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:28.475922 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:41754] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:28.475954 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:28.530016 2026] [ssl:error] [pid 3867685:tid 3867685] (EAI 2)Name or service not known: [client 144.76.19.72:41756] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:28.530048 2026] [ssl:error] [pid 3867685:tid 3867685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:29.348457 2026] [ssl:error] [pid 3856944:tid 3856944] (70014)End of file found: [client 216.73.216.199:32248] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:30.855533 2026] [security2:error] [pid 3862566:tid 3862566] [client 105.96.184.139:33583] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttYlBTgaUlkGGtOFcF0AAAACA"]
[Thu Jul 30 16:27:30.855595 2026] [security2:error] [pid 3862566:tid 3862566] [client 105.96.184.139:33583] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttYlBTgaUlkGGtOFcF0AAAACA"]
[Thu Jul 30 16:27:30.855847 2026] [security2:error] [pid 3862566:tid 3862566] [client 105.96.184.139:33583] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttYlBTgaUlkGGtOFcF0AAAACA"]
[Thu Jul 30 16:27:31.205637 2026] [lsapi:warn] [pid 3829432:tid 3829432] [client 172.86.119.42:36740] [host mail.unclaimedassets.co.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:27:31.664864 2026] [ssl:error] [pid 3867733:tid 3867733] (EAI 2)Name or service not known: [client 144.76.19.72:59096] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:31.664897 2026] [ssl:error] [pid 3867733:tid 3867733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:31.722463 2026] [ssl:error] [pid 3868233:tid 3868233] (EAI 2)Name or service not known: [client 144.76.19.72:59112] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:31.722495 2026] [ssl:error] [pid 3868233:tid 3868233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:31.998103 2026] [security2:error] [pid 3867013:tid 3867013] [client 43.130.154.56:48996] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "thelambproductions.com"] [uri "/"] [unique_id "amttY7hq041EAqF2Veig5QAAABU"]
[Thu Jul 30 16:27:32.661862 2026] [core:error] [pid 3864003:tid 3864003] (13)Permission denied: [client 216.73.216.199:1549] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/libata/sections/__ksymtab
[Thu Jul 30 16:27:32.962849 2026] [ssl:error] [pid 3864003:tid 3864003] (70014)End of file found: [client 216.73.216.199:1549] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:33.870339 2026] [ssl:error] [pid 3851254:tid 3851254] (70014)End of file found: [client 216.73.216.199:47527] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:34.777717 2026] [ssl:error] [pid 3856944:tid 3856944] (EAI 2)Name or service not known: [client 144.76.19.72:59122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:34.777762 2026] [ssl:error] [pid 3856944:tid 3856944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:34.833010 2026] [ssl:error] [pid 3856471:tid 3856471] (EAI 2)Name or service not known: [client 144.76.19.72:59128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:34.833035 2026] [ssl:error] [pid 3856471:tid 3856471] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:36.268031 2026] [access_compat:error] [pid 3868037:tid 3868037] [client 45.158.164.139:56130] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:27:37.192825 2026] [ssl:error] [pid 3863933:tid 3863933] (70014)End of file found: [client 216.73.216.199:39657] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:37.884982 2026] [ssl:error] [pid 3857654:tid 3857654] (EAI 2)Name or service not known: [client 144.76.19.72:59142] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:37.885015 2026] [ssl:error] [pid 3857654:tid 3857654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:37.938655 2026] [ssl:error] [pid 3858339:tid 3858339] (EAI 2)Name or service not known: [client 144.76.19.72:59146] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:37.938703 2026] [ssl:error] [pid 3858339:tid 3858339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:39.299009 2026] [core:error] [pid 3859216:tid 3859216] (13)Permission denied: [client 216.73.216.199:29204] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kioctx/store_user
[Thu Jul 30 16:27:39.602257 2026] [ssl:error] [pid 3859216:tid 3859216] (70014)End of file found: [client 216.73.216.199:29204] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:40.992503 2026] [ssl:error] [pid 3862566:tid 3862566] (EAI 2)Name or service not known: [client 144.76.19.72:38632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:40.992528 2026] [ssl:error] [pid 3862566:tid 3862566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:41.047428 2026] [ssl:error] [pid 3849425:tid 3849425] (EAI 2)Name or service not known: [client 144.76.19.72:38640] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:41.047454 2026] [ssl:error] [pid 3849425:tid 3849425] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:43.152950 2026] [security2:error] [pid 3860857:tid 3860857] [client 114.119.139.53:31485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "sudokulogicapp.com"] [uri "/robots.txt"] [unique_id "amttb5T5CsALMWXBofUyQAAAABo"], referer: https://sudokulogicapp.com/robots.txt
[Thu Jul 30 16:27:44.103393 2026] [ssl:error] [pid 3867475:tid 3867475] (EAI 2)Name or service not known: [client 144.76.19.72:38644] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:44.103440 2026] [ssl:error] [pid 3867475:tid 3867475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:44.163613 2026] [ssl:error] [pid 3867475:tid 3867475] (EAI 2)Name or service not known: [client 144.76.19.72:38646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:44.163640 2026] [ssl:error] [pid 3867475:tid 3867475] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:44.911332 2026] [ssl:error] [pid 3863871:tid 3863871] (70014)End of file found: [client 216.73.216.199:20052] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:45.811640 2026] [core:error] [pid 3868078:tid 3868078] [client 65.108.124.214:58682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:27:45.811678 2026] [core:error] [pid 3868078:tid 3868078] [client 65.108.124.214:58682] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:27:46.123769 2026] [core:error] [pid 3866762:tid 3866762] (13)Permission denied: [client 216.73.216.199:40571] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/13:67/subsystem/input0/device/driver/uevent
[Thu Jul 30 16:27:47.235166 2026] [ssl:error] [pid 3867148:tid 3867148] (EAI 2)Name or service not known: [client 144.76.19.72:38654] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:47.235217 2026] [ssl:error] [pid 3867148:tid 3867148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:47.296565 2026] [ssl:error] [pid 3869889:tid 3869889] (EAI 2)Name or service not known: [client 144.76.19.72:38670] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:47.296595 2026] [ssl:error] [pid 3869889:tid 3869889] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:48.832465 2026] [ssl:error] [pid 3866762:tid 3866762] (70014)End of file found: [client 216.73.216.199:40571] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:49.216029 2026] [security2:error] [pid 3867730:tid 3867730] [client 124.222.230.178:34642] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "sarahwiseman.co.uk"] [uri "/"] [unique_id "amttdShB7GCEu4ngIzFPOQAAAC4"]
[Thu Jul 30 16:27:49.431290 2026] [security2:error] [pid 3869888:tid 3869888] [client 185.191.171.3:42260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,9229.0.html"] [unique_id "amttdX92Gl9evRaH_HBkNwAAACU"]
[Thu Jul 30 16:27:49.436362 2026] [ssl:error] [pid 3847784:tid 3847784] (70014)End of file found: [client 216.73.216.199:3918] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:50.391604 2026] [ssl:error] [pid 3864005:tid 3864005] (EAI 2)Name or service not known: [client 144.76.19.72:22424] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:50.391636 2026] [ssl:error] [pid 3864005:tid 3864005] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:50.445990 2026] [ssl:error] [pid 3869406:tid 3869406] (EAI 2)Name or service not known: [client 144.76.19.72:22426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:50.446022 2026] [ssl:error] [pid 3869406:tid 3869406] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:51.551718 2026] [ssl:error] [pid 3862503:tid 3862503] (70014)End of file found: [client 216.73.216.199:61674] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:53.553935 2026] [ssl:error] [pid 3870224:tid 3870224] (EAI 2)Name or service not known: [client 144.76.19.72:22432] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:53.553975 2026] [ssl:error] [pid 3870224:tid 3870224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:53.609245 2026] [ssl:error] [pid 3870224:tid 3870224] (EAI 2)Name or service not known: [client 144.76.19.72:22436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:53.609269 2026] [ssl:error] [pid 3870224:tid 3870224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:54.265785 2026] [ssl:error] [pid 3858339:tid 3858339] (70014)End of file found: [client 216.73.216.199:4020] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:55.791113 2026] [security2:error] [pid 3869887:tid 3869887] [client 129.159.56.14:60946] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.wmsfirearmstraining.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtte6tCK4CXLtKnRQyutgAAACQ"]
[Thu Jul 30 16:27:55.791300 2026] [security2:error] [pid 3869887:tid 3869887] [client 129.159.56.14:60946] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.wmsfirearmstraining.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtte6tCK4CXLtKnRQyutgAAACQ"]
[Thu Jul 30 16:27:55.791734 2026] [security2:error] [pid 3869887:tid 3869887] [client 129.159.56.14:60946] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.wmsfirearmstraining.wmsfirearmstraining.com"] [uri "/.env"] [unique_id "amtte6tCK4CXLtKnRQyutgAAACQ"]
[Thu Jul 30 16:27:56.663014 2026] [ssl:error] [pid 3870339:tid 3870339] (EAI 2)Name or service not known: [client 144.76.19.72:22440] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:56.663057 2026] [ssl:error] [pid 3870339:tid 3870339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:56.707627 2026] [ssl:error] [pid 3870304:tid 3870304] (70014)End of file found: [client 216.73.216.199:19665] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:56.718330 2026] [ssl:error] [pid 3870342:tid 3870342] (EAI 2)Name or service not known: [client 144.76.19.72:22450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:56.718374 2026] [ssl:error] [pid 3870342:tid 3870342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:56.915061 2026] [security2:error] [pid 3862503:tid 3862503] [client 45.148.10.120:50762] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.solitons.ditchfest.com"] [uri "/.env"] [unique_id "amttfI3sqqkq1BE4MCd8KgAAAAo"]
[Thu Jul 30 16:27:56.915281 2026] [security2:error] [pid 3862503:tid 3862503] [client 45.148.10.120:50762] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.solitons.ditchfest.com"] [uri "/.env"] [unique_id "amttfI3sqqkq1BE4MCd8KgAAAAo"]
[Thu Jul 30 16:27:56.915488 2026] [security2:error] [pid 3862503:tid 3862503] [client 45.148.10.120:50762] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.solitons.ditchfest.com"] [uri "/.env"] [unique_id "amttfI3sqqkq1BE4MCd8KgAAAAo"]
[Thu Jul 30 16:27:57.255654 2026] [authz_core:error] [pid 3870343:tid 3870343] [client 34.182.131.12:0] AH01630: client denied by server configuration: /home/kikikend/liveinhopedieincaergwrle.co.uk/php.ini
[Thu Jul 30 16:27:57.445045 2026] [core:error] [pid 3858395:tid 3858395] [client 65.108.124.214:47012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:27:57.445086 2026] [core:error] [pid 3858395:tid 3858395] [client 65.108.124.214:47012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:27:59.419535 2026] [ssl:error] [pid 3870342:tid 3870342] (70014)End of file found: [client 216.73.216.199:11611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:27:59.774582 2026] [ssl:error] [pid 3856944:tid 3856944] (EAI 2)Name or service not known: [client 144.76.19.72:40554] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:59.774618 2026] [ssl:error] [pid 3856944:tid 3856944] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:27:59.831562 2026] [ssl:error] [pid 3866762:tid 3866762] (EAI 2)Name or service not known: [client 144.76.19.72:40570] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:27:59.831592 2026] [ssl:error] [pid 3866762:tid 3866762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:00.320412 2026] [ssl:error] [pid 3857654:tid 3857654] (70014)End of file found: [client 216.73.216.199:55034] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:01.251010 2026] [authz_core:error] [pid 3870341:tid 3870341] [client 66.249.66.33:56238] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:28:01.253755 2026] [authz_core:error] [pid 3870341:tid 3870341] [client 66.249.66.33:56238] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:28:02.856182 2026] [security2:error] [pid 3867475:tid 3867475] [client 85.208.96.202:55280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/nc8uuvof/is-judge-judy-still-married"] [unique_id "amttgrp55eYmLyd3WiAhFQAAACY"]
[Thu Jul 30 16:28:02.895687 2026] [ssl:error] [pid 3870304:tid 3870304] (EAI 2)Name or service not known: [client 144.76.19.72:40578] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:02.895731 2026] [ssl:error] [pid 3870304:tid 3870304] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:02.949768 2026] [ssl:error] [pid 3863871:tid 3863871] (EAI 2)Name or service not known: [client 144.76.19.72:40586] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:02.949802 2026] [ssl:error] [pid 3863871:tid 3863871] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:03.054256 2026] [security2:error] [pid 3860921:tid 3860921] [client 185.191.171.3:17544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.wurlitzer.co.uk"] [uri "/lyricf1970-008/"] [unique_id "amttg80g_3jaNngI21-3wQAAAB0"]
[Thu Jul 30 16:28:06.005949 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:40602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:06.005994 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:06.061322 2026] [ssl:error] [pid 3858339:tid 3858339] (EAI 2)Name or service not known: [client 144.76.19.72:40604] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:06.061366 2026] [ssl:error] [pid 3858339:tid 3858339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:06.701636 2026] [core:error] [pid 3862503:tid 3862503] (13)Permission denied: [client 216.73.216.199:52945] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/drm_kms_helper/uevent
[Thu Jul 30 16:28:06.999806 2026] [ssl:error] [pid 3862503:tid 3862503] (70014)End of file found: [client 216.73.216.199:52945] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:09.119236 2026] [ssl:error] [pid 3867733:tid 3867733] (EAI 2)Name or service not known: [client 144.76.19.72:40618] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:09.119269 2026] [ssl:error] [pid 3867733:tid 3867733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:09.174081 2026] [ssl:error] [pid 3868233:tid 3868233] (EAI 2)Name or service not known: [client 144.76.19.72:40626] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:09.174111 2026] [ssl:error] [pid 3868233:tid 3868233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:10.028038 2026] [core:error] [pid 3868078:tid 3868078] (13)Permission denied: [client 216.73.216.199:20799] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/189:1/driver/uevent
[Thu Jul 30 16:28:11.615420 2026] [ssl:error] [pid 3867733:tid 3867733] (70014)End of file found: [client 216.73.216.199:20043] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:12.227775 2026] [ssl:error] [pid 3866761:tid 3866761] (EAI 2)Name or service not known: [client 144.76.19.72:58388] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:12.227806 2026] [ssl:error] [pid 3866761:tid 3866761] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:12.284261 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:58396] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:12.284293 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:13.223973 2026] [authz_core:error] [pid 3866762:tid 3866762] [client 66.249.66.34:39265] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:28:13.226633 2026] [authz_core:error] [pid 3866762:tid 3866762] [client 66.249.66.34:39265] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:28:13.427956 2026] [ssl:error] [pid 3868078:tid 3868078] (70014)End of file found: [client 216.73.216.199:20799] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:13.715172 2026] [cgi:error] [pid 3862564:tid 3862564] [client 51.116.238.8:15720] AH02812: stderr from /home/orgent/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:28:14.330727 2026] [ssl:error] [pid 3869886:tid 3869886] (70014)End of file found: [client 216.73.216.199:10210] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:15.342623 2026] [ssl:error] [pid 3870306:tid 3870306] (EAI 2)Name or service not known: [client 144.76.19.72:58402] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:15.342658 2026] [ssl:error] [pid 3870306:tid 3870306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:15.397047 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:58404] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:15.397091 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:16.643360 2026] [authz_core:error] [pid 3867269:tid 3867269] [client 51.116.238.8:15636] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/l10n/error_log
[Thu Jul 30 16:28:16.667363 2026] [access_compat:error] [pid 3867269:tid 3867269] [client 51.116.238.8:15636] AH01797: client denied by server configuration: /home/orgent/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 16:28:18.248088 2026] [security2:error] [pid 3868079:tid 3868079] [client 20.171.55.167:2098] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.perish.freakorgeek.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttksFyeC57dQib0IEcJwAAADY"]
[Thu Jul 30 16:28:18.248297 2026] [security2:error] [pid 3868079:tid 3868079] [client 20.171.55.167:2098] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.perish.freakorgeek.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttksFyeC57dQib0IEcJwAAADY"]
[Thu Jul 30 16:28:18.248524 2026] [security2:error] [pid 3868079:tid 3868079] [client 20.171.55.167:2098] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.perish.freakorgeek.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttksFyeC57dQib0IEcJwAAADY"]
[Thu Jul 30 16:28:18.454543 2026] [ssl:error] [pid 3864011:tid 3864011] (EAI 2)Name or service not known: [client 144.76.19.72:58412] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:18.454573 2026] [ssl:error] [pid 3864011:tid 3864011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:18.512038 2026] [ssl:error] [pid 3867733:tid 3867733] (EAI 2)Name or service not known: [client 144.76.19.72:58414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:18.512095 2026] [ssl:error] [pid 3867733:tid 3867733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:19.057733 2026] [ssl:error] [pid 3864011:tid 3864011] (70014)End of file found: [client 216.73.216.199:21419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:20.895859 2026] [security2:error] [pid 3868078:tid 3868078] [client 20.171.55.167:7388] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.ns-pandora.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttlKwBkj9E22xt37KKJQAAADU"]
[Thu Jul 30 16:28:20.896023 2026] [security2:error] [pid 3868078:tid 3868078] [client 20.171.55.167:7388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.ns-pandora.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amttlKwBkj9E22xt37KKJQAAADU"]
[Thu Jul 30 16:28:20.924268 2026] [security2:error] [pid 3868078:tid 3868078] [client 20.171.55.167:7388] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.ns-pandora.com"] [uri "/403.shtml"] [unique_id "amttlKwBkj9E22xt37KKJQAAADU"]
[Thu Jul 30 16:28:20.963298 2026] [ssl:error] [pid 3870337:tid 3870337] (70014)End of file found: [client 216.73.216.199:33798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:21.463520 2026] [security2:error] [pid 3870340:tid 3870340] [client 101.47.18.27:50575] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttlfdgRCYOpT6mNFSrXAAAAEY"]
[Thu Jul 30 16:28:21.463566 2026] [security2:error] [pid 3870340:tid 3870340] [client 101.47.18.27:50575] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttlfdgRCYOpT6mNFSrXAAAAEY"]
[Thu Jul 30 16:28:21.463862 2026] [security2:error] [pid 3870340:tid 3870340] [client 101.47.18.27:50575] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttlfdgRCYOpT6mNFSrXAAAAEY"]
[Thu Jul 30 16:28:21.602118 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:26690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:21.602168 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:21.655344 2026] [ssl:error] [pid 3870303:tid 3870303] (EAI 2)Name or service not known: [client 144.76.19.72:26700] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:21.655374 2026] [ssl:error] [pid 3870303:tid 3870303] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:21.690257 2026] [security2:error] [pid 3870261:tid 3870261] [client 185.191.171.6:30796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1834.45.html"] [unique_id "amttlVa8hhe2aVSdS6xhzQAAACo"]
[Thu Jul 30 16:28:23.395958 2026] [core:error] [pid 3868078:tid 3868078] [client 66.249.66.8:56775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:28:23.395987 2026] [core:error] [pid 3868078:tid 3868078] [client 66.249.66.8:56775] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:28:24.591407 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:37594] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:24.705560 2026] [security2:error] [pid 3870303:tid 3870303] [client 43.153.155.14:27303] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttmOiGH51RXfk-1V-k7gAAADs"]
[Thu Jul 30 16:28:24.705616 2026] [security2:error] [pid 3870303:tid 3870303] [client 43.153.155.14:27303] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttmOiGH51RXfk-1V-k7gAAADs"]
[Thu Jul 30 16:28:24.705935 2026] [security2:error] [pid 3870303:tid 3870303] [client 43.153.155.14:27303] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttmOiGH51RXfk-1V-k7gAAADs"]
[Thu Jul 30 16:28:24.712026 2026] [ssl:error] [pid 3866762:tid 3866762] (EAI 2)Name or service not known: [client 144.76.19.72:26716] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:24.712047 2026] [ssl:error] [pid 3866762:tid 3866762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:24.769486 2026] [ssl:error] [pid 3854491:tid 3854491] (EAI 2)Name or service not known: [client 144.76.19.72:26728] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:24.769516 2026] [ssl:error] [pid 3854491:tid 3854491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:25.077382 2026] [ssl:error] [pid 3854541:tid 3854541] (70014)End of file found: [client 216.73.216.199:51839] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:27.824095 2026] [ssl:error] [pid 3850576:tid 3850576] (EAI 2)Name or service not known: [client 144.76.19.72:26740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:27.824129 2026] [ssl:error] [pid 3850576:tid 3850576] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:27.877013 2026] [ssl:error] [pid 3870344:tid 3870344] (EAI 2)Name or service not known: [client 144.76.19.72:26748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:27.877052 2026] [ssl:error] [pid 3870344:tid 3870344] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:27.904632 2026] [ssl:error] [pid 3851254:tid 3851254] (70014)End of file found: [client 216.73.216.199:1550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:28.827750 2026] [security2:error] [pid 3870340:tid 3870340] [client 43.153.155.14:24421] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttnPdgRCYOpT6mNFSrYAAAAEY"]
[Thu Jul 30 16:28:28.827807 2026] [security2:error] [pid 3870340:tid 3870340] [client 43.153.155.14:24421] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttnPdgRCYOpT6mNFSrYAAAAEY"]
[Thu Jul 30 16:28:28.828078 2026] [security2:error] [pid 3870340:tid 3870340] [client 43.153.155.14:24421] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttnPdgRCYOpT6mNFSrYAAAAEY"]
[Thu Jul 30 16:28:30.929197 2026] [ssl:error] [pid 3858339:tid 3858339] (EAI 2)Name or service not known: [client 144.76.19.72:43100] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:30.929227 2026] [ssl:error] [pid 3858339:tid 3858339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:30.983650 2026] [ssl:error] [pid 3859216:tid 3859216] (EAI 2)Name or service not known: [client 144.76.19.72:43116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:30.983678 2026] [ssl:error] [pid 3859216:tid 3859216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:32.140833 2026] [security2:error] [pid 3867148:tid 3867148] [client 216.73.216.199:20041] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/program.log"] [unique_id "amttoHzZBDgiRzlhgrOCSwAAAB4"]
[Thu Jul 30 16:28:32.141151 2026] [security2:error] [pid 3867148:tid 3867148] [client 216.73.216.199:20041] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/program.log"] [unique_id "amttoHzZBDgiRzlhgrOCSwAAAB4"]
[Thu Jul 30 16:28:32.141391 2026] [security2:error] [pid 3867148:tid 3867148] [client 216.73.216.199:20041] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/var/log/anaconda/program.log"] [unique_id "amttoHzZBDgiRzlhgrOCSwAAAB4"]
[Thu Jul 30 16:28:33.363618 2026] [ssl:error] [pid 3867148:tid 3867148] (70014)End of file found: [client 216.73.216.199:20041] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:34.062493 2026] [ssl:error] [pid 3870224:tid 3870224] (EAI 2)Name or service not known: [client 144.76.19.72:43120] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:34.062520 2026] [ssl:error] [pid 3870224:tid 3870224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:34.115687 2026] [ssl:error] [pid 3868078:tid 3868078] (EAI 2)Name or service not known: [client 144.76.19.72:43128] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:34.115734 2026] [ssl:error] [pid 3868078:tid 3868078] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:35.171346 2026] [ssl:error] [pid 3872058:tid 3872058] (70014)End of file found: [client 216.73.216.199:63177] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:35.638161 2026] [security2:error] [pid 3868078:tid 3868078] [client 74.7.241.52:40840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "juliaashmore.org"] [uri "/"] [unique_id "amtto6wBkj9E22xt37KKLwAAADU"], referer: http://www.websitescrawl.art
[Thu Jul 30 16:28:36.469804 2026] [authz_core:error] [pid 3867269:tid 3867269] [client 51.116.238.8:15636] AH01630: client denied by server configuration: /home/orgent/public_html/wp-includes/block-bindings/error_log
[Thu Jul 30 16:28:37.173566 2026] [ssl:error] [pid 3870343:tid 3870343] (EAI 2)Name or service not known: [client 144.76.19.72:43132] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:37.173607 2026] [ssl:error] [pid 3870343:tid 3870343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:37.226779 2026] [ssl:error] [pid 3866762:tid 3866762] (EAI 2)Name or service not known: [client 144.76.19.72:43136] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:37.226805 2026] [ssl:error] [pid 3866762:tid 3866762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:38.280437 2026] [access_compat:error] [pid 3869782:tid 3869782] [client 45.158.164.139:36810] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:28:38.491178 2026] [ssl:error] [pid 3870224:tid 3870224] (70014)End of file found: [client 216.73.216.199:10691] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:39.828174 2026] [security2:error] [pid 3869888:tid 3869888] [client 114.119.155.144:63241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~103,102/request_format~html"] [unique_id "amttp392Gl9evRaH_HBkTAAAACU"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E103
[Thu Jul 30 16:28:40.281480 2026] [ssl:error] [pid 3867148:tid 3867148] (EAI 2)Name or service not known: [client 144.76.19.72:20214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:40.281513 2026] [ssl:error] [pid 3867148:tid 3867148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:40.341425 2026] [ssl:error] [pid 3866762:tid 3866762] (EAI 2)Name or service not known: [client 144.76.19.72:20230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:40.341472 2026] [ssl:error] [pid 3866762:tid 3866762] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:40.492769 2026] [authz_core:error] [pid 3862503:tid 3862503] [client 66.249.66.33:42190] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:28:40.495461 2026] [authz_core:error] [pid 3862503:tid 3862503] [client 66.249.66.33:42190] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:28:41.629385 2026] [security2:error] [pid 3870338:tid 3870338] [client 114.119.155.144:63245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~103,102/request_format~html"] [unique_id "amttqbdh8c2Ouu6LYLkdIQAAAEM"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E103
[Thu Jul 30 16:28:41.663242 2026] [cgi:error] [pid 3860319:tid 3860319] [client 216.73.216.199:44816] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/checkexim.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 16:28:41.663310 2026] [cgi:error] [pid 3860319:tid 3860319] [client 216.73.216.199:44816] End of script output before headers: checkexim.pl
[Thu Jul 30 16:28:43.398550 2026] [ssl:error] [pid 3867148:tid 3867148] (EAI 2)Name or service not known: [client 144.76.19.72:20236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:43.398585 2026] [ssl:error] [pid 3867148:tid 3867148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:43.482792 2026] [ssl:error] [pid 3862566:tid 3862566] (EAI 2)Name or service not known: [client 144.76.19.72:20240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:43.482818 2026] [ssl:error] [pid 3862566:tid 3862566] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:44.654619 2026] [ssl:error] [pid 3867148:tid 3867148] (70014)End of file found: [client 216.73.216.199:40497] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:45.256766 2026] [ssl:error] [pid 3870261:tid 3870261] (70014)End of file found: [client 216.73.216.199:13165] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:46.536371 2026] [ssl:error] [pid 3869888:tid 3869888] (EAI 2)Name or service not known: [client 144.76.19.72:20248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:46.536410 2026] [ssl:error] [pid 3869888:tid 3869888] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:46.591670 2026] [ssl:error] [pid 3872801:tid 3872801] (EAI 2)Name or service not known: [client 144.76.19.72:20254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:46.591702 2026] [ssl:error] [pid 3872801:tid 3872801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:49.678251 2026] [ssl:error] [pid 3854491:tid 3854491] (EAI 2)Name or service not known: [client 144.76.19.72:55708] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:49.678289 2026] [ssl:error] [pid 3854491:tid 3854491] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:49.733519 2026] [ssl:error] [pid 3858395:tid 3858395] (EAI 2)Name or service not known: [client 144.76.19.72:55722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:49.733552 2026] [ssl:error] [pid 3858395:tid 3858395] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:50.375451 2026] [ssl:error] [pid 3867733:tid 3867733] (70014)End of file found: [client 216.73.216.199:65288] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:51.359563 2026] [core:error] [pid 3870304:tid 3870304] [client 20.52.54.143:12544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:28:51.359589 2026] [core:error] [pid 3870304:tid 3870304] [client 20.52.54.143:12544] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:28:52.790666 2026] [ssl:error] [pid 3856534:tid 3856534] (EAI 2)Name or service not known: [client 144.76.19.72:55724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:52.790717 2026] [ssl:error] [pid 3856534:tid 3856534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:52.844256 2026] [ssl:error] [pid 3870339:tid 3870339] (EAI 2)Name or service not known: [client 144.76.19.72:55740] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:52.844290 2026] [ssl:error] [pid 3870339:tid 3870339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:54.901462 2026] [ssl:error] [pid 3869828:tid 3869828] (70014)End of file found: [client 216.73.216.199:46461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:28:54.992976 2026] [authz_core:error] [pid 3870931:tid 3870931] [client 169.58.39.191:54927] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 16:28:55.913251 2026] [ssl:error] [pid 3867733:tid 3867733] (EAI 2)Name or service not known: [client 144.76.19.72:55744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:55.913287 2026] [ssl:error] [pid 3867733:tid 3867733] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:55.969441 2026] [ssl:error] [pid 3870931:tid 3870931] (EAI 2)Name or service not known: [client 144.76.19.72:55752] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:55.969480 2026] [ssl:error] [pid 3870931:tid 3870931] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:58.003089 2026] [authz_core:error] [pid 3868233:tid 3868233] [client 169.58.39.191:55805] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/IXR/error_log, referer: binance.com
[Thu Jul 30 16:28:59.029160 2026] [ssl:error] [pid 3870306:tid 3870306] (EAI 2)Name or service not known: [client 144.76.19.72:55764] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:59.029193 2026] [ssl:error] [pid 3870306:tid 3870306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:59.108568 2026] [ssl:error] [pid 3870306:tid 3870306] (EAI 2)Name or service not known: [client 144.76.19.72:55770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:28:59.108597 2026] [ssl:error] [pid 3870306:tid 3870306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:28:59.717088 2026] [ssl:error] [pid 3859216:tid 3859216] (70014)End of file found: [client 216.73.216.199:26638] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:00.624043 2026] [core:error] [pid 3864011:tid 3864011] (13)Permission denied: [client 216.73.216.199:50066] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty50/subsystem/ttyS2/device/driver/bind
[Thu Jul 30 16:29:01.628596 2026] [authz_core:error] [pid 3873805:tid 3873805] [client 169.58.39.191:57047] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 16:29:01.825226 2026] [ssl:error] [pid 3868079:tid 3868079] (70014)End of file found: [client 216.73.216.199:15672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:02.161858 2026] [ssl:error] [pid 3869828:tid 3869828] (EAI 2)Name or service not known: [client 144.76.19.72:36828] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:02.161921 2026] [ssl:error] [pid 3869828:tid 3869828] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:02.213853 2026] [ssl:error] [pid 3868233:tid 3868233] (EAI 2)Name or service not known: [client 144.76.19.72:36840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:02.213889 2026] [ssl:error] [pid 3868233:tid 3868233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:03.288422 2026] [security2:error] [pid 3862503:tid 3862503] [client 85.208.96.211:54014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/aoxh5wby/homes-for-sale-by-owner-in-castalia-ohio"] [unique_id "amttv43sqqkq1BE4MCd8VAAAAAo"]
[Thu Jul 30 16:29:03.942940 2026] [ssl:error] [pid 3864011:tid 3864011] (70014)End of file found: [client 216.73.216.199:50066] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:04.507746 2026] [authz_core:error] [pid 3860319:tid 3860319] [client 169.58.39.191:58071] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/PHPMailer/error_log, referer: binance.com
[Thu Jul 30 16:29:04.512635 2026] [security2:error] [pid 3870342:tid 3870342] [client 94.204.38.191:43094] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttwE8-eAHRc_jiv6YDuwAAAEg"]
[Thu Jul 30 16:29:04.512681 2026] [security2:error] [pid 3870342:tid 3870342] [client 94.204.38.191:43094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttwE8-eAHRc_jiv6YDuwAAAEg"]
[Thu Jul 30 16:29:04.512944 2026] [security2:error] [pid 3870342:tid 3870342] [client 94.204.38.191:43094] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttwE8-eAHRc_jiv6YDuwAAAEg"]
[Thu Jul 30 16:29:05.047801 2026] [ssl:error] [pid 3869886:tid 3869886] (70014)End of file found: [client 216.73.216.199:4852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:05.265819 2026] [ssl:error] [pid 3851254:tid 3851254] (EAI 2)Name or service not known: [client 144.76.19.72:36854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:05.265853 2026] [ssl:error] [pid 3851254:tid 3851254] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:05.318907 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:36856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:05.318940 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:08.702709 2026] [security2:error] [pid 3870342:tid 3870342] [client 185.191.171.2:44354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1046.0/prev_next,prev.html"] [unique_id "amttxE8-eAHRc_jiv6YDvgAAAEg"]
[Thu Jul 30 16:29:08.788173 2026] [ssl:error] [pid 3870342:tid 3870342] (EAI 2)Name or service not known: [client 144.76.19.72:36862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:08.788203 2026] [ssl:error] [pid 3870342:tid 3870342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:08.957671 2026] [security2:error] [pid 3869888:tid 3869888] [client 5.32.255.46:48028] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttxH92Gl9evRaH_HBkYQAAACU"]
[Thu Jul 30 16:29:08.957714 2026] [security2:error] [pid 3869888:tid 3869888] [client 5.32.255.46:48028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttxH92Gl9evRaH_HBkYQAAACU"]
[Thu Jul 30 16:29:08.957963 2026] [security2:error] [pid 3869888:tid 3869888] [client 5.32.255.46:48028] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttxH92Gl9evRaH_HBkYQAAACU"]
[Thu Jul 30 16:29:09.123527 2026] [ssl:error] [pid 3858339:tid 3858339] (EAI 2)Name or service not known: [client 144.76.19.72:36874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:09.123555 2026] [ssl:error] [pid 3858339:tid 3858339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:10.964710 2026] [ssl:error] [pid 3874390:tid 3874390] (70014)End of file found: [client 216.73.216.199:3316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:11.703345 2026] [ssl:error] [pid 3862504:tid 3862504] (70014)End of file found: [client 216.73.216.199:14907] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:11.909267 2026] [security2:error] [pid 3874387:tid 3874387] [client 51.161.37.7:40878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/robots.txt"] [unique_id "amttx4lldHdzlo2MP1U6_QAAADU"]
[Thu Jul 30 16:29:12.180595 2026] [ssl:error] [pid 3872854:tid 3872854] (EAI 2)Name or service not known: [client 144.76.19.72:29200] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:12.180626 2026] [ssl:error] [pid 3872854:tid 3872854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:12.236532 2026] [ssl:error] [pid 3873804:tid 3873804] (EAI 2)Name or service not known: [client 144.76.19.72:29212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:12.236559 2026] [ssl:error] [pid 3873804:tid 3873804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:13.033136 2026] [security2:error] [pid 3861401:tid 3861401] [client 54.38.147.111:53972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.magic-cookie.co.uk"] [uri "/"] [unique_id "amttyc-k3_lggI5VfuuEPgAAADM"]
[Thu Jul 30 16:29:13.198240 2026] [ssl:error] [pid 3874392:tid 3874392] (70014)End of file found: [client 216.73.216.199:55116] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:13.720473 2026] [security2:error] [pid 3874302:tid 3874302] [client 141.98.140.78:11474] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttya8CbaBwunr3mWjXDwAAADE"]
[Thu Jul 30 16:29:13.720523 2026] [security2:error] [pid 3874302:tid 3874302] [client 141.98.140.78:11474] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amttya8CbaBwunr3mWjXDwAAADE"]
[Thu Jul 30 16:29:13.720826 2026] [security2:error] [pid 3874302:tid 3874302] [client 141.98.140.78:11474] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amttya8CbaBwunr3mWjXDwAAADE"]
[Thu Jul 30 16:29:15.289583 2026] [ssl:error] [pid 3859216:tid 3859216] (EAI 2)Name or service not known: [client 144.76.19.72:29228] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:15.289620 2026] [ssl:error] [pid 3859216:tid 3859216] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:15.340890 2026] [ssl:error] [pid 3874391:tid 3874391] (EAI 2)Name or service not known: [client 144.76.19.72:29236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:15.340930 2026] [ssl:error] [pid 3874391:tid 3874391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:16.393619 2026] [ssl:error] [pid 3869782:tid 3869782] (70014)End of file found: [client 216.73.216.199:12077] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:17.000771 2026] [ssl:error] [pid 3847784:tid 3847784] (70014)End of file found: [client 216.73.216.199:40815] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:18.399595 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:29252] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:18.399629 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:18.455771 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:29262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:18.455840 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:18.921115 2026] [ssl:error] [pid 3870337:tid 3870337] (70014)End of file found: [client 216.73.216.199:42477] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:21.509429 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:18506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:21.509465 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:21.561059 2026] [ssl:error] [pid 3870261:tid 3870261] (EAI 2)Name or service not known: [client 144.76.19.72:18516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:21.561128 2026] [ssl:error] [pid 3870261:tid 3870261] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:22.231459 2026] [ssl:error] [pid 3874231:tid 3874231] (70014)End of file found: [client 216.73.216.199:23078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:24.615465 2026] [ssl:error] [pid 3874391:tid 3874391] (EAI 2)Name or service not known: [client 144.76.19.72:18524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:24.615520 2026] [ssl:error] [pid 3874391:tid 3874391] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:24.668131 2026] [ssl:error] [pid 3874389:tid 3874389] (EAI 2)Name or service not known: [client 144.76.19.72:18530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:24.668166 2026] [ssl:error] [pid 3874389:tid 3874389] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:27.048062 2026] [ssl:error] [pid 3864008:tid 3864008] (70014)End of file found: [client 216.73.216.199:26014] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:27.564437 2026] [ssl:error] [pid 3874232:tid 3874232] (70014)End of file found: [client 216.73.216.199:61986] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:27.741856 2026] [ssl:error] [pid 3870306:tid 3870306] (EAI 2)Name or service not known: [client 144.76.19.72:18534] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:27.741900 2026] [ssl:error] [pid 3870306:tid 3870306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:27.799539 2026] [ssl:error] [pid 3864011:tid 3864011] (EAI 2)Name or service not known: [client 144.76.19.72:18540] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:27.799570 2026] [ssl:error] [pid 3864011:tid 3864011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:27.839852 2026] [ssl:error] [pid 3829432:tid 3829432] (70014)End of file found: [client 216.73.216.199:35399] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:31.329422 2026] [ssl:error] [pid 3862565:tid 3862565] (EAI 2)Name or service not known: [client 144.76.19.72:36572] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:31.329461 2026] [ssl:error] [pid 3862565:tid 3862565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:31.465572 2026] [ssl:error] [pid 3873804:tid 3873804] (EAI 2)Name or service not known: [client 144.76.19.72:36576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:31.465601 2026] [ssl:error] [pid 3873804:tid 3873804] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:33.075286 2026] [ssl:error] [pid 3874387:tid 3874387] (70014)End of file found: [client 216.73.216.199:1840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:33.574702 2026] [ssl:error] [pid 3875634:tid 3875634] (70014)End of file found: [client 216.73.216.199:34179] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:34.274266 2026] [ssl:error] [pid 3874392:tid 3874392] (70014)End of file found: [client 216.73.216.199:18493] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:34.522938 2026] [ssl:error] [pid 3854541:tid 3854541] (EAI 2)Name or service not known: [client 144.76.19.72:36590] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:34.522971 2026] [ssl:error] [pid 3854541:tid 3854541] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:34.579425 2026] [ssl:error] [pid 3875633:tid 3875633] (EAI 2)Name or service not known: [client 144.76.19.72:36602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:34.579459 2026] [ssl:error] [pid 3875633:tid 3875633] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:38.349341 2026] [ssl:error] [pid 3870224:tid 3870224] (EAI 2)Name or service not known: [client 144.76.19.72:36616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:38.349369 2026] [ssl:error] [pid 3870224:tid 3870224] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:38.376396 2026] [core:error] [pid 3875631:tid 3875631] (13)Permission denied: [client 216.73.216.199:50831] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ksm_stable_node/sanity_checks
[Thu Jul 30 16:29:38.402173 2026] [ssl:error] [pid 3868233:tid 3868233] (EAI 2)Name or service not known: [client 144.76.19.72:36632] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:38.402200 2026] [ssl:error] [pid 3868233:tid 3868233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:38.494734 2026] [core:error] [pid 3875631:tid 3875631] (13)Permission denied: [client 216.73.216.199:50831] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/net/eth0/device/driver/unbind
[Thu Jul 30 16:29:38.789197 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:50831] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:39.391159 2026] [ssl:error] [pid 3868233:tid 3868233] (70014)End of file found: [client 216.73.216.199:20075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:39.902412 2026] [ssl:error] [pid 3862504:tid 3862504] (70014)End of file found: [client 216.73.216.199:57368] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:41.689567 2026] [ssl:error] [pid 3860319:tid 3860319] (EAI 2)Name or service not known: [client 144.76.19.72:35832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:41.689598 2026] [ssl:error] [pid 3860319:tid 3860319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:41.744621 2026] [ssl:error] [pid 3873805:tid 3873805] (EAI 2)Name or service not known: [client 144.76.19.72:35838] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:41.744664 2026] [ssl:error] [pid 3873805:tid 3873805] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:43.046743 2026] [authz_core:error] [pid 3876222:tid 3876222] [client 66.249.66.34:54487] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:29:43.049591 2026] [authz_core:error] [pid 3876222:tid 3876222] [client 66.249.66.34:54487] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:29:44.514367 2026] [ssl:error] [pid 3870342:tid 3870342] (70014)End of file found: [client 216.73.216.199:3582] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:44.804686 2026] [ssl:error] [pid 3868233:tid 3868233] (EAI 2)Name or service not known: [client 144.76.19.72:35844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:44.804716 2026] [ssl:error] [pid 3868233:tid 3868233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:44.860778 2026] [ssl:error] [pid 3868233:tid 3868233] (EAI 2)Name or service not known: [client 144.76.19.72:35850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:44.860804 2026] [ssl:error] [pid 3868233:tid 3868233] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:46.922822 2026] [ssl:error] [pid 3876428:tid 3876428] (70014)End of file found: [client 216.73.216.199:23449] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:47.895949 2026] [security2:error] [pid 3873805:tid 3873805] [client 85.208.96.209:35518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11245.0/prev_next,next.html"] [unique_id "amtt62uiGzR-rC39dAe9zQAAACY"]
[Thu Jul 30 16:29:47.913371 2026] [ssl:error] [pid 3874525:tid 3874525] (EAI 2)Name or service not known: [client 144.76.19.72:35852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:47.913397 2026] [ssl:error] [pid 3874525:tid 3874525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:47.969737 2026] [ssl:error] [pid 3876364:tid 3876364] (EAI 2)Name or service not known: [client 144.76.19.72:35866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:47.969764 2026] [ssl:error] [pid 3876364:tid 3876364] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:47.974087 2026] [core:error] [pid 3876496:tid 3876496] [client 20.100.169.152:50124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:47.974104 2026] [core:error] [pid 3876496:tid 3876496] [client 20.100.169.152:50124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:48.130481 2026] [ssl:error] [pid 3862504:tid 3862504] (70014)End of file found: [client 216.73.216.199:9172] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:49.018453 2026] [core:error] [pid 3857654:tid 3857654] [client 20.100.169.152:50068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:49.018498 2026] [core:error] [pid 3857654:tid 3857654] [client 20.100.169.152:50068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:49.591643 2026] [core:error] [pid 3875633:tid 3875633] [client 20.100.169.152:50049] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:49.591669 2026] [core:error] [pid 3875633:tid 3875633] [client 20.100.169.152:50049] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:49.847431 2026] [core:error] [pid 3857654:tid 3857654] [client 20.100.169.152:50141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:49.847456 2026] [core:error] [pid 3857654:tid 3857654] [client 20.100.169.152:50141] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.051342 2026] [core:error] [pid 3854541:tid 3854541] [client 20.100.169.152:50150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.051368 2026] [core:error] [pid 3854541:tid 3854541] [client 20.100.169.152:50150] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.115910 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:45717] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.115943 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:45717] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.216781 2026] [core:error] [pid 3876495:tid 3876495] [client 20.100.169.152:50157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.216804 2026] [core:error] [pid 3876495:tid 3876495] [client 20.100.169.152:50157] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.244225 2026] [ssl:error] [pid 3876496:tid 3876496] (70014)End of file found: [client 216.73.216.199:45999] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:50.345579 2026] [core:error] [pid 3862626:tid 3862626] [client 20.100.169.152:50096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.345601 2026] [core:error] [pid 3862626:tid 3862626] [client 20.100.169.152:50096] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.406166 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.406192 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.460981 2026] [core:error] [pid 3870342:tid 3870342] [client 20.100.169.152:50080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.461011 2026] [core:error] [pid 3870342:tid 3870342] [client 20.100.169.152:50080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.550108 2026] [core:error] [pid 3870224:tid 3870224] [client 20.100.169.152:50134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.550151 2026] [core:error] [pid 3870224:tid 3870224] [client 20.100.169.152:50134] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.639678 2026] [core:error] [pid 3854541:tid 3854541] [client 20.100.169.152:50116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.639706 2026] [core:error] [pid 3854541:tid 3854541] [client 20.100.169.152:50116] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.713985 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.714008 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50098] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.778347 2026] [core:error] [pid 3874393:tid 3874393] [client 20.100.169.152:50129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.778370 2026] [core:error] [pid 3874393:tid 3874393] [client 20.100.169.152:50129] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.833988 2026] [core:error] [pid 3874232:tid 3874232] [client 20.100.169.152:50069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.834017 2026] [core:error] [pid 3874232:tid 3874232] [client 20.100.169.152:50069] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.920810 2026] [core:error] [pid 3862503:tid 3862503] [client 20.100.169.152:50153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.920835 2026] [core:error] [pid 3862503:tid 3862503] [client 20.100.169.152:50153] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.979952 2026] [core:error] [pid 3874231:tid 3874231] [client 20.100.169.152:50066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:50.979977 2026] [core:error] [pid 3874231:tid 3874231] [client 20.100.169.152:50066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.023640 2026] [ssl:error] [pid 3876221:tid 3876221] (EAI 2)Name or service not known: [client 144.76.19.72:47420] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:51.023676 2026] [ssl:error] [pid 3876221:tid 3876221] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:51.046469 2026] [core:error] [pid 3870338:tid 3870338] [client 20.100.169.152:50167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.046493 2026] [core:error] [pid 3870338:tid 3870338] [client 20.100.169.152:50167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.081388 2026] [ssl:error] [pid 3870342:tid 3870342] (EAI 2)Name or service not known: [client 144.76.19.72:47430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:51.081418 2026] [ssl:error] [pid 3870342:tid 3870342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:51.130215 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.130240 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50159] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.194554 2026] [core:error] [pid 3870337:tid 3870337] [client 20.100.169.152:50085] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.194582 2026] [core:error] [pid 3870337:tid 3870337] [client 20.100.169.152:50085] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.336314 2026] [lsapi:warn] [pid 3876495:tid 3876495] [client 195.178.110.104:39922] [host stampys.eu] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n, referer: https://stampys.eu/
[Thu Jul 30 16:29:51.349418 2026] [core:error] [pid 3874393:tid 3874393] [client 20.100.169.152:50051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.349443 2026] [core:error] [pid 3874393:tid 3874393] [client 20.100.169.152:50051] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.456894 2026] [core:error] [pid 3873762:tid 3873762] [client 20.100.169.152:50070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.456926 2026] [core:error] [pid 3873762:tid 3873762] [client 20.100.169.152:50070] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.575508 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.575534 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50054] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.687389 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.687417 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.757044 2026] [core:error] [pid 3872058:tid 3872058] [client 20.100.169.152:50076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.757088 2026] [core:error] [pid 3872058:tid 3872058] [client 20.100.169.152:50076] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.838658 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.838687 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.906055 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.906092 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50062] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.998036 2026] [core:error] [pid 3873762:tid 3873762] [client 20.100.169.152:50061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:51.998059 2026] [core:error] [pid 3873762:tid 3873762] [client 20.100.169.152:50061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.081999 2026] [lsapi:warn] [pid 3869782:tid 3869782] [client 195.178.110.104:39950] [host stampys.eu] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n, referer: https://stampys.eu/
[Thu Jul 30 16:29:52.105094 2026] [core:error] [pid 3874389:tid 3874389] [client 20.100.169.152:50164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.105128 2026] [core:error] [pid 3874389:tid 3874389] [client 20.100.169.152:50164] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.185291 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.185330 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.243988 2026] [ssl:error] [pid 3864011:tid 3864011] (70014)End of file found: [client 216.73.216.199:2005] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:52.261416 2026] [core:error] [pid 3876221:tid 3876221] [client 20.100.169.152:50173] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.261442 2026] [core:error] [pid 3876221:tid 3876221] [client 20.100.169.152:50173] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.322465 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.322492 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50063] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.386204 2026] [core:error] [pid 3876428:tid 3876428] [client 20.100.169.152:50145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.386235 2026] [core:error] [pid 3876428:tid 3876428] [client 20.100.169.152:50145] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.463496 2026] [core:error] [pid 3855921:tid 3855921] [client 20.100.169.152:50118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.463527 2026] [core:error] [pid 3855921:tid 3855921] [client 20.100.169.152:50118] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.538414 2026] [core:error] [pid 3874298:tid 3874298] [client 20.100.169.152:50112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.538481 2026] [core:error] [pid 3874298:tid 3874298] [client 20.100.169.152:50112] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.635828 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:45726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.635858 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:45726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.697214 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.697241 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.814477 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.814500 2026] [core:error] [pid 3875592:tid 3875592] [client 20.100.169.152:50094] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.931049 2026] [core:error] [pid 3874298:tid 3874298] [client 20.100.169.152:50099] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:52.931092 2026] [core:error] [pid 3874298:tid 3874298] [client 20.100.169.152:50099] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.004342 2026] [core:error] [pid 3876429:tid 3876429] [client 20.100.169.152:50168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.004394 2026] [core:error] [pid 3876429:tid 3876429] [client 20.100.169.152:50168] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.069416 2026] [core:error] [pid 3875536:tid 3875536] [client 20.100.169.152:50172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.069444 2026] [core:error] [pid 3875536:tid 3875536] [client 20.100.169.152:50172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.135660 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:45312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.135684 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:45312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.203109 2026] [core:error] [pid 3869827:tid 3869827] [client 20.100.169.152:50067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.203140 2026] [core:error] [pid 3869827:tid 3869827] [client 20.100.169.152:50067] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.261265 2026] [core:error] [pid 3876494:tid 3876494] [client 20.100.169.152:50057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.261294 2026] [core:error] [pid 3876494:tid 3876494] [client 20.100.169.152:50057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.406201 2026] [core:error] [pid 3870261:tid 3870261] [client 20.100.169.152:50133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.406236 2026] [core:error] [pid 3870261:tid 3870261] [client 20.100.169.152:50133] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.444652 2026] [ssl:error] [pid 3876222:tid 3876222] (70014)End of file found: [client 216.73.216.199:44109] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:53.519231 2026] [core:error] [pid 3876429:tid 3876429] [client 20.100.169.152:50056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.519262 2026] [core:error] [pid 3876429:tid 3876429] [client 20.100.169.152:50056] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.584085 2026] [core:error] [pid 3875536:tid 3875536] [client 20.100.169.152:45719] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.584119 2026] [core:error] [pid 3875536:tid 3875536] [client 20.100.169.152:45719] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.707659 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.707698 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50160] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.792455 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.792480 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50167] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.917735 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.917759 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50074] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.986347 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:53.986385 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50128] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.060620 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:50078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.060650 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:50078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.122835 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.122861 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50097] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.137988 2026] [ssl:error] [pid 3861401:tid 3861401] (EAI 2)Name or service not known: [client 144.76.19.72:47442] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:54.138015 2026] [ssl:error] [pid 3861401:tid 3861401] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:54.194683 2026] [ssl:error] [pid 3856534:tid 3856534] (EAI 2)Name or service not known: [client 144.76.19.72:47452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:54.194739 2026] [ssl:error] [pid 3856534:tid 3856534] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:54.203195 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50065] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.203231 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50065] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.266241 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:50103] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.266268 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:50103] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.330383 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.330406 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50132] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.417243 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.417273 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.513135 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:45705] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.513159 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:45705] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.576154 2026] [core:error] [pid 3868079:tid 3868079] [client 20.100.169.152:50090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.576182 2026] [core:error] [pid 3868079:tid 3868079] [client 20.100.169.152:50090] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.686473 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.686510 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50050] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.883198 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:45312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.883222 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:45312] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.991110 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:54.991134 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50135] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.060980 2026] [cgi:error] [pid 3868233:tid 3868233] [client 20.151.221.234:43857] AH02812: stderr from /home/irlhsjnm/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:29:55.077318 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50143] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.077339 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50143] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.158175 2026] [core:error] [pid 3876162:tid 3876162] [client 20.100.169.152:50123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.158201 2026] [core:error] [pid 3876162:tid 3876162] [client 20.100.169.152:50123] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.236190 2026] [core:error] [pid 3870342:tid 3870342] [client 20.100.169.152:50100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.236216 2026] [core:error] [pid 3870342:tid 3870342] [client 20.100.169.152:50100] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.376902 2026] [core:error] [pid 3876495:tid 3876495] [client 20.100.169.152:45319] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.376929 2026] [core:error] [pid 3876495:tid 3876495] [client 20.100.169.152:45319] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.607323 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.607354 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50111] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.659184 2026] [core:error] [pid 3874231:tid 3874231] (13)Permission denied: [client 216.73.216.199:29787] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:64/irq
[Thu Jul 30 16:29:55.740353 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.740375 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.860762 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:45704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.860784 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:45704] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.941173 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:45710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:55.941195 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:45710] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.015887 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.015914 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.077508 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.077529 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50073] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.215424 2026] [core:error] [pid 3874387:tid 3874387] [client 20.100.169.152:50169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.215451 2026] [core:error] [pid 3874387:tid 3874387] [client 20.100.169.152:50169] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.262488 2026] [ssl:error] [pid 3874231:tid 3874231] (70014)End of file found: [client 216.73.216.199:29787] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:56.410277 2026] [core:error] [pid 3869886:tid 3869886] [client 20.100.169.152:45739] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.410312 2026] [core:error] [pid 3869886:tid 3869886] [client 20.100.169.152:45739] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.488496 2026] [security2:error] [pid 3861401:tid 3861401] [client 1.14.110.85:59192] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.highcleresyndicates.co.uk"] [uri "/"] [unique_id "amtt9M-k3_lggI5VfuuErAAAADM"]
[Thu Jul 30 16:29:56.866502 2026] [core:error] [pid 3869888:tid 3869888] [client 20.100.169.152:45733] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:56.866532 2026] [core:error] [pid 3869888:tid 3869888] [client 20.100.169.152:45733] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.088075 2026] [core:error] [pid 3876494:tid 3876494] [client 20.100.169.152:50125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.088102 2026] [core:error] [pid 3876494:tid 3876494] [client 20.100.169.152:50125] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.341460 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.341490 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50087] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.610667 2026] [core:error] [pid 3847784:tid 3847784] [client 20.100.169.152:50174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.610711 2026] [core:error] [pid 3847784:tid 3847784] [client 20.100.169.152:50174] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.612939 2026] [ssl:error] [pid 3877277:tid 3877277] (EAI 2)Name or service not known: [client 144.76.19.72:47454] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:57.612972 2026] [ssl:error] [pid 3877277:tid 3877277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:57.667814 2026] [ssl:error] [pid 3877277:tid 3877277] (EAI 2)Name or service not known: [client 144.76.19.72:47466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:29:57.667837 2026] [ssl:error] [pid 3877277:tid 3877277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:29:57.734431 2026] [core:error] [pid 3847784:tid 3847784] (13)Permission denied: [client 216.73.216.199:53875] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup12/device/subsystem/devices/device:21/eject
[Thu Jul 30 16:29:57.832999 2026] [core:error] [pid 3874387:tid 3874387] [client 20.100.169.152:45315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:57.833022 2026] [core:error] [pid 3874387:tid 3874387] [client 20.100.169.152:45315] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:58.502701 2026] [core:error] [pid 3875633:tid 3875633] [client 20.100.169.152:45759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:58.502731 2026] [core:error] [pid 3875633:tid 3875633] [client 20.100.169.152:45759] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:58.683419 2026] [ssl:error] [pid 3847784:tid 3847784] (70014)End of file found: [client 216.73.216.199:53875] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:29:58.730360 2026] [core:error] [pid 3876222:tid 3876222] [client 20.100.169.152:50158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:58.730389 2026] [core:error] [pid 3876222:tid 3876222] [client 20.100.169.152:50158] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:58.918670 2026] [core:error] [pid 3876222:tid 3876222] [client 20.100.169.152:50165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:58.918696 2026] [core:error] [pid 3876222:tid 3876222] [client 20.100.169.152:50165] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.322398 2026] [core:error] [pid 3874390:tid 3874390] [client 20.100.169.152:45700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.322426 2026] [core:error] [pid 3874390:tid 3874390] [client 20.100.169.152:45700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.631193 2026] [core:error] [pid 3868079:tid 3868079] [client 20.100.169.152:50122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.631217 2026] [core:error] [pid 3868079:tid 3868079] [client 20.100.169.152:50122] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.730198 2026] [core:error] [pid 3862565:tid 3862565] [client 20.100.169.152:45696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.730228 2026] [core:error] [pid 3862565:tid 3862565] [client 20.100.169.152:45696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.829157 2026] [core:error] [pid 3862565:tid 3862565] [client 20.100.169.152:45699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:29:59.829183 2026] [core:error] [pid 3862565:tid 3862565] [client 20.100.169.152:45699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:00.189444 2026] [ssl:error] [pid 3876222:tid 3876222] (70014)End of file found: [client 216.73.216.199:17817] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:00.702211 2026] [access_compat:error] [pid 3860319:tid 3860319] [client 45.158.164.139:40074] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:30:00.726568 2026] [ssl:error] [pid 3874177:tid 3874177] (EAI 2)Name or service not known: [client 144.76.19.72:31584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:00.726598 2026] [ssl:error] [pid 3874177:tid 3874177] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:00.780187 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:31598] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:00.780225 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:00.801340 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:45327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:00.801388 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:45327] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:01.163684 2026] [authz_core:error] [pid 3857654:tid 3857654] [client 66.249.66.33:54229] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:30:01.166400 2026] [authz_core:error] [pid 3857654:tid 3857654] [client 66.249.66.33:54229] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:30:01.320963 2026] [authz_core:error] [pid 3857654:tid 3857654] [client 66.249.66.33:54229] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:30:01.323636 2026] [authz_core:error] [pid 3857654:tid 3857654] [client 66.249.66.33:54229] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:30:01.609883 2026] [ssl:error] [pid 3877422:tid 3877422] (70014)End of file found: [client 216.73.216.199:55454] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:01.663578 2026] [core:error] [pid 3874231:tid 3874231] [client 20.100.169.152:45749] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:01.663603 2026] [core:error] [pid 3874231:tid 3874231] [client 20.100.169.152:45749] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:01.799917 2026] [core:error] [pid 3877276:tid 3877276] [client 20.100.169.152:50142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:01.799948 2026] [core:error] [pid 3877276:tid 3877276] [client 20.100.169.152:50142] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:02.079717 2026] [core:error] [pid 3870337:tid 3870337] [client 20.100.169.152:50166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:02.079747 2026] [core:error] [pid 3870337:tid 3870337] [client 20.100.169.152:50166] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:02.363768 2026] [core:error] [pid 3876496:tid 3876496] [client 20.100.169.152:50048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:02.363796 2026] [core:error] [pid 3876496:tid 3876496] [client 20.100.169.152:50048] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:02.455147 2026] [security2:error] [pid 3875634:tid 3875634] [client 114.119.142.20:38715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~102,17/request_format~html"] [unique_id "amtt-tlQXR0l8_VEXqC_iwAAACw"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E102
[Thu Jul 30 16:30:02.471839 2026] [security2:error] [pid 3876429:tid 3876429] [client 43.134.54.246:42740] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtt-mKHveWcWM9jyuvxmQAAADI"]
[Thu Jul 30 16:30:02.603505 2026] [core:error] [pid 3870337:tid 3870337] [client 20.100.169.152:45331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:02.603532 2026] [core:error] [pid 3870337:tid 3870337] [client 20.100.169.152:45331] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:03.448592 2026] [security2:error] [pid 3860319:tid 3860319] [client 114.119.142.20:38727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572912000/cat_ids~102,17/request_format~html"] [unique_id "amtt--mBAf33qa8jHLNgOQAAABE"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E1572912000/request_format%7Ehtml/cat_ids%7E102
[Thu Jul 30 16:30:03.473800 2026] [core:error] [pid 3829432:tid 3829432] [client 20.100.169.152:50136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:03.473827 2026] [core:error] [pid 3829432:tid 3829432] [client 20.100.169.152:50136] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:03.718918 2026] [security2:error] [pid 3868233:tid 3868233] [client 85.208.96.211:63170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/rtleur6/utk-cultures-and-civilizations-courses"] [unique_id "amtt-xzSF5v_YHDJLjmvrwAAADg"]
[Thu Jul 30 16:30:03.920874 2026] [ssl:error] [pid 3874389:tid 3874389] (EAI 2)Name or service not known: [client 144.76.19.72:31602] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:03.920908 2026] [ssl:error] [pid 3874389:tid 3874389] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:03.978268 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:31614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:03.978298 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:04.110383 2026] [ssl:error] [pid 3870342:tid 3870342] (70014)End of file found: [client 216.73.216.199:40378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:04.195222 2026] [core:error] [pid 3874392:tid 3874392] [client 20.100.169.152:45346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:04.195259 2026] [core:error] [pid 3874392:tid 3874392] [client 20.100.169.152:45346] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:04.503627 2026] [security2:error] [pid 3876495:tid 3876495] [client 47.77.239.161:24169] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtt_OE55ZKJw0ucLKQvawAAAEQ"]
[Thu Jul 30 16:30:04.503684 2026] [security2:error] [pid 3876495:tid 3876495] [client 47.77.239.161:24169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtt_OE55ZKJw0ucLKQvawAAAEQ"]
[Thu Jul 30 16:30:04.503969 2026] [security2:error] [pid 3876495:tid 3876495] [client 47.77.239.161:24169] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtt_OE55ZKJw0ucLKQvawAAAEQ"]
[Thu Jul 30 16:30:04.623949 2026] [security2:error] [pid 3869827:tid 3869827] [client 20.215.186.36:49224] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bumpyburp.hatch-works.com"] [uri "/wp-config.php"] [unique_id "amtt_DP1SjSUp3p6uDImWgAAABQ"]
[Thu Jul 30 16:30:04.624373 2026] [security2:error] [pid 3869827:tid 3869827] [client 20.215.186.36:49224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bumpyburp.hatch-works.com"] [uri "/wp-config.php"] [unique_id "amtt_DP1SjSUp3p6uDImWgAAABQ"]
[Thu Jul 30 16:30:04.842297 2026] [security2:error] [pid 3869827:tid 3869827] [client 20.215.186.36:49224] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "bumpyburp.hatch-works.com"] [uri "/index.php"] [unique_id "amtt_DP1SjSUp3p6uDImWgAAABQ"]
[Thu Jul 30 16:30:05.138827 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:05.138855 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50121] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:05.516574 2026] [ssl:error] [pid 3876429:tid 3876429] (70014)End of file found: [client 216.73.216.199:25424] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:05.656705 2026] [security2:error] [pid 3870337:tid 3870337] [client 43.134.54.246:45826] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.purple-childcare.co.uk"] [uri "/"] [unique_id "amtt_VBQPy6tbSPa4e55pwAAAEE"], referer: http://www.purple-childcare.co.uk
[Thu Jul 30 16:30:05.668633 2026] [authz_core:error] [pid 3877421:tid 3877421] [client 169.58.39.191:62651] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 16:30:05.952347 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:05.952371 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50071] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:06.307940 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:50091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:06.307973 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:50091] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:07.035630 2026] [ssl:error] [pid 3870305:tid 3870305] (EAI 2)Name or service not known: [client 144.76.19.72:31616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:07.035663 2026] [ssl:error] [pid 3870305:tid 3870305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:07.090132 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:31620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:07.090160 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:07.163809 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:45736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:07.163846 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:45736] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:07.607714 2026] [security2:error] [pid 3855921:tid 3855921] [client 186.189.92.1:7322] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtt_12rqCUrZaU22bZ2UAAAABc"]
[Thu Jul 30 16:30:07.607770 2026] [security2:error] [pid 3855921:tid 3855921] [client 186.189.92.1:7322] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtt_12rqCUrZaU22bZ2UAAAABc"]
[Thu Jul 30 16:30:07.608048 2026] [security2:error] [pid 3855921:tid 3855921] [client 186.189.92.1:7322] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtt_12rqCUrZaU22bZ2UAAAABc"]
[Thu Jul 30 16:30:08.248424 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:08.248449 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50152] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:08.352748 2026] [authz_core:error] [pid 3860319:tid 3860319] [client 169.58.39.191:63740] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com
[Thu Jul 30 16:30:09.469334 2026] [core:error] [pid 3874393:tid 3874393] [client 20.63.98.115:20976] AH00037: Symbolic link not allowed or link target not accessible: /home/winterb/public_html/wp-config.php
[Thu Jul 30 16:30:09.609084 2026] [core:error] [pid 3829432:tid 3829432] [client 20.100.169.152:45702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:09.609114 2026] [core:error] [pid 3829432:tid 3829432] [client 20.100.169.152:45702] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:10.146599 2026] [ssl:error] [pid 3862565:tid 3862565] (EAI 2)Name or service not known: [client 144.76.19.72:59296] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:10.146632 2026] [ssl:error] [pid 3862565:tid 3862565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:10.149492 2026] [ssl:error] [pid 3877231:tid 3877231] (70014)End of file found: [client 216.73.216.199:61502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:10.199509 2026] [ssl:error] [pid 3869355:tid 3869355] (EAI 2)Name or service not known: [client 144.76.19.72:59308] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:10.199541 2026] [ssl:error] [pid 3869355:tid 3869355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:10.675008 2026] [security2:error] [pid 3857654:tid 3857654] [client 37.237.237.3:34288] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuAgPeX1esuFuckonf1wAAAAE"]
[Thu Jul 30 16:30:10.675055 2026] [security2:error] [pid 3857654:tid 3857654] [client 37.237.237.3:34288] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuAgPeX1esuFuckonf1wAAAAE"]
[Thu Jul 30 16:30:10.675319 2026] [security2:error] [pid 3857654:tid 3857654] [client 37.237.237.3:34288] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtuAgPeX1esuFuckonf1wAAAAE"]
[Thu Jul 30 16:30:11.156774 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:50086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.156801 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:50086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.467034 2026] [core:error] [pid 3870343:tid 3870343] [client 20.100.169.152:50148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.467059 2026] [core:error] [pid 3870343:tid 3870343] [client 20.100.169.152:50148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.740139 2026] [core:error] [pid 3874392:tid 3874392] [client 20.100.169.152:45708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.740164 2026] [core:error] [pid 3874392:tid 3874392] [client 20.100.169.152:45708] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.837001 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.837029 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50162] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.884097 2026] [authz_core:error] [pid 3869355:tid 3869355] [client 169.58.39.191:65004] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 16:30:11.901968 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:50148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:11.901997 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:50148] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.048175 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.048200 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:50088] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.220982 2026] [core:error] [pid 3872058:tid 3872058] [client 20.100.169.152:50139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.221005 2026] [core:error] [pid 3872058:tid 3872058] [client 20.100.169.152:50139] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.405171 2026] [core:error] [pid 3870261:tid 3870261] [client 20.100.169.152:50082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.405199 2026] [core:error] [pid 3870261:tid 3870261] [client 20.100.169.152:50082] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.462526 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.462553 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.549373 2026] [core:error] [pid 3829432:tid 3829432] [client 20.100.169.152:45374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.549399 2026] [core:error] [pid 3829432:tid 3829432] [client 20.100.169.152:45374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.607968 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.607994 2026] [core:error] [pid 3870303:tid 3870303] [client 20.100.169.152:50060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.700549 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:45370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.700571 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:45370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.709483 2026] [security2:error] [pid 3854541:tid 3854541] [client 185.191.171.1:22870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "firstclassbkltd.co.uk"] [uri "/robots.txt"] [unique_id "amtuBHitGzn6x5ItM-G01gAAACs"]
[Thu Jul 30 16:30:12.768547 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:45374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.768572 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:45374] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.839430 2026] [core:error] [pid 3875591:tid 3875591] [client 20.100.169.152:45328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.839460 2026] [core:error] [pid 3875591:tid 3875591] [client 20.100.169.152:45328] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.918490 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:50107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.918514 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:50107] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.929574 2026] [security2:error] [pid 3862565:tid 3862565] [client 85.208.96.203:51942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "firstclassbkltd.co.uk"] [uri "/"] [unique_id "amtuBHdr3sppxkPEFAu2XQAAABw"]
[Thu Jul 30 16:30:12.992402 2026] [core:error] [pid 3874390:tid 3874390] [client 20.100.169.152:50064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:12.992429 2026] [core:error] [pid 3874390:tid 3874390] [client 20.100.169.152:50064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.168631 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.168659 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:50154] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.237183 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:45332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.237211 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:45332] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.254216 2026] [ssl:error] [pid 3870303:tid 3870303] (EAI 2)Name or service not known: [client 144.76.19.72:59318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:13.254243 2026] [ssl:error] [pid 3870303:tid 3870303] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:13.300393 2026] [core:error] [pid 3874387:tid 3874387] [client 20.100.169.152:50081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.300420 2026] [core:error] [pid 3874387:tid 3874387] [client 20.100.169.152:50081] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.309899 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:59320] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:13.309923 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:13.358952 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:50105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.358973 2026] [core:error] [pid 3875631:tid 3875631] [client 20.100.169.152:50105] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.442768 2026] [core:error] [pid 3875591:tid 3875591] [client 20.100.169.152:50175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.442789 2026] [core:error] [pid 3875591:tid 3875591] [client 20.100.169.152:50175] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.518706 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:45756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.518731 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:45756] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.591120 2026] [core:error] [pid 3874385:tid 3874385] [client 20.100.169.152:50053] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.591148 2026] [core:error] [pid 3874385:tid 3874385] [client 20.100.169.152:50053] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.662532 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:45722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.662557 2026] [core:error] [pid 3876493:tid 3876493] [client 20.100.169.152:45722] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.737346 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:45725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.737368 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:45725] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.806254 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.806290 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50077] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.931561 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:13.931585 2026] [core:error] [pid 3864011:tid 3864011] [client 20.100.169.152:50083] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.003333 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:50117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.003357 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:50117] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.094388 2026] [core:error] [pid 3869782:tid 3869782] [client 20.100.169.152:50108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.094416 2026] [core:error] [pid 3869782:tid 3869782] [client 20.100.169.152:50108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.161205 2026] [core:error] [pid 3854491:tid 3854491] [client 20.100.169.152:45701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.161233 2026] [core:error] [pid 3854491:tid 3854491] [client 20.100.169.152:45701] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.225272 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:45338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.225297 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:45338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.290376 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:45712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.290403 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:45712] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.348400 2026] [core:error] [pid 3870343:tid 3870343] [client 20.100.169.152:45333] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.348446 2026] [core:error] [pid 3870343:tid 3870343] [client 20.100.169.152:45333] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.447042 2026] [core:error] [pid 3869782:tid 3869782] [client 20.100.169.152:45731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.447102 2026] [core:error] [pid 3869782:tid 3869782] [client 20.100.169.152:45731] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.506518 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.506546 2026] [core:error] [pid 3873761:tid 3873761] [client 20.100.169.152:50060] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.568356 2026] [core:error] [pid 3854491:tid 3854491] [client 20.100.169.152:50059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.568378 2026] [core:error] [pid 3854491:tid 3854491] [client 20.100.169.152:50059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.626657 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.626680 2026] [core:error] [pid 3861401:tid 3861401] [client 20.100.169.152:50104] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.667948 2026] [security2:error] [pid 3869886:tid 3869886] [client 185.191.171.16:38328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "firstclassbkltd.co.uk"] [uri "/sitemap.xml"] [unique_id "amtuBvN4zdQqRyNv61UBGAAAACI"]
[Thu Jul 30 16:30:14.689600 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:50163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.689627 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:50163] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.748854 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:45363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.748884 2026] [core:error] [pid 3870306:tid 3870306] [client 20.100.169.152:45363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.833969 2026] [core:error] [pid 3872854:tid 3872854] [client 20.100.169.152:45336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.833999 2026] [core:error] [pid 3872854:tid 3872854] [client 20.100.169.152:45336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.910753 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.910780 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:50114] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.972803 2026] [core:error] [pid 3869782:tid 3869782] [client 20.100.169.152:33113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:14.972823 2026] [core:error] [pid 3869782:tid 3869782] [client 20.100.169.152:33113] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.065454 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:50151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.065478 2026] [core:error] [pid 3877421:tid 3877421] [client 20.100.169.152:50151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.139451 2026] [core:error] [pid 3869886:tid 3869886] [client 20.100.169.152:45744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.139475 2026] [core:error] [pid 3869886:tid 3869886] [client 20.100.169.152:45744] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.229673 2026] [core:error] [pid 3872854:tid 3872854] [client 20.100.169.152:45730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.229699 2026] [core:error] [pid 3872854:tid 3872854] [client 20.100.169.152:45730] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.293559 2026] [core:error] [pid 3869355:tid 3869355] [client 20.100.169.152:50110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.293585 2026] [core:error] [pid 3869355:tid 3869355] [client 20.100.169.152:50110] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.361699 2026] [core:error] [pid 3870344:tid 3870344] [client 20.100.169.152:45738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.361722 2026] [core:error] [pid 3870344:tid 3870344] [client 20.100.169.152:45738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.422671 2026] [core:error] [pid 3855921:tid 3855921] [client 20.100.169.152:50130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.422698 2026] [core:error] [pid 3855921:tid 3855921] [client 20.100.169.152:50130] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.455227 2026] [authz_core:error] [pid 3854491:tid 3854491] [client 169.58.39.191:49776] AH01630: client denied by server configuration: /home/retrodis/public_html/wp-includes/widgets/error_log, referer: binance.com
[Thu Jul 30 16:30:15.478371 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:45699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.478397 2026] [core:error] [pid 3856534:tid 3856534] [client 20.100.169.152:45699] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.556627 2026] [core:error] [pid 3877231:tid 3877231] [client 20.100.169.152:45746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.556657 2026] [core:error] [pid 3877231:tid 3877231] [client 20.100.169.152:45746] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.619885 2026] [core:error] [pid 3875634:tid 3875634] [client 20.100.169.152:50092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.619912 2026] [core:error] [pid 3875634:tid 3875634] [client 20.100.169.152:50092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.679536 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:45715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.679571 2026] [core:error] [pid 3868233:tid 3868233] [client 20.100.169.152:45715] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.739386 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:45714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.739408 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:45714] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.827149 2026] [core:error] [pid 3869355:tid 3869355] [client 20.100.169.152:45747] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.827176 2026] [core:error] [pid 3869355:tid 3869355] [client 20.100.169.152:45747] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.891481 2026] [core:error] [pid 3870344:tid 3870344] [client 20.100.169.152:50079] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:15.891505 2026] [core:error] [pid 3870344:tid 3870344] [client 20.100.169.152:50079] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.041113 2026] [security2:error] [pid 3870305:tid 3870305] [client 216.73.216.199:38060] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-vz/tuned.conf"] [unique_id "amtuCMBzVWV3NqBkKlgzOwAAAD0"]
[Thu Jul 30 16:30:16.041343 2026] [security2:error] [pid 3870305:tid 3870305] [client 216.73.216.199:38060] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-vz/tuned.conf"] [unique_id "amtuCMBzVWV3NqBkKlgzOwAAAD0"]
[Thu Jul 30 16:30:16.041587 2026] [security2:error] [pid 3870305:tid 3870305] [client 216.73.216.199:38060] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/lib/tuned/cloudlinux-vz/tuned.conf"] [unique_id "amtuCMBzVWV3NqBkKlgzOwAAAD0"]
[Thu Jul 30 16:30:16.056007 2026] [core:error] [pid 3862503:tid 3862503] [client 20.100.169.152:45347] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.056029 2026] [core:error] [pid 3862503:tid 3862503] [client 20.100.169.152:45347] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.159438 2026] [core:error] [pid 3855921:tid 3855921] [client 20.100.169.152:45368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.159468 2026] [core:error] [pid 3855921:tid 3855921] [client 20.100.169.152:45368] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.303750 2026] [core:error] [pid 3877231:tid 3877231] [client 20.100.169.152:45325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.303775 2026] [core:error] [pid 3877231:tid 3877231] [client 20.100.169.152:45325] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.365912 2026] [ssl:error] [pid 3872854:tid 3872854] (EAI 2)Name or service not known: [client 144.76.19.72:59334] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:16.365942 2026] [ssl:error] [pid 3872854:tid 3872854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:16.396416 2026] [core:error] [pid 3875634:tid 3875634] [client 20.100.169.152:33119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.396441 2026] [core:error] [pid 3875634:tid 3875634] [client 20.100.169.152:33119] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.418776 2026] [ssl:error] [pid 3869886:tid 3869886] (EAI 2)Name or service not known: [client 144.76.19.72:59350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:16.418809 2026] [ssl:error] [pid 3869886:tid 3869886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:16.486557 2026] [core:error] [pid 3857654:tid 3857654] [client 20.100.169.152:45750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.486603 2026] [core:error] [pid 3857654:tid 3857654] [client 20.100.169.152:45750] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.549769 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:45724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.549794 2026] [core:error] [pid 3860319:tid 3860319] [client 20.100.169.152:45724] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.634231 2026] [core:error] [pid 3870344:tid 3870344] [client 20.100.169.152:45371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:16.634255 2026] [core:error] [pid 3870344:tid 3870344] [client 20.100.169.152:45371] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:30:18.450129 2026] [ssl:error] [pid 3870305:tid 3870305] (70014)End of file found: [client 216.73.216.199:38060] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:19.472278 2026] [ssl:error] [pid 3870343:tid 3870343] (EAI 2)Name or service not known: [client 144.76.19.72:59354] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:19.472319 2026] [ssl:error] [pid 3870343:tid 3870343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:19.528972 2026] [ssl:error] [pid 3876222:tid 3876222] (EAI 2)Name or service not known: [client 144.76.19.72:59370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:19.529019 2026] [ssl:error] [pid 3876222:tid 3876222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:20.263635 2026] [ssl:error] [pid 3875634:tid 3875634] (70014)End of file found: [client 216.73.216.199:59403] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:22.376621 2026] [security2:error] [pid 3873805:tid 3873805] [client 216.73.216.199:13259] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-ftp.ini"] [unique_id "amtuDmuiGzR-rC39dAe93QAAACY"]
[Thu Jul 30 16:30:22.376905 2026] [security2:error] [pid 3873805:tid 3873805] [client 216.73.216.199:13259] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-ftp.ini"] [unique_id "amtuDmuiGzR-rC39dAe93QAAACY"]
[Thu Jul 30 16:30:22.377153 2026] [security2:error] [pid 3873805:tid 3873805] [client 216.73.216.199:13259] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php81/root/etc/php.d/20-ftp.ini"] [unique_id "amtuDmuiGzR-rC39dAe93QAAACY"]
[Thu Jul 30 16:30:22.583139 2026] [ssl:error] [pid 3868079:tid 3868079] (EAI 2)Name or service not known: [client 144.76.19.72:58472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:22.583177 2026] [ssl:error] [pid 3868079:tid 3868079] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:22.641107 2026] [ssl:error] [pid 3858339:tid 3858339] (EAI 2)Name or service not known: [client 144.76.19.72:58484] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:22.641136 2026] [ssl:error] [pid 3858339:tid 3858339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:23.287719 2026] [core:error] [pid 3873805:tid 3873805] (13)Permission denied: [client 216.73.216.199:13259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-64/red_zone
[Thu Jul 30 16:30:24.216370 2026] [core:error] [pid 3873805:tid 3873805] (13)Permission denied: [client 216.73.216.199:13259] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/ext4_io_end/store_user
[Thu Jul 30 16:30:25.699440 2026] [ssl:error] [pid 3869827:tid 3869827] (EAI 2)Name or service not known: [client 144.76.19.72:58500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:25.699500 2026] [ssl:error] [pid 3869827:tid 3869827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:25.725076 2026] [ssl:error] [pid 3873805:tid 3873805] (70014)End of file found: [client 216.73.216.199:13259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:25.752817 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:58506] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:25.752862 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:26.230836 2026] [ssl:error] [pid 3874393:tid 3874393] (70014)End of file found: [client 216.73.216.199:22559] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:28.150738 2026] [ssl:error] [pid 3870337:tid 3870337] (70014)End of file found: [client 216.73.216.199:5903] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:28.843836 2026] [ssl:error] [pid 3872801:tid 3872801] (EAI 2)Name or service not known: [client 144.76.19.72:58512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:28.843876 2026] [ssl:error] [pid 3872801:tid 3872801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:28.903686 2026] [ssl:error] [pid 3869782:tid 3869782] (EAI 2)Name or service not known: [client 144.76.19.72:58522] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:28.903737 2026] [ssl:error] [pid 3869782:tid 3869782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:31.474760 2026] [ssl:error] [pid 3870338:tid 3870338] (70014)End of file found: [client 216.73.216.199:12798] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:31.993391 2026] [ssl:error] [pid 3877231:tid 3877231] (EAI 2)Name or service not known: [client 144.76.19.72:61036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:31.993428 2026] [ssl:error] [pid 3877231:tid 3877231] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:32.045508 2026] [ssl:error] [pid 3869827:tid 3869827] (EAI 2)Name or service not known: [client 144.76.19.72:61046] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:32.045538 2026] [ssl:error] [pid 3869827:tid 3869827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:32.378854 2026] [ssl:error] [pid 3856534:tid 3856534] (70014)End of file found: [client 216.73.216.199:57877] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:34.511745 2026] [ssl:error] [pid 3860319:tid 3860319] (70014)End of file found: [client 216.73.216.199:47550] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:35.100296 2026] [ssl:error] [pid 3875634:tid 3875634] (EAI 2)Name or service not known: [client 144.76.19.72:61062] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:35.100353 2026] [ssl:error] [pid 3875634:tid 3875634] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:35.171966 2026] [ssl:error] [pid 3875631:tid 3875631] (EAI 2)Name or service not known: [client 144.76.19.72:61068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:35.172035 2026] [ssl:error] [pid 3875631:tid 3875631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:37.107812 2026] [security2:error] [pid 3870342:tid 3870342] [client 74.7.227.153:38228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "auroravation.com"] [uri "/"] [unique_id "amtuHU8-eAHRc_jiv6YERgAAAEg"], referer: https://sergechel.info
[Thu Jul 30 16:30:37.537868 2026] [ssl:error] [pid 3862503:tid 3862503] (70014)End of file found: [client 216.73.216.199:13704] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:38.245962 2026] [ssl:error] [pid 3874525:tid 3874525] (EAI 2)Name or service not known: [client 144.76.19.72:61076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:38.245993 2026] [ssl:error] [pid 3874525:tid 3874525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:38.299594 2026] [ssl:error] [pid 3872801:tid 3872801] (EAI 2)Name or service not known: [client 144.76.19.72:61084] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:38.299639 2026] [ssl:error] [pid 3872801:tid 3872801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:38.322367 2026] [security2:error] [pid 3870305:tid 3870305] [client 47.128.113.30:18528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/robots.txt"] [unique_id "amtuHsBzVWV3NqBkKlgzRQAAAD0"]
[Thu Jul 30 16:30:38.373827 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php
[Thu Jul 30 16:30:38.373930 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.php5
[Thu Jul 30 16:30:38.374110 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/cgi-bin.bak/index.phtml
[Thu Jul 30 16:30:38.374282 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php
[Thu Jul 30 16:30:38.374383 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.php5
[Thu Jul 30 16:30:38.374541 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/sym404.bak/index.phtml
[Thu Jul 30 16:30:38.374696 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php
[Thu Jul 30 16:30:38.374761 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.php5
[Thu Jul 30 16:30:38.374918 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/lDdgKP.bak/index.phtml
[Thu Jul 30 16:30:38.375039 2026] [authz_core:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01630: client denied by server configuration: /home/clientseodata/public_html/error_log
[Thu Jul 30 16:30:38.375105 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php
[Thu Jul 30 16:30:38.375187 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.php5
[Thu Jul 30 16:30:38.375352 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/I6D80S.bak/index.phtml
[Thu Jul 30 16:30:38.375501 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php
[Thu Jul 30 16:30:38.375572 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.php5
[Thu Jul 30 16:30:38.375734 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/css.bak/index.phtml
[Thu Jul 30 16:30:38.375885 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php
[Thu Jul 30 16:30:38.375950 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.php5
[Thu Jul 30 16:30:38.376116 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/LLlLTq.bak/index.phtml
[Thu Jul 30 16:30:38.376907 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php
[Thu Jul 30 16:30:38.376972 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.php5
[Thu Jul 30 16:30:38.377137 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/Ptgh1n.bak/index.phtml
[Thu Jul 30 16:30:38.377308 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php
[Thu Jul 30 16:30:38.377380 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.php5
[Thu Jul 30 16:30:38.377537 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/yanz.bak/index.phtml
[Thu Jul 30 16:30:38.378017 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php
[Thu Jul 30 16:30:38.378101 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.php5
[Thu Jul 30 16:30:38.378260 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/css/index.phtml
[Thu Jul 30 16:30:38.378420 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php
[Thu Jul 30 16:30:38.378485 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.php5
[Thu Jul 30 16:30:38.378642 2026] [access_compat:error] [pid 3877422:tid 3877422] [client 173.239.218.117:40153] AH01797: client denied by server configuration: /home/clientseodata/public_html/WndFFw.bak/index.phtml
[Thu Jul 30 16:30:38.747653 2026] [core:error] [pid 3872854:tid 3872854] (13)Permission denied: [client 216.73.216.199:19353] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/gssproxy.pid
[Thu Jul 30 16:30:39.371566 2026] [ssl:error] [pid 3872854:tid 3872854] (70014)End of file found: [client 216.73.216.199:19353] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:41.354750 2026] [ssl:error] [pid 3876222:tid 3876222] (EAI 2)Name or service not known: [client 144.76.19.72:34698] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:41.354785 2026] [ssl:error] [pid 3876222:tid 3876222] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:41.406155 2026] [ssl:error] [pid 3864008:tid 3864008] (EAI 2)Name or service not known: [client 144.76.19.72:34710] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:41.406186 2026] [ssl:error] [pid 3864008:tid 3864008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:41.785393 2026] [ssl:error] [pid 3877231:tid 3877231] (70014)End of file found: [client 216.73.216.199:47622] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:42.044225 2026] [security2:error] [pid 3861401:tid 3861401] [client 20.63.98.115:32390] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "dbstart.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtuIs-k3_lggI5VfuuE0gAAADM"]
[Thu Jul 30 16:30:42.044430 2026] [security2:error] [pid 3861401:tid 3861401] [client 20.63.98.115:32390] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dbstart.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtuIs-k3_lggI5VfuuE0gAAADM"]
[Thu Jul 30 16:30:42.044897 2026] [security2:error] [pid 3861401:tid 3861401] [client 20.63.98.115:32390] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "dbstart.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtuIs-k3_lggI5VfuuE0gAAADM"]
[Thu Jul 30 16:30:42.999389 2026] [ssl:error] [pid 3862503:tid 3862503] (70014)End of file found: [client 216.73.216.199:3532] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:44.312322 2026] [lsapi:warn] [pid 3862626:tid 3862626] [client 195.178.110.104:13178] [host stampys.eu] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n, referer: https://stampys.eu/
[Thu Jul 30 16:30:44.459641 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:34722] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:44.459667 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:44.510806 2026] [ssl:error] [pid 3875536:tid 3875536] (EAI 2)Name or service not known: [client 144.76.19.72:34724] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:44.510846 2026] [ssl:error] [pid 3875536:tid 3875536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:44.927739 2026] [core:error] [pid 3875631:tid 3875631] (13)Permission denied: [client 216.73.216.199:61376] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup5/device/subsystem/devices/device:08/eject
[Thu Jul 30 16:30:44.955117 2026] [lsapi:warn] [pid 3879731:tid 3879731] [client 195.178.110.104:13200] [host stampys.eu] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n, referer: https://stampys.eu/
[Thu Jul 30 16:30:45.847557 2026] [ssl:error] [pid 3876222:tid 3876222] (70014)End of file found: [client 216.73.216.199:59135] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:46.451702 2026] [core:crit] [pid 3875631:tid 3875631] (13)Permission denied: [client 216.73.216.199:61376] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/eula/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/eula/' is executable
[Thu Jul 30 16:30:46.451754 2026] [core:crit] [pid 3875631:tid 3875631] (13)Permission denied: [client 216.73.216.199:61376] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/geo/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/geo/' is executable
[Thu Jul 30 16:30:46.451801 2026] [core:crit] [pid 3875631:tid 3875631] (13)Permission denied: [client 216.73.216.199:61376] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/realtime-av-conf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/realtime-av-conf/' is executable
[Thu Jul 30 16:30:46.451839 2026] [core:crit] [pid 3875631:tid 3875631] (13)Permission denied: [client 216.73.216.199:61376] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/wp-rules/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/imunify360/files/wp-rules/' is executable
[Thu Jul 30 16:30:47.573998 2026] [ssl:error] [pid 3879780:tid 3879780] (EAI 2)Name or service not known: [client 144.76.19.72:34734] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:47.574045 2026] [ssl:error] [pid 3879780:tid 3879780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:47.630937 2026] [ssl:error] [pid 3879779:tid 3879779] (EAI 2)Name or service not known: [client 144.76.19.72:34750] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:47.630977 2026] [ssl:error] [pid 3879779:tid 3879779] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:47.849450 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:61376] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:48.933609 2026] [cgi:error] [pid 3874389:tid 3874389] [client 136.226.167.4:42111] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 16:30:49.206715 2026] [access_compat:error] [pid 3872801:tid 3872801] [client 172.213.10.64:46837] AH01797: client denied by server configuration: /home/gangway/public_html/wp-content/uploads/wpcf7_uploads/
[Thu Jul 30 16:30:49.771679 2026] [ssl:error] [pid 3858339:tid 3858339] (70014)End of file found: [client 216.73.216.199:17672] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:50.690664 2026] [ssl:error] [pid 3862565:tid 3862565] (EAI 2)Name or service not known: [client 144.76.19.72:37610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:50.690704 2026] [ssl:error] [pid 3862565:tid 3862565] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:50.744812 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:37616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:50.744845 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:51.600200 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/openeshop/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.600832 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/alegro/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.609324 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp55/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.624902 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/bludit/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.647814 2026] [access_compat:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/webasyst/
[Thu Jul 30 16:30:51.648777 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/carbon/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.653620 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp49/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.680802 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/bbpress/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.681456 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp62/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.690756 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/sugar/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.701007 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/koken/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.704487 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/zen/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.714560 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/piwik/
[Thu Jul 30 16:30:51.813035 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/leafpub/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.818926 2026] [access_compat:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01797: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/rainloop/
[Thu Jul 30 16:30:51.829609 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/toaster/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.842927 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/chyrp/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.843611 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/drupal9/
[Thu Jul 30 16:30:51.844292 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/magento2/.htaccess: Invalid command 'SetEnv', perhaps misspelled or defined by a module not included in the server configuration
[Thu Jul 30 16:30:51.864483 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp67/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.913511 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/selfoss/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.923113 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp53/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.938139 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp63/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.960771 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/cube/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.966493 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/procwire/
[Thu Jul 30 16:30:51.967092 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp50/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:51.989630 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/atlantis/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.003812 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp58/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.014505 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp51/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.070873 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp64/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.104659 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp61/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.132637 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp54/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.133543 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/igalerie/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.141683 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/spip/
[Thu Jul 30 16:30:52.144846 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp68/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.158990 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/nukeviet/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.228719 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/pydio/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.229315 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/anchor/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.244473 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/drupal89/
[Thu Jul 30 16:30:52.247644 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp65/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.294035 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp57/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.354877 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/drupal8/
[Thu Jul 30 16:30:52.387931 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/yourls/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.391848 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/classicpress/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.431954 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/phpwcms/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.449956 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/drupalcms/
[Thu Jul 30 16:30:52.453975 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp69/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.457000 2026] [authz_core:error] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] AH01630: client denied by server configuration: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/drupal10/
[Thu Jul 30 16:30:52.457700 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp52/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.498970 2026] [security2:error] [pid 3876493:tid 3876493] [client 20.215.186.36:49916] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bumpyburp.hatch-works.com"] [uri "/var/log/error.log"] [unique_id "amtuLB9ZFyymmyc2TLTaeAAAADk"]
[Thu Jul 30 16:30:52.499608 2026] [security2:error] [pid 3876493:tid 3876493] [client 20.215.186.36:49916] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bumpyburp.hatch-works.com"] [uri "/var/log/error.log"] [unique_id "amtuLB9ZFyymmyc2TLTaeAAAADk"]
[Thu Jul 30 16:30:52.520010 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/avactis/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.525394 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/monstra/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.534533 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/livesite/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.557101 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/buggenie/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.589475 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp60/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.627386 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.630794 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp66/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.658545 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp59/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.674945 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/wp56/.htaccess: RewriteBase: argument is not a valid URL
[Thu Jul 30 16:30:52.680803 2026] [core:alert] [pid 3878989:tid 3878989] [client 216.73.216.199:48463] /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/var/softaculous/magento241/.htaccess: Invalid command 'SetEnv', perhaps misspelled or defined by a module not included in the server configuration
[Thu Jul 30 16:30:52.709705 2026] [security2:error] [pid 3876493:tid 3876493] [client 20.215.186.36:49916] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "bumpyburp.hatch-works.com"] [uri "/index.php"] [unique_id "amtuLB9ZFyymmyc2TLTaeAAAADk"]
[Thu Jul 30 16:30:53.465090 2026] [security2:error] [pid 3869355:tid 3869355] [client 31.186.11.22:49640] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "taylorshouse.com"] [uri "/home/xmlrpc.php"] [unique_id "amtuLddXlG60OXTyGfKSCQAAAAI"]
[Thu Jul 30 16:30:53.872825 2026] [ssl:error] [pid 3875536:tid 3875536] (EAI 2)Name or service not known: [client 144.76.19.72:37622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:53.872879 2026] [ssl:error] [pid 3875536:tid 3875536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:53.928776 2026] [ssl:error] [pid 3870343:tid 3870343] (EAI 2)Name or service not known: [client 144.76.19.72:37624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:53.928810 2026] [ssl:error] [pid 3870343:tid 3870343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:54.646262 2026] [security2:error] [pid 3879780:tid 3879780] [client 114.119.137.103:48085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "tompalmer.co.uk"] [uri "/wp-content/uploads/2019/02/Scouted-chapter-1-and-2.pdf"] [unique_id "amtuLqEK3Y31gSXvjdXnUgAAACk"], referer: https://tompalmer.co.uk/about-tom/books-for-children/
[Thu Jul 30 16:30:56.417387 2026] [core:error] [pid 3878989:tid 3878989] (13)Permission denied: [client 216.73.216.199:48463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty9/subsystem/ttyS3/closing_wait
[Thu Jul 30 16:30:56.719262 2026] [core:error] [pid 3878989:tid 3878989] (13)Permission denied: [client 216.73.216.199:48463] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty27/subsystem/ttyS2/closing_wait
[Thu Jul 30 16:30:56.984367 2026] [ssl:error] [pid 3870343:tid 3870343] (EAI 2)Name or service not known: [client 144.76.19.72:37634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:56.984400 2026] [ssl:error] [pid 3870343:tid 3870343] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:57.040757 2026] [ssl:error] [pid 3879684:tid 3879684] (EAI 2)Name or service not known: [client 144.76.19.72:37648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:30:57.040806 2026] [ssl:error] [pid 3879684:tid 3879684] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:30:58.476038 2026] [security2:error] [pid 3879684:tid 3879684] [client 80.94.92.167:60782] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "hornsey-town-hall.org.uk"] [uri "/.svn/wc.db"] [unique_id "amtuMtmRjBf8t9Ok7g4X8gAAAAQ"]
[Thu Jul 30 16:30:58.476234 2026] [security2:error] [pid 3879684:tid 3879684] [client 80.94.92.167:60782] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "hornsey-town-hall.org.uk"] [uri "/.svn/wc.db"] [unique_id "amtuMtmRjBf8t9Ok7g4X8gAAAAQ"]
[Thu Jul 30 16:30:58.476444 2026] [security2:error] [pid 3879684:tid 3879684] [client 80.94.92.167:60782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hornsey-town-hall.org.uk"] [uri "/.svn/wc.db"] [unique_id "amtuMtmRjBf8t9Ok7g4X8gAAAAQ"]
[Thu Jul 30 16:30:58.828904 2026] [ssl:error] [pid 3878989:tid 3878989] (70014)End of file found: [client 216.73.216.199:48463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:30:58.980416 2026] [security2:error] [pid 3879684:tid 3879684] [client 80.94.92.167:60782] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "hornsey-town-hall.org.uk"] [uri "/index.php"] [unique_id "amtuMtmRjBf8t9Ok7g4X8gAAAAQ"]
[Thu Jul 30 16:31:00.097669 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:31924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:00.097702 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:00.153679 2026] [ssl:error] [pid 3877422:tid 3877422] (EAI 2)Name or service not known: [client 144.76.19.72:31934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:00.153719 2026] [ssl:error] [pid 3877422:tid 3877422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:00.350318 2026] [ssl:error] [pid 3879780:tid 3879780] (70014)End of file found: [client 216.73.216.199:34159] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:03.215488 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:31948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:03.215523 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:03.272749 2026] [ssl:error] [pid 3869827:tid 3869827] (EAI 2)Name or service not known: [client 144.76.19.72:31954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:03.272783 2026] [ssl:error] [pid 3869827:tid 3869827] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:04.331958 2026] [security2:error] [pid 3879685:tid 3879685] [client 185.191.171.14:57344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/stephanie-bauer-net-worth"] [unique_id "amtuOCNkj3dCqvi6z5WKAgAAAAY"]
[Thu Jul 30 16:31:04.697652 2026] [access_compat:error] [pid 3879777:tid 3879777] [client 45.158.164.139:55876] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:31:04.868109 2026] [security2:error] [pid 3856534:tid 3856534] [client 186.77.205.26:10861] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuODL-_x71v60sv7R19gAAADc"]
[Thu Jul 30 16:31:04.868158 2026] [security2:error] [pid 3856534:tid 3856534] [client 186.77.205.26:10861] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuODL-_x71v60sv7R19gAAADc"]
[Thu Jul 30 16:31:04.868395 2026] [security2:error] [pid 3856534:tid 3856534] [client 186.77.205.26:10861] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtuODL-_x71v60sv7R19gAAADc"]
[Thu Jul 30 16:31:05.694626 2026] [authz_core:error] [pid 3879685:tid 3879685] [client 66.249.66.33:52474] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:31:05.697566 2026] [authz_core:error] [pid 3879685:tid 3879685] [client 66.249.66.33:52474] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:31:06.094943 2026] [security2:error] [pid 3874389:tid 3874389] [client 185.191.171.13:63100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1114.0/prev_next,next.html"] [unique_id "amtuOoKE6lXp7OtFTtOPVQAAADw"]
[Thu Jul 30 16:31:06.330411 2026] [ssl:error] [pid 3879780:tid 3879780] (EAI 2)Name or service not known: [client 144.76.19.72:31970] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:06.330457 2026] [ssl:error] [pid 3879780:tid 3879780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:06.386207 2026] [ssl:error] [pid 3874525:tid 3874525] (EAI 2)Name or service not known: [client 144.76.19.72:31984] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:06.386254 2026] [ssl:error] [pid 3874525:tid 3874525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:07.292114 2026] [security2:error] [pid 3869827:tid 3869827] [client 45.148.10.120:50814] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.recklesselectricity.markmitchell.org"] [uri "/.env"] [unique_id "amtuOzP1SjSUp3p6uDImqQAAABQ"]
[Thu Jul 30 16:31:07.292332 2026] [security2:error] [pid 3869827:tid 3869827] [client 45.148.10.120:50814] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.recklesselectricity.markmitchell.org"] [uri "/.env"] [unique_id "amtuOzP1SjSUp3p6uDImqQAAABQ"]
[Thu Jul 30 16:31:07.292592 2026] [security2:error] [pid 3869827:tid 3869827] [client 45.148.10.120:50814] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.recklesselectricity.markmitchell.org"] [uri "/.env"] [unique_id "amtuOzP1SjSUp3p6uDImqQAAABQ"]
[Thu Jul 30 16:31:07.519963 2026] [security2:error] [pid 3869886:tid 3869886] [client 47.236.67.172:13441] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuO_N4zdQqRyNv61UBkAAAACI"]
[Thu Jul 30 16:31:07.520030 2026] [security2:error] [pid 3869886:tid 3869886] [client 47.236.67.172:13441] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuO_N4zdQqRyNv61UBkAAAACI"]
[Thu Jul 30 16:31:07.520429 2026] [security2:error] [pid 3869886:tid 3869886] [client 47.236.67.172:13441] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtuO_N4zdQqRyNv61UBkAAAACI"]
[Thu Jul 30 16:31:07.586721 2026] [ssl:error] [pid 3876429:tid 3876429] (70014)End of file found: [client 216.73.216.199:43573] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:07.904297 2026] [authz_core:error] [pid 3875591:tid 3875591] [client 172.213.10.64:6950] AH01630: client denied by server configuration: /home/gangway/public_html/wp-includes/Requests/error_log
[Thu Jul 30 16:31:08.480739 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:56711] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:09.442833 2026] [ssl:error] [pid 3876493:tid 3876493] (EAI 2)Name or service not known: [client 144.76.19.72:31992] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:09.442891 2026] [ssl:error] [pid 3876493:tid 3876493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:09.501878 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:31998] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:09.501911 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:11.440280 2026] [security2:error] [pid 3870337:tid 3870337] [client 47.236.67.172:49603] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuP1BQPy6tbSPa4e55xAAAAEE"]
[Thu Jul 30 16:31:11.440343 2026] [security2:error] [pid 3870337:tid 3870337] [client 47.236.67.172:49603] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuP1BQPy6tbSPa4e55xAAAAEE"]
[Thu Jul 30 16:31:11.440581 2026] [security2:error] [pid 3870337:tid 3870337] [client 47.236.67.172:49603] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtuP1BQPy6tbSPa4e55xAAAAEE"]
[Thu Jul 30 16:31:11.796170 2026] [ssl:error] [pid 3860319:tid 3860319] (70014)End of file found: [client 216.73.216.199:36481] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:12.574573 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:23020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:12.574605 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:12.627372 2026] [ssl:error] [pid 3879782:tid 3879782] (EAI 2)Name or service not known: [client 144.76.19.72:23036] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:12.627411 2026] [ssl:error] [pid 3879782:tid 3879782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:13.601356 2026] [ssl:error] [pid 3874387:tid 3874387] (70014)End of file found: [client 216.73.216.199:42433] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:14.107895 2026] [ssl:error] [pid 3876429:tid 3876429] (70014)End of file found: [client 216.73.216.199:24965] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:15.685308 2026] [ssl:error] [pid 3870303:tid 3870303] (EAI 2)Name or service not known: [client 144.76.19.72:23042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:15.685348 2026] [ssl:error] [pid 3870303:tid 3870303] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:15.738496 2026] [ssl:error] [pid 3879685:tid 3879685] (EAI 2)Name or service not known: [client 144.76.19.72:23056] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:15.738532 2026] [ssl:error] [pid 3879685:tid 3879685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:16.959523 2026] [core:error] [pid 3879780:tid 3879780] (13)Permission denied: [client 216.73.216.199:62079] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory227/subsystem/uevent
[Thu Jul 30 16:31:17.862157 2026] [ssl:error] [pid 3879780:tid 3879780] (70014)End of file found: [client 216.73.216.199:62079] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:18.486977 2026] [security2:error] [pid 3870303:tid 3870303] [client 43.165.198.5:51266] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.devwebsitehub.com"] [uri "/"] [unique_id "amtuRuiGH51RXfk-1V-lOgAAADs"]
[Thu Jul 30 16:31:18.767447 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:15227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:18.793227 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:23068] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:18.793261 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:18.850193 2026] [ssl:error] [pid 3860319:tid 3860319] (EAI 2)Name or service not known: [client 144.76.19.72:23076] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:18.850230 2026] [ssl:error] [pid 3860319:tid 3860319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:19.267903 2026] [ssl:error] [pid 3874387:tid 3874387] (70014)End of file found: [client 216.73.216.199:11315] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:21.249754 2026] [core:error] [pid 3872854:tid 3872854] [client 135.119.63.61:43523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:21.249784 2026] [core:error] [pid 3872854:tid 3872854] [client 135.119.63.61:43523] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:21.904556 2026] [ssl:error] [pid 3867269:tid 3867269] (EAI 2)Name or service not known: [client 144.76.19.72:55840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:21.904594 2026] [ssl:error] [pid 3867269:tid 3867269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:21.960810 2026] [ssl:error] [pid 3864008:tid 3864008] (EAI 2)Name or service not known: [client 144.76.19.72:55850] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:21.960852 2026] [ssl:error] [pid 3864008:tid 3864008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:23.008783 2026] [core:error] [pid 3856534:tid 3856534] [client 135.119.63.61:43664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:23.008814 2026] [core:error] [pid 3856534:tid 3856534] [client 135.119.63.61:43664] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:23.605953 2026] [core:error] [pid 3869886:tid 3869886] (13)Permission denied: [client 216.73.216.199:40461] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/console/subsystem/ttyS2/iomem_base
[Thu Jul 30 16:31:23.742509 2026] [core:error] [pid 3872854:tid 3872854] [client 135.119.63.61:43329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:23.742540 2026] [core:error] [pid 3872854:tid 3872854] [client 135.119.63.61:43329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:23.907245 2026] [core:error] [pid 3869886:tid 3869886] (13)Permission denied: [client 216.73.216.199:40461] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:28/subsystem/ttyS3/port
[Thu Jul 30 16:31:24.495625 2026] [core:error] [pid 3872854:tid 3872854] [client 135.119.63.61:43707] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:24.495657 2026] [core:error] [pid 3872854:tid 3872854] [client 135.119.63.61:43707] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:24.509346 2026] [ssl:error] [pid 3869886:tid 3869886] (70014)End of file found: [client 216.73.216.199:40461] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:25.018950 2026] [ssl:error] [pid 3872854:tid 3872854] (EAI 2)Name or service not known: [client 144.76.19.72:55854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:25.018986 2026] [ssl:error] [pid 3872854:tid 3872854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:25.073813 2026] [ssl:error] [pid 3870305:tid 3870305] (EAI 2)Name or service not known: [client 144.76.19.72:55870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:25.073862 2026] [ssl:error] [pid 3870305:tid 3870305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:25.126466 2026] [core:error] [pid 3870303:tid 3870303] [client 135.119.63.61:43524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:25.126495 2026] [core:error] [pid 3870303:tid 3870303] [client 135.119.63.61:43524] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:25.949265 2026] [security2:error] [pid 3869355:tid 3869355] [client 114.119.135.136:25973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572825600/request_format~html/cat_ids~15"] [unique_id "amtuTddXlG60OXTyGfKSEQAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E4-11-2019
[Thu Jul 30 16:31:26.699211 2026] [security2:error] [pid 3874393:tid 3874393] [client 47.128.114.203:20774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.oliviamarjorie.com"] [uri "/robots.txt"] [unique_id "amtuTkhEYabkCqmRSiQ-0AAAAE0"]
[Thu Jul 30 16:31:26.753670 2026] [core:error] [pid 3864008:tid 3864008] [client 135.119.63.61:19969] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:26.753695 2026] [core:error] [pid 3864008:tid 3864008] [client 135.119.63.61:19969] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:27.239558 2026] [ssl:error] [pid 3870303:tid 3870303] (70014)End of file found: [client 216.73.216.199:6267] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:27.505047 2026] [security2:error] [pid 3869355:tid 3869355] [client 114.119.135.136:25983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~oneday/exact_date~1572825600/request_format~html/cat_ids~15"] [unique_id "amtuT9dXlG60OXTyGfKSEgAAAAI"], referer: http://www.erskinenazarene.co.uk/calendar/action%7Eoneday/exact_date%7E4-11-2019
[Thu Jul 30 16:31:27.841003 2026] [ssl:error] [pid 3870337:tid 3870337] (70014)End of file found: [client 216.73.216.199:51003] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:28.127343 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:55884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:28.127369 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:28.183676 2026] [ssl:error] [pid 3881175:tid 3881175] (EAI 2)Name or service not known: [client 144.76.19.72:55900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:28.183731 2026] [ssl:error] [pid 3881175:tid 3881175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:29.448615 2026] [core:error] [pid 3870342:tid 3870342] [client 135.119.63.61:43695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:29.448655 2026] [core:error] [pid 3870342:tid 3870342] [client 135.119.63.61:43695] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:30.232006 2026] [core:error] [pid 3874525:tid 3874525] [client 135.119.63.61:43538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:30.232044 2026] [core:error] [pid 3874525:tid 3874525] [client 135.119.63.61:43538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:30.859693 2026] [ssl:error] [pid 3878989:tid 3878989] (70014)End of file found: [client 216.73.216.199:23936] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:31.243003 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:38608] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:31.243039 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:31.299059 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:38622] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:31.299118 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:33.608560 2026] [core:error] [pid 3879782:tid 3879782] [client 135.119.63.61:17501] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:33.608593 2026] [core:error] [pid 3879782:tid 3879782] [client 135.119.63.61:17501] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:34.353162 2026] [ssl:error] [pid 3879782:tid 3879782] (EAI 2)Name or service not known: [client 144.76.19.72:38636] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:34.353197 2026] [ssl:error] [pid 3879782:tid 3879782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:34.407933 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:38646] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:34.407964 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:35.090500 2026] [ssl:error] [pid 3876493:tid 3876493] (70014)End of file found: [client 216.73.216.199:35068] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:35.303573 2026] [core:error] [pid 3862626:tid 3862626] [client 135.119.63.61:17511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:35.303605 2026] [core:error] [pid 3862626:tid 3862626] [client 135.119.63.61:17511] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:36.597201 2026] [ssl:error] [pid 3879642:tid 3879642] (70014)End of file found: [client 216.73.216.199:24349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:37.311713 2026] [security2:error] [pid 3862564:tid 3862564] [client 49.235.136.28:49482] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.islay.me"] [uri "/"] [unique_id "amtuWQFhHJaIAwiCZGWrSwAAABk"]
[Thu Jul 30 16:31:37.465105 2026] [ssl:error] [pid 3881510:tid 3881510] (EAI 2)Name or service not known: [client 144.76.19.72:38652] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:37.465174 2026] [ssl:error] [pid 3881510:tid 3881510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:37.512499 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:2029] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:37.524465 2026] [ssl:error] [pid 3881510:tid 3881510] (EAI 2)Name or service not known: [client 144.76.19.72:38666] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:37.524492 2026] [ssl:error] [pid 3881510:tid 3881510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:38.526194 2026] [access_compat:error] [pid 3882409:tid 3882409] [client 45.158.164.139:38328] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:31:39.220788 2026] [core:error] [pid 3879780:tid 3879780] [client 135.119.63.61:17506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:39.220820 2026] [core:error] [pid 3879780:tid 3879780] [client 135.119.63.61:17506] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:39.943513 2026] [security2:error] [pid 3879780:tid 3879780] [client 46.105.39.49:17557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.markmitchellphotography.co.uk"] [uri "/robots.txt"] [unique_id "amtuW6EK3Y31gSXvjdXnaQAAACk"]
[Thu Jul 30 16:31:40.584678 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:23726] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:40.584712 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:40.640563 2026] [ssl:error] [pid 3876428:tid 3876428] (EAI 2)Name or service not known: [client 144.76.19.72:23742] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:40.640595 2026] [ssl:error] [pid 3876428:tid 3876428] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:43.259844 2026] [ssl:error] [pid 3870344:tid 3870344] (70014)End of file found: [client 216.73.216.199:14083] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:43.730570 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:23748] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:43.730607 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:43.791531 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:23760] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:43.791559 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:44.620883 2026] [authz_core:error] [pid 3862564:tid 3862564] [client 66.249.66.33:64109] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:31:44.623574 2026] [authz_core:error] [pid 3862564:tid 3862564] [client 66.249.66.33:64109] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:31:45.388554 2026] [core:error] [pid 3881723:tid 3881723] (13)Permission denied: [client 216.73.216.199:6418] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty11/subsystem/ttyS3/uartclk
[Thu Jul 30 16:31:45.686702 2026] [core:error] [pid 3881723:tid 3881723] (13)Permission denied: [client 216.73.216.199:6418] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty33/subsystem/ttyS1/uartclk
[Thu Jul 30 16:31:46.536869 2026] [security2:error] [pid 3829432:tid 3829432] [client 156.59.198.135:59010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/wp-content/uploads/2023/11/John-Mark-on-The-Pryors-Centenary.pdf"] [unique_id "amtuYs2sRwWoEu6urD6ZmAAAABg"]
[Thu Jul 30 16:31:46.849785 2026] [ssl:error] [pid 3875631:tid 3875631] (EAI 2)Name or service not known: [client 144.76.19.72:23766] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:46.849819 2026] [ssl:error] [pid 3875631:tid 3875631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:46.902807 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:23770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:46.902840 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:47.195357 2026] [ssl:error] [pid 3881723:tid 3881723] (70014)End of file found: [client 216.73.216.199:6418] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:48.722692 2026] [core:error] [pid 3882452:tid 3882452] [client 135.119.63.61:17502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:48.722722 2026] [core:error] [pid 3882452:tid 3882452] [client 135.119.63.61:17502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:49.027940 2026] [core:error] [pid 3874393:tid 3874393] (13)Permission denied: [client 216.73.216.199:25865] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty5/subsystem/ttyS3/closing_wait
[Thu Jul 30 16:31:49.328609 2026] [ssl:error] [pid 3874393:tid 3874393] (70014)End of file found: [client 216.73.216.199:25865] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:49.376250 2026] [core:error] [pid 3867269:tid 3867269] [client 135.119.63.61:23609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:49.376290 2026] [core:error] [pid 3867269:tid 3867269] [client 135.119.63.61:23609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:49.825679 2026] [ssl:error] [pid 3862564:tid 3862564] (70014)End of file found: [client 216.73.216.199:60503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:50.022507 2026] [ssl:error] [pid 3869355:tid 3869355] (EAI 2)Name or service not known: [client 144.76.19.72:61014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:50.022546 2026] [ssl:error] [pid 3869355:tid 3869355] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:50.107974 2026] [ssl:error] [pid 3876429:tid 3876429] (EAI 2)Name or service not known: [client 144.76.19.72:61020] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:50.108053 2026] [ssl:error] [pid 3876429:tid 3876429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:50.601823 2026] [core:error] [pid 3870303:tid 3870303] [client 135.119.63.61:17518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:50.601867 2026] [core:error] [pid 3870303:tid 3870303] [client 135.119.63.61:17518] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:53.047815 2026] [core:error] [pid 3882452:tid 3882452] [client 135.119.63.61:17514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:53.047846 2026] [core:error] [pid 3882452:tid 3882452] [client 135.119.63.61:17514] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:53.165496 2026] [ssl:error] [pid 3879780:tid 3879780] (EAI 2)Name or service not known: [client 144.76.19.72:61024] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:53.165528 2026] [ssl:error] [pid 3879780:tid 3879780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:53.218778 2026] [ssl:error] [pid 3882743:tid 3882743] (EAI 2)Name or service not known: [client 144.76.19.72:61040] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:53.218808 2026] [ssl:error] [pid 3882743:tid 3882743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:54.199623 2026] [core:error] [pid 3881175:tid 3881175] [client 135.119.63.61:17498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:54.199669 2026] [core:error] [pid 3881175:tid 3881175] [client 135.119.63.61:17498] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:31:54.764249 2026] [core:error] [pid 3874387:tid 3874387] (13)Permission denied: [client 216.73.216.199:60791] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/virtual/tty/tty7/subsystem/ttyS0/close_delay
[Thu Jul 30 16:31:56.296235 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:61042] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:56.296268 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:56.347753 2026] [ssl:error] [pid 3870306:tid 3870306] (EAI 2)Name or service not known: [client 144.76.19.72:61044] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:56.347780 2026] [ssl:error] [pid 3870306:tid 3870306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:56.637563 2026] [core:error] [pid 3874387:tid 3874387] (13)Permission denied: [client 216.73.216.199:60791] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/etc/sysconfig/rhn/jwt.token.save
[Thu Jul 30 16:31:56.999787 2026] [authz_core:error] [pid 3876429:tid 3876429] [client 66.249.66.33:42038] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:31:57.002461 2026] [authz_core:error] [pid 3876429:tid 3876429] [client 66.249.66.33:42038] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:31:57.606086 2026] [ssl:error] [pid 3874387:tid 3874387] (70014)End of file found: [client 216.73.216.199:60791] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:31:59.407555 2026] [ssl:error] [pid 3862503:tid 3862503] (EAI 2)Name or service not known: [client 144.76.19.72:61058] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:59.407598 2026] [ssl:error] [pid 3862503:tid 3862503] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:31:59.463849 2026] [ssl:error] [pid 3874525:tid 3874525] (EAI 2)Name or service not known: [client 144.76.19.72:61070] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:31:59.463891 2026] [ssl:error] [pid 3874525:tid 3874525] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:00.559639 2026] [ssl:error] [pid 3869886:tid 3869886] (70014)End of file found: [client 216.73.216.199:18120] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:01.450908 2026] [core:error] [pid 3870305:tid 3870305] [client 135.119.63.61:23596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:01.450939 2026] [core:error] [pid 3870305:tid 3870305] [client 135.119.63.61:23596] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:01.763727 2026] [ssl:error] [pid 3862503:tid 3862503] (70014)End of file found: [client 216.73.216.199:45413] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:02.517041 2026] [ssl:error] [pid 3879781:tid 3879781] (EAI 2)Name or service not known: [client 144.76.19.72:51610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:02.517093 2026] [ssl:error] [pid 3879781:tid 3879781] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:02.572086 2026] [ssl:error] [pid 3876429:tid 3876429] (EAI 2)Name or service not known: [client 144.76.19.72:51614] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:02.572114 2026] [ssl:error] [pid 3876429:tid 3876429] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:02.821088 2026] [access_compat:error] [pid 3875633:tid 3875633] [client 4.223.67.9:46116] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/woocommerce_uploads/
[Thu Jul 30 16:32:02.824083 2026] [access_compat:error] [pid 3875633:tid 3875633] [client 4.223.67.9:46116] AH01797: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-content/uploads/wc-logs/
[Thu Jul 30 16:32:02.879040 2026] [core:error] [pid 3881175:tid 3881175] [client 135.119.63.61:23603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:02.879168 2026] [core:error] [pid 3881175:tid 3881175] [client 135.119.63.61:23603] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:03.169975 2026] [ssl:error] [pid 3864008:tid 3864008] (70014)End of file found: [client 216.73.216.199:20367] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:03.568330 2026] [security2:error] [pid 3875631:tid 3875631] [client 185.191.171.6:57558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,11565.0/prev_next,next.html"] [unique_id "amtucwq-vCzlnxFme9yI9gAAABo"]
[Thu Jul 30 16:32:04.205750 2026] [core:error] [pid 3881510:tid 3881510] [client 135.119.63.61:20429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:04.205782 2026] [core:error] [pid 3881510:tid 3881510] [client 135.119.63.61:20429] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:04.940469 2026] [security2:error] [pid 3883338:tid 3883338] [client 85.208.96.198:58944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/mBOSf/guthrie-theater-past-productions"] [unique_id "amtudPZ3LSKhuXwcHY2jogAAACA"]
[Thu Jul 30 16:32:05.000582 2026] [core:error] [pid 3875631:tid 3875631] [client 135.119.63.61:23602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:05.000620 2026] [core:error] [pid 3875631:tid 3875631] [client 135.119.63.61:23602] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:05.699089 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:51628] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:05.699128 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:05.754858 2026] [ssl:error] [pid 3883270:tid 3883270] (EAI 2)Name or service not known: [client 144.76.19.72:51638] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:05.754894 2026] [ssl:error] [pid 3883270:tid 3883270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:05.869762 2026] [ssl:error] [pid 3883336:tid 3883336] (70014)End of file found: [client 216.73.216.199:35302] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:05.944119 2026] [core:error] [pid 3870342:tid 3870342] [client 135.119.63.61:23605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:05.944156 2026] [core:error] [pid 3870342:tid 3870342] [client 135.119.63.61:23605] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:06.772743 2026] [core:error] [pid 3867269:tid 3867269] [client 135.119.63.61:23613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:06.772780 2026] [core:error] [pid 3867269:tid 3867269] [client 135.119.63.61:23613] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:08.810150 2026] [ssl:error] [pid 3875591:tid 3875591] (EAI 2)Name or service not known: [client 144.76.19.72:51650] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:08.810199 2026] [ssl:error] [pid 3875591:tid 3875591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:08.863878 2026] [ssl:error] [pid 3857654:tid 3857654] (EAI 2)Name or service not known: [client 144.76.19.72:51658] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:08.863905 2026] [ssl:error] [pid 3857654:tid 3857654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:10.236532 2026] [authz_core:error] [pid 3879780:tid 3879780] [client 66.249.66.33:56540] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:32:10.241858 2026] [authz_core:error] [pid 3879780:tid 3879780] [client 66.249.66.33:56540] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:32:11.920405 2026] [ssl:error] [pid 3882743:tid 3882743] (EAI 2)Name or service not known: [client 144.76.19.72:62832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:11.920433 2026] [ssl:error] [pid 3882743:tid 3882743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:11.976288 2026] [ssl:error] [pid 3882743:tid 3882743] (EAI 2)Name or service not known: [client 144.76.19.72:62842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:11.976323 2026] [ssl:error] [pid 3882743:tid 3882743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:12.638551 2026] [security2:error] [pid 3870337:tid 3870337] [client 5.161.62.209:23582] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "amtufFBQPy6tbSPa4e55_gAAAEE"]
[Thu Jul 30 16:32:12.638766 2026] [security2:error] [pid 3870337:tid 3870337] [client 5.161.62.209:23582] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "amtufFBQPy6tbSPa4e55_gAAAEE"]
[Thu Jul 30 16:32:12.638983 2026] [security2:error] [pid 3870337:tid 3870337] [client 5.161.62.209:23582] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "perish.freakorgeek.com"] [uri "/.env"] [unique_id "amtufFBQPy6tbSPa4e55_gAAAEE"]
[Thu Jul 30 16:32:12.771062 2026] [cgi:error] [pid 3874525:tid 3874525] [client 37.59.21.100:47218] AH02811: stderr from /usr/local/cpanel/cgi-sys/ea-php73: script not found or unable to stat
[Thu Jul 30 16:32:13.303940 2026] [core:error] [pid 3870305:tid 3870305] [client 135.119.63.61:20452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:13.303978 2026] [core:error] [pid 3870305:tid 3870305] [client 135.119.63.61:20452] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:14.309277 2026] [authz_core:error] [pid 3862564:tid 3862564] [client 4.223.67.9:46132] AH01630: client denied by server configuration: /home/rediscov/public_html/woodsandgreenfurniture.co.uk/wp-includes/Requests/error_log
[Thu Jul 30 16:32:15.035369 2026] [ssl:error] [pid 3879782:tid 3879782] (EAI 2)Name or service not known: [client 144.76.19.72:62858] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:15.035402 2026] [ssl:error] [pid 3879782:tid 3879782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:15.091587 2026] [ssl:error] [pid 3875536:tid 3875536] (EAI 2)Name or service not known: [client 144.76.19.72:62868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:15.091626 2026] [ssl:error] [pid 3875536:tid 3875536] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:15.238647 2026] [core:error] [pid 3875592:tid 3875592] [client 135.119.63.61:23556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:15.238672 2026] [core:error] [pid 3875592:tid 3875592] [client 135.119.63.61:23556] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:16.492936 2026] [core:error] [pid 3875631:tid 3875631] [client 135.119.63.61:20419] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:16.492967 2026] [core:error] [pid 3875631:tid 3875631] [client 135.119.63.61:20419] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:16.848382 2026] [authz_core:error] [pid 3876493:tid 3876493] [client 45.156.128.73:60256] AH01630: client denied by server configuration: /home/dqvlbwjd/public_html/error_log
[Thu Jul 30 16:32:17.177126 2026] [access_compat:error] [pid 3883339:tid 3883339] [client 45.158.164.139:44550] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:32:18.165760 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:62876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:18.165799 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:18.217659 2026] [ssl:error] [pid 3883339:tid 3883339] (EAI 2)Name or service not known: [client 144.76.19.72:62888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:18.217700 2026] [ssl:error] [pid 3883339:tid 3883339] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:19.813729 2026] [core:error] [pid 3874393:tid 3874393] [client 135.119.63.61:44172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:19.813756 2026] [core:error] [pid 3874393:tid 3874393] [client 135.119.63.61:44172] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:20.339516 2026] [core:error] [pid 3872801:tid 3872801] [client 135.119.63.61:44246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:20.339558 2026] [core:error] [pid 3872801:tid 3872801] [client 135.119.63.61:44246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:21.246727 2026] [core:error] [pid 3878989:tid 3878989] [client 135.119.63.61:20422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:21.246756 2026] [core:error] [pid 3878989:tid 3878989] [client 135.119.63.61:20422] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:21.274518 2026] [ssl:error] [pid 3883269:tid 3883269] (EAI 2)Name or service not known: [client 144.76.19.72:23192] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:21.274571 2026] [ssl:error] [pid 3883269:tid 3883269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:21.328588 2026] [ssl:error] [pid 3870338:tid 3870338] (EAI 2)Name or service not known: [client 144.76.19.72:23202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:21.328630 2026] [ssl:error] [pid 3870338:tid 3870338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:21.699193 2026] [security2:error] [pid 3882743:tid 3882743] [client 47.15.155.157:42842] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuhXkuC8xXVH72cq7fWwAAABM"]
[Thu Jul 30 16:32:21.699249 2026] [security2:error] [pid 3882743:tid 3882743] [client 47.15.155.157:42842] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuhXkuC8xXVH72cq7fWwAAABM"]
[Thu Jul 30 16:32:21.699519 2026] [security2:error] [pid 3882743:tid 3882743] [client 47.15.155.157:42842] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtuhXkuC8xXVH72cq7fWwAAABM"]
[Thu Jul 30 16:32:21.827330 2026] [core:error] [pid 3857654:tid 3857654] [client 135.119.63.61:20432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:21.827356 2026] [core:error] [pid 3857654:tid 3857654] [client 135.119.63.61:20432] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:24.211750 2026] [core:error] [pid 3877277:tid 3877277] [client 135.119.63.61:44244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:24.211785 2026] [core:error] [pid 3877277:tid 3877277] [client 135.119.63.61:44244] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:24.384020 2026] [ssl:error] [pid 3879685:tid 3879685] (EAI 2)Name or service not known: [client 144.76.19.72:23214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:24.384051 2026] [ssl:error] [pid 3879685:tid 3879685] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:24.438439 2026] [ssl:error] [pid 3883269:tid 3883269] (EAI 2)Name or service not known: [client 144.76.19.72:23220] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:24.438468 2026] [ssl:error] [pid 3883269:tid 3883269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:24.827856 2026] [core:error] [pid 3870305:tid 3870305] [client 135.119.63.61:20430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:24.827897 2026] [core:error] [pid 3870305:tid 3870305] [client 135.119.63.61:20430] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:25.668723 2026] [security2:error] [pid 3875631:tid 3875631] [client 47.128.34.170:36404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.the-pryors.co.uk"] [uri "/robots.txt"] [unique_id "amtuiQq-vCzlnxFme9yI_gAAABo"]
[Thu Jul 30 16:32:26.338385 2026] [core:error] [pid 3862504:tid 3862504] [client 135.119.63.61:44161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:26.338418 2026] [core:error] [pid 3862504:tid 3862504] [client 135.119.63.61:44161] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:26.706738 2026] [ssl:error] [pid 3875592:tid 3875592] (70014)End of file found: [client 216.73.216.199:1380] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:26.813738 2026] [security2:error] [pid 3882409:tid 3882409] [client 188.160.166.94:10866] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuiiBqTa1ryzNKbOxvOwAAAAs"]
[Thu Jul 30 16:32:26.813791 2026] [security2:error] [pid 3882409:tid 3882409] [client 188.160.166.94:10866] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtuiiBqTa1ryzNKbOxvOwAAAAs"]
[Thu Jul 30 16:32:26.814074 2026] [security2:error] [pid 3882409:tid 3882409] [client 188.160.166.94:10866] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtuiiBqTa1ryzNKbOxvOwAAAAs"]
[Thu Jul 30 16:32:26.978367 2026] [core:error] [pid 3876493:tid 3876493] [client 135.119.63.61:20431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:26.978399 2026] [core:error] [pid 3876493:tid 3876493] [client 135.119.63.61:20431] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:27.392680 2026] [core:error] [pid 3869827:tid 3869827] [client 135.119.63.61:44171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:27.392711 2026] [core:error] [pid 3869827:tid 3869827] [client 135.119.63.61:44171] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:27.497851 2026] [ssl:error] [pid 3884758:tid 3884758] (EAI 2)Name or service not known: [client 144.76.19.72:23234] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:27.497904 2026] [ssl:error] [pid 3884758:tid 3884758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:27.553881 2026] [ssl:error] [pid 3864008:tid 3864008] (EAI 2)Name or service not known: [client 144.76.19.72:23240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:27.553915 2026] [ssl:error] [pid 3864008:tid 3864008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:27.689681 2026] [security2:error] [pid 3870306:tid 3870306] [client 51.83.76.228:42426] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "purple-childcare.co.uk"] [uri "/.env"] [unique_id "amtui4MZg38-Ie6lcyX4iAAAAEA"]
[Thu Jul 30 16:32:27.689878 2026] [security2:error] [pid 3870306:tid 3870306] [client 51.83.76.228:42426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "purple-childcare.co.uk"] [uri "/.env"] [unique_id "amtui4MZg38-Ie6lcyX4iAAAAEA"]
[Thu Jul 30 16:32:28.367876 2026] [security2:error] [pid 3870306:tid 3870306] [client 51.83.76.228:42426] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "purple-childcare.co.uk"] [uri "/index.php"] [unique_id "amtui4MZg38-Ie6lcyX4iAAAAEA"]
[Thu Jul 30 16:32:28.379882 2026] [security2:error] [pid 3869886:tid 3869886] [client 51.83.76.228:42428] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.purple-childcare.co.uk"] [uri "/.env"] [unique_id "amtujPN4zdQqRyNv61UBuQAAACI"], referer: https://purple-childcare.co.uk/.env
[Thu Jul 30 16:32:28.380143 2026] [security2:error] [pid 3869886:tid 3869886] [client 51.83.76.228:42428] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.purple-childcare.co.uk"] [uri "/.env"] [unique_id "amtujPN4zdQqRyNv61UBuQAAACI"], referer: https://purple-childcare.co.uk/.env
[Thu Jul 30 16:32:29.100092 2026] [security2:error] [pid 3869886:tid 3869886] [client 51.83.76.228:42428] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "www.purple-childcare.co.uk"] [uri "/index.php"] [unique_id "amtujPN4zdQqRyNv61UBuQAAACI"], referer: https://purple-childcare.co.uk/.env
[Thu Jul 30 16:32:29.127722 2026] [core:error] [pid 3884717:tid 3884717] (13)Permission denied: [client 216.73.216.199:43678] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:60/subsystem/ttyS3/custom_divisor
[Thu Jul 30 16:32:29.427674 2026] [core:error] [pid 3884717:tid 3884717] (13)Permission denied: [client 216.73.216.199:43678] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/vt/uevent
[Thu Jul 30 16:32:30.240803 2026] [core:error] [pid 3864008:tid 3864008] [client 135.119.63.61:44270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:30.240837 2026] [core:error] [pid 3864008:tid 3864008] [client 135.119.63.61:44270] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:30.331638 2026] [ssl:error] [pid 3884717:tid 3884717] (5)Input/output error: [client 216.73.216.199:43678] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:30.610325 2026] [ssl:error] [pid 3864008:tid 3864008] (EAI 2)Name or service not known: [client 144.76.19.72:54446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:30.610354 2026] [ssl:error] [pid 3864008:tid 3864008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:30.664980 2026] [ssl:error] [pid 3885113:tid 3885113] (EAI 2)Name or service not known: [client 144.76.19.72:54450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:30.665018 2026] [ssl:error] [pid 3885113:tid 3885113] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:30.838929 2026] [core:error] [pid 3864008:tid 3864008] (13)Permission denied: [client 216.73.216.199:12138] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty3/subsystem/ttyS2/line
[Thu Jul 30 16:32:30.903693 2026] [core:error] [pid 3885113:tid 3885113] [client 135.119.63.61:44276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:30.903719 2026] [core:error] [pid 3885113:tid 3885113] [client 135.119.63.61:44276] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:32:31.247991 2026] [ssl:error] [pid 3864008:tid 3864008] (70014)End of file found: [client 216.73.216.199:12138] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:32.118753 2026] [ssl:error] [pid 3881510:tid 3881510] (70014)End of file found: [client 216.73.216.199:12317] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:33.718734 2026] [ssl:error] [pid 3870305:tid 3870305] (EAI 2)Name or service not known: [client 144.76.19.72:54456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:33.718762 2026] [ssl:error] [pid 3870305:tid 3870305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:33.773023 2026] [ssl:error] [pid 3881175:tid 3881175] (EAI 2)Name or service not known: [client 144.76.19.72:54460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:33.773050 2026] [ssl:error] [pid 3881175:tid 3881175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:36.829566 2026] [ssl:error] [pid 3877277:tid 3877277] (EAI 2)Name or service not known: [client 144.76.19.72:54466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:36.829615 2026] [ssl:error] [pid 3877277:tid 3877277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:36.887719 2026] [ssl:error] [pid 3885310:tid 3885310] (EAI 2)Name or service not known: [client 144.76.19.72:54468] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:36.887757 2026] [ssl:error] [pid 3885310:tid 3885310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:36.967890 2026] [core:error] [pid 3862504:tid 3862504] (13)Permission denied: [client 216.73.216.199:20055] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/subsystem/drivers/button/uevent
[Thu Jul 30 16:32:37.871418 2026] [ssl:error] [pid 3862504:tid 3862504] (70014)End of file found: [client 216.73.216.199:20055] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:38.362594 2026] [ssl:error] [pid 3883337:tid 3883337] (70014)End of file found: [client 216.73.216.199:62081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:38.779213 2026] [ssl:error] [pid 3849754:tid 3849754] (70014)End of file found: [client 216.73.216.199:2387] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:39.943414 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:64796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:39.943445 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:39.998954 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:64800] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:39.998984 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:43.055038 2026] [ssl:error] [pid 3857654:tid 3857654] (EAI 2)Name or service not known: [client 144.76.19.72:64814] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:43.055085 2026] [ssl:error] [pid 3857654:tid 3857654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:43.112282 2026] [ssl:error] [pid 3881175:tid 3881175] (EAI 2)Name or service not known: [client 144.76.19.72:64822] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:43.112316 2026] [ssl:error] [pid 3881175:tid 3881175] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:43.224359 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:45769] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:43.851868 2026] [ssl:error] [pid 3885311:tid 3885311] (70014)End of file found: [client 216.73.216.199:43138] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:46.168684 2026] [ssl:error] [pid 3885240:tid 3885240] (EAI 2)Name or service not known: [client 144.76.19.72:64834] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:46.168731 2026] [ssl:error] [pid 3885240:tid 3885240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:46.222652 2026] [ssl:error] [pid 3882743:tid 3882743] (EAI 2)Name or service not known: [client 144.76.19.72:64840] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:46.222707 2026] [ssl:error] [pid 3882743:tid 3882743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:47.581176 2026] [ssl:error] [pid 3870337:tid 3870337] (70014)End of file found: [client 216.73.216.199:41896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:49.092501 2026] [core:error] [pid 3884760:tid 3884760] (13)Permission denied: [client 216.73.216.199:10944] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty49/subsystem/ttyS2/custom_divisor
[Thu Jul 30 16:32:49.165362 2026] [security2:error] [pid 3882409:tid 3882409] [client 114.119.157.183:20039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/wp-content/uploads/2022/02/IMG_ABF9561A7201-1.jpeg"] [unique_id "amtuoSBqTa1ryzNKbOxvQgAAAAs"], referer: https://www.erskinenazarene.co.uk/lenten-discipleship-workshop/
[Thu Jul 30 16:32:49.279509 2026] [ssl:error] [pid 3870342:tid 3870342] (EAI 2)Name or service not known: [client 144.76.19.72:64856] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:49.279543 2026] [ssl:error] [pid 3870342:tid 3870342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:49.337376 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:64872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:49.337408 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:49.502819 2026] [ssl:error] [pid 3884760:tid 3884760] (70014)End of file found: [client 216.73.216.199:10944] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:50.017433 2026] [ssl:error] [pid 3883336:tid 3883336] (70014)End of file found: [client 216.73.216.199:6097] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:51.042248 2026] [security2:error] [pid 3882743:tid 3882743] [client 114.119.157.183:33435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/wp-content/uploads/2022/02/IMG_ABF9561A7201-1.jpeg"] [unique_id "amtuo3kuC8xXVH72cq7fZQAAABM"], referer: https://www.erskinenazarene.co.uk/lenten-discipleship-workshop/
[Thu Jul 30 16:32:52.400512 2026] [ssl:error] [pid 3877277:tid 3877277] (EAI 2)Name or service not known: [client 144.76.19.72:64826] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:52.400546 2026] [ssl:error] [pid 3877277:tid 3877277] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:52.468562 2026] [ssl:error] [pid 3885307:tid 3885307] (EAI 2)Name or service not known: [client 144.76.19.72:64842] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:52.468600 2026] [ssl:error] [pid 3885307:tid 3885307] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:53.791951 2026] [core:error] [pid 3883269:tid 3883269] (13)Permission denied: [client 216.73.216.199:14520] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 16:32:54.411188 2026] [ssl:error] [pid 3883269:tid 3883269] (70014)End of file found: [client 216.73.216.199:14520] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:32:55.329566 2026] [core:error] [pid 3884758:tid 3884758] (13)Permission denied: [client 216.73.216.199:11086] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/sys/module/kgdboc/uevent
[Thu Jul 30 16:32:55.521502 2026] [ssl:error] [pid 3870342:tid 3870342] (EAI 2)Name or service not known: [client 144.76.19.72:64848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:55.521539 2026] [ssl:error] [pid 3870342:tid 3870342] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:55.576033 2026] [ssl:error] [pid 3884246:tid 3884246] (EAI 2)Name or service not known: [client 144.76.19.72:64854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:55.576079 2026] [ssl:error] [pid 3884246:tid 3884246] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:55.937013 2026] [core:error] [pid 3884758:tid 3884758] (13)Permission denied: [client 216.73.216.199:11086] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS3/iomem_reg_shift
[Thu Jul 30 16:32:57.157838 2026] [security2:error] [pid 3884758:tid 3884758] [client 216.73.216.199:11086] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".cfg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/autoconf/autom4te.cfg"] [unique_id "amtuqQAUO-mINf40E4x5OgAAABs"]
[Thu Jul 30 16:32:57.158267 2026] [security2:error] [pid 3884758:tid 3884758] [client 216.73.216.199:11086] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/autoconf/autom4te.cfg"] [unique_id "amtuqQAUO-mINf40E4x5OgAAABs"]
[Thu Jul 30 16:32:57.158584 2026] [security2:error] [pid 3884758:tid 3884758] [client 216.73.216.199:11086] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/usr/share/autoconf/autom4te.cfg"] [unique_id "amtuqQAUO-mINf40E4x5OgAAABs"]
[Thu Jul 30 16:32:58.631242 2026] [ssl:error] [pid 3870338:tid 3870338] (EAI 2)Name or service not known: [client 144.76.19.72:64860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:58.631279 2026] [ssl:error] [pid 3870338:tid 3870338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:58.690595 2026] [ssl:error] [pid 3884760:tid 3884760] (EAI 2)Name or service not known: [client 144.76.19.72:64862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:32:58.690636 2026] [ssl:error] [pid 3884760:tid 3884760] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:32:58.783945 2026] [security2:error] [pid 3879782:tid 3879782] [client 20.171.55.167:7475] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.stopfordsackville.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtuqp3nqnT2z1BP309BNAAAACs"]
[Thu Jul 30 16:32:58.784168 2026] [security2:error] [pid 3879782:tid 3879782] [client 20.171.55.167:7475] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.stopfordsackville.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtuqp3nqnT2z1BP309BNAAAACs"]
[Thu Jul 30 16:32:58.812995 2026] [security2:error] [pid 3879782:tid 3879782] [client 20.171.55.167:7475] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.stopfordsackville.com"] [uri "/403.shtml"] [unique_id "amtuqp3nqnT2z1BP309BNAAAACs"]
[Thu Jul 30 16:32:59.577941 2026] [core:error] [pid 3884758:tid 3884758] (13)Permission denied: [client 216.73.216.199:11086] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS0/iomem_base
[Thu Jul 30 16:33:01.732369 2026] [security2:error] [pid 3885239:tid 3885239] [client 170.106.99.233:54497] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amturfVFekspKMoNmD0UqwAAACc"]
[Thu Jul 30 16:33:01.732421 2026] [security2:error] [pid 3885239:tid 3885239] [client 170.106.99.233:54497] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amturfVFekspKMoNmD0UqwAAACc"]
[Thu Jul 30 16:33:01.732673 2026] [security2:error] [pid 3885239:tid 3885239] [client 170.106.99.233:54497] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amturfVFekspKMoNmD0UqwAAACc"]
[Thu Jul 30 16:33:01.747954 2026] [ssl:error] [pid 3883270:tid 3883270] (EAI 2)Name or service not known: [client 144.76.19.72:32866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:01.747979 2026] [ssl:error] [pid 3883270:tid 3883270] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:01.800020 2026] [ssl:error] [pid 3875592:tid 3875592] (EAI 2)Name or service not known: [client 144.76.19.72:32870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:01.800086 2026] [ssl:error] [pid 3875592:tid 3875592] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:01.941977 2026] [security2:error] [pid 3885314:tid 3885314] [client 118.24.135.34:45968] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.leaccess.co.uk"] [uri "/"] [unique_id "amturRveTtupN85vQH_93gAAADU"]
[Thu Jul 30 16:33:02.210846 2026] [core:error] [pid 3885312:tid 3885312] (13)Permission denied: [client 216.73.216.199:44293] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:45/subsystem/ttyS3/irq
[Thu Jul 30 16:33:02.321047 2026] [ssl:error] [pid 3885312:tid 3885312] (70014)End of file found: [client 216.73.216.199:44293] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:02.786305 2026] [security2:error] [pid 3881175:tid 3881175] [client 150.5.129.143:11679] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amturksW6HQzvwjZeKqxFwAAAAQ"]
[Thu Jul 30 16:33:02.786358 2026] [security2:error] [pid 3881175:tid 3881175] [client 150.5.129.143:11679] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amturksW6HQzvwjZeKqxFwAAAAQ"]
[Thu Jul 30 16:33:02.786656 2026] [security2:error] [pid 3881175:tid 3881175] [client 150.5.129.143:11679] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amturksW6HQzvwjZeKqxFwAAAAQ"]
[Thu Jul 30 16:33:02.926118 2026] [core:error] [pid 3884758:tid 3884758] (13)Permission denied: [client 216.73.216.199:11086] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory2/subsystem/uevent
[Thu Jul 30 16:33:04.857791 2026] [ssl:error] [pid 3875591:tid 3875591] (EAI 2)Name or service not known: [client 144.76.19.72:32876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:04.857827 2026] [ssl:error] [pid 3875591:tid 3875591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:04.913830 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:32888] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:04.913858 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:05.648102 2026] [ssl:error] [pid 3884758:tid 3884758] (70014)End of file found: [client 216.73.216.199:11086] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:05.984248 2026] [security2:error] [pid 3870306:tid 3870306] [client 185.191.171.13:17910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/two-point-hospital-layout-planner"] [unique_id "amtusYMZg38-Ie6lcyX4mwAAAEA"]
[Thu Jul 30 16:33:06.080813 2026] [authz_core:error] [pid 3886796:tid 3886796] [client 66.249.66.34:44065] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:33:06.083535 2026] [authz_core:error] [pid 3886796:tid 3886796] [client 66.249.66.34:44065] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:33:06.357834 2026] [security2:error] [pid 3885240:tid 3885240] [client 150.5.129.143:39351] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtusqhkOQuToM5xA0cD-AAAACg"]
[Thu Jul 30 16:33:06.357880 2026] [security2:error] [pid 3885240:tid 3885240] [client 150.5.129.143:39351] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtusqhkOQuToM5xA0cD-AAAACg"]
[Thu Jul 30 16:33:06.358140 2026] [security2:error] [pid 3885240:tid 3885240] [client 150.5.129.143:39351] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtusqhkOQuToM5xA0cD-AAAACg"]
[Thu Jul 30 16:33:06.551230 2026] [core:error] [pid 3884717:tid 3884717] (13)Permission denied: [client 216.73.216.199:33816] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:33/subsystem/ttyS3/irq
[Thu Jul 30 16:33:06.851595 2026] [core:error] [pid 3884717:tid 3884717] (13)Permission denied: [client 216.73.216.199:33816] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:63/subsystem/ttyS0/iomem_base
[Thu Jul 30 16:33:07.454505 2026] [core:error] [pid 3884717:tid 3884717] (13)Permission denied: [client 216.73.216.199:33816] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/intel_idle/uevent
[Thu Jul 30 16:33:07.657201 2026] [authz_core:error] [pid 3885313:tid 3885313] [client 20.215.186.36:65445] AH01630: client denied by server configuration: /home/hatchw/public_html/php.ini
[Thu Jul 30 16:33:07.970817 2026] [ssl:error] [pid 3879780:tid 3879780] (EAI 2)Name or service not known: [client 144.76.19.72:32898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:07.970858 2026] [ssl:error] [pid 3879780:tid 3879780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:08.026670 2026] [ssl:error] [pid 3870306:tid 3870306] (EAI 2)Name or service not known: [client 144.76.19.72:32912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:08.026709 2026] [ssl:error] [pid 3870306:tid 3870306] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:08.057216 2026] [core:error] [pid 3884717:tid 3884717] (13)Permission denied: [client 216.73.216.199:33816] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/cwd/sys/module/ipt_REJECT/uevent
[Thu Jul 30 16:33:08.658495 2026] [ssl:error] [pid 3884717:tid 3884717] (70014)End of file found: [client 216.73.216.199:33816] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:10.241689 2026] [access_compat:error] [pid 3885307:tid 3885307] [client 45.158.164.139:36120] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:33:10.791628 2026] [ssl:error] [pid 3875591:tid 3875591] (70014)End of file found: [client 216.73.216.199:13966] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:11.084868 2026] [ssl:error] [pid 3864008:tid 3864008] (EAI 2)Name or service not known: [client 144.76.19.72:23500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:11.084907 2026] [ssl:error] [pid 3864008:tid 3864008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:11.139150 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:23508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:11.139179 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:11.289823 2026] [ssl:error] [pid 3877277:tid 3877277] (70014)End of file found: [client 216.73.216.199:29789] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:14.203622 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:23512] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:14.203650 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:14.256789 2026] [ssl:error] [pid 3885312:tid 3885312] (EAI 2)Name or service not known: [client 144.76.19.72:23524] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:14.256835 2026] [ssl:error] [pid 3885312:tid 3885312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:14.451354 2026] [ssl:error] [pid 3884760:tid 3884760] (70014)End of file found: [client 216.73.216.199:48606] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:17.280764 2026] [security2:error] [pid 3879782:tid 3879782] [client 20.63.98.115:55694] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "barbaramatarrese.com"] [uri "/wp-config.php"] [unique_id "amtuvZ3nqnT2z1BP309BZQAAACs"]
[Thu Jul 30 16:33:17.281037 2026] [security2:error] [pid 3879782:tid 3879782] [client 20.63.98.115:55694] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "barbaramatarrese.com"] [uri "/wp-config.php"] [unique_id "amtuvZ3nqnT2z1BP309BZQAAACs"]
[Thu Jul 30 16:33:17.281379 2026] [security2:error] [pid 3879782:tid 3879782] [client 20.63.98.115:55694] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "barbaramatarrese.com"] [uri "/wp-config.php"] [unique_id "amtuvZ3nqnT2z1BP309BZQAAACs"]
[Thu Jul 30 16:33:17.344760 2026] [ssl:error] [pid 3829432:tid 3829432] (EAI 2)Name or service not known: [client 144.76.19.72:23530] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:17.344793 2026] [ssl:error] [pid 3829432:tid 3829432] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:17.396693 2026] [ssl:error] [pid 3885240:tid 3885240] (EAI 2)Name or service not known: [client 144.76.19.72:23536] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:17.396737 2026] [ssl:error] [pid 3885240:tid 3885240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:17.462849 2026] [ssl:error] [pid 3869886:tid 3869886] (70014)End of file found: [client 216.73.216.199:35896] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:17.727359 2026] [security2:error] [pid 3885173:tid 3885173] [client 185.191.171.16:25490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,7281.15.html"] [unique_id "amtuvUzq2LVVdyJau-YckwAAACU"]
[Thu Jul 30 16:33:18.068756 2026] [ssl:error] [pid 3882743:tid 3882743] (70014)End of file found: [client 216.73.216.199:21825] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:19.875749 2026] [ssl:error] [pid 3874389:tid 3874389] (70014)End of file found: [client 216.73.216.199:5467] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:20.451901 2026] [ssl:error] [pid 3883338:tid 3883338] (EAI 2)Name or service not known: [client 144.76.19.72:45770] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:20.451941 2026] [ssl:error] [pid 3883338:tid 3883338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:20.539762 2026] [ssl:error] [pid 3886834:tid 3886834] (EAI 2)Name or service not known: [client 144.76.19.72:45772] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:20.539795 2026] [ssl:error] [pid 3886834:tid 3886834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:23.592418 2026] [ssl:error] [pid 3872801:tid 3872801] (EAI 2)Name or service not known: [client 144.76.19.72:45774] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:23.592454 2026] [ssl:error] [pid 3872801:tid 3872801] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:23.645199 2026] [ssl:error] [pid 3879782:tid 3879782] (EAI 2)Name or service not known: [client 144.76.19.72:45790] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:23.645222 2026] [ssl:error] [pid 3879782:tid 3879782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:24.492358 2026] [core:error] [pid 3829432:tid 3829432] (13)Permission denied: [client 216.73.216.199:3889] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:40/subsystem/ttyS3/port
[Thu Jul 30 16:33:24.820982 2026] [security2:error] [pid 3857654:tid 3857654] [client 74.7.241.40:46012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ns-ganymede.com"] [uri "/"] [unique_id "amtuxAPeX1esuFuckongHQAAAAE"]
[Thu Jul 30 16:33:26.209765 2026] [core:error] [pid 3829432:tid 3829432] (13)Permission denied: [client 216.73.216.199:3889] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty2/subsystem/ttyS3/line
[Thu Jul 30 16:33:26.729180 2026] [ssl:error] [pid 3879780:tid 3879780] (EAI 2)Name or service not known: [client 144.76.19.72:45796] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:26.729228 2026] [ssl:error] [pid 3879780:tid 3879780] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:26.782991 2026] [ssl:error] [pid 3857654:tid 3857654] (EAI 2)Name or service not known: [client 144.76.19.72:45806] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:26.783024 2026] [ssl:error] [pid 3857654:tid 3857654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:28.459775 2026] [access_compat:error] [pid 3864008:tid 3864008] [client 45.158.164.139:47482] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:33:29.837805 2026] [ssl:error] [pid 3864008:tid 3864008] (EAI 2)Name or service not known: [client 144.76.19.72:33916] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:29.837834 2026] [ssl:error] [pid 3864008:tid 3864008] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:29.900645 2026] [ssl:error] [pid 3887704:tid 3887704] (EAI 2)Name or service not known: [client 144.76.19.72:33918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:29.900679 2026] [ssl:error] [pid 3887704:tid 3887704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:30.357064 2026] [security2:error] [pid 3887704:tid 3887704] [client 49.51.243.95:40088] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.shelterforum.info"] [uri "/"] [unique_id "amtuym5h5t3ePxoNyJmsTgAAABQ"]
[Thu Jul 30 16:33:30.429550 2026] [core:error] [pid 3885238:tid 3885238] (13)Permission denied: [client 216.73.216.199:3333] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:50/subsystem/ttyS3/iomem_base
[Thu Jul 30 16:33:30.731530 2026] [ssl:error] [pid 3885238:tid 3885238] (70014)End of file found: [client 216.73.216.199:3333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:31.176996 2026] [security2:error] [pid 3885308:tid 3885308] [client 175.27.163.171:54426] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ilkagriese.com"] [uri "/"] [unique_id "amtuy3OMRl1P40usJa-kzwAAAC4"]
[Thu Jul 30 16:33:32.843130 2026] [core:error] [pid 3829432:tid 3829432] (13)Permission denied: [client 216.73.216.199:3889] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/bus/serio/uevent
[Thu Jul 30 16:33:32.959583 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:33922] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:32.959613 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:33.015795 2026] [ssl:error] [pid 3875631:tid 3875631] (EAI 2)Name or service not known: [client 144.76.19.72:33936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:33.015824 2026] [ssl:error] [pid 3875631:tid 3875631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:33.077432 2026] [authz_core:error] [pid 3885239:tid 3885239] [client 66.249.66.33:43928] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:33:33.080124 2026] [authz_core:error] [pid 3885239:tid 3885239] [client 66.249.66.33:43928] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:33:33.772743 2026] [cgi:error] [pid 3829432:tid 3829432] [client 216.73.216.199:3889] AH01215: stderr from /home/healthki/public_html/wp-includes/js/swfupload/1/2/usr/share/doc/perl-HTTP-Tiny/eg/get.pl: suexec policy violation: see suexec log for more details
[Thu Jul 30 16:33:33.772787 2026] [cgi:error] [pid 3829432:tid 3829432] [client 216.73.216.199:3889] End of script output before headers: get.pl
[Thu Jul 30 16:33:36.104390 2026] [ssl:error] [pid 3869886:tid 3869886] (EAI 2)Name or service not known: [client 144.76.19.72:33946] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:36.104427 2026] [ssl:error] [pid 3869886:tid 3869886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:36.158877 2026] [ssl:error] [pid 3883338:tid 3883338] (EAI 2)Name or service not known: [client 144.76.19.72:33948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:36.158907 2026] [ssl:error] [pid 3883338:tid 3883338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:36.755097 2026] [core:error] [pid 3887764:tid 3887764] (13)Permission denied: [client 216.73.216.199:1096] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS2/iomem_reg_shift
[Thu Jul 30 16:33:37.058182 2026] [ssl:error] [pid 3887764:tid 3887764] (70014)End of file found: [client 216.73.216.199:1096] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:39.215778 2026] [ssl:error] [pid 3886280:tid 3886280] (EAI 2)Name or service not known: [client 144.76.19.72:33954] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:39.215818 2026] [ssl:error] [pid 3886280:tid 3886280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:39.271824 2026] [ssl:error] [pid 3887868:tid 3887868] (EAI 2)Name or service not known: [client 144.76.19.72:33962] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:39.271854 2026] [ssl:error] [pid 3887868:tid 3887868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:39.762657 2026] [core:error] [pid 3869886:tid 3869886] (13)Permission denied: [client 216.73.216.199:48971] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/run/tailwatchd.pid
[Thu Jul 30 16:33:40.064256 2026] [core:error] [pid 3869886:tid 3869886] (13)Permission denied: [client 216.73.216.199:48971] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/4:42/subsystem/ttyS2/irq
[Thu Jul 30 16:33:40.367214 2026] [ssl:error] [pid 3869886:tid 3869886] (70014)End of file found: [client 216.73.216.199:48971] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:41.875999 2026] [core:error] [pid 3870337:tid 3870337] (13)Permission denied: [client 216.73.216.199:55710] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/wakeup/wakeup11/device/device:12/subsystem/drivers_probe
[Thu Jul 30 16:33:42.178831 2026] [core:error] [pid 3870337:tid 3870337] (13)Permission denied: [client 216.73.216.199:55710] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/class/tty/tty3/subsystem/ttyS1/closing_wait
[Thu Jul 30 16:33:42.340863 2026] [ssl:error] [pid 3870305:tid 3870305] (EAI 2)Name or service not known: [client 144.76.19.72:42868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:42.340895 2026] [ssl:error] [pid 3870305:tid 3870305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:42.395235 2026] [ssl:error] [pid 3887764:tid 3887764] (EAI 2)Name or service not known: [client 144.76.19.72:42876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:42.395269 2026] [ssl:error] [pid 3887764:tid 3887764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:42.778886 2026] [ssl:error] [pid 3870337:tid 3870337] (70014)End of file found: [client 216.73.216.199:55710] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:43.289927 2026] [ssl:error] [pid 3862626:tid 3862626] (70014)End of file found: [client 216.73.216.199:11460] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:45.447357 2026] [ssl:error] [pid 3875591:tid 3875591] (EAI 2)Name or service not known: [client 144.76.19.72:42892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:45.447392 2026] [ssl:error] [pid 3875591:tid 3875591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:45.499536 2026] [ssl:error] [pid 3883338:tid 3883338] (EAI 2)Name or service not known: [client 144.76.19.72:42894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:45.499565 2026] [ssl:error] [pid 3883338:tid 3883338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:46.691770 2026] [ssl:error] [pid 3864008:tid 3864008] (70014)End of file found: [client 216.73.216.199:23518] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:48.201707 2026] [core:error] [pid 3888245:tid 3888245] (13)Permission denied: [client 216.73.216.199:43102] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/dev/char/5:0/subsystem/ttyS3/port
[Thu Jul 30 16:33:48.552641 2026] [ssl:error] [pid 3884758:tid 3884758] (EAI 2)Name or service not known: [client 144.76.19.72:42906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:48.552673 2026] [ssl:error] [pid 3884758:tid 3884758] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:48.608490 2026] [ssl:error] [pid 3884717:tid 3884717] (EAI 2)Name or service not known: [client 144.76.19.72:42914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:48.608547 2026] [ssl:error] [pid 3884717:tid 3884717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:48.803270 2026] [ssl:error] [pid 3888245:tid 3888245] (70014)End of file found: [client 216.73.216.199:43102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:49.992663 2026] [cgi:error] [pid 3862626:tid 3862626] [client 20.104.22.47:20736] AH02812: stderr from /home/edmundw1ld/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:33:50.065113 2026] [security2:error] [pid 3885238:tid 3885238] [client 185.191.171.15:11312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3260.0.html"] [unique_id "amtu3ibQ81-yBbSQUfgJLAAAACY"]
[Thu Jul 30 16:33:50.167628 2026] [security2:error] [pid 3885173:tid 3885173] [client 20.63.98.115:48683] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "barbaramatarrese.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtu3kzq2LVVdyJau-YcsgAAACU"]
[Thu Jul 30 16:33:50.167814 2026] [security2:error] [pid 3885173:tid 3885173] [client 20.63.98.115:48683] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "barbaramatarrese.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtu3kzq2LVVdyJau-YcsgAAACU"]
[Thu Jul 30 16:33:50.168031 2026] [security2:error] [pid 3885173:tid 3885173] [client 20.63.98.115:48683] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=5,HTTP=0,SESS=0): PHP Injection Attack: High-Risk PHP Function Name Found"] [tag "event-correlation"] [hostname "barbaramatarrese.com"] [uri "/wp-includes/SimplePie/gzdecodes.php"] [unique_id "amtu3kzq2LVVdyJau-YcsgAAACU"]
[Thu Jul 30 16:33:50.198082 2026] [ssl:error] [pid 3882743:tid 3882743] (70014)End of file found: [client 216.73.216.199:57078] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:51.052539 2026] [authz_core:error] [pid 3862626:tid 3862626] [client 20.104.22.47:20736] AH01630: client denied by server configuration: /home/edmundw1ld/public_html/php.ini
[Thu Jul 30 16:33:51.664000 2026] [ssl:error] [pid 3887766:tid 3887766] (EAI 2)Name or service not known: [client 144.76.19.72:54434] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:51.664040 2026] [ssl:error] [pid 3887766:tid 3887766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:51.718987 2026] [ssl:error] [pid 3869886:tid 3869886] (EAI 2)Name or service not known: [client 144.76.19.72:54436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:51.719016 2026] [ssl:error] [pid 3869886:tid 3869886] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:53.790765 2026] [ssl:error] [pid 3885313:tid 3885313] (70014)End of file found: [client 216.73.216.199:16259] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:53.815782 2026] [core:error] [pid 3885308:tid 3885308] [client 66.249.66.8:44002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:33:53.815807 2026] [core:error] [pid 3885308:tid 3885308] [client 66.249.66.8:44002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:33:54.773220 2026] [ssl:error] [pid 3887764:tid 3887764] (EAI 2)Name or service not known: [client 144.76.19.72:54450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:54.773255 2026] [ssl:error] [pid 3887764:tid 3887764] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:54.828287 2026] [ssl:error] [pid 3885239:tid 3885239] (EAI 2)Name or service not known: [client 144.76.19.72:54464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:54.828332 2026] [ssl:error] [pid 3885239:tid 3885239] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:56.700510 2026] [ssl:error] [pid 3887765:tid 3887765] (70014)End of file found: [client 216.73.216.199:18841] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:57.003169 2026] [ssl:error] [pid 3885310:tid 3885310] (70014)End of file found: [client 216.73.216.199:38581] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:33:57.012264 2026] [security2:error] [pid 3887868:tid 3887868] [client 47.128.61.186:15888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Bytespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "quantum.com.mt"] [uri "/robots.txt"] [unique_id "amtu5ZyKTjKNcahKmyFKngAAACE"]
[Thu Jul 30 16:33:57.554323 2026] [access_compat:error] [pid 3887704:tid 3887704] [client 172.213.232.128:4659] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/geju.php
[Thu Jul 30 16:33:57.554692 2026] [core:error] [pid 3887704:tid 3887704] [client 172.213.232.128:4659] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:33:57.891755 2026] [ssl:error] [pid 3883269:tid 3883269] (EAI 2)Name or service not known: [client 144.76.19.72:54472] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:57.891804 2026] [ssl:error] [pid 3883269:tid 3883269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:57.928626 2026] [core:error] [pid 3879780:tid 3879780] [client 172.213.232.128:9462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:33:57.928652 2026] [core:error] [pid 3879780:tid 3879780] [client 172.213.232.128:9462] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:33:57.946853 2026] [ssl:error] [pid 3888245:tid 3888245] (EAI 2)Name or service not known: [client 144.76.19.72:54486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:33:57.946905 2026] [ssl:error] [pid 3888245:tid 3888245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:33:58.257400 2026] [access_compat:error] [pid 3885241:tid 3885241] [client 172.213.232.128:8339] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/wp.php
[Thu Jul 30 16:33:58.257730 2026] [core:error] [pid 3885241:tid 3885241] [client 172.213.232.128:8339] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:33:58.797616 2026] [access_compat:error] [pid 3879780:tid 3879780] [client 172.213.232.128:4301] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/aaa.php
[Thu Jul 30 16:33:58.797947 2026] [core:error] [pid 3879780:tid 3879780] [client 172.213.232.128:4301] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:33:59.306136 2026] [ssl:error] [pid 3875591:tid 3875591] (70014)End of file found: [client 216.73.216.199:38463] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:01.011544 2026] [ssl:error] [pid 3887766:tid 3887766] (EAI 2)Name or service not known: [client 144.76.19.72:52924] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:01.011579 2026] [ssl:error] [pid 3887766:tid 3887766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:01.065887 2026] [ssl:error] [pid 3885241:tid 3885241] (EAI 2)Name or service not known: [client 144.76.19.72:52936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:01.065939 2026] [ssl:error] [pid 3885241:tid 3885241] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:01.355677 2026] [access_compat:error] [pid 3886280:tid 3886280] [client 172.213.232.128:14268] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/hoot.php
[Thu Jul 30 16:34:01.356055 2026] [core:error] [pid 3886280:tid 3886280] [client 172.213.232.128:14268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:02.505825 2026] [security2:error] [pid 3885173:tid 3885173] [client 73.193.170.111:36422] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtu6kzq2LVVdyJau-YcwQAAACU"]
[Thu Jul 30 16:34:02.505878 2026] [security2:error] [pid 3885173:tid 3885173] [client 73.193.170.111:36422] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtu6kzq2LVVdyJau-YcwQAAACU"]
[Thu Jul 30 16:34:02.506128 2026] [security2:error] [pid 3885173:tid 3885173] [client 73.193.170.111:36422] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtu6kzq2LVVdyJau-YcwQAAACU"]
[Thu Jul 30 16:34:02.720494 2026] [ssl:error] [pid 3887766:tid 3887766] (70014)End of file found: [client 216.73.216.199:9847] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:02.834184 2026] [core:error] [pid 3885310:tid 3885310] [client 74.7.241.145:38502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:02.834211 2026] [core:error] [pid 3885310:tid 3885310] [client 74.7.241.145:38502] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:04.150156 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:52944] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:04.150203 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:04.204703 2026] [ssl:error] [pid 3887704:tid 3887704] (EAI 2)Name or service not known: [client 144.76.19.72:52952] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:04.204766 2026] [ssl:error] [pid 3887704:tid 3887704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:05.478021 2026] [core:error] [pid 3889167:tid 3889167] [client 172.213.232.128:9426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:05.478076 2026] [core:error] [pid 3889167:tid 3889167] [client 172.213.232.128:9426] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:06.335423 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:3160] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:06.427808 2026] [security2:error] [pid 3889167:tid 3889167] [client 85.208.96.212:61064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/big-scarr/scott-merritt-robertson-age"] [unique_id "amtu7jg7ggYenqE-CAydQwAAAAY"]
[Thu Jul 30 16:34:06.451080 2026] [cgi:error] [pid 3879782:tid 3879782] [client 20.9.4.9:60863] AH02812: stderr from /home/ajowfeua/public_html/comicsuncovered/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:34:06.859709 2026] [security2:error] [pid 3887704:tid 3887704] [client 185.191.171.12:33220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3660.0.html"] [unique_id "amtu7m5h5t3ePxoNyJmsXgAAABQ"]
[Thu Jul 30 16:34:07.256848 2026] [ssl:error] [pid 3887704:tid 3887704] (EAI 2)Name or service not known: [client 144.76.19.72:52968] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:07.256881 2026] [ssl:error] [pid 3887704:tid 3887704] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:07.308331 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:52980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:07.308366 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:08.200616 2026] [authz_core:error] [pid 3879782:tid 3879782] [client 20.9.4.9:60863] AH01630: client denied by server configuration: /home/ajowfeua/public_html/comicsuncovered/php.ini
[Thu Jul 30 16:34:09.687292 2026] [security2:error] [pid 3885239:tid 3885239] [client 74.7.227.31:38376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "q-s-e.org"] [uri "/"] [unique_id "amtu8fVFekspKMoNmD0U-AAAACc"], referer: http://www.getonline.co.in
[Thu Jul 30 16:34:10.361454 2026] [ssl:error] [pid 3860319:tid 3860319] (EAI 2)Name or service not known: [client 144.76.19.72:20338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:10.361483 2026] [ssl:error] [pid 3860319:tid 3860319] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:10.418515 2026] [ssl:error] [pid 3887766:tid 3887766] (EAI 2)Name or service not known: [client 144.76.19.72:20342] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:10.418543 2026] [ssl:error] [pid 3887766:tid 3887766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:11.162394 2026] [ssl:error] [pid 3887764:tid 3887764] (70014)End of file found: [client 216.73.216.199:41949] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:11.406801 2026] [core:error] [pid 3889899:tid 3889899] [client 172.213.232.128:13794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:11.406862 2026] [core:error] [pid 3889899:tid 3889899] [client 172.213.232.128:13794] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:12.209860 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:12.236454 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/this_is_a_new_hello_world.php
[Thu Jul 30 16:34:12.236497 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.263155 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x.php
[Thu Jul 30 16:34:12.263200 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.292627 2026] [core:error] [pid 3860319:tid 3860319] [client 172.213.232.128:12302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:12.292654 2026] [core:error] [pid 3860319:tid 3860319] [client 172.213.232.128:12302] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:12.323442 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mgrr.php
[Thu Jul 30 16:34:12.323492 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.375056 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/domvf.php
[Thu Jul 30 16:34:12.375122 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.401807 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/yup.php
[Thu Jul 30 16:34:12.401876 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.430340 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/X.php
[Thu Jul 30 16:34:12.430393 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.478862 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dyt8mjxc3yofbkoriukvgjaCdefault.php
[Thu Jul 30 16:34:12.478912 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.526696 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gec.php
[Thu Jul 30 16:34:12.526739 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.553383 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sky.php
[Thu Jul 30 16:34:12.553424 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.579753 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fffm.php
[Thu Jul 30 16:34:12.579798 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.606574 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/sixxis.php
[Thu Jul 30 16:34:12.606622 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.633109 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/yj09.php
[Thu Jul 30 16:34:12.633164 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.671969 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/k.php
[Thu Jul 30 16:34:12.672016 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.711787 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/k2.php
[Thu Jul 30 16:34:12.711839 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.716780 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:12870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:12.716806 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:12870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:12.740552 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w.php
[Thu Jul 30 16:34:12.740629 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.793702 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fpwch.php
[Thu Jul 30 16:34:12.793784 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.821514 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/w2025.php
[Thu Jul 30 16:34:12.821561 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.832497 2026] [security2:error] [pid 3885240:tid 3885240] [client 114.119.155.144:65219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/sermons/remember-to-forget/"] [unique_id "amtu9KhkOQuToM5xA0cEbwAAACg"], referer: http://www.erskinenazarene.co.uk/sermons/page/5/
[Thu Jul 30 16:34:12.859524 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/FWAZ.php
[Thu Jul 30 16:34:12.859572 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.900783 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/qterm.php
[Thu Jul 30 16:34:12.900864 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.928670 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/blurbs.php
[Thu Jul 30 16:34:12.928723 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.955372 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-ws68.php
[Thu Jul 30 16:34:12.955422 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:12.991550 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xyn.php
[Thu Jul 30 16:34:12.991600 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.030896 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ccc.php
[Thu Jul 30 16:34:13.030951 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.057474 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/get.php
[Thu Jul 30 16:34:13.057519 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.091524 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/images.php
[Thu Jul 30 16:34:13.091570 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.120227 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/alls.php
[Thu Jul 30 16:34:13.120275 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.147444 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/coffexium.php
[Thu Jul 30 16:34:13.147484 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.174825 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/red.php
[Thu Jul 30 16:34:13.174868 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.201348 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:13.233290 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:13.259971 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:13.302489 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:13.329119 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:13.358761 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 16:34:13.358814 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.385259 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/177.php
[Thu Jul 30 16:34:13.385311 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.411951 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/199.php
[Thu Jul 30 16:34:13.411995 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.440685 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file52.php
[Thu Jul 30 16:34:13.440725 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.472022 2026] [ssl:error] [pid 3887868:tid 3887868] (EAI 2)Name or service not known: [client 144.76.19.72:20346] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:13.472046 2026] [ssl:error] [pid 3887868:tid 3887868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:13.476393 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/geck.php
[Thu Jul 30 16:34:13.476430 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.509771 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/biufile.php
[Thu Jul 30 16:34:13.509817 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.523777 2026] [ssl:error] [pid 3890002:tid 3890002] (EAI 2)Name or service not known: [client 144.76.19.72:20362] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:13.523805 2026] [ssl:error] [pid 3890002:tid 3890002] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:13.538810 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dejavu.php
[Thu Jul 30 16:34:13.538873 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.568704 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaf.php
[Thu Jul 30 16:34:13.568764 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.595568 2026] [core:error] [pid 3882743:tid 3882743] [client 172.213.232.128:39681] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:13.595625 2026] [core:error] [pid 3882743:tid 3882743] [client 172.213.232.128:39681] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:13.628807 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ha.php
[Thu Jul 30 16:34:13.628869 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.659609 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hur.php
[Thu Jul 30 16:34:13.659660 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.686812 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/h02ugyh.php
[Thu Jul 30 16:34:13.686859 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.713555 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/155.php
[Thu Jul 30 16:34:13.713606 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.746797 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ops.php
[Thu Jul 30 16:34:13.746863 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.773536 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ingfo.php
[Thu Jul 30 16:34:13.773590 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.800460 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/error_log.php
[Thu Jul 30 16:34:13.800518 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.803405 2026] [security2:error] [pid 3890002:tid 3890002] [client 43.167.232.38:36194] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "kinesiologylondon.co.uk"] [uri "/kinesiologylondon.co.uk.old/"] [unique_id "amtu9c37tp8T6sO4t2jEXQAAAAs"]
[Thu Jul 30 16:34:13.827329 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/koala.php
[Thu Jul 30 16:34:13.827390 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.854462 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/mac.php
[Thu Jul 30 16:34:13.854521 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.890887 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wefile.php
[Thu Jul 30 16:34:13.890940 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:13.918021 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:13.945051 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:13.973291 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/makeasmtp.php
[Thu Jul 30 16:34:13.973361 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.002545 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/2P.php
[Thu Jul 30 16:34:14.002601 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.014215 2026] [core:error] [pid 3889167:tid 3889167] [client 172.213.232.128:39727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:14.014240 2026] [core:error] [pid 3889167:tid 3889167] [client 172.213.232.128:39727] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:14.029670 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/.well-known/about.php
[Thu Jul 30 16:34:14.029726 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.056273 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:14.083928 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/system_log.php
[Thu Jul 30 16:34:14.083984 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.111785 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:14.128019 2026] [authz_core:error] [pid 3884758:tid 3884758] [client 104.152.52.61:45571] AH01630: client denied by server configuration: /home/acthorou/public_html/error_log
[Thu Jul 30 16:34:14.128085 2026] [authz_core:error] [pid 3884758:tid 3884758] [client 104.152.52.61:45571] AH01630: client denied by server configuration: /home/acthorou/public_html/web.config
[Thu Jul 30 16:34:14.167451 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:14.205591 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/crgio.php
[Thu Jul 30 16:34:14.205643 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.250256 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pucci.php
[Thu Jul 30 16:34:14.250312 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.280538 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:14.307511 2026] [security2:error] [pid 3885240:tid 3885240] [client 114.119.155.144:65227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/sermons/remember-to-forget/"] [unique_id "amtu9qhkOQuToM5xA0cEcAAAACg"], referer: http://www.erskinenazarene.co.uk/sermons/page/5/
[Thu Jul 30 16:34:14.307535 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:14.334583 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-temp.php
[Thu Jul 30 16:34:14.334631 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.374209 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:14.415628 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/puc.php
[Thu Jul 30 16:34:14.415688 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.463536 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dx.php
[Thu Jul 30 16:34:14.463585 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.501497 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:14.551329 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/7.php
[Thu Jul 30 16:34:14.551378 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.578192 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/8.php
[Thu Jul 30 16:34:14.578240 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.605096 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1.php
[Thu Jul 30 16:34:14.605147 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.632602 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/about.php
[Thu Jul 30 16:34:14.632650 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.659552 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 16:34:14.659602 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.687479 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/edit.php
[Thu Jul 30 16:34:14.687523 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.714134 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:14.740870 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inputs.php
[Thu Jul 30 16:34:14.740931 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.767423 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/av.php
[Thu Jul 30 16:34:14.767469 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.794460 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/classwithtostring.php
[Thu Jul 30 16:34:14.794508 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.821250 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:14.847841 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-blog.php
[Thu Jul 30 16:34:14.847883 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:14.874540 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:14.928319 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:14.975543 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminfuns.php
[Thu Jul 30 16:34:14.975588 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.007790 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/goods.php
[Thu Jul 30 16:34:15.007844 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.035842 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ms-edit.php
[Thu Jul 30 16:34:15.035889 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.062426 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/222.php
[Thu Jul 30 16:34:15.062472 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.074834 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:46551] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:15.094587 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi-bin/index.php
[Thu Jul 30 16:34:15.094642 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.124694 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:15.195923 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/BDKR28WP.php
[Thu Jul 30 16:34:15.195970 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.224365 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:15.255642 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:15.293496 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp.php
[Thu Jul 30 16:34:15.293559 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.302098 2026] [security2:error] [pid 3890055:tid 3890055] [client 198.244.242.207:44332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "refraction.co.uk"] [uri "/blog/tag/vmware/"] [unique_id "amtu97LPeeby1PMw39lMyAAAABA"]
[Thu Jul 30 16:34:15.320578 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/abcd.php
[Thu Jul 30 16:34:15.320630 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.347276 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a1.php
[Thu Jul 30 16:34:15.347345 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.396736 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:15.424342 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/cgi-bin/admin.php
[Thu Jul 30 16:34:15.424412 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.451459 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-content
[Thu Jul 30 16:34:15.479849 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/simple.php
[Thu Jul 30 16:34:15.479907 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.516121 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xxx.php
[Thu Jul 30 16:34:15.516180 2026] [access_compat:error] [pid 3875631:tid 3875631] [client 20.203.205.96:45662] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.607731 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hypo.php
[Thu Jul 30 16:34:15.607786 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.659037 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:15.717226 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/chosen.php
[Thu Jul 30 16:34:15.717282 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.753479 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:15.781503 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/als.php
[Thu Jul 30 16:34:15.781562 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.836477 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pol.php
[Thu Jul 30 16:34:15.836524 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.864343 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file5.php
[Thu Jul 30 16:34:15.864388 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.896006 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file.php
[Thu Jul 30 16:34:15.896053 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.930521 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/admin.php
[Thu Jul 30 16:34:15.930570 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:15.976642 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aa2.php
[Thu Jul 30 16:34:15.976691 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.005274 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ccou.php
[Thu Jul 30 16:34:16.005331 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.034578 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dr.php
[Thu Jul 30 16:34:16.034625 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.062755 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xamp.php
[Thu Jul 30 16:34:16.062805 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.093382 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bless.php
[Thu Jul 30 16:34:16.093431 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.121301 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file25.php
[Thu Jul 30 16:34:16.121346 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.176360 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file6.php
[Thu Jul 30 16:34:16.176406 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.204382 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a2.php
[Thu Jul 30 16:34:16.204432 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.232340 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file15.php
[Thu Jul 30 16:34:16.232391 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.260485 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/f35.php
[Thu Jul 30 16:34:16.260538 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.304471 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-load.php
[Thu Jul 30 16:34:16.304518 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.332486 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xwpg.php
[Thu Jul 30 16:34:16.332532 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.360348 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-includes
[Thu Jul 30 16:34:16.391523 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:16.428900 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xstelth.php
[Thu Jul 30 16:34:16.428952 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.474740 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/wp-admin
[Thu Jul 30 16:34:16.526535 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aaa.php
[Thu Jul 30 16:34:16.526587 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.575710 2026] [ssl:error] [pid 3885310:tid 3885310] (EAI 2)Name or service not known: [client 144.76.19.72:20370] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:16.575748 2026] [ssl:error] [pid 3885310:tid 3885310] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:16.608942 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gecko.php
[Thu Jul 30 16:34:16.608991 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.630272 2026] [ssl:error] [pid 3890056:tid 3890056] (EAI 2)Name or service not known: [client 144.76.19.72:20386] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:16.630313 2026] [ssl:error] [pid 3890056:tid 3890056] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:16.637097 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pbck.php
[Thu Jul 30 16:34:16.637140 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.680767 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/xiugai.php
[Thu Jul 30 16:34:16.680815 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.721145 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/e.php
[Thu Jul 30 16:34:16.721198 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.749184 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/adminner.php
[Thu Jul 30 16:34:16.749226 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.810709 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/file1221.php
[Thu Jul 30 16:34:16.810757 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.860485 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/inx.php
[Thu Jul 30 16:34:16.860531 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.888821 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/qqqa.php
[Thu Jul 30 16:34:16.888870 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.890404 2026] [ssl:error] [pid 3885312:tid 3885312] (70014)End of file found: [client 216.73.216.199:30283] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:16.916729 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/reviall.php
[Thu Jul 30 16:34:16.916775 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:16.986559 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/404.php
[Thu Jul 30 16:34:16.986608 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.047945 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/bolt.php
[Thu Jul 30 16:34:17.047997 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.075823 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/File.php
[Thu Jul 30 16:34:17.075869 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.104521 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fi22.php
[Thu Jul 30 16:34:17.104567 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.133439 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/zero.php
[Thu Jul 30 16:34:17.133483 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.195545 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1xmomo.php
[Thu Jul 30 16:34:17.195594 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.264366 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/fmws.php
[Thu Jul 30 16:34:17.264417 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.314167 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/3PJcpMFsD8B.php
[Thu Jul 30 16:34:17.314213 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.342314 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/hp2.php
[Thu Jul 30 16:34:17.342363 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.398461 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/aabb.php
[Thu Jul 30 16:34:17.398525 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.431890 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1254xx.php
[Thu Jul 30 16:34:17.431943 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.460536 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/a3ampzmbipnkpxeqhqpsanCdefault.php
[Thu Jul 30 16:34:17.460584 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.514199 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/pms297.php
[Thu Jul 30 16:34:17.514248 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.550385 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1PJcpMFsD8B.php
[Thu Jul 30 16:34:17.550440 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.578755 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/4PJcpMFsD8B.php
[Thu Jul 30 16:34:17.578806 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.606860 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/i99z7zzbwtpteujvv6s8hiCdefault.php
[Thu Jul 30 16:34:17.606905 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.639928 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/gwaih1gfzp5vuwr04Cdefault.php
[Thu Jul 30 16:34:17.639974 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.668121 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/dyui.php
[Thu Jul 30 16:34:17.668168 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.696618 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ho.php
[Thu Jul 30 16:34:17.696680 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.893490 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/66b867516c8f01.php
[Thu Jul 30 16:34:17.893535 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.922504 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/ext.php
[Thu Jul 30 16:34:17.922552 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.951422 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/1wvekeybd9it2di2vyipgr6Cdefault.php
[Thu Jul 30 16:34:17.951467 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:17.979617 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/diidi.php
[Thu Jul 30 16:34:17.979666 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:18.007566 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/clarebypas.php
[Thu Jul 30 16:34:18.007622 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:18.057221 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/x402.php
[Thu Jul 30 16:34:18.057271 2026] [access_compat:error] [pid 3862564:tid 3862564] [client 20.203.205.96:45663] AH01797: client denied by server configuration: /home/pbyawsga/public_html/www.sikhmotorbikeclub.com/403.shtml
[Thu Jul 30 16:34:19.687493 2026] [ssl:error] [pid 3886834:tid 3886834] (EAI 2)Name or service not known: [client 144.76.19.72:27688] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:19.687529 2026] [ssl:error] [pid 3886834:tid 3886834] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:19.738898 2026] [ssl:error] [pid 3887766:tid 3887766] (EAI 2)Name or service not known: [client 144.76.19.72:27690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:19.738926 2026] [ssl:error] [pid 3887766:tid 3887766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:19.901045 2026] [ssl:error] [pid 3887868:tid 3887868] (70014)End of file found: [client 216.73.216.199:59826] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:22.017532 2026] [core:crit] [pid 3885308:tid 3885308] (13)Permission denied: [client 216.73.216.199:34032] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/cloudlinux/alt-php-internal/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/opt/cloudlinux/alt-php-internal/root/' is executable
[Thu Jul 30 16:34:22.794151 2026] [ssl:error] [pid 3882743:tid 3882743] (EAI 2)Name or service not known: [client 144.76.19.72:27694] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:22.794184 2026] [ssl:error] [pid 3882743:tid 3882743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:22.847243 2026] [ssl:error] [pid 3889899:tid 3889899] (EAI 2)Name or service not known: [client 144.76.19.72:27706] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:22.847283 2026] [ssl:error] [pid 3889899:tid 3889899] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:22.927090 2026] [core:error] [pid 3887764:tid 3887764] [client 172.213.232.128:14293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:22.927117 2026] [core:error] [pid 3887764:tid 3887764] [client 172.213.232.128:14293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:23.165285 2026] [core:crit] [pid 3889899:tid 3889899] (13)Permission denied: [client 104.152.52.237:58371] AH00529: /home/redsocks/public_html/wp-content__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-content__9a25374/' is executable
[Thu Jul 30 16:34:23.165350 2026] [authz_core:error] [pid 3889899:tid 3889899] [client 104.152.52.237:58371] AH01630: client denied by server configuration: /home/redsocks/public_html/error_log
[Thu Jul 30 16:34:23.165713 2026] [core:crit] [pid 3889899:tid 3889899] (13)Permission denied: [client 104.152.52.237:58371] AH00529: /home/redsocks/public_html/wp-admin__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-admin__9a25374/' is executable
[Thu Jul 30 16:34:23.165731 2026] [core:crit] [pid 3889899:tid 3889899] (13)Permission denied: [client 104.152.52.237:58371] AH00529: /home/redsocks/public_html/qTxUgjoc1Ws__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/qTxUgjoc1Ws__9a25374/' is executable
[Thu Jul 30 16:34:23.165759 2026] [core:crit] [pid 3889899:tid 3889899] (13)Permission denied: [client 104.152.52.237:58371] AH00529: /home/redsocks/public_html/wp-includes__9a25374/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/redsocks/public_html/wp-includes__9a25374/' is executable
[Thu Jul 30 16:34:23.417856 2026] [ssl:error] [pid 3885308:tid 3885308] (70014)End of file found: [client 216.73.216.199:34032] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:24.323030 2026] [ssl:error] [pid 3885312:tid 3885312] (70014)End of file found: [client 216.73.216.199:51125] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:24.799423 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/inputs.php
[Thu Jul 30 16:34:24.799482 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:24.916511 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/admin.php
[Thu Jul 30 16:34:24.916562 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:25.037680 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/goods.php
[Thu Jul 30 16:34:25.037737 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:25.153619 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/file.php
[Thu Jul 30 16:34:25.153675 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:25.269574 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/adminfuns.php
[Thu Jul 30 16:34:25.269625 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:25.447894 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/404.php
[Thu Jul 30 16:34:25.447942 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:25.563546 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wk
[Thu Jul 30 16:34:25.727474 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/about.php
[Thu Jul 30 16:34:25.727525 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:25.842087 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/term.php
[Thu Jul 30 16:34:25.842136 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:25.845157 2026] [core:error] [pid 3887868:tid 3887868] (13)Permission denied: [client 216.73.216.199:4366] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu5/crash_notes
[Thu Jul 30 16:34:25.901270 2026] [ssl:error] [pid 3890510:tid 3890510] (EAI 2)Name or service not known: [client 144.76.19.72:27712] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:25.901308 2026] [ssl:error] [pid 3890510:tid 3890510] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:25.954665 2026] [ssl:error] [pid 3884717:tid 3884717] (EAI 2)Name or service not known: [client 144.76.19.72:27720] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:25.954691 2026] [ssl:error] [pid 3884717:tid 3884717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:26.017779 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/ioxi-o.php
[Thu Jul 30 16:34:26.017831 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:26.133586 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/1.php
[Thu Jul 30 16:34:26.133639 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:26.248392 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/alfa.php
[Thu Jul 30 16:34:26.248439 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:26.453219 2026] [ssl:error] [pid 3887868:tid 3887868] (70014)End of file found: [client 216.73.216.199:4366] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:26.501716 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/edit.php
[Thu Jul 30 16:34:26.501767 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:26.643444 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/elp.php
[Thu Jul 30 16:34:26.643493 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:26.762550 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/classwithtostring.php
[Thu Jul 30 16:34:26.762603 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:26.881705 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/666.php
[Thu Jul 30 16:34:26.881763 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:27.000675 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 16:34:27.021143 2026] [core:error] [pid 3890422:tid 3890422] [client 172.213.232.128:15246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:27.021167 2026] [core:error] [pid 3890422:tid 3890422] [client 172.213.232.128:15246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:27.115451 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/ws54.php
[Thu Jul 30 16:34:27.115499 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:27.291601 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/deepseek_d.php
[Thu Jul 30 16:34:27.291651 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:27.315419 2026] [cgi:error] [pid 3888245:tid 3888245] [client 94.154.43.185:59662] AH01228: exec used but not allowed in /home/alismcom/public_html/themez.co.uk/index.htm
[Thu Jul 30 16:34:27.525896 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/function
[Thu Jul 30 16:34:27.644293 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/nw.php
[Thu Jul 30 16:34:27.644350 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:27.762525 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/xleet.php
[Thu Jul 30 16:34:27.762577 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:27.961537 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp.php
[Thu Jul 30 16:34:27.961584 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:28.079650 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/155.php
[Thu Jul 30 16:34:28.079698 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:28.195460 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/96i.php
[Thu Jul 30 16:34:28.195510 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:28.442905 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/as.php
[Thu Jul 30 16:34:28.442955 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:28.559848 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/min.php
[Thu Jul 30 16:34:28.559899 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:28.718680 2026] [core:error] [pid 3882451:tid 3882451] [client 172.213.232.128:23020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:28.718708 2026] [core:error] [pid 3882451:tid 3882451] [client 172.213.232.128:23020] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:28.739359 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/.well-known/
[Thu Jul 30 16:34:28.854088 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/php8.php
[Thu Jul 30 16:34:28.854140 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:29.012309 2026] [ssl:error] [pid 3890676:tid 3890676] (EAI 2)Name or service not known: [client 144.76.19.72:27730] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:29.012354 2026] [ssl:error] [pid 3890676:tid 3890676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:29.104887 2026] [ssl:error] [pid 3890681:tid 3890681] (EAI 2)Name or service not known: [client 144.76.19.72:27744] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:29.104924 2026] [ssl:error] [pid 3890681:tid 3890681] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:29.150369 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:29.274458 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/222.php
[Thu Jul 30 16:34:29.274505 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:29.479831 2026] [ssl:error] [pid 3890674:tid 3890674] (70014)End of file found: [client 216.73.216.199:38911] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:29.500676 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:29.656544 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/info.php
[Thu Jul 30 16:34:29.656597 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:29.697753 2026] [access_compat:error] [pid 3890675:tid 3890675] [client 172.213.232.128:7882] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/content.php
[Thu Jul 30 16:34:29.698128 2026] [core:error] [pid 3890675:tid 3890675] [client 172.213.232.128:7882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:29.771546 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/a.php
[Thu Jul 30 16:34:29.771593 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:29.887908 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/chosen.php
[Thu Jul 30 16:34:29.887960 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:29.991381 2026] [ssl:error] [pid 3885308:tid 3885308] (70014)End of file found: [client 216.73.216.199:60099] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:29.998099 2026] [core:error] [pid 3862504:tid 3862504] [client 172.213.232.128:6293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:29.998124 2026] [core:error] [pid 3862504:tid 3862504] [client 172.213.232.128:6293] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:30.007451 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:30.122275 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/vx.php
[Thu Jul 30 16:34:30.122349 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:30.291575 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/admin
[Thu Jul 30 16:34:30.410327 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wap.php
[Thu Jul 30 16:34:30.410379 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:30.585828 2026] [access_compat:error] [pid 3890572:tid 3890572] [client 45.158.164.139:36774] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:34:30.609466 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 16:34:30.724143 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/bgymj.php
[Thu Jul 30 16:34:30.724202 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:30.846099 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/aa.php
[Thu Jul 30 16:34:30.846155 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:30.961710 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-mail.php
[Thu Jul 30 16:34:30.961762 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:31.076344 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/bolt.php
[Thu Jul 30 16:34:31.076398 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:31.191505 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/bthil.php
[Thu Jul 30 16:34:31.191559 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:31.314650 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/cgi-bin/
[Thu Jul 30 16:34:31.314748 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:31.429781 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/x.php
[Thu Jul 30 16:34:31.429838 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:31.461827 2026] [core:error] [pid 3890681:tid 3890681] [client 172.213.232.128:6365] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:31.461866 2026] [core:error] [pid 3890681:tid 3890681] [client 172.213.232.128:6365] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:31.544564 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/index
[Thu Jul 30 16:34:31.659561 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/aaa.php
[Thu Jul 30 16:34:31.659612 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:31.774000 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/abcd.php
[Thu Jul 30 16:34:31.774051 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:31.889755 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-good.php
[Thu Jul 30 16:34:31.889804 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:32.004557 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/simple.php
[Thu Jul 30 16:34:32.004613 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:32.011400 2026] [security2:error] [pid 3874393:tid 3874393] [client 98.83.10.183:23934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Amazonbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "prosperon.co.uk"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "amtvCEhEYabkCqmRSiQ_KgAAAE0"]
[Thu Jul 30 16:34:32.119273 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/edit-tags.php
[Thu Jul 30 16:34:32.119330 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:32.159782 2026] [ssl:error] [pid 3883338:tid 3883338] (EAI 2)Name or service not known: [client 144.76.19.72:57240] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:32.159806 2026] [ssl:error] [pid 3883338:tid 3883338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:32.161816 2026] [security2:error] [pid 3889899:tid 3889899] [client 170.106.11.141:42892] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.evtech.ltd"] [uri "/"] [unique_id "amtvCNWSzd-0JldKR_KjpwAAAAQ"]
[Thu Jul 30 16:34:32.220555 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:57248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:32.220598 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:32.275494 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/u.php
[Thu Jul 30 16:34:32.275543 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:32.394564 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:32.515771 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/h.php
[Thu Jul 30 16:34:32.515823 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:32.630550 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/ms-edit.php
[Thu Jul 30 16:34:32.630602 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:32.905843 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/a7.php
[Thu Jul 30 16:34:32.905894 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:32.912949 2026] [core:error] [pid 3890571:tid 3890571] [client 172.213.232.128:4876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:32.912982 2026] [core:error] [pid 3890571:tid 3890571] [client 172.213.232.128:4876] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:33.020452 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/manager.php
[Thu Jul 30 16:34:33.020500 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:33.136521 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/w1.php
[Thu Jul 30 16:34:33.136566 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:33.198894 2026] [core:error] [pid 3890510:tid 3890510] [client 172.213.232.128:7902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:33.198923 2026] [core:error] [pid 3890510:tid 3890510] [client 172.213.232.128:7902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:33.305483 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 16:34:33.420542 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-login.php
[Thu Jul 30 16:34:33.420591 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:33.535451 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/default.php
[Thu Jul 30 16:34:33.535496 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:33.707644 2026] [ssl:error] [pid 3882743:tid 3882743] (70014)End of file found: [client 216.73.216.199:51392] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:33.721796 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/i.php
[Thu Jul 30 16:34:33.721863 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:33.948369 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:34.111583 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 16:34:34.238027 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:34.352627 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/gecko-new.php
[Thu Jul 30 16:34:34.352685 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:34.600266 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/NewFile.php
[Thu Jul 30 16:34:34.600343 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:34.612933 2026] [core:error] [pid 3885241:tid 3885241] [client 172.213.232.128:8350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:34.612968 2026] [core:error] [pid 3885241:tid 3885241] [client 172.213.232.128:8350] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:34.719011 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-Blogs.php
[Thu Jul 30 16:34:34.719084 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:34.837367 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-includes
[Thu Jul 30 16:34:34.953479 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/themes.php
[Thu Jul 30 16:34:34.953548 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:35.119772 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/cv.php
[Thu Jul 30 16:34:35.119821 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:35.240807 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 16:34:35.273737 2026] [ssl:error] [pid 3890676:tid 3890676] (EAI 2)Name or service not known: [client 144.76.19.72:57256] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:35.273767 2026] [ssl:error] [pid 3890676:tid 3890676] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:35.331690 2026] [ssl:error] [pid 3890679:tid 3890679] (EAI 2)Name or service not known: [client 144.76.19.72:57262] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:35.331722 2026] [ssl:error] [pid 3890679:tid 3890679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:35.489654 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:35.610869 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/ws83.php
[Thu Jul 30 16:34:35.610919 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:35.725521 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/atex1.php
[Thu Jul 30 16:34:35.725571 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:35.840038 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/class-t.api.php
[Thu Jul 30 16:34:35.840112 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:36.036524 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/w.php
[Thu Jul 30 16:34:36.036581 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:36.119367 2026] [ssl:error] [pid 3890675:tid 3890675] (70014)End of file found: [client 216.73.216.199:36512] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:36.218787 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/archive.php
[Thu Jul 30 16:34:36.218844 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:36.329976 2026] [core:error] [pid 3885308:tid 3885308] [client 172.213.232.128:4904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:36.330013 2026] [core:error] [pid 3885308:tid 3885308] [client 172.213.232.128:4904] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:36.333425 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/bless.php
[Thu Jul 30 16:34:36.333470 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:36.426550 2026] [ssl:error] [pid 3890674:tid 3890674] (70014)End of file found: [client 216.73.216.199:58852] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:36.494465 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/sagax1.php
[Thu Jul 30 16:34:36.494517 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:36.610493 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wpc.php
[Thu Jul 30 16:34:36.610545 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:36.726649 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/fone1.php
[Thu Jul 30 16:34:36.726702 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:36.912038 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/ncx.php
[Thu Jul 30 16:34:36.912114 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:37.026803 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 16:34:37.220176 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wso.php
[Thu Jul 30 16:34:37.220234 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:37.337552 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/zup.php73
[Thu Jul 30 16:34:37.502513 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/k.php
[Thu Jul 30 16:34:37.502563 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:37.618467 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-blink.php
[Thu Jul 30 16:34:37.618515 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:37.733112 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/randkeyword.PhP7
[Thu Jul 30 16:34:37.733168 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:37.805510 2026] [security2:error] [pid 3890617:tid 3890617] [client 43.167.241.46:36910] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.astleydogpark.com"] [uri "/"] [unique_id "amtvDZi6OkmpVPEjLFqydAAAACo"]
[Thu Jul 30 16:34:37.919841 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 16:34:38.000418 2026] [core:error] [pid 3875631:tid 3875631] [client 172.213.232.128:4311] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:38.000447 2026] [core:error] [pid 3875631:tid 3875631] [client 172.213.232.128:4311] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:38.034417 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-content
[Thu Jul 30 16:34:38.151116 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/ww5.php
[Thu Jul 30 16:34:38.151166 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:38.374915 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/2.php
[Thu Jul 30 16:34:38.374965 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:38.402409 2026] [core:error] [pid 3885240:tid 3885240] [client 172.213.232.128:10348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:38.402438 2026] [core:error] [pid 3885240:tid 3885240] [client 172.213.232.128:10348] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:38.409108 2026] [ssl:error] [pid 3882451:tid 3882451] (EAI 2)Name or service not known: [client 144.76.19.72:57270] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:38.409148 2026] [ssl:error] [pid 3882451:tid 3882451] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:38.467168 2026] [ssl:error] [pid 3886280:tid 3886280] (EAI 2)Name or service not known: [client 144.76.19.72:57282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:38.467201 2026] [ssl:error] [pid 3886280:tid 3886280] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:38.495493 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/wp-admin
[Thu Jul 30 16:34:38.610688 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/atomlib.php
[Thu Jul 30 16:34:38.610735 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:38.667116 2026] [core:error] [pid 3886834:tid 3886834] [client 172.213.232.128:6299] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:38.667140 2026] [core:error] [pid 3886834:tid 3886834] [client 172.213.232.128:6299] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:38.733222 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/rip.php
[Thu Jul 30 16:34:38.733272 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:38.848402 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/p.php
[Thu Jul 30 16:34:38.848454 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:39.776264 2026] [core:error] [pid 3882451:tid 3882451] (13)Permission denied: [client 216.73.216.199:59171] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/cpu6/crash_notes
[Thu Jul 30 16:34:39.856881 2026] [core:error] [pid 3884246:tid 3884246] [client 172.213.232.128:22683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:39.856908 2026] [core:error] [pid 3884246:tid 3884246] [client 172.213.232.128:22683] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:40.059323 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/php.php
[Thu Jul 30 16:34:40.059376 2026] [access_compat:error] [pid 3883269:tid 3883269] [client 20.9.4.9:21605] AH01797: client denied by server configuration: /home/nspandor/public_html/403.shtml
[Thu Jul 30 16:34:41.203820 2026] [core:error] [pid 3882743:tid 3882743] [client 172.213.232.128:8329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:41.203846 2026] [core:error] [pid 3882743:tid 3882743] [client 172.213.232.128:8329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:41.542539 2026] [ssl:error] [pid 3875591:tid 3875591] (EAI 2)Name or service not known: [client 144.76.19.72:35634] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:41.542586 2026] [ssl:error] [pid 3875591:tid 3875591] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:41.597498 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:35648] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:41.597539 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:41.891646 2026] [core:error] [pid 3882451:tid 3882451] (13)Permission denied: [client 216.73.216.199:59171] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/Acpi-ParseExt/objects_partial
[Thu Jul 30 16:34:42.799202 2026] [ssl:error] [pid 3882451:tid 3882451] (70014)End of file found: [client 216.73.216.199:59171] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:43.089055 2026] [core:error] [pid 3882743:tid 3882743] [client 172.213.232.128:22659] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:43.089093 2026] [core:error] [pid 3882743:tid 3882743] [client 172.213.232.128:22659] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:43.404675 2026] [core:error] [pid 3870305:tid 3870305] (13)Permission denied: [client 216.73.216.199:2132] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/files_cache/align
[Thu Jul 30 16:34:44.007394 2026] [ssl:error] [pid 3870305:tid 3870305] (70014)End of file found: [client 216.73.216.199:2132] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:44.012301 2026] [authz_core:error] [pid 3882743:tid 3882743] [client 66.249.66.33:47381] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:34:44.015000 2026] [authz_core:error] [pid 3882743:tid 3882743] [client 66.249.66.33:47381] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:34:44.651620 2026] [ssl:error] [pid 3890674:tid 3890674] (EAI 2)Name or service not known: [client 144.76.19.72:35662] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:44.651664 2026] [ssl:error] [pid 3890674:tid 3890674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:44.706607 2026] [ssl:error] [pid 3878989:tid 3878989] (EAI 2)Name or service not known: [client 144.76.19.72:35668] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:44.706644 2026] [ssl:error] [pid 3878989:tid 3878989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:45.212851 2026] [ssl:error] [pid 3879782:tid 3879782] (70014)End of file found: [client 216.73.216.199:2032] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:46.797605 2026] [core:error] [pid 3890681:tid 3890681] [client 172.213.232.128:6280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:46.797637 2026] [core:error] [pid 3890681:tid 3890681] [client 172.213.232.128:6280] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:47.820912 2026] [ssl:error] [pid 3890679:tid 3890679] (EAI 2)Name or service not known: [client 144.76.19.72:35680] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:47.820944 2026] [ssl:error] [pid 3890679:tid 3890679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:47.874008 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:35690] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:47.874053 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:49.454384 2026] [ssl:error] [pid 3885308:tid 3885308] (70014)End of file found: [client 216.73.216.199:41730] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:49.949792 2026] [ssl:error] [pid 3890679:tid 3890679] (70014)End of file found: [client 216.73.216.199:54913] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:50.930251 2026] [ssl:error] [pid 3890422:tid 3890422] (EAI 2)Name or service not known: [client 144.76.19.72:49466] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:50.930287 2026] [ssl:error] [pid 3890422:tid 3890422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:51.009935 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:49474] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:51.009971 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:51.857831 2026] [ssl:error] [pid 3884717:tid 3884717] (70014)End of file found: [client 216.73.216.199:6778] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:52.280624 2026] [core:error] [pid 3890572:tid 3890572] [client 172.213.232.128:16086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:52.280649 2026] [core:error] [pid 3890572:tid 3890572] [client 172.213.232.128:16086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:52.379151 2026] [security2:error] [pid 3887766:tid 3887766] [client 1.13.158.23:55644] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.q-s-e.org"] [uri "/"] [unique_id "amtvHGNK9BUp0J7_WZfnWQAAAB8"]
[Thu Jul 30 16:34:54.064934 2026] [ssl:error] [pid 3890422:tid 3890422] (EAI 2)Name or service not known: [client 144.76.19.72:49478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:54.064962 2026] [ssl:error] [pid 3890422:tid 3890422] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:54.120809 2026] [ssl:error] [pid 3875631:tid 3875631] (EAI 2)Name or service not known: [client 144.76.19.72:49490] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:54.120839 2026] [ssl:error] [pid 3875631:tid 3875631] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:54.684789 2026] [core:error] [pid 3879782:tid 3879782] [client 172.213.232.128:6338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:54.684818 2026] [core:error] [pid 3879782:tid 3879782] [client 172.213.232.128:6338] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:55.116494 2026] [core:error] [pid 3870338:tid 3870338] (13)Permission denied: [client 216.73.216.199:16157] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory132/subsystem/uevent
[Thu Jul 30 16:34:55.837664 2026] [ssl:error] [pid 3870338:tid 3870338] (70014)End of file found: [client 216.73.216.199:16157] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:55.995597 2026] [core:error] [pid 3890572:tid 3890572] [client 172.213.232.128:4321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:55.995630 2026] [core:error] [pid 3890572:tid 3890572] [client 172.213.232.128:4321] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:56.747224 2026] [ssl:error] [pid 3885240:tid 3885240] (70014)End of file found: [client 216.73.216.199:39148] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:57.059262 2026] [core:crit] [pid 3887766:tid 3887766] (13)Permission denied: [client 216.73.216.199:25624] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/opt/cloudlinux/alt-php-internal/root/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/opt/cloudlinux/alt-php-internal/root/' is executable
[Thu Jul 30 16:34:57.178835 2026] [ssl:error] [pid 3890617:tid 3890617] (EAI 2)Name or service not known: [client 144.76.19.72:49504] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:57.178879 2026] [ssl:error] [pid 3890617:tid 3890617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:57.232426 2026] [ssl:error] [pid 3890674:tid 3890674] (EAI 2)Name or service not known: [client 144.76.19.72:49516] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:34:57.232466 2026] [ssl:error] [pid 3890674:tid 3890674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:34:57.358162 2026] [ssl:error] [pid 3887766:tid 3887766] (70014)End of file found: [client 216.73.216.199:25624] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:34:59.956646 2026] [core:error] [pid 3890676:tid 3890676] [client 172.213.232.128:16078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:34:59.956674 2026] [core:error] [pid 3890676:tid 3890676] [client 172.213.232.128:16078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:00.293681 2026] [ssl:error] [pid 3891674:tid 3891674] (EAI 2)Name or service not known: [client 144.76.19.72:22926] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:00.293711 2026] [ssl:error] [pid 3891674:tid 3891674] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:00.350105 2026] [ssl:error] [pid 3887997:tid 3887997] (EAI 2)Name or service not known: [client 144.76.19.72:22936] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:00.350148 2026] [ssl:error] [pid 3887997:tid 3887997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:01.192815 2026] [ssl:error] [pid 3883338:tid 3883338] (70014)End of file found: [client 216.73.216.199:4155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:01.608094 2026] [core:error] [pid 3875591:tid 3875591] [client 172.213.232.128:4303] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:01.608137 2026] [core:error] [pid 3875591:tid 3875591] [client 172.213.232.128:4303] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:01.896409 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:6859] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:01.896444 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:6859] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:02.245147 2026] [core:error] [pid 3887765:tid 3887765] [client 172.213.232.128:8915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:02.245181 2026] [core:error] [pid 3887765:tid 3887765] [client 172.213.232.128:8915] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:02.616745 2026] [authz_core:error] [pid 3885240:tid 3885240] [client 66.249.66.34:47653] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:35:02.619474 2026] [authz_core:error] [pid 3885240:tid 3885240] [client 66.249.66.34:47653] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:35:03.111948 2026] [ssl:error] [pid 3890676:tid 3890676] (70014)End of file found: [client 216.73.216.199:36475] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:03.403778 2026] [ssl:error] [pid 3887766:tid 3887766] (EAI 2)Name or service not known: [client 144.76.19.72:22948] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:03.403813 2026] [ssl:error] [pid 3887766:tid 3887766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:03.461934 2026] [ssl:error] [pid 3890679:tid 3890679] (EAI 2)Name or service not known: [client 144.76.19.72:22950] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:03.461969 2026] [ssl:error] [pid 3890679:tid 3890679] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:03.606392 2026] [core:error] [pid 3884717:tid 3884717] (13)Permission denied: [client 216.73.216.199:21009] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory194/subsystem/uevent
[Thu Jul 30 16:35:04.417961 2026] [core:error] [pid 3888245:tid 3888245] [client 172.213.232.128:12828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:04.417991 2026] [core:error] [pid 3888245:tid 3888245] [client 172.213.232.128:12828] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:04.625260 2026] [ssl:error] [pid 3884717:tid 3884717] (70014)End of file found: [client 216.73.216.199:21009] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:04.730976 2026] [core:error] [pid 3890616:tid 3890616] [client 172.213.232.128:36242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:04.731015 2026] [core:error] [pid 3890616:tid 3890616] [client 172.213.232.128:36242] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:05.029803 2026] [core:error] [pid 3890620:tid 3890620] [client 172.213.232.128:8357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:05.029831 2026] [core:error] [pid 3890620:tid 3890620] [client 172.213.232.128:8357] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:05.209664 2026] [security2:error] [pid 3885312:tid 3885312] [client 34.10.41.220:33502] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "static1.alism.com"] [uri "/.git/config"] [unique_id "amtvKYpyC5h88WxMqmuThQAAADM"]
[Thu Jul 30 16:35:05.209792 2026] [security2:error] [pid 3885312:tid 3885312] [client 34.10.41.220:33502] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "static1.alism.com"] [uri "/.git/config"] [unique_id "amtvKYpyC5h88WxMqmuThQAAADM"]
[Thu Jul 30 16:35:05.210061 2026] [security2:error] [pid 3885312:tid 3885312] [client 34.10.41.220:33502] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "static1.alism.com"] [uri "/.git/config"] [unique_id "amtvKYpyC5h88WxMqmuThQAAADM"]
[Thu Jul 30 16:35:05.669433 2026] [core:error] [pid 3886833:tid 3886833] [client 172.213.232.128:6871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:05.669463 2026] [core:error] [pid 3886833:tid 3886833] [client 172.213.232.128:6871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:06.515945 2026] [ssl:error] [pid 3878989:tid 3878989] (EAI 2)Name or service not known: [client 144.76.19.72:22964] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:06.515976 2026] [ssl:error] [pid 3878989:tid 3878989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:06.570601 2026] [ssl:error] [pid 3888245:tid 3888245] (EAI 2)Name or service not known: [client 144.76.19.72:22980] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:06.570630 2026] [ssl:error] [pid 3888245:tid 3888245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:06.621976 2026] [ssl:error] [pid 3886833:tid 3886833] (70014)End of file found: [client 216.73.216.199:9209] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:06.670382 2026] [core:error] [pid 3885312:tid 3885312] [client 172.213.232.128:4336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:06.670408 2026] [core:error] [pid 3885312:tid 3885312] [client 172.213.232.128:4336] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:07.070519 2026] [security2:error] [pid 3891722:tid 3891722] [client 185.191.171.11:28154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/ohio-boone-and-crockett-by-county"] [unique_id "amtvKyg6eCnI6gDOVVi7zAAAAAs"]
[Thu Jul 30 16:35:08.843762 2026] [ssl:error] [pid 3885173:tid 3885173] (70014)End of file found: [client 216.73.216.199:17901] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:09.624950 2026] [ssl:error] [pid 3885240:tid 3885240] (EAI 2)Name or service not known: [client 144.76.19.72:62832] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:09.624983 2026] [ssl:error] [pid 3885240:tid 3885240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:09.678002 2026] [ssl:error] [pid 3890675:tid 3890675] (EAI 2)Name or service not known: [client 144.76.19.72:62846] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:09.678029 2026] [ssl:error] [pid 3890675:tid 3890675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:09.934674 2026] [ssl:error] [pid 3862504:tid 3862504] (70014)End of file found: [client 216.73.216.199:21401] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:10.037479 2026] [core:error] [pid 3875631:tid 3875631] [client 172.213.232.128:43989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:10.037516 2026] [core:error] [pid 3875631:tid 3875631] [client 172.213.232.128:43989] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:10.413203 2026] [authz_core:error] [pid 3870305:tid 3870305] [client 66.249.66.33:35657] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:35:10.415874 2026] [authz_core:error] [pid 3870305:tid 3870305] [client 66.249.66.33:35657] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:35:11.556000 2026] [authz_core:error] [pid 3892731:tid 3892731] [client 66.249.66.33:44721] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:35:11.558712 2026] [authz_core:error] [pid 3892731:tid 3892731] [client 66.249.66.33:44721] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:35:11.733305 2026] [core:error] [pid 3892065:tid 3892065] [client 172.213.232.128:6910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:11.733326 2026] [core:error] [pid 3892065:tid 3892065] [client 172.213.232.128:6910] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:12.040750 2026] [ssl:error] [pid 3892065:tid 3892065] (70014)End of file found: [client 216.73.216.199:17618] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:12.456121 2026] [core:error] [pid 3883338:tid 3883338] [client 172.213.232.128:4307] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:12.456146 2026] [core:error] [pid 3883338:tid 3883338] [client 172.213.232.128:4307] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:12.759536 2026] [ssl:error] [pid 3889167:tid 3889167] (EAI 2)Name or service not known: [client 144.76.19.72:62848] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:12.759586 2026] [ssl:error] [pid 3889167:tid 3889167] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:12.813257 2026] [ssl:error] [pid 3890571:tid 3890571] (EAI 2)Name or service not known: [client 144.76.19.72:62862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:12.813292 2026] [ssl:error] [pid 3890571:tid 3890571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:13.514543 2026] [core:error] [pid 3890675:tid 3890675] [client 172.213.232.128:14740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:13.514568 2026] [core:error] [pid 3890675:tid 3890675] [client 172.213.232.128:14740] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:13.781636 2026] [security2:error] [pid 3882743:tid 3882743] [client 150.5.132.77:23261] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvMXkuC8xXVH72cq7fowAAABM"]
[Thu Jul 30 16:35:13.781712 2026] [security2:error] [pid 3882743:tid 3882743] [client 150.5.132.77:23261] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvMXkuC8xXVH72cq7fowAAABM"]
[Thu Jul 30 16:35:13.782029 2026] [security2:error] [pid 3882743:tid 3882743] [client 150.5.132.77:23261] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvMXkuC8xXVH72cq7fowAAABM"]
[Thu Jul 30 16:35:14.256102 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:21056] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:15.641719 2026] [security2:error] [pid 3887868:tid 3887868] [client 43.165.167.69:36034] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "yourpartyyourway.com"] [uri "/"] [unique_id "amtvM5yKTjKNcahKmyFK_gAAACE"], referer: http://yourpartyyourway.com
[Thu Jul 30 16:35:15.720470 2026] [cgi:error] [pid 3883269:tid 3883269] [client 20.125.96.254:8669] AH02812: stderr from /home/davidebell/public_html/bashforthbell.com/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:35:15.869711 2026] [ssl:error] [pid 3890571:tid 3890571] (EAI 2)Name or service not known: [client 144.76.19.72:62868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:15.869759 2026] [ssl:error] [pid 3890571:tid 3890571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:15.925579 2026] [ssl:error] [pid 3890619:tid 3890619] (EAI 2)Name or service not known: [client 144.76.19.72:62872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:15.925615 2026] [ssl:error] [pid 3890619:tid 3890619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:16.336496 2026] [security2:error] [pid 3884246:tid 3884246] [client 160.176.78.148:50738] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvNCtfwD3FOEuiTfwHgAAAABI"]
[Thu Jul 30 16:35:16.336543 2026] [security2:error] [pid 3884246:tid 3884246] [client 160.176.78.148:50738] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvNCtfwD3FOEuiTfwHgAAAABI"]
[Thu Jul 30 16:35:16.336810 2026] [security2:error] [pid 3884246:tid 3884246] [client 160.176.78.148:50738] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvNCtfwD3FOEuiTfwHgAAAABI"]
[Thu Jul 30 16:35:17.167248 2026] [core:error] [pid 3890617:tid 3890617] [client 172.213.232.128:36632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:17.167275 2026] [core:error] [pid 3890617:tid 3890617] [client 172.213.232.128:36632] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:17.275417 2026] [core:error] [pid 3890679:tid 3890679] (13)Permission denied: [client 216.73.216.199:19333] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/cpu/cpu4/node0/cpu1/crash_notes
[Thu Jul 30 16:35:17.344279 2026] [authz_core:error] [pid 3883269:tid 3883269] [client 20.125.96.254:8669] AH01630: client denied by server configuration: /home/davidebell/public_html/bashforthbell.com/php.ini
[Thu Jul 30 16:35:17.576336 2026] [core:error] [pid 3890679:tid 3890679] (13)Permission denied: [client 216.73.216.199:19333] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory114/subsystem/uevent
[Thu Jul 30 16:35:17.907763 2026] [security2:error] [pid 3884246:tid 3884246] [client 43.165.167.69:54068] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.hoo-hah.co.uk"] [uri "/"] [unique_id "amtvNStfwD3FOEuiTfwHggAAABI"]
[Thu Jul 30 16:35:18.182378 2026] [ssl:error] [pid 3890679:tid 3890679] (70014)End of file found: [client 216.73.216.199:19333] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:18.528841 2026] [core:error] [pid 3890619:tid 3890619] [client 172.213.232.128:6341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:18.528871 2026] [core:error] [pid 3890619:tid 3890619] [client 172.213.232.128:6341] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:18.995220 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:62874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:18.995246 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:19.046571 2026] [ssl:error] [pid 3886833:tid 3886833] (EAI 2)Name or service not known: [client 144.76.19.72:62878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:19.046610 2026] [ssl:error] [pid 3886833:tid 3886833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:19.958663 2026] [core:error] [pid 3864008:tid 3864008] [client 172.213.232.128:4329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:19.958702 2026] [core:error] [pid 3864008:tid 3864008] [client 172.213.232.128:4329] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:20.495204 2026] [core:error] [pid 3887868:tid 3887868] [client 172.213.232.128:43995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:20.495239 2026] [core:error] [pid 3887868:tid 3887868] [client 172.213.232.128:43995] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:20.980366 2026] [core:error] [pid 3860319:tid 3860319] [client 172.213.232.128:36255] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:20.980389 2026] [core:error] [pid 3860319:tid 3860319] [client 172.213.232.128:36255] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:21.197175 2026] [ssl:error] [pid 3883338:tid 3883338] (70014)End of file found: [client 216.73.216.199:25264] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:21.315123 2026] [core:error] [pid 3875591:tid 3875591] [client 172.213.232.128:6355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:21.315148 2026] [core:error] [pid 3875591:tid 3875591] [client 172.213.232.128:6355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:21.462875 2026] [security2:error] [pid 3870305:tid 3870305] [client 150.5.132.77:29879] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvOcBzVWV3NqBkKlgz2QAAAD0"]
[Thu Jul 30 16:35:21.462923 2026] [security2:error] [pid 3870305:tid 3870305] [client 150.5.132.77:29879] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvOcBzVWV3NqBkKlgz2QAAAD0"]
[Thu Jul 30 16:35:21.463175 2026] [security2:error] [pid 3870305:tid 3870305] [client 150.5.132.77:29879] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvOcBzVWV3NqBkKlgz2QAAAD0"]
[Thu Jul 30 16:35:22.105967 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:47830] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:22.105999 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:22.121749 2026] [ssl:error] [pid 3860319:tid 3860319] (70014)End of file found: [client 216.73.216.199:54938] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:22.163845 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:47844] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:22.163868 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:23.551117 2026] [core:error] [pid 3887765:tid 3887765] (13)Permission denied: [client 216.73.216.199:46725] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory87/node0/compact
[Thu Jul 30 16:35:23.697311 2026] [core:error] [pid 3881723:tid 3881723] [client 172.213.232.128:14227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:23.697341 2026] [core:error] [pid 3881723:tid 3881723] [client 172.213.232.128:14227] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:24.261419 2026] [core:error] [pid 3887765:tid 3887765] (13)Permission denied: [client 216.73.216.199:46725] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory198/subsystem/uevent
[Thu Jul 30 16:35:25.217473 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:47852] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:25.217503 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:25.271873 2026] [ssl:error] [pid 3887766:tid 3887766] (EAI 2)Name or service not known: [client 144.76.19.72:47860] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:25.271902 2026] [ssl:error] [pid 3887766:tid 3887766] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:25.572716 2026] [ssl:error] [pid 3887765:tid 3887765] (70014)End of file found: [client 216.73.216.199:46725] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:26.699627 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:32434] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:28.004457 2026] [ssl:error] [pid 3890675:tid 3890675] (70014)End of file found: [client 216.73.216.199:6030] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:28.325379 2026] [ssl:error] [pid 3884717:tid 3884717] (EAI 2)Name or service not known: [client 144.76.19.72:47868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:28.325412 2026] [ssl:error] [pid 3884717:tid 3884717] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:28.383493 2026] [ssl:error] [pid 3862564:tid 3862564] (EAI 2)Name or service not known: [client 144.76.19.72:47870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:28.383519 2026] [ssl:error] [pid 3862564:tid 3862564] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:28.900768 2026] [core:error] [pid 3890676:tid 3890676] [client 172.213.232.128:6863] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:28.900812 2026] [core:error] [pid 3890676:tid 3890676] [client 172.213.232.128:6863] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:29.063077 2026] [autoindex:error] [pid 3888245:tid 3888245] [client 172.202.95.21:32590] AH01276: Cannot serve directory /home/ajowfeua/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive
[Thu Jul 30 16:35:29.206662 2026] [authz_core:error] [pid 3885311:tid 3885311] [client 66.249.66.33:54042] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:35:29.209364 2026] [authz_core:error] [pid 3885311:tid 3885311] [client 66.249.66.33:54042] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:35:29.298445 2026] [core:error] [pid 3874393:tid 3874393] [client 172.213.232.128:8935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:29.298473 2026] [core:error] [pid 3874393:tid 3874393] [client 172.213.232.128:8935] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:30.698100 2026] [core:error] [pid 3890422:tid 3890422] [client 172.213.232.128:6861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:30.698132 2026] [core:error] [pid 3890422:tid 3890422] [client 172.213.232.128:6861] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:31.170572 2026] [access_compat:error] [pid 3890676:tid 3890676] [client 45.158.164.139:57810] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:35:31.198257 2026] [access_compat:error] [pid 3870338:tid 3870338] [client 172.213.232.128:14266] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/.well-known/acme-challenge/cloud.php
[Thu Jul 30 16:35:31.198606 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:14266] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:31.237406 2026] [security2:error] [pid 3878989:tid 3878989] [client 51.89.129.173:53374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "stampys.eu"] [uri "/store/wishlist/index/add/product/24/form_key/xBlWKwnsunoSnhVx/"] [unique_id "amtvQ_Nb-wi0qGChxzc9JQAAAAM"]
[Thu Jul 30 16:35:31.351588 2026] [core:error] [pid 3890619:tid 3890619] (13)Permission denied: [client 216.73.216.199:14805] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory69/node0/compact
[Thu Jul 30 16:35:31.444241 2026] [ssl:error] [pid 3885173:tid 3885173] (EAI 2)Name or service not known: [client 144.76.19.72:42862] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:31.444288 2026] [ssl:error] [pid 3885173:tid 3885173] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:31.503525 2026] [ssl:error] [pid 3870338:tid 3870338] (EAI 2)Name or service not known: [client 144.76.19.72:42866] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:31.503554 2026] [ssl:error] [pid 3870338:tid 3870338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:31.659324 2026] [ssl:error] [pid 3890619:tid 3890619] (70014)End of file found: [client 216.73.216.199:14805] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:34.381753 2026] [ssl:error] [pid 3890678:tid 3890678] (70014)End of file found: [client 216.73.216.199:17127] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:34.573038 2026] [ssl:error] [pid 3888245:tid 3888245] (EAI 2)Name or service not known: [client 144.76.19.72:42876] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:34.573087 2026] [ssl:error] [pid 3888245:tid 3888245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:34.628944 2026] [ssl:error] [pid 3890571:tid 3890571] (EAI 2)Name or service not known: [client 144.76.19.72:42884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:34.628976 2026] [ssl:error] [pid 3890571:tid 3890571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:34.989014 2026] [core:error] [pid 3883223:tid 3883223] (13)Permission denied: [client 216.73.216.199:26743] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory75/node0/compact
[Thu Jul 30 16:35:35.242107 2026] [core:error] [pid 3886833:tid 3886833] [client 172.213.232.128:6366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:35.242132 2026] [core:error] [pid 3886833:tid 3886833] [client 172.213.232.128:6366] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:35.453918 2026] [authz_core:error] [pid 3890620:tid 3890620] [client 192.175.111.243:58644] AH01630: client denied by server configuration: /home/sfi/public_html/error_log
[Thu Jul 30 16:35:35.922187 2026] [core:error] [pid 3883223:tid 3883223] (13)Permission denied: [client 216.73.216.199:26743] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory48/node0/compact
[Thu Jul 30 16:35:36.427755 2026] [security2:error] [pid 3884246:tid 3884246] [client 114.119.155.144:36559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/preacher/rev-jacob-morris/"] [unique_id "amtvSCtfwD3FOEuiTfwHiQAAABI"], referer: http://www.erskinenazarene.co.uk/sermons/the-magi/
[Thu Jul 30 16:35:36.742988 2026] [access_compat:error] [pid 3870337:tid 3870337] [client 172.213.232.128:18538] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/cloud.php
[Thu Jul 30 16:35:36.743367 2026] [core:error] [pid 3870337:tid 3870337] [client 172.213.232.128:18538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:37.135530 2026] [access_compat:error] [pid 3890619:tid 3890619] [client 172.213.232.128:6864] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/cgi-bin/cloud.php
[Thu Jul 30 16:35:37.135893 2026] [core:error] [pid 3890619:tid 3890619] [client 172.213.232.128:6864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:37.689925 2026] [ssl:error] [pid 3890619:tid 3890619] (EAI 2)Name or service not known: [client 144.76.19.72:42886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:37.689953 2026] [ssl:error] [pid 3890619:tid 3890619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:37.742741 2026] [ssl:error] [pid 3888245:tid 3888245] (EAI 2)Name or service not known: [client 144.76.19.72:42892] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:37.742769 2026] [ssl:error] [pid 3888245:tid 3888245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:37.744620 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:26743] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:37.815938 2026] [core:error] [pid 3892850:tid 3892850] [client 172.213.232.128:36609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:37.815964 2026] [core:error] [pid 3892850:tid 3892850] [client 172.213.232.128:36609] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:37.900160 2026] [security2:error] [pid 3890571:tid 3890571] [client 114.119.155.144:36575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/preacher/rev-jacob-morris/"] [unique_id "amtvSYCHO_T9u92GzwKPzwAAABg"], referer: http://www.erskinenazarene.co.uk/sermons/the-magi/
[Thu Jul 30 16:35:38.115254 2026] [security2:error] [pid 3884246:tid 3884246] [client 20.171.55.167:11230] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "autodiscover.sewyork.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtvSitfwD3FOEuiTfwHigAAABI"]
[Thu Jul 30 16:35:38.115474 2026] [security2:error] [pid 3884246:tid 3884246] [client 20.171.55.167:11230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.sewyork.co.uk"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtvSitfwD3FOEuiTfwHigAAABI"]
[Thu Jul 30 16:35:38.140862 2026] [security2:error] [pid 3884246:tid 3884246] [client 20.171.55.167:11230] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "autodiscover.sewyork.co.uk"] [uri "/403.shtml"] [unique_id "amtvSitfwD3FOEuiTfwHigAAABI"]
[Thu Jul 30 16:35:38.315321 2026] [core:error] [pid 3887997:tid 3887997] [client 172.213.232.128:7352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:38.315351 2026] [core:error] [pid 3887997:tid 3887997] [client 172.213.232.128:7352] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:39.063867 2026] [core:error] [pid 3885312:tid 3885312] [client 172.213.232.128:14225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:39.063896 2026] [core:error] [pid 3885312:tid 3885312] [client 172.213.232.128:14225] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:39.249738 2026] [ssl:error] [pid 3890619:tid 3890619] (70014)End of file found: [client 216.73.216.199:17181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:40.677875 2026] [security2:error] [pid 3885240:tid 3885240] [client 85.208.96.197:33010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1808.0.html"] [unique_id "amtvTKhkOQuToM5xA0cEkwAAACg"]
[Thu Jul 30 16:35:40.799613 2026] [ssl:error] [pid 3885312:tid 3885312] (EAI 2)Name or service not known: [client 144.76.19.72:37426] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:40.799650 2026] [ssl:error] [pid 3885312:tid 3885312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:40.853765 2026] [ssl:error] [pid 3885311:tid 3885311] (EAI 2)Name or service not known: [client 144.76.19.72:37430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:40.853817 2026] [ssl:error] [pid 3885311:tid 3885311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:41.907256 2026] [ssl:error] [pid 3875631:tid 3875631] (70014)End of file found: [client 216.73.216.199:58671] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:43.106905 2026] [security2:error] [pid 3885311:tid 3885311] [client 85.208.96.194:39418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3973.0/prev_next,prev.html"] [unique_id "amtvTw5rXhPU62eoFs1QrAAAADE"]
[Thu Jul 30 16:35:43.117142 2026] [ssl:error] [pid 3890676:tid 3890676] (70014)End of file found: [client 216.73.216.199:39513] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:43.719138 2026] [ssl:error] [pid 3878989:tid 3878989] (70014)End of file found: [client 216.73.216.199:62602] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:43.909108 2026] [ssl:error] [pid 3893962:tid 3893962] (EAI 2)Name or service not known: [client 144.76.19.72:37436] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:43.909167 2026] [ssl:error] [pid 3893962:tid 3893962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:43.928171 2026] [core:error] [pid 3888245:tid 3888245] [client 172.213.232.128:14211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:43.928197 2026] [core:error] [pid 3888245:tid 3888245] [client 172.213.232.128:14211] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:43.965157 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:37446] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:43.965183 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:45.971052 2026] [core:error] [pid 3893962:tid 3893962] [client 172.213.232.128:6342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:45.971098 2026] [core:error] [pid 3893962:tid 3893962] [client 172.213.232.128:6342] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:46.231714 2026] [core:error] [pid 3883338:tid 3883338] [client 172.213.232.128:6363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:46.231743 2026] [core:error] [pid 3883338:tid 3883338] [client 172.213.232.128:6363] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:47.021924 2026] [ssl:error] [pid 3887868:tid 3887868] (EAI 2)Name or service not known: [client 144.76.19.72:37452] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:47.021958 2026] [ssl:error] [pid 3887868:tid 3887868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:47.076255 2026] [ssl:error] [pid 3862504:tid 3862504] (EAI 2)Name or service not known: [client 144.76.19.72:37460] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:47.076282 2026] [ssl:error] [pid 3862504:tid 3862504] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:49.458850 2026] [core:error] [pid 3887765:tid 3887765] (13)Permission denied: [client 216.73.216.199:34223] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/TCP/remote_node_defrag_ratio
[Thu Jul 30 16:35:50.148434 2026] [ssl:error] [pid 3890619:tid 3890619] (EAI 2)Name or service not known: [client 144.76.19.72:20882] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:50.148472 2026] [ssl:error] [pid 3890619:tid 3890619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:50.199788 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:20886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:50.199816 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:50.370913 2026] [core:error] [pid 3887765:tid 3887765] (13)Permission denied: [client 216.73.216.199:34223] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dnotify_mark/trace
[Thu Jul 30 16:35:50.680919 2026] [core:error] [pid 3887765:tid 3887765] (13)Permission denied: [client 216.73.216.199:34223] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/audit_tree_mark/alloc_calls
[Thu Jul 30 16:35:51.883955 2026] [ssl:error] [pid 3887765:tid 3887765] (70014)End of file found: [client 216.73.216.199:34223] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:52.376767 2026] [ssl:error] [pid 3894285:tid 3894285] (70014)End of file found: [client 216.73.216.199:59782] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:53.089756 2026] [ssl:error] [pid 3882743:tid 3882743] (70014)End of file found: [client 216.73.216.199:34609] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:35:53.252179 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:20898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:53.252219 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:53.282745 2026] [access_compat:error] [pid 3885311:tid 3885311] [client 172.213.232.128:8918] AH01797: client denied by server configuration: /home/thepryor/public_html/dev2/avaa.php
[Thu Jul 30 16:35:53.283129 2026] [core:error] [pid 3885311:tid 3885311] [client 172.213.232.128:8918] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:53.307529 2026] [ssl:error] [pid 3886833:tid 3886833] (EAI 2)Name or service not known: [client 144.76.19.72:20900] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:53.307562 2026] [ssl:error] [pid 3886833:tid 3886833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:55.178336 2026] [core:error] [pid 3885311:tid 3885311] [client 172.213.232.128:4313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:55.178365 2026] [core:error] [pid 3885311:tid 3885311] [client 172.213.232.128:4313] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:55.943860 2026] [core:error] [pid 3885311:tid 3885311] [client 172.213.232.128:19460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:55.943890 2026] [core:error] [pid 3885311:tid 3885311] [client 172.213.232.128:19460] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:56.363545 2026] [ssl:error] [pid 3890617:tid 3890617] (EAI 2)Name or service not known: [client 144.76.19.72:20906] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:56.363578 2026] [ssl:error] [pid 3890617:tid 3890617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:56.418266 2026] [ssl:error] [pid 3885313:tid 3885313] (EAI 2)Name or service not known: [client 144.76.19.72:20918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:56.418321 2026] [ssl:error] [pid 3885313:tid 3885313] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:58.216927 2026] [core:error] [pid 3887766:tid 3887766] (13)Permission denied: [client 216.73.216.199:27147] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_tasks/partial
[Thu Jul 30 16:35:58.820778 2026] [security2:error] [pid 3887766:tid 3887766] [client 216.73.216.199:27147] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tmpfiles.d/tmp.conf"] [unique_id "amtvXmNK9BUp0J7_WZfndAAAAB8"]
[Thu Jul 30 16:35:58.821193 2026] [security2:error] [pid 3887766:tid 3887766] [client 216.73.216.199:27147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tmpfiles.d/tmp.conf"] [unique_id "amtvXmNK9BUp0J7_WZfndAAAAB8"]
[Thu Jul 30 16:35:58.821506 2026] [security2:error] [pid 3887766:tid 3887766] [client 216.73.216.199:27147] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/usr/lib/tmpfiles.d/tmp.conf"] [unique_id "amtvXmNK9BUp0J7_WZfndAAAAB8"]
[Thu Jul 30 16:35:58.967680 2026] [core:error] [pid 3862626:tid 3862626] [client 172.213.232.128:8871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:58.967708 2026] [core:error] [pid 3862626:tid 3862626] [client 172.213.232.128:8871] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:35:59.475704 2026] [ssl:error] [pid 3862626:tid 3862626] (EAI 2)Name or service not known: [client 144.76.19.72:20920] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:59.475734 2026] [ssl:error] [pid 3862626:tid 3862626] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:59.528741 2026] [ssl:error] [pid 3890617:tid 3890617] (EAI 2)Name or service not known: [client 144.76.19.72:20934] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:35:59.528774 2026] [ssl:error] [pid 3890617:tid 3890617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:35:59.734386 2026] [ssl:error] [pid 3887766:tid 3887766] (70014)End of file found: [client 216.73.216.199:27147] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:00.236863 2026] [core:error] [pid 3888245:tid 3888245] (13)Permission denied: [client 216.73.216.199:13593] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-512/trace
[Thu Jul 30 16:36:00.346571 2026] [ssl:error] [pid 3888245:tid 3888245] (70014)End of file found: [client 216.73.216.199:13593] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:01.593661 2026] [ssl:error] [pid 3887997:tid 3887997] (70014)End of file found: [client 216.73.216.199:15411] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:01.827103 2026] [authz_core:error] [pid 3893961:tid 3893961] [client 104.152.52.206:49173] AH01630: client denied by server configuration: /home/winterb/public_html/error_log
[Thu Jul 30 16:36:01.833214 2026] [authz_core:error] [pid 3893961:tid 3893961] [client 104.152.52.206:49173] AH01630: client denied by server configuration: /home/winterb/public_html/php.ini
[Thu Jul 30 16:36:02.586985 2026] [ssl:error] [pid 3883338:tid 3883338] (EAI 2)Name or service not known: [client 144.76.19.72:56546] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:02.587032 2026] [ssl:error] [pid 3883338:tid 3883338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:02.639958 2026] [ssl:error] [pid 3890617:tid 3890617] (EAI 2)Name or service not known: [client 144.76.19.72:56556] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:02.639999 2026] [ssl:error] [pid 3890617:tid 3890617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:03.216020 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:6836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:36:03.216049 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:6836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:36:03.840399 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:8836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:36:03.840427 2026] [core:error] [pid 3870338:tid 3870338] [client 172.213.232.128:8836] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:36:04.399855 2026] [security2:error] [pid 3883269:tid 3883269] [client 8.218.159.175:17645] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvZAyQ0ynMuCvmShLIAAAAABU"]
[Thu Jul 30 16:36:04.399926 2026] [security2:error] [pid 3883269:tid 3883269] [client 8.218.159.175:17645] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvZAyQ0ynMuCvmShLIAAAAABU"]
[Thu Jul 30 16:36:04.400322 2026] [security2:error] [pid 3883269:tid 3883269] [client 8.218.159.175:17645] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvZAyQ0ynMuCvmShLIAAAAABU"]
[Thu Jul 30 16:36:04.599782 2026] [lsapi:warn] [pid 3885311:tid 3885311] [client 69.57.172.110:0] [host www.revoracing.org.uk] Backend log: PHP Deprecated:  Automatically populating $HTTP_RAW_POST_DATA is deprecated and will be removed in a future version. To avoid this warning set 'always_populate_raw_post_data' to '-1' in php.ini and use the php://input stream instead. in Unknown on line 0\n
[Thu Jul 30 16:36:04.632737 2026] [core:error] [pid 3890617:tid 3890617] [client 172.213.232.128:20537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:36:04.632763 2026] [core:error] [pid 3890617:tid 3890617] [client 172.213.232.128:20537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:36:05.102912 2026] [ssl:error] [pid 3874393:tid 3874393] (70014)End of file found: [client 216.73.216.199:53239] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:05.695921 2026] [ssl:error] [pid 3884246:tid 3884246] (70014)End of file found: [client 216.73.216.199:6840] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:05.696015 2026] [ssl:error] [pid 3885312:tid 3885312] (EAI 2)Name or service not known: [client 144.76.19.72:56566] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:05.696039 2026] [ssl:error] [pid 3885312:tid 3885312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:05.752024 2026] [ssl:error] [pid 3892850:tid 3892850] (EAI 2)Name or service not known: [client 144.76.19.72:56580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:05.752079 2026] [ssl:error] [pid 3892850:tid 3892850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:06.909364 2026] [ssl:error] [pid 3882743:tid 3882743] (70014)End of file found: [client 216.73.216.199:36144] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:07.551631 2026] [security2:error] [pid 3890422:tid 3890422] [client 85.208.96.197:16316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/JoYfzeM/brian-alexander-prince-height"] [unique_id "amtvZ2oYgaDhAYJTY_-EegAAAAU"]
[Thu Jul 30 16:36:07.569788 2026] [security2:error] [pid 3892850:tid 3892850] [client 191.111.32.92:40938] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvZzd0xP-6crW0UVQJwQAAAAQ"]
[Thu Jul 30 16:36:07.569846 2026] [security2:error] [pid 3892850:tid 3892850] [client 191.111.32.92:40938] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvZzd0xP-6crW0UVQJwQAAAAQ"]
[Thu Jul 30 16:36:07.570102 2026] [security2:error] [pid 3892850:tid 3892850] [client 191.111.32.92:40938] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvZzd0xP-6crW0UVQJwQAAAAQ"]
[Thu Jul 30 16:36:08.805838 2026] [ssl:error] [pid 3886833:tid 3886833] (EAI 2)Name or service not known: [client 144.76.19.72:56592] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:08.805868 2026] [ssl:error] [pid 3886833:tid 3886833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:08.866760 2026] [ssl:error] [pid 3885240:tid 3885240] (EAI 2)Name or service not known: [client 144.76.19.72:56606] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:08.866782 2026] [ssl:error] [pid 3885240:tid 3885240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:11.921868 2026] [ssl:error] [pid 3887868:tid 3887868] (EAI 2)Name or service not known: [client 144.76.19.72:32172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:11.921899 2026] [ssl:error] [pid 3887868:tid 3887868] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:11.979414 2026] [ssl:error] [pid 3885240:tid 3885240] (EAI 2)Name or service not known: [client 144.76.19.72:32174] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:11.979440 2026] [ssl:error] [pid 3885240:tid 3885240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:12.009207 2026] [security2:error] [pid 3887997:tid 3887997] [client 196.130.96.48:59980] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvbJuq-D3V9FDSh3shAQAAACQ"]
[Thu Jul 30 16:36:12.009256 2026] [security2:error] [pid 3887997:tid 3887997] [client 196.130.96.48:59980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvbJuq-D3V9FDSh3shAQAAACQ"]
[Thu Jul 30 16:36:12.009532 2026] [security2:error] [pid 3887997:tid 3887997] [client 196.130.96.48:59980] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvbJuq-D3V9FDSh3shAQAAACQ"]
[Thu Jul 30 16:36:12.828864 2026] [ssl:error] [pid 3893932:tid 3893932] (70014)End of file found: [client 216.73.216.199:28282] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:13.319710 2026] [ssl:error] [pid 3870337:tid 3870337] (70014)End of file found: [client 216.73.216.199:24578] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:15.036016 2026] [ssl:error] [pid 3894315:tid 3894315] (EAI 2)Name or service not known: [client 144.76.19.72:32186] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:15.036056 2026] [ssl:error] [pid 3894315:tid 3894315] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:15.089410 2026] [ssl:error] [pid 3890678:tid 3890678] (EAI 2)Name or service not known: [client 144.76.19.72:32198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:15.089452 2026] [ssl:error] [pid 3890678:tid 3890678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:16.469447 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-bazvsbkx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-bazvsbkx/' is executable
[Thu Jul 30 16:36:16.473482 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-l7GwpI/' is executable
[Thu Jul 30 16:36:16.475261 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-vuk0cupl/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-vuk0cupl/' is executable
[Thu Jul 30 16:36:16.485350 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-zfuqapa9/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-zfuqapa9/' is executable
[Thu Jul 30 16:36:16.485396 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-9OSowX/' is executable
[Thu Jul 30 16:36:16.488570 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/3665371._USR_LOCAL_CPANEL_SCRIPTS_UPDATENOW__.tmp.dc0294fc/' is executable
[Thu Jul 30 16:36:16.493838 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-m25d8tn_/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-m25d8tn_/' is executable
[Thu Jul 30 16:36:16.498208 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-ptb93rze/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-ptb93rze/' is executable
[Thu Jul 30 16:36:16.498597 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-vs_5h8vw/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-vs_5h8vw/' is executable
[Thu Jul 30 16:36:16.500272 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-urki9vq5/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-urki9vq5/' is executable
[Thu Jul 30 16:36:16.502475 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-yOxNt3/' is executable
[Thu Jul 30 16:36:16.506641 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pm45e04g/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pm45e04g/' is executable
[Thu Jul 30 16:36:16.509674 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-o2wyv0oj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-o2wyv0oj/' is executable
[Thu Jul 30 16:36:16.512289 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-ilysblsz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-ilysblsz/' is executable
[Thu Jul 30 16:36:16.512583 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-chronyd.service-7fqeLm/' is executable
[Thu Jul 30 16:36:16.519613 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-bhe4auzv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-bhe4auzv/' is executable
[Thu Jul 30 16:36:16.523003 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-t0mgg3cv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-t0mgg3cv/' is executable
[Thu Jul 30 16:36:16.527846 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-6b4g6ain/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-6b4g6ain/' is executable
[Thu Jul 30 16:36:16.529230 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-xwbnb_cj/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-xwbnb_cj/' is executable
[Thu Jul 30 16:36:16.530421 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pzyber_l/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pzyber_l/' is executable
[Thu Jul 30 16:36:16.530695 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-utbgbvka/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-utbgbvka/' is executable
[Thu Jul 30 16:36:16.531537 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pckpp7iz/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pckpp7iz/' is executable
[Thu Jul 30 16:36:16.531867 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-q_4s1dmg/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-q_4s1dmg/' is executable
[Thu Jul 30 16:36:16.534494 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-umw8Vp/' is executable
[Thu Jul 30 16:36:16.535849 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-fb6u1ntx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-fb6u1ntx/' is executable
[Thu Jul 30 16:36:16.537163 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-bpwqiojf/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-bpwqiojf/' is executable
[Thu Jul 30 16:36:16.538021 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-q2t2tbi3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-q2t2tbi3/' is executable
[Thu Jul 30 16:36:16.539600 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-ubj5lzzh/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-ubj5lzzh/' is executable
[Thu Jul 30 16:36:16.540840 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pkan3sjx/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-pkan3sjx/' is executable
[Thu Jul 30 16:36:16.541332 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-rysxxx39/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-rysxxx39/' is executable
[Thu Jul 30 16:36:16.543466 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-2u0lmmbu/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-2u0lmmbu/' is executable
[Thu Jul 30 16:36:16.543648 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-5a2k1oi2/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-5a2k1oi2/' is executable
[Thu Jul 30 16:36:16.543998 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-pdns.service-g6VnK6/' is executable
[Thu Jul 30 16:36:16.545609 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/lost+found/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/lost+found/' is executable
[Thu Jul 30 16:36:16.546953 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-rzzc6i3o/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-rzzc6i3o/' is executable
[Thu Jul 30 16:36:16.547299 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-h1jwcnlk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-h1jwcnlk/' is executable
[Thu Jul 30 16:36:16.549968 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-_6d7rllb/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-_6d7rllb/' is executable
[Thu Jul 30 16:36:16.551471 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-2wv4v5mp/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-2wv4v5mp/' is executable
[Thu Jul 30 16:36:16.551670 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-wkkpuur3/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-wkkpuur3/' is executable
[Thu Jul 30 16:36:16.555722 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-rjd_9s_e/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-rjd_9s_e/' is executable
[Thu Jul 30 16:36:16.565716 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-sj45mp0p/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/pymp-sj45mp0p/' is executable
[Thu Jul 30 16:36:16.566775 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-alt-php72-fpm.service-FaTN45/' is executable
[Thu Jul 30 16:36:16.567847 2026] [core:crit] [pid 3894285:tid 3894285] (13)Permission denied: [client 216.73.216.199:41126] AH00529: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/self/root/tmp/systemd-private-7cbf37858d1247b0a482c0e1dbbfe50a-ssa-agent.service-4zJhtv/' is executable
[Thu Jul 30 16:36:18.144304 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:32214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:18.144331 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:18.197529 2026] [ssl:error] [pid 3885312:tid 3885312] (EAI 2)Name or service not known: [client 144.76.19.72:32216] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:18.197559 2026] [ssl:error] [pid 3885312:tid 3885312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:18.570576 2026] [ssl:error] [pid 3894285:tid 3894285] (70014)End of file found: [client 216.73.216.199:41126] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:19.489693 2026] [ssl:error] [pid 3890619:tid 3890619] (70014)End of file found: [client 216.73.216.199:14036] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:21.251752 2026] [ssl:error] [pid 3890616:tid 3890616] (EAI 2)Name or service not known: [client 144.76.19.72:19996] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:21.251797 2026] [ssl:error] [pid 3890616:tid 3890616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:21.309246 2026] [ssl:error] [pid 3892065:tid 3892065] (EAI 2)Name or service not known: [client 144.76.19.72:20002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:21.309284 2026] [ssl:error] [pid 3892065:tid 3892065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:21.634747 2026] [core:error] [pid 3883223:tid 3883223] (13)Permission denied: [client 216.73.216.199:58845] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/pid/min_partial
[Thu Jul 30 16:36:22.248679 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:58845] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:23.992043 2026] [ssl:error] [pid 3883338:tid 3883338] (70014)End of file found: [client 216.73.216.199:26416] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:24.364272 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:20004] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:24.364314 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:24.417307 2026] [ssl:error] [pid 3890616:tid 3890616] (EAI 2)Name or service not known: [client 144.76.19.72:20014] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:24.417341 2026] [ssl:error] [pid 3890616:tid 3890616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:25.327935 2026] [core:error] [pid 3890616:tid 3890616] (13)Permission denied: [client 216.73.216.199:32125] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/kmalloc-rcl-32/total_objects
[Thu Jul 30 16:36:25.941832 2026] [ssl:error] [pid 3890616:tid 3890616] (70014)End of file found: [client 216.73.216.199:32125] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:27.469496 2026] [ssl:error] [pid 3895965:tid 3895965] (EAI 2)Name or service not known: [client 144.76.19.72:20018] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:27.469532 2026] [ssl:error] [pid 3895965:tid 3895965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:27.522686 2026] [ssl:error] [pid 3887765:tid 3887765] (EAI 2)Name or service not known: [client 144.76.19.72:20026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:27.522724 2026] [ssl:error] [pid 3887765:tid 3887765] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:28.057844 2026] [ssl:error] [pid 3885240:tid 3885240] (70014)End of file found: [client 216.73.216.199:37950] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:29.466265 2026] [core:error] [pid 3892850:tid 3892850] (13)Permission denied: [client 216.73.216.199:17234] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/ctor
[Thu Jul 30 16:36:30.048248 2026] [authz_core:error] [pid 3886833:tid 3886833] [client 20.104.16.169:31191] AH01630: client denied by server configuration: /home/buttere/staffordshirephoenixrifleandpistolclub.co.uk/wp-includes/rest-api/error_log
[Thu Jul 30 16:36:30.472011 2026] [ssl:error] [pid 3892850:tid 3892850] (70014)End of file found: [client 216.73.216.199:17234] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:30.624531 2026] [ssl:error] [pid 3890675:tid 3890675] (EAI 2)Name or service not known: [client 144.76.19.72:65456] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:30.624580 2026] [ssl:error] [pid 3890675:tid 3890675] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:30.681602 2026] [ssl:error] [pid 3888245:tid 3888245] (EAI 2)Name or service not known: [client 144.76.19.72:65464] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:30.681637 2026] [ssl:error] [pid 3888245:tid 3888245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:31.992560 2026] [core:error] [pid 3896051:tid 3896051] (13)Permission denied: [client 216.73.216.199:63468] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/gather_update_logs_setupcrontab
[Thu Jul 30 16:36:32.889539 2026] [ssl:error] [pid 3896051:tid 3896051] (70014)End of file found: [client 216.73.216.199:63468] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:33.737170 2026] [ssl:error] [pid 3895965:tid 3895965] (EAI 2)Name or service not known: [client 144.76.19.72:65480] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:33.737200 2026] [ssl:error] [pid 3895965:tid 3895965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:33.798468 2026] [ssl:error] [pid 3878989:tid 3878989] (EAI 2)Name or service not known: [client 144.76.19.72:65486] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:33.798495 2026] [ssl:error] [pid 3878989:tid 3878989] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:35.161554 2026] [access_compat:error] [pid 3896011:tid 3896011] [client 45.158.164.139:45504] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:36:36.396727 2026] [ssl:error] [pid 3896011:tid 3896011] (70014)End of file found: [client 216.73.216.199:43498] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:36.804644 2026] [ssl:error] [pid 3870305:tid 3870305] (70014)End of file found: [client 216.73.216.199:30502] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:36.853703 2026] [ssl:error] [pid 3890619:tid 3890619] (EAI 2)Name or service not known: [client 144.76.19.72:65494] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:36.853737 2026] [ssl:error] [pid 3890619:tid 3890619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:36.907989 2026] [ssl:error] [pid 3890678:tid 3890678] (EAI 2)Name or service not known: [client 144.76.19.72:65500] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:36.908023 2026] [ssl:error] [pid 3890678:tid 3890678] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:38.211911 2026] [ssl:error] [pid 3883338:tid 3883338] (70014)End of file found: [client 216.73.216.199:34862] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:38.393953 2026] [authz_core:error] [pid 3896051:tid 3896051] [client 66.249.66.33:57752] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:36:38.396625 2026] [authz_core:error] [pid 3896051:tid 3896051] [client 66.249.66.33:57752] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:36:39.966786 2026] [ssl:error] [pid 3890617:tid 3890617] (EAI 2)Name or service not known: [client 144.76.19.72:49168] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:39.966816 2026] [ssl:error] [pid 3890617:tid 3890617] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:40.021138 2026] [ssl:error] [pid 3893961:tid 3893961] (EAI 2)Name or service not known: [client 144.76.19.72:49170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:40.021182 2026] [ssl:error] [pid 3893961:tid 3893961] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:42.232221 2026] [ssl:error] [pid 3895228:tid 3895228] (70014)End of file found: [client 216.73.216.199:41719] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:42.539322 2026] [ssl:error] [pid 3895393:tid 3895393] (70014)End of file found: [client 216.73.216.199:50376] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:43.079170 2026] [ssl:error] [pid 3896051:tid 3896051] (EAI 2)Name or service not known: [client 144.76.19.72:49184] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:43.079203 2026] [ssl:error] [pid 3896051:tid 3896051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:43.135060 2026] [ssl:error] [pid 3874393:tid 3874393] (EAI 2)Name or service not known: [client 144.76.19.72:49198] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:43.135096 2026] [ssl:error] [pid 3874393:tid 3874393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:43.740456 2026] [ssl:error] [pid 3883338:tid 3883338] (70014)End of file found: [client 216.73.216.199:37081] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:44.513442 2026] [ssl:error] [pid 3883338:tid 3883338] (70014)End of file found: [client 216.73.216.199:3155] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:45.200944 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:18355] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:45.656265 2026] [authz_core:error] [pid 3896050:tid 3896050] [client 66.249.66.33:42634] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:36:45.659011 2026] [authz_core:error] [pid 3896050:tid 3896050] [client 66.249.66.33:42634] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:36:45.804494 2026] [ssl:error] [pid 3870338:tid 3870338] (70014)End of file found: [client 216.73.216.199:39591] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:46.191122 2026] [ssl:error] [pid 3883269:tid 3883269] (EAI 2)Name or service not known: [client 144.76.19.72:49212] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:46.191153 2026] [ssl:error] [pid 3883269:tid 3883269] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:46.252910 2026] [ssl:error] [pid 3896446:tid 3896446] (EAI 2)Name or service not known: [client 144.76.19.72:49226] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:46.252940 2026] [ssl:error] [pid 3896446:tid 3896446] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:46.713247 2026] [cgi:error] [pid 3893961:tid 3893961] [client 20.151.221.234:41563] AH02812: stderr from /home/epmsonli/public_html/cgi-bin/: attempt to invoke directory as script
[Thu Jul 30 16:36:48.380616 2026] [security2:error] [pid 3894315:tid 3894315] [client 170.106.163.84:58684] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "borovetsexpress.com"] [uri "/"] [unique_id "amtvkDEbteMn-xk5yCuw7gAAABE"]
[Thu Jul 30 16:36:49.345999 2026] [ssl:error] [pid 3896887:tid 3896887] (EAI 2)Name or service not known: [client 144.76.19.72:49242] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:49.346038 2026] [ssl:error] [pid 3896887:tid 3896887] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:49.586031 2026] [security2:error] [pid 3870337:tid 3870337] [client 170.106.163.84:40724] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.borovetsexpress.com"] [uri "/"] [unique_id "amtvkVBQPy6tbSPa4e56dAAAAEE"], referer: http://borovetsexpress.com
[Thu Jul 30 16:36:49.621226 2026] [ssl:error] [pid 3883338:tid 3883338] (EAI 2)Name or service not known: [client 144.76.19.72:49248] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:49.621252 2026] [ssl:error] [pid 3883338:tid 3883338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:50.289742 2026] [ssl:error] [pid 3892850:tid 3892850] (70014)End of file found: [client 216.73.216.199:52378] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:50.607046 2026] [cgi:error] [pid 3874393:tid 3874393] [client 199.45.155.93:60548] AH02812: stderr from /home/innersp/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://innerspacer.co.uk:443/cgi-bin
[Thu Jul 30 16:36:51.718505 2026] [security2:error] [pid 3885240:tid 3885240] [client 114.119.142.84:24101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "innerspacer.co.uk"] [uri "/robots.txt"] [unique_id "amtvk6hkOQuToM5xA0cErwAAACg"], referer: https://innerspacer.co.uk/robots.txt
[Thu Jul 30 16:36:52.686277 2026] [ssl:error] [pid 3885240:tid 3885240] (EAI 2)Name or service not known: [client 144.76.19.72:35202] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:52.686323 2026] [ssl:error] [pid 3885240:tid 3885240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:52.742513 2026] [ssl:error] [pid 3888245:tid 3888245] (EAI 2)Name or service not known: [client 144.76.19.72:35214] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:52.742546 2026] [ssl:error] [pid 3888245:tid 3888245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:52.975259 2026] [security2:error] [pid 3896052:tid 3896052] [client 45.148.10.120:40834] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ditchfest.com"] [uri "/.env"] [unique_id "amtvlEvbr4Y2StZdqKU--wAAACI"]
[Thu Jul 30 16:36:52.975421 2026] [security2:error] [pid 3896052:tid 3896052] [client 45.148.10.120:40834] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ditchfest.com"] [uri "/.env"] [unique_id "amtvlEvbr4Y2StZdqKU--wAAACI"]
[Thu Jul 30 16:36:52.975613 2026] [security2:error] [pid 3896052:tid 3896052] [client 45.148.10.120:40834] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "ditchfest.com"] [uri "/.env"] [unique_id "amtvlEvbr4Y2StZdqKU--wAAACI"]
[Thu Jul 30 16:36:53.999409 2026] [ssl:error] [pid 3896052:tid 3896052] (70014)End of file found: [client 216.73.216.199:44181] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:55.811421 2026] [ssl:error] [pid 3895228:tid 3895228] (EAI 2)Name or service not known: [client 144.76.19.72:35230] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:55.811465 2026] [ssl:error] [pid 3895228:tid 3895228] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:55.867965 2026] [ssl:error] [pid 3890619:tid 3890619] (EAI 2)Name or service not known: [client 144.76.19.72:35236] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:55.867995 2026] [ssl:error] [pid 3890619:tid 3890619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:56.107603 2026] [ssl:error] [pid 3895965:tid 3895965] (70014)End of file found: [client 216.73.216.199:2722] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:57.074978 2026] [security2:error] [pid 3894315:tid 3894315] [client 43.157.62.101:39400] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.alphabuildingcontracts.co.uk"] [uri "/"] [unique_id "amtvmTEbteMn-xk5yCuw8gAAABE"]
[Thu Jul 30 16:36:58.921524 2026] [ssl:error] [pid 3885240:tid 3885240] (EAI 2)Name or service not known: [client 144.76.19.72:35250] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:58.921556 2026] [ssl:error] [pid 3885240:tid 3885240] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:58.979315 2026] [ssl:error] [pid 3896940:tid 3896940] (EAI 2)Name or service not known: [client 144.76.19.72:35254] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:36:58.979355 2026] [ssl:error] [pid 3896940:tid 3896940] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:36:59.117940 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:22102] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:36:59.630949 2026] [core:error] [pid 3885240:tid 3885240] (13)Permission denied: [client 216.73.216.199:31897] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/memory/memory45/node0/compact
[Thu Jul 30 16:36:59.868996 2026] [security2:error] [pid 3890620:tid 3890620] [client 114.119.157.183:65411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/event/kids-club/"] [unique_id "amtvm4H46BCKcQs4ZoQFrQAAAC8"], referer: http://www.erskinenazarene.co.uk/event/kids-club/?instance_id=38072
[Thu Jul 30 16:37:00.031140 2026] [core:error] [pid 3885240:tid 3885240] (1)Operation not permitted: [client 216.73.216.199:31897] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/proc/execdomains
[Thu Jul 30 16:37:00.634053 2026] [ssl:error] [pid 3885240:tid 3885240] (70014)End of file found: [client 216.73.216.199:31897] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:01.374565 2026] [security2:error] [pid 3892731:tid 3892731] [client 114.119.157.183:56995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/event/kids-club/"] [unique_id "amtvnYNRZvxVVZMfYQpB2AAAAAA"], referer: http://www.erskinenazarene.co.uk/event/kids-club/?instance_id=38072
[Thu Jul 30 16:37:01.441513 2026] [ssl:error] [pid 3890675:tid 3890675] (70014)End of file found: [client 216.73.216.199:23304] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:02.037287 2026] [ssl:error] [pid 3887997:tid 3887997] (EAI 2)Name or service not known: [client 144.76.19.72:57130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:02.037327 2026] [ssl:error] [pid 3887997:tid 3887997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:02.090333 2026] [ssl:error] [pid 3896657:tid 3896657] (EAI 2)Name or service not known: [client 144.76.19.72:57144] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:02.090367 2026] [ssl:error] [pid 3896657:tid 3896657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:02.263661 2026] [security2:error] [pid 3887868:tid 3887868] [client 186.116.168.60:35660] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvnpyKTjKNcahKmyFLKQAAACE"]
[Thu Jul 30 16:37:02.263710 2026] [security2:error] [pid 3887868:tid 3887868] [client 186.116.168.60:35660] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvnpyKTjKNcahKmyFLKQAAACE"]
[Thu Jul 30 16:37:02.263954 2026] [security2:error] [pid 3887868:tid 3887868] [client 186.116.168.60:35660] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvnpyKTjKNcahKmyFLKQAAACE"]
[Thu Jul 30 16:37:04.356436 2026] [security2:error] [pid 3892065:tid 3892065] [client 8.216.35.149:51929] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvoNv-Q9f0NEMkbybkBgAAAAg"]
[Thu Jul 30 16:37:04.356488 2026] [security2:error] [pid 3892065:tid 3892065] [client 8.216.35.149:51929] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvoNv-Q9f0NEMkbybkBgAAAAg"]
[Thu Jul 30 16:37:04.356720 2026] [security2:error] [pid 3892065:tid 3892065] [client 8.216.35.149:51929] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvoNv-Q9f0NEMkbybkBgAAAAg"]
[Thu Jul 30 16:37:04.462391 2026] [ssl:error] [pid 3896052:tid 3896052] (70014)End of file found: [client 216.73.216.199:35349] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:05.147493 2026] [ssl:error] [pid 3896050:tid 3896050] (EAI 2)Name or service not known: [client 144.76.19.72:57156] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:05.147528 2026] [ssl:error] [pid 3896050:tid 3896050] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:05.205132 2026] [ssl:error] [pid 3890619:tid 3890619] (EAI 2)Name or service not known: [client 144.76.19.72:57158] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:05.205162 2026] [ssl:error] [pid 3890619:tid 3890619] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:05.446714 2026] [security2:error] [pid 3887765:tid 3887765] [client 80.94.92.167:44978] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "i4el.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtvobfmqmBQc0HXt-icwQAAAB4"]
[Thu Jul 30 16:37:05.446862 2026] [security2:error] [pid 3887765:tid 3887765] [client 80.94.92.167:44978] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/wc.db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "i4el.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtvobfmqmBQc0HXt-icwQAAAB4"]
[Thu Jul 30 16:37:05.447037 2026] [security2:error] [pid 3887765:tid 3887765] [client 80.94.92.167:44978] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "i4el.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtvobfmqmBQc0HXt-icwQAAAB4"]
[Thu Jul 30 16:37:05.447251 2026] [security2:error] [pid 3887765:tid 3887765] [client 80.94.92.167:44978] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 10 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "i4el.co.uk"] [uri "/.svn/wc.db"] [unique_id "amtvobfmqmBQc0HXt-icwQAAAB4"]
[Thu Jul 30 16:37:05.954854 2026] [ssl:error] [pid 3896050:tid 3896050] (70014)End of file found: [client 216.73.216.199:56100] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:06.318477 2026] [security2:error] [pid 3884717:tid 3884717] [client 74.7.242.3:56498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "justaccessories.co.uk.ns-narvi.com"] [uri "/"] [unique_id "amtvojsKl3vGNjqjOO_ZrgAAABY"]
[Thu Jul 30 16:37:06.768435 2026] [security2:error] [pid 3890678:tid 3890678] [client 185.191.171.8:28144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,3906.0/prev_next,prev.html"] [unique_id "amtvompIOPI6DcLf-t0FLgAAADk"]
[Thu Jul 30 16:37:06.858553 2026] [ssl:error] [pid 3896011:tid 3896011] (70014)End of file found: [client 216.73.216.199:1757] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:07.980410 2026] [security2:error] [pid 3886833:tid 3886833] [client 185.191.171.18:62960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/dedham-police-officer-dies"] [unique_id "amtvo6pAjz-RtXWD-_XiigAAAAc"]
[Thu Jul 30 16:37:08.076632 2026] [security2:error] [pid 3896563:tid 3896563] [client 8.216.35.149:31605] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvpA1xGplDuVP1i7CvRwAAACU"]
[Thu Jul 30 16:37:08.076699 2026] [security2:error] [pid 3896563:tid 3896563] [client 8.216.35.149:31605] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtvpA1xGplDuVP1i7CvRwAAACU"]
[Thu Jul 30 16:37:08.076947 2026] [security2:error] [pid 3896563:tid 3896563] [client 8.216.35.149:31605] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtvpA1xGplDuVP1i7CvRwAAACU"]
[Thu Jul 30 16:37:08.258002 2026] [ssl:error] [pid 3890616:tid 3890616] (EAI 2)Name or service not known: [client 144.76.19.72:57170] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:08.258030 2026] [ssl:error] [pid 3890616:tid 3890616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:08.312005 2026] [ssl:error] [pid 3891723:tid 3891723] (EAI 2)Name or service not known: [client 144.76.19.72:57172] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:08.312044 2026] [ssl:error] [pid 3891723:tid 3891723] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:10.283031 2026] [ssl:error] [pid 3878989:tid 3878989] (70014)End of file found: [client 216.73.216.199:34199] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:11.366605 2026] [ssl:error] [pid 3892850:tid 3892850] (EAI 2)Name or service not known: [client 144.76.19.72:53508] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:11.366643 2026] [ssl:error] [pid 3892850:tid 3892850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:11.422998 2026] [ssl:error] [pid 3857654:tid 3857654] (EAI 2)Name or service not known: [client 144.76.19.72:53514] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:11.423030 2026] [ssl:error] [pid 3857654:tid 3857654] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:12.702613 2026] [ssl:error] [pid 3893932:tid 3893932] (70014)End of file found: [client 216.73.216.199:45503] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:12.958814 2026] [security2:error] [pid 3857654:tid 3857654] [client 114.119.141.133:62947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "ftp.prosperon.co.uk"] [uri "/robots.txt"] [unique_id "amtvqAPeX1esuFuckongJgAAAAE"], referer: https://ftp.prosperon.co.uk/robots.txt
[Thu Jul 30 16:37:13.488753 2026] [security2:error] [pid 3894285:tid 3894285] [client 114.119.155.78:46103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dennor.eu"] [uri "/robots.txt"] [unique_id "amtvqQUTR9SHL4nLOW_HaQAAAA0"], referer: https://dennor.eu/robots.txt
[Thu Jul 30 16:37:14.479093 2026] [ssl:error] [pid 3895393:tid 3895393] (EAI 2)Name or service not known: [client 144.76.19.72:53528] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:14.479136 2026] [ssl:error] [pid 3895393:tid 3895393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:14.535592 2026] [ssl:error] [pid 3894316:tid 3894316] (EAI 2)Name or service not known: [client 144.76.19.72:53538] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:14.535624 2026] [ssl:error] [pid 3894316:tid 3894316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:16.688373 2026] [security2:error] [pid 3896011:tid 3896011] [client 216.73.216.199:56153] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/cryptsetup.conf"] [unique_id "amtvrDY4t9fJT_5hQsn8MQAAABo"]
[Thu Jul 30 16:37:16.688667 2026] [security2:error] [pid 3896011:tid 3896011] [client 216.73.216.199:56153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/cryptsetup.conf"] [unique_id "amtvrDY4t9fJT_5hQsn8MQAAABo"]
[Thu Jul 30 16:37:16.688882 2026] [security2:error] [pid 3896011:tid 3896011] [client 216.73.216.199:56153] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/thread-self/root/lib/tmpfiles.d/cryptsetup.conf"] [unique_id "amtvrDY4t9fJT_5hQsn8MQAAABo"]
[Thu Jul 30 16:37:17.373369 2026] [ssl:error] [pid 3896011:tid 3896011] (70014)End of file found: [client 216.73.216.199:56153] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:17.403845 2026] [authz_core:error] [pid 3896941:tid 3896941] [client 66.249.66.34:44327] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:37:17.406607 2026] [authz_core:error] [pid 3896941:tid 3896941] [client 66.249.66.34:44327] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:37:17.590720 2026] [ssl:error] [pid 3894316:tid 3894316] (EAI 2)Name or service not known: [client 144.76.19.72:53542] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:17.590765 2026] [ssl:error] [pid 3894316:tid 3894316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:17.643771 2026] [ssl:error] [pid 3896052:tid 3896052] (EAI 2)Name or service not known: [client 144.76.19.72:53558] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:17.643808 2026] [ssl:error] [pid 3896052:tid 3896052] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:19.138359 2026] [ssl:error] [pid 3890616:tid 3890616] (70014)End of file found: [client 216.73.216.199:8916] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:20.702689 2026] [ssl:error] [pid 3892850:tid 3892850] (EAI 2)Name or service not known: [client 144.76.19.72:27318] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:20.702719 2026] [ssl:error] [pid 3892850:tid 3892850] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:20.756534 2026] [ssl:error] [pid 3870338:tid 3870338] (EAI 2)Name or service not known: [client 144.76.19.72:27324] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:20.756567 2026] [ssl:error] [pid 3870338:tid 3870338] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:22.020150 2026] [core:error] [pid 3885313:tid 3885313] (13)Permission denied: [client 216.73.216.199:51878] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory188/node0/compact
[Thu Jul 30 16:37:22.620148 2026] [ssl:error] [pid 3896563:tid 3896563] (70014)End of file found: [client 216.73.216.199:54212] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:23.809570 2026] [ssl:error] [pid 3890571:tid 3890571] (EAI 2)Name or service not known: [client 144.76.19.72:27338] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:23.809600 2026] [ssl:error] [pid 3890571:tid 3890571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:23.860997 2026] [ssl:error] [pid 3896657:tid 3896657] (EAI 2)Name or service not known: [client 144.76.19.72:27348] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:23.861030 2026] [ssl:error] [pid 3896657:tid 3896657] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:24.432764 2026] [ssl:error] [pid 3885311:tid 3885311] (70014)End of file found: [client 216.73.216.199:23106] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:24.736111 2026] [ssl:error] [pid 3885313:tid 3885313] (70014)End of file found: [client 216.73.216.199:51878] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:26.918695 2026] [ssl:error] [pid 3886833:tid 3886833] (EAI 2)Name or service not known: [client 144.76.19.72:27350] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:26.918723 2026] [ssl:error] [pid 3886833:tid 3886833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:26.970390 2026] [ssl:error] [pid 3895393:tid 3895393] (EAI 2)Name or service not known: [client 144.76.19.72:27366] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:26.970418 2026] [ssl:error] [pid 3895393:tid 3895393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:28.350810 2026] [ssl:error] [pid 3896563:tid 3896563] (70014)End of file found: [client 216.73.216.199:23121] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:30.063961 2026] [ssl:error] [pid 3898437:tid 3898437] (EAI 2)Name or service not known: [client 144.76.19.72:60414] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:30.064001 2026] [ssl:error] [pid 3898437:tid 3898437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:30.123524 2026] [ssl:error] [pid 3885311:tid 3885311] (EAI 2)Name or service not known: [client 144.76.19.72:60418] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:30.123566 2026] [ssl:error] [pid 3885311:tid 3885311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:30.169140 2026] [ssl:error] [pid 3898439:tid 3898439] (70014)End of file found: [client 216.73.216.199:58567] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:30.770879 2026] [security2:error] [pid 3892065:tid 3892065] [client 216.73.216.199:8701] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/psa/php_versions.d/alt-php72-cgi.conf"] [unique_id "amtvutv-Q9f0NEMkbybkFwAAAAg"]
[Thu Jul 30 16:37:30.771130 2026] [security2:error] [pid 3892065:tid 3892065] [client 216.73.216.199:8701] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/psa/php_versions.d/alt-php72-cgi.conf"] [unique_id "amtvutv-Q9f0NEMkbybkFwAAAAg"]
[Thu Jul 30 16:37:30.771333 2026] [security2:error] [pid 3892065:tid 3892065] [client 216.73.216.199:8701] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/proc/self/root/etc/psa/php_versions.d/alt-php72-cgi.conf"] [unique_id "amtvutv-Q9f0NEMkbybkFwAAAAg"]
[Thu Jul 30 16:37:30.863424 2026] [authz_core:error] [pid 3890616:tid 3890616] [client 65.109.124.116:20727] AH01630: client denied by server configuration: /home/winterb/public_html/vtigercrm/error_log
[Thu Jul 30 16:37:31.072861 2026] [core:error] [pid 3892065:tid 3892065] (13)Permission denied: [client 216.73.216.199:8701] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/sighand_cache/hwcache_align
[Thu Jul 30 16:37:31.674831 2026] [ssl:error] [pid 3892065:tid 3892065] (70014)End of file found: [client 216.73.216.199:8701] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:33.180529 2026] [ssl:error] [pid 3898385:tid 3898385] (EAI 2)Name or service not known: [client 144.76.19.72:60430] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:33.180564 2026] [ssl:error] [pid 3898385:tid 3898385] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:33.235267 2026] [ssl:error] [pid 3896051:tid 3896051] (EAI 2)Name or service not known: [client 144.76.19.72:60438] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:33.235309 2026] [ssl:error] [pid 3896051:tid 3896051] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:33.616984 2026] [core:error] [pid 3898385:tid 3898385] (13)Permission denied: [client 216.73.216.199:46830] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/button/uevent
[Thu Jul 30 16:37:33.912330 2026] [ssl:error] [pid 3896051:tid 3896051] (70014)End of file found: [client 216.73.216.199:55773] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:36.330426 2026] [ssl:error] [pid 3885312:tid 3885312] (EAI 2)Name or service not known: [client 144.76.19.72:60450] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:36.330458 2026] [ssl:error] [pid 3885312:tid 3885312] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:36.388520 2026] [ssl:error] [pid 3893962:tid 3893962] (EAI 2)Name or service not known: [client 144.76.19.72:60462] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:36.388550 2026] [ssl:error] [pid 3893962:tid 3893962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:37.244137 2026] [core:error] [pid 3898853:tid 3898853] (13)Permission denied: [client 216.73.216.199:16611] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/cwd/scripts/initialize_360monitoring
[Thu Jul 30 16:37:38.767659 2026] [ssl:error] [pid 3898853:tid 3898853] (70014)End of file found: [client 216.73.216.199:16611] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:39.441955 2026] [ssl:error] [pid 3898080:tid 3898080] (EAI 2)Name or service not known: [client 144.76.19.72:60476] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:39.441988 2026] [ssl:error] [pid 3898080:tid 3898080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:39.496725 2026] [ssl:error] [pid 3898854:tid 3898854] (EAI 2)Name or service not known: [client 144.76.19.72:60478] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:39.496759 2026] [ssl:error] [pid 3898854:tid 3898854] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:39.973640 2026] [ssl:error] [pid 3894316:tid 3894316] (70014)End of file found: [client 216.73.216.199:46556] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:41.188341 2026] [ssl:error] [pid 3898385:tid 3898385] (70014)End of file found: [client 216.73.216.199:46830] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:41.649126 2026] [security2:error] [pid 3898147:tid 3898147] [client 119.91.20.139:39970] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "annasmithagent.com"] [uri "/"] [unique_id "amtvxatFM9xlFCfYF6f6XwAAAAU"]
[Thu Jul 30 16:37:42.554894 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:30106] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:42.554945 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:42.609286 2026] [ssl:error] [pid 3898080:tid 3898080] (EAI 2)Name or service not known: [client 144.76.19.72:30110] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:42.609329 2026] [ssl:error] [pid 3898080:tid 3898080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:44.096416 2026] [ssl:error] [pid 3895965:tid 3895965] (70014)End of file found: [client 216.73.216.199:5688] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:45.665776 2026] [ssl:error] [pid 3894316:tid 3894316] (EAI 2)Name or service not known: [client 144.76.19.72:30116] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:45.665811 2026] [ssl:error] [pid 3894316:tid 3894316] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:45.692966 2026] [ssl:error] [pid 3885311:tid 3885311] (70014)End of file found: [client 216.73.216.199:6129] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:45.718884 2026] [ssl:error] [pid 3870305:tid 3870305] (EAI 2)Name or service not known: [client 144.76.19.72:30122] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:45.718923 2026] [ssl:error] [pid 3870305:tid 3870305] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:45.772553 2026] [access_compat:error] [pid 3894285:tid 3894285] [client 45.158.164.139:47992] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:37:48.191348 2026] [core:error] [pid 3893692:tid 3893692] [client 197.248.130.247:53676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:37:48.191375 2026] [core:error] [pid 3893692:tid 3893692] [client 197.248.130.247:53676] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:37:48.772130 2026] [ssl:error] [pid 3899686:tid 3899686] (EAI 2)Name or service not known: [client 144.76.19.72:30130] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:48.772159 2026] [ssl:error] [pid 3899686:tid 3899686] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:48.826562 2026] [ssl:error] [pid 3870337:tid 3870337] (EAI 2)Name or service not known: [client 144.76.19.72:30138] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:48.826598 2026] [ssl:error] [pid 3870337:tid 3870337] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:49.572767 2026] [security2:error] [pid 3898854:tid 3898854] [client 43.165.198.5:36256] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "amtvzWfzYzwauCdyAksONQAAADI"]
[Thu Jul 30 16:37:50.222992 2026] [ssl:error] [pid 3870338:tid 3870338] (70014)End of file found: [client 216.73.216.199:38914] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:51.393817 2026] [security2:error] [pid 3857654:tid 3857654] [client 43.165.198.5:44044] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ditchfest.com"] [uri "/"] [unique_id "amtvzwPeX1esuFuckongkAAAAAE"], referer: http://www.ditchfest.com
[Thu Jul 30 16:37:51.880821 2026] [ssl:error] [pid 3898438:tid 3898438] (EAI 2)Name or service not known: [client 144.76.19.72:60276] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:51.880852 2026] [ssl:error] [pid 3898438:tid 3898438] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:51.969199 2026] [ssl:error] [pid 3899754:tid 3899754] (EAI 2)Name or service not known: [client 144.76.19.72:60282] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:51.969226 2026] [ssl:error] [pid 3899754:tid 3899754] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:52.666993 2026] [security2:error] [pid 3890619:tid 3890619] [client 20.171.55.167:6563] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.well-known/pki-validation/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cleversprogs.hatch-works.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtv0LW9GxE5RWgJBYR5PQAAAC0"]
[Thu Jul 30 16:37:52.667232 2026] [security2:error] [pid 3890619:tid 3890619] [client 20.171.55.167:6563] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cleversprogs.hatch-works.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "amtv0LW9GxE5RWgJBYR5PQAAAC0"]
[Thu Jul 30 16:37:52.927146 2026] [security2:error] [pid 3890619:tid 3890619] [client 20.171.55.167:6563] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [tag "event-correlation"] [hostname "cleversprogs.hatch-works.com"] [uri "/index.php"] [unique_id "amtv0LW9GxE5RWgJBYR5PQAAAC0"]
[Thu Jul 30 16:37:52.934223 2026] [ssl:error] [pid 3899686:tid 3899686] (70014)End of file found: [client 216.73.216.199:17123] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:54.636876 2026] [core:error] [pid 3898438:tid 3898438] (13)Permission denied: [client 216.73.216.199:1842] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-8/alloc_calls
[Thu Jul 30 16:37:55.027199 2026] [ssl:error] [pid 3895965:tid 3895965] (70014)End of file found: [client 216.73.216.199:29486] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:37:55.027768 2026] [ssl:error] [pid 3898147:tid 3898147] (EAI 2)Name or service not known: [client 144.76.19.72:60290] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:55.027797 2026] [ssl:error] [pid 3898147:tid 3898147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:55.082433 2026] [ssl:error] [pid 3888245:tid 3888245] (EAI 2)Name or service not known: [client 144.76.19.72:60292] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:55.082458 2026] [ssl:error] [pid 3888245:tid 3888245] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:55.307210 2026] [security2:error] [pid 3894285:tid 3894285] [client 43.155.140.157:48432] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.jonathanmeyerart.com"] [uri "/"] [unique_id "amtv0wUTR9SHL4nLOW_HfwAAAA0"]
[Thu Jul 30 16:37:56.234854 2026] [core:error] [pid 3898438:tid 3898438] (13)Permission denied: [client 216.73.216.199:1842] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_tasks/hwcache_align
[Thu Jul 30 16:37:56.536119 2026] [core:error] [pid 3898438:tid 3898438] (13)Permission denied: [client 216.73.216.199:1842] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/red_zone
[Thu Jul 30 16:37:58.040712 2026] [core:error] [pid 3898438:tid 3898438] (13)Permission denied: [client 216.73.216.199:1842] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/scsi_sense_cache/usersize
[Thu Jul 30 16:37:58.137500 2026] [ssl:error] [pid 3885311:tid 3885311] (EAI 2)Name or service not known: [client 144.76.19.72:60298] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:58.137523 2026] [ssl:error] [pid 3885311:tid 3885311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:58.191932 2026] [ssl:error] [pid 3890616:tid 3890616] (EAI 2)Name or service not known: [client 144.76.19.72:60304] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:37:58.191973 2026] [ssl:error] [pid 3890616:tid 3890616] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:37:58.343101 2026] [core:error] [pid 3898438:tid 3898438] (13)Permission denied: [client 216.73.216.199:1842] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/proc/thread-self/root/sys/module/ata_generic/uevent
[Thu Jul 30 16:37:58.943609 2026] [core:error] [pid 3898438:tid 3898438] (13)Permission denied: [client 216.73.216.199:1842] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/mm_struct/store_user
[Thu Jul 30 16:37:59.014547 2026] [security2:error] [pid 3896563:tid 3896563] [client 114.119.137.94:53887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "nigelmassey.com"] [uri "/robots.txt"] [unique_id "amtv1w1xGplDuVP1i7CvZAAAACU"], referer: http://nigelmassey.com/robots.txt
[Thu Jul 30 16:38:01.263719 2026] [ssl:error] [pid 3887997:tid 3887997] (EAI 2)Name or service not known: [client 144.76.19.72:25854] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:01.263754 2026] [ssl:error] [pid 3887997:tid 3887997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:01.319629 2026] [ssl:error] [pid 3895393:tid 3895393] (EAI 2)Name or service not known: [client 144.76.19.72:25868] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:01.319655 2026] [ssl:error] [pid 3895393:tid 3895393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:01.657234 2026] [ssl:error] [pid 3895965:tid 3895965] (70014)End of file found: [client 216.73.216.199:59995] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:02.260465 2026] [ssl:error] [pid 3900419:tid 3900419] (70014)End of file found: [client 216.73.216.199:25360] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:02.566524 2026] [ssl:error] [pid 3898438:tid 3898438] (70014)End of file found: [client 216.73.216.199:1842] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:04.409806 2026] [ssl:error] [pid 3900492:tid 3900492] (EAI 2)Name or service not known: [client 144.76.19.72:25890] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:04.409845 2026] [ssl:error] [pid 3900492:tid 3900492] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:04.462992 2026] [ssl:error] [pid 3895393:tid 3895393] (EAI 2)Name or service not known: [client 144.76.19.72:25896] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:04.463016 2026] [ssl:error] [pid 3895393:tid 3895393] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:06.451500 2026] [security2:error] [pid 3890616:tid 3890616] [client 114.119.141.203:57661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "gatkabfs.com"] [uri "/robots.txt"] [unique_id "amtv3uXr6hEB9FOc0eWkkAAAACk"], referer: https://gatkabfs.com/robots.txt
[Thu Jul 30 16:38:06.451665 2026] [access_compat:error] [pid 3890616:tid 3890616] [client 114.119.141.203:57661] AH01797: client denied by server configuration: /home/pbyawsga/public_html/403.shtml, referer: https://gatkabfs.com/robots.txt
[Thu Jul 30 16:38:07.518932 2026] [ssl:error] [pid 3893692:tid 3893692] (EAI 2)Name or service not known: [client 144.76.19.72:25910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:07.518998 2026] [ssl:error] [pid 3893692:tid 3893692] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:07.575146 2026] [ssl:error] [pid 3896011:tid 3896011] (EAI 2)Name or service not known: [client 144.76.19.72:25914] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:07.575180 2026] [ssl:error] [pid 3896011:tid 3896011] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:08.486231 2026] [security2:error] [pid 3896011:tid 3896011] [client 85.208.96.210:42290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "dbstart.co.uk"] [uri "/8atoyy/shannon-unser"] [unique_id "amtv4DY4t9fJT_5hQsn8QAAAABo"]
[Thu Jul 30 16:38:08.730923 2026] [security2:error] [pid 3898853:tid 3898853] [client 196.207.231.94:5008] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtv4Ba4ZojLtRoB-8lAYQAAAC8"]
[Thu Jul 30 16:38:08.730973 2026] [security2:error] [pid 3898853:tid 3898853] [client 196.207.231.94:5008] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtv4Ba4ZojLtRoB-8lAYQAAAC8"]
[Thu Jul 30 16:38:08.731264 2026] [security2:error] [pid 3898853:tid 3898853] [client 196.207.231.94:5008] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtv4Ba4ZojLtRoB-8lAYQAAAC8"]
[Thu Jul 30 16:38:09.201794 2026] [ssl:error] [pid 3900350:tid 3900350] (70014)End of file found: [client 216.73.216.199:63937] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:09.806177 2026] [ssl:error] [pid 3890616:tid 3890616] (70014)End of file found: [client 216.73.216.199:28316] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:10.329033 2026] [security2:error] [pid 3885313:tid 3885313] [client 150.5.131.172:29027] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtv4mmjiRTActqlZWxcygAAADQ"]
[Thu Jul 30 16:38:10.329112 2026] [security2:error] [pid 3885313:tid 3885313] [client 150.5.131.172:29027] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtv4mmjiRTActqlZWxcygAAADQ"]
[Thu Jul 30 16:38:10.329429 2026] [security2:error] [pid 3885313:tid 3885313] [client 150.5.131.172:29027] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtv4mmjiRTActqlZWxcygAAADQ"]
[Thu Jul 30 16:38:10.629579 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:20994] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:10.629613 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:10.690400 2026] [ssl:error] [pid 3898148:tid 3898148] (EAI 2)Name or service not known: [client 144.76.19.72:21002] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:10.690450 2026] [ssl:error] [pid 3898148:tid 3898148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:10.708948 2026] [ssl:error] [pid 3900493:tid 3900493] (70014)End of file found: [client 216.73.216.199:20474] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:13.748239 2026] [ssl:error] [pid 3900419:tid 3900419] (EAI 2)Name or service not known: [client 144.76.19.72:21006] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:13.748300 2026] [ssl:error] [pid 3900419:tid 3900419] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:13.806578 2026] [ssl:error] [pid 3898147:tid 3898147] (EAI 2)Name or service not known: [client 144.76.19.72:21010] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:13.806605 2026] [ssl:error] [pid 3898147:tid 3898147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:13.910370 2026] [core:error] [pid 3898853:tid 3898853] [client 66.249.66.8:36720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:38:13.910393 2026] [core:error] [pid 3898853:tid 3898853] [client 66.249.66.8:36720] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:38:14.526395 2026] [ssl:error] [pid 3886833:tid 3886833] (70014)End of file found: [client 216.73.216.199:56432] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:15.114197 2026] [ssl:error] [pid 3898437:tid 3898437] (70014)End of file found: [client 216.73.216.199:16075] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:15.225128 2026] [security2:error] [pid 3898147:tid 3898147] [client 150.5.131.172:37057] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf"] [line "38"] [id "943120"] [rev "2"] [msg "Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "2"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-fixation"] [tag "OWASP_CRS/WEB_ATTACK/SESSION_FIXATION"] [tag "WASCTC/WASC-37"] [tag "CAPEC-61"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtv56tFM9xlFCfYF6f6ZgAAAAU"]
[Thu Jul 30 16:38:15.225173 2026] [security2:error] [pid 3898147:tid 3898147] [client 150.5.131.172:37057] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php"] [unique_id "amtv56tFM9xlFCfYF6f6ZgAAAAU"]
[Thu Jul 30 16:38:15.225442 2026] [security2:error] [pid 3898147:tid 3898147] [client 150.5.131.172:37057] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=5): Possible Session Fixation Attack: SessionID Parameter Name with No Referer"] [tag "event-correlation"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/403.shtml"] [unique_id "amtv56tFM9xlFCfYF6f6ZgAAAAU"]
[Thu Jul 30 16:38:16.907575 2026] [ssl:error] [pid 3879782:tid 3879782] (EAI 2)Name or service not known: [client 144.76.19.72:21022] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:16.907613 2026] [ssl:error] [pid 3879782:tid 3879782] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:16.963359 2026] [ssl:error] [pid 3900495:tid 3900495] (EAI 2)Name or service not known: [client 144.76.19.72:21026] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:16.963394 2026] [ssl:error] [pid 3900495:tid 3900495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:17.636874 2026] [ssl:error] [pid 3898435:tid 3898435] (70014)End of file found: [client 216.73.216.199:8026] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:19.487808 2026] [authz_core:error] [pid 3890571:tid 3890571] [client 20.104.16.169:28651] AH01630: client denied by server configuration: /home/mjsser/demo.mjs-services.com/wp-includes/rest-api/error_log
[Thu Jul 30 16:38:20.021481 2026] [ssl:error] [pid 3898080:tid 3898080] (EAI 2)Name or service not known: [client 144.76.19.72:25870] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:20.021515 2026] [ssl:error] [pid 3898080:tid 3898080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:20.079041 2026] [ssl:error] [pid 3900311:tid 3900311] (EAI 2)Name or service not known: [client 144.76.19.72:25872] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:20.079086 2026] [ssl:error] [pid 3900311:tid 3900311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:20.954608 2026] [ssl:error] [pid 3887997:tid 3887997] (70014)End of file found: [client 216.73.216.199:58071] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:21.857554 2026] [core:error] [pid 3893692:tid 3893692] (13)Permission denied: [client 216.73.216.199:14592] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-256/partial
[Thu Jul 30 16:38:22.320750 2026] [security2:error] [pid 3879782:tid 3879782] [client 43.133.60.94:33566] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.kingston1010.org.uk"] [uri "/"] [unique_id "amtv7p3nqnT2z1BP309CYAAAACs"]
[Thu Jul 30 16:38:23.137509 2026] [ssl:error] [pid 3900311:tid 3900311] (EAI 2)Name or service not known: [client 144.76.19.72:25874] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:23.137542 2026] [ssl:error] [pid 3900311:tid 3900311] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:23.190258 2026] [security2:error] [pid 3900491:tid 3900491] [client 114.119.142.20:52993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565478000/cat_ids~17,102,14/request_format~html"] [unique_id "amtv77pTm40LA1G1HAWiPQAAAEU"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1565478000/cat_ids~17,102/request_format~html
[Thu Jul 30 16:38:23.194272 2026] [ssl:error] [pid 3898080:tid 3898080] (EAI 2)Name or service not known: [client 144.76.19.72:25886] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:23.194306 2026] [ssl:error] [pid 3898080:tid 3898080] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:24.193736 2026] [authz_core:error] [pid 3899882:tid 3899882] [client 66.249.66.35:62364] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:38:24.196401 2026] [authz_core:error] [pid 3899882:tid 3899882] [client 66.249.66.35:62364] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:38:24.750183 2026] [ssl:error] [pid 3899686:tid 3899686] (70014)End of file found: [client 216.73.216.199:65092] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:24.818550 2026] [security2:error] [pid 3890616:tid 3890616] [client 114.119.142.20:53003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "PetalBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "erskinenazarene.co.uk"] [uri "/calendar/action~week/exact_date~1565478000/cat_ids~17,102,14/request_format~html"] [unique_id "amtv8OXr6hEB9FOc0eWklgAAACk"], referer: http://www.erskinenazarene.co.uk/calendar/action~week/exact_date~1565478000/cat_ids~17,102/request_format~html
[Thu Jul 30 16:38:24.870010 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/011i.php
[Thu Jul 30 16:38:25.417996 2026] [access_compat:error] [pid 3890619:tid 3890619] [client 45.158.164.139:57792] AH01797: client denied by server configuration: /home/thepryor/public_html/wp-cron.php
[Thu Jul 30 16:38:25.994612 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/03a005685d.php
[Thu Jul 30 16:38:26.246428 2026] [ssl:error] [pid 3887997:tid 3887997] (EAI 2)Name or service not known: [client 144.76.19.72:25898] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:26.246454 2026] [ssl:error] [pid 3887997:tid 3887997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:26.297842 2026] [ssl:error] [pid 3901998:tid 3901998] (EAI 2)Name or service not known: [client 144.76.19.72:25902] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:26.297877 2026] [ssl:error] [pid 3901998:tid 3901998] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:26.676319 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/403.php
[Thu Jul 30 16:38:26.877803 2026] [security2:error] [pid 3893692:tid 3893692] [client 216.73.216.199:14592] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xml.ini"] [unique_id "amtv8t7nkk_46yc5Ir3ezQAAAAY"]
[Thu Jul 30 16:38:26.878132 2026] [security2:error] [pid 3893692:tid 3893692] [client 216.73.216.199:14592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xml.ini"] [unique_id "amtv8t7nkk_46yc5Ir3ezQAAAAY"]
[Thu Jul 30 16:38:26.878346 2026] [security2:error] [pid 3893692:tid 3893692] [client 216.73.216.199:14592] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "37"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): URL file extension is restricted by policy"] [tag "event-correlation"] [hostname "kinesiologylondon.co.uk"] [uri "/wp-includes/js/swfupload/1/2/opt/cpanel/ea-php54/root/etc/php.d/xml.ini"] [unique_id "amtv8t7nkk_46yc5Ir3ezQAAAAY"]
[Thu Jul 30 16:38:27.310439 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/404.php
[Thu Jul 30 16:38:27.896594 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/aa.php
[Thu Jul 30 16:38:28.499642 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/aafewc0k.php
[Thu Jul 30 16:38:28.990645 2026] [core:error] [pid 3893692:tid 3893692] (13)Permission denied: [client 216.73.216.199:14592] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/jbd2_journal_handle/cpu_partial
[Thu Jul 30 16:38:29.084169 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/abcd.php
[Thu Jul 30 16:38:29.353096 2026] [ssl:error] [pid 3885314:tid 3885314] (EAI 2)Name or service not known: [client 144.76.19.72:25908] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:29.353130 2026] [ssl:error] [pid 3885314:tid 3885314] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:29.423046 2026] [ssl:error] [pid 3900495:tid 3900495] (EAI 2)Name or service not known: [client 144.76.19.72:25912] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:29.423117 2026] [ssl:error] [pid 3900495:tid 3900495] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:30.811054 2026] [ssl:error] [pid 3900489:tid 3900489] (70014)End of file found: [client 216.73.216.199:30137] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:30.936922 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/adminfuns.php
[Thu Jul 30 16:38:31.111879 2026] [ssl:error] [pid 3893692:tid 3893692] (70014)End of file found: [client 216.73.216.199:14592] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:31.647894 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/albin.php
[Thu Jul 30 16:38:32.317588 2026] [ssl:error] [pid 3857654:tid 3857654] (70014)End of file found: [client 216.73.216.199:11389] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:32.324378 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/amfsqvgv.php
[Thu Jul 30 16:38:32.478922 2026] [ssl:error] [pid 3898147:tid 3898147] (EAI 2)Name or service not known: [client 144.76.19.72:38878] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:32.478955 2026] [ssl:error] [pid 3898147:tid 3898147] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:32.531725 2026] [ssl:error] [pid 3893962:tid 3893962] (EAI 2)Name or service not known: [client 144.76.19.72:38884] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:32.531753 2026] [ssl:error] [pid 3893962:tid 3893962] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:32.942796 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/ant.php
[Thu Jul 30 16:38:33.574580 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/appreciators.php
[Thu Jul 30 16:38:34.214878 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/archive.php
[Thu Jul 30 16:38:34.749284 2026] [authz_core:error] [pid 3898080:tid 3898080] [client 104.152.52.206:55235] AH01630: client denied by server configuration: /home/erskinen/public_html/erskinefusion.com/error_log
[Thu Jul 30 16:38:34.800738 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/as.php
[Thu Jul 30 16:38:35.042491 2026] [core:error] [pid 3895965:tid 3895965] [client 104.152.52.206:56085] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:38:35.042516 2026] [core:error] [pid 3895965:tid 3895965] [client 104.152.52.206:56085] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:38:35.387955 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/atomlib.php
[Thu Jul 30 16:38:35.621536 2026] [ssl:error] [pid 3884987:tid 3884987] (EAI 2)Name or service not known: [client 144.76.19.72:38894] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:35.621614 2026] [ssl:error] [pid 3884987:tid 3884987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:35.680520 2026] [ssl:error] [pid 3883223:tid 3883223] (EAI 2)Name or service not known: [client 144.76.19.72:38910] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:35.680552 2026] [ssl:error] [pid 3883223:tid 3883223] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:35.997531 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/autoload_classmap.php
[Thu Jul 30 16:38:36.122022 2026] [core:error] [pid 3883223:tid 3883223] (13)Permission denied: [client 216.73.216.199:16419] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dmaengine-unmap-2/object_size
[Thu Jul 30 16:38:36.527821 2026] [ssl:error] [pid 3883223:tid 3883223] (70014)End of file found: [client 216.73.216.199:16419] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:36.630550 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/bb.php
[Thu Jul 30 16:38:37.041136 2026] [ssl:error] [pid 3898335:tid 3898335] (70014)End of file found: [client 216.73.216.199:49876] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:37.208803 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/bnm.php
[Thu Jul 30 16:38:37.541753 2026] [security2:error] [pid 3896887:tid 3896887] [client 185.191.171.8:55758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "SemrushBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "1000001"] [msg "Bad Bot Blocked"] [hostname "www.bigbangburgerbar.co.uk"] [uri "/Forum/index.php/topic,1164.0/prev_next,prev.html"] [unique_id "amtv_cnlpG2qChWVHdQswQAAACw"]
[Thu Jul 30 16:38:37.734743 2026] [ssl:error] [pid 3898148:tid 3898148] (70014)End of file found: [client 216.73.216.199:15183] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:37.815181 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/bootstrap.php
[Thu Jul 30 16:38:38.291618 2026] [authz_core:error] [pid 3900420:tid 3900420] [client 66.249.66.33:54785] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:38:38.294562 2026] [authz_core:error] [pid 3900420:tid 3900420] [client 66.249.66.33:54785] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:38:38.364731 2026] [core:error] [pid 3857654:tid 3857654] [client 104.152.52.122:55665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:38:38.364752 2026] [core:error] [pid 3857654:tid 3857654] [client 104.152.52.122:55665] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 30 16:38:38.733804 2026] [ssl:error] [pid 3902115:tid 3902115] (EAI 2)Name or service not known: [client 144.76.19.72:38918] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:38.733855 2026] [ssl:error] [pid 3902115:tid 3902115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:38.791021 2026] [ssl:error] [pid 3890571:tid 3890571] (EAI 2)Name or service not known: [client 144.76.19.72:38928] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:38.791091 2026] [ssl:error] [pid 3890571:tid 3890571] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:39.138588 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/chosen.php
[Thu Jul 30 16:38:39.654040 2026] [lsapi:warn] [pid 3896011:tid 3896011] [client 40.77.167.74:52972] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0\n
[Thu Jul 30 16:38:39.654093 2026] [lsapi:warn] [pid 3896011:tid 3896011] [client 40.77.167.74:52972] [host www.brodie-engineering.co.uk] Backend log: PHP Warning:  Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0\n
[Thu Jul 30 16:38:39.747722 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/class-wp-image.php
[Thu Jul 30 16:38:40.391610 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/classsmtps.php
[Thu Jul 30 16:38:41.028652 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/classwithtostring.php
[Thu Jul 30 16:38:41.639247 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/config.php
[Thu Jul 30 16:38:41.847434 2026] [ssl:error] [pid 3886833:tid 3886833] (EAI 2)Name or service not known: [client 144.76.19.72:21576] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:41.847465 2026] [ssl:error] [pid 3886833:tid 3886833] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:41.898781 2026] [ssl:error] [pid 3902115:tid 3902115] (EAI 2)Name or service not known: [client 144.76.19.72:21580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:41.898811 2026] [ssl:error] [pid 3902115:tid 3902115] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:42.259602 2026] [core:error] [pid 3884987:tid 3884987] (13)Permission denied: [client 216.73.216.199:60601] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/bus/memory/devices/memory117/node0/compact
[Thu Jul 30 16:38:42.277529 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/core.php
[Thu Jul 30 16:38:42.864541 2026] [ssl:error] [pid 3884987:tid 3884987] (70014)End of file found: [client 216.73.216.199:60601] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:42.900827 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/css.php
[Thu Jul 30 16:38:43.488765 2026] [core:error] [pid 3879782:tid 3879782] (13)Permission denied: [client 216.73.216.199:2507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/xfs_efd_item/objects
[Thu Jul 30 16:38:43.497484 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/database.php
[Thu Jul 30 16:38:44.061475 2026] [ssl:error] [pid 3899755:tid 3899755] (70014)End of file found: [client 216.73.216.199:21227] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:44.163385 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/db.php
[Thu Jul 30 16:38:44.791808 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/default.php
[Thu Jul 30 16:38:44.955575 2026] [ssl:error] [pid 3898148:tid 3898148] (EAI 2)Name or service not known: [client 144.76.19.72:21594] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:44.955600 2026] [ssl:error] [pid 3898148:tid 3898148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:45.010146 2026] [ssl:error] [pid 3887997:tid 3887997] (EAI 2)Name or service not known: [client 144.76.19.72:21610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:45.010188 2026] [ssl:error] [pid 3887997:tid 3887997] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:45.401799 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/dropdown.php
[Thu Jul 30 16:38:46.624586 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/f35.php
[Thu Jul 30 16:38:46.774497 2026] [core:error] [pid 3879782:tid 3879782] (13)Permission denied: [client 216.73.216.199:2507] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/dma-kmalloc-32/validate
[Thu Jul 30 16:38:47.224854 2026] [access_compat:error] [pid 3900311:tid 3900311] [client 172.213.232.128:50113] AH01797: client denied by server configuration: /home/thepryor/public_html/f7.php
[Thu Jul 30 16:38:47.679184 2026] [ssl:error] [pid 3879782:tid 3879782] (70014)End of file found: [client 216.73.216.199:2507] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:48.068567 2026] [ssl:error] [pid 3882743:tid 3882743] (EAI 2)Name or service not known: [client 144.76.19.72:21620] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:48.068600 2026] [ssl:error] [pid 3882743:tid 3882743] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:48.121530 2026] [ssl:error] [pid 3900418:tid 3900418] (EAI 2)Name or service not known: [client 144.76.19.72:21624] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:48.121571 2026] [ssl:error] [pid 3900418:tid 3900418] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:48.173053 2026] [ssl:error] [pid 3902114:tid 3902114] (70014)End of file found: [client 216.73.216.199:32232] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:48.173656 2026] [access_compat:error] [pid 3899686:tid 3899686] [client 45.158.164.139:36318] AH01797: client denied by server configuration: /home/candidejacobs/public_html/wp-cron.php
[Thu Jul 30 16:38:49.400590 2026] [core:error] [pid 3896941:tid 3896941] (13)Permission denied: [client 216.73.216.199:43311] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/rpc_tasks/alloc_calls
[Thu Jul 30 16:38:50.760160 2026] [security2:error] [pid 3885313:tid 3885313] [client 43.166.244.251:46602] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.tripodhome.co.uk"] [uri "/"] [unique_id "amtwCmmjiRTActqlZWxc1gAAADQ"]
[Thu Jul 30 16:38:51.178404 2026] [ssl:error] [pid 3898437:tid 3898437] (EAI 2)Name or service not known: [client 144.76.19.72:26574] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:51.178434 2026] [ssl:error] [pid 3898437:tid 3898437] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:51.232686 2026] [ssl:error] [pid 3898148:tid 3898148] (EAI 2)Name or service not known: [client 144.76.19.72:26580] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:51.232717 2026] [ssl:error] [pid 3898148:tid 3898148] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:51.302393 2026] [core:error] [pid 3896941:tid 3896941] (13)Permission denied: [client 216.73.216.199:43311] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/kernel/slab/fs_cache/slab_size
[Thu Jul 30 16:38:53.716522 2026] [ssl:error] [pid 3896941:tid 3896941] (70014)End of file found: [client 216.73.216.199:43311] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:54.289634 2026] [ssl:error] [pid 3895965:tid 3895965] (EAI 2)Name or service not known: [client 144.76.19.72:26584] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:54.289666 2026] [ssl:error] [pid 3895965:tid 3895965] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:54.384521 2026] [ssl:error] [pid 3892065:tid 3892065] (EAI 2)Name or service not known: [client 144.76.19.72:26596] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:54.384547 2026] [ssl:error] [pid 3892065:tid 3892065] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:54.478879 2026] [core:error] [pid 3887765:tid 3887765] (13)Permission denied: [client 216.73.216.199:22747] AH00132: file permissions deny server access: /home/healthki/public_html/wp-includes/js/swfupload/1/2/sys/devices/system/node/node0/memory223/subsystem/uevent
[Thu Jul 30 16:38:55.085185 2026] [ssl:error] [pid 3887765:tid 3887765] (70014)End of file found: [client 216.73.216.199:22747] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:55.611918 2026] [ssl:error] [pid 3896657:tid 3896657] (70014)End of file found: [client 216.73.216.199:45545] AH02013: coalesce failed to read from data bucket
[Thu Jul 30 16:38:56.530109 2026] [authz_core:error] [pid 3879782:tid 3879782] [client 66.249.66.33:64949] AH01630: client denied by server configuration: /home/healthki/public_html/error_log
[Thu Jul 30 16:38:56.532782 2026] [authz_core:error] [pid 3879782:tid 3879782] [client 66.249.66.33:64949] AH01630: client denied by server configuration: /home/healthki/public_html/php.ini
[Thu Jul 30 16:38:57.442941 2026] [ssl:error] [pid 3900493:tid 3900493] (EAI 2)Name or service not known: [client 144.76.19.72:26610] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:57.442977 2026] [ssl:error] [pid 3900493:tid 3900493] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:57.532967 2026] [ssl:error] [pid 3884987:tid 3884987] (EAI 2)Name or service not known: [client 144.76.19.72:26616] AH01972: could not resolve address of OCSP responder r10.o.lencr.org
[Thu Jul 30 16:38:57.533010 2026] [ssl:error] [pid 3884987:tid 3884987] AH01941: stapling_renew_response: responder error
[Thu Jul 30 16:38:58.607768 2026] [authz_core:error] [pid 3895965:tid 3895965] [client 216.73.216.82:54395] AH01630: client denied by server configuration: /home/sfi/public_html/error_log